How does SSL work on Firebase App Hosting custom domains?

Firebase App Hosting: Automatically provisioned and renewed. Do not remove validation records while certificates are being issued or renewed.