[maxnoe]

Since my DNS provider(IONOS) has an API and there is a plugin for my Webserver (caddy), DNS certificates were completely painless, even for *.<my domain>.

The solutions exist, depensa on the providers and your client.