Comment by 5e92cb50239222b

Certificates are created regardless of whether you ask for them by using features like proxying traffic through CF. Just using them as a DNS service provider is enough for certs to be issued (with "proxy=off" or no A/CNAME records at all, it doesn't matter).