Comment by jumpconc

Just DNS. If you take over DNS, you can get Let's Encrypt to issue any certificate you want.