Yeah - there's many ssl vendors who've automated everything - so long as you can read email sent to [email protected], they'll sign a csr for that domain's ssl cert.