If you use the DNS verification, you could run the client on your local machine and then upload the cert.

I started writing a small utility to do just that (and then upload the cert to CPanel using their API). It works, though I'm lazy to make it reliable enough for release.