I’m planning on using Caddy to provide bring-your-own-domain handling for a project I’m working on. Your user points their domain to your caddy server and it sets up https automatically - including the certificate - during the first request

https://caddyserver.com/docs/automatic-https#on-demand

Obviously not what it’s limited to, but that’s it’s selling feature for me