No, if you don&#x27;t control the domain according to public view (global DNS) you rightfully can&#x27;t get certificates. Right now you also need to have a publicly reachable server behind it, but it&#x27;s planned to allow DNS-only verification soon.<p><a href="https:&#x2F;&#x2F;community.letsencrypt.org&#x2F;t&#x2F;on-the-state-of-the-dns-01-challenge&#x2F;4805" rel="nofollow">https:&#x2F;&#x2F;community.letsencrypt.org&#x2F;t&#x2F;on-the-state-of-the-dns-...</a>