Yes, although the subdomains still point to deviantart&#x27;s servers. The difference here is that ad.example.com ends up pointing to the attacker&#x27;s server.<p>Because LetsEncrypt needs a very specific response to be served from a specific endpoint, you need this kind of total control to validate a domain and get a certificate issued.