DynDns/No-IP ("Managed DNS") support

Issuance Policy
6

But Let's Encrypt supports this. So you don't have to care about your DynDNS service.

BTW if you'd like to get a DynDNS service which also offers DNSSEC and DANE you can use https://desec.io.