The other consideration is that while you can make tools (like https://greenlock.domains/ etc) to fetch a certificate on behalf of a user, they then need to install that cert and repeat the process at least every 90 days. Manual processes are basically a novelty you could make for fun but they're generally not a practical solution for serious use.