Lets Encrypt and openvpn

DNS verification is just another method of verifying you own a domain for obtaining certificates from Let's Encrypt, one that doesn't require any web server listening on the public Internet.