Cloudways is cloud hosting provider, they provide cloud servers from different clouds, we are doing kind of similar thing, where everything is automated, from creating server to creating applications like wordpress, laravel with one click.
So they just ask to point CNAME of _acme-challenge points to something.cloudways.com which is the temporary (initial) domain of application , then after pointing of cname they just enable the wildcard ssl for the client's domain. You can see in this screenshot : -
I wouldn't advise to set a CNAME to point to a temporary hostname. Let's Encrypt certificates require renewal every 60-90 days, so the destination of the CNAME should always be available for performing the dns-01 challenge. So if that hostname is ephemeral, it wouldn't be a very good option.
Also, the question is: are all domain names of your customers under your controle? If not, then that's another difficulty.
okay, @9peppe .
Thanks for your support really appreciate, also please let me know if you found anything about this scenario. it would be very helpful for me.
I agree with @9peppe: please develop your system using the staging environment to prevent you for running into rate limits. Once everything seems to be working properly, you can switch to the production environment.