AFIACT you still have to configure the DNS A record yourself, kube-cert-manager just solves the challenges using DNS.