They have a certificate management system where you can register for a free one from TrustAsia, or buy an expensive one from another authority like Symantec. I just got a free one.
You could just as easily bring your own or deploy a LetsEncrypt certificate to a bare machine though.
You could just as easily bring your own or deploy a LetsEncrypt certificate to a bare machine though.