[sandeepkd]

> you have proven that you're able to serve random file from a webserver, so the grant is to allow you to serve them via TLS connection.

Its digression from the original topic, still, it goes way far than that, these certificates are signed by a CA that the client devices trusts by the virtue of root certificates installed on the device. If I can some how obtain the SSL/TLS certificate for google then thats a very big deal.

[maxgashkov]

That's why it's very unlikely that you will be able to put a file under google.com/.well-known/acme-challenge

But if you somehow managed to do that, no one in the right mind would argue that you're free to undelegate the domain or point it to a NS you control.