Caddy can manage certs out of the box for you, you don’t even need to understand how it works. Just add a url to your Caddy file, make sure the domain points to your Caddy server, have port 80 and 443 open, and you are done.