The ACME protocol, specified in RFC 8555, gets TLS Certificates from CAs via automatic methods, e.g. HTTP and DNS challenges.