TExecuteACME component let you request a "Let's Encrypt" certificate for you domain. The component supports HTTP Challenge, you can use a self hosted WebServer (TidHTTPServer) to validate the certificate or use the OnHttpChallenge event to store the challenge reply on your website. In both case you need to manage the domain's HTTP (not HTTPS) server.