FleetSSL DNSONLY provides free, automatically renewing Let's Encrypt certificates for cPanel DNSONLY servers, where free signed certificates are not available from cPanel Inc./Comodo.

Fully open source, available as a yum rpm package with a single install command.

From the authors of the FleetSSL cPanel plugin.