Please tell us a bit more about scenarios you are trying to enable and how do you see this feature working.Povl H. Pedersen commented
I don't care if it is lets encrypt, or like Amazon AWS that can issue/maintain certificates, or like Microsoft Azure CDN ( https://docs.microsoft.com/en-us/azure/cdn/cdn-custom-ssl?tabs=option-1-default-enable-https-with-a-cdn-managed-certificate ) - Here Microsoft calls it CDN managed certificate.
What is important is, that certificates has become free, and https required. So it shoul be a maintenance free part of the service provided. Not only to CDN customers, but to all customers.
Need to be deployed to all services.