For your own use, you can obtain a certificate via DNS validation, or by pointing your DNS A records to a server with a public IP. When you publish the private

For your own use, you can obtain a certificate via DNS validation, or by pointing your DNS A records to a server with a public IP. When you publish the private key online, anyone can revoke the certificate, or the CA themselves will.