I don't remember putting anything in my web address for domain validated TLS, i could be mistaken. I have definitely seen email as part of the verification cha

I don't remember putting anything in my web address for domain validated TLS, i could be mistaken. I have definitely seen email as part of the verification chain and alteration of DNS records: both of which would be hard(er) than intercepting a http request on an infrastructure provider of the host providing the website. Of course; that would mean the provider who has your DNS could do it, but those are often separate entities and they would have to collude