The simplest way is to hand the domain to us entirely: set our nameservers at your registrar. We take care of the rest — the zone, the DNSSEC signature and the certificate.
Nothing else needs to be entered — no addresses, no records. We create the zone ourselves, sign it with DNSSEC and issue the certificate.
This happens when the domain already carries mail or other services elsewhere and cannot be handed over whole.
The HTTPS certificate is issued automatically and renews itself. Nothing is required from you.
If the records have not spread across the internet yet, issuing is postponed and retried later — nothing needs reconfiguring.
Mailboxes are currently issued only on our domains. Attaching a domain concerns the website, not mail: if you hand us a domain that carried mail, that mail will stop working — make sure this suits you beforehand.