Does Read the Docs support automatic SSL renewal for custom domains using external DNS providers?

Read the Docs allows projects to be mapped to custom domains, utilizing Let's Encrypt for SSL/TLS certificate management. This process typically requires a CNAME record to point the domain to the Read the Docs infrastructure to facilitate domain validation and certificate issuance.

When utilizing external DNS providers with strict propagation policies or specific API limitations, there is uncertainty regarding the automated renewal cycle. It is unclear if the platform triggers a re-validation of the CNAME record automatically before certificate expiration or if manual intervention is required in the dashboard to refresh the certificate.

What is the expected behavior for SSL certificate renewal on custom domains when the DNS is managed externally? Does the system perform an automatic challenge-response to renew the certificate without user input?