I've had good luck with dehydrated (https://github.com/lukas2511/dehydrated)

It takes a file with a list of domains to check and you can write your own hooks to handle the DNS management and certificate deployment however you want.