***UNCHECKED*** Oracle Cloud APEX and Lets Encrypt

To use vanity urls in oracle cloud APEX I need a cert for the load balancer. I can't generate a cert with Lets Encrypt unless I own the web server. I could possibly generate a cert on another platform and then use it. Maybe that is solution but not sure if cert is somehow tied to anything I don't know about. Then refreshing the cert still becomes issue.

Is there a way to do above that I am missing? Maybe another free cert provider?

The other option is to stand up a compute instance and install a web server and use as reverse proxy to APEX. I see Dmitri Gielis's articles on this and can do if required.