Auto SSL free, provided by LE. and LE limit 1 domain only 3 times (if im not wrong) request per week...
if you do request more then 3 it will fail...
SSL is only need Domain Pointed to Hosting no matter u use IN A or IN NS
the problem that i found with cwp are...
(hope already fixed)
sometimes we need to remove old SSL first before we do a new request
sometimes we cannot add ssl from user control panel, need cwp root panel
sometime domain already pointed but not detected by cwp (in this case, u need refresh your dns or bind