Does OVH Only Offer SSL with a Hosting Plan?

I’m either missing something or bamboozled myself here; I bought a domain from OVH and now I’m trying to get SSL certs set up on my OPNsense router, but can’t figure out how to get the API key from OVH.

Am I right in reading their docs that you must have a hosting plan with them to get any sort of SSL support?

If so, I think my only option is to switch my DNS servers on OVH to Cloudflare? Or can I somehow just talk directly to Let’s Encrypt via certbot/ACME?