Even if you do have the domain, it may be worth knowing that a lot of US-based CAs will refuse to sign SSL certificates for .ly domains.