The sites are deployed on Vercel and Digital Ocean. Both platforms allow users to connect their custom domains, and they auto-generate the SSL for these domains.
Gotcha. That makes sense since each site is deployed separately and not a subdomain of a single deploy. Thanks for sharing!