You would not need to do anything with DNS to enable SSL.
You do however need to actually request one rather then use the servers SSL (works for some scenarios but is technically not valid for any domains on your account). Under SSL Certificates you should, for each domain you want SSL on chose the option "Get automatic certificate from ACME Provider" and mark the domains/subdomains you want it to be valid for, you can leave ACME Provider, Common name etc part at default.