Traefik, for example, handles certificates for your services. I've set it up this morning on our Docker Swarm at work, 5 domains are now served by it with automated ACME certificates.

It's not like cert-manager does rocket science that is possible only on k8s