Certificate Manager uses two types of verification: HTTP and DNS. When you create a certificate, you can choose any type of check.
You only need to check rights for domains for Let’s Encrypt certificates. Certificate Manager doesn’t check domain rights for imported user certificates.