challenge are actions that permits to verify the ownership of a private key. They are used during the CA certificate signing verification
To get a domain validated certificate, you need to prove the ownership of a domain via ACME challenges. (ie setting a DNS TXT record, …)