I use deSEC, a non-profit based in Berlin. Has been an excellent experience, and very easy to use for DNS-01.