You don't have to use a CDN to get HTTPS support for a custom domain. Using the CDN is definitely one way, but you can also use Azure Front Door to accomplish this. Front door will provide the SSL cert for you after you associate your domain name. It's quick, easy to implement, relatively inexpensive, and provides additional features such as load balancing, rule-based routing, and DDoS protection.
Plus, no CDN!