How do enterprises typically host their applications globally (DNS)

Hi, I was wondering how do medium and large scale businesses host their applications in azure vnets to the regionally or globally ? What I know is that they can buy a domain name and then create Sub domain DNS records pointing towards their public ips or endpoints exposed by azure services (be it any compute services or any load balancing services).

However what about the TLS ? How are those handled ?