CNAMEIf you use Digicert as your Certificate Authority (CA), you can complete DCV with a special CNAME record.
Selecting Let’s Encrypt as a CA limits a certificate to a TXT Certificate validation method, 90 days for the Certificate Validity Period, two host entries (one for the zone name and one for the subdomain wildcard of the zone name, such as
If using the API to order your certificate, this action also defaults
Specify DCV method
In either case, you would need to set a
View DCV values
Once you specify your chosen validation method, you can access the validation values by:
- Going to SSL/TLS > Edge Certificates in the dashboard and clicking a certificate.
- Getting certificate details , and finding the
Specifically, you should be looking for the
cname_target (you can also see these values in the dashboard by clicking that specific hostname certificate). Then, use these values to add a CNAME record at your authoritative DNS provider.
Renew DCV tokens
However, some certificates — for example, if you are using wildcard certificates or certificates with multiple SANs or your hostname is not proxied — are not eligible for HTTP validation.
If your certificate is not eligible for HTTP validation, you will need to repeat the DCV process with your chosen method.