SSL automation guide
How ACME DNS validation works
ACME DNS validation proves control of a domain by asking you to publish a temporary TXT record in DNS.
TXT recordA temporary DNS value proves domain control.
Wildcard SSLDNS challenges are commonly used for wildcard certificates.
AutomationDNS APIs can make renewal repeatable.
How the challenge works
- 1. Request a certificateThe certificate authority gives you a challenge value.
- 2. Publish a TXT recordYou place that value in DNS for the requested name.
- 3. Validation completesThe authority checks DNS and issues the certificate when the value matches.
Why DNS validation matters
- Useful when issuing wildcard certificates
- Works without exposing a web server challenge path
- Fits automated renewal workflows
- Pairs naturally with DNS APIs
Where DNS APIs help
Manual TXT changes are fine once. For repeatable renewals, a DNS API can create and remove validation records from a script, which makes certificate operations easier to automate.
Need certificate workflows closer to DNS?
DNSExit SSL and DNS API tools support DNS-based certificate workflows and wildcard coverage.