# Authorization result: invalid

**URL:** <https://community.letsencrypt.org/t/authorization-result-invalid/133711>\
**Category:** Help\
**Created:** [September 15, 2020, 5:10pm UTC](https://community.letsencrypt.org/t/authorization-result-invalid/133711 "2020-09-15T17:10:43Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![griffin](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/griffin/32/50204_2.png) [@griffin](https://community.letsencrypt.org/u/griffin)\
**Post date:** [September 19, 2020, 6:50am UTC](https://community.letsencrypt.org/t/authorization-result-invalid/133711/7 "2020-09-19T06:50:51Z")

</div>

Happy to help. 🙂

> [@dantehavenaar](#):
>
> 6: [dns-01] Create verification records manually (auto-renew not possible)

This is the method to which you are accustomed. It requires manual interaction (creation of dns txt records) every time a certificate is created/renewed. I highly recommend that you start here and successfully get a certificate before proceeding to use #7 (acme-dns).

> [@dantehavenaar](#):
>
> 7: [dns-01] Create verification records with acme-dns ([GitHub - joohoi/acme-dns: Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely.](https://github.com/joohoi/acme-dns))

This method delegates the dns txt challenges to a different domain in order to automate renewals. It's a bit more complicated initially, but it makes renewals cake. It basically involves creating the following CNAME records and a few other steps:  
`_acme-challenge.mail.dhavenaar.nl`  
`_acme-challenge.autodiscover.dhavenaar.nl`

Some resources:

> **[GitHub - joohoi/acme-dns: Limited DNS server with RESTful HTTP API to handle...](https://github.com/joohoi/acme-dns)**
>
> Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely. - GitHub - joohoi/acme-dns: Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily...

> **[win-acme](https://www.win-acme.com/reference/plugins/validation/dns/acme-dns)**
>
> win-acme is a ACMEv2 client for Windows that aims to be very simple to start with, but powerful enough to grow into almost every scenario.

Fortunately for you my friend, I recently walked in the path of automating wildcard certificates with another gentleman who generously documented his process:

> [@How to expand certificate with a wildcard subdomain?](https://community.letsencrypt.org/t/how-to-expand-certificate-with-a-wildcard-subdomain/133925/6):
>
> G…

---

_[View the full topic](https://community.letsencrypt.org/t/authorization-result-invalid/133711)._