Create a new wildcard certificate for a domain

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
lsl-technology.com

What I am trying to achieve:
I want to install a wildcard certificate on the domain, but according to the documentation that I am following, I am told to create an A record DNS entry as follows.

*.lsl-technology.com.   3600  IN  A  ipaddress.

then it says that I should test the DNS entry by running www.lsl-technology.com and that should qualify to the correct ipaddress.
The issue that I have is I have all of my sub-domains located behind a completely different ipaddress.
My question is how can I implement the wildcard when I have the primary domain on one ipaddress and the subdomains on a separate ipaddress.

My web server is (include version):
nginx version: nginx/1.24.0 (Ubuntu)

The operating system my web server runs on is (include version):
Ubuntu 24.04.1 LTS

My hosting provider, if applicable, is:
Rochen

I can login to a root shell on my machine (yes or no, or I don't know):
yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
certbot 2.9.0

I look forward to your advice.
Thanks
Lawrence

1 Like

That is how you set a wildcard DNS entry for general DNS queries.

A wildcard cert is a different thing. It does not require that kind of A record. A wildcard cert will be validated using TXT records in the DNS. To automate a wildcard cert means that your ACME Client (Certbot in your case) must have API access to insert/delete the needed TXT record.

https://eff-certbot.readthedocs.io/en/latest/using.html#dns-plugins

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.