# Just one \_acme-challenge value for all domains in same DNS validation

**URL:** <https://community.letsencrypt.org/t/just-one-acme-challenge-value-for-all-domains-in-same-dns-validation/156231>\
**Category:** Feature Requests\
**Created:** [July 22, 2021, 8:37am UTC](https://community.letsencrypt.org/t/just-one-acme-challenge-value-for-all-domains-in-same-dns-validation/156231 "2021-07-22T08:37:59Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [July 23, 2021, 7:44am UTC](https://community.letsencrypt.org/t/just-one-acme-challenge-value-for-all-domains-in-same-dns-validation/156231/6 "2021-07-23T07:44:34Z")

</div>

> [@kongen](#):
>
> So there is a maximum of 10 \_acme-challenge values in one DNS lookup in certbot.

I think that's not correct: the error you've shown with the "and 9 more" text is produced by the Let's Encrypt validation server and not certbot. Certbot is just showing you the error from the validation server, but does not generate it.  
And the Let's Encrypt validation server just tells you what it found when it queried for the TXT records: it found 10 TXT records.  
Therefore, I'm stil enclined to think it has something to do with your DNS provider: the screenshot you're showing also shows **just 10 TXT records** and _not_ 13.

Also, I've shown [in your other thread about the max. 10 issue](https://community.letsencrypt.org/t/max-10-domains-in-dns-verification/156172/4) certbot works perfectly with 20 DNS challenges 😉

My suggestion to you is to try to automate the DNS challenge somehow as stated earlier and not to try to add the TXT records manually for two reasons:

- I think your DNS service provider is the issue here, automation through e.g. acme-dns might resolve this issue;
- renewing so much DNS challenges every 60 days is very cumbersome, so automation is also in your own best interest 😉

Also, I'm very puzzled: why would there be a need for 10+ TXT records **for the same hostname**? (Earlier I missed that it all were records for the exact same hostname..) Usually, this is maxed to just **two** similar hostnames:

- One for the "bare" apex domain `example.com`;
- and one for the wildcard `*.example.com`.

I don't see the need for more than two TXT records for the same hostname.

---

_[View the full topic](https://community.letsencrypt.org/t/just-one-acme-challenge-value-for-all-domains-in-same-dns-validation/156231)._