Ordering a cert for wildcard and root together requires two DNS challenges

[MikeMcQ]

@heaven

We create hosted zones in AWS Route53 and whenever I try creating a second TXT record with the same host (e.g. _acme-challenge.example.com) the request fails telling me the record already exists.

I use Route53 too. In the console you just add additional record values in the same record. See pic below.

In the api I think you just add separate values for the record. I use the api but not for TXT like that.

This pic is a partial from a very large acme-challenge test record

@heaven

We implement a pre-check, so we put the TXT record and then wait for it to appear in the Domain's primary nameserver response.

That's probably fine. Route53 usually syncs its name servers in less than a minute. I think there is an API call to check if a change has sync'd. Which is probably best.