# Wildcard & Base Domain: Two TXTs? Timeout problem **URL:** \ **Category:** Help\ **Created:** [March 14, 2018, 11:40am UTC](https://community.letsencrypt.org/t/wildcard-base-domain-two-txts-timeout-problem/56105 "2018-03-14T11:40:59Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![badfiles](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/badfiles/32/20853_2.png) [@badfiles](https://community.letsencrypt.org/u/badfiles)\ **Post date:** [March 14, 2018, 11:40am UTC](https://community.letsencrypt.org/t/wildcard-base-domain-two-txts-timeout-problem/56105/1 "2018-03-14T11:40:59Z")
I have a question regarding wildcard challenge. Both `*.ex.domain.` and `ex.domain.` share the same challenge request `_acme-challenge.ex.domain.`, but I must provide different keys. The challenge fails due to timeout, I believe. Now I am out of my five hourly tries with only one of the two challenges completed. What are the TTLs in the dns-challenge scheme and why is there no separate name for a wildcard challenge? ---
**Author:** ![cpu](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/cpu/32/84514_2.png) [@cpu](https://community.letsencrypt.org/u/cpu)\ **Post date:** [March 14, 2018, 1:10pm UTC](https://community.letsencrypt.org/t/wildcard-base-domain-two-txts-timeout-problem/56105/2 "2018-03-14T13:10:21Z")
> [@badfiles](#): > > The challenge fails due to timeout, I believe. What ACME client are you using? Can you share the error output? What are the domain name(s)? > [@badfiles](#): > > Now I am out of my five hourly tries with only one of the two challenges completed. Please use the [staging environment](https://letsencrypt.org/docs/staging-environment/) while you are testing/getting set up. It has higher rate limits. > [@badfiles](#): > > What are the TTLs in the dns-challenge scheme and why is there no separate name for a wildcard challenge? TTL is not important here. Let's Encrypt sets an extremely low max TTL on our recursive resolver and we talk directly to your authoritative nameservers. If I had to wager a guess, I'd say either your DNS provider or your ACME client are not setting two TXT records under "\_acme-challenge.ex.domain.net" and is only setting one at a time. Both values need to be present at once for the validation to succeed. ---
**Author:** ![hampton](https://avatars.discourse-cdn.com/v4/letter/h/8edcca/32.png) [@hampton](https://community.letsencrypt.org/u/hampton)\ **Post date:** [March 14, 2018, 1:54pm UTC](https://community.letsencrypt.org/t/wildcard-base-domain-two-txts-timeout-problem/56105/3 "2018-03-14T13:54:44Z")
> [@cpu](#): > > If I had to wager a guess, I’d say either your DNS provider or your ACME client are not setting two TXT records under “\_acme-challenge.ex.domain.net” and is only setting one at a time. Both values need to be present at once for the validation to succeed. Ah, thank you. That solved my problem. Its not clear from the certbot instructions that both challenges must be present at the same time so I was setting up the first, hitting enter to continue, replacing the first challenge with the second, hitting continue, and always getting a failure. Once I set up both at the same time I had success on the first try. ---
**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\ **Post date:** [March 14, 2018, 5:33pm UTC](https://community.letsencrypt.org/t/wildcard-base-domain-two-txts-timeout-problem/56105/4 "2018-03-14T17:33:21Z")
That’s a great point, @hampton. I created an issue to make the Certbot messages clearer on this point: > ---
**Author:** ![badfiles](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/badfiles/32/20853_2.png) [@badfiles](https://community.letsencrypt.org/u/badfiles)\ **Post date:** [March 15, 2018, 7:48am UTC](https://community.letsencrypt.org/t/wildcard-base-domain-two-txts-timeout-problem/56105/5 "2018-03-15T07:48:52Z")
> [@cpu](#): > > What ACME client are you using? Can you share the error output? What are the domain name(s)? Dehydrated > [@cpu](#): > > Please use the staging environment while you are testing/getting set up. It has higher rate limits. On staging server, I already had had a completed challenge, so cert extraction went fine. > [@cpu](#): > > If I had to wager a guess, I’d say either your DNS provider or your ACME client are not setting two TXT records under “\_acme-challenge.ex.domain.net” and is only setting one at a time. Both values need to be present at once for the validation to succeed. I see, there should be two TXT records with the same name but different values. I will change the hook script logic to achieve that state. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [April 14, 2018, 7:49am UTC](https://community.letsencrypt.org/t/wildcard-base-domain-two-txts-timeout-problem/56105/6 "2018-04-14T07:49:17Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.