# Wildcard support DNs txt verification for al subdomains? **URL:** \ **Category:** Help\ **Created:** [May 17, 2018, 7:40am UTC](https://community.letsencrypt.org/t/wildcard-support-dns-txt-verification-for-al-subdomains/62089 "2018-05-17T07:40:32Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![waeb](https://avatars.discourse-cdn.com/v4/letter/w/e36b37/32.png) [@waeb](https://community.letsencrypt.org/u/waeb)\ **Post date:** [May 17, 2018, 7:40am UTC](https://community.letsencrypt.org/t/wildcard-support-dns-txt-verification-for-al-subdomains/62089/1 "2018-05-17T07:40:32Z")
Hi, I have a question regarding generating a wildcard ssl certificate through Let’s Encrypt. If i want to generate a wildcard certificate for “\*.example.com”, do i need to do a txt dns verification for every subdomain that uses the certificate? For example: [pc1.example.com](http://pc1.example.com) -\> txt verification? [pc2.example.com](http://pc2.example.com) -\> txt verification? [pc3.example.com](http://pc3.example.com) -\> txt verification? It is not really clear to me how this part works. My domain is: \*.example.com My web server is (include version): IIS 8.5 The operating system my web server runs on is (include version):Windows Server 2012 R2 My hosting provider, if applicable, is: Perrit is hosting the actual domain that i want to request the wildcard certificate for. I can login to a root shell on my machine (yes or no, or I don’t know): I have access to the windows server that has the IIS binding for the domain. I’m using a control panel to manage my site (no, or provide the name and version of the control panel): Domain hosting is external(Perrit), don’t have access to that. For the txt verification i need to contact them. Kinds regards, Walter ---
**Author:** ![mnordhoff](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mnordhoff/32/22583_2.png) [@mnordhoff](https://community.letsencrypt.org/u/mnordhoff)\ **Post date:** [May 17, 2018, 7:43am UTC](https://community.letsencrypt.org/t/wildcard-support-dns-txt-verification-for-al-subdomains/62089/2 "2018-05-17T07:43:31Z")
To validate the wildcard `*.example.com`, you use a `TXT` record for `_acme-challenge.example.com`. ---
**Author:** ![waeb](https://avatars.discourse-cdn.com/v4/letter/w/e36b37/32.png) [@waeb](https://community.letsencrypt.org/u/waeb)\ **Post date:** [May 17, 2018, 7:56am UTC](https://community.letsencrypt.org/t/wildcard-support-dns-txt-verification-for-al-subdomains/62089/3 "2018-05-17T07:56:30Z")
Hi, Thank you for the quick answer. To make sure i understand correctly, the subdomains that will use the certificate don’t need to be validated through the `TXT` record? ---
**Author:** ![mnordhoff](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mnordhoff/32/22583_2.png) [@mnordhoff](https://community.letsencrypt.org/u/mnordhoff)\ **Post date:** [May 17, 2018, 8:11am UTC](https://community.letsencrypt.org/t/wildcard-support-dns-txt-verification-for-al-subdomains/62089/5 "2018-05-17T08:11:49Z")
> [@waeb](#): > > To make sure i understand correctly, the subdomains that will use the certificate don’t need to be validated through the TXT record? Correct. That's how a wildcard certificate works. If you wanted a non-wildcard certificate for those 3 names, that would be a different matter. ---
**Author:** ![waeb](https://avatars.discourse-cdn.com/v4/letter/w/e36b37/32.png) [@waeb](https://community.letsencrypt.org/u/waeb)\ **Post date:** [May 17, 2018, 8:33am UTC](https://community.letsencrypt.org/t/wildcard-support-dns-txt-verification-for-al-subdomains/62089/6 "2018-05-17T08:33:38Z")
Ok thats great to hear! Thank you! ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [June 16, 2018, 8:33am UTC](https://community.letsencrypt.org/t/wildcard-support-dns-txt-verification-for-al-subdomains/62089/7 "2018-06-16T08:33:48Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.