Hi. I wanted to create a wildcard cert. So I used certbot with dns and the domain I used (just an example) was: -d *.example.com -d example.com Certbot wanted me to create two TXT records having the same key name however the value was different. I was lucky since I use Namecheap and Namecheap allo…

In Route 53, you can create one record set with two values. Just create or edit the record set and write them on two lines. Almost all DNS services should let you create multiple TXT records – it’s a basic feature, and people need to do it quite frequently. By the way, many ACME clients – includin…

The confusion on this topic usually revolves around UI differences in the providers. Some refer to it as a single record with multiple values. Others refer to it as two records with the same name and differing values. But almost all of them support what you’re trying to do in some form.

[image] SaimonSL: besides Namecheap registra and Bind application no other domain registra company allows you to create a TXT record with duplicate name. Au contraire; Cloudflare, at least, does. Knowing (even if incorrectly, as @mnordhoff notes) that three hosts don't support something is a…

[image] mnordhoff: Almost all DNS services should let you create multiple TXT records – it’s a basic feature, and people need to do it quite frequently. Two examples of common non-Let's Encrypt situations where people commonly create multiple DNS records with the same type and name: having …

Although the RFC allows for “TXT-DATA One or more <character-string>s.”, over the years many systems have had trouble handling information in TXT records when multiple records where used (I recall SPF having such issues). At some point, it seems that the general consensus was to merge all th…

Wow i never knew that txt records can be multi line. Its nice to have a room full of knowledgeable people around. I am going to use mnordhoff good idea of automating route53 with certbot. Thanks guys for the detailed explanation. You may choose this ticket.

Pick a solution and this will automatically “close”.

If anyone absolutely cannot set a TXT record with 2 values, (depending on the ACME client) you can begin a certificate order and let one of the domain challenges fail (and the other succeed). If you then try the order again you will only have to set the remaining challenge response. When that comple…

Wildcard TXT limitation

Issuance Policy

Topic		Replies	Views
Be clearer about the TXT record(s) for multiple domains Feature Requests	7	6295	December 13, 2019
The second-level domain wildcard is the same as the name of the top-level domain certificate dns txt. Value is different Help	5	1138	March 2, 2019
ACME challenge failed despite having corrent TXT value Help	13	1677	December 21, 2018
Amazon route53 wildcard domain support question / issue Help	5	4113	April 13, 2018
Domain and wildcard registration at the same time Help	3	2622	June 13, 2018

Wildcard TXT limitation

Related topics