DNS delegation

The DNS delegation allows to validate a domain when there is no access to the DNS through API.

How it works

The process consists in creating a CNAME record in the DNS of the domain for which you want to issue the certificate. This record will point to another domain over which you have access through API.

You need a CNAME record with this structure:
_acme-challenge.common_name

And it has to point to:
_acme-challenge.common_name.delegated_domain

• common_name
  • The domain name of the certificate.
  • It has to include the subdomains if there are (www.,mail.,api. etc).
  • For wildcard certificates, it is not necessary to include the subdomains.
• delegated_domain
  • It's the domain that we have access to through API. Where the TXT record will be created.

Example where the delegated domain is certguardian.es:

To issue a certificate for: www.dominios.bike

You need the following record in the DNS of dominios.bike:

_acme-challenge.www

The record has to point to:

_acme-challenge.www.dominios.bike.certguardian.es

Simulate DNS Delagation

Enter the domain for which you want to issue a certificate (without www, mail, etc):

Enter the subdomain (if none or wildcard, leave blank)

Enter the delegated domain (if you don't know it, leave it as is)

Result

You must create a CNAME record with value:

_acme-challenge

That points to:

_acme-challenge.dominio.com.certguardian.es

CNAME Record:

_acme-challenge.dominio.com IN CNAME _acme-challenge.dominio.com.certguardian.es