Add a TXT Record for Let's Encrypt

When creating a Let's Encrypt certificate externally, such as using Let's Encrypt official tool Certbot, for a hostname that is hosted in Edge DNS, you must add the TXT record required for the DNS challenge.

View as Markdown

While creating the Let’s Encrypt certificate over DNS challenge method, you have to add a specific TXT record to your DNS zone to ensure the certificate validation. If your zone is hosted in Edge DNS, follow the steps described next.

Note — Let’s Encrypt certificates cross-signed by IdenTrust expired on September 30th, 2024. Devices and applications using the Let’s Encrypt certificate that uses IdenTrust will become invalid. This could impact the functionality of devices and applications utilizing these certificates, mainly users of older Android devices (pre-7.1). It’ll be necessary to take the following actions:

  • For users of Let’s Encrypt Certificates with IdenTrust: you must migrate to the new Let’s Encrypt signing technology or an Azion edge certificate.
  • For users of other types of Let’s Encrypt: no immediate action is necessary, considering other certificates remain unaffected with this update, since the problem is caused by outdated certificate chains on the device.
  • For user with applications using Let’s Encrypt in Azion: no action needed. Certificates are automatically updated, although an affected device must have its CAs updated as well.

This guide covers a scenario in which you want to configure the DNS TXT record required for a Let’s Encrypt™ certificate through DNS-01 Challenge validation.

If you’ve chosen Azion’s Domain feature to create a Let’s Encrypt certificate directly from Azion’s platform for a zone that is fully configured in Edge DNS, the entire process is automated, including the handling of the TXT record. Find out more in the Let’s Encrypt guide.

  1. Follow the general steps described in the How to add records guide.
  2. In Name, provide the new record’s name required by the Let’s Encrypt certification request, such as the Certbot tool, in a string format. Limited to 100 characters. Example: _acme-challenge.<YOUR_DOMAIN>.
  3. In the Record Type dropdown menu, select TXT.
  4. In Value, input the value for the ACME challenge provided by the Let’s Encrypt provider. Example: ekgH9kW242Vbt99P27agtr07I09iLsiZZx.
  5. In TTL (seconds), choose the time, in seconds, a response can be cached for on a resolver server. Maximum value: 2147483647.
  6. Click the Save button.