ACME DNS-01 Handshake

Challenge to signed wildcard

ACME DNS-01 Handshake Challenge to signed wildcard Request wildcard dns-01 challenge Token to plugin Write TXT record Query public DNS TXT matches Sign cert Challenge Verify and sign ACME client · certbot · Sequence participant ACME client certbot DNS plugin · cloudflare · Sequence participant DNS plugin cloudflare Public DNS · TXT record · Sequence participant Public DNS TXT record Let's Encrypt · CA · Sequence participant Let's Encrypt CA Legend request return security default message

Handshake

  • • TXT record proves domain control
  • • Certificate signs for apex plus wildcard