DNS providers for DNS-01 validation
Connect the DNS provider that hosts a domain once, and every certificate for it - wildcards included - is validated automatically. Below is every provider the dashboard offers today.
present_acme-challenge.example.com TXT "gfj9Xq...Rg85nM"present_acme-challenge.example.com TXT "ZL2w1o...KSq7uE"propagatevisible on all authoritative servers · 41svalidatedns-01 valid for example.com, *.example.comcleanup2 TXT records removedWhat it does
For each verified domain you choose its DNS provider and enter an API credential. During issuance the agent publishes the _acme-challenge TXT record through that provider's API, waits for propagation with generous timeouts, and removes the record afterwards.
When a provider is missing, ACME-DNS with a CNAME delegation, the generic webhook (httpreq) or a custom script on the agent host fill the gap.
How it runs
- 01
Verify
Prove domain ownership once with a TXT record.
- 02
Connect
Choose the provider and enter an API credential; it is stored encrypted.
- 03
Automate
Every DNS-01 challenge for that domain is answered by the agent.
What you configure
- Provider and its credential fields
- One provider per verified domain; different domains can use different providers
Prerequisites
- A verified domain
- API access at the DNS provider
Limitations
- DNS-01 applies to ACME authorities. AD CS issuance through the CA connector needs no DNS challenge.
All 217 providers
Not in the list? ACME-DNS, the generic webhook and a custom script on the agent host cover any DNS service.
Commonly used
- Cloudflare
- AWS Route 53
- Azure DNS
- Google Cloud DNS
- Hetzner DNS
- IONOS Cloud DNS
- OVHcloud DNS
- DigitalOcean
- GoDaddy
- Infoblox (on-prem)
- BlueCat Address Manager
- ACME-DNS
- 1cloud.ru
- 35.com (三五互联)
- 51DNS
- Abion
- ACME-DNS
- Active24
- Akamai EdgeDNS
- Alibaba Cloud DNS
- Alibaba Cloud ESA
- All-inkl
- Alwaysdata
- Anexia CloudDNS
- ANS SafeDNS
- ArtFiles
- ArvanCloud
- Aurora DNS (PCextreme)
- AutoDNS (InterNetX)
- AWS Lightsail DNS
- AWS Route 53
- Axelname
- Azion Edge DNS
- Azure DNS
- Baidu Cloud DNS
- Beget
- Binary Lane
- Bindman
- BlueCat Address Manager
- BlueCat Address Manager (v2 API)
- BookMyName
- Bunny.net DNS
- CheckDomain
- Civo DNS
- Cloud.ru DNS
- CloudDNS (vshosting)
- Cloudflare
- ClouDNS
- Connbyte
- ConoHa DNS
- ConoHa VPS v3 DNS
- Constellix DNS
- Core-Networks
- cPanel/WHM DNS
- Curanet
- Custom script (runs on the agent host)
- Czechia (CZ.NIC mojeID/DNS)
- DanDomain
- ddnss.de
- Derak Cloud
- deSEC
- DigitalOcean
- Dinahosting
- DirectAdmin
- DNS Made Easy
- DNS.la
- DNS.services
- DNScale
- DNSExit
- dnsHome.de
- DNSimple
- do.de (Domain-Offensive)
- Domeneshop / Domainnameshop
- DreamHost
- DuckDNS
- Dyn Managed DNS
- Dynadot
- DynDNSFree.de
- Dynu
- EasyDNS
- EdgeCenter
- EfficientIP SOLIDserver
- Epik
- EuroDNS
- EUserv
- Excedo
- Exoscale
- F5 Distributed Cloud
- Fornex
- freemyip.com
- FusionLayer NameSurfer
- Gandi (legacy XML-RPC API)
- Gandi LiveDNS
- Gcore DNS
- Gehirn Infrastructure
- Generic webhook (httpreq)
- Gigahost.no
- GleSYS
- GName
- GoDaddy
- Google Cloud DNS
- Gravity
- Hetzner DNS
- hosting.de
- hosting.nl
- Hostinger
- Hosttech
- HostUp
- http.net
- Huawei Cloud DNS
- Hurricane Electric DNS
- HyperOne
- IBM Cloud (SoftLayer) DNS
- IIJ DNS Platform Service
- Infoblox (on-prem)
- Infomaniak
- internet.bs
- INWX
- IONOS (legacy DNS API)
- IONOS Cloud DNS
- IPv64.net
- ISPConfig
- ISPConfig Dynamic DNS Module
- JD Cloud DNS
- Joker.com
- Katapult
- KeyHelp
- Leaseweb
- Liara
- Lima-City
- Linode (Akamai) DNS
- Liquid Web
- Loopia
- LuaDNS
- Mail-in-a-Box
- ManageEngine CloudDNS
- Metaname
- Metaregistrar
- mijn.host
- Mittwald
- myaddr.tools / myaddr.dev / myaddr.io
- MyDNS.jp
- Mythic Beasts
- Name.com
- Namecheap
- NameSilo
- NearlyFreeSpeech.NET
- NederHost
- Neodigit
- netcup
- Netlify DNS
- Netnod
- Ngenix
- nicmanager
- NIFCLOUD DNS
- Njalla
- Nodion
- NS1 (IBM NS1 Connect)
- Octenium
- omg.lol
- Online.net (Dedibox/Scaleway legacy console)
- Open Telekom Cloud DNS
- Openprovider
- OpenStack Designate
- OpusDNS
- Oracle Cloud Infrastructure DNS
- OVHcloud DNS
- Plesk
- PointDNS
- Porkbun
- Poweradmin
- PowerDNS
- Rackspace Cloud DNS
- Rage4
- Rain Yun (雨云)
- RcodeZero Anycast
- reg.ru
- Regfish
- RFC 2136 (Dynamic DNS Update)
- RimuHosting
- RU Center (nic.ru)
- Sakura Cloud
- Scaleway
- ScanNet
- Selectel
- Selectel Domains API v2
- SelfHost.de / SelfHost.eu
- Servercow
- Shellrent
- Simply.com
- Sonic.net
- Spaceship
- StackPath DNS
- Syse
- Technitium DNS Server
- Tele3
- Tencent Cloud DNS
- Tencent EdgeOne
- Timeweb Cloud
- TodayNIC
- TransIP
- UCloud DNS
- UltraDNS
- United-Domains
- Variomedia
- Veesp
- VegaDNS
- Vercel
- Versio
- VinylDNS
- Virtualname
- VK Cloud DNS
- Volcano Engine (Volcengine) DNS
- Vscale (Selectel)
- Vultr DNS
- Wannafind
- Webnames.ca
- Webnames.ru
- Websupport
- WEDOS
- West.cn (西部数码)
- Xinnet
- Yandex 360 (business)
- Yandex Cloud DNS
- Yandex PDD (Mail for Domain)
- Zilore
- Zone.ee
- ZoneEdit
- Zonomi DNS
Related features
Automate DNS providers
Connect it once in the dashboard; every issuance and renewal uses it from then on.
Community plan, no card required. Open registration - your account is ready in a few minutes.