aethercert
DNS providers

DNS providers for DNS-01 validation

Connect the DNS provider that hosts a domain once, and every certificate for it - wildcards included - is validated automatically. Below is every provider the dashboard offers today.

A DNS-01 challenge answered through the DNS provider's API.

What it does

For each verified domain you choose its DNS provider and enter an API credential. During issuance the agent publishes the _acme-challenge TXT record through that provider's API, waits for propagation with generous timeouts, and removes the record afterwards.

When a provider is missing, ACME-DNS with a CNAME delegation, the generic webhook (httpreq) or a custom script on the agent host fill the gap.

How it runs

  1. 01

    Verify

    Prove domain ownership once with a TXT record.

  2. 02

    Connect

    Choose the provider and enter an API credential; it is stored encrypted.

  3. 03

    Automate

    Every DNS-01 challenge for that domain is answered by the agent.

What you configure

  • Provider and its credential fields
  • One provider per verified domain; different domains can use different providers

Prerequisites

  • A verified domain
  • API access at the DNS provider

Limitations

  • DNS-01 applies to ACME authorities. AD CS issuance through the CA connector needs no DNS challenge.

All 217 providers

Not in the list? ACME-DNS, the generic webhook and a custom script on the agent host cover any DNS service.

Commonly used

  • Cloudflare
  • AWS Route 53
  • Azure DNS
  • Google Cloud DNS
  • Hetzner DNS
  • IONOS Cloud DNS
  • OVHcloud DNS
  • DigitalOcean
  • GoDaddy
  • Infoblox (on-prem)
  • BlueCat Address Manager
  • ACME-DNS
  • 1cloud.ru
  • 35.com (三五互联)
  • 51DNS
  • Abion
  • ACME-DNS
  • Active24
  • Akamai EdgeDNS
  • Alibaba Cloud DNS
  • Alibaba Cloud ESA
  • All-inkl
  • Alwaysdata
  • Anexia CloudDNS
  • ANS SafeDNS
  • ArtFiles
  • ArvanCloud
  • Aurora DNS (PCextreme)
  • AutoDNS (InterNetX)
  • AWS Lightsail DNS
  • AWS Route 53
  • Axelname
  • Azion Edge DNS
  • Azure DNS
  • Baidu Cloud DNS
  • Beget
  • Binary Lane
  • Bindman
  • BlueCat Address Manager
  • BlueCat Address Manager (v2 API)
  • BookMyName
  • Bunny.net DNS
  • CheckDomain
  • Civo DNS
  • Cloud.ru DNS
  • CloudDNS (vshosting)
  • Cloudflare
  • ClouDNS
  • Connbyte
  • ConoHa DNS
  • ConoHa VPS v3 DNS
  • Constellix DNS
  • Core-Networks
  • cPanel/WHM DNS
  • Curanet
  • Custom script (runs on the agent host)
  • Czechia (CZ.NIC mojeID/DNS)
  • DanDomain
  • ddnss.de
  • Derak Cloud
  • deSEC
  • DigitalOcean
  • Dinahosting
  • DirectAdmin
  • DNS Made Easy
  • DNS.la
  • DNS.services
  • DNScale
  • DNSExit
  • dnsHome.de
  • DNSimple
  • do.de (Domain-Offensive)
  • Domeneshop / Domainnameshop
  • DreamHost
  • DuckDNS
  • Dyn Managed DNS
  • Dynadot
  • DynDNSFree.de
  • Dynu
  • EasyDNS
  • EdgeCenter
  • EfficientIP SOLIDserver
  • Epik
  • EuroDNS
  • EUserv
  • Excedo
  • Exoscale
  • F5 Distributed Cloud
  • Fornex
  • freemyip.com
  • FusionLayer NameSurfer
  • Gandi (legacy XML-RPC API)
  • Gandi LiveDNS
  • Gcore DNS
  • Gehirn Infrastructure
  • Generic webhook (httpreq)
  • Gigahost.no
  • GleSYS
  • GName
  • GoDaddy
  • Google Cloud DNS
  • Gravity
  • Hetzner DNS
  • hosting.de
  • hosting.nl
  • Hostinger
  • Hosttech
  • HostUp
  • http.net
  • Huawei Cloud DNS
  • Hurricane Electric DNS
  • HyperOne
  • IBM Cloud (SoftLayer) DNS
  • IIJ DNS Platform Service
  • Infoblox (on-prem)
  • Infomaniak
  • internet.bs
  • INWX
  • IONOS (legacy DNS API)
  • IONOS Cloud DNS
  • IPv64.net
  • ISPConfig
  • ISPConfig Dynamic DNS Module
  • JD Cloud DNS
  • Joker.com
  • Katapult
  • KeyHelp
  • Leaseweb
  • Liara
  • Lima-City
  • Linode (Akamai) DNS
  • Liquid Web
  • Loopia
  • LuaDNS
  • Mail-in-a-Box
  • ManageEngine CloudDNS
  • Metaname
  • Metaregistrar
  • mijn.host
  • Mittwald
  • myaddr.tools / myaddr.dev / myaddr.io
  • MyDNS.jp
  • Mythic Beasts
  • Name.com
  • Namecheap
  • NameSilo
  • NearlyFreeSpeech.NET
  • NederHost
  • Neodigit
  • netcup
  • Netlify DNS
  • Netnod
  • Ngenix
  • nicmanager
  • NIFCLOUD DNS
  • Njalla
  • Nodion
  • NS1 (IBM NS1 Connect)
  • Octenium
  • omg.lol
  • Online.net (Dedibox/Scaleway legacy console)
  • Open Telekom Cloud DNS
  • Openprovider
  • OpenStack Designate
  • OpusDNS
  • Oracle Cloud Infrastructure DNS
  • OVHcloud DNS
  • Plesk
  • PointDNS
  • Porkbun
  • Poweradmin
  • PowerDNS
  • Rackspace Cloud DNS
  • Rage4
  • Rain Yun (雨云)
  • RcodeZero Anycast
  • reg.ru
  • Regfish
  • RFC 2136 (Dynamic DNS Update)
  • RimuHosting
  • RU Center (nic.ru)
  • Sakura Cloud
  • Scaleway
  • ScanNet
  • Selectel
  • Selectel Domains API v2
  • SelfHost.de / SelfHost.eu
  • Servercow
  • Shellrent
  • Simply.com
  • Sonic.net
  • Spaceship
  • StackPath DNS
  • Syse
  • Technitium DNS Server
  • Tele3
  • Tencent Cloud DNS
  • Tencent EdgeOne
  • Timeweb Cloud
  • TodayNIC
  • TransIP
  • UCloud DNS
  • UltraDNS
  • United-Domains
  • Variomedia
  • Veesp
  • VegaDNS
  • Vercel
  • Versio
  • VinylDNS
  • Virtualname
  • VK Cloud DNS
  • Volcano Engine (Volcengine) DNS
  • Vscale (Selectel)
  • Vultr DNS
  • Wannafind
  • Webnames.ca
  • Webnames.ru
  • Websupport
  • WEDOS
  • West.cn (西部数码)
  • Xinnet
  • Yandex 360 (business)
  • Yandex Cloud DNS
  • Yandex PDD (Mail for Domain)
  • Zilore
  • Zone.ee
  • ZoneEdit
  • Zonomi DNS

Automate DNS providers

Connect it once in the dashboard; every issuance and renewal uses it from then on.

Community plan, no card required. Open registration - your account is ready in a few minutes.