4 ms·

My experience has been that CertBot doesn't play well with CNAME delegation, but it's probably very situational, like depending upon which DNS hosting provider

My experience has been that CertBot doesn't play well with CNAME delegation, but it's probably very situational, like depending upon which DNS hosting provider plugin you're using. My solution was to give up on CertBot and use dehydrated instead. This did require me to come up with a script to make the necessary API call to the DNS hosting, which dehydrated will then run as necessary.

throw0101a 6mo ago
> My experience has been that CertBot doesn't play well with CNAME delegation […] A CertBot ticket on the subject opened January 2026: * https://github.com/certbot/certbot/issues/10555 https://github.com/certbot/certbot/issues/10555