CA and DNS

Configure your certificate authority and domain validation, with explicit public CA entitlement and staging limits.

CA & DNS

Confirm who can issue what.

  • In Integrations, add a DNS validation profile or an acme-dns delegation.
  • Add an ACME issuer: a preset or custom directory, plus EAB credentials when required. GoDaddy subscription reissue is a separate account-dependent path.
  • Start with a staging directory or private test CA. Confirm commercial entitlement, organisation validation, DNS writes and cleanup before production.
  • Choose the minimum validation level before enabling failover. A replacement CA must meet the same requirement.
See CA validation limits →