Skip to main content

Add and verify a domain

What does this do for me?

This connects a domain to your KeylessSSL organization without asking you to upload DNS-provider credentials.

Add the domain

  1. Open Domains.
  2. Select Add domain.
  3. Enter the base domain, such as example.com.
  4. Select Continue.
KeylessSSL creates the domain in a pending state and shows the records generated for that domain.

Publish both DNS records

Use the exact host, value or target, and TTL shown in the portal. Do not copy values from another domain or organization.
  1. Create the Ownership TXT record. This contains a token unique to the domain and organization and is required for ownership verification.
  2. Create the Delegation CNAME record. This points the _acme-challenge host to the delegated-validation target and is required for certificate issuance.
  3. Save both records at your DNS provider.

Verify the records

  1. Return to the Add Domain dialog.
  2. Select Verify DNS.
  3. If verification is still pending, wait for DNS propagation and try again.
The API verifies the ownership TXT record before marking the domain verified. It also checks the CNAME and tells you if delegation is still missing. If the domain is already claimed by another active KeylessSSL organization, verification is refused. You can later open a pending domain and select Re-check DNS.