SSL Automation
AutoDNS: automated domain validation
With FairSSL AutoDNS you create a single DNS CNAME record per domain, and we handle all domain validation automatically. No manual validation steps, no expired tokens, no delays on renewal.
How it works
You create a CNAME record in your DNS
Point _dnsauth.your-domain.com to your unique AutoDNS address (shown in the FairSSL portal).
FairSSL handles validation automatically
When a CA (DigiCert, RapidSSL, GeoTrust, Thawte) needs to validate your domain, FairSSL AutoDNS automatically responds to the DNS challenge via the CNAME pointer.
Permanent and automatic
The CNAME record is permanent. All future certificate issuances and renewals on the domain from your FairSSL account are validated automatically, without any action required from you.
DNS setup
In the FairSSL portal you will find your unique AutoDNS destination. Create the following CNAME record with your DNS provider:
Tip: Trailing dot
Some DNS servers require a dot (.) at the end of the destination to prevent your domain name from being appended automatically. In that case use your-unique-value.autodns.fairssl.dk.
Verify your setup
Once the CNAME record is created, you can verify that it works using nslookup or Google Dig:
nslookup -type=CNAME _dnsauth.your-domain.com
The result should show a CNAME with a target of your-unique-value.autodns.fairssl.dk. When it does, AutoDNS is ready to use.
You can also use the built-in DNS check in the FairSSL portal, which automatically verifies your CNAME configuration and provides error messages if something is misconfigured.
Supported CAs and brands
AutoDNS works with all DigiCert products and DigiCert brands:
DigiCert brand
AutoDNS is also used in the FairSSL ACME solution for automatic validation of DigiCert brands.
Benefits of AutoDNS
Set up once
One CNAME per domain. After that, validation is automatic for all certificates and renewals.
No firewall openings
AutoDNS uses DNS validation, so it works behind firewalls, load balancers and reverse proxies.
No DNS API keys
AutoDNS does not require each ACME client to modify your domains' DNS, which improves security.
Supports wildcards
Wildcard certificates require DNS validation. AutoDNS handles it automatically.
Faster issuance
No waiting for manual validation. DV certificates are issued in under 2 minutes and under 15 seconds via ACME.
Hands-free renewal
Certificates can be renewed automatically without anyone needing to approve or click anything.
Multiple domains, one account
All domains with a CNAME pointing to your account are validated automatically. Add new domains any time.
Get started
Your unique AutoDNS destination can be found in the FairSSL customer portal. Log in and navigate to AutoDNS under your domain. If you need help setting up or verifying your DNS configuration, contact our support by email or phone.
Questions about AutoDNS
Find answers to the most common questions about SSL certificates and FairSSL.
Ready for automated domain validation?
Create a free account and issue your first certificate in under 10 minutes.