Self-hosted server for * wildcard domain - help how to please — by Osiris, griffin and schoen on Let's Encrypt Community

intermediateforumLink only (©)

A thread where a user gets a wildcard cert using DNS-01 with Cloudflare. The 'unrecognized arguments' error came from a missing DNS plugin and mixed apt/snap installs; the fix was the snap Certbot plus certbot-dns-cloudflare, then tightening the credentials file permissions.

Quick steps

  1. Use dns-01 for wildcards
  2. Remove apt Certbot, install via snap, then sudo snap install certbot-dns-cloudflare
  3. Check with certbot plugins
  4. Put dns_cloudflare_api_token in a credentials file and remove world permissions (chmod o-rwx)

Paraphrased from the source. Menus can differ by version, so check the original for full details.

Read the full thread on community.letsencrypt.org

Source: Self-hosted server for * wildcard domain - help how to please by Osiris, griffin and schoen on Let's Encrypt Community. Licence: Link only (©).

Source reviewed
2026-11-02
Link checked
2026-11-02
Tested hands-on
Not by Oddbyte.Me

certbotwildcardcloudflaresnap

More in Certificates & HTTPS

Challenge Types — by Let's Encrypt

intermediatepage

Compares HTTP-01 (file on port 80), DNS-01 (TXT record at _acme-challenge) and TLS-ALPN-01. DNS-01 is the one needed for wildcards or servers that are not publicly reachable, but it needs a DNS API and narrowly scoped credentials.