After setting Custom Hostnames and the client sets the Certificate validation TXT value in DNS, the Certificate validation TXT value is changed

I have a question about setting up Custom Hostnames.
We offer a SaaS product.

We would like to register a Cloudflare domain in our customer’s DNS, and then route it from Cloudflare to our service.

Here is what we would like to do
customer’s domain → (Cloudflare)Cloudflare domain → (our hosting service)customer’s domain

To achieve this, we added the customer’s domain to Custom Hostnames.
We had the published TXT record added to the customer’s DNS.

In the following, we consider the issued record as follows
・Certificate validation TXT name
_acme-challenge.example.ne.jp
・Certificate validation TXT value
proof_old_value

However, after the customer added the TXT record, the Certificate validation TXT value was changed.
This was confirmed by the Cloudflare GUI and dig command that the value had changed.
Therefore, the Certificate status in Custom Hostnames has not changed from Pending Validation(TXT).
・Certificate validation TXT name
_acme-challenge.example.ne.jp
・Certificate validation TXT value
proof_new_value

This occurred not once, but twice.
When we verified internally with our DNS previously, the Certificate validation TXT was changed once, but only once, and then the Certificate status became Active.

What is the cause of this problem and what is the solution?
I think the possible reasons are as follows, but I would like to know if there is any discrepancy.
・TTL problem with the client’s DNS.
・Internal problem with Let’s Encrypt

Are you using Cloudflare for SaaS? This sounds like you should be using Cloudflare for SaaS.

Sorry, my apologies.
I didn’t explain myself well enough, but we are on the following plan

  • My Account
    • Cloudflare for SaaS
    • Cloudflare Workers Paid
  • Our Domain
    • Advanced Certificate Manager
    • Pro Plan

And we are stuck in the above commented event.
We can’t figure out why and would appreciate your help.

1 Like

Do you have a support request open on this? Can you share the ticket number here?

We have already sent you a support request.
The ticket number is 2768579.
The title is also the same.
After setting Custom Hostnames and the client sets the Certificate validation TXT value in DNS, the Certificate validation TXT value is changed.

This ticket was submitted on 4/20, but no official response has been received yet.

1 Like

I escalated this post for the attention of the Customer Support Team so they can get back to you here. I shared your ticket number so that they can track it.

2 Likes

I’m experiencing this same issue. Was there a resolution to this?

You should probably create your own topic and describe your problem in detail.

Ah, was wondering where this ticket/post went off to.

The ticket closed after some time due to non response from the Customer.

But the issue was, the Customer was using the Cloudflare for SaaS product.
The Custom Hostname cert offered was from Google.

The hostname issued to did not have Google CA configured, resulting in a bit of validation mess.
The solution is to have Google CA added to the domain where the hostname is issued to.

Hope this helps.

Thank you.

1 Like

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.