Let's Encrypt "validations" expire after 30 days, and given the 90 days expiration of certificates,
Let's Encrypt "validations" expire after 30 days, and given the 90 days expiration of certificates, they are typically being renewed, when there is 30 days (or less) left on the previous certificate, meaning around every 60 days.
The TXT would therefore need to be changed at least once every 60 days for that reason.
You SHOULD be able to set it up with the DCV Delegation to avoid having to change it all the time, for you customer's setup with your SaaS configuration.
However, the DCV Delegation could be a Catch-22, and come with similar consequences:
If your customer is creating a CNAME (or other records) on the
The TXT would therefore need to be changed at least once every 60 days for that reason.
You SHOULD be able to set it up with the DCV Delegation to avoid having to change it all the time, for you customer's setup with your SaaS configuration.
However, the DCV Delegation could be a Catch-22, and come with similar consequences:
If your customer is creating a CNAME (or other records) on the
_acme-challenge
