Hi there,

I think there is wrong definition of the URI used to call deSEC API.

When there is a request for a certificate like www.domain.com the follwoing URI is being used to call deSEC API for TXT DNS entry creation:

DEBUG: _acme-challenge.www.domain.com has URI: /domains/www.domain.com/rrsets/_acme-challenge.www%2e%2e%2e/TXT/

The correct URI should be imho:

_acme-challenge.www.domain.com has URI: /domains/domain.com/rrsets/_acme-challenge.www%2e%2e%2e/TXT/

Thanks for checking this, really appreciated.