@burffegqt posted a new topic, subject "DNS Provider Not Allowing TXT Records to Be Submitted Correctly - LetsEncrypt Validation Doesn't Pass". It read:

   Please fill out the fields below so we can help you better.
    
    My domain is:mjva.burff.com
    
    I ran this command: certbot -d mjva.burff.com \--manual --preferred-challenges dns certonly
    
    It produced this output: Detail: DNS problem: NXDOMAIN looking up TXT for  
    _acme-challenge.mjva.burff.com
    
    My operating system is (include version): centos 7.3
    
    My web server is (include version):httpd-2.4.6-45.el7.centos.x86_64
    
    My hosting provider, if applicable, is:
    
    I can login to a root shell on my machine (yes or no, or I don't know):yes
    
    I'm using a control panel to manage my site (no, or provide the name and version of the control panel):no
    
    i am root shell and add the txt record in my dns server noip.com  
    and i run the next command  
    dig -t txt mjva.burff.com  
    and received this  
    mjva.burff.com. 359 IN TXT "_acme-challenge.mjva.burff.com J1kBfoT3qkHgFnKPYpLBeUSyIkWW31dHKx17OPmsFSI"  
    i change the record every time that i try to validate via dns but every time received the same error  
    i am use dns challenge because my provider don't allow use port 80 or 443
      *[DCV]: Domain Control Validation

To which @Osiris replied

    The contents of the value of the TXT record only has to be the token. Just those “random” letters. The `_acme-challenge` part is the field which has to prepend your hostname. As in: `_acme-challenge` \+ `mjva.burff.com` = `_acme-challenge.mjva.burff.com`.
    
    You already have a TXT record for the `_acme-challenge.mjva.burff.com` hostname:
    [code] 
        _acme-challenge.mjva.burff.com.	360 IN	TXT	"_acme-challenge.mjva.burff.com TKx91zLSw-5pKksK211lRasjV0FVqVj7NwJO2unIYgs"
        
    [/code]
    
    But you've (also) got (from your post):
    [code] 
        mjva.burff.com.		360	IN	TXT	"_acme-challenge.mjva.burff.com TKx91zLSw-5pKksK211lRasjV0FVqVj7NwJO2unIYgs"
        
    [/code]
    
    Which leads me to believe you've got some kind of wildcard TXT record set up. That shouldn't be necessary, you only need to have a TXT record for `_acme-challenge.mjva.burff.com`.
    
    So now you've got:
    [code] 
        mjva.burff.com.		360	IN	TXT	"_acme-challenge.mjva.burff.com TKx91zLSw-5pKksK211lRasjV0FVqVj7NwJO2unIYgs"
        
    [/code]
    
    (not used)
    
    and
    [code] 
        _acme-challenge.mjva.burff.com.	360 IN	TXT	"_acme-challenge.mjva.burff.com TKx91zLSw-5pKksK211lRasjV0FVqVj7NwJO2unIYgs"
        
    [/code]
    
    (the correct hostname, but the incorrect value of the TXT record)
    
    Which should be:
    [code] 
        _acme-challenge.mjva.burff.com.	360 IN	TXT	"TKx91zLSw-5pKksK211lRasjV0FVqVj7NwJO2unIYgs"
        
    [/code]
    
    Does this help you further?
      *[DCV]: Domain Control Validation

So @burffegqt replied

    i try to create _acme-challenge.mjva.burff.com. but i cant i open a ticket for help in the dns  
    thacks for your help
      *[DCV]: Domain Control Validation

After which, @schoen (Seth Schoen) added

    Some DNS providers do have trouble with names like this, but you can assure them that it's fully permitted by Internet standards and already used by some other Internet protocols! 
      *[DCV]: Domain Control Validation

Then @ahaw021 (Andrei Hawke) said

    hi @burffegqt
    
    as @Osiris pointed out a TXT DNS entry should look like
    
    image.png783×277 19.9 KB
    
    to verify it run nslookup -q=TXT name of challenge
      *[DCV]: Domain Control Validation

To which @Osiris replied

    As I said, there already _is_ a `_acme-challenge.mjva.burff.com` hostname, but just not with the correct contents.
    
    Perhaps you can do exactly as you did before, but now with the correct value of the TXT record (i.e., without the `_acme-challenge` in the _value_ of the record).
      *[DCV]: Domain Control Validation

To which @system (system) replied

    This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
      *[DCV]: Domain Control Validation


{'source': 'discourse', 'url': 'https://community.letsencrypt.org/t/dns-provider-not-allowing-txt-records-to-be-submitted-correctly-letsencrypt-validation-doesnt-pass/31201', 'title': "DNS Provider Not Allowing TXT Records to Be Submitted Correctly - LetsEncrypt Validation Doesn't Pass", 'views': 22226, 'has_accepted_answer': False, 'word_count': 565, 'like_count': 0, 'reply_count': 3, 'participant_count': 4, 'posts': 7, 'tags': '', 'author': '@burffegqt', 'participants': '@burffegqt, @Osiris, @schoen (Seth Schoen), @ahaw021 (Andrei Hawke), @system (system)', 'image_url': [None], 'created_at': '2017-04-02T21:24:47.250Z', 'last_posted_at': '2017-05-03T11:04:30.402Z'}