FlyingCDN uses DNS-01 challenge to issue and renew wildcard SSL certificates. This requires a special DNS record: _acme-challenge
As long as this CNAME record is correctly set and remains in place, SSL certificates will renew automatically - no manual action needed.
Why it matters
If the _acme-challenge record is missing or misconfigured, SSL renewals will fail, and your site may show security warnings.
What about your server’s SSL?
We recommend using the HTTP-01 challenge for SSL on your origin server. FlyingCDN automatically bypasses /.well-known/ paths to allow this.
Troubleshooting tips
Ensure the
_acme-challengeCNAME is set for FlyingCDN.Don’t use wildcard SSL on your server; use standard HTTP-01 instead.
There’s no need to point DNS to your server IP - only the
_acme-challengematters for FlyingCDN’s SSL.