<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>SimpleACME certificate automation guides</title><link>https://simpleacme.com/blog</link><description>Practical ACME, HTTP-01, DNS-01 and delegated certificate automation guides.</description><language>en</language><item><title>One permanent CNAME for repeated certificate renewals</title><link>https://simpleacme.com/blog/permanent-cname-certificate-renewals</link><guid>https://simpleacme.com/blog/permanent-cname-certificate-renewals</guid><description>Understand how a fixed ACME challenge CNAME points to changing TXT authorization values, and how to preserve it across renewals and DNS migrations.</description><pubDate>Sun, 08 Nov 2026 11:18:34 +0000</pubDate></item><item><title>Wildcard certificates with one permanent challenge CNAME</title><link>https://simpleacme.com/blog/wildcard-certificates-one-cname</link><guid>https://simpleacme.com/blog/wildcard-certificates-one-cname</guid><description>Secure first-level subdomains using wildcard DNS-01 validation. Understand wildcard coverage, the apex name and permanent CNAME delegation with SimpleACME.</description><pubDate>Sun, 08 Nov 2026 11:18:34 +0000</pubDate></item><item><title>Troubleshoot DNS-01 certificate failures in the right order</title><link>https://simpleacme.com/blog/troubleshoot-acme-dns01</link><guid>https://simpleacme.com/blog/troubleshoot-acme-dns01</guid><description>Diagnose CNAME, authentication, DNS propagation, client and deployment failures separately. Use SimpleACME's TXT timeline as one part of the evidence.</description><pubDate>Sun, 08 Nov 2026 11:18:34 +0000</pubDate></item><item><title>Certificates for private services without opening port 80</title><link>https://simpleacme.com/blog/private-services-without-port-80</link><guid>https://simpleacme.com/blog/private-services-without-port-80</guid><description>Use public DNS validation for private dashboards, VPNs and management interfaces. SimpleACME removes the need for a public HTTP challenge endpoint.</description><pubDate>Sun, 08 Nov 2026 11:18:34 +0000</pubDate></item><item><title>Let's Encrypt without a DNS-provider API: one CNAME is enough</title><link>https://simpleacme.com/blog/lets-encrypt-without-dns-api</link><guid>https://simpleacme.com/blog/lets-encrypt-without-dns-api</guid><description>Keep your DNS provider and automate DNS-01 through a delegated challenge record. Learn what SimpleACME changes and what your ACME client still handles.</description><pubDate>Sun, 08 Nov 2026 11:18:34 +0000</pubDate></item><item><title>Windows certificates with win-acme and SimpleACME DNS-01</title><link>https://simpleacme.com/blog/win-acme-windows-dns01</link><guid>https://simpleacme.com/blog/win-acme-windows-dns01</guid><description>Prepare DNS-01 validation for IIS and Windows services using win-acme, a permanent CNAME and SimpleACME's account-specific update credentials.</description><pubDate>Sun, 08 Nov 2026 11:18:34 +0000</pubDate></item><item><title>Traefik DNS-01 with SimpleACME: prepare the account before renewal</title><link>https://simpleacme.com/blog/traefik-dns01-simpleacme</link><guid>https://simpleacme.com/blog/traefik-dns01-simpleacme</guid><description>Connect Traefik's ACME-DNS provider to an existing SimpleACME registration. Keep the challenge CNAME and persistent account storage ready for automatic renewals.</description><pubDate>Sun, 08 Nov 2026 11:18:34 +0000</pubDate></item><item><title>Certbot DNS-01 hooks without a DNS-provider API token</title><link>https://simpleacme.com/blog/certbot-dns01-hooks-simpleacme</link><guid>https://simpleacme.com/blog/certbot-dns01-hooks-simpleacme</guid><description>Use Certbot authentication hooks with a delegated SimpleACME challenge record. Separate TXT updates, propagation checks and certificate deployment.</description><pubDate>Sun, 08 Nov 2026 11:18:34 +0000</pubDate></item><item><title>Reduce DNS credential exposure in certificate automation</title><link>https://simpleacme.com/blog/secure-dns-validation-without-zone-api-keys</link><guid>https://simpleacme.com/blog/secure-dns-validation-without-zone-api-keys</guid><description>Compare full-zone tokens, scoped DNS credentials and delegated ACME challenge accounts. Learn where SimpleACME narrows the DNS write surface.</description><pubDate>Sun, 08 Nov 2026 11:18:34 +0000</pubDate></item><item><title>HTTP-01 vs DNS-01: choose the easier certificate workflow</title><link>https://simpleacme.com/blog/http-01-vs-dns-01</link><guid>https://simpleacme.com/blog/http-01-vs-dns-01</guid><description>Compare HTTP-01 and DNS-01 for public websites, private services and wildcard certificates. See when SimpleACME removes the DNS-provider API work.</description><pubDate>Sun, 08 Nov 2026 11:18:34 +0000</pubDate></item></channel></rss>
