From f769f3a1a013410ddda94bb7df630f33b41c14f7 Mon Sep 17 00:00:00 2001 From: Fang-Pen Lin Date: Thu, 11 Dec 2025 15:52:26 -0800 Subject: [PATCH] Use note instead --- docs/documentation/platform/pki/enrollment-methods/acme.mdx | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/documentation/platform/pki/enrollment-methods/acme.mdx b/docs/documentation/platform/pki/enrollment-methods/acme.mdx index d9861529f..28561e0d2 100644 --- a/docs/documentation/platform/pki/enrollment-methods/acme.mdx +++ b/docs/documentation/platform/pki/enrollment-methods/acme.mdx @@ -26,12 +26,14 @@ In the following steps, we explore how to issue a X.509 certificate using the AC ![pki acme config](/images/platform/pki/enrollment-methods/acme/acme-config.png) + By default, when your ACME client attempts to get a certificate issued with the certificate profile, the Infisical ACME server will verify your domain ownership. Currently only HTTP-01 is supported. If you want to skip the domain validation process, please check the `Skip DNS Ownership Validation` checkbox. However, please note that we can only skip the DNS validation for certificate issuance requests from your ACME client to our Infisical ACME server. If you are using a third-party ACME external Certificate Authority as the source of certificate issuance, that external CA may still require domain ownership validation. Please read the [document for external ACME CA](/documentation/platform/pki/ca/acme-ca) to learn more. +