Question: I have requested an SSL certificate from AWS and I opted for DNS validation. Now they are asking me to add a CNAME record to validate. They have provided me the following to be used:

```
Name: xxx.example.com.  [Host field on GoDaddy]
Value: xxx.acm-validations.aws. [Points to field on GoDaddy]
Type: CNAME

```

Now whenever I provide this using GoDaddy DNS interface, it throws an error saying for 'Points to' field:

> 
> Enter either @ or a valid host name such as: `subdomain.example.tld`
> 
> 
> 

Did anyone encounter this issue on GoDaddy DNS entries?

Answer: 
I would like to share with you how I figured it out.

It may not fit for all but it may help some people.

The steps are:

1. Go to your AWS account.

Go to **AWS certificate manager** and **Request a public certificate** using **DNS**

After that you will have this screen:
[![](https://i.stack.imgur.com/HraMU.png)](https://i.stack.imgur.com/HraMU.png)

On the **Domain Name** enter your domain **without www**
For example `example.com` **(NOT `www.example.com`)**

After the above steps you will see this screen:

[![](https://i.stack.imgur.com/NIb0e.png)](https://i.stack.imgur.com/NIb0e.png)

**Now you have Name & Value.**

Go to your Godaddy account and select the domain you have entered at the last section.

Go to the DNS section.

Create CNAME record like this:
[![](https://i.stack.imgur.com/0nMQw.png)](https://i.stack.imgur.com/0nMQw.png)

Now is the important part...

The Host will receive the AWS certificate manager's Name, BUT **just the prefix**, for example:

AWS name:

```
_904706782abb3d16301321f28db53e03.example.com.

```

You should grab just this `_904706782abb3d16301321f28db53e03` for godaddy's Host name.
For the "points to" (on your GoDaddy account) input, you should grab the value of the AWS certificate manager.
For example:

```
_0ba986089fff81c1b4f395a2ea75f42e.hkvuiqjoua.acm-validations.aws

```

By the way, the value comes with a dot at the end, GoDaddy will remove the dot at the moment you click enter.
for example:

`_0ba986089fff81c1b4f395a2ea75f42e.hkvuiqjoua.acm-validations.aws.` will become to

```
_0ba986089fff81c1b4f395a2ea75f42e.hkvuiqjoua.acm-validations.aws

```

Finally, it should look like this:

[![](https://i.stack.imgur.com/5YVfb.png)](https://i.stack.imgur.com/5YVfb.png)
Check out [this document](https://aws.amazon.com/premiumsupport/knowledge-center/acm-certificate-pending-validation/?nc1=h_ls) to verify your DNS status:

> 
> To confirm that the CNAME record was added to correctly to your DNS configuration, run a command similar to the following:
> 
> 
> Note: Replace example-cname.example.com with your ACM CNAME record.
> 
> 
> 

```
Linux and macOS:

dig +short _example-cname.example.com
Windows:

nslookup -type=ns example.com

```

> 
> The command returns the CNAME record’s value in the output if the CNAME record was added to the correct DNS configuration and then propagated successfully.
> 
> 
>