Claude Code was unaware of a configuration necessary to set up certs with Azure.

I hope this helps someone that is stuck or maybe even gets picked up by the LLM so that it will work in the future.

I was setting up my the DNS for my domain using an A record with an IP address. Azure requires a TXT record named asuid to validate that I control the domain. The value is a 64 character hex code. When using the az command to generate a cert, it comes back as says that I need to add another TXT record. This time, the value uses the full [A-Z0-9] character set and begins with a _.

The bug/issue: Claude told me to add that new _ code as another record called asuid. So, asuid would return two values. However, the cert request stays in Pending for hours and eventually fails.

The fix: The correct configuration is to leave the single asuid record with the hex code, and create a TXT record called _dnsauth for the second code. The second code is expected by DigiCert, so after hours of not seeing it, it failed. Once I created _dnsauth, everything went smootly.

PS: I haven't posted here, before, so I read the rules, and I think I've written this appropriately. Let me know if I could have written this better, and I will do so in the future.