SSL Certificate Creation Help

[Keshavi15]

Hi there, I am trying to run a project using xera. Have tested, working fine. Got stuck at SSL Certificate generation for subdomain users. I tried with GoGetSSL, ZeroSSL, Lets Encrypt and Google Trust Services. All of them are generating, CSR Code, Record Name, Record Type & Record Content. But the problem is: ifasNet do not let acme_challange via folder .well-known and a sub-domain user do not have access to domain DNS setup. How can they pass acme_challange to get SSL certificate?
Secondly, I am not expert in command line, so SSL API setting for GoGetSSL, ZeroSSL & Lets Encrypt in xera are straight forward. But with google turst services, its a headache for me, tried on Google Cloud SDK Shell and generated MacKey and KeyId but not full confident. Used these keys and applied https://acme-v02.api.letsencrypt.org/directory as Directory URL under Google Trust Setting in Xera, tested for subdomains generating CSR Code, Record Name, Record Type & Record Content. If anyone can advice me or have any youtube tutorial to do that will be great. Tried to find on YT but unable. TIA

[greenreader9]

You need to use the CNAME / DNS verification option.

https://letsencrypt.org/docs/challenge-types/

[Keshavi15]

Yes, while ordering SSL from GoGetSSL, within xera system we get Record Name, Record Type: CNAME and Record Content : validation-code. It's working. But Let's Encrypt returning Record Type: TXT. How can I use CNAME? Is Record Type: TXT is same to CNAME for acme_challange?

To order SSL from Google Trust, is acme directory URL : https://dv.acme-v02.api.pki.goog/directory right to put on xera API setting. This is returning "An Error Was Encountered
The action you have requested is not allowed." So, facing big challenges.