not working when domain has multiple depths

[divinespear]

(before start, excuse my bad english...)

I'm trying to get certificate for domain below (example):

dnsNames:
  - your.duckdns.org
  - '*.your.duckdns.org'
  - '*.gitpod.your.duckdns.org'
  - '*.ws.gitpod.your.duckdns.org'

and error shown by cert-manager (example):

2022-02-15T12:11:01.505Z | E0215 12:11:01.505372 1 sync.go:186] cert-manager/challenges "msg"="propagation check failed" "error"="DNS record for \"ws.gitpod.your.duckdns.org\" not yet propagated" "dnsName"="ws.gitpod.your.duckdns.org" "resource_kind"="Challenge" "resource_name"="your.duckdns.org-btcvt-1773227831-1756335070" "resource_namespace"="cert-manager" "resource_version"="v1" "type"="DNS-01"

and cert-manager-webhook-duckdns logs (example):

2022-02-15T11:00:56.106Z | I0215 11:00:56.106484 1 solver.go:85] DNSName from ChallengeRequest is ws.gitpod.your.duckdns.org
2022-02-15T11:00:56.106Z | I0215 11:00:56.106531 1 solver.go:97] Got dns domain from challenge ws.gitpod.your
2022-02-15T11:00:56.106Z | I0215 11:00:56.106545 1 solver.go:135] Present txt record for domain ws.gitpod.your
2022-02-15T11:00:56.106Z | I0215 11:00:56.106561 1 client.go:105] Sending request to https://www.duckdns.org/update?domains=ws.gitpod.your&token=*********&txt=lsCpoxWvM7QIvsjDehu9PDwCpzgVAnc4TbudkDs3P1g
2022-02-15T11:00:57.334Z | I0215 11:00:57.334610 1 solver.go:142] Presented txt record _acme-challenge.ws.gitpod.your.duckdns.org.

I know TXT records for duckdns should be set on my root domain (in example your) always, but in this case trying to subdomain (in example ws.gitpod.your).

[divinespear]

oops... auto closed by wrong comment...