# Generate SAN SSL with Plesk provider - error: 1013 **URL:** \ **Category:** Traefik v3 (latest)\ **Tags:** letsencrypt-acme\ **Created:** [December 31, 2024, 7:16pm UTC](https://community.traefik.io/t/generate-san-ssl-with-plesk-provider-error-1013/25810 "2024-12-31T19:16:37Z")\ **Posts on this page:** 1\ **Showing post:** 2
**Author:** ![imrelaszlo84](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/imrelaszlo84/32/9764_2.png) [@imrelaszlo84](https://community.traefik.io/u/imrelaszlo84)\ **Post date:** [December 31, 2024, 8:02pm UTC](https://community.traefik.io/t/generate-san-ssl-with-plesk-provider-error-1013/25810/2 "2024-12-31T20:02:53Z")
After switch to DEBUG level log, I've found some related issues: > [@Traefik cannot issue certificate for CNAMEd wildcard domain](https://community.traefik.io/t/traefik-cannot-issue-certificate-for-cnamed-wildcard-domain/19304): > > All IPs and domains are anonymized. In a nutshell: I have a domain in Cloudflare called example.com I have a kubernetes cluster with a cloudprovider This cloudprovider handles my LoadBalancer and provides a DNS name for it The DNS name is 1.2.3.4.haip.cloudprovider.net I created a wildcard CNAME record: \*.example.com CNAME 1.2.3.4.haip.cloudprovider.net I created a deployment called 'whoami' with a hostname of whoami.example.com I request a certificate using Traefik with the Cloudflare A… > [@Purpose of LEGO\_DISABLE\_CNAME\_SUPPORT](https://community.traefik.io/t/purpose-of-lego-disable-cname-support/18829/3): > > @Idez Thanks! I know the difference between A and CNAME, but I'm not an expert like you... smiley The log error is acme: error presenting token: gandiv5: no subdomain because the domain and the zone are identical: My zone file is "typical". Why is this not a problem for other people - is it maybe because of Gandi specifically? I had similar config with other dns providers (e.g. digitalocean, ovh, linode) but never had this weird problem. I wonder whether the problem is the provider, or i… If I add LEGO\_DISABLE\_CNAME\_SUPPORT: true as environment variable, the SSL certificate still not generated, but the error message changed: > 2024-12-31T19:58:11Z ERR Unable to obtain ACME certificate for domains error="unable to generate a certificate for the domains [portal.subdomainDOTmydomainDOTcom proxy.portal.subdomainDOTmydomainDOTcom _.proxy.portal.subdomainDOTmydomainDOTcom]: error: one or more domains had a problem:\n[portal.subdomainDOTmydomainDOTcom] [portal.subdomainDOTmydomainDOTcom] acme: error presenting token: plesk: failed to add record: error: 1007 - DNS record '\_acme-challenge.portal.subdomainDOTmydomainDOTcom. IN TXT KTx3lYJqwRW73OiB8AWEmyqHme145pPsAJs6l3MFdLY' already exists.\n" ACME CA=[https://acme-v02.api.letsencrypt.org/directory](https://acme-v02.api.letsencrypt.org/directory) acmeCA=[https://acme-v02.api.letsencrypt.org/directory](https://acme-v02.api.letsencrypt.org/directory) domains=["portal.subdomainDOTmydomainDOTcom","proxy.portal.subdomainDOTmydomainDOTcom","_.proxy.portal.subdomainDOTmydomainDOTcom"] providerName=leresolver-dns-plesk.acme routerName=myservice-https@file rule=Host(`portal.subdomainDOTmydomainDOTcom`) --- _[View the full topic](https://community.traefik.io/t/generate-san-ssl-with-plesk-provider-error-1013/25810)._