so, that's with using DNS validation? this is for a wildcard btw... they didn't have the option of validation from a server and the options were a long list of servers that i would never use lol... i generated the CSR using the nodejs openssl package