Okta Custom Domain Certificate Renewal Limits When DNS Records Change
Okta provisions and manages the TLS certificate for a custom sign-in domain automatically once the domain's CNAME record validates, so administrators do not upload their own certificate in the standard flow. What is less clear is which DNS conditions must remain in place afterward for certificate renewal to keep succeeding. Initial issuance depends on public
okta