UI doesnt' allow to create a certificate for the zone apex

[kharasim]

Describe the bug
UI doesnt' allow to create a certificate for the zone apex

To Reproduce
Steps to reproduce the behavior:

1. Go to certbot portal
2. Click on 'add'
3. From 'Add certificate' field it is not possible to add empty record name.

Environment (please complete the following information):

• Certificate Type: Zone Apex

Additional context
From question #111 it should be possible by adding an empty record name but if DNS Zone is not picked DNS Names field is grayed out.

When attempting to create empty record in present DNS Zone

This is our test domain structure:
example.com <- this is where we cannot add certificate
sub1.example.com <- those are visible as DNS Zones in UI, we can create certificates there
sub2.example.com <- those are visible as DNS Zones in UI, we can create certificates there

[shibayan]

You must select a DNS zone. If the DNS zone does not appear in the drop-down list, there is an error in the configuration. Please check the configuration.

[kharasim]

Hi shibayan,

DNS zones are available but they are not a zone apex:

Also, we are using custom DNS provider, certificates works fine for those zones but zone apex domain is not visible.

[shibayan]

I think the reason is that the custom DNS provider is not returning the zone apex domain. Please check the implementation of the custom DNS provider.

[FunLow]

Im currently trying to implement a similiar approach using the custom dns provider and im also a bit confused what its supposed to look like. e.g.

I have a DNS zone example.com so my DNS Server is returning example.com and i can create mydomain.example.com, anotherdomain.example.com entries just fine. But what about the example.com domain itself ?
If i want to select it without entering a DNS Name for it i get the same error posted by the OP. Should suddenly appear a ".com" DNS Zone in that case ?
Im a bit confused how this is supposed to work like that. You have exactly the example im talking about in the Documentation

From Implementation perspective im exactly doing this but the UI doesn't allow me to create the Domain apex record because as mentioned it tells me to specify a Dns name. My expectation would be to check some kind of checkbox "Zone apex" or simply allowing the dns name to be empty to create the necassary certificate.