diff --git a/dnsapi.md b/dnsapi.md
index 920845da..f7a0b448 100644
--- a/dnsapi.md
+++ b/dnsapi.md
@@ -726,11 +726,11 @@ The `Dynu_ClientId` and `Dynu_Secret` will be saved in `~/.acme.sh/account.conf`
 
 First you need to login to your DNSimple account and generate a new oauth token.
 
-https://dnsimple.com/a/{your account id}/account/automation
+`https://dnsimple.com/a/{your account id}/account/automation`
 
-Note that this is an _account_ token and not a user token. The account token is
-needed to infer the `account_id` used in requests. A user token will not be able
-to determine the correct account to use.
+Note that this is an _account_ token and not a user token.
+The account token is needed to infer the `account_id` used in requests.
+A user token will not be able to determine the correct account to use.
 
 ```sh
 export DNSimple_OAUTH_TOKEN="<token>"
@@ -765,14 +765,18 @@ Ok, let's issue a cert now:
 
 ## 27. Use DuckDNS.org API
 
+[DuckDNS.org](https://www.duckdns.org/) is a popular free DDNS provider.
+You can get your own subdomain like `mydomain.duckdns.org`.
+
+To configure it visit the DuckDNS and get your API token:
+
 ```sh
 export DuckDNS_Token="<token>"
 ```
 
-Please note that since DuckDNS uses StartSSL as their cert provider, thus
---insecure may need to be used when issuing certs:
+Ok, let's issue a cert now:
 ```
-acme.sh --insecure --issue --dns dns_duckdns -d mydomain.duckdns.org
+acme.sh --issue --dns dns_duckdns -d mydomain.duckdns.org -d *.mydomain.duckdns.org
 ```
 
 
@@ -844,7 +848,7 @@ export PDD_Token="<token>"
 
 Follow these instructions to get the token for your domain https://tech.yandex.com/domain/doc/concepts/access-docpage/
 ```sh
-./acme.sh --issue --dns dns_yandex -d mydomain.example.org
+./acme.sh --issue --dns dns_yandex -d mydomain.example.org -d *.mydomain.example.org
 ```
 
 Sometimes cloudflare / google doesn't pick new dns records fast enough. You can add `--dnssleep XXX` to params as workaround.