Skip to main content

Automatic domain validation with UltraDNS

Integrate CertCentral with UltraDNS, DigiCert’s managed DNS service, to automate domain control validation (DCV) and keep your domain validations up to date.

Industry requirements are shortening how long you can reuse domain validation for public TLS certificates. For the DNS TXT record, DNS CNAME record, email, and HTTP practical demonstration DCV methods, DigiCert’s domain validation reuse period is now 199 days. It drops to 99 days in early 2027 and 9 days in early 2029. For details, see Domain validation reuse period reduction schedule.

Keeping domain validations current helps prevent validation delays when issuing certificates that require domain validation, including:

  • OV and EV TLS

  • Verified Mark Certificate (VMC) and Common Mark Certificate (CMC)

  • Secure Email for Organization and Secure Email for Employee

  • Qualified Website Authentication Certificate (QWAC) and QWAC PSD2

  • PKIo Private Services Server

  • X9 PKI for TLS

Notice

Note: DV certificates don’t support domain prevalidation. Each DV TLS certificate order requires new domain validation, even if the domain was validated moments earlier or is already validated through the UltraDNS integration.

UltraDNS automatic domain validation features

DNS TXT record DCV method automation

CertCentral automatically adds a DNS TXT record in UltraDNS with the DigiCert-generated random value required for DNS TXT validation. CertCentral removes the record when validation completes.

Continuous domain validation

CertCentral repeats this domain validation process every seven days, helping prevent expired domain validations from delaying certificate issuance.

CertCentral validates just the domains you import from UltraDNS and automate. Each domain is validated exactly as it appears on the Domains page.

In this section

Before you start, review the requirements in the Connect UltraDNS to CertCentral instructions.

Not using UltraDNS?

Interested in using or switching to UltraDNS? Contact your account manager.

Need help?

I don't see the Integrate with UltraDNS menu option in CertCentral.

If you use UltraDNS but don’t see Integrate with UltraDNS under Automation in the left menu, contact your account manager or DigiCert Support to enable the feature for your account.