Perform domain control validation (DCV)
Before DigiCert issues a certificate, you must demonstrate control over the fully qualified domain names or IP addresses included in your request. This process is called domain control validation (DCV).
Per TLS certificate baseline requirements, certificate authorities must verify requester control of all certificate domains and IP addresses before issuance.
You can complete domain validation:
Before ordering a certificate by using domain pre-validation
During a pending certificate order
As part of an Automated Certificate Management Environment (ACME) workflow
DigiCert supports the following DCV methods:
Email verification: Email to DNS TXT record contact, Email to DNS CAA record contact, and Constructed Email
Persistent DNS TXT record, DNS TXT record, and CNAME record
HTTP Practical Demonstration and HTTP Practical Demonstration with unique file name
ACME HTTP-01 and DNS-01 challenges
Notice
Domain validation reuse rules vary by certificate type. Organization-validated (OV) and extended validation (EV) certificates support reuse within the allowed period. Domain validation (DV) certificates require validation during each order and don't support reuse.
This chapter explains how to:
Select a supported domain control validation method
Validate domains before or during certificate orders
Complete validation for OV, EV, and DV certificates
Resolve common configuration issues that prevent validation