Add a domain to CertCentral and demonstrate control over the domain by creating a DNS TXT record that includes a DigiCert-generated random value. After you create the DNS TXT record, DigiCert searches the domain's DNS records to confirm the presence of the random value.
First, you must have at least one organization in your account. Before adding domains to your account, you must assign them to an organization in your CertCentral account. See Add an organization to your CertCentral account.
Additionally, you must submit the organization for organization validation to use the domain in OV, EV, or Private TLS/SSL or Secure Email certificates. See Submit an organization for validation.
Once you have an organization, add a domain to the account and assign it an organization.
In CertCentral, in the left main menu, go Certificates > Domains.
On the Domains page, select New Domain.
On the New Domain page, under Domain Details, enter the following domain information:
Domain Name
In the box, enter the domain you want to validate.
Organization
In the menu, select the organization to want to assign the domain to.
Under Domain control validation (DCV) method, select DNS TXT Record.
When ready, select Submit for validation.
On the domain's details page, in the Domain control validation (DCV) method section under User actions, in the Your unique verification token box, copy the verification token.
The unique verification token expires after 30 days. To generate a new token, select the Generate New Token link.
Create your DNS TXT record:
Go to your DNS provider’s site and create a new TXT record.
For more detailed instructions for creating or updating a DNS TXT record, try the following resources:
Your DNS provider's documentation
DigiCert knowledge base for articles like these:
In the TXT Value field, paste the verification code you copied from your CertCentral account.
Concerning the Host field:
Base domain: (yourdomain)
Leave the Host field blank or use the @ symbol (depending on your DNS provider requirements)..
Subdomain: (sub.yourdomain)
In the Host field, enter the subdomain that you are validating.
In the record type field (or equivalent), select TXT.
Select a Time-to-Live (TTL) value or use your DNS provider's default value.
Save the record.
Complete domain validation
In CertCentral, in the left menu, go to Certificates > Domains.
On the Domains page, in the Domain name column, select the domain link.
On the domain’s detail page, in the Domain control validation (DCV) method section under User actions, select Check TXT.