Add a domain and validate it using HTTP practical demonstration
Add a domain to CertCentral and validate is using the HTTP practical demonstration DCV method
Add a domain and demonstrate control over the domain by hosting a file containing a DigiCert-generated random value (provided for the domain in your CertCentral account) at a predetermined location on your website: http://{domain-name}/.well-known/pki-validation/fileauth.txt.
After you've created the file and placed it on your site, DigiCert visits the specified URL to confirm the presence of your unique random value. Make sure to avoid the Common mistakes: HTTP practical demonstration DCV method.
Important
Only use the HTTP Practical Demonstration DCV methods to demonstrate control over fully qualified domain names (FQDNs) exactly as named. To learn more, visit Domain Validation Policy Changes.
Use one of the other supported DCV methods, such as email, DNS TXT, and CNAME, to prevalidate entire domains and subdomains.
Before you begin
When you add a domain to your account, you must assign the domain to an organization in your account. However, before assigning a domain to it, you must first add the organization to your account. See Add an organization to your CertCentral account.
Additionally, if you want the domain used for OV, EV, or Private TLS/SSL certificates, you must submit its organization for prevalidation and include those matching validation types. See Submit an organization for pre-validation.
Step I: Add a domain and select HTTP practical demonstration as the DCV method
In your CertCentral account, to the the Domains page.
In the left main menu, go to Certificates > Domain.
On the Domains page, select New Domain.
On the New Domain page, under Domain Details, enter the following domain information:
Domain name
Enter the domain you want to prevalidate.
Organization
In the dropdown, select the organization you want to assign the domain to.
Under Domain Control Validation (DCV) method, select HTTP Practical Demonstration.
When ready, select Submit for validation.
Step II: Use HTTP practical demonstration to demonstrate control over the domain
On the domain's details page, in the Domain control validation (DCV) method section under User actions, do the following:
Create your .txt file and add the DigiCert-provided random value.
Open a text editor (e.g., Notepad).
In the Your unique verification token box, copy your token and paste the random value in text editor.
The random value expires after 30 days.
Save the .txt file under this name: fileauth.txt.
Create the .well-known/pki-validation/ directory on your site.
For Windows-based servers, the
.well-known
folder must be created via command line (mkdir .well-known
).
Place the fileauth.txt file on your site under .well-known/pki-validation.
The URL should look something like this:
http://[yourdomain]/.well-known/pki-validation/fileauth.txt
Complete the domain validation.
In your CertCentral account, in the left main menu, go to Certificates > Domains.
On the Domains page, in the Domain name column, select the domain link.
On the domain's details page, in the Domain control validation (DCV) method section under User actions select Check HTTP Token.