Skip to main content

Use Email verification to verify domain control on an OV or EV TLS certificate

Use these instructions to demonstrate control over a domain on a pending OV or EV TLS certificate order using the Email domain control validation (DCV) method.

Important

End of life for the WHOIS-based email

The industry is moving away from using WHOIS to identify domain contacts. DigiCert recommends that those using the WHOIS-based Email DCV method update their domain validation processes to use one of the other supported DCV methods as soon as possible.

Before you begin

With the Email domain control validation (DCV) method, DigiCert sends three sets of DCV emails: DNS TXT-based, constructed, and WHOIS-based.

To demonstrate control over the domain, an email recipient follows the instructions in a confirmation email sent for the domain:

  • DigiCert sends this email from no-reply@digitalcertvalidation.com. If using allowlist, make sure to include digitalcertvalidation.com.

  • The confirmation process consists of visiting the link in the email and following the instructions on the page.

To learn more about the different email DCV methods, such as email to DNS TXT contact, constructed, and WHOIS-based, see Supported DCV methods for validating the domains on OV/EV TLS/SSL certificate orders.

Validate domains in your CertCentral account

CertCentral has a domain validation process that allows you to add and validate your domains separate from the ordering, renewing, duplicate issuing, or reissuing process. For faster certificate issuance, validate domains before requesting OV/EV TLS certificates. To learn more about this domain validation process, see Supported DCV methods for validating domains in your CertCentral account.

Use Email verification to demonstrate control over a domain on an OV/EV TLS certificate

  1. In your CertCentral account, go to the certificate's Order # details page.

    1. In the left menu, go to Certificate > Orders.

    2. On the Orders page, in the Order # column, select the OV or EV TLS certificate's order number link.

  2. On the Order # details page, in the Certificate status section, review the certificate's status to see if issuance is waiting for domain or organization validation to be completed.

    After validation is complete, the Certificate status section no longer appears on the Order # details page.

  3. Under What do you need to do, select the domain's link you want to validate.

  4. In the Prove control over domain window, in the Domain control validation (DCV) method menu, select Verification email and then select Save.

  5. In the Select the email language menu, select the language for the confirmation email sent for the domain.

  6. Under Select the authorization email recipients, select the email addresses you want the confirmation email sent to.

  7. Select Resend Email.

What's next

DigiCert sends the verification email from no-reply@digitalcertvalidation.com to the addresses you selected. The email subject line is [Action Required] Approve Certificate Request for [yourdomain] {Order #}.