Find the random value for your domain in CertCentral to finish the domain validation
Follow these instructions to get your domain’s random value. Use it to validate your domain with the DNS TXT Record, DNS CNAME Record, or HTTP Practical Demonstration domain control validation (DCV) method.
Before you begin
Demonstrating control over domains on DV, OV, and EV TSL/SSL certificate orders
When ordering a domain validated (DV), organization validated (OV), or extended validated (EV) TLS certificate, you add domains and select the DCV method. If you select the DNS TXT Record, DNS CNAME Record, or HTTP Practical Demonstration DCV method, you need a DigiCert-generated random value to validate the domains on your order.
To find the random value, go to the DV, OV, or EV TLS certificate’s order details page. Use this random value to validate any domain in the order. See the Find the random value on your pending TLS certificate’s Order details page section in this article.
Validating domains before ordering certificates (domain pre-validation)
When you pre-validate a domain, add it to CertCentral, and then select the DCV method. If you select the DNS TXT Record, DNS CNAME Record, or HTTP Practical Demonstration DCV method, you need a DigiCert-generated random value to validate the domain. DV certificates don’t support domain pre-validation.
To find the random value, go to the domain’s details page. Use the value from this page to validate just this domain. See the Find the random value on the domain’s details page section in this article.
Random values expire after 30 days
When you use the DNS TXT Record, DNS CNAME Record, or HTTP Practical Demonstration DCV method, DigiCert generates a random value for you to use to validate your domain. The random value expires after 30 days. How you get a new value depends on where you validate the domain:
Certificate orders: If domain validation isn’t complete, DigiCert automatically generates a new random value for the order every 30 days. Copy the new value from the order’s details page.
Domain pre-validation: DigiCert doesn’t replace the value for you. To get a new value, on the domain’s details page, select the Generate New Token link.
If your random value doesn’t work, check whether it has expired or been replaced.
Using the random value with the DNS CNAME Record DCV method
For the DNS CNAME Record DCV method, add “.dcv.digicert.com” directly to the end of your DigiCert-generated random value, then enter the complete value in your CNAME record. For example: _bs4fk5mhaqwf3902xevxvx.dcv.digicert.com
Find the random value on your pending TLS certificate’s order details page
In the CertCentral main menu, do one of the following:
For Enterprise and Partner accounts: go to Certificates > Orders.
For Subscription accounts: go to My Digital Trust Products > Certificates.
From the Order # column, select the certificate's order number link.
On the certificate’s Order # details page, on the Details tab, under What do you need to do, select the domain for which you need the random value.
In the Prove control over your domain window, copy the DigiCert-generated random value (referred to as order token).
The random value expires 30 days after you submit the order. DigiCert automatically generates a new random value every 30 days until domain validation is complete.
Find the random value on the domain’s details page
In the CertCentral main menu do one of the following:
For Enterprise and Partner accounts: go to Certificates > Domains.
For Subscription accounts: go to Validation > Domains.
On the Domains page, select the domain for which you need the random value.
On the domain’s details page, in the Domain control validation (DCV) method section, under Your unique verification token, copy the DigiCert-generated random value.
The random value expires 30 days after you submit the domain for validation. If it expires before you finish domain validation, select the Generate New Token link on the domain’s details page to get a new value.
What’s next
To validate a domain that you added on the Domains page (domain pre-validation), use the article for your DCV method:
DNS TXT Record: Add and validate a domain using DNS TXT record
DNS CNAME Record: Add and validate a domain using DNS CNAME record
HTTP Practical Demonstration: Add and validate a domain using HTTP Practical Demonstration
HTTP Practical Demonstration with a unique filename: Add and validate a domain using HTTP Practical Demonstration with a unique filename
To validate the domains on a pending TLS certificate order, use the article for your certificate type:
Troubleshooting
Why isn’t the random value always the same for a domain?
DigiCert generates random values in two places, and each works differently:
Pending orders: CertCentral generates one random value for all the domains in the order. Use it to validate any domain in that order.
Domains page: CertCentral generates a unique random value for each domain. Use it to validate just that domain.
When you order an OV or EV certificate, CertCentral adds new domains from the order to the Domains page, where each domain gets its own random value. As a result, a domain can have one random value on the order and a different one on its details page. DV certificates don’t support domain pre-validation, so CertCentral doesn’t add domains from DV orders to the Domains page.
DigiCert also generates a new random value for each separate validation event. For example:
You submit the domain for validation (pre-validation process) and then order an OV or EV TLS certificate for the domain.
You order another OV or EV TLS certificate for the domain and include a different organization name.
You order DV and OV TLS certificates for a domain.
Notice
Note: Industry standards don’t allow organizations to share domain validations. Domain validation applies just to the organization the domains are assigned to.
Can I use any of the random values for my domain?
Yes, if the random values are for the same organization. Domain validations can’t be shared across organizations, so a random value works just for the organization it was generated for.
Same organization: All the random values are valid. Use any one of them to finish domain validation.
Different organizations: Use the random value generated for the organization on your order or domain. Finishing validation for one organization doesn’t validate the domain for another one.