Industry standards change: End of 2-year public SSL/TLS certificates
On August 27, 2020, at 6:00 PM MDT (August 28 at 00:00 UTC), DigiCert stopped issuing public DV, OV, and EV SSL/TLS certificates with a maximum validity greater than 397 days. To learn more about this change, see End of 2-year DV, OV, and EV public SSL/TLS certificates.
To maximize your SSL/TLS coverage, purchase your new certificates with a DigiCert® Multi-year Plan. For more information about these plans, see Multi-year Plans.
Select the DV Certificate you want to order
In your CertCentral account, in the left main menu, hover over Request a Certificate, and then under DV certificates, select GeoTrust DV SSL.
Add Your CSR
We take the common name included in your CSR and add it to the Common name box.
On the Request GeoTrust DV SSL Certificate page, in the Certificate Details section, upload your CSR to or paste it in the Add Your CSR box.
When copying the text from the CSR file, make sure to include the
-----BEGIN NEW CERTIFICATE REQUEST----- and
-----END NEW CERTIFICATE REQUEST----- tags.
Common name / SANs
When you add the CSR to the order form, we take the common name and SANs included in your CSR and add them to the Common Name / SANs box.
Add and remove fully qualified domain names (FQDNs) and wildcard domains as needed so the certificate will secure the domains you want.
How long do you need to protect your site?
To modify the validity period for the first TLS certificate in your order, under Certificate Validity, select the pencil icon. You can select 1 year, Custom expiration date, or Custom length.
Industry standards dictate that the maximum validity period for all public SSL/TLS certificates is 397 days (approximately 13 months).
To set up automatic reissue for this certificate order, check Auto-reissue. With auto-reissue enabled, a reissue certificate request will be automatically submitted when this certificate nears its expiration date.
Note: DV certificates don't support domain prevalidation, so we can't reuse the order's domain validation. After we submit your GeoTrust DV SSL certificate request, you must demonstrate control over the domains on the reissue request before we can issue your new certificate.
Prove control over your domain
Before DigiCert can issue your DV certificate, you must demonstrate control over the domain in your certificate order. To learn more about the available DCV methods, see Domain Control Validation (DCV) methods.
In the Domain control validation (DVC) method dropdown, select the DCV method you want to use to demonstrate control over the domain on the certificate order.
After submitting your certificate order, you can change the DCV method from the certificate's Order # details page. In the left main menu, go to Certificates > Orders. On the Orders page, in the Order # column, select the DV certificate order's number link.
Although you can switch DCV methods, you must use the same DCV method for every domain on the order.
If you selected the Verification Email DCV method to validate the domain on your DV certificate order, in the dropdown, select the language in which you want your DCV authentication email sent.
Adding a technical contact to your DV certificate order is optional. However, we recommend adding at least one individual to contact if problems arise with the certificate order process.
Notes and Certificate Renewal Message
Adding notes and a certificate renewal message to your corticate order is optional.
Comments and renewal messages are not included in the certificate.
Enter the email addresses (comma separated) for the people you want to receive the certificate notification emails, such as certificate issuance, certificate reissues, and certificate renewals.
Select Payment Method
Under Payment Information, select a payment method to pay for the certificate:
The Deposit link takes you to another page inside your CertCentral account. Any information entered in the request form is lost.
Read through the agreement and check I agree to the Master Services Agreement.
When ready, select Submit certificate request.
Demonstrate control over the domains on your order
Before we issue your certificate, you must complete the domain validation on the order. See Domain Control Validation (DCV) methods.