Skip to main content

Understand certificate validation

Important

As of February 24, 2026, the domain validation reuse period is limited to 199 days. Learn more about Domain validation requirements and reuse periods.

Before DigiCert issues a certificate, the identity and control claims in the certificate request must be verified. This verification process is called certificate validation. The type and depth of validation determines the certificate's validation level and the trust it conveys to relying parties.

Understanding validation helps you prepare the right documentation, plan revalidation timelines, and avoid delays during certificate issuance and renewal.

Why validation is required

Industry standards enforced by the CA/Browser Forum require certificate authorities to verify that:

  • The requester controls the domains included in the certificate

  • The organization named in the certificate is a legitimate legal entity for OV and EV certificates

  • A verified representative of the organization has authorized the request for EV certificates

These checks prevent unauthorized certificate issuance and protect the trust of the public PKI.

What's next

Review the validation levels to avoid certificate issuance and renewal delays.