Skip to main content

Domain validation behavior for DV certificates

DV certificate validation differs from OV and EV validation in several important ways.

No validation reuse

Each DV certificate order requires domain validation. Previously validated domains cannot be reused and validation must be completed for every new order, renewal, and reissue.

No prevalidation

Domain prevalidation is not supported for DV certificates. Validation must be completed as part of the order process.

Single DCV method per order

With DV certificate orders, you must use one DCV method to validate all domains on the order.

Method restrictions

The following DCV methods are not supported for DV certificates:

  • HTTP Practical Demonstration with unique filename

  • ACME HTTP-01 for IP address validation

No IP address validation via ACME

If the certificate includes an IP address, you must use HTTP Practical Demonstration to validate it. If the certificate includes a wildcard domain, you cannot use HTTP Practical Demonstration to validate it. DigiCert recommends that you do not include wildcard domains and IP addresses on the same DV certificate.

For details about validation periods and reuse rules across all certificate types, see Domain validation requirements and reuse periods.

What's next

Review domain validation requirements and reuse periods for a complete reference on validation periods, reuse rules, and random value expiration