Validate domains on a DV certificate order
Demonstrate control over domains on a pending DV TLS certificate order
Industry standards (TLS Baseline Requirements) prevent CAs from issuing your DV certificate until you demonstrate control over the domains and IP addresses on it. We refer to this process as the Domain Control Validation (DCV) process.
CertCentral features a domain validation process that allows you to validate your domains as part of the DV certificate issuance process.
Acronyms in this article: domain validation (DV), Transport Security Layer (TLS), Certificate Authorities (CAs) Domain Name System (DNS), text (TXT), Conical Name (CNAME), Certificate Authority Authorization (CAA), Hypertext Transfer Protocol (HTTP)
How the process works when validating domains on a pending DV certificate order
When you order a DV certificate, you’re required to select a DCV method to validate the domains on the certificate. When done, CertCentral takes you to the certificate's pending Order details page. From this page, you can use the selected DCV method to demonstrate control over the domains. You can always switch validation methods if needed.
With DV certificate orders, you can use just one DCV method to validate the domains on the pending order. Consider the following limitations when adding domains, wildcard domains, and IP addresses to DV certificates:
If you have an IP address on the certificate, you must use the HTTP Practical Demonstration DCV method to validate it.
If you have a wildcard domain on the certificate, you can’t use the HTTP Practical Demonstration DCV method to validate it.
DigiCert recommends that you don’t include wildcard domains and IP addresses on the same DV certificate.
DV certificates don’t support domain validation reuse
A DV certificate's domain validation is valid long enough to issue the certificate. DV domain validation isn’t reusable for reissues or renewals. Each time you order a DV certificate, you must demonstrate control over the domains on the order before DigiCert can issue it.
Supported DCV methods for validating domains on a DV certificate
DCV type | DCV methods | Resources |
|---|---|---|
Email-based |
| |
DNS-based |
| |
Website-based |
| |