Use the DNS CNAME DCV method

Demonstrate control over your domains with a DNS CNAME Record

Check the status of your DV certificate order and use the DNS CNAME Record DCV method to demonstrate control over a domain in the order. See Domain Control Validation (DCV) methods for more information.

Demonstrate control over your domain by creating a DNS CNAME record containing a randomly generated token. The CNAME record is used to point token.domain to DigiCert (dcv.digicert.com).

Use DNS CNAME DCV method to demonstrate control over your domains

  1. In your CertCentral account, in the left main menu, go to Certificates > Orders.

  2. On the Orders page, in the Order # column, select the order number link for the pending certificate order.

  3. On the Order # details page, in the Order Status section, check the order's validation status (is the order waiting on domain validation to be completed?).

  4. Under You Need To, select the Prove control over domains link.

  5. In the Prove control of your domain window, in the Domain control validation (DCV) method dropdown, select DNS CNAME Record.

  6. Create the CNAME record

    1. In the Token box, copy your unique token.

      Important:
      The unique token expires after 30 days. To generate a new token, contact DigiCert Support.
    2. Go to your DNS provider's site and create a new CNAME record.
    3. In the hostname field (or equivalent), paste the unique token you copied from your DigiCert account.
    4. In the record type field (or equivalent), select CNAME.
    5. In the target host field (or equivalent), enter dcv.digicert.com (this points the CNAME record to dcv.digicert.com).
    6. Select a Time-to-Live (TTL) value or use your DNS provider's default value.
    7. Save the record.
  7. Verify the CNAME record

    1. In your CertCentral account, go to the certificate's Order # details page.
      1. In the left main menu, go to Certificate > Orders.
      2. On the Orders page, in the Order # column, select the certificate's order number link.
    2. On the Order # details page, in the Order Status section, under You Need To, locate and select the Prove control over domains link.
    3. In the Prove Control Over Domain window, under step 2. Check for Token, select Check.