Use the DNS TXT DCV method

Use these instructions to check the status of your DV certificate order. Then use the DNS TXT DCV method to demonstrate control over the domains in the order.

This validation method lets you demonstrate control over your domains by creating a DNS TXT record containing a DigiCert-generated random value (provided for the domain in your CertCentral account).

After you’ve created the records, DigiCert searches for DNS TXT records on the domains to confirm the presence of your random value.

In your CertCentral account, in the left main menu, go to Certificates > Orders.

On the Orders page, use the filters and advanced search features to locate the pending DV certificate order.

In the Order # column for the pending certificate order, select the order number link.

On the Order # details page, in the Order Status section, check the order's validation status (is the order waiting on domain validation to be complete?).

Under You need to, select the Prove control over domains link.

In the Prove control of your domain window, in the Domain control validation (DCV) method dropdown, select DNS TXT Record (recommended).

Create the DNS TXT record for the domain
If your order includes multiple domains, create a DNS TXT record for each domain in the order before running the check.
1. In the Copy this random value to paste in your TXT record box, copy your random value. If your order includes multiple domains, add this random value to each domain’s DNS TXT record.
  
  Note: The random value expires after 30 days. To generate a new token, contact DigiCert Support.
2. Go to your DNS provider’s site and create a new TXT record.
3. In the TXT Value field, enter the random value you copied from your CertCentral account.
4. Host field:
  1. Base domain (for example, [yourdomain].com)
    Are you validating the base domain? Leave the Host field blank or add the @ symbol (depending on your DNS provider requirements).
  2. Subdomain (for example, [your.domain].com)
    Are you validating a subdomain? In the Host field, add the subdomain you are validating.
5. In the record type filed (or equivalent), select TXT.
6. Select a Time-to-Live (TTL) value or use your DNS provider’s default value.
7. Save the record.

Does your order include multiple domains? Create a DNS TXT record for each domain on the order first, before you run the check.

If any domains are missing a DNS TXT record with the DigiCert-provided random value, the “check” will fail.

Verify the DNS TXT record
1. In your CertCentral account, in the left main menu, go to Certificate > Orders.
2. On the Orders page, in the Order # column of the DV certificate order, select the order number link.
3. On the Order # details page, in the Order Status section, under You need to, select the Prove control over domains link.
4. In the Prove control of your domain window, select Check.

Congratulations! You have completed the domain validation for the domains.

About