Validate domains before or during certificate orders
CertCentral supports two domain validation workflows. Select the one that fits your certificate type and operational timing.
Before you begin
Add the organization you want to associate the domain with before adding it for pre-validation. The organization must exist in your account so it appears in the Organization menu when you add the domain. See create an organization.
Domain pre-validation
Use domain pre-validation to verify control of a domain before submitting a certificate request. Pre-validating domains speeds certificate issuance because DigiCert has already confirmed domain control.
To receive OV and EV certificates immediately, complete domain and organization pre-validation before submitting the certificate request.
Notice
DV certificates don’t support domain pre-validation. For DV certificates, validate domains as part of each order.
Validate domains during a pending certificate order
Validate domains during the certificate request process when:
The domain isn’t pre-validated
The previous validation period has expired
You add a new domain to an existing certificate order
When placing a certificate request, select a DCV method for each domain. Then, complete domain validation from the Order details page. The certificate order remains pending until all domains on the order are validated.
Validation reuse
OV and EV certificates support domain validation reuse within the allowed reuse period. When a domain is already validated and within the reuse period, DigiCert doesn’t require additional validation and the certificate request proceeds without interruption.
DV certificates don’t support validation reuse. Each DV certificate order requires domain validation regardless of previous validation status.
The CA/Browser Forum has set a schedule for further reducing certificate validity and domain validation reuse periods.
Timeline | Certificate validity | Domain reuse period |
|---|---|---|
Until March 15, 2026 | 397 days | 397 days |
As of March 15, 2026 | 199 days | 199 days |
As of March 15, 2027 | 99 days | 99 days |
As of March 15, 2029 | 46 days | 9 days |
Notice
DV certificates don’t support domain validation reuse. Each DV certificate order requires validation regardless of this schedule.
For details about validation periods and reuse timing, see Domain validation requirements and reuse periods.
What happens when domain validation expires
Expired domain validation doesn’t affect certificates that have already been issued. However, it affects the following:
Renewals and reissues: DigiCert checks domain validation when you renew or reissue a certificate. If validation has expired, the order enters a pending state until revalidation is complete.
Duplicate certificates: Duplicate certificates are issued immediately and require valid domain validation. If domain validation has expired, reissue the certificate first. The reissue process includes domain revalidation steps. After revalidation, you can request the duplicate.
What's next
Validate domains using email validation methods to use an email-based approach when DNS and web server access aren’t available