Skip to main content

域预验证：批量域重新验证

无需浪费时间一次提交一个域进行重新验证。使用批量域重新验证功能，一次可提交 2 到 25 个域进行重新验证。

Items to note about domain validation:

  • Per industry standards, a domain's validation is valid for 397 days (approximately 13 months).

  • If you order a certificate for a domain while the domain's revalidation is pending, we use the domain's current validation to issue the certificate until that validation has expired.

提交域进行重新验证

  1. 在您的 CertCentral 帐户的左侧主菜单中，转到证书 > 域。

  2. 在域页面上，使用筛选器（如验证状态）找到要重新验证的域。

  3. 在提交域以进行重新验证下拉列表中，选择提交域以进行基于电子邮件的验证。

    • Revalidation by DNS TXT record

      Go to your DNS provider and create a TXT record. Add a DigiCert-generated random value to the domain's TXT record.

    • Revalidation by email

      An email recipient follows the instructions in a confirmation email sent for the domain. DigiCert can send three sets of DCV emails: Email to DNS TXT contact, Constructed Email, and WHOIS-based.

      • Email to DNS TXT contact

        Place the DNS TXT record on the _validation-contactemail subdomain of the domain you want to validate. The RDATA value of this text record must be a valid email address.

        DigiCert sends an authorization email to the email addresses found in the DNS TXT record on the _validation-contactemail subdomain of the domain you are validating.

      • Email to Constructed Email

        DigiCert sends the authorization email to five constructed email addresses for the domain: admin, administrator, webmaster, hostmaster, and postmaster @[domain_name].

        Before DigiCert can successfully send an authentication DCV email to the domain owner (or domain controller), we must verify that an MX record (a resource record in the Domain Name System [DNS]) exists in the DNS records of the recipient's domain name. The presence of valid MX records enables us to send the authentication email.

      • Email to WHOIS

        DigiCert sends an authorization email to the registered owners of the public domain as shown in the domain's WHOIS record.

        警告

        End of life for the WHOIS-based Email method

        On May 8, 2025, DigiCert will end support for the WHOIS-based DCV email method. DigiCert systems will stop querying WHOIS entirely to find email addresses for domain validations.

        • If you still want to use the Email DCV method, use the DNS TXT record email contact or the Constructed email method.

        • To learn more about the end of life for WHOIS-based email, see our knowledge base article, End of life for WHOIS-based DCV methods.

    • Revalidation by DNS CNAME record

      Go to your DNS provider and create a CNAME record. In the hostname field, enter _dnsauth. Then, add [random_value].dcv.digicert.com in the target host field to point the CNAME record to dcv.digicert.com.

  4. 准备就绪后，选择提交验证。

  5. 准备就绪后，选择提交验证。

    Under Next steps, select Download CSV and save the file. Then, use this file to add the correct random value to each domain's DNS CNAME or DNS TXT record.

    警告

    Download the CSV file now!

    Download the CSV file now before closing this page. After leaving this page, the only way to get the DigiCert-generated random value for each domain is to open each Domain's details page and copy it.

接下来

Use the selected DCV method to complete domain validation and demonstrate control over your domains.

References:

本节内容如下: