Skip to main content

支持用于域预验证的域控制验证 (DCV) 方法

域预验证:DCV 方法

必须在您证明对订单上的域以及任何 SAN(使用者可选名称)的控制权后,DigiCert 才能颁发 SSL/TLS 证书。我们将该流程称为域控制验证 (DCV) 流程。

DigiCert 目前支持这些 DCV 方法:

Acronyms in this article: Certificate Authorities (CAs), Transport Security Layer (TLS), Domain Name System (DNS), Certificate Authority Authorization (CAA), Conical Name (CNAME), text (TXT), organization validation (OV), extended validation (EV)

How the domain prevalidation process works

To validate a domain before ordering certificates for it, you go to the Domains page and add it to CertCentral.

要证明对域的控制权,电子邮件收件人需执行为该域发送的确认邮件中的说明。确认流程包括访问所提供的链接并执行页面上的说明。

Before adding and validating a domain in CertCentral, you must first add the organization you want to associate the domain with to your account. Then, that organization appears in the Organization menu when adding a new domain. Learn how to add an organization to CertCentral.

DV certificates don't support domain prevalidation

DigiCert DV certificates don't support domain prevalidation. Therefore, you must validate the domains on your DV certificate as part of the certificate issuance process each time you order a certificate. See Validating the domains on a DV TLS/SSL certificate order.

DNS TXT DCV 方法

DCV type

DCV methods

Resources

Email-based

  • Email to DNS TXT contact

  • Email to DNS CAA contact

  • Constructed email

DNS-based

  • DNS TXT Record

  • DNS CNAME Record

Website-based

  • HTTP Practical Demonstration

  • HTTP Practical Demonstration with unique filename

Learn more about these DCV methods.

请参阅 添加域、授权证书的域和使用 DNS TXT 作为验证方法