SSL / TLS August 11, 2022

Everything you need to know about domain validation

The purpose of the domain validation process is to ensure that the organization requesting a certificate actually has the authority to request a certificate for the domain in question.

Industry standards prevent Certificate Authorities (CAs) such as DigiCert from issuing an SSL/TLS certificate until domain control validation is completed. Domain validation may include emails to contacts listed in a domain's WHOIS record, as well as emails to the domain's default administrative addresses. As a first step, the Validation department must verify the domain through DCR (Domain Control Validation). To do this, you must have one of the following ALIAS email addresses or be able to create one; this way you can demonstrate legal right of use over the domain: admin@midominio.com, administrator@midominio.com, hostmaster@midominio.com, postmaster@midominio.com, webmaster@midominio.com. For example, we can send an authorization email to administrator@domain.com or webmaster@domain.com, but we would not send an authorization email to tech@domain.com. The Validation department will send an email to the Alias you choose to use. To demonstrate control over the domain, the email recipient must follow the instructions in the email sent to the domain. The confirmation process consists of visiting a link provided in the email and approving a link. If you... cannot perform this step , the alternative is as follows:

Use the DNS method:

If you have access to the servers, you will need to generate a TXT file in the DNS at a predetermined location on your site, which must contain the random value that will be provided to you. TXT entry on either or _dnsauth. Once the file is created and available on your site, DigiCert will access the specified URL to confirm the presence of the random value. Finally, DigiCert's validation department, through a phone number published in public directories under your organization's name (White Pages, Yellow Pages, Dun & Bradstreet, Hoovers, or Google Business) will contact the corporate contact for final data verification. Said verification is mandatory and unalterable;in this way, the department will be able to verify that said contact works for the company by giving final approval to the process. You can coordinate this call with the validator through the online chat with your order number at:https://www.digicert.com/link/chat.php?acct_id=&r=SymDigEsc&lg=en If you have access to CertCentral, it is possible to perform a pre-validation process for domains that allows you to validate your domains before starting to request certificates for them. Completing domain validation in advance enables faster certificate issuance.More Information