Methods
Pick the domain control validation (DCV) method that matches the names on the order and the DNS or website access you have.
In this section
Persistent DNS TXT
Publish one TXT record at _validation-persist.example.com and leave it in place. Recommended for DigiCert and GeoTrust when you can manage DNS.
DNS TXT token
Publish a one-time random TXT record at _dnsauth.example.com. This is not the persistent record, and it is not a record at the zone apex.
DNS CNAME token
Create a CNAME that points at the certificate authority. Available for DigiCert, GeoTrust, Sectigo, and PositiveSSL.
HTTP file-based token
Host a token file at /.well-known/pki-validation/. This is required for IP-address names and is not available for wildcards.
Email verification
Approve a link sent to a constructed administrative mailbox, such as admin@ or webmaster@.
Email to DNS TXT contact
Publish a mailbox at _validation-contactemail.example.com so Email verification can use an address you choose.
Related topics
- Domain Control Validation (DCV) — compare methods and see which names and brands each one supports
- Multi-Perspective Issuance Corroboration (MPIC)
- Troubleshooting & FAQs
← Back to Domain Control Validation (DCV)