When you purchase an SSL certificate, the Certificate Authority (CA) must verify that you control the domain. This is done through Domain Control Validation (DCV), which can be completed using one of three methods:
Methods:
Email-Based Validation
DNS-Based Validation
HTTP/HTTPS File Upload Validation
Email-Based Validation
You confirm ownership by responding to a verification email sent to a domain-related address.
How it works:
The CA sends an email with a unique verification link or code to a pre-approved email address associated with your domain.
Accepted email addresses (must be active on your domain):
Note: Make sure your domain's email system is set up and working.
DNS-Based Validation (CNAME record)
You add a DNS record (CNAME) to your domain’s DNS zone to prove ownership.
Steps:
Choose DNS Validation during your SSL request.
In the client area, you will see the record that you need to add for your domain.
Log in to your DNS provider (e.g., GoDaddy, Cloudflare, AWS Route 53).
Add the record exactly as provided.
Wait for DNS propagation (can take a few minutes to several hours).
Please let us know that we can check the DNS propagation.
Once verified, SSL will be issued.
Note: If you had the last time for your domain CNAME validation, please remove the old CNAME record and only then add a new one.
HTTP/HTTPS File Upload Validation
What is it?
You upload a specific file to a specific path on your website to prove you control the domain.
Steps:
Choose HTTP or HTTPS File Validation during SSL request.
In our client area, you will see what you need to add:
A file (e.g.,
B5432A49F0A3A2C9C894D.txt)File contents (a unique validation code)
Target URL:
http://yourdomain.com/.well-known/pki-validation/B5432A49F0A3A2C9C894D.txt
On your web server, create the path:
/.well-known/pki-validation/
4. Upload the file with exact content and filename.
5. Ensure the file is publicly accessible via browser.
6. Let us know that we can re-check.
7. Once validated, SSL is issued.
For example:
URL to test:
http://yourdomain.com/.well-known/pki-validation/B5432A49F0A3A2C9C894D.txt
Which Method Should You Choose?
Situation | Best Method |
No access to DNS or server | |
No email or WHOIS is hidden | DNS or HTTP |
Using CDN or can't modify DNS easily | File upload (HTTP) |
Domain is not hosted yet | DNS (easy to set up) |