Loading...

Knowledge Base
Home 
 
/
 Alternate methods for Domain Control Validation (DCV)
Categories: Products_Retail

Alternate methods for Domain Control Validation (DCV)

SSL certificates are issued after successful validation of your control of the domain name for which the SSL certificate is being requested. This process is called Domain Control Validation (DCV). 

There are three ways to perform this validation: 

  1. Email challenge response 

  1. HTTP based DCV 

  1. DNS CNAME based DCV 

Email challenge response  

Step 1:

Step 2:

  • Go to Orders Section 
  • Click on "Orders" in the top menu to access your order details.

Step 3:

  • Go to SSL order
  • Click on Issue certificate 
  • Enter the CSR
  • Click on Next

By far, the Email challenge-response is the fastest and easiest method of DCV. This is the default method that is selected automatically at the time of applying for the SSL certificate. To perform DCV using Email challenge-response, you need to select one of the shortlisted email addresses listed below: 

admin@ 

administrator@ 

hostmaster@ 

postmaster@ 

webmaster@ 

Upon receiving the application, Comodo’s CA system will send an email to the selected email address with a unique validation code. You must follow the link provided in the email and enter the validation code to complete the DCV. 

Note that the list of acceptable email addresses is displayed automatically based on the domain name extracted from the CSR you submit

HTTP based DCV 

Another method to perform DCV is the HTTP-based DCV which requires a web server running on HTTP (port 80) or on HTTPS (port 443). Your domain must resolve to that server for this method to work. 

You need to copy a request token and place it in the /.well-known/pki-validation directory on the webserver. 

You can directly download the txt file from your BigRock Customer control Panel.

This text file is your request token which you need to upload on your web server and place it in the /.well-known/pki-validation directory such that it can be accessed as: 

http://example.com/.well-known/pki-validation/F138B9F90340E5A2B6B42D5268649287.txt 

*where "example.com" is the domain name for which the SSL certificate is being requested. 

The CA system will automatically look for this request token at regular intervals and DCV will be completed as soon as the token is found. 

DNS CNAME based DCV 

DCV can also be performed by adding a CNAME record in the DNS zone of your domain. 

You can get the CNAME record from your BigRock customer control panel.

You can copy the CNAME record from your customer control panel and paste it in your DNS Zone. 

 

   

Loading...