A Domain Validation (DV) SSL certificate requires you to prove that you control the domain name before the certificate can be issued.
The validation process is called Domain Control Validation (DCV). No business documents are normally required for DV certificates. You can complete the validation using one of the following methods.
1. Email Validation
With email validation, the Certificate Authority (CA) sends a verification email to an approved administrative email address for your domain.
Common addresses include:
admin@yourdomain.comadministrator@yourdomain.com
Open the verification email and follow the instructions to complete the validation.
2. DNS CNAME Validation
With DNS validation, the Certificate Authority provides a unique CNAME record that you need to add to your domain's DNS settings.
How to complete DNS validation
- Log in to your DNS management panel.
- Add the CNAME record provided by the Certificate Authority.
- Save the DNS record.
- Wait for the record to become available.
- The Certificate Authority will automatically check the record and complete the validation.
DNS validation is useful when you do not have access to an approved domain email address.
Timeline: Takes anywhere from 10 minutes to 24 hours, depending on your DNS provider's TTL (Time-To-Live) and propagation speed.
3. HTTP / HTTPS File Validation
With HTTP/HTTPS validation, you need to upload a validation file provided by the Certificate Authority to your website.
How to complete file validation
- Download or copy the validation file provided by the Certificate Authority.
- Upload it to the required location on your web server, usually:
/.well-known/pki-validation/ - Make sure the file can be accessed through your domain.
- The Certificate Authority will check the file and complete the validation.
Use the HTTPS URL when your website is already configured for HTTPS.
After Domain Validation
Once the Certificate Authority successfully verifies your domain, the SSL certificate can be issued.
The exact issuance time depends on the certificate and the validation method used. DNS validation may take additional time if DNS changes have not fully propagated.
Important
Make sure the domain's DNS records, validation email, or validation file are correctly configured. If the Certificate Authority cannot verify the required information, the SSL certificate cannot be issued until the validation is completed.
For any validation issues, contact the BuySSL.lk support team for assistance.