Verification methods of the domains for SSL certificates
Admin Method - Verification of the domain administrator’s e-mail address
Description of the method
Verification of domain access by clicking on a verification link, that will be sent by Certum to one of the requested domain administrator’s e-mail address such as:
- admin@yourdomain.com,
- administrator@yourdomain.com,
- webmaster@yourdomain.com,
- postmaster@yourdomain.com,
- hostmaster@yourdomain.com.
CAA validationmethods value: ca-tbr-4.
For which domains is it available?
- root domains,
- subdomains (also www subdomains)
- wildcard domains.
How to perform verification?
- You can verify the root domain using:
- root domain verification.
- You can verify a subdomain of any level using:
- root domain verification,
- requested subdomain verification,
- You can verify a www subdomain using:
- if you include in your certificate a parent domain or subdomain for the www subdomain:
- root domain verification,
- verification of the parent domain or subdomain for the www subdomain,
- requested subdomain verification,
- if you did not include in your certificate the parent domain or subdomain for the www subdomain:
- root domain verification,
- requested subdomain verification,
- if you include in your certificate a parent domain or subdomain for the www subdomain:
- You can verify a wildcard domain using:
- root domain verification,
- verification of the parent domain or subdomain for wildcard character.
Examples
- When requesting for yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com
- When requesting for sub.yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com
- When requesting for a domain www.sub.yourdomain.com, you can verify it using:
- verification of the root domain yourdomain.com,
- verification of subdomain www.sub.yourdomain.com
- When requesting the following domains in one order: sub.yourdomain.com and www.sub.yourdomain.com, you can verify them with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com
- separate subdomain verifications: sub.yourdomain.com and www.sub.yourdomain.com,
- When requesting the following domains in one order: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com, you can verify them with:
- verification of the root domain yourdomain.com,
- separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com,
- separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com
- When requesting for wildcard domain *.sub.yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com.
File method - Verification by uploading a file to the server
Description of the method
Verification of domain access by placing the file “certum.txt,” with the content provided by Certum on the server in the directory yourdomain.com/.well-known/pki-validation.
ACME instruction of the domain control verification is described in how to activate SSL product using ACME.
CAA validationmethods value: ca-tbr-18 (non-ACME), ca-tbr-19 (ACME).
For which domains is it available?
- root domains,
- first and subsequent level (including www) subdomains,
- IP addresses
How to perform verification?
- You can verify the root domain using:
- root domain verification.
- You can verify a subdomain of any level using:
- requested subdomain verification,
- You can verify an IP address using:
- requested IP address verification.
Examples
- When requesting for yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com
- When requesting for sub.yourdomain.com, you can verify it with:
- verification of the subdomain sub.yourdomain.com
- When requesting for a domain www.sub.yourdomain.com, you can verify it using:
- verification of subdomain www.sub.yourdomain.com
- When requesting the following domains in one order: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com, you can verify them with:
- separate verification of subdomains sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com
- When requesting to the IP address 120.120.120.0, you can verify it with:
- 120.120.120.0 IP address verification.
DNS_TXT method - Verification by placing the TXT record in the DNS database
Description of the method
Verifying access to the domain by setting up a TXT record in the domain’s DNS resources and placing a value in it, the content of which will be provided by Certum.
ACME instruction of the domain control verification is described in how to activate SSL product using ACME.
CAA validationmethods value: ca-tbr-7
For which domains is it available?
- root domains,
- subdomains (also www subdomains)
- wildcard domains.
How to perform verification?
- You can verify the root domain using:
- root domain verification.
- You can verify a subdomain of any level using:
- root domain verification,
- requested subdomain verification,
- You can verify a www subdomain using:
- if you include in your certificate a parent domain or subdomain for the www subdomain:
- root domain verification,
- verification of the parent domain or subdomain for the www subdomain,
- requested subdomain verification,
- if you did not include in your certificate the parent domain or subdomain for the www subdomain:
- root domain verification,
- requested subdomain verification,
- if you include in your certificate a parent domain or subdomain for the www subdomain:
- You can verify a wildcard domain using:
- root domain verification,
- verification of the parent domain or subdomain for wildcard character.
Examples
- When requesting for yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com
- When requesting for sub.yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com
- When requesting for a domain www.sub.yourdomain.com, you can verify it using:
- verification of the root domain yourdomain.com,
- verification of subdomain www.sub.yourdomain.com
- When requesting the following domains in one order: sub.yourdomain.com and www.sub.yourdomain.com, you can verify them with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com
- separate subdomain verifications: sub.yourdomain.com and www.sub.yourdomain.com,
- When requesting the following domains in one order: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com, you can verify them with:
- verification of the root domain yourdomain.com,
- separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com,
- separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com
- When requesting for wildcard domain *.sub.yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com.
DNS_CNAME - Verification by creating a CNAME record in the DNS database
Description of the method
Verification of access to a domain by creating a CNAME record in the domain’s DNS resource records and placing a value in it, the content of which will be provided by Certum.
CAA validationmethods value: ca-tbr-7.
For which domains is it available?
- root domains,
- subdomains (also www subdomains)
- wildcard domains.
How to perform the verification?
- You can verify the root domain using:
- root domain verification.
- You can verify a subdomain of any level using:
- root domain verification,
- requested subdomain verification,
- You can verify a www subdomain using:
- if you include in your certificate a parent domain or subdomain for the www subdomain:
- root domain verification,
- verification of the parent domain or subdomain for the www subdomain,
- requested subdomain verification,
- if you did not include in your certificate the parent domain or subdomain for the www subdomain:
- root domain verification,
- requested subdomain verification,
- if you include in your certificate a parent domain or subdomain for the www subdomain:
- You can verify a wildcard domain using:
- root domain verification,
- verification of the parent domain or subdomain for wildcard character.
Examples
- When requesting for yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com
- When requesting for sub.yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com
- When requesting for a domain www.sub.yourdomain.com, you can verify it using:
- verification of the root domain yourdomain.com,
- verification of subdomain www.sub.yourdomain.com
- When requesting the following domains in one order: sub.yourdomain.com and www.sub.yourdomain.com, you can verify them with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com
- separate subdomain verifications: sub.yourdomain.com and www.sub.yourdomain.com,
- When requesting the following domains in one order: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com, you can verify them with:
- verification of the root domain yourdomain.com,
- separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com,
- separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com
- When requesting for wildcard domain *.sub.yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com.
DNS_TXT_PREFIX - Verification by creating a TXT record in the DNS database (for domains with prefixes)
Description of the method
Verification of access to a domain by creating a TXT record in the DNS resource records of a domain with “_certum” prefix and placing a value in it, the content of which will be provided by Certum.
CAA validationmethods value: ca-tbr-7.
For which domains is it available?
- root domains,
- subdomains (also www subdomains)
- wildcard domains.
How to perform the verification?
- You can verify the root domain using:
- root domain verification.
- You can verify a subdomain of any level using:
- root domain verification,
- requested subdomain verification,
- You can verify a www subdomain using:
- if you include in your certificate a parent domain or subdomain for the www subdomain:
- root domain verification,
- verification of the parent domain or subdomain for the www subdomain,
- requested subdomain verification,
- if you did not include in your certificate the parent domain or subdomain for the www subdomain:
- root domain verification,
- requested subdomain verification,
- if you include in your certificate a parent domain or subdomain for the www subdomain:
- You can verify a wildcard domain using:
- root domain verification,
- verification of the parent domain or subdomain for wildcard character.
Example
- When requesting for yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com
- When requesting for sub.yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com
- When requesting for a domain www.sub.yourdomain.com, you can verify it using:
- verification of the root domain yourdomain.com,
- verification of subdomain www.sub.yourdomain.com
- When requesting the following domains in one order: sub.yourdomain.com and www.sub.yourdomain.com, you can verify them with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com
- separate subdomain verifications: sub.yourdomain.com and www.sub.yourdomain.com,
- When requesting the following domains in one order: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com, you can verify them with:
- verification of the root domain yourdomain.com,
- separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com,
- separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com
- When requesting for wildcard domain *.sub.yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com.
DNS_CNAME_PREFIX - Verification by creating a CNAME record in the DNS database (for domains with prefixes)
Description of the method
Verification of access to a domain by creating a CNAME record in the DNS resource records of a domain with “_certum” prefix and placing a value in it, the content of which will be provided by Certum.
CAA validationmethods value: ca-tbr-7.
For which domains is it available?
- root domains,
- subdomains (also www subdomains)
- wildcard domains.
How to perform the verification?
- You can verify the root domain using:
- root domain verification.
- You can verify a subdomain of any level using:
- root domain verification,
- requested subdomain verification,
- You can verify a www subdomain using:
- if you include in your certificate a parent domain or subdomain for the www subdomain:
- root domain verification,
- verification of the parent domain or subdomain for the www subdomain,
- requested subdomain verification,
- if you did not include in your certificate the parent domain or subdomain for the www subdomain:
- root domain verification,
- requested subdomain verification,
- if you include in your certificate a parent domain or subdomain for the www subdomain:
- You can verify a wildcard domain using:
- root domain verification,
- verification of the parent domain or subdomain for wildcard character.
Examples
- When requesting for yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com
- When requesting for sub.yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com
- When requesting for a domain www.sub.yourdomain.com, you can verify it using:
- verification of the root domain yourdomain.com,
- verification of subdomain www.sub.yourdomain.com
- When requesting the following domains in one order: sub.yourdomain.com and www.sub.yourdomain.com, you can verify them with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com
- separate subdomain verifications: sub.yourdomain.com and www.sub.yourdomain.com,
- When requesting the following domains in one order: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com, you can verify them with:
- verification of the root domain yourdomain.com,
- separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com,
- separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com
- When requesting for wildcard domain *.sub.yourdomain.com, you can verify it with:
- verification of the root domain yourdomain.com,
- verification of the subdomain sub.yourdomain.com.
An example of the verification of the domains included in the certificate.
Notice:
According to global standards, Certum does not issue SSL certificates for domains that are on the TLD (Top-Level Domain) list
You can check the TLD list under the link
Premium EV, Trusted SSL, SSL Commercial SSL:
an example of the verification of the domain included in the certificate.
| Example | |
|---|---|
|
The CN field (Common name) will contain the domain provided in CN: yourdomain.com. In this case only one domain is verified: yourdomain.com. Note: The certificate does not have the www subdomain automatically added to the SAN (Subject Alternative Name). |
The Wildcard SSL certificate option
an example of the verification of a domain included in the certificate.
| Example | |
|---|---|
The Wildcard SSL option is designed to secure the subdomains within one domain defined by customer. An example of the use of the Wildcard certificate option for *.yourdomain.com:
|
The CN field (Common name) will contain the domain provided in CN: *.yourdomain.com. In this case only one domain is verified: yourdomain.com. Note: The Wildcard option certificate has its parent domain automatically added to the SAN field:
|
The MultiDomain certificate option:
an example of the verification of the domains included in the certificate.
| Example | |
|---|---|
|
the same root domain
|
The CN field (Common name) will contain the domain provided in CN: e.g. yourdomain.com. In this case, depending on the verification method, verification can be performed only for the root domains: yourdomain.com and yourseconddomain.com or for each of the subdomains separately. You can check the domain verification examples. Note: The multidomain certificate does not have the www subdomains automatically added to the SAN (Subject Alternative Name). |
|
different root domains
|
The CN field (Common name) will contain the domain provided in CN: e.g. yourdomain.com. In this case, depending on the verification method, verification can be performed only for the root domains: yourdomain.com and yourseconddomain.com or for each of the subdomains separately. You can check the domain verification examples. Note: The multidomain certificate does not have the www subdomains automatically added to the SAN (Subject Alternative Name). |
| Example | |
|---|---|
|
Multiple domains
|
In the CN field (Common Name) in the certificate in the first position there is the domain:your-domain.pl. The remaining names will be included in the ASN field (Alternative Subject Name). In this example two domains are verified: your-domain.pl and your-second-domain.pl.The subdomains included in the main domain do not require additional verification. Attention: The MultiDomain option of the certificate does not automatically add www to the name of the domain (name of the host). |
Certificate Discovery
How to use Certbot to issue Certum SSL ACME certificate?
