Accessibility

Reset to default

Language

Renew or activate signature

Electronic signature activation

How to activate NEW
Certum's electronic signature?

Activate a Signature

Electronic signature renewal

Renewal of Certum's e-signature
step by step

Renew a Signature

Electronic signature renewal process - detailed instruction

SSL Certificates

Verification methods of the domains for SSL certificates

Admin Method - Verification of the domain administrator’s e-mail address

Description of the method

Verification of domain access by clicking on a verification link, that will be sent by Certum to one of the requested domain administrator’s e-mail address such as:

  • admin@yourdomain.com,
  • administrator@yourdomain.com,
  • webmaster@yourdomain.com,
  • postmaster@yourdomain.com,
  • hostmaster@yourdomain.com.

 

For which domains is it available?

 

  • root domains,
  • subdomains (also www subdomains)
  • wildcard domains.

How to perform verification? 

  1. You can verify the root domain using:
    • root domain verification.
  2. You can verify a subdomain of any level using:
    • root domain verification,
    • requested subdomain verification,
  3. You can verify a www subdomain using:
    • if you include in your certificate a parent domain or subdomain for the www subdomain:
      • root domain verification,
      • verification of the parent domain or subdomain for the www subdomain,
      • requested subdomain verification,
    • if you did not include in your certificate the parent domain or subdomain for the www subdomain:
      • root domain verification,
      • requested subdomain verification,
  4. You can verify a wildcard domain using:
    • root domain verification,
    • verification of the parent domain or subdomain for wildcard character.

Examples

  1. When requesting for yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com
  2. When requesting for sub.yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com
  3. When requesting for a domain www.sub.yourdomain.com, you can verify it using:
    • verification of the root domain yourdomain.com,
    • verification of subdomain www.sub.yourdomain.com
  4. When requesting the following domains in one order: sub.yourdomain.com and www.sub.yourdomain.com, you can verify them with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com
    • separate subdomain verifications: sub.yourdomain.com and www.sub.yourdomain.com,
  5. When requesting the following domains in one order: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com, you can verify them with:
    • verification of the root domain yourdomain.com,
    • separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com,
    • separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com
  6. When requesting for wildcard domain *.sub.yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com.

 

File method - Verification by uploading a file to the server

Description of the method

Verification of domain access by placing the file “certum.txt,” with the content provided by Certum on the server in the directory yourdomain.com/.well-known/pki-validation.

For which domains is it available?

  • root domains,
  • first and subsequent level (including www) subdomains,
  • IP addresses

How to perform verification? 

  1. You can verify the root domain using:
    • root domain verification.
  2. You can verify a subdomain of any level using:
    • requested subdomain verification,
  3. You can verify an IP address using:
    • requested IP address verification.

Examples

  1. When requesting for yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com
  2. When requesting for sub.yourdomain.com, you can verify it with:
    • verification of the subdomain sub.yourdomain.com
  3. When requesting for a domain www.sub.yourdomain.com, you can verify it using:
    • verification of subdomain www.sub.yourdomain.com
  4. When requesting the following domains in one order: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com, you can verify them with:
    • separate verification of subdomains sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com
  5. When requesting to the IP address 120.120.120.0, you can verify it with:
    • 120.120.120.0 IP address verification.

DNS_TXT method - Verification by placing the TXT record in the DNS database

Description of the method

Verifying access to the domain by setting up a TXT record in the domain’s DNS resources and placing a value in it, the content of which will be provided by Certum

For which domains is it available?

  • root domains,
  • subdomains (also www subdomains)
  • wildcard domains.

How to perform verification? 

  1. You can verify the root domain using:
    • root domain verification.
  2. You can verify a subdomain of any level using:
    • root domain verification,
    • requested subdomain verification,
  3. You can verify a www subdomain using:
    • if you include in your certificate a parent domain or subdomain for the www subdomain:
      • root domain verification,
      • verification of the parent domain or subdomain for the www subdomain,
      • requested subdomain verification,
    • if you did not include in your certificate the parent domain or subdomain for the www subdomain:
      • root domain verification,
      • requested subdomain verification,
  4. You can verify a wildcard domain using:
    • root domain verification,
    • verification of the parent domain or subdomain for wildcard character.

Examples

  1. When requesting for yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com
  2. When requesting for sub.yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com
  3. When requesting for a domain www.sub.yourdomain.com, you can verify it using:
    • verification of the root domain yourdomain.com,
    • verification of subdomain www.sub.yourdomain.com
  4. When requesting the following domains in one order: sub.yourdomain.com and www.sub.yourdomain.com, you can verify them with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com
    • separate subdomain verifications: sub.yourdomain.com and www.sub.yourdomain.com,
  5. When requesting the following domains in one order: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com, you can verify them with:
    • verification of the root domain yourdomain.com,
    • separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com,
    • separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com
  6. When requesting for wildcard domain *.sub.yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com.

DNS_CNAME - Verification by creating a CNAME record in the DNS database

Description of the method

Verification of access to a domain by creating a CNAME record in the domain’s DNS resource records and placing a value in it, the content of which will be provided by Certum

For which domains is it available?

  • root domains,
  • subdomains (also www subdomains)
  • wildcard domains.

How to perform the verification?

  1. You can verify the root domain using:
    • root domain verification.
  2. You can verify a subdomain of any level using:
    • root domain verification,
    • requested subdomain verification,
  3. You can verify a www subdomain using:
    • if you include in your certificate a parent domain or subdomain for the www subdomain:
      • root domain verification,
      • verification of the parent domain or subdomain for the www subdomain,
      • requested subdomain verification,
    • if you did not include in your certificate the parent domain or subdomain for the www subdomain:
      • root domain verification,
      • requested subdomain verification,
  4. You can verify a wildcard domain using:
    • root domain verification,
    • verification of the parent domain or subdomain for wildcard character.

Examples

  1. When requesting for yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com
  2. When requesting for sub.yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com
  3. When requesting for a domain www.sub.yourdomain.com, you can verify it using:
    • verification of the root domain yourdomain.com,
    • verification of subdomain www.sub.yourdomain.com
  4. When requesting the following domains in one order: sub.yourdomain.com and www.sub.yourdomain.com, you can verify them with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com
    • separate subdomain verifications: sub.yourdomain.com and www.sub.yourdomain.com,
  5. When requesting the following domains in one order: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com, you can verify them with:
    • verification of the root domain yourdomain.com,
    • separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com,
    • separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com
  6. When requesting for wildcard domain *.sub.yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com.

DNS_TXT_PREFIX - Verification by creating a TXT record in the DNS database (for domains with prefixes)

Description of the method

Verification of access to a domain by creating a TXT record in the DNS resource records of a domain with “_certum” prefix and placing a value in it, the content of which will be provided by Certum

For which domains is it available?

  • root domains,
  • subdomains (also www subdomains)
  • wildcard domains.

How to perform the verification?

  1. You can verify the root domain using:
    • root domain verification.
  2. You can verify a subdomain of any level using:
    • root domain verification,
    • requested subdomain verification,
  3. You can verify a www subdomain using:
    • if you include in your certificate a parent domain or subdomain for the www subdomain:
      • root domain verification,
      • verification of the parent domain or subdomain for the www subdomain,
      • requested subdomain verification,
    • if you did not include in your certificate the parent domain or subdomain for the www subdomain:
      • root domain verification,
      • requested subdomain verification,
  4. You can verify a wildcard domain using:
    • root domain verification,
    • verification of the parent domain or subdomain for wildcard character.

Example

  1. When requesting for yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com
  2. When requesting for sub.yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com
  3. When requesting for a domain www.sub.yourdomain.com, you can verify it using:
    • verification of the root domain yourdomain.com,
    • verification of subdomain www.sub.yourdomain.com
  4. When requesting the following domains in one order: sub.yourdomain.com and www.sub.yourdomain.com, you can verify them with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com
    • separate subdomain verifications: sub.yourdomain.com and www.sub.yourdomain.com,
  5. When requesting the following domains in one order: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com, you can verify them with:
    • verification of the root domain yourdomain.com,
    • separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com,
    • separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com
  6. When requesting for wildcard domain *.sub.yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com.

DNS_CNAME_PREFIX - Verification by creating a CNAME record in the DNS database (for domains with prefixes)

Description of the method

Verification of access to a domain by creating a CNAME record in the DNS resource records of a domain with “_certum” prefix and placing a value in it, the content of which will be provided by Certum

For which domains is it available?

  • root domains,
  • subdomains (also www subdomains)
  • wildcard domains.

How to perform the verification?

  1. You can verify the root domain using:
    • root domain verification.
  2. You can verify a subdomain of any level using:
    • root domain verification,
    • requested subdomain verification,
  3. You can verify a www subdomain using:
    • if you include in your certificate a parent domain or subdomain for the www subdomain:
      • root domain verification,
      • verification of the parent domain or subdomain for the www subdomain,
      • requested subdomain verification,
    • if you did not include in your certificate the parent domain or subdomain for the www subdomain:
      • root domain verification,
      • requested subdomain verification,
  4. You can verify a wildcard domain using:
    • root domain verification,
    • verification of the parent domain or subdomain for wildcard character.

Examples

  1. When requesting for yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com
  2. When requesting for sub.yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com
  3. When requesting for a domain www.sub.yourdomain.com, you can verify it using:
    • verification of the root domain yourdomain.com,
    • verification of subdomain www.sub.yourdomain.com
  4. When requesting the following domains in one order: sub.yourdomain.com and www.sub.yourdomain.com, you can verify them with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com
    • separate subdomain verifications: sub.yourdomain.com and www.sub.yourdomain.com,
  5. When requesting the following domains in one order: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com, you can verify them with:
    • verification of the root domain yourdomain.com,
    • separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com,
    • separate verification of subdomains: sub1.yourdomain.com, sub2.yourdomain.com, www.sub1.yourdomain.com
  6. When requesting for wildcard domain *.sub.yourdomain.com, you can verify it with:
    • verification of the root domain yourdomain.com,
    • verification of the subdomain sub.yourdomain.com.

An example of the verification of the domains included in the certificate.

Notice:

According to global standards, Certum does not issue SSL certificates for domains that are on the TLD (Top-Level Domain) list
You can check the TLD list under the link

Premium EV, Trusted SSL, SSL Commercial SSL:
an example of the verification of the domain included in the certificate.

Example
  1. your-domain.pl

The CN field (Common name) will contain the domain provided in CN: yourdomain.com.

In this case only one domain is verified: yourdomain.com.

Note: The certificate does not have the www subdomain automatically added to the SAN (Subject Alternative Name).

Example

  1. your-domain.pl

The CN field (Common name) will contain the domain provided in CN: yourdomain.com.

In this case only one domain is verified: yourdomain.com.

Note: The certificate does not have the www subdomain automatically added to the SAN (Subject Alternative Name).

The Wildcard SSL certificate option
an example of the verification of a domain included in the certificate.

Example
  1. *.yourdomain.com

The Wildcard SSL option is designed to secure the subdomains within one domain defined by customer.

An example of the use of the Wildcard certificate option for *.yourdomain.com:

  • yourdomain.com
  • www.yourdomain.com
  • mail.yourdomain.com
  • ftp.yourdomain.com
  • 1.yourdomain.com
  • 2.yourdomain.com

The CN field (Common name) will contain the domain provided in CN: *.yourdomain.com.

In this case only one domain is verified: yourdomain.com.

Note: The Wildcard option certificate has its parent domain automatically added to the SAN field:

  • yourdomain.pl

Example

  1. *.yourdomain.com

The Wildcard SSL option is designed to secure the subdomains within one domain defined by customer.

An example of the use of the Wildcard certificate option for *.yourdomain.com:

  • yourdomain.com
  • www.yourdomain.com
  • mail.yourdomain.com
  • ftp.yourdomain.com
  • 1.yourdomain.com
  • 2.yourdomain.com

The CN field (Common name) will contain the domain provided in CN: *.yourdomain.com.

In this case only one domain is verified: yourdomain.com.

Note: The Wildcard option certificate has its parent domain automatically added to the SAN field:

  • yourdomain.pl

The MultiDomain certificate option:
an example of the verification of the domains included in the certificate.

Example

the same root domain

  1. yourdomain.com
  2. www.yourdomain.com
  3. store.yourdomain.com
  4. mail.yourdomain.com
  5. 1.yourdomain.com
  6. 2.yourdomain.com

The CN field (Common name) will contain the domain provided in CN: e.g. yourdomain.com.

In this case, depending on the verification method, verification can be performed only for the root domains: yourdomain.com and yourseconddomain.com or for each of the subdomains separately. You can check the domain verification examples.

Note:  The multidomain certificate does not have the www subdomains automatically added to the SAN (Subject Alternative Name).

different root domains

  1. yourdomain.com
  2. www.yourdomain.com
  3. store.yourdomain.com
  4. mail.yourdomain.com
  5. 1.yourdomain.com
  6. yourseconddomain.com
  7. www.yourseconddomain.com
  8. store.yourseconddomain.com
  9. mail.yourseconddomain.com
  10. 1.yoursecond-domain.com

The CN field (Common name) will contain the domain provided in CN: e.g. yourdomain.com.

In this case, depending on the verification method, verification can be performed only for the root domains: yourdomain.com and yourseconddomain.com or for each of the subdomains separately. You can check the domain verification examples.

Note:  The multidomain certificate does not have the www subdomains automatically added to the SAN (Subject Alternative Name).

Example

the same root domain

  1. yourdomain.com
  2. www.yourdomain.com
  3. store.yourdomain.com
  4. mail.yourdomain.com
  5. 1.yourdomain.com
  6. 2.yourdomain.com

different root domains

  1. yourdomain.com
  2. www.yourdomain.com
  3. store.yourdomain.com
  4. mail.yourdomain.com
  5. 1.yourdomain.com
  6. yourseconddomain.com
  7. www.yourseconddomain.com
  8. store.yourseconddomain.com
  9. mail.yourseconddomain.com
  10. 1.yoursecond-domain.com

The CN field (Common name) will contain the domain provided in CN: e.g. yourdomain.com.

In this case, depending on the verification method, verification can be performed only for the root domains: yourdomain.com and yourseconddomain.com or for each of the subdomains separately. You can check the domain verification examples.

Note:  The multidomain certificate does not have the www subdomains automatically added to the SAN (Subject Alternative Name).

The CN field (Common name) will contain the domain provided in CN: e.g. yourdomain.com.

In this case, depending on the verification method, verification can be performed only for the root domains: yourdomain.com and yourseconddomain.com or for each of the subdomains separately. You can check the domain verification examples.

Note:  The multidomain certificate does not have the www subdomains automatically added to the SAN (Subject Alternative Name).

Example

Multiple domains

  1. your-domain.pl
  2. www.your-domain.pl
  3. store.your-domain.pl
  4. mail.your-domain.pl
  5. 1.your-domain.pl
  6. your-second-domain.pl
  7. www.your-second-domain.pl
  8. store.your-second-domain.pl
  9. mail.your-second-domain.pl
  10. 1.your-second-domain.pl

In the CN field (Common Name) in the certificate in the first position there is the domain:your-domain.pl. The remaining names will be included in the ASN field (Alternative Subject Name).

In this example two domains are verified: your-domain.pl and your-second-domain.pl.The subdomains included in the main domain do not require additional verification.

Attention: The MultiDomain option of the certificate does not automatically add www to the name of the domain (name of the host).

Example

Multiple domains

  1. your-domain.pl
  2. www.your-domain.pl
  3. store.your-domain.pl
  4. mail.your-domain.pl
  5. 1.your-domain.pl
  6. your-second-domain.pl
  7. www.your-second-domain.pl
  8. store.your-second-domain.pl
  9. mail.your-second-domain.pl
  10. 1.your-second-domain.pl

In the CN field (Common Name) in the certificate in the first position there is the domain:your-domain.pl. The remaining names will be included in the ASN field (Alternative Subject Name).

In this example two domains are verified: your-domain.pl and your-second-domain.pl.The subdomains included in the main domain do not require additional verification.

Attention: The MultiDomain option of the certificate does not automatically add www to the name of the domain (name of the host).

Related articles

    Was this helpful?

    How can we improve it?

    The instructions did not lead me to solve the problemThe article is written in a difficult language for meOther

    What others?

    Didn’t find the answer to your question?

    contact1

    Ask our consultant

    Get advice from our consultants

    Contact us