In order to issue SSL/TLS certificates for your websites and applications, you must undergo an industry-standard domain validation process. This process ensures that only authorized parties are able to issue certificates that can protect these domains.

Jump to Self-Service Verification Methods

BACKGROUND

The CA Browser Forum outlines their requirements for Certification Authorities in The Baseline Requirements Document. Refer to section 3.2.2.4 for more background on baseline requirements for domain validation.

SELF-SERVICE VERIFICATION METHODS

Entrust supports the following self-service, fully automated domain verification methods for our Enterprise customers to prove domain control:

Email Authentication

There are two options of the method under this category, a confirmation email can be sent to the email address listed on your DNS Server's TXT or CAA record, or alternatively a confirmation email can be sent to the contacts listed on the WHOIS record who can authorize you to continue issuing certificates for the domain. 1. An automatic propagation email address from your DNS Server:

• This method is best used when you or someone you know within your organization has access to the domain DNS records.
• This method can ensure a swift and consistent email verification option and can be adjusted as needed.

Click here for more information on adding an email address on a DNS server.

2. Sending a confirmation email to contacts who are listed on the WHOIS record.

• This method is best used when you or someone you know within your organization has access to the email addresses provided on the WHOIS record and the record is publicly available.

Click here for more information on adding a domain with email verification.

DNS Verification

Entrust will provide you with a random value that you must post to your domain DNS record. Once detected, your domain is re-validated in our system.

• This method is best used when you or someone you know within your organization has access to the domain DNS records.

Click here for more information on DNS verification.

Web Server Authentication

Entrust will provide you with a random value that you must post on a server that hosts web content for the domain in question. Once detected, your domain is re-validated in our system.

• This method is best used when you or someone you know within your organization has access to a Web Server that hosts public web content for the domain in question.

Click here for more information on adding a domain with web server verification.

If none of these methods apply or you are not sure, you can still select the manual verification option and a Verification Specialist will contact you to walk you through the process

If you have any questions or concerns, please contact us.

Phone Support

North America: 1-866-267-9297

Local/International: 1-613-270-2680

E-mail Support

Verification Support: [email protected]

Technical Support: [email protected]