How to validate a domain when ordering an SSL certificate?

3 months ago

nikolay

1 minute

Certificate validation methods

Available validation methods
To issue an SSL certificate, you need to confirm domain ownership. Certificate Authorities offer several options:

DNS record
The most common method. If you have access to your domain’s DNS management (or the domain is hosted with us), simply add a TXT or CNAME record. For domains registered with other providers, you’ll need to make the change manually.

Email validation
If your domain has an active email service, you can confirm it by clicking the link in a message sent to a standard address like admin@yourdomain.

HTTP file upload
An alternative option if DNS or email is unavailable. You upload a verification file to your domain’s server. Note: this method is not accepted for Wildcard certificates.

Which option to choose?

Wildcard certificates — only supported via DNS validation.
For automation — DNS is also the best, since ACME clients (like certbot) can handle the records automatically.
For one-time validation with email access — the email method is the fastest.
If no DNS or email access is available — HTTP upload is the last resort.

In most cases, DNS record validation is the most practical solution due to its flexibility and automation support, especially for Wildcard certificates.