Using the Domain Verification Code to perform Domain Verification
Article Purpose: This article provides a step-by-step instructions on how to perform domain verification using the HTTP Verification Method. This method is ideal for customers who can easily modify their website. If this is not the domain verification method you are looking for, please go here to view all options.
Note: This method is applicable to
- Issuance of DomainSSL (DV) and AlphaSSL certificates
- Adding SANs to CloudSSL certificates
- Adding OV domains to your MSSL account
CA/B Forum Changes
The CAB Forum has specified a new standardized location to be used by all Certificate Authorities when performing domain verification using the HTTP Verification Method. GlobalSign has historically referred to this as the Meta-Tag or URL verification method because we allowed users to insert a meta-tag in the head of the main index page. All customers must use the new location, which involves placing the Domain Validation Code (DVC) in this file http(s)://example.com/.well-known/pki-validation/gsdv.txt. Please see the example below for your reference.
|Domain being requested||Valid location (domain)||Valid Location (page/URL)
since October 31, 2016 and after February 27, 2017
The guidelines below describes the HTTP Verification Method using the new location which you can start using immediately.
Please follow the instructions below to complete the HTTP Verification Method:
- Start the ordering process within your GlobalSign Certificate Center (GCC) Account to order a DomainSSL Certificate.
- On the Approver Email step, scroll to the bottom of the page and select HTTP Verification to continue.
- Click Continue to complete the order process.
- Once you have completed the order process you will be provided with a Domain Validation Code as shown in the diagram below.
The Domain Validation Code is also available by viewing the order details in your GCC account, clicking Edit, and expanding the Approver URL details. The Domain Validation Code will also be sent by email to you.
- Upload the file containing the DVC to your website in this location: <server selected below>/.well-known/pki-validation/gsdv.txt. Note: For this example, the DVC is found here: https://domainssl.globalsign-support.com/.well-known/pki-validation/gsdv.txt.
- The email you received will also include a link, which once you have inserted the Domain Validation Code should be clicked to complete the verification process.
- Select the details of your domain using the provided radio buttons. Click Verify my Domain. If the site cannot be verified an error will appear. If you receive an error, check the insertion of the code and try again.
- The domain has now been successfully verified and the certificate will be issued.
- An email will be sent to you confirming the order has been completed with the details of your certificate. You can now install the certificate upon receipt of email.
1. Ballot 169 - Revised Validation Requirements