Certificate Services Support

User-added image

In order to issue SSL/TLS certificates for your websites and applications, you must undergo an industry standard domain validation process. This process ensures that only authorized parties are able to issue certificates that can protect these domains.


Jump to Self-Service Verification Methods

BACKGROUND

The CA Browser Forum outlines their requirements for Certification Authorities in The Baseline Requirements Document. Refer to section 3.2.2.4 for more background on baseline requirements for domain validation.

SELF-SERVICE VERIFICATION METHODS

Entrust Datacard supports the following self-service, fully automated domain verification methods for our Enterprise customers to prove domain control:

Email Authentication: There are two options of method under this category. An automatic propagated email address from your DNS Server, or a confirmation email that will be sent to the contacts listed on the WHOIS record who can authorize you to continuing issuing certificates for the domain.
1. An automatic propagation email address from your DNS Server:
  • This method is best used when you or someone you know within your organization has access to the domain DNS records.
2. Sending confirmation email to contacts that listed on the WHOIS record.
  • This method is best used when you or someone you know within your organization has access to the email addresses provided on your WHOIS record and when the record is publicly available. 

DNS Verification: Entrust Datacard will provide you with a random value that you must post to your domain DNS record. Once detected, your domain is re-validated in our system.
  • This method is best used when you or someone you know within your organization has access to the domain DNS records.

Web Server Authentication: Entrust Datacard will provide you with a random value that you must post on a server that hosts web content for the domain in question. Once detected, your domain is re-validated in our system.
  • This method is best used when you or someone you know within your organization has access to a Web Server that hosts public web content for the domain in question.

If none of these methods apply or you are not sure, you can still select the manual verification option and a Verification Specialist will contact you to walk you through the process

If you have any questions or concerns, please contact us.

Phone Support:
North America: 1-866-267-9297
Local/International: 1-613-270-2680

E-mail Support:
Verification Support: [email protected]
Technical Support: [email protected]

 
Chat Now