Knowledgebase: SSL Cert Validation
How do I validate an SSL Certificate order?
Posted by Maria Brosnan on 17 June 2016 12:26 PM

When you order an SSL certificate you get to choose a validation method from the following options: (Note these options apply to all SSL certificates except the Extended Validation SSL Certificate).

  1. Email validation. This results in a Domain Control Validation (DCV) email being sent to a qualifying email address associated with the domain name. The email needs responding to according to the instructions it contains to validate ownership of the domain name. Please see the 'What email addresses can I use for validating my SSL Certificate' section below.
  2. DNS record. This requires you to add a specific CNAME DNS record to the DNS records of the domain name. The specific record is displayed during the order process and is sent to the account contact email address in an email.
  3. Webpage. This requires you to upload a specific webpage with specific contents to the live hosting of the website for the domain. The full page name and contents required are displayed during the order process and is sent to the account contact email address in an email.
  4. The validation requirements for Extended Validation (EV) SSL Certificates can be found under a separate FAQ in this section.

What email addresses can I use for validating my SSL Certificate?

If you choose email validation when a certificate is ordered, to validate that the applicant owns, or has legal right to use, the domain name featured in the order, a validation email is sent out to one of the following email addresses:

  • Any email address featured in the domain name WHOIS details.
    • Please note that this only applies to the Port 53 WHOIS service. Some domain providers don’t show email addresses via this service. This is usually done for anti-spam reasons. It is not possible to use email addresses that are shown in web WHOIS services. This affects .au domain names and also all .nz based domains. It also affects any domain with a whois privacy sheild.
  • Any of the following Level 3 email addresses
    • admin@CERTIFICATE_NAME
    • administrator@CERTIFICATE_NAME
    • hostmaster@CERTIFICATE_NAME
    • postmaster@CERTIFICATE_NAME
    • webmaster@CERTIFICATE_NAME
    • An example of a Level 3 address for “secure.hosts.net.nz” would be “admin@secure.hosts.net.nz”
  • Any of the following Level 2 email addresses:
    • admin@DOMAIN
    • administrator@DOMAIN
    • hostmaster@DOMAIN
    • postmaster@DOMAIN
    • webmaster@DOMAIN
    • An example of a Level 2 address for “secure.hosts.net.nz” would be “admin@hosts.net.nz”