FAQs

FAQsDomain Control Validation (DCV)

How to create DNS TXT Record for Domain Control Validation (DCV)?

Updated on November 21, 2025

Similar Questions:

What is the process for adding a DNS TXT record for SSL/TLS domain validation?

How do I verify domain ownership using a DNS TXT record?

What steps are involved in creating a DNS TXT record for certificate issuance?

Overview

Domain Control Validation (DCV) using a DNS TXT record is one of the methods for validating domain ownership during SSL/TLS certificate issuance. This method involves creating a TXT record in your domain’s DNS configuration with a unique random value provided during the order setup process.

Steps to Implement DNS TXT Record for DCV

If you have ordered your certificate from sectigo.com, The hash values are calculated and displayed through the Sectigo web interface after completing Setup.

If you have ordered your certificate through different channel, Find the Validation Manager link in your order confirmation email.

A screenshot of a websiteDescription automatically generated

1. Record Details

Create a DNS TXT record in the following format:

Name: _pki-validation.subdomain.example.com.

Type: TXT

Value: QCw6C+nYGM6BSxgW0gd3Ig==

Note: The value shown above is an example. The actual random value will be generated during the DCV.

2. Where to Create the Record

The TXT record should be created and published in the public DNS of the relevant domain or subdomain to enable the Certificate Authority (CA) to perform verification.

3. How to Obtain the Random Value

The random value is displayed when you select the DNS TXT method during the DCV setup in your certificate management portal. Copy this value exactly as shown.

4. Verification

Once the TXT record is created, allow time for DNS propagation (usually a few minutes to a few hours). You can verify the record using online DNS lookup tools such as: