Knowledge Base
How to perform email-based Domain Control Validation (DCV)
Overview
This article shows how to validate a domain when you select Email as the DCV method. It first lists the Constructed addresses that Sectigo will accept, then walks through the numbered Steps where you choose an address, receive the validation email, and click the verification link to enter the unique code. Personal mailboxes and arbitrary addresses are not accepted; only the constructed list and (when shown by the portal) the WHOIS contact for the domain qualify.
Constructed addresses
Email validation accepts the following constructed addresses on the domain being validated:
Note: No other personal mailbox can be used. If the WHOIS (the public domain registration directory) record for the domain exposes a contact mailbox, the portal may offer that address as an additional choice.
Steps
Step 1 — Select Email DCV
Open the certificate order and set the DCV method to Email. The order form then shows a dropdown of the available email addresses for the domain.
Figure 1: Choose the approved email address from dropdown
Step 2 — Choose an approved address
Select one address from the dropdown of constructed mailboxes (and the WHOIS contact, if listed), then click Continue to complete setup. Sectigo sends the validation email to the selected mailbox.
Step 3 — Receive the validation email
The validation email arrives at the chosen mailbox and contains:
-
A unique validation code (a short alphanumeric string).
-
A verification link that opens the Sectigo validation page in a browser.
-
The order reference, so you can match the email to the certificate request.
Step 4 — Click the validation link
The recipient opens the verification link, pastes the unique code from the email, and submits the form. Sectigo then marks the domain validated, and the certificate can be issued.
Tips
-
If no mailbox in the constructed list is monitored, set one up before starting the order; you cannot redirect Sectigo's email to a personal mailbox.
-
The validation link and code expire after the window shown in the email — if it lapses, restart DCV from the order in SCM.
-
Make sure the receiving mail server accepts mail from Sectigo and that filters do not quarantine the validation message.
Similar questions
-
What email addresses can authorize DCV verification?
-
Can I choose the WHOIS contact email to complete DCV?
-
Can I use any personal email address for DCV?
Related Articles:
Need assistance?
Contact our team for help with your purchase or issuing your certificate.