Knowledge Base

How to upload a CSR and complete DCV after Pre-Validation for OV/EV SSL certificates

Updated on August 14, 2026

Overview

By following this article, you will be able to submit your Certificate Signing Request (CSR) and complete Domain Control Validation (DCV) for an SSL certificate in the Sectigo portal. The article first explains why Organization Validation (OV) and Extended Validation (EV) pre-validation must be completed before a CSR can be accepted, and what to do if CSR submission is blocked. It then walks through submitting the CSR, choosing a DCV method, and reviewing and submitting the certificate request. Finally, it defines DCV and compares the four available validation methods: email-based validation, Domain Name System (DNS) CNAME record validation, HTTP/HTTPS file-based validation, and DNS TXT record validation.

What is Domain Control Validation (DCV)?

Domain Control Validation (DCV) is a mandatory verification process performed by the Certificate Authority (CA) — in this case Sectigo — before any SSL certificate is issued. DCV proves that the person requesting the certificate is authorized to use the domain named in the certificate request.

DCV is required for every certificate type:

Domain Validation (DV)
Organization Validation (OV)
Extended Validation (EV)

DCV is separate from organization validation. For OV and EV certificates, both must be completed: organization validation confirms the company, and DCV confirms control of the domain.

Prerequisites

Before you begin, make sure you have the following:

Access to the Sectigo account associated with the SSL order
A Certificate Signing Request (CSR) already generated on your server or system
Organization Validation (OV) or Extended Validation (EV) pre-validation completed by the Sectigo Validation team

Before you start: confirm OV/EV validation status

For Organization Validation (OV) and Extended Validation (EV) SSL certificates, the Certificate Signing Request (CSR) can only be submitted after organization validation is complete for the account. Use the path below that matches your situation.

If OV/EV validation is not yet complete

CSR submission is blocked until the Sectigo Validation team finishes validating your organization. To find out what is outstanding:

Log in to the Sectigo portal at https://store.sectigo.com/ .
Click Set Up next to the relevant order number.
Select Check Status.
Note the OV/EV pre-validation number that is displayed.
Call Sectigo Validation Support at +1 (888) 266-6361 and provide the pre-validation number. The team will review the status and advise you on any outstanding requirements.

Once organization validation is complete, return to this article and continue with the steps below.

If OV/EV validation is already complete

You can proceed directly to CSR submission and Domain Control Validation (DCV). Continue with the steps below.

Steps to submit the CSR and complete DCV

Step 1 — Log in to the Sectigo portal

Open https://store.sectigo.com/ and sign in with the account associated with your SSL order.

Step 2 — Open your order

Click My Products and Services.
Locate your order and click Set Up next to the relevant order number.

Figure 1: My Products and Services page with the Set Up button next to an SSL order

Step 3 — Submit the Certificate Signing Request (CSR)

Paste the generated CSR into the CSR field.
Click Continue to Domain Validation.

Figure 2: CSR entry field in the Sectigo portal with the Continue to Domain Validation button

Step 4 — Choose a Domain Control Validation (DCV) method

After the CSR is accepted, select one of the DCV methods offered in the Sectigo portal (see the comparison table below), then click Continue to Summary Page.

Figure 3: DCV method selection screen with the Continue to Summary Page button

Step 5 — Review and submit the request

On the summary page in the Sectigo portal, review all submitted details — order, CSR, and the DCV method you selected. When the details are correct, submit the certificate request.

Step 6 — Complete domain validation

Perform the validation action required by the DCV method you selected. Domain ownership must be verified before the certificate can be issued.

Available DCV methods

Method	What you do	Reference article
Email-based validation	A validation email is sent to a predefined domain contact address; you approve it from that mailbox.	Perform email-based DCV
Domain Name System (DNS) CNAME record validation	You create a specific CNAME (canonical name) record in the domain's DNS zone.	Complete DV using the CNAME method
HTTP/HTTPS file-based validation (hash method)	You upload a validation file to a specific directory on the web server.	Complete domain validation using the HTTP/HTTPS method
DNS TXT record validation	You add a TXT (text) record containing a validation hash to the domain's DNS configuration.	Create a DNS TXT record for DCV

How to verify success

Validation is complete when the order status in My Products and Services shows that domain validation has been approved. Once DCV is approved and organization validation is already in place, Sectigo issues the SSL certificate and sends it to the account email address.