A Domain Validated (DV) SSL certificate is a type of digital certificate that provides a basic level of validation for a website. Its primary function is to encrypt the connection between a user's web browser and the web server. It proves that the applicant has control over the domain name, but it does not validate the identity of the organization behind the website.
Think of it like a basic ID card that only confirms your name, not your address or date of birth.
How Does the Validation Process Work?
The validation process for a DV certificate is simple and automated, making it very fast (often completed in minutes).
The Certificate Authority (CA) only needs to verify that the person requesting the certificate actually owns or controls the domain. This is typically done in one of a few ways:
-
Email Verification: The CA sends an email to an address associated with the domain. Common addresses include:
-
admin@yourdomain.com -
administrator@yourdomain.com -
webmaster@yourdomain.com -
hostmaster@yourdomain.com -
The registrant contact email from the domain's WHOIS record.
Clicking a link in this email approves the request.
-
-
DNS Record Validation: The CA asks the applicant to add a specific TXT or CNAME record to the domain's DNS settings. The CA's automated system checks for this record to confirm control.
-
File-Based Validation: The CA provides a unique file that the applicant must place in a specific directory on their web server (e.g.,
http://yourdomain.com/.well-known/pki-validation/file.txt). The CA then attempts to retrieve this file to confirm control.
What Does a DV Certificate Look Like to a User?
In a web browser, a site with a DV certificate will show the padlock icon (????) in the address bar. This indicates the connection is secure and encrypted.
However, if you click on the padlock to view certificate details, you will see minimal information. It will typically only show the domain name and the issuing CA. You will not see any company name or verified organizational details.
