SSL Validation process description
Domain Validation
Domain validation is the fastest issuance method of SSL and is available for both business and private clients that do not have a company. No paperwork – as it’s requires no company or business documents for a validation process, even no callbacks. The validation process is very simple and easy; all you need is to respond to automatic system message called DCV (Domain Control Validation) that will be sent to your email. That’s it!
Please note, that it’s possible to validate domain with open privacy only, if your domain registration is private and closed, you will need to open it during Domain Validaiton process or use alternative methods of validation.
Traditional DCV method
Traditional is an E-Mail-based DCV method. You will be sent an email to an administrative contact for your domain. The email will contain a unique validation code and link. Clicking the link and entering the code will prove domain control.
Valid email addresses are: Any email address which our system can scrape from a port 43 whois check; The following generic admin type email addresses @ the domain for which the certificate is being applied: admin@, administrator@, postmaster@, hostmaster@, webmaster@
Alternative DCV methods (Comodo only)
HTTP-based DCV. The CSR you submit to Comodo will be hashed. The hash values are provided to you and you must create a simple plain-text file and place this in the root of your webserver and served over HTTP-only!
DNS CNAME-based. The CSR you submit to Comodo will be hashed. The hash values are provided to you and must be entered as a DNS CNAME record for your domain.
Alternative DCV methods (Others)
HTTP-based DCV. The CSR you submit to will be hashed. The hash values are provided to you and you must create a simple plain-text file and place this in the root of your webserver and served over HTTP-only!
Business Validation
Business Validation requires domain validation via email (DCV) and supplying company documents for business authentication. The validation process is manual and takes about two or three business days to complete the whole validation process. It is recommended for online shopping cart websites which are registered as a business entity. To get Business Validation SSL Certificate you may be requested for required documents.
Step 1 – Supplying Business Documents
You need to supply company business documents to the vendor. You can send the documents using Post mail, Fax and Email in PDF format. If the order is for a commercial entity you will need to send one of these docs: Articles of Incorporation, Business License, DUNS details (e.g. your customer’s Dun & Bradstreet company number)
Verify Identity and Address
This can be acquired using the following online resources: If Applicant is an Organization (corporation, government agency, registered business entity, etc.). Vendor MUST verify Identity through one of the following (these may also be used to verify address if it’s included):
- A >A government agency in the jurisdiction of the Applicant’s legal creation, existence, or recognition;
- B >A third party database that is periodically updated and considered a Reliable Data Source;
- C >A site visit by the CA or a third party who is acting as an agent for the CA;
- D >An Attestation Letter.
QIIS – Qualified Independent Information Source Examples:
www.dnb.com
www.hoovers.com
ompanieshouse.gov.uk – UK
lursoft.lv – LVSSL Vendor MAY use the following to verify ADDRESS provided that identity has been verified as required above:
- A >Articles of Incorporation (with address)
- B >Government Issued Business License (with address)
- C >Copy of a recent company bank statement (you may blacken out the Account Number)
- D >Copy of a recent company phone bill
- E >Copy of a recent major utility bill of the company (i.e. power bill, water bill, etc.) or current lease agreement for the company
Step 2 – Whois Verification
This step requires to check your company name and address listed in Whois for your domain name, if you are using Private Registration, than you need remove it during validation process, othewise you will fail to pass Whois verification.
Step 3 – Passing Domain Validation (DCV)
The validation process is very simple and easy; all you need is to respond to automatic system message called DCV (Domain Control Validation) that will be sent to your email.
Step 4 – Callback
To finish the order the SSL Vendor should checks your phone number and verify order, in most cases the vendor takes your company phone number from the publicData Bases, http://www.numberway.com OR Government database (QGIS), Other third party database (QIIS), Verified legal opinion or accountant letter.
Extended Validation
Business Validation requires domain validation via email (DCV) and supplying company documents for business authentication. The validation process is manual and takes about two or three business days to complete the whole validation process. It is recommended for online shopping cart websites which are registered as a business entity. To get Business Validation SSL Certificate you may be requested for required documents.
Step 1 – Supplying EV Documents
You will need to send EV SSL Subscriber Agreement and Certificate Request Form to complete EV Validation. The process takes time, but the result will brings you great success.
Comodo documents:
Certificate Request Form, EV SSL Subscriber AgreementStep 2 – Supplying Business Documents
You need to supply company business documents to the vendor. You can send the documents using Post mail, Fax and Email in PDF format. If the order is for a commercial entity you will need to send one of these docs: Articles of Incorporation, Business License, DUNS details (e.g. your customer’s Dun & Bradstreet company number), same process like Business Validation SSL has.
Step 3 – Passing Domain Validation
The validation process is very simple and easy; all you need is to respond to automatic system message called DCV (Domain Control Validation) that will be sent to your email.
Step 4 – Callback
To finish the order the SSL Vendor should checks your phone number and verify order, in most cases the vendor takes your company phone from the public Data Bases OR http://www.numberway.com