What to do before ordering certificates?

2 min read

EV certificates (extended validation)

Run domain control validation
The confirmation of ownership for the domain of a certificate or multiple domains in the case of certificates with SAN extension, via EMAIL, FILE and DNS.
Check company register
Check the company name: When ordering, the company name must exactly match the information in the Company Register.
Check record in the public telephone directory
Check telephone number: If the company in listed in a public telephone directory such as the White Pages or Yellow Pages, make sure the number is up to date.
Choose internal contact person
Choose a person who is employed full time and is easily reachable by phone, this can be any person and not e.g. the managing director or the person listed in the WHOIS. Only requirement is that this person is fully employed.

Run domain control validation
The confirmation of ownership for the domain of a certificate or multiple domains in the case of certificates with SAN extension, via EMAIL, FILE and DNS.
Check company register
Check the company name: When ordering, the company name must exactly match the information in the company register.
Check the record in the public telephone directory
Check telephone number: If the company in listed in a public telephone directory such as the White Pages or Yellow Pages, make sure the number is up to date.
Choose internal contact person
Choose a person who is employed full time and is easily reachable by phone, this can be any person and not e.g. the managing director or the person listed in the WHOIS. Only requirement is that this person is fully employed.

Run domain control validation
The confirmation of ownership for the domain of a certificate or multiple domains in the case of certificates with SAN extension, via EMAIL, FILE and DNS.
Preparing the approval email address
Make sure in advance that the confirmation email from the CA reaches the responsible persons safely. Set up one of the five permitted email addresses (hostmaster, postmaster, webmaster, admin, administrator) so that they are received by people who are familiar with the company’s certificate management. Make sure that the CA’s emails are not classified as spam. If you put them on the whitelist, they will be classified as trustworthy and securely accepted by the email client.

Was this article helpful?