{"id":2407,"date":"2018-03-16T18:33:48","date_gmt":"2018-03-16T18:33:48","guid":{"rendered":"https:\/\/www.thesslstore.com\/knowledgebase\/?post_type=ht_kb&p=2407"},"modified":"2018-03-19T11:27:26","modified_gmt":"2018-03-19T11:27:26","slug":"troubleshooting-file-based-authentication","status":"publish","type":"ht_kb","link":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-validation\/troubleshooting-file-based-authentication\/","title":{"rendered":"Troubleshooting File-Based Authentication"},"content":{"rendered":"

File-based authentication allows certificate authorities to validate domain ownership because it requires that you (the domain owner) add specified folders and upload a TXT file<\/strong> that contains a random string of characters to your domain’s file structure<\/strong>. If you’re able to make those kinds of modifications in your domain’s hosting panel, then it’s safe to say that you own the domain.<\/p>\n

The Certificate Authorities will validate your order once their system is able to navigate to the URL path they provided to you and “ping<\/strong>” or detect the random string that they provided you.<\/p>\n

Although this seemingly simple validation method goes very smoothly in most cases, we’ve seen common issues delay validation for some of our clients. If your file is not authenticating or you’re unsure how to add the needed folders, please review the below troubleshooting steps. From our experience, 95% of all issues with file based authentication can be solved by following the steps below.<\/p>\n

How to check if your file is uploaded correctly<\/h2>\n

The Certificate Authority’s system must be able to load your order’s .txt file by following the URL or File Path provided to you to validate it.<\/p>\n

For example, let’s say that you are trying to validate www.mydomain.com. The file path or URL that the certificate authority will try to view your file on would be:<\/p>\n

www.mydomain.com\/.well-known\/pki-validation\/[your file name].txt<\/strong><\/p>\n

Once they are able to view the contents of the provided .txt file, the order will get issued.<\/p>\n

You can check this yourself by opening your preferred web browser and navigating to the URL that you uploaded the file to. In our example, it would be\u00a0www.mydomain.com\/.well-known\/pki-validation\/[your file name].txt, if you navigate there and see a page that only<\/strong> contains the contents of the file, then your order should validate without issue.<\/p>\n

If you see anything<\/strong> other than the contents of the file, then something is wrong and you should follow the steps in this article to resolve the issue.<\/p>\n

Troubleshooting Steps:<\/strong><\/h2>\n
    \n
  1. If you are able to load the contents of your file, but your order is not validating, check to make sure that all letters in your file path are lower case<\/strong>. If any upper case characters are present, the order will not validate.<\/li>\n
  2. If you\u2019re finding issues with your operating system not allowing the \u201c.well-known\u201d portion of the file-path, enter the file name as \u201c.well-known.<\/span><\/strong>\u201d Including that extra period after the \u201c.well-known\u201d should allow the file-path to be accepted.<\/li>\n
  3. Your file-path must reflect the Common Name<\/strong> on the CSR, or Certificate Signing Request. This means that if your certificate is being issued for domain.com<\/a>, your file-path cannot be for www.domain.com. You must include the Common Name exactly as it appears on your order.<\/li>\n
  4. If you try to navigate to your file contents and instead you get re-directed<\/strong> to another page, this will block validation from taking place. Make sure there are no re-directs in place on your domain. This includes any login prompts or pages that require any security measures to access them.<\/li>\n
  5. If your website has an expired SSL certificate<\/strong> on it or you see any other browser warnings when trying to access your file, you must remove the old certificate and clear the browser warning before this can be issued. Once the Certificate Authority’s system detects an error it will stop the validation process.<\/li>\n<\/ol>\n

    These are the most common issues related to file based authentication. If you have completed these steps and are still experiencing issues, please contact our support team<\/a> and our dedicated SSL experts will review your order and troubleshoot the problem for you!<\/p>\n","protected":false},"excerpt":{"rendered":"

    File-based authentication allows certificate authorities to validate domain ownership because it requires that you (the domain owner) add specified folders and upload a TXT file that contains a random string of characters to your domain’s file structure. If you’re able to make those kinds of modifications in your domain’s hosting…<\/p>\n","protected":false},"author":1,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"ht-kb-category":[25],"ht-kb-tag":[],"class_list":["post-2407","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-ssl-validation"],"yoast_head":"\nTroubleshooting File-Based Authentication - The SSL Store\u2122<\/title>\n<meta name=\"description\" content=\"an option offered by all major Certificate Authorities to validate a domain. This simple option requires the user to place a specific file onto the root of the domain being validated, and allowing the Certificate Authority to find (or \u201cping\u201d) it\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-validation\/troubleshooting-file-based-authentication\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Troubleshooting File-Based Authentication - The SSL Store\u2122\" \/>\n<meta property=\"og:description\" content=\"an option offered by all major Certificate Authorities to validate a domain. This simple option requires the user to place a specific file onto the root of the domain being validated, and allowing the Certificate Authority to find (or \u201cping\u201d) it\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-validation\/troubleshooting-file-based-authentication\/\" \/>\n<meta property=\"og:site_name\" content=\"Knowledge Base\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/thesslstoredotcom\" \/>\n<meta property=\"article:modified_time\" content=\"2018-03-19T11:27:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2017\/04\/thesslstore.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Troubleshooting File-Based Authentication - The SSL Store\u2122\" \/>\n<meta name=\"twitter:description\" content=\"an option offered by all major Certificate Authorities to validate a domain. This simple option requires the user to place a specific file onto the root of the domain being validated, and allowing the Certificate Authority to find (or \u201cping\u201d) it\" \/>\n<meta name=\"twitter:site\" content=\"@thesslstore\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Troubleshooting File-Based Authentication - The SSL Store\u2122","description":"an option offered by all major Certificate Authorities to validate a domain. This simple option requires the user to place a specific file onto the root of the domain being validated, and allowing the Certificate Authority to find (or \u201cping\u201d) it","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-validation\/troubleshooting-file-based-authentication\/","og_locale":"en_US","og_type":"article","og_title":"Troubleshooting File-Based Authentication - The SSL Store\u2122","og_description":"an option offered by all major Certificate Authorities to validate a domain. This simple option requires the user to place a specific file onto the root of the domain being validated, and allowing the Certificate Authority to find (or \u201cping\u201d) it","og_url":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-validation\/troubleshooting-file-based-authentication\/","og_site_name":"Knowledge Base","article_publisher":"https:\/\/www.facebook.com\/thesslstoredotcom","article_modified_time":"2018-03-19T11:27:26+00:00","og_image":[{"width":300,"height":300,"url":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2017\/04\/thesslstore.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_title":"Troubleshooting File-Based Authentication - The SSL Store\u2122","twitter_description":"an option offered by all major Certificate Authorities to validate a domain. This simple option requires the user to place a specific file onto the root of the domain being validated, and allowing the Certificate Authority to find (or \u201cping\u201d) it","twitter_site":"@thesslstore","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-validation\/troubleshooting-file-based-authentication\/","url":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-validation\/troubleshooting-file-based-authentication\/","name":"Troubleshooting File-Based Authentication - The SSL Store\u2122","isPartOf":{"@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#website"},"datePublished":"2018-03-16T18:33:48+00:00","dateModified":"2018-03-19T11:27:26+00:00","description":"an option offered by all major Certificate Authorities to validate a domain. This simple option requires the user to place a specific file onto the root of the domain being validated, and allowing the Certificate Authority to find (or \u201cping\u201d) it","breadcrumb":{"@id":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-validation\/troubleshooting-file-based-authentication\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.thesslstore.com\/knowledgebase\/ssl-validation\/troubleshooting-file-based-authentication\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-validation\/troubleshooting-file-based-authentication\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.thesslstore.com\/knowledgebase\/"},{"@type":"ListItem","position":2,"name":"Troubleshooting File-Based Authentication"}]},{"@type":"WebSite","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#website","url":"https:\/\/www.thesslstore.com\/knowledgebase\/","name":"Knowledge Base","description":"TheSSLstore","publisher":{"@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.thesslstore.com\/knowledgebase\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#organization","name":"The SSL Store\u2122","url":"https:\/\/www.thesslstore.com\/knowledgebase\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#\/schema\/logo\/image\/","url":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2017\/04\/thesslstore.jpg","contentUrl":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2017\/04\/thesslstore.jpg","width":300,"height":300,"caption":"The SSL Store\u2122"},"image":{"@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/thesslstoredotcom","https:\/\/x.com\/thesslstore","https:\/\/www.linkedin.com\/company\/the-ssl-store","https:\/\/www.youtube.com\/user\/thesslstore"]}]}},"_links":{"self":[{"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb\/2407","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/comments?post=2407"}],"version-history":[{"count":0,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb\/2407\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/media?parent=2407"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb-category?post=2407"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb-tag?post=2407"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}