{"id":2800,"date":"2018-12-20T21:31:22","date_gmt":"2018-12-20T21:31:22","guid":{"rendered":"https:\/\/www.thesslstore.com\/knowledgebase\/?post_type=ht_kb&p=2800"},"modified":"2021-07-26T19:40:18","modified_gmt":"2021-07-26T19:40:18","slug":"how-to-complete-txt-record-verification","status":"publish","type":"ht_kb","link":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-validation\/how-to-complete-txt-record-verification\/","title":{"rendered":"How to Complete DNS Verification"},"content":{"rendered":"

For domain verification to be completed using the DNS method, you will need to add either a CNAME or a TXT Record depending on which vendor you purchased your SSL from. Sectigo (formerly Comodo) only uses CNAME Records for verification and DigiCert\/Symantec\/GeoTrust\/Thawte\/RapidSSL can only use TXT records for verification.<\/p>\n

Regardless of which type of record you will be creating, the new record will need to be publicly visible using an online DNS Lookup tool before your certificate can be issued. This way we know that the vendor\u2019s system will be able to access the record and validate your SSL.<\/p>\n

Please Note:<\/u><\/em><\/strong> It can take anywhere from 24-48 hours for your TXT or CNAME record to propagate to the internet. This is the case with all DNS updates and is outside of our control. While it’s not typical that it takes that long to be publicly visible, it is possible.<\/p>\n

Sectigo: Add Your CNAME Record to Your DNS Manager<\/h1>\n

Only use these instructions if you have a Sectigo (formerly Comodo) certificate.<\/strong><\/p>\n

    \n
  1. Log into your domain’s hosting\u00a0Control Panel<\/strong> (typically the registrar of your domain).<\/li>\n
  2. Locate and select the DNS Zone Manager<\/strong> for your desired domain.<\/li>\n
  3. Select the option to create a new CNAME Record.<\/strong><\/li>\n
  4. In the Host Name or Alias field,<\/strong> place the first unique value for your order as shown in your order details page in your account<\/a>. This value will begin with an \u201c_\u201d and that special character must be present in the record.<\/li>\n
  5. In the CNAME \/ Points To field<\/strong>, place the second unique value for your order as shown in your order details page in your account<\/a>. This value will end with \u201ccomodoca.com\u201d and that must be included in the record value.<\/li>\n
  6. Set the\u00a0TTL<\/strong>\u00a0to\u00a03600<\/strong>\u00a0or the lowest possible option.<\/li>\n
  7. Click\u00a0Save<\/strong>\u00a0and wait for the record to propagate (i.e. 15 minutes).<\/li>\n<\/ol>\n

    Please Note:<\/u><\/em><\/strong> If this method isn\u2019t working for you and you would like to try a different verification method (<\/em>File Based <\/em>or Email Based<\/em>), scroll down to the bottom of your order details page within your account <\/a><\/em>and select \u201cChange Approver Method\u201d to select another option. The instructions for the option that you choose will then appear in your account.<\/em><\/p>\n

    How to Check if Your CNAME is Ready!<\/h2>\n

    If you would like to see if your CNAME record is able to be validated, you can check your record using any DNS record lookup tool like this one: https:\/\/www.whatsmydns.net\/<\/a><\/p>\n

      \n
    1. In the search box, input the value you placed into your Host Name field (the value with the \u201c_\u201d in it), select CNAME from the drop-down menu, and then select \u201cSearch\u201d.<\/li>\n
    2. If you can see your CNAME record\u2019s “Points To” value in the search results alongside of green check marks, then your CNAME record is propagated and the vendor\u2019s system should issue your SSL shortly.<\/li>\n<\/ol>\n

      Next Steps<\/h2>\n