{"id":3232,"date":"2021-04-16T18:02:49","date_gmt":"2021-04-16T18:02:49","guid":{"rendered":"https:\/\/www.thesslstore.com\/knowledgebase\/?post_type=ht_kb&p=3232"},"modified":"2021-04-19T21:37:43","modified_gmt":"2021-04-19T21:37:43","slug":"troubleshooting-domain-control-validation-dcv","status":"publish","type":"ht_kb","link":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-validation\/troubleshooting-domain-control-validation-dcv\/","title":{"rendered":"Troubleshooting Domain Control Validation (DCV)"},"content":{"rendered":"\n

Change Approval Method Settings<\/h3>\n

For almost all products you can change the domain validation method type using the \u201cChange Approval Settings\/Method\u201d button at the bottom of your order details page.\u00a0<\/span><\/p>\n

You can also use this button to force a system ping if you have the record\/file posted, but it seems to be taking a long time to approve (an hour or more without validation usually means there is an issue with the record). <\/span><\/p>\n

Click the Change Approval Method<\/strong> button on the Order Details page to access your approval method options. You can then use the Save button, or switch the method to another option, save, and switch it back to the original method requested to ping the record again. If validation still doesn’t work, review the troubleshooting options below.\u00a0<\/span><\/p>\n

Email Validation\u00a0<\/h3>\n

Email-based domain validation can often be the fastest and easiest method. However, due to the nature of the email, being sent from a \u201cno-reply\u201d address by an automated system, the DCV email is often blocked or improperly sorted. <\/span><\/p>\n

If you do not see the DCV email right away, please check the junk folder and spam filters. If you still can\u2019t find it, we advise to whitelist the CA’s validation teams IP addresses and main email addresses on your mail server or firewall. Once these addresses are whitelisted, you can use the Resend DCV Email<\/strong> button on your Order Details Page to send the email again.\u00a0<\/span><\/p>\n\n\n\n\n\n\n
\n

IPs<\/span><\/p>\n<\/td>\n

\n

Emails<\/span><\/p>\n<\/td>\n<\/tr>\n

\n

Sectigo<\/strong><\/p>\n

91.212.12.133<\/span><\/p>\n

91.199.212.132<\/span><\/p>\n

91.199.212.133<\/span><\/p>\n

91.199.212.151<\/span><\/p>\n

91.199.212.176<\/span><\/p>\n<\/td>\n

\n
\n

DigiCert<\/strong><\/p>\n

\u00a0216.168.247.9<\/span><\/p>\n

34.213.233.92<\/span><\/p>\n

64.58.225.115<\/span><\/p>\n

142.0.167.190<\/span><\/p>\n

142.0.167.189<\/span><\/p>\n

142.0.167.188<\/span><\/p>\n

allow connections by user agent DigiCert DCV Bot\/1.1<\/span><\/p>\n

216.168.240.0\/20<\/span><\/p>\n<\/td>\n

\n

DCV Email are sent from\u00a0<\/span><\/p>\n

\n

Whitelisting may also be required for HTTP and DNS\/CNAME validation to be sure the vendor system can properly reach your server.\u00a0<\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

HTTP Validation<\/h3>\n

The Authentication File should always be posted with these folders\/directories:<\/span><\/p>\n