SSL certificate, Domain Ownership Verification Tutorial

Published: 2017-03-06

To apply for a domain-type certificate, you can verify domain ownership in the following ways:


1.DNS verification (recommended)

  The system will add a cname record in the domain resolution for domain authentication.

If the domain for which you are applying for an SSL certificate is under a same-name member account in 西部数码, the system will automatically complete DNS verification. (If the domain was applied for on a third-party platform, you can also set the domain's DNS to 西部数码's DNS, and then enable a DNS Intelligent Management at https://www.west.cn/services/domain/dns.asp  so that verification can also be completed automatically)

If the domain is on the 阿里云、腾讯 platform, you can set the 阿里、腾讯 apikey in our company's platform SSL Management Center. The system will detect the relevant domain and automatically call the relevant API interface to complete verification.


If the above automatic verification cannot be completed, you need to manually add a cname record to complete DNS verification:


For example: when applying for a digital certificate for www.abc.com, record as prompted in the figure:

image.png

Taking the 西部数码 resolution platform as an example to explain how to operate:

1) Enter 西部数码 User Management Center > Business Management > Domain Management > Manage
As shown in the figure:

图片.png


2) Click “Domain Resolution” to add a domain resolution record

Figure 1 Enter the domain resolution panel

image.png


Figure 2 Add a CNAME record to complete DNS verification

image.png

(The following content is for demonstration only. Please fill it in by referring to your own SSL certificate verification file.)

Host name: _F38D5AC48101F6DC94ED15CE39EB9399

Type: cname record

Line: Default,

Value: 7549F74102FD65FADBABE32D02F004C7.17A5E09FCA3E7665A532341C3DE25A4A.TTDtOJlu67.trust-provider.com(directly copy the “Record Value” and enter it),

TTL: Default

Priority: Default





2. File verification (complete verification by placing a specified txt file under the website; relatively complex and generally not recommended)


image.png

According to the prompt, you need to create directories and files. How to create a .well-known folder starting with . on a windows server: http://www.west.cn/faq/list.asp?unid=1474 

Add a file according to the specified file directory, file name, and file content, for example

If the domain applying for file verification is www.xxx.com, then in the screenshot example, http://www.xxx.com/.well-known/pki-validation/59312DA4D88422FFDA22BD9EF3B45E1E.txt needs to be accessible.
If the domain applying for file verification is a wildcard domain *.xxx.com, then the link address for verification access is http|https://xxx.com/.well-known/pki-validation/59312DA4D88422FFDA22BD9EF3B45E1E.txt

(If it is a third-level wildcard domain, for example: *.test.xxx.com, the link address for verification access is http|https://test.xxx.com/.well-known/pki-validation/59312DA4D88422FFDA22BD9EF3B45E1E.txt)

The accessed content must be the verification file content.Note: The verification content is three lines; do not write it as one line.

You need to upload the above-mentioned txt file to your website directory by yourself to complete verification.