OV\EV Certificate Issuance Validation Process Description

Enterprise-grade SSL certificate issuance requires completing the following three steps:

Domain validation + Agreement email + Organization validation

1. Domain validation: Administrator email validation, DNS validation, file validation (choose one of the three validation methods). DNS validation is recommended.

2. Agreement email This email is automatically sent to the applicant's email address after the order is submitted. You need to check for an email with the word Agreement in the subject, fill in the real contact name, position, and other information, and submit it.

3. Organization validation (choose any one of the following methods)

You can choose phone or email validation (note: the phone and email are found by the CA through the following third-party platforms, not filled in by the user during registration)

If phone is selected: CA will send an email with the subject Callback to the applicant's email address. You need to check it, click to make a phone call, and complete validation;

If email is selected: CA will send an email with the subject Callback via Email to the third-party platform email address. You need to check it, copy the verification code, and submit it to complete validation.

The following are third-party platforms recognized by CA for completing organization validation (choose one):

1. 企查查 phone or email (synchronized with enterprise annual report information);

2. 爱企查 phone or email;

3. 114best.com phone or email;

4. 标找找 phone;

5. phone or email found on the official website URL registered on the above third-party platforms;

6. Overseas enterprises: phone or email displayed on the official website URL registered with 邓白氏 (the official website must be accessible);

7. Create a Google Business profile. The business profile must be claimed by the customer and managed by an email address, and only then will CA recognize it. 8. Lawyer's letter (CA specified template)

Note: ① If the above third-party platforms have no contact information, it is recommended to register a phone or email. If the registered contact information is incorrect or unavailable, it can be updated and modified.

② The company/unit applying for the certificate must have actual registration information that can be found (e.g., 国家企业信用信息公示系统).

It is recommended to update the phone and email registered with 企查查 or 爱企查 to the latest information so that phone or email validation can be received.

I. Domain validation operation steps

(1) DNS validation: you need to go to the domain management platform, click the domain, and add a DNS record:

1. Log in to the domain management platform > Add DNS record

(2) Email validation: only the following administrator email addresses can be used for validation; other email addresses are not supported:

Administrator email addresses are as follows:

admin@domain

administrator@domain

webmaster@domain

hostmaster@domain

postmaster@domain

Email validation operation steps: Copy the verification code in the email body --> Click here --> Paste the verification code --> Submit

(3) File validation:

Create the specified path on the root path of the domain's server and place the corresponding content. Overseas access through ports 80/443 is required to complete validation.

The path is generally: http://domain.com/.well-known/pki-validation/***.txt (wildcard certificates do not support this method). The specific content can be obtained after submitting the ticket.

II. Agreement email operation steps

Email subject: ORDER #order number - Agreement

1. Copy the verification code in the body --> Click Agreement Link

2. Paste the verification code --> Click NEXT

3. Enter the contact phone number, position, check the checkbox --> Click IACCEPT

Note: ① There must be no spaces before or after the verification code.

② The information filled in must be consistent with the information used to apply for the certificate and must be real information.

III. Organization validation operation steps

(1) Third-party platform phone validation operation steps

Email subject: ORDER#order number-Callback

1. Go to the applicant's email address to check the email, click here in the email body, or copy the verification code --> Click the link --> Paste

2. Click "Call Now" to perform phone validation immediately. After answering, record the six-digit verification code announced, and submit it in the email to complete validation.

If the email operation fails, you can choose to contact CA to manually make a phone call to verify the submitted certificate application information and complete validation.

Note: The CA phone call is an overseas call. Before choosing phone, confirm whether the phone blocks overseas calls. If it is blocked, please contact the carrier to cancel it. After cancellation, validation can be completed.

How to cancel blocking for different carriers is as follows:

• 中国移动：You can call 10086 and transfer to manual service to request enabling the international and Hong Kong/Macau/Taiwan number segment blocking function; or follow the "中国移动高频骚扰电话防护" WeChat Official Account, select spam interception settings in service settings, and turn off international and Hong Kong/Macau/Taiwan number segment interception. You can also send the SMS "QXGJLH" to 10086 to stop overseas call service.

• 中国联通：Edit the SMS "1901" and send it to 10010, and reply "否" in the secondary confirmation reminder to cancel the blocking of international and Hong Kong/Macau/Taiwan incoming calls; or follow the "机伶" WeChat Official Account, click "智能防骚扰" in "我的机伶", log in with the mobile number, and turn off international and Hong Kong/Macau/Taiwan incoming call blocking. You can also go through "中国联通 APP"-Service-Handling page to turn off the "境外来电接收" function.

• 中国电信：Call 10000 and transfer to manual service to turn off international long-distance blocking; or follow the "天翼防骚扰" WeChat Official Account and turn off international long-distance blocking in the intelligent interception settings under service settings.

(2) Third-party platform email validation operation steps

Email subject: ORDER #order number - Callback via Email

1. Copy the verification code in the body --> Click here or click the link

2. Fill in the applicant's relevant information --> Paste the verification code --> Click Submit

(3) Lawyer's letter validation (if none of the above third-party platform validation methods can be used, you can choose this method for organization validation)

To choose this method, you need to provide a confirmation letter and it must be stamped, and fill in the lawyer's letter. The confirmation letter and lawyer's letter templates can be provided by contacting 锐成.

Timeliness note: The domain validation value remains valid from the time the ticket is submitted. Certificate issuance usually takes 1-3 working days from ticket submission to review completion. Special orders can be expedited. Because the CA review department handles global orders, there may be time differences. For orders that need to be issued on the same day, please submit the ticket in the morning for validation.