Domain validation (DV) SSL certificates are the fastest and simplest way to get HTTPS encryption for your site. GeoTrust certificates are issued by DigiCert, a publicly trusted certificate authority that follows industry-standard validation protocols to ensure your certificate is issued securely and is trusted by all major browsers.
What Is Domain Validated SSL?
DV certificates prove you own the domain, with no business verification required. This makes them ideal for:
- Personal websites and blogs
- Small business sites
- Any site needing quick encryption
The domain validation process is typically completed within just a few minutes.
GeoTrust Offers 3 Domain Validation Methods
Choose the method that works best for your setup:
Option 1: Email Validation
GeoTrust sends a validation email to one of these addresses:
- admin@yourdomain.com
- administrator@yourdomain.com
- webmaster@yourdomain.com
- hostmaster@yourdomain.com
- postmaster@yourdomain.com
Steps to Complete the Email-Based Validation Process
- Select an email address you can access
- Check your inbox (and spam folder)
- Click the validation link in the email
- Follow the instructions to approve
Tip: Make sure the email address exists before starting validation.
Option 2: DNS Validation
GeoTrust provides a unique hash value for you to add to your DNS settings. Best for users comfortable with DNS management or automating certificate renewals.
Steps to Complete the DNS-Based Validation Process
- Log in to your domain registrar or DNS provider
- Create a CNAME or TXT record (as specified by GeoTrust)
- Copy the exact values provided in your GeoTrust order dashboard
- Save the DNS record
- Wait for DNS propagation (typically takes only a few minutes, but can take up to 24 hours)
Tip: Select the shortest time to live (TTL) DNS setting for your domain and verify that the DNS record is reachable in all locations.
Option 3: File Validation
Upload a validation file to your web server.
Steps to Complete the File-Based Validation Process
- Download the unique validation file provided by GeoTrust during the SSL issuance process
- Connect to your web server (via FTP, hosting control panel, etc.)
- Upload the file to: yourdomain.com/.well-known/pki-validation/
- Verify that the file is accessible at the URL GeoTrust specifies from all locations.
Tip: File upload is not available for wildcard SSL/TLS certificates.
Troubleshooting Common Issues
Email Not Received?
- Check your spam/junk folder
- Verify the email address exists and is active
- Check firewall or spam filter settings aren’t blocking GeoTrust/DigiCert emails (emails sent from a noreply@ account, and emails containing links)
DNS Validation Failing?
- Double-check the DNS record matches exactly (including any trailing periods)
- Use an independent DNS checker (such as MXToolbox) to verify that the DNS record is accessible
- Wait longer for DNS propagation (up to 72 hours in rare cases)
- Set a low TTL value to speed up propagation
File Upload Not Working?
- Ensure the file is in the correct directory: .well-known/pki-validation/
- Verify the file is publicly accessible via HTTP/HTTPS (go to the file URL in your browser and see if it loads)
- Check that your server isn’t blocking access to the .well-known directory
- Confirm the file content exactly matches what GeoTrust provided