Help Center/ Cloud Certificate & Manager/ SSL Certificate Manager (SCM) User Guide/ Applying for an SSL Certificate/ Verifying Domain Name Ownership/ Domain Name Verification Overview
Updated on 2026-10-10 GMT+08:00
View PDF
Share

Domain Name Verification Overview

After you submit a certificate application, you need to verify the domain name ownership. According to CA requirements, if you apply for an SSL certificate, you must work with the CA to complete the domain name ownership verification.

  • After your ownership of the domain name is verified by you and approved by the CA, the CA will issue the certificate.
  • If you do not complete the domain ownership verification, your certificate will remain in the Pending domain name verification state.

Applicable Scope

  • Domain name verification is required for both formal and test certificates.
  • SSL certificate status: Domain name verification pending

Verification Method

You can verify your domain ownership by any of the following methods. For details, see Table 1.

Table 1 Domain name verification methods

Method

Description

Application Scenario

Automatic DNS Verification

With your authorization, SCM modifies the record set configured for the domain name. SCM automatically adds a record to the record set for verification.

Your certificate is used for a domain name that you apply for on Huawei Cloud platform and is hosted on Huawei Cloud DNS.

Manual DNS Verification

You add a record to the record set configured for the domain name for verification.
  • You have the permission to modify the DNS resolution settings.
  • You have selected manual DNS verification for domain name verification method when applying for the certificate. (This is not required for DV certificates.)

Email Verification

You log in to the email address of the domain name administrator and reply to the domain name confirmation email sent by the CA.

You have the permission to log in to the domain name administrator's mailbox. You have the domain name management permission.

File Verification

You obtain the certificate verification file from the SCM console and create the specified file in the website root directory on the server.
  • You have the permission to write content to the root directory of the server where the website is located. You have the server management permission.
  • Port 80 or 443 is enabled on the server to listen to HTTP or HTTPS requests.

    CAs send authentication requests only to port 80 or 443. If port 80 or 443 is not enabled on your server, do not use the file verification method.
Table 2 Domain name verification methods supported by different certificate types

Certificate Type

Associating with Domain Name or IP Address

Method

DV

Single domain
  • File verification
  • Manual DNS verification

Other

Manual DNS verification

OV

IP addresses bound during certificate application

File verification

Associating with domain names during certificate application

Automatic DNS verification

EV

All
  • Automatic DNS verification
  • Email verification

FAQ

How Do I Check Whether Domain Name Verification Takes Effect?

Why Does the SSL Certificate Remain in the Pending Domain Name Verification State (Application Progress Is 40%) After Domain Name Verification Is Complete?

How Do I Change the Domain Name Verification Mode When the SSL Certificate Status Is Pending domain name verification?

How Do I Handle the Email or Phone Call from the CA?