{"action":"created","comment":{"url":"https://api.github.com/repos/aetrion/dnsimple-support/pulls/comments/35474488","id":35474488,"diff_hunk":"@@ -0,0 +1,163 @@\n+---\r\n+title: SSL Certificate Email-based Domain Validation\r\n+excerpt: The email-based domain validation is the most common domain ownership validation method for a certificate and it is required for domain-validated certificates.\r\n+categories:\r\n+- SSL Certificates\r\n+redirect_from:\r\n+  - /articles/ssl-certificates-email-approval/\r\n+  - /articles/selecting-ssl-certificates-email/\r\n+  - /articles/resending-ssl-certificates-email/\r\n+  - /articles/changing-ssl-certificates-email/\r\n+---\r\n+\r\n+# SSL Certificate Email-based Domain Validation\r\n+\r\n+### Table of Contents {#toc}\r\n+\r\n+* TOC\r\n+{:toc}\r\n+\r\n+---\r\n+\r\n+**Email-based certificate validation** is the most common certificate validation mechanism used by Certificate Authorities in case of [domain-validated certificate orders](/articles/ssl-certificates-types/#ssl-certificates-by-validation-level).\r\n+\r\n+The goal of validation is to ensure the authenticity of a certificate order before issuing a new certificate. Specifically, before issuing the certificate, the Certificate Authority must be sure the domain listed in the certificate is registered and someone with admin rights is aware of and approves the certificate request.\r\n+\r\n+The validation email is a mandatory step performed by the Certification Authority based only on publicly accessible information.\r\n+\r\n+## The process\r\n+\r\n+The email validation process consists of three steps:\r\n+\r\n+1. When you purchase a certificate, we show you a list of authoritative emails identified by the Certificate Authority for the domain associated with the certificate\r\n+1. You select an email from the list.\r\n+1. The [Certificate Authority](/articles/what-is-certificate-authority/) sends a verification email (also called DCV email) to the recipient with an unique link to approve the certificate and validate your domain ownership.\r\n+1. **You click on the link to validate and approve the certificate**. At this point, the certificate's authenticity is validated and the authority will generate it.\r\n+\r\n+## Email requirements {#requirements}\r\n+\r\n+**The approval email cannot be an arbitrary email** such as a customer-provided email or the email in your DNSimple account.\r\n+\r\n+Remember: the goal of the validation process is to ensure that the certificate is requested by someone with admin rights on the domain. Therefore, the email must publicly and inequivocally identify the customer as the owner or administrator of the domain listed in the certificate.\r\n+\r\n+The approval email typically can be sent to the following addresses, called administrative emails:\r\n+\r\n+- admin@example.com\r\n+- administrator@example.com\r\n+- hostmaster@example.com\r\n+- postmaster@example.com\r\n+- webmaster@example.com\r\n+\r\n+Where `example.com` is the domain for the certificate being purchased.\r\n+\r\n+Alternatively, **the approval email can be sent to a different email address only if this is listed in the WHOIS information for the domain**. In fact, this is the only way for the Certificate Authority to determine if an email is officially associated with a domain.\r\n+\r\n+## Email validation and WHOIS privacy {#whois-privacy}\r\n+\r\n+<warning>\r\n+[Whois Privacy Protection services](/articles/what-is-whois-privacy/) are known to interfere with the delivery of the approval email. Be sure to temporarily disable the Whois Privacy feature or any another privacy protection service until the certificate is issued.\r\n+</warning>\r\n+\r\n+If the whois privacy is enabled for the domain associated with the certificate, the privacy email (e.g. `wqyygglqlt@whoisprivacyprotect.com`) will be included in the list of possible emails to be used. However, it's not guaranteed that the delivery will be successful and DNSimple has no control over the delivery of the validation email.\r\n+\r\n+[Disable any whois privacy](/articles/whois-privacy/#disable-whois-privacy) service before proceeding.\r\n+\r\n+<note>\r\n+Once you disable whois privacy it may take up to 24 hours for the email list to be refreshed, as the Certificate Authority may cache that information. [Contact us](https://dnsimple.com/contact) and provide the certificate name if you want to speed up the update.\r\n+</note>\r\n+\r\n+## Select the validation email address {#select-email}\r\n+\r\n+You select the validation email when you purchase the certificate, which is based upon the constraints documented above.\r\n+\r\n+<div class=\"section-steps\" markdown=\"1\">\r\n+##### To select a validation email\r\n+\r\n+1.  Read the list of all available approver emails.\r\n+\r\n+    ![](/files/dnsimple-ssl-selectapprover.png)\r\n+\r\n+1.  Choose the email address you want to use by clicking on it.\r\n+1.  Click *Send Approver Email* to configure and submit the certificate for validation.\r\n+</div>\r\n+\r\n+If the approver is not in this list or you need time to configure one of those emails, you can also close this page and come back later.\r\n+\r\n+<div class=\"section-steps\" markdown=\"1\">\r\n+##### To select a validation email for a previously purchased certificate\r\n+\r\n+1.  Log into your DNSimple account.\r\n+1.  On the top-nav menu click the <label>Domains</label> tab, locate the relevant domain and click on the name to access the domain page.\r\n+1.  Scroll down to the <label>Active SSL Certificate</label> list and click on the certificate.\r\n+\r\n+    ![](/files/dnsimple-ssl-pagelink-purchased.png)\r\n+\r\n+1.  Click <label>complete the setup process now</label>.\r\n+\r\n+    ![](/files/dnsimple-ssl-completesetup.png)\r\n+\r\n+1.  Read the list of all available approver emails.\r\n+\r\n+    ![](/files/dnsimple-ssl-selectapprover.png)\r\n+\r\n+1.  Choose the email address you want to use by clicking on it.\r\n+1.  Click <label>Send Approver Email</label> to configure and submit the certificate for validation.\r\n+</div>\r\n+\r\n+\r\n+## Select a different email address {#different-email}\r\n+\r\n+If you want to submit your certificate to the Certificate Authority for approval but none of the provided email addresses are working, then you have a few options.\r\n+\r\n+<note>\r\n+Before proceeding, **take a moment to read the information at the beginning of this article to understand the goal of the certificate validation and how it works**. It's important to remember that, as described above in this article, the list of authoritative emails is generated by the Certificate Authority based on the email addresses publicly associated with the domain attached to the certificate.\r\n+</note>\r\n+\r\n+Here's some possible solutions:\r\n+\r\n+1. Temporarily configure one of the email addresses in the list (either as a full mailbox or as an alias/forward to an existing mailbox). If the domain doesn't have any email service associated and you manage the DNS with us, you can use our [email forwarding](/articles/email-forwarding/) service to quickly create an email for `admin@example.com` and forward it to a personal or private email.\r\n+\r\n+1. If the list contains an email address associated with a whois privacy service, temporarily [disable the whois privacy](#whois-privacy) to use the email address from the WHOIS.\r\n+\r\n+1. If you want to use a different email address either from the same domain or a different one, check the [email requirements](#requirements) and update the WHOIS information of the domain to include the email address in at least one of the WHOIS contact (e.g. registrant/owner, technical contact or admin contact).\r","path":"content/articles/ssl-certificates-email-validation.markdown","position":122,"original_position":122,"commit_id":"94b310e49dc44d32d99e00a84fcb478164d916a6","original_commit_id":"94b310e49dc44d32d99e00a84fcb478164d916a6","user":{"login":"weppos","id":5387,"avatar_url":"https://avatars.githubusercontent.com/u/5387?v=3","gravatar_id":"","url":"https://api.github.com/users/weppos","html_url":"https://github.com/weppos","followers_url":"https://api.github.com/users/weppos/followers","following_url":"https://api.github.com/users/weppos/following{/other_user}","gists_url":"https://api.github.com/users/weppos/gists{/gist_id}","starred_url":"https://api.github.com/users/weppos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/weppos/subscriptions","organizations_url":"https://api.github.com/users/weppos/orgs","repos_url":"https://api.github.com/users/weppos/repos","events_url":"https://api.github.com/users/weppos/events{/privacy}","received_events_url":"https://api.github.com/users/weppos/received_events","type":"User","site_admin":false},"body":"Yes, `1.` is expected to denote an ordered list.","created_at":"2015-07-24T23:21:34Z","updated_at":"2015-07-24T23:21:34Z","html_url":"https://github.com/aetrion/dnsimple-support/pull/73#discussion_r35474488","pull_request_url":"https://api.github.com/repos/aetrion/dnsimple-support/pulls/73","_links":{"self":{"href":"https://api.github.com/repos/aetrion/dnsimple-support/pulls/comments/35474488"},"html":{"href":"https://github.com/aetrion/dnsimple-support/pull/73#discussion_r35474488"},"pull_request":{"href":"https://api.github.com/repos/aetrion/dnsimple-support/pulls/73"}}},"pull_request":{"url":"https://api.github.com/repos/aetrion/dnsimple-support/pulls/73","id":40558500,"html_url":"https://github.com/aetrion/dnsimple-support/pull/73","diff_url":"https://github.com/aetrion/dnsimple-support/pull/73.diff","patch_url":"https://github.com/aetrion/dnsimple-support/pull/73.patch","issue_url":"https://api.github.com/repos/aetrion/dnsimple-support/issues/73","number":73,"state":"open","locked":false,"title":"Email validation","user":{"login":"weppos","id":5387,"avatar_url":"https://avatars.githubusercontent.com/u/5387?v=3","gravatar_id":"","url":"https://api.github.com/users/weppos","html_url":"https://github.com/weppos","followers_url":"https://api.github.com/users/weppos/followers","following_url":"https://api.github.com/users/weppos/following{/other_user}","gists_url":"https://api.github.com/users/weppos/gists{/gist_id}","starred_url":"https://api.github.com/users/weppos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/weppos/subscriptions","organizations_url":"https://api.github.com/users/weppos/orgs","repos_url":"https://api.github.com/users/weppos/repos","events_url":"https://api.github.com/users/weppos/events{/privacy}","received_events_url":"https://api.github.com/users/weppos/received_events","type":"User","site_admin":false},"body":"I merged all the email validation articles into a single one and added a section that explains what to do in case the email you want to use is not in the list (and I'll link it from the app UI).\r\n\r\n/cc @aetrion/dnsimple for review\r\n\r\nPlease note some of the screenshots are outdated. I'll update them asap.\r\n","created_at":"2015-07-22T12:18:47Z","updated_at":"2015-07-24T23:21:34Z","closed_at":null,"merged_at":null,"merge_commit_sha":"7f539b0682db191792c97fc3a5204f973f4d883b","assignee":null,"milestone":null,"commits_url":"https://api.github.com/repos/aetrion/dnsimple-support/pulls/73/commits","review_comments_url":"https://api.github.com/repos/aetrion/dnsimple-support/pulls/73/comments","review_comment_url":"https://api.github.com/repos/aetrion/dnsimple-support/pulls/comments{/number}","comments_url":"https://api.github.com/repos/aetrion/dnsimple-support/issues/73/comments","statuses_url":"https://api.github.com/repos/aetrion/dnsimple-support/statuses/94b310e49dc44d32d99e00a84fcb478164d916a6","head":{"label":"aetrion:email-validation","ref":"email-validation","sha":"94b310e49dc44d32d99e00a84fcb478164d916a6","user":{"login":"aetrion","id":323774,"avatar_url":"https://avatars.githubusercontent.com/u/323774?v=3","gravatar_id":"","url":"https://api.github.com/users/aetrion","html_url":"https://github.com/aetrion","followers_url":"https://api.github.com/users/aetrion/followers","following_url":"https://api.github.com/users/aetrion/following{/other_user}","gists_url":"https://api.github.com/users/aetrion/gists{/gist_id}","starred_url":"https://api.github.com/users/aetrion/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aetrion/subscriptions","organizations_url":"https://api.github.com/users/aetrion/orgs","repos_url":"https://api.github.com/users/aetrion/repos","events_url":"https://api.github.com/users/aetrion/events{/privacy}","received_events_url":"https://api.github.com/users/aetrion/received_events","type":"Organization","site_admin":false},"repo":{"id":16173933,"name":"dnsimple-support","full_name":"aetrion/dnsimple-support","owner":{"login":"aetrion","id":323774,"avatar_url":"https://avatars.githubusercontent.com/u/323774?v=3","gravatar_id":"","url":"https://api.github.com/users/aetrion","html_url":"https://github.com/aetrion","followers_url":"https://api.github.com/users/aetrion/followers","following_url":"https://api.github.com/users/aetrion/following{/other_user}","gists_url":"https://api.github.com/users/aetrion/gists{/gist_id}","starred_url":"https://api.github.com/users/aetrion/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aetrion/subscriptions","organizations_url":"https://api.github.com/users/aetrion/orgs","repos_url":"https://api.github.com/users/aetrion/repos","events_url":"https://api.github.com/users/aetrion/events{/privacy}","received_events_url":"https://api.github.com/users/aetrion/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/aetrion/dnsimple-support","description":"","fork":false,"url":"https://api.github.com/repos/aetrion/dnsimple-support","forks_url":"https://api.github.com/repos/aetrion/dnsimple-support/forks","keys_url":"https://api.github.com/repos/aetrion/dnsimple-support/keys{/key_id}","collaborators_url":"https://api.github.com/repos/aetrion/dnsimple-support/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/aetrion/dnsimple-support/teams","hooks_url":"https://api.github.com/repos/aetrion/dnsimple-support/hooks","issue_events_url":"https://api.github.com/repos/aetrion/dnsimple-support/issues/events{/number}","events_url":"https://api.github.com/repos/aetrion/dnsimple-support/events","assignees_url":"https://api.github.com/repos/aetrion/dnsimple-support/assignees{/user}","branches_url":"https://api.github.com/repos/aetrion/dnsimple-support/branches{/branch}","tags_url":"https://api.github.com/repos/aetrion/dnsimple-support/tags","blobs_url":"https://api.github.com/repos/aetrion/dnsimple-support/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/aetrion/dnsimple-support/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/aetrion/dnsimple-support/git/refs{/sha}","trees_url":"https://api.github.com/repos/aetrion/dnsimple-support/git/trees{/sha}","statuses_url":"https://api.github.com/repos/aetrion/dnsimple-support/statuses/{sha}","languages_url":"https://api.github.com/repos/aetrion/dnsimple-support/languages","stargazers_url":"https://api.github.com/repos/aetrion/dnsimple-support/stargazers","contributors_url":"https://api.github.com/repos/aetrion/dnsimple-support/contributors","subscribers_url":"https://api.github.com/repos/aetrion/dnsimple-support/subscribers","subscription_url":"https://api.github.com/repos/aetrion/dnsimple-support/subscription","commits_url":"https://api.github.com/repos/aetrion/dnsimple-support/commits{/sha}","git_commits_url":"https://api.github.com/repos/aetrion/dnsimple-support/git/commits{/sha}","comments_url":"https://api.github.com/repos/aetrion/dnsimple-support/comments{/number}","issue_comment_url":"https://api.github.com/repos/aetrion/dnsimple-support/issues/comments{/number}","contents_url":"https://api.github.com/repos/aetrion/dnsimple-support/contents/{+path}","compare_url":"https://api.github.com/repos/aetrion/dnsimple-support/compare/{base}...{head}","merges_url":"https://api.github.com/repos/aetrion/dnsimple-support/merges","archive_url":"https://api.github.com/repos/aetrion/dnsimple-support/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/aetrion/dnsimple-support/downloads","issues_url":"https://api.github.com/repos/aetrion/dnsimple-support/issues{/number}","pulls_url":"https://api.github.com/repos/aetrion/dnsimple-support/pulls{/number}","milestones_url":"https://api.github.com/repos/aetrion/dnsimple-support/milestones{/number}","notifications_url":"https://api.github.com/repos/aetrion/dnsimple-support/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/aetrion/dnsimple-support/labels{/name}","releases_url":"https://api.github.com/repos/aetrion/dnsimple-support/releases{/id}","created_at":"2014-01-23T14:00:49Z","updated_at":"2015-06-29T04:08:57Z","pushed_at":"2015-07-24T17:22:51Z","git_url":"git://github.com/aetrion/dnsimple-support.git","ssh_url":"git@github.com:aetrion/dnsimple-support.git","clone_url":"https://github.com/aetrion/dnsimple-support.git","svn_url":"https://github.com/aetrion/dnsimple-support","homepage":"https://support.dnsimple.com/","size":27256,"stargazers_count":2,"watchers_count":2,"language":"CSS","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":1,"mirror_url":null,"open_issues_count":12,"forks":1,"open_issues":12,"watchers":2,"default_branch":"master"}},"base":{"label":"aetrion:master","ref":"master","sha":"6f8324a0b5b359a278f7570711d3d2cf65df0f27","user":{"login":"aetrion","id":323774,"avatar_url":"https://avatars.githubusercontent.com/u/323774?v=3","gravatar_id":"","url":"https://api.github.com/users/aetrion","html_url":"https://github.com/aetrion","followers_url":"https://api.github.com/users/aetrion/followers","following_url":"https://api.github.com/users/aetrion/following{/other_user}","gists_url":"https://api.github.com/users/aetrion/gists{/gist_id}","starred_url":"https://api.github.com/users/aetrion/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aetrion/subscriptions","organizations_url":"https://api.github.com/users/aetrion/orgs","repos_url":"https://api.github.com/users/aetrion/repos","events_url":"https://api.github.com/users/aetrion/events{/privacy}","received_events_url":"https://api.github.com/users/aetrion/received_events","type":"Organization","site_admin":false},"repo":{"id":16173933,"name":"dnsimple-support","full_name":"aetrion/dnsimple-support","owner":{"login":"aetrion","id":323774,"avatar_url":"https://avatars.githubusercontent.com/u/323774?v=3","gravatar_id":"","url":"https://api.github.com/users/aetrion","html_url":"https://github.com/aetrion","followers_url":"https://api.github.com/users/aetrion/followers","following_url":"https://api.github.com/users/aetrion/following{/other_user}","gists_url":"https://api.github.com/users/aetrion/gists{/gist_id}","starred_url":"https://api.github.com/users/aetrion/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aetrion/subscriptions","organizations_url":"https://api.github.com/users/aetrion/orgs","repos_url":"https://api.github.com/users/aetrion/repos","events_url":"https://api.github.com/users/aetrion/events{/privacy}","received_events_url":"https://api.github.com/users/aetrion/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/aetrion/dnsimple-support","description":"","fork":false,"url":"https://api.github.com/repos/aetrion/dnsimple-support","forks_url":"https://api.github.com/repos/aetrion/dnsimple-support/forks","keys_url":"https://api.github.com/repos/aetrion/dnsimple-support/keys{/key_id}","collaborators_url":"https://api.github.com/repos/aetrion/dnsimple-support/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/aetrion/dnsimple-support/teams","hooks_url":"https://api.github.com/repos/aetrion/dnsimple-support/hooks","issue_events_url":"https://api.github.com/repos/aetrion/dnsimple-support/issues/events{/number}","events_url":"https://api.github.com/repos/aetrion/dnsimple-support/events","assignees_url":"https://api.github.com/repos/aetrion/dnsimple-support/assignees{/user}","branches_url":"https://api.github.com/repos/aetrion/dnsimple-support/branches{/branch}","tags_url":"https://api.github.com/repos/aetrion/dnsimple-support/tags","blobs_url":"https://api.github.com/repos/aetrion/dnsimple-support/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/aetrion/dnsimple-support/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/aetrion/dnsimple-support/git/refs{/sha}","trees_url":"https://api.github.com/repos/aetrion/dnsimple-support/git/trees{/sha}","statuses_url":"https://api.github.com/repos/aetrion/dnsimple-support/statuses/{sha}","languages_url":"https://api.github.com/repos/aetrion/dnsimple-support/languages","stargazers_url":"https://api.github.com/repos/aetrion/dnsimple-support/stargazers","contributors_url":"https://api.github.com/repos/aetrion/dnsimple-support/contributors","subscribers_url":"https://api.github.com/repos/aetrion/dnsimple-support/subscribers","subscription_url":"https://api.github.com/repos/aetrion/dnsimple-support/subscription","commits_url":"https://api.github.com/repos/aetrion/dnsimple-support/commits{/sha}","git_commits_url":"https://api.github.com/repos/aetrion/dnsimple-support/git/commits{/sha}","comments_url":"https://api.github.com/repos/aetrion/dnsimple-support/comments{/number}","issue_comment_url":"https://api.github.com/repos/aetrion/dnsimple-support/issues/comments{/number}","contents_url":"https://api.github.com/repos/aetrion/dnsimple-support/contents/{+path}","compare_url":"https://api.github.com/repos/aetrion/dnsimple-support/compare/{base}...{head}","merges_url":"https://api.github.com/repos/aetrion/dnsimple-support/merges","archive_url":"https://api.github.com/repos/aetrion/dnsimple-support/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/aetrion/dnsimple-support/downloads","issues_url":"https://api.github.com/repos/aetrion/dnsimple-support/issues{/number}","pulls_url":"https://api.github.com/repos/aetrion/dnsimple-support/pulls{/number}","milestones_url":"https://api.github.com/repos/aetrion/dnsimple-support/milestones{/number}","notifications_url":"https://api.github.com/repos/aetrion/dnsimple-support/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/aetrion/dnsimple-support/labels{/name}","releases_url":"https://api.github.com/repos/aetrion/dnsimple-support/releases{/id}","created_at":"2014-01-23T14:00:49Z","updated_at":"2015-06-29T04:08:57Z","pushed_at":"2015-07-24T17:22:51Z","git_url":"git://github.com/aetrion/dnsimple-support.git","ssh_url":"git@github.com:aetrion/dnsimple-support.git","clone_url":"https://github.com/aetrion/dnsimple-support.git","svn_url":"https://github.com/aetrion/dnsimple-support","homepage":"https://support.dnsimple.com/","size":27256,"stargazers_count":2,"watchers_count":2,"language":"CSS","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":1,"mirror_url":null,"open_issues_count":12,"forks":1,"open_issues":12,"watchers":2,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/aetrion/dnsimple-support/pulls/73"},"html":{"href":"https://github.com/aetrion/dnsimple-support/pull/73"},"issue":{"href":"https://api.github.com/repos/aetrion/dnsimple-support/issues/73"},"comments":{"href":"https://api.github.com/repos/aetrion/dnsimple-support/issues/73/comments"},"review_comments":{"href":"https://api.github.com/repos/aetrion/dnsimple-support/pulls/73/comments"},"review_comment":{"href":"https://api.github.com/repos/aetrion/dnsimple-support/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/aetrion/dnsimple-support/pulls/73/commits"},"statuses":{"href":"https://api.github.com/repos/aetrion/dnsimple-support/statuses/94b310e49dc44d32d99e00a84fcb478164d916a6"}}}}