News Center

SSL File-Based Validation Changes
| Views: 9484



Hi there,


Currently, for many of the DCV methods, the CA/B Forum Baseline Requirements consider an FQDN (e.g. subdomain2.subdomain.example.com) or wildcard domain (e.g. *.subdomain.example.com) to be validated once its base domain (e.g. example.com) or other superior domain name (e.g. subdomain.example.com) is validated.


However, the policy change will require separate validation for each FQDN/SAN when file-based validation is used, and file-based validation will be disallowed entirely for wildcard certificates since wildcard domain names are not considered FQDNs.

 

Note that this change does not apply to Email and DNS-based validation, which can still be used for wildcard certificates and can be performed at the base domain level or other shared superior domain to validate subdomains and wildcard domains.

 

The policy change is expected to take effect on November 15, 2021.

Illustration of upcoming changes to file-based validation


FQDN/SAN in certificate

Location of domain validation file

Allowed for certificate issued on
  or before November 14, 2021?

Allowed for certificate issued after   Nov. 15, 2021?

example.com

example.com

Yes

Yes

sub.example.com

sub.example.com

Yes

Yes

sub.example.com

example.com

Yes

No

*.example.com

example.com

Yes

No

www.example.com

example.com

Yes

No

www.sub.example.com

sub.example.com

Yes

No


Feel free to contact us if you have any inquires.

OnlineNIC SSL Team


 


Join our free reseller program with more than 10,000 resellers worldwide

Become Reseller NOW

Join Our Newsletter & Marketing Communication

We'll send you news and offers.

Company Info
About Us
Partners
News Center
Payment Info
Testimonials
Legal Policies
Domain Reseller
Domains
Business Email
Cpanel Demo
SSL certificates
Secure Site Pro
Domain Price
Escrow Service
RapidSSL
Anti-Malware Scan
Support
Value Added Services
Special Offer
Web Hosting
QuickSSL Premium
Symantec SSL
FAQ
Domain Whois
Email Services
Hosting Services
True BusinessID
Secure Site
Open/Track a Ticket
Domain
Email Plans
Reseller Hosting
True BusinessID wildcard
True BusinessID EV
Contact Us



   

1998-2024 OnlineNIC is an ICANN-accredited registrar. Please read our Privacy Policy, Service terms , and Dispute Policy