Last update at ：2024-04-23，Edit by888u
According to a notice issued by the CA/B Forum, starting from October 1, 2021, SSL certificates need to be re-verified every 398 days for domain name verification; starting from December 1 of the same year, wildcard SSL certificates will not support file verification of domain names. This major change in domain name verification will affect the choice of domain name verification method when applying for a certificate and the validity period of domain name verification. Note: This policy change applies to all new certificate applications, renewals, and re-signings, and already issued TLS/SSL certificates will not be affected.
Two major changes in SSL certificate domain name verification
1. Domain name verification needs to be re-verified every 398 days
Mozilla and CA/B Forum have shortened the domain name verification validity period to 398 days. This requires customers who are pre-qualified for domain verification to re-verify domain ownership annually. This new regulation is expected to be implemented on October 1, 2021.
2. Wildcard certificates will not support file verification for domain name verification
The file-based domain name verification method is also called file verification and http verification. The CA/B Forum proposed changes to the file verification method: prohibiting wildcard SSL certificates from using file verification for domain name verification, and restricting the effective use of subdomain names. The new regulations will come into effect on December 1, 2021. Email verification and DNS verification methods are not affected.
Currently, the industry allows domain name verification only for the main domain name (such as racent.com), and is applicable to wildcard certificates (such as *racent.com) and its lower-level subdomain names (such as support.racent.com). In other words, you can now use file verification to verify a main domain name, and its wildcard domain names and subdomain names do not need to be verified. However, after the new policy comes into effect, if you want to use file verification, the main domain name and each subdomain name need to be verified separately. Email verification and DNS verification methods can still be used with wildcard certificates and can be used again to verify their subdomains.
Solution
DigiCert, Sectigo and other global mainstream CA institutions have issued domain name verification change notices. In order to cope with these changes, minimize the risk of certificate interruption and ensure the normal operation of your business, Ruicheng InformationWarm reminder that you should make the following preparations in advance:
1. Do domain name verification regularly
SSL certificate domain name verification will expire every 398 days. For multi-year SSL certificates (including OV, EV, and DV), when the current SSL certificate expires, customers need to be reminded to redo domain name verification, otherwise it will be interrupted. Certificate application, renewal, and re-signing.
2. Change the domain name verification method of the wildcard certificate to email verification or DNS verification
Currently, some SSL certificate sales channels provide automatic domain name verification. If you use file verification, it is recommended to adjust to email verification or DNS verification.
If you have any questions about the above domain name verification changes, please contact your account manager or Ruicheng customer service for more information!
About Ruicheng information
Ruicheng Information is the leading Internet basic service distribution platform in mainland China, providing SSL certificates, domain names, corporate emails, server management panels, etc., and is committed to bringing high-quality services and cost-effective products to agents.
Recommended site searches: Wanwang space management, domain name registration number query, foreign virtual space, mainland China registration-free server, Korean virtual host.net virtual host, corporate email, Hong Kong virtual host space, registered domain name rental, the best US server,
发表评论