请稍候...
  • 通配符证书Wildcard SSL,部署全网HTTPS必备
  • 为什么使用企业型SSL证书?
  • 增强型证书EV SSL,完美支持地址栏显示中文企业名称
  • HTTPS今天你用了吗?
  • 多域名SANS/UCC SSL证书,全面支持Exchange Server 2..
  • 选择SSL证书产品遇到问题?

申请SSL证书验证域名所有权限的其他方法Alternative Methods of Domain Control Validation (DCV)

点击数:222013-10-17 09:34:19 来源: 中国数字证书CHINASSL

All Comodo certificates must pass through DCV (Domain Control Validation) before they are issued. DCV is a mechanism used to prove ownership or control of a registered domain name.

所有套装证书必须通过DCV(域控制器验证)之前他们颁发。DCV是一种机制,用来证明注册域名的所有权或控制权。

There are 3 mechanisms for DCV:

  1. eMail-based DCV (Traditional)
    基于E-mail方式的域名控制验证
    You will be sent an email to an administrative contact for your domain. The email will contain a unique validation code and link. Clicking the link and entering the code will prove domain control.
    你将被发送电子邮件为您的域名管理联系人。电子邮件将包含一个独特的验证代码和链接。单击该链接并输入该代码将证明域控制。Valid email addresses are:
    Any email address which our system can scrape from a port 43 whois check;

    The following generic admin type email addresses @ the domain for which the certificate is being
    有效的电子邮件地址:
    我们的系统可以的任何电子邮件地址从一个端口43的whois检查;
    以下是有效的管理员的电子邮件地址@域类型



    applied:
    admin@
    administrator@
    postmaster@
    hostmaster@
    webmaster@

  2. DNS CNAME-based
    基于DNS CNAME方式的域名控制验证
    The CSR you submit to Comodo will be hashed. The hash values are provided to you and must be entered as a DNS CNAME record for your domain.哈希值输入如下:
    .yourdomain.com.  CNAME  .comodoca.com.

    Note: Please take notice the trailing period/fullstop at the tail end of each of the TLDs as this is required to make the entry fully-qualified.
    注意:请注意在每个顶级域名的尾端尾期/fullstop这是需要完全限定的条目

    Note2: Note that yourdomain.com in the example above (and below in the HTTP method instructions)means the Fully Qualified Domain Name (FQDN) contained in the certificate. If you are ordering a MDC or UCC certificate, separate CNAME records must be created for EACH FQDN in your order. Examples:
    .subdomain1.yourdomain.com.  CNAME  .comodoca.com.
    .subdomain2.yourdomain.com.  CNAME  .comodoca.com.
    yourdomain.com在上面的例子(和下面的HTTP方法说明)意味着完全限定的域名(FQDN)中包含的证书。如果您订购一个MDC或公开证书,必须创建单独的分类名称记录在您的订单为每个定义域全名。例如:
    .subdomain1.yourdomain.com.  CNAME .comodoca.com
    .subdomain2.yourdomain.com.  CNAME .comodoca.com.

  3. HTTP-based DCV
    基于HTTP方式的域名控制验证
    The CSR you submit to Comodo will be hashed. The hash values are provided to you and you must create a simple plain-text file and place this in the root of your webserver and served over HTTP-only!The file and it's content should be as follows:
    http://yourdomain.com/<大写的CSR的MD5哈希值>.txt

    Content (as a plain text file):

    comodoca.com

    Note: We will follow redirects from HTTP to HTTPS, however, all redirection must be done within a 5-second period. The DCV will fail if any serving or redirection takes longer than 5 seconds. DCV will also fail if the certificate encountered over HTTPS is not currently valid and signed by a publicly trusted CA.
    注意:我们将按照从HTTP重定向到HTTPS,然而,在5秒内必须完成所有重定向。如果任何服务或重定向的时间超过5秒,DCV将失败。DCV也会失败,如果证书的HTTPS目前还没有遇到有效和公开的受信任CA签署。

Additional Information

补充信息

In the event that you were not provided with your CSR hashes, then you may use ourOnline CSR Decoder.

如果您未提供CSR哈希,然后你可以使用我们Online CSR Decoder

We recommend:

我们建议:

* Uncheck Show Empty Fields

*不选中Show Empty Fields
* Check Show CSR Hashes

*选中Show CSR Hashes

before providing your CSR and clicking the Decode Button.

粘贴你的CSR文件到文本框,然后点击Decode按钮

 

 

中国数字证书CHINASSL原版翻译:https://www.chinassl.net/comodo_tech/n415.html

转载请注明出处

上一页1下一页