Namecheap Invalid Csr Entry Please Try Again

How can I consummate the domain command validation (DCV) for my SSL certificate?

Earlier an SSL document tin can exist issued, the document applicant needs to confirm their domain ownership rights. This is chosen domain control validation (DCV). When you are activating your certificate, yous will be presented with iii methods of DCV to cull from:

• Add CNAME record
• Upload a validation file
• Receive an email

If you need to switch your called DCV method, check the following guide:

• Changing DCV methods

Add CNAME record

This validation method involves adding a CNAME tape to the DNS settings of your domain.

After you complete SSL activation, yous'll find instructions on completing this DCV method, too as the values yous will need for the CNAME record in the SSL Details folio of your account:

Click on Get Record to encounter the CNAME record values.

Note: Some DNS systems (including the Namecheap system) have the trend to automatically add together the domain proper name to the values submitted during tape creation. Please brand sure that your domain proper noun is not duplicated in the values. If your domain is using Namecheap Bones nameservers or PremiumDNS, remove the "instance.com" function of the provided Host value before calculation information technology to the validation record for the domain. Copy the Host and Target values and paste them into the corresponding fields in your DNS provider account. Set the minimum possible TTL value.

Note: Please proceed in mind that if you are activating a Multi-domain certificate, the DNS record created for the bare domain (without www.) will verify this domain and its subdomain(s) included in the certificate. Nevertheless, to get the certificate issued, all domains/subdomains included in the certificate should be verified.

One time the correct values are gear up upwards, head to the SSL details page again, click the link beside "Become a CNAME record".

On the new page, click the 'EDIT METHODS' push.

In the pop-up window, please click Save Changes/Retry Alt DCV to speed up the process of domain control validation.

However, if yous are activating a single-domain certificate for a subdomain, y'all'll demand to set up the DNS tape for the bare domain directly.

Upload a validation file

This DCV method involves uploading an activation file to your website's hosting server.

The validation file is a TXT file with a proper name featuring a combination of numbers and letters, due east.g., AN2D4C5H7F01823KRIDHJ.txt.

Of import note: When uploading the file, delight do not modify the file name or its content.

When you've completed the activation process, you'll be directed to the SSL Details page in your Namecheap account, where you'll observe instructions and a link to the Edit methods page where you tin download the validation file.

You lot'll need to place the file in the document root directory of your domain name in the subfolder of the '.well-known' folder called 'pki-validation'.

Once y'all identify information technology here, the validation file should exist attainable via the following link: http://yourdomainname.com/.well-known/pki-validation/AN2D4C5H7F01823KRIDHJ.txt, where 'yourdomainname.com' is the domain name in the certificate, and 'AN2D4C5H7F01823KRIDHJ.txt' should be the exact proper noun of the validation file you lot downloaded from your Namecheap account without any changes.

Single-domain SSLs:

If you have a Single-domain SSL, the file needs to be accessible both via http://yourdomainname.com/.well-known/pki-validation/AN2D4C5H7F01823KRIDHJ.txt and http://www.yourdomainname.com/.well-known/pki-validation/AN2D4C5H7F01823KRIDHJ.txt.

These requirements also apply to SSLs activated for subdomains. You should make the file accessible both via http://sub.yourdomainname.com/.well-known/pki-validation/AN2D4C5H7F01823KRIDHJ.txt and http://www.sub.yourdomainname.com/.well-known/pki-validation/AN2D4C5H7F01823KRIDHJ.txt

If you activate your SSL for yourdomainname.com and the file is attainable via yourdomainname.com but not accessible via world wide web.yourdomainname.com, then the SSL volition secure just yourdomainname.com. At the same time, if your SSL was activated for www.yourdomainname.com and the file can exist accessed via the www subdomain but cannot be accessed via the bare domain (yourdomainname.com), then the SSL will but be issued for www.yourdomainname.com.

Multi-domain SSLs:

For Multi-domain SSLs, the validation file needs to be accessible for each hostname you specified during the SSL activation process.

For example, if you activated your Multi-domain SSL for yourdomain.com, www.yourdomain.com and domain_2.cyberspace, the validation file should exist accessible for all of these hostnames.

Wildcard SSLs:

If your Wildcard SSL is pending validation using the "Upload a validation file" method, yous should complete information technology before Nov 15, 2021. If your Wildcard SSL is not validated until and then, you lot will need to change the DCV method to "Receive an email" or "Add together a CNAME record".

Once your file is uploaded, you can verify it past clicking on the links in the yellow panel with DCV instructions at the pinnacle of the SSL details page:

Note: If you have a Multi-Domain SSL and choose this method of DCV for several domains, no link will announced in the yellowish panel as each domain will have a dissimilar link. To verify each of the domains, you will demand to etch the corresponding links by post-obit the instructions in the yellow box and checking each URL in your browser. In most cases, if a elementary text line similar the i below is shown on the screen, the validation file is accessible.

Once the file is uploaded and accessible externally via the following URL http://your_domain_name.com/.well-known/pki-validation/filename.txt, please click Save Changes/Retry Alt DCV. This will strength the Certificate Authority to perform the DCV check.

Note: If you are activating your certificate for a subdomain, you can either upload the text to the domain's primary directory or the subdomain'due south directory. So the file should be attainable either via http(s)://instance.com/.well-known/pki-validation/ or via http(south)://sub.instance.com/.well-known/pki-validation/ If you lot are activating a Multi-domain certificate for subdomains, the validation file should be placed into the Certificate root directory of each corresponding domain. Nosotros recommend having it uploaded for each subdomain as well.

Note: If y'all have activated the certificate with domain.com indicated as the FQDN (Fully Qualified Domain Proper noun) in your CSR code, please make sure that the file is available via http://domain.com/.well-known/pki-validation/file.txt . In this example, www.domain.com is considered to exist under your control as well.

If your CSR lawmaking contains www.domain.com every bit the FQDN, delight make sure that the file is available via the link http://domain.com/.well-known/pki-validation/file.txt . The file'south contents shouldn't be changed in whatsoever manner, as Comodo'south (now Sectigo) validation arrangement is example sensitive.

Receive an email

This option requires yous to have a domain-related email accost from the suggested list. The verbal email address which volition exist used for the DCV purpose is selected during the SSL activation process.

Due to CA/B forum regulations, you can merely utilize a domain Whois record contact email or one of the post-obit domain-related generic emails to receive an approval email:

• admin@example.com
• administrator@example.com
• postmaster@example.com
  
• webmaster@example.com
• hostmaster@example.com

Note: The Whois email address usually looks something similar 00222eeef898g6245jbkhdshml42@your_whois_privacy.service if the Whois privacy protection service is On.

After you take completed the SSL activation process, the Document Authority will send an electronic mail to the email address you lot selected.

If the Whois record email does non appear in the list of possible emails you lot can choose during activation, it ways that the Certificate Authorisation failed to retrieve the Whois record for your domain from your CSR lawmaking. This is quite common for domains with such TLDs every bit .ca, .br, .uk, .au, etc. In this case, if you want to validate the document using the email from Whois, you tin choose any email from the listing for activation. Afterward yous complete activation, delight submit a request to Sectigo's ticketing system to switch the validation email, mentioning your Sectigo Order Number. That number is specified as 'CA order ID' on the SSL Details page.

Once the activation is complete, an email will be sent to you. To confirm the domain buying rights for your certificate, you demand to copy the validation code from the approval e-mail, follow the link, and then paste the validation code into the corresponding field on the new page and click Next.

Paste the code from the email and striking Side by side.

That's it!

If you do not receive the approval email, you tin always retry it by clicking Resend email on the Edit methods page. The link to the Edit methods folio is available in the validation instructions panel placed on the SSL Details page.

Changing DCV methods

If y'all chose a particular DCV method during activation but want to switch to a different one after, y'all can change it on your account page. Navigate to your Namecheap business relationship Dashboard, open the SSL Certificates folio and locate the SSL certificate in question and click Details next to it.

On the side by side page, click the link in the xanthous table with DCV instructions to go to the Edit methods page.

On the Edit methods page, you'll encounter the following button:

When y'all click it, you volition exist presented with the three possible DCV options in a drop-down card.

Choose the desired method and click Salve Changes / Retry Alt DCV.

Then perform the required steps to complete the DCV.

Note: Yous tin can also use this SSL Validation Tool to check your SSL's status, switch validation method, and speed up SSL certificate issuance.

Note: If you lot have a Domain Validation certificate, it volition be emailed to you shortly after DCV is complete.

If you accept an OV or an EV certificate, your order will demand to undergo business validation. Later you lot complete the DCV, you will receive an email from Comodo (at present Sectigo) with further instructions.

Associated articles

laddanter1984.blogspot.com

Source: https://www.namecheap.com/support/knowledgebase/article.aspx/9637/68/how-can-i-complete-the-domain-control-validation-dcv-for-my-ssl-certificate/

Share this post