Getting a DV SSL (Domain Validation SSL) certificate is usually quick and simple. Below is an easy-to-follow, step-by-step guide covering both manual and automatic methods:
🛠️ Steps to Get a DV SSL Certificate
1. 🔍 Choose a Certificate Provider
First, choose an SSL provider. Popular options:
-
Let's Encrypt → Free, automatic
-
Comodo, Sectigo, DigiCert → Paid, more support
-
Through your hosting panel (cPanel, Plesk) → Usually integrated Let's Encrypt or other CAs
2. 🌐 Verify Domain Ownership
The certificate authority (CA) needs to verify that the domain belongs to you. There are 3 common methods:
| Validation Method | Description |
|---|---|
admin@domain.com, webmaster@domain.com – a validation email is sent to addresses like these |
|
| 🧾 DNS Record | You add a special TXT record provided by the CA to your DNS |
| 🌍 HTTP File | You upload a special validation file to your web server (/.well-known/acme-challenge/) |
3. 📄 Create a CSR (Certificate Signing Request)
Some providers do this automatically, but a manual installation requires a CSR. The CSR contains the information needed for the certificate.
Creating a CSR in panels such as cPanel/Plesk:
-
Enter the domain name (for example:
example.com) -
Company details (can usually be left blank for DV)
-
An RSA key is generated
4. ✅ Get and Install the Certificate
After validation is complete, the CA sends you the certificate:
-
.crtor.pemfile -
Intermediate certificate (CA Bundle) file
Installation:
-
cPanel → upload the certificate in the SSL/TLS section
-
Plesk → add it under “SSL/TLS Certificates”
-
Apache/Nginx → define the certificate paths in the configuration file
5. 🔄 Renewal and Monitoring
DV SSL certificates are usually valid for 90 days (Let's Encrypt) or 1 year. If automatic renewal is available, be sure to enable it:
-
Let's Encrypt → automatic renewal with scripts such as
certbotoracme.sh -
Plesk/cPanel → automatic renewal is usually enabled by default
