What’s Changing?
The SSL/TLS industry has retired the use of WHOIS-derived or custom email addresses for Domain Control Validation (DCV). This means you can no longer use email addresses found in WHOIS records or create custom addresses for SSL certificate approval.
Instead, certificate authorities now only allow email validation using a fixed set of pre-approved administrative addresses, such as:
This change is due to the decline in availability and reliability of WHOIS data, as privacy laws and domain privacy services have made WHOIS information less accessible and accurate.
(Reference: DigiCert Alert – End of Life for WHOIS-Based Email DCV)
What Are Your Options Now?
If you cannot use one of the approved email addresses above, you can validate domain control using alternative methods:
1. DNS-Based Validation
Add a specific DNS TXT record provided by the certificate authority to your domain’s DNS settings.
This is quick and does not require email setup.
Recommended for domains without active email services.
2. File-Based Validation
Upload a verification file to your website’s root directory.
Ideal if you have web hosting access.
The certificate authority will check the file to confirm domain control.
What Should You Do?
If you previously relied on WHOIS-based or custom email addresses, update your process now.
Ensure one of the approved email addresses exists and is monitored, or choose DNS or file-based validation for future SSL requests.
Need Help?
Webnames.ca can assist with:
Setting up one of the approved email addresses.
Adding DNS TXT records for validation.
Uploading verification files to your hosting account