Skip to main content

Quick Start

Get started quickly with SSL certificates at centron: an overview of certificate types, validation levels (DV, OV, EV) and the SSL validation process for domains and subdomains.

Prerequisites​

SSL Certificates for Domains​

SSL certificates for domains can be used on web, email and application servers, amongst many others. An SSL certificate is only ever valid for the domain(s) or SANs (Subject Alternative Names) for which it was issued. With SSL certificates for domains, a distinction is generally made between the types of certificate (the domains to which the certificate applies) and the conditions for issuance/validation.

Types of certificates​

We offer you the option to book certificates that meet your requirements.

Certificates can be issued not only for a single domain, but also for multiple domains or subdomains. Almost any combination of certificate type and validation type is possible in this context (due to the authentication level of EV certificates, they cannot be combined with wildcard certificates).

Single Certificate​

  • applies to a single domain
  • Examples
    • Domain: domain.de
    • Certificate: Sectigo Positive SSL (DV)

Multi-domain certificate​

  • Applies to multiple domains
  • Price depends on the number of domains
  • Can also be combined with a wildcard certificate
  • Examples
    • Domains: domain.de, domain.com, domain.eu
    • Certificate: Sectigo Positive SSL Multidomain (DV)

Wildcard certificate​

  • Applies to the domain and all associated subdomains
  • Examples
    • Domains: *.domain.de applies, for example, to
      • domain.de
      • www.domain.de
      • test.domain.de
    • Certificate: Sectigo PositiveSSL Wildcard (DV)

Types of validation​

The certificates differ primarily in terms of their validation methods. A distinction is made here between three levels, each building on the previous one:

  • Domain-validated certificate (DV)
  • Organisation-validated certificate (OV)
  • Extended validation certificate (EV)

Domain-validated certificate | domain-validated SSL certificate (DV)​

A domain-validated certificate is the most affordable option, but it also has the lowest level of authentication.

With this type of certificate, a check is carried out to verify that the applicant is the owner of the domain. This is usually done by means of a confirmation email, which is sent to one of five predefined email addresses. If no MX record has been defined for the domain, or if the mail server is not managed by us, it is still possible to carry out the validation via hash or CNAME. (You can find more detailed information on the validation process here).

What does a domain-validated certificate contain?

  • Domain name
  • Validity period

What is a DV certificate used for?

  • Intranet
  • small websites, forums and blogs
  • mail servers

Organisation-Validated Certificate | Organisation Validated SSL Certificate (OV)​

In addition to validation by email, an Organisation-Validated Certificate involves a telephone verification of the company. Please note that only the telephone number listed in the commercial Register or a similar Register record may be used. (You can find more detailed information on the validation process here).

What does the certificate say?

  • Domain name
  • Validity period
  • Company name

Who is the OV certificate suitable for?

  • Online shops
  • Medium-sized business websites
  • Webmail

What does a domain- or company-validated certificate look like?

  • Google Chrome
  • Mozilla Firefox
  • Internet Explorer

Extended Validation Certificate | Extended Validation SSL Certificate (EV)​

Extended Validation certificates offer the highest level of authentication of all certificates. In addition to the steps described above (domain and company validation), the following documents must also be completed for an EV certificate: the Comodo Certificate Subscriber Agreement and the EV Certificate Request. These documents serve to uniquely identify the certificate applicant and verify their authorisation. (You can find more detailed information on the validation process here).

What does the certificate say?

  • Domain name
  • Validity period
  • Company name
  • Company name visible directly in the address bar
  • Various OIDs (Object Identifiers)

Distinctive feature: a ‘green’ address bar in the browser, which inspires particular confidence

What does an extended validation certificate look like?

  • Google Chrome
  • Mozilla Firefox
  • Internet Explorer

Validation process​

Depending on the type of certificate you have chosen, you will need to complete a varying number of steps to validate your SSL certificate.

Please note: None of the calls are made by centron GmbH; they are made by the service provider PSW Group on behalf of the certification authority Sectigo.

Domain validation | domain-validated SSL certificate (DV)​

You can validate your domain either by email, hash or CNAME.

Our tip: If your domain is managed by centron and is administered via the web panel, you can have your certificates issued fully automatically using CNAME validation. ccenter will handle all the validation steps for you.

Email validation

You can choose from five different email addresses on your domain to which the certification authority will send an email. This email contains a validation code and a link, which you must open in your browser and enter the code there. Once this has been confirmed, your certificate will be available for download shortly afterwards.

The following email addresses are available (replace DOMAIN.DE with your own domain in each case):

Hash validation (HTTP/HTTPS hash)

You will be provided with a unique file name and hash value, which the file must contain, and which you must place in your domain’s web directory. The file must be stored under a specific file path so that the hash value can be accessed via a specified URL in the browser. Path in the web directory: \.well-known\pki-validation\ You can upload the file using the File Manager (Windows hosting: Web Panel → Hosting Area menu → File Manager / Instructions for Linux hosting) or via FTP. This validation type is not available for wildcard certificates.

Example of an HTTP hash:

URL at which the hash value must be accessible in the browser (default):

http://centronhosting.de/.well-known/pki-validation/ABCDEFGHIJKLMNOPQRSTUVWXYZ123456.txt

Hash value:

123456abc7890deFG1234HijKLMN567890123OpqRsTUvW1234xYz567890Abc13
comodoca.com
1a2b3c4567

You may need to create the folder locally on your PC first and then upload it, as it is not possible to create a folder with special characters at the start using the standard method. Open PowerShell and enter the following command to navigate to your desktop:
cd ~\Desktop
Create a folder there called ‘.well-known’:
mkdir .well-known
You will find the newly created folder on your desktop. You can now upload this folder to the web server using the file manager or via FTP.

Path where the file must be stored (Windows hosting):
Please note the home folder specified in the web panel (see the following article).

centronhosting.de\web\.well-known\pki-validation\ABCDEFGHIJKLMNOPQRSTUVWXYZ123456.txt

Path where the file must be stored (Linux hosting):

httpdocs\.well-known\pki-validation\ABCDEFGHIJKLMNOPQRSTUVWXYZ123456.txt

or

centronhosting.de\.well-known\pki-validation\ABCDEFGHIJKLMNOPQRSTUVWXYZ123456.txt

File contents:
Hash value

Once the hash value has been stored, you can test the call in your browser. The result should look like this:

CNAME validation

In this case, a CNAME DNS record must be defined. This record must be added to the DNS zone of the domain for which the SSL certificate is to be issued.

Here is an example of what such a CNAME record looks like:

_1234567890abcdefghijklmnopqrstuv.centronhosting.de
CNAME
abcdefghijklmnopqrstuv1234567xyz.cdefghijklmnopqrstuvwxy135792468.comodoca.com

This value must be added to the DNS zone as follows:

Name Domain (may need to be omitted or separated from the name by a full stop)TypeContent (in the web panel: IP)
_1234567890abcdefghijklmnopqrstuv centronhosting.deCNAMEabcdefghijklmnopqrstuv1234567xyz.cdefghijklmnopqrstuvwxy135792468.comodoca.com
    

This article will help you add a DNS record in Webpanel.

Organisation Validation | Organisation Validated SSL Certificate (OV)​

For certain SSL certificates, organisation validation is carried out in addition to domain validation. The following requirements must be met for this:

  • Validation documents must be submitted to the PSW Group
  • Validation by telephone

Validation documents

  • The organisation specified is listed in a public Register
    • Public Register (for organisations in Germany; otherwise a similar Register):
      • Commercial Register
      • Register of Associations
      • Register of Co-operatives
  • For companies not entered in the Commercial Register, a certificate may be issued to an individual; the following is required:
    • Entry in the UPIK database
    • or Business registration, including a telephone call to the Trade Register Office
    • or A document confirming face-to-face validation, issued by a notary
  • Private individual
    • Entry in the UPIK database
    • or a document confirming face-to-face verification, issued by a notary

Telephone verification Telephone verification is carried out with the contact person specified when the SSL certificate was ordered. They must also be contactable on the telephone number provided at the time of ordering. This telephone number cannot be changed. However, it is possible for the call to be answered at the number provided in the order and then forwarded to an extension, mobile number or similar.

For telephone validation, there must be a directory entry in one of the following databases:

Extended Validation | Extended Validation SSL Certificate (EV)

In addition to domain and company validation, the extended validation process includes the following requirements:

  • Confirmation of business activity
  • Confirmation of business address
  • Verification of the main contact’s employment and authorisation
  • Sectigo SSL Subscriber Agreement (Download here)
  • EV Certificate Request Form (Download here)

Confirmation of business activity

The company has been in existence for more than three years and …

  • is registered in the Commercial Register
  • or can provide evidence of business activity through ...
    • a credit institution with which the company holds a bank Account
    • a legal letter from Sectigo, issued by a solicitor or notary from the country in which the organisation operates, including a telephone call to the solicitor or notary

Confirmation of business address

  • The address is a physical address (not a PO box)
  • The organisation’s address is listed as a valid business address in the (subsidiary) company’s entry in the commercial Register
  • or can be confirmed by one of the following authorities
    • Commercial Register (or equivalent government Register for company registration)
    • Dun & Bradstreet (D&B) report
    • Legal letter from Sectigo, issued by a solicitor or notary from the country in which the organisation operates, including a telephone call to the solicitor or notary

Verification of the contact person’s employment status and authorisation

  • The contact person specified in the order is employed by the company. Employment is verified as follows:
    • The contact person is listed as a shareholder, managing director or authorised signatory in one of the following documents:
      • Public Register (Commercial Register, Register of Associations or Register of Co-operatives)
      • Dun & Bradstreet (D&B) report
      • Confirmation of the main contact’s employment status by the company’s HR department
      • Legal letter from Sectigo, issued by a solicitor or notary from the country in which the organisation operates, including a telephone call to the solicitor or notary
  • The contact person is authorised to administer an EV certificate on behalf of the organisation
  • The contact person has been authorised by their line manager to purchase an EV certificate on behalf of the organisation
    • Confirmation from the line manager is provided if they are listed in the commercial Register or if the HR department confirms their employment
    • Authorisation is also confirmed in the EV contract (Sectigo SSL Subscriber Agreement)
    • If the line manager does not hold the required position within the company, a line manager with an equivalent title or the HR department may provide the authorisation
Last updated on