tencent cloud

SSL Certificates

Release Notes
Announcements
Notice on price adjustment of DigiCert and its affiliated brands'SSL certificates​
Price Change to DigiCert SSL Certificates
TrustAsia Root Certificate Update
Domain Validation Policy Update
SSL Certificate Service Console
Multi-Year SSL Certificate and Automatic Review
Notice on Stopping the Issuance of 2-Year SSL Certificates by CAs Starting from September 1, 2020
Announcement on Stop Using the Symantec SSL Certificate Name After 30 April 2020
Notice on Certificate Revocation Due to Private Key Compromises
Notice on Application Limits for DV SSL Certificates
Notice on Adjustment of Free SSL Certificates Policy
Let's Encrypt Root Certificate Expired on September 30, 2021
Product Introduction
Overview
Introduction to Tencent Cloud SSL Certificates
Strengths
Advantages of HTTPS
Browser Compatibility Test Report
Multi-Year SSL Certificate and Automatic Review Overview
SSL Certificate Security
Purchase Guide
Pricing
SSL Certificate Purchase Process
SSL Certificate Selection
Paid SSL Certificates Renewal
SSL Certificate Renewal Process
SSL Certificate Refund Process
Getting Started
Certificate Application
Information Submission Process for Paid SSL Certificates
Domain Ownership Validation
Domain Validation Method Selection
Automatic DNS Addition
DNS Validation
File Validation
Automatic DNS Validation
Automatic File Validation
Validation Result Troubleshooting Guide
Operation Guide
Domain Ownership Verification
Uploading Certificates
Secured Seal
CSR Management
Certificate Installation
Installing an SSL Certificate on a Tencent Cloud Service
Installation of International Standard Certificates
Selecting an Installation Type for an SSL Certificate
Certificate Management
Instructions on SSL Certificate Auto-Renewal
Certificate Hosting
Uploading (Hosting) an SSL Certificate
Reminding Reviewers to Review an SSL Certificate Application
Revoking an SSL Certificate
Deleting an SSL Certificate
Reissuing an SSL Certificate
Ignoring SSL Certificate Notifications
Customizing SSL Certificate Expiration Notifications
API Documentation
History
Introduction
API Category
Making API Requests
Certificate APIs
Certificate Renewal (Certificate ID Unchanged) APIs
CSR APIs
Data Types
Error Codes
Use Cases
Automatic Solution for Implementing and Issuing Multi-Year Certificates and Binding Resources
Apple ATS Server Configuration
Quickly Applying for a Free SSL Certificate via DNSPod
Enabling Tencent Cloud DDNS and Installing Free Certificates for Synology NAS
Batch Applying for and Downloading Free Certificates Using Python-based API Calls
Profile Management
Adding Organization Profile
Adding Administrator
Adding Domain
Troubleshooting
Domain Validation Failed
Domain Security Review Failed
Website Inaccessible After an SSL Certificate is Deployed
404 Error After the SSL Certificate is Deployed on IIS
“Your Connection is Not Secure” is Displayed After the SSL Certificate is Installed
Message Indicating Parsing Failure Is Displayed When a Certificate Is Uploaded
Automatic DNS Validation Failed for a Domain Hosted with www.west.cn
Host Name Field Cannot Be Edited in IIS Manager When Type Is Set to https
Message Indicating Intermediate Certificates Missing in Chain Is Displayed When a Free SSL Certificate Is Deployed on IIS
FAQs
SSL Certificate Selection
SSL Certificate Application
SSL Certificate Management
SSL Certificate Installation
SSL Certificate Region
SSL Certificate Review
SSL Certificate Taking Effect
SSL Certificate Billing and Purchase
SSL Certificate Validity Period
Related Agreement
SSL Service Level Agreement
Contact Us
Glossary

Automatic DNS Validation

PDF
Focus Mode
Font Size
Last updated: 2025-06-11 16:27:38

Overview

This document describes how to validate a domain through automatic DNS validation when you apply for a certificate or add a domain in the SSL Certificate Service console.
Note:
Automatic DNS validation is supported for multi-year international standard certificates only. For more information, see Available Multi-Year International Standard Certificates.

Directions

Step 1. View validation information

1. Log in to the SSL Certificate Service console. In the left sidebar, click My Profile to go to the My Profile page.
2. On the My Profile page, click the name of the organization for which domain information is to be validated. Then you can view the information of administrators that have been applied for.
3. Click the target administrator name to enter the Review Information page.
4. Click the *Domain Information tab, select the target domain, and click View Validation.
5. On the Validate Domain page, add a DNS record as prompted and within the specified period of time.

Step 2. Add a DNS record

Note:
The following operations apply only to domains hosted with Tencent Cloud. For those hosted with other platforms, go to the corresponding DNS service provider.
1. Get the host and record value as shown in the figure in substep 5 in Step 1. View validation information.
2. Log in to the DNSPod console to view the target domain and click DNS in the Operation column to enter the Record Management page.
3. Click Add Record to add a CNAME record.
Host: Enter the obtained host.
Record Type: Select CNAME.
Split Zone: Make sure that it is Default, or resolution may fail for some users.
Record Value: Enter the obtained record value.
MX Priority: leave it empty.
TTL: it refers to the time to live. The smaller the value is, the less the time cost for record changes to take effect globally. The default value is 600 seconds.
4. Click Save.
5. After adding the record successfully, wait for the CA to scan and review it. If it can be found and matches the specified value, the review is completed.
Note:
DNS usually takes effect within 10 minutes to 24 hours. The actual time depends on the ISP refresh time.
Do not delete or modify the configured CNAME record; otherwise, the proxy will not work.
Do not configure the TXT record for a domain if the CNAME record is already configured; otherwise, domain validation may fail.
If anything goes wrong during this process, contact us.
6. On the Validate Domain page, click Validate to check whether the CNAME record has been added successfully.

Help and Support

Was this page helpful?

Help us improve! Rate your documentation experience in 5 mins.

Feedback