Which domain validation method to choose when ordering an SSL certificate?

Certificate validation methods

Currently, the following methods are available for domain validation when obtaining an SSL certificate:

DNS record
If you have access to manage your domain’s DNS records (or if your domain is hosted with us), you can use this method. If your domain is registered with another registrar, you will need to manually add a verification CNAME (TXT) record for your domain.

Email
If email is active on your domain, you can validate ownership by clicking the link in the message sent to one of your domain’s email addresses.

HTTP file upload
If the methods above are not available, but you have FTP or file manager access on your domain’s server, you can use this method. Note that it is not supported by all certificate authorities and cannot be used for Wildcard certificates.

Which method is better? Recommendations

If you are installing a Wildcard certificate
Use the DNS record method. This is the only supported option for this type of certificate.

If you need automation
DNS record is the best choice. Many tools (for example, ACME clients like certbot) can automatically add and remove DNS records, greatly simplifying the process.

If it’s a one-time validation and you have email access
The email method will be the fastest and easiest.

If you don’t have access to DNS or email
Uploading an HTTP file is your only option.

Thus, in most cases, the DNS record method is the best due to its versatility and automation capabilities, especially for Wildcard certificates. However, the final choice depends on your specific circumstances and technical capabilities.

Order an SSL certificate here.