Certificate Validation Reuse Policies

Maintaining SSL/TLS certificates can be complex, especially when it comes to understanding how long your validation stays "fresh." To simplify the process, certain validation types allow for reuse during certificate reissues, saving you from repeating the same steps multiple times a year.

Domain Control Validation (DCV)

• Purpose: Proves you own or control the domain (via CNAME, email, or HTTP file upload).

• Validity Period: 200 days.

• Reuse Policy:

  • DCV can be reused for certificate reissues within the 200-day window.

  • No new DCV is needed for reissues if the last validation is still valid.

• Renewals:

  • DCV validation is required for every renewal.

Organization Validation (OV) and Extended Validation (EV)

OV and EV certificates go beyond domain ownership to verify the legal identity of your organization. They require both an Organization Validation and a Domain Validation.

• Purpose: Verifies your organization’s legal identity (in addition to DCV).

• Validity Period: 397 days (1 year + 30 days).

• Reuse Policy:

  • Organization Validation:

    • Can be reused for reissues if still within the 397-day window.

    • No need to repeat full vetting for reissues within this period.

  • Domain Validation:

    • A new DCV is required for any reissue if the last DCV is older than 200 days, even if OV/EV is still valid.

• Renewals:

  • Full Organization Validation and DCV are required for every renewal.