Under this section, add the following profile settings for each DigiCert authority.

Product Identifier

The certificate type (also referred to as "DigiCert products") supported by the profile.  

Mandatory: Yes.

Domain Validation Method

The method to prove control over a domain when requesting an SSL/TLS certificate from a DigiCert CA. Supported values are the following.

Value

Description

dns-cname-token

CNAME DNS record validation

http-token

HTTP file validation

http-token-dynamic

Dynamic HTTP file validation

dns-txt-token

TXT DNS record validation

Mandatory: When the selected product requires a validation method.

Verified Contact Email for Extended Validation (EV)

The email address of the Verified Contact associated with the organization requesting an EV certificate. 

Mandatory: Only for Extended Validation (EV) certificates.

Signature Hash Algorithm

The cryptographic algorithm for generating a hash of the signed data.

 Supported values are:

  • sha256
  • sha384
  • sha512

Mandatory: Yes.

Order Validity (days)

The number of days for which each certificate order remains active, allowing certificates to be issued, reissued, or renewed under the same order. 

Mandatory: No. This optional value defaults to 199 days.

Certificate Validity (days)

The certificate validity period, in days.

Mandatory:  No. This optional value defaults to 199 days.