Managing domains

Edit domain details

  1. Navigate to Domains.

  2. Select the domain you want to edit, and click the Edit icon.

  3. Select or deselect Active depending on whether you want the domain to be available for certificate issuance.

  4. Enter a description that provides any contextual information required.

  5. Configure CT logging based on the information in the following table.

    Field Description

    Monitor CT Logs for publicly issued certificates including this domain

    When selected, CT logs are monitored for publicly issued certificates/precertificates that include this domain.

    This feature is useful for detecting unauthorized certificates issued for your domain.

    Include sub-domains

    When selected, sub-domains are included in the CT log monitoring.

    Certificate Bucket

    The certificate bucket used to collect certificates/precertificates from CT logs.

  6. Click Save.

Delegate a domain

  1. Navigate to Domains.

  2. Select the domain you want to delegate, and click Delegate.

  3. Select which organizations and/or departments the domain should be delegated to and for which certificates.

  4. Click Edit.

  5. Select the appropriate certificate request privileges for the organization/department based on the information provided in the following table.

    Field Description

    Delegated domain only

    When selected, the organization/department can only request certificates for the delegated domain (including hostnames or IP addresses) but not for subdomains.

    FQDN subdomain

    When selected, the organization/department can request certificates for fully qualified subdomains but not for wildcards or the delegated domain itself.

    First-level wildcard subdomain

    When selected, the organization/department can request certificates for wildcard subdomains one level below the delegated domain but not for the delegated domain itself.

    Second-level+ wildcard subdomain

    When selected, the organization/department can request certificates for wildcard subdomains at least two levels below the delegated domain but not for the delegated domain itself.

  6. Click Save.

  7. Click Save again.

Approve domain creation or delegation

  1. Navigate to Domains.

  2. Select the domain with pending delegations, and click Approve Delegations.

  3. Select an organization/department and click Approve.

  4. Click OK.

Delete a domain

  1. Navigate to Domains.

  2. Select the domain you want to delete, and click the Delete icon.

  3. If required, select Delete all subdomains to also delete associated subdomains.

  4. Click Delete.

Deleting a domain does not clear its DCV status. For information on clearing DCV status, see Clear DCV.