Managing domains

Edit domain details

  1. Navigate to Domains.

  2. Select the domain you want to edit, and click the Edit icon.

  3. Select or deselect Active depending on whether you want the domain to be available for certificate issuance.

  4. Enter a description that provides any contextual information required.

  5. Configure CT logging based on the information in the following table.

    Field Description

    Monitor CT Logs for publicly issued certificates including this domain

    When selected, CT logs are monitored for publicly issued certificates/precertificates that include this domain.

    This feature is useful for detecting unauthorized certificates issued for your domain.

    Include sub-domains

    When selected, sub-domains are included in the CT log monitoring.

    Certificate Bucket

    The certificate bucket used to collect certificates/precertificates from CT logs.

  6. Update the domain’s delegations as required.

    1. Add a new domain delegation by clicking the Add icon, or edit an existing domain delegation by selecting an existing delegation and clicking Edit.

      Field Description

      Organization/Department

      The organization and, optionally, the department to which you want to delegate the domain.

      These fields are only editable when adding a new delegation.

      Certificate Types

      The types of certificates that can be issued for the delegated domain.

      Description

      An optional description that provides any contextual information required.

      Domain Certificate Request Privileges

      Delegated domain only

      When selected, the organization/department can only request certificates for the delegated domain (including hostnames or IP addresses) but not for subdomains.

      FQDN subdomain

      When selected, the organization/department can request certificates for fully qualified subdomains but not for wildcards or the delegated domain itself.

      First-level wildcard subdomain

      When selected, the organization/department can request certificates for wildcard subdomains one level below the delegated domain but not for the delegated domain itself.

      Second-level+ wildcard subdomain

      When selected, the organization/department can request certificates for wildcard subdomains at least two levels below the delegated domain but not for the delegated domain itself.

      To delete an existing delegation, select the delegation and click the Delete icon.
    2. Click Save.

  7. Click Save.

Approve domain creation or delegation

  1. Navigate to Domains.

  2. Select the domain with pending delegations, and click Approve Delegations.

  3. Select an organization/department and click Approve.

  4. Click OK.

Delete a domain

  1. Navigate to Domains.

  2. Select the domain you want to delete, and click the Delete icon.

  3. If required, select Delete all subdomains to also delete associated subdomains.

  4. Click Delete to confirm deletion.

Deleting a domain does not clear its DCV status. For information on clearing DCV status, see Clear DCV.