Troubleshooting Email Validation for SSL Certificates
Last updated
Table of Contents
- Wrong Email Address Selected
- Email Caught by Spam Filters
- Mailbox Does Not Exist
- Missing or Incorrect MX Records
- WHOIS Email Addresses No Longer Accepted
- Resending the Validation Email
- Have more questions?
Sectigo certificates require email-based domain validation. The certificate authority sends a verification email to an administrative address at the domain, and someone must click the approval link. If you are not receiving the validation email, check the following.
Wrong Email Address Selected
The validation email is sent to the address you selected during the certificate order. Only standard administrative addresses are accepted:
admin@example.comadministrator@example.comhostmaster@example.compostmaster@example.comwebmaster@example.com
Fix: If the validation email has not been sent yet, choose a different address when you complete the setup. If it has already been sent to the wrong address, contact support to change the validation email.
Email Caught by Spam Filters
Validation emails from Sectigo may be caught by spam filters, especially in organizations with strict email security policies. They come from no_reply_support@trust-provider.com with a subject that starts with “Domain Control Validation for Order #” followed by the order number.
Check:
- Look in the spam/junk folder of the mailbox for the selected address.
- Check with your email administrator for quarantined messages from Sectigo or
@trust-provider.com. - Whitelist
@trust-provider.comand@sectigo.comif your organization uses aggressive spam filtering.
Mailbox Does Not Exist
The validation email address must be a working mailbox that receives email. If admin@example.com does not exist as a mailbox, the email will bounce and you will not receive it.
Fix:
- Create the required mailbox at your email provider, or set up a forward from one of the accepted addresses to a mailbox you monitor.
- Alternatively, select a different accepted address that has an active mailbox.
Missing or Incorrect MX Records
If the domain does not have MX records configured (or they point to the wrong server), email to that domain will not be delivered.
Check: Verify the domain has working MX records. You can check this in your DNSimple DNS records or by running dig example.com MX from a terminal.
WHOIS Email Addresses No Longer Accepted
As of June 2025, WHOIS-based email addresses are no longer accepted for domain validation. If you previously used a WHOIS contact email, you must now select one of the standard administrative addresses listed above.
Resending the Validation Email
If you need to resend the validation email:
- Go to the certificate page in your DNSimple account.
- Click . It only appears while the certificate is waiting on validation.
- Check the address the email will be resent to, and click .
For the full process, see SSL Certificate Email-Based Domain Validation.
Have more questions?
If you have any questions about email validation, contact support, and we’ll be happy to help. You can also read more about SSL certificates at DNSimple.