DNS validation

Prev Next

The latest service changes have not yet been reflected in this content. We will update the content as soon as possible. Please refer to the Korean version for information on the latest updates.

Available in Classic and VPC

To issue a certificate, ownership for all domains you apply for must be validated. You can select 1 from DNS validation or Email validation as the domain ownership validation method.

DNS validation prerequisites

To perform DNS validation when validating domain ownership, you need permission to change the CNAME and TXT records in the domain's DNS.

  • Certificate Manager doesn't provide DNS record changes. Check with your domain name registrar, agency, or your own DNS management system to see how to make changes in advance.
  • Domains registered in the Global DNS service of NAVER Cloud Platform can change their records using Global DNS.
Caution

When you change the DNS name server (NS), the cache is automatically updated. It may take several hours to 2 days before you can properly view the record registered on the new name server. Note that certificate issuance may be delayed right after you change the name server.

Note

If you are unable to change your domain DNS record, use Email validation.

Cloud Basic certificate DNS validation method

The following is the Cloud Basic certificate type DNS validation method.
When you select DNS validation as the validation method when applying for a certificate, it creates a CNAME record name for each domain and a validation value to be entered in the record value after the application is complete.

To validate DNS, follow these steps:

  1. Go to Certificate List > Certificate details to check the DNS validation value for your domains. It appears in the following format:
    |Record Name| Record Type | Record Value|
    |-- | -- | --|
    |_65d7d22ee3a541c385bbfa0a2d950641.mydomain1.example.com. | CNAME | _e8335a33e5974d6995846142d659f583.cm.naverncp.com.|
    • Record Name: it is a validation value that is entered in the DNS record name.
    • Record Type: when set up in the DNS management system, the record type must be CNAME.
    • Record Value: it is a validation value that is entered in the DNS record value.
  2. Enter the DNS validation value through your domain's DNS management system. Wildcard (*) domains have a validation value created in the corresponding locations.
    • Domains that successfully complete DNS validation will have their validation status change from In progress to Succeeded.
Note

The certificate is issued after all domains included in the certificate have been successfully validated. Go to Certificate List > Cloud certificate > Certificate details to check the validation status for your domains.

Note

From July 23, 2024, the CNAME record creation method will change. The CNAME Record Name and Record Value will remain fixed for specific domains without changes. Going forward, once you enter a value in the DNS record, the same input value will be used to validate it when issuing a certificate for the specific domain.

  • Condition: the CNAME Record Name and Record Value for a specific domain are unique for each member.
  • Application: this applies to improvements made after July 23, 2024. For domains issued before this date, the CNAME Record Name and Record Value will change once and remain fixed.

Advanced certificate DNS validation method

The following is the Advanced certificate type DNS validation method.
When you select DNS validation as the validation method when applying for a certificate, it creates a TXT record name for each domain and a validation value to be entered in the record value after the application is complete.

To validate DNS, follow these steps:

  1. Go to Certificate List > Advanced certificate details > Order > Certificate list > Certificate details to check the DNS validation value for your domains. It appears in the following format:
    |Record Name| Record Type | Record Value|
    |-- | -- | --|
    |mydomain1.example.com. | TXT | _0f05a65612ad22ebb963410806a3925409ebd3323bbaf73b72b9e7cf8dd239d9|
    • Record Name: it is a validation value that is entered in the DNS record name.
    • Record Type: when set up in the DNS management system, the record type must be TXT.
    • Record Value: it is a validation value that is entered in the DNS record value.
  2. Enter the DNS validation value through your domain's DNS management system. Wildcard (*) domains have a validation value created in the corresponding locations.
    • Domains that successfully complete DNS validation will have their validation status change from In progress to Succeeded.
Note

The certificate is issued after all domains included in the certificate have been successfully validated. Go to Certificate List > Advanced certificate > Order > Certificate list > Certificate details to check the validation status for your domains.

Note

Since July 17, 2025, the Advanced certificate DNS validation method has changed from registering unique CNAME records to a specific domain to registering unique TXT records per issuance request. All certificates issued before this change will not be affected.