How to complete DCV DNS for an SSL certificate
Domain Control Validation (DCV) proves to a certificate authority that you control the domain before it issues SSL. When the CA asks for DNS validation, NextShopper shows a DCV DNS record on the certificate panel. You publish that exact record on the domain’s authoritative DNS zone, wait for propagation, and the CA rechecks until the certificate can issue.
This guide walks portal labels, DNS publishing, and how to confirm HTTPS works afterward.
Who this guide is for
- Customers whose Certificate section lists a DCV DNS instruction
- Site owners stuck on “pending validation”
- Admins who manage DNS on NextShopper or an external DNS host
Before you start
- Open the hosting/SSL service and find Certificate → DCV DNS record (if the CA asked for one).
- Confirm which nameservers are authoritative for the domain.
- Copy the record Type, Name, and Value exactly—extra spaces or wrong host labels fail validation.
- Do not delete unrelated MX records while adding DCV TXT/CNAME.
Step-by-step: publish DCV on NextShopper DNS
- Sign in → Hosting → open the service with the certificate.
- Copy the DCV DNS record details from Certificate.
- Open Domains → the same FQDN → DNS records.
- Select Add record.
- Enter the CA’s Type (often TXT or CNAME), Name, and Value.
- Save and confirm DNS record saved.
- Wait for TTL/propagation (often minutes; sometimes up to 24–48 hours).
- Return to the certificate panel later—DCV instructions clear when validation succeeds.
Step-by-step: publish DCV on external DNS
- Keep nameservers at the external provider.
- Create the same Type/Name/Value there.
- Do not rely on records saved only in NextShopper’s DNS tab if NS point elsewhere—they will not be queried.
What happens next / how to verify success
- Certificate status becomes issued/active and DCV text disappears.
- Visit
https://+ Common name and confirm a trusted padlock. - www and apex may need separate coverage—test both if you use both hostnames.
Common problems
| Problem | What to try |
|---|---|
| CA still pending | Dig the record publicly; fix name/value; wait for recheck |
| Wrong zone edited | Confirm NS; edit the authoritative host |
| CNAME conflict | Some names cannot be both CNAME and other types—follow CA host exactly |
| Issued but browser warns | Check you are on the common name; clear HSTS/cache; confirm host serves the new cert |
| Hosting suspended | Reactivate service before expecting install |
Frequently asked questions
Is DCV the same as FOA?
No. FOA confirms registrant email for domains. DCV proves domain control for SSL.
Can I use HTTP file validation instead?
This portal surfaces DNS DCV when the CA asked for DNS. Follow what the certificate panel shows.
Do I leave the DCV record forever?
Often you can remove it after issuance, unless your CA requires ongoing DNS for renewal—check the panel or ask support.
Does WHOIS privacy block DCV?
No. DCV uses DNS, not public WHOIS contacts.
Related guides
- How to find SSL certificate details
- How to add, edit, or delete DNS records
- How to point a domain to NextShopper hosting
- How to change domain nameservers
Still need help?
Open a support ticket or Contact with the common name and the DCV name/type you published (not account passwords).