When applying for an SSL/TLS certificate from GlobalSign, you must complete Domain Control Validation (DCV) to prove ownership of the domain.
One of the DCV methods is adding a TXT record (_globalsign-domain-verification) to your domain's DNS settings. After adding this record, you must notify GlobalSign and wait for them to verify it before issuing the SSL certificate.
Before notifying GlobalSign, confirm that the TXT record has been correctly added.
_globalsign-domain-verification=abcdef1234567890abcdef1234567890
_globalsign-domain-verification.After adding the record, check if it is available in the DNS system.
Run:
dig TXT _globalsign-domain-verification.example.com
or
nslookup -type=TXT _globalsign-domain-verification.example.com
Replace example.com with your actual domain.
_globalsign-domain-verification. 300 IN TXT "abcdef1234567890abcdef1234567890"
If you see the correct verification code, the record is successfully published.
If you do not have terminal access, use external tools:
Enter _globalsign-domain-verification.example.com and verify that the correct value appears.
If the record is visible, proceed to Step 3. If the record is missing, wait for DNS propagation (up to 48 hours) or troubleshoot.
Once the TXT record is visible globally, you must notify GlobalSign so they can verify the domain and complete SSL validation.
If the record is correct and DNS has propagated, GlobalSign will detect it automatically. You do not need to manually notify them unless there is a delay.
If GlobalSign does not detect the record after 24 hours, manually notify them.
Once GlobalSign receives this request, they will manually verify the record and complete the SSL validation.
| Issue | Possible Cause | Solution |
|---|---|---|
| TXT record not found | Record was not added correctly or still propagating | Wait up to 48 hours or recheck DNS settings |
| Incorrect TXT value | Typo or missing part of the verification string | Copy the exact value provided by GlobalSign |
| Record visible, but verification not completed | GlobalSign did not detect it automatically | Manually notify GlobalSign via email |
| DNS query shows old data | Local DNS cache is outdated | Clear cache using systemctl restart nscd or use dig @8.8.8.8 |
| Firewall blocks external DNS queries | Some servers restrict DNS queries | Allow external DNS queries from GlobalSign |
| Step | Action |
|---|---|
| 1 | Get the TXT record from GlobalSign. |
| 2 | Add the record in the DNS settings. |
| 3 | Verify that the TXT record is published. |
| 4 | Wait for GlobalSign to detect the record. |
| 5 | If delayed, notify GlobalSign manually via email. |
| 6 | Receive and install the SSL certificate. |
By following these steps, a system administrator can successfully complete GlobalSign domain verification and obtain the SSL certificate quickly and securely.
This method ensures a smooth, automated verification process while preventing unauthorized certificate issuance.