What do I do if my certificate application review fails? - Certificate Management Service

This topic describes how to check CA review results and the actions to take for different review statuses.

Prerequisites

You have submitted an application to a certification authority (CA) and completed domain name ownership verification.

View the review status

Log on to the Certificate Management Service console.
In the navigation pane on the left, choose Certificate Management > SSL Certificate Management.
Depending on your certificate type, click the Official Certificate tab to view the certificate status in the Status column.

Handle review results

Status: Validating Application

Review duration

Certificate Type	Review and Issuance Time	Review Timeout
DV (Domain Validated)	After you submit a certificate application, if the information is correct, the certificate is typically issued in 1 to 15 minutes.	If the certificate is not issued within 2 calendar days, the review automatically fails.
OV (Organization Validated) and EV (Extended Validation)	After you submit a certificate application, if the information is correct and you actively cooperate with the CA's verification process, the certificate is typically issued in 5 calendar days.	If the certificate is not issued within 30 calendar days, the review automatically fails.

View the review progress

After you submit the certificate application, you can view the review progress in the Status column. Click the 状态标签 icon, and then click View Progress in the dialog box to view the current review progress.

Cooperate with the CA to complete the review

Because CAs use different methods to review DV, OV, and EV certificates, you must follow different procedures to complete the CA's qualification verification and ensure that your certificate is issued successfully.

DV certificates

Wait for the CA to process your certificate application. The certificate is issued automatically after the application is approved.

OV and EV certificates

The CA typically contacts you within one business day. The specific time depends on the CA's location. The time is extended if it falls on a holiday. You must cooperate with the CA's review personnel to complete the following verifications:

Note

If the information that you provide is correct and you actively cooperate with the CA verification, OV and EV certificates are issued in an average of five calendar days. If a certificate is not issued within 30 calendar days, the review automatically fails.
If you do not receive a phone call or email within 5 business days, you can contact your account manager for assistance.
To check the current progress, go to the SSL Certificate Management console. Find the target certificate in the certificate list on the tab. Then, click the icon in the Status column to view the details.

Phone

CA staff will call the contact phone number that you provided in the certificate request to verify the information. Make sure the contact's phone line is open to receive the verification call from the CA.

Email

The CA sends a domain verification email to the contact email address that you provided in the certificate request. Check your email and follow the instructions.

The content of the email varies by certificate brand. The following email examples are for reference only. The actual email that you receive is the one that is valid.

GlobalSign

Status: Failed

View the reason for failure

If the certificate application fails verification, the certificate status changes to Failed. In the Status column, click the icon and then click View Cause in the dialog box to view the reason for the failure.

Modify information and reapply

If the review fails, modify the incorrect application information based on the reason provided, especially the company qualification information. Then, resubmit the certificate application as soon as possible to prevent disruptions to your business.

Common failure reasons and solutions

Domain name verification failed or was not performed

You must promptly complete domain name ownership validation. For more information, see Domain Name Ownership Validation.

The company phone number is empty or incorrect (OV/EV)

When you apply for an Organization Validated (OV) or Extended Validation (EV) SSL certificate, you must enter a correct and valid company phone number. Make sure that the CA can contact you at this number.

Company information verification failed (OV/EV)

When you apply for an OV or EV certificate, the CA verifies your company information using public channels. You must update your company information on a public platform.

The company information in the application is inconsistent with the company authenticated for the domain name (OV/EV)

Confirm the authenticated company information with your domain name provider. Then, log on to the Certificate Management Service console. In the navigation pane on the left, choose Comprehensive Management > Company Profile Management to modify your company information. For more information, see Manage company information. After you correct the information, resubmit the certificate application to the CA.

The CSR file has been used for another order

To ensure the security of the certificate key, you cannot reuse a Certificate Signing Request (CSR) for a new order. You must generate a new CSR file to ensure that each SSL certificate has a unique key pair.

The format of the domain name for the certificate is incorrect

A domain name can contain only letters, digits, and hyphens (-). The domain name can be up to 64 characters in length. Check the domain name information in the CSR file and the order to make sure that you submit the order with the correct domain name.

The Common Name field in the CSR is incorrect

When you create a CSR file, the Common Name field must be the primary domain name that is bound to the certificate. You must create and upload a new CSR file and make sure that the Common Name field is correctly completed.

Note

To ensure that the CSR file is correct, we recommend that you use the system to generate the CSR file. If you use the system to automatically generate the CSR file, you can also download the certificate in different formats after the digital certificate is issued.

Status: Issued

Note

After the Certificate Authority (CA) approves the application, the certificate status changes to "Issued".

View the certificate validity period

The Validity Period column shows the certificate's expiration date. The validity period begins on the issuance date. The validity periods for different certificate types are as follows:

Official Certificate: valid for 12 months.

View the complimentary domain name

If you purchase a certificate for a single domain name or a wildcard domain name, the CA may provide a complimentary domain name certificate, depending on the brand and certificate type. For more information, see Conditions for complimentary domain names and Formats and rules for complimentary domain names.

Default rule for complimentary domain names for single-domain certificates

On the certificate list page, the complimentary domain name for a single-domain certificate is displayed as shown in the following figure:

Deploy the certificate

After the certificate is issued, see Select an SSL certificate deployment solution to find the most suitable deployment solution.