For many years, Whois-based lookup has been one of the common methods used for Domain Validation (DV). Certificate Authorities (CAs), including DigiCert, have relied on this data to confirm domain ownership. However, due to increasing reliability concerns, the CA/Browser Forum has mandated stricter validation practices.
- 8 January 2025 – DigiCert will discontinue the use of manual HTTPS-based Whois lookups for DV.
- 8 May 2025 – Whois lookup will be completely phased out and no longer accepted as a DV method.
What this means for customers
When applying for an SSL Certificate, customers should plan to use alternative DV methods such as:
- Email validation (using an approved domain contact address)
- DNS-based validation (adding a DNS TXT record)
- HTTP file upload validation (placing a file on the domain’s web server)
By preparing ahead, you can ensure a smooth SSL issuance process without disruption once the Whois method is retired.