---
title: "DV SSL: Check DCV"
source_url: https://dev.digicert.com/certcentral-apis/services-api/orders/dv-ssl-check-dcv.html
api_method: PUT
api_endpoint: "/services/v2/order/certificate/{{order_id}}/check-dcv"
api_url: "https://www.digicert.com/services/v2/order/certificate/{{order_id}}/check-dcv"
---

**PUT** `https://www.digicert.com/services/v2/order/certificate/{{order_id}}/check-dcv`

Use this endpoint to check the domain control validation (DCV) for a pending TLS/SSL certificate order with a domain control validation (DCV) method of `dns-txt-token`, `dns-cname-token`, or `http-token`.


> **Info**
>
> To check the DCV for an individual domain, use the [Check domain DCV](https://dev.digicert.com/md/certcentral-apis/services-api/domains/ov-ev-ssl-check-dcv.md) endpoint.


> **Info**
>
> Using this endpoint to check DCV does not reset or restart the polling interval for <a href="https://docs.digicert.com/en/certcentral/manage-certificates/automatic-domain-control-validation-checks.html" target="_blank" rel="noopener noreferrer">automatic domain control validation</a>.


## Response format

The response format depends on the DCV method and validation status of the checked domains.

### DNS TXT and DNS CNAME

When the DCV method is DNS TXT (`dns-txt-token`) or DNS CNAME (`dns-cname-token`), the API returns JSON data with a list of `dns_name_validations` for each checked domain.

- If you check DCV for the entire order (default), the API returns JSON data with a list of `dns_name_validations` for each domain that was submitted for validation.
- If you use the `dns_names_validations` request parameter to check DCV for a subset of domains, the API returns JSON data with a list of `dns_name_validations` only for the checked domains.

### HTTP Practical Demonstration

When the DCV method is HTTP Practical Demonstration (`http-token`), the API returns a 400 error if DigiCert cannot find the random value at the expected location for one or more checked domains.

<table>
<thead>
<tr>
<th>Check DCV for all domains or subset</th>
<th>DigiCert finds token for all checked domains</th>
<th>DigiCert does not find tokens for one or more checked domains</th>
</tr>
</thead>
<tbody>
<tr>
<td>All domains (default)</td>
<td>API returns JSON data with list of <code>dns_name_validations</code> for each domain on the order.<br><code>{
  &quot;order_status&quot;: &quot;issued&quot;,
  &quot;certificate_id&quot;: 249043544,
  &quot;dcv_status&quot;: &quot;valid&quot;,
  &quot;dns_name_validations&quot;: [
    {
      &quot;dns_name&quot;: &quot;example.com&quot;,
      &quot;status&quot;: &quot;approved&quot;
    },
    {
      &quot;dns_name&quot;: &quot;example.org&quot;,
      &quot;status&quot;: &quot;approved&quot;
    }
  ]
}</code></td>
<td>400 error: <code>file_random_value_not_found</code><br><code>{
  &quot;errors&quot;: [
    {
      &quot;code&quot;: &quot;file_random_value_not_found&quot;,
      &quot;message&quot;: &quot;Could not find the random value at the expected file location for one or more domains.&quot;
    }
  ]
}</code></td>
</tr>
<tr>
<td>Subset of domains (<code>dns_name_validations</code> request parameter)</td>
<td>API returns JSON data with list of <code>dns_name_validations</code> for each domain in the request:<br><code>{
  &quot;order_status&quot;: &quot;pending&quot;,
  &quot;certificate_id&quot;: 249076909,
  &quot;dcv_status&quot;: &quot;valid&quot;,
  &quot;dns_name_validations&quot;: [
    {
      &quot;dns_name&quot;: &quot;example.com&quot;,
      &quot;status&quot;: &quot;approved&quot;
    }
  ]
}</code><br><strong>Note:</strong> If all domains are approved after you submit your request, the <code>order_status</code> returns <code>issued</code> instead of <code>pending</code>.</td>
<td>400 error: <code>file_random_value_not_found</code><br><code>{
  &quot;errors&quot;: [
    {
      &quot;code&quot;: &quot;file_random_value_not_found&quot;,
      &quot;message&quot;: &quot;Could not find the random value at the expected file location for one or more domains.&quot;
    }
  ]
}</code></td>
</tr>
</tbody>
</table>

## Example requests and responses

**cURL (Check entire order)**

```bash
curl --request PUT 'https://www.digicert.com/services/v2/order/certificate/{{order_id}}/check-dcv' \
--header 'X-DC-DEVKEY: {{api_key}}' \
--header 'Content-Type: application/json'
```

**cURL (Check specific domains)**

```bash
curl --request PUT 'https://www.digicert.com/services/v2/order/certificate/{{order_id}}/check-dcv' \
--header 'X-DC-DEVKEY: {{api_key}}' \
--header 'Content-Type: application/json' \
--data-raw '{
  "dns_name_validations": [
    {
      "dns_name": "example.com",
      "dcv_method": "dns-txt-token"
    }
  ]
}'
```


**200 OK**

```JSON
{
  "order_status": "issued",
  "certificate_id": 249076999,
  "dcv_status": "valid",
  "dns_name_validations": [
    {
      "dns_name": "sub1.example.com",
      "status": "approved"
    },
    {
      "dns_name": "sub2.example.com",
      "status": "approved"
    }
    {
      "dns_name": "sub3.example.com",
      "status": "approved"
    }
  ]
}
```

**400 Bad Request (file_random_value_not_found)**

```
{
  "errors": [
    {
      "code": "file_random_value_not_found",
      "message": "Could not find the random value at the expected file location for one or more domains."
    }
  ]
}
```

**400 Bad Request (invalid_dns_txt)**

```JSON
{
  "errors": [
    {
      "code": "invalid_dns_txt",
      "message": "Could not find a valid TXT record for one or more domains."
    }
  ]
}
```


## Path parameters

<table>
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>order_id</td>
<td>required</td>
<td>ID of the order to check. To check DCV, order <code>status</code> must be <code>pending</code>.</td>
</tr>
</tbody>
</table>

## Request parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Req/Opt</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>dns_name_validations</td>
<td>array of objects</td>
<td>optional</td>
<td>List of objects that specifies a subset of domains to check. Each object must include <code>dns_name</code> and <code>dcv_method</code> key/value pairs. If you omit this list, the API checks DCV for all domains you need to validate before DigiCert can issue the certificate.</td>
</tr>
<tr>
<td>.. dns_name</td>
<td>string</td>
<td>required</td>
<td>Domain name.</td>
</tr>
<tr>
<td>.. dcv_method</td>
<td>string</td>
<td>required</td>
<td>DCV method.</td>
</tr>
</tbody>
</table>

## Response parameters


> **Info**
>
> If the DCV method is `http-token` and DigiCert cannot find the random value at the expected location for one or more checked domains, the API returns an 400 error instead this JSON response.


<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>order_status</td>
<td>string</td>
<td>Order status.<br><strong>Possible values:</strong><br><ul><li><code>pending</code>: DCV unapproved for one or more domains.</li><li><code>issued</code>: DCV approved for all domains.</li></ul></td>
</tr>
<tr>
<td>certificate_id</td>
<td>integer</td>
<td>Certificate ID.</td>
</tr>
<tr>
<td>dcv_status</td>
<td>string</td>
<td>Order DCV status.<br><strong>Possible values:</strong><br><ul><li><code>pending</code>: DCV unapproved for all domains.</li><li><code>valid</code>: DCV approved for one or more domains.</li></ul></td>
</tr>
<tr>
<td>dns_name_validations</td>
<td>array of objects</td>
<td>List of objects with DCV approval status for each checked domain.</td>
</tr>
<tr>
<td>.. dns_name</td>
<td>string</td>
<td>Domain name.</td>
</tr>
<tr>
<td>.. status</td>
<td>string</td>
<td>DCV approval status.<br><strong>Possible values:</strong><code>approved</code> or <code>unapproved</code></td>
</tr>
</tbody>
</table>