---
title: "Order validation status"
source_url: https://dev.digicert.com/certcentral-apis/services-api/orders/validation-status.html
api_method: GET
api_endpoint: "/services/v2/order/certificate/{{order_id}}/validation"
api_url: "https://www.digicert.com/services/v2/order/certificate/{{order_id}}/validation"
---

**GET** `https://www.digicert.com/services/v2/order/certificate/{{order_id}}/validation`

Use this endpoint to get the validation status of an order. Response data varies depending on the type of certificate and the status of the validation components.

## Example requests and responses

**cURL**

```bash
curl -X GET \
  'https://www.digicert.com/services/v2/order/certificate/{{order_id}}/validation' \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}'
```

**Python**

```python
import requests

url = "https://www.digicert.com/services/v2/order/certificate/{{order_id}}/validation"

payload = ""
headers = {
    'X-DC-DEVKEY': "{{api_key}}",
    'Content-Type': "application/json"
    }

response = requests.request("GET", url, data=payload, headers=headers)

print(response.text)
```

**Go**

```go
package main

import (
	"fmt"
	"net/http"
	"io/ioutil"
)

func main() {

	url := "https://www.digicert.com/services/v2/order/certificate/{{order_id}}/validation"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("X-DC-DEVKEY", "{{api_key}}")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := ioutil.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

**NodeJS**

```javascript
var request = require("request");

var options = { method: 'GET',
  url: 'https://www.digicert.com/services/v2/order/certificate/{{order_id}}/validation',
  headers: 
   { 'Content-Type': 'application/json',
     'X-DC-DEVKEY': '{{api_key}}' } };

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});
```


## 200 OK

```json
{
  "order_id": "112211",
  "order_status": "pending",
  "order_name_scope": "base_domain",
  "order_dcv_method": "email",
  "organization_id": "12345",
  "organization_name": "Example Organization",
  "organization_validations": [
    {
      "type": "ov",
      "name": "OV",
      "description": "Normal Organization Validation",
      "date_created": "2018-04-25T21:52:33+00:00",
      "validated_until": "2019-04-25T21:52:33+00:00",
      "status": "pending",
      "verification_details": {
        "organization_type": "pending",
        "organization_status": "pending",
        "address_verification": "pending",
        "blacklist_fraud": "pending",
        "request_authenticity": "pending"
      }
    }
  ],
  "dns_name_validations": [
    {
      "domain_id": "1234",
      "status": "unapproved",
      "dns_names": [
        "sub.example.com"
      ],
      "base_domain": "example.com"
    }
  ]
}
```

## URL query parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>include_risk_check</td>
<td>boolean</td>
<td>If <code>true</code>, the response includes the <code>risk_status</code> in the <code>dns_name_validations</code> array with details about the domain risk for the order. If <code>false</code> (default), the response omits the <code>risk_status</code> in the <code>dns_name_validations</code> array.<br>For DV TLS certificate orders, we always return the <code>risk_status</code>. You only need to include <code>?include_risk_check=true</code> on non-DV TLS orders.</td>
</tr>
</tbody>
</table>

## Path parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>order_id</td>
<td>required</td>
<td>string</td>
<td>Order ID.</td>
</tr>
</tbody>
</table>

## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>order_id</td>
<td>string</td>
<td>Order ID.</td>
</tr>
<tr>
<td>order_status</td>
<td>string</td>
<td>Status of the order. See <a href="https://dev.digicert.com/md/certcentral-apis/services-api/glossary.md#order-status">Glossary – Order status</a></td>
</tr>
<tr>
<td>order_name_scope</td>
<td>string</td>
<td>Domain validation scope for the order. Domain validation scope determines the specific domains that you must validate before DigiCert can issue your certificate.<br><strong>Possible values:</strong><br><ul><li><code>base_domain</code>: Validate each domain and subdomain in the request at the base domain level (such as <em>example.com</em>).</li><li><code>fqdn</code>: Validate each domain and subdomain included in the order exactly as named in the request. When using <code>fqdn</code>: <ul><li>If a domain is a subdomain of another domain included on the order, complete the DCV check for the higher-level domain.</li><li><strong>For OV and EV certificate orders</strong>, if a higher-level domain exists in the account with an active validation, we validate the domain under the scope of the existing domain.</li></ul></li></ul></td>
</tr>
<tr>
<td>order_dcv_method</td>
<td>string</td>
<td>Domain control validation (DCV) method for the order.</td>
</tr>
<tr>
<td>organization_id</td>
<td>string</td>
<td>Organization ID.</td>
</tr>
<tr>
<td>organization_name</td>
<td>string</td>
<td>Organization name.</td>
</tr>
<tr>
<td>organization_validations</td>
<td>array</td>
<td>List of objects with details about organization validations that must be complete before DigiCert can issue the certificate.<br><strong>Note:</strong> The <code>organization_validations</code> array is not returned for DV certificate orders.</td>
</tr>
<tr>
<td>.. type</td>
<td>string</td>
<td>Validation type ID. See <a href="https://dev.digicert.com/md/certcentral-apis/services-api/glossary.md#validation-types">Glossary – Validation types</a>.</td>
</tr>
<tr>
<td>.. name</td>
<td>string</td>
<td>Friendly name of the validation type.</td>
</tr>
<tr>
<td>.. description</td>
<td>string</td>
<td>Description of the validation type.</td>
</tr>
<tr>
<td>.. date_created</td>
<td>string</td>
<td>Timestamp when validation was completed. UTC timezone and ISO 8601 date.</td>
</tr>
<tr>
<td>.. validated_until</td>
<td>string</td>
<td>Timestamp when validation will expire. UTC timezone and ISO 8601 date.</td>
</tr>
<tr>
<td>.. status</td>
<td>string</td>
<td>Validation status.<br><strong>Possible values:</strong><code>pending</code>, <code>active</code></td>
</tr>
<tr>
<td>.. verified_contacts</td>
<td>array</td>
<td>List of objects with details about verified contacts for the organization.</td>
</tr>
<tr>
<td>.. .. user_id</td>
<td>string</td>
<td>Contact user ID. Returns <code>&quot;0&quot;</code> if the verified contact is not a user in your CertCentral account.</td>
</tr>
<tr>
<td>.. .. name</td>
<td>string</td>
<td>Contact name.</td>
</tr>
<tr>
<td>.. .. first_name</td>
<td>string</td>
<td>Contact first name.</td>
</tr>
<tr>
<td>.. .. last_name</td>
<td>string</td>
<td>Contact last name.</td>
</tr>
<tr>
<td>.. .. job_title</td>
<td>string</td>
<td>Contact job title.</td>
</tr>
<tr>
<td>.. .. telephone</td>
<td>string</td>
<td>Contact telephone number.</td>
</tr>
<tr>
<td>.. .. email</td>
<td>string</td>
<td>Contact email address.</td>
</tr>
<tr>
<td>.. .. status</td>
<td>string</td>
<td>Contact approval status.<br><strong>Possible values:</strong><code>pending</code>, <code>active</code></td>
</tr>
<tr>
<td>.. verification_details</td>
<td>object</td>
<td>Object containing the status of each component involved in verifying your certificate request.</td>
</tr>
<tr>
<td>.. .. organization_type</td>
<td>string</td>
<td>Status of verification of organization type. Only returned for OV certificate orders.<br><strong>Possible values:</strong><code>pending</code>, <code>complete</code></td>
</tr>
<tr>
<td>.. .. organization_status</td>
<td>string</td>
<td>Status of verification that the business is still active. Returned for OV, code signing, and doc signing certificate orders.<br><strong>Possible values:</strong><code>pending</code>, <code>complete</code></td>
</tr>
<tr>
<td>.. .. address_verification</td>
<td>string</td>
<td>Status of verification of the legal physical address for the organization. Returned for OV, code signing, and doc signing certificate orders.<br><strong>Possible values:</strong><code>pending</code>, <code>complete</code></td>
</tr>
<tr>
<td>.. .. blacklist_fraud</td>
<td>string</td>
<td>Status of verification that the organization doesn’t appear on "do not issue" lists or "bad actor" lists. Returned for EV, OV, doc signing, and VMC certificate orders.<br><strong>Possible values:</strong><code>pending</code>, <code>complete</code></td>
</tr>
<tr>
<td>.. .. blacklist_fraud_malware</td>
<td>string</td>
<td>Status of verification that the organization is not a known malware signer. Returned for code signing and EV code signing certificate orders.<br><strong>Possible values:</strong><code>pending</code>, <code>complete</code></td>
</tr>
<tr>
<td>.. .. request_authenticity</td>
<td>string</td>
<td>Status of verification that the certificate requestor has authority to order a certificate for the organization. Only returned for OV certificate orders.<br><strong>Possible values:</strong><code>pending</code>, <code>complete</code></td>
</tr>
<tr>
<td>.. .. operational_existence</td>
<td>string</td>
<td>Status of verification that the organization exists and is operational. Returned for EV, EV code signing, and VMC certificate orders.<br><strong>Possible values:</strong><code>pending</code>, <code>complete</code></td>
</tr>
<tr>
<td>.. .. place_of_business_verification</td>
<td>string</td>
<td>Status of verification of the organization’s place of business. Returned for EV, EV code signing, and VMC certificate orders.<br><strong>Possible values:</strong><code>pending</code>, <code>complete</code></td>
</tr>
<tr>
<td>.. .. phone_number_verification</td>
<td>string</td>
<td>Status of verification that the phone number given is valid and tied to the organization. Returned for EV, code signing, EV code signing, and VMC certificate orders.<br><strong>Possible values:</strong><code>pending</code>, <code>complete</code></td>
</tr>
<tr>
<td>.. .. approver_verification</td>
<td>string</td>
<td>Status of verification that the approver is valid for this organization. Returned for EV, code signing, EV code signing, and VMC certificate orders.<br><strong>Possible values:</strong><code>pending</code>, <code>complete</code></td>
</tr>
<tr>
<td>.. .. approver_blacklist</td>
<td>string</td>
<td>Status of verification that the approver doesn’t appear on "do not issue" or "bad actor" lists. Returned for EV, code signing, EV code signing, and VMC certificate orders.<br><strong>Possible values:</strong><code>pending</code>, <code>complete</code></td>
</tr>
<tr>
<td>.. .. logo_trademark</td>
<td>string</td>
<td>Status of verification that the logo is a registered trademark for the organization on the order. Only returned for VMC certificate orders.<br><strong>Possible values:</strong><code>pending</code>, <code>complete</code></td>
</tr>
<tr>
<td>dns_name_validations</td>
<td>array</td>
<td>List of objects with validation details for each domain on the order. Returned for EV, OV, DV, and VMC certificate orders.</td>
</tr>
<tr>
<td>.. domain_id</td>
<td>string</td>
<td>ID of the domain in your account that must be validated to prove control over the domain on the order (the domain in the <code>dns_names</code> array). Omitted for DV orders.<br><strong>Note:</strong> Multiple domains on an order can be validated under the scope of the same higher-level domain. This means that multiple objects in the <code>dns_name_validations</code> array may return the same <code>domain_id</code> value.</td>
</tr>
<tr>
<td>.. status</td>
<td>string</td>
<td>Validation status.<br><strong>Possible values:</strong><code>approved</code>, <code>unapproved</code></td>
</tr>
<tr>
<td>.. risk_status</td>
<td>string</td>
<td>Domain risk status.<br><strong>Possible values:</strong> <code>under_review</code>, <code>failed</code>, and <code>pass</code></td>
</tr>
<tr>
<td>.. method</td>
<td>string</td>
<td>DCV method for the domain. Only returned if the validation status for the domain is <code>unapproved</code>.<br><strong>Note:</strong> For OV and EV orders, this parameter is omitted unless the order specifies a domain-level DCV method for the domain. For domains without a <code>method</code>, validate the domain using the DCV method set for the order (<code>order_dcv_method</code>).</td>
</tr>
<tr>
<td>.. name_scope</td>
<td>string</td>
<td>Domain you must validate to prove you control the domain on the order. Only returned if the validation status for the domain is <code>unapproved</code>.<br>The <code>name_scope</code> value is useful when you need to validate a domain on the order by completing a DCV check for either the base domain or for a subdomain between the FQDN and base domain.<br><strong>Note:</strong> For OV and EV orders, this parameter is omitted unless the order specifies a domain-level validation scope for the domain. For domains without a <code>name_scope</code>, validate the domain using the validation scope set for the order (<code>order_name_scope</code>).</td>
</tr>
<tr>
<td>.. dns_names</td>
<td>array</td>
<td>List containing the SAN from the certificate order associated with the validation details in the <code>dns_name_validations</code> object.</td>
</tr>
<tr>
<td>.. base_domain</td>
<td>string</td>
<td>Base domain of the hostname in the <code>dns_names</code> array.</td>
</tr>
</tbody>
</table>