When your SSL certificate order shows "under brand validation," it means the certificate authority needs to manually review your request before issuing the certificate. This process typically takes 24-48 hours and ensures your domain name doesn't infringe on protected brand names or violate security policies. During this review, keep your website online and accessible, as the validation team will check it before approving your SSL certificate.
Why SSL Orders Get Flagged for Brand Validation
Certificate authorities use automated systems to screen every SSL order for potential issues. When their systems detect certain patterns, they route the order to manual review to protect both customers and trademark holders. Understanding these triggers helps you anticipate potential delays.
Geographic Location Reviews
Orders from certain countries receive additional scrutiny due to international security policies. Countries that commonly trigger manual review include South Korea, North Korea, Sudan, Afghanistan, Iran, and Iraq. If your business operates in these regions, expect the brand validation process as a standard security measure.
Domain Names Containing Brand Terms
If your domain includes recognizable brand names, validation teams must verify you have permission to use them. Examples include domains like facebook-app.com, sony-shop.net, or dellshop.com. Even if you're an authorized reseller or partner, these domains require human verification to prevent fraudulent certificates.
Similar-Looking Brand Names
Automated systems sometimes flag domains that accidentally resemble famous brands when read in different ways. For instance, a domain like "sibmama.com" might be interpreted as "sIBMama," triggering a manual check for potential IBM trademark issues. These false positives require human review to clear.
High-Risk Keywords in Domain Names
Domains containing certain security-sensitive words undergo extra scrutiny. Keywords that trigger manual validation include: pay, online, secure, booking, shop, bank, transfer, money, e-payment, payment, protection, violence, and terrorists. These words are commonly used in phishing schemes, so certificate authorities verify legitimate use before issuing certificates.
How to Speed Up Brand Validation
While the standard review takes 24-48 hours, you can take steps to facilitate the process. First, ensure your website is fully operational with clear contact information and business details visible. The validation team needs to verify your site's legitimacy, and an incomplete or offline website will result in rejection.
Second, prepare documentation that proves your right to use the domain name. This might include business registration documents, trademark licenses, or partnership agreements if your domain references another company's brand.
You can also contact the certificate authority's support team directly through their live chat system to check on your order status and provide additional verification details if needed. OBHost customers can reach out to our support team at support@obhost.org for assistance with the validation process.
What Happens If Validation Fails
If the certificate authority rejects your order during brand validation, you'll receive an explanation of the specific issue. Common rejection reasons include offline websites during validation, inability to verify brand name rights, or policy violations. You can address the issue and resubmit your order, or choose a different domain name if the brand conflict cannot be resolved.
Frequently Asked Questions
How long does brand validation actually take?
Most brand validation reviews complete within 24-48 hours. However, complex cases involving legal verification of brand rights or detailed business checks may take up to 5 business days. Orders submitted on weekends or holidays may experience additional delays.
Will my website work without SSL during brand validation?
Yes, your website remains accessible during the validation process, but visitors will see "not secure" warnings in their browsers. If you're replacing an expiring certificate, your old certificate continues working until it expires. Plan ahead and submit SSL orders at least a week before your current certificate expires.
Can I cancel my order if brand validation takes too long?
Yes, you can request cancellation if your order remains in validation status beyond the expected timeframe. Contact the support team to check your order status first, as most cases resolve successfully within the standard window. If you need immediate SSL coverage, consider using a different domain name that won't trigger brand validation.
What should I do if my legitimate business domain contains a brand name?
Prepare documentation showing your legal right to use the brand name, such as official partnership agreements, authorized reseller certificates, or trademark licenses. Contact the certificate authority's validation team proactively with this documentation to expedite the review. Clear proof of authorization typically resolves brand validation within the standard timeframe.
If you need assistance with your SSL certificate order or have questions about the brand validation process, our support team is available 24/7. Visit our contact page or email support@obhost.org for help with your SSL installation and validation.
