Knowledge Base

Description

Depending on your firewall configurations, you may need to "allowlist" specific DigiCert IP addresses for the HTTP Practical Demonstration domain approval process to go through.

What do I need to do?

Updating your allowlist ensures DigiCert can access the .txt file containing the random value at a predetermined location on your website.  

Add User Agents DigiCert DCV /1.1 and DigiCert DCV Bot/1.1 or IP addresses to your allowlist  

Update allowlists (lists for firewalls that only allow specified IP addresses to perform specific tasks or connect to your system) to include the User Agents or IP addresses below.  

• Add both User Agents DigiCert DCV /1.11 and DigiCert DCV Bot/1.1¹  to your allowlist.   
  If possible, we recommend adding the User Agents to your allowlist. Adding the User Agents ensures you are covered if new IP addresses are introduced, as they automatically include all the IP addresses used by the MPIC agents.
  ¹Note: On February 24, 2026, DigiCert will add another User Agent marked with a superscript 1 (¹) above. If you are adding User Agents to your allowlist instead of the IP addresses, you must add both User Agents.   
• Add the DigiCert services IP address to your allowlist.

DigiCert services IP address