---
title: "Retrieve domain verification status"
method: GET
path: "/v2/customers/{customerId}/certificates/{certificateId}/domainVerifications"
tags: ["v2"]
---

# Retrieve domain verification status

`GET /v2/customers/{customerId}/certificates/{certificateId}/domainVerifications`

This method can be used to retrieve the domain verification status for a certificate request.<ul><li>**shopperId** is **not the same** as **customerId**.  **shopperId** is a number of max length 10 digits (*ex:* 1234567890) whereas **customerId** is a UUIDv4 (*ex:* 295e3bc3-b3b9-4d95-aae5-ede41a994d13)</li></ul>"

## Path parameters

- `customerId` string, required
- `certificateId` string, required

## Response `200`

Domain verification status list for specified certificateId.

- DomainVerificationSummary[]
  - `domain` string, domain, required — Domain name
  - `domainEntityId` integer, required — A unique identifier that can be leveraged for retrieving domain verification related information. Primarily used when troubleshooting a request
  - `dceToken` string — DCE verification type token (if DCE verification type).
  - `status` 'COMPLETED' | 'FAILED_VERIFICATION' | 'VERIFIED_POSSIBLE_FRAUD' | 'DROPPED' | 'DROPPED_CERTIFICATE_AUTHORITY_AUTHORIZATION' | 'DROPPED_GOOGLE_SAFE_BROWSING' | 'INVALID' | 'AWAITING' | 'PENDING_POSSIBLE_FRAUD' | 'REVOKED_CERTIFICATE', required — Domain verification status: * `AWAITING` - Verification pending customer input * `INVALID` - SAN connected to a cancelled request * `COMPLETED` - Verification completed * `FAILED_VERIFICATION` - Verification failed * `PENDING_POSSIBLE_FRAUD` - Flagged for a system level fraud review * `VERIFIED_POSSIBLE_FRAUD` - Fraud detection reviewed but verified * `DROPPED` - SAN dropped from request * `REVOKED_CERT` - Certificate revoked * `DROPPED_GOOGLE_SAFE_BROWSING` - SAN dropped from request due to Google Safe Browsing check * `DROPPED_CERTIFICATE_AUTHORITY_AUTHORIZATION` - SAN dropped from request due to Certificate Authorization Authority DNS record check
  - `createdAt` string, iso-datetime, required — Timestamp indicating when the domain verification process was started
  - `modifiedAt` string, iso-datetime, required — Timestamp indicating when the domain verification process was last updated
  - `type` 'DOMAIN_CONTROL_EMAIL' | 'AUTO_GENERATED_DOMAIN_ACCESS_EMAIL_ADMIN' | 'AUTO_GENERATED_DOMAIN_ACCESS_EMAIL_ADMINSTRATOR' | 'AUTO_GENERATED_DOMAIN_ACCESS_EMAIL_HOST_MASTER' | 'AUTO_GENERATED_DOMAIN_ACCESS_EMAIL_POST_MASTER' | 'AUTO_GENERATED_DOMAIN_ACCESS_EMAIL_WEB_MASTER' | 'DOMAIN_ACCESS_EMAIL' | 'DOMAIN_ACCESS_LETTER' | 'DOMAIN_ZONE_CONTROL' | 'MANUAL_DOMAIN_ACCESS_EMAIL' | 'PREVIOUS_DOMAIN_ACCESS_EMAIL' | 'REGISTRATION_AUTHORITY_DOMAIN_ACCESS_LETTER' | 'REGISTRATION_AUTHORITY_DOMAIN_ZONE_CONTROL' | 'REGISTRATION_AUTHORITY_OVERRIDE' | 'REGISTRATION_AUTHORITY_WEBSITE_CONTROL' | 'CUSTOMER_OWNED' | 'WEBSITE_CONTROL', required — Domain verification type: * `AUTO_GENERATED_DOMAIN_ACCESS_EMAIL_ADMIN` - Domain verified using domain control verification email sent to admin@<your.domain.com> * `AUTO_GENERATED_DOMAIN_ACCESS_EMAIL_ADMINSTRATOR` - Domain verified using domain control verification email sent to administrator@<your.domain.com> * `AUTO_GENERATED_DOMAIN_ACCESS_EMAIL_HOST_MASTER` - Domain verified using domain control verification email sent to hostmaster@<your.domain.com> * `AUTO_GENERATED_DOMAIN_ACCESS_EMAIL_POST_MASTER` - Domain verified using domain control verification email sent to postmaster@<your.domain.com> * `AUTO_GENERATED_DOMAIN_ACCESS_EMAIL_WEB_MASTER` - Domain verified using domain control verification email sent to webmaster@<your.domain.com> * `DOMAIN_ACCESS_EMAIL` - Domain verified using a domain access email * `DOMAIN_ACCESS_LETTER` - Customer completed a domain access letter which was used for domain verification * `DOMAIN_CONTROL_EMAIL` - Domain verified using HTML file or DNS zone file text value * `DOMAIN_ZONE_CONTROL` - DNS zone file containing a pre-generated text value used for domain verification * `MANUAL_DOMAIN_ACCESS_EMAIL` - DAE sent to an email address manually entered by a rep * `PREVIOUS_DOMAIN_ACCESS_EMAIL` - Customers domain access email for a prior certificate request was used for domain verification * `REGISTRATION_AUTHORITY_DOMAIN_ACCESS_LETTER` - Representative reviewed a customer provided domain access letter and verified domain * `REGISTRATION_AUTHORITY_DOMAIN_ZONE_CONTROL` - Representative verified domain using a manual domain zone control check * `REGISTRATION_AUTHORITY_OVERRIDE` - Representative verified domain using alternative methods * `REGISTRATION_AUTHORITY_WEBSITE_CONTROL` - Representative verified domain using a manual website control check * `CUSTOMER_OWNED` - Validated customer account information used for domain control verification * `WEBSITE_CONTROL` - HTML file in root website directory containing pre-generated value used for domain control verification
  - `usage` 'COMMON_NAME' | 'SUBJECT_ALTERNATIVE_NAME', required — Type of domain name used for domain verification

## Other responses

- `401` — Authentication info not sent or is invalid
- `403` — Authenticated user is not allowed access
- `404` — Resource not found
- `422` — Application-specific request error
- `429` — Too many requests received within interval
- `500` — Internal server error

---

[API](https://skmtc.net/godaddy/apis/untitled-api-2.md) · [All operations](https://skmtc.net/godaddy/apis/untitled-api-2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/godaddy/untitled-api-2/revisions/100b3aa2d7ee/schema)
