Package com.digicert.validation.common

Class DomainValidationEvidence

java.lang.Object

com.digicert.validation.common.DomainValidationEvidence

public class DomainValidationEvidence
extends Object

Represents the evidence of domain validation. This class contains information about how the domain was validated, including the method used, the date of validation, and various details specific to the validation method. It is used to maintain a record of domain validation activities for auditing and compliance purposes.

Field Summary

Fields

Modifier and Type	Field	Description
private final String	acmeThumbprint	ACME Thumbprint: The thumbprint of the ACME account key.
static final String	BR_VERSION	Including the BR version number in the evidence is important for auditing purposes.
private final DcvMethod	dcvMethod	The method used for domain control validation.
private final String	dnsRecordName	DNS: The DNS record name used for validation.
private final DnsType	dnsType	DNS: The type of DNS record used for validation.
private final String	domain	The domain being validated.
private final String	emailAddress	EMAIL: The email address used for validation.
private final String	fileUrl	FILE Validation: The URL of the file used for validation.
private final MpicDetails	mpicDetails	MPIC Details: The details of the MultiPerspective results used in the validation.
private final String	randomValue	RANDOM: The random value used for validation.
private final String	requestToken	TOKEN: The valid request token found during validation.
private final Instant	validationDate	The instant when the domain validation was completed.

Constructor Summary

Constructors

Modifier	Constructor	Description
private	DomainValidationEvidence(String domain, DcvMethod dcvMethod, Instant validationDate, String emailAddress, String fileUrl, DnsType dnsType, String dnsRecordName, String requestToken, String randomValue, String acmeThumbprint, MpicDetails mpicDetails)	Constructs a new DomainValidationEvidence with the specified parameters.

Method Summary

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

domain

private final String domain

The domain being validated.

dcvMethod

private final DcvMethod dcvMethod

The method used for domain control validation.

BR_VERSION

public static final String BR_VERSION

Including the BR version number in the evidence is important for auditing purposes. As specified in section 3.2.2.4 of the BRs:

      CAs SHALL maintain a record of which domain validation method, including relevant BR version
      number, they used to validate every domain.
 

See Also:

• Constant Field Values

validationDate

private final Instant validationDate

The instant when the domain validation was completed.

emailAddress

private final String emailAddress

EMAIL: The email address used for validation.

Only populated when the DCV method is an email type otherwise NULL (BR_3_2_2_4_2 / BR_3_2_2_4_4 / BR_3_2_2_4_14)

fileUrl

private final String fileUrl

FILE Validation: The URL of the file used for validation.

Only populated when the DCV method is FILE_VALIDATION (BR_3_2_2_4_18) otherwise NULL

dnsType

private final DnsType dnsType

DNS: The type of DNS record used for validation.

Only populated when the DCV method is DNS_CHANGE (BR_3_2_2_4_7) otherwise NULL

dnsRecordName

private final String dnsRecordName

DNS: The DNS record name used for validation.

Only populated when the DCV method is DNS_CHANGE (BR_3_2_2_4_7) otherwise NULL

requestToken

private final String requestToken

TOKEN: The valid request token found during validation.

Only populated when using the REQUEST_TOKEN challenge type, which can only be used with the DNS_CHANGE and FILE_VALIDATION DCV methods; otherwise NULL.

randomValue

private final String randomValue

RANDOM: The random value used for validation.

Populated when a random value is used for validation otherwise NULL

acmeThumbprint

private final String acmeThumbprint

ACME Thumbprint: The thumbprint of the ACME account key.

ACME validation requires the user to establish an account key. The thumbprint (constructed by hashing) of that key is used in combination with the random value for determining the value to place in a file or DNS TXT record.

Only populated for ACME DCV methods; otherwise NULL.

mpicDetails

private final MpicDetails mpicDetails

MPIC Details: The details of the MultiPerspective results used in the validation.

This field contains additional information about the MPIC results, such as whether it was successfully corroborated and the agents involved in the corroboration

Constructor Details

DomainValidationEvidence

private DomainValidationEvidence(String domain,
 DcvMethod dcvMethod,
 Instant validationDate,
 String emailAddress,
 String fileUrl,
 DnsType dnsType,
 String dnsRecordName,
 String requestToken,
 String randomValue,
 String acmeThumbprint,
 MpicDetails mpicDetails)

Constructs a new DomainValidationEvidence with the specified parameters.

This constructor is private to enforce the use of the builder pattern for creating instances of DomainValidationEvidence. It initializes all fields with the provided values.

Parameters:

domain - The domain being validated.

dcvMethod - The dcv method used to complete domain validation.

validationDate - The date when the validation was complete.

emailAddress - The email address used for validation, if an email dcv method was used

fileUrl - The URL of the file used for validation, if a file dcv method was used.

dnsType - The type of DNS record used for validation, if a DNS dcv method was used.

dnsRecordName - The DNS record name used for validation, if a DNS dcv method was used.

requestToken - The request token found during validation, if applicable.

randomValue - The random value used for validation, if applicable.

mpicDetails - The details of the MultiPerspective results used in the validation.