GlobalSign is an external service who verify market participants and messages.\u00a0They act as the Certificate Authority (CA), which means they are a trusted organisation that issues digital certificates to verify the identity of websites, people, or devices online.<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/section>\n\t\n\t\t GlobalSign will call the number for your company headquarters that they have uncovered from their secure vetting process. It does not matter if the contact is located there or not, only that their call is transferred to the contact so they can speak with them, or they are given the contact\u2019s phone number (landline or mobile) or email address so they can contact them.<\/p>\n If neither of\u00a0these happen, GlobalSign will send a\u00a0letter by post for that contact to the registered business address, so that they can contact GlobalSign directly.<\/p>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\t Domain registration verifies domain ownership and is an important aspect in issuing digital certificates. <\/span>\u00a0<\/span><\/p>\n The Certificate Admin will work with their own DNS admin to allow GlobalSign to verify ownership.\u00a0<\/span>\u00a0<\/span>The Certificate Admin will be asked to input the domain name used for GlobalSign verification. GlobalSign will then create an input that needs to be placed into the DNS record.<\/span>\u00a0<\/span><\/p>\n GlobalSign checks the DNS record of the domain to see if the \u2018Name\u2019 = \u2018@\u2019 and the VALUE is a \u2018txt\u2019. This will be added by the DNS admin into the record. This proves ownership as only the domain owner can change the DNS record.\u00a0<\/span>\u00a0<\/span><\/p>\n The DIP will check that messages are being sent from the right address using the information provided in domain registration. The domain registration is used in conjunction with the PKI (x.509 certificate) to allow multiple identities to be associated with a single certificate.\u00a0<\/span>\u00a0<\/span><\/p>\n A DIP user may have multiple market roles. For example, a DNO will have a UMSO, REGS and LDSO role. Rather than having three different certificates you will only require one, as these function all come from the same domain. This simplifies the certificate management process.\u00a0<\/span>\u00a0<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\n<\/article> ","s3_url":""},"yoast_head":"\nHow the vetting works
Domain registration
Why is this step needed?<\/span>\u00a0<\/span><\/h3>\n