Order a Business Certificate

Last change on 2026-10-12 • Created on 2026-10-12 • ID: MA-E45CE

In the konsoleH SSL Manager, you can order paid Thawte Business Certificates for the domains in your hosting account. The SSL Certificates page explains the validation types and how they differ.

Prerequisites

To place an order, you’ll need your konsoleH customer number and password, as well as a domain in your hosting account. Have the certificate holder’s address information ready. For an address-validated certificate or an Extended Validation certificate, you’ll also need proof of your company’s identity.

Order a Certificate

  1. Log in to konsoleH with your customer number and password.
  2. Select the domain from the domain overview.
  3. In the left-hand menu, open Services → SSL Manager.

The SSL Manager lists all existing business certificates and all imported certificates. 4. Click New Certificate. 5. Select Business SSL Certificate. → The Business Certificate Wizard opens. 6. Pick the certificate type. 7. If you’re ordering a SAN certificate, type the number of domains in the Number of Domain Names field. 8. Enter the certificate holder’s address information. 9. Choose the authentication method. 10. Review the summary and price. 11. Click Place Order (Subject to Payment).

Hetzner automatically sends the order to Thawte. Depending on the validation type, you may need to complete additional steps, and we will notify you. When the certificate is ready, we will send you an email. The SSL Manager will then show the certificate with a green checkmark.

To activate the certificate on your website, use it to set up an SSL account for the domain.

Choose an Authentication Method

For a domain-validated Business certificate, you confirm control over the domain using one of three authentication methods. konsoleH automatically selects the method that matches your nameservers and webspace. You can change the method until you submit the order. After that, you can't make any further changes.

DNS Authentication

With DNS authentication, the certification authority checks a TXT record in your domain’s zone. If your domain uses konsoleH’s nameservers, konsoleH automatically sets the record.

Note: Changes to the DNS take effect only after a certain amount of time. If you use another provider’s nameservers, check in advance whether that provider allows such TXT records.

If konsoleH cannot set the record automatically, it will display a message like this at the end of the order process.

example.com. IN TXT "201601011234561bfs5p5fdum9g8kciot9u3tu4t0e10142zq9wsnutvy2tz844d" Create the entry exactly as shown as a TXT record. An A record will not work.

File-Based Authentication

With file-based authentication, the certificate authority checks a file on your web space. At the end of the order process, konsoleH will display the file name and the expected content. Depending on the server configuration, konsoleH will automatically create the file.

Note: Server settings such as mod_rewrite or redirects may block outside access to the file.

  1. If the file is not yet in the domain’s document root directory, move it there.
  2. Open the file in your browser at this address.
http://example.com/.well-known/pki-validation/fileauth.txt

The browser should show the expected content.

Approval Email

With this method, you’ll get an approval email sent to a mailbox under your domain. The email contains a confirmation link for your order. You can choose from the following mailboxes: admin, administrator, hostmaster, postmaster, and webmaster.

If the mailbox you choose does not exist, create it or set up a forwarding rule to an existing mailbox.

Table of Contents