The vendor / EHR must approve certificate orders for Health Care Organizations to receive their certificates. This is accomplished by DigiCert looking up the domain owner via publicly available whois data and sending an email to the listed addresses.
Please note: If the vendors domain information is set to be private, it will need to be changed to public while DigiCert confirms domain ownership.
The whois data for a domain can be checked using https://lookup.icann.org/en.
Clicking the approve link in the email will display a DigiCert order approval page.
Unlike DigiCert, Nitor Group recommends the second approval option. This is because Nitor Group is entering certificate requests on behalf of the vendor and there is no reason for Nitor Group to be creating certificate requests for anything besides the Direct sub domain. In cases where there is no Direct sub domain there will be just two options, in that case select the first option.
