Question: how do domain certificates work?
Answer: The sole criterion for a domain validated certificate is proof of control over whois records, DNS records file, email or web hosting account of a domain. Typically control over a domain is determined using one of the following: Response to email sent to the email contact in the domain's whois details.