FAQ: Extended Validation (EV) Process

Extended Validation (EV) SSL/TLS and Code Signing certificates provide the highest level of trust available, and issuance of these certificates is subject to strict guidelines. This FAQ provides a high-level overview of SSL.com’s Extended Validation (EV) process and requirements.

What should I expect after applying for an EV certificate and submitting my documentation?

• After applying for an EV certificate, you must complete Domain Control Validation to verify that your organization controls the domain(s) that the certificate will cover.
• You will receive a telephone call to the main listed business phone number to verify the signature, employment status,  title, and authority to sign of the signer of the Subscriber Agreement. Check your company’s Dun & Bradstreet number to ensure this is the best current contact number for your business to assist in efficient validation.
  • This call may not be made to a direct phone number or cell phone unless the number can be validated.
  • An attestation letter from a licensed professional (attorney, accountant, or civil-law/Latin notary):
    • Sample legal opinion letter
    • Sample letter from a Certified Public Accountant
    •  
• Validation of non-incorporated business entities (including sole proprietorships) require face-to-face verification of the identity of a Principal Individual associated with the business. An SSL.com representative will contact you if this step is required.

What does Extended Validation (EV) verify?

All of the following must be verified by SSL.com before issuing an EV certificate:

• The eligibility of the applicant as a legally registered entity, including any trade name, DBA, or assumed name to be included in the certificate.
• That the applicant is not on a government denied/blocked list of legal entities.
• That “high-risk” requests related to high profile organizations are found to be valid after additional scrutiny.
• The ownership of the domain name(s) to be included in the certificate. This requirement does not apply to EV Code Signing certificates.
• The applicant’s legal, physical, and operational existence and identity.
• A reliable means of communication with the entity to be named as the Subject in the certificate.
• The name, title, and authority of the contract signer and/or certificate approver.

What documentation must be provided when applying for an EV certificate from SSL.com?

• A signed copy of the EV Subscriber Agreement.
• A signed copy of the EV Authorization Form.
• Your company’s Dun & Bradstreet number, a business profile from another Qualified Information Source, or an attestation letter from a licensed professional.

For full details, please read What Are the Requirements for SSL.com EV Certificates?

Please also keep these guidelines in mind when ordering:

• All EV certificates must include the organization’s legal name.
  • Do not enter a trade name or DBA as the legal name of your organization. No EV certificate may be issued to a DBA or trade name only.
  • Your certificate may additionally include a trade name or DBA, but this must be registered by a government agency.
  • If a trade name is validated, it will be listed in the certificate in the format trade name (legal name).
• Please enter the actual physical address where the organization conducts business, not a PO Box, registered agent address, virtual office address, etc.