How to purchase an extended validation (EV) standard SSL certificate

How to purchase an extended validation (EV) standard SSL certificate

This article explains how to obtain an extended validation standard SSL certificate, the highest level of SSL certification available.

Extended validation standard SSL certification

Extended validation (EV) SSL achieves the highest level of consumer trust through the strictest authentication standards of any SSL certificate. EV verification guidelines require the Certificate Authority (CA) to obtain and verify multiple pieces of identifying information about EV Certificate Approver.

Nexcess is a certificate reseller of GeoTrust True BusinessID with EV certificates.


To decrease processing time, complete the following tasks:

  1. Sign up for the standard EV SSL certificate.

  2. The Organization's Approver, identified in the EV certificate order, must sign and submit the Acknowledgement of Agreement Form (PDF).

Corporate and organizational validation requirements

Following the submission of the Acknowledgement of Agreement Form, observe the following authentication requirements to expedite processing time:

A. Organizational authentication requirements

The following entities are eligible to receive an EV Certificate, provided they are currently registered with an official registration agency in their jurisdiction. The resulting charter, certificate, license, or equivalent must be verifiable through that registration agency.

The list of official registration agencies includes the following:

  • Government agencies

  • Corporations

  • General partnerships

  • Unincorporated associations

  • Sole proprietorships

The Certificate Authority will confirm:

  • Official government agency records include the organization's registration number, date of registration or incorporation, and registered address.

  • A non-government data source (such as Dun & Bradstreet) includes the organization's place of business address if it is not included in the Government agency records.

  • If the organization has been registered for less than three years, verification of the organization’s operational existence by one of the following two methods:

    • By using a non-government data source.

    • By verifying the organization has an active demand deposit account (such as a checking account) with a regulated financial institution. This requires either a legal opinion letter or direct  confirmation from the financial institution.

B. Domain authentication requirements

To qualify for an Extended Validation SSL Certificate, domain registration details must reflect the full organization name in the certificate request. If domain registration does not reflect the organization name, then the registered domain administrator or legal opinion letter must demonstrate the organization's exclusive right to use the domain name.

In addition, the domain registration details must adhere to the following stipulations:

  • The domain must be registered with ICANN. Domain registration details must reflect the organization name on the certificate request.

  • If domain registration is private, the domain registrar must unblock the privacy feature.

  • The organization's certificate approver must confirm knowledge of the organization's domain ownership during the verification call.

C. Organization's Certificate Approver authentication requirements

To qualify for an EV SSL Certificate, the Certificate Approver identified in the certificate request must be employed by the requesting organization and have appropriate authority to obtain and delegate EV certificate responsibilities.

Attention: Employment and authorization cannot be verified through the organization's web site.

Attention: If the Certificate Approver identified in the certificate request is listed in government records as a corporate officer, then organizational contact employment and authorization can be approved without verifying this information as described below.

The Certificate Authority will confirm the following Certificate Approver requirements:

  • The Certificate Approver's identity, title, and employment through a third-party

  • The Certificate Approver’s authorization obtain and approve EV certificates on the organization’s behalf. This can be verified through one of the following methods:

    • A legal opinion letter

    • A corporate resolution

    • Direct confirmation of the authority of the organizational contact with the CEO, COO, or similar executive at the organization. If no public records are available regarding the CEO, COO, or other executive, then the Certificate Authority will contact the organization’s Human Resources department for these records.

D. Order verification requirements

The Certificate Authority must verify the certificate request and all certificate details with the Certificate Approver identified in the certificate request. The Certificate Authority must contact the Certificate Approver using an independently verified telephone number.

This telephone number is obtained by one of the following methods:

  • Research of qualified telephone databases; verify your organization’s primary telephone number is listed in a public telephone directory

  • A legal opinion letter

  • A site visit conducted by the Certificate Authority

During the verification call, the Certificate Authority must verify the following with the Certificate Approver:

  • The name of the Certificate Requestor identified in the certificate request and his or her authority to obtain the EV certificate on the organization’s behalf

  • Knowledge of the company's ownership and right to use the domain identified in the certificate request

  • Approval of the EV SSL Certificate request

  • Acknowledgement of signature of GeoTrust SSL Certificate Subscriber Agreement that includes all EV terms and conditions

E. Additional verification requirements

If the Certificate Authority cannot verify the required information on your certificate application, the Certificate Authority may require a lawyer’s or accountant’s professional opinion to verify the information.

For more information or sales inquiries, visit the Nexcess website or contact our Sales Team between 9 a.m. and 5 p.m. eastern time (ET), Monday - Friday.

Article Rating (2 Votes)
Rate this article
  • Icon PDFExport to PDF
  • Icon MS-WordExport to MS Word
Attachments Attachments
There are no attachments for this article.
Related Articles RSS Feed
How to purchase standard SSL certificates
Added on Fri, Sep 14, 2018
What is a premium SSL certificate?
Added on Thu, Feb 5, 2015
What is SNI?
Added on Tue, Jan 10, 2017
What is a self-signed SSL certificate?
Added on Mon, May 18, 2015
How to purchase a wildcard SSL certificate
Added on Mon, Dec 17, 2018
How to import SSL certificates in your Client Portal
Added on Thu, Sep 13, 2018
How to generate a CSR
Added on Tue, Dec 30, 2014
How to generate CSRs
Added on Thu, Jun 7, 2018
How to resolve the SSL warning when logging in to SiteWorx
Added on Wed, Mar 11, 2015
What are the benefits of dedicated IP addresses?
Added on Tue, Jan 29, 2019