Extended Validation (EV) Certificate Process
Extended Validation (EV) Certificate Process
The EV validation process represents the gold standard of identity verification in the certificate industry. Building upon OV requirements, EV validation adds multiple additional checks designed to provide maximum assurance about the organization's identity and legitimacy. The process follows strict guidelines established by the CA/Browser Forum, ensuring consistency across all Certificate Authorities. This standardization means an EV certificate from any authorized CA meets identical rigorous requirements.
Operational existence verification distinguishes EV from OV validation. Beyond confirming legal registration, CAs must verify the organization actively conducts business. This typically requires proving operational history of at least three years, though newer organizations can qualify by providing additional documentation such as bank references or professional attestations. CAs verify active bank accounts, confirm tax registrations, and may check credit reports to ensure the organization maintains ongoing operations.
The verification of certificate requesters receives particular attention in EV validation. CAs must verify the specific individual requesting the certificate is employed by the organization and has authority to request certificates. This involves confirming employment through HR departments or organizational records, then verifying authorization through legal representatives, corporate officers, or board resolutions. This personal verification prevents unauthorized individuals from obtaining certificates, even if they have access to corporate information.
EV validation includes extensive cross-checking of all information through multiple independent sources. Information provided by applicants must be verified through government records, third-party databases, and independent research. Any discrepancies require resolution before proceeding. This thorough approach can extend validation timelines but provides the highest possible assurance about organizational identity.