The Rigorous EV Validation Process

The Extended Validation process represents the most comprehensive identity verification in the SSL industry. Beyond the domain control and basic organizational checks required for OV certificates, EV validation delves deep into verifying the legal, physical, and operational existence of an organization. The process begins with confirming the organization's legal existence through primary government sources, requiring official documentation such as articles of incorporation, business licenses, or registration certificates from the appropriate government authorities.

Operational existence verification goes beyond simply confirming legal registration. Certificate Authorities must verify that the organization is active and in good standing, not merely a shell company or paper entity. This typically involves checking that the organization has an active bank account, verifying tax registration numbers, and confirming the organization has been operational for at least three years. Newer organizations can still obtain EV certificates but must provide additional documentation to demonstrate their operational status.

Physical existence verification requires CAs to confirm the organization's actual place of business. This goes beyond the address verification in OV certificates to include verification through site visits, professional directories, or third-party databases. The CA must establish that the organization maintains a physical presence at the stated address, not just a mail forwarding service or virtual office. This requirement helps prevent fraudulent certificates and provides users with confidence in the organization's legitimacy.