Here is how EV-SSL works…EV-SSL (the EV stands for Extended Validation) provides the gold standard...

1
E X T E N D E D V A L I D A T I O N B U I L D S T R U S T Online commerce requires trust. Certificate Authorities provide that trust through SSL certificates. EV-SSL (the EV stands for Extended Validation) provides the gold standard for SSL certificates. Merchants must undergo a rigorous process to obtain an EV-SSL certificate, and how browsers display the certificate is different than a normal SSL certificate. Here is how EV-SSL works… Look for the color green and the organization name in the website address bar. Each browser has a slightly different way of indicating if a site uses an EV Certificate: How to apply for an EV Certificate Example, Inc. [US] https://www.example.com Example, Inc. [US] https://www.example.com Example, Inc. [US] For more information go to https://casecurity.org Consumers know the padlock and green bar indicates a trusted connection. Just 2% proceed past “untrusted connection” messages and only 3% would give out credit card information without the padlock icon.* Example, Inc. [US] https://www.example.com Example, Inc. [US] www.example.com *Source: CA Security Council 2015 Consumer Trust Survey https://casecurity.org/2015-consumer-trust-survey/ Only certificate authorities (CAs) which pass an independent, qualified audit review may issue EV certificates. CAs must follow rigorous steps before issuing an EV SSL certificate. The authorized CA evaluates the organization applying for the certificate to verify their identity and check that they should receive an EV SSL certificate. The authorized CA confirms the organization’s registered legal name, registration number, registered address, physical business address and any assumed business names. The authorized CA verifies the applicant organization’s right to use the domain name. 1 2 3 4 Only when everything checks out does the CA issue the EV Certificate. 7 The authorized CA substantiates that the applying organization has approved the issuance of an SSL certificate with EV. 5 The authorized CA makes sure the organization applying for an EV certificate is not located in a country on government prohibited lists. 6 W E B B R O W S ER S D I S P L A Y T R U S T

Transcript of Here is how EV-SSL works…EV-SSL (the EV stands for Extended Validation) provides the gold standard...

Page 1: Here is how EV-SSL works…EV-SSL (the EV stands for Extended Validation) provides the gold standard for SSL ... Merchants must undergo a rigorous process to obtain an EV-SSL certificate,

EXTENDED VALIDATION BUILDS TRUST

Online commerce requires trust. Certificate Authorities provide that trust through SSL certificates. EV-SSL (the EV stands for Extended Validation) provides the gold standard for SSL certificates. Merchants must undergo a rigorous process to obtain an EV-SSL certificate, and how browsers display the certificate is di�erent than a normal SSL certificate.

Here is how EV-SSL works…

Look for the color green and the organization name in the website address bar. Each browser has a slightly di�erent way of indicating if a site uses an EV Certificate:

How to apply for an EV Certificate

Example, Inc. [US] https://www.example.com

Example, Inc. [US] https://www.example.com Example, Inc. [US]

For more information go to

https://casecurity.org

Consumers know the padlock and green bar indicates a trusted connection. Just 2% proceed past “untrusted connection” messages and only 3% would give out credit card information without the padlock icon.*

Example, Inc. [US] https://www.example.com

Example, Inc. [US] www.example.com

*Source: CA Security Council 2015 Consumer Trust Surveyhttps://casecurity.org/2015-consumer-trust-survey/

Only certificate authorities (CAs) which pass an independent,

qualified audit review may issue EV certificates. CAs must

follow rigorous steps before issuing an EV SSL certificate.

The authorized CA evaluates the organization applying for the

certificate to verify their identity and check that they should

receive an EV SSL certificate.

The authorized CA confirms the organization’s

registered legal name,registration number,

registered address, physical business address and any assumed business names.

The authorized CA verifies the applicant organization’s right to use the domain name.

1

2

3

4

Only when everything checks out does the CA issue the EV Certificate. 7

The authorized CA substantiates that the applying organization

has approved the issuance of an SSL certificate with EV.

5

The authorized CA makes sure the organization

applying for an EV certificate is not located in a

country on government prohibited lists.

6

WEB BROWSERS DISPLAY TRUST