Q: What is an Extended Validation SSL Certificate?
A: Extended Validation (EV) is the newest level of high-assurance security authentication for SSL Certificates. It was introduced in early 2007 and it takes advantage of advanced features in next-generation browsers such as Microsoft's Internet Explorer 7. EV also benefits from being the first truly standardized authentication protocol ever developed for SSL Certificates.
Q: How was Extended Validation developed?
A: Awareness of the need to increase the level of security and consumer confidence in E-commerce led a group of leading Web browser vendors and SSL Certificate issuers (called Certificate Authorities) to form the Certificate Authority/Browser (CA/B) Forum. This group, which includes Network Solutions®, formed the Certification Authority/Browser (CA/B) Forum to address these needs. CA/B Forum members agreed upon both technical and procedural specifications for the new class of "high assurance" certificates, now known as Extended Validation Certificates.
Q: How does Extended Validation differ from existing certificate validation procedures?
A: CA/B Forum guidelines currently restrict EV Certificates to corporations, business entities (such as sole proprietors, general partnerships, unincorporated associations, etc.), and government entities. For those eligible, the application process for an Extended Validation Certificate from one of the recognized Certificate Authorities such as Network Solutions is both deeper and more thorough than existing procedures. Companies applying for EV SSL Certificates will be required to provide far more detailed information about their business for final verification. Validation and confirmation of this additional data is expected to both enhance the authority of and consumer confidence in the Certificates and to make it nearly impossible for fraudulent or criminal applicants to receive an EV certificate.
Q: How does Extended Validation SSL Certificates' appearance differ from that of existing types of SSL Certificate?
A: The most obvious difference to consumers appears in the Web browser's navigation bar. In addition to displaying a closed padlock image and "https" Web address prefix, it will turn green to signify a Web site secured by an authentic, Extended Validation SSL Certificate. Web sites secured by legitimate Organizationally Validated or Domain Validated Certificates will continue to display both the closed padlock image and "https" prefix but will not turn the address bar green.
Q: Do Web sites using EV Certificates operate differently than those using existing types of certificates?
A: No, the Extended Validation process is designed to be as fast and seamless as existing certificate procedures. Consumers will see a difference in the representation of the certificate and secure connection (e.g., green address bar), but will experience no change or slowdown in operation or transaction procedures.
Q: Does it take longer for me to apply for and receive an Extended Validation SSL Certificate for my business than it does for existing certificates?
A: Yes.. As we've noted, Extended Validation has more stringent validation requirements than for other Certificate types. Because of the amount of information that applicants must supply to Certificate Authorities and the amount of time required to verify that information, the application process is expected to take about 5 to 7 business days once the Certification Authority has received all required documentation.
Q: Why do Extended Validation SSL Certificates Cost more than other SSL Certificates?
A: EV SSL Certificates cost more than other types of SSL Certificates because of the extensive amount of additional verification activity that must be conducted by the issuing Certificate Authority.
Q: Will my existing SSL Certificates remain "good" now that Extended Validation SSL Certificates have been introduced?
A: Yes. If your business is not eligible for an EV Certificate or has a loyal base of trusting customers, then your existing SSL Certificate will likely continue to meet your needs and those of your customers. Network Solutions will continue to offer, support, and authenticate its Organizationally Validated SSL Certificates.
Q: Will my customers using Microsoft Internet Explorer 7 and other next-generation browsers still be able to view my Organizationally Validated SSL Certificates?
A: Yes. Next-generation browsers will still support, recognize, and adhere to existing valid SSL Certificate standards even after Extended Validation is widely deployed.
Q: Can I upgrade my current non-EV SSL Certificate to an EV Certificate?
A: Yes, if your business meets industry eligibility guidelines. Please note that industry guidelines require all EV applicants, even those who already have SSL Certificates, to successfully complete the extended validation process before receiving an EV Certificate.
Q: What type of information will a Certification Authority need in order to issue an EV Certificate?
A: When you apply for an EV certificate from a Certification Authority (CA) such as Network Solutions®, you will be asked to provide certain types of information about your business and your ownership of it. This information may include:
- Dun & Bradstreet registration numbers
- Proof of physical address via database listings
- Opinion letter from legal counsel or public accountant
- Other corporate, financial, and government documents such as Articles of Incorporation, bank accounts, and business licenses
- Government-issued photo IDs
The CA will review and verify the accuracy of these documents. It may also perform additional checks before issuing the EV SSL Certificate. If the applicant's credentials can't be verified in accordance with the CA/Browser Forum guidelines, then the CA will not issue the Certificate.
The Bottom Line: Network Solutions is a leading provider of Extended Validation SSL Certificates. To learn more about Network Solutions EV SSL Certificate services or to purchase your EV SSL Certificate today, please visit our SSL Certificates Product Page.