Provides broader confirmation (EV)

[subornaakter20]

In this case, there is an exact confirmation of the legal entity - the owner of the Internet resource. Of course, this type of certificate inspires more confidence. Before receiving it, the person controlling the domain is checked according to several parameters:

does he have a DV certificate that confirms ownership of the resource;

whether this legal entity is registered (and whether it is real) in the state register;

a check is performed against independent marketing list of senior homes business directories such as Dunn and Bradstreet, connect.data.com from Salesforce, YellowPages and others like it;

a test call is made on the phone;

All domain names specified in the certificate are verified. Wildcards are not allowed in EV.

Essential elements of a BPM system

Source: shutterstock.com

The EV HTTPS certificate shows the name of the legal entity that has passed the full verification in the website address before the URL (where the closed lock icon is). As a rule, this is a registered company. There are some devices, such as iOS Safari, that do not pay attention to the URL and display only verified legal entities. To see more complete information about the company (name, address), you need to click on the icon. A fee of $ 150-300 is charged for annual use of the mentioned types of certificates.

Confirm the organization without specifying the name (OV).

That is, OV certificates confirm the owner of the web resource, but its full legal name cannot be seen in the interface. It turns out that the requirements for OV HTTPS checks are high, but there are no obvious advantages for users, so these certificates are less popular than EV. The price for using OV during the year ranges from $ 40 to $ 100.

Certificates reflecting the number of domains covered
Previously, when using HTTPS site protocol certificates, the user could see only one domain in the CN field. Over time, the so-called Subject Alternative Name (SAN) was added, meaning that it became possible to see additional domains covered by the certificate.

Today, all HTTPS certificates are generated according to one scheme. It means that a certificate covering only one domain has a SAN field for this domain. It is possible to have another SAN field for the same domain, but in the www version. HTTPS certificates covering both one and several domains can still be found on sale.