Knowledge Base

Overview 

This article explains how Extended Validation (EV) SSL/TLS certificate validation works, what information is verified, and what customers can expect during the process. It also provides guidance to help customers respond to validation requests and understand common reasons why EV certificate issuance may take longer. 

EV SSL/TLS certificates provide the highest level of trust available and require more verification than other certificate types. 

 Common Questions This Article Answers 

• What is an EV SSL/TLS certificate? 

• Why does EV validation require more checks than other certificates? 

• What information do I need to provide for EV validation? 

• How does certificate validation help protect website visitors? 

What actions are required from me during EV validation? 
 

What is Extended Validation (EV) SSL/TLS Certificate Validation? 

Extended Validation (EV) SSL/TLS certificate validation confirms that a website is operated by a real, legally registered organization and that the certificate request is authorized and legitimate. 

Because EV certificates provide the highest trust assurance to website visitors, they require additional documentation and verification steps defined by global industry standards (CA/Browser Forum EV Guidelines). Many organizations choose EV certificates to clearly demonstrate their identity and credibility online. 

EV SSL/TLS certificates are issued only to verified organizations, such as registered businesses, private organizations, international organizations, and government entities. They cannot be issued to individuals. 

EV SSL/TLS certificates are commonly used by the following: 

• E‑commerce websites and online payment platforms 

• Financial institutions 

• Government or public services 

• Enterprise websites handling sensitive customer data 

• Businesses that want to clearly demonstrate trust and legitimacy to customers 

They also support compliance requirements when strong identity assurance is needed. 

 

How EV SSL/TLS Validation Works 

In addition to confirming control over the website’s domain name, the EV SSL/TLS validation confirms three key things: 

1. The organization legally exists and is active 

2. The organization operates at a real, verified address 

3. The certificate request and agreement were approved by an authorized representative 

To complete this process, information is verified using trusted public records, government sources, and direct confirmation with the organization.  

Because of these additional checks, EV validation typically requires more customer interaction than DV or OV certificates. 

 

What Is Verified During EV SSL/TLS Validation 

During EV SSL/TLS validation, the following information is verified: 

Organization Identity and Legal Status 

• The organization’s legally registered name 

• Confirmation that the organization is active and in good standing 

• Any registered trade name or DBA (if applicable) 

• Legal details must be verified directly through official government registry databases 

• Acceptable organization name format in the certificate: Legal name or DBA (Legal Name) 

Business Operations and Address 

• Confirmation that the organization is actively conducting business 

• The physical address where business operations take place 

• Verification using reliable third‑party public data sources, government sources, and, when needed, additional documentation 

• PO Boxes, virtual offices, mail forwarding addresses, or registered agent addresses are not accepted 

Contact Information (Method of Communication) 

• A verified, working business phone number and/or email address listed in reliable third‑party public data sources or government sources 

Domain Control Validation (DCV) 

• Confirmation that the organization controls the domain name(s) included in the certificate 

Subscriber Agreement and Request Authenticity (Callback) 

• Verification that the Subscriber Agreement was signed 

• Confirmation that the EV certificate request was approved by an authorized representative (Subscriber Agreement signer, approver, and/or requestor) through direct contact using verified contact information 

Second Review id. Second Approval 

• A validation step where all documents used to verify organization details are reviewed by a second, expert validation specialist (second approver) 

 

What to Expect During EV SSL/TLS Validation 

While Sectigo completes the validation checks, customers are expected to take several actions to help move the process forward: 

• Complete Domain Control Verification (DCV) using one of the supported methods. 

• Review and accept the Subscriber Agreement. 

• Respond to a verification call or email confirming certificate authorization (see more details below). 

• Provide additional documentation if requested by the validation team. 

Prompt responses help prevent delays. 

If any organization details cannot be verified, a Validation Specialist will reach out to the order applicant with guidance on how to resolve the issue. 

Customers can track validation progress and required actions through the Validation Manager link included in the order confirmation email. 

 

Certificate Request Authentication (Callback) 

As part of EV validation, Sectigo confirms that the certificate request and Subscriber Agreement were approved by an authorized representative of the organization (Subscriber Agreement signer, approver, and/or requestor). This is completed through a verification call (a manual callback performed by one of our specialists) or an email sent only to contact details obtained from trusted, independent sources. This step confirms that the certificate request was intentional, authorized, and legitimate. 

 

How to Avoid Common EV Validation Delays 

The most common EV SSL/TLS validation delays are caused by mismatched or incomplete organization information. The following tips can help speed up the process: 

Use the Correct Legal Name 

• Enter the legally registered name of the organization in the company name field 

• Do not enter a trade name or DBA as the company name 

• If a trade name is used, it must be officially registered, verified, and entered in the appropriate field 

Provide a Valid Business Address 

• Use a real physical address where you or your organization operate. 

• Ensure the address matches trusted public records or government sources. 

• Do not use PO Boxes, virtual offices, mail forwarding addresses, or registered agent addresses 

Ensure Contact Information Is Publicly Verifiable 

• Use a business phone number or email address that appears in reliable third‑party data sources or government registries. 

• Avoid using personal or newly created contact details that cannot be independently verified. 

Complete Domain Control Validation Carefully 

• Use only the most recent DCV email - DCV links expire after 30 days 

• For CNAME or HTTP methods, ensure the values are entered exactly as provided 

• Network protections or incorrect configurations may prevent successful verification 

• For more information see the article How to complete Domain Validation (DV)? 

Complete the Subscriber Agreement Correctly 

• Ensure the agreement is completed by the correct individual 

• The name on the agreement must match the authorized representative 

• Delays often occur when an organization name is entered in the field where an individual name is required 

• Include the job title of the signer, approver, and/or requestor (for example, IT Manager or Software Development Lead) 

Respond Quickly to Callback Requests 

• Complete the callback (verification call or email) as soon as it is received. 

• Callbacks can only be completed using verified contact details. 

Monitor Order Status and Emails 

• Regularly check the link included in your order confirmation email. 

• Review all validation emails carefully and respond to any requests without delay. 

• Outstanding actions are the most common reason an order appears “stuck.” 

 

Frequently Asked Questions (FAQs) 

Why is EV validation taking longer than DV or OV? 

EV certificates require verification of legal registration, business operations, address, and authorization. This additional review takes more time and may require customer follow‑up. 

Why was I asked for additional documentation? 

Additional documentation may be required if public records are missing, outdated, or unclear. This is common in certain jurisdictions or when information cannot be independently confirmed. 

Why doesn’t my trade name appear as the organization name? 

EV certificates must include the legal name. If a trade name is verified, it appears alongside the legal name in the certificate in the format: Trade Name (Legal Name). 

Why do I need to answer a phone call or email? 

This step confirms that the certificate request and Subscriber Agreement were approved by an authorized representative and helps prevent unauthorized certificate issuance. 

Why can’t the callback be completed using my provided phone number or email? 

Callback verification can only be completed using contact details that are independently verified through reliable third‑party data sources or government registries. Self‑provided or unverified contact information cannot be used for this step. 

What if the phone number or email address on file is incorrect? 

If the contact information cannot be verified, you may be asked to provide documentation showing a valid business phone number or email address. This documentation must come from a reliable third‑party data source or government registry and list the contact details under the same organization name. 

What should I do if my EV order seems stuck? 

Track validation progress and required actions through the Validation Manager link included in the order confirmation email. Review pending items in your Validation Manager portal and in any communication email, complete DCV, ensure the Subscriber Agreement is signed correctly, and respond to any verification requests.