EV Certificate Validation Process


EV Certificate Validation Process

Please note that the issuance time for an Extended Validation (EV) Certificate is between 1 – 5 days. This is mostly due to the length of time it takes for authentication.

The process of authenticating an EV certificate differs from other types of SSL certificates as you need to prove the legal entity controlling the website. The issuance time for an Extended Validation (EV) Certificate is between 1 – 5 days.This is mostly due to authentication.

Generating a CSR and Private Key
Once you have purchased your SSL certificate, the next step is to generate your CSR (Certificate Signing Request).The process of generating the CSR depends on the platform you are installing the certification onto.The steps to create the CSR on different platforms can be found at https://billing.hostinguk.net/knowledgebase.php?category=11-installation&page=1.Please remember to make note of the private key that you are supplied with when generating the CSR as this will be required when installing the certificate once it has been issued.If the private key is lost, the entire certificate will need to be reissued.

Although the steps to create the CSR can vary, the process to submit the CSR is the same.To submit the CSR:

To Submit your CSR:
+ Login to the General control panel at https://billing.hostinguk.net/
+ Go to 'Services' > 'My Services' > RapidSSL Certificate.
+ Click the 'Generate Cert now' button which should prompt you for the CSR.
+ Your Server is 'Microsoft IIS 5.x or later'

Initial Validation
Some SSL providers can provide different methods of validating the SSL order. The most common validation method is an email link, which will send an email to a specific email address:
admin@DOMAIN
administrator@DOMAIN
webmaster@DOMAIN
hostmaster@DOMAIN

These can also be configured as aliases to an existing account if you don't have these configured already.

Alternative methods some providers use are 'file auth' which will give you a txt file to upload to your site. The file does need to be web accessible, however if you have access this is the quickest and easiest method. DNS authentication will allow you to create a TXT record in the DNS zone of the site, which can take some time depending on DNS propagation.

Once the initial validation has been complete,

Extended Validation - This is where the process changes from your average SSL certificate. The more information that you are able to provide will help speed up the process.

EV Enrollment Form – This is one of the easiest steps in the validation process.This is just a one-page form that requires filling out to show that you are an employee and you are authorised to make the purchase.

Organization Authentication – This step uses government registration information to verify that your company is a legally registered entity.

Operational Existence – This is where the certificate authority checks to see that your company has been operational for three or more years.If your business has not been operational for three or more years, you will be required to provide registration documents or a professional opinion letter.

Physical Address – This step verifies that your business has a physical presence in the country or state it’s registered in.

Telephone Verification – This is another simple step in the validation process, this is where the certificate authority check third-party directories to verify that your organisation has a valid telephone number.

Domain Authentication – This step is where the certificate authority will check that you are the rightful owner of the registered domain.This is usually done by file-based authentication, a cname record or an email.

Final Verification Call – This is where whoever completed the enrollment form will receive a call to verify the details of the order before the certificate is issued.

What next?
After the final verification call, you should be able to download the certificate from https://billing.hostinguk.net or from an email sent from the certificate issuer.

Once you have the certificate, please use our knowledge-base articles found at https://billing.hostinguk.net/index.php?rp=/knowledgebase/13/Installation to install the certificate onto the server.

Please note that both Google Chrome and Firefox have removed the green bar displaying the company name in the address bar.


  Print


Comments


Please login to comment