What is SSL EV Certificate? Which Websites Need It and When to Choose

1. What is SSL EV Certificate?

An SSL EV Certificate (Extended Validation Certificate) is the highest validation level among the three SSL certificate types. Before issuance, the Certificate Authority (CA) must verify the requesting organization's legal existence, physical address, and domain ownership through the most rigorous validation process available.

What distinguishes EV from other SSL types is the "Extended Validation" process — the CA must confirm that the organization is genuinely registered with a government authority, has a real physical address, and actually owns the domain in question, rather than simply verifying domain control as with DV SSL.

2. EV vs DV vs OV — Key Differences

SSL Certificates come in three main validation levels based on verification rigor:

The key difference lies in "who validates" and "what the CA verifies" before issuance — not the encryption level, which is 256-bit across all three types.

3. How the EV Validation Process Works

The CA/Browser Forum defines EV standards in the "EV Guidelines" that all CAs must follow. The EV verification process includes:

1. Legal Existence Verification — The CA confirms the organization is genuinely registered with a government authority (e.g., Department of Business Development in Thailand, Companies House in the UK)
2. Physical Address Confirmation — Verifying the organization's physical address from official documents
3. Domain Ownership Check — Same as DV/OV, confirming the organization controls the domain
4. Phone Verification — The CA calls the organization's phone number obtained from independent references like phone directories or government websites
5. Applicant Authorization Check — Confirming the person submitting the request is authorized by the organization

4. Which Websites Should Use EV SSL

EV SSL isn't right for every website, but it provides significant value for specific types:

Sites That Strongly Benefit from EV SSL

• Banks and financial institutions — Users expect maximum security; EV adds visible trust signals at the certificate level
• Large e-commerce sites — Processing high transaction volumes with large customer bases
• Government and official agency websites — Requiring formal identity verification
• Hospitals, insurance, and healthcare sites — Handling sensitive health data
• Enterprise SaaS platforms — Where corporate customers verify certificates before onboarding
• Frequently impersonated domains — EV makes the authentic domain distinguishable via certificate inspection

Sites Where DV or OV Is Sufficient

• Personal blogs and informational websites → DV SSL is enough
• SME business sites not directly processing payments → OV SSL
• Portfolio sites for designers or freelancers → DV SSL

5. How EV SSL Appears in Browsers

Historically (before 2019), Chrome and Firefox displayed the company name in the address bar with a green background, making it visually clear a site used EV SSL. Today, however:

• Chrome, Firefox, and Safari have stopped displaying company names in the URL bar — modern browsers show only a padlock icon, same as DV/OV
• The EV information still exists in the certificate — users clicking "Connection is secure" can see the organization name in certificate details
• Some organizations (especially in cybersecurity and compliance) still inspect certificates before using services

6. EV SSL Pricing at AsiaGB

AsiaGB offers EV SSL from leading Certificate Authorities, suitable for organizations of all sizes:

A 3-year payment provides approximately 6.67% discount (averaged per year). For example, GeoTrust True BusinessID with EV averages 6,533 THB/year when paid for 3 years upfront.

7. Steps to Apply for EV SSL

The main steps to obtain EV SSL:

1. Select a product and place your order — Choose the EV SSL appropriate for your organization size, order via billing.in.th
2. Generate a CSR (Certificate Signing Request) — Create a CSR file from your server or DirectAdmin control panel
3. Enter organization details — Legal company name as registered, address, phone number, contact name
4. Prepare documents — Company registration certificate (within 3 months), authorization letter (if using a representative), copy of applicant's ID
5. Wait 3-7 business days — The CA will email and may call to verify
6. Install the Certificate — Use the .crt and .ca-bundle files to install on your server or via DirectAdmin

8. Is EV SSL Still Necessary in 2026?

The answer is "it depends on your website's context." There are valid reasons both for and against choosing EV:

Reasons EV Remains Valuable

• Industries with compliance requirements (finance, healthcare, government) often mandate EV SSL use
• B2B with large enterprise customers — clients' IT departments frequently inspect certificates before approving new services
• Frequently targeted domains — EV provides verifiable identity information in the certificate for the authentic domain
• Organizational security posture — some organizations include EV as part of their security policies

Reasons to Consider OV Instead

• Modern browsers don't display EV indicators to general users → reduced end-user benefit
• EV is significantly more expensive than OV — OV also includes organization name in the certificate
• General e-commerce using payment gateways (like Omise, PaySolution) — the payment processing occurs on the gateway's domain which already has EV

9. Frequently Asked Questions