Extended validation (EV) SSL certificates provide the highest level of trust and authentication. GeoTrust SSL certificates are issued by DigiCert, a publicly-trusted certificate authority that thoroughly vets your organization’s legal status, operational history, physical presence, and authorized personnel, displaying your verified organization name prominently in certificate details.
These certificates are ideal for enterprises, financial institutions, and e-commerce platforms (where customer confidence is critical).
What You’ll Need to Complete Validation (EV)
The extended validation process requires more documentation than other types of validation (i.e., DV or OV) for certificates. Here’s what you’ll need:
- Complete legal business name (exactly as registered)
- Operational history spanning at least 3 years
- Authenticated physical address (no P.O. boxes)
- Publicly listed telephone number
- Domain ownership documentation
- Authorized signatory information with employment verification contacts
Additional documents you may need:
- Business registration materials (Articles of Incorporation, etc.)
- Tax identification numbers
- Dun & Bradstreet DUNS number with credit report
- Evidence of 3-year operational history
- Bank confirmation letters (if needed)
Critical: All information must match exactly across government records, public directories, and WHOIS. Even minor variations (like “Inc.” vs. “Incorporated”) can cause delays.
Tip: Many organizations start EV renewal ~30 days early to allow time for full re-validation.
The 7-Step EV Validation Process
As a publicly trusted certificate authority, GeoTrust follows strict CA/Browser Forum (CA/B Forum or CABF) guidelines to ensure the highest validation standards. The validation process is completed by DigiCert, GeoTrust’s parent organization.
Step 1: Domain Validation
DigiCert confirms you control the domain(s) in your certificate request. GeoTrust SSL certificates support three validation methods:
- Email validation
- DNS record validation
- File upload validation
For detailed instructions, see: How to Complete DV Validation.
Step 2: Organization Authentication
DigiCert verifies your organization is legally registered and in good standing. This is verified through:
- Government databases: DigiCert searches Secretary of State registries (US) or equivalent (international) to verify legal name, registration number, entity type, and active status.
- Official documents: Articles of Incorporation, Certificates of Formation, Business Licenses showing current standing.
- Dun & Bradstreet reports: DUNS credit reports verify legal existence and can address multiple requirements simultaneously.
- Professional Opinion Letters (POLs): Notarized letters from licensed attorneys or CPAs vouching for your organization across nearly all validation requirements.
Step 3: Operational Existence Verification (3 Years)
DigiCert confirms your organization has been operating for at least 3 years.
How to prove:
- Incorporation documents showing formation date 3+ years ago
- Dun & Bradstreet reports with operational history
- Bank confirmation letters showing account activity
- POLs attesting to operational history
Note: Organizations under 3 years old can still get EV certificates with additional documentation.
Step 4: Physical Address Verification
DigiCert authenticates that your organization has a legitimate physical business address.
NOT allowed:
- P.O. boxes
- Mail forwarding services
- Virtual office addresses
- Offshore registrations that obscure the true location
DigiCert verifies through:
- Government business registries
- Official registration documents showing physical address
- Dun & Bradstreet reports
- Professional Opinion Letters
Important: Street address, city, state/province, and country must match exactly — including suite numbers and formatting.
Step 5: Telephone Verification
Your organization must have a publicly accessible, verifiable phone number.
What DigiCert Checks
- Official telephone directories
- Government business databases
- Dun & Bradstreet listings
- Recognized business directory services
Requirements
- The number must be publicly listed with your business name and address
- All three (number, name, address) must match consistently
- Must connect to your organization (not personal mobile)
If Your Number Isn’t Publicly Listed
- Get a Dun & Bradstreet profile
- Add to Google Business Profile
- Request a Professional Opinion Letter
- Ensure listing in government business registries
Step 6: Final Verification Call
DigiCert calls your verified business number to confirm the certificate request.
How to Prepare for the Call
- Ensure the organizational/technical contact is available during business hours
- Provide extension numbers if using a phone system
- Be ready to verify the company name and domains
During the Call (Under 5 Minutes)
- DigiCert asks if you requested the SSL certificate
- You confirm your legal business name
- You verify that the domains are being secured
Step 7: EV Approval
The contact person(s) listed on the order will receive an email to submit a final authorization and approve the certificate request.
After Validation
- GeoTrust issues your EV certificate
- Install on your web server following server-specific instructions
- Verify browsers properly recognize EV status
- Plan next renewal 30-45 days before expiration
Quick Tips for Faster EV Validation
- Ensure all business information matches exactly across ALL records
- Have documentation ready before starting
- Consider getting a Dun & Bradstreet DUNS number to streamline verification
- Keep the verification contact available and responsive
- Maintain consistent public listings throughout the certificate’s lifetime
- Start renewal early — EV validation cannot be automated