An SSL certificate for your website encrypts data as it travels between your web server and a visitor’s browser. In short, it keeps information like logins and payment details private. SSL certificates come in three types:
- Domain validated (DV)
- Organization validated (OV)
- Extended validation (EV)
You can spot an SSL certificate easily. First, look for the padlock icon next to the address in your browser bar. Next, check the web address. If it starts with « https » rather than « http », the site uses SSL.
Domain Validated Certificates (DV)
A certificate authority (CA) issues a DV SSL certificate once you prove you own the domain. Usually, you do this by replying to an email the CA sends to the address in your domain registration. Alternatively, you can reply to an email sent to one of the domain’s administrative contacts. Brands such as Thawte and GeoTrust offer this type of certificate.
Organization Validation SSL Certificates (OV)
An OV certificate goes one step further than DV. Besides confirming domain ownership, it proves that a real organization stands behind the website. As a result, the owner must complete extra steps so the CA can verify the organization’s identity. Sectigo, DigiCert and GeoTrust all offer OV certificates.
Extended Validation Certificates (EV)
Like OV, an EV certificate requires the domain owner to prove they run a real organization. However, EV goes further. It also confirms that your organization is a legally registered business.
To issue an EV certificate, the CA first checks that your company exists and actively operates. Then, it confirms that your company sits at the physical address you claim.
Because of these strict checks, EV SSL certificates offer the highest level of trust on the market.