Cybertrust.com > Solutions > SSL Certificates > Extended Validation Resource Center > Extended Validation Readiness Check
Extended Validation Readiness Check
- Is your business incorporated?
YES: Great, because at this time, the CA/Browser Forum has only completed the validation rules for all forms and sizes of corporations, and your business passes this requirement.
NO: Cybertrust and the members of the CA/Browser Forum are working diligently to develop a set of rules to verify sole proprietorships and unregistered partnerships, but at this time we regret that we cannot offer an EV certificate for your business. Please try one of our SureServer certificates.
- Does the state, province, or country in which you are incorporated allow public view of corporation records and corporate officers?
YES: Great, many US states and other countries protect this information, but since Cybertrust's validation specialists will be able to access your public records, your certificates will be processed without delay.
NO: Cybertrust's validation experts will attempt to directly contact your incorporating public agency and may need you to request a release of your corporate status information before we can proceed. The work involved in this release will vary based on the rules of the agency.
- Does Cybertrust already provide certificates to your company?
YES: Excellent news, because information we have used to validate your business in the past can be quickly checked under the new rules. Once we verify certain details using the new more strict procedures, we can reuse those verifications for as long as a year. As you continue to upgrade your existing certificates provided by Cybertrust to SureServer EV, the process becomes easier and easier.
NO: Cybertrust's validation experts will help you become familiar with our services quickly and help you every step of the way. The new EV requirements can seem pretty daunting, but our trained experts will ensure you receive the attention you need to provide the information we need to approve your certificates. Plus, once we have validated information about your business, many of the validations can be reused for up to one year which only makes the process of switching to Cybertrust for your certificates easier as we assist you in your move to SureServer EV certificates.
- For each domain that you wish to secure with an EV certificate, does the registrant name and address listed at your domain name registrar's WHOIS function match the name and address listed in your public incorporation records?
YES: You have successfully passed one of the new requirements of EV certificates, that your domain registrations match the name of your business in public corporation records. This check helps ensure a consistent set of information about your business exists in all resources that are critical to any investigation of fraudulent activity regarding your web sites.
NO: Cybertrust understands that through mergers and acquisitions and the preferences of parent companies and subsidiaries, differences in your business records and domain owner records may exist. Our validation specialists are prepared to make the extra effort to help you understand your options to modify your domain registration records, or ask the registered owner to certify the rights of your business to use the domain followed by a practical demonstration that you can place a code provided by Cybertrust on a new and unlinked web page on any server within the requested domain.
- Is your registrant information publicly viewable at your domain name registrar's website?
YES: Excellent, our validation specialists will have immediate access to the information we need to check your domain ownership.
NO: Spammers use domain registration databases as a source for email addresses and corporate details that could bypass spam filters. We understand the compelling reasons to keep domain registrations private. However, in order to provide EV certificates to your business, we will need the data privacy options turned off at your domain registrar's so that we can independently verify your ownership. Alternatively, we can contact certain domain registrars directly for ownership information, but a delay in the processing of your request may result.
- Are you able to change the data on your WHOIS to match your corporate records?
YES: Good, even the slightest material differences in domain and corporate records require remedy and this flexibility and control of your domains will be key to ensuring fast validations by our experts.
NO: Even if your domains are controlled by a parent company or a third party, Cybertrust will work with you to explain all the options about how you can receive an EV certificate when another business name is listed at the domain registrar's.
- If you intend to use a trade name along with your corporate name, is that trade name registered with a government agency or visible in any business databases?
YES: Cybertrust needs to verify your famous name as well as your corporation name, so since your marks are registered or recorded with public agencies or business databases that gain their information in a reliable way, we will certainly be able to include both names in your certificate so that your web site consumers see the name they've learned to trust.
NO: Before both your corporate name and a brand or assumed name can appear on your EV certificate, Cybertrust validation specialists will work with you to determine your clear right to use of the name using opinions expressed by your lawyer or accountant. One of the major accomplishments of the EV validation process is its strict examination of the business name that a web site visitor sees, and while we have tough rules to enforce here, we will help you display any name you are entitled to use.
- Has your company been in business less than 3 years and not yet listed in any public business databases?
YES: Many options exist as alternatives to prove the existence of your business, and Cybertrust's validation specialists will explain everything you need to get an EV certificate for your new and growing business. In many locations around the world, we can use an independent organization to visit your business and participate in the validation with our experts. We can also review opinion letters written by your lawyer or accountant.
NO: This means we can rely on your public records for validation of the existence of your business without requiring any additional work from you.
- Do you use an external service provider to host sites that you expect to secure with EV SSL certificates?
YES: Don't worry, that's not a problem. EV certificates can be used on servers at your hosting company. During our validation of your request, we will contact a representative at your hosting company to confirm they are participating in the request. We'll also call a person in your company who was named as the approver for the certificate to ensure they are working with the hosting company representative. If you ever need a certificate for another web site you host with the same company, we can rely on the verifications we do once for as long as a year.
NO: Since all the people that manage your web sites are within your company, Cybertrust's validation specialists will check the person requesting the certificate, typically a technical IT person, and the person approving the certificate, usually a line of business manager or a small business owner, in a simple process that ensures both people are employees recognized by a person who answers the main business phone number based on their successful forwarding of a call to the persons listed in your request.
- Are you prepared to involve one of your business' corporate officers in at least one EV SSL certificate request per year as a test of your authority to approve certificate requests for your company?
YES: Great, at least once per year every business that needs EV certificates must have an employee who is documented in public records of the business grant a person, either an employee or a representative from your hosting company, the privilege to participate in every EV certificate request as the approver. The approver helps our validation specialists ensure that the certificate request is authentic and acts on behalf of your company.
NO: Many businesses, especially large organizations, cannot justify the attention of a top tier executive in the process of SSL certificates and Cybertrust understands this clearly. As a result, our validation specialists will work with you to explain how you can provide a legal or accountant opinion, corporate resolution, or provide your own independent confirmation that the appointed certificate approver is authorized to act on your company's behalf. Phishing and pharming result from people committing crimes, which is why the EV validation process takes a whole new look at how the authority of your co-workers and hosting company is verified. By raising the effort we exert to prove authority, we are certain that the promise of reduced phishing attacks can be delivered as EV becomes common on public web sites.
|
|