Extended validation: the strictest check there is
The authority runs the full vetting procedure — legal existence, registered address, and the authority of the person requesting the certificate. It is the most that can be verified before a certificate is issued.
Per year on a one-year term. Two- and three-year terms are on the cards below.
Extended-validation certificates
No introductory rate: a certificate renews at the price on this page, and that price follows the authority’s.
GeoTrust True Business ID with EV
- Extended validation
- Covers one hostname
DigiCert Secure Site EV
- Extended validation
- Covers one hostname
DigiCert Secure Site Pro EV
- Extended validation
- Covers one hostname
What this level means
What gets checked
Legal existence, the registered address, and that the person asking is entitled to ask on the company's behalf.
What a visitor sees
A padlock, like everywhere else. Browsers removed the green address bar in 2019, and the vetted details now live inside the certificate.
When it is worth it
When a policy, an auditor or a partner asks for EV by name. That is the honest answer, and it is worth saying out loud.
Other validation levels
Domain validation
The authority checks that you control the domain, usually by email or a DNS record. Nothing about your company is verified.
Organization validation
The authority confirms your company in a public registry and writes the checked name into the certificate.
Wildcard
One certificate for a domain and every subdomain one level below it — shop, blog, api, staging.
SSL questions
Is EV worth paying for now the green bar is gone?
Only when something outside your site asks for it. To a visitor an EV certificate looks like any other; the difference is in what the authority checked and what an auditor can read afterwards.
Can I get extended validation as a wildcard?
No. Extended validation is not issued for wildcards — a wildcard covers names nobody vetted. If you need both a checked company and subdomains, take an OV wildcard.
Not sure which certificate you need?
Tell us the domain and what it has to satisfy — a payment provider, an audit, a client's checklist — and we will say which level is enough.