Glossary · Security

EV (Extended Validation) Certificate

An EV certificate is issued after a CA verifies the legal identity of an organization, but browsers no longer give it special visual treatment.

Updated November 4, 2026

An Extended Validation (EV) certificate is a TLS certificate issued only after the certificate authority has checked the applicant's legal existence, address and authority under a stricter set of vetting rules than domain or organization validation.

Why it matters

For years, browsers displayed the verified company name in a green bar or in the address bar to show EV status. Major browsers have since removed that prominent display, and research suggested users rarely noticed or understood the difference. Today an EV certificate encrypts exactly as well as a free DV certificate.

Reasons you might still see them include contractual or regulatory requirements, partner expectations, or corporate policy. The organization details remain visible inside the certificate, for example when someone opens the certificate viewer, and they can be read by software.

Example

openssl x509 -in cert.pem -noout -subject
subject=jurisdictionC=US, businessCategory=Private Organization, serialNumber=1234567, C=US, O=Example Inc, CN=example.com

The extra fields such as businessCategory and serialNumber are typical of EV.

Common mistakes

  • Buying EV to get a green bar that no longer appears.
  • Assuming EV makes a site immune to phishing or compromise.
  • Allowing the longer validation process to delay a renewal and cause an outage.

Get notified when this term updates

Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.

Keep reading

Glossary · SecurityDomain Validation (DV) CertificateA DV certificate is issued after the CA verifies only that you control the domain, with no check of who you are as an organization.Glossary · SecurityCAA Record (Certification Authority Authorization)A CAA record lists which certificate authorities may issue TLS certificates for a domain, and CAs must check it before issuing.Glossary · SecurityCertificate Authority (CA)A certificate authority is a trusted organization that verifies control of a domain and signs the TLS certificates browsers rely on to trust a website.Guide · SSL & SecurityHow to Check an SSL Certificate Expiry Date (3 Easy Ways)Find out when your SSL certificate expires using a free online checker, your browser, or one command, and learn what to do if the date is close or has passed.7 min readGuide · SSL & SecurityHow to Renew an SSL Certificate and Automate It for GoodLearn the certificate lifecycle, automate renewals with certbot, Caddy or acme.sh, add reload hooks, test with a dry run and monitor expiry before users notice.9 min readGuide · SSL & SecurityLet's Encrypt Renewal Failures: Certbot Debugging GuideWhy certbot renewals fail and how to fix them: http-01 and dns-01 challenges, firewalls, redirects, rate limits, timers, and the exact debug commands.8 min read

This page is general information written by our editorial team and updated when documentation changes. Servers and providers differ, so test changes safely first. See our editorial policy and disclaimer.