The main benefit of an EV SSL certificate is that a certificate authority has checked, in detail, that your organisation is a real, registered business before issuing it, and your verified company name is written into the certificate. It does not give stronger encryption than a cheaper certificate, and modern browsers no longer show a green address bar for it. For most websites a free or Domain Validated certificate is enough; EV makes sense when you need to prove legal identity to customers, partners or auditors.
This guide sets out what EV actually provides, what it does not, and how to decide whether it is worth the cost.
What an EV SSL certificate is
All SSL (more precisely, TLS) certificates do two jobs. They encrypt the connection between the visitor’s browser and your website, and they tell the browser who the certificate was issued to. Certificates differ in how much the certificate authority checks before it issues them:
- Domain Validated (DV): proves you control the domain, usually by email or a file on the server. Often issued in minutes.
- Organisation Validated (OV): adds a check that your organisation exists and is registered. Your company name appears in the certificate details.
- Extended Validation (EV): the most thorough check, following industry guidelines set by the CA/Browser Forum. Your verified legal name, and usually your registration number and country, appear in the certificate.
What the EV check involves
Before issuing an EV certificate, the certificate authority typically verifies:
- The organisation’s legal existence and registration with the relevant government body.
- Its physical address and that it is actually operating.
- That the domain is controlled by that organisation.
- That the person requesting the certificate is authorised to do so on the organisation’s behalf.
This usually takes several days and needs company documents, so plan ahead before your current certificate expires.
The real benefits of EV
Verified identity in the certificate
Anyone who clicks the padlock and opens the certificate details can see your verified legal name. That matters to customers and partners who check, and it makes it harder for a fraudster to obtain a certificate showing your company’s name.
Meeting a policy or contract requirement
Some banks, payment partners, government tenders or corporate security policies ask suppliers to use organisation-validated or extended-validated certificates. If a contract requires EV, that alone settles the question.
A documented verification trail
For regulated or high-value businesses, EV shows that identity was checked by an independent certificate authority. This can support audits and internal security reviews.
A signal of seriousness
Going through EV validation shows you were willing to prove who you are. Some businesses value that for brand protection, especially if their name is often impersonated.
Common myths about EV certificates
Older articles, including earlier versions of this one, repeat claims that are no longer true or were never true:
- “EV gives stronger encryption.” False. DV, OV and EV certificates all use the same encryption. The strength depends on the key and the server’s TLS settings, not on the validation level.
- “EV shows a green address bar.” No longer. Major browsers, including Chrome and Firefox, removed the special EV display from the address bar in 2019. Visitors now see the same padlock for every valid certificate. The company name is still in the certificate details.
- “PCI DSS requires EV.” False. Card data security standards require strong encryption for card data in transit. They do not require a particular validation level.
- “EV stops phishing.” Not on its own. A phishing site can still get a free DV certificate for a lookalike domain. EV helps only if people check certificate details, and most do not.
Limits of EV certificates
- No wildcard EV. Industry rules do not allow EV wildcard certificates. If you need many subdomains, you must list each one or use OV or DV wildcards.
- Organisations only. EV is issued to registered organisations, not to individuals.
- Cost and time. EV costs more than DV or OV and takes longer to issue and to renew, because the organisation is re-checked.
Which certificate should you choose?
- A blog, brochure site or small business site: the free DV certificate that comes with good hosting is enough.
- An online store or a site where customers log in: DV works for encryption. Consider OV if you want your company name in the certificate.
- Banks, insurers, payment businesses, large enterprises and government bodies: EV, or OV at least, especially where a regulator, partner or tender asks for it.
- Many subdomains on one domain: a wildcard certificate (DV or OV).
Whatever you choose, install it correctly, redirect HTTP to HTTPS, and make sure it renews before it expires. An expired EV certificate causes the same browser warning as any other expired certificate.
SSL certificates at Tremhost
Every Tremhost web hosting plan includes free SSL, installed and renewed for you. When you need more, Tremhost sells paid DV, OV, EV, wildcard and multi-domain certificates from DigiCert, Sectigo, GeoTrust, RapidSSL and Thawte, starting at $40 a year for a RapidSSL DV certificate. An OV certificate (Thawte SSL Web Server) is $123 a year. EV certificates are in the certificate store linked from the SSL certificates page. Installation is free when your site is hosted on Tremhost hosting, a VPS or a dedicated server. For setup help, see how to install free SSL in the Help Centre.
Frequently asked questions
Is an EV SSL certificate more secure than a DV certificate?
The encryption is the same. EV adds stronger identity verification, not stronger encryption.
Do browsers still show the company name for EV certificates?
Not in the address bar. The verified company name is visible when a visitor clicks the padlock and opens the certificate details.
Does an EV certificate improve Google rankings?
Google treats HTTPS as a ranking signal, but there is no evidence that the validation level matters. A free DV certificate counts the same for HTTPS.
How long does EV validation take?
It depends on how quickly the certificate authority can confirm your company records. Allow several working days and have your registration documents ready.
Next step
Compare DV, OV, EV and wildcard options on the Tremhost SSL certificates page, or ask support on WhatsApp (+263 73 563 9917), Monday to Friday, 08:00 to 17:00 CAT, which certificate fits your site.
