Extended Validation — EV — SSL certificates sit at the top of the SSL certificate hierarchy. They are the most expensive, most thoroughly vetted, and historically the most visually distinctive type of SSL certificate. If you have ever seen a company name displayed in green text in a browser's address bar, you were looking at a site using an EV certificate. That visual cue was removed by major browsers in 2019, which changed the case for EV considerably — but the certificates still exist and still serve a purpose for some organisations.
What Makes EV SSL Different?
All SSL certificates verify that you control the domain they are issued for. The difference between certificate types is how much additional verification of the organisation behind the domain takes place:
- DV (Domain Validated): Confirms only that you control the domain. No organisational checks.
- OV (Organisation Validated): Confirms the organisation exists and is operating legitimately. Company details are included in the certificate.
- EV (Extended Validation): The most thorough check. The Certificate Authority verifies the organisation's legal existence, physical address, operational status, phone number, and the identity of the individual requesting the certificate. The full legal organisation name is included in the certificate and visible to anyone who inspects it.
The Loss of the Green Bar
Until 2019, major browsers displayed EV certificates with a prominent green address bar showing the company's verified legal name — for example, "Lloyds Bank PLC" displayed in green next to the padlock. This visual distinction provided an immediate, visible signal of identity verification that helped users distinguish legitimate banking and financial sites from phishing imitations.
In 2019, Chrome, Safari, and Firefox removed this visual distinction, citing research that most users did not notice or understand it. EV certificates now display the same padlock icon as DV and OV certificates in most browsers. Users who want to see the verified organisation details must actively inspect the certificate.
Does EV SSL Still Matter?
With the green bar gone, the visible benefit of EV certificates to casual users has diminished significantly. The remaining value lies in:
- Certificate details for diligent users. Users who click the padlock and inspect the certificate will see the verified legal name of the organisation, providing reassurance for high-value or sensitive transactions.
- Organisational accountability. The rigorous vetting process creates a clear, verified paper trail of who is behind the site. For financial services, legal firms, and regulated industries, this may be a compliance or governance consideration.
- Deterrence. The difficulty of obtaining an EV certificate means fraudulent sites are unlikely to obtain one — though this argument applies equally to OV certificates.
Who Should Consider an EV Certificate?
EV certificates are most appropriate for:
- Banks, building societies, and financial services firms
- Large ecommerce platforms with high transaction volumes
- Legal and professional services firms handling sensitive client matters
- Regulated organisations with compliance requirements
- Government and public sector websites
For a small business website, a blog, a charity site, or a standard ecommerce store, a free Let's Encrypt DV certificate or a paid OV certificate provides all the security protection the site needs at a fraction of the cost.
Common Mistakes
- Buying an EV certificate expecting a visible ranking or trust benefit for ordinary visitors. Without the green bar, the practical difference for most visitors is minimal.
- Confusing EV with stronger encryption. All SSL certificates use the same encryption standards regardless of validation level. EV does not encrypt data more securely than DV.
- Not renewing EV certificates on time. EV certificates typically have a shorter maximum validity period than DV certificates and require re-validation on renewal, which takes more time. Plan ahead.
EV SSL certificates are valuable tools for specific organisations where verified identity and the highest level of institutional assurance matter. For most websites, including most businesses, a free or standard SSL certificate provides everything needed.
Need SSL for your website? View our SSL certificate options at Eazyhosting — free SSL included with all hosting plans.
Most small businesses need a standard DV certificate rather than EV SSL. For a plain-English guide to what is included with Eazyhosting hosting, see SSL Certificates for Small Business UK.
