EV Certificates: Can Individuals Apply?

TL;DR

Generally, no. Extended Validation (EV) certificates are primarily issued to legally registered organisations, not individuals. The validation process requires proving the organisation’s existence and right to operate, which is difficult for sole traders without a formal business structure.

Understanding EV Certificates

Extended Validation certificates provide the highest level of security for websites. They display the organisation’s name prominently in the browser address bar, giving visitors strong confidence that they are interacting with a legitimate entity. This is particularly important for e-commerce and financial sites.

Why EV Certificates Aren’t Usually For Individuals

1. Validation Requirements: EV certificates require rigorous verification of the organisation’s legal existence, physical address, telephone number, and operational authority. This typically involves checks with government databases and third-party sources.
2. Business Registration: A key part of the process is proving you are a registered business. Individuals usually don’t have this documentation unless they operate through a limited company or partnership.
3. Authorisation to Act: The applicant must demonstrate their authority to request the certificate on behalf of the organisation. This is easier with official company records.

Can Sole Traders Get an EV Certificate?

It’s very difficult, but not impossible. Here’s what you need:

1. Formal Business Structure: Register your sole trader business as a legal entity (e.g., Limited Company). This is the most important step.
2. Business Registration Documents: You’ll need official documentation confirming your registration, such as a Certificate of Incorporation.
3. Proof of Physical Address: Provide evidence of a registered office address (utility bills, lease agreements etc.).
4. Telephone Verification: The certificate authority will verify the business telephone number is listed in a public directory.

Alternative Certificates for Individuals

If you’re an individual and don’t have a registered business, consider these options:

• Domain Validation (DV) Certificate: The simplest and cheapest option. It verifies only that you control the domain name.
• Organisation Validation (OV) Certificate: Offers more validation than DV certificates, confirming your organisation’s details but less rigorous than EV. Some OV certificate authorities may issue to individuals with sufficient proof of identity and a legitimate business purpose.

How to Apply for an OV Certificate

1. Choose a Certificate Authority: Popular options include Sectigo, DigiCert, and GlobalSign.
2. Select the Appropriate Certificate: Choose an OV certificate suitable for your needs.
3. Generate a CSR (Certificate Signing Request): Use your web server to create a CSR file. For example, using OpenSSL:

   openssl req -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr

4. Submit the CSR and Documentation: Provide the CSR file and any required documentation to the certificate authority.
5. Complete Validation: Respond promptly to any validation requests from the CA.
6. Install the Certificate: Once validated, download and install the certificate on your web server.