The BEAST exploit and subsequent scrambling by browser vendors to close up vulnerabilities against SSL authentication have been focused on the SSL/TLS protocols weaknesses in recent months. Some IT professionals say certificate authorities (CAs) need to do a better job confirming the identity of certificate holders in order to bolster the trust placed in SSL certificates. CAs realized the time and resources it takes to more painstakingly verify certificate holder identities: That’s where the idea of extended validation SSL certificates came from.”]
Source: https://www.darkreading.com/authentication/is-ssl-cert-holder-id-verification-a-joke-

