3 ms·
I'm not interested in an EV cert at the moment, but just for curiosity: which information is required for an EV cert? The front page only has "business name", "
by cesarb 12y ago
I'm not interested in an EV cert at the moment, but just for curiosity: which information is required for an EV cert? The front page only has "business name", "country", "city", "state", and server names. I'd expect it to ask at least for a CNPJ (the Brazilian tax identifier, every company has one, it's the "primary key" for businesses in this country) when the selected country is Brazil, for instance.
Is there anywhere in the site which lists what one should have before requesting the cert? Something like "have these documents at hand" (followed by a list of country-specific documents).
- mikemaccana 12y agoOfficial guidelines are here: https://cabforum.org/wp-content/uploads/EV-V1_5_2Libre.pdf https://cabforum.org/wp-content/uploads/EV-V1_5_2Libre.pdf Certificates usually use the x509v3 object for 'Jurisdiction of Business Name' and this would point to the national / state level identifier. Ie, in the UK, Digicert looks up the company on Companies House and signs the UK company ID - the end-user doesn't supply the company ID, just the legal name, the verifying CA then checks the government authority to get the company ID. It would be similar in Brazil. You can see the national company ID inside an EV cert from the browser, and also from openssl: https://certsimple.com/blog/do-ev-ssl-certificates-have-better-encryption https://certsimple.com/blog/do-ev-ssl-certificates-have-bett... One of the the things we're looking at is getting metrics on the parts that most people don't have, do better pre-arm people for verification.
- cesarb 12y ago> the end-user doesn't supply the company ID, just the legal name, the verifying CA then checks the government authority to get the company ID. That's backwards from what I'd expect. I'd expect to give the CNPJ, and the CA to get the company name from the government given the CNPJ.