Official guidelines are here: https://cabforum.org/wp-content/uploads/EV-V1_5_2Libre.pdf https://cabforum.org/wp-content/uploads/EV-V1_5_2Libre.pdf Certificate

Official guidelines are here: https://cabforum.org/wp-content/uploads/EV-V1_5_2Libre.pdf https://cabforum.org/wp-content/uploads/EV-V1_5_2Libre.pdf Certificates usually use the x509v3 object for 'Jurisdiction of Business Name' and this would point to the national / state level identifier. Ie, in the UK, Digicert looks up the company on Companies House and signs the UK company ID - the end-user doesn't supply the company ID, just the legal name, the verifying CA then checks the government authority to get the company ID. It would be similar in Brazil. You can see the national company ID inside an EV cert from the browser, and also from openssl: https://certsimple.com/blog/do-ev-ssl-certificates-have-better-encryption https://certsimple.com/blog/do-ev-ssl-certificates-have-bett... One of the the things we're looking at is getting metrics on the parts that most people don't have, do better pre-arm people for verification.