What are OV and EV certificates?
Organisation- and Extended-Validation certificates that bind a verified legal identity to a domain.
Written by the SkyQon engineering team · Last verified 4 August 2026
Why it matters
A domain-validated certificate proves control of a name and nothing more. OV and EV certificates additionally bind a verified legal identity — company name, registration number, jurisdiction — into the certificate, which is what identity-sensitive and regulated contexts ask for.
The standard
CA/Browser Forum Baseline Requirements, with the additional EV Guidelines for extended validation. The verified identity appears in the certificate's subject fields rather than only in the subjectAltName.
Official text: CA/Browser Forum Baseline Requirements
How it fails
Browsers stopped surfacing EV in the address bar years ago, so the visible benefit is gone while the cost and renewal friction remain — teams keep buying EV without being able to say why. The substantive failure is drift: a company renames, relocates or restructures, and the identity asserted in a live certificate quietly stops matching the register.
Related terms
Check this on your own domain
SkyQon reads the same public signals described on this page and scores them for your domain. No account, no agent, nothing to install — a scored report by email in minutes.