Document Requirements for Purchasing an SSL Certificate

a) What types of files are required when purchasing a Domain Validation SSL certificate ?

The DV certificate is the basic SSL certificate, requiring the applicant to prove domain control to a certification authority. They can demonstrate domain control using email-based or file-based authentication methods, making it the most basic-level SSL certificate.

b) What types of files are required when purchasing an Organization Validated SSL certificate ?

The SSL certificate order requires the applicant to demonstrate control over the website domain and verify certain business entity information, such as the legal business name, registration number, location, and telephone number. This verification is usually done using publicly available websites like the Government Business Registration Database or Dun & Bradstreet Registration Form. If the supplier cannot verify the information, the applicant must provide documentation.

c) What types of files are required when purchasing an Extended Validation SSL certificate ?

EV certificates require high SSL certificate verification, requiring vendors to verify domain control and extensive information about the applicant’s business entity and employment status. Common sources include Dun & Bradstreet records and online government databases. If the applicant’s business lacks verifiable information, a professional opinion letter (POL) can be submitted, signed by an attorney or CPA.

d) What documents are required to purchase a code-signing certificate ?

Code-signing certificates come in two types of verification: personal and organizational. Personal certificates require applicants to submit a notarized identity form with photo identification and be attested by an attorney, accountant, or notary public. Organizational certificates can be verified using an online business registration database, while personal certificates require business registration documents.

e) What is a public/private key pair ?

SSL works by using a public and private key pair, which are cryptographic keys. Public keys are accessible through a publicly accessible repository, while private keys are kept secret and stored on the SSL certificate server. These key pairs are mathematically related, meaning that anything encrypted with a public key can only be decrypted by its corresponding private key.

f) What is a Certificate Signing Request ?

A Certificate Signing Request is a formal request from a website owner or administrator to a Certificate Authority containing information about the entity seeking an SSL/TLS certificate. The CSR is generated on the server where the certificate will be installed and used to create a digital certificate. The CA’s verification process ensures control of the specified domain.