Simplifying SSL: EV vs DV vs OV vs FREE SSL Certificates

13 December 2023 - by Carl

This is the third in our series of insights that seek to explore and simplify the topic of SSL (and TLS) in web application hosting.

In our previous insight, we looked at SSL Certificate Terminology; in this insight, we’ll explore the differences between different SSL certificate validations and warranties.

What are the differences between different SSL certificate validations - EV Extended Validation OV Organisation Validation DV Domain Validation Free SSL Certificates

EV vs DV vs OV vs FREE SSL Certificates

EV (Extended Validation) SSL certificates were once the best that money could buy; it would display a green bar in many web browsers and the name of the identity to which it was issued to. It meant you could be confident the person you were talking to had jumped through lots of compliance hoops to prove their identity and capability while offering no other technical advantages. A lack of user recognition and many browsers dropping the green or named bar have lost much of the value of EV certificates.

OV (Organisation Validation) SSL certificates carry a higher level of verification than DV certificates, which helps ensure the certificate is only issued to a real-world verifiable organisation.

When visiting a website, when was the last time you verified who the SSL certificate was issued to beyond a glance to see if the padlock is present next to the URL without error? Quite probably never.

DV (Domain Validation) SSL certificates undertake the minimum level of verification using DNS or HTTP methods to verify the person asking for the SSL certificate to be issued has a significant level of control over the domain name. The low cost and quick issuance of DV certificates means they are the most widely used.

FREE SSL certificates from Letsencrypt are DV, as there is no margin to perform the required verification steps.

SSL Certificate Warranty - Certificate Authorities often offer a $figure for warranty/insurance of their issued EV/OV/DV certificates.

SSL Certificate Warranty

Certificate Authorities (which we’ll cover later) often offer a $figure for warranty/insurance of their issued EV/OV/DV certificates.

We’re often asked if Free DV certificates carry any warranty, and no, they do not; however, we question the value of these promises as we’ve never seen any evidence of a successful claim against them in two-plus decades.

Keep updated with the latest from Pipe Ten by subscribing below.


More in the Simplifying SSL/TLS series

  1. SSL Basics – What is SSL?
  2. SSL Certificate Terminology
  3. EV vs DV vs OV vs FREE SSL Certificates
  4. Certificate Authorities and The Signing Process
  5. TLS and Versions
  6. Web Server Headers
  7. Mixed Content Warning
  8. Testing & Tools

Pipe Ten Hosting Ltd is A leading web hosting company within the UK that has provided a wide range of web hosting and online infrastructure management services to its members since 2002. They are ISO/IEC 27001 certified, having achieved the internationally recognised accreditation for Information Security Management.

Tags: