What Documents Do You Need to Get an EV Code Signing Certificate Issued?

Here’s the List of Documents You Need to Submit to Get an EV Code Signing Certificate Issued

Software development companies don’t need an explanation of why Code Signing certificates are essential. But someone looking for an extra edge, such as instant trust in Microsoft SmartScreen and prevention of “Unknown Publisher” warning.

In that case, the EV Code Signing certificate offered by certificate authorities like Sectigo or DigiCert is the way to go.

However, deciding what documents you need to submit is also a task that shouldn’t be taken lightly, as even forgetting to submit one document can delay issuance.

Henceforth, here’s the detailed guide on what documents you must submit to complete the validation process and get the EV Code Signing certificate issued on time.

What are the Documents Required to Obtain EV Certificate?

An EV Code Signing Certificate must have a detailed verification process that determines if the organization is genuine.

Step 1: Application Submission

Submit a request for your certificate along with your company’s contact information and an organizational summary.

Step 2: Business Verification

The Certificate Authority verifies:

• Legal business existence
• Physical address
• Operational status
• Registration records

Step 3: Telephone Verification

To ensure the phone number of the business is correct the certificate authority confirms it with at least two independent sources.

Step 4: Authorized Contact Verification

The certificate authority verifies that the person requesting the certificate is authorized by your organization.

Step 5: Certificate Issuance

When verification has been completed successfully, an EV Code Signing Certificate is issued and delivered securely.

Step 6: Secure Key Deployment

Private keys for EV Code Signing Certificates are created using hardware security methods approved by the certificate authority.

What to Expect During EV Code Signing Validation Process

When compared to standard code-signing certificates, Extended Validation (EV) Code Signing Certificates require a more involved verification process, as they provide the most assurance for your identity as a publisher.

The CA must first complete much more extensive validation to ensure the requesting organisation is a legitimate, operationally functional organisation with authority to receive the certificate before the CA grants it to the organisation.

During the validation process, the CA must verify the requesting organisation’s legal/registered structure and its business address and independently confirm via trusted public records, federal/state/county/town databases and third-party records that the provided contact information is correct.

The CA also must perform verification of the completed Subscriber Agreement to confirm the certificate request was authorised by an individual with authority to bind the entity to the Subscriber Agreement.

As part of the verification process, applicants should expect to receive a telephone call or email requesting verification from the CA based on independently verified contact information. If the CA cannot verify the business contact information through public records, the CA may request additional documentation to verify the business.

The EV Code Signing certificate validation process can require significantly more interactions and potentially will take significantly longer than standard Code Signing validations; therefore, timely responses to requests for validation, accurate organisational information, and promptly specifying the evidence requested will greatly facilitate the issuance of the certificate.

Bank Confirmation Letter

If your company hasn’t been actively operating for equal to or more than 3 years, then a certificate authority like Sectigo accepts a letter from the Bank that says your company has an active checking account (Demand Deposit) with them.

Final Words

And once all the verification requirements are satisfied and completed, the certificate authority will send you a physical mail package at the verified business address, including an EV Code Signing certificate. Similarly, this EV Code Signing Certificate validation takes 1 to 5 business days.

Search