Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This is a part of curl's verbose output when connecting to the HTTPS site of Google.

* Server certificate:
*        subject: C=US; ST=California; L=Mountain View; O=Google Inc;
*        start date: 2014-03-12 09:38:30 GMT
*        expire date: 2014-06-10 00:00:00 GMT
*        subjectAltName: matched
*        issuer: C=US; O=Google Inc; CN=Google Internet Authority G2
*        SSL certificate verify ok.

From this output is it possible to find out if a website using DV, OV or EV certificates?

I find that it is easy to identify EV certificates as their issuer: field contains either Extended Validation CA or EV CA. But how does one differentiate DV from OV?

share|improve this question
Not really a dupe, but related: How does an end user differentiate between OV and DV certificates? The fields that indicate if it's DV or OV should show same values as in GUI, tho those values are often not really clear and each CA marks those differently. There are some commonalities tho. Check my edit to that answer or the last comment for more info ;) – TildalWave Apr 3 '14 at 11:04
up vote 0 down vote accepted

You can only make assumptions based on the contents of the Organization field (DV certificate will either have the domain or "Persona Not Validated" in the organization name field) or in the policy identifier if it is there. Certificate issuers do not follow any unified scheme to differentiate OV vs DV. So, with cURL, you will have to do write your own checks of these fields to get a best guess. More information in this possible duplicate question: How does an end user differentiate between OV and DV certificates?

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.