0

When visiting a website that uses HTTPS, we can see its certificate in the browser.
But how can we know for sure which validation process the company or domain behind the website has gone through?

Validation processes: OV (Organization Validation), DV (Domain Validation) and EV (Extended Validation).

When I check a website's certificate details in a browser, I can't find any information about its validation process. I assumed this piece of information would be normally included in the certificate details as it would mean how much a user can trust a website they are visiting.

5
  • It's generally in the certificate policies. If you look at the cert for security.stackexchange.com (which is issued by Lets Encrypt) in your browser, and scroll down to certificate policies, you will see Policy Certificate Type ( 2.23.140.1.2.1 ); Value Domain Validation
    – mti2935
    Aug 13 at 12:07
  • @mti2935 but I don't see that in my browser, Edge imgur.com/a/mnybzRf
    – user279925
    Aug 13 at 13:44
  • I don't use Edge, but here is how Firefox displays it: imgur.com/a/3jzFNNV
    – mti2935
    Aug 13 at 14:13
  • You can also use a command line tool such as openssl to view information about a site's certificate; or you can use a service such as ssllabs to scan a site, and show information about a site's certificate.
    – mti2935
    Aug 13 at 15:06
  • @mti2935 thank you, just found an extension that shows validation process on the browser toolbar chrome.google.com/webstore/detail/certificate-info/… . apparently there is a 4th type of validation called Identity validation "IV".
    – user279925
    Aug 13 at 17:46

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy