1

We have a green (EV) SSL certificate for our site and images are fetched from the same domain (https). Currently we are planning to change the images domain (for performance issues) and put them in a different domain with a different ssl certificate. In order to reduce costs we are thinking if acquiring a standard certificate (not EV) for this CDN content (for the images). In that case our page will have an EV certificate but images would be fetched from a non EV certificate.

Will this -mixing of EV and non EV certificates- remove our green status from the browser (like fetching content from http connection inside an https page)?

Improve this question

1 Answer 1

Reset to default
3

This should not affect the EV status displayed in the browser's address bar. The EV status is based only on the certificate presented for the page itself. (You will, of course, not have EV displayed if you have mixed content or invalid certificates presented, but using a cheaper cert on images.yourdomain.tld should not be a problem.)

Improve this answer
3
  • Thanks David. Are you sure this won't affect the browser status? Are there any docs where this can be verified?
    – George Mavritsakis
    Jun 12, 2014 at 21:24
  • I tested it experimentally. The page at thawte.com/resources/getting-started/… (an EV page) sources resources from several other sites which do not have EV certs, including JS from ssl.google-analytics.com/ga.js.
    – David
    Jun 12, 2014 at 21:38
  • From what I see, they also fetch an image (tracking image _utm.gif) from google which does not have an EV. Thanks again David!
    – George Mavritsakis
    Jun 12, 2014 at 21:43

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .