I am not saying I am actually going to buy one but I am wondering if an individual can get an Extended Validation SSL certificate?
I know this is intended for companies / organisations but would this technically be possible?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
According to Section 7.1 of the Extended Verification Guidelines a certificate verifies the following:
(A) Legal Existence: The CA has confirmed with the Incorporating or Registration Agency in the Subject’s Jurisdiction of Incorporation or Registration that, as of the date the EV Certificate was issued, the Subject named in the EV Certificate legally exists as a valid organization or entity in the Jurisdiction of Incorporation or Registration;
The CA MAY only issue EV Certificates to Applicants that meet the Private Organization, Government Entity, Business Entity and Non-Commercial Entity requirements specified below.
I believe the answer is no.
I believe this has recently changed. The latest Baseline Requirements, as of April 2015, include in Section 3.2.3:
If an Applicant subject to this Section 3.2.3 is a natural person, then the CA SHALL verify the Applicant’s name, Applicant’s address, and the authenticity of the certificate request.
The CA SHALL verify the Applicant’s name using a legible copy, which discernibly shows the Applicant’s face, of at least one currently valid government‐issued photo ID (passport, drivers license, military ID, national ID, or equivalent document type).The CA SHALL inspect the copy for any indication of alteration or falsification.
The CA SHALL verify the Applicant’s address using a form of identification that the CA determines to be reliable, such as a government ID, utility bill, or bank or credit card statement. The CA MAY rely on the same government‐issued ID that was used to verify the Applicant’s name.
The CA SHALL verify the certificate request with the Applicant using a Reliable Method of Communication.
I'm not able to find any CA's actually offering this yet, however.