SiteSafe™ Extended Validation SSL Certificates

Ideal for businesses that…

• …need higher security standards to protect their Web site transactions.
• …want to increase customer confidence for safe shopping.
• …want to demonstrate the legitimacy of their website with a valid SSL Certificate.
• …can meet verification requirements.

Volume discounts are available for purchase of 10 or more SSL Certificates. Please contact Customer Service at 1-877-228-1023 for details.

Need help? Speak to an online security specialist. 1-877-228-1023

Why consider a SiteSafe™ Extended Validation Certificate?

Higher Security Standards — Help prevent "phishing" and fraud online with an EV Certificate. Issued only to businesses eligible under the strict validation requirements, EV Certificates can be purchased only from a select group of Certification Authorities, such as Network Solutions®.

Increase customer confidence — EV Certificates trigger the new green address bar on next-generation Web browsers (such as Internet Explorer® 7), as well as the familiar closed padlock and "https" URL prefix that customers look for today. Together, they instantly show customers that your Web site is not a fraudulent or "phishing" site and is a safe place to transact business.

Prove the legitimacy of your business — EV Certificates are issued only after a comprehensive verification of your business credentials affirms that your business meets the industry's highest standards for legitimacy.

Secure customer information with state-of-the-art technology — SiteSafe™ EV Certificates encode transactional data with the highest level of SSL Encryption available: from 128-bit up to 256-bit encryption, depending on your Web server. All SiteSafe Certificates work with the latest high-security browsers.

Buy with confidence — SiteSafe EV Certificates are issued by Network Solutions, one of the most recognized and trusted brands on the Internet. We stand behind our EV Certificates with a $1 Million Relying Party Guarantee payable to your Web site visitors.

Display your commitment to security — SiteSafe EV Certificates include an EV-specific Site Confirm Seal to display on your Web site for added visual assurance of your site's safety and legitimacy.

EV Root Updater Code free with purchase — Our EV Root Updater Code will enable your Web site to automatically update the EV Roots stored in your visitors' Internet Explorer® 7 browsers on Windows® XP so their address bars will display as green for your Web site address.

Get the flexibility you need — We will re-issue your EV Certificate absolutely free each time you change Web hosting providers.

Get the help you need when you need it — Free Real Person Customer Service™ from Network Solutions is available 24 hours a day, seven days a week to answer your questions.

In addition to displaying the familiar closed padlock, the address bar of next-generation Web browsers (such as Internet Explorer® 7) will turn green in color for sites protected with an EV Certificate.

What can EV Certificates and the green bar do for your online business?

Help your customers transact with confidence — The green bar provides instant visual confirmation that your site and your business are safe and legitimate, having passed a rigorous and thorough examination of their credentials.

Show your customers you're serious about security — Displaying the green bar shows your customers that you go above and beyond the norm to assure their security.

Increase your business — Customers may soon begin to look for the green bar when choosing which Web sites to patronize. With an EV Certificate, your site can attract these savvy shoppers.

Help you lead your industry — Show your customers you're proactive and progressive by having your Web site be among the first to trigger the green bar.

How do I choose the right SiteSafe™ Certificate for my business?

Network Solutions offers multiple types of SiteSafe™ SSL Certificates: Basic, Pro, Wildcard, and Extended Validation (EV) Certificates.

• Basic, Pro, and Wildcard SSL Certificates — Before issuing any of these certificates, Network Solutions® verifies the legitimacy of the applying business by checking its credentials (such as business license or Articles of Incorporation) with multiple third-party sources. SSL Encryption is an excellent choice for any business conducting online transactions and accepting sensitive data, such as credit card numbers, from customers.
• EV Certificates — The "extended validation" process offers a new level of security and assurance for SSL Certificates. Obtaining an EV Certificate requires a far more detailed application and validation process; accordingly, these certificates are currently restricted primarily to corporations, business entities (such as sole proprietors, general partnerships, unincorporated associations, etc.), and government entities.

To the consumer visiting your Web site, the most obvious difference between an EV Certificate and a non-EV Certificate will appear in the navigation window of next-generation Web browsers. In addition to displaying a closed padlock image and "https" Web address prefix, Web sites secured by an EV Certificate will turn the address bar green. Web sites secured by non-EV Certificates will continue to display both the closed padlock image and "https" prefix, but the browser address bar will remain white.

Can I upgrade my current non-EV SSL Certificate to an EV Certificate?

Yes, if your business meets industry eligibility guidelines. If you have a SiteSafe™ Basic, Pro or Wildcard SSL Certificate from Network Solutions, we are pleased to give you a substantial discount off of the purchase of an EV Certificate. To receive your discount, you must place your EV Certificate order with an EV SSL Certificate specialist at 1-866-616-7647.

Wildcard customers should note that industry guidelines prohibit the issuance of wildcard EV Certificates. To reap the benefits of an EV Certificate for their Web site, they may want to purchase an EV Certificate for their main domain and retain their current Wildcard Certificate to cover their sub-domains.

If you have an SSL Certificate from a Certification Authority other than Network Solutions, you may still upgrade to a SiteSafe™ EV Certificate at a very competitive price.

Please note that industry guidelines require all EV applicants, even those who already have SSL Certificates, to successfully complete the extended validation process before receiving an EV Certificate.

What is the Network Solutions® EV Root Updater Code?

When running on the Microsoft Windows Vista™ platform, Internet Explorer® 7 (IE 7) automatically updates its store of EV Roots. Unfortunately, this is not the case when IE 7 is running on Windows® XP. To address this, Network Solutions developed its EV Root Updater Code to automatically update your visitors' Web browsers to support your EV SSL Certificate. The EV Root Updater Code is a simple script that you can embed into the secure pages of your Web site. The EV Root Updater Code will transparently update the EV Roots stored in your visitors' IE 7 browsers on Windows® XP so their address bars will display as green for your Web site address.

If I don't upgrade to or qualify for an EV Certificate, can my customers using Internet Explorer® 7 and other next-generation browsers still view my current SSL Certificates?

Yes. Next-generation browsers will still support, recognize, and adhere to existing valid SSL Certificate standards even after Extended Validation is widely deployed.

How was Extended Validation developed?

A group of leading Web browser vendors and SSL Certification Authorities (CAs), including Network Solutions®, formed the Certification Authority/Browser (CA/B) Forum to address the need for increased security and consumer confidence in online transactions. CA/B Forum members agreed upon both technical and procedural specifications for the new class of "high assurance" certificates, now known as Extended Validation Certificates.

How does Extended Validation differ from existing validation procedures?

CA/B Forum guidelines currently restrict EV Certificates to corporations, business entities (such as sole proprietors, general partnerships, unincorporated associations, etc.), and government entities. For those eligible, the application process for an EV Certificate is more thorough than existing procedures, requiring applicants to provide more detailed information about their businesses for final verification. The extended validation process is intended to enhance the authority of and consumer confidence in the Certificates, and to make it nearly impossible for fraudulent or criminal applicants to receive an EV Certificate.

What type of information will a Certification Authority need in order to issue an EV Certificate?

When you apply for an EV certificate from a Certification Authority (CA) such as Network Solutions®, you will be asked to provide certain types of information about your business and your ownership of it. This information may include:

• Dun & Bradstreet registration numbers
• Proof of physical address via database listings
• Opinion letter from legal counsel or public accountant
• Other corporate, financial, and government documents such as Articles of Incorporation, bank accounts, and business licenses
• Government-issued photo IDs

The CA will review and verify the accuracy of these documents. It may also perform additional checks before issuing the EV SSL Certificate. If the applicant's credentials can't be verified in accordance with the CA/Browser Forum guidelines, then the CA will not issue the Certificate.

Will it take longer for me to receive an EV SSL Certificate for my business than it would to receive a non-EV SSL Certificate?

Yes, at least at first. Extended validation is a new protocol with more stringent requirements. At this time, the validation process is expected to take about 5 to 10 business days once the Certification Authority has received all required documentation.

Will Web sites using EV Certificates process transactions differently than those using non-EV certificates?

No. Consumers will see a difference in the representation of the EV Certificate and secure connection (e.g., green address bar), but will experience no change or slowdown in operation or transaction procedures.

The requirements for issuing an Extended Validation Certificate were developed by the Certification Authority/Browser Forum, a group of leading Web browser vendors and SSL Certification Authorities (CAs), including Network Solutions®. Please visit their Web site for complete details.

All CAs must adhere to these guidelines when determining whether an applicant is eligible for an EV Certificate or has met the necessary validation criteria.

An EV Certificate can be issued to government entities, to privately-held or publicly-held corporations, or to business entities including sole proprietors, general partnerships, and unincorporated associations that meet the requirements outlined below.

An EV Certificate can be issued to privately-held or publicly-held corporations that meet the following requirements:

1. The privately-held or publicly-held corporation MUST be a legally recognized entity whose existence was created by a filing with (or an act of) the Incorporating Agency in its Jurisdiction of Incorporation (e.g., by issuance of a certificate of incorporation);
2. The privately-held or publicly-held corporation MUST have designated with the Incorporating Agency a Registered Agent, Registered Office (as required under the laws of the Jurisdiction of Incorporation) or equivalent;
3. The privately-held or publicly-held corporation MUST NOT be designated on the records of the Incorporating Agency by labels such as "inactive," "invalid," "not current," or the equivalent;
4. The privately-held or publicly-held corporation's Jurisdiction of Incorporation and/or its Place of Business MUST NOT be in any country where the CA is prohibited from doing business or issuing a certificate by the laws of the CA's jurisdiction; and
5. The privately-held or publicly-held corporation MUST NOT be listed on any government denial list or prohibited list (e.g., trade embargo) under the laws of the CA's jurisdiction.

An EV Certificate can be issued to business entities that meet the following requirements:

1. The business entity MUST be a legally recognized entity whose formation included the filing of certain forms with the Registration Agency in its Jurisdiction, the issuance or approval by such Registration Agency of a charter, certificate, or license, and whose existence can be verified with that Registration Agency;
2. The business entity MUST have a verifiable physical existence and business presence;
3. At least one Principal Individual associated with business entity MUST be identified and validated;
4. The identified Principal Individual MUST attest to the representations made in the Subscriber Agreement;
5. Where the business entity represents itself under an assumed name, the CA MUST verify the business entity use of the assumed name pursuant to the requirements of Section 15 herein;
6. The business entity and the identified Principal Individual associated with the business entity MUST NOT be located or residing in any country where the CA is prohibited from doing business or issuing a certificate by the laws of the CA's jurisdiction; and
7. The business entity and the identified Principal Individual associated with the business entity MUST NOT be listed on any government denial list or prohibited list (e.g., trade embargo) under the laws of the CA's jurisdiction.

An EV Certificate can be issued to government entities that meet the following requirements:

1. The legal existence of the government entity MUST be established by the law of the Jurisdiction of Incorporation;
2. The government entity MUST NOT be in any country where the CA is prohibited from doing business or issuing a certificate by the laws of the CA's jurisdiction; and
3. The government entity MUST NOT be listed on any government denial list or prohibited list (e.g., trade embargo) under the laws of the CA's jurisdiction.

At this time, an EV Certificate CANNOT be issued to any person or any organization or entity that does not satisfy the requirements above.