Business Validation

The Business Validation (BV), also called Organization Validation (OV), SSL certificate is recommended if you have an e-commerce website that is a registered business. Besides the domain validation performed through e-mail, you will have to provide company documentation to receive business authentication. During this authentication process, the Certificate Authority (CA) will verify if your business is carried out by a legitimate, good faith company operating at the provided location. Since the validation is done manually and involves paperwork, you will receive your Business Validation SSL certificate within 1-3 business days.

After receiving Business Validation, the green “https” and padlock icon will be displayed on your website’s address bar. These signs will make customers more willing to entrust you their personal and financial information. Yet, if your website purpose is to perform large sales, offer specific products/services or execute financial transactions, you should consider buying our Extended Validation (EV) certificate. This type of SSL certificate will activate the green address bar and will give your site a higher level of trust.

bv2bv1You can check if you have a Business Validation SSL Certificate by looking at the attributes of your SSL Certificate. Please open the two screenshots on the right in order to see where you can find the information about the validation type of your SSL Certificate.

Different SSL Certificate brands have different Business Validation procedures. Please read the section that applies to your SSL Certificate brand below.

Comodo

You need to provide information about your company and your company’s phone number as a part of the Business Validation process. There are three ways to do that. You don’t have to do all three. Doing just one of them will allow you to pass the Business Validation.

1.1) The first way is to provide your DUNS number to Comodo. You can get your company’s DUNS number from this website: https://www.dandb.com/. If Comodo gets back to you and says that your DUNS listing does not contain a phone number, then you need to contact Dun & Bradstreet (at https://www.dandb.com/) and ask them to add your company’s phone number to their “business directory and on the report”.

1.2) If you don’t have a DUNS number, then the other thing which you can do is to provide your company’s Articles of Incorporation, or Government Issued Business License, or your local organization number. Please make sure that the documents that you provide have your company’s registration number so that Comodo can check your company with your country’s governmental directories (e.g.: Corporation Division, Companies House, Department of State, etc). Please note that Comodo will be looking to see your company’s phone number listed there as well. Not all governmental directories have the companies phone numbers. If the governmental directory allows you to call them, email them, or use their website to add your phone number, then please go ahead and do that.

1.3) If the above two options (1.1 and 1.2) don’t work for you, then the third and last option to validate your company and your phone number is to ask a CPA (Certified Public Accountant), or a Latin Notary, or an Attorney (Lawyer) to write, sign and send a letter to Comodo where they confirm your company name, address and phone number. You can find the sample letters here:
– Sample Accountant Letter
– Sample Form Legal Opinion Letter

partner-order-idPlease send any of the above information (from points 1.1, 1.2, or 1.3) to [email protected] and mention your “Partner Order ID” in your message. You can find your “Partner Order ID” on the details page of your SSL Certificate inside your SSL Dragon account. See screenshot on the right.

If you do not hear from Comodo in the next 3 days after you email them the information from above, then please call +1 (888) 266-6361 (Ext 4) to check the status of your SSL Certificate with Comodo. When you talk to them, you will need to provide them your “Partner Order ID”.

Thawte, GeoTrust, Symantec/VeriSign

If you bought a Business Validation SSL Certificate with Thawte, GeoTrust, Symantec/VeriSign, then the certificate authority will work on validating the legal existence of your company via local public databases, as a part of the Business Validation process. This may take between 1-3 working days. Please wait until one of the certificate authority representatives contacts you about any additional information that they may need you to provide them.

partner-order-idIf you do not hear from the Certificate Authority representatives in the next 5-7 days, then please call +1 (520) 477-3152 (Ext 2) to check the status of your SSL Certificate with the Certificate Authority. Please note that Thawte, GeoTrust, Symantec/VeriSign are all owned by Symanec, and they all have the same phone number provided above.  When you talk to them, you will need to provide the “Partner Order ID”, which you can find on the details page of your SSL Certificate inside your SSL Dragon account. See screenshot on the right.

The validation time of an SSL depends on the type of certificate you chose to buy.

Domain Validated certificates are issued within 3-5 minutes in 99% of the cases. Only when an SSL Certificate is requested for a domain name that contains a trademark or a brand name, then those SSL Certificates may pass brand validation, and can take up to a business day to be issued.

Business Validated certificates are usually issued within 1-3 business days.

Extended Validated certificates can take between 1-7 business days to be issued. The Certificate Authority does its part of the work very quickly. If all the information is provided to the Certificate Authority quickly and correctly, then the Certificate Authority can issue the EV certificate within 1 business day. We’ve seen situations when the EV Certificate was issued within a few hours. The 1-7 days period depends on how quickly the customer provides the required information to the Certificate Authority, and how quickly the customer responds to the Certificate Authority’s potential requests for additional information.

By doing the Validation process, the Certificate Authority’s is trying to confirm that you are the owner of the domain, and that the company that you are requesting a Business Validation or Extended Validation certificate for is active. That is why it is important that you keep your company’s records (address and phone number) up to date and you promptly respond to the Certificate Authority’s requests.

bv2bv1You can check whether your SSL Certificate requires Domain Validation, Business Validation or Extended Validation by looking at the attributes of your SSL Certificate. Please open the two screenshots on the right in order to see where you can find the information about the validation type of your SSL Certificate.

 

bv2bv1You can check if you have an Organization Validation SSL Certificate by looking at the attributes of your SSL Certificate. Business Validation equals to Organization Validation. This being said, wherever you see “Business Validation” it also means “Organization Validation”. Please open the two screenshots on the right in order to see where you can find the information about the validation type of your SSL Certificate.

Different SSL Certificate brands have different Organization Validation procedures. Please read the section that applies to your SSL Certificate brand below.

Comodo

You need to provide information about your organization and your organization’s phone number as a part of the Organization Validation process. There are three ways to do that. You don’t have to do all three. Doing just one of them will allow you to pass the Organization Validation.

1.1) The first way is to provide your DUNS number to Comodo. You can get your organization’s DUNS number from this website: https://www.dandb.com/. If Comodo gets back to you and says that your DUNS listing does not contain a phone number, then you need to contact Dun & Bradstreet (at https://www.dandb.com/) and ask them to add your organization’s phone number to their “business / organization directory and on the report”.

1.2) If you don’t have a DUNS number, then you need to provide your organization’s Articles of Incorporation, or Government Issued License, or your local organization number. Please make sure that the documents that you provide have your organization’s registration number so that Comodo can check your organization with your country’s governmental directories (e.g.: Corporation Division, Companies House, Department of State, etc). Please note that Comodo will be looking to see your organization’s phone number listed there as well. Not all governmental directories have the companies phone numbers. If the governmental directory allows you to call them, email them, or use their website to add your phone number, then please go ahead and do that.

1.3) If the above two options (1.1 and 1.2) don’t work for you, then the third and last option to validate your organization and your phone number is to ask a CPA (Certified Public Accountant), or a Latin Notary, or an Attorney (Lawyer) to write, sign and send a letter to Comodo where they confirm your organization name, address and phone number. You can find the sample letters below:
– Sample Accountant Letter
– Sample Form Legal Opinion Letter
– Sample Form Legal Opinion Letter for Government Organization

partner-order-idPlease send any of the above information (from points 1.1, 1.2, or 1.3) to [email protected] and mention your “Partner Order ID” in your message. You can find your “Partner Order ID” on the details page of your SSL Certificate inside your SSL Dragon account. See screenshot on the right.

If you do not hear from Comodo in the next 3 days after you email them the information from above, then please call +1 (888) 266-6361 (Ext 4) to check the status of your SSL Certificate with Comodo. When you talk to them, you will need to provide them your “Partner Order ID”.

Thawte, GeoTrust, Symantec/VeriSign

If you bought an Organization Validation SSL Certificate with Thawte, GeoTrust, Symantec/VeriSign, then the certificate authority will work on validating the legal existence of your organization via local public databases, as a part of the Organization Validation process. This may take between 1-3 working days. Please wait until one of the certificate authority representatives contacts you about any additional information that they may need you to provide them.

partner-order-idIf you do not hear from the Certificate Authority representatives in the next 5-7 days, then please call +1 (520) 477-3152 (Ext 2) to check the status of your SSL Certificate with the Certificate Authority. Please note that Thawte, GeoTrust, Symantec/VeriSign are all owned by Symanec, and they all have the same phone number provided above.  When you talk to them, you will need to provide the “Partner Order ID”, which you can find on the details page of your SSL Certificate inside your SSL Dragon account. See screenshot on the right.

You have to pass the Business Validation when you buy a new BV SSL Certificate.

If you buy your BV SSL Certificate for 1 year, then your certificate will be valid for 1 year, and you will have to pass the Business Validation again in 1 years when you request a new BV SSL Certificate. If you buy your BV SSL Certificate for 2 years, then your certificate will be valid for 2 years, and you will have to pass the Business Validation again in 2 years when you request a new BV SSL Certificate.

At the same time, the process of completing the Business Validation is easier the following years, so as the Certificate Authority has more information about your company in their system, based on your previous BV SSL Certificates requests.

Some Certificate Authorities (especially Comodo and Symantec) may ask you to update or add your phone number to your company’s DUNS listing, as a part of your Business or Extended Validation process.

After you have contacted Dun & Bradstreet and added your phone number to your company’s DUNS listing, it may take between 5 and 40 days for Dun & Bradstreet to make your DUNS listing update available to the public. When you talk to Dun & Bradstreet over the phone, they may tell you that they added or updated your phone number. However, they only initiated process. Your phone number will appear on the Dun & Bradstreet website (https://www.dandb.com/) in about 5 to 40 days after that.

You will know that your DUNS listing has been truly updated, only when you get an email message from Dun & Bradstreet saying that your DUNS profile has been updated successfully. Your phone number will start appearing on your DUNS listing only after you get this email from them. Also, Certificates Authorities (such as Comodo and Symantec) can verify your phone number based on your DUNS listing only when your phone number is publicly available. That’s why, you or we should contact the Certificate Authority requesting them to check your DUNS listing only after you get that confirmation by email.

In the past, we asked the Validation Department representatives from Comodo and Symantec to contact Dun & Bradstreet directly, and check our customer’s phone number with Dun & Bradstreet. We did that after our customers told us that they added or updated their phone number on their DUNS listing. Each time, Comodo and Symantec were told by the Dun & Bradstreet representatives that our customers’ DUNS listing update is “in progress” and “has not been completed yet”, and were advised to get back to Dun & Bradstreet when the customers receive an email message from Dun & Bradstreet which confirms them that their DUNS listing was updated.

If 5-40 days is too much to wait, we recommend you to go with other methods of validating your company and phone number, such as providing a legal letter written by a notary, an attorney, or a certified public accountant. This method will allow you to pass the Business or Extended Validation within 1-2 days.

BV SSL Certificates issued by GeoTrust, Thawte and Symantec have a quicker and easier Business Validation process compared to those issued by Comodo.

With GeoTrust, Thawte and Symantec, the Certificate Authority does most of the company validation process all by itself, and in rare cases requires the customers to provide additional information and legal letters signed by a notary, certified public accountant, or an attorney.

On the other side, Comodo relies a lot on the customer to provide all the information about his/her company, as well as updating the company’s DUNS listing (on the Dun & Bradstreet website) and providing legal letters signed by a notary, a certified public accountant, or an attorney.

You can read what the Business Validation process with these different brands consists of at this link.