OV (Organization Validated) sits between DV and EV. The Certificate Authority validates two things:
- That you control the domain (same as DV)
- That your organization legally exists — checked against business registries (state Secretary of State for US companies, Companies House for UK, etc.)
Validation typically takes 1-3 business days — the CA confirms the business name, registered address, phone number, and that the person requesting the cert is authorized to act on the company's behalf.
The visible difference from DV: in modern browsers (post-2019), there's no visual indicator. Both show a padlock. The organization details are buried inside the certificate — visible only if a curious user clicks the padlock and inspects the cert.
So why pay $50-$150/year for OV?
- Insurance / warranty — paid CAs include warranty against mis-issuance ($10K-$1.75M depending on tier). Let's Encrypt provides $0.
- Compliance — some regulated industries (financial, healthcare) require OV minimum for compliance frameworks.
- Established brand signal — if a curious user inspects your cert, seeing the verified company name looks more legitimate than a Let's Encrypt DV.
For most small businesses, OV isn't worth the cost over free DV. For B2B SaaS handling sensitive data, financial services, or healthcare, it's often a checkbox requirement.
