Ordering EV Code Signing Certificates

What Is an EV Code Signing Certificate?

An Extended Validation (EV) Code Signing certificate provides the highest level of identity assurance available for signing software, applications, drivers, and executable files. It verifies the publisher's identity and ensures that signed software is authentic, has not been tampered with, and originates from a trusted organization.

Unlike Organization Validation (OV) Code Signing certificates, EV Code Signing certificates require the Certificate Authority (CA) to perform rigorous, multi-step verification of your organization's legal existence, physical address, operational status, and the authority of the individuals requesting the certificate. This validation process is governed by the CA/Browser Forum Code Signing Baseline Requirements and Extended Validation Code Signing Guidelines.

EV Code Signing certificates require the subscriber's private key to be generated and protected within a certified hardware cryptographic device, such as a FIPS-compliant USB token or a secure cloud-based Hardware Security Module (HSM). This significantly reduces the risk of private key compromise and unauthorized code signing.

The issuance timeline is typically 3–5 business days as the CA completes the full Extended Validation process. Once issued, the certificate provides the highest level of publisher trust for securely signing software and establishing publisher authenticity.