> For the complete documentation index, see [llms.txt](https://docs.certinext.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.certinext.io/documentation/certificate-lifecycle-management/ordering-a-certificate/as-a-customer/ordering-ev-public-trust-certificates/phase-2-steps-via-email-and-emsign/ev-certificate-download.md). # EV Certificate Download ### Certificate Issuance and Download Once all Order Actions are marked Completed, the CA processes and issues the certificate. This typically happens automatically within minutes to a few hours of the final action being completed. No action is required from you at this stage. ### Download Notification Email The Organization Representative receives an email with the subject: 'ORDER #\[ID] - Your Certificate is ready for download'. • The email contains Order ID, Ordered Date, Product & Validity, and the Identifier (domain). • It includes an orange "Download Certificate" button linking to the emSign Subscriber download page. • Click the "Download Certificate" button in the email. This opens the emSign Subscriber download page. ### emSign Subscriber Portal - Certificate Download Page
The download confirmation page shows: • A green tick with: "Thanks for completing the necessary steps." • "Your certificate has been issued and ready for download. To continue further, please click Download Certificate." • Order ID, Product & Validity, and Domain Name details. • Orange "Download Certificate" button. ### Certificate Download in Order Actions Expanding the final Certificate Download action in the Order Actions list reveals the following: **Text shown in the expanded panel:** \> Your certificate has been issued and ready for download. An email containing certificate download instructions has been sent to your email ID. In case you have not received an email, please click Resend Email to resend the email. Your certificate is based on the CSR submitted by you. Please ensure to import / use the certificate against the same key-pair, from where the CSR was generated. ***Resend Email*** *Re-sends the download notification email to the Organization Representative's email address. Use this if the original email was not received.* ***Download Certificate*** *Initiates the certificate download directly from the portal, bypassing the email.*

🚨 CRITICAL

CRITICAL: Your certificate MUST be installed with the matching private key. If you have lost your private key, you will need to generate a new CSR and request a reissue.

After installation, verify your certificate using SSL Labs (ssllabs.com/ssltest) to confirm it is correctly installed and trusted by major browsers.

EV certificates display the organization's name in the browser address bar - confirm this appears correctly after installation.

For EV SSL Certificate UCC: the issued certificate file contains Subject Alternative Name (SAN) entries for ALL your domains. You install ONE certificate file that covers all domains simultaneously.

### Selecting the Download Format When initiating a download from CERTInext, a 'Select the Format to download' dialog appears with four options:
**DER encoded binary X.509 (.CER)** Binary format of the certificate. Compact and widely supported by Windows systems and Java keystores. Choose this for Windows Server (IIS) or Java-based servers. **Base-64 encoded X.509 (.CER)** Text-based (PEM) format of the certificate, saved with the .CER extension. Readable in a text editor. Choose this for most Linux/Unix-based servers (Apache, Nginx), or when your server software requests a .CER file. **Base-64 encoded X.509 (.CRT)** Identical content to the Base-64 .CER above but saved with the .CRT file extension. Choose this when your server software (e.g., Apache, Nginx) expects a .crt file extension. **Zip** A ZIP archive containing the certificate along with any intermediate/chain certificates. Recommended for most installations. Choose Zip if you are unsure, or if your server requires the full certificate chain. Extract the ZIP and follow your server's installation guide. *Choose the one applicable to your scenario based on the above description*

ℹ INFO

Which Format to Choose

If in doubt, choose Zip - it includes all necessary certificate files (end-entity certificate + intermediate certificates/chain). Your web server administrator will know how to handle the extracted files. For quick Windows inspection, choose DER or Base-64 .CER.

--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.certinext.io/documentation/certificate-lifecycle-management/ordering-a-certificate/as-a-customer/ordering-ev-public-trust-certificates/phase-2-steps-via-email-and-emsign/ev-certificate-download.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.