Organization Verification

Action 5 - Organization Verification

The CA verifies that your organization is a real, legally registered entity. This is the most detailed verification step for EV certificates. The CA first attempts automatic verification using public business registries.

Automatic Verification

If the CA can verify your organization automatically through public business registries, this step completes without any action from you - it will simply move to "Completed". Only if automatic verification cannot confirm your organization will a Verified Professional Letter (VPL) be requested.

Verified Professional Letter (VPL)

If automatic verification fails, the CA will request a Verified Professional Letter.

Step A - Email requesting VPL:

• Subject: ORDER #[ID] - Submit Verified Professional Letter for SSL EV request

• The email explains that the CA could not verify your organization through public sources and requests a VPL.

• Click the orange "Submit Verified Professional Letter" button.

Step B - VPL Upload Form in emSign Portal:

The VPL is an official letter on your organization's letterhead (or from a legal authority) that establishes your organization's identity. It should confirm: Legal name, DBA name (if applicable), Physical address, Contract Signer authority, and Certificate Approver authority.

Organization Name

Auto-filled with your organization's name. Read-only. No action needed. Verify it displays your correct organization name.

Document Source *(required)*

Describes the origin or type of the letter. Enter a brief description of the document source (e.g., "Company Official Letterhead", "Notarized Business Registration Document").

Document (PDF only) *(required)*

The actual VPL file to upload. Platform accepts PDF files only. Click "Choose File", select your VPL PDF file, and confirm the upload. Ensure the file is not password-protected.

Document Description *(required)*

A brief description of what the document contains. Enter a short description (e.g., "Professional letter verifying ABC Inc legal registration and authorized signatories").

Issuer Name *(required)*

Full name of the person who prepared or signed this letter. Enter the full name of the attorney, notary, company officer, or authorized professional who issued the letter.

Issuer Email ID *(required)*

Email address of the person who issued the letter. Enter a valid work email address for the Issuer. The CA validation agent may contact them to verify the letter.

Issuer Contact No. *(required)*

Phone number of the Issuer. Select the country code and enter the full phone number. The CA may call to verify the letter.

• Click "Submit For Verification" to submit the VPL.

Success: "Thank you for submitting the Legal Option Letter for [organization] successfully."

Organization Authentication Code

After the VPL is reviewed, the CA sends an Organization Authentication Code to the email address publicly listed for your organization (from public registries such as WHOIS or business databases).

Two emails are sent simultaneously:

• An email to the publicly listed organizational contact containing the 6-digit Authentication Code.

• An email to the Organization Representative containing a Verification Link to the emSign portal where the code must be entered.

Step C - Entering the Authentication Code:

• Click the link in the Verification Link email.

• On the emSign portal page, enter:

◦ Organization Authentication Code: Enter the 6-digit code received by the public registry contact.

◦ Designation: Enter your job title at the organization (e.g., "IT Manager", "Systems Administrator").

• Click "Submit".

Success: "Thank you for submitting the organization authentication code for [organization] and completing the verification successfully."

⚠ IMPORTANT The authentication code is sent to the publicly listed organizational contact - not necessarily to you. Coordinate internally with whoever receives that email to obtain the code. The code expires in 24 hours. If it expires, use the Resync button next to Action 5 in the portal to trigger a new code. Your Designation must reflect your actual role at the organization.