I'm sure that I entered my company name for the Organization when generating the CSR for the SSL cert I just renewed and installed, but I get this in my browser:
Organization (O)<Not Part Of Certificate>
How can I track down the problem?
robzilla
12:11 am on Nov 14, 2015 (gmt 0)
Did you buy a certificate with organization or extended validation? The data you enter when generating a CSR is not verified when you buy a "basic" domain validation certificate (except domain ownership, of course), so they're not included in/published with the certificate.
Tonearm
4:05 pm on Dec 2, 2015 (gmt 0)
Got it, thank you. When you say "organization or extended validation", are they the same thing?
Andy Langton
4:27 pm on Dec 2, 2015 (gmt 0)
EV certificates (where you get the extended green bar) include ownership information. "Standard" certificates do not. I imagine you're using Firefox, which displays a slightly confusing message when you view the certificate information. See [bugzilla.mozilla.org...] for complaints ;)
But, there's no problem with your certificate.
robzilla
7:48 pm on Dec 2, 2015 (gmt 0)
No, they're not the same. Extended Validation is a bit more thorough than Organization Validation, in terms of the amount of information verified by the certificate authority, and consequently also more expensive.
Tonearm
1:22 pm on Dec 3, 2015 (gmt 0)
How does Organization Validation make itself known in the browser? Is it worthwhile for an online retail site?
Tonearm
12:28 am on Dec 15, 2015 (gmt 0)
Does anyone know?
bill
9:06 am on Dec 15, 2015 (gmt 0)
The certificates are essentially the same. They encrypt the same way, but you're going to get the green bar/green padlock from an EV cert. That signal to the users is really all you're paying for...plus maybe some 'insurance'. It's more pronounced in some browsers, but you aren't really improving your encryption with an EV.
I've got Organization Validation certs on some servers, but they're not selling anything and aren't meant for consumers. If I were collecting customer information on a site I might splurge for the EV cert just for the added perception of security.
To find the Organization name on Firefox or Chrome I have to dig through a number of menus to find the Organization name. As mentioned above, I had to add that in when generating the CSR. The info is in there, but it's not up front. Someone would really have to look to find that info in the cert.
