Welcome to WebmasterWorld Guest from 3.93.74.227

Forum Moderators: phranque

Message Too Old, No Replies

Organization missing from SSL cert

     
8:18 pm on Nov 13, 2015 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Dec 5, 2002
posts: 1864
votes: 5


I'm sure that I entered my company name for the Organization when generating the CSR for the SSL cert I just renewed and installed, but I get this in my browser:

Organization (O)<Not Part Of Certificate>

How can I track down the problem?
12:11 am on Nov 14, 2015 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month

joined:Sept 25, 2005
posts:2091
votes: 370


Did you buy a certificate with organization or extended validation? The data you enter when generating a CSR is not verified when you buy a "basic" domain validation certificate (except domain ownership, of course), so they're not included in/published with the certificate.
4:05 pm on Dec 2, 2015 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Dec 5, 2002
posts: 1864
votes: 5


Got it, thank you. When you say "organization or extended validation", are they the same thing?
4:27 pm on Dec 2, 2015 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member andy_langton is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Jan 27, 2003
posts:3332
votes: 140


EV certificates (where you get the extended green bar) include ownership information. "Standard" certificates do not. I imagine you're using Firefox, which displays a slightly confusing message when you view the certificate information. See [bugzilla.mozilla.org...] for complaints ;)

But, there's no problem with your certificate.
7:48 pm on Dec 2, 2015 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month

joined:Sept 25, 2005
posts:2091
votes: 370


No, they're not the same. Extended Validation is a bit more thorough than Organization Validation, in terms of the amount of information verified by the certificate authority, and consequently also more expensive.
1:22 pm on Dec 3, 2015 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Dec 5, 2002
posts: 1864
votes: 5


How does Organization Validation make itself known in the browser? Is it worthwhile for an online retail site?
12:28 am on Dec 15, 2015 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Dec 5, 2002
posts: 1864
votes: 5


Does anyone know?
9:06 am on Dec 15, 2015 (gmt 0)

Administrator from JP 

WebmasterWorld Administrator bill is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Oct 12, 2000
posts:15181
votes: 180


The certificates are essentially the same. They encrypt the same way, but you're going to get the green bar/green padlock from an EV cert. That signal to the users is really all you're paying for...plus maybe some 'insurance'. It's more pronounced in some browsers, but you aren't really improving your encryption with an EV.

I've got Organization Validation certs on some servers, but they're not selling anything and aren't meant for consumers. If I were collecting customer information on a site I might splurge for the EV cert just for the added perception of security.

To find the Organization name on Firefox or Chrome I have to dig through a number of menus to find the Organization name. As mentioned above, I had to add that in when generating the CSR. The info is in there, but it's not up front. Someone would really have to look to find that info in the cert.
2:50 pm on Dec 17, 2015 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Dec 5, 2002
posts: 1864
votes: 5


Thanks Bill.