Proving Your Organization's Identity to a CA

When you request a certificate from a CA, you'll need to somehow prove that your organization has the right to conduct business using your organization's name. CAs are very specific about what types of proof they will accept.

In some cases, copies of the documents described will need to be mailed or faxed to the CA, and your certificate will not be issued until the documents have been received and verified by the CA.

Proving Your Organization's Identity to VeriSign

The easiest way to prove to VeriSign that your organization has the right to do business is to provide your Dun & Bradstreet (D-U-N-S) number. If you don't have a D-U-N-S number, you can request one from the Dun & Bradstreet website at http://www.dnb.com/dunsno/whereduns.htm.

If you don't know whether you have a D-U-N-S number, you can find out if you have one from VeriSign at https://digitalid.verisign.com/dnb_query.htm.

If you don't want to use a D-U-N-S number and the certificate is for a business, you can also fax a copy of any one of the following documents to VeriSign instead:

Articles of Incorporation or Certificate of Incorporation
Valid Business License
Fictitious Business Name Statement or Doing Business As Papers
Official Filing with the Security & Exchange Commission

If you need more information on what your organization can provide VeriSign to prove your right to conduct business under your own name, see VeriSign's website at http://www.verisign.com. You should check VeriSign's website in any case, just to make sure that these requirements haven't changed since this document was produced.

Proving Your Organization's Identity to Thawte

Thawte requires both of the following to prove your organization's identity:

Proof of Organizational Name
Proof of the Right to a Domain Name

"Proof of Organizational Name" means that you have to prove your right to use your company's or organization's name. This proof may consist of a copy of your official company's registration documents or a copy of your certificate of incorporation in your state or country. A number of other documents can also be used to prove your organizational name; see http://www.thawte.com/certs/server/right_name.php3 for many more examples.

"Proof of the Right to a Domain Name" is unnecessary if your domain is registered exactly to the company name included in your certificate request (which you haven't created yet). In most cases, this will be the case. Do a whois on your domain to see your domain's registration information. See http://www.thawte.com/certs/server/right_domain.php3 for more information on how you might prove your right to a domain name, if your certificate request will not exactly match the information returned by a whois on your domain.