Connection security is only the beginning.
The SSL lock tells a person or agent that the connection is encrypted. With basic domain-validated SSL, it says nothing about the legal business behind the website. Organization identity adds another layer: evidence of who you are dealing with.
SSL only
SECURE CONNECTIONEncrypts the connection and confirms control of the domain. The business behind it remains unidentified.
OV
VERIFIED ORGANIZATIONOrganization Validation adds a checked business name to your SSL certificate.
EV
EXTENDED VALIDATIONExtended Validation adds more extensive checks of the organization, its legal existence, and the applicant’s authority.
QWAC
QUALIFIED IDENTITYIdentity proof from a government-supervised qualified trust service provider, recognized through the EU’s trusted lists.
| Certificate | What is verified? | Who checks it? |
|---|---|---|
| SSL only (DV) | Control of the domain. | A certificate authority. |
| OV | Domain control and organization details. | A certificate authority following organization validation requirements. |
| EV | Domain control, legal and operational existence, and applicant authority through extended checks. | A certificate authority following extended validation requirements. |
| QWAC | Website identity under the EU’s qualified trust framework. | A government-supervised qualified trust service provider listed for qualified website certificates. |
QWAC: the gold standard for qualified website identity
A QWAC is identity proof backed by a regulated verification body. Qualified providers receive their status through national supervision and are published on official EU trusted lists. This gives website identity an accountability framework beyond ordinary organization validation.
Separate identity from SSL—or combine them
OV and EV certificates combine organization information with connection security. QWACs also have a separate identity form: keep your existing SSL certificate and add qualified identity alongside it. That lets each renew independently.
Where does EV fit?
EV is a strong choice for verified business identity when your issuer cannot offer a QWAC for your organization. It provides extended validation; a QWAC adds EU-qualified status. We confirm your country and issuer’s requirements and ask for your agreement before using EV instead.
Find your hosting guide or explore qualified identity for SEO and AEO.
Read more: EU trusted lists · Extended validation requirements.
Ready to add your website’s identity? Get started.