Answer the question
In order to leave comments, you need to log in
Get information about the owner of an SSL certificate?
I am currently registering an SSL DV certificate. I am an individual entrepreneur, registered at the place of residence. The foreign company-registrar requested Tax ID, legal address and company name.
Please tell me, is it necessary to indicate the real address at which I am registered and live? And will the site visitor be able to find out my address of residence in some way through an SSL certificate? For example, through a request to the registrar company (I really would not like this - I work with a very famous person who has many fans and haters). And what should I write in Tax ID if I am not a resident of the European Union?
It is written that the DV certificate does not imply verification of documents and I do not understand why they need this data, especially the tax id.
And I'm also wondering if the whois of the domain says Private person, how will the authority issuing certificates check that I am the owner of the domain?
I asked a question to technical support, but everything is very slow there + they write that the information must be indicated as complete and real as possible.
Answer the question
In order to leave comments, you need to log in
It is better to give real data. Upon further verification, they may request, for example, a scan of a passport, a scan of an apartment bill with your data. They can send a regular paper letter with a code to the specified postal address. The domain owner can be checked very simply - they will be asked to add a service TXT record with the sent code to the DNS or place the sent file in the root of the site.
TaxID - TIN, you can send a scan of the certificate of issue.
The site visitor will not be able to find out anything special from the certificate, as a rule, only the domain, email, certificate owner and certification authority are indicated there.
For DV, really, except for confirmation of ownership of the domain, nothing is usually required.
Some free startssl didn't work with something?
The certificate is often issued automatically after domain confirmation.
Maybe you have chosen a way to confirm ownership of a domain other than email like [email protected] ?
If you have chosen confirmation via whois, you will be asked to open whois in addition to documents.
DV - Domain validate, obtained for free using a script from Let's encrypt. Why do you get it from someone left and still give away your data?
For certificates at the DV verification level (at the domain level), they somehow ask you a lot.
When requesting a certificate with a DV level, it is enough to pass confirmation in a letter from the Certification Center.
The data that is requested from you is usually requested during the verification at the OV / EV level (verification of the organization).
Here it is important to indicate real data, otherwise you will not pass the test.
At the same time, personal data is not published anywhere.
I wonder what kind of certificate provider you have?
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question