# DV vs OV vs EV SSL: which validation level do you need?

> DV, OV and EV certificates encrypt the same way and show the same padlock. They differ in what the CA checks, how long issuance takes and what they cost.

Source: https://ssl.sh/compare/dv-vs-ov-vs-ev/
Last updated: 2026-11-10

Pick **DV** for almost every website: it encrypts exactly as well as OV and EV, is free through ACME or costs from $11.00 a year, and shows the same padlock. Pick OV when a policy, tender or partner requires your organization's name in the certificate, and EV only when a bank, payment partner or regulator explicitly asks for it.

## What each level checks

The levels differ only in what the CA verifies before issuing, as defined by the CA/Browser Forum:

| | DV | OV | EV |
|---|---|---|---|
| What the CA checks | Control of the domain (DNS record, HTTP file or email) | Domain control + the organization exists and you represent it | OV checks + stricter rules from the EV Guidelines |
| Identity in the certificate | Domain names only | Organization name, city, country | OV fields + registration number, jurisdiction, business category |
| Typical issuance | Minutes | 1–3 business days | 1–5 business days, sometimes longer |
| Wildcard possible | Yes | Yes | No |
| Free option | Yes (ACME) | No | No |
| Cheapest verified 1-year price | [$11.00](https://ssl.sh/certificates/namecheap-standard-ssl/) | [$32.80](https://ssl.sh/certificates/instantssl/) | [$76.99](https://ssl.sh/certificates/namecheap-ev-ssl/) |

Prices were checked on sellers' sites on 10 November 2026; see the [full comparison](/certificates/).

## What visitors see

Visitors see the same thing for all three. Chrome 77 moved the EV company name out of the address bar into the Page Info panel in 2019, and Firefox 70 did the same. Today the organization name in an OV or EV certificate is visible only to someone who opens the certificate viewer, so do not buy OV or EV expecting more trust at checkout.

## When OV is worth it

OV is worth it when someone outside your team checks the certificate subject: procurement checklists, government or enterprise tenders, B2B integrations that pin to an organization name, or an internal policy that bans DV. OV is cheap if you shop around ([Sectigo InstantSSL](https://ssl.sh/certificates/instantssl/) was $32.80 and [Namecheap High Assurance SSL](https://ssl.sh/certificates/namecheap-high-assurance-ssl/) $35.99 for the first year), but it needs paperwork and is harder to automate than DV.

## When EV is worth it

EV is worth it only when it is a written requirement. It cannot be a wildcard, takes the longest to issue, and costs from $76.99 to over $900 a year for the same encryption. Read [is EV SSL worth it?](https://ssl.sh/compare/is-ev-ssl-worth-it/) for the full argument.

## Validity is the same for all three

Since 15 March 2026 every publicly trusted TLS certificate, whether DV, OV or EV, is valid for at most 200 days, falling to 100 days in March 2027 and 47 days in March 2029. Organization checks for OV and EV can be reused for longer than domain checks, but every certificate still has to be reissued and installed several times a year, so automation matters at every level.