How does the validation of a Premium certificate at EuropeanSSL work (organization validation)?

The Certificate Signing Request, or CSR for short, contains important information such as the host name to be protected or the key length and is normally generated directly on your server together with the PrivateKey. You need the CSR to initiate the order on our website and the PrivateKey to install the certificate on your web server after it has been issued. Never pass the PrivateKey on to third parties, as this could otherwise represent a security risk for visitors to your website. If you are unable to generate the CSR yourself, you can also use the CSR generator on our website.

You can easily and conveniently place the order on our website. In doing so, specify the CSR generated previously and select the desired validation method. You can choose between three methods for validating a domain-validated certificate:

• Validation by e-mail

  ---

  An e-mail will be sent to one of the following prefixes, which contains a link to confirm the validation. The following prefixes can be used:
  • admin@
  • administrator@
  • hostmaster@
  • postmaster@
  • webmaster@
• Validation via DNS

  ---

  With this method, a specific CNAME entry must be created in the DNS settings of the domain, which will then be used to validate your domain. You will receive this information from us by e-mail.
• Validation by file upload
  

  ---

  For this method, a file must be placed on your web space and be accessible in the browser. You will receive the path and the file from us by e-mail following your order.

After placing your order, you will receive an order confirmation and an e-mail with instructions on how to confirm your domain ownership.

In addition to domain validation, the ordering organization is also validated when ordering a EuropeanSSL Premium Certificate. This is done on the basis of the following documents and information:

Validation of documents

Please send one of the following documents for manual validation of your order to EuropeanSSL:

1. Companies / Organizations:

• Business Registration oder Trade Register Excerpt
• Trade Licence

2. Private person:

• ID Card or Passport
• Drivers Licence

Please note: The contact details and information mentioned in your drivers licence or business registration needs to be identical to the data you placed in your order and which you setup in the WHOIS of the domain name. In case the data is not identical, additional documents will be necessary, which are:

• company agreement (with address)
• officially certified business license (with adress)
• a copy of the company's latest bank statement (the account number may be redacted)
• a copy of the latest phone bill
• a copy of the company's latest gas, water, electric bill or a current lease/rental agreement

Phone Validation

For the telephone validation we need the following information from you:

• First and last name of the contact person for telephone validation
• The E-Mail Address
• The Phone Number for Telephone Validation
• Link URL to the company´s entry in one of the public online telephone Register pages:

Global - https://www.dandb.com/
Global - https://www.hoovers.com/
German / Global - https://www.upik.de
Austria Only - https://www.herold.at
German / Austria - https://www.unternehmensverzeichnis.org
Europe - https://www.bisnode.com/
Spain - https://empresas.informa.es/
Europe - https://www.bvdinfo.com/en-gb/home
Europe - https://www.creditsafe.nl
Germany Business credit and commercial information only - https://www.firmenwissen.de/index.html
France only - https://www.aef.cci.fr/
UK Only - https://www.duedil.com
Sweden - https://www.allabolag.se
Japan - https://cnet.tdb.ne.jp/cnet/ta111p01/ta111pInit.do
Greek - https://cnet.tdb.ne.jp/cnet/ta111p01/ta111pInit.do
Russian - https://www.spark-interfax.ru/promo/en/sources

As part of the telephone validation, the contact person receives an e-mail from us with the subject "EuropeanSSL Callback Request". This e-mail contains a link and an "email verification code". This will trigger an automated callback. In the telephone call, a "callback verification code" is then specified, which must be entered on the prevoiusly mentioned website. Once these steps have been completed, the certificate will be issued.

Please send all documents, forms and other information over FAX, postal Service or email to:

EuropeanSSL
c/o EUNETIC GmbH
Draisstraße 1
DE-76448 Durmersheim
Fax: +49 7245 919 585
E-Mail: docs@europeanssl.eu

After confirmation of the domain ownership and the data of your organization, the certificate will be issued and sent to the e-mail address stored in your account. The message contains a zip file containing the actual certificate (.crt) as well as all required root and intermediates (.ca).