Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Some websites show the company name next to the URL (in Chrome) and some don't.

How do I set this up for my website? Is there a reason why or why I wouldn't want to do this?

enter image description here enter image description here enter image description here

share|improve this question
1  
The acls.net certificate will also contain the name of the company if you look in the subject field of the certificate. It's just a commercial trick to not show it in the address bar with the green background. Extended validation validates nothing more than the websites abilities to pay money to those greedy certificate authorities. –  billc.cn Mar 14 '13 at 1:00

2 Answers 2

up vote 49 down vote accepted

This is only for websites that use Extended Validation SSL encryption. The name is the name the certificate is issued to. It is a security feature put in place to verify that the website is actually served by the company it claims to be from. Simply put, it works like this:

  • Company X decides it wants to secure (e.g. by encryption) communications with the website and the one who requests it.
  • Company X asks a trusted third party to verify the owner and to issue a digital certificate.
  • The third party checks the applicant and then issues a certificate, vouching for the identity of the website. So you know Github is actually Github, and not some malicious website.
  • Your browser sees that Company X uses EV SSL-encryption and queries the certificate. This shows to be issued by a trusted third party to Company X. Your browser then displays the name of the company the certificate was issued to. If it is the same, it will turn green (like in your screen shot) if it does not, the browser will warn you that the website might not be the website it says to be and turn red.

You need a couple of things to set this up, most notably:

  • An EV SSL certificate (Like from Godaddy, but there are many more issuers out there. Google this for yourself.)
  • A host that supports the use of SSL (inquire with your host on how to set this up for your domain)

Certificates generally don't come cheap, and it is really a matter of whether you really need it. Admittedly, it looks cool, but it might be unnecessary for you.

You can find more detailed information about this on other sources, like its Wikipedia page.

share|improve this answer
    
What, exactly, does the browser check? I thought all it checked was that the certificate presented was issued by a trusted CA, and that it matches the URL you typed in. I thought the company name was so that the user could check that it's who they expect. –  cpast Mar 13 '13 at 22:32
2  
@cpast It does match the domain to the domain on the certificate. However, because the certificate is approved, the name on the certificate will also be ok. The company name is purely informative for the user. However, since the OP doesn't seem to have extensive knowledge about certificates, I quite simplified the process description to be more descriptive than technical. –  BloodPhilia Mar 13 '13 at 22:37
    
It checks user credentials/after installing certificates and matches it with servers in mutual handshake. TO justify the user authenticity/ as well as on client side justify the server authenticity. For Example: change date and time to older in your PC and try yo log in to gmail, or Gtalk. you will see what happens :) –  MarmiK Mar 14 '13 at 5:13
    
Great, thank you. Just for reference, normal SSL is $70/yr with GoDaddy and EV SSL is $100/yr. I'm sure other options are cheaper. The extra branding alone makes this valuable for my business. –  Full Decent Mar 15 '13 at 15:39
    
@FullDecent You're very welcome! –  BloodPhilia Mar 15 '13 at 15:54

That's a result of using an Extended Validation certificate - extended validation, or EV certificates require additional validation before the certificate is issued. The idea is that there is better proof that the company really is applying for the certificate, so you should be able to have some more confidence that you really are talking to who you think you are.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.