{"id":74136,"date":"2025-07-11T07:00:00","date_gmt":"2025-07-11T14:00:00","guid":{"rendered":"https:\/\/dhblog.dream.press\/blog\/?p=74136"},"modified":"2025-08-29T06:58:58","modified_gmt":"2025-08-29T13:58:58","slug":"ev-ssl-certificates","status":"publish","type":"post","link":"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/","title":{"rendered":"EV SSL Certificates: The Security Equivalent of a Gold Toilet"},"content":{"rendered":"\n<p>If this was 2010, I&#8217;d tell you to buy an Extended Validation (EV) SSL certificate.<\/p>\n\n\n\n<p>Back then, EV certificates turned the address bar green, displayed the company&#8217;s legal name in the URL bar, and showed a visible padlock confirming a site\u2019s authenticity.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"1082\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/01_thawte_ev_ssl_certificate_displayed_in_different_browsers.webp\" alt=\"Screenshot of Thawte EV SSL certificate displayed in different browsers\" class=\"wp-image-74139 lazyload\" data-srcset=\"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/01_thawte_ev_ssl_certificate_displayed_in_different_browsers.webp 1600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/01_thawte_ev_ssl_certificate_displayed_in_different_browsers-300x203.webp 300w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/01_thawte_ev_ssl_certificate_displayed_in_different_browsers-1024x692.webp 1024w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/01_thawte_ev_ssl_certificate_displayed_in_different_browsers-768x519.webp 768w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/01_thawte_ev_ssl_certificate_displayed_in_different_browsers-1536x1039.webp 1536w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/01_thawte_ev_ssl_certificate_displayed_in_different_browsers-600x406.webp 600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/01_thawte_ev_ssl_certificate_displayed_in_different_browsers-1200x812.webp 1200w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/01_thawte_ev_ssl_certificate_displayed_in_different_browsers-730x494.webp 730w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/01_thawte_ev_ssl_certificate_displayed_in_different_browsers-1460x987.webp 1460w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/01_thawte_ev_ssl_certificate_displayed_in_different_browsers-784x530.webp 784w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/01_thawte_ev_ssl_certificate_displayed_in_different_browsers-1568x1060.webp 1568w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/01_thawte_ev_ssl_certificate_displayed_in_different_browsers-877x593.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/1082;\" \/><\/figure>\n\n\n\n<p><strong>But it\u2019s not 2010. And EV SSLs are beyond dead now.<\/strong><\/p>\n\n\n\n<p>Today, paying for an SSL is like buying a gold toilet. Same outcome, a lot more expensive.<\/p>\n\n\n\n<h2 id=\"h-what-ev-certificates-actually-did-and-why-it-mattered\" class=\"wp-block-heading\">What EV Certificates Actually Did (and Why It Mattered)<\/h2>\n\n\n\n<p><strong>The basic Domain Validation (DV) certificates you see today only verify a domain that you control.<\/strong> Anyone can get one of these certificates.<\/p>\n\n\n\n<p><strong>Extended Validation certificates require extensive business verification.<\/strong> Think legal documents, phone calls, address confirmation, and proof your company is real and operating.<\/p>\n\n\n\n<p>The process can take days or weeks and involves human verification at every step.<\/p>\n\n\n\n<p>The end result was your company name displayed in the browser like this example from Comodo (which is a major SSL certificate provider).<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"1258\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/02_comodo_before_and_after.webp\" alt=\"Side-by-side of browser UI before and after EV SSL visual changes \u2014 the company name and green bar are gone, replaced with a plain URL display.\" class=\"wp-image-74140 lazyload\" data-srcset=\"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/02_comodo_before_and_after.webp 1600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/02_comodo_before_and_after-300x236.webp 300w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/02_comodo_before_and_after-1024x805.webp 1024w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/02_comodo_before_and_after-768x604.webp 768w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/02_comodo_before_and_after-1536x1208.webp 1536w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/02_comodo_before_and_after-600x472.webp 600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/02_comodo_before_and_after-1200x944.webp 1200w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/02_comodo_before_and_after-730x574.webp 730w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/02_comodo_before_and_after-1460x1148.webp 1460w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/02_comodo_before_and_after-784x616.webp 784w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/02_comodo_before_and_after-1568x1233.webp 1568w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/02_comodo_before_and_after-877x690.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/1258;\" \/><\/figure>\n\n\n\n<p>But as you see now, even Comodo does not show any markers of an EV SSL.<\/p>\n\n\n\n<div class=\"article-newsletter article-newsletter--gradient\">\n\n\n<h2>Get Content Delivered Straight to Your Inbox<\/h2><p>Subscribe now to receive all the latest updates, delivered directly to your inbox.<\/p><form class=\"nwsl-form\" id=\"newsletter_block_\" novalidate><div class=\"messages\"><\/div><div class=\"form-group\"><label for=\"input_newsletter_block_\"><input type=\"email\"name=\"email\"id=\"input_newsletter_block_\"placeholder=\"Enter your email address\"novalidatedisabled=\"disabled\"\/><\/label><button type=\"submit\"class=\"btn btn--brand\"disabled=\"disabled\"><span>Sign Me Up!<\/span><svg width=\"21\" height=\"14\" viewBox=\"0 0 21 14\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<path d=\"M13.8523 0.42524L12.9323 1.34521C12.7095 1.56801 12.7132 1.9304 12.9404 2.14865L16.7241 5.7823H0.5625C0.251859 5.7823 0 6.03416 0 6.3448V7.6573C0 7.96794 0.251859 8.2198 0.5625 8.2198H16.7241L12.9405 11.8535C12.7132 12.0717 12.7095 12.4341 12.9323 12.6569L13.8523 13.5769C14.072 13.7965 14.4281 13.7965 14.6478 13.5769L20.8259 7.39879C21.0456 7.17913 21.0456 6.82298 20.8259 6.60327L14.6477 0.42524C14.4281 0.205584 14.0719 0.205584 13.8523 0.42524Z\" fill=\"white\"\/>\n<\/svg>\n<\/button><\/div><\/form><\/div>\n\n\n<h2 id=\"h2_what-makes-ev-ssl-certificates-a-bad-choice-now\" class=\"wp-block-heading\">What Makes EV SSL Certificates a Bad Choice Now?<\/h2>\n\n\n\n<p>The main thing that made EV certificates valuable was the visual indicators. And browsers were the driving force behind their removal.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The Shift That Killed EV Certificates<\/h3>\n\n\n\n<p>Sometime after 2015, <a target=\"_blank\" href=\"https:\/\/help.dreamhost.com\/hc\/en-us\/articles\/216041537-SSL-certificates-overview\">SSL certificates<\/a> became the standard for websites.<\/p>\n\n\n\n<p>The padlock icon became more of an expectation than a trust signal.<\/p>\n\n\n\n<p>To eliminate redundancy, Chrome removed the <a target=\"_blank\" href=\"https:\/\/blog.chromium.org\/2018\/05\/evolving-chromes-security-indicators.html\">green color URL bar in 2018<\/a> and replaced the <a target=\"_blank\" href=\"https:\/\/blog.chromium.org\/2023\/05\/an-update-on-lock-icon.html\">padlock icon<\/a> with the tune icon in 2023. Firefox eliminated EV indicators in 2019, and other browsers followed suit.<\/p>\n\n\n\n<p>Any website <em>without<\/em> a valid SSL certificate was marked as \u201cNot Secure.\u201d<\/p>\n\n\n\n<p>People had to click \u201cAdvanced\u201d and \u201cProceed to site anyway (unsafe)\u201d before they could view such a website.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"1292\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/03_your_conneciton_is_not_private.webp\" alt=\"Side-by-side of browser UI before and after EV SSL visual changes \u2014 the company name and green bar are gone, replaced with a plain URL display.\" class=\"wp-image-74138 lazyload\" data-srcset=\"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/03_your_conneciton_is_not_private.webp 1600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/03_your_conneciton_is_not_private-300x242.webp 300w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/03_your_conneciton_is_not_private-1024x827.webp 1024w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/03_your_conneciton_is_not_private-768x620.webp 768w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/03_your_conneciton_is_not_private-1536x1240.webp 1536w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/03_your_conneciton_is_not_private-600x485.webp 600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/03_your_conneciton_is_not_private-1200x969.webp 1200w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/03_your_conneciton_is_not_private-730x589.webp 730w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/03_your_conneciton_is_not_private-1460x1179.webp 1460w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/03_your_conneciton_is_not_private-784x633.webp 784w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/03_your_conneciton_is_not_private-1568x1266.webp 1568w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/03_your_conneciton_is_not_private-877x708.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/1292;\" \/><\/figure>\n\n\n\n<p>With that, the value proposition of EV SSL certificates evaporated. Yet, you still see companies selling them like nothing has changed!<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Browsers Also Found that EV Doesn&#8217;t Help<\/h3>\n\n\n\n<p>The removal of visual cues wasn\u2019t arbitrary. It was backed by research.<\/p>\n\n\n\n<p>The green URL bar would <em>seem<\/em> valuable in the close up screenshots.<\/p>\n\n\n\n<p>But when Google&#8217;s security team studied whether the expensive verification provided real security benefits, they found that <a target=\"_blank\" href=\"https:\/\/chromium.googlesource.com\/chromium\/src\/+\/HEAD\/docs\/security\/ev-to-page-info.md\">&#8220;the EV UI does not protect users as intended<\/a>.\u201d<\/p>\n\n\n\n<p>Users don&#8217;t make different security decisions when EV indicators are present or absent. Mozilla reached <a target=\"_blank\" href=\"https:\/\/soundcloud.com\/tim-callan\/root-causes-1-32-why-do-browsers-and-academic-research-say-different-things-about-ev-ssl\">similar conclusions<\/a> after their own research.<\/p>\n\n\n\n<p>The conclusion? Spending on EV certificates didn&#8217;t translate to better protection from actual threats, like <a target=\"_blank\" href=\"https:\/\/help.dreamhost.com\/hc\/en-us\/articles\/217917097-Fraud-Phishing-and-419-Scams\">phishing<\/a> or malicious websites.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Majority of Users Never See EV Information Anymore<\/h3>\n\n\n\n<p>Once Chrome 77 and Firefox 70 were released somewhere in 2018, the last bit of EV information was hidden away as well.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"1064\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/04_connection_is_secure.webp\" alt=\"Example of a valid SSL certificate in action \u2014 the browser confirms the connection is secure, often shown with a padlock icon.\" class=\"wp-image-74141 lazyload\" data-srcset=\"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/04_connection_is_secure.webp 1600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/04_connection_is_secure-300x200.webp 300w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/04_connection_is_secure-1024x681.webp 1024w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/04_connection_is_secure-768x511.webp 768w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/04_connection_is_secure-1536x1021.webp 1536w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/04_connection_is_secure-600x399.webp 600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/04_connection_is_secure-1200x798.webp 1200w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/04_connection_is_secure-730x485.webp 730w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/04_connection_is_secure-1460x971.webp 1460w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/04_connection_is_secure-784x521.webp 784w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/04_connection_is_secure-1568x1043.webp 1568w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/04_connection_is_secure-877x583.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/1064;\" \/><\/figure>\n\n\n\n<p>The company name, the extended validation status, the verified business information \u2014 everything was put under the tune icon and required users to click to view certificate details.<\/p>\n\n\n\n<p>So, the majority of users would never see the EV details that <em>supposedly<\/em> justified the premium pricing.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">A Certificate\u2019s a Certificate \u2014 All of Them Provide Identical Encryption<\/h3>\n\n\n\n<p>The job of an SSL certificate is to encrypt data traveling from a visitor\u2019s browser to the company server. This ensures that bad actors cannot spy on the data.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"900\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/05_what_is_an_ssl_certificate_.webp\" alt=\"Visual comparison of insecure (HTTP) vs secure (HTTPS) connections \u2014 showing how SSL certificates protect data in transit.\" class=\"wp-image-74142 lazyload\" data-srcset=\"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/05_what_is_an_ssl_certificate_.webp 1600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/05_what_is_an_ssl_certificate_-300x169.webp 300w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/05_what_is_an_ssl_certificate_-1024x576.webp 1024w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/05_what_is_an_ssl_certificate_-768x432.webp 768w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/05_what_is_an_ssl_certificate_-1536x864.webp 1536w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/05_what_is_an_ssl_certificate_-600x338.webp 600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/05_what_is_an_ssl_certificate_-1200x675.webp 1200w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/05_what_is_an_ssl_certificate_-730x411.webp 730w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/05_what_is_an_ssl_certificate_-1460x821.webp 1460w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/05_what_is_an_ssl_certificate_-784x441.webp 784w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/05_what_is_an_ssl_certificate_-1568x882.webp 1568w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/05_what_is_an_ssl_certificate_-877x493.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/900;\" \/><\/figure>\n\n\n\n<p><strong>ANY SSL certificate can encrypt data the same way.<\/strong><\/p>\n\n\n\n<p>The encryption algorithms are identical: RSA-2048 for key exchange, SHA-256 for digital signatures, AES for symmetric encryption.<\/p>\n\n\n\n<p>The browser establishes the exact same secure tunnel regardless of which certificate authority issued the certificate or how much you paid for it.<\/p>\n\n\n\n<p><strong>Whether you&#8217;re using a <\/strong><a target=\"_blank\" href=\"https:\/\/www.dreamhost.com\/features\/ssl-tls-certificates\/\"><strong>free SSL certificate<\/strong><\/a><strong> or a $500 Extended Validation certificate, the actual security protecting your users&#8217; data is exactly the same.<\/strong><\/p>\n\n\n\n<p>With EV certs, you&#8217;re only paying money for the <strong>extra paperwork<\/strong> with <strong>zero additional benefit<\/strong>.<\/p>\n\n\n\n<h2 id=\"h2_whats-a-better-option-in-2025-and-beyond\" class=\"wp-block-heading\">What\u2019s a Better Option in 2025 and Beyond?<\/h2>\n\n\n\n<p>Let&#8217;s Encrypt completely disrupted the SSL market by making certificates free, automated, and just as secure as expensive alternatives. Now, everyone with a domain could get an SSL certificate.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Let&#8217;s Encrypt Dominates the Market for a Reason<\/h3>\n\n\n\n<p>Let&#8217;s Encrypt, the free domain validation certificate provider, <a target=\"_blank\" href=\"https:\/\/w3techs.com\/technologies\/details\/sc-letsencrypt\">controls 63%<\/a> of the entire SSL certificate market. The rest of the market is shared between other DV and EV SSL providers.<\/p>\n\n\n\n<p>The company <a target=\"_blank\" href=\"https:\/\/letsencrypt.org\/2020\/02\/27\/one-billion-certs\/\">issued over a billion certificates by<\/a> 2020.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"1298\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/06_certificates_issued_per_day_by_let_s_encrypt.webp\" alt=\"Steady rise in SSL adoption: This chart highlights the explosive growth in SSL certificates issued daily by Let's Encrypt from 2016 to 2025.\" class=\"wp-image-74143 lazyload\" data-srcset=\"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/06_certificates_issued_per_day_by_let_s_encrypt.webp 1600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/06_certificates_issued_per_day_by_let_s_encrypt-300x243.webp 300w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/06_certificates_issued_per_day_by_let_s_encrypt-1024x831.webp 1024w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/06_certificates_issued_per_day_by_let_s_encrypt-768x623.webp 768w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/06_certificates_issued_per_day_by_let_s_encrypt-1536x1246.webp 1536w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/06_certificates_issued_per_day_by_let_s_encrypt-600x487.webp 600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/06_certificates_issued_per_day_by_let_s_encrypt-1200x974.webp 1200w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/06_certificates_issued_per_day_by_let_s_encrypt-730x592.webp 730w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/06_certificates_issued_per_day_by_let_s_encrypt-1460x1184.webp 1460w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/06_certificates_issued_per_day_by_let_s_encrypt-784x636.webp 784w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/06_certificates_issued_per_day_by_let_s_encrypt-1568x1272.webp 1568w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/06_certificates_issued_per_day_by_let_s_encrypt-877x711.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/1298;\" \/><figcaption class=\"wp-element-caption\"><a href=\"https:\/\/letsencrypt.org\/stats\/\">Source<\/a><\/figcaption><\/figure>\n\n\n\n<p>And now Let\u2019s Encrypt issues <a target=\"_blank\" href=\"https:\/\/letsencrypt.org\/stats\/\">over 7 million new certificates<\/a> per <em>day<\/em>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Automation Is Better Than Manual Processes<\/h3>\n\n\n\n<p>While the SSL industry sold expensive certificates with manual verification processes that took days or weeks, Let&#8217;s Encrypt introduced automation and efficiency.<\/p>\n\n\n\n<p>The ACME protocol allows certificates to be <a target=\"_blank\" href=\"https:\/\/letsencrypt.org\/how-it-works\/\">issued, installed, and renewed without human intervention<\/a>, often in minutes vs. days.<\/p>\n\n\n\n<p>This automation ensured security along with convenience. SSL certifying authorities (CA) could now use shorter lived certificates (for example, 90 days).<\/p>\n\n\n\n<p>Even if an attacker gains access to a CA\u2019s private key (the key that tells a browser it\u2019s a valid certificate<em>), <\/em>it\u2019ll only be valid for 90 days, after which a new key is generated and the previous keys are deemed invalid.<\/p>\n\n\n\n<p>If 90 days sounds like a lot, SSL providers are already taking steps to reduce it further.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Short Lifespans Make Manual Verification Almost Impossible<\/h3>\n\n\n\n<p>The SSL industry is moving toward even shorter certificate validity periods.<\/p>\n\n\n\n<p>The maximum lifespan is expected to be <a target=\"_blank\" href=\"https:\/\/www.ssl.com\/article\/preparing-for-47-day-ssl-tls-certificates\/\">200 days by 2026, 100 days by 2027, and 47 days by 2029<\/a>.<\/p>\n\n\n\n<p>Imagine going through EV&#8217;s manual verification process \u2014 with legal documents, phone calls, and business verification \u2014 every 47 days. The administrative overhead alone would be crushing, making them no longer worth it.<\/p>\n\n\n\n<p>That probably explains why there are <a target=\"_blank\" href=\"https:\/\/trends.builtwith.com\/ssl\/extended-validation\">only 21,000 websites<\/a> with an EV certificate in 2025.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Domain Validation (DV) Certificates Are Usually All You Need<\/h3>\n\n\n\n<p>Domain Validation certificates (whether free or paid) offer several advantages over expensive EV certificates.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Identical encryption:<\/strong> Your users get the same security<\/li>\n\n\n\n<li><strong>Automatic renewal:<\/strong> No risk of expiration outages<\/li>\n\n\n\n<li><strong>Faster deployment:<\/strong> Minutes instead of days or weeks<\/li>\n\n\n\n<li><strong>No administrative overhead:<\/strong> No paperwork, phone calls, or business verification<\/li>\n\n\n\n<li><strong>Future-proof:<\/strong> Designed for the shorter certificate lifespans coming in 2029<\/li>\n<\/ul>\n\n\n\n<p>Free DV SSL certificates like Let\u2019s Encrypt and CloudFlare provide the same level of protection as other certificates. If that\u2019s all you need, go with a free certificate.<\/p>\n\n\n\n<p>For large organizations or e-commerce businesses that need customer support, longer expiry dates, and security seals for building trust, a <a target=\"_blank\" href=\"https:\/\/help.dreamhost.com\/hc\/en-us\/articles\/215089748-Purchase-a-professionally-signed-SSL-certificate\">professionally signed DV SSL certificate<\/a> makes sense.<\/p>\n\n\n\n<h2 id=\"h2_do-big-companies-use-ev-certificates-and-does-anyone-actually-need-them\" class=\"wp-block-heading\">Do Big Companies Use EV Certificates and Does Anyone Actually Need Them?<\/h2>\n\n\n\n<p>If EV certificates were truly necessary for security and trust, you&#8217;d expect the biggest companies to use them.<\/p>\n\n\n\n<p>They don&#8217;t.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Even Amazon, Netflix, and Walmart Use Free Certificates<\/h3>\n\n\n\n<p><a target=\"_blank\" href=\"https:\/\/x.com\/troyhunt\/\">Troy Hunt<\/a>, the creator of <a target=\"_blank\" href=\"https:\/\/haveibeenpwned.com\/\">Have I Been Pwned<\/a> shared a tweet when Chrome first started experimenting with removing the EV indicator from the browser in the first half of 2018.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"1281\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/07_even_amazon_netflix_and_walmart_use_free_certificates.webp\" alt=\"This tweet underscores the decline of EV SSL visibility\u2014Chrome's shift away from showing organization names in the address bar signals a broader move toward simplified, padlock-only indicators.\" class=\"wp-image-74144 lazyload\" data-srcset=\"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/07_even_amazon_netflix_and_walmart_use_free_certificates.webp 1600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/07_even_amazon_netflix_and_walmart_use_free_certificates-300x240.webp 300w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/07_even_amazon_netflix_and_walmart_use_free_certificates-1024x820.webp 1024w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/07_even_amazon_netflix_and_walmart_use_free_certificates-768x615.webp 768w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/07_even_amazon_netflix_and_walmart_use_free_certificates-1536x1230.webp 1536w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/07_even_amazon_netflix_and_walmart_use_free_certificates-600x480.webp 600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/07_even_amazon_netflix_and_walmart_use_free_certificates-1200x961.webp 1200w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/07_even_amazon_netflix_and_walmart_use_free_certificates-730x584.webp 730w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/07_even_amazon_netflix_and_walmart_use_free_certificates-1460x1169.webp 1460w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/07_even_amazon_netflix_and_walmart_use_free_certificates-784x628.webp 784w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/07_even_amazon_netflix_and_walmart_use_free_certificates-1568x1255.webp 1568w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/07_even_amazon_netflix_and_walmart_use_free_certificates-877x702.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/1281;\" \/><figcaption class=\"wp-element-caption\"><a href=\"https:\/\/x.com\/troyhunt\/status\/996259427962404864\">Source<\/a><\/figcaption><\/figure>\n\n\n\n<p>Amazon, Netflix, Walmart, eBay, Target, Best Buy: enterprises with unlimited security budgets, teams of experts, and millions of customers entering sensitive information daily \u2014 they&#8217;re <em>all <\/em>running standard Domain Validation certificates.<\/p>\n\n\n\n<p><em>When Shopify and Amazon process billions in transactions using free SSL certificates, what exactly are EV certificate vendors claiming to protect you from that a free certificate can&#8217;t?<\/em><\/p>\n\n\n\n<p>These companies aren&#8217;t cutting corners on security. They&#8217;re simply using certificates that provide the exact same encryption without the unnecessary documentation overhead and costs.<\/p>\n\n\n\n<h2 id=\"h2_does-it-make-financial-sense-to-pay-for-ev-certificates\" class=\"wp-block-heading\">Does It Make Financial Sense To Pay for EV Certificates?<\/h2>\n\n\n\n<p>The economics of EV certificates don&#8217;t add up when you look at what you&#8217;re actually getting.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">You&#8217;re Paying for Industry Self-Interest<\/h3>\n\n\n\n<p>The <a target=\"_blank\" href=\"https:\/\/cabforum.org\/\">Certificate Authority Browser Forum<\/a> sets industry standards, but it&#8217;s essentially a coalition of certificate providers making rules to sell more expensive certificates.<\/p>\n\n\n\n<p><a target=\"_blank\" href=\"https:\/\/www.reddit.com\/r\/webhosting\/comments\/1krwjw7\/comment\/mtllcgz\/?utm_source=share&amp;utm_medium=web3x&amp;utm_name=web3xcss&amp;utm_term=1&amp;utm_content=share_button\">A redditor who claimed<\/a> to have worked for a certificate authority answered the question: \u201cWhat&#8217;s the point of high-end SSL certificates?\u201d<\/p>\n\n\n\n<p>They stated that there\u2019s no difference between a high-end SSL vs. a regular one. It\u2019s just a way for certifying authorities to sell you more certificates.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"397\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/08_you_re_paying_for_industry_self_interest-1024x397.webp\" alt=\"This Reddit comment highlights a growing skepticism: many view SSL certificates\u2014especially premium ones\u2014as more about profit than protection, with little practical difference in security.\" class=\"wp-image-74145 lazyload\" data-srcset=\"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/08_you_re_paying_for_industry_self_interest-1024x397.webp 1024w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/08_you_re_paying_for_industry_self_interest-300x116.webp 300w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/08_you_re_paying_for_industry_self_interest-768x298.webp 768w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/08_you_re_paying_for_industry_self_interest-1536x596.webp 1536w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/08_you_re_paying_for_industry_self_interest-600x233.webp 600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/08_you_re_paying_for_industry_self_interest-1200x466.webp 1200w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/08_you_re_paying_for_industry_self_interest-730x283.webp 730w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/08_you_re_paying_for_industry_self_interest-1460x567.webp 1460w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/08_you_re_paying_for_industry_self_interest-784x304.webp 784w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/08_you_re_paying_for_industry_self_interest-1568x609.webp 1568w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/08_you_re_paying_for_industry_self_interest-877x340.webp 877w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/08_you_re_paying_for_industry_self_interest.webp 1600w\" data-sizes=\"(max-width: 1024px) 100vw, 1024px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1024px; --smush-placeholder-aspect-ratio: 1024\/397;\" \/><\/figure>\n\n\n\n<p>This creates obvious conflicts of interest when the same companies selling expensive certificates are writing the rules about when expensive certificates are &#8220;necessary.&#8221;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Those Million-Dollar Warranties Are Marketing Gimmicks<\/h3>\n\n\n\n<p>EV certificates come with warranties, usually between $10,000 and $2 million, depending on the certificate type. These warranties <em>supposedly<\/em> protect you if the certificate authority makes mistakes that lead to security breaches.<\/p>\n\n\n\n<p>But according to experts like Troy Hunt, these warranties have been marketing gimmicks all along.<\/p>\n\n\n\n<p>Scott Helme, the founder of <a target=\"_blank\" href=\"https:\/\/report-uri.com\/\">Report URI<\/a>, also mentioned <a target=\"_blank\" href=\"https:\/\/scotthelme.co.uk\/do-ssl-warranties-protect-you-as-much-as-rocks-keep-tigers-away\/\">three scenarios covered by these warranties<\/a>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"723\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/09_three_scenarios_covered_by_warranties.webp\" alt=\"Statement of Scott Helme, the founder of Report URI, regarding certificate warranties\" class=\"wp-image-74146 lazyload\" data-srcset=\"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/09_three_scenarios_covered_by_warranties.webp 1600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/09_three_scenarios_covered_by_warranties-300x136.webp 300w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/09_three_scenarios_covered_by_warranties-1024x463.webp 1024w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/09_three_scenarios_covered_by_warranties-768x347.webp 768w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/09_three_scenarios_covered_by_warranties-1536x694.webp 1536w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/09_three_scenarios_covered_by_warranties-600x271.webp 600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/09_three_scenarios_covered_by_warranties-1200x542.webp 1200w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/09_three_scenarios_covered_by_warranties-730x330.webp 730w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/09_three_scenarios_covered_by_warranties-1460x660.webp 1460w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/09_three_scenarios_covered_by_warranties-784x354.webp 784w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/09_three_scenarios_covered_by_warranties-1568x709.webp 1568w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/09_three_scenarios_covered_by_warranties-877x396.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/723;\" \/><\/figure>\n\n\n\n<p>But none of these scenarios actually lead to you getting a claim. For one, a certificate cannot be issued without valid information, so the first item is immediately disqualified. The second and third are similarly baseless.<\/p>\n\n\n\n<p>I\u2019d recommend reading through <a target=\"_blank\" href=\"https:\/\/scotthelme.co.uk\/do-ssl-warranties-protect-you-as-much-as-rocks-keep-tigers-away\/\">Scott&#8217;s article<\/a> as well as <a target=\"_blank\" href=\"https:\/\/www.troyhunt.com\/extended-validation-certificates-are-dead\/\">Troy\u2019s article<\/a> to get a clearer understanding of why I, too, am calling these marketing gimmicks.<\/p>\n\n\n\n<h2 id=\"h2_do-you-ever-need-an-ev-certificate-then\" class=\"wp-block-heading\">Do You Ever Need an EV Certificate Then?<\/h2>\n\n\n\n<p>Despite everything we\u2019ve talked about above, EV certificates do have <em>some<\/em> use.<\/p>\n\n\n\n<p>Here are a few specific situations where you\u2019d need to fall back on EV certificates.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Financial institutions under strict regulatory requirements:<\/strong> Some compliance frameworks, like PCI DSS or specific banking regulations, mandate EV certificates. If your regulator requires it, you don&#8217;t have a choice.<\/li>\n\n\n\n<li><strong>Legacy IT appliances:<\/strong> Some older systems, particularly enterprise hardware from the early 2000s, don&#8217;t recognize Let&#8217;s Encrypt&#8217;s root certificates. This is increasingly rare as old systems get replaced.<\/li>\n\n\n\n<li><strong>Enterprise policies requiring specific certificate types:<\/strong> Some large corporations have internal policies mandating EV certificates for public-facing sites. This is usually more about corporate risk management than actual security.<\/li>\n\n\n\n<li><strong>Code signing and document signing:<\/strong> Let&#8217;s Encrypt <a target=\"_blank\" href=\"https:\/\/community.letsencrypt.org\/t\/create-document-signing-certificate\/209700\">only issues DV certificates<\/a>. If you&#8217;re signing software downloads or documents, you&#8217;ll need certificates from traditional certificate authorities.<\/li>\n<\/ul>\n\n\n\n<p>For the vast majority of websites like blogs, <a target=\"_blank\" href=\"https:\/\/www.dreamhost.com\/blog\/how-to-build-online-store-become-boss\/\">e-commerce stores<\/a>, SaaS applications, marketing sites, and most business websites, an EV certificate provides no meaningful benefit over free alternatives.<\/p>\n\n\n\n<h2 id=\"h2_should-you-just-get-free-certificates-and-move-on\" class=\"wp-block-heading\">Should You Just Get Free Certificates and Move On?<\/h2>\n\n\n\n<p>In my opinion, the answer is a resounding YES. In fact, for 99% of websites, the answer is yes.<\/p>\n\n\n\n<p>Here&#8217;s why:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The Market Has Already Decided<\/h3>\n\n\n\n<p>Domain Validation certificates make up the majority of the market.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1600\" height=\"1300\" data-src=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/10_global_ssl_usage_distribution_.webp\" alt=\"Pie chart showing most SSL usage comes from default or free options like Let's Encrypt, with paid certs making up a small slice.\" class=\"wp-image-74147 lazyload\" data-srcset=\"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/10_global_ssl_usage_distribution_.webp 1600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/10_global_ssl_usage_distribution_-300x244.webp 300w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/10_global_ssl_usage_distribution_-1024x832.webp 1024w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/10_global_ssl_usage_distribution_-768x624.webp 768w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/10_global_ssl_usage_distribution_-1536x1248.webp 1536w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/10_global_ssl_usage_distribution_-600x488.webp 600w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/10_global_ssl_usage_distribution_-1200x975.webp 1200w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/10_global_ssl_usage_distribution_-730x593.webp 730w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/10_global_ssl_usage_distribution_-1460x1186.webp 1460w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/10_global_ssl_usage_distribution_-784x637.webp 784w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/10_global_ssl_usage_distribution_-1568x1274.webp 1568w, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/10_global_ssl_usage_distribution_-877x713.webp 877w\" data-sizes=\"(max-width: 1600px) 100vw, 1600px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 1600px; --smush-placeholder-aspect-ratio: 1600\/1300;\" \/><\/figure>\n\n\n\n<p>According to BuiltWith, there are over <a target=\"_blank\" href=\"https:\/\/trends.builtwith.com\/ssl\/traffic\/Entire-Internet\">258 million SSL certificates<\/a> on the internet as of June 2025. The majority are free, automated, and provide excellent security.<\/p>\n\n\n\n<p><strong>Note:<\/strong> You will notice SSL By Default has the largest share here. However, Let\u2019s Encrypt also sells SSL By Default certificates. So, even though it\u2019s shown separately, I\u2019d consider them as a single entity.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Invest Your Money in Security That Actually Matters<\/h3>\n\n\n\n<p>The time and money you save can go toward security measures that actually matter: <a target=\"_blank\" href=\"https:\/\/www.dreamhost.com\/\">better hosting<\/a> infrastructure, security monitoring, regular backups, web application firewalls, or penetration testing.<\/p>\n\n\n\n<p>Most hosting providers \u2014 like DreamHost \u2014 now offer <a target=\"_blank\" href=\"https:\/\/www.dreamhost.com\/news\/press-releases\/dreamhost-launches-fully-integrated-support-for-lets-encrypt-project\/\">one-click Let&#8217;s Encrypt integration<\/a>. If yours doesn&#8217;t, it might be time to find a hosting provider that understands it&#8217;s 2025, not 2010.<\/p>\n\n\n\n<h2 id=\"h2_stop-overthinking-it-a-dv-ssl-is-all-you-need\" class=\"wp-block-heading\">Stop Overthinking It, a DV SSL Is All You Need<\/h2>\n\n\n\n<p>Extended Validation certificates are expensive solutions to problems that can <em>mostly<\/em> be solved for free. I\u2019m not referring to the highly regulated industries which need EV SSLs \u2014 for the rest of the world, a DV SSL should suffice.<\/p>\n\n\n\n<p>The encryption is identical, browsers killed the visual indicators, and even the largest companies don&#8217;t use them.<\/p>\n\n\n\n<p><strong>Here&#8217;s what you should actually do:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Log into your hosting control panel<\/li>\n\n\n\n<li>Enable free SSL with one click<\/li>\n\n\n\n<li>You&#8217;re done!<\/li>\n<\/ul>\n\n\n\n<p>Your users get the same encryption that protects Amazon and Shopify.<\/p>\n\n\n\n<p>If your host doesn\u2019t offer a free SSL, you need to move to a <a target=\"_blank\" href=\"https:\/\/www.dreamhost.com\/hosting\/\">hosting provider like DreamHost<\/a> that does!<\/p>\n\n\n\n<p>Save your money for security that actually matters: backups, monitoring, or a <a target=\"_blank\" href=\"https:\/\/www.dreamhost.com\/blog\/web-application-firewall\/\">web application firewall<\/a>.<\/p>\n\n\n\n<p>Those will protect your website far better than paying hundreds annually for premium paperwork.<\/p>\n\n\n\n<p>If you\u2019d rather hand the technicalities over to a professional, we\u2019ve got you covered with our <a target=\"_blank\" href=\"https:\/\/www.dreamhost.com\/pro-services\/management\">professional website management services<\/a>!<\/p>\n\n\n\n\n<div class=\"article-cta-shared article-cta-small article-cta--product\">\n\t<div class=\"tr-img-wrap-outer jsLoading\"><img decoding=\"async\" class=\"js-img-lazy \" src=\"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/themes\/blog2018\/assets\/img\/lazy-loading-transparent.webp\" data-srcset=\"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2024\/03\/product-cta-pro-services-website-management-877x586.webp 1x, https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2024\/03\/product-cta-pro-services-website-management.webp 2x\"  \/><\/div>\n\n\t<a href='https:\/\/www.dreamhost.com\/pro-services\/management\/' class='link-top' target='_blank' rel='noopener noreferrer'>\n\t\t<span>Pro Services &#8211; Website Management<\/span>\n\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 384 512\" width=\"15\"><path d=\"M342.6 233.4c12.5 12.5 12.5 32.8 0 45.3l-192 192c-12.5 12.5-32.8 12.5-45.3 0s-12.5-32.8 0-45.3L274.7 256 105.4 86.6c-12.5-12.5-12.5-32.8 0-45.3s32.8-12.5 45.3 0l192 192z\"\/><\/svg>\n\t<\/a>\n\n\t<div class=\"content-btm\">\n\t\t<h2 class=\"h2--md\">\n\t\t\tWe&#8217;ll Handle the Technical Stuff\n\t\t<\/h2>\n\t\t<p class=\"p--md\">\n\t\t\tBring enterprise-grade performance and reliability to your website. Leave the backend to the experts \u2013 you focus on your business.\n\t\t<\/p>\n\n\t\t        <a\n            href=\"https:\/\/www.dreamhost.com\/pro-services\/management\/\"\n                        class=\"btn btn--white-outline btn--sm btn--round\"\n                                    target=\"_blank\"\n            rel=\"noopener noreferrer\"\n            >\n                            See More                    <\/a>\n\n\t<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>EV SSL certificates promise more trust, but do they really deliver? Here\u2019s what site managers need to know.<\/p>\n","protected":false},"author":2,"featured_media":74137,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_metadesc":"EV SSL certificates promise more trust, but do they really deliver? Here\u2019s what site managers need to know.","toc_headlines":"[[\"h-what-ev-certificates-actually-did-and-why-it-mattered\",\"What EV Certificates Actually Did (and Why It Mattered)\"],[\"h2_what-makes-ev-ssl-certificates-a-bad-choice-now\",\"What Makes EV SSL Certificates a Bad Choice Now?\"],[\"h2_whats-a-better-option-in-2025-and-beyond\",\"What\u2019s a Better Option in 2025 and Beyond?\"],[\"h2_do-big-companies-use-ev-certificates-and-does-anyone-actually-need-them\",\"Do Big Companies Use EV Certificates and Does Anyone Actually Need Them?\"],[\"h2_does-it-make-financial-sense-to-pay-for-ev-certificates\",\"Does It Make Financial Sense To Pay for EV Certificates?\"],[\"h2_do-you-ever-need-an-ev-certificate-then\",\"Do You Ever Need an EV Certificate Then?\"],[\"h2_should-you-just-get-free-certificates-and-move-on\",\"Should You Just Get Free Certificates and Move On?\"],[\"h2_stop-overthinking-it-a-dv-ssl-is-all-you-need\",\"Stop Overthinking It, a DV SSL Is All You Need\"]]","hide_toc":false,"footnotes":""},"categories":[10025],"tags":[],"class_list":["post-74136","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech-talk"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.3 (Yoast SEO v27.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>EV SSL Certificates: The Security Equivalent of a Gold Toilet<\/title>\n<meta name=\"description\" content=\"EV SSL certificates promise more trust, but do they really deliver? Here\u2019s what site managers need to know.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"EV SSL Certificates: Just a Fancy Way To Spend Cash?\" \/>\n<meta property=\"og:description\" content=\"Browsers removed EV SSL&#039;s green bar. You&#039;re paying hundreds for encryption identical to free Let&#039;s Encrypt certificates.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/\" \/>\n<meta property=\"og:site_name\" content=\"DreamHost Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/DreamHost\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-07-11T14:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-29T13:58:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/1220x628_ogimage_ev_ssl_certificates_the_security_equivalent_of_a_gold_toilet.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Dallas Kashuba\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"EV SSL Certificates: Just a Fancy Way To Spend Cash?\" \/>\n<meta name=\"twitter:description\" content=\"Browsers removed EV SSL&#039;s green bar. You&#039;re paying hundreds for encryption identical to free Let&#039;s Encrypt certificates.\" \/>\n<meta name=\"twitter:creator\" content=\"@http:\/\/twitter.com\/dallas\" \/>\n<meta name=\"twitter:site\" content=\"@dreamhost\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Dallas Kashuba\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"EV SSL Certificates: The Security Equivalent of a Gold Toilet","description":"EV SSL certificates promise more trust, but do they really deliver? Here\u2019s what site managers need to know.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/","og_locale":"en_US","og_type":"article","og_title":"EV SSL Certificates: Just a Fancy Way To Spend Cash?","og_description":"Browsers removed EV SSL's green bar. You're paying hundreds for encryption identical to free Let's Encrypt certificates.","og_url":"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/","og_site_name":"DreamHost Blog","article_publisher":"https:\/\/www.facebook.com\/DreamHost\/","article_published_time":"2025-07-11T14:00:00+00:00","article_modified_time":"2025-08-29T13:58:58+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/www.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/1220x628_ogimage_ev_ssl_certificates_the_security_equivalent_of_a_gold_toilet.webp","type":"image\/webp"}],"author":"Dallas Kashuba","twitter_card":"summary_large_image","twitter_title":"EV SSL Certificates: Just a Fancy Way To Spend Cash?","twitter_description":"Browsers removed EV SSL's green bar. You're paying hundreds for encryption identical to free Let's Encrypt certificates.","twitter_creator":"@http:\/\/twitter.com\/dallas","twitter_site":"@dreamhost","twitter_misc":{"Written by":"Dallas Kashuba","Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/#article","isPartOf":{"@id":"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/"},"author":{"name":"Dallas Kashuba","@id":"https:\/\/www-dev.dreamhost.com\/blog\/#\/schema\/person\/f6a12ad459538e8e418cf31b8b603814"},"headline":"EV SSL Certificates: The Security Equivalent of a Gold Toilet","datePublished":"2025-07-11T14:00:00+00:00","dateModified":"2025-08-29T13:58:58+00:00","mainEntityOfPage":{"@id":"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/"},"wordCount":2001,"publisher":{"@id":"https:\/\/www-dev.dreamhost.com\/blog\/#organization"},"image":{"@id":"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/#primaryimage"},"thumbnailUrl":"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/1460x1095_blog_hero_ev_ssl_certificates_the_security_equivalent_of_a_gold_toilet.webp","articleSection":["Tech Talk"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/","url":"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/","name":"EV SSL Certificates: The Security Equivalent of a Gold Toilet","isPartOf":{"@id":"https:\/\/www-dev.dreamhost.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/#primaryimage"},"image":{"@id":"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/#primaryimage"},"thumbnailUrl":"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/1460x1095_blog_hero_ev_ssl_certificates_the_security_equivalent_of_a_gold_toilet.webp","datePublished":"2025-07-11T14:00:00+00:00","dateModified":"2025-08-29T13:58:58+00:00","description":"EV SSL certificates promise more trust, but do they really deliver? Here\u2019s what site managers need to know.","breadcrumb":{"@id":"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/#primaryimage","url":"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/1460x1095_blog_hero_ev_ssl_certificates_the_security_equivalent_of_a_gold_toilet.webp","contentUrl":"https:\/\/www-dev.dreamhost.com\/blog\/wp-content\/uploads\/2025\/07\/1460x1095_blog_hero_ev_ssl_certificates_the_security_equivalent_of_a_gold_toilet.webp","width":1460,"height":1095,"caption":"EV SSL Certificates: The Security Equivalent of a Gold Toilet"},{"@type":"BreadcrumbList","@id":"https:\/\/www-dev.dreamhost.com\/blog\/ev-ssl-certificates\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/dhblog.dream.press\/blog\/"},{"@type":"ListItem","position":2,"name":"EV SSL Certificates: The Security Equivalent of a Gold Toilet"}]},{"@type":"WebSite","@id":"https:\/\/www-dev.dreamhost.com\/blog\/#website","url":"https:\/\/www-dev.dreamhost.com\/blog\/","name":"DreamHost Blog","description":"","publisher":{"@id":"https:\/\/www-dev.dreamhost.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www-dev.dreamhost.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www-dev.dreamhost.com\/blog\/#organization","name":"DreamHost","url":"https:\/\/www-dev.dreamhost.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www-dev.dreamhost.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/dhblog.dream.press\/blog\/wp-content\/uploads\/2019\/01\/dh_logo-blue-2.png","contentUrl":"https:\/\/dhblog.dream.press\/blog\/wp-content\/uploads\/2019\/01\/dh_logo-blue-2.png","width":1200,"height":168,"caption":"DreamHost"},"image":{"@id":"https:\/\/www-dev.dreamhost.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/DreamHost\/","https:\/\/x.com\/dreamhost","https:\/\/www.instagram.com\/dreamhost\/","https:\/\/www.linkedin.com\/company\/dreamhost\/","https:\/\/www.youtube.com\/user\/dreamhostusa"]},{"@type":"Person","@id":"https:\/\/www-dev.dreamhost.com\/blog\/#\/schema\/person\/f6a12ad459538e8e418cf31b8b603814","name":"Dallas Kashuba","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/05ab6fb1606be97d16c74efb0fba01b3c11e91501dc5f9661bdfbb5c5b0cd113?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/05ab6fb1606be97d16c74efb0fba01b3c11e91501dc5f9661bdfbb5c5b0cd113?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/05ab6fb1606be97d16c74efb0fba01b3c11e91501dc5f9661bdfbb5c5b0cd113?s=96&d=mm&r=g","caption":"Dallas Kashuba"},"sameAs":["http:\/\/www.idallas.com\/","https:\/\/x.com\/http:\/\/twitter.com\/dallas"],"url":"https:\/\/www-dev.dreamhost.com\/blog\/author\/dallas\/"}]}},"lang":"en","translations":{"en":74136,"fr":75116,"nl":75113,"ru":75049,"pt":75043,"es":74156,"uk":74950,"de":75026,"pl":75034,"it":75077},"pll_sync_post":[],"_links":{"self":[{"href":"https:\/\/www-dev.dreamhost.com\/blog\/wp-json\/wp\/v2\/posts\/74136","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www-dev.dreamhost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www-dev.dreamhost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www-dev.dreamhost.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www-dev.dreamhost.com\/blog\/wp-json\/wp\/v2\/comments?post=74136"}],"version-history":[{"count":6,"href":"https:\/\/www-dev.dreamhost.com\/blog\/wp-json\/wp\/v2\/posts\/74136\/revisions"}],"predecessor-version":[{"id":74175,"href":"https:\/\/www-dev.dreamhost.com\/blog\/wp-json\/wp\/v2\/posts\/74136\/revisions\/74175"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www-dev.dreamhost.com\/blog\/wp-json\/wp\/v2\/media\/74137"}],"wp:attachment":[{"href":"https:\/\/www-dev.dreamhost.com\/blog\/wp-json\/wp\/v2\/media?parent=74136"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www-dev.dreamhost.com\/blog\/wp-json\/wp\/v2\/categories?post=74136"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www-dev.dreamhost.com\/blog\/wp-json\/wp\/v2\/tags?post=74136"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}