Prove every email is genuinely from your organization
OV S/MIME: Stop Spoofed Emails From Your Own Addresses
Every message from support@, billing@, or admin@ carries your verified organization name, signed and sealed
Configure & Buy OV S/MIME
1. Select duration
Your organization’s name: verified and signed into every email
OV S/MIME validates your organization’s identity and embeds your verified organization name into every digital signature. SSL.com confirms your organization’s legal registration before issuing the certificate: the same level of business validation used in OV SSL/TLS certificates.
Attackers target functional addresses like support@, billing@, and admin@ because no single named person is watching them. OV S/MIME closes that gap. SSL verifies your organization’s legal registration, then embeds your verified name into the digital signature on every email those addresses send. Customers, suppliers, and partners can confirm in one glance that a message came from your company and wasn’t altered after you sent it.
Why organizations use OV S/MIME
OV S/MIME is the right choice for…
- ✓ Customer-facing functional addresses: support@, info@, service@, help@: where customers need to know the email is genuinely from your company
- ✓ Finance and billing addresses: billing@, accounts@, invoices@: where recipients need certainty before acting on payment instructions
- ✓ HR and legal departments: signing employment contracts, legal notices, and compliance communications
- ✓ Automated and transactional email: system-generated notifications, onboarding emails, and alerts sent from no-reply@ or notifications@
- ✓ Any organizational address where the email represents the company rather than a specific named individual
Is a named individual sending on behalf of the organization? If so, Sponsor S/MIME (IV + OV) validates both the individual’s identity and the organization: providing the maximum level of trust. OV S/MIME is ideal for addresses that aren’t tied to a specific person.
From purchase to organizationally verified email: 4 steps
1
Purchase
Select your OV S/MIME duration and complete your order.
2
Organization validation
SSL.com validates your organization’s legal name and registration using business documentation. Typically 1–3 business days.
3
Certificate issued
Your certificate: with your verified organization name embedded: is generated and delivered. Install it in your email client or mail server.
4
Sign & encrypt
Your email client or server signs every outgoing message with your organization’s verified identity.
Works with the email clients and systems you already use
| Email client | Signing | Encryption | Notes |
|---|---|---|---|
| Microsoft Outlook | ✓ | ✓ | Native S/MIME support: no plugin required |
| Apple Mail | ✓ | ✓ | Native support on macOS and iOS |
| Mozilla Thunderbird | ✓ | ✓ | Native support |
| Google Workspace Gmail | ✓ | ✓ | Requires Google Workspace Business or Enterprise plan |
| Outlook on the Web | ✓ | ✓ | Supported in Microsoft 365 environments |
| Exchange / mail server | ✓ | ✓ | Can be deployed at the mail gateway level for organization-wide signing |
Issued by an audited, compliant CA
CA/B Forum S/MIME Baseline Requirements
OV S/MIME issued under the CA/B Forum S/MIME BR: the global standard for S/MIME certificate issuance
WebTrust for S/MIME BR (BDO)
SSL.com is audited annually by BDO under the WebTrust for S/MIME Baseline Requirements program
Organization identity validation
Legal organization name and registration verified under CA/B Forum S/MIME Baseline Requirements OV procedures prior to certificate issuance: against business registrar records and independent sources.
Frequently asked questions
SSL.com requires proof of your organization’s legal existence, typically a certificate of incorporation, business registration, or equivalent government-issued document. The organization name on the document must match the name you want in the certificate.
OV S/MIME validation typically takes 1–3 business days, depending on documentation completeness and organization type.
Each S/MIME certificate is bound to a single email address. For organizations needing multiple certificates (e.g. all addresses at a domain), SSL.com offers volume pricing and API-based bulk issuance.
OV S/MIME validates only the organization’s name. Sponsor S/MIME (IV + OV) validates both a named individual’s identity and the organization they represent, ideal for executives or key personnel sending on behalf of the company.
Yes, OV S/MIME can be configured at the mail gateway or server level to sign outgoing transactional emails automatically. Contact our team for guidance on server-level deployment.
OV S/MIME signs emails from enrolled addresses, giving recipients a way to verify authenticity. It complements but does not replace DMARC, which prevents domain-level spoofing in email headers.
Ready to prove every email is genuinely from your organization?
OV S/MIME: your verified organization name in every digital signature. Prevent corporate impersonation.
Also in Email Security
Basic S/MIME
Basic S/MIME: personal email privacy without name validation. Entry tier for encryption-only email protection without verified sender identity.
IV S/MIME: Individual Validated
IV S/MIME (Individual Validated), for professionals who want their verified personal name in email signatures. Individual accountability rather than organizational.
Sponsor S/MIME: IV + OV
Sponsor S/MIME (IV + OV), for named individuals acting on behalf of the organization where maximum trust requires both identities bound into one certificate.
