At what point do I need an extended-validation SSL certificates (EV) rather than the less expensive domain-validated SSL certificate?
When should I go for extended-validation SSL?
https;security certificate
I think the (EV) is mostly snake oil.  Most users wouldn't know what the green bar in their browser is really indicating compared to the standard SSL Certificates issued by a CA under the EV guidelines are not structurally different from other certificates (and hence provide no stronger cryptography than other, cheaper certificates)sourcetherefore there is no increase in security.  The only (relevant) advantage is you have an authority that recognizes that your domain name matches the company name.  This could be important in (assuming user knowledge):The company has a lot of imitators and the company needs to distinguish themselves as the official site.The domain was purchased and you need to convey to users that you are indeed the company that you say you are.Your site is one that must convey the illusion of security.  For example some investing sites might insist that you get the gold standard of SSL.Company details is in question and your users need to know this.  If a company is changed around too much (ie company changed addresses with informing the authority) it might trigger a pull back from the authority as per page 16 of this document.