Which type of certificate requires more rigorous checks on the subject's legal identity and control over the domain?

The type of certificate that requires more rigorous checks on the subject's legal identity and control over the domain is the Extended Validation (EV) certificate. EV certificates are designed to give users a higher degree of assurance about the identity of the website operator. These certificates undergo strict vetting processes to confirm that the business or organization requesting the certificate is legally registered and has the right to operate under the name associated with the certificate.

The process involves verifying the legal, physical, and operational existence of the organization, as well as confirming that the individual requesting the certificate is authorized to represent the company. This thorough validation process helps to enhance trust among users, as the presence of an EV certificate in the browser's address bar, often accompanied by a green indicator or the organization's name, signals that it has met the stringent requirements set forth by Certificate Authorities.

In contrast, other types of certificates, such as Domain Validation (DV) certificates, only confirm that the applicant has control over the domain, while general-purpose certificates can vary in validation rigor, but do not necessarily involve the same level of identity verification as EV certificates. Wildcard certificates, while useful for securing multiple subdomains, focus on domain control rather than the identity of the organization. Hence, the Extended Validation certificate stands