I had the following idea about automating verification and issuance of OV SSL certificates: Couldn't a CA in theory use the D&B API to check the company name, address and phone number and then place an automatic call? That's basically what most CAs do anyways so is there any reason why they couldn't do it? That would also be a way for Let's Encrypt to issue OV certificates and code signing certificates.