I fundamentally think this is not a solvable problem using certs. Short of calling up the company directly and asking no amount of signaling in the browser will help.

Also why do I care about an EV cert as a user? does it tell me anything actually useful? Things I do care about as a user:

* Is my connection encrypted? (Browsers tell me this just fine)

* Is the site known to be malicious? (Browsers tell me this just fine)

* Have I been MiTM'd (Browsers protect against this just fine)

Things I don't care about as a user:

* Is this site actually owned by a specific Corporation?

Literally have never cared. Not once. Knowing this has never made me more secure or given me more confidence because fundamentally knowing who someone on the internet is does not tell me how trustworthy they are without way more context.