The main requirement is the following: do not use your site for activities that may turn out to be illegal. If there are suspicions of phishing or other fraudulent actions, the certification authority will refuse to issue an SSL certificate.