Latest news on SSL/TLS, certificate security and industry updates.
Your choice of Certificate Authority impacts browser compatibility and infrastructure resilience. Learn about root certificate lifecycles, cross-signing, and why relying on a single CA is a critical vulnerability.
Read more
The SSL industry faces three major technical changes in 2026, mandated by the CA/Browser Forum. Read about the reduction to 47 days, new rules for Code Signing, and the removal of Client Auth.
Read more
DNS CAA records (RFC 8659) give you control over which CAs may issue certificates for your domain. Learn how to set them up correctly.
Read more
Since June 2023, all Code Signing certificates require physical key protection. Compare USB tokens with cloud HSM solutions like Azure Key Vault.
Read more
Wildcard and SAN (Multi-Domain) certificates both cover multiple hostnames, but differently. Learn the security implications and when to choose which.
Read more
Google Chrome is dropping trust in Entrust certificates. From 11 November 2024, Chrome will no longer trust TLS certificates issued by Entrust.
Read more
From 1 June 2023, all CAs require physical key security for issuing Code Signing OV certificates.
Read more
GlobalSign has revoked multiple certificates due to a technical error in their intermediate CAs.
Read more
Browsers are forcing CAs to reduce all SSL certificates to under 398 days.
Read more
Secure Sockets Layer, or SSL, is essentially dead. Most people just have not noticed that we switched to Transport Layer Security, or TLS.
Read more
SSL/TLS certificates provide both identity verification and encryption online. Here is a quick guide to how it all works.
Read more
Google Chrome is strangling Symantec's CA business as a symbolic sacrifice. Here is the full story of what happened.
Read more
The CAB Forum has voted to limit new certificates to 2 years and 3 months, or 825 days.
Read moreCreate a free account and issue your first certificate in under 10 minutes.
