SSL Certificates
199 days now, 99 days by 15 March 2027
Full product catalogue with filtering by CA, validation type and certificate type. Compare and buy directly.
Latest news on SSL/TLS, certificate security and industry updates.
CAs are replacing their root certificates because the old root keys are getting too old, and the new roots may only be used for web servers. The dates, what a cross-signed certificate does, why Windows Server needs extra work, and what FairSSL does about it.
Read more
CA/Browser Forum has decided to remove Client Authentication from public SSL certificates. This affects VPN, mTLS and other scenarios where SSL certificates are used for client authentication.
Read more
Your choice of Certificate Authority impacts browser compatibility and infrastructure resilience. Learn about root certificate lifecycles, cross-signing, and why relying on a single CA is a critical vulnerability.
Read more
The SSL industry faces three major technical changes in 2026, mandated by the CA/Browser Forum. Read about the reduction to 199 and 99 days, new rules for Code Signing, and the removal of Client Auth.
Read more
DNS CAA records (RFC 8659) give you control over which CAs may issue certificates for your domain. Learn how to set them up correctly.
Read more
Since June 2023, all Code Signing certificates require physical key protection. Compare USB tokens with cloud HSM solutions like Azure Key Vault.
Read more
Wildcard and SAN (Multi-Domain) certificates both cover multiple hostnames, but differently. Learn the security implications and when to choose which.
Read more
Google Chrome is dropping trust in Entrust certificates. From 11 November 2024, Chrome will no longer trust TLS certificates issued by Entrust.
Read more
From 1 June 2023, all CAs require physical key security for issuing Code Signing OV certificates.
Read more
GlobalSign has revoked multiple certificates due to a technical error in their intermediate CAs.
Read more
Browsers are forcing CAs to reduce all SSL certificates to under 398 days.
Read more
Secure Sockets Layer, or SSL, is essentially dead. Most people just have not noticed that we switched to Transport Layer Security, or TLS.
Read more
SSL/TLS certificates provide both identity verification and encryption online. Here is a quick guide to how it all works.
Read more
Google Chrome is strangling Symantec's CA business as a symbolic sacrifice. Here is the full story of what happened.
Read more
The CAB Forum has voted to limit new certificates to 2 years and 3 months, or 825 days.
Read moreCreate a free account and order your first certificate. A DV certificate is issued in under 2 minutes.
