DigiCert

DigiCert is a prominent global provider of digital trust solutions, specializing in public key infrastructure (PKI) and TLS/SSL certificates. Headquartered in Lehi, Utah, the company plays a critical role in securing online communications, identities, and connected devices for enterprises and governments worldwide. Its technology underpins secure transactions, data integrity, and authentication for a vast portion of the internet and the expanding Internet of Things.

History

The company was founded in 2003 in American Fork, Utah, by a group including Ken Bretschneider, initially focusing on providing digital certificates to small and medium-sized businesses. A pivotal moment in its growth occurred in 2017 when it completed a merger with the Symantec Certificate Authority business, a division of Broadcom Inc., following a period of scrutiny by major web browser vendors like Google Chrome and Mozilla Firefox. This acquisition dramatically expanded its customer base and established it as a leading certificate authority. Subsequent strategic moves, including the acquisition of QuoVadis and the purchase of certain PKI assets from Entrust Datacard, further solidified its international presence and enterprise capabilities, enabling it to serve a diverse portfolio from the United States Department of Defense to major financial institutions.

Products and services

Its core offerings revolve around a comprehensive suite of PKI solutions, most notably a wide range of TLS/SSL certificates, including Extended Validation (EV), Organization Validation (OV), and Domain Validation (DV) certificates. These are essential for securing websites and enabling the HTTPS protocol. Beyond web security, the company provides robust solutions for securing digital identities through client certificates for user and device authentication, as well as high-assurance certificates for code signing and document signing to ensure software integrity and non-repudiation. It also offers specialized platforms for managing the lifecycle of certificates and keys at scale, alongside tailored security solutions for the Internet of Things and connected devices in sectors like automotive and healthcare.

Acquisitions

The company has significantly expanded its technological portfolio and geographic reach through a series of strategic acquisitions. The landmark 2017 purchase of the Symantec website security and related PKI solutions business transformed its market position, bringing a vast enterprise customer roster. In 2021, it acquired QuoVadis, a Switzerland-based certificate authority with a strong reputation in Europe, enhancing its compliance with regulations like eIDAS and expanding its European Union footprint. That same year, it also purchased the PKI business of HID Global, a subsidiary of Assa Abloy, and the certificate authority assets from Entrust Datacard, further deepening its expertise in government and high-assurance identity markets. Earlier, the integration of CertCentral provided the foundation for its modern certificate management platform.

Technology and standards

Its operations are deeply rooted in adherence to industry standards and rigorous security practices defined by the CA/Browser Forum, which sets the baseline requirements for certificate authorities. The company is a pioneer in supporting and implementing post-quantum cryptography standards to prepare for future threats from quantum computing. It actively contributes to and complies with evolving standards for TLS protocols and certificate transparency logs, which are publicly auditable records of issued certificates maintained by operators like Google and Cloudflare. Its infrastructure employs advanced cryptographic algorithms and hardware security modules to protect root and intermediate certificate keys, ensuring the integrity of the chain of trust from its roots to end-entity certificates used by organizations like the National Security Agency and commercial entities worldwide.

Industry recognition and market position

Widely recognized as a leader in the SSL Certificates market by analyst firms such as Gartner and Forrester Research, the company holds a dominant share in providing certificates for high-security and enterprise environments. It is consistently ranked as a top certificate authority in independent audits and surveys, including those by Netcraft and SSL Labs. Its position was cemented by successfully navigating the complex trust transition following the Symantec merger, maintaining validation in all major root programs including Microsoft Root Certificate Program, Apple Root CA program, and Mozilla. The company's technology secures a massive volume of internet traffic and is trusted by a global clientele spanning the Fortune 500, major governments, and financial institutions on every continent.