GeoTrust

GeoTrust was a digital certificate provider specializing in Transport Layer Security and X.509 certificates for websites and servers. It operated in the public key infrastructure market offering server authentication, code signing, and secure email solutions across enterprise and consumer segments. The company participated in global certificate ecosystems alongside certificate authorities, browser vendors, and network infrastructure firms.

History

Founded in 2001, the company emerged amid rapid expansion of online commerce and demand for SSL/TLS assurances. Early growth involved competition and interoperation with incumbent certificate authorities such as VeriSign, Entrust, and Thawte. In 2006 it attracted investment that preceded acquisition activity by larger technology firms, joining corporate groups associated with Symantec and later DigiCert. Throughout the 2000s and 2010s the firm navigated standards-setting environments involving Internet Engineering Task Force, CA/Browser Forum, and browser vendors like Google Chrome, Mozilla Firefox, and Microsoft Edge. Its corporate trajectory intersected with consolidation trends led by companies such as Comodo and GlobalSign.

Products and Services

The firm offered a portfolio including domain-validated, organization-validated, and extended-validation TLS certificates for web servers used by businesses, e-commerce platforms, and content delivery networks like Akamai. It provided code-signing certificates for software publishers interacting with ecosystems including Microsoft Windows and Apple macOS distribution channels, and S/MIME email certificates for enterprises integrated with Microsoft Exchange and IBM Lotus Notes. Supplementary offerings included wildcard certificates for multi-host deployments and managed PKI services compatible with load balancers from F5 Networks and reverse proxies from NGINX. The company sold certificates through channel partners such as GoDaddy, reseller networks, and affiliate programs involving web hosting providers like Bluehost and HostGator.

Technology and Security

Certificate issuance relied on X.509 standards and cryptographic algorithms standardized by bodies like IETF and implemented via OpenSSL libraries and hardware security modules from vendors such as Thales Group and HSM. Validation procedures conformed to CA/Browser Forum Baseline Requirements for domain control validation methods including DNS, email, and HTTP file-based checks recognized by browser root programs at Apple and Google. The company supported RSA and ECC key algorithms and certificate revocation protocols like OCSP and CRLs interoperable with infrastructure from Cisco Systems and Juniper Networks. Security auditing and compliance were subject to WebTrust and ETSI audit regimes and independent assessments by accounting firms comparable to Deloitte and PwC.

Market Position and Partnerships

Operating in a competitive marketplace alongside Comodo CA, GlobalSign, Let's Encrypt, and Sectigo, the company pursued distribution through strategic alliances with registrars and hosting firms such as Network Solutions and DreamHost. It maintained partnerships with content management systems like WordPress and e-commerce platforms including Magento to streamline certificate deployment. Channel strategies involved reseller programs interfacing with control panels from cPanel and Plesk. The company’s position shifted with acquisitions and consolidation events involving Symantec’s certificate business and later integrations with DigiCert that reshaped CA market shares and trust store relationships with major operating system vendors like Red Hat and device manufacturers such as Samsung Electronics.

Controversies and Incidents

Like other certificate authorities, the company’s environment was affected by industry-wide disputes about issuance practices and browser root program policies, which implicated entities such as Google and Mozilla Foundation regarding enforcement of baseline requirements. Operational incidents in the PKI sector have historically led to revocation events and root program tests involving Microsoft and Apple trust stores, prompting scrutiny from standards bodies including CAB Forum and auditors similar to KPMG. Debates over certificate transparency and public logs engaged participants like Cloudflare and Facebook as part of ecosystem responses. The broader CA industry’s security incidents and policy changes influenced corporate transitions, regulatory attention, and litigation involving technology firms and data protection authorities in jurisdictions such as the European Union.

Category:Public key infrastructure companies