DigiCert

Profile narrative

DigiCert is a provider of digital security solutions that focus on issuing and managing digital certificates. Its core offerings include TLS/SSL certificates for securing websites, code‑signing certificates for software authenticity, document‑signing certificates, and certificates for securing Internet of Things devices. The company also sells managed PKI services that allow enterprises to operate their own private certificate authorities under DigiCert’s trust root. These products are used by businesses, developers, and organizations that need to establish trusted communications and verify the integrity of digital assets.

DigiCert’s headquarters are located in the United States of America, as indicated in the organisational context. While the prompt does not disclose specific employee counts or revenue figures, the company operates on a global scale, serving customers across multiple industries and geographic regions. Its certificate authority infrastructure is integrated with major browsers and operating systems, enabling widespread trust of the certificates it issues. The firm’s services are designed to meet the security needs of both large enterprises and smaller organizations seeking reliable authentication and encryption.

Among its distinguishing attributes, DigiCert specializes in high‑assurance TLS certificates that support the latest cryptographic standards and are frequently audited against WebTrust and other industry frameworks. The company maintains a strong focus on certificate transparency, having experienced an incident in 2020 where unauthorized access to its Certificate Transparency Log 2 signing key prompted a precautionary shift to read‑only mode. Following the 2026 support‑portal breach, DigiCert enhanced its security posture by adding multi‑factor authentication for administrative workflows, restricting file types in support chats, and improving logging capabilities to detect and prevent similar threats. In the aftermath of that breach the company reported revoking 60 certificates, of which 27 were directly linked to the attacker and 11 were associated with the Zhong Stealer malware family.

DigiCert’s competencies extend beyond certificate issuance to include vulnerability monitoring, threat intelligence, and advisory services that help customers respond to emerging security risks. The firm’s solutions are often employed to satisfy compliance requirements such as PCI DSS, GDPR, and various government mandates that call for strong encryption and proper key management. By combining a trusted root with a suite of management tools, DigiCert positions itself as a partner for organizations seeking to secure their digital infrastructure throughout the certificate lifecycle.

Incidents

2 incidents linked to this organisation.