OFFICIAL PARTNER · CYBER BOOST

DigiCert

Name: DigiCert
Brand: DigiCert

Digital Trust Platform

DigiCert is the global leader in digital trust. DigiCert ONE combines TLS/SSL, enterprise PKI, IoT Trust, Document Signing and DNS Trust in a single platform.

TLS/SSLPKIIoT TrustDocument Signing

Request a quote See the modules

KEY FACTS

TLS certificate provider

89%

of Fortune 500 companies are customers

Trillions

of connections a day

2003

year founded (Utah, USA)

Includes Symantec/VeriSign Website Security

PRODUCTS AND MODULES

What DigiCert ONE includes.

DigiCert ONE is a single container-based trust platform with modules for different certificate types and use cases.

TLS/SSL

CertCentral / Trust Lifecycle Manager

A platform for full-lifecycle TLS certificate management: discovery, issuance, renewal, revocation.

Enterprise PKI

Trust Lifecycle Manager

Enterprise PKI for organizations of any size. Manages all certificates, public and private.

IoT Trust

DigiCert IoT Trust Manager

Issues and manages millions of certificates for IoT devices. Mass provisioning at the factory.

Document Signing

DigiCert Document Trust Manager

Legally binding electronic document signatures. Signing of PDF and MS Office documents, eIDAS compliance.

Code Signing

DigiCert Software Trust Manager

Code and installer signing. HSM-protected keys, supply chain protection.

DNS Security

DigiCert DNS Trust Manager

DNSSEC and Anycast DNS infrastructure to protect DNS resolution from spoofing and DDoS.

Verified Mark

DigiCert Verified Mark Certs (VMC)

VMC certificates for BIMI: displaying the company logo in Gmail, Yahoo and Apple Mail.

PQC

Post-Quantum Cryptography

Getting ready for post-quantum cryptography: hybrid certificates and an inventory of the cryptography in your infrastructure.

Discovery

DigiCert Certificate Discovery

Finds every certificate on your network automatically and prevents outages caused by expired TLS certificates.

CAPABILITIES

Key capabilities.

ACME protocol

Issues and renews TLS certificates automatically over ACME, the standard from Let’s Encrypt.

Discovery

Finds every certificate in your infrastructure automatically, so expired TLS certificates don’t cause outages.

HSM support

Support for cloud and on-prem HSMs: AWS CloudHSM, Azure Key Vault, Thales, Entrust nShield.

Post-Quantum

Ready-made hybrid certificates (classic + PQC) and a cryptography inventory.

IoT scale

Issuing millions of certificates for IoT devices. Provisioning at the factory through the PKI API.

DevOps API

A REST API and Terraform/Ansible providers. Integration into CI/CD development pipelines.

eIDAS-compliance

QES/AES qualified signatures in line with the EU eIDAS regulation.

Verified Mark

BIMI/VMC certificates display the company logo in email clients (Gmail, Apple Mail).

USE CASES

Who uses DigiCert and how.

Full-lifecycle TLS

Managing TLS certificates for all of a company’s web services, with automatic renewal via ACME.

IoT manufacturing

Provisioning certificates for millions of IoT devices on the production line, each with a unique cryptographic identity.

Electronic signatures

Legally binding e-signatures for documents: contracts, agreements, reports. eIDAS compliance.

Code protection

Code signing to protect the supply chain: installers, scripts, containers. HSM protection for keys.

Enterprise PKI

A private PKI for VPN, Wi-Fi authentication and S/MIME. A replacement for outdated Microsoft CAs.

PQC readiness

Getting your infrastructure ready for post-quantum cryptography: a cryptography inventory and hybrid certificates.

TLS certificate provider

89%

of Fortune 500 companies are DigiCert customers

Trillions

of connections protected every day

2003

year founded

INTEGRATIONS

What DigiCert integrates with.

HSM

Thales LunaEntrust nShieldAWS CloudHSMAzure Key VaultGoogle Cloud HSM

DEVOPS

TerraformAnsibleKubernetes (cert-manager)JenkinsGitLab CI

CLOUDS

AWSMicrosoft AzureGoogle Cloud

ITSM

ServiceNowSplunkMicrosoft Sentinel

COMPARING MODULES

Which module to choose.

Use case	TLM (TLS)	IoT TM	Doc Trust	Software Trust
TLS certificate management	✓	-	-	-
Certificates for IoT	-	✓	-	-
Electronic document signatures	-	-	✓	-
Code signing (software protection)	-	-	-	✓
ACME automation	✓	Provisioning	-	-
HSM integration	✓	✓	✓	✓

FAQ

Frequently asked questions

What is DigiCert ONE?

DigiCert ONE is a modern container-based platform for managing digital trust. It replaces the older CertCentral and supports all certificate types and use cases, including TLS and IoT.

What is post-quantum cryptography?

DigiCert supports hybrid certificates that combine classic cryptography with post-quantum algorithms (NIST PQC standards). This protects against future “harvest now, decrypt later” attacks using quantum computers.

What is BIMI / VMC?

BIMI (Brand Indicators for Message Identification) is a standard for showing a company’s logo in Gmail, Apple Mail and Yahoo. It requires a Verified Mark Certificate (VMC) from DigiCert, issued after your trademark rights are checked.

Can a private PKI be deployed?

Yes. Trust Lifecycle Manager supports private CAs for internal services: VPN certificates, S/MIME for email and authentication of users and devices.

← All vendors: Identity & Access