Who leads security at DigiCert

What the company sells

DigiCert ONE is a platform that includes Trust Lifecycle Manager for organizations that require CA-agnostic certificate lifecycle management. CertCentral Europe is part of the DigiCert ONE platform. DigiCert ONE is available to customers from global regions including European, Australia, India, Japan, and the United States.

DigiCert certificates can be ordered and administered through CertCentral Europe, which is hosted in European data centers to address data residency and sovereignty requirements. DigiCert signs all SSL certificates using the SHA-256 Algorithm. DigiCert assigns an alphanumeric serial number to each SSL certificate it issues. DigiCert offers identity-validated S/MIME for encryption, signing, and phishing protection. DigiCert describes protecting code signing for software releases.

Verified Mark Certificates (VMCs) from DigiCert enable organizations to display their registered trademark logo in supported email clients. The BIMI standard requires organizations to have a logo that is a registered trademark so that they can be issued a VMC. DigiCert validates an organization's legal existence and confirms its control over the domain associated with the VMC request using Extended Validation (EV) standards. For a VMC, DigiCert performs additional validation beyond the standard Extended Validation (EV) certificate process. DigiCert validates that the SVG logo complies with BIMI requirements and exactly matches the registered trademark. The individual requesting a VMC must be verified as an authorized representative of the organization. Once approved, DigiCert issues the Verified Mark Certificate.

DigiCert X9 PKI is a dedicated public key infrastructure designed to provide interoperability and flexibility for non-web browsers. DigiCert X9 PKI operations are governed by an ASC X9 Policy Committee and undergo an annual independent WebTrust audit. X9 PKI was born from the financial services industry’s need for a dedicated, interoperable trust framework. The X9 PKI is intended for non-browser TLS authentication scenarios. Its main use case at the outset is mutual TLS (mTLS) among financial institutions and between them and their partners and customers. Organizations with existing PKI systems can cross-certify with the X9 PKI root. DTCC will require X9 PKI certificates for securing connections to IBM MQ, Connect:Direct, and FTPS.

DigiCert is a Qualified Trust Service Provider issuing digital certificates under EU and national trust frameworks, including eIDAS, PKIoverheid (Netherlands), and ZertES (Switzerland). DigiCert issues eIDAS qualified certificates, and the available certificate types include QWACs for PSD2, as well as qualified electronic signatures, seals, and timestamps. DigiCert issues PKIoverheid qualified certificates for personal organizations, professionals, and citizens. DigiCert issues ZertES certificates for organizations and individuals that require legally recognized digital trust under Swiss law. ZertES certificates support qualified and regulated electronic signatures, electronic seals, and qualified timestamps.

DigiCert AI Trust Manager helps organizations discover, secure, and govern AI agents, AI models, and MCP servers. DigiCert AI Trust Manager assigns each AI agent a cryptographically verifiable AI Agent Passport linked to its organizational and human ownership. DigiCert AI Trust Manager verifies AI model integrity from development through deployment and runtime. DigiCert AI Trust Manager protects AI agents, AI models, and MCP servers, as well as the systems, tools, and data they access. DigiCert describes automating passport revocation to enable a real-time kill switch for agentic sessions.

DigiCert says replacing cryptography across systems, software, and devices is a multi-year effort that requires planning, testing, and coordination. DigiCert describes inventorying certificates, keys, endpoints, and libraries across PKI and beyond. DigiCert describes standardizing certificate issuance across disparate certificate authorities. DigiCert offers PQC-ready solutions for digital signatures, PKI, and certificate lifecycle management. DigiCert is active in CA/B Forum, IETF, ETSI, and C2PA. For connected devices, DigiCert describes giving every device a verifiable identity from deployment to retirement. For workloads, DigiCert describes making each workload, API, and container prove its identity. For digital content, DigiCert describes verifying that all digital content is authentic and unaltered.^{[2][3][4][5][6][8][9][10][11]}

Categories

• Machine identity and PKI (primary category)
• Post-quantum cryptography
• DNS security
• Email authentication and DMARC
• Compare DigiCert with companies in the same categoryside by side

Headquarters

Not established from our sources

Founded

Not established from our sources

Ownership

Not established from our sources

CISO on record

Not yet on our record. Send a verified source

Website

digicert.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• AI Trust Manager^[1][8]

  Helps organizations discover, secure, and govern AI agents, AI models, and MCP servers.

  DigiCert AI Trust Manager assigns each AI agent a cryptographically verifiable AI Agent Passport linked to its organizational and human ownership. DigiCert AI Trust Manager verifies AI model integrity from development through deployment and runtime. DigiCert AI Trust Manager protects AI agents, AI models, and MCP servers, as well as the systems, tools, and data they access.

• CertCentral^[1][3]

  Used to order and administer DigiCert certificates.

  DigiCert certificates can be ordered and administered through CertCentral Europe. CertCentral Europe is hosted in European data centers to address data residency and sovereignty requirements. CertCentral Europe is part of the DigiCert ONE platform.

• Private CA^[1][7]

  DigiCert's Private CA solutions are pointed to strictly internal use cases.

• DigiCert X9 PKI^[7]

  A dedicated public key infrastructure for interoperability and flexibility for non-web browsers.

  DigiCert X9 PKI is a dedicated public key infrastructure designed to provide interoperability and flexibility for non-web browsers. DigiCert X9 PKI operations are governed by an ASC X9 Policy Committee and undergo an annual independent WebTrust audit. Organizations with existing PKI systems can cross-certify with the X9 PKI root. The X9 PKI is intended for non-browser TLS authentication scenarios.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of DigiCert's categories, then alphabetical. A list from the record, never a ranking.

• On machine identity and pki, DigiCert competes with Entrust, Keyfactor, Sectigo, CyberTrust Consulting, EigenQ, Red Sift, SandboxAQ, Akeyless, HID, Indusface and 1 more.

• On post-quantum cryptography, DigiCert competes with EigenQ, SandboxAQ, CryptoNext Security, IDEMIA, Patero, PQShield, QuSecure, CyberTrust Consulting, Dispersive Stealth Networking, Fortanix and 3 more.

• On dns security, DigiCert competes with doxx.net, Infoblox, EasyDMARC, Brava and Cloudflare.

• On email authentication and dmarc, DigiCert competes with EasyDMARC, Red Sift, dmarcian, Sendmarc, Valimail, Hornetsecurity and Mimecast.

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• September 24, 2026

  DigiCert announced general availability of Quantum Central, a DigiCert ONE platform offering that helps organizations manage progress toward post-quantum cryptography readiness. DigiCert^[12]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]digicert.comDigiCert · digicert.com · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
2. [2]TLS/SSL Certificate Authority | Leader in Digital Trust | DigiCertDigiCert · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
3. [3]Solutions for the European UnionDigiCert · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
4. [4]What extensions and details are included in a SSL certificate?DigiCert · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
5. [5]VMC | New validation stepsDigiCert · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
6. [6]How to trademark your logo for VMCDigiCert · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]DigiCert X9 PKI | DigiCertDigiCert · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]AI Trust Manager | Cryptographic trust for AI | DigiCertDigiCert · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]Post-Quantum Cryptography Solutions & PQC Readiness | DigiCertDigiCert · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
10. [10]Why DigiCert | Unified Digital Trust Leader | DigiCertDigiCert · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
11. [11]Trust Calendar: Public Trust & Compliance Changes | DigiCertDigiCert · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
12. [12]DigiCert Quantum Central Now Available to Help Organizations Turn PQC Plans into ActionDigiCert · published September 24, 2026 · Tier A: the company, a regulator or a filing

Last verified November 5, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded November 5, 2026, expanded November 10, 2026 from the references above.

Work for DigiCert? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.