DigiCert
DigiCert is a privately held PKI and digital trust platform provider serving 90%+ of the Fortune 500 across 180 countries, securing 3 billion+ identities through its DigiCert ONE platform for TLS, code signing, IoT identity, content provenance, and AI agent trust.
- Company typePrivate
- Founded2003
- HeadquartersLindon, United States
- Headcount1,001–5,000
- GTM typeB2B
- OfferingSoftware
What DigiCert does
DigiCert is a digital trust and public key infrastructure (PKI) company founded in 2003 and headquartered in Lindon (Lehi), Utah. The company provides certificate authority services and certificate lifecycle management to over 90% of the Fortune 500 across 180 countries, securing more than 3 billion identities with 99.99% uptime since 1999. Its core offering is DigiCert ONE, a unified cloud-native platform that consolidates public and private PKI, managed DNS (UltraDNS), code signing, device identity, content authenticity via C2PA, and emerging AI trust capabilities into a single integrated architecture spanning modules such as Trust Lifecycle Manager, CertCentral, Private CA, Software Trust Manager, Device Trust Manager, Content Trust Manager, Messaging Trust, and the AI Trust Framework (AI Agent Trust, AI Model Trust).
DigiCert monetizes primarily through recurring annual subscriptions for TLS/SSL certificates across Basic, Secure Site, and Secure Site Pro tiers (ranging $26-$155 per month per domain), code signing certificates ($44-$62/mo), S/MIME email certificates ($4-$97/mo per email), and platform modules. Additional revenue streams include managed services from the Vercara acquisition (partially divested to NetScout in May 2026), professional services for PKI and post-quantum cryptography (PQC) migration, and brand licensing for legacy SSL brands (Thawte, GeoTrust, RapidSSL, QuoVadis). Pricing is publicly disclosed on product pages with auto-renewal at 12-month terms, and the platform is available via the Microsoft Azure Marketplace with a locally-hosted instance in India since January 2026 for data sovereignty.
The company is privately held by Clearlake Capital Group and sells through enterprise field sales, channel partners (with recent EMEA buildout via Paul Holt and Christian Stanford), direct self-serve via DigiCert Store and CertCentral, and event-driven demand (World Quantum Readiness Day, Trust Summit). Strategic priorities center on PQC migration (ML-KEM, ML-DSA, X25519MLKEM768), AI agent identity verification, C2PA-based content provenance, and vertical-specific infrastructure such as the X9 PKI for financial services under ASC X9 oversight. The company has executed four major acquisitions since 2022 (Mocana, DNS Made Easy, Vercara, Valimail) and operates with 1,001-5,000 employees globally.
DigiCert firmographics
Firmographics- Name
- DigiCert
- Legal name
- DigiCert, Inc.
- Website
- https://digicert.com
- Company type
- Private
- Founded year
- 2003
- Operating status
- Operating
- Headcount range
- 1,001–5,000 employees
- Short description
- DigiCert is a privately held PKI and digital trust platform provider serving 90%+ of the Fortune 500 across 180 countries, securing 3 billion+ identities through its DigiCert ONE platform for TLS, code signing, IoT identity, content provenance, and AI agent trust.
- Ownership category
- akta.pro rank
DigiCert industry classification
Industry- Product category
- Certificate Lifecycle Management and PKI Software
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371)
- akta.pro primary industry
- Decentralized Identity (DID) & Verifiable Credentials (BPAMAEAJ)
- akta.pro secondary industries
- Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), API Security & Service-to-Service Security (mTLS, Service Mesh Security) (HDABAHAN)
Keywords
Where DigiCert is headquartered
LocationHeadquarters
- HQ city
- Lindon
- HQ country
- United States
- HQ region
- North America
Markets served
DigiCert business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales
Revenue model
- TLS/SSL Certificate Subscriptions: Recurring annual subscriptions for public TLS/SSL certificates across Basic, Secure Site, and Secure Site Pro tiers, with auto-renewal, unlimited server licensing, and lifecycle management included.
- Code Signing Certificates: Subscription and one-time certificate sales for OV and EV code signing, with FIPS 140-2 Level 2-compliant key storage via DigiCert KeyLocker cloud or hardware token options.
- Secure Email (S/MIME) Certificates: Per-email-address monthly subscriptions for S/MIME certificates at individual, business group, and business employee tiers.
- Document Trust Manager: Centralized document signing platform with secure certificate storage, pre-integrated DocuSign and Adobe Sign connectors, and remote signer verification.
- DDoS Protection & Web Application Firewall (Vercara): Managed cloud-based DDoS mitigation and WAF services acquired through Vercara; partially divested to NetScout in May 2026.
- Professional Services: Consulting and deployment services for PKI modernization, PQC migration, and enterprise trust architecture, delivered by DigiCert's professional services team.
- Brand Licensing (QuoVadis, Thawte, RapidSSL, GeoTrust): Continued operation of legacy certificate brands QuoVadis, Thawte, RapidSSL, and GeoTrust as separate storefronts and eIDAS/PKIo services.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Basic - OV TLS/SSL — single domain, business-validated, unlimited issuance |
| Subscription | Annual | Secure Site - OV TLS/SSL — business-validated with priority validation and Smart Seal |
| Subscription | Annual | Secure Site Pro - OV TLS/SSL — advanced brand protection and vulnerability scanning |
| Subscription | Annual | Basic - EV TLS/SSL — Extended Validation, highest-assurance single domain |
| Subscription | Annual | Secure Site - EV TLS/SSL |
| Subscription | Annual | Secure Site Pro - EV TLS/SSL — most comprehensive website security |
| Subscription | Annual | Code Signing Certificates — OV or EV with cloud or hardware key storage |
| Per seat | Annual | Secure Email (S/MIME) Certificates |
Go-to-market motion7 records
DigiCert product offering
Product offeringCore offering
DigiCert operates a unified cloud-delivered digital trust platform, DigiCert ONE, that consolidates public key infrastructure (PKI), DNS, certificate lifecycle management, code signing, device identity, content authenticity, and AI trust services for enterprise and developer customers. The company sells TLS/SSL certificates (Basic, Secure Site, Secure Site Pro), code signing certificates, S/MIME email certificates, and mark certificates (VMC and CMC) through both direct enterprise sales and self-serve online channels, serving 90%+ of the Fortune 500 across 180 countries.
Product overview
DigiCert offers a unified platform-plus-modules architecture centered on DigiCert ONE, a cloud-native platform that consolidates PKI, DNS, code signing, device identity, content authenticity, and AI trust services. The platform organizes its capabilities into distinct modules: Trust Lifecycle Manager for certificate automation, CertCentral for TLS/SSL management, Private CA for enterprise private trust, UltraDNS for authoritative DNS, Software Trust Manager for code signing, Device Trust Manager for IoT identity, Content Trust Manager for media authentication, Messaging Trust for email security, and the newer AI Trust framework components (AI Agent Trust, AI Model Trust, Content Trust Manager) launched May 2026. Alongside the platform, DigiCert sells standalone certificate products including DigiCert Basic TLS/SSL, Secure Site, Secure Site Pro, Code Signing Certificates, S/MIME Email Certificates, and Mark Certificates (VMC and CMC). The portfolio is supplemented by acquired brands operating under the DigiCert umbrella: Vercara (DNS, DDoS, WAF), Valimail (email authentication), Mocana (IoT security), DNS Made Easy, QuoVadis (eIDAS trust services), Thawte, GeoTrust, and RapidSSL. The company also manages the dedicated X9 PKI for the financial services industry.
Differentiator
Problem solved
Functional benefit
Brands
- DigiCert ONE: Comprehensive PKI+DNS platform for digital trust, including Trust Lifecycle Manager, CertCentral, Private CA, DNS, Software Trust Manager, Device Trust Manager, Content Trust, and Messaging Trust.
- UltraDNS
- CertCentral
- Thawte
- GeoTrust
- RapidSSL
- Vercara
- Valimail
- QuoVadis
Products and services
- DigiCert ONE Unified, cloud-native PKI and DNS platform that consolidates certificate lifecycle management, public/private PKI, DNS, code signing, device identity, content authenticity, and AI trust services into a single integrated solution for enterprise customers. Delivers 312% ROI per Forrester TEI study and is available on Microsoft Azure Marketplace and locally hosted in India.
- Trust Lifecycle Manager Module within DigiCert ONE that provides unified certificate automation, visibility, and lifecycle management for all digital certificates across the enterprise, including auto-discovery, renewal, and governance.
- CertCentral TLS/SSL Manager Globally trusted certificate management platform within DigiCert ONE for issuing, managing, and automating TLS/SSL certificates for websites and applications with complete lifecycle controls and public and private CA capabilities.
- Private CA Module within DigiCert ONE providing private trust for users, devices, and infrastructure; enables organizations to operate their own private certificate authority for internal PKI use cases.
- UltraDNS Managed authoritative DNS service integrated into DigiCert ONE, providing fast, resilient DNS to optimize security and availability; includes DMARC monitoring integration for email authentication.
- Software Trust Manager Enterprise code-signing solution within DigiCert ONE for secure, policy-driven signing across the software supply chain, including KeyLocker cloud-based key storage and FIPS 140-2 Level 2 HSM support.
- Device Trust Manager Module within DigiCert ONE for identity, onboarding, and lifecycle management of devices and IoT endpoints, providing every device with a verifiable identity from deployment through retirement, with device-level signing and timestamping at point of capture.
- Content Trust Manager Module within DigiCert ONE that cryptographically signs and verifies digital media (images, video, documents) using the C2PA open standard to prove content origin, detect tampering, and stop AI-driven fraud at scale.
- Document Trust Manager Enterprise document signing solution within DigiCert ONE; provides centralized signing activity monitoring, secure certificate storage, pre-integrated signing with DocuSign and Adobe Sign, and remote signer verification for e-signature compliance.
- Messaging Trust Module within DigiCert ONE focused on email security, anti-spoofing, and verified brand logos (BIMI/VMC/CMC) in inboxes; includes S/MIME, DMARC monitoring, and Verified Mark Certificate support.
- AI Trust Framework Unified trust framework on DigiCert ONE delivering cryptographic verification for AI agents, AI models, and digital content; built on C2PA standards and AI Trust architecture using SPIFFE/SPIRE for agent identity.
- DigiCert Basic TLS/SSL Certificates Entry-level TLS/SSL certificates offering Organization Validation (OV) or Domain Validation (DV), with unlimited issuance, lifecycle automation, and 24x5 standard support starting at $24-26/month per standard domain.
- DigiCert Secure Site TLS/SSL Certificates Premium TLS/SSL certificate subscription with priority validation, malware and blocklist checks, DigiCert Smart Seal, $1.75 million NetSure warranty, and PCI compliance scanning.
- DigiCert Secure Site Pro TLS/SSL Certificates Most comprehensive TLS/SSL certificate solution for uncompromising brands, including brand protection (CT log monitoring), vulnerability scans, PCI scanning, blocklist check, and unlimited server licensing.
- DigiCert Code Signing Certificates Code signing certificates available in Organization Validated and Extended Validation (EV) variants, with FIPS 140-2 Level 2-compliant key storage (KeyLocker), 2FA, timestamping, and CI/CD integration support, starting at $44/month.
- DigiCert Secure Email (S/MIME) Certificates S/MIME certificates for end-to-end email security at scale, providing encryption and digital signatures to prevent phishing, tampering, and man-in-the-middle attacks; supports Individual, Business Group, and Business Employee assurance levels.
- X9 PKI for Financial Services Dedicated public key infrastructure built in collaboration with ASC X9 for the financial services industry; provides interoperability for host-to-host communications (mTLS) with high-assurance certificates, WebTrust audited, supporting both classical and post-quantum cryptography.
- AI Trust Validation Service for Google Cloud Workloads Independent trust validation service for confidential computing environments on Google Cloud, applying PKI principles (cryptographic signatures, certificates, identity validation) to verify cloud-hosted systems and workloads are authentic and unaltered.
- Thawte SSL/TLS Certificates Thawte is a DigiCert-owned legacy SSL/TLS certificate sub-brand operated as a separate DigiCert storefront for global customers.
- GeoTrust SSL/TLS Certificates GeoTrust is a DigiCert-owned legacy SSL/TLS certificate sub-brand operated as a separate DigiCert storefront.
- RapidSSL Certificates RapidSSL is a DigiCert-owned legacy SSL/TLS certificate sub-brand operated as a separate DigiCert storefront.
- QuoVadis Trust Services QuoVadis is a DigiCert-owned trust service provider operating under eIDAS regulation in the European Union to issue qualified electronic signatures, seals, and timestamps for the European market.
- AI Agent Trust Capability within DigiCert ONE's AI Trust framework providing cryptographic verification for autonomous AI agents, binding identities to AI systems so only trusted agents can act; uses SPIFFE and SPIRE standards.
- AI Model Trust Capability within DigiCert ONE's AI Trust framework providing cryptographic verification and validation of AI model integrity, ensuring models are unaltered and trustworthy across the AI lifecycle.
Companies that use DigiCert
Customer profileIdeal customer profiles3 records
DigiCert technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration11 records
AI capability14 records
Feature16 records
DigiCert partnerships and signals
Strategic signalRecent moves8 records
Expansion highlights6 records
DigiCert competitors and assessment
Company assessmentDirect peers
- Entrust: Entrust is a direct PKI and digital trust competitor offering TLS certificates, identity verification, PKI platforms, and post-quantum-ready solutions to enterprises and governments. DigiCert and Entrust routinely compete for the same Fortune 500 and government RFPs.
- Sectigo: Sectigo is one of the largest commercial Certificate Authorities competing head-to-head with DigiCert in TLS/SSL, code signing, S/MIME, and private/managed PKI. The two are the only scaled commercial alternatives in the enterprise CA market and overlap closely in product breadth and customer segment.
- Let's Encrypt: Let's Encrypt is the dominant free, automated Certificate Authority powering ACME-based public TLS for millions of websites. While DigiCert serves paid enterprise workloads, Let's Encrypt sets the price floor and automation expectations that compress DigiCert's lower-tier TLS economics.
- Venafi (CyberArk): Venafi is the leading machine identity management platform for certificate lifecycle automation, overlapping heavily with DigiCert's Trust Lifecycle Manager and Software Trust Manager. Acquired by CyberArk in 2024, Venafi complements rather than replaces CA issuance, but competes for the same cert automation budget.
- Keyfactor: Keyfactor provides certificate lifecycle automation and PKI management, with strong presence in IoT and DevOps certificate use cases. It competes directly with DigiCert's Trust Lifecycle Manager and Device Trust Manager for enterprise cert automation RFPs.
- GlobalSign: GlobalSign is a long-standing Certificate Authority offering TLS, code signing, S/MIME, private PKI, and IoT identity — directly overlapping DigiCert's enterprise CA portfolio. Both serve regulated industries and compete on managed PKI and device identity.
Broad incumbents
- Cloudflare: Cloudflare provides free Universal SSL, Advanced Certificate Manager, and Cloudflare One, and is both a DigiCert customer (per logo wall and case study) and a competitor for website/edge security and bot management adjacent to DigiCert's TLS offerings.
- AWS Certificate Manager: AWS Certificate Manager offers free, auto-renewed public TLS certificates natively integrated with AWS workloads. As a hyperscaler-native incumbent, ACME sets a free pricing benchmark and pulls low-complexity DigiCert TLS demand into AWS-native automation.
- Microsoft Azure Key Vault / Managed HSM: Microsoft Azure Key Vault and Managed HSM offer native certificate storage, issuance, and PKI inside the Azure ecosystem. DigiCert ONE is available on Azure Marketplace, but Azure's native services compete for the same private PKI and key-management workloads within Azure-deployed enterprises.
Emerging players
- HashiCorp Vault: HashiCorp Vault provides PKI secrets engine and certificate issuance for cloud-native and DevOps workloads. It competes with DigiCert's Private CA and Trust Lifecycle Manager inside infrastructure teams that prefer to issue certificates from within their own secrets-management platform.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
DigiCert social profiles
Digital presenceDigiCert compliance and trust
Trust signalCompliance7 records
DigiCert financial estimates
Financial estimateRevenue estimate
Valuation estimate
DigiCert leadership team
Management profileNumber of profiles
Profiles13 records
DigiCert subsidiaries and ownership
Company hierarchySubsidiaries6 records
DigiCert funding detail
Funding detailFunding overview
Funding rounds5 records
Investors5 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
DigiCert M&A and investment
M&A and investmentM&A8 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about DigiCert
What does DigiCert do?
DigiCert operates a unified cloud-delivered digital trust platform, DigiCert ONE, that consolidates public key infrastructure (PKI), DNS, certificate lifecycle management, code signing, device identity, content authenticity, and AI trust services for enterprise and developer customers. The company sells TLS/SSL certificates (Basic, Secure Site, Secure Site Pro), code signing certificates, S/MIME email certificates, and mark certificates (VMC and CMC) through both direct enterprise sales and self-serve online channels, serving 90%+ of the Fortune 500 across 180 countries.
Is DigiCert a public or private company?
DigiCert is a private company. It is classified as private equity controlled and is currently operating.
When was DigiCert founded?
DigiCert was founded in 2003. It employs 1,001 to 5,000 people.
Where is DigiCert based?
DigiCert is headquartered in Lindon, United States, in the North America region.
How does DigiCert make money?
Seven revenue lines are on record. TLS/SSL Certificate Subscriptions are the primary driver. The others are code Signing Certificates, secure Email (S/MIME) Certificates, document Trust Manager, DDoS Protection & Web Application Firewall (Vercara), professional Services and brand Licensing (QuoVadis, Thawte, RapidSSL, GeoTrust).
Who are DigiCert's main competitors?
Direct peers on record are Entrust, Sectigo, Let's Encrypt, Venafi (CyberArk), Keyfactor and GlobalSign. Broad incumbents are Cloudflare, AWS Certificate Manager and Microsoft Azure Key Vault / Managed HSM. HashiCorp Vault is listed as an emerging player.
Does DigiCert have an API?
Yes. DigiCert offers public-facing APIs documented at dev.digicert.com. The platform enables developers to automate certificate lifecycle management, integrate with CertCentral, manage DNS via UltraDNS, issue and manage TLS/SSL, code signing, document signing, S/MIME, and Mark certificates, configure PKI policies, and programmatically control DigiCert ONE platform components. DigiCert also released TrustCore SDK, an open-source SDK for developers building trust infrastructure into applications. Developer documentation is at dev.digicert.com.
What industry is DigiCert in?
DigiCert's product category is Certificate Lifecycle Management and PKI Software. Its primary akta.pro industry code is BPAMAEAJ, Decentralized Identity (DID) & Verifiable Credentials, with a secondary code of BPAEADAH, Endpoint Security Managed Services (EDR/XDR). Its NAICS code is 518 and its SIC code is 7370.