DigiCert

What DigiCert does

DigiCert is a digital trust and public key infrastructure (PKI) company founded in 2003 and headquartered in Lindon (Lehi), Utah. The company provides certificate authority services and certificate lifecycle management to over 90% of the Fortune 500 across 180 countries, securing more than 3 billion identities with 99.99% uptime since 1999. Its core offering is DigiCert ONE, a unified cloud-native platform that consolidates public and private PKI, managed DNS (UltraDNS), code signing, device identity, content authenticity via C2PA, and emerging AI trust capabilities into a single integrated architecture spanning modules such as Trust Lifecycle Manager, CertCentral, Private CA, Software Trust Manager, Device Trust Manager, Content Trust Manager, Messaging Trust, and the AI Trust Framework (AI Agent Trust, AI Model Trust).

DigiCert monetizes primarily through recurring annual subscriptions for TLS/SSL certificates across Basic, Secure Site, and Secure Site Pro tiers (ranging $26-$155 per month per domain), code signing certificates ($44-$62/mo), S/MIME email certificates ($4-$97/mo per email), and platform modules. Additional revenue streams include managed services from the Vercara acquisition (partially divested to NetScout in May 2026), professional services for PKI and post-quantum cryptography (PQC) migration, and brand licensing for legacy SSL brands (Thawte, GeoTrust, RapidSSL, QuoVadis). Pricing is publicly disclosed on product pages with auto-renewal at 12-month terms, and the platform is available via the Microsoft Azure Marketplace with a locally-hosted instance in India since January 2026 for data sovereignty.

The company is privately held by Clearlake Capital Group and sells through enterprise field sales, channel partners (with recent EMEA buildout via Paul Holt and Christian Stanford), direct self-serve via DigiCert Store and CertCentral, and event-driven demand (World Quantum Readiness Day, Trust Summit). Strategic priorities center on PQC migration (ML-KEM, ML-DSA, X25519MLKEM768), AI agent identity verification, C2PA-based content provenance, and vertical-specific infrastructure such as the X9 PKI for financial services under ASC X9 oversight. The company has executed four major acquisitions since 2022 (Mocana, DNS Made Easy, Vercara, Valimail) and operates with 1,001-5,000 employees globally.

Name

DigiCert

Legal name

DigiCert, Inc.

Website

https://digicert.com

Company type

Private

Founded year

2003

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

DigiCert is a privately held PKI and digital trust platform provider serving 90%+ of the Fortune 500 across 180 countries, securing 3 billion+ identities through its DigiCert ONE platform for TLS, code signing, IoT identity, content provenance, and AI agent trust.

Ownership category

akta.pro rank

Product category

Certificate Lifecycle Management and PKI Software

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371)

akta.pro primary industry

Decentralized Identity (DID) & Verifiable Credentials (BPAMAEAJ)

akta.pro secondary industries

Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), API Security & Service-to-Service Security (mTLS, Service Mesh Security) (HDABAHAN)

Keywords

• Digital certificate authority
• Public key infrastructure
• Certificate lifecycle management
• PKI and DNS services
• Digital trust platform

Headquarters

HQ city

Lindon

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales

Revenue model

1. TLS/SSL Certificate Subscriptions: Recurring annual subscriptions for public TLS/SSL certificates across Basic, Secure Site, and Secure Site Pro tiers, with auto-renewal, unlimited server licensing, and lifecycle management included.
2. Code Signing Certificates: Subscription and one-time certificate sales for OV and EV code signing, with FIPS 140-2 Level 2-compliant key storage via DigiCert KeyLocker cloud or hardware token options.
3. Secure Email (S/MIME) Certificates: Per-email-address monthly subscriptions for S/MIME certificates at individual, business group, and business employee tiers.
4. Document Trust Manager: Centralized document signing platform with secure certificate storage, pre-integrated DocuSign and Adobe Sign connectors, and remote signer verification.
5. DDoS Protection & Web Application Firewall (Vercara): Managed cloud-based DDoS mitigation and WAF services acquired through Vercara; partially divested to NetScout in May 2026.
6. Professional Services: Consulting and deployment services for PKI modernization, PQC migration, and enterprise trust architecture, delivered by DigiCert's professional services team.
7. Brand Licensing (QuoVadis, Thawte, RapidSSL, GeoTrust): Continued operation of legacy certificate brands QuoVadis, Thawte, RapidSSL, and GeoTrust as separate storefronts and eIDAS/PKIo services.

Pricing tiers

Go-to-market motion7 records

Core offering

DigiCert operates a unified cloud-delivered digital trust platform, DigiCert ONE, that consolidates public key infrastructure (PKI), DNS, certificate lifecycle management, code signing, device identity, content authenticity, and AI trust services for enterprise and developer customers. The company sells TLS/SSL certificates (Basic, Secure Site, Secure Site Pro), code signing certificates, S/MIME email certificates, and mark certificates (VMC and CMC) through both direct enterprise sales and self-serve online channels, serving 90%+ of the Fortune 500 across 180 countries.

Product overview

DigiCert offers a unified platform-plus-modules architecture centered on DigiCert ONE, a cloud-native platform that consolidates PKI, DNS, code signing, device identity, content authenticity, and AI trust services. The platform organizes its capabilities into distinct modules: Trust Lifecycle Manager for certificate automation, CertCentral for TLS/SSL management, Private CA for enterprise private trust, UltraDNS for authoritative DNS, Software Trust Manager for code signing, Device Trust Manager for IoT identity, Content Trust Manager for media authentication, Messaging Trust for email security, and the newer AI Trust framework components (AI Agent Trust, AI Model Trust, Content Trust Manager) launched May 2026. Alongside the platform, DigiCert sells standalone certificate products including DigiCert Basic TLS/SSL, Secure Site, Secure Site Pro, Code Signing Certificates, S/MIME Email Certificates, and Mark Certificates (VMC and CMC). The portfolio is supplemented by acquired brands operating under the DigiCert umbrella: Vercara (DNS, DDoS, WAF), Valimail (email authentication), Mocana (IoT security), DNS Made Easy, QuoVadis (eIDAS trust services), Thawte, GeoTrust, and RapidSSL. The company also manages the dedicated X9 PKI for the financial services industry.

Differentiator

Problem solved

Functional benefit

Brands

• DigiCert ONE: Comprehensive PKI+DNS platform for digital trust, including Trust Lifecycle Manager, CertCentral, Private CA, DNS, Software Trust Manager, Device Trust Manager, Content Trust, and Messaging Trust.
• UltraDNS
• CertCentral
• Thawte
• GeoTrust
• RapidSSL
• Vercara
• Valimail
• QuoVadis

Products and services

• DigiCert ONE Unified, cloud-native PKI and DNS platform that consolidates certificate lifecycle management, public/private PKI, DNS, code signing, device identity, content authenticity, and AI trust services into a single integrated solution for enterprise customers. Delivers 312% ROI per Forrester TEI study and is available on Microsoft Azure Marketplace and locally hosted in India.
• Trust Lifecycle Manager Module within DigiCert ONE that provides unified certificate automation, visibility, and lifecycle management for all digital certificates across the enterprise, including auto-discovery, renewal, and governance.
• CertCentral TLS/SSL Manager Globally trusted certificate management platform within DigiCert ONE for issuing, managing, and automating TLS/SSL certificates for websites and applications with complete lifecycle controls and public and private CA capabilities.
• Private CA Module within DigiCert ONE providing private trust for users, devices, and infrastructure; enables organizations to operate their own private certificate authority for internal PKI use cases.
• UltraDNS Managed authoritative DNS service integrated into DigiCert ONE, providing fast, resilient DNS to optimize security and availability; includes DMARC monitoring integration for email authentication.
• Software Trust Manager Enterprise code-signing solution within DigiCert ONE for secure, policy-driven signing across the software supply chain, including KeyLocker cloud-based key storage and FIPS 140-2 Level 2 HSM support.
• Device Trust Manager Module within DigiCert ONE for identity, onboarding, and lifecycle management of devices and IoT endpoints, providing every device with a verifiable identity from deployment through retirement, with device-level signing and timestamping at point of capture.
• Content Trust Manager Module within DigiCert ONE that cryptographically signs and verifies digital media (images, video, documents) using the C2PA open standard to prove content origin, detect tampering, and stop AI-driven fraud at scale.
• Document Trust Manager Enterprise document signing solution within DigiCert ONE; provides centralized signing activity monitoring, secure certificate storage, pre-integrated signing with DocuSign and Adobe Sign, and remote signer verification for e-signature compliance.
• Messaging Trust Module within DigiCert ONE focused on email security, anti-spoofing, and verified brand logos (BIMI/VMC/CMC) in inboxes; includes S/MIME, DMARC monitoring, and Verified Mark Certificate support.
• AI Trust Framework Unified trust framework on DigiCert ONE delivering cryptographic verification for AI agents, AI models, and digital content; built on C2PA standards and AI Trust architecture using SPIFFE/SPIRE for agent identity.
• DigiCert Basic TLS/SSL Certificates Entry-level TLS/SSL certificates offering Organization Validation (OV) or Domain Validation (DV), with unlimited issuance, lifecycle automation, and 24x5 standard support starting at $24-26/month per standard domain.
• DigiCert Secure Site TLS/SSL Certificates Premium TLS/SSL certificate subscription with priority validation, malware and blocklist checks, DigiCert Smart Seal, $1.75 million NetSure warranty, and PCI compliance scanning.
• DigiCert Secure Site Pro TLS/SSL Certificates Most comprehensive TLS/SSL certificate solution for uncompromising brands, including brand protection (CT log monitoring), vulnerability scans, PCI scanning, blocklist check, and unlimited server licensing.
• DigiCert Code Signing Certificates Code signing certificates available in Organization Validated and Extended Validation (EV) variants, with FIPS 140-2 Level 2-compliant key storage (KeyLocker), 2FA, timestamping, and CI/CD integration support, starting at $44/month.
• DigiCert Secure Email (S/MIME) Certificates S/MIME certificates for end-to-end email security at scale, providing encryption and digital signatures to prevent phishing, tampering, and man-in-the-middle attacks; supports Individual, Business Group, and Business Employee assurance levels.
• X9 PKI for Financial Services Dedicated public key infrastructure built in collaboration with ASC X9 for the financial services industry; provides interoperability for host-to-host communications (mTLS) with high-assurance certificates, WebTrust audited, supporting both classical and post-quantum cryptography.
• AI Trust Validation Service for Google Cloud Workloads Independent trust validation service for confidential computing environments on Google Cloud, applying PKI principles (cryptographic signatures, certificates, identity validation) to verify cloud-hosted systems and workloads are authentic and unaltered.
• Thawte SSL/TLS Certificates Thawte is a DigiCert-owned legacy SSL/TLS certificate sub-brand operated as a separate DigiCert storefront for global customers.
• GeoTrust SSL/TLS Certificates GeoTrust is a DigiCert-owned legacy SSL/TLS certificate sub-brand operated as a separate DigiCert storefront.
• RapidSSL Certificates RapidSSL is a DigiCert-owned legacy SSL/TLS certificate sub-brand operated as a separate DigiCert storefront.
• QuoVadis Trust Services QuoVadis is a DigiCert-owned trust service provider operating under eIDAS regulation in the European Union to issue qualified electronic signatures, seals, and timestamps for the European market.
• AI Agent Trust Capability within DigiCert ONE's AI Trust framework providing cryptographic verification for autonomous AI agents, binding identities to AI systems so only trusted agents can act; uses SPIFFE and SPIRE standards.
• AI Model Trust Capability within DigiCert ONE's AI Trust framework providing cryptographic verification and validation of AI model integrity, ensuring models are unaltered and trustworthy across the AI lifecycle.

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration11 records

AI capability14 records

Feature16 records

Recent moves8 records

Expansion highlights6 records

Direct peers

• Entrust: Entrust is a direct PKI and digital trust competitor offering TLS certificates, identity verification, PKI platforms, and post-quantum-ready solutions to enterprises and governments. DigiCert and Entrust routinely compete for the same Fortune 500 and government RFPs.
• Sectigo: Sectigo is one of the largest commercial Certificate Authorities competing head-to-head with DigiCert in TLS/SSL, code signing, S/MIME, and private/managed PKI. The two are the only scaled commercial alternatives in the enterprise CA market and overlap closely in product breadth and customer segment.
• Let's Encrypt: Let's Encrypt is the dominant free, automated Certificate Authority powering ACME-based public TLS for millions of websites. While DigiCert serves paid enterprise workloads, Let's Encrypt sets the price floor and automation expectations that compress DigiCert's lower-tier TLS economics.
• Venafi (CyberArk): Venafi is the leading machine identity management platform for certificate lifecycle automation, overlapping heavily with DigiCert's Trust Lifecycle Manager and Software Trust Manager. Acquired by CyberArk in 2024, Venafi complements rather than replaces CA issuance, but competes for the same cert automation budget.
• Keyfactor: Keyfactor provides certificate lifecycle automation and PKI management, with strong presence in IoT and DevOps certificate use cases. It competes directly with DigiCert's Trust Lifecycle Manager and Device Trust Manager for enterprise cert automation RFPs.
• GlobalSign: GlobalSign is a long-standing Certificate Authority offering TLS, code signing, S/MIME, private PKI, and IoT identity — directly overlapping DigiCert's enterprise CA portfolio. Both serve regulated industries and compete on managed PKI and device identity.

Broad incumbents

• Cloudflare: Cloudflare provides free Universal SSL, Advanced Certificate Manager, and Cloudflare One, and is both a DigiCert customer (per logo wall and case study) and a competitor for website/edge security and bot management adjacent to DigiCert's TLS offerings.
• AWS Certificate Manager: AWS Certificate Manager offers free, auto-renewed public TLS certificates natively integrated with AWS workloads. As a hyperscaler-native incumbent, ACME sets a free pricing benchmark and pulls low-complexity DigiCert TLS demand into AWS-native automation.
• Microsoft Azure Key Vault / Managed HSM: Microsoft Azure Key Vault and Managed HSM offer native certificate storage, issuance, and PKI inside the Azure ecosystem. DigiCert ONE is available on Azure Marketplace, but Azure's native services compete for the same private PKI and key-management workloads within Azure-deployed enterprises.

Emerging players

• HashiCorp Vault: HashiCorp Vault provides PKI secrets engine and certificate issuance for cloud-native and DevOps workloads. It competes with DigiCert's Private CA and Trust Lifecycle Manager inside infrastructure teams that prefer to issue certificates from within their own secrets-management platform.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/digicert
• YouTubeyoutube.com/@DigiCert
• LinkedInlinkedin.com/company/digicert-inc-
• Facebookfacebook.com/digicert

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles13 records

Subsidiaries6 records

Funding overview

Funding rounds5 records

Investors5 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A8 records

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about DigiCert