Trustasia

What Trustasia does

TrustAsia (亚洲诚信; legal entity 亚数信息科技（上海）有限公司) is a private Chinese electronic certification services provider founded in 2013 and headquartered in Shanghai, with a Beijing branch. It operates as a dual-credential Certificate Authority holding both the State Cryptography Administration's commercial cryptography usage license and six WebTrust international audit certifications — making it the only CA in China with this dual domestic-international standing. The company sells and manages SSL/TLS certificates (DV, OV, EV, wildcard, multi-domain) across its own TrustAsia brand and under distribution rights for Symantec/DigiCert Secure Site, GeoTrust, Thawte, GlobalSign, and CFCA, alongside code signing, document signing, and S/MIME email certificates. TrustAsia also operates one of only eight global Certificate Transparency (CT) log operators and the sole CT operator in the Asia-Pacific region, a structural data position providing visibility into all globally issued TLS certificates.

The company's product architecture is layered. At the base are commercial cryptography certificates supporting SM2/SM3/SM4 (GM) algorithms and post-quantum cryptography (ML-KEM, ML-DSA, SLH-DSA) through the openHiTLS suite. Certificate lifecycle management is delivered via three platforms: CertCloud (cloud-based, OpenAPI/ACME/PartnerAPI/command-line; recently upgraded to CaaS 2.0 in March 2026 targeting the 47-day validity regime), CertManager (on-premises), and the MPKI enterprise system. Security products include the HiHTTPS gateway (integrated with openHiTLS) and the MySSL vulnerability and anomaly monitoring service. For emerging IoT, TrustAsia operates as the first Asia-Pacific Matter Open PAA (Product Attestation Authority), issuing Device Attestation Certificates for Matter-certified smart home devices integrating with Apple HomeKit, Google Home, and Amazon Alexa. Hardware products include HSG security gateways, VSignBox tokens, and IoT TrustManager for key burning during device manufacturing.

TrustAsia generates revenue primarily through subscription and per-certificate pricing denominated in CNY, ranging from CNY 1,900/year for TrustAsia DV certificates to CNY 38,000/year for Symantec Secure Site Wildcards, with multi-year discounts. The CaaS subscription model provides 1-6 year contracts with automated reissuance. GTM is multi-channel: direct enterprise field sales, channel agents, and embedded API/distribution partnerships with Baidu Cloud, Wangsu Technology, WestDigital, and Information Security Times, plus the CFCA exclusive distribution for cloud/hosting channels. Primary customer segments are government, financial institutions, internet/cloud platforms (covering 98% of Chinese banks via CFCA), and IoT/smart home manufacturers; secondary segments include education, healthcare, and software developers. The company holds MIIT 'Little Giant' specialized-and-novel enterprise status and high-tech enterprise certification, and in February 2026 completed a ~CNY 10M trade-secret pledge financing — the first such structure in Shanghai's internet security sector.

Name

Trustasia

Legal name

亚数信息科技（上海）有限公司

Website

https://trustasia.com

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

11–50 employees

Short description

TrustAsia (亚洲诚信) is a Shanghai-based, dual-licensed Certificate Authority providing SSL/TLS, code signing, document signing, and S/MIME certificates under its own brand and via Symantec/DigiCert, GeoTrust, CFCA, and GlobalSign, plus CertCloud lifecycle automation, HiHTTPS security gateways, and Asia-Pacific's first Matter Open PAA for IoT device authentication, serving government, finance, internet/cloud, and smart-home manufacturers.

Ownership category

akta.pro rank

Product category

Certificate Authority Services

NAICS

Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Device Identity & Certificate-Based Authentication (PKI) (BPAMAEAL)

akta.pro secondary industry

DRM, Key Management & License Services (Multi-DRM, KMS) (MPAHALAK)

Keywords

• SSL certificate services
• PKI infrastructure
• Certificate lifecycle management
• Code signing certificates
• Digital certificate authority

Headquarters

HQ city

Shanghai

HQ country

China

HQ region

Asia

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Infrastructure, Personnel, Operations, Marketing or Sales

Revenue model

1. SSL/TLS Certificate Sales: One-time and recurring sales of DV, OV, and EV SSL/TLS certificates across multiple brands including TrustAsia, DigiCert/Secure Site, GeoTrust, CFCA, and GlobalSign. Revenue generated per certificate per year, with discounts for multi-year and multi-certificate purchases.
2. Code Signing Certificate Sales: Sales of standard and EV code signing certificates for Microsoft, Java, Adobe AIR, Android applications, and Office/VBA. Includes certificates from Symantec/DigiCert brands.
3. Document Signing Certificate Sales: CFCA document signing certificates for PDF and Office document digital signing, available in personal and enterprise editions. Supports electronic documents achieving legal equivalence with physical signatures.
4. S/MIME Email Certificate Sales: Personal and enterprise S/MIME email certificates providing email digital signing and encryption capabilities for electronic communications.
5. Certificate Management Platform Subscriptions: CertCloud, CertManager, and HiHTTPS gateway products provide certificate lifecycle automation as subscription services with multi-year contract options.
6. CaaS (Certificate as a Service) Subscription: Subscription-based model providing automated multi-year certificate issuance and management. Users subscribe for 1-6 years and receive continuous certificate delivery with automated renewal during the subscription period.
7. Security Gateway and Hardware Products: HiHTTPS security gateway, HSG security gateway, and related security hardware products providing HTTPS management and commercial cryptography capabilities.
8. Matter PKI/DAC Certificate Services: IoT TrustManager platform and SaaS Matter PKI platform providing device authentication certificates (DAC) and key management for smart home and IoT device manufacturers.

Pricing tiers

Go-to-market motion4 records

Distribution channels7 records

Marketing channels9 records

Core offering

TrustAsia is a PKI and digital certificate authority providing SSL/TLS certificates (DV, OV, EV, wildcard, multi-domain), code signing certificates, document signing certificates, and S/MIME email certificates across TrustAsia, Symantec/DigiCert, GeoTrust, CFCA, and GlobalSign brands. The company also offers certificate lifecycle management platforms (CertCloud, CertManager, MPKI) and security products (MySSL monitoring, HiHTTPS gateway, Matter PKI for IoT) to automate certificate provisioning, renewal, and monitoring for enterprises, government, and financial institutions.

Product overview

TrustAsia (亚数信息科技（上海）有限公司) is a digital certificate and PKI technology company providing a comprehensive portfolio of certificate and security products. The core offerings include SSL/TLS certificates (TrustAsia, Symantec/DigiCert, GeoTrust, CFCA, GlobalSign brands) across DV, OV, EV, wildcard, and multi-domain types; code signing and document signing certificates; and S/MIME email certificates. The certificate management infrastructure consists of CertCloud (cloud-based automated lifecycle platform), CertManager (on-premises management), and MPKI (enterprise certificate management) platforms. Security products include MySSL security monitoring, HiHTTPS security gateway (with openHiTLS post-quantum cryptography integration), and national cryptographic (SM) solutions (HSG security gateway, SM certificates, GM detection, SM browsers). The CaaS (Certificate as a Service) subscription model bundles automated certificate management with the underlying platforms. For IoT, the Matter PKI platform provides device attestation certificates for Matter smart home certification. Code/document signing tools include VSignBox, VSignPDF, and VSign. PKI infrastructure products include PKI Client, CloudPKI System, and KeyManager. The company serves enterprises, government, finance, education, and IoT/smart home industries.

Differentiator

Problem solved

Functional benefit

Products and services

• TrustAsia SSL/TLS Certificates

Quantifiable outcome

• Reduced certificate management workload through automation, eliminating human errors in renewal processes
• +3 more outcomes

Named customers9 records

Segments8 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

AI capability3 records

Feature9 records

Partnerships

14 partnerships are on record, tiered core, strategic and minor.

• openHiTLS Community (华为及产学研机构)coreTechnology or Integration · 5 December 2025Deep technical integration partnership where TrustAsia's HiHTTPS security gateway was fully integrated with the openHiTLS open-source cryptographic suite developed by Huawei and 15+ academic-industry partners. openHiTLS provides post-quantum cryptography (ML-KEM, ML-DSA, SLH-DSA), commercial cryptography (SM2/SM3/SM4), and high-performance cryptographic implementations.
• GLEIF (全球法人识别编码基金会)strategicStrategic or Co-development Partner · 21 November 2025GLEIF CEO Alexandre Kech visited TrustAsia headquarters in November 2025 to explore digital trust collaboration. Both organizations are working to establish global digital trust infrastructure foundations.
• CFCA (中国金融认证中心)coreStrategic or Co-development Partner · 16 June 2017Strategic partnership where TrustAsia became the exclusive operator of CFCA SSL certificates and document signing certificates in the cloud/hosting industry in China. TrustAsia distributes CFCA's domestic commercial cryptography certificates including OV, EV, and document signing certificates. CFCA is a first-tier domestic CA and information security solutions provider, with 98% of China's banks using CFCA products.
• Connectivity Standards Alliance (CSA) / CMGCcoreStrategic or Co-development PartnerTrustAsia is the first and only Asia-Pacific Matter Open PAA (Product Attestation Authority), providing device authentication certificates (DAC) for Matter IoT devices. CTO Yu Ning serves as Matter TIG Chinese Interpretation Task Group leader. TrustAsia led development of 《智能家居照明应用及跨生态互操作技术要求》group standard through CMGC.
• 上海交通大学 (Shanghai Jiao Tong University)strategicStrategic or Co-development PartnerTrustAsia established a postdoctoral/doctoral expert workstation with SJTU in November 2024, conducting joint research on digital signatures and AIGC content security. Vision to embed TrustAsia-signed trust roots in all smartphones produced in China for C2PA digital content provenance.
• 信安世纪 (Information Security Times)coreTechnology or IntegrationIntegration partnership where TrustAsia's CaaS/CLM platform has been connected with Information Security Times' security gateway products, enabling automated certificate deployment through hardware security gateways.
• 西部数码 (WestDigital / xiandui)coreChannel Partner/ Reseller/ DistributorStrategic cooperation enabling one-click SSL certificate application, deployment, and management for WestDigital's hosting customers. TrustAsia provides automated certificate issuance integrated directly into WestDigital's backend system.
• 百度云 (Baidu Cloud)coreChannel Partner/ Reseller/ DistributorFull API-based cooperation with Baidu Open Cloud and Baidu CDN to provide one-click HTTPS deployment for Baidu Cloud customers through automated TrustAsia certificate issuance.
• 网宿科技 (Wangsu Technology)coreChannel Partner/ Reseller/ DistributorStrategic cooperation enabling one-click HTTPS deployment for Wangsu CDN and cloud acceleration customers through automated certificate services.
• 深信服 (Sangfor)minorChannel Partner/ Reseller/ DistributorDeep strategic cooperation with Sangfor for joint market development in enterprise security and certificate management solutions.
• DigiCert (including acquired Symantec brands)coreChannel Partner/ Reseller/ DistributorPlatinum strategic partner and Asia-Pacific exclusive distributor of DigiCert, Secure Site, GeoTrust, Thawte, and GlobalSign SSL/TLS certificates and code signing certificates. Represents the full portfolio of international certificate brands.
• 上海市商用密码行业协会coreStrategic or Co-development PartnerTrustAsia led the development of the group's first standard for electronic signature certification certificate format (T/SHCCIA 001-2026) through this association, addressing regulatory compliance requirements for electronic signature OID in certificates.
• 上海浦东智能照明联合会 (SILA)coreStrategic or Co-development PartnerTrustAsia participates in SILA's intelligent lighting standardization initiatives, leading the development of 《智能家居照明应用及跨生态互操作技术要求》standard for smart home lighting cross-ecosystem interoperability.
• 国家知识产权运营（上海）国际服务平台strategicOthersCollaborated with the national IP operation platform for commercial secret pledge financing evaluation, assessing TrustAsia's trade secrets (algorithm models, security architecture, system engineering methodology) from dimensions of technical advancement, application stability, and sustainable economic value.

Scale indicators12 records

Recent moves8 records

Expansion highlights7 records

Direct peers

• CFCA (China Financial Certification Authority): China's primary domestic CA for the financial sector, serving 98% of China's banks. TrustAsia is CFCA's exclusive operator for SSL/document signing certificates in the cloud/hosting segment, creating both direct partnership alignment and competitive overlap in adjacent verticals.
• DigiCert: The world's largest commercial CA, providing SSL/TLS, code signing, and PKI solutions. TrustAsia is DigiCert's APAC platinum strategic partner and Asia-Pacific exclusive distributor, making DigiCert both a key partner and the dominant competitive benchmark TrustAsia measures against.
• Entrust: Global certificate authority and PKI solutions provider serving enterprises and governments with SSL/TLS, PKI, and digital signing products. Competes with TrustAsia in enterprise PKI and government/regulated PKI segments.
• WoTrus (沃通CA): Chinese commercial CA providing domestic and international SSL/TLS certificates with WebTrust audits and SM/RSA algorithm support. A direct domestic competitor to TrustAsia in the Chinese SSL market.
• Sectigo: Major global commercial CA providing SSL/TLS, code signing, and PKI services with a similar multi-brand portfolio approach. Sectigo competes directly with TrustAsia in the broader market for automated certificate management and CLM platforms.
• GlobalSign: Long-established global CA offering SSL/TLS, code signing, and IoT/PKI solutions including device identity for IoT. TrustAsia distributes GlobalSign as a brand partner and competes in the same SSL and IoT PKI spaces.

Emerging players

• ZeroSSL: Free automated SSL certificate provider with ACME support and REST API. Provides price-competition pressure on TrustAsia's small-business/individual certificate offerings and serves the same API-first developer persona.
• Let's Encrypt: Free, automated, open-source CA that pioneered ACME-based certificate automation and dramatically expanded the addressable market for CLM tools. Defines the automation UX baseline that TrustAsia's CaaS 2.0 competes against in price-sensitive segments.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

Compliance14 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Trustasia