WoTrus CA

What WoTrus CA does

WoTrus CA (沃通电子认证服务有限公司) is a privately held Chinese Certificate Authority founded in 2002 and headquartered in Shenzhen's Nanshan District, operating under multiple national regulatory licenses including the MIIT Electronic Certification Service License and the State Cryptography Administration's Electronic Certification Service Use Cryptography License. The company provides PKI-based digital certificate products and related security services, including DV/OV/EV SSL certificates, wildcard and multi-domain SSL certificates, IP SSL certificates, code signing certificates, document signing certificates, client certificates, SM2 (Guomi) national-algorithm SSL certificates, timestamping services, USB Key hardware, and WHQL certification services for Windows drivers.

WoTrus distinguishes itself through its pioneering SM2/RSA dual certificate service that simultaneously deploys Chinese national cryptographic standard (SM2/SM3/SM4) certificates alongside international RSA certificates, enabling cross-compatibility between domestic GM-algorithm browsers and international browsers — a configuration directly relevant to compliance with China's Cybersecurity Law and Cryptography Law. The company distributes its products through a self-service online store (buy.wosign.com), the WoTrus Cloud SaaS API platform launched in August 2022, the Huawei Cloud marketplace, and reseller partnerships with international brands including DigiCert, Entrust, GlobalSign, GeoTrust, CFCA, and Sectigo/Comodo.

The company serves government ministries and agencies across more than ten provinces, e-commerce platforms, financial and securities institutions, educational institutions, software developers, and individual website operators. With 51-100 employees and cited deployments across hundreds of thousands of websites, WoTrus operates a diversified certificate distribution business with pricing tiers ranging from ¥288 to ¥6,888+ per certificate annually, supported by 7x8 hour technical support and bundled security insurance on premium products.

Name

WoTrus CA

Legal name

沃通电子认证服务有限公司 (WoTrus CA Limited)

Website

https://evssl.cn

Company type

Private

Founded year

2002

Operating status

Operating

Headcount range

51–100 employees

Short description

WoTrus CA (沃通CA) is a Shenzhen-headquartered, MIIT-licensed Certificate Authority founded in 2002 that issues SSL, code signing, and SM2/RSA dual certificates to Chinese government agencies, e-commerce platforms, financial institutions, and SMBs via direct online sales, Huawei Cloud, and reseller partnerships.

Ownership category

akta.pro rank

Headquarters

HQ city

Shenzhen

HQ country

China

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Pricing tiers

Distribution channels3 records

Marketing channels4 records

Core offering

WoTrus CA is a licensed Certificate Authority (CA) that issues globally trusted SSL certificates (DV, OV, EV, multi-domain, wildcard, IP), code signing certificates (standard and EV), SM2/GM national cryptographic SSL certificates, document signing certificates, and client certificates under its WoSign brand. It also resells internationally branded certificates (DigiCert, GlobalSign, GeoTrust, CFCA, Sectigo/Comodo), provides timestamping services, WHQL certification assistance, USB Key hardware tokens, and the WoTrus Cloud SaaS API integration platform serving government, enterprise, and developer customers across China.

Product overview

WoTrus CA (沃通电子认证服务有限公司) is a PKI-based internet security product and service provider established in 2002, holding official CA licenses from China's MIIT and State Cryptography Administration. The company offers a comprehensive portfolio of digital certificate products centered on SSL certificates (including DV, OV, EV, IP SSL, multi-domain, wildcard, and SM2 variants), code signing certificates (EV and standard), document signing certificates, client certificates, USB Key encryption hardware, and timestamping services. A key differentiator is its pioneering "SM2/RSA dual certificate" service that simultaneously deploys both GM algorithm and RSA algorithm certificates to achieve compatibility across both domestic and international browsers. The company also provides supplementary services including WHQL certification for Windows drivers and a cloud-based SaaS integration platform. WoTrus CA acts as a reseller and partner for international brands including DigiCert, GlobalSign, GeoTrust, and Sectigo/Comodo, while also promoting its own WoSign brand of GM SSL certificates.

Differentiator

Problem solved

Functional benefit

Brands

• 沃通云: SaaS platform integrating certificate services, timestamp services, and PDF signature services launched in August 2022.

Products and services

• SSL Digital Certificates (SSL数字证书) Globally trusted SSL certificates issued under the WoSign brand by root CAs, supporting all browsers, mobile terminals, HTTPS encryption, iOS/Android apps, and applets. Available in DV, OV, and EV validation levels for websites requiring HTTPS encryption and identity verification.
• Code Signing Certificates (代码签名证书) Digital certificates for signing software code to verify publisher identity and ensure code integrity, including standard code signing and Extended Validation (EV) code signing certificates for Windows drivers, applications, and browser plugins.
• SM2/GM SSL Certificates (国密SSL证书) SSL certificates using China's national GM (Guomi) cryptographic algorithms (SM2/SM3/SM4), including SM2 SSL V1, V3, and V4 certificate versions with support for dual certificate deployment for international compatibility. Designed for compliance with the Chinese Cryptography Law.
• Document Signing Certificates (文档签名证书) Digital certificates for signing electronic documents, enabling authentication and integrity verification for enterprise and government document workflows.
• Client Certificates (客户端证书) Digital certificates for client-side authentication supporting automatic issuance, automated signing, and centralized management for enterprise identity management.
• USB Key Encryption Disk (USB Key加密盘) Hardware device providing secure key storage and encrypted disk functionality for protecting digital certificates and cryptographic keys used with code signing and other PKI applications.
• Timestamping Services (时间戳) Trusted timestamping service providing verifiable evidence that a document existed at a specific point in time and that its contents have not been altered since.
• WHQL Certification Service (WHQL认证服务) Windows Hardware Quality Labs (WHQL) certification service assisting developers in completing Microsoft's WHQL testing and certification for Windows drivers, provided as a one-stop bundle with EV code signing certificates.
• SM2/RSA Dual Certificate Service (SM2/RSA双证书服务) Innovative service deploying both SM2 and RSA SSL certificates simultaneously with automatic switching to ensure compatibility with both domestic Chinese browsers using GM algorithms and international browsers using RSA algorithms.
• WoTrus Cloud SaaS Integration Platform (沃通云SaaS对接平台) Cloud-based SaaS integration platform providing unified API access to certificate services, timestamping services, and PDF signature services, enabling customers to integrate WoTrus CA's security services into their own applications.

Quantifiable outcome

• GM SSL certificates deployed across government websites in over a dozen provinces and cities
• +1 more outcomes

Named customers7 records

Segments6 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

One partnership is on record.

• Huawei Cloud (华为云)notableChannel Partner/ Reseller/ DistributorWoSign SSL certificate products are listed on Huawei Cloud marketplace, enabling direct procurement and one-stop security product solutions for Huawei Cloud customers. The partnership provides integrated security product procurement and flexible certificate resource management.

Recent moves4 records

Expansion highlights5 records

Direct peers

• CFCA (China Financial Certification Authority): State-affiliated Chinese CA dominating the financial sector and increasingly government PKI. WoTrus also resells CFCA certificates, but CFCA is the most direct competitor for high-assurance government and financial-sector mandates.
• DigiCert: The largest global commercial Certificate Authority and a direct competitor in the OV/EV SSL and code-signing markets. WoTrus also acts as a DigiCert reseller in China, making it simultaneously a partner and substitute.
• Let's Encrypt: Free, automated, open CA issuing DV SSL certificates at massive scale. The defining competitive force commoditizing the entry-level SSL tier that WoTrus also serves with its DV product.
• iTrusChina (中认环宇 / TrustAsia): Domestic Chinese CA offering SSL, code signing, and PKI services for the Chinese market. Closest like-for-like domestic peer competing for the same government, e-commerce, and enterprise certificate buyers.
• Entrust: Identity and certificate authority offering SSL/TLS, code signing, and PKI for enterprises and governments. Competes with WoTrus in the enterprise/regulated segment and is a distributed partner brand in WoTrus's portfolio.
• Sectigo (Comodo CA): Global commercial CA offering DV/OV/EV SSL, code signing, and IoT/PKI products with aggressive pricing. Competes head-on with WoTrus for SMB and mid-market certificate customers and is also a reseller partner.
• GlobalSign: Long-established WebTrust-certified CA providing SSL, code signing, and PKI solutions worldwide. WoTrus resells GlobalSign-branded certificates in China while also competing in the broader PKI services space.

Broad incumbents

• GoDaddy: Mass-market domain and SSL reseller bundling certificates with hosting. Competes for SMB certificate buyers via a broader web services portfolio, including low-cost DV SSL offerings that overlap with WoTrus's DV tier.

Emerging players

• Venafi: Machine identity management and certificate lifecycle platform. Adjacent competitor addressing enterprise PKI orchestration, complementing rather than directly replacing CAs but increasingly competing for the same enterprise PKI budget.
• Keyfactor: Certificate lifecycle automation and PKI-as-a-service platform targeting enterprises. Competes for the orchestration and managed PKI layer adjacent to WoTrus's certificate issuance business.

Market position

Strengths4 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about WoTrus CA