Pos Digicert

What Pos Digicert does

Pos Digicert Sdn Bhd is Malaysia's premier licensed Certification Authority (CA), operating under the Digital Signature Act 1997 and regulated by the Malaysian Communications and Multimedia Commission (MCMC) under CA License No. LPBP-1/2020(4). Founded in 1998 as Digicert Sdn Bhd and rebranded in October 2016 after becoming a wholly-owned subsidiary of Pos Malaysia Berhad, the company provides Public Key Infrastructure (PKI) services including digital certificates, digital signatures, electronic identity verification, and certificate lifecycle management. Its product portfolio spans user and server certificates (Digicert User Certificate, Biz Client, iVest Server), SSL/TLS certificates resold in partnership with GlobalSign and Entrust, enterprise signing solutions (SignMe, SigniFlow), mobile identity (iDsaya), biometric eKYC, time stamping, eStamping, and sector-specific offerings such as eCredentia (education credentials), FATCA-IDES compliance, eSPA (housing transactions with KPKT), and dedicated e-Invoice certificates for IRBM compliance.

The technology backbone relies on PKI secured through Pos Digicert's HSM infrastructure, with both soft certificates (server-stored .p12) and roaming certificates (cloud/HSM-stored, API-accessible). The MYCRS portal provides self-service certificate request, renewal, and revocation, integrated with FPX and credit card payment rails, and exposes a web service API for embedding certificate-based authentication into client applications. The company operates a network of Registration Authorities across Malaysia for identity validation, supplemented by direct counter services at its Cyberjaya headquarters. Operational standards include WebTrust, ISO/IEC 27001:2013 (ISMS), ISO 9001 (QMS), and TMMi Level 3 — making it the first Malaysian CA certified under the test maturity model. The firm also operates a Uganda CA subsidiary, extending its license model outside Malaysia.

Revenue is generated primarily through recurring subscription fees for certificate issuance and renewal (annual terms, 1 month to 1 year validity) priced at the certificate level — RM 1,500+SST for e-Invoice soft certificates and RM 15,000+SST for roaming certificates — supplemented by enterprise software testing services (IV&V, functional testing, test automation) and bespoke identity verification work. Customer concentration is anchored by Malaysian government mandates (LHDN e-Filing, KPKT eSPA), financial institutions (PKI for internet banking), higher education institutions (eCredentia), and the broad enterprise base required to comply with IRBM e-Invoice regulations. Distribution runs through the MYCRS self-serve portal, RA resellers, direct enterprise sales, and global SSL partner channels, supported by WebTrust/ISO-certified operations and active engagement at industry events including AIBP 2025 and CYDES 2025.

Name

Pos Digicert

Legal name

Pos Digicert Sdn Bhd

Website

https://posdigicert.com.my

Company type

Private

Founded year

1998

Operating status

Operating

Short description

Pos Digicert Sdn Bhd is Malaysia's licensed Certification Authority providing PKI-based digital certificates, digital signatures, eKYC, and certificate lifecycle management. Serving government agencies, financial institutions, higher education, and enterprises under Malaysia's e-Invoice and eSPA mandates as a Pos Malaysia Berhad subsidiary.

Ownership category

akta.pro rank

Product category

Digital Certificate Services

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Device Identity & Certificate-Based Authentication (PKI) (BPAMAEAL)

Keywords

• Digital certificate authority
• Public key infrastructure
• Digital signature services
• Identity verification
• Certificate lifecycle management

Headquarters

HQ city

Sepang

HQ country

Malaysia

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Infrastructure, Personnel, Marketing or Sales, Operations

Revenue model

1. Digital Certificate Issuance and Renewal: Revenue generated from issuing and renewing various types of digital certificates including user certificates, SSL certificates, and roaming certificates. Certificates are sold with validity periods of 1 month to 1 year.
2. e-Invoice Digital Certificates: Digital certificates specifically for e-Invoice compliance as mandated by Malaysia's Inland Revenue Board (IRBM). Offered as Soft Certificates (stored on server) and Roaming Certificates (stored at Pos Digicert's HSM).
3. Certificate Lifecycle Management Services: Ongoing management services for certificates including issuance, renewal, revocation, and validation services (CRL, OCSP).
4. eKYC and Identity Verification Services: Electronic know your customer services for verifying identities before digital certificate issuance, including biometric and document verification.
5. Testing Services (IV&V and Functional Testing): Independent software testing services including test automation, functional testing for desktop and mobile applications, leveraging TMMi Level 3 certified processes.

Pricing tiers

Go-to-market motion3 records

Distribution channels6 records

Marketing channels7 records

Core offering

Pos Digicert is Malaysia's premier Certification Authority operating a Public Key Infrastructure (PKI) under the Digital Signature Act 1997. It issues and manages digital certificates (user, SSL, roaming and server certificates), provides digital signature and e-stamping solutions, electronic identity verification (eKYC), and certificate lifecycle management services to government agencies, financial institutions, higher education bodies, and businesses in Malaysia. The company also resells GlobalSign and Entrust SSL/TLS certificates as a channel partner.

Product overview

Pos Digicert Sdn Bhd is Malaysia's premier Certification Authority providing a comprehensive PKI-based digital identity and security ecosystem. The portfolio centers on certificate lifecycle management with products including digital certificates (User Certificate, Biz Client, SSL via GlobalSign partnership), digital signing solutions (SignMe, SigniFlow), identity verification (eKYC, iDsaya app), and sector-specific offerings (eCredentia for education, e-Invoice certificates, eSPA for housing). The CLM platform manages the full certificate lifecycle while supporting services include IV&V testing, Functional Testing, and Time Stamping Authority. The MYCRS self-service portal enables certificate requests, renewals, and management. The company operates under Digital Signature Act 1997 and provides both soft certificates (server-stored) and roaming certificates (HSM-stored cloud-based) to serve diverse enterprise and individual needs.

Differentiator

Problem solved

Functional benefit

Products and services

• Certificate Lifecycle Management (CLM) Comprehensive management solution for digital certificates covering issuance, renewal, revocation, and lifecycle tracking to address SSL validity changes and certificate management needs. Targeted at enterprises needing automated certificate lifecycle operations.
• eKYC (Identity Verification) Electronic Know Your Customer service using biometric authentication and facial recognition to verify user identity and documents, preventing identity fraud. Used during digital certificate issuance and for general identity verification use cases.
• eCredentia Solution for securing education certificates and scrolls issued by higher education institutions using digital signature and date/time stamping with secure QR code verification. Relying parties can verify document authenticity in Adobe PDF Reader.
• eStamping Electronic stamping service for property and financial documents, part of Pos Digicert's digital signature ecosystem for legally valid document execution.
• iDsaya Mobile App Mobile application providing secure digital identity, enabling passwordless authentication and digital signing with digital certificate PIN and TOTP management. Used for digital signing transactions.
• SignMe Digital signing solution enabling legally valid electronic signatures for documents and transactions under the Digital Signature Act 1997.
• SigniFlow Digital signature workflow solution for enterprise document signing processes.
• Digicert User Certificate Digital identity certificates for individuals enabling secure online authentication and digital signing.
• SSL Certificate (GlobalSign and Entrust) Publicly trusted SSL/TLS certificates distributed in partnership with GlobalSign APAC and Entrust for website security and encrypted communications. Maximum 397-day validity per Apple/Google root store policies.
• Digicert Biz Client Business client certificate solution for secure business transactions and communications.
• iVest Server Server-based certificate solution for secure server authentication and encrypted communications.
• Digicert Signature and Authentication Service Digital signature and verification service enabling secure document signing and authentication.
• Key Management Centre Service Centralized cryptographic key lifecycle management service for security and key custody.
• eSPA Digital Signing Electronic Sale and Purchase Agreement signing solution for Malaysia's housing industry, enabling legally valid digital signatures under Digital Signature Act 1997. Integrated with KPKT's eSPA ecosystem and HIMS platform.
• Digital Certificate for e-Invoice Digital certificates for e-Invoice data signing before submission to Malaysia's IRBM. Available as Soft Certificate (server-based .p12 format) and Roaming Certificate (HSM-stored, API-accessible). Required for compliance with Malaysia's phased e-Invoice mandate.
• FATCA-IDES Initiatives Foreign Account Tax Compliance Act (FATCA) reporting solution for financial institutions' compliance with US tax reporting obligations via the IRS International Data Exchange Service (IDES).
• Functional Testing Service Software testing service validating system functionality against requirements, covering desktop and mobile applications, main functions, usability, and error conditions. Delivered under TMMi Level 3 certified processes.
• IV&V (Independent Verification and Validation) Independent test automation services to increase testing productivity with specialised tools for test execution, comparison of results, and faster deployment rates.
• Time Stamping Authority (TSA) Time stamping service providing verifiable proof of document existence at a specific point in time, governed by Pos Digicert's TSAPPS policy.
• MYCRS Portal (Certificate Request System) Self-service web portal for purchasing and renewing digital certificates online, tracking certificate status, and managing certificate lifecycle including PIN reset and revocation requests. Supports FPX and credit card payments.

Quantifiable outcome

• 6 million digital certificate units generated for e-Filing system - highest usage of digital certificates in Malaysia
• +2 more outcomes

Named customers5 records

Segments5 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration6 records

Feature7 records

Partnerships

Two partnerships are on record, tiered core.

• GlobalSign APACcoreGTM or Marketing Partner · 9 July 2025Pos Digicert collaborates with GlobalSign APAC for SSL certificates and Certificate Lifecycle Management (CLM) solutions. Joint participation in AIBP Conference & Exhibition 2025 (Booth S09) at W Kuala Lumpur showcased SSL and CLM offerings, addressing upcoming SSL validity changes. Partnership focuses on addressing enterprise needs for automation and trust infrastructure.
• EntrustcoreChannel Partner/ Reseller/ DistributorSSL certificate partnership where Entrust issues publicly trusted SSL/TLS certificates to Pos Digicert customers. As of August 31, 2020, Entrust stopped issuing 2-year SSL certificates due to Apple/Google root store policies, now offering maximum 397-day validity certificates.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• DocuSign: DocuSign is the global leader in SaaS-based electronic signatures and agreement workflows. While not a licensed CA, it competes with Pos Digicert's SignMe and SigniFlow products in the digital signing market and is a broader-portfolio incumbent in enterprise e-signature.
• IDEMIA: IDEMIA is a global leader in digital identity, biometric authentication, and secure credentialing for governments and enterprises. It overlaps Pos Digicert's eKYC and digital identity offerings at a much larger scale, serving national ID, banking, and telecom customers.

Direct peers

• Entrust: Entrust is a global identity and SSL/TLS certificate provider that competes directly with Pos Digicert in the SSL market. It is also a partnership supplier, issuing publicly trusted SSL certificates distributed through Pos Digicert.
• WISeKey: WISeKey is a Swiss-based PKI and digital identity provider offering SSL, IoT, and trust services with roots in Europe and emerging markets. It competes with Pos Digicert in the regional CA and digital identity space, particularly for government and enterprise PKI deployments.
• DigiCert: DigiCert is the world's largest commercial Certification Authority, issuing publicly trusted TLS/SSL and enterprise PKI certificates globally. It is the most direct competitor to Pos Digicert's certificate lifecycle and SSL business, operating at far greater scale and with proprietary roots.
• Sectigo: Sectigo is a major commercial CA issuing SSL, enterprise PKI, and IoT certificates worldwide. It competes head-to-head with Pos Digicert's SSL/PKI offerings and is one of the global alternatives customers evaluate alongside DigiCert and GlobalSign.
• GlobalSign: GlobalSign is a global CA and identity services provider, and a direct SSL/PKI competitor to Pos Digicert. It is also an active partner, reselling SSL certificates to Pos Digicert customers through GlobalSign APAC.

Others

• Adobe: Adobe operates the Approved Trust List (AATL) ecosystem that recognizes CAs like Pos Digicert for PDF digital signatures, and Adobe Acrobat is the primary verification surface for Pos Digicert-signed documents. Adobe is an ecosystem enabler rather than a competing CA.
• Thales: Thales (via its Imperva/Datacard and HSM heritage) provides hardware security modules and PKI infrastructure that Pos Digicert relies on to host roaming certificates and root signing keys. It is an enabling technology and infrastructure provider rather than a direct CA competitor.

Regional players

• eMudhra: eMudhra is India's largest licensed Certifying Authority, offering digital signature certificates, PKI, and trust services under India's IT Act. Comparable to Pos Digicert as a national CA serving regulated digital signature use cases, but operating primarily in India rather than Southeast Asia.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks4 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/posdigicert

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Pos Digicert