You’ve just received your SSL certificate files and notice two extensions: .crt and .cer. Your server expects one, your certificate authority (CA) sent the other. Before you start troubleshooting, here’s the short answer: both file extensions hold the same X.509 certificate data, and the difference is mostly a naming convention. But “mostly” is doing some […]
At SSL Dragon, we work with SSL certificates across a wide range of environments, from simple single-domain sites to modern stacks where TLS is deliberately spread across multiple layers. Over time, that range makes one thing clear: TLS itself is stable, but the way it’s understood hasn’t kept pace with its evolution. Today, HTTPS commonly […]
On January 24, 2026, the CA/Browser Forum approved a ballot to fully sunset the remaining uses of SHA-1 signatures within the public certificate ecosystem. The change targets edge cases that survived long after SHA-1 was deprecated from regular TLS certificates. This is not a reaction to a new cryptographic break. SHA-1 has been considered unsuitable […]
In 2026, the internet is no longer just a utility; it is the cognitive backbone of global commerce. Behind every AI agent, immersive 6G experience, and mission-critical app lies a web host that has evolved far beyond simple file storage. The industry has shifted from selling “space and speed” to providing “intelligence and sovereignty.” With […]
With over 112 million certificates securing the web and 99% of Chrome traffic encrypted, we are living in the age of HTTPS. But what lies behind the padlock? We’ve compiled 12 critical SSL statistics for 2026 to help you navigate this crowded landscape. These insights go beyond simple adoption rates to explore usage patterns, market […]
Every website needs an SSL certificate now, but not all certificates work the same way. If you’re on shared hosting, your provider probably gave you a “free SSL certificate.” The thing is, this shared SSL certificate comes with some serious drawbacks that could hurt your business. This article explains what a shared SSL certificate actually […]
For over three decades, SSL and TLS protocols have protected billions of online transactions. What started as Netscape’s ambitious security project in 1994 evolved into today’s sophisticated encryption standards. This SSL history spans six major protocol versions, countless security improvements, and a fundamental shift in how we think about web security. Understanding SSL/TLS versions isn’t […]
HTTPS is now a default expectation on the web. But while encryption has become the baseline for online security, paying for SSL certificates has not. At SSL Dragon, we know exactly where SSL certificates are actually being bought, and want to give you a unique glimpse into the geographical distribution of paid encryption. In our […]
The Internet’s trust layer has come a long way since certificates lived quietly in the background. Back then, SSL wasn’t something teams tracked often. You bought a certificate, installed it on a server, and moved on. If the site stayed up, trust was assumed. Browsers were forgiving, infrastructure changed slowly, and certificate management felt closer […]
Code-signing certificates will soon get much shorter lifespans. A new industry rule approved on 17 November 2025 cuts their maximum validity from 39 months to 460 days, effective 1 March 2026. The change appears in the updated Code Signing Baseline Requirements v3.10.0.
