Code-signing certificates will soon get much shorter lifespans. A new industry rule approved on 17 November 2025 cuts their maximum validity from 39 months to 460 days, effective 1 March 2026. The change appears in the updated Code Signing Baseline Requirements v3.10.0.
Three of London’s most high-profile councils were thrown into disruption last week after a cyberattack struck their shared IT systems, knocking critical services offline and forcing an urgent response from national security agencies.
When you order an SSL/TLS certificate, the Certificate Authority won’t just hand it over. They need proof you actually control the domain you’re securing. That’s where Domain Control Validation (DCV) comes in. It’s the verification process that confirms domain ownership before any certificate gets issued. This isn’t just bureaucratic red tape. DCV prevents attackers from […]
You’re installing an SSL certificate on your server, and suddenly you’re stuck. The configuration asks for a “CA Bundle” file, and you’re not sure what it is or where to find it. You’re not alone—this trips up plenty of people during SSL installation. CA Bundles aren’t complicated once you understand what they do. In this […]
Every time you see that padlock icon in your browser’s address bar, a certificate authority is working behind the scenes. These organizations are the invisible guardians of internet security, verifying identities and enabling the encrypted connections we depend on daily. But what exactly is a certificate authority, and why does it matter? Let’s explore how […]
Code signing leverages public key infrastructure (PKI) to serve as your software’s digital passport. Through digital signatures, it creates cryptographic proof of authenticity and integrity. It authenticates you as the publisher and ensures code integrity by proving your code hasn’t been tampered with since you released it. When users download your software, they’re trusting you […]
Managing SSL/TLS certificates used to be straightforward—order one, install it, and forget about it for a year or three. Those days are over. With certificate validity periods shrinking dramatically (Apple’s 47-day proposal has been adopted by the CA/Browser Forum for 2029), the choice between manual vs automated certification isn’t just about convenience anymore. It’s about […]
Every day, millions of websites, applications, and devices rely on digital certificates to prove they are who they say they are. These certificates create the padlock icon in your browser, encrypt your email, and verify that software updates aren’t tampered with. But here’s the problem: certificates don’t last forever. They expire. They get compromised. And […]
Every enterprise today depends on secure communication and data integrity. Public Key Infrastructure (PKI) forms the foundation of that digital trust, enabling encryption, authentication, and secure data exchange across systems and users. Enterprise PKI extends this framework to manage thousands of digital certificates used across websites, email systems, networks, and connected devices. When certificates aren’t […]
SSL/TLS certificates keep your website and services secure—but managing them manually is tedious and risky. That’s where the ACME protocol comes in. Short for Automated Certificate Management Environment, ACME automates the issuance, renewal, and revocation of certificates, eliminating manual work and reducing the chance of expired certificates taking your site offline. Originally developed by the […]
