New: a quick SSL check on the Tools page, plus free expiry alerts
The Tools page now has a quick SSL check, and our free expiry monitor emails you 30, 14 and 3 days before a certificate expires - including ones bought elsewhere.
Home›Updates
Updates
Latest industry news
What's changing in SSL/TLS - CA/Browser Forum rules, browser changes and advisories - and what it means for your certificates.
eMudhra exits the global TLS certificate business; Indian DSC and eSign continue
After the weak-key incident, eMudhra says it will leave the global SSL/TLS market. Its Indian Digital Signature Certificates, eSign and document-signing products continue.
eMudhra intermediate CA keys compromised: what to check on your servers
Eight eMudhra intermediate CA keys were found to be weak and are now blocked by every major browser. Most websites are unaffected - here is how to check yours in two minutes.
Next step on 15 March 2027: 100-day certificates and 100-day domain checks
Under Ballot SC-081, TLS certificates issued from 15 March 2027 can last at most 100 days, and a domain check can be reused for 100 days. Here is how to be ready.
Windows code signing: Microsoft's PCA 2011 expired on 19 October - what developers should test
Microsoft has moved Windows signing to a new CA and will switch to RSA-3072 and SHA-384 later in 2026, with post-quantum signing planned for 2027. Software that pins Microsoft certificates may break.
Document signing in the EU: digital identity wallets due by December 2026
Under eIDAS 2.0 every EU member state must offer a certified European Digital Identity Wallet by December 2026, with free qualified signatures for individuals by December 2027. What it means for document signing.
Code signing certificates now last at most 460 days
Since 1 March 2026 public code signing and EV code signing certificates can be issued for at most 460 days (Ballot CSC-31). Multi-year needs are covered by renewing or reissuing.