E-mail has remained both one of the oldest and most exposed channels of business communication for years. The SMTP protocol was created in a time when the internet assumed trust between the sender and the recipient. Today the reality is different. Attackers use email messages to take over accounts, extort payments, steal data and manipulate […]
In DevOps environments, server administration, application integration or service migration, the need for fast and reliable SSL/TLS certificate conversion between different formats appears very frequently. Various servers and applications require different file structures – Apache prefers PEM, Windows IIS uses PFX, Java/Kafka require P7B, and many network appliances only support DER.
At the end of October 2025, Google announced one of the most significant changes to Chrome’s security policy in many years. Starting from version 154, which will be delivered to users in October 2026, the browser will enforce HTTPS connections by default. This means that Chrome will attempt to establish an encrypted connection to every […]
In HEXSSL, we continuously expand our suite of tools supporting administrators, IT specialists, security auditors, and website owners in quickly diagnosing and verifying elements of the SSL/TLS infrastructure.
Automating certificates has been for years a relatively stable and predictable part of the TLS ecosystem. ACME – the protocol originally introduced by Let’s Encrypt – has become the de facto standard for automated renewals and certificate issuance. Its architecture was built around a simple model: key generation, CSR creation, domain validation, certificate retrieval. In […]
For the past decade, the development of network cryptography has progressed in an evolutionary manner. We updated OpenSSL libraries, replaced SHA-1 with SHA-256, increased RSA key lengths, but all of this remained within a familiar security model. In 2025, for the first time in more than 20 years, we are facing a change that is […]
SSL/TLS certificate is a key security element for every website. It ensures the encryption of data transmitted between the browser and the server and gives users confidence in your domain. However, even the best-configured certificate loses its value the moment it expires – and a single day of delay can lead to:
NIS2 is a directive that in many organizations has been perceived primarily as a procedural requirement: policies, registers, classifications, audits. Meanwhile, its real impact is much deeper – true compliance begins only at the level of cryptography. This is where the directive expects proof that the organization understands modern threats and can maintain technical security […]
The new HEXSSL SSL Checker tool enables a full analysis of an SSL/TLS certificate for any domain in real time. Simply enter the website address and the system will automatically retrieve data from the active HTTPS connection and present the results in a clear report.
In recent years, the way we generate CSR (Certificate Signing Request) has undergone a revolution. A few years ago, a CSR was one of the least problematic elements of the certificate issuance process – a simple text file in which you entered a domain, optionally the company details, generated a key, and that was it. […]
