For years, Client Authentication (mTLS) has been implemented using public SSL/TLS certificates issued by publicly trusted certification authorities. This model worked because server certificates could include both Server Authentication and Client Authentication (EKU), and browsers and operating systems accepted such a dual-use scenario.
In 2026, the TLS/SSL certificate industry is introducing another major change related to the maximum certificate validity period. DigiCert, as one of the largest certificate authorities, has confirmed that from February 24, 2026, all new public TLS certificates will have a maximum validity of 199 days.
The development of quantum computers is no longer an academic curiosity. For public administration, the military, and organizations responsible for national security, it has become a concrete vector of strategic risk that forces a fundamental shift in the approach to cryptography. The latest actions of the Department of Defense (Department of War) confirm that the […]
Dear Customers and Partners, on the occasion of Christmas, we would like to thank you for the trust you place in HEXSSL every day. In a world where digital security, data integrity, and infrastructure stability are of critical importance, cooperation based on trust gains exceptional value. We wish you peaceful, balanced holidays and a New […]
Modern websites operate in an environment where security does not end with an SSL certificate. The certificate provides encrypted transmission and communication integrity, which can be verified with tools such as SSL Checker and monitored over time using SSL Monitor. However, this is only one layer. Above it lies application logic, dynamically loaded scripts, external […]
In 2025, Sectigo initiated one of the most significant infrastructure changes in its PKI ecosystem, namely the migration of certificate issuance to new, proprietary Public Root Certification Authorities. This change affects all major product lines, including SSL/TLS certificates (DV, OV, EV) and S/MIME, and has a direct impact on how trust chains are built in […]
In the web security ecosystem, there is still a lack of tools that combine execution speed, result clarity and full automation of processes related to HTTPS and HSTS diagnostics. Classic solutions deliver only partial functionality or require complex integrations. In response to these limitations, HEXSSL-CLI was created, an official command line tool that introduces a […]
Debate around EV SSL certificates (Extended Validation) has been ongoing for years, yet few people truly understand what EV is, what it does and what role it plays in the security ecosystem. For years, EV certificates were associated mainly with the green bar in the browser. When browsers stopped highlighting this element, many assumed that […]
In recent years, TLS has undergone one of the most significant changes since the introduction of SNI. The removal of RSA from key exchange in TLS 1.3, the transition to a fully elliptic ECDHE exchange, and the increasing share of mobile traffic have made cryptographic performance an architectural element rather than a marginal detail. In […]
In the last two years one of the biggest shifts in the history of network security has taken place. The landscape of the internet has stopped being a collection of simple websites connected by links. Today it is a complex structure of dependencies: SaaS applications, API interfaces, microservice architectures, payment systems, B2B integrations, e-commerce platforms, […]
