For years, Client Authentication (mTLS) has been implemented using public SSL/TLS certificates issued by publicly trusted certification authorities. This model worked because server certificates could include both Server Authentication and Client Authentication (EKU), and browsers and operating systems accepted such a dual-use scenario.
In 2026, the TLS/SSL certificate industry is introducing another major change related to the maximum certificate validity period. DigiCert, as one of the largest certificate authorities, has confirmed that from February 24, 2026, all new public TLS certificates will have a maximum validity of 199 days.
The development of quantum computers is no longer an academic curiosity. For public administration, the military, and organizations responsible for national security, it has become a concrete vector of strategic risk that forces a fundamental shift in the approach to cryptography. The latest actions of the Department of Defense (Department of War) confirm that the […]
Dear Customers and Partners, on the occasion of Christmas, we would like to thank you for the trust you place in HEXSSL every day. In a world where digital security, data integrity, and infrastructure stability are of critical importance, cooperation based on trust gains exceptional value. We wish you peaceful, balanced holidays and a New […]
Modern websites operate in an environment where security does not end with an SSL certificate. The certificate provides encrypted transmission and communication integrity, which can be verified with tools such as SSL Checker and monitored over time using SSL Monitor. However, this is only one layer. Above it lies application logic, dynamically loaded scripts, external […]
In the web security ecosystem, there is still a lack of tools that combine execution speed, result clarity and full automation of processes related to HTTPS and HSTS diagnostics. Classic solutions deliver only partial functionality or require complex integrations. In response to these limitations, HEXSSL-CLI was created, an official command line tool that introduces a […]
Debate around EV SSL certificates (Extended Validation) has been ongoing for years, yet few people truly understand what EV is, what it does and what role it plays in the security ecosystem. For years, EV certificates were associated mainly with the green bar in the browser. When browsers stopped highlighting this element, many assumed that […]
In recent years, TLS has undergone one of the most significant changes since the introduction of SNI. The removal of RSA from key exchange in TLS 1.3, the transition to a fully elliptic ECDHE exchange, and the increasing share of mobile traffic have made cryptographic performance an architectural element rather than a marginal detail. In […]
The TLS and X.509 certificate infrastructure is entering a new era – the post-quantum era. NIST algorithms (ML-KEM and ML-DSA) and hybrid certificates are changing the way we generate keys, create CSR, and perform the TLS handshake. A previously simple CSR is now becoming a critical element: it must comply with the new CA/B Forum […]
E-mail has remained both one of the oldest and most exposed channels of business communication for years. The SMTP protocol was created in a time when the internet assumed trust between the sender and the recipient. Today the reality is different. Attackers use email messages to take over accounts, extort payments, steal data and manipulate […]
