Managing SSL/TLS certificates давно ceased to be just a simple administrative task. In many organizations today, it is part of daily operational responsibility that directly affects service availability, communication security, business continuity, and the risk of incidents resulting from a missed renewal. That is why Sectigo ACME CaaS is joining our offer as a service […]
In HEXSSL, we continuously develop our services to support customers not only at the stage of purchasing and deploying SSL/TLS certificates, but also in their ongoing maintenance. That is why we have made a free SSL Monitor service available in the client panel. It allows customers to monitor certificate expiration dates and automatically sends reminders […]
The year 2026 marks a fundamental turning point in the evolution of cybersecurity and digital trust. Drawing on forecasts prepared by DigiCert, we can see how traditional priorities in system and data protection are giving way to far deeper, structural challenges and opportunities. The next twelve months will be a period in which organizations will […]
In 2026, the TLS/SSL certificate industry is introducing another major change related to the maximum certificate validity period. DigiCert, as one of the largest certificate authorities, has confirmed that from February 24, 2026, all new public TLS certificates will have a maximum validity of 199 days.
The TLS and X.509 certificate infrastructure is entering a new era – the post-quantum era. NIST algorithms (ML-KEM and ML-DSA) and hybrid certificates are changing the way we generate keys, create CSR, and perform the TLS handshake. A previously simple CSR is now becoming a critical element: it must comply with the new CA/B Forum […]
Automating certificates has been for years a relatively stable and predictable part of the TLS ecosystem. ACME – the protocol originally introduced by Let’s Encrypt – has become the de facto standard for automated renewals and certificate issuance. Its architecture was built around a simple model: key generation, CSR creation, domain validation, certificate retrieval. In […]
For the past decade, the development of network cryptography has progressed in an evolutionary manner. We updated OpenSSL libraries, replaced SHA-1 with SHA-256, increased RSA key lengths, but all of this remained within a familiar security model. In 2025, for the first time in more than 20 years, we are facing a change that is […]
