INCREASE THE SECURITY OF YOUR SERVERS AND SERVICES WITH CERTIFICATES

Purchase SSL/TLS, S/MIME, Code Signing, PSD2, and VMC certificates from trusted certificate authorities, and manage the full lifecycle directly within TrustView.

Increase the security of your servers and services with certificates! Our SSL certificates are trusted by millions of people, providing robust encryption and authentication to your website to guarantee a secure browsing experience for your customers. With our wide range of certificate types, you can choose the perfect one for your needs - from single-domain to wildcard, high security to extended validation - TrustSkills has you covered

We offer with our purchasing portal in our certificate lifecycle management software - TrustView, the possibility to purchase certificates at competitive prices of the certificate types you need. Our providers include: GeoTrust, DigiCert, Let's Encrypt, Certum, and with our ADCS module it is possible to issue internal certificates from your CA, directly from TrustView.

We cover the following types of certificates, among others:

→ SSL/TLS certificates

→ Code Signing Certificates

→ PSD2 certificates

→ Document Signing Certificates

→ S/MIME certificates

→ Verified Brand certificates

→ Pre-validated certificates

SSL/TLS certificates

Transport Layer Security (TLS) certificates - most commonly known as SSL or digital certificates - are the foundation of a secure internet.

Cryptomathic partners with leading certificate authorities, including DigiCert, GeoTrust, and Certum, with decades of experience supporting enterprise certificate procurement across regulated industries. We help you complete all the necessary verification steps required before issuance.

Our technical support assists with the optional pre-validation of your organisation and domains, allowing for immediate issuance of certificates for your websites and applications that require an SSL certificate.

30-1

Code Signing Certificates

Code Signing Certificates provide users with the necessary assurance that your code or application has not been tampered with. Signed applications and executable files include your signature, your company name, and, if desired, a timestamp.

Cryptomathic offers Code Signing certificates from trusted brands, including DigiCert and Certum.

Our support will help you complete all the necessary verification steps and make the entire process hassle-free.

PSD2 certificates

QWAC validates your identity and role as a payment service provider (PSP) to your customers and other businesses while encrypting and authenticating sensitive data.

QsealC seals data, sensitive documents and other communications to ensure they are tamper-proof and originate from a trusted source.

Cryptomathic supports the procurement of QWAC and QsealC certificates for payment service providers. The required verification steps can be complex to navigate.

31-1

Document Signing Certificates

Document Signing Certificates allow your organization to add an electronic digital signature to documents in a variety of file formats to prove ownership. A typical example is a signature added to a PDF document.

Document Signing Certificates ensure that documents remain unchanged, protect sensitive information, and provide trust in the sender's identity.

Cryptomathic supports the procurement of Document Signing certificates from several trusted issuers. We help you select the appropriate Document Signing certificate and navigate the ordering and verification process until you have the issued Document Signing certificate ready for use.

S/MIME certificates

S/MIME certificates allow you to digitally sign and encrypt your email and attachments, protecting individuals and organizations from email-based attacks and data breaches. A business can maintain compliance with various privacy and security regulations.

Private key escrow capabilities mitigate the loss or theft of private keys and reduce the risk of companies paying high fines/penalties for non-compliance. We offer automation capabilities that enable companies with large numbers of employees to automate the deployment and manage the lifecycle of S/MIME certificates.

33-1

Verified Brand certificates

Verified Brand Certificates (VMCs) allow you to render your logo next to the sender field in email clients, so users can see your brand (and that your organization has been verified) before they even open your message.

It's the email equivalent of a social media check mark, with added validation and security requirements to help protect your customers and your brand from phishing and spoofing attacks.

Cryptomathic supports the procurement of Verified Mark Certificates (VMC) and guides you through the ordering and validation process.

Pre-validated certificates

Pre-validation (also called pre-vetting) of organizations and domains helps to make your certificate ordering process much smoother. It all happens in TrustView and is system-supported.

In the following, we have briefly listed the differences between the different certificate types and mentioned the advantages of pre-validation below.

When you order an SSL/TLS certificate, there are 3 different levels of validation that are performed. The 3 types are:

→ Domain Validated (DV)

→ Organization Validated (OV)

→ Extended Validation (EV)

There is a big difference in the validation required for the different certificate types.

Extended Validation (EV)
To get an EV certificate issued, you have to go through a fairly thorough validation process - in return, you get the green address bar in some browsers when you get the certificate issued.

For EV, you must be validated in the following subjects:
- The legal, physical and operational existence of the company
- That the identity stated in the order matches those recorded in the relevant official company registry for your jurisdiction
- That the company has exclusive rights to the entire domain name
- That the company otherwise complies with all requirements and has approved the rules for an EV certificate
For more details, see the CA/B Forum , which has defined the requirements for issuing EV certificates.
Organization Validated (OV)

To issue an OV certificate, the CA will validate the identity of the company by, among other things, looking up information in a third-party reference work such as krak.dk or similar. In addition, the CA will contact the company to verify that the certificate has actually been ordered.

In practical terms, you will typically be contacted by telephone (the person mentioned as the contact on the order). When the certificate is issued, it appears that the organization behind it has been verified and the organization name also appears on the certificate, so that users can identify the organization behind the website.
Domain Validated (DV)

DV certificates only verify technical control over the domain itself. This means that it does not take into account whether your organization exists or not or whether the order is made by the organization that owns the domain.

When purchasing a Domain Validated certificate, you will be asked to select an email address from a list during issuance. You must be able to receive email at one of these, as this will be proof that you have control of the domain - and thus can be issued a certificate. Validation can also be done via DNS if you prefer.

The email address can either exist on the main domain or on the subdomain you want a certificate for. When the email is received at the chosen address, follow the link and you will be asked to approve your order. Once this is done, your certificate will be sent to you via email after a short time.

Please note that the certificate validated by a domain does not indicate who owns the domain.

Get started with pre-validation

If you want or need to get started with pre-validation, please contact us to get started or if you have any questions about the process.