FAQ Hero

Industry Standards For PKI, Certificates, And Trust

CA/B Forum and browser policies explained

Industry standards — led by bodies such as the CA/Browser Forum and enforced by browser vendors — define baseline requirements for certificate issuance, cryptographic algorithms, lifetimes, and visibility (for example, CT). These standards and browser policies create the interoperability and predictability required for certificates to be broadly trusted, but they also force technical changes (shorter lifetimes, algorithm deprecations, and new logging/validation requirements) that can disrupt operations if organizations aren’t prepared. Effective preparation combines monitoring of standards changes, inventory and compatibility assessments, and automation to implement required technical changes without service disruption. DigiCert tracks industry shifts, translates them into plain-language guidance, and updates CertCentral and DigiCert ONE to help customers adapt smoothly.

What is the CA/B Forum? 
The CA/Browser Forum is an industry body that defines baseline requirements and best practices for publicly-trusted CAs and certificate issuance.

How do browser policies affect me? 
Browsers may require CT logging, shorter lifetimes, or algorithm deprecations — these policies can affect certificate validity and compatibility.

How should I plan for standards changes? 
Monitor vendor guidance, run inventory and compatibility checks, and use automation to replace impacted certificates on schedule.

How does DigiCert help interpret changes? 
DigiCert publishes plain-language guidance and updates CertCentral and DigiCert ONE to automate compliance wherever possible.

  • DigiCert Logo

    The most-trusted global provider of high-assurance TLS/SSL, PKI, IoT and signing solutions.