Cybersecurity

For decades, X.509 digital certificates have quietly underpinned trust on the internet. They authenticate websites, encrypt traffic, secure devices, protect applications, and enable machine-to-machine communication. But that foundation is now undergoing its biggest transformation yet.

Driven by browser vendors, security incidents, operational failures, and the looming reality of quantum computing, the CA/Browser Forum (CA/B Forum) has approved sweeping changes to how public digital certificates are issued, validated, and managed. These changes will reshape how organizations design PKI architectures and force a long-overdue shift toward automation and crypto-agility.
This is not a future problem.

The first enforcement milestones arrived in March 2026.