Resource Library

500 security leaders reveal progress on crypto agility, PQC, PKI modernization, and AI identity risks.

Sectigo now connects GlobalSign and EJBCA to its certificate manager: multi-CA resilience, one inventory, one workflow.

Centralize, automate, and govern AWS, GCP, or Microsoft CA certificates with Sectigo Certificate Manager.

In the week of November 2nd, 2026, Apple is releasing an update that will remove the AAA Certificate Services Root CA from parts of the Apple MacOS operating system.

In this session, Sectigo experts explain why a CA redundancy strategy is becoming the standard for resilient certificate operations, and how to adopt one without a migration project. You'll see how to connect the public and private CAs you already use, bring every certificate into one inventory, and apply the same policies, automation and reporting across all of them. When a distrust, outage or revocation event hits, you can shift issuance with a policy change instead of a fire drill.

On October 25th, 2026, Microsoft removed the AAA Certificate Services Root CA from the Microsoft Root Store.

Turducken certificates wrap RSA in ML-DSA to stop PQC downgrade attacks. Tim and Jason explain how and when.

Hijacked ccTLD DNS broke domain validation until CT logs exposed rogue certificates. Why CAA failed and what to do.

Discover how Merkle Tree Certificates (MTCs) enable scalable, post-quantum crtificate validation with smaller, more efficient certificates.

P vs NP, quantum computers and AI-driven cryptanalysis: why cryptographic agility is the only safe assumption.

SCOTTSDALE, Ariz., October 28, 2026 — Sectigo, a global leader in automated Certificate Lifecycle Management (CLM), today released its 2026 State of Crypto Agility Report, which finds that organizations are moving beyond awareness of major cryptographic change and into the harder work of executing against it. 

Full findings, the complete survey appendix and a year-over-year view against our 2025 research.

Sectigo surveyed 500 senior IT and cybersecurity decision-makers across North America, EMEA, and APAC. This blog breaks down the key findings on PKI, PQC readiness, and shorter certificate lifespans.

Bugzilla Bloodbath Redux: 138 open bugs, mostly third-party reported. Tim and Jason explain the AI-driven surge.

Chrome's MTC timeline ends with removing all non-MTC CAs from its root store in late 2028. See what it means for CAs, PQC readiness and the pace of PKI change.

Manage DigiCert certificates in SCM with unified visibility, automation, and lifecycle control.

Download our Multi-CA readiness checklist to start your CA redundancy plan today.

The eMudhra incident did not affect the security, validity or trustworthiness of any certificates issued by Sectigo to our customers.