Certificate management

Google-managed public SSL certificates signed by Google Public CA (pki.goog) are gradually transitioning from a 90-day validity period to a 45-day validity…

Google-managed public SSL certificates signed by Google Public CA (pki.goog) are gradually transitioning from a 90-day validity period to a 45-day validity period to improve security.

AWS Certificate Manager now supports ACME issuance through AWS PrivateLink

AWS Certificate Manager (ACM) now supports AWS PrivateLink for ACME public certificate issuance, allowing you to request and renew public TLS certificates over a private network path that stays within the AWS network.

AWS Private CA now provides detailed certificate issuance logs

AWS Private CA announces detailed certificate issuance logs, a new AWS CloudTrail service event that records the complete certificate content, issuing CA information, requester identity, and signing status for every issuance.

You can now attach tags to Certificate Manager resources during creation.

This feature is available in Preview.

AWS Private CA EKS add-on and Connector for AD now available in AWS GovCloud (US)

AWS Private Certificate Authority (AWS Private CA) announces the availability of the AWS Private CA Connector for Kubernetes as a managed Amazon EKS add-on and the AWS Private CA Connector for Active Directory in AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions.

AWS Certificate Manager supports switching from e-mail to DNS validation

AWS Certificate Manager (ACM) now enables you to change the domain validation method on your existing ACM issued public TLS certificates from e-mail to DNS, without reissuing the certificate or changing its existing Amazon Resource Name (ARN).

Certificate Transparency Monitoring is now Generally Available

Certificate Transparency Monitoring is now generally available across all Cloudflare plans.

Faster and more secure TLS handshakes to your origins, automatically

Cloudflare now takes the guesswork out of TLS 1.3 key agreement with your origins. Automatic key exchange predicts the preferred algorithm and sends its key share in the first ClientHello, helping avoid a HelloRetryRequest and one extra network round trip.

AWS Certificate Manager now supports the ACME protocol for public certificates

AWS Certificate Manager (ACM) now allows you to provision a fully managed ACME server endpoint that issues public TLS certificates with a 45 day validity from Amazon Trust Services using any ACMEv2-compatible client, including Certbot, cert-manager for Kubernetes, and acme.sh.

Post-quantum ML-DSA certificates for Authenticated Origin Pulls and Custom Origin Trust Store

Cloudflare now accepts ML-DSA (FIPS 204) post-quantum certificates on the connection between Cloudflare's edge and your origin server.

AWS announces AWS Workload Credentials Provider

AWS announces AWS Workload Credentials Provider, a lightweight client-side provider that automates deployment of exported certificates from AWS Certificate Manager (ACM) and local caching of secrets from AWS Secrets Manager across AWS and non-AWS workloads.

AWS Private CA now supports customer managed permissions for cross-account sharing

AWS Private Certificate Authority (AWS Private CA) now supports customer managed permissions in AWS Resource Access Manager (AWS RAM).

AWS Certificate Manager now supports native certificate search

AWS Certificate Manager (ACM) now provides a search bar in the console that customers can use to find certificates using one or more certificate parameters such as domain name, certificate ARN, and/or certificate validity.

Manage mTLS and BYO CA certificates from the Cloudflare dashboard

You can now manage mutual TLS (mTLS) and Bring Your Own Certificate Authority (BYO CA) configurations directly from the Cloudflare dashboard — no API required.

AWS Private CA now publishes utilization metrics to Amazon CloudWatch

AWS Private Certificate Authority (AWS Private CA) now publishes certificate authority (CA) utilization metrics to Amazon CloudWatch, providing visibility into your CA usage.

AWS Private CA Connector for SCEP now supports AWS PrivateLink

AWS Private CA Connector for SCEP now supports AWS PrivateLink, allowing your clients to request certificates from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet.

AWS Certificate Manager updates default certificate validity to comply with new guidelines

Starting today, public certificates issued from AWS Certificate Manager (ACM) have a maximum validity period of 198 days, compared to previous validity period of 395 days.