Fact-checked by Grok 2 weeks ago

GlobalSign

GlobalSign is a certificate authority and provider of digital identity and security solutions, founded in 1996 in Belgium as one of the internet's original trust service providers.^[1] It specializes in issuing digital certificates for secure communications, including SSL/TLS for websites, code signing, document signing, and S/MIME for email encryption, while also offering managed public key infrastructure (PKI) solutions tailored for enterprises, cloud service providers, and Internet of Things (IoT) deployments.^[2] As a subsidiary of Japan's GMO Internet Group since its acquisition in 2007, GlobalSign operates globally with headquarters in Portsmouth, New Hampshire, United States, and employs over 600 people across multiple continents.^[3]^[2] The company's mission centers on delivering verified digital identities to secure evolving technologies, from web transactions to device authentication, with a focus on scalability, automation, and compliance.^[2] Key offerings include cloud-based PKI for high-volume certificate management, IPv6-compliant revocation services, and qualified certificates under eIDAS regulations as a certified Trust Service Provider since 2020.^[1] GlobalSign has issued more than 267 million certificates, processed over 500 million timestamps, and handled 0.5 trillion Online Certificate Status Protocol (OCSP) requests, underscoring its role in maintaining public trust infrastructures.^[2] Notable achievements include pioneering HTTPS revocation checking via content delivery networks and being the first certificate authority to embed roots in major browsers like Netscape and Microsoft platforms in the late 1990s.^[1] In 2023, GlobalSign became the only worldwide certificate authority certified under four ISO standards: ISO 27001 for information security, ISO 22301 for business continuity, ISO 27017 for cloud security, and ISO 27701 for privacy information management, reinforcing its commitment to robust security practices.^[4] These certifications, along with WebTrust accreditation, position GlobalSign as a leader in enabling secure digital ecosystems for over 25 years.^[2]

Overview

Founding and Early Operations

GlobalSign was founded on October 11, 1996, in Leuven, Belgium, emerging as one of the earliest publicly trusted certificate authorities and a pioneer in public-key infrastructure (PKI) technologies.^[5]^[6] Initially operating under the name BelSign from a small office, the company was established by experts in digital security to address the growing need for trusted online identities amid the rapid expansion of the World Wide Web.^[1] This founding positioned GlobalSign as Europe's first and longest-serving certification authority, focusing on building foundational trust services in an era when internet security was nascent.^[7] From its inception, GlobalSign concentrated on issuing digital certificates to enable secure web communications, particularly through early adoption of SSL/TLS protocols for encrypting data transmissions.^[8] The company created its initial root certificate in 1996 using 512-bit RSA keys and the CryptWare Server, allowing it to provide credentialing services that supported the burgeoning e-commerce landscape.^[1] By embedding its root CA in major browsers like Netscape by 1999, GlobalSign facilitated widespread use of secure connections, issuing its first digital certificates that same year to validate website identities and protect online transactions.^[9] Operations were firmly rooted in Europe during the late 1990s, with the company leveraging its Belgian base to serve regional clients and establish a strong presence across the continent.^[10] Concurrently, GlobalSign pursued initial market entry into North America by the late 1990s, extending sales and support to U.S. customers and laying the groundwork for international growth without formal offices at that stage.^[11] This early transatlantic outreach underscored the company's vision to become a global provider of PKI solutions, serving clients in over 150 countries.^[2]

Ownership and Global Presence

GlobalSign was acquired by GMO Internet Group in 2007, becoming a subsidiary of the Japanese conglomerate through its entity GMO GlobalSign Holdings K.K., which oversees its operations as part of a broader portfolio in internet infrastructure and security services.^[12]^[13] This acquisition integrated GlobalSign into GMO's ecosystem, shifting its strategic direction toward global expansion while maintaining its core focus on digital certificates and identity solutions.^[2] GlobalSign became a subsidiary with oversight from its Tokyo-based holding company GMO GlobalSign Holdings K.K., located at Cerulean Tower in Shibuya-ku. Despite this, the company has retained its European roots, with a longstanding office in Leuven, Belgium, where it was originally founded in 1996 as one of the earliest commercial issuers of SSL certificates.^[3] This dual structure allows GlobalSign to leverage Japanese corporate oversight alongside its foundational European presence for regional compliance and operations. As of 2025, GlobalSign employs over 600 professionals worldwide, supporting its identity and security initiatives across diverse markets.^[2] The company maintains offices in more than 13 regions, with key locations spanning North America (e.g., Portsmouth, New Hampshire), Europe (including the UK, Germany, Netherlands, and Belgium), and the Asia-Pacific (such as Tokyo, Singapore, and Australia), enabling localized service delivery and regulatory adherence.^[3] Under GMO's oversight, GlobalSign's leadership emphasizes enterprise-scale security expertise, with key executives including CEO Ichiro Chujo, who drives global strategy; COO Koji Takenobu, managing operational efficiency; CLO Carolyn Oldenburg, handling legal and compliance matters; and CISO roles focused on cybersecurity innovation.^[14] The board structure integrates GMO representatives to align with group priorities, ensuring coordinated governance while fostering specialized leadership in PKI and digital trust technologies.^[15]

Historical Development

Pre-Acquisition Growth (1996–2006)

During the late 1990s and early 2000s, GlobalSign focused on enhancing its infrastructure to handle the surging demand for digital certificates amid rapid internet expansion. In 1998, the company developed its proprietary 'Phoenix' engine, which enabled automated certificate issuance and transitioned operations to the GlobalSign network, facilitating international scalability and supporting the issuance of SSL certificates for a growing base of websites. This internal innovation allowed GlobalSign to process higher volumes efficiently, aligning with the broader adoption of secure web protocols as e-commerce proliferated.^[1] As internet usage escalated, GlobalSign entered the enterprise market by offering custom Public Key Infrastructure (PKI) solutions tailored for organizational needs, including secure email and code signing certificates. The company forged key partnerships with major web hosting providers and technology vendors to integrate its certificates seamlessly into hosting environments and applications. Notably, GlobalSign's root CA was embedded in Netscape browsers and Microsoft Windows 2000, enabling widespread deployment of trusted SSL certificates across enterprise networks and web services. These collaborations positioned GlobalSign as a reliable provider for businesses seeking scalable security beyond basic web encryption.^[1] GlobalSign earned significant industry recognition during this period, underscoring its commitment to audit standards and operational integrity. In November 2002, it became the first pan-European public Certification Authority to achieve WebTrust accreditation from Deloitte & Touche, verifying compliance with AICPA/CICA principles for certification authorities, including security and privacy controls. This accolade was extended following successful audits in 2004, affirming GlobalSign's adherence to rigorous standards for certificate lifecycle management. Such validations boosted its credibility among enterprises wary of emerging PKI risks.^[16]^[17] Operationally, GlobalSign scaled from a small Belgian startup with a handful of employees in 1996 to a multinational entity by 2006, establishing offices across Europe and beyond to serve a diverse client base. This expansion reflected the company's maturation into a key player in the trust services sector, with enhanced capacity for certificate issuance driven by its early investments in automation and global distribution. By the end of this period, GlobalSign had solidified its role in supporting secure online transactions for thousands of organizations worldwide.^[1]

Integration with GMO Internet (2007–2015)

In 2007, GlobalSign was acquired by GMO Internet, a Japanese internet services conglomerate, for an undisclosed amount, marking a significant pivot toward deeper integration with Asian markets and enhanced resource sharing within the GMO ecosystem. This acquisition enabled GlobalSign to leverage GMO's extensive infrastructure in Japan and beyond, facilitating expanded operations in the Asia-Pacific region and bolstering its global certificate authority capabilities through shared technological and operational resources.^[1] Building on this integration, GlobalSign launched enhanced managed Public Key Infrastructure (PKI) services in 2009, with Managed PKI Lite providing an in-house certificate authority hosting solution tailored for businesses seeking scalable digital certificate management. This SaaS PKI solution introduced cloud-based components, allowing organizations to deploy and manage SSL/TLS certificates more efficiently across distributed environments, supported by GMO's robust hosting and security infrastructure. This period saw GlobalSign capitalize on GMO's domain and hosting expertise to streamline service delivery, particularly in emerging markets.^[18] GlobalSign's market position strengthened notably during this era, achieving recognition as the fourth-largest certificate authority worldwide in January 2015, according to Netcraft's survey of secure websites. This ranking underscored the benefits of GMO integration, which helped drive growth in secure site deployments amid rising global demand for web security solutions.^[19] Throughout the integration phase, GlobalSign proactively addressed evolving regulatory landscapes, ensuring compliance with the European Union's 1995 Data Protection Directive and Belgium's privacy laws, which imposed stringent requirements on personal data handling in digital certificate issuance and management. These efforts positioned the company to adapt early to emerging EU standards on data protection, maintaining trust in its services across international operations while aligning with GMO's broader compliance framework.^[20]

Expansion and Milestones (2016–Present)

In 2018, GlobalSign launched its IoT Identity Platform, a comprehensive suite of products and services designed to enhance device security in the rapidly expanding Internet of Things ecosystem. The platform leverages public key infrastructure (PKI) to enable scalable identity management, capable of issuing and managing billions of digital identities for connected devices across various industries, addressing critical security challenges such as authentication and encryption at scale.^[21] That same year, GlobalSign achieved Qualified Trust Service Provider (QTSP) status under the EU's eIDAS regulation, becoming one of the first global certificate authorities to secure recognition for issuing qualified electronic signatures and seals. This milestone expanded its compliance offerings for digital transactions in Europe, with qualified certificates becoming available starting in December 2018. Following Brexit, GlobalSign obtained separate UK QTSP recognition in July 2021 from the UK Information Commissioner's Office, ensuring continued support for qualified trust services in the post-EU framework and solidifying its role in cross-border digital identity verification.^[22]^[23] By 2025, GlobalSign continued its growth trajectory with notable recognitions and partnerships. It was included on the prestigious 2025 MES Midmarket 100 list by MES Computing, acknowledging its tailored IT solutions and support for mid-sized enterprises in areas like cybersecurity and identity management. Additionally, GlobalSign renewed its decade-long collaboration with ID-Security, extending a partnership that integrates PKI solutions with email security gateways to deliver enhanced certificate lifecycle management for clients.^[24]^[25] A key milestone in this period has been GlobalSign's emphasis on zero-trust architectures, integrating certificate authorities as foundational elements for continuous identity verification and access control in modern security models. This strategic focus aligns with broader industry shifts toward resilient, assumption-free cybersecurity frameworks, supporting the platform's evolution in managing high-volume digital trust operations.^[26]

Products and Services

Core PKI and Certificate Solutions

GlobalSign's core public key infrastructure (PKI) and certificate solutions form the foundation of its digital trust offerings, providing secure encryption and authentication for websites, software, and communications. These solutions leverage industry-standard protocols to issue and manage digital certificates that verify identities and protect data in transit, ensuring compliance with global security standards such as those from the CA/Browser Forum.^[27] A primary component is GlobalSign's TLS/SSL certificates, which enable website encryption to safeguard user data and prevent man-in-the-middle attacks. These certificates are available in three validation levels: domain-validated (DV) for basic domain ownership verification, organization-validated (OV) for additional business entity checks, and extended-validation (EV) for rigorous identity assurance displayed in browser address bars. DV certificates offer quick issuance for small sites, while OV and EV variants provide heightened trust for e-commerce and enterprise applications, with pricing starting at $249 USD for DV and up to $599 USD for EV options.^[28]^[29]^[30] Complementing these are GlobalSign's managed PKI services, which support code signing to authenticate software integrity, document signing for tamper-evident electronic agreements, and secure email via S/MIME for encrypted messaging. These services are deployed through cloud-based infrastructure, allowing scalable issuance without on-premises hardware and reducing costs associated with traditional PKI management. Code signing certificates, including EV variants, help developers prevent malware distribution by verifying executable authenticity, while S/MIME enables phishing-resistant email with digital signatures and encryption. Document signing solutions integrate with workflows to ensure non-repudiation and regulatory compliance for contracts and records.^[27]^[31]^[32] Key features of these solutions include automated enrollment through protocols like ACME for seamless certificate provisioning and lifecycle management, alongside revocation mechanisms using the Online Certificate Status Protocol (OCSP) to check certificate validity in real-time. GlobalSign's infrastructure handles over 0.5 trillion OCSP requests annually, supporting efficient revocation and status verification across global networks. As of 2025, the company has supplied more than 207 million cloud signatures worldwide, underscoring the scale of its PKI operations.^[33]^[34]^[35]

Identity Management and Authentication

GlobalSign's identity management and authentication solutions leverage public key infrastructure (PKI) to provide secure user verification and access control for enterprises, extending beyond basic certificate issuance to enable robust identity assurance.^[36] These offerings integrate digital certificates with enterprise systems like Active Directory, facilitating seamless authentication while supporting compliance with standards such as PCI DSS and HIPAA.^[37] Central to these solutions are single sign-on (SSO) and multi-factor authentication (MFA) tools that incorporate PKI for enhanced security. GlobalSign supports SSO via SAML protocols, allowing users to access multiple applications with a single set of credentials while maintaining certificate-based verification for identity confirmation.^[38] MFA is achieved through certificate-based methods, combining "something you have" (the digital certificate) with traditional passwords, and token-based approaches for two-factor verification, reducing reliance on vulnerable password-only systems.^[36] These features enable granular access control, such as mutual authentication between users and servers, aligning with zero-trust principles by verifying identities continuously regardless of network location.^[39] For customer identity and access management (CIAM), GlobalSign provides platforms that support self-service enrollment through web-based portals, allowing individuals to request and manage personal digital identities for secure interactions.^[40] This includes transaction confirmation via digital signatures, ensuring non-repudiation and authenticity in user actions, such as approving online transactions or verifying communications.^[31] Custom integrations are facilitated by APIs within the Atlas platform and Managed PKI, enabling enterprises to embed these capabilities into their applications for tailored identity workflows.^[41] Secure email and mobile authentication further extend these capabilities, incorporating PKI for end-to-end protection. S/MIME-based secure email solutions, powered by PersonalSign certificates, enable encryption and digital signing to authenticate senders and confirm message integrity, protecting against phishing and data breaches.^[31] On mobile devices, certificate deployment supports token-based and biometric-enhanced authentication (where compatible with device capabilities), allowing secure access to cloud services and enterprise resources without compromising usability.^[42] Overall, these tools emphasize a zero-trust model, with APIs enabling programmatic control for scalable, API-driven identity orchestration in cloud environments.^[26]

Specialized Platforms for IoT and Enterprise

GlobalSign offers specialized platforms designed to address the unique security challenges of Internet of Things (IoT) ecosystems and large-scale enterprise environments, emphasizing scalable public key infrastructure (PKI) for machine-to-machine communications and automated identity management.^[43] These solutions extend beyond standard certificate issuance to provide end-to-end lifecycle automation, enabling organizations to secure vast numbers of devices without manual intervention.^[44] The IoT Identity Platform, launched in 2018, is a cloud-based PKI solution tailored for provisioning and managing digital identities across billions of IoT devices.^[44] It supports automated enrollment through features like Edge Enroll, which injects trusted certificates at the original equipment manufacturer (OEM) or chip level during production, ensuring identities are established from the factory floor.^[43] The platform facilitates scalable lifecycle management, covering phases from planning and deployment to renewal, revocation, and decommissioning, with self-registration capabilities on device boot-up and RESTful APIs for seamless integration into existing IoT workflows.^[44] Identity health monitoring provides ongoing oversight, including tamper detection and compliance with global standards, to maintain security across high-volume deployments.^[43] For enterprise-grade deployments, GlobalSign's Auto Enrollment Gateway (AEG), updated in 2022 and now evolved into the Certificate Automation Manager, enables seamless certificate deployment in hybrid cloud environments.^[45] This managed PKI solution acts as a proxy between Active Directory or Entra ID and GlobalSign's cloud services, automating issuance and renewal for servers, users, and devices in mixed on-premises and cloud setups.^[46] It supports scalability for large organizations by reducing administrative overhead and integrating directly with enterprise identity systems, ensuring consistent security without re-architecting infrastructure.^[47] In September 2025, GlobalSign introduced LifeCycleX, a centralized platform for end-to-end certificate lifecycle management. LifeCycleX provides a single dashboard to discover, monitor, provision, and automate certificates across multiple domains and environments, supporting organizations of all sizes in simplifying PKI administration.^[48] GlobalSign also provides tools for supply chain security and code signing integrated into DevOps pipelines, particularly for IoT endpoints.^[49] Code signing certificates, available in organization validation (OV) and extended validation (EV) formats, protect software executables, container images, and kernel drivers from tampering, verifying publisher identity and enabling timestamping for long-term trust.^[50] These tools integrate with DevOps platforms like Kubernetes to secure pod-to-pod communications and automate signing in continuous integration/continuous deployment (CI/CD) processes, safeguarding high-volume IoT firmware updates against supply chain threats.^[51] By combining these capabilities, GlobalSign's platforms aim to secure one billion endpoints globally, leveraging a robust cloud infrastructure for automated, high-scale protection.^[1] This approach aligns with broader identity management tools by focusing on device-centric authentication rather than human users.^[43]

Business Developments

Key Acquisitions

In 2014, GlobalSign, under its parent company GMO Internet Group, acquired Finnish identity and access management (IAM) software provider Ubisecure Solutions Oy for $12.3 million.^[52]^[53] This move strengthened GlobalSign's capabilities in authentication technologies, including single sign-on (SSO) and federation services, while expanding its footprint in Europe.^[54] The acquisition aligned with GMO's broader expansion strategy following its 2007 purchase of GlobalSign, aiming to position the company as a leader in secure identity solutions for the emerging Internet of Everything (IoE) market.^[55] The integration of Ubisecure's technology enabled GlobalSign to enhance its early SSO offerings, incorporating advanced IAM features to serve enterprise clients in sectors like finance and government.^[56] However, in 2016, GlobalSign spun out its IAM business unit, reestablishing Ubisecure as an independent entity under Base 10 Ventures, allowing GlobalSign to refocus on core public key infrastructure (PKI) services.^[57]^[58] Since the Ubisecure acquisition, GlobalSign has pursued no major mergers or buyouts, shifting emphasis toward organic development and collaborative alliances to drive innovation in digital certificates and identity management by 2025.^[59]

Strategic Partnerships and Collaborations

GlobalSign has maintained a longstanding partnership with ID-Security, marking a decade of collaboration renewed in 2025, which integrates GlobalSign's public key infrastructure (PKI) solutions with ID-Security's certificate lifecycle management (CLM) and email gateway technologies to enhance secure email communications and automated certificate handling for enterprises.^[60] This alliance allows organizations to streamline PKI deployment while ensuring compliance with evolving security standards through seamless interoperability. In 2019, GlobalSign joined the Microsoft Intelligent Security Association (MISA), fostering collaborations that integrate its identity and access management solutions with Microsoft's ecosystem, including Azure, to bolster cloud security and mobile authentication against advanced threats.^[61] Through this partnership, GlobalSign provides enhanced certificate signing request (CSR) integrity checks, enabling secure device enrollment and zero-trust architectures in cloud environments.^[62] GlobalSign aligned with the Cloud Signature Consortium in 2018 to advance standardized protocols for cloud-based digital signing, contributing to open specifications that facilitate interoperable electronic signatures across platforms and devices.^[63] This involvement supports GlobalSign's role in developing trusted identity frameworks for remote signing, reducing reliance on hardware tokens and promoting broader adoption in regulated industries.^[64] In January 2025, GlobalSign announced a strategic reseller partnership with Quantum PKI to accelerate adoption of post-quantum cryptography solutions, enabling Quantum PKI to resell GlobalSign's products and services in the United States.^[65] In 2025, GlobalSign's strategic initiatives emphasized joint solutions tailored to midmarket IT requirements, earning recognition on the MES Midmarket 100 list for its effective partnerships that address unique scalability and security challenges in this segment.^[24] The company also received the 2025 Fortress Cybersecurity Award for cryptography on July 1, 2025, and was named a winner in the Top InfoSec Innovator Awards for 2025 on October 28, 2025, recognizing its leadership in PKI.^[66]^[67] These efforts highlight collaborative innovations in PKI and identity management, enabling midmarket firms to implement robust, cost-effective security without extensive in-house resources.^[68]

Security Incidents and Compliance

2011 Certificate Authority Breach

In September 2011, GlobalSign, a Belgian certificate authority, faced a significant security scare when an anonymous hacker known as "ComodoHacker"—previously linked to breaches at other CAs like Comodo and DigiNotar—claimed to have compromised the company's systems and posted screenshots as evidence.^[69] As a responsible measure, GlobalSign immediately suspended the issuance of all new certificates starting September 6, 2011, to conduct a thorough investigation into the potential breach.^[70] The hacker's claims raised widespread concerns in the cybersecurity community, given the recent high-profile compromise of DigiNotar, which had led to the issuance of fraudulent certificates.^[71] The investigation, led internally and supported by Fox-IT—the Dutch firm that probed the DigiNotar incident—revealed that unauthorized access had occurred to an isolated external web server hosting the www.globalsign.com website, likely around early September 2011.^[72] This server was not connected to GlobalSign's core certificate authority (CA) infrastructure, including systems for key generation, storage, or issuance. The breach exposed the SSL/TLS certificate and private key for the website itself, which were promptly revoked to mitigate any risk. No evidence emerged of misused end-entity certificates, exposed customer data, rogue certificate issuance, or compromise to root certificate keys or hardware security modules (HSMs).^[73]^[74] GlobalSign resumed normal certificate issuance on September 12, 2011, after verifying the isolation of the affected server and confirming no broader impact to PKI operations.^[75] On December 13, 2011, the company published a comprehensive security incident report detailing the findings, emphasizing that the CA infrastructure remained intact throughout the event.^[72] In response to the incident, GlobalSign implemented enhanced security protocols, including stricter isolation of public-facing servers, improved intrusion detection, and regular third-party audits to prevent similar vulnerabilities.^[76] These measures reinforced the company's commitment to maintaining trust in its digital certification services without any long-term disruption to customers.

Certifications and Regulatory Achievements

GlobalSign holds multiple ISO certifications that underscore its commitment to information security, privacy, and operational resilience. The company has maintained ISO/IEC 27001 certification for its Information Security Management System (ISMS) since 2019, currently under the 2022 version, which covers the confidentiality, integrity, and availability of information across its operations.^[77]^[78] In addition, GlobalSign achieved ISO/IEC 27017:2015 certification for cloud security controls in 2023, providing guidelines for securing cloud services and extending its ISMS to address cloud-specific risks.^[4]^[79] Complementing these, ISO/IEC 22301:2019 certification for Business Continuity Management System (BCMS), obtained in 2019, ensures the organization can maintain critical functions during disruptions.^[4]^[78] Furthermore, GlobalSign achieved ISO/IEC 27701:2019 certification for its Privacy Information Management System (PIMS) in 2023, integrating privacy controls into its broader management framework to handle personal data responsibly.^[4]^[80] In the realm of electronic trust services, GlobalSign secured Qualified Trust Service Provider (QTSP) qualification under the EU's eIDAS regulation in 2018, enabling it to issue qualified certificates for electronic signatures and seals that carry the same legal validity as handwritten signatures across the European Union.^[22] Following Brexit, the company obtained equivalent QTSP recognition in the United Kingdom in 2021, ensuring continuity of compliant trust services under UK eIDAS regulations and supporting cross-border digital transactions.^[23] GlobalSign has also maintained WebTrust for Certification Authorities (CAs) accreditation since the early 2000s, with the first pan-European achievement in 2002, subjecting its CA operations to annual independent audits for principles including security, availability, processing integrity, confidentiality, and privacy.^[16]^[81] These audits, conducted by firms like Deloitte, verify compliance with industry standards for certificate issuance and management.^[82] As of 2025, all of GlobalSign's certifications remain active, as evidenced by current BSI registrations and recent WebTrust audit reports, enabling the company to serve regulated sectors such as finance and healthcare with trusted identity solutions while demonstrating recovery and sustained compliance post its 2011 certificate authority breach.^[77]^[83]

Industry Role and Recognition

Memberships in Standards Organizations

GlobalSign was an active member of the CA/Browser Forum from its inception in 2006, contributing to the development of standards that ensure the security and trustworthiness of digital certificates, including guidelines for TLS certificates.^[84] The forum's structure was formalized through bylaws adopted in 2012, with further refinements in subsequent years.^[85] As a key participant, GlobalSign helped shape baseline requirements that govern the issuance, validation, and management of publicly trusted certificates.^[84] In 2018, GlobalSign joined the Cloud Signature Consortium, a collaborative effort to establish open standards for interoperable cloud-based digital signatures. This membership supports the consortium's goal of enabling secure, platform-agnostic signing solutions across devices and applications.^[63] GlobalSign became a participant in the Microsoft Intelligent Security Association in 2019, focusing on ecosystem compatibility to enhance security integrations, particularly in mobile authentication and identity verification.^[62] Through its involvement in these organizations, GlobalSign provided input on baseline requirements for certificate validation and revocation practices, helping to define protocols for checking certificate status and ensuring timely revocation to maintain trust in PKI systems.^[84]^[86]

Awards and Market Position

GlobalSign has maintained a prominent position in the certificate authority (CA) market, ranking as the fourth largest CA by secure websites as of January 2015 according to Netcraft's SSL Survey. By November 2025, the company had ascended to the second largest CA globally, holding a 23.2% market share of SSL certificates among websites, behind only Let's Encrypt.^[87] This sustained top-tier ranking underscores GlobalSign's enduring competitive standing in the cybersecurity industry, with consistent placement in the top 10 CAs over the decade.^[88] In 2021, GlobalSign marked its 25th anniversary as a CA, highlighting its long-standing leadership in issuing trusted digital identities and securing endpoints worldwide.^[11] The milestone emphasized the company's evolution from an early pioneer in public trust services to a key player in scalable PKI solutions. More recently, in 2025, GlobalSign was recognized on the MES Midmarket 100 list by MES Computing for its tailored IT solutions designed specifically for mid-sized enterprises, affirming its adaptability and focus on diverse market segments.^[89] In 2025, GlobalSign received the Top InfoSec Innovator Award for PKI from Cyber Defense Magazine and the Fortress Cybersecurity Award for Cryptography from the Business Intelligence Group.^[67]^[90] GlobalSign's broader impact is evident in its trust from numerous Fortune 100 companies, many of which fall within the Fortune 500, and its support for over 267 million certificates that underpin global digital trust infrastructures.^[91]^[2] This scale demonstrates the company's critical role in enabling secure online transactions and identities for enterprises and IoT ecosystems alike.

References

[1]
GlobalSign Celebrates 25 Years - Press Release
May 18, 2021 · In that year GlobalSign was acquired by GMO Group in Tokyo, where the company is headquartered today. In 2012, the company began adapting to ...
[2]
Who is GlobalSign?
GlobalSign is the leading provider of trusted identity and security solutions enabling businesses, large enterprises, cloud service providers and IoT innovators ...
[3]
Contact Us - Regional Offices - GlobalSign
United States · Two International Drive Suite 150. Portsmouth NH 03801 · 603-570-7060 · 1-877-775-4562 · 603-570-7059 · sales-us@globalsign.com ...
[4]
GlobalSign Now Certified on Four ISO standards :: GlobalSign
**ISO Certification Announcement Summary:**
[5]
Globalsign (SA) - Leuven (3000) - BE0459134256 - Companyweb
When was Globalsign founded? Globalsign was founded on 11-10-1996. What is the address of Globalsign? The current registered office of Globalsign is located ...
[6]
History of the Internet: The Development of PKI - GlobalSign
Dec 14, 2021 · In 1996, as the World Wide Web was booming and the internet continued to develop, GlobalSign was founded in Belgium. It was one of the pioneers ...
[7]
Globalsign - Leuven 3000 (Leuven), Diestsevest 14 - Kompass
GlobalSign was the first and is now the longest serving Certification Authority in Europe and has been providing Digital Certificates, SSL Certificate and ...
[8]
[PDF] GlobalSign SSL Secure Server Certificates
GlobalSign was one of the first Certification Authorities and has been providing digital credentialing services since 1996. It operates multi-lingual sales and ...
[9]
GlobalSign Root Certificates
Aug 12, 2025 · GlobalSign Root Certificates. Our root certificates are some of the most trusted root certificates in the PKI ecosystem. Since our inception, we ...Missing: Leuven Belgium
[10]
[PDF] GlobalSign's Digital Certificate solutions enable a world of secure ...
Founded in 1996. Became a GMO. Internet Inc group ... Certificates valid from 1996. 2048 ... GlobalSign Belgium. UbiCenter, Philipssite 5. 3001 Leuven, Belgium.
[11]
GlobalSign Celebrates 25 Years as a Leader in the Certificate ...
May 18, 2021 · Since GlobalSign began operating in 1996 out of a small office in ... America, GlobalSign. "We've also now built a powerful cloud that ...
[12]
Corporate History / 2009-2005 | GMO Internet Group, Inc.
GlobalSign (currently, GMO GlobalSign K.K.) launches in China. 2007. Aug ... GMO Games is the result of the merger. Feb, 2006Service launch. GMO Payment ...
[13]
GMO GlobalSign Holdings K.K.
Develop and operate hosting service, security service and many internet solutions. News More info GMO GlobalSign HD Privacy PolicyMissing: headquarters | Show results with:headquarters
[14]
GlobalSign - Wikipedia
GlobalSign is a certificate authority and a provider of internet identity and security products. As of January 2015, Globalsign was the 4th largest ...
[15]
Our Leadership Team - GlobalSign
Leadership · CEO – Chief Executive Officer. Ichiro Chujo · COO – Chief Operations Officer. Koji Takenobu · CLO – Chief Legal Officer. Carolyn Oldenburg · CISO – ...
[16]
Group Companies | Corporate Profile | GMO Internet Group, Inc.
GMO GlobalSign K.K.. Main business operations, Identity and information security solutions. Address / contact detail. 〒150-0043. Shibuya FUKURAS, 1-2-3 ...
[17]
GlobalSign First Pan-European Certification Authority Receiving ...
Nov 19, 2002 · Independent auditor Deloitte & Touche confirms that Globalsign achieved the AICPA/CICA WebTrust Seal of Assurance for Certification ...Missing: 2000 | Show results with:2000
[18]
GlobalSign Extends Webtrust Accreditation After Successful Audit By ...
Jun 3, 2004 · In November 2002, GlobalSign was the first pan-European public Certification Authority to attain this accreditation level. The WebTrust Seal of ...
[19]
GlobalSign Launches Managed PKI Lite Service
Jun 1, 2009 · GlobalSign announces the launch today of Managed PKI Lite, an in-house Certificate Authority hosting service for businesses.Missing: 2010 | Show results with:2010
[20]
GlobalSign Announces Unlimited Server Licensing across SSL ...
London, UK – 27 September, 2010 – GMO GlobalSign Ltd. (www.globalsign.co.uk), one of the leading providers of SSL Certificates worldwide, today announced a ...
[21]
The Ideal Authentication Method for Small Businesses - GlobalSign
Jan 18, 2022 · According to a Net craft survey conducted in January 2015, GlobalSign was the fourth largest certificate authority in the world at the time.Missing: 4th | Show results with:4th
[22]
[PDF] GlobalSign Data Protection Policy Statement
GlobalSign complies with the EU Directive and the Law of Belgium on. Privacy. The European Union Directive establishes the most rigid legal framework in the ...Missing: 2007-2015 GMO
[23]
GlobalSign Launches Next-Generation IoT Identity Platform ...
PRNewswire/ -- GMO GlobalSign (www.globalsign ... GlobalSign ... issuing millions of certificates per day and more than 3,000 certificates per second.
[24]
Leading Certificate Authority, GlobalSign, Secures Qualified Trust ...
Oct 17, 2018 · By doing so, GlobalSign becomes one of the first global CA's to issue qualified digital certificates to users and organizations for the purpose ...
[25]
GlobalSign obtient la reconnaissance QTSP - Blog
Aug 17, 2021 · GlobalSign obtained recognition from the UK Information Commissioner's Office (ICO) on July 27th, 2021. GlobalSign also worked closely with its ...
[26]
GMO GlobalSign Recognized on the Prestigious 2025 MES ...
Jul 14, 2025 · GMO GlobalSign is a subsidiary of GMO GlobalSign Holdings, K.K., a member of the Japan-based GMO Internet Group, has offices in the Americas, ...
[27]
GlobalSign and ID-Security Mark a Decade of Collaboration
Jul 22, 2025 · GMO GlobalSign is a subsidiary of GMO GlobalSign Holdings, K.K. a member of the Japan-based GMO Internet Group, has offices in the Americas ...Missing: history | Show results with:history
[28]
How Certificate Authorities Fit into a Zero Trust Security Model
Jan 24, 2024 · Explore the crucial role of Certificate Authorities in the implementation of a zero-trust security model.Missing: timestamps | Show results with:timestamps
[29]
Managed PKI - Public Key Infrastructure - GlobalSign
Digitally sign documents and encrypt sensitive emails. Document Signing Solutions · Email Security (S/MIME) · Code Signing Certificates · EV Code Signing ...
[30]
What Are The Different Types of SSL Certificates? - GlobalSign
There are three types of SSL Certificate available today; Extended Validation (EV SSL), Organization Validated (OV SSL) and Domain Validated (DV SSL).Extended Validation (ev Ssl)... · Domain Validated (dv Ssl)... · Domainssl
[31]
SSL / TLS CERTIFICATES - EN :: EN :: GlobalSign
What type of certificates do you need? ; Domain Validated (DV). $249 USD · Issued in minutes; no paperwork required ; Organization Validated (OV). $349 USD ...Domain Validated (DV) SSL · Organization Validation (OV) · Wildcard SSLMissing: Phoenix | Show results with:Phoenix
[32]
6 Types of SSL Certificates to Secure Your Website - GlobalSign
SSL/TLS CERTIFICATES. Domain Validated (DV) · Organization Validated (OV) · Extended Validation (EV) · Wildcard · Multi-Domain / SANs. CLIENT CERTIFICATES.
[33]
Email Security - S/MIME & Secure Email - GlobalSign
Scalable Email Security to counter phishing and data loss. Digitally sign emails to fight spoofing and phishing attacks.
[34]
Digital Signatures & Document Signing Solutions - GlobalSign
Our Document Signing Solutions are designed to secure documents and streamline workflows with digital signatures and seals to provide confidence, integrity and ...
[35]
ACME - Automated Certificate Management - GlobalSign
ACME is an industry standard protocol designed to optimize certificate management through automated deployment and lifecycle management.Ssl/tls Certificate... · Machine Identity Security · Multi Domain Certificate...Missing: OCSP 0.5 trillion
[36]
Understanding CRL, OCSP, and OCSP-Stapled Revocation Checks
Jul 17, 2024 · Revocation checks are performed to verify the validity of digital certificates. These checks are performed when connecting to a secure website.Missing: 0.5 trillion
[37]
Digital Certificates - PKI - SSL/TLS GlobalSign GMO
We're experts in automated, Scalable, Integrated Digital Certificates Solutions, SSLs/TLSs, managed PKI, IoT, authentication & email security.Company · Careers · Ssl / tls certificates · Contact Us
[38]
Two-Factor Authentication Solutions - GlobalSign
Our strong authentication solutions utilize digital certificates for convenient and secure certificate-based and token-based two-factor authentication.Missing: CIAM | Show results with:CIAM
[39]
[PDF] Using Certificate-based Authentication for Access Control | GlobalSign
Using their web-based management platform known as. Enterprise PKI (EPKI), GlobalSign allows you to easily manage the lifecycle of multiple Digital Certificates.
[40]
[PDF] GlobalSign Enterprise Solutions - Google Apps Authentication User ...
This guide explains using SAML Single Sign-on (SSO) for Google Apps, requiring a Google Apps account, LDAP server, and SAML authentication server.
[41]
PKI Can Strengthen Your Zero Trust Security Posture - GlobalSign
May 24, 2023 · The integration of PKI into a Zero Trust Framework can truly strengthen an organization's security posture by adding layers of protection and authentication.
[42]
Manage PersonalSign Certificate - GlobalSign Support
Manage PersonalSign Certificate. This page gives you full control over Verified Mark Certificates. Order new certificates, renew or reissue certificates.Missing: CIAM self-
[43]
GlobalSign APIs
The XML API connects your systems to GlobalSign, giving real time CSR parsing, error checking and allows full querying on order status and Certificate delivery ...
[44]
Authentication for Cloud Services - GlobalSign
Learn how to use digital certificates deployed via our Managed PKI solution as two-factor authentication to control access to users and devices.
[45]
IoT Device Security | GlobalSign
Establish and manage unique, verifiable identities for millions of devices without manual overhead. Ensure trust across your IoT ecosystem with automated ...
[46]
IoT Security - IoT Identity Platform - GlobalSign
GlobalSign's PKI-based, cloud IoT Identity Platform is purpose-built for scaleable, flexible and interoperable IoT security. Get a free demo.
[47]
Automate Your PKI with GlobalSign's Auto Enrollment Gateway
Feb 16, 2023 · GlobalSign's Auto Enrollment Gateway allows organisations to fully automate and scale their PKI management and certificate lifecycle.
[48]
[PDF] Auto Enrollment Gateway | GlobalSign
The Auto Enrollment Gateway can be used to enroll and issue certificates to all types of Active Directory objects, including users, servers, desktops, laptops, ...
[49]
Certificate Automation Manager - GlobalSign Support
Formerly known as GlobalSign's Auto Enrollment Gateway (AEG), Certificate Automation (CAM) Manager is the latest automated certificate management solution that ...
[50]
PKI for DevOps - DevOps Certificates - GlobalSign
GlobalSign integrates with many DevOps tools to manage certificates, anything from securing pod-to-pod communications using Kubernetes clusters.
[51]
Code Signing Certificates - Signed vs Unsigned | GlobalSign
### Summary of GlobalSign Code Signing Tools for DevOps Pipelines and Supply Chain Security
[52]
Digital Certificates in DevOps: Automating Security in CI/CD Pipelines
Code signing involves attaching a digital signature to code or executables, ensuring that the software comes from a trusted source and has not been tampered ...Missing: supply | Show results with:supply
[53]
Ubisecure Stock Price, Funding, Valuation, Revenue ... - CB Insights
Ubisecure's valuation in September 2014 was $12.3M. Date. Round. Amount ... GMO Internet Group. Base 10 Ventures. Octopus Ventures. Rounds. 1. Unattributed.
[54]
GMO acquires Finland's Ubisecure for $12.3M - Tech in Asia
Oct 1, 2014 · Ubisecure, an access management software company from Finland, is now a subsidiary of GMO Global Sign, an authentication service.
[55]
GMO GlobalSign Acquires Ubisecure - Yahoo Finance
Sep 30, 2014 · "This acquisition provides immediate revenue opportunity as we complement our product portfolio and deliver Ubisecure's existing IAM solutions ...
[56]
GMO GlobalSign Acquires Ubisecure - GlobeNewswire
Sep 30, 2014 · The acquisition delivers essential technology and talent to propel GlobalSign's strategic focus on identity services for the rapidly emerging, ...Missing: spun 2016
[57]
GlobalSign acquires Ubisecure, plans to win the IoE market
Sep 30, 2014 · After becoming a part of the Japanese group of companies GMO Internet Inc. in 2006, GlobalSign has been steadily expanding its enterprise ...<|control11|><|separator|>
[58]
GlobalSign IAM is now Ubisecure Inc
Nov 30, 2016 · We are launching our new Ubisecure, Inc corporate identity, including a new brand, vision statement, marketing website and evolved product portfolio.Missing: acquires €
[59]
Ubisecure appoints identity services expert Simon Wood as CEO
Jan 12, 2017 · Ubisecure was acquired from the GMO GlobalSign group in 2016 by Base 10 Ventures (b10v). Simon will also join b10v as a technology advisor ...Missing: spun | Show results with:spun
[60]
GlobalSign - 2025 Company Profile, Team, Funding & Competitors
Sep 20, 2025 · Founded Year. 1974 ; Location. Portsmouth, United States ; Stage. Funding Raised ; Latest Funding Round. Grant (prize money), Jan 01, 2017, $5.62K.
[61]
GlobalSign and ID-Security Mark a Decade of Collaboration
Jul 22, 2025 · Long-standing partnership enables full potential of PKI through a combined CLM & email gateway solution. LEUVEN, Belgium & ZURICH, July 22, ...Missing: renewed | Show results with:renewed
[62]
GlobalSign Joins Microsoft Intelligent Security Association to ...
Feb 26, 2019 · The integration with GlobalSign adds a layer of integrity checking around Certificate Signing Request (CSR) security not previously available to ...
[63]
GlobalSign now part of Microsoft Intelligent Security Association to ...
GlobalSign now part of Microsoft Intelligent Security Association to strengthen mobile authentication security. 27 February 2019. Share this Post.
[64]
GlobalSign Joins Cloud Signature Consortium and Adobe Cloud ...
By joining the Cloud Signature Consortium and the Adobe Cloud Signature Partner Program, GlobalSign will be better able to provide digital signing services to a ...
[65]
Press Releases - GlobalSign
GlobalSign Joins Cloud Signature Consortium and Adobe Cloud Signature Partner Program. 10 April 2018. GlobalSign Joins Cloud Signature Consortium and Adobe ...
[66]
Presenting The 2025 MES Midmarket 100 Awardees
The MES Midmarket 100 is MES Computing's prestigious annual list recognizing forward-thinking technology vendors and service providers.Missing: GlobalSign | Show results with:GlobalSign
[67]
GlobalSign stops secure certificates after hack claim - BBC News
Sep 7, 2011 · It comes after an anonymous hacker claimed to have gained access to the company's servers. If confirmed, it would be the second security breach ...
[68]
GlobalSign stops issuing certificates, investigates breach claim
Sep 7, 2011 · “As a responsible CA, we have decided to temporarily cease issuance of all Certificates until the investigation is complete. We will post ...Missing: authority | Show results with:authority
[69]
GlobalSign stops issuing SSL certs, probes hacker claims
Sep 7, 2011 · GlobalSign has suspended the publication of SSL certificates as a precaution in the wake of unverified claims by a hacker linked to attacks ...
[70]
GlobalSign: Certificate Infrastructure Untouched In Hack
Peripheral web server, not part of the Certificate issuance infrastructure, hosting a public facing web property was breached. • What could have been exposed?
[71]
Breach confirmed in GlobalSign, SSL certificates not compromised
Dec 15, 2011 · GlobalSign said on Tuesday that the SSL certificate and key for www.globalsign.com may have been exposed after a hack on an external server in September.
[72]
GlobalSign releases security incident report. - SANS ISC
GlobalSign released a press release today to address concerns that they may have had a compromise of their CA infrastructure.
[73]
GlobalSign resumes issuing security certificates - BBC News
Sep 12, 2011 · Belgian security firm GlobalSign is to resume issuing website authentication certificates, after a hacker claimed to have breached its systems.Missing: subcontractor | Show results with:subcontractor
[74]
https://isc.sans.edu/diary/12205
[75]
Repository - GlobalSign
Information Security Management System ISO/IEC 27001:2022 - BSI Certificate of Registration · Privacy Information Management System ISO 27701:2019 - BSI ...
[76]
GlobalSign Achieves ISO27001 and ISO22301 Certifications
Jan 16, 2020 · The ISO/IEC 27001:2013 certification is evidence that GlobalSign has met rigorous international standards in ensuring confidentiality ...
[77]
[PDF] Certificate of Registration - GlobalSign
and operates an ISO/IEC 27001 certified ISMS that complies with the commonly accepted controls of, and takes the implementation guidance of ISO/IEC 27017 into ...
[78]
[PDF] GMO GlobalSign K.K.
General Office Security, Human Resources. GMO GlobalSign Holdings K.K.. 3F STRUST 2nd Building. 1-2-10 Hosoecho. Shimonoseki-Shi 750-0016. Yamaguchi. Japan.<|control11|><|separator|>
[79]
[PDF] WebTrust for Certification Authorities – Extended Validation SSL
Sep 15, 2024 · Use of the WebTrust seal. GlobalSign's use of the WebTrust for Certification Authorities – Extended Validation SSL Seal constitutes a ...
[80]
[PDF] WebTrust for Certification Authorities – Network Security - GlobalSign
Mar 7, 2025 · Appendix B – List of CAs in scope. The following CAs were in scope of the WebTrust for CA – Network Security audit: Root CA. #. Subject DN.Missing: accreditation | Show results with:accreditation
[81]
[PDF] WebTrust for Certification Authorities – SSL Baseline - GlobalSign
Sep 15, 2024 · GlobalSign NV/SA (“GlobalSign”) operates the Certification Authority (CA) services as enumerated in Appendix B and provides SSL CA services. The ...Missing: accreditation | Show results with:accreditation
[82]
What Is the CA/Browser Forum and What's Its Role? - GlobalSign
Aug 15, 2024 · The CA/B Forum was established in 2005 with the goal of advancing the best practices of the industry in order to improve the way digital ...Missing: 2006 | Show results with:2006
[83]
About the CA/Browser Forum
The CA/Browser Forum is governed by Bylaws, elects officers, and aims to improve certificate usage for Internet security. It is an unincorporated association.Members · Forum Minutes · Associate Members · Forum IPR Subcommittee
[84]
Latest Baseline Requirements | CA/Browser Forum
This document describes an integrated set of technologies, protocols, identity-proofing, lifecycle management, and auditing requirementsBaseline · Baseline Requirements · Certificate Contents · FAQ for Baseline...Missing: founding | Show results with:founding
[85]
Usage statistics and market shares of SSL certificate authorities for ...
Let's Encrypt is used by 60.3% of all the websites, that is a SSL certificate authority market share of 63.9%. ... GlobalSign. 22.0%. 23.2%. Sectigo. 6.1%. 6.5 ...Missing: 2015 | Show results with:2015
[86]
Changing of the Guard in the SSL Certificate Market
Jan 7, 2025 · According to the magnificent folks over at W3Techs, GlobalSign's market share has grown from less than 10% at the start of 2024 to over 20%!
[87]
GMO GlobalSign Recognized on the Prestigious 2025 MES ...
Jul 14, 2025 · GMO GlobalSign recognized by the 2025 MES Midmarket 100. Share. The annual MES Midmarket 100 recognizes technology vendors with deep knowledge ...
[88]
GlobalSign Clients - Customer Stories
Our customers include prominent worldwide organizations, numerous Fortune 100 companies ... GlobalSign is the leading provider of trusted identity and security ...