What is Sectigo?
Sectigo is an established certificate authority, formerly known as Comodo, that provides organizations with a reliable way to protect their websites, applications, emails, and documents.
Why Choose Sectigo Certificates?
Organizations select Sectigo certificates primarily because they offer proven encryption technology, excellent trust from clients (browser security), and versatility (multiple certificate formats) at a price point that works for any budget. They also have many automation tools available which enable easy management of your digital certificate portfolio.
What Are the Recent Sectigo Changes in 2026?
The digital certificate industry is changing quickly, and Sectigo has introduced several updates to stay aligned with CA/B Forum requirements:
- SSL/TLS certificate validity is now limited to 199 days starting March 12, 2026.
- Domain validation reuse is limited to 198 days for SSL issuance and reissuance.
- Code Signing certificate validity has been reduced to 459 days from February 23, 2026.
- DNSSEC protected DNS responses are now checked during DCV and CAA validation.
- Sectigo is placing greater focus on ACME, CaaS, and SCM as the industry moves toward shorter SSL validity and future 47 day certificates
What Types of Certificates Does Sectigo Offer?
Sectigo offers a broad range of security solutions, including DV, OV, and EV SSL certificates, Wildcard and Multi Domain SSL, Code Signing, S/MIME Email Signing, Document Signing Certificates, and certificate lifecycle management platforms.
Are Sectigo SSL Certificates Trusted by Browsers?
Yes. Sectigo SSLcCertificates are accepted by major global Browsers, OS, and Mobile Devices. As a result, web traffic from their sites is transmitted securely via HTTPS connections.
How Long Does Sectigo SSL Issuance Take?
DV SSL Certificates are issued in minutes once the domain has been verified. OV & EV Certificates will take 1-3 business days to issue due to business verification.
What Is Sectigo Certificate Manager (SCM)?
Sectigo Certificate Manager, or SCM is an automated platform that allows an organization to manage, monitor, renew and issue certificates from a single location across their servers, networks and cloud systems.
What Is Sectigo ACME or Certificate as a Service (CaaS)?
Sectigo's ACME and Certificate as a Service offering automate the complete certificate life cycle, reducing manual input and increasing efficient management of shorter lived certificates.
Does Sectigo Offer Code Signing Certificates?
Yes, Sectigo has both Standard and EV Code Signing Certificates to digitally sign applications for developers to demonstrate their application's authenticity to end users.
What Are Sectigo Email Signing Certificates?
Sectigo S/MIME or Email Security Certificates help secure email communication through encryption and digital signatures, making it easier to verify sender identity and protect confidential messages.
How Do Shorter SSL Validity Changes Affect Businesses?
As certificate validity becomes shorter under CA/B Forum changes, businesses may need to renew and validate certificates more frequently. Sectigo automation tools help reduce the workload and keep certificates compliant and active.
What is a Sectigo root certificate?
A Sectigo root certificate is a top level trusted Certificate Authority (CA) certificate used to establish trust for SSL/TLS, Code Signing, S/MIME, and other digital certificates issued by Sectigo. Browsers and operating systems use these roots to validate certificate chains.
What are the main Sectigo root certificates?
Sectigo currently operates several major trusted roots, including:
- USERTrust RSA Certification Authority
- USERTrust ECC Certification Authority
- COMODO RSA Certification Authority
- COMODO ECC Certification Authority
What is AAA Certificate Services root?
AAA Certificate Services is an older Sectigo owned root certificate primarily used for cross signing and legacy compatibility. It expires in 2028 and helps older systems trust newer certificate chains.
What are Sectigo R46 root certificates?
Sectigo introduced R46 and E46 public roots for newer TLS, email, and Code Signing hierarchies. Examples include:
- Sectigo Public Server Authentication Root R46
- Sectigo Public Server Authentication Root E46
- Sectigo Public Email Protection Root R46
- Sectigo Public Email Protection Root E46
These newer roots support modern certificate issuance and security requirements.
Why do some Sectigo roots still use COMODO names?
Sectigo was formerly known as Comodo CA and continues to operate legacy Comodo root certificates. These roots remain trusted and continue supporting existing trust chains.
What is USERTrust RSA Certification Authority?
USERTrust RSA Certification Authority is one of Sectigo's most widely trusted modern root certificates used for SSL/TLS and other certificate products. It uses SHA 2 based cryptography and expires in 2038.