To secure network communication, protect data in transit, and ensure endpoint authentication, we offer two conceptual TLS certificate solutions. Both are built upon identical cryptographic standards and can contain the same identification attributes; however, they differ in the scope of their acceptance and the root certification authority (Root CA) that anchors them.

1. Publicly Trusted TLS Certificates (Web PKI)

These certificates are designed for systems and services accessible to the general public via the internet (e.g., public websites, e-commerce platforms, client portals).

• Compliance with Global Standards: Certificates are issued in strict compliance with the currently applicable version of the Baseline Requirements (BR) for TLS, as defined by the international CA/Browser Forum consortium..
• Ubiquitous / Automatic Trust: The root certificate of the issuing certification authority (CA) is pre-installed in the trusted root certificate stores of all major operating systems, web browsers, and mobile devices (e.g., Microsoft, Apple, Google, Mozilla)).
• Seamless Access: When accessing the website, users are not prompted with any untrusted connection warnings.

2. Internal TLS Certificates for Closed PKI (Private PKI)

A solution designed exclusively for communication within closed business ecosystems, between contractual partners, across supply chains (B2B), or within internal infrastructure.

• Identical Content and Parameters: The certificate contains the same identification attributes (e.g., Common Name, Subject Alternative Name, organization details) and achieves the exact same level of encryption as a publicly trusted certificate.
• Internal Certification Authority: Unlike publicly trusted certificates, this type is issued by our own internal (private) certification authority.
• Managed Trust Distribution: These certificates are not globally publicly trusted. Contractual partners are required to explicitly import our internal CA's root certificate into the trusted certificate stores of their respective operating systems and application environments.
• Legal Framework: The trust relationship and the technical conditions for utilizing this internal PKI are fully governed by a Service Level Agreement (SLA) or specific technical agreements executed between the contracting parties.