Overview
Founded in 2002 and headquartered in Poznań, Poland, Certum is a Certificate Authority (CA) operated by Asseco Data Systems, a WSE-listed subsidiary of Asseco Group — one of Europe's largest IT enterprises with operations in over 60 countries. Certum is one of the few European CAs that owns its own trusted root certificate, pre-installed in all major browsers and operating systems for over 20 years.
Certum provides a full SSL Certificate lineup including DV/OV/EV certificates, code signing, S/MIME email certificates, and eIDAS-compliant qualified electronic signatures, building a loyal European customer base through competitive pricing.
Key Strengths
- European Root CA with Independence: Certum is one of the few European CAs owning its own trusted root, embedded in all major browsers and OS for over 20 years. This gives Certum full independence from third-party CA trust chains — a distinct compliance advantage in the global CA market.
- Full Certificate Portfolio: Covers DV (Domain Validation), OV (Organization Validation), EV (Extended Validation), Wildcard, and Multi-Domain SAN certificates. Single-domain DV starts at $29.95/year, making Certum one of the most affordable commercial CAs in Europe.
- Code Signing Certificates: Supports Microsoft Authenticode, Java, and Adobe AIR code signing with reliable timestamping service. Certum code signing certs are trusted across major software distribution platforms including Microsoft Store and Apple Developer programs.
- eIDAS-Compliant Qualified Signatures: Certum delivers EU eIDAS-compliant Qualified Electronic Signature (QSCD) certificates, enabling mutual recognition across EU member states for electronic contracts, e-invoicing, and government document delivery.
- S/MIME Email Certificates: Personal and enterprise email signing and encryption certificates compatible with Outlook, Thunderbird, and Apple Mail for end-to-end email security.
Product Ecosystem
SSL/TLS Certificates
Certum's SSL product line covers all validation tiers: DV for personal blogs (minute-level issuance), OV for business identity verification, and EV for maximum trust with green address bar display. Wildcard certificates cover unlimited subdomains under one primary domain; Multi-Domain SAN supports up to 250 domains.
Code Signing Certificates
Designed for Windows software (Authenticode), Java applications, and Adobe AIR publishing. Includes timestamping service to maintain signature validity beyond certificate expiration.
eIDAS Qualified Electronic Signatures
Compliant with EU eIDAS Regulation No. 910/2014, Certum's QSCD certificates carry legal effect equivalent to handwritten signatures across all EU member states.
S/MIME Email Certificates
Personal and business email certificates enabling encrypted email communication and sender identity verification across major email clients.
Limitations
- Limited International Brand Recognition: Certum's brand awareness is significantly lower than DigiCert, Sectigo, and GlobalSign outside Europe, with fewer channel partnerships and localized support in Asia-Pacific and North America.
- Aged Control Panel UI: The management console's user interface lags behind modern platforms like DigiCert CertCentral and Sectigo's Manager; certificate application and renewal workflows feel less intuitive.
- Inconsistent English Documentation: While Certum offers an English interface, technical documentation and support quality in English are not as comprehensive as top-tier CAs. Some advanced features are documented in Polish only.
- Moderate Issuance Speed: OV certificates typically take 1-3 business days, EV certificates 3-5 business days — competitive but not exceptional among European CAs.
Use Cases
| Scenario | Rating | Description |
|---|---|---|
| European SME websites | ★★★★★ | Best value in Europe: DV from $29.95/yr, competitive OV pricing |
| Software publisher code signing | ★★★★★ | Multi-platform support with reliable timestamping |
| EU compliance signature needs | ★★★★☆ | eIDAS qualified signatures meet cross-border legal requirements |
| Email security & encryption | ★★★★☆ | Solid S/MIME support across major clients |
| Asia-Pacific/North America deployments | ★★★☆☆ | Technically usable, but limited local support |
Pricing
| Certificate Type | Validation | Annual Fee (approx.) | Notes |
|---|---|---|---|
| Single Domain DV | DV | $29.95 | Basic single-domain SSL |
| Wildcard DV | DV | $99.95 | Unlimited subdomains |
| Multi-Domain SAN | DV/OV | From $59.95 | Up to 250 domains |
| OV SSL | OV | $49.95 | Org identity verification |
| EV SSL | EV | $99.95 | Green address bar |
| Code Signing | — | $99.95 | With timestamp service |
| S/MIME Email | — | $19.95 | Personal/enterprise |
Prices reflect Certum official list pricing; actual costs may vary due to promotions and reseller policies.
FAQ
Is Certum's root certificate trusted by all browsers?
Yes. Certum's root has been embedded in all major browsers (Chrome, Firefox, Safari, Edge) and operating systems for over 20 years, ensuring full compatibility.
What's the relationship between Certum and Asseco Data Systems?
Certum is the CA brand of Asseco Data Systems, a WSE-listed subsidiary of Asseco Group — one of Europe's largest IT companies with operations across 60+ countries.
Does Certum support wildcard certificates?
Yes. Standard wildcard covers all first-level subdomains (e.g., *.example.com). Multi-Domain SAN supports up to 250 distinct domains.
What platforms does Certum code signing support?
Microsoft Authenticode (Windows software), Java code signing, and Adobe AIR publisher signing. Timestamp service is recommended for long-term signature validity.
How long does Certum EV validation take?
Typically 3-5 business days for EV certificates. OV validation takes 1-3 business days. DV certificates are issued within minutes.