Overview

IdenTrust was founded in 1999, headquartered in Salt Lake City, Utah, USA. It is a globally recognized digital identity verification and certificate trust services provider. Unlike traditional CAs that sell SSL certificates directly to end users, IdenTrust's core business operates as a Trust Bridge — providing root certificate trust anchors for other Certificate Authorities through cross-signature technology. IdenTrust's root certificate is pre-installed in over 95% of major browsers (Chrome, Edge, Firefox, Safari) and operating systems (Windows, macOS, iOS, Android). IdenTrust also operates the D-Trust (Germany) root certificate trust chain and maintains a trust alliance network with multiple CAs, making it a critical component of the internet PKI trust infrastructure.

IdenTrust corporation See the corporation page for details. More SSL Certificate providers available on the category page.

Key Strengths

  • Broad Root Pre-Installation: IdenTrust's root certificate is pre-installed in Chrome, Edge, Firefox, Safari and Windows, macOS, iOS, Android — covering over 95% of all devices, ensuring global compatibility for downstream CA certificates
  • Cross-Signature Trust Services: Provides trust anchors for hundreds of third-party CAs through cross-signature technology, enabling their certificates to gain automatic trust across major browsers and operating systems without requiring independent root embedding
  • Trust Bridge Architecture: IdenTrust's proprietary Trust Bridge model enables certificate interoperability across heterogeneous CA systems, allowing enterprises to integrate certificates from multiple CAs under a single trust chain with significantly reduced management overhead
  • WebTrust Compliance: Strict adherence to CA/Browser Forum baseline requirements with 100% annual WebTrust audit pass rate, ensuring reliability and continuity of the trust system
  • D-Trust Partnership: Operates a root certificate trust chain in partnership with Germany's D-Trust, providing deep government and enterprise trust foundation across European markets

Product Ecosystem

  • Root Certificate Cross-Signature: Provides IdenTrust root key signing for third-party CA certificates, enabling automatic global browser and OS trust — the fastest route to market for emerging CAs
  • IdenTrust Trust Network: A trust alliance program uniting global CAs under a unified trust framework, with members sharing the browser pre-installation advantage of IdenTrust's root certificate
  • D-Trust Trust Chain: Partnership with Germany's D-Trust to provide regionally compliant root certificate trust services meeting German and EU digital identity regulations
  • Enterprise Identity Verification: Multi-factor authentication and digital signature verification solutions for government, financial, and critical infrastructure identity scenarios

Limitations

  • No Direct End-User Sales: IdenTrust does not sell SSL certificates directly to individual users or businesses; certificates must be obtained through its partner CAs
  • Narrow Product Range: Consumer and SMB product lines are virtually non-existent, with a business model highly concentrated on B2B root certificate and trust services
  • Limited Brand Awareness: Lower recognition among general website administrators, primarily well-known within the CA industry and PKI professional circles

Use Cases

  • CA Cross-Signature Requirements (★★★★★): CAs or organizations needing IdenTrust root certificate trust for browser and OS compatibility
  • Industrial Control PKI (★★★★): Critical infrastructure requiring highly reliable root trust anchors; IdenTrust's Trust Bridge architecture is naturally suited
  • Government Identity Systems (★★★★): Government agencies building trusted PKI frameworks benefit from IdenTrust's cross-CA trust anchor capabilities for multi-vendor certificate integration
  • General Website SSL Purchase (★★★): Choose CAs partnered with IdenTrust's cross-signature (e.g., Sectigo, GlobalSign) to benefit from the IdenTrust trust chain

Pricing

Service Type Pricing Model Description
Root Certificate Cross-Signature Custom quote Priced based on CA scale and certificate volume; contact IdenTrust sales
Trust Network Membership Annual membership fee Join the IdenTrust trust alliance sharing root certificate trust chain
Enterprise Identity Verification Project-based Multi-factor authentication and digital signature solutions

IdenTrust operates a B2B business model and does not offer standard retail SSL certificate pricing. End-user SSL certificates should be purchased through its partner CAs.

FAQ

  • How is IdenTrust different from a regular CA? IdenTrust's core business is as a Trust Bridge, providing root certificate trust anchors for other CAs through cross-signature, rather than selling SSL certificates directly to end users. See IdenTrust corporation.
  • Can individual website owners use IdenTrust certificates? IdenTrust does not sell certificates directly to individuals. Purchase from CAs using IdenTrust's cross-signed root (e.g., Sectigo, GlobalSign) for the same browser compatibility benefits; see CDN and SSL/TLS configuration best practices.
  • What makes IdenTrust's Trust Bridge different from standard cross-signature? The Trust Bridge is a unified cross-CA trust model enabling interoperability across multiple different root CAs under a single trust framework, rather than one-to-one cross-signature relationships; see the DNSSEC guide.
  • What is the relationship between D-Trust and IdenTrust? IdenTrust partners with Germany's D-Trust to operate a root certificate trust chain, providing regionally compliant digital identity verification services for the European market; see the GDPR compliance checklist.