Skip to content

Digital Certificate

What is Digital Certificate?

An electronic document that uses a digital signature to bind a public key with an identity. Digital certificates are issued by Certificate Authorities and used in TLS/SSL, email encryption, and code signing.

Information Security

Frameworks that govern digital certificate

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on digital certificate

Requirements naming digital certificate across 2 standards, quoted from the control text.

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.11 control

Authenticate access to systems, applications and data, using multifactor authentication at minimum for privileged users and sensitive data, and digital certificates or equivalent strength for system identities.

CCM-IAM-14 · Strong Authentication →
TEFCA - Trusted Exchange Framework and Common Agreement1 control

Implement mutual TLS authentication and approved digital certificates for QHIN to QHIN exchange, with certificate lifecycle management, revocation handling, and chain of trust validation.

TEFCA-SEC-02 · Authentication and Mutual TLS →

Questions people ask about digital certificate

What is Digital Certificate?
An electronic document that uses a digital signature to bind a public key with an identity. Digital certificates are issued by Certificate Authorities and used in TLS/SSL, email encryption, and code signing.
Why is Digital Certificate important for compliance?
Digital Certificate is a key concept in Information Security. Understanding digital certificate helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Digital Certificate?
Digital Certificate appears in the requirement text of Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1, TEFCA - Trusted Exchange Framework and Common Agreement. Across these standards we have identified 2 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Digital Certificate?
Explore our compliance framework pages to see how digital certificate applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Digital Certificate applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.