WillItSurvive
Cybersecurity companies · subsidiary of GMO GlobalSign Holdings K.K. (TSE: 3788), which is 52% controlled by GMO Internet Group, Inc. (TSE: 9449) · Belgium

GlobalSign

Belgian certificate authority providing SSL/TLS, PKI, and digital identity services under GMO Internet Group.

Hard to displace
Assessed 21 July 2026 · Evidence as of 21 July 2026
Strong structural protection; the business model survives ai pressure.
On the recordSince 21 July 2026 · Checkable from July 10, 2026 · Every call on the record Checkpoint: GMO GlobalSign Holdings Q2 FY2026 results presentation
The call

GlobalSign sits behind regulatory walls that free CAs and AI systems cannot cross, while cloud giants nibble at its low end.

GlobalSign issues digital certificates that verify websites and identities are real, and gets paid by large companies to do this. It is hard to replace because browsers and operating systems have trusted its root certificates for 30 years, and because the European Union requires certificates to come from approved providers like GlobalSign, not just anyone. Free services like Let's Encrypt cannot become trusted authorities the way GlobalSign is.

Why
01
AI pressure: None apparent. No AI lab can obtain eIDAS QTSP status or root trust, so AI cannot replace GlobalSign's accreditation layer directly. Could AI do the core job? Unlikely.
02
Bigger players: AWS Certificate Manager and Google Trust Services. Cloud giants now issue free TLS certificates inside their own platforms, cutting demand for standalone CA purchases. Could a giant copy it? No, they are blocked.
03
What protects it. EU eIDAS QTSP accreditation plus 30 years of root trust embedded in browsers and operating systems.
What would change this call
Sectigo or DigiCert announces further CA acquisitions or GlobalSign itself is acquired within 12 months. would show consolidation pressure is squeezing independent mid-size CAs like GlobalSign.
GMO GlobalSign Holdings Q2 FY2026 results (around July 10, 2026) show flat or declining certificate revenue. would indicate customer or volume loss to larger consolidated rivals.
Certificate lifecycle rules (47-day max by 2026) push customers toward automation platforms like Sectigo or DigiCert bundling ACME tools. would show smaller CAs losing accounts unable to keep pace with automation demands.
Key numbers
  • Sectigo bought Entrust's public CA unit (Jan 2025)
  • DigiCert acquired for about $6.9B (2024)
  • Let's Encrypt share fell 8.6 pts QoQ (Q1 2026)
Named risks
  • Free automated CAs like Let's Encrypt commoditize basic SSL/TLS issuance revenue. Severity: high
  • Peer consolidation (DigiCert PE buyout, Sectigo-Entrust deal) could pressure subscale GlobalSign. Severity: medium
  • CA/Browser Forum mandated shrinking certificate lifespans (toward 47-day SSL/TLS) disrupts pricing and operations through 2026. Severity: medium
  • Post-quantum cryptography transition requires industry-wide infrastructure overhaul within 6-12 months. Severity: medium
Rivals, as read in July 2026
RivalDirectionEvidence
Let's Encryptlosing toissues an estimated 54 to 64% of SSL/TLS certs by volume as of mid 2026, per comparecheapssl.com
DigiCertgaining onacquired by Clearlake Capital and TA Associates for approx $6.9 billion in 2024, consolidating scale
Sectigogaining onacquired Entrust's public certificate business in January 2025, expanding share
Entrustcontestingpublic cert business absorbed by Sectigo Jan 2025, reshaping top-5 share (GlobalSign among top 5, ~55-60% combined)
Questions people ask
Is GlobalSign profitable in 2026?
Yes. Its parent, GMO GlobalSign Holdings K.K. (TSE:3788), reported record FY2025 consolidated net profit of ¥1.01 billion, up 17.6% year over year, for the year ended December 31, 2025, alongside operating profit up 18.3% to ¥1.48 billion.
Who owns GlobalSign?
GlobalSign operates under GMO GlobalSign Holdings K.K., listed on the Tokyo Stock Exchange (ticker 3788). GMO Internet Group, Inc. held 52.00% of voting rights as controlling shareholder, per a filing dated April 2, 2026.
Could AI replace GlobalSign?
No. GlobalSign holds licensed Qualified Trust Service Provider status under EU eIDAS and decades-old root-certificate trust embedded in browsers and operating systems, regulatory accreditation no frontier AI lab can independently obtain as of 2026.
Is Let's Encrypt beating GlobalSign?
Let's Encrypt issues an estimated 54 to 64% of all SSL/TLS certificates by volume as of mid 2026, dominating commodity issuance, but GlobalSign competes instead in the higher-value enterprise and QTSP-regulated tier that free CAs cannot legally enter.
Is GlobalSign being acquired?
There is no report of GlobalSign itself being acquired. Its parent, GMO GlobalSign Holdings, instead announced acquiring StrategIT Co., Ltd. as a subsidiary on April 20, 2026, while rivals DigiCert and Sectigo underwent separate ownership changes.
How is GlobalSign responding to shrinking certificate lifespans?
GlobalSign cut code-signing certificate validity to 460 days effective March 1, 2026, is moving SSL/TLS certificates toward 200-day and eventually 47-day maximums, and partnered with Quantum PKI in January 2025 to help customers plan post-quantum migrations.
Timeline
  • 2026-07-15GlobalSign publishes blog on AI Model Signing, positioning PKI for AI integrity verification
  • 2026-04-20GMO GlobalSign Holdings announces acquisition of StrategIT Co., Ltd. as subsidiary
  • 2026-03-01Code signing certificate maximum validity cut to 460 days per CA/B Forum vote
  • 2026-02-09GMO GlobalSign Holdings reports record FY2025 sales and profit
  • 2025-12-26GlobalSign stops issuing 2 and 3 year code signing certificates
  • 2025-12-17GMO GlobalSign announces 2025 wrap: 50M+ signings, fifth ISO certification
  • 2025-01-14GlobalSign announces reseller partnership with Quantum PKI for PQC migration
  • 2024-11GlobalSign partners with HashiCorp via Atlas Vault plug-in for Vault users
  • 2024-05Cygnet.One launches Cygnature blockchain e-signature tool with GlobalSign
Revision history
21 July 2026
First assessed. Hard to displace. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources