Post-Quantum Issuance. Production-Ready.
ZetaCA signs with ML-DSA-87 and encapsulates with ML-KEM-1024. Classical, hybrid, or full PQC. Your choice. Your certificates are future-proof today.
The certificate authority that outlastsquantum threats.
ZetaCA issues certificates that quantum computers can't break. Post-quantum by design. Compatible with every HSM on the market. 1,250 certs/sec.
ZetaCA
PKI Management
Dashboard
Certificate Authority
All Certificates
Issue Certificate
Templates
CRL
System
Logs
Backups
HSM
mTLS
License
Settings
Logout
Admin / Dashboard
A
Dashboard
Certificate Authority
ROOTZetaCA Root
ActiveSUBIssuing CA
ActiveMGMTManagement CA
ActiveHSM Status
CryptoServer HSMConnected
ProviderUtimaco
Slot 1Online
Certificates
Issued (24h)47
Active1,284
Revoked12
Expiring (30d)23
System Logs
Total Events4.8k
Errors0
Backups
Last Backup2h ago
IntegritySHA-256 ✓
Users & Roles
Admins3
Operators5
Auditors2
Recent Certificates
SubjectAlgorithmStatusExpires
api.zetacert.comML-DSA-87ISSUED2027-03-01
vault.internalECDSA P-384ISSUED2027-02-15
iot-gateway-01ML-DSA-87 + ECDSAISSUED2027-01-20
Deploy Your Way
Post-quantum issuance on every deployment mode. Your infrastructure, your constraints. ZetaCA adapts.
Sovereign SaaS
Hosted in France/EU. SecNumCloud ready. Fully managed.
On-Premise
Your servers. Your Kubernetes. Helm Charts included.
Air-Gapped
Fully disconnected. Built for classified and critical environments.
01Security & Cryptography
zetaca://templates
Certificate Templates
ClassicalPQCHybrid
CLASSICAL
S/MIME Email Certificate
AlgorithmECDSA P-256
Key UsageSign, Encrypt
Enabled730d
CLASSICAL
Kubernetes API Server
AlgorithmECDSA P-384
Key UsageTLS Server Auth
Enabled365d
PQC
PQC TLS Client Auth
AlgorithmML-DSA-87
Key UsageTLS Client Auth
Enabled365d
PQC
PQC Code Signing
AlgorithmML-DSA-87
Key UsageCode Signing
Enabled1095d
HYBRID
Hybrid IoT Device
AlgorithmML-DSA-87 + ECDSA
Key UsageDevice Identity
Enabled2555d
PQC
PQC Document Signing
AlgorithmSLH-DSA-128s
Key UsageDocument Signing
Enabled1095d
02Flexibility & Integration
Every HSM. One Interface.
Utimaco, Thales, Entrust. ZetaCA works with your existing hardware. PKCS#11 native. No rip-and-replace.
zetaca://certificates
Certificates
6 results
Common Name...
All ▼
All ▼
| Subject | Status |
|---|---|
| api.zetacert.com | ISSUED |
| vault.internal | ISSUED |
| iot-gateway-01 | ISSUED |
| expired-legacy.corp | EXPIRED |
| dev-signing-key | REVOKED |
| new-service.staging | PENDING |
One certificate authority. Every use case.
Engineered for what's next.
Use Case 01
IoT & Embedded
Strong device identity at scale. Millions of certificates, lightweight footprint, zero compromise on security.
Device Identity
Lightweight PKI
Update Signing
Supply Chain Security
The ZetaCert Stack
ZetaCA delivers raw cryptographic power. Plug it into PKIFactor, and you get enterprise-grade governance.
ZetaCA Standalone
Post-quantum native certificate authority for isolated, air-gapped, or mission-critical environments.
1,250 Certs/Sec Issuance
Native HSM (PKCS#11)
Post-Quantum Native
PKIFactor + ZetaCA
Cryptographic power meets orchestration intelligence. The complete enterprise PKI stack.
ZETA
PKIF
CryptographyOrchestration