Post-Quantum Issuance. Production-Ready.
ZetaCA signs in ML-DSA. Classical, hybrid or full PQC — your choice. Your certificates are future-proof today.
Loading
Language
The certificate authority that withstandsquantum threats.
ZetaCA issues classical (RSA, ECDSA) and post-quantum (ML-DSA, FIPS 204) certificates designed to withstand cryptanalytic attacks from quantum computers as currently understood. Validated on Utimaco u.trust GP, PKCS#11-compatible.
Available for proof of concept and integration projects.
ZetaCA
Dashboard
Certificate Authority
Certificates
Issue Certificate
Templates
CRL / OCSP
System
HSM
mTLS
Users & Roles
Audit Logs
License
Settings
Logout
Admin / Dashboard
A
Certificate Authority
ROOTZetaCA Root
ML-DSA-87
SUBIssuing CA
ML-DSA-87
MGMTManagement CA
ECDSA P-384
HSM Status
Provider
Utimaco CryptoServer
Interface
PKCS#11
Slot 1
Online
Keys
12 active
Overview
47
Issued (24h)
1,284
Active
12
Revoked
8
Templates
Recent Certificates
api.zetacert.com
ML-DSA-87PQC2027-03-01
vault.internal
ECDSA P-384Classical2027-02-15
iot-gateway-01
ML-DSA-87 + ECDSAHybrid2027-01-20
Deploy Your Way
Post-quantum issuance on every deployment mode. Your infrastructure, your constraints. ZetaCA adapts.
Sovereign SaaS
Sovereign hosting in France/EU. Fully managed.
On-Premise
Your servers. Docker Compose or VM. Automated deployment.
Air-Gapped
Fully disconnected. Built for classified and critical environments.
01Security & Cryptography
zetaca://templates
Certificate Templates
ClassicalPQCHybrid
CLASSICAL
S/MIME Email Certificate
AlgorithmECDSA P-256
Key UsageSign, Encrypt
Enabled730d
CLASSICAL
Kubernetes API Server
AlgorithmECDSA P-384
Key UsageTLS Server Auth
Enabled365d
PQC
PQC TLS Client Auth
AlgorithmML-DSA-87
Key UsageTLS Client Auth
Enabled365d
PQC
PQC Code Signing
AlgorithmML-DSA-87
Key UsageCode Signing
Enabled1095d
HYBRID
Hybrid IoT Device
AlgorithmML-DSA-87 + ECDSA
Key UsageDevice Identity
Enabled2555d
PQC
PQC Document Signing
AlgorithmSLH-DSA-128s
Key UsageDocument Signing
Enabled1095d
02Flexibility & Integration
Every HSM. One Interface.
Native PKCS#11 compatible. Tested and validated on Utimaco u.trust GP HSM (CryptoServer firmware). Works with any PKCS#11-compliant HSM.
zetaca://certificates
Certificates
6 results
Common Name...
All ▼
All ▼
| Subject | Status |
|---|---|
| api.zetacert.com | ISSUED |
| vault.internal | ISSUED |
| iot-gateway-01 | ISSUED |
| expired-legacy.corp | EXPIRED |
| dev-signing-key | REVOKED |
| new-service.staging | PENDING |
Technology Partnership
ZetaCA & Utimaco
Hardware protection for your cryptographic keys. Classical and post-quantum.
ZetaCert
×
ZetaCA natively integrates with Utimaco u.trust GP HSMs (CryptoServer firmware) via PKCS#11 R3. Your private keys stay in hardware, non-exportable, protected by certified silicon. From classical PKI to post-quantum cryptography, without changing your infrastructure.
u.trust GP HSM
PCIe or network HSM (Se-Series, CSe-Series). Certified CryptoServer firmware, centralized key management for enterprise deployments.
QuantumProtect
Post-quantum application package activated in-field. ML-DSA in hardware via PKCS#11, NIST CAVP testing during the 2025 cycle (certificate references available on request).
Non-exportable keys
Private keys never leave the HSM. Certified hardware protection.
Hot key rotation
CA key rotation without service interruption. Guaranteed cryptographic continuity.
One certificate authority. Every use case.
Engineered for what's next.
Use Case 01
IoT & Embedded
Strong device identity at scale. Millions of certificates, lightweight footprint, zero compromise on security.
Device Identity
Lightweight PKI
Update Signing
Supply Chain Security
ZetaCA standalone, or with PKIFactor
Pick your level of orchestration: ZetaCA as a standalone CA for isolated or air-gapped environments, or paired with PKIFactor for multi-CA centralised governance.
PKIFactor + ZetaCA
Cryptographic power meets orchestration intelligence. The complete enterprise PKI stack.
Cryptography
Orchestration
ZetaCA Editions
Your CA. Your cryptography. Your edition.
Classical PKI with Starter. HSM and high availability with Enterprise. Post-quantum native with Quantum.
Compare EditionsAvailable for proof of concept and integration projects.