Topic starter
25/06/2026 2:55 pm
TL;DR: Two-thirds of organisations have suffered outages from unexpectedly expiring certificates, while nearly half still find certificates outside the IT security team’s purview and almost 2 in 5 have three or more departments managing them, according to DigiCert. The message is clear: digital trust fails when certificate ownership, visibility, and lifecycle control are fragmented.
Editorial analysis by NHI Mgmt Group, based on content published by DigiCert: “Solving digital trust for the real world”.
Key questions
Q: How should teams govern certificate lifecycle management in multi-cloud environments?
A: Teams should govern CLM as part of the broader machine identity stack, not as a standalone certificate tool.
Q: Why do expired certificates still cause outages in mature environments?
A: Expired certificates still cause outages because many environments rely on manual tracking, fragmented ownership, and renewal processes that do not match certificate growth.
Q: What are the signs that certificate governance is failing in critical infrastructure?
A: Common warning signs include unclear ownership, expired certificates, mixed use of approved and unapproved issuers, and last-minute manual renewals.
Practitioner guidance
- Define a single certificate ownership model Assign one accountable owner per certificate class, covering issuance, renewal, revocation, and exception handling across all business units.
- Inventory certificate estates continuously Discover certificates across servers, devices, code signing workflows, and application platforms so renewal planning starts from a complete asset view.
- Prioritise expiration monitoring by trust function Track certificates that protect production services, device identity, and software integrity before lower-impact internal certificates.
Bottom line: Certificate lifecycle failures are governance failures first, because ownership gaps and fragmented control create expiry risk before technology does.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 5 hours ago by NHI Mgmt Group
25/06/2026 4:10 pm
Certificate lifecycle is identity governance, not just infrastructure hygiene: This article makes the case that certificates are governed trust assets, not static technical artefacts. Once ownership fragments across departments, the organisation loses the ability to enforce one lifecycle policy across issuance, renewal, and retirement. The practitioner takeaway is that certificate programmes need the same accountability model used for other identity assets.
A question worth separating out:
Q: What should organisations do when certificate management is split across teams?
A: Organisations should reconcile the full certificate estate, map every certificate to an owner, and create one renewal and revocation path per class. Without that, teams cannot reliably prevent outages, prove accountability, or keep digital trust consistent across environments.
👉 Read our full editorial: Certificate lifecycle management and digital trust at enterprise scale
This post was modified 5 hours ago by NHI Mgmt Group