Digital certificates have been around for decades. Certificate Authorities (CAs) issue certificates, Public Key Infrastructure (PKI) provides the foundation of digital trust, and cryptographic technologies such as RSA, ECC, and SM2 are widely available. Post-quantum cryptography is also moving toward practical deployment. Yet, for many individuals and organizations, using digital certificates in everyday applications remains complicated.
Having a certificate does not mean knowing how to use it. Users still need to understand certificate requests, certificate formats, install certificates, configure applications, manage private keys, and perform cryptographic operations manually. Organizations face even greater challenges. They must manage large numbers of certificates, integrate cryptographic capabilities into existing business systems, maintain security infrastructure, and keep up with evolving cryptographic standards and compliance requirements.
The fundamental problem is not the absence of digital certificates or cryptographic technologies. It is the gap between having cryptographic resources and actually using them effectively in real-world applications. Digital certificates provide the foundation of trust. But the real problem is that trust cannot be easily and consistently delivered to everyday applications.
The gap is not caused by a single technical problem. It involves several interconnected challenges.
(1) Certificate Management Gap
A digital certificate is not a one-time product. It has a complete lifecycle, including:
(2) Cryptographic Application Gap
Even when users possess valid digital certificates, their applications may not know how to use them automatically. For example:
The availability of certificates does not automatically translate into practical cryptographic capabilities.
(3) Infrastructure Integration Gap
Organizations often have existing CAs, HSMs, identity management systems, security gateways, and business applications. However, these systems may operate independently, without an automated mechanism to coordinate certificate management and cryptographic operations.
Integrating cryptographic capabilities into existing business environments can require considerable development, deployment, and maintenance resources.
(4) Usability Gap
Cryptographic technologies are inherently specialized. But ordinary users should not need to become cryptography experts to benefit from digital trust. Users want their emails to be signed and encrypted automatically, their documents to be signed and verified conveniently, and their websites to have HTTPS secure connections without having to manage certificates manually.
Cryptography should become a natural part of the application workflow, not another technical task imposed on users.
ZoTrus was established to address this gap. Our approach is built on two complementary capabilities:
(1) Certificate Management Automation
Certificate Management Automation addresses how digital certificates are obtained, deployed, maintained, and managed throughout their lifecycle. It automates essential certificate operations, including:
ACME (Automatic Certificate Management Environment), defined in RFC 8555, is an important standardized mechanism for automating certificate management. However, certificate management automation is not limited to ACME. Different application environments may require different integration methods and management mechanisms.
(2) Cryptographic Application Automation
Cryptographic Application Automation addresses a different but equally important question: How can applications actually use digital certificates and cryptographic capabilities automatically? It integrates cryptographic operations into real-world application workflows, including:
Certificate Management Automation makes certificates available and manageable. Cryptographic Application Automation makes those certificates useful in real-world applications. Together, these two capabilities form the foundation of the ZoTrus technology approach.
ZoTrus Technology has spent more than 5 years truly implementing certificate management automation and cryptography application automation in three practical application areas: website security, email security (including Chat Security based on email system), and document security.
(1) Website Security: Making SSL Certificate and HTTPS Automatic
HTTPS is essential for protecting communication between websites and their visitors. However, deploying and maintaining SSL/TLS certificates across multiple websites and servers can be operationally demanding.
ZoTrus provides automated certificate management and HTTPS deployment capabilities to simplify this process. Key capabilities include:
The ZoTrus HTTPS Automation Gateway combines SSL certificate automation with gateway-based security protection, helping organizations deploy and maintain secure websites more efficiently.
The goal is to make SSL certificate management and website protection an automated part of web infrastructure.
(2) Email Security: Making S/MIME certificate and S/MIME Automatic
S/MIME provides standardized mechanisms for digital signatures and encryption for email security. However, practical deployment often requires certificate enrollment, installation, configuration, and ongoing management. For ordinary users, these steps can become barriers to adopting email security. For organizations, managing S/MIME certificates and cryptographic operations across existing email infrastructure can be even more challenging.
ZoTrus addresses these challenges through ZTmail. ZTmail provides automated S/MIME capabilities for email and chat, including:
ZTmail offers two implementation paths:
ZTmail App
A user-oriented application that makes S/MIME encryption and digital signatures accessible to individuals and small businesses, without requiring them to manage complex certificate operations manually.
ZTmail Gateway
An enterprise solution that integrates with existing email infrastructure through SMTP and IMAP proxy capabilities, automating S/MIME operations while supporting centralized certificate and identity management.
By combining certificate management automation with automated cryptographic operations, ZTmail makes secure email communication part of the normal email workflow.
The goal is to make S/MIME practical, accessible, and automatic for everyone.
(3) Document Security: Making Digital Signing and Encryption Part of the Workflow
Digital signatures are essential for establishing document authenticity and integrity. Document encryption also helps protect sensitive information from unauthorized access. However, traditional document signing and encryption workflows can involve separate applications, manual certificate selection, complex configuration, and additional operational steps.
ZoTrus Sign brings certificate-based digital signing and cryptographic operations into document workflows. Its capabilities include:
One distinctive feature of ZoTrus cloud signing is that the original document does not need to be uploaded to the cloud signing platform. Instead, ZTmail App generates a document hash and submits it to the cloud signing service for signing, then the signed hash goes back to ZTmail App to complete the digital signature locally. This approach helps protect document privacy and confidential business information while enabling cloud-based signing.
By integrating document signing into the email workflow and supporting local document operations, ZoTrus makes digital signatures more accessible in everyday work.
The goal is to make document signing, encryption, and verification a natural part of document handling.
Different users have different requirements for deploying cryptographic capabilities. Individuals and small businesses need simple applications that work with minimal configuration. Large organizations need centralized management, integration with existing infrastructure, and control over cryptographic operations.
ZoTrus addresses these requirements through two complementary implementation paths.
(1) Application-Based Automation
For individuals and smaller organizations, applications such as ZTmail App provide ready-to-use cryptographic capabilities. Users can perform email and document security operations without having to understand the underlying certificate management and cryptographic processes.
(2) Gateway-Based Automation
For enterprises, the ZoTrus Gateway approach integrates cryptographic capabilities into existing infrastructure. Instead of requiring organizations to replace their current business applications, the gateway operates alongside existing systems to automate certificate management and cryptographic operations.
Supporting components include:
This approach allows organizations to introduce cryptographic automation while preserving their existing business workflows and infrastructure investments.
Different deployment paths. One consistent objective: make cryptographic applications automatic.
Cryptographic technologies continue to evolve. RSA and ECC have provided the foundation for modern digital security. SM2 supports China's commercial cryptographic requirements. Meanwhile, the development of post-quantum cryptography is creating new requirements for future-proof cryptographic infrastructure. Supporting multiple algorithms is only part of the challenge. Applications and infrastructure must also be able to adapt as cryptographic standards and security requirements change.
ZoTrus embraces cryptographic agility through its support for multiple cryptographic algorithms and evolving application requirements. The technology direction includes:
Cryptographic agility is not simply about supporting more algorithms. It is about making cryptographic evolution manageable for real-world applications.
ZoTrus believes that cryptographic automation is essential to making future cryptographic technologies practical and accessible.
The digital world has already established the foundations of cryptographic trust through digital certificates, CAs, PKI, and standardized cryptographic technologies. But these foundations should not remain isolated technical resources. They should work seamlessly within the applications people use every day. This is why ZoTrus focuses on connecting certificate management with real-world cryptographic applications.
ZoTrus vision is built around three principles:
(1) Make Cryptographic Accessible
Make professional cryptographic capabilities available to ordinary users and organizations, without requiring specialized technical knowledge.
(2) Make Cryptographic Applications Automatic
Automate certificate management and cryptographic operations so that digital signing, encryption, decryption, and verification become natural parts of application workflows.
(3) Make Digital Trust Visible and Actionable
Help users and systems recognize trusted identities, verify digital signatures, and understand the security protections behind their communications and documents.
Digital certificates are the foundation. Automation makes them useful. Applications make digital trust real. ZoTrus, Cryptography for Trust, Automation for Security, AI for Productivity.
ZoTrus are committed to making cryptographic application automation accessible to everyone, helping bridge the gap between digital certificates and the applications that depend on them.
Click here to read PDF edition (digital signature and timestamp with global trust and global legal effect, all rights reserved, plagiarism is prohibited! Please indicate when reprinting: Reprinted from ZoTrus CEO Blog)