DigiCert Reports Growing ASC X9 PKI Adoption
More than 1,900 organizations are deploying, evaluating, or testing the ASC X9 Financial PKI as DTCC sets certificate deadlines for late 2026.
Updated on Nov. 4, 2026 in Data Centers
DigiCert reported growing adoption of the ASC X9 Financial PKI, a public key infrastructure introduced in 2025 and operated by DigiCert under governance of the Accredited Standards Committee X9. More than 1,900 organizations are deploying, evaluating, or testing the system.
Why it matters
Changes to public TLS requirements are narrowing the role of browser-trusted certificates, which are often impractical for mutual authentication between servers. The ASC X9 Financial PKI offers an alternative that supports mutual TLS without depending on browser root programs.
The figure of more than 1,900 organizations comes from DigiCert's own reporting on adoption, and DigiCert's broader customer base exceeds 125,000 organizations. The count does not indicate how many organizations have reached production use.
The players
DigiCert
DigiCert is a digital trust and certificate authority provider headquartered in Lehi, Utah, which operates the ASC X9 Financial PKI and reports that over 90% of Fortune 500 companies use its services.
Accredited Standards Committee X9
Accredited Standards Committee X9 is a standards body for the financial services industry that establishes and governs the ASC X9 Financial PKI.
Depository Trust & Clearing Corporation (DTCC)
The Depository Trust & Clearing Corporation is a major U.S. financial market infrastructure company that clears and settles securities transactions and now requires ASC X9 Financial PKI certificates for certain services.
The details
DigiCert operates the ASC X9 Financial PKI, which was selected by ASC X9 as a Certificate Authority and launched its production environment in 2025. The Depository Trust & Clearing Corporation (DTCC) requires ASC X9 Financial PKI certificates for certain services that use mutually authenticated network connections, with deadlines set for November 30, 2026 in testing and December 31, 2026 in production.
Timeline
2025: ASC X9 Financial PKI introduced and production environment launched.
November 30, 2026: DTCC certificate implementation deadline in testing environments.
December 31, 2026: DTCC certificate implementation deadline in production.
Big Picture
Browser root program rules for public TLS have narrowed what certificates can do for server-to-server mutual authentication, pushing financial infrastructure toward private trust frameworks such as the ASC X9 Financial PKI. This moves certificate trust decisions away from browser vendors and into industry-governed standards.
Organizations connecting to DTCC services will need ASC X9 Financial PKI certificates and the applicable trust chain installed before testing and production deadlines. Teams can obtain these certificates through DigiCert and should plan testing ahead of the 2026 dates.
The takeaway
Organizations that rely on mutual TLS for financial connections should begin testing ASC X9 Financial PKI certificates well before the late-2026 DTCC deadlines. Early testing reduces the risk of disruption when production requirements take effect.
What happens next
DTCC's certificate implementation deadlines fall on November 30, 2026 for testing environments and December 31, 2026 for production environments.
Further reading
Explore more on Data Centers to see how infrastructure teams manage certificates and secure connections.
More information
Learn more about certificate options on the DigiCert website.
