Infrastructure, domains & the recurring invoice of civilisation

The Hosting Times

Independent reporting on web hosting, domains and the infrastructure behind the internet.

Domains

Verisign Pushes Certificate Status Service and .pki Domain Plan

October 6, 2026 ·
Verisign Pushes Certificate Status Service and .pki Domain Plan

AI-generated illustrative image.

Verisign is moving deeper into certificate-status infrastructure with a new service called Verisign Informed, while also applying for .pki in ICANN’s current new top-level domain round.

The company’s new product is aimed at what Verisign calls “stale trust”: the gap that can appear when systems continue to rely on cached or outdated certificate-validity information after credentials have been revoked or otherwise changed. Verisign describes the service as high-assurance validation that can return cryptographically signed certificate-status responses for applications that need fresher trust decisions.

For hosting providers, managed WordPress platforms, SaaS operators, and large site owners, the announcement is notable because certificate revocation and validation are operational issues as much as security issues. TLS automation has reduced issuance friction, but incident response still depends on how quickly relying systems can learn that a certificate should no longer be trusted.

Domain Name Wire reported that Verisign Informed is in limited beta and that Verisign expects general availability in the first half of 2027. The same report said Verisign has applied for .pki, positioning the string for possible public-key-infrastructure use cases as ICANN prepares to reveal the full list of applications in the 2026 round.

The move also reflects a broader trend in domain and hosting infrastructure: trust services are becoming more real-time. Certificate lifetimes are shortening, automated issuance is now standard, and attackers can move quickly when keys or validation workflows fail. That puts more pressure on registries, certificate authorities, CDNs, and hosting platforms to make revocation and status checks both fast and resilient.

Why it matters: If Verisign can turn its DNS-scale lookup experience into a widely adopted certificate-status service, hosting and platform teams may get another option for reducing the window in which compromised credentials remain useful. The .pki application is earlier-stage and will depend on ICANN’s evaluation process, but it signals that infrastructure branding around certificate and identity trust is likely to be part of the new-gTLD conversation.

Sources: Domain Name Wire; Verisign Informed.