DigiCert ONE Features

Administration (12)

Notifications: Self-monitors important metrics and sends notifications to users in-app or through email, text message or otherwise.
Warranty: Ensures reimbursement in the case of money lost during payment on SSL-secured site.
Server License: Providers may limit the number of servers to which SSL certificates may be issued.
Free Reissues: Allows users to reissue SSL information in the case the private key or certificate is lost.
Auditing: Documents access and alterations of the database for analytics and reporting.
Compliance: Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.
Management Console: Provides Administration tools/console that are easy to use and learn for routine maintenance tasks.
Whitelisting: The ability to green light a specific Domain or system to bypass the scanning process.
Policy Enforcement: Abilities to set DNS protection policy control standards including whitelisting, blacklisting, and application access.
Incident Reports: Produces reports detailing suspicious activity and anomalies related to networks and endpoints.
Domain Categorization: Allows administrators to group users and devices based on IP, Endpoint, or role.
Multi-Network Management: Allows centralized administration and control of DNS protection and policies across multiple networks.

Functionality (19)

Multi-Domain Support: Supports SSL encryption across multiple website domains
Browser Support: Supports SSL-secured access across required browser types.
Site Seal: Provides a visual indicator for online privacy status.
AI Features: Utilizes AI for certificate lifecycle management functions.
Durability: Logs and stores multiple copies and versions of master keys.
Envelope Encryption: Implements a key hierarchy with a local data encryption key (DEK) and a key encryption key (KEK).
Automation: Allows administrative control over automated tasks related to key management, storage and distribution.
DNS Lookups: Associate information from various domains to identify associated parties and threats.
Threat Intelligence: Develops domain reputation by gathering contextual information related to web-based threats.
Advanced Traffic Filtering: Allows DNS routing to resolve requests across HTTP or HTTPs requests and/or covers IPv4 and IPv6 protocols.
Certificate Discovery: Automatic discovery of certificates directly from Certificate Authorities, network scanning, and deep discovery methods.
Expiration Monitoring: Monitors and notifies administrators of certificate expiration dates.
Automated Certificate Operations: Automates certificate deployment, renewals, and revocations.
Policy And Role-Based Access Controls: Offers granular permissions for assigning certificate owners and other roles.
Workflow: Offers built-in workflows to assign ownership and management of certificates.
Protocol Support: Offers industry-standard protocols such as CMP, ACME, and SCEP.
Reporting And Search: Offers template and custom reports and search functionality.
Audit And Enforcement: Enforces certificate policies and provides audit trails of user and certificate activities to detect issues.
Key Storage: Allows keys to be stored on end devices, on the platform, or hardware security modules.

Security (5)

Availability (4)

API/Integrations: Integrates with third-party software to provide other features and expand functionality.
Service Integration: Integrates with major cloud service provider offerings for simplified management and distribution.
Regional Support: Supports key distribution across multi-regions to increase availability.
Scalability: Expands functionality while maintaining balanced loads. Serves growing demand without reducing functionality.

Protection (6)

Quarantine: Blocks malicious website or destination, redirecting the user to a secure page
Continuous Monitoring: Monitors 24/7 to detect anomalies in functionality, user accessibility, traffic flows, and tampering.
Off-Network Protection: Supports agent-based DNS protection with individual endpoint devices on any network.
Guest Network Protection: Allows DNS filtering and protection for guest WiFi networks.
BYOD Protection: Supports bring-your-own-device (BYOD) users, supporting DNS protection across any device connected to a network or equipped with an agent.
Native DNS over HTTPS (DoH): “DoH” is a protocol that facilitates DNS resolution via HTTPS. Native DoH functionality facilitates DNS over DoH using local agents to manage DNS requests, extending DoH beyond a single browser or network.