Chief Executive Officer, DigiCert, Inc.
DigiCert's Vision for the Future with Amit Sinha | RSAC 2025
Amit Sinha from DigiCert underscores the urgency of secure digital interactions in the face of new mandates and emerging ...
About Amit Sinha
In a July 2026 interview with ETCIO, Amit Sinha discussed DigiCert's AI trust architecture and the concept of "agent passports" for autonomous AI systems. Sinha argued that as AI agents move from simple assistants to autonomous operators, enterprises need verifiable digital identities, strong authentication, and policy-led access before allowing agents to interact with sensitive systems. He described agent passports as a way to establish who created an agent, how it was trained, what it is authorized to access, and which actions it can take. Sinha also discussed DigiCert's work on confidential computing and content trust. He noted that DigiCert has been working with Google on third-party attestation for confidential computing environments, explaining that the company brings the same core third-party attestation used in certificate issuance to AI workloads running in cloud infrastructure. Additionally, he mentioned DigiCert's content trust platform, which uses the C2PA standard to provide media provenance for AI-generated videos and images.
Transcript (21 segments)
L
Lisa Martin0:09
Welcome back to TechStrong TV. This is Lisa Martin coming to you live from the show floor at RSAC in San Francisco with about 45,000 folks. This is TechStrong TV's 10th year covering this massive event in cybersecurity. We're having great conversations with leading cybersecurity experts. Happy to see one of my old colleagues, Amit Sinha, the CEO of DigiCert. It's so great to see you again.
A
Amit Sinha0:33
Great to see you too, Lisa. We talked about a year ago and I'm excited to be back here.
L
Lisa Martin0:40
I am too. I'm going to brag on you for a minute. I did some LinkedIn stalking. Author of 50 patents, 34 issued, 16 pending, 25 published journal and conference papers, three book chapters, four theses, dozens of white papers. How do you find the time to do all this and lead a company?
A
Amit Sinha0:56
That was in the past. I had good mentors, good teammates. It's the team that makes it happen ultimately.
L
Lisa Martin1:04
Absolutely. Being surrounded by a great team is everything. But you've been featured on CNBC, CNN, here you are with us. What is going on at DigiCert? Give me the rundown since we last spoke.
A
Amit Sinha1:15
Well, since we last spoke, a lot has happened in the industry. DigiCert is a global leader in digital trust, which is foundational infrastructure that makes sure all our digital interactions are secure, trustworthy, and private. The industry is going through a massive renaissance. Just two weeks ago, the browser forum passed a new mandate requiring digital certificates to have validity reduced from 398 days to 47 days — an 8x reduction. That means the industry needs failsafe automation. We're talking to many customers about how to get command and control over millions of cryptographic assets. On top of that, quantum computing is a huge change. The math that secures our trust fabric is vulnerable to quantum computers. Amazon, Microsoft, Google are all coming up with faster quantum chips. We may have a ChatGPT-like moment where we wake up and find our trust fabric broken. So people are preparing for post-quantum cryptography, and those standards exist today. It's just work needs to happen to upgrade.
L
Lisa Martin4:22
How do you conceptually explain digital trust to customers and what does that mean for them to deliver the brand value they expect?
A
Amit Sinha4:34
Digital trust is foundational infrastructure. How do you know you're talking to the right bank website, not a fake one? How do you know your app-to-app communication is secure? How do you know the deed on a PDF you signed will hold up in court? How do you know a software update on your iPhone really came from Apple? All of this is based on PKI and cryptography. 90% of Fortune 500 use DigiCert for that trust fabric.
L
Lisa Martin5:18
As that fabric undergoes changes and upgrades, how do you keep up? The speed is mind-boggling. For organizations that might not have the visibility to understand where their vulnerabilities are, how do they keep up with changes to the fabric?
A
Amit Sinha5:40
Step one is you need a system and automation. Going from 398 days to 47 days requires failsafe automation. You need to be able to validate automatically, which means your DNS and PKI need to work together. Otherwise, you'll have humans in the loop leading to outages and exposure. DigiCert One gives you a single platform to manage and automate these two foundational pieces. It prepares you for post-quantum cryptography as well.
L
Lisa Martin7:24
Okay, because what is post-quantum? It's just new math. So think about your passport example — now there's a better, more tamper-proof passport, but the underlying process hasn't changed. You still need to validate, manage, and automate.
A
Amit Sinha7:26
Exactly. Post-quantum is just new math. DigiCert One now supports all the post-quantum standards approved by NIST. We're already ahead of the curve. Two years ago, people said it's a problem down the road. Now CISOs are asking, 'What's our quantum strategy? Do we have an inventory of our assets? What are our crown jewels?' The conversation has gone from 'what's quantum' to 'what can we do about it.'
L
Lisa Martin8:29
That's outstanding. In cybersecurity, are we always behind? Will we ever be able to be proactive with how quickly things are transpiring and the risk surface expanding? That train isn't slowing down.
A
Amit Sinha8:52
It isn't. When you add AI agents, customers are asking how to manage them. One foundational principle is to separate identity and authorization from the capabilities of the software or agent. A year from now, I might have six agents working for me — a Zoom avatar, an agent approving expense reports, maybe one negotiating a contract. I need a kill switch, an audit log, a tamper-proof identity. That's back to PKI. We're bringing similar concepts to AI agent trust.
L
Lisa Martin10:40
The agentic AI explosion is another catalyst in every industry. I talk with CMOs and everyone is embracing agentic AI. But getting control over it is a challenge because they're proliferating so fast.
A
Amit Sinha11:11
You need to combat AI with AI. We need to learn from the past and be proactive. Separating identity and access is crucial. It's table stakes. We have customers who are very proactive. For example, Zoom now supports end-to-end quantum-safe encryption, uses DigiCert PKI for client-server communication, rotates certificates on a six-month basis, and code signing certificates on a monthly basis. They do most of their digital trust infrastructure on a fully automated basis with DigiCert.
L
Lisa Martin12:49
Absolutely. It's not a nice to have anymore; it's essential. But many organizations struggle with where to start. Knowing there is a way with DigiCert to become proactive is enlightening. Last question: I think I saw that DigiCert is on track to reach a billion ARR. Congratulations. What's next? What can we expect from DigiCert?
A
Amit Sinha13:24
We just want to deliver awesome services and platform for our customers. In the next four years, PKI and digital trust will go through a massive renaissance with quantum and the things we talked about. Many customers ask where to start. I'm doing trust summits — we've hit three cities and will go to four more. We're helping customers start their PKI modernization journey, prepare for quantum safety, and bring digital trust to AI agents. A billion dollars is just a milestone. We want to continue to grow and serve our customers proactively.
L
Lisa Martin14:20
It was so great to have you back on TechStrong TV. I always enjoy our conversations. Thank you for sharing what's going on with digital trust, why it's foundational, how the fabric is changing, and how you're helping organizations get ahead of the curve. Really appreciate your insights.
A
Amit Sinha14:34
Thank you, Lisa. I always enjoy our conversations. Likewise.
L
Lisa Martin14:39
I'm Lisa Martin. You're watching TechStrong TV live from day two of RSAC in San Francisco. We'll be back with our next guest, so stick around.