Cloudflare is building a free public CA to rival Let's Encrypt

Cloudflare has applied to the Chrome, Apple, Microsoft and Mozilla root programs and agreed to acquire a GlobalSign root certificate trusted since 2012. The new CA will issue certificates over ACME, so switching from another free CA may only require changing the ACME directory URL. No launch date has been announced.

• Cloudflare applied to Chrome, Apple, Microsoft and Mozilla root programs
• It will acquire a GlobalSign root certificate trusted since 2012
• Certificates will be issued via ACME; migration is a directory URL change
• First production Merkle Tree Certificates targeted for Q1 2027