Cloudflare applies to become a certificate authority for post-quantum certificates

On 29 September 2026 Cloudflare announced plans to become a public certificate authority, issuing classical TLS certificates and post-quantum Merkle Tree Certificates from one system. It applied to the Chrome, Apple, Microsoft and Mozilla root programs and agreed to acquire a trusted root from GlobalSign. Production MTC issuance is targeted for Q1 2027.

• Cloudflare applied to the Chrome, Apple, Microsoft and Mozilla root programs
• It signed a deal to acquire a root trusted since 2012 from GlobalSign
• Post-quantum signatures are roughly 40 times larger than classical ones
• Production Merkle Tree Certificate issuance is targeted for Q1 2027