Dependence on External Certificate Authorities, the Cybertrust Brand and Certificate Authority Software
First written in FY2021. 4 of 10 entries say "Mitigated", first in 2026-09-14. Latest entry: 2026-10-29.
No other company in this theme has enough history to compare yet.
- FY2026RestatedAnnual report
「As the widespread adoption of its own root certificate authority will take a certain amount of time, the Company has entered into a public CA signing service agreement with Secom Trust Systems Co., Ltd. and is temporarily using that company's root certificate authority to operate its server certificate business.」
While indicating its policy of changing to its own root certificate authority, the Company continues to disclose its dependence on Secom Trust Systems Co., Ltd. during the transition period. - FY2024ReframedAnnual report
「In Japan, our group uses the “Cybertrust” brand, which is owned by Verizon Australia Pty Limited, as part of certain company and product names, and is licensed by that company to use the electronic certificate authority software UniCERT.」
Recasts the risk as dependence on Verizon Australia in addition to dependence on external certificate authorities, through the use of the Cybertrust brand and the license for UniCERT electronic certificate authority software. - FY2021First statedAnnual report
「The Company will continue to maintain a good relationship with Secom Trust Systems Co., Ltd. under the relevant agreement. However, if service provision by that company is impaired during the relevant period due to a significant change in the relationship, this could affect the Company's operating results and financial position.」
The Company changed its policy from using DigiCert's root certificate authority to establishing its own root certificate authority, and is using Secom Trust Systems' root certificate authority during the transition period.