The well-known Certificate Authority Buypass has announced that it will cease issuing TLS/SSL digital certificates in October 2025. Buypass gained prominence primarily for offering free six-month certificates—an alternative chosen by some websites unwilling to rely on three-month certificates provided elsewhere.
Under the wind-down plan, existing TLS/SSL certificates will remain valid until their natural expiration or until explicitly revoked. During this period, all essential services—including revocation servers, certificate status checks (CRL and OCSP), and other required functionalities—will continue to operate as normal.
However, automated renewal will no longer be supported. Once certificates expire, users will be unable to request replacements, meaning those who rely on auto-renewal must migrate to alternatives such as Let’s Encrypt or Google Trust Services.
Buypass cited several reasons for its withdrawal from the TLS/SSL market:
- Intense Competition: The digital certificate market has become increasingly competitive, making it financially unsustainable to continue offering solutions.
- Revenue Decline: With most organizations shifting from commercial TLS/SSL to free certificate options, CAs face mounting challenges in maintaining profitability.
- Compliance Costs: The CA industry is heavily regulated, and ensuring continuous compliance with evolving standards requires substantial resources.
Considering these combined pressures, Buypass concluded that its TLS/SSL operations were no longer commercially viable. Moving forward, the company will refocus on other certificate-based services, including electronic IDs, digital signatures, enterprise certificates, and electronic seals.
Timeline
| Date | Activity |
| 01.10.2025 | Last day to order and renew Buypass PSD2 certificates (SSL QWAC and QC eSeal for PSD2). |
| 15.10.2025 | Last day to order, renew, or replace Buypass TLS/SSL certificates. |
| 31.10.2025 | Last day for issuance of Buypass TLS/SSL and PSD2 certificates. Required information for validating new certificates must be received in time to complete validation. No certificates will be issued after this date. |
| 31.10.2026 | Last expiry date for Buypass TLS/SSL certificates. Revocation and certificate status services will be discontinued. |
| 31.10.2027 | Last expiry date for Buypass PSD2 certificates. Revocation and certificate status services will be discontinued. |
Related Posts:
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.