IT Meetings 2025 Join us in Cannes from March 18 – 20 to meet our team.

Register now

PKI Authority

Hold your keys without captivity.

Stream provides enterprise-grade PKI authority capabilities while ensuring you maintain complete control. Get all the features you need from a CA, VA and TSA while retaining full sovereignty over your cryptographic keys and infrastructure.

Book a demo Download datasheet
Complete Control
Built for sovereignty, ensuring you maintain full control over your cryptographic infrastructure.
European Sovereignty
100% European-owned with native integration for EU ecosystems, HSMs, and eIDAS compliance.
High Performance
Non-blocking, fully asynchronous architecture designed for enterprise-scale deployments.
Stream interface

Features

How does it work?

Stream delivers a comprehensive certification authority solution with powerful features for secure and efficient key management.

 Certification Authority

Maintain complete control over your cryptographic keys with secure key generation, storage, and certificate lifecycle capabilities.

 OCSP & CRL

Built-in support for OCSP stapling and efficient CRL monitoring and distribution with comprehensive capabilities.

 Timestamping

RFC 3161 compliant timestamping services for secure and verifiable document timestamps with high availability.

Stream Logo

Why people choose Stream

Stream delivers enterprise-grade PKI authority capabilities while ensuring you maintain complete control over your keys.

Complete Sovereignty
Maintain full control over your cryptographic keys while getting all the features you need from a PKI authority.
European Ecosystem
100% European-owned with native integration for EU ecosystems, HSMs, and eIDAS compliance.
RFC 3161 Timestamping
Full support for secure and verifiable document timestamps with high performance and reliability.
High Performance
Non-blocking, fully asynchronous architecture designed to easily adapt when high performances are required.
Reduced IT Footprint
Non-intrusive in clients' ecosystem and compatible with complex infrastructure setups.
OCSP Stapling Support
Built-in support for OCSP Stapling to optimize HTTPS certificate validation process with efficient response times.

Compatibility

Our integrations

Stream seamlessly provide integrations with industry-standard HSMs and cloud providers and provide security protocols for a comprehensive PKI Authority solution.

Categories

X509 v3

X509 v3

Digital certificate standard

PKCS #11

PKCS #11

Cryptographic token interface

CRL v2

CRL v2

Certificate revocation lists

PKI X

PKI X (RFC 5280)

Public key infrastructure

TSP

TSP (RFC3161)

Time-stamp protocol

OCSP

OCSP (RFCs 5019/6960)

Online certificate status

AWS KMS

AWS KMS

AWS key management service

Azure Key Vault

Azure Key Vault

Azure key management

GCP KMS

GCP KMS

Google Cloud key management

EVIDEN Trustway

EVIDEN Trustway Proteccio

Hardware security module

Entrust nShield

Entrust nShield

Hardware security module

Thales Luna

Thales Luna

Network HSM solution

Thales Protect Server

Thales Protect Server

Hardware security server

Thales Protect Server

Thales DPoD

HSM as a service

Fortanix

Fortanix

HSM as a service

Securosys

Securosys

HSM as a service

Utimaco CryptoServer

Utimaco CryptoServer

Hardware security module

EL7/8/9

EL7/8/9

Enterprise Linux OS

Kubernetes

Kubernetes

Container orchestration

x509 Authentication

x509 Authentication

Certificate-based auth

REST API

REST API

API integration support

CISCO

CISCO

Firewall

Fortinet

Fortinet

Firewall