Companies Using Microsec

I run the crawler that reads DNS records for every domain we visit. A domain counts here when a TXT record contains Microsec, which in practice means microsec-verification= followed by a UUID and a date. Our October 2026 crawl puts that at 673 domains, 442 matched to a company, 14th in SSL/TLS Certificates. On 15 October 2026 I re-read the DNS of all 676 domains in our clean set and connected to each over TLS.

What the record proves

The CA/Browser Forum's Baseline Requirements let a CA confirm domain control with a random value in a DNS TXT record, valid for 30 days, and reuse that validation for at most 200 days. Microsec's version appends the date to every code, which makes its records the only ones I examined in this category that tell you when the validation happened. 645 of the 676 domains carry a dated code; the newest code is from 2026 on 469 of them, 2025 on 132, 2024 on 38 and 2023 on 6.

The rule is a substring, so I checked what else it catches: two domains, microsec.co.uk, a British company with the same name, and microsecurity.com, through its mail settings. That's 0.30% of the count.

Sales signal: the date is a renewal calendar. A code from 2025 on a domain still serving Microsec means a renewal is due.

How much of it is current

646 domains answered. 354 (54.80%) served a Microsec certificate, Let's Encrypt 192, Google Trust Services 45 and DigiCert 21. A random 50 gave 20 of 48. The dates explain most of it: of the 538 domains whose newest code is from the last 12 months, 326 serve Microsec; of the 107 with only older codes, 21 do.

"Microsec is the only CA in this set that dates its own records. Domains with a code from the last year mostly still serve its certificate; domains without one mostly don't." - David Thomson, CTO at TechnologyChecker.io

That leaves 191 domains with a recent code and another issuer on the homepage, which can mean the Microsec certificate sits on a subdomain such as a customer portal rather than the homepage.

Sales signal: for this CA, a recent code is close to a current-customer flag. Filter on it.

When they validate

The 2026 dates show a rhythm. The newest code on a domain fell in January on 32 domains, February 55, March 32, April 16, May 27 and June 46, then rose to 63 in July, 55 in August, 83 in September and 60 in the first half of October. Since March 2026 a validation can only be reused for 200 days, so domains that renewed in the spring had to validate again by autumn, and certificate terms are getting shorter too. Expect more dated codes per domain from here on, not fewer.

Sales signal: busy validation months are renewal months. Time outreach to the code dates, not to the calendar year.

Group orders

Microsec sells multi-domain certificates, and the domains in one order appear to share a code. 232 domains share a code with at least one other, in 73 groups. MOL Group validated 11 brand and country domains together, from mol.hu and molgroup.info to slovnaft.sk and Croatia's tifon.hr. MTVA, the fund behind Hungary's public broadcaster, validated 10, including hirado.hu, m4sport.hu and mti.hu. Others are the Budapest utilities (8), Mathias Corvinus Collegium (7), the Tempus Public Foundation (7) and MVM (6).

Sales signal: count organisations, not domains. MOL is one buyer with eleven sites.

Who uses it

Hungary has 374 of the 403 matched companies. The list reads like a directory of Hungarian institutions: banks (OTP, MBH, CIB, K&H, Erste), the central bank, insurers (UNION, UNIQA, Generali, Allianz), energy (MOL, MVM, MAVIR, Paks II), transport (MÁV, BKV, BKK, Volánbusz) and government IT (NISZ, IdomSoft). 25.97% were founded in the 1990s. 22 of the 50 companies in our list served a Microsec certificate on 15 October 2026.

Sales signal: this is a domestic, institutional market. Expect Hungarian-language tenders and eIDAS requirements.

No switching to report

We publish no migration table. 24 domains dropped the record since 17 March 2026, and a recount on 15 October found 2 of the dropped domains still carrying it on another hostname. Overlap with other CAs' records is tiny: 8 domains also carry a GlobalSign record, 4 QuoVadis. Where a Microsec domain's homepage runs another CA, it's mostly Let's Encrypt (192 domains), well ahead of any paid CA.

"Where a Hungarian homepage doesn't run Microsec, it mostly runs a free certificate; DigiCert has 21 and Sectigo 16." - David Thomson, CTO at TechnologyChecker.io

Sales signal: on these domains the alternative to Microsec is usually a free certificate. A paid CA has to beat Let's Encrypt on service, not Microsec on price.

The stack around it

Across the 676 domains, Google Analytics runs on 65.09% and Gemius, the Central European audience measurement panel, on 4.59%. WordPress is on 28.55%, Drupal 5.33%, Liferay 2.66%, and jsDelivr 13.31%.

Sales signal: Gemius points to publishers and Liferay to large portals, both buyers with formal procurement.

What it costs

Microsec's e-Szignó SSL/TLS page listed an OV certificate for one domain at HUF 33,000 a year before VAT, a wildcard at HUF 93,000 and UCC certificates from HUF 110,000 for 8 domains to HUF 780,000 for 100, with ACME automation. The certificates are OV-level by default: 269 of the 354 live ones came from its OV issuing CAs and 7 from qualified TLS CAs. Microsec's company history dates the business to 1984.

Sales signal: UCC pricing explains the group orders. Buyers with many domains are the profitable ones.

Key takeaways

1. 673 domains validated with Microsec; 54.80% of answering domains serve its certificate.

2. Dated codes: 538 domains validated in the last 12 months.

3. 232 domains sit in 73 multi-domain orders, MOL and MTVA the largest.

4. 92.8% of matched companies are Hungarian.

5. Where a homepage doesn't run Microsec, it mostly runs Let's Encrypt.

How to use this list

Filter on the code date first, then group domains by code to count organisations. Our certificate authority market share report covers the issuance side. The full list of 673 domains, with 442 matched companies, is on TechnologyChecker.io.