Certificate Authority (CA) / Registration Authority (RA)


  • Simplify the bundle of services needed to begin using Direct Secure Messaging
  • Issue Direct certificates with support for domain- and address-level certificates for increased flexibility
  • 100% Interoperability with DirectTrust Accredited Trust Bundle
  • Support for multiple identity verification options
  • Offers third-party CA/RA services for HISPs seeking accreditation

MaxMD is committed to adhering to industry standards regarding the privacy, security and exchange of healthcare data. In 2013, MaxMD became one of the first companies in the nation to be EHNAC and DirectTrust accredited as a Health Information Service Provider (HISP), Registration Authority (RA), and Certificate Authority (CA).


As a Certificate Authority, MaxMD has the authority to provide organization-level Direct Certificates associated with an internet domain and can issue address-level Direct Certificates tied to an individual’s Direct address.

MaxMD’s Direct Certificates are interoperable with all other HISPs in the DirectTrust Accredited Trust Bundle.

Direct Certificates are the foundation of Direct exchange and are essential to securing Protected Health Information (PHI) by using Public Key Infrastructure (PKI).

As a Registration Authority, MaxMD reliably authenticates the identities of individuals and organizations to determine if the Certificate Authority should issue a digital certificate. MaxMD’s implementation process for Direct secure messaging is simplified by removing the need for third party CA/RA services.

The MaxMD RA supports remote identity proofing workflows which align with the NIST 800-63-2 Level of Assurance 3 standard. MaxMD is prepared to support upcoming requirements which require NIST 800-63-3 Identity Assurance Level 2 requirements.

To ease the procedural burdens of identity proofing, the MaxMD RA allows for Trusted Agents to leverage antecedent identity proofing to fulfill DirectTrust requirements. This allows for faster and more scalable implementations.