Matter Certificates
Matter certification starts with a DAC from an authorized CA
The Matter smart home standard requires every certified device to carry a Device Attestation Certificate (DAC) issued under a CSA-accredited Product Attestation Authority (PAA). SSL.com is CSA-authorized — providing both per-device DACs and per-product-line PAIs for device manufacturers.
Compare Matter certificates
Matter DAC
Device Attestation Certificate — per-device identity. One DAC per manufactured unit. Required for every Matter-certified device. Issued via REST API at manufacturing-line scale.
Matter PAI
Product Attestation Intermediate — your own branded intermediate CA under SSL.com's PAA. Enables you to issue DACs under your company name in the certificate chain.
Which do you need?
I manufacture devices and need Matter certification
Start with Matter DAC certificates — one per device unit, issued during manufacturing via SSL.com's REST API.
I want my own branded intermediate CA
Add a Matter PAI — SSL.com issues your PAI under its authorized PAA. Your DACs carry your organization's name.
How Matter device attestation works
Manufacturing
Each device receives a unique DAC during production — issued via REST API.
First setup
When the device is added to a Matter controller, the controller requests the device's DAC.
Attestation
The controller verifies the DAC chain back to the CSA Device Attestation Root.
Acceptance or rejection
Valid DAC: device joins. Missing or invalid DAC: device rejected.
Compliance & standards
Matter (CSA)
Matter Device Attestation
DAC and PAI certificates conform to the Matter Device Attestation specification.
FIPS 140-2
Keys generated in FIPS 140-2 validated HSMs.
