Managing Certificates
Issue, renew, revoke.
The Certificate Lifecycle
Certificates are not set-and-forget. They move through a lifecycle: request, issue, deploy, monitor, renew, and revoke.
Managing this lifecycle well prevents outages and security gaps.
Generating a Key and CSR
Issuance starts with a private key and a Certificate Signing Request (CSR).
openssl req -new -newkey rsa:2048 -nodes \
-keyout server.key -out server.csr \
-subj '/CN=app.example.com'All lessons in this course
- Public Key Infrastructure
- Certificate Authorities
- Certificate Chains
- Managing Certificates