Certificate Lifecycle — Issuance, Renewal, Revocation
From issuance to renewal (shorter lifespans, ACME automation) and revocation (CRL/OCSP/OCSP stapling) and CT logs
From issuance to renewal (shorter lifespans, ACME automation) and revocation (CRL/OCSP/OCSP stapling) and CT logs
The problem certificates solve and the underlying symmetric/asymmetric cryptography, hashing, and digital signatures
Generating keys/CSRs, inspecting/debugging certificates, format conversion, full-chain deployment, expiry monitoring, and private-CA operation with OpenSSL
Roles of root/intermediate/leaf certificates, chain verification, the trust store, and root renewal/rollover
X.509 certificate fields, encoding/extensions, PKI components (CA/RA/CSR), and the trust model