← Back to the reading view
Slides · 5 slides
Running a PKI: how a certificate authority actually operates
The same use case told visually, ready to present. Speaker notes carry the full explanation.
PKI & Certificates
Running a PKI
How a certificate authority actually issues, automates and retires millions of certificates
Running a PKI: how a certificate authority actually operates · Classical Crypto Today1 / 5
Blast radius
Why the root stays offline
Running a PKI: how a certificate authority actually operates · Classical Crypto Today2 / 5
Key ceremony
Generating a root key under audit
Running a PKI: how a certificate authority actually operates · Classical Crypto Today3 / 5
Automation
ACME: issuance with no human involved
Running a PKI: how a certificate authority actually operates · Classical Crypto Today4 / 5
Lifetimes
Shrinking lifetimes force automation
At 47 days, a domain renews 8 times a year
Running a PKI: how a certificate authority actually operates · Classical Crypto Today5 / 5
1 / 5
Keys: ← → move, F full screen, G all slides, N notes