#certificatemanagement — Public Fediverse posts

A new ranking compares 10 tools for issuing and managing website certificates, with DigiCert first at 9.1 and Keyfactor second at 9.0.

Automation from renewal through installation accounts for 30% of the score.

The ranking draws on research, public pricing information and professional reports; it did not include lab testing.

The article notes that public website certificates are expected to have a ma…

https://en.hacks.gr/digicert-proti-se-katataxi-10-ergaleion-gia-ti-diacheirisi-pistopoiitikon/

#DigiCert #Keyfactor #CertificateManagement #CertificateAutomation

Live SSL certificate deployment next week. Not a demo environment. Real setup, discovery through renewal. If something breaks, we fix it.

June 16, 11am Central. With Richard Hicks. Free.

https://us02web.zoom.us/webinar/register/6417812064399/WN_iBrdj5xmT56lUWG1jrf3ZQ

#CertificateManagement #WindowsIT

Compliance audits ask who touched your certificates, when, and why.

CertKit now captures every certificate action with timestamps and user attribution. Importance flags let you cut through routine events to the ones with real consequences.

#CertificateManagement #PKI

Certificate distribution has always been the messy part. Custom scripts, shared drives, passwords in plaintext somewhere.

We shipped deployment scripting with a template library for F5, Palo Alto, Azure, Exchange, and more. Variables encrypted, never on disk.

https://www.certkit.io/blog/deployment-scripting

#CertificateManagement #PKI

Todd's Tenth Rule: any sufficiently complicated SSL certificate script contains a bad implementation of half a certificate lifecycle manager.

Named the pattern. Here's how it happens.

https://www.certkit.io/blog/todds-tenth-rule-certificate-automation

#CertificateManagement #PKI

New in CertKit: copy and link agent configs across your fleet instead of configuring each server individually. Also added search and grouping for monitored domains, plus our first GDPR Data Processing Agreement.

https://www.certkit.io/blog/shared-configs-and-monitor-search

#CertificateManagement #SSL

CertKit 1.9: push agent updates from the dashboard, no more logging into every server. Plus Google Trust Store as a second ACME issuer alongside Let's Encrypt.

https://www.certkit.io/blog/agent-1.9

#CertificateManagement #SSL

CertKit is out of beta.

600 signups. Real production deployments. A Keystore for keeping private keys on-prem. RDP and RRAS support for Windows shops.

Now there's real pricing — and 40% off forever if you get in before May 31st.

https://www.certkit.io/blog/out-of-beta

#PKI #CertificateManagement

CertKit Agent 1.8: Windows Certificate Store, Java Keystore, and RDP auto-detection.

We also shipped a retro MS-DOS confirmation dialog on April Fools Day. It is fully keyboard-compatible.

https://www.certkit.io/blog/agent-1.8 #CertificateManagement #PKI

Some organizations have a hard requirement: private keys cannot leave the network perimeter. Third-party cert management has always meant violating that policy.

The CertKit Local Keystore is the fix. Keys stay on your infrastructure. Full automation still works.

www.certkit.io/blog/certkit-keystore

#PKI #CertificateManagement

We found a valid DigiCert certificate on a domain we just purchased, issued to someone we've never met. Getting it revoked took 6 emails. 72 hours after confirmed revocation, every browser still trusts it.

https://www.certkit.io/blog/bygonessl-happened-to-us

#InfoSec #CertificateManagement

You can automate issuance and still ship outages.

Certificate lifecycle is a loop:

issue → deploy → verify.

Most teams stop at “renewal succeeded” and skip the only part users care about, what the endpoint is actually serving.

https://www.certkit.io/blog/issuance-automation-vs-certificate-automation
#ACME #CertificateManagement

Let's Encrypt is moving to 45-day certificates by February 2028, a year before the industry mandate. Everyone focuses on the certificate lifetime, but the real disruption is authorization reuse dropping from 30 days to 7 hours.

That means nearly every cert request requires fresh validation. Batch operations across a day? Broken. Hardcoded 60-day renewal intervals? Expired certificates.

https://www.certkit.io/blog/45-day-certificates

#PKI #CertificateManagement

One API key with access to everything is fine until a contractor leaves or a key leaks.

CertKit now supports multiple applications with scoped API keys. Split your certificates by product, environment, or team. Your marketing site automation never sees production infrastructure. If a key gets compromised, revoke it without affecting everything else.

All users can create up to 6 applications today.

https://www.certkit.io/blog/application-management

#PKI #CertificateManagement

We published the CertKit roadmap and it's interactive. Every feature has a vote button. Tell us what to build next instead of us guessing.

Current focus: Host Agent for certificate distribution. On deck: SSO, user roles, alerting. Further out: Private CA support and a CT Log API (maybe).

Feature not listed? Tell us. We've shipped things based on a single request before.

https://www.certkit.io/blog/what-should-we-build-next

#CertificateManagement #PKI

Decreasing Certificate Lifetimes to 45 Days

https://letsencrypt.org/2025/12/02/from-90-to-45.html

#HackerNews #DecreasingCertificateLifetimes #CertificateManagement #Cybersecurity #LetsEncrypt #TechNews

https://www.youtube.com/watch?v=fXx29Ml99xM

SecPoint Protector V65 UTM Firewall – Easily Create Self-Signed Site Certificates

The SecPoint Protector V65 UTM Firewall now makes it effortless to create secure, self-signed site certificates directly from its intuitive interface.

✅ Easy, Fast Certificate Creation
✅ Instant SSL/TLS Security
✅ Ideal for IT teams and MSPs

#CyberSecurity #SecPoint #Protector #UTM #CertificateManagement #NetworkSecurity #SSL #TLS #ITsecurity #CyberDefense

The Importance of Code Signing Best Practices in the Software Development Lifecycle – Source: securityboulevard.com https://ciso2ciso.com/the-importance-of-code-signing-best-practices-in-the-software-development-lifecycle-source-securityboulevard-com/ #HardwareSecurityModules(HSMs) #CertificateAuthority(CA) #rssfeedpostgeneratorecho #SecurityBloggersNetwork #CertificateManagement #CyberSecurityNews #SecureCodeSigning #SecurityBoulevard #codesigning #CA/BForum #ISO27001 #NIST #SOC2

https://www.linkedin.com/?lipi=urn%3Ali%3Apage%3Ad_flagship3_publishing_post_new%3BMgL2CKTWQSyexrOQ7eYO2g%3D%3D

#DigitalCertificates #Cybersecurity #PublicInfrastructure #PKI #AutomationInSecurity #CertificateManagement #QuantumComputing #CybersecurityTrends #ITSecurity #InformationSecurity #Security #NHI #NonHumanIdentities
5/5

📢 hot off #KubeCon: cert-manager has been approved for CNCF graduation! 🎉
86% of new #kubernetes production clusters are deployed with cert-manager as standard practice!
Congrats to Jetstack (now Venafi, CyberArk) and all the maintainers and contributors 👏

Read the Cloud Native Computing Foundation ( #cncf ) announcement for more details:
https://www.cncf.io/announcements/2024/11/12/cloud-native-computing-foundation-announces-cert-manager-graduation/

#cloudnative #security #certificateManagement #kubeconna

Betanews: Businesses not prepared for PKI automation https://betanews.com/2023/09/26/businesses-not-prepared-for-pki-automation/ #Certificatemanagement #Automation #Article #Google #PKI

Betanews: Over half of data breaches are down to digital certificates https://betanews.com/2023/08/30/over-half-of-data-breaches-are-down-to-digital-certificates/ #Certificatemanagement #Machineidentity #cybersecurity #DataBreach #Article