Chains, names, renewal and the expiry that takes a service down on a Sunday.
It is planned and the outline below is a first draft, so it may yet change. There is no enrolment and no date — when it is ready it will be on this page. Several of the lessons are built around tools on this site that already work, so you can practise the measurements today.
If you need this capability now rather than later, Cybersecurity services is the service that covers it, or talk to us.
Whoever gets the call when a certificate expires, which is usually whoever is on call.
Practitioner. For people who administer these systems day to day.
Assumed beforehand:
3 modules, 9 lessons, 1 h 33 m of material. The times are the sum of the lessons rather than a round figure.
A signed statement binding a key to names, for a period, for particular uses.
The four fields that matter and the ways each goes wrong.
The SAN extension, and the certificate that covers nothing.
One label, and the key that then protects every host under the name.
The failure that works in your browser and not on a customer’s server.
What the server must send, and what it must not.
Why some clients fetch the missing link and others simply fail.
Why validity periods keep shrinking and revocation never worked.
Renewal is a process problem wearing a cryptography costume.
ACME, the challenge types, and where automation usually gets stuck.
Knowing what you have before it expires, including the ones nobody owns.
Internal services, device fleets, and the trust store problem.
Format. Written lessons with exercises using this site’s certificate decoder and SSL checker. Delivery mechanism is not built yet.
These tools run the same checks the course teaches, and they work today. No account, and the ones marked as running in your browser send nothing anywhere.
Addressing, DNS, DHCP and NAT — and a method for finding which of them is broken.
Course outline ⟶Why calls break up on a connection that tests clean, and how to prove where the fault is.
Course outline ⟶The attacks that pass SPF, DKIM and DMARC, and the habits that catch them anyway.
Course outline ⟶This course exists because the work behind it is work we do. If you need the result rather than the skill, cybersecurity services is the service that covers it.