QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Yuki, PKI engineer at Tessera Pay, runs every certificate around the eight-stage lifecycle — plan, generate, issue, deploy, validate, monitor, renew and revoke — with the payments endpoint's certificate at the centre. Beside it, the chain of trust from an offline root through an issuing CA to the leaf, checked for path, expiry, revocation and hostname, and the fixes Yuki made: an online root key replaced by an offline root and written policy, five-year certificates replaced by short validity, calendar-reminder renewal replaced by ACME and cert-manager, a months-stale CRL refreshed with OCSP stapling, and Certificate Transparency logs watched after a rogue certificate went unseen for three weeks.
CY-MID-040Mid Level · PKI & Certificates

TLS & PKI Certificate Management — The Certificate Lifecycle

A hands-on mid-level course that runs certificates and trust without outages or weak crypto. Climb the certificate lifecycle - eight steps: Plan, Generate, Issue, Deploy, Validate, Monitor, Renew, and Revoke - building a CA hierarchy, strong TLS, automated renewal, and revocation with real OpenSSL and ACME work. Strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Design a CA hierarchy and generate keys and CSRs correctly.
  • Issue and deploy certificates with strong TLS configuration.
  • Validate chains, monitor expiry, and automate renewal with ACME.
  • Revoke compromised certificates and manage trust stores.
Price:৳8,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.