Proving that TLS at Pellworth Logistics Group does what everyone assumes: the four checks a client must make behind the padlock; the eight-layer defence stack from issuance, chain, identity, lifetime, revocation, negotiation and clients up to assurance, each with its measured result, such as 233 incomplete chains fixed, renewal cut from 9 days to under 4 hours and 376 non-validating clients reduced to 11; and a live inventory of 3,182 certificates watched against certificate transparency, which would have caught the expired-certificate incident INC-4471 fourteen days early.

CY-EXPERT-067Expert Level · Cryptography

TLS Validation Assurance

An expert-level course on proving that TLS in an estate is actually doing what everybody assumes it is. Climb the defence stack - eight layers carrying the trust of a single connection from the ground up: what a certificate genuinely proves; chain building, intermediates and the trust store; hostname verification and the checks that get silently skipped; expiry, renewal and the shortening certificate lifetime; what revocation really delivers to a client; protocol and cipher configuration verified rather than assumed; the applications, agents and scripts in your own estate that validate nothing; and the inventory, transparency monitoring and board reporting that keep all seven layers below observable.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Distinguish what a certificate genuinely asserts from what an organisation believes, and record every unsupported belief as a control-verification record with its pass criterion fixed before collection.
Measure chain completeness with a client that repairs nothing, remediate at the template rather than the endpoint, and treat every distinct trust store as a configuration item with an owner, a version and a measured distribution lead time.
Verify hostname checking across every client class, trace each disabled verification setting to the naming decision behind it, and publish a naming standard that makes the bypass unnecessary.
Treat expiry as an availability control, measure renewal lead time end to end, build an escalating alert ladder, automate issuance and plan an estate for the published reduction in certificate lifetimes.

Price:৳12,000