Certificate authority (CA)

wikipedia:Certificate authority

• DigiCert (2002)
• Let’s Encrypt (2012)
• Sectigo
• GlobalSign
• Amazon Trust Services
• Google Trust Services

• Amazon Certificate Manager (ACM)

Activities

• Review list of certificate authorities: https://en.wikipedia.org/wiki/Category:Certificate_authorities
• Build you own CA:
  • Cloudflare CFSSL https://blog.cloudflare.com/how-to-build-your-own-public-key-infrastructure/
  • HashiCorp vault https://learn.hashicorp.com/vault/secrets-management/sm-pki-engine
  • OpenSSL: openssl ca https://pki-tutorial.readthedocs.io/en/latest/index.html
  • Red Hat Certificate System
  • FreeIPA, DogTag
  • mkcert
• Using SSL/TLS to encrypt a connection to a DB instance or cluster

Related terms

• Public key certificate
• Proxy ssl trusted certificate Nginx
• certutil
• Keychain access (macOS)
• macOS: security add-trusted-cert
• Subject Alternative Name (SAN)
• Self signed certificate
• aws acm: list-certificates
• Serial number: aws acm describe-certificate | grep serial
• CSR
• Kubernetes cert-manager

See also

• TLS, mTLS: OpenSSL, LibreSSL, BoringSSL, WolfSSL, X.509, .pem, SNI, CT, OCSP, Mbed TLS, ALPN, your connection is not private, SSL Certificate Checker, Wildcard certificate, JA3 fingerprint, sslcan, TLS inspection
• PKI, OpenCA, openSSL, Certificate Transparency (CT), DogTag, FreeIPA, Key management, KMIP, CSR, /etc/pki/
• CA, Root Certificates, FreeIPA, PKI, OpenCA, Wildcard certificate, certtool, certbot (Let's Encrypt), certinfo (Cloudflare), ACME, Boulder, cfssl (Cloudflare), Public key certificate, public key, TLS and X.509, OCSP, Subject Alternative Name (SAN), openssl ca, Self signed certificate, CSR, keytool, ACM, KMS, aws acm, IdenTrust, multirootca, cert-manager, ca_cert_identifier