Certificate authority (CA)

wikipedia:Certificate authority

• DigiCert (2002)
• Let’s Encrypt (2012)
• Sectigo
• GlobalSign
• Amazon Trust Services
• Amazon Certificate Manager (ACM)
  • AWS Private Certificate Authority (Apr 2018)
• Google Trust Services

Activities

• Review list of certificate authorities: https://en.wikipedia.org/wiki/Category:Certificate_authorities
• Build you own CA:
  • Cloudflare CFSSL https://blog.cloudflare.com/how-to-build-your-own-public-key-infrastructure/
  • HashiCorp vault https://learn.hashicorp.com/vault/secrets-management/sm-pki-engine
  • OpenSSL: openssl ca https://pki-tutorial.readthedocs.io/en/latest/index.html
  • Red Hat Certificate System
  • FreeIPA, DogTag
  • mkcert
• Using SSL/TLS to encrypt a connection to a DB instance or cluster

Related terms

• Public key certificate
• Proxy ssl trusted certificate Nginx
• certutil
• Keychain access (macOS)
• macOS: security add-trusted-cert
• Subject Alternative Name (SAN)
• Self signed certificate
• aws acm: list-certificates
• Serial number: aws acm describe-certificate | grep serial
• CSR
• Kubernetes cert-manager

See also

• TLS, TLS 1.3, mTLS: OpenSSL, LibreSSL, BoringSSL, WolfSSL, X.509, .pem, SNI, CT, OCSP, Mbed TLS, ALPN, your connection is not private, SSL Certificate Checker, Wildcard certificate, JA3 fingerprint, sslcan, TLS inspection, Opportunistic TLS (StartTLS), tools
• PKI, OpenCA, openSSL, Certificate Transparency (CT), DogTag, FreeIPA, Key management, KMIP, CSR, /etc/pki/, Blockchain PKI, truststore.pki.rds.amazonaws.com
• CA, Root Certificates, FreeIPA, PKI, OpenCA, Wildcard certificate, certtool, certbot (Let's Encrypt), certinfo (Cloudflare), ACME, Boulder, cfssl (Cloudflare), Public key certificate, public key, TLS and X.509, OCSP, Subject Alternative Name (SAN), openssl ca, Self signed certificate, CSR, keytool, ACM, KMS, aws acm, IdenTrust, multirootca, cert-manager, ca_cert_identifier, Amazon Certificate Manager (ACM), AWS Private Certificate Authority, XCA