Expert Insights & Best Practices

Knowledge Hub

Deep insights, real-world case studies, and proven strategies from the trenches of certificate and expiration management

Security Insights

An incident response plan for certificate compromises and CA revocations

In July 2024, the digital infrastructure world held its breath. DigiCert, one of the world's largest Certificate Authorities (CAs), announced the immediate revocation of thousands of certificates due ...

Tim Henrich

Feb 24, 2026

8 min read

Read Full Story

Security Insights

Enforcing zero trust at the IoT edge requires automated X.509 certificate management.

In the early days of the Internet of Things (IoT), the security philosophy was often "connect first, secure later." A smart bulb or an industrial sensor might have shipped with a hardcoded password or...

Tim Henrich

Feb 24, 2026

8 min read

Read Full Story

Security Insights

Domain Hijacking Prevention: Defending Against "Sitting Ducks" and Social Engineering

In the early days of the web, domain hijacking was largely a crime of opportunity—brute-forcing a weak password or guessing a security question. In 2025, the landscape is radically different. Domain t...

Tim Henrich

Feb 21, 2026

8 min read

Read Full Story

Security Insights

Managing TLS certificates as code using declarative GitOps workflows

For decades, the standard procedure for managing SSL/TLS certificates was a ritual of manual labor: generate a CSR on a server, paste it into a CA portal, download the blob, scp it to the load balance...

Tim Henrich

Feb 21, 2026

8 min read

Read Full Story

Security Insights

NIST SP 800-171 Revision 3 makes automated certificate management a strict requirement for government contractors

For government contractors (GovCons), the era of "set it and forget it" SSL certificates is officially over.

Tim Henrich

Feb 18, 2026

7 min read

Read Full Story

Security Insights

Zero-touch PKI integration for CI/CD pipelines using HashiCorp Vault and Kubernetes

The era of the "set it and forget it" SSL certificate is officially over. With Google’s proposal to reduce public TLS certificate validity from 398 days to just 90 days, and internal microservices dem...

Tim Henrich

Feb 16, 2026

7 min read

Read Full Story

24 25 26 27 28

Knowledge Hub

An incident response plan for certificate compromises and CA revocations

Enforcing zero trust at the IoT edge requires automated X.509 certificate management.

Domain Hijacking Prevention: Defending Against "Sitting Ducks" and Social Engineering

Managing TLS certificates as code using declarative GitOps workflows

NIST SP 800-171 Revision 3 makes automated certificate management a strict requirement for government contractors

Zero-touch PKI integration for CI/CD pipelines using HashiCorp Vault and Kubernetes

Topics

Featured

Quantifying the Real Cost of Certificate Outages on Modern Infrastructure

Securing DNS Infrastructure Against Subdomain Takeovers and Registrar Exploits

Automating Let's Encrypt Certificate Renewals Across Enterprise Infrastructure