Expert Insights & Best Practices

Knowledge Hub

Deep insights, real-world case studies, and proven strategies from the trenches of certificate and expiration management

Security Insights

Web browsers hide incomplete TLS chains that break APIs and microservices

You deployed the new SSL certificate. You opened Chrome, navigated to your domain, and saw the reassuring secure padlock icon. You closed your laptop, confident that the maintenance window was a succe...

Tim Henrich

Mar 15, 2026

7 min read

Read Full Story

Security Insights

Evaluating the hardware and operational defenses of internal and public certificate issuers

The landscape of Public Key Infrastructure (PKI) and Certificate Authorities (CAs) is undergoing a seismic shift. For decades, managing certificates was treated as a routine, albeit tedious, IT operat...

Tim Henrich

Mar 15, 2026

8 min read

Read Full Story

Security Insights

How to audit the security posture of your public key infrastructure

Public Key Infrastructure (PKI) and Certificate Authorities (CAs) are undergoing a massive, forced transformation. The days of treating your CA as a "set it and forget it" piece of legacy infrastructu...

Tim Henrich

Mar 13, 2026

6 min read

Read Full Story

Security Insights

Certificate Transparency logs maintain a public record of every issued TLS certificate

Right now, every single publicly trusted SSL/TLS certificate issued for your organization is being broadcast to a massive, unalterable public ledger. Whether you are spinning up a new marketing site o...

Tim Henrich

Mar 12, 2026

7 min read

Read Full Story

Security Insights

Ephemeral Kubernetes workloads make manual certificate management obsolete.

If you are manually managing certificates in Kubernetes, you are already setting yourself up for an outage.

Tim Henrich

Mar 10, 2026

8 min read

Read Full Story

Security Insights

Mobile developers are replacing static certificate pins with dynamic enforcement to avoid permanently bricking applications.

For years, mobile app developers and security professionals treated static certificate pinning as a non-negotiable requirement. If you were building a mobile application that handled sensitive data, y...

Tim Henrich

Mar 09, 2026

7 min read

Read Full Story

28 29 30 31 32

Knowledge Hub

Web browsers hide incomplete TLS chains that break APIs and microservices

Evaluating the hardware and operational defenses of internal and public certificate issuers

How to audit the security posture of your public key infrastructure

Certificate Transparency logs maintain a public record of every issued TLS certificate

Ephemeral Kubernetes workloads make manual certificate management obsolete.

Mobile developers are replacing static certificate pins with dynamic enforcement to avoid permanently bricking applications.

Topics

Featured

Implementing Certificate Transparency and Automating Domain Monitoring

Why Valid SSL Certificates Break in API Clients and IoT Devices

Defeating Adversary-in-the-Middle Attacks with Automated Certificate Controls