CertKitFeb 16

We found a valid DigiCert certificate on a domain we just purchased, issued to someone we've never met. Getting it revoked took 6 emails. 72 hours after confirmed revocation, every browser still trusts it.

https://www.certkit.io/blog/bygonessl-happened-to-us

#InfoSec #CertificateManagement

BygoneSSL happened to us

We wrote about BygoneSSL and the 1.5 million domains with certificates owned by someone else. Then we bought certkit.dev and found one on our own domain. A DigiCert certificate, still valid for 98 days, issued to whoever owned this domain before us. Here's what we found, what we tried to do about it, and what happened when we tried to revoke it.

CertKit SSL Certificate Management
CertKitFeb 9

You can automate issuance and still ship outages.

Certificate lifecycle is a loop:

issue → deploy → verify.

Most teams stop at “renewal succeeded” and skip the only part users care about, what the endpoint is actually serving.

https://www.certkit.io/blog/issuance-automation-vs-certificate-automation
#ACME #CertificateManagement

Issuance Automation vs Certificate Automation

Most teams “automate certificates” by installing an ACME client and calling it a day. Then they still ship an outage because the hard parts were never automated: knowing what exists, keeping validation safe, and verifying what’s actually being served.

CertKit SSL Certificate Management
CertKitJan 27

Let's Encrypt is moving to 45-day certificates by February 2028, a year before the industry mandate. Everyone focuses on the certificate lifetime, but the real disruption is authorization reuse dropping from 30 days to 7 hours.

That means nearly every cert request requires fresh validation. Batch operations across a day? Broken. Hardcoded 60-day renewal intervals? Expired certificates.

https://www.certkit.io/blog/45-day-certificates

#PKI #CertificateManagement

Let's Encrypt is moving to 45-day certificates before everyone else

The CA/Browser Forum set 47-day certificates as the target for 2029. Let's Encrypt decided to implement it a year earlier. Here's their roadmap and what it means for your automation.

CertKit SSL Certificate Management
CertKitJan 21

One API key with access to everything is fine until a contractor leaves or a key leaks.

CertKit now supports multiple applications with scoped API keys. Split your certificates by product, environment, or team. Your marketing site automation never sees production infrastructure. If a key gets compromised, revoke it without affecting everything else.

All users can create up to 6 applications today.

https://www.certkit.io/blog/application-management

#PKI #CertificateManagement

Certificate permissions with CertKit Applications

As your certificate count grows, so does the chaos. Applications let you organize certificates into logical groups with their own API keys and access controls. No more sharing credentials across your entire infrastructure.

CertKit SSL Certificate Management
CertKitJan 14

We published the CertKit roadmap and it's interactive. Every feature has a vote button. Tell us what to build next instead of us guessing.

Current focus: Host Agent for certificate distribution. On deck: SSO, user roles, alerting. Further out: Private CA support and a CT Log API (maybe).

Feature not listed? Tell us. We've shipped things based on a single request before.

https://www.certkit.io/blog/what-should-we-build-next

#CertificateManagement #PKI

What should we build next?

We just published our product roadmap. It's interactive. Vote on what matters to you, or tell us what we're missing entirely.

CertKit SSL Certificate Management
Hacker NewsDec 2

Decreasing Certificate Lifetimes to 45 Days

https://letsencrypt.org/2025/12/02/from-90-to-45.html

#HackerNews #DecreasingCertificateLifetimes #CertificateManagement #Cybersecurity #LetsEncrypt #TechNews

Decreasing Certificate Lifetimes to 45 Days

Let’s Encrypt will be reducing the validity period of the certificates we issue. We currently issue certificates valid for 90 days, which will be cut in half to 45 days by 2028. This change is being made along with the rest of the industry, as required by the CA/Browser Forum Baseline Requirements, which set the technical requirements that we must follow. All publicly-trusted Certificate Authorities like Let’s Encrypt will be making similar changes. Reducing how long certificates are valid for helps improve the security of the internet, by limiting the scope of compromise, and making certificate revocation technologies more efficient.

SecPointMar 20, 2025

https://www.youtube.com/watch?v=fXx29Ml99xM

SecPoint Protector V65 UTM Firewall – Easily Create Self-Signed Site Certificates

The SecPoint Protector V65 UTM Firewall now makes it effortless to create secure, self-signed site certificates directly from its intuitive interface.

✅ Easy, Fast Certificate Creation
✅ Instant SSL/TLS Security
✅ Ideal for IT teams and MSPs

#CyberSecurity #SecPoint #Protector #UTM #CertificateManagement #NetworkSecurity #SSL #TLS #ITsecurity #CyberDefense

SecPoint Protector V65 UTM Firewall – Easily Create Self-Signed Site Certificates

YouTube
Show threadJack PollerDec 3, 2024

https://www.linkedin.com/?lipi=urn%3Ali%3Apage%3Ad_flagship3_publishing_post_new%3BMgL2CKTWQSyexrOQ7eYO2g%3D%3D

#DigitalCertificates #Cybersecurity #PublicInfrastructure #PKI #AutomationInSecurity #CertificateManagement #QuantumComputing #CybersecurityTrends #ITSecurity #InformationSecurity #Security #NHI #NonHumanIdentities
5/5

LinkedIn: Log In or Sign Up

1 billion members | Manage your professional identity. Build and engage with your professional network. Access knowledge, insights and opportunities.

LinkedIn
Dotan Horovits #CNCFAmbassadorNov 12, 2024

📢 hot off #KubeCon: cert-manager has been approved for CNCF graduation! 🎉
86% of new #kubernetes production clusters are deployed with cert-manager as standard practice!
Congrats to Jetstack (now Venafi, CyberArk) and all the maintainers and contributors 👏

Read the Cloud Native Computing Foundation ( #cncf ) announcement for more details:
https://www.cncf.io/announcements/2024/11/12/cloud-native-computing-foundation-announces-cert-manager-graduation/

#cloudnative #security #certificateManagement #kubeconna

Cloud Native Computing Foundation Announces cert-manager Graduation

Open source security project automates highly secure, encrypted data communications in cloud native environments SALT LAKE CITY, Utah – KubeCon + CloudNativeCon North America – November 12…

CNCF
MathDaTech  🤘Feb 16, 2023

How to configure Let's Encrypt email notification on error - nixCraft

Let us see how to configure the Let’s Encrypt email notification when a TLS/SSL cert is skipped, renewed, or an error is created by “acme.sh” client so developers or sysadmin can investigate the matter further.

https://www.cyberciti.biz/faq/how-to-configure-the-lets-encrypt-email-notification-when-a-cert-is-skipped-renewed-or-error/

#letsencrypt #certs #certificatemanagement #acme