I accidentally started a rekey for an SSL certificate, and the previous certificate is scheduled to be revoked after the 72-hour replacement window. We have too many systems…
We manage several Sectigo certificates purchased through SSL247 and want to automate issuance and renewal through our existing certificate management platform. Sectigo documents ACME support, but the information…
For those using Microsoft Entra Application Proxy with custom domains, how are you managing certificate renewals? As far as I can tell, there is no straightforward automated ACME…
I currently have three domain controllers and plan to add a fourth, then a fifth, while eventually demoting the original two. I need certificates for the new domain…
I've recently taken responsibility for SSL/TLS certificate management at work. We have applications that send expiry notifications, but those alerts are only useful when the listed contacts and…
I've recently taken responsibility for managing our organization's SSL/TLS certificates. We have applications that send expiration notifications, but those alerts are only useful when the listed contacts and…
We're trying to replace our shared Wi-Fi PSK with 802.1X authentication. Our environment uses hybrid on-premises Active Directory and Microsoft Entra Connect, Ruckus access points managed through Virtual…
Our small organization has many services using TLS certificates, including internal applications, servers, and networked copiers from vendors such as Ricoh, Lexmark, and Brother. I am trying to…
We are evaluating certificate-management platforms that can automate certificate deployment and renewal across both enterprise and operational-technology environments. I would like to have a lab running by the…
We're evaluating several options for automating certificate deployment and renewal across both enterprise IT and operational technology environments. I'd like to build a lab by the end of…
Our machine identity setup has become difficult to manage across service accounts, certificates, and workload identities. We're looking for a practical way to centralize governance, discovery, rotation, and…
I'm trying to figure out what services are utilizing our wildcard certificate because we don't have any documentation about it. I've already checked all our external DNS entries,…
I'm exploring methods to control which Subject Alternative Names (SANs) can be included in certificate requests. One approach I'm considering is implementing Name Constraints within the Certificate Authority…
In Active Directory Certificate Services (AD CS), there are situations where a custom Subject Name must be provided in requests. This could involve including specific details such as…
I'm currently managing a wildcard certificate that we replace yearly on all our servers, which can be quite a hassle. I've started exploring automated solutions like Let's Encrypt,…
I recently received a notification from GoDaddy about my 2-year SSL certificate being re-issued due to the new regulation capping certificates at 397 days. Just to clarify, this…
I'm working on a project for automating PKI certificate life cycle management at a European bank. Currently, the IT department manually handles expiring server certificates and related tasks,…
Hey everyone, I'm working at a school where I've set up RADIUS for Wi-Fi authentication using PEAP, and it's been running smoothly. However, I'm a bit stressed about…
I recently set up a certificate for my Application Load Balancer (ALB) and validated it using Route53. I'm wondering if there's any real reason to keep the CNAME…
I'm wondering if anyone has successfully created a script to manage certificate changes every 47 days. I don't handle SSL termination at the load balancer anymore, which is…