https://razeencheng.com/c/pki/Recent content in PKI on Razeen`s Bloghttps://razeencheng.com/avatars/apple-touch-icon.pnghttps://razeencheng.com/avatars/apple-touch-icon.pngHugo -- gohugo.ioenWed, 28 Oct 2026 00:00:00 +0000https://razeencheng.com/posts/en/ca-compliance-who-will-fall-next/Wed, 28 Oct 2026 00:00:00 +0000https://razeencheng.com/posts/en/ca-compliance-who-will-fall-next/A look at October 2026 CA compliance incidents, past CA exits, the challenges of engineering precision, CP/CPS and operational governance, and the changes brought by short-lived certificates and Merkle Tree Certificates.https://razeencheng.com/posts/en/letsencrypt-gen-y-pki-five-trends/Wed, 26 Nov 2025 22:50:16 +0000https://razeencheng.com/posts/en/letsencrypt-gen-y-pki-five-trends/Let&#39;s Encrypt launches the Gen Y root certificate hierarchy, marking a major transformation in the Web PKI industry. This article provides an in-depth analysis of the five major trends brought about by this update: the end of public Client Auth, the ubiquity of four-level certificate chains, the obsolescence of intermediate certificate pinning, the countdown to 47-day validity, and preparations for post-quantum cryptography, helping developers and operations teams prepare in advance.https://razeencheng.com/posts/en/reduction-if-certificate-validity-to-47-days/Sun, 13 Apr 2025 08:00:00 +0000https://razeencheng.com/posts/en/reduction-if-certificate-validity-to-47-days/<p>The foundation of trust on the internet is quietly evolving. You may have noticed that the little padlock in your browser’s address bar is becoming more common, indicating that a website uses HTTPS encryption—something that relies on SSL certificates. Today, a significant industry development may have a profound impact on all website operators: the CA/Browser Forum (CABF) has passed a proposal called <a href="https://github.com/cabforum/servercert/pull/553">SC-081</a>, which plans to gradually reduce the maximum validity of publicly trusted SSL certificates to just 47 days! What does this change mean, and how will it affect us? Let’s dive in.</p>https://razeencheng.com/posts/en/use-prometheus-and-grafana-monitor-your-certs/Sat, 07 Sep 2024 03:43:48 +0000https://razeencheng.com/posts/en/use-prometheus-and-grafana-monitor-your-certs/Explore how to use Prometheus and Grafana to monitor SSL certificate validity and visualize management through a detailed Grafana dashboard.