Compliance Is a Sword Hanging over Trusted CAs: Which CA Will Fall Next?

The month is not even over yet. Open Mozilla’s CA Certificate Compliance community report dashboard, and you will already find nearly a hundred compliance incident reports involving publicly trusted CAs around the world! ...

Discussing the Reduction of SSL Certificate Validity to 47 Days

The foundation of trust on the internet is quietly evolving. You may have noticed that the little padlock in your browser’s address bar is becoming more common, indicating that a website uses HTTPS encryption—something that relies on SSL certificates. Today, a significant industry development may have a profound impact on all website operators: the CA/Browser Forum (CABF) has passed a proposal called SC-081, which plans to gradually reduce the maximum validity of publicly trusted SSL certificates to just 47 days! What does this change mean, and how will it affect us? Let’s dive in. ...

Use Prometheus and Grafana to Set Up Your Certificate Monitoring Dashboard

Recently, I discovered a Grafana Dashboard that can visualize certificate validity, and it works quite well. The configuration is simple, aggregating the validity period, serial number, issuer, and other information of multiple site certificates, making it clear at a glance. I am sharing this blog post with everyone. ...