SSL/TLS Fundamentals

Learn how certificate authorities drive the PKI hierarchy, from root CAs to subordinate authorities, issuing certificates and maintaining a chain of trust for secure communications.

Explore how PKI certificates enable SSL and TLS, including digital certificates, X509 standards, certificate authorities, CRLs, OCSP, and wildcard and SAN usage.

Install openssl on linux, generate 2048-bit rsa private key for root-ca with a passphrase, and create a sha-256 x509 certificate valid one year, saved as fake domain two ca.pem.

Configure an AWS certificate manager subordinate CA with an on-premises root CA, submit a CSR, import the signed certificate and chain, and verify the active subordinate CA.

Compare SSL and TLS, showing PKI certificates and X509 certificates enable encryption, digital signatures, hashing, and integrity, with a focus on upgrading to TLS 1.2–1.3 and deprecating SSL.

Open the AWS certificate manager and issue a private certificate from your subordinate CA for a web server to enable TLS, then export the issued certificate for securing the site.

Understand hashing and digital signatures in ssl tls, including how one-way hashes verify integrity, how private keys sign data for authentication and non-repudiation, and how public keys verify it.

Configure a Windows IIS web server with a PKI certificate to enable https on port 443, disable ssl 3.0, enable tls 1.1 and 1.2, and require client certificates for authentication.

Obtain and install an internal code signing certificate, sign a PowerShell script, and trust it by importing the certificate into trusted publishers for all-signed execution.

Learn how PKI certificates secure networks with TLS and encrypt files via the Microsoft Encrypting File System (EFS). Create a custom EFS certificate template with a two-year validity.

Explore next steps after PKI and SSL/TLS by automating certificate deployment with Active Directory group policy, while testing templates and avoiding vulnerable protocols like SSL 3.0 and TLS 1.0.