Certificate Lifecycle Management
Discovering, issuing, renewing, and revoking TLS and other certificates across an organization. Automation matters because expired or unmanaged certificates cause outages and create machine-identity risk.
Certificate expiry is one of the few identity failures that causes a visible outage rather than a quiet compromise, which is why it gets budget. As lifetimes shorten toward 47 days under the CA/Browser Forum schedule, manual renewal stops being viable and automation becomes mandatory. The identity angle is that a certificate is a machine credential: the same questions about ownership, rotation, and revocation apply as for any other non-human identity.
See also: PKI, X.509, mTLS, what is machine identity
Related on Start with Identity
- GuideCertificate Lifecycle Management Guide
A complete guide to managing the certificate lifecycle, covering PKI fundamentals, certificate issuance, automated renewal, revocation strategies, monitoring fo
- ArticleCertificate Lifecycle Management: What Breaks and How to Automate It
Certificate management explained: discovery, issuance, renewal, and revocation across public and private PKI, why the CA/Browser Forum schedule to 47-day certif
- GlossaryConsent Management
Capturing, storing, and honoring user consent for data processing and communications, often to satisfy GDPR and similar laws. Central to customer identity and p
- GlossaryDPoP
Demonstrating Proof of Possession (RFC 9449). Binds an access token to a specific key held by the client, so a stolen bearer token cannot be replayed. Important
- GlossarySecrets Management
Centralized storage, distribution, rotation, and audit of credentials used by applications and infrastructure. Modern secrets management issues short-lived dyna
- ArticleTop 6 Open-Source PKI and Certificate Management Tools
The best open-source PKI tools in 2026, from EJBCA and step-ca to Dogtag, cert-manager, OpenXPKI, and Boulder, compared on protocol support, automation, and who