Resources · Blog

Insights on machine identity, TLS, and PKI.

Practical commentary on certificate operations, the 47-day era, Kubernetes, and the machine identity layer — every article grounded in real infrastructure.

TLSPKIMachine IdentityKubernetesAutomationSecurityCompliance
Read this first
THE 47-DAY ERACertificate lifetimes arecollapsing on a schedule.398dto Mar 2026≈ 1×/yrNOW200dMar 2026≈ 2×/yr100dMar 2027≈ 4×/yr47dMar 2029≈ 8×/yrMachineCertTLS
Preparing for 200-, 100-, and 47-Day TLS Certificates
Publicly trusted certificate lifetimes are shrinking on a fixed schedule — 200 days now, 100 in 2027, 47 in 2029. The timeline, the workload math, and what to put in place before the next cut.
8 min read
MUTUAL TLS — BOTH SIDES PROVE IDENTITYCLIENTcurl / serviceSERVERapi.example.compresents client certificate →← presents server certificateboth verified ✓mTLS
curl mTLS: Configure Mutual TLS from the Terminal
Mutual TLS: both sides present certificates. With curl it's --cert, --key, and --cacert. Generate test certs, call an mTLS endpoint, and fix the three errors everyone hits.
8 min read
THE MOMENT A CERTIFICATE EXPIRESVALIDtrustedEXPIRINGalert windownotAfter · no graceEXPIREDrejectedBrowser warningMobile app failsAPI handshake failsAutomated jobs breakExpiry
What Happens When an SSL Certificate Expires (and How to Prevent It)
When a TLS certificate expires, clients reject it immediately — a full-page browser warning, failed API handshakes, a down service. No grace period. What breaks, and how to prevent it.
6 min read
AUTOMATED RENEWAL WITH ACME1Orderrequest cert2Challengeprove control3ValidateCA verifies4Renewissue + deployAutomation
How to Automate SSL/TLS Certificate Renewal with ACME
ACME reissues certificates over an API on a schedule — no human in the loop. The full setup with certbot and cert-manager, HTTP-01 vs DNS-01, and the deployment step teams forget.
7 min read

More articles publishing weekly.

Go deeper

Related resources

DocumentationDeploy and operate.MethodologyOur approach to machine trust.47-day readiness guidePlan for shorter lifetimes.Certificate discoveryFind every certificate you own.Trust CenterSecurity, uptime, and compliance.ChangelogWhat’s new in the product.
See it in practice

From reading to running.

Put the ideas into practice — run a free domain scan and see your certificate estate in 60 seconds.

Explore platform