Revocation exists to invalidate a certificate before its natural expiration, but a revocation mechanism only matters if clients actually check it. This article looks specifically at how browsers and applications handle revocation checking in practice, where the theory of CRLs and OCSP, covered in depth elsewhere in this series, meets the messier reality of what actually happens during a real connection.

Quantum computing capable of breaking today\’s public key cryptography does not exist yet, but the cryptographic standards designed to survive it already do, and the certificate ecosystem is beginning the long process of adopting them. This article covers what quantum-resistant certificates actually involve, where the industry genuinely stands today, and what organizations should realistically be doing to prepare

Every time an operating system displays a warning about an unrecognized publisher, or silently allows an application to install without any friction at all, a code signing certificate is somewhere behind that decision. This article covers how code signing actually works, why it matters more than ever given the current software supply chain threat landscape, and what organizations distributing software need to get right.

Pre-shared keys remain a common way to authenticate VPN connections, largely because they are simple to configure and understand. They are also a genuinely weaker security model than certificate-based authentication, and understanding exactly why is worth walking through directly. This article compares the two approaches and makes the practical case for moving VPN authentication toward certificates.

Zero trust has become one of the most widely referenced concepts in enterprise security, and also one of the most loosely defined in casual conversation. Stripped of marketing language, zero trust rests on a fairly simple principle: never trust a connection by default, verify it explicitly every time, regardless of whether it originates inside or outside the traditional network perimeter. Certificates are one of the most concrete, practical tools for making that principle actually enforceable rather than aspirational. This article covers exactly how the two fit together.

Windows-centric environments often accumulate certificates across dozens or hundreds of servers, and reaching into each machine\’s certificate store individually to check, renew, or clean up certificates does not scale past a handful of systems. PowerShell offers a genuinely powerful toolkit for handling these operations in bulk, and this article covers the practical patterns for using it effectively.