Future Topics

• Important Data formats

  • ASN.1 with DER and PEM

  • X.509

  • PKCS#12

  • PKCS#10

  • PKCS#7/CMS

  • SSH and PKCS#8 (?)

• Enrollment Protocols

  • SCEP

  • ACME

  • EST

  • Microsoft's RPC/DCOM

  • Microsoft's SOAP

  • Manual enrollment on the CA's web page

  • Other proprietary protocols

• Other Protocols or Standards

  • CAA

  • CRL (vs OCSP)

• Tools

  • certutil

  • guiDumpASN

  • OpenSSL/LibreSSL

• Families of Cryptography Algorithms

  • Hashes

  • Symmetric Cryptography

  • Asymmetric Cryptography

    • RSA

    • El Gamal

    • Elliptic Curves

  • Secret Sharing

  • Message Authentication Codes

• Certificate Use Cases

  • Authentication

    • WiFi

    • VPN

    • Web Sites (mTLS)

    • Smart Card Logon

    • Server Authentication (TLS)

    • Kerberos

  • Encryption

    • Disk Encryption (BitLocker?)

    • EFS

    • S/MIME Encryption

  • Signatures

    • Code Signing

    • Document Signing

    • S/MIME Signatures

• Other stuff

  • Certifried attack

  • Managing Certificate Lifecycles with CRL, OCSP, ...