Cryptographic architecture / Interactive guide

Make the trust path visible.

Explore the responsibilities around certificate lifecycle, key custody and rotation. Select a step to see the engineering question behind it.

Architecture model

Certificate lifecycle

Certificates connect an identity to a public key. Ownership and renewal are part of that lifecycle.

Step 1 of 4

Record certificate owners, relying systems and renewal dependencies before changing the hierarchy.

Read the complete diagram as text

Inventory
Record certificate owners, relying systems and renewal dependencies before changing the hierarchy.
Enrol
Check the requesting identity and certificate policy before the issuing authority signs a certificate.
Deploy & validate
Deploy the chain and check the relying party’s identity, validity and trust requirements.
Renew or revoke
Renew with clear ownership. When trust changes, apply the revocation and incident process required by the system.