AWS certificate manager

Managing certificates can also be a challenge sometimes, specifically if you have multiple domains with SSL enabled.

You need to keep track of certificate expiration and also have to stay tuned related to any newly discovered protocol attacks as that would mean that the browser will stop supporting those certificates in a while.

Let's understand this with two sets of use cases:

Use case 1

In 2016, Google announced its plans to remove the support of SSL/TLS certificates that are signed with the SHA-1 hash algorithm. Mozilla and Microsoft also announced similar plans to remove support for the same due to a research, which demonstrated that it was easier to break SHA-1 than what was anticipated previously. All the system administrators had to get new certificates signed with much more secure hashing algorithms such as SHA-2 and replace the certificates everywhere.

Use case 2

In the morning, suddenly there were loads of alerts on John's phone. John is a system administrator...