Guide PKI and X.509 certificate workflows from CSR generation to revocation.
npx skills add https://github.com/oriolrius/pki-manager-web --skill pki-and-x-509
Please help me install this Agent Skill. Skill: PKI and X.509 Source: https://github.com/oriolrius/pki-manager-web/tree/main/.claude/skills/pki-x509 Command: npx skills add https://github.com/oriolrius/pki-manager-web --skill pki-and-x-509
Expert guidance for Public Key Infrastructure (PKI) and X.509 certificates including certificate structure, DN parsing, CSR generation, certificate signing, revocation (CRL/OCSP), key management, and OpenSSL commands. Use this when working with digital certificates, certificate authorities, or cryptographic key management.
Use the PKI and X.509 guidance to plan a certificate lifecycle from CSR to revocation.
High-intent search queries and answers about installing and using this skill.
To generate a CSR and sign an X.509 certificate using OpenSSL, you need to follow the CA workflow: create a key pair, generate the CSR with the correct DN structure, and then use the CA to sign the certificate. This process covers the full certificate lifecycle from generation to issuance.
CRL and OCSP are both mechanisms for certificate revocation. CRL uses a published list of revoked certificates, while OCSP provides real-time revocation status checks. Choosing between them depends on your operational needs for freshness versus infrastructure overhead in your PKI.
Parsing a Distinguished Name (DN) in an X.509 certificate involves breaking down the structured string into its component attributes, such as CN, O, and OU. Correct DN parsing is crucial for verifying certificate identity and establishing trust within the Public Key Infrastructure.
Best practices for secure key management in PKI involve protecting private keys from unauthorized access through hardware-backed storage, strict access controls, and proper lifecycle management. Secure key storage strategies prevent compromise and maintain the integrity of your X.509 certificate trust chain.
Yes, you can manage the entire X.509 certificate lifecycle from issuance to revocation. This includes CSR creation, certificate signing by a Certificate Authority, and eventual revocation using CRL or OCSP, ensuring comprehensive security operations throughout the certificate's validity period.
moonshineTPGenerate CSRs, sign certificates, and manage X.509 revocation.
theslashdojoConfigure nginx SSL/TLS with Let's Encrypt certificates and automatic renewal.
hoanghn61Extract TLS certificate fields and protocol signals from HTTPS endpoints.
BroadcomManage Holorouter appliance services, routing, certificates, and DNS via SSH and kubectl.
