Security · System Administration
Build a private CA with OpenSSL and issue service certificates
Create an offline root and constrained online intermediate with OpenSSL 3.5 LTS, issue inventory-approved SAN/EKU service leaves, operate revocation, and prove rotation plus full CA recovery.