Upgrade to Pro — share decks privately, control downloads, hide ads and more …

プライベートクラウドでの効率的な証明書配布戦略 / Efficient Certificate...

Avatar for LINEヤフーTech (LY Corporation Tech) LINEヤフーTech (LY Corporation Tech) PRO
June 30, 2025
Technology
0
150

プライベートクラウドでの効率的な証明書配布戦略 / Efficient Certificate Distribution Strategy in Private Cloud

LINEヤフーでは大規模なプライベートクラウドと社内認証局を運用し、Public CAと併せて多数のTLS証明書を管理しています。証明書の期限管理や更新は運用コストが発生するだけでなく、手動更新に伴う工数増大やヒューマンエラーのリスクが深刻な課題となっているため、より効率的な証明書管理エコシステムの構築が急務となっています。
本セッションでは、まずプライベートクラウド上における証明書管理の現状と既存のセキュリティ施策について共有し、次に社内エコシステムに最適化したcert-manager（k8s）を活用した証明書自動更新の事例をご紹介します。さらに、今後展開が予定されている自動証明書管理基盤のビジョンについても共有します。

Avatar for LINEヤフーTech (LY Corporation Tech)

LINEヤフーTech (LY Corporation Tech) PRO

June 30, 2025
Tweet

More Decks by LINEヤフーTech (LY Corporation Tech)

See All by LINEヤフーTech (LY Corporation Tech)
マルチモーダル基盤モデルに基づく動画と音の解析技術
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
2
250
AI駆動開発 with MixLeap Study【大阪支部 #3】
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
0
270
Yahoo!しごとカタログ 新しい境地を創るエンジニア募集！
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
3
320
データグループにおけるフロントエンド開発
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
2
280
Yahoo!知恵袋におけるフロントエンド開発
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
0
260
"LINE Planet" and AI: Conversations with AI
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
0
57
Seamless inventory management with AI
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
0
34
AI Frontiers Revealed: Transforming LINE Shopping TW with LLM-Driven Product Attribute Extraction
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
0
56
LINEヤフーの音声AIがもたらす未来：ASR/TTSと対話技術の新たな可能性 / LY Corporation's Speech AI Vision: Towards Realtime Spoken Dialogue through Advanced ASR and TTS
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
0
63

Other Decks in Technology

See All in Technology
東京海上日動におけるセキュアな開発プロセスの取り組み
Avatar for miyabit miyabit
0
200
私とAWSとの関わりの歩み～意志あるところに道は開けるかも？～
Avatar for nagisa_53 nagisa53
1
130
2025/07/22_家族アルバム みてねのCRE における生成AI活用事例
Avatar for Masaru Hoshino masartz
2
140
OTel 公式ドキュメント翻訳 PJ から始めるコミュニティ活動/Community activities starting with the OTel official document translation project
Avatar for Msksgm msksgm
0
300
[TechNight #91] Oracle Database 最新パフォーマンス分析手法
Avatar for oracle4engineer oracle4engineer
PRO
3
140
Kiro Hookを Terraformで検証
Avatar for ao-inoue ao_inoue
0
130
メモ整理が苦手な者による頑張らないObsidian活用術
Avatar for OPTiM optim
0
150
「AI駆動開発」のボトルネック『言語化』を効率化するには
Avatar for Tomohiro Tani taniiicom
1
200
20250719_JAWS_kobe
Avatar for Takuya Yonezawa takuyay0ne
1
170
LLM開発を支えるエヌビディアの生成AIエコシステム
Avatar for Murakami Mana acceleratedmu3n
0
330
「育てる」サーバーレス 〜チーム開発研修で学んだ、小さく始めて大きく拡張するAWS設計〜
Avatar for yut yu_kod
1
170
クマ×共生 HACKATHON - 熊対策を『特別な行動」から「生活の一部」に -
Avatar for ふぁらお加藤 pharaohkj
0
180

Featured

See All Featured
Testing 201, or: Great Expectations
Avatar for Joseph Mastey jmmastey
43
7.6k
Fireside Chat
Avatar for paigeccino paigeccino
37
3.5k
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
Avatar for Michelle Schulp Hunt marktimemedia
31
2.4k
VelocityConf: Rendering Performance Case Studies
Avatar for Addy Osmani addyosmani
332
24k
jQuery: Nuts, Bolts and Bling
Avatar for Doug Neiner dougneiner
63
7.8k
Helping Users Find Their Own Way: Creating Modern Search Experiences
Avatar for Dan Newman danielanewman
29
2.8k
Done Done
Avatar for chrislema chrislema
184
16k
Building an army of robots
Avatar for Kyle Neath kneath
306
45k
GraphQLとの向き合い方2022年版
Avatar for Yosuke Kurami quramy
49
14k
[RailsConf 2023 Opening Keynote] The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
29
9.6k
CSS Pre-Processors: Stylus, Less & Sass
Avatar for Bermon Painter bermonpainter
357
30k
Designing for Performance
Avatar for Lara Hogan lara
610
69k

Transcript

  1. &GGJDJFOU$FSUJGJDBUF%JTUSJCVUJPO4USBUFHZ JO1SJWBUF$MPVE *OGSBTUSVDUVSF(SPVQ 4FDVSJUZ1MBUGPSN%JWJTJPO 5SVTU5FDIOPMPHZ5FBN 54636%03ZPTVLF :"."(6$)*,BUTVZB

  2. "CPVUVT *OUSPEVDUJPO

  3. 4FDVSJUZ&OHJOFFS +PJOFEUIFGPSNFS:BIPP+BQBOJO %FWFMPQT NBJOUBJOT BOEPQFSBUFTJOUFSOBM DFSUJGJDBUFJTTVBODFTZTUFNTBOE BVUIFOUJDBUJPOBVUIPSJ[BUJPOTZTUFNTUIBU VTFDFSUJGJDBUFT *BMTPXSJUFUFDIOJDBMCPPLTJONZQSJWBUF UJNFBOEIPTUBDBTVBMDIBUQPEDBTU

    VODSPQKQ 8IPBN* *OUSPEVDUJPO 54636%03ZPTVLF

  4. YAMAGUCHI Katsuya • Career • Joined Yahoo Japan Corporation as

    a new graduate in 2017 • Engaged in the development of security infrastructure and key management systems • Involved in the construction of certificate management infrastructure • Focused on improving security using certificate-related mechanisms as a team leader 8IPBN* *OUSPEVDUJPO

  5. YAMAGUCHI Katsuya • Career • Joined Yahoo Japan Corporation as

    a new graduate in 2017 • Engaged in the development of security infrastructure and key management systems • Involved in the construction of certificate management infrastructure • Focused on improving security using certificate-related mechanisms as a team leader 8IPBN* *OUSPEVDUJPO

  6. 5IF/VNCFSPG$FSUJGJDBUFTJO0VS1SJWBUF$MPVE • "TJHOJGJDBOUOVNCFSPGTFSWFSDFSUJGJDBUFTBSFJOVTFXJUIJOPVS JOGSBTUSVDUVSF • 8FTUSJWFUPTFDVSFBMMJOUFSOBMDPNNVOJDBUJPOTXJUI5-4 1SJWBUF$"$FSUT 1VCMJD$"$FSUT  

  7. )PXTIPVMEBOJEFBMQSJWBUFDMPVEBQQFBS SFHBSEJOHDFSUJGJDBUFNBOBHFNFOU

  8. "4FDVSFCZ%FGBVMU8PSME

  9. 4USBUFHZ $FSUJGJDBUF 0XOFSTIJQ "DDFTT$POUSPM .VMUJ$" 4VQQPSU $FSUJGJDBUF *TTVBODF1PMJDZ "VUPNBUJD 6QEBUF

    "VUPNBUJD 1MBDFNFOU

  10. $FSUJGJDBUF*TTVBODF1PMJDZ

  11. &OGPSDFBCBTFMJOFPGTFDVSJUZBOERVBMJUZGPSFWFSZDFSUJGJDBUF JTTVFE

  12. 1PMJDZ$SZQUPHSBQIJD3FRVJSFNFOUT FH 34"CJU &$%4" 1 ,FZ"MHPSJUIN 4J[F FH 4)"PSTUSPOHFS 4JHOBUVSF

    "MHPSJUIN FH 'PSCJE4)"GPS TJHOBUVSFT PSBOZLFZ UZQFTXJUILOPXO XFBLOFTTFT 1SPIJCJUFE 4UBOEBSET

  13. 1PMJDZ$FSUJGJDBUF1SPGJMF$POUFOUT FH -JNJUXJMEDBSEEFQUI TVCFYBNQMFDPN POMZ  SFTUSJDUUIFOVNCFSPG 4"/T %PNBJO 4DPQF$POUSPM

    FH #MPDLJTTVBODFGPS EPNBJOTMJLFTFSWFSMPDBM PSECJOUFSOBMOFUXPSL *OGPSNBUJPO -FBLBHF 1SFWFOUJPO FH 3FRVJSFTQFDJGJD 0SHBOJ[BUJPO$PVOUSZ GJFMETMJNJU&YUFOEFE,FZ 6TBHFUP4FSWFS "VUIFOUJDBUJPO $POUFOU 6TBHF 4UBOEBSEJ[BUJPO

  14. *NQSPWJOHUIF%FWFMPQFS&YQFSJFODF • &MJNJOBUF(VFTTXPSLBOE"NCJHVJUZ • 3FNPWFUIF'FBSPG.BLJOH.JTUBLFT • *NQSPWF4FSWJDF3FMJBCJMJUZ &OTVSJOHBDPOTJTUFOU IJHITUBOEBSEPGRVBMJUZGPSFWFSZDFSUJGJDBUF 

    BVUPNBUJDBMMZ #FOFGJUTGPS%FWFMPQFST

  15. &OGPSDF$FSUJGJDBUF*TTVBODF1PMJDZJO 0VS1SJWBUF$MPVE Certificate Management System Handling all issue requests •

    "MMJTTVBODFSFRVFTUTBSFDFOUSBMJ[FEUISPVHIUIJTTZTUFN • 1PMJDJFTBSFFNCFEEFEJOUIFTZTUFNBOEBVUPNBUJDBMMZFOGPSDFEPOFWFSZ SFRVFTU • 3FHVMBSSFWJFXTFOTVSFUIFTFQPMJDJFTTUBZBMJHOFEXJUIDVSSFOUTFDVSJUZ TUBOEBSET CA (Certificate Authority) Enforce Our Certificate Issuance Policies Issue request

  16. $FSUJGJDBUF 0XOFSTIJQ

  17. • &OTVSFUIFDFSUJGJDBUFTPXOFS JT BMXBZTJEFOUJGJBCMF • 8IP • 8IJDIPSHBOJ[BUJPO • 8IJDIUFBN

    • 8IJDIQSPKFDU • "MXBZTBTTJHODFSUJGJDBUF NBOBHFNFOUUPBTJOHMFHSPVQ 8IBUJT$FSUJGJDBUF0XOFSTIJQ

  18. • "NCJHVPVT3FTQPOTJCJMJUZGPS$SJUJDBM5BTLT • 8IPIBOEMFTDFSUJGJDBUFFYQJSBUJPOT • 8IPSFTQPOETUPLFZDPNQSPNJTFTPSMFBLT 8IZ$FSUJGJDBUF0XOFSTIJQ.BUUFST

  19. • "NCJHVPVT3FTQPOTJCJMJUZGPS$SJUJDBM5BTLT • 8IPIBOEMFTDFSUJGJDBUFFYQJSBUJPOT • 8IPSFTQPOETUPLFZDPNQSPNJTFTPSMFBLT • %JGGJDVMUZJO5SBDLJOHBOE"MMPDBUJOH$PTUT • *OBCJMJUZUPBDDVSBUFMZCJMMEFQBSUNFOUTPSQSPKFDUTGPSDFSUJGJDBUFJTTVBODF

    8IZ$FSUJGJDBUF0XOFSTIJQ.BUUFST

  20. • "NCJHVPVT3FTQPOTJCJMJUZGPS$SJUJDBM5BTLT • 8IPIBOEMFTDFSUJGJDBUFFYQJSBUJPOT • 8IPSFTQPOETUPLFZDPNQSPNJTFTPSMFBLT • %JGGJDVMUZJO5SBDLJOHBOE"MMPDBUJOH$PTUT • *OBCJMJUZUPBDDVSBUFMZCJMMEFQBSUNFOUTPSQSPKFDUTGPSDFSUJGJDBUFJTTVBODF

    • .BJOUBJOJOH0XOFSTIJQ5ISPVHI0SHBOJ[BUJPOBM$IBOHFT • )PXUPNBOBHFPXOFSTIJQXIFOBENJOTMFBWFPSUFBNTBSFSFPSHBOJ[FE 8IZ$FSUJGJDBUF0XOFSTIJQ.BUUFST

  21. • "NCJHVPVT3FTQPOTJCJMJUZGPS$SJUJDBM5BTLT • 8IPIBOEMFTDFSUJGJDBUFFYQJSBUJPOT • 8IPSFTQPOETUPLFZDPNQSPNJTFTPSMFBLT • %JGGJDVMUZJO5SBDLJOHBOE"MMPDBUJOH$PTUT • *OBCJMJUZUPBDDVSBUFMZCJMMEFQBSUNFOUTPSQSPKFDUTGPSDFSUJGJDBUFJTTVBODF

    • .BJOUBJOJOH0XOFSTIJQ5ISPVHI0SHBOJ[BUJPOBM$IBOHFT • )PXUPNBOBHFPXOFSTIJQXIFOBENJOTMFBWFPSUFBNTBSFSFPSHBOJ[FE • $PNQMFYJUZJO$SPTT'VODUJPOBM1SPKFDUT • %JGGJDVMUZBTTJHOJOHBTJOHMFPXOFSXIFONVMUJQMFEFQBSUNFOUTBOEUFBNTBSF JOWPMWFE 8IZ$FSUJGJDBUF0XOFSTIJQ.BUUFST

  22. $FSUJGJDBUF0XOFSTIJQ JO0VS1SJWBUF $MPVE 1SPKFDU" 1SPKFDU#

  23. $FSUJGJDBUF0XOFSTIJQ JO0VS1SJWBUF $MPVE $PEFNBTUFS 1SPKFDU" 1SPKFDU# 1SPKFDU"TZTUFNDPEF 1SPKFDU#TZTUFNDPEF 4FQBSBUFDFSUJGJDBUFNBOBHFNFOUCZQSPKFDUBOEEFMFHBUF PWFSTJHIUUPBVOJGJFEDPEFNBTUFS

  24. .VMUJ$"4VQQPSU

  25. • $PTU&GGJDJFODZ • *OJUJBMTFUVQDPTUTPGGTFUCZMPOHUFSNTBWJOHT • *OUFSOBM5SVTU*OGSBTUSVDUVSF • &OTVSFTTFDVSFDPNNVOJDBUJPOCFUXFFOJOUFSOBMBQQMJDBUJPOTBOETFSWJDFT • 'BTUFS*TTVBODF

    • *TTVFTDFSUJGJDBUFTJONJOVUFT VOMJLFMFOHUIZQSPDFTTFTXJUIQVCMJD$"T • 1SPUFDUJPOPG*OUFSOBM%PNBJOT • ,FFQTJOUFSOBMEPNBJOTDPOGJEFOUJBMCZBWPJEJOH1VCMJD$"JTTVBODF XIJDI FYQPTFTEFUBJMTJO$FSUJGJDBUF5SBOTQBSFODZMPHT #FOFGJUTPG1SJWBUF$"

  26. .VMUJ$"4VQQPSUJO0VS1SJWBUF$MPVE Project A Project B Issue request Issue request Project

    A’s certs Project B’s certs Certificate Management System Handling all issue requests Public CA Private CA Public CA

  27. .VMUJ$"4VQQPSUJO0VS1SJWBUF$MPVE Project A Project B Issue request Issue request Project

    A’s certs Project B’s certs Certificate Management System Handling all issue requests Handling differences between CAs Public CA Private CA Public CA

  28. .VMUJ$"4VQQPSUJO0VS1SJWBUF$MPVE .VMUJ$"4VQQPSU Project A Project B Project A’s certs Project

    B’s certs Certificate Management System Handling all issue requests Offloading the domain validation task from users Public CA Fetch certificates DNS Domain verification using DNS Setting the challenge token in a DNS TXT record

  29. "DDFTT$POUSPM

  30. "DDFTT$POUSPMGPS$FSUJGJDBUF.BOBHFNFOU Project A Project A’s certs Project B’s certs Certificate

    Management System Project B Grant Grant Deny

  31. • 8FVTF"UIFO[ BTPVSTUBOEBSE QMBUGPSNGPSBVUIFOUJDBUJPOBOE BVUIPSJ[BUJPO • 0VSQSJWBUFDMPVETBDDFTTDPOUSPMJT CVJMUFOUJSFMZPO"UIFO[ • 5IJTQSPWJEFTBVOJGJFETZTUFNGPS

    QSPKFDUCBTFEBDDFTTDPOUSPM  JOUFHSBUJOHTFBNMFTTMZXJUIPVS XPSLGMPX "DDFTT$POUSPMGPS$FSUJGJDBUF.BOBHFNFOU *O0VS1SJWBUF$MPVE "UIFO[ MPHPCZIUUQTHJUIVCDPN"UIFO;BUIFO[ "UIFO[IUUQTXXXBUIFO[JP ˞"UIFO[ JTBSFDPHOJ[FE$/$' $MPVE/BUJWF $PNQVUJOH'PVOEBUJPO 4BOECPYQSPKFDU

  32. Project A Project A’s certs Project B’s certs Certificate Management

    System Grant Deny "DDFTT$POUSPMGPS$FSUJGJDBUF.BOBHFNFOU *O0VS1SJWBUF$MPVE

  33. 4USBUFHZ $FSUJGJDBUF 0XOFSTIJQ "DDFTT$POUSPM .VMUJ$" 4VQQPSU $FSUJGJDBUF *TTVBODF1PMJDZ "VUPNBUJD 6QEBUF

    "VUPNBUJD 1MBDFNFOU

  34. "VUPNBUJD QMBDFNFOU

  35. 8IBUUPEFQMPZ "VUPNBUJDQMBDFNFOU -FBGDFSUJGJDBUF  $FSUJGJDBUF 4FUXJUIDFSUJGJDBUF  1SJWBUF ,FZ "TOFFEFE

     *OUFSNFEJBUF $FSUJGJDBUF

  36. 8IBUUPEFQMPZ "VUPNBUJDQMBDFNFOU -FBGDFSUJGJDBUF  $FSUJGJDBUF 4FUXJUIDFSUJGJDBUF  1SJWBUF ,FZ "TOFFEFE

     *OUFSNFEJBUF $FSUJGJDBUF %FQMPZFWFSZUIJOHOFFEFEUPVTF BDFSUJGJDBUF

  37. "VUPNBUJDQMBDFNFOU &YQFDUFE0VUDPNFT

  38. &YQFDUFE0VUDPNFT "VUPNBUJDQMBDFNFOU #'VODUJPO "%# 4FSWJDF "'VODUJPO 6TFS #%#

  39. &YQFDUFE0VUDPNFT "VUPNBUJDQMBDFNFOU #'VODUJPO 4FSWJDF "'VODUJPO 6TFS

  40. &YQFDUFE0VUDPNFT "VUPNBUJDQMBDFNFOU #'VODUJPO "%# 4FSWJDF "'VODUJPO 6TFS #%#

  41. &YQFDUFE0VUDPNFT "VUPNBUJDQMBDFNFOU $FSUJGJDBUFSFOFXBMQSPDFEVSF GPS4FSWJDF" )PHF GVHB    

       $FSUJGJDBUFSFOFXBMQSPDFEVSF GPS4FSWJDF# )PHF GVHB        $FSUJGJDBUFSFOFXBMQSPDFEVSF GPS%# )PHF GVHB        $FSUJGJDBUFSFOFXBMQSPDFEVSF GPS-# )PHF GVHB       

  42. .BOVBMMZEFQMPZJOHDFSUJGJDBUFTUPBXJEFWBSJFUZPG DPNQPOFOUTJOEVDFTFSSPST &YQFDUFE0VUDPNFT 3FEVDFPQFSBUJPOBMFSSPST "VUPNBUJDQMBDFNFOU *UJTWFSZUFEJPVTUPVOEFSTUBOEUIFQSPDFEVSFTGPS FBDIUBSHFUTZTUFNBOEFYFDVUFUIFNFWFSZUJNFB OFXDFSUJGJDBUFJTJTTVFEPSSFOFXFE 3FEVDFUIFPQFSBUJPOBMCVSEFO #'VODUJPO

    4FSWJDF "'VODUJPO 6TFS $FSUJGJDBUFSFOFXBM QSPDFEVSF GPS4FSWJDF" )PHF GVHB   $FSUJGJDBUFSFOFXBM QSPDFEVSF GPS4FSWJDF# )PHF GVHB   $FSUJGJDBUFSFOFXBM QSPDFEVSF GPS%# )PHF GVHB   $FSUJGJDBUFSFOFXBM QSPDFEVSF GPS-# )PHF GVHB  

  43. .BOVBMMZEFQMPZJOHDFSUJGJDBUFTUPBXJEFWBSJFUZPG DPNQPOFOUTJOEVDFTFSSPST &YQFDUFE0VUDPNFT 3FEVDFPQFSBUJPOBMFSSPST "VUPNBUJDQMBDFNFOU *UJTWFSZUFEJPVTUPVOEFSTUBOEUIFQSPDFEVSFTGPS FBDIUBSHFUTZTUFNBOEFYFDVUFUIFNFWFSZUJNFB OFXDFSUJGJDBUFJTJTTVFEPSSFOFXFE 3FEVDFUIFPQFSBUJPOBMCVSEFO #'VODUJPO

    4FSWJDF "'VODUJPO 6TFS $FSUJGJDBUFSFOFXBM QSPDFEVSF GPS4FSWJDF" )PHF GVHB   $FSUJGJDBUFSFOFXBM QSPDFEVSF GPS4FSWJDF# )PHF GVHB   $FSUJGJDBUFSFOFXBM QSPDFEVSF GPS%# )PHF GVHB   $FSUJGJDBUFSFOFXBM QSPDFEVSF GPS-# )PHF GVHB   &MJNJOBUFJODJEFOUTBTTPDJBUFEXJUI DFSUJGJDBUFSFOFXBMUBTLT

  44. "VUPNBUJDQMBDFNFOU )PXTIPVMEXFEP

  45. )PXTIPVMEXFEP "VUPNBUJDQMBDFNFOU 3&45"1*"$.&  1VCMJTIJOH BO"1* "VUIFOUJDBUJPOBOE"VUIPSJ[BUJPO  &TUBCMJTIJOH "VUI

    $FOUSBMJ[FENBOBHFNFOU  #VJMEJOHBO FDPTZTUFN

  46. • "UPPMUPBVUPNBUFUIFNBOBHFNFOUPG DFSUJGJDBUFTXJUIJOB,VCFSOFUFTDMVTUFS • *UBVUPNBUJDBMMZPCUBJOT DFSUJGJDBUFTGSPN BDFSUJGJDBUFBVUIPSJUZ • *UNPOJUPSTDFSUJGJDBUFFYQJSBUJPOEBUFT BOEBVUPNBUJDBMMZQFSGPSNTSFOFXBM

    QSPDFTTJOHCFGPSFUIFZFYQJSF • :PVEFGJOFUIFSFRVJSFEDFSUJGJDBUFTJOB ,VCFSOFUFTNBOJGFTUGJMF 1VCMJTIJOHBO"1* "VUPNBUJDSFOFXBM DFSUNBOBHFS cert-manager project logo (c) by Jetstack Ltd.

  47. • "DPNNVOJDBUJPOQSPUPDPMGPSBVUPNBUJOH UBTLTTVDIBTDFSUJGJDBUFJTTVBODF  SFOFXBM BOESFWPDBUJPO • "O"$.&DMJFOUJOTUBMMFEPOBXFCTFSWFS DPNNVOJDBUFTXJUIUIF$" •

    *UBVUPNBUJDBMMZWFSJGJFTEPNBJOPXOFSTIJQ UPDPNQMFUFDFSUJGJDBUFBDRVJTJUJPOBOE SFOFXBMXJUIPVUNBOVBMJOUFSWFOUJPO 1VCMJTIJOHBO"1* "VUPNBUJDSFOFXBM "$.& "VUPNBUJD$FSUJGJDBUF.BOBHFNFOU&OWJSPONFOU

  48. )PXTIPVMEXFEP "VUPNBUJDQMBDFNFOU 3&45"1*"$.&  1VCMJTIJOH BO"1* "VUIFOUJDBUJPOBOE"VUIPSJ[BUJPO  &TUBCMJTIJOH "VUI

    $FOUSBMJ[FENBOBHFNFOU  #VJMEJOHBO FDPTZTUFN

  49. &TUBCMJTIJOH"VUI "VUPNBUJDQMBDFNFOU 1SPKFDU" $FSUJGJDBUF 1SPKFDU# . . . $FSUJGJDBUF $FSUJGJDBUF

    $FSUJGJDBUF

  50. )PXTIPVMEXFEP "VUPNBUJDQMBDFNFOU 3&45"1*"$.&  1VCMJTIJOH BO"1* "VUIFOUJDBUJPOBOE"VUIPSJ[BUJPO  &TUBCMJTIJOH "VUI

    $FOUSBMJ[FENBOBHFNFOU  #VJMEJOHBO FDPTZTUFN

  51. $FOUSBMJ[FENBOBHFNFOU "VUPNBUJDQMBDFNFOU $FOUSBMJ[FE NBOBHFNFOUTZTUFN -# %# 7. . . .

    $" $" $"

  52. 8IBUUPEFQMPZ "VUPNBUJDQMBDFNFOU -FBGDFSUJGJDBUF  $FSUJGJDBUF 4FUXJUIDFSUJGJDBUF  1SJWBUF ,FZ "TOFFEFE

     *OUFSNFEJBUF $FSUJGJDBUF

  53. 4USBUFHZ $FSUJGJDBUF 0XOFSTIJQ "DDFTT$POUSPM .VMUJ$" 4VQQPSU $FSUJGJDBUF *TTVBODF1PMJDZ "VUPNBUJD 6QEBUF

    "VUPNBUJD 1MBDFNFOU

  54. "VUPNBUJDVQEBUF

  55. 8IBUUPVQEBUF "VUPNBUJDVQEBUF #FGPSFJUFYQJSFT  $FSUJGJDBUF %POPUSFVTF  1SJWBUF ,FZ

  56. 8IBUUPVQEBUF "VUPNBUJDVQEBUF #FGPSFJUFYQJSFT  $FSUJGJDBUF %POPUSFVTF  1SJWBUF ,FZ .BLFUIFDFSUJGJDBUFSFOFXBM

    QSPDFTTTFBNMFTT

  57. "VUPNBUJDVQEBUF &YQFDUFE0VUDPNFT

  58. &YQFDUFE0VUDPNFT "VUPNBUJDVQEBUF d d d d d

  59. &YQFDUFE0VUDPNFT "VUPNBUJDVQEBUF d d d d d

  60. &YQFDUFE0VUDPNFT "VUPNBUJDVQEBUF d d d d d

  61. &YQFDUFE0VUDPNFT "VUPNBUJDVQEBUF EBZT $VSSFOU https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/bvWh5RN6tYI

  62. &YQFDUFE0VUDPNFT "VUPNBUJDVQEBUF EBZT EBZT EBZT EBZT $VSSFOU   

    https://groups.google.com/a/groups.cabforum.org/g/servercert-wg/c/bvWh5RN6tYI

  63. &YQFDUFE0VUDPNFT "VUPNBUJDVQEBUF "VUPNBUJDVQEBUF "VUPNBUJDQMBDFNFOU 

  64. &YQFDUFE0VUDPNFT "VUPNBUJDVQEBUF "VUPNBUJDVQEBUF "VUPNBUJDQMBDFNFOU  5PBOFOWJSPONFOUXIFSF EFWFMPQFSTEPOUIBWFUPCF BXBSFPGDFSUJGJDBUFT

  65. &YQFDUFE0VUDPNFT "VUPNBUJDVQEBUF

  66. &YQFDUFE0VUDPNFT "VUPNBUJDVQEBUF

  67. &YQFDUFE0VUDPNFT "VUPNBUJDVQEBUF

  68. &YQFDUFE0VUDPNFT "VUPNBUJDVQEBUF .JUJHBUJOHDPNQSPNJTFTBOE SFEVDJOHUIFTDPQFPGJNQBDU XIFOUIFZPDDVS

  69. "VUPNBUJDVQEBUF )PXTIPVMEXFEP

  70. $FOUSBMJ[FENBOBHFNFOU "VUPNBUJDVQEBUF $FOUSBMJ[FE NBOBHFNFOUTZTUFN $" $" $"

  71. $FOUSBMJ[FENBOBHFNFOU "VUPNBUJDVQEBUF $FOUSBMJ[FE NBOBHFNFOUTZTUFN $" $" $" $FSUJGJDBUF"d $FSUJGJDBUF#d $FSUJGJDBUF$d

    $FSUJGJDBUF%d $FSUJGJDBUF&d   

  72. $FOUSBMJ[FENBOBHFNFOU "VUPNBUJDVQEBUF $FOUSBMJ[FE NBOBHFNFOUTZTUFN $" $" $" $FSUJGJDBUF"d $FSUJGJDBUF#d $FSUJGJDBUF$d

    $FSUJGJDBUF%d $FSUJGJDBUF&d    3FOFX"# 3FOFX$

  73. $FOUSBMJ[FENBOBHFNFOU "VUPNBUJDVQEBUF

  74. 8IBUUPVQEBUF "VUPNBUJDVQEBUF #FGPSFJUFYQJSFT  $FSUJGJDBUF %POPUSFVTF  1SJWBUF ,FZ

  75. 4USBUFHZ $FSUJGJDBUF 0XOFSTIJQ "DDFTT$POUSPM .VMUJ$" 4VQQPSU $FSUJGJDBUF *TTVBODF1PMJDZ "VUPNBUJD 6QEBUF

    "VUPNBUJD 1MBDFNFOU

  76. 4PNFUIJOHMJLFUIFBOOPVODFNFOUTGSPNUIF$"#SPXTFS'PSVN 4USBUFHZCBTFEPOUIFDVSSFOUTJUVBUJPO

  77. 5IFOFFEGPSQSPBDUJWF JOGPSNBUJPOHBUIFSJOH

  78. 1SPWJEJOHBTFBNMFTTMZTFDVSFFOWJSPONFOU 5IFOFFEGPSQSPBDUJWFJOGPSNBUJPOHBUIFSJOH 4FDVSJUZ&OHJOFFS 8FCEFWFMPQFS "QQMJDBUJPOEFWFMPQFS #BDLFOEEFWFMPQFS . . .

  79. 1SPWJEJOHBTFBNMFTTMZTFDVSFFOWJSPONFOU 5IFOFFEGPSQSPBDUJWFJOGPSNBUJPOHBUIFSJOH 4FDVSJUZ&OHJOFFS 8FCEFWFMPQFS "QQMJDBUJPOEFWFMPQFS #BDLFOEEFWFMPQFS . . . 8FDPOUJOVPVTMZTUSJWFUPNBLF

    PVSQSJWBUFDMPVENPSFTFDVSF

  80. &GGJDJFOU$FSUJGJDBUF%JTUSJCVUJPO4USBUFHZ JO1SJWBUF$MPVE *OGSBTUSVDUVSF(SPVQ 4FDVSJUZ1MBUGPSN%JWJTJPO 5SVTU5FDIOPMPHZ5FBN 54636%03ZPTVLF :"."(6$)*,BUTVZB