https://rameezrehman408.github.io/tags/pki/Recent content in PKI on Rameez's WebsiteHugoenWed, 29 Jul 2026 00:00:00 +0000https://rameezrehman408.github.io/posts/tls-automation-mandate/Wed, 29 Jul 2026 00:00:00 +0000https://rameezrehman408.github.io/posts/tls-automation-mandate/Let’s be honest: if your deployment workflow still involves an engineer manually downloading a .crt, pasting it into a web server configuration, and praying to the gods of uptime that they don’t forget to do it again in 90 days… you aren’t running a production environment. You are running a time bomb. The industry is undergoing a massive compression in certificate lifespans. We’ve moved from years to months, and now—driven by the momentum of Let’s Encrypt and pressure from browser vendors (Apple, Google) favoring high-frequency rotation—we are rapidly approaching an era where 90-day lifespans will feel like an eternity.