PKI Explained - Trust Models, X.509 & Digital Signatures

About this course

This course contains the use of artificial intelligence.Artificial intelligence tools are used selectively in this course to support content refinement and the creation of visual assets. AI-assisted tools help improve clarity, structure, and presentation of technical concepts, as well as generate illustrative diagrams and images. All technical architecture decisions, explanations, and learning objectives are designed, reviewed, and curated by the instructor to ensure accuracy, rigor, and real-world relevance.---Build Enterprise-Grade PKI Skills from the Ground UpPublic Key Infrastructure (PKI) sits at the heart of modern security: SSL/TLS, code signing, device identity, zero trust, and secure access all rely on it. Yet PKI often feels opaque, fragile, and hard to get right.This hands-on course takes you from practical cryptography basics to designing, deploying, and operating a two-tier enterprise PKI with HSM-backed keys, SSL/TLS, and OCSP/CRL-based revocation.Whether you’re a security engineer, infrastructure/DevOps engineer, or PKI specialist in the making, you’ll gain the skills to build and run a reliable PKI that your organization can trust.What This Course CoversWe start with the foundations and quickly move into real-world implementation:- Core Cryptography Concepts – symmetric vs asymmetric crypto, hashing, digital signatures, key lifecycles- Certificates & Trust – X.509, certificate chains, key usage, SAN, policies, and common pitfalls- PKI Design – two-tier architectures, root vs issuing CAs, offline models, governance and policy- HSM Integration – why HSMs matter, key protection, and integrating HSMs into your CA and key management flows- SSL/TLS in Practice – issuing and managing server certificates for