Get and revoke a certificate

Steps

1. Create a key and a certificate signing request with openssl.

   What the server will check: Nothing to check. The request contains your public key, never the private one.

2. Submit the request to the lab certificate authority.

   What the server will check: The authority issued a certificate for your key.

3. Revoke the certificate and check its status.

   What the server will check: The authority reports the certificate as revoked.

When it opens

This lab is planned. It opens when these are in place:

• A private lab certificate authority

A lab endpoint records what it receives for your attempt and grades it on the server.

Learn the theory

• Issuing, renewing, and revoking certificatesRequesting a certificate
• Issuing, renewing, and revoking certificatesRevoking a certificate
• Certificate authorities and chainsPrivate PKI