https://sslnexus.com/insights/Engineering notes on certificate lifecycle automation, PKI and infrastructure operations.https://sslnexus.com/insights/the-47-day-tls-certificate-era-what-infrastructure-teams-need-to-changehttps://sslnexus.com/insights/the-47-day-tls-certificate-era-what-infrastructure-teams-need-to-changeWed, 23 Sep 2026 09:00:00 +0100Public TLS validity is already shrinking. The move to 200-day certificates in 2026, 100 days in 2027 and 47 days in 2029 turns renewal automation from a convenience into core infrastructure.https://sslnexus.com/insights/automating-f5-big-ip-certificate-renewal-without-installing-agentshttps://sslnexus.com/insights/automating-f5-big-ip-certificate-renewal-without-installing-agentsWed, 23 Sep 2026 09:00:00 +0100F5 BIG-IP already exposes the management surface needed for certificate automation. The safer architecture is often to orchestrate the appliance through iControl REST rather than install another agent.https://sslnexus.com/insights/why-certificate-automation-gets-hard-across-vlanshttps://sslnexus.com/insights/why-certificate-automation-gets-hard-across-vlansWed, 23 Sep 2026 09:00:00 +0100Certificate lifecycle platforms cross boundaries that application teams usually do not. Segmentation is not the problem; unclear flow ownership is. A good design keeps VLAN boundaries while permitting only the management paths the automation actually needs.https://sslnexus.com/insights/how-to-automate-iis-certificate-renewal-across-windows-server-estateshttps://sslnexus.com/insights/how-to-automate-iis-certificate-renewal-across-windows-server-estatesWed, 23 Sep 2026 09:00:00 +0100IIS certificate renewal at scale is a Windows management problem as much as a PKI problem. Standardising WinRM, service identities and bindings turns it into repeatable infrastructure automation.https://sslnexus.com/insights/certificate-lifecycle-management-for-universities-and-large-institutionshttps://sslnexus.com/insights/certificate-lifecycle-management-for-universities-and-large-institutionsWed, 23 Sep 2026 09:00:00 +0100Universities and large institutions combine decentralised ownership, old systems, research networks, vendors and modern cloud platforms. Certificate lifecycle management has to work across that diversity without centralising every application team.https://sslnexus.com/insights/managing-certificates-across-palo-alto-f5-and-vmware-from-one-control-planehttps://sslnexus.com/insights/managing-certificates-across-palo-alto-f5-and-vmware-from-one-control-planeWed, 23 Sep 2026 09:00:00 +0100Network and virtualisation platforms each have their own certificate workflow. A central control plane can unify governance while still using each platform’s native management API and private-key model.