Brief description
Do you feel confident about PKI and certificates? Do you understand the content of certificates and their quality? Are you familiar with abbreviations such as CSR, HTTPS, PQC, OCSP Stapling, CAA, CT, ACME, EST, CLM etc. and do you know the best practices of a PKI? Regardless of whether you are already an expert or would like to become one, you will get your money’s worth in this training course.
What you can expect
Based on extensive knowledge from countless projects as a PKI consultant, André Clerc will teach you the necessary basics of a Public Key Infrastructure (PKI). In addition to the various components and their interactions, you will also learn about typical pitfalls and strategies for avoiding them.
Learning objectives
- Introduction: What are digital certificates and where are they used? How are digital certificates created? How does the interaction between public and private key work? What is a PKI? What are the legal aspects?
- Cryptographic basics: algorithms and procedures (hashing functions, symmetric/asymmetric procedures, Diffie Hellman, RSA, key mgmt), digital signature, recommended key lengths
- PKI components: What characterizes a PKI? What do digital certificates contain? How is the “trust” established? Why is the Registration Authority one of the most important components?
- PKI special features: Certificate Transparency, HSTS, OCSP Stapling, CAA, DANE, Pinning
- Certificates in use: https (TLS), server/client side identity proofing, transport security, S/MIME - e-mail, digital signature
Speaker
Andre Clerc is a recognized cybersecurity expert with extensive background knowledge from numerous projects and trainings in the PKI area. He works with numerous public and internal certification authorities and has extensive knowledge in the certificate environment as well as in the development of PKIs and PKI-based applications.
Who is the course suitable for?
The course is aimed at IT security officers, IT managers and other IT specialists (administrators, developers and DevOps) who are involved in the planning, realization and implementation of measures in the area of information and IT security.
A basic understanding of computer networks is required for participation.
Language of instruction
German
Training date
Tuesday, February 2, 2027, 9:00 a.m. to 5:00 p.m.
Venue
SwissSign AG, Sägereistrasse 25, 8152 Glattbrugg
Registration
Registration
The training takes place in cooperation with SwissSign, via whose website you can also register.