Build a Certificate Authority
Build a working CA: parse X.509 / ASN.1 DER, accept CSRs, validate domain ownership, issue certificates with proper extensions, publish to Certificate Transparency logs, manage revocation via CRL/OCSP, and protect signing keys in HSMs. The infrastructure underlying every HTTPS connection.
advanced10 lessons4 chapters10 graded exercisesPython
No sign-up needed for lesson 1 · certificate on completion · sign up to save progress
What you’ll have built
Chapter by chapter. Every step is a graded exercise.
- X.509 & PKI Foundations
- Issuing Certificates
- Validation & Revocation
- Operating a CA
Starts in Python — solve in the language you choose in the editor, same tests either way.
Curriculum
4 chapters, 10 lessons. Each lesson is a short read, one graded exercise, and a quiz.
- 1What PKI SolvesRead · exercise · quiz
- 2X.509 CertificatesRead · exercise · quiz
- 3ASN.1 / DER EncodingRead · exercise · quiz
Loading reference solution…