The cybersecurity crowd loves to pitch certificate automation as some sleek, forward-thinking upgrade for the modern web. But let’s be real: we didn’t get here because everyone suddenly became proactive. We got here because the industry kept messing up. Automation isn’t a reward for good behavior; it’s an intervention. For years,we’ve seen a spectacular parade […]
Certificate automation is a solved problem. The tools exist, the CAs support them, and most IT teams understand the risk of going manual. Yet 38% of organizations still manage certificates with spreadsheets, and 70% admit they don’t have the staff to keep up. The gap between what’s available and what’s adopted isn’t a technical story. […]
The SSL industry already has one countdown on the wall. By 2029, the old annual renewal rhythm will be gone. Certificates will expire faster, automation will be mandatory, and businesses still running on calendar reminders will fall behind. That challenge, at least, is legible. The harder problem is not about time. It’s about visibility. Post-quantum […]
On May 8, 2026, Let’s Encrypt temporarily stopped issuing certificates after detecting an internal error in its certificate system. Existing certificates remained valid, but new requests and automated renewals were affected during the interruption. Service was later restored after Let’s Encrypt changed the affected issuance path. What Happened Inside Let’s Encrypt? The interruption traced back […]
If SSL certificates were only about encryption, the paid market should have collapsed by now. Basic HTTPS is everywhere. Free DV certificates protect ordinary websites. Hosting panels turn SSL into a checkbox. Browsers no longer treat encrypted pages as special; they flag unencrypted ones as broken. Yet paid SSL still exists. The market thrives because […]
Picking a code signing certificate provider is harder than it should be. Four publicly-trusted Certificate Authorities cover almost every legitimate buying scenario: Sectigo, Comodo, DigiCert, and GoGetSSL. At first glance they all look similar. They issue the same X.509 certificates, follow the same CA/Browser Forum rules, and ship hardware tokens that meet the same FIPS […]
SSL certificate validity is changing, and the shift has already started. The industry is moving away from long-lived certificates and toward much shorter lifetimes, forcing a different approach to how you manage SSL/TLS. This is not a minor update. Reduced SSL validity increases the frequency at which you issue certificates, validate domains, and handle renewals. […]
SSL certificates are often treated as a set-and-forget layer of infrastructure. Once installed, browsers stay quiet, and encryption fades into the background. From a support perspective, reality looks very different. Behind routine installations sits a steady flow of tickets where certificates are technically valid, correctly deployed, and still failing in ways that aren’t immediately visible. […]
You’ve just received your SSL certificate files and notice two extensions: .crt and .cer. Your server expects one, your certificate authority (CA) sent the other. Before you start troubleshooting, here’s the short answer: both file extensions hold the same X.509 certificate data, and the difference is mostly a naming convention. But “mostly” is doing some […]
At SSL Dragon, we work with SSL certificates across a wide range of environments, from simple single-domain sites to modern stacks where TLS is deliberately spread across multiple layers. Over time, that range makes one thing clear: TLS itself is stable, but the way it’s understood hasn’t kept pace with its evolution. Today, HTTPS commonly […]
This tutorial covers two ways to generate a CSR (Certificate Signing Request) on a Cisco ASA appliance: through the ASDM graphical interface and through the CLI. Both methods create an RSA key pair and a CSR that you submit to your Certificate Authority (CA) during the SSL order process.
This tutorial shows you how to generate a CSR (Certificate Signing Request) on Citrix Access Gateway 5.0 using the Access Gateway Management Console. Important: Citrix Access Gateway 5.0 is end of life. Citrix retired the standalone Access Gateway line years ago, and remote-access workloads now run on NetScaler Gateway (previously branded Citrix Gateway, and part […]
This guide shows you how to generate a CSR (Certificate Signing Request) on a Radware Alteon application delivery controller, using either the Web Based Management (WBM) console or the command-line interface (CLI). When Alteon builds the request, it also creates the matching private key inside the device’s certificate repository. That key never leaves the appliance […]
This tutorial shows you how to generate a CSR for FileZilla Server. Start with the part that saves the most time: FileZilla Server cannot create a Certificate Signing Request. There is no button for it anywhere in the administration interface, in any version. The server can generate a self-signed certificate, fetch one automatically from Let’s […]
This tutorial shows you how to generate a CSR on Titan SFTP Server. How you reach the certificate tools depends on which administration console your installation uses, and this is the detail worth getting right before you start. Recent releases (the NextGen line) manage certificates from a browser-based Administrator Console that you open at an […]
This tutorial explains how to generate a CSR (Certificate Signing Request) on CompleteFTP. A CSR is a block of encoded text that you submit to a Certificate Authority (CA) when applying for an SSL/TLS certificate. It contains your public key and identifying information about your server and organization.
This tutorial shows you how to generate a CSR on Cerberus FTP Server. Cerberus moved CSR generation out of the old Windows dialog and into the browser-based Server Manager in version 13.1 (September 2023), and removed the native menu item in the same release. Version numbering then switched to a calendar scheme, so every build […]
This guide shows you how to generate a CSR (Certificate Signing Request) on Zimbra Collaboration Suite (ZCS). You have two options: the Zimbra Administration Console (the web UI) or the command line with zmcertmgr. Both create the same pair of files on the server: a CSR you submit to your Certificate Authority and a matching […]
This tutorial shows you how to generate a CSR (Certificate Signing Request) on SurgeMail, the Netwin mail server that runs SMTP, IMAP, POP3, and webmail from a single daemon. You generate the CSR inside the SurgeMail Web Admin rather than at the shell. In one step, SurgeMail creates the request, the matching private key, and […]
This guide shows you how to generate a CSR (Certificate Signing Request) on qmail using the OpenSSL command line. Qmail (and its actively maintained fork, notqmail) does not include a built-in CSR tool. You use OpenSSL to create two files at once: a private key that stays on the server, and the CSR you submit […]
