A
- Active Directory Certificate Services (ADCS)Microsoft's built-in CA platform for issuing and managing certificates inside a Windows/Active Directory environment.
- Asymmetric Encryption (Public-Key Cryptography)The public/private key-pair mathematics behind every certificate, signature and TLS handshake.
C
- Certificate Authority (CA)The trusted organization that issues and signs digital certificates — and the root of every trust chain.
- Certificate Chain (Intermediate Certificates)How leaf, intermediate and root certificates link together — and why a missing intermediate breaks TLS.
- Certificate Formats (PEM, DER, P7B, PFX)PEM, DER, P7B and PFX explained — the same certificate in different wrappers, and how to convert between them.
- Certificate Lifecycle Management (CLM)The discipline — and tooling — that keeps hundreds of certificates issued, deployed, renewed and revoked without outages.
- Certificate Template (ADCS)The ADCS blueprint that defines what a certificate contains, who may enroll, and how the key is protected.
- Certificate Revocation List (CRL)The CA-signed list of revoked certificates — and the single file whose expiry can take down an entire PKI.
E
H
K
M
O
P
- PKCS#12 / P12 / PFXThe password-protected container that bundles a certificate and its private key in one file.
- PKCS#7 / P7BThe certificate-bundle format CAs use to deliver a certificate together with its chain — never with a private key.
- PKCS#8 Private Key FormatThe modern, algorithm-neutral format for storing private keys — "BEGIN PRIVATE KEY" in PEM files.
- Post-Quantum Cryptography (PQC)The new NIST-standardized algorithms designed to survive quantum computers — and what they mean for certificates.
S
- S/MIME (Secure/Multipurpose Internet Mail Extensions)Certificate-based email signing and encryption — how it works and what the certificates contain.
- Subject Alternative Name (SAN)The certificate extension that lists every hostname, IP or email address a certificate is valid for.
- Self-Signed CertificateA certificate signed by its own key — useful for labs and roots, dangerous as a habit in production.
T
- TLS HandshakeThe negotiation that starts every HTTPS connection — where certificates are verified and session keys agreed.
- TPM AttestationHow a Trusted Platform Module proves a key was generated in hardware — and how to verify the proof.
- Trust Store (Root Store)The list of root CAs a system trusts — where it lives per platform, and how to manage your own additions.
W
X
Looking for how-to articles instead? See our PKI guides — or jump straight to the tools.