npx claudepluginhub plurigrid/asi --plugin asiThis skill uses the workspace's default tool permissions.
A Certificate Authority (CA) is the trust anchor in a PKI hierarchy, responsible for issuing, signing, and revoking digital certificates. This skill covers building a two-tier CA hierarchy (Root CA + Intermediate CA) using OpenSSL and the Python cryptography library, including CRL distribution, OCSP responder configuration, and certificate policy management.
Builds two-tier CA hierarchy (Root + Intermediate) using OpenSSL and Python cryptography library for PKI, including CRLs, OCSP responders, and certificate policies.
Builds two-tier PKI CA hierarchy (root + intermediate) using OpenSSL and Python cryptography library, with CRL, OCSP, and certificate policies. For secure certificate management.
Automates SSL/TLS certificate lifecycle using Python and ACME: generate CSRs, parse/validate X.509 certs, monitor expiration, renew via Let's Encrypt, revoke. For security audits and testing.
Share bugs, ideas, or general feedback.
A Certificate Authority (CA) is the trust anchor in a PKI hierarchy, responsible for issuing, signing, and revoking digital certificates. This skill covers building a two-tier CA hierarchy (Root CA + Intermediate CA) using OpenSSL and the Python cryptography library, including CRL distribution, OCSP responder configuration, and certificate policy management.
Root CA (offline, air-gapped)
|
+-- Intermediate CA (online, operational)
|
+-- Server Certificates
+-- Client Certificates
+-- Code Signing Certificates
| Extension | Purpose | Critical |
|---|---|---|
| basicConstraints | CA:TRUE/FALSE, pathLenConstraint | Yes |
| keyUsage | keyCertSign, cRLSign, digitalSignature | Yes |
| extendedKeyUsage | serverAuth, clientAuth, codeSigning | No |
| subjectKeyIdentifier | Hash of public key | No |
| authorityKeyIdentifier | Issuer's key identifier | No |
| crlDistributionPoints | URL to CRL | No |
| authorityInfoAccess | OCSP responder URL | No |