Mani Sri Kumar

Why a certificate issued by your CA doesn't mean it's deployed in production. The dangerous gap between issuance and deployment in AD CS environments.

A forgotten certificate on a load balancer — imported by a contractor 2 years ago — expires at midnight. Three services go down. Nobody knows why for 6 hours.

Most teams think they manage hundreds of internal certificates. The real number is usually 3-5x higher. That gap is where risk hides.