Certificates & Certificate Authorities

Scenario Overview

Certificates require careful management to maintain confidentiality, integrity, and availability of systems. As a privileged engineer, your task is to troubleshoot certificate-related issues reported by users, ensuring organizational systems remain secure and operational. You will analyze user feedback, identify common certificate problems, and recommend practical solutions.

Scenario 1

Accounting Intern: I'm trying to access a website by typing its IP address in the browser, but I get a certificate warning. Why is this happening and what is the best way to fix it?

Most Likely Cause -- Select -- Certificate is issued to the website's full domain name (FQDN), not the IP address Certificate has expired Certificate has been revoked Certificate is self-signed and untrusted Recommended Action -- Select -- Access the website using its full domain name (FQDN) instead of the IP address Request an updated certificate Ignore the warning and proceed Install the certificate manually

Scenario 2

Marketing Manager: I just finished creating a new website for the companyand have configured the layout, pages, and the certificate on the server. Everything looks correct on the server, but I’m still seeing certificate errors when i try to connect. Could the problem be due to my local system, and what steps should I take to resolve it?

Most Likely Client-Side Issue -- Select -- Client lacks the necessary intermediate or root certificates (chain of trust incomplete) Client certificate expired Client system time incorrect Browser compatibility issue Suggested Actions (Select all that apply)