


Regulations and requirements, like PCI-DSS, demand stringent security and management of cryptographic keys and auditors are increasingly reviewing the management controls and processes in use.Certificates that are not renewed and replaced before they expire can cause serious downtime and outages. This is not a trivial matter because certificates from a variety of sources are deployed in a variety of locations by different individuals and teams - it's simply not possible to rely on a list from a single certificate authority. The starting point in any certificate and private key management strategy is to create a comprehensive inventory of all certificates, their locations and responsible parties. ( June 2017) ( Learn how and when to remove this template message) Unsourced material may be challenged and removed. Please help improve this section by adding citations to reliable sources.
