Skill UI

Master the creation of a two-tier Public Key Infrastructure (PKI) Certificate Authority hierarchy—including an offline Root CA and an operational Intermediate CA. This skill guides you through using OpenSSL and Python cryptography to manage X.509 certificate issuance, configure Certificate Revocation Lists (CRLs), set up OCSP responders, and enforce strict certificate policies. Essential for deploying robust trust anchors for TLS, code signing, or client authentication.

This skill covers the technical process of setting up SSL/TLS inspection (decryption) on next-generation firewalls and proxies. It details how to act as a trusted Man-in-the-Middle to intercept, decrypt, and inspect encrypted HTTPS traffic for malicious payloads, data exfiltration, and policy violations. The workflow includes generating internal Certificate Authority (CA) certificates and deploying them across various operating systems (Windows, macOS, Linux) to ensure visibility into the web's encrypted blind spot.