Level 1 · Foundations
PKI Foundations for
Enterprise Engineers
A structured introduction to Public Key Infrastructure — from asymmetric cryptography and X.509 certificate anatomy, through trust hierarchies and certificate lifecycle management, to enterprise PKI deployment patterns.
3 hours
18 lessons
5 modules
Quizzes included
At a Glance
LevelLevel 1 — Foundations
Duration3 hours
Lessons18 lessons across 5 modules
FormatSelf-paced reading + quizzes
AssessmentFinal exam — 80% pass threshold
CertificateDigital certificate of completion
PrerequisitesNone — beginner friendly
Learning Objectives
Explain asymmetric cryptography and how key pairs work
Describe the structure and fields of an X.509 certificate
Identify the components of a PKI trust hierarchy
Explain certificate lifecycle: issuance, renewal, revocation
Describe the role of CRL, OCSP, CDP, and AIA
Distinguish between root CAs, intermediate CAs, and issuing CAs
Explain how certificate chain validation works
Who This Course Is For
IT administrators new to PKI
Security engineers expanding into identity
Windows Server administrators managing certificates
Students preparing for ADCS architecture courses
Help desk staff troubleshooting certificate errors
Managers seeking PKI literacy for oversight roles
How to Use This Course
1
Read each lesson
Work through lessons in order. Each lesson builds on the previous one. Reading time is shown on every lesson card.
2
Complete the knowledge checks
Each module ends with a short quiz. You must score 70% or higher to mark the module complete.
3
Mark lessons complete
Click "Mark as Complete" at the bottom of each lesson. Your progress is saved automatically in your browser.
4
Pass the final assessment
After completing all five modules, take the final assessment. Score 80% or higher to earn your certificate.
Study Tips
- ›Progress is saved in your browser — you can stop and resume at any time.
- ›Use the audio player on each lesson to listen while you read.
- ›Key points are highlighted at the end of every lesson — review them before quizzes.
- ›The final assessment covers all five modules — review key points before attempting it.
- ›You can retake quizzes and the final assessment as many times as needed.
Course Outline
1
Module 1: PKI Fundamentals6 lessons1.11.1 What Is PKI?20 minReading
1.21.2 Public and Private Keys18 minReading
1.31.3 Hash Functions and Digital Signatures20 minReading
1.41.4 The PKI Trust Hierarchy25 minReading
1.51.5 Certificate Lifecycle — Issuance, Renewal, and Revocation25 minReading
1.61.6 X.509 Certificate Structure and Fields25 minReading
2
Module 2: X.509 Certificates4 lessons2.1Certificate Structure and Fields20 minReading
2.2Subject, Issuer, and Serial Number10 minReading
2.3Key Usage and Extended Key Usage15 minReading
2.4Subject Alternative Names (SANs)12 minReading
3
Module 3: Trust Hierarchies3 lessons3.1Root CAs, Intermediate CAs, and Issuing CAs18 minReading
3.2Certificate Chain Validation15 minReading
3.3Trust Stores and Root Program Membership12 minReading
4
Module 4: Certificate Lifecycle4 lessons4.1Enrollment, Issuance, and Renewal15 minReading
4.2Revocation: CRL and OCSP18 minReading
4.3CDP and AIA Extensions12 minReading
4.4Certificate Expiration and Lifecycle Management10 minReading
5
Module 5: PKI in the Enterprise3 lessons5.1Enterprise PKI vs. Public CA12 minReading
5.2Common Certificate Use Cases15 minReading
5.3PKI Foundations — Final Assessment20 minQuiz
Prerequisites
No prerequisites required
This is a beginner-level course. No prior PKI or cryptography knowledge is assumed. Basic familiarity with Windows Server and networking concepts is helpful but not required. This course is the recommended starting point for all InsecurePlanet training paths.
Ready to start?
Lesson 1.1 introduces public key infrastructure — what it is, why it exists, and how it underpins modern enterprise security. It takes about 20 minutes to read.