InsecurePlanet PKI Security
Training CenterResources
Training Resources

PKI Reference Library

Curated references for PKI engineers, architects, and administrators — Microsoft documentation, security research, RFCs, NIST standards, tools, and InsecurePlanet content.

Microsoft Documentation

Official Microsoft documentation for ADCS, certificate templates, and PKI infrastructure.

Active Directory Certificate Services OverviewDocs
Certification Authority GuidanceDocs
Certificate TemplatesDocs
certutil ReferenceDocs
PKI Design Guide (Microsoft)Docs

Security References

Security research, attack path documentation, and hardening guidance for ADCS environments.

Certified Pre-Owned — SpecterOps (Certipy/ESC research)Research
CISA: Securing Active Directory Certificate ServicesGuidance
NSA: Hardening Active Directory Certificate ServicesGuidance
MITRE ATT&CK: Steal or Forge Authentication CertificatesReference

Standards and RFCs

Core standards for X.509 certificates, PKI, CRL, OCSP, and related protocols.

RFC 5280 — Internet X.509 PKI Certificate and CRL ProfileRFC
RFC 6960 — Online Certificate Status Protocol (OCSP)RFC
RFC 3161 — Internet X.509 PKI Time-Stamp ProtocolRFC
NIST SP 800-57 — Recommendation for Key ManagementNIST
NIST SP 800-32 — Introduction to PKI for the Federal GovernmentNIST

Tools and Utilities

Tools used in the training labs and for PKI operational work.

certutil — Windows built-in PKI utilityTool
PKIView — Enterprise PKI MMC snap-inTool
Certipy — ADCS security assessment toolTool
PSPKIAudit — PowerShell PKI audit moduleTool
OpenSSL — Cross-platform certificate utilityTool

InsecurePlanet PKI Toolbox

Free worksheets, checklists, and guides from the InsecurePlanet PKI Toolbox.

PKIView Troubleshooting GuideInsecurePlanet
Auto-Enrollment Security Review WorksheetInsecurePlanet
CA Compromise Interactive DemoInsecurePlanet
Full PKI Toolbox — 50+ tools and resourcesInsecurePlanet

InsecurePlanet Articles

In-depth articles on ADCS security, PKI architecture, and certificate management.

ADCS Attack Paths: ESC1 through ESC8InsecurePlanet
ESC4 / CVE-2022-26923: Certificate Template Privilege EscalationInsecurePlanet
PKI & Certificates ReferenceInsecurePlanet
Post-Quantum Cryptography and PKIInsecurePlanet

Ready to Apply This Knowledge?

Start the PKI Foundations course or jump straight into the hands-on labs.

Course Catalog Training Labs