LapseZero Blog
Certificate operations notes for developers and small teams, focused on choosing the right issuance workflow and monitoring it in production.
A new certificate in Certificate Management Service does not automatically replace every listener binding. Find the right CLB and ALB bindings, then automate renewal and deployment across them.
Read article
A wildcard certificate on two Nginx servers, a CDN and object storage usually fails on the site nobody looks at. Before picking a tool, check that it covers every place the certificate lives and tells you when one of them was not updated.
Read article
If you only use EdgeOne, its built-in free certificate renews itself. You need something else once the same certificate also goes to CDN, a load balancer, or your own servers, and scripting it yourself has a trap that resets your HTTPS settings.
Read article
Certificate lifetimes are shrinking from 398 days to 47. You will replace every certificate several times a year, and each replacement means a reload. The real risk is a swap that takes production down with it.
Read article
Alibaba Cloud free certificates expire every 90 days, cannot be renewed, and are not eligible for managed deployment. Every cycle means a new certificate and a manual swap on CDN, OSS, and load balancers. With more than a few domains, both the 20-per-year quota and the manual work break down.
Read article
Let's Encrypt is free. DigiCert can cost hundreds a year. The encryption is identical — so where does the money go? Once you understand what a CA actually is and how brands differ, the pricing stops being a mystery.
Read article
Let's Encrypt certificates are getting shorter-lived. Calendar reminders, manual file copies, and one-off reload commands will not hold up for long. The real automation work starts after issuance: deployment, reloads, and live endpoint confirmation.
Read article
A free DV certificate is sufficient for most HTTPS use cases. Paid SSL certificates are primarily about organization identity validation, trust endorsement, commercial support, procurement compliance, and more sophisticated certificate lifecycle management.
Read article
They're all HTTPS certificates — yet some are free and issued in minutes, while others take days of review and require business registration documents. What's actually different? DV, OV, EV, and IP certificates explained once and for all.
Read article
HTTP-01, DNS-01, DNS delegation — which one do I pick? If you've ever stared at these options while applying for an SSL certificate and had no idea what they mean, this article explains how each one works, the trade-offs, and when to use which.
Read article