EKU

Featured PKI

Build a Private PKI for mTLS Before Public Certificates Drop clientAuth

Public CAs are dropping the clientAuth EKU, so mTLS that reused public certificates breaks on renewal. A practical guide to standing up a private PKI for mTLS.

Featured PKI

Client Authentication Certificate Changes: Chrome’s 2026 mTLS Shift

Client authentication certificates are changing as Chrome's 2026 policy ends dual-purpose public TLS certificates. Learn what breaks, why, and how to migrate.