https://www.turbolightsolutions.com/tags/webpki/Recent content in Webpki on TurboLight SolutionsHugoen-usThu, 23 Jul 2026 00:00:00 +0000https://www.turbolightsolutions.com/posts/certificate-profiles-need-a-single-source-of-truth/Thu, 23 Jul 2026 00:00:00 +0000https://www.turbolightsolutions.com/posts/certificate-profiles-need-a-single-source-of-truth/<p>A CA&rsquo;s certificate profile exists in at least three places: the policy documents (CP/CPS) that describes it in prose, the CA software configuration that actually produces certificates, and in user-facing product documentation. Those artifacts are maintained separately, usually by different teams, and nothing forces them to agree.</p> <p>Software engineering named this problem decades ago. <strong>&ldquo;Don&rsquo;t Repeat Yourself&rdquo;</strong> is the rule that every piece of knowledge must have a single, authoritative representation within a system. If information is duplicated, it will eventually be changed in one place and not the others, and the copies will silently disagree. But what happens when they <strong>do</strong> disagree?</p>