# Certificate Management

> The activity of issuing, deploying, renewing, and revoking the digital certificates that transport encryption depends on.

Record: `lexicon:certificate-management`
Kind: activity
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lexicon-certificate-management

Listed in [Lexicon terms](https://banes-lab.com/api/records/lexicon.md), after [Analytics/Personalization](https://banes-lab.com/records/lexicon/analytics-personalization.md) and before [Client Complexity](https://banes-lab.com/records/lexicon/client-complexity.md).

## Category

- [Security Privacy Compliance](https://banes-lab.com/records/lexicon-category/security-privacy-compliance.md)

## In tension with

- [Encryption in Transit](https://banes-lab.com/records/architecture/encryption-in-transit.md)
- [Encryption in Transit / Certificate Management](https://banes-lab.com/records/tension/certificate-management-encryption-in-transit.md)

## Linked from

- [Security / Privacy / Compliance / Governance](https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md)
- [The resolutions](https://banes-lab.com/ontology/schema/the-resolutions.md)