Issue a Certificate from the Right CA

Model domain identity, CA chains, expiry, renewal windows, and sensitive key output.

A advanced Linux challenge worth 20 points. Solve it hands-on in a real Linux environment in your browser - no local setup, no fake shells.

The Challenge

Issue checkout-edge for checkout.apps.internal from the managed platform-root-2026 CA. Configure a 720-hour renewal window, preserve the sensitive key output, apply, inspect the certificate inventory, and run check.