• IXIA: Understanding TLS 1.3
• NSA: Eliminating Obsolete Transport Layer Security (TLS) Protocol Configurations

• http://www.moserware.com/2009/06/first-few-milliseconds-of-https.html
• http://blog.fourthbit.com/2014/12/23/traffic-analysis-of-an-ssl-slash-tls-session
• https://albertx.mx/https-connections-browsers/
• https://albertx.mx/https-handshake/

openssl s_client -state -connect google.de:443
# danach
GET / HTTP/1.1
Host: www.google.de

• https://wiki.wireshark.org/SSL
• https://jimshaver.net/2015/02/11/decrypting-tls-browser-traffic-with-wireshark-the-easy-way/
• https://lekensteyn.nl/files/wireshark-ssl-decryption.pdf
• https://osqa-ask.wireshark.org/questions/24489/ssl-handshake-certificate-hidden

• https://www.ssllabs.com/ssltest/
• https://securityheaders.io
• https://observatory.mozilla.org
• Certificate Decoder

• Mozilla SSL Configuration Generator
• https://scaron.info/blog/improve-your-nginx-ssl-configuration.html

• https://webmasters.googleblog.com/2017/03/nohacked-year-in-review.html
• Content Security Policy for Single Page Web Apps

.cer oder .crt Dateien speichern X.509 Zertifikate in DER oder BASE-64 (PEM) encoding.

Anzeige eines PEM (Base-64)-kodierten SSL Zertifikats:

openssl x509 -text -noout -in certificate.pem 

Anzeige eines binären DER-kodierten SSL Zertifikats:

openssl x509 -text -noout -in certificate.der -inform DER

Umwandlung eines DER-kodierten Zertifikats in BASE-64 Kodierung

openssl x509 -inform DER -in certificate.cer -out certificate.pem

• https://jamielinux.com/docs/openssl-certificate-authority/index.html
• https://www.phildev.net/ssl/

• https://tools.ietf.org/html/draft-gutmann-scep-10

• https://github.com/hashicorp/vault
• https://news.ycombinator.com/item?id=14321498