Coupang·Software Engineer·Onsite - System Design / Architecture
- Design a full PKI system, including the certificate authority hierarchy, how certificates are issued and signed, revocation mechanisms, key storage, certificate lifecycle and rotation, client-side trust chain validation, and how you'd scale and keep CAs highly available.
“This is a lot to cover in one question and I think I front-loaded too much time on the CA hierarchy and didn't leave enough room for revocation.”