PKI & Certificates

Automated mTLS certificate authority management

Service operational

Every node and client device authenticates via hardware-backed mutual TLS certificates.

Root CA
ECDSA P-384
Verified live
Leaf Cert TTL
24 Hours
Nominal range
Auto-Renew
Active
Synchronized
Component Region / Scope Protocol State
zen-core-08a eu-central-1 (Frankfurt) WireGuard / UDP Active
zen-edge-08b us-east-1 (Virginia) mTLS / TCP-443 Active
zen-relay-08c ap-northeast-1 (Tokyo) Anycast BGP Active