LTTS is a self-managed infrastructure lab covering networking, Active Directory, hybrid cloud, and a working private Certificate Authority — issuing, managing and logging certificates the same way a production PKI does. Open to both organisations and individual users.
A private PKI built the way a real one works — a certificate portal for organisations and individuals, a separate admin console for organisation owners, ACME automation, and public certificate transparency logging.
Open to both organisations and individual users — request certificates, complete DNS/HTTP validation, and manage issuance directly.
pki.ltts.uk →A separate admin console for organisation owners/admins with their own managed SubCA — grants, issued certificates and renewals in one place.
app.ltts.uk →A public CT log for certificates issued by the CA, so anything issued is independently discoverable and auditable.
ct.ltts.uk →A separate transparency log scoped to certificates issued under customer-managed SubCAs.
ct-customer.ltts.uk →Organisations can operate their own subordinate CA chained to the LTTS root, without running any CA infrastructure themselves. LTTS provisions and hosts the SubCA — issuance, renewals and ACME automation are then handled by the organisation through the Org Admin Portal.
Certificates issued under a managed SubCA are logged the same way as everything else the CA issues — publicly, through the certificate transparency logs.
Org Admin Portal →LTTS is a personal infrastructure project — a multi-site home and colocated lab built and operated the way a real environment would be, not a one-off demo. It covers Active Directory across sites, networking, hybrid cloud, and a working private PKI that issues, renews and logs certificates end-to-end.
Everything here — the CA itself, the issuance portals, ACME automation and the public CT logs — is designed, built and maintained directly, as a way of running real infrastructure problems to ground rather than just reading about them.
Self-hosted