Systems and methods for providing a self-maintaining PKI infrastructure among loosely connected entities

1. A method for updating a digital certificate, comprising:

determining, by a hardware processor, that a current public key and a current private key associated with a managed node will expire within a threshold period of time, wherein a current managed node certificate comprises the current public key and is associated with the current private key;

creating a request for a new certificate for the managed node, wherein the request is created prior to expiration of the current managed node certificate;

signing the request for the new certificate using a new private key; sending the request for the new certificate to a core server;

receiving the new certificate from the core server; and

associating the new certificate with the new private key;

wherein the new certificate is requested and received without the managed node providing the core server with external authentication.

2. The method of claim 1 , wherein creating the request for the new certificate comprises creating a new public key and the new private key for the managed node.

3. The method of claim 1 , wherein the request for the new certificate comprises a new public key and information that identifies the managed node.

4. The method of claim 1 , further comprising:

receiving a new root certificate from the core server, wherein the new root certificate is received prior to expiration of a current root certificate; and

authenticating the new root certificate using the current root certificate.

5. The method of claim 4 , wherein the new root certificate is received and authenticated without external authentication with a certificate authority.

6. The method of claim 1 , wherein communication between the managed node and the core server occurs via a direct connection between the managed node and the core server.

7. The method of claim 1 , wherein communication between the managed node and the core server occurs via an intermediary.

8. The method of claim 1 , wherein the method is performed automatically without human intervention.

9. A computing device that is configured for updating a digital certificate, comprising:

a processor;

memory in electronic communication with the processor; and

instructions stored in the memory, the instructions being executable by the processor to:

determine that a current public key and a current private key associated with a managed node will expire within a threshold period of time, wherein a current managed node certificate comprises the current public key and is associated with the current private key;

create a request for a new certificate for the managed node, wherein the request is created prior to expiration of the current managed node certificate;

sign the request for the new certificate using a new private key;

send the request for the new certificate to a core server;

receive the new certificate from the core server; and

associate the new certificate with the new private key;

wherein the new certificate is requested and received without the managed node providing the core server with external authentication.

10. The computing device of claim 9 , wherein the instructions are also executable to:

receive a new root certificate from the core server, wherein the new root certificate is received prior to expiration of a current root certificate; and

authenticate the new root certificate using the current root certificate.

11. The computing device of claim 10 , wherein the new root certificate is received and authenticated without external authentication with a certificate authority.

12. The computing device of claim 9 , wherein communication between the managed node and the core server occurs via a direct connection or an intermediary.

13. A non-transitory tangible computer-readable medium for updating a digital certificate, comprising executable instructions which when executed by a processor cause the processor to:

determine that a current public key and a current private key associated with a managed node will expire within a threshold period of time, wherein a current managed node certificate comprises the current public key and is associated with the current private key;

create a request for a new certificate for the managed node, wherein the request is created prior to expiration of the current managed node certificate;

sign the request for the new certificate using a new private key;

send the request for the new certificate to a core server; and

receive the new certificate from the core server;

wherein the new certificate is requested and received without the managed node providing the core server with external authentication.

14. The computer-readable medium of claim 13 , wherein the instructions are also executable for:

receiving a new root certificate from the core server, wherein the new root certificate is received prior to expiration of a current root certificate; and

authenticate the new root certificate using the current root certificate.

15. The computer-readable medium of claim 14 , wherein the new root certificate is received and authenticated without external authentication with a certificate authority.

16. The computer-readable medium of claim 13 , wherein communication between the managed node and the core server occurs via a direct connection or an intermediary.