# Explanation

* [Do I need to implement the TLS library?](explanation/do-i-need-tls.md)
  * [When to implement the TLS library](explanation/do-i-need-tls.md#when-to-implement-the-tls-library)
  * [Next steps](explanation/do-i-need-tls.md#next-steps)
* [Common Name and SANs Attributes](explanation/common-name-and-sans-attributes.md)
  * [Internal Communication](explanation/common-name-and-sans-attributes.md#internal-communication)
  * [External Communication](explanation/common-name-and-sans-attributes.md#external-communication)
  * [Additional Notes](explanation/common-name-and-sans-attributes.md#additional-notes)
* [Certificate Renewal with the TLS Certificates Library v4](explanation/certificate-renewal.md)
* [Differences between TLS Certificates Library v3 and v4](explanation/differences-v3-v4.md)
  * [v3](explanation/differences-v3-v4.md#v3)
  * [v4](explanation/differences-v3-v4.md#v4)
  * [Upgrading a deployed charm from v3 to v4](explanation/differences-v3-v4.md#upgrading-a-deployed-charm-from-v3-to-v4)
* [Security Explanation in TLS Certificates Interface](explanation/security-explanation.md)
  * [Private Key management](explanation/security-explanation.md#private-key-management)
  * [Encryption at Rest](explanation/security-explanation.md#encryption-at-rest)
  * [Key Generation Algorithm](explanation/security-explanation.md#key-generation-algorithm)
  * [Key rotation](explanation/security-explanation.md#key-rotation)