Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

0
votes
0answers
8 views

Add to “My certificates” in Keychain Access? (Mac OS 10.10)

I have a certificate file like this: -----BEGIN CERTIFICATE----- MIIHCDCCBPC .... I can get it to show up under "Certificates" by going to "File->import items" (it is the "Elin" one). I can ...
0
votes
1answer
17 views

How can I get the list of the currently installed certificate authority on my ubuntu?

If I'm correct, the list of CA can be found in /etc/ssl/certs/ca-certificates.crt, but that's only the certificates. My question is how can I get the name of those CA ? I want to know if the CA my ...
0
votes
0answers
16 views

Install Tomcat SSL cert in CUCM signed by CA created through openssl

My problem looks like this. I want to install a Tomcat certificate in CUCM signed by CA created by me which exists in my ubuntu operating system.This is what I thought the steps should be: Generate ...
0
votes
0answers
7 views

Windows Certificates - Publish CRL on ARR as CDP & impacts

In order to have DirectAccess working, I planned to publish our CRL via HTTP (https is possible but it's a IIS configuration side). Now, our CRL is only published via LDAP. So if I planned to add a ...
0
votes
1answer
20 views

Deleted “broken” certificate in OS X, need help to fix it

I experienced the Mavericks security update that broke one or more trusted root CAs. At the time I couldn't find any info on this, and in my infinite wisdom (and looming deadline) I tried deleting the ...
0
votes
0answers
23 views

Configuring Chrome to Ignore or Accept Specific Untrusted Certificates

There are various personal websites and LAN addresses which I access through https. Obviously they're mine so they can be trusted, but since they all deploy a self-signed certificate, Chrome displays ...
-1
votes
0answers
6 views

Creating a valid cert from a signed one?

Okay, so apparently it is not possible to create (valid) self signed certs using a certificate that has been signed by a trusted CA. These two questions on SU make this clear. The thing is, there is ...
1
vote
2answers
33 views

Personal digital certificate for Adobe Acrobat Reader

Often, I receive PDF documents that make use of Adobe Acrobat's functionality for digital signatures. I can sign those PDFs with a self-signed certificate, but then Adobe Acrobat Reader shows a ...
0
votes
0answers
13 views

Exchange 2010 certificate missing after completing “Pending certificate signing request!”

After going through the New certificate procedure, creating and importing the .cer file the new certificate simply vanishes. The same issue applies when I try the same on an Exchange 2013 server. ...
0
votes
1answer
33 views

Configuring Chrome to Ignore SSL Warning on Specific Addresses

I guess there no need to introduce the "Privacy error" page in Chrome that appears whenever one uses SSL to access an uncertified website that has no signed certificate (red "X" on the lock icon). ...
0
votes
1answer
74 views

Google Chrome gives “SHA1 for message authentication” with new GeoTrust certificates

I purchased the GeoTrust QuickSSL Premium certificate from ssls.com and installed it on my web server which is running Linux Apache on CentOS 6.5. Google Chrome on Windows 7 said "The connection ...
0
votes
0answers
21 views

All the System Root certificates are untrusted in Mavericks

I have a OS X 10.9.5 (Mavericks) in which all the certificates in System Root are being shown as un-trusted. List of all available trusted certificates in OS X Due to this I cannot open websites or ...
2
votes
0answers
14 views

Multi-factor authentication to 2012 RDS farm, preferably client certs?

Wonder if anybody can give me a steer on this. We use RDS quite heavily but I would like to enhance the security of it, VPN is an option but I would prefer to avoid if possible. Ideally what I'd ...
2
votes
1answer
26 views

Lets encrypt on a server with multiple websites?

I read the website for let's encrypt, to get it to work you: $ sudo apt-get install lets-encrypt $ lets-encrypt example.com But what if I am on a server hosting example.com, example1.com, ...
1
vote
0answers
21 views

is it possible to use certificates on windows firewall?

Scenario: I have a situation where I work from home. I need to connect to a database server on the internet. The server has whitelist rules for IP addresses on firewall. My IP address changes ...
0
votes
0answers
15 views

heroku behind proxy using ca certificate

Heroku has a clear howto on setting up the client when one's machine is behind a proxy. However, it assumes there is no authentication involved. I also found another howto that used proxychains to ...
0
votes
1answer
18 views

Update certificate in Outlook contacts

How can I update an encryption security in Outlook contacts? I got an email signed with an updated certificate by someone who is already in my contacts with an expired certificate. If I REPLY to ...
-1
votes
2answers
58 views

Website security certificate page not shown

I access an https:// blackberry website for administration with two different pc, on pc1 appear the security certificate webpage where i can choose to close the webpage or continue (not recommended); ...
2
votes
0answers
32 views

SSL issue: The private key did not match the public key provided

I followed the instructions outlined here by amazon. A quick summary: Created a private key openssl genrsa -out my-private-key.pem 2048 Created a CSRopenssl req -sha256 -new -key ...
1
vote
2answers
103 views

Disable Chrome from checking SSL certificates completely

I have to enter a website that has an invalid certificate and I can't because Chrome won't let me (to protect me, how hilarious!). I don't want or need to be protected, so I just want to completely ...
0
votes
0answers
33 views

radius authentication os x server and client certificate

I configured a Mac mini with OS X v10.10 and OS X Server, and an AirPort Extreme. The Wi-Fi network is WPA2 Enterprise, and the server provides RADIUS authentication service. I want the client ...
0
votes
0answers
26 views

How do I manage trust exceptions in Firefox?

Through the course of using Firefox over the years, I've had to manually trust certificates for a number of HTTPS sites for various reasons. I'm trying to find a way to view the list of these sites, ...
3
votes
1answer
88 views

Apache serves an old SSL certificate

I'm hosting a webpage with Apache on a Raspberry Pi (Debian), and can't seem to get the server to issue the current certificate. I generated a self-signed SSL certificate in /home/pi/ssl/ with: ...
0
votes
1answer
98 views

Securing Remote Desktop Connections With SSL Certificate From a Trusted Certificate Authority

Currently I'm using a desktop machine running Windows 7 Ultimate x64. Also have configured it to enable remote connections using MS Remote Desktop Services (RDS); however, since the machine issues its ...
0
votes
0answers
34 views

Java 8 build 45 expired certificate

The Java cert on my old hardware (Dell DS2161-2) IS EXPIRED (last month) and Java is trolling me with "security". I've tried adding it and variations there of to the exception list, but that doesn't ...
0
votes
2answers
68 views

How to solve certificate issue for internal URL in Chrome

When entering the following internal URL (changed a bit for privacy) in Chrome: https://pms/WebClient/CRMclient.aspx I get Chrome's message for a certificate mismatch: This is probably not the ...
0
votes
1answer
50 views

Certification Authority migration - cannot install Web Enrollment role

I used this to migrate a certificate authority my root CA from a Win2003 AD server oldserver to a Win2008R2 member server newserver (with different name). After completing this task, I wanted to ...
0
votes
1answer
250 views

Roundcube, php 5.6 and self-signed certificates

I am currently porting one of my servers to another. That server is running Postfix + Dovecot using a self-signed certificate. My web-frontend used to be roundcube. Now is the problem, that the new ...
0
votes
0answers
74 views

Get OS X Chrome to accept self-signed SSL certificate for localhost

I've been trying to get this working all day, and I have a strong feeling that my issue is specific to Yosemite. I'm running OS X 10.10.3 on a retina Macbook Pro. I took instructions from ...
0
votes
0answers
12 views

X509 certificate that can only be installed on a particular machine

Is it possible to create a certificate that will not install on a machine other than its intended one? (Using some hardware fingerprint embedded into the cert?) Or alternatively, is there a way to ...
4
votes
0answers
114 views

Same version of Chrome, two different behavior regarding sha1 deprecation

i'm well aware of the changes made to Chrome 42 and sha1 signed certificates. Here a short reminder : https://blog.filippo.io/the-unofficial-chrome-sha1-faq/ Our client reported this problem and ...
2
votes
1answer
40 views

Why can't I verify this certificate chain?

I have three certificates in a chain: root.pem intermediate.pem john.pem When I examine them using openssl x509 -in [filename] -text -noout they look fine, root.pem looks like it is self-signed ...
0
votes
0answers
67 views

Java app certificate Issue

I have an app called Tata Docomo Get.I downloaded it from the website on my java phone then Its showing no valid certificate.So I downloaded the app on pc I have two files of this app .jar and ...
0
votes
0answers
26 views

Non-domain log forwarding certificate types

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps. It states that ...
0
votes
1answer
24 views

UTF8 and T61 strings, how do I see what my SSL cert uses?

How do I use the openssl x509 tool to see whether or not my strings are T61 or UTF8 encoded in the cert? Is there a better way?
1
vote
3answers
123 views

SSL Root CA certificate is not recognized, although present in the trust store. Why?

Background: Ubuntu Server 14.10 64-bit on aws.amazon.com/ec2 Cheap PositiveSSL server certificate from COMODO 1 server certificate, 2 intermediate CA certificates and 1 Root CA certificate as ZIP ...
1
vote
3answers
162 views

OpenSSL 0.9.8zc -> 0.9.8zd “broke” my certificates.

I have a self-signed certificate (and CA) created on a Mac using OpenSSL 0.9.8zc. I use the certificate to secure connection to my svn server. With the latest OS X update, OpenSSL was updated to ...
0
votes
1answer
216 views

Windows Wi-Fi with 802.1X + EAP-TTLS + EAP-MSCHAPv2 and client certificates

Sooo ... We have the the mandatory requirement that clients who want to join our wireless LAN to present a valid machine certificate issued by our in-house root CA. This is done to prevent from ...
0
votes
1answer
89 views

Thunderbird Certificate Alert keep popping up

I'm having the issue in the title since months now and is driving me crazy. I keep getting this warning: which translates to Add Security Exception You are going to modify the way ...
1
vote
0answers
62 views

Outlook not updating certificate

Outlook is refusing to send an encrypted email to a recipient whose certificate recently expired. The recipient sent a signed email and I exported the certificate to a ".cer" file then updated their ...
0
votes
0answers
30 views

converting 'cacert.crt' file to pks 12

This is the third or so in a chain of questions to implement ssl certificates. To date the public and private keys are created in the server and are operational, however the browsers do not recognize ...
19
votes
2answers
5k views

Apple's Mail showing “the identity of smtp.gmail.com cannot be verified”

When trying to send email using Gmail in OS X Mail, I get: The identity of "smtp.gmail.com" cannot be verified. The certificate for this server is invalid. You might be connecting to a server ...
0
votes
0answers
115 views

Can AVG 2015's Online Shield be used Chrome (and not give NET::ERR_CERT_DATE_INVALID)?

I am using AVG 2015. If I enable Online Shield, websites that use some of Google's API's (including StackExchange sites) become unavailable and start displaying a NET::ERR_CERT_DATE_INVALID error ...
0
votes
0answers
166 views

OpenSSL Error: Error loading extension section server

The system is Fedora fc21. The objective is to run the examples shown here: “APACHE web server and SSL authentication” The openssl.cnf file has been created and the following command run: openssl ...
1
vote
2answers
19 views

Signed application fails to launch

On a particular Windows Vista PC, all programs signed with a particular certificate fail to launch from explorer, when it verifies the publisher. Only for a second or two, the hour glass is visible, ...
0
votes
0answers
43 views

How to recover Windows 7's encrytion certificate (EFS) from formatted partitions?

I am a home user of Windows 7 ultimate. I am just a local admin for my computer. A standalone system. I am quite noob about computers. I formatted, Windows 7 installed(size 200gb) partition of 1tb ...
0
votes
0answers
35 views

Endless Loop going to self signed https site in Chrome only?

A client I am working for has a site running under SSL using a self signed certificate. When I navigate to the site in Chrome, I get the Err_Cert_Authority_Invalid error. I click Advanced and the ...
0
votes
0answers
25 views

Keytool without root access and leiningen

My traffic goes through proxy which replaces SSL certificate. This causes problems when accessing the maven/leiningen packages through HTTPS. I tried to install the cert in my keytool but that ...
0
votes
0answers
46 views

expired certificates and chrome

Yesterday I've visited a website for the first time, but now Chrome raises an error when I connect to this website. The error is: the connection is not private - ERR_CERT_DATE_INVALID So I tried to ...
2
votes
0answers
140 views

What is causing warning on a certificate's basicConstraints?

I created a self signed server certificate using OpenSSL's req -x509 command and a CONF file. The CONF file is shown below. When I examine the certificate using Microsoft certificate viewer, its ...