Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

1
vote
1answer
11 views

How can I read the Windows Product Key from a partially rubbed-off sticker?

I know all about Magic Jellybean Keyfinder and other solutions to find the key from within Windows. These are not what I'm after because the key they found is the OEM key, and I am trying to reinstall ...
0
votes
0answers
5 views

Mac OS X “Verify Certificate” every time connecting to secure wireless

Every time connecting to the secure wireless, Macs are getting a prompt to verify the certificate: Verify Certificate Authenticating to network "Network-Name" Before authenticating to ...
0
votes
0answers
13 views

How can I automatically import a certificate to a Windows GPO?

I'm looking for a way to import a root certificate into a specific active directory group policy object. I've tried certutil -dspublish but that would only publish it to a global AD store. How can I ...
0
votes
0answers
12 views

Self-signed root CA certificate on OSX does not authenticate own-signed certificates

I have a Vault server configured with TLS running on a vault.dev machine. The certificate for vault.dev is signed by a self-signed root CA. I have two client machines: Debian and OSX, both separate ...
2
votes
1answer
14 views

If I remove a CA from Firefox, will it be back after an update?

If I remove a Certificate Authority from the Firefox GUI, then is it permanently removed? Or all will be back after the next Firefox update?
0
votes
0answers
13 views

win server 2012 r2 - change existing certificats private key to NOT exportable

I set up my own PKI. everything is working fine until the point that I realize that my subCAs certificate has an exportable private key. My rootCA is a debian machine and the subCA is a win server ...
0
votes
0answers
17 views

Generating certificate on/from AWS [migrated]

I have a self-signed certificate somewhere on AWS ElasticBeanstalk. There are production and QA environments defined as shown in the image below. We are using Fastly which is our CDN provider and I ...
0
votes
1answer
43 views

Why do I need a certificate to create my own other self-signed certificate

In the last few days I was trying to understand the story of certificates, and I understood the main principle of them, but I didn't understand that step when we create a CA cert to sign my own server ...
1
vote
1answer
36 views

Importing .PEM certificates on Windows 7 on the command line

I need to import a PEM certificate on a massive number of freshly installed Windows 7 Enterprise machines. Normally, I would do it through MMC → Certificates (Local Computer) snap-in → Trusted Root ...
0
votes
0answers
18 views

no certificate found in safari

I have a problem where our certificate is not visible (I'll get to more details after explaining the problem), in Safari. I get it working on Chrome and Firefox. The OS I am using for testing is OS X ...
1
vote
1answer
7 views

Remove Key Password with OpenSSL

This is something I've wanted to do for a while now. There wasn't a question already for it so I'm putting one in. How do you remove a password from a .key file using OpenSSL.
0
votes
0answers
15 views

Openconnect certificate validation with NetworkManager

On my Cinnamon (linux) desktop, I have setup an openconnect VPN connection in NetworkManager. When connecting, I don't seem to have any issues: the connection is established and network traffic is ...
0
votes
1answer
210 views

Firefox 43.0.1 says google.com uses invalid certificate and does not allow to add exceptions

I assume Firefox developers did something wrong with last release (43.0.1) since I get this error after installing updates: This Connection is Untrusted You have asked Firefox to connect ...
0
votes
0answers
15 views

IE Certificate Revocation

One of my users has been getting a certificate error after logging into Outlook.com through Internet Explorer. I've already disabled the two revocation checks in internet options but it's still ...
0
votes
0answers
7 views

Is there anyway to parse an OBJECT type from a certificate with opeanssl asn1parse?

let's see this sample code: $ openssl asn1parse -in mysterious_file.pem ... 78:d=5 hl=2 l= 3 prim: OBJECT :organizationalUnitName 83:d=5 hl=2 l= 8 prim: PRINTABLESTRING ...
3
votes
2answers
20 views

Where is the revoke.asc file once I've created it from the command line?

Where is the revoke.asc file once I've created it from the command line? I've looked in the root of my home directory: C:\Users\Me and cannot find it. I've searched *.asc - no luck. If I run gpg ...
-1
votes
0answers
45 views

Unattended Driver Install Windows Security

Unattended driver installs are nothing new, but I'm running into an issue that others don't seem to be having. At the end of the install, I have a Windows Security prompt which appears: Would you ...
0
votes
1answer
66 views

Where is the “Advanced” button relating to this Firefox security error?

https://blog.mozilla.org/security/2016/01/06/man-in-the-middle-interfering-with-increased-security/ How to tell if you’re affected If you can access this article in Firefox, you’re fine. If ...
3
votes
1answer
41 views

How to export certificate in pfx format?

I am running Windows 10. I have install a certificate to my computer. I see that in my MMC. But when I try to export a pfx file for that certificate. That option is disable. I was able to ...
0
votes
0answers
52 views

“-2146893807 NTE_NOT_FOUND” when repair certificate store

I try to repair my certificate store in Windows 10 by doing C:\WINDOWS\system32>certutil -store -user my ‎330000019dba8d5dddb98062a900000000019d my "Personal" CertUtil: -store command FAILED: ...
0
votes
1answer
17 views

Adding keys to Secure Boot database on an HP Pavilion 14-ab057ca

I am trying to add a custom key in Secure Boot database. Don't tell me "Activate Setup Mode", " Change the PK", "Add a KEK" or anything, I know how to do it. The problem is: I can't switch my machine ...
0
votes
0answers
22 views

Generating machine TLS certificates in software

I am working with a distributed software solution where machines may communicate over the internet. Automatically for sensitive data this means you have to encrypt the traffic. Using a public tool ...
0
votes
0answers
29 views

Could not retrieve 'System.Collections.Hashtable.AutomationCertificateName' certificate asset on azure

I import "Connect-Azure" workflow from Import runbooks from the Gallery which is below. workflow Connect-Azure { Param ( [Parameter(Mandatory=$true)] [String] $AzureConnectionName ...
-1
votes
1answer
48 views

What is the correct terminology for an “official” SSL certificate?

What is the correct terminology or wording for an SSL certificate that you have bought from a certified provider (e.g. GoDaddy or something) and has been signed by a root certificate authority? For ...
1
vote
1answer
23 views

Which reason in GPG for revoking key should I choose?

I want to generate revocation certificate for my GPG key, print it out and keep securely in closed envelope up till I'll loose access to this key (accidental removal/pen drive loss/theft). Which ...
0
votes
1answer
27 views

Problem in creating multi level certificate chain using OpenSSL

I am creating three level of certificates,viz, Root->A->B . A is signed by root and B is signed by A . The certificates are generated using OpenSSL command line utility for windows. The certificates ...
0
votes
1answer
23 views

Monitoring traffic of phone through charles proxy?

I am using Charles proxy to monitor https traffic for which we have to import a certificate in the phone. Is there any way that my phone (Motorola Moto E2 with CyanogenMod 12.1) treats the certificate ...
0
votes
2answers
63 views

OSX 10.6.8 - SSL failure in Chrome due to cert authority missing

I'm at my parents house for the holiday period, and they've just revealed to me they've been getting this error every time they visit their banks website in Chrome (ERR_CERT_AUTHORITY_INVALID) They ...
0
votes
0answers
31 views

How to Create X.509 certificate compatible to AWS IoT?

I am trying to create a self signed X.509 certificate to use in AWS IoT. If I am correct, it is not different from a normal OpenSSL certificate, but the PEM file which AWS creates for me is something ...
0
votes
0answers
11 views

Extract a key without a certificate from the NSS db

I got stuck with a private key only in my NSS database, without a corresponding certificate. pk12util, which I normally use when I need to export things from the db, refuses to export the key without ...
0
votes
1answer
25 views

SSL: Can't convert DER to PEM

I'm working with ssl certificates and trying to convert myCA.cer to myCA.pem... $ openssl x509 -in myCA.crt -inform der -outform pem -out myCA.cer.pem unable to load certificate ...
0
votes
0answers
30 views

How to enumerate and list the details of all certificates held by service accounts on local machine

On my Windows 7 Pro system, I can launch certmgr.msc to view the certificates that are under my user account. To view the certificates that are under the computer account, I will have to do something ...
0
votes
1answer
107 views

PHP CURL SSL CA cert (path? access rights?)

Curl through php is constantly complaining about Problem with the SSL CA cert (path? access rights?). This all happend after trying to fix another problem with curl ssl with pem cert chain not ...
0
votes
0answers
18 views

Importing/Deleting certificate in pkcs12 keystore using openssl

I have a pkcs12 keystore (keystore.p12). I am about to update an expired public key in it. So I have to delete the expired key first and import new certificate. But I could not find a proper way to ...
0
votes
0answers
38 views

How can I view the certificate for a connection blocked because of HSTS?

I'm trying to open a website in Firefox 42.0, but I get a warning about an invalid certificate. As in this question, the website has an HSTS (HTTP Strict Transport Security) policy, which means that ...
1
vote
0answers
31 views

Setting up secure email on Thunderbird

I'm trying to set Thunderbird up to send/receive encrypted emails. Here is a screenshot from the screen where you can select certificates: However, it doesn't really explain the difference between ...
2
votes
1answer
512 views

Microsoft Edge: how to bypass certificate error?

I'm trying to access an intranet server under HTTPS, whose certificate has been autogenerated. With other browsers (IE, Firefox, Chrome, etc.) I have the option to ignore this error and to somehow "go ...
1
vote
2answers
43 views

Is it possible to have a certificate signed by 2 authorities?

To explain the situation a bit: I'm building an iOS application that uses SSL pinning. I've created a self-signed certificate authority that issues SSL certificates to my web server, and the CA's ...
0
votes
1answer
33 views

Fetching Private Key Bytes from Windows Certificate Store

I have an PFX Certificate file containing both Client Certificate and Private Key. Then I have imported this pfx file in Windows Personal Certificate Store. Now I need to extract the certificate and ...
0
votes
0answers
18 views

How to login on a personal Windows system with password and certificate?

Ive been wondering if there's a way I can login in my personal machine (Windows 8.1 Pro x64) with an user-input password and a certificate on a common USB thumb drive. My idea is to, when I want to ...
0
votes
0answers
11 views

Airwatch and APNs integration

I have a problem about Airwatch MDM solution and APN's certificate. I use Airwatch MDM to manage my iPAD device (vers. iOS 7.1). I think to have correctly download and then upload .pem certificate on ...
0
votes
1answer
40 views

How to create SSL certificate with multiple DNS entries, signed with my own CA certificate

I need help creating SSL certificate with multiple subjectAltNames, signed with my own selfbrewed CA certificate. What I need: I'm on OSX 10.10.5 I have myCA.cer which I use to sign another SSL ...
0
votes
1answer
50 views

generating certificate keys for OpenVPN in Windows

I was looking into setting up OpenVPN on Windows... I've never done this before and was reading through their documentation and installation tutorials.. As in the newest realease, easy-rsa is not ...
3
votes
1answer
210 views

VeriSign Universal Root Certification Authority missing

I'm attempting to visit https://www.duluthtrading.com/, and I'm receiving an untrusted certificate error on Windows 7. This happens in both IE and Chrome (as both use the Windows certificate store). ...
0
votes
0answers
22 views

HTTPS client “pairing”

I need to restrict usage of a certain site to a limited number of customers. More than that, actually: I would like to allow access from a restricted number of physical devices (Win + Android). This ...
0
votes
0answers
17 views

Iceweasel thinks my client certificate is a server certificate; Chromium thinks it's an “other” certificate

I have a client certificate from StartCom. I recently reinstalled my OS and have to re-add the client certificate to Iceweasel in order to gain access to the control panel. I have a backup of the ...
0
votes
0answers
26 views

How to Disassociate a Certificate and InfoPath Form Name?

A strong named key was created: sn -k MyKeyName.snk An InfoPath form has a C# project. The InfoPath form is opened and the code is accessed by clicking Developer > Code Editor. In VS, the project ...
2
votes
0answers
64 views

Windows 2012 R2 CA - certsrv missing templates field

Has anybody come across an issue where the certificate templates field is not available in the CA menu, http://localhost/certsrv/certrqxt.asp? What it should look like is: Has anybody any idea ...
0
votes
1answer
253 views

Firefox experiences a sec_error_unknown_issuer error for every HTTPS connection

When I attempt to connect to any site that uses an HTTPS connection (e.g. https://www.google.com), I get a 'This Connection is Untrusted' error. I'm using FF 42.0. I followed the instructions in the ...
0
votes
1answer
61 views

openssl : How to create .pem file with private key, associated public certificate, and certificate chain all the way to the root certificate?

For test purposes (i.e. all self signed, not production), how would I use openssl to create a PEM file which contains the private key, the associated public certificate, and the certificate chain all ...