Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

3
votes
0answers
42 views

Same version of Chrome, two different behavior regarding sha1 deprecation

i'm well aware of the changes made to Chrome 42 and sha1 signed certificates. Here a short reminder : https://blog.filippo.io/the-unofficial-chrome-sha1-faq/ Our client reported this problem and ...
2
votes
1answer
10 views

Why can't I verify this certificate chain?

I have three certificates in a chain: root.pem intermediate.pem john.pem When I examine them using openssl x509 -in [filename] -text -noout they look fine, root.pem looks like it is self-signed ...
0
votes
0answers
8 views

Java app certificate Issue

I have an app called Tata Docomo Get.I downloaded it from the website on my java phone then Its showing no valid certificate.So I downloaded the app on pc I have two files of this app .jar and ...
0
votes
0answers
11 views

Non-domain log forwarding certificate types

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps. It states that ...
0
votes
1answer
7 views

UTF8 and T61 strings, how do I see what my SSL cert uses?

How do I use the openssl x509 tool to see whether or not my strings are T61 or UTF8 encoded in the cert? Is there a better way?
1
vote
3answers
54 views

SSL Root CA certificate is not recognized, although present in the trust store. Why?

Background: Ubuntu Server 14.10 64-bit on aws.amazon.com/ec2 Cheap PositiveSSL server certificate from COMODO 1 server certificate, 2 intermediate CA certificates and 1 Root CA certificate as ZIP ...
1
vote
2answers
61 views

OpenSSL 0.9.8zc -> 0.9.8zd “broke” my certificates.

I have a self-signed certificate (and CA) created on a Mac using OpenSSL 0.9.8zc. I use the certificate to secure connection to my svn server. With the latest OS X update, OpenSSL was updated to ...
0
votes
0answers
35 views

Windows Wi-Fi with 802.1X + EAP-TTLS + EAP-MSCHAPv2 and client certificates

Sooo ... We have the the mandatory requirement that clients who want to join our wireless LAN to present a valid machine certificate issued by our in-house root CA. This is done to prevent from ...
0
votes
1answer
40 views

Thunderbird Certificate Alert keep popping up

I'm having the issue in the title since months now and is driving me crazy. I keep getting this warning: which translates to Add Security Exception You are going to modify the way ...
1
vote
0answers
19 views

Outlook not updating certificate

Outlook is refusing to send an encrypted email to a recipient whose certificate recently expired. The recipient sent a signed email and I exported the certificate to a ".cer" file then updated their ...
0
votes
0answers
13 views

converting 'cacert.crt' file to pks 12

This is the third or so in a chain of questions to implement ssl certificates. To date the public and private keys are created in the server and are operational, however the browsers do not recognize ...
18
votes
2answers
3k views

Apple's Mail showing “the identity of smtp.gmail.com cannot be verified”

When trying to send email using Gmail in OS X Mail, I get: The identity of "smtp.gmail.com" cannot be verified. The certificate for this server is invalid. You might be connecting to a server ...
0
votes
0answers
46 views

Can AVG 2015's Online Shield be used Chrome (and not give NET::ERR_CERT_DATE_INVALID)?

I am using AVG 2015. If I enable Online Shield, websites that use some of Google's API's (including StackExchange sites) become unavailable and start displaying a NET::ERR_CERT_DATE_INVALID error ...
0
votes
0answers
34 views

OpenSSL Error: Error loading extension section server

The system is Fedora fc21. The objective is to run the examples shown here: “APACHE web server and SSL authentication” The openssl.cnf file has been created and the following command run: openssl ...
1
vote
2answers
17 views

Signed application fails to launch

On a particular Windows Vista PC, all programs signed with a particular certificate fail to launch from explorer, when it verifies the publisher. Only for a second or two, the hour glass is visible, ...
0
votes
0answers
28 views

How to recover Windows 7's encrytion certificate (EFS) from formatted partitions?

I am a home user of Windows 7 ultimate. I am just a local admin for my computer. A standalone system. I am quite noob about computers. I formatted, Windows 7 installed(size 200gb) partition of 1tb ...
0
votes
0answers
32 views

Endless Loop going to self signed https site in Chrome only?

A client I am working for has a site running under SSL using a self signed certificate. When I navigate to the site in Chrome, I get the Err_Cert_Authority_Invalid error. I click Advanced and the ...
0
votes
0answers
10 views

Keytool without root access and leiningen

My traffic goes through proxy which replaces SSL certificate. This causes problems when accessing the maven/leiningen packages through HTTPS. I tried to install the cert in my keytool but that ...
0
votes
0answers
40 views

expired certificates and chrome

Yesterday I've visited a website for the first time, but now Chrome raises an error when I connect to this website. The error is: the connection is not private - ERR_CERT_DATE_INVALID So I tried to ...
1
vote
0answers
41 views

What is causing warning on a certificate's basicConstraints?

I created a self signed server certificate using OpenSSL's req -x509 command and a CONF file. The CONF file is shown below. When I examine the certificate using Microsoft certificate viewer, its ...
0
votes
1answer
96 views

Firefox stopped working with our app after 36.0.1

We have a web application that works on all browsers and firefox before 36.0.1 Have done all the typical things, clearing cache, reinstalling ff, etc. Multiple different machine from different ...
0
votes
1answer
126 views

How to fix chrome certificate issues after removing Fiddler root cert

I don't know very much about certificates, and I don't want to break anything trying to resolve this - so asking for some suggestions. At some point agreed to let Fiddler install an HTTPS certificate ...
0
votes
0answers
16 views

How to get the organization name from a .p12 certificate?

I have a .p12 certificate and I need to find out the organization name of it. How to do that? (I'm using Windows 8.1)
1
vote
2answers
65 views

One SSL Certificate Two Services

I'm having trouble finding a clear answer to this question: In IIS (7.5 or 8) I plan on hosting a site that will have a bunch of secure HTML eforms (default port 443). They will be performing ajax ...
0
votes
2answers
158 views

export installed certificate and private key from a command line remotely in windows using something besides the certmgr.MSC tool

I need to be able to remotely export with the full cert chain and private keys an installed computer certificate on a windows server. The cert is used for IIS, and I want to use it for an apache ...
0
votes
0answers
35 views

OpenVPN: SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Im trying to use vpn to connect two internal networks using virtual machines. I have a virtual machine "gateway" and a virtual machine "client", and I want to connect to my gateway from client using ...
0
votes
0answers
24 views

Unable to authenticate with Client cert in TLS1.0

I have my own application running in Windows machine (server). I am using a browser as a client to do operations. I have multiple users connecting to the server using client certificates as the ...
0
votes
0answers
14 views

Mac OS X Ad-Hoc Network Certificate

I was wondering if on a Mac with the built in "Create Network" feature, to make the client (which will always be an iOS device) accept a .cer file before joining the network. I know some professional ...
0
votes
0answers
99 views

How to use .pfx in certificate store in CURL for Windows 7

I want to use cURL to access a remote server, and I need to identify myself using a private key or the remote server gives a 401 "Unauthorized". I'm on Windows 7 (work machine, not my choice) and my ...
1
vote
1answer
65 views

Imported CA certificate to Firefox Browser not working

I created Certificate Authority (CA) according to Ubuntu help using openssl. After creating a certificate for Apache2 and adding to certificate to it, I want to import it in Firefox. In the end of ...
0
votes
0answers
82 views

nginx http to https proxy with self-signed certificate

I have an nginx proxy to redirect http requests with a specified port to another https url. Here is my configuration so far: server { listen 59848; location / { resolver 8.8.8.8; ...
0
votes
0answers
16 views

How do I import a pfk file into MS Outlook 2010?

What specific steps can I take to successfully import a .pfk file into MS Outlook 2010 and then use it to successfully send encrypted/signed messages/attachments to the email address associated with ...
-1
votes
1answer
22 views

Is there any point signing/encrypting personal email? [closed]

It works fine for corporate mail where everyone in the organization would have a certificate issued to them, but does anyone use certificates to sign their personal mail (let alone use encryption ...
1
vote
1answer
38 views

How can I prevent a certificate from being trusted?

There exist two certificates in /etc/ssl/certs that I'd like to permanently remove. However, just deleting the pem files doesn't do it - those are regenerated when ca-certificates is updated. How ...
0
votes
1answer
46 views

keytool commands to replace existing SSL certificate?

I've a linux centos server running glassfish 3.1.2 app server. The default certs coming from GlassFish install for ports 4848 and 8181 are 1024 bits. I need to replace these with 2048 bits versions. ...
0
votes
0answers
443 views

Some clients get 'Certificate-based authentication failed' error on a cert, w/ all browsers

I'm hosting multiple SSL sites on multiple Ubuntu / LAMP servers. The servers have quite standard setup, eg. no client certificate configuration is in place. The vast majority of users are fine, but ...
0
votes
0answers
13 views

Mounting with davfs2: Certificate verification error: signed using insecure algorithm

If I try to mount a webdav share with davfs2, I get this error: LANG=C mount /home/user/owncloud /sbin/mount.davfs: Mounting failed. Certificate verification error: signed using insecure algorithm ...
0
votes
0answers
140 views

Self signed certificate, https and vpn

I have access to an SBS 2011 server that has a self signed certificate. In my computer (win 7 pro) that is outside the domain, I have imported the root certificate and the leaf certificate into ...
0
votes
1answer
28 views

SSL certificate for Web App + website

I have a WordPress + WooCommerce online store which is hosted on a managed hosting. I just bought non-wildcard SSL Certificate for that online store. I am also developing a CherryPy Python Web App ...
0
votes
1answer
36 views

Windows certificate viewing, why 2048-bit certificate shown as 270 byte?

I'm a bit confused by how Windows certificate viewer displays public key hexdump. Windows shows 270 bytes for a 2048-bit public key(which is 256 byte). While Firefox 31 display right 256 bytes. And ...
0
votes
1answer
44 views

Google chrome doesn't display personal certificate

I'm testing some webservices that use certificates for authentication. So basically I've added to certificate store some custom root CA and some client certificate to personal folder. When I open ...
0
votes
0answers
45 views

Validate a PADES document with expired certificate

I have a problem. I have a PDF that has been signed with a certificate, and then it has been put a timestamp with a TSA. I want to validate this document, but now, the certificate which it was used ...
0
votes
0answers
55 views

Pure-FTPD certificate not being used

I am using Pure-FTPD from the epel repository on CentOS 6. Now I have configured to enable TLS which works fine however for some reason it wont make use of the certificate file I have placed in ...
0
votes
0answers
24 views

Windows Certificate Authority - root offline, intermediate online?

Simple enough question... Can I have the Windows Root CA offline and a non-domain member, but the intermediate CA online and a domain member (thereby getting the advantages of an AD integrated CA?) ...
1
vote
1answer
21 views

How to configure shrewsoft vpn in windows with multilevel certificates

I have a linux box already connected with racoon to the same VPN using the same certificates no problem. From windows, it says "unable to verify remote peer certificate" and I believe it is because I ...
0
votes
0answers
19 views

Cisco VPN client imports certificates just fine, won't show them in configuration management

I've been fighting with a vpn client for a while trying to connect to a network. I've managed to download a .cer file from the host, which is supposed to be used for certficate authentication. It ...
0
votes
0answers
70 views

What Registry entry used to disable Java's “Signed code certification revocation check”?

We have successfully disabled Java updates for all users of a computer via a registry solution found on this site. How can we now do the same thing for enabling the "Do not check (not recommended)" ...
1
vote
1answer
136 views

certificate errors via chrome and IE

When trying to access gmail.com via chrome I get this error message: Net::ERR_CERT_INVALID The same error message appears with ninite.com or twitter.com - drive.google.com, youtube.com or ...
0
votes
1answer
46 views

Firefox/Thunderbird export public key

I have imported a .p12 file inside Firefox/Thunderbird, now I would like to export its public key (without using openssl or whatever command line code), so I can distribute it and people can ...
0
votes
0answers
22 views

Java Applet cannot find certificates in Mozilla but instead fetchs Windows/ie cert storage

We have migrated to Free Software on office. We often have to use some government web services that include applets to sign documents with our own personal certificates. Problem is, sometimes some of ...