Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

2
votes
0answers
35 views

how to use curl to verify if a site's certificate has been revoked?

To check if the certificate for google.com has been revoked, I tried the following command: curl https://www.google.com --cacert GeoTrust_Global_CA.pem --crlfile gtglobal.pem -v , but I got the ...
1
vote
2answers
21 views

s_client not failing on revoked certifcate?

I'm running Firefox with with the EFF's HTTPS Everywhere. I recently visited Lavabit's site to see if its accepting donations: The revocation is expected considering the history.... However, I'm ...
1
vote
0answers
7 views

Microsoft Digital Signature Expiration in Active Directory

We have a large number of users on our network that need to sign forms digitally from time to time with Microsoft digital signatures that are set up to expire each year. Some of our users however are ...
0
votes
0answers
10 views

export certificate with private key

I would like to backup my startcom certificate on this machine but I need to also export the private key with it, the problem is in the certificate manager the option also export private key is greyed ...
0
votes
0answers
11 views

Exchange 2010 Certificate Renewal

I am still learning how to configure Exchange 2010, so I hope that you can help me on some topics. The certificate for mail.xxxxxx.com has expired. The previous IT guy had OWA set up on the server, ...
0
votes
2answers
69 views

heartbleed are CA private keys compromised?

have any CA private keys such as those used by godaddy to issue private/public key pairs compromised as a result of heartbleed?
4
votes
2answers
339 views

How do I distinguish between these two certificate situations?

Situation 1 (safe): Website was vulnerable to heartbleed and using a certificate not valid before 2012-10-21 Website upgraded to an unvulnerable version of OpenSSL Website re-keyed and got a their ...
3
votes
1answer
2k views

Does Heartbleed Bug in OpenSSL affect ALL SSL certs

Does the Heartbleed Bug in OpenSSL affect ALL SSL certs, regardless of where I purchased or if I self-cert? For example, if I bought an SSL certificate from GoDaddy and set this up on my server ...
2
votes
2answers
347 views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access ...
0
votes
0answers
82 views

Blocking a trusted certificate in Google Chrome

Is it possible to somehow block a certain certificate that is currently trusted by my browser? The reason is the recently discovered Heartbleed-attack which I also found out to affect my netbanking ...
0
votes
1answer
18 views

OpenSSL CA keyUsage extension

I want to set up a chain of certificates, with a self signed 'root' CA at the top that signs sub CAs, which can then sign client and server certificates. When setting up openssl.cnf, I noticed a ...
0
votes
0answers
11 views

Github Access SSL Error

On Max OSX 10.9, I am unable to authenticate any HTTPS site without a certificate warning. Many disucssions have mentioned the duplication of a DigiCert in login and system settings. I have no ...
0
votes
1answer
27 views

Verifying Certificate using Mac Terminal

In Mac Terminal, we can use the command security to do many things related to certificates. I'm trying to know how to verify a certificate using this command. I wrote security verify-cert [.pem ...
1
vote
1answer
14 views

Does Apple Server 3.0 MDM really require an APNs certificate?

A while back I set up an MDM server on our Apple Server running 10.9.2. The server is running Server 3.0.3 and I have several test Macs and iOS being managed by the server. The only certificate I ...
0
votes
0answers
33 views

Invalid SSL certificates after system restore on Windows 7

I just recovered my Windows 7 system after a crash using startup repair. It seems Windows has restored to a previous point. The problem was HDD related after some software uninstaller started creating ...
1
vote
1answer
23 views

Is there a program to check the list of root CAs in Firefox?

Motivated by this and this question, I'd like to ask if there is a way to check if additional certificates have been maliciously added to the list of root CAs of Firefox. Possible ways could be: an ...
1
vote
1answer
61 views

Is it safe to add an untrusted certificate to Trusted Root Certification Authorities?

Before I access the internet at work I have to sign-on to their system. The sign-on page is ipass.swu.ac.th. Unfortunately the security certificate they use appears as not trusted (in Chrome). I have ...
0
votes
0answers
22 views

SSL failure on Auzre web farm with shared configuration and centralized certificates

[Sorry if this question is a bit long, there's lot of extra info in case it is relavent] Overview I'm having a problem with SSL on a 4 VM's load balanced farm in Azure. If the HTTPS request goes to ...
0
votes
0answers
6 views

How to i store S/MIME certificates in openldap?

I have an openldap running with default schemas (it's a test environment, inside virtualbox on a turnkey linux openldap appliance) Basically it's openldap 2.4.31 with a front end install web gui. ...
0
votes
1answer
33 views

How to update CRL automatically?

I have the following issue: I have a self-signed CA (certificate authority) mainly for persoanl use (mail encryption and signing, ...). I created several ceertificates and the CRLs (which are empty ...
0
votes
0answers
65 views

pip and SSL certificate errors

I am trying to install a library via pip. I have a problem with SSL certificate, even when using the --cert. Trying this on windows (pip version 1.5.4,python version 2.7.6): pip --cert ...
1
vote
0answers
10 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
0
votes
0answers
13 views

My self signed certificates do not have organisation

I use the command openssl s_client -connect myServer.myCompany.be:2500 -showcerts > myServer.pem # it also works if you remove all but the base64 encoded key # and its surrounding comments If I ...
7
votes
1answer
75 views

What Trusted Root Certification Authorities should I trust?

After two recent Slashdot articles (#1 #2) about questionable Root Certificates installed on machines, I decided to take a closer look at what I have installed on my machines. (I use current versions ...
1
vote
0answers
69 views

Certificate Patrol for Chrome?

Is there a chrome-version of the firefox add-on certificate patrol? Notifying me about a certificate change without actually loading the page would be optimal, but it sure would be useful even if the ...
0
votes
0answers
14 views

How to generate a P12 file, based on the key and PEM certificate?

I would like to generate a P12 file from the key and the PEM version of an iPhone developer certificate. Is there a GUI based tool available for Windows XP?
1
vote
1answer
144 views

RDP client does not consider smart card as valid for authentication

I have: A Windows 7 client machine. I am not Administrator for that machine. A Windows 2008R2 server, on which I want to open a session using Remote Desktop. A Remote Desktop Gateway, also running ...
-4
votes
1answer
23 views

Web Server Certificate’s private key and Certificate Authority’s private key?

What could a malicious attacker do with a Web Server Certificate’s private key? What could a malicious attacker do with a Certificate Authority’s private key?
0
votes
1answer
36 views

What details would you view in a certificate to check if it is trustworthy?

I have a question need help: What details would you view in a certificate to check if it is a trustworthy website?
0
votes
0answers
32 views

Publish public key issued by general CA to PGP server

Some people in our company use PGP Desktop, but this is not mandatory. Personally I have not installed it on my work PC because that software is crappy and clunky. Now I got a general e-mail ...
0
votes
0answers
18 views

Windows 7 grab PEAP certificate after connecting to network for Ubuntu

So at my university I have a small problem, I am going to see them tomorrow however if I can get it sorted out before that, that we be great My university has a PEAP authentication type with ...
1
vote
1answer
74 views

Chrome still shows red cross “https://” even with valid certificate

This happens on one of my users Mac laptop running ML or Mavericks. When she accesses https://www.somewebsite.com using either Chrome or Safari, she always got the warning related to the certificate ...
1
vote
2answers
49 views

Removing one of two certificates with equal nicknames

I have two certificates installed: kirrun@kirNote ~ [1197]% certutil -d sql:/home/kirrun/.pki/nssdb -L Certificate Nickname Trust Attributes ...
0
votes
0answers
10 views

Unable to verify certificate when already trusted CA

I built my own CA, and add the CA certificate (cacert.crt) to my Mac OS X computer. Also, I use this CA signed another certificate to use as WPA2 enterprise authentication. When I connected to the ...
0
votes
2answers
73 views

Install SSL certificate from an untrusted website into the Certificates snap-in using IE

How can I install a certificate from an untrusted website into the Certificates snap-in (certmgr.msc) of Windows? I know how to do this with Firefox by exporting to a file and then importing it, ...
1
vote
1answer
35 views

User name for an existing SSH certificate?

On a Jenkins server, there are two pairs SSH private and public keys in the ~/.ssh/ directory which apparently are both used to authenticate with the same external server. However, I don't know which ...
0
votes
1answer
81 views

How to make Google Chrome not to check system clock or certificates at all?

How to make Google Chrome not to check system clock? I want to switch back my system clock and still can access to gmail etc.
1
vote
0answers
69 views

How to develop a Chrome extension that overrides SSL certificate error for self-signed certificate?

The process of adding a self signed certificate to the list of trusted certificates in Chrome is manual and tedious. I frequently access a trusted website that uses a self-signed certificate. As I am ...
0
votes
1answer
44 views

How do I bypass this since I know the site is good

This Connection is Untrusted You have asked Firefox to connect securely to xhopsportal.sys.comcast.net, but we can't confirm that your connection is secure. Normally, when you try to connect ...
1
vote
2answers
91 views

Can I sign code with a website SSL certificate?

I have an SSL certificate installed and working on my web server. On another project I need to sign some code. Can I use the website SSL certificate to sign code, or is a code-signing certificate ...
0
votes
1answer
33 views

How to install a DER binary encoded, GOST R 34.10-2001 root certificate (.crt) on Mac?

I would like to install this certificate on my Mac running OSX 10.9.1. I've downloaded it, but when I double click, keychain is opened and that is it. Can not install it with command line also: ...
5
votes
2answers
230 views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
0
votes
1answer
137 views

Import PGP key to windows user for SSIS

I have used Kleopatra to generate a pgp key. In SQL Server I am running an SSIS package that should decrypt files using the above key. The SSIS packages runs as ImportFiles which has the identity of ...
0
votes
0answers
28 views

Extract certificates and private keys from Windows XP drive

I have a PC that was upgraded from Windows XP to 7 by installing 7 on a new disk and keeping the original disk as a data drive. This worked fine, but I have since realised (too late) that I need to ...
0
votes
0answers
51 views

Got requests.exceptions.SSLError error when running googleplay-api

I want to share my experience on the problem, so this is sort of a self-answered question. Hope it helps. I'm trying to use googleplay-api to download apks from Google Play. My network environment ...
1
vote
0answers
50 views

Backup EFS encryption key generated, but no encrypted files? Track what caused the key creation

In I started getting a weird message "Encrypting file system - Back up your file encryption key" a user experiences a prompt that I also experienced yesterday for the first time. Now the ...
0
votes
0answers
23 views

How to avoid having users enroll for multiple certificates?

I am the domain administrator of my company. Recently one of my clients has re-installed his Windows and received a new certificate from CA, but the key pair of certificate is not same with previous ...
0
votes
0answers
44 views

Windows 7 keytool alternative

Is there a key and certificate manager similar to keytool which I can use on Windows 7? I'll be needing the key for generating signatures and using certificates to interact with a web service.
3
votes
2answers
118 views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
0
votes
1answer
263 views

In the context of using RADIUS for WPA2 enterprise, what does a “client certificate” mean, if anything?

I'm trying to set up a RADIUS server for WPA2 enterprise authentication. I'm new to all this. I understand that the server has a "server certificate", which I assume plays a role similar to that ...