Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

0
votes
0answers
11 views

How to use .pfx in certificate store in CURL for Windows 7

I want to use cURL to access a remote server, and I need to identify myself using a private key or the remote server gives a 401 "Unauthorized". I'm on Windows 7 (work machine, not my choice) and my ...
1
vote
1answer
27 views

Imported CA certificate to Firefox Browser not working

I created Certificate Authority (CA) according to Ubuntu help using openssl. After creating a certificate for Apache2 and adding to certificate to it, I want to import it in Firefox. In the end of ...
0
votes
0answers
25 views

nginx http to https proxy with self-signed certificate

I have an nginx proxy to redirect http requests with a specified port to another https url. Here is my configuration so far: server { listen 59848; location / { resolver 8.8.8.8; ...
0
votes
0answers
10 views

How do I import a pfk file into MS Outlook 2010?

What specific steps can I take to successfully import a .pfk file into MS Outlook 2010 and then use it to successfully send encrypted/signed messages/attachments to the email address associated with ...
-1
votes
1answer
18 views

Is there any point signing/encrypting personal email? [on hold]

It works fine for corporate mail where everyone in the organization would have a certificate issued to them, but does anyone use certificates to sign their personal mail (let alone use encryption ...
1
vote
1answer
25 views

How can I prevent a certificate from being trusted?

There exist two certificates in /etc/ssl/certs that I'd like to permanently remove. However, just deleting the pem files doesn't do it - those are regenerated when ca-certificates is updated. How ...
0
votes
1answer
16 views

keytool commands to replace existing SSL certificate?

I've a linux centos server running glassfish 3.1.2 app server. The default certs coming from GlassFish install for ports 4848 and 8181 are 1024 bits. I need to replace these with 2048 bits versions. ...
0
votes
0answers
40 views

Some clients get 'Certificate-based authentication failed' error on a cert, w/ all browsers

I'm hosting multiple SSL sites on multiple Ubuntu / LAMP servers. The servers have quite standard setup, eg. no client certificate configuration is in place. The vast majority of users are fine, but ...
0
votes
0answers
5 views

Mounting with davfs2: Certificate verification error: signed using insecure algorithm

If I try to mount a webdav share with davfs2, I get this error: LANG=C mount /home/user/owncloud /sbin/mount.davfs: Mounting failed. Certificate verification error: signed using insecure algorithm ...
0
votes
0answers
57 views

Self signed certificate, https and vpn

I have access to an SBS 2011 server that has a self signed certificate. In my computer (win 7 pro) that is outside the domain, I have imported the root certificate and the leaf certificate into ...
0
votes
1answer
22 views

SSL certificate for Web App + website

I have a WordPress + WooCommerce online store which is hosted on a managed hosting. I just bought non-wildcard SSL Certificate for that online store. I am also developing a CherryPy Python Web App ...
0
votes
1answer
23 views

Windows certificate viewing, why 2048-bit certificate shown as 270 byte?

I'm a bit confused by how Windows certificate viewer displays public key hexdump. Windows shows 270 bytes for a 2048-bit public key(which is 256 byte). While Firefox 31 display right 256 bytes. And ...
0
votes
1answer
38 views

Google chrome doesn't display personal certificate

I'm testing some webservices that use certificates for authentication. So basically I've added to certificate store some custom root CA and some client certificate to personal folder. When I open ...
0
votes
0answers
32 views

Validate a PADES document with expired certificate

I have a problem. I have a PDF that has been signed with a certificate, and then it has been put a timestamp with a TSA. I want to validate this document, but now, the certificate which it was used ...
0
votes
0answers
18 views

Pure-FTPD certificate not being used

I am using Pure-FTPD from the epel repository on CentOS 6. Now I have configured to enable TLS which works fine however for some reason it wont make use of the certificate file I have placed in ...
0
votes
0answers
16 views

Windows Certificate Authority - root offline, intermediate online?

Simple enough question... Can I have the Windows Root CA offline and a non-domain member, but the intermediate CA online and a domain member (thereby getting the advantages of an AD integrated CA?) ...
1
vote
1answer
13 views

How to configure shrewsoft vpn in windows with multilevel certificates

I have a linux box already connected with racoon to the same VPN using the same certificates no problem. From windows, it says "unable to verify remote peer certificate" and I believe it is because I ...
0
votes
0answers
11 views

Cisco VPN client imports certificates just fine, won't show them in configuration management

I've been fighting with a vpn client for a while trying to connect to a network. I've managed to download a .cer file from the host, which is supposed to be used for certficate authentication. It ...
0
votes
0answers
27 views

What Registry entry used to disable Java's “Signed code certification revocation check”?

We have successfully disabled Java updates for all users of a computer via a registry solution found on this site. How can we now do the same thing for enabling the "Do not check (not recommended)" ...
1
vote
1answer
71 views

certificate errors via chrome and IE

When trying to access gmail.com via chrome I get this error message: Net::ERR_CERT_INVALID The same error message appears with ninite.com or twitter.com - drive.google.com, youtube.com or ...
0
votes
1answer
22 views

Firefox/Thunderbird export public key

I have imported a .p12 file inside Firefox/Thunderbird, now I would like to export its public key (without using openssl or whatever command line code), so I can distribute it and people can ...
0
votes
0answers
11 views

Java Applet cannot find certificates in Mozilla but instead fetchs Windows/ie cert storage

We have migrated to Free Software on office. We often have to use some government web services that include applets to sign documents with our own personal certificates. Problem is, sometimes some of ...
0
votes
1answer
163 views

Facebook.com returning invalid security certificate

I am on a network which is secured by Cyberroam in my University. Recently, they have made some changes to their security policy and have 'blocked' facebook.com. I kind of used to think that ...
0
votes
0answers
21 views

Smart card setup - Gemalto Cryptoflex 64K V2c

I have recently acquired a few Gemalto Cryptoflexes (as above) and I'm trying to get them to work for smart card login. The card has a minidriver which is ActivIdentity Mini Driver (Gemalto ...
1
vote
1answer
22 views

Trouble with certificate checking on a closed network

I'm managing a Active Directory domain with about a hundred Windows 7 clients running IE9. The network does not have access to the Internet, but do have the ability to access a vendor web application. ...
1
vote
2answers
222 views

get Firefox to trust expired Charles CA Certificate

When I use the security certificate supplied by Charles Proxy in Firefox (35.0) to decrypt SSL traffic, it results in Firefox showing The certificate is not trusted because the issuer certificate ...
2
votes
1answer
48 views

Should I trust download.oracle.com if my certificate does not match?

I've been getting this every time I try to download a JDK 8 update to my MacBook. First, I go here: http://www.oracle.com/technetwork/java/javase/downloads/index.html I click the download location ...
0
votes
1answer
35 views

Why won't Lync 2013 connect when I am on an office network, but if I tether it to my iPhone, it works fine?

If I connect to the network via the office network (either office Wifi or ethernet), Lync 2013 will not connect. It states: However, if I connect my laptop to either the Wifi network from the ...
0
votes
0answers
27 views

Thawte digital signing certificate does not show chain of trust

We are using digital signing certificate from thawte . I am able to digitally sign the exe using the digital signing certificate . After signing exe I verified the sign by checking its chain of trust. ...
0
votes
1answer
57 views

Firefox import PEM certificate chain fails

I am trying to import a cert chain into Firefox 31.3 ESR. The origin chain is a p7b file which I have converted with OpenSSL to PEM format. curl happily accepts that chain and establishes the ...
0
votes
0answers
57 views

Mumble Server (Murmur) 3rd Party SSL Installation on Ubuntu

I recently purchased a wildcard certificate for my website and would like to also add it to my murmur server but I am having trouble finding out the proper steps to take to do this. The certificate I ...
0
votes
0answers
41 views

OpenSSL CA use CSR's supplied extensions

I've set up a CA with OpenSSL on my old BSD-computer. No problem at all. But if I sign a CSR, how can I adopt the x509v3 extensions submitted with the CSR? The only way I know is either to include the ...
3
votes
1answer
190 views

Expired web/SSL certificate error on only one computer

I have a strange problem with one website's SSL certificate that only affects one computer Windows 7 operating system. The site works fine on other Win 7 computers with no error, pulling valid ...
0
votes
0answers
24 views

I am not able to access any google related sites from Google Chrome? [duplicate]

I am not able to access youtube or gmail etc. It shows this "Invalid Server Certificate You attempted to reach www.youtube.com, but the server presented an invalid certificate. Help me ...
44
votes
1answer
3k views

Firefox “Untrusted Connection” warnings when visiting reputable HTTPS sites when using child's account

When using Firefox on Windows, I see an "Untrusted Connection" warning when visiting any HTTPS site, including very reputable ones such as https://www.google.com and https://search.yahoo.com. The ...
0
votes
2answers
218 views

Unable to verify the certificate from StartSSL?

I'm new to OpenSSL and I'm unable to verify the certificate from StartSSL. The command that I tried in order to verify the certificate is: openssl verify -CAfile ca.pem mydomain.com.crt The error ...
2
votes
1answer
25 views

Hang when launching digitally signed executable

We have a weird problem on 2 PCs with running a digitally signed 120 Mb executable. If user launches a digitally signed .exe - then the launching host (e.g. Explorer or cmd.exe) will enter infinite ...
25
votes
2answers
2k views

What is the superfish SSL certificate and where did it originate

I recently bought a new laptop, every https:// connection I do to any site regardless of browser chain back to a root certificate issued by "superfish, inc". I have had a dig around but I can't seem ...
0
votes
1answer
91 views

Using powershell, how do I extract the thumbprint from an SSL Certificate without installing it?

Every example I've found on StackExchange, and other internet forums, etc all tell me how to get the thumbprint from a certificate already installed into a certificate store. Alternatively, the ...
2
votes
0answers
56 views

How can I sign an MS Word macro with a digital certificate from the local machine certificate store?

I am trying to find out how I can digitally sign a Microsoft Word macro using a valid 3rd party CA issued VBA code-signing certificate that is installed into the machine rather than the user ...
0
votes
0answers
64 views

osx 10.10 with Java 8 allow application with expired certificate

I´m trying to install Atlasstyler (http://en.geopublishing.org/) on a osx 10.10 box with java 8- update 25 installed. Trying to run the installer (Version 1.9 201403170926) ends in following deny ...
0
votes
0answers
29 views

Import Certification for 3rd party Engine to IBM Application Server 7.0.35

I used 3rd party module in my system called (/n) slash n, This module have its own certification, As a temporary solution I added this certification to JDK directry. How I can add this certification ...
0
votes
2answers
58 views

Certificate Errors with bad Date Time settings

I have recently solved an issue with IE 11 where I was getting certificate errors to google.com bing.com was fine no problems I tried a number of different things till seeing a post referring to ...
13
votes
1answer
488 views

Many websites seem to be switching Root Certificates [closed]

For the past few days, I have been noticing that many websites which use the "GTE CyberTrust Global Root" root certificate have been moved to the "GlobalSign Root CA" root cert. I've noticed this on ...
0
votes
1answer
89 views

DNSCrypt not working - server certificate possibly expired

I have been using DNSCrypt for a few days (used this guide to install dominustemporis.com/2014/05/dnscrypt-on-windows-update/) and it has been working fine for a few days. Today I switched on my ...
0
votes
0answers
25 views

Issues with adding new root certificate in windows 8.1

I'm trying to implement my own self signed certificate for testing purposes but I'm running into some issues with Windows 8.1 on my computer. For some reason the certmgr.msc doesn't give me the option ...
-1
votes
0answers
120 views

Encrypted alert with code 21 for connection [closed]

I've got a device that connected to the server and successfully did the handshake and received application data, however later when client sends keep-alive requests server sends back encrypted alert ...
0
votes
1answer
61 views

Importing StartSSL Key

A few months ago I signed up for a Free StartSSL certificate but I didn't realize that you needed to install that certificate if you wanted to later log in to the control panel. Now I'm stuck trying ...
3
votes
1answer
58 views

How to configure Firefox to warn or reject SHA-1 signed certificates?

Is there a way to configure Firefox either through an add-on, plugin, or other setting that will either reject or warn whenever it encounters a certificate that has been signed using SHA-1?
0
votes
1answer
325 views

IE10: Website security certificate issue + “continue” button missing

I am developing a web app and am using self-signed SSL certificates. I'm trying to test my site on Internet Explorer 10 in a modern.ie VM (in VirtualBox). When I visit the site, ...