Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

-1
votes
0answers
13 views

OpenSSL CA use CSR's supplied extensions

I've set up a CA with OpenSSL on my old BSD-computer. No problem at all. But if I sign a CSR, how can I adopt the x509v3 extensions submitted with the CSR? The only way I know is either to include the ...
0
votes
0answers
25 views

Expired web/SSL certificate error on only one computer

I have a strange problem with one website's SSL certificate that only affects one computer. The site works fine on other computers with no error. I do not own or administer the website, but because ...
0
votes
0answers
24 views

I am not able to access any google related sites from Google Chrome? [duplicate]

I am not able to access youtube or gmail etc. It shows this "Invalid Server Certificate You attempted to reach www.youtube.com, but the server presented an invalid certificate. Help me ...
-1
votes
0answers
42 views

Outside office MS Outlook client can't connect to our exchange server with self signed certificate

I am unable to get my outlook to connect to the exchange server when outside the office. I'd love to have my home office computer have my emails like my laptop does. We use a self signed certificate. ...
40
votes
1answer
2k views

Firefox “Untrusted Connection” warnings when visiting reputable HTTPS sites when using child's account

When using Firefox on Windows, I see an "Untrusted Connection" warning when visiting any HTTPS site, including very reputable ones such as https://www.google.com and https://search.yahoo.com. The ...
0
votes
1answer
17 views

Unable to verify the certificate from StartSSL?

I'm new to OpenSSL and I'm unable to verify the certificate from StartSSL. The command that I tried in order to verify the certificate is: openssl verify -CAfile ca.pem mydomain.com.crt The error ...
1
vote
0answers
13 views

Hang when launching digitally signed executable

We have a weird problem on 2 PCs with running a digitally signed 120 Mb executable. If user launches a digitally signed .exe - then the launching host (e.g. Explorer or cmd.exe) will enter infinite ...
0
votes
1answer
15 views

Using powershell, how do I extract the thumbprint from an SSL Certificate without installing it?

Every example I've found on StackExchange, and other internet forums, etc all tell me how to get the thumbprint from a certificate already installed into a certificate store. Alternatively, the ...
0
votes
0answers
15 views

How should a wildcard certificate be used? [migrated]

I have a wildcard certificate (pfx file) and I have doubts on how to use that. Should I install that on all of my application servers or alternatively create a new certificate and sign it with the ...
2
votes
0answers
14 views

How can I sign an MS Word macro with a digital certificate from the local machine certificate store?

I am trying to find out how I can digitally sign a Microsoft Word macro using a valid 3rd party CA issued VBA code-signing certificate that is installed into the machine rather than the user ...
0
votes
0answers
28 views

osx 10.10 with Java 8 allow application with expired certificate

I´m trying to install Atlasstyler (http://en.geopublishing.org/) on a osx 10.10 box with java 8- update 25 installed. Trying to run the installer (Version 1.9 201403170926) ends in following deny ...
0
votes
0answers
25 views

Import Certification for 3rd party Engine to IBM Application Server 7.0.35

I used 3rd party module in my system called (/n) slash n, This module have its own certification, As a temporary solution I added this certification to JDK directry. How I can add this certification ...
0
votes
2answers
30 views

Certificate Errors with bad Date Time settings

I have recently solved an issue with IE 11 where I was getting certificate errors to google.com bing.com was fine no problems I tried a number of different things till seeing a post referring to ...
13
votes
1answer
455 views

Many websites seem to be switching Root Certificates [closed]

For the past few days, I have been noticing that many websites which use the "GTE CyberTrust Global Root" root certificate have been moved to the "GlobalSign Root CA" root cert. I've noticed this on ...
0
votes
1answer
23 views

DNSCrypt not working - server certificate possibly expired

I have been using DNSCrypt for a few days (used this guide to install dominustemporis.com/2014/05/dnscrypt-on-windows-update/) and it has been working fine for a few days. Today I switched on my ...
0
votes
0answers
13 views

Issues with adding new root certificate in windows 8.1

I'm trying to implement my own self signed certificate for testing purposes but I'm running into some issues with Windows 8.1 on my computer. For some reason the certmgr.msc doesn't give me the option ...
-1
votes
0answers
35 views

Encrypted alert with code 21 for connection [closed]

I've got a device that connected to the server and successfully did the handshake and received application data, however later when client sends keep-alive requests server sends back encrypted alert ...
0
votes
1answer
29 views

Importing StartSSL Key

A few months ago I signed up for a Free StartSSL certificate but I didn't realize that you needed to install that certificate if you wanted to later log in to the control panel. Now I'm stuck trying ...
3
votes
1answer
43 views

How to configure Firefox to warn or reject SHA-1 signed certificates?

Is there a way to configure Firefox either through an add-on, plugin, or other setting that will either reject or warn whenever it encounters a certificate that has been signed using SHA-1?
0
votes
1answer
114 views

IE10: Website security certificate issue + “continue” button missing

I am developing a web app and am using self-signed SSL certificates. I'm trying to test my site on Internet Explorer 10 in a modern.ie VM (in VirtualBox). When I visit the site, ...
0
votes
2answers
45 views

how to change ssl certificate serial number

I upgraded the linux full release on a server. As part of the process I generated a new local ssl certificate key set with genkey. However the serial number remained the same and client apps such as ...
0
votes
0answers
28 views

How can I get my company proxy's root certificate (with Firefox)?

I'm facing a similar problem as in Firefox: This connection is untrusted + Behind corporate firewall that is, I'm getting "this connecting is untrusted" whenever I try to connect via https, as ...
0
votes
0answers
33 views

Do I need to regenerate certificates on master in order to use centralized CA in Puppet

I have a set up where I use two monolithic PE-Puppet 3.3.2 installations as puppet masters. I need to make one of these a CA and the other just a master for nodes. The nodes should not contact CA ...
0
votes
1answer
32 views

Are URL based SSL / certificates possible at IIS?

Is there a way to change the used certificate / ssl encryption depending on the visited url? We are using IIS 7 and later. Edit: We plan to develop and deploy web applications to our customers. It ...
0
votes
0answers
11 views

How to bulk extract personal certificates on Windows?

We are upgrading computers to Win7 and I've found a computer with 300+ personal certificates and we need to save all of them. Is there a way to bulk export them?
0
votes
1answer
35 views

Install root certificate authority on Ubuntu [duplicate]

First off I am not sure whether I have the correct terminology. What I mean by certificate authority is a verified certificate distributor such that if I goto a website in my Browser that is HTTPS ...
2
votes
2answers
43 views

How do I configure my system to trust a CA for a specific subset of domains?

The company I work for has a number of internal web services accessible over HTTPS. These services use SSL/TLS certificates signed by an internal certificate authority which is only trusted by ...
15
votes
3answers
24k views

How to bypass the “secure connection failed” warning in Firefox 33

Since installing Firefox 33 a "Secure Connection Failed" error is no longer bypassable using the "I Understand the Risks" button - it's gone! Is it still somehow possible to ignore certificate ...
0
votes
0answers
33 views

Requesting a server authentication certificate

I encountered problem when I go to http://localhost/certsrv in Windows Server 2008 R2 I cannot find option to - Create and Submit A Request To This CA. What I find is completely different. I would add ...
3
votes
1answer
84 views

View text version of remote server SSL certificate from linux command line

Does anyone know of a linux one-liner that can be used to download an SSL certificate from a remote server and decode it to text? I think the last step would involve openssl x509 -text -noout but the ...
1
vote
1answer
62 views

Using CERT Tapioca on VirtualBox

I'm attempting to use Cert Tapioca (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) in Virtual Box so that I can test the SSL/HTTPS security of all the sites I have browsed. What I did is, ...
0
votes
0answers
79 views

Can I extract a certificate private key from the windows certificate store in a disk image?

After re-installing Windows 7 I notice that I seem to have failed to export the private key for one of my client certificates (for Internet Explorer use). When viewing the certificate in IE, it ...
6
votes
1answer
447 views

How to know which Certificates to leave in my browser, and which to remove

I would like to tighten up security a bit, so I am disabling unneeded certs from my browsers. For instance, the "WoSign CA Limited" cert from China I obviously don't need, yet "Thawte Consulting cc" I ...
0
votes
0answers
33 views

Using the windows certificate store for git SSH

I am currently working on setting up a build environment that will use OpenSSH with certificates as the primary authentication method (Certificates, not public-private keys). The build environment ...
0
votes
0answers
104 views

Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file?

Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file? Scenario: We have a few legacy certificates based on some legacy templates (2012 R2). ...
3
votes
1answer
381 views

Why is the local certificate store missing in Windows 8.1?

I am trying to import a self-signed certificate into che local certificate store of the Trusted Root CAs on my Windows 8.1 machine, but that store is missing. Importing it into the Trusted Root CAs ...
0
votes
0answers
20 views

CDP set on a CA does not appear in the issued certificate

I have a working but undermanaged two-level enterprise CA structure on a Microsoft Active Directory environment - a root CA, an enterprise subordinate CA with templates, and a couple of supporting ...
0
votes
1answer
53 views

Error on “-e” parameter when running makecert command in powershell

I am trying to run the following command in Powershell on a machine running Server 2012: makecert -r -pe -n CN="*.$domainVariable" -b 01/01/2000 -e 01/01/2036 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr ...
0
votes
1answer
52 views

Can I use a “Microsoft Office” Digital ID / certificate to sign PDFs in Adobe Acrobat?

I've been needing to sign PDFs lately - fortunately everyone's been fine with me using a self-signed certificate, however I feel it's unprofessional. I'm looking for a personal certificate I can use ...
0
votes
1answer
28 views

How to sign a CSR on windows

I've got a custom certificate that I'm using as a local root authority. This certifcate has a private key on my machine and is stored in the "Personal" certificates store of the "Local Machine" ...
0
votes
0answers
52 views

Does a certificate from “open.nsa.gov” in firefox mean the browser defaultly trusts the NSA?

While exploring Firefox options I see that I have a certificate identifying the NSA, issued by the US Government. I don't recall adding this at any point and don't really want my machine trusting the ...
0
votes
1answer
267 views

How to turn off Opera security incomplete certificate message?

While I'm browsing the Internet, Opera always pop out a lots of these Server certificate chain incomplete boxes. Several times it pops out tons of them . Even if I click to remember my choice or ...
0
votes
0answers
97 views

OpenVPN security, authentication

I would like to know if this config can be enhanced, in particular i wanted to ask if OVPN certificate-auth can be considered somewhat secure'ish ... ? For example : would any client be able to ...
0
votes
1answer
35 views

Why can`t we treat SSL Certs like Pgp keys instead of trusting CAs? [closed]

I am dumb and stupid and I do not know all the technical aspects of SSL and server/client side implications and implementations. However I understand them good enough from user point of view to use ...
0
votes
0answers
23 views

RootCertificate popup does install

When connecting to my university's wifi, it keeps popping up with a certificate (root) that needs to be install, I select yes [yes|no|view details] But I am not sure if it installs the certificate ...
0
votes
1answer
45 views

PKCS12 key from Winserver2008 cert authority

I have created a standalone cert authority in windows server 2008. I can use certreq (from that same box) to generate a cert with the appropriate CN, etc, and ensure that the private key is ...
1
vote
0answers
51 views

Windows (partially) claims I have a private key for a foreign certificate

We have a MS Word document template with vba code produced and signed by an external firm. When I view the details of the signing certificate from within Word vba developer tools, it shows up with ...
4
votes
1answer
180 views

How to make computer (or user) trust signed software

I have an application, which I sign and timestamp using a code-signing certificate issued by thawte, with intermediate authority Thawte code signing CA - G2. The signature is OK (as it shows in file ...
0
votes
0answers
78 views

Java allowing self-signed certificates but option is disabled

Java does not want to run an application with self-signed certificate, I'm using java 1.6u45 the option in the Java Control Panel under Security -> General -> "Allow user to grant permissions to ...
0
votes
0answers
15 views

FTPS certificate email address has different domain than the Organization name

Wondering if this should be of any concern. We received a FTPS ip which is SSL enabled. (This is not SFTP). Filezilla - the FTP client shows a certificate where the organization name say 'XYZ Inc' and ...