Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

0
votes
1answer
10 views

Are URL based SSL / certificates at IIS?

Is there a way to change the used certificate / ssl encryption depending on the visited url? We are using IIS 7 and later. Edit: We plan to develop and deploy web applications to our customers. It ...
0
votes
1answer
64 views

What is the right place to buy an SSL certificate? [on hold]

I'm hosting my domain on name.com, but my server is hosted with a different company. Both the domain registrar and the web hosting company offer SSL certificates, but which one should I buy it from? ...
0
votes
0answers
6 views

How to bulk extract personal certificates on Windows?

We are upgrading computers to Win7 and I've found a computer with 300+ personal certificates and we need to save all of them. Is there a way to bulk export them?
0
votes
0answers
7 views

Install root certificate authority on Ubuntu

First off I am not sure whether I have the correct terminology. What I mean by certificate authority is a verified certificate distributor such that if I goto a website in my Browser that is HTTPS ...
0
votes
1answer
27 views

How do I configure my system to trust a CA for a specific subset of domains?

The company I work for has a number of internal web services accessible over HTTPS. These services use SSL/TLS certificates signed by an internal certificate authority which is only trusted by ...
6
votes
3answers
2k views

How to bypass the “secure connection failed” warning in Firefox 33

Since installing Firefox 33 a "Secure Connection Failed" error is no longer bypassable using the "I Understand the Risks" button - it's gone! Is it still somehow possible to ignore certificate ...
0
votes
0answers
12 views

Requesting a server authentication certificate

I encountered problem when I go to http://localhost/certsrv in Windows Server 2008 R2 I cannot find option to - Create and Submit A Request To This CA. What I find is completely different. I would add ...
3
votes
1answer
38 views

View text version of remote server SSL certificate from linux command line

Does anyone know of a linux one-liner that can be used to download an SSL certificate from a remote server and decode it to text? I think the last step would involve openssl x509 -text -noout but the ...
1
vote
1answer
38 views

Using CERT Tapioca on VirtualBox

I'm attempting to use Cert Tapioca (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) in Virtual Box so that I can test the SSL/HTTPS security of all the sites I have browsed. What I did is, ...
-1
votes
0answers
32 views

How to import a self-signed certificate in chrome?

Well this question is a duplicate, for example of this question But the import don't work for me. I can see the imported certificate and so on but Chrome is still warning about it.. I also installed ...
0
votes
0answers
29 views

Can I extract a certificate private key from the windows certificate store in a disk image?

After re-installing Windows 7 I notice that I seem to have failed to export the private key for one of my client certificates (for Internet Explorer use). When viewing the certificate in IE, it ...
2
votes
0answers
119 views
+100

How to know which Certificates to leave in my browser, and which to remove

I would like to tighten up security a bit, so I am disabling unneeded certs from my browsers. For instance, the "WoSign CA Limited" cert from China I obviously don't need, yet "Thawte Consulting cc" I ...
0
votes
0answers
24 views

Using the windows certificate store for git SSH

I am currently working on setting up a build environment that will use OpenSSH with certificates as the primary authentication method (Certificates, not public-private keys). The build environment ...
0
votes
0answers
45 views

Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file?

Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file? Scenario: We have a few legacy certificates based on some legacy templates (2012 R2). ...
3
votes
1answer
117 views

Why is the local certificate store missing in Windows 8.1?

I am trying to import a self-signed certificate into che local certificate store of the Trusted Root CAs on my Windows 8.1 machine, but that store is missing. Importing it into the Trusted Root CAs ...
0
votes
0answers
10 views

CDP set on a CA does not appear in the issued certificate

I have a working but undermanaged two-level enterprise CA structure on a Microsoft Active Directory environment - a root CA, an enterprise subordinate CA with templates, and a couple of supporting ...
0
votes
1answer
28 views

Error on “-e” parameter when running makecert command in powershell

I am trying to run the following command in Powershell on a machine running Server 2012: makecert -r -pe -n CN="*.$domainVariable" -b 01/01/2000 -e 01/01/2036 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr ...
0
votes
1answer
34 views

Can I use a “Microsoft Office” Digital ID / certificate to sign PDFs in Adobe Acrobat?

I've been needing to sign PDFs lately - fortunately everyone's been fine with me using a self-signed certificate, however I feel it's unprofessional. I'm looking for a personal certificate I can use ...
0
votes
1answer
24 views

How to sign a CSR on windows

I've got a custom certificate that I'm using as a local root authority. This certifcate has a private key on my machine and is stored in the "Personal" certificates store of the "Local Machine" ...
0
votes
0answers
43 views

Does a certificate from “open.nsa.gov” in firefox mean the browser defaultly trusts the NSA?

While exploring Firefox options I see that I have a certificate identifying the NSA, issued by the US Government. I don't recall adding this at any point and don't really want my machine trusting the ...
0
votes
0answers
97 views

How to turn off Opera security incomplete certificate message?

While I'm browsing the Internet, Opera always pop out a lots of these Server certificate chain incomplete boxes. Several times it pops out tons of them . Even if I click to remember my choice or ...
0
votes
0answers
93 views

OpenVPN security, authentication

I would like to know if this config can be enhanced, in particular i wanted to ask if OVPN certificate-auth can be considered somewhat secure'ish ... ? For example : would any client be able to ...
0
votes
1answer
29 views

Why can`t we treat SSL Certs like Pgp keys instead of trusting CAs? [closed]

I am dumb and stupid and I do not know all the technical aspects of SSL and server/client side implications and implementations. However I understand them good enough from user point of view to use ...
0
votes
0answers
21 views

RootCertificate popup does install

When connecting to my university's wifi, it keeps popping up with a certificate (root) that needs to be install, I select yes [yes|no|view details] But I am not sure if it installs the certificate ...
0
votes
1answer
25 views

PKCS12 key from Winserver2008 cert authority

I have created a standalone cert authority in windows server 2008. I can use certreq (from that same box) to generate a cert with the appropriate CN, etc, and ensure that the private key is ...
1
vote
0answers
48 views

Windows (partially) claims I have a private key for a foreign certificate

We have a MS Word document template with vba code produced and signed by an external firm. When I view the details of the signing certificate from within Word vba developer tools, it shows up with ...
4
votes
0answers
128 views

How to make computer (or user) trust signed software

I have an application, which I sign and timestamp using a code-signing certificate issued by thawte, with intermediate authority Thawte code signing CA - G2. The signature is OK (as it shows in file ...
0
votes
0answers
45 views

Java allowing self-signed certificates but option is disabled

Java does not want to run an application with self-signed certificate, I'm using java 1.6u45 the option in the Java Control Panel under Security -> General -> "Allow user to grant permissions to ...
0
votes
0answers
14 views

FTPS certificate email address has different domain than the Organization name

Wondering if this should be of any concern. We received a FTPS ip which is SSL enabled. (This is not SFTP). Filezilla - the FTP client shows a certificate where the organization name say 'XYZ Inc' and ...
0
votes
1answer
24 views

How to get digicert high assurance in my Mac

I removed Digicert high assurance certificate from the keychain. Now when I visit facebook.com or other ssl websites from chrome, they don't open and I get an SSL error, e.g.: How can I to get ...
1
vote
0answers
50 views

Convert whole .pem Certificate to hexadecimal

I want to convert a whole pem-Certificate in hexadecimal. I tried it with: openssl x509 -modulus -noout < cert.pem| sed s/Modulus=/0x/ I'n not sure about it, if this is the right way to do. Am I? ...
0
votes
0answers
147 views

SSL certificate error attempting to download Homebrew?

I've been trying to download and install Homebrew for my Mac (OS 10.9.4) using the install script on the home page, but the download fails with a SSL certificate error (see log below). I understand ...
0
votes
0answers
116 views

Chrome won't trust DigiCert SSL. I have to trust it manually.

I have been having this problem for a while. I have found this thread which exactly my problem but it didn't solve my problem. Why won't OS X trust GitHub's SSL certificate? I also tried ...
0
votes
0answers
30 views

Force java to accept self signed certificates

OK, I know about the excepction list, but adding individual URLs to the exception filter is not the way I want to proceed. I already have click-to-run enabled, therefore if I want to run a java ...
2
votes
0answers
101 views

Change Windows 7 RDP host certificate expiration date

My Windows 7 desktop computer uses a self-signed certificate to identify its RDP host. So to prevent a man-in-the-middle attack, I have to manually verify the thumbprint the first time my RDP client ...
5
votes
2answers
2k views

Why does https://gmail.com/ produce no SSL error while using a bad certificate?

It looks like https://gmail.com uses an SSL certificate which is for the hostname mail.google.com. As the SSL certificate hostname does not match the browser URL, why does this work? I should get a ...
0
votes
0answers
486 views

IE/Chrome add permanent SSL certificate exception?

How can I add a permanent SSL certificate exception for certain websites? These sites have certificates signed by some root CA which I do not want to trust. When I tried to manually install the ...
5
votes
2answers
427 views

Netflix SSL certificate shows up when trying to visit https://www.google.com

I'm on a hotel Wi-Fi network where occasionally the following message shows up in Chrome when trying to visit any Google sites over HTTPS: The SSL certificate reported when this happens is This ...
3
votes
3answers
370 views

HTTPS certificates invalid on Safari, Chrome on specific user account

Safari and Chrome report invalid certificates on certain HTTPS sites (for example GitHub and Bitbucket). Firefox strangely shows a green valid certificate. I've created a new OS X user and everything ...
0
votes
0answers
37 views

Server Certificates Missing in IIS

On my Windows Server 2012 R2 box, when I connect to it through Remote Desktop, I'm trying to setup a server certificate but in IIS, in the "IIS" group, there is no Server Certificates feature. I ...
0
votes
1answer
40 views

Adding cert to trusted certs

I'm trying to access a web service from a certain website. Since this is a service I can't just click somewhere "go to this site anyway". I just get an endpoint exception in my code. I downloaded ...
0
votes
0answers
29 views

Windows keeps restoring DigitCert root certificates

I issued a SSL certificate trought DigiCert which we know is globally recognized and its Trusted Roots should be by default in Windows installations. However on one of my client's machine there was ...
0
votes
2answers
45 views

Is Firefox using its own isolated Certificate STore

I am using the latest Firefox. However, my campus uses their own certificate for all internet browsing and asks us to install their certificate as Root CA. Since, i don't trust them with my ...
0
votes
1answer
56 views

How to install a mmc certificate on Windows?

I am not familiar with Windows very much, and I have trouble installing a MMC certificate. I am following this description to use MMC to create a certificate, but I cannot complete the step labeled ' ...
0
votes
0answers
16 views

Cant install certificate to Intermediate Certification Authorities?

I navigate to MCC and add the Certificates snap-in. From here I right click on Intermediate Certification Authorities > All Tasks and click import I then browse to my Certifcate select it and complete ...
0
votes
1answer
47 views

Is it possible to get someone's code signing certificate revoked?

I recently had to clean up someone's computer because they were tricked into installing a bunch of things without their knowledge. The horrible thing about it was that the installer was signed with a ...
0
votes
2answers
231 views

How can I export private key from a certificate chain?

I create a keystore and from that keysore I generate a CSR file and when I receive Signed Certificate from CA, I imported root and intermediate certificates to my keystore and finally my signed ...
1
vote
2answers
155 views

Generate a public key certificate signed by CA with OpenSSL

I am working on a webservice that requires a signature in the sent and received messages. After sending a certificate request to the entity that will consume the webservice, they sent me (in addition ...
1
vote
2answers
53 views

How to build a certifcate chain for ServerHello

I've been trying to put together a certificate chain. I have the private key (privatekey.pem) and CSR (csr.pem) that I submitted to the Certificate Authority/CA. I took the CA's certificate and put ...
0
votes
1answer
244 views

Is it possible to merge my certificate (.crt) with my private key to export as a Base-64 encoded X.509 (.CER)

I am very clueless when it comes to certificates/security and the like so please excuse my ignorance. I purchased a certificate and it was sent to me. I generated the CSR using the java keytool. I ...