Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

0
votes
2answers
25 views

SSL Root CA certificate is not recognized, although present in the trust store. Why?

Background: Ubuntu Server 14.10 64-bit on aws.amazon.com/ec2 Cheap PositiveSSL server certificate from COMODO 1 server certificate, 2 intermediate CA certificates and 1 Root CA certificate as ZIP ...
1
vote
2answers
58 views

OpenSSL 0.9.8zc -> 0.9.8zd “broke” my certificates.

I have a self-signed certificate (and CA) created on a Mac using OpenSSL 0.9.8zc. I use the certificate to secure connection to my svn server. With the latest OS X update, OpenSSL was updated to ...
0
votes
0answers
26 views

Windows Wi-Fi with 802.1X + EAP-TTLS + EAP-MSCHAPv2 and client certificates

Sooo ... We have the the mandatory requirement that clients who want to join our wireless LAN to present a valid machine certificate issued by our in-house root CA. This is done to prevent from ...
0
votes
1answer
38 views

Thunderbird Certificate Alert keep popping up

I'm having the issue in the title since months now and is driving me crazy. I keep getting this warning: which translates to Add Security Exception You are going to modify the way ...
1
vote
0answers
14 views

Outlook not updating certificate

Outlook is refusing to send an encrypted email to a recipient whose certificate recently expired. The recipient sent a signed email and I exported the certificate to a ".cer" file then updated their ...
0
votes
0answers
13 views

converting 'cacert.crt' file to pks 12

This is the third or so in a chain of questions to implement ssl certificates. To date the public and private keys are created in the server and are operational, however the browsers do not recognize ...
18
votes
2answers
3k views

Apple's Mail showing “the identity of smtp.gmail.com cannot be verified”

When trying to send email using Gmail in OS X Mail, I get: The identity of "smtp.gmail.com" cannot be verified. The certificate for this server is invalid. You might be connecting to a server ...
0
votes
0answers
44 views

Can AVG 2015's Online Shield be used Chrome (and not give NET::ERR_CERT_DATE_INVALID)?

I am using AVG 2015. If I enable Online Shield, websites that use some of Google's API's (including StackExchange sites) become unavailable and start displaying a NET::ERR_CERT_DATE_INVALID error ...
0
votes
0answers
29 views

OpenSSL Error: Error loading extension section server

The system is Fedora fc21. The objective is to run the examples shown here: “APACHE web server and SSL authentication” The openssl.cnf file has been created and the following command run: openssl ...
1
vote
2answers
17 views

Signed application fails to launch

On a particular Windows Vista PC, all programs signed with a particular certificate fail to launch from explorer, when it verifies the publisher. Only for a second or two, the hour glass is visible, ...
0
votes
0answers
27 views

How to recover Windows 7's encrytion certificate (EFS) from formatted partitions?

I am a home user of Windows 7 ultimate. I am just a local admin for my computer. A standalone system. I am quite noob about computers. I formatted, Windows 7 installed(size 200gb) partition of 1tb ...
0
votes
0answers
26 views

Endless Loop going to self signed https site in Chrome only?

A client I am working for has a site running under SSL using a self signed certificate. When I navigate to the site in Chrome, I get the Err_Cert_Authority_Invalid error. I click Advanced and the ...
0
votes
0answers
10 views

Keytool without root access and leiningen

My traffic goes through proxy which replaces SSL certificate. This causes problems when accessing the maven/leiningen packages through HTTPS. I tried to install the cert in my keytool but that ...
0
votes
0answers
36 views

expired certificates and chrome

Yesterday I've visited a website for the first time, but now Chrome raises an error when I connect to this website. The error is: the connection is not private - ERR_CERT_DATE_INVALID So I tried to ...
1
vote
0answers
35 views

What is causing warning on a certificate's basicConstraints?

I created a self signed server certificate using OpenSSL's req -x509 command and a CONF file. The CONF file is shown below. When I examine the certificate using Microsoft certificate viewer, its ...
-1
votes
0answers
33 views

Certificate chain, middle certificate error

I have generated a root certificate by this guide, www.akadia.com/services/ssh_test_certificate.html Then I have generated more certificates and signed them to it build a chain, ...
0
votes
1answer
93 views

Firefox stopped working with our app after 36.0.1

We have a web application that works on all browsers and firefox before 36.0.1 Have done all the typical things, clearing cache, reinstalling ff, etc. Multiple different machine from different ...
0
votes
1answer
117 views

How to fix chrome certificate issues after removing Fiddler root cert

I don't know very much about certificates, and I don't want to break anything trying to resolve this - so asking for some suggestions. At some point agreed to let Fiddler install an HTTPS certificate ...
0
votes
0answers
16 views

How to get the organization name from a .p12 certificate?

I have a .p12 certificate and I need to find out the organization name of it. How to do that? (I'm using Windows 8.1)
1
vote
2answers
65 views

One SSL Certificate Two Services

I'm having trouble finding a clear answer to this question: In IIS (7.5 or 8) I plan on hosting a site that will have a bunch of secure HTML eforms (default port 443). They will be performing ajax ...
0
votes
2answers
136 views

export installed certificate and private key from a command line remotely in windows using something besides the certmgr.MSC tool

I need to be able to remotely export with the full cert chain and private keys an installed computer certificate on a windows server. The cert is used for IIS, and I want to use it for an apache ...
0
votes
0answers
33 views

OpenVPN: SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Im trying to use vpn to connect two internal networks using virtual machines. I have a virtual machine "gateway" and a virtual machine "client", and I want to connect to my gateway from client using ...
0
votes
0answers
23 views

Unable to authenticate with Client cert in TLS1.0

I have my own application running in Windows machine (server). I am using a browser as a client to do operations. I have multiple users connecting to the server using client certificates as the ...
0
votes
0answers
14 views

Mac OS X Ad-Hoc Network Certificate

I was wondering if on a Mac with the built in "Create Network" feature, to make the client (which will always be an iOS device) accept a .cer file before joining the network. I know some professional ...
0
votes
0answers
92 views

How to use .pfx in certificate store in CURL for Windows 7

I want to use cURL to access a remote server, and I need to identify myself using a private key or the remote server gives a 401 "Unauthorized". I'm on Windows 7 (work machine, not my choice) and my ...
1
vote
1answer
63 views

Imported CA certificate to Firefox Browser not working

I created Certificate Authority (CA) according to Ubuntu help using openssl. After creating a certificate for Apache2 and adding to certificate to it, I want to import it in Firefox. In the end of ...
0
votes
0answers
76 views

nginx http to https proxy with self-signed certificate

I have an nginx proxy to redirect http requests with a specified port to another https url. Here is my configuration so far: server { listen 59848; location / { resolver 8.8.8.8; ...
0
votes
0answers
14 views

How do I import a pfk file into MS Outlook 2010?

What specific steps can I take to successfully import a .pfk file into MS Outlook 2010 and then use it to successfully send encrypted/signed messages/attachments to the email address associated with ...
-1
votes
1answer
21 views

Is there any point signing/encrypting personal email? [closed]

It works fine for corporate mail where everyone in the organization would have a certificate issued to them, but does anyone use certificates to sign their personal mail (let alone use encryption ...
1
vote
1answer
36 views

How can I prevent a certificate from being trusted?

There exist two certificates in /etc/ssl/certs that I'd like to permanently remove. However, just deleting the pem files doesn't do it - those are regenerated when ca-certificates is updated. How ...
0
votes
1answer
44 views

keytool commands to replace existing SSL certificate?

I've a linux centos server running glassfish 3.1.2 app server. The default certs coming from GlassFish install for ports 4848 and 8181 are 1024 bits. I need to replace these with 2048 bits versions. ...
0
votes
0answers
397 views

Some clients get 'Certificate-based authentication failed' error on a cert, w/ all browsers

I'm hosting multiple SSL sites on multiple Ubuntu / LAMP servers. The servers have quite standard setup, eg. no client certificate configuration is in place. The vast majority of users are fine, but ...
0
votes
0answers
12 views

Mounting with davfs2: Certificate verification error: signed using insecure algorithm

If I try to mount a webdav share with davfs2, I get this error: LANG=C mount /home/user/owncloud /sbin/mount.davfs: Mounting failed. Certificate verification error: signed using insecure algorithm ...
0
votes
0answers
137 views

Self signed certificate, https and vpn

I have access to an SBS 2011 server that has a self signed certificate. In my computer (win 7 pro) that is outside the domain, I have imported the root certificate and the leaf certificate into ...
0
votes
1answer
27 views

SSL certificate for Web App + website

I have a WordPress + WooCommerce online store which is hosted on a managed hosting. I just bought non-wildcard SSL Certificate for that online store. I am also developing a CherryPy Python Web App ...
0
votes
1answer
35 views

Windows certificate viewing, why 2048-bit certificate shown as 270 byte?

I'm a bit confused by how Windows certificate viewer displays public key hexdump. Windows shows 270 bytes for a 2048-bit public key(which is 256 byte). While Firefox 31 display right 256 bytes. And ...
0
votes
1answer
44 views

Google chrome doesn't display personal certificate

I'm testing some webservices that use certificates for authentication. So basically I've added to certificate store some custom root CA and some client certificate to personal folder. When I open ...
0
votes
0answers
42 views

Validate a PADES document with expired certificate

I have a problem. I have a PDF that has been signed with a certificate, and then it has been put a timestamp with a TSA. I want to validate this document, but now, the certificate which it was used ...
0
votes
0answers
52 views

Pure-FTPD certificate not being used

I am using Pure-FTPD from the epel repository on CentOS 6. Now I have configured to enable TLS which works fine however for some reason it wont make use of the certificate file I have placed in ...
0
votes
0answers
23 views

Windows Certificate Authority - root offline, intermediate online?

Simple enough question... Can I have the Windows Root CA offline and a non-domain member, but the intermediate CA online and a domain member (thereby getting the advantages of an AD integrated CA?) ...
1
vote
1answer
21 views

How to configure shrewsoft vpn in windows with multilevel certificates

I have a linux box already connected with racoon to the same VPN using the same certificates no problem. From windows, it says "unable to verify remote peer certificate" and I believe it is because I ...
0
votes
0answers
17 views

Cisco VPN client imports certificates just fine, won't show them in configuration management

I've been fighting with a vpn client for a while trying to connect to a network. I've managed to download a .cer file from the host, which is supposed to be used for certficate authentication. It ...
0
votes
0answers
64 views

What Registry entry used to disable Java's “Signed code certification revocation check”?

We have successfully disabled Java updates for all users of a computer via a registry solution found on this site. How can we now do the same thing for enabling the "Do not check (not recommended)" ...
1
vote
1answer
131 views

certificate errors via chrome and IE

When trying to access gmail.com via chrome I get this error message: Net::ERR_CERT_INVALID The same error message appears with ninite.com or twitter.com - drive.google.com, youtube.com or ...
0
votes
1answer
42 views

Firefox/Thunderbird export public key

I have imported a .p12 file inside Firefox/Thunderbird, now I would like to export its public key (without using openssl or whatever command line code), so I can distribute it and people can ...
0
votes
0answers
21 views

Java Applet cannot find certificates in Mozilla but instead fetchs Windows/ie cert storage

We have migrated to Free Software on office. We often have to use some government web services that include applets to sign documents with our own personal certificates. Problem is, sometimes some of ...
0
votes
1answer
365 views

Facebook.com returning invalid security certificate

I am on a network which is secured by Cyberroam in my University. Recently, they have made some changes to their security policy and have 'blocked' facebook.com. I kind of used to think that ...
0
votes
0answers
37 views

Smart card setup - Gemalto Cryptoflex 64K V2c

I have recently acquired a few Gemalto Cryptoflexes (as above) and I'm trying to get them to work for smart card login. The card has a minidriver which is ActivIdentity Mini Driver (Gemalto ...
1
vote
1answer
29 views

Trouble with certificate checking on a closed network

I'm managing a Active Directory domain with about a hundred Windows 7 clients running IE9. The network does not have access to the Internet, but do have the ability to access a vendor web application. ...
1
vote
2answers
533 views

get Firefox to trust expired Charles CA Certificate

When I use the security certificate supplied by Charles Proxy in Firefox (35.0) to decrypt SSL traffic, it results in Firefox showing The certificate is not trusted because the issuer certificate ...