Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

0
votes
1answer
18 views

Where does Firefox get the HSTS information from?

I have a local server serving HTTPS using a self-signed certificate. It does not serve http. The certificate is issued with cn=host1.subdomain1.domain1. The server is reachable under name host2, too. ...
0
votes
0answers
22 views

Chrome suddenly red HTTPS on mobile but not on desktop

Yesterday I enabled OCSP stapling for my website in nginx. Now when I check my website using Qualys SSL Labs I have 2 trust paths, 1 using a SHA1 root certificate and 1 using a SHA256 root ...
0
votes
0answers
38 views

Chrome is showing incomplete or wrong cert info

We've got a webserver (Apache) at work that is using https for our webpage. The thing is that everytime I enter this page from chrome I get: NET::ERR_CERT_AUTHORITY_INVALID I created the certificate ...
0
votes
0answers
28 views

Why the digital signature is invalid?

I have signed a pdf digitally with a valid certificate installed as a personal certificate in the keystore. When I open the file in my computer the signature is valid and the signer is the current ...
0
votes
0answers
4 views

SMIME cannot assigned in iOS [migrated]

I can send encrypted and signed e-mails from Thunderbird and Outlook eMail Client. I can also decrypt and verify the emails. The problem is that on iOS I can't enable assign my certificates. In ...
2
votes
0answers
44 views

How to use backup EFS certificate to decrypt encrypted files?

I have some files that were encrypted on a now extinct Windows 7 system. I made sure to backup my keys, this one is called efs.pfx. Double-clicking it launches the Certificate Import Wizard which ...
0
votes
0answers
61 views

VirtualBox fails to start on Windows Server 2003

For reasons I cannot disclose, I need to install a Linux server within a VirtualBox host running in Windows Server 2003. Unfortunately, VirtualBox fails to start, giving me an error that seems to ...
3
votes
1answer
26 views

Get RSA private key and certificate from GlobalSign certificate

I can generate my own private key and certificate as follows: openssl genrsa -out privatekey.pem 2048 openssl req -new -x509 -key privatekey.pem -out g4certificate.pem -days 1095 Copy+pasting the ...
0
votes
0answers
21 views

Chrome (on Windows) stopped showing certificate selection dialog

I have several certificates that I need to use on a certain web site. At a certain point, Chrome stopped showing the certificate selection dialog, and started automatically selecting the certificate I ...
1
vote
0answers
15 views

Extract Certificate Information automatically [migrated]

In my current setting I have 16 production servers and another 16 to 20 on Dev and QA servers. I also have a lot of certificates in them. We are trying to inventory everything so that we dont miss out ...
1
vote
1answer
47 views

ASN1 Structure Admission Syntax

I want to add the Admission Extension to my Certificate. Therefor i use the Tool XCA, which uses OpenSSL to create the certificates. This is my structre i wrote with some dummy Data: ...
0
votes
0answers
31 views

Why am i still getting certificate errors from outlook even though i have added the certificate to the trusted root certification store

Ok so to connect to our exchange server at work we have two options internally we use the server name "server-name" and that works externally we have to use OWA by visiting "https ...
4
votes
1answer
41 views

How to install a self-signed certificate in chromium under Debian

I have a web server that uses https protocol. I want to create a self signed certificate so I did the following: Issued this command: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ...
-2
votes
0answers
18 views

How do I make a cert and key file?

I am writing a python program using ssl for the first time. I am wanting my program to send info to and back from the client in an encrypted manner. I was following the example for server-side code ...
0
votes
0answers
18 views

App can't find requried certificates when runs under SYSTEM

My app seeks for its required certificates in the windows certificate store (LocalMachine/TrustedPeople). The certificates were imported under Administrator account. The app runs fine until I start it ...
1
vote
0answers
17 views

What are null certificates in Gnome Seahorse?

In the "Default Trust" tab in Seahorse there are several personal certificates named simply "(null)", which are issued by "No name". There's nothing on their property pages. What are these? Can they ...
1
vote
1answer
82 views

Add to “My certificates” in Keychain Access? (Mac OS 10.10)

I have a certificate file like this: -----BEGIN CERTIFICATE----- MIIHCDCCBPC .... I can get it to show up under "Certificates" by going to "File->import items" (it is the "Elin" one). I can ...
0
votes
1answer
22 views

How can I get the list of the currently installed certificate authority on my ubuntu?

If I'm correct, the list of CA can be found in /etc/ssl/certs/ca-certificates.crt, but that's only the certificates. My question is how can I get the name of those CA ? I want to know if the CA my ...
0
votes
0answers
47 views

Install Tomcat SSL cert in CUCM signed by CA created through openssl

My problem looks like this. I want to install a Tomcat certificate in CUCM signed by CA created by me which exists in my ubuntu operating system.This is what I thought the steps should be: Generate ...
0
votes
0answers
16 views

Windows Certificates - Publish CRL on ARR as CDP & impacts

In order to have DirectAccess working, I planned to publish our CRL via HTTP (https is possible but it's a IIS configuration side). Now, our CRL is only published via LDAP. So if I planned to add a ...
0
votes
1answer
22 views

Deleted “broken” certificate in OS X, need help to fix it

I experienced the Mavericks security update that broke one or more trusted root CAs. At the time I couldn't find any info on this, and in my infinite wisdom (and looming deadline) I tried deleting the ...
0
votes
0answers
47 views

Configuring Chrome to Ignore or Accept Specific Untrusted Certificates

There are various personal websites and LAN addresses which I access through https. Obviously they're mine so they can be trusted, but since they all deploy a self-signed certificate, Chrome displays ...
-1
votes
0answers
13 views

Creating a valid cert from a signed one?

Okay, so apparently it is not possible to create (valid) self signed certs using a certificate that has been signed by a trusted CA. These two questions on SU make this clear. The thing is, there is ...
1
vote
2answers
47 views

Personal digital certificate for Adobe Acrobat Reader

Often, I receive PDF documents that make use of Adobe Acrobat's functionality for digital signatures. I can sign those PDFs with a self-signed certificate, but then Adobe Acrobat Reader shows a ...
0
votes
0answers
26 views

Exchange 2010 certificate missing after completing “Pending certificate signing request!”

After going through the New certificate procedure, creating and importing the .cer file the new certificate simply vanishes. The same issue applies when I try the same on an Exchange 2013 server. ...
0
votes
1answer
55 views

Configuring Chrome to Ignore SSL Warning on Specific Addresses

I guess there no need to introduce the "Privacy error" page in Chrome that appears whenever one uses SSL to access an uncertified website that has no signed certificate (red "X" on the lock icon). ...
0
votes
1answer
168 views

Google Chrome gives “SHA1 for message authentication” with new GeoTrust certificates

I purchased the GeoTrust QuickSSL Premium certificate from ssls.com and installed it on my web server which is running Linux Apache on CentOS 6.5. Google Chrome on Windows 7 said "The connection ...
1
vote
0answers
36 views

All the System Root certificates are untrusted in Mavericks

I have a OS X 10.9.5 (Mavericks) in which all the certificates in System Root are being shown as un-trusted. List of all available trusted certificates in OS X Due to this I cannot open websites or ...
2
votes
0answers
18 views

Multi-factor authentication to 2012 RDS farm, preferably client certs?

Wonder if anybody can give me a steer on this. We use RDS quite heavily but I would like to enhance the security of it, VPN is an option but I would prefer to avoid if possible. Ideally what I'd ...
2
votes
1answer
28 views

Lets encrypt on a server with multiple websites?

I read the website for let's encrypt, to get it to work you: $ sudo apt-get install lets-encrypt $ lets-encrypt example.com But what if I am on a server hosting example.com, example1.com, ...
1
vote
0answers
22 views

is it possible to use certificates on windows firewall?

Scenario: I have a situation where I work from home. I need to connect to a database server on the internet. The server has whitelist rules for IP addresses on firewall. My IP address changes ...
0
votes
0answers
18 views

heroku behind proxy using ca certificate

Heroku has a clear howto on setting up the client when one's machine is behind a proxy. However, it assumes there is no authentication involved. I also found another howto that used proxychains to ...
0
votes
1answer
23 views

Update certificate in Outlook contacts

How can I update an encryption security in Outlook contacts? I got an email signed with an updated certificate by someone who is already in my contacts with an expired certificate. If I REPLY to ...
-1
votes
2answers
79 views

Website security certificate page not shown

I access an https:// blackberry website for administration with two different pc, on pc1 appear the security certificate webpage where i can choose to close the webpage or continue (not recommended); ...
2
votes
0answers
46 views

SSL issue: The private key did not match the public key provided

I followed the instructions outlined here by amazon. A quick summary: Created a private key openssl genrsa -out my-private-key.pem 2048 Created a CSRopenssl req -sha256 -new -key ...
1
vote
2answers
141 views

Disable Chrome from checking SSL certificates completely

I have to enter a website that has an invalid certificate and I can't because Chrome won't let me (to protect me, how hilarious!). I don't want or need to be protected, so I just want to completely ...
0
votes
0answers
39 views

radius authentication os x server and client certificate

I configured a Mac mini with OS X v10.10 and OS X Server, and an AirPort Extreme. The Wi-Fi network is WPA2 Enterprise, and the server provides RADIUS authentication service. I want the client ...
0
votes
0answers
30 views

How do I manage trust exceptions in Firefox?

Through the course of using Firefox over the years, I've had to manually trust certificates for a number of HTTPS sites for various reasons. I'm trying to find a way to view the list of these sites, ...
3
votes
1answer
100 views

Apache serves an old SSL certificate

I'm hosting a webpage with Apache on a Raspberry Pi (Debian), and can't seem to get the server to issue the current certificate. I generated a self-signed SSL certificate in /home/pi/ssl/ with: ...
0
votes
1answer
140 views

Securing Remote Desktop Connections With SSL Certificate From a Trusted Certificate Authority

Currently I'm using a desktop machine running Windows 7 Ultimate x64. Also have configured it to enable remote connections using MS Remote Desktop Services (RDS); however, since the machine issues its ...
0
votes
0answers
43 views

Java 8 build 45 expired certificate

The Java cert on my old hardware (Dell DS2161-2) IS EXPIRED (last month) and Java is trolling me with "security". I've tried adding it and variations there of to the exception list, but that doesn't ...
0
votes
2answers
78 views

How to solve certificate issue for internal URL in Chrome

When entering the following internal URL (changed a bit for privacy) in Chrome: https://pms/WebClient/CRMclient.aspx I get Chrome's message for a certificate mismatch: This is probably not the ...
0
votes
1answer
67 views

Certification Authority migration - cannot install Web Enrollment role

I used this to migrate a certificate authority my root CA from a Win2003 AD server oldserver to a Win2008R2 member server newserver (with different name). After completing this task, I wanted to ...
0
votes
1answer
386 views

Roundcube, php 5.6 and self-signed certificates

I am currently porting one of my servers to another. That server is running Postfix + Dovecot using a self-signed certificate. My web-frontend used to be roundcube. Now is the problem, that the new ...
0
votes
0answers
131 views

Get OS X Chrome to accept self-signed SSL certificate for localhost

I've been trying to get this working all day, and I have a strong feeling that my issue is specific to Yosemite. I'm running OS X 10.10.3 on a retina Macbook Pro. I took instructions from ...
0
votes
0answers
16 views

X509 certificate that can only be installed on a particular machine

Is it possible to create a certificate that will not install on a machine other than its intended one? (Using some hardware fingerprint embedded into the cert?) Or alternatively, is there a way to ...
4
votes
0answers
122 views

Same version of Chrome, two different behavior regarding sha1 deprecation

i'm well aware of the changes made to Chrome 42 and sha1 signed certificates. Here a short reminder : https://blog.filippo.io/the-unofficial-chrome-sha1-faq/ Our client reported this problem and ...
2
votes
1answer
53 views

Why can't I verify this certificate chain?

I have three certificates in a chain: root.pem intermediate.pem john.pem When I examine them using openssl x509 -in [filename] -text -noout they look fine, root.pem looks like it is self-signed ...
0
votes
0answers
82 views

Java app certificate Issue

I have an app called Tata Docomo Get.I downloaded it from the website on my java phone then Its showing no valid certificate.So I downloaded the app on pc I have two files of this app .jar and ...
0
votes
0answers
33 views

Non-domain log forwarding certificate types

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps. It states that ...