Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

3
votes
0answers
6k views

OpenVPN AUTH failure, but login data is correct

I installed OpenVPN on both windows 7 and ubuntu 12.10. In both cases I have the same problem. I have a .ovpn file and a .crt file which I need to connect to the vpn. I also have a username/password ...
2
votes
0answers
63 views

Windows 2012 R2 CA - certsrv missing templates field

Has anybody come across an issue where the certificate templates field is not available in the CA menu, http://localhost/certsrv/certrqxt.asp? What it should look like is: Has anybody any idea ...
2
votes
0answers
41 views

Multi-factor authentication to 2012 RDS farm, preferably client certs?

Wonder if anybody can give me a steer on this. We use RDS quite heavily but I would like to enhance the security of it, VPN is an option but I would prefer to avoid if possible. Ideally what I'd ...
2
votes
0answers
366 views

SSL issue: The private key did not match the public key provided

I followed the instructions outlined here by amazon. A quick summary: Created a private key openssl genrsa -out my-private-key.pem 2048 Created a CSRopenssl req -sha256 -new -key ...
2
votes
0answers
234 views

nginx http to https proxy with self-signed certificate

I have an nginx proxy to redirect http requests with a specified port to another https url. Here is my configuration so far: server { listen 59848; location / { resolver 8.8.8.8; ...
2
votes
0answers
223 views

How can I sign an MS Word macro with a digital certificate from the local machine certificate store?

I am trying to find out how I can digitally sign a Microsoft Word macro using a valid 3rd party CA issued VBA code-signing certificate that is installed into the machine rather than the user ...
2
votes
0answers
265 views

Change Windows 7 RDP host certificate expiration date

My Windows 7 desktop computer uses a self-signed certificate to identify its RDP host. So to prevent a man-in-the-middle attack, I have to manually verify the thumbprint the first time my RDP client ...
2
votes
0answers
166 views

Bogus Chrome Installer?

Just a few days ago I tried to download Chrome (using IE 11) to a new Windows 7 system. I examined the certificate for the Chrome installer (clicking on the highlighted Google Inc. next to ...
2
votes
0answers
1k views

Chrome ignores some imported certificates

On Windows 7 with Chrome 30. I have a few websites running on localhost over SSL. Visiting them always displays the standard "The site's security certificate is not trusted!" message from Chrome. I ...
2
votes
0answers
389 views

Setup Ubuntu L2TP VPN server and authenticate users with certificates

I am trying to setup an L2TP server on my Ubuntu VPS and use certificates to authenticate users rather than a password. The reason behind this choice is that I don't want to have plain text passwords ...
2
votes
0answers
4k views

Disable SSL hostname check in Chrome

How I disable SSL certificate error when CN does not match DNS name in Chrome? In IE, this is done by Tools -> Internet Options -> Advanced (tab) -> Scroll down to section "Security" -> checkbox: ...
1
vote
0answers
31 views

Setting up secure email on Thunderbird

I'm trying to set Thunderbird up to send/receive encrypted emails. Here is a screenshot from the screen where you can select certificates: However, it doesn't really explain the difference between ...
1
vote
0answers
35 views

For STIG Findings, Installation of Microsoft Visual C++ 2010 Runtime Librares failed

On a isolated Windows 7 SP1 machine, with the following registry entry for Users is set to 0x00010000(65536) fails the installation of the Microsoft Visual C++ 2010 Runtime Libraries ...
1
vote
0answers
37 views

MacOSX Server accessed from Screen Sharing not allowing to change Access Control

I have a Mac Mini working as a build server for my iOS apps. However, the XCode Server daemon runs with special permissions, that requires certificates to be added in the System keychain. In order ...
1
vote
0answers
83 views

certmgr.exe does not work expectedly in command line mode?

I'm trying to run the MSDN's sample about WCF basic message security using Certificate. In the setup.bat file, there is this line of command: certmgr.exe -add -r LocalMachine -s My -c -n ...
1
vote
0answers
65 views

Bypass the certificate warning pages in Chrome for a specific URL

I manage an Aruba access point virtual controller cluster and when I visit the local management URL by IP (no DNS involved) over the local network using Chrome I get these two warning pages that I ...
1
vote
0answers
90 views

What are null certificates in Gnome Seahorse?

In the "Default Trust" tab in Seahorse there are several personal certificates named simply "(null)", which are issued by "No name". There's nothing on their property pages. What are these? Can they ...
1
vote
0answers
22 views

is it possible to use certificates on windows firewall?

Scenario: I have a situation where I work from home. I need to connect to a database server on the internet. The server has whitelist rules for IP addresses on firewall. My IP address changes ...
1
vote
0answers
934 views

Get OS X Chrome to accept self-signed SSL certificate for localhost

I've been trying to get this working all day, and I have a strong feeling that my issue is specific to Yosemite. I'm running OS X 10.10.3 on a retina Macbook Pro. I took instructions from ...
1
vote
0answers
215 views

Outlook not updating certificate

Outlook is refusing to send an encrypted email to a recipient whose certificate recently expired. The recipient sent a signed email and I exported the certificate to a ".cer" file then updated their ...
1
vote
0answers
35 views

How to get the organization name from a .p12 certificate?

I have a .p12 certificate and I need to find out the organization name of it. How to do that? (I'm using Windows 8.1)
1
vote
0answers
438 views

How to use .pfx in certificate store in CURL for Windows 7

I want to use cURL to access a remote server, and I need to identify myself using a private key or the remote server gives a 401 "Unauthorized". I'm on Windows 7 (work machine, not my choice) and my ...
1
vote
0answers
67 views

Windows (partially) claims I have a private key for a foreign certificate

We have a MS Word document template with vba code produced and signed by an external firm. When I view the details of the signing certificate from within Word vba developer tools, it shows up with ...
1
vote
0answers
338 views

Convert whole .pem Certificate to hexadecimal

I want to convert a whole pem-Certificate in hexadecimal. I tried it with: openssl x509 -modulus -noout < cert.pem| sed s/Modulus=/0x/ I'n not sure about it, if this is the right way to do. Am I? ...
1
vote
0answers
114 views

(Chrome on) Windows 8 complains certificate not yet valid

Chrome on Windows 8 complains that a server certificate is not yet valid. Chrome on Linux does not complain though, and Firefox on the same Windows 8 machine does not complain either. The certificate ...
1
vote
0answers
56 views

How can I verify on download that a site's SSL cert is for a host I trust?

Generally I want to be able to make an HTTPS connection to a site, and while negotiating the SSL check that: The cert is in every way valid for the host listed on the cert (unexpired, signed by ...
1
vote
0answers
217 views

Java keyTool - append primary/secondary intermediate certificates to key store

I have already created a keystore (server.jks in the image) having imported the relevant key-pair. keytool -importkeystore -srckeystore server.p12 -destkeystore server.jks -srcstoretype pkcs12 I ...
1
vote
0answers
58 views

Is there a way to quickly disable all root certificates in Windows 7?

I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click Properties and selecting "Disable all ...
1
vote
0answers
97 views

Microsoft Digital Signature Expiration in Active Directory

We have a large number of users on our network that need to sign forms digitally from time to time with Microsoft digital signatures that are set up to expire each year. Some of our users however are ...
1
vote
0answers
63 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
1
vote
0answers
228 views

Backup EFS encryption key generated, but no encrypted files? Track what caused the key creation

In I started getting a weird message "Encrypting file system - Back up your file encryption key" a user experiences a prompt that I also experienced yesterday for the first time. Now the ...
1
vote
0answers
458 views

S/MIME email Public Certificate?

Is there a way to create a public certificate for a S/MIME email certificate? I would like to share the public key on my website so people can send me encrypted emails. However I can only find ...
1
vote
0answers
164 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
1
vote
0answers
919 views

Unable to continue after certificate error i IE

I am on a closed HP ILO network, and I am trying to access the web interface (https) of a HP c7000 Onboard Administrator (though I do not believe this is an issue specific to the equipment) through ...
1
vote
0answers
69 views

can UAC prevent reading a certficate?

Weird question with, hopefully, a short answer. I have this application running on windows 7 that calls a webservice through a .NET DLL. To be able to do that it needs to read some certificates, ...
1
vote
0answers
59 views

How to only accept certificates issued by user-specified CA per domain?

Question Is it possible in Chromium or Firefox to only accept SSL certificates issued by a user-specified CA for a specific domain? Background When you have set up your own certificate authority ...
1
vote
0answers
140 views

Windows Event Forwarding between two computer out of a domain

I've got two computers and I want to set up event forwarding between them. Source computer is out of a domain, another is in some Domain. I tried to configure source initiated event subscrption but it ...
1
vote
0answers
121 views

Mac: Certificate expiration date is not consistent

In the Expires column of the Keychain Access application I can see the expiration date of certificates. Strangely these dates do not match the actual expiration. See below for an example. This ...
1
vote
0answers
1k views

Certificates in Iceweasel

I'm trying to make a backup of a certificate which is imported to iceweasel. So i#m following the steps Edit->Prereferences->Advanced->Encryption->View Certificates. Then I choose my certificate, and ...
1
vote
0answers
817 views

Revocation information not available for certificate?

I'm trying to download SQL Server 2008 R2 Enterprise Edition from MSDNAA on my Windows 7 laptop. When I attempted to start the download, I was shown the following prompt: Revocation Information ...
1
vote
0answers
490 views

Preventing Internet Explorer from “remembering” an old SSL certificate

A website I'm using has switched recently from a GoDaddy SSL certifcate to a StartCom certificate, which works fine in most cases. The original GoDaddy certificate expired last year. However, in ...
1
vote
0answers
219 views

Can I install a localized certificate authority in Windows XP?

We are a division of a much larger organization and this organization uses Novell domain authentication. The entire division uses Windows XP. We'd like to implement digital signing of our Office ...
1
vote
0answers
226 views

Creating Certificate and KeyValue

I'm quite new to the whole certificate-thing so I hope you can help me out. I need to create a self-signed X509Certificate2 certificate and a get the dependent KeyValue for my project. What is the ...
1
vote
0answers
738 views

IE8 and certificate issues following Service Pack 1 install on Windows 7

When trying to open Internet Explorer 8 under a different user account, I get the following error: There is a problem with this website's security certificate. I found this post which describes ...
1
vote
0answers
1k views

How to I make a Windows certificate exportable?

I'm looking for a tool or solution that would allow me make a certificate that is marked as non-exportable to be exportable. I am aware about Jailbreak tool but because the tool does not fully ...
0
votes
0answers
5 views

Mac OS X “Verify Certificate” every time connecting to secure wireless

Every time connecting to the secure wireless, Macs are getting a prompt to verify the certificate: Verify Certificate Authenticating to network "Network-Name" Before authenticating to ...
0
votes
0answers
13 views

How can I automatically import a certificate to a Windows GPO?

I'm looking for a way to import a root certificate into a specific active directory group policy object. I've tried certutil -dspublish but that would only publish it to a global AD store. How can I ...
0
votes
0answers
12 views

Self-signed root CA certificate on OSX does not authenticate own-signed certificates

I have a Vault server configured with TLS running on a vault.dev machine. The certificate for vault.dev is signed by a self-signed root CA. I have two client machines: Debian and OSX, both separate ...
0
votes
0answers
13 views

win server 2012 r2 - change existing certificats private key to NOT exportable

I set up my own PKI. everything is working fine until the point that I realize that my subCAs certificate has an exportable private key. My rootCA is a debian machine and the subCA is a win server ...
0
votes
0answers
18 views

no certificate found in safari

I have a problem where our certificate is not visible (I'll get to more details after explaining the problem), in Safari. I get it working on Chrome and Firefox. The OS I am using for testing is OS X ...