Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

0
votes
1answer
21 views

MMC - Certificates Snap-In

When I go on a particular server (Win2k8 R2) and add the Certificate snap-in I get prompted to select which account (my user, service or computer) will manage the snap-in. I have used this snap-in ...
1
vote
0answers
37 views

How can I verify on download that a site's SSL cert is for a host I trust?

Generally I want to be able to make an HTTPS connection to a site, and while negotiating the SSL check that: The cert is in every way valid for the host listed on the cert (unexpired, signed by ...
0
votes
1answer
47 views

Not getting prompted for certificate in IE8

I am unable to connect to a local intranet server using IE8. This server issues an unsigned certificate. When using IE8, it returns "Internet Explorer cannot display the webpage" instead of "there ...
0
votes
1answer
56 views

What's the quickest way on a Windows machine to look at the detail of a p12 certificate?

Given P12 certificate file on Windows, what's the quickest way to see the details such as common name? Say i have a file mycertificate.p12, ideally I'm looking for a command line tool that I can run ...
1
vote
1answer
50 views

Microsoft Word Digital Signature Error: We can't read the signature please contact your help desk

I create and sign my document in Word 2013 but sometimes when I open the document and check the signature I get the error message: We can't read the signature. Please contact your help desk. In the ...
1
vote
0answers
67 views

Java keyTool - append primary/secondary intermediate certificates to key store

I have already created a keystore (server.jks in the image) having imported the relevant key-pair. keytool -importkeystore -srckeystore server.p12 -destkeystore server.jks -srcstoretype pkcs12 I ...
0
votes
1answer
8k views

Identifying program attempting to install certificate on windows

I'm trying to help a friend using Windows (which I'm not an expert on by any means) who's experiencing malware-like behavior: a dialog box is repeatedly popping up reading: You are about to ...
1
vote
1answer
1k views

Why 'This Connection is Untrusted' for practically every site on Mozilla Firefox?

This started a couple of months ago and pops up for just about every site, including Google, Macy's, DSW, Outlook.com, etc. These are all regularly visited sites so there should be no problem. There ...
0
votes
0answers
36 views

How to manage and delete EFS certificate properly?

I've done my best to make this question as short and as precise as possible INTRODUCTION: After configuring EFS service trough group policy to encrypt my testing files I exported the ...
0
votes
1answer
41 views

How can I update a clean install of Acrobat Professional 8.0.0 to the latest version?

When I do a clean install of Acrobat Pro 8.0.0 on my system and attempt to check for updates from the help menu I get an error about "unable to check for updates for Adobe Updater". Adobe provides ...
0
votes
1answer
88 views

How to install a certificate automatically

I would like to know how to generate a certificate and make it to be imported automatically to all main browser (chrome, firefox, ie etc...). Should I upload this certificate to a public CA or ...
2
votes
1answer
33 views

Windows - service account default certificate store

I am writing a web app that connects to external web services. The external web services serve an intermediate certificate signed by Thawte SGC CA - G2. When I setup IIS to run the web app using ...
0
votes
2answers
47 views

Searching for digital certificate on hard drive and reusing it

Years ago I had to use a digital certificate for access to some web based application at college. It was provided by the "laboratory" where we used it. Presently it so happened that I will need to use ...
1
vote
0answers
30 views

Is there a way to quickly disable all root certificates in Windows 7?

I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click Properties and selecting "Disable all ...
0
votes
0answers
74 views

Pip SSL certificates fail with sudo but not in su

When I pip install, I can download the package, but I have a failure in writing to files that are only accessible with privileged access. This is expected behavior. When I sudo pip install, I have an ...
3
votes
2answers
65 views

Is it normal for a hosting service to require that I buy a public IPv4 for using my own $25 certificate?

Self explanatory title, I guess. I'd love to have my website in https only, but they (the web hosting service) claim in the administration that I need to buy a public IPv4 address from them before ...
0
votes
1answer
52 views

Microsoft CA Certificate Request

I am new to MS CA and I have recently installed a MS CA setup on a VM. I used the web service provided "http://test.server.name.tld/certsrv" to request a certificate. I approved my test certificate ...
0
votes
1answer
52 views

Same certificate for encryption for different To:-addresses

When I write a mail and click on encrypt in message options, how can I tell outlook to use the same certificate when writing to two different mail addresses of the same person? In my case, the ...
9
votes
2answers
1k views

how to use curl to verify if a site's certificate has been revoked?

To check if the certificate for google.com has been revoked, I tried the following command: curl https://www.google.com --cacert GeoTrust_Global_CA.pem --crlfile gtglobal.pem -v , but I got the ...
1
vote
2answers
294 views

s_client not failing on revoked certifcate?

I'm running Firefox with with the EFF's HTTPS Everywhere. I recently visited Lavabit's site to see if its accepting donations: The revocation is expected considering the history.... However, I'm ...
1
vote
0answers
26 views

Microsoft Digital Signature Expiration in Active Directory

We have a large number of users on our network that need to sign forms digitally from time to time with Microsoft digital signatures that are set up to expire each year. Some of our users however are ...
0
votes
0answers
41 views

export certificate with private key

I would like to backup my startcom certificate on this machine but I need to also export the private key with it, the problem is in the certificate manager the option also export private key is greyed ...
0
votes
0answers
36 views

Exchange 2010 Certificate Renewal

I am still learning how to configure Exchange 2010, so I hope that you can help me on some topics. The certificate for mail.xxxxxx.com has expired. The previous IT guy had OWA set up on the server, ...
0
votes
2answers
90 views

heartbleed are CA private keys compromised?

have any CA private keys such as those used by godaddy to issue private/public key pairs compromised as a result of heartbleed?
4
votes
2answers
356 views

How do I distinguish between these two certificate situations?

Situation 1 (safe): Website was vulnerable to heartbleed and using a certificate not valid before 2012-10-21 Website upgraded to an unvulnerable version of OpenSSL Website re-keyed and got a their ...
3
votes
1answer
3k views

Does Heartbleed Bug in OpenSSL affect ALL SSL certs

Does the Heartbleed Bug in OpenSSL affect ALL SSL certs, regardless of where I purchased or if I self-cert? For example, if I bought an SSL certificate from GoDaddy and set this up on my server ...
6
votes
5answers
9k views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access ...
0
votes
0answers
116 views

Blocking a trusted certificate in Google Chrome

Is it possible to somehow block a certain certificate that is currently trusted by my browser? The reason is the recently discovered Heartbleed-attack which I also found out to affect my netbanking ...
0
votes
1answer
358 views

OpenSSL CA keyUsage extension

I want to set up a chain of certificates, with a self signed 'root' CA at the top that signs sub CAs, which can then sign client and server certificates. When setting up openssl.cnf, I noticed a ...
0
votes
0answers
24 views

Github Access SSL Error

On Max OSX 10.9, I am unable to authenticate any HTTPS site without a certificate warning. Many disucssions have mentioned the duplication of a DigiCert in login and system settings. I have no ...
0
votes
1answer
153 views

Verifying Certificate using Mac Terminal

In Mac Terminal, we can use the command security to do many things related to certificates. I'm trying to know how to verify a certificate using this command. I wrote security verify-cert [.pem ...
1
vote
1answer
54 views

Does Apple Server 3.0 MDM really require an APNs certificate?

A while back I set up an MDM server on our Apple Server running 10.9.2. The server is running Server 3.0.3 and I have several test Macs and iOS being managed by the server. The only certificate I ...
0
votes
0answers
118 views

Invalid SSL certificates after system restore on Windows 7

I just recovered my Windows 7 system after a crash using startup repair. It seems Windows has restored to a previous point. The problem was HDD related after some software uninstaller started creating ...
1
vote
1answer
33 views

Is there a program to check the list of root CAs in Firefox?

Motivated by this and this question, I'd like to ask if there is a way to check if additional certificates have been maliciously added to the list of root CAs of Firefox. Possible ways could be: an ...
1
vote
1answer
201 views

Is it safe to add an untrusted certificate to Trusted Root Certification Authorities?

Before I access the internet at work I have to sign-on to their system. The sign-on page is ipass.swu.ac.th. Unfortunately the security certificate they use appears as not trusted (in Chrome). I have ...
0
votes
0answers
78 views

SSL failure on Auzre web farm with shared configuration and centralized certificates

[Sorry if this question is a bit long, there's lot of extra info in case it is relavent] Overview I'm having a problem with SSL on a 4 VM's load balanced farm in Azure. If the HTTPS request goes to ...
0
votes
0answers
28 views

How to i store S/MIME certificates in openldap?

I have an openldap running with default schemas (it's a test environment, inside virtualbox on a turnkey linux openldap appliance) Basically it's openldap 2.4.31 with a front end install web gui. ...
0
votes
1answer
65 views

How to update CRL automatically?

I have the following issue: I have a self-signed CA (certificate authority) mainly for persoanl use (mail encryption and signing, ...). I created several ceertificates and the CRLs (which are empty ...
1
vote
1answer
2k views

pip and SSL certificate errors

I am trying to install a library via pip. I have a problem with SSL certificate, even when using the --cert. Trying this on windows (pip version 1.5.4,python version 2.7.6): pip --cert ...
1
vote
0answers
34 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
0
votes
0answers
23 views

My self signed certificates do not have organisation

I use the command openssl s_client -connect myServer.myCompany.be:2500 -showcerts > myServer.pem # it also works if you remove all but the base64 encoded key # and its surrounding comments If I ...
7
votes
1answer
171 views

What Trusted Root Certification Authorities should I trust?

After two recent Slashdot articles (#1 #2) about questionable Root Certificates installed on machines, I decided to take a closer look at what I have installed on my machines. (I use current versions ...
6
votes
1answer
419 views

Certificate Patrol for Chrome?

Is there a chrome-version of the firefox add-on certificate patrol? Notifying me about a certificate change without actually loading the page would be optimal, but it sure would be useful even if the ...
0
votes
0answers
50 views

How to generate a P12 file, based on the key and PEM certificate?

I would like to generate a P12 file from the key and the PEM version of an iPhone developer certificate. Is there a GUI based tool available for Windows XP?
1
vote
1answer
802 views

RDP client does not consider smart card as valid for authentication

I have: A Windows 7 client machine. I am not Administrator for that machine. A Windows 2008R2 server, on which I want to open a session using Remote Desktop. A Remote Desktop Gateway, also running ...
-4
votes
1answer
26 views

Web Server Certificate’s private key and Certificate Authority’s private key?

What could a malicious attacker do with a Web Server Certificate’s private key? What could a malicious attacker do with a Certificate Authority’s private key?
0
votes
1answer
43 views

What details would you view in a certificate to check if it is trustworthy?

I have a question need help: What details would you view in a certificate to check if it is a trustworthy website?
0
votes
0answers
74 views

Publish public key issued by general CA to PGP server

Some people in our company use PGP Desktop, but this is not mandatory. Personally I have not installed it on my work PC because that software is crappy and clunky. Now I got a general e-mail ...
0
votes
0answers
44 views

Windows 7 grab PEAP certificate after connecting to network for Ubuntu

So at my university I have a small problem, I am going to see them tomorrow however if I can get it sorted out before that, that we be great My university has a PEAP authentication type with ...
1
vote
1answer
171 views

Chrome still shows red cross “https://” even with valid certificate

This happens on one of my users Mac laptop running ML or Mavericks. When she accesses https://www.somewebsite.com using either Chrome or Safari, she always got the warning related to the certificate ...