Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

3
votes
3answers
5k views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access ...
0
votes
0answers
110 views

Blocking a trusted certificate in Google Chrome

Is it possible to somehow block a certain certificate that is currently trusted by my browser? The reason is the recently discovered Heartbleed-attack which I also found out to affect my netbanking ...
0
votes
1answer
119 views

OpenSSL CA keyUsage extension

I want to set up a chain of certificates, with a self signed 'root' CA at the top that signs sub CAs, which can then sign client and server certificates. When setting up openssl.cnf, I noticed a ...
0
votes
0answers
15 views

Github Access SSL Error

On Max OSX 10.9, I am unable to authenticate any HTTPS site without a certificate warning. Many disucssions have mentioned the duplication of a DigiCert in login and system settings. I have no ...
0
votes
1answer
104 views

Verifying Certificate using Mac Terminal

In Mac Terminal, we can use the command security to do many things related to certificates. I'm trying to know how to verify a certificate using this command. I wrote security verify-cert [.pem ...
1
vote
1answer
40 views

Does Apple Server 3.0 MDM really require an APNs certificate?

A while back I set up an MDM server on our Apple Server running 10.9.2. The server is running Server 3.0.3 and I have several test Macs and iOS being managed by the server. The only certificate I ...
0
votes
0answers
85 views

Invalid SSL certificates after system restore on Windows 7

I just recovered my Windows 7 system after a crash using startup repair. It seems Windows has restored to a previous point. The problem was HDD related after some software uninstaller started creating ...
1
vote
1answer
29 views

Is there a program to check the list of root CAs in Firefox?

Motivated by this and this question, I'd like to ask if there is a way to check if additional certificates have been maliciously added to the list of root CAs of Firefox. Possible ways could be: an ...
1
vote
1answer
139 views

Is it safe to add an untrusted certificate to Trusted Root Certification Authorities?

Before I access the internet at work I have to sign-on to their system. The sign-on page is ipass.swu.ac.th. Unfortunately the security certificate they use appears as not trusted (in Chrome). I have ...
0
votes
0answers
60 views

SSL failure on Auzre web farm with shared configuration and centralized certificates

[Sorry if this question is a bit long, there's lot of extra info in case it is relavent] Overview I'm having a problem with SSL on a 4 VM's load balanced farm in Azure. If the HTTPS request goes to ...
0
votes
0answers
19 views

How to i store S/MIME certificates in openldap?

I have an openldap running with default schemas (it's a test environment, inside virtualbox on a turnkey linux openldap appliance) Basically it's openldap 2.4.31 with a front end install web gui. ...
0
votes
1answer
48 views

How to update CRL automatically?

I have the following issue: I have a self-signed CA (certificate authority) mainly for persoanl use (mail encryption and signing, ...). I created several ceertificates and the CRLs (which are empty ...
0
votes
1answer
790 views

pip and SSL certificate errors

I am trying to install a library via pip. I have a problem with SSL certificate, even when using the --cert. Trying this on windows (pip version 1.5.4,python version 2.7.6): pip --cert ...
1
vote
0answers
24 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
0
votes
0answers
22 views

My self signed certificates do not have organisation

I use the command openssl s_client -connect myServer.myCompany.be:2500 -showcerts > myServer.pem # it also works if you remove all but the base64 encoded key # and its surrounding comments If I ...
7
votes
1answer
133 views

What Trusted Root Certification Authorities should I trust?

After two recent Slashdot articles (#1 #2) about questionable Root Certificates installed on machines, I decided to take a closer look at what I have installed on my machines. (I use current versions ...
4
votes
1answer
339 views

Certificate Patrol for Chrome?

Is there a chrome-version of the firefox add-on certificate patrol? Notifying me about a certificate change without actually loading the page would be optimal, but it sure would be useful even if the ...
0
votes
0answers
34 views

How to generate a P12 file, based on the key and PEM certificate?

I would like to generate a P12 file from the key and the PEM version of an iPhone developer certificate. Is there a GUI based tool available for Windows XP?
1
vote
1answer
599 views

RDP client does not consider smart card as valid for authentication

I have: A Windows 7 client machine. I am not Administrator for that machine. A Windows 2008R2 server, on which I want to open a session using Remote Desktop. A Remote Desktop Gateway, also running ...
-4
votes
1answer
26 views

Web Server Certificate’s private key and Certificate Authority’s private key?

What could a malicious attacker do with a Web Server Certificate’s private key? What could a malicious attacker do with a Certificate Authority’s private key?
0
votes
1answer
41 views

What details would you view in a certificate to check if it is trustworthy?

I have a question need help: What details would you view in a certificate to check if it is a trustworthy website?
0
votes
0answers
58 views

Publish public key issued by general CA to PGP server

Some people in our company use PGP Desktop, but this is not mandatory. Personally I have not installed it on my work PC because that software is crappy and clunky. Now I got a general e-mail ...
0
votes
0answers
39 views

Windows 7 grab PEAP certificate after connecting to network for Ubuntu

So at my university I have a small problem, I am going to see them tomorrow however if I can get it sorted out before that, that we be great My university has a PEAP authentication type with ...
1
vote
1answer
134 views

Chrome still shows red cross “https://” even with valid certificate

This happens on one of my users Mac laptop running ML or Mavericks. When she accesses https://www.somewebsite.com using either Chrome or Safari, she always got the warning related to the certificate ...
1
vote
2answers
79 views

Removing one of two certificates with equal nicknames

I have two certificates installed: kirrun@kirNote ~ [1197]% certutil -d sql:/home/kirrun/.pki/nssdb -L Certificate Nickname Trust Attributes ...
0
votes
0answers
23 views

Unable to verify certificate when already trusted CA

I built my own CA, and add the CA certificate (cacert.crt) to my Mac OS X computer. Also, I use this CA signed another certificate to use as WPA2 enterprise authentication. When I connected to the ...
0
votes
2answers
138 views

Install SSL certificate from an untrusted website into the Certificates snap-in using IE

How can I install a certificate from an untrusted website into the Certificates snap-in (certmgr.msc) of Windows? I know how to do this with Firefox by exporting to a file and then importing it, ...
1
vote
1answer
40 views

User name for an existing SSH certificate?

On a Jenkins server, there are two pairs SSH private and public keys in the ~/.ssh/ directory which apparently are both used to authenticate with the same external server. However, I don't know which ...
0
votes
1answer
123 views

How to make Google Chrome not to check system clock or certificates at all?

How to make Google Chrome not to check system clock? I want to switch back my system clock and still can access to gmail etc.
1
vote
0answers
155 views

How to develop a Chrome extension that overrides SSL certificate error for self-signed certificate?

The process of adding a self signed certificate to the list of trusted certificates in Chrome is manual and tedious. I frequently access a trusted website that uses a self-signed certificate. As I am ...
0
votes
1answer
58 views

How do I bypass this since I know the site is good

This Connection is Untrusted You have asked Firefox to connect securely to xhopsportal.sys.comcast.net, but we can't confirm that your connection is secure. Normally, when you try to connect ...
1
vote
2answers
108 views

Can I sign code with a website SSL certificate?

I have an SSL certificate installed and working on my web server. On another project I need to sign some code. Can I use the website SSL certificate to sign code, or is a code-signing certificate ...
0
votes
1answer
49 views

How to install a DER binary encoded, GOST R 34.10-2001 root certificate (.crt) on Mac?

I would like to install this certificate on my Mac running OSX 10.9.1. I've downloaded it, but when I double click, keychain is opened and that is it. Can not install it with command line also: ...
5
votes
2answers
755 views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
1
vote
1answer
256 views

Import PGP key to windows user for SSIS

I have used Kleopatra to generate a pgp key. In SQL Server I am running an SSIS package that should decrypt files using the above key. The SSIS packages runs as ImportFiles which has the identity of ...
0
votes
0answers
39 views

Extract certificates and private keys from Windows XP drive

I have a PC that was upgraded from Windows XP to 7 by installing 7 on a new disk and keeping the original disk as a data drive. This worked fine, but I have since realised (too late) that I need to ...
0
votes
0answers
136 views

Got requests.exceptions.SSLError error when running googleplay-api

I want to share my experience on the problem, so this is sort of a self-answered question. Hope it helps. I'm trying to use googleplay-api to download apks from Google Play. My network environment ...
1
vote
0answers
84 views

Backup EFS encryption key generated, but no encrypted files? Track what caused the key creation

In I started getting a weird message "Encrypting file system - Back up your file encryption key" a user experiences a prompt that I also experienced yesterday for the first time. Now the ...
0
votes
0answers
34 views

How to avoid having users enroll for multiple certificates?

I am the domain administrator of my company. Recently one of my clients has re-installed his Windows and received a new certificate from CA, but the key pair of certificate is not same with previous ...
0
votes
0answers
60 views

Windows 7 keytool alternative

Is there a key and certificate manager similar to keytool which I can use on Windows 7? I'll be needing the key for generating signatures and using certificates to interact with a web service.
4
votes
2answers
449 views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
0
votes
1answer
535 views

In the context of using RADIUS for WPA2 enterprise, what does a “client certificate” mean, if anything?

I'm trying to set up a RADIUS server for WPA2 enterprise authentication. I'm new to all this. I understand that the server has a "server certificate", which I assume plays a role similar to that ...
0
votes
0answers
18 views

How do I manage localMachine certificates?

I need to see all of the certificates installed on my machine. So, I pulled up certmgr, but that doesn't open the store for the machine, only for the current user. So, I tried certmgr /s /r ...
0
votes
0answers
733 views

Win XP - “Windows Was Unable To Find A Certificate To Log You On To The Network”

A friend of mine has an old Toshiba Satellite laptop. I just re-installed XP on it and I am trying to get the computer online via WIFI (WPA-PSK / AES). When I try to connect I get the following ...
0
votes
1answer
47 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
1
vote
0answers
117 views

S/MIME email Public Certificate?

Is there a way to create a public certificate for a S/MIME email certificate? I would like to share the public key on my website so people can send me encrypted emails. However I can only find ...
2
votes
1answer
308 views

Incorrect Authority Key Identifier on openssl end cert

I'm getting interesting results when signing an end-server certificate using an intermediate CA using openssl. I have a Root CA which looks like this: Serial Number: 14296918985177649921 ...
1
vote
1answer
857 views

List installed personal certificates in command line

I use a few secure websites that require me to install a PFX certificate to access them. I have multiple computers I do this from, and I need a quick way of determining which ones in which I still ...
2
votes
1answer
48 views

Will the browser ask the Certificate Authorities each time I visit some HTTPS?

I have basic ideas of how asymmetric encryption works. I as to HTTPS, all articles makes me confusing. I want to know: Will the browser ask the Certificate Authorities each time I visit some ...
0
votes
0answers
89 views

When loading Hotmail from Windows 8 icon, I receive an error about its digital certificates

When I try to load Hotmail using the desktop icon on a newly installed Windows 8 PC, I receive this error. "We couldn't connect to myname@hotmail.com because of a problem with its digital ...