Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

0
votes
0answers
43 views

How to enumerate and list the details of all certificates held by service accounts on local machine

On my Windows 7 Pro system, I can launch certmgr.msc to view the certificates that are under my user account. To view the certificates that are under the computer account, I will have to do something ...
0
votes
1answer
644 views

PHP CURL SSL CA cert (path? access rights?)

Curl through php is constantly complaining about Problem with the SSL CA cert (path? access rights?). This all happend after trying to fix another problem with curl ssl with pem cert chain not ...
0
votes
0answers
40 views

Importing/Deleting certificate in pkcs12 keystore using openssl

I have a pkcs12 keystore (keystore.p12). I am about to update an expired public key in it. So I have to delete the expired key first and import new certificate. But I could not find a proper way to ...
0
votes
0answers
93 views

How can I view the certificate for a connection blocked because of HSTS?

I'm trying to open a website in Firefox 42.0, but I get a warning about an invalid certificate. As in this question, the website has an HSTS (HTTP Strict Transport Security) policy, which means that ...
1
vote
0answers
77 views

Setting up secure email on Thunderbird

I'm trying to set Thunderbird up to send/receive encrypted emails. Here is a screenshot from the screen where you can select certificates: However, it doesn't really explain the difference between ...
2
votes
1answer
2k views

Microsoft Edge: how to bypass certificate error?

I'm trying to access an intranet server under HTTPS, whose certificate has been autogenerated. With other browsers (IE, Firefox, Chrome, etc.) I have the option to ignore this error and to somehow "go ...
1
vote
2answers
133 views

Is it possible to have a certificate signed by 2 authorities?

To explain the situation a bit: I'm building an iOS application that uses SSL pinning. I've created a self-signed certificate authority that issues SSL certificates to my web server, and the CA's ...
0
votes
1answer
69 views

Fetching Private Key Bytes from Windows Certificate Store

I have an PFX Certificate file containing both Client Certificate and Private Key. Then I have imported this pfx file in Windows Personal Certificate Store. Now I need to extract the certificate and ...
0
votes
0answers
21 views

How to login on a personal Windows system with password and certificate?

Ive been wondering if there's a way I can login in my personal machine (Windows 8.1 Pro x64) with an user-input password and a certificate on a common USB thumb drive. My idea is to, when I want to ...
0
votes
0answers
20 views

Airwatch and APNs integration

I have a problem about Airwatch MDM solution and APN's certificate. I use Airwatch MDM to manage my iPAD device (vers. iOS 7.1). I think to have correctly download and then upload .pem certificate on ...
0
votes
1answer
180 views

How to create SSL certificate with multiple DNS entries, signed with my own CA certificate

I need help creating SSL certificate with multiple subjectAltNames, signed with my own selfbrewed CA certificate. What I need: I'm on OSX 10.10.5 I have myCA.cer which I use to sign another SSL ...
0
votes
1answer
542 views

generating certificate keys for OpenVPN in Windows

I was looking into setting up OpenVPN on Windows... I've never done this before and was reading through their documentation and installation tutorials.. As in the newest realease, easy-rsa is not ...
2
votes
1answer
662 views

VeriSign Universal Root Certification Authority missing

I'm attempting to visit https://www.duluthtrading.com/, and I'm receiving an untrusted certificate error on Windows 7. This happens in both IE and Chrome (as both use the Windows certificate store). ...
0
votes
0answers
30 views

HTTPS client “pairing”

I need to restrict usage of a certain site to a limited number of customers. More than that, actually: I would like to allow access from a restricted number of physical devices (Win + Android). This ...
0
votes
0answers
31 views

Iceweasel thinks my client certificate is a server certificate; Chromium thinks it's an “other” certificate

I have a client certificate from StartCom. I recently reinstalled my OS and have to re-add the client certificate to Iceweasel in order to gain access to the control panel. I have a backup of the ...
0
votes
0answers
74 views

How to Disassociate a Certificate and InfoPath Form Name?

A strong named key was created: sn -k MyKeyName.snk An InfoPath form has a C# project. The InfoPath form is opened and the code is accessed by clicking Developer > Code Editor. In VS, the project ...
2
votes
0answers
114 views

Windows 2012 R2 CA - certsrv missing templates field

Has anybody come across an issue where the certificate templates field is not available in the CA menu, http://localhost/certsrv/certrqxt.asp? What it should look like is: Has anybody any idea ...
0
votes
2answers
2k views

Firefox experiences a sec_error_unknown_issuer error for every HTTPS connection

When I attempt to connect to any site that uses an HTTPS connection (e.g. https://www.google.com), I get a 'This Connection is Untrusted' error. I'm using FF 42.0. I followed the instructions in the ...
0
votes
1answer
214 views

openssl : How to create .pem file with private key, associated public certificate, and certificate chain all the way to the root certificate?

For test purposes (i.e. all self signed, not production), how would I use openssl to create a PEM file which contains the private key, the associated public certificate, and the certificate chain all ...
-1
votes
1answer
441 views

Jenkins using JNLP behind nginx SSL reverse proxy

I'd like to use JNLP to connect jenkins slaves to jenkins master. The master is running behind an SSL nginx proxy set up according to official documentation. Beyond this documentation I run into ...
0
votes
0answers
25 views

Can't connect to websites that have obsolete or no certificates, DD-WRT

I have a TP-Link router in which I installed DD-WRT. To use it with my ISP's router, I connect things like this: The problem is that, even though I am able to access the internet and search in ...
2
votes
2answers
2k views

How to add Let's Encrypt to the Java allowed certificates?

I have recently switched to Let's Encrypt Private Beta for several of my domain names, and as a consequence several of my Java programs have stopped working because the certificate is not in the trust ...
4
votes
1answer
370 views

How did Symantec get a certificate on my laptop?

I just bought a Dell Inspiron 5559 and I immediately proceeded to switch the hard drive for a fast SSD and install Windows 10 Pro from an ISO downloaded from Microsoft. Since almost everything is ...
1
vote
1answer
128 views

Find and delete duplicate root certificates

We are in a disconnected domain and have just implemented updated root certificates via group policy. I have found now though, that there are a number of duplicated root certificates in the users ...
3
votes
1answer
196 views

How to always allow insecure connection for a certain url in chrome?

For internal usage, we have a system using a self-signed insecure SSL certificate, making Chrome warn me on each session: Your connection is not private Attackers might be trying to steal ...
0
votes
0answers
83 views

For STIG Findings, Installation of Microsoft Visual C++ 2010 Runtime Librares failed

On a isolated Windows 7 SP1 machine, with the following registry entry for Users is set to 0x00010000(65536) fails the installation of the Microsoft Visual C++ 2010 Runtime Libraries \Software\...
0
votes
1answer
34 views

Microsoft Certificate Store

I know that Microsoft Certificate store contains certificates with their corresponding private key. Now when using Microsoft certificate store, do we have to create it ? If yes then how ? or we get it ...
1
vote
0answers
70 views

MacOSX Server accessed from Screen Sharing not allowing to change Access Control

I have a Mac Mini working as a build server for my iOS apps. However, the XCode Server daemon runs with special permissions, that requires certificates to be added in the System keychain. In order ...
0
votes
1answer
52 views

Google domain name HTTPS errors on single router only

Every time I browse to google.com or my local google (google.com.sg), I get an HTTPS error which on Chrome is ERR_CERT_COMMON_NAME_INVALID. The certificate that is returned appears to be for the ...
0
votes
0answers
25 views

Install SSL certificate on Plesk 12 using my CSR

I have purchased a SSL certificate for one of my domains, I have done it so by generating the CSR using a osx console. Now I want to install the certificate on the Plesk 12 control panel but it doesn'...
0
votes
1answer
53 views

Storing and retrieving certificate chains using openssl

Following this question I managed to create a number of certificates in a hierarchy of root, intermediate and end certificates: # Create root RSA key pair of 1024 bits as well as a certificate ...
1
vote
0answers
224 views

certmgr.exe does not work expectedly in command line mode?

I'm trying to run the MSDN's sample about WCF basic message security using Certificate. In the setup.bat file, there is this line of command: certmgr.exe -add -r LocalMachine -s My -c -n %SERVER_NAME%...
1
vote
2answers
295 views

Outlook refuses to send email with non-matching address in cert

I am unable to send an encrypted email to someone for whom I have a valid certificate, but they recently moved to a new company. Outlook is refusing to encrypt the email because the email address ...
0
votes
0answers
15 views

Outlook does not add contact with cert with mismatched email address

I am unable to add a contact in Outlook 2013 with a certificate because the email address in the certificate is different than the person's email address. I get the following dialog box: Even if I ...
0
votes
0answers
75 views

Local site with IIS Express Development Certificate takes long to connect

I'm running a local site with an IIS Express Development Certificate: When I use Chrome to connect to my local site https://www.example.com the Chrome taskbar keeps showing connecting...: Only ...
0
votes
0answers
71 views

Configure SSL on Amazon RDS

I would like to force all users to connect to my Amazon RDS instance via SSL, otherwise the connection should not be established. I believe I have enabled SSL on the RDS instance which can be ...
0
votes
0answers
76 views

How to use multiple servers with same username in Microsoft cert store?

I have multiple OpenVPN servers. All servers are on the same machine, each running on its own port. All servers have different keys and I use the same username with different user keys on all servers. ...
0
votes
0answers
125 views

sign keytool generated cert/key pairs using easy-rsa openvpn intermediate CA

I am creating root and intermediate CA with easy-rsa using ./build-ca & ./build-inter commands consecutively. Now, I want my root ca as offline and I want my certs/keys signed by intermediate CA. ...
0
votes
0answers
102 views

certificate invalid issue on a Mac OS X using chrome

I am trying to access a website on chrome on a Mac OS X where it shows me the error that the certificate is invalid and the connection is insecure. However, I can access the same website using chrome ...
0
votes
0answers
48 views

Where are digital certificates physically stored on Unix / Linux

Can someone tell me and maybe link to literature which describes it, where are the digital certificates storage location on a Unix / Linux machine? I only know that they are stored under /etc/ssl/...
1
vote
2answers
598 views

svn not accepting https/ssl certificate

When bettercodes.org disappeared in September, I moved my private repo over to https://subversion.assembla.com/. It's working great, except for the fact that I have to temporarily accept the ...
0
votes
0answers
22 views

Making Cassandra work with certs/keys generated by OpenSSL instead of keytool

I saw this in the Cassandra documentation: http://docs.datastax.com/en/cassandra/2.1/cassandra/security/secureSSLCertificates_t.html I found this line "SSL certificates must be generated using ...
-1
votes
1answer
71 views

Configure LDAP over TLS to make connection be secure

I configured OpenLDAP and today I've configured the TLS for more security following these guide dn: cn=config changetype: modify add: olcTLSCACertificateFile olcTLSCACertificateFile: /etc/openldap/...
3
votes
1answer
4k views

Where are digital certificates physically stored on a Mac OS X machine?

Can someone tell me and maybe link to literature which describes it, where are the digital certificates storage location on Mac OS X? I know I could access the certificates with the “Keychain” ...
0
votes
0answers
17 views

Difference between JKS file and client certificates

I am accessing my partner URL using httpS. I was able to download the client certificates from Browser itself. However i got to know that it is not enough for us only to have the client certificates ...
2
votes
1answer
26 views

Difference between SSL certificates showing with name in browser bar and without

I noticed Chrome shows the owner of a SSL-certificate only in some cases in the adressbar. What is the difference between these types of certificates. Here is an example: With company Without ...
0
votes
0answers
93 views

How do I force Firefox and Chrome to use HSTS and a pinned certificate for a specific port on localhost?

I am wanting to use the browser-based notebook interface of Sage, a computer algebra system. Before I can do this I need to ensure that neither remote nor local privilege escalation is possible. To ...
0
votes
0answers
52 views

Cannot install Certification Authority Web Enrollment role WS 2012

I have just been trying to get a CA going on my home server so I can start issuing myself certificates to use on internal stuff and to secure the connection to my mail server, but every time I try to ...
0
votes
0answers
30 views

Generate key encipherment and sign certificates

Can someone please direct me to a document or advice on how to generate two individual certificates with key usages, "key encipherment" and "digital signature" using OpenSSL ? As far as i understand ...
0
votes
0answers
124 views

Deadlock when adding untrusted certificate to keychain running MS Remote Desktop Client on Mac OS X 10.10.5

I am experiencing a strange, frustrating, and seemingly nondeterministic issue using the MS RDP client on Mac OS X 10.10.5. Here are the steps to reproduce the issue: Open Microsoft Remote Desktop ...