Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

3
votes
1answer
3k views

Does Heartbleed Bug in OpenSSL affect ALL SSL certs

Does the Heartbleed Bug in OpenSSL affect ALL SSL certs, regardless of where I purchased or if I self-cert? For example, if I bought an SSL certificate from GoDaddy and set this up on my server ...
6
votes
5answers
12k views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access ...
0
votes
0answers
136 views

Blocking a trusted certificate in Google Chrome

Is it possible to somehow block a certain certificate that is currently trusted by my browser? The reason is the recently discovered Heartbleed-attack which I also found out to affect my netbanking ...
0
votes
1answer
1k views

OpenSSL CA keyUsage extension

I want to set up a chain of certificates, with a self signed 'root' CA at the top that signs sub CAs, which can then sign client and server certificates. When setting up openssl.cnf, I noticed a ...
0
votes
0answers
26 views

Github Access SSL Error

On Max OSX 10.9, I am unable to authenticate any HTTPS site without a certificate warning. Many disucssions have mentioned the duplication of a DigiCert in login and system settings. I have no ...
0
votes
1answer
489 views

Verifying Certificate using Mac Terminal

In Mac Terminal, we can use the command security to do many things related to certificates. I'm trying to know how to verify a certificate using this command. I wrote security verify-cert [.pem ...
1
vote
1answer
85 views

Does Apple Server 3.0 MDM really require an APNs certificate?

A while back I set up an MDM server on our Apple Server running 10.9.2. The server is running Server 3.0.3 and I have several test Macs and iOS being managed by the server. The only certificate I ...
1
vote
1answer
42 views

Is there a program to check the list of root CAs in Firefox?

Motivated by this and this question, I'd like to ask if there is a way to check if additional certificates have been maliciously added to the list of root CAs of Firefox. Possible ways could be: an ...
1
vote
1answer
345 views

Is it safe to add an untrusted certificate to Trusted Root Certification Authorities?

Before I access the internet at work I have to sign-on to their system. The sign-on page is ipass.swu.ac.th. Unfortunately the security certificate they use appears as not trusted (in Chrome). I have ...
0
votes
0answers
121 views

SSL failure on Auzre web farm with shared configuration and centralized certificates

[Sorry if this question is a bit long, there's lot of extra info in case it is relavent] Overview I'm having a problem with SSL on a 4 VM's load balanced farm in Azure. If the HTTPS request goes to ...
0
votes
1answer
105 views

How to update CRL automatically?

I have the following issue: I have a self-signed CA (certificate authority) mainly for persoanl use (mail encryption and signing, ...). I created several ceertificates and the CRLs (which are empty ...
2
votes
1answer
3k views

pip and SSL certificate errors

I am trying to install a library via pip. I have a problem with SSL certificate, even when using the --cert. Trying this on windows (pip version 1.5.4,python version 2.7.6): pip --cert ...
1
vote
0answers
45 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
7
votes
1answer
393 views

What Trusted Root Certification Authorities should I trust?

After two recent Slashdot articles (#1 #2) about questionable Root Certificates installed on machines, I decided to take a closer look at what I have installed on my machines. (I use current versions ...
0
votes
0answers
112 views

How to generate a P12 file, based on the key and PEM certificate?

I would like to generate a P12 file from the key and the PEM version of an iPhone developer certificate. Is there a GUI based tool available for Windows XP?
1
vote
1answer
1k views

RDP client does not consider smart card as valid for authentication

I have: A Windows 7 client machine. I am not Administrator for that machine. A Windows 2008R2 server, on which I want to open a session using Remote Desktop. A Remote Desktop Gateway, also running ...
-4
votes
1answer
27 views

Web Server Certificate’s private key and Certificate Authority’s private key?

What could a malicious attacker do with a Web Server Certificate’s private key? What could a malicious attacker do with a Certificate Authority’s private key?
0
votes
1answer
46 views

What details would you view in a certificate to check if it is trustworthy?

I have a question need help: What details would you view in a certificate to check if it is a trustworthy website?
1
vote
1answer
287 views

Chrome still shows red cross “https://” even with valid certificate

This happens on one of my users Mac laptop running ML or Mavericks. When she accesses https://www.somewebsite.com using either Chrome or Safari, she always got the warning related to the certificate ...
1
vote
2answers
189 views

Removing one of two certificates with equal nicknames

I have two certificates installed: kirrun@kirNote ~ [1197]% certutil -d sql:/home/kirrun/.pki/nssdb -L Certificate Nickname Trust Attributes ...
1
vote
2answers
1k views

Install SSL certificate from an untrusted website into the Certificates snap-in using IE

How can I install a certificate from an untrusted website into the Certificates snap-in (certmgr.msc) of Windows? I know how to do this with Firefox by exporting to a file and then importing it, ...
1
vote
1answer
44 views

User name for an existing SSH certificate?

On a Jenkins server, there are two pairs SSH private and public keys in the ~/.ssh/ directory which apparently are both used to authenticate with the same external server. However, I don't know which ...
0
votes
1answer
203 views

How to make Google Chrome not to check system clock or certificates at all?

How to make Google Chrome not to check system clock? I want to switch back my system clock and still can access to gmail etc.
1
vote
0answers
324 views

How to develop a Chrome extension that overrides SSL certificate error for self-signed certificate? [closed]

The process of adding a self signed certificate to the list of trusted certificates in Chrome is manual and tedious. I frequently access a trusted website that uses a self-signed certificate. As I am ...
0
votes
1answer
112 views

How do I bypass this since I know the site is good

This Connection is Untrusted You have asked Firefox to connect securely to xhopsportal.sys.comcast.net, but we can't confirm that your connection is secure. Normally, when you try to connect ...
1
vote
2answers
134 views

Can I sign code with a website SSL certificate?

I have an SSL certificate installed and working on my web server. On another project I need to sign some code. Can I use the website SSL certificate to sign code, or is a code-signing certificate ...
0
votes
1answer
90 views

How to install a DER binary encoded, GOST R 34.10-2001 root certificate (.crt) on Mac?

I would like to install this certificate on my Mac running OSX 10.9.1. I've downloaded it, but when I double click, keychain is opened and that is it. Can not install it with command line also: ...
5
votes
2answers
3k views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
0
votes
3answers
6k views

How can I disable security alerts for self-signed certificates in Outlook 2010?

I've just switched from using unencrypted SMTP and IMAP for mail in Outlook 2010. My mail is hosted on a shared hosting setup and not my own, dedicated server. The certificate issued by the server is ...
1
vote
1answer
508 views

Import PGP key to windows user for SSIS

I have used Kleopatra to generate a pgp key. In SQL Server I am running an SSIS package that should decrypt files using the above key. The SSIS packages runs as ImportFiles which has the identity of ...
1
vote
0answers
182 views

Backup EFS encryption key generated, but no encrypted files? Track what caused the key creation

In I started getting a weird message "Encrypting file system - Back up your file encryption key" a user experiences a prompt that I also experienced yesterday for the first time. Now the ...
0
votes
1answer
46 views

How to avoid having users enroll for multiple certificates?

I am the domain administrator of my company. Recently one of my clients has re-installed his Windows and received a new certificate from CA, but the key pair of certificate is not same with previous ...
5
votes
3answers
2k views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
0
votes
1answer
933 views

In the context of using RADIUS for WPA2 enterprise, what does a “client certificate” mean, if anything?

I'm trying to set up a RADIUS server for WPA2 enterprise authentication. I'm new to all this. I understand that the server has a "server certificate", which I assume plays a role similar to that ...
0
votes
0answers
2k views

Win XP - “Windows Was Unable To Find A Certificate To Log You On To The Network”

A friend of mine has an old Toshiba Satellite laptop. I just re-installed XP on it and I am trying to get the computer online via WIFI (WPA-PSK / AES). When I try to connect I get the following ...
0
votes
1answer
57 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
1
vote
0answers
271 views

S/MIME email Public Certificate?

Is there a way to create a public certificate for a S/MIME email certificate? I would like to share the public key on my website so people can send me encrypted emails. However I can only find ...
2
votes
1answer
836 views

Incorrect Authority Key Identifier on openssl end cert

I'm getting interesting results when signing an end-server certificate using an intermediate CA using openssl. I have a Root CA which looks like this: Serial Number: 14296918985177649921 ...
2
votes
1answer
2k views

List installed personal certificates in command line

I use a few secure websites that require me to install a PFX certificate to access them. I have multiple computers I do this from, and I need a quick way of determining which ones in which I still ...
2
votes
1answer
62 views

Will the browser ask the Certificate Authorities each time I visit some HTTPS?

I have basic ideas of how asymmetric encryption works. I as to HTTPS, all articles makes me confusing. I want to know: Will the browser ask the Certificate Authorities each time I visit some ...
0
votes
0answers
177 views

When loading Hotmail from Windows 8 icon, I receive an error about its digital certificates

When I try to load Hotmail using the desktop icon on a newly installed Windows 8 PC, I receive this error. "We couldn't connect to myname@hotmail.com because of a problem with its digital ...
2
votes
1answer
5k views

Every website is showing untrusted certificate warning on all browsers

I'm on windows 7. Every website is showing untrusted security warning. I tried every browser that I have. I tried using https. This is extremely odd, it never happened before, well it could happen ...
1
vote
0answers
104 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
0
votes
1answer
374 views

Signature validation based on the XMLSec standard

I've run into issues verifying the signature of an XML file based on the XMLSec standard. I'm running: xmlsec1 1.2.19 (openssl) Here's the certificate used for validation: wget -O cert.pem ...
1
vote
0answers
515 views

Unable to continue after certificate error i IE

I am on a closed HP ILO network, and I am trying to access the web interface (https) of a HP c7000 Onboard Administrator (though I do not believe this is an issue specific to the equipment) through ...
2
votes
0answers
148 views

Bogus Chrome Installer?

Just a few days ago I tried to download Chrome (using IE 11) to a new Windows 7 system. I examined the certificate for the Chrome installer (clicking on the highlighted Google Inc. next to ...
0
votes
1answer
3k views

openssl pkcs12 keeps removing the PEM passphrase from keystore's entry?

OpenSSL 1.0.1e 11 Feb 2013 Generating a self-signed certificate: openssl req -x509 -newkey rsa:1024 -keyout key.pem -out cert.pem -days 365 During the process a PEM passphrase is ...
0
votes
1answer
426 views

How to dump the Subject Alternative Name (SAN) from an SSL certificate file

I know that I can dump the entire information from a PEM certificate file with this command: openssl x509 -in certfile -noout -text And I've already found another direct parameter to show me only ...
0
votes
0answers
670 views

How to make Firefox remember a self signed certificate is trusted

I'm using some private server with a self-signed certificate for https connections. Firefox 25.0 warns me about the certificate being untrusted every time. For some reason, I can't make it remember ...
1
vote
0answers
60 views

can UAC prevent reading a certficate?

Weird question with, hopefully, a short answer. I have this application running on windows 7 that calls a webservice through a .NET DLL. To be able to do that it needs to read some certificates, ...