Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

1
vote
3answers
7k views

Why 'This Connection is Untrusted' for practically every site on Mozilla Firefox?

This started a couple of months ago and pops up for just about every site, including Google, Macy's, DSW, Outlook.com, etc. These are all regularly visited sites so there should be no problem. There ...
0
votes
0answers
133 views

How to manage and delete EFS certificate properly?

I've done my best to make this question as short and as precise as possible INTRODUCTION: After configuring EFS service trough group policy to encrypt my testing files I exported the ...
0
votes
1answer
258 views

How can I update a clean install of Acrobat Professional 8.0.0 to the latest version?

When I do a clean install of Acrobat Pro 8.0.0 on my system and attempt to check for updates from the help menu I get an error about "unable to check for updates for Adobe Updater". Adobe provides ...
0
votes
1answer
138 views

How to install a certificate automatically

I would like to know how to generate a certificate and make it to be imported automatically to all main browser (chrome, firefox, ie etc...). Should I upload this certificate to a public CA or ...
2
votes
1answer
74 views

Windows - service account default certificate store

I am writing a web app that connects to external web services. The external web services serve an intermediate certificate signed by Thawte SGC CA - G2. When I setup IIS to run the web app using ...
0
votes
2answers
75 views

Searching for digital certificate on hard drive and reusing it

Years ago I had to use a digital certificate for access to some web based application at college. It was provided by the "laboratory" where we used it. Presently it so happened that I will need to use ...
1
vote
0answers
47 views

Is there a way to quickly disable all root certificates in Windows 7?

I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click Properties and selecting "Disable all ...
3
votes
2answers
75 views

Is it normal for a hosting service to require that I buy a public IPv4 for using my own $25 certificate?

Self explanatory title, I guess. I'd love to have my website in https only, but they (the web hosting service) claim in the administration that I need to buy a public IPv4 address from them before ...
0
votes
1answer
63 views

Microsoft CA Certificate Request

I am new to MS CA and I have recently installed a MS CA setup on a VM. I used the web service provided "http://test.server.name.tld/certsrv" to request a certificate. I approved my test certificate ...
0
votes
1answer
77 views

Same certificate for encryption for different To:-addresses

When I write a mail and click on encrypt in message options, how can I tell outlook to use the same certificate when writing to two different mail addresses of the same person? In my case, the ...
10
votes
2answers
6k views

how to use curl to verify if a site's certificate has been revoked?

To check if the certificate for google.com has been revoked, I tried the following command: curl https://www.google.com --cacert GeoTrust_Global_CA.pem --crlfile gtglobal.pem -v , but I got the ...
1
vote
2answers
732 views

s_client not failing on revoked certifcate?

I'm running Firefox with with the EFF's HTTPS Everywhere. I recently visited Lavabit's site to see if its accepting donations: The revocation is expected considering the history.... However, I'm ...
1
vote
0answers
53 views

Microsoft Digital Signature Expiration in Active Directory

We have a large number of users on our network that need to sign forms digitally from time to time with Microsoft digital signatures that are set up to expire each year. Some of our users however are ...
0
votes
1answer
74 views

Exchange 2010 Certificate Renewal

I am still learning how to configure Exchange 2010, so I hope that you can help me on some topics. The certificate for mail.xxxxxx.com has expired. The previous IT guy had OWA set up on the server, ...
0
votes
2answers
100 views

heartbleed are CA private keys compromised?

have any CA private keys such as those used by godaddy to issue private/public key pairs compromised as a result of heartbleed?
4
votes
2answers
362 views

How do I distinguish between these two certificate situations?

Situation 1 (safe): Website was vulnerable to heartbleed and using a certificate not valid before 2012-10-21 Website upgraded to an unvulnerable version of OpenSSL Website re-keyed and got a their ...
3
votes
1answer
3k views

Does Heartbleed Bug in OpenSSL affect ALL SSL certs

Does the Heartbleed Bug in OpenSSL affect ALL SSL certs, regardless of where I purchased or if I self-cert? For example, if I bought an SSL certificate from GoDaddy and set this up on my server ...
6
votes
5answers
12k views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access ...
0
votes
0answers
139 views

Blocking a trusted certificate in Google Chrome

Is it possible to somehow block a certain certificate that is currently trusted by my browser? The reason is the recently discovered Heartbleed-attack which I also found out to affect my netbanking ...
0
votes
1answer
1k views

OpenSSL CA keyUsage extension

I want to set up a chain of certificates, with a self signed 'root' CA at the top that signs sub CAs, which can then sign client and server certificates. When setting up openssl.cnf, I noticed a ...
0
votes
1answer
567 views

Verifying Certificate using Mac Terminal

In Mac Terminal, we can use the command security to do many things related to certificates. I'm trying to know how to verify a certificate using this command. I wrote security verify-cert [.pem ...
1
vote
1answer
89 views

Does Apple Server 3.0 MDM really require an APNs certificate?

A while back I set up an MDM server on our Apple Server running 10.9.2. The server is running Server 3.0.3 and I have several test Macs and iOS being managed by the server. The only certificate I ...
1
vote
1answer
43 views

Is there a program to check the list of root CAs in Firefox?

Motivated by this and this question, I'd like to ask if there is a way to check if additional certificates have been maliciously added to the list of root CAs of Firefox. Possible ways could be: an ...
1
vote
1answer
373 views

Is it safe to add an untrusted certificate to Trusted Root Certification Authorities?

Before I access the internet at work I have to sign-on to their system. The sign-on page is ipass.swu.ac.th. Unfortunately the security certificate they use appears as not trusted (in Chrome). I have ...
0
votes
0answers
128 views

SSL failure on Auzre web farm with shared configuration and centralized certificates

[Sorry if this question is a bit long, there's lot of extra info in case it is relavent] Overview I'm having a problem with SSL on a 4 VM's load balanced farm in Azure. If the HTTPS request goes to ...
0
votes
1answer
117 views

How to update CRL automatically?

I have the following issue: I have a self-signed CA (certificate authority) mainly for persoanl use (mail encryption and signing, ...). I created several ceertificates and the CRLs (which are empty ...
2
votes
1answer
3k views

pip and SSL certificate errors

I am trying to install a library via pip. I have a problem with SSL certificate, even when using the --cert. Trying this on windows (pip version 1.5.4,python version 2.7.6): pip --cert ...
1
vote
0answers
45 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
7
votes
1answer
419 views

What Trusted Root Certification Authorities should I trust?

After two recent Slashdot articles (#1 #2) about questionable Root Certificates installed on machines, I decided to take a closer look at what I have installed on my machines. (I use current versions ...
0
votes
1answer
117 views

How to generate a P12 file, based on the key and PEM certificate?

I would like to generate a P12 file from the key and the PEM version of an iPhone developer certificate. Is there a GUI based tool available for Windows XP?
1
vote
1answer
2k views

RDP client does not consider smart card as valid for authentication

I have: A Windows 7 client machine. I am not Administrator for that machine. A Windows 2008R2 server, on which I want to open a session using Remote Desktop. A Remote Desktop Gateway, also running ...
-4
votes
1answer
27 views

Web Server Certificate’s private key and Certificate Authority’s private key?

What could a malicious attacker do with a Web Server Certificate’s private key? What could a malicious attacker do with a Certificate Authority’s private key?
0
votes
1answer
46 views

What details would you view in a certificate to check if it is trustworthy?

I have a question need help: What details would you view in a certificate to check if it is a trustworthy website?
1
vote
1answer
368 views

Chrome still shows red cross “https://” even with valid certificate

This happens on one of my users Mac laptop running ML or Mavericks. When she accesses https://www.somewebsite.com using either Chrome or Safari, she always got the warning related to the certificate ...
1
vote
2answers
233 views

Removing one of two certificates with equal nicknames

I have two certificates installed: kirrun@kirNote ~ [1197]% certutil -d sql:/home/kirrun/.pki/nssdb -L Certificate Nickname Trust Attributes ...
1
vote
2answers
2k views

Install SSL certificate from an untrusted website into the Certificates snap-in using IE

How can I install a certificate from an untrusted website into the Certificates snap-in (certmgr.msc) of Windows? I know how to do this with Firefox by exporting to a file and then importing it, ...
1
vote
1answer
45 views

User name for an existing SSH certificate?

On a Jenkins server, there are two pairs SSH private and public keys in the ~/.ssh/ directory which apparently are both used to authenticate with the same external server. However, I don't know which ...
0
votes
1answer
261 views

How to make Google Chrome not to check system clock or certificates at all?

How to make Google Chrome not to check system clock? I want to switch back my system clock and still can access to gmail etc.
1
vote
0answers
351 views

How to develop a Chrome extension that overrides SSL certificate error for self-signed certificate? [closed]

The process of adding a self signed certificate to the list of trusted certificates in Chrome is manual and tedious. I frequently access a trusted website that uses a self-signed certificate. As I am ...
0
votes
1answer
117 views

How do I bypass this since I know the site is good

This Connection is Untrusted You have asked Firefox to connect securely to xhopsportal.sys.comcast.net, but we can't confirm that your connection is secure. Normally, when you try to connect ...
1
vote
2answers
140 views

Can I sign code with a website SSL certificate?

I have an SSL certificate installed and working on my web server. On another project I need to sign some code. Can I use the website SSL certificate to sign code, or is a code-signing certificate ...
0
votes
1answer
96 views

How to install a DER binary encoded, GOST R 34.10-2001 root certificate (.crt) on Mac?

I would like to install this certificate on my Mac running OSX 10.9.1. I've downloaded it, but when I double click, keychain is opened and that is it. Can not install it with command line also: ...
5
votes
2answers
3k views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
0
votes
3answers
7k views

How can I disable security alerts for self-signed certificates in Outlook 2010?

I've just switched from using unencrypted SMTP and IMAP for mail in Outlook 2010. My mail is hosted on a shared hosting setup and not my own, dedicated server. The certificate issued by the server is ...
1
vote
1answer
538 views

Import PGP key to windows user for SSIS

I have used Kleopatra to generate a pgp key. In SQL Server I am running an SSIS package that should decrypt files using the above key. The SSIS packages runs as ImportFiles which has the identity of ...
1
vote
0answers
186 views

Backup EFS encryption key generated, but no encrypted files? Track what caused the key creation

In I started getting a weird message "Encrypting file system - Back up your file encryption key" a user experiences a prompt that I also experienced yesterday for the first time. Now the ...
0
votes
1answer
50 views

How to avoid having users enroll for multiple certificates?

I am the domain administrator of my company. Recently one of my clients has re-installed his Windows and received a new certificate from CA, but the key pair of certificate is not same with previous ...
5
votes
3answers
2k views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
0
votes
1answer
977 views

In the context of using RADIUS for WPA2 enterprise, what does a “client certificate” mean, if anything?

I'm trying to set up a RADIUS server for WPA2 enterprise authentication. I'm new to all this. I understand that the server has a "server certificate", which I assume plays a role similar to that ...
0
votes
0answers
2k views

Win XP - “Windows Was Unable To Find A Certificate To Log You On To The Network”

A friend of mine has an old Toshiba Satellite laptop. I just re-installed XP on it and I am trying to get the computer online via WIFI (WPA-PSK / AES). When I try to connect I get the following ...