Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

6
votes
2answers
1k views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
0
votes
1answer
778 views

In the context of using RADIUS for WPA2 enterprise, what does a “client certificate” mean, if anything?

I'm trying to set up a RADIUS server for WPA2 enterprise authentication. I'm new to all this. I understand that the server has a "server certificate", which I assume plays a role similar to that ...
0
votes
0answers
23 views

How do I manage localMachine certificates?

I need to see all of the certificates installed on my machine. So, I pulled up certmgr, but that doesn't open the store for the machine, only for the current user. So, I tried certmgr /s /r ...
0
votes
0answers
1k views

Win XP - “Windows Was Unable To Find A Certificate To Log You On To The Network”

A friend of mine has an old Toshiba Satellite laptop. I just re-installed XP on it and I am trying to get the computer online via WIFI (WPA-PSK / AES). When I try to connect I get the following ...
0
votes
1answer
56 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
1
vote
0answers
223 views

S/MIME email Public Certificate?

Is there a way to create a public certificate for a S/MIME email certificate? I would like to share the public key on my website so people can send me encrypted emails. However I can only find ...
2
votes
1answer
671 views

Incorrect Authority Key Identifier on openssl end cert

I'm getting interesting results when signing an end-server certificate using an intermediate CA using openssl. I have a Root CA which looks like this: Serial Number: 14296918985177649921 ...
2
votes
1answer
2k views

List installed personal certificates in command line

I use a few secure websites that require me to install a PFX certificate to access them. I have multiple computers I do this from, and I need a quick way of determining which ones in which I still ...
2
votes
1answer
58 views

Will the browser ask the Certificate Authorities each time I visit some HTTPS?

I have basic ideas of how asymmetric encryption works. I as to HTTPS, all articles makes me confusing. I want to know: Will the browser ask the Certificate Authorities each time I visit some ...
0
votes
0answers
153 views

When loading Hotmail from Windows 8 icon, I receive an error about its digital certificates

When I try to load Hotmail using the desktop icon on a newly installed Windows 8 PC, I receive this error. "We couldn't connect to myname@hotmail.com because of a problem with its digital ...
2
votes
1answer
4k views

Every website is showing untrusted certificate warning on all browsers

I'm on windows 7. Every website is showing untrusted security warning. I tried every browser that I have. I tried using https. This is extremely odd, it never happened before, well it could happen ...
1
vote
0answers
93 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
0
votes
1answer
339 views

Signature validation based on the XMLSec standard

I've run into issues verifying the signature of an XML file based on the XMLSec standard. I'm running: xmlsec1 1.2.19 (openssl) Here's the certificate used for validation: wget -O cert.pem ...
1
vote
0answers
419 views

Unable to continue after certificate error i IE

I am on a closed HP ILO network, and I am trying to access the web interface (https) of a HP c7000 Onboard Administrator (though I do not believe this is an issue specific to the equipment) through ...
2
votes
0answers
112 views

Bogus Chrome Installer?

Just a few days ago I tried to download Chrome (using IE 11) to a new Windows 7 system. I examined the certificate for the Chrome installer (clicking on the highlighted Google Inc. next to ...
0
votes
1answer
2k views

openssl pkcs12 keeps removing the PEM passphrase from keystore's entry?

OpenSSL 1.0.1e 11 Feb 2013 Generating a self-signed certificate: openssl req -x509 -newkey rsa:1024 -keyout key.pem -out cert.pem -days 365 During the process a PEM passphrase is ...
0
votes
1answer
296 views

How to dump the Subject Alternative Name (SAN) from an SSL certificate file

I know that I can dump the entire information from a PEM certificate file with this command: openssl x509 -in certfile -noout -text And I've already found another direct parameter to show me only ...
0
votes
0answers
612 views

How to make Firefox remember a self signed certificate is trusted

I'm using some private server with a self-signed certificate for https connections. Firefox 25.0 warns me about the certificate being untrusted every time. For some reason, I can't make it remember ...
1
vote
0answers
58 views

can UAC prevent reading a certficate?

Weird question with, hopefully, a short answer. I have this application running on windows 7 that calls a webservice through a .NET DLL. To be able to do that it needs to read some certificates, ...
2
votes
1answer
116 views

Fedora 8: rubygems.org certificate validation failure. How to install GeoTrust CA?

Trying to get a gem: $gem install puppet ERROR: Could not find a valid gem 'puppet' (>= 0), here is why: Unable to download data from https://rubygems.org/ - SSL_connect returned=1 ...
0
votes
1answer
43 views

Signature not removed from keyserver

I noticed that an on uid of my GPG certificate is two times signed with my key. I thought that doesn't make much sense and cleaned the key (gpg --edit-key and then clean). Then i send the key to the ...
1
vote
2answers
938 views

Save certificate to use with lftp

How can I save a certificate for use with lftp? The certificate in question is not accepted by lftp when downloaded from the server. I tried openssl s_client -connect {HOSTNAME}:21 -showcerts ...
6
votes
1answer
5k views

Can I get around using “pip install --cert”?

Trying to figure out if there is a way that I can avoid using the --cert flag to pip when I am installing packages at work. There is some issue with the proxy that only allows me to download the ...
2
votes
0answers
528 views

Chrome ignores some imported certificates

On Windows 7 with Chrome 30. I have a few websites running on localhost over SSL. Visiting them always displays the standard "The site's security certificate is not trusted!" message from Chrome. I ...
1
vote
1answer
206 views

Intermediate SSL Cert

I have an SSL certificate that is self-signed, and therefore uses an intermediate certificate. I am using Node.js and returning both the certificate as well as the certificate chain which includes ...
1
vote
1answer
5k views

Cannot send encrypted message to others using Outlook 2010

I am unable to send encrypted messages to others in Outlook 2010. I get the following error: "Microsoft Outlook had problems encrypting this message because the following recipients had missing ...
4
votes
2answers
11k views

how to get and use certificates with curl

1) Entering the following command curl -k email@mail.com:password https://www.site.com Returns the following error <HTML><HEAD><meta http-equiv="content-type" ...
0
votes
0answers
332 views

Remove Virus certificate attachments from Emails

When I'm receiving emails from PC having AVG antivirus, it's coming with virus certificate attachment file, to prove that there is no virus inside the email. I want to remove all those certificate ...
0
votes
1answer
2k views

The site's security certificate is not trusted! in Chrome

I'm behind my college firewall which uses a separate firewall.cer certificate. I was able to install in my firefox. So, gmail opened without any issues in firefox. But, i get the error and i'm unable ...
0
votes
1answer
97 views

Multiple certificates issued to localhost

My local build environment has a certificate issued to local host. I also had another one issued to localhost to run MVC in a browser (IIS express). These certificates interferred with each other, so ...
5
votes
2answers
464 views

Google.com Certificate Revoked

A few days ago, I noticed some issue with my internet connection. Some pages weren't loading all the way, and some connections needed to be restarted several times before they would resolve. I assumed ...
0
votes
2answers
4k views

Firefox cannot recognize certificates for well knows sites

When trying to connect to well known sites, for instance hotmail.com Firefox shows that This Connection in Untrusted. In the Options>Advanced>Certificates it's configured to select one matching ...
4
votes
1answer
1k views

Automatically remove certificate from certificate store

Windows 7 certificate store's default behavior includes storing all public keys you use from smartcards. This is sometimes undesirable as if some machine needs to use a lot of smartcards, the "Please ...
0
votes
2answers
112 views

Given one can IMAP upload emails to Gmail, how can one prove gmail content is original?

Given that one can upload emails to gmail via IMAP, via methods such as: http://email.about.com/od/gmailtips/qt/How_to_Import_Mail_from_Mozilla_Thunderbird_in_Gmail.htm Is there a method to prove ...
0
votes
0answers
55 views

SSL Certificate updates

In Windows or Linux system, how does the SSL certificate gets "updated" or "revoked"? By default some certificate comes while installing the OS / Browser. But later when that needs to be updated how ...
2
votes
1answer
11k views

View / install certificates for local machine store on Windows 7

On Windows 7 (Windows 7 Professional x64), how can I view and install certificates in the local machine store? The certmgr.msc plugin allows me to view certificates installed in the current ...
0
votes
0answers
77 views

Recover Encrypted Files / Certificate

I have backup up some encrypted files onto an external HDD and forgotten to back up the certificate. I still have the original, unchanged HDD containing Win7 64, but as I've changed motherboard/CPU ...
1
vote
1answer
1k views

Can not combine two CA certificate files to a CA certificate chain

Ι' m trying to concatenate two valid self-signed CA pem files generated using openssl in order to import a single CA file in Firefox (client side), using the following command: cat CA_file0.pem ...
0
votes
2answers
781 views

Parameters to create a self-signed DSA certificate on Ubuntu 12.04?

I would like to create a self-signed DSA certificate on Ubuntu 12.04 for use with a webserver and TLS 1.2 (HTTPS) connection. I found that you can run the following command to create an RSA one: ...
5
votes
1answer
3k views

Where is my RDP server certificate stored?

Given the recent issues of Man-in-the-Middle attacks, i actually paid attention to the warning i get when connecting to a server: Selecting View Certificate, i was going to check the SHA1 ...
2
votes
2answers
499 views

How to restrict the usage flags for primary key-pairs in OpenPGP certificates?

More than one time I read recommendations to use the primary key-pair in my OpenPGP certificate only to sign sub-key-pairs and not for general daily use (even to keep the private key stored on a ...
2
votes
4answers
840 views

How to know if a new website can be trusted? [closed]

I am trying to find a way how to know if I can trust an internet site. Example 1: http://www.booksgreatchoice.com/ payment redirects to digitalbooksplace.com - bad thing only card in payment - bad ...
0
votes
1answer
75 views

Using my ssl certificate to a sub domain

I have a webshop build in Wordpress hosted in Apache. I have created a new version for my front end, build in Google App Engine. What I want to achieve is my naked domain to point at App Engine and a ...
0
votes
1answer
228 views

Pages don't load after installing a certificate on tomcat, restart required

I posted this question before but not in the correct forum. I have configured tomcat7 to use SSL and have made it point to a keystore. The keystore has a self signed certificate by default. There are ...
1
vote
1answer
33 views

Certificates not accessible while there are no active logins on webserver

My mvc application uses a certificate (stored in the Local Computer's 'Root Certification Authority' store), but cannot seem to access it while the web-server doesn't have any active users logged in ...
0
votes
1answer
854 views

Windows certificate manager restore private key somehow

This is may sounds very strange but let me explain a situation: I was using my PKI Private Key installed at Windows Certificate Storage I get token, so I decided to load them to token and delete them ...
2
votes
1answer
790 views

Can I be a root certificate authority for my local network?

This may sound crazy, but can I be the root certificate authority? I mean, I have many computers and smart devices in my home. Remote Desktop warns for the certificate not being trusted, because it ...
3
votes
1answer
1k views

Outlook 2013, multiple email accounts and encrypted email: Only last S/MIME settings used

I have multiple email accounts properly setup in Outlook 2013 (can send/receive fine otherwise). Lets say they are: user1@domain1.com user2@domain2.com user3@domain3.com All belong to me and I have ...
0
votes
1answer
541 views

Event ID 91 — AD CS Active Directory Domain Services Connection

I have installed AD CA and I am getting this error(Event ID 91) : A connection to Active Directory Directory Services could not be established. Active Directory Certificate Services will try to ...
7
votes
1answer
8k views

Can self-signed SSL certificate be renewed? How?

I'm fairly new to SSL certificates and would like to know if a self-signed certificate which I use for HTTPS can be renewed to extend its expiry date without all clients of the site having to go ...