Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

6
votes
1answer
3k views

Where is my RDP server certificate stored?

Given the recent issues of Man-in-the-Middle attacks, i actually paid attention to the warning i get when connecting to a server: Selecting View Certificate, i was going to check the SHA1 ...
1
vote
1answer
1k views

RDP client does not consider smart card as valid for authentication

I have: A Windows 7 client machine. I am not Administrator for that machine. A Windows 2008R2 server, on which I want to open a session using Remote Desktop. A Remote Desktop Gateway, also running ...
6
votes
1answer
5k views

Can I get around using “pip install --cert”?

Trying to figure out if there is a way that I can avoid using the --cert flag to pip when I am installing packages at work. There is some issue with the proxy that only allows me to download the ...
1
vote
0answers
43 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
0
votes
0answers
26 views

My self signed certificates do not have organisation

I use the command openssl s_client -connect myServer.myCompany.be:2500 -showcerts > myServer.pem # it also works if you remove all but the base64 encoded key # and its surrounding comments If I ...
1
vote
1answer
369 views

In Mutt, how to extract key from a S/MIME signed message to reply encrypted?

I have a certificate signed message in my inbox. The public certificate of the sender should be available there. How do I extract and use it to send back an encrypted message? Note: I configured GPG ...
0
votes
0answers
104 views

How to generate a P12 file, based on the key and PEM certificate?

I would like to generate a P12 file from the key and the PEM version of an iPhone developer certificate. Is there a GUI based tool available for Windows XP?
0
votes
1answer
46 views

What details would you view in a certificate to check if it is trustworthy?

I have a question need help: What details would you view in a certificate to check if it is a trustworthy website?
-4
votes
1answer
26 views

Web Server Certificate’s private key and Certificate Authority’s private key?

What could a malicious attacker do with a Web Server Certificate’s private key? What could a malicious attacker do with a Certificate Authority’s private key?
1
vote
1answer
8k views

How to fix certificates verification creating a VPN (OpenVPN)?

Ok, I'll explain what I did... and at the end is the queston. THank you! To set up my VPN I installed OpenVPN in server and client machines. On server I configured the cert Authority in the file ...
1
vote
2answers
169 views

Removing one of two certificates with equal nicknames

I have two certificates installed: kirrun@kirNote ~ [1197]% certutil -d sql:/home/kirrun/.pki/nssdb -L Certificate Nickname Trust Attributes ...
1
vote
1answer
269 views

Chrome still shows red cross “https://” even with valid certificate

This happens on one of my users Mac laptop running ML or Mavericks. When she accesses https://www.somewebsite.com using either Chrome or Safari, she always got the warning related to the certificate ...
1
vote
1answer
44 views

User name for an existing SSH certificate?

On a Jenkins server, there are two pairs SSH private and public keys in the ~/.ssh/ directory which apparently are both used to authenticate with the same external server. However, I don't know which ...
1
vote
2answers
1k views

Install SSL certificate from an untrusted website into the Certificates snap-in using IE

How can I install a certificate from an untrusted website into the Certificates snap-in (certmgr.msc) of Windows? I know how to do this with Firefox by exporting to a file and then importing it, ...
0
votes
1answer
179 views

How to make Google Chrome not to check system clock or certificates at all?

How to make Google Chrome not to check system clock? I want to switch back my system clock and still can access to gmail etc.
1
vote
0answers
303 views

How to develop a Chrome extension that overrides SSL certificate error for self-signed certificate? [closed]

The process of adding a self signed certificate to the list of trusted certificates in Chrome is manual and tedious. I frequently access a trusted website that uses a self-signed certificate. As I am ...
0
votes
1answer
107 views

How do I bypass this since I know the site is good

This Connection is Untrusted You have asked Firefox to connect securely to xhopsportal.sys.comcast.net, but we can't confirm that your connection is secure. Normally, when you try to connect ...
1
vote
2answers
133 views

Can I sign code with a website SSL certificate?

I have an SSL certificate installed and working on my web server. On another project I need to sign some code. Can I use the website SSL certificate to sign code, or is a code-signing certificate ...
0
votes
1answer
87 views

How to install a DER binary encoded, GOST R 34.10-2001 root certificate (.crt) on Mac?

I would like to install this certificate on my Mac running OSX 10.9.1. I've downloaded it, but when I double click, keychain is opened and that is it. Can not install it with command line also: ...
5
votes
2answers
2k views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
1
vote
1answer
490 views

Import PGP key to windows user for SSIS

I have used Kleopatra to generate a pgp key. In SQL Server I am running an SSIS package that should decrypt files using the above key. The SSIS packages runs as ImportFiles which has the identity of ...
2
votes
1answer
201 views

Pull certificate from Firefox without using Firefox

I have a Comodo email certificate installed in Firefox 20, and I've tried (and failed) many times to export the certificate as PKCS12 (error is "Failed to create the PKCS #12 backup file for unknown ...
4
votes
1answer
2k views

Automatically remove certificate from certificate store

Windows 7 certificate store's default behavior includes storing all public keys you use from smartcards. This is sometimes undesirable as if some machine needs to use a lot of smartcards, the "Please ...
2
votes
1answer
2k views

How to retrieve IE7 Personal Certificates from full windows partition backup

Somehow in the process of exporting certificates I forgot to export bank certificate in IE7 on previous XP install. Now I have full disk image on bacula storage of previous install, is there any way I ...
2
votes
1answer
777 views

Incorrect Authority Key Identifier on openssl end cert

I'm getting interesting results when signing an end-server certificate using an intermediate CA using openssl. I have a Root CA which looks like this: Serial Number: 14296918985177649921 ...
6
votes
2answers
2k views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
0
votes
1answer
898 views

In the context of using RADIUS for WPA2 enterprise, what does a “client certificate” mean, if anything?

I'm trying to set up a RADIUS server for WPA2 enterprise authentication. I'm new to all this. I understand that the server has a "server certificate", which I assume plays a role similar to that ...
0
votes
0answers
2k views

Win XP - “Windows Was Unable To Find A Certificate To Log You On To The Network”

A friend of mine has an old Toshiba Satellite laptop. I just re-installed XP on it and I am trying to get the computer online via WIFI (WPA-PSK / AES). When I try to connect I get the following ...
0
votes
1answer
57 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
1
vote
0answers
258 views

S/MIME email Public Certificate?

Is there a way to create a public certificate for a S/MIME email certificate? I would like to share the public key on my website so people can send me encrypted emails. However I can only find ...
0
votes
2answers
2k views

Authentication required by wireless network

I would like to use a wireless network from Ubuntu. In the network drop-down menu I select a network (this is a University network I have an account there). Then I get a windows with the following ...
2
votes
1answer
2k views

List installed personal certificates in command line

I use a few secure websites that require me to install a PFX certificate to access them. I have multiple computers I do this from, and I need a quick way of determining which ones in which I still ...
2
votes
1answer
61 views

Will the browser ask the Certificate Authorities each time I visit some HTTPS?

I have basic ideas of how asymmetric encryption works. I as to HTTPS, all articles makes me confusing. I want to know: Will the browser ask the Certificate Authorities each time I visit some ...
0
votes
0answers
166 views

When loading Hotmail from Windows 8 icon, I receive an error about its digital certificates

When I try to load Hotmail using the desktop icon on a newly installed Windows 8 PC, I receive this error. "We couldn't connect to myname@hotmail.com because of a problem with its digital ...
21
votes
4answers
50k views

How can I get a list of installed certificates on Windows?

I know I have some certificates installed on my Windows 7 machine, how can I see what they are, the nicknames they are known by, and browse detailed information (such as issuer and available usage)?
0
votes
1answer
363 views

Signature validation based on the XMLSec standard

I've run into issues verifying the signature of an XML file based on the XMLSec standard. I'm running: xmlsec1 1.2.19 (openssl) Here's the certificate used for validation: wget -O cert.pem ...
2
votes
1answer
5k views

Every website is showing untrusted certificate warning on all browsers

I'm on windows 7. Every website is showing untrusted security warning. I tried every browser that I have. I tried using https. This is extremely odd, it never happened before, well it could happen ...
0
votes
1answer
3k views

openssl pkcs12 keeps removing the PEM passphrase from keystore's entry?

OpenSSL 1.0.1e 11 Feb 2013 Generating a self-signed certificate: openssl req -x509 -newkey rsa:1024 -keyout key.pem -out cert.pem -days 365 During the process a PEM passphrase is ...
1
vote
0answers
99 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
4
votes
2answers
6k views

Firefox “invalid certificate” error for a trusted website (sec_error_reused_issuer_and_serial)

I am connecting to a website (via Firefox 6.0.2 on Mac OS X 10.6.8) I know is legitimate, and the connection worked up till yesterday. However, when I connected to day I got the following error: ...
1
vote
0answers
494 views

Unable to continue after certificate error i IE

I am on a closed HP ILO network, and I am trying to access the web interface (https) of a HP c7000 Onboard Administrator (though I do not believe this is an issue specific to the equipment) through ...
2
votes
0answers
145 views

Bogus Chrome Installer?

Just a few days ago I tried to download Chrome (using IE 11) to a new Windows 7 system. I examined the certificate for the Chrome installer (clicking on the highlighted Google Inc. next to ...
1
vote
1answer
1k views

Can not combine two CA certificate files to a CA certificate chain

Ι' m trying to concatenate two valid self-signed CA pem files generated using openssl in order to import a single CA file in Firefox (client side), using the following command: cat CA_file0.pem ...
2
votes
1answer
516 views

Alternatives to SSH x509 logon

I have a Windows 7 machine which is not part of domain, and a Linux machine. I want to login to Linux from Windows using an x509 certificate stored in windows certificate store. Is it possible? ...
0
votes
0answers
647 views

How to make Firefox remember a self signed certificate is trusted

I'm using some private server with a self-signed certificate for https connections. Firefox 25.0 warns me about the certificate being untrusted every time. For some reason, I can't make it remember ...
1
vote
0answers
59 views

can UAC prevent reading a certficate?

Weird question with, hopefully, a short answer. I have this application running on windows 7 that calls a webservice through a .NET DLL. To be able to do that it needs to read some certificates, ...
0
votes
1answer
45 views

Signature not removed from keyserver

I noticed that an on uid of my GPG certificate is two times signed with my key. I thought that doesn't make much sense and cleaned the key (gpg --edit-key and then clean). Then i send the key to the ...
2
votes
0answers
612 views

Chrome ignores some imported certificates

On Windows 7 with Chrome 30. I have a few websites running on localhost over SSL. Visiting them always displays the standard "The site's security certificate is not trusted!" message from Chrome. I ...
1
vote
1answer
102 views

FireFox: force forget own client certificates

I'm using FireFox 22.0 on Windows 7 and have a couple of client certificates registered which are outdated now. When I go to Tools|Options|Advanced|Encryption|View Certificates|Your Certificates, ...
2
votes
3answers
530 views

Certificates signed by multiple CAs

Is it possible to have a OpenSSL Certificate signed by multiple CAs? Background: We have a CA to issue certificates mainly for our machine-to-machine communications. Now we need to make some services ...