Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

2
votes
0answers
1k views

Get OS X Chrome to accept self-signed SSL certificate for localhost

I've been trying to get this working all day, and I have a strong feeling that my issue is specific to Yosemite. I'm running OS X 10.10.3 on a retina Macbook Pro. I took instructions from ...
0
votes
0answers
29 views

X509 certificate that can only be installed on a particular machine

Is it possible to create a certificate that will not install on a machine other than its intended one? (Using some hardware fingerprint embedded into the cert?) Or alternatively, is there a way to ...
6
votes
1answer
161 views

Same version of Chrome, two different behavior regarding sha1 deprecation

i'm well aware of the changes made to Chrome 42 and sha1 signed certificates. Here a short reminder : https://blog.filippo.io/the-unofficial-chrome-sha1-faq/ Our client reported this problem and ...
3
votes
2answers
2k views

Why can't I verify this certificate chain?

I have three certificates in a chain: root.pem intermediate.pem john.pem When I examine them using openssl x509 -in [filename] -text -noout they look fine, root.pem looks like it is self-signed ...
0
votes
1answer
110 views

UTF8 and T61 strings, how do I see what my SSL cert uses?

How do I use the openssl x509 tool to see whether or not my strings are T61 or UTF8 encoded in the cert? Is there a better way?
2
votes
3answers
890 views

SSL Root CA certificate is not recognized, although present in the trust store. Why?

Background: Ubuntu Server 14.10 64-bit on aws.amazon.com/ec2 Cheap PositiveSSL server certificate from COMODO 1 server certificate, 2 intermediate CA certificates and 1 Root CA certificate as ZIP ...
1
vote
3answers
299 views

OpenSSL 0.9.8zc -> 0.9.8zd “broke” my certificates.

I have a self-signed certificate (and CA) created on a Mac using OpenSSL 0.9.8zc. I use the certificate to secure connection to my svn server. With the latest OS X update, OpenSSL was updated to ...
0
votes
1answer
2k views

Windows Wi-Fi with 802.1X + EAP-TTLS + EAP-MSCHAPv2 and client certificates

Sooo ... We have the the mandatory requirement that clients who want to join our wireless LAN to present a valid machine certificate issued by our in-house root CA. This is done to prevent from ...
0
votes
1answer
350 views

Thunderbird Certificate Alert keep popping up

I'm having the issue in the title since months now and is driving me crazy. I keep getting this warning: which translates to Add Security Exception You are going to modify the way ...
1
vote
0answers
267 views

Outlook not updating certificate

Outlook is refusing to send an encrypted email to a recipient whose certificate recently expired. The recipient sent a signed email and I exported the certificate to a ".cer" file then updated their ...
0
votes
1answer
80 views

converting 'cacert.crt' file to pks 12

This is the third or so in a chain of questions to implement ssl certificates. To date the public and private keys are created in the server and are operational, however the browsers do not recognize ...
19
votes
2answers
10k views

Apple's Mail showing “the identity of smtp.gmail.com cannot be verified”

When trying to send email using Gmail in OS X Mail, I get: The identity of "smtp.gmail.com" cannot be verified. The certificate for this server is invalid. You might be connecting to a server ...
0
votes
0answers
393 views

Can AVG 2015's Online Shield be used Chrome (and not give NET::ERR_CERT_DATE_INVALID)?

I am using AVG 2015. If I enable Online Shield, websites that use some of Google's API's (including StackExchange sites) become unavailable and start displaying a NET::ERR_CERT_DATE_INVALID error ...
0
votes
1answer
1k views

OpenSSL Error: Error loading extension section server

The system is Fedora fc21. The objective is to run the examples shown here: “APACHE web server and SSL authentication” The openssl.cnf file has been created and the following command run: openssl ...
2
votes
2answers
26 views

Signed application fails to launch

On a particular Windows Vista PC, all programs signed with a particular certificate fail to launch from explorer, when it verifies the publisher. Only for a second or two, the hour glass is visible, ...
0
votes
0answers
80 views

expired certificates and chrome

Yesterday I've visited a website for the first time, but now Chrome raises an error when I connect to this website. The error is: the connection is not private - ERR_CERT_DATE_INVALID So I tried to ...
3
votes
1answer
614 views

What is causing warning on a certificate's basicConstraints?

I created a self signed server certificate using OpenSSL's req -x509 command and a CONF file. The CONF file is shown below. When I examine the certificate using Microsoft certificate viewer, its ...
0
votes
1answer
280 views

Firefox stopped working with our app after 36.0.1

We have a web application that works on all browsers and firefox before 36.0.1 Have done all the typical things, clearing cache, reinstalling ff, etc. Multiple different machine from different ...
2
votes
1answer
2k views

How to fix chrome certificate issues after removing Fiddler root cert

I don't know very much about certificates, and I don't want to break anything trying to resolve this - so asking for some suggestions. At some point agreed to let Fiddler install an HTTPS certificate ...
1
vote
0answers
38 views

How to get the organization name from a .p12 certificate?

I have a .p12 certificate and I need to find out the organization name of it. How to do that? (I'm using Windows 8.1)
2
votes
2answers
167 views

One SSL Certificate Two Services

I'm having trouble finding a clear answer to this question: In IIS (7.5 or 8) I plan on hosting a site that will have a bunch of secure HTML eforms (default port 443). They will be performing ajax ...
1
vote
3answers
4k views

Export installed certificate and private key from a command line remotely in Windows using something besides the certmgr.MSC tool

I need to be able to remotely export an installed computer certificate with the full certificate chain and private keys on a Windows server. The cert is used for IIS, and I want to use it for an ...
1
vote
0answers
555 views

How to use .pfx in certificate store in CURL for Windows 7

I want to use cURL to access a remote server, and I need to identify myself using a private key or the remote server gives a 401 "Unauthorized". I'm on Windows 7 (work machine, not my choice) and my ...
1
vote
1answer
298 views

Imported CA certificate to Firefox Browser not working

I created Certificate Authority (CA) according to Ubuntu help using openssl. After creating a certificate for Apache2 and adding to certificate to it, I want to import it in Firefox. In the end of ...
2
votes
0answers
253 views

nginx http to https proxy with self-signed certificate

I have an nginx proxy to redirect http requests with a specified port to another https url. Here is my configuration so far: server { listen 59848; location / { resolver 8.8.8.8; ...
-1
votes
1answer
31 views

Is there any point signing/encrypting personal email? [closed]

It works fine for corporate mail where everyone in the organization would have a certificate issued to them, but does anyone use certificates to sign their personal mail (let alone use encryption ...
1
vote
1answer
72 views

How can I prevent a certificate from being trusted?

There exist two certificates in /etc/ssl/certs that I'd like to permanently remove. However, just deleting the pem files doesn't do it - those are regenerated when ca-certificates is updated. How ...
0
votes
1answer
1k views

keytool commands to replace existing SSL certificate?

I've a linux centos server running glassfish 3.1.2 app server. The default certs coming from GlassFish install for ports 4848 and 8181 are 1024 bits. I need to replace these with 2048 bits versions. ...
0
votes
0answers
6k views

Some clients get 'Certificate-based authentication failed' error on a cert, w/ all browsers

I'm hosting multiple SSL sites on multiple Ubuntu / LAMP servers. The servers have quite standard setup, eg. no client certificate configuration is in place. The vast majority of users are fine, but ...
0
votes
0answers
560 views

Self signed certificate, https and vpn

I have access to an SBS 2011 server that has a self signed certificate. In my computer (win 7 pro) that is outside the domain, I have imported the root certificate and the leaf certificate into ...
0
votes
1answer
46 views

SSL certificate for Web App + website

I have a WordPress + WooCommerce online store which is hosted on a managed hosting. I just bought non-wildcard SSL Certificate for that online store. I am also developing a CherryPy Python Web App ...
0
votes
1answer
72 views

Windows certificate viewing, why 2048-bit certificate shown as 270 byte?

I'm a bit confused by how Windows certificate viewer displays public key hexdump. Windows shows 270 bytes for a 2048-bit public key(which is 256 byte). While Firefox 31 display right 256 bytes. And ...
0
votes
1answer
276 views

Google chrome doesn't display personal certificate

I'm testing some webservices that use certificates for authentication. So basically I've added to certificate store some custom root CA and some client certificate to personal folder. When I open ...
0
votes
0answers
116 views

Validate a PADES document with expired certificate

I have a problem. I have a PDF that has been signed with a certificate, and then it has been put a timestamp with a TSA. I want to validate this document, but now, the certificate which it was used ...
0
votes
1answer
515 views

Pure-FTPD certificate not being used

I am using Pure-FTPD from the epel repository on CentOS 6. Now I have configured to enable TLS which works fine however for some reason it wont make use of the certificate file I have placed in ...
1
vote
1answer
89 views

How to configure shrewsoft vpn in windows with multilevel certificates

I have a linux box already connected with racoon to the same VPN using the same certificates no problem. From windows, it says "unable to verify remote peer certificate" and I believe it is because I ...
3
votes
1answer
2k views

certificate errors via chrome and IE

When trying to access gmail.com via chrome I get this error message: Net::ERR_CERT_INVALID The same error message appears with ninite.com or twitter.com - drive.google.com, youtube.com or ...
0
votes
1answer
337 views

Firefox/Thunderbird export public key

I have imported a .p12 file inside Firefox/Thunderbird, now I would like to export its public key (without using openssl or whatever command line code), so I can distribute it and people can ...
0
votes
1answer
1k views

Facebook.com returning invalid security certificate

I am on a network which is secured by Cyberroam in my University. Recently, they have made some changes to their security policy and have 'blocked' facebook.com. I kind of used to think that ...
1
vote
1answer
60 views

Trouble with certificate checking on a closed network

I'm managing a Active Directory domain with about a hundred Windows 7 clients running IE9. The network does not have access to the Internet, but do have the ability to access a vendor web application. ...
1
vote
2answers
2k views

get Firefox to trust expired Charles CA Certificate

When I use the security certificate supplied by Charles Proxy in Firefox (35.0) to decrypt SSL traffic, it results in Firefox showing The certificate is not trusted because the issuer certificate ...
2
votes
1answer
79 views

Should I trust download.oracle.com if my certificate does not match?

I've been getting this every time I try to download a JDK 8 update to my MacBook. First, I go here: http://www.oracle.com/technetwork/java/javase/downloads/index.html I click the download location ...
0
votes
1answer
703 views

Why won't Lync 2013 connect when I am on an office network, but if I tether it to my iPhone, it works fine?

If I connect to the network via the office network (either office Wifi or ethernet), Lync 2013 will not connect. It states: However, if I connect my laptop to either the Wifi network from the ...
0
votes
1answer
346 views

Firefox import PEM certificate chain fails

I am trying to import a cert chain into Firefox 31.3 ESR. The origin chain is a p7b file which I have converted with OpenSSL to PEM format. curl happily accepts that chain and establishes the ...
1
vote
1answer
355 views

Mumble Server (Murmur) 3rd Party SSL Installation on Ubuntu

I recently purchased a wildcard certificate for my website and would like to also add it to my murmur server but I am having trouble finding out the proper steps to take to do this. The certificate I ...
4
votes
1answer
5k views

Expired web/SSL certificate error on only one computer

I have a strange problem with one website's SSL certificate that only affects one computer Windows 7 operating system. The site works fine on other Win 7 computers with no error, pulling valid ...
0
votes
0answers
25 views

I am not able to access any google related sites from Google Chrome? [duplicate]

I am not able to access youtube or gmail etc. It shows this "Invalid Server Certificate You attempted to reach www.youtube.com, but the server presented an invalid certificate. Help me ...
45
votes
4answers
12k views

Firefox “Untrusted Connection” warnings when visiting reputable HTTPS sites when using child's account

When using Firefox on Windows, I see an "Untrusted Connection" warning when visiting any HTTPS site, including very reputable ones such as https://www.google.com and https://search.yahoo.com. The ...
0
votes
2answers
2k views

Unable to verify the certificate from StartSSL?

I'm new to OpenSSL and I'm unable to verify the certificate from StartSSL. The command that I tried in order to verify the certificate is: openssl verify -CAfile ca.pem mydomain.com.crt The error ...
2
votes
1answer
71 views

Hang when launching digitally signed executable

We have a weird problem on 2 PCs with running a digitally signed 120 Mb executable. If user launches a digitally signed .exe - then the launching host (e.g. Explorer or cmd.exe) will enter infinite ...