Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

0
votes
0answers
104 views

Validate a PADES document with expired certificate

I have a problem. I have a PDF that has been signed with a certificate, and then it has been put a timestamp with a TSA. I want to validate this document, but now, the certificate which it was used ...
0
votes
1answer
408 views

Pure-FTPD certificate not being used

I am using Pure-FTPD from the epel repository on CentOS 6. Now I have configured to enable TLS which works fine however for some reason it wont make use of the certificate file I have placed in ...
0
votes
0answers
52 views

Windows Certificate Authority - root offline, intermediate online?

Simple enough question... Can I have the Windows Root CA offline and a non-domain member, but the intermediate CA online and a domain member (thereby getting the advantages of an AD integrated CA?) ...
1
vote
1answer
74 views

How to configure shrewsoft vpn in windows with multilevel certificates

I have a linux box already connected with racoon to the same VPN using the same certificates no problem. From windows, it says "unable to verify remote peer certificate" and I believe it is because I ...
1
vote
1answer
2k views

certificate errors via chrome and IE

When trying to access gmail.com via chrome I get this error message: Net::ERR_CERT_INVALID The same error message appears with ninite.com or twitter.com - drive.google.com, youtube.com or ...
0
votes
1answer
276 views

Firefox/Thunderbird export public key

I have imported a .p12 file inside Firefox/Thunderbird, now I would like to export its public key (without using openssl or whatever command line code), so I can distribute it and people can ...
0
votes
1answer
1k views

Facebook.com returning invalid security certificate

I am on a network which is secured by Cyberroam in my University. Recently, they have made some changes to their security policy and have 'blocked' facebook.com. I kind of used to think that ...
1
vote
1answer
53 views

Trouble with certificate checking on a closed network

I'm managing a Active Directory domain with about a hundred Windows 7 clients running IE9. The network does not have access to the Internet, but do have the ability to access a vendor web application. ...
1
vote
2answers
1k views

get Firefox to trust expired Charles CA Certificate

When I use the security certificate supplied by Charles Proxy in Firefox (35.0) to decrypt SSL traffic, it results in Firefox showing The certificate is not trusted because the issuer certificate ...
2
votes
1answer
76 views

Should I trust download.oracle.com if my certificate does not match?

I've been getting this every time I try to download a JDK 8 update to my MacBook. First, I go here: http://www.oracle.com/technetwork/java/javase/downloads/index.html I click the download location ...
0
votes
1answer
540 views

Why won't Lync 2013 connect when I am on an office network, but if I tether it to my iPhone, it works fine?

If I connect to the network via the office network (either office Wifi or ethernet), Lync 2013 will not connect. It states: However, if I connect my laptop to either the Wifi network from the ...
0
votes
1answer
297 views

Firefox import PEM certificate chain fails

I am trying to import a cert chain into Firefox 31.3 ESR. The origin chain is a p7b file which I have converted with OpenSSL to PEM format. curl happily accepts that chain and establishes the ...
1
vote
1answer
296 views

Mumble Server (Murmur) 3rd Party SSL Installation on Ubuntu

I recently purchased a wildcard certificate for my website and would like to also add it to my murmur server but I am having trouble finding out the proper steps to take to do this. The certificate I ...
4
votes
1answer
4k views

Expired web/SSL certificate error on only one computer

I have a strange problem with one website's SSL certificate that only affects one computer Windows 7 operating system. The site works fine on other Win 7 computers with no error, pulling valid ...
0
votes
0answers
25 views

I am not able to access any google related sites from Google Chrome? [duplicate]

I am not able to access youtube or gmail etc. It shows this "Invalid Server Certificate You attempted to reach www.youtube.com, but the server presented an invalid certificate. Help me ...
45
votes
4answers
12k views

Firefox “Untrusted Connection” warnings when visiting reputable HTTPS sites when using child's account

When using Firefox on Windows, I see an "Untrusted Connection" warning when visiting any HTTPS site, including very reputable ones such as https://www.google.com and https://search.yahoo.com. The ...
0
votes
2answers
2k views

Unable to verify the certificate from StartSSL?

I'm new to OpenSSL and I'm unable to verify the certificate from StartSSL. The command that I tried in order to verify the certificate is: openssl verify -CAfile ca.pem mydomain.com.crt The error ...
2
votes
1answer
66 views

Hang when launching digitally signed executable

We have a weird problem on 2 PCs with running a digitally signed 120 Mb executable. If user launches a digitally signed .exe - then the launching host (e.g. Explorer or cmd.exe) will enter infinite ...
26
votes
2answers
4k views

What is the superfish SSL certificate and where did it originate

I recently bought a new laptop, every https:// connection I do to any site regardless of browser chain back to a root certificate issued by "superfish, inc". I have had a dig around but I can't seem ...
0
votes
1answer
1k views

Using powershell, how do I extract the thumbprint from an SSL Certificate without installing it?

Every example I've found on StackExchange, and other internet forums, etc all tell me how to get the thumbprint from a certificate already installed into a certificate store. Alternatively, the ...
2
votes
0answers
224 views

How can I sign an MS Word macro with a digital certificate from the local machine certificate store?

I am trying to find out how I can digitally sign a Microsoft Word macro using a valid 3rd party CA issued VBA code-signing certificate that is installed into the machine rather than the user ...
0
votes
2answers
170 views

Certificate Errors with bad Date Time settings

I have recently solved an issue with IE 11 where I was getting certificate errors to google.com bing.com was fine no problems I tried a number of different things till seeing a post referring to ...
1
vote
1answer
354 views

DNSCrypt not working - server certificate possibly expired

I have been using DNSCrypt for a few days (used this guide to install dominustemporis.com/2014/05/dnscrypt-on-windows-update/) and it has been working fine for a few days. Today I switched on my ...
-1
votes
0answers
448 views

Encrypted alert with code 21 for connection [closed]

I've got a device that connected to the server and successfully did the handshake and received application data, however later when client sends keep-alive requests server sends back encrypted alert ...
1
vote
1answer
624 views

Importing StartSSL Key

A few months ago I signed up for a Free StartSSL certificate but I didn't realize that you needed to install that certificate if you wanted to later log in to the control panel. Now I'm stuck trying ...
4
votes
1answer
647 views

How to configure Firefox to warn or reject SHA-1 signed certificates?

Is there a way to configure Firefox either through an add-on, plugin, or other setting that will either reject or warn whenever it encounters a certificate that has been signed using SHA-1?
0
votes
1answer
1k views

IE10: Website security certificate issue + “continue” button missing

I am developing a web app and am using self-signed SSL certificates. I'm trying to test my site on Internet Explorer 10 in a modern.ie VM (in VirtualBox). When I visit the site, ...
0
votes
2answers
269 views

how to change ssl certificate serial number

I upgraded the linux full release on a server. As part of the process I generated a new local ssl certificate key set with genkey. However the serial number remained the same and client apps such as ...
0
votes
1answer
48 views

Are URL based SSL / certificates possible at IIS?

Is there a way to change the used certificate / ssl encryption depending on the visited url? We are using IIS 7 and later. Edit: We plan to develop and deploy web applications to our customers. It ...
0
votes
1answer
45 views

How to bulk extract personal certificates on Windows?

We are upgrading computers to Win7 and I've found a computer with 300+ personal certificates and we need to save all of them. Is there a way to bulk export them?
0
votes
1answer
542 views

Install root certificate authority on Ubuntu [duplicate]

First off I am not sure whether I have the correct terminology. What I mean by certificate authority is a verified certificate distributor such that if I goto a website in my Browser that is HTTPS ...
2
votes
2answers
78 views

How do I configure my system to trust a CA for a specific subset of domains?

The company I work for has a number of internal web services accessible over HTTPS. These services use SSL/TLS certificates signed by an internal certificate authority which is only trusted by ...
40
votes
7answers
121k views

How to bypass the “secure connection failed” warning in Firefox 33

Since installing Firefox 33 a "Secure Connection Failed" error is no longer bypassable using the "I Understand the Risks" button - it's gone! Is it still somehow possible to ignore certificate ...
0
votes
0answers
150 views

Requesting a server authentication certificate

I encountered problem when I go to http://localhost/certsrv in Windows Server 2008 R2 I cannot find option to - Create and Submit A Request To This CA. What I find is completely different. I would add ...
3
votes
1answer
472 views

View text version of remote server SSL certificate from linux command line

Does anyone know of a linux one-liner that can be used to download an SSL certificate from a remote server and decode it to text? I think the last step would involve openssl x509 -text -noout but the ...
2
votes
1answer
183 views

Using CERT Tapioca on VirtualBox

I'm attempting to use Cert Tapioca (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) in Virtual Box so that I can test the SSL/HTTPS security of all the sites I have browsed. What I did is, ...
0
votes
0answers
560 views

Can I extract a certificate private key from the windows certificate store in a disk image?

After re-installing Windows 7 I notice that I seem to have failed to export the private key for one of my client certificates (for Internet Explorer use). When viewing the certificate in IE, it ...
10
votes
1answer
2k views

How to know which Certificates to leave in my browser, and which to remove

I would like to tighten up security a bit, so I am disabling unneeded certs from my browsers. For instance, the "WoSign CA Limited" cert from China I obviously don't need, yet "Thawte Consulting cc" I ...
4
votes
2answers
6k views

Why is the local certificate store missing in Windows 8.1?

I am trying to import a self-signed certificate into che local certificate store of the Trusted Root CAs on my Windows 8.1 machine, but that store is missing. Importing it into the Trusted Root CAs ...
0
votes
1answer
221 views

Error on “-e” parameter when running makecert command in powershell

I am trying to run the following command in Powershell on a machine running Server 2012: makecert -r -pe -n CN="*.$domainVariable" -b 01/01/2000 -e 01/01/2036 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr ...
1
vote
1answer
317 views

Can I use a “Microsoft Office” Digital ID / certificate to sign PDFs in Adobe Acrobat?

I've been needing to sign PDFs lately - fortunately everyone's been fine with me using a self-signed certificate, however I feel it's unprofessional. I'm looking for a personal certificate I can use ...
0
votes
1answer
44 views

How to sign a CSR on windows

I've got a custom certificate that I'm using as a local root authority. This certifcate has a private key on my machine and is stored in the "Personal" certificates store of the "Local Machine" ...
0
votes
0answers
86 views

Does a certificate from “open.nsa.gov” in firefox mean the browser defaultly trusts the NSA?

While exploring Firefox options I see that I have a certificate identifying the NSA, issued by the US Government. I don't recall adding this at any point and don't really want my machine trusting the ...
0
votes
1answer
2k views

How to turn off Opera security incomplete certificate message?

While I'm browsing the Internet, Opera always pop out a lots of these Server certificate chain incomplete boxes. Several times it pops out tons of them . Even if I click to remember my choice or ...
0
votes
1answer
115 views

Why can`t we treat SSL Certs like Pgp keys instead of trusting CAs? [closed]

I am dumb and stupid and I do not know all the technical aspects of SSL and server/client side implications and implementations. However I understand them good enough from user point of view to use ...
0
votes
1answer
115 views

PKCS12 key from Winserver2008 cert authority

I have created a standalone cert authority in windows server 2008. I can use certreq (from that same box) to generate a cert with the appropriate CN, etc, and ensure that the private key is ...
1
vote
0answers
67 views

Windows (partially) claims I have a private key for a foreign certificate

We have a MS Word document template with vba code produced and signed by an external firm. When I view the details of the signing certificate from within Word vba developer tools, it shows up with ...
4
votes
1answer
347 views

How to make computer (or user) trust signed software

I have an application, which I sign and timestamp using a code-signing certificate issued by thawte, with intermediate authority Thawte code signing CA - G2. The signature is OK (as it shows in file ...
0
votes
0answers
26 views

FTPS certificate email address has different domain than the Organization name

Wondering if this should be of any concern. We received a FTPS ip which is SSL enabled. (This is not SFTP). Filezilla - the FTP client shows a certificate where the organization name say 'XYZ Inc' and ...
0
votes
1answer
53 views

How to get digicert high assurance in my Mac

I removed Digicert high assurance certificate from the keychain. Now when I visit facebook.com or other ssl websites from chrome, they don't open and I get an SSL error, e.g.: How can I to get ...