Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

26
votes
2answers
4k views

What is the superfish SSL certificate and where did it originate

I recently bought a new laptop, every https:// connection I do to any site regardless of browser chain back to a root certificate issued by "superfish, inc". I have had a dig around but I can't seem ...
1
vote
1answer
2k views

Using powershell, how do I extract the thumbprint from an SSL Certificate without installing it?

Every example I've found on StackExchange, and other internet forums, etc all tell me how to get the thumbprint from a certificate already installed into a certificate store. Alternatively, the ...
2
votes
0answers
270 views

How can I sign an MS Word macro with a digital certificate from the local machine certificate store?

I am trying to find out how I can digitally sign a Microsoft Word macro using a valid 3rd party CA issued VBA code-signing certificate that is installed into the machine rather than the user ...
0
votes
2answers
193 views

Certificate Errors with bad Date Time settings

I have recently solved an issue with IE 11 where I was getting certificate errors to google.com bing.com was fine no problems I tried a number of different things till seeing a post referring to ...
1
vote
1answer
378 views

DNSCrypt not working - server certificate possibly expired

I have been using DNSCrypt for a few days (used this guide to install dominustemporis.com/2014/05/dnscrypt-on-windows-update/) and it has been working fine for a few days. Today I switched on my ...
-1
votes
0answers
495 views

Encrypted alert with code 21 for connection [closed]

I've got a device that connected to the server and successfully did the handshake and received application data, however later when client sends keep-alive requests server sends back encrypted alert ...
1
vote
1answer
1k views

Importing StartSSL Key

A few months ago I signed up for a Free StartSSL certificate but I didn't realize that you needed to install that certificate if you wanted to later log in to the control panel. Now I'm stuck trying ...
4
votes
1answer
675 views

How to configure Firefox to warn or reject SHA-1 signed certificates?

Is there a way to configure Firefox either through an add-on, plugin, or other setting that will either reject or warn whenever it encounters a certificate that has been signed using SHA-1?
0
votes
1answer
1k views

IE10: Website security certificate issue + “continue” button missing

I am developing a web app and am using self-signed SSL certificates. I'm trying to test my site on Internet Explorer 10 in a modern.ie VM (in VirtualBox). When I visit the site, ...
0
votes
2answers
316 views

how to change ssl certificate serial number

I upgraded the linux full release on a server. As part of the process I generated a new local ssl certificate key set with genkey. However the serial number remained the same and client apps such as ...
0
votes
1answer
49 views

Are URL based SSL / certificates possible at IIS?

Is there a way to change the used certificate / ssl encryption depending on the visited url? We are using IIS 7 and later. Edit: We plan to develop and deploy web applications to our customers. It ...
0
votes
1answer
56 views

How to bulk extract personal certificates on Windows?

We are upgrading computers to Win7 and I've found a computer with 300+ personal certificates and we need to save all of them. Is there a way to bulk export them?
0
votes
1answer
611 views

Install root certificate authority on Ubuntu [duplicate]

First off I am not sure whether I have the correct terminology. What I mean by certificate authority is a verified certificate distributor such that if I goto a website in my Browser that is HTTPS ...
2
votes
2answers
82 views

How do I configure my system to trust a CA for a specific subset of domains?

The company I work for has a number of internal web services accessible over HTTPS. These services use SSL/TLS certificates signed by an internal certificate authority which is only trusted by ...
45
votes
7answers
142k views

How to bypass the “secure connection failed” warning in Firefox 33

Since installing Firefox 33 a "Secure Connection Failed" error is no longer bypassable using the "I Understand the Risks" button - it's gone! Is it still somehow possible to ignore certificate ...
0
votes
0answers
186 views

Requesting a server authentication certificate

I encountered problem when I go to http://localhost/certsrv in Windows Server 2008 R2 I cannot find option to - Create and Submit A Request To This CA. What I find is completely different. I would add ...
3
votes
1answer
550 views

View text version of remote server SSL certificate from linux command line

Does anyone know of a linux one-liner that can be used to download an SSL certificate from a remote server and decode it to text? I think the last step would involve openssl x509 -text -noout but the ...
2
votes
1answer
211 views

Using CERT Tapioca on VirtualBox

I'm attempting to use Cert Tapioca (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) in Virtual Box so that I can test the SSL/HTTPS security of all the sites I have browsed. What I did is, ...
0
votes
1answer
700 views

Can I extract a certificate private key from the windows certificate store in a disk image?

After re-installing Windows 7 I notice that I seem to have failed to export the private key for one of my client certificates (for Internet Explorer use). When viewing the certificate in IE, it ...
10
votes
1answer
2k views

How to know which Certificates to leave in my browser, and which to remove

I would like to tighten up security a bit, so I am disabling unneeded certs from my browsers. For instance, the "WoSign CA Limited" cert from China I obviously don't need, yet "Thawte Consulting cc" I ...
4
votes
2answers
6k views

Why is the local certificate store missing in Windows 8.1?

I am trying to import a self-signed certificate into che local certificate store of the Trusted Root CAs on my Windows 8.1 machine, but that store is missing. Importing it into the Trusted Root CAs ...
0
votes
1answer
255 views

Error on “-e” parameter when running makecert command in powershell

I am trying to run the following command in Powershell on a machine running Server 2012: makecert -r -pe -n CN="*.$domainVariable" -b 01/01/2000 -e 01/01/2036 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr ...
1
vote
1answer
377 views

Can I use a “Microsoft Office” Digital ID / certificate to sign PDFs in Adobe Acrobat?

I've been needing to sign PDFs lately - fortunately everyone's been fine with me using a self-signed certificate, however I feel it's unprofessional. I'm looking for a personal certificate I can use ...
0
votes
1answer
46 views

How to sign a CSR on windows

I've got a custom certificate that I'm using as a local root authority. This certifcate has a private key on my machine and is stored in the "Personal" certificates store of the "Local Machine" ...
0
votes
0answers
90 views

Does a certificate from “open.nsa.gov” in firefox mean the browser defaultly trusts the NSA?

While exploring Firefox options I see that I have a certificate identifying the NSA, issued by the US Government. I don't recall adding this at any point and don't really want my machine trusting the ...
0
votes
1answer
2k views

How to turn off Opera security incomplete certificate message?

While I'm browsing the Internet, Opera always pop out a lots of these Server certificate chain incomplete boxes. Several times it pops out tons of them . Even if I click to remember my choice or ...
0
votes
1answer
135 views

Why can`t we treat SSL Certs like Pgp keys instead of trusting CAs? [closed]

I am dumb and stupid and I do not know all the technical aspects of SSL and server/client side implications and implementations. However I understand them good enough from user point of view to use ...
0
votes
1answer
152 views

PKCS12 key from Winserver2008 cert authority

I have created a standalone cert authority in windows server 2008. I can use certreq (from that same box) to generate a cert with the appropriate CN, etc, and ensure that the private key is ...
1
vote
0answers
70 views

Windows (partially) claims I have a private key for a foreign certificate

We have a MS Word document template with vba code produced and signed by an external firm. When I view the details of the signing certificate from within Word vba developer tools, it shows up with ...
4
votes
1answer
405 views

How to make computer (or user) trust signed software

I have an application, which I sign and timestamp using a code-signing certificate issued by thawte, with intermediate authority Thawte code signing CA - G2. The signature is OK (as it shows in file ...
0
votes
0answers
30 views

FTPS certificate email address has different domain than the Organization name

Wondering if this should be of any concern. We received a FTPS ip which is SSL enabled. (This is not SFTP). Filezilla - the FTP client shows a certificate where the organization name say 'XYZ Inc' and ...
0
votes
1answer
53 views

How to get digicert high assurance in my Mac

I removed Digicert high assurance certificate from the keychain. Now when I visit facebook.com or other ssl websites from chrome, they don't open and I get an SSL error, e.g.: How can I to get ...
1
vote
0answers
413 views

Convert whole .pem Certificate to hexadecimal

I want to convert a whole pem-Certificate in hexadecimal. I tried it with: openssl x509 -modulus -noout < cert.pem| sed s/Modulus=/0x/ I'n not sure about it, if this is the right way to do. Am I? ...
0
votes
0answers
216 views

Force java to accept self signed certificates

OK, I know about the excepction list, but adding individual URLs to the exception filter is not the way I want to proceed. I already have click-to-run enabled, therefore if I want to run a java ...
2
votes
0answers
295 views

Change Windows 7 RDP host certificate expiration date

My Windows 7 desktop computer uses a self-signed certificate to identify its RDP host. So to prevent a man-in-the-middle attack, I have to manually verify the thumbprint the first time my RDP client ...
5
votes
2answers
4k views

Why does https://gmail.com/ produce no SSL error while using a bad certificate?

It looks like https://gmail.com uses an SSL certificate which is for the hostname mail.google.com. As the SSL certificate hostname does not match the browser URL, why does this work? I should get a ...
0
votes
0answers
767 views

IE/Chrome add permanent SSL certificate exception?

How can I add a permanent SSL certificate exception for certain websites? These sites have certificates signed by some root CA which I do not want to trust. When I tried to manually install the ...
5
votes
2answers
2k views

Netflix SSL certificate shows up when trying to visit https://www.google.com

I'm on a hotel Wi-Fi network where occasionally the following message shows up in Chrome when trying to visit any Google sites over HTTPS: The SSL certificate reported when this happens is This ...
3
votes
3answers
3k views

HTTPS certificates invalid on Safari, Chrome on specific user account

Safari and Chrome report invalid certificates on certain HTTPS sites (for example GitHub and Bitbucket). Firefox strangely shows a green valid certificate. I've created a new OS X user and everything ...
0
votes
1answer
62 views

Adding cert to trusted certs

I'm trying to access a web service from a certain website. Since this is a service I can't just click somewhere "go to this site anyway". I just get an endpoint exception in my code. I downloaded ...
0
votes
0answers
90 views

Windows keeps restoring DigitCert root certificates

I issued a SSL certificate trought DigiCert which we know is globally recognized and its Trusted Roots should be by default in Windows installations. However on one of my client's machine there was ...
0
votes
2answers
304 views

Is Firefox using its own isolated Certificate STore

I am using the latest Firefox. However, my campus uses their own certificate for all internet browsing and asks us to install their certificate as Root CA. Since, i don't trust them with my ...
0
votes
1answer
185 views

How to install a mmc certificate on Windows?

I am not familiar with Windows very much, and I have trouble installing a MMC certificate. I am following this description to use MMC to create a certificate, but I cannot complete the step labeled ' ...
0
votes
0answers
27 views

Cant install certificate to Intermediate Certification Authorities?

I navigate to MCC and add the Certificates snap-in. From here I right click on Intermediate Certification Authorities > All Tasks and click import I then browse to my Certifcate select it and complete ...
0
votes
1answer
59 views

Is it possible to get someone's code signing certificate revoked?

I recently had to clean up someone's computer because they were tricked into installing a bunch of things without their knowledge. The horrible thing about it was that the installer was signed with a ...
0
votes
2answers
3k views

How can I export private key from a certificate chain?

I create a keystore and from that keysore I generate a CSR file and when I receive Signed Certificate from CA, I imported root and intermediate certificates to my keystore and finally my signed ...
1
vote
2answers
396 views

Generate a public key certificate signed by CA with OpenSSL

I am working on a webservice that requires a signature in the sent and received messages. After sending a certificate request to the entity that will consume the webservice, they sent me (in addition ...
1
vote
2answers
98 views

How to build a certifcate chain for ServerHello

I've been trying to put together a certificate chain. I have the private key (privatekey.pem) and CSR (csr.pem) that I submitted to the Certificate Authority/CA. I took the CA's certificate and put ...
0
votes
1answer
707 views

Is it possible to merge my certificate (.crt) with my private key to export as a Base-64 encoded X.509 (.CER)

I am very clueless when it comes to certificates/security and the like so please excuse my ignorance. I purchased a certificate and it was sent to me. I generated the CSR using the java keytool. I ...
0
votes
0answers
237 views

Windows 7 IPsec IKEv2 EAP-TLS error

I have set-up Strongswan on a Ubuntu 14.04 server from the official package repo with IKEv2 and rightauth=eap-tls using our PKI infrastructure. I can connect just fine from Android and Linux but not ...