Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

1
vote
1answer
30 views

CA certificate expired on openvpn

I have a problem with CA certificate on openvpn, it has expired and clients cannot connect. I tried to create a new certificate with the ca.key, but it did not work. Here is the command I used to ...
6
votes
6answers
13k views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access ...
29
votes
5answers
72k views

How do you add a certificate authority (CA) to Ubuntu?

My work has decided to issue their own certificate authority (CA) to handle different aspects of our work securely without paying for certificates. Cryptographically sign emails Encrypt email ...
3
votes
3answers
1k views

Certificates signed by multiple CAs

Is it possible to have a OpenSSL Certificate signed by multiple CAs? Background: We have a CA to issue certificates mainly for our machine-to-machine communications. Now we need to make some services ...
0
votes
1answer
259 views

VirtualBox fails to start on Windows Server 2003

For reasons I cannot disclose, I need to install a Linux server within a VirtualBox host running in Windows Server 2003. Unfortunately, VirtualBox fails to start, giving me an error that seems to ...
92
votes
4answers
148k views

How to save a remote server SSL certificate locally as a file

I need to download an SSL certificate of a remote server (not HTTPS, but the SSL handshake should be the same as Google Chrome / IE / wget and curl all give certificate check fail errors) and add the ...
1
vote
1answer
86 views

Same SSL Cert on 2 Servers, 1 Passes & Other Doesn't

I run a few small sites, and last year installed SSL certificates on each of them. Last week a visitor contacted me with a question about my SSL certificate, which prompted me to run a couple of SSL ...
0
votes
2answers
113 views

Mozilla Firefox won't connect to Google, IE can

I have went on to Google search before, however today, Mozilla Firefox won't let me connect to Google's search page. This is what I get. You have asked Firefox to connect securely to ...
1
vote
3answers
223 views

SSL Root CA certificate is not recognized, although present in the trust store. Why?

Background: Ubuntu Server 14.10 64-bit on aws.amazon.com/ec2 Cheap PositiveSSL server certificate from COMODO 1 server certificate, 2 intermediate CA certificates and 1 Root CA certificate as ZIP ...
1
vote
0answers
18 views

Bypass the certificate warning pages in Chrome for a specific URL

I manage an Aruba access point virtual controller cluster and when I visit the local management URL by IP (no DNS involved) over the local network using Chrome I get these two warning pages that I ...
0
votes
1answer
25 views

How to bulk extract personal certificates on Windows?

We are upgrading computers to Win7 and I've found a computer with 300+ personal certificates and we need to save all of them. Is there a way to bulk export them?
0
votes
0answers
38 views

Install self-signed SSL certificate correctly (for use in Node.js)

I've been trying to create a self-signed certificate, use it in a simple Node.js server, and install it into the system to the system trusted. However, something is not working, the 'SSL certificate ...
0
votes
2answers
466 views

Restrict export of private keys in the Windows certificate store using a password

In the Windows certificate store, I am looking for a way (if it is possible) to store a public/private pair and keep the private exportable, BUT restrict the export to only those that know a password. ...
0
votes
0answers
16 views

Changing strong protection passwords of private key in the Windows certificate store

When importing a x509 certificate with a private key into the Windows certificat store, there is an option to set a password for that key (It is called “strong protection” in the Certificate Import ...
6
votes
1answer
142 views

Same version of Chrome, two different behavior regarding sha1 deprecation

i'm well aware of the changes made to Chrome 42 and sha1 signed certificates. Here a short reminder : https://blog.filippo.io/the-unofficial-chrome-sha1-faq/ Our client reported this problem and ...
1
vote
1answer
67 views

What is causing a Java certificate confirmation for javadl-esd-secure.oracle.com to show?

For the last 3 days I occasionally get this window in front of me: Do you want to Continue? The web site's certificate has been verified. Website: ...
0
votes
0answers
12 views

Run our own Certificate Authority for internal use only: safe or not? [migrated]

According to the guide at How to Run Your Own Certificate Authority, my company intends to issue our own digital certificates for internal use only (the Managers will sign PDF documents to send the ...
1
vote
1answer
3k views

Certificate errors don't offer the option to “continue to website (not recommended)”

I'm using IE9 and trying to access a trusted page with an security certificate not from a trusted authority. I know I can permanently add the certificate once I access the page. The trouble is, ...
0
votes
0answers
18 views

Firefox Developer Edition refuses all certificates for all sites

All of a sudden yesterday, Firefox Developer Edition on my Windows 7 Professional laptop appeared to get "reset" almost as if it had been re-installed from scratch. All my bookmarks disappeared. ...
2
votes
5answers
4k views

Certificate not trusted over Win7 to Win7 Remote Desktop connection

I'm experiencing a certificate issue while connecting two Windows 7 machines together via Remote Desktop. I have installed the certificate, but I'm getting a message that says the cert is not trusted. ...
5
votes
2answers
17k views

how to get and use certificates with curl

1) Entering the following command curl -k email@mail.com:password https://www.site.com Returns the following error <HTML><HEAD><meta http-equiv="content-type" ...
1
vote
1answer
28 views

What's the difference between certificate and credentials?

What's the difference between digital certificate (e.g. .pem or .der files) and credentials (e.g. .pfx files)?
0
votes
0answers
8 views

Multiple Public Certificates Issued to the Same Name

I have a setup where there are two systems that expose a web service. The URLs are load balanced by a virtual IP that just does a TCP health check and routes a request to either of the two systems. ...
1
vote
1answer
21 views

When multiple Encrypting File System certificates are installed, which one is used for encryption?

To encrypt a file or folder in Windows, you basically go to its Properties and check Encrypt contents to secure data. Windows will use the certificate for Encrypting File System (EFS) that is ...
-1
votes
0answers
15 views

Windows Certificate Store hierarchy / heredity?

i know the default windows system stores, like: CERT_SYSTEM_STORE_CURRENT_USER CERT_SYSTEM_STORE_LOCAL_MACHINE CERT_SYSTEM_STORE_CURRENT_SERVICE CERT_SYSTEM_STORE_SERVICES CERT_SYSTEM_STORE_USERS ...
0
votes
2answers
71 views

How to disable driver certificate verification in Windows 10

I just built a new machine and need to load an older driver for one of my 44" Designjet printers, but Win 10 will not allow either the driver for Win 7 64-bit or for Win 8 64-bit because they lack a ...
0
votes
0answers
43 views

How can I install PowerDirector 9 on Windows 10?

After upgrading my PC from Windows 8.1 to 10, I discovered that I can't install PowerDirector 9 anymore, nor any other part of the CyberLink software suite. When I run setup.exe, I'm told that the ...
0
votes
0answers
11 views

EFS can decrypt a file but not re-encrypt after modification [migrated]

I have a Windows 2008 R2 server with a shared folder containing an encrypted subfolder (EFS) for each user with important files. For security reasons 2 additional DRA's have been configured on the ...
2
votes
2answers
9k views

Cannot send encrypted message to others using Outlook 2010

I am unable to send encrypted messages to others in Outlook 2010. I get the following error: "Microsoft Outlook had problems encrypting this message because the following recipients had missing ...
0
votes
0answers
145 views

What Registry entry used to disable Java's “Signed code certification revocation check”?

We have successfully disabled Java updates for all users of a computer via a registry solution found on this site. How can we now do the same thing for enabling the "Do not check (not recommended)" ...
0
votes
0answers
12 views

Cannot Create a User in ipa server for remote login

I had created a new IPA IdM server in centos 7 using script install-ipa-server. The installation was successful. Post installation i was not able to create a user using ipa user-add user it asks for ...
0
votes
0answers
15 views

How do I specify a CA certificate and/or client certificate to the links web browser

I have a need to use a local web browser for diagnostics to verify a secure website endpoint within a datacentre. This endpoint is TLS enabled and protected with a client certificate, both of which ...
2
votes
3answers
4k views

Creating a signing certificate for Outlook 2010 under Windows 7

I'm trying to create a S/MIME signing certificate for Outlook 2010 under Windows 7. I've gone into Options -> Trust Center (see below) to try and set it up but when I attempt to select the signing ...
-1
votes
1answer
30 views

cacert.pem location [closed]

Where can I find the 'cacert.pem' in Linux? I need it for ssl configuration.
0
votes
0answers
10 views

Win 10 - CreateObject(“X509Enrollment.CX509PrivateKey”) throws Object does not support this property or method [migrated]

Win 7 - IE 11 has 6.1.7600.16385 of this "X509 Enrollment WebClassFactory" ActiveX control. Win 10 - IE 11 has 10.0.10240.16384 of this "X509 Enrollment WebClassFactory" ActiveX control. The below ...
0
votes
0answers
13 views

Certificate authentication over socks/ssh

My workplace has the requirement that to browse any internal site the browser has to present a valid certificate. My desktop at work has such a valid certificate. I would like to tunnel to the desktop ...
2
votes
1answer
70 views

How to use backup EFS certificate to decrypt encrypted files?

I have some files that were encrypted on a now extinct Windows 7 system. I made sure to backup my keys, this one is called efs.pfx. Double-clicking it launches the Certificate Import Wizard which ...
44
votes
3answers
8k views

Firefox “Untrusted Connection” warnings when visiting reputable HTTPS sites when using child's account

When using Firefox on Windows, I see an "Untrusted Connection" warning when visiting any HTTPS site, including very reputable ones such as https://www.google.com and https://search.yahoo.com. The ...
2
votes
1answer
331 views

Does a certificate authority (CA) have to be online constantly?

Does a CA has to be online all the time in order for the whole system to work? For example, if I go to a secure webpage that uses a certificate signed by a CA, I receive a public key along with the ...
0
votes
1answer
18 views

Where to find signing certificates in Thunderbird?

I have recently installed a Linux version besides Windows on my laptop. I am now copying over important programs and settings. I used to sign messages in Thunderbird with a certificate in Windows. I ...
0
votes
0answers
82 views

Chrome is not accepting my IIS self-signed certificate

I'm developing on my local machine with a self-signed certificate in IIS. Everytime I open Chrome and go to my site, initially I get an error 'Your connection is not private'. I then have to click ...
8
votes
8answers
26k views

Firefox: This connection is untrusted + Behind corporate firewall

I've seen some similar issues strewn throughout Google's results about this, but none seem to be corporate-specific. I continually get the 'This connection is untrusted' screen every time I attempt ...
0
votes
1answer
184 views

Pure-FTPD certificate not being used

I am using Pure-FTPD from the epel repository on CentOS 6. Now I have configured to enable TLS which works fine however for some reason it wont make use of the certificate file I have placed in ...
0
votes
1answer
34 views

Where does Firefox get the HSTS information from?

I have a local server serving HTTPS using a self-signed certificate. It does not serve http. The certificate is issued with cn=host1.subdomain1.domain1. The server is reachable under name host2, too. ...
0
votes
0answers
50 views

Chrome suddenly red HTTPS on mobile but not on desktop

Yesterday I enabled OCSP stapling for my website in nginx. Now when I check my website using Qualys SSL Labs I have 2 trust paths, 1 using a SHA1 root certificate and 1 using a SHA256 root ...
0
votes
0answers
57 views

Chrome is showing incomplete or wrong cert info

We've got a webserver (Apache) at work that is using https for our webpage. The thing is that everytime I enter this page from chrome I get: NET::ERR_CERT_AUTHORITY_INVALID I created the certificate ...
0
votes
0answers
31 views

Why the digital signature is invalid?

I have signed a pdf digitally with a valid certificate installed as a personal certificate in the keystore. When I open the file in my computer the signature is valid and the signer is the current ...
2
votes
4answers
3k views

Cannot remove encryption from files on Windows 2008 R2

I have noticed that all of my web application files turned green color, which means they are encrypted. I have never applied encryption to these files. When I right-click the file, then go to ...
29
votes
3answers
40k views

How to create my own certificate chain?

I would like to setup my own OCSP Responder (just for testing purposes). This requires me to have a root certificate and a few certificates generated from it. I've managed to create a self-signed ...
3
votes
1answer
56 views

Get RSA private key and certificate from GlobalSign certificate

I can generate my own private key and certificate as follows: openssl genrsa -out privatekey.pem 2048 openssl req -new -x509 -key privatekey.pem -out g4certificate.pem -days 1095 Copy+pasting the ...