Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

3
votes
0answers
2k views

OpenVPN server certificate configuration instructions for DD-WRT router do not match user interface

I'm setting up the OpenVPN server daemon on a Buffalo N600 router which came stock with DD-WRT v.24 SP2. I'm following the instructions at VPN (The Easy Way) V24+ to set up the server side of things ...
3
votes
0answers
3k views

OpenVPN AUTH failure, but login data is correct

I installed OpenVPN on both windows 7 and ubuntu 12.10. In both cases I have the same problem. I have a .ovpn file and a .crt file which I need to connect to the vpn. I also have a username/password ...
2
votes
0answers
16 views

How can I sign an MS Word macro with a digital certificate from the local machine certificate store?

I am trying to find out how I can digitally sign a Microsoft Word macro using a valid 3rd party CA issued VBA code-signing certificate that is installed into the machine rather than the user ...
2
votes
0answers
134 views

Change Windows 7 RDP host certificate expiration date

My Windows 7 desktop computer uses a self-signed certificate to identify its RDP host. So to prevent a man-in-the-middle attack, I have to manually verify the thumbprint the first time my RDP client ...
2
votes
0answers
111 views

Bogus Chrome Installer?

Just a few days ago I tried to download Chrome (using IE 11) to a new Windows 7 system. I examined the certificate for the Chrome installer (clicking on the highlighted Google Inc. next to ...
2
votes
0answers
526 views

Chrome ignores some imported certificates

On Windows 7 with Chrome 30. I have a few websites running on localhost over SSL. Visiting them always displays the standard "The site's security certificate is not trusted!" message from Chrome. I ...
2
votes
0answers
268 views

Setup Ubuntu L2TP VPN server and authenticate users with certificates

I am trying to setup an L2TP server on my Ubuntu VPS and use certificates to authenticate users rather than a password. The reason behind this choice is that I don't want to have plain text passwords ...
2
votes
0answers
3k views

Disable SSL hostname check in Chrome

How I disable SSL certificate error when CN does not match DNS name in Chrome? In IE, this is done by Tools -> Internet Options -> Advanced (tab) -> Scroll down to section "Security" -> checkbox: ...
1
vote
0answers
14 views

Hang when launching digitally signed executable

We have a weird problem on 2 PCs with running a digitally signed 120 Mb executable. If user launches a digitally signed .exe - then the launching host (e.g. Explorer or cmd.exe) will enter infinite ...
1
vote
0answers
51 views

Windows (partially) claims I have a private key for a foreign certificate

We have a MS Word document template with vba code produced and signed by an external firm. When I view the details of the signing certificate from within Word vba developer tools, it shows up with ...
1
vote
0answers
87 views

Convert whole .pem Certificate to hexadecimal

I want to convert a whole pem-Certificate in hexadecimal. I tried it with: openssl x509 -modulus -noout < cert.pem| sed s/Modulus=/0x/ I'n not sure about it, if this is the right way to do. Am I? ...
1
vote
0answers
67 views

(Chrome on) Windows 8 complains certificate not yet valid

Chrome on Windows 8 complains that a server certificate is not yet valid. Chrome on Linux does not complain though, and Firefox on the same Windows 8 machine does not complain either. The certificate ...
1
vote
0answers
42 views

How can I verify on download that a site's SSL cert is for a host I trust?

Generally I want to be able to make an HTTPS connection to a site, and while negotiating the SSL check that: The cert is in every way valid for the host listed on the cert (unexpired, signed by ...
1
vote
0answers
93 views

Java keyTool - append primary/secondary intermediate certificates to key store

I have already created a keystore (server.jks in the image) having imported the relevant key-pair. keytool -importkeystore -srckeystore server.p12 -destkeystore server.jks -srcstoretype pkcs12 I ...
1
vote
0answers
38 views

Is there a way to quickly disable all root certificates in Windows 7?

I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click Properties and selecting "Disable all ...
1
vote
0answers
42 views

Microsoft Digital Signature Expiration in Active Directory

We have a large number of users on our network that need to sign forms digitally from time to time with Microsoft digital signatures that are set up to expire each year. Some of our users however are ...
1
vote
0answers
41 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
1
vote
0answers
157 views

Backup EFS encryption key generated, but no encrypted files? Track what caused the key creation

In I started getting a weird message "Encrypting file system - Back up your file encryption key" a user experiences a prompt that I also experienced yesterday for the first time. Now the ...
1
vote
0answers
221 views

S/MIME email Public Certificate?

Is there a way to create a public certificate for a S/MIME email certificate? I would like to share the public key on my website so people can send me encrypted emails. However I can only find ...
1
vote
0answers
93 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
1
vote
0answers
419 views

Unable to continue after certificate error i IE

I am on a closed HP ILO network, and I am trying to access the web interface (https) of a HP c7000 Onboard Administrator (though I do not believe this is an issue specific to the equipment) through ...
1
vote
0answers
58 views

can UAC prevent reading a certficate?

Weird question with, hopefully, a short answer. I have this application running on windows 7 that calls a webservice through a .NET DLL. To be able to do that it needs to read some certificates, ...
1
vote
0answers
41 views

How to only accept certificates issued by user-specified CA per domain?

Question Is it possible in Chromium or Firefox to only accept SSL certificates issued by a user-specified CA for a specific domain? Background When you have set up your own certificate authority ...
1
vote
0answers
98 views

Windows Event Forwarding between two computer out of a domain

I've got two computers and I want to set up event forwarding between them. Source computer is out of a domain, another is in some Domain. I tried to configure source initiated event subscrption but it ...
1
vote
0answers
106 views

Mac: Certificate expiration date is not consistent

In the Expires column of the Keychain Access application I can see the expiration date of certificates. Strangely these dates do not match the actual expiration. See below for an example. This ...
1
vote
0answers
566 views

Certificates in Iceweasel

I'm trying to make a backup of a certificate which is imported to iceweasel. So i#m following the steps Edit->Prereferences->Advanced->Encryption->View Certificates. Then I choose my certificate, and ...
1
vote
0answers
749 views

Revocation information not available for certificate?

I'm trying to download SQL Server 2008 R2 Enterprise Edition from MSDNAA on my Windows 7 laptop. When I attempted to start the download, I was shown the following prompt: Revocation Information ...
1
vote
0answers
444 views

Preventing Internet Explorer from “remembering” an old SSL certificate

A website I'm using has switched recently from a GoDaddy SSL certifcate to a StartCom certificate, which works fine in most cases. The original GoDaddy certificate expired last year. However, in ...
1
vote
0answers
212 views

Can I install a localized certificate authority in Windows XP?

We are a division of a much larger organization and this organization uses Novell domain authentication. The entire division uses Windows XP. We'd like to implement digital signing of our Office ...
1
vote
0answers
187 views

Creating Certificate and KeyValue

I'm quite new to the whole certificate-thing so I hope you can help me out. I need to create a self-signed X509Certificate2 certificate and a get the dependent KeyValue for my project. What is the ...
1
vote
0answers
721 views

IE8 and certificate issues following Service Pack 1 install on Windows 7

When trying to open Internet Explorer 8 under a different user account, I get the following error: There is a problem with this website's security certificate. I found this post which describes ...
1
vote
0answers
1k views

How to I make a Windows certificate exportable?

I'm looking for a tool or solution that would allow me make a certificate that is marked as non-exportable to be exportable. I am aware about Jailbreak tool but because the tool does not fully ...
0
votes
0answers
40 views

Expired web/SSL certificate error on only one computer

I have a strange problem with one website's SSL certificate that only affects one computer. The site works fine on other computers with no error. I do not own or administer the website, but because ...
0
votes
0answers
30 views

osx 10.10 with Java 8 allow application with expired certificate

I´m trying to install Atlasstyler (http://en.geopublishing.org/) on a osx 10.10 box with java 8- update 25 installed. Trying to run the installer (Version 1.9 201403170926) ends in following deny ...
0
votes
0answers
25 views

Import Certification for 3rd party Engine to IBM Application Server 7.0.35

I used 3rd party module in my system called (/n) slash n, This module have its own certification, As a temporary solution I added this certification to JDK directry. How I can add this certification ...
0
votes
0answers
13 views

Issues with adding new root certificate in windows 8.1

I'm trying to implement my own self signed certificate for testing purposes but I'm running into some issues with Windows 8.1 on my computer. For some reason the certmgr.msc doesn't give me the option ...
0
votes
0answers
30 views

How can I get my company proxy's root certificate (with Firefox)?

I'm facing a similar problem as in Firefox: This connection is untrusted + Behind corporate firewall that is, I'm getting "this connecting is untrusted" whenever I try to connect via https, as ...
0
votes
0answers
34 views

Do I need to regenerate certificates on master in order to use centralized CA in Puppet

I have a set up where I use two monolithic PE-Puppet 3.3.2 installations as puppet masters. I need to make one of these a CA and the other just a master for nodes. The nodes should not contact CA ...
0
votes
0answers
11 views

How to bulk extract personal certificates on Windows?

We are upgrading computers to Win7 and I've found a computer with 300+ personal certificates and we need to save all of them. Is there a way to bulk export them?
0
votes
0answers
34 views

Requesting a server authentication certificate

I encountered problem when I go to http://localhost/certsrv in Windows Server 2008 R2 I cannot find option to - Create and Submit A Request To This CA. What I find is completely different. I would add ...
0
votes
0answers
84 views

Can I extract a certificate private key from the windows certificate store in a disk image?

After re-installing Windows 7 I notice that I seem to have failed to export the private key for one of my client certificates (for Internet Explorer use). When viewing the certificate in IE, it ...
0
votes
0answers
35 views

Using the windows certificate store for git SSH

I am currently working on setting up a build environment that will use OpenSSH with certificates as the primary authentication method (Certificates, not public-private keys). The build environment ...
0
votes
0answers
107 views

Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file?

Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file? Scenario: We have a few legacy certificates based on some legacy templates (2012 R2). ...
0
votes
0answers
21 views

CDP set on a CA does not appear in the issued certificate

I have a working but undermanaged two-level enterprise CA structure on a Microsoft Active Directory environment - a root CA, an enterprise subordinate CA with templates, and a couple of supporting ...
0
votes
0answers
52 views

Does a certificate from “open.nsa.gov” in firefox mean the browser defaultly trusts the NSA?

While exploring Firefox options I see that I have a certificate identifying the NSA, issued by the US Government. I don't recall adding this at any point and don't really want my machine trusting the ...
0
votes
0answers
97 views

OpenVPN security, authentication

I would like to know if this config can be enhanced, in particular i wanted to ask if OVPN certificate-auth can be considered somewhat secure'ish ... ? For example : would any client be able to ...
0
votes
0answers
24 views

RootCertificate popup does install

When connecting to my university's wifi, it keeps popping up with a certificate (root) that needs to be install, I select yes [yes|no|view details] But I am not sure if it installs the certificate ...
0
votes
0answers
84 views

Java allowing self-signed certificates but option is disabled

Java does not want to run an application with self-signed certificate, I'm using java 1.6u45 the option in the Java Control Panel under Security -> General -> "Allow user to grant permissions to ...
0
votes
0answers
15 views

FTPS certificate email address has different domain than the Organization name

Wondering if this should be of any concern. We received a FTPS ip which is SSL enabled. (This is not SFTP). Filezilla - the FTP client shows a certificate where the organization name say 'XYZ Inc' and ...
0
votes
0answers
173 views

SSL certificate error attempting to download Homebrew?

I've been trying to download and install Homebrew for my Mac (OS 10.9.4) using the install script on the home page, but the download fails with a SSL certificate error (see log below). I understand ...