Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

3
votes
0answers
114 views

How to make computer (or user) trust signed software

I have an application, which I sign and timestamp using a code-signing certificate issued by thawte, with intermediate authority Thawte code signing CA - G2. The signature is OK (as it shows in file ...
2
votes
0answers
61 views

Change Windows 7 RDP host certificate expiration date

My Windows 7 desktop computer uses a self-signed certificate to identify its RDP host. So to prevent a man-in-the-middle attack, I have to manually verify the thumbprint the first time my RDP client ...
2
votes
0answers
94 views

Bogus Chrome Installer?

Just a few days ago I tried to download Chrome (using IE 11) to a new Windows 7 system. I examined the certificate for the Chrome installer (clicking on the highlighted Google Inc. next to ...
2
votes
0answers
241 views

Setup Ubuntu L2TP VPN server and authenticate users with certificates

I am trying to setup an L2TP server on my Ubuntu VPS and use certificates to authenticate users rather than a password. The reason behind this choice is that I don't want to have plain text passwords ...
2
votes
0answers
2k views

OpenVPN server certificate configuration instructions for DD-WRT router do not match user interface

I'm setting up the OpenVPN server daemon on a Buffalo N600 router which came stock with DD-WRT v.24 SP2. I'm following the instructions at VPN (The Easy Way) V24+ to set up the server side of things ...
2
votes
0answers
3k views

Disable SSL hostname check in Chrome

How I disable SSL certificate error when CN does not match DNS name in Chrome? In IE, this is done by Tools -> Internet Options -> Advanced (tab) -> Scroll down to section "Security" -> checkbox: ...
1
vote
0answers
46 views

Windows (partially) claims I have a private key for a foreign certificate

We have a MS Word document template with vba code produced and signed by an external firm. When I view the details of the signing certificate from within Word vba developer tools, it shows up with ...
1
vote
0answers
30 views

Convert whole .pem Certificate to hexadecimal

I want to convert a whole pem-Certificate in hexadecimal. I tried it with: openssl x509 -modulus -noout < cert.pem| sed s/Modulus=/0x/ I'n not sure about it, if this is the right way to do. Am I? ...
1
vote
0answers
53 views

Linux Mint won't allow me to import a .p12 signing certificate

I have a .p12 certificate that was issued to me by my university. I have been able to install it on OSX just fine, but I need to use it for Cisco Anyconnect in Linux Mint 17. When I double click it, ...
1
vote
0answers
41 views

(Chrome on) Windows 8 complains certificate not yet valid

Chrome on Windows 8 complains that a server certificate is not yet valid. Chrome on Linux does not complain though, and Firefox on the same Windows 8 machine does not complain either. The certificate ...
1
vote
0answers
37 views

How can I verify on download that a site's SSL cert is for a host I trust?

Generally I want to be able to make an HTTPS connection to a site, and while negotiating the SSL check that: The cert is in every way valid for the host listed on the cert (unexpired, signed by ...
1
vote
0answers
68 views

Java keyTool - append primary/secondary intermediate certificates to key store

I have already created a keystore (server.jks in the image) having imported the relevant key-pair. keytool -importkeystore -srckeystore server.p12 -destkeystore server.jks -srcstoretype pkcs12 I ...
1
vote
0answers
30 views

Is there a way to quickly disable all root certificates in Windows 7?

I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click Properties and selecting "Disable all ...
1
vote
0answers
27 views

Microsoft Digital Signature Expiration in Active Directory

We have a large number of users on our network that need to sign forms digitally from time to time with Microsoft digital signatures that are set up to expire each year. Some of our users however are ...
1
vote
0answers
34 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
1
vote
0answers
210 views

How to develop a Chrome extension that overrides SSL certificate error for self-signed certificate?

The process of adding a self signed certificate to the list of trusted certificates in Chrome is manual and tedious. I frequently access a trusted website that uses a self-signed certificate. As I am ...
1
vote
0answers
115 views

Backup EFS encryption key generated, but no encrypted files? Track what caused the key creation

In I started getting a weird message "Encrypting file system - Back up your file encryption key" a user experiences a prompt that I also experienced yesterday for the first time. Now the ...
1
vote
0answers
165 views

S/MIME email Public Certificate?

Is there a way to create a public certificate for a S/MIME email certificate? I would like to share the public key on my website so people can send me encrypted emails. However I can only find ...
1
vote
0answers
80 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
1
vote
0answers
291 views

Unable to continue after certificate error i IE

I am on a closed HP ILO network, and I am trying to access the web interface (https) of a HP c7000 Onboard Administrator (though I do not believe this is an issue specific to the equipment) through ...
1
vote
0answers
56 views

can UAC prevent reading a certficate?

Weird question with, hopefully, a short answer. I have this application running on windows 7 that calls a webservice through a .NET DLL. To be able to do that it needs to read some certificates, ...
1
vote
0answers
338 views

Chrome ignores some imported certificates

On Windows 7 with Chrome 30. I have a few websites running on localhost over SSL. Visiting them always displays the standard "The site's security certificate is not trusted!" message from Chrome. I ...
1
vote
0answers
38 views

How to only accept certificates issued by user-specified CA per domain?

Question Is it possible in Chromium or Firefox to only accept SSL certificates issued by a user-specified CA for a specific domain? Background When you have set up your own certificate authority ...
1
vote
0answers
86 views

Windows Event Forwarding between two computer out of a domain

I've got two computers and I want to set up event forwarding between them. Source computer is out of a domain, another is in some Domain. I tried to configure source initiated event subscrption but it ...
1
vote
0answers
104 views

Mac: Certificate expiration date is not consistent

In the Expires column of the Keychain Access application I can see the expiration date of certificates. Strangely these dates do not match the actual expiration. See below for an example. This ...
1
vote
0answers
487 views

Certificates in Iceweasel

I'm trying to make a backup of a certificate which is imported to iceweasel. So i#m following the steps Edit->Prereferences->Advanced->Encryption->View Certificates. Then I choose my certificate, and ...
1
vote
0answers
719 views

Revocation information not available for certificate?

I'm trying to download SQL Server 2008 R2 Enterprise Edition from MSDNAA on my Windows 7 laptop. When I attempted to start the download, I was shown the following prompt: Revocation Information ...
1
vote
0answers
424 views

Preventing Internet Explorer from “remembering” an old SSL certificate

A website I'm using has switched recently from a GoDaddy SSL certifcate to a StartCom certificate, which works fine in most cases. The original GoDaddy certificate expired last year. However, in ...
1
vote
0answers
206 views

Can I install a localized certificate authority in Windows XP?

We are a division of a much larger organization and this organization uses Novell domain authentication. The entire division uses Windows XP. We'd like to implement digital signing of our Office ...
1
vote
0answers
180 views

Creating Certificate and KeyValue

I'm quite new to the whole certificate-thing so I hope you can help me out. I need to create a self-signed X509Certificate2 certificate and a get the dependent KeyValue for my project. What is the ...
1
vote
0answers
712 views

IE8 and certificate issues following Service Pack 1 install on Windows 7

When trying to open Internet Explorer 8 under a different user account, I get the following error: There is a problem with this website's security certificate. I found this post which describes ...
1
vote
0answers
1k views

How to I make a Windows certificate exportable?

I'm looking for a tool or solution that would allow me make a certificate that is marked as non-exportable to be exportable. I am aware about Jailbreak tool but because the tool does not fully ...
0
votes
0answers
3 views

Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file?

Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file? Scenario: We have a few legacy certificates based on some legacy templates (2012 R2). ...
0
votes
0answers
6 views

CDP set on a CA does not appear in the issued certificate

I have a working but undermanaged two-level enterprise CA structure on a Microsoft Active Directory environment - a root CA, an enterprise subordinate CA with templates, and a couple of supporting ...
0
votes
0answers
36 views

Does a certificate from “open.nsa.gov” in firefox mean the browser defaultly trusts the NSA?

While exploring Firefox options I see that I have a certificate identifying the NSA, issued by the US Government. I don't recall adding this at any point and don't really want my machine trusting the ...
0
votes
0answers
45 views

How to turn off Opera security incomplete certificate message?

While I'm browsing the Internet, Opera always pop out a lots of these Server certificate chain incomplete boxes. Several times it pops out tons of them . Even if I click to remember my choice or ...
0
votes
0answers
83 views

OpenVPN security, authentication

I would like to know if this config can be enhanced, in particular i wanted to ask if OVPN certificate-auth can be considered somewhat secure'ish ... ? For example : would any client be able to ...
0
votes
0answers
20 views

RootCertificate popup does install

When connecting to my university's wifi, it keeps popping up with a certificate (root) that needs to be install, I select yes [yes|no|view details] But I am not sure if it installs the certificate ...
0
votes
0answers
27 views

Java allowing self-signed certificates but option is disabled

Java does not want to run an application with self-signed certificate, I'm using java 1.6u45 the option in the Java Control Panel under Security -> General -> "Allow user to grant permissions to ...
0
votes
0answers
11 views

FTPS certificate email address has different domain than the Organization name

Wondering if this should be of any concern. We received a FTPS ip which is SSL enabled. (This is not SFTP). Filezilla - the FTP client shows a certificate where the organization name say 'XYZ Inc' and ...
0
votes
0answers
80 views

SSL certificate error attempting to download Homebrew?

I've been trying to download and install Homebrew for my Mac (OS 10.9.4) using the install script on the home page, but the download fails with a SSL certificate error (see log below). I understand ...
0
votes
0answers
93 views

Chrome won't trust DigiCert SSL. I have to trust it manually.

I have been having this problem for a while. I have found this thread which exactly my problem but it didn't solve my problem. Why won't OS X trust GitHub's SSL certificate? I also tried ...
0
votes
0answers
19 views

Force java to accept self signed certificates

OK, I know about the excepction list, but adding individual URLs to the exception filter is not the way I want to proceed. I already have click-to-run enabled, therefore if I want to run a java ...
0
votes
0answers
196 views

IE/Chrome add permanent SSL certificate exception?

How can I add a permanent SSL certificate exception for certain websites? These sites have certificates signed by some root CA which I do not want to trust. When I tried to manually install the ...
0
votes
0answers
20 views

Server Certificates Missing in IIS

On my Windows Server 2012 R2 box, when I connect to it through Remote Desktop, I'm trying to setup a server certificate but in IIS, in the "IIS" group, there is no Server Certificates feature. I ...
0
votes
0answers
25 views

Windows keeps restoring DigitCert root certificates

I issued a SSL certificate trought DigiCert which we know is globally recognized and its Trusted Roots should be by default in Windows installations. However on one of my client's machine there was ...
0
votes
0answers
16 views

Cant install certificate to Intermediate Certification Authorities?

I navigate to MCC and add the Certificates snap-in. From here I right click on Intermediate Certification Authorities > All Tasks and click import I then browse to my Certifcate select it and complete ...
0
votes
0answers
69 views

Windows 7 IPsec IKEv2 EAP-TLS error

I have set-up Strongswan on a Ubuntu 14.04 server from the official package repo with IKEv2 and rightauth=eap-tls using our PKI infrastructure. I can connect just fine from Android and Linux but not ...
0
votes
0answers
92 views

OpenSSL, Converting CRT to PEM

I've been trying to use openssl to convert a .crt certificate to a .pem openssl.exe x509 -in server.crt -out openssl.pem -inform der -outform pem After using that command, I get unable to load ...
0
votes
0answers
67 views

Outlook 2013: Multiple accounts, sign only mails from one account

I have two email accounts (Exchange) configured in Outlook. For one I have a S/MIME certificate configured which always signs the mails I send from this account. Problem now is that Outlook also ...