Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

3
votes
0answers
2k views

OpenVPN server certificate configuration instructions for DD-WRT router do not match user interface

I'm setting up the OpenVPN server daemon on a Buffalo N600 router which came stock with DD-WRT v.24 SP2. I'm following the instructions at VPN (The Easy Way) V24+ to set up the server side of things ...
3
votes
0answers
4k views

OpenVPN AUTH failure, but login data is correct

I installed OpenVPN on both windows 7 and ubuntu 12.10. In both cases I have the same problem. I have a .ovpn file and a .crt file which I need to connect to the vpn. I also have a username/password ...
2
votes
0answers
22 views

Multi-factor authentication to 2012 RDS farm, preferably client certs?

Wonder if anybody can give me a steer on this. We use RDS quite heavily but I would like to enhance the security of it, VPN is an option but I would prefer to avoid if possible. Ideally what I'd ...
2
votes
0answers
80 views

SSL issue: The private key did not match the public key provided

I followed the instructions outlined here by amazon. A quick summary: Created a private key openssl genrsa -out my-private-key.pem 2048 Created a CSRopenssl req -sha256 -new -key ...
2
votes
0answers
226 views

What is causing warning on a certificate's basicConstraints?

I created a self signed server certificate using OpenSSL's req -x509 command and a CONF file. The CONF file is shown below. When I examine the certificate using Microsoft certificate viewer, its ...
2
votes
0answers
171 views

nginx http to https proxy with self-signed certificate

I have an nginx proxy to redirect http requests with a specified port to another https url. Here is my configuration so far: server { listen 59848; location / { resolver 8.8.8.8; ...
2
votes
0answers
149 views

How can I sign an MS Word macro with a digital certificate from the local machine certificate store?

I am trying to find out how I can digitally sign a Microsoft Word macro using a valid 3rd party CA issued VBA code-signing certificate that is installed into the machine rather than the user ...
2
votes
0answers
227 views

Change Windows 7 RDP host certificate expiration date

My Windows 7 desktop computer uses a self-signed certificate to identify its RDP host. So to prevent a man-in-the-middle attack, I have to manually verify the thumbprint the first time my RDP client ...
2
votes
0answers
158 views

Bogus Chrome Installer?

Just a few days ago I tried to download Chrome (using IE 11) to a new Windows 7 system. I examined the certificate for the Chrome installer (clicking on the highlighted Google Inc. next to ...
2
votes
0answers
984 views

Chrome ignores some imported certificates

On Windows 7 with Chrome 30. I have a few websites running on localhost over SSL. Visiting them always displays the standard "The site's security certificate is not trusted!" message from Chrome. I ...
2
votes
0answers
337 views

Setup Ubuntu L2TP VPN server and authenticate users with certificates

I am trying to setup an L2TP server on my Ubuntu VPS and use certificates to authenticate users rather than a password. The reason behind this choice is that I don't want to have plain text passwords ...
2
votes
0answers
3k views

Disable SSL hostname check in Chrome

How I disable SSL certificate error when CN does not match DNS name in Chrome? In IE, this is done by Tools -> Internet Options -> Advanced (tab) -> Scroll down to section "Security" -> checkbox: ...
1
vote
0answers
17 views

Bypass the certificate warning pages in Chrome for a specific URL

I manage an Aruba access point virtual controller cluster and when I visit the local management URL by IP (no DNS involved) over the local network using Chrome I get these two warning pages that I ...
1
vote
0answers
24 views

What are null certificates in Gnome Seahorse?

In the "Default Trust" tab in Seahorse there are several personal certificates named simply "(null)", which are issued by "No name". There's nothing on their property pages. What are these? Can they ...
1
vote
0answers
22 views

is it possible to use certificates on windows firewall?

Scenario: I have a situation where I work from home. I need to connect to a database server on the internet. The server has whitelist rules for IP addresses on firewall. My IP address changes ...
1
vote
0answers
103 views

Outlook not updating certificate

Outlook is refusing to send an encrypted email to a recipient whose certificate recently expired. The recipient sent a signed email and I exported the certificate to a ".cer" file then updated their ...
1
vote
0answers
24 views

How to get the organization name from a .p12 certificate?

I have a .p12 certificate and I need to find out the organization name of it. How to do that? (I'm using Windows 8.1)
1
vote
0answers
61 views

Windows (partially) claims I have a private key for a foreign certificate

We have a MS Word document template with vba code produced and signed by an external firm. When I view the details of the signing certificate from within Word vba developer tools, it shows up with ...
1
vote
0answers
223 views

Convert whole .pem Certificate to hexadecimal

I want to convert a whole pem-Certificate in hexadecimal. I tried it with: openssl x509 -modulus -noout < cert.pem| sed s/Modulus=/0x/ I'n not sure about it, if this is the right way to do. Am I? ...
1
vote
0answers
101 views

(Chrome on) Windows 8 complains certificate not yet valid

Chrome on Windows 8 complains that a server certificate is not yet valid. Chrome on Linux does not complain though, and Firefox on the same Windows 8 machine does not complain either. The certificate ...
1
vote
0answers
52 views

How can I verify on download that a site's SSL cert is for a host I trust?

Generally I want to be able to make an HTTPS connection to a site, and while negotiating the SSL check that: The cert is in every way valid for the host listed on the cert (unexpired, signed by ...
1
vote
0answers
163 views

Java keyTool - append primary/secondary intermediate certificates to key store

I have already created a keystore (server.jks in the image) having imported the relevant key-pair. keytool -importkeystore -srckeystore server.p12 -destkeystore server.jks -srcstoretype pkcs12 I ...
1
vote
0answers
55 views

Is there a way to quickly disable all root certificates in Windows 7?

I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click Properties and selecting "Disable all ...
1
vote
0answers
77 views

Microsoft Digital Signature Expiration in Active Directory

We have a large number of users on our network that need to sign forms digitally from time to time with Microsoft digital signatures that are set up to expire each year. Some of our users however are ...
1
vote
0answers
55 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
1
vote
0answers
202 views

Backup EFS encryption key generated, but no encrypted files? Track what caused the key creation

In I started getting a weird message "Encrypting file system - Back up your file encryption key" a user experiences a prompt that I also experienced yesterday for the first time. Now the ...
1
vote
0answers
345 views

S/MIME email Public Certificate?

Is there a way to create a public certificate for a S/MIME email certificate? I would like to share the public key on my website so people can send me encrypted emails. However I can only find ...
1
vote
0answers
140 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
1
vote
0answers
715 views

Unable to continue after certificate error i IE

I am on a closed HP ILO network, and I am trying to access the web interface (https) of a HP c7000 Onboard Administrator (though I do not believe this is an issue specific to the equipment) through ...
1
vote
0answers
66 views

can UAC prevent reading a certficate?

Weird question with, hopefully, a short answer. I have this application running on windows 7 that calls a webservice through a .NET DLL. To be able to do that it needs to read some certificates, ...
1
vote
0answers
54 views

How to only accept certificates issued by user-specified CA per domain?

Question Is it possible in Chromium or Firefox to only accept SSL certificates issued by a user-specified CA for a specific domain? Background When you have set up your own certificate authority ...
1
vote
0answers
122 views

Windows Event Forwarding between two computer out of a domain

I've got two computers and I want to set up event forwarding between them. Source computer is out of a domain, another is in some Domain. I tried to configure source initiated event subscrption but it ...
1
vote
0answers
116 views

Mac: Certificate expiration date is not consistent

In the Expires column of the Keychain Access application I can see the expiration date of certificates. Strangely these dates do not match the actual expiration. See below for an example. This ...
1
vote
0answers
852 views

Certificates in Iceweasel

I'm trying to make a backup of a certificate which is imported to iceweasel. So i#m following the steps Edit->Prereferences->Advanced->Encryption->View Certificates. Then I choose my certificate, and ...
1
vote
0answers
794 views

Revocation information not available for certificate?

I'm trying to download SQL Server 2008 R2 Enterprise Edition from MSDNAA on my Windows 7 laptop. When I attempted to start the download, I was shown the following prompt: Revocation Information ...
1
vote
0answers
476 views

Preventing Internet Explorer from “remembering” an old SSL certificate

A website I'm using has switched recently from a GoDaddy SSL certifcate to a StartCom certificate, which works fine in most cases. The original GoDaddy certificate expired last year. However, in ...
1
vote
0answers
216 views

Can I install a localized certificate authority in Windows XP?

We are a division of a much larger organization and this organization uses Novell domain authentication. The entire division uses Windows XP. We'd like to implement digital signing of our Office ...
1
vote
0answers
210 views

Creating Certificate and KeyValue

I'm quite new to the whole certificate-thing so I hope you can help me out. I need to create a self-signed X509Certificate2 certificate and a get the dependent KeyValue for my project. What is the ...
1
vote
0answers
734 views

IE8 and certificate issues following Service Pack 1 install on Windows 7

When trying to open Internet Explorer 8 under a different user account, I get the following error: There is a problem with this website's security certificate. I found this post which describes ...
1
vote
0answers
1k views

How to I make a Windows certificate exportable?

I'm looking for a tool or solution that would allow me make a certificate that is marked as non-exportable to be exportable. I am aware about Jailbreak tool but because the tool does not fully ...
0
votes
0answers
37 views

Install self-signed SSL certificate correctly (for use in Node.js)

I've been trying to create a self-signed certificate, use it in a simple Node.js server, and install it into the system to the system trusted. However, something is not working, the 'SSL certificate ...
0
votes
0answers
16 views

Changing strong protection passwords of private key in the Windows certificate store

When importing a x509 certificate with a private key into the Windows certificat store, there is an option to set a password for that key (It is called “strong protection” in the Certificate Import ...
0
votes
0answers
15 views

Firefox Developer Edition refuses all certificates for all sites

All of a sudden yesterday, Firefox Developer Edition on my Windows 7 Professional laptop appeared to get "reset" almost as if it had been re-installed from scratch. All my bookmarks disappeared. ...
0
votes
0answers
8 views

Multiple Public Certificates Issued to the Same Name

I have a setup where there are two systems that expose a web service. The URLs are load balanced by a virtual IP that just does a TCP health check and routes a request to either of the two systems. ...
0
votes
0answers
43 views

How can I install PowerDirector 9 on Windows 10?

After upgrading my PC from Windows 8.1 to 10, I discovered that I can't install PowerDirector 9 anymore, nor any other part of the CyberLink software suite. When I run setup.exe, I'm told that the ...
0
votes
0answers
10 views

Cannot Create a User in ipa server for remote login

I had created a new IPA IdM server in centos 7 using script install-ipa-server. The installation was successful. Post installation i was not able to create a user using ipa user-add user it asks for ...
0
votes
0answers
15 views

How do I specify a CA certificate and/or client certificate to the links web browser

I have a need to use a local web browser for diagnostics to verify a secure website endpoint within a datacentre. This endpoint is TLS enabled and protected with a client certificate, both of which ...
0
votes
0answers
12 views

Certificate authentication over socks/ssh

My workplace has the requirement that to browse any internal site the browser has to present a valid certificate. My desktop at work has such a valid certificate. I would like to tunnel to the desktop ...
0
votes
0answers
80 views

Chrome is not accepting my IIS self-signed certificate

I'm developing on my local machine with a self-signed certificate in IIS. Everytime I open Chrome and go to my site, initially I get an error 'Your connection is not private'. I then have to click ...
0
votes
0answers
48 views

Chrome suddenly red HTTPS on mobile but not on desktop

Yesterday I enabled OCSP stapling for my website in nginx. Now when I check my website using Qualys SSL Labs I have 2 trust paths, 1 using a SHA1 root certificate and 1 using a SHA256 root ...