Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

54
votes
7answers
229k views

How do I disable the warning Chrome gives if a security certificate is not trusted?

I want to know if it's possible to disable the warning you get in Chrome when you try to go to some HTTPS site that doesn't have a trusted certificate. I have a few sites in my bookmarks that use ...
43
votes
4answers
69k views

How to save a remote server SSL certificate locally as a file

I need to download an SSL certificate of a remote server (not HTTPS, but the SSL handshake should be the same as Google Chrome / IE / wget and curl all give certificate check fail errors) and add the ...
20
votes
4answers
42k views

How can I get a list of installed certificates on Windows?

I know I have some certificates installed on my Windows 7 machine, how can I see what they are, the nicknames they are known by, and browse detailed information (such as issuer and available usage)?
20
votes
6answers
63k views

Add permanent SSL certificate exception in Chrome (Linux)

I have a problem with a website that has an SSL certificate which doesn't correspond to the website domain. Chrome gives me a warning for this website (and rightly so), which I have to ignore ...
18
votes
4answers
26k views

How do you add a certificate authority (CA) to Ubuntu?

My work has decided to issue their own certificate authority (CA) to handle different aspects of our work securely without paying for certificates. Cryptographically sign emails Encrypt email ...
18
votes
1answer
46k views

IE9: Permanently accept untrusted certificate

When accessing a website via HTTPS which has an untrusted certificate, Internet Explorer 9 always shows me the following error message: Is there a way to import the certificate permanently, so that ...
18
votes
3answers
29k views

How to create my own certificate chain?

I would like to setup my own OCSP Responder (just for testing purposes). This requires me to have a root certificate and a few certificates generated from it. I've managed to create a self-signed ...
13
votes
1answer
9k views

How do I view the contents of a PFX file on Windows?

I have a PFX certificate file on my machine and I'd like to view the details before importing it. (The import utility doesn't actually tell you what the certificate is!). How do I view the details ...
12
votes
2answers
37k views

What are the Windows system certificate stores?

When adding certificates, stls, ctls and crls to the system I can choose the certificate store. I have found so far only references to the "my" and "root" stores. Is there any other?
11
votes
2answers
28k views

Windows 7 will not install a root certificate

I have a web service that uses a self-signed certificate, so I need to install the certificate as a Trusted Root so that I can avoid all the security errors that having a self-signed certificate ...
10
votes
3answers
21k views

The certificate is not trusted because no issuer chain was provided

Could anyone explain the meaning of this error message in plain English? Should I add an exception or I should not continue on this website? Technical details: the URL is here, the browser is ...
10
votes
5answers
5k views

If Mac code signing is tampered with, what might fail?

What annoyances or real problems may occur when the digital signature of a Mac application is broken? Applications on a Mac can be digitally signed. When the signature is somehow broken, I know a few ...
9
votes
1answer
5k views

What makes the address bar in IE turn green?

What aspect of a site's SSL certificate causes IE's address bar to turn green? I'm working on a site which already uses SSL successfully, but am interested to know if there are different levels of ...
9
votes
2answers
4k views

How can I check if a domain uses DNSSEC?

DNSSEC has been deployed on some topdomains now. But how could I see if a site/domain is using DNSSEC? Is it shown in the browser? or is there any windows or linux command to see it? or a tool for it? ...
9
votes
2answers
819 views

how to use curl to verify if a site's certificate has been revoked?

To check if the certificate for google.com has been revoked, I tried the following command: curl https://www.google.com --cacert GeoTrust_Global_CA.pem --crlfile gtglobal.pem -v , but I got the ...
7
votes
3answers
4k views

EFS - Find out what's encrypted

Since a few days when I start Windows Vista i get a Popup from "Encrypting File System" (coming from process efsui.exe) asking me to backup the certificate and key. I don't know what i did to get ...
7
votes
2answers
13k views

Remote Desktop Connection - How to get the certificate prompt back?

I just tried remoting to my work PC from home and got the "identity cannot be verified" prompt like the one below. I marked the "Don't ask me again for connections to this computer" box, and then ...
7
votes
1answer
149 views

What Trusted Root Certification Authorities should I trust?

After two recent Slashdot articles (#1 #2) about questionable Root Certificates installed on machines, I decided to take a closer look at what I have installed on my machines. (I use current versions ...
7
votes
2answers
9k views

Bypassing windows update error 0x80096002

I am getting this error when I try to install some .msu files (WMF 3 if it matters). Now, the error is saying that the certificate is invalid. However, I looked at the certificate (if anyone is ...
6
votes
7answers
21k views

Firefox: This connection is untrusted + Behind corporate firewall

I've seen some similar issues strewn throughout Google's results about this, but none seem to be corporate-specific. I continually get the 'This connection is untrusted' screen every time I attempt ...
6
votes
1answer
6k views

Can self-signed SSL certificate be renewed? How?

I'm fairly new to SSL certificates and would like to know if a self-signed certificate which I use for HTTPS can be renewed to extend its expiry date without all clients of the site having to go ...
6
votes
3answers
30k views

What is a Valid Trust Anchor in Windows 7 relating to Wifi?

The error below just started happening at work with a personal laptop running Windows 7 Ultimate. I'm unable to use installed, non-expired certificates to connect to a private wireless network. No ...
6
votes
2answers
8k views

Which trusted root certificates are included in Java?

Which trusted root certificates are included in Java, specifically Sun Java and IBM Java? How can I get the list myself? Does Java on Windows use certificates from operating system?
6
votes
4answers
25k views

Continually getting Certificate Errors on all browsers

I recently switched to a new laptop running Windows 7. For some reason I am constantly getting certificate errors when hitting sites where I really shouldn't be getting them - twitter, picasa, google ...
6
votes
4answers
8k views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access ...
6
votes
1answer
5k views

Where do I find the certificate file so I can add a program to “Trusted Publishers” in the certmgr?

I have three programs that startup automatically with Windows 7. They are: Webroot SecureAnywhere Soluto Anti-Frustration Software everything.exe Each of these programs bring up a blue UAC dialog ...
5
votes
2answers
1k views

Why does https://gmail.com/ produce no SSL error while using a bad certificate?

It looks like https://gmail.com uses an SSL certificate which is for the hostname mail.google.com. As the SSL certificate hostname does not match the browser URL, why does this work? I should get a ...
5
votes
3answers
11k views

Certificate issue on remote desktop

see the below link: Certificate issue on remote desktop I have 2 PCs with Windows 7 Ultimate. Both are in NETHOME, and are connected with a crossover cable. PC 1: computer name = alfa -> (main PC) , ...
5
votes
5answers
37k views

Certificate error with Internet Explorer 9

one of my coworkers installed IE9 on their computer. They are now having trouble accessing some websites that once worked(and still work) in other browsers. One example is this page: ...
5
votes
2answers
367 views

Netflix SSL certificate shows up when trying to visit https://www.google.com

I'm on a hotel Wi-Fi network where occasionally the following message shows up in Chrome when trying to visit any Google sites over HTTPS: The SSL certificate reported when this happens is This ...
5
votes
1answer
825 views

Host-based snakeoil certificates in Ubuntu

How to create snakeoil a certificate and a key for a given host in Ubuntu?
5
votes
2answers
972 views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
5
votes
3answers
20k views

How to turn off Opera server certificate messages?

While I'm browsing the Internet, Opera always pop out a lots of from these Server certificate expired boxes. Several times it pops out a tons from them and I have to click to Approve on each of them ...
5
votes
1answer
652 views

How to create private security certificates that behave like official ones?

I'm trying to get a valid secured environment for HTTP communication to behave like normal ones. I'm doing this for a restricted group of users. There is a hardware server running a web service ...
5
votes
2answers
434 views

Google.com Certificate Revoked

A few days ago, I noticed some issue with my internet connection. Some pages weren't loading all the way, and some connections needed to be restarted several times before they would resolve. I assumed ...
5
votes
1answer
2k views

Where is my RDP server certificate stored?

Given the recent issues of Man-in-the-Middle attacks, i actually paid attention to the warning i get when connecting to a server: Selecting View Certificate, i was going to check the SHA1 ...
5
votes
3answers
343 views

import Certificate in WIndow Xp

I have created a temporary certificate. I am trying to import this certificate.I am importing Certificate to Personnel store of Local Computer and then using FindPrivateKey solution to find privatekey ...
5
votes
1answer
7k views

Tortoise SVN Error Validating Server Certificate

I just updated the certificate on one of my sites due to the old one expiring. The new certificate verifies fine in Internet Explorer 9, Chrome, and Firefox 4 - but when trying to browse/check out the ...
4
votes
4answers
12k views

How to install a CA key (self signed SSL) on ubuntu? [duplicate]

I have a bunch of machines that need to fetch https: off a server (or collection of servers). I'm operating a CA and self-signing the certificates on the server(s). The client machines are running ...
4
votes
4answers
2k views

What happens if the private key of a Certificate Authority(CA) like Verisign is leaked?

I was just wondering what will happen if the private key of a CA is leaked? Won't it be then possible to make fake certificates for any other website?
4
votes
2answers
3k views

Trusted Root certificates regularly disappear on Windows 7

I've installed several self-signed certificates on my Windows 7 Ultimate x64 machine for development purposes. One was installed into Trusted Root CAs and 2 were installed into My Certificates and ...
4
votes
1answer
123 views

ISP Replaces SSL Certificates… Any Solution?

My ISP uses a software that replaces site certificates with it own certificate so secure pages are always untrusted. Is there any solution for this? Is it safe to proceed with the resulting sites ...
4
votes
2answers
14k views

Windows 7 Certificate Manager Snap-In without access to MMC

In support of a remote end user, I need to walk them through adding a trusted root certificate to their computer's "Computer Account". This is no big deal, except this user is running Windows 7 Home ...
4
votes
2answers
578 views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
4
votes
1answer
1k views

Why Chromium does not open the Gmail? (reporting a certificate error)

The error I get: The server's security certificate is revoked! You attempted to reach www.google.com, but the certificate that the server presented has been revoked by its issuer. This means that ...
4
votes
2answers
387 views

What is this warning message all about?

Why is it so that every time when i start "FireFox", this message pops up: advisordb.wmtransfer.com: 443 uses an invalid security cetificate. The certificate is not trusted because the ...
4
votes
1answer
385 views

Certificate Patrol for Chrome?

Is there a chrome-version of the firefox add-on certificate patrol? Notifying me about a certificate change without actually loading the page would be optimal, but it sure would be useful even if the ...
4
votes
1answer
847 views

Automatically remove certificate from certificate store

Windows 7 certificate store's default behavior includes storing all public keys you use from smartcards. This is sometimes undesirable as if some machine needs to use a lot of smartcards, the "Please ...
4
votes
1answer
1k views

Signing PDFs in linux

I'm trying to digitally sign PDFs server-side. So far I found that I can do this using MyPDFSigner, but it's far from my needs. Also I don't believe that this is the only option here. How to sign ...
4
votes
1answer
57 views

Imported cert into firefox/chrome, still warning

I generated a wildcard certificate for multiple (wildcard) domains (SANS, alternate domain names + IP) (see https://blog.flowl.info). I imported the certificate into Firefox, Chrome and Windows ...