Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

50
votes
7answers
219k views

How do I disable the warning Chrome gives if a security certificate is not trusted?

I want to know if it's possible to disable the warning you get in Chrome when you try to go to some HTTPS site that doesn't have a trusted certificate. I have a few sites in my bookmarks that use ...
39
votes
4answers
62k views

How to save a remote server SSL certificate locally as a file

I need to download an SSL certificate of a remote server (not HTTPS, but the SSL handshake should be the same as Google Chrome / IE / wget and curl all give certificate check fail errors) and add the ...
19
votes
4answers
40k views

How can I get a list of installed certificates on Windows?

I know I have some certificates installed on my Windows 7 machine, how can I see what they are, the nicknames they are known by, and browse detailed information (such as issuer and available usage)?
19
votes
6answers
61k views

Add permanent SSL certificate exception in Chrome (Linux)

I have a problem with a website that has an SSL certificate which doesn't correspond to the website domain. Chrome gives me a warning for this website (and rightly so), which I have to ignore ...
18
votes
1answer
43k views

IE9: Permanently accept untrusted certificate

When accessing a website via HTTPS which has an untrusted certificate, Internet Explorer 9 always shows me the following error message: Is there a way to import the certificate permanently, so that ...
17
votes
3answers
27k views

How to create my own certificate chain?

I would like to setup my own OCSP Responder (just for testing purposes). This requires me to have a root certificate and a few certificates generated from it. I've managed to create a self-signed ...
16
votes
5answers
22k views

How do you add a certificate authority (CA) to Ubuntu?

My work has decided to issue their own certificate authority (CA) to handle different aspects of our work securely without paying for certificates. Cryptographically sign emails Encrypt email ...
12
votes
2answers
36k views

What are the Windows system certificate stores?

When adding certificates, stls, ctls and crls to the system I can choose the certificate store. I have found so far only references to the "my" and "root" stores. Is there any other?
11
votes
2answers
26k views

Windows 7 will not install a root certificate

I have a web service that uses a self-signed certificate, so I need to install the certificate as a Trusted Root so that I can avoid all the security errors that having a self-signed certificate ...
11
votes
1answer
8k views

How do I view the contents of a PFX file on Windows?

I have a PFX certificate file on my machine and I'd like to view the details before importing it. (The import utility doesn't actually tell you what the certificate is!). How do I view the details ...
10
votes
3answers
19k views

The certificate is not trusted because no issuer chain was provided

Could anyone explain the meaning of this error message in plain English? Should I add an exception or I should not continue on this website? Technical details: the URL is here, the browser is ...
9
votes
1answer
5k views

What makes the address bar in IE turn green?

What aspect of a site's SSL certificate causes IE's address bar to turn green? I'm working on a site which already uses SSL successfully, but am interested to know if there are different levels of ...
9
votes
2answers
4k views

How can I check if a domain uses DNSSEC?

DNSSEC has been deployed on some topdomains now. But how could I see if a site/domain is using DNSSEC? Is it shown in the browser? or is there any windows or linux command to see it? or a tool for it? ...
9
votes
5answers
5k views

If Mac code signing is tampered with, what might fail?

What annoyances or real problems may occur when the digital signature of a Mac application is broken? Applications on a Mac can be digitally signed. When the signature is somehow broken, I know a few ...
9
votes
2answers
488 views

how to use curl to verify if a site's certificate has been revoked?

To check if the certificate for google.com has been revoked, I tried the following command: curl https://www.google.com --cacert GeoTrust_Global_CA.pem --crlfile gtglobal.pem -v , but I got the ...
7
votes
3answers
4k views

EFS - Find out what's encrypted

Since a few days when I start Windows Vista i get a Popup from "Encrypting File System" (coming from process efsui.exe) asking me to backup the certificate and key. I don't know what i did to get ...
7
votes
1answer
125 views

What Trusted Root Certification Authorities should I trust?

After two recent Slashdot articles (#1 #2) about questionable Root Certificates installed on machines, I decided to take a closer look at what I have installed on my machines. (I use current versions ...
7
votes
2answers
9k views

Bypassing windows update error 0x80096002

I am getting this error when I try to install some .msu files (WMF 3 if it matters). Now, the error is saying that the certificate is invalid. However, I looked at the certificate (if anyone is ...
6
votes
3answers
29k views

What is a Valid Trust Anchor in Windows 7 relating to Wifi?

The error below just started happening at work with a personal laptop running Windows 7 Ultimate. I'm unable to use installed, non-expired certificates to connect to a private wireless network. No ...
6
votes
2answers
7k views

Which trusted root certificates are included in Java?

Which trusted root certificates are included in Java, specifically Sun Java and IBM Java? How can I get the list myself? Does Java on Windows use certificates from operating system?
6
votes
2answers
12k views

Remote Desktop Connection - How to get the certificate prompt back?

I just tried remoting to my work PC from home and got the "identity cannot be verified" prompt like the one below. I marked the "Don't ask me again for connections to this computer" box, and then ...
6
votes
1answer
5k views

Where do I find the certificate file so I can add a program to “Trusted Publishers” in the certmgr?

I have three programs that startup automatically with Windows 7. They are: Webroot SecureAnywhere Soluto Anti-Frustration Software everything.exe Each of these programs bring up a blue UAC dialog ...
5
votes
7answers
20k views

Firefox: This connection is untrusted + Behind corporate firewall

I've seen some similar issues strewn throughout Google's results about this, but none seem to be corporate-specific. I continually get the 'This connection is untrusted' screen every time I attempt ...
5
votes
1answer
5k views

Can self-signed SSL certificate be renewed? How?

I'm fairly new to SSL certificates and would like to know if a self-signed certificate which I use for HTTPS can be renewed to extend its expiry date without all clients of the site having to go ...
5
votes
3answers
10k views

Certificate issue on remote desktop

see the below link: Certificate issue on remote desktop I have 2 PCs with Windows 7 Ultimate. Both are in NETHOME, and are connected with a crossover cable. PC 1: computer name = alfa -> (main PC) , ...
5
votes
5answers
35k views

Certificate error with Internet Explorer 9

one of my coworkers installed IE9 on their computer. They are now having trouble accessing some websites that once worked(and still work) in other browsers. One example is this page: ...
5
votes
4answers
22k views

Continually getting Certificate Errors on all browsers

I recently switched to a new laptop running Windows 7. For some reason I am constantly getting certificate errors when hitting sites where I really shouldn't be getting them - twitter, picasa, google ...
5
votes
1answer
824 views

Host-based snakeoil certificates in Ubuntu

How to create snakeoil a certificate and a key for a given host in Ubuntu?
5
votes
2answers
679 views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
5
votes
3answers
18k views

How to turn off Opera server certificate messages?

While I'm browsing the Internet, Opera always pop out a lots of from these Server certificate expired boxes. Several times it pops out a tons from them and I have to click to Approve on each of them ...
5
votes
1answer
593 views

How to create private security certificates that behave like official ones?

I'm trying to get a valid secured environment for HTTP communication to behave like normal ones. I'm doing this for a restricted group of users. There is a hardware server running a web service ...
5
votes
2answers
409 views

Google.com Certificate Revoked

A few days ago, I noticed some issue with my internet connection. Some pages weren't loading all the way, and some connections needed to be restarted several times before they would resolve. I assumed ...
5
votes
1answer
1k views

Where is my RDP server certificate stored?

Given the recent issues of Man-in-the-Middle attacks, i actually paid attention to the warning i get when connecting to a server: Selecting View Certificate, i was going to check the SHA1 ...
5
votes
3answers
329 views

import Certificate in WIndow Xp

I have created a temporary certificate. I am trying to import this certificate.I am importing Certificate to Personnel store of Local Computer and then using FindPrivateKey solution to find privatekey ...
5
votes
1answer
7k views

Tortoise SVN Error Validating Server Certificate

I just updated the certificate on one of my sites due to the old one expiring. The new certificate verifies fine in Internet Explorer 9, Chrome, and Firefox 4 - but when trying to browse/check out the ...
4
votes
4answers
2k views

What happens if the private key of a Certificate Authority(CA) like Verisign is leaked?

I was just wondering what will happen if the private key of a CA is leaked? Won't it be then possible to make fake certificates for any other website?
4
votes
4answers
11k views

How to install a CA key (self signed SSL) on ubuntu?

I have a bunch of machines that need to fetch https: off a server (or collection of servers). I'm operating a CA and self-signing the certificates on the server(s). The client machines are running ...
4
votes
2answers
3k views

Trusted Root certificates regularly disappear on Windows 7

I've installed several self-signed certificates on my Windows 7 Ultimate x64 machine for development purposes. One was installed into Trusted Root CAs and 2 were installed into My Certificates and ...
4
votes
1answer
123 views

ISP Replaces SSL Certificates… Any Solution?

My ISP uses a software that replaces site certificates with it own certificate so secure pages are always untrusted. Is there any solution for this? Is it safe to proceed with the resulting sites ...
4
votes
2answers
13k views

Windows 7 Certificate Manager Snap-In without access to MMC

In support of a remote end user, I need to walk them through adding a trusted root certificate to their computer's "Computer Account". This is no big deal, except this user is running Windows 7 Home ...
4
votes
2answers
394 views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
4
votes
1answer
1k views

Why Chromium does not open the Gmail? (reporting a certificate error)

The error I get: The server's security certificate is revoked! You attempted to reach www.google.com, but the certificate that the server presented has been revoked by its issuer. This means that ...
4
votes
2answers
385 views

What is this warning message all about?

Why is it so that every time when i start "FireFox", this message pops up: advisordb.wmtransfer.com: 443 uses an invalid security cetificate. The certificate is not trusted because the ...
4
votes
1answer
688 views

Automatically remove certificate from certificate store

Windows 7 certificate store's default behavior includes storing all public keys you use from smartcards. This is sometimes undesirable as if some machine needs to use a lot of smartcards, the "Please ...
4
votes
1answer
1k views

Signing PDFs in linux

I'm trying to digitally sign PDFs server-side. So far I found that I can do this using MyPDFSigner, but it's far from my needs. Also I don't believe that this is the only option here. How to sign ...
4
votes
1answer
47 views

Imported cert into firefox/chrome, still warning

I generated a wildcard certificate for multiple (wildcard) domains (SANS, alternate domain names + IP) (see https://blog.flowl.info). I imported the certificate into Firefox, Chrome and Windows ...
4
votes
2answers
353 views

How do I distinguish between these two certificate situations?

Situation 1 (safe): Website was vulnerable to heartbleed and using a certificate not valid before 2012-10-21 Website upgraded to an unvulnerable version of OpenSSL Website re-keyed and got a their ...
4
votes
1answer
2k views

How to import a certificate (pfx) with a private key in Windows XP

I tried the whole day just to import a certificate in Windows XP, but I always failed. I did following: Create the certificate with a private key (no password): makecert -sr LocalMachine -ss My -pe ...
4
votes
1answer
639 views

Who knows an alternative to thawte's discontinued personal mail certificate service?

Here's the news: Thawte delivered the message about stopping it's free mail certification a week ago (by means of an an unsigned email). StartSSL offers similar service, as well as CA Cert. But I ...
4
votes
1answer
3k views

Can I get around using “pip install --cert”?

Trying to figure out if there is a way that I can avoid using the --cert flag to pip when I am installing packages at work. There is some issue with the proxy that only allows me to download the ...