4
votes
2answers
341 views

How do I distinguish between these two certificate situations?

Situation 1 (safe): Website was vulnerable to heartbleed and using a certificate not valid before 2012-10-21 Website upgraded to an unvulnerable version of OpenSSL Website re-keyed and got a their ...
3
votes
1answer
2k views

Does Heartbleed Bug in OpenSSL affect ALL SSL certs

Does the Heartbleed Bug in OpenSSL affect ALL SSL certs, regardless of where I purchased or if I self-cert? For example, if I bought an SSL certificate from GoDaddy and set this up on my server ...
0
votes
0answers
83 views

Blocking a trusted certificate in Google Chrome

Is it possible to somehow block a certain certificate that is currently trusted by my browser? The reason is the recently discovered Heartbleed-attack which I also found out to affect my netbanking ...
1
vote
1answer
23 views

Is there a program to check the list of root CAs in Firefox?

Motivated by this and this question, I'd like to ask if there is a way to check if additional certificates have been maliciously added to the list of root CAs of Firefox. Possible ways could be: an ...
1
vote
1answer
62 views

Is it safe to add an untrusted certificate to Trusted Root Certification Authorities?

Before I access the internet at work I have to sign-on to their system. The sign-on page is ipass.swu.ac.th. Unfortunately the security certificate they use appears as not trusted (in Chrome). I have ...
7
votes
1answer
76 views

What Trusted Root Certification Authorities should I trust?

After two recent Slashdot articles (#1 #2) about questionable Root Certificates installed on machines, I decided to take a closer look at what I have installed on my machines. (I use current versions ...
0
votes
1answer
36 views

What details would you view in a certificate to check if it is trustworthy?

I have a question need help: What details would you view in a certificate to check if it is a trustworthy website?
4
votes
2answers
120 views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
0
votes
1answer
38 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
1
vote
1answer
276 views

Every website is showing untrusted certificate warning on all browsers

I'm on windows 7. Every website is showing untrusted security warning. I tried every browser that I have. I tried using https. This is extremely odd, it never happened before, well it could happen ...
2
votes
0answers
63 views

Bogus Chrome Installer?

Just a few days ago I tried to download Chrome (using IE 11) to a new Windows 7 system. I examined the certificate for the Chrome installer (clicking on the highlighted Google Inc. next to ...
0
votes
2answers
86 views

Given one can IMAP upload emails to Gmail, how can one prove gmail content is original?

Given that one can upload emails to gmail via IMAP, via methods such as: http://email.about.com/od/gmailtips/qt/How_to_Import_Mail_from_Mozilla_Thunderbird_in_Gmail.htm Is there a method to prove ...
1
vote
1answer
503 views

Can not combine two CA certificate files to a CA certificate chain

Ι' m trying to concatenate two valid self-signed CA pem files generated using openssl in order to import a single CA file in Firefox (client side), using the following command: cat CA_file0.pem ...
5
votes
1answer
635 views

Where is my RDP server certificate stored?

Given the recent issues of Man-in-the-Middle attacks, i actually paid attention to the warning i get when connecting to a server: Selecting View Certificate, i was going to check the SHA1 ...
2
votes
4answers
298 views

How to know if a new website can be trusted? [closed]

I am trying to find a way how to know if I can trust an internet site. Example 1: http://www.booksgreatchoice.com/ payment redirects to digitalbooksplace.com - bad thing only card in payment - bad ...
0
votes
1answer
125 views

Pages don't load after installing a certificate on tomcat, restart required

I posted this question before but not in the correct forum. I have configured tomcat7 to use SSL and have made it point to a keystore. The keystore has a self signed certificate by default. There are ...
2
votes
1answer
286 views

Can I be a root certificate authority for my local network?

This may sound crazy, but can I be the root certificate authority? I mean, I have many computers and smart devices in my home. Remote Desktop warns for the certificate not being trusted, because it ...
0
votes
0answers
33 views

Having got a pem and a crt files how do I sign an Outlook 2007 e-mail message?

Having purchased a personal digital signature support from a local authority I have received 2 files: one .crt and one .pem (the last being the private key as far as I understand). How can I use these ...
0
votes
0answers
83 views

is there any way to securely delete certificates from the certificate store in windows 7?

its easy to securely delete files and folders.but how do i delete certificates which have no file-folder-structure-based location on the disk.how to securely delete registry keys pertaining to those ...
-1
votes
2answers
85 views

apply for SSL certificate for hidden websites

We have a proxy and several hidden web servers in different locations. Internet users can visit these hidden web servers only through the proxy, so only the proxy IP is public. The IPs of the web ...
0
votes
0answers
244 views

PVK2PFX Error 0x80070490 - Cannot find certificates that match the key

I am trying to create simple client side certificate and for that I following below link... How to create client certificate I have installed SDK on machine, and I have successfully run below two ...
0
votes
1answer
217 views

Certificate errors on irc.pirateirc.net

I'm having trouble making a secure connection to the IRC server at irc.pirateirc.net. gnutls doesn't recognise the SSL certificate issuer, even though the certificate is issued by a regular CA ...
1
vote
1answer
154 views

Digital Certificate (Signature) Verification in Software Installation

I need to know what exactly happens during digital certificate (signature) verification when a software is installed by the operating system. I understand that this is a asymmetric key process and I ...
7
votes
1answer
6k views

How do I view the contents of a PFX file on Windows?

I have a PFX certificate file on my machine and I'd like to view the details before importing it. (The import utility doesn't actually tell you what the certificate is!). How do I view the details ...
1
vote
1answer
1k views

Why do I have untrusted certificates for Google, Yahoo, Mozilla and others?

In the HTTPS/SSL section of chrome://chrome/settings, I see the following: What does this mean, and is there something wrong? I have a basic understanding of SSL/TLS - I'm not claiming to be ...
0
votes
1answer
112 views

Checking security certificates in a browser

I have been given a laptop with pre-installed software and I am connecting to the internet on it via company wifi. When I am accessing a secure website using https, I want to ensure that the LAN ...
4
votes
2answers
254 views

CertPatrol warns: “this certificate wasn't due yet”

Cert-patrol warns me on numerous websites, including gmail, that the certificate being used wasn't due yet. Is this something I need to worry about? Why does this occur? Here is a screen-shot (you ...
5
votes
3answers
298 views

import Certificate in WIndow Xp

I have created a temporary certificate. I am trying to import this certificate.I am importing Certificate to Personnel store of Local Computer and then using FindPrivateKey solution to find privatekey ...
1
vote
1answer
205 views

How do I get tor exit node information of a certain connection I made

At some point today my email client warned about an smtp certificate change of self signed certs. I took a screenshot of the certificate fingerprints and refused the connection because it does not ...
0
votes
0answers
148 views

How to delete or untrust all root certificates in OSX?

I right clicked on all the root certificates, but it doesn't allow me to delete them, or to untrust them all at once. How can this be done? Is it safe to do this?
3
votes
3answers
20k views

Google chrome not accepting any security certificates

I've recently developed a problem with Google Chrome that's really annoying. I'm using Firefox at the moment with no problems whatsoever and it's the same with IE, so it's safe to say this problem is ...
1
vote
0answers
692 views

Revocation information not available for certificate?

I'm trying to download SQL Server 2008 R2 Enterprise Edition from MSDNAA on my Windows 7 laptop. When I attempted to start the download, I was shown the following prompt: Revocation Information ...
4
votes
1answer
338 views

Checking suspicious (root CA) certificates

I was just looking at my certificate store and saw a bunch of root CAs that look kind of suspicious; specifically numerous ones that: have ALL CAPS text use foreign languages/text have extremely ...
2
votes
1answer
230 views

Windows certificate valid even after expired

I have a signed executable. The certificate for that signature says it is usable until 2007, still Windows (7 Professional) says it is valid if I'm opening it via properties dialog. How is that ...
1
vote
1answer
130 views

Viewing hd location of installed certificates in firefox

I recently installed a digital id/certificate from verisign and was wondering if there is a way to view the certificate location on my computer. I installed it according to their instructions through ...
2
votes
1answer
29k views

How do I disable the “Security Certificate Error” message in Internet Explorer?

How do I get rid of this annoying message? To help protect your security, Internet Explorer has blocked this website from displaying content with security certificate errors. Click here for ...
0
votes
1answer
2k views

Error installing certificates with private keys

I got a PFX file with a private key (it was imported from another Windows installation and the button "Export Private Keys" was pressed). I installed it, and got the message that the import was ...
1
vote
0answers
973 views

How to I make a Windows certificate exportable?

I'm looking for a tool or solution that would allow me make a certificate that is marked as non-exportable to be exportable. I am aware about Jailbreak tool but because the tool does not fully ...
0
votes
2answers
2k views

Install new root certificate authority (CA) in windows

I am trying to use ninite to get my new laptop set up quickly. However when I try to install, windows complains about the CA. The website ninite.com also shows certificate problems. They use a root CA ...
4
votes
2answers
2k views

Trusted Root certificates regularly disappear on Windows 7

I've installed several self-signed certificates on my Windows 7 Ultimate x64 machine for development purposes. One was installed into Trusted Root CAs and 2 were installed into My Certificates and ...
9
votes
2answers
3k views

How can I check if a domain uses DNSSEC?

DNSSEC has been deployed on some topdomains now. But how could I see if a site/domain is using DNSSEC? Is it shown in the browser? or is there any windows or linux command to see it? or a tool for it? ...
1
vote
3answers
1k views

I am not able to open gmail and some other sites

Last day my system got hanged so I restarted and recovered windows to the the date of 1 day before. Now I am not able to open gmail, orkut and some other sites. When I try to open these sites I ...
5
votes
7answers
19k views

Firefox: This connection is untrusted + Behind corporate firewall

I've seen some similar issues strewn throughout Google's results about this, but none seem to be corporate-specific. I continually get the 'This connection is untrusted' screen every time I attempt ...
9
votes
5answers
5k views

If Mac code signing is tampered with, what might fail?

What annoyances or real problems may occur when the digital signature of a Mac application is broken? Applications on a Mac can be digitally signed. When the signature is somehow broken, I know a few ...
0
votes
4answers
3k views

Firefox Certificate Error

I have this annoying problem - every time I get into a site with a security certificate I always see a warning page that the certificate is invalid. I've grown accustomed to just setting an exception ...
8
votes
1answer
5k views

What makes the address bar in IE turn green?

What aspect of a site's SSL certificate causes IE's address bar to turn green? I'm working on a site which already uses SSL successfully, but am interested to know if there are different levels of ...
1
vote
2answers
560 views

Secure email crashes Outlook 2007

I have a number of secure emails sent to my Outlook 2007 client. Most arrive fine and display the prompt with regards to granting access to the certificate and then open. Today I received two that ...