Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [certificate]

Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

0
votes
2answers
49 views

Why does Chrome say “Your connection to this site is not secure” even if the certificate is valid?

My site has a valid certificate, but Chrome marks it as insecure. I tried my site using Brave and Firefox, and both mark it as secure. I also ran this online test, and everything looks fine: https:/...
2
votes
1answer
54 views

ASN1 Structure Procuration Syntax

I want to add the Procuration Extension to my Certificate. Therefor i use the Tool XCA, which uses OpenSSL conf to create the certificates. This is the ASN1 structure: ProcurationSyntax ::= SEQUENCE ...
0
votes
1answer
39 views

Install certificates from exe file for local machine store on Windows 7 [closed]

On Windows 7 how can I install certificates in the local machine store from a EXE file? When I click file Proprieties > Digital Signatures > Details > View Certificate > Install Certificate and there ...
0
votes
0answers
8 views

Java web start application fails with “nNable to find Certificate in Default Keystore”

I'm attempting to access the IPMI management interface on a older server. It's from around 2010, and there are no updates for the IPMI available. If you're not aware, IPMI is a remote management ...
-1
votes
0answers
24 views

Unable to use SSL certificate for my domain

I use sslforfree.com to generate SSL certificate. I set www.example.com and example.com and generate certificate. I set certificate on cPanel. After that I see following error message and domain is ...
2
votes
0answers
38 views

Windows 7 still shows certificate as valid after deleting from cert store

I am toying around with self-signed certificates for TLS (closed network). I temporarily added one to my Trusted Root Certification Authorities store on Windows 7, and then verified that it showed as ...
0
votes
0answers
49 views

Download Self Signed Cert in Chrome 69 OS X 10.13

I'm trying to download a self signed cert in chrome so I can trust it in Keychain Access so it stops annoying me. But all the guides that say how to do it don't work. Some say to just click on it ...
0
votes
0answers
25 views

Signing Apple Wallet Pass OpenSSL

I'm trying to create a pass signing server to dynamically create Apple Wallet passes using OpenSSL and standard pass templates provided by Apple but I can't seem to get the pass to show up using the ...
0
votes
0answers
12 views

Adressbar not readable in IE11 when tls security when using non-trusted tls cert

When targeting a site with self signed tls cert, my adressbar has a red background and the adress itself is shown in light gray, so that it's very hard to read the url or its parameters: Background ...
2
votes
1answer
126 views

Trust self signed Cert in Chrome macOS 10.13

I'm trying to always trust a self signed certificate but I'm having issues. For one, when I try to drag the certificate to a folder or desktop, it just doesn't do anything. I can do the same from ...
0
votes
0answers
20 views

Creating Activesync profiles with client certificate for IOS

back in good old days there was the iPhone configuration utility by Apple for Mac OS and Windows (!!) and I was able to create the profiles I needed. Then Apple decided that they will no longer ...
0
votes
1answer
30 views

Missing User Certificates Folder

I'm encountering a strange issue on a couple of machines under my control. They appear to be missing a critical folder in the User Certificates manager. This is how the Personal folder should look ...
0
votes
1answer
21 views

Newly added web wildcard certificate shows as expired

I have a web wildcard certificate on our web server that runs on IIS 7.5 using Windows 2008 R2. The CMS is Drupal Acquia 7. The certificate expired last month, so we imported the new .PFX file ...
2
votes
0answers
56 views

Convert RSA Private CRT Key to key file

Using the command openssl rsa -in Alice.key -text -inform PEM -noout, it is possible to view a RSA private key's data. My question is that if I have a list of all of the properties (modulus, public ...
1
vote
1answer
63 views

Firefox ESR loads old certificates after updating from 52 to 60

After Firefox ESR 52 was updated to 60, I've been unable to access my online bank. According to the bank's phone support, I've suddenly started using an old, supposedly still valid but revoked ...
1
vote
2answers
25 views

Can I find out what process is generating certificate error popups?

For the second time I've come into work recently to find hundreds (I can't be sure how many) certificate error popups. So many that the popup's shadow is black (See the screenshot). This time it's ...
0
votes
1answer
54 views

Creating a .pfx or PKCS#12 file from PFX or other external

Reading the fine manual, I can copy and/or export all the required credentials to another Windows machine for import after exporting: Figure 1: Exporting the Encrypting File System key Right-...
-1
votes
1answer
20 views

Set windows 10 certificate import wizard as default when opening files

I used nexus personal as default to open .p12 files. I want to reverse this and open this filetype with the certificate import wizard. This is the default option when opening (doubleclicking) a ...
1
vote
0answers
62 views

Automate Install of Certification Authorities in Windows 7/8/10, Google Chrome, MS Edge and Firefox

I work as an IT guy for a public federal university in Brazil. Government agencies and institutions have to deal with a lot of outdate applications and a mix of browsers to make them work. For ...
0
votes
1answer
25 views

Import CERT in Google Chrome fails in Windows

I can import a certificate in Google Chrome (Version 68.0.3440.106 (Official Build) (64-bit)), in Linux (Mint Tara, Ubuntu based), but doing the same in Google Chrome Version 68.0.3440.106 (...
1
vote
0answers
22 views

Make macOS Mail.app to attach full certificate chain to mail

When I'm sending S/MIME mails from Microsoft Outlook, it attaches the full certificate chain to the out-going mail so that recipients can verify the signing key (similar to how TLS works). However, ...
0
votes
0answers
6 views

Transport header security header (HSTS) is not working with Internet Explorer 11

We are using a self-signed certificate in our application & want to use HSTS header for added security. We access our application using ip or hostname. I found that for HSTS to work, - no ...
1
vote
1answer
294 views

Certificate validation failure while using cisco anyconnect with pfx certificates

I have installed cisco anyconnect secure mobile client 4.2.01022 (+all required packages). Then added .pfx certificates to gnone2-key storage. Then I launched cisco anyconnect secure mobile client ...
0
votes
1answer
20 views

cacerts java on fedora 28

Minecraft fails to join a server because of (The Auth servers are down) Except they are not. It's becasue it doesn't have the certificate. But on other linux distros I don't need to get the ...
0
votes
0answers
297 views

SSL3_READ_BYTES:sslv3 alert handshake failure / alert number 40

Using OpenSSL 1.0.2p on MacOS openssl s_client -connect XXX.XXX.com:443 -CAfile server.pem -debug Results in 140735528117192:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake ...
0
votes
0answers
37 views

How to auto renew OpenVPN client certificates using easyRSA

I have embedded devices that are located in different cites and connected to my OpenVPN server. I initialize my devices before deploying them and put the certificate/key pair through local network. ...
0
votes
1answer
25 views

Wondering about something regarding intermediate certificates and Weechat

I have a private server at home that runs a node.js instance and weechat. I also have my own domain, which I registered at EuroDNS, as well as an AlphaSSL certificate, also from EuroDNS. Both Weechat'...
0
votes
1answer
23 views

Can .pem certificates have an encrypted certificate and an encrypted RSA key?

Can .pem certificate file have an encrypted certificate and an encrypted private key? e.g. Bag Attributes -----BEGIN ENCRYPTED CERTIFICATE----- -----END ENCRYPTED CERTIFICATE----- -----BEGIN ...
0
votes
0answers
44 views

How to use PIV smartcards (YubiKey 4) to sign application binaries?

I am about to start using my YubiKey 4 (RSA 2048 bit key) for signing application binaries. There a quite a few tutorials about how to setup this. It seems that most tutorials based on the original ...
0
votes
0answers
70 views

Invisible vmware certificate makes troubles accessing sites using HSTS

When I try to make a search in Firefox or Chrome using Google (or in fact use any Google service) then google server displays nagging overlay "A privacy reminder from Google" requesting acceptance of ...
0
votes
0answers
65 views

SSL PHP and curl

good day, thanks for read my post. We have a problem with my website with ssl certificates... We have Debian 9, PHP 7 and Apache 2.4.25... And when we run a script php with curl process we receive in ...
1
vote
2answers
80 views

SSL Certificate: Displays correctly for some and not others

Is it possible anyone can check out this site: https://www.goweryarns.co.uk/ For me and 80% of my customers, it works, fine. Yet for some 20% they see this error: NET:: ERR_CERT_COMMON_NAME_INVALID ...
1
vote
0answers
132 views

Prevent losing a digital Signature when a document is saved?

The question What is an effective work-around to prevent a Digital Signature dropping from a file when it's saved? Or, What would be an efficient way to replicate saving data to a Macro Enabled MS ...
0
votes
0answers
22 views

Installing Lets Encrypt Certificates on ubuntu 16.4/Nginx and iRedMal

I am having trouble with site mailtest.example.com, ubuntu 16.4 installed fresh, in hosts hostname is set to mailtest.example.cm, iRedmail installed with nginx, DNS pointed to IP address and it ...
1
vote
1answer
22 views

Chrome how to forget proceeding when connection is not private

Using Chrome 67 on Ubuntu 18.10 when accessing a site with an incorrect certificate Chrome prompts a warning about the connection not being private, as expected, and allows you the option to proceed. ...
2
votes
1answer
974 views

pip cannot fetch URL because of an error with the SSL certificate

All of a sudden pip, Python's package manager, could no longer install new modules. The problem is fetching the URL and the cause seems to be the SSL certificate. I sort of understand what this means, ...
0
votes
0answers
289 views

Vagrant: SSL verification error behind corporate proxy

My company uses a proxy. I am using a Windows 10 notebook, 64 bit. Vagrant version 2.1.1. When trying to install a Vagrant plugin, e.g. vagrant plugin install vagrant-proxyconf I see the following ...
0
votes
0answers
45 views

Importing personal certificate for signed/encrypted emails does not work

I want to send encrypted emails with Outlook 2016 and I'm running Windows 10 Pro. I created a personal certificate by Comodo. When I try to import the user.crt into my personal certificate store, it ...
0
votes
1answer
41 views

Chrome cert not importing

I have a cert with SAN that I want to use for my localhost projects so I can stop getting warnings from Chrome. When I go to Settings => Advanced => Manage Certs => Personal => Import, I can import ...
0
votes
0answers
29 views

Running unsigned cross-compiled apps on Windows 10

I'm normally Linux developer and started experimenting with cross-compilation for Windows. Good training example is to try to cross compile Bitcoin Core project. My build finished probably ...
0
votes
0answers
21 views

Is there a way for me to get Firefox to recognize these smart card non-root certificates?

My company uses active directory to manage all of their users, and all access to the internal network as well as the internet requires smart card authentication. With IE and Chrome this works fine, ...
0
votes
0answers
147 views

This digital signature is invalid and cannot be trusted. The macros will be disabled

I am using MS Excel containing macro at customer place for some automation in excel. When the customer opens excel containing macro with the valid EV digital signature (Also tried with previously ...
0
votes
0answers
44 views

Unable to get updated SSL certificate for a single website on OSX

I'm unable to get a new SSL certificate for a website a use for work, on a specific OSX machine. On other computers I get the certificate which is valid and not expired, on my laptop with OSX High ...
1
vote
0answers
55 views

Client authentication with certificate, certificate order list or default certificate

For developing purposes, I've several certificates in my current user's personal store. So when I have to authenticate with a certificate, ie. on my VPN client, Windows propose me to chose in my ...
0
votes
1answer
314 views

Your connection is not private github.com NET::ERR_CERT_INVALID + DigiCert High Assurance EV Root CA certificate is valid

I know this has been discussed elsewhere but none of the solutions worked... When accessing github.com since yesterday I got Your connection is not private github.com NET::ERR_CERT_INVALID When ...
0
votes
1answer
134 views

local server with Let's Encrypt SSL certificate

I'm running a Confluence server in my local domain that I want to access from the outside using OpenVPN. Since I want to use the Confluence app, I need to enable SSL and use a cert which is stored ...
0
votes
0answers
263 views

Removing certificate and re-running update-ca-certificates leaves lingering symlinks

I have removed a (root) certicate, and re-run update-ca-certificates: $ sudo rm /usr/local/share/ca-certificates/mine.root-ca.crt ls -l /usr/local/share/ca-certificates/ total 4 -rw-r--r-- 1 root ...
1
vote
0answers
47 views

OpenSSL ca fails after password without error message

I am trying to use a Root CA to sign a CSR for an Intermediate certificate and OpenSSL asks for my password and then after that nothing happens. No error message and no certificates are made. The ...
0
votes
0answers
139 views

Updates failing trust validation on Windows 10

Windows Update is giving me this error: We couldn't install updates because there's a problem with the date and time information on your device. Make sure your date, time, and time zone settings ...
1
vote
1answer
44 views

Make OS-X Mail to choose a certain certificate for S/MIME signature

I have been using Apple Mail and S/MIME for quite a while now. While I have been starting with a commercial certificate, I now decided to switch to a certificate from a dedicated CA (recognized by all ...