Questions tagged [ssl-certificate]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
30 views

Switch from Internet Explorer to Edge Chromium / Chrome

I'm working on a legacy application created with HTML 4 and PHP 5, my purpose is to run the application on Edge chromium, the style of the application is good on internet explorer but when I tried to ...
user avatar
1 vote
1 answer
21 views

Public certificate and Private DNS

Essentially, I have private domain called abc.local and an internal site that I want to be using HTTPS. I have no Private PKI and planning to create an SSL certificate using Public CA. Let's say I ...
user avatar
0 votes
0 answers
34 views

acme-dns server hosted on DigitalOcean fails to issue wildcard certificates

I have the need to issue certbot wildcard certificates for different domain names hosted in different DNS providers. I have installed acme-dns server on a Digital Ocean droplet and I am having ...
user avatar
0 votes
0 answers
70 views

How to fix error ERR_SSL_VERSION_OR_CIPHER_MISMATCH

I'm working on a PHP and while the application works in Internet Explorer, within Edge, where I want to run this application, I get error ERR_SSL_VERSION_OR_CIPHER_MISMATCH. How to fix this error?
user avatar
0 votes
0 answers
33 views

installing SSL on 2 exchange servers

I have 2 exchange servers run for one email service, and I need to renew the SSL certificate. Do I need to issue 2 SSL, or one is enough? If one is enough how can I replicate it between them?
user avatar
0 votes
1 answer
114 views

Make Chrome trust the Linux system certificate store or select certificates via policies

I need to trust a self-signed certificate on a lot of managed Linux desktops. I have imported them into the trust store of the OS, curl, wget etc. trust them. However browsers like Firefox and Chrome (...
user avatar
1 vote
0 answers
103 views

SSL verification doesn't happen with curl cacert option

This is my understanding of curl --cacert option : We can make curl perform SSL verification against a custom truststore by providing a PEM file path to this option. It is mostly used when we are ...
user avatar
0 votes
1 answer
102 views

openssl unable to pass -config and -signkey options in the same command

I am attempting to generate a self-signed certificate with my custom config file for openssl. However, the options -config and -signkey are generating errors as below when used in the same command. ...
user avatar
  • 131
-1 votes
1 answer
169 views

How to find the file location of a website's ssl certificate

I am trying to access the SSL certificate for a certain website (textnow.com) but I can't find where it is stored on my computer, even in the certificate manager. Also, when I click on the lock next ...
user avatar
0 votes
0 answers
49 views

SSL error from certain browsers/networks using Letsencrypt and apache2

Can someone help me figure out why there is a SSL error on my website? I'm using Letsencrypt for the SSL certificate. I'll do my best to explain. Certain people have told me that mysite is ...
user avatar
0 votes
0 answers
372 views

Can I use Nginx to redirect a sub sub domain to a subdomain with wildcards?

I want to be able to redirect domains like https://www.*.whanganuionline.com to the same sub domain of https://*.whanganuionline.com. We have a wildcard SSL for the domain *.whanganuionline.com but ...
user avatar
0 votes
0 answers
32 views

delete subdomain NET::ERR_CERT_COMMON_NAME_INVALID

i want to delete subdomain dev.potatino.com from www.potatino.com using certbot enter image description here my web url : https://www.potatino.com/ NET::ERR_CERT_COMMON_NAME_INVALID it cause this err
user avatar
  • 1
0 votes
0 answers
37 views

mistaccaly created extra ssl certificate generate -> NET::ERR_CERT_COMMON_NAME_INVALID

i am very new to web hosting and you can check my website https://www.potatino.com/, it show error : NET::ERR_CERT_COMMON_NAME_INVALID i am using digital-ocean my certificates currently are: ...
user avatar
  • 1
1 vote
1 answer
139 views

Does a reboot of Ubuntu cover all CA actions that an update-ca-certificates would do?

When I copy a new CA certificate, e.g., mycompany.crt into the directory /usr/local/share/ca-certificates, I have to do an update-ca-certificates in order to make this certificate known to the system. ...
user avatar
  • 111
1 vote
1 answer
919 views

Web browsers say certificates expired or not yet valid, even though the certificate is valid for today's date and system clock is accurate

I just formatted my computer and reinstalled Windows (Windows 7 Home Premium SP1), and when I try to visit certain websites (eg Wikipedia), the sites do not load. The sites fail to load in both Chrome ...
user avatar
0 votes
0 answers
276 views

Certificate authority (CA) in Ubuntu 21.10 is installed but it does not work

I've installed certificates before within Windows and Ubuntu [server] and it works normally, but today I tried to install certificates on Ubuntu Desktop 21.10 over RDP + AD user, and it does not work ...
user avatar
0 votes
1 answer
75 views

Chrome 96 - How to tell if a website is using an EV SSL certificate?

When using Chrome 96, how do I tell if an SSL certificate is an EV SSL certificate? Here's what Chrome does display:
user avatar
  • 299
-1 votes
1 answer
124 views

SSL certificates for local web applications [closed]

My understanding is that there are three ways you could go about setting up a intranet web server (local network only) for HTTPS. Self signed SSL certificate. Cons: Browsers typically don't likes ...
user avatar
  • 181
0 votes
0 answers
306 views

LetsEncrypt certificate (generated thru Vesta CP) does not work for subdomain at Centos 7

1 ) Add cert I've added up a SSL certificate for a subdomain sm.webscraping.pro (VPS, Centos 7) at VestaCP using Lets Encrypt support option, see below: 2 ) Files The certificate files are in the ...
user avatar
0 votes
0 answers
37 views

How to fix SSL issue from 30-September-2021 [duplicate]

After having this SSL error, I have search and know that it start from 30/09/2021, cause from let's encrypt. I tried updating my windows, updating chrome, manually downloaded and added some ...
user avatar
  • 1,231
0 votes
0 answers
62 views

IIS Web Server Certificate Invalid

Good day, I am trying to create a self-signed certificate for a site running on IIS 6.2, I have created and issued the certificate from my local CA server but the certificate is showing as invalid. ...
user avatar
1 vote
0 answers
345 views

How to troubleshoot ERR_CERT_AUTHORITY_INVALID error on specific site, on specific device, on specific browser?

I get the ERR_CERT_AUTHORITY_INVALID error only on a specific website, only on one Android phone, only using Chrome mobile. the site works (i.e. https is accessible without error) with every other ...
user avatar
0 votes
0 answers
509 views

Unable to load CA private key when creating the intermediate pair

Following the tutorial at LINK to create the root pair and intermediate pair. Creating the root pair works fine, but when I try to create the intermediate pair using: openssl ca -config openssl.cnf -...
user avatar
  • 1
37 votes
4 answers
16k views

cURL on Ubuntu 14: all Let's Encrypt certificates are expired (error 60)

Today out of a sudden all HTTPS requests, that my Ubuntu 14 server sends to websites with SSL certificates issued by Let's Encrypt, started to fail. The error produced by cURL is: curl: (60) SSL ...
user avatar
  • 1,041
0 votes
0 answers
55 views

Why is my browser showing the wrong certificate?

I have installed wordpress on my Synology and opened up the appropriate ports on my route to expose the Synology on the internet. I have purchased a domain from GoDaddy I have setup a ddns using no-...
user avatar
  • 165
0 votes
1 answer
2k views

How to automaticly renew ZeroSSL certificate?

How can I automaticly renew ZeroSSL certificate for nginx? I tried using the ZeroSSL bot but it uses certificates from Lets encrypt instead of ZeroSSL, but I can't use Lets Encrypt certificate, ...
user avatar
0 votes
1 answer
41 views

How the SSL/TLS CA certificate will update in my device if it is renewed from server maintainer?

How the SSL/TLS CA certificate will update if it renewed from website maintainer. Actually Rooot CA certificate expiry for 1 or 2 years, after that server maintainer should go to certificate Authority ...
user avatar
0 votes
1 answer
2k views

Can't reach apache server with ssl through haproxy

In my network i have a DNS server, a HAProxy server and 2 webservers. When i try to go through the haproxy (getting the domain IP from the DNS server) it gives me a different error then when i go ...
user avatar
0 votes
1 answer
35 views

SSL for subdomain

Can anyone please tell me, we have an SSL certificate for *.example.com but now we need separate SSL certificate for abc.example.com only for one subdomain. Is it possible? *.example.com which is ...
user avatar
1 vote
1 answer
89 views

Redirection fail on Apache2 for SSL subdomain configuration

On my Apache2 server I've enabled this 3 subdomain sites. database.example.com <VirtualHost *:80> ServerName database.example.com ServerAlias www.database.example.com DocumentRoot /usr/...
user avatar
  • 123
1 vote
2 answers
8k views

How do I use the openssl command to decode a public key .PEM file?

I have my localhost TSL/SSL certificate from Chrome stored to a .PEM file. Was wondering how do I use the oppenssl command to decode it into a list of human-readable fields. Googling this only ...
user avatar
0 votes
2 answers
1k views

SSL certificate authentication on Outlook 365 (cloud)

We can send emails using an Office 365 account from third-party devices using STARTTLS encryption on a SMTP server (port 587). The device I am using does not support STARTTLS, only plain vanilla SMTP (...
user avatar
  • 73
0 votes
1 answer
160 views

Apache tomcat 9 SSL connector: have to manually write https:// the first attempt on a browser

thanks in advance for any help. I've set up an apache tomcat 9 environment to access my site with an SSL certificate. The issue is that I need it to be able to access to the site by just typing in the ...
user avatar
0 votes
1 answer
158 views

Debug CA certificates issue - DigiCert GlobalRoot CA

There is something wrong, with the way, my Linux machine checks the certificate chain, and I'm unable to debug it Two hosts, that are currently affected, where i've tested the issue repo.fortinet.com ...
user avatar
0 votes
1 answer
918 views

Why is Chrome not trusting imported, self-signed Root CA?

I receive in Chrome the error NET::ERR_CERT_AUTHORITY_INVALID even though I imported the company's Root CA into Chrome's trust store (via settings > certificates > authorities). I imported the ...
user avatar
  • 111
0 votes
0 answers
59 views

Is it possible to use SSL client certificate authentication with client programs that do not specifically accommodate them?

I have set up a webserver with several self-hosted apps for my personal use. In order to make sure that I am the only person who can connect to my server, I have generated client authentication ...
user avatar
1 vote
1 answer
22 views

Easy switching between multiple sets of ca certificates?

My new job requires company's custom CA certificate to be installed. It is ok until I'm working, but I don't want this CA certificate to be active during non-working time. Are there any ways ...
user avatar
  • 197
1 vote
1 answer
58 views

Apache2 gives me an internal 500 error while trying to force HTTPS for the client using .htaccess files when using a self-signed certificate

I have an Ubuntu Server 20.04 LTS running Apache2 web server. As what different tutorials explain, I have created a private certificate key file and also a .crt Certificate file using the following ...
user avatar
0 votes
0 answers
196 views

How come Chrome/Edge allow entering domains that have invalid domain SSL certificates?

If you browse to biji.co/ads.txt manually via Chrome/Edge it works. In Firefox though it fails: Websites prove their identity via certificates. Firefox does not trust this site because it uses a ...
user avatar
  • 604
2 votes
1 answer
2k views

How to use existing CA and Server key with EasyRsa?

i have an existing ca key and cert. how do i tell easyrsa to use that to generate server and client certs, instead of generating its own? All the docs seem to mention to do an init-pki to initialize a ...
user avatar
  • 1,821
0 votes
1 answer
274 views

Is it possible to remove SAN from a certificate?

I've bought a certificate from an online provider. The CSR only contains a single SN (mysubdomain.example.com). The certificate issued, contains the SN i provided in my CSR, but for some reason the ...
user avatar
  • 103
0 votes
0 answers
385 views

Internet Explorer drops "this site is not secure" whenever opening the Syncthing web app

On a machine where I don't have any admin privileges, I have installed Syncthing. But whenever I start/restart the software I get this warning in IE: This site is not secure Error ...
user avatar
  • 438
0 votes
0 answers
173 views

OpenVPN Server 2.3.1, how to switch from dh1024.pem to dh4096.pem

I had to generate new keys to use the latest version of OpenVPN client to connect to my Netgear R7000 router, as the stock ones used MD5 which is no longer supported. I followed a guide to generate ...
user avatar
  • 231
-1 votes
1 answer
72 views

Enable SSL for any domain automatically

We are building a site builder and users can set their own domain. Is there any way to enable SSL for their domains automatically? For example, a wildcard letsencrypt certificate but not just for *....
user avatar
  • 113
0 votes
1 answer
104 views

Having existing pair of crt/private key how can I generate new private key and new CSR for renewing the SSL certificate?

I need to renew SSL certificate for the first time. I do not have original CSR, but I do have certificate.crt/private.key pair. The system told me I need to specify the same data in CSR to be accepted....
user avatar
  • 421
1 vote
1 answer
2k views

How does Chrome use .p12 certificates?

When I import a .p12 into Chrome, it requires a password. Once supplied, it is now stored in Chrome's key store and I never need to import my password again to use it. How does Chrome manage this? ...
user avatar
  • 203
2 votes
0 answers
1k views

Self-signed SSL Certificate for Nginx not working with Chrome

I've generated a Self-signed SSL Certificate and Authority for my localhost nginx dev environment and imported the Certificate Authority in both Firefox and Chrome. - Firefox: works perfectly, the ...
user avatar
1 vote
1 answer
346 views

Error Converting .DER file to .PEM file

I'm trying to convert this file in DER format to PEM. Using openssl.exe utility (tried in versions 0.98.1 and 1.02 of openssl) I tried the following commands: openssl x509 -inform der PA_AD_RB_V2_3....
user avatar
  • 113
0 votes
1 answer
253 views

Any Hotfix available for Windows 7 Ultimate or Windows 7 (no service packs installed) for auto updating Root certificates

I am aware that a hotfix is available for Windows 7 service pack 1 "Support for urgent Trusted Root updates for Windows Root Certificate Program in Windows", but could not find a similar ...
user avatar
1 vote
1 answer
46 views

Which certificate files should I share?

I have used acme.sh (highly recommended) for generating certificates. I have got several files here in which I do not understand which should I share and which should I hold back. These are the files ...
user avatar

1
2 3 4 5
8