New answers tagged x.509
6
In a certificate, the serial number is chosen by the CA which issued the certificate. It is just written in the certificate. The CA can choose the serial number in any way as it sees fit, not necessarily randomly (and it has to fit in 20 bytes). A CA is supposed to choose unique serial numbers, that is, unique for the CA. You cannot count on a serial number ...
6
According to your comments to other answers, you actually want to
sign a pdf file with [your] certificate, then have this signature saved and appended to the pdf [you]'ve just signed.
(BTW, you sign with the private key associated with the public key in your certificate, not with the certificate itself, but that's a detail.)
I assume you want to ...
1
If you want to sign a PDF, most PDF writers, and some versions of the reader-only will have a built in mechanism for signing, and some even for timestamping. It will ask you to provide your certificate file and then it will apply the digital signature into the file. PDFs in particular have this mechanism built into the format, but it is also possible to sign ...
1
Your question is really two different questions. A certificate only needs to be signed by another certificate if there needs to be a chain of trust. For example, a root CA will sign the certificates they issue so that anyone trying to verify the certificate will know that it is trusted by the CA. You can do this kind of chaining with any certificate that ...
1
A certificate always contains a signature, but on itself, not on some PDF document. This signature is an integral part of the certificate and has been computed by the CA which issued the certificate; this is by verifying this signature that any software can gain some trust in the contents of the certificate. All of this happens independently of any PDF file, ...
1
As the certificate is registered to you and fields completed with your details, the certificate is your digital signature. You don't add a digital signature to the certificate.
You need a certificate to be issued by a CA (which you could create). Then add the certificate to your trusted certs (if self-signed or not from an standard recognised CA). When you ...
Top 50 recent answers are included
