Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [certificates]

A piece of data used in public key cryptography (specifically public key infrastructures) that contains identifying information (i.e. email address or web address), a hash of a public key, and a digital signature that authenticates the data in the certificate. For questions specifically about [x509], [certificate-authority], or [public-key-infrastructure], please use those tags.

173 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
0
votes
1answer
4k views

ssl handshake failure unable to get local issuer certificate

I have an issue with new integration that I am working on it. I should consume a web service provided by external company and this service is over https, so in order to integrate with them, they have ...
0
votes
0answers
49 views

How is the crytography system used in Windows XP and does it need to be enabled?

The root certificates on my Windows XP machine have expired. As far as I understand it, Windows XP only uses crytography for doing "intranet" data transfers, which in my case is irrelevant because I ...
0
votes
0answers
44 views

Are there known cases when malicious Javascript or Chrome/Firefox extension copied certificate from browser?

I have a certificate that must be manually installed on my browser in order to have a secure connection with a specific website. Are there known cases of malicious Javascript or Chrome/Firefox ...
0
votes
1answer
78 views

Access protected (from export) private key in windows certificate store

I have created a CSR with the option to disallow the export of the private key. Can I still access it? If not, how is it protected?
0
votes
0answers
82 views

Browser Suddenly gets kicked out of client certificate authenticated site on Apache Windows Environment

I have a website in our development environment "Windows / Apache 2.4 server" that has client certificate authentication. When you initially visit the site, it works ok. Since I have multiple client ...
0
votes
0answers
138 views

Why, in a certificate, TBS is before alg id?

From an embedded systems point of view it is inefficient to put the alg ID after TBS data in a certificate since an embedded system may not have a lot of hashing implementation and thus may not be ...
0
votes
0answers
336 views

RDP - Why self signed certifcate is trusted on client-side?

Here is the issue I can't resolve. Remote RDP server presents a self-signed certificate, and I want to block any connection on client-side when RDP server is using non compliant certificate. I found ...
0
votes
0answers
495 views

Checking Intermediate Certificates Programatically

Nessus is reporting that an "SSL Certificate Cannot Be Trusted". This is due to the intermediate certificate not being in the certificate bundle presented during the TLS/SSL handshake. I've looked ...
0
votes
0answers
8k views

Converting .pem to .key file

I downloaded certificated for my website using letsencrypt: letsencrypt -d crackerscreed.me --manual --preferred-challenges dns certonly The process was successful but the site I want to implement ...
0
votes
0answers
1k views

Using a PowerShell Self-Signed Certificate for Outlook S/MIME

I'm testing out a way that myself and a few others could use S/MIME for our email traffic. I'm using Outlook 2016 with Win10. I have generated my test certificate with the following command in ...
0
votes
0answers
406 views

How to install client certificates globally for Google Chrome in Ubuntu?

I am trying to install a client certificate to Google Chrome running on Ubuntu. I want any user who logs in to Ubuntu to be able to use this client certificate in Chrome. Even better if I can create ...
0
votes
0answers
71 views

deceptive digital signature?

I am new to cyphering and I try to understand this case : my government sends me so-called "digitally signed" PDFs, as you can see below (text only, after "Thanks"). Although there is a certificate ...
0
votes
0answers
25 views

Different KeySizes from Different Stores same pfx

Sorry, i'm new to all of this. I have a question as to why the KeySize of a RSACryptoServiceProvider will differ between Store Locations? I've imported the same pfx in the LocalMachine store, as ...
0
votes
0answers
1k views

Implications of IP Address as Subject Alt Name in certificates

Are there specific known negative security implications of including the IP address of a server as a Subject Alternate Name in the server's certificate?
0
votes
0answers
65 views

Certificate verification

I work on a desktop application which generates Security certificates. The Business use of these certificates is - they will be used as an authentication and authorization mechanism to enable users to ...
0
votes
0answers
145 views

Proxpy- certificate issue

I am using proxpy, a proxy server written in Python. It comes with its certificates and after installing one of the certificates in Firefox, I got 'Connection is untrusted'. Any help in this regard ...
0
votes
0answers
261 views

What registrars support *.onion TLD as a Subject Alternative Name, and how does validation work?

I'm interested in obtaining a .onion TLD in my SAN name from a public CA. Which Public CAs support .onion TLDs and what is the validation process like (e.g. Whois isn't available for ToR) Update: ...
0
votes
0answers
1k views

Why is the public key extracted from the CSR different than the one extracted from the associated certificate?

I am playing around with pyopenssl. I am trying to extract the public key from a CSR and to check if it is the same than the one I find in the associated certificate. There is a small difference ...
-1
votes
1answer
104 views

SHA-1 Certificate warning on Windows7

I have installed a clean Win7 machine on a network where my own PC is connected. When I navigate to google.com from my PC (Win 8.1) I receive proper valid TLS connection. Yet when I navigate to google....
-1
votes
1answer
36 views

What if I have an address-based certificate and a domain based certificate loading HTTPs resources in the background

What if I have an address-based certificate and a domain based certificate loading HTTPs resources in the background, will this change the Lock-Logo in the Browser Address bar? Does an address based ...
-1
votes
1answer
2k views

How does SSL client authentication work?

I read the RFC document, it mentioned that there are some kinds of client certificate type. So I don't understand what does this type mean. For a instance, one type named rsa_fixed_ecdh, it said, the ...
-2
votes
1answer
93 views

Create public key from Private key

Is it possible to create public key from Private key? In Microsoft certificate console (Capi) you can export a certificate out of a private key. Is this exported certificate a public key? I know that ...
-2
votes
1answer
497 views

Are VPNs for iPhones vulnerable to hacking?

I use VPNs all the time on my iPhone to get around websites being blocked and sometimes just for privacy, but are they secure? In this video the guy installed a certificate on the lady's phone that ...