Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 3272

A piece of data used in public key cryptography (specifically public key infrastructures) that contains identifying information (i.e. email address or web address), a hash of a public key, and a digital signature that authenticates the data in the certificate. For questions specifically about [x509], [certificate-authority], or [public-key-infrastructure], please use those tags.

4 votes
1 answer
7k views

What is the difference between `extendedKeyUsage` and an application policy?

Because some implementations of public key infrastructure (PKI) applications cannot interpret application policies, both application policies and enhanced key usage sections appear in certificates issued …
Tobias Kienzler's user avatar
1 vote
1 answer
2k views

How to troubleshoot why Thunderbird rejects a PKCS#12 certificate with "Could not verify thi...

After playing around a bit with openssl, I created a PKCS12 certificate which imports flawlessly in Firefox while Thunderbird "Could not verify this certificate for unknown reasons". Talk about a help …
Tobias Kienzler's user avatar
42 votes
1 answer
34k views

Which properties of a X.509 certificate should be critical and which not?

I encountered the basicConstraints to be critical, both because it's basic and because a certificate marked as CA:FALSE should obviously not be able to sign child-certificates (though I think I read somewhere …
Tobias Kienzler's user avatar
10 votes
2 answers
17k views

Which extensions to use for a S/MIME certificate?

(I'm using openssl, which at the moment creates CA and certificates with permission to do basically everything) …
Tobias Kienzler's user avatar