4
votes
Accepted
Are self-signed certificates better for local usage?
I would advise you a third way: use a private CA. A true public CA is a complex thing because in order to be trusted you must publish your policies and have your root CA accepted by major browsers.
...
1
vote
Recommendations on PKI roles as per ETSI EN 319 401 - V2.3.1
Seems like the whole exercise will depend on your business needs. You probably need to think of those first and then choose a suitable architecture, https://doc.primekey.com/ejbca/ejbca-introduction/...
1
vote
Accepted
When renewing a TLS certificate (no change to CSR nor private key), will the modulus remain the same?
Yes. This article recommends doing exactly what you suggest; extract the modulus from both public and private key and check that they match.
But moreover, if they have re-issued based on the same CSR, ...
1
vote
Accepted
Adobe uses CA signature type as identifier on signatures created with user certificates
That's totally weird. I completely agree with you: this seems like a bug in Adobe when it creates the signature.
It seems like:
It correctly uses the provided private key to create an ECC signature.
...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
certificate-authority × 1218certificates × 786
tls × 517
public-key-infrastructure × 288
openssl × 115
x.509 × 83
certificate-revocation × 73
digital-signature × 64
authentication × 63
man-in-the-middle × 61
windows × 42
cryptography × 40
encryption × 36
web-browser × 36
trust × 25
letsencrypt × 25
self-signed × 18
certificate-transparency × 18
firefox × 17
dns × 16
chrome × 16
http × 14
java × 14
ocsp × 14
crl × 14