4
votes
Accepted
Are self-signed certificates better for local usage?
I would advise you a third way: use a private CA. A true public CA is a complex thing because in order to be trusted you must publish your policies and have your root CA accepted by major browsers.
...
- 25.5k
1
vote
Recommendations on PKI roles as per ETSI EN 319 401 - V2.3.1
Seems like the whole exercise will depend on your business needs. You probably need to think of those first and then choose a suitable architecture, https://doc.primekey.com/ejbca/ejbca-introduction/...
- 375
1
vote
Accepted
When renewing a TLS certificate (no change to CSR nor private key), will the modulus remain the same?
Yes. This article recommends doing exactly what you suggest; extract the modulus from both public and private key and check that they match.
But moreover, if they have re-issued based on the same CSR, ...
- 57.1k
1
vote
Accepted
Adobe uses CA signature type as identifier on signatures created with user certificates
That's totally weird. I completely agree with you: this seems like a bug in Adobe when it creates the signature.
It seems like:
It correctly uses the provided private key to create an ECC signature.
...
- 57.1k
Only top scored, non community-wiki answers of a minimum length are eligible