2022 Developer Survey is open! Take survey.
4 votes
Accepted

Are self-signed certificates better for local usage?

I would advise you a third way: use a private CA. A true public CA is a complex thing because in order to be trusted you must publish your policies and have your root CA accepted by major browsers. ...
user avatar
1 vote

Recommendations on PKI roles as per ETSI EN 319 401 - V2.3.1

Seems like the whole exercise will depend on your business needs. You probably need to think of those first and then choose a suitable architecture, https://doc.primekey.com/ejbca/ejbca-introduction/...
user avatar
1 vote
Accepted

When renewing a TLS certificate (no change to CSR nor private key), will the modulus remain the same?

Yes. This article recommends doing exactly what you suggest; extract the modulus from both public and private key and check that they match. But moreover, if they have re-issued based on the same CSR, ...
user avatar
1 vote
Accepted

Adobe uses CA signature type as identifier on signatures created with user certificates

That's totally weird. I completely agree with you: this seems like a bug in Adobe when it creates the signature. It seems like: It correctly uses the provided private key to create an ECC signature. ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible