Skip to main content
Information Security
garethTheRed's user avatar
garethTheRed's user avatar
garethTheRed's user avatar
garethTheRed
  • Member for 9 years, 9 months
  • Last seen this week
  • Yorkshire, England
Profile Activity

43 Answers

Score Activity Newest
17 votes

Possibility of faking someone's public key

9 votes

Impact of Root certificate Renewal

9 votes
Accepted

X.509 certificate renew vs. rekey

5 votes
Accepted

Duplicate subject names for intermediate and root certificates

5 votes
Accepted

Is OCSP Request Signing Necessary?

4 votes

How to check that an e-mail service provides encryption between the mail servers?

4 votes
Accepted

Should 'openssl verify' recognise an exceeded 'Path Length' constraint on a root/intermediate CA?

4 votes

What is the best way to reissue user certificates after configuration change in a template?

4 votes
Accepted

Do current browsers still validate CRLs in enterprise PKI environments

3 votes
Accepted

How can I recover the full certificate chain knowing the final X.509 certificate?

3 votes
Accepted

What is the best practice for relying parties to selectively trust certificates in a corporate pki hierarchy?

3 votes
Accepted

Is it (under FIPS) possible to generate a CSR for an asymmetric key with usage=WRAP?

3 votes

How to automate publication of CRL and CRT files to CDP and AIA location?

3 votes

Root CA with Extended Key Usage fields

3 votes

How does the browser decide to accept a self-signed certificate?

3 votes
Accepted

Can I restrict a Certification Authority to signing certain device/application?

3 votes
Accepted

Why install a certificate in the Trusted Root CA of the server?

2 votes
Accepted

How revocation status of delegated OCSP responder is verified at the client side?

2 votes
Accepted

PKI - CRL and OCSP

2 votes
Accepted

truststore and intermediate certificates

2 votes

What type of CA is "Management CA" in EJBCA?

2 votes
Accepted

Certificate Practice Statement (CPS) without CP (Certificate Policy)?

2 votes
Accepted

Where are private keys stored?

2 votes

Can Passpoint X.509 certificates be used to MITM SSL connections on Passpoint networks?

2 votes
Accepted

Distrusting a cross signed certificate

1 vote

Can you use AD CS to generate certificates for service users with the computer name in the certificate details?

1 vote
Accepted

What happens to the key pair once the CSR has been enrolled?

1 vote
Accepted

How are X.509 certificate revoked?

1 vote
Accepted

Two issuing CAs in a two-tier PKI (Windows Server 2012)

1 vote

How will SHA1 deprecation affect internal CA's?

1
2