User garethTheRed

17 votes

Possibility of faking someone's public key

answered May 20, 2019 at 14:51

9 votes

Impact of Root certificate Renewal

answered Jul 11, 2020 at 16:26

9 votes

Accepted

X.509 certificate renew vs. rekey

answered Feb 10, 2017 at 6:02

5 votes

Accepted

Is OCSP Request Signing Necessary?

answered May 21, 2019 at 21:05

5 votes

Accepted

Duplicate subject names for intermediate and root certificates

answered Apr 6, 2019 at 9:38

4 votes

Accepted

Do current browsers still validate CRLs in enterprise PKI environments

answered Mar 16 at 15:48

4 votes

Accepted

Why install a certificate in the Trusted Root CA of the server?

answered Dec 24, 2020 at 19:25

4 votes

How to check that an e-mail service provides encryption between the mail servers?

answered Jun 24, 2014 at 15:14

4 votes

Accepted

Should 'openssl verify' recognise an exceeded 'Path Length' constraint on a root/intermediate CA?

answered Apr 6, 2016 at 7:56

4 votes

What is the best way to reissue user certificates after configuration change in a template?

answered Dec 17, 2018 at 10:37

3 votes

Root CA with Extended Key Usage fields

answered Sep 23, 2018 at 8:21

3 votes

How to automate publication of CRL and CRT files to CDP and AIA location?

answered Mar 27, 2019 at 17:22

3 votes

How does the browser decide to accept a self-signed certificate?

answered Aug 2, 2019 at 5:48

3 votes

Accepted

Can I restrict a Certification Authority to signing certain device/application?

answered Sep 6, 2019 at 7:15

3 votes

Accepted

How can I recover the full certificate chain knowing the final X.509 certificate?

answered Jul 11, 2022 at 17:15

3 votes

Accepted

What is the best practice for relying parties to selectively trust certificates in a corporate pki hierarchy?

answered Jul 22, 2022 at 19:22

3 votes

Accepted

Is it (under FIPS) possible to generate a CSR for an asymmetric key with usage=WRAP?

answered Aug 11, 2022 at 4:56

2 votes

Accepted

Distrusting a cross signed certificate

answered Sep 29, 2022 at 5:32

2 votes

Accepted

truststore and intermediate certificates

answered Feb 21, 2019 at 13:22

2 votes

What type of CA is "Management CA" in EJBCA?

answered Jan 5, 2018 at 2:40

2 votes

Accepted

Certificate Practice Statement (CPS) without CP (Certificate Policy)?

answered Jan 18, 2018 at 19:40

2 votes

Accepted

Where are private keys stored?

answered Jun 4, 2018 at 20:36

2 votes

Can Passpoint X.509 certificates be used to MITM SSL connections on Passpoint networks?

answered Feb 19, 2016 at 7:25

1 vote

Accepted

Two issuing CAs in a two-tier PKI (Windows Server 2012)

answered Feb 23, 2016 at 12:39

1 vote

How will SHA1 deprecation affect internal CA's?

answered Mar 7, 2016 at 20:35

1 vote

Public key for SSH over the internet differs from a key for SSH over the LAN

answered Mar 31, 2016 at 7:02

1 vote

RFC 5755 Attribute Certificate Validation

answered Feb 21, 2019 at 18:17

1 vote

Accepted

PKI - CRL and OCSP

answered Mar 27, 2019 at 15:34

1 vote

Does Windows require the full certificate chain in order to trust a certificate?

answered Oct 26, 2019 at 15:01

1 vote

Accepted

How to generate a CSR (certificate signing request) for creating a limited CA (Certificate Authority) using LibreSSL?

answered May 14, 2020 at 7:17

Stack Exchange Network

42 Answers

Possibility of faking someone's public key

Impact of Root certificate Renewal

X.509 certificate renew vs. rekey

Is OCSP Request Signing Necessary?

Duplicate subject names for intermediate and root certificates

Do current browsers still validate CRLs in enterprise PKI environments

Why install a certificate in the Trusted Root CA of the server?

How to check that an e-mail service provides encryption between the mail servers?

Should 'openssl verify' recognise an exceeded 'Path Length' constraint on a root/intermediate CA?

What is the best way to reissue user certificates after configuration change in a template?

Root CA with Extended Key Usage fields

How to automate publication of CRL and CRT files to CDP and AIA location?

How does the browser decide to accept a self-signed certificate?

Can I restrict a Certification Authority to signing certain device/application?

How can I recover the full certificate chain knowing the final X.509 certificate?

What is the best practice for relying parties to selectively trust certificates in a corporate pki hierarchy?

Is it (under FIPS) possible to generate a CSR for an asymmetric key with usage=WRAP?

Distrusting a cross signed certificate

truststore and intermediate certificates

What type of CA is "Management CA" in EJBCA?

Certificate Practice Statement (CPS) without CP (Certificate Policy)?

Where are private keys stored?

Can Passpoint X.509 certificates be used to MITM SSL connections on Passpoint networks?

Two issuing CAs in a two-tier PKI (Windows Server 2012)

How will SHA1 deprecation affect internal CA's?

Public key for SSH over the internet differs from a key for SSH over the LAN

RFC 5755 Attribute Certificate Validation

PKI - CRL and OCSP

Does Windows require the full certificate chain in order to trust a certificate?

How to generate a CSR (certificate signing request) for creating a limited CA (Certificate Authority) using LibreSSL?