In cryptography, a certificate authority, or certification authority, (CA) is an entity that issues digital certificates.

learn more… | top users | synonyms (1)

0
votes
0answers
9 views

CA file disappeared after upgrading ubuntu packages

I have ubuntu 12.04 server(s) that haven't been upgraded for 2 years. It's been working well and fine until we decided to upgrade it. After upgrade (apt-get upgrade) CA file ...
2
votes
0answers
8 views

How can I set up Certificate Transparency if my CA doesn't support it?

I think many of you have actually heard of Google's Certificate Transparency initiative. Now the initiave involves a public log of all certificates issued by some CA. As this is some amount of work, ...
0
votes
1answer
19 views

Signing wildcard cert for a subdomain

I want to use my issued wildcard certificate to generate an SSL cert for a subdomain E.g. *.bar.com -> foo.bar.com Reason being I want to attempt to prevent some XSS weaknesses caused by multiple ...
-3
votes
0answers
25 views

Browser Error due to Expired Certificate [on hold]

My browser is not working, it said certificate is expired. What am i going to do? Please help me, im just a student. I need it so badly.
0
votes
1answer
29 views

Remove expired CA certificates

My Win2012R2 Subordinate Enteprise CA certificate has expired. I already have a new one working. How can i remove the expired certificate? I see the expired certificate on the general tab of MMC CA ...
0
votes
1answer
16 views

Find out which certificates cause a certificate revocation list check

In the course of migrating our internal CA we first the old server up and running in order to allow clients to download the CRl from the URL hardcoded in already issued certificates. Meanwhile the old ...
0
votes
1answer
13 views

Windows 2008 Cert Authority only issuing certificates for 10 days

I am trying to get a certificate for my Remote Desktop server on my AD. When I submit the request through the Certificate Authority snap in it generates a certificate that is only valid for a few days ...
1
vote
1answer
27 views

Can I import an SSL certificate that was created by the CA into my Java keystore?

I'm trying to import a CA-signed certificate into a Java keystore. All the instructions I can find for this tell me to first create a keystore and a signing request (CSR) using the Java keytool, then ...
0
votes
1answer
12 views

Intermediate Certificate Authority (CA) Installation Instructions for Microsoft IIS

I am following the Intermediate Certificate Authority (CA) Installation Instructions for Microsoft IIS from this link. I completed the step 1 and step 2 but in step 3 they said "From the left pane, ...
0
votes
0answers
44 views

Azure hosted website certificate chain (comodo) intermittently doesn't send full chain

We host a website in azure. The service we host has 6 instances. On that service we have added a certificate that covers the site, and has an authentication chain that looks like: our certificate ...
7
votes
2answers
368 views

Creating sub certificates from a root certificate (SSL) [duplicate]

If I purchase a signed certificate for example.com, can I then produce sub-certificates for a.example.com and b.example.com? These sub-certificates would have PEM files whose privacy cannot be ...
-1
votes
0answers
15 views

Schannel Fatal Alert 48 from failed LDAP connection over TLS, but Domain computers only [duplicate]

So I am setting up a service using PHP and it's LDAP functions to edit AD user accounts. I want to change account passwords and that requires an encrypted connection, so I use TLS. Now here's where ...
3
votes
0answers
44 views

LDAP over TLS fails to connect, Schannel Alert 48

I am trying to use PHP to edit users in active directory through LDAP. My test machine is using a simple WAMP setup and is NOT connected to the windows domain. This machine can connect to LDAP on the ...
1
vote
1answer
27 views

Cross Forest Certificate Authority

Looking for help on material for setting up a multi tiered/cross-forest PKI Infrastructure. The only articles I can come across are just setting up the basic two tier systems on one domain. Basically ...
0
votes
0answers
24 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
7
votes
1answer
119 views

Is is possible to disable Certificate Transparency (audit log checking) of certificates in Chrome?

We utilize HTTPS deep packet inspection in our firewall via a trusted root certificate in the Windows certificate store. Chrome recently pushed forward with a feature to perform additional checks on ...
1
vote
1answer
55 views

Best Certs to use for internal https [duplicate]

I'm helping out a large church with some IT stuff they have lots of internal secure connections, like to the security cameras, or to the UniFi AP controller that want to use https. Of course each of ...
0
votes
1answer
71 views

Easiest way to generate PFX certificate (Windows)

At the moment to generate PFX Certificate, I use openssl and: Generate a CSR with its private key Connect to my CA website (Microsoft CA), and submit CSR along with (san:dns=) additional attribute. ...
0
votes
2answers
114 views

Accounting IPSec connections with RSA authentication

Apple iOS has "VPN On Demand" function. With this function the VPN connection is made whenever the device tries to connect to certain domains or to the internet at all. iOS supports "VPN On Demand" ...
0
votes
1answer
55 views

Client Certificate Web Service Call

I have a requirement to call server web service with client certificate. They have provided me one .crt file. I am hosting my project in WindowsServer2008 IIS7. I install .crt from right click ...
1
vote
1answer
65 views

Delete certificate from user local store using script

I manage to delete a certificate using a script with command : certutil -delstore -v -enterprise CA "Certificate CN" But unfortunately, it only works if this certificate was first added using the ...
3
votes
1answer
88 views

Fedora 21: Cannot Ping or Curl, but can Access Internet

We have an automatic proxy server configuration setup, and I can use a web browser but ping/curl are failing; it looks like a DNS resolution problem. When I do: URLGRABBER_DEBUG=1 yum check-update ...
-3
votes
1answer
44 views

Can't submit an advanced certificate request to CA

I'm trying to submit an advanced certificat request to the CA trought Certificate Enrolment URL (http://my-ca-srv/certsrv) but I can't get the form in wich I'll fill information about target server. ...
2
votes
1answer
51 views

Is capolicy.inf processed in full (or part) during server install, renewal, and issuing new certs

When installing a Windows CA, capol.inf confuses me. It seems that capol.inf does set defaults for the CA that can otherwise be done using certutil's registry functions (or regedit). It also ...
4
votes
1answer
56 views

Re-install ADCS CA Certificate & CRL on Workstation

I installed Active Directory Certificate Services and created a Standalone CA. Everything went fine and it automatically installed the CA certificate and CRL on all my domain workstations. On one of ...
1
vote
0answers
78 views

makecert.exe incorrectly reports duplicate certificates when using -is flag

I created a self-signed certificate that I then loaded into the Trusted Root Certification Authorities folder. This certificate acts as a trusted root for websites on my workstation. I am using ...
3
votes
3answers
224 views

Windows server 2012 Root Enterprise Certification Authority issue certificates only with 2 years validity

I cannot make my Enterprise Root CA issue certificates with an expiration date more than 2 years. I've already set ValidityPeriodUnits and ValidityPeriod register keys with certutil.exe. I've ...
2
votes
1answer
37 views

User domain CA to create a UCC cert

We have 30+ RDS servers and use a hardware load balancer. I'm trying to figure out how to generate a UCC cert from our in house CA. Anyone point me in the right direction to do so? Need to alias all ...
0
votes
1answer
652 views

Firefox presenting “Secure Connection Failed” page for our certs

Firefox does not like our internal certificates. I'm trying to figure out why... tl;dr - Our internal IIS servers, signed with our internal CA, present a "Secure Connection Failed" page, with ...
1
vote
1answer
50 views

the same certificates are sold at different prices?

I've encountered so many times with this situation. For example everybody know if I buy a Positive SSL for a year from a reseller, its price is about $5.95 . If I buy the certificate from CA ...
0
votes
1answer
36 views

MS Certificate authority issued to wrong entity

Hi I have created a CA signing request on my netscaler where the common name is *.mydomain.com When I sign the CRS in my MS CA its ends up being issued to "Fredrik" instead of *.mydomain.com This ...
3
votes
1answer
180 views

Windows Server: Is it possible to run Certificate Authority while having Essentials experience installed?

I have a Windows Server 2012 machine running a certification authority, but also need the same server to run Windows Server Essentials Media Pack. This requires the Essentials Experience role to be ...
0
votes
0answers
47 views

How do you properly setup OpenVPN Server on mac? And how do you setup the certificates?

I have been searching for hours now, and I still cannot seem to find a proper tutorial on OpenVPN on mac. I did see the HOWTO, though that doesn't seem to be enough. The worst part is the one with ...
0
votes
0answers
49 views

How to add a certificate authority (CA) to redhat 5.6

I have Imported a Trusted Root Certification Authority(CA.cer) into Windows,It's working fine on window.Same certificate how to import the redhat 5.6?
0
votes
1answer
51 views

FreeBSD pfsense root CA fails

I have some problem with root CA of my pfsense installation. My test script is this: openssl s_client -showcerts -connect fbstatic-a.akamaihd.net:443 And the answer is: Verify return code: 20 ...
0
votes
1answer
217 views

Root Certificate Update Solution - Windows Server 2008

We have an application attempting to run licensing checks via http over the web. The machines this software resides on are Server 2008 vm's with no domain configured. While tracking what is ...
0
votes
1answer
62 views

Enterprise Root CA create CodeSigning Certificate for Multiple Users

Is it possible to have a root CA in the enterprise create a CodeSigning certificate (to be used in a Visual Studio solution) that is registered to more than one user? The way it is now, I am the only ...
2
votes
0answers
79 views

Windows Server 2012 Certificate Stores not updating

According to Microsoft, Windows Server 2012 and Windows 8.1 automatically update Digital Certificates. Microsoft Security Advisory 3050995 https://technet.microsoft.com/library/security/3050995 says ...
4
votes
2answers
87 views

Is it necessary to purchase an OID for ADCS?

I am interested in utilizing ADCS to generate trusted certificates for internal web applications. However, from my readings it appears that I need to purchase an OID, which looks pretty expensive. Is ...
0
votes
0answers
33 views

IPSEC for RDP Connections

I am stuck with a wired problem, I am trying to achieve a functionality in which if a certificate is not installed on a system that system won't able to remote desktop the server, he won't even see ...
-1
votes
1answer
186 views

Problem with TLS identity not verified

I run a CA server "Microsoft CA Server Enterprise" and I generate certificates then bind the cert to my site. In all clients in my network, I add the cert with certutil -addstore ca org.cer When my ...
0
votes
1answer
136 views

SSL Certificates from nginx only works in Windows IE and Chrome

I have a wildcard certificate and got it signed by AlphaSSL. I followed the steps from here: http://nginx.org/en/docs/http/configuring_https_servers.html#chains to set it up on my nginx server which ...
8
votes
2answers
2k views

Is this SSL certificate chain broken and how to fix it?

For the SSL cert on the domain example.com, some tests tell me that the chain is incomplete and since Firefox keeps its own certificate store, it might fail on Mozilla (1, 2, 3). Others tell me it is ...
1
vote
1answer
39 views

How do I get alerted to an pending AD CS certificate request?

I want to get a summary report of pending AD CS requests. How would I approach this? Does anything already exist? The problem I'm trying to solve is where a user requests a certificate, and i'm ...
-1
votes
1answer
80 views

How to create certificates for local network

I have a local network (a intranet of about 50 to 70 computers) where is a Windows Server 2008 with a ASP.NET MVC application. To encrypt the connection with HTTPS i need a server certificate (not ...
1
vote
0answers
69 views

How do I change the expiration of CRLs with OpenSSL?

I am currently experimenting with my self signed CA. But in order for my devices to work I need a valid CRL. I set the CDP to one of the CDN hosting providers. As I have only 5 certificates issued I ...
2
votes
2answers
511 views

How do I request a certificate from CEP / CES on a Microsoft CA on OSX or Linux?

This article describes how to request a certificate from AD CS (Active Directory Certificate Services) from a non-domain joined windows computer. I would think the same principals apply to non ...
3
votes
1answer
5k views

apache ssl - unable to get local issuer certificate

Somehow just today suddenly my seafile client throwed this error. I don't believe its a seafile issue, because my openssl throws the exact same error: user@nb-user:~$ echo |openssl s_client -connect ...
0
votes
0answers
24 views

After renewing web CA, Outlook 2013 can connect to Exchange 2013 but not Outlook 2010

After renewing web CA, 2013 outlook client are able to connect to 2013 Exchange but not 2010 outlook clients? Anyone run in to this issue please advise!
0
votes
3answers
529 views

How to create a digital signature and verify it through a server

I am trying to find out a way to create a digital signature for the employees of my company and place it in a server from where they can retrieve them and attach it with any digital document (Office ...