In cryptography, a certificate authority, or certification authority, (CA) is an entity that issues digital certificates.

learn more… | top users | synonyms (1)

0
votes
0answers
8 views

Is is possible to disable Certificate Transparency (audit log checking) of certificates in Chrome?

We utilize HTTPS deep packet inspection in our firewall via a trusted root certificate in the Windows certificate store. Chrome recently pushed forward with a feature to perform additional checks on ...
1
vote
1answer
45 views

Best Certs to use for internal https [duplicate]

I'm helping out a large church with some IT stuff they have lots of internal secure connections, like to the security cameras, or to the UniFi AP controller that want to use https. Of course each of ...
-1
votes
0answers
9 views

“Connection restarted while page was loading” in Firefox when using SSL

I am developing an ASP.NET web app. The Login page use client certificates as credentials. IIS is configured so the Login.aspx require client certificate and SSL. On Explorer you select a client ...
0
votes
0answers
21 views

Easiest way to generate PFX certificate (Windows)

At the moment to generate PFX Certificate, I use openssl and: Generate a CSR with its private key Connect to my CA website (Microsoft CA), and submit CSR along with (san:dns=) additional attribute. ...
0
votes
2answers
76 views

Accounting IPSec connections with RSA authentication

Apple iOS has "VPN On Demand" function. With this function the VPN connection is made whenever the device tries to connect to certain domains or to the internet at all. iOS supports "VPN On Demand" ...
1
vote
1answer
2k views

Renewing Service Certificates for NDES on Windows Server 2008 R2

We currently use the NDES Service on Windows 2008 R2 Enterprise where the same box is also the standalone Certificate Authority. During initial setup, NDES created 2 service certificates for SCEP ...
2
votes
1answer
331 views

How to issue a cert for web hosting using ad cert authority

I need to issue a certificate for SSL binding in IIS using Active Directory Certificate Authority. As far as I understand it should have Purpose=Auth Server and contain private key/be exportable. ...
0
votes
1answer
31 views

Client Certificate Web Service Call

I have a requirement to call server web service with client certificate. They have provided me one .crt file. I am hosting my project in WindowsServer2008 IIS7. I install .crt from right click ...
7
votes
2answers
174 views

Windows PKI: How can I import, sign/issue and export a large number of CSRs?

I have a lot of CSRs that I need to have signed/issued and exported in windows. I was hoping I could batch process them somehow (certutil sounds like it can do some of the work) but I'm not quite sure ...
3
votes
1answer
71 views

Fedora 21: Cannot Ping or Curl, but can Access Internet

We have an automatic proxy server configuration setup, and I can use a web browser but ping/curl are failing; it looks like a DNS resolution problem. When I do: URLGRABBER_DEBUG=1 yum check-update ...
1
vote
2answers
1k views

Thunderbird not trusting certificate signed with self-signed authority

I have generated a self-signed certificate authority using mydomain.org as the common name. I imported the public certificate using Thunderbird's certificate manager under the "Authorities" tab. So ...
1
vote
1answer
26 views

Delete certificate from user local store using script

I manage to delete a certificate using a script with command : certutil -delstore -v -enterprise CA "Certificate CN" But unfortunately, it only works if this certificate was first added using the ...
-3
votes
1answer
33 views

Can't submit an advanced certificate request to CA

I'm trying to submit an advanced certificat request to the CA trought Certificate Enrolment URL (http://my-ca-srv/certsrv) but I can't get the form in wich I'll fill information about target server. ...
2
votes
1answer
39 views

Is capolicy.inf processed in full (or part) during server install, renewal, and issuing new certs

When installing a Windows CA, capol.inf confuses me. It seems that capol.inf does set defaults for the CA that can otherwise be done using certutil's registry functions (or regedit). It also ...
4
votes
1answer
45 views

Re-install ADCS CA Certificate & CRL on Workstation

I installed Active Directory Certificate Services and created a Standalone CA. Everything went fine and it automatically installed the CA certificate and CRL on all my domain workstations. On one of ...
3
votes
3answers
165 views

Windows server 2012 Root Enterprise Certification Authority issue certificates only with 2 years validity

I cannot make my Enterprise Root CA issue certificates with an expiration date more than 2 years. I've already set ValidityPeriodUnits and ValidityPeriod register keys with certutil.exe. I've ...
1
vote
0answers
44 views

makecert.exe incorrectly reports duplicate certificates when using -is flag

I created a self-signed certificate that I then loaded into the Trusted Root Certification Authorities folder. This certificate acts as a trusted root for websites on my workstation. I am using ...
20
votes
4answers
5k views

How to decide where to purchase a wildcard SSL certificate?

Recently I needed to purchase a wildcard SSL certificate (because I need to secure a number of subdomains), and when I first searched for where to buy one I was overwhelmed with the number of choices, ...
2
votes
1answer
34 views

User domain CA to create a UCC cert

We have 30+ RDS servers and use a hardware load balancer. I'm trying to figure out how to generate a UCC cert from our in house CA. Anyone point me in the right direction to do so? Need to alias all ...
0
votes
1answer
43 views

FreeBSD pfsense root CA fails

I have some problem with root CA of my pfsense installation. My test script is this: openssl s_client -showcerts -connect fbstatic-a.akamaihd.net:443 And the answer is: Verify return code: 20 ...
0
votes
1answer
434 views

Firefox presenting “Secure Connection Failed” page for our certs

Firefox does not like our internal certificates. I'm trying to figure out why... tl;dr - Our internal IIS servers, signed with our internal CA, present a "Secure Connection Failed" page, with ...
0
votes
2answers
944 views

Generating SAN SSL Certificate that works for firefox and chrome

I am trying to generate a SSL certificate that after being signed by my own CA will work for multiple domains. My openssl configuration file looks like this: [ req ] default_bits = 2048 ...
2
votes
3answers
7k views

apache Client Certificate Authentication errors: Certificate Verification: Error (18): self signed certificate

So I have been following instructions on setting up Client Certificate Authentication in Apache2 w/ mod_ssl. This is solely for the purpose of testing an application against CAA, not for any sort of ...
1
vote
1answer
49 views

the same certificates are sold at different prices?

I've encountered so many times with this situation. For example everybody know if I buy a Positive SSL for a year from a reseller, its price is about $5.95 . If I buy the certificate from CA ...
0
votes
1answer
30 views

MS Certificate authority issued to wrong entity

Hi I have created a CA signing request on my netscaler where the common name is *.mydomain.com When I sign the CRS in my MS CA its ends up being issued to "Fredrik" instead of *.mydomain.com This ...
3
votes
1answer
127 views

Windows Server: Is it possible to run Certificate Authority while having Essentials experience installed?

I have a Windows Server 2012 machine running a certification authority, but also need the same server to run Windows Server Essentials Media Pack. This requires the Essentials Experience role to be ...
1
vote
1answer
1k views

No Certificate Templates in Certification Authority

I have installed AD Certificate Services on a Windows Server 2012 R2 Standard edition. But when I open Certification Authority snap-in, there is no Certificate Templates folder: Why? Have I missed ...
0
votes
0answers
34 views

How do you properly setup OpenVPN Server on mac? And how do you setup the certificates?

I have been searching for hours now, and I still cannot seem to find a proper tutorial on OpenVPN on mac. I did see the HOWTO, though that doesn't seem to be enough. The worst part is the one with ...
0
votes
0answers
30 views

How to add a certificate authority (CA) to redhat 5.6

I have Imported a Trusted Root Certification Authority(CA.cer) into Windows,It's working fine on window.Same certificate how to import the redhat 5.6?
0
votes
1answer
148 views

Root Certificate Update Solution - Windows Server 2008

We have an application attempting to run licensing checks via http over the web. The machines this software resides on are Server 2008 vm's with no domain configured. While tracking what is ...
9
votes
3answers
16k views

Can I create my own S/MIME certificate for email encryption?

I'm having a bit of an issue here. Bear with me as this may be a case of "not asking the right question". Background: Using Apple Mail. Want to encrypt/decrypt email but GPGMail (and apparently ...
0
votes
1answer
48 views

Enterprise Root CA create CodeSigning Certificate for Multiple Users

Is it possible to have a root CA in the enterprise create a CodeSigning certificate (to be used in a Visual Studio solution) that is registered to more than one user? The way it is now, I am the only ...
2
votes
0answers
74 views

Windows Server 2012 Certificate Stores not updating

According to Microsoft, Windows Server 2012 and Windows 8.1 automatically update Digital Certificates. Microsoft Security Advisory 3050995 https://technet.microsoft.com/library/security/3050995 says ...
4
votes
2answers
74 views

Is it necessary to purchase an OID for ADCS?

I am interested in utilizing ADCS to generate trusted certificates for internal web applications. However, from my readings it appears that I need to purchase an OID, which looks pretty expensive. Is ...
0
votes
0answers
30 views

IPSEC for RDP Connections

I am stuck with a wired problem, I am trying to achieve a functionality in which if a certificate is not installed on a system that system won't able to remote desktop the server, he won't even see ...
-1
votes
1answer
172 views

Problem with TLS identity not verified

I run a CA server "Microsoft CA Server Enterprise" and I generate certificates then bind the cert to my site. In all clients in my network, I add the cert with certutil -addstore ca org.cer When my ...
0
votes
1answer
100 views

SSL Certificates from nginx only works in Windows IE and Chrome

I have a wildcard certificate and got it signed by AlphaSSL. I followed the steps from here: http://nginx.org/en/docs/http/configuring_https_servers.html#chains to set it up on my nginx server which ...
8
votes
2answers
1k views

Is this SSL certificate chain broken and how to fix it?

For the SSL cert on the domain example.com, some tests tell me that the chain is incomplete and since Firefox keeps its own certificate store, it might fail on Mozilla (1, 2, 3). Others tell me it is ...
2
votes
1answer
2k views

SSL Certifcate Request s2003 DC CA DNS Name not Avaiable

I am trying to submit a request for an SSL certificate on a Domain Controller in order to enable LDAP SSL, and having no end of problems. I am following the information provided at ...
1
vote
1answer
38 views

How do I get alerted to an pending AD CS certificate request?

I want to get a summary report of pending AD CS requests. How would I approach this? Does anything already exist? The problem I'm trying to solve is where a user requests a certificate, and i'm ...
-1
votes
1answer
67 views

How to create certificates for local network

I have a local network (a intranet of about 50 to 70 computers) where is a Windows Server 2008 with a ASP.NET MVC application. To encrypt the connection with HTTPS i need a server certificate (not ...
2
votes
2answers
3k views

OS X Not Trusting Thawte Primary Root CA - G3

We recently renewed our Nginx webserver's Thawte SSL certificate. Previously we'd been using SHA1 as the signing algorithm, but this time used SHA256 which leads to a new root certificate known as ...
3
votes
2answers
8k views

Error code: ssl_error_rx_record_too_long

I have nginx with the following setup: server { listen 80; server_name site.com www.site.com; root /home/site/public_html; listen 443; ...
1
vote
0answers
58 views

How do I change the expiration of CRLs with OpenSSL?

I am currently experimenting with my self signed CA. But in order for my devices to work I need a valid CRL. I set the CDP to one of the CDN hosting providers. As I have only 5 certificates issued I ...
2
votes
2answers
369 views

How do I request a certificate from CEP / CES on a Microsoft CA on OSX or Linux?

This article describes how to request a certificate from AD CS (Active Directory Certificate Services) from a non-domain joined windows computer. I would think the same principals apply to non ...
2
votes
1answer
3k views

apache ssl - unable to get local issuer certificate

Somehow just today suddenly my seafile client throwed this error. I don't believe its a seafile issue, because my openssl throws the exact same error: user@nb-user:~$ echo |openssl s_client -connect ...
0
votes
0answers
160 views

setup SSL with CA for multiple local sites in Apache and authenticate in a specific location (Error code: ssl_error_handshake_failure_alert) Ubuntu

i'm trying to implement SSL (HTTPs) on my local web-server to protect specified directories on Apache's websites where a user log's-in, combining SSL and HTTP Authentication Basic. I have follow ...
33
votes
4answers
23k views

Certification authority root certificate expiry and renewal

In 2004, I set up a small certification authority using OpenSSL on Linux and the simple management scripts provided with OpenVPN. In accordance with the guides I found at the time, I set the validity ...
0
votes
3answers
324 views

How to create a digital signature and verify it through a server

I am trying to find out a way to create a digital signature for the employees of my company and place it in a server from where they can retrieve them and attach it with any digital document (Office ...
0
votes
0answers
22 views

After renewing web CA, Outlook 2013 can connect to Exchange 2013 but not Outlook 2010

After renewing web CA, 2013 outlook client are able to connect to 2013 Exchange but not 2010 outlook clients? Anyone run in to this issue please advise!