2 votes
Accepted

Generate self-signed certificate for Firefox to accept

The issue is that, as @jabbson pointed out, my subjectAltName was not propagating from the CSR to the certificate because of my syntax. The correct syntax is: # Generate rootCA openssl genrsa -out ...
2 votes
Accepted

create a self-signed certificate for a subdomain, the main domain does not belong to me

The comment to my post by dave_thompson_085 helped me solve this, I added -addext "subjectAltName = DNS:xxxx.provider.com" and reimported the certificate into windows and it works fine now ...
1 vote

APACHE CERTBOT ERROR

Meta: I fixed your formatting and restored # which is actually a necessary part of the syntax of /etc/hosts; please click the ? icon in the edit window and read the help for 'code' (and maybe others ...
1 vote

create a self-signed certificate for a subdomain, the main domain does not belong to me

A self signed certificate won't be trusted by any browser. What is the purpose of the certificate? If need a certificate that will work in browsers, you can use Let's Encrypt.
1 vote
Accepted

How to resolve "400 Bad Request" after cloning a webserver that uses Cloudflare for SSL?

The problem is in the configuration of your cloned server. Likely you require in your config the client to provide a client certificate (ssl_verify_client on), which the client does not have.
1 vote

Does Win-Acme / LetsEncrypt renew existing certificates or replace them?

After a quick view into the documentation it looks like the behaviour depends on what you select to store the certificates. For example, for the windows certificate store there is a flag --...
1 vote
Accepted

How to migrate to Google managed certificates without downtime?

The other answers are very good, but I was very motivated to find a way to migrate to a GCP load balancer without planning for downtime where we basically just sit and wait for certificates to be ...

Only top scored, non community-wiki answers of a minimum length are eligible