New answers tagged

0 votes

How do I convert a .cer certificate to .pem?

We mustn't forget that Windows can do this natively: certutil.exe -encode <der file> <pem file> and in the other direction: certutil.exe -decode <pem file> <der file> It ...
  • 4,119
0 votes

How to convert .cer and .key file to .pem?

Assuming you have the .key PK, and .cer/.crt/.cert file in the correct format (i think common-name is mandatory) // in Linux cat x.key x.cert > x.pem // in Windows copy /b x.key+x.cert x.pem
  • 306
1 vote

APACHE CERTBOT ERROR

Meta: I fixed your formatting and restored # which is actually a necessary part of the syntax of /etc/hosts; please click the ? icon in the edit window and read the help for 'code' (and maybe others ...
0 votes

APACHE CERTBOT ERROR

Are you trying to get a certificate from letsencrypt for www.example.com? You can't do that. It's not yours. I see you're doing a few different things. You've asked certbot for a certificate for ...
0 votes

Can't find NT SERVICE\MSSQLSERVER to give it Read privs on a cert

Use correct per-service SID to grant permissions and rights: NT SERVICE\MSSQLSERVER NT SERVICE\SQLSERVERAGENT More information can be found here: https://learn.microsoft.com/en-us/sql/relational-...
  • 1,527
0 votes
Accepted

Renewing oVirt certificates

Which type of environment am I even running, out of standalone and self-hosted? In the oVirt context, self-hosted means the oVirt engine runs inside the hypervisor it manages itself. Standalone ...
  • 552
1 vote
Accepted

How to migrate to Google managed certificates without downtime?

The other answers are very good, but I was very motivated to find a way to migrate to a GCP load balancer without planning for downtime where we basically just sit and wait for certificates to be ...
2 votes
Accepted

create a self-signed certificate for a subdomain, the main domain does not belong to me

The comment to my post by dave_thompson_085 helped me solve this, I added -addext "subjectAltName = DNS:xxxx.provider.com" and reimported the certificate into windows and it works fine now ...
1 vote

create a self-signed certificate for a subdomain, the main domain does not belong to me

A self signed certificate won't be trusted by any browser. What is the purpose of the certificate? If need a certificate that will work in browsers, you can use Let's Encrypt.
0 votes
Accepted

TLS 1.2 client ignoring "Acceptable CA" list for Apache ClientCertificateRequest

I was wrong. The acceptable CA list is being delivered to my iOS app (whether I include the SSLCADNRequestFile or not). There are two app callbacks at the start of the connection, and the DER-...
0 votes

Convert Crt and Key to Pfx

Thanks this was exactly what I was looking for. It was tricky that the .key file needed the same name in the same folder to work. Even though it's not a parameter of certutil folder: {{sitename}}.crt {...
0 votes

rdpsign failing with error 0x80092004

According to Microsoft Article Remote Desktop listener certificate configurations... Before you run the wmic commands, the certificate that you want to use must be imported to the Personal ...
0 votes
Accepted

Windows Custom Certificate (certlm.msc) - Default Values

use certreq.exe tool along with INF templates to automate the process. It is not possible to automate in GUI. Specifically, look at certreq -new command.
  • 6,514
2 votes
Accepted

Generate self-signed certificate for Firefox to accept

The issue is that, as @jabbson pointed out, my subjectAltName was not propagating from the CSR to the certificate because of my syntax. The correct syntax is: # Generate rootCA openssl genrsa -out ...
0 votes

concatenated PEM file: split private key and certificate chain

My Cert is password protected so I can input --passin to input password via command-line openssl storeutl -passin pass:<my-pass> -keys mycert.pem My Certs are printing, but not the ENCRYPTED ...
1 vote
Accepted

How to resolve "400 Bad Request" after cloning a webserver that uses Cloudflare for SSL?

The problem is in the configuration of your cloned server. Likely you require in your config the client to provide a client certificate (ssl_verify_client on), which the client does not have.
1 vote

Does Win-Acme / LetsEncrypt renew existing certificates or replace them?

After a quick view into the documentation it looks like the behaviour depends on what you select to store the certificates. For example, for the windows certificate store there is a flag --...

Top 50 recent answers are included