Collaborate Disseminate
I am testing several PKCS12 keystores with ECC type keys, generated by a CA with RSA key, to sign PDF documents. I have also tested with my own certificates from a demo CA certificate. I use Adobe Acrobat Reader DC 2022.001.20085 on Window… Continue reading Adobe uses CA signature type as identifier on signatures created with user certificates
I need a CA signed ECDSA certificate for testing purposes.
I am able to generate an ECDSA certificate and key but I have never signed one.
I use OpenSSL in a Windows environment to generate certificates.
Is there any way to generate a free… Continue reading Generate CA signed ECDSA certificate
When generating a certificate what would more secure – generating a self-signed certificate using PGP or using a public CA like Let’s Encrypt? We are using it for signing and encrypting.
What are the advantages and disadvantages?
Continue reading Are self-signed certificates better for local usage?
I am trying to connect to a company’s internal API (I am working on a project for them). This company has an API that has an SSL certificate from Sectigo.
From what I have gathered is a pretty well known CA, but for some weird reason, if I… Continue reading I was asked to install an SSL .cert in my server, should I do this?
I have an containerized JVM application (multiple actually) running on kubernetes, which needs to trust additional custom/private CAs (which are not known beforehand, the application will be deployed in multiple unrelated data-centers that… Continue reading Modifying cacerts at runtime
I have gone through multiple questions but still I am confused. RFC X.509 also does not clarify it.
Conforming CAs MUST include this extension in certificates that
contain public keys that are used to validate digital signatures on
… Continue reading Is it must to have "Key Usage" extension in the selfsigned root certificate?
We have our own root certificate authority which is used to sign the certificates for the agents connected to our server. We have generated the root certificate authority using keytool command as below
Keytool -genkeypair -alias endpoint -… Continue reading How to add extension to existing TLS certficate?
More than a year after the historic and damaging SolarWinds attack, nearly 65% of organizations still are unable to secure and govern the growing volume of machine and application identities in the form of digital certificates, the backbone of enterpri… Continue reading Lack of CLM maturity is putting organizations at risk
I read this article at Electronic Frontier Foundation on how Russian government wants the residents there to install a specific "Trusted Root CA" certificate. According to the article, this certificate has can inspect the users t… Continue reading How to determine what Certificate Authorities to keep on my computer?
I’m trying to create a private CA and want it to only be able to issue certificates for my domain via name constraints.
However, even if I create the CA with restrictions on DNS names as well as directory names like this
New-SelfSignedCert… Continue reading How can I prevent non-SAN TLS certificates from bypassing name constraints?