Collaborate Disseminate
what is the difference between the commands below :
command 1:
openssl x509 -req -in certs/server_csr.pem -CA certs/intermediate_cert.pem -CAkey private/intermediate_key.pem -out server_cert.pem -CAcreateserial -days 365 -sha256 -extfile s… Continue reading what is the difference between the two openssl commands below
I created a certificate signed by an intermediate CA that is signed by root CA following an online tutorial.
Reference to tutorial that I followed: https://www.golinuxcloud.com/openssl-create-certificate-chain-linux/
Please find the steps … Continue reading Error when validating certificate
I am trying to identify a certificate CA distributed on https://acraiz.icpbrasil.gov.br/repositorio/Cadeia_FIREFOX.der (which is served signed by itself, while all pages leading to it are signed by a 3rd party that is included in all brows… Continue reading How to identify certificate package type?
A valid certificate cannot guarantee that I’m not being MITM’d right now, as either the private key or CA may have been compromised. For this reason, I have to contact a CA through CRL/OCSP to check if it’s been revoked. Best case, I can h… Continue reading What’s the point of certificates in SSL/TLS?
What would happen if PKI for root CA is insecure? Let’s say that one of the root Certificate Authorities was hacked and nobody noticed it yet.
Are all websites insecure or only those that were signed by this authority? Does it mean that a … Continue reading What would happen if root CA get hacked? [duplicate]
What would happen if PKI for root CA is insecure? Let’s say that one of the root Certificate Authorities was hacked and nobody noticed it yet.
Are all websites insecure or only those that were signed by this authority? Does it mean that a … Continue reading What would happen if root CA get hacked? [duplicate]
I tried to search online for the difference between both CSR certificate and a certificate but I couldn’t find a concrete asnwer.
I am doing my own lab using this tutorial https://www.golinuxcloud.com/openssl-create-certificate-chain-linux… Continue reading what is the difference between the root CA certificate and the intermediate CSR certificate
For this file it shows SHA1:
But going into details the certificate looks like this:
I know SHA1 is an outdated algorithm but I’m not sure about this nested construction. Is this insecure? Which of the two parts matter, does it matter th… Continue reading .exe with Digital Signature, showing SHA1 but the Certificate is SHA384, is it secure?
I am working on seeing if Active Directory Certificate Services can be used to manage the trust infrastructure for a data center environment. I have a series of different services that are run on web hosts using various different service … Continue reading Can you use AD CS to generate certificates for service users with the computer name in the certificate details?
There have been reports of attacks against certificate authorities resulting in the issuance of fraudulent TLS certificates for sites such as google.com, yahoo.com, and skype.com. These attacks seem to be a thing of the past though, and I … Continue reading What prevents certificate authorities from issuing fraudulent TLS certificates?