Collaborate Disseminate
I am trying to understand the practical mechanisms of cross-signing (intermediate) certificates. As an example, I am looking at the Let’s Encrypt Chain of Trust. That page mentions:
IdenTrust has cross-signed our intermed… Continue reading How does selection between multiple available certificate chains work?
I have a certificate issued from Let’s Encrypt.
Can I create a key and certificate for my own purpose (i.e. an OpenVPN server, or web server with internal domain name/IP address) and sign it with the Let’s Encrypt certificat… Continue reading Creating sub CA signed with Let’s Encrypt certificate
I would like to implement SSL pinning on ESP8266. Since leaf certificate is changing quite often I would like to check for which domain leaf was issued and check that root belong Let’s Encrypt.
To which property should I pin… Continue reading Robust SSL pinning on IoT device with Let’s Encrypt
LetsEncrypt certificates have been created for example.com and www.example.com. This is a Linux server on IP 123.123.123.1.
I would like to add foo.example.com and bar.example.com, but these subdomains are set to 123.123.123.2 (MS2012 ser… Continue reading Setting up LetsEncrypt SSL for domains/subdomains on two servers
I’m trying to set up a HTTPS certificate for mymachine.cs.superuniversity.ca (free or paid).
Before I jump in, is it even possible to set up such a certificate using Let’s Encrypt?
The domain is for a very simple http server… Continue reading Can I get a HTTPS certificate for mymachine.cs.superuniversity.ca from "Let’s Encrypt"
According to NetTrack, Let’s Encrypt is now used on more than 50% of domains (51.21% as of April 2018).
I know Let’s Encrypt helped a lot of people to get free certificates for their websites, so I think its existence was a … Continue reading Is there any security risk when a certificate authority is used more than all others?
Let’s Encrypt issues certificates of which they are the CA. That cert is based on a private key generated in the server by LE’s auto/certbot script.
Could a state actor MITM that transaction requesting a cert and send down … Continue reading Could a state actor MITM Let’s Encrypt certificate issuance to provide a cert they could more easily crack
Based on the answers provided on this question I am installing Let’s Encrypt for the first time, and it’s on a company intranet. I have control over the subdomain which I want to install the cert, but not over the root domain… Continue reading Let’s Encrypt on Intranet DNS challenge failing [migrated]
I have a digitalocean server (ubuntu 16.4 nginx) + serverpilot I installed letsencrypt Following the site tutorial: https: //www.robertwent.com/blog/using-letsencrypt-serverpilot/
Everything worked out, the result was this: … Continue reading Letsencrypt does not work on Android
I got 2 certificates issued from “Let’s Encrypt”, one for “crackerscreed.org” and the other for “www.crackerscreed.org”. The cPanel on my hosting service says:
When cPanel installs an SSL certificate onto one of your domains, it also installs the same certificate onto that domain’s “www” subdomain, and vice-versa. Unless your certificate matches both domains, however, only one of the two domains will show as a secure site in a user’s web browser.
Currently, I have the “crackerscreed.org” cert installed.
Now, if I try to visit https://crackerscreed.org it works perfectly fine but if the visitors try to visit https://www.crackerscreed.org, they receives an error saying “the connection is insecure”. How do I deal with it?
Continue reading Untrusted Connection after installing SSL Certificates from Let’s Encrypt