Questions tagged [certificate]

A certificate is an electronic document used in cryptography.

In cryptography, a public key certificate (also known as a digital certificate or identity certificate) is an electronic document which uses a digital signature to bind a public key with an identity — information such as the name of a person or an organization, their address, and so forth. The certificate can be used to verify that a public key belongs to an individual.

See the Wikipedia entry for more background and concepts regarding certificates.

9943 questions
119
votes
9 answers

How to Export Certificate from Chrome on a Mac?

How do I export a security certificate from Chrome v37 on a Mac? Previously I could click on the little lock icon next to the URL, select "Connection," select the certificate, and an "Export" button would appear. Not so anymore!
kmiklas
  • 13,085
  • 22
  • 67
  • 103
117
votes
5 answers

How to list the certificates stored in a PKCS12 keystore with keytool?

I wanted to list the certificates stored in a PKCS12 keystore. The keystore has the extension .pfx
David García González
  • 5,164
  • 8
  • 29
  • 35
111
votes
13 answers

No identities were available - administrator request

I had problems while "archiving" my app. I think there are invalid profiles because of iPhone Update to 5.1 and XCode update to 4.2.2. I've taken now more than 4 hours to get rid of certification issues while using this thread step by step 3 times…
Nasenbaer
  • 4,810
  • 11
  • 53
  • 86
109
votes
7 answers

Android Studio - debug keystore

Does Android Studio sign debug builds? If so, where is the keystore it uses to do it?
fasteque
  • 4,309
  • 8
  • 38
  • 50
108
votes
3 answers

Difference between pem, crt, key files

I'm having problems understanding the difference between files produced by openssl and how to detect them. For example I'm trying to generate Self-signed cert with private key and generate JKS file from p12 format. I'm googling like a madman but I…
sebastian_t
  • 2,241
  • 6
  • 23
  • 39
108
votes
5 answers

what is the difference between .cer & pfx file

People used to say - cer - certificate stored in the X.509 standard format. This certificate contains information about the certificate's owner... along with public and private keys. pfx - stands for personal exchange format. It is used to exchange…
Thomas
  • 33,544
  • 126
  • 357
  • 626
106
votes
5 answers

How do you remove the root CA certificate that fiddler installs

Fiddler helpfully offers to add a unique root CA certificate to intercept HTTPS traffic. Once this certificate has been added, how do you go about removing it?
muzzamo
  • 1,721
  • 2
  • 14
  • 18
103
votes
12 answers

Git for Windows: SSL certificate problem: certificate has expired

I am aware that Let's Encrypt made changes that may impact older clients because a root certificate would expire. See DST Root CA X3 Expiration (September 2021). However, I didn't think this could impact me because my development machine is…
Jürgen Steinblock
  • 30,746
  • 24
  • 119
  • 189
99
votes
14 answers

Problems with X509Store Certificates.Find FindByThumbprint

I'm having a problem when I use the method X509Store.Certificates.Find public static X509Certificate2 FromStore(StoreName storeName, StoreLocation storeLocation, X509FindType findType, string findValue) { X509Store store = new…
nunofamel
  • 989
  • 2
  • 7
  • 5
99
votes
6 answers

OpenSSL: unable to verify the first certificate for Experian URL

I am trying to verify an SSL connection to Experian in Ubuntu 10.10 with OpenSSL client. openssl s_client -CApath /etc/ssl/certs/ -connect dm1.experian.com:443 The problem is that the connection closes with a Verify return code: 21 (unable to…
pdjota
  • 3,163
  • 2
  • 23
  • 33
99
votes
4 answers

Create a OpenSSL certificate on Windows

Since I'm very new to SSL certificates, and the creation and usage of them I figured maybe StackOverflow members can help me out. I'm from Holland, the common way of online payments is by implementing iDEAL. An online payment protocol supported by…
Ben Fransen
  • 10,884
  • 18
  • 76
  • 129
99
votes
8 answers

How can I create a self-signed certificate using C#?

I need to create a self-signed certificate (for local encryption - it's not used to secure communications), using C#. I've seen some implementations that use P/Invoke with Crypt32.dll, but they are complicated and it's hard to update the parameters…
Guss
  • 30,470
  • 17
  • 104
  • 128
98
votes
15 answers

"Warning: unable to build chain to self-signed root for signer" warning in Xcode 9.2

I'm attempting to migrate an Xcode project to another computer. It gives me the warning "Warning: unable to build chain to self-signed root for signer" and when it runs it crashes immediately similarly to what is shown in this Stack Overflow: App…
Chewie The Chorkie
  • 4,896
  • 9
  • 46
  • 90
98
votes
2 answers

Creating a .p12 file

Using openssl, I've created a private key as follows: openssl genrsa -out myKey.pem Then, to generate the csr demanded by the CA, I've executed the following: openssl req -new -key myKey.pem -out cert.csr The CA responded with a certificate which…
Isaac Kleinman
  • 3,994
  • 3
  • 31
  • 35
98
votes
13 answers

How to display the Subject Alternative Name of a certificate?

The closest answer that I found is using "grep". > openssl x509 -text -noout -in cert.pem | grep DNS Is there better way to do this? I only prefer command line. Thanks.
user180574
  • 5,681
  • 13
  • 53
  • 94