Questions tagged [digital-certificate]

A certificate which uses a digital signature to bind together a public key with an identity or information.

In cryptography, a public key certificate (or identity certificate) is a certificate which uses a digital signature to bind together a public key with an identity — information such as the name of a person or an organization, their address, and so forth. The certificate can be used to verify that a public key belongs to an individual.

In a typical public key infrastructure (PKI) scheme, the signature will be of a certificate authority (CA). In a web of trust scheme, the signature is of either the user (a self-signed certificate) or other users ("endorsements"). In either case, the signatures on a certificate are attestations by the certificate signer that the identity information and the public key belong together.

484 questions
7
votes
2 answers

What is the maximum length of certificate chain?

What is the length of the longest certificate chain till date? I want to know the number of certificate authorities in that chain and not the size of the certificate chain.
7
votes
1 answer

Explain the Certificate Signature Value field of a X509 Digital Certificate

A X509 Digital Certificate signed by a CA contains these two amongst other fields. 1. Signature Algorithm 2. Signature Value I understand that the "Signature Algorithm" field contains the hash algorithm that was used by the CA to sign the…
pushNpop
  • 1,954
  • 3
  • 16
  • 17
7
votes
1 answer

VeriSign Class 3 certificate not trusted by Windows?

I distribute a Windows desktop app which has all executable files digitally signed by a Verisign Class 3 Code Signing certificate. For the vast majority of users, this seems to work fine. However a small number of users report the certificate is…
7
votes
0 answers

Getting undefined reference error to stdout, stderr while compiling using x86 tool chain of Android NDK

I am trying to compile one of the native libraries libdigcert using Android NDK toolchain. If I use arm toolchain everything works fine and if I link this library to my executable I dont get any linker errors. If I use x86 toolchain, then I get…
6
votes
2 answers

Import Signing Certificate is Failing

I am attempting to create a certificate with a private key (.pfx) that I can use within my application to create and verify digital signatures. I want to install this certificate into the certificate store (Windows). I am having issues importing the…
6
votes
2 answers

Programmatically Determine If An Excel File (.xls) Contains Macros

Is there any way to programmatically determine if an .xls contains macros, without actually opening it in Excel? Also are there any methods to examine which certificate (including timestamp cert) these macros are signed with? Again without using…
Gkakk McJkakk
  • 105
  • 1
  • 4
6
votes
1 answer

Makecert.exe error

I am trying to use Makecert.exe to create a signing certificate that I can use with our internal VS.NET applications, to be deployed using Clickonce on our local network I have been following the MSDN guide MSDN: Certificate Expiration in ClickOnce…
6
votes
2 answers

Certificate Loading Issue

I have developed one applet and I am finding a strange behavior. This is for implemented security based application which build in GWT, Hibernate and Spring. The applet is mainly accessing browser certificates and using it for encryption and…
bNd
  • 7,512
  • 7
  • 39
  • 72
6
votes
2 answers

how to prove that one certificate is issuer of another certificates

I have two certificate. One certificate is issuer of another certificate. how can I see with java code that, my issuer certificate is really issuer? I know that AuthorityKeyIdentifier of my certificate and SubjectKeyIdentifie of issuer…
grep
  • 5,465
  • 12
  • 60
  • 112
6
votes
0 answers

How to re-sign Silverlight App with new certificate to not require reinstall

I have a Silverlight 4 trusted OOB app that was signed with a certificate that expired last week. I was unable to release new code on the old certificate. I applied for a new 5-year certificate and re-signed the app after choosing this new…
Rodney
  • 5,417
  • 7
  • 54
  • 98
6
votes
2 answers

How to check a digital signature from broswer with PHP

I have a Javascript that is signing a text string in the browser. It uses CAPICOM under Internet Explorer and window.crypto under Mozilla browsers. After the signing process I receive a BASE64 encoded signature. Using HTTPS I upload the signature…
6
votes
1 answer

Obtaining the certificate chain

I am working with X509 certificates in Java. Given a certificate is it possible to find all other certificates in the signing hierarchy until you reach the root certificate? I have a certificate file (with a .cer extension) and I want to extract the…
5
votes
1 answer

Expiration of a digitally signed PDF with multiple signatures

Context My overall goal is to make a set of PDFs available, in such a way that users can be assured of the provenance of the documents (i.e., they came from the origin that they are expected to come from). I'm thinking about doing this by digitally…
5
votes
3 answers

Verifying digital signatures on Mac Adobe Reader

I'm attempting to sign PDFs with an SSL certificate issued from Go Daddy. These signatures show up as valid in the Windows Reader as long as you check the "Validating Signatures" check box under Edit->Preferences...->Security->Advanced…
Graham
  • 463
  • 1
  • 5
  • 12
5
votes
2 answers

Digital signature: sample code for verification and for extracting certification information

I use a third party tool to verify signature and to get certificate detail(like serial number, CA etc..) from signature. The problem with this utility is it is licensed and works on certain machines only. Can i validate the signature against the…
Amit Kumar Gupta
  • 7,193
  • 12
  • 64
  • 90