Tag Info

Hot answers tagged

8

Comodo have a root certificate whose public key is included in your web browser. The private key that matches the public key is used to sign SSL certificates that Comodo issue, and it can't be faked because no one else has the private key that matches the public key in the web browser.


3

The name verification is guided by RFC 2818 Section 3.1, more specifically on wildcards: Matching is performed using the matching rules specified by [RFC2459]. If more than one identity of a given type is present in the certificate (e.g., more than one dNSName name, a match in any one of the set is considered acceptable.) Names may contain the ...


2

A more discript Uri is probably better, provided its not unnecessairly long. Something to take into account, in the example you provide you have tires within spare parts, what about new tires where do they go? What if in the future you start selling bike tires? I would probably do something like this to maximize data available: ...


2

Try adding -keysize 2048 Source: CSR Generation: Java-based Webservers (using keytool)


1

EV/High Assurance SSL certs use unique object IDs that are inserted into the extended policy field of the SSL certificate. Most applications (browsers) that support EV-SSL have this OID and CA fingerprint hard coded into them. When they get a successful match, the browser then displays the extended data. You don't mention your usage case, but if this is ...


1

Generating your own self signed SSL certificates is a bit of a challenge if you've only dabbled in web design. A good tutorial is here http://www.akadia.com/services/ssh_test_certificate.html You should at least call Barracuda and ask them what they can help you with since you use their service.



Only top voted, non community-wiki answers of a minimum length are eligible