Questions tagged [certificate-generation]
The certificate-generation tag has no usage guidance.
18
questions
2
votes
3
answers
48
views
TLS bound to another domain in the same hosting
I have a domain for a customer, say my-nice-restaurant.example hosted in a hosting company with cPanel. This cPanel takes all the time one domain like the "primary domain" of my account, say ...
- 265
2
votes
1
answer
128
views
https certificate when you _only_ need backend and don't care about domain name
My application has static front-end content as well as a backend server. I already have an existing mechanism to serve the front-end; I'm running the backend in an AWS EC2 (with Elastic IP). ...
- 123
1
vote
3
answers
772
views
How do I install a security certificate for an alias (domain pointer) in DirectAdmin?
I have the following problem: I have 2 domains: domain1.example and domain2.example (domain pointer) => domain1.example.
Previously, I used Let's Encrypt to create SSL for both in DirectAdmin and ...
- 23
1
vote
1
answer
33
views
Must an SSL certificate be renewed as soon as CSR is generated?
One of our production certs is expiring on Nov 27. A CSR to renew that cert was generated two days ago on Nov 10, and my co-worker now says that because it was generated too fast we cannot process ...
- 13
0
votes
1
answer
85
views
Why does a domain-validated certificate issued by certificate authority for example1.com works on example2.com?
Doesn't that completely defeat the purpose of having the first domain verified by a certificate authority when the certificate also works on other domains?
How are they different from self-signed ...
2
votes
1
answer
1k
views
Error parsing certificate request: x509: unsupported elliptic curve from Let's Encrypt
I'm trying to obtain an EC-based X509 certificate using secp256 from Let's Encrypt. Let's Encrypt is returning an error instead of issuing the certificate:
$ letsencrypt --manual --csr ~/cryptopp-com....
user40589
2
votes
1
answer
1k
views
Wildcard certificate with certbot and DNS challenge
I am trying to obtain a wildcard certificate from Let's Encrypt for my web server.
Since I am using a "local" hoster, certbot has no DNS authenticator plugin for it. So I have to use the manual ...
- 23
2
votes
1
answer
332
views
Showing company name in address bar requires SSL EV certificate, or OV also OK?
I remember in the past I had to buy an SSL EV certificate (which are much more expensive than regular SSL certificates) to get the company name displaying next to the green lock in the address bar.
I ...
- 544
1
vote
1
answer
69
views
Figuring out domain name for generating Customer Signing Request (CSR)
I access production and qa domain websites as follows :
Production : https://portal.mydomain.com
QA : https://portal-qa.mydomain.com
However, when I add www like the following :https://www.portal-...
- 149
0
votes
1
answer
266
views
Generating a CSR on AWS
I have my domains configured on AWS on ElasticBean stalk as shown below :
For portal-production and portal-qa , I am planning to get a domain validated certificate from Alpha SSL and in order to do ...
- 149
6
votes
2
answers
2k
views
For an international domain name with non-ASCII characters, what goes into the CSR's CN field?
Suppose I control the international domain name (IDN) münchen.example.com (xn--mnchen-3ya.example.com).
Now, I want to get a SSL certificate for this domain name to enable HTTPS for my web site. I ...
- 351
1
vote
2
answers
93
views
Can we use open SSL to generate certifiicates for 100 customer websites?
We have more then 100 customers and we need to set their websites up with SSL. Do we have to buy the SSL certificates from one of the companies (Godddy and etc) or we can use OpenSSL for free?
- 11
1
vote
1
answer
171
views
How do I create a High Assurance Root Certificate Authority
I understand the basic nature of High Assurance Certificates. You pay more money for a certificate and the Certificate Authority investigates your company to a greater degree. After that occurs and ...
- 111
2
votes
1
answer
151
views
Creating an SSL Certificate
I have a barracuda SSL VPN. I also have a website hosted on winhost.com. On my website, I have a link to login to my VPN. I always get the "untrusted certificate" message. It says its untrusted ...
- 145
2
votes
2
answers
4k
views
Self signed SSL certificate with a wild card - works for sub domain, fails for the main domain
For development purposes I created a self signed SSL certificate where CN = *.example.com.
After installing the certificate, when browsing to any sub domain https://sub.example.com I got the nice ...
- 83
4
votes
1
answer
124
views
What makes a SSL certificate "signed"?
When you buy a SSL certificate from Comodo, it is signed by Comodo and therefore trusted. How is it signed though? Why can't anyone sign the certificate pretending to be Comodo?
- 321
1
vote
3
answers
66
views
Does the url path have to be same with the actualy categories we have setup?
Say for example we got an eshop, with a category "car spare parts" that includes a category called "tires" which has our product in there.
We have created a menu on the left where the visitor clicks ...
user6854
2
votes
1
answer
2k
views
How to set the Bit Length when generating SSL Certificate with Java keytool?
I'm going to create a SSL Certificate so I can use https on my web site. I have to generate a Certificate Signing Request (CSR) and I did generate such a file with the Java keytool following the guide ...
- 1,910