Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [certificate-generation]

The tag has no usage guidance.

2
votes
1answer
63 views

Error parsing certificate request: x509: unsupported elliptic curve from Let's Encrypt

I'm trying to obtain an EC-based X509 certificate using secp256 from Let's Encrypt. Let's Encrypt is returning an error instead of issuing the certificate: $ letsencrypt --manual --csr ~/cryptopp-com....
2
votes
1answer
241 views

Wildcard certificate with certbot and DNS challenge

I am trying to obtain a wildcard certificate from Let's Encrypt for my web server. Since I am using a "local" hoster, certbot has no DNS authenticator plugin for it. So I have to use the manual ...
2
votes
1answer
164 views

Showing company name in address bar requires SSL EV certificate, or OV also OK?

I remember in the past I had to buy an SSL EV certificate (which are much more expensive than regular SSL certificates) to get the company name displaying next to the green lock in the address bar. I ...
1
vote
1answer
47 views

Figuring out domain name for generating Customer Signing Request (CSR)

I access production and qa domain websites as follows : Production : https://portal.mydomain.com QA : https://portal-qa.mydomain.com However, when I add www like the following :https://www.portal-...
0
votes
1answer
219 views

Generating a CSR on AWS

I have my domains configured on AWS on ElasticBean stalk as shown below : For portal-production and portal-qa , I am planning to get a domain validated certificate from Alpha SSL and in order to do ...
5
votes
2answers
764 views

For an international domain name with non-ASCII characters, what goes into the CSR's CN field?

Suppose I control the international domain name (IDN) münchen.example.com (xn--mnchen-3ya.example.com). Now, I want to get a SSL certificate for this domain name to enable HTTPS for my web site. I ...
1
vote
2answers
76 views

Can we use open SSL to generate certifiicates for 100 customer websites?

We have more then 100 customers and we need to set their websites up with SSL. Do we have to buy the SSL certificates from one of the companies (Godddy and etc) or we can use OpenSSL for free?
1
vote
1answer
66 views

How do I create a High Assurance Root Certificate Authority

I understand the basic nature of High Assurance Certificates. You pay more money for a certificate and the Certificate Authority investigates your company to a greater degree. After that occurs and ...
2
votes
1answer
147 views

Creating an SSL Certificate

I have a barracuda SSL VPN. I also have a website hosted on winhost.com. On my website, I have a link to login to my VPN. I always get the "untrusted certificate" message. It says its untrusted ...
2
votes
2answers
4k views

Self signed SSL certificate with a wild card - works for sub domain, fails for the main domain

For development purposes I created a self signed SSL certificate where CN = *.example.com. After installing the certificate, when browsing to any sub domain https://sub.example.com I got the nice ...
4
votes
1answer
117 views

What makes a SSL certificate “signed”?

When you buy a SSL certificate from Comodo, it is signed by Comodo and therefore trusted. How is it signed though? Why can't anyone sign the certificate pretending to be Comodo?
1
vote
3answers
62 views

Does the url path have to be same with the actualy categories we have setup?

Say for example we got an eshop, with a category "car spare parts" that includes a category called "tires" which has our product in there. We have created a menu on the left where the visitor clicks ...
2
votes
1answer
2k views

How to set the Bit Length when generating SSL Certificat with Java keytool?

I'm going to create a SSL Certificate so I can use https on my web site. I have to generate a Certificate Signing Request (CSR) and I did generate such a file with the Java keytool following the guide ...