Questions tagged [certificate-generation]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
25 views

Why does a domain-validated certificate issued by certificate authority for example1.com works on example2.com?

Doesn't that completely defeat the purpose of having the first domain verified by a certificate authority when the certificate also works on other domains? How are they different from self-signed ...
2
votes
1answer
223 views

Error parsing certificate request: x509: unsupported elliptic curve from Let's Encrypt

I'm trying to obtain an EC-based X509 certificate using secp256 from Let's Encrypt. Let's Encrypt is returning an error instead of issuing the certificate: $ letsencrypt --manual --csr ~/cryptopp-com....
2
votes
1answer
407 views

Wildcard certificate with certbot and DNS challenge

I am trying to obtain a wildcard certificate from Let's Encrypt for my web server. Since I am using a "local" hoster, certbot has no DNS authenticator plugin for it. So I have to use the manual ...
2
votes
1answer
213 views

Showing company name in address bar requires SSL EV certificate, or OV also OK?

I remember in the past I had to buy an SSL EV certificate (which are much more expensive than regular SSL certificates) to get the company name displaying next to the green lock in the address bar. I ...
1
vote
1answer
52 views

Figuring out domain name for generating Customer Signing Request (CSR)

I access production and qa domain websites as follows : Production : https://portal.mydomain.com QA : https://portal-qa.mydomain.com However, when I add www like the following :https://www.portal-...
0
votes
1answer
226 views

Generating a CSR on AWS

I have my domains configured on AWS on ElasticBean stalk as shown below : For portal-production and portal-qa , I am planning to get a domain validated certificate from Alpha SSL and in order to do ...
5
votes
2answers
893 views

For an international domain name with non-ASCII characters, what goes into the CSR's CN field?

Suppose I control the international domain name (IDN) münchen.example.com (xn--mnchen-3ya.example.com). Now, I want to get a SSL certificate for this domain name to enable HTTPS for my web site. I ...
1
vote
2answers
77 views

Can we use open SSL to generate certifiicates for 100 customer websites?

We have more then 100 customers and we need to set their websites up with SSL. Do we have to buy the SSL certificates from one of the companies (Godddy and etc) or we can use OpenSSL for free?
1
vote
1answer
79 views

How do I create a High Assurance Root Certificate Authority

I understand the basic nature of High Assurance Certificates. You pay more money for a certificate and the Certificate Authority investigates your company to a greater degree. After that occurs and ...
2
votes
1answer
148 views

Creating an SSL Certificate

I have a barracuda SSL VPN. I also have a website hosted on winhost.com. On my website, I have a link to login to my VPN. I always get the "untrusted certificate" message. It says its untrusted ...
2
votes
2answers
4k views

Self signed SSL certificate with a wild card - works for sub domain, fails for the main domain

For development purposes I created a self signed SSL certificate where CN = *.example.com. After installing the certificate, when browsing to any sub domain https://sub.example.com I got the nice ...
4
votes
1answer
117 views

What makes a SSL certificate “signed”?

When you buy a SSL certificate from Comodo, it is signed by Comodo and therefore trusted. How is it signed though? Why can't anyone sign the certificate pretending to be Comodo?
1
vote
3answers
62 views

Does the url path have to be same with the actualy categories we have setup?

Say for example we got an eshop, with a category "car spare parts" that includes a category called "tires" which has our product in there. We have created a menu on the left where the visitor clicks ...
2
votes
1answer
2k views

How to set the Bit Length when generating SSL Certificat with Java keytool?

I'm going to create a SSL Certificate so I can use https on my web site. I have to generate a Certificate Signing Request (CSR) and I did generate such a file with the Java keytool following the guide ...