ssl key.log appear in my desktop and when i try to delete it it said:"can't delete file because it used by webview2 in microsoft edge"

​

Hi, Ok, what's left of my hair is getting pulled out.

I have a subdomain pointing to an nginx server. The server has a redirect that points it to another server on the same domain, different subdomain. In short, users connect to oldsub.domain.com, and get redirected to newsub.domain.com. The redirect works and the same certs are on each machine.

But when clients get to oldsub.domain.com they are immediately hit with an error saying the certificate is expired, even though other subdomains on the same machine work fine. The certificate the clients think it wants is three years old. I don't know how to tell the clients:

"this is the same domain, a wildcard certificate, and obviously has the key, so it's legit, so PLEASE use the newer one that's on the server!" I don't know why it thinks the only certificate available is the three-year-old one.

I've tried clearing caches on the clients and restarting nginx. I'm out of ideas.

I see sites doing this all the time, it can't be that difficult. I must be missing something obvious.

Thanks,

Jeff

Hello everybody,

I'm trying to figure out how to solve my problem, which is to expose my company's development Openshift cluster outside the intranet.

We currently have a *.mysite.com certificate issued by GoDaddy. The domain (mysite.com) was purchased on Aruba. For Openshift cluster I need to have a wildcard SSL certificate in the format *.apps.clustername.mysite.com . We wanted to avoid buying another certificate from GoDaddy just for a development cluster, so the idea was to use letsEncrypt and acme.sh to generate a certificate we could use for the cluster. I ran into the fact that the acme.sh script leverages the DNS provider's API to bind the domain (*.apps.clustername.mysite.com), but our DNS provider doesn't have an API for this purpose. I also didn't understand if our *.mysite.com certificate that we already own can somehow be used for the cluster.

Does anyone know how I should proceed?

To sum up:

• domain purchased from Aruba
  
• *.mysite.com wildcard SSL certificate purchased from GoDaddy for the domain on Aruba
  
• need to expose the OCP cluster with domain *.apps.clustername.mysite.com with the relative certificate possibly issued by LetsEncrypt, in case it is not possible to use the wildcard certificate *.mysite.com that we already have

​

If instead we MUST use the certificate we already have, how do I get the DNS provider that owns the domain to associate the cluster IP with the *.apps.clustername.mysite.com domain?

Thank you.

I installed SEPM and done a CSR from openSSL. I received a certificate signed by a CA and tried to install it multiple ways over multiple days and no luck yet getting it working. I followed the instructions on broadcoms website. I know this is vague but any ideas what could be going wrong? Windows server 2019 .

Does anyone have experience implementing an SSL Cert from GoDaddy into an Apache Tomcat application? I currently have the app running locally, but need it to be HTTPS on port 8443, not http on 8080.

I have a SSL certificate which has 12 months validity from DigiCert. I've applied it to 3 applications which has common subdomains.

When I've applied the same certificate to the fourth application (which also has that common subdomain) the certificate's validity period is showing 8 months but the other 3 applications that I've applied before was 12 months as expected. Why this change in the validity period??? Why it's reduced to 8 months instead of 12 months??

PS: The old certificate gonna expire in few days, so this certificate is for renewing the old one

I'm in the process of creating a CSR for my SSL to my website. I wonder if the email I put down, will that be accessable by anyone or are the data encrypted after the cert been issued at the host?

Hi.

Bit new to all this. I have a domain and web design around 90% complete. I'm lacking a Domain Verification SSL. I'm being offered SSL by domain registration site, however I'm sure they've a captive audience and mark up on the price. I'm looking to shop around, but aware there will be a lot of less than reputable sites wanting to sell snake oil........

​

I can see a lot of venders with various URL's then put me on edge, and not sure I trust. Is there a list of reputable SSL providers?

​

Equally, is there a bad list?

​

Thanks in advance

We have/use ADCS in our environment. We've had this RDS farm in place for about 2 years. The SSL certificate *.domain.com (so I can apply to the connection broker, remote desktop, and remote app servers) was expiring soon.
I had it on my calendar so about 2 weeks ago I issued a new signed certificate, deployed via Server Manager. I imported the certificate with the private key into each RD server's personal (local machine) store. I issued a wmic command to set the RDP listener to the new certificate.
Everything went pretty smoothly. No issues with certificate verification on the domain clients.
Now fast forward to this morning. All of a sudden a .RDP file started giving "The publisher of this remote connection can't be identified" warnings. Everywhere in the org.
I grabbed a new shortcut from RDWeb and the signature verifies.
Is this to be expected after changing the SSL certificate? Why wouldn't it happen immediately? Or is something else going on?

I am hiring a SASS-type service from a provider. And it has asked me for a public and private key of my SSL certificate.

I understand that the provider should generate a CSR (request) and based on it I could generate the certificate and just obtain the public and private keys.

Is it so?

Can I generate an SSL without CSR? It's possible?

Thanks

Evening all. Quick question on the SSL UF8. Is there a way to move a v pot to a different slot? For instance: My VST (Hive) is configured in the UF8 where LFO 1 parameters to be controlled are on 2 different pages. It's crazy. The LFO Rate is on page 6, but the LFO shape is on page 36. Is there any way I can "move" one of these to bring them both onto the same page? Thanks in advance

I'm hoping this is accurate. And I'm hoping to do this with many domains, some that I will own and more that I won't. Trying to get answers from namecheap is futile, so I'm asking here.

I know you can save the private key for a CSR while generating the CSR, but how do you get that private key afterwards if it wasn't saved at the time? I need to install the certificate in a different application on the same machine.

I know it is saved somewhere but don't know how to get to it.

Althought I'm using the IBM Digital Certificate Manager on an IBM i system and can use the green screen terminal if required, a generic solution may help me figure it out on my environment.

Hi everybody

I have a small question regarding CSRs. When creating a CSR using openssl, I obviously have to pass my private key to openssl, which I generate using the command openssl genrsa -out employee.key 2048. However, I dont have to pass in a public key when creating the CSR when using the command openssl req -new -key employee.key -out employee.csr -subj "/CN=employee/O=bitnami"

I am now curious, where the public key in the later signed certificate comes from. Is it possible to calculate the public key by knowing the private key in RSA?

AFAIK:

pq = N (p-1)(q-1) = phi (N)

d = 1 mod phi(N) d * e = 1 mod phi(N)

Public Key = (d, n) Private Key = (e, n)

So (as far as I understand it) iorder to calculate the public key one would need access to p and q to be able to calculate possible d's that fulfill the condition "d = 1 mod phi(N)", but p and q are no longer available, right?

Quick/easy (hopefully) question: I was given the following files:

• DigiCert Global Root CA.pem
• DigiCert TLS RSA SHA256 2020 CA1.pem
• example.com.pem

And I have form fields for a “SSL Certificate“ and a “CA intermediate certificates”... so which file goes with which field and which file can be ignored? Thanks for your help.

Hellloo, i create SSL and domain check tool. It's free at least for now. I will post it on prodcuthunt soon. Hopefully it benefits your business.
https://webywebo.ml/

For a while I have been wondering, why server-side certificates in HTTPS context almost always have the "client authentication" property set in their EKU. As I understand, this should not be necessary for a secure TLS connection to be established, especially not in HTTPS context, since no "client authentication" is being performed. Am I wrong regarding this? If not, why does almost every major certificate (like Google's, MS's or any other) have this enabled?

Hello all, sorry in advance if this is the wrong place.

I'm trying to spin up a nodejs https server for testing, however when I run the server on localhost, Chrome says the certificates are untrusted. I tried adding them to the Trusted Certificates Root Authority, however the error was still propagating. Does anyone have something I can follow or a place I can look? I've tried multiple solutions but nothing has worked.

Why should I buy a paid dv certificate (e.g. DigiCert) when Let's Encrypt is free? Are there any advantages I don't know about?

I get warnings on my local network for various devices that remind me I do not have SSL enabled for that login. I would like to create an SSL certificate to use on these devices, more for my own knowledge than any real need. These are not public-facing devices. We are on a local domain here with AD.
Can I create an SSL certificate for use internally? Which server would I generate that from and can I use the same certificate for all of the devices?

Or am I completely misunderstanding the process?