Pki

TLDR: Modify an run the following command: openssl req -new -newkey rsa:4096 -nodes -keyout yourdomain.key -out yourdomain.csr -sha256 -subj "/C=US/ST=New York/L=New York/O=Your Company Name/CN=yourdomain.com" -addext "subjectAltName=DNS:yourdomain.com,DNS:yourseconddomain.com" Introduction When generating a CSR with OpenSSL, it is possible to include a Subject Alternative Name (SAN) extension, which allows you to specify additional domain…

Section 1 — Explanation of Certificate Chains: Have you ever been given a certificate (end-entity/server certificate) and wondered how you can assemble its certificate chain? Maybe you are wondering how to find its CA certificates/issuers too. A certificate chain in a short summary is a list of certificates that start with the end-entity(also called leaf or server…

Identity authenticity is a big problem that afflicts 5.32 Billion+ users across the Internet and Web. Despite its magnitude, visibility, and scope, end-user–controlled solutions remain mercurial. Addressing this problem requires a user-controlled identity authenticity solution that operates on the following premise: By its nature, self-sovereign identity (SSI), a critical basis…

In my previous article “ How to Better Understand the Internet”, we shortly mentioned the role of CAs (Certificate Authorities) and what they have to do with Digital Signatures. In this post, I would like to a bit more about the different types of CA’s and discuss further aspects, such…

You’ve probably signed a document on your laptop before. The world is changing fast and all of a sudden you find yourself signing a confidential document on your phone?! The other day I even had to sign my Job Offer digitally. How do they even know it's me? How can…

Public Key Infrastructure (PKI) is a security framework designed to manage digital certificates and public key encryption, enabling secure communication while ensuring the authenticity, confidentiality, and integrity of digital transactions. PKI consists of several components, including the Certificate Authority (CA), which issues digital certificates, the Registration Authority (RA), which verifies…

Introduction The major difficulty in Public Key Cryptography (known as PKC or Asymmetric Cryptography ) is to reliably trust the authenticity of the exchanged encryption information (public key, encryption function etc) . Since these information are typically transmitted over unsecured channels (i.e the internet) [1]. First, In order for the PKC…

this article contains a promotion Public Key Infrastructure (PKI) is a set of procedures, protocols, and technologies that securely manage digital certificates and public-private key pairs. In simple terms, PKI enables secure communication over the internet by verifying the identity of both the sender and the recipient. How does PKI works? PKI works by…

Did you ever come across a situation where a certificate issuer is not validated within a certain network perimeter but validated elsewhere on the very same browser ? If yes and you are interested to know about the same then this post may help to solve the puzzle for you. …