Forum Discussion

2 Replies

  • StephanManthey's avatar
    StephanManthey
    Icon for Nacreous rankNacreous
    Sep 30, 2013

    To trust a certificate it needs to fulfill the following criterias:

     

    1. requested hostname needs to match the common name (CN) in the certificate
    2. the certificate needs still to be valid (not expired)
    3. the certificate needs to be signed by a trusted certificate authority (CA)

    If the certificate is self signed it might be possible to import it into your webbrowser to avoid the related error messages. But the CN and expiration date need to fit.

     

    There is an option to craft a certificate signing request (CSR), to be exported and signed by a corporate certficate authority. The signed certificate can be imported. Due to trust to your corporate CA the browser should now accept the cert (see topic 3).