The default path where certificates are looked up might be different on each platform. You can lookup your system configuration using the following command: $ openssl version -d OPENSSLDIR: “/etc/pki/tls”
The important missing part of the answer mentioning signtool is: Yes, with the well known signtool.exe you can also find out, if a file is signed. No need to download another tool! E.g. with the simple line: signtool verify /pa myfile.exe if %ERRORLEVEL% GEQ 1 echo This file is not signed. (For verbose output, add … Read more
.p12 and .pfx are both PKCS #12 files. Am I missing something? Have you tried renaming the exported .pfx file to have a .p12 extension?
SAML responses come with a signature and a public key for that signature. You can use the public key to verify that the content of the SAML response matches the key – in other words – that response definitely came from someone who has the matching private key to the public key in the message, … Read more
Disclosure: I work for CISPL, Co. which develops Signer.Digital Browser Extension Browser Extension may be used to Enroll Certificate (Generate CSR) and Download Certificate in Windows Certificate Store or Smartcard or USB Token from modern browsers. Browser extension provides JavaScript API which in turn talks to host application running on local machine to do the … Read more
If you timestamp your code while the certificate is valid the effect is that your expired certificates are good. From Thawte Code Signing Certificate FAQs: How long can I use a Code Signing Certificate for? Code Signing Certificates are valid for 1 or 2 years depending on which life cycle you choose when you purchase … Read more
There is no problem doing this unless you are on an enterprise account. Distribution certificates expire anyway, so eventually it will happen that you need a new one. Go ahead and delete away. You can also find this question asked, answered, and asked again many times over on the Apple Dev forums (e.g. here’s one), … Read more
openssl pkcs12 -inkey bob_key.pem -in bob_cert.cert -export -out bob_pfx.pfx