Haha, another one of those “should’ve known it was this easy” in the books! This article explains how to include the whole certificate chain (so your “user certificate” with all the “intermediary certificates” and optionally, but not as recommended, the root certificate) in your PEM-formatted certificate. Because sometimes you just…Continue reading How to include the whole certificate chain in your .cer, .crt or .pem certificate file?
Every now and then, you run into a situation where you might need an SSL (or TLS, as they nowadays usually actually are) certificate. You could always generate a self-signed one – but that won’t be trusted by anyone, so that’s no bueno. You could also order one online, even…Continue reading How to export the SSL (or TLS) certificate from a website using PowerShell?
A while back I got a request to change the default certificate for an AKS cluster. A customer didn’t like the “Kubernetes Fake Certificate” that’s shown when no other matching certificates can be found, and they wanted it changed. So yours truly started googling, and as a result, this article…Continue reading How to replace the default fake “ACME” certificate for Kubernetes/AKS?
This article explains another small but significant gotcha you “just need to know” when working with certificates and certification authorities, and you – just like me – are for some reason still using Windows as your workhorse. I’ll go through how to export the private key that has been stored…Continue reading How to export the private key from your Certificate Signing Request on Windows?
This post explains how to verify a private key (possibly a .key file) that you somehow got your hands on, that matches a certificate file (.cer) you also somehow are in possession of. I have no idea where I got mine, but I had to figure out how to make…Continue reading Using openssl to verify a certificate matches a private key
Recently, I ran into a problem that I definitely caused myself. I had a certificate, that was created to authenticate an app against Azure AD. The encryption key for the .pfx file was, however, lost. I could just create a new certificate, configure the app service to use that, and…Continue reading How to recover the private key of a (.pfx) certificate?