Azure offers this great offering that is in my mind underutilized still – managed certificates that they’ll renew for you. While the offering is called Azure App Service Certificates, they are not only limited to being used in App Services. Their biggest strengths lie in their ease of use, automation,…Continue reading How to export an App Service Certificate from Azure?
Alright, so let’s make this a quick one. I’ve had to google this multiple times, since I have to do this a couple of times per year, which is NOT often enough for me to remember it by heart, or even for my Terminal to remember the commands properly. So,…Continue reading How to export a certificate and a private key from a .pfx using OpenSSL?
Haha, another one of those “should’ve known it was this easy” in the books! This article explains how to include the whole certificate chain (so your “user certificate” with all the “intermediary certificates” and optionally, but not as recommended, the root certificate) in your PEM-formatted certificate. Because sometimes you just…Continue reading How to include the whole certificate chain in your .cer, .crt or .pem certificate file?
Every now and then, you run into a situation where you might need an SSL (or TLS, as they nowadays usually actually are) certificate. You could always generate a self-signed one – but that won’t be trusted by anyone, so that’s no bueno. You could also order one online, even…Continue reading How to export the SSL (or TLS) certificate from a website using PowerShell?
A while back I got a request to change the default certificate for an AKS cluster. A customer didn’t like the “Kubernetes Fake Certificate” that’s shown when no other matching certificates can be found, and they wanted it changed. So yours truly started googling, and as a result, this article…Continue reading How to replace the default fake “ACME” certificate for Kubernetes/AKS?
This article explains another small but significant gotcha you “just need to know” when working with certificates and certification authorities, and you – just like me – are for some reason still using Windows as your workhorse. I’ll go through how to export the private key that has been stored…Continue reading How to export the private key from your Certificate Signing Request on Windows?
This post explains how to verify a private key (possibly a .key file) that you somehow got your hands on, that matches a certificate file (.cer) you also somehow are in possession of. I have no idea where I got mine, but I had to figure out how to make…Continue reading Using openssl to verify a certificate matches a private key
Recently, I ran into a problem that I definitely caused myself. I had a certificate, that was created to authenticate an app against Azure AD. The encryption key for the .pfx file was, however, lost. I could just create a new certificate, configure the app service to use that, and…Continue reading How to recover the private key of a (.pfx) certificate?