Timestamped document with expired certificate - not validating

Hi,
I have a document that was timestamped and certified on 2010/11/23 15:32:16 -03'00'. The timestamp certificate is still valid, but the certifier's certificate expired on 2010/12/11 07:00:00 -03'00'.
The Reader can't validate this certificate, eventhough the Security configuration says that it should use the "secure time" and accept expired timestamps.
In "Signature Properties" it says:
The signer's identity is unknown because it has expired or is not yet valid.
In "Certificate Viewer" it says:
The selected certificate has errors: Not time valid
Shouldn't the validation use the timestamp as a source for time validation?
Thanks!!
-RCT.

Hi Melvin,
First check to see if the certificate is in the store
PowerShell: Get-ChildItem cert:\LocalMachine\My\ to list the certs in the store
Screenshot from my desktop
Cheers,
-Ivan
-Ivan

Similar Messages

  • N79 NAM RM350 server certificate not valid "firmwa...

    i have updated my phone frm v11 to v20 but nw wen i go to devices update to update to latest firmware
    it says " SERVER CERTIFICATE NOT VALID"
    i want to update to v30 plzz help anyone
    reguards
    zain
    Message Edited by kaskay on 21-Aug-2009 10:42 AM

    i am not sure that v30 had been released for nam devices, if it has have you tried NSU ? 
     http://europe.nokia.com/get-support-and-software/download-software/device-software-update
    You know what I love about you the most, the fact that you are not me ! In love with technology and all that it can offer. Join me in discovery....

  • This Certificate not valid for the selected purpose

    I have installed on my Windows 7 (64 bit Professional w/SP1)
    a Self-Signed CA (IDS_MstrCert)  that has been accepted by the system certificate "store".  via mmc & certmgr
    I generated this CA on my Redhat Linux 7 server using the openssl utilities. 
    It shows: This certificate is intended for the following purpose(s):
    All issuance policies
    All application policies
    It is enabled for ALL purposes (However I did not generate with ALL purpose set)
    Under Certification Path:
    Certificate Status: This Certificate is OK
    I have also installed a Client Certificate (winxclient) (also generated by my Redhat Linux 7 server)
    That has been "signed" by my CA (IDS_MstrCert)
    I added it successfully to the system certificate "store" via mmc & certmgr.
    However when I open the certificate I see the following message: This Certificate not valid for the selected purpose
    When I view the Certificate path I see the following:
    IDS_CA                          (friendly name for the CA)
        |-----> VPNIKEv2cli     (friendly name for the client certificate)   
        Certificate Status: This certificate is OK
    In the Intended Purposes field: ServerAuthentication, ClientAuthentication
    How do I resolve this problem ?   This Certificate not valid for the selected purpose
    When I attempt my vpn/ikev2 connection (using machine certificates) I get the 13806 error.
    Best Regards
    Guy Rich

    Hi,
    In my opinion, this is not Windows system problem. You need to make troubleshoot with the Certificate.
    I made a research with this error message, the link below might be helpful:
    http://support.persits.com/show.asp?code=PS030304105
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Anywhere Access - CERTIFICATE NOT VALID OR PASSWORD INCORRECT

    Setting up Server Essentials 2012.  During the "Anywhere Access" wizard I followed a link to get an SSL for the company's URL that is directed at the server.  I chose one of the two options that was presented during setup and purchased a "SSL
    Cert for SSL Certificate - Comodo Essential" from Enom Inc.
    Once I got the certificate in email, and continued the wizard I get the following error:
    CERTIFICATE NOT VALID OR PASSWORD INCORRECT
    Either the certificate is not supported or the password is incorrect.  Please try again.
    I've tried everything I can to get it in the wizard to no avail.  If I manually push it into the certificate manager it accepts it there properly but the Essentials Dashboard still thinks it's no installed so I believe I have to complete this wizard.  I
    cannot find ANY support on this currently on the internet on searching.  Anyone able to help?
    (By chance the server is also unable to install two critical updates.  I am taking things one at a time in the order they come right now though.)
    KevenD.

    The PFX file is only allowed in the wizard if you are importing a previously created SSL.  Here's the steps that got me to the dead end I'm in:
    Step 1 - Setup process - Set up Anywhere Access
    Step 2 – It asks what domain name we have pointing to the server, configures the firewall routing services etc and then gets to the SSL portion which I will depict below.
    Step 3 – Domain Set up in the Anywhere Access wizard: Entering name of our domain to use.
    Step 4 – SSL Certificate set up.  I select “I want to purchase..”, clicked on the two links provided, decided on one from eNomCentral and made the purchase.
    Step 5 – Cert request is issued and a link to GoDaddy and eNomCentral are given.  It was eNomCentral which sold me on the Comodo SSL.
    Step 6 – Park and wait. 
    The next time I go into the wizard to continue (once the certificate was issued) I get the errors I earlier depicted from the wizard stating:
    CERTIFICATE NOT VALID OR PASSWORD INCORRECT
    Either the certificate is not supported or the password is incorrect.  Please try again.
    I get two methods of importing it, copy/paste or upload.  I've tried both methods and each generates a different error.
    KevenD.

  • SSL certificate not valid

    Just started receiving 'server's security certificate not valid for palm.imap.mail.yahoo.com' error early this morning. I have a (Sprint) Palm Pre (P100EWW) on version 1.4.1.1. How do I correct?

    I have tried removing palm and still cannot get it to work!   any other ideas?   I did notice it changed the port to 995 when I first was entering my email info.   It used to be set to 993?
    Also, what do you put in the username....  is that the beginning part of the yahoo id prior to @yahoo.com?

  • Adobe open encrypted PDF with expired certificate

    Hi,
    I encrypt and sign documents with certificates. To do this I use a script and the little program "jsignpdf". The certificates are stored in windows certificate store on the client.This works fine!
    The problem is that Adobe Reader (10/11) open the encrypted PDF also when the certificate is expired. I don't find any option to change that.
    Has anbody an idea to solve my problem?
    The clients have windows vista and Adobe Reader 10. But  Adobe Reader11 have the same problem.
    Thanks
    Steven

    If you are signing with Acrobat, you have the choice of whether to include revocation information. See Establish long-term signature validation in http://helpx.adobe.com/acrobat/using/validating-digital-signatures.html.

  • URGENT!! ERROR WITH EXPIRED CERTIFICATE USING JDK 1.4.2.05

    Hi,
    I have created a client/server application with SSL and have found the following problem.
    I have made these two tests:
    1) jdk 1.4.2.03 --> the certificate is expired, I obtain this exception "No trusted certificate found". it's ok
    2) jdk 1.4.2.06 --> the certificate is expired, no error occurs. WHY?????
    Someone can help me?
    Gianna

    The problem is not the expired certificate! I know that it is expired, but I don't understand why using jdk 1.4.2.05 this certificate is not recognize invalid.
    With this jdk the channel is created. Using jdk 1.4.2.03 instead the certificate was recognized expired and the channel is not created between client and server.
    For me the correct behavior has with the old version of the JDK and not the new.
    WHY?????

  • SSLSocket created with expired certificates

    The tests documented here were performed using Sun JSSE 1.0.2.
    Server
    I have installed TOMCAT and configured it for SSL by following the instructions detailed in the following link:
    http://jakarta.apache.org/tomcat/tomcat-3.3-doc/tomcat-ssl-howto.html
    NB: The system date was set back by more than three months to ensure that the certificate contained in the store is now expired.
    Client
    I have created a simple java client test program that attempts to create an SSLSocket connecting to the TOMCAT SSL port.
    The code is listed below:
    SSLSocketFactory factory = (SSLSocketFactory)SSLSocketFactory.getDefault();
    SSLSocket socket = (SSLSocket)factory.createSocket("127.0.0.1", 8443);
    System.out.println("Establishing SSL socket connection");
    * register a callback for handshaking completion event
    socket.addHandshakeCompletedListener(
    new HandshakeCompletedListener() {
    public void handshakeCompleted(HandshakeCompletedEvent event) {
         System.out.println("Handshake finished!");
         System.out.println("\t CipherSuite:" + event.getCipherSuite());
         System.out.println("\t SessionId " + event.getSession());
         System.out.println("\t PeerHost " + event.getSession().getPeerHost());
    socket.startHandshake();
    socket.close();
    System.out.println("Established SSL socket connection");
    Tests
    The test program was run as follows (NB: With the system date set correctly to the current date):
    Test 1
    With no parameters passed.
    Result: This produces an untrusted server cert chain error. This happens because the truststore information has not been supplied. This result is as expected.
    Test 2
    With the following parameters:
    -Djavax.net.debug=ssl:keymanager
    -Djavax.net.ssl.trustStore= set to the location of a truststore file containing the same EXPIRED server certificate mentioned above
    Result: This does not produce any errors and the socket is created successfully and the handshake completes successfully. As the truststore at the client (i.e. the java test program) and the keystore at the server (i.e. SSL enabled TOMCAT) both contain the same EXPIRED certificate it was expected this would result in a failure to create the SSLSocket. The debug trace that is output does indeed show that the certificate has expired yet somehow the connection is still being made.
    It should be noted that test 2 has been run on numerous occasions in the past and has previously given the expected result. That is to say, a failure to create the SSLSocket with an error message stating that the certificate had expired. Nothing appears to have changed in the environment in which these tests are being run that should cause them to start to fail now.
    Has anyone seen this strange behaviour before?

    There are fellow sufferers...
    http://forum.java.sun.com/thread.jspa?threadID=560690&tstart=0
    I too noticed this.
    I've a simple 20 line SSL server and SSL client and can reproduce this behaviour.
    ie. trying with an good cert, it exchanges data, with a bad cert, I get an exception, and with
    an expired cert, it exchanges data when I expect this last one to fail.
    I dont know what the solution is but if I were to hazard a guess, I'd say maybe I need
    to subclass the TrustManager? or maybe set some policy somewhere.
    In the meantime, I've just invalidated it manually.
    ie. on startup or whenever appropriate, I do the following...
    KeyStore keystore = null;
    // Load the keystore in the user's home directory
    FileInputStream is = new FileInputStream(filename);
    keystore = KeyStore.getInstance(KeyStore.getDefaultType());
    keystore.load(is, password.toCharArray());
    is.close();
    for (Enumeration ea = keystore.aliases(); ea.hasMoreElements();) {
    String alias = (String) ea.nextElement();
    // Get certificate
    java.security.cert.X509Certificate cert =
    (java.security.cert.X509Certificate) keystore.getCertificate(alias);
    try {
    cert.checkValidity();
    } catch (java.security.cert.CertificateException e) {
    System.out.println( "Invalid Certificate for " + alias );
    keystore.deleteEntry(alias);
    ie. I remove the offending cert from the truststore...
    This is a stop-gap measure till I figure out what to do instead.
    Hope this helps...
    Chai

  • Page document with audio file not sent by email

    Hello and blessed Christmas to everybody.
    Here is my problem.
    I created a pages documents with images and an audio file from iTunes inside.
    Sharing it by Mail, (and converting it in PDF so that anybody without pages be able to open it) I see that the audio file is not present or not playing inside my mail.
    Is this because of the conversion in PDF?
    But I'm afraid of PC user not being able to see it if I let it in Pages.
    Thanks for your tips.
    Cathy

    Of course! I must have been inattentive.      AsI don't have Adobe acrobat pro I sent everything in word and pages.
    Thanks

  • Certificate not valid

    Hi
    I have a customer which is using Reader 7.0 Version 7.0.9 english.
    We have added the root certificate to his reader and configured that its valid for "Signatures and as trusted root" and "certified documents" in the certificate details I can see that the selected path is valid.
    Our problem is, that in our signed invoice the signature is still shown an unknown. I have built up the configuration in our office and here it works. Do you have any idea what can be the problem?
    Regards
    Thomas

    hard to tell, do you see a difference when you disable/enable revocation checking in the Reader's security prefs? (advanced)

  • Share Power BI Document with someone else not in Power BI?

    Can I share a Power BI document with another user/anonymous user that is not in Power BI and have it render correctly?
    In my testing, the sharing link in Power BI requires a login. The sharing link in the document library opens the document but does not render the Power View sheet.
    Is this the expected behavior or am I missing something?
    Thanks!

    there is limitation on the file size for anonymous access. It's 10 MB if I remember correctly.
    Could you please try a small workbook?

  • DomU hangs with 'xenstoreprovider.so not valid' error

    I have an OL5.8 system image template, with LVM type that I am trying to deploy in OVM 3.0.3. It would hang on boot up, with the console message stuck at the line below.
    $ xm create -c vm.cfg
    drivers/rtc/hctosys.c: unable to open rtc device (rtc0)
    Initalizing network drop monitor service
    Freeing unused kernel memory: 1708k freed
    Write protecting the kernel read-only data: 6656k
    ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
    uhci_hcd: USB Universal Host Controller Interface driver
    blkfront: xvda: barriers enabled (tag)
    xvda: xvda1 xvda2
    blkfront: xvdb: barriers enabled (tag)
    xvdb: xvdb1
    blkfront: xvdc: barriers enabled (tag)
    xvdc: xvdc1
    kjournald starting. Commit interval 5 seconds
    EXT3-fs: mounted filesystem with ordered data mode.
    SELinux: Disabled at runtime.
    type=1404 audit(1336130737.122:2): selinux=0 auid=4294967295 ses=4294967295
    (hang here)
    I mounted the image and examined it, and found that /var/log/messages is filled with the following lines.
    May 4 04:29:09 localhost OVMAPI: Provider /usr/libexec/ovmapi/x86_64/xenstoreprovider.so not valid (Constructor missing) - Ignoring provider
    May 4 04:29:14 localhost vmapi: Provider /usr/libexec/ovmapi/x86_64/xenstoreprovider.so not valid (Constructor missing) - Ignoring provider
    May 4 04:29:14 localhost OVMAPI: Provider /usr/libexec/ovmapi/x86_64/xenstoreprovider.so not valid (Constructor missing) - Ignoring provider
    May 4 04:29:19 localhost vmapi: Provider /usr/libexec/ovmapi/x86_64/xenstoreprovider.so not valid (Constructor missing) - Ignoring provider
    May 4 04:29:19 localhost OVMAPI: Provider /usr/libexec/ovmapi/x86_64/xenstoreprovider.so not valid (Constructor missing) - Ignoring provider
    Any idea what is going on? Its kernel is vmlinuz-2.6.32-100.34.1.el5uek.
    Thanks for any help.

    This appears to have been caused by lack of ovmapi and ovmapi-devel RPMs on the image.

  • Safari 5.1.7 "Invalid URL" & "certificate not valid"-Google won't even work! HELP

    I have the newest version of Safari and as far as I know everything else on my computer is up-to-date. I checked for a software update and it claims everything is up to date. This has been happening for a little while and started with the invalid site certificates. I never was sure if I should click "continue" or "cancel". I first was clicking cancel and continue trying to see what changed. Cancel would keep me on the same page (I think, if I remember correctly) and continue would usually take me to the desired site. But recently this problem with site certificates has been happening more and more on different sites (I believe it began on facebook; and on sites I use daily). I just tried to google the problem and of course a web page of "Invalid URL" comes up. So I tried to see if it would work on a different browser (Firefox and Chrome), I had the same problem on those two, too, which makes me think a Google problem. However, this happens on other sites, such as facebook, and the site doesn't work for a little while (usually a period of X minutes). Even when I completely quit Safari, this doesnt change.
    I reset Safari tonight, and I've cleared the cookies, and I've emptied the cache, but nothing seems to be working. Im starting to wonder if there is a way to downgrade just one version of Safari to see if maybe this is a bug on this version of Safari, but I have no idea if that's possible or if it'll work.
    Please help!

    I hear ya...irritating as ****.  It's on all the other I've followed th other threads and tried the fixes, so far nothing.  Hit me up if you ever find a workable solution other than going back to a PC.  :s You'd think Apple would've fixed this by now, cause they're supposedly very very very very good.

  • SSL certificate not valid in Safari, but webservice  works with Chrome and Firefox

    As a MD, I'm used to check blood results online on the service
    https://inet.zentral-labor.ch/c16/kunweb.dll - this is the online-portal of my laboratory medica in Zurich. http://www.medica.ch
    Access to the loginscreen is public ;-) and should look like this (Screenshot from Firefox)
    I've setup a new workstation 3 weeks ago (iMac with OS Lion 10.7.4), and this webservice service works fine till yesterday. Now, Safari is every time we try to reach the service telling us, that this service needs a certificate, we can choose only a default apple certificate
    and then, the error is:
    This Site needs a valid SSL-Client-Certificate... (Screenshot below)
    What's wrong with Safari? With Chrome and Firefox, the webservice works fie without any problems.
    Thanks for an advice
    MD Patric Eberle

    As a MD, I'm used to check blood results online on the service
    https://inet.zentral-labor.ch/c16/kunweb.dll - this is the online-portal of my laboratory medica in Zurich. http://www.medica.ch
    Access to the loginscreen is public ;-) and should look like this (Screenshot from Firefox)
    I've setup a new workstation 3 weeks ago (iMac with OS Lion 10.7.4), and this webservice service works fine till yesterday. Now, Safari is every time we try to reach the service telling us, that this service needs a certificate, we can choose only a default apple certificate
    and then, the error is:
    This Site needs a valid SSL-Client-Certificate... (Screenshot below)
    What's wrong with Safari? With Chrome and Firefox, the webservice works fie without any problems.
    Thanks for an advice
    MD Patric Eberle

  • Virus and Certificate not valid??

    Hi,
    I was having issues with icloud and had to download icloud onto my laptop to retrieve my photos and music. I did this, got my photos and then started getting this message whenever I try to get onto any website except my homepage...
    There is a problem with this websites security certificate
    The security certificate presented by this website has expired or is not yet valid
    Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server
    We recommend you close this webpage and do not attempt to continue to this webpage.
    Then when I log in to iTunes I get this message:
    iTunes can't verify the identity of the server 'init.itunes.apple.com'.
    The certificate for this server has expired. You might be connecting to a server pretending to be 'init.itunes.apple.com', which could put your confidential information at risk. Would you like to connect to the server anyway?
    I have system restored twice
    Uninstalled iCloud and uninstalled and reinstalled iTunes.
    I don't want to lose my photos and as I have lost photos from icloud before and had apple technicians search their servers to no avail I am worried I will lose any I managed to salvage from facebook and taken afterwards.
    I have an ipad also which isn't and hasn't been switched on whilst all this has been happening.
    Noticed my phone mentioned secure sites when I was purchasing on the internet yesterday from my iphone.
    I am not even slightly technical so any tech jargon used will go over my head but I really need a step by step guide of how to get rid of this and quickly... Please???

    I would definitely start with the following:
    make sure that your anti-virus software is fully up to date and run a complete system scan
    download Malwarebytes (the free version will be fine) and run a complete system scan - this can sometimes detect malware that standard A-V products don't find or quarantine
    There may be other reasons for the messages you're seeing but I would suggest that verifying that your machine is "clean" should be the immediate priority.

Maybe you are looking for