What is the media match certificate?

started getting a warning this morning... have no idea where it came from

Well and FWIW, I can duplicate almost the exact error and from a similar same certificate chain, and on a different web site.
Based on the certificate chain and on a command-line check, it definitely appears that this web site is serving up a certificate for another domain.  
I'd generally suggest cancelling these connections, and not accepting a bogus cert, and — if you need access to the site — contacting the site adminstrator. 
It definitely looks like Safari certificate security got tightened with the most recent updates.
The cryptic command line version of the above looks like this:
$ openssl s_client -connect shareaholic.com:443
CONNECTED(00000003)
depth=1 /C=US/O=DigiCert Inc/CN=DigiCert Secure Server CA
verify error:num=20:unable to get local issuer certificate
verify return:0
Certificate chain
0 s:/C=US/ST=California/L=San Francisco/O=OpenDNS, Inc./CN=*.opendns.com
   i:/C=US/O=DigiCert Inc/CN=DigiCert Secure Server CA
1 s:/C=US/O=DigiCert Inc/CN=DigiCert Secure Server CA
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
Server certificate
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
subject=/C=US/ST=California/L=San Francisco/O=OpenDNS, Inc./CN=*.opendns.com
issuer=/C=US/O=DigiCert Inc/CN=DigiCert Secure Server CA
No client certificate CA names sent
SSL handshake has read 3015 bytes and written 456 bytes
New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : AES256-SHA
    Session-ID: D8CA4E905A9077B7A15BFCD4FB72A93F7B9024C3B0B4CA49D0693B94E2074095
    Session-ID-ctx:
    Master-Key: 9B02D4263E3DFE28126D377C874967341F820FE6C63730D375DEF8D04FFADA0F0ACB95A13677183 81AC7BEFE5CB44750
    Key-Arg   : None
    Start Time: 1398679435
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
read:errno=0
$

Similar Messages

  • Working on two machines - what about the media cache ?

    I'm a long time user of FCP just getting my head around Premiere Pro CS5.5. I quite often work on the same project at work and at home. With FCP I simply duplicated the media onto another drive and just transported the project file on a flash disk - obviously rendering of effects would have to be done locally.
    Now with Premiere I notice there's the media cache which, as far as I can tell, is not necessarily anything to do with rendering and effects but related and applied to every clip.
    So my question is, will the media cache have to be built from scratch on each machine every time I move the project file ?
    If so, is there a way to avoid this so that I wont have to wait for it to build the media cache ?
    ....or on a 30 minute film with 15 hours of original media will this will this be a quick process so as not to be a problem ?
    I suppose what I'm really asking is how can I easily work on the same project in different locations ?
    Any help appreciated.

    At the moment my media cache is in my user library folder on the system drive.
    I would avoid using the system drive for media cache files.
    The best would be to have a separate, identically named drive
    (D for example) for your media cache.
    If you use an external drive for your media, make sure that
    you assign the same drive letter to this drive on both systems.
    ... and then duplicate the lot onto another drive ?
    I have never tried to wholesale copy media cache files from one
    system to another... preferring to allow Premiere to generate a
    cache for each system.
    One other thing. Suppose I capture some more media at work, can I just copy this media into the same location on my home drive and then will the media cache on my home machine just update the new media ?
    Yes.
    A good reference for disk setup can be found here:
    Generic Guideline for Disk Setup

  • C: SSD, D: HDD 5400 - works well but what with the media catch files??

    Hello there, I'd like to ask a question:
    I do not have a lot of money to spend, so I'm not really enthusiastic about buying new hardware. I just bought a new SSD - Samsung 840 Pro 128GB (C: drive) and installed beside Win7 64bit, the CS6 Premiere Pro. By that I have a WD 1,5TB 5400 harddisk (D: drive). I know you recomend a 7200 disk, but as for the money situation, I just wanted to try it. Everything worked fine at first glance, but then I searched the internet and came to Harm Millaards discussion about the Media Catch Files - as it's no good idea to put them on the SSD disk. This was standard in preferences set to the C: SSD, so I switched them to my D: drive instead of the C:. The same I did about the Scratch disks/files (don't actually know what they are though :-/). Is this correct?
    After the change of the Media Catch files to D: the playback while editing is not quite well working anymore. Did I do they right steps and does this then mean I should buy a HDD 7200 for the media catch files and as a scratch disk (which I don't understand what it is)? Will that help, or should I do something else to have it working as it was working when these files were saved on the SSD?  
    Thanks a lot for your help, Thomas
    PS. other hardware I have:
    8GB RAM
    intel i5 2500K procesor
    Geforce 295

    The pagefile is a dedicated file created and managed by Windows. It has no relation with PR. Windows uses it as a virtual memory file to store data that don't fit in the physical memory of your system. The lower your physical memory, the more Windows uses the pagefile. It is somewhat similar to growing older and you need to remind more stuff, but you tend to forget, so you write it down.  On all systems I suggest to use a static pagefile, on that has minimum size and maximum size the same dimensions, so for instance a fixed size of 32 GB. If you do not make it static, but let Windows manage the size, as is default, you can get fragmentation of this file and it requires - on each change of size by Windows - new writes to the FAT, which reduces the lifespan of your SSD.
    Your setup is exactly what my analogy alluded to. You are right.

  • What is the option client certificate for user authentication used for?

    Hi All,
    I have to work on a FTPS - XI -SAP scenario.
    I can see an option for client certificate for user authentication when security is enabled for the FTP adapter. what exactly is this option used for?
    P.S: I went through sap help but couldnt quite understand.

    Thanks a lot Mark.
    So for a FTPS -> XI -> SAP scenario the following settings are required.
    1. I have to create a certificate in Visual Admin for the XI server , send a csr to a CA and get it signed by them, and i have to add this to the ssl_service view.
    2. I have to hand over the public key to the FTPS server & this key will be used for encryption of the file
    the above 2 steps are mandatory.
    If i choose to use the client certificate option , i have to get the client certificate from the FTPS server and add it into the TrustedCAs list. This certificate is just to imply that the client is what it claims to be.
    Will this certificate be used for encryption?
    To make it clear let me put it this way. The certificate created in the XI Server is used for encryption and also for ascertaining that the its what it claims to be.
    The clients certificate option is used only to make sure that the client is what its claiming to be & this is not used for encryption?

  • What are the foreign security certificates for?

    I see a lot of foreign security certificates stored for FireFox. What are these and can I delete them? Some are from Taiwan, China, Turkey and Spanish countries.

    That are built-in root certificates that are used to trust websites that you access via a secure (https) connection.
    You can't remove a built-in root certificate.
    You can edit the trust bits of built-in root certificates and uncheck all trust bits to prevent Firefox from using the certificate as a root certificate if you really want to, but that isn't recommended.
    *http://www.mozilla.org/projects/security/certs/policy/
    *http://www.mozilla.org/projects/security/certs/policy/MaintenancePolicy.html

  • What is the fingerprint matcher used in iPhone 5S?

    Its totally a good and gigantic which will play as a role model in the field of biometrics... But security and access based fingerprints depends on two important features, the sensor and the matcher. I am pretty satisfied reading reviews about the sensors and its capabilities but as a szduent of biometrics, I am very much interested in the matching algorithm used. Would be if someone would shed some on this?

    It helfend me tremendously to Switch off SIRI - everything Else Kept on prolonged the standby from 4-6 hrs to almost 2 days ...

  • What is the use of certificates ?

    I have a RV042 router and it generates certificates which I issue to vpn users
    But even without a certificate these users can still access the vpn, they simply igore the missing certificate
    So the only thing that secures the vpn is the password
    Is there a way to enforce certificates meaning no certificate, no access ?

    Johan,
    The purpose of the certificate is to provide a warning to the end user that they may be connecting to the wrong VPN server. If the end user has the certificate they do not see the warning which confirms that they connected to the right device. There is no way to force a certificate to be used.

  • HT1473 What is the "itunes Match" product for?

    I have lots of CDs to import to itunes library... would it be faster/easier to have itunes Match?

    No.
    Apple - iTunes - Match

  • I joined iTunes Match on my MBP and added our MBA to the same Match account. What should the iTunes Media Folder Location be for iTunes on the MBA?

    The iTunes libraries on both machines appear to be in sync, though I don't know if Home Sharing or iTunes Match is to thank for the consistency. But the iTunes Media Folder locations are different on the MBP and MBA, and I don't know if they should point to the same storage location (it's been on a drive connected to our Airport for years). I also don't know what options for Copying Files and Keeping iTunes Organized should be on the MBA. I certainly don't want the media files duplicated yet the devices sharing a cloud version.
    I hoped the MBA would act like an iOS device using iTunes Match in that music would stream unless downloaded. Then downloaded music would have to be managed (deleted from the MBA's iTunes) for space reasons at some regular intervals-- just like we now do on the iPhones and iPad. The library entry for the song would remain... just the locally stored file would be deleted and the iCloud download would change back to the download symbol.
    But if a purchase is made from the iTunes store on the MBA, the file is stored on the local MBA machine as well as the external drive because the MBP receives the song via Home Sharing and downloads the file.

    Each iTunes client will expect a discrete iTunes library location.  The iTunes Match service will allow the libraries to be automatically synchronised along with any IOS devices that are also registered for iTunes Match.
    Following making a secure backup for any given library it is possible, once Songs have been 'matched' or 'uploaded' to remove the local copies and play the Songs from the Cloud.  The behaviour on IOS devices is different, they will download each Song as it is played.
    Note:  Apple is very clear that the responsibility for maintaining music files remains with the user - so it remains essential to ensure that you have your own Songs secure backed up prior to relying on the Cloud.  Should there be an issue with the Cloud resulting in loss of Songs you will need your own secure backup.

  • I accidentally deleted my media files from iTunes and Trash when I was trying to move the files to an external hard drive. Is there a way to restore the media files from a Time Machine backup or from iTunes Match? What are the steps to do this?

    I accidentally deleted my media files from iTunes and Trash when I was trying to move the files to an external hard drive. Is there a way to restore the media files from a Time Machine backup or from iTunes Match? What are the steps to do this?

    If you have been backing up on Timemachine.
    All you need to do is enter time machine... Then the rest is obvious.
    Find the iTunes folder and hit 'Restor'.
    If not the only way to get all your iTunes music back is to enter iTunes Store.
    On the right hand side you should see 'Purchased'.
    Click 'purchased' and there you have it.

  • I opened a file on my desktop that I don't remember putting there.  It turned out to be a keychain certificate from a client of ours.  Does this mean that they were spying on me?  What is the deal with that?  Any ideas?

    I opened a file on my desktop that I don't remember putting there. We use many photos and I thought it was a photo file I was looking for. It turned out to be a keychain certificate from a client of ours.  Does this mean that they were spying on me?  What is the deal with that?  Any ideas?

    Interesting tid bit.  I created an AAC of the original file, deleted the original MP3 from my library and also deleted the Clean matched track from the icloud.
    Result is that it matched with the explicit version of Mrs. Officer this time.
    What I am curious about is which songs this is happening for. I've went thru a few batched of about 500 songs at a time and redownloaded in 256k for many tracks. Sadly we don't have people to bring this to our attention and I have so much music that it's impossible to go thru every song to make sure I am getting the right version.

  • How do you get the Event folder date to match the media dates in FCPX

    Modifying the clip date/time with the Modify command works fine ... but the Event itself still has the date the event was created, not the date of the media that it contains.
    If tried using Touch on the Event folder but FCPX ignores it.
    Any ideas on how to get the Event folder date to match the media dates (or set to any other date desired) so that Events sorted by date show the actual dates of the media that they contain?
    Thanks
    Jonathan

    Here is the texture I've been manipulating  all afternoon to try and achieve the looks i want.
    and when I put this texture over the top of other images and select Multiply, and adjusted the opacity, this is what i get....
    Now this kinda works?? but it still looks not as good on an asian person.
    Thanks by the way to everyone for all the tips, I really really appriciate it   and more suggestions for improvments are welcome!

  • In iTunes I'm having problems changing the "Media Kind" with a number of playlists in the OPTIONS menu from "music" to "audiobook". After going through the steps, the next time I check the items have reverted back to "music". What step am I missing?

    In iTunes I'm having problems changing the "Media Kind" in the OPTIONS menu from "Music" to "Audiobook". After going through the steps, the next time I check, the items have reverted back to "Music". What must I do to save it as an "Audiobook"?

    After more digging in the Support section here and some Google work, I turned off iTunes Match and lo and behold!  I can change the media kind to Audiobook!  So, it looks like iTunes Match locked the files up somehow and for some reason.
    I went into iTunes Store > iTunes Match > "No, Thanks" to disable it on the local PC.

  • What does IO Exception "Server Certificate subjectDN CommonName received does not match Server hostname" mean?

    While trying to establish a SSL Link to a URL Connection, I got an IO
    Exception "Server Certificate subjectDN CommonName received does not match
    Server hostname" on the destConn.getOutputStream().
    What does this mean? And how do I fix it?
    System.setProperty("https.proxyHost", "xxxx");
    System.setProperty("https.proxyPort", "0000");
    System.setProperty("java.protocol.handler.pkgs",
    "com.sun.net.ssl.internal.www.protocol");
    URL destURL = new URL("URLaddress");
    URLConnection destConn = destURL.openConnection();
    ((java.net.HttpURLConnection)destConn).setRequestMethod("POST");
    destConn.setDoInput(true);
    destConn.setDoOutput(true);
    URLin = new PrintWriter( new BufferedWriter(
    new
    OutputStreamWriter(destConn.getOutputStream())));

    Hi,
    I was wondering if there was a solution for this. I am using the certficates and
    keys that came with the installation of 6.1. Do I have to regenerate them in order
    to use them in weblogic. I am getting this same error when I try to run the SSLClient
    class in the examples.security.sslclient.
    Jerry <[email protected]> wrote:
    Hi Terry,
    The server-side certificate has a DN (distinguished name) embedded in it.
    This usually looks like a full hostname -- something like www.mycomputer.com
    When you make the reaquest
    URL destURL = new URL("URLaddress");
    The string for "URLaddress" should match the DN of the certificate on the
    server that you are requesting a connection to. It needs to match because
    there is a compare of the DN in the cert, to the requested host.
    In other words, if you are connecting to www.mycomputer.com, then the server
    running on www.mycomputer.com should have a certificate with the DN
    www.mycomputer.com
    Then, when the match of the certificate DN to the requested host is done,
    it
    will succeed.
    Right now, this match appears to be failing for you.
    Cheers
    Joe Jerry
    Terry Treadwell wrote:
    While trying to establish a SSL Link to a URL Connection, I got an IO
    Exception "Server Certificate subjectDN CommonName received does not match
    Server hostname" on the destConn.getOutputStream().
    What does this mean? And how do I fix it?
    System.setProperty("https.proxyHost", "xxxx");
    System.setProperty("https.proxyPort", "0000");
    System.setProperty("java.protocol.handler.pkgs",
    "com.sun.net.ssl.internal.www.protocol");
    URL destURL = new URL("URLaddress");
    URLConnection destConn = destURL.openConnection();
    ((java.net.HttpURLConnection)destConn).setRequestMethod("POST");
    destConn.setDoInput(true);
    destConn.setDoOutput(true);
    URLin = new PrintWriter( new BufferedWriter(
    new
    OutputStreamWriter(destConn.getOutputStream())));

  • OSD: What is the difference booting into winpe from pxe/media and booting in winpe from OS/Vista?

    Hi,
    We have a task sequence issue. Please see
    http://social.technet.microsoft.com/Forums/en-US/56d783e3-214d-4027-84c1-c03cdf2013f1/osd-convert-boot-to-logical-path-failed-0x80070490-retrying-after-attempt-29-it-fails-and-says?forum=configmanagersecurity
    for more info. What I would like to know: what is the difference/is there a difference between:
    A.booting in PXE/bootable media to WINPE
    B.booting from OS (Vista) into WINPE => will this load the x86 boot image (it doesn’t look like it, I CAN see the image loaded ….wim is exactly the same when loaded from OS)
    The reason why I ask this: see link above: loading TS from PXE/media works fine, when choosing the exact same TS from WITHIN OS (Vista, 32 bit) the TS fails.
    Note: we set the ts step format system disk to NOT run if _SMSTSMediaType is OEMMedia (set in order to not format if prestaged media). So if for some reason this variable would be set booting TS from OS?
    Please advise.
    J.
    Jan Hoedt

    What I would like to know: what is the difference/is there a difference between:
    There is none.
    Starting a TS using Software Center will download the boot image that's assigned to the task sequence.
    PXE (depending on how many boot images are available on the PXE-enabled DP): the TS will use the boot image that's assigned to the task sequence (it will download that one and reboot into PE for a second time if the first boot image (see smspxe.log) does not
    match).
    P.S. Please don't post another question for the exact same topic. Thanks.
    Torsten Meringer | http://www.mssccmfaq.de

Maybe you are looking for

  • How do I delete an old skype account

    How do I delete an old account I am not using anymore, thanks for your help in  this matter. Mark Erwin

  • HELP! problem with laptop

    I have a 3-year-old compaq presario V3791 laptop. Lately, it has been rather sick. I am not sure if it's caused by windows vista, or it's aging a little. Here is the thing. Ocassionally, it would freeze. When it freezes, I wouldn't be able to move th

  • Acrobat32.dll crash when open pdf with explorer

    Hallo to everyone. Everytime that i prove to open a pdf with explorer 8 it crashes. Error is cause by acrobat32.dll. Anyone hlp me?

  • Can't rename a new reminder list.

    Followed instructions but when I press return, it returns to "untitled". MacBook Pro OS 10.7.5 iCal 5.03

  • Pixel by pixel image manipulation- java

    Hey guys, i need to write a bit of code that looks at 3 images, assesses which pixels in ALL 3 are grey, and then redraws a new image consisting of the old ones, but grey only showing where all 3 have grey. The inputs are mays with grey overlays, so