This is the certificate for my CA (This is a new certificate as of October 31, 2004). By adding this certificate to a mail client or browser my ssl secure web pages can be accessed without annoying warning messages. It is also a requirement to us secure POP3, IMAP and SMTP on mail.adis.ca.
There is the ca.crt file and below the ASCII version.
-----BEGIN CERTIFICATE----- MIIC3TCCAkYCAQAwDQYJKoZIhvcNAQEEBQAwgbYxCzAJBgNVBAYTAkNBMRAwDgYD VQQIEwdPbnRhcmlvMRYwFAYDVQQHEw1TaW91eCBMb29rb3V0MRMwEQYDVQQKEwpB ZGkgTGluZGVuMTEwLwYDVQQLEyhOZXR3b3JrIFNlcnZpY2VzIC0gQ2VydGlmaWNh dGUgQXV0aG9yaXR5MRAwDgYDVQQDEwdhZGlzLmNhMSMwIQYJKoZIhvcNAQkBFhRz dXBwb3J0LWNlcnRAYWRpcy5jYTAeFw0wNDEwMzExOTQ5MjBaFw0zNDEwMjQxOTQ5 MjBaMIG2MQswCQYDVQQGEwJDQTEQMA4GA1UECBMHT250YXJpbzEWMBQGA1UEBxMN U2lvdXggTG9va291dDETMBEGA1UEChMKQWRpIExpbmRlbjExMC8GA1UECxMoTmV0 d29yayBTZXJ2aWNlcyAtIENlcnRpZmljYXRlIEF1dGhvcml0eTEQMA4GA1UEAxMH YWRpcy5jYTEjMCEGCSqGSIb3DQEJARYUc3VwcG9ydC1jZXJ0QGFkaXMuY2EwgZ8w DQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAK117FiUHi/sa4YsrJ18LFjeFTTsDfcN +SNGr0d/WXcNtGZKzYHvLpzu6hzf2YK19EMVjE/qicnJsilwhJyR4sa1UdxJpyyr qduY90bu5+dP54rdOGdzr+Mq+2GLroUFz+EkrO8gY0cQShArmYdZBLddUI4G/K7u miUjoLPidI6JAgMBAAEwDQYJKoZIhvcNAQEEBQADgYEAX1JBD1zpYt4J6yK4h2Ig 8JkZu/lJJ5Tpx5QYnx0hev+6oJTLWcRmUnnz5wnLS15EpqNq2PanTh+2ACnjoy9Y u0g+48vV/7HoEvZM93EOii8hDyb9LyDAQ3B2OH6CwqkjxU5nNZvYt6y6R3a1B2D6 rGOQC/WNtpPl9NcnpcMpF0A= -----END CERTIFICATE-----
Just a note on how to use this certificate with openssl. This is needed so Unix or Cygwin pine can access mail for example. Find the certificate directory for the local openssl installation. In Cygwin this is
/usr/ssl/certs. Install the ascii armored cert data as a pem file. Just paste the cert aboce into/usr/ssl/certs/adis.pem. For any applications to find the cert a hash symlink has to be created. Run theopenssl x509 -in /usr/ssl/certs/adis.pem -hash -nooutcommand. It will output a hash. Create a symlink using the hash value likeln -s adis.pem /usr/ssl/certs/.0 .That’s it. Clear as mud, huh?