česky | deutsch | english | français | italiano | nederlands | 中文|| English home page
Frequently Asked Questions (FAQ)
Contents
CAcert: what, why, how
Account
Problems and Questions about the CAcert Registration Process
How To Change Your Name in your account
How To Change Your Date of Birth in your account
How to add a new Email address to your account
Arbitration, Audit, Policies
Assurance
Assurance Details: How can I get CAcert Assurance Points (APs) ?
Assurance Handbook (Individuals)
Assurer Challenge Test
New TTP-assisted-assurance program
(obsolete: Assurance by TTP-assisted-assurance, Assurance Information For TTP, and TTP Availability)
Thawte points to be revoked - New points counting (Thawte patch)
Certificates
Suggested Key Sizes for the future
Weak Keys System check
Certificate chain and its construction algorithm checking whether it is trusted
New and archive (obsoleted) CAcert Roots - also contains files CAcert-chain, cacert-bundle, and CAcert_Root_Certificates
Add a new e-mail address to my cacart account in the web interface
What is a CSR ? and Generating a Certificate Request
Where can I find out more info about Class 3 and chained certificates ? see FAQ/TechnicalQuestions
New Class1 Root and New Class3 subroot certificates re-signed FAQ
- Document signing certificates (status at 20180101):
You can sign MS Word (DOC[X]) and OpenOffice (ODT) documents only with the code signing enabled client certificate.
You can sign Adobe Reader (PDF) and LibreOffice (ODT) documents with any client certificate.
Getting your PGP key signed by CAcert
Cryptographic hardware Help and Howtos
Certificate related problems
A browser cannot create a client certificate. please use CAcert web application
How the heck can I get my new client certificate using Windows ? - Browsers do not work ? Follow articles about using XCA, MMC, cert renewal, and more
Problem with receiving PING email
- You are continually receiving an error message:
- Email Address given was invalid, or a test connection couldn't be made to your server, or the server rejected the email address as invalid
The 1st wiki note "Small branch from the topic" in this article.
- You are continually receiving an error message:
Firefox reports an expired certificate even though you installed a renewed one or a new one
Why browsers report the CAcert.org website as improperly configured
Mozilla Firefox is blocking CAcert.org websites – how to get access again
Firefox v.7x: SSL_ERROR_UNKNOWN_CA_ALERT error when trying to visit CAcert.org
I cannot import a .p12 file, exported by Firefox, into Windows
Browsers report untrusted CAcert root certificate due to an old signing algorithm
- Examples:
Firefox error:Your connection is not secure; Advanced: SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED
Google Chrome error: The site's security certificate is not trusted!
Replace the old roots with the new ones, which are published on the CAcert web, or on this page - search for SHA256!
- Examples:
I cannot renew my certificate - How to renew an expired certificate for Windows using Linux, and how to do it using Firefox (Problem #3)
Others
Getting Support and Help!
Decision Numbers (e.g. what m20070825.3 means)
CAcert servers' IPv6 support (at the date 20160418)
Glossary & Abbreviations (1), Glossary & Abbreviations (2), and Glossary & Abbreviations (Validation)