Copyright: Saturday, January 04, 2003 15:51:28


Signed Program Download

The certificate for this program is valid.

A certificate contains information asserting that a specific software program is genuine. This ensures that no other program can assume the identity of the original program. Certificates are also dated when they are issued. When you try to download software, Microsoft Internet Explorer verifies the information in the certificate and that the current date precedes the certificate's expiration date. If the information is not current and valid at the time of download, Internet Explorer can display a warning.

This program's publisher has obtained a certificate for this program from a recognized certificate issuer so that the authenticity of this program can be verified.

Any software or component you install can potentially harm your computer.

To view details about the software, click the underlined program name. If the program name is not underlined, the publisher did not furnish an Internet address to obtain additional information.

Given what you know about this software, its publisher, and your computer, you must decide whether to proceed with installing and running this software. Additionally, if you trust this software publisher completely, you can choose to bypass this dialog box in the future for all software from this publisher that has certificates, and automatically install and run their software.

If, given this information, you still do not feel confident in installing this software, then click No.


Signed and Invalid Program Download

The certificate for this program is not valid.

A certificate contains information that a specific software program is genuine. This ensures that no other program can assume the identity of the original program. Certificates are also dated when they are issued. When you try to download software, Microsoft Internet Explorer verifies the information in the certificate and that the current date precedes the expiration date. If the information is not current and valid, Internet Explorer can display a warning.

This program has a certificate, but its authenticity cannot be verified.

Any software or component you install can potentially harm your computer. In any case, the software or component may be unstable.

To view details about the software, click the underlined program name in the dialog box. If the program name is not underlined, the publisher did not furnish an Internet address to obtain additional information.

Given what you know about this software, its publisher, and your computer, you must decide whether to proceed with installing and running this software.

If, given this information, you still do not feel confident about installing this software, then click No.


Unsigned Program Download

This software does not have a certificate, so it might not be safe to install and run on your computer.

A certificate contains information that a specific software program is genuine. This ensures that no other program can assume the identity of the original program.

The software publisher has not obtained a certificate for this software from a recognized certification authority, so the authenticity of this software cannot be verified.

Given what you know about this software, its publisher, and your computer, you must decide whether to proceed with installing and running this software.

If, given this information, you still do not feel confident about installing this software, then click No.


Displays the name of the person or company to which the certificate was issued.


Displays the name of the certification authority (CA) that issued the certificate.

A CA is an entity entrusted to issue certificates. An issued certificate asserts that the individual (or organization) that requested the certificate fulfills the conditions of an established policy.


Click to install the certificate into one of the certificate stores.


Click to modify certificate properties, such as friendly name and description, to further restrict the list of allowed purposes, or to configure additional cross-certificate download locations and options.


Click to view more information about the issuing certification authority, if available.


Click to accept the certificate.


Click to decline the certificate.


Lists the purposes that the certification authority intended for the certificate.


Displays the time period for which the certificate is valid.


Displays whether you have a private key associated with the certificate.

A private key is the secret half of a key pair used in public key security. Private keys are used to digitally sign messages or decrypt messages that have been encrypted with the corresponding public key.


Displays the current list of X.509 fields or extensions shown below. You can view a section of the list.


Click to save a copy of the certificate to a file.


Displays the list of all X.509 fields, extensions, and associated properties found in the certificate.

 indicates a X.509 Version 1 field.

 indicates a non-critical X.509 Version 3 extension.

 indicates a critical X.509 Version 3 extension.

 indicates an property associated with the certificate that you can modify.


Displays the selected field or extension in detail.


Displays the certification path for this certificate. A certification path is a chain of related certificates.


Displays the selected certificate or certificate trust list in detail.


Displays the status of the selected certificate or certificate trust list.


Displays the list of attributes and associated properties in the certificate trust list.

 indicates an attribute in the certificate trust list.

 indicates a non-critical extension.

 indicates a critical extension.

 indicates a property associated with the certificate trust list that you can modify.


Displays the selected attribute or extension in detail.


Click to view the digital signature of the certificate trust list.


Displays the list of certificates contained within the certificate trust list.


Displays the selected certificate in detail.


Displays the selected X.509 field or extension in detail.


Displays the selected certificate.


Displays the list of attributes and associated properties in the certificate revocation list.

 indicates an attribute in the certificate revocation list.

 indicates a non-critical extension.

 indicates a critical extension.

 indicates a property associated with the certificate revocation list that you can modify.


Displays the selected attribute or extension in detail.


Displays the list of revoked certificates contained within the certificate revocation list.


Displays the selected certificate in detail.


Displays the selected attribute or extension in detail.


Displays the friendly name that is associated with the certificate.


Displays the description that is associated with the certificate.


Displays the list of purposes that the certification authority intended for the certificate.


Click to add a certificate purpose that is not listed. This button is only available for certificates with no enhanced key usage extension.


Click to enable all available purposes for the certificate. The available purposes are determined by the enhanced key usage extension on the certificate.


Click to disable all purposes for the certificate. Applications that check the purpose of a certificate before accepting it will not be able to accept this certificate.


Click to choose specific purposes for the certificate.


Displays the name of the signer.


Displays the e-mail address of the signer.


Displays the date and time when the file was signed.


Displays the certificate referenced by the signature.


Displays a list of all countersignatures.


Displays more information about the selected countersignature.


Displays a list of all attributes in the signature.


Displays the selected attribute in detail.


Displays all the certificate stores that are available for selection.


Displays the certificate store hierarchy, so that components of a logical store (called physical stores) are also available for selection.


Click to see more details about the certificate.


Displays a list of certificates that are available for selection.


Displays a list of certificates stored on the computer, based on the tab and purpose that are selected.


Select the certificate purpose.


Click to import a certificate from a file on disk.


Click to export the selected certificates to a file.


Click to see more details about the selected certificate.


Click to remove the selected certificates from the computer.


Click to set advanced options. Advanced options include specifying the purposes for which the certificate can be used and the file format to use when exporting the certificate.


Displays the intended purposes of the certificate.


Displays a list of all known certificate purposes. You can designate any purpose as advanced by selecting its check box.


Displays the default file format that is used when you export certificates by dragging them to a file folder. DER Encoded Binary X.509 is a binary format that is suitable for exporting a single certificate. Base64 Encoded X.509 is a textual representation of a DER-encoded certificate that is useful when sending a certificate to a computer running a non-Windows-brand operating system. You may export all certificates in a certification path using a PKCS #7 format file.


Specifies whether to include the certificates in the certification path when you use a drag-and-drop operation to export. This check box is only available when you use PKCS #7 format files for export because only PKCS #7 supports multiple certificates in a single file.


Displays a list of certification authorities published in Active Directory.


Displays a list of signatures.


Displays the selected signature in detail.


Displays the list of hashes contained within a catalog file.


Displays the selected catalog entry in detail.


Displays the selected attribute of the catalog entry in detail.


Displays the list of attributes and associated properties in the catalog file.

 indicates an attribute in the catalog file.

 indicates a non-critical extension.

 indicates a critical extension.

 indicates a property associated with the catalog file that you can modify.


Displays the selected attribute or extension in detail.


Click to view the digital signature of the catalog file.


Remove

Click to remove the selected item from the list.


List of Trusted Publishers and Credentials Agencies

This list controls whose software can be installed on your system without asking you first.

The list can contain both individual software publishers and commercial software publishers. Software that has been published by a publisher in this list can be installed without your explicit approval.

The list can also contain one or more credentials agencies. Similar to a notary, a credentials agency is an organization in the business of attesting to the identity of software publishers. If a credentials agency is in this list, then any publisher certified by that agency is considered trusted, which allows software they publish to be installed on your system without asking you first.


Consider All Commercial Software Publishers Trustworthy

A commercial software publisher is a bona fide company in the business of producing or selling computer software. In addition, commercial software publishers have met certain minimum financial criteria that attest to their ability to support their software on a continuing basis.

Checking this box means that software that is correctly signed by any commercial software publisher can be installed on your system without first asking for your approval.


Check for Cross-certificates Check Box

Specifies whether to check for and retrieve additional cross-certificates associated with the issuer of this certificate. Cross-certificates allow two unrelated certification authority (CA) hierarchies to have a trust relationship. Certificates will usually have a cross-certificate URL encoded in them, but in some cases, you may need to specify additional URLs.


Cross-certificate Download Number of Units

Type the interval, in hours or days, between checking for cross-certificates. The entry must be an integer greater than zero. The maximum values you can use are 199,306 hours or 49,710 days.


Cross-certificate Download Units

Specifies whether to use hours or days as the interval unit for checking for cross-certificates.


Default Cross-certificate Download Interval

Click to use the default interval (8 hours) to check for additional cross-certificates.


Add URL to Check for Cross-certificates

Click to add a URL to check for additional cross-certificates.


Edit the Cross-certificate URL

Specifies a URL to check for additional cross-certificates. The URL can be any of the following types of addresses: HTTP, LDAP, FTP, or File.


Cross-certificate URL List

Lists the URLs that are currently checked for cross-certificates. To add to this list, click Add URL. To remove items from the list, click Remove URL.


Remove URL to Check for Cross-Certificates

Click to remove the selected URL so that it is no longer checked for additional cross-certificates.