940593 - SSL cert for graphite.mozilla.org expires on Nov 30

Status: RESOLVED FIXED

(Infrastructure & Operations :: SSL Certificates, task)

Description

[Jason Crowe [:jd]]

You know the drill.

Comment 1

[Chris Turra [:cturra]]

ssl certificate reissued through digicert. fyi - i dropped the subject alternative name for sjc from this reissue.



$ curl -v https://graphite.mozilla.org
* About to connect() to graphite.mozilla.org port 443 (#0)
*   Trying 63.245.215.97...
* connected
* Connected to graphite.mozilla.org (63.245.215.97) port 443 (#0)
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server key exchange (12):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using DHE-RSA-AES128-SHA
* Server certificate:
* 	 subject: C=US; ST=CA; L=Mountain View; O=Mozilla Foundation; CN=graphite.mozilla.org
* 	 start date: 2013-11-27 00:00:00 GMT
* 	 expire date: 2016-05-17 12:00:00 GMT
* 	 subjectAltName: graphite.mozilla.org matched
* 	 issuer: C=US; O=DigiCert Inc; CN=DigiCert Secure Server CA
* 	 SSL certificate verify ok.
...

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----