Jack, You are listed as the domain contact for firefox.com.cn domain. Digicert CA needs to validate the domain before issuing a SSL certificate for marketplace.firefox.com.cn. Digicert CA will send you a email with instructions.
Hi Jason, We were working on the this, I will send you the new SSL certificate when I get it.
Yes, we are following up on this request. Thanks.
Hi Jason and Yousheng, Just to let you guys know that I received that email from Digicert CA, and I have approved the request already. Thanks.
Hi Jason, I sent the new SSL certificate to your email.
Certificate updated. Thanks all! curl -v https://marketplace.firefox.com.cn * Rebuilt URL to: https://marketplace.firefox.com.cn/ * Adding handle: conn: 0x181d8b0 * Adding handle: send: 0 * Adding handle: recv: 0 * Curl_addHandleToPipeline: length: 1 * - Conn 0 (0x181d8b0) send_pipe: 1, recv_pipe: 0 * About to connect() to marketplace.firefox.com.cn port 443 (#0) * Trying 22.214.171.124... * Connected to marketplace.firefox.com.cn (126.96.36.199) port 443 (#0) * Initializing NSS with certpath: sql:/etc/pki/nssdb * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * SSL connection using TLS_RSA_WITH_RC4_128_SHA * Server certificate: * subject: CN=marketplace.firefox.com.cn,OU=Domain Control Validated - RapidSSL(R),OU=See www.rapidssl.com/resources/cps (c)14,OU=GT75074771,serialNumber=XAGUAq5L5VJkUO1xk-pQSslASK2JWLlL * start date: Sep 14 15:20:28 2014 GMT * expire date: Oct 16 03:18:59 2017 GMT * common name: marketplace.firefox.com.cn * issuer: CN=RapidSSL CA,O="GeoTrust, Inc.",C=US > GET / HTTP/1.1 > User-Agent: curl/7.32.0 > Host: marketplace.firefox.com.cn > Accept: */* >
Status: NEW → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → FIXED
Looks to me like to missed the other similar named cert: marketplace.cdn.firefox.com.cn. It's still being used and is also about to expire. Or is that in another bug? (couldn't find one)
marketplace.cdn.firefox.com.cn is served via ChinaCache CDN and the cert is valid until next year. [firstname.lastname@example.org ~]$ curl -v https://marketplace.cdn.firefox.com.cn * About to connect() to marketplace.cdn.firefox.com.cn port 443 (#0) * Trying 188.8.131.52... connected * Connected to marketplace.cdn.firefox.com.cn (184.108.40.206) port 443 (#0) * Initializing NSS with certpath: sql:/etc/pki/nssdb * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * SSL connection using TLS_RSA_WITH_AES_256_CBC_SHA * Server certificate: * subject: CN=cdn04.ccedge.net,OU=COMODO SSL Unified Communications,OU=Domain Control Validated * start date: Jul 31 00:00:00 2013 GMT * expire date: Jul 31 23:59:59 2015 GMT * common name: cdn04.ccedge.net * issuer: CN=COMODO SSL CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB The PEK1 zlb has a vserver configured for marketplace.cdn.firefox.com.cn and is no longer used/needed. I have filed bug 1068677 for cleanup.
You need to log in before you can comment on or make changes to this bug.