705639 - SSL Certificate for smtp.mozilla.org

Status: VERIFIED FIXED

(mozilla.org Graveyard :: Server Operations, task)

Description

[Shyam Mani [:fox2mike]]

smtp.mozilla.org has been using the *.mozilla.org wildcard cert, which expires on 12/2. This certificate should be used in place of the wildcard.

This is a SAN, for smtp.mozilla.org, dm-mail01.mozilla.org, dm-mail02.mozilla.org and dm-mail03.mozilla.org.

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----

Comment 1

[Shyam Mani [:fox2mike]]

SAN cert on order, will take probably 2 days to show up.

Comment 2

[Shyam Mani [:fox2mike]]

Dear Shyam Mani,

Congratulations! GeoTrust has approved your request for a True BusinessID certificate. Your certificate is included at the end of this email.

INSTALLATION INSTRUCTIONS

1. INSTALL CERTIFICATE:
Install the X.509 version of your certificate included at the end of this e-mail.
For installation instructions for your SSL Certificate, go to:
http://www.geotrust.com/support/installation-instructions/index.html

2. INTERMEDIATE CERTIFICATE ADVISORY:
You MUST install the GeoTrust intermediate Certificate included at end of this e-mail on your server together with your Certificate or it may not operate correctly

You can also get your GeoTrust intermediate Certificates at:
https://knowledge.geotrust.com/support/knowledge-base/index?page=content&actp=CROSSLINK&id=AR1423

3. CHECK INSTALLATION:
Ensure you have installed your certificate correctly at:
https://knowledge.geotrust.com/support/knowledge-base/index?page=content&id=SO9557&actp=LIST

4. INSTALL THE GEOTRUST TRUE SITE SEAL:
Additionally, as part of your SSL Certificate Service, you are entitled to display the GeoTrust True Site Seal - recognized across the Internet and around the world as a symbol of authenticity, security, and trust - to build consumer confidence in your Web site.

Installation instructions for the GeoTrust True Site Seal can be found on the following link:
https://www.geotrust.com/support/true-businessid/true-site-seal/

Visit the GeoTrust Support Web site, where you will find a range of support tools to help you:
http://www.geotrust.com/support

Best regards,

GeoTrust Customer Support
http://www.geotrust.com/support
Hours of Operation: Mon - Fri 05:00 - 17:00 (PST)
Email:     [e-mail]
Web:       http://www.geotrust.com
Phone:     [phone] or 1-678-366-8399
Live Chat: http://www.geotrust.com/support


** MICROSOFT IIS and TOMCAT USERS
Microsoft and Tomcat users are advised to download a PKCS #7 formatted certificate from the GeoTrust User Portal:
https://products.geotrust.com/orders/orderinformation/authentication.do. PKCS #7 is the default format used by these vendors during installation and includes the intermediate CA certificate, you may also install the below web server certificate and intermediate CA certificate individually.

Web Server CERTIFICATE
-----------------

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


INTERMEDIATE CA:
---------------------------------------

-----BEGIN CERTIFICATE-----
MIID2TCCAsGgAwIBAgIDAjbQMA0GCSqGSIb3DQEBBQUAMEIxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9i
YWwgQ0EwHhcNMTAwMjE5MjIzOTI2WhcNMjAwMjE4MjIzOTI2WjBAMQswCQYDVQQG
EwJVUzEXMBUGA1UEChMOR2VvVHJ1c3QsIEluYy4xGDAWBgNVBAMTD0dlb1RydXN0
IFNTTCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJCzgMHk5Uat
cGA9uuUU3Z6KXot1WubKbUGlI+g5hSZ6p1V3mkihkn46HhrxJ6ujTDnMyz1Hr4Gu
FmpcN+9FQf37mpc8oEOdxt8XIdGKolbCA0mEEoE+yQpUYGa5jFTk+eb5lPHgX3UR
8im55IaisYmtph6DKWOy8FQchQt65+EuDa+kvc3nsVrXjAVaDktzKIt1XTTYdwvh
dGLicTBi2LyKBeUxY0pUiWozeKdOVSQdl+8a5BLGDzAYtDRN4dgjOyFbLTAZJQ50
96QhS6CkIMlszZhWwPKoXz4mdaAN+DaIiixafWcwqQ/RmXAueOFRJq9VeiS+jDkN
d53eAsMMvR8CAwEAAaOB2TCB1jAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFEJ5
VBthzVUrPmPVPEhX9Z/7Rc5KMB8GA1UdIwQYMBaAFMB6mGiNifurBWQMEX2qfWW4
ysxOMBIGA1UdEwEB/wQIMAYBAf8CAQAwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDov
L2NybC5nZW90cnVzdC5jb20vY3Jscy9ndGdsb2JhbC5jcmwwNAYIKwYBBQUHAQEE
KDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nZW90cnVzdC5jb20wDQYJKoZI
hvcNAQEFBQADggEBANTvU4ToGr2hiwTAqfVfoRB4RV2yV2pOJMtlTjGXkZrUJPji
J2ZwMZzBYlQG55cdOprApClICq8kx6jEmlTBfEx4TCtoLF0XplR4TEbigMMfOHES
0tdT41SFULgCy+5jOvhWiU1Vuy7AyBh3hjELC3DwfjWDpCoTZFZnNF0WX3OsewYk
2k9QbSqr0E1TQcKOu3EDSSmGGM8hQkx0YlEVxW+o78Qn5Rsz3VqI138S0adhJR/V
4NwdzxoQ2KDLX4z6DOW/cf/lXUQdpj6HR/oaToODEj+IZpWYeZqF6wJHzSXj8gYE
TpnKXKBuervdo5AaRTPvvz7SBMS24CqFZUE+ENQ=
-----END CERTIFICATE-----

And installed :

< nagios-sjc1> dm-mail03:SMTP cert - port 587 is OK: OK - Certificate will expire on 11/30/2013 09:18.
< nagios-sjc1> dm-mail03:SMTP cert - port 25 is OK: OK - Certificate will expire on 11/30/2013 09:18.
< nagios-sjc1> dm-mail01:SMTP cert - port 587 is OK: OK - Certificate will expire on 11/30/2013 09:18.
< nagios-sjc1> dm-mail01:SMTP cert - port 25 is OK: OK - Certificate will expire on 11/30/2013 09:18.
< nagios-sjc1> dm-mail02:SMTP cert - port 25 is OK: OK - Certificate will expire on 11/30/2013 09:18.
< nagios-sjc1> dm-mail02:SMTPS cert - port 2525 is OK: OK - Certificate will expire on 04/13/2012 22:05.
< nagios-sjc1> dm-mail02:SMTP cert - port 587 is OK: OK - Certificate will expire on 11/30/2013 09:18.