706050 - SSL Certificate for join.mozilla.org

Status: VERIFIED FIXED

(mozilla.org Graveyard :: Server Operations, task)

Description

[Shyam Mani [:fox2mike]]

join.mozilla.org has been using the *.mozilla.org wildcard cert, which expires on 12/2. This certificate should be used in place of the wildcard.

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----

Comment 1

[Shyam Mani [:fox2mike]]

Dear Shyam Mani,

Congratulations! GeoTrust has approved your request for a Enterprise SSL certificate. Your certificate is included at the end of this email.

INSTALLATION INSTRUCTIONS

1. INSTALL CERTIFICATE:
Install the X.509 version of your certificate included at the end of this e-mail.
For installation instructions for your SSL Certificate, go to:
http://www.geotrust.com/support/installation-instructions/index.html

2. INTERMEDIATE CERTIFICATE ADVISORY:
You MUST install the GeoTrust intermediate Certificate included at end of this e-mail on your server together with your Certificate or it may not operate correctly

You can also get your GeoTrust intermediate Certificates at:
https://knowledge.geotrust.com/support/knowledge-base/index?page=content&actp=CROSSLINK&id=AR1423

3. CHECK INSTALLATION:
Ensure you have installed your certificate correctly at:
https://knowledge.geotrust.com/support/knowledge-base/index?page=content&id=SO9557&actp=LIST

4. INSTALL THE GEOTRUST TRUE SITE SEAL:
Additionally, as part of your SSL Certificate Service, you are entitled to display the GeoTrust True Site Seal - recognized across the Internet and around the world as a symbol of authenticity, security, and trust - to build consumer confidence in your Web site.

Installation instructions for the GeoTrust True Site Seal can be found on the following link:
https://www.geotrust.com/support/true-businessid/true-site-seal/

Visit the GeoTrust Support Web site, where you will find a range of support tools to help you:
http://www.geotrust.com/support

Best regards,

GeoTrust Customer Support
http://www.geotrust.com/support
Hours of Operation: Mon - Fri 05:00 - 17:00 (PST)
Email:     [e-mail]
Web:       http://www.geotrust.com
Phone:     [phone] or 1-678-366-8399
Live Chat: http://www.geotrust.com/support


** MICROSOFT IIS and TOMCAT USERS
Microsoft and Tomcat users are advised to download a PKCS #7 formatted certificate from the GeoTrust User Portal:
https://products.geotrust.com/orders/orderinformation/authentication.do. PKCS #7 is the default format used by these vendors during installation and includes the intermediate CA certificate, you may also install the below web server certificate and intermediate CA certificate individually.

Web Server CERTIFICATE
-----------------

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


INTERMEDIATE CA:
---------------------------------------

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 2

[Shyam Mani [:fox2mike]]

* SSL connection using RC4-SHA
* Server certificate:
* 	 subject: serialNumber=oQcG5drx0aN0xXPiMns/wDzpSQT8XWhg; C=US; ST=California; L=Mountain View; O=Mozilla Corporation; OU=IT; CN=join.mozilla.org
* 	 start date: 2011-11-27 14:02:37 GMT
* 	 expire date: 2013-11-29 14:30:08 GMT
* 	 subjectAltName: join.mozilla.org matched
* 	 issuer: C=US; O=GeoTrust, Inc.; CN=GeoTrust SSL CA
* 	 SSL certificate verify ok.