707067 - SSL Certificate for foundationwiki.mozilla.org

Status: VERIFIED FIXED

(mozilla.org Graveyard :: Server Operations, task)

Description

[Shyam Mani [:fox2mike]]

+++ This bug was initially created as a clone of Bug #707066 +++

foundationwiki.mozilla.org has been using the *.mozilla.org wildcard cert, which expires on 12/2. This certificate should be used in place of the wildcard.

Comment 1

[Ashish Vijayaram [:ashish]]

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----

Comment 2

[Shyam Mani [:fox2mike]]

Dear Shyam Mani,

Congratulations! GeoTrust has approved your request for a Enterprise SSL certificate. Your certificate is included at the end of this email.

INSTALLATION INSTRUCTIONS

1. INSTALL CERTIFICATE:
Install the X.509 version of your certificate included at the end of this e-mail.
For installation instructions for your SSL Certificate, go to:
http://www.geotrust.com/support/installation-instructions/index.html

2. INTERMEDIATE CERTIFICATE ADVISORY:
You MUST install the GeoTrust intermediate Certificate included at end of this e-mail on your server together with your Certificate or it may not operate correctly

You can also get your GeoTrust intermediate Certificates at:
https://knowledge.geotrust.com/support/knowledge-base/index?page=content&actp=CROSSLINK&id=AR1423

3. CHECK INSTALLATION:
Ensure you have installed your certificate correctly at:
https://knowledge.geotrust.com/support/knowledge-base/index?page=content&id=SO9557&actp=LIST

4. INSTALL THE GEOTRUST TRUE SITE SEAL:
Additionally, as part of your SSL Certificate Service, you are entitled to display the GeoTrust True Site Seal - recognized across the Internet and around the world as a symbol of authenticity, security, and trust - to build consumer confidence in your Web site.

Installation instructions for the GeoTrust True Site Seal can be found on the following link:
https://www.geotrust.com/support/true-businessid/true-site-seal/

Visit the GeoTrust Support Web site, where you will find a range of support tools to help you:
http://www.geotrust.com/support

Best regards,

GeoTrust Customer Support
http://www.geotrust.com/support
Hours of Operation: Mon - Fri 05:00 - 17:00 (PST)
Email:     [e-mail]
Web:       http://www.geotrust.com
Phone:     [phone] or 1-678-366-8399
Live Chat: http://www.geotrust.com/support


** MICROSOFT IIS and TOMCAT USERS
Microsoft and Tomcat users are advised to download a PKCS #7 formatted certificate from the GeoTrust User Portal:
https://products.geotrust.com/orders/orderinformation/authentication.do. PKCS #7 is the default format used by these vendors during installation and includes the intermediate CA certificate, you may also install the below web server certificate and intermediate CA certificate individually.

Web Server CERTIFICATE
-----------------

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


INTERMEDIATE CA:
---------------------------------------

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Comment 3

[Shyam Mani [:fox2mike]]

fox2mike@woodpecker ~ $ curl -I -v https://foundationwiki.mozilla.org/
* About to connect() to foundationwiki.mozilla.org port 443 (#0)
*   Trying 63.245.209.46... connected
* Connected to foundationwiki.mozilla.org (63.245.209.46) port 443 (#0)
* found 165 certificates in /etc/ssl/certs/ca-certificates.crt
* 	 server certificate verification OK
* 	 common name: foundationwiki.mozilla.org (matched)
* 	 server certificate expiration date OK
* 	 server certificate activation date OK
* 	 certificate public key: RSA
* 	 certificate version: #3
* 	 subject: serialNumber=7rpQ0W2oHd7LC7cBbF266KVo/bcNHM2c,C=US,ST=California,L=Mountain View,O=Mozilla Corporation,OU=IT,CN=foundationwiki.mozilla.org
* 	 start date: Thu, 01 Dec 2011 00:07:13 GMT
* 	 expire date: Tue, 03 Dec 2013 02:14:31 GMT
* 	 issuer: C=US,O=GeoTrust\, Inc.,CN=GeoTrust SSL CA
* 	 compression: NULL
* 	 cipher: ARCFOUR-128
* 	 MAC: SHA1