[tech] UCC wildcard certificate
David Adam
zanchey at ucc.gu.uwa.edu.au
Wed Nov 4 10:09:44 AWST 2015
Globalsign want crazy money for wildcard certificates.
https://www.ssls.com/ssl-certificates/comodo-positivessl-wildcard is about
as reasonable as it gets. The club can probably afford $130 for a year's
worth.
Alternatively, we could just turn HTTPS off for subdomains. We've got a
cert for secure.ucc.asn.au that's good until 2018. I didn't put HSTS on my
domain ;-)
[DAA]
On Wed, 28 Oct 2015, Matt Johnston wrote:
> The ssl certificate for *.ucc.asn.au expires on 11 November.
> I've emailed globalsign but they aren't doing wildcards for
> open source projects any more.
>
> letsencrypt.org goes live on November 16 [1], we should be
> able to use that for all UCC domains in future (bodge up
> zonemake.py a bit more). Perhaps for the 5 day gap we could
> take advantage of a 15-day refund on a wildcard certificate
> certificates. Anyone got other ideas?
>
> Matt
>
>
> [1] https://letsencrypt.org/2015/08/07/updated-lets-encrypt-launch-schedule.html
> ----- Forwarded message from no_reply at globalsign.com -----
>
> Date: Wed, 28 Oct 2015 10:08:46 +0900 (JST)
> From: no_reply at globalsign.com
> To: wheel at ucc.asn.au
> Subject: Reminder: Do not let your GlobalSign SSL Certificate expire
> X-Spam-Status: No, hits=0.1 required=5.0 tests=BAYES_50, DKIM_SIGNED,
> DKIM_VALID,
> DKIM_VALID_AU,RCVD_IN_DNSWL_MED autolearn=no version=3.3.2
>
> --------------------------------------------------
> Please note that this e-mail is automatically sent from a noreply mailbox.
> To contact GlobalSign please use the Contact Details at the footer of this email.
> --------------------------------------------------
>
> Dear Matt Johnston,
>
> Your DomainSSL Certificate for
> *.ucc.asn.au expires on 11/11/2015.
> If you do not renew your Certificate before this date you
> will not be able to continue the security of your web site.
>
> There is no need to risk your Certificate expiring by waiting too
> long.
>
> You can renew your Certificate and not lose any remaining
> time at any point up to 11/11/2015.
> So be safe and ensure the continued use of SSL security.
>
> CERTIFICATE DETAILS
>
> Organization: University Computer Club
> Organization ID: PAR95805 - quote when contacting Tech Support
> Product Type: DomainSSL
> Common Name: *.ucc.asn.au
> Order Number: CEDV1409092416
>
> HOW TO RENEW
> --------------------------------------------------
> You can log into your GlobalSign Certificate Center account and renew your
> Certificate at any time. Please follow these Renewal Instructions:
>
> 1. Log into your GCC Account at https://www.globalsign.com/login
>
> 2. On the left side click: Order History & Certificate Renewals
>
> 3. Run Upcoming Renewals Report
>
> 4. Click the "Renew" button next to your expiring SSL Certificate Order
>
> 5. Complete the online form (amend details accordingly). Provide a new CSR or use our AutoCSR function and we'll create the CSR for you.
>
> 6. A 15% renewal discount will automatically be applied.
>
> 7. Complete the application process as directed.
>
> For additional information please visit the SSL Renewal Center at: https://www.globalsign.com/ssl/renew
>
>
> YOUR ACCOUNT & GCC LOGIN DETAILS
> --------------------------------------------------
> Organization: University Computer Club
> Organization ID: PAR95805 - quote when contacting Tech Support
>
> Login to your GlobalSign Certificate Center (GCC) Account to manage
> the lifecycle of your certificate. Your Account gives you easy access
> to renew Certificates, buy additional Certificates and to revoke or
> cancel existing Certificates if necessary.
>
> GCC Login URL: https://www.globalsign.com/ssl-login.htm
>
> Not sure of your User ID / Password? This would have been sent when you
> purchased your first GlobalSign product or created a User from within your
> GCC account. An email confirmation would have been sent. Please check
> your email or Contact Support if you have forgotten your Password.
>
>
> RENEWAL OFFERS
> --------------------------------------------------
> * 15% Discount on Renewal:
> - Renew now and receive a 15% Discount
>
> * 30 days Bonus:
> - Any remaining time will be transferred to your new Certificate
> - Plus we will give you an extra 30 days Free!
>
> * Multi-year Savings:
> - Renew with multi-year (up to 5 years) to avoid the renewal process
> again this time next year. Get over 20% discount per additional year.
>
>
> Thank you for choosing GlobalSign, if you have any questions or
> issues please do not hesitate to contact us.
>
> CONTACT US
> --------------------
> Please note this email was sent from a nonreply mailbox.
>
> Support Contact Information
> Create Support Ticket: https://support.globalsign.com/customer/portal/emails/new
> Phone Support: 1-877-467-7543
> Online Support: https://support.globalsign.com/
>
> Vetting Contact Information
> Vetting Fax: 617-830-0779
> Vetting Email: vetting at globalsign.com
>
> --------------------------------------------------
> GlobalSign - Identity for Everything?
> --------------------------------------------------
>
> www.globalsign.com . 1-877-775-4562 . sales at globalsign.com
>
>
>
> YOUR CERTIFICATE TO RENEW:
> --------------------------------------------------
> Here is a copy of the Certificate you now need to renew:
>
> -----BEGIN CERTIFICATE-----
> MIIE8jCCA9qgAwIBAgISESEncmGAMwb7qKVar+tjjtWiMA0GCSqGSIb3DQEBCwUA
> MGAxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYD
> VQQDEy1HbG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g
> RzIwHhcNMTQwOTA5MTMyMjAxWhcNMTUxMTExMDAxMDUwWjA6MSEwHwYDVQQLExhE
> b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFTATBgNVBAMMDCoudWNjLmFzbi5hdTCC
> ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANB3lB2Q9IwIPw4wA3FzOCoR
> 55iXkrmwWcQgGEDvwioQ9dFIIz9llqPQ88ZliUWK6S3SJ34llTuxsOF1bMFJ0wy0
> 0yMEUohXrUqIqF/4l8SaLMzH27zmBtIoHw+cJeaCy3sCrbw3TF0ymZZTKr0mXj1d
> 0jO/FSjOTwVKjQUH34teUBWOurmXCb0Vl0glfCOWpKkZR6Ve8dBIEP+in7LQkpPn
> /o6pgX5oiMf08FpIwb+RcLveE7RcGC5MJPTBaewfJQRV0U4TcMCMYlHTdDj5LTQJ
> xhLWwbcg0TCM8EuzSBdx+XW7LewmDn5INjRr3lOn2mE+q2mvBWQulqWtUHDF28EC
> AwEAAaOCAcowggHGMA4GA1UdDwEB/wQEAwIFoDBJBgNVHSAEQjBAMD4GBmeBDAEC
> ATA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBv
> c2l0b3J5LzAjBgNVHREEHDAaggwqLnVjYy5hc24uYXWCCnVjYy5hc24uYXUwCQYD
> VR0TBAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwQwYDVR0fBDww
> OjA4oDagNIYyaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9nc2RvbWFpbnZh
> bHNoYTJnMi5jcmwwgZQGCCsGAQUFBwEBBIGHMIGEMEcGCCsGAQUFBzAChjtodHRw
> Oi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2RvbWFpbnZhbHNoYTJn
> MnIxLmNydDA5BggrBgEFBQcwAYYtaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29t
> L2dzZG9tYWludmFsc2hhMmcyMB0GA1UdDgQWBBRlhck6a3u3snso3Y6JIqh27oK+
> BzAfBgNVHSMEGDAWgBTqTnzUgC3lFYGGJoyCbcCYpM+XDzANBgkqhkiG9w0BAQsF
> AAOCAQEAXIufu5A5RPZdokglCXPI2yJrE4vHDhsuRvDGirsj5ToYuI1yRyqSgvwr
> 0vNBr6TXpfY6tDV0uVLD28DNigHjiYQ3ITjlEHSiu3eWIZ2T/1cUUHs6PslXXGNK
> gkGg0BUmI3kpoqhPSlxHTnqeQXxdoTbQDZNRwXVKBQUD7SGDTTyc6hoRYoTMLGSX
> 9IkBl5e6iT7lUykEid9aUk8ueGPlKN5DUMBb574MolTupaOb0kj1RTXHxoO6A1Ig
> ldVHNt6J8i0pEn66PJptOrYbgPwA8hjbSqkjSPeWfg08LcWRroiys8Vp4Xm8GBJq
> mWlXEWy+2M8My0lMvo1HcTTdm8BMSg==
> -----END CERTIFICATE-----
>
>
>
> ----- End forwarded message -----
> _______________________________________________
> List Archives: http://lists.ucc.gu.uwa.edu.au/pipermail/tech
>
> Unsubscribe here: http://lists.ucc.gu.uwa.edu.au/mailman/options/tech/zanchey%40ucc.gu.uwa.edu.au
>
Cheers,
David Adam
zanchey at ucc.gu.uwa.edu.au
Ask Me About Our SLA!
More information about the tech
mailing list