Jed Parsons (use needinfo, please) [:jedp, :jparsons] Reporter
	Description • 12 years ago

We need a * cert for native-persona.org.  A normal cert is ok for now; don't need EV

	Jason Smith [:jsmith]
	Comment 1 • 12 years ago

This is blocking a stop ship bug for Jan 15th. I need this done asap.

	Jed Parsons (use needinfo, please) [:jedp, :jparsons] Reporter
	Comment 2 • 12 years ago

I would presume all blockers for basecamp-blockers are basecamp-blockers by extension - would be great if bugzilla could make those flags heritable somehow.

	Brandon Burton [:solarce]
	Comment 3 • 12 years ago

Because this request is for a wildcard SSL certificate, we'll need Opsec approval first.

	Brandon Burton [:solarce]
	Comment 4 • 12 years ago

If a wildcard is not necessarily needed, we could issue a SAN for multiple names, possibly starting with what we setup in DNS yesterday

native-persona.org : A : 184.73.25.142
login.native-persona.org : CNAME : native-persona.org
static.login.native-persona.org : CNAME : native-persona.org
verifier.login.native-persona.org : CNAME : native-persona.org
www.native-persona.org : CNAME : native-persona.org

	Gene Wood [:gene]
	Comment 5 • 12 years ago

solarce, yes a mutli name SAN for the names listed above is fine as well if that's quicker.

	Chris Turra [:cturra] Assignee
	Comment 6 • 12 years ago

:gene - i have submitted an order to geotrust for a SAN that includes these subject alternative names. normally there is a couple day turn around as they do the approval process and contact me to confirm a couple things. i will keep you posted when this is complete.

*note: removing sec-review request since we're no longer going with a wildcard for this.


---
Order Id: 9421320

Thank you for ordering a True BusinessID server certificate with our True Site "smart icon".

Order processing typically takes two business days to process your order, if no additional documentation is required. Once your order is complete, you will receive your True Site "smart icon" installation instructions along with your True BusinessID server certificate.

	Chris Turra [:cturra] Assignee
	Comment 7 • 12 years ago

:gene - the cert is ready to go! you can find the key on ssl1.private.phx1


-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


INTERMEDIATE CA:
---------------------------------------

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----