New SSL Certificate

Submitted by Bill St. Clair on Fri, 27 Jan 2012 17:15:09 GMT  <== Webmaster stuff ==> 

My GoDaddy SSL certificate expired today. I decided to stop using them. Renewals were more expensive than I wanted to pay, even though they're one of the cheaper Certificate Authorities (CA). And I did not at all like their on-now-off-when-our-customers-go-away attitude about SOPA and PIPA. And I absolutely despise navigating their web site. I couldn't build something that confusing if I tried. So goodbye GoDaddy. Hello CACert. CACert provides free certificates, but they are not known by all browsers, e.g. Firefox. They're working at it, and will hopefully be listed sometime soon, but until then, you either have to tell your browser to make an exception for my certificate or install their root certificate in your browser. You can do the latter here by clicking on the "Root Certificate (PEM Format)" link.

Here's the info to let you verify that the certificate you're seeing is the one I actually installed. You can find my pgp key at billstclair.com/pgp.html, and at keyserver.rayservers.com (the newest key from a search for bill@billstclair.com).

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Serial Number: 738957 (0xb468d)
Issuer: O=Root CA, OU=http://www.cacert.org, CN=CA Cert Signing Authority/emailAddress=support@cacert.org
Validity
  Not Before: Jan 27 15:09:06 2012 GMT
  Not After : Jul 25 15:09:06 2012 GMT
Subject: CN=billstclair.com
MD5 Fingerprint=25:9C:49:29:DD:EF:D2:6A:EE:1C:A3:92:87:72:B2:04
SHA1 Fingerprint=1F:6C:E3:0E:1B:1C:2B:23:E8:A7:3F:07:29:D5:C0:80:EC:7B:73:D1
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (Darwin)

iQIcBAEBAgAGBQJPIvu8AAoJENim99wXg5awzpkP/1y4ILrh0jcLZbSssZbY4Afr
339nfddlIYS61K4PszidrLaE6isvUqEfGQ56QEDwKeOzgGAnYWyVh0PGhV3xeH6w
6abdHVT2hi8BBIBaFJBx/c6Gltra54Dsm0BoD/ymFYeO3jQ8DQzcaFF0ki/m6E7R
U5pCM27arvMoPnsn6PyOpE5Nx47r0hkgdlWkDX7B4gg7t+RItHon9d4skBPHVE5q
CQMLJJNdGjtEI4V4fe33HRHQr0bNWZRIm2HB2vRPAg/Epl4Cd8OZbDxP3HVsILAd
7lgwlla7KpIlJWzU1vJL82ahXY+y3hwoPqkpOh5ScojFpoOWbAJjzCubDnUQ9l3p
2nSdEwNLJ7YpQHJXmyuKQhItfqZGA1/3gun0SAsPg+LAP94bFNFJICoBKZXZht44
11ef0sYNhbkFMFa5Nbuf3PGgdHR4oK+T0R+7D3sS160d+A4TTbCYg5eJjBTqaJWk
EHske8cEzzNNppc0xonPcrdFWMzHV2TekzgSA+6jbGKDVSP1f/R3WW6YgjWoUcbd
WVpOGCPx/LwufrehGZ5NTE3U1GZeFF/0TtwgIrIi6uEDuwOK1ffxgNO/MunoN5q9
pQTwNz5gZSXTOq0cw5HipHMxaQ5QOyLt3SI93PNy6O9BZsUDeDPYqNDpg2eLRyN7
CC+KwC3cSvKcARGaT6rb
=4MKO
-----END PGP SIGNATURE-----

Add comment Edit post Add post