source: trunk/server/fedora/config/etc/pki/tls/certs/tours.pem @ 2520

Last change on this file since 2520 was 2351, checked in by achernya, 11 years ago
Remove InCommon Root CA from certificate chain MIT recently switched to the InCommon CA, rather than the MIT CA, which resulted in Scripts serving intermediate certificates. Unfortunately, the instructions from InCommon had the certificates in the incorrect order, and also included the Root CA. The Root CA is unnecessary for a server to be sending, so removing it reduces the SSL handshake size, as well as correcting the certificate order.
File size: 4.5 KB
Line 
1From mitcert@MIT.EDU Fri Jun  1 22:01:52 2012
2Date: Tue, 29 May 2012 10:01:50 -0400
3From: mitcert@MIT.EDU
4To: achernya@mit.edu
5Subject: [help.mit.edu #2003791] certificate renewal for scripts-vhost tours.mit.edu
6Resent-Date: Sat, 2 Jun 2012 01:01:41 -0400 (EDT)
7Resent-From: Alexander Chernyakhovsky <achernya@MIT.EDU>
8Resent-To: scripts-root@mit.edu
9Resent-Subject: [help.mit.edu #2003791] certificate renewal for scripts-vhost
10 tours.mit.edu
11
12-----BEGIN CERTIFICATE-----
13MIIGWTCCBUGgAwIBAgIQLiWSzLCF/wgkbnNU+K2oHDANBgkqhkiG9w0BAQUFADBR
14MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNv
15bW1vbjEbMBkGA1UEAxMSSW5Db21tb24gU2VydmVyIENBMB4XDTEyMDUyOTAwMDAw
16MFoXDTE1MDUyOTIzNTk1OVowgdExCzAJBgNVBAYTAlVTMQ4wDAYDVQQREwUwMjEz
17OTELMAkGA1UECBMCTWExEjAQBgNVBAcTCUNhbWJyaWRnZTEdMBsGA1UECRMUNzcg
18TWFzc2FjaHVzZXR0cyBBdmUxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMgSW5zdGl0
19dXRlIG9mIFRlY2hub2xvZ3kxKjAoBgNVBAsUIUluZm9ybWF0aW9uIFNlcnZpY2Vz
20ICYgVGVjaG5vbG9neTEWMBQGA1UEAxMNdG91cnMubWl0LmVkdTCCAiIwDQYJKoZI
21hvcNAQEBBQADggIPADCCAgoCggIBAL+j8nuYzBanV+aShTRW8eNig55qTzWd8M+J
22h3Pjk/e3AVc4bun8WU0k66cXR8osUQ5FyLdoyQ4yJuCR0wZcjHwObJkMskYFD03x
23sMdeNQZi/irWDxsstQIkTMMGceyUyh2qr365LcBVS8y8UT12aFvT7TXQA7obbPOg
242NPca0SwXgFR0wLMStpSEt41MWkWWkiLD86tTeTVixE2f4cc/YTaQy6HL0FwrK3f
25VMDt9iFR+sUG8BvrobC/TRxCNIrVb/clZnOPYMTXjTOR9EY6lwlZAf/DZJRASDBo
268G4DJnTCobPXy5T8blOKKp79sU/EdFYlYx+qvZUleJxFRhsMIXHrhJTQsvHaUvbR
27f2MdCCNSX8L5TaykROWaVHD8yfzU1LcddZUA478+TPNDw5bHCSopRRLSMdZ5TIrn
28VCcixoCuhyNW8Y1Jm8j67TNbX1Z2yA9+hRRpxEgxBzmlNIHyaxVQIvu7LK1LhOpV
29ZPfeVp3QttB9HhtRUDdElObEFetFMfGz7A+zqQz4HEfHUQAF7+6wPZ9+B6c46INM
30Pds0tiQMkFfA+dBkFIqTR5tB9aMUHZ4YXdXYZq/188gvvKcCp+/c8A7HR40u1qhi
31QpNbfPU1+DEQezjUQCRogRMny/t2DtGZFNjV6/dpZI+vj4K7JCn51CkdzuYUukyL
32Cf9GzottAgMBAAGjggGqMIIBpjAfBgNVHSMEGDAWgBRIT1r6L0qaXuBQ82t7VaXe
339b40XTAdBgNVHQ4EFgQUyxG3AV+GVU9FXqsnab7hPIl6VWIwDgYDVR0PAQH/BAQD
34AgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
35MF0GA1UdIARWMFQwUgYMKwYBBAGuIwEEAwEBMEIwQAYIKwYBBQUHAgEWNGh0dHBz
36Oi8vd3d3LmluY29tbW9uLm9yZy9jZXJ0L3JlcG9zaXRvcnkvY3BzX3NzbC5wZGYw
37PQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5pbmNvbW1vbi5vcmcvSW5Db21t
38b25TZXJ2ZXJDQS5jcmwwbwYIKwYBBQUHAQEEYzBhMDkGCCsGAQUFBzAChi1odHRw
39Oi8vY2VydC5pbmNvbW1vbi5vcmcvSW5Db21tb25TZXJ2ZXJDQS5jcnQwJAYIKwYB
40BQUHMAGGGGh0dHA6Ly9vY3NwLmluY29tbW9uLm9yZzAYBgNVHREEETAPgg10b3Vy
41cy5taXQuZWR1MA0GCSqGSIb3DQEBBQUAA4IBAQCCGBZNPC7xIb8x6jqtlL6Pk40A
42aNKztlcbbcpJ15y66HC7wCjad+7QE7yK7l7f6WlhTwnit6qXsczUQP3g3P2hoAoU
43okQ4r3sfelbmIvqlDayqODZwzK42AiIeG3lNR8EBp3EV+IU6uKp/llY3OtyEesCM
44MMOoXl26LirJwNKK2fe2/7jo6XdB3tF83zUP/AHExQAyivMNxvv3RH/TKR5ULXDZ
45iQGbXQns3IovjDcfDDg66JHz3cbgk8HBtPm/bvM0szpRnVSHwyTPLb/r1NzKIdn4
462yWaF3/xBKqxqbTDJFoWQsiqUt9v9iDkgy1sM7DtwA9U1qF0mIiZ51BKGGBs
47-----END CERTIFICATE-----
48
49You will need to use the following Chain CA Certificate:
50https://cert-manager.com/customer/InCommon/ssl?action=download&sslId=117402&format=x509IO
51
52-----BEGIN CERTIFICATE-----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79-----END CERTIFICATE-----
Note: See TracBrowser for help on using the repository browser.