We need a trial cert or similar for ssl-outdated.mozqa.com so we can have an ssl certificate that has expired for use in ssl testing. (Wildcard for *.mozqa.com would be better but I assume it isn't an option.) Something like the free one here: http://www.instantssl.com/ssl-certificate-products/free-ssl-certificate.html I know Mozilla uses one specific CA so I am not sure if this is an option with it.

Could you test using a Mozilla signed certificate? Will be real easy to generate a cert with a short TTL.

You'd have to install the Mozilla Root CA on your test machines.

I'll have to find out though I know that this is less than ideal as community members, for example, aren't going to want to go through a process to add a new Root CA in order to run tests.

How does this one differ from bug 666966?

It doesn't. I lost track of this one. :-)