We need a * cert for native-persona.org. A normal cert is ok for now; don't need EV

This is blocking a stop ship bug for Jan 15th. I need this done asap.

I would presume all blockers for basecamp-blockers are basecamp-blockers by extension - would be great if bugzilla could make those flags heritable somehow.

Because this request is for a wildcard SSL certificate, we'll need Opsec approval first.

If a wildcard is not necessarily needed, we could issue a SAN for multiple names, possibly starting with what we setup in DNS yesterday native-persona.org : A : 184.73.25.142 login.native-persona.org : CNAME : native-persona.org static.login.native-persona.org : CNAME : native-persona.org verifier.login.native-persona.org : CNAME : native-persona.org www.native-persona.org : CNAME : native-persona.org

solarce, yes a mutli name SAN for the names listed above is fine as well if that's quicker.

:gene - i have submitted an order to geotrust for a SAN that includes these subject alternative names. normally there is a couple day turn around as they do the approval process and contact me to confirm a couple things. i will keep you posted when this is complete. *note: removing sec-review request since we're no longer going with a wildcard for this. --- Order Id: 9421320 Thank you for ordering a True BusinessID server certificate with our True Site "smart icon". Order processing typically takes two business days to process your order, if no additional documentation is required. Once your order is complete, you will receive your True Site "smart icon" installation instructions along with your True BusinessID server certificate.

:gene - the cert is ready to go! you can find the key on ssl1.private.phx1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIDAe6UMA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM IENBMB4XDTEzMDEwODIwMjA0NloXDTE1MDExMTA0MzkzMVowgaAxKTAnBgNVBAUT IE5QQlZWRi0yeHpTTVpxYmpCa1prM3NkazJ5VGxENjVHMQswCQYDVQQGEwJVUzET MBEGA1UECBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNTW91bnRhaW4gVmlldzEcMBoG A1UEChMTTW96aWxsYSBDb3Jwb3JhdGlvbjEbMBkGA1UEAxMSbmF0aXZlLXBlcnNv bmEub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNzMPWgH2tg1 I2vfYCYLWcKEkVYNaPxeWFtCRzjlLltWGo5YXrguotWgEEtdvKQ/ejwO9vzV+lRC yOqx+BBFk6yXtZasCySfLEmPbbtxkTevj2buBI29aEZMHJ4iXxoMCGnUXikb1Buh gvhgKW6qVnxzCAfUenXb5W0JiG/6l5o5JFOxtXSUK6fiA1ph3o+i0LcrByk+bI5+ 3FrBZVSj88+FLjoxP7Z0jXbwidEkS7xiLrptq0awYyJSjtxvjzJQs4lxnZveOR/s CBxBjPVVRHy46boE6mtIXv/+PStF2tPDIREn633EiyZ9kASzI19s1nL2UP/cMZiK Drx/Z6ExuwIDAQABo4ICFzCCAhMwHwYDVR0jBBgwFoAUQnlUG2HNVSs+Y9U8SFf1 n/tFzkowDgYDVR0PAQH/BAQDAgSwMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjCBlQYDVR0RBIGNMIGKghZ3d3cubmF0aXZlLXBlcnNvbmEub3Jnghhsb2dp bi5uYXRpdmUtcGVyc29uYS5vcmeCH3N0YXRpYy5sb2dpbi5uYXRpdmUtcGVyc29u YS5vcmeCIXZlcmlmaWVyLmxvZ2luLm5hdGl2ZS1wZXJzb25hLm9yZ4ISbmF0aXZl LXBlcnNvbmEub3JnMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9ndHNzbC1jcmwu Z2VvdHJ1c3QuY29tL2NybHMvZ3Rzc2wuY3JsMB0GA1UdDgQWBBQnNUOyk1+nqd89 Sv+b46/UaYmLkzAMBgNVHRMBAf8EAjAAMG8GCCsGAQUFBwEBBGMwYTAqBggrBgEF BQcwAYYeaHR0cDovL2d0c3NsLW9jc3AuZ2VvdHJ1c3QuY29tMDMGCCsGAQUFBzAC hidodHRwOi8vZ3Rzc2wtYWlhLmdlb3RydXN0LmNvbS9ndHNzbC5jcnQwTAYDVR0g BEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2Vv dHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwDQYJKoZIhvcNAQEFBQADggEBAC4uiQrM leyAVO+RD4Q8O/lt6Y2ybFGP/CTkPRR36Kp8jHtO7IbtAhFIUOtvwCTk6MWpxNDS IMNN5k14KAbHYQK/QkfRsrTMMJSjs1KLXc2z7XTzkhdQ3dziKV+iZdUIgnrd1fsG OPslL8DJ4oK53kVNLBMF0Dd7dx0Nmyz+AdeCs6NaZqglDcCW6s0hPe6Y4AAkV4Xh M1V/cnN9zNXkUzlEeLCsOoBiJR8Dnc7FBu33es7qHTKuRu8xQeYIOS0tNmfkrHus CRMxywYbqzMJmwcDToO6EnJmucmWCadnfPfIs1fCOsMKdnpWr9ElwG2lIQ4DICcn W+kOn2T5n50EbJ4= -----END CERTIFICATE----- INTERMEDIATE CA: --------------------------------------- -----BEGIN CERTIFICATE----- MIID2TCCAsGgAwIBAgIDAjbQMA0GCSqGSIb3DQEBBQUAMEIxCzAJBgNVBAYTAlVT MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9i YWwgQ0EwHhcNMTAwMjE5MjIzOTI2WhcNMjAwMjE4MjIzOTI2WjBAMQswCQYDVQQG EwJVUzEXMBUGA1UEChMOR2VvVHJ1c3QsIEluYy4xGDAWBgNVBAMTD0dlb1RydXN0 IFNTTCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJCzgMHk5Uat cGA9uuUU3Z6KXot1WubKbUGlI+g5hSZ6p1V3mkihkn46HhrxJ6ujTDnMyz1Hr4Gu FmpcN+9FQf37mpc8oEOdxt8XIdGKolbCA0mEEoE+yQpUYGa5jFTk+eb5lPHgX3UR 8im55IaisYmtph6DKWOy8FQchQt65+EuDa+kvc3nsVrXjAVaDktzKIt1XTTYdwvh dGLicTBi2LyKBeUxY0pUiWozeKdOVSQdl+8a5BLGDzAYtDRN4dgjOyFbLTAZJQ50 96QhS6CkIMlszZhWwPKoXz4mdaAN+DaIiixafWcwqQ/RmXAueOFRJq9VeiS+jDkN d53eAsMMvR8CAwEAAaOB2TCB1jAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFEJ5 VBthzVUrPmPVPEhX9Z/7Rc5KMB8GA1UdIwQYMBaAFMB6mGiNifurBWQMEX2qfWW4 ysxOMBIGA1UdEwEB/wQIMAYBAf8CAQAwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDov L2NybC5nZW90cnVzdC5jb20vY3Jscy9ndGdsb2JhbC5jcmwwNAYIKwYBBQUHAQEE KDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nZW90cnVzdC5jb20wDQYJKoZI hvcNAQEFBQADggEBANTvU4ToGr2hiwTAqfVfoRB4RV2yV2pOJMtlTjGXkZrUJPji J2ZwMZzBYlQG55cdOprApClICq8kx6jEmlTBfEx4TCtoLF0XplR4TEbigMMfOHES 0tdT41SFULgCy+5jOvhWiU1Vuy7AyBh3hjELC3DwfjWDpCoTZFZnNF0WX3OsewYk 2k9QbSqr0E1TQcKOu3EDSSmGGM8hQkx0YlEVxW+o78Qn5Rsz3VqI138S0adhJR/V 4NwdzxoQ2KDLX4z6DOW/cf/lXUQdpj6HR/oaToODEj+IZpWYeZqF6wJHzSXj8gYE TpnKXKBuervdo5AaRTPvvz7SBMS24CqFZUE+ENQ= -----END CERTIFICATE-----