wiki:mfpl-x509-certificate-list

This page was created for followup to heartbleed and Ticket #8929. It's a list of x509 certificates for mfpl servers. A script for updating x509 certificates can be found here support-team/update-ssl-certificate

apache x509 production certificates setup by MF/PL staff/volunteers

The following table was generated by running mf-find-https-certificates, and removing a few columns. It's limited to rows where the subject contains "mayfirst.org"

To build this list, I checked the list of hosts in ticket:8929#comment:11

hostname subject_name subject_altname issuer assigned to status vulnerable from
albizu albizu.mayfirst.org DNS:albizu.mayfirst.org, DNS:www.albizu.mayfirst.org COMODO CA Limited ross DONE Mar 1
annapurna annapurna.mayfirst.org DNS:annapurna.mayfirst.org, DNS:www.annapurna.mayfirst.org COMODO CA Limited ross DONE Sep 19 2013
annette annette.mayfirst.org DNS:annette.mayfirst.org, DNS:www.annette.mayfirst.org COMODO CA Limited ross DONE Mar 1
barghouti barghouti.mayfirst.org DNS:barghouti.mayfirst.org, DNS:www.barghouti.mayfirst.org COMODO CA Limited ross DONE Mar 1
binh binh.mayfirst.org DNS:binh.mayfirst.org GeoTrust, Inc. ross DONE Mar 1
boggs boggs.mayfirst.org DNS:boggs.mayfirst.org, DNS:www.boggs.mayfirst.org COMODO CA Limited ross DONE Mar 1
brown brown.mayfirst.org DNS:brown.mayfirst.org GeoTrust, Inc. srevilak DONE - REISSUED CRT Mar 1
buffy buffy.mayfirst.org DNS:buffy.mayfirst.org GeoTrust, Inc. ross DONE - NEW CERTIFICATE Mar 1
cero webmail.mayfirst.org DNS:webmail.mayfirst.org GeoTrust, Inc. jamie DONE not-wheezy
chavez mayfirst.org DNS:mayfirst.org GeoTrust, Inc. ross DONE Mar 1
chavez chavez.mayfirst.org DNS:chavez.mayfirst.org, DNS:www.chavez.mayfirst.org COMODO CA Limited ross DONE Mar 1
chelsea chelsea.mayfirst.org DNS:chelsea.mayfirst.org, DNS:www.chelsea.mayfirst.org COMODO CA Limited ross DONE Aug 25 2013
clara jamie DONE Mar 1
colin colin.mayfirst.org srevilak DONE - new crt Mar 1
daza daza.mayfirst.org DNS:daza.mayfirst.org, DNS:www.daza.mayfirst.org COMODO CA Limited ross DONE Mar 1
debs debs.mayfirst.org srevilak DONE - new crt Mar 1
didier didier.mayfirst.org DNS:didier.mayfirst.org, DNS:www.didier.mayfirst.org COMODO CA Limited ross DONE Mar 1
dorothy dorothy.mayfirst.org DNS:dorothy.mayfirst.org, DNS:www.dorothy.mayfirst.org COMODO CA Limited ross DONE Mar 1
eagle eagle.mayfirst.org DNS:eagle.mayfirst.org, DNS:www.eagle.mayfirst.org COMODO CA Limited ross DONE Mar 1
foucault foucault.mayfirst.org DNS:foucault.mayfirst.org GeoTrust, Inc. srevilak DONE - REISSUED CRT Mar 1
gaspar gaspar.mayfirst.org DNS:gaspar.mayfirst.org GeoTrust, Inc. srevilak DONE - REISSUED CRT Mar 1
gil mail.mayfirst.org DNS:mail.mayfirst.org GeoTrust, Inc. jamie DONE Nov 5 2013
goldman goldman.mayfirst.org DNS:goldman.mayfirst.org, DNS:www.goldman.mayfirst.org COMODO CA Limited ross DONE Mar 1
hammer hammer.mayfirst.org DNS:hammer.mayfirst.org, DNS:www.hammer.mayfirst.org COMODO CA Limited ross DONE Sep 8 2013
jojobe mayfirst.org (SAME AS ON CHAVEZ) DNS:mayfirst.org GeoTrust, Inc. ross DONE Oct 5 2013
jojobe fedcam.mayfirst.org May First jamie DONE Oct 5 2013
jojobe monitor.mayfirst.org DNS:monitor.mayfirst.org GeoTrust, Inc. jamie DONE Oct 5 2013
jojobe status.dev.mayfirst.org DNS:status.dev.mayfirst.org May First jamie (self-sign) Oct 5 2013
jojobe status.mayfirst.org DNS:status.mayfirst.org GeoTrust, Inc. Oct 5 2013
julia julia.mayfirst.org DNS:julia.mayfirst.org, DNS:www.julia.mayfirst.org COMODO CA Limited ross DONE Mar 1
june june.mayfirst.org DNS:june.mayfirst.org GeoTrust, Inc. srevilak DONE - REISSUED CRT Mar 1
kahlo kahlo.mayfirst.org DNS:kahlo.mayfirst.org, DNS:www.kahlo.mayfirst.org COMODO CA Limited ross DONE Jun 8 2013
kerr kerr.mayfirst.org DNS:kerr.mayfirst.org, DNS:www.kerr.mayfirst.org COMODO CA Limited srevilak DONE - new crt Mar 1
kinoy kinoy.mayfirst.org DNS:kinoy.mayfirst.org, DNS:www.kinoy.mayfirst.org COMODO CA Limited ross DONE Mar 1
lewis lewis.mayfirst.org DNS:lewis.mayfirst.org, DNS:www.lewis.mayfirst.org COMODO CA Limited Mar 29
lucius share.mayfirst.org DNS:share.mayfirst.org, DNS:www.share.mayfirst.org COMODO CA Limited ross waiting for reissued cert Jun 13 2013
lucy lucy.mayfirst.org May First srevilak DONE - NEW CRT Apr 5
lumumba lumumba.mayfirst.org DNS:lumumba.mayfirst.org GeoTrust, Inc. ross DONE - NEW CERTIFICATE Apr 5
magon magon.mayfirst.org DNS:magon.mayfirst.org GeoTrust, Inc. ross DONE - NEW CERTIFICATE Apr 5
malcolm malcolm.mayfirst.org DNS:malcolm.mayfirst.org GeoTrust, Inc. ross DONE - NEW CERTIFICATE Feb 1
mandela mandela.mayfirst.org DNS:mandela.mayfirst.org, DNS:www.mandela.mayfirst.org COMODO CA Limited ross DONE Apr 5
marx marx.mayfirst.org DNS:marx.mayfirst.org GeoTrust, Inc. ross DONE - NEW CERTIFICATE Apr 5
mcchesney mcchesney.mayfirst.org jamie snake oil: re-issue not needed Feb 27 2013
mcchesney im.mayfirst.org DNS:im.mayfirst.org GeoTrust, Inc. jamie DONE Feb 27 2013
mcchesney live.mayfirst.org DNS:live.mayfirst.org GeoTrust, Inc. ross DONE Feb 27 2013
mcchesney calc.mayfirst.org DNS:calc.mayfirst.org GeoTrust, Inc. ross DONE Feb 27 2013
menchu menchu.mayfirst.org DNS:menchu.mayfirst.org GeoTrust, Inc. ross DONE - NEW CERTIFICATE Apr 5
molina molina.mayfirst.org DNS:molina.mayfirst.org GeoTrust, Inc. ross DONE - NEW CERTIFICATE Apr 5
moses support.mayfirst.org DNS:support.mayfirst.org, DNS:www.support.mayfirst.org COMODO CA Limited ross DONE Oct 5 2013
ossie ossie.mayfirst.org DNS:ossie.mayfirst.org, DNS:www.ossie.mayfirst.org COMODO CA Limited ross DONE Feb 23
paulo mail.mayfirst.org DNS:mail.mayfirst.org GeoTrust, Inc. jamie DONE Nov 8 2013
proudhon proudhon.mayfirst.org DNS:proudhon.mayfirst.org GeoTrust, Inc. srevilak DONE - REISSUED CRT Apr 5
randolph randolph.mayfirst.org DNS:randolph.mayfirst.org, DNS:www.randolph.mayfirst.org COMODO CA Limited ross DONE Dec 29 2013
rivera rivera.mayfirst.org DNS:rivera.mayfirst.org GeoTrust, Inc. srevilak DONE - REISSUED CRT Apr 5
rodolpho outreach.mayfirst.org DNS:outreach.mayfirst.org, DNS:www.outreach.mayfirst.org COMODO CA Limited ross CANT FIND WHERE CERT WAS ORDERED Apr 5
rodolpho rodolpho.mayfirst.org DNS:rodolpho.mayfirst.org, DNS:www.rodolpho.mayfirst.org COMODO CA Limited ross DONE Apr 5
rose rose.mayfirst.org DNS:rose.mayfirst.org GeoTrust, Inc. ross DONE - NEW CERTIFICATE Nov 2 2013
rushdie rushdie.mayfirst.org DNS:rushdie.mayfirst.org, DNS:www.rushdie.mayfirst.org COMODO CA Limited ross DONE Apr 5
sojourner sojourner.mayfirst.org DNS:sojourner.mayfirst.org, DNS:www.sojourner.mayfirst.org COMODO CA Limited ross DONE Apr 5
stokely stokely.mayfirst.org DNS:stokely.mayfirst.org GeoTrust, Inc. srevilak DONE - REISSUED CRT Apr 5
stone stone.mayfirst.org DNS:stone.mayfirst.org, DNS:www.stone.mayfirst.org COMODO CA Limited ross DONE Apr 5
stoney stoney.mayfirst.org DNS:stoney.mayfirst.org GeoTrust, Inc. ross DONE - NEW CERTIFICATE Apr 5
tresca tresca.mayfirst.org DNS:tresca.mayfirst.org, DNS:www.tresca.mayfirst.org COMODO CA Limited ross DONE Apr 5
viewsic tdu.mayfirst.org DNS:tdu.mayfirst.org, DNS:www.tdu.mayfirst.org COMODO CA Limited jamie DONE Apr 5
viewsic viewsic.mayfirst.org DNS:viewsic.mayfirst.org GeoTrust, Inc. ross DONE - NEW CERTIFICATE Apr 5
wolf wolf.mayfirst.org ross DONE - NEW CERTIFICATE Apr 5
yippie yippie.mayfirst.org DNS:yippie.mayfirst.org, DNS:www.yippie.mayfirst.org COMODO CA Limited ross DONE Apr 5

apache x509 dev or testing certificates setup by MF/PL staff/volunteers

hostname homedir basename subject_name subject_altname issuer assigned to status vulnerable from
praxedis praxedis.mayfirst.org Nov 3 2013
haring haring.mayfirst.org DNS:haring.mayfirst.org Jun 25
rose red.dev.mayfirst.org DNS:red.dev.mayfirst.org jamie (self-sign) Nov 2 2013

member (non mayfirst.org) x509 certificates

hostname homedir basename subject_name subject_altname issuer assigned to status vulnerable from
albizu /guillen buildingpower.org May First
albizu /lacrew lacrew.org May First
albizu /scworkers www.syracuseculturalworkers.com DNS:www.syracuseculturalworkers.com, DNS:syracuseculturalworkers.com DigiCert Inc
albizu /scworkers syracuseculturalworkers.com DNS:syracuseculturalworkers.com, DNS:www.syracuseculturalworkers.com DigiCert Inc
banksy /home/tmwrk/ asb.yeslab.org DNS:asb.yeslab.org, DNS:www.asb.yeslab.org COMODO CA Limited May 24 2013
banksy /home/tmwrk beta.actionswitchboard.net DNS:beta.actionswitchboard.net, DNS:www.beta.actionswitchboard.net COMODO CA Limited May 24 2013
barghouti /wedivest wedivest.org DNS:wedivest.org, DNS:www.wedivest.org COMODO CA Limited
binh /cmcmarin cmcm.tv DNS:cmcm.tv GeoTrust, Inc.
buffy /staples *.disman.tl DNS:*.disman.tl, DNS:disman.tl StartCom Ltd.
buffy /revilak www.srevilak.net DNS:www.srevilak.net, DNS:srevilak.net srevilak.net srevilak
chavez /warresisters www.warresisters.org DNS:www.warresisters.org Network Solutions L.L.C.
chavez /harlemrbi www.harlemrbi.org DNS:www.harlemrbi.org Network Solutions L.L.C.
chelsea /upsetting *.themonumentquilt.org DNS:*.themonumentquilt.org, DNS:themonumentquilt.org StartCom Ltd.
chelsea /uws ibew25.org DNS:ibew25.org GeoTrust, Inc.
chelsea /usi usilive.org DNS:usilive.org, DNS:www.usilive.org COMODO CA Limited
chelsea /staples *.disman.tl DNS:*.disman.tl, DNS:disman.tl StartCom Ltd.
chelsea /uws www.local137.com DNS:www.local137.com, DNS:local137.com GeoTrust, Inc.
chelsea /usi on.usilive.org DNS:on.usilive.org, DNS:www.on.usilive.org COMODO CA Limited
chelsea /uws ibew177.org DNS:ibew177.org GeoTrust, Inc.
daza /unitedautoworkers uawlupaconference.org DNS:uawlupaconference.org, DNS:www.uawlupaconference.org GoDaddy.com, Inc.
daza /unitedautoworkers *.uawsolidweb.org DNS:*.uawsolidweb.org, DNS:uawsolidweb.org GoDaddy.com, Inc.
daza /unitedautoworkers *.uawsolidweb.org DNS:*.uawsolidweb.org, DNS:uawsolidweb.org GoDaddy.com, Inc.
daza /ggjalliance grassrootsclimatesolutions.net DNS:grassrootsclimatesolutions.net, DNS:www.grassrootsclimatesolutions.net COMODO CA Limited
daza /unitedautoworkers *.uawsolidweb.org DNS:*.uawsolidweb.org, DNS:uawsolidweb.org GoDaddy.com, Inc.
daza /unitedautoworkers uawcapconference.org DNS:uawcapconference.org, DNS:www.uawcapconference.org GoDaddy.com, Inc.
didier /fight www.critpath.org DNS:www.critpath.org, DNS:critpath.org GeoTrust, Inc.
didier /fight www.fight.org DNS:www.fight.org, DNS:fight.org GeoTrust, Inc.
didier /fight www.aidseducationmonth.org DNS:www.aidseducationmonth.org, DNS:aidseducationmonth.org GeoTrust, Inc.
didier /etc/ssl/private/secure.critpath.org.pem secure.critpath.org Thawte, Inc.
dorothy /legalactioncenter www.hirenetwork.org DNS:www.hirenetwork.org, DNS:hirenetwork.org GeoTrust, Inc.
dorothy /sfrisingaction www.sanfranciscorising.org DNS:www.sanfranciscorising.org, DNS:sanfranciscorising.org GeoTrust, Inc.
dorothy /stephenmahood cyberunions.org DNS:cyberunions.org, DNS:www.cyberunions.org COMODO CA Limited
dorothy /progressivetech *.ourpowerbase.net DNS:*.ourpowerbase.net, DNS:ourpowerbase.net GeoTrust, Inc.
dorothy /intercontinentalcry intercontinentalcry.org DNS:intercontinentalcry.org, DNS:www.intercontinentalcry.org COMODO CA Limited
dorvalina /etc/ssl/private/wildcard.ourpowerbase.net.key *.ourpowerbase.net DNS:*.ourpowerbase.net, DNS:ourpowerbase.net COMODO CA Limited jamie DONE Jun 8 2013
eagle /quixote quixote.org DNS:quixote.org, DNS:www.quixote.org GoDaddy.com, Inc.
goldman /nesri www.nesri.org DNS:www.nesri.org, DNS:nesri.org GoDaddy.com, Inc.
hammer /glocalcoop accounting.glocal.coop Glocal
hammer /glocalcoop sync.glocal.coop DNS:sync.glocal.coop, DNS:www.sync.glocal.coop COMODO CA Limited
julia /kafoundation www.nobelprize4pete.org DNS:www.nobelprize4pete.org, DNS:nobelprize4pete.org GeoTrust, Inc.
june /communitystudies ccss.performanceassessment.org DNS:ccss.performanceassessment.org, DNS:www.ccss.performanceassessment.org GANDI SAS
june /voterevbilly www.voterevbilly.org Equifax
june /altroots alternateroots.org DNS:alternateroots.org, DNS:www.alternateroots.org COMODO CA Limited
june /cpasf www.cpasf.org DNS:www.cpasf.org, DNS:cpasf.org GeoTrust, Inc.
kahlo /nacla nacla.org DNS:nacla.org, DNS:www.nacla.org COMODO CA Limited
kerr /occupytampa *.occupytampa.org DNS:*.occupytampa.org, othername:<unsupported>, DNS:*.occupytampa.org, othername:<unsupported>, DNS:occupytampa.org, othername:<unsupported> Root CA
kerr /occupytampa *.occupytampa.org DNS:*.occupytampa.org, othername:<unsupported>, DNS:*.occupytampa.org, othername:<unsupported>, DNS:occupytampa.org, othername:<unsupported> Root CA
kerr /occupyarlingtonma www.occupyarlingtonma.org DNS:www.occupyarlingtonma.org, DNS:occupyarlingtonma.org Occupy Arlington srevilak
kinoy /nlg nlg.org DNS:nlg.org, DNS:www.nlg.org COMODO CA Limited
lumumba thenotebook thenotebook.org DNS:thenotebook.org GeoTrust, Inc.
malcolm /globalaction global-action.org DNS:global-action.org, DNS:www.global-action.org COMODO CA Limited
malcolm /nacla nacla.org DNS:nacla.org, DNS:www.nacla.org COMODO CA Limited
mandela /nhlp nhlp.org DNS:nhlp.org, DNS:www.nhlp.org GoDaddy.com, Inc.
marx /apc *.takebackthetech.net DNS:*.takebackthetech.net, DNS:takebackthetech.net GeoTrust, Inc.
marx /apc *.takebackthetech.net DNS:*.takebackthetech.net, DNS:takebackthetech.net GeoTrust, Inc.
marx /apc *.takebackthetech.net DNS:*.takebackthetech.net, DNS:takebackthetech.net GeoTrust, Inc.
marx /apc *.takebackthetech.net DNS:*.takebackthetech.net, DNS:takebackthetech.net GeoTrust, Inc.
marx /apc *.takebackthetech.net DNS:*.takebackthetech.net, DNS:takebackthetech.net GeoTrust, Inc.
marx /apc *.takebackthetech.net DNS:*.takebackthetech.net, DNS:takebackthetech.net GeoTrust, Inc.
marx /apc *.takebackthetech.net DNS:*.takebackthetech.net, DNS:takebackthetech.net GeoTrust, Inc.
marx /apc *.takebackthetech.net DNS:*.takebackthetech.net, DNS:takebackthetech.net GeoTrust, Inc.
marx /jvp jewishvoiceforpeace.org DNS:jewishvoiceforpeace.org, DNS:www.jewishvoiceforpeace.org COMODO CA Limited
marx /apc *.takebackthetech.net DNS:*.takebackthetech.net, DNS:takebackthetech.net GeoTrust, Inc.
marx gwc-wiki.mayfirst.org GWC
olivera /var/aegir/config/ssl.d/aegir.ourpowerbase.net/openssl.key *.ourpowerbase.net DNS:*.ourpowerbase.net, DNS:ourpowerbase.net COMODO CA Limited Mar 21
ossie /revilak crm.srevilak.net DNS:crm.srevilak.net, DNS:*.crm.srevilak.net srevilak crm srevilak
rodolpho /nfreitas guardianproject.info DNS:guardianproject.info, DNS:www.guardianproject.info GANDI SAS
rodolpho /lannan sharelf.com DNS:sharelf.com Equifax
rodolpho /tibetaction tibetaction.net DNS:tibetaction.net, DNS:www.tibetaction.net COMODO CA Limited
rodolpho /sbloc www.startingbloc.org DNS:www.startingbloc.org, DNS:startingbloc.org GeoTrust, Inc.
rose /masspirateparty masspirates.org DNS:masspirates.org Massachusetts Pirate Party srevilak crt updated
rose /brianduggan dugga.net. Internet Widgits Pty Ltd
rose /socialscicentre socialsciencecentre.org.uk Social Science Centre, Lincoln
rose /josswinn josswinn.org May First
rushdie /altroots alternateroots.org DNS:alternateroots.org, DNS:www.alternateroots.org COMODO CA Limited
simone NO Access by support team (Agaric server)
slaapbeen /etc/ssl/private/slaapbeen.tachanka.org.pem slaapbeen.tachanka.org Apr 5
slaapbeen /etc/ssl/private/mappingthecorporations.org.key mappingthecorporations.org DNS:mappingthecorporations.org, DNS:www.mappingthecorporations.org COMODO CA Limited Apr 5
slaapbeen /etc/ssl/private/zastroikaby.pem zastroikaby.org DNS:zastroikaby.org, DNS:www.zastroikaby.org GANDI SAS Apr 5
sojourner /etc/ssl/private/fcifriends.key fcifriends.org DNS:fcifriends.org GeoTrust, Inc.
sojourner /etc/ssl/private/drtbnetwork.key www.drtbnetwork.org DNS:www.drtbnetwork.com, DNS:drtbnetwork.com, DNS:www.drtbnetwork.org, DNS:drtbnetwork.org GeoTrust, Inc.
stone /guillen asg.mafirst.org ASG
stone /occucopy occucopy.org DNS:occucopy.org GeoTrust, Inc.
stone /mlp medialiteracyproject.org DNS:medialiteracyproject.org GeoTrust Inc.
stoney /nyccah nyccah.org DNS:nyccah.org, DNS:www.nyccah.org COMODO CA Limited
tresca /brechtforum brechtforum.org DNS:brechtforum.org GeoTrust, Inc.
viewsic /portside donate.portside.org DNS:donate.portside.org, DNS:www.donate.portside.org COMODO CA Limited
viewsic /portside portside.org DNS:portside.org, DNS:www.portside.org COMODO CA Limited
yser linksunten DONE Apr 8
Last modified 5 years ago Last modified on May 2, 2014, 9:53:58 AM