This page was created for followup to [wiki:heartbleed] and Ticket #8929. It's a list of x509 certificates for mfpl servers. A script for updating x509 certificates can be found here [wiki:support-team/update-ssl-certificate] == apache x509 certificates for *.mayfirst.org == The following table was generated by running {{{mf-find-https-certificates}}}, and removing a few columns. It's limited to rows where the subject contains "mayfirst.org" To build this list, I checked the list of hosts in ticket:8929#comment:11, ''excluding'' clara and yser. ||=hostname =||=subject_name =||=subject_altname =||=issuer =||=assigned to=||=status =|| ||albizu ||albizu.mayfirst.org ||DNS:albizu.mayfirst.org, DNS:www.albizu.mayfirst.org ||COMODO CA Limited || ross || DONE ||annapurna ||annapurna.mayfirst.org ||DNS:annapurna.mayfirst.org, DNS:www.annapurna.mayfirst.org ||COMODO CA Limited || ross || DONE ||annette ||annette.mayfirst.org ||DNS:annette.mayfirst.org, DNS:www.annette.mayfirst.org ||COMODO CA Limited || ross || DONE ||barghouti ||barghouti.mayfirst.org ||DNS:barghouti.mayfirst.org, DNS:www.barghouti.mayfirst.org ||COMODO CA Limited || ross || DONE ||binh ||binh.mayfirst.org ||DNS:binh.mayfirst.org ||GeoTrust, Inc. || ross || DONE || ||boggs ||boggs.mayfirst.org ||DNS:boggs.mayfirst.org, DNS:www.boggs.mayfirst.org ||COMODO CA Limited || ross || DONE ||brown ||brown.mayfirst.org ||DNS:brown.mayfirst.org ||GeoTrust, Inc. || srevilak || DONE - REISSUED CRT || ||buffy ||buffy.mayfirst.org ||DNS:buffy.mayfirst.org ||GeoTrust, Inc. || ross || DONE - NEW CERTIFICATE || ||cero ||webmail.mayfirst.org ||DNS:webmail.mayfirst.org ||GeoTrust, Inc. || jamie || DONE || ||chavez ||mayfirst.org ||DNS:mayfirst.org ||GeoTrust, Inc. || ross || CAN'T FIND WERE CERT WAS ORDERED || ||chavez ||chavez.mayfirst.org ||DNS:chavez.mayfirst.org, DNS:www.chavez.mayfirst.org ||COMODO CA Limited || ross || DONE || ||chelsea ||chelsea.mayfirst.org ||DNS:chelsea.mayfirst.org, DNS:www.chelsea.mayfirst.org ||COMODO CA Limited || ross || DONE || || clara || ??? || ||colin ||colin.mayfirst.org || || || srevilak || DONE - new crt || ||daza ||daza.mayfirst.org ||DNS:daza.mayfirst.org, DNS:www.daza.mayfirst.org ||COMODO CA Limited || ross || DONE || ||debs ||debs.mayfirst.org || || || srevilak || DONE - new crt || ||didier ||didier.mayfirst.org ||DNS:didier.mayfirst.org, DNS:www.didier.mayfirst.org ||COMODO CA Limited || ross || DONE || ||dorothy ||dorothy.mayfirst.org ||DNS:dorothy.mayfirst.org, DNS:www.dorothy.mayfirst.org ||COMODO CA Limited || ross || DONE || ||eagle ||eagle.mayfirst.org ||DNS:eagle.mayfirst.org, DNS:www.eagle.mayfirst.org ||COMODO CA Limited || ross || DONE || ||foucault ||foucault.mayfirst.org ||DNS:foucault.mayfirst.org ||GeoTrust, Inc. || srevilak || DONE - REISSUED CRT || ||gaspar ||gaspar.mayfirst.org ||DNS:gaspar.mayfirst.org ||GeoTrust, Inc. || srevilak || DONE - REISSUED CRT || ||gil ||mail.mayfirst.org ||DNS:mail.mayfirst.org ||GeoTrust, Inc. || jamie || DONE || ||goldman ||goldman.mayfirst.org ||DNS:goldman.mayfirst.org, DNS:www.goldman.mayfirst.org ||COMODO CA Limited || ross || DONE || ||hammer ||hammer.mayfirst.org ||DNS:hammer.mayfirst.org, DNS:www.hammer.mayfirst.org ||COMODO CA Limited || ross || DONE || ||haring ||haring.mayfirst.org ||DNS:haring.mayfirst.org || ||jojobe ||mayfirst.org (SAME AS ON CHAVEZ) ||DNS:mayfirst.org ||GeoTrust, Inc. || ross || CAN'T FIND WHERE CERT WAS ORDERED || ||jojobe ||fedcam.mayfirst.org || ||May First || ||jojobe ||monitor.mayfirst.org ||DNS:monitor.mayfirst.org ||GeoTrust, Inc. || ||jojobe ||status.dev.mayfirst.org ||DNS:status.dev.mayfirst.org ||May First || jamie (self-sign) || || ||jojobe ||status.mayfirst.org ||DNS:status.mayfirst.org ||GeoTrust, Inc. || ||julia ||julia.mayfirst.org ||DNS:julia.mayfirst.org, DNS:www.julia.mayfirst.org ||COMODO CA Limited || ross || DONE || ||june ||june.mayfirst.org ||DNS:june.mayfirst.org ||GeoTrust, Inc. || srevilak || DONE - REISSUED CRT || ||kahlo ||kahlo.mayfirst.org ||DNS:kahlo.mayfirst.org, DNS:www.kahlo.mayfirst.org ||COMODO CA Limited || ross || DONE || ||kerr ||kerr.mayfirst.org ||DNS:kerr.mayfirst.org, DNS:www.kerr.mayfirst.org ||COMODO CA Limited || srevilak || DONE - new crt || ||kinoy ||kinoy.mayfirst.org ||DNS:kinoy.mayfirst.org, DNS:www.kinoy.mayfirst.org ||COMODO CA Limited || ross || DONE || ||lewis ||lewis.mayfirst.org ||DNS:lewis.mayfirst.org, DNS:www.lewis.mayfirst.org ||COMODO CA Limited || ||lucius ||share.mayfirst.org ||DNS:share.mayfirst.org, DNS:www.share.mayfirst.org ||COMODO CA Limited || ross || waiting for reissued cert || ||lucy ||lucy.mayfirst.org || ||May First || srevilak || DONE - NEW CRT || ||lumumba ||lumumba.mayfirst.org ||DNS:lumumba.mayfirst.org ||GeoTrust, Inc. || ross || DONE - NEW CERTIFICATE || ||magon ||magon.mayfirst.org ||DNS:magon.mayfirst.org ||GeoTrust, Inc. || ross || DONE - NEW CERTIFICATE || ||malcolm ||malcolm.mayfirst.org ||DNS:malcolm.mayfirst.org ||GeoTrust, Inc. || ross || DONE - NEW CERTIFICATE || ||mandela ||mandela.mayfirst.org ||DNS:mandela.mayfirst.org, DNS:www.mandela.mayfirst.org ||COMODO CA Limited || ross || DONE || ||marx ||gwc-wiki.mayfirst.org || ||GWC || ||marx ||marx.mayfirst.org ||DNS:marx.mayfirst.org ||GeoTrust, Inc. || ross || DONE - NEW CERTIFICATE || ||mcchesney ||mcchesney.mayfirst.org || || || jamie ||(snake oil) || ||mcchesney ||im.mayfirst.org ||DNS:im.mayfirst.org ||GeoTrust, Inc. || jamie || DONE || ||mcchesney ||live.mayfirst.org ||DNS:live.mayfirst.org ||GeoTrust, Inc. || ross || DONE || ||mcchesney ||calc.mayfirst.org ||DNS:calc.mayfirst.org ||GeoTrust, Inc. || ross || DONE || ||menchu ||menchu.mayfirst.org ||DNS:menchu.mayfirst.org ||GeoTrust, Inc. || ross || DONE - NEW CERTIFICATE || ||molina ||molina.mayfirst.org ||DNS:molina.mayfirst.org ||GeoTrust, Inc. || ross || DONE - NEW CERTIFICATE || ||moses ||support.mayfirst.org ||DNS:support.mayfirst.org, DNS:www.support.mayfirst.org ||COMODO CA Limited || ross || DONE || ||ossie ||ossie.mayfirst.org ||DNS:ossie.mayfirst.org, DNS:www.ossie.mayfirst.org ||COMODO CA Limited || ross || DONE || ||paulo ||mail.mayfirst.org ||DNS:mail.mayfirst.org ||GeoTrust, Inc. || jamie || DONE || ||praxedis ||praxedis.mayfirst.org || || ||proudhon ||proudhon.mayfirst.org ||DNS:proudhon.mayfirst.org ||GeoTrust, Inc. || srevilak || DONE - REISSUED CRT || ||randolph ||randolph.mayfirst.org ||DNS:randolph.mayfirst.org, DNS:www.randolph.mayfirst.org ||COMODO CA Limited || ross || DONE || ||rivera ||rivera.mayfirst.org ||DNS:rivera.mayfirst.org ||GeoTrust, Inc. || srevilak || DONE - REISSUED CRT || ||rodolpho ||outreach.mayfirst.org ||DNS:outreach.mayfirst.org, DNS:www.outreach.mayfirst.org ||COMODO CA Limited || ross || CANT FIND WHERE CERT WAS ORDERED || ||rodolpho ||rodolpho.mayfirst.org ||DNS:rodolpho.mayfirst.org, DNS:www.rodolpho.mayfirst.org ||COMODO CA Limited || ross || DONE || ||rose ||rose.mayfirst.org ||DNS:rose.mayfirst.org ||GeoTrust, Inc. || ross || DONE - NEW CERTIFICATE || ||rose ||red.dev.mayfirst.org ||DNS:red.dev.mayfirst.org || || jamie (self-sign) || || ||rushdie ||rushdie.mayfirst.org ||DNS:rushdie.mayfirst.org, DNS:www.rushdie.mayfirst.org ||COMODO CA Limited || ross || DONE || ||sojourner ||sojourner.mayfirst.org ||DNS:sojourner.mayfirst.org, DNS:www.sojourner.mayfirst.org ||COMODO CA Limited || ross || DONE || || simone || ??? || ||stokely ||stokely.mayfirst.org ||DNS:stokely.mayfirst.org ||GeoTrust, Inc. || srevilak || DONE - REISSUED CRT || ||stone ||stone.mayfirst.org ||DNS:stone.mayfirst.org, DNS:www.stone.mayfirst.org ||COMODO CA Limited || ross || DONE || ||stoney ||stoney.mayfirst.org ||DNS:stoney.mayfirst.org ||GeoTrust, Inc. || ross || DONE - NEW CERTIFICATE || ||tresca ||tresca.mayfirst.org ||DNS:tresca.mayfirst.org, DNS:www.tresca.mayfirst.org ||COMODO CA Limited || ross || DONE || ||viewsic ||tdu.mayfirst.org ||DNS:tdu.mayfirst.org, DNS:www.tdu.mayfirst.org ||COMODO CA Limited || jamie || DONE || ||viewsic ||viewsic.mayfirst.org ||DNS:viewsic.mayfirst.org ||GeoTrust, Inc. || ross || DONE - NEW CERTIFICATE || ||wolf ||wolf.mayfirst.org || || || ross || DONE - NEW CERTIFICATE || ||woodhull ||woodhull.mayfirst.org || || || || appears to be missing safe.csr file? || ||yippie ||yippie.mayfirst.org ||DNS:yippie.mayfirst.org, DNS:www.yippie.mayfirst.org ||COMODO CA Limited || ross || DONE || || yser || ??? || == member (non mayfirst.org) x509 certificates == || hostname || homedir basename || subject_name || subject_altname || issuer || assigned to || status || || albizu || /guillen || buildingpower.org || || May First || || albizu || /lacrew || lacrew.org || || May First || || albizu || /scworkers || www.syracuseculturalworkers.com || DNS:www.syracuseculturalworkers.com, DNS:syracuseculturalworkers.com || DigiCert Inc || || albizu || /scworkers || syracuseculturalworkers.com || DNS:syracuseculturalworkers.com, DNS:www.syracuseculturalworkers.com || DigiCert Inc || || banksy || /home/tmwrk/ || asb.yeslab.org || DNS:asb.yeslab.org, DNS:www.asb.yeslab.org || COMODO CA Limited || || banksy || /home/tmwrk || beta.actionswitchboard.net || DNS:beta.actionswitchboard.net, DNS:www.beta.actionswitchboard.net || COMODO CA Limited || || barghouti || /wedivest || wedivest.org || DNS:wedivest.org, DNS:www.wedivest.org || COMODO CA Limited || || binh || /cmcmarin || cmcm.tv || DNS:cmcm.tv || GeoTrust, Inc. || || buffy || /staples || *.disman.tl || DNS:*.disman.tl, DNS:disman.tl || StartCom Ltd. || || buffy || /revilak || www.srevilak.net || DNS:www.srevilak.net, DNS:srevilak.net || srevilak.net || srevilak || || chavez || /warresisters || www.warresisters.org || DNS:www.warresisters.org || Network Solutions L.L.C. || || chavez || /harlemrbi || www.harlemrbi.org || DNS:www.harlemrbi.org || Network Solutions L.L.C. || || chelsea || /upsetting || *.themonumentquilt.org || DNS:*.themonumentquilt.org, DNS:themonumentquilt.org || StartCom Ltd. || || chelsea || /uws || ibew25.org || DNS:ibew25.org || GeoTrust, Inc. || || chelsea || /usi || usilive.org || DNS:usilive.org, DNS:www.usilive.org || COMODO CA Limited || || chelsea || /staples || *.disman.tl || DNS:*.disman.tl, DNS:disman.tl || StartCom Ltd. || || chelsea || /uws || www.local137.com || DNS:www.local137.com, DNS:local137.com || GeoTrust, Inc. || || chelsea || /usi || on.usilive.org || DNS:on.usilive.org, DNS:www.on.usilive.org || COMODO CA Limited || || chelsea || /uws || ibew177.org || DNS:ibew177.org || GeoTrust, Inc. || || daza || /unitedautoworkers || uawlupaconference.org || DNS:uawlupaconference.org, DNS:www.uawlupaconference.org || GoDaddy.com, Inc. || || daza || /unitedautoworkers || *.uawsolidweb.org || DNS:*.uawsolidweb.org, DNS:uawsolidweb.org || GoDaddy.com, Inc. || || daza || /unitedautoworkers || *.uawsolidweb.org || DNS:*.uawsolidweb.org, DNS:uawsolidweb.org || GoDaddy.com, Inc. || || daza || /ggjalliance || grassrootsclimatesolutions.net || DNS:grassrootsclimatesolutions.net, DNS:www.grassrootsclimatesolutions.net || COMODO CA Limited || || daza || /unitedautoworkers || *.uawsolidweb.org || DNS:*.uawsolidweb.org, DNS:uawsolidweb.org || GoDaddy.com, Inc. || || daza || /unitedautoworkers || uawcapconference.org || DNS:uawcapconference.org, DNS:www.uawcapconference.org || GoDaddy.com, Inc. || || didier || /fight || www.critpath.org || DNS:www.critpath.org, DNS:critpath.org || GeoTrust, Inc. || || didier || /fight || www.fight.org || DNS:www.fight.org, DNS:fight.org || GeoTrust, Inc. || || didier || /fight || www.aidseducationmonth.org || DNS:www.aidseducationmonth.org, DNS:aidseducationmonth.org || GeoTrust, Inc. || || didier || /etc/ssl/private/secure.critpath.org.pem || secure.critpath.org || || Thawte, Inc. || || dorothy || /legalactioncenter || www.hirenetwork.org || DNS:www.hirenetwork.org, DNS:hirenetwork.org || GeoTrust, Inc. || || dorothy || /sfrisingaction || www.sanfranciscorising.org || DNS:www.sanfranciscorising.org, DNS:sanfranciscorising.org || GeoTrust, Inc. || || dorothy || /stephenmahood || cyberunions.org || DNS:cyberunions.org, DNS:www.cyberunions.org || COMODO CA Limited || || dorothy || /progressivetech || *.ourpowerbase.net || DNS:*.ourpowerbase.net, DNS:ourpowerbase.net || GeoTrust, Inc. || || dorothy || /intercontinentalcry || intercontinentalcry.org || DNS:intercontinentalcry.org, DNS:www.intercontinentalcry.org || COMODO CA Limited || || dorvalina || /etc/ssl/private/wildcard.ourpowerbase.net.key || *.ourpowerbase.net || DNS:*.ourpowerbase.net, DNS:ourpowerbase.net || COMODO CA Limited || jamie || DONE || || eagle || /quixote || quixote.org || DNS:quixote.org, DNS:www.quixote.org || GoDaddy.com, Inc. || || goldman || /nesri || www.nesri.org || DNS:www.nesri.org, DNS:nesri.org || GoDaddy.com, Inc. || || hammer || /glocalcoop || accounting.glocal.coop || || Glocal || || hammer || /glocalcoop || sync.glocal.coop || DNS:sync.glocal.coop, DNS:www.sync.glocal.coop || COMODO CA Limited || || julia || /kafoundation || www.nobelprize4pete.org || DNS:www.nobelprize4pete.org, DNS:nobelprize4pete.org || GeoTrust, Inc. || || june || /communitystudies || ccss.performanceassessment.org || DNS:ccss.performanceassessment.org, DNS:www.ccss.performanceassessment.org || GANDI SAS || || june || /voterevbilly || www.voterevbilly.org || || Equifax || || june || /altroots || alternateroots.org || DNS:alternateroots.org, DNS:www.alternateroots.org || COMODO CA Limited || || june || /cpasf || www.cpasf.org || DNS:www.cpasf.org, DNS:cpasf.org || GeoTrust, Inc. || || kahlo || /nacla || nacla.org || DNS:nacla.org, DNS:www.nacla.org || COMODO CA Limited || || kerr || /occupytampa || *.occupytampa.org || DNS:*.occupytampa.org, othername:, DNS:*.occupytampa.org, othername:, DNS:occupytampa.org, othername: || Root CA || || kerr || /occupytampa || *.occupytampa.org || DNS:*.occupytampa.org, othername:, DNS:*.occupytampa.org, othername:, DNS:occupytampa.org, othername: || Root CA || || kerr || /occupyarlingtonma || www.occupyarlingtonma.org || DNS:www.occupyarlingtonma.org, DNS:occupyarlingtonma.org || Occupy Arlington || srevilak || || kinoy || /nlg || nlg.org || DNS:nlg.org, DNS:www.nlg.org || COMODO CA Limited || || lumumba || //thenotebook || thenotebook.org || DNS:thenotebook.org || GeoTrust, Inc. || || malcolm || /globalaction || global-action.org || DNS:global-action.org, DNS:www.global-action.org || COMODO CA Limited || || malcolm || /nacla || nacla.org || DNS:nacla.org, DNS:www.nacla.org || COMODO CA Limited || || mandela || /nhlp || nhlp.org || DNS:nhlp.org, DNS:www.nhlp.org || GoDaddy.com, Inc. || || marx || /apc || *.takebackthetech.net || DNS:*.takebackthetech.net, DNS:takebackthetech.net || GeoTrust, Inc. || || marx || /apc || *.takebackthetech.net || DNS:*.takebackthetech.net, DNS:takebackthetech.net || GeoTrust, Inc. || || marx || /apc || *.takebackthetech.net || DNS:*.takebackthetech.net, DNS:takebackthetech.net || GeoTrust, Inc. || || marx || /apc || *.takebackthetech.net || DNS:*.takebackthetech.net, DNS:takebackthetech.net || GeoTrust, Inc. || || marx || /apc || *.takebackthetech.net || DNS:*.takebackthetech.net, DNS:takebackthetech.net || GeoTrust, Inc. || || marx || /apc || *.takebackthetech.net || DNS:*.takebackthetech.net, DNS:takebackthetech.net || GeoTrust, Inc. || || marx || /apc || *.takebackthetech.net || DNS:*.takebackthetech.net, DNS:takebackthetech.net || GeoTrust, Inc. || || marx || /apc || *.takebackthetech.net || DNS:*.takebackthetech.net, DNS:takebackthetech.net || GeoTrust, Inc. || || marx || /jvp || jewishvoiceforpeace.org || DNS:jewishvoiceforpeace.org, DNS:www.jewishvoiceforpeace.org || COMODO CA Limited || || marx || /apc || *.takebackthetech.net || DNS:*.takebackthetech.net, DNS:takebackthetech.net || GeoTrust, Inc. || || olivera || /var/aegir/config/ssl.d/aegir.ourpowerbase.net/openssl.key || *.ourpowerbase.net || DNS:*.ourpowerbase.net, DNS:ourpowerbase.net || COMODO CA Limited || || ossie || /revilak || crm.srevilak.net || DNS:crm.srevilak.net, DNS:*.crm.srevilak.net || srevilak crm || srevilak || || rodolpho || /nfreitas || guardianproject.info || DNS:guardianproject.info, DNS:www.guardianproject.info || GANDI SAS || || rodolpho || /lannan || sharelf.com || DNS:sharelf.com || Equifax || || rodolpho || /tibetaction || tibetaction.net || DNS:tibetaction.net, DNS:www.tibetaction.net || COMODO CA Limited || || rodolpho || /sbloc || www.startingbloc.org || DNS:www.startingbloc.org, DNS:startingbloc.org || GeoTrust, Inc. || || rose || /masspirateparty || masspirates.org || DNS:masspirates.org || Massachusetts Pirate Party || srevilak || crt updated || || rose || /brianduggan || dugga.net. || || Internet Widgits Pty Ltd || || rose || /socialscicentre || socialsciencecentre.org.uk || || Social Science Centre, Lincoln || || rose || /josswinn || josswinn.org || || May First || || rushdie || /altroots || alternateroots.org || DNS:alternateroots.org, DNS:www.alternateroots.org || COMODO CA Limited || || slaapbeen || /etc/ssl/private/slaapbeen.tachanka.org.pem || slaapbeen.tachanka.org || || || || slaapbeen || /etc/ssl/private/mappingthecorporations.org.key || mappingthecorporations.org || DNS:mappingthecorporations.org, DNS:www.mappingthecorporations.org || COMODO CA Limited || || slaapbeen || /etc/ssl/private/zastroikaby.pem || zastroikaby.org || DNS:zastroikaby.org, DNS:www.zastroikaby.org || GANDI SAS || || sojourner || /etc/ssl/private/fcifriends.key || fcifriends.org || DNS:fcifriends.org || GeoTrust, Inc. || || sojourner || /etc/ssl/private/drtbnetwork.key || www.drtbnetwork.org || DNS:www.drtbnetwork.com, DNS:drtbnetwork.com, DNS:www.drtbnetwork.org, DNS:drtbnetwork.org || GeoTrust, Inc. || || stone || /guillen || asg.mafirst.org || || ASG || || stone || /occucopy || occucopy.org || DNS:occucopy.org || GeoTrust, Inc. || || stone || /mlp || medialiteracyproject.org || DNS:medialiteracyproject.org || GeoTrust Inc. || || stoney || /nyccah || nyccah.org || DNS:nyccah.org, DNS:www.nyccah.org || COMODO CA Limited || || tresca || /brechtforum || brechtforum.org || DNS:brechtforum.org || GeoTrust, Inc. || || viewsic || /portside || donate.portside.org || DNS:donate.portside.org, DNS:www.donate.portside.org || COMODO CA Limited || || viewsic || /portside || portside.org || DNS:portside.org, DNS:www.portside.org || COMODO CA Limited ||