[tech] UCC wildcard certificate

[Matt Johnston]

The ssl certificate for *.ucc.asn.au expires on 11 November.
I've emailed globalsign but they aren't doing wildcards for
open source projects any more. 

letsencrypt.org goes live on November 16 [1], we should be
able to use that for all UCC domains in future (bodge up
zonemake.py a bit more). Perhaps for the 5 day gap we could
take advantage of a 15-day refund on a wildcard certificate
certificates. Anyone got other ideas?

Matt


[1] https://letsencrypt.org/2015/08/07/updated-lets-encrypt-launch-schedule.html
----- Forwarded message from no_reply at globalsign.com -----

Date: Wed, 28 Oct 2015 10:08:46 +0900 (JST)
From: no_reply at globalsign.com
To: wheel at ucc.asn.au
Subject: Reminder: Do not let your GlobalSign SSL Certificate expire
X-Spam-Status: No, hits=0.1 required=5.0 tests=BAYES_50, DKIM_SIGNED,
	DKIM_VALID, 
	DKIM_VALID_AU,RCVD_IN_DNSWL_MED autolearn=no version=3.3.2

--------------------------------------------------
Please note that this e-mail is automatically sent from a noreply mailbox.  
To contact GlobalSign please use the Contact Details at the footer of this email. 
--------------------------------------------------

Dear Matt Johnston,

Your DomainSSL Certificate for 
*.ucc.asn.au expires on 11/11/2015.
If you do not renew your Certificate before this date you 
will not be able to continue the security of your web site.

There is no need to risk your Certificate expiring by waiting too 
long.

You can renew your Certificate and not lose any remaining 
time at any point up to 11/11/2015. 
So be safe and ensure the continued use of SSL security.

CERTIFICATE DETAILS

Organization:           University Computer Club
Organization ID:        PAR95805 - quote when contacting Tech Support
Product Type:        DomainSSL
Common Name:         *.ucc.asn.au
Order Number:        CEDV1409092416

HOW TO RENEW
--------------------------------------------------
You can log into your GlobalSign Certificate Center account and renew your 
Certificate at any time. Please follow these Renewal Instructions:

1. Log into your GCC Account at https://www.globalsign.com/login

2. On the left side click: Order History & Certificate Renewals

3. Run Upcoming Renewals Report

4. Click the "Renew" button next to your expiring SSL Certificate Order

5. Complete the online form (amend details accordingly). Provide a new CSR or use our AutoCSR function and we'll create the CSR for you. 

6. A 15% renewal discount will automatically be applied.

7. Complete the application process as directed.

For additional information please visit the SSL Renewal Center at: https://www.globalsign.com/ssl/renew


YOUR ACCOUNT & GCC LOGIN DETAILS
--------------------------------------------------
Organization:           University Computer Club
Organization ID:        PAR95805 - quote when contacting Tech Support

Login to your GlobalSign Certificate Center (GCC) Account to manage 
the lifecycle of your certificate.  Your Account gives you easy access 
to renew Certificates, buy additional Certificates and to revoke or 
cancel existing Certificates if necessary.

GCC Login URL:          https://www.globalsign.com/ssl-login.htm

Not sure of your User ID / Password?  This would have been sent when you 
purchased your first GlobalSign product or created a User from within your 
GCC account.  An email confirmation would have been sent.  Please check 
your email or Contact Support if you have forgotten your Password.


RENEWAL OFFERS
--------------------------------------------------
* 15% Discount on Renewal:
  - Renew now and receive a 15% Discount

* 30 days Bonus:
  - Any remaining time will be transferred to your new Certificate
  - Plus we will give you an extra 30 days Free!

* Multi-year Savings:
  - Renew with multi-year (up to 5 years) to avoid the renewal process 
    again this time next year.  Get over 20% discount per additional year.


Thank you for choosing GlobalSign, if you have any questions or 
issues please do not hesitate to contact us.

CONTACT US
--------------------
Please note this email was sent from a nonreply mailbox. 

Support Contact Information
Create Support Ticket: https://support.globalsign.com/customer/portal/emails/new 
Phone Support: 1-877-467-7543
Online Support: https://support.globalsign.com/

Vetting Contact Information
Vetting Fax: 617-830-0779
Vetting Email: vetting at globalsign.com

--------------------------------------------------
GlobalSign - Identity for Everything?
--------------------------------------------------

www.globalsign.com     .     1-877-775-4562     .     sales at globalsign.com



YOUR CERTIFICATE TO RENEW:
--------------------------------------------------
Here is a copy of the Certificate you now need to renew:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----



----- End forwarded message -----