SSL certificate renewal notesEdit

Note: I’m no longer maintaining these renewal notes, as I now have the whole process pretty much automated via Ansible (I just run a script to generate a new CSR, then dump the signed certificate from the CA into my Ansible configs repo and tell Ansible to install it).

Certificate authorities

• Free certificates (and some paid options): http://cert.startcom.org/
• Cheapest paid certificates:
  • http://www.servertastic.com/
  • http://namecheap.com/
• Cheapest SAN certificates:
  • http://certificatesforexchange.com/

Articles

• Installing a new SSL certificate
• Renewal notes from specific years:
  • SSL certificate renewal notes 2013 (nginx; wincent.dev)
  • SSL certificate renewal notes 2012 (Apache, Cyrus, sendmail; wincent.dev)
  • SSL certificate renewal notes 2010 (nginx; wincent.dev)
  • SSL certificate renewal notes 2008 (Apache, Cyrus, sendmail; wincent.dev)
• Getting new SSL certificates for use with nginx