Re: Digital Certificate Manager renew GoDaddy Cert

Ya, I probably would have just used the same one years ago, but with how
fast things change with SSL/TLS a year is a lifetime for a CSR to me at
least. :)

Google just announced dropping support for a certain CA now too.  I can't
remember which one, I just know I am not using them.

On Tue, Jul 2, 2024 at 11:24 AM Jon Paris <[email protected]> wrote:

> Brad,
>
> I was _advised_ to create a new CSR every year for security reasons but
> told it was not essential as the old CSR would still be valid.
>
> I chose to create a new one.
>
>
> Jon P.
>
> > On Jul 1, 2024, at 5:57 PM, Brad Stone <[email protected]> wrote:
> >
> > Ah.. if it's a 5 year one then maybe.  I know 3-4 years ago, though,
> > Namecheap said they can still sell 5 year certs, but you still need a new
> > CSR every year.
> >
> > On Mon, Jul 1, 2024 at 3:59 PM <[email protected]> wrote:
> >
> >>
> >>
> >> It surprised me as well.  GoDaddy tells you it renewed. You login and
> >> download the new cert file and import it.  I do think there is like a 5
> >> year limit on the original CSR but I'm pulling this from old memory.
> >>
> >> ***
> >> Joe W Holt
> >> Sr Programmer/Engineer
> >> Jack Onofrio Dog Shows, LLC
> >> 405.427.8181
> >>
> >>
> >>
> >> From:   "Brad Stone" <[email protected]>
> >> To:     "Web Enabling the IBM i (AS/400 and iSeries)"
> >>            <[email protected]>
> >> Date:   07/01/2024 03:53 PM
> >> Subject:        Re: [WEB400] Digital Certificate Manager renew GoDaddy
> Cert
> >> Sent by:        "WEB400" <[email protected]>
> >>
> >>
> >>
> >> I've never gotten a cert without a CSR.. Maybe Godaddy is different.  I
> use
> >> NameCheap.
> >>
> >> On Mon, Jul 1, 2024 at 3:49 PM <[email protected]> wrote:
> >>
> >>>
> >>>
> >>> I've renewed the same cert without creating a new CSR for the last 2
> >> years
> >>> at least in DCM.  You just import the cert as you did the original and
> it
> >>> should work.
> >>>
> >>> ***
> >>> Joe W Holt
> >>> Sr Programmer/Engineer
> >>> Jack Onofrio Dog Shows, LLC
> >>> 405.427.8181
> >>>
> >>>
> >>>
> >>> From:   "Brad Stone" <[email protected]>
> >>> To:     "Web Enabling the IBM i (AS/400 and iSeries)"
> >>>            <[email protected]>
> >>> Date:   07/01/2024 03:37 PM
> >>> Subject:        Re: [WEB400] Digital Certificate Manager renew GoDaddy
> >> Cert
> >>> Sent by:        "WEB400" <[email protected]>
> >>>
> >>>
> >>>
> >>> To renew, you usually do this:
> >>>
> >>> 1.  In DCM, click renew certificate.
> >>> 2.  DCM generates a CSR
> >>> 3.  You go to the issuer of your cert and renew it, giving them the CSR
> >>> that DCM created.
> >>> 4.  Do some validation of ownership of the domain/property.
> >>> 5.  Get the cert from the issuer.
> >>> 6.  Import the cert into DCM.
> >>> 7.  Update any configs/app applications.
> >>> 8.   Restart server(s).
> >>>
> >>>
> >>>
> >>> On Mon, Jul 1, 2024 at 1:09 PM Art Tostaine, Jr. <[email protected]>
> >>> wrote:
> >>>
> >>>> Using systemname:2006/dcm. GoDaddy sent us an email that our
> >> certificate
> >>>> was renewed. I downloaded 2 CRT files and a PEM.
> >>>>
> >>>> I thought it would be as easy as finding the certificate and click
> >> renew
> >>>> and upload a new file. What is the process? When I click renew on the
> >>> cert,
> >>>> it asks if its local or Internet. When I click Internet I'm setting up
> >> a
> >>>> whole new CA?
> >>>>
> >>>> Any help/links would be appreciated. I finally found some IBM docs but
> >>> it's
> >>>> for the old CM.
> >>>>
> >>>>
> >>>>
> >>>
> >>>
> >>
> >>
> https://www.ibm.com/support/pages/renewing-third-party-ssl-certificate-digital-certificate-manager-dcm
> >>
> >>>
> >>>> Thanks, Art
> >>>> --
> >>>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> >> mailing
> >>>> list
> >>>> To post a message email: [email protected]
> >>>> To subscribe, unsubscribe, or change list options,
> >>>> visit: https://lists.midrange.com/mailman/listinfo/web400
> >>>> or email: [email protected]
> >>>> Before posting, please take a moment to review the archives
> >>>> at https://archive.midrange.com/web400.
> >>>>
> >>>>
> >>> --
> >>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> mailing
> >>> list
> >>> To post a message email: [email protected]
> >>> To subscribe, unsubscribe, or change list options,
> >>> visit: https://lists.midrange.com/mailman/listinfo/web400
> >>> or email: [email protected]
> >>> Before posting, please take a moment to review the archives
> >>> at https://archive.midrange.com/web400.
> >>>
> >>>
> >>> --
> >>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> mailing
> >>> list
> >>> To post a message email: [email protected]
> >>> To subscribe, unsubscribe, or change list options,
> >>> visit: https://lists.midrange.com/mailman/listinfo/web400
> >>> or email: [email protected]
> >>> Before posting, please take a moment to review the archives
> >>> at https://archive.midrange.com/web400.
> >>>
> >>>
> >> --
> >> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> >> list
> >> To post a message email: [email protected]
> >> To subscribe, unsubscribe, or change list options,
> >> visit: https://lists.midrange.com/mailman/listinfo/web400
> >> or email: [email protected]
> >> Before posting, please take a moment to review the archives
> >> at https://archive.midrange.com/web400.
> >>
> >>
> >> --
> >> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> >> list
> >> To post a message email: [email protected]
> >> To subscribe, unsubscribe, or change list options,
> >> visit: https://lists.midrange.com/mailman/listinfo/web400
> >> or email: [email protected]
> >> Before posting, please take a moment to review the archives
> >> at https://archive.midrange.com/web400.
> >>
> >>
> > --
> > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> > To post a message email: [email protected]
> > To subscribe, unsubscribe, or change list options,
> > visit: https://lists.midrange.com/mailman/listinfo/web400
> > or email: [email protected]
> > Before posting, please take a moment to review the archives
> > at https://archive.midrange.com/web400.
> >
>
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.
>
>
-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.