Re: [cobalt-users] RAQ3 ssl

["Brian Curtis" <webmaster@xxxxxxxxxxx>]

Gary,

> I did a cert request for one of my clients getthechart.com, input all his
> info, and gave him the top cert request to give to thawte, thawte issued
the
> cert, so i copied into the bottom half and hit Use Manually entered cert
and
> hit ok

Assuming he sent you the _actual_ Thawte cert, did you completely stop then
restart Apache?  A simple restart of Apache will not work.

> This Certificate belongs to:
>   www.getthechart.com
>   admin@xxxxxxxxxxxxxxxxxxx
>   ADMIN
>   Laurence-Epstein M.D. S.C.
>   McHenry, Illinois, US
>
> This Certificate was issued by:
> www.getthechart.com
> admin@xxxxxxxxxxxxxxxxxxx
> ADMIN
> Laurence-Epstein M.D. S.C.
> McHenry, Illinois, US
>
> Serial Number: 00
> This Certificate is valid from Wed Mar 22, 2000 to Fri Mar 22, 2002
> Certificate Fingerprint:
>   2A:E0:87:BE:6D:48:6A:8E:89:15:F1:4F:DE:62:13:7D

This looks to me like a CSR, not a valid cert.  What I'm wondering though is
even if this is a CSR, how did you manage to get a two year request?  Last I
knew you could only specify up to 365 days when generating a CSR.

> What did we do wrong??? Why doesnt Thawte show up in the Issued By area?
How
> do i fix it?

If a complete shutdown then restart of Apache does not fix the problem, I'd
recommend contacting your client to make sure that he sent you the proper
information.  If he did, then I would contact Thawte.  They now have a 24/7
Java Chat support program where you can talk with actual Thawte reps.

Brian