This was issued today by GSA generally (not 18F), as we're still on a CNAME.
It's a SHA-2 cert, and so along with the rest of our configuration, nets us an A+ on SSL Labs.
It has 1 intermediate, downloaded from Symantec. The root cert, "VeriSign Class 3 Public Primary Certification Authority - G5", is not included, or served from the website.
This was issued today by GSA generally (not 18F), as we're still on a CNAME.
It's a SHA-2 cert, and so along with the rest of our configuration, nets us an A+ on SSL Labs.
It has 1 intermediate, downloaded from Symantec. The root cert, "VeriSign Class 3 Public Primary Certification Authority - G5", is not included, or served from the website.
It expires on March 4, 2016.