Expiration of the certificate SSL Standard (medicmobile.org) in 29 days

[garethbowen]

This mail is to inform you that your certificate SSL Standard ([medicmobile.org](http://medicmobile.org/)) expires in 29 days, on 2023-09-24 01:59.

Warning: for Pro and Business certificates, web browsers have increased security. It can now take up to several weeks, and so we strongly recommend that you perform the operation as soon as possible.

If you would like to keep your certificate, we recommend renewing it before the expiration date. For this you must launch the renewal process from the following page:
https://admin.gandi.net/certificate/3b1c7ba8-cfa3-11e7-a050-00163ec31f40/7bd096e4-2876-11ed-8147-00163e816020

If you do not want to keep your certificate, then no further action is necessary on your part. It will be automatically revoked by our services and rendered useless.

Feel free to contact our Customer Care Department should you have any questions or require any additional assistance:
https://help.gandi.net/en/contact/
Thank you for choosing Gandi!

[garethbowen]

Cert from last year: https://github.com/medic/medic-infrastructure/issues/514

[garethbowen]

We think this may not be needed any more but we're going to check

[mrjones-plip]

Maybe our registrar has free redirects for www.medicmobile.org and medicmobile.org to medic.org? This would be easiest.

otherwise my vote is we renew the certs, put them up on a simple vhost that only 301s to medic.org

[garethbowen]

@Hareet @henokgetachew @Reagan This expires today. Have we confirmed this is no longer needed?

[garethbowen]

We're now getting a security warning when going to medicmobile.org. If you accept the risk it redirects to medic.org as expected.

[henokgetachew]

afaik, this hasn't affected us. Is this safe to close?

[mrjones-plip]

I'm still getting the Warning: Potential Security Risk Ahead message on https://medicmobile.org/ because the cert is expired.

curl https://medicmobile.org
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

[mrjones-plip]

AH - I see, @henokgetachew you're asking, "Since this has been expired for many months, is this safe to close as 'won't fix'"?

If you're asking me, I'd say no, this domain needs to redirect on both http and https to medic.org in perpetuity. We can't really measure SEO loss from an IT or "no one is complaining" level. Instead we'd need to look at Google Webmaster tools and referrals over time and and such.

[jonathanvq]

@mrjones-plip, I'm reviewing this with @henokgetachew, and we agree with your suggestion. We'll move this to the SRE Queue instead of keeping it in Awaiting Triage. Thanks!