-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 bkuhn's GPG Signature of agia.fsf.org's SSL Certificate ======================================================= Below is the temporary certificate information for the FSF's online ordering system. I, Bradley M. Kuhn, Vice President of the Free Software Foundation, hereby certify that I personally verified this information with the following command: /usr/bin/openssl x509 -md5 -fingerprint -in apache.pem I ran that command using a keyboard and monitor directly attached to the physical machine, agia.fsf.org. All equipment (machine, keyboard, monitor, cables) were visible to me while I ran the command. How To Check My Signature ========================= If you are a GPG user, you can check the GPG signature of this message; it is signed with my GNU Privacy Guard key. To do this, first get a copy of my public key, which you can do (when you are connected to the Internet) with the following command: gpg --keyserver gpg.dtype.org --recv-key DB41B387 After that command runs successful, you can save this file and run the following command to verify its signature: gpg bkuhn-signed-agia-certificate.txt (or replace bkuhn-signed-agia-certificate.txt with a filename you chose to save this in). Verifying This Temporary Certificate Information ================================================ The certificate information is below. Information may be presented differently in different browsers. You can also get the information from the command line on Debian GNU/Linux system (with openssl package installed) with the following command: echo -e \004 | openssl s_client -connect agia.fsf.org:443 2>&1 | \ openssl x509 -md5 -fingerprint and comparing its output with what is below. Why This Information Is Temporary ================================= We currently have an order in with a signing authority, Thawte, to have a signed key from them. That will provide the means for your browser to verify this information directly. I will also post a GPG-signed message like this one for the new certificate as well. ############################################################################### Issued To: Common Name (CN) agia.fsf.org Organization (O) Free Software Foundation Organizational Unit (OU) Ordering Serial Number 00 Issued By: Common Name (CN) agia.fsf.org Organization (O) Free Software Foundation Organizational Unit (OU) Ordering City (L) Boston State (ST) Massachusetts Country (C) USA Email order@fsf.org Validity Issued On 12/10/01 Expires On 12/10/02 Fingerprints SHA1 Fingerprint 33:E1:B3:55:83:30:5E:DC:09:B4:3A:4E:3D:17:5A:F8:72:1E:9D:8B MD5 Fingerprint 0E:50:0C:29:CB:3A:B7:41:96:8B:7B:5D:7C:71:F7:84 - -----BEGIN CERTIFICATE----- MIIDvTCCAyagAwIBAgIBADANBgkqhkiG9w0BAQQFADCBoTELMAkGA1UEBhMCVVMx FjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxDzANBgNVBAcTBkJvc3RvbjEhMB8GA1UE ChMYRnJlZSBTb2Z0d2FyZSBGb3VuZGF0aW9uMREwDwYDVQQLEwhPcmRlcmluZzEV MBMGA1UEAxMMYWdpYS5mc2Yub3JnMRwwGgYJKoZIhvcNAQkBFg1vcmRlckBmc2Yu b3JnMB4XDTAxMTIxMDE2MzMxN1oXDTAyMTIxMDE2MzMxN1owgaExCzAJBgNVBAYT AlVTMRYwFAYDVQQIEw1NYXNzYWNodXNldHRzMQ8wDQYDVQQHEwZCb3N0b24xITAf BgNVBAoTGEZyZWUgU29mdHdhcmUgRm91bmRhdGlvbjERMA8GA1UECxMIT3JkZXJp bmcxFTATBgNVBAMTDGFnaWEuZnNmLm9yZzEcMBoGCSqGSIb3DQEJARYNb3JkZXJA ZnNmLm9yZzCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAvewLeMfsyR/H5br6 ZR3xXFc9IxpUVUN9UCcUhIA5cqJDs8zrKgtUehhsPV5D6mfwGJIlHojMq9LWHS61 3Kr6KwLp9QqA65pNpvlSJtAVQBQdrYs0OAXR6bmr6Z4y7k4ncMDnvdmKTPzvEwwg UoAh0FwksSpTFtb3I8eP1vfimw0CAwEAAaOCAQEwgf4wHQYDVR0OBBYEFIFzBvvm xEXG5nRry78LcP0QMrV1MIHOBgNVHSMEgcYwgcOAFIFzBvvmxEXG5nRry78LcP0Q MrV1oYGnpIGkMIGhMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0 czEPMA0GA1UEBxMGQm9zdG9uMSEwHwYDVQQKExhGcmVlIFNvZnR3YXJlIEZvdW5k YXRpb24xETAPBgNVBAsTCE9yZGVyaW5nMRUwEwYDVQQDEwxhZ2lhLmZzZi5vcmcx HDAaBgkqhkiG9w0BCQEWDW9yZGVyQGZzZi5vcmeCAQAwDAYDVR0TBAUwAwEB/zAN BgkqhkiG9w0BAQQFAAOBgQClDo6Mj/dP83njIv/9szObTEyxfaK7g15QphQZz5RK tlPVNEhXJvL8FXGqhP54yhYQJTYt+5v/cpkEIPuqenzmGzVCKxy/w6fppJqhHQqX QLCp62p93qtrOPjDGydFSsG1+N9yNS3rDAP37SvS/0tqtPEo0zvtHc+gcNHv0Dlz 5Q== - -----END CERTIFICATE----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE8UWFF53XjJNtBs4cRAn63AJ9DZq/T5b2iqRL2QkUjxPxpOAUApACgwIKI BusbA9zKwIN0sbZitFcE4ho= =QOqv -----END PGP SIGNATURE-----