New SSL certificates for ISG D-PHYS web based services
For a long time we used so called wildcard SSL certificates for most of our web sites and services. Especially newer web browsers issued warnings about them. We recently exchanged the wildcard certificate on https://www.phys.ethz.ch/ and other websites to a new type of SSL certificate listing all websites hosted on that machine. Since today also our infrastructure servers (e.g. https://registration.phys.ethz.ch/), have such a new SSL certificate.
If you have installed our CA certificate as described in our article How to configure web browsers, the new certificates won't cause any more security warnings. If you have not installed our CA certificate in your web browser, a warning about a new unknown certificate will pop up for many of our SSL-enabled websites every time we add a new website. Because a new website means that we have to generate a new SSL certificate for the whole web server the new site is hosted on. We therefore recommend to install our CA certificate in your web browser to avoid those annoying warnings on D-PHYS websites.
Tags: CA, Certificate, HTTPS, SSL