OpenStreetMap Certificate 2015

gistfile1.txt

The OpenStreetMap Operations team are looking for a new certificate authority for the project.

Requirements:
 * Supported by Java 7+ out-the-box
 * Widely trusted (Web + Mobile) by default
 * Ability to re-issue certificates if required

Ideally:
 * Expiry 2y+

Bonus:
 * Open Source friendly

Certificate 1:
openstreetmap.org, *.openstreetmap.org, osm.org, *.osm.org, openstreetmap.com, *.openstreetmap.com, openstreetmap.net, *.openstreetmap.net, openstreetmaps.org, *.openstreetmaps.org, osm.io, *.osm.io, api.osm.io

Certificate 2:
tile.openstreetmap.org, *.tile.openstreetmap.org, tile.osm.org, *.tile.osm.org

Certificate 3:
osmfoundation.org, *.osmfoundation.org, blog.openstreetmap.org, blog.osm.org, blog.openstreetmap.com, blog.openstreetmap.net, blog.openstreetmaps.org, switch2osm.org, *.switch2osm.org, switch2osm.com, *.switch2osm.com, opengeodata.org, *.opengeodata.org, thinkup.openstreetmap.org, thinkup.osm.org, otrs.openstreetmap.org, otrs.osm.org, foundation.openstreetmap.org, foundation.osm.org, stateofthemap.org *.stateofthemap.org, stateofthemap.com, *.stateofthemap.com

OSM Operations Group Support Ticket:
https://github.com/openstreetmap/operations/issues/2

Global Sign offer an Open Source certificate but I think it is only for a single domain: https://www.globalsign.com/en/ssl/ssl-open-source/

We currently use StartSSL CA for a few domains, but Java does not yet support them out-the-box yet: https://forum.startcom.org/viewtopic.php?f=15&t=1802

This looks promising: https://letsencrypt.org/ . But it is only available "Mid-2015".