Hi, I regenerated TLS certificates for this year.
I contemplated using cacert.org, but unfortunately we don't receive [EMAIL PROTECTED] e-mail anymore and can't validate cacert.org verification. We could do this later this year, before the current certificate expires. Also, certificates are generated using GnuTLS (certtool) instead of OpenSSL (openssl) - GnuTLS uses a stronger signature algorithm (RSA-SHA instead of RSA-MD5), and it's GNU! :) -- Sylvain
