Hi all, as promised I have now generated a new root certificate for use on the WAN. If you have recently noticed a warnings in your browser or email/IRC clients about an 'expired certificate' this will most likely resolve that problem. The new certificate has 10 year expiry and is also updated to use the more secure SHA-256 signature algorithm.
Simply install it into your browser or host operating system and any official signed Air-Stream SSL certificates will be correctly validated. See this page and the other 'technical references' on the website for more information about SSL on Air-Stream:
If you would like an signed certificate for use with secure services on your .wan hosts, feel free to email me with the details of your request and I can generate one for you.