• login https://www.cacert.org/ using loic@…
• Menu Server Certificate
• Select gna.org
• Click RENEW
• Copy the certificate that shows in the page
• ssh root@…
• vserver gna-www enter
• cd /etc/apache2/ssl
• copy

  -----BEGIN RSA PRIVATE KEY-----
  ...
  -----END RSA PRIVATE KEY-----
  

  from gna.org-cacert.org-2011-renewed.pem
• create gna.org-cacert.org-XXXX-renewed.pem
• paste the private key
• paste the renewed certificate copied from the cacert.org page
• ln -s -f gna.org-cacert.org-2011-renewed.pem gna.org.pem
• /etc/init.d/apache2 restart