I'm not 100% sure we need to run that same *.corp.wikimedia.org cert. I don't see any private key file for star.corp.wikimedia.org.key in the private ops repo. That makes me think we don't need to update anything, as we don't seem to host the files for this presently.

I am pretty sure Moritz handled ldap stuff last time, but I'm not sure. I've added him as a subscriber and will follow up with him when he is around (his work hours) tomorrow.

This is for ldap use, not https, not sure Traffic or HTTPS are needed (but seems silly to try to remove and potentially have it automatically added back ;)

(Oh, true, sorry)

Yes, that is used by the corp LDAP replica in role::openldap::corp

Sorry for the confusion, we don't need the private key. My comment was directed as to whether we use the cert in the corp replica, I missed that part of Byron's question.

was looking through some LDAP tasks, this one is for corp but was presumably completed as it was about a June 2017 expiry?