The icinga-admin.wikimedia.org certificate expires on 2015-02-26.
Since we locked down icinga.wikimedia.org, I'd like to propose we simply remove the icinga-admin url support entirely, rather than maintaining an unneeded secondary certificate.
If this need changes in the future, then we can re-evaluate a purchase at that time.
I'm going to link in the patchsets to disable this, but I'd like to get feedback from other opsen before implementation.
Yeah, I think that's fine. We might move away from Icinga within the next year entirely, anyway.
I neglected to pull the install cert, done via: https://gerrit.wikimedia.org/r/#/c/191923/
This is now all merged and complete, icinga-admin.wikimedia.org is also revoked from RapidSSL (it expired next week, but its a good habit to revoke certs anyhow.)