diff --git a/cert.db b/cert.db index efa86b91..50a80e5b 100644 Binary files a/cert.db and b/cert.db differ diff --git a/certdata/dead_end_intermediate_test.go b/certdata/dead_end_intermediate_test.go new file mode 100644 index 00000000..8f9de8bd --- /dev/null +++ b/certdata/dead_end_intermediate_test.go @@ -0,0 +1,47 @@ +package main + +import ( + "crypto/sha256" + "fmt" + "testing" +) + +// These intermediates are issued by CAs that are not in either bundle, so no +// path through them reaches a trust anchor. Verifiers without issuer +// backtracking select the first certificate matching an issuer's name, so a +// dead-end copy listed before a working one breaks chains depending on bundle +// order. The emSign ECC G3 and AAA-issued certificates lost their issuer when +// those roots were distrusted. +func TestDeadEndIntermediatesAreExcluded(t *testing.T) { + excluded := map[string]string{ + "b4dae2869f79bc77c29ad1a2a88a3932af3a9593fe820fb263c0db89843e9559": "StartCom Class 3 OV Server CA (WoSign G2)", + "7b464dc384fdb1a525c2cc279ed0c7cfad24becf72c46a7d7093d157c217607e": "JCAN Public CA1 - G4 (Trusted Root CA SHA256 G2)", + "0116f17f97cdef4ade2e63cf2c1b064fd99f404d2b914100bc241f0781853323": "emSign ECC EV SSL CA - G3", + "4e9b731567177e1776a96d66d9120b3deb28b800937ea4662565b3ef5ec8000b": "emSign ECC Class 2 CA - G3", + "6b51d1dcf4eb7aee424185cb1b9580574b39cb963863de3ec1ad31ddb076ce9f": "emSign ECC SSL CA - G3", + "7066a0f42f530e0db5afee72a3b04de614e7d2305c67d12c756bb215e37cb975": "emSign ECC Class 3 CA - G3", + "70b9ba595412cf8614b76747fd683cca2759f42642164834fbefdd88505c4f1c": "emSign ECC Device CA - G3", + "aba6a65dce8955baf0685ab88809b7699c174496ef9ee991533251494f43ce10": "emSign ECC Class 1 CA - G3", + "14e384649aa401f1d1cabd5fa3d08abe82f14b7dae6c5615b1cd7dd41e9750e3": "UTN-USERFirst-Client Authentication and Email (AAA)", + "ad61327ee99b40613e480751b56691a096412c68f74f4012b29fa0f48bb924c9": "COMODO SHA-256 Client Authentication and Secure Email CA 3 (AAA)", + "eb62bffa6cbc802e4dae6f8c53908020be7f07774a55e67bbd63ecc37679dec8": "Apple Public Client RSA CA 12 - G1 (AAA)", + } + // Copies of the same CAs that chain to a trusted root must remain. + retained := map[string]string{ + "ea4e5d2b9c99560f13dd094b8121a623bfdd902038dfd6d772ce32ffabec094d": "StartCom Class 3 OV Server CA (StartCom Certification Authority)", + "9ac4c8e358c095c998122add17a336c0ac597ecbecb7edc3f58a75040cf94a5f": "JCAN Public CA1 - G4 (Trusted Root nonTLS CA SHA256 G3)", + } + + for _, file := range []string{intBundleFile, caBundleFile} { + for _, cert := range loadBundle(t, file) { + fingerprint := fmt.Sprintf("%x", sha256.Sum256(cert.Raw)) + if name, found := excluded[fingerprint]; found { + t.Errorf("%s contains dead-end intermediate %q (%s)", file, name, fingerprint) + } + delete(retained, fingerprint) + } + } + for fingerprint, name := range retained { + t.Errorf("bundles are missing working intermediate %q (%s)", name, fingerprint) + } +} diff --git a/certdata/int-bundle.txt b/certdata/int-bundle.txt index ee6fd745..a458c571 100644 --- a/certdata/int-bundle.txt +++ b/certdata/int-bundle.txt @@ -50,23 +50,6 @@ Details: Basic constraints: valid, is a CA certificate, max path length 11 SANs (1): email:ac_camerfirma@camerfirma.com CERTIFICATE -Subject: /UTN-USERFirst-Client Authentication and Email/C=US/O=The USERTRUST - Network/OU=http://www.usertrust.com/L=Salt Lake City/ST=UT -Issuer: /AAA Certificate Services/C=GB/O=Comodo CA - Limited/L=Salford/ST=Greater Manchester - Signature algorithm: RSA / SHA1 -Details: - Public key: RSA-2048 - Serial number: 150965947980182260189135672189403666599 - AKI: A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4 - SKI: 89:82:67:7D:C4:9D:26:70:00:4B:B4:50:48:7C:DE:3D:AE:04:6E:7D - Valid from: 2004-01-01T00:00:00+0000 - until: 2028-12-31T23:59:59+0000 - Key usages: cert sign, crl sign - Extended usages: client auth, s/mime - Basic constraints: valid, is a CA certificate - SANs (0): -CERTIFICATE Subject: /AC Camerfirma Certificados Camerales/C=ES/O=AC Camerfirma SA/L=Madrid (see current address at www.camerfirma.com/address) Issuer: /Chambers of Commerce Root/C=EU/O=AC Camerfirma SA CIF @@ -3900,26 +3883,6 @@ Details: - http://ocsp2.netlock.hu/gold.cgi - http://ocsp3.netlock.hu/gold.cgi CERTIFICATE -Subject: /StartCom Class 3 OV Server CA/C=IL/O=StartCom Ltd./OU=StartCom - Certification Authority -Issuer: /Certification Authority of WoSign G2/C=CN/O=WoSign CA Limited - Signature algorithm: RSA / SHA256 -Details: - Public key: RSA-2048 - Serial number: 131507321505835480915737962268449512296 - AKI: FA:60:A9:EB:65:C5:DD:16:14:08:4E:0C:0F:8D:9B:E0:F7:64:AF:67 - SKI: B1:3F:1C:92:7B:92:B0:5A:25:B3:38:FB:9C:07:A4:26:50:32:E3:51 - Valid from: 2015-12-16T01:00:01+0000 - until: 2030-12-16T01:00:01+0000 - Key usages: cert sign, crl sign - Extended usages: client auth, server auth - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - 1 AIA: - http://aia1.wosign.com/ca6-st-server3.cer - OCSP server: - - http://ocsp1.wosign.com -CERTIFICATE Subject: /StartCom Class 1 DV Server CA/C=IL/O=StartCom Ltd./OU=StartCom Certification Authority Issuer: /StartCom Certification Authority/C=IL/O=StartCom Ltd./OU=Secure @@ -5683,25 +5646,6 @@ Details: OCSP server: - http://ocsp.certsign.ro CERTIFICATE -Subject: /JCAN Public CA1 - G4/C=JP/O=JIPDEC/OU=JCAN Public CA1 - G4 -Issuer: /Trusted Root CA SHA256 G2/C=BE/O=GlobalSign nv-sa/OU=Trusted Root - Signature algorithm: RSA / SHA256 -Details: - Public key: RSA-2048 - Serial number: 1479799948140408368275204572446989 - AKI: C8:63:9B:08:69:54:C2:98:C8:D9:CD:E3:33:B7:50:5E:F8:C9:01:9B - SKI: B9:8E:CD:F1:EC:7A:2E:9C:B9:EB:6F:0B:1C:C4:D4:AC:19:AE:A1:54 - Valid from: 2017-02-22T00:00:00+0000 - until: 2027-02-22T00:00:00+0000 - Key usages: cert sign, crl sign - Extended usages: client auth, ipsec user, ocsp signing, s/mime - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - 1 AIA: - http://secure.globalsign.com/cacert/trustrootsha2g2.crt - OCSP server: - - http://ocsp2.globalsign.com/trustrootsha2g2 -CERTIFICATE Subject: /SSL.com EV Root Certification Authority RSA R2/C=US/O=SSL Corporation/L=Houston/ST=Texas Issuer: /SSL.com EV Root Certification Authority RSA R2/C=US/O=SSL @@ -6254,25 +6198,6 @@ Details: OCSP server: - http://ocsp2.globalsign.com/rootr3 CERTIFICATE -Subject: /COMODO SHA-256 Client Authentication and Secure Email CA - 3/C=GB/O=COMODO CA Limited/L=Salford/ST=Greater Manchester -Issuer: /AAA Certificate Services/C=GB/O=Comodo CA - Limited/L=Salford/ST=Greater Manchester - Signature algorithm: RSA / SHA256 -Details: - Public key: RSA-2048 - Serial number: 338557675202063134740279581908924563587 - AKI: A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4 - SKI: 6C:97:B5:98:F5:17:B8:F9:BD:62:6C:0F:4A:4E:79:49:CD:82:B5:67 - Valid from: 2017-07-06T00:00:00+0000 - until: 2028-12-31T23:59:59+0000 - Key usages: cert sign, crl sign, digital signature - Extended usages: client auth, s/mime - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.comodoca.com -CERTIFICATE Subject: /InfoCert Organization Validation CA 3/C=IT/O=InfoCert S.p.A./OU=WSA Trust Service Provider Issuer: /GLOBAL CORPORATE SERVER/C=ES/O=AC Camerfirma S.A./L=Madrid (see @@ -8334,25 +8259,6 @@ Details: OCSP server: - http://ocsp.usertrust.com CERTIFICATE -Subject: /emSign ECC EV SSL CA - G3/C=IN/O=eMudhra Technologies - Limited/OU=emSign PKI -Issuer: /emSign ECC Root CA - G3/C=IN/O=eMudhra Technologies Limited/OU=emSign - PKI - Signature algorithm: ECDSA / SHA384 -Details: - Public key: ECDSA-secp384r1 - Serial number: 9412337563025552451134 - AKI: 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 - SKI: D1:AA:B4:D2:D2:25:82:4E:B3:F0:93:60:17:4A:9B:63:7A:F9:1F:0D - Valid from: 2018-02-18T18:30:00+0000 - until: 2033-02-18T18:30:00+0000 - Key usages: cert sign, crl sign - Extended usages: client auth, server auth - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.emsign.com -CERTIFICATE Subject: /emSign Class 2 CA - C1/C=US/O=eMudhra Inc/OU=emSign PKI Issuer: /emSign Root CA - C1/C=US/O=eMudhra Inc/OU=emSign PKI Signature algorithm: RSA / SHA256 @@ -8470,24 +8376,6 @@ Details: OCSP server: - http://ocsp.emsign.com CERTIFICATE -Subject: /emSign ECC Class 2 CA - G3/C=IN/O=eMudhra Technologies - Limited/OU=emSign PKI -Issuer: /emSign ECC Root CA - G3/C=IN/O=eMudhra Technologies Limited/OU=emSign - PKI - Signature algorithm: ECDSA / SHA384 -Details: - Public key: ECDSA-secp384r1 - Serial number: 169446747838701918809565 - AKI: 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 - SKI: E0:16:FE:BD:C4:E1:65:C6:A5:99:4C:89:5E:71:8E:D4:5D:67:F1:FD - Valid from: 2018-02-18T18:30:00+0000 - until: 2033-02-18T18:30:00+0000 - Key usages: cert sign, crl sign - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.emsign.com -CERTIFICATE Subject: /emSign ECC Class 3 CA - C3/C=US/O=eMudhra Inc/OU=emSign PKI Issuer: /emSign ECC Root CA - C3/C=US/O=eMudhra Inc/OU=emSign PKI Signature algorithm: ECDSA / SHA384 @@ -8537,61 +8425,6 @@ Details: OCSP server: - http://ocsp.emsign.com CERTIFICATE -Subject: /emSign ECC SSL CA - G3/C=IN/O=eMudhra Technologies Limited/OU=emSign - PKI -Issuer: /emSign ECC Root CA - G3/C=IN/O=eMudhra Technologies Limited/OU=emSign - PKI - Signature algorithm: ECDSA / SHA384 -Details: - Public key: ECDSA-secp384r1 - Serial number: 542440914775208739274695 - AKI: 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 - SKI: 13:8D:4C:28:99:E1:62:B7:D2:E0:53:E3:18:D1:62:DC:1C:CA:66:FA - Valid from: 2018-02-18T18:30:00+0000 - until: 2033-02-18T18:30:00+0000 - Key usages: cert sign, crl sign - Extended usages: client auth, server auth - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.emsign.com -CERTIFICATE -Subject: /emSign ECC Class 3 CA - G3/C=IN/O=eMudhra Technologies - Limited/OU=emSign PKI -Issuer: /emSign ECC Root CA - G3/C=IN/O=eMudhra Technologies Limited/OU=emSign - PKI - Signature algorithm: ECDSA / SHA384 -Details: - Public key: ECDSA-secp384r1 - Serial number: 873253120750060978356981 - AKI: 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 - SKI: 22:62:4A:BC:7E:6D:A1:30:B7:2A:C9:95:7E:2A:23:DE:3D:27:F3:8D - Valid from: 2018-02-18T18:30:00+0000 - until: 2033-02-18T18:30:00+0000 - Key usages: cert sign, crl sign - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.emsign.com -CERTIFICATE -Subject: /emSign ECC Device CA - G3/C=IN/O=eMudhra Technologies - Limited/OU=emSign PKI -Issuer: /emSign ECC Root CA - G3/C=IN/O=eMudhra Technologies Limited/OU=emSign - PKI - Signature algorithm: ECDSA / SHA384 -Details: - Public key: ECDSA-secp384r1 - Serial number: 639336671160327963483843 - AKI: 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 - SKI: A5:AC:F9:1F:5A:25:8E:10:B0:29:DA:19:00:26:86:E8:A1:E6:E8:D9 - Valid from: 2018-02-18T18:30:00+0000 - until: 2033-02-18T18:30:00+0000 - Key usages: cert sign, crl sign - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.emsign.com -CERTIFICATE Subject: /emSign ECC SSL CA - C3/C=US/O=eMudhra Inc/OU=emSign PKI Issuer: /emSign ECC Root CA - C3/C=US/O=eMudhra Inc/OU=emSign PKI Signature algorithm: ECDSA / SHA384 @@ -8609,24 +8442,6 @@ Details: OCSP server: - http://ocsp.emsign.com CERTIFICATE -Subject: /emSign ECC Class 1 CA - G3/C=IN/O=eMudhra Technologies - Limited/OU=emSign PKI -Issuer: /emSign ECC Root CA - G3/C=IN/O=eMudhra Technologies Limited/OU=emSign - PKI - Signature algorithm: ECDSA / SHA384 -Details: - Public key: ECDSA-secp384r1 - Serial number: 1185869810258632733645093 - AKI: 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 - SKI: 46:BE:80:C3:C8:27:FE:EC:9B:58:2B:1A:62:5D:B2:D5:D1:02:38:68 - Valid from: 2018-02-18T18:30:00+0000 - until: 2033-02-18T18:30:00+0000 - Key usages: cert sign, crl sign - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.emsign.com -CERTIFICATE Subject: /emSign ECC EV SSL CA - C3/C=US/O=eMudhra Inc/OU=emSign PKI Issuer: /emSign ECC Root CA - C3/C=US/O=eMudhra Inc/OU=emSign PKI Signature algorithm: ECDSA / SHA384 @@ -13702,24 +13517,6 @@ Details: OCSP server: - http://ocsp.globalsign.com/rootr1 CERTIFICATE -Subject: /Apple Public Client RSA CA 12 - G1/C=US/O=Apple Inc./ST=California -Issuer: /AAA Certificate Services/C=GB/O=Comodo CA - Limited/L=Salford/ST=Greater Manchester - Signature algorithm: RSA / SHA256 -Details: - Public key: RSA-2048 - Serial number: 270463198999897041386963064417266587490 - AKI: A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4 - SKI: CA:06:F0:92:12:3D:7B:00:5A:E9:28:47:A8:25:1B:F0:D0:80:42:CC - Valid from: 2019-06-19T00:00:00+0000 - until: 2028-12-06T23:59:59+0000 - Key usages: cert sign, crl sign, digital signature - Extended usages: client auth, s/mime - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.comodoca.com -CERTIFICATE Subject: /GlobalSign/O=GlobalSign/OU=GlobalSign ECC Root CA - R5 Issuer: /GlobalSign Root CA/C=BE/O=GlobalSign nv-sa/OU=Root CA Signature algorithm: RSA / SHA384 diff --git a/int-bundle.crt b/int-bundle.crt index f7b349a7..16a52aaa 100644 --- a/int-bundle.crt +++ b/int-bundle.crt @@ -102,35 +102,6 @@ rjLBmA9ppOcTyiBWhpw607UOt4YVnns1YwlPAoNmMeEVOoDDUAm7Gx53DwSFCs3N bg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIE3TCCA8WgAwIBAgIQcZL75hlfrE0ShXRxNKIYpzANBgkqhkiG9w0BAQUFADB7 -MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD -VQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UE -AwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTA0MDEwMTAwMDAwMFoXDTI4 -MTIzMTIzNTk1OVowga4xCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJVVDEXMBUGA1UE -BxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoTFVRoZSBVU0VSVFJVU1QgTmV0d29y -azEhMB8GA1UECxMYaHR0cDovL3d3dy51c2VydHJ1c3QuY29tMTYwNAYDVQQDEy1V -VE4tVVNFUkZpcnN0LUNsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgRW1haWwwggEi -MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOYWk8n2rQTtiRjeuzcFgdbw5 -ZflKGkeiucxIzGqY1U01GbmkQuXOSeKKLx580jEHx060g2SdLinVomTEhb2FUTV5 -pE5okHsceqSSqBfymBXyk8zJpDKVuwxPML2YoAuL5W4bokb6eLyib6tZXqUvz8ra -baov66yhs2qqty5nNYt54R5piOLmRs2gpeq+C852OnoOm+r82idbPXMfIuZIYcZM -82mxqC4bttQxICy8goqOpA6l14lD/BZarx1x1xFZ2rqHDa/68+HC8KTFZ4zW1lQ6 -3gqkugN3s2XI/R7TdGKqGMpokx6hhX71R2XL+E1XKHTSNP8wtu72YjAUjCzrAgMB -AAGjggEnMIIBIzAfBgNVHSMEGDAWgBSgEQojPpbxB+zirynvgqV/0DCktDAdBgNV -HQ4EFgQUiYJnfcSdJnAAS7RQSHzePa4Ebn0wDgYDVR0PAQH/BAQDAgEGMA8GA1Ud -EwEB/wQFMAMBAf8wHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMBEGA1Ud -IAQKMAgwBgYEVR0gADB7BgNVHR8EdDByMDigNqA0hjJodHRwOi8vY3JsLmNvbW9k -b2NhLmNvbS9BQUFDZXJ0aWZpY2F0ZVNlcnZpY2VzLmNybDA2oDSgMoYwaHR0cDov -L2NybC5jb21vZG8ubmV0L0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMBEGCWCG -SAGG+EIBAQQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAnZXLPLh+pQnEHr8Lwsd2 -jjk8lMYQqk8MyeCrhF2JVOBlO/NtHHw3LCVUX5Yh/DeEkZ0V3BRPgc9UHWtsRWDH -LfmXUUz5Zso8oIKMpsjw4unUSvnsP1bJ3XaMw4IBT2wA8x4aYXQERwOpxkBXkbxl -IsUnZ09X22Ra2Y0fuoYv9AaunGnt6fTPKRfY4EqfGiAvl0xRu0YHxIo3TiDjCTFo -x57Ei53ofhG8MmgQlhGYRNgqUWBNiOt0Ot9DBjLIOVaMOhFS00GkQwP07e8zJ9s5 -4BROJsnY9TniibiTXbcpJkHqs5uug/x3dcroyrX+4mVKYz5ExNDDXodzqZgcr38V -fw== ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIBBTANBgkqhkiG9w0BAQUFADB/MQswCQYDVQQGEwJFVTEn MCUGA1UEChMeQUMgQ2FtZXJmaXJtYSBTQSBDSUYgQTgyNzQzMjg3MSMwIQYDVQQL ExpodHRwOi8vd3d3LmNoYW1iZXJzaWduLm9yZzEiMCAGA1UEAxMZQ2hhbWJlcnMg @@ -7174,34 +7145,6 @@ JdlhS7FxY2quK0jXPe9w3AGIDdK09RbAGOGMVuo7zCyLMATfE+72KwOKa/+PjfkQ KYmRklLOjd21u6BmmGIhhZJxwo9x7zqjS+Za7A== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIEyDCCA7CgAwIBAgIQYu9jivsE8WLzpAPYtf8baDANBgkqhkiG9w0BAQsFADBY -MQswCQYDVQQGEwJDTjEaMBgGA1UEChMRV29TaWduIENBIExpbWl0ZWQxLTArBgNV -BAMTJENlcnRpZmljYXRpb24gQXV0aG9yaXR5IG9mIFdvU2lnbiBHMjAeFw0xNTEy -MTYwMTAwMDFaFw0zMDEyMTYwMTAwMDFaMHgxCzAJBgNVBAYTAklMMRYwFAYDVQQK -Ew1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9u -IEF1dGhvcml0eTEmMCQGA1UEAxMdU3RhcnRDb20gQ2xhc3MgMyBPViBTZXJ2ZXIg -Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZxxv5UXg10ZLdSy2 -gPKaF00t/96u0tQAijq4Mf6ON576qtWjWxYSwRk+NIWWw77Ts0P0jW8WvTC6B/zY -msF5iYBtoIy+3Tf36wXTU39XWHZVtqiohkS4u9AT2v2P4fLNoBU4VVbOJs98k3Up -egqr+7oJOCARVwddf0mfKkpnHp5Y6cd/+cPt/l9Nr7hPnd9pLWkbOliBaWMw6oeN -D1KdWto5RLqfiZ82tsIZXNkmeNmuXvyVkL/oEcBHD3eJ3WooTwq8MmRXQz0IZZPl -Ra7dKAwnLI6mKwkDXaF40oyrtmu5RskZADm5v8YTK3NyH/I+N7jouRRliE3i8RvY -pR07AgMBAAGjggFsMIIBaDAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0lBBYwFAYIKwYB -BQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYBAf8CAQAwMAYDVR0fBCkwJzAl -oCOgIYYfaHR0cDovL2NybHMxLndvc2lnbi5jb20vY2E2LmNybDBqBggrBgEFBQcB -AQReMFwwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwMS53b3NpZ24uY29tMDUGCCsG -AQUFBzAChilodHRwOi8vYWlhMS53b3NpZ24uY29tL2NhNi1zdC1zZXJ2ZXIzLmNl -cjAdBgNVHQ4EFgQUsT8cknuSsFolszj7nAekJlAy41EwHwYDVR0jBBgwFoAU+mCp -62XF3RYUCE4MD42b4Pdkr2cwRQYDVR0gBD4wPDA6BgwrBgEEAYKbUQYDAgEwKjAo -BggrBgEFBQcCARYcaHR0cDovL3d3dy53b3NpZ24uY29tL3BvbGljeTANBgkqhkiG -9w0BAQsFAAOCAQEAj1hUq27mu2EKDoktiXt/iHa0YeU/OyX5TfQ5z5LF7Sntmyzu -G/d0s3uYk4lDylDyWOCFB6fcaRiQ/wo6I/ee1JoSALpQqWVpe6g+SabGhnsXbIRc -dtEbhcD72SbtIKa/O6upZThXQcLi4BPHjRn98QRPCxPkyv8e6KyQ3IpJzszGzYtB -W914Huoh4/JYyylhhhllkuJ/8mP71jgCjjwIPPVFlbqasrQvHCa5rbXVxTP+kAfW -g1PKZLWf09SZ1+SfddQGHkABVsbiXXLnqXF94uzKyO2NuHZ4GbIkkwLtQG1elWtZ -V0r2fV/w7r6zsXSa8NV7Y/hsOeYfitjjDX6Fpw== ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIF5TCCA82gAwIBAgIQal3D5TtOT9B7aR6l/OxkazANBgkqhkiG9w0BAQsFADB9 MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMi U2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzEpMCcGA1UEAxMgU3Rh @@ -10320,38 +10263,6 @@ Hloc31nUZVvDv/1uda8zRKq7CJ8SyUqiI0WA3LjJmZiTOSfBKzw0qj8I9GF26gu0 tAeYhZndeblh5f7xLKdoNOR3EX62fnt8izYJur0xaQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIFejCCBGKgAwIBAgIOSPWzg48IYKQ5SX8AAQ0wDQYJKoZIhvcNAQELBQAwYzEL -MAkGA1UEBhMCQkUxFTATBgNVBAsTDFRydXN0ZWQgUm9vdDEZMBcGA1UEChMQR2xv -YmFsU2lnbiBudi1zYTEiMCAGA1UEAxMZVHJ1c3RlZCBSb290IENBIFNIQTI1NiBH -MjAeFw0xNzAyMjIwMDAwMDBaFw0yNzAyMjIwMDAwMDBaMFwxCzAJBgNVBAYTAkpQ -MQ8wDQYDVQQKEwZKSVBERUMxHTAbBgNVBAsTFEpDQU4gUHVibGljIENBMSAtIEc0 -MR0wGwYDVQQDExRKQ0FOIFB1YmxpYyBDQTEgLSBHNDCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBAMrq3JgbD++QXP5p/hgPR0xz8mrqc/kEU6ELXKywMmwo -/+urkQfJPpR0jmpZX20yqBvwnjW5EQK/Hyv3wl8ULLAAbVRIJYqU1SBhmagEvaow -TxO5Gt6Y1vVJY++Z0XxZCN8hJhJMBvMPThAGjeysFOHRSg6zbJJXFSrj7ES2lSc8 -deyPpIbuE4xQeUSlG/ptQO38Hf+G7HQw8T7pIc3Bvuw+VHx5GB4vS7r17/CGCkDQ -c38bzUmYiR76VeZK06kFCaoD3Z9i4Fa4h3e+qFfw5Ln1UkDeSWee8/mHXEYU/X4u -5WmBL8hGYQyohOcsmu/xcCYVnqBidiHBwo0Vzp2jkO0CAwEAAaOCAjEwggItMA4G -A1UdDwEB/wQEAwIBBjCBpwYDVR0lBIGfMIGcBggrBgEFBQcDBAYIKwYBBQUHAwIG -CCsGAQUFBwMJBgorBgEEAYI3CgMEBgsrBgEEAYI3CgMEAQYKKwYBBAGCNwoDCwYK -KwYBBAGCNxQCAQYKKwYBBAGCNxQCAgYJKwYBBAGCNxUTBgkrBgEEAYI3FQUGCSsG -AQQBgjcVBgYKKwYBBAGCNwoDDAYIKwYBBQUHAwcGCCsGAQUFBwMOMBIGA1UdEwEB -/wQIMAYBAf8CAQAwHQYDVR0OBBYEFLmOzfHsei6cuetvCxzE1KwZrqFUMB8GA1Ud -IwQYMBaAFMhjmwhpVMKYyNnN4zO3UF74yQGbMIGNBggrBgEFBQcBAQSBgDB+MDcG -CCsGAQUFBzABhitodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vdHJ1c3Ryb290 -c2hhMmcyMEMGCCsGAQUFBzAChjdodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29t -L2NhY2VydC90cnVzdHJvb3RzaGEyZzIuY3J0MD4GA1UdHwQ3MDUwM6AxoC+GLWh0 -dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vdHJ1c3Ryb290c2hhMmcyLmNybDBNBgNV -HSAERjBEMEIGCisGAQQBoDIBKBQwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cu -Z2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAKyc -4WX95701EgfaSuH9UVrUheyYhoSwwgo5i7f1rqdEq1m0fIieynpj5RIcZWLTtr0d -OmuzBaUvNojbx4jwokj+dR+GUNmoXA/MozukJE4iWAWT7j1xNZHgVHFbd7nFvBfo -qnRJuY5xVAxSD7hdWEpsriIpBt4c8RCWEuAxWqxNm9a1YJd7pYiImrpMrs3zV5kE -FR8rPtwFM35wgXHpNXp2Cws7O+6D2oH6gHFt4yQi3dFR+eb58TlyFlAV39lzcor2 -zUYuMAHXibsQh+jm+foI2+zuDeZFc06ZT+bget3Rpxb0S9s3RMiSvyyGRbbYWSaZ -QB5sckV1ZhlVaaiqj5w= ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIF6zCCA9OgAwIBAgIITvIyF22b6hQwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNV BAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjEYMBYGA1UE CgwPU1NMIENvcnBvcmF0aW9uMTcwNQYDVQQDDC5TU0wuY29tIEVWIFJvb3QgQ2Vy @@ -11414,34 +11325,6 @@ nzYeJhMEqFGaDEmE3XXHP91t7aI5uWHUfv9BdI4hcZPSdxtgQwrAqFlpu9kf5ukK YbbKs1ktItGIBGiMCANYP24fC8iKwEGiX8wBcAw= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIEuzCCA6OgAwIBAgIRAP6z1iISG5JGOEZiOKLjAIMwDQYJKoZIhvcNAQELBQAw -ezELMAkGA1UEBhMCR0IxGzAZBgNVBAgMEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G -A1UEBwwHU2FsZm9yZDEaMBgGA1UECgwRQ29tb2RvIENBIExpbWl0ZWQxITAfBgNV -BAMMGEFBQSBDZXJ0aWZpY2F0ZSBTZXJ2aWNlczAeFw0xNzA3MDYwMDAwMDBaFw0y -ODEyMzEyMzU5NTlaMIGdMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBN -YW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0Eg -TGltaXRlZDFDMEEGA1UEAxM6Q09NT0RPIFNIQS0yNTYgQ2xpZW50IEF1dGhlbnRp -Y2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EgMzCCASIwDQYJKoZIhvcNAQEBBQAD -ggEPADCCAQoCggEBAI73aWA/XLQXKBh/ahXYl49o1PN22uV/cd3LvZCGHeXfZsCM -mUQyMhxQvTjjKPccuNOmdZtYNakTF3dxEyhkn8uFgG5E0FWLi8qZR6kj2NsmKOXS -n9ZHhGOicLfJ/R9STkryKKTWnIPbbLm+mq63Lt2dCuKq4v5S4PTHZn++v97eay2r -NTV8P/U/e46HDEv1/+j3jlZgJgtcuYwWFTrVHH7mviSzrZDnWIpBj69t1L4M4ZRD -DO1uHq5k6StofU0llbOnhTYrbGdgw7eKDkFAugr7Fcuwz8xvOOy7CvJaGQeP9bQY -YnIzM5eucE7PNv2eeVkyRJglV5vcLh6u1J3I03ECAwEAAaOCARUwggERMB8GA1Ud -IwQYMBaAFKARCiM+lvEH7OKvKe+CpX/QMKS0MB0GA1UdDgQWBBRsl7WY9Re4+b1i -bA9KTnlJzYK1ZzAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAd -BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEQYDVR0gBAowCDAGBgRVHSAA -MEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwuY29tb2RvY2EuY29tL0FBQUNl -cnRpZmljYXRlU2VydmljZXMuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcw -AYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqGSIb3DQEBCwUAA4IBAQBc -rlbxm34isUwPGOLpQqNM3gWGObKert7GZG3Hj8/uQ8UicwrY0n20UysUTakrCYx9 -w2iLHfyz3mc9pAlo17Vh7R8AC/AXCs84BrPr0l6Lf2dkvxhlz/YkS0BpmU3ZXArr -1PB2v1AmwtszL/GlgpVUcVFRXJnjvz1XhBm84lXhI1MmGhZUL0q1FZdgPm95xa9i -capwW/NbYsJWkXtmJDf9BD6W8V5tAaWQqUELCAwORiN+j+zjJ8YK6ZHttr/oWUS6 -momqigO3ZroVjLp26/vODOH9lEMmnLNoFOwN+wcnJGrA5KGFs3a8w6y/kRceyFrm -0+FO9zxlNMwGMmUM8f9K ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIIUDCCBjigAwIBAgIIAklSi/v/fd8wDQYJKoZIhvcNAQELBQAwgaUxCzAJBgNV BAYTAkVTMUMwQQYDVQQHDDpNYWRyaWQgKHNlZSBjdXJyZW50IGFkZHJlc3MgYXQg d3d3LmNhbWVyZmlybWEuY29tL2FkZHJlc3MpMRswGQYDVQQKDBJBQyBDYW1lcmZp @@ -14771,26 +14654,6 @@ AALKxDoYKYYUeVJ48v9YxxKLJNCzlm/lxDXH26CyeASpobxFsm7HYM6yJFfBoGkQ beMgnDT8X9ST0EhbYTmviY3R20Q= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIDPjCCAsSgAwIBAgIKAf4+bGjeu+wmPjAKBggqhkjOPQQDAzBrMQswCQYDVQQG -EwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNo -bm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g -RzMwHhcNMTgwMjE4MTgzMDAwWhcNMzMwMjE4MTgzMDAwWjBtMQswCQYDVQQGEwJJ -TjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9s -b2dpZXMgTGltaXRlZDEiMCAGA1UEAxMZZW1TaWduIEVDQyBFViBTU0wgQ0EgLSBH -MzB2MBAGByqGSM49AgEGBSuBBAAiA2IABLZXoamhYa/WwWE0nrNCo2lczaM2A35u -59TmOxsIbT3s4bb5KkXPt3x/5Aa79uxf+m3gc3fFPxbe3FjvZXY2eNvbNGW4CX/p -QdNpbwVxpMg6/F+oF9OMHk9vq94KQ1+UYKOCAS8wggErMB8GA1UdIwQYMBaAFHxd -AoQT1MyKm4HOFxwuKR6cSGNCMB0GA1UdDgQWBBTRqrTS0iWCTrPwk2AXSptjevkf -DTAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC -MD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwOi8vcmVwb3Np -dG9yeS5lbXNpZ24uY29tMBIGA1UdEwEB/wQIMAYBAf8CAQAwMgYIKwYBBQUHAQEE -JjAkMCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5lbXNpZ24uY29tMDMGA1UdHwQs -MCowKKAmoCSGImh0dHA6Ly9jcmwuZW1zaWduLmNvbT9Sb290Q0FHMy5jcmwwCgYI -KoZIzj0EAwMDaAAwZQIxAPOSHbUT2M805KMjMEor2epuLoycKuwnsGmtixn+ozlv -CuJS+sq+9onRDkgwtG3iqAIwAYlrF96JmhW7JN5JyYl/C8tK0d30N8s/Pk3Denh3 -KyPhSif7POMc82DvHqWLL+S0 ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIERTCCAy2gAwIBAgIKGlyC3ty8ahUwMDANBgkqhkiG9w0BAQsFADBWMQswCQYD VQQGEwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJ bmMxHDAaBgNVBAMTE2VtU2lnbiBSb290IENBIC0gQzEwHhcNMTgwMjE4MTgzMDAw @@ -14966,25 +14829,6 @@ lnZt1P85Ey8Ney4vS/sCiwd2qzsnclJ3ZqHLjCpvUgvzeP3Z8st6dGnKByV1Q1Zd FqC7Bs43V6c+D62dSjTdXWBHJbqM71UJG6w= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIDIDCCAqagAwIBAgIKI+G6At/z6QDt3TAKBggqhkjOPQQDAzBrMQswCQYDVQQG -EwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNo -bm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g -RzMwHhcNMTgwMjE4MTgzMDAwWhcNMzMwMjE4MTgzMDAwWjBuMQswCQYDVQQGEwJJ -TjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9s -b2dpZXMgTGltaXRlZDEjMCEGA1UEAxMaZW1TaWduIEVDQyBDbGFzcyAyIENBIC0g -RzMwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAASt0tTBgfEcQDnhwd1qvjyypyFq4kKi -3+Nw+UflaTgNrjD939y+XHaZMxGXJ8cMN28rfPl6x6TaScH7W8rQkRAWXN9xtTlb -toTLlKqgEO4rNtq/qnk6BRwMIiTdj1TXAm2jggEQMIIBDDAfBgNVHSMEGDAWgBR8 -XQKEE9TMipuBzhccLikenEhjQjAdBgNVHQ4EFgQU4Bb+vcThZcalmUyJXnGO1F1n -8f0wDgYDVR0PAQH/BAQDAgEGMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUF -BwIBFhxodHRwOi8vcmVwb3NpdG9yeS5lbXNpZ24uY29tMBIGA1UdEwEB/wQIMAYB -Af8CAQAwMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5l -bXNpZ24uY29tMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW1zaWduLmNv -bT9Sb290Q0FHMy5jcmwwCgYIKoZIzj0EAwMDaAAwZQIwGzEuvlR0hO3AV5IsUNAL -35TiHMHusf0lwxFIJv0XZQY5opx9f4FUFfUnRXEYXKxCAjEA6mo32Hc+R+Jgpcdd -GtaU+sZM9yhSS+TSGEn7hKHbXk0Bd0ApOg5Yd3HnOAFdWJTx ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIC/TCCAoSgAwIBAgIKPRKhz3gljVgIVDAKBggqhkjOPQQDAzBaMQswCQYDVQQG EwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMx IDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAw @@ -15055,64 +14899,6 @@ EA1nHUWz8OyQu5nljCqmVT+fG4lvr3pJ6za+4vyNht+QdaX5rKzbtc6tZLv2MJ7t zEQFW0OfgKQYTZrNKxBYGhqOeu4Necdbyf5wvKqGV4Fm/+ZbBxzvFVGW -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIDPDCCAsGgAwIBAgIKct3H6dzpsNz/xzAKBggqhkjOPQQDAzBrMQswCQYDVQQG -EwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNo -bm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g -RzMwHhcNMTgwMjE4MTgzMDAwWhcNMzMwMjE4MTgzMDAwWjBqMQswCQYDVQQGEwJJ -TjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9s -b2dpZXMgTGltaXRlZDEfMB0GA1UEAxMWZW1TaWduIEVDQyBTU0wgQ0EgLSBHMzB2 -MBAGByqGSM49AgEGBSuBBAAiA2IABBWwpaaD8WGEIlx1uQ6G9FY35y+AJ0ewgoXe -ZPXcz2OkkD6WNqITMSn+Nzl2489ITUU5GH0EpjWuujQv6stEYule7AVb7OolZsvz -eMXdq/2g5DHXGlW1FGc10DYx+9xynqOCAS8wggErMB8GA1UdIwQYMBaAFHxdAoQT -1MyKm4HOFxwuKR6cSGNCMB0GA1UdDgQWBBQTjUwomeFit9LgU+MY0WLcHMpm+jAO -BgNVHQ8BAf8EBAMCAQYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD0G -A1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwOi8vcmVwb3NpdG9y -eS5lbXNpZ24uY29tMBIGA1UdEwEB/wQIMAYBAf8CAQAwMgYIKwYBBQUHAQEEJjAk -MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5lbXNpZ24uY29tMDMGA1UdHwQsMCow -KKAmoCSGImh0dHA6Ly9jcmwuZW1zaWduLmNvbT9Sb290Q0FHMy5jcmwwCgYIKoZI -zj0EAwMDaQAwZgIxAP0zh/Pwvs1KWlruB+iqwSXWXUXxJ5RcvNhoMoT5Hq164K8i -4lb4tfVNV4Hb89HfugIxANXUFpJ5DvDugBmGsWIh3UDLY/MaIJr0LCyB3vebwqGw -eYppriQcyxqeG4xCXYLOcg== ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- -MIIDIjCCAqegAwIBAgILALjrJYMk2wiswvUwCgYIKoZIzj0EAwMwazELMAkGA1UE -BhMCSU4xEzARBgNVBAsTCmVtU2lnbiBQS0kxJTAjBgNVBAoTHGVNdWRocmEgVGVj -aG5vbG9naWVzIExpbWl0ZWQxIDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAt -IEczMB4XDTE4MDIxODE4MzAwMFoXDTMzMDIxODE4MzAwMFowbjELMAkGA1UEBhMC -SU4xEzARBgNVBAsTCmVtU2lnbiBQS0kxJTAjBgNVBAoTHGVNdWRocmEgVGVjaG5v -bG9naWVzIExpbWl0ZWQxIzAhBgNVBAMTGmVtU2lnbiBFQ0MgQ2xhc3MgMyBDQSAt -IEczMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEt/kiu55eyuZ/oAxsR1UMkQ9ytN3x -wX/7w2eOL1+R9TafuuD9YRcVK6oFadIw/ar5I0I22WAw9/Gwd9zI0DPTe/2Zho6m -TMNIH3LFgdRX5g7+hTH1vBv8UHqXXqiR1ys2o4IBEDCCAQwwHwYDVR0jBBgwFoAU -fF0ChBPUzIqbgc4XHC4pHpxIY0IwHQYDVR0OBBYEFCJiSrx+baEwtyrJlX4qI949 -J/ONMA4GA1UdDwEB/wQEAwIBBjA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEF -BQcCARYcaHR0cDovL3JlcG9zaXRvcnkuZW1zaWduLmNvbTASBgNVHRMBAf8ECDAG -AQH/AgEAMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3Au -ZW1zaWduLmNvbTAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVtc2lnbi5j -b20/Um9vdENBRzMuY3JsMAoGCCqGSM49BAMDA2kAMGYCMQCfcM3DXIEnxOkAE4co -/IRvdClPVNvHbO1eSrrH7tYklqpCoPbFlm6wwuj5JTXPJvoCMQCzTp1mDKZnJwbr -gDOCrI0PYxWGPWpI9g/YRh83rrsb8XmDdPrtOWZBRifZu4v0o+4= ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- -MIIDIDCCAqagAwIBAgILAIdigqj9dYw5HsMwCgYIKoZIzj0EAwMwazELMAkGA1UE -BhMCSU4xEzARBgNVBAsTCmVtU2lnbiBQS0kxJTAjBgNVBAoTHGVNdWRocmEgVGVj -aG5vbG9naWVzIExpbWl0ZWQxIDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAt -IEczMB4XDTE4MDIxODE4MzAwMFoXDTMzMDIxODE4MzAwMFowbTELMAkGA1UEBhMC -SU4xEzARBgNVBAsTCmVtU2lnbiBQS0kxJTAjBgNVBAoTHGVNdWRocmEgVGVjaG5v -bG9naWVzIExpbWl0ZWQxIjAgBgNVBAMTGWVtU2lnbiBFQ0MgRGV2aWNlIENBIC0g -RzMwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQ5qPpBiN5BbQSUldNBlP6FO5jLtouf -abBDLwXTXzcgFwakNh89uO5ug1m0M6QhLIZRkLOMxH4BMJ+rMb1lHnryjrp2i7la -XdsPk2ZCGLzcUnp3QA8ZBzzJhfHYSo1m8eujggEQMIIBDDAfBgNVHSMEGDAWgBR8 -XQKEE9TMipuBzhccLikenEhjQjAdBgNVHQ4EFgQUpaz5H1oljhCwKdoZACaG6KHm -6NkwDgYDVR0PAQH/BAQDAgEGMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUF -BwIBFhxodHRwOi8vcmVwb3NpdG9yeS5lbXNpZ24uY29tMBIGA1UdEwEB/wQIMAYB -Af8CAQAwMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5l -bXNpZ24uY29tMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW1zaWduLmNv -bT9Sb290Q0FHMy5jcmwwCgYIKoZIzj0EAwMDaAAwZQIwF7tFSgQvVGC3YidTEIxu -26OnAEvCij1ebFju9WG0Nc0eQG3pPqdnh0OgixpWv+cXAjEA9ksmCrk3ZASLdG7y -WDeiPyvdwWWx0Xuj5hKEnm8U7GbtQ7BSFKMJ6kjRqlmb1GlX ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIDGTCCAp+gAwIBAgIKW32bsf0zubwdhDAKBggqhkjOPQQDAzBaMQswCQYDVQQG EwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMx IDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAw @@ -15132,25 +14918,6 @@ oK7En7a0p3ESe/DroYG48ys9SUGAZ3+gr4OnAjAIbqwFSaxsvNTrolD0mI99iDA7 sranVo+LcI5dCGkaCSNzr7m1eJVLIUi/s7Su2PQ= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIDITCCAqegAwIBAgILAPseIZgusbVcWSUwCgYIKoZIzj0EAwMwazELMAkGA1UE -BhMCSU4xEzARBgNVBAsTCmVtU2lnbiBQS0kxJTAjBgNVBAoTHGVNdWRocmEgVGVj -aG5vbG9naWVzIExpbWl0ZWQxIDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAt -IEczMB4XDTE4MDIxODE4MzAwMFoXDTMzMDIxODE4MzAwMFowbjELMAkGA1UEBhMC -SU4xEzARBgNVBAsTCmVtU2lnbiBQS0kxJTAjBgNVBAoTHGVNdWRocmEgVGVjaG5v -bG9naWVzIExpbWl0ZWQxIzAhBgNVBAMTGmVtU2lnbiBFQ0MgQ2xhc3MgMSBDQSAt -IEczMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEOReHn35H+3QHeBQoo2GaV/M5/wJ3 -/l+RYkEm6Asuf2xUlYCMZmokaSzC3Z05V2kf9LAevtB0dSecVMz8l3XGVoaIaaLO -fxmAIPPlvVyMCJ3EgnCAGH+1ZONRf35995B5o4IBEDCCAQwwHwYDVR0jBBgwFoAU -fF0ChBPUzIqbgc4XHC4pHpxIY0IwHQYDVR0OBBYEFEa+gMPIJ/7sm1grGmJdstXR -AjhoMA4GA1UdDwEB/wQEAwIBBjA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEF -BQcCARYcaHR0cDovL3JlcG9zaXRvcnkuZW1zaWduLmNvbTASBgNVHRMBAf8ECDAG -AQH/AgEAMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3Au -ZW1zaWduLmNvbTAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVtc2lnbi5j -b20/Um9vdENBRzMuY3JsMAoGCCqGSM49BAMDA2gAMGUCMQC+j9TyTWudMq4HdKE/ -1ib6vzapfBmQ/8Vbu3PHCMWPdpfLCcBSwh24bUOxKeVlGx4CMHfW32Xd+90Z/5IB -A6lkX+6E1Tl588OddGhKwsLq3T3CVjwcIZMBWhRh84fcqIAdaQ== ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIDHTCCAqKgAwIBAgIKG1BYH3M0swsnIzAKBggqhkjOPQQDAzBaMQswCQYDVQQG EwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMx IDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAw @@ -23166,35 +22933,6 @@ FUazCjxvhHm5YWqulA51wFT2K9LRiiEWw3UJAgTTmxASitVHHLb3erkETk6SCwGv OG1eD0qLwuSeARZmhw3xFOCvMHeQ -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIFAzCCA+ugAwIBAgIRAMt5UT/fWkG366O1ASxmV2IwDQYJKoZIhvcNAQELBQAw -ezELMAkGA1UEBhMCR0IxGzAZBgNVBAgMEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G -A1UEBwwHU2FsZm9yZDEaMBgGA1UECgwRQ29tb2RvIENBIExpbWl0ZWQxITAfBgNV -BAMMGEFBQSBDZXJ0aWZpY2F0ZSBTZXJ2aWNlczAeFw0xOTA2MTkwMDAwMDBaFw0y -ODEyMDYyMzU5NTlaMGQxKzApBgNVBAMTIkFwcGxlIFB1YmxpYyBDbGllbnQgUlNB -IENBIDEyIC0gRzExEzARBgNVBAoTCkFwcGxlIEluYy4xEzARBgNVBAgTCkNhbGlm -b3JuaWExCzAJBgNVBAYTAlVTMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC -AQEAm39I57iRs4aa5rTkT8v25aMpY3wlYJoEQ+S2f/FWHuTVAGD3cZVQinVLEPno -c8b3P+hfrFzx0jDl6HCy7Qa0a6epruXfORXQD0/Q2Y0MdGYaIwJqN2ClPsa9qICt -J6RKFFjnS9iMzDoq80fJ0sCnY8HFBlTJ1+BJCsL2FH7kqIDVPuRGodcE8qv/eIR+ -USwHEY0ih6vWWHs1/+wXF35wdwDa/mDosthxr9y3nK/28BnHL+B/KHVk8dRrim1c -5ioO/g8st6y9fz3Hgep+sEpMh51NkUFXwoVlsu3aZOlj90MvynPq+XZD+bfuc6SJ -wBH8Rk1MxQBl5aPMrkHInUP12wIDAQABo4IBlzCCAZMwHwYDVR0jBBgwFoAUoBEK -Iz6W8Qfs4q8p74Klf9AwpLQwHQYDVR0OBBYEFMoG8JISPXsAWukoR6glG/DQgELM -MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQw -gZIGA1UdIASBijCBhzANBgsqhkiG92NkBQsFATANBgsqhkiG92NkBQsFAjANBgsq -hkiG92NkBQsFAzANBgsqhkiG92NkBQsFBDANBgsqhkiG92NkBQsFBTANBgsqhkiG -92NkBQsFBjANBgsqhkiG92NkBQsFBzANBgsqhkiG92NkBQsFCDANBgsqhkiG92Nk -BQsFCTASBgNVHRMBAf8ECDAGAQH/AgEAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6 -Ly9jcmwuY29tb2RvY2EuY29tL0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMDQG -CCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2Eu -Y29tMA0GCSqGSIb3DQEBCwUAA4IBAQBVuyW5n/2AUXteIehTcfA/AENKMJwZpvfi -tTwIOPin2iyywoxY/eulT7lEp8eJo3pqsLN8daxqOjdC+c/swMKN6/dcPVKtUfgh -t3xgKzfuzOwlQ3AVJAtCta5shCo5Sg4zxKdguQ5oaUvy6JgNrQzLAo4+p03YfNpJ -dD7ienJQ1gfMP1gXVimRNAA7QhRqZhCwLVdisu3e9A7kRYafrjK4P5/t/GzMu1Ym -EoMDgZzj1yhmewNvqOqformfj9+Ly+Tw+KmbWCy/ty6Z6bDwdxYcoGwgCC5vv10H -nwusiqf7tIbbvSrwkPldhZZ8xEDfILwOLUHxdznoK0mZe0lC+arK ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIDpzCCAo+gAwIBAgIQdR4/U+MYWTPpXwjs7q0ClzANBgkqhkiG9w0BAQwFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTE5MDYx