From ed5b68856fb72692e8405780b653868a76f6b87c Mon Sep 17 00:00:00 2001 From: Andrew Mitchell Date: Wed, 21 Oct 2026 12:18:31 -0400 Subject: [PATCH] Remove dead-end intermediates from the current bundle Remove 11 intermediates whose issuers are in neither bundle from database snapshot 2026.10.2, which has not been tagged yet. Earlier snapshots are unchanged, and future release rolls copy from 2026.10.2. Verifiers without issuer backtracking, such as BoringSSL, pick the first certificate matching an issuer's name. The StartCom Class 3 OV Server CA copy issued by WoSign G2 and the JCAN Public CA1 - G4 copy issued by Trusted Root CA SHA256 G2 can be selected ahead of their working copies, which then fail depending on bundle order. The working copies remain. The six emSign ECC G3 intermediates and three AAA-issued client authentication CAs lost their only issuer when those roots were distrusted, so they can no longer build a path. Validation: go test ./... -count=1 and go vet ./... --- cert.db | Bin 58650624 -> 58650624 bytes certdata/dead_end_intermediate_test.go | 47 +++++ certdata/int-bundle.txt | 203 ------------------- int-bundle.crt | 262 ------------------------- 4 files changed, 47 insertions(+), 465 deletions(-) create mode 100644 certdata/dead_end_intermediate_test.go diff --git a/cert.db b/cert.db index efa86b919302f528fa726355fd61017d00088b4c..50a80e5b2e3a4895e5bbbe33eb8a67d953564bd3 100644 GIT binary patch delta 5040 zcmYk?)BGv|N`oZ~L8AnqFit{@5uihH>4xP2|f1yIWcG%>%KnsU_aq^3X0 z)b@}P&60zam0B(>hNXqJ*>0tkS$RL7d++ny`^WqB%$b=p&vRzZGvAq2Rks?iLjJ~9 z+U6!{o-|kN#y<*0#Zs|V92K{UMZsIJ zsi#t3rGZMMN<)=KDvec|s5Dh+rV^zRt(I&Dl1j)RavD{sIpq+K9w~ps&c=|T9pS>)~T#l*`V^E%0`tW&BP!cfcBt%Bc~oVW%5D{-Qmpcr%Ht|~RGv`TtFljJzsi#; zPpLeu@{G!}D$l7rukyk{DJc$y$J&Ej-mTujzB1puK<$c>(TAj>B;RWmbsp?&3=~JF z#Rf9ZltivAJyU`Xpi=ZAdI=pwW#|w(j9x}Z&@1RwbQG1NAgVye&}-;*^aeVP-b8Pq zx6ui75}iWtpm)(}bOxP8=g@oTee?nP5S>RKp-OZCeT+Uq7ttm3Df$dmq08tB`W$_M zzC>T4uhCWX4f+;+hrUNYpdZms=oXQamu=Gr%H8R@W#kJC9 zQmc~eDAQruGOLc;^0`i#)N7Ged@u*zwoP79ZM$fHba9py2>Qo_m^SNYSlx>fZ$w(4 zA!$S!lP07oX-1+*G-*y^NDI=Ev?8rZ8`74vBkf5C(vfr`v7|GJBk?4GbRk_yH`1N- zAU#PUNg};SGU-kFkQ9$TESbB@~rB0 zt**wCn`aGc7IGnEOURHAx68P`@x5$yu~t}bx@$TooYhV*`+6`JI~7~jxByPjC{t3g z-3l=o$A(#nMSB+JSzsYqL>7~~$vtF=72LCMsWrW~yQeGQ3e=2i-qfk>3Yh5PC3bz2 zTC&ti3RLar8f7Z{@i^!%tmtbJZf>-PnzDmStzPDZ150rMvLRSTmXmx^Kvs~I5Z7SIFn&3-TrT$_i#5_}bc0?(SkOa+$c2O1o_!?%M2VGqPg1 z9c3-rR;zA1<6kww3N^*KSFLsUJox`UCl{6FUA4eB&cx5!`QZ}JbhZEYyav$0?in>fTxJS2pKl4_(nsX@X>IEf%$;v+Rl zErQ#9SzaAdm((NmNdpo|8j?n&F=;}Yl4c}|M3d$uhO{6pNh{Ktv>|OtJJOzXARS33 z5^D#`@;ckYe{}b7<^N|=)pc97U8hYn##Ku*U|O7=;IX!QrnpRDcAVWico=Jrdre-Z zu^I+2wX%0tWZ~A`d0JCDq9{E#&Ia)$fpj5VNjK7+^dLP+B1s~>NHXb7`j8Ymn4X(z zS4_3K8PC~NyN!v31DudG9#gog!meW~QtMeE!A)2@*lk%RucptAImAhdp;489|5V2L zR6DUK8G^o~A4wzWq(2!zGRQzOhzuq}$WStj3@3MxOfrIuB%{b^GKP#LE=8^ei0m&h`1pnaV^9#u$JD7ZavHf;K zOi<6Y#df^u3DbkiVJ|08SRC4umvZHQ@A~UYHmXYNopA?W4 zWF@(mtRjVEHMx(hAxiEiYsmv-9a&E{kO#>|vWXNCKiN#Skgen)vW+}U0^||0o$Mex z$)jW!*-Z>7CXbQF$sRkn@A?yVRv6~uxqr{a)+V-UtQ{KYQuF&JW=duQJ8W0hUc0Gv zjzf3cuHp(SbYtaSdt>E3v>!c*o^89IaxqnFVU z^a^?v9Yy6Rh$_%A^cs2{y@8ISH_=<@ZFB;iM5oX@=v{Ogok3^OIrJWSAANv6MCZ{* zs1jX3AEQsuMRW;$iatYC=rX#3K1W}mFVR=%YjhQTgT6)Iq3_WT=tuMux`uv6zo1{y zb#w#$hJHtXpquDVbPN53{zm_x+xEIjXJe&>Y~&y}@}LkDimIXNs0Io{;V1%mkq^~G zwNPzT2h~OOP<_+@MWTkN5o(N@pr)u9ibBz-If_9oP)pPbwMK1FThtDxD~F(= zXc!uf?m(GngmbiVq|-6z?(Ev>1X5S+Y32@_7ZzhWR*ZCd2l8?cw%eQ;W^xbgwL{IO z_e$-g;6-d1TFv^KkK#A2KvnUxq2_AWS$0y<%u^#BFp7*OW5`%Cj*KT0$V4)UOeRxE z7MV(>k?CXxnMs7qB6pIz$ZRr)WRtmM9+^)TkQ|ar^2kE6h%6>|lY7V#veXIAJhjZ( zJ-TuDEmtqsZkO+nZ-K9s_aa})y;j8Gh?NoPrdjlIXQnC4{Mw2N?#A+zaNFfF&0oy2 zGu++%t9zJQC-+-%yU*2eJVh%yEq8(|I^{cS65LjdtB3JS%Xj8`To+t^m${rY*KTP1 zShMASN9g5W<1_J*-7w%%3g5Lo!KbF@JL6;BAv^hPf4(!o41*m*mbv=-)otR}##kxF z-|v*=2_D0Sk3A+g^}5|@TXfwK~b;m=#uiUr77w7%l zyTd!eTP@->)2JlhnPT#yGpv|k0LxeY?>F`HYq*)dCdNt*+U5Dq?Y`}*Uvee5j<|eB ze2aY@yjQ&2y_pdwBi2TwM_A$I;rZb`!%D+)!aCN7-qpRpN%I`RzDLZ0v+M1FM~@UZ zEvh>;X1Yw@k}giFiLQY?++jCdCwLD%?oRRF?*#H1o=!A#!U~)R9dE>c_rw;x*TiQp zcKQUDhZi_oEysn^{_mp%Gra}QfyY83a$Mb9TTH0mn6rDiu{KsZ>@8R0&cERtZrFRS8q6qEc0*no4z*8Y(qa zYN^y#siRU?rJhQCm2i~?Dh*X4R3cTPR2r!?R%xQrRHd0pbCo+(TBx*CX{FLyC0eD8 zN{mXZN}Nhtm3AueD(zJ|s3fQ)s&rIIQb|_nq>`eNs*dsODDEKpgf zvPdOIC0Av!$`X}(RhFtOQ(3OELS?0js;p93t#Y5r{VETrtWkMTWvxn{O1?^g$~u+x zDjQTbs%%nuNTpEaVUVKfG5zei(h!s6 zjdiXcvgUdvH^r7+t>hjr9QX6}BpW(;uIuy0dEJUO@`3RtIY04QZ3F6%x}+YdPr^w9 z(vU=uND@UFk;bG6X-b-r=Hw32g0v*9NNW;J+K?C$OX5gd(vHNF_M`(zAc>?SNg~Ol z6G@me=iHo~;EzRd2XgA+K-CSwrep9x!6c08wTxvVfJtU2G< zq}#Mn-Hp$U^BNoZQ)AQl_HzD>k=+gGL3)y2q&Mk9`jUR+PLfIblL2HP8AJw?A!H~S zMuw9SWF#3yMw2n*E;5#kBjd>gB4i?&MD8Y&$rLh`Oe53D3^J3TddRdji_KAQn0w4!?k4%Ou+erC6dLZ1PfVCNK_z9sSxJd7SJZPmrBt7kQFAMV=H@)kKp-X>+_9dewUAScPYlC$J9@;Ui}l#_GhJo%DbAYYNMjeqLiZ_MW6Lht3t8w(3E zk5sZb*%wWc&ASlh1laRg7fp8?d1asZZwmDW+3a~2O-BBHYzMw2-;wXh59CL3iTp$^ zlPlzB@(a02u908KZ{#}po%}&=kUz;^$Oae&| z2__*Vl!TEgq$;UKs*@U|CaFbglRBg>sYmLQaMFM@BoQQ%M3F|MF=;}Yl4hhixr4MI zElDfVnnXMP{n>4tewVxno}Am$UG)G{)pH{B6&o=&#u?)JMtkhCsWDC`|3NIj5rV68 zY}+U&$&Gh2ZPual_%CKU3vN$w-n^_BCod}&#i6#S9g0WoQ3sTO5>ZE#gpyGwl!8*7 z;;b~sJJz(fzIW4{W{&TmZG}NMmP;LpRlUS7v@-kvJEgyUaM8D_k; z!SPEb!E>7+BsAYDjT(v5T{JxEW| zi}WUaNMF*A+(|M?e=>j!B!kFcGK35z!^m(lf{Y}i$Y?T#+(pKcab!H1K!i*rlgQm< zGMPfAl4)c*nL%cfStN_#1D$+kHksr2lh4d`-l}6dTHoclPORf?X4_-X#h(ikT{F*K znRC-5+QGALngmwtOW9x|USAPdPNl0$OIVzPwXOO}#lWI0(u zRuUzv$ZB#Qxt}~h){qCuT9QZdNdZ|$){_lnBiTeAB8B8(@(9^Xwvb23ROT|chp~s9`2Xfj z-`Z0>Q4k77At)4up(>~Z5Sf05wDrC=x}XMyN4rf|{acs5!a=wLmRVE7TfAqc$i8#iBUW z7PUk1s6Fa{5>O)Qh>}n;>V#5IDoR7?s58nyT~Jrl4RuF7P*2ng^+tVAU(^rXi84`t z_sFRMZd<=M#x8d&qpU!1YfkTj*{Z6z=hOl0Dlzp$9@|hBgT~%byKGOz^?rCBa>SZrJ(}i`)rz zMdmjq+`kRu(Lvs>1%iZ=fwdMtZ!_NJHyT`FE#aT9>yE-G%Ldj_qH39TKV>G5J?3qLv3vBc-(5FE<5h{ z{7;X|afe0!vwJ~~+s$mTz3{g+c2%#9T^(goZ9(TUa97(ciEz$30)W4qiqF+&_dChb|6{3HdT)b4dS?iovf2FSNCba@^5&VMKG& zz`qIO3p_^+w*B+s&A+d%bAblgaVw)tvfnArac`yv@U%RKZH1C}ld?52*KKF#jm>q_ zj~vc*8&&eA7Objh&mD`$jCAXE+Qiw2%DHX^9|*AP%mO#Xhu65uS7?sDmiW(GfMu^O zy%~j_Zhb+ywS`-lUFSriof4SqKFGa2c3spI=l^!mdu{C0xo(PoQBbbC!C(_zV5^+q zkyEGRM&88vGedISy^mS5eYaWf-%yn6p5+uSJz8&Qi Q=el{ti{0mnm$-5N0|4B@R{#J2 diff --git a/certdata/dead_end_intermediate_test.go b/certdata/dead_end_intermediate_test.go new file mode 100644 index 00000000..8f9de8bd --- /dev/null +++ b/certdata/dead_end_intermediate_test.go @@ -0,0 +1,47 @@ +package main + +import ( + "crypto/sha256" + "fmt" + "testing" +) + +// These intermediates are issued by CAs that are not in either bundle, so no +// path through them reaches a trust anchor. Verifiers without issuer +// backtracking select the first certificate matching an issuer's name, so a +// dead-end copy listed before a working one breaks chains depending on bundle +// order. The emSign ECC G3 and AAA-issued certificates lost their issuer when +// those roots were distrusted. +func TestDeadEndIntermediatesAreExcluded(t *testing.T) { + excluded := map[string]string{ + "b4dae2869f79bc77c29ad1a2a88a3932af3a9593fe820fb263c0db89843e9559": "StartCom Class 3 OV Server CA (WoSign G2)", + "7b464dc384fdb1a525c2cc279ed0c7cfad24becf72c46a7d7093d157c217607e": "JCAN Public CA1 - G4 (Trusted Root CA SHA256 G2)", + "0116f17f97cdef4ade2e63cf2c1b064fd99f404d2b914100bc241f0781853323": "emSign ECC EV SSL CA - G3", + "4e9b731567177e1776a96d66d9120b3deb28b800937ea4662565b3ef5ec8000b": "emSign ECC Class 2 CA - G3", + "6b51d1dcf4eb7aee424185cb1b9580574b39cb963863de3ec1ad31ddb076ce9f": "emSign ECC SSL CA - G3", + "7066a0f42f530e0db5afee72a3b04de614e7d2305c67d12c756bb215e37cb975": "emSign ECC Class 3 CA - G3", + "70b9ba595412cf8614b76747fd683cca2759f42642164834fbefdd88505c4f1c": "emSign ECC Device CA - G3", + "aba6a65dce8955baf0685ab88809b7699c174496ef9ee991533251494f43ce10": "emSign ECC Class 1 CA - G3", + "14e384649aa401f1d1cabd5fa3d08abe82f14b7dae6c5615b1cd7dd41e9750e3": "UTN-USERFirst-Client Authentication and Email (AAA)", + "ad61327ee99b40613e480751b56691a096412c68f74f4012b29fa0f48bb924c9": "COMODO SHA-256 Client Authentication and Secure Email CA 3 (AAA)", + "eb62bffa6cbc802e4dae6f8c53908020be7f07774a55e67bbd63ecc37679dec8": "Apple Public Client RSA CA 12 - G1 (AAA)", + } + // Copies of the same CAs that chain to a trusted root must remain. + retained := map[string]string{ + "ea4e5d2b9c99560f13dd094b8121a623bfdd902038dfd6d772ce32ffabec094d": "StartCom Class 3 OV Server CA (StartCom Certification Authority)", + "9ac4c8e358c095c998122add17a336c0ac597ecbecb7edc3f58a75040cf94a5f": "JCAN Public CA1 - G4 (Trusted Root nonTLS CA SHA256 G3)", + } + + for _, file := range []string{intBundleFile, caBundleFile} { + for _, cert := range loadBundle(t, file) { + fingerprint := fmt.Sprintf("%x", sha256.Sum256(cert.Raw)) + if name, found := excluded[fingerprint]; found { + t.Errorf("%s contains dead-end intermediate %q (%s)", file, name, fingerprint) + } + delete(retained, fingerprint) + } + } + for fingerprint, name := range retained { + t.Errorf("bundles are missing working intermediate %q (%s)", name, fingerprint) + } +} diff --git a/certdata/int-bundle.txt b/certdata/int-bundle.txt index ee6fd745..a458c571 100644 --- a/certdata/int-bundle.txt +++ b/certdata/int-bundle.txt @@ -50,23 +50,6 @@ Details: Basic constraints: valid, is a CA certificate, max path length 11 SANs (1): email:ac_camerfirma@camerfirma.com CERTIFICATE -Subject: /UTN-USERFirst-Client Authentication and Email/C=US/O=The USERTRUST - Network/OU=http://www.usertrust.com/L=Salt Lake City/ST=UT -Issuer: /AAA Certificate Services/C=GB/O=Comodo CA - Limited/L=Salford/ST=Greater Manchester - Signature algorithm: RSA / SHA1 -Details: - Public key: RSA-2048 - Serial number: 150965947980182260189135672189403666599 - AKI: A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4 - SKI: 89:82:67:7D:C4:9D:26:70:00:4B:B4:50:48:7C:DE:3D:AE:04:6E:7D - Valid from: 2004-01-01T00:00:00+0000 - until: 2028-12-31T23:59:59+0000 - Key usages: cert sign, crl sign - Extended usages: client auth, s/mime - Basic constraints: valid, is a CA certificate - SANs (0): -CERTIFICATE Subject: /AC Camerfirma Certificados Camerales/C=ES/O=AC Camerfirma SA/L=Madrid (see current address at www.camerfirma.com/address) Issuer: /Chambers of Commerce Root/C=EU/O=AC Camerfirma SA CIF @@ -3900,26 +3883,6 @@ Details: - http://ocsp2.netlock.hu/gold.cgi - http://ocsp3.netlock.hu/gold.cgi CERTIFICATE -Subject: /StartCom Class 3 OV Server CA/C=IL/O=StartCom Ltd./OU=StartCom - Certification Authority -Issuer: /Certification Authority of WoSign G2/C=CN/O=WoSign CA Limited - Signature algorithm: RSA / SHA256 -Details: - Public key: RSA-2048 - Serial number: 131507321505835480915737962268449512296 - AKI: FA:60:A9:EB:65:C5:DD:16:14:08:4E:0C:0F:8D:9B:E0:F7:64:AF:67 - SKI: B1:3F:1C:92:7B:92:B0:5A:25:B3:38:FB:9C:07:A4:26:50:32:E3:51 - Valid from: 2015-12-16T01:00:01+0000 - until: 2030-12-16T01:00:01+0000 - Key usages: cert sign, crl sign - Extended usages: client auth, server auth - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - 1 AIA: - http://aia1.wosign.com/ca6-st-server3.cer - OCSP server: - - http://ocsp1.wosign.com -CERTIFICATE Subject: /StartCom Class 1 DV Server CA/C=IL/O=StartCom Ltd./OU=StartCom Certification Authority Issuer: /StartCom Certification Authority/C=IL/O=StartCom Ltd./OU=Secure @@ -5683,25 +5646,6 @@ Details: OCSP server: - http://ocsp.certsign.ro CERTIFICATE -Subject: /JCAN Public CA1 - G4/C=JP/O=JIPDEC/OU=JCAN Public CA1 - G4 -Issuer: /Trusted Root CA SHA256 G2/C=BE/O=GlobalSign nv-sa/OU=Trusted Root - Signature algorithm: RSA / SHA256 -Details: - Public key: RSA-2048 - Serial number: 1479799948140408368275204572446989 - AKI: C8:63:9B:08:69:54:C2:98:C8:D9:CD:E3:33:B7:50:5E:F8:C9:01:9B - SKI: B9:8E:CD:F1:EC:7A:2E:9C:B9:EB:6F:0B:1C:C4:D4:AC:19:AE:A1:54 - Valid from: 2017-02-22T00:00:00+0000 - until: 2027-02-22T00:00:00+0000 - Key usages: cert sign, crl sign - Extended usages: client auth, ipsec user, ocsp signing, s/mime - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - 1 AIA: - http://secure.globalsign.com/cacert/trustrootsha2g2.crt - OCSP server: - - http://ocsp2.globalsign.com/trustrootsha2g2 -CERTIFICATE Subject: /SSL.com EV Root Certification Authority RSA R2/C=US/O=SSL Corporation/L=Houston/ST=Texas Issuer: /SSL.com EV Root Certification Authority RSA R2/C=US/O=SSL @@ -6254,25 +6198,6 @@ Details: OCSP server: - http://ocsp2.globalsign.com/rootr3 CERTIFICATE -Subject: /COMODO SHA-256 Client Authentication and Secure Email CA - 3/C=GB/O=COMODO CA Limited/L=Salford/ST=Greater Manchester -Issuer: /AAA Certificate Services/C=GB/O=Comodo CA - Limited/L=Salford/ST=Greater Manchester - Signature algorithm: RSA / SHA256 -Details: - Public key: RSA-2048 - Serial number: 338557675202063134740279581908924563587 - AKI: A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4 - SKI: 6C:97:B5:98:F5:17:B8:F9:BD:62:6C:0F:4A:4E:79:49:CD:82:B5:67 - Valid from: 2017-07-06T00:00:00+0000 - until: 2028-12-31T23:59:59+0000 - Key usages: cert sign, crl sign, digital signature - Extended usages: client auth, s/mime - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.comodoca.com -CERTIFICATE Subject: /InfoCert Organization Validation CA 3/C=IT/O=InfoCert S.p.A./OU=WSA Trust Service Provider Issuer: /GLOBAL CORPORATE SERVER/C=ES/O=AC Camerfirma S.A./L=Madrid (see @@ -8334,25 +8259,6 @@ Details: OCSP server: - http://ocsp.usertrust.com CERTIFICATE -Subject: /emSign ECC EV SSL CA - G3/C=IN/O=eMudhra Technologies - Limited/OU=emSign PKI -Issuer: /emSign ECC Root CA - G3/C=IN/O=eMudhra Technologies Limited/OU=emSign - PKI - Signature algorithm: ECDSA / SHA384 -Details: - Public key: ECDSA-secp384r1 - Serial number: 9412337563025552451134 - AKI: 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 - SKI: D1:AA:B4:D2:D2:25:82:4E:B3:F0:93:60:17:4A:9B:63:7A:F9:1F:0D - Valid from: 2018-02-18T18:30:00+0000 - until: 2033-02-18T18:30:00+0000 - Key usages: cert sign, crl sign - Extended usages: client auth, server auth - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.emsign.com -CERTIFICATE Subject: /emSign Class 2 CA - C1/C=US/O=eMudhra Inc/OU=emSign PKI Issuer: /emSign Root CA - C1/C=US/O=eMudhra Inc/OU=emSign PKI Signature algorithm: RSA / SHA256 @@ -8470,24 +8376,6 @@ Details: OCSP server: - http://ocsp.emsign.com CERTIFICATE -Subject: /emSign ECC Class 2 CA - G3/C=IN/O=eMudhra Technologies - Limited/OU=emSign PKI -Issuer: /emSign ECC Root CA - G3/C=IN/O=eMudhra Technologies Limited/OU=emSign - PKI - Signature algorithm: ECDSA / SHA384 -Details: - Public key: ECDSA-secp384r1 - Serial number: 169446747838701918809565 - AKI: 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 - SKI: E0:16:FE:BD:C4:E1:65:C6:A5:99:4C:89:5E:71:8E:D4:5D:67:F1:FD - Valid from: 2018-02-18T18:30:00+0000 - until: 2033-02-18T18:30:00+0000 - Key usages: cert sign, crl sign - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.emsign.com -CERTIFICATE Subject: /emSign ECC Class 3 CA - C3/C=US/O=eMudhra Inc/OU=emSign PKI Issuer: /emSign ECC Root CA - C3/C=US/O=eMudhra Inc/OU=emSign PKI Signature algorithm: ECDSA / SHA384 @@ -8537,61 +8425,6 @@ Details: OCSP server: - http://ocsp.emsign.com CERTIFICATE -Subject: /emSign ECC SSL CA - G3/C=IN/O=eMudhra Technologies Limited/OU=emSign - PKI -Issuer: /emSign ECC Root CA - G3/C=IN/O=eMudhra Technologies Limited/OU=emSign - PKI - Signature algorithm: ECDSA / SHA384 -Details: - Public key: ECDSA-secp384r1 - Serial number: 542440914775208739274695 - AKI: 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 - SKI: 13:8D:4C:28:99:E1:62:B7:D2:E0:53:E3:18:D1:62:DC:1C:CA:66:FA - Valid from: 2018-02-18T18:30:00+0000 - until: 2033-02-18T18:30:00+0000 - Key usages: cert sign, crl sign - Extended usages: client auth, server auth - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.emsign.com -CERTIFICATE -Subject: /emSign ECC Class 3 CA - G3/C=IN/O=eMudhra Technologies - Limited/OU=emSign PKI -Issuer: /emSign ECC Root CA - G3/C=IN/O=eMudhra Technologies Limited/OU=emSign - PKI - Signature algorithm: ECDSA / SHA384 -Details: - Public key: ECDSA-secp384r1 - Serial number: 873253120750060978356981 - AKI: 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 - SKI: 22:62:4A:BC:7E:6D:A1:30:B7:2A:C9:95:7E:2A:23:DE:3D:27:F3:8D - Valid from: 2018-02-18T18:30:00+0000 - until: 2033-02-18T18:30:00+0000 - Key usages: cert sign, crl sign - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.emsign.com -CERTIFICATE -Subject: /emSign ECC Device CA - G3/C=IN/O=eMudhra Technologies - Limited/OU=emSign PKI -Issuer: /emSign ECC Root CA - G3/C=IN/O=eMudhra Technologies Limited/OU=emSign - PKI - Signature algorithm: ECDSA / SHA384 -Details: - Public key: ECDSA-secp384r1 - Serial number: 639336671160327963483843 - AKI: 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 - SKI: A5:AC:F9:1F:5A:25:8E:10:B0:29:DA:19:00:26:86:E8:A1:E6:E8:D9 - Valid from: 2018-02-18T18:30:00+0000 - until: 2033-02-18T18:30:00+0000 - Key usages: cert sign, crl sign - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.emsign.com -CERTIFICATE Subject: /emSign ECC SSL CA - C3/C=US/O=eMudhra Inc/OU=emSign PKI Issuer: /emSign ECC Root CA - C3/C=US/O=eMudhra Inc/OU=emSign PKI Signature algorithm: ECDSA / SHA384 @@ -8609,24 +8442,6 @@ Details: OCSP server: - http://ocsp.emsign.com CERTIFICATE -Subject: /emSign ECC Class 1 CA - G3/C=IN/O=eMudhra Technologies - Limited/OU=emSign PKI -Issuer: /emSign ECC Root CA - G3/C=IN/O=eMudhra Technologies Limited/OU=emSign - PKI - Signature algorithm: ECDSA / SHA384 -Details: - Public key: ECDSA-secp384r1 - Serial number: 1185869810258632733645093 - AKI: 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 - SKI: 46:BE:80:C3:C8:27:FE:EC:9B:58:2B:1A:62:5D:B2:D5:D1:02:38:68 - Valid from: 2018-02-18T18:30:00+0000 - until: 2033-02-18T18:30:00+0000 - Key usages: cert sign, crl sign - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.emsign.com -CERTIFICATE Subject: /emSign ECC EV SSL CA - C3/C=US/O=eMudhra Inc/OU=emSign PKI Issuer: /emSign ECC Root CA - C3/C=US/O=eMudhra Inc/OU=emSign PKI Signature algorithm: ECDSA / SHA384 @@ -13702,24 +13517,6 @@ Details: OCSP server: - http://ocsp.globalsign.com/rootr1 CERTIFICATE -Subject: /Apple Public Client RSA CA 12 - G1/C=US/O=Apple Inc./ST=California -Issuer: /AAA Certificate Services/C=GB/O=Comodo CA - Limited/L=Salford/ST=Greater Manchester - Signature algorithm: RSA / SHA256 -Details: - Public key: RSA-2048 - Serial number: 270463198999897041386963064417266587490 - AKI: A0:11:0A:23:3E:96:F1:07:EC:E2:AF:29:EF:82:A5:7F:D0:30:A4:B4 - SKI: CA:06:F0:92:12:3D:7B:00:5A:E9:28:47:A8:25:1B:F0:D0:80:42:CC - Valid from: 2019-06-19T00:00:00+0000 - until: 2028-12-06T23:59:59+0000 - Key usages: cert sign, crl sign, digital signature - Extended usages: client auth, s/mime - Basic constraints: valid, is a CA certificate, max path length 0 - SANs (0): - OCSP server: - - http://ocsp.comodoca.com -CERTIFICATE Subject: /GlobalSign/O=GlobalSign/OU=GlobalSign ECC Root CA - R5 Issuer: /GlobalSign Root CA/C=BE/O=GlobalSign nv-sa/OU=Root CA Signature algorithm: RSA / SHA384 diff --git a/int-bundle.crt b/int-bundle.crt index f7b349a7..16a52aaa 100644 --- a/int-bundle.crt +++ b/int-bundle.crt @@ -102,35 +102,6 @@ rjLBmA9ppOcTyiBWhpw607UOt4YVnns1YwlPAoNmMeEVOoDDUAm7Gx53DwSFCs3N bg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIE3TCCA8WgAwIBAgIQcZL75hlfrE0ShXRxNKIYpzANBgkqhkiG9w0BAQUFADB7 -MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD -VQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UE -AwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTA0MDEwMTAwMDAwMFoXDTI4 -MTIzMTIzNTk1OVowga4xCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJVVDEXMBUGA1UE -BxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoTFVRoZSBVU0VSVFJVU1QgTmV0d29y -azEhMB8GA1UECxMYaHR0cDovL3d3dy51c2VydHJ1c3QuY29tMTYwNAYDVQQDEy1V -VE4tVVNFUkZpcnN0LUNsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgRW1haWwwggEi -MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOYWk8n2rQTtiRjeuzcFgdbw5 -ZflKGkeiucxIzGqY1U01GbmkQuXOSeKKLx580jEHx060g2SdLinVomTEhb2FUTV5 -pE5okHsceqSSqBfymBXyk8zJpDKVuwxPML2YoAuL5W4bokb6eLyib6tZXqUvz8ra -baov66yhs2qqty5nNYt54R5piOLmRs2gpeq+C852OnoOm+r82idbPXMfIuZIYcZM -82mxqC4bttQxICy8goqOpA6l14lD/BZarx1x1xFZ2rqHDa/68+HC8KTFZ4zW1lQ6 -3gqkugN3s2XI/R7TdGKqGMpokx6hhX71R2XL+E1XKHTSNP8wtu72YjAUjCzrAgMB -AAGjggEnMIIBIzAfBgNVHSMEGDAWgBSgEQojPpbxB+zirynvgqV/0DCktDAdBgNV -HQ4EFgQUiYJnfcSdJnAAS7RQSHzePa4Ebn0wDgYDVR0PAQH/BAQDAgEGMA8GA1Ud -EwEB/wQFMAMBAf8wHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMBEGA1Ud -IAQKMAgwBgYEVR0gADB7BgNVHR8EdDByMDigNqA0hjJodHRwOi8vY3JsLmNvbW9k -b2NhLmNvbS9BQUFDZXJ0aWZpY2F0ZVNlcnZpY2VzLmNybDA2oDSgMoYwaHR0cDov -L2NybC5jb21vZG8ubmV0L0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMBEGCWCG -SAGG+EIBAQQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAnZXLPLh+pQnEHr8Lwsd2 -jjk8lMYQqk8MyeCrhF2JVOBlO/NtHHw3LCVUX5Yh/DeEkZ0V3BRPgc9UHWtsRWDH -LfmXUUz5Zso8oIKMpsjw4unUSvnsP1bJ3XaMw4IBT2wA8x4aYXQERwOpxkBXkbxl -IsUnZ09X22Ra2Y0fuoYv9AaunGnt6fTPKRfY4EqfGiAvl0xRu0YHxIo3TiDjCTFo -x57Ei53ofhG8MmgQlhGYRNgqUWBNiOt0Ot9DBjLIOVaMOhFS00GkQwP07e8zJ9s5 -4BROJsnY9TniibiTXbcpJkHqs5uug/x3dcroyrX+4mVKYz5ExNDDXodzqZgcr38V -fw== ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIBBTANBgkqhkiG9w0BAQUFADB/MQswCQYDVQQGEwJFVTEn MCUGA1UEChMeQUMgQ2FtZXJmaXJtYSBTQSBDSUYgQTgyNzQzMjg3MSMwIQYDVQQL ExpodHRwOi8vd3d3LmNoYW1iZXJzaWduLm9yZzEiMCAGA1UEAxMZQ2hhbWJlcnMg @@ -7174,34 +7145,6 @@ JdlhS7FxY2quK0jXPe9w3AGIDdK09RbAGOGMVuo7zCyLMATfE+72KwOKa/+PjfkQ KYmRklLOjd21u6BmmGIhhZJxwo9x7zqjS+Za7A== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIEyDCCA7CgAwIBAgIQYu9jivsE8WLzpAPYtf8baDANBgkqhkiG9w0BAQsFADBY -MQswCQYDVQQGEwJDTjEaMBgGA1UEChMRV29TaWduIENBIExpbWl0ZWQxLTArBgNV -BAMTJENlcnRpZmljYXRpb24gQXV0aG9yaXR5IG9mIFdvU2lnbiBHMjAeFw0xNTEy -MTYwMTAwMDFaFw0zMDEyMTYwMTAwMDFaMHgxCzAJBgNVBAYTAklMMRYwFAYDVQQK -Ew1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9u -IEF1dGhvcml0eTEmMCQGA1UEAxMdU3RhcnRDb20gQ2xhc3MgMyBPViBTZXJ2ZXIg -Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZxxv5UXg10ZLdSy2 -gPKaF00t/96u0tQAijq4Mf6ON576qtWjWxYSwRk+NIWWw77Ts0P0jW8WvTC6B/zY -msF5iYBtoIy+3Tf36wXTU39XWHZVtqiohkS4u9AT2v2P4fLNoBU4VVbOJs98k3Up -egqr+7oJOCARVwddf0mfKkpnHp5Y6cd/+cPt/l9Nr7hPnd9pLWkbOliBaWMw6oeN -D1KdWto5RLqfiZ82tsIZXNkmeNmuXvyVkL/oEcBHD3eJ3WooTwq8MmRXQz0IZZPl -Ra7dKAwnLI6mKwkDXaF40oyrtmu5RskZADm5v8YTK3NyH/I+N7jouRRliE3i8RvY -pR07AgMBAAGjggFsMIIBaDAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0lBBYwFAYIKwYB -BQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYBAf8CAQAwMAYDVR0fBCkwJzAl -oCOgIYYfaHR0cDovL2NybHMxLndvc2lnbi5jb20vY2E2LmNybDBqBggrBgEFBQcB -AQReMFwwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwMS53b3NpZ24uY29tMDUGCCsG -AQUFBzAChilodHRwOi8vYWlhMS53b3NpZ24uY29tL2NhNi1zdC1zZXJ2ZXIzLmNl -cjAdBgNVHQ4EFgQUsT8cknuSsFolszj7nAekJlAy41EwHwYDVR0jBBgwFoAU+mCp -62XF3RYUCE4MD42b4Pdkr2cwRQYDVR0gBD4wPDA6BgwrBgEEAYKbUQYDAgEwKjAo -BggrBgEFBQcCARYcaHR0cDovL3d3dy53b3NpZ24uY29tL3BvbGljeTANBgkqhkiG -9w0BAQsFAAOCAQEAj1hUq27mu2EKDoktiXt/iHa0YeU/OyX5TfQ5z5LF7Sntmyzu -G/d0s3uYk4lDylDyWOCFB6fcaRiQ/wo6I/ee1JoSALpQqWVpe6g+SabGhnsXbIRc -dtEbhcD72SbtIKa/O6upZThXQcLi4BPHjRn98QRPCxPkyv8e6KyQ3IpJzszGzYtB -W914Huoh4/JYyylhhhllkuJ/8mP71jgCjjwIPPVFlbqasrQvHCa5rbXVxTP+kAfW -g1PKZLWf09SZ1+SfddQGHkABVsbiXXLnqXF94uzKyO2NuHZ4GbIkkwLtQG1elWtZ -V0r2fV/w7r6zsXSa8NV7Y/hsOeYfitjjDX6Fpw== ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIF5TCCA82gAwIBAgIQal3D5TtOT9B7aR6l/OxkazANBgkqhkiG9w0BAQsFADB9 MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMi U2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzEpMCcGA1UEAxMgU3Rh @@ -10320,38 +10263,6 @@ Hloc31nUZVvDv/1uda8zRKq7CJ8SyUqiI0WA3LjJmZiTOSfBKzw0qj8I9GF26gu0 tAeYhZndeblh5f7xLKdoNOR3EX62fnt8izYJur0xaQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIFejCCBGKgAwIBAgIOSPWzg48IYKQ5SX8AAQ0wDQYJKoZIhvcNAQELBQAwYzEL -MAkGA1UEBhMCQkUxFTATBgNVBAsTDFRydXN0ZWQgUm9vdDEZMBcGA1UEChMQR2xv -YmFsU2lnbiBudi1zYTEiMCAGA1UEAxMZVHJ1c3RlZCBSb290IENBIFNIQTI1NiBH -MjAeFw0xNzAyMjIwMDAwMDBaFw0yNzAyMjIwMDAwMDBaMFwxCzAJBgNVBAYTAkpQ -MQ8wDQYDVQQKEwZKSVBERUMxHTAbBgNVBAsTFEpDQU4gUHVibGljIENBMSAtIEc0 -MR0wGwYDVQQDExRKQ0FOIFB1YmxpYyBDQTEgLSBHNDCCASIwDQYJKoZIhvcNAQEB -BQADggEPADCCAQoCggEBAMrq3JgbD++QXP5p/hgPR0xz8mrqc/kEU6ELXKywMmwo -/+urkQfJPpR0jmpZX20yqBvwnjW5EQK/Hyv3wl8ULLAAbVRIJYqU1SBhmagEvaow -TxO5Gt6Y1vVJY++Z0XxZCN8hJhJMBvMPThAGjeysFOHRSg6zbJJXFSrj7ES2lSc8 -deyPpIbuE4xQeUSlG/ptQO38Hf+G7HQw8T7pIc3Bvuw+VHx5GB4vS7r17/CGCkDQ -c38bzUmYiR76VeZK06kFCaoD3Z9i4Fa4h3e+qFfw5Ln1UkDeSWee8/mHXEYU/X4u -5WmBL8hGYQyohOcsmu/xcCYVnqBidiHBwo0Vzp2jkO0CAwEAAaOCAjEwggItMA4G -A1UdDwEB/wQEAwIBBjCBpwYDVR0lBIGfMIGcBggrBgEFBQcDBAYIKwYBBQUHAwIG -CCsGAQUFBwMJBgorBgEEAYI3CgMEBgsrBgEEAYI3CgMEAQYKKwYBBAGCNwoDCwYK -KwYBBAGCNxQCAQYKKwYBBAGCNxQCAgYJKwYBBAGCNxUTBgkrBgEEAYI3FQUGCSsG -AQQBgjcVBgYKKwYBBAGCNwoDDAYIKwYBBQUHAwcGCCsGAQUFBwMOMBIGA1UdEwEB -/wQIMAYBAf8CAQAwHQYDVR0OBBYEFLmOzfHsei6cuetvCxzE1KwZrqFUMB8GA1Ud -IwQYMBaAFMhjmwhpVMKYyNnN4zO3UF74yQGbMIGNBggrBgEFBQcBAQSBgDB+MDcG -CCsGAQUFBzABhitodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vdHJ1c3Ryb290 -c2hhMmcyMEMGCCsGAQUFBzAChjdodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29t -L2NhY2VydC90cnVzdHJvb3RzaGEyZzIuY3J0MD4GA1UdHwQ3MDUwM6AxoC+GLWh0 -dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vdHJ1c3Ryb290c2hhMmcyLmNybDBNBgNV -HSAERjBEMEIGCisGAQQBoDIBKBQwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cu -Z2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAKyc -4WX95701EgfaSuH9UVrUheyYhoSwwgo5i7f1rqdEq1m0fIieynpj5RIcZWLTtr0d -OmuzBaUvNojbx4jwokj+dR+GUNmoXA/MozukJE4iWAWT7j1xNZHgVHFbd7nFvBfo -qnRJuY5xVAxSD7hdWEpsriIpBt4c8RCWEuAxWqxNm9a1YJd7pYiImrpMrs3zV5kE -FR8rPtwFM35wgXHpNXp2Cws7O+6D2oH6gHFt4yQi3dFR+eb58TlyFlAV39lzcor2 -zUYuMAHXibsQh+jm+foI2+zuDeZFc06ZT+bget3Rpxb0S9s3RMiSvyyGRbbYWSaZ -QB5sckV1ZhlVaaiqj5w= ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIF6zCCA9OgAwIBAgIITvIyF22b6hQwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNV BAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjEYMBYGA1UE CgwPU1NMIENvcnBvcmF0aW9uMTcwNQYDVQQDDC5TU0wuY29tIEVWIFJvb3QgQ2Vy @@ -11414,34 +11325,6 @@ nzYeJhMEqFGaDEmE3XXHP91t7aI5uWHUfv9BdI4hcZPSdxtgQwrAqFlpu9kf5ukK YbbKs1ktItGIBGiMCANYP24fC8iKwEGiX8wBcAw= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIEuzCCA6OgAwIBAgIRAP6z1iISG5JGOEZiOKLjAIMwDQYJKoZIhvcNAQELBQAw -ezELMAkGA1UEBhMCR0IxGzAZBgNVBAgMEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G -A1UEBwwHU2FsZm9yZDEaMBgGA1UECgwRQ29tb2RvIENBIExpbWl0ZWQxITAfBgNV -BAMMGEFBQSBDZXJ0aWZpY2F0ZSBTZXJ2aWNlczAeFw0xNzA3MDYwMDAwMDBaFw0y -ODEyMzEyMzU5NTlaMIGdMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBN -YW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0Eg -TGltaXRlZDFDMEEGA1UEAxM6Q09NT0RPIFNIQS0yNTYgQ2xpZW50IEF1dGhlbnRp -Y2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EgMzCCASIwDQYJKoZIhvcNAQEBBQAD -ggEPADCCAQoCggEBAI73aWA/XLQXKBh/ahXYl49o1PN22uV/cd3LvZCGHeXfZsCM -mUQyMhxQvTjjKPccuNOmdZtYNakTF3dxEyhkn8uFgG5E0FWLi8qZR6kj2NsmKOXS -n9ZHhGOicLfJ/R9STkryKKTWnIPbbLm+mq63Lt2dCuKq4v5S4PTHZn++v97eay2r -NTV8P/U/e46HDEv1/+j3jlZgJgtcuYwWFTrVHH7mviSzrZDnWIpBj69t1L4M4ZRD -DO1uHq5k6StofU0llbOnhTYrbGdgw7eKDkFAugr7Fcuwz8xvOOy7CvJaGQeP9bQY -YnIzM5eucE7PNv2eeVkyRJglV5vcLh6u1J3I03ECAwEAAaOCARUwggERMB8GA1Ud -IwQYMBaAFKARCiM+lvEH7OKvKe+CpX/QMKS0MB0GA1UdDgQWBBRsl7WY9Re4+b1i -bA9KTnlJzYK1ZzAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAd -BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEQYDVR0gBAowCDAGBgRVHSAA -MEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwuY29tb2RvY2EuY29tL0FBQUNl -cnRpZmljYXRlU2VydmljZXMuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcw -AYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqGSIb3DQEBCwUAA4IBAQBc -rlbxm34isUwPGOLpQqNM3gWGObKert7GZG3Hj8/uQ8UicwrY0n20UysUTakrCYx9 -w2iLHfyz3mc9pAlo17Vh7R8AC/AXCs84BrPr0l6Lf2dkvxhlz/YkS0BpmU3ZXArr -1PB2v1AmwtszL/GlgpVUcVFRXJnjvz1XhBm84lXhI1MmGhZUL0q1FZdgPm95xa9i -capwW/NbYsJWkXtmJDf9BD6W8V5tAaWQqUELCAwORiN+j+zjJ8YK6ZHttr/oWUS6 -momqigO3ZroVjLp26/vODOH9lEMmnLNoFOwN+wcnJGrA5KGFs3a8w6y/kRceyFrm -0+FO9zxlNMwGMmUM8f9K ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIIUDCCBjigAwIBAgIIAklSi/v/fd8wDQYJKoZIhvcNAQELBQAwgaUxCzAJBgNV BAYTAkVTMUMwQQYDVQQHDDpNYWRyaWQgKHNlZSBjdXJyZW50IGFkZHJlc3MgYXQg d3d3LmNhbWVyZmlybWEuY29tL2FkZHJlc3MpMRswGQYDVQQKDBJBQyBDYW1lcmZp @@ -14771,26 +14654,6 @@ AALKxDoYKYYUeVJ48v9YxxKLJNCzlm/lxDXH26CyeASpobxFsm7HYM6yJFfBoGkQ beMgnDT8X9ST0EhbYTmviY3R20Q= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIDPjCCAsSgAwIBAgIKAf4+bGjeu+wmPjAKBggqhkjOPQQDAzBrMQswCQYDVQQG -EwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNo -bm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g -RzMwHhcNMTgwMjE4MTgzMDAwWhcNMzMwMjE4MTgzMDAwWjBtMQswCQYDVQQGEwJJ -TjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9s -b2dpZXMgTGltaXRlZDEiMCAGA1UEAxMZZW1TaWduIEVDQyBFViBTU0wgQ0EgLSBH -MzB2MBAGByqGSM49AgEGBSuBBAAiA2IABLZXoamhYa/WwWE0nrNCo2lczaM2A35u -59TmOxsIbT3s4bb5KkXPt3x/5Aa79uxf+m3gc3fFPxbe3FjvZXY2eNvbNGW4CX/p -QdNpbwVxpMg6/F+oF9OMHk9vq94KQ1+UYKOCAS8wggErMB8GA1UdIwQYMBaAFHxd -AoQT1MyKm4HOFxwuKR6cSGNCMB0GA1UdDgQWBBTRqrTS0iWCTrPwk2AXSptjevkf -DTAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC -MD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwOi8vcmVwb3Np -dG9yeS5lbXNpZ24uY29tMBIGA1UdEwEB/wQIMAYBAf8CAQAwMgYIKwYBBQUHAQEE -JjAkMCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5lbXNpZ24uY29tMDMGA1UdHwQs -MCowKKAmoCSGImh0dHA6Ly9jcmwuZW1zaWduLmNvbT9Sb290Q0FHMy5jcmwwCgYI -KoZIzj0EAwMDaAAwZQIxAPOSHbUT2M805KMjMEor2epuLoycKuwnsGmtixn+ozlv -CuJS+sq+9onRDkgwtG3iqAIwAYlrF96JmhW7JN5JyYl/C8tK0d30N8s/Pk3Denh3 -KyPhSif7POMc82DvHqWLL+S0 ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIERTCCAy2gAwIBAgIKGlyC3ty8ahUwMDANBgkqhkiG9w0BAQsFADBWMQswCQYD VQQGEwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJ bmMxHDAaBgNVBAMTE2VtU2lnbiBSb290IENBIC0gQzEwHhcNMTgwMjE4MTgzMDAw @@ -14966,25 +14829,6 @@ lnZt1P85Ey8Ney4vS/sCiwd2qzsnclJ3ZqHLjCpvUgvzeP3Z8st6dGnKByV1Q1Zd FqC7Bs43V6c+D62dSjTdXWBHJbqM71UJG6w= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIDIDCCAqagAwIBAgIKI+G6At/z6QDt3TAKBggqhkjOPQQDAzBrMQswCQYDVQQG -EwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNo -bm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g -RzMwHhcNMTgwMjE4MTgzMDAwWhcNMzMwMjE4MTgzMDAwWjBuMQswCQYDVQQGEwJJ -TjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9s -b2dpZXMgTGltaXRlZDEjMCEGA1UEAxMaZW1TaWduIEVDQyBDbGFzcyAyIENBIC0g -RzMwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAASt0tTBgfEcQDnhwd1qvjyypyFq4kKi -3+Nw+UflaTgNrjD939y+XHaZMxGXJ8cMN28rfPl6x6TaScH7W8rQkRAWXN9xtTlb -toTLlKqgEO4rNtq/qnk6BRwMIiTdj1TXAm2jggEQMIIBDDAfBgNVHSMEGDAWgBR8 -XQKEE9TMipuBzhccLikenEhjQjAdBgNVHQ4EFgQU4Bb+vcThZcalmUyJXnGO1F1n -8f0wDgYDVR0PAQH/BAQDAgEGMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUF -BwIBFhxodHRwOi8vcmVwb3NpdG9yeS5lbXNpZ24uY29tMBIGA1UdEwEB/wQIMAYB -Af8CAQAwMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5l -bXNpZ24uY29tMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW1zaWduLmNv -bT9Sb290Q0FHMy5jcmwwCgYIKoZIzj0EAwMDaAAwZQIwGzEuvlR0hO3AV5IsUNAL -35TiHMHusf0lwxFIJv0XZQY5opx9f4FUFfUnRXEYXKxCAjEA6mo32Hc+R+Jgpcdd -GtaU+sZM9yhSS+TSGEn7hKHbXk0Bd0ApOg5Yd3HnOAFdWJTx ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIC/TCCAoSgAwIBAgIKPRKhz3gljVgIVDAKBggqhkjOPQQDAzBaMQswCQYDVQQG EwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMx IDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAw @@ -15055,64 +14899,6 @@ EA1nHUWz8OyQu5nljCqmVT+fG4lvr3pJ6za+4vyNht+QdaX5rKzbtc6tZLv2MJ7t zEQFW0OfgKQYTZrNKxBYGhqOeu4Necdbyf5wvKqGV4Fm/+ZbBxzvFVGW -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIDPDCCAsGgAwIBAgIKct3H6dzpsNz/xzAKBggqhkjOPQQDAzBrMQswCQYDVQQG -EwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNo -bm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g -RzMwHhcNMTgwMjE4MTgzMDAwWhcNMzMwMjE4MTgzMDAwWjBqMQswCQYDVQQGEwJJ -TjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9s -b2dpZXMgTGltaXRlZDEfMB0GA1UEAxMWZW1TaWduIEVDQyBTU0wgQ0EgLSBHMzB2 -MBAGByqGSM49AgEGBSuBBAAiA2IABBWwpaaD8WGEIlx1uQ6G9FY35y+AJ0ewgoXe -ZPXcz2OkkD6WNqITMSn+Nzl2489ITUU5GH0EpjWuujQv6stEYule7AVb7OolZsvz -eMXdq/2g5DHXGlW1FGc10DYx+9xynqOCAS8wggErMB8GA1UdIwQYMBaAFHxdAoQT -1MyKm4HOFxwuKR6cSGNCMB0GA1UdDgQWBBQTjUwomeFit9LgU+MY0WLcHMpm+jAO -BgNVHQ8BAf8EBAMCAQYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD0G -A1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwOi8vcmVwb3NpdG9y -eS5lbXNpZ24uY29tMBIGA1UdEwEB/wQIMAYBAf8CAQAwMgYIKwYBBQUHAQEEJjAk -MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5lbXNpZ24uY29tMDMGA1UdHwQsMCow -KKAmoCSGImh0dHA6Ly9jcmwuZW1zaWduLmNvbT9Sb290Q0FHMy5jcmwwCgYIKoZI -zj0EAwMDaQAwZgIxAP0zh/Pwvs1KWlruB+iqwSXWXUXxJ5RcvNhoMoT5Hq164K8i -4lb4tfVNV4Hb89HfugIxANXUFpJ5DvDugBmGsWIh3UDLY/MaIJr0LCyB3vebwqGw -eYppriQcyxqeG4xCXYLOcg== ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- -MIIDIjCCAqegAwIBAgILALjrJYMk2wiswvUwCgYIKoZIzj0EAwMwazELMAkGA1UE -BhMCSU4xEzARBgNVBAsTCmVtU2lnbiBQS0kxJTAjBgNVBAoTHGVNdWRocmEgVGVj -aG5vbG9naWVzIExpbWl0ZWQxIDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAt -IEczMB4XDTE4MDIxODE4MzAwMFoXDTMzMDIxODE4MzAwMFowbjELMAkGA1UEBhMC -SU4xEzARBgNVBAsTCmVtU2lnbiBQS0kxJTAjBgNVBAoTHGVNdWRocmEgVGVjaG5v -bG9naWVzIExpbWl0ZWQxIzAhBgNVBAMTGmVtU2lnbiBFQ0MgQ2xhc3MgMyBDQSAt -IEczMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEt/kiu55eyuZ/oAxsR1UMkQ9ytN3x -wX/7w2eOL1+R9TafuuD9YRcVK6oFadIw/ar5I0I22WAw9/Gwd9zI0DPTe/2Zho6m -TMNIH3LFgdRX5g7+hTH1vBv8UHqXXqiR1ys2o4IBEDCCAQwwHwYDVR0jBBgwFoAU -fF0ChBPUzIqbgc4XHC4pHpxIY0IwHQYDVR0OBBYEFCJiSrx+baEwtyrJlX4qI949 -J/ONMA4GA1UdDwEB/wQEAwIBBjA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEF -BQcCARYcaHR0cDovL3JlcG9zaXRvcnkuZW1zaWduLmNvbTASBgNVHRMBAf8ECDAG -AQH/AgEAMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3Au -ZW1zaWduLmNvbTAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVtc2lnbi5j -b20/Um9vdENBRzMuY3JsMAoGCCqGSM49BAMDA2kAMGYCMQCfcM3DXIEnxOkAE4co -/IRvdClPVNvHbO1eSrrH7tYklqpCoPbFlm6wwuj5JTXPJvoCMQCzTp1mDKZnJwbr -gDOCrI0PYxWGPWpI9g/YRh83rrsb8XmDdPrtOWZBRifZu4v0o+4= ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- -MIIDIDCCAqagAwIBAgILAIdigqj9dYw5HsMwCgYIKoZIzj0EAwMwazELMAkGA1UE -BhMCSU4xEzARBgNVBAsTCmVtU2lnbiBQS0kxJTAjBgNVBAoTHGVNdWRocmEgVGVj -aG5vbG9naWVzIExpbWl0ZWQxIDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAt -IEczMB4XDTE4MDIxODE4MzAwMFoXDTMzMDIxODE4MzAwMFowbTELMAkGA1UEBhMC -SU4xEzARBgNVBAsTCmVtU2lnbiBQS0kxJTAjBgNVBAoTHGVNdWRocmEgVGVjaG5v -bG9naWVzIExpbWl0ZWQxIjAgBgNVBAMTGWVtU2lnbiBFQ0MgRGV2aWNlIENBIC0g -RzMwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQ5qPpBiN5BbQSUldNBlP6FO5jLtouf -abBDLwXTXzcgFwakNh89uO5ug1m0M6QhLIZRkLOMxH4BMJ+rMb1lHnryjrp2i7la -XdsPk2ZCGLzcUnp3QA8ZBzzJhfHYSo1m8eujggEQMIIBDDAfBgNVHSMEGDAWgBR8 -XQKEE9TMipuBzhccLikenEhjQjAdBgNVHQ4EFgQUpaz5H1oljhCwKdoZACaG6KHm -6NkwDgYDVR0PAQH/BAQDAgEGMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUF -BwIBFhxodHRwOi8vcmVwb3NpdG9yeS5lbXNpZ24uY29tMBIGA1UdEwEB/wQIMAYB -Af8CAQAwMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5l -bXNpZ24uY29tMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW1zaWduLmNv -bT9Sb290Q0FHMy5jcmwwCgYIKoZIzj0EAwMDaAAwZQIwF7tFSgQvVGC3YidTEIxu -26OnAEvCij1ebFju9WG0Nc0eQG3pPqdnh0OgixpWv+cXAjEA9ksmCrk3ZASLdG7y -WDeiPyvdwWWx0Xuj5hKEnm8U7GbtQ7BSFKMJ6kjRqlmb1GlX ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIDGTCCAp+gAwIBAgIKW32bsf0zubwdhDAKBggqhkjOPQQDAzBaMQswCQYDVQQG EwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMx IDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAw @@ -15132,25 +14918,6 @@ oK7En7a0p3ESe/DroYG48ys9SUGAZ3+gr4OnAjAIbqwFSaxsvNTrolD0mI99iDA7 sranVo+LcI5dCGkaCSNzr7m1eJVLIUi/s7Su2PQ= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIDITCCAqegAwIBAgILAPseIZgusbVcWSUwCgYIKoZIzj0EAwMwazELMAkGA1UE -BhMCSU4xEzARBgNVBAsTCmVtU2lnbiBQS0kxJTAjBgNVBAoTHGVNdWRocmEgVGVj -aG5vbG9naWVzIExpbWl0ZWQxIDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAt -IEczMB4XDTE4MDIxODE4MzAwMFoXDTMzMDIxODE4MzAwMFowbjELMAkGA1UEBhMC -SU4xEzARBgNVBAsTCmVtU2lnbiBQS0kxJTAjBgNVBAoTHGVNdWRocmEgVGVjaG5v -bG9naWVzIExpbWl0ZWQxIzAhBgNVBAMTGmVtU2lnbiBFQ0MgQ2xhc3MgMSBDQSAt -IEczMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEOReHn35H+3QHeBQoo2GaV/M5/wJ3 -/l+RYkEm6Asuf2xUlYCMZmokaSzC3Z05V2kf9LAevtB0dSecVMz8l3XGVoaIaaLO -fxmAIPPlvVyMCJ3EgnCAGH+1ZONRf35995B5o4IBEDCCAQwwHwYDVR0jBBgwFoAU -fF0ChBPUzIqbgc4XHC4pHpxIY0IwHQYDVR0OBBYEFEa+gMPIJ/7sm1grGmJdstXR -AjhoMA4GA1UdDwEB/wQEAwIBBjA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEF -BQcCARYcaHR0cDovL3JlcG9zaXRvcnkuZW1zaWduLmNvbTASBgNVHRMBAf8ECDAG -AQH/AgEAMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3Au -ZW1zaWduLmNvbTAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVtc2lnbi5j -b20/Um9vdENBRzMuY3JsMAoGCCqGSM49BAMDA2gAMGUCMQC+j9TyTWudMq4HdKE/ -1ib6vzapfBmQ/8Vbu3PHCMWPdpfLCcBSwh24bUOxKeVlGx4CMHfW32Xd+90Z/5IB -A6lkX+6E1Tl588OddGhKwsLq3T3CVjwcIZMBWhRh84fcqIAdaQ== ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIDHTCCAqKgAwIBAgIKG1BYH3M0swsnIzAKBggqhkjOPQQDAzBaMQswCQYDVQQG EwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMx IDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAw @@ -23166,35 +22933,6 @@ FUazCjxvhHm5YWqulA51wFT2K9LRiiEWw3UJAgTTmxASitVHHLb3erkETk6SCwGv OG1eD0qLwuSeARZmhw3xFOCvMHeQ -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIFAzCCA+ugAwIBAgIRAMt5UT/fWkG366O1ASxmV2IwDQYJKoZIhvcNAQELBQAw -ezELMAkGA1UEBhMCR0IxGzAZBgNVBAgMEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G -A1UEBwwHU2FsZm9yZDEaMBgGA1UECgwRQ29tb2RvIENBIExpbWl0ZWQxITAfBgNV -BAMMGEFBQSBDZXJ0aWZpY2F0ZSBTZXJ2aWNlczAeFw0xOTA2MTkwMDAwMDBaFw0y -ODEyMDYyMzU5NTlaMGQxKzApBgNVBAMTIkFwcGxlIFB1YmxpYyBDbGllbnQgUlNB -IENBIDEyIC0gRzExEzARBgNVBAoTCkFwcGxlIEluYy4xEzARBgNVBAgTCkNhbGlm -b3JuaWExCzAJBgNVBAYTAlVTMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC -AQEAm39I57iRs4aa5rTkT8v25aMpY3wlYJoEQ+S2f/FWHuTVAGD3cZVQinVLEPno -c8b3P+hfrFzx0jDl6HCy7Qa0a6epruXfORXQD0/Q2Y0MdGYaIwJqN2ClPsa9qICt -J6RKFFjnS9iMzDoq80fJ0sCnY8HFBlTJ1+BJCsL2FH7kqIDVPuRGodcE8qv/eIR+ -USwHEY0ih6vWWHs1/+wXF35wdwDa/mDosthxr9y3nK/28BnHL+B/KHVk8dRrim1c -5ioO/g8st6y9fz3Hgep+sEpMh51NkUFXwoVlsu3aZOlj90MvynPq+XZD+bfuc6SJ -wBH8Rk1MxQBl5aPMrkHInUP12wIDAQABo4IBlzCCAZMwHwYDVR0jBBgwFoAUoBEK -Iz6W8Qfs4q8p74Klf9AwpLQwHQYDVR0OBBYEFMoG8JISPXsAWukoR6glG/DQgELM -MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQw -gZIGA1UdIASBijCBhzANBgsqhkiG92NkBQsFATANBgsqhkiG92NkBQsFAjANBgsq -hkiG92NkBQsFAzANBgsqhkiG92NkBQsFBDANBgsqhkiG92NkBQsFBTANBgsqhkiG -92NkBQsFBjANBgsqhkiG92NkBQsFBzANBgsqhkiG92NkBQsFCDANBgsqhkiG92Nk -BQsFCTASBgNVHRMBAf8ECDAGAQH/AgEAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6 -Ly9jcmwuY29tb2RvY2EuY29tL0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMDQG -CCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2Eu -Y29tMA0GCSqGSIb3DQEBCwUAA4IBAQBVuyW5n/2AUXteIehTcfA/AENKMJwZpvfi -tTwIOPin2iyywoxY/eulT7lEp8eJo3pqsLN8daxqOjdC+c/swMKN6/dcPVKtUfgh -t3xgKzfuzOwlQ3AVJAtCta5shCo5Sg4zxKdguQ5oaUvy6JgNrQzLAo4+p03YfNpJ -dD7ienJQ1gfMP1gXVimRNAA7QhRqZhCwLVdisu3e9A7kRYafrjK4P5/t/GzMu1Ym -EoMDgZzj1yhmewNvqOqformfj9+Ly+Tw+KmbWCy/ty6Z6bDwdxYcoGwgCC5vv10H -nwusiqf7tIbbvSrwkPldhZZ8xEDfILwOLUHxdznoK0mZe0lC+arK ------END CERTIFICATE----- ------BEGIN CERTIFICATE----- MIIDpzCCAo+gAwIBAgIQdR4/U+MYWTPpXwjs7q0ClzANBgkqhkiG9w0BAQwFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTE5MDYx