Regenerate certificate for unit tests

Using secp384r1 instead RSA 2048 for the certificates that this is the new standard for certificates. Signed-off-by: Arne Schwabe <arne@openvpn.net>
OpenVPN · Oct 24, 2024 · c681b48 · c681b48
1 parent f331fd1
commit c681b48
Show file tree

Hide file tree

Showing 9 changed files with 260 additions and 270 deletions.
diff --git a/test/ssl/ca.crl b/test/ssl/ca.crl
@@ -0,0 +1,12 @@
+-----BEGIN X509 CRL-----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+-----END X509 CRL-----
diff --git a/test/ssl/ca.crt b/test/ssl/ca.crt
@@ -1,35 +1,18 @@
 -----BEGIN CERTIFICATE-----
-MIIGKDCCBBCgAwIBAgIJAKFO3vqQ8q6BMA0GCSqGSIb3DQEBCwUAMGYxCzAJBgNV
-BAYTAktHMQswCQYDVQQIEwJOQTEQMA4GA1UEBxMHQklTSEtFSzEVMBMGA1UEChMM
-T3BlblZQTi1URVNUMSEwHwYJKoZIhvcNAQkBFhJtZUBteWhvc3QubXlkb21haW4w
-HhcNMTQxMDIyMjE1OTUyWhcNMjQxMDE5MjE1OTUyWjBmMQswCQYDVQQGEwJLRzEL
-MAkGA1UECBMCTkExEDAOBgNVBAcTB0JJU0hLRUsxFTATBgNVBAoTDE9wZW5WUE4t
-VEVTVDEhMB8GCSqGSIb3DQEJARYSbWVAbXlob3N0Lm15ZG9tYWluMIICIjANBgkq
-hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsJVPCqt3vtoDW2U0DII1QIh2Qs0dqh88
-8nivxAIm2LTq93e9fJhsq3P/UVYAYSeCIrekXypR0EQgSgcNTvGBMe20BoHO5yvb
-GjKPmjfLj6XRotCOGy8EDl/hLgRY9efiA8wsVfuvF2q/FblyJQPR/gPiDtTmUiqF
-qXa7AJmMrqFsnWppOuGd7Qc6aTsae4TF1e/gUTCTraa7NeHowDaKhdyFmEEnCYR5
-CeUsx2JlFWAH8PCrxBpHYbmGyvS0kH3+rQkaSM/Pzc2bS4ayHaOYRK5XsGq8XiNG
-KTTLnSaCdPeHsI+3xMHmEh+u5Og2DFGgvyD22gde6W2ezvEKCUDrzR7bsnYqqyUy
-n7LxnkPXGyvR52T06G8KzLKQRmDlPIXhzKMO07qkHmIonXTdF7YI1azwHpAtN4dS
-rUe1bvjiTSoEsQPfOAyvD0RMK/CBfgEZUzAB50e/IlbZ84c0DJfUMOm4xCyft1HF
-YpYeyCf5dxoIjweCPOoP426+aTXM7kqq0ieIr6YxnKV6OGGLKEY+VNZh1DS7enqV
-HP5i8eimyuUYPoQhbK9xtDGMgghnc6Hn8BldPMcvz98HdTEH4rBfA3yNuCxLSNow
-4jJuLjNXh2QeiUtWtkXja7ec+P7VqKTduJoRaX7cs+8E3ImigiRnvmK+npk7Nt1y
-YE9hBRhSoLsCAwEAAaOB2DCB1TAdBgNVHQ4EFgQUK0DlyX319JY46S/jL9lAZMmO
-BZswgZgGA1UdIwSBkDCBjYAUK0DlyX319JY46S/jL9lAZMmOBZuhaqRoMGYxCzAJ
-BgNVBAYTAktHMQswCQYDVQQIEwJOQTEQMA4GA1UEBxMHQklTSEtFSzEVMBMGA1UE
-ChMMT3BlblZQTi1URVNUMSEwHwYJKoZIhvcNAQkBFhJtZUBteWhvc3QubXlkb21h
-aW6CCQChTt76kPKugTAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIBBjANBgkqhkiG
-9w0BAQsFAAOCAgEABc77f4C4P8fIS+V8qCJmVNSDU44UZBc+D+J6ZTgW8JeOHUIj
-Bh++XDg3gwat7pIWQ8AU5R7h+fpBI9n3dadyIsMHGwSogHY9Gw7di2RVtSFajEth
-rvrq0JbzpwoYedMh84sJ2qI/DGKW9/Is9+O52fR+3z3dY3gNRDPQ5675BQ5CQW9I
-AJgLOqzD8Q0qrXYi7HaEqzNx6p7RDTuhFgvTd+vS5d5+28Z5fm2umnq+GKHF8W5P
-ylp2Js119FTVO7brusAMKPe5emc7tC2ov8OFFemQvfHR41PLryap2VD81IOgmt/J
-kX/j/y5KGux5HZ3lxXqdJbKcAq4NKYQT0mCkRD4l6szaCEJ+k0SiM9DdTcBDefhR
-9q+pCOyMh7d8QjQ1075mF7T+PGkZQUW1DUjEfrZhICnKgq+iEoUmM0Ee5WtRqcnu
-5BTGQ2mSfc6rV+Vr+eYXqcg7Nxb3vFXYSTod1UhefonVqwdmyJ2sC79zp36Tbo2+
-65NW2WJK7KzPUyOJU0U9bcu0utvDOvGWmG+aHbymJgcoFzvZmlXqMXn97pSFn4jV
-y3SLRgJXOw1QLXL2Y5abcuoBVr4gCOxxk2vBeVxOMRXNqSWZOFIF1bu/PxuDA+Sa
-hEi44aHbPXt9opdssz/hdGfd8Wo7vEJrbg7c6zR6C/Akav1Rzy9oohIdgOw=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 -----END CERTIFICATE-----
diff --git a/test/ssl/ca.key b/test/ssl/ca.key
@@ -0,0 +1,6 @@
+-----BEGIN PRIVATE KEY-----
+MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDBxHwGCo2x4clk0Atlv
+/kx0HCtAYn9pDRaCmhY9W4b46QUe1VPSRuRtJONaT8fUQvehZANiAASpougnfcXh
+Ylwj8Jzn7DoTgW4RVH8NCSCK8D0VNYKj07jDfSWrv5QpWSqG9BypTy3rK7/BRPGM
+3MBsDQ6h/T1sK14Gz8ETCX8OYEfIRoymZtdwyGYfsP5YH4/lb2lCkj0=
+-----END PRIVATE KEY-----
diff --git a/test/ssl/client-revoked.crt b/test/ssl/client-revoked.crt
@@ -0,0 +1,71 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 3 (0x3)
+        Signature Algorithm: ecdsa-with-SHA256
+        Issuer: C=KG, ST=NA, L=BISHKEK, O=OpenVPN-TEST/emailAddress=arne@openvpn.net
+        Validity
+            Not Before: Oct 21 14:56:07 2024 GMT
+            Not After : Oct 19 14:56:07 2034 GMT
+        Subject: C=KG, ST=NA, O=OpenVPN-TEST, CN=client-revoked/emailAddress=arne@openvpn.net
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a9:a3:7d:e4:e2:fc:3a:c3:70:89:38:c3:5c:f7:
+                    11:da:3f:71:96:6b:ed:66:ae:7b:0d:ad:4b:89:2d:
+                    5f:2f:d1:c3:db:56:99:82:72:49:53:77:ed:96:89:
+                    b8:fa:5a:b0:60:c7:28:ba:ab:42:f4:c6:82:4e:1e:
+                    42:50:c6:24:81:54:d9:35:26:52:22:8b:bd:7b:fb:
+                    a6:21:3b:df:a5:4d:eb:39:ee:a6:b3:78:24:c8:2e:
+                    25:fb:fa:e4:e3:79:3f:7b:38:83:21:17:f3:5e:3c:
+                    3c:34:39:5e:3a:c1:bb:6b:08:a9:5b:f6:ea:4f:d4:
+                    c9:c1:5c:29:f9:ff:4c:a8:45:98:c2:08:ae:e5:92:
+                    31:8f:12:ce:a3:88:6f:01:31:bb:d1:00:f2:e0:7d:
+                    11:c8:a2:ea:9f:4e:e9:a9:c6:96:86:8d:70:d3:8f:
+                    73:8b:10:67:57:9a:3f:4e:a9:50:ef:0d:35:33:b4:
+                    9b:61:80:33:36:f1:83:0f:86:a1:99:5d:c3:af:e9:
+                    32:2f:ea:9e:9b:cd:30:0e:5c:5f:89:ad:e5:7d:5d:
+                    e5:9c:48:4c:f8:b3:bc:91:b5:e5:8f:a1:ec:89:d7:
+                    a2:11:86:34:ff:93:3e:c0:42:42:d9:fd:ec:a3:97:
+                    26:74:21:09:ce:32:28:5f:78:a3:eb:35:54:8b:33:
+                    76:77
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                16:9D:D9:06:0B:99:96:4E:83:41:43:0D:E6:6D:F0:3A:B4:96:C5:5D
+            X509v3 Authority Key Identifier: 
+                keyid:4C:AD:01:C5:E6:D5:A5:69:81:96:17:3C:E2:EF:69:67:EB:A6:66:EB
+                DirName:/C=KG/ST=NA/L=BISHKEK/O=OpenVPN-TEST/emailAddress=arne@openvpn.net
+                serial:7B:BC:1B:99:79:7A:69:5E:F0:6C:89:57:3D:1E:71:DD:E3:D2:C7:FA
+    Signature Algorithm: ecdsa-with-SHA256
+    Signature Value:
+        30:66:02:31:00:bb:99:2a:15:69:77:6f:ec:09:98:ea:03:67:
+        e8:76:a4:1c:70:4d:8e:d6:46:36:48:47:49:22:07:6f:5a:0a:
+        f0:fe:a7:ec:e1:89:93:36:68:c9:a3:7e:26:2c:74:f8:38:02:
+        31:00:a0:2d:cf:83:55:cb:01:0a:b3:b0:0c:a8:00:f5:ee:ad:
+        eb:cf:ed:b6:c2:f9:87:5a:93:66:44:95:a5:aa:5c:ae:1c:0e:
+        42:c9:cb:ac:63:28:08:91:4a:0b:89:dd:29:24
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/test/ssl/client-revoked.key b/test/ssl/client-revoked.key
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCpo33k4vw6w3CJ
+OMNc9xHaP3GWa+1mrnsNrUuJLV8v0cPbVpmCcklTd+2Wibj6WrBgxyi6q0L0xoJO
+HkJQxiSBVNk1JlIii717+6YhO9+lTes57qazeCTILiX7+uTjeT97OIMhF/NePDw0
+OV46wbtrCKlb9upP1MnBXCn5/0yoRZjCCK7lkjGPEs6jiG8BMbvRAPLgfRHIouqf
+TumpxpaGjXDTj3OLEGdXmj9OqVDvDTUztJthgDM28YMPhqGZXcOv6TIv6p6bzTAO
+XF+JreV9XeWcSEz4s7yRteWPoeyJ16IRhjT/kz7AQkLZ/eyjlyZ0IQnOMihfeKPr
+NVSLM3Z3AgMBAAECggEAAs73HZv4awyjR1JOQbLBc+iK+9+LjaCj3uUYlAvRQJxr
+bq0vW26C8kPRBiX/jv2DYAbMENMXB7Blpd9wX5/4KL/73Jpmz7WajHvtEy3HlRgG
+Je5iiiQaD8pbzKEpuu5d869K1HhuCghbQs4UVkqwzKPXEfOzi2DNeksJUt88KKj/
+ZN7fDH15nS/vTWcuaju6Ek6DNlxocEVfReAYpOQDK1G8q/xlTF7Yws1WQzaswXD2
+572qS/qeoqsm/jQRVBOFxElTPgK+BOLNCiYug5fdtzfafPtrmGc6awComXtS8pVt
+jtuPdTTP88T3mBmc1LYnHNxXed+Bd5k8ymIx/vyOaQKBgQDfGdGp/r0TurnFKq5h
+DU24Ibb8+6oP9GCyUMeE/iLLTb3QxbcJ5iiv2DH7c5o7FhrkP/U548lwv7Y22yyM
+yRHx/8upc99D/J70i2OdcZOuJYWXeM4P/y67zeo/TcBAZzrriSZSKFLxljRRN8wA
+hZY88XNXh+P0mAk2lAswgZiMVQKBgQDCp3HJ1IqIjmDxj9w4j5SqQPcFfvxYQrm3
+L8TaLIvzBLB7jEu4+gwFcTo9l1uJ56QjAy9yF1Vny4OTnKAICebfLo9e5KFoZPHZ
+ImsI7kAhYWJm85owv0hoSkQTOw6i9IOrYDxrggLrHCcarA5PnAB7UjPelOEdk1x1
+sB59auuDmwKBgQCpYtL6/HvV5Olyt0saSJ1/damXPgQKhQJ9oDM72C/Wp7m8LsEf
+9O1jRQP94/FvdwMH1T98qmOhBQ11bMbQRUEouYuJpn4XAlA1XzdMrJTxnW9mZ8Qc
+BSUYVejKE2AqBbaIaeL8cb03y1EBcRmkM8izkKaACJ6ccGpeU9yDAYIu2QKBgEa/
+rW/6PE/d0AZ8j0JPjW1EJ4Rr3zQFLJMUXawevM8bSTneiDc3St8/hDeWp8K72sCP
+C9Of/362TaB9MP06/BrqRVnsJ25WIkEVbWnVjqGTT7yzlbtaCus88vk6YduAm8rS
+M6OvoXfqx5u+JYVx4grwmcGwwxGI2fY8iRh0oB05AoGAKw3tQWQeMy0i0ySpbftK
+enEr1qtM8PbTZJNXnybHzAUtjqKVvLfbIA+Zh1jjs9CjCXkHGTVx6++yuZNFMQqf
+bXZYxscjTG6q0h1hb5q1KaRfeS4ZvBjpLC9S2OHl027MU2+SvoPt8KBfJ9duI32l
+UDzVy29GYot1wPrwlEoKoNw=
+-----END PRIVATE KEY-----
diff --git a/test/ssl/client.crt b/test/ssl/client.crt
@@ -2,102 +2,70 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=KG, ST=NA, L=BISHKEK, O=OpenVPN-TEST/emailAddress=me@myhost.mydomain
+        Signature Algorithm: ecdsa-with-SHA256
+        Issuer: C=KG, ST=NA, L=BISHKEK, O=OpenVPN-TEST/emailAddress=arne@openvpn.net
         Validity
-            Not Before: Oct 22 21:59:53 2014 GMT
-            Not After : Oct 19 21:59:53 2024 GMT
-        Subject: C=KG, ST=NA, O=OpenVPN-TEST, CN=Test-Client/emailAddress=me@myhost.mydomain
+            Not Before: Oct 21 14:56:07 2024 GMT
+            Not After : Oct 19 14:56:07 2034 GMT
+        Subject: C=KG, ST=NA, O=OpenVPN-TEST, CN=Test-Client/emailAddress=arne@openvpn.net
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:ec:65:8f:e9:12:c2:1a:5b:e6:56:2a:08:a9:82:
-                    3a:2d:44:78:a3:00:3b:b0:9f:e7:27:10:40:93:ef:
-                    f1:cc:3e:a0:aa:04:a2:80:1b:13:a9:e6:fe:81:d6:
-                    70:90:a8:d8:d4:de:30:d8:35:00:d2:be:62:f0:48:
-                    da:fc:15:8d:c4:c6:6d:0b:99:f1:2b:83:00:0a:d3:
-                    2a:23:0b:e5:cd:f9:35:df:43:61:15:72:ad:95:98:
-                    f6:73:21:41:5e:a0:dd:47:27:a0:d5:9a:d4:41:a8:
-                    1c:1d:57:20:71:17:8f:f7:28:9e:3e:07:ce:ec:d5:
-                    0e:42:4f:1e:74:47:8e:47:9d:d2:14:28:27:2c:14:
-                    10:f5:d1:96:b5:93:74:84:ef:f9:04:de:8d:4a:6f:
-                    df:77:ab:ea:d1:58:d3:44:fe:5a:04:01:ff:06:7a:
-                    97:f7:fd:e3:57:48:e1:f0:df:40:13:9f:66:23:5a:
-                    e3:55:54:3d:54:39:ee:00:f9:12:f1:d2:df:74:2e:
-                    ba:d7:f0:8d:c6:dd:18:58:1c:93:22:0b:75:fa:a8:
-                    d6:e0:b5:2f:2d:b9:d4:fe:b9:4f:86:e2:75:48:16:
-                    60:fb:3f:c9:b4:30:42:29:fb:3b:b3:2b:b9:59:81:
-                    6a:46:f3:45:83:bf:fd:d5:1a:ff:37:0c:6f:5b:fd:
-                    61:f1
+                    00:ca:a1:ad:8a:09:04:af:55:3f:1d:fe:af:ab:84:
+                    8c:a1:69:a8:46:28:53:ed:19:57:04:39:23:46:77:
+                    41:c3:41:fd:e3:39:3d:d3:ec:d1:0a:56:ff:d1:7c:
+                    80:55:11:7f:8f:1d:8b:eb:f7:b6:09:9b:22:dc:5d:
+                    2d:db:80:e9:a9:b8:71:26:00:ba:97:82:27:dc:ec:
+                    d6:ab:81:76:b4:86:59:6a:94:d6:d7:2e:6e:35:7a:
+                    7d:90:30:45:d5:81:b2:6d:f1:2b:10:3c:1c:30:01:
+                    95:51:0e:c8:60:bf:59:61:78:bf:c2:ba:cd:90:d0:
+                    7f:19:95:e4:24:4e:32:5c:61:27:32:1f:72:3d:1e:
+                    4d:11:f2:e5:c8:1f:60:6e:51:42:c6:3e:2c:1a:b6:
+                    8e:f6:36:8a:11:87:9a:82:bd:27:02:df:77:f1:c8:
+                    40:8e:17:25:01:f1:f1:50:1d:db:61:10:2e:a3:24:
+                    17:c7:f5:fe:ca:5e:3a:b0:de:e7:85:3e:fe:11:5a:
+                    d2:8b:46:a8:88:f6:ce:c2:b8:60:0f:c5:c2:67:06:
+                    45:5a:3d:28:96:3d:26:0a:80:45:22:65:cf:f0:e1:
+                    56:78:bd:a0:a6:1e:04:23:39:2b:df:b5:16:97:de:
+                    f5:64:90:46:20:9b:7b:87:24:51:93:f1:a1:10:b5:
+                    a8:19
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
                 CA:FALSE
             X509v3 Subject Key Identifier: 
-                D2:B4:36:0F:B1:FC:DD:A5:EA:2A:F7:C7:23:89:FA:E3:FA:7A:44:1D
+                57:D2:16:A3:E5:06:9F:39:1A:7D:28:ED:DC:5B:64:20:1C:59:AB:2B
             X509v3 Authority Key Identifier: 
-                keyid:2B:40:E5:C9:7D:F5:F4:96:38:E9:2F:E3:2F:D9:40:64:C9:8E:05:9B
-                DirName:/C=KG/ST=NA/L=BISHKEK/O=OpenVPN-TEST/emailAddress=me@myhost.mydomain
-                serial:A1:4E:DE:FA:90:F2:AE:81
-
-    Signature Algorithm: sha256WithRSAEncryption
-         7f:e0:fe:84:a7:ec:df:62:a5:cd:3c:c1:e6:42:b1:31:12:f0:
-         b9:da:a7:9e:3f:bd:96:52:b6:fc:55:74:64:3e:e4:ff:7e:aa:
-         f7:3e:06:18:5f:73:85:f8:c8:e0:67:1b:4d:97:ca:05:d0:37:
-         07:33:64:9b:e6:78:77:14:9a:55:bb:2a:ac:c3:7f:c9:15:08:
-         83:5c:c8:c2:61:d3:71:4c:05:0b:2b:cb:a3:87:6d:a0:32:ed:
-         b0:b3:27:97:4a:55:8d:01:2a:30:56:68:ab:f2:da:5c:10:73:
-         c9:aa:0a:9c:4b:4c:a0:5b:51:6e:0a:7e:6c:53:80:b0:00:e1:
-         1e:9a:4c:0a:37:9e:20:89:bc:c5:e5:79:58:b7:45:ff:d3:c4:
-         a1:fd:d9:78:3d:45:16:74:df:82:44:1d:1d:81:50:5a:b9:32:
-         4c:e2:4f:3f:0e:3a:65:5a:64:83:3b:29:31:c4:99:88:bc:c5:
-         84:39:f2:19:12:e1:66:d0:ea:fb:75:b1:d2:27:be:91:59:a3:
-         2b:09:d5:5c:bf:46:8e:d6:67:d6:0b:ec:da:ab:f0:80:19:87:
-         64:07:a9:77:b1:5e:0c:e2:c5:1d:6a:ac:5d:23:f3:30:75:36:
-         4e:ca:c3:4e:b0:4d:8c:2c:ce:52:61:63:de:d5:f5:ef:ef:0a:
-         6b:23:25:26:3c:3a:f2:c3:c2:16:19:3f:a9:32:ba:68:f9:c9:
-         12:3c:3e:c6:1f:ff:9b:4e:f4:90:b0:63:f5:d1:33:00:30:5a:
-         e8:24:fa:35:44:9b:6a:80:f3:a6:cc:7b:3c:73:5f:50:c4:30:
-         71:d8:74:90:27:0a:01:4e:a5:5e:b1:f8:da:c2:61:81:11:ae:
-         29:a3:8f:fa:7e:4c:4e:62:b1:00:de:92:e3:8f:6a:2e:da:d9:
-         38:5d:6b:7c:0d:e4:01:aa:c8:c6:6d:8b:cd:c0:c8:6e:e4:57:
-         21:8a:f6:46:30:d9:ad:51:a1:87:96:a6:53:c9:1e:c6:bb:c3:
-         eb:55:fe:8c:d6:5c:d5:c6:f3:ca:b0:60:d2:d4:2a:1f:88:94:
-         d3:4c:1a:da:0c:94:fe:c1:5d:0d:2a:db:99:29:5d:f6:dd:16:
-         c4:c8:4d:74:9e:80:d9:d0:aa:ed:7b:e3:30:e4:47:d8:f5:15:
-         c1:71:b8:c6:fd:ee:fc:9e:b2:5f:b5:b7:92:ed:ff:ca:37:f6:
-         c7:82:b4:54:13:9b:83:cd:87:8b:7e:64:f6:2e:54:3a:22:b1:
-         c5:c1:f4:a5:25:53:9a:4d:a8:0f:e7:35:4b:89:df:19:83:66:
-         64:d9:db:d1:61:2b:24:1b:1d:44:44:fb:49:30:87:b7:49:23:
-         08:02:8a:e0:25:f3:f4:43
+                keyid:4C:AD:01:C5:E6:D5:A5:69:81:96:17:3C:E2:EF:69:67:EB:A6:66:EB
+                DirName:/C=KG/ST=NA/L=BISHKEK/O=OpenVPN-TEST/emailAddress=arne@openvpn.net
+                serial:7B:BC:1B:99:79:7A:69:5E:F0:6C:89:57:3D:1E:71:DD:E3:D2:C7:FA
+    Signature Algorithm: ecdsa-with-SHA256
+    Signature Value:
+        30:65:02:30:39:28:4a:6f:7b:28:83:49:dd:0c:cf:ee:b8:17:
+        2d:34:d7:eb:f0:16:61:08:a1:9d:f2:5d:f4:5f:2d:71:08:da:
+        15:da:00:c8:3c:c8:73:e8:02:91:66:01:eb:b3:45:2b:02:31:
+        00:b1:64:c8:83:e2:bc:6c:0a:15:bb:b1:6b:2e:c0:e7:f0:ee:
+        8f:e3:f7:8e:62:68:d6:0a:1e:90:49:0e:ff:4b:5e:ad:ae:d1:
+        f0:a2:95:15:83:16:18:0f:51:3c:ff:d1:cb
 -----BEGIN CERTIFICATE-----
-MIIFFDCCAvygAwIBAgIBAjANBgkqhkiG9w0BAQsFADBmMQswCQYDVQQGEwJLRzEL
-MAkGA1UECBMCTkExEDAOBgNVBAcTB0JJU0hLRUsxFTATBgNVBAoTDE9wZW5WUE4t
-VEVTVDEhMB8GCSqGSIb3DQEJARYSbWVAbXlob3N0Lm15ZG9tYWluMB4XDTE0MTAy
-MjIxNTk1M1oXDTI0MTAxOTIxNTk1M1owajELMAkGA1UEBhMCS0cxCzAJBgNVBAgT
-Ak5BMRUwEwYDVQQKEwxPcGVuVlBOLVRFU1QxFDASBgNVBAMTC1Rlc3QtQ2xpZW50
-MSEwHwYJKoZIhvcNAQkBFhJtZUBteWhvc3QubXlkb21haW4wggEiMA0GCSqGSIb3
-DQEBAQUAA4IBDwAwggEKAoIBAQDsZY/pEsIaW+ZWKgipgjotRHijADuwn+cnEECT
-7/HMPqCqBKKAGxOp5v6B1nCQqNjU3jDYNQDSvmLwSNr8FY3Exm0LmfErgwAK0yoj
-C+XN+TXfQ2EVcq2VmPZzIUFeoN1HJ6DVmtRBqBwdVyBxF4/3KJ4+B87s1Q5CTx50
-R45HndIUKCcsFBD10Za1k3SE7/kE3o1Kb993q+rRWNNE/loEAf8Gepf3/eNXSOHw
-30ATn2YjWuNVVD1UOe4A+RLx0t90LrrX8I3G3RhYHJMiC3X6qNbgtS8tudT+uU+G
-4nVIFmD7P8m0MEIp+zuzK7lZgWpG80WDv/3VGv83DG9b/WHxAgMBAAGjgcgwgcUw
-CQYDVR0TBAIwADAdBgNVHQ4EFgQU0rQ2D7H83aXqKvfHI4n64/p6RB0wgZgGA1Ud
-IwSBkDCBjYAUK0DlyX319JY46S/jL9lAZMmOBZuhaqRoMGYxCzAJBgNVBAYTAktH
-MQswCQYDVQQIEwJOQTEQMA4GA1UEBxMHQklTSEtFSzEVMBMGA1UEChMMT3BlblZQ
-Ti1URVNUMSEwHwYJKoZIhvcNAQkBFhJtZUBteWhvc3QubXlkb21haW6CCQChTt76
-kPKugTANBgkqhkiG9w0BAQsFAAOCAgEAf+D+hKfs32KlzTzB5kKxMRLwudqnnj+9
-llK2/FV0ZD7k/36q9z4GGF9zhfjI4GcbTZfKBdA3BzNkm+Z4dxSaVbsqrMN/yRUI
-g1zIwmHTcUwFCyvLo4dtoDLtsLMnl0pVjQEqMFZoq/LaXBBzyaoKnEtMoFtRbgp+
-bFOAsADhHppMCjeeIIm8xeV5WLdF/9PEof3ZeD1FFnTfgkQdHYFQWrkyTOJPPw46
-ZVpkgzspMcSZiLzFhDnyGRLhZtDq+3Wx0ie+kVmjKwnVXL9GjtZn1gvs2qvwgBmH
-ZAepd7FeDOLFHWqsXSPzMHU2TsrDTrBNjCzOUmFj3tX17+8KayMlJjw68sPCFhk/
-qTK6aPnJEjw+xh//m070kLBj9dEzADBa6CT6NUSbaoDzpsx7PHNfUMQwcdh0kCcK
-AU6lXrH42sJhgRGuKaOP+n5MTmKxAN6S449qLtrZOF1rfA3kAarIxm2LzcDIbuRX
-IYr2RjDZrVGhh5amU8kexrvD61X+jNZc1cbzyrBg0tQqH4iU00wa2gyU/sFdDSrb
-mSld9t0WxMhNdJ6A2dCq7XvjMORH2PUVwXG4xv3u/J6yX7W3ku3/yjf2x4K0VBOb
-g82Hi35k9i5UOiKxxcH0pSVTmk2oD+c1S4nfGYNmZNnb0WErJBsdRET7STCHt0kj
-CAKK4CXz9EM=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 -----END CERTIFICATE-----