From patchwork Wed Oct 28 04:22:59 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102167 Received: from mail-pj1-f43.google.com (mail-pj1-f43.google.com [209.85.216.43]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36189.1793161449907858924 for ; Tue, 27 Oct 2026 21:24:09 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=HN1G+iom; spf=pass (domain: gmail.com, ip: 209.85.216.43, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f43.google.com with SMTP id 98e67ed59e1d1-3aded3c6103so291352a91.0 for ; Tue, 27 Oct 2026 21:24:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161449; x=1793766249; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=dcDQN3b53a6MHz1FFFFYGmijN0jK+jJ9QC8CTjP1Sus=; b=HN1G+iomlnJUuzt+QqkCE93tBtjnzrmZg26OLTh2Z1YBk0BjKSps3dFE3YlM/EeTUg J11QJ5jh0eG+v2nAqbXHQajBe2LvNIpY9B4MIlUrVpEho9gLhpt2rU+OXe9yUA0NMMEN ty3PsUcSkZVgykNz9pnyfX/YJAo5IYuYIMF6O5RsFLo2aFKl6DmtwZsVMXFPY1YCh2T/ YW27ZJJUuLFTuxRlNT2y6AzWSXKHkCRZUrhR3HUxjQ0HMxDjwYKxFE+Xoh3QvM9DK175 nu2l7kFslIwRSyoImpbKMhaJYhCn2OIiqH3NOcuvytCP33Wo1Yx36DOGcdzSgWxx5uhp i3lg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161449; x=1793766249; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=dcDQN3b53a6MHz1FFFFYGmijN0jK+jJ9QC8CTjP1Sus=; b=rfRsgzTR0f2jc2UmTrjeNNSa+BnRmRFAU3kyCk+PxN5Admtk3mbfpC7VA48rx4r9fa XNHRqVSccsMpwJ+pldKOEWayhVWF+ryvSJXpRFR1tLxJNe0KkcxnH6p4NOyAt4HPeH0S lzg6AFSgIoOX+6tjmWYJ6nE2IaDzQiRrIG4cO0lIjHz3+PTgHPtOM1g8FxGPWmi44Cbg 9FdeaDSomzdXJ3Q0wzDbiAzADT6Z+xRk1uaFdAJdOE1P9jq8WK4zswcnqqwPlrYpN1Ge 43yieZTrCL1SYVfP3bsspQoKh3rpNY4Oyi3wybigdhzjlCIXjdIV0Er34PB/eB3qbKKi MkFA== X-Gm-Message-State: AFq9FYL8/aeCcm+fTblNllcCm6Ze57VJRgzkxynUuZQ+HxVgg2R8JGGv iMTV+cPSDOQi3tSp24us1W0pGluzttgZK06d/KlbGD+DI/ezqWCxXax+eP9ioQ== X-Gm-Gg: AYBFou1qHOY4sies5s4RDzKgZesOVHzuMq0MCFVbnUZobJgFS5mbVti26aAINfz1G+C Rz3U5+SGvw4X4HYVUfyudWiFjTGlO3ZPxq6/5UpoIh1WQqsyrOG+Cy2O1sVJ1XwsQ1xENMnG3mY hE227ArY7p93aFwP1KIOqwTmHKeY/nYfghpazsqvqr08iR6HQasZXkPF7uDtSvFtQrkazUkl9I/ jLpfNy04cxBtOzDxUYtzskmkeOSUTq0ol/2QNk9+Wm43B4UZTxtBRSV54r0qhfm/tJr/e115ja7 2uVfFvztYj3djLV800ooO43kAB+ZJtGI3/KnFIXrDVViVJiHy9CTPc8WrlsnLFajfVfqn9vb52g nG47IKn42nrhE9Rj1xYGR2OKEGN33Zt5Tk3lBGeK/2WuDO1hRBpyyRKEpuBHEWkh3NfBoDrrkMB 8LrmL0RqYd5BkR1jLoXpPFoMYy080xlwvybBJNbaxofttCms4MFc5hFlJT+2WrZiEaoVyod+fA7 kqFXbHjJFnzqZQb2DHTG7/bnzxlKHk3FrJqvSqxAb6yUt1XY50whMMxQ6gV3TK2iExjt0qRdf39 KYNIrj6lUdOTPB/2Yk1e0JzQrMa2K1j/RJ7YjRIGZ494+raupVpWxdWJvYSdVw== X-Received: by 2002:a17:90b:4f49:b0:3ab:b39f:41da with SMTP id 98e67ed59e1d1-3ae580ae572mr790470a91.11.1793161449238; Tue, 27 Oct 2026 21:24:09 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.07 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:08 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 01/60] zeroconf: ignore CVEs Date: Wed, 28 Oct 2026 17:22:59 +1300 Message-ID: <975c06326df9fb94ce6ecedd3408a45ce55eb736.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131553 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-47180 https://nvd.nist.gov/vuln/detail/cve-2026-47183 https://nvd.nist.gov/vuln/detail/cve-2026-47184 https://nvd.nist.gov/vuln/detail/cve-2026-48045 https://nvd.nist.gov/vuln/detail/cve-2026-48487 Signed-off-by: Ankur Tyagi --- meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb b/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb index cb26699212..a9c19cb38f 100644 --- a/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb +++ b/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb @@ -35,3 +35,9 @@ do_install () { install -c -m 755 ${UNPACKDIR}/debian-zeroconf ${D}${sysconfdir}/network/if-up.d/zeroconf install -c ${UNPACKDIR}/zeroconf-default ${D}${sysconfdir}/default/zeroconf } + +CVE_STATUS[CVE-2026-47180] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" +CVE_STATUS[CVE-2026-47183] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" +CVE_STATUS[CVE-2026-47184] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" +CVE_STATUS[CVE-2026-48045] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" +CVE_STATUS[CVE-2026-48487] = "cpe-incorrect: this vulnerability is for Python Zeroconf library" From patchwork Wed Oct 28 04:23:00 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102168 Received: from mail-pg1-f176.google.com (mail-pg1-f176.google.com [209.85.215.176]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36190.1793161453098147147 for ; Tue, 27 Oct 2026 21:24:13 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=CYOs9ig0; spf=pass (domain: gmail.com, ip: 209.85.215.176, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f176.google.com with SMTP id 41be03b00d2f7-cc1bc88a20eso378759a12.3 for ; Tue, 27 Oct 2026 21:24:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161452; x=1793766252; darn=lists.openembedded.org; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=elzW/IhIrW0uicn22cC85Dq/cwPxkRaI4vt9zsGwJwE=; b=CYOs9ig03aV7ours6efLUq/PH1/7o7oxNLCEzrutRL5rm5QqXvHz3ANEVLZpX3klgw mbiMOBjW7X4cwCqqHPlyBYnhKNzPYF6BNuqn2qfeNlLNwjWQ5volkZj6vLryW72M+PmS mv3h7JCuw5t/qdFnAK/PWaOUxR3CXr6XSFbZcAnSA/nT2uyLsb8xErosA3KBQA9sykPU iqL57W/f4yDBCafrAQhcPmmumCGFg67UGnBV097iGd+bzxpSp+R5D0nilbQwU4qv9KoT +nu/SpIqCMOnjJRcRlzZAnEjV0wmhdted4RgLv2vnniAF4+dviSD10CMy/J1qPwY/THe LxKQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161452; x=1793766252; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=elzW/IhIrW0uicn22cC85Dq/cwPxkRaI4vt9zsGwJwE=; b=FcESVd5vO30wXUMU1o0mq6Sqibf4RVj1aALLWvbawTO9mtbuHxjKT531tmDCAy8pgW E0kxCxyB+4FbdPIuWkWlECF18h8uUEODQd+B7tPDJ/FoMukOgRU46+hW11pPis0/G5+5 egYL/QuHeebVyYeWtc4RwWghyAPTH38ZIBV6FdVFLcdbOtKtkcn5O18Cv+QRfpXPRXfn TphKAZX6mdmVN8nIhSlys31a8ukXiuBR91FKuzHcweX6vGZzeRJJLwsk7cDYRfupSkk2 vcDkvEQmYI9O06yiwI/KaT3Si0+XZu8xjzahj9TKXXPrFA91ZGneyrSZHRF2oWCuH6oO MccA== X-Gm-Message-State: AFq9FYKARExWKLFGJfF4DLSLJwk0FRSf3MWQM7P5CdumXqStLzcmsSnU zVQ+8UnGMxi5PFP0ltCNmph2ORyy9Q/sCt3+jLpA2GK7VJRcS9c8lb9G6m7Y0Q== X-Gm-Gg: AYBFou0E16MNm/HVPsLJieHMEKDXc0xU1eyvRnJy8k/+hAylV4kHvEYbBfGTmP++Edt gB6xcrpDO5BmmQymftKukWqeSrRLomkbFTAv+g5Cda5U4xfsPHOcADbginTbps9WJenzHAwHCEU ERvlj6rkOxhGFTf30jRwCfxPnSOrA2q5hBSW8qVLaw/H41JdgjXLxge2zldA7jz/a77hhhydVEY ggR8FAnw6bIT6ThCnpAwzPkztBWwOwRxRmSorotthqtUmEpbNoCgLLtPbaieMOOO/a6r5316P4G 2m28nXGncbY3ytTd5XhP+mu/rXdVLyp5UPOBecDuynJtyIQW+AjbyLr8b7b7CImjtHApJ/G9fl5 b7h05sUjY7zoxpSwD3jmMSYp6J62hmlLFNFN6b4oaeivgWC9uM2XzAYIqsoarf7jIWcxLSYuAAo ion+tkOJJiVZRpqBWFwPQNkJzqMhT0MiwdpYy54wd7ZEHS5gLB7+6124BISWAP6Gcw4Nweox5Gu Bvf5TCTv9QjxDgZ5eZsmzcZQWmkwGAhucebVz/X0MPn+uH+vhJuVDWiVBBuFiREdus18nyGcHzc Z2ZhMZ1XveVWxGjLC1DhM2NF1ydthfMX+OtnczEbnATicWaQZaiF/vHvbpLROg== X-Received: by 2002:a17:90b:37cb:b0:3ad:183f:5e3a with SMTP id 98e67ed59e1d1-3ae57df6b83mr969865a91.4.1793161451911; Tue, 27 Oct 2026 21:24:11 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.09 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:11 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 02/60] udisks2: patch CVE-2026-7867 Date: Wed, 28 Oct 2026 17:23:00 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:14 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131554 From: Ankur Tyagi Backport commits from the PR[1]. Details: https://nvd.nist.gov/vuln/detail/cve-2026-7867 [1]https://github.com/storaged-project/udisks/pull/1530 Signed-off-by: Ankur Tyagi --- .../udisks/udisks2/CVE-2026-7867-1.patch | 249 +++++++++++++ .../udisks/udisks2/CVE-2026-7867-2.patch | 208 +++++++++++ .../udisks/udisks2/CVE-2026-7867-3.patch | 53 +++ .../udisks/udisks2/CVE-2026-7867-4.patch | 40 ++ .../udisks/udisks2/CVE-2026-7867-5.patch | 348 ++++++++++++++++++ .../recipes-support/udisks/udisks2_2.10.2.bb | 9 +- 6 files changed, 905 insertions(+), 2 deletions(-) create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch new file mode 100644 index 0000000000..e7a5704f6c --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch @@ -0,0 +1,249 @@ +From 1b417fd9a69e7141927a03bfb39d4d5a78b891b4 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Tue, 28 Apr 2026 19:10:09 +0200 +Subject: [PATCH] udiskslinuxfilesystem: Separate real caller identity from + as-user target +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +When the 'as-user' option is specified in Filesystem.Mount(), the code +previously overwrote caller_uid/caller_gid with the target user's identity. +This meant downstream functions received a uid they believed was the +D-Bus caller's, but was actually the target's. + +Introduce effective_uid/effective_gid/effective_user_name to hold the +as-user target identity (or the caller's identity when as-user is not +set). The real D-Bus caller identity is now always resolved into +caller_uid/caller_gid and used for authorization-related decisions +(setup_by_user, on_user_seat checks), while effective_* is used for +mount point calculation, run_as_uid/run_as_gid, and state tracking. + +Reported-by: Azizcan Daştan +Reported-by: Özlem Ozan +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 397eea88d58f77f6e02d537c4c961201b9245943) +(cherry picked from commit 2d97818f41fbeb645fbb7b0373ed448bd26503f6) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/2d97818f41fbeb645fbb7b0373ed448bd26503f6] +Signed-off-by: Ankur Tyagi +--- + src/udiskslinuxfilesystem.c | 93 +++++++++++++++++++++---------------- + 1 file changed, 53 insertions(+), 40 deletions(-) + +diff --git a/src/udiskslinuxfilesystem.c b/src/udiskslinuxfilesystem.c +index 9f4880ad..ebdd2e05 100644 +--- a/src/udiskslinuxfilesystem.c ++++ b/src/udiskslinuxfilesystem.c +@@ -905,7 +905,8 @@ handle_mount_fstab (UDisksDaemon *daemon, + UDisksObject *object, + uid_t caller_uid, + gid_t caller_gid, +- gboolean mount_other_user, ++ uid_t effective_uid, ++ gid_t effective_gid, + const gchar *mount_point_to_use, + const gchar *fstab_mount_options, + GDBusMethodInvocation *invocation, +@@ -936,7 +937,7 @@ handle_mount_fstab (UDisksDaemon *daemon, + * will be replaced by the name of the drive/device in question + */ + message = N_("Authentication is required to mount $(drive)"); +- if (mount_other_user) ++ if (caller_uid != effective_uid) + { + action_id = "org.freedesktop.udisks2.filesystem-mount-other-user"; + } +@@ -981,14 +982,14 @@ handle_mount_fstab (UDisksDaemon *daemon, + job = udisks_daemon_launch_simple_job (daemon, + UDISKS_OBJECT (object), + "filesystem-mount", +- mount_fstab_as_root ? 0 : caller_uid, ++ mount_fstab_as_root ? 0 : effective_uid, + NULL /* cancellable */); + + /* XXX: using run_as_uid for root doesn't work even if the caller is already root */ +- if (!mount_fstab_as_root && caller_uid != 0) ++ if (!mount_fstab_as_root && effective_uid != 0) + { +- BDExtraArg uid_arg = { g_strdup ("run_as_uid"), g_strdup_printf ("%d", caller_uid) }; +- BDExtraArg gid_arg = { g_strdup ("run_as_gid"), g_strdup_printf ("%d", caller_gid) }; ++ BDExtraArg uid_arg = { g_strdup ("run_as_uid"), g_strdup_printf ("%d", effective_uid) }; ++ BDExtraArg gid_arg = { g_strdup ("run_as_gid"), g_strdup_printf ("%d", effective_gid) }; + const BDExtraArg *extra_args[3] = { &uid_arg, &gid_arg, NULL }; + + success = bd_fs_mount (NULL, mount_point_to_use, NULL, NULL, extra_args, &error); +@@ -1066,8 +1067,9 @@ handle_mount_dynamic (UDisksDaemon *daemon, + UDisksObject *object, + uid_t caller_uid, + gid_t caller_gid, +- const gchar *caller_user_name, +- gboolean mount_other_user, ++ uid_t effective_uid, ++ gid_t effective_gid, ++ const gchar *effective_user_name, + gchar **mount_point_to_use, + gboolean *mpoint_persistent, + GDBusMethodInvocation *invocation, +@@ -1127,7 +1129,7 @@ handle_mount_dynamic (UDisksDaemon *daemon, + * will be replaced by the name of the drive/device in question + */ + message = N_("Authentication is required to mount $(drive)"); +- if (mount_other_user) ++ if (caller_uid != effective_uid) + { + action_id = "org.freedesktop.udisks2.filesystem-mount-other-user"; + } +@@ -1161,9 +1163,9 @@ handle_mount_dynamic (UDisksDaemon *daemon, + /* Calculate mount point (guaranteed to be valid UTF-8) */ + *mount_point_to_use = calculate_mount_point (daemon, + block, +- caller_uid, +- caller_gid, +- caller_user_name, ++ effective_uid, ++ effective_gid, ++ effective_user_name, + fs_type_to_use, + mpoint_persistent, + &error); +@@ -1178,7 +1180,7 @@ handle_mount_dynamic (UDisksDaemon *daemon, + /* Calculate mount options (guaranteed to be valid UTF-8) */ + mount_options = udisks_linux_calculate_mount_options (daemon, + block, +- caller_uid, ++ effective_uid, + fs_signature, + fs_type_to_use, + options, +@@ -1258,14 +1260,16 @@ handle_mount (UDisksFilesystem *filesystem, + UDisksBlock *block; + UDisksDaemon *daemon; + UDisksState *state = NULL; +- gchar *opt_as_user = NULL; ++ const gchar *opt_as_user = NULL; + uid_t caller_uid; + gid_t caller_gid; ++ uid_t effective_uid = 0; ++ gid_t effective_gid = 0; ++ gchar *effective_user_name = NULL; + const gchar * const *existing_mount_points; + gchar *mount_point_to_use = NULL; + gboolean mpoint_persistent = TRUE; + gchar *fstab_mount_options = NULL; +- gchar *caller_user_name = NULL; + GError *error = NULL; + gboolean system_managed = FALSE; + gchar *device = NULL; +@@ -1323,35 +1327,42 @@ handle_mount (UDisksFilesystem *filesystem, + goto out; + } + ++ /* Always resolve the real D-Bus caller identity */ ++ if (!udisks_daemon_util_get_caller_uid_sync (daemon, ++ invocation, ++ NULL /* GCancellable */, ++ &caller_uid, ++ &error)) ++ { ++ g_dbus_method_invocation_return_gerror (invocation, error); ++ g_clear_error (&error); ++ goto out; ++ } ++ ++ if (!udisks_daemon_util_get_user_info (caller_uid, ++ &caller_gid, ++ opt_as_user ? NULL : &effective_user_name, ++ &error)) ++ { ++ g_dbus_method_invocation_return_gerror (invocation, error); ++ g_clear_error (&error); ++ goto out; ++ } ++ + if (opt_as_user) + { +- if (!udisks_daemon_util_get_user_info_by_name (opt_as_user, &caller_uid, &caller_gid, &error)) ++ if (!udisks_daemon_util_get_user_info_by_name (opt_as_user, &effective_uid, &effective_gid, &error)) + { + g_dbus_method_invocation_return_gerror (invocation, error); + g_clear_error (&error); + goto out; + } +- caller_user_name = g_strdup (opt_as_user); ++ effective_user_name = g_strdup (opt_as_user); + } + else + { +- if (!udisks_daemon_util_get_caller_uid_sync (daemon, +- invocation, +- NULL /* GCancellable */, +- &caller_uid, +- &error)) +- { +- g_dbus_method_invocation_return_gerror (invocation, error); +- g_clear_error (&error); +- goto out; +- } +- +- if (!udisks_daemon_util_get_user_info (caller_uid, &caller_gid, &caller_user_name, &error)) +- { +- g_dbus_method_invocation_return_gerror (invocation, error); +- g_clear_error (&error); +- goto out; +- } ++ effective_uid = caller_uid; ++ effective_gid = caller_gid; + } + + /* Mount it */ +@@ -1361,7 +1372,8 @@ handle_mount (UDisksFilesystem *filesystem, + object, + caller_uid, + caller_gid, +- opt_as_user != NULL, ++ effective_uid, ++ effective_gid, + mount_point_to_use, + fstab_mount_options, + invocation, +@@ -1374,8 +1386,9 @@ handle_mount (UDisksFilesystem *filesystem, + object, + caller_uid, + caller_gid, +- caller_user_name, +- opt_as_user != NULL, ++ effective_uid, ++ effective_gid, ++ effective_user_name, + &mount_point_to_use, + &mpoint_persistent, + invocation, +@@ -1387,7 +1400,7 @@ handle_mount (UDisksFilesystem *filesystem, + udisks_state_add_mounted_fs (state, + mount_point_to_use, + udisks_block_get_device_number (block), +- caller_uid, ++ effective_uid, + system_managed, + system_managed ? FALSE : mpoint_persistent); + +@@ -1395,7 +1408,7 @@ handle_mount (UDisksFilesystem *filesystem, + device, + system_managed ? " (system)" : "", + mount_point_to_use, +- caller_uid); ++ effective_uid); + + udisks_linux_block_object_trigger_uevent_sync (UDISKS_LINUX_BLOCK_OBJECT (object), + UDISKS_DEFAULT_WAIT_TIMEOUT); +@@ -1409,7 +1422,7 @@ handle_mount (UDisksFilesystem *filesystem, + udisks_state_check (state); + g_free (mount_point_to_use); + g_free (fstab_mount_options); +- g_free (caller_user_name); ++ g_free (effective_user_name); + g_free (device); + g_clear_object (&object); + diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch new file mode 100644 index 0000000000..dff53c87d8 --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch @@ -0,0 +1,208 @@ +From 53a3e81a90fa6d71cfb59d63ffffa22bbe071886 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Tue, 28 Apr 2026 19:29:14 +0200 +Subject: [PATCH] udiskslinuxfilesystem: Rework fstab mount authorization for + as-user +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +The polkit authorization logic in handle_mount_fstab() had two problems +when 'as-user' was combined with fstab entries containing 'user', +'users' or 'x-udisks-auth' mount options: + +1. The 'filesystem-mount-other-user' polkit check was inside the code + block that is skipped when 'user'/'users'/'x-udisks-auth' options + are present, allowing an unprivileged caller to mount on behalf of + another user without any authorization. + +2. When 'user' or 'users' fstab options were present and the initial + mount attempt failed with a permission error, the code would fall + back to mounting as root. This fallback should only be available + when 'x-udisks-auth' is explicitly specified. + +Restructure the authorization flow so that: + - The 'filesystem-mount-other-user' check is evaluated first, + independently of fstab mount options, and is always enforced + when caller_uid != effective_uid. + - The root fallback on BD_FS_ERROR_AUTH is gated on 'x-udisks-auth' + being present, not just any of the user-level mount options. + - When root uses 'as-user' without 'user'/'users' fstab options, + the root fallback is implicitly enabled. + - Regular polkit checks (filesystem-mount, mount-system, + mount-other-seat) only apply for same-user mounts without + 'user'/'users'/'x-udisks-auth'. + +Update the D-Bus API documentation to reflect the new behavior. + +Reported-by: Azizcan Daştan +Reported-by: Özlem Ozan +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 68108081aa9049cf3bb2fb0044cb4de83f962390) +(cherry picked from commit 0050f51d40e468f6a3197ccdc77b5bd59c923a37) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/0050f51d40e468f6a3197ccdc77b5bd59c923a37] +Signed-off-by: Ankur Tyagi +--- + data/org.freedesktop.UDisks2.xml | 24 ++++++----- + src/udiskslinuxfilesystem.c | 73 ++++++++++++++++++++++++-------- + 2 files changed, 70 insertions(+), 27 deletions(-) + +diff --git a/data/org.freedesktop.UDisks2.xml b/data/org.freedesktop.UDisks2.xml +index 53194c70..f7201adc 100644 +--- a/data/org.freedesktop.UDisks2.xml ++++ b/data/org.freedesktop.UDisks2.xml +@@ -2654,7 +2654,8 @@ + filesystem is mounted on behalf of the specified user instead + of the calling one. This has usually an effect on the returned + @mount_path and it also allows that user to unmount the +- filesystem later. This option expects a user name, not a UID. ++ filesystem later. This option expects a user name, not a UID ++ and always performs an authorization check. + + If the device in question is referenced in the + /etc/fstab file, the +@@ -2662,15 +2663,18 @@ + and the given options or filesystem type given in @options are + ignored. + +- If x-udisks-auth is specified as an option +- for the device in the /etc/fstab file, +- then the mount command is run as the +- calling user, without performing any authorization check +- mentioned above. If this fails because of insufficient +- permissions, an authorization check is performed (which +- typically results in the user having to authenticate as an +- administrator). If authorized, the mount +- command is then run as root. ++ If x-udisks-auth, user or ++ users are specified as options for the ++ device in the /etc/fstab file, then the ++ mount command is run as the calling user ++ (or the effective user of the as-user ++ option respectively), without performing any authorization check ++ mentioned above. If this fails because of insufficient permissions ++ and x-udisks-auth is specified, an ++ authorization check is performed (which typically results in ++ the user having to authenticate as an administrator). If ++ authorized, the mount command is then run ++ as root. + + The filesystem should be unmounted using the + org.freedesktop.UDisks2.Filesystem.Unmount() method. +diff --git a/src/udiskslinuxfilesystem.c b/src/udiskslinuxfilesystem.c +index ebdd2e05..eb2a3f21 100644 +--- a/src/udiskslinuxfilesystem.c ++++ b/src/udiskslinuxfilesystem.c +@@ -918,30 +918,60 @@ handle_mount_fstab (UDisksDaemon *daemon, + const gchar *message = NULL; + gboolean success = FALSE; + gboolean mount_fstab_as_root = FALSE; ++ gboolean x_udisks_auth = FALSE; ++ gboolean user_mount = FALSE; + UDisksBaseJob *job = NULL; + GError *error = NULL; + + block = udisks_object_peek_block (object); + device = udisks_block_get_device (block); + +- if (!has_option (fstab_mount_options, "x-udisks-auth") && +- !has_option (fstab_mount_options, "user") && +- !has_option (fstab_mount_options, "users")) ++ x_udisks_auth = has_option (fstab_mount_options, "x-udisks-auth"); ++ user_mount = x_udisks_auth || ++ has_option (fstab_mount_options, "user") || ++ has_option (fstab_mount_options, "users"); ++ ++ /* 'as-user' rules: ++ * - when caller is root: ++ * - if 'user'/'users' present, do not fall back to mounting as root, unless 'x-udisks-auth' is specified ++ * - if 'user'/'users' not present, try as effective user first and allow fallback to mounting as root (implies 'x-udisks-auth') ++ * - when caller is unprivileged: ++ * - always require polkit auth to prevent identity spoofing ++ * - do not fall back to mounting as root, unless 'x-udisks-auth' is specified ++ * - if neither 'user'/'users'/'x-udisks-auth' present, failure is expected by nature (unless 'as-user=root') ++ * ++ * general fstab mounting rules: ++ * - when caller is root, mount as root, allow anything ++ * - when caller is unprivileged: ++ * - if 'user'/'users' present, do not fall back to mounting as root, unless 'x-udisks-auth' is specified ++ * - if only 'x-udisks-auth' present, mount as user and fall back to mounting as root if not successful ++ * - if neither 'user'/'users'/'x-udisks-auth' present, require polkit auth and mount as root ++ * ++ * Further assumptions: ++ * - when 'user'/'users' not present and mounting as unprivileged, this typically fails but it is still beneficial to try that e.g. for FUSE mounts ++ * - assuming libblockdev mount error code mapping works reliably (for the BD_FS_ERROR_AUTH check) ++ */ ++ ++ if (caller_uid != effective_uid) ++ { ++ /* Always require authorization when mounting on behalf of another user, ++ * regardless of fstab mount options. ++ */ ++ action_id = "org.freedesktop.udisks2.filesystem-mount-other-user"; ++ ++ /* When 'user'/'users' not present and the caller is root, allow ++ * fallback mounting as root. ++ */ ++ if (caller_uid == 0 && !user_mount) ++ x_udisks_auth = TRUE; ++ } ++ else ++ if (!user_mount) + { + mount_fstab_as_root = TRUE; ++ + action_id = "org.freedesktop.udisks2.filesystem-mount"; +- /* Translators: Shown in authentication dialog when the user +- * requests mounting a filesystem. +- * +- * Do not translate $(drive), it's a placeholder and +- * will be replaced by the name of the drive/device in question +- */ +- message = N_("Authentication is required to mount $(drive)"); +- if (caller_uid != effective_uid) +- { +- action_id = "org.freedesktop.udisks2.filesystem-mount-other-user"; +- } +- else if (!udisks_daemon_util_setup_by_user (daemon, object, caller_uid)) ++ if (!udisks_daemon_util_setup_by_user (daemon, object, caller_uid)) + { + if (udisks_block_get_hint_system (block)) + { +@@ -952,7 +982,17 @@ handle_mount_fstab (UDisksDaemon *daemon, + action_id = "org.freedesktop.udisks2.filesystem-mount-other-seat"; + } + } ++ } + ++ if (action_id) ++ { ++ /* Translators: Shown in authentication dialog when the user ++ * requests mounting a filesystem. ++ * ++ * Do not translate $(drive), it's a placeholder and ++ * will be replaced by the name of the drive/device in question ++ */ ++ message = N_("Authentication is required to mount $(drive)"); + if (!udisks_daemon_util_check_authorization_sync (daemon, + object, + action_id, +@@ -962,7 +1002,6 @@ handle_mount_fstab (UDisksDaemon *daemon, + return FALSE; + } + +- + if (!g_file_test (mount_point_to_use, G_FILE_TEST_IS_DIR)) + { + if (g_mkdir_with_parents (mount_point_to_use, 0755) != 0) +@@ -1011,7 +1050,7 @@ handle_mount_fstab (UDisksDaemon *daemon, + + if (!success) + { +- if (!mount_fstab_as_root && g_error_matches (error, BD_FS_ERROR, BD_FS_ERROR_AUTH)) ++ if (!mount_fstab_as_root && g_error_matches (error, BD_FS_ERROR, BD_FS_ERROR_AUTH) && x_udisks_auth) + { + g_clear_error (&error); + action_id = "org.freedesktop.udisks2.filesystem-fstab"; diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch new file mode 100644 index 0000000000..245e46ac00 --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch @@ -0,0 +1,53 @@ +From 68a82f2afb3a5ca0da207cdd5bbd55e777940e12 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Sun, 3 May 2026 14:00:01 +0200 +Subject: [PATCH] udiskslinuxfilesystem: Log real caller uid for as-user mounts + +When a mount is performed with the as-user option targeting a different +user, log both the effective (target) uid and the real caller uid to +provide an audit trail of who authorized the operation. + +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 98e5a76c155640d155280cdb642791f00def736a) +(cherry picked from commit 132ebab4a196f7fbd01fa28283627b2227eb399b) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/132ebab4a196f7fbd01fa28283627b2227eb399b] +Signed-off-by: Ankur Tyagi +--- + src/udiskslinuxfilesystem.c | 22 +++++++++++++++++----- + 1 file changed, 17 insertions(+), 5 deletions(-) + +diff --git a/src/udiskslinuxfilesystem.c b/src/udiskslinuxfilesystem.c +index eb2a3f21..5e2508cc 100644 +--- a/src/udiskslinuxfilesystem.c ++++ b/src/udiskslinuxfilesystem.c +@@ -1443,11 +1443,23 @@ handle_mount (UDisksFilesystem *filesystem, + system_managed, + system_managed ? FALSE : mpoint_persistent); + +- udisks_notice ("Mounted %s%s at %s on behalf of uid %u", +- device, +- system_managed ? " (system)" : "", +- mount_point_to_use, +- effective_uid); ++ if (effective_uid != caller_uid) ++ { ++ udisks_notice ("Mounted %s%s at %s on behalf of uid %u (requested by uid %u)", ++ device, ++ system_managed ? " (system)" : "", ++ mount_point_to_use, ++ effective_uid, ++ caller_uid); ++ } ++ else ++ { ++ udisks_notice ("Mounted %s%s at %s on behalf of uid %u", ++ device, ++ system_managed ? " (system)" : "", ++ mount_point_to_use, ++ effective_uid); ++ } + + udisks_linux_block_object_trigger_uevent_sync (UDISKS_LINUX_BLOCK_OBJECT (object), + UDISKS_DEFAULT_WAIT_TIMEOUT); diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch new file mode 100644 index 0000000000..726f3271dc --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch @@ -0,0 +1,40 @@ +From a17202ed591f07109ce978e5abb999c67de9b3f1 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Tue, 28 Apr 2026 19:10:38 +0200 +Subject: [PATCH] udisksdaemonutil: Pass as-user target to polkit details + +When the 'as-user' D-Bus method option is present, propagate the +target username to polkit details as 'mount.as-user'. This allows +polkit rules to make fine-grained authorization decisions based on +who the mount is being performed for. + +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 681d58a76f6aaa5045eb43e665c65f497d35b810) +(cherry picked from commit 3b016cc881b1d3c3d843ec13e35102beaaac7023) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/3b016cc881b1d3c3d843ec13e35102beaaac7023] +Signed-off-by: Ankur Tyagi +--- + src/udisksdaemonutil.c | 8 ++++++++ + 1 file changed, 8 insertions(+) + +diff --git a/src/udisksdaemonutil.c b/src/udisksdaemonutil.c +index 3db92f58..36e3184b 100644 +--- a/src/udisksdaemonutil.c ++++ b/src/udisksdaemonutil.c +@@ -797,6 +797,14 @@ udisks_daemon_util_check_authorization_sync_with_error (UDisksDaemon * + polkit_details_insert (details, "polkit.message", message); + polkit_details_insert (details, "polkit.gettext_domain", "udisks2"); + ++ if (options != NULL && ++ g_strcmp0 (action_id, "org.freedesktop.udisks2.filesystem-mount-other-user") == 0) ++ { ++ const gchar *as_user = NULL; ++ g_variant_lookup (options, "as-user", "&s", &as_user); ++ _safe_polkit_details_insert (details, "mount.as-user", as_user); ++ } ++ + /* Find drive associated with the block device, if any */ + if (object != NULL) + { diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch new file mode 100644 index 0000000000..6901e71d37 --- /dev/null +++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch @@ -0,0 +1,348 @@ +From 7e77f3cb5c6658f5522d8d56e882e8df02978d76 Mon Sep 17 00:00:00 2001 +From: Tomas Bzatek +Date: Wed, 29 Apr 2026 16:36:45 +0200 +Subject: [PATCH] tests: Add security tests for as-user mount authorization + +Add tests verifying that an unprivileged D-Bus caller cannot exploit +the 'as-user' option in Filesystem.Mount() to mount on behalf of +another user without polkit authorization. Use a dedicated +'udisks_test_target' user instead of 'nobody' to avoid OS-level +special treatment of system users that could mask real behavior. + +Dynamic mount tests (in UdisksFSTestCase, inherited by all FS types): +- test_mount_as_user_denied: as-user= is denied +- test_mount_as_user_root_denied: as-user=root is denied +- test_mount_as_user_self: as-user= behaves like plain mount + +Fstab mount tests (in NonPOSIXTestCase, inherited by VFAT/EXFAT): +- test_mount_fstab_{users,user,x-udisks-auth}_as_user_denied: + fstab entries that normally allow unprivileged mounting must still + require authorization when as-user is specified +- test_mount_fstab_{users,user,x-udisks-auth}_as_root_denied: + same but with as-user=root +- test_mount_fstab_defaults_as_user_from_root: root can mount + fstab 'defaults' device with as-user targeting a non-root user +- test_mount_fstab_defaults_as_user_denied: unprivileged user + cannot mount fstab 'defaults' device with as-user + +Co-Authored-By: Claude Opus 4.6 +(cherry picked from commit 5ec20c9d5719ead510d800bc3eb5a731e5712f39) +(cherry picked from commit 36231768dde088c8b4d4796ff2d311d089d84052) + +CVE: CVE-2026-7867 +Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/36231768dde088c8b4d4796ff2d311d089d84052] +Signed-off-by: Ankur Tyagi +--- + src/tests/dbus-tests/test_80_filesystem.py | 278 +++++++++++++++++++++ + 1 file changed, 278 insertions(+) + +diff --git a/src/tests/dbus-tests/test_80_filesystem.py b/src/tests/dbus-tests/test_80_filesystem.py +index 1f375ac6..03336512 100644 +--- a/src/tests/dbus-tests/test_80_filesystem.py ++++ b/src/tests/dbus-tests/test_80_filesystem.py +@@ -30,6 +30,8 @@ class UdisksFSTestCase(udiskstestcase.UdisksTestCase): + _can_query_size = False + + username = 'udisks_test_user' ++ # a separate target user used for 'as-user' mount tests ++ target_username = 'udisks_test_target' + + requested_plugins = BlockDev.plugin_specs_from_names(("fs",)) + +@@ -1037,6 +1039,174 @@ class UdisksFSTestCase(udiskstestcase.UdisksTestCase): + pipe.send([True, '']) + pipe.close() + ++ def _mount_with_as_user_fail(self, pipe, uid, gid, device, target_user): ++ """ Try to mount @device as user with given @uid and @gid using the ++ 'as-user' option set to @target_user. This is expected to fail ++ with a NotAuthorized error. ++ """ ++ os.setresgid(gid, gid, gid) ++ os.setresuid(uid, uid, uid) ++ ++ try: ++ safe_dbus.call_sync(self.iface_prefix, ++ self.path_prefix + '/block_devices/' + os.path.basename(device), ++ self.iface_prefix + '.Filesystem', ++ 'Mount', ++ GLib.Variant('(a{sv})', ({'as-user': GLib.Variant('s', target_user)},))) ++ except Exception as e: ++ msg = str(e) ++ if 'org.freedesktop.UDisks2.Error.NotAuthorized' in msg and \ ++ 'Not authorized to perform operation' in msg: ++ pipe.send([True, '']) ++ pipe.close() ++ return ++ else: ++ pipe.send([False, 'Mount DBus call failed with unexpected exception: %s' % msg]) ++ pipe.close() ++ return ++ ++ pipe.send([False, 'Mount with as-user=%s unexpectedly succeeded for uid %d' % (target_user, uid)]) ++ pipe.close() ++ ++ def _test_mount_as_user_denied(self, target_user): ++ """ Test that an unprivileged user cannot use as-user to mount on ++ behalf of @target_user without polkit authorization. ++ """ ++ self._check_can_create() ++ ++ if not self._can_mount: ++ self.skipTest('Cannot mount %s filesystem' % self._fs_signature) ++ ++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0])) ++ self.assertIsNotNone(disk) ++ ++ disk.Format(self._fs_signature, self.no_options, dbus_interface=self.iface_prefix + '.Block') ++ self.addCleanup(self.wipe_fs, self.vdevs[0]) ++ self.addCleanup(self.try_unmount, self.vdevs[0]) ++ ++ self.addCleanup(self._remove_user, self.username) ++ uid, gid = self._add_user(self.username) ++ ++ if target_user != 'root': ++ self.addCleanup(self._remove_user, target_user) ++ self._add_user(target_user) ++ ++ parent_conn, child_conn = Pipe() ++ proc = Process(target=self._mount_with_as_user_fail, ++ args=(child_conn, int(uid), int(gid), self.vdevs[0], target_user)) ++ proc.start() ++ res = parent_conn.recv() ++ parent_conn.close() ++ proc.join() ++ ++ if not res[0]: ++ self.fail(res[1]) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_as_user_denied(self): ++ """ Test that an unprivileged user cannot use as-user to mount on ++ behalf of another user without authorization. ++ """ ++ self._test_mount_as_user_denied(self.target_username) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_as_user_root_denied(self): ++ """ Test that an unprivileged user cannot use as-user=root to mount ++ without authorization. ++ """ ++ self._test_mount_as_user_denied('root') ++ ++ def _mount_as_user_result(self, pipe, uid, gid, device, options): ++ """ Try to mount @device as user with given @uid and @gid using ++ the given @options dict. Returns [True, error_string] on D-Bus ++ error or [True, ''] on success. ++ """ ++ os.setresgid(gid, gid, gid) ++ os.setresuid(uid, uid, uid) ++ ++ try: ++ safe_dbus.call_sync(self.iface_prefix, ++ self.path_prefix + '/block_devices/' + os.path.basename(device), ++ self.iface_prefix + '.Filesystem', ++ 'Mount', ++ GLib.Variant('(a{sv})', (options,))) ++ except Exception as e: ++ pipe.send([True, str(e)]) ++ pipe.close() ++ return ++ ++ pipe.send([True, '']) ++ pipe.close() ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_as_user_self(self): ++ """ Test that as-user targeting the caller's own username behaves ++ identically to mounting without as-user (no extra mount-other-user ++ authorization required). ++ """ ++ self._check_can_create() ++ ++ if not self._can_mount: ++ self.skipTest('Cannot mount %s filesystem' % self._fs_signature) ++ ++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0])) ++ self.assertIsNotNone(disk) ++ ++ disk.Format(self._fs_signature, self.no_options, dbus_interface=self.iface_prefix + '.Block') ++ self.addCleanup(self.wipe_fs, self.vdevs[0]) ++ self.addCleanup(self.try_unmount, self.vdevs[0]) ++ ++ self.addCleanup(self._remove_user, self.username) ++ uid, gid = self._add_user(self.username) ++ ++ # first try a plain mount without as-user ++ parent_conn, child_conn = Pipe() ++ proc = Process(target=self._mount_as_user_result, ++ args=(child_conn, int(uid), int(gid), self.vdevs[0], {})) ++ proc.start() ++ res_plain = parent_conn.recv() ++ parent_conn.close() ++ proc.join() ++ ++ self.assertTrue(res_plain[0]) ++ plain_error = res_plain[1] ++ ++ # unmount if the plain mount succeeded ++ if not plain_error: ++ self.try_unmount(self.vdevs[0]) ++ ++ # now try with as-user= ++ parent_conn, child_conn = Pipe() ++ proc = Process(target=self._mount_as_user_result, ++ args=(child_conn, int(uid), int(gid), self.vdevs[0], ++ {'as-user': GLib.Variant('s', self.username)})) ++ proc.start() ++ res_as_user = parent_conn.recv() ++ parent_conn.close() ++ proc.join() ++ ++ self.assertTrue(res_as_user[0]) ++ as_user_error = res_as_user[1] ++ ++ if not plain_error and not as_user_error: ++ return ++ if plain_error and as_user_error: ++ # extract the GDBus error name (e.g. 'org.freedesktop.UDisks2.Error.NotAuthorizedCanObtain') ++ dbus_err_re = re.compile(r'GDBus\.Error:([\w.]+):') ++ plain_match = dbus_err_re.search(plain_error) ++ as_user_match = dbus_err_re.search(as_user_error) ++ plain_err_name = plain_match.group(1) if plain_match else plain_error ++ as_user_err_name = as_user_match.group(1) if as_user_match else as_user_error ++ self.assertEqual(plain_err_name, as_user_err_name, ++ 'as-user= produced a different error than plain mount: ' ++ 'plain=%s, as-user=%s' % (plain_error, as_user_error)) ++ return ++ ++ if plain_error: ++ self.fail('Plain mount failed (%s) but as-user= succeeded' % plain_error) ++ else: ++ self.fail('Plain mount succeeded but as-user= failed: %s' % as_user_error) ++ + @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) + def test_mount_as_user(self): + """ Test mounting a filesystem on behalf of a different user.""" +@@ -1550,6 +1720,108 @@ class NonPOSIXTestCase(UdisksFSTestCase): + self.fail(res[1]) + + ++ def _test_mount_fstab_as_user_denied(self, fstab_options, target_user): ++ """ Test that an unprivileged user cannot use 'as-user' option to mount ++ a device listed in /etc/fstab with @fstab_options on behalf of ++ @target_user without polkit authorization. ++ """ ++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0])) ++ self.assertIsNotNone(disk) ++ ++ self.addCleanup(self._remove_user, self.username) ++ uid, gid = self._add_user(self.username) ++ ++ if target_user != 'root': ++ self.addCleanup(self._remove_user, target_user) ++ self._add_user(target_user) ++ ++ self.addCleanup(self.try_unmount, self.vdevs[0]) ++ self._prepare_mount_test(disk, True, fstab_options) ++ ++ parent_conn, child_conn = Pipe() ++ proc = Process(target=self._mount_with_as_user_fail, ++ args=(child_conn, int(uid), int(gid), self.vdevs[0], target_user)) ++ proc.start() ++ res = parent_conn.recv() ++ parent_conn.close() ++ proc.join() ++ ++ if not res[0]: ++ self.fail(res[1]) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_as_user_denied(self): ++ """ Test that user cannot use as-user to mount fstab 'users' device ++ on behalf of another user without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('users', self.target_username) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_user_as_user_denied(self): ++ """ Test that user cannot use as-user to mount fstab 'user' device ++ on behalf of another user without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('user', self.target_username) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_x_udisks_auth_as_user_denied(self): ++ """ Test that user cannot use as-user to mount fstab 'x-udisks-auth' ++ device on behalf of another user without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('x-udisks-auth', self.target_username) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_as_root_denied(self): ++ """ Test that user cannot use as-user=root to mount fstab 'users' ++ device without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('users', 'root') ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_user_as_root_denied(self): ++ """ Test that user cannot use as-user=root to mount fstab 'user' ++ device without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('user', 'root') ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_x_udisks_auth_as_root_denied(self): ++ """ Test that user cannot use as-user=root to mount fstab ++ 'x-udisks-auth' device without authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('x-udisks-auth', 'root') ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_defaults_as_user_from_root(self): ++ """ Test that root can mount a device listed in /etc/fstab with ++ 'defaults' (no 'user', 'users' or 'x-udisks-auth' options) ++ using the 'as-user' option targeting a non-root user. ++ """ ++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0])) ++ self.assertIsNotNone(disk) ++ ++ self.addCleanup(self._remove_user, self.target_username) ++ self._add_user(self.target_username) ++ ++ self.addCleanup(self.try_unmount, self.vdevs[0]) ++ self._prepare_mount_test(disk, True, 'defaults') ++ ++ d = dbus.Dictionary(signature='sv') ++ d['as-user'] = self.target_username ++ mnt_path = disk.Mount(d, dbus_interface=self.iface_prefix + '.Filesystem') ++ self.assertIsNotNone(mnt_path) ++ self.assertTrue(os.path.ismount(mnt_path)) ++ ++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE) ++ def test_mount_fstab_defaults_as_user_denied(self): ++ """ Test that an unprivileged user cannot use 'as-user' option to ++ mount a device listed in /etc/fstab with 'defaults' (no 'user', ++ 'users' or 'x-udisks-auth') on behalf of another user without ++ polkit authorization. ++ """ ++ self._test_mount_fstab_as_user_denied('defaults', self.target_username) ++ ++ + class VFATTestCase(NonPOSIXTestCase): + _fs_signature = 'vfat' + _can_mount = True +@@ -1691,6 +1963,12 @@ class UDFTestCase(UdisksFSTestCase): + def test_mount_fstab_complex_label_bad(self): + super(UDFTestCase, self).test_mount_fstab_complex_label_bad() + ++ def test_mount_as_user_denied(self): ++ self.skipTest('Skipping as-user authorization test for UDF') ++ ++ def test_mount_as_user_root_denied(self): ++ self.skipTest('Skipping as-user authorization test for UDF') ++ + + class FailsystemTestCase(UdisksFSTestCase): + # test that not supported operations fail 'nicely' diff --git a/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb b/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb index d4c5385ae0..776b5c5043 100644 --- a/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb +++ b/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb @@ -18,8 +18,13 @@ DEPENDS += "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)}" RDEPENDS:${PN} = "acl" SRC_URI = " \ - git://github.com/storaged-project/udisks.git;branch=2.10.x-branch;protocol=https \ - file://0001-Makefile.am-Dont-include-buildpath.patch \ + git://github.com/storaged-project/udisks.git;branch=2.10.x-branch;protocol=https \ + file://0001-Makefile.am-Dont-include-buildpath.patch \ + file://CVE-2026-7867-1.patch \ + file://CVE-2026-7867-2.patch \ + file://CVE-2026-7867-3.patch \ + file://CVE-2026-7867-4.patch \ + file://CVE-2026-7867-5.patch \ " SRCREV = "bc623acf9e7488dc105e4b00069d57e303e2616b" From patchwork Wed Oct 28 04:23:01 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102169 Received: from mail-pj1-f46.google.com (mail-pj1-f46.google.com [209.85.216.46]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36191.1793161455612621385 for ; Tue, 27 Oct 2026 21:24:15 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=ZSPpezw4; spf=pass (domain: gmail.com, ip: 209.85.216.46, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f46.google.com with SMTP id 98e67ed59e1d1-3aded3c6103so291382a91.0 for ; Tue, 27 Oct 2026 21:24:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161455; x=1793766255; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=SFKa95pacYmxD4fyvvH7JpYlJS5wAUEwj2Ix4xN8Gm0=; b=ZSPpezw48yyDIJgQGZbreddPQPJoVVrddhXPrQ68O2nPoBx/M0tCnsSdNOOgHnJ971 UwTTjLQdq41hBalGGEJP9mNi71EVMSPq53Ljk/I9onDftwi0cJ/W3S//hTzJVI6S06D6 r+7Ap2rK5tmEjS1rvvTZTIHkNeGnns74kjmLnrs7bn3ufrguWRy3n504SRhx9SY4diYZ 7dPOEVjvpMPXOnvUIdGAoj8gg/3s6/XmWhTTBamdtrTviAP74SfhOYgPiFilikPwxy9e +u+28rs831NEggmFcnaJm3U9+RS9opXI51B7JeUwHn+bFIDbNte4xrOnVYP3T0G9TBkt mLUg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161455; x=1793766255; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=SFKa95pacYmxD4fyvvH7JpYlJS5wAUEwj2Ix4xN8Gm0=; b=vS3rSwf6tGlVI12IvN5qGcuawpFMG9zSBwuu8WIVAJzgGuK90N3TpIzhguK1igThlk +4akGzjxV4gi3r+WGTh1aqSjmEg7S4V7hx5DI1fb6smPslvBq17G1qivzhwOOkqERlXY 1UNvY5Y7v1GJJe+Wsd0TqbFrJ2WTbdd+AHaiGaeqqtSCUbU3oS6xXhsO5TM60+jo93/V m0+Zyq4bPF4j1Ggvvnk+3raXb9acAlBQzn81nCGIfM6aT7m3jzgWsdJ91hSvsTWCbgEc u/NymR/IsnU9N5C04ywLoZxIqM92XT6OSacvQ8JYObiIbTssW4jh9fIbH7dRqLDJ37Px t/EQ== X-Gm-Message-State: AFq9FYJvnMI37riP7P+UlHq1hQXgsgpOVtdIlbzQJV2FKQis+H4nRFiz MHSK6LDu0yLK+kDgYLYKrT//9DfcAvOjLerZHs2pX3YGYdXGPctpz6yc5/84Tw== X-Gm-Gg: AYBFou0YqMlPL8tRK2eiFPahoNwYtUSeG5CfWHVOrdqI5l8TyenflgBnY6OI/l/gR7W eAtF6u7dj1YxgiCzUWw4z0ZuBq0iBMJIMiiXEE2z5KsYBsOGDJmpuRrAJyOTffm9Kvp31eHvr+3 OYe3chdeLJK46BWgIz4JIQ1ZoUuVXqY9ZJtNvEj+q+Bke/JgA8XsF1SEG/RWNg0vN+igjR3g2XG ryorLY2+J4SCIogGWLV0F1+hGgsb2s8MhTIHyFrjlPhNkeNCcAWQ75GFrZDNDZy+p5aMX0ZY8vg T6eqHTDP5R1qiJe09ms9R3StCEP1+DOJY6MbPPYnlvKkd0vaEpkMcM0xHVqfElLZb+ii8qj7wRz l3zi1VPy/Ypoufpny2E/9AqndWU1JcZUsIfBXJqmDSqfvtQvfGMWIt30H/B1TjGu9IQ52fiPkC0 jSw91BoCyC26V0b3RsAGoiiStqjSXNJTNsv3syXT2IBVaSECVzyE5yjFipNWgF/Iiq0F/gW2Rrs dK9VBgW4PZXs6vgH2bO5scd/n4gXsC/pntQb7UrH+Dj+fAHpiClsECovqG5gQ6H1LwCbGKrI8RE OnQPS40gdMn3cC5DnigpvRLbYhUMExIhCjXk5zfFXEGgyiORzbXTqfEyk8Q3Nw== X-Received: by 2002:a17:90b:4ac7:b0:3ac:403d:6239 with SMTP id 98e67ed59e1d1-3ae58161237mr785572a91.43.1793161454853; Tue, 27 Oct 2026 21:24:14 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.12 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:14 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 03/60] tmate: patch CVE-2026-4751 Date: Wed, 28 Oct 2026 17:23:01 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131555 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-4751 Signed-off-by: Ankur Tyagi --- .../tmate/files/CVE-2026-4751.patch | 75 +++++++++++++++++++ meta-oe/recipes-extended/tmate/tmate_2.4.0.bb | 1 + 2 files changed, 76 insertions(+) create mode 100644 meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch diff --git a/meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch b/meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch new file mode 100644 index 0000000000..faf3d2a3ae --- /dev/null +++ b/meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch @@ -0,0 +1,75 @@ +From 27f07d414949259f17aebc02a61f103629d547f1 Mon Sep 17 00:00:00 2001 +From: npt-1707 +Date: Tue, 10 Mar 2026 00:19:33 +0800 +Subject: [PATCH] Fix CVE-2018-19387 + +(cherry picked from commit 3e12f558c7b71b7135403cdd2df77d38538a695c) + +CVE: CVE-2026-4751 +Upstream-Status: Backport [https://github.com/tmate-io/tmate/commit/3e12f558c7b71b7135403cdd2df77d38538a695c] +Signed-off-by: Ankur Tyagi +--- + format.c | 2 ++ + input.c | 2 ++ + server-client.c | 6 ++++++ + window.c | 2 ++ + 4 files changed, 12 insertions(+) + +diff --git a/format.c b/format.c +index f771c85f..3bbb8cf1 100644 +--- a/format.c ++++ b/format.c +@@ -468,6 +468,8 @@ format_cb_pane_tabs(struct format_tree *ft, struct format_entry *fe) + return; + + buffer = evbuffer_new(); ++ if (buffer == NULL) ++ fatalx("out of memory"); + for (i = 0; i < wp->base.grid->sx; i++) { + if (!bit_test(wp->base.tabs, i)) + continue; +diff --git a/input.c b/input.c +index 18c8eb9a..8a66d89e 100644 +--- a/input.c ++++ b/input.c +@@ -766,6 +766,8 @@ input_init(struct window_pane *wp) + ictx->input_buf = xmalloc(INPUT_BUF_START); + + ictx->since_ground = evbuffer_new(); ++ if (ictx->since_ground == NULL) ++ fatalx("out of memory"); + + input_reset(wp, 0); + } +diff --git a/server-client.c b/server-client.c +index 21cccc85..e8614d40 100644 +--- a/server-client.c ++++ b/server-client.c +@@ -121,8 +121,14 @@ server_client_create(int fd) + c->cmdq->client_exit = 1; + + c->stdin_data = evbuffer_new(); ++ if (c->stdin_data == NULL) ++ fatalx("out of memory"); + c->stdout_data = evbuffer_new(); ++ if (c->stdout_data == NULL) ++ fatalx("out of memory"); + c->stderr_data = evbuffer_new(); ++ if (c->stderr_data == NULL) ++ fatalx("out of memory"); + + c->tty.fd = -1; + c->title = NULL; +diff --git a/window.c b/window.c +index 45ec7790..9d95bb77 100644 +--- a/window.c ++++ b/window.c +@@ -945,6 +945,8 @@ window_pane_spawn(struct window_pane *wp, int argc, char **argv, + + wp->event = bufferevent_new(wp->fd, window_pane_read_callback, NULL, + window_pane_error_callback, wp); ++ if (wp->event == NULL) ++ fatalx("out of memory"); + + bufferevent_setwatermark(wp->event, EV_READ, 0, READ_SIZE); + bufferevent_enable(wp->event, EV_READ|EV_WRITE); diff --git a/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb b/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb index 5fb28b0085..9027826ea6 100644 --- a/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb +++ b/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb @@ -8,6 +8,7 @@ DEPENDS:append = " libevent libssh msgpack-c ncurses" SRC_URI = "\ git://github.com/tmate-io/tmate.git;protocol=https;branch=master \ file://0001-fix-finding-msgpack.patch \ + file://CVE-2026-4751.patch \ " SRCREV = "5e00bfa5e137e76c81888727712ced2b3fd99f5b" From patchwork Wed Oct 28 04:23:02 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102171 Received: from mail-pf1-f173.google.com (mail-pf1-f173.google.com [209.85.210.173]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36192.1793161457762260591 for ; Tue, 27 Oct 2026 21:24:17 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=ibvccwaS; spf=pass (domain: gmail.com, ip: 209.85.210.173, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f173.google.com with SMTP id d2e1a72fcca58-8a06b436dffso269041b3a.3 for ; Tue, 27 Oct 2026 21:24:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161457; x=1793766257; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=OlkOVDlMpahwpojKxINx/myU6vsCVLw5aqsNGwAyzhA=; b=ibvccwaSgyDZrlTzrAgBZ7q/L3URl3fVKLeeve8s+a71SvO4iXtWUesa5AwvZpzKFI AgX5jWf9uP+yTdA/LRlLE8ezhUiOqUa0Ct/R04eWlpxLb61q+e5CMgDp7+72v118HiHc UumHmKR2KBnfN4azwy1RnNmUDqLXimcSYa8jIGLg1UG6azRO0uPMaqzQsw7qgyeYhAkw XAt+qJ20b6b4u3z9tZcarCQEU8gUpp9GpxjhS4YlJ69IcRPTO00hJZUTM+7r9l/CeJzO s/NLMHcWlos0+kW0lRXa3nXE0PpaQs4n70hAYsix/ebRzwQ3nMpwVmUCcfT1FvQ49lQ9 SRmA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161457; x=1793766257; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=OlkOVDlMpahwpojKxINx/myU6vsCVLw5aqsNGwAyzhA=; b=DozGrL1vMHJns6DLZ8QJwqHspLaxS/H91jLZz0N6NgEaIxaMbDo1CSSvHxWj2czcbQ t4lz0Zv1+82AaVfgabnGolSAe4mJfJlxZtm5d4aQL7W1xyP6OTBF8rv+zhvoGbPEBxj7 MddxUWswjSKP4RdNYiwDG1v8qAa/E2J53bGyG9qsCkcpC1+oyOOGTsm5ldnw2+RUAwdV 1p+Lqe87YSJKyFbD5eoOf3ITfDakMlsYEoTX66xoCgcZuE97tvBu4i/+CxJA0LHriNtN h79kKKSsaPLJXFisSkMAjAR97tey3tCIkxKrrbxVOHoCURsr/88lATSfnekNpf2WaMUW yGDg== X-Gm-Message-State: AFq9FYKEZn+/XH75ELPGJDCWZy+wKIUoJiy4SOBlG7Q+TGopA3WSflC3 pUHTRKlJsjgiBFq4VKW5qTaQPNxL/cfY2n6jAq8eQEAAuCgq5kFv2e8aNDZDBw== X-Gm-Gg: AYBFou34+YFUnk0R8flz1TfxlCainelGt4YxBK8rumhvyPQ0JSJc4KKDmInm6ha7oNO zKoR+4k5BwihulOw5ROJr53wyQ22d4d34Xsqka+H9iisg3a48XhLcBnmWoK8Jo5vqZP2IzmohI2 VImxwzIoW9GguoCqlLKW8ym8RwwamIhnmoyGasPxeOIHML+ywG5aek/Ni0wbZgnq+mJMmkwSEJP Mo4Ybly7Dso6JRkvABqUb6Fw1IvHKhEu0CFyfyn2R3wNQxeFMF58Tf0nHdXqnhfNiKNN3cB6cdz j0mwtZZ/ZZl2xopifiGFM4bZv8b9vDniQucRs19phdOSQn8EMh5HEdxvoDYgVMcQpB7kR3cw9YV 2LLZTZYuRxcW+7ypNjSGdHcimxpw1uve6usuMkEDvoSQtG7qSnb8uBLyrf60GOQh/o1+t36SSOt dKYfytZzmyVZO1VtwqQTfakKnpiRzV7Trc4THBeQ8snWp1Epg3Sm1Rig9XxHncRHFOYxImceXiT 2FzmltJ9ZGA7/Y6yS9KmT5+TE+QgKsg7rRonzOU5VDe2vGNoN4RKXre2M3rxdphgHzVTDRJt2w0 vNgdFw7l215uP3XNRqxvffPgRfAasmJjLzsa4cKbdOutS0RWRa8asUAv9o6mtw== X-Received: by 2002:a17:90b:3c83:b0:3ad:d29c:5e64 with SMTP id 98e67ed59e1d1-3ae58324cc3mr805719a91.65.1793161457068; Tue, 27 Oct 2026 21:24:17 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.15 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:16 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 04/60] tinyproxy: patch CVE-2026-54388 Date: Wed, 28 Oct 2026 17:23:02 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:24 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131556 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-54388 Signed-off-by: Ankur Tyagi --- .../tinyproxy/tinyproxy/CVE-2026-54388.patch | 32 +++++++++++++++++++ .../tinyproxy/tinyproxy_1.11.3.bb | 1 + 2 files changed, 33 insertions(+) create mode 100644 meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch diff --git a/meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch b/meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch new file mode 100644 index 0000000000..4dc7f88310 --- /dev/null +++ b/meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch @@ -0,0 +1,32 @@ +From 2639058707dd9d199196b167823ba1865a60ea08 Mon Sep 17 00:00:00 2001 +From: rofl0r +Date: Thu, 7 May 2026 16:39:48 +0000 +Subject: [PATCH] reqs: prevent multiple content-lengths getting emitted + +addressing point 2 of #609 + +(cherry picked from commit 364cdb67e0ea00a8e4a7037e2693e0711e816adb) + +CVE: CVE-2026-54388 +Upstream-Status: Backport [https://github.com/tinyproxy/tinyproxy/commit/364cdb67e0ea00a8e4a7037e2693e0711e816adb] +Signed-off-by: Ankur Tyagi +--- + src/reqs.c | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/src/reqs.c b/src/reqs.c +index d5037cf..117d755 100644 +--- a/src/reqs.c ++++ b/src/reqs.c +@@ -681,6 +681,11 @@ add_header_to_connection (pseudomap *hashofheaders, char *header, size_t len) + /* Calculate the new length of just the data */ + len -= sep - header - 1; + ++ /* prevent multiple content-length headers from being inserted */ ++ if (!strcasecmp(header, "content-length") && ++ pseudomap_find (hashofheaders, "content-length")) ++ return 0; ++ + return pseudomap_append (hashofheaders, header, sep); + } + diff --git a/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb b/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb index 25df44301b..46d3a4d7c6 100644 --- a/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb +++ b/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb @@ -12,6 +12,7 @@ SRC_URI = "https://github.com/${BPN}/${BPN}/releases/download/${PV}/${BP}.tar.gz file://CVE-2026-31842.patch \ file://CVE-2026-54387.patch \ file://CVE-2026-55202.patch \ + file://CVE-2026-54388.patch \ " SRC_URI[sha256sum] = "9bcf46db1a2375ff3e3d27a41982f1efec4706cce8899ff9f33323a8218f7592" From patchwork Wed Oct 28 04:23:03 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102172 Received: from mail-pg1-f182.google.com (mail-pg1-f182.google.com [209.85.215.182]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36193.1793161459895092371 for ; Tue, 27 Oct 2026 21:24:19 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=ZtrFRsq0; spf=pass (domain: gmail.com, ip: 209.85.215.182, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f182.google.com with SMTP id 41be03b00d2f7-cd61cef87f1so266434a12.0 for ; Tue, 27 Oct 2026 21:24:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161459; x=1793766259; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=Gh83cfskHLvKV1uwY+k6XSG1tepLn+dpLgGtGNQHReE=; b=ZtrFRsq023rNRVbBd/9Gnj3RqsIm6ddVwkMopTAcdWvJVxFEfNF2lz07ZYO011Ms9j sWEwNqMS34Uav+6sSktaRkQUhbvrmHhYCHxsnD3FfHplq5WHoFuJh/FUBStVJiv/6LlR 1Y6xhTLTZ4Fx7dfS/Vw/+85xLviqg5UzV35jsG4YEXqBDQSM/+NcMFcEYURlSKyfm1Ix RDjnh1IBgxv2IW9wohA0hUEagpLtFbGbri8W3vKDx637v5q6vC7cuIR6ZrJLYdcE7L9H 9E9wT6SY7GKHxsff87LBqelDotYCKJBPnufjGZDw1vAO2GuVjNFqptzf9j/qo6NJue9f 3N6w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161459; x=1793766259; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=Gh83cfskHLvKV1uwY+k6XSG1tepLn+dpLgGtGNQHReE=; b=mLQbDOFbxkky3IpUQttUSo+GQUpi1s7U21P4EaQTdFeDG6qk+feeRRgcfB+NresUN0 8EuWcm9iYygx07RJuS7FtM1GncPbPwlH9WeHiv82RhzjhCvz0WRshm6u8ce5vs+U2MNB OXMKnaXcl7+j/w1euJChydVcmRq1unWGHLGrdBpUznN+s91hkWiu+HxrTBHnjSLay2Fo 17B0r2RBhimIdM+x5bqKwMIeMTKmzojUb+GsrusDizwIVBnL49pf0DnCIp954BkAUm73 kGOooNwM8xXn6jRAVr+CtFCuySgzbuqLqae/I57iHnYAVmYJ3VJpSqSMrj3cglhyKWni z33w== X-Gm-Message-State: AFq9FYLz8tpYEY69kK7+7oiW3djUuqb5CkuPip29IxfYqQEPLkTTa3OQ fSsE8OXLCSnsbFfoTguUYq3aFPUxY7YT3VLnw6HFzlbeTh9M8rwy5QXEM6yYmQ== X-Gm-Gg: AYBFou1He1PazonZHT7Pwxtn25YyigbOVN5/BC+J6wlfGTuOLqz8w6pm7XVwztvIXrr h4R+/ZtNlRVYw+yNB5N7y8fUOCrAsY3F7T4FEvIbESQ0VJS9wtZ2K7fpevwsQXslSytONoR5qow cC4mgiDZ/AUsGKIq1BPQPzDAMlmKnjdFYGGI/hftdhEp2zg/ohwabjsoj0Ex27sCeLKFHg/tenE zUSREDGOpWVs8e0wMZjOHs2e4OfFK67vKnOyAzUAjQiblM6YMGdR+aWd7EgZgyvjB7P6fQzBkSE yINoweHPrUulePGd4sjjAnveoAEIi898pLUuqBTQ9NH9oO0uUZr8G/+H6lzt0LX1M1P1KlHNoWw y4LPPkgkIjLG6+Nz/EtFun+Yk0N4GjqhbCLu63KIilHEIXDmMm0BRZ2fp9ri7SQlnTvKSZSZhG7 JhU7NPHUELjIfh/ZuH9bpd4nBRMtcRXI6GEsYz1TARra1Gg4OWB5FQA8BmvT1DgrZppKBD00kqf IQehXU9PP+xybvOOlku+1XbS4nkduSa4eV0fFxre5TktikXguzFzp8TCrFCUs/wTK/WDonJkIas PpDd7EbqhaoaYVv6uJOtNnYE5SuVrRqiNkhZI05MmVQt6tFq5XHswIuC4y5P2A== X-Received: by 2002:a17:90b:4cc9:b0:3ac:2788:cab1 with SMTP id 98e67ed59e1d1-3ae581014b6mr821954a91.30.1793161459195; Tue, 27 Oct 2026 21:24:19 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.17 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:18 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 05/60] flatpak: upgrade 1.18.0 -> 1.18.4 Date: Wed, 28 Oct 2026 17:23:03 +1300 Message-ID: <79d9892d598e67277c02ff563339d36dff91a443.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:24 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131557 From: Ankur Tyagi Changelog: https://github.com/flatpak/flatpak/blob/1.18.4/NEWS Signed-off-by: Ankur Tyagi --- .../flatpak/{flatpak_1.18.0.bb => flatpak_1.18.4.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-oe/recipes-extended/flatpak/{flatpak_1.18.0.bb => flatpak_1.18.4.bb} (94%) diff --git a/meta-oe/recipes-extended/flatpak/flatpak_1.18.0.bb b/meta-oe/recipes-extended/flatpak/flatpak_1.18.4.bb similarity index 94% rename from meta-oe/recipes-extended/flatpak/flatpak_1.18.0.bb rename to meta-oe/recipes-extended/flatpak/flatpak_1.18.4.bb index 879455f63c..74bfb89e62 100644 --- a/meta-oe/recipes-extended/flatpak/flatpak_1.18.0.bb +++ b/meta-oe/recipes-extended/flatpak/flatpak_1.18.4.bb @@ -4,11 +4,11 @@ LICENSE = "LGPL-2.1-only" LIC_FILES_CHKSUM = "file://COPYING;md5=4fbd65380cdd255951079008b364516c" SRC_URI = " \ - git://github.com/flatpak/flatpak;protocol=https;branch=main;tag=${PV} \ + git://github.com/flatpak/flatpak;protocol=https;branch=flatpak-1.18.x;tag=${PV} \ file://0001-flatpak-pc-add-pc_sysrootdir.patch \ " -SRCREV = "5de2b58bdafde88515d9d6b9189bd1cfd3b88c46" +SRCREV = "a02d0ba48abe9aacc377de15699e5d8c024b5669" inherit meson pkgconfig gettext systemd gtk-doc gobject-introspection python3native mime features_check useradd From patchwork Wed Oct 28 04:23:04 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102170 Received: from mail-pg1-f170.google.com (mail-pg1-f170.google.com [209.85.215.170]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36041.1793161461952775222 for ; Tue, 27 Oct 2026 21:24:22 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=jBJWwukb; spf=pass (domain: gmail.com, ip: 209.85.215.170, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f170.google.com with SMTP id 41be03b00d2f7-ca766c1c9ccso241630a12.0 for ; Tue, 27 Oct 2026 21:24:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161461; x=1793766261; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=DLI0VP/Jt3BBslil/tHzmXSVaQanww03QlU4UwGU1P8=; b=jBJWwukby7n2Bq15k9MrK/UaI2eQCvjg0X1faGKKtLiFeybUFJcpWwtPmIkyQlrguw Qc9RggQQtgHFp0i4rkCRyRv2CrrOcEGJenzNW35yijeSOcICDXXhaDqflyCkuFBPqcyT I3Y8t7Ia+z/YvJY/MblWow0i+AhlmFParQ8F4tydKcLO/sSYwfVe7nhfWM3g+dToUO+1 iPQcakg7BHh7Zk+3dJBw6lCgsUTn6PIJTm0Tp5hyUWEDHzT1WM4aVv4NCkve8vuIQfpN lz353J2GW5m7IaXaSV3/q8yvEWjiFwEDDKzFx3ANzACiOoHWGF+mh0X+9jCNmBEZTDEt KkJA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161461; x=1793766261; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=DLI0VP/Jt3BBslil/tHzmXSVaQanww03QlU4UwGU1P8=; b=Sy5NSAepN6y1qZhE1K+hjFLdoDcV3vh5i/0C4aCOPC6RqIsFFyXqirZmUu+DklujGZ ZT+qwE7m9dW8O4HXnzZB+DaeQunYH6z+w2dT68BHXS9249iFO3899KvNFfnN4W+Kwrmb HjbzsOQj+5WeR6SxBL2cVlDddF5QfW/6stFvZ7BP3Bl7kH4bSbrlXdtiMCjoRDwKMq+K qe6EBV+LbM5pgs+0HM0k6gaePGrhSpofcaWzd3TctahY5Dt4PWs+98SKH/D7KjF17Klj OBkCk8rzcB5Me45uGT0mDR9XcNiOfMuz+fbAywRzblnzMgCZg0JxLIjgT49fSlv4QabY tElQ== X-Gm-Message-State: AFq9FYJVOzaKPHr/6ryaADZL06vQgzC4zudFYnS0mA1UhyCgmdHX6jA3 2o0/dKhCVAWdZ0XQqY4Iai+jX0mUtknrpNu+6yoHBoIAT/qYjqjEFNIYhgTWPQ== X-Gm-Gg: AYBFou3Ifm97xAVEz2Fx0+mlNOdwBlJy4+hVKLHYV+hnrAYFtgakmYpK8DU+iDPQuof ERjaqx0utGNbar+f/g2hQtDAohpmu0HfxHHwNbRJOy9eD7yFO9zlZeqyEmkGp4DVcxXGxNefnIT S+MPtEOUxMK+OFFC2/7n3winJlggSVjvxuZ2oILzJWuP6Yen7fKnEuzCW0dRcVBxgnaoTN6aoru +yfWiUZbMYzfTMwS3D2mGfrBok7BqQRRQBFAwtkxyQ4h+9cp345JYhX+Ut8sEeAO45KEGk5hiQZ kvYzRkBozSY5XXKRhVsOJOKYyw/feHw/W1h3ChHB5vpzlKIoeULtUlECFFUKfd8Zx5p2HPi3yFu fYcpwB87wC5cw3tNSxOc4CGHxvEDhXwImPoOPYn1SuziPaR4ZMOKku0D+a07/i5BvcQ+fobX/SM HQhkM9B9zRbxkiv4OKuwyhSUAZegGcehNWhWIRzluX/jrgTIPMAjvMCy1zHWCtH8OlAlagW4zz9 3BWplDUbPRG48fWbTSyN0FfQFGgE0shpyoQy54Yt1Osn0wkhedhpgdoiKHETB5rj8kyoVQ9CMc7 LYVHa92NNvRKW2SmQndmsvi+GLI+J3S4gbMNDhoqaggArTWV2qxbU5KQoXqHpA== X-Received: by 2002:a17:90b:224f:b0:3ac:a7ee:6760 with SMTP id 98e67ed59e1d1-3ae57f637d9mr795339a91.23.1793161461274; Tue, 27 Oct 2026 21:24:21 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.19 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:20 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 06/60] xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9 Date: Wed, 28 Oct 2026 17:23:04 +1300 Message-ID: <991d0967810dc1dc6bb903f875264a3b744f69ba.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131558 From: Ankur Tyagi Changelog: https://github.com/flatpak/xdg-dbus-proxy/blob/0.1.9/NEWS Signed-off-by: Ankur Tyagi --- .../{xdg-dbus-proxy_0.1.7.bb => xdg-dbus-proxy_0.1.9.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-support/xdg-dbus-proxy/{xdg-dbus-proxy_0.1.7.bb => xdg-dbus-proxy_0.1.9.bb} (93%) diff --git a/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb b/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.9.bb similarity index 93% rename from meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb rename to meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.9.bb index eb21f701d6..1a65874155 100644 --- a/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb +++ b/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.9.bb @@ -16,7 +16,7 @@ SRC_URI = " \ file://run-ptest \ " -SRCREV = "6a170fa77e3cbecb48f9dd2478fe5c0a119eb467" +SRCREV = "72b40c8f6d9d585cfbdb249690724f740d207087" CVE_STATUS[CVE-2026-34080] = "fixed-version: fixed in 0.1.7" From patchwork Wed Oct 28 04:23:05 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102173 Received: from mail-pg1-f179.google.com (mail-pg1-f179.google.com [209.85.215.179]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36042.1793161464255632781 for ; Tue, 27 Oct 2026 21:24:24 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=oVdTItXv; spf=pass (domain: gmail.com, ip: 209.85.215.179, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f179.google.com with SMTP id 41be03b00d2f7-cd623dfe420so441259a12.0 for ; Tue, 27 Oct 2026 21:24:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161464; x=1793766264; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=VTjVlb+otFRnQCorDsRBLqqwQiAElB9jBQmGoR879kA=; b=oVdTItXvUIYyCa/y1TBATW81oP+6+znpgAmYlO8m9ExlLBVeKSa77wIHuBjPKUo7Ei kP0bAUCt3RCmXvbiqCaTkoKgumbYogqB01fShb9j1dg+phC7Zb8BAe8QvULQAu9SpNLf HVcqF3xCmpLPURb0R3l0+tQqyfiE4Qaw/RxmuMdkRdX+oroLJnVd7ZbAnMSkPIlgPBDS 5ndOqPN8AujfFyVLZt1WMTnEyp+6BvRT6qwUTfEL84MnTFUICFvCGjh/Kf7vK8fnkUYF wj1C3vsuBczFpTLFl8ETzs3QeTPCfl2/9kdDcngNYLTmviULsmluEHGjLSrec2z4d9R/ P74A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161464; x=1793766264; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=VTjVlb+otFRnQCorDsRBLqqwQiAElB9jBQmGoR879kA=; b=0T6urxi4Ro6i8eqrDmlUYvj3xSL1MNq2r73AtNB/t1SNgm+IM48Z2oSg2BOkVRITLX b3ZIkzmEAYnjf61GaZvPopjZg71hoDevC65S0HAHlBmTy1oHHWZOayA5Bl2Or/r2i1I+ KrZHBijElDU04SzoCoWQr4ptcq9XPCcfoMrYlb/stN9cZNO4jdjmiwUDXfziLE1sgR/6 HmLlrZt/jIUnqDdmQGHakgQ0xnbLyxm4JXpvNyyX28FAzDu/MVD3OXgOO9O9ffBIlLr9 IMvZiikoPKhGMA1tzkqyZGm6lmpYo7aFYSS6oGKjW6rcaUV+jM816tQRO72lpCXMKK/v vlFQ== X-Gm-Message-State: AFq9FYIJX/FNxLZW5Yu5Ab6WflH7UMR4oXULyvr9H/q9+OR5wViev54n r4wZdmySzz2PXZ5Ozeyb4+aDNmb6Me1XFKDfwZKY+OUY/yizOXpGFosdAJXKvg== X-Gm-Gg: AYBFou0z4J7y7BA8BMZ4EQO3Y9aBf/nxAnWS/4n6J4K1A43mn5pl1GPrwRir5ivfQZ2 /jr4d9HF1oONbHlSKISrGlYzBM4J7BAdyYiZGfkuTH+41NQ8S2NAHLR8ICvOV7UXqbctVPb7mHz 6NiB265gJJ9yNzWcKTRepN1PIuZLd5IkEdCeU7pPwz2bFrsS+1RtDXYPBJQUY+4ZdtYMHmt0dpW DsPrLGvqGGVzlvJ2QVKYol+lmyycf9/JQGJF+M8J6t5eDJNxTocDVhGhK6b00xbhRpjzHF0pd0A gYHX4GV649K6OPHekenbRA2Xe+htxRLP01aP8gW6e7Yzk/4GN8wFAJSpUSYnI6czELwl0GlxHop Z5WsQqUSKTQIEbAlrpwZtyIdPIc1zxLh83QB1f1GJvNGS/qIE0O1Lr02Cl5p6Slou0EAMpMHlsP PiHjH1LZO2bYKB0Kvy0LW0io7XTLezgJjpduiFarOHPEKNRszV/QwQBLZk0cdL/kmx/74qtzRsK Rpl8Kq4Nm/6YTaYUQ4oxQJSPFsgD5iYoL1MQ2X76SxIcIQ+Sy0JjFG48j9bHD+jOudhSyW08KWO pj0st8EssWJ/XfK1cHBRsGtVvVWcMZc2s711tdQCNdf4loCmw3h9hL0yn9LjDQ== X-Received: by 2002:a17:90a:d00f:b0:3a8:5d1f:59ad with SMTP id 98e67ed59e1d1-3ae580dd6c5mr935740a91.43.1793161463586; Tue, 27 Oct 2026 21:24:23 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.21 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:23 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 07/60] swagger-ui: upgrade 5.33.1 -> 5.33.2 Date: Wed, 28 Oct 2026 17:23:05 +1300 Message-ID: <492ba8a3afd93c6f5f24fbf0672bb1b1ab8a80e4.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131559 From: Ankur Tyagi Changelog: https://github.com/swagger-api/swagger-ui/releases/tag/v5.33.2 Signed-off-by: Ankur Tyagi --- .../swagger-ui/{swagger-ui_5.33.1.bb => swagger-ui_5.33.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.33.1.bb => swagger-ui_5.33.2.bb} (94%) diff --git a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.1.bb b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb similarity index 94% rename from meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.1.bb rename to meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb index db2bb498a8..aeee9e4da6 100644 --- a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.1.bb +++ b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb @@ -12,7 +12,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57" SRC_URI = "git://github.com/swagger-api/swagger-ui;branch=main;protocol=https;tag=v${PV}" -SRCREV = "cac3d136b5e37bfbe3288c8591f6f4fcf9870599" +SRCREV = "e89a91f13cdee432d97ca9d3d1ac1969ff797036" CVE_STATUS[CVE-2016-1000229] = "fixed-version: fixed since 2.2.1" From patchwork Wed Oct 28 04:23:06 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102174 Received: from mail-pg1-f179.google.com (mail-pg1-f179.google.com [209.85.215.179]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36043.1793161466498214035 for ; Tue, 27 Oct 2026 21:24:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=kUXYE+Mx; spf=pass (domain: gmail.com, ip: 209.85.215.179, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f179.google.com with SMTP id 41be03b00d2f7-cc4dbda1e5dso239472a12.2 for ; Tue, 27 Oct 2026 21:24:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161466; x=1793766266; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=n4x69lUCrVBQwJ4mdn2UdiHmcMV75dkXJrevM7XafYo=; b=kUXYE+Mx4rsGeBP1eB6ZmDDbwIT0u3D/E3w9gPKMZs60tsI/8Qrk6SRloZFk8aa+91 xB9qvDft69Bi5kAToippY/npZVGVEjgBJTYwlxnpyjeo6t7zE8w6i5uzynpucOGJxN6g UHXvuHmS/1zsYpJoeIt3cPq02p96gFYhZ6ddnvtSMjTpXptaRPY+/Fs/FJNG+2WQv9b4 degnV3JmZZEKv8hts3nOIwiihOjeea4K29kS5AfzAO+AXI3b/AePN+90uAjstQc6Pytl e5OUf6uFVoA6TtHp1W7Vmv019/PJAc+vKhe2+bdWQEf8lIYfI1VpqnTUuV/jEqVq6sSQ pgog== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161466; x=1793766266; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=n4x69lUCrVBQwJ4mdn2UdiHmcMV75dkXJrevM7XafYo=; b=mWsTfhJ4fR9gn/XvXgaFT5ZG7L3a3UpwX//3IfNkrrffxrFHprk34n37xAnNYEz6EF H08REspd/GMzDuPWAGe0jpTlDPocJ6g8MaKejbW6l9GNLbsttrmAe7jUFwMPla2d4jqG ihTPHVoGMl/nzLqoamGKBSpBYys/ByG30G5WycJvdb8M+BBKTqA358EvYEDL4/4QOMf7 +RGawu4457irF/uoCBhQkHMrgxEssNdidx3jHjiDMEAUnrykfwtfKfZ5bookchm4aN0r uC95SJu1D8lBP/X+9MIiAoFWKdW+9miV4rmG5EdTtf64glogKjNxmAATramH0Fz77BcI 9sXA== X-Gm-Message-State: AFq9FYKauxIgI12qfpoZcXBYssPjo3tQnL8Lo6AVIcUuE6w1z1yaKf2W ++MJxvA9a6XVdv0ZSRTYdhFrRc1ARKPBuYuZeCgkr2navUq8ZCK0kapPHSBf1Q== X-Gm-Gg: AYBFou32R3y9b61yzmXAcqBjzk48xzVdy9w9TlfsiENe4xwChUsQqzUUQ2+z3j3aRWo NxZcP7qn7/IQqGdkJjNuoVOvYXklEUd3EKC7GJaSn5KXKZaplqiyeJ9ZyMoRvnX2fptUs8C2EKn aHvflCwk8/uFzVMJTvKZ43BRpQuSqgfRvfw1vXCnsx2w8+dmWEVfdCaodIignh9lQRHv4NJZGPw ZMdfZmDOCFj60WNujBmLcx4+QKkVOO3L7UAeZ99DcdB0oLEtKlkDc9AVA1cwnAr+Rvb+ntEKMZR flY/e4DiF5tqZdtYRME6WzdfGFDBc1yr7W6lzBEqdhHX4eP6tlhIdPzOYaN5EPsuykT24zrQi+p 8Vt10ujFfQbY2X+VFJAB7BmFLBR/ZWf4IWL1wddcbc6/YGlW/pJXF4EJrdme/TLWESgix2rZqkq 0NaZhGBP1KSlgIVmEG05Y6TBciWYTu3Nxidwiy4WiBH2xBAbs59cU5gaOBdHvceUVgoZLhfg/ut cFGBSXcJiU/pIr/ZS0XJ8QkHQIaPxzbvnJiiCpoGZu1yzoPXXBc+ujzmXguGY6uTI3cKtNRux4f uWKorEI584X+mUrrisEth2nfVF4HXoYuGaikLowOedA/l5BTReeRvnoUwhj9cwOy7yWVdvVqzLI HCquT3bI= X-Received: by 2002:a17:90b:4a07:b0:3ac:a7ee:6761 with SMTP id 98e67ed59e1d1-3ae57f630aemr928439a91.21.1793161465826; Tue, 27 Oct 2026 21:24:25 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.24 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:25 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 08/60] freerdp3: upgrade 3.32.1 -> 3.32.2 Date: Wed, 28 Oct 2026 17:23:06 +1300 Message-ID: <63837fd4bd94dbaa035acf2bafbd6a5dbf7d5861.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131560 From: Ankur Tyagi Dropped patch that is part of the upstream version. Changelog: https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.2 Signed-off-by: Ankur Tyagi --- ...1-winpr-tools-link-only-winpr-public.patch | 76 ------------------- ...{freerdp3_3.32.1.bb => freerdp3_3.32.2.bb} | 3 +- 2 files changed, 1 insertion(+), 78 deletions(-) delete mode 100644 meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch rename meta-oe/recipes-support/freerdp/{freerdp3_3.32.1.bb => freerdp3_3.32.2.bb} (98%) diff --git a/meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch b/meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch deleted file mode 100644 index 2dea69c3c4..0000000000 --- a/meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch +++ /dev/null @@ -1,76 +0,0 @@ -From 6682e9ca667271b8ba148a301b4a2f9ac78be2b9 Mon Sep 17 00:00:00 2001 -From: Armin Novak -Date: Mon, 28 Sep 2026 11:57:22 +0200 -Subject: [PATCH] [winpr,tools] link only winpr public - -Upstream-Status: Backport [https://github.com/FreeRDP/FreeRDP/commit/6682e9ca667271b8ba148a301b4a2f9ac78be2b9] -Signed-off-by: Ankur Tyagi ---- - winpr/tools/CMakeLists.txt | 18 +++++++++++++----- - winpr/tools/makecert/CMakeLists.txt | 6 +++--- - 2 files changed, 16 insertions(+), 8 deletions(-) - -diff --git a/winpr/tools/CMakeLists.txt b/winpr/tools/CMakeLists.txt -index 5719c1c65..225b70744 100644 ---- a/winpr/tools/CMakeLists.txt -+++ b/winpr/tools/CMakeLists.txt -@@ -28,7 +28,8 @@ set(WINPR_TOOLS_API_VERSION "${WINPR_TOOLS_VERSION_MAJOR}") - - set(WINPR_TOOLS_DIR ${CMAKE_CURRENT_SOURCE_DIR}) - set(WINPR_TOOLS_SRCS "") --set(WINPR_TOOLS_LIBS "") -+set(WINPR_TOOLS_PUBLIC_LIBS "") -+set(WINPR_TOOLS_PRIVATE_LIBS "") - set(WINPR_TOOLS_INCLUDES "") - set(WINPR_TOOLS_DEFINITIONS "") - -@@ -64,11 +65,18 @@ macro(winpr_tools_include_directory_add) - endif() - endmacro() - --macro(winpr_tools_library_add) -+macro(winpr_tools_library_public_add) - foreach(_lib ${ARGN}) -- list(APPEND WINPR_TOOLS_LIBS "${_lib}") -+ list(APPEND WINPR_TOOLS_PUBLIC_LIBS "${_lib}") - endforeach() -- set(WINPR_TOOLS_LIBS ${WINPR_TOOLS_LIBS} PARENT_SCOPE) -+ set(WINPR_TOOLS_PUBLIC_LIBS ${WINPR_TOOLS_PUBLIC_LIBS} PARENT_SCOPE) -+endmacro() -+ -+macro(winpr_tools_library_private_add) -+ foreach(_lib ${ARGN}) -+ list(APPEND WINPR_TOOLS_PRIVATE_LIBS "${_lib}") -+ endforeach() -+ set(WINPR_TOOLS_PRIVATE_LIBS ${WINPR_TOOLS_PRIVATE_LIBS} PARENT_SCOPE) - endmacro() - - macro(winpr_tools_definition_add) -@@ -89,7 +97,7 @@ addtargetwithresourcefile(${MODULE_NAME} FALSE "${WINPR_VERSION}" WINPR_TOOLS_SR - - add_compile_definitions(${WINPR_DEFINITIONS}) - target_include_directories(${MODULE_NAME} INTERFACE $) --target_link_libraries(${MODULE_NAME} PUBLIC ${WINPR_TOOLS_LIBS}) -+target_link_libraries(${MODULE_NAME} PRIVATE ${WINPR_TOOLS_PRIVATE_LIBS} PUBLIC ${WINPR_TOOLS_PUBLIC_LIBS}) - - installwithrpath( - TARGETS -diff --git a/winpr/tools/makecert/CMakeLists.txt b/winpr/tools/makecert/CMakeLists.txt -index 37b831125..0af1fcc08 100644 ---- a/winpr/tools/makecert/CMakeLists.txt -+++ b/winpr/tools/makecert/CMakeLists.txt -@@ -31,11 +31,11 @@ endif() - winpr_tools_module_add(${${MODULE_PREFIX}_SRCS}) - - if(OPENSSL_FOUND) -- list(APPEND ${MODULE_PREFIX}_LIBS ${OPENSSL_LIBRARIES}) -+ winpr_tools_library_private_add(${OPENSSL_LIBRARIES}) - endif() - - if(MBEDTLS_FOUND) -- list(APPEND ${MODULE_PREFIX}_LIBS ${MBEDTLS_LIBRARIES}) -+ winpr_tools_library_private_add(${MBEDTLS_LIBRARIES}) - endif() - --winpr_tools_library_add(${${MODULE_PREFIX}_LIBS} winpr) -+winpr_tools_library_public_add(winpr) diff --git a/meta-oe/recipes-support/freerdp/freerdp3_3.32.1.bb b/meta-oe/recipes-support/freerdp/freerdp3_3.32.2.bb similarity index 98% rename from meta-oe/recipes-support/freerdp/freerdp3_3.32.1.bb rename to meta-oe/recipes-support/freerdp/freerdp3_3.32.2.bb index f43c8cc7d2..2a985522c0 100644 --- a/meta-oe/recipes-support/freerdp/freerdp3_3.32.1.bb +++ b/meta-oe/recipes-support/freerdp/freerdp3_3.32.2.bb @@ -8,9 +8,8 @@ RDEPENDS:${PN}-ptest += "cmake coreutils" inherit pkgconfig cmake ptest -SRCREV = "bf217a504e54cc719880c228e82353382cd7d4fa" +SRCREV = "97eff6ddfbbfaa8e42a126d362686bd001ff8bdc" SRC_URI = "git://github.com/FreeRDP/FreeRDP.git;nobranch=1;protocol=https;tag=${PV} \ - file://0001-winpr-tools-link-only-winpr-public.patch \ file://run-ptest" From patchwork Wed Oct 28 04:23:07 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102176 Received: from mail-pl1-f179.google.com (mail-pl1-f179.google.com [209.85.214.179]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36044.1793161468930462699 for ; Tue, 27 Oct 2026 21:24:28 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=Z/0UYNqV; spf=pass (domain: gmail.com, ip: 209.85.214.179, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pl1-f179.google.com with SMTP id d9443c01a7336-2e5378b281aso2488775ad.2 for ; Tue, 27 Oct 2026 21:24:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161468; x=1793766268; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=3uLxgzOj5PVjJcA9KrdjjodUQeMPLWlydBZ6fmvtUig=; b=Z/0UYNqV0FkHF1w21emthGFh+HpxPbnEcFn/8Wx0gNhAYR//XPwIWrZfllflquCuDN +7xEfBYgH7ZfZ3H/iP3I9uVA5RlqPUNhDzwoMpX85HKgqeURVaoAY0PpedEOyuOiHR/4 oOrzzBik6eTrZ6OrJS6aK9EaRkQthiKCSomqW/PtiNR5+VOLYcZweAWmFPfuGczVpYi4 fb1uQiFd0JaW3lBGbIDCGRGTPmMlF3nY/TOrhN5JySbMpNtQSg1dnuLFsUEDDwNLgLLQ 1g63VJClgzRxVaIsCQfQxSKAzdVZAg7TQ59sfs4yv2a0rBn14oGk+CS4g7rkmCrP7JHm faFA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161468; x=1793766268; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=3uLxgzOj5PVjJcA9KrdjjodUQeMPLWlydBZ6fmvtUig=; b=BnnTVbK4FBLC0W6EGE08S8Bk6NnpgmY24tWoZvdkdL3HsttW7Banh2jSKmWzfjSxVx 3eUc/qpYyX08LDu8dmITdI0i1+gsm1gqTvLtB0AThk5lCCpQJoJDqufA18uNQ4VQk75v lP+LcPC60d+6x1SG1LdWYoM16R+JvlgHFi1AxZof/cGlCsunAt3S/gjxoo/7Q8l1M2S6 tquQ6TN3JVX5CEIV33d/nG6mIcWXxJ4C9E+mYuspwK5MiyJQh/Mud/tdB/9ZoxemD7zE b4EMkoUFdEsjSFo/NPa9LIEvqnPJkypQa9i0qLyNduANDdJNhiRxADqwb/Xqbg9XEboG QswA== X-Gm-Message-State: AFq9FYIlRUT6z/YKc5Gg9oXzhm6xgxvw4cygisf1kAFllea1Qafxf1YO K4o6jWwfeOid+H6lui7nwW3jQ3nI9DhRuppTHhrbTreX6dcRHpjnkj5gMdzkbg== X-Gm-Gg: AYBFou1SUxAZPEv1N0MsybRt94kio3ldwdmXnsfaBnqOWIS5D/m/zXfDIKBkWBgfBtB Be4q/n2vGDuqSh00AMDCna05bqdDrgMu/amowEoWXaw7cJQLT69jFVYgHverEtkyVIFO+B4bZNZ 6fZty+A2F/b6KHRHqOWRS20XfAET3O3i37OoQDjdviOARoZJfyvb4MenDhnMYlRiVB7NSTl9r05 vSD/62oFDmQrN3xm24JyH2kjA5LRTXZPqJsBAoJz/l0uhIu+nlY1FtlUN6KMdCmwkjZ2fBvUOJx QtXpVAH4sVyuy59kEWjblsrpbWvAhkvnntR3m4Gbm5jZnDvVptbZfTYPUa8j+fTW0QXu3ZhESz6 HpVM4pV5CMMfdaEodrC5+IwdGTe2PtwHvbLcAWL5kF0d7eiQbyMMPBJLNhdyCnAxZVhIabFSRc2 20n5C6CPvLkexuL2S0tGM595k5ryFWujI94k558csavJpMTXkdpy/eHsJJlIvwd4zQmstv6hgKl fmYLfB6Dc9pxDM/RBdE7ItrJE/XXzOmkLT2FmMbzn5ktdLANZBf/ev2kMoXiJPHWxgmBuYOSudv 6IrnGlR7w+aWHlvAIzJWpGhKOwjLgIQ6B15M6EjVXIVLHpHNxfJ0eqoiOhg7PWNaosKA2hsNc84 9k34oCaU= X-Received: by 2002:a17:90b:1c8b:b0:3ad:6738:db14 with SMTP id 98e67ed59e1d1-3ae5814509amr909590a91.55.1793161468164; Tue, 27 Oct 2026 21:24:28 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:27 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 09/60] spitools: upgrade 1.1.0 -> 1.1.1 Date: Wed, 28 Oct 2026 17:23:07 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131561 From: Ankur Tyagi Signed-off-by: Ankur Tyagi --- .../spitools/{spitools_1.1.0.bb => spitools_1.1.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-support/spitools/{spitools_1.1.0.bb => spitools_1.1.1.bb} (87%) diff --git a/meta-oe/recipes-support/spitools/spitools_1.1.0.bb b/meta-oe/recipes-support/spitools/spitools_1.1.1.bb similarity index 87% rename from meta-oe/recipes-support/spitools/spitools_1.1.0.bb rename to meta-oe/recipes-support/spitools/spitools_1.1.1.bb index 69f527a6eb..e2ab0a5d11 100644 --- a/meta-oe/recipes-support/spitools/spitools_1.1.0.bb +++ b/meta-oe/recipes-support/spitools/spitools_1.1.1.bb @@ -3,7 +3,7 @@ HOMEPAGE = "https://github.com/cpb-/spi-tools" LICENSE = "GPL-2.0-only" LIC_FILES_CHKSUM = "file://LICENSE;md5=8c16666ae6c159876a0ba63099614381" -SRCREV = "a19dffe44fee857124a993598caae0c85894f914" +SRCREV = "74ba65b19e0cf9d1eabd52d17d842200ef901d61" SRC_URI = "git://github.com/cpb-/spi-tools.git;protocol=https;branch=master;tag=${PV}" From patchwork Wed Oct 28 04:23:08 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102175 Received: from mail-pj1-f51.google.com (mail-pj1-f51.google.com [209.85.216.51]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36195.1793161470871638153 for ; Tue, 27 Oct 2026 21:24:30 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=Be+NeVsj; spf=pass (domain: gmail.com, ip: 209.85.216.51, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f51.google.com with SMTP id 98e67ed59e1d1-3a4b3ac8fb7so340845a91.0 for ; Tue, 27 Oct 2026 21:24:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161470; x=1793766270; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=VrJMNcGZHCA2dnWbt7JzXk2YA1A3mKdG0q5nJaYh+ds=; b=Be+NeVsjI1I/pZTo8vHDFuN1aQQxjCR/CaxLQkU6LUbv9iAMfh69elecfKN3/bTzRL W/ZSBA/zPDqAjXW79F4PrmbU0dTYDDzrgEMdHa0/vXn8uAXEPOV+Hv02HyoLHcIBPvJO FrF+3hhBuuYgYvE44ROts1p+tNDQqcxtil7uJvI1Csra9vujv0vGfKWoMO3gEbLEWSy+ Z2axqo6EbuWNSVsiQR5DhZAnO0Bzezr+BE4HVqkW8S/6Jw62AjvkbNhvGNm07ZsjRNaM YZpVDs0QmEv3zJMnwT+WI8djl7p/JUmz6CQdm4BHPXvCjyHME4LGrkQedfwggKaYWP/S QpcQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161470; x=1793766270; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=VrJMNcGZHCA2dnWbt7JzXk2YA1A3mKdG0q5nJaYh+ds=; b=VggZ+8Qucxw+DXh1w/HW6K0vfzx5K/Rsb+eDZF38Myc0fWlUK30Nqkg+CnV+3PkbNk wOBYwJV6Fc06ejbky/GHtTUstx57lVf0Uy8koAvJ8FEia+6JsVHSjdhygj0/2VgfP16x uqPVaCmL5djtKitEfU/qbDxm/5fBhjuCv8ydJS03KZedcwzzArskWbz5GZ9a0UC4keEh FousJb8U1KeN5ejlT0VIQ1YCvF4fBxbJ32cIL4L+i1vsbiat8HIsg5j3jVPJsb/bau7x fHh4FUxEzeGfPNFJdfjcnBkDJOpE0kp11L2xFrNihIkcy1lDHNcEcrYe270Y68EWlrNt TR9g== X-Gm-Message-State: AFq9FYL8SChHAaZCt6B11phTuAJPXCwlYBagya6zjDTKnX0gn+h3qXD3 LjScoY6fuZ0wPMlVDWAMJ09HCtiRtpaPqT3xGe9wkKn7Awp4D+ON4ilz2KHe9A== X-Gm-Gg: AYBFou0vd5w07hBjGG3PKhP+akazLUrDShgUF4RIhp1yYE4bcDh9DFPfz06B/kPjflc Vjm/iMUZjX1iXQVR/UocVfGPJQFJslmOgcrUXCd7HwwmJZohNs3U0L+v3F5q9wJmrhVEgPYzqOA uvsXbXpU3DeJYTThb8cs3QtC1F4u8q812pVWmgw7ayYvL5SBk6mq8oWnXTPL6DYDc9fKItrBOBC CDNYVN8s559Aheh0uNXp+63RzQfn6hrtl/VkW/w9yKjUfwsd+FsWWrpGD0q9WNZz7VRssk1PsLF 3JOHE8eRNuUxKQmEILZhbhUxJApz4VVX4/scgW4ZLwBWfr7sEql4Yu9BJZ0hs/vA0ulN5Qs+FXb h3Gf9UJhRNawoYAiLor1L933/iiVVri61tIcUEPERq3HNAzp6oGrPoSUgd0A0VFjTrFA4hoGBF7 I9RnOYfVBoKdmQMubwGa3zBKs+x4ouTjEyFCZnVltZcIXNSQ5G97bnkoPRIJGcNv6MM2PovWsxa clcGUGkxVXD24JxjPXECafT7iSrT0njpFg5OIE/q4jSUcgslNtExLV7M/mB0pQY+cUThqULrcqF vb5a3upsKteiPZHlyoLcukcVgMtqr9V2WswnJCpCQX/OJjk1aQRlOG67A4j0ag== X-Received: by 2002:a17:90b:4f84:b0:3ae:2961:14d5 with SMTP id 98e67ed59e1d1-3ae5824a0d5mr916122a91.42.1793161470238; Tue, 27 Oct 2026 21:24:30 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.28 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:29 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 10/60] libspdm: upgrade 3.8.2 -> 3.8.3 Date: Wed, 28 Oct 2026 17:23:08 +1300 Message-ID: <6cb8fca0bc2898cc5478acd9e4d0c24c2963d329.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131562 From: Ankur Tyagi Changelog: https://github.com/DMTF/libspdm/releases/tag/3.8.3 Signed-off-by: Ankur Tyagi --- .../libspdm/{libspdm_3.8.2.bb => libspdm_3.8.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-support/libspdm/{libspdm_3.8.2.bb => libspdm_3.8.3.bb} (98%) diff --git a/meta-oe/recipes-support/libspdm/libspdm_3.8.2.bb b/meta-oe/recipes-support/libspdm/libspdm_3.8.3.bb similarity index 98% rename from meta-oe/recipes-support/libspdm/libspdm_3.8.2.bb rename to meta-oe/recipes-support/libspdm/libspdm_3.8.3.bb index f77057d9fd..3ab77a5cfe 100644 --- a/meta-oe/recipes-support/libspdm/libspdm_3.8.2.bb +++ b/meta-oe/recipes-support/libspdm/libspdm_3.8.3.bb @@ -10,7 +10,7 @@ LIC_FILES_CHKSUM = "file://LICENSE.md;md5=8f9b59a81a88da8e812af43728b72dd7" DEPENDS = "openssl" SRC_URI = "git://github.com/DMTF/libspdm.git;branch=release-3.8;protocol=https;tag=${PV}" -SRCREV = "f55cf6d48ec69b4ac60a63903e9c6a2cb0fd155d" +SRCREV = "98253fee253c9e0b4313e64b373af3c7614c90e5" inherit cmake From patchwork Wed Oct 28 04:23:09 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102177 Received: from mail-pl1-f179.google.com (mail-pl1-f179.google.com [209.85.214.179]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36045.1793161473080299024 for ; Tue, 27 Oct 2026 21:24:33 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=XX80e43Z; spf=pass (domain: gmail.com, ip: 209.85.214.179, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pl1-f179.google.com with SMTP id d9443c01a7336-2e987a2ba0cso2892925ad.3 for ; Tue, 27 Oct 2026 21:24:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161472; x=1793766272; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=3BFzdwDFW7wTV3svdpv55mLXc0xFJAqXCwGrZefnb60=; b=XX80e43Zmr5NKh+WXjtnmKEapBVJ+6ijpJB6ByIZ8/9Klf7o1HJjTHHArlApLY3geB 60mavEHiKh/Sz6VZw3lMfM/5pEjUBQGL0CzwrHu1tzs34pOawmAiWt2ElSf/k3PoOD6d JzLfMJOE3DhJolbqO8AE6cernnDgo4W96+zSN5D6tY57u3IKwC+4C/8qatoPa6QceMYf isxdhZy5ABHT+vqLdDySZ9j333aPipNokHE9f+EsjcbHAmBWh46K31rZl2kudD8ilqKb 9Q+jWVMaOjgLXf9/6tCEjHItNnJLJTrDSdtyZeAtjrnClaUTAfiVwc9rOkhozqph0iNl 5cSQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161472; x=1793766272; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=3BFzdwDFW7wTV3svdpv55mLXc0xFJAqXCwGrZefnb60=; b=PRhVE8cQXcp9TJ905RVTLz1j97h/1KuNrXdCRICsdl27rHKA+rmqoS4IwJuoU3qUAk DVNVx5kHb1zj1Liz1/PnhgFWqCMCFH190Wd83ldz2LhbApgBJkusNV3Ieso5RvsOks01 a8gQX2L3JVahNZ0X/JO6nlG/2Y+wt7hLskCRMPv5wzSXZNioccphZ9hajUsSRz5O6nL/ owZFHmm83CFKV6SoTqQ3RW5Bl04CMWs4SOOOdwreFneTaB1mncefhKAPjyNEQjBDk+Xp EzTMD+7/51K3zyH9KPkY9lkijcSvLsmldxHLRWkPR0HL9l7NTMGl5yTblL6Jh2udwXwl s3QQ== X-Gm-Message-State: AFq9FYJDMoc7YUyBE3YIoG9QgcP9kJ8ypxR2FqICIbGTJWAzjAkcSi8W 53Zx5B9KGR2ukrVxId2pTamRxiltzQqm4LsTn8/uotJ+eafxTNsjb6Fod0HUJw== X-Gm-Gg: AYBFou2K0UNZQ/5nGPvYnKb/0NzaA1jjFd2WiiX997s7+Xd99zIXyV9lA8DjCuAxO9J mEKngXCEHPoclMG6N4dYYr7mRhXhH3FzaZUHGuqGeCltLz+eVy4TUmIbBY9XDynEdE4wva1KnkH XlRnuxl28BiMyY7b51iD5D8L3M3LmLfpUHZms7U5GpUktE3bLAHXSBrUPW1Dgs4Jv3tcPB34gbv wvTSsPQOkXAQ4/ZeEJk9HuvEDeu4/GK8GfS22fainKFCTbJTJ5vJDRT2V0dl2k6eTRrBBoV8XKY uLc7YsLP5QcmigThioUNbcNgAiDQe6dOwqQA1VbFSQ14KqPIwdDVpxGWVepv9hZd59XbsfOhpFt Ihsqp1lFqa3YIXzpV89vA/yUZVmcbz/zfKkMzO5p3IHx7+fOgkxZ5blrMAnSoeI0tLoXDNsNv/m Fx7TGVIaN7wcowkz0lP0GNY4tRC/V+ZwQ0LZpfciwrpXIlwe16chH90KDzVcOB9eJgBllNOFTqO WeSXTm9DWGAmQHunIBmJoCNCiYsltwPY3Kn3DeQGACpM8MLjpcTu5iABqm9J+yMUl3FK9JVol9v a6wBzXdm++OQXaZTHUy4oMnM+ioSOFtLPNNQz56WRoZTUhbIM+3l1kRKqvvWPA== X-Received: by 2002:a17:90b:5201:b0:3ad:93b4:718f with SMTP id 98e67ed59e1d1-3ae58289e21mr897472a91.65.1793161472451; Tue, 27 Oct 2026 21:24:32 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.30 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:32 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 11/60] libmikmod: upgrade 3.3.14 -> 3.3.15 Date: Wed, 28 Oct 2026 17:23:09 +1300 Message-ID: <3fb79999f2fcc2aa52918d418b1a1e0c53df9d34.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:34 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131563 From: Ankur Tyagi Changelog: https://sourceforge.net/p/mikmod/mikmod/ci/libmikmod-3.3.15/tree/libmikmod/NEWS Signed-off-by: Ankur Tyagi --- .../mikmod/{libmikmod_3.3.14.bb => libmikmod_3.3.15.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-multimedia/mikmod/{libmikmod_3.3.14.bb => libmikmod_3.3.15.bb} (90%) diff --git a/meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.14.bb b/meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.15.bb similarity index 90% rename from meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.14.bb rename to meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.15.bb index 2468943349..bfd15cabe1 100644 --- a/meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.14.bb +++ b/meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.15.bb @@ -8,7 +8,7 @@ DEPENDS = "alsa-lib texinfo" SRC_URI = "\ ${SOURCEFORGE_MIRROR}/project/mikmod/${BPN}/${PV}/${BPN}-${PV}.tar.gz \ " -SRC_URI[sha256sum] = "dffd82b8f254c3489c32098da831f33eac7136843d1e7ccb802f1254ad5b4219" +SRC_URI[sha256sum] = "dc27b338154b8f88dc9e6317196d42c6abc13bf63c4e055257a18d4e38e1afa2" UPSTREAM_CHECK_URI = "https://sourceforge.net/projects/mikmod/files/libmikmod/" UPSTREAM_CHECK_REGEX = "/(?P\d+(\.\d+)+)/" From patchwork Wed Oct 28 04:23:10 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102179 Received: from mail-pg1-f180.google.com (mail-pg1-f180.google.com [209.85.215.180]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36046.1793161475417664561 for ; Tue, 27 Oct 2026 21:24:35 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=ZSNmPvLz; spf=pass (domain: gmail.com, ip: 209.85.215.180, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f180.google.com with SMTP id 41be03b00d2f7-cdab8873d9dso239729a12.1 for ; Tue, 27 Oct 2026 21:24:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161475; x=1793766275; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=Rqa8FwGsvCcdMRqM7gKRjx2sgMO1lEXjf7WI5tBhJ/c=; b=ZSNmPvLzTQvpGfFN4yJfFbjnekQXi8oOwoNk5Cew1ZoVwzjImIMTBsnPUV6tIeGjFF 6FoUQSR9ta9sK4VubFNr2XB1iHA9bbLzNqZCGesKPTi46278UFeE/0GM6rV3MG6fMriH XkCatwmwsqf95pXThuvcPv6rww0kaNXg2w86DcM98MlxmmsvEZ73UItiWip203MD1qUz s3AAUPFIzNx8j0Mshhj8rIwDYGp/H+8FkCO/El7t5uvFhoW0eD4nNO3mXnOUnZQLW8U9 FuBHhyhFkCCwknzxJbmZp0muLrWnKHy/c2JZRyyW0XeCjKuViyDow/jH1JKMvKkXNnmC QguA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161475; x=1793766275; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=Rqa8FwGsvCcdMRqM7gKRjx2sgMO1lEXjf7WI5tBhJ/c=; b=HYWWnaye2UGapL/Xyw2pZdsdODu2RJqYy4kkVHWB6lty3+8o04TpaoecCH2AlmuxOy 6UD/8P0KdkC0ECsgPHqaY5VJ256e0UWijF36pjNCf91kUBv51zmv81fczWD0fEnR+ZKp atQTUMIMe0j1x0NyDaUsb6haGuOcJRo6bvXTWJ2Xq2LoSEInDA97Ge/oqaiLlWVh8BTN 2esDktUIsLXQxIhGtExz3vOEQ+U8q0yge451IMZCh3HUP1XNojgMIVc9Y8TKa8jRJfiT bDwLbq0T5LHLifk7m5s3m45W7bi2C4TAzaYoQkJi0jyjqkjpnXp8dyYNNVX/4cQGKtdL CpqQ== X-Gm-Message-State: AFq9FYJHmR6VBNvKb2avOIERxztu8CY8wYbf+JleiDIRhsoa0pI0UBEk Tf+NgT1+SaH4jRD0NrWvo7JFhskyrkOQTwcJLkOoM+PSd5Msdw7SNONLxZgmgQ== X-Gm-Gg: AYBFou35l5oNqmhCEraIXTFoydZzY41g+sv0I//KCoYpXiN1IdjYhdjJ9QWFQdj0j2K itimAntYHb6RbExCCMBrqw0P7WW+V7ipW7XIHnHTv9JoKV3m6KRrs0eigw2B7is/yZ6mv6Ni3Vm WuxuGWUnV3zfqwendFE0uQeB5P3hBin1WK3/GSynYbEcCOfU+Qs6s8BcgaLGYMgNzBv2Ut8awAm XDqLRMKf9tMq7udcYKgQgJMr9G17HLf0EHCxu10NYWrrGk99iiX+2gS/cHiFQDfO6YsMjZO3QLM 3013iAXTBGXQNoVUoaofKPL4n5Wwk1EOaJBsLL3s8E1LQzi0AVOSkAxgCNkewLV4I9ALiHzdxG7 XtOSfzuC4Wa1dpX7rKq9vCxAsjGMFmsENxafBimbbbs/2izBXpGbhbEnLrgNRcRBvju0vcqmFOK IQAIe4S/2adi87uM3pWKzgxvfI0W6xj8zbXviEe97+ZzPeyh7MIwgaa3O2uzPZflM0WzE339rBf OZLLGfCm24BTw93zxcDggGiOAf5Ypj5nx31ych5nxNJRJwVhM30fJINZV7nZFJ4jQdNDK4lWKgT 0RHhkROtZen/9uf9Xl5cyZgbJtr8mQvt8aTMokRKVIldeIhrPX9CUKvLqMtO75dfZwW3eW4eECM z+Y9g4Wo= X-Received: by 2002:a17:90b:1a86:b0:3a7:a463:54c2 with SMTP id 98e67ed59e1d1-3ae580a0233mr928317a91.35.1793161474795; Tue, 27 Oct 2026 21:24:34 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.32 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:34 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 12/60] libxmp: upgrade 4.7.3 -> 4.7.4 Date: Wed, 28 Oct 2026 17:23:10 +1300 Message-ID: <6894d75451212962fcd7d1b35de6d0c35c2f4b38.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131564 From: Ankur Tyagi Changelog: https://github.com/libxmp/libxmp/releases/tag/libxmp-4.7.4 Signed-off-by: Ankur Tyagi --- .../libxmp/{libxmp_4.7.3.bb => libxmp_4.7.4.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-multimedia/libxmp/{libxmp_4.7.3.bb => libxmp_4.7.4.bb} (85%) diff --git a/meta-oe/recipes-multimedia/libxmp/libxmp_4.7.3.bb b/meta-oe/recipes-multimedia/libxmp/libxmp_4.7.4.bb similarity index 85% rename from meta-oe/recipes-multimedia/libxmp/libxmp_4.7.3.bb rename to meta-oe/recipes-multimedia/libxmp/libxmp_4.7.4.bb index 1600686229..a287124801 100644 --- a/meta-oe/recipes-multimedia/libxmp/libxmp_4.7.3.bb +++ b/meta-oe/recipes-multimedia/libxmp/libxmp_4.7.4.bb @@ -6,5 +6,5 @@ LIC_FILES_CHKSUM = "file://README;beginline=59;md5=b25470e2863502c9ac9886f09c21a inherit cmake pkgconfig SRC_URI = "git://github.com/libxmp/libxmp.git;protocol=https;branch=master;tag=libxmp-${PV}" -SRCREV = "1e0812137e4f9e15cc026c0c75af82d71d3cb5ad" +SRCREV = "5d4f6aa2c7dcdf8e9cd8129fe579d45b36a302da" From patchwork Wed Oct 28 04:23:11 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102180 Received: from mail-pg1-f173.google.com (mail-pg1-f173.google.com [209.85.215.173]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36047.1793161477607085818 for ; Tue, 27 Oct 2026 21:24:37 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=ZviNwzlU; spf=pass (domain: gmail.com, ip: 209.85.215.173, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f173.google.com with SMTP id 41be03b00d2f7-cd61a2dfd7aso191137a12.1 for ; Tue, 27 Oct 2026 21:24:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161477; x=1793766277; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=wzz0hcAvL+TyoSxim3TwHHje7sMt8f5EYUsJClBYJfg=; b=ZviNwzlUl3E45+FZP+yp4LAcxgCAWMzWyBlqWadTkwPEIRhJ4np8QQ9UxYIfiBbRXO JeagZ45TCnS0u8E/o5Zgee+ghY4IVduH+kxp5mW7MN2gtFy6nol0Ma++7MRL1wqE/JJt n5U4JHG8m0S0FXV16NsfDfQ4Mr7xvSKzGMUoi8/eiqmx6uWQTGbZZW32wl8QxxrSC9ON q3n/NjHpxFAeawcP1QhsCyJz0uiuOm9StJW2Lgl09Q1rTT7BoGGpHUSofYqQ4OV2dGpm 0zTGXZukV3lQ8prYAtXm3leiI1kOpVau1hrAx5k8D5bSo4WyrSk4c+eceYF2PGKEFnfd 5X/w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161477; x=1793766277; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=wzz0hcAvL+TyoSxim3TwHHje7sMt8f5EYUsJClBYJfg=; b=eAkgziErNTom0g8OZvGCNp2NKlwedXSomu8a9iManDfJkQIpNuEAgkloiM6GL4827d eM/LCo2XyCVDQ6Hd8XdWFb/Z3iFl87pEv8A3WpfR4pnXL2/GK+EPOzj/oK3O1uD1GcSO kzVOIYLHbhU/mWqETxN5+RhxYlA6/HBh7scRXu9TCVsHhe2C2JKtEMiT5gtsJo8scBWd z2jkHcBPwM+XhK0G1pC07q3n1M4tHTk4dJsl9o67RBkaA4bSz0v3KlkdJqXTkRqFeWAr vpfVTRop6snaq7+DEiJoOS/dF53gKeaBVisAwSqtxcq3lalbDxLLFnO846/AV62u33Dp +QTg== X-Gm-Message-State: AFq9FYLEA1lYBqgcCmHKuIN3DeGuweQ7vQ9ha7lcuN6X1eDaE7rggbZH xcTxwJ/uUT85MI1ybC3YQ3yMn2vdL6C6AomkcYhKixQPOsqnrkga3Q33aE21zA== X-Gm-Gg: AYBFou0vDNiDNvbp8BX4AMvrbDTJ+oE08403b5u9H1/ZLu3SG35FC/IUIQ1oK6VXH9R V22R/7DxDFzj5d0VgLDAEw91MIjCE097ItNqRyDVlicWs//pIjtdnmkQB0HBVMxCA0yksRcwvym 3jSKKOcN8E+uZkQT5UVGQHrL9QZ7qKJm9FgMTbJOKAyJ+fPsm3WNaEwqKfS2e1NFMr+8q+loeA7 QpxOV8e2e0tQSqzfWvAxocOV3I2dq+THSgj4PBmiPlvFBPjqDLwZYy40Yi6xizUHBQhTxVbtmAR Nablab32d+eL5xJiY3qpD12ZBS9ULEg/iHVcrtkymRoj9+Kor2lYc66PBocTqox0ZX6kgEiKeBV ATm8ulsnFWgLw1GZGd4O9vzcQHIEqbt8jLEYQuu0+XYVCJJ2lPlqegSTU1ZinEuEtI7IpbDZGzz EbeMqeZvbtb3ID1RuPMs4e8Lv7CYfbHK2XmwjqaO8zrWZ3I3LrIWAn1a6Cka9VnBWtovaTbt59j R43hCHglKi5ld0K2ksK6cRC0W4lbjvqT2Qpc3lqhsWBSd1V9TWDdWRU0ndHHHdihnm5mQMEhmOw b5irBCMgsdQLUNJlKNBQwT4vlP+LN3wh5NzG24OQ4sqFAlzCn3HB0bXbkaXG2g== X-Received: by 2002:a17:90b:3ec4:b0:3aa:fc22:8aad with SMTP id 98e67ed59e1d1-3ae58236d16mr896491a91.54.1793161477023; Tue, 27 Oct 2026 21:24:37 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.35 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:36 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 13/60] python3-pyjwt: upgrade 2.13.0 -> 2.14.0 Date: Wed, 28 Oct 2026 17:23:11 +1300 Message-ID: <2b5240d70183fed9e05b4b37aa2998b562dde93d.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131565 From: Ankur Tyagi Changelog: https://github.com/jpadilla/pyjwt/blob/2.14.0/CHANGELOG.rst Signed-off-by: Ankur Tyagi --- .../python/{python3-pyjwt_2.13.0.bb => python3-pyjwt_2.14.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-pyjwt_2.13.0.bb => python3-pyjwt_2.14.0.bb} (84%) diff --git a/meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb b/meta-python/recipes-devtools/python/python3-pyjwt_2.14.0.bb similarity index 84% rename from meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb rename to meta-python/recipes-devtools/python/python3-pyjwt_2.14.0.bb index 1b018f605b..a2cb84587b 100644 --- a/meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb +++ b/meta-python/recipes-devtools/python/python3-pyjwt_2.14.0.bb @@ -5,7 +5,7 @@ HOMEPAGE = "https://github.com/jpadilla/pyjwt" LICENSE = "MIT" LIC_FILES_CHKSUM = "file://LICENSE;md5=e4b56d2c9973d8cf54655555be06e551" -SRC_URI[sha256sum] = "41571c89ca91598c79e8ef18a2d07367d4810fbbd6f637794879baf1b7703423" +SRC_URI[sha256sum] = "77283c83fb56ecf566a886c757a714bc83668e38156de2cce8263302f42e0b86" CVE_PRODUCT = "pyjwt" From patchwork Wed Oct 28 04:23:12 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102181 Received: from mail-pg1-f181.google.com (mail-pg1-f181.google.com [209.85.215.181]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36048.1793161479928921830 for ; Tue, 27 Oct 2026 21:24:39 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=PyWa/rdV; spf=pass (domain: gmail.com, ip: 209.85.215.181, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f181.google.com with SMTP id 41be03b00d2f7-cd5c9e52398so312833a12.1 for ; Tue, 27 Oct 2026 21:24:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161479; x=1793766279; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=5HOihMnDMJkcXyygoOReELhms2F3rzLvYN/eIk1Nou4=; b=PyWa/rdVnByd6+eDn5yjv5s3IZhNyZNkEJwLVqcw88ChCMCRN5UL8UHmQbdPYVEOu1 JPN9vSUQCM23dpSp3W6CnvZZ0sGs//6jNIGi7CCXmMPiIO7UM83mkg3aiTen+4EYiixf m122YJm8pQeey/rPh6kVThvV6c6R1sQKzCVLaXW3s2mBJSf1nGMwU5v8La4GW/nE9kgd aVQbE8iv+dWwlhqDMzL3/i7YsKQVtQqOL6w3ZvkUoII9CQVLnofzvTWTPqXTXAfMqxIg L4y4YxacJqnGSPCtukQ6AnR77AXdUZWRnEzjR2yHFF26YSkg8qx00fHW1kNXprU24Shc z7bQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161479; x=1793766279; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=5HOihMnDMJkcXyygoOReELhms2F3rzLvYN/eIk1Nou4=; b=uhnI7BHGMJ8hUBwC7xzLNvBUs4DgAhXksc1KkzF6/A+lROPk5IKJT5VdjpQ9mGGrSu j2M04CGqUTxqy79YSgqGl6cBBMCoKeV6fuFP7wi0KXqz+dAWbwgjL51DdvPKr4agX5LB anYjcSHDWWwZ6j4nNXdguezmJaNfJNBhRT7CC7xTrsHgmb5TvQwZjTt0JLN3bQxOX2c+ bxuLTy9RyG1F7kTGVaGfFF9DfwRtmG3QXIb1uLsKidIIrORXPNO+STUYUJvBXh8cOdS5 gQQcDyLfzxGf9Y0+oon38+AXl1QKcgxK3fRi4+/S0w/eJu4koVm8Tiix9aaDE4bJcLlb ucBg== X-Gm-Message-State: AFq9FYLuXWbzkALc+GGumhF7KLQpoioadkfFLLNdK2f86FzpJJ41E6zz 4iNHOoYQiXEsf4cMKtY5gxxp/7xLmzO8o0FIo4dLgW6q5VfMYRwuPE3fNM7lUg== X-Gm-Gg: AYBFou3KnPkn2HUcbSpDCuYBOtlyhBAJ4ksi5bkvsIalKk+b28NqVAiRaVQhMTD8No9 Hgh0Um3ufVqpbpmK9z4WM5Gews7JilGQVfOhh+cTwuf73uXUyRALLNxRxHE7pKLhH1UOewOhDLG P5rxGzN+cUhkj7uwLxFaXXo7raQulbAgx9Ud/GU8ig1wUfrP6z1JKDMqxgxqK3ItQZSbpZpePxp 99USA8fjG9VMmxkB+VkW+QGJxb3VosV85P8od5ushDcVHmHfG8CNgHacHiMdKxOkD26czHBPD4u Ie7IMU1JcB9oILo0IPWU6IxIdVnH3AYwlzQp3gM18//5WagcpEOoBg1YgVmQNqzF9LG0/aPZboO NEzZ+keQjfWrZElAMb5TmDafKjcQqcxGgOiyiJpsvaUwWyay6cbldMSi84tjz8lXjWBk3HaCXsM 8Nq+abDnon3/WpSwoPzUTnvAvcwj1alLYL6iqOnA6qVTGa5ie2hNa3OcK4l6+lNelVnFZLjunlS S8aBWDezvJLhBRiP7pEbZyOLt+aPMzxbeaVWYhT3a3KBYvSPiXOFhPyBTrVVnwjcRFwkPjuMUnP 0phTyHyBJw8fsSfyUNGZwQvq9ZAflxnR5OL2mGd8gNIdhURldzEOEaGDbt4ktA== X-Received: by 2002:a17:90b:3c83:b0:3ad:d29c:5e64 with SMTP id 98e67ed59e1d1-3ae58324cc3mr806071a91.65.1793161479220; Tue, 27 Oct 2026 21:24:39 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.37 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:38 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 14/60] python3-cbor2: upgrade 6.1.4 -> 6.1.5 Date: Wed, 28 Oct 2026 17:23:12 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131566 From: Ankur Tyagi Changelog: https://github.com/agronholm/cbor2/releases/tag/6.1.5 Signed-off-by: Ankur Tyagi --- .../python/{python3-cbor2_6.1.4.bb => python3-cbor2_6.1.5.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-cbor2_6.1.4.bb => python3-cbor2_6.1.5.bb} (87%) diff --git a/meta-python/recipes-devtools/python/python3-cbor2_6.1.4.bb b/meta-python/recipes-devtools/python/python3-cbor2_6.1.5.bb similarity index 87% rename from meta-python/recipes-devtools/python/python3-cbor2_6.1.4.bb rename to meta-python/recipes-devtools/python/python3-cbor2_6.1.5.bb index 6a894848d6..94d3f30dbb 100644 --- a/meta-python/recipes-devtools/python/python3-cbor2_6.1.4.bb +++ b/meta-python/recipes-devtools/python/python3-cbor2_6.1.5.bb @@ -3,7 +3,7 @@ LICENSE = "MIT" LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a79e64179819c7ce293372c059f1dbd8" DEPENDS += "python3-setuptools-scm-native" -SRC_URI[sha256sum] = "01ecc79a28f33d17331943ce508fc1e21f4b06553c73f874f4c77120d72b2ef9" +SRC_URI[sha256sum] = "6eb06160c42315ac0c4ded461c7d84d92fa18c69d13d17fc1dfc1fae96580c95" inherit pypi python_setuptools3_rust cargo-update-recipe-crates ptest-python-pytest From patchwork Wed Oct 28 04:23:13 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102178 Received: from mail-pf1-f178.google.com (mail-pf1-f178.google.com [209.85.210.178]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36196.1793161482324438916 for ; Tue, 27 Oct 2026 21:24:42 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=jIUQnsak; spf=pass (domain: gmail.com, ip: 209.85.210.178, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f178.google.com with SMTP id d2e1a72fcca58-886e61fa30fso247471b3a.1 for ; Tue, 27 Oct 2026 21:24:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161482; x=1793766282; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=yQg+0VGRSROtbeHPtiaaYx0eJ8t9+4O75AB5SIh9B0A=; b=jIUQnsakLX8DJozuQr8xp2WPTJ+zyyX195qXogd79lTyld+R0nY2NY1Cdji8mntHvN 7aZJDKcqjHmg0akBpaOOwbb6nWMzwMgGLSnZVNME2FV6OEspXVxGhNfCZuJbNZ9Hhp1n iegIHSUhZI4sYEV/dzl68WLQPuGo7XUCF3D1ZOYbD7c3S8VJaijWIFDFWHFXY3RJuuv1 merhekTV2Kcq3DOdDqKHaMuD+XsBrbYbUnm6qcbzHfPEglarnJVKEd78NPbq/uZVJz/i +TOfrg9zMJ7Cstna0C3tOQp2RbxbYoF+sDkKOS9rp2xWz5CnlVO9XUkz2fK8g2FWtaFt PoxA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161482; x=1793766282; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=yQg+0VGRSROtbeHPtiaaYx0eJ8t9+4O75AB5SIh9B0A=; b=W5NFLzZmzx9TbJm93w38bAfdebFJjTu8cXx5xxNTF+5eeccb+VIr43pzQafRZFITt0 k01/mGau+XlakOjYANBqlnX9WOflMpoGO2kR/d/APwZYPZKE5zLtP/nWmEwVD9Ys+Oo/ 3I8JmxktW2NM5nmdBKi/dEKaLvEMDwIgvynA1WThl7Tf6mbZy5L+ObQeKvxChmAOVM6q FRM7kwHrQwFUOMsCtHQhrB3HNa00KXP24BRQs5cW9Epucd6eHEJNBKqO5BWmyrZFIQDf n/tiFPV9x/6WV9uH41hSUHRH5rLum1/kv+WkDfa9sX8o1XHWVaLgt6oqtTTewumR/lA5 yUSg== X-Gm-Message-State: AFq9FYLrtD1b9NeWojXcHYDflSIvtHXJOmlj6LdypTSeedu4fEDfhHAX U/fKgaEOO0CzI8U+c5+ngRjq3qMlWVnYg8wRzcVu2rS2AQ49qce09eFuK9ZuMw== X-Gm-Gg: AYBFou1RQ3dRwsB0NgTncuz6zD69Zt2nHIVl1ddPmoBAMKSrpJdvuMx+rkl9oHJdiW2 PL4vDLOPlIMmCQYzdRRKWPFScKwwAUdbHa3mymYp9Divqn0H2/hbz4qyV88oPRRrJ0HJc6p46bn vQaIAP37JjLqCASIfHqVCYST/kCZNZ6SRbAwVmplZyJVmFmKZsoVCah8Slvyt5N8D0H62wfm3y7 ab7Ee11O6u7mCJK8/fPylN/txckOO1C6evBg12Wc7cfKzDF5v5qlpo+ge9iOcNpacmqf8wpRCxv ficRub9hK2FCu7U2Qf/u2gZ8UzZofMgZGjRgIVvduLSey2ZI3m8rIBqa02rlxHkenioMj6cmmz0 eKDEog345aKqKA4XLC7pGJlJEYylNLKit7B5kAjucDuvEF34nOYMJtkHbZPLdq63h+JaDMLk/PP GQBzbToX3BOP0A360j+gVLojxxWqpWr1qnG98VHPZ2OAP/GSObPhTAIeZCRFD7nvF5er8k5IlVW EC5TOx7zlmJWQ1iRsmL/rrOkDIxsBk43+fdTTTdNp3vAKtwl5r5mGe5B/L+B8SYQEpQeqPTc6+W og+boTEYhjcQipgvpC4RkoULvYaWAddKVy5f0ouR650F3FWgYDI5QxnTQpAebw== X-Received: by 2002:a17:90b:3d90:b0:3ab:be66:ddb6 with SMTP id 98e67ed59e1d1-3ae580ae5edmr755233a91.20.1793161481603; Tue, 27 Oct 2026 21:24:41 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.39 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:41 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 15/60] samba: ignore CVE-2026-2340 Date: Wed, 28 Oct 2026 17:23:13 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131567 From: Ankur Tyagi Also confirmed in the release notes[1] Details: https://nvd.nist.gov/vuln/detail/cve-2026-2340 [1]https://www.samba.org/samba/history/samba-4.23.8.html Signed-off-by: Ankur Tyagi --- meta-networking/recipes-connectivity/samba/samba_4.23.11.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb b/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb index e498b30bcb..c0d8fe4a00 100644 --- a/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb +++ b/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb @@ -46,6 +46,7 @@ UPSTREAM_CHECK_REGEX = "samba\-(?P\d+\.\d+(\.\d+)+).tar.gz" inherit systemd waf-samba cpan-base perlnative update-rc.d perl-version pkgconfig CVE_STATUS[CVE-2011-2411] = "not-applicable-platform: vulnerable only on HP NonStop Servers" +CVE_STATUS[CVE-2026-2340] = "fixed-version: fixed since v4.23.8" # remove default added RDEPENDS on perl RDEPENDS:${PN}:remove = "perl" From patchwork Wed Oct 28 04:23:14 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102182 Received: from mail-pj1-f43.google.com (mail-pj1-f43.google.com [209.85.216.43]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36197.1793161484437934937 for ; Tue, 27 Oct 2026 21:24:44 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=xVAryv3r; spf=pass (domain: gmail.com, ip: 209.85.216.43, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f43.google.com with SMTP id 98e67ed59e1d1-3ae1d0caaedso236128a91.2 for ; Tue, 27 Oct 2026 21:24:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161484; x=1793766284; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=SNQsxVmwqPVTKy5cEzPnePID1JoMFJ87q7zrIsa1rvQ=; b=xVAryv3rhn++3XssT1G1Mh9TKZ4eK+Oj2AWHUbodeoRkkdQm3F44T3r+BqnKyibS9D oryXdG9ViK47EYWHERaVlZGUwSemDUTmF0BpwMRWzO5l36BdpSrKcLf9sIu3f4Wgjd+s /kbQ1Gtxz3XG7Gs7Izkv+GFcAkqgwxQ5Yi0/APT5II2BdU6oUn9NKWBGqQ2QXrZG7P3Y 7TOIJ2Y1MTCP/Utcb7xHxshfhrJi5cdsgaRessQznjzi7khFQCO7ndIDtjOcIFbe9Ow5 quKpjrRUCbfvB5ZdPoBmLnhj6r4vITE0uGUAVdX0TN93deGa3sNd8EgEwqvrTOl23KHK kYbg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161484; x=1793766284; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=SNQsxVmwqPVTKy5cEzPnePID1JoMFJ87q7zrIsa1rvQ=; b=Qsk+05sZfdqYV0JPhZEPL+Jxwj6ebyQUY4HltEwi+1gnmUcRDA5G03HAmGw+0WDtBb bNcJdKKdkD1qb0V4a93Djq92Wn6ALg59d0MVunl2gDcwL+47ZG7HubBZ3qkpGbId+ZaR SxS/oh4NEZYivlwJk9X+WwmOIsg8VOpOpFiwaYrtXOyHSG5Ztzy8KId9X3W9N6/VN8PZ dAMi9qOCVu0u7YunoDLXv0EJwjl5JQTNKkoztlYGmip99oDmH0JqAp4Vs9m+fyIb10+W 41OwH+3R1CcG0STSWqb0reK/4hplbMLRdkpXNUGAaNP4ajm9Vv7D60egcLT/olmzGHdg ChOg== X-Gm-Message-State: AFq9FYK+hmfAIZg/kCyKEqg633NxwfhQ6ECSkRVxnaoMLzBQl3gvcNOG 7RxGdw7Ldr9NYEiYjdgu6nI5A9kMBbZqzFhsaJwq8efe8nFuNOxnHP9ZAiGqbQ== X-Gm-Gg: AYBFou2USt3d4scnfxBjq3fXnXwFtCnFhIBcBTGTAG95+l58XJMtaVi4a3ksTWaIZva +vGAX+q1N6PSjnX18PO1KJNcYFgTkj2FsmBXIe+l3mjSb2ADCQB4A9nq/GSUMOnjYl2JmwA+rw+ DTdFWbZcnV2JuKFaYeOuU5YirjjB41y7nK2HBkh2IFMb9MYgvqZs/KxMl70yExQTOb/J44FrwBt d06hX7rua3HW6OCw3OzMW4UctTSprHSysnNTOmh9F2yKKFOHqADsnDmRp31dNiaWk6j9JNbE0Pr WlrbO/c3+9KokFiSB3BIhhILjyxttF3aR57bsEZI2rZQqnpwSZvf/hE3B90F50OA3twBk/e0gRo kLNvPZlWJukL19P6NnXToJ19TqFVEnqEo6dg2dTRITJLka4Pl0kuWRt9WhuqufpjT/H5kZ0QxD7 LVX8O2v0ZG6vFfYbN+CZxg5SOjWDkpC8Bs7kFfPHmKa8SQmXSzLMZEXlr1Q+5FXBWvJQRF1eb2f 29JI1n0xoF/kpXdd+x1WwupQzyPjLZ7S5PQe6wUBwM48O6aa501W3j/s0f1maDwPGTWklEMphkb R7qSKOjpmoK/Kmbnd+TzRdFX4y5i7UTYDZ5w8R+TZQk6+lo1tEFBNAN8X/a4eA== X-Received: by 2002:a17:90b:1647:b0:3a0:ace4:d2b4 with SMTP id 98e67ed59e1d1-3ae580cce76mr757432a91.23.1793161483854; Tue, 27 Oct 2026 21:24:43 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.41 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:43 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 16/60] rapidjson: mark CVE-2024-38517 fixed Date: Wed, 28 Oct 2026 17:23:14 +1300 Message-ID: <622cd276dd3855d73e24d610f8cda866519b7008.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131568 From: Ankur Tyagi Commit mentioned in the NVD is part of the current version: $ git log HEAD --oneline | grep 8269bc2b 8269bc2b Prevent int underflow when parsing exponents Details: https://nvd.nist.gov/vuln/detail/cve-2024-38517 Signed-off-by: Ankur Tyagi --- meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb b/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb index fa20b4d448..f565f0a175 100644 --- a/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb +++ b/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb @@ -21,3 +21,5 @@ EXTRA_OECMAKE += "-DLIB_INSTALL_DIR=${libdir}" ALLOW_EMPTY:${PN} = "1" BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2024-38517] = "fixed-version: fixed in the current v1.1.0" From patchwork Wed Oct 28 04:23:15 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102183 Received: from mail-pj1-f53.google.com (mail-pj1-f53.google.com [209.85.216.53]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36049.1793161486811479880 for ; Tue, 27 Oct 2026 21:24:46 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=kIZr7Ols; spf=pass (domain: gmail.com, ip: 209.85.216.53, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f53.google.com with SMTP id 98e67ed59e1d1-3ada4c06b7bso275761a91.2 for ; Tue, 27 Oct 2026 21:24:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161486; x=1793766286; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=+hjCoE3wqJAP1jVVZ5Q9Yzp8svxJ5C3ltuzwKYT1jxs=; b=kIZr7Olsug7vsqX2ECTtVzWW3a1m1WrOQkypRf58aJPSySecW00/rTC/nOD/sjdLFk i1fr0b6GdPlSw6FCwzZF+ekQ1dHv70ryhJn1mANiSS4UFPzc7QdrQFjnRYEuk/T7ORvO KoqfIDU5r2tlRrwcdbxdE66S58WnEP/cSjsPl/MCI90d+Med1s083q2QFou1p316UW7A 2MNm/h7UkAoXsnJ0VV+73rK4MebEXF5o0iEZWHEbfP7lbuX4hyhLIEV1GvAebvGMUuyg mid3S6+5pmJevOIL3BPFescm8mCfdURuO235cgkHFXHaTMQ44ioFzvECEJ5tGnXe4FvZ KNhg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161486; x=1793766286; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=+hjCoE3wqJAP1jVVZ5Q9Yzp8svxJ5C3ltuzwKYT1jxs=; b=tppN0DGoo3wbpt8z/9/BIw7HErkPHQMfXTkPCI990zZcH9LRKrkcJYJPr9nXsu/kWQ uv3gNRFP/8S/7Ss3YIQS7L1hQ7pli2KlJJpsVyOrZIoINF70VKQrDv20XUtyJBkfyGT2 ztaUsbupoLBn/EeZIO4muN5PurB0io3eAMm4QGvvaiOo11wMcuHWKOccSHgPVsEXp4OQ QzFZKzoOwCMASR+CR0xPdufKATS19yKS2c6EKPn8mCWNlFluyHNlztPcoz8B338zuTB/ 3qXukrb/Xf0mlje7vS6wZe5kQFhQvZcfkRW/Ku1PjH4teX8nN5Bi7scBaIl2NqhRD41x 6+GA== X-Gm-Message-State: AFq9FYJ+/rObQbHNJLHK0RuZ0indcnQFeNndJ1wkqndELRiuOYLR9hRD NOqtRunaqvNPLe0TU34T2EyxjNzOGt3LK6ZqfFdoy19cWPQeT6yaILmjrIzKUg== X-Gm-Gg: AYBFou0la0DixmqNC69N94dcMyI30DZXS9b1D3pncry13R9UAAaS20tzKGZNgiUdiyI +sl/Ce/fhUyZqd5j/JfC8jsgUo2XjZCqJTrjePd+gphwQTOlVtCbtOxbO7KD3ums8w86xbg3jYF 11NCC01MCxUB+54wvLNwxxTl5KAwp4vFbS8lUR+QL2yTH5Gt1i/HLlKg9vAAqNq6L1hyqQuTdGO OaozHbK3UUHHnFuTbvMgYUzPow8z+Ufu8eGvlpj9z6JELCj43NikAwQR8mH8CcWp9k1ON22Lutl 8gLIiiKlgGD3v7hBBc//AT01Evjf3ezLVJLPtKEC4L1QYRE8l6chu683l+InJghHooYYCvzoL4E lC9CuPvf34iNPvNQMu7+maTcixiBWLdeXq16RSUweKV/If7pah1d2T482MhYqzqiulhHIOY52jx JAFdMMdlc42Obwp+Pu4Q1G2cJfA9Ub5xDN4d2XzeoP7n9QBAUZzrMr57SwrQPqVcXO6LnvZZ9as YJpGzX4BUw1H9v/7Dp0/VlJM8c7SiX8Wls5qA595Zk2vDT0bOi3aSgGe9GMHsxB7/gR6p5KsH4u ePAX0SkXqenF93nIslM/ODxz4EPnvh1wRBPZm++qijiAIplIWzt3glZbv7c6OQ== X-Received: by 2002:a17:90b:2743:b0:3a0:c85a:ee02 with SMTP id 98e67ed59e1d1-3ae57f629e3mr858351a91.17.1793161486023; Tue, 27 Oct 2026 21:24:46 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.44 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:45 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 17/60] psqlodbc: patch CVE-2026-109448 Date: Wed, 28 Oct 2026 17:23:15 +1300 Message-ID: <3e0c7af04774807059c67a62ef3c6a4faf584702.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:54 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131569 From: Ankur Tyagi Backport the commit identified by Debian[1] Details: https://nvd.nist.gov/vuln/detail/cve-2026-109448 [1]https://security-tracker.debian.org/tracker/CVE-2026-109448 PTEST pass: root@qemuarm64:~# ptest-runner psqlodbc START: ptest-runner 2026-10-17T09:22 BEGIN: /usr/lib/psqlodbc/ptest ... DURATION: 43 END: /usr/lib/psqlodbc/ptest 2026-10-17T09:23 STOP: ptest-runner TOTAL: 1 FAIL: 0 Signed-off-by: Ankur Tyagi --- .../psqlodbc/files/CVE-2026-109448.patch | 243 ++++++++++++++++++ .../psqlodbc/psqlodbc_18.00.0002.bb | 1 + 2 files changed, 244 insertions(+) create mode 100644 meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch diff --git a/meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch b/meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch new file mode 100644 index 0000000000..12f6cdd1d8 --- /dev/null +++ b/meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch @@ -0,0 +1,243 @@ +From 5c9443fb0c8c0e263e1f8d0298987e91c4f5ccea Mon Sep 17 00:00:00 2001 +From: Dave Cramer +Date: Mon, 12 Oct 2026 11:47:08 -0400 +Subject: [PATCH] Merge commit from fork + +The APD, IPD and put-data binding counts are SQLSMALLINT. Binding +parameter 32768 wrapped the count to -32768, so execution failed with +07002 even though every parameter was bound; binding parameter 32769 +then extended the arrays with a memset starting at index -32768, +writing zeros up to 1.25 MiB before the start of the APD array (and +likewise for the IPD and put-data arrays), which corrupts the heap. + +SQLNumParams and SQL_DESC_COUNT are SQLSMALLINT too, so 32767 is the +largest parameter count ODBC can describe. PGAPI_BindParameter now +returns 07009 for parameter numbers outside 1..32767, which also covers +parameter number 0 for applications that call the driver without a +driver manager. + +New param-count-limit test binds 32767, 32768 and 32769 parameters. + +Assisted-By: Claude +(cherry picked from commit 86e4418e9553aa0891315db7531f8cd31eb1575e) + +CVE: CVE-2026-109448 +Upstream-Status: Backport [https://github.com/postgresql-interfaces/psqlodbc/commit/86e4418e9553aa0891315db7531f8cd31eb1575e] +Signed-off-by: Ankur Tyagi +--- + bind.c | 12 +++ + test/expected/param-count-limit.out | 12 +++ + test/src/param-count-limit-test.c | 142 ++++++++++++++++++++++++++++ + test/tests | 1 + + 4 files changed, 167 insertions(+) + create mode 100644 test/expected/param-count-limit.out + create mode 100644 test/src/param-count-limit-test.c + +diff --git a/bind.c b/bind.c +index 3b566ec..b3e5ca3 100644 +--- a/bind.c ++++ b/bind.c +@@ -16,6 +16,7 @@ + /* #include */ + #include + #include ++#include + #include "bind.h" + #include "misc.h" + +@@ -57,6 +58,17 @@ PGAPI_BindParameter(HSTMT hstmt, + } + SC_clear_error(stmt); + ++ /* ++ * The APD, IPD and put-data counts are SQLSMALLINT, like SQLNumParams ++ * and SQL_DESC_COUNT, so a larger parameter number would wrap the count ++ * negative and the next binding would write before the bindings array. ++ */ ++ if (ipar < 1 || ipar > SHRT_MAX) ++ { ++ SC_set_error(stmt, STMT_BAD_PARAMETER_NUMBER_ERROR, "Invalid parameter number for PGAPI_BindParameter.", func); ++ return SQL_ERROR; ++ } ++ + apdopts = SC_get_APDF(stmt); + if (apdopts->allocated < ipar) + extend_parameter_bindings(apdopts, ipar); +diff --git a/test/expected/param-count-limit.out b/test/expected/param-count-limit.out +new file mode 100644 +index 0000000..623bcbf +--- /dev/null ++++ b/test/expected/param-count-limit.out +@@ -0,0 +1,12 @@ ++connected ++APD SQL_DESC_COUNT=-1: error SQLSTATE=07009 ++APD bind 1 after SQL_DESC_COUNT=-1: ok ++IPD SQL_DESC_COUNT=-1: error SQLSTATE=07009 ++IPD bind 1 after SQL_DESC_COUNT=-1: ok ++bind 0: error SQLSTATE=07009 ++32767 params, bind 32767: ok ++32767 params, execute: ok ++32767 params, result 1 ++32768 params, bind 32768: error SQLSTATE=07009 ++32769 params, bind 32768: error SQLSTATE=07009 ++disconnecting +diff --git a/test/src/param-count-limit-test.c b/test/src/param-count-limit-test.c +new file mode 100644 +index 0000000..e9554cd +--- /dev/null ++++ b/test/src/param-count-limit-test.c +@@ -0,0 +1,142 @@ ++/* ++ * Test the limits on parameter numbers and descriptor counts. The driver ++ * keeps parameter binding counts in SQLSMALLINT, so SQLBindParameter with a ++ * parameter number above 32767, or SQL_DESC_COUNT set negative, used to ++ * wrap the count negative and make the next binding write zeros before the ++ * start of the bindings array. ++ */ ++#include ++#include ++#include ++ ++#include "common.h" ++ ++#define MAX_PARAMS 32767 ++ ++static void ++print_state(const char *what, SQLRETURN rc, SQLSMALLINT htype, SQLHANDLE h) ++{ ++ SQLCHAR state[6] = ""; ++ SQLINTEGER native; ++ SQLCHAR msg[256]; ++ SQLSMALLINT len; ++ ++ printf("%s: ", what); ++ if (SQL_SUCCEEDED(rc)) ++ { ++ printf("ok\n"); ++ return; ++ } ++ SQLGetDiagRec(htype, h, 1, state, &native, msg, sizeof(msg), &len); ++ printf("error SQLSTATE=%s\n", (char *) state); ++} ++ ++/* SELECT 1 WHERE 1 IN (?, ?, ..., ?) with nparams markers, all bound to 1 */ ++static void ++run_with_params(int nparams) ++{ ++ SQLRETURN rc; ++ HSTMT hstmt = SQL_NULL_HSTMT; ++ SQLINTEGER one = 1; ++ SQLINTEGER result = 0; ++ char *sql, *p; ++ char what[64]; ++ int i; ++ ++ rc = SQLAllocHandle(SQL_HANDLE_STMT, conn, &hstmt); ++ CHECK_CONN_RESULT(rc, "SQLAllocHandle failed", conn); ++ ++ sql = malloc(32 + 2 * nparams); ++ p = sql + sprintf(sql, "SELECT 1 WHERE 1 IN ("); ++ for (i = 0; i < nparams; i++) ++ { ++ if (i > 0) ++ *p++ = ','; ++ *p++ = '?'; ++ } ++ strcpy(p, ")"); ++ ++ for (i = 1; i <= nparams; i++) ++ { ++ rc = SQLBindParameter(hstmt, (SQLUSMALLINT) i, SQL_PARAM_INPUT, ++ SQL_C_SLONG, SQL_INTEGER, 0, 0, &one, 0, NULL); ++ if (!SQL_SUCCEEDED(rc)) ++ break; ++ } ++ snprintf(what, sizeof(what), "%d params, bind %d", nparams, i <= nparams ? i : nparams); ++ print_state(what, rc, SQL_HANDLE_STMT, hstmt); ++ ++ if (SQL_SUCCEEDED(rc)) ++ { ++ rc = SQLExecDirect(hstmt, (SQLCHAR *) sql, SQL_NTS); ++ snprintf(what, sizeof(what), "%d params, execute", nparams); ++ print_state(what, rc, SQL_HANDLE_STMT, hstmt); ++ } ++ if (SQL_SUCCEEDED(rc)) ++ { ++ rc = SQLBindCol(hstmt, 1, SQL_C_SLONG, &result, 0, NULL); ++ CHECK_STMT_RESULT(rc, "SQLBindCol failed", hstmt); ++ rc = SQLFetch(hstmt); ++ CHECK_STMT_RESULT(rc, "SQLFetch failed", hstmt); ++ printf("%d params, result %d\n", nparams, (int) result); ++ } ++ ++ free(sql); ++ SQLFreeHandle(SQL_HANDLE_STMT, hstmt); ++} ++ ++/* Set SQL_DESC_COUNT of the statement's APD or IPD to -1, then bind */ ++static void ++negative_desc_count(SQLINTEGER desc_attr, const char *desc_name) ++{ ++ SQLRETURN rc; ++ HSTMT hstmt = SQL_NULL_HSTMT; ++ SQLHDESC hdesc; ++ SQLINTEGER one = 1; ++ char what[64]; ++ ++ rc = SQLAllocHandle(SQL_HANDLE_STMT, conn, &hstmt); ++ CHECK_CONN_RESULT(rc, "SQLAllocHandle failed", conn); ++ ++ rc = SQLGetStmtAttr(hstmt, desc_attr, &hdesc, 0, NULL); ++ CHECK_STMT_RESULT(rc, "SQLGetStmtAttr failed", hstmt); ++ ++ rc = SQLSetDescField(hdesc, 0, SQL_DESC_COUNT, (SQLPOINTER) (SQLLEN) -1, 0); ++ snprintf(what, sizeof(what), "%s SQL_DESC_COUNT=-1", desc_name); ++ print_state(what, rc, SQL_HANDLE_DESC, hdesc); ++ ++ rc = SQLBindParameter(hstmt, 1, SQL_PARAM_INPUT, SQL_C_SLONG, ++ SQL_INTEGER, 0, 0, &one, 0, NULL); ++ snprintf(what, sizeof(what), "%s bind 1 after SQL_DESC_COUNT=-1", desc_name); ++ print_state(what, rc, SQL_HANDLE_STMT, hstmt); ++ ++ SQLFreeHandle(SQL_HANDLE_STMT, hstmt); ++} ++ ++int ++main(int argc, char **argv) ++{ ++ SQLRETURN rc; ++ HSTMT hstmt = SQL_NULL_HSTMT; ++ SQLINTEGER one = 1; ++ ++ test_connect(); ++ ++ negative_desc_count(SQL_ATTR_APP_PARAM_DESC, "APD"); ++ negative_desc_count(SQL_ATTR_IMP_PARAM_DESC, "IPD"); ++ ++ rc = SQLAllocHandle(SQL_HANDLE_STMT, conn, &hstmt); ++ CHECK_CONN_RESULT(rc, "SQLAllocHandle failed", conn); ++ rc = SQLBindParameter(hstmt, 0, SQL_PARAM_INPUT, SQL_C_SLONG, ++ SQL_INTEGER, 0, 0, &one, 0, NULL); ++ print_state("bind 0", rc, SQL_HANDLE_STMT, hstmt); ++ SQLFreeHandle(SQL_HANDLE_STMT, hstmt); ++ ++ run_with_params(MAX_PARAMS); ++ run_with_params(MAX_PARAMS + 1); ++ run_with_params(MAX_PARAMS + 2); ++ ++ test_disconnect(); ++ ++ return 0; ++} +diff --git a/test/tests b/test/tests +index 5074bca..c8af1ab 100644 +--- a/test/tests ++++ b/test/tests +@@ -63,6 +63,7 @@ TESTBINS = exe/connect-test \ + exe/descriptors-free-test \ + exe/primarykeys-include-test \ + exe/interval-overflow-test \ ++ exe/param-count-limit-test \ + exe/conn-settings-test \ + exe/percent-decode-test \ + exe/dbms-version-test \ diff --git a/meta-oe/recipes-dbs/psqlodbc/psqlodbc_18.00.0002.bb b/meta-oe/recipes-dbs/psqlodbc/psqlodbc_18.00.0002.bb index ae1d603e1d..9756bcfad2 100644 --- a/meta-oe/recipes-dbs/psqlodbc/psqlodbc_18.00.0002.bb +++ b/meta-oe/recipes-dbs/psqlodbc/psqlodbc_18.00.0002.bb @@ -23,6 +23,7 @@ SRC_URI = "git://github.com/postgresql-interfaces/psqlodbc.git;protocol=https;br file://psqlodbc-remove-some-checks-for-cross-compiling.patch \ file://psqlodbc-donot-use-the-hardcode-libdir.patch \ file://psqlodbc-fix-for-ptest-support.patch \ + file://CVE-2026-109448.patch \ file://run-ptest \ " From patchwork Wed Oct 28 04:23:16 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102184 Received: from mail-pg1-f178.google.com (mail-pg1-f178.google.com [209.85.215.178]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36050.1793161489299839509 for ; Tue, 27 Oct 2026 21:24:49 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=jeMpV6Vo; spf=pass (domain: gmail.com, ip: 209.85.215.178, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f178.google.com with SMTP id 41be03b00d2f7-cc4aa0246b7so318263a12.3 for ; Tue, 27 Oct 2026 21:24:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161489; x=1793766289; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=dfAWJji5B93Z81VjOHA1zXK6H/EHUFsw2F280LxpAfM=; b=jeMpV6Vo/DGBE7ZJbf0s6s7r7TgbTP2oQ/EjOADhHjkfaHQuYuBr+L6HNKue03Ds7h 5YBCdipsvU35w3jZWdegWqh62By31sxkD+nOROCj0AfYtV/yhItRBPCp2EB6jd6+SKL2 OU0iD/lskbBjKJg9jktA7U6TkHz2Tu5kN99pMEVbCsdmd2mFTjvII1PYuA1r9teYnYgc KP4KxNHQEq9WxoG79dlzutJSfWq5xkmmrWFdpj3qIhr7jB34I6KKBHWUXt8Gz8qFVdM9 tMJRnIOEO5N/0Y5KWWEB72FwMTGKMD6Mz9iFucyXyEt3cgkTYllr0PxXYkNZnuTPZ/nF E+6g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161489; x=1793766289; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=dfAWJji5B93Z81VjOHA1zXK6H/EHUFsw2F280LxpAfM=; b=iYTUi3MRUEBJ1ugqj+R/m4kD8XVtYeBJ2HwA0+RxYR8DIPhIWtP5yGgAbcOju2A2WG 7Fp1T2ob9bgtZGDxNf6GkcFOL54CuKeEb9yVBhz3at7KpKXyXgj15BCcEpeJB3a90luM 9GzjEbnHqEflCI5/mZUdJtn/Vz7DjNrozC2ip4UG44c+UpjBvt32l/vC84XgLPwDFa1I kd695kYS3f166ZwItPp4FUhDQKEj64yOodDicB4km/iu3JNPray92XtwvLNeE6gBdqU/ a2/WhKoh1IcZlCjxWRL5PpNUhw7w/19IZlHMnsYFouLwT3Jiv5m+Q9gnru4nhMOBtpW7 CbrA== X-Gm-Message-State: AFq9FYKBRxa95nx1N0Nm+X7Gki4vUxXoVtvehNNJBCAQfvhCrcwxYziH pDoG0/Ypfr2ywK7rrKxo+2WjDsldWRLqlF6keSo8N2h3Rven+3smQP4YIc44cQ== X-Gm-Gg: AYBFou1MI8gAnlFCu6HZ0PUFuySzMq894OhN08ktbDOrjkw8ACMSsnVwt/M2ADUCZ8o tzx7EvbYTqmb4lG62fPAtPhAY2XKIol/oX6o/XzzjkkkJ+zrgjbMZQSzYF8yWpzZKqlTGIHHQl4 zc5AfM9Q0QpSI40hE9vmP+ugx3/Qim1z4kLtXbZs8VULAEOH7U/FvckoS0lf0fQWmm+GPkucpZd Hzf058vj9tXhI3XawPpHCaEad+h2oSBMYU8xuu4T46yybCqF6VYxwv+YEXdCpSrMLQ7OYlydZ2r RVWMzKDYMeGek7jDiZRXNk5HfQYzmqioOXAvzDPnVKA3VPZsvvVGOwmInvCAUEG9+8jJqyBo4U5 88Eh4Duij/KCpXlRIUeQB26LqS8Da72jLXoUTE8lJ6ZDfcyFFcqZnWrjhHNtYgA7RD9ZCMWrJIQ A8Vnc1RaLrsmvGuaWXfZZn1NZN3NqQOVIKiPWRsbrfo/JZTub4rrRMLP3xsLc1S0RaWYeQ8EncS tlELjcQdHTxk32Oi22nCtcea6T8+YAVpC7+dw5FJOnwyITtYMgBoFkAv5bGmpWwBUjUt5j9pa7A s9NtTd9i+pJ2HBltB/DsFkfJXfQWrxXAMWhayVK+z7LDYAaC2HqR1CCvYErlQA== X-Received: by 2002:a17:90b:270d:b0:3a8:195f:186 with SMTP id 98e67ed59e1d1-3ae581568d2mr777080a91.42.1793161488630; Tue, 27 Oct 2026 21:24:48 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.46 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:48 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 18/60] proftpd: mark CVE-2026-53994 fixed Date: Wed, 28 Oct 2026 17:23:16 +1300 Message-ID: <9771015a7d3dedfca881ce6e10f3f5aee99146f5.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:55 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131570 From: Ankur Tyagi Debian[1] identified the issue[2] associated with this CVE. Changelog[3] confirms the resolution. Details: https://nvd.nist.gov/vuln/detail/cve-2026-53994 []https://security-tracker.debian.org/tracker/CVE-2026-53994 []https://github.com/proftpd/proftpd/issues/2115 []https://github.com/proftpd/proftpd/blob/v1.3.9b/NEWS#L35 Signed-off-by: Ankur Tyagi --- meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb b/meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb index 81a7094359..5c194ebb23 100644 --- a/meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb +++ b/meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb @@ -26,6 +26,7 @@ CVE_VERSION_SUFFIX = "alphabetical" CVE_STATUS[CVE-2001-0027] = "fixed-version: version 1.2.0rc3 removed affected module" CVE_STATUS[CVE-2021-47865] = "upstream-wontfix: it is not a vulnerability but inproper configuration" +CVE_STATUS[CVE-2026-53994] = "fixed-version: fixed since v1.3.9b" EXTRA_OECONF += "--enable-largefile INSTALL=install" From patchwork Wed Oct 28 04:23:17 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102185 Received: from mail-pj1-f48.google.com (mail-pj1-f48.google.com [209.85.216.48]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36200.1793161491289255522 for ; Tue, 27 Oct 2026 21:24:51 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=b2yXFiFz; spf=pass (domain: gmail.com, ip: 209.85.216.48, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f48.google.com with SMTP id 98e67ed59e1d1-3ab41538192so433653a91.0 for ; Tue, 27 Oct 2026 21:24:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161491; x=1793766291; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=wWghLus5FIsI1p2bO0m9DN1k5gCt8m3ix9byWCCur2o=; b=b2yXFiFzogLx0dg28ccEFjx19utObJLuTxoYWcEkfb4QFW3/b21bz4TGm1u1aczOSF tNAEHsQaV/pwCkMDERdtKYuq8SRebBpvidNVbNYum1jFZkWpswagN5PMyvkSqRejr2HZ XYwP8UQTy/TyTwyMXsZaK0uKfbOVHvC05K+01Dm8vVddytJ5FVTZRQcWuSCFYB/vVMvX YvbW65xAjVEh75x26CpT4MVejq9eFhHz5mF8zV02BeEOeCT2Xmr3Aw0bI6Ohx/2ewUMc 4/NVqMB9R0jJb8RqgH8DVPGdth+TdikCSQXmFnBTgKAWlbAthnpeixNYS4oyrt/nyzil 8Ymw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161491; x=1793766291; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=wWghLus5FIsI1p2bO0m9DN1k5gCt8m3ix9byWCCur2o=; b=1yCWA0qCkJLhD4QaZItXzX9cHcqERS4gjpXgKiietUHgS5RqMOyGq8WcFZ9DbOYsHT 84XbIjomMhRWxTzL0HyaLGw4qUiEU8iVoh90g/Sr26PoKomdYyFqaZs9PU8a/SyF8QVP IZSLeeWqNN2Boolr67nNKiQIcDLEx3X6lFJhhCGbT9Ow1WO76ABTXpkXSIGMKeoEdOzY u2dXl5IDEz49EQcuoRpuFeBOVC1gejhxllnuA5vbYnGcBKDDr9fan6+rQZ8eEaE1S4vF HaCz/tjGK6+XAHFd7G5CRhaO5AJs6xZBj7Gf5TUt1rblRN2BpXyen/PLGlaBhFedpciI +2VQ== X-Gm-Message-State: AFq9FYJF7SbzslliLC1OVQPEGC7y2xVRUPejzCGwBU3B0f6cohLdzruX iAHh3GLyvf9LZmByU6k4+5yUWq5opmui/YCBRL2q6JOaK2OYpTrxfMz8izmnmw== X-Gm-Gg: AYBFou00iLWUBXiI0pnBPDlG62JZW9XEZMnzbdppVo8I4qXW6VkE2OCtPOIZMgcUvZs xjnp6sRsmLEUC9Ij45rYilUwJtBTwHJU/n2Nsv9LnWbRTgLz/QpfAuiU2/41Zp9jOupPQFQf+uO 7zsyYgWYReaveOVzjxMYBSrNqS9O5rk0pqkVsidwBEVd/S1ojcNk8bXrIyuqbTv+sphl44PvMSl Ff04ITphrjPQlsggo1lzSfr5E0GcCOPYay95Go8X3eiTqyi9l7Lx0cLfNUVXnZeCewJbVeLTFQd D5FAqMe3d0bo89SkNgS2aYja17PYse34FBy9rtzvVQ36/YtPO2swLR8Vv9k8uMOaG+Zc7SzDJoD XaObWesCHIzwWEgi2BrVwd483Lt9pK2Nfk3XcUowEgyTusKM9oMHijH0+eAvHUGEJ0fP70WJtSp 3BaHz5oIGTU/3DH7t7+B7dw4oQjaOYKcHbW7Cv48dm799KdrorzEzHd5Hp/boYwezSv3eTaZdrW ynf2d4C7+bHp//dIDz5MIb1p2v2jge7c7B17zXXXwYbdBpz+eDSipUsMtEC3KipK/vYfIgWQUMo SvhJtrMYDcuK0Z/Y+mSM4/1E0c46K5RNq8VTactH3nh7unBjsHMcf8syG25DOA== X-Received: by 2002:a17:90b:4c:b0:3ad:13fe:41ba with SMTP id 98e67ed59e1d1-3ae583138fdmr841783a91.52.1793161490704; Tue, 27 Oct 2026 21:24:50 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.49 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:50 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 19/60] postfix: ignore CVE-2023-32182 Date: Wed, 28 Oct 2026 17:23:17 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:55 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131571 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2023-32182 Signed-off-by: Ankur Tyagi --- meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb b/meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb index 99a77dd6c3..fe0dd95994 100644 --- a/meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb +++ b/meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb @@ -249,3 +249,5 @@ FILES:${PN}-bin += "${localstatedir} ${bindir}/* ${sbindir}/* \ FILES:${PN}-cfg = "${sysconfdir}" FILES:${PN}-dbg += "${libexecdir}/postfix/.debug" ALLOW_EMPTY:${PN} = "1" + +CVE_STATUS[CVE-2023-32182] = "not-applicable-platform: this vulnerability is Suse specific" From patchwork Wed Oct 28 04:23:18 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102186 Received: from mail-pj1-f52.google.com (mail-pj1-f52.google.com [209.85.216.52]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36051.1793161493910221067 for ; Tue, 27 Oct 2026 21:24:53 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=NB/eysYU; spf=pass (domain: gmail.com, ip: 209.85.216.52, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f52.google.com with SMTP id 98e67ed59e1d1-3ac451e128cso404661a91.1 for ; Tue, 27 Oct 2026 21:24:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161493; x=1793766293; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=NWHSEGhn65ZHQj4gikc3tmOBP0zoM5i3QBpymrh2M/8=; b=NB/eysYUK5KpMiU3Lizg9bWw7CgxVeyKlWJEqQ/ymdFSUSg3j0oyfyu9jFBDSaXJwo OAprTCiLVIgbTHbcW9sY0FFKN0QRlx2N5+Bw/PKz/I0UVYbP30Ubuvt2AHAK0zjFPwtg be8JHp3kAkgAlVcbbssQ8OqtLWuHt6gZwLQbh5MBrF2rndUC7PMpznP1hnY1TkHP6mXP F8b+bUkdSdTrtE1auAPVXCWhiYq3dMwgIgf5FOLIBZf/1hQv/AS/RirMN/hr1gcoTc31 aXYBHH57DwevvNzagsRW4K0qqIpaqDOhsCoBGdEJYB1+mbY856LLc/IcwiAHO5KsPlt8 3vdA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161493; x=1793766293; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=NWHSEGhn65ZHQj4gikc3tmOBP0zoM5i3QBpymrh2M/8=; b=m1FcAmezmo01DIuXRCD6F4LDT3yl/6Smk+7RjCPx5JAV4+9bkYG/QQR5HOCkVkhMpD 7M/s3DBZqJcKxiXePxD2lOnoZTFx7WYJSgCFj8BL/n6P/AFFZ7DjMwDgw+19uCsQu31I FOaamVq53qDjnDf7sY+S0CRcJysyNwQkwlelebiL9ywgc4FEqhKLUqZX1n5a38exLt/Q 3qwrYZRvBWYd4tB+mrHVHgFA0FNV/x20z2f2rLA7utu1U+jUjIX46at5tQ2hvevvQw7h +7A9apjewJHjc7l5h+3AHiVcAcnVr4TMTDTvPqinhk/3RiXpTHcHn4HaAVZfox6TluD1 boeg== X-Gm-Message-State: AFq9FYK2r9kz85k/HsRjoZq9Qlc7ssjLnIEQUe3apEPMW8gUjqmIKPEt qmfw03fK2QLsiyI4OWa7S4biRGR+oqS3PgiB3FUFNds8hhJ75BQ0fun6DamrUQ== X-Gm-Gg: AYBFou3FDAyaznvFLjgOPZl9LX23W0NUDt/haEVxOa6LdF+2zFyIErzZHH2lMNBN5rI xlJIIijZX9cf5oOmzqVG2E2dw1P8E9z6pBqxoD5pReqZp+Y2y6MlC1g+LmzLGiXBJ0GplA/yfzi xQmUxjKGJ6xKXcFyrRy1+uUGgArtUzId0NwAEj+tDLQFvleByHY3SKxjmGvHTlMRpmroDFP/zn+ vOB9h6jdYCnFHdX3rYQk6Rio8vbzQ9nX4CasPt60lhDEtmgKrxQiz+Z/+EQzpzEbBr2o6IbYTXo Y13GsOECwpfzsKrQE+bLB1NBiaPANSEIAJv/GOd5UkXJGpOl72wa23xPIx99XABZ52QawvhxCuE rNMm8ZczeRjngK5oyPKipnmESicHBKDjUsw7SBoqtw5uXyzh19TJh3WOABdDU1AbCdkN19HdA1X kdD/DE7kAqGKBpT7HIPNtvHIN6vHhpaVWU67MNzW7/6FSM+hCPlWyRuV1XfTx986htT3vCOsiff S9X5BTA6ynLUq4hn/V1lhtaJ4uqnZ6iKrlo7Z6ILeFfLdKMusNkXJ9Rl3vyqLwaju35czKCODPQ b4cTl0W8oczk6131ucrGxwltT4YNwLzyRXQbgRifOBz9Rw6NAB9juD2Oebb2GQ== X-Received: by 2002:a17:90a:ec90:b0:3ae:2961:14db with SMTP id 98e67ed59e1d1-3ae580af9aamr880409a91.21.1793161493177; Tue, 27 Oct 2026 21:24:53 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.51 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:52 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 20/60] poppler: patch CVE-2026-102621 Date: Wed, 28 Oct 2026 17:23:18 +1300 Message-ID: <435cd16e9bdccb260aa7f9d248869dc2334b733b.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:24:55 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131572 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-102621 Signed-off-by: Ankur Tyagi --- .../poppler/poppler/CVE-2026-102621.patch | 40 +++++++++++++++++++ .../poppler/poppler_26.08.0.bb | 1 + 2 files changed, 41 insertions(+) create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch diff --git a/meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch new file mode 100644 index 0000000000..823c3a33db --- /dev/null +++ b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch @@ -0,0 +1,40 @@ +From eaeeb2fe58aad490bc82aa33d75217dead0dd0de Mon Sep 17 00:00:00 2001 +From: Albert Astals Cid +Date: Sat, 8 Aug 2026 15:02:27 +0200 +Subject: [PATCH] Fix integer overflow in SplashClip::clipToPath + +Issue #1763 + +(cherry picked from commit 323c91036d99926a8b90dc14329f7b40aece22f8) + +CVE: CVE-2026-102621 +Upstream-Status: Backport [https://gitlab.freedesktop.org/poppler/poppler/-/commit/323c91036d99926a8b90dc14329f7b40aece22f8] +Signed-off-by: Ankur Tyagi +--- + splash/SplashClip.cc | 6 +++++- + 1 file changed, 5 insertions(+), 1 deletion(-) + +diff --git a/splash/SplashClip.cc b/splash/SplashClip.cc +index 78249652c..b096beebd 100644 +--- a/splash/SplashClip.cc ++++ b/splash/SplashClip.cc +@@ -23,6 +23,8 @@ + #include + + #include ++#include "goo/GooCheckedOps.h" ++#include "goo/GooLikely.h" + #include "SplashErrorCodes.h" + #include "SplashMath.h" + #include "SplashPath.h" +@@ -211,7 +213,9 @@ SplashError SplashClip::clipToPath(const SplashPath &path, const std::array X-Patchwork-Id: 102187 Received: from mail-pf1-f172.google.com (mail-pf1-f172.google.com [209.85.210.172]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36201.1793161495995439202 for ; Tue, 27 Oct 2026 21:24:56 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=xbxN1Lqv; spf=pass (domain: gmail.com, ip: 209.85.210.172, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pf1-f172.google.com with SMTP id d2e1a72fcca58-8a05e3f0d23so325774b3a.0 for ; Tue, 27 Oct 2026 21:24:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161495; x=1793766295; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=lJ5hTX/SKOeCIJEnFOKGcFMzm8eZxlRxckBhSZlXEqc=; b=xbxN1LqvdmKlb4vzQ2+uIYYyqHC7RYMg3dZMfd6Cd7WUyaCaktBgP0PvMkf2bhlS7b y89eCWpZVfp/wRXaIrkcwSOf/T/d1I21uYPlDxJg9H0gCEMEsdeafSw900IlmrSCnilo ZFYBr9Fz1xAgv5ffmIlD4UePJprJjYWfjjDYdlNsCR+/xAaD54szwViIzOkp+qacMzgA jDkYj6VrNo0DT9BFYS+GUYdrQDyJZm5WXpse0ZpRs8CVOKhPaRegcFi6DyVzbF1J1MDp 0xLgC+IXuYD466+aCGMZD5p73bE0B0omJfOG249dYLdxLdtymsUP5qi2EVBsx3xzOKLH 5+rw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161495; x=1793766295; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=lJ5hTX/SKOeCIJEnFOKGcFMzm8eZxlRxckBhSZlXEqc=; b=B08yF/4Y/PvrEN/OMkUaC/InHcCnxdjxBdUci9ZZP1udAg43EXJGbJH/skUKbF6D/o poRqRuaBc5aar+BRdYvAE88dkOuoHmsXrTcV1ru1lugRdJoS4lGgcrbON00oEz3BBXgy 7/F2kUZNg5VXkCmn9O3lHZpos704p4jA8+1g3liXmGsbfHz2RSIQSlfUx8Wi4g9TAb5D c0OAhRbT2ppKMjeI2cGiyL0Qyne5QH6PZqvI/yUtmLVs0xfY5bRd7UvDhsRqc6O49bmP bxmevej7+Qsc/q8yygoF3tIxossE1AEDJ+yidOuperb73I70zI6W1n9WatiFOhtriGNA jBew== X-Gm-Message-State: AFq9FYIy343ewDzDlB8JgTmruAU7YLoRAmZDodyG1/E9FwkZl05aYEx8 NvvHrnSW4yeqbhrSm0cjAvOZ6iPOLueCx56vWCs4rXCfW17YSVDu+2ujamIl+w== X-Gm-Gg: AYBFou2PnFpfcZ1mkqmePBEmMdHNDaNj0AvXr4YtN0RifE2JPu3/T39aaQqEzPbqVdR qgn4Wg7KaKyM6Z1ChpesK0Qlx0tfsyLDVfQwIfMrMpt2E0Wnhe4iqkU0HM/z+uLKDKxfBTpHnBR 2KhueaVWDBFHHi6GznmmoUcGXsupiKsB89r2HPo+CtEckdz7Ay9eBx9zD6qF1DDLPuTYXePWms4 x+HRFt5x5cVeiw8dr3WdEcD38p5/XWAmK9S3ecRvh7NRGQQO+quuTL2Bf+CTFyRHTKVYHYEnZis yuwDh0hfpbnJ41yZYDkUY9NUYk5u1rbAG+sd1bRoTw623SSmmbbBUvlL2fp1iEwCQl194pLJxSd +k+KqPBBTVYjFPZNvB0PjrWdXEPgIRIy8vLVTmfgLSOTduus7XG7yYRfMcgV2Mbcm86GYO0G+GW bG/ESURNEFWUJzlkTz8k3agmIRyxmWXB5JMVdIGOkwx0bO3g1oxcBA7AKKZ+j8jr3sO+Oqqp4iX An/jvHJAYVSl1ihOnn+QBtJx3KhULvtAZhVaOjX1tdCto0y7/JFHp5s+jtYC+Bwx8TiPnJjCq92 U4TasXkcifgipBqjcnx1ycVIaG6fBSlaL1N8ygdV+W88g+6pBn97HncpZbNI8w== X-Received: by 2002:a17:90a:c886:b0:3aa:f2c4:12e9 with SMTP id 98e67ed59e1d1-3ae57e07e4amr871103a91.3.1793161495361; Tue, 27 Oct 2026 21:24:55 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:55 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 21/60] poppler: patch CVE-2026-102620 Date: Wed, 28 Oct 2026 17:23:19 +1300 Message-ID: <3e78f34c9bc72f5d0a12bf8ed5bab3c9b0802791.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:05 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131573 From: Ankur Tyagi Also backport commit[1] to allow cherry-pick of the commit fixing the CVE. Details: https://nvd.nist.gov/vuln/detail/cve-2026-102620 [1]https://gitlab.freedesktop.org/poppler/poppler/-/commit/786b06dac87dbe28e85ec7ea3d340810f151c25b Signed-off-by: Ankur Tyagi --- .../poppler/poppler/CVE-2026-102620-1.patch | 145 ++++++++++++++++++ .../poppler/poppler/CVE-2026-102620-2.patch | 34 ++++ .../poppler/poppler_26.08.0.bb | 2 + 3 files changed, 181 insertions(+) create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch diff --git a/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch new file mode 100644 index 0000000000..e85866eddf --- /dev/null +++ b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch @@ -0,0 +1,145 @@ +From b8ce8bb5df02fd3a70f4b34f3d64c88df7089409 Mon Sep 17 00:00:00 2001 +From: Albert Astals Cid +Date: Sat, 8 Aug 2026 15:30:32 +0200 +Subject: [PATCH] FoFiTrueType::cvtSfnts: Move variables closer to where they + are used + +(cherry picked from commit 786b06dac87dbe28e85ec7ea3d340810f151c25b) + +CVE: CVE-2026-102620 +Upstream-Status: Backport [https://gitlab.freedesktop.org/poppler/poppler/-/commit/786b06dac87dbe28e85ec7ea3d340810f151c25b] + +Signed-off-by: Ankur Tyagi +--- + fofi/FoFiTrueType.cc | 42 +++++++++++++++++++----------------------- + 1 file changed, 19 insertions(+), 23 deletions(-) + +diff --git a/fofi/FoFiTrueType.cc b/fofi/FoFiTrueType.cc +index 133fbc45e..e15cfc576 100644 +--- a/fofi/FoFiTrueType.cc ++++ b/fofi/FoFiTrueType.cc +@@ -1058,9 +1058,6 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + TrueTypeTable newTables[nT42Tables]; + unsigned char tableDir[12 + nT42Tables * 16]; + bool ok; +- unsigned int checksum; +- int nNewTables; +- int glyfTableLen, length, glyfPos, j, k; + std::array vheaTab = { + 0, 1, 0, 0, // table version number + 0, 0, // ascent +@@ -1081,8 +1078,6 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + 0, 1 // number of advance heights in vmtx table + }; + std::vector vmtxTab; +- bool needVhea, needVmtx; +- int advance; + + *maxUsedGlyph = -1; + +@@ -1116,7 +1111,7 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + i = seekTable("loca"); + pos = tables[i].offset; + i = seekTable("glyf"); +- glyfTableLen = tables[i].len; ++ const int glyfTableLen = tables[i].len; + ok = true; + for (i = 0; i <= nGlyphs; ++i) { + locaTable[i].idx = i; +@@ -1169,16 +1164,16 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + } + + // count the number of tables +- nNewTables = 0; ++ int nNewTables = 0; + for (i = 0; i < nT42Tables; ++i) { + if (t42Tables[i].required || seekTable(t42Tables[i].tag) >= 0) { + ++nNewTables; + } + } +- advance = 0; // make gcc happy ++ int advance = 0; // make gcc happy + if (needVerticalMetrics) { +- needVhea = seekTable("vhea") < 0; +- needVmtx = seekTable("vmtx") < 0; ++ const bool needVhea = seekTable("vhea") < 0; ++ const bool needVmtx = seekTable("vmtx") < 0; + if (needVhea || needVmtx) { + i = seekTable("head"); + advance = getU16BE(tables[i].offset + 18, &ok); // units per em +@@ -1194,10 +1189,10 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + // construct the new table headers, including table checksums + // (pad each table out to a multiple of 4 bytes) + pos = 12 + nNewTables * 16; +- k = 0; ++ int k = 0; + for (i = 0; i < nT42Tables; ++i) { +- length = -1; +- checksum = 0; // make gcc happy ++ int length = -1; ++ unsigned int checksum = 0; // make gcc happy + if (i == t42HeadTable) { + length = 54; + checksum = computeTableChecksum(headData); +@@ -1207,8 +1202,8 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + } else if (i == t42GlyfTable) { + length = 0; + checksum = 0; +- glyfPos = tables[seekTable("glyf")].offset; +- for (j = 0; j < nGlyphs; ++j) { ++ const int glyfPos = tables[seekTable("glyf")].offset; ++ for (int j = 0; j < nGlyphs; ++j) { + length += locaTable[j].len; + if (length & 3) { + length += 4 - (length & 3); +@@ -1218,7 +1213,8 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + } + } + } else { +- if ((j = seekTable(t42Tables[i].tag)) >= 0) { ++ const int j = seekTable(t42Tables[i].tag); ++ if (j >= 0) { + length = tables[j].len; + if (checkRegion(tables[j].offset, length)) { + checksum = computeTableChecksum(std::span(file.data() + tables[j].offset, length)); +@@ -1298,7 +1294,7 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + } + + // compute the font checksum and store it in the head table +- checksum = computeTableChecksum(std::span(tableDir, 12 + nNewTables * 16)); ++ unsigned int checksum = computeTableChecksum(std::span(tableDir, 12 + nNewTables * 16)); + for (i = 0; i < nNewTables; ++i) { + checksum += newTables[i].checksum; + } +@@ -1325,11 +1321,10 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + if (i == t42HeadTable) { + dumpString(headData, outputFunc, outputStream); + } else if (i == t42LocaTable) { +- length = (nGlyphs + 1) * (locaFmt ? 4 : 2); + dumpString(locaData, outputFunc, outputStream); + } else if (i == t42GlyfTable) { +- glyfPos = tables[seekTable("glyf")].offset; +- for (j = 0; j < nGlyphs; ++j) { ++ const int glyfPos = tables[seekTable("glyf")].offset; ++ for (int j = 0; j < nGlyphs; ++j) { + if (locaTable[j].len > 0 && checkRegion(glyfPos + locaTable[j].origOffset, locaTable[j].len)) { + dumpString(std::span(file.data() + glyfPos + locaTable[j].origOffset, locaTable[j].len), outputFunc, outputStream); + } +@@ -1338,13 +1333,14 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + // length == 0 means the table is missing and the error was + // already reported during the construction of the table + // headers +- if ((length = newTables[i].len) > 0) { +- if ((j = seekTable(t42Tables[i].tag)) >= 0 && checkRegion(tables[j].offset, tables[j].len)) { ++ const int length = newTables[i].len; ++ if (length > 0) { ++ const int j = seekTable(t42Tables[i].tag); ++ if (j >= 0 && checkRegion(tables[j].offset, tables[j].len)) { + dumpString(std::span(file.data() + tables[j].offset, tables[j].len), outputFunc, outputStream); + } else if (needVerticalMetrics && i == t42VheaTable) { + if (unlikely(static_cast(length) > sizeof(vheaTab))) { + error(errSyntaxWarning, -1, "length bigger than vheaTab size"); +- length = sizeof(vheaTab); + } + dumpString(vheaTab, outputFunc, outputStream); + } else if (needVerticalMetrics && i == t42VmtxTable) { diff --git a/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch new file mode 100644 index 0000000000..e41e65ffd9 --- /dev/null +++ b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch @@ -0,0 +1,34 @@ +From ac82c990768a4cb3dd4fd15edb92af97b4ac6589 Mon Sep 17 00:00:00 2001 +From: Albert Astals Cid +Date: Sat, 8 Aug 2026 15:47:43 +0200 +Subject: [PATCH] Fix integer overflow in FoFiTrueType::cvtSfnts + +Issue #1762 + +(cherry picked from commit 245d3c6823377755f2c1d5fdddd010279c6ed94d) + +CVE: CVE-2026-102620 +Upstream-Status: Backport [https://gitlab.freedesktop.org/poppler/poppler/-/commit/245d3c6823377755f2c1d5fdddd010279c6ed94d] + +Signed-off-by: Ankur Tyagi +--- + fofi/FoFiTrueType.cc | 6 +++++- + 1 file changed, 5 insertions(+), 1 deletion(-) + +diff --git a/fofi/FoFiTrueType.cc b/fofi/FoFiTrueType.cc +index e15cfc576..9e280fe89 100644 +--- a/fofi/FoFiTrueType.cc ++++ b/fofi/FoFiTrueType.cc +@@ -1204,7 +1204,11 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const + checksum = 0; + const int glyfPos = tables[seekTable("glyf")].offset; + for (int j = 0; j < nGlyphs; ++j) { +- length += locaTable[j].len; ++ if (unlikely(checkedAdd(length, locaTable[j].len, &length))) { ++ error(errSyntaxError, -1, "Integer overflow in glyph table length calculation"); ++ ok = false; ++ break; ++ } + if (length & 3) { + length += 4 - (length & 3); + } diff --git a/meta-oe/recipes-support/poppler/poppler_26.08.0.bb b/meta-oe/recipes-support/poppler/poppler_26.08.0.bb index f24ca34366..6cfcf3cf0f 100644 --- a/meta-oe/recipes-support/poppler/poppler_26.08.0.bb +++ b/meta-oe/recipes-support/poppler/poppler_26.08.0.bb @@ -9,6 +9,8 @@ SRC_URI = "http://poppler.freedesktop.org/${BP}.tar.xz \ file://0001-cmake-Do-not-use-isystem.patch \ file://0001-workaround-build-racing.patch \ file://CVE-2026-102621.patch \ + file://CVE-2026-102620-1.patch \ + file://CVE-2026-102620-2.patch \ " SRC_URI[sha256sum] = "dc906e68cea698109706ac6aa3d2c9d4512fcfcac42d90b8afcda486d1b9abd0" From patchwork Wed Oct 28 04:23:20 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102188 Received: from mail-pg1-f181.google.com (mail-pg1-f181.google.com [209.85.215.181]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36202.1793161498373583714 for ; Tue, 27 Oct 2026 21:24:58 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=KmZZ7iga; spf=pass (domain: gmail.com, ip: 209.85.215.181, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f181.google.com with SMTP id 41be03b00d2f7-cc4dbda1e5dso239571a12.2 for ; Tue, 27 Oct 2026 21:24:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161498; x=1793766298; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=rjP+9anJ94NPkccl0oefJjMcU12f05O1kBr3oUuSv5A=; b=KmZZ7igaeLaMtAbnitauW5zZJ+ENL/HOE5iiwccvzXjcrT5dqz22SpdrPrnrt9U2Dx oOvuWhinT7MHw7m3bmheG+ynBQ/tbUsErKVD9t8JFihsnYY2gA/HF0sR0cc1qO1W/Ku8 QrCdjBy+xowQYcgOp8KfPdzvxoF2huL6NoM5V+MzqglzhBD4hZLbeVQdOIEklZ6wOaHL 5LL6HrzMneWhtrBrHuo7+lN7FPIkqJgHd8Y9J4rznuwSCoFPCx8XyH9n2GVq18vfTr8T JOM3rXEFKV/jsDexKMuNdj9dq9SGU6rlDQfs0WRSiqYiI/0DdNwrGIdyX+Ac4Y4CyDOM bgBw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161498; x=1793766298; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=rjP+9anJ94NPkccl0oefJjMcU12f05O1kBr3oUuSv5A=; b=hQROUh7IPr95605MdwS/XbMBwHIQqXTnsqtmUGRne4JMHcNnANL9vuoDR/xW6inRwV AdWngd+/ilSmkdhepvvcnOtuEfKoEtGam6TRWswZzTCpzRD9EIfh8V2YKlSxHpdw7Gr2 JAQNtz3veO752QazkMER16FNR+JwuNkbXFjaQ1L7xS1gnzbxW69ij2Ro9LRfACaogc9C wW+RClFp1rQmrgvnXqRcYTlxfipvfVQc3zeztSkyIiH4k8XuY6lIbNp0rTb6usAd0qZm 6VRgkuuFRoEND8F3YCVyn8jMR6+1hZovwCTOOnBYvsbv51zzw2TyKL2YoGOPu4kz+mMd uAlg== X-Gm-Message-State: AFq9FYLZIuggFTyYLKn8Y6m/zzG/tHaCXflgoVSGWutmU+0LtmudA8EP eh64/Ywl0oViuRH/Zs095fkFsgrbo5xig0CpVXK4GjeOSupnf7F0yg5hyjU6MA== X-Gm-Gg: AYBFou1C1GIw+SLpGhts5WLLlJCTNEI8U7W3KBwAVJK3m0l8brUuQ4qnYiGy/d0jQw9 nqbiT0QTH/BaayjAoojR9GkDBWniD0v4Sq/iRRA4eyUOAk5RAMIwBdmhvFMt/n5ZYpiZMM171fp 6Wt8wlKEh/NT3d0ZpDul7uVlNCeSMRqPxYIPr5cwKakP7zeK3dzKoWg5vRLxN0Cys8XfLr1zCQb oIChBH/8bbGJ4kjPb+HErodL1Eb+Wgh1F2CmtDHZNf7n1y3dIEio1oLGyRitHdHvviYUUDPe5Ns m3wGRM53OlszLwkIx3/bqhuBNGoBY8YQ/krcJ9WVx7yc3pZF+VZPzSSNb3Dn9zfAtaZ7kE5ymDG 1pkxiRUWA+zh+gEcqMlqXmGQMeXle0N+xJcBO2o32iVH1Zmswr95ufl+xoVV5QeoiR56sXixDTC JLZCQUHP/UPcr8tsBWJitJCJf58YKrGWvlPPGvpNjIMpQHCb3ELq5eXH2DyrelmAElfbyBZMPYD gSr7O9GYm/NZ7TEyaSXar1Wf8j/fR1awtqLgn+Z/1ZKmf5iIVoOiP+cv1CKzVkcS20d+iyzM7Hh 5FO9MxnJ21QrmjqzMAQ/NUemKguQdXvdO/QgbcEuXbDDrjOgO0pg4nL/954y3w== X-Received: by 2002:a17:90b:2f4f:b0:3a8:1943:cb7a with SMTP id 98e67ed59e1d1-3ae57f60474mr863958a91.18.1793161497616; Tue, 27 Oct 2026 21:24:57 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.55 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:57 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 22/60] opensc: patch CVE-2026-103531 Date: Wed, 28 Oct 2026 17:23:20 +1300 Message-ID: <27b41701a04a46e498f7f3f6212ac2a5e2bc8d1a.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:05 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131574 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-103531 Signed-off-by: Ankur Tyagi --- .../opensc/opensc/CVE-2026-103531.patch | 54 +++++++++++++++++++ .../recipes-support/opensc/opensc_0.27.1.bb | 1 + 2 files changed, 55 insertions(+) create mode 100644 meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch diff --git a/meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch b/meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch new file mode 100644 index 0000000000..22776e525b --- /dev/null +++ b/meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch @@ -0,0 +1,54 @@ +From 4b0f46d922866d9453e3631ff5e0a24900fae8dd Mon Sep 17 00:00:00 2001 +From: wanglanlan +Date: Wed, 2 Sep 2026 08:36:47 +0000 +Subject: [PATCH] setcos: Fix buffer overflow in setcos_construct_fci_44 + +The FCI construction copied type_attr, sec_attr and prop_attr of the +file into a fixed 64-byte stack buffer without checking the length. +Malicious or corrupted attribute lengths (e.g. prop_attr_len > 64, +reachable through fuzz_pkcs15init and attacker-controlled card +responses) caused a stack buffer overflow (write). + +Return SC_ERROR_INVALID_DATA if any attribute exceeds the buffer size. + +Found with the fuzz_pkcs15init fuzzer. + +Co-Authored-By: Claude +(cherry picked from commit ad730304052937c32b4eb489a06835ac6123632c) + +CVE: CVE-2026-103531 +Upstream-Status: Backport [https://github.com/OpenSC/OpenSC/commit/ad730304052937c32b4eb489a06835ac6123632c] +Signed-off-by: Ankur Tyagi +--- + src/libopensc/card-setcos.c | 6 ++++++ + 1 file changed, 6 insertions(+) + +diff --git a/src/libopensc/card-setcos.c b/src/libopensc/card-setcos.c +index 0ebe7c34f..8c7baa3e4 100644 +--- a/src/libopensc/card-setcos.c ++++ b/src/libopensc/card-setcos.c +@@ -218,6 +218,8 @@ static int setcos_construct_fci_44(sc_card_t *card, const sc_file_t *file, u8 *o + + /* Type */ + if (file->type_attr_len) { ++ if (file->type_attr_len > sizeof(buf)) ++ LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_DATA); + memcpy(buf, file->type_attr, file->type_attr_len); + sc_asn1_put_tag(0x82, buf, file->type_attr_len, p, *outlen - (p - out), &p); + } else { +@@ -271,11 +273,15 @@ static int setcos_construct_fci_44(sc_card_t *card, const sc_file_t *file, u8 *o + } + + /* Security Attributes */ ++ if (file->sec_attr_len > sizeof(buf)) ++ LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_DATA); + memcpy(buf, file->sec_attr, file->sec_attr_len); + sc_asn1_put_tag(0x86, buf, file->sec_attr_len, p, *outlen - (p - out), &p); + + /* Life cycle status */ + if (file->prop_attr_len) { ++ if (file->prop_attr_len > sizeof(buf)) ++ LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_DATA); + memcpy(buf, file->prop_attr, file->prop_attr_len); + sc_asn1_put_tag(0x8A, buf, file->prop_attr_len, p, *outlen - (p - out), &p); + } diff --git a/meta-oe/recipes-support/opensc/opensc_0.27.1.bb b/meta-oe/recipes-support/opensc/opensc_0.27.1.bb index a1930744ea..bcd94dfb90 100644 --- a/meta-oe/recipes-support/opensc/opensc_0.27.1.bb +++ b/meta-oe/recipes-support/opensc/opensc_0.27.1.bb @@ -14,6 +14,7 @@ DEPENDS = "openssl" SRCREV = "19868984dc4dc697af6a86d65ab32a1f19a43ea4" SRC_URI = "git://github.com/OpenSC/OpenSC;branch=master;protocol=https \ file://0001-Changes-for-OpenSSL-4.0.0.patch \ + file://CVE-2026-103531.patch \ " CVE_STATUS[CVE-2024-8443] = "fixed-version: this is fixed since 0.26.0" From patchwork Wed Oct 28 04:23:21 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102190 Received: from mail-pj1-f48.google.com (mail-pj1-f48.google.com [209.85.216.48]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36203.1793161500399092827 for ; Tue, 27 Oct 2026 21:25:00 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=Z1XEunuo; spf=pass (domain: gmail.com, ip: 209.85.216.48, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f48.google.com with SMTP id 98e67ed59e1d1-3ab2cb8d577so472268a91.1 for ; Tue, 27 Oct 2026 21:25:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161500; x=1793766300; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=stkMjPhXPiD4icmfR7fy1+pxA66CHinTvvxhxWi0vng=; b=Z1XEunuosSgavK490kROIPwotirGoTDyJ6KJJ6Cmr4lOD3yYf3FKmscAdpiqLkVMLO cEKaiRhYqBABuDUfR5Fa1raFCzdpx54E4rFiUF06rYvWIijjznY0SCbIadK+FvHf5Uta z13bJbccXkDqsPl1BnlraUF9DBJt+btUMwPDEqx4BswawHsWuI6aedwnKSSp8+RqGQJf SB17qqrlhp/c7Tg0JNIjoo8wv/LnTSxIn1QYo3Ky+DA+mCD2yHuotg7Rvksu2uwO0SKD 8XNkoqXaWLGWU+nGszJX/8/UQ3UmFLaJuGSrdCe3u9YQ+qRlVS+ezfoaIOH0eXnL0bDL MgUA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161500; x=1793766300; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=stkMjPhXPiD4icmfR7fy1+pxA66CHinTvvxhxWi0vng=; b=d5bp/jghincNmdIGeBTA/fSpMJpCSAm4IG0uCJLD3D3+yU8GKAOgY0szin7RaAE/t4 3TZQVR6fI7voqzJRjl9OGHTVVsl3K03sDugyCowMI3zphCuq35orrPFysiwL4oFwuwj3 PEsP0Yim4igFbdkXEvOkvQepgzgwo5eYfHNu6CQ6H3lu2F0OcHxWDwg+K+9HEzaN/1ya e7Oyh1Asx8NOW6vVuw0ZOYz9WYMxDUJYU5Gpr2EQylNjxH8WlkHNA/QfslZw07fQPAe2 IDbph/3KukY90lGn1+JJJFD5tl/Jiw/Dsin1aOUI5mrNvZImFNQt+tANIKbUtuBYvulp k74A== X-Gm-Message-State: AFq9FYJG1cTK2e7H/+zLK5K6pubt9+5FARcDY9VycFhC7OovOKq86J6b 15ZSMhwG+9FNTSzgUlG3PtDaVDHqQX9Ghj1Y0sXEp/5ZVXunkCEeQQVp4gpoUQ== X-Gm-Gg: AYBFou0OLDn9zDUa6pCoCA4xJ7GB2fYEm10LwOJxA5jbz27N9UWg70u+MkM4J8tuWsP thdQfgyXEryS+75otydgUHJB8rzGicwcHtyOR6fvCQTyd4Yne+i5d+mlBAmeGc10j0VbM0gvYyq aiLAjmOFUC9bTTrfkNVf9qM6M8vWOjVBcu7qNH6wUGcOCNBAFfM1r4IbyyMvOtAU4NDmn4BnJ2J gYBRK4eS/C1G2uv/zbWL3prCgzW2EonH5Uli5kQtszFNn2ngvMq7QUlQipx+2vvcw0GY+BvXNN2 Hhu+wDSCOeEqY/SdVn/Jv3I8gEgIzBK0+DCrVY6ZN+XJ8Rnk2mtzE4bd2AJ7IjfjX+XTUjtWA3Q AlrHW3W1/e+cbf1ZfGkpZngP2xGychbZJ2XJFFbAia8/Xy+poy2CDnvbqhDblZCb8b7U/LNBDt/ aTyv+psHtSxiEqA2ECNXLOcEd4efaMfq9ZAK61ujPr0TvExaDoscZTmkeNVNDOVmUfAuaVwzmkE SWKWcAwd3AyNl6qiQ4xyoUU4YJcCX5kHM0SwEjm3dqsLf4gOAZhg/6aXYHh/e2EVREfjpipJSJM hDnMfJNwHrC1cZ/CZT33SCBrUY3Bf6srapL1anGAtPkte0FG3nGOPlvN6jPnTc+Vpzj/prS9uAj jTKdWTzIinw== X-Received: by 2002:a17:90a:d008:b0:3a0:ca1d:b40d with SMTP id 98e67ed59e1d1-3ae5814119dmr1044780a91.55.1793161499699; Tue, 27 Oct 2026 21:24:59 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.24.58 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:24:59 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 23/60] pjproject: mark CVE-2026-26967 fixed Date: Wed, 28 Oct 2026 17:23:21 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:05 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131575 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-26967 Signed-off-by: Ankur Tyagi --- meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 8aa7775205..59684ac7c7 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -118,3 +118,5 @@ RDEPENDS:python3-pjsua2 = "python3-core" # and ${PN}-staticdev (the .a files) by bitbake's own default FILES # patterns - ${PN} itself ships nothing. ALLOW_EMPTY:${PN} = "1" + +CVE_STATUS[CVE-2026-26967] = "fixed-version: fixed in v2.17" From patchwork Wed Oct 28 04:23:22 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102189 Received: from mail-pg1-f181.google.com (mail-pg1-f181.google.com [209.85.215.181]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36055.1793161502554780014 for ; Tue, 27 Oct 2026 21:25:02 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=oCGg1PVq; spf=pass (domain: gmail.com, ip: 209.85.215.181, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f181.google.com with SMTP id 41be03b00d2f7-cd5cd8d89a7so276939a12.1 for ; Tue, 27 Oct 2026 21:25:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161502; x=1793766302; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=XxYAX0lCPWv/um9gq489mogC8yAXGqw0/0rlkk/qW2U=; b=oCGg1PVqaeagDzMX84k1ZkcJA8db3XmXSzT2OtYJP/0cayC7yEBlYSk9UqPx6wK9UU 4Nh4UioiWr22QDz0DPU7rWKvRRJIo3TZK1+S0bTztygovbAj5eZKHIpwDdT5e5XFjgLu yHIyRZqKHLxiw71a1noKgTcSDo4uNWRH047u4u2YVqeceJ37MHij6diYFh+UlsgvogHG pLUNzjcKvaFW6moIIzxzcUM/nFFAKhCJ0ii7iF1IxqL18WeuByAhAAkxW1IdM6R+hERM i4l8JJVF7tvE7Ix5dJt/xCG2ADYrVWv1iP62e7BF34I4UZpBto0Jk02h0pgfnY0DBfpn mQyw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161502; x=1793766302; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=XxYAX0lCPWv/um9gq489mogC8yAXGqw0/0rlkk/qW2U=; b=eVoTLbe75ndntU7uleLCQaIKvq4XkyPmfTOMli7wJRusqm6ctO6yGKxzCijTI+E85S /OyQc1bcElJCULTowg6ifk8bEh6zf3rKY1zuTXcZIwJ5KFujC6BjagUD3SL18/yvDSQg FonbuS/DGVk1Ns9yAOsCNaZTWiwOnXM+EyB0ga2+QTdN72YrRQ7V19uMkI/OsWENjUQh pb7vfJhJRvcMolGROi2IeF9GKBCx+YXaWmpTIqwZj1GmIOkIziaD6UCLSi+Zn9dDnAeC AsjgFcCpHNhuDIvZtViO1ULUIoeT5vz+ejGHxW/ZiPKMSlBo87VIJMocBjgO7V077New 4M7A== X-Gm-Message-State: AFq9FYJPJwa7UDckNLRqrIPaAWVZ3MC4SL1B/1HBamcWjq7DCMq0dc+U x+rcSpVxg0PYB/wK2yx7ScJvbn3KEOKyDV8h7ZHFImSbYWYwN+6P8VDAQvw+Sg== X-Gm-Gg: AYBFou1NgYNOYvTVqi4tk03qIQYrrkEXKXDfnlayKK76zWGANnq/Y6Bo9SPJzkBIhxt IYJKnxdLkeTWHYD0zQrttiDOoKCt9hC3B0gCGwVL6SZqaeeeFe5GsLpPfN5zIExisB+wuGOoXBQ LuQsXgAw+9Zd0DHaQVSlxOSU69EIGUk2Vv/e/TWbGtlCg5z6l0NbPpJ5a2XFPIFSTxS69lFii0n 1ofa/sIzOIvQc2nO1fwd2wyY8oOiEmyXOe05bWSVlsPYKZqNcB3fyioWcwK8Jy2A/gk2p1WmvzE UoJdyzxiig/ulQIXfSTvvGZNnTbVAAt2qWfB9/OQ7ZxmYrs8LLUp7lH5+bNz/fEECYiyFn+cr9Y E/xIDS0yHQ8IqGo55+4rMt8XINR7rcm5hzqlQiL3GTx+HonSVB2M3nwkCEX6KVzdXGgWCbbWlvV EDujZXUWe7Z3J4BXCeTBfPR2OC28AWfKY6e7ToBJva1Kq82B6dYlFsvkvqYzF5oHAGtV6zLX7nS iu84muGoqUwUXX5X4qhyZXt9yDoXC1eA06wzfahmSxjBsOe/IkbW8s8SgG/eyaIb2JJTyojBOmP mInZ9z+9Jatp1ajDDnqUv+BpAguyPZEAEK8GRnMwE8l6Pdp5UbPMjaEgOp0fSQ== X-Received: by 2002:a17:90b:1b0f:b0:3a4:967c:6947 with SMTP id 98e67ed59e1d1-3ae580cb98emr872923a91.21.1793161501911; Tue, 27 Oct 2026 21:25:01 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.00 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:01 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 24/60] pjproject: patch CVE-2026-57160 Date: Wed, 28 Oct 2026 17:23:22 +1300 Message-ID: <78f0ee20ccfb85b9cc8477e19bb143110d975962.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:05 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131576 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57160 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-57160.patch | 42 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 43 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch new file mode 100644 index 0000000000..a25ed5a28e --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch @@ -0,0 +1,42 @@ +From b14ebbccf5c228ca298ad11ecae2cedde792edae Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:43:46 +0700 +Subject: [PATCH] Merge commit from fork + +When printing a generic array header (e.g. Allow, Require, Supported, +Unsupported), the ": " delimiter following the header name was written +with two unchecked stores. copy_advance() only guarantees that the +header name itself fits, leaving as little as one byte before the end +of the buffer. The colon then consumed the last byte and the trailing +space was written one byte past the buffer end. + +Use copy_advance_char_check() for both delimiter bytes, matching the +boundary-checked pattern already used by every other header printer in +this file. + +Co-Authored-By Claude Code + +(cherry picked from commit d6a0e7f76611c3a6f530ee051e3e7a622bb1748c) + +CVE: CVE-2026-57160 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/d6a0e7f76611c3a6f530ee051e3e7a622bb1748c] +Signed-off-by: Ankur Tyagi +--- + pjsip/src/pjsip/sip_msg.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/pjsip/src/pjsip/sip_msg.c b/pjsip/src/pjsip/sip_msg.c +index 06c8cce86..cdc99ff9e 100644 +--- a/pjsip/src/pjsip/sip_msg.c ++++ b/pjsip/src/pjsip/sip_msg.c +@@ -964,8 +964,8 @@ static int pjsip_generic_array_hdr_print( pjsip_generic_array_hdr *hdr, + &hdr->sname : &hdr->name; + + copy_advance(p, (*hname)); +- *p++ = ':'; +- *p++ = ' '; ++ copy_advance_char_check(p, ':'); ++ copy_advance_char_check(p, ' '); + + if (hdr->count > 0) { + unsigned i; diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 59684ac7c7..254a2952a2 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -14,6 +14,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263" SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag=${PV} \ file://0001-ssl_sock_ossl-fix-OpenSSL-4.0-compatibility.patch \ + file://CVE-2026-57160.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 28 04:23:23 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102191 Received: from mail-pg1-f181.google.com (mail-pg1-f181.google.com [209.85.215.181]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36057.1793161504812298108 for ; Tue, 27 Oct 2026 21:25:04 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=OsXQW4vg; spf=pass (domain: gmail.com, ip: 209.85.215.181, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f181.google.com with SMTP id 41be03b00d2f7-cd62c570b5dso365217a12.2 for ; Tue, 27 Oct 2026 21:25:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161504; x=1793766304; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=g6tK7E0d6qLxyz1B3ijBarfv9H7o6faRfpNwR0O3znA=; b=OsXQW4vgttCJL7KF+NS55uKx17V2tHtxH37ddvkn8jiPkMDfBx8IyBoI/ZtbxBDgLz uCMPG+hmmWSe/mFe4ySAePKj9mMwuF/W1aVImFIBPOBka2wTE6e2YzNS3NTV6FrP90fl iD4tJbiSQRzwJ7mq4oA5o63KqKlgI5iIWvmIGUUjr2MAs3Wx+i68bqRCGcw0EsESo3Kk gWG0X+KNWUcSPX4jO6pFSI4Wu9doqFLL8YaBtJMB5d0Pa9jsEWNj8+6M7MEHd//RzVLB yCod3oDnubGPq6y6jSJ3NqFhucm0zTdSsJOWAJ3J+8yvlZa6SyQM/z01IkYJpgKBR6tQ rNXw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161504; x=1793766304; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=g6tK7E0d6qLxyz1B3ijBarfv9H7o6faRfpNwR0O3znA=; b=pENlgQ6GtmHL4bOE2AHqNnqbvpviTqUC//GTG41xDrLB3JVUzkI4Lep9iqultfJKML ZFriu6XPhmhEGDe45dd5k6Pzk328COt13YPkebBDy8UffpWxpLsksPfbK/HTjDPLAgxM rty268pPUYmXaB6+FUnyr1A7/X8jrla6926utaQqsviz/OCcjlcnyrx4nDZyZYg4Y3dP qrKDXl7+Zl4QaU7v3LEY8ltN46+EErMLB4zaleTG/sY9zWdZ//wMK7zUqZsnZ+PeDo1W jGALhydbJK80Bupk2r9TMNTBZCEJ89Vy6VJ4Dmf9La/ia6QQQ9dQkwqMKDsqC/dGWO09 tzoA== X-Gm-Message-State: AFq9FYLS8AQNyIHjZ241Fg2TxWfGPoS7r5+HpmMtNcoKZ49a0gYGWfo/ Q0w3Gpgoxiprt4ySMUTH15LQqs1Oy6BExzvlDnl93zbxLaMGSM9lcaF49hyzZQ== X-Gm-Gg: AYBFou2DkqBSYmqBuEsl4eU0/HgDPwsvDHvVw/ZVxgV+8cE0iu+IIRhg5FyL25+jTXv QUI/YKoy8LqVPtSMJJUtzAbvVQE0QplYDswrXeNydYFTLE5xJDDKbDoncxiXku63JkjqCTEoM+N r6qx0aDfY9/NxX2W/iA7Zk24I2DyegJQwuul30PaawMmKBX5Mbo0QeugdjmyM2ygdRjBr+zfg4W ArLRHAKFne9Y0S9laAOQ0t9dHGRK2nTVB6MCKx53SSYjgni3VSJV42bElAw92i0U/+VDP1rjAH+ vCaNloJ0eyYfnKw60M+41kRog+xJaCVfJYG4VmY7tJ3wJz3kvhFh6bbkWuFtD/PovEDR/n1smJo rK+FZUQC3GA1y1s2JcOE6UdUWMFjwqi0+t3ij3yMP4QLIq6KwtTBePhcXFrc1FhsuVnXT29vmnA TI5Y0sG7a2S8fvrOVUqnOu+JkC6G+B2uoucYrfrBgHRuIcdrUBg6nBox+0hHM1D3hu7vWfJH8Ae 17QjwJINEF1HW1hw9ALqshlg8o6/5P8KbAr6dcynDE2Nl7y3cYwbJd1LwT1VmMZPksuq7U/N5tH b/SlbG3O0behaWUpMCJ2Z/Xryv8I+WsOUNIZJM3uGimBA8XqIboBPQRkqQFfXw== X-Received: by 2002:a17:90b:1647:b0:3ac:b2e6:317d with SMTP id 98e67ed59e1d1-3ae5822b42bmr948644a91.35.1793161504168; Tue, 27 Oct 2026 21:25:04 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.02 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:03 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 25/60] pjproject: patch CVE-2026-57161 Date: Wed, 28 Oct 2026 17:23:23 +1300 Message-ID: <371f20419d88f75dd45508451ec014d1a0c94b70.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:05 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131577 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57161 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-57161.patch | 49 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 50 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch new file mode 100644 index 0000000000..3296013efd --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch @@ -0,0 +1,49 @@ +From 656cd5ec76f0178448053a9ca44ce075cd7a27f9 Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:44:40 +0700 +Subject: [PATCH] Merge commit from fork + +Bound the number of Service-Route URIs stored in the fixed-size uri[] +array by checking uri_cnt against PJ_ARRAY_SIZE(uri) before each write. +Previously the count was only checked as the do/while continuation +condition, which does not catch accumulation across multiple +single-URI Service-Route headers, allowing a registrar response with +more than PJSUA_ACC_MAX_PROXIES headers to write past the array. + +Co-Authored-By Claude Code + +(cherry picked from commit acc03b57cef7a7d31b8e1f5b9117437d7e87c591) + +CVE: CVE-2026-57161 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/acc03b57cef7a7d31b8e1f5b9117437d7e87c591] + +Signed-off-by: Ankur Tyagi +--- + pjsip/src/pjsua-lib/pjsua_acc.c | 12 ++++++------ + 1 file changed, 6 insertions(+), 6 deletions(-) + +diff --git a/pjsip/src/pjsua-lib/pjsua_acc.c b/pjsip/src/pjsua-lib/pjsua_acc.c +index f52518a2a..08c5efced 100644 +--- a/pjsip/src/pjsua-lib/pjsua_acc.c ++++ b/pjsip/src/pjsua-lib/pjsua_acc.c +@@ -2278,14 +2278,14 @@ static void update_service_route(pjsua_acc *acc, pjsip_rx_data *rdata) + return; + } + ++ if (uri_cnt >= PJ_ARRAY_SIZE(uri)) { ++ PJ_LOG(1,(THIS_FILE, "Error: too many Service-Route headers")); ++ return; ++ } ++ + uri[uri_cnt++] = h->name_addr.uri; + h = h->next; +- } while (h != hr && uri_cnt != PJ_ARRAY_SIZE(uri)); +- +- if (h != hr) { +- PJ_LOG(1,(THIS_FILE, "Error: too many Service-Route headers")); +- return; +- } ++ } while (h != hr); + + /* Prepare to find next Service-Route header */ + hsr = hsr->next; diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 254a2952a2..4c00c4215c 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -15,6 +15,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263" SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag=${PV} \ file://0001-ssl_sock_ossl-fix-OpenSSL-4.0-compatibility.patch \ file://CVE-2026-57160.patch \ + file://CVE-2026-57161.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 28 04:23:24 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102192 Received: from mail-pj1-f45.google.com (mail-pj1-f45.google.com [209.85.216.45]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36059.1793161507087070862 for ; Tue, 27 Oct 2026 21:25:07 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=r/vl/xCv; spf=pass (domain: gmail.com, ip: 209.85.216.45, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f45.google.com with SMTP id 98e67ed59e1d1-3aded3c6103so291656a91.0 for ; Tue, 27 Oct 2026 21:25:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161506; x=1793766306; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=ZRVxfBMG66IYvt9v2GYY2u5REaEBF5l7eO4Re6W7hGg=; b=r/vl/xCvT7KTFSasC3VYYiBQHsq73+h+U0bD+jnR68uysGVT/z/pCFzu32eHI9rtJb q3++f2lU1/2tQR6eMCyMZsfXQ2VTg2KdRoQVkenuYltzcDZaZMkPxqXeFg5N8cS/JJns LmdGn+Q16XfmTPF0Huci7irv5xT4FNv6Pc7gfg5rBnRVGO815OLvjEtK9dxHLOIy3BY4 FMiQSC2LH6VvGIHn3EgUw/1TXxbOkn1tDb7HDpPZRtbBtdcYcgW9zDIgQDXgUr9H3LUw P+Pvx18vJ1CWmOqmoUotxXpvQ7kcSqEqQdlJenovJgKmhQA8vtzGzNLOh70StLCtpsS3 YBgw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161506; x=1793766306; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=ZRVxfBMG66IYvt9v2GYY2u5REaEBF5l7eO4Re6W7hGg=; b=vxkso5kJCs/554qqrURSLTMVnLVYSkeexdlM7umi+e1uxJdHR6phEkkZk2HXHgFbrd LG/OyZgE+fDrnutGaGPF5TnurW/ByYZLCpzXWUmMY53a2+CCpPCIfn0EyVJeuYDFBYbl Aig6CAIO1qGcNVJn/uqK0g0eArZtaQPJWhRMT0VEQ0+jM9MV3a1uPdqnGKGt13/PJwj+ blbh22MN6tYUu3AR38sc7ntibYJQPfJFItI2iqFAb5Ire4Wy+gkBy8ndSLmLOSVVWXxW qIM58S+0gI3K7kt2vYD51i8hnGJdGFA/Uv9EqvpOas7JwXulwwnx9YPk6+a7tqUTwIpc Y1rQ== X-Gm-Message-State: AFq9FYJc7MitTcIUPy1IePJr5D4xwD5l+/ihTxkwfCuZMhFArWBfXf3b CejepzXQ9lSgh+H6R6z3bO3110ubRCpjdPnXflYQzG7tfBgJQMEcRwf261Dt1A== X-Gm-Gg: AYBFou3LjWohHp42jYOJRUmR7AqULEUe7Y5CL8jNbPUJoWBcr3YH9lbocwRk/tpi/mV c4L0TueSQmtHSarx+VGYIdyHsjLzDcZ6jxXetvcRINJFBkMqu1DpEow+I7bqHQZG4LJUlepRYDR zunHLEbSYNzQG9tp/hTye6eYzAYTbrnBlhzejwc6blcbL/3KzPZJsYe9zHh3u00TCOQdWpQbxtI e3EkxiXEcqGZZYUZ+12pBuRqdsUqodGPYIlu6u+PaK1lwshJD2O6ApxTusPU5R1xCxKM0k/xMWH u4xlC9O+5+JszXtbiXXFQeFW2kyMWZh90Di4XJFDIFOu7Gpqm4Ji1xmodOqyk6WIvk4aIbpHx5m JLLK6P8cj1kdDkK7+PEN2PU9TqPlXTW6vw59gPhx10Eoe/bxd/MdZDTQ0U7/ADppTjEsONpRhra bYXuUgWILPiaTlmHd+pRIGLj4ODOb+RTV6yN2f4znhF1vwz471BzQInX/pm5uEH8LfwnkEREoC1 fM/jQSqVT/qOxb+v3XqAh8RYfdIrRbWWkkvx/eEVKQeFhNvGo43LafitRoODob5G86syALJdYrL rc0uyHMDoUSfEvnUUTT/PdBhXgyziMHxA1li8UUkLumyrZ/oOxHXXZ2YmFb3Hg== X-Received: by 2002:a17:90b:270d:b0:3a8:195f:186 with SMTP id 98e67ed59e1d1-3ae581568d2mr777456a91.42.1793161506402; Tue, 27 Oct 2026 21:25:06 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.04 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:06 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 26/60] pjproject: patch CVE-2026-57162 Date: Wed, 28 Oct 2026 17:23:24 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:15 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131578 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57162 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-57162.patch | 43 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 44 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch new file mode 100644 index 0000000000..85a9394e25 --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch @@ -0,0 +1,43 @@ +From 1b64bfb240731bbf0fc194dec68bb9d9b08a20b2 Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:45:33 +0700 +Subject: [PATCH] Merge commit from fork + +sdes_encode_sdp() in transport_srtp_sdes.c wrote each parsed crypto tag +into the fixed int tags[64] array without bounding the count, while the +SDP parser allows up to PJMEDIA_MAX_SDP_ATTR (68) attributes. Reject +the SDP with PJMEDIA_SRTP_ESDPINCRYPTO once the array capacity is +reached, before the out-of-bounds write. + +Co-Authored-By Claude Code + +(cherry picked from commit a1b707c0c9b0506faf2a8a438b60f11ffd6a6fd9) + +CVE: CVE-2026-57162 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/a1b707c0c9b0506faf2a8a438b60f11ffd6a6fd9] + +Signed-off-by: Ankur Tyagi +--- + pjmedia/src/pjmedia/transport_srtp_sdes.c | 9 +++++++++ + 1 file changed, 9 insertions(+) + +diff --git a/pjmedia/src/pjmedia/transport_srtp_sdes.c b/pjmedia/src/pjmedia/transport_srtp_sdes.c +index 8f98292ba..45038e585 100644 +--- a/pjmedia/src/pjmedia/transport_srtp_sdes.c ++++ b/pjmedia/src/pjmedia/transport_srtp_sdes.c +@@ -478,6 +478,15 @@ static pj_status_t sdes_encode_sdp( pjmedia_transport *tp, + + has_crypto_attr = PJ_TRUE; + ++ /* Bound writes to tags[] by its capacity. m_rem->attr_count ++ * is capped by the SDP parser at PJMEDIA_MAX_SDP_ATTR, which ++ * can exceed PJ_ARRAY_SIZE(tags); without this guard a remote ++ * peer can overflow the stack array by sending more than ++ * PJ_ARRAY_SIZE(tags) a=crypto attributes. ++ */ ++ if (cr_attr_count >= PJ_ARRAY_SIZE(tags)) ++ return PJMEDIA_SRTP_ESDPINCRYPTO; ++ + status = parse_attr_crypto(srtp->pool, m_rem->attr[i], + &tmp_rx_crypto, + &tags[cr_attr_count]); diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 4c00c4215c..f47d661400 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -16,6 +16,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://0001-ssl_sock_ossl-fix-OpenSSL-4.0-compatibility.patch \ file://CVE-2026-57160.patch \ file://CVE-2026-57161.patch \ + file://CVE-2026-57162.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 28 04:23:25 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102194 Received: from mail-pg1-f182.google.com (mail-pg1-f182.google.com [209.85.215.182]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36206.1793161509650831289 for ; Tue, 27 Oct 2026 21:25:09 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=x4JZg1Pd; spf=pass (domain: gmail.com, ip: 209.85.215.182, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f182.google.com with SMTP id 41be03b00d2f7-cd67cc518a6so397239a12.1 for ; Tue, 27 Oct 2026 21:25:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161509; x=1793766309; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=pR3efk9V945RF1Ehnif5g2/34jpUaH2DQHCr2HZ0CKM=; b=x4JZg1PdGe7K40RVABtXY7lXQjTyM8UW7SWi0X1XjGb9rVREHgbJUx8zUaBhMtOdaE 5SMlrP09fmrHnBJCtXb9PJI3V3tthAhZhP8Buud2HgsJ93NBdNC+p8AR5vLAfYfipAwy s6avgRBkElRNH3XnFWcXMBqdIBGw8JB5pVlEPlgAYFXA/XZ4/CiQ+Mr/2yDmTpX4SgTz S4LbUbspErouniPaMJrIFpN5zMv/79Ce3i71IhxhTlbyYqBd/r5owTudmslb2OtvMf2z moQpUwgzSvlCMkIOQoQHWqYBXp0tuUcCfhhyYVJeETsD2mVyfdSYN+5DtgVdyUEj9Q0e 9Fbg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161509; x=1793766309; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=pR3efk9V945RF1Ehnif5g2/34jpUaH2DQHCr2HZ0CKM=; b=UgpSwrfUH4riYWMcWvpk2WNul3Z+L3h7nSm55L/B+rkTAh2io3dVGyNaD3IhsrMbxJ 8VfzjLuJc0Z3Pw/YxnrxiqK85ZM6cwn1az8ag8DWDjrDRzX2LtkElucTDJILib4qg7em ONG2qkC3ID/0/29U2aoPfksl1Kpyi9wWjX9S/EYeRpCoc5EgHhaHZ0VttiFmZnG3xlIr KzZ6t17GkumHZqTg1nZAXaUsmGCxuO+XNAXaffzEpE+2POt3QrrN/Dc1teMbS+wqPOL0 R7a9qHtt188QYbqLIixfWtNFbKoW1APZQHyG2V2saU0m+8IPbKKUXa05U3s5RIBez8Aj uM2Q== X-Gm-Message-State: AFq9FYLC5gpBcNQq6h/0lzRGtyhOMaOwUY0AyRgOvzmu5QtVujCjhY96 GeU0n360RkddYDCjmMChrIPc3sUrVWgNTDMch2vb6Vb7C/UqlNw53ISdS/Ik3Q== X-Gm-Gg: AYBFou1Ko88orN0Yl7uxiEuZZ1EfXBj7KXvbD6HXUwFcjg6lVQUqTVc5VLpYmZG3zNh WxIx0doTi95f150nQzosRquZUzS/yw3zwAVlTHRKHvnHq5ErzIJwJPV4uFJ+dd5UNl0s0TND6IY IsFKjYwxGxjHhKqiQGzQWxARVEtBNai62o9FdVMHO0CkNCcW0HGR2aHL58+0GDRpJeB6idk2qx3 zN/VIjaHm6IyIxnyvy6wdqOw/dUFfYCBYEuhFjLlWSwjBFNh+Jdh1cXR51oDlsehsgBvcsvoliz vHpqJg+66pC8WPVGJQaNYXZljFC9RydWw/0cPqK9tKb3xlj0zKc0fqk7IStKbr4bgg/FN3tW434 1FcASzgLZBNZlNQBxa1hwgmmPR2RIEUfbhRiyk1aN9Rf2aeN6bvdOsZX2FIlbs8uza/cWFKa3tM zvCIjE4xDbNlLPNiGJQEnpSZhVSM+pqqikruw8irBNZkSL0ah2AvI98Z78K/iy4vbhlST9K221f 2OPUDK5qfSUxsPVLYJDbPSRcnwDd9smE4CC2ethHjfTbukF2dOP1xdeaEomrs+oMvcq1caGemYt mMEatxIWOwIwMHpqoJQtH7I3AUQ+lmxE4olmy67QF4kgNDE+ZOVoZ9uiA43WFA== X-Received: by 2002:a17:90b:4c87:b0:3ac:945c:7f69 with SMTP id 98e67ed59e1d1-3ae5836f031mr899396a91.66.1793161508776; Tue, 27 Oct 2026 21:25:08 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.06 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:08 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 27/60] pjproject: patch CVE-2026-57163 Date: Wed, 28 Oct 2026 17:23:25 +1300 Message-ID: <3cc8b60359265c8c6a34242f6c9eb8c3b3c50108.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:15 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131579 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57163 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-57163.patch | 52 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 53 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch new file mode 100644 index 0000000000..7b3c681cb9 --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch @@ -0,0 +1,52 @@ +From 2276d5ff1fe185a6bb51ab741dd5d88e45dbaa47 Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:46:16 +0700 +Subject: [PATCH] Merge commit from fork + +The SAN-counting loop in tls_cert_get_info() (ssl_sock_gtls.c) called +gnutls_x509_crt_get_subject_alt_name() with len still holding +sizeof(buf) (512) from an earlier getter, while the output buffer is +only 256 bytes, so an oversized SAN entry overflowed the stack. Set len +to the true capacity (sizeof(out) - 1, matching the populate loop) on +every iteration. + +Co-Authored-By Claude Code + +(cherry picked from commit c4a151af86fadd16d9480b2603eeb2abf4fb4f78) + +CVE: CVE-2026-57163 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/c4a151af86fadd16d9480b2603eeb2abf4fb4f78] + +Signed-off-by: Ankur Tyagi +--- + pjlib/src/pj/ssl_sock_gtls.c | 12 +++++++++++- + 1 file changed, 11 insertions(+), 1 deletion(-) + +diff --git a/pjlib/src/pj/ssl_sock_gtls.c b/pjlib/src/pj/ssl_sock_gtls.c +index de3d5e99e..68ceea3f3 100644 +--- a/pjlib/src/pj/ssl_sock_gtls.c ++++ b/pjlib/src/pj/ssl_sock_gtls.c +@@ -1018,12 +1018,22 @@ static void tls_cert_get_info(pj_pool_t *pool, pj_ssl_cert_info *ci, + if (ci->version >= 3) { + char out[256] = { 0 }; + /* Get the number of all alternate names so that we can allocate +- * the correct number of bytes in subj_alt_name */ ++ * the correct number of bytes in subj_alt_name. ++ * ++ * Pass the true capacity of 'out' as the in/out size argument on ++ * every iteration. 'len' otherwise still holds sizeof(buf) (512) ++ * from an earlier getter, which would let GnuTLS copy an oversized ++ * SubjectAltName entry past the end of the 256-byte 'out' buffer. ++ * Use sizeof(out) - 1 to match the populate loop below, leaving ++ * room for the NUL terminator GnuTLS appends to string names. ++ */ ++ len = sizeof(out) - 1; + while (gnutls_x509_crt_get_subject_alt_name(cert, seq, out, &len, + NULL) != + GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE) + { + seq++; ++ len = sizeof(out) - 1; + } + + ci->subj_alt_name.entry = pj_pool_calloc(pool, seq, diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index f47d661400..de8c847271 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -17,6 +17,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57160.patch \ file://CVE-2026-57161.patch \ file://CVE-2026-57162.patch \ + file://CVE-2026-57163.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 28 04:23:26 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102195 Received: from mail-pj1-f44.google.com (mail-pj1-f44.google.com [209.85.216.44]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36207.1793161511733583497 for ; Tue, 27 Oct 2026 21:25:11 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=xY3s9D3T; spf=pass (domain: gmail.com, ip: 209.85.216.44, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f44.google.com with SMTP id 98e67ed59e1d1-3ae1b34e0d2so856746a91.1 for ; Tue, 27 Oct 2026 21:25:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161511; x=1793766311; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=my3aHPQ+XKAsKwrHoA/J6cftaiRbxxhRGb8taRcnlyk=; b=xY3s9D3TEpu/vO0iZ7BIJ1lEH9iCH6s5gxjVgHwQjGdWtHOemAn63V5hyJW5USCB/5 wJqSZcP88aPgoHVB+dDGcHjUTWKEPa/v3z55TIcY2vQkMg91XWGEV7Hiav4WIxLgRNcO 4h6n51MIdrvEit7SVgxvNpzGhGcAfVW7EBr7xTcwB/wkw+NjCk7CuQ8JNZiZNqb1BaKK rNbYJzBTehjP8kUxWcPa4yBTuzXhcEjgx+ZK3gnVeIwnOqq8gYoTWeslkq3jIW8wLSLm nM1DFjAwh9hlf1amBN0VNK1HKrIqVWQv5DWK63Bto5jwE+qE/8FB4C2mlYtHr7P+Q5D/ z03g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161511; x=1793766311; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=my3aHPQ+XKAsKwrHoA/J6cftaiRbxxhRGb8taRcnlyk=; b=xZeYg7x1lo/qNkwMVlUd1NZB7fzVrDlu7Qa8coxG7I+0/mE/Ar6lVuyllWSNzmBNI2 OQy+61aixcwjphhVg4OLh76YzVdSoulm31KBv6Gp2sTGU7Qd1nesmiqYu9z6646qVFeU AQWOc1Qix2EgExs/ySArnRDf7WTONBcO+Mrn/gBMD4/fNC5IVRoAzIxIBq7PukgkxXIp g+eMfF60/wgHXFZY3t/dkwP9KmBRwLNSq19PFxQmojv8yzsD8v+k8V3bKWJzsf51L9ft FC75F2v0S6s8pBSw6g6b+lpWD6mKwtuT1iynzaQYvyJSWzpUNsPS/Ah7kitArnleq9w2 BxHQ== X-Gm-Message-State: AFq9FYJzylJIHJtjy7icn8Aiq0/EYtVhoFt/7nwQiuQBUObEGuNhD7Bq Ydm8otNi7AKsmyOx9ht598P4iAjavUHiFywHFDf6pAB3/G6O44giQ1ncr4Vtyw== X-Gm-Gg: AYBFou0B1J1/BfayNT1/70lCLG0XHb+LmhBKC8CazlEk+eZQ4vTvOj7zSNj+gdEwc9c 6h1NjPtdGvavOGRO4WYsH62QT3JV5gfYxARkaPkeQplk/WVCY9paL9u25wPZ4oS7N/BgkuDk4m6 1M5ljhlOq75q5WCmX7gk1mF2brV+jJNFfFO7l/O53sm6mblpBMpK6O9Jwp4Q9QpE+UudhOjMCua v3UrLK4RwicKZYI5UFqEvr/9DM0pgzlT4Lw7ZkXRBXcK9J4y55lLov6hFYqNGEGNg+YpGXgLIuA n1D8DqhQLJG75VQZmV9RGwrkXJmJTSeDklBEzNvYxLKyyG9IlpYvLiZbkfzaAaFPxDsfg3dVyk1 1VwTvq1ai/rYEH4pKM8p303V0HxlvJkYvFDdXQHh9hPbldH6kzMnXu9NcZEXzvxI51AqJXdyvgb N17Vh6+gCStalm2hw81Gu8flr/ln5vayEetF5Zm0HXmeB+EDT6mm7bm7c4Lumrd+klKkbdbbc7R 8/myF/pR29Mamj+4HC2YovanFV+qQsw7FzH2yZrEuQ1Qt3IVLuEnbKtfa3km+mnm1jwF9TxW4+j qx9Cf0Ja4zaL2lqOFFwQrVRqxtp/EbYePjfBWYikzMSglnu6elJNTw58J3/GrA== X-Received: by 2002:a17:90b:1c12:b0:3ae:1593:c1b7 with SMTP id 98e67ed59e1d1-3ae5c8e81efmr215813a91.42.1793161511061; Tue, 27 Oct 2026 21:25:11 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.09 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:10 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 28/60] pjproject: patch CVE-2026-57164 Date: Wed, 28 Oct 2026 17:23:26 +1300 Message-ID: <274e935099c034192a6815a660b6e8ce0ea9ab92.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:15 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131580 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57164 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-57164.patch | 66 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 67 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch new file mode 100644 index 0000000000..0686d681c3 --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch @@ -0,0 +1,66 @@ +From 1160ff3c15cfa79f50d4bc6ce8066854f656066c Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:46:48 +0700 +Subject: [PATCH] Merge commit from fork + +http_on_data_read() in http_client.c grew the response buffer by a +single doubling, which is insufficient when the server sends a body +larger than twice the (attacker-supplied) Content-Length used for the +initial allocation. Loop the doubling until the buffer fits, with a +floor for the size==0 case to avoid an infinite loop. + +Co-Authored-By Claude Code + +(cherry picked from commit 8d5956afab2ede95ddb199078dc19a8ac0114f3d) + +CVE: CVE-2026-57164 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/8d5956afab2ede95ddb199078dc19a8ac0114f3d] + +Signed-off-by: Ankur Tyagi +--- + pjlib-util/src/pjlib-util/http_client.c | 27 ++++++++++++++++++------- + 1 file changed, 20 insertions(+), 7 deletions(-) + +diff --git a/pjlib-util/src/pjlib-util/http_client.c b/pjlib-util/src/pjlib-util/http_client.c +index bd441acb9..d2771d240 100644 +--- a/pjlib-util/src/pjlib-util/http_client.c ++++ b/pjlib-util/src/pjlib-util/http_client.c +@@ -432,18 +432,31 @@ static pj_bool_t http_on_data_read(pj_activesock_t *asock, + hreq->response.size); + } + +- /* If the size of data received exceeds its current size, +- * grow the buffer by a factor of 2. ++ /* If the size of data received exceeds its current size, grow the ++ * buffer by a factor of 2 repeatedly, until it can actually hold ++ * everything received so far. A single doubling is not sufficient ++ * when the server delivers a body chunk larger than twice the ++ * (possibly undersized) Content-Length used for the initial ++ * allocation, which would otherwise overflow the buffer in the ++ * pj_memcpy() below. + */ +- if (hreq->tcp_state.current_read_size + size > +- hreq->response.size) ++ if (hreq->tcp_state.current_read_size + size > ++ hreq->response.size) + { + void *olddata = hreq->response.data; ++ pj_size_t new_size = hreq->response.size; + +- hreq->response.data = pj_pool_alloc(hreq->pool, +- hreq->response.size << 1); ++ /* Guard against size==0 (Content-Length: 0 with a body), which ++ * would make the doubling loop below spin forever. ++ */ ++ if (new_size == 0) ++ new_size = INITIAL_DATA_BUF_SIZE; ++ while (hreq->tcp_state.current_read_size + size > new_size) ++ new_size <<= 1; ++ ++ hreq->response.data = pj_pool_alloc(hreq->pool, new_size); + pj_memcpy(hreq->response.data, olddata, hreq->response.size); +- hreq->response.size <<= 1; ++ hreq->response.size = new_size; + } + + /* Append the response data. */ diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index de8c847271..8e0b358ffe 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -18,6 +18,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57161.patch \ file://CVE-2026-57162.patch \ file://CVE-2026-57163.patch \ + file://CVE-2026-57164.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 28 04:23:27 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102193 Received: from mail-pl1-f176.google.com (mail-pl1-f176.google.com [209.85.214.176]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36060.1793161514208111683 for ; Tue, 27 Oct 2026 21:25:14 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=fAkoSbk/; spf=pass (domain: gmail.com, ip: 209.85.214.176, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pl1-f176.google.com with SMTP id d9443c01a7336-2e987a2ba0cso2895695ad.3 for ; Tue, 27 Oct 2026 21:25:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161513; x=1793766313; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=r3KJ3yyJKfspcu8H365dSee74tV0BXuG6FsNAfJkHi8=; b=fAkoSbk/tc0fZ14ANfszF9F0p2gOIsfAJTqILpTraa6rVhCOds2dqG8UnN7lht2wmY i4PHuo6XdSg1yBxe2JxqFUrnxvXINA7/D1uUrdChmMYFjktGYLjYo4woTVKjr8EalapV JYnKMsiOfd5vq+Y72PAKtjt/a4owMzv6UrhP6Cr31R0g1swraKtrGFwtRlq4yeYWPIcY IM0lJcO7DbVZpxrzMJpzkeiaoGOVIMh5o8IiRafLtBUPoAv24xAAfrmwslcc4WAqHo5u CMpJbFh3KAy0Ba5f8aI1O2+ZciWHesTAX/JR6fgah34GQzQrQtJsaTaMCzQrRKiKO5vk jxVA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161513; x=1793766313; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=r3KJ3yyJKfspcu8H365dSee74tV0BXuG6FsNAfJkHi8=; b=VhR/hG0b+UHxusWGj4oV9g9ZUJiWugzzcG1ZuhpxTVDg9NvVekgrBoGec2loVaj4J2 P85sZqiqYuRtL7jugzSyNDjgp1KN4mIfnLINIBtOwQQYbbwDE/8d9mr+X1QGpqpI4m+U Dkl0wXLldsocn5wUE+ocguN/ZA5gy2uIyi6DYDYkRNnsWt1DGcyM8AN4fC00xB90CwN1 PeNqjSmzTkJrRMuoZbwahcFlN6Z4NbyQtrbOTa27GeXXA3m5ybnvD1W7EG0NEENANQ5c 6cJIsJfsp2bkZAXKlLfNsTkRRg3KEBJ6amY8kd2CgYA0MIX19p5HvltXPqlQl9ytzr1E 6OnA== X-Gm-Message-State: AFq9FYKQ1Fpn27z59U6a7eDx6GhX4bCTdbUVmxfma+NiokNdXqwC2CHv Rq2OPIs3PKNf51A2FVaWgUGiCH9DLV+QHICg2mJzNI2jKjcIGBqpQlEARGZ0yQ== X-Gm-Gg: AYBFou34AXE33k9rXqbFhe6NYUKrj0fHQQgIpLpsY1TBHrfDyUvAFIz04p6euNau3zU 2YLgENPGtMAi8J5Qi5yp4yOfhQmY3eS4WKj59dinOPHU0h+eYsaGeag1+1e8oeGdsEVqKupk4gZ BrsIw+gTsN28h9HP3um7GX+pBaCoA/XqZFI5Wky8mwByHCfiMmRyV2QkHhqnq2nVSECVMOKBk4Y IcUKWbCsaTYotg2FaugXdB6jojxT5FmkzhJDzo5HWXiTqFDzpL8KtFEGr7SvkvwHR8HM/E/+sEA 2RqQVGFz1wKocb1CSM0HoPQm8qkMihHTHOGkFVrF2M+2YEIFPxZ3OP/nczCYh1jjQTg5voYdE14 FIu++rthyCHlzxQq9PAiQ0WIa3Dz06uJrAEFH3e3TL6qfFd9hrxRJpG0Mb+fkzomKrb06LJvuFO ckGbAKuTc3JWiIJMewWpyuzVj0vdMIdavkmmgSjzviTmxcZ07sf0tceE3rqymGd2RSkTRAYg5nM aCRtqCS/Gk9OpsRgwaaQpryhdCxC/rSV0iCVrYhHA9v0INfdgtinLtpuh96dle/zxV5S5E5YkaL 3Y00XcrtIigOARr4OOkvlhTvI/43RfdSfHUAK6ffhdzjIxrpu3eO0D1RzEHp4w== X-Received: by 2002:a17:90b:564d:b0:3ae:533e:7e3c with SMTP id 98e67ed59e1d1-3ae58155bfbmr878758a91.35.1793161513471; Tue, 27 Oct 2026 21:25:13 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.11 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:13 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 29/60] pjproject: patch CVE-2026-57165 Date: Wed, 28 Oct 2026 17:23:27 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:15 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131581 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57165 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-57165.patch | 85 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 86 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch new file mode 100644 index 0000000000..e2d62b0eef --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch @@ -0,0 +1,85 @@ +From 5776ee452296d5277d71e2bb011709adec80a533 Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:47:29 +0700 +Subject: [PATCH] Merge commit from fork + +handle_up_down() in cli_telnet.c accumulated cur_pos + 2*rcmd->len + +history->slen bytes into a fixed PJ_CLI_MAX_CMDBUF stack buffer with no +bound check. Size the buffer for the worst case, clamp each term to +PJ_CLI_MAX_CMDBUF, and replace the trailing unchecked pj_strcat with a +bounded pj_memcpy. + +Co-Authored-By Claude Code + +(cherry picked from commit 628b71638465bacf66e767959e6acbab822eccd6) + +CVE: CVE-2026-57165 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/628b71638465bacf66e767959e6acbab822eccd6] + +Signed-off-by: Ankur Tyagi +--- + pjlib-util/src/pjlib-util/cli_telnet.c | 33 ++++++++++++++++++++------ + 1 file changed, 26 insertions(+), 7 deletions(-) + +diff --git a/pjlib-util/src/pjlib-util/cli_telnet.c b/pjlib-util/src/pjlib-util/cli_telnet.c +index 150727bb5..0a2954bd4 100644 +--- a/pjlib-util/src/pjlib-util/cli_telnet.c ++++ b/pjlib-util/src/pjlib-util/cli_telnet.c +@@ -1141,7 +1141,14 @@ static pj_bool_t handle_up_down(cli_telnet_sess *sess, pj_bool_t is_up) + history = get_prev_history(sess, is_up); + if (history) { + pj_str_t send_data; +- char str[PJ_CLI_MAX_CMDBUF]; ++ /* The redraw sequence can accumulate up to ++ * cur_pos + 2 * rcmd->len + history->slen ++ * bytes, each term bounded by PJ_CLI_MAX_CMDBUF, so size the ++ * local buffer for the worst case and clamp each term below. ++ */ ++ char str[PJ_CLI_MAX_CMDBUF * 4]; ++ unsigned cur_pos, buf_len; ++ pj_size_t hist_len; + enum { + MOVE_CURSOR_LEFT = 0x08, + CLEAR_CHAR = 0x20 +@@ -1149,15 +1156,24 @@ static pj_bool_t handle_up_down(cli_telnet_sess *sess, pj_bool_t is_up) + send_data.ptr = str; + send_data.slen = 0; + ++ cur_pos = sess->rcmd->cur_pos; ++ buf_len = sess->rcmd->len; ++ hist_len = history->slen; ++ if (cur_pos > PJ_CLI_MAX_CMDBUF) ++ cur_pos = PJ_CLI_MAX_CMDBUF; ++ if (buf_len > PJ_CLI_MAX_CMDBUF) ++ buf_len = PJ_CLI_MAX_CMDBUF; ++ if (hist_len > PJ_CLI_MAX_CMDBUF) ++ hist_len = PJ_CLI_MAX_CMDBUF; ++ + /* Move cursor position to the beginning of line */ +- if (sess->rcmd->cur_pos > 0) { +- pj_memset(send_data.ptr, MOVE_CURSOR_LEFT, sess->rcmd->cur_pos); +- send_data.slen = sess->rcmd->cur_pos; ++ if (cur_pos > 0) { ++ pj_memset(send_data.ptr, MOVE_CURSOR_LEFT, cur_pos); ++ send_data.slen = cur_pos; + } + +- if (sess->rcmd->len > (unsigned)history->slen) { ++ if (buf_len > (unsigned)hist_len) { + /* Clear the command currently shown*/ +- unsigned buf_len = sess->rcmd->len; + pj_memset(&send_data.ptr[send_data.slen], CLEAR_CHAR, buf_len); + send_data.slen += buf_len; + +@@ -1167,7 +1183,10 @@ static pj_bool_t handle_up_down(cli_telnet_sess *sess, pj_bool_t is_up) + send_data.slen += buf_len; + } + /* Send data */ +- pj_strcat(&send_data, history); ++ if (hist_len > 0) { ++ pj_memcpy(&send_data.ptr[send_data.slen], history->ptr, hist_len); ++ send_data.slen += hist_len; ++ } + telnet_sess_send(sess, &send_data); + pj_ansi_strxcpy2((char*)sess->rcmd->rbuf, history, + sizeof(sess->rcmd->rbuf)); diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 8e0b358ffe..e7cae469ed 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -19,6 +19,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57162.patch \ file://CVE-2026-57163.patch \ file://CVE-2026-57164.patch \ + file://CVE-2026-57165.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 28 04:23:28 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102197 Received: from mail-pj1-f51.google.com (mail-pj1-f51.google.com [209.85.216.51]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36208.1793161516606881536 for ; Tue, 27 Oct 2026 21:25:16 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=BA5xkp9n; spf=pass (domain: gmail.com, ip: 209.85.216.51, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f51.google.com with SMTP id 98e67ed59e1d1-3ac6794fe45so453705a91.0 for ; Tue, 27 Oct 2026 21:25:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161516; x=1793766316; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=ksQHST4eSfDUcwni8T/B9cuekd3lKyWtQo9c0ZUXCCA=; b=BA5xkp9n5iSFd6kOPF3IWEqfHgrytY3kv1isqReWJ6aSstV3XYJ9oV6oGzCFfdDVjB 07kA/2qOl8OXjDZbb3SbdVnRtimc9xCYI5pbWpxRqdFIzx2cJV068TR3qmsJ1AT0DMaD r/HbA4JIgMrL6iSNs2M9zltKDvuFpvoMHyUC4M5dkHOB/GTfpLixLy7vzbXart5dGIlA itOg7FTrt/ihrnkMO3i4JzGI03aTfXAXDnqNmNCGn6iJANzbAR19mHST0G3i6dZATv/7 6sq3tBVP/8ah6UKY0bEaWj3Vd/7ICzcNbEHfvCpAiO6zLIvivNtLMboZbvvDa2j86xvX YbuA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161516; x=1793766316; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=ksQHST4eSfDUcwni8T/B9cuekd3lKyWtQo9c0ZUXCCA=; b=QprOi9dUjm1Wmlqzrot2WwWhhmaA3crkRqCiJActjdtUv5efmjA4VC1zdyUyIqtZTA cQY7ur/tvpg0Y/i8JfzREATlDzVCWG+Xgs7a7jUhOHB1loW/vl/KxoT2qgzNQBBMX5Nr d6d6M0UCwkFeJInobHbSX/B4GhUPnXap8yKsERfRaqXv+PMDPU0Sg0pcTyHsB7mFvOSj T3jIDez1TEmG4T8d2+4GwF9J8TLQ3gb1DB+U25Y+jShAMvRTRK8y0XO9EKIQI8ZJ1rOU jo6j+M28mCrEWNkP+tWkgfyxZ5GdB2ewcrLQpbXasCIf9M5p5+i7UG/MjnQ6LZIwjzO8 BjDg== X-Gm-Message-State: AFq9FYL7EJqh6y+bhpIh9rxBQcjIMTKTO6+gM2B7FB2g5FegQjk36Ds6 078Cbcj353h/eRDm4OqJkh/yU/d1LLHq8VShq8XwG5ncp8y8QXmsH1XRRHEkEA== X-Gm-Gg: AYBFou2Jvy6vQP59VLz7bptti2zqBhyQBuaA/alSSfBwhyaWfWQnWDpYqmhrlbxizKg nfPV/hO/xjUIN32368y4RbHTOhVwS1oHzbagiKmnuDucf8zVRIoSoT+5ytdMcLWp7B34PwGvUH7 m1zlyM6Kf0TsdRpPcl2i+IGydQQKRePsNm0O7ui8zIhDx/n6WZKjhXw39XH2p9esKLSQD5csSxt Zrrjp5nfCEC0EQ7QgjMb9ulTe3AxqYkf6yg5wVthPTLE0tZn4V6NGNwzb/dztjOEf1DKRCtgGoV //fjncrYa8aYFDu7NQ3aRuhpARQ0uiACvrXG4ihPFTUiKwbO94vg1bOdMavKN7qmF0ShxxaSYia rPwT8MxZ6l5Zs+f8V5U0DQ8vetTroc/IAGkw6XDbEudN7aUpw+c9/EbQzRh0nd445Rp8MdAyFFY oTD+vUutJZiSe32IO8KA7VjHhhVi4yC3neR8pXRWrvayCcnlLHYeTmEMiVLjVMcAsKugVP9zgrh Ksawmr8fnOcpyVfFNFUgKMTmfym2SNjHyCSZL11C/OUKG7TAHyRRqM3nkPKecnxPPQAPxhI4mhR XnfouKgPtoCyNnx8/j2s4HOmy83GmL2TcDr/IYxmPfb3jIUKoSzhsyE3k136bA== X-Received: by 2002:a17:90b:4f49:b0:39e:6d82:dca with SMTP id 98e67ed59e1d1-3ae580a0249mr852256a91.30.1793161515900; Tue, 27 Oct 2026 21:25:15 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.13 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:15 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 30/60] pjproject: patch CVE-2026-57166 Date: Wed, 28 Oct 2026 17:23:28 +1300 Message-ID: <59a6a134d6ff923bf9ee081a62755cdbde2a88c0.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:25 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131582 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-57166 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-57166.patch | 228 ++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 229 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch new file mode 100644 index 0000000000..8311d4c36d --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch @@ -0,0 +1,228 @@ +From d0b42b902bb6ca8a0a1393799db487642d3bf8ae Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Wed, 17 Jun 2026 15:55:53 +0700 +Subject: [PATCH] Merge commit from fork + +* Fix pre-auth stack overflow formatting telnet CLI error indicator + +send_err_arg() in cli_telnet.c rendered the error caret into a fixed +256-byte stack buffer using unchecked pj_strcat2; info->err_pos is +bounded only by PJ_CLI_MAX_CMDBUF, so a long command line overflowed +the buffer. Stream the spaces in bounded chunks via telnet_sess_send2, +clamp the caret offset to PJ_CLI_MAX_CMDBUF, and send the message, +prompt and echoed command separately, removing the stack buffer. + +Co-Authored-By Claude Code + +* Apply the same overflow fix to send_ambi_arg() + +Per review, send_ambi_arg() has the same issue as send_err_arg(): it +renders an attacker-influenced number of caret spaces and appends the +last command into a fixed 1028-byte stack buffer with unchecked +pj_strcat2. info->err_pos and sess->rcmd->rbuf are bounded only by +PJ_CLI_MAX_CMDBUF, so a long ambiguous command line could overflow it. + +Stream the caret offset in bounded chunks (clamped to PJ_CLI_MAX_CMDBUF) +and stream the clamped last command separately, mirroring the +send_err_arg() fix, instead of writing them into the fixed buffer. The +shared SPACES constant is hoisted to file scope. + +Co-Authored-By Claude Code + +* Bound completion append in handle_tab() + +handle_tab() appended the matched command name into the fixed-size +sess->rcmd->rbuf at offset len (the current command length) without +checking that len + name length fits the buffer. len is bounded by the +receive path, but the completion suffix is added on top, so a long +completable command line could write past rbuf and its NUL terminator. + +Clamp the appended length to the space remaining in rbuf, leaving room +for the terminator. Found while auditing the telnet CLI for the same +fixed-buffer overflow pattern as send_err_arg()/send_ambi_arg(). + +Co-Authored-By Claude Code + +(cherry picked from commit 4472a31d77a7506ff175dad5abef490f4e31bed1) + +CVE: CVE-2026-57166 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/4472a31d77a7506ff175dad5abef490f4e31bed1] + +Signed-off-by: Ankur Tyagi +--- + pjlib-util/src/pjlib-util/cli_telnet.c | 116 ++++++++++++++++++------- + 1 file changed, 84 insertions(+), 32 deletions(-) + +diff --git a/pjlib-util/src/pjlib-util/cli_telnet.c b/pjlib-util/src/pjlib-util/cli_telnet.c +index 0a2954bd4..67898fdd8 100644 +--- a/pjlib-util/src/pjlib-util/cli_telnet.c ++++ b/pjlib-util/src/pjlib-util/cli_telnet.c +@@ -680,6 +680,13 @@ static void send_prompt_str(cli_telnet_sess *sess) + telnet_sess_send(sess, &send_data); + } + ++/* Buffer of spaces, used to stream the caret offset in bounded chunks ++ * instead of writing an attacker-influenced number of spaces into a ++ * fixed-size stack buffer. Shared by send_err_arg() and send_ambi_arg(). ++ */ ++static const unsigned char SPACES[64] = ++ " "; ++ + /* + * This method is used to send error message to client, including + * the error position of the source command. +@@ -690,32 +697,45 @@ static void send_err_arg(cli_telnet_sess *sess, + pj_bool_t with_return, + pj_bool_t with_last_cmd) + { +- pj_str_t send_data; +- char data_str[256]; +- pj_size_t len; +- unsigned i; ++ pj_size_t len, remaining; + cli_telnet_fe *fe = (cli_telnet_fe *)sess->base.fe; + +- send_data.ptr = data_str; +- send_data.slen = 0; +- + if (with_return) +- pj_strcat2(&send_data, "\r\n"); ++ telnet_sess_send2(sess, (const unsigned char*)"\r\n", 2); + ++ /* Compute the caret offset. info->err_pos is derived from ++ * attacker-supplied input (pj_cli_sess_parse) and is bounded only by ++ * PJ_CLI_MAX_CMDBUF, so clamp it before emitting spaces. Otherwise a ++ * ~500-byte command line would overflow the fixed-size stack buffer ++ * this function previously used. ++ */ + len = fe->cfg.prompt_str.slen + info->err_pos; +- +- /* Set the error pointer mark */ +- for (i=0;i PJ_CLI_MAX_CMDBUF) ++ len = PJ_CLI_MAX_CMDBUF; ++ ++ remaining = len; ++ while (remaining > 0) { ++ pj_size_t chunk = (remaining > sizeof(SPACES)) ? sizeof(SPACES) ++ : remaining; ++ telnet_sess_send2(sess, SPACES, (int)chunk); ++ remaining -= chunk; + } +- pj_strcat2(&send_data, "^"); +- pj_strcat2(&send_data, "\r\n"); +- pj_strcat(&send_data, msg); +- pj_strcat(&send_data, &fe->cfg.prompt_str); +- if (with_last_cmd) +- pj_strcat2(&send_data, (char *)sess->rcmd->rbuf); + +- telnet_sess_send(sess, &send_data); ++ telnet_sess_send2(sess, (const unsigned char*)"^\r\n", 3); ++ ++ if (msg && msg->slen > 0) ++ telnet_sess_send(sess, msg); ++ if (fe->cfg.prompt_str.slen > 0) ++ telnet_sess_send(sess, &fe->cfg.prompt_str); ++ if (with_last_cmd) { ++ pj_str_t last; ++ last.ptr = (char *)sess->rcmd->rbuf; ++ last.slen = (pj_ssize_t)pj_ansi_strlen((const char *)sess->rcmd->rbuf); ++ if (last.slen > PJ_CLI_MAX_CMDBUF) ++ last.slen = PJ_CLI_MAX_CMDBUF; ++ if (last.slen > 0) ++ telnet_sess_send(sess, &last); ++ } + } + + static void send_inv_arg(cli_telnet_sess *sess, +@@ -765,7 +785,7 @@ static void send_ambi_arg(cli_telnet_sess *sess, + pj_bool_t with_last_cmd) + { + unsigned i; +- pj_size_t len; ++ pj_size_t len, remaining; + pj_str_t send_data; + char data[1028]; + cli_telnet_fe *fe = (cli_telnet_fe *)sess->base.fe; +@@ -779,14 +799,25 @@ static void send_ambi_arg(cli_telnet_sess *sess, + send_data.slen = 0; + + if (with_return) +- pj_strcat2(&send_data, "\r\n"); ++ telnet_sess_send2(sess, (const unsigned char*)"\r\n", 2); + ++ /* Compute and clamp the caret offset, then stream the spaces, like ++ * send_err_arg(). info->err_pos is attacker-bounded only by ++ * PJ_CLI_MAX_CMDBUF, so it must not drive writes into data[]. ++ */ + len = fe->cfg.prompt_str.slen + info->err_pos; +- +- for (i=0;i PJ_CLI_MAX_CMDBUF) ++ len = PJ_CLI_MAX_CMDBUF; ++ ++ remaining = len; ++ while (remaining > 0) { ++ pj_size_t chunk = (remaining > sizeof(SPACES)) ? sizeof(SPACES) ++ : remaining; ++ telnet_sess_send2(sess, SPACES, (int)chunk); ++ remaining -= chunk; + } +- pj_strcat2(&send_data, "^"); ++ telnet_sess_send2(sess, (const unsigned char*)"^", 1); ++ + /* Get the max length of the command name */ + for (i=0;ihint_cnt;++i) { + if (hint[i].type.slen > 0) { +@@ -874,10 +905,21 @@ static void send_ambi_arg(cli_telnet_sess *sess, + } + pj_strcat2(&send_data, "\r\n"); + pj_strcat(&send_data, &fe->cfg.prompt_str); +- if (with_last_cmd) +- pj_strcat2(&send_data, (char *)sess->rcmd->rbuf); +- + telnet_sess_send(sess, &send_data); ++ ++ /* Stream the last command separately with a clamp; sess->rcmd->rbuf ++ * is attacker-bounded only by PJ_CLI_MAX_CMDBUF, so appending it into ++ * data[] could overflow the fixed-size buffer. ++ */ ++ if (with_last_cmd) { ++ pj_str_t last; ++ last.ptr = (char *)sess->rcmd->rbuf; ++ last.slen = (pj_ssize_t)pj_ansi_strlen((const char *)sess->rcmd->rbuf); ++ if (last.slen > PJ_CLI_MAX_CMDBUF) ++ last.slen = PJ_CLI_MAX_CMDBUF; ++ if (last.slen > 0) ++ telnet_sess_send(sess, &last); ++ } + } + + /* +@@ -1035,10 +1077,20 @@ static pj_bool_t handle_tab(cli_telnet_sess *sess) + } + send_comp_arg(sess, &info); + +- pj_memcpy(&sess->rcmd->rbuf[len], info.hint[0].name.ptr, +- info.hint[0].name.slen); +- +- len += (unsigned)info.hint[0].name.slen; ++ /* Append the matched name into the fixed-size rbuf. len is ++ * attacker-influenced (the typed command length), so clamp ++ * the copy to leave room for the NUL terminator and avoid ++ * overflowing rbuf. ++ */ ++ if (len < sizeof(sess->rcmd->rbuf) - 1) { ++ pj_size_t avail = sizeof(sess->rcmd->rbuf) - 1 - len; ++ pj_size_t cplen = (pj_size_t)info.hint[0].name.slen; ++ if (cplen > avail) ++ cplen = avail; ++ pj_memcpy(&sess->rcmd->rbuf[len], ++ info.hint[0].name.ptr, cplen); ++ len += (unsigned)cplen; ++ } + sess->rcmd->rbuf[len] = 0; + } + } else { diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index e7cae469ed..9d1e6af253 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -20,6 +20,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57163.patch \ file://CVE-2026-57164.patch \ file://CVE-2026-57165.patch \ + file://CVE-2026-57166.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 28 04:23:29 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102198 Received: from mail-pj1-f47.google.com (mail-pj1-f47.google.com [209.85.216.47]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36061.1793161518887064034 for ; Tue, 27 Oct 2026 21:25:18 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=oz4p034i; spf=pass (domain: gmail.com, ip: 209.85.216.47, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f47.google.com with SMTP id 98e67ed59e1d1-3a4b3ac8fb7so341121a91.0 for ; Tue, 27 Oct 2026 21:25:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161518; x=1793766318; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=9CQHONmROj+IM63pShrvW5zYBC5B8M0VXXys8Zn76wY=; b=oz4p034i12Io5jjp/4KcfK1RHQWO1l1f7yIkwxgSepF3FdVcvjpi2VI8BPsdPN5RKx ZDceSskvA7v/QquHSd+FZ1LlMtcSu6CapXa3qkvF2WIm7mxjWgtVS3FFrViJkj9RbuqM OP6T2ItZtz2bL+AkaDMSMu1uCKXqA02DFLwSIcyk9Gh179AFTR4pOxFHtC6t7lEAVnNc qRFyU3+iyD81UMu15bJ4kFzPgnze2CDrzsvnm1sm8J6wvUo9q2ThZFOPcGg/BuwL+r7I g9Ttxc9sXjuQMBfetmPRgW0jots+px+NGlQ3JTZsFhnBIwCW6nitPJoUXCX0GRVlG9V5 11Xw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161518; x=1793766318; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=9CQHONmROj+IM63pShrvW5zYBC5B8M0VXXys8Zn76wY=; b=HbL2MzsnpsXfN0tUi3rjpvgngVYbDu4wLe+CJcgaNuYTLDyM7m1OcBlQeinZLVKhWr oS4E8DHA3FenVgWxM5QFbbyO/atj2rpvWUwO738/+tJiZXtz/FWhwrxWoT+JHjNcJ37x sHr2hCPUhyf+uKITRVtspPn8kDy7V7314gwo242/SsytbwnP+n0pjlBUoQkiaFORefbK 9ibEa8bnEWDsICdITGCqKStMkeKBZgPdDAnK8DJMsqP9bawNDNnoz9IW7uvL2KBjFXOT uMohLeXjjM7LpxKysN+f4PUrrwuTKnHnyGCyPbW3xatJAkCZeLjgB1EuuOsGUPc+jTu3 YvUg== X-Gm-Message-State: AFq9FYLP1ctM5UYCmBguSpxjyA4ZX3SbS53Owz62SyHP3dKoHJ4TxAoA cpBbhOkedPofjfnqLICqGnwe9lOToQj+N53XHxlhMU/6Nww7MWSo1NqjWDTKKg== X-Gm-Gg: AYBFou0rSfw1pNK9AAZdonYGbIKijBrIQsbRZLk4CfhPUBgNMsm5uztYAX+znHHf19Z ozH7fylKepUvu9dQUoTIOWapCFJdihaumq5zhit3og+z6hPar6Zu3F9gmHiIDL64yhJHZipvwwU S4TgeTIVDA6OgRuhDD5UzXvviCRSfSZStDOMJUV5vRHq+yTwRzjkGN6C1wONlMTAXyzV3xlpbXQ 5Y6YGcWfnaxchzTdi5MlKjJsVp3zjFa5AANvNks8yhU4hFxOrBvmgorZyuBJMROmkHf2oyQoEG+ 5T74fJPdjZclFd/RWHulioBAZfz+89E5iAuOGIH0aTCdR8vqjlG6wcwr/GFSWG8Qw+ec/T1LIGx RQtphn9GuB2TZ93a8D7EHsYoWvx8JPM4CFoHtTobHpN1K9mZpUVyYRi0QQIo/kvf1fvS3lcIZ6D scLeLQ0ryPIDTCQRlKD3eo3e/auxea6w2u2XH1yb8vf7mFTvEd/DOJFyVRINVMqt+zk1uBObq+M YEdzSgmC1ZVrVPgg8+7wa8Hkf2XqwiGZS+A0yjByj/f4n/x7c6NDoaBqHXqX3uMbrK3Ry1AhC2g QtT1gfgRESILiUiOFZ+4IM0fZgkqe+qfxsUOE2MLO5XSoCUu1oiNwUFvfWc//g== X-Received: by 2002:a17:90b:586c:b0:3a8:de1:db07 with SMTP id 98e67ed59e1d1-3ae57e2c9e5mr909414a91.5.1793161518184; Tue, 27 Oct 2026 21:25:18 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.16 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:17 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 31/60] pjproject: patch CVE-2026-77396 Date: Wed, 28 Oct 2026 17:23:29 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:25 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131583 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-77396 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-77396.patch | 74 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 75 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch new file mode 100644 index 0000000000..a02268bf11 --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch @@ -0,0 +1,74 @@ +From a927a964d462e9966864b7b2c432942b61038d6b Mon Sep 17 00:00:00 2001 +From: Nanang Izzuddin +Date: Mon, 13 Jul 2026 09:27:02 +0700 +Subject: [PATCH] Merge commit from fork + +The AVI player used a chunk length taken from the input file as the +number of bytes to read into the video frame buffer, whose capacity is +derived from the (also file-supplied) declared dimensions, without +reconciling the two. A crafted file could therefore cause a write past +the end of the buffer. The only guard was an assertion, which is a +no-op in release builds. + +Clamp the read to the frame buffer capacity, skip any remaining chunk +bytes so the file position stays aligned, and remove the reliance on +the assertion for validating a file-supplied length. + +Ref: GHSA-6p2p-5wf8-h5hr +(cherry picked from commit 7ecc6584969a923c4190b6912afbf5952b5a4b9f) + +CVE: CVE-2026-77396 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/7ecc6584969a923c4190b6912afbf5952b5a4b9f] +Signed-off-by: Ankur Tyagi +--- + pjmedia/src/pjmedia/avi_player.c | 34 +++++++++++++++++++++++++++++--- + 1 file changed, 31 insertions(+), 3 deletions(-) + +diff --git a/pjmedia/src/pjmedia/avi_player.c b/pjmedia/src/pjmedia/avi_player.c +index dc87b8a41..8b4b94d16 100644 +--- a/pjmedia/src/pjmedia/avi_player.c ++++ b/pjmedia/src/pjmedia/avi_player.c +@@ -1199,12 +1199,40 @@ static pj_status_t avi_get_frame(pjmedia_port *this_port, + goto on_error2; + fport->size_left -= size_to_read; + } else { +- pj_assert(frame->size >= ch.len); +- status = file_read3(fport->fd, frame->buf, ch.len, ++ pj_uint32_t read_len = ch.len; ++ ++ /* Clamp the read to the frame buffer capacity. A crafted ++ * file may declare a chunk larger than the buffer, whose ++ * size is derived from the (also file-supplied) video ++ * dimensions; never write past frame->buf (frame->size ++ * bytes). Do not rely on pj_assert() here, as it is a no-op ++ * in release builds. ++ */ ++ if (read_len > frame->size) { ++ PJ_LOG(3, (THIS_FILE, ++ "AVI video chunk (%u) exceeds frame buffer " ++ "(%u), truncating", ++ (unsigned)ch.len, (unsigned)frame->size)); ++ read_len = (pj_uint32_t)frame->size; ++ } ++ ++ status = file_read3(fport->fd, frame->buf, read_len, + 0, &size_read); + if (status != PJ_SUCCESS) + goto on_error2; +- frame->size = ch.len; ++ ++ /* Skip any remaining chunk bytes that did not fit, so the ++ * file position stays aligned to the next chunk. ++ */ ++ if (ch.len > read_len) { ++ status = pj_file_setpos(fport->fd, ++ (pj_off_t)ch.len - read_len, ++ PJ_SEEK_CUR); ++ if (status != PJ_SUCCESS) ++ goto on_error2; ++ } ++ ++ frame->size = read_len; + fport->size_left = 0; + } + diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 9d1e6af253..89763b3011 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -21,6 +21,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57164.patch \ file://CVE-2026-57165.patch \ file://CVE-2026-57166.patch \ + file://CVE-2026-77396.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 28 04:23:30 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102199 Received: from mail-pg1-f181.google.com (mail-pg1-f181.google.com [209.85.215.181]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36210.1793161521315687566 for ; Tue, 27 Oct 2026 21:25:21 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=QEXvC+Qc; spf=pass (domain: gmail.com, ip: 209.85.215.181, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f181.google.com with SMTP id 41be03b00d2f7-cd67cc518a6so397331a12.1 for ; Tue, 27 Oct 2026 21:25:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161521; x=1793766321; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=63591MtrLhccxHSSW3kPTqnL4L0Z1tQ/v8jipDncExs=; b=QEXvC+QcP0WBacr8eSrPOKNkPO7Au2LTWGothdkopbldPH3OACp62HE5NueN7tv/Qo ggDFiliDVSFSBtz4HH9A7nBt2WSctb4fOg3Kb7PleVTQTQBwN6Up4gUBXt355SP0t4/z yErvAv1fFxOy8f2oDwWoXtySXepnbVxkG/4809A2XoD3DYJKmERQyreWqHT/cW6DFT3m LCxDf6/zEnhjUunMKzJ61ko56dHOOFsYDA7VhXiuMKEy9Fk+Tor/H0enKfbttoG5zrG4 q6P6VKfjxW1HNFltcmzQYMcsjWpIqfwjIBGgHWJinFWjSucpHt50T37SHKCZ/oM6Julp udOA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161521; x=1793766321; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=63591MtrLhccxHSSW3kPTqnL4L0Z1tQ/v8jipDncExs=; b=y32fyyRuuXJGc9LVZcUhpNjZaAc2l4G/iZuLy1ORJTrR58fTX3DhNjCOGByebQe3JE t/M9VnjfwnB9H3ETECrrEZWXqmXM54fiNSLLEnA7J34DDB+97FFFMMhI4FfGaKikqneu z7QhBWISQrTij4Xr6JjUK2F0/g/dAKv3dwSkOSGpsNxRw2dV5d1Gk9Ot/pXUSID9rc61 SWcXwd/hxR3l96//xrGGn3hiF7fMG3MznyKQEYne94ZlsprduX8/5CATpGRWWp1kI3Fk 5bbbwOy3yzSIbPhqERPTLurYOUavGpBoYYMyJE51+wqdT3mkKbyGff9HM1uD5zgx2VSP TZeA== X-Gm-Message-State: AFq9FYIK23+YmimPOaP300vNUTDnS2lrzVmsyu5OriIH/C3AaD+UBGWk 1c1RRWyMl1WOZd1Ah7/1WltAeEMvbVQ6IDw95ye6o40Eq930BWv1YOgCXemplg== X-Gm-Gg: AYBFou0M0nygJoQj/+5N5uiIWruCNWIG7S+2MgWdMqOQeV5uts0ZQsI0NMMXMtv1hZE cdm+0LqFYbOzzW/DhpItg3TMwxnlg7ak/ogbhVBckGFYVu7gVY59omIssyt6MFdVXOf0msmXUK1 cXoL7LmqRO4bmPlJGYRFSrUVrnykJw8J9qJmKlU81RjNUIKYNznMtbPH1/2aQdSCN8vaU8g2yIF Rus0NbTDg+qHfUJ8TXO1BOkYdBv+eMCrizhXbXMUuXusfhLaozF3pUzUO97A1rq4w15Do4eHUnT 5x2txMbFIraD1dIx3/PpmOK62m7JvKoJjSTr1tE3h04hE/d69KzePj7ghQVfvhZFMYZJjWk/Ue4 uVRcU8+Zj3xLdw26xeckj6DFVb1YZVXA9Xc/tjg92kixt3QKkO540ySqI1ZARyFq/q6TOZb24VS DqLXD8lonXO2AMTB35mU2jwvcENV4zLYMzeKOm0HjaU5NMqtMZMXcZj0ygM1WwODokdnWCa6gWA JvkF3t/XsJVT8z1d9BcTwejmZ8Gn2t5F/S29U0JetbJ/HqQga1q+KDfUXt6DjPezpqheCQjeKRI pv6/tr78x0o5MV7sbhSDcDdXURWut/viQ67Su+ZpA0r9KJcKqlppmlTrErXBsA== X-Received: by 2002:a17:90b:4fc2:b0:3ac:403d:6232 with SMTP id 98e67ed59e1d1-3ae583142f1mr870429a91.55.1793161520619; Tue, 27 Oct 2026 21:25:20 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.18 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:20 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 32/60] pjproject: patch CVE-2026-84975 Date: Wed, 28 Oct 2026 17:23:30 +1300 Message-ID: <7629323ae333315b84a95f6a17756e53c9dd726f.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:26 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131584 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-84975 Signed-off-by: Ankur Tyagi --- .../pjproject/pjproject/CVE-2026-84975.patch | 87 +++++++++++++++++++ .../pjproject/pjproject_2.17.bb | 1 + 2 files changed, 88 insertions(+) create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch new file mode 100644 index 0000000000..007096a6ff --- /dev/null +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch @@ -0,0 +1,87 @@ +From f00f023079d0f9a74477da47056bfce76374b2a7 Mon Sep 17 00:00:00 2001 +From: sauwming +Date: Fri, 17 Jul 2026 16:46:33 +0800 +Subject: [PATCH] Merge commit from fork + +SubjectAltName entries from the OpenSSL and GnuTLS backends were copied +with pj_strdup2(), which re-derives the length with strlen() and thus +discards the length already returned by ASN1_STRING_to_UTF8() / +gnutls_x509_crt_get_subject_alt_name(). A DNS SAN such as +"victim.example\0.attacker" was therefore truncated to "victim.example". + +sip_transport_tls.c disables socket-layer verification and performs its +own length-aware identity match against subj_alt_name, so the truncated +prefix compared equal to the target host and a crafted certificate was +accepted for the prefix hostname (server identity / hostname verification +bypass; OpenSSL's own X509_check_host() rejects the same certificate). + +Copy the SAN using its explicit length via pj_strset()/pj_strdup_with_null() +so embedded NULs are preserved and no longer truncated. The mbedTLS backend +already copied with a length-bearing pj_str_t and was not affected. + +Co-authored-by: Claude Opus 4.8 +(cherry picked from commit 43d3bd77bb6833eab4c493503b8d564a754ddfdd) + +CVE: CVE-2026-84975 +Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/43d3bd77bb6833eab4c493503b8d564a754ddfdd] + +Signed-off-by: Ankur Tyagi +--- + pjlib/src/pj/ssl_sock_gtls.c | 17 +++++++++++++++-- + pjlib/src/pj/ssl_sock_ossl.c | 14 +++++++++++--- + 2 files changed, 26 insertions(+), 5 deletions(-) + +diff --git a/pjlib/src/pj/ssl_sock_gtls.c b/pjlib/src/pj/ssl_sock_gtls.c +index 68ceea3f3..ee977116b 100644 +--- a/pjlib/src/pj/ssl_sock_gtls.c ++++ b/pjlib/src/pj/ssl_sock_gtls.c +@@ -1072,9 +1072,22 @@ static void tls_cert_get_info(pj_pool_t *pool, pj_ssl_cert_info *ci, + + if (len && type != PJ_SSL_CERT_NAME_UNKNOWN) { + ci->subj_alt_name.entry[ci->subj_alt_name.cnt].type = type; +- pj_strdup2(pool, ++ if (type == PJ_SSL_CERT_NAME_IP) { ++ pj_strdup2(pool, + &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, +- type == PJ_SSL_CERT_NAME_IP ? buf : out); ++ buf); ++ } else { ++ /* Preserve the reported length instead of using strlen(), ++ * so a DNS SAN containing an embedded NUL is not truncated ++ * at the NUL (which would allow a crafted cert to be ++ * accepted for the prefix hostname; identity bypass). ++ */ ++ pj_str_t tmp; ++ pj_strset(&tmp, out, len); ++ pj_strdup_with_null(pool, ++ &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, ++ &tmp); ++ } + ci->subj_alt_name.cnt++; + } + } +diff --git a/pjlib/src/pj/ssl_sock_ossl.c b/pjlib/src/pj/ssl_sock_ossl.c +index 30b4eeaee..ceb6bca5b 100644 +--- a/pjlib/src/pj/ssl_sock_ossl.c ++++ b/pjlib/src/pj/ssl_sock_ossl.c +@@ -2270,9 +2270,17 @@ static void get_cert_info(pj_pool_t *pool, pj_ssl_cert_info *ci, X509 *x, + &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, + buf); + } else { +- pj_strdup2(pool, +- &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, +- (char*)p); ++ /* Preserve the explicit ASN.1 string length instead of ++ * treating the data as a NUL-terminated C string. A DNS ++ * SAN such as "host.example\0.attacker" would otherwise be ++ * truncated at the embedded NUL, letting a crafted cert be ++ * accepted for the prefix hostname (identity bypass). ++ */ ++ pj_str_t tmp; ++ pj_strset(&tmp, (char*)p, len); ++ pj_strdup_with_null(pool, ++ &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name, ++ &tmp); + OPENSSL_free(p); + } + ci->subj_alt_name.cnt++; diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb index 89763b3011..893559090f 100644 --- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb +++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb @@ -22,6 +22,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag file://CVE-2026-57165.patch \ file://CVE-2026-57166.patch \ file://CVE-2026-77396.patch \ + file://CVE-2026-84975.patch \ " SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd" From patchwork Wed Oct 28 04:23:31 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102196 Received: from mail-pj1-f46.google.com (mail-pj1-f46.google.com [209.85.216.46]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36211.1793161523939576299 for ; Tue, 27 Oct 2026 21:25:23 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=LsSp4uNa; spf=pass (domain: gmail.com, ip: 209.85.216.46, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f46.google.com with SMTP id 98e67ed59e1d1-3ad41b47541so457156a91.1 for ; Tue, 27 Oct 2026 21:25:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161523; x=1793766323; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=3wDoYXBWDgdtTs8yzVacPsTRlcJX+k9H2JnfxSGfVbM=; b=LsSp4uNap7XS9ml4g7L89NheXpxCnMTpdYZiHU2Td0nJ+F2lx7TyHyCJle1YW08rki h43WR9JGrCFmEyitO7X3nBhKRhxGYUD45800fRMqiG4yWf4RY3Anst6oDoC0Nb+/EQE/ 4WM1iVKR2GOJ7pWwbU/B0MTNOd+KnJAAvFSR7XVMNZkKO5H39iUJc46XF4zAtO2WA0KH /NqHxTgXrvyxW4NGVeL8rBO09btl0m3Xhn2Rp9zXUISGQ9CasRq4rhXrGFsnYfLSA6Ox REUCvbbZMOjRoi11kuHlPCS1mfr2X3IhWxSj3Z89cUpk4c4ZEfJc7RUqX5fDtcyhNrrS 5LnA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161523; x=1793766323; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=3wDoYXBWDgdtTs8yzVacPsTRlcJX+k9H2JnfxSGfVbM=; b=tHBEn0cHC8N0XtZ9/VBl/FPYbh7Uam9cUoaV6IoHlxpagaKhd6IodVCDMMQelGLfbl ywi8oqmZcNdrRTUAIUZy7lEMOTYdLFNCk6cuJQnlNnulqcTczQvQ85AILy6Fl1OWjNAg 1FyY2c/Rb0FaxM3IZC41regg/KdnFhckgdM4ShsrletmQbDGHPrtAu9ALmZmBwgJt8hd TUrUmUQLPeyVW2J+jjhIFt7HTRhvyPEj/ZXXBK9zLJ9z0NdQpRxgUvO9JhbXZxXlPM5b Klp3jiAup9mQQ2gv3cYR3LL+VJX5Cr50Yh3pXv2UDfMPHSJknD0enEMp18QdhUqp8gJh gOxg== X-Gm-Message-State: AFq9FYJNINsUOWQ8x2a2c6HSuD1RKlkYqt8NU4JkfBNKoNTt1Ox3M8+k GBDndMU/nHmdvmALSwUYBgsEGaXYUkeKIBwpS6ziyVvEJ+VnFXgrk//AvTLB5w== X-Gm-Gg: AYBFou1OdqAIm6ntLvAfE+kczqnchHZbUh4QWkM7Q6YFF0wgP4aFhtMWetphx9oY9Ks sWJj+COi9dmUpt6LuiDFzZuT3fhfZxgiBTXJqKW0C57K8aNWHmqfLfTHtim/LW2giLp9wyjzTsJ UZcTQsUP1SaQAhZZgceaBuqJBfC4pxAI0rE8nVGVQ2bcLre9AnklUDdkUiKyTFUuN1K+USsYcGe YfhjWVNcNgftr8ttqkUDgLk6BeFhpuX1aw7arShqHN1b6kLZMG/4rb4gEzwG1ijvVq53zZ1jWlU N7YTFQvm/t6GlcLcBbN1uDqKm/f57gA86Jh/t5JK1JgCXis/paEJxiugw89f/2v6Xl6Qcu3dNBn O7toHFmIdAugfd4d8XWfY6hepTx3IMMnnrxxdnEf4tnT0C+AydB4rgzEvsJms/jYq48R6ksb4pA yukohIJ0/2dpeHTWoqQ0lnkJZto6LjLsqNVCfe2ud8d+MBuNPFohtwwvG1Ov0AGDyHVlDlK/eem voebkoXeJTgG7znYNfMynAccETL31TVKV5DfBeu06dOEr+VPklsUHLH2zfy5pjvBnCemctRBU3D +KnRbjo5Rc9pXec6GBtN5E1ifLjm1Oi7IO85/SyfIij5voiZPh6ZoxeZVQr6rA== X-Received: by 2002:a17:90b:4d83:b0:3ac:9e76:aa9e with SMTP id 98e67ed59e1d1-3ae57e47be0mr933975a91.3.1793161523347; Tue, 27 Oct 2026 21:25:23 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.21 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:22 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 33/60] nmap: patch CVE-2026-58058 Date: Wed, 28 Oct 2026 17:23:31 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:25 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131585 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-58058 Signed-off-by: Ankur Tyagi --- .../nmap/files/CVE-2026-58058.patch | 34 +++++++++++++++++++ meta-oe/recipes-security/nmap/nmap_7.99.bb | 1 + 2 files changed, 35 insertions(+) create mode 100644 meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch diff --git a/meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch b/meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch new file mode 100644 index 0000000000..3717d37b5d --- /dev/null +++ b/meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch @@ -0,0 +1,34 @@ +From 63815f6a8865d8c99a1f3abb9d7383a2be0ea67e Mon Sep 17 00:00:00 2001 +From: dmiller +Date: Thu, 25 Jun 2026 21:58:49 +0000 +Subject: [PATCH] Fix extension header parsing. Credit: Himanshu Anand + +(cherry picked from commit bb6754e76bb1686315008e1aa1c40202a513fb83) + +CVE: CVE-2026-58058 +Upstream-Status: Backport [https://github.com/nmap/nmap/commit/bb6754e76bb1686315008e1aa1c40202a513fb83] + +Signed-off-by: Ankur Tyagi +--- + libnetutil/netutil.cc | 4 +++- + 1 file changed, 3 insertions(+), 1 deletion(-) + +diff --git a/libnetutil/netutil.cc b/libnetutil/netutil.cc +index 6e81f558c..0adf18b8e 100644 +--- a/libnetutil/netutil.cc ++++ b/libnetutil/netutil.cc +@@ -615,11 +615,13 @@ static const void *ipv6_get_data_primitive(const struct ip6_hdr *ip6, + *nxt = ip6->ip6_nxt; + p += sizeof(*ip6); + while (p < end && ipv6_is_extension_header(*nxt)) { +- if (p + 2 > end) ++ if (p + 8 > end) + return NULL; + *nxt = *p; + p += (*(p + 1) + 1) * 8; + } ++ if (p >= end) ++ return NULL; + + *len = end - p; + if (upperlayer_only && !ipv6_is_upperlayer(*nxt)) diff --git a/meta-oe/recipes-security/nmap/nmap_7.99.bb b/meta-oe/recipes-security/nmap/nmap_7.99.bb index ea792d30f6..515623d63d 100644 --- a/meta-oe/recipes-security/nmap/nmap_7.99.bb +++ b/meta-oe/recipes-security/nmap/nmap_7.99.bb @@ -11,6 +11,7 @@ SRC_URI = "http://nmap.org/dist/${BP}.tar.bz2 \ file://0002-Fix-building-with-libc.patch \ file://0001-fix-racing-between-build-ncat-and-build-lua.patch \ file://0004-libdnet-fix-PF_PACKET-conftest-nested-function.patch \ + file://CVE-2026-58058.patch \ " SRC_URI[sha256sum] = "df512492ffd108e53a27a06f26d8635bbe89e0e569455dc8ffef058c035d51b2" From patchwork Wed Oct 28 04:23:32 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102201 Received: from mail-pj1-f52.google.com (mail-pj1-f52.google.com [209.85.216.52]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36212.1793161526256650512 for ; Tue, 27 Oct 2026 21:25:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=aYcvGx0k; spf=pass (domain: gmail.com, ip: 209.85.216.52, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f52.google.com with SMTP id 98e67ed59e1d1-3ab41538192so433876a91.0 for ; Tue, 27 Oct 2026 21:25:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161525; x=1793766325; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=9Ia57Yt5XUYUZCmhKfVbWDfQ1WThh7M6NiDd4GdflPs=; b=aYcvGx0kwxeYjGcsGYX0iKjcePOfcNTNXasFfGGg8aaSdWstInMF6/kPQJPXQV1oOd 1Tp4FNK5MHAStg35ex2JL6e6UAMOX6qe0aUHg9dV0FORF3qLkjhDODOIZ+tS5KnGwGq8 khLBy6l2z+mQ63cxnE/FNcB5XFZTtSyuZg62ygmOK7BAx2sWtd5fOLluSIk+TyNtAvtq V2KlH22xbAyACSI1lFuEfF1qIISksLNmpeMEcc5eEz3/iHMprM4xtWNEobZgORgrbRiv o31KTQ31VpwJ5la3weCQhh4j7fxsPxCnfLrlGW4p18Bb8C1ZqdjFpYdNOVbujswnDHFA iDVA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161525; x=1793766325; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=9Ia57Yt5XUYUZCmhKfVbWDfQ1WThh7M6NiDd4GdflPs=; b=sUuMb0BtY3IGfa8JG5EJhG49sDH5jBVnr+VvknCFIPA/i6jny5Iv6WYWM22i/WpCAx URGWLDsaDys6Doq8cQauNr06NpsyJhzthsnT0Ryl2vOC4u+lOPhb2RAYHafJjKfD6rCM XHmcgC7JTbKnIba1JTLZ1SV2B5j4EDHzKrSJOk88ZYfDl0N7CE0F51IRnFNFmFdqvDSt GFb01mpqyauyyPcfT4pkaUBMHl6FTHGorLfuCe0UlV0tPDsLVp6feT+Q1wQBWf4f8R5d nUUXj8ssmaecc3bGi9DKpIedBwAk0pno7EHXRiV8Ea6S6D2PXlU9ZwSBljuz75YU/i5z crww== X-Gm-Message-State: AFq9FYKgft2p2vxSeabQFNfsCyeL8uJwewuwxg41wHOSLWsEyplHjvm2 ZoSylLwWPoS2G5AHNH00+lDm8/+pqKeZaOuBnkUfVh6HCGVEBfFZAC8ID+RIhQ== X-Gm-Gg: AYBFou3+yzRiZ11H6cDttj4gn1GfJDCLI7gR21tmaAsbuxN0e9jrgerWTdLlsqHA8CJ cEnlCFmUduSyxBJjZD1pcxBiljAV4htOvE+AG31hUST28I7T3K8+KoP4ezVByJeHGDoOQ2pZNJg 73FEtw2EvJ/ga2k6Vdq+5x3vbAkg1PEE2AjdnDKStkXf8umGJfGZcaIdn1fue4cwAJSjHjQjHPM d85sxIBs9VlSZSshBmj6/svRmRC8ynvrKAR/EYlOb0nVgEKj9dBkBB3W38MPk4r/gR3DuLbaeb/ snJFCJFLyjWZv9paCTffOu3mWf9/g9Az6aMN149tkHkLZ4Rx5eARD1Kd12UBkljMwG80sdIsl6k gc1oesxdnqfx/Yhxxdwjp6lzjB91sdFR6U7E8CLyC3bUEUYbC/LyVoAYjbBRprnjEuduZR2LxVd 7cRocZUgxF8uE/qK+NqIgyDEpI5kJVROcU71qTBsq0zC/H7u9GJ2FUJwf0zt9UxK3+eFdP+kVS1 600KXdUQnuiaB+Zf1xYCO2gHUn8dKSgQfqEgI/Mw0G6d4oL+zhDMR14l6QRJlbfW0epY55xM+LL Oj+u1LRtjt8v7itAv7tnw/JdmBNYNBI4upLEC15icjqvBurSNtRt0YrJM+gwfw== X-Received: by 2002:a17:90b:3c8c:b0:3a4:ca46:8d44 with SMTP id 98e67ed59e1d1-3ae5819e58emr890255a91.18.1793161525569; Tue, 27 Oct 2026 21:25:25 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.23 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:25 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 34/60] nmap: patch CVE-2026-72712 Date: Wed, 28 Oct 2026 17:23:32 +1300 Message-ID: <406da4cb702d021602a2088b8259bf68870691c6.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:36 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131586 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-72712 Signed-off-by: Ankur Tyagi --- .../nmap/files/CVE-2026-72712.patch | 46 +++++++++++++++++++ meta-oe/recipes-security/nmap/nmap_7.99.bb | 1 + 2 files changed, 47 insertions(+) create mode 100644 meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch diff --git a/meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch b/meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch new file mode 100644 index 0000000000..f5e81aac0e --- /dev/null +++ b/meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch @@ -0,0 +1,46 @@ +From 120d13b8aca52ec306e50eae9a74fb1bfe49540a Mon Sep 17 00:00:00 2001 +From: dmiller +Date: Thu, 11 Jun 2026 18:31:31 +0000 +Subject: [PATCH] Stop parsing on a zero-length packet option + +Fixes #3368. Closes #3373. + +(cherry picked from commit 7ef4ee030a0023fe22616387a000032e1a678b6a) + +CVE: CVE-2026-72712 +Upstream-Status: Backport [https://github.com/nmap/nmap/commit/7ef4ee030a0023fe22616387a000032e1a678b6a] + +Dropped changes to the CHANGELOG file. + +Signed-off-by: Ankur Tyagi +--- + nselib/packet.lua | 8 +++++--- + 1 file changed, 5 insertions(+), 3 deletions(-) + +diff --git a/nselib/packet.lua b/nselib/packet.lua +index ec6db40a2..e17972d88 100644 +--- a/nselib/packet.lua ++++ b/nselib/packet.lua +@@ -686,10 +686,7 @@ function Packet:parse_options(offset, length) + local opt_ptr = 0 + while opt_ptr < length do + local t, l, d +- options[op] = {} +- + t = self:u8(offset + opt_ptr) +- options[op].type = t + if t==0 or t==1 then + l = 1 + d = nil +@@ -699,6 +696,11 @@ function Packet:parse_options(offset, length) + d = self:raw(offset + opt_ptr + 2, l-2) + end + end ++ if l==0 then ++ break ++ end ++ options[op] = {} ++ options[op].type = t + options[op].len = l + options[op].data = d + opt_ptr = opt_ptr + l diff --git a/meta-oe/recipes-security/nmap/nmap_7.99.bb b/meta-oe/recipes-security/nmap/nmap_7.99.bb index 515623d63d..0cbef990cb 100644 --- a/meta-oe/recipes-security/nmap/nmap_7.99.bb +++ b/meta-oe/recipes-security/nmap/nmap_7.99.bb @@ -12,6 +12,7 @@ SRC_URI = "http://nmap.org/dist/${BP}.tar.bz2 \ file://0001-fix-racing-between-build-ncat-and-build-lua.patch \ file://0004-libdnet-fix-PF_PACKET-conftest-nested-function.patch \ file://CVE-2026-58058.patch \ + file://CVE-2026-72712.patch \ " SRC_URI[sha256sum] = "df512492ffd108e53a27a06f26d8635bbe89e0e569455dc8ffef058c035d51b2" From patchwork Wed Oct 28 04:23:33 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102202 Received: from mail-pj1-f48.google.com (mail-pj1-f48.google.com [209.85.216.48]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36062.1793161528282758184 for ; Tue, 27 Oct 2026 21:25:28 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=V2itEW4I; spf=pass (domain: gmail.com, ip: 209.85.216.48, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f48.google.com with SMTP id 98e67ed59e1d1-3ae1d0caaedso236314a91.2 for ; Tue, 27 Oct 2026 21:25:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161528; x=1793766328; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=3sB+LWFGt8SQCb87LBs5KpkRNkHANTEcZv8PHXnJYeo=; b=V2itEW4I2lD7vVwsROy7AuuJ3sFs2VGSnu5OkLGgGAIM/ScTKu2KffqUXpeST57nnK 2rTYcsLoNIWDoWGThqITwoZS+iyl4kfst+ghd1QqhVSqxItP9Mk+CsPQpxBa0qW8aD30 Z4MJrfZoCOZahGSJDRJhnImjmKJyoErUFRcUtwCbP30pjm6PCrX1xvo1InuOZ8zbOT22 8Jt/2V/MeaC5Qi7fs4VgXMRIYeIPj1r2Ufd0tBGRnpXOzBugOhkW2c6Lbsn5M0NH9eS+ K6Cl/LhAe9o6dvr6BsLM5O5WMLUQfvlgHH2Zqxl+aPf2kuP6o7gepNnVe0d/uczw52Pk n4+Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161528; x=1793766328; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=3sB+LWFGt8SQCb87LBs5KpkRNkHANTEcZv8PHXnJYeo=; b=kQBSamxEccTH5aJ2KrooHUYYHN7Za/KsbkERqvGFQs6/CqLU1HbJbQTZ6QHMoiv9W0 W588i9bQ0uUVTbboQRZZUl6dBOntX0EURnXac3070KQJWbcnnJW4gFG4nFFoqBInD2gl 9WF1rb8UcBJsHwwilEvyx/aJ1lclZhLSImb6g5FtTKl80KeeknCsu5jOrAqRe0gFuhvO O76arEGIkOLVpTzTb6oPLFII1L3lmWTS4piaELaxFADaBlP4Vml/raNG5g1ikMJKTsue /QNvyMeQ0aD68AbpYKnx6DP86kqtzxORI521W3tjANg68Q3qQtLVnxlx9PXCIC8JrTmf xGsw== X-Gm-Message-State: AFq9FYKF/jivi/wqQkdzljZRZpcmNeIPDVmuuWSE4V/s9/8rIJOX0eRv hv2RP3BnkZz8u32AvHo1QWcDyrvZCmDJ+2J1Ejx8ywy64fRYbkw67Cs9NsaHcw== X-Gm-Gg: AYBFou0AdX8GxZthUPwjf/c8rnLKKKgrAEQPzsniMsrAWpTiER233KAuFCFewuAJ4VI xQhBICUOqo9Er3j/RS/7hFX4vQYdd09y3SeSo/hWjd/KacDMZu7A0+9I1ZHWGgri3vXROCn9ZsG xJwo1tuUYoKfn50YA8WmoxCbcKrXd6Ja7F4bUYt2K2K4rMNsh4fFx4adsexX/bFu9effOZ4y5xJ lsGNFPFX4x36VOXipCxruZ2sgctYtqz1EJH6LcQFnMYf0/yf2EidkU5NRlYhEApOyQNx6pSc9Ml TX2Ox0YwLhH3Xjqo7aoLx1tHrX+PR33uptCL3Vb+E7WfMRoGJu+CWNT0SPxN6WRsUaQltzg2H5j g2Venizk30fo/Ocz9g2cb8fhyxYhQOOjwtOKm3B4h59wHPMNU//N+h8kxJ9qkPO16jJV17ER3za FsQFbwR2ymNQ+/ky7TaP/jUPC0HJY680D+0ygld25cYjefR1iuV0FKvzCP7R9M/6R+6QsHOTfSv yFJ9GXcoYun6E/V8sm401X4LcAfb8OEqgAHrJO8FDCqa3STII+o83pKU7LEmrRmLxDm1p95LsFa 3FzUq2WJ6nk3yXSjnsNKRvfbau7k5a3Cnd0yXz7Uru/FzjN2BqHVCvyMbHDEPQ== X-Received: by 2002:a17:90b:1647:b0:3a0:ace4:d2b4 with SMTP id 98e67ed59e1d1-3ae580cce76mr758290a91.23.1793161527672; Tue, 27 Oct 2026 21:25:27 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.25 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:27 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 35/60] netdata: mark CVE-2026-83602 fixed Date: Wed, 28 Oct 2026 17:23:33 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:36 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131587 From: Ankur Tyagi Fix identified by NVD is included in the patch release[1] v2.10.4 Details: https://nvd.nist.gov/vuln/detail/cve-2026-83602 [1]https://github.com/netdata/netdata/pull/22825 Signed-off-by: Ankur Tyagi --- meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb b/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb index ed4c54fbe4..9df846cec9 100644 --- a/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb +++ b/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb @@ -167,3 +167,5 @@ FILES:${PN} += "\ " RDEPENDS:${PN} = "bash python3-core zlib" + +CVE_STATUS[CVE-2026-83602] = "fixed-version: fixed in v2.10.4" From patchwork Wed Oct 28 04:23:34 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102203 Received: from mail-pj1-f46.google.com (mail-pj1-f46.google.com [209.85.216.46]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36064.1793161531099155735 for ; Tue, 27 Oct 2026 21:25:31 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=l9Fof6b3; spf=pass (domain: gmail.com, ip: 209.85.216.46, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f46.google.com with SMTP id 98e67ed59e1d1-3ac78f4c10bso280535a91.1 for ; Tue, 27 Oct 2026 21:25:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161530; x=1793766330; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=fmMT3+kwVDfmorQ0rns4OJPGCirkRqhLdFl6MlSNsuQ=; b=l9Fof6b3NT+xA5bSTNXYcHqNomzilIVV8uVN57b78b7jQo1Xgx6/UzwPe0pAuvessg CuUAUUVidD1ua0us5tpUaz6YlzfQu/jBgC0X6eeQFoDDiCuTaJ5HBDfV9ELM6hUb15jU k6qz1t7bQH933Y4BzQJ7r4l84MVPqIw2Brxk8QwXXEgez1I3PG3hnUB8Bw/GbyAnheT5 fyEJ9VsLIIpd9882aAL34dN/yZOV9PqZKXxg3g5bKCWBvbmF140fpXoRhbvQMfppruqp LDQS42OcQhw1iozo16lxPa0Z9iGVVtZtYnOo1s6bGkXQVigZD8UGVVaVS5wNEJwdopuA rLKg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161530; x=1793766330; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=fmMT3+kwVDfmorQ0rns4OJPGCirkRqhLdFl6MlSNsuQ=; b=ODltp18jMoKowBJqWyFqyFwin1qRLLSsEL5rve42bWTuCfsKX8B5jlTHlNoYAmQI/u TJwETe2RGuQDzWoWT+mlLRnG2CCDJYTZduG4x2EBue58VlIox+sV5odrYQGBzIuxuRXV 2ohfZTgHQe0zwvDuQCIPZ3vPkdP7KixyvQHb6jUcvPkDwstZp4NvB8APvcLDr00p1JB2 ojP/1L5rvRoR2WmLOXTS2M189/E8crtwpM+aQQ7Nef3hDAqSw2KAcykRX4ynjqL/HbhI R407e+UlAOOrA2CsWj6bo11+ShqhX6sKbaOMAhqUAVRcDpKttOaS25xKbUnQb53xBpCX pP5Q== X-Gm-Message-State: AFq9FYIINmASSRE0V7hGjig/NeileL8rxlrJ0XNiZC7U75zkN8GldKdM 6PGU9VuQ2dHkOjKZcNUU0HWWueMQ1PAZbZn0h/FMokkKQ+BPcub5npIB5O86iQ== X-Gm-Gg: AYBFou1ww4fwjt02fU3AIFLtS5SMtlHiNuIuFJNm7sY5LT4qpyoTgACg3M6lQledrwQ fxQUdr8Jn6nrpfgHcHP4tW3ihOsdiUlQ7GqVRgUCI0KZKEAVe4WwVDRsetO938hVL9P0uEcAg2k 8LiBaMGVd0dxnGHwOStnBR9LDfqpCNk64JU7uYa9ccmqLUMsbJZEhw9BQylCt1uGBzK/8l9aDPJ RcfHjHKdBJV8KuePWVL0X6aMMvps4dBY2xnrqrxuR/Mj4091c3knIScOWbYniiLHjiZDMxR1Ivq k+Xd8LbXSTuqDPmq4nijFPE6eHzhPCNQSQ+ea32iHqWz7vG1AdmN2gv745VOdZZYY5Pbketuo9u LOi/TlTnriTA0Ou57Vt/n8y6Bp0mXtWh6M4ooCSu0a2uLSxPIUKFE5SG5E+xzhIPvTHE2pHVC0x baW4enShBkiR5rxoaPOf1kP7AeET5pR0v8cSBdvzpuPMW8mLsHvVY7yHOC1ADVxa4DNbmp9i7pO cSba0RIVfdliSzMId+6otxNrNihbTNiuCxq7ZV22tTBuNMxl3KG+17fnvsgR1H+n9wdcUdJJQCf HYNGT7lnFLopNf47HLmG3Sy707IpVTngXAHDog/5y/mMrkJhGQg8FDqksKga8A== X-Received: by 2002:a17:90a:c886:b0:3aa:f2c4:12e9 with SMTP id 98e67ed59e1d1-3ae57e07e4amr871931a91.3.1793161530462; Tue, 27 Oct 2026 21:25:30 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.28 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:30 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Peter Marko , Khem Raj , Ankur Tyagi Subject: [blacksail][PATCH 36/60] nginx: upgrade 1.30.5 -> 1.30.6 Date: Wed, 28 Oct 2026 17:23:34 +1300 Message-ID: <3ee18e1a429a409bfeef263a84dc3012f02aa69e.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:36 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131588 From: Peter Marko 2026-10-14 nginx-1.30.6 stable and nginx-1.31.7 mainline versions have been released, with fixes for buffer overflow vulnerability when using alias with rewrite (CVE-2026-15176), buffer overflow vulnerability when evaluating string expressions with variables (CVE-2026-93479), request body injection vulnerability in HTTP/3 (CVE-2026-95101), session forgery vulnerability when using TLS session ticket key rotation (CVE-2026-97629), and use-after-free vulnerability when using ngx_http_ssi_module with AIO (CVE-2026-97205). Signed-off-by: Peter Marko Signed-off-by: Khem Raj (cherry picked from commit 6cdd413248db5aed93c6cc138cbfe0f83ed81f56) Signed-off-by: Ankur Tyagi --- .../recipes-httpd/nginx/{nginx_1.30.5.bb => nginx_1.30.6.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-webserver/recipes-httpd/nginx/{nginx_1.30.5.bb => nginx_1.30.6.bb} (81%) diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.30.5.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb similarity index 81% rename from meta-webserver/recipes-httpd/nginx/nginx_1.30.5.bb rename to meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb index 6b638cdd96..5d699e63ce 100644 --- a/meta-webserver/recipes-httpd/nginx/nginx_1.30.5.bb +++ b/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb @@ -2,7 +2,7 @@ require nginx.inc LIC_FILES_CHKSUM = "file://LICENSE;md5=79da1c70d587d3a199af9255ad393f99" -SRC_URI[sha256sum] = "6c20565aa2325cb82216ae804f4a4ff1875179014759a381c42ddc8e11c4906d" +SRC_URI[sha256sum] = "3cf46f5ed7504d460125866b7bea99fb357f31d887e2e63b35503310e9b8b6c8" inherit upstream-version-is-even From patchwork Wed Oct 28 04:23:35 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102200 Received: from mail-pj1-f45.google.com (mail-pj1-f45.google.com [209.85.216.45]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36213.1793161534361530954 for ; Tue, 27 Oct 2026 21:25:34 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=H9x7VQ51; spf=pass (domain: gmail.com, ip: 209.85.216.45, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f45.google.com with SMTP id 98e67ed59e1d1-3adf5f6833cso318346a91.0 for ; Tue, 27 Oct 2026 21:25:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161534; x=1793766334; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=fxAfvYdqH1sviq2SusgO7lY7Omk1Pefkff/vwrWA4uE=; b=H9x7VQ51/+cUzDp2VGB18xyQmj1Z3S/vCd9VN9ygcB5Fh/v0xGhpNQTDTVamPKnG4c aS+7mTIHtKIMmJab3wBlK1CkC4QJjokmAWXaegMMCdujhEvA8kBmi7C7rdnHPyNjRuGF vtyMAlG/1U0NDST+WGk0+S7rCQ3yFYVdzdhwlIsan4IgTFDS2x2CHGOLBqRiAFW12tvF TcU8kIYEGuLCJyHostunW2XOImRCiEOr55/e+b8Stj/jIjQI0+LcMXb51hxhoVJBPLLZ U6dfgMYZ5CvJXGfEcacnNUgqlfjnX0C/aRg3IohWR7uAaKpbDFUANx8HPZ6VgdZxnP8l JgPQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161534; x=1793766334; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=fxAfvYdqH1sviq2SusgO7lY7Omk1Pefkff/vwrWA4uE=; b=sMlvejL+1TeosDUMSC9JzrClsOmVAMnpLsKXrBFMv7PHh2YeTUKvkKaYKz4yU4IXWR 4NqmqeOg7gfW6l9QGYKJiR38yLvbpsEUpsl2F9GN/6Y3bupXQJq2beyS5jaOCf+Khuui jn+N71U/Y2Ly51dt0yGvqQu7GX4xWk8C1S0VuTfGaLwXz6/NF7TRM6sK5J0/OvZUfvXs 50nJNk/ZGWiEbiyLxL1x08WCcPqMeHhIkHiVHDRximU/SoeBgdbs0ElGRjbEbTJ/2TT8 KwZdoZupwnt+9A+m5cPYL7/IEKXyvl3h2VxxAiPTrFiCBbFUxT8YdGNaaxVVbVvN7EzQ TOjg== X-Gm-Message-State: AFq9FYLubJQZTB4Uxf3qcatXSDAocHQNeAIzWFfKcvPsQJqhxAKTmrZY 6+7PLDyDVh79m1slEAfyqTENkKMJU/dnto1rd4kEN1IcBNjLJ/PC1OwGS5xp1A== X-Gm-Gg: AYBFou0oRP+3MJORX16ocKJyK4FyvvH1ayVUO3hJkPyO3CY3YeeV6+wVC2WMvvOrJIg G0WTVskcEynZSxtN9wq/+GYXYTMXvQhBa+FPg3SdXdIcEwcaDHCiseub1Xbsb5uIUzmKmEQHeXY AV2zU0ue10SOns1h5AGVii+v5ZRvvxs4Jg3Q9pzBHd1PHmSJ3L8OCwy7wjbdJjQW5zU+GaL8unQ /6xExe6CEYwjzdsEuavBCUIbrtf9bjp+OycVvordK86zcIhNW0NwbeO71blqu2PftL8x8yPSJMp p3jbQ3DYcE3IVhYmPeUrPWNVS19MTykfZss+6hOoBBUx5fGL9t0sDR5m97Atzo08aKa/txeVErZ HwDrP0vUKFEMANOplzQ+bvjGRUGYcBXLzT9/fxnaW/KamSTgUl+WIwvakplzrB0lP3o0uyBGemc UmpEJhRkwcoktznfy/S5Ulbl/LzhkZfRsib4kFuycR2w4RFVKuo3g7jAeKnj7O6xblkTDUdtXCd Y0LC1X7aWvplvA8sJ8BLZ4CbdglcyYkpkOeAUtPqkd3N2N019mlwqAao//60ExP+c7cp4lL0Vc4 Y7YymqVVk3eLAqQXHgoZqgYrSCKKJD8uCB5MluROD7VO+I3guabM4ybs1t7r6mhdbX6q57F/It6 rFvmEBpdvuw== X-Received: by 2002:a17:90b:35cb:b0:3ac:8897:7b9f with SMTP id 98e67ed59e1d1-3ae5817ae3fmr783002a91.43.1793161533695; Tue, 27 Oct 2026 21:25:33 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.30 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:33 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Peter Marko , Khem Raj , Mohammad Abdoli , Ankur Tyagi Subject: [blacksail][PATCH 37/60] nginx: set CVE_STATUS for CVE-2026-95101 and CVE-2026-97629 Date: Wed, 28 Oct 2026 17:23:35 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:36 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131589 From: Peter Marko These CVEs are fixed in latest release however still show-up in open CVE reports. Reason is that the DB contains entries: { "lessThan": "*", "status": "affected", "version": "1.23.3", "versionType": "custom" } Which should mean that the first affected release is 1.23.3, however without the upper limit it will match all higher releases. The entry with >= 1.30.0 && < 1.30.6 cannot change the result as it works by flagging CVEs where at least one version match is present. Signed-off-by: Peter Marko Signed-off-by: Khem Raj (cherry picked from commit 959f4c8f098a90c24a818831a5e3dd8090cee641) Tested-by: Mohammad Abdoli Signed-off-by: Ankur Tyagi --- meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb index 5d699e63ce..73204da558 100644 --- a/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb +++ b/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb @@ -6,6 +6,9 @@ SRC_URI[sha256sum] = "3cf46f5ed7504d460125866b7bea99fb357f31d887e2e63b35503310e9 inherit upstream-version-is-even +CVE_STATUS[CVE-2026-95101] = "fixed-version: Fixed since 1.30.6" +CVE_STATUS[CVE-2026-97629] = "fixed-version: Fixed since 1.30.6" + # Remove following entries when upgrading recipe to 1.32 CVE_STATUS[CVE-2026-42055] = "fixed-version: Fixed since 1.30.3" CVE_STATUS[CVE-2026-48142] = "fixed-version: Fixed since 1.30.3" From patchwork Wed Oct 28 04:23:36 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102204 Received: from mail-pl1-f179.google.com (mail-pl1-f179.google.com [209.85.214.179]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36214.1793161536600299625 for ; Tue, 27 Oct 2026 21:25:36 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=gNeqtf6h; spf=pass (domain: gmail.com, ip: 209.85.214.179, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pl1-f179.google.com with SMTP id d9443c01a7336-2ea138a3497so2535915ad.2 for ; Tue, 27 Oct 2026 21:25:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161536; x=1793766336; darn=lists.openembedded.org; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=7hjeCtskHSjIF9aPE/8nL6w960jXKHNYNGpyi4T+0cI=; b=gNeqtf6h81CwCUbuQP3s1KI4O2tluStUint1Zns/yQDPardvsGPDIq/WPSkff6Qvb2 QVG4NGDVAHfGF2RLl879Ok1Yswh0ZLMRsUCQx0HXSVXgEsE96nsk4PM35/d0gfhC0nkj q7BYFNyK5UsXR1gfgGuVxKWzXqYxsHNq9h/wK6SeVwfYEeXAFVs0j9JvPNyQQRZSoYWm QVpCmoP/I532tK1hfDnhCt6Bcl9nxPrK5hAhA/pDTQBRW4UejPoDU1clOREs7PhY5003 sKX0nf2yd/0p4Q0cBVpYXsA7dQzsE6J7WzSZ785SkgBGBPIj5yWunrhTgeh6z0LfLR3a +LBg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161536; x=1793766336; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=7hjeCtskHSjIF9aPE/8nL6w960jXKHNYNGpyi4T+0cI=; b=sN4HXzPB1VhatYCnjWmnQic0gfJrrBszTbtn9/MgSU85NfaXoMz03PYe993r3d9qhK J+IFMcqOB6bNIA2TlrSmeHxqhD1NwPN6GWeLkV1tit/jfFZhIYQM0vpZObXsb0JNXRcm /n6Bmv1RAZXMsQXy+3ag2UNQ0MJiq2kmtOOp3vD9X7JVHi6f0iibIjFbDccHBXmnCC2y ewd1ckRvY97+CBiCiOB6wgc7L/XyLt3d3+CcZiRLlv3xkB0p8+GxFrkswEcCOWXVpfJu RjSTg+XLTratilKgz2PUyHT1nh3NQYmRk2xm16FDTfv1RceIibprnzyC6ICBCoqEqeSF TfuA== X-Gm-Message-State: AFq9FYJzf7wmcEfK/PvhiMLb3LE+WFUVLqbzKTO5T8v6a6ZAjoIG0iSJ 7Y5ZoCbyH3WQU2GYTwo0sXB0aXHAT2da+iuK0UIkxOlb7WkD5SVh2Hh7D6vm0A== X-Gm-Gg: AYBFou1F3u1/f11biK7wv4quHzsx2pTp7O38WdDKqkqCu6UCNKG/H31CWIagXmMqmkp SWvCdDenmmH/YCwlCnH3ijM0nAGyxOQA7+41f4I+sc0u8j1q0HCQ613zCWLsHBMY5PXsGNBziCf wDYDry9XgSwjVHA1IEZNXAeYSHGA1mExQlNOJZKJfj0L8iLGQrpVsnyAtgSR5NwKqV4yinpgmtH rrQ4nRbes/kyhgaXn06i0bivO6YAoc7oCaUuB1ulU2/UQug4OPz2QBesSC5Uk2W5aTs5NS+4ECt MPruLVusYLNdBVNedEMLLkpJCjAOEKqYRW+UNi2g2tJnxdWbXtgJWebV2H/Cx6CHTkRmyFB+n5F qM9k9MYX7tKFCOBGstsIMhw9oexeYbtLxK4RFfUUVergF93EkYsaFYnUKGM0xf8PNhB7C8vAtoC QUkttYrKdLquuHDH58HOhX1mlZeavn4I+TIOOFCxr8U8Z7VyCl8/+ku1nBbUr7CDGDWvyyWPKhb Qq6tG3bUwOLktn2anqiYnRhb9JCP9lnN3tuPqmksziEPJftlgHueGiEPTDWDYE14uMz+iI73LjE O+ZVyi/Ul/sbHdXp+JsEb/1ohIq+sYqEqDR5HmGld91EAjvInZWwEpvPXM25zg== X-Received: by 2002:a17:90b:5201:b0:3ad:93b4:718f with SMTP id 98e67ed59e1d1-3ae58289e21mr899150a91.65.1793161535939; Tue, 27 Oct 2026 21:25:35 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.34 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:35 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 38/60] mtr: patch CVE-2026-14461 Date: Wed, 28 Oct 2026 17:23:36 +1300 Message-ID: <60a1ac73cbd979d2a6e26ac93b091973bbc831f5.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:46 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131590 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-14461 Signed-off-by: Ankur Tyagi --- .../mtr/mtr/CVE-2026-14461.patch | 32 +++++++++++++++++++ .../recipes-support/mtr/mtr_0.96.bb | 4 ++- 2 files changed, 35 insertions(+), 1 deletion(-) create mode 100644 meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch diff --git a/meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch b/meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch new file mode 100644 index 0000000000..6628d9d7be --- /dev/null +++ b/meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch @@ -0,0 +1,32 @@ +From 4c75fae93d9515f3ecdfecc966b8c6471efb7ea5 Mon Sep 17 00:00:00 2001 +From: "R.E. Wolff" +Date: Tue, 16 Jun 2026 11:03:39 +0200 +Subject: [PATCH] =?UTF-8?q?Fixed=20possible=20buffer=20overrun=20in=20asn?= + =?UTF-8?q?=20code--=20Micha=C5=82=20Majchrowicz?= +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +(cherry picked from commit 48e1794414d338ce47abc0f27c25ade8788af9c3) + +CVE: CVE-2026-14461 +Upstream-Status: Backport [https://github.com/traviscross/mtr/commit/48e1794414d338ce47abc0f27c25ade8788af9c3] + +Signed-off-by: Ankur Tyagi +--- + ui/asn.c | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/ui/asn.c b/ui/asn.c +index 111c394..487d9e8 100644 +--- a/ui/asn.c ++++ b/ui/asn.c +@@ -94,6 +94,8 @@ static char *ipinfo_lookup( + DEB_syslog(LOG_INFO, "Malloc-txt: %s", UNKN); + return xstrdup(UNKN); + } ++ // Clip len to PACKETSZ. -- Michał Majchrowicz ++ if (len > PACKETSZ) len = PACKETSZ; + + pt = answer + sizeof(HEADER); + diff --git a/meta-networking/recipes-support/mtr/mtr_0.96.bb b/meta-networking/recipes-support/mtr/mtr_0.96.bb index 9008223264..2716ca92aa 100644 --- a/meta-networking/recipes-support/mtr/mtr_0.96.bb +++ b/meta-networking/recipes-support/mtr/mtr_0.96.bb @@ -9,7 +9,9 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263 \ file://ui/mtr.c;beginline=5;endline=16;md5=00a894a39d53726a27386534d1c4e468" SRCREV = "f392168771570b0fdc104c38dea6bbc2ce585710" -SRC_URI = "git://github.com/traviscross/mtr;branch=master;protocol=https;tag=v${PV}" +SRC_URI = "git://github.com/traviscross/mtr;branch=master;protocol=https;tag=v${PV} \ + file://CVE-2026-14461.patch \ +" inherit autotools pkgconfig From patchwork Wed Oct 28 04:23:37 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102205 Received: from mail-pj1-f42.google.com (mail-pj1-f42.google.com [209.85.216.42]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36215.1793161539261990898 for ; Tue, 27 Oct 2026 21:25:39 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=kfTcOUup; spf=pass (domain: gmail.com, ip: 209.85.216.42, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f42.google.com with SMTP id 98e67ed59e1d1-3acd21ba21aso482603a91.1 for ; Tue, 27 Oct 2026 21:25:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161539; x=1793766339; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=OOAX1qtHtE3urSOdXzpda9dKlmJun1VpgJl8QbWETE8=; b=kfTcOUupVgP/9cozNAnXEqlfHSeHI7qYGELVCY14qshjir/QAsIwTkWiT+HPmxDFh6 RQxhH5UuWkdXzH3uCgDu1RiI+AhJcLJjVyCnVChDvbSpSp6EomMElPAZRfL9p+y2eNoE Kb2CFSHOtkeCNkE3Q+0C8rS4ezXzzTDKo14BE9Wi9RaQ3//FNE4XTdES/mH4Sz4UIL2V xxPvIB+n7gvq0riCICf7y1VWSQm335UVVAnIMro7KxIEzYmdP5c7/9oAsOjUDq+V0qaY oUqYZA9xBnaNqRwJdB4/24HT6a+vqfmJjdoMWKuzuI4YIqPCDfpIsrhH6A8x8Q6A373y 6YIA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161539; x=1793766339; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=OOAX1qtHtE3urSOdXzpda9dKlmJun1VpgJl8QbWETE8=; b=QGwa8e9wXmm4VkgkVOwJNq62WaPA4dRbleHAoKHqBKSzOAQhn2uO5RXoY/kBD2vV23 qftP0p81GaYoebluxAsE3dMwgS+Ra6DMzurSJsuVwhbR71NPV82EpCwU/LWy6C3Nscu8 EFijSkkDiXEBBmJb1fFRN2AR7yvYN6ZX1ausks4cY0g9Rp7DE0Fc12t9MRA/QDqZwxOS f7xfLu/UFEfxcDRzaT3ZpQYxrWrv8a2W7SoYUxJq7sNp3IYCfIUutg+/QC5k730hNL6v UTl9XzO+UdGf4/i8pGbngLci/NxT1CgeyMP7FWcAFSfcHUAJxyU9drxUNTz1ccU1+5bw L03g== X-Gm-Message-State: AFq9FYL8loAsQ/6LWcDLkcoY86MeEjqjBcsOOFP8FcMmaTHDyM/W82Za JnHIdP63GoriTUT/leNZ072716zZ4jXM7btlBPakNYiAYXu3AL11LmiEdYk3oA== X-Gm-Gg: AYBFou2UQKvhAdulo1duy48ZMe8fn8QgqUi3GJQJR8KzR33E4Y2o2U2MqFBZXg0W66x W4LSjs4vQV3h6PC7u8ISvjRgEy5YSCOsYxM5DHwvSGfq9Ot617t0k6/b9FGna3UihafN289+3Ol R46G+bDpeWhSHKDqiBgh0LRzI8TexdNpRXSHkG036Gqx1PmnTSz8/J2sjW8Icy1Oqtj+xsJX0CT 60ciUugreeY6YceSavyDQgZo1nCVQCPnYGzQNYubqRelaKB11tYuLTPcfaizOB5fHZUTsPmQfyP vfny3YRppfoWR64MlxKGYgWUJBZgiDwJzc0SCaoFiAsnMIpsSouRewhaz0kO7OTwjpJgQ6G2DeZ 9phIiddb/N+UuojIErowpdPjxNbu4CDF5Z1l4XRjhj3/js4FwACv1IAevksEQY7g24BXoZzhNqX kyvElI/eb96f9vJeeuatDCVtA/aW/D+m812aZbd7z6HRhkp4CTinvpuG0afJK9e9jBjeax0RMFo ruVbZ5Ym6qzvcHyVa+8yKF4S71epBENi9zLp4nQLj0+rebmjOd5Hi2RCkF3iTh4/d2kATx708S6 YvA1gzuvAo1SwXHUYSQ3iOF7nXxNw3ojxvYavGUESVn7ij0ZMjHi9ihi7kq0Yw== X-Received: by 2002:a17:90b:37cb:b0:3ac:9e5e:d1a9 with SMTP id 98e67ed59e1d1-3ae581aaf2bmr838239a91.20.1793161538713; Tue, 27 Oct 2026 21:25:38 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.36 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:38 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 39/60] ncp: ignore CVE-2025-14577 and CVE-2026-35087 Date: Wed, 28 Oct 2026 17:23:37 +1300 Message-ID: <3e1f043594d015469be6889eee1bb2e9b7c5818e.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:46 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131591 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2025-14577 https://nvd.nist.gov/vuln/detail/cve-2026-35087 Signed-off-by: Ankur Tyagi --- meta-networking/recipes-support/ncp/ncp_1.2.4.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta-networking/recipes-support/ncp/ncp_1.2.4.bb b/meta-networking/recipes-support/ncp/ncp_1.2.4.bb index ec6d918744..19fb258aec 100644 --- a/meta-networking/recipes-support/ncp/ncp_1.2.4.bb +++ b/meta-networking/recipes-support/ncp/ncp_1.2.4.bb @@ -29,3 +29,6 @@ do_install() { } BBCLASSEXTEND = "native nativesdk" + +CVE_STATUS[CVE-2025-14577] = "cpe-incorrect: This vulnerability is for Slican NCP" +CVE_STATUS[CVE-2026-35087] = "cpe-incorrect: This vulnerability is for Slican NCP" From patchwork Wed Oct 28 04:23:38 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102206 Received: from mail-pg1-f170.google.com (mail-pg1-f170.google.com [209.85.215.170]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36068.1793161541790967515 for ; Tue, 27 Oct 2026 21:25:41 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=KP/u2GHe; spf=pass (domain: gmail.com, ip: 209.85.215.170, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f170.google.com with SMTP id 41be03b00d2f7-cc7e79c1eaaso266033a12.2 for ; Tue, 27 Oct 2026 21:25:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161541; x=1793766341; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=T5dlxhYWULY7TJ5uvh5yd2JOP2ZczBQ8SgMUQQkEb/M=; b=KP/u2GHeOuHjb8Qw9Jyrezr+f9C7iSk3Uonpw148nRq47j7sKPSUoYq7SGR2yO2Vd6 RWr2jfZiKr8/N6cVvB8j9gj4EAOrlsMK2MQ9N40Utp+gIDI4xZyNmsLVbbs9+4CKdiEZ vfLUkJiChwk6yvMtAZqyzxqiJQ5mFo4ma2G3dfgx9/I+I46+fbVlf4/SyoaePNXJTHT4 eQn8ivxZyOPB/7Hf9aiHQoJj1aM4DxbbWSIjNXRl7Cp4/caVEgLBOTrLx+d8LjJcB+1k RiZ0gd2X7DsDqcQuHBYTjn5/paubK+zlYbVahjKKTIJ66R+v3FuK7EsJDJuYgCKkVnkq ZOhw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161541; x=1793766341; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=T5dlxhYWULY7TJ5uvh5yd2JOP2ZczBQ8SgMUQQkEb/M=; b=FLmhJoqHcOIR2FFyDio+ztpB2kpTcP76GQwEBEecHAoM2bIwk6LfKRXwI3FA+GGDP5 Ta7ff+Are82Qi/0o0m/AYO5fKlbZf8eMOSndxPwu7pMY0aywg82/jGbxzBX7I+i3CMGR 3Ux3DWYrVV2mETLSu7me6yHiBAU6ru4TNZk1C4rdZJ4Za80qh0TETW1q/FXGGD/ee27U l+7te6PMkHTrT1Zc35jz551TnYtastaalf7blsIsV+E2kPLlTDbdL/D3n9e+SBXG+seK aFq809E2/6DLT/vQQsnYCN/DRuEwluYkTyobKF26zdRfLgn/W8HxmgAfmbLNb0pSvJ8/ Za4w== X-Gm-Message-State: AFq9FYJF5ZXt7jmTj4SdETZHf2qtw5odvj/3qPrB2N6v23mHb0Tp6ch0 tvMc+MnzdsknJy+HYzKDm2Stal7/+xiw21sF3zyAzf8tihH4CrxMvcUqYJ6Q2g== X-Gm-Gg: AYBFou1vzdF7jUtprLH4wpd0sY/kdjLKIQSeeHizWgPV7438uafGri8M38GQRnBTZbV wwKHi+BBPahz8ESjGBGhxXiq1cg2NLGXgYFJs5c8v8acGC58b3N/iWeq2baOkgaXKAeA1mwhFlg 4aV1UxktgRU4yULWlzZOfAXPAFLjuUViLhx6qaNf9Ge/7JE007AtO5UmicCp0j5Wir3g8VsGw/Q MP4Op2HFjtdEeY48xMedAhr6W82sU8foDQ/2GoCv+4gOD/a54rjZK3aQOpn8UiR9N7TS57NRhV8 +7lvnqkJGcrtOhkyX7KdeX9THhRbIrdLfpoTVb5oYayAJJjXWfn6b/ZTDjxCuABDB0GACWjUils UTHNghEzpzWAw3422t1Y0NA1jmy2/tejUVghqV9TgIEhBchjL3OlkjEPAVu5GpSK9U03AIZmSE7 zNRD52aCMktHasXXvjSJ5vrENZKuk373V0s2tuj+px5D9IsQyyNK0TWuGtUhcjoK6PsT3GX7swW J7RbcaHMDSnbvudmGvzu2MoXRHX8K958327Ew223OfjknXDS1dt+TFjw9Ukt7RqKDq8z9GQRWC2 +DCWseg6UDnOM9QFOrCkQk3u47s/DOKBQ2jsOpWyhuhKFdzn/ww8HTZcRqqLYdt3 X-Received: by 2002:a17:90b:4c49:b0:3a0:516d:9f88 with SMTP id 98e67ed59e1d1-3ae580cd137mr887057a91.26.1793161541072; Tue, 27 Oct 2026 21:25:41 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.39 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:40 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 40/60] libvncserver: patch CVE-2026-44988 Date: Wed, 28 Oct 2026 17:23:38 +1300 Message-ID: <4ba15423c73a0e260490a4954936a83ee6abb8b2.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:46 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131592 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-44988 Signed-off-by: Ankur Tyagi --- .../libvncserver/CVE-2026-44988.patch | 71 +++++++++++++++++++ .../libvncserver/libvncserver_0.9.15.bb | 1 + 2 files changed, 72 insertions(+) create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch new file mode 100644 index 0000000000..e26abc9db7 --- /dev/null +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch @@ -0,0 +1,71 @@ +From db5779f2bec717f577fb66321b3b079ff156da95 Mon Sep 17 00:00:00 2001 +From: Kang Hee chan <24s101h0659@sonline20.sen.go.kr> +Date: Wed, 6 May 2026 21:48:54 +0900 +Subject: [PATCH] libvncclient: fix Tight gradient decoding overflow + +(cherry picked from commit 5b270544b85233668b98161323297d418a8f5fd1) + +CVE: CVE-2026-44988 +Upstream-Status: Backport [https://github.com/LibVNC/libvncserver/commit/5b270544b85233668b98161323297d418a8f5fd1] +Signed-off-by: Ankur Tyagi +--- + include/rfb/rfbclient.h | 3 ++- + src/libvncclient/tight.c | 10 +++++++--- + 2 files changed, 9 insertions(+), 4 deletions(-) + +diff --git a/include/rfb/rfbclient.h b/include/rfb/rfbclient.h +index a974ff5f..666dcb90 100644 +--- a/include/rfb/rfbclient.h ++++ b/include/rfb/rfbclient.h +@@ -314,10 +314,11 @@ typedef struct _rfbClient { + rfbBool zlibStreamActive[4]; + + /* Filter stuff. Should be initialized by filter initialization code. */ ++#define TIGHT_GRADIENT_MAX_WIDTH 2048 + rfbBool cutZeros; + int rectWidth, rectColors; + char tightPalette[256*4]; +- uint8_t tightPrevRow[2048*3*sizeof(uint16_t)]; ++ uint8_t tightPrevRow[TIGHT_GRADIENT_MAX_WIDTH*3*sizeof(uint16_t)]; + + #ifdef LIBVNCSERVER_HAVE_LIBJPEG + /** JPEG decoder state (obsolete-- do not use). */ +diff --git a/src/libvncclient/tight.c b/src/libvncclient/tight.c +index 57a3715b..dad5514f 100644 +--- a/src/libvncclient/tight.c ++++ b/src/libvncclient/tight.c +@@ -229,6 +229,11 @@ HandleTightBPP (rfbClient* client, int rx, int ry, int rw, int rh) + bitsPixel = InitFilterPaletteBPP(client, rw, rh); + break; + case rfbTightFilterGradient: ++ if (rw > TIGHT_GRADIENT_MAX_WIDTH) { ++ rfbClientLog("Tight Gradient rectangle width %d exceeds maximum %d.\n", ++ rw, TIGHT_GRADIENT_MAX_WIDTH); ++ return FALSE; ++ } + filterFn = FilterGradientBPP; + bitsPixel = InitFilterGradientBPP(client, rw, rh); + break; +@@ -430,7 +435,7 @@ FilterGradient24 (rfbClient* client, int srcx, int srcy, int numRows) + CARDBPP *dst = + (CARDBPP *)&client->frameBuffer[(srcy * client->width + srcx) * BPP / 8]; + int x, y, c; +- uint8_t thisRow[2048*3]; ++ uint8_t thisRow[TIGHT_GRADIENT_MAX_WIDTH*3]; + uint8_t pix[3]; + int est[3]; + +@@ -473,7 +478,7 @@ FilterGradientBPP (rfbClient* client, int srcx, int srcy, int numRows) + int x, y, c; + CARDBPP *src = (CARDBPP *)client->buffer; + uint16_t *thatRow = (uint16_t *)client->tightPrevRow; +- uint16_t thisRow[2048*3]; ++ uint16_t thisRow[TIGHT_GRADIENT_MAX_WIDTH*3]; + uint16_t pix[3]; + uint16_t max[3]; + int shift[3]; +@@ -705,4 +710,3 @@ ReadCompactLen (rfbClient* client) + /* LIBVNCSERVER_HAVE_LIBZ and LIBVNCSERVER_HAVE_LIBJPEG */ + #endif + #endif +- diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb index 77612e1626..47e42cd094 100644 --- a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb @@ -46,6 +46,7 @@ inherit cmake pkgconfig SRC_URI = "git://github.com/LibVNC/libvncserver;branch=master;protocol=https;tag=LibVNCServer-${PV} \ file://0001-CMake-require-at-least-CMake-3.5.patch \ + file://CVE-2026-44988.patch \ " SRCREV = "9b54b1ec32731bd23158ca014dc18014db4194c3" From patchwork Wed Oct 28 04:23:39 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102207 Received: from mail-pj1-f54.google.com (mail-pj1-f54.google.com [209.85.216.54]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36069.1793161544062618088 for ; Tue, 27 Oct 2026 21:25:44 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=gcJZEdS+; spf=pass (domain: gmail.com, ip: 209.85.216.54, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f54.google.com with SMTP id 98e67ed59e1d1-3acdcfa2bd3so452838a91.3 for ; Tue, 27 Oct 2026 21:25:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161543; x=1793766343; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=I7IcKFN+mRbxB0Jt7GDfhFlCKIprJx/reEIRujSdvTg=; b=gcJZEdS+LCSFoBKFLDXado4Ljcc2amLbQe6FK2TGvRRP61xRLCxoUu0Cu1L9GHsKeH bnxxKWwxSMsnwN+VhGnu+dWrzG8feoHJs1vbHhDU/CN/UFJM2eAiZAcrEnJ0rZaSDZCs brdkIrYprJ8OWm+KXrBBZxIxHqyQPEVRhqgOoT8SlPC9xRXk25eOwqgNYfSGOAfO+MFf 9VzJp8kPl+EhWL7ylcWOBKX7N3Rpoh7o361gCeybBu4J9gO0rSFWFI+BvDdk/Uxgaw5N /D2s3UfR56eoSWAnuCmPGqvN9H8WCRmEMW4ALjhcY9gSp0DUy3Nvqb6TK4IrsEc1ubDC 52KA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161543; x=1793766343; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=I7IcKFN+mRbxB0Jt7GDfhFlCKIprJx/reEIRujSdvTg=; b=PIO9pHTt43aKp4xHdZPV9svxtoSV/eDqzclLaKGJ96ZrG4mrZal2clwV7idBpq33cO k/H9HS+13NnXOM22EomRxAmH38Sg0O4mgwniAlPDj/yhBH+/iNgjcos+1uwZP60KSFi3 b0XhwLGnBif4vO4Iymx5LjczahJNVgGcbOfHyP9WuUyzNpoc4gw4PxsXenqUTL9j+y11 jLRCBWmwnNye8TZ+YAZqXV40ouNdpsR0w3ekMKyoldiwXf0w8TtSLwjAi6TDuMovPnr1 QeX9ij8XLksvOTOAmN1LMa0maezNenUlcvxfp8yZaNusFj0644mbKlsrWVD9MS+417TI 3YGg== X-Gm-Message-State: AFq9FYJmWE9dunU2Nw3/yJtxsrpGYYl+XLjrk4NB73/8YTXDEHkY/6Bu TxJijNBtIsxHlZgEv9rVttKY66viSE1c1qixlL+lNypT20hJt0iiSwUkRT9qyQ== X-Gm-Gg: AYBFou2mFMdCF9Ay8nDH3FW7elzvg/6C7vCuKXNAhmjzfiash2S2P8qbbl2B4qpmkoD KXvOuFpDwQu+r8lEf6mfq18h/p+KtLInA/CJvE62dqbDnvY3h6xqqRi9wCBUlNVvtOOM9+arzMW 5GsuUhiLNspkjw5rBgpgMUei2ATG+5jodnN1OvXWnyK6VW8SPmxpc1iqmMjiRSMM2k8ZoPYNWbI 28yNpnS2T76lXiIZXrICkSoT1qRlbTuCTapoC8Qnh42UMAWsPQLyy0xkPtaaVXFpLFm6SpM2E6z qIUemQcTCleWQZiNbd8pt4AG4x4B/YsbzFvRTJN6mXOCop05wDgodWpPax5aHAVEv0Vwsco/Eok dX+Bn/4e+GPfVWU2xS6jnkqImn7RqPI15gzg8B2xR0wma8rjUclBfhnR0N5BOHH+K0KvTrQwmei nRO19UDEai5V9vPS2WptG1rvqSydR07RW2pr6WIHspAnjKTSQhpdQBIYx15YEZjk2BU/j/do9Yi AvlrWE/DaIsbe6PYsaZ1cW9O3ecg7Zri4vfVEnHTxgyLGbduKUg/6IyuzicdMmX45A2TzmkZB+K tTPO5aUc8CIjapc5yvElymUgQXCW5EFh4202X1dizDrWs3wuF+ffUJmu77JbKA== X-Received: by 2002:a17:90b:582e:b0:3a8:878:ebab with SMTP id 98e67ed59e1d1-3ae580a0835mr872287a91.35.1793161543365; Tue, 27 Oct 2026 21:25:43 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.41 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:43 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 41/60] libvncserver: patch CVE-2026-32854 Date: Wed, 28 Oct 2026 17:23:39 +1300 Message-ID: <3f2eb98cd85e201fb921e969be9a73f3a143eb6e.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:46 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131593 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-32854 Signed-off-by: Ankur Tyagi --- .../libvncserver/CVE-2026-32854.patch | 66 +++++++++++++++++++ .../libvncserver/libvncserver_0.9.15.bb | 1 + 2 files changed, 67 insertions(+) create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch new file mode 100644 index 0000000000..85adf3eba2 --- /dev/null +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch @@ -0,0 +1,66 @@ +From bf01ccc67bc8181568af2d1f6e1f6f6888b51bde Mon Sep 17 00:00:00 2001 +From: Kazuma Matsumoto <269371721+y637F9QQ2x@users.noreply.github.com> +Date: Thu, 19 Mar 2026 17:42:00 +0900 +Subject: [PATCH] libvncserver: fix NULL pointer dereferences in httpd proxy + handlers + +httpProcessInput() passes the return value of strchr() to atoi() +and strncmp() without checking for NULL. If a CONNECT request +contains no colon, or a GET request contains no slash, strchr() +returns NULL, leading to a segmentation fault. + +Add NULL checks before using the strchr() return values. + +(cherry picked from commit dc78dee51a7e270e537a541a17befdf2073f5314) + +CVE: CVE-2026-32854 +Upstream-Status: Backport [https://github.com/LibVNC/libvncserver/commit/dc78dee51a7e270e537a541a17befdf2073f5314] +Signed-off-by: Ankur Tyagi +--- + src/libvncserver/httpd.c | 24 ++++++++++++++---------- + 1 file changed, 14 insertions(+), 10 deletions(-) + +diff --git a/src/libvncserver/httpd.c b/src/libvncserver/httpd.c +index 2186ae54..604e5bf9 100644 +--- a/src/libvncserver/httpd.c ++++ b/src/libvncserver/httpd.c +@@ -337,10 +337,11 @@ httpProcessInput(rfbScreenInfoPtr rfbScreen) + + + /* Process the request. */ +- if(rfbScreen->httpEnableProxyConnect) { ++if(rfbScreen->httpEnableProxyConnect) { + const static char* PROXY_OK_STR = "HTTP/1.0 200 OK\r\nContent-Type: octet-stream\r\nPragma: no-cache\r\n\r\n"; + if(!strncmp(buf, "CONNECT ", 8)) { +- if(atoi(strchr(buf, ':')+1)!=rfbScreen->port) { ++ char *colon = strchr(buf, ':'); ++ if(colon == NULL || atoi(colon+1)!=rfbScreen->port) { + rfbErr("httpd: CONNECT format invalid.\n"); + rfbWriteExact(&cl,INVALID_REQUEST_STR, strlen(INVALID_REQUEST_STR)); + httpCloseSock(rfbScreen); +@@ -353,14 +354,17 @@ httpProcessInput(rfbScreenInfoPtr rfbScreen) + rfbScreen->httpSock = RFB_INVALID_SOCKET; + return; + } +- if (!strncmp(buf, "GET ",4) && !strncmp(strchr(buf,'/'),"/proxied.connection HTTP/1.", 27)) { +- /* proxy connection */ +- rfbLog("httpd: client asked for /proxied.connection\n"); +- rfbWriteExact(&cl,PROXY_OK_STR,strlen(PROXY_OK_STR)); +- rfbNewClientConnection(rfbScreen,rfbScreen->httpSock); +- rfbScreen->httpSock = RFB_INVALID_SOCKET; +- return; +- } ++ if (!strncmp(buf, "GET ",4)) { ++ char *slash = strchr(buf, '/'); ++ if (slash != NULL && !strncmp(slash,"/proxied.connection HTTP/1.", 27)) { ++ /* proxy connection */ ++ rfbLog("httpd: client asked for /proxied.connection\n"); ++ rfbWriteExact(&cl,PROXY_OK_STR,strlen(PROXY_OK_STR)); ++ rfbNewClientConnection(rfbScreen,rfbScreen->httpSock); ++ rfbScreen->httpSock = RFB_INVALID_SOCKET; ++ return; ++ } ++ } + } + + if (strncmp(buf, "GET ", 4)) { diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb index 47e42cd094..9fbec58c72 100644 --- a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb @@ -47,6 +47,7 @@ inherit cmake pkgconfig SRC_URI = "git://github.com/LibVNC/libvncserver;branch=master;protocol=https;tag=LibVNCServer-${PV} \ file://0001-CMake-require-at-least-CMake-3.5.patch \ file://CVE-2026-44988.patch \ + file://CVE-2026-32854.patch \ " SRCREV = "9b54b1ec32731bd23158ca014dc18014db4194c3" From patchwork Wed Oct 28 04:23:40 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102208 Received: from mail-pg1-f175.google.com (mail-pg1-f175.google.com [209.85.215.175]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36216.1793161546191393654 for ; Tue, 27 Oct 2026 21:25:46 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=PLNzSZfr; spf=pass (domain: gmail.com, ip: 209.85.215.175, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f175.google.com with SMTP id 41be03b00d2f7-cd8ba7c2694so221668a12.1 for ; Tue, 27 Oct 2026 21:25:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161545; x=1793766345; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=quuckHUW88M0c3FHYx6XxuCwr9T1qdVWzn407ExGYz4=; b=PLNzSZfr9q7RSXr8Tg1gD8Mubz5WdESUPLB3NNCKbGJ6mwpOxpmvlascYnFnrJ7NKq BM5qQus7GB/BwGAikNTJMQSGX03iejb+IglRWtAYHtmVUFBnyqocGx9+qquJEDbnUvvw q97WA2v5lOq//mn9FN+WmIdaoi4c/K1xdEuOu7CglLzZvPSUBcLRqFEkcg8vxJTDOr8Q YP9qS+somApUApRU2SWE9P1x03T5NQta8IXWEY5dRsYNLiAEt4ICJqpXfZw/wNzVVanL Z9SzUsWqqf3BlCB5CkMNODcOqkgilSy2Op3+U2JntywalDjXFxZeMchvNLpa/AEKQgWn WYhg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161545; x=1793766345; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=quuckHUW88M0c3FHYx6XxuCwr9T1qdVWzn407ExGYz4=; b=V8usJpz0c/U+V2zfXyGyOMyFhqjQykjh2GOXHMFtmV9Dkexu3hpoYHJu0MUlCVYJ0a QksymenNcV+H5T12xAcfOVV22wU85bUUj+dTMIjwk2lq38pyjWkebqyTU0c+9qpocIDt 9lY6FnWR7bfZccAFNGkihxqZNh71lJUw2Irg5oQYzR7FPsNELM5l18WQXAAluzL9cy60 cO3Xy8w0sJFdTUZZ8rEPU6zLEyMBBgQPUT+c+3jqm6NFfnS/UV8kPJmJXUX9AW3YyjmD YI+jvI6/BW1YOYE2mqytJMNCqGg2wIzQldlgvLpAbcEO7vTPkpXwe1AtOCjQIJxBcU0J p0kQ== X-Gm-Message-State: AFq9FYJDPyHGMr3uxEYJAtdUln0E8vSa1yzKOIk5NO2s6TzsPy8lIsKs vPkRxgeg2HqmnKB2DWoshMDROi59nXzuD98BIl0Fu0wsoI+Y3d5DYtqaYj6FZg== X-Gm-Gg: AYBFou08qTt8zgvC8/tT4iIHEazX9/lIjvqelH+6+Vp7Jho9eTaARds2M1zDzAC2hwy J8vMpLa33Im4ii+sIDtdGZluuA+Y16psbzYwnOcnn+yiJzq2patq8AJJUynLrkiA73WOx0o4X1b S27OXx/dnRj+4sxmYIoVAC6NFMNxLgkAsc+K7Xpl919obIMsMsdt6ocYv/yLUmsi2FxpT+Hgs6h WsYYVtYNCZzILOGt48R3Mjm2/wGZN8iphou1CKgTlTMnYdd4rVndSLpue1iDG1Mwr39q64bcXDQ PBPz3TxF7MjfAoX7/bbmyA6vWXXcGPvolZuI0FoAlYG2RyXw0WcVKzRHyKtkKQggHKHzipTFlrA Tkhj4OV8752pfWD+CV+WLwuzHD7yprhE+SIomYgAzWqbXq7rHJD2TQzVTcvP7qBl904OqFTHpGU n8woHBBHx4b9sL2b6c1cLBJL24sPo22mpCrzIbjoW0bj1Qa5nscJTNo3/O6d8S3IECTPW6z0og1 DQTISKnivVDKMIVV4MhhWUby83o5IUoYTBI12EZtlCCD2wZogaF/b1izOFD3v73v+9WxcDb0KIR G4bwVZWWGjHJV/ds20l+edzKBYYTpyhjenRosSMO4CeWjkPYJ8eH7APQdlWj0w== X-Received: by 2002:a17:90b:4d0e:b0:3ac:af8d:c839 with SMTP id 98e67ed59e1d1-3ae5822f6a2mr860040a91.35.1793161545503; Tue, 27 Oct 2026 21:25:45 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.43 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:45 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 42/60] libvncserver: patch CVE-2026-32853 Date: Wed, 28 Oct 2026 17:23:40 +1300 Message-ID: <105c0a7d4bae8ed71f4fb95973e660940163dc6d.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:46 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131594 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-32853 Signed-off-by: Ankur Tyagi --- .../libvncserver/CVE-2026-32853.patch | 76 +++++++++++++++++++ .../libvncserver/libvncserver_0.9.15.bb | 1 + 2 files changed, 77 insertions(+) create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch new file mode 100644 index 0000000000..23d6a3df1f --- /dev/null +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch @@ -0,0 +1,76 @@ +From 4d5c0ea960e4a22cd8b8fb3c6e18b5a1b1797783 Mon Sep 17 00:00:00 2001 +From: Kazuma Matsumoto <269371721+y637F9QQ2x@users.noreply.github.com> +Date: Sun, 22 Mar 2026 20:35:49 +0100 +Subject: [PATCH] libvncclient: add bounds checks to UltraZip subrectangle + parsing + +HandleUltraZipBPP() iterates over sub-rectangles using numCacheRects +(derived from the attacker-controlled rect.r.x) without validating +that the pointer stays within the decompressed data buffer. A malicious +server can set a large numCacheRects value, causing heap out-of-bounds +reads via the memcpy calls in the parsing loop. + +Add bounds checks before reading the 12-byte subrect header and before +advancing the pointer by the raw pixel data size. Use uint64_t for the +raw data size calculation to prevent integer overflow on 32-bit platforms. + +(cherry picked from commit 009008e2f4d5a54dd71f422070df3af7b3dbc931) + +CVE: CVE-2026-32853 +Upstream-Status: Backport [https://github.com/LibVNC/libvncserver/commit/009008e2f4d5a54dd71f422070df3af7b3dbc931] +Signed-off-by: Ankur Tyagi +--- + src/libvncclient/ultra.c | 16 +++++++++++++++- + 1 file changed, 15 insertions(+), 1 deletion(-) + +diff --git a/src/libvncclient/ultra.c b/src/libvncclient/ultra.c +index 1d3aaba6..5633b8cb 100644 +--- a/src/libvncclient/ultra.c ++++ b/src/libvncclient/ultra.c +@@ -126,6 +126,7 @@ HandleUltraZipBPP (rfbClient* client, int rx, int ry, int rw, int rh) + int toRead=0; + int inflateResult=0; + unsigned char *ptr=NULL; ++ unsigned char *ptr_end=NULL; + lzo_uint uncompressedBytes = ry + (rw * 65535); + unsigned int numCacheRects = rx; + +@@ -194,11 +195,18 @@ HandleUltraZipBPP (rfbClient* client, int rx, int ry, int rw, int rh) + + /* Put the uncompressed contents of the update on the screen. */ + ptr = (unsigned char *)client->raw_buffer; ++ ptr_end = ptr + uncompressedBytes; + for (i=0; i ptr_end) { ++ rfbClientLog("UltraZip: subrect %d header exceeds decompressed data bounds\n", i); ++ return FALSE; ++ } ++ + memcpy((char *)&sx, ptr, 2); ptr += 2; + memcpy((char *)&sy, ptr, 2); ptr += 2; + memcpy((char *)&sw, ptr, 2); ptr += 2; +@@ -213,8 +221,13 @@ HandleUltraZipBPP (rfbClient* client, int rx, int ry, int rw, int rh) + + if (se == rfbEncodingRaw) + { ++ uint64_t rawBytes = (uint64_t)sw * sh * (BPP / 8); ++ if (rawBytes > (size_t)(ptr_end - ptr)) { ++ rfbClientLog("UltraZip: subrect %d raw data exceeds decompressed data bounds\n", i); ++ return FALSE; ++ } + client->GotBitmap(client, (unsigned char *)ptr, sx, sy, sw, sh); +- ptr += ((sw * sh) * (BPP / 8)); ++ ptr += (size_t)rawBytes; + } + } + +@@ -222,3 +235,4 @@ HandleUltraZipBPP (rfbClient* client, int rx, int ry, int rw, int rh) + } + + #undef CARDBPP ++ diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb index 9fbec58c72..e2f995947f 100644 --- a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb @@ -48,6 +48,7 @@ SRC_URI = "git://github.com/LibVNC/libvncserver;branch=master;protocol=https;tag file://0001-CMake-require-at-least-CMake-3.5.patch \ file://CVE-2026-44988.patch \ file://CVE-2026-32854.patch \ + file://CVE-2026-32853.patch \ " SRCREV = "9b54b1ec32731bd23158ca014dc18014db4194c3" From patchwork Wed Oct 28 04:23:41 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102209 Received: from mail-pg1-f179.google.com (mail-pg1-f179.google.com [209.85.215.179]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36071.1793161548471548115 for ; Tue, 27 Oct 2026 21:25:48 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=kQk9aC6D; spf=pass (domain: gmail.com, ip: 209.85.215.179, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f179.google.com with SMTP id 41be03b00d2f7-cdadf7e248aso232018a12.3 for ; Tue, 27 Oct 2026 21:25:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161548; x=1793766348; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=bMZWrUxPiD/DZ3eOTZX4K9oNsIWXpZlaHqLpM/3qtvg=; b=kQk9aC6DvbYnnpYIm+Vi3QJEQTSaqQpHTgr6roFyX0qlv/dZ+ibcVkKJDVDZ3ZdYwa Nu8U7EtPs31nwY8BTefA1vRXPEo01znp6497Anv0H++KLtNAL19CXvtf7759EncTuJht MAkmGmcr3y5OcXyBiKW19VP7iEjgpWhjz94qicHD3ngT6VeaNfhQr5X7wLY5mAppIJzP NY6u6XnYWv4yNlPZQgAeM+q231jA58Ys16qztxKZZ8chIu7JfEFAHipprzlTwcwKxXSn QTGSeXFoDSo4EhHJmXZlzCjWYkvieKUkBhRgRrwX0+Cj2IjFyYhbV6HoUjw4ZQrBM0Wv hgUA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161548; x=1793766348; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=bMZWrUxPiD/DZ3eOTZX4K9oNsIWXpZlaHqLpM/3qtvg=; b=cYvDVF5LAOWAJNDhCKECr4kCudoitSHbOt7iaNVC9pU/Md7FeCjU7oDwLVW6MawG7t lCNHaQ5bNomy2hC/bH91TW+kqAoikux+qEH2/VZeb+PZAtbgDGePoGWvf0YumsygYSW1 LGDlyJG96VtMxm5VgKVo0OMFXr/hqwqaBh+IHtcGfKxQq/kG5SXXrPPdb+MYtdLvjnGc pv8Wy7wBks/kXVFSWyD9eFAfE+TcWqQrpZdscnW0fXFATYJGduAdPZLb02ccJ92p700v B6xW7Zo5VKMZKJ+bw92tb3A50Y2AX43V1Mlg6JaeFrQa35ot5vS4VjcPyeJuFxpmWhxb F8Qw== X-Gm-Message-State: AFq9FYJ0gtJ4cr4hBjgmJosx8DggfXMfRPvUtVi62DsucVqmhGgmfpHX MEalVcWkM2w2G/0l8h4iMJwSk3e0Sw2jtbWJo1Js0i8NpH7GZRTTEGUY0pLSdw== X-Gm-Gg: AYBFou1oKvzpZVDhPfHkxPAo7bpl4w4x+zenFztbFsntKjZrwMOb/s6v6h3PyoXfjZd gm2seraY++44GVtlqiCeNTWtbzf8zBryNeGREznCjBGRlo+9ITXo53t/VC8qyjKksAFQy6d/uG3 DqyFEcxyreFbPH0kHEO4fJ5ztt1ioUmnS54KZqU373xgKdtIhLj0lJo1PIoKeh85RY3mbqlb2se nXKWDXiEUP+6Lch7G3voYU03vhXmb+47b8niZqE7R7kReaKBjpXL106CpdRv0tkqX5bUlXRJ3tg LKMYfBugTtYdzGZLAeMujVw4sH9m+9oI8SSxMg/BiTAn6Hidf5pUL6SU+qXZWwsCYo0W609i/NC cbNBiYQrIg7X4wyVotMUWxU32jkm+xuvrMjymSEHl5oTdwI7s8axqt5FTXp+1kL+1wJdmlkkiSG wbTuteXynHFQfdvNrNnjYzSJ0eC6e13Xqx5COymxw2gnlCIVhjP9MlbDut20i6eyyzNkpzlZ5Az kuIuS7crM4tJedf4Quays4SxfUpPnBQgDNn9EFs0gqPgQK0d4Z6VggCj+b+3h67PC+B5BGFS8Pm u7L6v9ThbFoaA1oRYjnsd5Y/F1nCXaLTtNmuIgqpFOKWvT73bupWnCZqmjLMLQ== X-Received: by 2002:a17:90b:224f:b0:3a0:b312:1fbe with SMTP id 98e67ed59e1d1-3ae580a7ac7mr753597a91.23.1793161547854; Tue, 27 Oct 2026 21:25:47 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.45 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:47 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 43/60] libvncserver: patch CVE-2026-50538 Date: Wed, 28 Oct 2026 17:23:41 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:56 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131595 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-50538 Signed-off-by: Ankur Tyagi --- .../libvncserver/CVE-2026-50538.patch | 49 +++++++++++++++++++ .../libvncserver/libvncserver_0.9.15.bb | 1 + 2 files changed, 50 insertions(+) create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch new file mode 100644 index 0000000000..da01736323 --- /dev/null +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch @@ -0,0 +1,49 @@ +From e824e7d8ea71feccb81aeb34771eb83e052c3fe2 Mon Sep 17 00:00:00 2001 +From: "Bas.Levering" <45083161+Bazskillz@users.noreply.github.com> +Date: Fri, 29 May 2026 09:08:28 +0200 +Subject: [PATCH] Merge commit from fork + +HandleTightBPP's basic-compression loop wrote each batch of decompressed +rows straight into client->frameBuffer (via FilterCopy/Palette/Gradient) +and only compared the running total against the rectangle height rh after +the loop. A malicious or man-in-the-middle server can send a zlib stream +that decompresses to more rows than rh, so the writes run past the end of +the framebuffer allocation: an attacker-controlled heap out-of-bounds +write reachable in a default build (Tight is advertised when built with +libz+libjpeg), pre-authentication, from one FramebufferUpdate. + +Clamp numRows to the remaining height before calling filterFn, matching +the existing house style (trle.c and the Tight JPEG path already clamp to +the rectangle height). + +Co-authored-by: Bas Levering +(cherry picked from commit 540332be3e0acc566fa64da6f1b4680c72c724dd) + +CVE: CVE-2026-50538 +Upstream-Status: Backport [https://github.com/LibVNC/libvncserver/commit/540332be3e0acc566fa64da6f1b4680c72c724dd] +Signed-off-by: Ankur Tyagi +--- + src/libvncclient/tight.c | 10 ++++++++++ + 1 file changed, 10 insertions(+) + +diff --git a/src/libvncclient/tight.c b/src/libvncclient/tight.c +index dad5514f..3ee0d5e0 100644 +--- a/src/libvncclient/tight.c ++++ b/src/libvncclient/tight.c +@@ -341,6 +341,16 @@ HandleTightBPP (rfbClient* client, int rx, int ry, int rw, int rh) + + numRows = (bufferSize - zs->avail_out) / rowSize; + ++ /* The decompressed stream is server-controlled and may yield more rows ++ than the rectangle's declared height. filterFn() writes directly into ++ client->frameBuffer, so clamp here before writing to avoid running past ++ the framebuffer (heap out-of-bounds write). The post-loop ++ "rowsProcessed != rh" check happens too late. */ ++ if (numRows > rh - rowsProcessed) { ++ rfbClientLog("Tight: too many scan lines after decompression.\n"); ++ return FALSE; ++ } ++ + filterFn(client, rx, ry+rowsProcessed, numRows); + + extraBytes = bufferSize - zs->avail_out - numRows * rowSize; diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb index e2f995947f..ff7327c6cf 100644 --- a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb +++ b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb @@ -49,6 +49,7 @@ SRC_URI = "git://github.com/LibVNC/libvncserver;branch=master;protocol=https;tag file://CVE-2026-44988.patch \ file://CVE-2026-32854.patch \ file://CVE-2026-32853.patch \ + file://CVE-2026-50538.patch \ " SRCREV = "9b54b1ec32731bd23158ca014dc18014db4194c3" From patchwork Wed Oct 28 04:23:42 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102210 Received: from mail-pj1-f49.google.com (mail-pj1-f49.google.com [209.85.216.49]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36217.1793161551307412028 for ; Tue, 27 Oct 2026 21:25:51 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=GzEwpRx+; spf=pass (domain: gmail.com, ip: 209.85.216.49, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f49.google.com with SMTP id 98e67ed59e1d1-3ad41b47541so457365a91.1 for ; Tue, 27 Oct 2026 21:25:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161551; x=1793766351; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=qRmWPLXpTjUvZ/R6YXZXwRgJPUBZlIjpRkbSr1takPA=; b=GzEwpRx+RBpLdxv+drjwjoQjASWgBY2cSRaqWbf3R4zu8IpN/J+jd9vbwhQdjeEMV1 GklR4bGR5yZ+bDi6YSTyY5Yb4C/QHzmqDkXgB1fZ1lpXBan7v58woo2CfqMAo6mheAG0 N6mamPfURpk2aAc0i/0mGRYufuT+DM38NRzdWvsdLszDsG7mYoxC4lp9XqaahFBzdMoh eki4kYTkCtMAMv8XHcHHBJ+pydKBQTu0rRXdZ2BehgROTP8tvHrCFQtHg/Dj0wh4LfpE OPCPqHLfOhwI+YZfdKGcMC8g4ieIToJ2Is8+hMIYwVZHAuTWzeauyLu+0viWEIl0Q5LY /ElQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161551; x=1793766351; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=qRmWPLXpTjUvZ/R6YXZXwRgJPUBZlIjpRkbSr1takPA=; b=iHW3Xr4CZ5EtVhKNmEeVtLItVyu/OUVDbeR3yr5n8i0e59FOA4M2v65WY3GGZ3sfKe AM/bwgeq/wsm4yZqNbgmGg7zSWMOPloTx95ky4I6DaXnWKwlgEre7wX3GyPrDKiAxqyp k6a1aKH8IqQIujUxFcHFnAfCF2cBR92uNPyIvMi70DwxvpHN4poGtwGKihSbKiB8jkdo w3aQ4xGK1dfWMfLX9M0+N/TZSaWWLYSP5Cpg7izkJEFn0iuIDshV2MqvaHfOgitzSOgv zcfbvuqj7EhPlcL1F2NsjjF6SFQP+PoK41nP/IVP6RSzkAHXERDo2N03ISE3FIBroqQP Xzlw== X-Gm-Message-State: AFq9FYI2i68GzT9/DboyJq+MP2ePFk9eXmUAHf5bl0hsEIX66M19ohgJ vxUbxbSLmhQ/hc52SsEDmiT7wPZ8g1DnjdIMOaCy6fcMtoXWJ1YurmdLObd5pg== X-Gm-Gg: AYBFou0duKLwcv8tXw12niqGWUwfg+4DE9FwCe6NUJ7EpnMu6XBe1EZjIzfnDGjN0SG 7tB/Uc691smrNJqriyYCBqeN4PHQGWhFwZoDCkDwqwrPC0OR9SrFQecdI+HxIumIuN06dF1k9sO zgwn10zYud6Hri3nAZDYEPjUeUitm75gerd2fq3KcwFKNwkOQOZfmYSxTqYtthwSQ/BeYBDIHmw oLsoWO4GqEgIbg2RnA6QOhtVS7KpcJp6LzbAO+oG4Tl2Rwyy3kEnerTzPJgGziLY7bL05ZSZtDE Pn4p19qz0TEblrnQPaUWIuM/j4MdRsl2mVrwNfRIovEmeocT62+sGl9qKCzbFTeJAI0E5O/8PtX Xu591s5CtnMC0KIiGuj54PnMjaz8giBYbsQ4U0EQki9qb09y7294vSQuRo6Mb2Iok4rJ3fWUefe /4RZMT6Pa8WzWHZRIc5BGm0llpK8m6GTfAWeEBklWHSBEx0PJOYdnmzoavMJhjHhIuy/80LgIlQ l2yPSj73kb+713FKI7BQzp8yqflWaWeBrsw+pGgSfdnoqzgIl/hdXxqpY5ET/iVSDDW5KD8nu2a kVWu58VD9tqLgcvoa5ORZl6T5Wj+KNeT3ad+3Ceh1F+lCh278qTzCW6qz6QOOg== X-Received: by 2002:a17:90b:1647:b0:3ac:b2e6:317d with SMTP id 98e67ed59e1d1-3ae5822b42bmr949982a91.35.1793161550706; Tue, 27 Oct 2026 21:25:50 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.48 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:50 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi , Khem Raj Subject: [blacksail][PATCH 44/60] swagger-ui: upgrade 5.33.2 -> 5.33.3 Date: Wed, 28 Oct 2026 17:23:42 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:56 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131596 From: Ankur Tyagi Changelog: https://github.com/swagger-api/swagger-ui/releases/tag/v5.33.3 Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj (cherry picked from commit 67b4387a4d9f2fbc111b52ec6cd3b7620116c6d1) Signed-off-by: Ankur Tyagi --- .../swagger-ui/{swagger-ui_5.33.2.bb => swagger-ui_5.33.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.33.2.bb => swagger-ui_5.33.3.bb} (94%) diff --git a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.3.bb similarity index 94% rename from meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb rename to meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.3.bb index aeee9e4da6..6f69070033 100644 --- a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb +++ b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.3.bb @@ -12,7 +12,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57" SRC_URI = "git://github.com/swagger-api/swagger-ui;branch=main;protocol=https;tag=v${PV}" -SRCREV = "e89a91f13cdee432d97ca9d3d1ac1969ff797036" +SRCREV = "38ca10e1867a66525751590d8d51011973107ad1" CVE_STATUS[CVE-2016-1000229] = "fixed-version: fixed since 2.2.1" From patchwork Wed Oct 28 04:23:43 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102211 Received: from mail-pj1-f53.google.com (mail-pj1-f53.google.com [209.85.216.53]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36220.1793161554275811640 for ; Tue, 27 Oct 2026 21:25:54 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=r6I+4jIT; spf=pass (domain: gmail.com, ip: 209.85.216.53, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f53.google.com with SMTP id 98e67ed59e1d1-3ada4c06b7bso276096a91.2 for ; Tue, 27 Oct 2026 21:25:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161554; x=1793766354; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=UqSGTezzHaB4K9hmZYs2S2Oiyhp2sG3wRr4/8e2l45M=; b=r6I+4jITgEyNDsVM7ISL5X9goQpsXIuXwV4l1oBV/CJ/hcf362p0A5EwqfiIxtjICj 47o99VEV4sH/dmvQAy8wpxT6h2TmWWcqHhAD9JIl/7lOmVeTn3ROEHCFMIRAd3Z8vSgp 6TAJ9jZCbsxKozUj3VVWzAA7zv7VT98YuAVcXWFYBMLzzRsno+FCh0AgR5z1HPwnbZ8R Y7gvkxdAsuSzODZM/I/nZmc+AUABUdIKk97x1MkTGljqLC17vJGxz4e3I1GeninlE8LJ XONj09WA+gP/De7wlxMx4VJK//nqaVZHLtmYSzukw3FejfP4KiGOQvC9dnoesGs9cGBG JB7A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161554; x=1793766354; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=UqSGTezzHaB4K9hmZYs2S2Oiyhp2sG3wRr4/8e2l45M=; b=QP394b/Sbks56i8Vt8FA+EURM/JdGGX0WXwBS5ohEUELWTmzWJm5zcySQDM6g/pmI3 UeiUQHzGvPb8KRIQokJt/M5+d+ncwtbWOIzpUTKWriied8ueoUHDnPEFgLqKsH64t0fV joGwqgLOt9BpvKtzs0EfkO1RrOQ5X4ik9hPjfrB2AlytMhBuV5ZiLi/6CWUnPDp5IyMo 5eheip+Ei1cCs2iNzgc0sqqBXaKUL6DzQiZYRA26DYn7JtUQXLtQcklWHrz4QOTkBUIF WD+2OwnpK7LvgOoZEzgh7zridxQ4Baq+XnKZIhSHPcWOZaPPApP/tW2K78/xa42sViwv 49ug== X-Gm-Message-State: AFq9FYInvu0padVT1vqqAC1wxjispb3XxVpqYV32Yua4Vf209p/Z4nvE uFP/OaVloaeuNFW5WnskATsAidI9KV8d7qgr44x6bszuNE8Uc6OFEEHGpi/PIg== X-Gm-Gg: AYBFou3vVHJpLNDy4CZLHEic9pVtD1QDBNhqkWE3ZKK1q9h8k7u/lDg32u2cR4gDcMj 2gPXnsQKDQxGTHMuEg3cq4Pm/BVxKl36khcZjfaSAX9GfMkPyc+VE3r4hAdQvapP9i5+L+iB+cu 8sjAjjEtfxa8RaLt9ReUUg0JR3fgNhe688xSulApHKvJxiyjfccLB3KGBdXIFgPnu1SQIwbU01R 8/0OiAS+sdwzfU2stuPlNLHM4S4gCbf7xfuco5G5Z/YhjmUFA/rpe3g4Apb4e7j136QupoxVmpr CxKmaVL7ElNHdUETrQfCZ2t7OIqJ12TsGl8hxPT/KNE2trNhb52Iq13ie2DIAvXKs1o1u+VBNot iR3JyYO00OSe153E5Xhk2uP9NHzUO9jqWiEeo+8CuPWiQN0qwJONjntc6q8LKnjb6Z38q/CbMbe i4QMIPT6u01gfTVET/Y9yP8d2GEo70Rvbuzv46AYVLoqbAsYYsaLgfQ/pKC+oaszWnDgDhrw2cs zY7YjAiHpir4pF4Tke85lltLGEYSQngxnyWgc37SOfGR2jKmTZPl/r4eFDKmN7qQPMKpBP0Xltu tB3lz240Mdx41kCuwpRXOlXXvkXekit5+6CEaH8xDVUzD5Y6b3QkF8eQxxRVkg== X-Received: by 2002:a17:90b:28c7:b0:3ab:17b6:9a93 with SMTP id 98e67ed59e1d1-3ae58140220mr883218a91.52.1793161553239; Tue, 27 Oct 2026 21:25:53 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.51 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:52 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Peter Marko Subject: [blacksail][PATCH 45/60] nss: remove compromised eMudhra certificates Date: Wed, 28 Oct 2026 17:23:43 +1300 Message-ID: <8a760baf572661b5a26ac674a25d5a3544cf791e.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:25:57 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131597 From: Peter Marko See https://emudhra.we-have-a-problem.com/ Signed-off-by: Peter Marko --- ...ve-eMudhra-emSign-Root-CA-C1-and-emS.patch | 272 ++++++++++++++++++ ...ve-eMudhra-emSign-Root-CA-G3-from-NS.patch | 143 +++++++++ meta-oe/recipes-support/nss/nss_3.126.bb | 2 + 3 files changed, 417 insertions(+) create mode 100644 meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch create mode 100644 meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch diff --git a/meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch b/meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch new file mode 100644 index 0000000000..f153eccb86 --- /dev/null +++ b/meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch @@ -0,0 +1,272 @@ +From 15734105a44679969114534ac5ceaf08e9630dd3 Mon Sep 17 00:00:00 2001 +From: Anna +Date: Tue, 20 Oct 2026 09:03:59 +0000 +Subject: [PATCH] Bug 2083709 - Remove eMudhra emSign Root CA - C1 and emSign + ECC Root CA - C3 from NSS + +Differential Revision: https://phabricator.services.mozilla.com/D335517 + +Upstream-Status: Backport [https://github.com/mozilla/nss/commit/15734105a44679969114534ac5ceaf08e9630dd3] +Signed-off-by: Peter Marko +--- + nss/lib/ckfw/builtins/certdata.txt | 247 ----------------------------- + 1 file changed, 247 deletions(-) + +diff --git a/nss/lib/ckfw/builtins/certdata.txt b/nss/lib/ckfw/builtins/certdata.txt +index 0a451693c..05172ca23 100644 +--- a/nss/lib/ckfw/builtins/certdata.txt ++++ b/nss/lib/ckfw/builtins/certdata.txt +@@ -12221,253 +12221,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST + CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE + +-# +-# Certificate "emSign Root CA - C1" +-# +-# Issuer: CN=emSign Root CA - C1,O=eMudhra Inc,OU=emSign PKI,C=US +-# Serial Number:00:ae:cf:00:ba:c4:cf:32:f8:43:b2 +-# Subject: CN=emSign Root CA - C1,O=eMudhra Inc,OU=emSign PKI,C=US +-# Not Valid Before: Sun Feb 18 18:30:00 2018 +-# Not Valid After : Wed Feb 18 18:30:00 2043 +-# Fingerprint (SHA-256): 12:56:09:AA:30:1D:A0:A2:49:B9:7A:82:39:CB:6A:34:21:6F:44:DC:AC:9F:39:54:B1:42:92:F2:E8:C8:60:8F +-# Fingerprint (SHA1): E7:2E:F1:DF:FC:B2:09:28:CF:5D:D4:D5:67:37:B1:51:CB:86:4F:01 +-CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE +-CKA_TOKEN CK_BBOOL CK_TRUE +-CKA_PRIVATE CK_BBOOL CK_FALSE +-CKA_MODIFIABLE CK_BBOOL CK_FALSE +-CKA_LABEL UTF8 "emSign Root CA - C1" +-CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 +-CKA_SUBJECT MULTILINE_OCTAL +-\060\126\061\013\060\011\006\003\125\004\006\023\002\125\123\061 +-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156 +-\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013\145 +-\115\165\144\150\162\141\040\111\156\143\061\034\060\032\006\003 +-\125\004\003\023\023\145\155\123\151\147\156\040\122\157\157\164 +-\040\103\101\040\055\040\103\061 +-END +-CKA_ID UTF8 "0" +-CKA_ISSUER MULTILINE_OCTAL +-\060\126\061\013\060\011\006\003\125\004\006\023\002\125\123\061 +-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156 +-\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013\145 +-\115\165\144\150\162\141\040\111\156\143\061\034\060\032\006\003 +-\125\004\003\023\023\145\155\123\151\147\156\040\122\157\157\164 +-\040\103\101\040\055\040\103\061 +-END +-CKA_SERIAL_NUMBER MULTILINE_OCTAL +-\002\013\000\256\317\000\272\304\317\062\370\103\262 +-END +-CKA_VALUE MULTILINE_OCTAL +-\060\202\003\163\060\202\002\133\240\003\002\001\002\002\013\000 +-\256\317\000\272\304\317\062\370\103\262\060\015\006\011\052\206 +-\110\206\367\015\001\001\013\005\000\060\126\061\013\060\011\006 +-\003\125\004\006\023\002\125\123\061\023\060\021\006\003\125\004 +-\013\023\012\145\155\123\151\147\156\040\120\113\111\061\024\060 +-\022\006\003\125\004\012\023\013\145\115\165\144\150\162\141\040 +-\111\156\143\061\034\060\032\006\003\125\004\003\023\023\145\155 +-\123\151\147\156\040\122\157\157\164\040\103\101\040\055\040\103 +-\061\060\036\027\015\061\070\060\062\061\070\061\070\063\060\060 +-\060\132\027\015\064\063\060\062\061\070\061\070\063\060\060\060 +-\132\060\126\061\013\060\011\006\003\125\004\006\023\002\125\123 +-\061\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147 +-\156\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013 +-\145\115\165\144\150\162\141\040\111\156\143\061\034\060\032\006 +-\003\125\004\003\023\023\145\155\123\151\147\156\040\122\157\157 +-\164\040\103\101\040\055\040\103\061\060\202\001\042\060\015\006 +-\011\052\206\110\206\367\015\001\001\001\005\000\003\202\001\017 +-\000\060\202\001\012\002\202\001\001\000\317\353\251\271\361\231 +-\005\314\330\050\041\112\363\163\064\121\204\126\020\365\240\117 +-\054\022\343\372\023\232\047\320\317\371\171\032\164\137\035\171 +-\071\374\133\370\160\216\340\222\122\367\344\045\371\124\203\331 +-\035\323\310\132\205\077\136\307\266\007\356\076\300\316\232\257 +-\254\126\102\052\071\045\160\326\277\265\173\066\255\254\366\163 +-\334\315\327\035\212\203\245\373\053\220\025\067\153\034\046\107 +-\334\073\051\126\223\152\263\301\152\072\235\075\365\301\227\070 +-\130\005\213\034\021\343\344\264\270\135\205\035\203\376\170\137 +-\013\105\150\030\110\245\106\163\064\073\376\017\310\166\273\307 +-\030\363\005\321\206\363\205\355\347\271\331\062\255\125\210\316 +-\246\266\221\260\117\254\176\025\043\226\366\077\360\040\064\026 +-\336\012\306\304\004\105\171\177\247\375\276\322\251\245\257\234 +-\305\043\052\367\074\041\154\275\257\217\116\305\072\262\363\064 +-\022\374\337\200\032\111\244\324\251\225\367\236\211\136\242\211 +-\254\224\313\250\150\233\257\212\145\047\315\211\356\335\214\265 +-\153\051\160\103\240\151\013\344\271\017\002\003\001\000\001\243 +-\102\060\100\060\035\006\003\125\035\016\004\026\004\024\376\241 +-\340\160\036\052\003\071\122\132\102\276\134\221\205\172\030\252 +-\115\265\060\016\006\003\125\035\017\001\001\377\004\004\003\002 +-\001\006\060\017\006\003\125\035\023\001\001\377\004\005\060\003 +-\001\001\377\060\015\006\011\052\206\110\206\367\015\001\001\013 +-\005\000\003\202\001\001\000\302\112\126\372\025\041\173\050\242 +-\351\345\035\373\370\055\304\071\226\101\114\073\047\054\304\154 +-\030\025\200\306\254\257\107\131\057\046\013\343\066\260\357\073 +-\376\103\227\111\062\231\022\025\133\337\021\051\377\253\123\370 +-\273\301\170\017\254\234\123\257\127\275\150\214\075\151\063\360 +-\243\240\043\143\073\144\147\042\104\255\325\161\313\126\052\170 +-\222\243\117\022\061\066\066\342\336\376\000\304\243\140\017\047 +-\255\240\260\212\265\066\172\122\241\275\047\364\040\047\142\350 +-\115\224\044\023\344\012\004\351\074\253\056\310\103\011\112\306 +-\141\004\345\111\064\176\323\304\310\365\017\300\252\351\272\124 +-\136\363\143\053\117\117\120\324\376\271\173\231\214\075\300\056 +-\274\002\053\323\304\100\344\212\007\061\036\233\316\046\231\023 +-\373\021\352\232\042\014\021\031\307\136\033\201\120\060\310\226 +-\022\156\347\313\101\177\221\073\242\107\267\124\200\033\334\000 +-\314\232\220\352\303\303\120\006\142\014\060\300\025\110\247\250 +-\131\174\341\256\042\242\342\012\172\017\372\142\253\122\114\341 +-\361\337\312\276\203\015\102 +-END +-CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +-CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +-CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE +- +-# Trust for "emSign Root CA - C1" +-# Issuer: CN=emSign Root CA - C1,O=eMudhra Inc,OU=emSign PKI,C=US +-# Serial Number:00:ae:cf:00:ba:c4:cf:32:f8:43:b2 +-# Subject: CN=emSign Root CA - C1,O=eMudhra Inc,OU=emSign PKI,C=US +-# Not Valid Before: Sun Feb 18 18:30:00 2018 +-# Not Valid After : Wed Feb 18 18:30:00 2043 +-# Fingerprint (SHA-256): 12:56:09:AA:30:1D:A0:A2:49:B9:7A:82:39:CB:6A:34:21:6F:44:DC:AC:9F:39:54:B1:42:92:F2:E8:C8:60:8F +-# Fingerprint (SHA1): E7:2E:F1:DF:FC:B2:09:28:CF:5D:D4:D5:67:37:B1:51:CB:86:4F:01 +-CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST +-CKA_TOKEN CK_BBOOL CK_TRUE +-CKA_PRIVATE CK_BBOOL CK_FALSE +-CKA_MODIFIABLE CK_BBOOL CK_FALSE +-CKA_LABEL UTF8 "emSign Root CA - C1" +-CKA_CERT_SHA1_HASH MULTILINE_OCTAL +-\347\056\361\337\374\262\011\050\317\135\324\325\147\067\261\121 +-\313\206\117\001 +-END +-CKA_CERT_MD5_HASH MULTILINE_OCTAL +-\330\343\135\001\041\372\170\132\260\337\272\322\356\052\137\150 +-END +-CKA_ISSUER MULTILINE_OCTAL +-\060\126\061\013\060\011\006\003\125\004\006\023\002\125\123\061 +-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156 +-\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013\145 +-\115\165\144\150\162\141\040\111\156\143\061\034\060\032\006\003 +-\125\004\003\023\023\145\155\123\151\147\156\040\122\157\157\164 +-\040\103\101\040\055\040\103\061 +-END +-CKA_SERIAL_NUMBER MULTILINE_OCTAL +-\002\013\000\256\317\000\272\304\317\062\370\103\262 +-END +-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +-CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +-CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE +- +-# +-# Certificate "emSign ECC Root CA - C3" +-# +-# Issuer: CN=emSign ECC Root CA - C3,O=eMudhra Inc,OU=emSign PKI,C=US +-# Serial Number:7b:71:b6:82:56:b8:12:7c:9c:a8 +-# Subject: CN=emSign ECC Root CA - C3,O=eMudhra Inc,OU=emSign PKI,C=US +-# Not Valid Before: Sun Feb 18 18:30:00 2018 +-# Not Valid After : Wed Feb 18 18:30:00 2043 +-# Fingerprint (SHA-256): BC:4D:80:9B:15:18:9D:78:DB:3E:1D:8C:F4:F9:72:6A:79:5D:A1:64:3C:A5:F1:35:8E:1D:DB:0E:DC:0D:7E:B3 +-# Fingerprint (SHA1): B6:AF:43:C2:9B:81:53:7D:F6:EF:6B:C3:1F:1F:60:15:0C:EE:48:66 +-CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE +-CKA_TOKEN CK_BBOOL CK_TRUE +-CKA_PRIVATE CK_BBOOL CK_FALSE +-CKA_MODIFIABLE CK_BBOOL CK_FALSE +-CKA_LABEL UTF8 "emSign ECC Root CA - C3" +-CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 +-CKA_SUBJECT MULTILINE_OCTAL +-\060\132\061\013\060\011\006\003\125\004\006\023\002\125\123\061 +-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156 +-\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013\145 +-\115\165\144\150\162\141\040\111\156\143\061\040\060\036\006\003 +-\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103\040 +-\122\157\157\164\040\103\101\040\055\040\103\063 +-END +-CKA_ID UTF8 "0" +-CKA_ISSUER MULTILINE_OCTAL +-\060\132\061\013\060\011\006\003\125\004\006\023\002\125\123\061 +-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156 +-\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013\145 +-\115\165\144\150\162\141\040\111\156\143\061\040\060\036\006\003 +-\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103\040 +-\122\157\157\164\040\103\101\040\055\040\103\063 +-END +-CKA_SERIAL_NUMBER MULTILINE_OCTAL +-\002\012\173\161\266\202\126\270\022\174\234\250 +-END +-CKA_VALUE MULTILINE_OCTAL +-\060\202\002\053\060\202\001\261\240\003\002\001\002\002\012\173 +-\161\266\202\126\270\022\174\234\250\060\012\006\010\052\206\110 +-\316\075\004\003\003\060\132\061\013\060\011\006\003\125\004\006 +-\023\002\125\123\061\023\060\021\006\003\125\004\013\023\012\145 +-\155\123\151\147\156\040\120\113\111\061\024\060\022\006\003\125 +-\004\012\023\013\145\115\165\144\150\162\141\040\111\156\143\061 +-\040\060\036\006\003\125\004\003\023\027\145\155\123\151\147\156 +-\040\105\103\103\040\122\157\157\164\040\103\101\040\055\040\103 +-\063\060\036\027\015\061\070\060\062\061\070\061\070\063\060\060 +-\060\132\027\015\064\063\060\062\061\070\061\070\063\060\060\060 +-\132\060\132\061\013\060\011\006\003\125\004\006\023\002\125\123 +-\061\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147 +-\156\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013 +-\145\115\165\144\150\162\141\040\111\156\143\061\040\060\036\006 +-\003\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103 +-\040\122\157\157\164\040\103\101\040\055\040\103\063\060\166\060 +-\020\006\007\052\206\110\316\075\002\001\006\005\053\201\004\000 +-\042\003\142\000\004\375\245\141\256\173\046\020\035\351\267\042 +-\060\256\006\364\201\263\261\102\161\225\071\274\323\122\343\257 +-\257\371\362\227\065\222\066\106\016\207\225\215\271\071\132\351 +-\273\337\320\376\310\007\101\074\273\125\157\203\243\152\373\142 +-\260\201\211\002\160\175\110\305\112\343\351\042\124\042\115\223 +-\273\102\014\257\167\234\043\246\175\327\141\021\316\145\307\370 +-\177\376\365\362\251\243\102\060\100\060\035\006\003\125\035\016 +-\004\026\004\024\373\132\110\320\200\040\100\362\250\351\000\007 +-\151\031\167\247\346\303\364\317\060\016\006\003\125\035\017\001 +-\001\377\004\004\003\002\001\006\060\017\006\003\125\035\023\001 +-\001\377\004\005\060\003\001\001\377\060\012\006\010\052\206\110 +-\316\075\004\003\003\003\150\000\060\145\002\061\000\264\330\057 +-\002\211\375\266\114\142\272\103\116\023\204\162\265\256\335\034 +-\336\326\265\334\126\217\130\100\132\055\336\040\114\042\203\312 +-\223\250\176\356\022\100\307\326\207\117\370\337\205\002\060\034 +-\024\144\344\174\226\203\021\234\260\321\132\141\113\246\017\111 +-\323\000\374\241\374\344\245\377\177\255\327\060\320\307\167\177 +-\276\201\007\125\060\120\040\024\365\127\070\012\250\061\121 +-END +-CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +-CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +-CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE +- +-# Trust for "emSign ECC Root CA - C3" +-# Issuer: CN=emSign ECC Root CA - C3,O=eMudhra Inc,OU=emSign PKI,C=US +-# Serial Number:7b:71:b6:82:56:b8:12:7c:9c:a8 +-# Subject: CN=emSign ECC Root CA - C3,O=eMudhra Inc,OU=emSign PKI,C=US +-# Not Valid Before: Sun Feb 18 18:30:00 2018 +-# Not Valid After : Wed Feb 18 18:30:00 2043 +-# Fingerprint (SHA-256): BC:4D:80:9B:15:18:9D:78:DB:3E:1D:8C:F4:F9:72:6A:79:5D:A1:64:3C:A5:F1:35:8E:1D:DB:0E:DC:0D:7E:B3 +-# Fingerprint (SHA1): B6:AF:43:C2:9B:81:53:7D:F6:EF:6B:C3:1F:1F:60:15:0C:EE:48:66 +-CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST +-CKA_TOKEN CK_BBOOL CK_TRUE +-CKA_PRIVATE CK_BBOOL CK_FALSE +-CKA_MODIFIABLE CK_BBOOL CK_FALSE +-CKA_LABEL UTF8 "emSign ECC Root CA - C3" +-CKA_CERT_SHA1_HASH MULTILINE_OCTAL +-\266\257\103\302\233\201\123\175\366\357\153\303\037\037\140\025 +-\014\356\110\146 +-END +-CKA_CERT_MD5_HASH MULTILINE_OCTAL +-\076\123\263\243\201\356\327\020\370\323\260\035\027\222\365\325 +-END +-CKA_ISSUER MULTILINE_OCTAL +-\060\132\061\013\060\011\006\003\125\004\006\023\002\125\123\061 +-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156 +-\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013\145 +-\115\165\144\150\162\141\040\111\156\143\061\040\060\036\006\003 +-\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103\040 +-\122\157\157\164\040\103\101\040\055\040\103\063 +-END +-CKA_SERIAL_NUMBER MULTILINE_OCTAL +-\002\012\173\161\266\202\126\270\022\174\234\250 +-END +-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +-CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +-CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE +- + # + # Certificate "Hongkong Post Root CA 3" + # diff --git a/meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch b/meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch new file mode 100644 index 0000000000..3d999e16dd --- /dev/null +++ b/meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch @@ -0,0 +1,143 @@ +From 0a2b0c75fa036930d98331b721c0780693a3e17a Mon Sep 17 00:00:00 2001 +From: Anna +Date: Tue, 20 Oct 2026 10:05:35 +0000 +Subject: [PATCH] Bug 2084101 - Remove eMudhra emSign Root CA - G3 from NSS + +Differential Revision: https://phabricator.services.mozilla.com/D335548 + +Upstream-Status: Backport [https://github.com/mozilla/nss/commit/0a2b0c75fa036930d98331b721c0780693a3e17a] +Signed-off-by: Peter Marko +--- + nss/lib/ckfw/builtins/certdata.txt | 119 ----------------------------- + 1 file changed, 119 deletions(-) + +diff --git a/nss/lib/ckfw/builtins/certdata.txt b/nss/lib/ckfw/builtins/certdata.txt +index 05172ca23..9ee50e8d5 100644 +--- a/nss/lib/ckfw/builtins/certdata.txt ++++ b/nss/lib/ckfw/builtins/certdata.txt +@@ -12102,125 +12102,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR + CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST + CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE + +-# +-# Certificate "emSign ECC Root CA - G3" +-# +-# Issuer: CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN +-# Serial Number:3c:f6:07:a9:68:70:0e:da:8b:84 +-# Subject: CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN +-# Not Valid Before: Sun Feb 18 18:30:00 2018 +-# Not Valid After : Wed Feb 18 18:30:00 2043 +-# Fingerprint (SHA-256): 86:A1:EC:BA:08:9C:4A:8D:3B:BE:27:34:C6:12:BA:34:1D:81:3E:04:3C:F9:E8:A8:62:CD:5C:57:A3:6B:BE:6B +-# Fingerprint (SHA1): 30:43:FA:4F:F2:57:DC:A0:C3:80:EE:2E:58:EA:78:B2:3F:E6:BB:C1 +-CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE +-CKA_TOKEN CK_BBOOL CK_TRUE +-CKA_PRIVATE CK_BBOOL CK_FALSE +-CKA_MODIFIABLE CK_BBOOL CK_FALSE +-CKA_LABEL UTF8 "emSign ECC Root CA - G3" +-CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 +-CKA_SUBJECT MULTILINE_OCTAL +-\060\153\061\013\060\011\006\003\125\004\006\023\002\111\116\061 +-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156 +-\040\120\113\111\061\045\060\043\006\003\125\004\012\023\034\145 +-\115\165\144\150\162\141\040\124\145\143\150\156\157\154\157\147 +-\151\145\163\040\114\151\155\151\164\145\144\061\040\060\036\006 +-\003\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103 +-\040\122\157\157\164\040\103\101\040\055\040\107\063 +-END +-CKA_ID UTF8 "0" +-CKA_ISSUER MULTILINE_OCTAL +-\060\153\061\013\060\011\006\003\125\004\006\023\002\111\116\061 +-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156 +-\040\120\113\111\061\045\060\043\006\003\125\004\012\023\034\145 +-\115\165\144\150\162\141\040\124\145\143\150\156\157\154\157\147 +-\151\145\163\040\114\151\155\151\164\145\144\061\040\060\036\006 +-\003\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103 +-\040\122\157\157\164\040\103\101\040\055\040\107\063 +-END +-CKA_SERIAL_NUMBER MULTILINE_OCTAL +-\002\012\074\366\007\251\150\160\016\332\213\204 +-END +-CKA_VALUE MULTILINE_OCTAL +-\060\202\002\116\060\202\001\323\240\003\002\001\002\002\012\074 +-\366\007\251\150\160\016\332\213\204\060\012\006\010\052\206\110 +-\316\075\004\003\003\060\153\061\013\060\011\006\003\125\004\006 +-\023\002\111\116\061\023\060\021\006\003\125\004\013\023\012\145 +-\155\123\151\147\156\040\120\113\111\061\045\060\043\006\003\125 +-\004\012\023\034\145\115\165\144\150\162\141\040\124\145\143\150 +-\156\157\154\157\147\151\145\163\040\114\151\155\151\164\145\144 +-\061\040\060\036\006\003\125\004\003\023\027\145\155\123\151\147 +-\156\040\105\103\103\040\122\157\157\164\040\103\101\040\055\040 +-\107\063\060\036\027\015\061\070\060\062\061\070\061\070\063\060 +-\060\060\132\027\015\064\063\060\062\061\070\061\070\063\060\060 +-\060\132\060\153\061\013\060\011\006\003\125\004\006\023\002\111 +-\116\061\023\060\021\006\003\125\004\013\023\012\145\155\123\151 +-\147\156\040\120\113\111\061\045\060\043\006\003\125\004\012\023 +-\034\145\115\165\144\150\162\141\040\124\145\143\150\156\157\154 +-\157\147\151\145\163\040\114\151\155\151\164\145\144\061\040\060 +-\036\006\003\125\004\003\023\027\145\155\123\151\147\156\040\105 +-\103\103\040\122\157\157\164\040\103\101\040\055\040\107\063\060 +-\166\060\020\006\007\052\206\110\316\075\002\001\006\005\053\201 +-\004\000\042\003\142\000\004\043\245\014\270\055\022\365\050\363 +-\261\262\335\342\002\022\200\236\071\137\111\115\237\311\045\064 +-\131\164\354\273\006\034\347\300\162\257\350\256\057\341\101\124 +-\207\024\250\112\262\350\174\202\346\133\152\265\334\263\165\316 +-\213\006\320\206\043\277\106\325\216\017\077\004\364\327\034\222 +-\176\366\245\143\302\365\137\216\056\117\241\030\031\002\053\062 +-\012\202\144\175\026\223\321\243\102\060\100\060\035\006\003\125 +-\035\016\004\026\004\024\174\135\002\204\023\324\314\212\233\201 +-\316\027\034\056\051\036\234\110\143\102\060\016\006\003\125\035 +-\017\001\001\377\004\004\003\002\001\006\060\017\006\003\125\035 +-\023\001\001\377\004\005\060\003\001\001\377\060\012\006\010\052 +-\206\110\316\075\004\003\003\003\151\000\060\146\002\061\000\276 +-\363\141\317\002\020\035\144\225\007\270\030\156\210\205\005\057 +-\203\010\027\220\312\037\212\114\350\015\033\172\261\255\325\201 +-\011\107\357\073\254\010\004\174\134\231\261\355\107\007\322\002 +-\061\000\235\272\125\374\251\112\350\355\355\346\166\001\102\173 +-\310\370\140\331\215\121\213\125\073\373\214\173\353\145\011\303 +-\370\226\315\107\250\202\362\026\125\167\044\176\022\020\225\004 +-\054\243 +-END +-CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE +-CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE +-CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE +- +-# Trust for "emSign ECC Root CA - G3" +-# Issuer: CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN +-# Serial Number:3c:f6:07:a9:68:70:0e:da:8b:84 +-# Subject: CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN +-# Not Valid Before: Sun Feb 18 18:30:00 2018 +-# Not Valid After : Wed Feb 18 18:30:00 2043 +-# Fingerprint (SHA-256): 86:A1:EC:BA:08:9C:4A:8D:3B:BE:27:34:C6:12:BA:34:1D:81:3E:04:3C:F9:E8:A8:62:CD:5C:57:A3:6B:BE:6B +-# Fingerprint (SHA1): 30:43:FA:4F:F2:57:DC:A0:C3:80:EE:2E:58:EA:78:B2:3F:E6:BB:C1 +-CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST +-CKA_TOKEN CK_BBOOL CK_TRUE +-CKA_PRIVATE CK_BBOOL CK_FALSE +-CKA_MODIFIABLE CK_BBOOL CK_FALSE +-CKA_LABEL UTF8 "emSign ECC Root CA - G3" +-CKA_CERT_SHA1_HASH MULTILINE_OCTAL +-\060\103\372\117\362\127\334\240\303\200\356\056\130\352\170\262 +-\077\346\273\301 +-END +-CKA_CERT_MD5_HASH MULTILINE_OCTAL +-\316\013\162\321\237\210\216\320\120\003\350\343\270\213\147\100 +-END +-CKA_ISSUER MULTILINE_OCTAL +-\060\153\061\013\060\011\006\003\125\004\006\023\002\111\116\061 +-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156 +-\040\120\113\111\061\045\060\043\006\003\125\004\012\023\034\145 +-\115\165\144\150\162\141\040\124\145\143\150\156\157\154\157\147 +-\151\145\163\040\114\151\155\151\164\145\144\061\040\060\036\006 +-\003\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103 +-\040\122\157\157\164\040\103\101\040\055\040\107\063 +-END +-CKA_SERIAL_NUMBER MULTILINE_OCTAL +-\002\012\074\366\007\251\150\160\016\332\213\204 +-END +-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +-CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR +-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST +-CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE +- + # + # Certificate "Hongkong Post Root CA 3" + # diff --git a/meta-oe/recipes-support/nss/nss_3.126.bb b/meta-oe/recipes-support/nss/nss_3.126.bb index f26e70539f..2caf15302b 100644 --- a/meta-oe/recipes-support/nss/nss_3.126.bb +++ b/meta-oe/recipes-support/nss/nss_3.126.bb @@ -32,6 +32,8 @@ SRC_URI = "https://ftp.mozilla.org/pub/security/nss/releases/${VERSION_DIR}/src/ file://0005-nss-does-not-build-on-mips-with-clang-because-wrong-.patch \ file://0006-Fix-nss-multilib-build-on-openSUSE-11.x-32bit.patch \ file://0007-freebl-add-a-configure-option-to-disable-ARM-HW-cryp.patch \ + file://0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch \ + file://0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch \ " SRC_URI[sha256sum] = "7aa07c758be1453d82d739240b249ffb7aef0041be488067e1c0f348e1f9e337" From patchwork Wed Oct 28 04:23:44 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102212 Received: from mail-pg1-f181.google.com (mail-pg1-f181.google.com [209.85.215.181]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36073.1793161559656116361 for ; Tue, 27 Oct 2026 21:25:59 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=rBIMuFBZ; spf=pass (domain: gmail.com, ip: 209.85.215.181, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f181.google.com with SMTP id 41be03b00d2f7-cdab938dc83so266441a12.3 for ; Tue, 27 Oct 2026 21:25:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161559; x=1793766359; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=SETecZpb/GL3biNRXaiXvU6NjC9jmLN492ZIM0Yn6Ks=; b=rBIMuFBZdQ7/skKWsLSQEScmomgzupiIIPpTmKjnmvPIApXw/8KLK21ITjeppcVJeM pfyvT4Gghb2zz53zlcigBdqSvs4gY8xxDnfhVc0Ww/Zw5pwX52e5SIalmcMN69XMHUpd nuC6fjRik+Hpl6JjGGHt8kEydacCVYfpLJGNdP4Svp4D7ToTa7arEjsIAzmkfQQcvPdX apP706qK/7DhQJeVjCOBADeOVCScTRrxWcmCOfZNJ1ZI4LQ0Ts8Ojccx+J0sKGUE+1KH hRS8KKkn6XeT50d58TstHT1xem08UsJRzi0RLuvOuxosNpHkUJNwY6dQOlvC4Qdw0PVn gWvA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161559; x=1793766359; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=SETecZpb/GL3biNRXaiXvU6NjC9jmLN492ZIM0Yn6Ks=; b=pf0gWPx9yKrt18pW5hp7Z5YmSIenAM8JAoV5o+EduRLLf9u8siWYWqUr9pUIf3PUS3 q9KX7nI5gVUyBYNrpc+2p+3YzfHo8mUgrwJCUM/chvqQFmNbGbwGyyasDuFjcdy8zx2/ BwfNSkumeNmEpajNs+Pyb9qTGUxTq+1fAjUqjcVVt5s825xir94ciLggXMpARt+vcsM2 Zee2DdyWpCDuOsH0JAG6kkP9vNbQTqrFQDTwf+YkTBn7Z8DwnUW9v4jF0Q1KAT8asD80 jKu1qgKD8ca59ZxJBbWMBsFr5tEi6jypdZ1otSIRARS5WeyN7Vt7jgIudOhNHRq+Pk4M s49w== X-Gm-Message-State: AFq9FYK1Bx9Rtlb4uZYTymke3+WErOTQL+KiJpnHaInzML0p7Ba/aedD RRftL8P3rF/aKPaZy/3rDOeoqUngt+G9Lfo8MG/dVz86L9A9jGXVI1VSalPusA== X-Gm-Gg: AYBFou2tWDF3mjX5+RYSIM1sCGjefQzONiTJArUKDorCg8MoUooNYupX0wJQMG1BRqS SDczFAOVZjSzoRZ5kNkPG3t/d/D1U8d5GWae3ZTgh55E4jn85Jhgx6BZ2zdO5EKRcGbPhfRRdb2 QQW1y4vtHU3rU9neCkON5G9I571OXZRrX7/ORAye5MqxHhzU7/85LFmrNO3McoMOvVZ9mlccDpy JwdP3HVrbjUrfzND+UTbAOPAhCNEJMV2XlaC/3eHTXRjv6kAAAc7/+BRWSAewNOq/rcOvGib5zT iJlZlS/bZSYKFH1vPhdImS9M8vibQFeT3DLMvbLzXb8ofW1WSKEXeqS3BDR+4Qy7M/gtGrPDR9u /JVjnBzZwMJ1BHjViwGkGYhMCowdUV64Y32horyi9quMlWk+uO4z02WwHNWJ0vUwFxEK7PejD37 RS4SU1G21r1JAGkiabq6zHOcniby4qhLIcunz04whnetP1pnFRJehQw8+41P2AWAV5TbeSiQU0G 9iatshuG7JC23joCnLK/NLW0Uda763HoJEmwF45ptBy0GDXzWlrRt/bskYoIzuZE6+e5A3D+rsj 5x2OVeLDvr8ceRj6jTaj158VO6gLuS1dtC52ypZ3q+aHGrkQR4mvuLotC/cAgphcMfFpvoBtM2P k0jXkLJc= X-Received: by 2002:a17:90b:2743:b0:3ab:1b19:78ed with SMTP id 98e67ed59e1d1-3ae5816cf44mr823125a91.21.1793161556972; Tue, 27 Oct 2026 21:25:56 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:25:56 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Peter Marko Subject: [blacksail][PATCH 46/60] grpc: update gRPC repo roots Date: Wed, 28 Oct 2026 17:23:44 +1300 Message-ID: <1a0a133351a73d31e9e2a3fc305dda12d0d0e2ab.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:07 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131598 From: Peter Marko See https://emudhra.we-have-a-problem.com/ Signed-off-by: Peter Marko --- ...curity-Update-gRPC-repo-roots.-43699.patch | 2617 +++++++++++++++++ meta-oe/recipes-devtools/grpc/grpc_1.84.0.bb | 1 + 2 files changed, 2618 insertions(+) create mode 100644 meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch diff --git a/meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch b/meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch new file mode 100644 index 0000000000..35806a18f1 --- /dev/null +++ b/meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch @@ -0,0 +1,2617 @@ +From 8b32af3bf498c2ba9667410eaa8c836e700e97e6 Mon Sep 17 00:00:00 2001 +From: Matthew Stevenson +Date: Tue, 20 Oct 2026 15:07:37 -0700 +Subject: [PATCH] [security] Update gRPC repo roots. (#43699) + +Context: https://emudhra.we-have-a-problem.com/ + +This PR was created by running + +``` +curl "https://chromium.googlesource.com/chromium/src/+/refs/heads/main/net/data/ssl/chrome_root_store/root_store.certs?format=TEXT" | base64 -d > etc/roots.pem +``` + +Following https://github.com/certifi/python-certifi/pull/440 and https://github.com/certifi/python-certifi/issues/439 (and other similar decisions across the industry), the `emSign Root CA - G1` is preserved. + +Closes #43699 + +COPYBARA_INTEGRATE_REVIEW=https://github.com/grpc/grpc/pull/43699 from matthewstevenson88:root-update 294a8b29e8f18e286e82f64eba19549309c0efa4 +PiperOrigin-RevId: 1003426346 + +Upstream-Status: Backport [https://github.com/sergiitk/grpc/commit/8b32af3bf498c2ba9667410eaa8c836e700e97e6] +Signed-off-by: Peter Marko +--- + etc/roots.pem | 2483 ++++++++++--------------------------------------- + 1 file changed, 505 insertions(+), 1978 deletions(-) + +diff --git a/etc/roots.pem b/etc/roots.pem +index 4c535adeba..69d9e43eb9 100644 +--- a/etc/roots.pem ++++ b/etc/roots.pem +@@ -509,91 +509,6 @@ VoNzcOSGGtIxQbovvi0TWnZvTuhOgQ4/WwMioBK+ZlgRSssDxLQqKi2WF+A5VLxI + 03YnnZotBqbJ7DnSq9ufmgsnAjUpsUCV5/nonFWIGUbWtzT1fs45mtk48VH3Tyw= + -----END CERTIFICATE----- + +-# f356bea244b7a91eb35d53ca9ad7864ace018e2d35d5f8f96ddf68a6f41aa474 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: 6643877497813316402 (0x5c33cb622c5fb332) +- Signature Algorithm: sha256WithRSAEncryption +- Issuer: CN = Atos TrustedRoot 2011, O = Atos, C = DE +- Validity +- Not Before: Jul 7 14:58:30 2011 GMT +- Not After : Dec 31 23:59:59 2030 GMT +- Subject: CN = Atos TrustedRoot 2011, O = Atos, C = DE +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:95:85:3b:97:6f:2a:3b:2e:3b:cf:a6:f3:29:35: +- be:cf:18:ac:3e:aa:d9:f8:4d:a0:3e:1a:47:b9:bc: +- 9a:df:f2:fe:cc:3e:47:e8:7a:96:c2:24:8e:35:f4: +- a9:0c:fc:82:fd:6d:c1:72:62:27:bd:ea:6b:eb:e7: +- 8a:cc:54:3e:90:50:cf:80:d4:95:fb:e8:b5:82:d4: +- 14:c5:b6:a9:55:25:57:db:b1:50:f6:b0:60:64:59: +- 7a:69:cf:03:b7:6f:0d:be:ca:3e:6f:74:72:ea:aa: +- 30:2a:73:62:be:49:91:61:c8:11:fe:0e:03:2a:f7: +- 6a:20:dc:02:15:0d:5e:15:6a:fc:e3:82:c1:b5:c5: +- 9d:64:09:6c:a3:59:98:07:27:c7:1b:96:2b:61:74: +- 71:6c:43:f1:f7:35:89:10:e0:9e:ec:55:a1:37:22: +- a2:87:04:05:2c:47:7d:b4:1c:b9:62:29:66:28:ca: +- b7:e1:93:f5:a4:94:03:99:b9:70:85:b5:e6:48:ea: +- 8d:50:fc:d9:de:cc:6f:07:0e:dd:0b:72:9d:80:30: +- 16:07:95:3f:28:0e:fd:c5:75:4f:53:d6:74:9a:b4: +- 24:2e:8e:02:91:cf:76:c5:9b:1e:55:74:9c:78:21: +- b1:f0:2d:f1:0b:9f:c2:d5:96:18:1f:f0:54:22:7a: +- 8c:07 +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Subject Key Identifier: +- A7:A5:06:B1:2C:A6:09:60:EE:D1:97:E9:70:AE:BC:3B:19:6C:DB:21 +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Authority Key Identifier: +- keyid:A7:A5:06:B1:2C:A6:09:60:EE:D1:97:E9:70:AE:BC:3B:19:6C:DB:21 +- +- X509v3 Certificate Policies: +- Policy: 1.3.6.1.4.1.6189.3.4.1.1 +- +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- Signature Algorithm: sha256WithRSAEncryption +- 26:77:34:db:94:48:86:2a:41:9d:2c:3e:06:90:60:c4:8c:ac: +- 0b:54:b8:1f:b9:7b:d3:07:39:e4:fa:3e:7b:b2:3d:4e:ed:9f: +- 23:bd:97:f3:6b:5c:ef:ee:fd:40:a6:df:a1:93:a1:0a:86:ac: +- ef:20:d0:79:01:bd:78:f7:19:d8:24:31:34:04:01:a6:ba:15: +- 9a:c3:27:dc:d8:4f:0f:cc:18:63:ff:99:0f:0e:91:6b:75:16: +- e1:21:fc:d8:26:c7:47:b7:a6:cf:58:72:71:7e:ba:e1:4d:95: +- 47:3b:c9:af:6d:a1:b4:c1:ec:89:f6:b4:0f:38:b5:e2:64:dc: +- 25:cf:a6:db:eb:9a:5c:99:a1:c5:08:de:fd:e6:da:d5:d6:5a: +- 45:0c:c4:b7:c2:b5:14:ef:b4:11:ff:0e:15:b5:f5:f5:db:c6: +- bd:eb:5a:a7:f0:56:22:a9:3c:65:54:c6:15:a8:bd:86:9e:cd: +- 83:96:68:7a:71:81:89:e1:0b:e1:ea:11:1b:68:08:cc:69:9e: +- ec:9e:41:9e:44:32:26:7a:e2:87:0a:71:3d:eb:e4:5a:a4:d2: +- db:c5:cd:c6:de:60:7f:b9:f3:4f:44:92:ef:2a:b7:18:3e:a7: +- 19:d9:0b:7d:b1:37:41:42:b0:ba:60:1d:f2:fe:09:11:b0:f0: +- 87:7b:a7:9d +------BEGIN CERTIFICATE----- +-MIIDdzCCAl+gAwIBAgIIXDPLYixfszIwDQYJKoZIhvcNAQELBQAwPDEeMBwGA1UE +-AwwVQXRvcyBUcnVzdGVkUm9vdCAyMDExMQ0wCwYDVQQKDARBdG9zMQswCQYDVQQG +-EwJERTAeFw0xMTA3MDcxNDU4MzBaFw0zMDEyMzEyMzU5NTlaMDwxHjAcBgNVBAMM +-FUF0b3MgVHJ1c3RlZFJvb3QgMjAxMTENMAsGA1UECgwEQXRvczELMAkGA1UEBhMC +-REUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVhTuXbyo7LjvPpvMp +-Nb7PGKw+qtn4TaA+Gke5vJrf8v7MPkfoepbCJI419KkM/IL9bcFyYie96mvr54rM +-VD6QUM+A1JX76LWC1BTFtqlVJVfbsVD2sGBkWXppzwO3bw2+yj5vdHLqqjAqc2K+ +-SZFhyBH+DgMq92og3AIVDV4VavzjgsG1xZ1kCWyjWZgHJ8cblithdHFsQ/H3NYkQ +-4J7sVaE3IqKHBAUsR320HLliKWYoyrfhk/WklAOZuXCFteZI6o1Q/NnezG8HDt0L +-cp2AMBYHlT8oDv3FdU9T1nSatCQujgKRz3bFmx5VdJx4IbHwLfELn8LVlhgf8FQi +-eowHAgMBAAGjfTB7MB0GA1UdDgQWBBSnpQaxLKYJYO7Rl+lwrrw7GWzbITAPBgNV +-HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFKelBrEspglg7tGX6XCuvDsZbNshMBgG +-A1UdIAQRMA8wDQYLKwYBBAGwLQMEAQEwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3 +-DQEBCwUAA4IBAQAmdzTblEiGKkGdLD4GkGDEjKwLVLgfuXvTBznk+j57sj1O7Z8j +-vZfza1zv7v1Apt+hk6EKhqzvINB5Ab149xnYJDE0BAGmuhWawyfc2E8PzBhj/5kP +-DpFrdRbhIfzYJsdHt6bPWHJxfrrhTZVHO8mvbaG0weyJ9rQPOLXiZNwlz6bb65pc +-maHFCN795trV1lpFDMS3wrUU77QR/w4VtfX128a961qn8FYiqTxlVMYVqL2Gns2D +-lmh6cYGJ4Qvh6hEbaAjMaZ7snkGeRDImeuKHCnE96+RapNLbxc3G3mB/ufNPRJLv +-KrcYPqcZ2Qt9sTdBQrC6YB3y/gkRsPCHe6ed +------END CERTIFICATE----- +- + # 57de0583efd2b26e0361da99da9df4648def7ee8441c3b728afa9bcde0f9b26a + Certificate: + Data: +@@ -1085,84 +1000,6 @@ PuXaTH4MNMn5X7azKFGnpyuqSfqNZSlO42sTp5SjLVFteAxEy9/eCG/Oo2Sr05WE + QRBdJ3NghVdJIgc= + -----END CERTIFICATE----- + +-# eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: 35210227249154 (0x200605167002) +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = RO, O = certSIGN, OU = certSIGN ROOT CA +- Validity +- Not Before: Jul 4 17:20:04 2006 GMT +- Not After : Jul 4 17:20:04 2031 GMT +- Subject: C = RO, O = certSIGN, OU = certSIGN ROOT CA +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:b7:33:b9:7e:c8:25:4a:8e:b5:db:b4:28:1b:aa: +- 57:90:e8:d1:22:d3:64:ba:d3:93:e8:d4:ac:86:61: +- 40:6a:60:57:68:54:84:4d:bc:6a:54:02:05:ff:df: +- 9b:9a:2a:ae:5d:07:8f:4a:c3:28:7f:ef:fb:2b:fa: +- 79:f1:c7:ad:f0:10:53:24:90:8b:66:c9:a8:88:ab: +- af:5a:a3:00:e9:be:ba:46:ee:5b:73:7b:2c:17:82: +- 81:5e:62:2c:a1:02:65:b3:bd:c5:2b:00:7e:c4:fc: +- 03:33:57:0d:ed:e2:fa:ce:5d:45:d6:38:cd:35:b6: +- b2:c1:d0:9c:81:4a:aa:e4:b2:01:5c:1d:8f:5f:99: +- c4:b1:ad:db:88:21:eb:90:08:82:80:f3:30:a3:43: +- e6:90:82:ae:55:28:49:ed:5b:d7:a9:10:38:0e:fe: +- 8f:4c:5b:9b:46:ea:41:f5:b0:08:74:c3:d0:88:33: +- b6:7c:d7:74:df:dc:84:d1:43:0e:75:39:a1:25:40: +- 28:ea:78:cb:0e:2c:2e:39:9d:8c:8b:6e:16:1c:2f: +- 26:82:10:e2:e3:65:94:0a:04:c0:5e:f7:5d:5b:f8: +- 10:e2:d0:ba:7a:4b:fb:de:37:00:00:1a:5b:28:e3: +- d2:9c:73:3e:32:87:98:a1:c9:51:2f:d7:de:ac:33: +- b3:4f +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: critical +- Digital Signature, Non Repudiation, Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- E0:8C:9B:DB:25:49:B3:F1:7C:86:D6:B2:42:87:0B:D0:6B:A0:D9:E4 +- Signature Algorithm: sha1WithRSAEncryption +- 3e:d2:1c:89:2e:35:fc:f8:75:dd:e6:7f:65:88:f4:72:4c:c9: +- 2c:d7:32:4e:f3:dd:19:79:47:bd:8e:3b:5b:93:0f:50:49:24: +- 13:6b:14:06:72:ef:09:d3:a1:a1:e3:40:84:c9:e7:18:32:74: +- 3c:48:6e:0f:9f:4b:d4:f7:1e:d3:93:86:64:54:97:63:72:50: +- d5:55:cf:fa:20:93:02:a2:9b:c3:23:93:4e:16:55:76:a0:70: +- 79:6d:cd:21:1f:cf:2f:2d:bc:19:e3:88:31:f8:59:1a:81:09: +- c8:97:a6:74:c7:60:c4:5b:cc:57:8e:b2:75:fd:1b:02:09:db: +- 59:6f:72:93:69:f7:31:41:d6:88:38:bf:87:b2:bd:16:79:f9: +- aa:e4:be:88:25:dd:61:27:23:1c:b5:31:07:04:36:b4:1a:90: +- bd:a0:74:71:50:89:6d:bc:14:e3:0f:86:ae:f1:ab:3e:c7:a0: +- 09:cc:a3:48:d1:e0:db:64:e7:92:b5:cf:af:72:43:70:8b:f9: +- c3:84:3c:13:aa:7e:92:9b:57:53:93:fa:70:c2:91:0e:31:f9: +- 9b:67:5d:e9:96:38:5e:5f:b3:73:4e:88:15:67:de:9e:76:10: +- 62:20:be:55:69:95:43:00:39:4d:f6:ee:b0:5a:4e:49:44:54: +- 58:5f:42:83 +------BEGIN CERTIFICATE----- +-MIIDODCCAiCgAwIBAgIGIAYFFnACMA0GCSqGSIb3DQEBBQUAMDsxCzAJBgNVBAYT +-AlJPMREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBD +-QTAeFw0wNjA3MDQxNzIwMDRaFw0zMTA3MDQxNzIwMDRaMDsxCzAJBgNVBAYTAlJP +-MREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBDQTCC +-ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALczuX7IJUqOtdu0KBuqV5Do +-0SLTZLrTk+jUrIZhQGpgV2hUhE28alQCBf/fm5oqrl0Hj0rDKH/v+yv6efHHrfAQ +-UySQi2bJqIirr1qjAOm+ukbuW3N7LBeCgV5iLKECZbO9xSsAfsT8AzNXDe3i+s5d +-RdY4zTW2ssHQnIFKquSyAVwdj1+ZxLGt24gh65AIgoDzMKND5pCCrlUoSe1b16kQ +-OA7+j0xbm0bqQfWwCHTD0IgztnzXdN/chNFDDnU5oSVAKOp4yw4sLjmdjItuFhwv +-JoIQ4uNllAoEwF73XVv4EOLQunpL+943AAAaWyjj0pxzPjKHmKHJUS/X3qwzs08C +-AwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAcYwHQYDVR0O +-BBYEFOCMm9slSbPxfIbWskKHC9BroNnkMA0GCSqGSIb3DQEBBQUAA4IBAQA+0hyJ +-LjX8+HXd5n9liPRyTMks1zJO890ZeUe9jjtbkw9QSSQTaxQGcu8J06Gh40CEyecY +-MnQ8SG4Pn0vU9x7Tk4ZkVJdjclDVVc/6IJMCopvDI5NOFlV2oHB5bc0hH88vLbwZ +-44gx+FkagQnIl6Z0x2DEW8xXjrJ1/RsCCdtZb3KTafcxQdaIOL+Hsr0Wefmq5L6I +-Jd1hJyMctTEHBDa0GpC9oHRxUIltvBTjD4au8as+x6AJzKNI0eDbZOeStc+vckNw +-i/nDhDwTqn6Sm1dTk/pwwpEOMfmbZ13pljheX7NzTogVZ96edhBiIL5VaZVDADlN +-9u6wWk5JRFRYX0KD +------END CERTIFICATE----- +- + # 5cc3d78e4e1d5e45547a04e6873e64f90cf9536d1ccc2ef800f355c4c5fd70fd + Certificate: + Data: +@@ -1287,130 +1124,6 @@ AAoACxGV2lZFA4gKn2fQ1XmxqI1AbQ3CekD6819kR5LLU7m7Wc5P/dAVUwHY3+vZ + 5nbv0CO7O6l5s9UCKc2Jo5YPSjXnTkLAdc0Hz+Ys63su + -----END CERTIFICATE----- + +-# c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 15:c8:bd:65:47:5c:af:b8:97:00:5e:e4:06:d2:bc:9d +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = TW, O = "Chunghwa Telecom Co., Ltd.", OU = ePKI Root Certification Authority +- Validity +- Not Before: Dec 20 02:31:27 2004 GMT +- Not After : Dec 20 02:31:27 2034 GMT +- Subject: C = TW, O = "Chunghwa Telecom Co., Ltd.", OU = ePKI Root Certification Authority +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (4096 bit) +- Modulus: +- 00:e1:25:0f:ee:8d:db:88:33:75:67:cd:ad:1f:7d: +- 3a:4e:6d:9d:d3:2f:14:f3:63:74:cb:01:21:6a:37: +- ea:84:50:07:4b:26:5b:09:43:6c:21:9e:6a:c8:d5: +- 03:f5:60:69:8f:cc:f0:22:e4:1f:e7:f7:6a:22:31: +- b7:2c:15:f2:e0:fe:00:6a:43:ff:87:65:c6:b5:1a: +- c1:a7:4c:6d:22:70:21:8a:31:f2:97:74:89:09:12: +- 26:1c:9e:ca:d9:12:a2:95:3c:da:e9:67:bf:08:a0: +- 64:e3:d6:42:b7:45:ef:97:f4:f6:f5:d7:b5:4a:15: +- 02:58:7d:98:58:4b:60:bc:cd:d7:0d:9a:13:33:53: +- d1:61:f9:7a:d5:d7:78:b3:9a:33:f7:00:86:ce:1d: +- 4d:94:38:af:a8:ec:78:51:70:8a:5c:10:83:51:21: +- f7:11:3d:34:86:5e:e5:48:cd:97:81:82:35:4c:19: +- ec:65:f6:6b:c5:05:a1:ee:47:13:d6:b3:21:27:94: +- 10:0a:d9:24:3b:ba:be:44:13:46:30:3f:97:3c:d8: +- d7:d7:6a:ee:3b:38:e3:2b:d4:97:0e:b9:1b:e7:07: +- 49:7f:37:2a:f9:77:78:cf:54:ed:5b:46:9d:a3:80: +- 0e:91:43:c1:d6:5b:5f:14:ba:9f:a6:8d:24:47:40: +- 59:bf:72:38:b2:36:6c:37:ff:99:d1:5d:0e:59:0a: +- ab:69:f7:c0:b2:04:45:7a:54:00:ae:be:53:f6:b5: +- e7:e1:f8:3c:a3:31:d2:a9:fe:21:52:64:c5:a6:67: +- f0:75:07:06:94:14:81:55:c6:27:e4:01:8f:17:c1: +- 6a:71:d7:be:4b:fb:94:58:7d:7e:11:33:b1:42:f7: +- 62:6c:18:d6:cf:09:68:3e:7f:6c:f6:1e:8f:62:ad: +- a5:63:db:09:a7:1f:22:42:41:1e:6f:99:8a:3e:d7: +- f9:3f:40:7a:79:b0:a5:01:92:d2:9d:3d:08:15:a5: +- 10:01:2d:b3:32:76:a8:95:0d:b3:7a:9a:fb:07:10: +- 78:11:6f:e1:8f:c7:ba:0f:25:1a:74:2a:e5:1c:98: +- 41:99:df:21:87:e8:95:06:6a:0a:b3:6a:47:76:65: +- f6:3a:cf:8f:62:17:19:7b:0a:28:cd:1a:d2:83:1e: +- 21:c7:2c:bf:be:ff:61:68:b7:67:1b:bb:78:4d:8d: +- ce:67:e5:e4:c1:8e:b7:23:66:e2:9d:90:75:34:98: +- a9:36:2b:8a:9a:94:b9:9d:ec:cc:8a:b1:f8:25:89: +- 5c:5a:b6:2f:8c:1f:6d:79:24:a7:52:68:c3:84:35: +- e2:66:8d:63:0e:25:4d:d5:19:b2:e6:79:37:a7:22: +- 9d:54:31 +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Subject Key Identifier: +- 1E:0C:F7:B6:67:F2:E1:92:26:09:45:C0:55:39:2E:77:3F:42:4A:A2 +- X509v3 Basic Constraints: +- CA:TRUE +- setCext-hashedRoot: +- 0/0-...0...+......0...g*.....E... +-V|.[x....S..... +- Signature Algorithm: sha1WithRSAEncryption +- 09:b3:83:53:59:01:3e:95:49:b9:f1:81:ba:f9:76:20:23:b5: +- 27:60:74:d4:6a:99:34:5e:6c:00:53:d9:9f:f2:a6:b1:24:07: +- 44:6a:2a:c6:a5:8e:78:12:e8:47:d9:58:1b:13:2a:5e:79:9b: +- 9f:0a:2a:67:a6:25:3f:06:69:56:73:c3:8a:66:48:fb:29:81: +- 57:74:06:ca:9c:ea:28:e8:38:67:26:2b:f1:d5:b5:3f:65:93: +- f8:36:5d:8e:8d:8d:40:20:87:19:ea:ef:27:c0:3d:b4:39:0f: +- 25:7b:68:50:74:55:9c:0c:59:7d:5a:3d:41:94:25:52:08:e0: +- 47:2c:15:31:19:d5:bf:07:55:c6:bb:12:b5:97:f4:5f:83:85: +- ba:71:c1:d9:6c:81:11:76:0a:0a:b0:bf:82:97:f7:ea:3d:fa: +- fa:ec:2d:a9:28:94:3b:56:dd:d2:51:2e:ae:c0:bd:08:15:8c: +- 77:52:34:96:d6:9b:ac:d3:1d:8e:61:0f:35:7b:9b:ae:39:69: +- 0b:62:60:40:20:36:8f:af:fb:36:ee:2d:08:4a:1d:b8:bf:9b: +- 5c:f8:ea:a5:1b:a0:73:a6:d8:f8:6e:e0:33:04:5f:68:aa:27: +- 87:ed:d9:c1:90:9c:ed:bd:e3:6a:35:af:63:df:ab:18:d9:ba: +- e6:e9:4a:ea:50:8a:0f:61:93:1e:e2:2d:19:e2:30:94:35:92: +- 5d:0e:b6:07:af:19:80:8f:47:90:51:4b:2e:4d:dd:85:e2:d2: +- 0a:52:0a:17:9a:fc:1a:b0:50:02:e5:01:a3:63:37:21:4c:44: +- c4:9b:51:99:11:0e:73:9c:06:8f:54:2e:a7:28:5e:44:39:87: +- 56:2d:37:bd:85:44:94:e1:0c:4b:2c:9c:c3:92:85:34:61:cb: +- 0f:b8:9b:4a:43:52:fe:34:3a:7d:b8:e9:29:dc:76:a9:c8:30: +- f8:14:71:80:c6:1e:36:48:74:22:41:5c:87:82:e8:18:71:8b: +- 41:89:44:e7:7e:58:5b:a8:b8:8d:13:e9:a7:6c:c3:47:ed:b3: +- 1a:9d:62:ae:8d:82:ea:94:9e:dd:59:10:c3:ad:dd:e2:4d:e3: +- 31:d5:c7:ec:e8:f2:b0:fe:92:1e:16:0a:1a:fc:d9:f3:f8:27: +- b6:c9:be:1d:b4:6c:64:90:7f:f4:e4:c4:5b:d7:37:ae:42:0e: +- dd:a4:1a:6f:7c:88:54:c5:16:6e:e1:7a:68:2e:f8:3a:bf:0d: +- a4:3c:89:3b:78:a7:4e:63:83:04:21:08:67:8d:f2:82:49:d0: +- 5b:fd:b1:cd:0f:83:84:d4:3e:20:85:f7:4a:3d:2b:9c:fd:2a: +- 0a:09:4d:ea:81:f8:11:9c +------BEGIN CERTIFICATE----- +-MIIFsDCCA5igAwIBAgIQFci9ZUdcr7iXAF7kBtK8nTANBgkqhkiG9w0BAQUFADBe +-MQswCQYDVQQGEwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0 +-ZC4xKjAoBgNVBAsMIWVQS0kgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe +-Fw0wNDEyMjAwMjMxMjdaFw0zNDEyMjAwMjMxMjdaMF4xCzAJBgNVBAYTAlRXMSMw +-IQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwgTHRkLjEqMCgGA1UECwwhZVBL +-SSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEF +-AAOCAg8AMIICCgKCAgEA4SUP7o3biDN1Z82tH306Tm2d0y8U82N0ywEhajfqhFAH +-SyZbCUNsIZ5qyNUD9WBpj8zwIuQf5/dqIjG3LBXy4P4AakP/h2XGtRrBp0xtInAh +-ijHyl3SJCRImHJ7K2RKilTza6We/CKBk49ZCt0Xvl/T29de1ShUCWH2YWEtgvM3X +-DZoTM1PRYfl61dd4s5oz9wCGzh1NlDivqOx4UXCKXBCDUSH3ET00hl7lSM2XgYI1 +-TBnsZfZrxQWh7kcT1rMhJ5QQCtkkO7q+RBNGMD+XPNjX12ruOzjjK9SXDrkb5wdJ +-fzcq+Xd4z1TtW0ado4AOkUPB1ltfFLqfpo0kR0BZv3I4sjZsN/+Z0V0OWQqraffA +-sgRFelQArr5T9rXn4fg8ozHSqf4hUmTFpmfwdQcGlBSBVcYn5AGPF8Fqcde+S/uU +-WH1+ETOxQvdibBjWzwloPn9s9h6PYq2lY9sJpx8iQkEeb5mKPtf5P0B6ebClAZLS +-nT0IFaUQAS2zMnaolQ2zepr7BxB4EW/hj8e6DyUadCrlHJhBmd8hh+iVBmoKs2pH +-dmX2Os+PYhcZewoozRrSgx4hxyy/vv9haLdnG7t4TY3OZ+XkwY63I2binZB1NJip +-NiuKmpS5nezMirH4JYlcWrYvjB9teSSnUmjDhDXiZo1jDiVN1Rmy5nk3pyKdVDEC +-AwEAAaNqMGgwHQYDVR0OBBYEFB4M97Zn8uGSJglFwFU5Lnc/QkqiMAwGA1UdEwQF +-MAMBAf8wOQYEZyoHAAQxMC8wLQIBADAJBgUrDgMCGgUAMAcGBWcqAwAABBRFsMLH +-ClZ87lt4DJX5GFPBphzYEDANBgkqhkiG9w0BAQUFAAOCAgEACbODU1kBPpVJufGB +-uvl2ICO1J2B01GqZNF5sAFPZn/KmsSQHRGoqxqWOeBLoR9lYGxMqXnmbnwoqZ6Yl +-PwZpVnPDimZI+ymBV3QGypzqKOg4ZyYr8dW1P2WT+DZdjo2NQCCHGervJ8A9tDkP +-JXtoUHRVnAxZfVo9QZQlUgjgRywVMRnVvwdVxrsStZf0X4OFunHB2WyBEXYKCrC/ +-gpf36j36+uwtqSiUO1bd0lEursC9CBWMd1I0ltabrNMdjmEPNXubrjlpC2JgQCA2 +-j6/7Nu4tCEoduL+bXPjqpRugc6bY+G7gMwRfaKonh+3ZwZCc7b3jajWvY9+rGNm6 +-5ulK6lCKD2GTHuItGeIwlDWSXQ62B68ZgI9HkFFLLk3dheLSClIKF5r8GrBQAuUB +-o2M3IUxExJtRmREOc5wGj1QupyheRDmHVi03vYVElOEMSyycw5KFNGHLD7ibSkNS +-/jQ6fbjpKdx2qcgw+BRxgMYeNkh0IkFch4LoGHGLQYlE535YW6i4jRPpp2zDR+2z +-Gp1iro2C6pSe3VkQw63d4k3jMdXH7OjysP6SHhYKGvzZ8/gntsm+HbRsZJB/9OTE +-W9c3rkIO3aQab3yIVMUWbuF6aC74Or8NpDyJO3inTmODBCEIZ43ygknQW/2xzQ+D +-hNQ+IIX3Sj0rnP0qCglN6oH4EZw= +------END CERTIFICATE----- +- + # 49e7a442acf0ea6287050054b52564b650e4f49e42e348d6aa38e039e957b1c1 + Certificate: + Data: +@@ -1896,94 +1609,6 @@ jWZSaX5LaAzHHjcng6WMxwLkFM1JAbBzs/3GkDpv0mztO+7skb6iQ12LAEpmJURw + 3kAP+HwV96LOPNdeE4yBFxgX0b3xdxA61GU5wSesVywlVP+i2k+KYTlerj1KjL0= + -----END CERTIFICATE----- + +-# e3b6a2db2ed7ce48842f7ac53241c7b71d54144bfb40c11f3f1d0b42f5eea12d +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- fe:dc:e3:01:0f:c9:48:ff +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = FR, O = Dhimyotis, CN = Certigna +- Validity +- Not Before: Jun 29 15:13:05 2007 GMT +- Not After : Jun 29 15:13:05 2027 GMT +- Subject: C = FR, O = Dhimyotis, CN = Certigna +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:c8:68:f1:c9:d6:d6:b3:34:75:26:82:1e:ec:b4: +- be:ea:5c:e1:26:ed:11:47:61:e1:a2:7c:16:78:40: +- 21:e4:60:9e:5a:c8:63:e1:c4:b1:96:92:ff:18:6d: +- 69:23:e1:2b:62:f7:dd:e2:36:2f:91:07:b9:48:cf: +- 0e:ec:79:b6:2c:e7:34:4b:70:08:25:a3:3c:87:1b: +- 19:f2:81:07:0f:38:90:19:d3:11:fe:86:b4:f2:d1: +- 5e:1e:1e:96:cd:80:6c:ce:3b:31:93:b6:f2:a0:d0: +- a9:95:12:7d:a5:9a:cc:6b:c8:84:56:8a:33:a9:e7: +- 22:15:53:16:f0:cc:17:ec:57:5f:e9:a2:0a:98:09: +- de:e3:5f:9c:6f:dc:48:e3:85:0b:15:5a:a6:ba:9f: +- ac:48:e3:09:b2:f7:f4:32:de:5e:34:be:1c:78:5d: +- 42:5b:ce:0e:22:8f:4d:90:d7:7d:32:18:b3:0b:2c: +- 6a:bf:8e:3f:14:11:89:20:0e:77:14:b5:3d:94:08: +- 87:f7:25:1e:d5:b2:60:00:ec:6f:2a:28:25:6e:2a: +- 3e:18:63:17:25:3f:3e:44:20:16:f6:26:c8:25:ae: +- 05:4a:b4:e7:63:2c:f3:8c:16:53:7e:5c:fb:11:1a: +- 08:c1:46:62:9f:22:b8:f1:c2:8d:69:dc:fa:3a:58: +- 06:df +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- 1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11 +- X509v3 Authority Key Identifier: +- keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11 +- DirName:/C=FR/O=Dhimyotis/CN=Certigna +- serial:FE:DC:E3:01:0F:C9:48:FF +- +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- Netscape Cert Type: +- SSL CA, S/MIME CA, Object Signing CA +- Signature Algorithm: sha1WithRSAEncryption +- 85:03:1e:92:71:f6:42:af:e1:a3:61:9e:eb:f3:c0:0f:f2:a5: +- d4:da:95:e6:d6:be:68:36:3d:7e:6e:1f:4c:8a:ef:d1:0f:21: +- 6d:5e:a5:52:63:ce:12:f8:ef:2a:da:6f:eb:37:fe:13:02:c7: +- cb:3b:3e:22:6b:da:61:2e:7f:d4:72:3d:dd:30:e1:1e:4c:40: +- 19:8c:0f:d7:9c:d1:83:30:7b:98:59:dc:7d:c6:b9:0c:29:4c: +- a1:33:a2:eb:67:3a:65:84:d3:96:e2:ed:76:45:70:8f:b5:2b: +- de:f9:23:d6:49:6e:3c:14:b5:c6:9f:35:1e:50:d0:c1:8f:6a: +- 70:44:02:62:cb:ae:1d:68:41:a7:aa:57:e8:53:aa:07:d2:06: +- f6:d5:14:06:0b:91:03:75:2c:6c:72:b5:61:95:9a:0d:8b:b9: +- 0d:e7:f5:df:54:cd:de:e6:d8:d6:09:08:97:63:e5:c1:2e:b0: +- b7:44:26:c0:26:c0:af:55:30:9e:3b:d5:36:2a:19:04:f4:5c: +- 1e:ff:cf:2c:b7:ff:d0:fd:87:40:11:d5:11:23:bb:48:c0:21: +- a9:a4:28:2d:fd:15:f8:b0:4e:2b:f4:30:5b:21:fc:11:91:34: +- be:41:ef:7b:9d:97:75:ff:97:95:c0:96:58:2f:ea:bb:46:d7: +- bb:e4:d9:2e +------BEGIN CERTIFICATE----- +-MIIDqDCCApCgAwIBAgIJAP7c4wEPyUj/MA0GCSqGSIb3DQEBBQUAMDQxCzAJBgNV +-BAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hMB4X +-DTA3MDYyOTE1MTMwNVoXDTI3MDYyOTE1MTMwNVowNDELMAkGA1UEBhMCRlIxEjAQ +-BgNVBAoMCURoaW15b3RpczERMA8GA1UEAwwIQ2VydGlnbmEwggEiMA0GCSqGSIb3 +-DQEBAQUAA4IBDwAwggEKAoIBAQDIaPHJ1tazNHUmgh7stL7qXOEm7RFHYeGifBZ4 +-QCHkYJ5ayGPhxLGWkv8YbWkj4Sti993iNi+RB7lIzw7sebYs5zRLcAglozyHGxny +-gQcPOJAZ0xH+hrTy0V4eHpbNgGzOOzGTtvKg0KmVEn2lmsxryIRWijOp5yIVUxbw +-zBfsV1/pogqYCd7jX5xv3EjjhQsVWqa6n6xI4wmy9/Qy3l40vhx4XUJbzg4ij02Q +-130yGLMLLGq/jj8UEYkgDncUtT2UCIf3JR7VsmAA7G8qKCVuKj4YYxclPz5EIBb2 +-JsglrgVKtOdjLPOMFlN+XPsRGgjBRmKfIrjxwo1p3Po6WAbfAgMBAAGjgbwwgbkw +-DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUGu3+QTmQtCRZvgHyUtVF9lo53BEw +-ZAYDVR0jBF0wW4AUGu3+QTmQtCRZvgHyUtVF9lo53BGhOKQ2MDQxCzAJBgNVBAYT +-AkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hggkA/tzj +-AQ/JSP8wDgYDVR0PAQH/BAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG +-9w0BAQUFAAOCAQEAhQMeknH2Qq/ho2Ge6/PAD/Kl1NqV5ta+aDY9fm4fTIrv0Q8h +-bV6lUmPOEvjvKtpv6zf+EwLHyzs+ImvaYS5/1HI93TDhHkxAGYwP15zRgzB7mFnc +-fca5DClMoTOi62c6ZYTTluLtdkVwj7Ur3vkj1kluPBS1xp81HlDQwY9qcEQCYsuu +-HWhBp6pX6FOqB9IG9tUUBguRA3UsbHK1YZWaDYu5Def131TN3ubY1gkIl2PlwS6w +-t0QmwCbAr1UwnjvVNioZBPRcHv/PLLf/0P2HQBHVESO7SMAhqaQoLf0V+LBOK/Qw +-WyH8EZE0vkHve52Xdf+XlcCWWC/qu0bXu+TZLg== +------END CERTIFICATE----- +- + # 31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0 + Certificate: + Data: +@@ -2039,517 +1664,6 @@ oAIwOWZbwmSNuJ5Q3KjVSaLtx9zRSX8XAbjIho9OjIgrqJqpisXRAL34VOKa5Vt8 + sycX + -----END CERTIFICATE----- + +-# 3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39 +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root CA +- Validity +- Not Before: Nov 10 00:00:00 2006 GMT +- Not After : Nov 10 00:00:00 2031 GMT +- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root CA +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:ad:0e:15:ce:e4:43:80:5c:b1:87:f3:b7:60:f9: +- 71:12:a5:ae:dc:26:94:88:aa:f4:ce:f5:20:39:28: +- 58:60:0c:f8:80:da:a9:15:95:32:61:3c:b5:b1:28: +- 84:8a:8a:dc:9f:0a:0c:83:17:7a:8f:90:ac:8a:e7: +- 79:53:5c:31:84:2a:f6:0f:98:32:36:76:cc:de:dd: +- 3c:a8:a2:ef:6a:fb:21:f2:52:61:df:9f:20:d7:1f: +- e2:b1:d9:fe:18:64:d2:12:5b:5f:f9:58:18:35:bc: +- 47:cd:a1:36:f9:6b:7f:d4:b0:38:3e:c1:1b:c3:8c: +- 33:d9:d8:2f:18:fe:28:0f:b3:a7:83:d6:c3:6e:44: +- c0:61:35:96:16:fe:59:9c:8b:76:6d:d7:f1:a2:4b: +- 0d:2b:ff:0b:72:da:9e:60:d0:8e:90:35:c6:78:55: +- 87:20:a1:cf:e5:6d:0a:c8:49:7c:31:98:33:6c:22: +- e9:87:d0:32:5a:a2:ba:13:82:11:ed:39:17:9d:99: +- 3a:72:a1:e6:fa:a4:d9:d5:17:31:75:ae:85:7d:22: +- ae:3f:01:46:86:f6:28:79:c8:b1:da:e4:57:17:c4: +- 7e:1c:0e:b0:b4:92:a6:56:b3:bd:b2:97:ed:aa:a7: +- f0:b7:c5:a8:3f:95:16:d0:ff:a1:96:eb:08:5f:18: +- 77:4f +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- 45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F +- X509v3 Authority Key Identifier: +- keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F +- +- Signature Algorithm: sha1WithRSAEncryption +- a2:0e:bc:df:e2:ed:f0:e3:72:73:7a:64:94:bf:f7:72:66:d8: +- 32:e4:42:75:62:ae:87:eb:f2:d5:d9:de:56:b3:9f:cc:ce:14: +- 28:b9:0d:97:60:5c:12:4c:58:e4:d3:3d:83:49:45:58:97:35: +- 69:1a:a8:47:ea:56:c6:79:ab:12:d8:67:81:84:df:7f:09:3c: +- 94:e6:b8:26:2c:20:bd:3d:b3:28:89:f7:5f:ff:22:e2:97:84: +- 1f:e9:65:ef:87:e0:df:c1:67:49:b3:5d:eb:b2:09:2a:eb:26: +- ed:78:be:7d:3f:2b:f3:b7:26:35:6d:5f:89:01:b6:49:5b:9f: +- 01:05:9b:ab:3d:25:c1:cc:b6:7f:c2:f1:6f:86:c6:fa:64:68: +- eb:81:2d:94:eb:42:b7:fa:8c:1e:dd:62:f1:be:50:67:b7:6c: +- bd:f3:f1:1f:6b:0c:36:07:16:7f:37:7c:a9:5b:6d:7a:f1:12: +- 46:60:83:d7:27:04:be:4b:ce:97:be:c3:67:2a:68:11:df:80: +- e7:0c:33:66:bf:13:0d:14:6e:f3:7f:1f:63:10:1e:fa:8d:1b: +- 25:6d:6c:8f:a5:b7:61:01:b1:d2:a3:26:a1:10:71:9d:ad:e2: +- c3:f9:c3:99:51:b7:2b:07:08:ce:2e:e6:50:b2:a7:fa:0a:45: +- 2f:a2:f0:f2 +------BEGIN CERTIFICATE----- +-MIIDtzCCAp+gAwIBAgIQDOfg5RfYRv6P5WD8G/AwOTANBgkqhkiG9w0BAQUFADBl +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv +-b3QgQ0EwHhcNMDYxMTEwMDAwMDAwWhcNMzExMTEwMDAwMDAwWjBlMQswCQYDVQQG +-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl +-cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwggEi +-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDhXO5EOAXLGH87dg+XESpa7c +-JpSIqvTO9SA5KFhgDPiA2qkVlTJhPLWxKISKityfCgyDF3qPkKyK53lTXDGEKvYP +-mDI2dsze3Tyoou9q+yHyUmHfnyDXH+Kx2f4YZNISW1/5WBg1vEfNoTb5a3/UsDg+ +-wRvDjDPZ2C8Y/igPs6eD1sNuRMBhNZYW/lmci3Zt1/GiSw0r/wty2p5g0I6QNcZ4 +-VYcgoc/lbQrISXwxmDNsIumH0DJaoroTghHtORedmTpyoeb6pNnVFzF1roV9Iq4/ +-AUaG9ih5yLHa5FcXxH4cDrC0kqZWs72yl+2qp/C3xag/lRbQ/6GW6whfGHdPAgMB +-AAGjYzBhMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW +-BBRF66Kv9JLLgjEtUYunpyGd823IDzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYun +-pyGd823IDzANBgkqhkiG9w0BAQUFAAOCAQEAog683+Lt8ONyc3pklL/3cmbYMuRC +-dWKuh+vy1dneVrOfzM4UKLkNl2BcEkxY5NM9g0lFWJc1aRqoR+pWxnmrEthngYTf +-fwk8lOa4JiwgvT2zKIn3X/8i4peEH+ll74fg38FnSbNd67IJKusm7Xi+fT8r87cm +-NW1fiQG2SVufAQWbqz0lwcy2f8Lxb4bG+mRo64EtlOtCt/qMHt1i8b5QZ7dsvfPx +-H2sMNgcWfzd8qVttevESRmCD1ycEvkvOl77DZypoEd+A5wwzZr8TDRRu838fYxAe +-+o0bJW1sj6W3YQGx0qMmoRBxna3iw/nDmVG3KwcIzi7mULKn+gpFL6Lw8g== +------END CERTIFICATE----- +- +-# 4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 08:3b:e0:56:90:42:46:b1:a1:75:6a:c9:59:91:c7:4a +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA +- Validity +- Not Before: Nov 10 00:00:00 2006 GMT +- Not After : Nov 10 00:00:00 2031 GMT +- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:e2:3b:e1:11:72:de:a8:a4:d3:a3:57:aa:50:a2: +- 8f:0b:77:90:c9:a2:a5:ee:12:ce:96:5b:01:09:20: +- cc:01:93:a7:4e:30:b7:53:f7:43:c4:69:00:57:9d: +- e2:8d:22:dd:87:06:40:00:81:09:ce:ce:1b:83:bf: +- df:cd:3b:71:46:e2:d6:66:c7:05:b3:76:27:16:8f: +- 7b:9e:1e:95:7d:ee:b7:48:a3:08:da:d6:af:7a:0c: +- 39:06:65:7f:4a:5d:1f:bc:17:f8:ab:be:ee:28:d7: +- 74:7f:7a:78:99:59:85:68:6e:5c:23:32:4b:bf:4e: +- c0:e8:5a:6d:e3:70:bf:77:10:bf:fc:01:f6:85:d9: +- a8:44:10:58:32:a9:75:18:d5:d1:a2:be:47:e2:27: +- 6a:f4:9a:33:f8:49:08:60:8b:d4:5f:b4:3a:84:bf: +- a1:aa:4a:4c:7d:3e:cf:4f:5f:6c:76:5e:a0:4b:37: +- 91:9e:dc:22:e6:6d:ce:14:1a:8e:6a:cb:fe:cd:b3: +- 14:64:17:c7:5b:29:9e:32:bf:f2:ee:fa:d3:0b:42: +- d4:ab:b7:41:32:da:0c:d4:ef:f8:81:d5:bb:8d:58: +- 3f:b5:1b:e8:49:28:a2:70:da:31:04:dd:f7:b2:16: +- f2:4c:0a:4e:07:a8:ed:4a:3d:5e:b5:7f:a3:90:c3: +- af:27 +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- 03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55 +- X509v3 Authority Key Identifier: +- keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55 +- +- Signature Algorithm: sha1WithRSAEncryption +- cb:9c:37:aa:48:13:12:0a:fa:dd:44:9c:4f:52:b0:f4:df:ae: +- 04:f5:79:79:08:a3:24:18:fc:4b:2b:84:c0:2d:b9:d5:c7:fe: +- f4:c1:1f:58:cb:b8:6d:9c:7a:74:e7:98:29:ab:11:b5:e3:70: +- a0:a1:cd:4c:88:99:93:8c:91:70:e2:ab:0f:1c:be:93:a9:ff: +- 63:d5:e4:07:60:d3:a3:bf:9d:5b:09:f1:d5:8e:e3:53:f4:8e: +- 63:fa:3f:a7:db:b4:66:df:62:66:d6:d1:6e:41:8d:f2:2d:b5: +- ea:77:4a:9f:9d:58:e2:2b:59:c0:40:23:ed:2d:28:82:45:3e: +- 79:54:92:26:98:e0:80:48:a8:37:ef:f0:d6:79:60:16:de:ac: +- e8:0e:cd:6e:ac:44:17:38:2f:49:da:e1:45:3e:2a:b9:36:53: +- cf:3a:50:06:f7:2e:e8:c4:57:49:6c:61:21:18:d5:04:ad:78: +- 3c:2c:3a:80:6b:a7:eb:af:15:14:e9:d8:89:c1:b9:38:6c:e2: +- 91:6c:8a:ff:64:b9:77:25:57:30:c0:1b:24:a3:e1:dc:e9:df: +- 47:7c:b5:b4:24:08:05:30:ec:2d:bd:0b:bf:45:bf:50:b9:a9: +- f3:eb:98:01:12:ad:c8:88:c6:98:34:5f:8d:0a:3c:c6:e9:d5: +- 95:95:6d:de +------BEGIN CERTIFICATE----- +-MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD +-QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT +-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j +-b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG +-9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB +-CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97 +-nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt +-43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P +-T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4 +-gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO +-BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR +-TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw +-DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr +-hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg +-06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF +-PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls +-YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk +-CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4= +------END CERTIFICATE----- +- +-# 552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c +- Signature Algorithm: sha384WithRSAEncryption +- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4 +- Validity +- Not Before: Aug 1 12:00:00 2013 GMT +- Not After : Jan 15 12:00:00 2038 GMT +- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4 +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (4096 bit) +- Modulus: +- 00:bf:e6:90:73:68:de:bb:e4:5d:4a:3c:30:22:30: +- 69:33:ec:c2:a7:25:2e:c9:21:3d:f2:8a:d8:59:c2: +- e1:29:a7:3d:58:ab:76:9a:cd:ae:7b:1b:84:0d:c4: +- 30:1f:f3:1b:a4:38:16:eb:56:c6:97:6d:1d:ab:b2: +- 79:f2:ca:11:d2:e4:5f:d6:05:3c:52:0f:52:1f:c6: +- 9e:15:a5:7e:be:9f:a9:57:16:59:55:72:af:68:93: +- 70:c2:b2:ba:75:99:6a:73:32:94:d1:10:44:10:2e: +- df:82:f3:07:84:e6:74:3b:6d:71:e2:2d:0c:1b:ee: +- 20:d5:c9:20:1d:63:29:2d:ce:ec:5e:4e:c8:93:f8: +- 21:61:9b:34:eb:05:c6:5e:ec:5b:1a:bc:eb:c9:cf: +- cd:ac:34:40:5f:b1:7a:66:ee:77:c8:48:a8:66:57: +- 57:9f:54:58:8e:0c:2b:b7:4f:a7:30:d9:56:ee:ca: +- 7b:5d:e3:ad:c9:4f:5e:e5:35:e7:31:cb:da:93:5e: +- dc:8e:8f:80:da:b6:91:98:40:90:79:c3:78:c7:b6: +- b1:c4:b5:6a:18:38:03:10:8d:d8:d4:37:a4:2e:05: +- 7d:88:f5:82:3e:10:91:70:ab:55:82:41:32:d7:db: +- 04:73:2a:6e:91:01:7c:21:4c:d4:bc:ae:1b:03:75: +- 5d:78:66:d9:3a:31:44:9a:33:40:bf:08:d7:5a:49: +- a4:c2:e6:a9:a0:67:dd:a4:27:bc:a1:4f:39:b5:11: +- 58:17:f7:24:5c:46:8f:64:f7:c1:69:88:76:98:76: +- 3d:59:5d:42:76:87:89:97:69:7a:48:f0:e0:a2:12: +- 1b:66:9a:74:ca:de:4b:1e:e7:0e:63:ae:e6:d4:ef: +- 92:92:3a:9e:3d:dc:00:e4:45:25:89:b6:9a:44:19: +- 2b:7e:c0:94:b4:d2:61:6d:eb:33:d9:c5:df:4b:04: +- 00:cc:7d:1c:95:c3:8f:f7:21:b2:b2:11:b7:bb:7f: +- f2:d5:8c:70:2c:41:60:aa:b1:63:18:44:95:1a:76: +- 62:7e:f6:80:b0:fb:e8:64:a6:33:d1:89:07:e1:bd: +- b7:e6:43:a4:18:b8:a6:77:01:e1:0f:94:0c:21:1d: +- b2:54:29:25:89:6c:e5:0e:52:51:47:74:be:26:ac: +- b6:41:75:de:7a:ac:5f:8d:3f:c9:bc:d3:41:11:12: +- 5b:e5:10:50:eb:31:c5:ca:72:16:22:09:df:7c:4c: +- 75:3f:63:ec:21:5f:c4:20:51:6b:6f:b1:ab:86:8b: +- 4f:c2:d6:45:5f:9d:20:fc:a1:1e:c5:c0:8f:a2:b1: +- 7e:0a:26:99:f5:e4:69:2f:98:1d:2d:f5:d9:a9:b2: +- 1d:e5:1b +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- EC:D7:E3:82:D2:71:5D:64:4C:DF:2E:67:3F:E7:BA:98:AE:1C:0F:4F +- Signature Algorithm: sha384WithRSAEncryption +- bb:61:d9:7d:a9:6c:be:17:c4:91:1b:c3:a1:a2:00:8d:e3:64: +- 68:0f:56:cf:77:ae:70:f9:fd:9a:4a:99:b9:c9:78:5c:0c:0c: +- 5f:e4:e6:14:29:56:0b:36:49:5d:44:63:e0:ad:9c:96:18:66: +- 1b:23:0d:3d:79:e9:6d:6b:d6:54:f8:d2:3c:c1:43:40:ae:1d: +- 50:f5:52:fc:90:3b:bb:98:99:69:6b:c7:c1:a7:a8:68:a4:27: +- dc:9d:f9:27:ae:30:85:b9:f6:67:4d:3a:3e:8f:59:39:22:53: +- 44:eb:c8:5d:03:ca:ed:50:7a:7d:62:21:0a:80:c8:73:66:d1: +- a0:05:60:5f:e8:a5:b4:a7:af:a8:f7:6d:35:9c:7c:5a:8a:d6: +- a2:38:99:f3:78:8b:f4:4d:d2:20:0b:de:04:ee:8c:9b:47:81: +- 72:0d:c0:14:32:ef:30:59:2e:ae:e0:71:f2:56:e4:6a:97:6f: +- 92:50:6d:96:8d:68:7a:9a:b2:36:14:7a:06:f2:24:b9:09:11: +- 50:d7:08:b1:b8:89:7a:84:23:61:42:29:e5:a3:cd:a2:20:41: +- d7:d1:9c:64:d9:ea:26:a1:8b:14:d7:4c:19:b2:50:41:71:3d: +- 3f:4d:70:23:86:0c:4a:dc:81:d2:cc:32:94:84:0d:08:09:97: +- 1c:4f:c0:ee:6b:20:74:30:d2:e0:39:34:10:85:21:15:01:08: +- e8:55:32:de:71:49:d9:28:17:50:4d:e6:be:4d:d1:75:ac:d0: +- ca:fb:41:b8:43:a5:aa:d3:c3:05:44:4f:2c:36:9b:e2:fa:e2: +- 45:b8:23:53:6c:06:6f:67:55:7f:46:b5:4c:3f:6e:28:5a:79: +- 26:d2:a4:a8:62:97:d2:1e:e2:ed:4a:8b:bc:1b:fd:47:4a:0d: +- df:67:66:7e:b2:5b:41:d0:3b:e4:f4:3b:f4:04:63:e9:ef:c2: +- 54:00:51:a0:8a:2a:c9:ce:78:cc:d5:ea:87:04:18:b3:ce:af: +- 49:88:af:f3:92:99:b6:b3:e6:61:0f:d2:85:00:e7:50:1a:e4: +- 1b:95:9d:19:a1:b9:9c:b1:9b:b1:00:1e:ef:d0:0f:4f:42:6c: +- c9:0a:bc:ee:43:fa:3a:71:a5:c8:4d:26:a5:35:fd:89:5d:bc: +- 85:62:1d:32:d2:a0:2b:54:ed:9a:57:c1:db:fa:10:cf:19:b7: +- 8b:4a:1b:8f:01:b6:27:95:53:e8:b6:89:6d:5b:bc:68:d4:23: +- e8:8b:51:a2:56:f9:f0:a6:80:a0:d6:1e:b3:bc:0f:0f:53:75: +- 29:aa:ea:13:77:e4:de:8c:81:21:ad:07:10:47:11:ad:87:3d: +- 07:d1:75:bc:cf:f3:66:7e +------BEGIN CERTIFICATE----- +-MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBi +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg +-RzQwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBiMQswCQYDVQQGEwJV +-UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu +-Y29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0GCSqG +-SIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3y +-ithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1If +-xp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDV +-ySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfISKhmV1efVFiO +-DCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jHtrHEtWoYOAMQ +-jdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6MUSaM0C/ +-CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCi +-EhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADM +-fRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QY +-uKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXK +-chYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4KJpn15GkvmB0t +-9dmpsh3lGwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB +-hjAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wDQYJKoZIhvcNAQEMBQAD +-ggIBALth2X2pbL4XxJEbw6GiAI3jZGgPVs93rnD5/ZpKmbnJeFwMDF/k5hQpVgs2 +-SV1EY+CtnJYYZhsjDT156W1r1lT40jzBQ0CuHVD1UvyQO7uYmWlrx8GnqGikJ9yd +-+SeuMIW59mdNOj6PWTkiU0TryF0Dyu1Qen1iIQqAyHNm0aAFYF/opbSnr6j3bTWc +-fFqK1qI4mfN4i/RN0iAL3gTujJtHgXINwBQy7zBZLq7gcfJW5GqXb5JQbZaNaHqa +-sjYUegbyJLkJEVDXCLG4iXqEI2FCKeWjzaIgQdfRnGTZ6iahixTXTBmyUEFxPT9N +-cCOGDErcgdLMMpSEDQgJlxxPwO5rIHQw0uA5NBCFIRUBCOhVMt5xSdkoF1BN5r5N +-0XWs0Mr7QbhDparTwwVETyw2m+L64kW4I1NsBm9nVX9GtUw/bihaeSbSpKhil9Ie +-4u1Ki7wb/UdKDd9nZn6yW0HQO+T0O/QEY+nvwlQAUaCKKsnOeMzV6ocEGLPOr0mI +-r/OSmbaz5mEP0oUA51Aa5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1 +-/YldvIViHTLSoCtU7ZpXwdv6EM8Zt4tKG48BtieVU+i2iW1bvGjUI+iLUaJW+fCm +-gKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+ +------END CERTIFICATE----- +- +-# 7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77 +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA +- Validity +- Not Before: Nov 10 00:00:00 2006 GMT +- Not After : Nov 10 00:00:00 2031 GMT +- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:c6:cc:e5:73:e6:fb:d4:bb:e5:2d:2d:32:a6:df: +- e5:81:3f:c9:cd:25:49:b6:71:2a:c3:d5:94:34:67: +- a2:0a:1c:b0:5f:69:a6:40:b1:c4:b7:b2:8f:d0:98: +- a4:a9:41:59:3a:d3:dc:94:d6:3c:db:74:38:a4:4a: +- cc:4d:25:82:f7:4a:a5:53:12:38:ee:f3:49:6d:71: +- 91:7e:63:b6:ab:a6:5f:c3:a4:84:f8:4f:62:51:be: +- f8:c5:ec:db:38:92:e3:06:e5:08:91:0c:c4:28:41: +- 55:fb:cb:5a:89:15:7e:71:e8:35:bf:4d:72:09:3d: +- be:3a:38:50:5b:77:31:1b:8d:b3:c7:24:45:9a:a7: +- ac:6d:00:14:5a:04:b7:ba:13:eb:51:0a:98:41:41: +- 22:4e:65:61:87:81:41:50:a6:79:5c:89:de:19:4a: +- 57:d5:2e:e6:5d:1c:53:2c:7e:98:cd:1a:06:16:a4: +- 68:73:d0:34:04:13:5c:a1:71:d3:5a:7c:55:db:5e: +- 64:e1:37:87:30:56:04:e5:11:b4:29:80:12:f1:79: +- 39:88:a2:02:11:7c:27:66:b7:88:b7:78:f2:ca:0a: +- a8:38:ab:0a:64:c2:bf:66:5d:95:84:c1:a1:25:1e: +- 87:5d:1a:50:0b:20:12:cc:41:bb:6e:0b:51:38:b8: +- 4b:cb +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3 +- X509v3 Authority Key Identifier: +- keyid:B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3 +- +- Signature Algorithm: sha1WithRSAEncryption +- 1c:1a:06:97:dc:d7:9c:9f:3c:88:66:06:08:57:21:db:21:47: +- f8:2a:67:aa:bf:18:32:76:40:10:57:c1:8a:f3:7a:d9:11:65: +- 8e:35:fa:9e:fc:45:b5:9e:d9:4c:31:4b:b8:91:e8:43:2c:8e: +- b3:78:ce:db:e3:53:79:71:d6:e5:21:94:01:da:55:87:9a:24: +- 64:f6:8a:66:cc:de:9c:37:cd:a8:34:b1:69:9b:23:c8:9e:78: +- 22:2b:70:43:e3:55:47:31:61:19:ef:58:c5:85:2f:4e:30:f6: +- a0:31:16:23:c8:e7:e2:65:16:33:cb:bf:1a:1b:a0:3d:f8:ca: +- 5e:8b:31:8b:60:08:89:2d:0c:06:5c:52:b7:c4:f9:0a:98:d1: +- 15:5f:9f:12:be:7c:36:63:38:bd:44:a4:7f:e4:26:2b:0a:c4: +- 97:69:0d:e9:8c:e2:c0:10:57:b8:c8:76:12:91:55:f2:48:69: +- d8:bc:2a:02:5b:0f:44:d4:20:31:db:f4:ba:70:26:5d:90:60: +- 9e:bc:4b:17:09:2f:b4:cb:1e:43:68:c9:07:27:c1:d2:5c:f7: +- ea:21:b9:68:12:9c:3c:9c:bf:9e:fc:80:5c:9b:63:cd:ec:47: +- aa:25:27:67:a0:37:f3:00:82:7d:54:d7:a9:f8:e9:2e:13:a3: +- 77:e8:1f:4a +------BEGIN CERTIFICATE----- +-MIIDxTCCAq2gAwIBAgIQAqxcJmoLQJuPC3nyrkYldzANBgkqhkiG9w0BAQUFADBs +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j +-ZSBFViBSb290IENBMB4XDTA2MTExMDAwMDAwMFoXDTMxMTExMDAwMDAwMFowbDEL +-MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3 +-LmRpZ2ljZXJ0LmNvbTErMCkGA1UEAxMiRGlnaUNlcnQgSGlnaCBBc3N1cmFuY2Ug +-RVYgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbM5XPm +-+9S75S0tMqbf5YE/yc0lSbZxKsPVlDRnogocsF9ppkCxxLeyj9CYpKlBWTrT3JTW +-PNt0OKRKzE0lgvdKpVMSOO7zSW1xkX5jtqumX8OkhPhPYlG++MXs2ziS4wblCJEM +-xChBVfvLWokVfnHoNb9Ncgk9vjo4UFt3MRuNs8ckRZqnrG0AFFoEt7oT61EKmEFB +-Ik5lYYeBQVCmeVyJ3hlKV9Uu5l0cUyx+mM0aBhakaHPQNAQTXKFx01p8VdteZOE3 +-hzBWBOURtCmAEvF5OYiiAhF8J2a3iLd48soKqDirCmTCv2ZdlYTBoSUeh10aUAsg +-EsxBu24LUTi4S8sCAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQF +-MAMBAf8wHQYDVR0OBBYEFLE+w2kD+L9HAdSYJhoIAu9jZCvDMB8GA1UdIwQYMBaA +-FLE+w2kD+L9HAdSYJhoIAu9jZCvDMA0GCSqGSIb3DQEBBQUAA4IBAQAcGgaX3Nec +-nzyIZgYIVyHbIUf4KmeqvxgydkAQV8GK83rZEWWONfqe/EW1ntlMMUu4kehDLI6z +-eM7b41N5cdblIZQB2lWHmiRk9opmzN6cN82oNLFpmyPInngiK3BD41VHMWEZ71jF +-hS9OMPagMRYjyOfiZRYzy78aG6A9+MpeizGLYAiJLQwGXFK3xPkKmNEVX58Svnw2 +-Yzi9RKR/5CYrCsSXaQ3pjOLAEFe4yHYSkVXySGnYvCoCWw9E1CAx2/S6cCZdkGCe +-vEsXCS+0yx5DaMkHJ8HSXPfqIbloEpw8nL+e/IBcm2PN7EeqJSdnoDfzAIJ9VNep +-+OkuE6N36B9K +------END CERTIFICATE----- +- +-# 7d05ebb682339f8c9451ee094eebfefa7953a114edb2f44949452fab7d2fc185 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 0b:93:1c:3a:d6:39:67:ea:67:23:bf:c3:af:9a:f4:4b +- Signature Algorithm: sha256WithRSAEncryption +- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2 +- Validity +- Not Before: Aug 1 12:00:00 2013 GMT +- Not After : Jan 15 12:00:00 2038 GMT +- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2 +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:d9:e7:28:2f:52:3f:36:72:49:88:93:34:f3:f8: +- 6a:1e:31:54:80:9f:ad:54:41:b5:47:df:96:a8:d4: +- af:80:2d:b9:0a:cf:75:fd:89:a5:7d:24:fa:e3:22: +- 0c:2b:bc:95:17:0b:33:bf:19:4d:41:06:90:00:bd: +- 0c:4d:10:fe:07:b5:e7:1c:6e:22:55:31:65:97:bd: +- d3:17:d2:1e:62:f3:db:ea:6c:50:8c:3f:84:0c:96: +- cf:b7:cb:03:e0:ca:6d:a1:14:4c:1b:89:dd:ed:00: +- b0:52:7c:af:91:6c:b1:38:13:d1:e9:12:08:c0:00: +- b0:1c:2b:11:da:77:70:36:9b:ae:ce:79:87:dc:82: +- 70:e6:09:74:70:55:69:af:a3:68:9f:bf:dd:b6:79: +- b3:f2:9d:70:29:55:f4:ab:ff:95:61:f3:c9:40:6f: +- 1d:d1:be:93:bb:d3:88:2a:bb:9d:bf:72:5a:56:71: +- 3b:3f:d4:f3:d1:0a:fe:28:ef:a3:ee:d9:99:af:03: +- d3:8f:60:b7:f2:92:a1:b1:bd:89:89:1f:30:cd:c3: +- a6:2e:62:33:ae:16:02:77:44:5a:e7:81:0a:3c:a7: +- 44:2e:79:b8:3f:04:bc:5c:a0:87:e1:1b:af:51:8e: +- cd:ec:2c:fa:f8:fe:6d:f0:3a:7c:aa:8b:e4:67:95: +- 31:8d +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- CE:C3:4A:B9:99:55:F2:B8:DB:60:BF:A9:7E:BD:56:B5:97:36:A7:D6 +- Signature Algorithm: sha256WithRSAEncryption +- ca:a5:55:8c:e3:c8:41:6e:69:27:a7:75:11:ef:3c:86:36:6f: +- d2:9d:c6:78:38:1d:69:96:a2:92:69:2e:38:6c:9b:7d:04:d4: +- 89:a5:b1:31:37:8a:c9:21:cc:ab:6c:cd:8b:1c:9a:d6:bf:48: +- d2:32:66:c1:8a:c0:f3:2f:3a:ef:c0:e3:d4:91:86:d1:50:e3: +- 03:db:73:77:6f:4a:39:53:ed:de:26:c7:b5:7d:af:2b:42:d1: +- 75:62:e3:4a:2b:02:c7:50:4b:e0:69:e2:96:6c:0e:44:66:10: +- 44:8f:ad:05:eb:f8:79:ac:a6:1b:e8:37:34:9d:53:c9:61:aa: +- a2:52:af:4a:70:16:86:c2:3a:c8:b1:13:70:36:d8:cf:ee:f4: +- 0a:34:d5:5b:4c:fd:07:9c:a2:ba:d9:01:72:5c:f3:4d:c1:dd: +- 0e:b1:1c:0d:c4:63:be:ad:f4:14:fb:89:ec:a2:41:0e:4c:cc: +- c8:57:40:d0:6e:03:aa:cd:0c:8e:89:99:99:6c:f0:3c:30:af: +- 38:df:6f:bc:a3:be:29:20:27:ab:74:ff:13:22:78:de:97:52: +- 55:1e:83:b5:54:20:03:ee:ae:c0:4f:56:de:37:cc:c3:7f:aa: +- 04:27:bb:d3:77:b8:62:db:17:7c:9c:28:22:13:73:6c:cf:26: +- f5:8a:29:e7 +------BEGIN CERTIFICATE----- +-MIIDljCCAn6gAwIBAgIQC5McOtY5Z+pnI7/Dr5r0SzANBgkqhkiG9w0BAQsFADBl +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv +-b3QgRzIwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQG +-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl +-cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIwggEi +-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5ygvUj82ckmIkzTz+GoeMVSA +-n61UQbVH35ao1K+ALbkKz3X9iaV9JPrjIgwrvJUXCzO/GU1BBpAAvQxNEP4Htecc +-biJVMWWXvdMX0h5i89vqbFCMP4QMls+3ywPgym2hFEwbid3tALBSfK+RbLE4E9Hp +-EgjAALAcKxHad3A2m67OeYfcgnDmCXRwVWmvo2ifv922ebPynXApVfSr/5Vh88lA +-bx3RvpO704gqu52/clpWcTs/1PPRCv4o76Pu2ZmvA9OPYLfykqGxvYmJHzDNw6Yu +-YjOuFgJ3RFrngQo8p0Quebg/BLxcoIfhG69Rjs3sLPr4/m3wOnyqi+RnlTGNAgMB +-AAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQW +-BBTOw0q5mVXyuNtgv6l+vVa1lzan1jANBgkqhkiG9w0BAQsFAAOCAQEAyqVVjOPI +-QW5pJ6d1Ee88hjZv0p3GeDgdaZaikmkuOGybfQTUiaWxMTeKySHMq2zNixya1r9I +-0jJmwYrA8y8678Dj1JGG0VDjA9tzd29KOVPt3ibHtX2vK0LRdWLjSisCx1BL4Gni +-lmwORGYQRI+tBev4eaymG+g3NJ1TyWGqolKvSnAWhsI6yLETcDbYz+70CjTVW0z9 +-B5yiutkBclzzTcHdDrEcDcRjvq30FPuJ7KJBDkzMyFdA0G4Dqs0MjomZmWzwPDCv +-ON9vvKO+KSAnq3T/EyJ43pdSVR6DtVQgA+6uwE9W3jfMw3+qBCe703e4YtsXfJwo +-IhNzbM8m9Yop5w== +------END CERTIFICATE----- +- +-# 7e37cb8b4c47090cab36551ba6f45db840680fba166a952db100717f43053fc2 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 0b:a1:5a:fa:1d:df:a0:b5:49:44:af:cd:24:a0:6c:ec +- Signature Algorithm: ecdsa-with-SHA384 +- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3 +- Validity +- Not Before: Aug 1 12:00:00 2013 GMT +- Not After : Jan 15 12:00:00 2038 GMT +- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3 +- Subject Public Key Info: +- Public Key Algorithm: id-ecPublicKey +- Public-Key: (384 bit) +- pub: +- 04:19:e7:bc:ac:44:65:ed:cd:b8:3f:58:fb:8d:b1: +- 57:a9:44:2d:05:15:f2:ef:0b:ff:10:74:9f:b5:62: +- 52:5f:66:7e:1f:e5:dc:1b:45:79:0b:cc:c6:53:0a: +- 9d:8d:5d:02:d9:a9:59:de:02:5a:f6:95:2a:0e:8d: +- 38:4a:8a:49:c6:bc:c6:03:38:07:5f:55:da:7e:09: +- 6e:e2:7f:5e:d0:45:20:0f:59:76:10:d6:a0:24:f0: +- 2d:de:36:f2:6c:29:39 +- ASN1 OID: secp384r1 +- NIST CURVE: P-384 +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- CB:D0:BD:A9:E1:98:05:51:A1:4D:37:A2:83:79:CE:8D:1D:2A:E4:84 +- Signature Algorithm: ecdsa-with-SHA384 +- 30:64:02:30:25:a4:81:45:02:6b:12:4b:75:74:4f:c8:23:e3: +- 70:f2:75:72:de:7c:89:f0:cf:91:72:61:9e:5e:10:92:59:56: +- b9:83:c7:10:e7:38:e9:58:26:36:7d:d5:e4:34:86:39:02:30: +- 7c:36:53:f0:30:e5:62:63:3a:99:e2:b6:a3:3b:9b:34:fa:1e: +- da:10:92:71:5e:91:13:a7:dd:a4:6e:92:cc:32:d6:f5:21:66: +- c7:2f:ea:96:63:6a:65:45:92:95:01:b4 +------BEGIN CERTIFICATE----- +-MIICRjCCAc2gAwIBAgIQC6Fa+h3foLVJRK/NJKBs7DAKBggqhkjOPQQDAzBlMQsw +-CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu +-ZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3Qg +-RzMwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQGEwJV +-UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu +-Y29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwdjAQBgcq +-hkjOPQIBBgUrgQQAIgNiAAQZ57ysRGXtzbg/WPuNsVepRC0FFfLvC/8QdJ+1YlJf +-Zn4f5dwbRXkLzMZTCp2NXQLZqVneAlr2lSoOjThKiknGvMYDOAdfVdp+CW7if17Q +-RSAPWXYQ1qAk8C3eNvJsKTmjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/ +-BAQDAgGGMB0GA1UdDgQWBBTL0L2p4ZgFUaFNN6KDec6NHSrkhDAKBggqhkjOPQQD +-AwNnADBkAjAlpIFFAmsSS3V0T8gj43DydXLefInwz5FyYZ5eEJJZVrmDxxDnOOlY +-JjZ91eQ0hjkCMHw2U/Aw5WJjOpnitqM7mzT6HtoQknFekROn3aRukswy1vUhZscv +-6pZjamVFkpUBtA== +------END CERTIFICATE----- +- + # cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f + Certificate: + Data: +@@ -2833,61 +1947,6 @@ RQuQ+q7hv53yrlc8pa6yVvSLZUDp/TGBLPQ5Cdjua6e0ph0VpZj3AYHYhX3zUVxx + iN66zB+Afko= + -----END CERTIFICATE----- + +-# 86a1ecba089c4a8d3bbe2734c612ba341d813e043cf9e8a862cd5c57a36bbe6b +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 3c:f6:07:a9:68:70:0e:da:8b:84 +- Signature Algorithm: ecdsa-with-SHA384 +- Issuer: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign ECC Root CA - G3 +- Validity +- Not Before: Feb 18 18:30:00 2018 GMT +- Not After : Feb 18 18:30:00 2043 GMT +- Subject: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign ECC Root CA - G3 +- Subject Public Key Info: +- Public Key Algorithm: id-ecPublicKey +- Public-Key: (384 bit) +- pub: +- 04:23:a5:0c:b8:2d:12:f5:28:f3:b1:b2:dd:e2:02: +- 12:80:9e:39:5f:49:4d:9f:c9:25:34:59:74:ec:bb: +- 06:1c:e7:c0:72:af:e8:ae:2f:e1:41:54:87:14:a8: +- 4a:b2:e8:7c:82:e6:5b:6a:b5:dc:b3:75:ce:8b:06: +- d0:86:23:bf:46:d5:8e:0f:3f:04:f4:d7:1c:92:7e: +- f6:a5:63:c2:f5:5f:8e:2e:4f:a1:18:19:02:2b:32: +- 0a:82:64:7d:16:93:d1 +- ASN1 OID: secp384r1 +- NIST CURVE: P-384 +- X509v3 extensions: +- X509v3 Subject Key Identifier: +- 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- Signature Algorithm: ecdsa-with-SHA384 +- 30:66:02:31:00:be:f3:61:cf:02:10:1d:64:95:07:b8:18:6e: +- 88:85:05:2f:83:08:17:90:ca:1f:8a:4c:e8:0d:1b:7a:b1:ad: +- d5:81:09:47:ef:3b:ac:08:04:7c:5c:99:b1:ed:47:07:d2:02: +- 31:00:9d:ba:55:fc:a9:4a:e8:ed:ed:e6:76:01:42:7b:c8:f8: +- 60:d9:8d:51:8b:55:3b:fb:8c:7b:eb:65:09:c3:f8:96:cd:47: +- a8:82:f2:16:55:77:24:7e:12:10:95:04:2c:a3 +------BEGIN CERTIFICATE----- +-MIICTjCCAdOgAwIBAgIKPPYHqWhwDtqLhDAKBggqhkjOPQQDAzBrMQswCQYDVQQG +-EwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNo +-bm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g +-RzMwHhcNMTgwMjE4MTgzMDAwWhcNNDMwMjE4MTgzMDAwWjBrMQswCQYDVQQGEwJJ +-TjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9s +-b2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0gRzMw +-djAQBgcqhkjOPQIBBgUrgQQAIgNiAAQjpQy4LRL1KPOxst3iAhKAnjlfSU2fySU0 +-WXTsuwYc58Byr+iuL+FBVIcUqEqy6HyC5ltqtdyzdc6LBtCGI79G1Y4PPwT01xyS +-fvalY8L1X44uT6EYGQIrMgqCZH0Wk9GjQjBAMB0GA1UdDgQWBBR8XQKEE9TMipuB +-zhccLikenEhjQjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggq +-hkjOPQQDAwNpADBmAjEAvvNhzwIQHWSVB7gYboiFBS+DCBeQyh+KTOgNG3qxrdWB +-CUfvO6wIBHxcmbHtRwfSAjEAnbpV/KlK6O3t5nYBQnvI+GDZjVGLVTv7jHvrZQnD +-+JbNR6iC8hZVdyR+EhCVBCyj +------END CERTIFICATE----- +- + # bfff8fd04433487d6a8aa60c1a29767a9fc2bbb05e420f713a13b992891d3893 + Certificate: + Data: +@@ -3430,59 +2489,6 @@ LPAvTK33sefOT6jEm0pUBsV/fdUID+Ic/n4XuKxe9tQWskMJDE32p2u0mYRlynqI + 4uJEvlz36hz1 + -----END CERTIFICATE----- + +-# 34d8a73ee208d9bcdb0d956520934b4e40e69482596e8b6f73c8426b010a6f48 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 02:03:e5:b8:82:eb:20:f8:25:27:6d:3d:66 +- Signature Algorithm: ecdsa-with-SHA384 +- Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R3 +- Validity +- Not Before: Jun 22 00:00:00 2016 GMT +- Not After : Jun 22 00:00:00 2036 GMT +- Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R3 +- Subject Public Key Info: +- Public Key Algorithm: id-ecPublicKey +- Public-Key: (384 bit) +- pub: +- 04:1f:4f:33:87:33:29:8a:a1:84:de:cb:c7:21:58: +- 41:89:ea:56:9d:2b:4b:85:c6:1d:4c:27:bc:7f:26: +- 51:72:6f:e2:9f:d6:a3:ca:cc:45:14:46:8b:ad:ef: +- 7e:86:8c:ec:b1:7e:2f:ff:a9:71:9d:18:84:45:04: +- 41:55:6e:2b:ea:26:7f:bb:90:01:e3:4b:19:ba:e4: +- 54:96:45:09:b1:d5:6c:91:44:ad:84:13:8e:9a:8c: +- 0d:80:0c:32:f6:e0:27 +- ASN1 OID: secp384r1 +- NIST CURVE: P-384 +- X509v3 extensions: +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- C1:F1:26:BA:A0:2D:AE:85:81:CF:D3:F1:2A:12:BD:B8:0A:67:FD:BC +- Signature Algorithm: ecdsa-with-SHA384 +- 30:66:02:31:00:f6:e1:20:95:14:7b:54:a3:90:16:11:bf:84: +- c8:ea:6f:6b:17:9e:1e:46:98:20:9b:9f:d3:0d:d9:ac:d3:2f: +- cd:7c:f8:5b:2e:55:bb:bf:dd:92:f7:a4:0c:dc:31:e1:a2:02: +- 31:00:fc:97:66:66:e5:43:16:13:83:dd:c7:df:2f:be:14:38: +- ed:01:ce:b1:17:1a:11:75:e9:bd:03:8f:26:7e:84:e5:c9:60: +- a6:95:d7:54:59:b7:e7:11:2c:89:d4:b9:ee:17 +------BEGIN CERTIFICATE----- +-MIICCTCCAY6gAwIBAgINAgPluILrIPglJ209ZjAKBggqhkjOPQQDAzBHMQswCQYD +-VQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIG +-A1UEAxMLR1RTIFJvb3QgUjMwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAw +-WjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2Vz +-IExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwdjAQBgcqhkjOPQIBBgUrgQQAIgNi +-AAQfTzOHMymKoYTey8chWEGJ6ladK0uFxh1MJ7x/JlFyb+Kf1qPKzEUURout736G +-jOyxfi//qXGdGIRFBEFVbivqJn+7kAHjSxm65FSWRQmx1WyRRK2EE46ajA2ADDL2 +-4CejQjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW +-BBTB8Sa6oC2uhYHP0/EqEr24Cmf9vDAKBggqhkjOPQQDAwNpADBmAjEA9uEglRR7 +-VKOQFhG/hMjqb2sXnh5GmCCbn9MN2azTL818+FsuVbu/3ZL3pAzcMeGiAjEA/Jdm +-ZuVDFhOD3cffL74UOO0BzrEXGhF16b0DjyZ+hOXJYKaV11RZt+cRLInUue4X +------END CERTIFICATE----- +- + # d947432abde7b7fa90fc2e6b59101b1280e0e1c7e4e40fa3c6887fff57a7f4cf + Certificate: + Data: +@@ -3706,127 +2712,6 @@ HQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUVLB7rUW44kB/ + bmF0774BxL4YSFlhgjICICadVGNA3jdgUM/I2O2dgq43mLyjj0xMqTQrbO/7lZsm + -----END CERTIFICATE----- + +-# 8d25cd97229dbf70356bda4eb3cc734031e24cf00fafcfd32dc76eb5841c7ea8 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 02:03:e5:ae:c5:8d:04:25:1a:ab:11:25:aa +- Signature Algorithm: sha384WithRSAEncryption +- Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R2 +- Validity +- Not Before: Jun 22 00:00:00 2016 GMT +- Not After : Jun 22 00:00:00 2036 GMT +- Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R2 +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (4096 bit) +- Modulus: +- 00:ce:de:fd:a6:fb:ec:ec:14:34:3c:07:06:5a:6c: +- 59:f7:19:35:dd:f7:c1:9d:55:aa:d3:cd:3b:a4:93: +- 72:ef:0a:fa:6d:9d:f6:f0:85:80:5b:a1:48:52:9f: +- 39:c5:b7:ee:28:ac:ef:cb:76:68:14:b9:df:ad:01: +- 6c:99:1f:c4:22:1d:9f:fe:72:77:e0:2c:5b:af:e4: +- 04:bf:4f:72:a0:1a:34:98:e8:39:68:ec:95:25:7b: +- 76:a1:e6:69:b9:85:19:bd:89:8c:fe:ad:ed:36:ea: +- 73:bc:ff:83:e2:cb:7d:c1:d2:ce:4a:b3:8d:05:9e: +- 8b:49:93:df:c1:5b:d0:6e:5e:f0:2e:30:2e:82:fc: +- fa:bc:b4:17:0a:48:e5:88:9b:c5:9b:6b:de:b0:ca: +- b4:03:f0:da:f4:90:b8:65:64:f7:5c:4c:ad:e8:7e: +- 66:5e:99:d7:b8:c2:3e:c8:d0:13:9d:ad:ee:e4:45: +- 7b:89:55:f7:8a:1f:62:52:84:12:b3:c2:40:97:e3: +- 8a:1f:47:91:a6:74:5a:d2:f8:b1:63:28:10:b8:b3: +- 09:b8:56:77:40:a2:26:98:79:c6:fe:df:25:ee:3e: +- e5:a0:7f:d4:61:0f:51:4b:3c:3f:8c:da:e1:70:74: +- d8:c2:68:a1:f9:c1:0c:e9:a1:e2:7f:bb:55:3c:76: +- 06:ee:6a:4e:cc:92:88:30:4d:9a:bd:4f:0b:48:9a: +- 84:b5:98:a3:d5:fb:73:c1:57:61:dd:28:56:75:13: +- ae:87:8e:e7:0c:51:09:10:75:88:4c:bc:8d:f9:7b: +- 3c:d4:22:48:1f:2a:dc:eb:6b:bb:44:b1:cb:33:71: +- 32:46:af:ad:4a:f1:8c:e8:74:3a:ac:e7:1a:22:73: +- 80:d2:30:f7:25:42:c7:22:3b:3b:12:ad:96:2e:c6: +- c3:76:07:aa:20:b7:35:49:57:e9:92:49:e8:76:16: +- 72:31:67:2b:96:7e:8a:a3:c7:94:56:22:bf:6a:4b: +- 7e:01:21:b2:23:32:df:e4:9a:44:6d:59:5b:5d:f5: +- 00:a0:1c:9b:c6:78:97:8d:90:ff:9b:c8:aa:b4:af: +- 11:51:39:5e:d9:fb:67:ad:d5:5b:11:9d:32:9a:1b: +- bd:d5:ba:5b:a5:c9:cb:25:69:53:55:27:5c:e0:ca: +- 36:cb:88:61:fb:1e:b7:d0:cb:ee:16:fb:d3:a6:4c: +- de:92:a5:d4:e2:df:f5:06:54:de:2e:9d:4b:b4:93: +- 30:aa:81:ce:dd:1a:dc:51:73:0d:4f:70:e9:e5:b6: +- 16:21:19:79:b2:e6:89:0b:75:64:ca:d5:ab:bc:09: +- c1:18:a1:ff:d4:54:a1:85:3c:fd:14:24:03:b2:87: +- d3:a4:b7 +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- BB:FF:CA:8E:23:9F:4F:99:CA:DB:E2:68:A6:A5:15:27:17:1E:D9:0E +- Signature Algorithm: sha384WithRSAEncryption +- 1f:ca:ce:dd:c7:be:a1:9f:d9:27:4c:0b:dc:17:98:11:6a:88: +- de:3d:e6:71:56:72:b2:9e:1a:4e:9c:d5:2b:98:24:5d:9b:6b: +- 7b:b0:33:82:09:bd:df:25:46:ea:98:9e:b6:1b:fe:83:3c:d2: +- 62:61:c1:04:ed:ce:e0:c5:c9:c8:13:13:55:e7:a8:63:ad:8c: +- 7b:01:fe:77:30:e1:ce:68:9b:05:f8:12:ee:79:31:a0:41:45: +- 35:28:0a:71:a4:24:4f:8c:dc:3c:82:07:5f:66:dc:7d:10:fe: +- 0c:61:b3:05:95:ee:e1:ae:81:0f:a8:f8:c7:8f:4d:a8:23:02: +- 26:6b:1d:83:52:55:ce:b5:2f:00:ca:80:40:e0:e1:74:ac:60: +- f5:87:80:9d:ae:36:64:91:5d:b0:68:18:ea:8a:61:c9:77:a8: +- 97:c4:c9:c7:a5:fc:55:4b:f3:f0:7f:b9:65:3d:27:68:d0:cc: +- 6b:fa:53:9d:e1:91:1a:c9:5d:1a:96:6d:32:87:ed:03:20:c8: +- 02:ce:5a:be:d9:ea:fd:b2:4d:c4:2f:1b:df:5f:7a:f5:f8:8b: +- c6:ee:31:3a:25:51:55:67:8d:64:32:7b:e9:9e:c3:82:ba:2a: +- 2d:e9:1e:b4:e0:48:06:a2:fc:67:af:1f:22:02:73:fb:20:0a: +- af:9d:54:4b:a1:cd:ff:60:47:b0:3f:5d:ef:1b:56:bd:97:21: +- 96:2d:0a:d1:5e:9d:38:02:47:6c:b9:f4:f6:23:25:b8:a0:6a: +- 9a:2b:77:08:fa:c4:b1:28:90:26:58:08:3c:e2:7e:aa:d7:3d: +- 6f:ba:31:88:0a:05:eb:27:b5:a1:49:ee:a0:45:54:7b:e6:27: +- 65:99:20:21:a8:a3:bc:fb:18:96:bb:52:6f:0c:ed:83:51:4c: +- e9:59:e2:20:60:c5:c2:65:92:82:8c:f3:10:1f:0e:8a:97:be: +- 77:82:6d:3f:8f:1d:5d:bc:49:27:bd:cc:4f:0f:e1:ce:76:86: +- 04:23:c5:c0:8c:12:5b:fd:db:84:a0:24:f1:48:ff:64:7c:d0: +- be:5c:16:d1:ef:99:ad:c0:1f:fb:cb:ae:bc:38:22:06:26:64: +- da:da:97:0e:3f:28:15:44:a8:4f:00:ca:f0:9a:cc:cf:74:6a: +- b4:3e:3c:eb:95:ec:b5:d3:5a:d8:81:99:e9:43:18:37:eb:b3: +- bb:d1:58:62:41:f3:66:d2:8f:aa:78:95:54:20:c3:5a:2e:74: +- 2b:d5:d1:be:18:69:c0:ac:d5:a4:cf:39:ba:51:84:03:65:e9: +- 62:c0:62:fe:d8:4d:55:96:e2:d0:11:fa:48:34:11:ec:9e:ed: +- 05:1d:e4:c8:d6:1d:86:cb +------BEGIN CERTIFICATE----- +-MIIFVzCCAz+gAwIBAgINAgPlrsWNBCUaqxElqjANBgkqhkiG9w0BAQwFADBHMQsw +-CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU +-MBIGA1UEAxMLR1RTIFJvb3QgUjIwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAw +-MDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp +-Y2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjIwggIiMA0GCSqGSIb3DQEBAQUA +-A4ICDwAwggIKAoICAQDO3v2m++zsFDQ8BwZabFn3GTXd98GdVarTzTukk3LvCvpt +-nfbwhYBboUhSnznFt+4orO/LdmgUud+tAWyZH8QiHZ/+cnfgLFuv5AS/T3KgGjSY +-6Dlo7JUle3ah5mm5hRm9iYz+re026nO8/4Piy33B0s5Ks40FnotJk9/BW9BuXvAu +-MC6C/Pq8tBcKSOWIm8Wba96wyrQD8Nr0kLhlZPdcTK3ofmZemde4wj7I0BOdre7k +-RXuJVfeKH2JShBKzwkCX44ofR5GmdFrS+LFjKBC4swm4VndAoiaYecb+3yXuPuWg +-f9RhD1FLPD+M2uFwdNjCaKH5wQzpoeJ/u1U8dgbuak7MkogwTZq9TwtImoS1mKPV +-+3PBV2HdKFZ1E66HjucMUQkQdYhMvI35ezzUIkgfKtzra7tEscszcTJGr61K8Yzo +-dDqs5xoic4DSMPclQsciOzsSrZYuxsN2B6ogtzVJV+mSSeh2FnIxZyuWfoqjx5RW +-Ir9qS34BIbIjMt/kmkRtWVtd9QCgHJvGeJeNkP+byKq0rxFROV7Z+2et1VsRnTKa +-G73VululycslaVNVJ1zgyjbLiGH7HrfQy+4W+9OmTN6SpdTi3/UGVN4unUu0kzCq +-gc7dGtxRcw1PcOnlthYhGXmy5okLdWTK1au8CcEYof/UVKGFPP0UJAOyh9OktwID +-AQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4E +-FgQUu//KjiOfT5nK2+JopqUVJxce2Q4wDQYJKoZIhvcNAQEMBQADggIBAB/Kzt3H +-vqGf2SdMC9wXmBFqiN495nFWcrKeGk6c1SuYJF2ba3uwM4IJvd8lRuqYnrYb/oM8 +-0mJhwQTtzuDFycgTE1XnqGOtjHsB/ncw4c5omwX4Eu55MaBBRTUoCnGkJE+M3DyC +-B19m3H0Q/gxhswWV7uGugQ+o+MePTagjAiZrHYNSVc61LwDKgEDg4XSsYPWHgJ2u +-NmSRXbBoGOqKYcl3qJfEycel/FVL8/B/uWU9J2jQzGv6U53hkRrJXRqWbTKH7QMg +-yALOWr7Z6v2yTcQvG99fevX4i8buMTolUVVnjWQye+mew4K6Ki3pHrTgSAai/Gev +-HyICc/sgCq+dVEuhzf9gR7A/Xe8bVr2XIZYtCtFenTgCR2y59PYjJbigapordwj6 +-xLEokCZYCDzifqrXPW+6MYgKBesntaFJ7qBFVHvmJ2WZICGoo7z7GJa7Um8M7YNR +-TOlZ4iBgxcJlkoKM8xAfDoqXvneCbT+PHV28SSe9zE8P4c52hgQjxcCMElv924Sg +-JPFI/2R80L5cFtHvma3AH/vLrrw4IgYmZNralw4/KBVEqE8AyvCazM90arQ+POuV +-7LXTWtiBmelDGDfrs7vRWGJB82bSj6p4lVQgw1oudCvV0b4YacCs1aTPObpRhANl +-6WLAYv7YTVWW4tAR+kg0Eeye7QUd5MjWHYbL +------END CERTIFICATE----- +- + # 5a2fc03f0c83b090bbfa40604b0988446c7636183df9846e17101a447fb8efd6 + Certificate: + Data: +@@ -5089,88 +3974,6 @@ AHFiRSdLOkKEW39lt2c0Ui2cFmuqqNh7o0JMcccMyj6D5KbvtwEwXlGjefVwaaZB + RA+GsCyRxj3qrg+E + -----END CERTIFICATE----- + +-# 6c61dac3a2def031506be036d2a6fe401994fbd13df9c8d466599274c446ec98 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: 80544274841616 (0x49412ce40010) +- Signature Algorithm: sha256WithRSAEncryption +- Issuer: C = HU, L = Budapest, O = NetLock Kft., OU = Tan\C3\BAs\C3\ADtv\C3\A1nykiad\C3\B3k (Certification Services), CN = NetLock Arany (Class Gold) F\C5\91tan\C3\BAs\C3\ADtv\C3\A1ny +- Validity +- Not Before: Dec 11 15:08:21 2008 GMT +- Not After : Dec 6 15:08:21 2028 GMT +- Subject: C = HU, L = Budapest, O = NetLock Kft., OU = Tan\C3\BAs\C3\ADtv\C3\A1nykiad\C3\B3k (Certification Services), CN = NetLock Arany (Class Gold) F\C5\91tan\C3\BAs\C3\ADtv\C3\A1ny +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:c4:24:5e:73:be:4b:6d:14:c3:a1:f4:e3:97:90: +- 6e:d2:30:45:1e:3c:ee:67:d9:64:e0:1a:8a:7f:ca: +- 30:ca:83:e3:20:c1:e3:f4:3a:d3:94:5f:1a:7c:5b: +- 6d:bf:30:4f:84:27:f6:9f:1f:49:bc:c6:99:0a:90: +- f2:0f:f5:7f:43:84:37:63:51:8b:7a:a5:70:fc:7a: +- 58:cd:8e:9b:ed:c3:46:6c:84:70:5d:da:f3:01:90: +- 23:fc:4e:30:a9:7e:e1:27:63:e7:ed:64:3c:a0:b8: +- c9:33:63:fe:16:90:ff:b0:b8:fd:d7:a8:c0:c0:94: +- 43:0b:b6:d5:59:a6:9e:56:d0:24:1f:70:79:af:db: +- 39:54:0d:65:75:d9:15:41:94:01:af:5e:ec:f6:8d: +- f1:ff:ad:64:fe:20:9a:d7:5c:eb:fe:a6:1f:08:64: +- a3:8b:76:55:ad:1e:3b:28:60:2e:87:25:e8:aa:af: +- 1f:c6:64:46:20:b7:70:7f:3c:de:48:db:96:53:b7: +- 39:77:e4:1a:e2:c7:16:84:76:97:5b:2f:bb:19:15: +- 85:f8:69:85:f5:99:a7:a9:f2:34:a7:a9:b6:a6:03: +- fc:6f:86:3d:54:7c:76:04:9b:6b:f9:40:5d:00:34: +- c7:2e:99:75:9d:e5:88:03:aa:4d:f8:03:d2:42:76: +- c0:1b +- Exponent: 43147 (0xa88b) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE, pathlen:4 +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- CC:FA:67:93:F0:B6:B8:D0:A5:C0:1E:F3:53:FD:8C:53:DF:83:D7:96 +- Signature Algorithm: sha256WithRSAEncryption +- ab:7f:ee:1c:16:a9:9c:3c:51:00:a0:c0:11:08:05:a7:99:e6: +- 6f:01:88:54:61:6e:f1:b9:18:ad:4a:ad:fe:81:40:23:94:2f: +- fb:75:7c:2f:28:4b:62:24:81:82:0b:f5:61:f1:1c:6e:b8:61: +- 38:eb:81:fa:62:a1:3b:5a:62:d3:94:65:c4:e1:e6:6d:82:f8: +- 2f:25:70:b2:21:26:c1:72:51:1f:8c:2c:c3:84:90:c3:5a:8f: +- ba:cf:f4:a7:65:a5:eb:98:d1:fb:05:b2:46:75:15:23:6a:6f: +- 85:63:30:80:f0:d5:9e:1f:29:1c:c2:6c:b0:50:59:5d:90:5b: +- 3b:a8:0d:30:cf:bf:7d:7f:ce:f1:9d:83:bd:c9:46:6e:20:a6: +- f9:61:51:ba:21:2f:7b:be:a5:15:63:a1:d4:95:87:f1:9e:b9: +- f3:89:f3:3d:85:b8:b8:db:be:b5:b9:29:f9:da:37:05:00:49: +- 94:03:84:44:e7:bf:43:31:cf:75:8b:25:d1:f4:a6:64:f5:92: +- f6:ab:05:eb:3d:e9:a5:0b:36:62:da:cc:06:5f:36:8b:b6:5e: +- 31:b8:2a:fb:5e:f6:71:df:44:26:9e:c4:e6:0d:91:b4:2e:75: +- 95:80:51:6a:4b:30:a6:b0:62:a1:93:f1:9b:d8:ce:c4:63:75: +- 3f:59:47:b1 +------BEGIN CERTIFICATE----- +-MIIEFTCCAv2gAwIBAgIGSUEs5AAQMA0GCSqGSIb3DQEBCwUAMIGnMQswCQYDVQQG +-EwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFTATBgNVBAoMDE5ldExvY2sgS2Z0LjE3 +-MDUGA1UECwwuVGFuw7pzw610dsOhbnlraWFkw7NrIChDZXJ0aWZpY2F0aW9uIFNl +-cnZpY2VzKTE1MDMGA1UEAwwsTmV0TG9jayBBcmFueSAoQ2xhc3MgR29sZCkgRsWR +-dGFuw7pzw610dsOhbnkwHhcNMDgxMjExMTUwODIxWhcNMjgxMjA2MTUwODIxWjCB +-pzELMAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRUwEwYDVQQKDAxOZXRM +-b2NrIEtmdC4xNzA1BgNVBAsMLlRhbsO6c8OtdHbDoW55a2lhZMOzayAoQ2VydGlm +-aWNhdGlvbiBTZXJ2aWNlcykxNTAzBgNVBAMMLE5ldExvY2sgQXJhbnkgKENsYXNz +-IEdvbGQpIEbFkXRhbsO6c8OtdHbDoW55MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A +-MIIBCgKCAQEAxCRec75LbRTDofTjl5Bu0jBFHjzuZ9lk4BqKf8owyoPjIMHj9DrT +-lF8afFttvzBPhCf2nx9JvMaZCpDyD/V/Q4Q3Y1GLeqVw/HpYzY6b7cNGbIRwXdrz +-AZAj/E4wqX7hJ2Pn7WQ8oLjJM2P+FpD/sLj916jAwJRDC7bVWaaeVtAkH3B5r9s5 +-VA1lddkVQZQBr17s9o3x/61k/iCa11zr/qYfCGSji3ZVrR47KGAuhyXoqq8fxmRG +-ILdwfzzeSNuWU7c5d+Qa4scWhHaXWy+7GRWF+GmF9ZmnqfI0p6m2pgP8b4Y9VHx2 +-BJtr+UBdADTHLpl1neWIA6pN+APSQnbAGwIDAKiLo0UwQzASBgNVHRMBAf8ECDAG +-AQH/AgEEMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUzPpnk/C2uNClwB7zU/2M +-U9+D15YwDQYJKoZIhvcNAQELBQADggEBAKt/7hwWqZw8UQCgwBEIBaeZ5m8BiFRh +-bvG5GK1Krf6BQCOUL/t1fC8oS2IkgYIL9WHxHG64YTjrgfpioTtaYtOUZcTh5m2C +-+C8lcLIhJsFyUR+MLMOEkMNaj7rP9KdlpeuY0fsFskZ1FSNqb4VjMIDw1Z4fKRzC +-bLBQWV2QWzuoDTDPv31/zvGdg73JRm4gpvlhUbohL3u+pRVjodSVh/GeufOJ8z2F +-uLjbvrW5KfnaNwUASZQDhETnv0Mxz3WLJdH0pmT1kvarBes96aULNmLazAZfNou2 +-XjG4Kvte9nHfRCaexOYNkbQudZWAUWpLMKawYqGT8ZvYzsRjdT9ZR7E= +------END CERTIFICATE----- +- + # 6b9c08e86eb0f767cfad65cd98b62149e5494a67f5845e7bd1ed019f27b86bd6 + Certificate: + Data: +@@ -5311,133 +4114,6 @@ rYy0UGYwEAYJKwYBBAGCNxUBBAMCAQAwCgYIKoZIzj0EAwMDaAAwZQIwJsdpW9zV + Mgj/mkkCtojeFK9dbJlxjRo/i9fgojaGHAeCOnZT/cKi7e97sIBPWA9LUzm9 + -----END CERTIFICATE----- + +-# 85a0dd7dd720adb7ff05f83d542b209dc7ff4528f7d677b18389fea5e5c49e86 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: 1289 (0x509) +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2 +- Validity +- Not Before: Nov 24 18:27:00 2006 GMT +- Not After : Nov 24 18:23:33 2031 GMT +- Subject: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2 +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (4096 bit) +- Modulus: +- 00:9a:18:ca:4b:94:0d:00:2d:af:03:29:8a:f0:0f: +- 81:c8:ae:4c:19:85:1d:08:9f:ab:29:44:85:f3:2f: +- 81:ad:32:1e:90:46:bf:a3:86:26:1a:1e:fe:7e:1c: +- 18:3a:5c:9c:60:17:2a:3a:74:83:33:30:7d:61:54: +- 11:cb:ed:ab:e0:e6:d2:a2:7e:f5:6b:6f:18:b7:0a: +- 0b:2d:fd:e9:3e:ef:0a:c6:b3:10:e9:dc:c2:46:17: +- f8:5d:fd:a4:da:ff:9e:49:5a:9c:e6:33:e6:24:96: +- f7:3f:ba:5b:2b:1c:7a:35:c2:d6:67:fe:ab:66:50: +- 8b:6d:28:60:2b:ef:d7:60:c3:c7:93:bc:8d:36:91: +- f3:7f:f8:db:11:13:c4:9c:77:76:c1:ae:b7:02:6a: +- 81:7a:a9:45:83:e2:05:e6:b9:56:c1:94:37:8f:48: +- 71:63:22:ec:17:65:07:95:8a:4b:df:8f:c6:5a:0a: +- e5:b0:e3:5f:5e:6b:11:ab:0c:f9:85:eb:44:e9:f8: +- 04:73:f2:e9:fe:5c:98:8c:f5:73:af:6b:b4:7e:cd: +- d4:5c:02:2b:4c:39:e1:b2:95:95:2d:42:87:d7:d5: +- b3:90:43:b7:6c:13:f1:de:dd:f6:c4:f8:89:3f:d1: +- 75:f5:92:c3:91:d5:8a:88:d0:90:ec:dc:6d:de:89: +- c2:65:71:96:8b:0d:03:fd:9c:bf:5b:16:ac:92:db: +- ea:fe:79:7c:ad:eb:af:f7:16:cb:db:cd:25:2b:e5: +- 1f:fb:9a:9f:e2:51:cc:3a:53:0c:48:e6:0e:bd:c9: +- b4:76:06:52:e6:11:13:85:72:63:03:04:e0:04:36: +- 2b:20:19:02:e8:74:a7:1f:b6:c9:56:66:f0:75:25: +- dc:67:c1:0e:61:60:88:b3:3e:d1:a8:fc:a3:da:1d: +- b0:d1:b1:23:54:df:44:76:6d:ed:41:d8:c1:b2:22: +- b6:53:1c:df:35:1d:dc:a1:77:2a:31:e4:2d:f5:e5: +- e5:db:c8:e0:ff:e5:80:d7:0b:63:a0:ff:33:a1:0f: +- ba:2c:15:15:ea:97:b3:d2:a2:b5:be:f2:8c:96:1e: +- 1a:8f:1d:6c:a4:61:37:b9:86:73:33:d7:97:96:9e: +- 23:7d:82:a4:4c:81:e2:a1:d1:ba:67:5f:95:07:a3: +- 27:11:ee:16:10:7b:bc:45:4a:4c:b2:04:d2:ab:ef: +- d5:fd:0c:51:ce:50:6a:08:31:f9:91:da:0c:8f:64: +- 5c:03:c3:3a:8b:20:3f:6e:8d:67:3d:3a:d6:fe:7d: +- 5b:88:c9:5e:fb:cc:61:dc:8b:33:77:d3:44:32:35: +- 09:62:04:92:16:10:d8:9e:27:47:fb:3b:21:e3:f8: +- eb:1d:5b +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: +- Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- 1A:84:62:BC:48:4C:33:25:04:D4:EE:D0:F6:03:C4:19:46:D1:94:6B +- X509v3 Authority Key Identifier: +- keyid:1A:84:62:BC:48:4C:33:25:04:D4:EE:D0:F6:03:C4:19:46:D1:94:6B +- DirName:/C=BM/O=QuoVadis Limited/CN=QuoVadis Root CA 2 +- serial:05:09 +- +- Signature Algorithm: sha1WithRSAEncryption +- 3e:0a:16:4d:9f:06:5b:a8:ae:71:5d:2f:05:2f:67:e6:13:45: +- 83:c4:36:f6:f3:c0:26:0c:0d:b5:47:64:5d:f8:b4:72:c9:46: +- a5:03:18:27:55:89:78:7d:76:ea:96:34:80:17:20:dc:e7:83: +- f8:8d:fc:07:b8:da:5f:4d:2e:67:b2:84:fd:d9:44:fc:77:50: +- 81:e6:7c:b4:c9:0d:0b:72:53:f8:76:07:07:41:47:96:0c:fb: +- e0:82:26:93:55:8c:fe:22:1f:60:65:7c:5f:e7:26:b3:f7:32: +- 90:98:50:d4:37:71:55:f6:92:21:78:f7:95:79:fa:f8:2d:26: +- 87:66:56:30:77:a6:37:78:33:52:10:58:ae:3f:61:8e:f2:6a: +- b1:ef:18:7e:4a:59:63:ca:8d:a2:56:d5:a7:2f:bc:56:1f:cf: +- 39:c1:e2:fb:0a:a8:15:2c:7d:4d:7a:63:c6:6c:97:44:3c:d2: +- 6f:c3:4a:17:0a:f8:90:d2:57:a2:19:51:a5:2d:97:41:da:07: +- 4f:a9:50:da:90:8d:94:46:e1:3e:f0:94:fd:10:00:38:f5:3b: +- e8:40:e1:b4:6e:56:1a:20:cc:6f:58:8d:ed:2e:45:8f:d6:e9: +- 93:3f:e7:b1:2c:df:3a:d6:22:8c:dc:84:bb:22:6f:d0:f8:e4: +- c6:39:e9:04:88:3c:c3:ba:eb:55:7a:6d:80:99:24:f5:6c:01: +- fb:f8:97:b0:94:5b:eb:fd:d2:6f:f1:77:68:0d:35:64:23:ac: +- b8:55:a1:03:d1:4d:42:19:dc:f8:75:59:56:a3:f9:a8:49:79: +- f8:af:0e:b9:11:a0:7c:b7:6a:ed:34:d0:b6:26:62:38:1a:87: +- 0c:f8:e8:fd:2e:d3:90:7f:07:91:2a:1d:d6:7e:5c:85:83:99: +- b0:38:08:3f:e9:5e:f9:35:07:e4:c9:62:6e:57:7f:a7:50:95: +- f7:ba:c8:9b:e6:8e:a2:01:c5:d6:66:bf:79:61:f3:3c:1c:e1: +- b9:82:5c:5d:a0:c3:e9:d8:48:bd:19:a2:11:14:19:6e:b2:86: +- 1b:68:3e:48:37:1a:88:b7:5d:96:5e:9c:c7:ef:27:62:08:e2: +- 91:19:5c:d2:f1:21:dd:ba:17:42:82:97:71:81:53:31:a9:9f: +- f6:7d:62:bf:72:e1:a3:93:1d:cc:8a:26:5a:09:38:d0:ce:d7: +- 0d:80:16:b4:78:a5:3a:87:4c:8d:8a:a5:d5:46:97:f2:2c:10: +- b9:bc:54:22:c0:01:50:69:43:9e:f4:b2:ef:6d:f8:ec:da:f1: +- e3:b1:ef:df:91:8f:54:2a:0b:25:c1:26:19:c4:52:10:05:65: +- d5:82:10:ea:c2:31:cd:2e +------BEGIN CERTIFICATE----- +-MIIFtzCCA5+gAwIBAgICBQkwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0x +-GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJv +-b3QgQ0EgMjAeFw0wNjExMjQxODI3MDBaFw0zMTExMjQxODIzMzNaMEUxCzAJBgNV +-BAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMRswGQYDVQQDExJRdW9W +-YWRpcyBSb290IENBIDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCa +-GMpLlA0ALa8DKYrwD4HIrkwZhR0In6spRIXzL4GtMh6QRr+jhiYaHv5+HBg6XJxg +-Fyo6dIMzMH1hVBHL7avg5tKifvVrbxi3Cgst/ek+7wrGsxDp3MJGF/hd/aTa/55J +-WpzmM+Yklvc/ulsrHHo1wtZn/qtmUIttKGAr79dgw8eTvI02kfN/+NsRE8Scd3bB +-rrcCaoF6qUWD4gXmuVbBlDePSHFjIuwXZQeVikvfj8ZaCuWw419eaxGrDPmF60Tp +-+ARz8un+XJiM9XOva7R+zdRcAitMOeGylZUtQofX1bOQQ7dsE/He3fbE+Ik/0XX1 +-ksOR1YqI0JDs3G3eicJlcZaLDQP9nL9bFqyS2+r+eXyt66/3FsvbzSUr5R/7mp/i +-Ucw6UwxI5g69ybR2BlLmEROFcmMDBOAENisgGQLodKcftslWZvB1JdxnwQ5hYIiz +-PtGo/KPaHbDRsSNU30R2be1B2MGyIrZTHN81Hdyhdyox5C315eXbyOD/5YDXC2Og +-/zOhD7osFRXql7PSorW+8oyWHhqPHWykYTe5hnMz15eWniN9gqRMgeKh0bpnX5UH +-oycR7hYQe7xFSkyyBNKr79X9DFHOUGoIMfmR2gyPZFwDwzqLID9ujWc9Otb+fVuI +-yV77zGHcizN300QyNQliBJIWENieJ0f7OyHj+OsdWwIDAQABo4GwMIGtMA8GA1Ud +-EwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBQahGK8SEwzJQTU7tD2 +-A8QZRtGUazBuBgNVHSMEZzBlgBQahGK8SEwzJQTU7tD2A8QZRtGUa6FJpEcwRTEL +-MAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMT +-ElF1b1ZhZGlzIFJvb3QgQ0EgMoICBQkwDQYJKoZIhvcNAQEFBQADggIBAD4KFk2f +-BluornFdLwUvZ+YTRYPENvbzwCYMDbVHZF34tHLJRqUDGCdViXh9duqWNIAXINzn +-g/iN/Ae42l9NLmeyhP3ZRPx3UIHmfLTJDQtyU/h2BwdBR5YM++CCJpNVjP4iH2Bl +-fF/nJrP3MpCYUNQ3cVX2kiF495V5+vgtJodmVjB3pjd4M1IQWK4/YY7yarHvGH5K +-WWPKjaJW1acvvFYfzznB4vsKqBUsfU16Y8Zsl0Q80m/DShcK+JDSV6IZUaUtl0Ha +-B0+pUNqQjZRG4T7wlP0QADj1O+hA4bRuVhogzG9Yje0uRY/W6ZM/57Es3zrWIozc +-hLsib9D45MY56QSIPMO661V6bYCZJPVsAfv4l7CUW+v90m/xd2gNNWQjrLhVoQPR +-TUIZ3Ph1WVaj+ahJefivDrkRoHy3au000LYmYjgahwz46P0u05B/B5EqHdZ+XIWD +-mbA4CD/pXvk1B+TJYm5Xf6dQlfe6yJvmjqIBxdZmv3lh8zwc4bmCXF2gw+nYSL0Z +-ohEUGW6yhhtoPkg3Goi3XZZenMfvJ2II4pEZXNLxId26F0KCl3GBUzGpn/Z9Yr9y +-4aOTHcyKJloJONDO1w2AFrR4pTqHTI2KpdVGl/IsELm8VCLAAVBpQ570su9t+Oza +-8eOx79+Rj1QqCyXBJhnEUhAFZdWCEOrCMc0u +------END CERTIFICATE----- +- + # 88ef81de202eb018452e43f864725cea5fbd1fc2d9d205730709c5d8b8690f46 + Certificate: + Data: +@@ -5759,88 +4435,6 @@ t/2jioSgrGK+KwmHNPBqAbubKVY8/gA3zyNs8U6qtnRGEmyR7jTV7JqR50S+kDFy + SjnRBUkLp7Y3gaVdjKozXoEofKd9J+sAro03 + -----END CERTIFICATE----- + +-# 1a0d20445de5ba1862d19ef880858cbce50102b36e8f0a040c3c69e74522fe6e +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 20:a4:c4:7f:dd:df:e1:c7:53:63:07:13:88:77:60:12 +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO Certification Authority +- Validity +- Not Before: Jan 1 00:00:00 2011 GMT +- Not After : Dec 31 23:59:59 2030 GMT +- Subject: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO Certification Authority +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:d0:40:8b:8b:72:e3:91:1b:f7:51:c1:1b:54:04: +- 98:d3:a9:bf:c1:e6:8a:5d:3b:87:fb:bb:88:ce:0d: +- e3:2f:3f:06:96:f0:a2:29:50:99:ae:db:3b:a1:57: +- b0:74:51:71:cd:ed:42:91:4d:41:fe:a9:c8:d8:6a: +- 86:77:44:bb:59:66:97:50:5e:b4:d4:2c:70:44:cf: +- da:37:95:42:69:3c:30:c4:71:b3:52:f0:21:4d:a1: +- d8:ba:39:7c:1c:9e:a3:24:9d:f2:83:16:98:aa:16: +- 7c:43:9b:15:5b:b7:ae:34:91:fe:d4:62:26:18:46: +- 9a:3f:eb:c1:f9:f1:90:57:eb:ac:7a:0d:8b:db:72: +- 30:6a:66:d5:e0:46:a3:70:dc:68:d9:ff:04:48:89: +- 77:de:b5:e9:fb:67:6d:41:e9:bc:39:bd:32:d9:62: +- 02:f1:b1:a8:3d:6e:37:9c:e2:2f:e2:d3:a2:26:8b: +- c6:b8:55:43:88:e1:23:3e:a5:d2:24:39:6a:47:ab: +- 00:d4:a1:b3:a9:25:fe:0d:3f:a7:1d:ba:d3:51:c1: +- 0b:a4:da:ac:38:ef:55:50:24:05:65:46:93:34:4f: +- 2d:8d:ad:c6:d4:21:19:d2:8e:ca:05:61:71:07:73: +- 47:e5:8a:19:12:bd:04:4d:ce:4e:9c:a5:48:ac:bb: +- 26:f7 +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Subject Key Identifier: +- 0B:58:E5:8B:C6:4C:15:37:A4:40:A9:30:A9:21:BE:47:36:5A:56:FF +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- Signature Algorithm: sha1WithRSAEncryption +- 2f:c9:c4:1c:07:3b:cf:61:02:00:b1:d9:21:51:75:72:03:30: +- b0:c4:16:1f:6c:00:8b:10:ac:af:f1:47:d4:ae:10:3c:0c:1a: +- f8:d4:93:6c:ac:10:37:7c:b7:a6:83:64:ad:cd:df:0e:87:33: +- 9d:37:b0:c6:7b:38:72:b1:f3:1a:0e:a3:f9:55:7a:6d:03:66: +- 03:17:95:4a:f1:b1:7a:df:56:21:06:42:8f:b1:d3:a8:85:de: +- ee:97:1d:62:eb:a7:e7:31:12:66:c3:0f:a6:4b:2e:41:82:f7: +- fd:c9:1b:a8:1b:af:ee:3c:ce:e3:9c:ae:28:07:a1:2c:9b:24: +- c2:0f:23:26:83:32:8b:86:0f:1f:2b:12:46:25:16:8f:76:90: +- 03:6b:de:bc:aa:22:68:6b:8c:a1:ac:2b:11:39:a6:db:70:c2: +- 7d:72:e9:33:e7:fc:26:f1:74:5a:91:e6:9d:84:ac:f8:a8:06: +- 19:46:e6:a7:e9:aa:34:22:a4:a1:9f:7a:ad:b7:b2:a4:9a:33: +- 88:71:02:3c:2e:d6:7a:b2:1f:a2:ca:c0:dd:2f:10:94:fd:b3: +- 8c:84:20:79:46:d5:05:d4:10:e4:d2:db:64:4f:b8:5b:ee:1b: +- c5:20:47:5b:94:ab:6e:d4:95:33:1d:a6:15:71:f1:f8:94:ca: +- 54:39:3e:c1 +------BEGIN CERTIFICATE----- +-MIID0DCCArigAwIBAgIQIKTEf93f4cdTYwcTiHdgEjANBgkqhkiG9w0BAQUFADCB +-gTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G +-A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJzAlBgNV +-BAMTHkNPTU9ETyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTAxMDEwMDAw +-MDBaFw0zMDEyMzEyMzU5NTlaMIGBMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl +-YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01P +-RE8gQ0EgTGltaXRlZDEnMCUGA1UEAxMeQ09NT0RPIENlcnRpZmljYXRpb24gQXV0 +-aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECLi3LjkRv3 +-UcEbVASY06m/weaKXTuH+7uIzg3jLz8GlvCiKVCZrts7oVewdFFxze1CkU1B/qnI +-2GqGd0S7WWaXUF601CxwRM/aN5VCaTwwxHGzUvAhTaHYujl8HJ6jJJ3ygxaYqhZ8 +-Q5sVW7euNJH+1GImGEaaP+vB+fGQV+useg2L23IwambV4EajcNxo2f8ESIl33rXp +-+2dtQem8Ob0y2WIC8bGoPW43nOIv4tOiJovGuFVDiOEjPqXSJDlqR6sA1KGzqSX+ +-DT+nHbrTUcELpNqsOO9VUCQFZUaTNE8tja3G1CEZ0o7KBWFxB3NH5YoZEr0ETc5O +-nKVIrLsm9wIDAQABo0IwQDAdBgNVHQ4EFgQUC1jli8ZMFTekQKkwqSG+RzZaVv8w +-DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD +-ggEBAC/JxBwHO89hAgCx2SFRdXIDMLDEFh9sAIsQrK/xR9SuEDwMGvjUk2ysEDd8 +-t6aDZK3N3w6HM503sMZ7OHKx8xoOo/lVem0DZgMXlUrxsXrfViEGQo+x06iF3u6X +-HWLrp+cxEmbDD6ZLLkGC9/3JG6gbr+48zuOcrigHoSybJMIPIyaDMouGDx8rEkYl +-Fo92kANr3ryqImhrjKGsKxE5pttwwn1y6TPn/CbxdFqR5p2ErPioBhlG5qfpqjQi +-pKGfeq23sqSaM4hxAjwu1nqyH6LKwN0vEJT9s4yEIHlG1QXUEOTS22RPuFvuG8Ug +-R1uUq27UlTMdphVx8fiUylQ5PsE= +------END CERTIFICATE----- +- + # 1793927a0614549789adce2f8f34f7f0b66d0f3ae3a3b84d21ec15dbba4fadc7 + Certificate: + Data: +@@ -6201,328 +4795,6 @@ L6KCq9NjRHDEjf8tM7qtj3u1cIiuPhnPQCjY/MiQu12ZIvVS5ljFH4gxQ+6IHdfG + jjxDah2nGN59PRbxYvnKkKj9 + -----END CERTIFICATE----- + +-# 55903859c8c0c3ebb8759ece4e2557225ff5758bbd38ebd48276601e1bd58097 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 08:bd:85:97:6c:99:27:a4:80:68:47:3b +- Signature Algorithm: ecdsa-with-SHA384 +- Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P384 Certification Authority +- Validity +- Not Before: Aug 23 19:36:43 2017 GMT +- Not After : Aug 23 19:36:43 2042 GMT +- Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P384 Certification Authority +- Subject Public Key Info: +- Public Key Algorithm: id-ecPublicKey +- Public-Key: (384 bit) +- pub: +- 04:6b:da:0d:75:35:08:31:47:05:ae:45:99:55:f1: +- 11:13:2e:4a:f8:10:31:23:a3:7e:83:d3:7f:28:08: +- 3a:26:1a:3a:cf:97:82:1f:80:b7:27:09:8f:d1:8e: +- 30:c4:0a:9b:0e:ac:58:04:ab:f7:36:7d:94:23:a4: +- 9b:0a:8a:8b:ab:eb:fd:39:25:66:f1:5e:fe:8c:ae: +- 8d:41:79:9d:09:60:ce:28:a9:d3:8a:6d:f3:d6:45: +- d4:f2:98:84:38:65:a0 +- ASN1 OID: secp384r1 +- NIST CURVE: P-384 +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- 55:A9:84:89:D2:C1:32:BD:18:CB:6C:A6:07:4E:C8:E7:9D:BE:82:90 +- Signature Algorithm: ecdsa-with-SHA384 +- 30:64:02:30:37:01:92:97:45:12:7e:a0:f3:3e:ad:19:3a:72: +- dd:f4:50:93:03:12:be:44:d2:4f:41:a4:8c:9c:9d:1f:a3:f6: +- c2:92:e7:48:14:fe:4e:9b:a5:91:57:ae:c6:37:72:bb:02:30: +- 67:25:0a:b1:0c:5e:ee:a9:63:92:6f:e5:90:0b:fe:66:22:ca: +- 47:fd:8a:31:f7:83:fe:7a:bf:10:be:18:2b:1e:8f:f6:29:1e: +- 94:59:ef:8e:21:37:cb:51:98:a5:6e:4b +------BEGIN CERTIFICATE----- +-MIICnTCCAiSgAwIBAgIMCL2Fl2yZJ6SAaEc7MAoGCCqGSM49BAMDMIGRMQswCQYD +-VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf +-BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3 +-YXZlIEdsb2JhbCBFQ0MgUDM4NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x +-NzA4MjMxOTM2NDNaFw00MjA4MjMxOTM2NDNaMIGRMQswCQYDVQQGEwJVUzERMA8G +-A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0 +-d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF +-Q0MgUDM4NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTB2MBAGByqGSM49AgEGBSuB +-BAAiA2IABGvaDXU1CDFHBa5FmVXxERMuSvgQMSOjfoPTfygIOiYaOs+Xgh+AtycJ +-j9GOMMQKmw6sWASr9zZ9lCOkmwqKi6vr/TklZvFe/oyujUF5nQlgziip04pt89ZF +-1PKYhDhloKNDMEEwDwYDVR0TAQH/BAUwAwEB/zAPBgNVHQ8BAf8EBQMDBwYAMB0G +-A1UdDgQWBBRVqYSJ0sEyvRjLbKYHTsjnnb6CkDAKBggqhkjOPQQDAwNnADBkAjA3 +-AZKXRRJ+oPM+rRk6ct30UJMDEr5E0k9BpIycnR+j9sKS50gU/k6bpZFXrsY3crsC +-MGclCrEMXu6pY5Jv5ZAL/mYiykf9ijH3g/56vxC+GCsej/YpHpRZ744hN8tRmKVu +-Sw== +------END CERTIFICATE----- +- +-# 945bbc825ea554f489d1fd51a73ddf2ea624ac7019a05205225c22a78ccfa8b4 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 0d:6a:5f:08:3f:28:5c:3e:51:95:df:5d +- Signature Algorithm: ecdsa-with-SHA256 +- Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P256 Certification Authority +- Validity +- Not Before: Aug 23 19:35:10 2017 GMT +- Not After : Aug 23 19:35:10 2042 GMT +- Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P256 Certification Authority +- Subject Public Key Info: +- Public Key Algorithm: id-ecPublicKey +- Public-Key: (256 bit) +- pub: +- 04:7e:fb:6c:e6:23:e3:73:32:08:ca:60:e6:53:9c: +- ba:74:8d:18:b0:78:90:52:80:dd:38:c0:4a:1d:d1: +- a8:cc:93:a4:97:06:38:ca:0d:15:62:c6:8e:01:2a: +- 65:9d:aa:df:34:91:2e:81:c1:e4:33:92:31:c4:fd: +- 09:3a:a6:3f:ad +- ASN1 OID: prime256v1 +- NIST CURVE: P-256 +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- A3:41:06:AC:90:6D:D1:4A:EB:75:A5:4A:10:99:B3:B1:A1:8B:4A:F7 +- Signature Algorithm: ecdsa-with-SHA256 +- 30:44:02:20:07:e6:54:da:0e:a0:5a:b2:ae:11:9f:87:c5:b6: +- ff:69:de:25:be:f8:a0:b7:08:f3:44:ce:2a:df:08:21:0c:37: +- 02:20:2d:26:03:a0:05:bd:6b:d1:f6:5c:f8:65:cc:86:6d:b3: +- 9c:34:48:63:84:09:c5:8d:77:1a:e2:cc:9c:e1:74:7b +------BEGIN CERTIFICATE----- +-MIICYDCCAgegAwIBAgIMDWpfCD8oXD5Rld9dMAoGCCqGSM49BAMCMIGRMQswCQYD +-VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf +-BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3 +-YXZlIEdsb2JhbCBFQ0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x +-NzA4MjMxOTM1MTBaFw00MjA4MjMxOTM1MTBaMIGRMQswCQYDVQQGEwJVUzERMA8G +-A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0 +-d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF +-Q0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTBZMBMGByqGSM49AgEGCCqG +-SM49AwEHA0IABH77bOYj43MyCMpg5lOcunSNGLB4kFKA3TjASh3RqMyTpJcGOMoN +-FWLGjgEqZZ2q3zSRLoHB5DOSMcT9CTqmP62jQzBBMA8GA1UdEwEB/wQFMAMBAf8w +-DwYDVR0PAQH/BAUDAwcGADAdBgNVHQ4EFgQUo0EGrJBt0UrrdaVKEJmzsaGLSvcw +-CgYIKoZIzj0EAwIDRwAwRAIgB+ZU2g6gWrKuEZ+Hxbb/ad4lvvigtwjzRM4q3wgh +-DDcCIC0mA6AFvWvR9lz4ZcyGbbOcNEhjhAnFjXca4syc4XR7 +------END CERTIFICATE----- +- +-# 97552015f5ddfc3c8788c006944555408894450084f100867086bc1a2bb58dc8 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 05:f7:0e:86:da:49:f3:46:35:2e:ba:b2 +- Signature Algorithm: sha256WithRSAEncryption +- Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global Certification Authority +- Validity +- Not Before: Aug 23 19:34:12 2017 GMT +- Not After : Aug 23 19:34:12 2042 GMT +- Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global Certification Authority +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (4096 bit) +- Modulus: +- 00:b9:5d:51:28:4b:3c:37:92:d1:82:ce:bd:1d:bd: +- cd:dd:b8:ab:cf:0a:3e:e1:5d:e5:dc:aa:09:b9:57: +- 02:3e:e6:63:61:df:f2:0f:82:63:ae:a3:f7:ac:73: +- d1:7c:e7:b3:0b:af:08:00:09:59:7f:cd:29:2a:88: +- 93:87:17:18:80:ed:88:b2:b4:b6:10:1f:2d:d6:5f: +- 55:a2:13:5d:d1:c6:eb:06:56:89:88:fe:ac:32:9d: +- fd:5c:c3:05:c7:6e:ee:86:89:ba:88:03:9d:72:21: +- 86:90:ae:8f:03:a5:dc:9f:88:28:cb:a3:92:49:0f: +- ec:d0:0f:e2:6d:44:4f:80:6a:b2:d4:e7:a0:0a:53: +- 01:ba:8e:97:91:76:6e:bc:fc:d5:6b:36:e6:40:88: +- d6:7b:2f:5f:05:e8:2c:6d:11:f3:e7:b2:be:92:44: +- 4c:d2:97:a4:fe:d2:72:81:43:07:9c:e9:11:3e:f5: +- 8b:1a:59:7d:1f:68:58:dd:04:00:2c:96:f3:43:b3: +- 7e:98:19:74:d9:9c:73:d9:18:be:41:c7:34:79:d9: +- f4:62:c2:43:b9:b3:27:b0:22:cb:f9:3d:52:c7:30: +- 47:b3:c9:3e:b8:6a:e2:e7:e8:81:70:5e:42:8b:4f: +- 26:a5:fe:3a:c2:20:6e:bb:f8:16:8e:cd:0c:a9:b4: +- 1b:6c:76:10:e1:58:79:46:3e:54:ce:80:a8:57:09: +- 37:29:1b:99:13:8f:0c:c8:d6:2c:1c:fb:05:e8:08: +- 95:3d:65:46:dc:ee:cd:69:e2:4d:8f:87:28:4e:34: +- 0b:3e:cf:14:d9:bb:dd:b6:50:9a:ad:77:d4:19:d6: +- da:1a:88:c8:4e:1b:27:75:d8:b2:08:f1:ae:83:30: +- b9:11:0e:cd:87:f0:84:8d:15:72:7c:a1:ef:cc:f2: +- 88:61:ba:f4:69:bb:0c:8c:0b:75:57:04:b8:4e:2a: +- 14:2e:3d:0f:1c:1e:32:a6:62:36:ee:66:e2:22:b8: +- 05:40:63:10:22:f3:33:1d:74:72:8a:2c:f5:39:29: +- a0:d3:e7:1b:80:84:2d:c5:3d:e3:4d:b1:fd:1a:6f: +- ba:65:07:3b:58:ec:42:45:26:fb:d8:da:25:72:c4: +- f6:00:b1:22:79:bd:e3:7c:59:62:4a:9c:05:6f:3d: +- ce:e6:d6:47:63:99:c6:24:6f:72:12:c8:ac:7f:90: +- b4:0b:91:70:e8:b7:e6:16:10:71:17:ce:de:06:4f: +- 48:41:7d:35:4a:a3:89:f2:c9:4b:7b:41:11:6d:67: +- b7:08:98:4c:e5:11:19:ae:42:80:dc:fb:90:05:d4: +- f8:50:ca:be:e4:ad:c7:c2:94:d7:16:9d:e6:17:8f: +- af:36:fb +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- 99:E0:19:67:0D:62:DB:76:B3:DA:3D:B8:5B:E8:FD:42:D2:31:0E:87 +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- Signature Algorithm: sha256WithRSAEncryption +- 98:73:70:e2:b0:d3:ed:39:ec:4c:60:d9:a9:12:86:17:1e:96: +- d0:e8:54:28:3b:64:2d:21:a6:f8:9d:56:13:6a:48:3d:4f:c7: +- 3e:29:db:6d:58:83:54:3d:87:7d:23:05:d4:e4:1c:dc:e8:38: +- 65:86:c5:75:a7:5a:db:35:05:bd:77:de:bb:29:37:40:05:07: +- c3:94:52:9f:ca:64:dd:f1:1b:2b:dc:46:0a:10:02:31:fd:4a: +- 68:0d:07:64:90:e6:1e:f5:2a:a1:a8:bb:3c:5d:f9:a3:08:0b: +- 11:0c:f1:3f:2d:10:94:6f:fe:e2:34:87:83:d6:cf:e5:1b:35: +- 6d:d2:03:e1:b0:0d:a8:a0:aa:46:27:82:36:a7:15:b6:08:a6: +- 42:54:57:b6:99:5a:e2:0b:79:90:d7:57:12:51:35:19:88:41: +- 68:25:d4:37:17:84:15:fb:01:72:dc:95:de:52:26:20:98:26: +- e2:76:f5:27:6f:fa:00:3b:4a:61:d9:0d:cb:51:93:2a:fd:16: +- 06:96:a7:23:9a:23:48:fe:51:bd:b6:c4:b0:b1:54:ce:de:6c: +- 41:ad:16:67:7e:db:fd:38:cd:b9:38:4e:b2:c1:60:cb:9d:17: +- df:58:9e:7a:62:b2:26:8f:74:95:9b:e4:5b:1d:d2:0f:dd:98: +- 1c:9b:59:b9:23:d3:31:a0:a6:ff:38:dd:cf:20:4f:e9:58:56: +- 3a:67:c3:d1:f6:99:99:9d:ba:36:b6:80:2f:88:47:4f:86:bf: +- 44:3a:80:e4:37:1c:a6:ba:ea:97:98:11:d0:84:62:47:64:1e: +- aa:ee:40:bf:34:b1:9c:8f:4e:e1:f2:92:4f:1f:8e:f3:9e:97: +- de:f3:a6:79:6a:89:71:4f:4b:27:17:48:fe:ec:f4:50:0f:4f: +- 49:7d:cc:45:e3:bd:7a:40:c5:41:dc:61:56:27:06:69:e5:72: +- 41:81:d3:b6:01:89:a0:2f:3a:72:79:fe:3a:30:bf:41:ec:c7: +- 62:3e:91:4b:c7:d9:31:76:42:f9:f7:3c:63:ec:26:8c:73:0c: +- 7d:1a:1d:ea:a8:7c:87:a8:c2:27:7c:e1:33:41:0f:cf:cf:fc: +- 00:a0:22:80:9e:4a:a7:6f:00:b0:41:45:b7:22:ca:68:48:c5: +- 42:a2:ae:dd:1d:f2:e0:6e:4e:05:58:b1:c0:90:16:2a:a4:3d: +- 10:40:be:8f:62:63:83:a9:9c:82:7d:2d:02:e9:83:30:7c:cb: +- 27:c9:fd:1e:66:00:b0:2e:d3:21:2f:8e:33:16:6c:98:ed:10: +- a8:07:d6:cc:93:cf:db:d1:69:1c:e4:ca:c9:e0:b6:9c:e9:ce: +- 71:71:de:6c:3f:16:a4:79 +------BEGIN CERTIFICATE----- +-MIIF2jCCA8KgAwIBAgIMBfcOhtpJ80Y1LrqyMA0GCSqGSIb3DQEBCwUAMIGIMQsw +-CQYDVQQGEwJVUzERMA8GA1UECAwISWxsaW5vaXMxEDAOBgNVBAcMB0NoaWNhZ28x +-ITAfBgNVBAoMGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjExMC8GA1UEAwwoVHJ1 +-c3R3YXZlIEdsb2JhbCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xNzA4MjMx +-OTM0MTJaFw00MjA4MjMxOTM0MTJaMIGIMQswCQYDVQQGEwJVUzERMA8GA1UECAwI +-SWxsaW5vaXMxEDAOBgNVBAcMB0NoaWNhZ28xITAfBgNVBAoMGFRydXN0d2F2ZSBI +-b2xkaW5ncywgSW5jLjExMC8GA1UEAwwoVHJ1c3R3YXZlIEdsb2JhbCBDZXJ0aWZp +-Y2F0aW9uIEF1dGhvcml0eTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB +-ALldUShLPDeS0YLOvR29zd24q88KPuFd5dyqCblXAj7mY2Hf8g+CY66j96xz0Xzn +-swuvCAAJWX/NKSqIk4cXGIDtiLK0thAfLdZfVaITXdHG6wZWiYj+rDKd/VzDBcdu +-7oaJuogDnXIhhpCujwOl3J+IKMujkkkP7NAP4m1ET4BqstTnoApTAbqOl5F2brz8 +-1Ws25kCI1nsvXwXoLG0R8+eyvpJETNKXpP7ScoFDB5zpET71ixpZfR9oWN0EACyW +-80OzfpgZdNmcc9kYvkHHNHnZ9GLCQ7mzJ7Aiy/k9UscwR7PJPrhq4ufogXBeQotP +-JqX+OsIgbrv4Fo7NDKm0G2x2EOFYeUY+VM6AqFcJNykbmROPDMjWLBz7BegIlT1l +-RtzuzWniTY+HKE40Cz7PFNm73bZQmq131BnW2hqIyE4bJ3XYsgjxroMwuREOzYfw +-hI0Vcnyh78zyiGG69Gm7DIwLdVcEuE4qFC49DxweMqZiNu5m4iK4BUBjECLzMx10 +-coos9TkpoNPnG4CELcU9402x/RpvumUHO1jsQkUm+9jaJXLE9gCxInm943xZYkqc +-BW89zubWR2OZxiRvchLIrH+QtAuRcOi35hYQcRfO3gZPSEF9NUqjifLJS3tBEW1n +-twiYTOURGa5CgNz7kAXU+FDKvuStx8KU1xad5hePrzb7AgMBAAGjQjBAMA8GA1Ud +-EwEB/wQFMAMBAf8wHQYDVR0OBBYEFJngGWcNYtt2s9o9uFvo/ULSMQ6HMA4GA1Ud +-DwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAgEAmHNw4rDT7TnsTGDZqRKGFx6W +-0OhUKDtkLSGm+J1WE2pIPU/HPinbbViDVD2HfSMF1OQc3Og4ZYbFdada2zUFvXfe +-uyk3QAUHw5RSn8pk3fEbK9xGChACMf1KaA0HZJDmHvUqoai7PF35owgLEQzxPy0Q +-lG/+4jSHg9bP5Rs1bdID4bANqKCqRieCNqcVtgimQlRXtpla4gt5kNdXElE1GYhB +-aCXUNxeEFfsBctyV3lImIJgm4nb1J2/6ADtKYdkNy1GTKv0WBpanI5ojSP5RvbbE +-sLFUzt5sQa0WZ37b/TjNuThOssFgy50X31ieemKyJo90lZvkWx3SD92YHJtZuSPT +-MaCm/zjdzyBP6VhWOmfD0faZmZ26NraAL4hHT4a/RDqA5Dccprrql5gR0IRiR2Qe +-qu5AvzSxnI9O4fKSTx+O856X3vOmeWqJcU9LJxdI/uz0UA9PSX3MReO9ekDFQdxh +-VicGaeVyQYHTtgGJoC86cnn+OjC/QezHYj6RS8fZMXZC+fc8Y+wmjHMMfRod6qh8 +-h6jCJ3zhM0EPz8/8AKAigJ5Kp28AsEFFtyLKaEjFQqKu3R3y4G5OBVixwJAWKqQ9 +-EEC+j2Jjg6mcgn0tAumDMHzLJ8n9HmYAsC7TIS+OMxZsmO0QqAfWzJPP29FpHOTK +-yeC2nOnOcXHebD8WpHk= +------END CERTIFICATE----- +- +-# f1c1b50ae5a20dd8030ec9f6bc24823dd367b5255759b4e71b61fce9f7375d73 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 0c:f0:8e:5c:08:16:a5:ad:42:7f:f0:eb:27:18:59:d0 +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = US, O = SecureTrust Corporation, CN = SecureTrust CA +- Validity +- Not Before: Nov 7 19:31:18 2006 GMT +- Not After : Dec 31 19:40:55 2029 GMT +- Subject: C = US, O = SecureTrust Corporation, CN = SecureTrust CA +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:ab:a4:81:e5:95:cd:f5:f6:14:8e:c2:4f:ca:d4: +- e2:78:95:58:9c:41:e1:0d:99:40:24:17:39:91:33: +- 66:e9:be:e1:83:af:62:5c:89:d1:fc:24:5b:61:b3: +- e0:11:11:41:1c:1d:6e:f0:b8:bb:f8:de:a7:81:ba: +- a6:48:c6:9f:1d:bd:be:8e:a9:41:3e:b8:94:ed:29: +- 1a:d4:8e:d2:03:1d:03:ef:6d:0d:67:1c:57:d7:06: +- ad:ca:c8:f5:fe:0e:af:66:25:48:04:96:0b:5d:a3: +- ba:16:c3:08:4f:d1:46:f8:14:5c:f2:c8:5e:01:99: +- 6d:fd:88:cc:86:a8:c1:6f:31:42:6c:52:3e:68:cb: +- f3:19:34:df:bb:87:18:56:80:26:c4:d0:dc:c0:6f: +- df:de:a0:c2:91:16:a0:64:11:4b:44:bc:1e:f6:e7: +- fa:63:de:66:ac:76:a4:71:a3:ec:36:94:68:7a:77: +- a4:b1:e7:0e:2f:81:7a:e2:b5:72:86:ef:a2:6b:8b: +- f0:0f:db:d3:59:3f:ba:72:bc:44:24:9c:e3:73:b3: +- f7:af:57:2f:42:26:9d:a9:74:ba:00:52:f2:4b:cd: +- 53:7c:47:0b:36:85:0e:66:a9:08:97:16:34:57:c1: +- 66:f7:80:e3:ed:70:54:c7:93:e0:2e:28:15:59:87: +- ba:bb +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- 1.3.6.1.4.1.311.20.2: +- ...C.A +- X509v3 Key Usage: +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- 42:32:B6:16:FA:04:FD:FE:5D:4B:7A:C3:FD:F7:4C:40:1D:5A:43:AF +- X509v3 CRL Distribution Points: +- +- Full Name: +- URI:http://crl.securetrust.com/STCA.crl +- +- 1.3.6.1.4.1.311.21.1: +- ... +- Signature Algorithm: sha1WithRSAEncryption +- 30:ed:4f:4a:e1:58:3a:52:72:5b:b5:a6:a3:65:18:a6:bb:51: +- 3b:77:e9:9d:ea:d3:9f:5c:e0:45:65:7b:0d:ca:5b:e2:70:50: +- b2:94:05:14:ae:49:c7:8d:41:07:12:73:94:7e:0c:23:21:fd: +- bc:10:7f:60:10:5a:72:f5:98:0e:ac:ec:b9:7f:dd:7a:6f:5d: +- d3:1c:f4:ff:88:05:69:42:a9:05:71:c8:b7:ac:26:e8:2e:b4: +- 8c:6a:ff:71:dc:b8:b1:df:99:bc:7c:21:54:2b:e4:58:a2:bb: +- 57:29:ae:9e:a9:a3:19:26:0f:99:2e:08:b0:ef:fd:69:cf:99: +- 1a:09:8d:e3:a7:9f:2b:c9:36:34:7b:24:b3:78:4c:95:17:a4: +- 06:26:1e:b6:64:52:36:5f:60:67:d9:9c:c5:05:74:0b:e7:67: +- 23:d2:08:fc:88:e9:ae:8b:7f:e1:30:f4:37:7e:fd:c6:32:da: +- 2d:9e:44:30:30:6c:ee:07:de:d2:34:fc:d2:ff:40:f6:4b:f4: +- 66:46:06:54:a6:f2:32:0a:63:26:30:6b:9b:d1:dc:8b:47:ba: +- e1:b9:d5:62:d0:a2:a0:f4:67:05:78:29:63:1a:6f:04:d6:f8: +- c6:4c:a3:9a:b1:37:b4:8d:e5:28:4b:1d:9e:2c:c2:b8:68:bc: +- ed:02:ee:31 +------BEGIN CERTIFICATE----- +-MIIDuDCCAqCgAwIBAgIQDPCOXAgWpa1Cf/DrJxhZ0DANBgkqhkiG9w0BAQUFADBI +-MQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24x +-FzAVBgNVBAMTDlNlY3VyZVRydXN0IENBMB4XDTA2MTEwNzE5MzExOFoXDTI5MTIz +-MTE5NDA1NVowSDELMAkGA1UEBhMCVVMxIDAeBgNVBAoTF1NlY3VyZVRydXN0IENv +-cnBvcmF0aW9uMRcwFQYDVQQDEw5TZWN1cmVUcnVzdCBDQTCCASIwDQYJKoZIhvcN +-AQEBBQADggEPADCCAQoCggEBAKukgeWVzfX2FI7CT8rU4niVWJxB4Q2ZQCQXOZEz +-Zum+4YOvYlyJ0fwkW2Gz4BERQRwdbvC4u/jep4G6pkjGnx29vo6pQT64lO0pGtSO +-0gMdA+9tDWccV9cGrcrI9f4Or2YlSASWC12juhbDCE/RRvgUXPLIXgGZbf2IzIao +-wW8xQmxSPmjL8xk037uHGFaAJsTQ3MBv396gwpEWoGQRS0S8Hvbn+mPeZqx2pHGj +-7DaUaHp3pLHnDi+BeuK1cobvomuL8A/b01k/unK8RCSc43Oz969XL0Imnal0ugBS +-8kvNU3xHCzaFDmapCJcWNFfBZveA4+1wVMeT4C4oFVmHursCAwEAAaOBnTCBmjAT +-BgkrBgEEAYI3FAIEBh4EAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB +-/zAdBgNVHQ4EFgQUQjK2FvoE/f5dS3rD/fdMQB1aQ68wNAYDVR0fBC0wKzApoCeg +-JYYjaHR0cDovL2NybC5zZWN1cmV0cnVzdC5jb20vU1RDQS5jcmwwEAYJKwYBBAGC +-NxUBBAMCAQAwDQYJKoZIhvcNAQEFBQADggEBADDtT0rhWDpSclu1pqNlGKa7UTt3 +-6Z3q059c4EVlew3KW+JwULKUBRSuSceNQQcSc5R+DCMh/bwQf2AQWnL1mA6s7Ll/ +-3XpvXdMc9P+IBWlCqQVxyLesJugutIxq/3HcuLHfmbx8IVQr5Fiiu1cprp6poxkm +-D5kuCLDv/WnPmRoJjeOnnyvJNjR7JLN4TJUXpAYmHrZkUjZfYGfZnMUFdAvnZyPS +-CPyI6a6Lf+Ew9Dd+/cYy2i2eRDAwbO4H3tI0/NL/QPZL9GZGBlSm8jIKYyYwa5vR +-3ItHuuG51WLQoqD0ZwV4KWMabwTW+MZMo5qxN7SN5ShLHZ4swrhovO0C7jE= +------END CERTIFICATE----- +- + # 9bea11c976fe014764c1be56a6f914b5a560317abd9988393382e5161aa0493c + Certificate: + Data: +@@ -7133,136 +5405,6 @@ oYYitmUnDuy2n0Jg5GfCtdpBC8TTi2EbvPofkSvXRAdeuims2cXp71NIWuuA8ShY + Ic2wBlX7Jz9TkHCpBB5XJ7k= + -----END CERTIFICATE----- + +-# 62dd0be9b9f50a163ea0f8e75c053b1eca57ea55c8688f647c6881f2c8357b95 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- bb:40:1c:43:f5:5e:4f:b0 +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = CH, O = SwissSign AG, CN = SwissSign Gold CA - G2 +- Validity +- Not Before: Oct 25 08:30:35 2006 GMT +- Not After : Oct 25 08:30:35 2036 GMT +- Subject: C = CH, O = SwissSign AG, CN = SwissSign Gold CA - G2 +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (4096 bit) +- Modulus: +- 00:af:e4:ee:7e:8b:24:0e:12:6e:a9:50:2d:16:44: +- 3b:92:92:5c:ca:b8:5d:84:92:42:13:2a:bc:65:57: +- 82:40:3e:57:24:cd:50:8b:25:2a:b7:6f:fc:ef:a2: +- d0:c0:1f:02:24:4a:13:96:8f:23:13:e6:28:58:00: +- a3:47:c7:06:a7:84:23:2b:bb:bd:96:2b:7f:55:cc: +- 8b:c1:57:1f:0e:62:65:0f:dd:3d:56:8a:73:da:ae: +- 7e:6d:ba:81:1c:7e:42:8c:20:35:d9:43:4d:84:fa: +- 84:db:52:2c:f3:0e:27:77:0b:6b:bf:11:2f:72:78: +- 9f:2e:d8:3e:e6:18:37:5a:2a:72:f9:da:62:90:92: +- 95:ca:1f:9c:e9:b3:3c:2b:cb:f3:01:13:bf:5a:cf: +- c1:b5:0a:60:bd:dd:b5:99:64:53:b8:a0:96:b3:6f: +- e2:26:77:91:8c:e0:62:10:02:9f:34:0f:a4:d5:92: +- 33:51:de:be:8d:ba:84:7a:60:3c:6a:db:9f:2b:ec: +- de:de:01:3f:6e:4d:e5:50:86:cb:b4:af:ed:44:40: +- c5:ca:5a:8c:da:d2:2b:7c:a8:ee:be:a6:e5:0a:aa: +- 0e:a5:df:05:52:b7:55:c7:22:5d:32:6a:97:97:63: +- 13:db:c9:db:79:36:7b:85:3a:4a:c5:52:89:f9:24: +- e7:9d:77:a9:82:ff:55:1c:a5:71:69:2b:d1:02:24: +- f2:b3:26:d4:6b:da:04:55:e5:c1:0a:c7:6d:30:37: +- 90:2a:e4:9e:14:33:5e:16:17:55:c5:5b:b5:cb:34: +- 89:92:f1:9d:26:8f:a1:07:d4:c6:b2:78:50:db:0c: +- 0c:0b:7c:0b:8c:41:d7:b9:e9:dd:8c:88:f7:a3:4d: +- b2:32:cc:d8:17:da:cd:b7:ce:66:9d:d4:fd:5e:ff: +- bd:97:3e:29:75:e7:7e:a7:62:58:af:25:34:a5:41: +- c7:3d:bc:0d:50:ca:03:03:0f:08:5a:1f:95:73:78: +- 62:bf:af:72:14:69:0e:a5:e5:03:0e:78:8e:26:28: +- 42:f0:07:0b:62:20:10:67:39:46:fa:a9:03:cc:04: +- 38:7a:66:ef:20:83:b5:8c:4a:56:8e:91:00:fc:8e: +- 5c:82:de:88:a0:c3:e2:68:6e:7d:8d:ef:3c:dd:65: +- f4:5d:ac:51:ef:24:80:ae:aa:56:97:6f:f9:ad:7d: +- da:61:3f:98:77:3c:a5:91:b6:1c:8c:26:da:65:a2: +- 09:6d:c1:e2:54:e3:b9:ca:4c:4c:80:8f:77:7b:60: +- 9a:1e:df:b6:f2:48:1e:0e:ba:4e:54:6d:98:e0:e1: +- a2:1a:a2:77:50:cf:c4:63:92:ec:47:19:9d:eb:e6: +- 6b:ce:c1 +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- 5B:25:7B:96:A4:65:51:7E:B8:39:F3:C0:78:66:5E:E8:3A:E7:F0:EE +- X509v3 Authority Key Identifier: +- keyid:5B:25:7B:96:A4:65:51:7E:B8:39:F3:C0:78:66:5E:E8:3A:E7:F0:EE +- +- X509v3 Certificate Policies: +- Policy: 2.16.756.1.89.1.2.1.1 +- CPS: http://repository.swisssign.com/ +- +- Signature Algorithm: sha1WithRSAEncryption +- 27:ba:e3:94:7c:f1:ae:c0:de:17:e6:e5:d8:d5:f5:54:b0:83: +- f4:bb:cd:5e:05:7b:4f:9f:75:66:af:3c:e8:56:7e:fc:72:78: +- 38:03:d9:2b:62:1b:00:b9:f8:e9:60:cd:cc:ce:51:8a:c7:50: +- 31:6e:e1:4a:7e:18:2f:69:59:b6:3d:64:81:2b:e3:83:84:e6: +- 22:87:8e:7d:e0:ee:02:99:61:b8:1e:f4:b8:2b:88:12:16:84: +- c2:31:93:38:96:31:a6:b9:3b:53:3f:c3:24:93:56:5b:69:92: +- ec:c5:c1:bb:38:00:e3:ec:17:a9:b8:dc:c7:7c:01:83:9f:32: +- 47:ba:52:22:34:1d:32:7a:09:56:a7:7c:25:36:a9:3d:4b:da: +- c0:82:6f:0a:bb:12:c8:87:4b:27:11:f9:1e:2d:c7:93:3f:9e: +- db:5f:26:6b:52:d9:2e:8a:f1:14:c6:44:8d:15:a9:b7:bf:bd: +- de:a6:1a:ee:ae:2d:fb:48:77:17:fe:bb:ec:af:18:f5:2a:51: +- f0:39:84:97:95:6c:6e:1b:c3:2b:c4:74:60:79:25:b0:0a:27: +- df:df:5e:d2:39:cf:45:7d:42:4b:df:b3:2c:1e:c5:c6:5d:ca: +- 55:3a:a0:9c:69:9a:8f:da:ef:b2:b0:3c:9f:87:6c:12:2b:65: +- 70:15:52:31:1a:24:cf:6f:31:23:50:1f:8c:4f:8f:23:c3:74: +- 41:63:1c:55:a8:14:dd:3e:e0:51:50:cf:f1:1b:30:56:0e:92: +- b0:82:85:d8:83:cb:22:64:bc:2d:b8:25:d5:54:a2:b8:06:ea: +- ad:92:a4:24:a0:c1:86:b5:4a:13:6a:47:cf:2e:0b:56:95:54: +- cb:ce:9a:db:6a:b4:a6:b2:db:41:08:86:27:77:f7:6a:a0:42: +- 6c:0b:38:ce:d7:75:50:32:92:c2:df:2b:30:22:48:d0:d5:41: +- 38:25:5d:a4:e9:5d:9f:c6:94:75:d0:45:fd:30:97:43:8f:90: +- ab:0a:c7:86:73:60:4a:69:2d:de:a5:78:d7:06:da:6a:9e:4b: +- 3e:77:3a:20:13:22:01:d0:bf:68:9e:63:60:6b:35:4d:0b:6d: +- ba:a1:3d:c0:93:e0:7f:23:b3:55:ad:72:25:4e:46:f9:d2:16: +- ef:b0:64:c1:01:9e:e9:ca:a0:6a:98:0e:cf:d8:60:f2:2f:49: +- b8:e4:42:e1:38:35:16:f4:c8:6e:4f:f7:81:56:e8:ba:a3:be: +- 23:af:ae:fd:6f:03:e0:02:3b:30:76:fa:1b:6d:41:cf:01:b1: +- e9:b8:c9:66:f4:db:26:f3:3a:a4:74:f2:49:24:5b:c9:b0:d0: +- 57:c1:fa:3e:7a:e1:97:c9 +------BEGIN CERTIFICATE----- +-MIIFujCCA6KgAwIBAgIJALtAHEP1Xk+wMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNV +-BAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxHzAdBgNVBAMTFlN3aXNzU2ln +-biBHb2xkIENBIC0gRzIwHhcNMDYxMDI1MDgzMDM1WhcNMzYxMDI1MDgzMDM1WjBF +-MQswCQYDVQQGEwJDSDEVMBMGA1UEChMMU3dpc3NTaWduIEFHMR8wHQYDVQQDExZT +-d2lzc1NpZ24gR29sZCBDQSAtIEcyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC +-CgKCAgEAr+TufoskDhJuqVAtFkQ7kpJcyrhdhJJCEyq8ZVeCQD5XJM1QiyUqt2/8 +-76LQwB8CJEoTlo8jE+YoWACjR8cGp4QjK7u9lit/VcyLwVcfDmJlD909Vopz2q5+ +-bbqBHH5CjCA12UNNhPqE21Is8w4ndwtrvxEvcnifLtg+5hg3Wipy+dpikJKVyh+c +-6bM8K8vzARO/Ws/BtQpgvd21mWRTuKCWs2/iJneRjOBiEAKfNA+k1ZIzUd6+jbqE +-emA8atufK+ze3gE/bk3lUIbLtK/tREDFylqM2tIrfKjuvqblCqoOpd8FUrdVxyJd +-MmqXl2MT28nbeTZ7hTpKxVKJ+STnnXepgv9VHKVxaSvRAiTysybUa9oEVeXBCsdt +-MDeQKuSeFDNeFhdVxVu1yzSJkvGdJo+hB9TGsnhQ2wwMC3wLjEHXuendjIj3o02y +-MszYF9rNt85mndT9Xv+9lz4pded+p2JYryU0pUHHPbwNUMoDAw8IWh+Vc3hiv69y +-FGkOpeUDDniOJihC8AcLYiAQZzlG+qkDzAQ4embvIIO1jEpWjpEA/I5cgt6IoMPi +-aG59je883WX0XaxR7ySArqpWl2/5rX3aYT+YdzylkbYcjCbaZaIJbcHiVOO5ykxM +-gI93e2CaHt+28kgeDrpOVG2Y4OGiGqJ3UM/EY5LsRxmd6+ZrzsECAwEAAaOBrDCB +-qTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUWyV7 +-lqRlUX64OfPAeGZe6Drn8O4wHwYDVR0jBBgwFoAUWyV7lqRlUX64OfPAeGZe6Drn +-8O4wRgYDVR0gBD8wPTA7BglghXQBWQECAQEwLjAsBggrBgEFBQcCARYgaHR0cDov +-L3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS8wDQYJKoZIhvcNAQEFBQADggIBACe6 +-45R88a7A3hfm5djV9VSwg/S7zV4Fe0+fdWavPOhWfvxyeDgD2StiGwC5+OlgzczO +-UYrHUDFu4Up+GC9pWbY9ZIEr44OE5iKHjn3g7gKZYbge9LgriBIWhMIxkziWMaa5 +-O1M/wySTVltpkuzFwbs4AOPsF6m43Md8AYOfMke6UiI0HTJ6CVanfCU2qT1L2sCC +-bwq7EsiHSycR+R4tx5M/nttfJmtS2S6K8RTGRI0Vqbe/vd6mGu6uLftIdxf+u+yv +-GPUqUfA5hJeVbG4bwyvEdGB5JbAKJ9/fXtI5z0V9QkvfsywexcZdylU6oJxpmo/a +-77KwPJ+HbBIrZXAVUjEaJM9vMSNQH4xPjyPDdEFjHFWoFN0+4FFQz/EbMFYOkrCC +-hdiDyyJkvC24JdVUorgG6q2SpCSgwYa1ShNqR88uC1aVVMvOmttqtKay20EIhid3 +-92qgQmwLOM7XdVAyksLfKzAiSNDVQTglXaTpXZ/GlHXQRf0wl0OPkKsKx4ZzYEpp +-Ld6leNcG2mqeSz53OiATIgHQv2ieY2BrNU0LbbqhPcCT4H8js1WtciVORvnSFu+w +-ZMEBnunKoGqYDs/YYPIvSbjkQuE4NRb0yG5P94FW6LqjviOvrv1vA+ACOzB2+htt +-Qc8Bsem4yWb02ybzOqR08kkkW8mw0FfB+j564ZfJ +------END CERTIFICATE----- +- + # 59769007f7685d0fcd50872f9f95d5755a5b2b457d81f3692b610a98672f0e1b + Certificate: + Data: +@@ -7381,126 +5523,6 @@ aGHQRiapIVJpLesux+t3zqY6tQMzT3bR51xUAV3LePTJDL/PEo4XLSNolOer/qmy + KwbQBM0= + -----END CERTIFICATE----- + +-# dd6936fe21f8f077c123a1a521c12224f72255b73e03a7260693e8a24b0fa389 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 95:be:16:a0:f7:2e:46:f1:7b:39:82:72:fa:8b:cd:96 +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: O = TeliaSonera, CN = TeliaSonera Root CA v1 +- Validity +- Not Before: Oct 18 12:00:50 2007 GMT +- Not After : Oct 18 12:00:50 2032 GMT +- Subject: O = TeliaSonera, CN = TeliaSonera Root CA v1 +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (4096 bit) +- Modulus: +- 00:c2:be:eb:27:f0:21:a3:f3:69:26:55:7e:9d:c5: +- 55:16:91:5c:fd:ef:21:bf:53:80:7a:2d:d2:91:8c: +- 63:31:f0:ec:24:f0:c3:a5:d2:72:7c:10:6d:f4:37: +- b7:e5:e6:7c:79:ea:8c:b5:82:8b:ae:48:b6:ac:00: +- dc:65:75:ec:2a:4d:5f:c1:87:f5:20:65:2b:81:a8: +- 47:3e:89:23:95:30:16:90:7f:e8:57:07:48:e7:19: +- ae:bf:45:67:b1:37:1b:06:2a:fe:de:f9:ac:7d:83: +- fb:5e:ba:e4:8f:97:67:be:4b:8e:8d:64:07:57:38: +- 55:69:34:36:3d:13:48:ef:4f:e2:d3:66:1e:a4:cf: +- 1a:b7:5e:36:33:d4:b4:06:bd:18:01:fd:77:84:50: +- 00:45:f5:8c:5d:e8:23:bc:7e:fe:35:e1:ed:50:7b: +- a9:30:8d:19:d3:09:8e:68:67:5d:bf:3c:97:18:53: +- bb:29:62:c5:ca:5e:72:c1:c7:96:d4:db:2d:a0:b4: +- 1f:69:03:ec:ea:e2:50:f1:0c:3c:f0:ac:f3:53:2d: +- f0:1c:f5:ed:6c:39:39:73:80:16:c8:52:b0:23:cd: +- e0:3e:dc:dd:3c:47:a0:bb:35:8a:e2:98:68:8b:be: +- e5:bf:72:ee:d2:fa:a5:ed:12:ed:fc:98:18:a9:26: +- 76:dc:28:4b:10:20:1c:d3:7f:16:77:2d:ed:6f:80: +- f7:49:bb:53:05:bb:5d:68:c7:d4:c8:75:16:3f:89: +- 5a:8b:f7:17:47:d4:4c:f1:d2:89:79:3e:4d:3d:98: +- a8:61:de:3a:1e:d2:f8:5e:03:e0:c1:c9:1c:8c:d3: +- 8d:4d:d3:95:36:b3:37:5f:63:63:9b:33:14:f0:2d: +- 26:6b:53:7c:89:8c:32:c2:6e:ec:3d:21:00:39:c9: +- a1:68:e2:50:83:2e:b0:3a:2b:f3:36:a0:ac:2f:e4: +- 6f:61:c2:51:09:39:3e:8b:53:b9:bb:67:da:dc:53: +- b9:76:59:36:9d:43:e5:20:e0:3d:32:60:85:22:51: +- b7:c7:33:bb:dd:15:2f:a4:78:a6:07:7b:81:46:36: +- 04:86:dd:79:35:c7:95:2c:3b:b0:a3:17:35:e5:73: +- 1f:b4:5c:59:ef:da:ea:10:65:7b:7a:d0:7f:9f:b3: +- b4:2a:37:3b:70:8b:9b:5b:b9:2b:b7:ec:b2:51:12: +- 97:53:29:5a:d4:f0:12:10:dc:4f:02:bb:12:92:2f: +- 62:d4:3f:69:43:7c:0d:d6:fc:58:75:01:88:9d:58: +- 16:4b:de:ba:90:ff:47:01:89:06:6a:f6:5f:b2:90: +- 6a:b3:02:a6:02:88:bf:b3:47:7e:2a:d9:d5:fa:68: +- 78:35:4d +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: +- Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- F0:8F:59:38:00:B3:F5:8F:9A:96:0C:D5:EB:FA:7B:AA:17:E8:13:12 +- Signature Algorithm: sha1WithRSAEncryption +- be:e4:5c:62:4e:24:f4:0c:08:ff:f0:d3:0c:68:e4:93:49:22: +- 3f:44:27:6f:bb:6d:de:83:66:ce:a8:cc:0d:fc:f5:9a:06:e5: +- 77:14:91:eb:9d:41:7b:99:2a:84:e5:ff:fc:21:c1:5d:f0:e4: +- 1f:57:b7:75:a9:a1:5f:02:26:ff:d7:c7:f7:4e:de:4f:f8:f7: +- 1c:46:c0:7a:4f:40:2c:22:35:f0:19:b1:d0:6b:67:2c:b0:a8: +- e0:c0:40:37:35:f6:84:5c:5c:e3:af:42:78:fe:a7:c9:0d:50: +- ea:0d:84:76:f6:51:ef:83:53:c6:7a:ff:0e:56:49:2e:8f:7a: +- d6:0c:e6:27:54:e3:4d:0a:60:72:62:cd:91:07:d6:a5:bf:c8: +- 99:6b:ed:c4:19:e6:ab:4c:11:38:c5:6f:31:e2:6e:49:c8:3f: +- 76:80:26:03:26:29:e0:36:f6:f6:20:53:e3:17:70:34:17:9d: +- 63:68:1e:6b:ec:c3:4d:86:b8:13:30:2f:5d:46:0d:47:43:d5: +- 1b:aa:59:0e:b9:5c:8d:06:48:ad:74:87:5f:c7:fc:31:54:41: +- 13:e2:c7:21:0e:9e:e0:1e:0d:e1:c0:7b:43:85:90:c5:8a:58: +- c6:65:0a:78:57:f2:c6:23:0f:01:d9:20:4b:de:0f:fb:92:85: +- 75:2a:5c:73:8d:6d:7b:25:91:ca:ee:45:ae:06:4b:00:cc:d3: +- b1:59:50:da:3a:88:3b:29:43:46:5e:97:2b:54:ce:53:6f:8d: +- 4a:e7:96:fa:bf:71:0e:42:8b:7c:fd:28:a0:d0:48:ca:da:c4: +- 81:4c:bb:a2:73:93:26:c8:eb:0c:d6:26:88:b6:c0:24:cf:bb: +- bd:5b:eb:75:7d:e9:08:8e:86:33:2c:79:77:09:69:a5:89:fc: +- b3:70:90:87:76:8f:d3:22:bb:42:ce:bd:73:0b:20:26:2a:d0: +- 9b:3d:70:1e:24:6c:cd:87:76:a9:17:96:b7:cf:0d:92:fb:8e: +- 18:a9:98:49:d1:9e:fe:60:44:72:21:b9:19:ed:c2:f5:31:f1: +- 39:48:88:90:24:75:54:16:ad:ce:f4:f8:69:14:64:39:fb:a3: +- b8:ba:70:40:c7:27:1c:bf:c4:56:53:fa:63:65:d0:f3:1c:0e: +- 16:f5:6b:86:58:4d:18:d4:e4:0d:8e:a5:9d:5b:91:dc:76:24: +- 50:3f:c6:2a:fb:d9:b7:9c:b5:d6:e6:d0:d9:e8:19:8b:15:71: +- 48:ad:b7:ea:d8:59:88:d4:90:bf:16:b3:d9:e9:ac:59:61:54: +- c8:1c:ba:ca:c1:ca:e1:b9:20:4c:8f:3a:93:89:a5:a0:cc:bf: +- d3:f6:75:a4:75:96:6d:56 +------BEGIN CERTIFICATE----- +-MIIFODCCAyCgAwIBAgIRAJW+FqD3LkbxezmCcvqLzZYwDQYJKoZIhvcNAQEFBQAw +-NzEUMBIGA1UECgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJv +-b3QgQ0EgdjEwHhcNMDcxMDE4MTIwMDUwWhcNMzIxMDE4MTIwMDUwWjA3MRQwEgYD +-VQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UEAwwWVGVsaWFTb25lcmEgUm9vdCBDQSB2 +-MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMK+6yfwIaPzaSZVfp3F +-VRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65ItqwA3GV1 +-7CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+X +-Z75Ljo1kB1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+ +-/jXh7VB7qTCNGdMJjmhnXb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs +-81Mt8Bz17Ww5OXOAFshSsCPN4D7c3TxHoLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkm +-dtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+JWov3F0fUTPHSiXk+TT2YqGHe +-Oh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0hADnJoWjiUIMu +-sDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4 +-pgd7gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fs +-slESl1MpWtTwEhDcTwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQ +-arMCpgKIv7NHfirZ1fpoeDVNAgMBAAGjPzA9MA8GA1UdEwEB/wQFMAMBAf8wCwYD +-VR0PBAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1j5qWDNXr+nuqF+gTEjANBgkqhkiG +-9w0BAQUFAAOCAgEAvuRcYk4k9AwI//DTDGjkk0kiP0Qnb7tt3oNmzqjMDfz1mgbl +-dxSR651Be5kqhOX//CHBXfDkH1e3damhXwIm/9fH907eT/j3HEbAek9ALCI18Bmx +-0GtnLLCo4MBANzX2hFxc469CeP6nyQ1Q6g2EdvZR74NTxnr/DlZJLo961gzmJ1Tj +-TQpgcmLNkQfWpb/ImWvtxBnmq0wROMVvMeJuScg/doAmAyYp4Db29iBT4xdwNBed +-Y2gea+zDTYa4EzAvXUYNR0PVG6pZDrlcjQZIrXSHX8f8MVRBE+LHIQ6e4B4N4cB7 +-Q4WQxYpYxmUKeFfyxiMPAdkgS94P+5KFdSpcc41teyWRyu5FrgZLAMzTsVlQ2jqI +-OylDRl6XK1TOU2+NSueW+r9xDkKLfP0ooNBIytrEgUy7onOTJsjrDNYmiLbAJM+7 +-vVvrdX3pCI6GMyx5dwlppYn8s3CQh3aP0yK7Qs69cwsgJirQmz1wHiRszYd2qReW +-t88NkvuOGKmYSdGe/mBEciG5Ge3C9THxOUiIkCR1VBatzvT4aRRkOfujuLpwQMcn +-HL/EVlP6Y2XQ8xwOFvVrhlhNGNTkDY6lnVuR3HYkUD/GKvvZt5y11ubQ2egZixVx +-SK236thZiNSQvxaz2emsWWFUyBy6ysHK4bkgTI86k4mloMy/0/Z1pHWWbVY= +------END CERTIFICATE----- +- + # 6b328085625318aa50d173c98d8bda09d57e27413d114cf787a0f5d06c030cf6 + Certificate: + Data: +@@ -10879,4 +8901,509 @@ L4x35bcF7DvB7L6Gs4a8wPfc5+pbrrLMtTWGS9DiP7bY+A4A7l3j941Y/8+LN+lj + X273CXE2whJdV/LItM3z7gLfEdxquVeEHVlNjM7IDiPCtyaaEBRx/pOyiriA8A4Q + ntOoUAw3gi/q4Iqd4Sw5/7W0cwDk90imc6y/st53BIe0o82bNSQ3+pCTE4FCxpgm + dTdmQRCsu/WU48IxK63nI1bMNSWSs1A= ++-----END CERTIFICATE----- ++ ++# b49141502d00663d740f2e7ec340c52800962666121a36d09cf7dd2b90384fb4 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ e8:6f:18:7b:d6:39:6b:98:4a:49:98:0a ++ Signature Algorithm: ecdsa-with-SHA512 ++ Issuer: C=HU, L=Budapest, O=Microsec Ltd., organizationIdentifier=VATHU-23584497, CN=e-Szigno TLS Root CA 2023 ++ Validity ++ Not Before: Jul 17 14:00:00 2023 GMT ++ Not After : Jul 17 14:00:00 2038 GMT ++ Subject: C=HU, L=Budapest, O=Microsec Ltd., organizationIdentifier=VATHU-23584497, CN=e-Szigno TLS Root CA 2023 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (521 bit) ++ pub: ++ 04:00:68:0f:df:a2:7c:3c:aa:74:88:61:0a:8d:c2: ++ 4c:a5:01:22:14:d4:f7:60:77:42:9c:0a:38:60:a1: ++ 8c:67:3e:b3:63:e9:fa:91:b0:8b:4b:e6:39:df:02: ++ c2:30:01:52:00:bf:df:8c:ed:59:ad:32:65:ab:09: ++ 59:50:b5:19:c2:68:1c:00:e0:05:5f:da:50:26:1c: ++ c3:ac:04:22:c5:3a:4d:ef:e9:57:58:36:a3:c1:19: ++ 53:10:0a:d1:cd:3f:ef:4b:35:1a:43:8f:42:13:4c: ++ b9:2c:1a:9c:be:30:b6:c4:de:dc:4b:9d:e4:a4:3c: ++ cb:2e:d9:ad:df:df:7d:09:df:2e:92:ff:a1 ++ ASN1 OID: secp521r1 ++ NIST CURVE: P-521 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ 59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45 ++ X509v3 Authority Key Identifier: ++ 59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45 ++ Signature Algorithm: ecdsa-with-SHA512 ++ Signature Value: ++ 30:81:87:02:42:01:2d:da:ae:f5:2e:78:b6:66:b8:9f:b6:70: ++ 7f:66:74:cf:ec:8e:7c:fe:c0:01:79:9a:ce:52:02:e7:c3:d1: ++ 0c:7a:6d:cb:b5:5e:ee:17:a4:9b:db:04:76:ee:29:29:e8:af: ++ fb:ad:ac:52:f4:d7:2b:d6:77:84:10:bd:c5:d2:28:68:34:02: ++ 41:35:76:5a:75:f3:92:86:08:f5:b2:1e:0a:f6:65:0b:da:76: ++ c7:52:ff:0b:1e:80:70:22:30:c3:33:db:18:ed:84:d7:8b:ec: ++ ed:d3:a8:63:81:b5:56:7c:47:c7:56:30:94:68:73:6b:d2:2e: ++ a9:b9:d9:2c:1c:29:bd:0c:ba:b9:65:8b ++-----BEGIN CERTIFICATE----- ++MIICzzCCAjGgAwIBAgINAOhvGHvWOWuYSkmYCjAKBggqhkjOPQQDBDB1MQswCQYD ++VQQGEwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFjAUBgNVBAoMDU1pY3Jvc2VjIEx0 ++ZC4xFzAVBgNVBGEMDlZBVEhVLTIzNTg0NDk3MSIwIAYDVQQDDBllLVN6aWdubyBU ++TFMgUm9vdCBDQSAyMDIzMB4XDTIzMDcxNzE0MDAwMFoXDTM4MDcxNzE0MDAwMFow ++dTELMAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRYwFAYDVQQKDA1NaWNy ++b3NlYyBMdGQuMRcwFQYDVQRhDA5WQVRIVS0yMzU4NDQ5NzEiMCAGA1UEAwwZZS1T ++emlnbm8gVExTIFJvb3QgQ0EgMjAyMzCBmzAQBgcqhkjOPQIBBgUrgQQAIwOBhgAE ++AGgP36J8PKp0iGEKjcJMpQEiFNT3YHdCnAo4YKGMZz6zY+n6kbCLS+Y53wLCMAFS ++AL/fjO1ZrTJlqwlZULUZwmgcAOAFX9pQJhzDrAQixTpN7+lXWDajwRlTEArRzT/v ++SzUaQ49CE0y5LBqcvjC2xN7cS53kpDzLLtmt3999Cd8ukv+ho2MwYTAPBgNVHRMB ++Af8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUWYQCYlpGePVd3I8K ++ECgj3NXW+0UwHwYDVR0jBBgwFoAUWYQCYlpGePVd3I8KECgj3NXW+0UwCgYIKoZI ++zj0EAwQDgYsAMIGHAkIBLdqu9S54tma4n7Zwf2Z0z+yOfP7AAXmazlIC58PRDHpt ++y7Ve7hekm9sEdu4pKeiv+62sUvTXK9Z3hBC9xdIoaDQCQTV2WnXzkoYI9bIeCvZl ++C9p2x1L/Cx6AcCIwwzPbGO2E14vs7dOoY4G1VnxHx1YwlGhza9IuqbnZLBwpvQy6 ++uWWL ++-----END CERTIFICATE----- ++ ++# eec997c0c30f216f7e3b8b307d2bae42412d753fc8219dafd1520b2572850f49 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 23:f9:c3:d6:35:af:8f:28:4b:1f:f0:54:ea:7e:97:9d ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C=CH, O=OISTE Foundation, CN=OISTE Server Root ECC G1 ++ Validity ++ Not Before: May 31 14:42:28 2023 GMT ++ Not After : May 24 14:42:27 2048 GMT ++ Subject: C=CH, O=OISTE Foundation, CN=OISTE Server Root ECC G1 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:17:2f:fa:12:bc:ac:18:f3:0a:f4:44:d6:76:42: ++ 9e:b3:e8:1f:b7:79:a9:58:b6:f8:65:d1:3a:21:4f: ++ a8:eb:a3:be:a4:32:72:f3:b6:01:c9:2b:fd:77:85: ++ 6e:53:dd:ad:ea:aa:2e:25:92:b6:e9:21:11:a8:af: ++ b5:4c:0b:f3:96:60:9a:3b:e7:ea:1a:78:2e:b4:3d: ++ e5:28:de:1c:80:ba:5c:6e:0d:db:19:a5:e3:3f:9c: ++ 2a:b8:40:4b:dd:e6:4f ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ 37:4D:88:65:CF:FC:3D:8A:D5:A3:F1:49:C0:4E:0C:10:6F:42:B4:9C ++ X509v3 Subject Key Identifier: ++ 37:4D:88:65:CF:FC:3D:8A:D5:A3:F1:49:C0:4E:0C:10:6F:42:B4:9C ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: ecdsa-with-SHA384 ++ Signature Value: ++ 30:66:02:31:00:a9:2a:30:1d:d0:c2:9f:90:51:51:40:3e:95: ++ 54:21:cd:16:66:f7:53:6c:08:16:39:d0:12:7c:7f:63:1b:df: ++ e3:38:00:39:d9:2d:53:20:45:0b:1c:60:67:31:43:25:ed:02: ++ 31:00:92:89:ae:e9:5c:62:83:62:61:f9:2d:57:ab:56:b9:11: ++ dd:25:be:6a:4e:4a:1a:82:6b:dc:cf:d3:bc:4a:b3:3c:d7:2e: ++ 9b:db:f8:28:69:bc:6b:2d:ec:31:a1:3a:e3:57 ++-----BEGIN CERTIFICATE----- ++MIICNTCCAbqgAwIBAgIQI/nD1jWvjyhLH/BU6n6XnTAKBggqhkjOPQQDAzBLMQsw ++CQYDVQQGEwJDSDEZMBcGA1UECgwQT0lTVEUgRm91bmRhdGlvbjEhMB8GA1UEAwwY ++T0lTVEUgU2VydmVyIFJvb3QgRUNDIEcxMB4XDTIzMDUzMTE0NDIyOFoXDTQ4MDUy ++NDE0NDIyN1owSzELMAkGA1UEBhMCQ0gxGTAXBgNVBAoMEE9JU1RFIEZvdW5kYXRp ++b24xITAfBgNVBAMMGE9JU1RFIFNlcnZlciBSb290IEVDQyBHMTB2MBAGByqGSM49 ++AgEGBSuBBAAiA2IABBcv+hK8rBjzCvRE1nZCnrPoH7d5qVi2+GXROiFPqOujvqQy ++cvO2Ackr/XeFblPdreqqLiWStukhEaivtUwL85Zgmjvn6hp4LrQ95SjeHIC6XG4N ++2xml4z+cKrhAS93mT6NjMGEwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBQ3 ++TYhlz/w9itWj8UnATgwQb0K0nDAdBgNVHQ4EFgQUN02IZc/8PYrVo/FJwE4MEG9C ++tJwwDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMDA2kAMGYCMQCpKjAd0MKfkFFR ++QD6VVCHNFmb3U2wIFjnQEnx/Yxvf4zgAOdktUyBFCxxgZzFDJe0CMQCSia7pXGKD ++YmH5LVerVrkR3SW+ak5KGoJr3M/TvEqzPNcum9v4KGm8ay3sMaE641c= ++-----END CERTIFICATE----- ++ ++# 9ae36232a5189ffddb353dfd26520c015395d22777dac59db57b98c089a651e6 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 55:a5:d9:67:94:28:c6:ed:0c:fa:27:dd:5b:01:4d:18 ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C=CH, O=OISTE Foundation, CN=OISTE Server Root RSA G1 ++ Validity ++ Not Before: May 31 14:37:16 2023 GMT ++ Not After : May 24 14:37:15 2048 GMT ++ Subject: C=CH, O=OISTE Foundation, CN=OISTE Server Root RSA G1 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:aa:ae:f4:ab:82:cf:fb:e5:37:0b:e7:d5:96:ad: ++ 90:e8:4b:29:dc:55:60:e3:cc:bc:b3:bc:2d:92:b9: ++ e4:a3:7a:f1:81:b4:9e:72:72:43:df:3f:ab:0b:26: ++ b4:ee:7b:1a:69:fb:28:d0:72:5c:4a:6d:69:99:f0: ++ 63:1e:0c:d2:b1:ff:d6:8c:34:d0:ee:db:ac:48:b9: ++ ea:b0:14:8e:d8:07:a9:24:98:dd:e9:09:be:a8:22: ++ 1b:59:39:d1:27:87:dc:1c:cd:f8:fb:b3:eb:e9:93: ++ 78:ed:0f:ce:37:7c:26:77:6e:a1:d8:2c:21:4c:e4: ++ 8a:4f:c7:13:3c:6e:c7:d5:13:97:b2:a8:db:24:69: ++ 83:56:d3:69:cb:82:12:bb:9d:1b:f2:f8:34:f2:98: ++ 2b:2a:8e:04:67:f6:e3:87:a1:1d:ad:6e:ce:36:74: ++ 0e:5e:33:3b:cb:db:51:97:94:6a:95:3c:ce:18:5a: ++ 6e:4b:c6:fc:07:8f:2e:1a:b9:4a:f7:64:34:29:dc: ++ a6:8d:50:e1:8d:8b:4b:e5:48:1b:6e:2e:80:10:3f: ++ e4:9f:1b:65:3f:11:b4:ea:57:69:9f:b4:00:eb:85: ++ 24:99:24:f5:21:9d:97:aa:fb:34:7f:02:6b:15:90: ++ ad:bb:9e:5a:19:7f:a4:8c:d8:fa:6d:28:fc:38:c7: ++ e3:4c:ad:6a:ce:d9:4e:93:92:8e:cc:0c:67:bf:0b: ++ 4b:96:ce:66:67:53:68:cb:17:11:8e:59:f7:ac:9c: ++ 1b:b9:8e:68:44:b7:18:af:e6:e5:0f:65:dc:95:09: ++ b0:93:12:b5:1f:3e:94:a5:c7:88:75:21:b1:de:09: ++ 24:2a:4c:e2:bc:ec:4c:67:47:c2:29:88:b9:0a:ba: ++ f9:c1:74:ce:8c:18:26:65:da:f7:6f:c6:8c:7b:68: ++ 5c:0b:ee:63:c0:5e:4b:f1:4e:cc:9f:2f:0f:e1:e8: ++ 9a:7a:93:f1:e0:c8:db:bf:27:e6:65:29:7b:36:e0: ++ 33:15:73:f2:9d:6b:84:08:68:2b:36:07:2b:27:cc: ++ 78:d8:6a:87:0e:47:74:f4:aa:a0:13:5d:64:7e:f4: ++ db:14:ae:fb:3a:e4:2f:c1:65:e3:b9:7a:40:6c:f0: ++ 06:b7:7b:28:9b:d7:e1:5f:38:73:94:ac:d9:70:93: ++ 2d:dc:84:af:46:1c:a2:7a:2c:3f:81:26:42:e7:d4: ++ d8:c5:6c:84:66:11:8b:77:6b:54:1c:a3:b5:d8:10: ++ f0:ae:29:f7:67:08:88:17:5c:b8:97:79:cf:ea:2b: ++ 2a:ee:58:33:e5:6d:e9:29:aa:65:01:0d:82:13:ec: ++ 25:0b:5d:2c:40:72:15:29:d3:90:2c:f7:1a:43:d5: ++ 6a:f0:69 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ F2:C9:C1:0F:0D:63:00:BB:EC:45:0E:4A:1F:B5:B1:B3:36:CD:0E:8D ++ X509v3 Subject Key Identifier: ++ F2:C9:C1:0F:0D:63:00:BB:EC:45:0E:4A:1F:B5:B1:B3:36:CD:0E:8D ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: sha384WithRSAEncryption ++ Signature Value: ++ 34:67:79:b2:3a:c6:e5:3d:f7:23:72:b9:09:ef:92:ad:27:1f: ++ a0:4e:0a:b2:f5:da:17:0c:a2:85:d2:7e:92:51:fd:15:65:d7: ++ 5c:6b:64:16:ee:8a:45:ca:0c:43:36:44:35:d9:7f:fe:79:3a: ++ 1c:e8:c6:e4:3d:6b:77:d4:21:10:e3:f6:f3:20:4e:a9:be:89: ++ f3:1c:9c:a9:df:bc:30:3a:17:d1:32:43:d0:aa:8a:72:1c:51: ++ 28:4c:dd:36:c8:e4:2d:67:7d:91:87:1c:9d:bc:fc:ab:28:96: ++ 5e:61:5c:b8:22:33:18:48:16:50:ea:ca:2f:e9:a5:49:dc:7f: ++ 3c:a4:19:bc:36:ad:92:e2:b9:f4:4b:d5:eb:08:ad:e7:78:fe: ++ 17:c0:5d:87:77:e8:67:77:4f:00:66:af:f4:b1:03:3a:be:12: ++ 7c:41:35:e5:f4:a6:1b:47:8b:cb:79:f7:d6:bf:17:6e:4e:65: ++ f0:f8:da:57:c1:94:81:e5:7a:56:0d:bb:46:7f:6f:91:fd:7d: ++ e6:17:e4:81:27:bb:05:88:56:dd:20:a5:f7:98:2d:91:19:69: ++ 31:5f:9b:30:f2:99:ad:72:40:96:cc:d8:77:66:9b:b4:d5:0e: ++ b2:10:fe:14:aa:c3:80:71:9d:3d:8d:e8:7d:14:6c:61:64:86: ++ 46:a6:d7:54:c5:b6:d7:90:16:46:a5:85:ca:9e:3a:e3:e6:13: ++ 16:b6:15:23:cc:a9:29:52:fd:00:c6:f6:90:8e:56:8f:89:08: ++ dd:96:aa:e6:d3:6a:a9:86:35:f6:d5:45:78:42:4a:46:fc:03: ++ c8:5e:d8:66:f6:45:65:24:b4:be:87:7b:55:20:9d:f7:9d:b5: ++ 2a:fc:b9:62:19:cb:6c:3b:af:d3:6d:38:6c:ab:7b:a6:1e:8d: ++ fc:e9:9e:fe:6b:15:b9:db:82:9a:cb:98:df:73:a1:90:a0:a0: ++ c5:e0:e8:01:a8:a3:14:9c:c8:c1:9a:ac:15:50:33:8d:ed:7c: ++ 2a:8b:73:95:40:43:26:fc:81:a4:2a:5f:39:90:b7:27:cb:51: ++ 77:f8:96:93:1e:cf:f2:77:7d:1f:46:93:a2:59:1e:95:44:c5: ++ 2d:75:64:b0:d6:f9:e0:3c:69:ea:04:b5:1c:0b:e2:46:44:4d: ++ 43:3b:97:49:71:11:bd:24:b6:c2:ad:72:54:06:fe:6b:18:f9: ++ 77:db:29:2c:52:9e:6d:77:7b:62:fd:0f:4d:8e:98:32:30:30: ++ 71:12:d6:25:35:e3:9f:f8:6f:9c:b5:eb:6a:1b:ad:ea:10:d3: ++ 96:16:72:06:21:25:c6:4c:bc:8f:70:bb:0c:e4:5e:22:83:2d: ++ d2:be:fe:85:5b:b4:e4:bd ++-----BEGIN CERTIFICATE----- ++MIIFgzCCA2ugAwIBAgIQVaXZZ5Qoxu0M+ifdWwFNGDANBgkqhkiG9w0BAQwFADBL ++MQswCQYDVQQGEwJDSDEZMBcGA1UECgwQT0lTVEUgRm91bmRhdGlvbjEhMB8GA1UE ++AwwYT0lTVEUgU2VydmVyIFJvb3QgUlNBIEcxMB4XDTIzMDUzMTE0MzcxNloXDTQ4 ++MDUyNDE0MzcxNVowSzELMAkGA1UEBhMCQ0gxGTAXBgNVBAoMEE9JU1RFIEZvdW5k ++YXRpb24xITAfBgNVBAMMGE9JU1RFIFNlcnZlciBSb290IFJTQSBHMTCCAiIwDQYJ ++KoZIhvcNAQEBBQADggIPADCCAgoCggIBAKqu9KuCz/vlNwvn1ZatkOhLKdxVYOPM ++vLO8LZK55KN68YG0nnJyQ98/qwsmtO57Gmn7KNByXEptaZnwYx4M0rH/1ow00O7b ++rEi56rAUjtgHqSSY3ekJvqgiG1k50SeH3BzN+Puz6+mTeO0Pzjd8JnduodgsIUzk ++ik/HEzxux9UTl7Ko2yRpg1bTacuCErudG/L4NPKYKyqOBGf244ehHa1uzjZ0Dl4z ++O8vbUZeUapU8zhhabkvG/AePLhq5SvdkNCncpo1Q4Y2LS+VIG24ugBA/5J8bZT8R ++tOpXaZ+0AOuFJJkk9SGdl6r7NH8CaxWQrbueWhl/pIzY+m0o/DjH40ytas7ZTpOS ++jswMZ78LS5bOZmdTaMsXEY5Z96ycG7mOaES3GK/m5Q9l3JUJsJMStR8+lKXHiHUh ++sd4JJCpM4rzsTGdHwimIuQq6+cF0zowYJmXa92/GjHtoXAvuY8BeS/FOzJ8vD+Ho ++mnqT8eDI278n5mUpezbgMxVz8p1rhAhoKzYHKyfMeNhqhw5HdPSqoBNdZH702xSu +++zrkL8Fl47l6QGzwBrd7KJvX4V84c5Ss2XCTLdyEr0YconosP4EmQufU2MVshGYR ++i3drVByjtdgQ8K4p92cIiBdcuJd5z+orKu5YM+Vt6SmqZQENghPsJQtdLEByFSnT ++kCz3GkPVavBpAgMBAAGjYzBhMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU ++8snBDw1jALvsRQ5KH7WxszbNDo0wHQYDVR0OBBYEFPLJwQ8NYwC77EUOSh+1sbM2 ++zQ6NMA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQwFAAOCAgEANGd5sjrG5T33 ++I3K5Ce+SrScfoE4KsvXaFwyihdJ+klH9FWXXXGtkFu6KRcoMQzZENdl//nk6HOjG ++5D1rd9QhEOP28yBOqb6J8xycqd+8MDoX0TJD0KqKchxRKEzdNsjkLWd9kYccnbz8 ++qyiWXmFcuCIzGEgWUOrKL+mlSdx/PKQZvDatkuK59EvV6wit53j+F8Bdh3foZ3dP ++AGav9LEDOr4SfEE15fSmG0eLy3n31r8Xbk5l8PjaV8GUgeV6Vg27Rn9vkf195hfk ++gSe7BYhW3SCl95gtkRlpMV+bMPKZrXJAlszYd2abtNUOshD+FKrDgHGdPY3ofRRs ++YWSGRqbXVMW215AWRqWFyp464+YTFrYVI8ypKVL9AMb2kI5Wj4kI3Zaq5tNqqYY1 ++9tVFeEJKRvwDyF7YZvZFZSS0vod7VSCd9521Kvy5YhnLbDuv0204bKt7ph6N/Ome ++/msVuduCmsuY33OhkKCgxeDoAaijFJzIwZqsFVAzje18KotzlUBDJvyBpCpfOZC3 ++J8tRd/iWkx7P8nd9H0aTolkelUTFLXVksNb54Dxp6gS1HAviRkRNQzuXSXERvSS2 ++wq1yVAb+axj5d9spLFKebXd7Yv0PTY6YMjAwcRLWJTXjn/hvnLXrahut6hDTlhZy ++BiElxky8j3C7DOReIoMt0r7+hVu05L0= ++-----END CERTIFICATE----- ++ ++# 552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4 ++ Validity ++ Not Before: Aug 1 12:00:00 2013 GMT ++ Not After : Jan 15 12:00:00 2038 GMT ++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:bf:e6:90:73:68:de:bb:e4:5d:4a:3c:30:22:30: ++ 69:33:ec:c2:a7:25:2e:c9:21:3d:f2:8a:d8:59:c2: ++ e1:29:a7:3d:58:ab:76:9a:cd:ae:7b:1b:84:0d:c4: ++ 30:1f:f3:1b:a4:38:16:eb:56:c6:97:6d:1d:ab:b2: ++ 79:f2:ca:11:d2:e4:5f:d6:05:3c:52:0f:52:1f:c6: ++ 9e:15:a5:7e:be:9f:a9:57:16:59:55:72:af:68:93: ++ 70:c2:b2:ba:75:99:6a:73:32:94:d1:10:44:10:2e: ++ df:82:f3:07:84:e6:74:3b:6d:71:e2:2d:0c:1b:ee: ++ 20:d5:c9:20:1d:63:29:2d:ce:ec:5e:4e:c8:93:f8: ++ 21:61:9b:34:eb:05:c6:5e:ec:5b:1a:bc:eb:c9:cf: ++ cd:ac:34:40:5f:b1:7a:66:ee:77:c8:48:a8:66:57: ++ 57:9f:54:58:8e:0c:2b:b7:4f:a7:30:d9:56:ee:ca: ++ 7b:5d:e3:ad:c9:4f:5e:e5:35:e7:31:cb:da:93:5e: ++ dc:8e:8f:80:da:b6:91:98:40:90:79:c3:78:c7:b6: ++ b1:c4:b5:6a:18:38:03:10:8d:d8:d4:37:a4:2e:05: ++ 7d:88:f5:82:3e:10:91:70:ab:55:82:41:32:d7:db: ++ 04:73:2a:6e:91:01:7c:21:4c:d4:bc:ae:1b:03:75: ++ 5d:78:66:d9:3a:31:44:9a:33:40:bf:08:d7:5a:49: ++ a4:c2:e6:a9:a0:67:dd:a4:27:bc:a1:4f:39:b5:11: ++ 58:17:f7:24:5c:46:8f:64:f7:c1:69:88:76:98:76: ++ 3d:59:5d:42:76:87:89:97:69:7a:48:f0:e0:a2:12: ++ 1b:66:9a:74:ca:de:4b:1e:e7:0e:63:ae:e6:d4:ef: ++ 92:92:3a:9e:3d:dc:00:e4:45:25:89:b6:9a:44:19: ++ 2b:7e:c0:94:b4:d2:61:6d:eb:33:d9:c5:df:4b:04: ++ 00:cc:7d:1c:95:c3:8f:f7:21:b2:b2:11:b7:bb:7f: ++ f2:d5:8c:70:2c:41:60:aa:b1:63:18:44:95:1a:76: ++ 62:7e:f6:80:b0:fb:e8:64:a6:33:d1:89:07:e1:bd: ++ b7:e6:43:a4:18:b8:a6:77:01:e1:0f:94:0c:21:1d: ++ b2:54:29:25:89:6c:e5:0e:52:51:47:74:be:26:ac: ++ b6:41:75:de:7a:ac:5f:8d:3f:c9:bc:d3:41:11:12: ++ 5b:e5:10:50:eb:31:c5:ca:72:16:22:09:df:7c:4c: ++ 75:3f:63:ec:21:5f:c4:20:51:6b:6f:b1:ab:86:8b: ++ 4f:c2:d6:45:5f:9d:20:fc:a1:1e:c5:c0:8f:a2:b1: ++ 7e:0a:26:99:f5:e4:69:2f:98:1d:2d:f5:d9:a9:b2: ++ 1d:e5:1b ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ EC:D7:E3:82:D2:71:5D:64:4C:DF:2E:67:3F:E7:BA:98:AE:1C:0F:4F ++ Signature Algorithm: sha384WithRSAEncryption ++ bb:61:d9:7d:a9:6c:be:17:c4:91:1b:c3:a1:a2:00:8d:e3:64: ++ 68:0f:56:cf:77:ae:70:f9:fd:9a:4a:99:b9:c9:78:5c:0c:0c: ++ 5f:e4:e6:14:29:56:0b:36:49:5d:44:63:e0:ad:9c:96:18:66: ++ 1b:23:0d:3d:79:e9:6d:6b:d6:54:f8:d2:3c:c1:43:40:ae:1d: ++ 50:f5:52:fc:90:3b:bb:98:99:69:6b:c7:c1:a7:a8:68:a4:27: ++ dc:9d:f9:27:ae:30:85:b9:f6:67:4d:3a:3e:8f:59:39:22:53: ++ 44:eb:c8:5d:03:ca:ed:50:7a:7d:62:21:0a:80:c8:73:66:d1: ++ a0:05:60:5f:e8:a5:b4:a7:af:a8:f7:6d:35:9c:7c:5a:8a:d6: ++ a2:38:99:f3:78:8b:f4:4d:d2:20:0b:de:04:ee:8c:9b:47:81: ++ 72:0d:c0:14:32:ef:30:59:2e:ae:e0:71:f2:56:e4:6a:97:6f: ++ 92:50:6d:96:8d:68:7a:9a:b2:36:14:7a:06:f2:24:b9:09:11: ++ 50:d7:08:b1:b8:89:7a:84:23:61:42:29:e5:a3:cd:a2:20:41: ++ d7:d1:9c:64:d9:ea:26:a1:8b:14:d7:4c:19:b2:50:41:71:3d: ++ 3f:4d:70:23:86:0c:4a:dc:81:d2:cc:32:94:84:0d:08:09:97: ++ 1c:4f:c0:ee:6b:20:74:30:d2:e0:39:34:10:85:21:15:01:08: ++ e8:55:32:de:71:49:d9:28:17:50:4d:e6:be:4d:d1:75:ac:d0: ++ ca:fb:41:b8:43:a5:aa:d3:c3:05:44:4f:2c:36:9b:e2:fa:e2: ++ 45:b8:23:53:6c:06:6f:67:55:7f:46:b5:4c:3f:6e:28:5a:79: ++ 26:d2:a4:a8:62:97:d2:1e:e2:ed:4a:8b:bc:1b:fd:47:4a:0d: ++ df:67:66:7e:b2:5b:41:d0:3b:e4:f4:3b:f4:04:63:e9:ef:c2: ++ 54:00:51:a0:8a:2a:c9:ce:78:cc:d5:ea:87:04:18:b3:ce:af: ++ 49:88:af:f3:92:99:b6:b3:e6:61:0f:d2:85:00:e7:50:1a:e4: ++ 1b:95:9d:19:a1:b9:9c:b1:9b:b1:00:1e:ef:d0:0f:4f:42:6c: ++ c9:0a:bc:ee:43:fa:3a:71:a5:c8:4d:26:a5:35:fd:89:5d:bc: ++ 85:62:1d:32:d2:a0:2b:54:ed:9a:57:c1:db:fa:10:cf:19:b7: ++ 8b:4a:1b:8f:01:b6:27:95:53:e8:b6:89:6d:5b:bc:68:d4:23: ++ e8:8b:51:a2:56:f9:f0:a6:80:a0:d6:1e:b3:bc:0f:0f:53:75: ++ 29:aa:ea:13:77:e4:de:8c:81:21:ad:07:10:47:11:ad:87:3d: ++ 07:d1:75:bc:cf:f3:66:7e ++-----BEGIN CERTIFICATE----- ++MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBi ++MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 ++d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg ++RzQwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBiMQswCQYDVQQGEwJV ++UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu ++Y29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0GCSqG ++SIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3y ++ithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1If ++xp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDV ++ySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfISKhmV1efVFiO ++DCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jHtrHEtWoYOAMQ ++jdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6MUSaM0C/ ++CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCi ++EhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADM ++fRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QY ++uKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXK ++chYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4KJpn15GkvmB0t ++9dmpsh3lGwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB ++hjAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wDQYJKoZIhvcNAQEMBQAD ++ggIBALth2X2pbL4XxJEbw6GiAI3jZGgPVs93rnD5/ZpKmbnJeFwMDF/k5hQpVgs2 ++SV1EY+CtnJYYZhsjDT156W1r1lT40jzBQ0CuHVD1UvyQO7uYmWlrx8GnqGikJ9yd +++SeuMIW59mdNOj6PWTkiU0TryF0Dyu1Qen1iIQqAyHNm0aAFYF/opbSnr6j3bTWc ++fFqK1qI4mfN4i/RN0iAL3gTujJtHgXINwBQy7zBZLq7gcfJW5GqXb5JQbZaNaHqa ++sjYUegbyJLkJEVDXCLG4iXqEI2FCKeWjzaIgQdfRnGTZ6iahixTXTBmyUEFxPT9N ++cCOGDErcgdLMMpSEDQgJlxxPwO5rIHQw0uA5NBCFIRUBCOhVMt5xSdkoF1BN5r5N ++0XWs0Mr7QbhDparTwwVETyw2m+L64kW4I1NsBm9nVX9GtUw/bihaeSbSpKhil9Ie ++4u1Ki7wb/UdKDd9nZn6yW0HQO+T0O/QEY+nvwlQAUaCKKsnOeMzV6ocEGLPOr0mI ++r/OSmbaz5mEP0oUA51Aa5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1 ++/YldvIViHTLSoCtU7ZpXwdv6EM8Zt4tKG48BtieVU+i2iW1bvGjUI+iLUaJW+fCm ++gKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+ ++-----END CERTIFICATE----- ++ ++# 7d05ebb682339f8c9451ee094eebfefa7953a114edb2f44949452fab7d2fc185 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 0b:93:1c:3a:d6:39:67:ea:67:23:bf:c3:af:9a:f4:4b ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2 ++ Validity ++ Not Before: Aug 1 12:00:00 2013 GMT ++ Not After : Jan 15 12:00:00 2038 GMT ++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:d9:e7:28:2f:52:3f:36:72:49:88:93:34:f3:f8: ++ 6a:1e:31:54:80:9f:ad:54:41:b5:47:df:96:a8:d4: ++ af:80:2d:b9:0a:cf:75:fd:89:a5:7d:24:fa:e3:22: ++ 0c:2b:bc:95:17:0b:33:bf:19:4d:41:06:90:00:bd: ++ 0c:4d:10:fe:07:b5:e7:1c:6e:22:55:31:65:97:bd: ++ d3:17:d2:1e:62:f3:db:ea:6c:50:8c:3f:84:0c:96: ++ cf:b7:cb:03:e0:ca:6d:a1:14:4c:1b:89:dd:ed:00: ++ b0:52:7c:af:91:6c:b1:38:13:d1:e9:12:08:c0:00: ++ b0:1c:2b:11:da:77:70:36:9b:ae:ce:79:87:dc:82: ++ 70:e6:09:74:70:55:69:af:a3:68:9f:bf:dd:b6:79: ++ b3:f2:9d:70:29:55:f4:ab:ff:95:61:f3:c9:40:6f: ++ 1d:d1:be:93:bb:d3:88:2a:bb:9d:bf:72:5a:56:71: ++ 3b:3f:d4:f3:d1:0a:fe:28:ef:a3:ee:d9:99:af:03: ++ d3:8f:60:b7:f2:92:a1:b1:bd:89:89:1f:30:cd:c3: ++ a6:2e:62:33:ae:16:02:77:44:5a:e7:81:0a:3c:a7: ++ 44:2e:79:b8:3f:04:bc:5c:a0:87:e1:1b:af:51:8e: ++ cd:ec:2c:fa:f8:fe:6d:f0:3a:7c:aa:8b:e4:67:95: ++ 31:8d ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ CE:C3:4A:B9:99:55:F2:B8:DB:60:BF:A9:7E:BD:56:B5:97:36:A7:D6 ++ Signature Algorithm: sha256WithRSAEncryption ++ ca:a5:55:8c:e3:c8:41:6e:69:27:a7:75:11:ef:3c:86:36:6f: ++ d2:9d:c6:78:38:1d:69:96:a2:92:69:2e:38:6c:9b:7d:04:d4: ++ 89:a5:b1:31:37:8a:c9:21:cc:ab:6c:cd:8b:1c:9a:d6:bf:48: ++ d2:32:66:c1:8a:c0:f3:2f:3a:ef:c0:e3:d4:91:86:d1:50:e3: ++ 03:db:73:77:6f:4a:39:53:ed:de:26:c7:b5:7d:af:2b:42:d1: ++ 75:62:e3:4a:2b:02:c7:50:4b:e0:69:e2:96:6c:0e:44:66:10: ++ 44:8f:ad:05:eb:f8:79:ac:a6:1b:e8:37:34:9d:53:c9:61:aa: ++ a2:52:af:4a:70:16:86:c2:3a:c8:b1:13:70:36:d8:cf:ee:f4: ++ 0a:34:d5:5b:4c:fd:07:9c:a2:ba:d9:01:72:5c:f3:4d:c1:dd: ++ 0e:b1:1c:0d:c4:63:be:ad:f4:14:fb:89:ec:a2:41:0e:4c:cc: ++ c8:57:40:d0:6e:03:aa:cd:0c:8e:89:99:99:6c:f0:3c:30:af: ++ 38:df:6f:bc:a3:be:29:20:27:ab:74:ff:13:22:78:de:97:52: ++ 55:1e:83:b5:54:20:03:ee:ae:c0:4f:56:de:37:cc:c3:7f:aa: ++ 04:27:bb:d3:77:b8:62:db:17:7c:9c:28:22:13:73:6c:cf:26: ++ f5:8a:29:e7 ++-----BEGIN CERTIFICATE----- ++MIIDljCCAn6gAwIBAgIQC5McOtY5Z+pnI7/Dr5r0SzANBgkqhkiG9w0BAQsFADBl ++MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 ++d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv ++b3QgRzIwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQG ++EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl ++cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIwggEi ++MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5ygvUj82ckmIkzTz+GoeMVSA ++n61UQbVH35ao1K+ALbkKz3X9iaV9JPrjIgwrvJUXCzO/GU1BBpAAvQxNEP4Htecc ++biJVMWWXvdMX0h5i89vqbFCMP4QMls+3ywPgym2hFEwbid3tALBSfK+RbLE4E9Hp ++EgjAALAcKxHad3A2m67OeYfcgnDmCXRwVWmvo2ifv922ebPynXApVfSr/5Vh88lA ++bx3RvpO704gqu52/clpWcTs/1PPRCv4o76Pu2ZmvA9OPYLfykqGxvYmJHzDNw6Yu ++YjOuFgJ3RFrngQo8p0Quebg/BLxcoIfhG69Rjs3sLPr4/m3wOnyqi+RnlTGNAgMB ++AAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQW ++BBTOw0q5mVXyuNtgv6l+vVa1lzan1jANBgkqhkiG9w0BAQsFAAOCAQEAyqVVjOPI ++QW5pJ6d1Ee88hjZv0p3GeDgdaZaikmkuOGybfQTUiaWxMTeKySHMq2zNixya1r9I ++0jJmwYrA8y8678Dj1JGG0VDjA9tzd29KOVPt3ibHtX2vK0LRdWLjSisCx1BL4Gni ++lmwORGYQRI+tBev4eaymG+g3NJ1TyWGqolKvSnAWhsI6yLETcDbYz+70CjTVW0z9 ++B5yiutkBclzzTcHdDrEcDcRjvq30FPuJ7KJBDkzMyFdA0G4Dqs0MjomZmWzwPDCv ++ON9vvKO+KSAnq3T/EyJ43pdSVR6DtVQgA+6uwE9W3jfMw3+qBCe703e4YtsXfJwo ++IhNzbM8m9Yop5w== ++-----END CERTIFICATE----- ++ ++# 7e37cb8b4c47090cab36551ba6f45db840680fba166a952db100717f43053fc2 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 0b:a1:5a:fa:1d:df:a0:b5:49:44:af:cd:24:a0:6c:ec ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3 ++ Validity ++ Not Before: Aug 1 12:00:00 2013 GMT ++ Not After : Jan 15 12:00:00 2038 GMT ++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:19:e7:bc:ac:44:65:ed:cd:b8:3f:58:fb:8d:b1: ++ 57:a9:44:2d:05:15:f2:ef:0b:ff:10:74:9f:b5:62: ++ 52:5f:66:7e:1f:e5:dc:1b:45:79:0b:cc:c6:53:0a: ++ 9d:8d:5d:02:d9:a9:59:de:02:5a:f6:95:2a:0e:8d: ++ 38:4a:8a:49:c6:bc:c6:03:38:07:5f:55:da:7e:09: ++ 6e:e2:7f:5e:d0:45:20:0f:59:76:10:d6:a0:24:f0: ++ 2d:de:36:f2:6c:29:39 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ CB:D0:BD:A9:E1:98:05:51:A1:4D:37:A2:83:79:CE:8D:1D:2A:E4:84 ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:64:02:30:25:a4:81:45:02:6b:12:4b:75:74:4f:c8:23:e3: ++ 70:f2:75:72:de:7c:89:f0:cf:91:72:61:9e:5e:10:92:59:56: ++ b9:83:c7:10:e7:38:e9:58:26:36:7d:d5:e4:34:86:39:02:30: ++ 7c:36:53:f0:30:e5:62:63:3a:99:e2:b6:a3:3b:9b:34:fa:1e: ++ da:10:92:71:5e:91:13:a7:dd:a4:6e:92:cc:32:d6:f5:21:66: ++ c7:2f:ea:96:63:6a:65:45:92:95:01:b4 ++-----BEGIN CERTIFICATE----- ++MIICRjCCAc2gAwIBAgIQC6Fa+h3foLVJRK/NJKBs7DAKBggqhkjOPQQDAzBlMQsw ++CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu ++ZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3Qg ++RzMwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQGEwJV ++UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu ++Y29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwdjAQBgcq ++hkjOPQIBBgUrgQQAIgNiAAQZ57ysRGXtzbg/WPuNsVepRC0FFfLvC/8QdJ+1YlJf ++Zn4f5dwbRXkLzMZTCp2NXQLZqVneAlr2lSoOjThKiknGvMYDOAdfVdp+CW7if17Q ++RSAPWXYQ1qAk8C3eNvJsKTmjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/ ++BAQDAgGGMB0GA1UdDgQWBBTL0L2p4ZgFUaFNN6KDec6NHSrkhDAKBggqhkjOPQQD ++AwNnADBkAjAlpIFFAmsSS3V0T8gj43DydXLefInwz5FyYZ5eEJJZVrmDxxDnOOlY ++JjZ91eQ0hjkCMHw2U/Aw5WJjOpnitqM7mzT6HtoQknFekROn3aRukswy1vUhZscv ++6pZjamVFkpUBtA== + -----END CERTIFICATE----- +\ No newline at end of file diff --git a/meta-oe/recipes-devtools/grpc/grpc_1.84.0.bb b/meta-oe/recipes-devtools/grpc/grpc_1.84.0.bb index e38fbb292b..05b3dd5aa4 100644 --- a/meta-oe/recipes-devtools/grpc/grpc_1.84.0.bb +++ b/meta-oe/recipes-devtools/grpc/grpc_1.84.0.bb @@ -31,6 +31,7 @@ SRC_URI = "gitsm://github.com/grpc/grpc.git;protocol=https;branch=${BRANCH};tag= file://0002-tsi-fix-OpenSSL-4.0-const-and-opaque-compatibility.patch \ file://0003-tsi-fix-ssl_transport_security_utils-for-OpenSSL-4.0.patch \ file://0004-tsi-fix-remaining-const-qualifiers-for-OpenSSL-4.0.patch \ + file://0001-security-Update-gRPC-repo-roots.-43699.patch \ " inherit cmake pkgconfig From patchwork Wed Oct 28 04:23:45 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102216 Received: from mail-pl1-f180.google.com (mail-pl1-f180.google.com [209.85.214.180]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36077.1793161569120167304 for ; Tue, 27 Oct 2026 21:26:09 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=aeERwhU9; spf=pass (domain: gmail.com, ip: 209.85.214.180, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pl1-f180.google.com with SMTP id d9443c01a7336-2e99b1e5b4cso2723675ad.0 for ; Tue, 27 Oct 2026 21:26:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161568; x=1793766368; darn=lists.openembedded.org; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=kFPSOj8lzs9kzeceuoAtELiucsnB6jMNktU/KGzQm1A=; b=aeERwhU9wtN5BAReDY/8+5oyjP4vUbg5Ys25BCDA0a9etZledsy0ouBFNPhOLCZPli iDoBNKe7Zs+7hNM/0ncRoN6mcFM+GpJOyAbC/H3kLSp2tXXLLAxkL/0jc+MZxT70lQEb cgi/RamAlELYojwgQqTYFOy2xcMiv0Xm2cSwX2AHNlUEDorwr7uV1dE2GFgROlgyHPRh gEJVVYTSa9XCPxrDRjhpCOwmXB4wEtzzgelzXtjY/whrxy0+Qb63vm0LPB2Ks7LiXgkd QdOZasnwYcMBb0m0WIeHGQyfAUA0gj3ErzMJiLJfIRUd9wDJ/13cRuJW4ty966lpsfHI UYAA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161568; x=1793766368; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=kFPSOj8lzs9kzeceuoAtELiucsnB6jMNktU/KGzQm1A=; b=acl4+bxwZb7Ar0NB6Ix6mP8oqGkXhYTZZUA07E+xC0JHMqPl2FP9ozI27h2z/mHDDg zYPHhT502zPw5J7U6Fm+zoYeWDHS4V8T7PxEOXMkuJmr/OI3jTDOzLssmDVqmadxtLnx WHc0+UJArfi4mPAlW8VnMQJ9PefjF7ngnORQz4bej67vF3q+rjCofNoIs9csnKcEp5R6 BlNEeaCHKad8RrqWcQ7xNKTkOWwAVpRlqPlvNaSGNqVboOPNc/Yl/hTh35+6EBHRql+Y vPDtz928Ibs1gSbDJDgik0raKCp9rW/3zAQhpz3apq6lomHY4xeNSX335t3dhLFJlUSq euKA== X-Gm-Message-State: AFq9FYL2vdeMYhEk8Wn6qIkzp2ZT94kChJVxiSqSd2aXluzkRU9bTU2E fOUevxau/g7vi/LU8ECVG455sJ0/yKCCPQ84bW2co2LzCxN+xZG2nc4dFn/l7w== X-Gm-Gg: AYBFou1a6qwk+UNjeO88aT1NABKJotnDW2K5+NqnNUcOV8ErluD09LU+aTTwK0VlkK+ hnOwtq/9qpdsPwtAwmJ5ztCjuDvhl/j4fJ/Lixd81M3LO9P38dKCRq3JwX6InVrlG+gLH5mlvuu iFkdUpy110/rJzWcGyztriz1xU86Slekp5xI+mBwRXXdif2lAHOQL/kOoMs0ZVMlK3Rs6a+hOSY NmNZgrUreT+b9QIFzdqD2AcJxT0A0wm+Y8Dbq28IPBpwOrvMwva/gkuPU75D0cv/aQGMsiLeG8M lbZWrpQX1HMYD5fwneHfhMoItKkpjp00Wa870mLIc1YbWm9wt+q3Iz7K4b4HieNW9uWMXpXg1de HPssoRNk7q4cqRYvaNKQqnaDhcpB/ulz3acAPkByNpT0Xbs/gUFPuPfKNLdczNSAoemC8QpkBW4 RFwd+TdK2R3nXzhBy/Bff1AbcuYMOxX87p3tULOywBuuLV8dxw6xRWKIFbEdbwsht3b+Con4AyD MgP6B9/s/Jrjwb1v62I/pqU0sX0ngMZcp+O2rtDWBLyMbEc/ZSrkz70Ty+D+dCtHlfI3158hmp9 NqZY9Mz+wVbVJFC/n1mq5XdKkbf1/9L19Be701HksklHyPYLa1ZzmJhZe5WmKTjr+wNH6Op/zcn Gh3ehJO8= X-Received: by 2002:a17:90b:5201:b0:3ad:93b4:718f with SMTP id 98e67ed59e1d1-3ae58289e21mr899987a91.65.1793161565270; Tue, 27 Oct 2026 21:26:05 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.25.57 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:26:03 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Peter Marko Subject: [blacksail][PATCH 47/60] python3-grpcio: update gRPC repo roots Date: Wed, 28 Oct 2026 17:23:45 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:17 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131600 From: Peter Marko See https://emudhra.we-have-a-problem.com/ Use a copy function instead of adding the patch two times becuase there are two copies of certificates in the sources. Signed-off-by: Peter Marko --- .../0001-Update-gRPC-repo-roots.-43699.patch | 2617 +++ ...e-repo-roots-to-chromium-roots-42094.patch | 14324 ++++++++++++++++ .../python/python3-grpcio_1.78.0.bb | 6 + 3 files changed, 16947 insertions(+) create mode 100644 meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch create mode 100644 meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch diff --git a/meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch b/meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch new file mode 100644 index 0000000000..bfd5003c90 --- /dev/null +++ b/meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch @@ -0,0 +1,2617 @@ +From b2976adead29991fc0a67a079e10c9aba6be0274 Mon Sep 17 00:00:00 2001 +From: Matthew Stevenson +Date: Tue, 20 Oct 2026 15:07:37 -0700 +Subject: [PATCH] Update gRPC repo roots. (#43699) + +Context: https://emudhra.we-have-a-problem.com/ + +This PR was created by running + +``` +curl "https://chromium.googlesource.com/chromium/src/+/refs/heads/main/net/data/ssl/chrome_root_store/root_store.certs?format=TEXT" | base64 -d > etc/roots.pem +``` + +Following https://github.com/certifi/python-certifi/pull/440 and https://github.com/certifi/python-certifi/issues/439 (and other similar decisions across the industry), the `emSign Root CA - G1` is preserved. + +Closes #43699 + +COPYBARA_INTEGRATE_REVIEW=https://github.com/grpc/grpc/pull/43699 from matthewstevenson88:root-update 294a8b29e8f18e286e82f64eba19549309c0efa4 +PiperOrigin-RevId: 1003426346 + +Upstream-Status: Backport [https://github.com/sergiitk/grpc/commit/8b32af3bf498c2ba9667410eaa8c836e700e97e6] +Signed-off-by: Peter Marko +--- + etc/roots.pem | 2483 ++++++++++--------------------------------------- + 1 file changed, 505 insertions(+), 1978 deletions(-) + +diff --git a/etc/roots.pem b/etc/roots.pem +index 4c535ad..69d9e43 100644 +--- a/etc/roots.pem ++++ b/etc/roots.pem +@@ -509,91 +509,6 @@ VoNzcOSGGtIxQbovvi0TWnZvTuhOgQ4/WwMioBK+ZlgRSssDxLQqKi2WF+A5VLxI + 03YnnZotBqbJ7DnSq9ufmgsnAjUpsUCV5/nonFWIGUbWtzT1fs45mtk48VH3Tyw= + -----END CERTIFICATE----- + +-# f356bea244b7a91eb35d53ca9ad7864ace018e2d35d5f8f96ddf68a6f41aa474 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: 6643877497813316402 (0x5c33cb622c5fb332) +- Signature Algorithm: sha256WithRSAEncryption +- Issuer: CN = Atos TrustedRoot 2011, O = Atos, C = DE +- Validity +- Not Before: Jul 7 14:58:30 2011 GMT +- Not After : Dec 31 23:59:59 2030 GMT +- Subject: CN = Atos TrustedRoot 2011, O = Atos, C = DE +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:95:85:3b:97:6f:2a:3b:2e:3b:cf:a6:f3:29:35: +- be:cf:18:ac:3e:aa:d9:f8:4d:a0:3e:1a:47:b9:bc: +- 9a:df:f2:fe:cc:3e:47:e8:7a:96:c2:24:8e:35:f4: +- a9:0c:fc:82:fd:6d:c1:72:62:27:bd:ea:6b:eb:e7: +- 8a:cc:54:3e:90:50:cf:80:d4:95:fb:e8:b5:82:d4: +- 14:c5:b6:a9:55:25:57:db:b1:50:f6:b0:60:64:59: +- 7a:69:cf:03:b7:6f:0d:be:ca:3e:6f:74:72:ea:aa: +- 30:2a:73:62:be:49:91:61:c8:11:fe:0e:03:2a:f7: +- 6a:20:dc:02:15:0d:5e:15:6a:fc:e3:82:c1:b5:c5: +- 9d:64:09:6c:a3:59:98:07:27:c7:1b:96:2b:61:74: +- 71:6c:43:f1:f7:35:89:10:e0:9e:ec:55:a1:37:22: +- a2:87:04:05:2c:47:7d:b4:1c:b9:62:29:66:28:ca: +- b7:e1:93:f5:a4:94:03:99:b9:70:85:b5:e6:48:ea: +- 8d:50:fc:d9:de:cc:6f:07:0e:dd:0b:72:9d:80:30: +- 16:07:95:3f:28:0e:fd:c5:75:4f:53:d6:74:9a:b4: +- 24:2e:8e:02:91:cf:76:c5:9b:1e:55:74:9c:78:21: +- b1:f0:2d:f1:0b:9f:c2:d5:96:18:1f:f0:54:22:7a: +- 8c:07 +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Subject Key Identifier: +- A7:A5:06:B1:2C:A6:09:60:EE:D1:97:E9:70:AE:BC:3B:19:6C:DB:21 +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Authority Key Identifier: +- keyid:A7:A5:06:B1:2C:A6:09:60:EE:D1:97:E9:70:AE:BC:3B:19:6C:DB:21 +- +- X509v3 Certificate Policies: +- Policy: 1.3.6.1.4.1.6189.3.4.1.1 +- +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- Signature Algorithm: sha256WithRSAEncryption +- 26:77:34:db:94:48:86:2a:41:9d:2c:3e:06:90:60:c4:8c:ac: +- 0b:54:b8:1f:b9:7b:d3:07:39:e4:fa:3e:7b:b2:3d:4e:ed:9f: +- 23:bd:97:f3:6b:5c:ef:ee:fd:40:a6:df:a1:93:a1:0a:86:ac: +- ef:20:d0:79:01:bd:78:f7:19:d8:24:31:34:04:01:a6:ba:15: +- 9a:c3:27:dc:d8:4f:0f:cc:18:63:ff:99:0f:0e:91:6b:75:16: +- e1:21:fc:d8:26:c7:47:b7:a6:cf:58:72:71:7e:ba:e1:4d:95: +- 47:3b:c9:af:6d:a1:b4:c1:ec:89:f6:b4:0f:38:b5:e2:64:dc: +- 25:cf:a6:db:eb:9a:5c:99:a1:c5:08:de:fd:e6:da:d5:d6:5a: +- 45:0c:c4:b7:c2:b5:14:ef:b4:11:ff:0e:15:b5:f5:f5:db:c6: +- bd:eb:5a:a7:f0:56:22:a9:3c:65:54:c6:15:a8:bd:86:9e:cd: +- 83:96:68:7a:71:81:89:e1:0b:e1:ea:11:1b:68:08:cc:69:9e: +- ec:9e:41:9e:44:32:26:7a:e2:87:0a:71:3d:eb:e4:5a:a4:d2: +- db:c5:cd:c6:de:60:7f:b9:f3:4f:44:92:ef:2a:b7:18:3e:a7: +- 19:d9:0b:7d:b1:37:41:42:b0:ba:60:1d:f2:fe:09:11:b0:f0: +- 87:7b:a7:9d +------BEGIN CERTIFICATE----- +-MIIDdzCCAl+gAwIBAgIIXDPLYixfszIwDQYJKoZIhvcNAQELBQAwPDEeMBwGA1UE +-AwwVQXRvcyBUcnVzdGVkUm9vdCAyMDExMQ0wCwYDVQQKDARBdG9zMQswCQYDVQQG +-EwJERTAeFw0xMTA3MDcxNDU4MzBaFw0zMDEyMzEyMzU5NTlaMDwxHjAcBgNVBAMM +-FUF0b3MgVHJ1c3RlZFJvb3QgMjAxMTENMAsGA1UECgwEQXRvczELMAkGA1UEBhMC +-REUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVhTuXbyo7LjvPpvMp +-Nb7PGKw+qtn4TaA+Gke5vJrf8v7MPkfoepbCJI419KkM/IL9bcFyYie96mvr54rM +-VD6QUM+A1JX76LWC1BTFtqlVJVfbsVD2sGBkWXppzwO3bw2+yj5vdHLqqjAqc2K+ +-SZFhyBH+DgMq92og3AIVDV4VavzjgsG1xZ1kCWyjWZgHJ8cblithdHFsQ/H3NYkQ +-4J7sVaE3IqKHBAUsR320HLliKWYoyrfhk/WklAOZuXCFteZI6o1Q/NnezG8HDt0L +-cp2AMBYHlT8oDv3FdU9T1nSatCQujgKRz3bFmx5VdJx4IbHwLfELn8LVlhgf8FQi +-eowHAgMBAAGjfTB7MB0GA1UdDgQWBBSnpQaxLKYJYO7Rl+lwrrw7GWzbITAPBgNV +-HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFKelBrEspglg7tGX6XCuvDsZbNshMBgG +-A1UdIAQRMA8wDQYLKwYBBAGwLQMEAQEwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3 +-DQEBCwUAA4IBAQAmdzTblEiGKkGdLD4GkGDEjKwLVLgfuXvTBznk+j57sj1O7Z8j +-vZfza1zv7v1Apt+hk6EKhqzvINB5Ab149xnYJDE0BAGmuhWawyfc2E8PzBhj/5kP +-DpFrdRbhIfzYJsdHt6bPWHJxfrrhTZVHO8mvbaG0weyJ9rQPOLXiZNwlz6bb65pc +-maHFCN795trV1lpFDMS3wrUU77QR/w4VtfX128a961qn8FYiqTxlVMYVqL2Gns2D +-lmh6cYGJ4Qvh6hEbaAjMaZ7snkGeRDImeuKHCnE96+RapNLbxc3G3mB/ufNPRJLv +-KrcYPqcZ2Qt9sTdBQrC6YB3y/gkRsPCHe6ed +------END CERTIFICATE----- +- + # 57de0583efd2b26e0361da99da9df4648def7ee8441c3b728afa9bcde0f9b26a + Certificate: + Data: +@@ -1085,84 +1000,6 @@ PuXaTH4MNMn5X7azKFGnpyuqSfqNZSlO42sTp5SjLVFteAxEy9/eCG/Oo2Sr05WE + QRBdJ3NghVdJIgc= + -----END CERTIFICATE----- + +-# eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: 35210227249154 (0x200605167002) +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = RO, O = certSIGN, OU = certSIGN ROOT CA +- Validity +- Not Before: Jul 4 17:20:04 2006 GMT +- Not After : Jul 4 17:20:04 2031 GMT +- Subject: C = RO, O = certSIGN, OU = certSIGN ROOT CA +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:b7:33:b9:7e:c8:25:4a:8e:b5:db:b4:28:1b:aa: +- 57:90:e8:d1:22:d3:64:ba:d3:93:e8:d4:ac:86:61: +- 40:6a:60:57:68:54:84:4d:bc:6a:54:02:05:ff:df: +- 9b:9a:2a:ae:5d:07:8f:4a:c3:28:7f:ef:fb:2b:fa: +- 79:f1:c7:ad:f0:10:53:24:90:8b:66:c9:a8:88:ab: +- af:5a:a3:00:e9:be:ba:46:ee:5b:73:7b:2c:17:82: +- 81:5e:62:2c:a1:02:65:b3:bd:c5:2b:00:7e:c4:fc: +- 03:33:57:0d:ed:e2:fa:ce:5d:45:d6:38:cd:35:b6: +- b2:c1:d0:9c:81:4a:aa:e4:b2:01:5c:1d:8f:5f:99: +- c4:b1:ad:db:88:21:eb:90:08:82:80:f3:30:a3:43: +- e6:90:82:ae:55:28:49:ed:5b:d7:a9:10:38:0e:fe: +- 8f:4c:5b:9b:46:ea:41:f5:b0:08:74:c3:d0:88:33: +- b6:7c:d7:74:df:dc:84:d1:43:0e:75:39:a1:25:40: +- 28:ea:78:cb:0e:2c:2e:39:9d:8c:8b:6e:16:1c:2f: +- 26:82:10:e2:e3:65:94:0a:04:c0:5e:f7:5d:5b:f8: +- 10:e2:d0:ba:7a:4b:fb:de:37:00:00:1a:5b:28:e3: +- d2:9c:73:3e:32:87:98:a1:c9:51:2f:d7:de:ac:33: +- b3:4f +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: critical +- Digital Signature, Non Repudiation, Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- E0:8C:9B:DB:25:49:B3:F1:7C:86:D6:B2:42:87:0B:D0:6B:A0:D9:E4 +- Signature Algorithm: sha1WithRSAEncryption +- 3e:d2:1c:89:2e:35:fc:f8:75:dd:e6:7f:65:88:f4:72:4c:c9: +- 2c:d7:32:4e:f3:dd:19:79:47:bd:8e:3b:5b:93:0f:50:49:24: +- 13:6b:14:06:72:ef:09:d3:a1:a1:e3:40:84:c9:e7:18:32:74: +- 3c:48:6e:0f:9f:4b:d4:f7:1e:d3:93:86:64:54:97:63:72:50: +- d5:55:cf:fa:20:93:02:a2:9b:c3:23:93:4e:16:55:76:a0:70: +- 79:6d:cd:21:1f:cf:2f:2d:bc:19:e3:88:31:f8:59:1a:81:09: +- c8:97:a6:74:c7:60:c4:5b:cc:57:8e:b2:75:fd:1b:02:09:db: +- 59:6f:72:93:69:f7:31:41:d6:88:38:bf:87:b2:bd:16:79:f9: +- aa:e4:be:88:25:dd:61:27:23:1c:b5:31:07:04:36:b4:1a:90: +- bd:a0:74:71:50:89:6d:bc:14:e3:0f:86:ae:f1:ab:3e:c7:a0: +- 09:cc:a3:48:d1:e0:db:64:e7:92:b5:cf:af:72:43:70:8b:f9: +- c3:84:3c:13:aa:7e:92:9b:57:53:93:fa:70:c2:91:0e:31:f9: +- 9b:67:5d:e9:96:38:5e:5f:b3:73:4e:88:15:67:de:9e:76:10: +- 62:20:be:55:69:95:43:00:39:4d:f6:ee:b0:5a:4e:49:44:54: +- 58:5f:42:83 +------BEGIN CERTIFICATE----- +-MIIDODCCAiCgAwIBAgIGIAYFFnACMA0GCSqGSIb3DQEBBQUAMDsxCzAJBgNVBAYT +-AlJPMREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBD +-QTAeFw0wNjA3MDQxNzIwMDRaFw0zMTA3MDQxNzIwMDRaMDsxCzAJBgNVBAYTAlJP +-MREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBDQTCC +-ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALczuX7IJUqOtdu0KBuqV5Do +-0SLTZLrTk+jUrIZhQGpgV2hUhE28alQCBf/fm5oqrl0Hj0rDKH/v+yv6efHHrfAQ +-UySQi2bJqIirr1qjAOm+ukbuW3N7LBeCgV5iLKECZbO9xSsAfsT8AzNXDe3i+s5d +-RdY4zTW2ssHQnIFKquSyAVwdj1+ZxLGt24gh65AIgoDzMKND5pCCrlUoSe1b16kQ +-OA7+j0xbm0bqQfWwCHTD0IgztnzXdN/chNFDDnU5oSVAKOp4yw4sLjmdjItuFhwv +-JoIQ4uNllAoEwF73XVv4EOLQunpL+943AAAaWyjj0pxzPjKHmKHJUS/X3qwzs08C +-AwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAcYwHQYDVR0O +-BBYEFOCMm9slSbPxfIbWskKHC9BroNnkMA0GCSqGSIb3DQEBBQUAA4IBAQA+0hyJ +-LjX8+HXd5n9liPRyTMks1zJO890ZeUe9jjtbkw9QSSQTaxQGcu8J06Gh40CEyecY +-MnQ8SG4Pn0vU9x7Tk4ZkVJdjclDVVc/6IJMCopvDI5NOFlV2oHB5bc0hH88vLbwZ +-44gx+FkagQnIl6Z0x2DEW8xXjrJ1/RsCCdtZb3KTafcxQdaIOL+Hsr0Wefmq5L6I +-Jd1hJyMctTEHBDa0GpC9oHRxUIltvBTjD4au8as+x6AJzKNI0eDbZOeStc+vckNw +-i/nDhDwTqn6Sm1dTk/pwwpEOMfmbZ13pljheX7NzTogVZ96edhBiIL5VaZVDADlN +-9u6wWk5JRFRYX0KD +------END CERTIFICATE----- +- + # 5cc3d78e4e1d5e45547a04e6873e64f90cf9536d1ccc2ef800f355c4c5fd70fd + Certificate: + Data: +@@ -1287,130 +1124,6 @@ AAoACxGV2lZFA4gKn2fQ1XmxqI1AbQ3CekD6819kR5LLU7m7Wc5P/dAVUwHY3+vZ + 5nbv0CO7O6l5s9UCKc2Jo5YPSjXnTkLAdc0Hz+Ys63su + -----END CERTIFICATE----- + +-# c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 15:c8:bd:65:47:5c:af:b8:97:00:5e:e4:06:d2:bc:9d +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = TW, O = "Chunghwa Telecom Co., Ltd.", OU = ePKI Root Certification Authority +- Validity +- Not Before: Dec 20 02:31:27 2004 GMT +- Not After : Dec 20 02:31:27 2034 GMT +- Subject: C = TW, O = "Chunghwa Telecom Co., Ltd.", OU = ePKI Root Certification Authority +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (4096 bit) +- Modulus: +- 00:e1:25:0f:ee:8d:db:88:33:75:67:cd:ad:1f:7d: +- 3a:4e:6d:9d:d3:2f:14:f3:63:74:cb:01:21:6a:37: +- ea:84:50:07:4b:26:5b:09:43:6c:21:9e:6a:c8:d5: +- 03:f5:60:69:8f:cc:f0:22:e4:1f:e7:f7:6a:22:31: +- b7:2c:15:f2:e0:fe:00:6a:43:ff:87:65:c6:b5:1a: +- c1:a7:4c:6d:22:70:21:8a:31:f2:97:74:89:09:12: +- 26:1c:9e:ca:d9:12:a2:95:3c:da:e9:67:bf:08:a0: +- 64:e3:d6:42:b7:45:ef:97:f4:f6:f5:d7:b5:4a:15: +- 02:58:7d:98:58:4b:60:bc:cd:d7:0d:9a:13:33:53: +- d1:61:f9:7a:d5:d7:78:b3:9a:33:f7:00:86:ce:1d: +- 4d:94:38:af:a8:ec:78:51:70:8a:5c:10:83:51:21: +- f7:11:3d:34:86:5e:e5:48:cd:97:81:82:35:4c:19: +- ec:65:f6:6b:c5:05:a1:ee:47:13:d6:b3:21:27:94: +- 10:0a:d9:24:3b:ba:be:44:13:46:30:3f:97:3c:d8: +- d7:d7:6a:ee:3b:38:e3:2b:d4:97:0e:b9:1b:e7:07: +- 49:7f:37:2a:f9:77:78:cf:54:ed:5b:46:9d:a3:80: +- 0e:91:43:c1:d6:5b:5f:14:ba:9f:a6:8d:24:47:40: +- 59:bf:72:38:b2:36:6c:37:ff:99:d1:5d:0e:59:0a: +- ab:69:f7:c0:b2:04:45:7a:54:00:ae:be:53:f6:b5: +- e7:e1:f8:3c:a3:31:d2:a9:fe:21:52:64:c5:a6:67: +- f0:75:07:06:94:14:81:55:c6:27:e4:01:8f:17:c1: +- 6a:71:d7:be:4b:fb:94:58:7d:7e:11:33:b1:42:f7: +- 62:6c:18:d6:cf:09:68:3e:7f:6c:f6:1e:8f:62:ad: +- a5:63:db:09:a7:1f:22:42:41:1e:6f:99:8a:3e:d7: +- f9:3f:40:7a:79:b0:a5:01:92:d2:9d:3d:08:15:a5: +- 10:01:2d:b3:32:76:a8:95:0d:b3:7a:9a:fb:07:10: +- 78:11:6f:e1:8f:c7:ba:0f:25:1a:74:2a:e5:1c:98: +- 41:99:df:21:87:e8:95:06:6a:0a:b3:6a:47:76:65: +- f6:3a:cf:8f:62:17:19:7b:0a:28:cd:1a:d2:83:1e: +- 21:c7:2c:bf:be:ff:61:68:b7:67:1b:bb:78:4d:8d: +- ce:67:e5:e4:c1:8e:b7:23:66:e2:9d:90:75:34:98: +- a9:36:2b:8a:9a:94:b9:9d:ec:cc:8a:b1:f8:25:89: +- 5c:5a:b6:2f:8c:1f:6d:79:24:a7:52:68:c3:84:35: +- e2:66:8d:63:0e:25:4d:d5:19:b2:e6:79:37:a7:22: +- 9d:54:31 +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Subject Key Identifier: +- 1E:0C:F7:B6:67:F2:E1:92:26:09:45:C0:55:39:2E:77:3F:42:4A:A2 +- X509v3 Basic Constraints: +- CA:TRUE +- setCext-hashedRoot: +- 0/0-...0...+......0...g*.....E... +-V|.[x....S..... +- Signature Algorithm: sha1WithRSAEncryption +- 09:b3:83:53:59:01:3e:95:49:b9:f1:81:ba:f9:76:20:23:b5: +- 27:60:74:d4:6a:99:34:5e:6c:00:53:d9:9f:f2:a6:b1:24:07: +- 44:6a:2a:c6:a5:8e:78:12:e8:47:d9:58:1b:13:2a:5e:79:9b: +- 9f:0a:2a:67:a6:25:3f:06:69:56:73:c3:8a:66:48:fb:29:81: +- 57:74:06:ca:9c:ea:28:e8:38:67:26:2b:f1:d5:b5:3f:65:93: +- f8:36:5d:8e:8d:8d:40:20:87:19:ea:ef:27:c0:3d:b4:39:0f: +- 25:7b:68:50:74:55:9c:0c:59:7d:5a:3d:41:94:25:52:08:e0: +- 47:2c:15:31:19:d5:bf:07:55:c6:bb:12:b5:97:f4:5f:83:85: +- ba:71:c1:d9:6c:81:11:76:0a:0a:b0:bf:82:97:f7:ea:3d:fa: +- fa:ec:2d:a9:28:94:3b:56:dd:d2:51:2e:ae:c0:bd:08:15:8c: +- 77:52:34:96:d6:9b:ac:d3:1d:8e:61:0f:35:7b:9b:ae:39:69: +- 0b:62:60:40:20:36:8f:af:fb:36:ee:2d:08:4a:1d:b8:bf:9b: +- 5c:f8:ea:a5:1b:a0:73:a6:d8:f8:6e:e0:33:04:5f:68:aa:27: +- 87:ed:d9:c1:90:9c:ed:bd:e3:6a:35:af:63:df:ab:18:d9:ba: +- e6:e9:4a:ea:50:8a:0f:61:93:1e:e2:2d:19:e2:30:94:35:92: +- 5d:0e:b6:07:af:19:80:8f:47:90:51:4b:2e:4d:dd:85:e2:d2: +- 0a:52:0a:17:9a:fc:1a:b0:50:02:e5:01:a3:63:37:21:4c:44: +- c4:9b:51:99:11:0e:73:9c:06:8f:54:2e:a7:28:5e:44:39:87: +- 56:2d:37:bd:85:44:94:e1:0c:4b:2c:9c:c3:92:85:34:61:cb: +- 0f:b8:9b:4a:43:52:fe:34:3a:7d:b8:e9:29:dc:76:a9:c8:30: +- f8:14:71:80:c6:1e:36:48:74:22:41:5c:87:82:e8:18:71:8b: +- 41:89:44:e7:7e:58:5b:a8:b8:8d:13:e9:a7:6c:c3:47:ed:b3: +- 1a:9d:62:ae:8d:82:ea:94:9e:dd:59:10:c3:ad:dd:e2:4d:e3: +- 31:d5:c7:ec:e8:f2:b0:fe:92:1e:16:0a:1a:fc:d9:f3:f8:27: +- b6:c9:be:1d:b4:6c:64:90:7f:f4:e4:c4:5b:d7:37:ae:42:0e: +- dd:a4:1a:6f:7c:88:54:c5:16:6e:e1:7a:68:2e:f8:3a:bf:0d: +- a4:3c:89:3b:78:a7:4e:63:83:04:21:08:67:8d:f2:82:49:d0: +- 5b:fd:b1:cd:0f:83:84:d4:3e:20:85:f7:4a:3d:2b:9c:fd:2a: +- 0a:09:4d:ea:81:f8:11:9c +------BEGIN CERTIFICATE----- +-MIIFsDCCA5igAwIBAgIQFci9ZUdcr7iXAF7kBtK8nTANBgkqhkiG9w0BAQUFADBe +-MQswCQYDVQQGEwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0 +-ZC4xKjAoBgNVBAsMIWVQS0kgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe +-Fw0wNDEyMjAwMjMxMjdaFw0zNDEyMjAwMjMxMjdaMF4xCzAJBgNVBAYTAlRXMSMw +-IQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwgTHRkLjEqMCgGA1UECwwhZVBL +-SSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEF +-AAOCAg8AMIICCgKCAgEA4SUP7o3biDN1Z82tH306Tm2d0y8U82N0ywEhajfqhFAH +-SyZbCUNsIZ5qyNUD9WBpj8zwIuQf5/dqIjG3LBXy4P4AakP/h2XGtRrBp0xtInAh +-ijHyl3SJCRImHJ7K2RKilTza6We/CKBk49ZCt0Xvl/T29de1ShUCWH2YWEtgvM3X +-DZoTM1PRYfl61dd4s5oz9wCGzh1NlDivqOx4UXCKXBCDUSH3ET00hl7lSM2XgYI1 +-TBnsZfZrxQWh7kcT1rMhJ5QQCtkkO7q+RBNGMD+XPNjX12ruOzjjK9SXDrkb5wdJ +-fzcq+Xd4z1TtW0ado4AOkUPB1ltfFLqfpo0kR0BZv3I4sjZsN/+Z0V0OWQqraffA +-sgRFelQArr5T9rXn4fg8ozHSqf4hUmTFpmfwdQcGlBSBVcYn5AGPF8Fqcde+S/uU +-WH1+ETOxQvdibBjWzwloPn9s9h6PYq2lY9sJpx8iQkEeb5mKPtf5P0B6ebClAZLS +-nT0IFaUQAS2zMnaolQ2zepr7BxB4EW/hj8e6DyUadCrlHJhBmd8hh+iVBmoKs2pH +-dmX2Os+PYhcZewoozRrSgx4hxyy/vv9haLdnG7t4TY3OZ+XkwY63I2binZB1NJip +-NiuKmpS5nezMirH4JYlcWrYvjB9teSSnUmjDhDXiZo1jDiVN1Rmy5nk3pyKdVDEC +-AwEAAaNqMGgwHQYDVR0OBBYEFB4M97Zn8uGSJglFwFU5Lnc/QkqiMAwGA1UdEwQF +-MAMBAf8wOQYEZyoHAAQxMC8wLQIBADAJBgUrDgMCGgUAMAcGBWcqAwAABBRFsMLH +-ClZ87lt4DJX5GFPBphzYEDANBgkqhkiG9w0BAQUFAAOCAgEACbODU1kBPpVJufGB +-uvl2ICO1J2B01GqZNF5sAFPZn/KmsSQHRGoqxqWOeBLoR9lYGxMqXnmbnwoqZ6Yl +-PwZpVnPDimZI+ymBV3QGypzqKOg4ZyYr8dW1P2WT+DZdjo2NQCCHGervJ8A9tDkP +-JXtoUHRVnAxZfVo9QZQlUgjgRywVMRnVvwdVxrsStZf0X4OFunHB2WyBEXYKCrC/ +-gpf36j36+uwtqSiUO1bd0lEursC9CBWMd1I0ltabrNMdjmEPNXubrjlpC2JgQCA2 +-j6/7Nu4tCEoduL+bXPjqpRugc6bY+G7gMwRfaKonh+3ZwZCc7b3jajWvY9+rGNm6 +-5ulK6lCKD2GTHuItGeIwlDWSXQ62B68ZgI9HkFFLLk3dheLSClIKF5r8GrBQAuUB +-o2M3IUxExJtRmREOc5wGj1QupyheRDmHVi03vYVElOEMSyycw5KFNGHLD7ibSkNS +-/jQ6fbjpKdx2qcgw+BRxgMYeNkh0IkFch4LoGHGLQYlE535YW6i4jRPpp2zDR+2z +-Gp1iro2C6pSe3VkQw63d4k3jMdXH7OjysP6SHhYKGvzZ8/gntsm+HbRsZJB/9OTE +-W9c3rkIO3aQab3yIVMUWbuF6aC74Or8NpDyJO3inTmODBCEIZ43ygknQW/2xzQ+D +-hNQ+IIX3Sj0rnP0qCglN6oH4EZw= +------END CERTIFICATE----- +- + # 49e7a442acf0ea6287050054b52564b650e4f49e42e348d6aa38e039e957b1c1 + Certificate: + Data: +@@ -1896,94 +1609,6 @@ jWZSaX5LaAzHHjcng6WMxwLkFM1JAbBzs/3GkDpv0mztO+7skb6iQ12LAEpmJURw + 3kAP+HwV96LOPNdeE4yBFxgX0b3xdxA61GU5wSesVywlVP+i2k+KYTlerj1KjL0= + -----END CERTIFICATE----- + +-# e3b6a2db2ed7ce48842f7ac53241c7b71d54144bfb40c11f3f1d0b42f5eea12d +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- fe:dc:e3:01:0f:c9:48:ff +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = FR, O = Dhimyotis, CN = Certigna +- Validity +- Not Before: Jun 29 15:13:05 2007 GMT +- Not After : Jun 29 15:13:05 2027 GMT +- Subject: C = FR, O = Dhimyotis, CN = Certigna +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:c8:68:f1:c9:d6:d6:b3:34:75:26:82:1e:ec:b4: +- be:ea:5c:e1:26:ed:11:47:61:e1:a2:7c:16:78:40: +- 21:e4:60:9e:5a:c8:63:e1:c4:b1:96:92:ff:18:6d: +- 69:23:e1:2b:62:f7:dd:e2:36:2f:91:07:b9:48:cf: +- 0e:ec:79:b6:2c:e7:34:4b:70:08:25:a3:3c:87:1b: +- 19:f2:81:07:0f:38:90:19:d3:11:fe:86:b4:f2:d1: +- 5e:1e:1e:96:cd:80:6c:ce:3b:31:93:b6:f2:a0:d0: +- a9:95:12:7d:a5:9a:cc:6b:c8:84:56:8a:33:a9:e7: +- 22:15:53:16:f0:cc:17:ec:57:5f:e9:a2:0a:98:09: +- de:e3:5f:9c:6f:dc:48:e3:85:0b:15:5a:a6:ba:9f: +- ac:48:e3:09:b2:f7:f4:32:de:5e:34:be:1c:78:5d: +- 42:5b:ce:0e:22:8f:4d:90:d7:7d:32:18:b3:0b:2c: +- 6a:bf:8e:3f:14:11:89:20:0e:77:14:b5:3d:94:08: +- 87:f7:25:1e:d5:b2:60:00:ec:6f:2a:28:25:6e:2a: +- 3e:18:63:17:25:3f:3e:44:20:16:f6:26:c8:25:ae: +- 05:4a:b4:e7:63:2c:f3:8c:16:53:7e:5c:fb:11:1a: +- 08:c1:46:62:9f:22:b8:f1:c2:8d:69:dc:fa:3a:58: +- 06:df +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- 1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11 +- X509v3 Authority Key Identifier: +- keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11 +- DirName:/C=FR/O=Dhimyotis/CN=Certigna +- serial:FE:DC:E3:01:0F:C9:48:FF +- +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- Netscape Cert Type: +- SSL CA, S/MIME CA, Object Signing CA +- Signature Algorithm: sha1WithRSAEncryption +- 85:03:1e:92:71:f6:42:af:e1:a3:61:9e:eb:f3:c0:0f:f2:a5: +- d4:da:95:e6:d6:be:68:36:3d:7e:6e:1f:4c:8a:ef:d1:0f:21: +- 6d:5e:a5:52:63:ce:12:f8:ef:2a:da:6f:eb:37:fe:13:02:c7: +- cb:3b:3e:22:6b:da:61:2e:7f:d4:72:3d:dd:30:e1:1e:4c:40: +- 19:8c:0f:d7:9c:d1:83:30:7b:98:59:dc:7d:c6:b9:0c:29:4c: +- a1:33:a2:eb:67:3a:65:84:d3:96:e2:ed:76:45:70:8f:b5:2b: +- de:f9:23:d6:49:6e:3c:14:b5:c6:9f:35:1e:50:d0:c1:8f:6a: +- 70:44:02:62:cb:ae:1d:68:41:a7:aa:57:e8:53:aa:07:d2:06: +- f6:d5:14:06:0b:91:03:75:2c:6c:72:b5:61:95:9a:0d:8b:b9: +- 0d:e7:f5:df:54:cd:de:e6:d8:d6:09:08:97:63:e5:c1:2e:b0: +- b7:44:26:c0:26:c0:af:55:30:9e:3b:d5:36:2a:19:04:f4:5c: +- 1e:ff:cf:2c:b7:ff:d0:fd:87:40:11:d5:11:23:bb:48:c0:21: +- a9:a4:28:2d:fd:15:f8:b0:4e:2b:f4:30:5b:21:fc:11:91:34: +- be:41:ef:7b:9d:97:75:ff:97:95:c0:96:58:2f:ea:bb:46:d7: +- bb:e4:d9:2e +------BEGIN CERTIFICATE----- +-MIIDqDCCApCgAwIBAgIJAP7c4wEPyUj/MA0GCSqGSIb3DQEBBQUAMDQxCzAJBgNV +-BAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hMB4X +-DTA3MDYyOTE1MTMwNVoXDTI3MDYyOTE1MTMwNVowNDELMAkGA1UEBhMCRlIxEjAQ +-BgNVBAoMCURoaW15b3RpczERMA8GA1UEAwwIQ2VydGlnbmEwggEiMA0GCSqGSIb3 +-DQEBAQUAA4IBDwAwggEKAoIBAQDIaPHJ1tazNHUmgh7stL7qXOEm7RFHYeGifBZ4 +-QCHkYJ5ayGPhxLGWkv8YbWkj4Sti993iNi+RB7lIzw7sebYs5zRLcAglozyHGxny +-gQcPOJAZ0xH+hrTy0V4eHpbNgGzOOzGTtvKg0KmVEn2lmsxryIRWijOp5yIVUxbw +-zBfsV1/pogqYCd7jX5xv3EjjhQsVWqa6n6xI4wmy9/Qy3l40vhx4XUJbzg4ij02Q +-130yGLMLLGq/jj8UEYkgDncUtT2UCIf3JR7VsmAA7G8qKCVuKj4YYxclPz5EIBb2 +-JsglrgVKtOdjLPOMFlN+XPsRGgjBRmKfIrjxwo1p3Po6WAbfAgMBAAGjgbwwgbkw +-DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUGu3+QTmQtCRZvgHyUtVF9lo53BEw +-ZAYDVR0jBF0wW4AUGu3+QTmQtCRZvgHyUtVF9lo53BGhOKQ2MDQxCzAJBgNVBAYT +-AkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hggkA/tzj +-AQ/JSP8wDgYDVR0PAQH/BAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG +-9w0BAQUFAAOCAQEAhQMeknH2Qq/ho2Ge6/PAD/Kl1NqV5ta+aDY9fm4fTIrv0Q8h +-bV6lUmPOEvjvKtpv6zf+EwLHyzs+ImvaYS5/1HI93TDhHkxAGYwP15zRgzB7mFnc +-fca5DClMoTOi62c6ZYTTluLtdkVwj7Ur3vkj1kluPBS1xp81HlDQwY9qcEQCYsuu +-HWhBp6pX6FOqB9IG9tUUBguRA3UsbHK1YZWaDYu5Def131TN3ubY1gkIl2PlwS6w +-t0QmwCbAr1UwnjvVNioZBPRcHv/PLLf/0P2HQBHVESO7SMAhqaQoLf0V+LBOK/Qw +-WyH8EZE0vkHve52Xdf+XlcCWWC/qu0bXu+TZLg== +------END CERTIFICATE----- +- + # 31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0 + Certificate: + Data: +@@ -2039,517 +1664,6 @@ oAIwOWZbwmSNuJ5Q3KjVSaLtx9zRSX8XAbjIho9OjIgrqJqpisXRAL34VOKa5Vt8 + sycX + -----END CERTIFICATE----- + +-# 3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39 +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root CA +- Validity +- Not Before: Nov 10 00:00:00 2006 GMT +- Not After : Nov 10 00:00:00 2031 GMT +- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root CA +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:ad:0e:15:ce:e4:43:80:5c:b1:87:f3:b7:60:f9: +- 71:12:a5:ae:dc:26:94:88:aa:f4:ce:f5:20:39:28: +- 58:60:0c:f8:80:da:a9:15:95:32:61:3c:b5:b1:28: +- 84:8a:8a:dc:9f:0a:0c:83:17:7a:8f:90:ac:8a:e7: +- 79:53:5c:31:84:2a:f6:0f:98:32:36:76:cc:de:dd: +- 3c:a8:a2:ef:6a:fb:21:f2:52:61:df:9f:20:d7:1f: +- e2:b1:d9:fe:18:64:d2:12:5b:5f:f9:58:18:35:bc: +- 47:cd:a1:36:f9:6b:7f:d4:b0:38:3e:c1:1b:c3:8c: +- 33:d9:d8:2f:18:fe:28:0f:b3:a7:83:d6:c3:6e:44: +- c0:61:35:96:16:fe:59:9c:8b:76:6d:d7:f1:a2:4b: +- 0d:2b:ff:0b:72:da:9e:60:d0:8e:90:35:c6:78:55: +- 87:20:a1:cf:e5:6d:0a:c8:49:7c:31:98:33:6c:22: +- e9:87:d0:32:5a:a2:ba:13:82:11:ed:39:17:9d:99: +- 3a:72:a1:e6:fa:a4:d9:d5:17:31:75:ae:85:7d:22: +- ae:3f:01:46:86:f6:28:79:c8:b1:da:e4:57:17:c4: +- 7e:1c:0e:b0:b4:92:a6:56:b3:bd:b2:97:ed:aa:a7: +- f0:b7:c5:a8:3f:95:16:d0:ff:a1:96:eb:08:5f:18: +- 77:4f +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- 45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F +- X509v3 Authority Key Identifier: +- keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F +- +- Signature Algorithm: sha1WithRSAEncryption +- a2:0e:bc:df:e2:ed:f0:e3:72:73:7a:64:94:bf:f7:72:66:d8: +- 32:e4:42:75:62:ae:87:eb:f2:d5:d9:de:56:b3:9f:cc:ce:14: +- 28:b9:0d:97:60:5c:12:4c:58:e4:d3:3d:83:49:45:58:97:35: +- 69:1a:a8:47:ea:56:c6:79:ab:12:d8:67:81:84:df:7f:09:3c: +- 94:e6:b8:26:2c:20:bd:3d:b3:28:89:f7:5f:ff:22:e2:97:84: +- 1f:e9:65:ef:87:e0:df:c1:67:49:b3:5d:eb:b2:09:2a:eb:26: +- ed:78:be:7d:3f:2b:f3:b7:26:35:6d:5f:89:01:b6:49:5b:9f: +- 01:05:9b:ab:3d:25:c1:cc:b6:7f:c2:f1:6f:86:c6:fa:64:68: +- eb:81:2d:94:eb:42:b7:fa:8c:1e:dd:62:f1:be:50:67:b7:6c: +- bd:f3:f1:1f:6b:0c:36:07:16:7f:37:7c:a9:5b:6d:7a:f1:12: +- 46:60:83:d7:27:04:be:4b:ce:97:be:c3:67:2a:68:11:df:80: +- e7:0c:33:66:bf:13:0d:14:6e:f3:7f:1f:63:10:1e:fa:8d:1b: +- 25:6d:6c:8f:a5:b7:61:01:b1:d2:a3:26:a1:10:71:9d:ad:e2: +- c3:f9:c3:99:51:b7:2b:07:08:ce:2e:e6:50:b2:a7:fa:0a:45: +- 2f:a2:f0:f2 +------BEGIN CERTIFICATE----- +-MIIDtzCCAp+gAwIBAgIQDOfg5RfYRv6P5WD8G/AwOTANBgkqhkiG9w0BAQUFADBl +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv +-b3QgQ0EwHhcNMDYxMTEwMDAwMDAwWhcNMzExMTEwMDAwMDAwWjBlMQswCQYDVQQG +-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl +-cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwggEi +-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDhXO5EOAXLGH87dg+XESpa7c +-JpSIqvTO9SA5KFhgDPiA2qkVlTJhPLWxKISKityfCgyDF3qPkKyK53lTXDGEKvYP +-mDI2dsze3Tyoou9q+yHyUmHfnyDXH+Kx2f4YZNISW1/5WBg1vEfNoTb5a3/UsDg+ +-wRvDjDPZ2C8Y/igPs6eD1sNuRMBhNZYW/lmci3Zt1/GiSw0r/wty2p5g0I6QNcZ4 +-VYcgoc/lbQrISXwxmDNsIumH0DJaoroTghHtORedmTpyoeb6pNnVFzF1roV9Iq4/ +-AUaG9ih5yLHa5FcXxH4cDrC0kqZWs72yl+2qp/C3xag/lRbQ/6GW6whfGHdPAgMB +-AAGjYzBhMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW +-BBRF66Kv9JLLgjEtUYunpyGd823IDzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYun +-pyGd823IDzANBgkqhkiG9w0BAQUFAAOCAQEAog683+Lt8ONyc3pklL/3cmbYMuRC +-dWKuh+vy1dneVrOfzM4UKLkNl2BcEkxY5NM9g0lFWJc1aRqoR+pWxnmrEthngYTf +-fwk8lOa4JiwgvT2zKIn3X/8i4peEH+ll74fg38FnSbNd67IJKusm7Xi+fT8r87cm +-NW1fiQG2SVufAQWbqz0lwcy2f8Lxb4bG+mRo64EtlOtCt/qMHt1i8b5QZ7dsvfPx +-H2sMNgcWfzd8qVttevESRmCD1ycEvkvOl77DZypoEd+A5wwzZr8TDRRu838fYxAe +-+o0bJW1sj6W3YQGx0qMmoRBxna3iw/nDmVG3KwcIzi7mULKn+gpFL6Lw8g== +------END CERTIFICATE----- +- +-# 4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 08:3b:e0:56:90:42:46:b1:a1:75:6a:c9:59:91:c7:4a +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA +- Validity +- Not Before: Nov 10 00:00:00 2006 GMT +- Not After : Nov 10 00:00:00 2031 GMT +- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:e2:3b:e1:11:72:de:a8:a4:d3:a3:57:aa:50:a2: +- 8f:0b:77:90:c9:a2:a5:ee:12:ce:96:5b:01:09:20: +- cc:01:93:a7:4e:30:b7:53:f7:43:c4:69:00:57:9d: +- e2:8d:22:dd:87:06:40:00:81:09:ce:ce:1b:83:bf: +- df:cd:3b:71:46:e2:d6:66:c7:05:b3:76:27:16:8f: +- 7b:9e:1e:95:7d:ee:b7:48:a3:08:da:d6:af:7a:0c: +- 39:06:65:7f:4a:5d:1f:bc:17:f8:ab:be:ee:28:d7: +- 74:7f:7a:78:99:59:85:68:6e:5c:23:32:4b:bf:4e: +- c0:e8:5a:6d:e3:70:bf:77:10:bf:fc:01:f6:85:d9: +- a8:44:10:58:32:a9:75:18:d5:d1:a2:be:47:e2:27: +- 6a:f4:9a:33:f8:49:08:60:8b:d4:5f:b4:3a:84:bf: +- a1:aa:4a:4c:7d:3e:cf:4f:5f:6c:76:5e:a0:4b:37: +- 91:9e:dc:22:e6:6d:ce:14:1a:8e:6a:cb:fe:cd:b3: +- 14:64:17:c7:5b:29:9e:32:bf:f2:ee:fa:d3:0b:42: +- d4:ab:b7:41:32:da:0c:d4:ef:f8:81:d5:bb:8d:58: +- 3f:b5:1b:e8:49:28:a2:70:da:31:04:dd:f7:b2:16: +- f2:4c:0a:4e:07:a8:ed:4a:3d:5e:b5:7f:a3:90:c3: +- af:27 +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- 03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55 +- X509v3 Authority Key Identifier: +- keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55 +- +- Signature Algorithm: sha1WithRSAEncryption +- cb:9c:37:aa:48:13:12:0a:fa:dd:44:9c:4f:52:b0:f4:df:ae: +- 04:f5:79:79:08:a3:24:18:fc:4b:2b:84:c0:2d:b9:d5:c7:fe: +- f4:c1:1f:58:cb:b8:6d:9c:7a:74:e7:98:29:ab:11:b5:e3:70: +- a0:a1:cd:4c:88:99:93:8c:91:70:e2:ab:0f:1c:be:93:a9:ff: +- 63:d5:e4:07:60:d3:a3:bf:9d:5b:09:f1:d5:8e:e3:53:f4:8e: +- 63:fa:3f:a7:db:b4:66:df:62:66:d6:d1:6e:41:8d:f2:2d:b5: +- ea:77:4a:9f:9d:58:e2:2b:59:c0:40:23:ed:2d:28:82:45:3e: +- 79:54:92:26:98:e0:80:48:a8:37:ef:f0:d6:79:60:16:de:ac: +- e8:0e:cd:6e:ac:44:17:38:2f:49:da:e1:45:3e:2a:b9:36:53: +- cf:3a:50:06:f7:2e:e8:c4:57:49:6c:61:21:18:d5:04:ad:78: +- 3c:2c:3a:80:6b:a7:eb:af:15:14:e9:d8:89:c1:b9:38:6c:e2: +- 91:6c:8a:ff:64:b9:77:25:57:30:c0:1b:24:a3:e1:dc:e9:df: +- 47:7c:b5:b4:24:08:05:30:ec:2d:bd:0b:bf:45:bf:50:b9:a9: +- f3:eb:98:01:12:ad:c8:88:c6:98:34:5f:8d:0a:3c:c6:e9:d5: +- 95:95:6d:de +------BEGIN CERTIFICATE----- +-MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD +-QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT +-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j +-b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG +-9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB +-CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97 +-nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt +-43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P +-T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4 +-gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO +-BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR +-TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw +-DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr +-hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg +-06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF +-PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls +-YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk +-CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4= +------END CERTIFICATE----- +- +-# 552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c +- Signature Algorithm: sha384WithRSAEncryption +- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4 +- Validity +- Not Before: Aug 1 12:00:00 2013 GMT +- Not After : Jan 15 12:00:00 2038 GMT +- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4 +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (4096 bit) +- Modulus: +- 00:bf:e6:90:73:68:de:bb:e4:5d:4a:3c:30:22:30: +- 69:33:ec:c2:a7:25:2e:c9:21:3d:f2:8a:d8:59:c2: +- e1:29:a7:3d:58:ab:76:9a:cd:ae:7b:1b:84:0d:c4: +- 30:1f:f3:1b:a4:38:16:eb:56:c6:97:6d:1d:ab:b2: +- 79:f2:ca:11:d2:e4:5f:d6:05:3c:52:0f:52:1f:c6: +- 9e:15:a5:7e:be:9f:a9:57:16:59:55:72:af:68:93: +- 70:c2:b2:ba:75:99:6a:73:32:94:d1:10:44:10:2e: +- df:82:f3:07:84:e6:74:3b:6d:71:e2:2d:0c:1b:ee: +- 20:d5:c9:20:1d:63:29:2d:ce:ec:5e:4e:c8:93:f8: +- 21:61:9b:34:eb:05:c6:5e:ec:5b:1a:bc:eb:c9:cf: +- cd:ac:34:40:5f:b1:7a:66:ee:77:c8:48:a8:66:57: +- 57:9f:54:58:8e:0c:2b:b7:4f:a7:30:d9:56:ee:ca: +- 7b:5d:e3:ad:c9:4f:5e:e5:35:e7:31:cb:da:93:5e: +- dc:8e:8f:80:da:b6:91:98:40:90:79:c3:78:c7:b6: +- b1:c4:b5:6a:18:38:03:10:8d:d8:d4:37:a4:2e:05: +- 7d:88:f5:82:3e:10:91:70:ab:55:82:41:32:d7:db: +- 04:73:2a:6e:91:01:7c:21:4c:d4:bc:ae:1b:03:75: +- 5d:78:66:d9:3a:31:44:9a:33:40:bf:08:d7:5a:49: +- a4:c2:e6:a9:a0:67:dd:a4:27:bc:a1:4f:39:b5:11: +- 58:17:f7:24:5c:46:8f:64:f7:c1:69:88:76:98:76: +- 3d:59:5d:42:76:87:89:97:69:7a:48:f0:e0:a2:12: +- 1b:66:9a:74:ca:de:4b:1e:e7:0e:63:ae:e6:d4:ef: +- 92:92:3a:9e:3d:dc:00:e4:45:25:89:b6:9a:44:19: +- 2b:7e:c0:94:b4:d2:61:6d:eb:33:d9:c5:df:4b:04: +- 00:cc:7d:1c:95:c3:8f:f7:21:b2:b2:11:b7:bb:7f: +- f2:d5:8c:70:2c:41:60:aa:b1:63:18:44:95:1a:76: +- 62:7e:f6:80:b0:fb:e8:64:a6:33:d1:89:07:e1:bd: +- b7:e6:43:a4:18:b8:a6:77:01:e1:0f:94:0c:21:1d: +- b2:54:29:25:89:6c:e5:0e:52:51:47:74:be:26:ac: +- b6:41:75:de:7a:ac:5f:8d:3f:c9:bc:d3:41:11:12: +- 5b:e5:10:50:eb:31:c5:ca:72:16:22:09:df:7c:4c: +- 75:3f:63:ec:21:5f:c4:20:51:6b:6f:b1:ab:86:8b: +- 4f:c2:d6:45:5f:9d:20:fc:a1:1e:c5:c0:8f:a2:b1: +- 7e:0a:26:99:f5:e4:69:2f:98:1d:2d:f5:d9:a9:b2: +- 1d:e5:1b +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- EC:D7:E3:82:D2:71:5D:64:4C:DF:2E:67:3F:E7:BA:98:AE:1C:0F:4F +- Signature Algorithm: sha384WithRSAEncryption +- bb:61:d9:7d:a9:6c:be:17:c4:91:1b:c3:a1:a2:00:8d:e3:64: +- 68:0f:56:cf:77:ae:70:f9:fd:9a:4a:99:b9:c9:78:5c:0c:0c: +- 5f:e4:e6:14:29:56:0b:36:49:5d:44:63:e0:ad:9c:96:18:66: +- 1b:23:0d:3d:79:e9:6d:6b:d6:54:f8:d2:3c:c1:43:40:ae:1d: +- 50:f5:52:fc:90:3b:bb:98:99:69:6b:c7:c1:a7:a8:68:a4:27: +- dc:9d:f9:27:ae:30:85:b9:f6:67:4d:3a:3e:8f:59:39:22:53: +- 44:eb:c8:5d:03:ca:ed:50:7a:7d:62:21:0a:80:c8:73:66:d1: +- a0:05:60:5f:e8:a5:b4:a7:af:a8:f7:6d:35:9c:7c:5a:8a:d6: +- a2:38:99:f3:78:8b:f4:4d:d2:20:0b:de:04:ee:8c:9b:47:81: +- 72:0d:c0:14:32:ef:30:59:2e:ae:e0:71:f2:56:e4:6a:97:6f: +- 92:50:6d:96:8d:68:7a:9a:b2:36:14:7a:06:f2:24:b9:09:11: +- 50:d7:08:b1:b8:89:7a:84:23:61:42:29:e5:a3:cd:a2:20:41: +- d7:d1:9c:64:d9:ea:26:a1:8b:14:d7:4c:19:b2:50:41:71:3d: +- 3f:4d:70:23:86:0c:4a:dc:81:d2:cc:32:94:84:0d:08:09:97: +- 1c:4f:c0:ee:6b:20:74:30:d2:e0:39:34:10:85:21:15:01:08: +- e8:55:32:de:71:49:d9:28:17:50:4d:e6:be:4d:d1:75:ac:d0: +- ca:fb:41:b8:43:a5:aa:d3:c3:05:44:4f:2c:36:9b:e2:fa:e2: +- 45:b8:23:53:6c:06:6f:67:55:7f:46:b5:4c:3f:6e:28:5a:79: +- 26:d2:a4:a8:62:97:d2:1e:e2:ed:4a:8b:bc:1b:fd:47:4a:0d: +- df:67:66:7e:b2:5b:41:d0:3b:e4:f4:3b:f4:04:63:e9:ef:c2: +- 54:00:51:a0:8a:2a:c9:ce:78:cc:d5:ea:87:04:18:b3:ce:af: +- 49:88:af:f3:92:99:b6:b3:e6:61:0f:d2:85:00:e7:50:1a:e4: +- 1b:95:9d:19:a1:b9:9c:b1:9b:b1:00:1e:ef:d0:0f:4f:42:6c: +- c9:0a:bc:ee:43:fa:3a:71:a5:c8:4d:26:a5:35:fd:89:5d:bc: +- 85:62:1d:32:d2:a0:2b:54:ed:9a:57:c1:db:fa:10:cf:19:b7: +- 8b:4a:1b:8f:01:b6:27:95:53:e8:b6:89:6d:5b:bc:68:d4:23: +- e8:8b:51:a2:56:f9:f0:a6:80:a0:d6:1e:b3:bc:0f:0f:53:75: +- 29:aa:ea:13:77:e4:de:8c:81:21:ad:07:10:47:11:ad:87:3d: +- 07:d1:75:bc:cf:f3:66:7e +------BEGIN CERTIFICATE----- +-MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBi +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg +-RzQwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBiMQswCQYDVQQGEwJV +-UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu +-Y29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0GCSqG +-SIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3y +-ithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1If +-xp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDV +-ySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfISKhmV1efVFiO +-DCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jHtrHEtWoYOAMQ +-jdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6MUSaM0C/ +-CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCi +-EhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADM +-fRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QY +-uKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXK +-chYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4KJpn15GkvmB0t +-9dmpsh3lGwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB +-hjAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wDQYJKoZIhvcNAQEMBQAD +-ggIBALth2X2pbL4XxJEbw6GiAI3jZGgPVs93rnD5/ZpKmbnJeFwMDF/k5hQpVgs2 +-SV1EY+CtnJYYZhsjDT156W1r1lT40jzBQ0CuHVD1UvyQO7uYmWlrx8GnqGikJ9yd +-+SeuMIW59mdNOj6PWTkiU0TryF0Dyu1Qen1iIQqAyHNm0aAFYF/opbSnr6j3bTWc +-fFqK1qI4mfN4i/RN0iAL3gTujJtHgXINwBQy7zBZLq7gcfJW5GqXb5JQbZaNaHqa +-sjYUegbyJLkJEVDXCLG4iXqEI2FCKeWjzaIgQdfRnGTZ6iahixTXTBmyUEFxPT9N +-cCOGDErcgdLMMpSEDQgJlxxPwO5rIHQw0uA5NBCFIRUBCOhVMt5xSdkoF1BN5r5N +-0XWs0Mr7QbhDparTwwVETyw2m+L64kW4I1NsBm9nVX9GtUw/bihaeSbSpKhil9Ie +-4u1Ki7wb/UdKDd9nZn6yW0HQO+T0O/QEY+nvwlQAUaCKKsnOeMzV6ocEGLPOr0mI +-r/OSmbaz5mEP0oUA51Aa5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1 +-/YldvIViHTLSoCtU7ZpXwdv6EM8Zt4tKG48BtieVU+i2iW1bvGjUI+iLUaJW+fCm +-gKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+ +------END CERTIFICATE----- +- +-# 7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77 +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA +- Validity +- Not Before: Nov 10 00:00:00 2006 GMT +- Not After : Nov 10 00:00:00 2031 GMT +- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:c6:cc:e5:73:e6:fb:d4:bb:e5:2d:2d:32:a6:df: +- e5:81:3f:c9:cd:25:49:b6:71:2a:c3:d5:94:34:67: +- a2:0a:1c:b0:5f:69:a6:40:b1:c4:b7:b2:8f:d0:98: +- a4:a9:41:59:3a:d3:dc:94:d6:3c:db:74:38:a4:4a: +- cc:4d:25:82:f7:4a:a5:53:12:38:ee:f3:49:6d:71: +- 91:7e:63:b6:ab:a6:5f:c3:a4:84:f8:4f:62:51:be: +- f8:c5:ec:db:38:92:e3:06:e5:08:91:0c:c4:28:41: +- 55:fb:cb:5a:89:15:7e:71:e8:35:bf:4d:72:09:3d: +- be:3a:38:50:5b:77:31:1b:8d:b3:c7:24:45:9a:a7: +- ac:6d:00:14:5a:04:b7:ba:13:eb:51:0a:98:41:41: +- 22:4e:65:61:87:81:41:50:a6:79:5c:89:de:19:4a: +- 57:d5:2e:e6:5d:1c:53:2c:7e:98:cd:1a:06:16:a4: +- 68:73:d0:34:04:13:5c:a1:71:d3:5a:7c:55:db:5e: +- 64:e1:37:87:30:56:04:e5:11:b4:29:80:12:f1:79: +- 39:88:a2:02:11:7c:27:66:b7:88:b7:78:f2:ca:0a: +- a8:38:ab:0a:64:c2:bf:66:5d:95:84:c1:a1:25:1e: +- 87:5d:1a:50:0b:20:12:cc:41:bb:6e:0b:51:38:b8: +- 4b:cb +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3 +- X509v3 Authority Key Identifier: +- keyid:B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3 +- +- Signature Algorithm: sha1WithRSAEncryption +- 1c:1a:06:97:dc:d7:9c:9f:3c:88:66:06:08:57:21:db:21:47: +- f8:2a:67:aa:bf:18:32:76:40:10:57:c1:8a:f3:7a:d9:11:65: +- 8e:35:fa:9e:fc:45:b5:9e:d9:4c:31:4b:b8:91:e8:43:2c:8e: +- b3:78:ce:db:e3:53:79:71:d6:e5:21:94:01:da:55:87:9a:24: +- 64:f6:8a:66:cc:de:9c:37:cd:a8:34:b1:69:9b:23:c8:9e:78: +- 22:2b:70:43:e3:55:47:31:61:19:ef:58:c5:85:2f:4e:30:f6: +- a0:31:16:23:c8:e7:e2:65:16:33:cb:bf:1a:1b:a0:3d:f8:ca: +- 5e:8b:31:8b:60:08:89:2d:0c:06:5c:52:b7:c4:f9:0a:98:d1: +- 15:5f:9f:12:be:7c:36:63:38:bd:44:a4:7f:e4:26:2b:0a:c4: +- 97:69:0d:e9:8c:e2:c0:10:57:b8:c8:76:12:91:55:f2:48:69: +- d8:bc:2a:02:5b:0f:44:d4:20:31:db:f4:ba:70:26:5d:90:60: +- 9e:bc:4b:17:09:2f:b4:cb:1e:43:68:c9:07:27:c1:d2:5c:f7: +- ea:21:b9:68:12:9c:3c:9c:bf:9e:fc:80:5c:9b:63:cd:ec:47: +- aa:25:27:67:a0:37:f3:00:82:7d:54:d7:a9:f8:e9:2e:13:a3: +- 77:e8:1f:4a +------BEGIN CERTIFICATE----- +-MIIDxTCCAq2gAwIBAgIQAqxcJmoLQJuPC3nyrkYldzANBgkqhkiG9w0BAQUFADBs +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j +-ZSBFViBSb290IENBMB4XDTA2MTExMDAwMDAwMFoXDTMxMTExMDAwMDAwMFowbDEL +-MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3 +-LmRpZ2ljZXJ0LmNvbTErMCkGA1UEAxMiRGlnaUNlcnQgSGlnaCBBc3N1cmFuY2Ug +-RVYgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbM5XPm +-+9S75S0tMqbf5YE/yc0lSbZxKsPVlDRnogocsF9ppkCxxLeyj9CYpKlBWTrT3JTW +-PNt0OKRKzE0lgvdKpVMSOO7zSW1xkX5jtqumX8OkhPhPYlG++MXs2ziS4wblCJEM +-xChBVfvLWokVfnHoNb9Ncgk9vjo4UFt3MRuNs8ckRZqnrG0AFFoEt7oT61EKmEFB +-Ik5lYYeBQVCmeVyJ3hlKV9Uu5l0cUyx+mM0aBhakaHPQNAQTXKFx01p8VdteZOE3 +-hzBWBOURtCmAEvF5OYiiAhF8J2a3iLd48soKqDirCmTCv2ZdlYTBoSUeh10aUAsg +-EsxBu24LUTi4S8sCAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQF +-MAMBAf8wHQYDVR0OBBYEFLE+w2kD+L9HAdSYJhoIAu9jZCvDMB8GA1UdIwQYMBaA +-FLE+w2kD+L9HAdSYJhoIAu9jZCvDMA0GCSqGSIb3DQEBBQUAA4IBAQAcGgaX3Nec +-nzyIZgYIVyHbIUf4KmeqvxgydkAQV8GK83rZEWWONfqe/EW1ntlMMUu4kehDLI6z +-eM7b41N5cdblIZQB2lWHmiRk9opmzN6cN82oNLFpmyPInngiK3BD41VHMWEZ71jF +-hS9OMPagMRYjyOfiZRYzy78aG6A9+MpeizGLYAiJLQwGXFK3xPkKmNEVX58Svnw2 +-Yzi9RKR/5CYrCsSXaQ3pjOLAEFe4yHYSkVXySGnYvCoCWw9E1CAx2/S6cCZdkGCe +-vEsXCS+0yx5DaMkHJ8HSXPfqIbloEpw8nL+e/IBcm2PN7EeqJSdnoDfzAIJ9VNep +-+OkuE6N36B9K +------END CERTIFICATE----- +- +-# 7d05ebb682339f8c9451ee094eebfefa7953a114edb2f44949452fab7d2fc185 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 0b:93:1c:3a:d6:39:67:ea:67:23:bf:c3:af:9a:f4:4b +- Signature Algorithm: sha256WithRSAEncryption +- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2 +- Validity +- Not Before: Aug 1 12:00:00 2013 GMT +- Not After : Jan 15 12:00:00 2038 GMT +- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2 +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:d9:e7:28:2f:52:3f:36:72:49:88:93:34:f3:f8: +- 6a:1e:31:54:80:9f:ad:54:41:b5:47:df:96:a8:d4: +- af:80:2d:b9:0a:cf:75:fd:89:a5:7d:24:fa:e3:22: +- 0c:2b:bc:95:17:0b:33:bf:19:4d:41:06:90:00:bd: +- 0c:4d:10:fe:07:b5:e7:1c:6e:22:55:31:65:97:bd: +- d3:17:d2:1e:62:f3:db:ea:6c:50:8c:3f:84:0c:96: +- cf:b7:cb:03:e0:ca:6d:a1:14:4c:1b:89:dd:ed:00: +- b0:52:7c:af:91:6c:b1:38:13:d1:e9:12:08:c0:00: +- b0:1c:2b:11:da:77:70:36:9b:ae:ce:79:87:dc:82: +- 70:e6:09:74:70:55:69:af:a3:68:9f:bf:dd:b6:79: +- b3:f2:9d:70:29:55:f4:ab:ff:95:61:f3:c9:40:6f: +- 1d:d1:be:93:bb:d3:88:2a:bb:9d:bf:72:5a:56:71: +- 3b:3f:d4:f3:d1:0a:fe:28:ef:a3:ee:d9:99:af:03: +- d3:8f:60:b7:f2:92:a1:b1:bd:89:89:1f:30:cd:c3: +- a6:2e:62:33:ae:16:02:77:44:5a:e7:81:0a:3c:a7: +- 44:2e:79:b8:3f:04:bc:5c:a0:87:e1:1b:af:51:8e: +- cd:ec:2c:fa:f8:fe:6d:f0:3a:7c:aa:8b:e4:67:95: +- 31:8d +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- CE:C3:4A:B9:99:55:F2:B8:DB:60:BF:A9:7E:BD:56:B5:97:36:A7:D6 +- Signature Algorithm: sha256WithRSAEncryption +- ca:a5:55:8c:e3:c8:41:6e:69:27:a7:75:11:ef:3c:86:36:6f: +- d2:9d:c6:78:38:1d:69:96:a2:92:69:2e:38:6c:9b:7d:04:d4: +- 89:a5:b1:31:37:8a:c9:21:cc:ab:6c:cd:8b:1c:9a:d6:bf:48: +- d2:32:66:c1:8a:c0:f3:2f:3a:ef:c0:e3:d4:91:86:d1:50:e3: +- 03:db:73:77:6f:4a:39:53:ed:de:26:c7:b5:7d:af:2b:42:d1: +- 75:62:e3:4a:2b:02:c7:50:4b:e0:69:e2:96:6c:0e:44:66:10: +- 44:8f:ad:05:eb:f8:79:ac:a6:1b:e8:37:34:9d:53:c9:61:aa: +- a2:52:af:4a:70:16:86:c2:3a:c8:b1:13:70:36:d8:cf:ee:f4: +- 0a:34:d5:5b:4c:fd:07:9c:a2:ba:d9:01:72:5c:f3:4d:c1:dd: +- 0e:b1:1c:0d:c4:63:be:ad:f4:14:fb:89:ec:a2:41:0e:4c:cc: +- c8:57:40:d0:6e:03:aa:cd:0c:8e:89:99:99:6c:f0:3c:30:af: +- 38:df:6f:bc:a3:be:29:20:27:ab:74:ff:13:22:78:de:97:52: +- 55:1e:83:b5:54:20:03:ee:ae:c0:4f:56:de:37:cc:c3:7f:aa: +- 04:27:bb:d3:77:b8:62:db:17:7c:9c:28:22:13:73:6c:cf:26: +- f5:8a:29:e7 +------BEGIN CERTIFICATE----- +-MIIDljCCAn6gAwIBAgIQC5McOtY5Z+pnI7/Dr5r0SzANBgkqhkiG9w0BAQsFADBl +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv +-b3QgRzIwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQG +-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl +-cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIwggEi +-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5ygvUj82ckmIkzTz+GoeMVSA +-n61UQbVH35ao1K+ALbkKz3X9iaV9JPrjIgwrvJUXCzO/GU1BBpAAvQxNEP4Htecc +-biJVMWWXvdMX0h5i89vqbFCMP4QMls+3ywPgym2hFEwbid3tALBSfK+RbLE4E9Hp +-EgjAALAcKxHad3A2m67OeYfcgnDmCXRwVWmvo2ifv922ebPynXApVfSr/5Vh88lA +-bx3RvpO704gqu52/clpWcTs/1PPRCv4o76Pu2ZmvA9OPYLfykqGxvYmJHzDNw6Yu +-YjOuFgJ3RFrngQo8p0Quebg/BLxcoIfhG69Rjs3sLPr4/m3wOnyqi+RnlTGNAgMB +-AAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQW +-BBTOw0q5mVXyuNtgv6l+vVa1lzan1jANBgkqhkiG9w0BAQsFAAOCAQEAyqVVjOPI +-QW5pJ6d1Ee88hjZv0p3GeDgdaZaikmkuOGybfQTUiaWxMTeKySHMq2zNixya1r9I +-0jJmwYrA8y8678Dj1JGG0VDjA9tzd29KOVPt3ibHtX2vK0LRdWLjSisCx1BL4Gni +-lmwORGYQRI+tBev4eaymG+g3NJ1TyWGqolKvSnAWhsI6yLETcDbYz+70CjTVW0z9 +-B5yiutkBclzzTcHdDrEcDcRjvq30FPuJ7KJBDkzMyFdA0G4Dqs0MjomZmWzwPDCv +-ON9vvKO+KSAnq3T/EyJ43pdSVR6DtVQgA+6uwE9W3jfMw3+qBCe703e4YtsXfJwo +-IhNzbM8m9Yop5w== +------END CERTIFICATE----- +- +-# 7e37cb8b4c47090cab36551ba6f45db840680fba166a952db100717f43053fc2 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 0b:a1:5a:fa:1d:df:a0:b5:49:44:af:cd:24:a0:6c:ec +- Signature Algorithm: ecdsa-with-SHA384 +- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3 +- Validity +- Not Before: Aug 1 12:00:00 2013 GMT +- Not After : Jan 15 12:00:00 2038 GMT +- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3 +- Subject Public Key Info: +- Public Key Algorithm: id-ecPublicKey +- Public-Key: (384 bit) +- pub: +- 04:19:e7:bc:ac:44:65:ed:cd:b8:3f:58:fb:8d:b1: +- 57:a9:44:2d:05:15:f2:ef:0b:ff:10:74:9f:b5:62: +- 52:5f:66:7e:1f:e5:dc:1b:45:79:0b:cc:c6:53:0a: +- 9d:8d:5d:02:d9:a9:59:de:02:5a:f6:95:2a:0e:8d: +- 38:4a:8a:49:c6:bc:c6:03:38:07:5f:55:da:7e:09: +- 6e:e2:7f:5e:d0:45:20:0f:59:76:10:d6:a0:24:f0: +- 2d:de:36:f2:6c:29:39 +- ASN1 OID: secp384r1 +- NIST CURVE: P-384 +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- CB:D0:BD:A9:E1:98:05:51:A1:4D:37:A2:83:79:CE:8D:1D:2A:E4:84 +- Signature Algorithm: ecdsa-with-SHA384 +- 30:64:02:30:25:a4:81:45:02:6b:12:4b:75:74:4f:c8:23:e3: +- 70:f2:75:72:de:7c:89:f0:cf:91:72:61:9e:5e:10:92:59:56: +- b9:83:c7:10:e7:38:e9:58:26:36:7d:d5:e4:34:86:39:02:30: +- 7c:36:53:f0:30:e5:62:63:3a:99:e2:b6:a3:3b:9b:34:fa:1e: +- da:10:92:71:5e:91:13:a7:dd:a4:6e:92:cc:32:d6:f5:21:66: +- c7:2f:ea:96:63:6a:65:45:92:95:01:b4 +------BEGIN CERTIFICATE----- +-MIICRjCCAc2gAwIBAgIQC6Fa+h3foLVJRK/NJKBs7DAKBggqhkjOPQQDAzBlMQsw +-CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu +-ZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3Qg +-RzMwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQGEwJV +-UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu +-Y29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwdjAQBgcq +-hkjOPQIBBgUrgQQAIgNiAAQZ57ysRGXtzbg/WPuNsVepRC0FFfLvC/8QdJ+1YlJf +-Zn4f5dwbRXkLzMZTCp2NXQLZqVneAlr2lSoOjThKiknGvMYDOAdfVdp+CW7if17Q +-RSAPWXYQ1qAk8C3eNvJsKTmjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/ +-BAQDAgGGMB0GA1UdDgQWBBTL0L2p4ZgFUaFNN6KDec6NHSrkhDAKBggqhkjOPQQD +-AwNnADBkAjAlpIFFAmsSS3V0T8gj43DydXLefInwz5FyYZ5eEJJZVrmDxxDnOOlY +-JjZ91eQ0hjkCMHw2U/Aw5WJjOpnitqM7mzT6HtoQknFekROn3aRukswy1vUhZscv +-6pZjamVFkpUBtA== +------END CERTIFICATE----- +- + # cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f + Certificate: + Data: +@@ -2833,61 +1947,6 @@ RQuQ+q7hv53yrlc8pa6yVvSLZUDp/TGBLPQ5Cdjua6e0ph0VpZj3AYHYhX3zUVxx + iN66zB+Afko= + -----END CERTIFICATE----- + +-# 86a1ecba089c4a8d3bbe2734c612ba341d813e043cf9e8a862cd5c57a36bbe6b +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 3c:f6:07:a9:68:70:0e:da:8b:84 +- Signature Algorithm: ecdsa-with-SHA384 +- Issuer: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign ECC Root CA - G3 +- Validity +- Not Before: Feb 18 18:30:00 2018 GMT +- Not After : Feb 18 18:30:00 2043 GMT +- Subject: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign ECC Root CA - G3 +- Subject Public Key Info: +- Public Key Algorithm: id-ecPublicKey +- Public-Key: (384 bit) +- pub: +- 04:23:a5:0c:b8:2d:12:f5:28:f3:b1:b2:dd:e2:02: +- 12:80:9e:39:5f:49:4d:9f:c9:25:34:59:74:ec:bb: +- 06:1c:e7:c0:72:af:e8:ae:2f:e1:41:54:87:14:a8: +- 4a:b2:e8:7c:82:e6:5b:6a:b5:dc:b3:75:ce:8b:06: +- d0:86:23:bf:46:d5:8e:0f:3f:04:f4:d7:1c:92:7e: +- f6:a5:63:c2:f5:5f:8e:2e:4f:a1:18:19:02:2b:32: +- 0a:82:64:7d:16:93:d1 +- ASN1 OID: secp384r1 +- NIST CURVE: P-384 +- X509v3 extensions: +- X509v3 Subject Key Identifier: +- 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- Signature Algorithm: ecdsa-with-SHA384 +- 30:66:02:31:00:be:f3:61:cf:02:10:1d:64:95:07:b8:18:6e: +- 88:85:05:2f:83:08:17:90:ca:1f:8a:4c:e8:0d:1b:7a:b1:ad: +- d5:81:09:47:ef:3b:ac:08:04:7c:5c:99:b1:ed:47:07:d2:02: +- 31:00:9d:ba:55:fc:a9:4a:e8:ed:ed:e6:76:01:42:7b:c8:f8: +- 60:d9:8d:51:8b:55:3b:fb:8c:7b:eb:65:09:c3:f8:96:cd:47: +- a8:82:f2:16:55:77:24:7e:12:10:95:04:2c:a3 +------BEGIN CERTIFICATE----- +-MIICTjCCAdOgAwIBAgIKPPYHqWhwDtqLhDAKBggqhkjOPQQDAzBrMQswCQYDVQQG +-EwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNo +-bm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g +-RzMwHhcNMTgwMjE4MTgzMDAwWhcNNDMwMjE4MTgzMDAwWjBrMQswCQYDVQQGEwJJ +-TjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9s +-b2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0gRzMw +-djAQBgcqhkjOPQIBBgUrgQQAIgNiAAQjpQy4LRL1KPOxst3iAhKAnjlfSU2fySU0 +-WXTsuwYc58Byr+iuL+FBVIcUqEqy6HyC5ltqtdyzdc6LBtCGI79G1Y4PPwT01xyS +-fvalY8L1X44uT6EYGQIrMgqCZH0Wk9GjQjBAMB0GA1UdDgQWBBR8XQKEE9TMipuB +-zhccLikenEhjQjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggq +-hkjOPQQDAwNpADBmAjEAvvNhzwIQHWSVB7gYboiFBS+DCBeQyh+KTOgNG3qxrdWB +-CUfvO6wIBHxcmbHtRwfSAjEAnbpV/KlK6O3t5nYBQnvI+GDZjVGLVTv7jHvrZQnD +-+JbNR6iC8hZVdyR+EhCVBCyj +------END CERTIFICATE----- +- + # bfff8fd04433487d6a8aa60c1a29767a9fc2bbb05e420f713a13b992891d3893 + Certificate: + Data: +@@ -3430,59 +2489,6 @@ LPAvTK33sefOT6jEm0pUBsV/fdUID+Ic/n4XuKxe9tQWskMJDE32p2u0mYRlynqI + 4uJEvlz36hz1 + -----END CERTIFICATE----- + +-# 34d8a73ee208d9bcdb0d956520934b4e40e69482596e8b6f73c8426b010a6f48 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 02:03:e5:b8:82:eb:20:f8:25:27:6d:3d:66 +- Signature Algorithm: ecdsa-with-SHA384 +- Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R3 +- Validity +- Not Before: Jun 22 00:00:00 2016 GMT +- Not After : Jun 22 00:00:00 2036 GMT +- Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R3 +- Subject Public Key Info: +- Public Key Algorithm: id-ecPublicKey +- Public-Key: (384 bit) +- pub: +- 04:1f:4f:33:87:33:29:8a:a1:84:de:cb:c7:21:58: +- 41:89:ea:56:9d:2b:4b:85:c6:1d:4c:27:bc:7f:26: +- 51:72:6f:e2:9f:d6:a3:ca:cc:45:14:46:8b:ad:ef: +- 7e:86:8c:ec:b1:7e:2f:ff:a9:71:9d:18:84:45:04: +- 41:55:6e:2b:ea:26:7f:bb:90:01:e3:4b:19:ba:e4: +- 54:96:45:09:b1:d5:6c:91:44:ad:84:13:8e:9a:8c: +- 0d:80:0c:32:f6:e0:27 +- ASN1 OID: secp384r1 +- NIST CURVE: P-384 +- X509v3 extensions: +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- C1:F1:26:BA:A0:2D:AE:85:81:CF:D3:F1:2A:12:BD:B8:0A:67:FD:BC +- Signature Algorithm: ecdsa-with-SHA384 +- 30:66:02:31:00:f6:e1:20:95:14:7b:54:a3:90:16:11:bf:84: +- c8:ea:6f:6b:17:9e:1e:46:98:20:9b:9f:d3:0d:d9:ac:d3:2f: +- cd:7c:f8:5b:2e:55:bb:bf:dd:92:f7:a4:0c:dc:31:e1:a2:02: +- 31:00:fc:97:66:66:e5:43:16:13:83:dd:c7:df:2f:be:14:38: +- ed:01:ce:b1:17:1a:11:75:e9:bd:03:8f:26:7e:84:e5:c9:60: +- a6:95:d7:54:59:b7:e7:11:2c:89:d4:b9:ee:17 +------BEGIN CERTIFICATE----- +-MIICCTCCAY6gAwIBAgINAgPluILrIPglJ209ZjAKBggqhkjOPQQDAzBHMQswCQYD +-VQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIG +-A1UEAxMLR1RTIFJvb3QgUjMwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAw +-WjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2Vz +-IExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwdjAQBgcqhkjOPQIBBgUrgQQAIgNi +-AAQfTzOHMymKoYTey8chWEGJ6ladK0uFxh1MJ7x/JlFyb+Kf1qPKzEUURout736G +-jOyxfi//qXGdGIRFBEFVbivqJn+7kAHjSxm65FSWRQmx1WyRRK2EE46ajA2ADDL2 +-4CejQjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW +-BBTB8Sa6oC2uhYHP0/EqEr24Cmf9vDAKBggqhkjOPQQDAwNpADBmAjEA9uEglRR7 +-VKOQFhG/hMjqb2sXnh5GmCCbn9MN2azTL818+FsuVbu/3ZL3pAzcMeGiAjEA/Jdm +-ZuVDFhOD3cffL74UOO0BzrEXGhF16b0DjyZ+hOXJYKaV11RZt+cRLInUue4X +------END CERTIFICATE----- +- + # d947432abde7b7fa90fc2e6b59101b1280e0e1c7e4e40fa3c6887fff57a7f4cf + Certificate: + Data: +@@ -3706,127 +2712,6 @@ HQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUVLB7rUW44kB/ + bmF0774BxL4YSFlhgjICICadVGNA3jdgUM/I2O2dgq43mLyjj0xMqTQrbO/7lZsm + -----END CERTIFICATE----- + +-# 8d25cd97229dbf70356bda4eb3cc734031e24cf00fafcfd32dc76eb5841c7ea8 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 02:03:e5:ae:c5:8d:04:25:1a:ab:11:25:aa +- Signature Algorithm: sha384WithRSAEncryption +- Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R2 +- Validity +- Not Before: Jun 22 00:00:00 2016 GMT +- Not After : Jun 22 00:00:00 2036 GMT +- Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R2 +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (4096 bit) +- Modulus: +- 00:ce:de:fd:a6:fb:ec:ec:14:34:3c:07:06:5a:6c: +- 59:f7:19:35:dd:f7:c1:9d:55:aa:d3:cd:3b:a4:93: +- 72:ef:0a:fa:6d:9d:f6:f0:85:80:5b:a1:48:52:9f: +- 39:c5:b7:ee:28:ac:ef:cb:76:68:14:b9:df:ad:01: +- 6c:99:1f:c4:22:1d:9f:fe:72:77:e0:2c:5b:af:e4: +- 04:bf:4f:72:a0:1a:34:98:e8:39:68:ec:95:25:7b: +- 76:a1:e6:69:b9:85:19:bd:89:8c:fe:ad:ed:36:ea: +- 73:bc:ff:83:e2:cb:7d:c1:d2:ce:4a:b3:8d:05:9e: +- 8b:49:93:df:c1:5b:d0:6e:5e:f0:2e:30:2e:82:fc: +- fa:bc:b4:17:0a:48:e5:88:9b:c5:9b:6b:de:b0:ca: +- b4:03:f0:da:f4:90:b8:65:64:f7:5c:4c:ad:e8:7e: +- 66:5e:99:d7:b8:c2:3e:c8:d0:13:9d:ad:ee:e4:45: +- 7b:89:55:f7:8a:1f:62:52:84:12:b3:c2:40:97:e3: +- 8a:1f:47:91:a6:74:5a:d2:f8:b1:63:28:10:b8:b3: +- 09:b8:56:77:40:a2:26:98:79:c6:fe:df:25:ee:3e: +- e5:a0:7f:d4:61:0f:51:4b:3c:3f:8c:da:e1:70:74: +- d8:c2:68:a1:f9:c1:0c:e9:a1:e2:7f:bb:55:3c:76: +- 06:ee:6a:4e:cc:92:88:30:4d:9a:bd:4f:0b:48:9a: +- 84:b5:98:a3:d5:fb:73:c1:57:61:dd:28:56:75:13: +- ae:87:8e:e7:0c:51:09:10:75:88:4c:bc:8d:f9:7b: +- 3c:d4:22:48:1f:2a:dc:eb:6b:bb:44:b1:cb:33:71: +- 32:46:af:ad:4a:f1:8c:e8:74:3a:ac:e7:1a:22:73: +- 80:d2:30:f7:25:42:c7:22:3b:3b:12:ad:96:2e:c6: +- c3:76:07:aa:20:b7:35:49:57:e9:92:49:e8:76:16: +- 72:31:67:2b:96:7e:8a:a3:c7:94:56:22:bf:6a:4b: +- 7e:01:21:b2:23:32:df:e4:9a:44:6d:59:5b:5d:f5: +- 00:a0:1c:9b:c6:78:97:8d:90:ff:9b:c8:aa:b4:af: +- 11:51:39:5e:d9:fb:67:ad:d5:5b:11:9d:32:9a:1b: +- bd:d5:ba:5b:a5:c9:cb:25:69:53:55:27:5c:e0:ca: +- 36:cb:88:61:fb:1e:b7:d0:cb:ee:16:fb:d3:a6:4c: +- de:92:a5:d4:e2:df:f5:06:54:de:2e:9d:4b:b4:93: +- 30:aa:81:ce:dd:1a:dc:51:73:0d:4f:70:e9:e5:b6: +- 16:21:19:79:b2:e6:89:0b:75:64:ca:d5:ab:bc:09: +- c1:18:a1:ff:d4:54:a1:85:3c:fd:14:24:03:b2:87: +- d3:a4:b7 +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Key Usage: critical +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- BB:FF:CA:8E:23:9F:4F:99:CA:DB:E2:68:A6:A5:15:27:17:1E:D9:0E +- Signature Algorithm: sha384WithRSAEncryption +- 1f:ca:ce:dd:c7:be:a1:9f:d9:27:4c:0b:dc:17:98:11:6a:88: +- de:3d:e6:71:56:72:b2:9e:1a:4e:9c:d5:2b:98:24:5d:9b:6b: +- 7b:b0:33:82:09:bd:df:25:46:ea:98:9e:b6:1b:fe:83:3c:d2: +- 62:61:c1:04:ed:ce:e0:c5:c9:c8:13:13:55:e7:a8:63:ad:8c: +- 7b:01:fe:77:30:e1:ce:68:9b:05:f8:12:ee:79:31:a0:41:45: +- 35:28:0a:71:a4:24:4f:8c:dc:3c:82:07:5f:66:dc:7d:10:fe: +- 0c:61:b3:05:95:ee:e1:ae:81:0f:a8:f8:c7:8f:4d:a8:23:02: +- 26:6b:1d:83:52:55:ce:b5:2f:00:ca:80:40:e0:e1:74:ac:60: +- f5:87:80:9d:ae:36:64:91:5d:b0:68:18:ea:8a:61:c9:77:a8: +- 97:c4:c9:c7:a5:fc:55:4b:f3:f0:7f:b9:65:3d:27:68:d0:cc: +- 6b:fa:53:9d:e1:91:1a:c9:5d:1a:96:6d:32:87:ed:03:20:c8: +- 02:ce:5a:be:d9:ea:fd:b2:4d:c4:2f:1b:df:5f:7a:f5:f8:8b: +- c6:ee:31:3a:25:51:55:67:8d:64:32:7b:e9:9e:c3:82:ba:2a: +- 2d:e9:1e:b4:e0:48:06:a2:fc:67:af:1f:22:02:73:fb:20:0a: +- af:9d:54:4b:a1:cd:ff:60:47:b0:3f:5d:ef:1b:56:bd:97:21: +- 96:2d:0a:d1:5e:9d:38:02:47:6c:b9:f4:f6:23:25:b8:a0:6a: +- 9a:2b:77:08:fa:c4:b1:28:90:26:58:08:3c:e2:7e:aa:d7:3d: +- 6f:ba:31:88:0a:05:eb:27:b5:a1:49:ee:a0:45:54:7b:e6:27: +- 65:99:20:21:a8:a3:bc:fb:18:96:bb:52:6f:0c:ed:83:51:4c: +- e9:59:e2:20:60:c5:c2:65:92:82:8c:f3:10:1f:0e:8a:97:be: +- 77:82:6d:3f:8f:1d:5d:bc:49:27:bd:cc:4f:0f:e1:ce:76:86: +- 04:23:c5:c0:8c:12:5b:fd:db:84:a0:24:f1:48:ff:64:7c:d0: +- be:5c:16:d1:ef:99:ad:c0:1f:fb:cb:ae:bc:38:22:06:26:64: +- da:da:97:0e:3f:28:15:44:a8:4f:00:ca:f0:9a:cc:cf:74:6a: +- b4:3e:3c:eb:95:ec:b5:d3:5a:d8:81:99:e9:43:18:37:eb:b3: +- bb:d1:58:62:41:f3:66:d2:8f:aa:78:95:54:20:c3:5a:2e:74: +- 2b:d5:d1:be:18:69:c0:ac:d5:a4:cf:39:ba:51:84:03:65:e9: +- 62:c0:62:fe:d8:4d:55:96:e2:d0:11:fa:48:34:11:ec:9e:ed: +- 05:1d:e4:c8:d6:1d:86:cb +------BEGIN CERTIFICATE----- +-MIIFVzCCAz+gAwIBAgINAgPlrsWNBCUaqxElqjANBgkqhkiG9w0BAQwFADBHMQsw +-CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU +-MBIGA1UEAxMLR1RTIFJvb3QgUjIwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAw +-MDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp +-Y2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjIwggIiMA0GCSqGSIb3DQEBAQUA +-A4ICDwAwggIKAoICAQDO3v2m++zsFDQ8BwZabFn3GTXd98GdVarTzTukk3LvCvpt +-nfbwhYBboUhSnznFt+4orO/LdmgUud+tAWyZH8QiHZ/+cnfgLFuv5AS/T3KgGjSY +-6Dlo7JUle3ah5mm5hRm9iYz+re026nO8/4Piy33B0s5Ks40FnotJk9/BW9BuXvAu +-MC6C/Pq8tBcKSOWIm8Wba96wyrQD8Nr0kLhlZPdcTK3ofmZemde4wj7I0BOdre7k +-RXuJVfeKH2JShBKzwkCX44ofR5GmdFrS+LFjKBC4swm4VndAoiaYecb+3yXuPuWg +-f9RhD1FLPD+M2uFwdNjCaKH5wQzpoeJ/u1U8dgbuak7MkogwTZq9TwtImoS1mKPV +-+3PBV2HdKFZ1E66HjucMUQkQdYhMvI35ezzUIkgfKtzra7tEscszcTJGr61K8Yzo +-dDqs5xoic4DSMPclQsciOzsSrZYuxsN2B6ogtzVJV+mSSeh2FnIxZyuWfoqjx5RW +-Ir9qS34BIbIjMt/kmkRtWVtd9QCgHJvGeJeNkP+byKq0rxFROV7Z+2et1VsRnTKa +-G73VululycslaVNVJ1zgyjbLiGH7HrfQy+4W+9OmTN6SpdTi3/UGVN4unUu0kzCq +-gc7dGtxRcw1PcOnlthYhGXmy5okLdWTK1au8CcEYof/UVKGFPP0UJAOyh9OktwID +-AQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4E +-FgQUu//KjiOfT5nK2+JopqUVJxce2Q4wDQYJKoZIhvcNAQEMBQADggIBAB/Kzt3H +-vqGf2SdMC9wXmBFqiN495nFWcrKeGk6c1SuYJF2ba3uwM4IJvd8lRuqYnrYb/oM8 +-0mJhwQTtzuDFycgTE1XnqGOtjHsB/ncw4c5omwX4Eu55MaBBRTUoCnGkJE+M3DyC +-B19m3H0Q/gxhswWV7uGugQ+o+MePTagjAiZrHYNSVc61LwDKgEDg4XSsYPWHgJ2u +-NmSRXbBoGOqKYcl3qJfEycel/FVL8/B/uWU9J2jQzGv6U53hkRrJXRqWbTKH7QMg +-yALOWr7Z6v2yTcQvG99fevX4i8buMTolUVVnjWQye+mew4K6Ki3pHrTgSAai/Gev +-HyICc/sgCq+dVEuhzf9gR7A/Xe8bVr2XIZYtCtFenTgCR2y59PYjJbigapordwj6 +-xLEokCZYCDzifqrXPW+6MYgKBesntaFJ7qBFVHvmJ2WZICGoo7z7GJa7Um8M7YNR +-TOlZ4iBgxcJlkoKM8xAfDoqXvneCbT+PHV28SSe9zE8P4c52hgQjxcCMElv924Sg +-JPFI/2R80L5cFtHvma3AH/vLrrw4IgYmZNralw4/KBVEqE8AyvCazM90arQ+POuV +-7LXTWtiBmelDGDfrs7vRWGJB82bSj6p4lVQgw1oudCvV0b4YacCs1aTPObpRhANl +-6WLAYv7YTVWW4tAR+kg0Eeye7QUd5MjWHYbL +------END CERTIFICATE----- +- + # 5a2fc03f0c83b090bbfa40604b0988446c7636183df9846e17101a447fb8efd6 + Certificate: + Data: +@@ -5089,88 +3974,6 @@ AHFiRSdLOkKEW39lt2c0Ui2cFmuqqNh7o0JMcccMyj6D5KbvtwEwXlGjefVwaaZB + RA+GsCyRxj3qrg+E + -----END CERTIFICATE----- + +-# 6c61dac3a2def031506be036d2a6fe401994fbd13df9c8d466599274c446ec98 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: 80544274841616 (0x49412ce40010) +- Signature Algorithm: sha256WithRSAEncryption +- Issuer: C = HU, L = Budapest, O = NetLock Kft., OU = Tan\C3\BAs\C3\ADtv\C3\A1nykiad\C3\B3k (Certification Services), CN = NetLock Arany (Class Gold) F\C5\91tan\C3\BAs\C3\ADtv\C3\A1ny +- Validity +- Not Before: Dec 11 15:08:21 2008 GMT +- Not After : Dec 6 15:08:21 2028 GMT +- Subject: C = HU, L = Budapest, O = NetLock Kft., OU = Tan\C3\BAs\C3\ADtv\C3\A1nykiad\C3\B3k (Certification Services), CN = NetLock Arany (Class Gold) F\C5\91tan\C3\BAs\C3\ADtv\C3\A1ny +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:c4:24:5e:73:be:4b:6d:14:c3:a1:f4:e3:97:90: +- 6e:d2:30:45:1e:3c:ee:67:d9:64:e0:1a:8a:7f:ca: +- 30:ca:83:e3:20:c1:e3:f4:3a:d3:94:5f:1a:7c:5b: +- 6d:bf:30:4f:84:27:f6:9f:1f:49:bc:c6:99:0a:90: +- f2:0f:f5:7f:43:84:37:63:51:8b:7a:a5:70:fc:7a: +- 58:cd:8e:9b:ed:c3:46:6c:84:70:5d:da:f3:01:90: +- 23:fc:4e:30:a9:7e:e1:27:63:e7:ed:64:3c:a0:b8: +- c9:33:63:fe:16:90:ff:b0:b8:fd:d7:a8:c0:c0:94: +- 43:0b:b6:d5:59:a6:9e:56:d0:24:1f:70:79:af:db: +- 39:54:0d:65:75:d9:15:41:94:01:af:5e:ec:f6:8d: +- f1:ff:ad:64:fe:20:9a:d7:5c:eb:fe:a6:1f:08:64: +- a3:8b:76:55:ad:1e:3b:28:60:2e:87:25:e8:aa:af: +- 1f:c6:64:46:20:b7:70:7f:3c:de:48:db:96:53:b7: +- 39:77:e4:1a:e2:c7:16:84:76:97:5b:2f:bb:19:15: +- 85:f8:69:85:f5:99:a7:a9:f2:34:a7:a9:b6:a6:03: +- fc:6f:86:3d:54:7c:76:04:9b:6b:f9:40:5d:00:34: +- c7:2e:99:75:9d:e5:88:03:aa:4d:f8:03:d2:42:76: +- c0:1b +- Exponent: 43147 (0xa88b) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE, pathlen:4 +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- CC:FA:67:93:F0:B6:B8:D0:A5:C0:1E:F3:53:FD:8C:53:DF:83:D7:96 +- Signature Algorithm: sha256WithRSAEncryption +- ab:7f:ee:1c:16:a9:9c:3c:51:00:a0:c0:11:08:05:a7:99:e6: +- 6f:01:88:54:61:6e:f1:b9:18:ad:4a:ad:fe:81:40:23:94:2f: +- fb:75:7c:2f:28:4b:62:24:81:82:0b:f5:61:f1:1c:6e:b8:61: +- 38:eb:81:fa:62:a1:3b:5a:62:d3:94:65:c4:e1:e6:6d:82:f8: +- 2f:25:70:b2:21:26:c1:72:51:1f:8c:2c:c3:84:90:c3:5a:8f: +- ba:cf:f4:a7:65:a5:eb:98:d1:fb:05:b2:46:75:15:23:6a:6f: +- 85:63:30:80:f0:d5:9e:1f:29:1c:c2:6c:b0:50:59:5d:90:5b: +- 3b:a8:0d:30:cf:bf:7d:7f:ce:f1:9d:83:bd:c9:46:6e:20:a6: +- f9:61:51:ba:21:2f:7b:be:a5:15:63:a1:d4:95:87:f1:9e:b9: +- f3:89:f3:3d:85:b8:b8:db:be:b5:b9:29:f9:da:37:05:00:49: +- 94:03:84:44:e7:bf:43:31:cf:75:8b:25:d1:f4:a6:64:f5:92: +- f6:ab:05:eb:3d:e9:a5:0b:36:62:da:cc:06:5f:36:8b:b6:5e: +- 31:b8:2a:fb:5e:f6:71:df:44:26:9e:c4:e6:0d:91:b4:2e:75: +- 95:80:51:6a:4b:30:a6:b0:62:a1:93:f1:9b:d8:ce:c4:63:75: +- 3f:59:47:b1 +------BEGIN CERTIFICATE----- +-MIIEFTCCAv2gAwIBAgIGSUEs5AAQMA0GCSqGSIb3DQEBCwUAMIGnMQswCQYDVQQG +-EwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFTATBgNVBAoMDE5ldExvY2sgS2Z0LjE3 +-MDUGA1UECwwuVGFuw7pzw610dsOhbnlraWFkw7NrIChDZXJ0aWZpY2F0aW9uIFNl +-cnZpY2VzKTE1MDMGA1UEAwwsTmV0TG9jayBBcmFueSAoQ2xhc3MgR29sZCkgRsWR +-dGFuw7pzw610dsOhbnkwHhcNMDgxMjExMTUwODIxWhcNMjgxMjA2MTUwODIxWjCB +-pzELMAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRUwEwYDVQQKDAxOZXRM +-b2NrIEtmdC4xNzA1BgNVBAsMLlRhbsO6c8OtdHbDoW55a2lhZMOzayAoQ2VydGlm +-aWNhdGlvbiBTZXJ2aWNlcykxNTAzBgNVBAMMLE5ldExvY2sgQXJhbnkgKENsYXNz +-IEdvbGQpIEbFkXRhbsO6c8OtdHbDoW55MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A +-MIIBCgKCAQEAxCRec75LbRTDofTjl5Bu0jBFHjzuZ9lk4BqKf8owyoPjIMHj9DrT +-lF8afFttvzBPhCf2nx9JvMaZCpDyD/V/Q4Q3Y1GLeqVw/HpYzY6b7cNGbIRwXdrz +-AZAj/E4wqX7hJ2Pn7WQ8oLjJM2P+FpD/sLj916jAwJRDC7bVWaaeVtAkH3B5r9s5 +-VA1lddkVQZQBr17s9o3x/61k/iCa11zr/qYfCGSji3ZVrR47KGAuhyXoqq8fxmRG +-ILdwfzzeSNuWU7c5d+Qa4scWhHaXWy+7GRWF+GmF9ZmnqfI0p6m2pgP8b4Y9VHx2 +-BJtr+UBdADTHLpl1neWIA6pN+APSQnbAGwIDAKiLo0UwQzASBgNVHRMBAf8ECDAG +-AQH/AgEEMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUzPpnk/C2uNClwB7zU/2M +-U9+D15YwDQYJKoZIhvcNAQELBQADggEBAKt/7hwWqZw8UQCgwBEIBaeZ5m8BiFRh +-bvG5GK1Krf6BQCOUL/t1fC8oS2IkgYIL9WHxHG64YTjrgfpioTtaYtOUZcTh5m2C +-+C8lcLIhJsFyUR+MLMOEkMNaj7rP9KdlpeuY0fsFskZ1FSNqb4VjMIDw1Z4fKRzC +-bLBQWV2QWzuoDTDPv31/zvGdg73JRm4gpvlhUbohL3u+pRVjodSVh/GeufOJ8z2F +-uLjbvrW5KfnaNwUASZQDhETnv0Mxz3WLJdH0pmT1kvarBes96aULNmLazAZfNou2 +-XjG4Kvte9nHfRCaexOYNkbQudZWAUWpLMKawYqGT8ZvYzsRjdT9ZR7E= +------END CERTIFICATE----- +- + # 6b9c08e86eb0f767cfad65cd98b62149e5494a67f5845e7bd1ed019f27b86bd6 + Certificate: + Data: +@@ -5311,133 +4114,6 @@ rYy0UGYwEAYJKwYBBAGCNxUBBAMCAQAwCgYIKoZIzj0EAwMDaAAwZQIwJsdpW9zV + Mgj/mkkCtojeFK9dbJlxjRo/i9fgojaGHAeCOnZT/cKi7e97sIBPWA9LUzm9 + -----END CERTIFICATE----- + +-# 85a0dd7dd720adb7ff05f83d542b209dc7ff4528f7d677b18389fea5e5c49e86 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: 1289 (0x509) +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2 +- Validity +- Not Before: Nov 24 18:27:00 2006 GMT +- Not After : Nov 24 18:23:33 2031 GMT +- Subject: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2 +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (4096 bit) +- Modulus: +- 00:9a:18:ca:4b:94:0d:00:2d:af:03:29:8a:f0:0f: +- 81:c8:ae:4c:19:85:1d:08:9f:ab:29:44:85:f3:2f: +- 81:ad:32:1e:90:46:bf:a3:86:26:1a:1e:fe:7e:1c: +- 18:3a:5c:9c:60:17:2a:3a:74:83:33:30:7d:61:54: +- 11:cb:ed:ab:e0:e6:d2:a2:7e:f5:6b:6f:18:b7:0a: +- 0b:2d:fd:e9:3e:ef:0a:c6:b3:10:e9:dc:c2:46:17: +- f8:5d:fd:a4:da:ff:9e:49:5a:9c:e6:33:e6:24:96: +- f7:3f:ba:5b:2b:1c:7a:35:c2:d6:67:fe:ab:66:50: +- 8b:6d:28:60:2b:ef:d7:60:c3:c7:93:bc:8d:36:91: +- f3:7f:f8:db:11:13:c4:9c:77:76:c1:ae:b7:02:6a: +- 81:7a:a9:45:83:e2:05:e6:b9:56:c1:94:37:8f:48: +- 71:63:22:ec:17:65:07:95:8a:4b:df:8f:c6:5a:0a: +- e5:b0:e3:5f:5e:6b:11:ab:0c:f9:85:eb:44:e9:f8: +- 04:73:f2:e9:fe:5c:98:8c:f5:73:af:6b:b4:7e:cd: +- d4:5c:02:2b:4c:39:e1:b2:95:95:2d:42:87:d7:d5: +- b3:90:43:b7:6c:13:f1:de:dd:f6:c4:f8:89:3f:d1: +- 75:f5:92:c3:91:d5:8a:88:d0:90:ec:dc:6d:de:89: +- c2:65:71:96:8b:0d:03:fd:9c:bf:5b:16:ac:92:db: +- ea:fe:79:7c:ad:eb:af:f7:16:cb:db:cd:25:2b:e5: +- 1f:fb:9a:9f:e2:51:cc:3a:53:0c:48:e6:0e:bd:c9: +- b4:76:06:52:e6:11:13:85:72:63:03:04:e0:04:36: +- 2b:20:19:02:e8:74:a7:1f:b6:c9:56:66:f0:75:25: +- dc:67:c1:0e:61:60:88:b3:3e:d1:a8:fc:a3:da:1d: +- b0:d1:b1:23:54:df:44:76:6d:ed:41:d8:c1:b2:22: +- b6:53:1c:df:35:1d:dc:a1:77:2a:31:e4:2d:f5:e5: +- e5:db:c8:e0:ff:e5:80:d7:0b:63:a0:ff:33:a1:0f: +- ba:2c:15:15:ea:97:b3:d2:a2:b5:be:f2:8c:96:1e: +- 1a:8f:1d:6c:a4:61:37:b9:86:73:33:d7:97:96:9e: +- 23:7d:82:a4:4c:81:e2:a1:d1:ba:67:5f:95:07:a3: +- 27:11:ee:16:10:7b:bc:45:4a:4c:b2:04:d2:ab:ef: +- d5:fd:0c:51:ce:50:6a:08:31:f9:91:da:0c:8f:64: +- 5c:03:c3:3a:8b:20:3f:6e:8d:67:3d:3a:d6:fe:7d: +- 5b:88:c9:5e:fb:cc:61:dc:8b:33:77:d3:44:32:35: +- 09:62:04:92:16:10:d8:9e:27:47:fb:3b:21:e3:f8: +- eb:1d:5b +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: +- Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- 1A:84:62:BC:48:4C:33:25:04:D4:EE:D0:F6:03:C4:19:46:D1:94:6B +- X509v3 Authority Key Identifier: +- keyid:1A:84:62:BC:48:4C:33:25:04:D4:EE:D0:F6:03:C4:19:46:D1:94:6B +- DirName:/C=BM/O=QuoVadis Limited/CN=QuoVadis Root CA 2 +- serial:05:09 +- +- Signature Algorithm: sha1WithRSAEncryption +- 3e:0a:16:4d:9f:06:5b:a8:ae:71:5d:2f:05:2f:67:e6:13:45: +- 83:c4:36:f6:f3:c0:26:0c:0d:b5:47:64:5d:f8:b4:72:c9:46: +- a5:03:18:27:55:89:78:7d:76:ea:96:34:80:17:20:dc:e7:83: +- f8:8d:fc:07:b8:da:5f:4d:2e:67:b2:84:fd:d9:44:fc:77:50: +- 81:e6:7c:b4:c9:0d:0b:72:53:f8:76:07:07:41:47:96:0c:fb: +- e0:82:26:93:55:8c:fe:22:1f:60:65:7c:5f:e7:26:b3:f7:32: +- 90:98:50:d4:37:71:55:f6:92:21:78:f7:95:79:fa:f8:2d:26: +- 87:66:56:30:77:a6:37:78:33:52:10:58:ae:3f:61:8e:f2:6a: +- b1:ef:18:7e:4a:59:63:ca:8d:a2:56:d5:a7:2f:bc:56:1f:cf: +- 39:c1:e2:fb:0a:a8:15:2c:7d:4d:7a:63:c6:6c:97:44:3c:d2: +- 6f:c3:4a:17:0a:f8:90:d2:57:a2:19:51:a5:2d:97:41:da:07: +- 4f:a9:50:da:90:8d:94:46:e1:3e:f0:94:fd:10:00:38:f5:3b: +- e8:40:e1:b4:6e:56:1a:20:cc:6f:58:8d:ed:2e:45:8f:d6:e9: +- 93:3f:e7:b1:2c:df:3a:d6:22:8c:dc:84:bb:22:6f:d0:f8:e4: +- c6:39:e9:04:88:3c:c3:ba:eb:55:7a:6d:80:99:24:f5:6c:01: +- fb:f8:97:b0:94:5b:eb:fd:d2:6f:f1:77:68:0d:35:64:23:ac: +- b8:55:a1:03:d1:4d:42:19:dc:f8:75:59:56:a3:f9:a8:49:79: +- f8:af:0e:b9:11:a0:7c:b7:6a:ed:34:d0:b6:26:62:38:1a:87: +- 0c:f8:e8:fd:2e:d3:90:7f:07:91:2a:1d:d6:7e:5c:85:83:99: +- b0:38:08:3f:e9:5e:f9:35:07:e4:c9:62:6e:57:7f:a7:50:95: +- f7:ba:c8:9b:e6:8e:a2:01:c5:d6:66:bf:79:61:f3:3c:1c:e1: +- b9:82:5c:5d:a0:c3:e9:d8:48:bd:19:a2:11:14:19:6e:b2:86: +- 1b:68:3e:48:37:1a:88:b7:5d:96:5e:9c:c7:ef:27:62:08:e2: +- 91:19:5c:d2:f1:21:dd:ba:17:42:82:97:71:81:53:31:a9:9f: +- f6:7d:62:bf:72:e1:a3:93:1d:cc:8a:26:5a:09:38:d0:ce:d7: +- 0d:80:16:b4:78:a5:3a:87:4c:8d:8a:a5:d5:46:97:f2:2c:10: +- b9:bc:54:22:c0:01:50:69:43:9e:f4:b2:ef:6d:f8:ec:da:f1: +- e3:b1:ef:df:91:8f:54:2a:0b:25:c1:26:19:c4:52:10:05:65: +- d5:82:10:ea:c2:31:cd:2e +------BEGIN CERTIFICATE----- +-MIIFtzCCA5+gAwIBAgICBQkwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0x +-GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJv +-b3QgQ0EgMjAeFw0wNjExMjQxODI3MDBaFw0zMTExMjQxODIzMzNaMEUxCzAJBgNV +-BAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMRswGQYDVQQDExJRdW9W +-YWRpcyBSb290IENBIDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCa +-GMpLlA0ALa8DKYrwD4HIrkwZhR0In6spRIXzL4GtMh6QRr+jhiYaHv5+HBg6XJxg +-Fyo6dIMzMH1hVBHL7avg5tKifvVrbxi3Cgst/ek+7wrGsxDp3MJGF/hd/aTa/55J +-WpzmM+Yklvc/ulsrHHo1wtZn/qtmUIttKGAr79dgw8eTvI02kfN/+NsRE8Scd3bB +-rrcCaoF6qUWD4gXmuVbBlDePSHFjIuwXZQeVikvfj8ZaCuWw419eaxGrDPmF60Tp +-+ARz8un+XJiM9XOva7R+zdRcAitMOeGylZUtQofX1bOQQ7dsE/He3fbE+Ik/0XX1 +-ksOR1YqI0JDs3G3eicJlcZaLDQP9nL9bFqyS2+r+eXyt66/3FsvbzSUr5R/7mp/i +-Ucw6UwxI5g69ybR2BlLmEROFcmMDBOAENisgGQLodKcftslWZvB1JdxnwQ5hYIiz +-PtGo/KPaHbDRsSNU30R2be1B2MGyIrZTHN81Hdyhdyox5C315eXbyOD/5YDXC2Og +-/zOhD7osFRXql7PSorW+8oyWHhqPHWykYTe5hnMz15eWniN9gqRMgeKh0bpnX5UH +-oycR7hYQe7xFSkyyBNKr79X9DFHOUGoIMfmR2gyPZFwDwzqLID9ujWc9Otb+fVuI +-yV77zGHcizN300QyNQliBJIWENieJ0f7OyHj+OsdWwIDAQABo4GwMIGtMA8GA1Ud +-EwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBQahGK8SEwzJQTU7tD2 +-A8QZRtGUazBuBgNVHSMEZzBlgBQahGK8SEwzJQTU7tD2A8QZRtGUa6FJpEcwRTEL +-MAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMT +-ElF1b1ZhZGlzIFJvb3QgQ0EgMoICBQkwDQYJKoZIhvcNAQEFBQADggIBAD4KFk2f +-BluornFdLwUvZ+YTRYPENvbzwCYMDbVHZF34tHLJRqUDGCdViXh9duqWNIAXINzn +-g/iN/Ae42l9NLmeyhP3ZRPx3UIHmfLTJDQtyU/h2BwdBR5YM++CCJpNVjP4iH2Bl +-fF/nJrP3MpCYUNQ3cVX2kiF495V5+vgtJodmVjB3pjd4M1IQWK4/YY7yarHvGH5K +-WWPKjaJW1acvvFYfzznB4vsKqBUsfU16Y8Zsl0Q80m/DShcK+JDSV6IZUaUtl0Ha +-B0+pUNqQjZRG4T7wlP0QADj1O+hA4bRuVhogzG9Yje0uRY/W6ZM/57Es3zrWIozc +-hLsib9D45MY56QSIPMO661V6bYCZJPVsAfv4l7CUW+v90m/xd2gNNWQjrLhVoQPR +-TUIZ3Ph1WVaj+ahJefivDrkRoHy3au000LYmYjgahwz46P0u05B/B5EqHdZ+XIWD +-mbA4CD/pXvk1B+TJYm5Xf6dQlfe6yJvmjqIBxdZmv3lh8zwc4bmCXF2gw+nYSL0Z +-ohEUGW6yhhtoPkg3Goi3XZZenMfvJ2II4pEZXNLxId26F0KCl3GBUzGpn/Z9Yr9y +-4aOTHcyKJloJONDO1w2AFrR4pTqHTI2KpdVGl/IsELm8VCLAAVBpQ570su9t+Oza +-8eOx79+Rj1QqCyXBJhnEUhAFZdWCEOrCMc0u +------END CERTIFICATE----- +- + # 88ef81de202eb018452e43f864725cea5fbd1fc2d9d205730709c5d8b8690f46 + Certificate: + Data: +@@ -5759,88 +4435,6 @@ t/2jioSgrGK+KwmHNPBqAbubKVY8/gA3zyNs8U6qtnRGEmyR7jTV7JqR50S+kDFy + SjnRBUkLp7Y3gaVdjKozXoEofKd9J+sAro03 + -----END CERTIFICATE----- + +-# 1a0d20445de5ba1862d19ef880858cbce50102b36e8f0a040c3c69e74522fe6e +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 20:a4:c4:7f:dd:df:e1:c7:53:63:07:13:88:77:60:12 +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO Certification Authority +- Validity +- Not Before: Jan 1 00:00:00 2011 GMT +- Not After : Dec 31 23:59:59 2030 GMT +- Subject: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO Certification Authority +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:d0:40:8b:8b:72:e3:91:1b:f7:51:c1:1b:54:04: +- 98:d3:a9:bf:c1:e6:8a:5d:3b:87:fb:bb:88:ce:0d: +- e3:2f:3f:06:96:f0:a2:29:50:99:ae:db:3b:a1:57: +- b0:74:51:71:cd:ed:42:91:4d:41:fe:a9:c8:d8:6a: +- 86:77:44:bb:59:66:97:50:5e:b4:d4:2c:70:44:cf: +- da:37:95:42:69:3c:30:c4:71:b3:52:f0:21:4d:a1: +- d8:ba:39:7c:1c:9e:a3:24:9d:f2:83:16:98:aa:16: +- 7c:43:9b:15:5b:b7:ae:34:91:fe:d4:62:26:18:46: +- 9a:3f:eb:c1:f9:f1:90:57:eb:ac:7a:0d:8b:db:72: +- 30:6a:66:d5:e0:46:a3:70:dc:68:d9:ff:04:48:89: +- 77:de:b5:e9:fb:67:6d:41:e9:bc:39:bd:32:d9:62: +- 02:f1:b1:a8:3d:6e:37:9c:e2:2f:e2:d3:a2:26:8b: +- c6:b8:55:43:88:e1:23:3e:a5:d2:24:39:6a:47:ab: +- 00:d4:a1:b3:a9:25:fe:0d:3f:a7:1d:ba:d3:51:c1: +- 0b:a4:da:ac:38:ef:55:50:24:05:65:46:93:34:4f: +- 2d:8d:ad:c6:d4:21:19:d2:8e:ca:05:61:71:07:73: +- 47:e5:8a:19:12:bd:04:4d:ce:4e:9c:a5:48:ac:bb: +- 26:f7 +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Subject Key Identifier: +- 0B:58:E5:8B:C6:4C:15:37:A4:40:A9:30:A9:21:BE:47:36:5A:56:FF +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- Signature Algorithm: sha1WithRSAEncryption +- 2f:c9:c4:1c:07:3b:cf:61:02:00:b1:d9:21:51:75:72:03:30: +- b0:c4:16:1f:6c:00:8b:10:ac:af:f1:47:d4:ae:10:3c:0c:1a: +- f8:d4:93:6c:ac:10:37:7c:b7:a6:83:64:ad:cd:df:0e:87:33: +- 9d:37:b0:c6:7b:38:72:b1:f3:1a:0e:a3:f9:55:7a:6d:03:66: +- 03:17:95:4a:f1:b1:7a:df:56:21:06:42:8f:b1:d3:a8:85:de: +- ee:97:1d:62:eb:a7:e7:31:12:66:c3:0f:a6:4b:2e:41:82:f7: +- fd:c9:1b:a8:1b:af:ee:3c:ce:e3:9c:ae:28:07:a1:2c:9b:24: +- c2:0f:23:26:83:32:8b:86:0f:1f:2b:12:46:25:16:8f:76:90: +- 03:6b:de:bc:aa:22:68:6b:8c:a1:ac:2b:11:39:a6:db:70:c2: +- 7d:72:e9:33:e7:fc:26:f1:74:5a:91:e6:9d:84:ac:f8:a8:06: +- 19:46:e6:a7:e9:aa:34:22:a4:a1:9f:7a:ad:b7:b2:a4:9a:33: +- 88:71:02:3c:2e:d6:7a:b2:1f:a2:ca:c0:dd:2f:10:94:fd:b3: +- 8c:84:20:79:46:d5:05:d4:10:e4:d2:db:64:4f:b8:5b:ee:1b: +- c5:20:47:5b:94:ab:6e:d4:95:33:1d:a6:15:71:f1:f8:94:ca: +- 54:39:3e:c1 +------BEGIN CERTIFICATE----- +-MIID0DCCArigAwIBAgIQIKTEf93f4cdTYwcTiHdgEjANBgkqhkiG9w0BAQUFADCB +-gTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G +-A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJzAlBgNV +-BAMTHkNPTU9ETyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTAxMDEwMDAw +-MDBaFw0zMDEyMzEyMzU5NTlaMIGBMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl +-YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01P +-RE8gQ0EgTGltaXRlZDEnMCUGA1UEAxMeQ09NT0RPIENlcnRpZmljYXRpb24gQXV0 +-aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECLi3LjkRv3 +-UcEbVASY06m/weaKXTuH+7uIzg3jLz8GlvCiKVCZrts7oVewdFFxze1CkU1B/qnI +-2GqGd0S7WWaXUF601CxwRM/aN5VCaTwwxHGzUvAhTaHYujl8HJ6jJJ3ygxaYqhZ8 +-Q5sVW7euNJH+1GImGEaaP+vB+fGQV+useg2L23IwambV4EajcNxo2f8ESIl33rXp +-+2dtQem8Ob0y2WIC8bGoPW43nOIv4tOiJovGuFVDiOEjPqXSJDlqR6sA1KGzqSX+ +-DT+nHbrTUcELpNqsOO9VUCQFZUaTNE8tja3G1CEZ0o7KBWFxB3NH5YoZEr0ETc5O +-nKVIrLsm9wIDAQABo0IwQDAdBgNVHQ4EFgQUC1jli8ZMFTekQKkwqSG+RzZaVv8w +-DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD +-ggEBAC/JxBwHO89hAgCx2SFRdXIDMLDEFh9sAIsQrK/xR9SuEDwMGvjUk2ysEDd8 +-t6aDZK3N3w6HM503sMZ7OHKx8xoOo/lVem0DZgMXlUrxsXrfViEGQo+x06iF3u6X +-HWLrp+cxEmbDD6ZLLkGC9/3JG6gbr+48zuOcrigHoSybJMIPIyaDMouGDx8rEkYl +-Fo92kANr3ryqImhrjKGsKxE5pttwwn1y6TPn/CbxdFqR5p2ErPioBhlG5qfpqjQi +-pKGfeq23sqSaM4hxAjwu1nqyH6LKwN0vEJT9s4yEIHlG1QXUEOTS22RPuFvuG8Ug +-R1uUq27UlTMdphVx8fiUylQ5PsE= +------END CERTIFICATE----- +- + # 1793927a0614549789adce2f8f34f7f0b66d0f3ae3a3b84d21ec15dbba4fadc7 + Certificate: + Data: +@@ -6201,328 +4795,6 @@ L6KCq9NjRHDEjf8tM7qtj3u1cIiuPhnPQCjY/MiQu12ZIvVS5ljFH4gxQ+6IHdfG + jjxDah2nGN59PRbxYvnKkKj9 + -----END CERTIFICATE----- + +-# 55903859c8c0c3ebb8759ece4e2557225ff5758bbd38ebd48276601e1bd58097 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 08:bd:85:97:6c:99:27:a4:80:68:47:3b +- Signature Algorithm: ecdsa-with-SHA384 +- Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P384 Certification Authority +- Validity +- Not Before: Aug 23 19:36:43 2017 GMT +- Not After : Aug 23 19:36:43 2042 GMT +- Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P384 Certification Authority +- Subject Public Key Info: +- Public Key Algorithm: id-ecPublicKey +- Public-Key: (384 bit) +- pub: +- 04:6b:da:0d:75:35:08:31:47:05:ae:45:99:55:f1: +- 11:13:2e:4a:f8:10:31:23:a3:7e:83:d3:7f:28:08: +- 3a:26:1a:3a:cf:97:82:1f:80:b7:27:09:8f:d1:8e: +- 30:c4:0a:9b:0e:ac:58:04:ab:f7:36:7d:94:23:a4: +- 9b:0a:8a:8b:ab:eb:fd:39:25:66:f1:5e:fe:8c:ae: +- 8d:41:79:9d:09:60:ce:28:a9:d3:8a:6d:f3:d6:45: +- d4:f2:98:84:38:65:a0 +- ASN1 OID: secp384r1 +- NIST CURVE: P-384 +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- 55:A9:84:89:D2:C1:32:BD:18:CB:6C:A6:07:4E:C8:E7:9D:BE:82:90 +- Signature Algorithm: ecdsa-with-SHA384 +- 30:64:02:30:37:01:92:97:45:12:7e:a0:f3:3e:ad:19:3a:72: +- dd:f4:50:93:03:12:be:44:d2:4f:41:a4:8c:9c:9d:1f:a3:f6: +- c2:92:e7:48:14:fe:4e:9b:a5:91:57:ae:c6:37:72:bb:02:30: +- 67:25:0a:b1:0c:5e:ee:a9:63:92:6f:e5:90:0b:fe:66:22:ca: +- 47:fd:8a:31:f7:83:fe:7a:bf:10:be:18:2b:1e:8f:f6:29:1e: +- 94:59:ef:8e:21:37:cb:51:98:a5:6e:4b +------BEGIN CERTIFICATE----- +-MIICnTCCAiSgAwIBAgIMCL2Fl2yZJ6SAaEc7MAoGCCqGSM49BAMDMIGRMQswCQYD +-VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf +-BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3 +-YXZlIEdsb2JhbCBFQ0MgUDM4NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x +-NzA4MjMxOTM2NDNaFw00MjA4MjMxOTM2NDNaMIGRMQswCQYDVQQGEwJVUzERMA8G +-A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0 +-d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF +-Q0MgUDM4NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTB2MBAGByqGSM49AgEGBSuB +-BAAiA2IABGvaDXU1CDFHBa5FmVXxERMuSvgQMSOjfoPTfygIOiYaOs+Xgh+AtycJ +-j9GOMMQKmw6sWASr9zZ9lCOkmwqKi6vr/TklZvFe/oyujUF5nQlgziip04pt89ZF +-1PKYhDhloKNDMEEwDwYDVR0TAQH/BAUwAwEB/zAPBgNVHQ8BAf8EBQMDBwYAMB0G +-A1UdDgQWBBRVqYSJ0sEyvRjLbKYHTsjnnb6CkDAKBggqhkjOPQQDAwNnADBkAjA3 +-AZKXRRJ+oPM+rRk6ct30UJMDEr5E0k9BpIycnR+j9sKS50gU/k6bpZFXrsY3crsC +-MGclCrEMXu6pY5Jv5ZAL/mYiykf9ijH3g/56vxC+GCsej/YpHpRZ744hN8tRmKVu +-Sw== +------END CERTIFICATE----- +- +-# 945bbc825ea554f489d1fd51a73ddf2ea624ac7019a05205225c22a78ccfa8b4 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 0d:6a:5f:08:3f:28:5c:3e:51:95:df:5d +- Signature Algorithm: ecdsa-with-SHA256 +- Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P256 Certification Authority +- Validity +- Not Before: Aug 23 19:35:10 2017 GMT +- Not After : Aug 23 19:35:10 2042 GMT +- Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P256 Certification Authority +- Subject Public Key Info: +- Public Key Algorithm: id-ecPublicKey +- Public-Key: (256 bit) +- pub: +- 04:7e:fb:6c:e6:23:e3:73:32:08:ca:60:e6:53:9c: +- ba:74:8d:18:b0:78:90:52:80:dd:38:c0:4a:1d:d1: +- a8:cc:93:a4:97:06:38:ca:0d:15:62:c6:8e:01:2a: +- 65:9d:aa:df:34:91:2e:81:c1:e4:33:92:31:c4:fd: +- 09:3a:a6:3f:ad +- ASN1 OID: prime256v1 +- NIST CURVE: P-256 +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- A3:41:06:AC:90:6D:D1:4A:EB:75:A5:4A:10:99:B3:B1:A1:8B:4A:F7 +- Signature Algorithm: ecdsa-with-SHA256 +- 30:44:02:20:07:e6:54:da:0e:a0:5a:b2:ae:11:9f:87:c5:b6: +- ff:69:de:25:be:f8:a0:b7:08:f3:44:ce:2a:df:08:21:0c:37: +- 02:20:2d:26:03:a0:05:bd:6b:d1:f6:5c:f8:65:cc:86:6d:b3: +- 9c:34:48:63:84:09:c5:8d:77:1a:e2:cc:9c:e1:74:7b +------BEGIN CERTIFICATE----- +-MIICYDCCAgegAwIBAgIMDWpfCD8oXD5Rld9dMAoGCCqGSM49BAMCMIGRMQswCQYD +-VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf +-BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3 +-YXZlIEdsb2JhbCBFQ0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x +-NzA4MjMxOTM1MTBaFw00MjA4MjMxOTM1MTBaMIGRMQswCQYDVQQGEwJVUzERMA8G +-A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0 +-d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF +-Q0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTBZMBMGByqGSM49AgEGCCqG +-SM49AwEHA0IABH77bOYj43MyCMpg5lOcunSNGLB4kFKA3TjASh3RqMyTpJcGOMoN +-FWLGjgEqZZ2q3zSRLoHB5DOSMcT9CTqmP62jQzBBMA8GA1UdEwEB/wQFMAMBAf8w +-DwYDVR0PAQH/BAUDAwcGADAdBgNVHQ4EFgQUo0EGrJBt0UrrdaVKEJmzsaGLSvcw +-CgYIKoZIzj0EAwIDRwAwRAIgB+ZU2g6gWrKuEZ+Hxbb/ad4lvvigtwjzRM4q3wgh +-DDcCIC0mA6AFvWvR9lz4ZcyGbbOcNEhjhAnFjXca4syc4XR7 +------END CERTIFICATE----- +- +-# 97552015f5ddfc3c8788c006944555408894450084f100867086bc1a2bb58dc8 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 05:f7:0e:86:da:49:f3:46:35:2e:ba:b2 +- Signature Algorithm: sha256WithRSAEncryption +- Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global Certification Authority +- Validity +- Not Before: Aug 23 19:34:12 2017 GMT +- Not After : Aug 23 19:34:12 2042 GMT +- Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global Certification Authority +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (4096 bit) +- Modulus: +- 00:b9:5d:51:28:4b:3c:37:92:d1:82:ce:bd:1d:bd: +- cd:dd:b8:ab:cf:0a:3e:e1:5d:e5:dc:aa:09:b9:57: +- 02:3e:e6:63:61:df:f2:0f:82:63:ae:a3:f7:ac:73: +- d1:7c:e7:b3:0b:af:08:00:09:59:7f:cd:29:2a:88: +- 93:87:17:18:80:ed:88:b2:b4:b6:10:1f:2d:d6:5f: +- 55:a2:13:5d:d1:c6:eb:06:56:89:88:fe:ac:32:9d: +- fd:5c:c3:05:c7:6e:ee:86:89:ba:88:03:9d:72:21: +- 86:90:ae:8f:03:a5:dc:9f:88:28:cb:a3:92:49:0f: +- ec:d0:0f:e2:6d:44:4f:80:6a:b2:d4:e7:a0:0a:53: +- 01:ba:8e:97:91:76:6e:bc:fc:d5:6b:36:e6:40:88: +- d6:7b:2f:5f:05:e8:2c:6d:11:f3:e7:b2:be:92:44: +- 4c:d2:97:a4:fe:d2:72:81:43:07:9c:e9:11:3e:f5: +- 8b:1a:59:7d:1f:68:58:dd:04:00:2c:96:f3:43:b3: +- 7e:98:19:74:d9:9c:73:d9:18:be:41:c7:34:79:d9: +- f4:62:c2:43:b9:b3:27:b0:22:cb:f9:3d:52:c7:30: +- 47:b3:c9:3e:b8:6a:e2:e7:e8:81:70:5e:42:8b:4f: +- 26:a5:fe:3a:c2:20:6e:bb:f8:16:8e:cd:0c:a9:b4: +- 1b:6c:76:10:e1:58:79:46:3e:54:ce:80:a8:57:09: +- 37:29:1b:99:13:8f:0c:c8:d6:2c:1c:fb:05:e8:08: +- 95:3d:65:46:dc:ee:cd:69:e2:4d:8f:87:28:4e:34: +- 0b:3e:cf:14:d9:bb:dd:b6:50:9a:ad:77:d4:19:d6: +- da:1a:88:c8:4e:1b:27:75:d8:b2:08:f1:ae:83:30: +- b9:11:0e:cd:87:f0:84:8d:15:72:7c:a1:ef:cc:f2: +- 88:61:ba:f4:69:bb:0c:8c:0b:75:57:04:b8:4e:2a: +- 14:2e:3d:0f:1c:1e:32:a6:62:36:ee:66:e2:22:b8: +- 05:40:63:10:22:f3:33:1d:74:72:8a:2c:f5:39:29: +- a0:d3:e7:1b:80:84:2d:c5:3d:e3:4d:b1:fd:1a:6f: +- ba:65:07:3b:58:ec:42:45:26:fb:d8:da:25:72:c4: +- f6:00:b1:22:79:bd:e3:7c:59:62:4a:9c:05:6f:3d: +- ce:e6:d6:47:63:99:c6:24:6f:72:12:c8:ac:7f:90: +- b4:0b:91:70:e8:b7:e6:16:10:71:17:ce:de:06:4f: +- 48:41:7d:35:4a:a3:89:f2:c9:4b:7b:41:11:6d:67: +- b7:08:98:4c:e5:11:19:ae:42:80:dc:fb:90:05:d4: +- f8:50:ca:be:e4:ad:c7:c2:94:d7:16:9d:e6:17:8f: +- af:36:fb +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- 99:E0:19:67:0D:62:DB:76:B3:DA:3D:B8:5B:E8:FD:42:D2:31:0E:87 +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- Signature Algorithm: sha256WithRSAEncryption +- 98:73:70:e2:b0:d3:ed:39:ec:4c:60:d9:a9:12:86:17:1e:96: +- d0:e8:54:28:3b:64:2d:21:a6:f8:9d:56:13:6a:48:3d:4f:c7: +- 3e:29:db:6d:58:83:54:3d:87:7d:23:05:d4:e4:1c:dc:e8:38: +- 65:86:c5:75:a7:5a:db:35:05:bd:77:de:bb:29:37:40:05:07: +- c3:94:52:9f:ca:64:dd:f1:1b:2b:dc:46:0a:10:02:31:fd:4a: +- 68:0d:07:64:90:e6:1e:f5:2a:a1:a8:bb:3c:5d:f9:a3:08:0b: +- 11:0c:f1:3f:2d:10:94:6f:fe:e2:34:87:83:d6:cf:e5:1b:35: +- 6d:d2:03:e1:b0:0d:a8:a0:aa:46:27:82:36:a7:15:b6:08:a6: +- 42:54:57:b6:99:5a:e2:0b:79:90:d7:57:12:51:35:19:88:41: +- 68:25:d4:37:17:84:15:fb:01:72:dc:95:de:52:26:20:98:26: +- e2:76:f5:27:6f:fa:00:3b:4a:61:d9:0d:cb:51:93:2a:fd:16: +- 06:96:a7:23:9a:23:48:fe:51:bd:b6:c4:b0:b1:54:ce:de:6c: +- 41:ad:16:67:7e:db:fd:38:cd:b9:38:4e:b2:c1:60:cb:9d:17: +- df:58:9e:7a:62:b2:26:8f:74:95:9b:e4:5b:1d:d2:0f:dd:98: +- 1c:9b:59:b9:23:d3:31:a0:a6:ff:38:dd:cf:20:4f:e9:58:56: +- 3a:67:c3:d1:f6:99:99:9d:ba:36:b6:80:2f:88:47:4f:86:bf: +- 44:3a:80:e4:37:1c:a6:ba:ea:97:98:11:d0:84:62:47:64:1e: +- aa:ee:40:bf:34:b1:9c:8f:4e:e1:f2:92:4f:1f:8e:f3:9e:97: +- de:f3:a6:79:6a:89:71:4f:4b:27:17:48:fe:ec:f4:50:0f:4f: +- 49:7d:cc:45:e3:bd:7a:40:c5:41:dc:61:56:27:06:69:e5:72: +- 41:81:d3:b6:01:89:a0:2f:3a:72:79:fe:3a:30:bf:41:ec:c7: +- 62:3e:91:4b:c7:d9:31:76:42:f9:f7:3c:63:ec:26:8c:73:0c: +- 7d:1a:1d:ea:a8:7c:87:a8:c2:27:7c:e1:33:41:0f:cf:cf:fc: +- 00:a0:22:80:9e:4a:a7:6f:00:b0:41:45:b7:22:ca:68:48:c5: +- 42:a2:ae:dd:1d:f2:e0:6e:4e:05:58:b1:c0:90:16:2a:a4:3d: +- 10:40:be:8f:62:63:83:a9:9c:82:7d:2d:02:e9:83:30:7c:cb: +- 27:c9:fd:1e:66:00:b0:2e:d3:21:2f:8e:33:16:6c:98:ed:10: +- a8:07:d6:cc:93:cf:db:d1:69:1c:e4:ca:c9:e0:b6:9c:e9:ce: +- 71:71:de:6c:3f:16:a4:79 +------BEGIN CERTIFICATE----- +-MIIF2jCCA8KgAwIBAgIMBfcOhtpJ80Y1LrqyMA0GCSqGSIb3DQEBCwUAMIGIMQsw +-CQYDVQQGEwJVUzERMA8GA1UECAwISWxsaW5vaXMxEDAOBgNVBAcMB0NoaWNhZ28x +-ITAfBgNVBAoMGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjExMC8GA1UEAwwoVHJ1 +-c3R3YXZlIEdsb2JhbCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xNzA4MjMx +-OTM0MTJaFw00MjA4MjMxOTM0MTJaMIGIMQswCQYDVQQGEwJVUzERMA8GA1UECAwI +-SWxsaW5vaXMxEDAOBgNVBAcMB0NoaWNhZ28xITAfBgNVBAoMGFRydXN0d2F2ZSBI +-b2xkaW5ncywgSW5jLjExMC8GA1UEAwwoVHJ1c3R3YXZlIEdsb2JhbCBDZXJ0aWZp +-Y2F0aW9uIEF1dGhvcml0eTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB +-ALldUShLPDeS0YLOvR29zd24q88KPuFd5dyqCblXAj7mY2Hf8g+CY66j96xz0Xzn +-swuvCAAJWX/NKSqIk4cXGIDtiLK0thAfLdZfVaITXdHG6wZWiYj+rDKd/VzDBcdu +-7oaJuogDnXIhhpCujwOl3J+IKMujkkkP7NAP4m1ET4BqstTnoApTAbqOl5F2brz8 +-1Ws25kCI1nsvXwXoLG0R8+eyvpJETNKXpP7ScoFDB5zpET71ixpZfR9oWN0EACyW +-80OzfpgZdNmcc9kYvkHHNHnZ9GLCQ7mzJ7Aiy/k9UscwR7PJPrhq4ufogXBeQotP +-JqX+OsIgbrv4Fo7NDKm0G2x2EOFYeUY+VM6AqFcJNykbmROPDMjWLBz7BegIlT1l +-RtzuzWniTY+HKE40Cz7PFNm73bZQmq131BnW2hqIyE4bJ3XYsgjxroMwuREOzYfw +-hI0Vcnyh78zyiGG69Gm7DIwLdVcEuE4qFC49DxweMqZiNu5m4iK4BUBjECLzMx10 +-coos9TkpoNPnG4CELcU9402x/RpvumUHO1jsQkUm+9jaJXLE9gCxInm943xZYkqc +-BW89zubWR2OZxiRvchLIrH+QtAuRcOi35hYQcRfO3gZPSEF9NUqjifLJS3tBEW1n +-twiYTOURGa5CgNz7kAXU+FDKvuStx8KU1xad5hePrzb7AgMBAAGjQjBAMA8GA1Ud +-EwEB/wQFMAMBAf8wHQYDVR0OBBYEFJngGWcNYtt2s9o9uFvo/ULSMQ6HMA4GA1Ud +-DwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAgEAmHNw4rDT7TnsTGDZqRKGFx6W +-0OhUKDtkLSGm+J1WE2pIPU/HPinbbViDVD2HfSMF1OQc3Og4ZYbFdada2zUFvXfe +-uyk3QAUHw5RSn8pk3fEbK9xGChACMf1KaA0HZJDmHvUqoai7PF35owgLEQzxPy0Q +-lG/+4jSHg9bP5Rs1bdID4bANqKCqRieCNqcVtgimQlRXtpla4gt5kNdXElE1GYhB +-aCXUNxeEFfsBctyV3lImIJgm4nb1J2/6ADtKYdkNy1GTKv0WBpanI5ojSP5RvbbE +-sLFUzt5sQa0WZ37b/TjNuThOssFgy50X31ieemKyJo90lZvkWx3SD92YHJtZuSPT +-MaCm/zjdzyBP6VhWOmfD0faZmZ26NraAL4hHT4a/RDqA5Dccprrql5gR0IRiR2Qe +-qu5AvzSxnI9O4fKSTx+O856X3vOmeWqJcU9LJxdI/uz0UA9PSX3MReO9ekDFQdxh +-VicGaeVyQYHTtgGJoC86cnn+OjC/QezHYj6RS8fZMXZC+fc8Y+wmjHMMfRod6qh8 +-h6jCJ3zhM0EPz8/8AKAigJ5Kp28AsEFFtyLKaEjFQqKu3R3y4G5OBVixwJAWKqQ9 +-EEC+j2Jjg6mcgn0tAumDMHzLJ8n9HmYAsC7TIS+OMxZsmO0QqAfWzJPP29FpHOTK +-yeC2nOnOcXHebD8WpHk= +------END CERTIFICATE----- +- +-# f1c1b50ae5a20dd8030ec9f6bc24823dd367b5255759b4e71b61fce9f7375d73 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 0c:f0:8e:5c:08:16:a5:ad:42:7f:f0:eb:27:18:59:d0 +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = US, O = SecureTrust Corporation, CN = SecureTrust CA +- Validity +- Not Before: Nov 7 19:31:18 2006 GMT +- Not After : Dec 31 19:40:55 2029 GMT +- Subject: C = US, O = SecureTrust Corporation, CN = SecureTrust CA +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (2048 bit) +- Modulus: +- 00:ab:a4:81:e5:95:cd:f5:f6:14:8e:c2:4f:ca:d4: +- e2:78:95:58:9c:41:e1:0d:99:40:24:17:39:91:33: +- 66:e9:be:e1:83:af:62:5c:89:d1:fc:24:5b:61:b3: +- e0:11:11:41:1c:1d:6e:f0:b8:bb:f8:de:a7:81:ba: +- a6:48:c6:9f:1d:bd:be:8e:a9:41:3e:b8:94:ed:29: +- 1a:d4:8e:d2:03:1d:03:ef:6d:0d:67:1c:57:d7:06: +- ad:ca:c8:f5:fe:0e:af:66:25:48:04:96:0b:5d:a3: +- ba:16:c3:08:4f:d1:46:f8:14:5c:f2:c8:5e:01:99: +- 6d:fd:88:cc:86:a8:c1:6f:31:42:6c:52:3e:68:cb: +- f3:19:34:df:bb:87:18:56:80:26:c4:d0:dc:c0:6f: +- df:de:a0:c2:91:16:a0:64:11:4b:44:bc:1e:f6:e7: +- fa:63:de:66:ac:76:a4:71:a3:ec:36:94:68:7a:77: +- a4:b1:e7:0e:2f:81:7a:e2:b5:72:86:ef:a2:6b:8b: +- f0:0f:db:d3:59:3f:ba:72:bc:44:24:9c:e3:73:b3: +- f7:af:57:2f:42:26:9d:a9:74:ba:00:52:f2:4b:cd: +- 53:7c:47:0b:36:85:0e:66:a9:08:97:16:34:57:c1: +- 66:f7:80:e3:ed:70:54:c7:93:e0:2e:28:15:59:87: +- ba:bb +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- 1.3.6.1.4.1.311.20.2: +- ...C.A +- X509v3 Key Usage: +- Digital Signature, Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- 42:32:B6:16:FA:04:FD:FE:5D:4B:7A:C3:FD:F7:4C:40:1D:5A:43:AF +- X509v3 CRL Distribution Points: +- +- Full Name: +- URI:http://crl.securetrust.com/STCA.crl +- +- 1.3.6.1.4.1.311.21.1: +- ... +- Signature Algorithm: sha1WithRSAEncryption +- 30:ed:4f:4a:e1:58:3a:52:72:5b:b5:a6:a3:65:18:a6:bb:51: +- 3b:77:e9:9d:ea:d3:9f:5c:e0:45:65:7b:0d:ca:5b:e2:70:50: +- b2:94:05:14:ae:49:c7:8d:41:07:12:73:94:7e:0c:23:21:fd: +- bc:10:7f:60:10:5a:72:f5:98:0e:ac:ec:b9:7f:dd:7a:6f:5d: +- d3:1c:f4:ff:88:05:69:42:a9:05:71:c8:b7:ac:26:e8:2e:b4: +- 8c:6a:ff:71:dc:b8:b1:df:99:bc:7c:21:54:2b:e4:58:a2:bb: +- 57:29:ae:9e:a9:a3:19:26:0f:99:2e:08:b0:ef:fd:69:cf:99: +- 1a:09:8d:e3:a7:9f:2b:c9:36:34:7b:24:b3:78:4c:95:17:a4: +- 06:26:1e:b6:64:52:36:5f:60:67:d9:9c:c5:05:74:0b:e7:67: +- 23:d2:08:fc:88:e9:ae:8b:7f:e1:30:f4:37:7e:fd:c6:32:da: +- 2d:9e:44:30:30:6c:ee:07:de:d2:34:fc:d2:ff:40:f6:4b:f4: +- 66:46:06:54:a6:f2:32:0a:63:26:30:6b:9b:d1:dc:8b:47:ba: +- e1:b9:d5:62:d0:a2:a0:f4:67:05:78:29:63:1a:6f:04:d6:f8: +- c6:4c:a3:9a:b1:37:b4:8d:e5:28:4b:1d:9e:2c:c2:b8:68:bc: +- ed:02:ee:31 +------BEGIN CERTIFICATE----- +-MIIDuDCCAqCgAwIBAgIQDPCOXAgWpa1Cf/DrJxhZ0DANBgkqhkiG9w0BAQUFADBI +-MQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24x +-FzAVBgNVBAMTDlNlY3VyZVRydXN0IENBMB4XDTA2MTEwNzE5MzExOFoXDTI5MTIz +-MTE5NDA1NVowSDELMAkGA1UEBhMCVVMxIDAeBgNVBAoTF1NlY3VyZVRydXN0IENv +-cnBvcmF0aW9uMRcwFQYDVQQDEw5TZWN1cmVUcnVzdCBDQTCCASIwDQYJKoZIhvcN +-AQEBBQADggEPADCCAQoCggEBAKukgeWVzfX2FI7CT8rU4niVWJxB4Q2ZQCQXOZEz +-Zum+4YOvYlyJ0fwkW2Gz4BERQRwdbvC4u/jep4G6pkjGnx29vo6pQT64lO0pGtSO +-0gMdA+9tDWccV9cGrcrI9f4Or2YlSASWC12juhbDCE/RRvgUXPLIXgGZbf2IzIao +-wW8xQmxSPmjL8xk037uHGFaAJsTQ3MBv396gwpEWoGQRS0S8Hvbn+mPeZqx2pHGj +-7DaUaHp3pLHnDi+BeuK1cobvomuL8A/b01k/unK8RCSc43Oz969XL0Imnal0ugBS +-8kvNU3xHCzaFDmapCJcWNFfBZveA4+1wVMeT4C4oFVmHursCAwEAAaOBnTCBmjAT +-BgkrBgEEAYI3FAIEBh4EAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB +-/zAdBgNVHQ4EFgQUQjK2FvoE/f5dS3rD/fdMQB1aQ68wNAYDVR0fBC0wKzApoCeg +-JYYjaHR0cDovL2NybC5zZWN1cmV0cnVzdC5jb20vU1RDQS5jcmwwEAYJKwYBBAGC +-NxUBBAMCAQAwDQYJKoZIhvcNAQEFBQADggEBADDtT0rhWDpSclu1pqNlGKa7UTt3 +-6Z3q059c4EVlew3KW+JwULKUBRSuSceNQQcSc5R+DCMh/bwQf2AQWnL1mA6s7Ll/ +-3XpvXdMc9P+IBWlCqQVxyLesJugutIxq/3HcuLHfmbx8IVQr5Fiiu1cprp6poxkm +-D5kuCLDv/WnPmRoJjeOnnyvJNjR7JLN4TJUXpAYmHrZkUjZfYGfZnMUFdAvnZyPS +-CPyI6a6Lf+Ew9Dd+/cYy2i2eRDAwbO4H3tI0/NL/QPZL9GZGBlSm8jIKYyYwa5vR +-3ItHuuG51WLQoqD0ZwV4KWMabwTW+MZMo5qxN7SN5ShLHZ4swrhovO0C7jE= +------END CERTIFICATE----- +- + # 9bea11c976fe014764c1be56a6f914b5a560317abd9988393382e5161aa0493c + Certificate: + Data: +@@ -7133,136 +5405,6 @@ oYYitmUnDuy2n0Jg5GfCtdpBC8TTi2EbvPofkSvXRAdeuims2cXp71NIWuuA8ShY + Ic2wBlX7Jz9TkHCpBB5XJ7k= + -----END CERTIFICATE----- + +-# 62dd0be9b9f50a163ea0f8e75c053b1eca57ea55c8688f647c6881f2c8357b95 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- bb:40:1c:43:f5:5e:4f:b0 +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: C = CH, O = SwissSign AG, CN = SwissSign Gold CA - G2 +- Validity +- Not Before: Oct 25 08:30:35 2006 GMT +- Not After : Oct 25 08:30:35 2036 GMT +- Subject: C = CH, O = SwissSign AG, CN = SwissSign Gold CA - G2 +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (4096 bit) +- Modulus: +- 00:af:e4:ee:7e:8b:24:0e:12:6e:a9:50:2d:16:44: +- 3b:92:92:5c:ca:b8:5d:84:92:42:13:2a:bc:65:57: +- 82:40:3e:57:24:cd:50:8b:25:2a:b7:6f:fc:ef:a2: +- d0:c0:1f:02:24:4a:13:96:8f:23:13:e6:28:58:00: +- a3:47:c7:06:a7:84:23:2b:bb:bd:96:2b:7f:55:cc: +- 8b:c1:57:1f:0e:62:65:0f:dd:3d:56:8a:73:da:ae: +- 7e:6d:ba:81:1c:7e:42:8c:20:35:d9:43:4d:84:fa: +- 84:db:52:2c:f3:0e:27:77:0b:6b:bf:11:2f:72:78: +- 9f:2e:d8:3e:e6:18:37:5a:2a:72:f9:da:62:90:92: +- 95:ca:1f:9c:e9:b3:3c:2b:cb:f3:01:13:bf:5a:cf: +- c1:b5:0a:60:bd:dd:b5:99:64:53:b8:a0:96:b3:6f: +- e2:26:77:91:8c:e0:62:10:02:9f:34:0f:a4:d5:92: +- 33:51:de:be:8d:ba:84:7a:60:3c:6a:db:9f:2b:ec: +- de:de:01:3f:6e:4d:e5:50:86:cb:b4:af:ed:44:40: +- c5:ca:5a:8c:da:d2:2b:7c:a8:ee:be:a6:e5:0a:aa: +- 0e:a5:df:05:52:b7:55:c7:22:5d:32:6a:97:97:63: +- 13:db:c9:db:79:36:7b:85:3a:4a:c5:52:89:f9:24: +- e7:9d:77:a9:82:ff:55:1c:a5:71:69:2b:d1:02:24: +- f2:b3:26:d4:6b:da:04:55:e5:c1:0a:c7:6d:30:37: +- 90:2a:e4:9e:14:33:5e:16:17:55:c5:5b:b5:cb:34: +- 89:92:f1:9d:26:8f:a1:07:d4:c6:b2:78:50:db:0c: +- 0c:0b:7c:0b:8c:41:d7:b9:e9:dd:8c:88:f7:a3:4d: +- b2:32:cc:d8:17:da:cd:b7:ce:66:9d:d4:fd:5e:ff: +- bd:97:3e:29:75:e7:7e:a7:62:58:af:25:34:a5:41: +- c7:3d:bc:0d:50:ca:03:03:0f:08:5a:1f:95:73:78: +- 62:bf:af:72:14:69:0e:a5:e5:03:0e:78:8e:26:28: +- 42:f0:07:0b:62:20:10:67:39:46:fa:a9:03:cc:04: +- 38:7a:66:ef:20:83:b5:8c:4a:56:8e:91:00:fc:8e: +- 5c:82:de:88:a0:c3:e2:68:6e:7d:8d:ef:3c:dd:65: +- f4:5d:ac:51:ef:24:80:ae:aa:56:97:6f:f9:ad:7d: +- da:61:3f:98:77:3c:a5:91:b6:1c:8c:26:da:65:a2: +- 09:6d:c1:e2:54:e3:b9:ca:4c:4c:80:8f:77:7b:60: +- 9a:1e:df:b6:f2:48:1e:0e:ba:4e:54:6d:98:e0:e1: +- a2:1a:a2:77:50:cf:c4:63:92:ec:47:19:9d:eb:e6: +- 6b:ce:c1 +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Key Usage: critical +- Certificate Sign, CRL Sign +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Subject Key Identifier: +- 5B:25:7B:96:A4:65:51:7E:B8:39:F3:C0:78:66:5E:E8:3A:E7:F0:EE +- X509v3 Authority Key Identifier: +- keyid:5B:25:7B:96:A4:65:51:7E:B8:39:F3:C0:78:66:5E:E8:3A:E7:F0:EE +- +- X509v3 Certificate Policies: +- Policy: 2.16.756.1.89.1.2.1.1 +- CPS: http://repository.swisssign.com/ +- +- Signature Algorithm: sha1WithRSAEncryption +- 27:ba:e3:94:7c:f1:ae:c0:de:17:e6:e5:d8:d5:f5:54:b0:83: +- f4:bb:cd:5e:05:7b:4f:9f:75:66:af:3c:e8:56:7e:fc:72:78: +- 38:03:d9:2b:62:1b:00:b9:f8:e9:60:cd:cc:ce:51:8a:c7:50: +- 31:6e:e1:4a:7e:18:2f:69:59:b6:3d:64:81:2b:e3:83:84:e6: +- 22:87:8e:7d:e0:ee:02:99:61:b8:1e:f4:b8:2b:88:12:16:84: +- c2:31:93:38:96:31:a6:b9:3b:53:3f:c3:24:93:56:5b:69:92: +- ec:c5:c1:bb:38:00:e3:ec:17:a9:b8:dc:c7:7c:01:83:9f:32: +- 47:ba:52:22:34:1d:32:7a:09:56:a7:7c:25:36:a9:3d:4b:da: +- c0:82:6f:0a:bb:12:c8:87:4b:27:11:f9:1e:2d:c7:93:3f:9e: +- db:5f:26:6b:52:d9:2e:8a:f1:14:c6:44:8d:15:a9:b7:bf:bd: +- de:a6:1a:ee:ae:2d:fb:48:77:17:fe:bb:ec:af:18:f5:2a:51: +- f0:39:84:97:95:6c:6e:1b:c3:2b:c4:74:60:79:25:b0:0a:27: +- df:df:5e:d2:39:cf:45:7d:42:4b:df:b3:2c:1e:c5:c6:5d:ca: +- 55:3a:a0:9c:69:9a:8f:da:ef:b2:b0:3c:9f:87:6c:12:2b:65: +- 70:15:52:31:1a:24:cf:6f:31:23:50:1f:8c:4f:8f:23:c3:74: +- 41:63:1c:55:a8:14:dd:3e:e0:51:50:cf:f1:1b:30:56:0e:92: +- b0:82:85:d8:83:cb:22:64:bc:2d:b8:25:d5:54:a2:b8:06:ea: +- ad:92:a4:24:a0:c1:86:b5:4a:13:6a:47:cf:2e:0b:56:95:54: +- cb:ce:9a:db:6a:b4:a6:b2:db:41:08:86:27:77:f7:6a:a0:42: +- 6c:0b:38:ce:d7:75:50:32:92:c2:df:2b:30:22:48:d0:d5:41: +- 38:25:5d:a4:e9:5d:9f:c6:94:75:d0:45:fd:30:97:43:8f:90: +- ab:0a:c7:86:73:60:4a:69:2d:de:a5:78:d7:06:da:6a:9e:4b: +- 3e:77:3a:20:13:22:01:d0:bf:68:9e:63:60:6b:35:4d:0b:6d: +- ba:a1:3d:c0:93:e0:7f:23:b3:55:ad:72:25:4e:46:f9:d2:16: +- ef:b0:64:c1:01:9e:e9:ca:a0:6a:98:0e:cf:d8:60:f2:2f:49: +- b8:e4:42:e1:38:35:16:f4:c8:6e:4f:f7:81:56:e8:ba:a3:be: +- 23:af:ae:fd:6f:03:e0:02:3b:30:76:fa:1b:6d:41:cf:01:b1: +- e9:b8:c9:66:f4:db:26:f3:3a:a4:74:f2:49:24:5b:c9:b0:d0: +- 57:c1:fa:3e:7a:e1:97:c9 +------BEGIN CERTIFICATE----- +-MIIFujCCA6KgAwIBAgIJALtAHEP1Xk+wMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNV +-BAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxHzAdBgNVBAMTFlN3aXNzU2ln +-biBHb2xkIENBIC0gRzIwHhcNMDYxMDI1MDgzMDM1WhcNMzYxMDI1MDgzMDM1WjBF +-MQswCQYDVQQGEwJDSDEVMBMGA1UEChMMU3dpc3NTaWduIEFHMR8wHQYDVQQDExZT +-d2lzc1NpZ24gR29sZCBDQSAtIEcyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC +-CgKCAgEAr+TufoskDhJuqVAtFkQ7kpJcyrhdhJJCEyq8ZVeCQD5XJM1QiyUqt2/8 +-76LQwB8CJEoTlo8jE+YoWACjR8cGp4QjK7u9lit/VcyLwVcfDmJlD909Vopz2q5+ +-bbqBHH5CjCA12UNNhPqE21Is8w4ndwtrvxEvcnifLtg+5hg3Wipy+dpikJKVyh+c +-6bM8K8vzARO/Ws/BtQpgvd21mWRTuKCWs2/iJneRjOBiEAKfNA+k1ZIzUd6+jbqE +-emA8atufK+ze3gE/bk3lUIbLtK/tREDFylqM2tIrfKjuvqblCqoOpd8FUrdVxyJd +-MmqXl2MT28nbeTZ7hTpKxVKJ+STnnXepgv9VHKVxaSvRAiTysybUa9oEVeXBCsdt +-MDeQKuSeFDNeFhdVxVu1yzSJkvGdJo+hB9TGsnhQ2wwMC3wLjEHXuendjIj3o02y +-MszYF9rNt85mndT9Xv+9lz4pded+p2JYryU0pUHHPbwNUMoDAw8IWh+Vc3hiv69y +-FGkOpeUDDniOJihC8AcLYiAQZzlG+qkDzAQ4embvIIO1jEpWjpEA/I5cgt6IoMPi +-aG59je883WX0XaxR7ySArqpWl2/5rX3aYT+YdzylkbYcjCbaZaIJbcHiVOO5ykxM +-gI93e2CaHt+28kgeDrpOVG2Y4OGiGqJ3UM/EY5LsRxmd6+ZrzsECAwEAAaOBrDCB +-qTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUWyV7 +-lqRlUX64OfPAeGZe6Drn8O4wHwYDVR0jBBgwFoAUWyV7lqRlUX64OfPAeGZe6Drn +-8O4wRgYDVR0gBD8wPTA7BglghXQBWQECAQEwLjAsBggrBgEFBQcCARYgaHR0cDov +-L3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS8wDQYJKoZIhvcNAQEFBQADggIBACe6 +-45R88a7A3hfm5djV9VSwg/S7zV4Fe0+fdWavPOhWfvxyeDgD2StiGwC5+OlgzczO +-UYrHUDFu4Up+GC9pWbY9ZIEr44OE5iKHjn3g7gKZYbge9LgriBIWhMIxkziWMaa5 +-O1M/wySTVltpkuzFwbs4AOPsF6m43Md8AYOfMke6UiI0HTJ6CVanfCU2qT1L2sCC +-bwq7EsiHSycR+R4tx5M/nttfJmtS2S6K8RTGRI0Vqbe/vd6mGu6uLftIdxf+u+yv +-GPUqUfA5hJeVbG4bwyvEdGB5JbAKJ9/fXtI5z0V9QkvfsywexcZdylU6oJxpmo/a +-77KwPJ+HbBIrZXAVUjEaJM9vMSNQH4xPjyPDdEFjHFWoFN0+4FFQz/EbMFYOkrCC +-hdiDyyJkvC24JdVUorgG6q2SpCSgwYa1ShNqR88uC1aVVMvOmttqtKay20EIhid3 +-92qgQmwLOM7XdVAyksLfKzAiSNDVQTglXaTpXZ/GlHXQRf0wl0OPkKsKx4ZzYEpp +-Ld6leNcG2mqeSz53OiATIgHQv2ieY2BrNU0LbbqhPcCT4H8js1WtciVORvnSFu+w +-ZMEBnunKoGqYDs/YYPIvSbjkQuE4NRb0yG5P94FW6LqjviOvrv1vA+ACOzB2+htt +-Qc8Bsem4yWb02ybzOqR08kkkW8mw0FfB+j564ZfJ +------END CERTIFICATE----- +- + # 59769007f7685d0fcd50872f9f95d5755a5b2b457d81f3692b610a98672f0e1b + Certificate: + Data: +@@ -7381,126 +5523,6 @@ aGHQRiapIVJpLesux+t3zqY6tQMzT3bR51xUAV3LePTJDL/PEo4XLSNolOer/qmy + KwbQBM0= + -----END CERTIFICATE----- + +-# dd6936fe21f8f077c123a1a521c12224f72255b73e03a7260693e8a24b0fa389 +-Certificate: +- Data: +- Version: 3 (0x2) +- Serial Number: +- 95:be:16:a0:f7:2e:46:f1:7b:39:82:72:fa:8b:cd:96 +- Signature Algorithm: sha1WithRSAEncryption +- Issuer: O = TeliaSonera, CN = TeliaSonera Root CA v1 +- Validity +- Not Before: Oct 18 12:00:50 2007 GMT +- Not After : Oct 18 12:00:50 2032 GMT +- Subject: O = TeliaSonera, CN = TeliaSonera Root CA v1 +- Subject Public Key Info: +- Public Key Algorithm: rsaEncryption +- RSA Public-Key: (4096 bit) +- Modulus: +- 00:c2:be:eb:27:f0:21:a3:f3:69:26:55:7e:9d:c5: +- 55:16:91:5c:fd:ef:21:bf:53:80:7a:2d:d2:91:8c: +- 63:31:f0:ec:24:f0:c3:a5:d2:72:7c:10:6d:f4:37: +- b7:e5:e6:7c:79:ea:8c:b5:82:8b:ae:48:b6:ac:00: +- dc:65:75:ec:2a:4d:5f:c1:87:f5:20:65:2b:81:a8: +- 47:3e:89:23:95:30:16:90:7f:e8:57:07:48:e7:19: +- ae:bf:45:67:b1:37:1b:06:2a:fe:de:f9:ac:7d:83: +- fb:5e:ba:e4:8f:97:67:be:4b:8e:8d:64:07:57:38: +- 55:69:34:36:3d:13:48:ef:4f:e2:d3:66:1e:a4:cf: +- 1a:b7:5e:36:33:d4:b4:06:bd:18:01:fd:77:84:50: +- 00:45:f5:8c:5d:e8:23:bc:7e:fe:35:e1:ed:50:7b: +- a9:30:8d:19:d3:09:8e:68:67:5d:bf:3c:97:18:53: +- bb:29:62:c5:ca:5e:72:c1:c7:96:d4:db:2d:a0:b4: +- 1f:69:03:ec:ea:e2:50:f1:0c:3c:f0:ac:f3:53:2d: +- f0:1c:f5:ed:6c:39:39:73:80:16:c8:52:b0:23:cd: +- e0:3e:dc:dd:3c:47:a0:bb:35:8a:e2:98:68:8b:be: +- e5:bf:72:ee:d2:fa:a5:ed:12:ed:fc:98:18:a9:26: +- 76:dc:28:4b:10:20:1c:d3:7f:16:77:2d:ed:6f:80: +- f7:49:bb:53:05:bb:5d:68:c7:d4:c8:75:16:3f:89: +- 5a:8b:f7:17:47:d4:4c:f1:d2:89:79:3e:4d:3d:98: +- a8:61:de:3a:1e:d2:f8:5e:03:e0:c1:c9:1c:8c:d3: +- 8d:4d:d3:95:36:b3:37:5f:63:63:9b:33:14:f0:2d: +- 26:6b:53:7c:89:8c:32:c2:6e:ec:3d:21:00:39:c9: +- a1:68:e2:50:83:2e:b0:3a:2b:f3:36:a0:ac:2f:e4: +- 6f:61:c2:51:09:39:3e:8b:53:b9:bb:67:da:dc:53: +- b9:76:59:36:9d:43:e5:20:e0:3d:32:60:85:22:51: +- b7:c7:33:bb:dd:15:2f:a4:78:a6:07:7b:81:46:36: +- 04:86:dd:79:35:c7:95:2c:3b:b0:a3:17:35:e5:73: +- 1f:b4:5c:59:ef:da:ea:10:65:7b:7a:d0:7f:9f:b3: +- b4:2a:37:3b:70:8b:9b:5b:b9:2b:b7:ec:b2:51:12: +- 97:53:29:5a:d4:f0:12:10:dc:4f:02:bb:12:92:2f: +- 62:d4:3f:69:43:7c:0d:d6:fc:58:75:01:88:9d:58: +- 16:4b:de:ba:90:ff:47:01:89:06:6a:f6:5f:b2:90: +- 6a:b3:02:a6:02:88:bf:b3:47:7e:2a:d9:d5:fa:68: +- 78:35:4d +- Exponent: 65537 (0x10001) +- X509v3 extensions: +- X509v3 Basic Constraints: critical +- CA:TRUE +- X509v3 Key Usage: +- Certificate Sign, CRL Sign +- X509v3 Subject Key Identifier: +- F0:8F:59:38:00:B3:F5:8F:9A:96:0C:D5:EB:FA:7B:AA:17:E8:13:12 +- Signature Algorithm: sha1WithRSAEncryption +- be:e4:5c:62:4e:24:f4:0c:08:ff:f0:d3:0c:68:e4:93:49:22: +- 3f:44:27:6f:bb:6d:de:83:66:ce:a8:cc:0d:fc:f5:9a:06:e5: +- 77:14:91:eb:9d:41:7b:99:2a:84:e5:ff:fc:21:c1:5d:f0:e4: +- 1f:57:b7:75:a9:a1:5f:02:26:ff:d7:c7:f7:4e:de:4f:f8:f7: +- 1c:46:c0:7a:4f:40:2c:22:35:f0:19:b1:d0:6b:67:2c:b0:a8: +- e0:c0:40:37:35:f6:84:5c:5c:e3:af:42:78:fe:a7:c9:0d:50: +- ea:0d:84:76:f6:51:ef:83:53:c6:7a:ff:0e:56:49:2e:8f:7a: +- d6:0c:e6:27:54:e3:4d:0a:60:72:62:cd:91:07:d6:a5:bf:c8: +- 99:6b:ed:c4:19:e6:ab:4c:11:38:c5:6f:31:e2:6e:49:c8:3f: +- 76:80:26:03:26:29:e0:36:f6:f6:20:53:e3:17:70:34:17:9d: +- 63:68:1e:6b:ec:c3:4d:86:b8:13:30:2f:5d:46:0d:47:43:d5: +- 1b:aa:59:0e:b9:5c:8d:06:48:ad:74:87:5f:c7:fc:31:54:41: +- 13:e2:c7:21:0e:9e:e0:1e:0d:e1:c0:7b:43:85:90:c5:8a:58: +- c6:65:0a:78:57:f2:c6:23:0f:01:d9:20:4b:de:0f:fb:92:85: +- 75:2a:5c:73:8d:6d:7b:25:91:ca:ee:45:ae:06:4b:00:cc:d3: +- b1:59:50:da:3a:88:3b:29:43:46:5e:97:2b:54:ce:53:6f:8d: +- 4a:e7:96:fa:bf:71:0e:42:8b:7c:fd:28:a0:d0:48:ca:da:c4: +- 81:4c:bb:a2:73:93:26:c8:eb:0c:d6:26:88:b6:c0:24:cf:bb: +- bd:5b:eb:75:7d:e9:08:8e:86:33:2c:79:77:09:69:a5:89:fc: +- b3:70:90:87:76:8f:d3:22:bb:42:ce:bd:73:0b:20:26:2a:d0: +- 9b:3d:70:1e:24:6c:cd:87:76:a9:17:96:b7:cf:0d:92:fb:8e: +- 18:a9:98:49:d1:9e:fe:60:44:72:21:b9:19:ed:c2:f5:31:f1: +- 39:48:88:90:24:75:54:16:ad:ce:f4:f8:69:14:64:39:fb:a3: +- b8:ba:70:40:c7:27:1c:bf:c4:56:53:fa:63:65:d0:f3:1c:0e: +- 16:f5:6b:86:58:4d:18:d4:e4:0d:8e:a5:9d:5b:91:dc:76:24: +- 50:3f:c6:2a:fb:d9:b7:9c:b5:d6:e6:d0:d9:e8:19:8b:15:71: +- 48:ad:b7:ea:d8:59:88:d4:90:bf:16:b3:d9:e9:ac:59:61:54: +- c8:1c:ba:ca:c1:ca:e1:b9:20:4c:8f:3a:93:89:a5:a0:cc:bf: +- d3:f6:75:a4:75:96:6d:56 +------BEGIN CERTIFICATE----- +-MIIFODCCAyCgAwIBAgIRAJW+FqD3LkbxezmCcvqLzZYwDQYJKoZIhvcNAQEFBQAw +-NzEUMBIGA1UECgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJv +-b3QgQ0EgdjEwHhcNMDcxMDE4MTIwMDUwWhcNMzIxMDE4MTIwMDUwWjA3MRQwEgYD +-VQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UEAwwWVGVsaWFTb25lcmEgUm9vdCBDQSB2 +-MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMK+6yfwIaPzaSZVfp3F +-VRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65ItqwA3GV1 +-7CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+X +-Z75Ljo1kB1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+ +-/jXh7VB7qTCNGdMJjmhnXb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs +-81Mt8Bz17Ww5OXOAFshSsCPN4D7c3TxHoLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkm +-dtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+JWov3F0fUTPHSiXk+TT2YqGHe +-Oh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0hADnJoWjiUIMu +-sDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4 +-pgd7gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fs +-slESl1MpWtTwEhDcTwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQ +-arMCpgKIv7NHfirZ1fpoeDVNAgMBAAGjPzA9MA8GA1UdEwEB/wQFMAMBAf8wCwYD +-VR0PBAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1j5qWDNXr+nuqF+gTEjANBgkqhkiG +-9w0BAQUFAAOCAgEAvuRcYk4k9AwI//DTDGjkk0kiP0Qnb7tt3oNmzqjMDfz1mgbl +-dxSR651Be5kqhOX//CHBXfDkH1e3damhXwIm/9fH907eT/j3HEbAek9ALCI18Bmx +-0GtnLLCo4MBANzX2hFxc469CeP6nyQ1Q6g2EdvZR74NTxnr/DlZJLo961gzmJ1Tj +-TQpgcmLNkQfWpb/ImWvtxBnmq0wROMVvMeJuScg/doAmAyYp4Db29iBT4xdwNBed +-Y2gea+zDTYa4EzAvXUYNR0PVG6pZDrlcjQZIrXSHX8f8MVRBE+LHIQ6e4B4N4cB7 +-Q4WQxYpYxmUKeFfyxiMPAdkgS94P+5KFdSpcc41teyWRyu5FrgZLAMzTsVlQ2jqI +-OylDRl6XK1TOU2+NSueW+r9xDkKLfP0ooNBIytrEgUy7onOTJsjrDNYmiLbAJM+7 +-vVvrdX3pCI6GMyx5dwlppYn8s3CQh3aP0yK7Qs69cwsgJirQmz1wHiRszYd2qReW +-t88NkvuOGKmYSdGe/mBEciG5Ge3C9THxOUiIkCR1VBatzvT4aRRkOfujuLpwQMcn +-HL/EVlP6Y2XQ8xwOFvVrhlhNGNTkDY6lnVuR3HYkUD/GKvvZt5y11ubQ2egZixVx +-SK236thZiNSQvxaz2emsWWFUyBy6ysHK4bkgTI86k4mloMy/0/Z1pHWWbVY= +------END CERTIFICATE----- +- + # 6b328085625318aa50d173c98d8bda09d57e27413d114cf787a0f5d06c030cf6 + Certificate: + Data: +@@ -10879,4 +8901,509 @@ L4x35bcF7DvB7L6Gs4a8wPfc5+pbrrLMtTWGS9DiP7bY+A4A7l3j941Y/8+LN+lj + X273CXE2whJdV/LItM3z7gLfEdxquVeEHVlNjM7IDiPCtyaaEBRx/pOyiriA8A4Q + ntOoUAw3gi/q4Iqd4Sw5/7W0cwDk90imc6y/st53BIe0o82bNSQ3+pCTE4FCxpgm + dTdmQRCsu/WU48IxK63nI1bMNSWSs1A= ++-----END CERTIFICATE----- ++ ++# b49141502d00663d740f2e7ec340c52800962666121a36d09cf7dd2b90384fb4 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ e8:6f:18:7b:d6:39:6b:98:4a:49:98:0a ++ Signature Algorithm: ecdsa-with-SHA512 ++ Issuer: C=HU, L=Budapest, O=Microsec Ltd., organizationIdentifier=VATHU-23584497, CN=e-Szigno TLS Root CA 2023 ++ Validity ++ Not Before: Jul 17 14:00:00 2023 GMT ++ Not After : Jul 17 14:00:00 2038 GMT ++ Subject: C=HU, L=Budapest, O=Microsec Ltd., organizationIdentifier=VATHU-23584497, CN=e-Szigno TLS Root CA 2023 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (521 bit) ++ pub: ++ 04:00:68:0f:df:a2:7c:3c:aa:74:88:61:0a:8d:c2: ++ 4c:a5:01:22:14:d4:f7:60:77:42:9c:0a:38:60:a1: ++ 8c:67:3e:b3:63:e9:fa:91:b0:8b:4b:e6:39:df:02: ++ c2:30:01:52:00:bf:df:8c:ed:59:ad:32:65:ab:09: ++ 59:50:b5:19:c2:68:1c:00:e0:05:5f:da:50:26:1c: ++ c3:ac:04:22:c5:3a:4d:ef:e9:57:58:36:a3:c1:19: ++ 53:10:0a:d1:cd:3f:ef:4b:35:1a:43:8f:42:13:4c: ++ b9:2c:1a:9c:be:30:b6:c4:de:dc:4b:9d:e4:a4:3c: ++ cb:2e:d9:ad:df:df:7d:09:df:2e:92:ff:a1 ++ ASN1 OID: secp521r1 ++ NIST CURVE: P-521 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ 59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45 ++ X509v3 Authority Key Identifier: ++ 59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45 ++ Signature Algorithm: ecdsa-with-SHA512 ++ Signature Value: ++ 30:81:87:02:42:01:2d:da:ae:f5:2e:78:b6:66:b8:9f:b6:70: ++ 7f:66:74:cf:ec:8e:7c:fe:c0:01:79:9a:ce:52:02:e7:c3:d1: ++ 0c:7a:6d:cb:b5:5e:ee:17:a4:9b:db:04:76:ee:29:29:e8:af: ++ fb:ad:ac:52:f4:d7:2b:d6:77:84:10:bd:c5:d2:28:68:34:02: ++ 41:35:76:5a:75:f3:92:86:08:f5:b2:1e:0a:f6:65:0b:da:76: ++ c7:52:ff:0b:1e:80:70:22:30:c3:33:db:18:ed:84:d7:8b:ec: ++ ed:d3:a8:63:81:b5:56:7c:47:c7:56:30:94:68:73:6b:d2:2e: ++ a9:b9:d9:2c:1c:29:bd:0c:ba:b9:65:8b ++-----BEGIN CERTIFICATE----- ++MIICzzCCAjGgAwIBAgINAOhvGHvWOWuYSkmYCjAKBggqhkjOPQQDBDB1MQswCQYD ++VQQGEwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFjAUBgNVBAoMDU1pY3Jvc2VjIEx0 ++ZC4xFzAVBgNVBGEMDlZBVEhVLTIzNTg0NDk3MSIwIAYDVQQDDBllLVN6aWdubyBU ++TFMgUm9vdCBDQSAyMDIzMB4XDTIzMDcxNzE0MDAwMFoXDTM4MDcxNzE0MDAwMFow ++dTELMAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRYwFAYDVQQKDA1NaWNy ++b3NlYyBMdGQuMRcwFQYDVQRhDA5WQVRIVS0yMzU4NDQ5NzEiMCAGA1UEAwwZZS1T ++emlnbm8gVExTIFJvb3QgQ0EgMjAyMzCBmzAQBgcqhkjOPQIBBgUrgQQAIwOBhgAE ++AGgP36J8PKp0iGEKjcJMpQEiFNT3YHdCnAo4YKGMZz6zY+n6kbCLS+Y53wLCMAFS ++AL/fjO1ZrTJlqwlZULUZwmgcAOAFX9pQJhzDrAQixTpN7+lXWDajwRlTEArRzT/v ++SzUaQ49CE0y5LBqcvjC2xN7cS53kpDzLLtmt3999Cd8ukv+ho2MwYTAPBgNVHRMB ++Af8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUWYQCYlpGePVd3I8K ++ECgj3NXW+0UwHwYDVR0jBBgwFoAUWYQCYlpGePVd3I8KECgj3NXW+0UwCgYIKoZI ++zj0EAwQDgYsAMIGHAkIBLdqu9S54tma4n7Zwf2Z0z+yOfP7AAXmazlIC58PRDHpt ++y7Ve7hekm9sEdu4pKeiv+62sUvTXK9Z3hBC9xdIoaDQCQTV2WnXzkoYI9bIeCvZl ++C9p2x1L/Cx6AcCIwwzPbGO2E14vs7dOoY4G1VnxHx1YwlGhza9IuqbnZLBwpvQy6 ++uWWL ++-----END CERTIFICATE----- ++ ++# eec997c0c30f216f7e3b8b307d2bae42412d753fc8219dafd1520b2572850f49 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 23:f9:c3:d6:35:af:8f:28:4b:1f:f0:54:ea:7e:97:9d ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C=CH, O=OISTE Foundation, CN=OISTE Server Root ECC G1 ++ Validity ++ Not Before: May 31 14:42:28 2023 GMT ++ Not After : May 24 14:42:27 2048 GMT ++ Subject: C=CH, O=OISTE Foundation, CN=OISTE Server Root ECC G1 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:17:2f:fa:12:bc:ac:18:f3:0a:f4:44:d6:76:42: ++ 9e:b3:e8:1f:b7:79:a9:58:b6:f8:65:d1:3a:21:4f: ++ a8:eb:a3:be:a4:32:72:f3:b6:01:c9:2b:fd:77:85: ++ 6e:53:dd:ad:ea:aa:2e:25:92:b6:e9:21:11:a8:af: ++ b5:4c:0b:f3:96:60:9a:3b:e7:ea:1a:78:2e:b4:3d: ++ e5:28:de:1c:80:ba:5c:6e:0d:db:19:a5:e3:3f:9c: ++ 2a:b8:40:4b:dd:e6:4f ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ 37:4D:88:65:CF:FC:3D:8A:D5:A3:F1:49:C0:4E:0C:10:6F:42:B4:9C ++ X509v3 Subject Key Identifier: ++ 37:4D:88:65:CF:FC:3D:8A:D5:A3:F1:49:C0:4E:0C:10:6F:42:B4:9C ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: ecdsa-with-SHA384 ++ Signature Value: ++ 30:66:02:31:00:a9:2a:30:1d:d0:c2:9f:90:51:51:40:3e:95: ++ 54:21:cd:16:66:f7:53:6c:08:16:39:d0:12:7c:7f:63:1b:df: ++ e3:38:00:39:d9:2d:53:20:45:0b:1c:60:67:31:43:25:ed:02: ++ 31:00:92:89:ae:e9:5c:62:83:62:61:f9:2d:57:ab:56:b9:11: ++ dd:25:be:6a:4e:4a:1a:82:6b:dc:cf:d3:bc:4a:b3:3c:d7:2e: ++ 9b:db:f8:28:69:bc:6b:2d:ec:31:a1:3a:e3:57 ++-----BEGIN CERTIFICATE----- ++MIICNTCCAbqgAwIBAgIQI/nD1jWvjyhLH/BU6n6XnTAKBggqhkjOPQQDAzBLMQsw ++CQYDVQQGEwJDSDEZMBcGA1UECgwQT0lTVEUgRm91bmRhdGlvbjEhMB8GA1UEAwwY ++T0lTVEUgU2VydmVyIFJvb3QgRUNDIEcxMB4XDTIzMDUzMTE0NDIyOFoXDTQ4MDUy ++NDE0NDIyN1owSzELMAkGA1UEBhMCQ0gxGTAXBgNVBAoMEE9JU1RFIEZvdW5kYXRp ++b24xITAfBgNVBAMMGE9JU1RFIFNlcnZlciBSb290IEVDQyBHMTB2MBAGByqGSM49 ++AgEGBSuBBAAiA2IABBcv+hK8rBjzCvRE1nZCnrPoH7d5qVi2+GXROiFPqOujvqQy ++cvO2Ackr/XeFblPdreqqLiWStukhEaivtUwL85Zgmjvn6hp4LrQ95SjeHIC6XG4N ++2xml4z+cKrhAS93mT6NjMGEwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBQ3 ++TYhlz/w9itWj8UnATgwQb0K0nDAdBgNVHQ4EFgQUN02IZc/8PYrVo/FJwE4MEG9C ++tJwwDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMDA2kAMGYCMQCpKjAd0MKfkFFR ++QD6VVCHNFmb3U2wIFjnQEnx/Yxvf4zgAOdktUyBFCxxgZzFDJe0CMQCSia7pXGKD ++YmH5LVerVrkR3SW+ak5KGoJr3M/TvEqzPNcum9v4KGm8ay3sMaE641c= ++-----END CERTIFICATE----- ++ ++# 9ae36232a5189ffddb353dfd26520c015395d22777dac59db57b98c089a651e6 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 55:a5:d9:67:94:28:c6:ed:0c:fa:27:dd:5b:01:4d:18 ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C=CH, O=OISTE Foundation, CN=OISTE Server Root RSA G1 ++ Validity ++ Not Before: May 31 14:37:16 2023 GMT ++ Not After : May 24 14:37:15 2048 GMT ++ Subject: C=CH, O=OISTE Foundation, CN=OISTE Server Root RSA G1 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:aa:ae:f4:ab:82:cf:fb:e5:37:0b:e7:d5:96:ad: ++ 90:e8:4b:29:dc:55:60:e3:cc:bc:b3:bc:2d:92:b9: ++ e4:a3:7a:f1:81:b4:9e:72:72:43:df:3f:ab:0b:26: ++ b4:ee:7b:1a:69:fb:28:d0:72:5c:4a:6d:69:99:f0: ++ 63:1e:0c:d2:b1:ff:d6:8c:34:d0:ee:db:ac:48:b9: ++ ea:b0:14:8e:d8:07:a9:24:98:dd:e9:09:be:a8:22: ++ 1b:59:39:d1:27:87:dc:1c:cd:f8:fb:b3:eb:e9:93: ++ 78:ed:0f:ce:37:7c:26:77:6e:a1:d8:2c:21:4c:e4: ++ 8a:4f:c7:13:3c:6e:c7:d5:13:97:b2:a8:db:24:69: ++ 83:56:d3:69:cb:82:12:bb:9d:1b:f2:f8:34:f2:98: ++ 2b:2a:8e:04:67:f6:e3:87:a1:1d:ad:6e:ce:36:74: ++ 0e:5e:33:3b:cb:db:51:97:94:6a:95:3c:ce:18:5a: ++ 6e:4b:c6:fc:07:8f:2e:1a:b9:4a:f7:64:34:29:dc: ++ a6:8d:50:e1:8d:8b:4b:e5:48:1b:6e:2e:80:10:3f: ++ e4:9f:1b:65:3f:11:b4:ea:57:69:9f:b4:00:eb:85: ++ 24:99:24:f5:21:9d:97:aa:fb:34:7f:02:6b:15:90: ++ ad:bb:9e:5a:19:7f:a4:8c:d8:fa:6d:28:fc:38:c7: ++ e3:4c:ad:6a:ce:d9:4e:93:92:8e:cc:0c:67:bf:0b: ++ 4b:96:ce:66:67:53:68:cb:17:11:8e:59:f7:ac:9c: ++ 1b:b9:8e:68:44:b7:18:af:e6:e5:0f:65:dc:95:09: ++ b0:93:12:b5:1f:3e:94:a5:c7:88:75:21:b1:de:09: ++ 24:2a:4c:e2:bc:ec:4c:67:47:c2:29:88:b9:0a:ba: ++ f9:c1:74:ce:8c:18:26:65:da:f7:6f:c6:8c:7b:68: ++ 5c:0b:ee:63:c0:5e:4b:f1:4e:cc:9f:2f:0f:e1:e8: ++ 9a:7a:93:f1:e0:c8:db:bf:27:e6:65:29:7b:36:e0: ++ 33:15:73:f2:9d:6b:84:08:68:2b:36:07:2b:27:cc: ++ 78:d8:6a:87:0e:47:74:f4:aa:a0:13:5d:64:7e:f4: ++ db:14:ae:fb:3a:e4:2f:c1:65:e3:b9:7a:40:6c:f0: ++ 06:b7:7b:28:9b:d7:e1:5f:38:73:94:ac:d9:70:93: ++ 2d:dc:84:af:46:1c:a2:7a:2c:3f:81:26:42:e7:d4: ++ d8:c5:6c:84:66:11:8b:77:6b:54:1c:a3:b5:d8:10: ++ f0:ae:29:f7:67:08:88:17:5c:b8:97:79:cf:ea:2b: ++ 2a:ee:58:33:e5:6d:e9:29:aa:65:01:0d:82:13:ec: ++ 25:0b:5d:2c:40:72:15:29:d3:90:2c:f7:1a:43:d5: ++ 6a:f0:69 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ F2:C9:C1:0F:0D:63:00:BB:EC:45:0E:4A:1F:B5:B1:B3:36:CD:0E:8D ++ X509v3 Subject Key Identifier: ++ F2:C9:C1:0F:0D:63:00:BB:EC:45:0E:4A:1F:B5:B1:B3:36:CD:0E:8D ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: sha384WithRSAEncryption ++ Signature Value: ++ 34:67:79:b2:3a:c6:e5:3d:f7:23:72:b9:09:ef:92:ad:27:1f: ++ a0:4e:0a:b2:f5:da:17:0c:a2:85:d2:7e:92:51:fd:15:65:d7: ++ 5c:6b:64:16:ee:8a:45:ca:0c:43:36:44:35:d9:7f:fe:79:3a: ++ 1c:e8:c6:e4:3d:6b:77:d4:21:10:e3:f6:f3:20:4e:a9:be:89: ++ f3:1c:9c:a9:df:bc:30:3a:17:d1:32:43:d0:aa:8a:72:1c:51: ++ 28:4c:dd:36:c8:e4:2d:67:7d:91:87:1c:9d:bc:fc:ab:28:96: ++ 5e:61:5c:b8:22:33:18:48:16:50:ea:ca:2f:e9:a5:49:dc:7f: ++ 3c:a4:19:bc:36:ad:92:e2:b9:f4:4b:d5:eb:08:ad:e7:78:fe: ++ 17:c0:5d:87:77:e8:67:77:4f:00:66:af:f4:b1:03:3a:be:12: ++ 7c:41:35:e5:f4:a6:1b:47:8b:cb:79:f7:d6:bf:17:6e:4e:65: ++ f0:f8:da:57:c1:94:81:e5:7a:56:0d:bb:46:7f:6f:91:fd:7d: ++ e6:17:e4:81:27:bb:05:88:56:dd:20:a5:f7:98:2d:91:19:69: ++ 31:5f:9b:30:f2:99:ad:72:40:96:cc:d8:77:66:9b:b4:d5:0e: ++ b2:10:fe:14:aa:c3:80:71:9d:3d:8d:e8:7d:14:6c:61:64:86: ++ 46:a6:d7:54:c5:b6:d7:90:16:46:a5:85:ca:9e:3a:e3:e6:13: ++ 16:b6:15:23:cc:a9:29:52:fd:00:c6:f6:90:8e:56:8f:89:08: ++ dd:96:aa:e6:d3:6a:a9:86:35:f6:d5:45:78:42:4a:46:fc:03: ++ c8:5e:d8:66:f6:45:65:24:b4:be:87:7b:55:20:9d:f7:9d:b5: ++ 2a:fc:b9:62:19:cb:6c:3b:af:d3:6d:38:6c:ab:7b:a6:1e:8d: ++ fc:e9:9e:fe:6b:15:b9:db:82:9a:cb:98:df:73:a1:90:a0:a0: ++ c5:e0:e8:01:a8:a3:14:9c:c8:c1:9a:ac:15:50:33:8d:ed:7c: ++ 2a:8b:73:95:40:43:26:fc:81:a4:2a:5f:39:90:b7:27:cb:51: ++ 77:f8:96:93:1e:cf:f2:77:7d:1f:46:93:a2:59:1e:95:44:c5: ++ 2d:75:64:b0:d6:f9:e0:3c:69:ea:04:b5:1c:0b:e2:46:44:4d: ++ 43:3b:97:49:71:11:bd:24:b6:c2:ad:72:54:06:fe:6b:18:f9: ++ 77:db:29:2c:52:9e:6d:77:7b:62:fd:0f:4d:8e:98:32:30:30: ++ 71:12:d6:25:35:e3:9f:f8:6f:9c:b5:eb:6a:1b:ad:ea:10:d3: ++ 96:16:72:06:21:25:c6:4c:bc:8f:70:bb:0c:e4:5e:22:83:2d: ++ d2:be:fe:85:5b:b4:e4:bd ++-----BEGIN CERTIFICATE----- ++MIIFgzCCA2ugAwIBAgIQVaXZZ5Qoxu0M+ifdWwFNGDANBgkqhkiG9w0BAQwFADBL ++MQswCQYDVQQGEwJDSDEZMBcGA1UECgwQT0lTVEUgRm91bmRhdGlvbjEhMB8GA1UE ++AwwYT0lTVEUgU2VydmVyIFJvb3QgUlNBIEcxMB4XDTIzMDUzMTE0MzcxNloXDTQ4 ++MDUyNDE0MzcxNVowSzELMAkGA1UEBhMCQ0gxGTAXBgNVBAoMEE9JU1RFIEZvdW5k ++YXRpb24xITAfBgNVBAMMGE9JU1RFIFNlcnZlciBSb290IFJTQSBHMTCCAiIwDQYJ ++KoZIhvcNAQEBBQADggIPADCCAgoCggIBAKqu9KuCz/vlNwvn1ZatkOhLKdxVYOPM ++vLO8LZK55KN68YG0nnJyQ98/qwsmtO57Gmn7KNByXEptaZnwYx4M0rH/1ow00O7b ++rEi56rAUjtgHqSSY3ekJvqgiG1k50SeH3BzN+Puz6+mTeO0Pzjd8JnduodgsIUzk ++ik/HEzxux9UTl7Ko2yRpg1bTacuCErudG/L4NPKYKyqOBGf244ehHa1uzjZ0Dl4z ++O8vbUZeUapU8zhhabkvG/AePLhq5SvdkNCncpo1Q4Y2LS+VIG24ugBA/5J8bZT8R ++tOpXaZ+0AOuFJJkk9SGdl6r7NH8CaxWQrbueWhl/pIzY+m0o/DjH40ytas7ZTpOS ++jswMZ78LS5bOZmdTaMsXEY5Z96ycG7mOaES3GK/m5Q9l3JUJsJMStR8+lKXHiHUh ++sd4JJCpM4rzsTGdHwimIuQq6+cF0zowYJmXa92/GjHtoXAvuY8BeS/FOzJ8vD+Ho ++mnqT8eDI278n5mUpezbgMxVz8p1rhAhoKzYHKyfMeNhqhw5HdPSqoBNdZH702xSu +++zrkL8Fl47l6QGzwBrd7KJvX4V84c5Ss2XCTLdyEr0YconosP4EmQufU2MVshGYR ++i3drVByjtdgQ8K4p92cIiBdcuJd5z+orKu5YM+Vt6SmqZQENghPsJQtdLEByFSnT ++kCz3GkPVavBpAgMBAAGjYzBhMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU ++8snBDw1jALvsRQ5KH7WxszbNDo0wHQYDVR0OBBYEFPLJwQ8NYwC77EUOSh+1sbM2 ++zQ6NMA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQwFAAOCAgEANGd5sjrG5T33 ++I3K5Ce+SrScfoE4KsvXaFwyihdJ+klH9FWXXXGtkFu6KRcoMQzZENdl//nk6HOjG ++5D1rd9QhEOP28yBOqb6J8xycqd+8MDoX0TJD0KqKchxRKEzdNsjkLWd9kYccnbz8 ++qyiWXmFcuCIzGEgWUOrKL+mlSdx/PKQZvDatkuK59EvV6wit53j+F8Bdh3foZ3dP ++AGav9LEDOr4SfEE15fSmG0eLy3n31r8Xbk5l8PjaV8GUgeV6Vg27Rn9vkf195hfk ++gSe7BYhW3SCl95gtkRlpMV+bMPKZrXJAlszYd2abtNUOshD+FKrDgHGdPY3ofRRs ++YWSGRqbXVMW215AWRqWFyp464+YTFrYVI8ypKVL9AMb2kI5Wj4kI3Zaq5tNqqYY1 ++9tVFeEJKRvwDyF7YZvZFZSS0vod7VSCd9521Kvy5YhnLbDuv0204bKt7ph6N/Ome ++/msVuduCmsuY33OhkKCgxeDoAaijFJzIwZqsFVAzje18KotzlUBDJvyBpCpfOZC3 ++J8tRd/iWkx7P8nd9H0aTolkelUTFLXVksNb54Dxp6gS1HAviRkRNQzuXSXERvSS2 ++wq1yVAb+axj5d9spLFKebXd7Yv0PTY6YMjAwcRLWJTXjn/hvnLXrahut6hDTlhZy ++BiElxky8j3C7DOReIoMt0r7+hVu05L0= ++-----END CERTIFICATE----- ++ ++# 552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4 ++ Validity ++ Not Before: Aug 1 12:00:00 2013 GMT ++ Not After : Jan 15 12:00:00 2038 GMT ++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:bf:e6:90:73:68:de:bb:e4:5d:4a:3c:30:22:30: ++ 69:33:ec:c2:a7:25:2e:c9:21:3d:f2:8a:d8:59:c2: ++ e1:29:a7:3d:58:ab:76:9a:cd:ae:7b:1b:84:0d:c4: ++ 30:1f:f3:1b:a4:38:16:eb:56:c6:97:6d:1d:ab:b2: ++ 79:f2:ca:11:d2:e4:5f:d6:05:3c:52:0f:52:1f:c6: ++ 9e:15:a5:7e:be:9f:a9:57:16:59:55:72:af:68:93: ++ 70:c2:b2:ba:75:99:6a:73:32:94:d1:10:44:10:2e: ++ df:82:f3:07:84:e6:74:3b:6d:71:e2:2d:0c:1b:ee: ++ 20:d5:c9:20:1d:63:29:2d:ce:ec:5e:4e:c8:93:f8: ++ 21:61:9b:34:eb:05:c6:5e:ec:5b:1a:bc:eb:c9:cf: ++ cd:ac:34:40:5f:b1:7a:66:ee:77:c8:48:a8:66:57: ++ 57:9f:54:58:8e:0c:2b:b7:4f:a7:30:d9:56:ee:ca: ++ 7b:5d:e3:ad:c9:4f:5e:e5:35:e7:31:cb:da:93:5e: ++ dc:8e:8f:80:da:b6:91:98:40:90:79:c3:78:c7:b6: ++ b1:c4:b5:6a:18:38:03:10:8d:d8:d4:37:a4:2e:05: ++ 7d:88:f5:82:3e:10:91:70:ab:55:82:41:32:d7:db: ++ 04:73:2a:6e:91:01:7c:21:4c:d4:bc:ae:1b:03:75: ++ 5d:78:66:d9:3a:31:44:9a:33:40:bf:08:d7:5a:49: ++ a4:c2:e6:a9:a0:67:dd:a4:27:bc:a1:4f:39:b5:11: ++ 58:17:f7:24:5c:46:8f:64:f7:c1:69:88:76:98:76: ++ 3d:59:5d:42:76:87:89:97:69:7a:48:f0:e0:a2:12: ++ 1b:66:9a:74:ca:de:4b:1e:e7:0e:63:ae:e6:d4:ef: ++ 92:92:3a:9e:3d:dc:00:e4:45:25:89:b6:9a:44:19: ++ 2b:7e:c0:94:b4:d2:61:6d:eb:33:d9:c5:df:4b:04: ++ 00:cc:7d:1c:95:c3:8f:f7:21:b2:b2:11:b7:bb:7f: ++ f2:d5:8c:70:2c:41:60:aa:b1:63:18:44:95:1a:76: ++ 62:7e:f6:80:b0:fb:e8:64:a6:33:d1:89:07:e1:bd: ++ b7:e6:43:a4:18:b8:a6:77:01:e1:0f:94:0c:21:1d: ++ b2:54:29:25:89:6c:e5:0e:52:51:47:74:be:26:ac: ++ b6:41:75:de:7a:ac:5f:8d:3f:c9:bc:d3:41:11:12: ++ 5b:e5:10:50:eb:31:c5:ca:72:16:22:09:df:7c:4c: ++ 75:3f:63:ec:21:5f:c4:20:51:6b:6f:b1:ab:86:8b: ++ 4f:c2:d6:45:5f:9d:20:fc:a1:1e:c5:c0:8f:a2:b1: ++ 7e:0a:26:99:f5:e4:69:2f:98:1d:2d:f5:d9:a9:b2: ++ 1d:e5:1b ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ EC:D7:E3:82:D2:71:5D:64:4C:DF:2E:67:3F:E7:BA:98:AE:1C:0F:4F ++ Signature Algorithm: sha384WithRSAEncryption ++ bb:61:d9:7d:a9:6c:be:17:c4:91:1b:c3:a1:a2:00:8d:e3:64: ++ 68:0f:56:cf:77:ae:70:f9:fd:9a:4a:99:b9:c9:78:5c:0c:0c: ++ 5f:e4:e6:14:29:56:0b:36:49:5d:44:63:e0:ad:9c:96:18:66: ++ 1b:23:0d:3d:79:e9:6d:6b:d6:54:f8:d2:3c:c1:43:40:ae:1d: ++ 50:f5:52:fc:90:3b:bb:98:99:69:6b:c7:c1:a7:a8:68:a4:27: ++ dc:9d:f9:27:ae:30:85:b9:f6:67:4d:3a:3e:8f:59:39:22:53: ++ 44:eb:c8:5d:03:ca:ed:50:7a:7d:62:21:0a:80:c8:73:66:d1: ++ a0:05:60:5f:e8:a5:b4:a7:af:a8:f7:6d:35:9c:7c:5a:8a:d6: ++ a2:38:99:f3:78:8b:f4:4d:d2:20:0b:de:04:ee:8c:9b:47:81: ++ 72:0d:c0:14:32:ef:30:59:2e:ae:e0:71:f2:56:e4:6a:97:6f: ++ 92:50:6d:96:8d:68:7a:9a:b2:36:14:7a:06:f2:24:b9:09:11: ++ 50:d7:08:b1:b8:89:7a:84:23:61:42:29:e5:a3:cd:a2:20:41: ++ d7:d1:9c:64:d9:ea:26:a1:8b:14:d7:4c:19:b2:50:41:71:3d: ++ 3f:4d:70:23:86:0c:4a:dc:81:d2:cc:32:94:84:0d:08:09:97: ++ 1c:4f:c0:ee:6b:20:74:30:d2:e0:39:34:10:85:21:15:01:08: ++ e8:55:32:de:71:49:d9:28:17:50:4d:e6:be:4d:d1:75:ac:d0: ++ ca:fb:41:b8:43:a5:aa:d3:c3:05:44:4f:2c:36:9b:e2:fa:e2: ++ 45:b8:23:53:6c:06:6f:67:55:7f:46:b5:4c:3f:6e:28:5a:79: ++ 26:d2:a4:a8:62:97:d2:1e:e2:ed:4a:8b:bc:1b:fd:47:4a:0d: ++ df:67:66:7e:b2:5b:41:d0:3b:e4:f4:3b:f4:04:63:e9:ef:c2: ++ 54:00:51:a0:8a:2a:c9:ce:78:cc:d5:ea:87:04:18:b3:ce:af: ++ 49:88:af:f3:92:99:b6:b3:e6:61:0f:d2:85:00:e7:50:1a:e4: ++ 1b:95:9d:19:a1:b9:9c:b1:9b:b1:00:1e:ef:d0:0f:4f:42:6c: ++ c9:0a:bc:ee:43:fa:3a:71:a5:c8:4d:26:a5:35:fd:89:5d:bc: ++ 85:62:1d:32:d2:a0:2b:54:ed:9a:57:c1:db:fa:10:cf:19:b7: ++ 8b:4a:1b:8f:01:b6:27:95:53:e8:b6:89:6d:5b:bc:68:d4:23: ++ e8:8b:51:a2:56:f9:f0:a6:80:a0:d6:1e:b3:bc:0f:0f:53:75: ++ 29:aa:ea:13:77:e4:de:8c:81:21:ad:07:10:47:11:ad:87:3d: ++ 07:d1:75:bc:cf:f3:66:7e ++-----BEGIN CERTIFICATE----- ++MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBi ++MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 ++d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg ++RzQwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBiMQswCQYDVQQGEwJV ++UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu ++Y29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0GCSqG ++SIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3y ++ithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1If ++xp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDV ++ySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfISKhmV1efVFiO ++DCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jHtrHEtWoYOAMQ ++jdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6MUSaM0C/ ++CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCi ++EhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADM ++fRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QY ++uKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXK ++chYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4KJpn15GkvmB0t ++9dmpsh3lGwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB ++hjAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wDQYJKoZIhvcNAQEMBQAD ++ggIBALth2X2pbL4XxJEbw6GiAI3jZGgPVs93rnD5/ZpKmbnJeFwMDF/k5hQpVgs2 ++SV1EY+CtnJYYZhsjDT156W1r1lT40jzBQ0CuHVD1UvyQO7uYmWlrx8GnqGikJ9yd +++SeuMIW59mdNOj6PWTkiU0TryF0Dyu1Qen1iIQqAyHNm0aAFYF/opbSnr6j3bTWc ++fFqK1qI4mfN4i/RN0iAL3gTujJtHgXINwBQy7zBZLq7gcfJW5GqXb5JQbZaNaHqa ++sjYUegbyJLkJEVDXCLG4iXqEI2FCKeWjzaIgQdfRnGTZ6iahixTXTBmyUEFxPT9N ++cCOGDErcgdLMMpSEDQgJlxxPwO5rIHQw0uA5NBCFIRUBCOhVMt5xSdkoF1BN5r5N ++0XWs0Mr7QbhDparTwwVETyw2m+L64kW4I1NsBm9nVX9GtUw/bihaeSbSpKhil9Ie ++4u1Ki7wb/UdKDd9nZn6yW0HQO+T0O/QEY+nvwlQAUaCKKsnOeMzV6ocEGLPOr0mI ++r/OSmbaz5mEP0oUA51Aa5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1 ++/YldvIViHTLSoCtU7ZpXwdv6EM8Zt4tKG48BtieVU+i2iW1bvGjUI+iLUaJW+fCm ++gKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+ ++-----END CERTIFICATE----- ++ ++# 7d05ebb682339f8c9451ee094eebfefa7953a114edb2f44949452fab7d2fc185 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 0b:93:1c:3a:d6:39:67:ea:67:23:bf:c3:af:9a:f4:4b ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2 ++ Validity ++ Not Before: Aug 1 12:00:00 2013 GMT ++ Not After : Jan 15 12:00:00 2038 GMT ++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:d9:e7:28:2f:52:3f:36:72:49:88:93:34:f3:f8: ++ 6a:1e:31:54:80:9f:ad:54:41:b5:47:df:96:a8:d4: ++ af:80:2d:b9:0a:cf:75:fd:89:a5:7d:24:fa:e3:22: ++ 0c:2b:bc:95:17:0b:33:bf:19:4d:41:06:90:00:bd: ++ 0c:4d:10:fe:07:b5:e7:1c:6e:22:55:31:65:97:bd: ++ d3:17:d2:1e:62:f3:db:ea:6c:50:8c:3f:84:0c:96: ++ cf:b7:cb:03:e0:ca:6d:a1:14:4c:1b:89:dd:ed:00: ++ b0:52:7c:af:91:6c:b1:38:13:d1:e9:12:08:c0:00: ++ b0:1c:2b:11:da:77:70:36:9b:ae:ce:79:87:dc:82: ++ 70:e6:09:74:70:55:69:af:a3:68:9f:bf:dd:b6:79: ++ b3:f2:9d:70:29:55:f4:ab:ff:95:61:f3:c9:40:6f: ++ 1d:d1:be:93:bb:d3:88:2a:bb:9d:bf:72:5a:56:71: ++ 3b:3f:d4:f3:d1:0a:fe:28:ef:a3:ee:d9:99:af:03: ++ d3:8f:60:b7:f2:92:a1:b1:bd:89:89:1f:30:cd:c3: ++ a6:2e:62:33:ae:16:02:77:44:5a:e7:81:0a:3c:a7: ++ 44:2e:79:b8:3f:04:bc:5c:a0:87:e1:1b:af:51:8e: ++ cd:ec:2c:fa:f8:fe:6d:f0:3a:7c:aa:8b:e4:67:95: ++ 31:8d ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ CE:C3:4A:B9:99:55:F2:B8:DB:60:BF:A9:7E:BD:56:B5:97:36:A7:D6 ++ Signature Algorithm: sha256WithRSAEncryption ++ ca:a5:55:8c:e3:c8:41:6e:69:27:a7:75:11:ef:3c:86:36:6f: ++ d2:9d:c6:78:38:1d:69:96:a2:92:69:2e:38:6c:9b:7d:04:d4: ++ 89:a5:b1:31:37:8a:c9:21:cc:ab:6c:cd:8b:1c:9a:d6:bf:48: ++ d2:32:66:c1:8a:c0:f3:2f:3a:ef:c0:e3:d4:91:86:d1:50:e3: ++ 03:db:73:77:6f:4a:39:53:ed:de:26:c7:b5:7d:af:2b:42:d1: ++ 75:62:e3:4a:2b:02:c7:50:4b:e0:69:e2:96:6c:0e:44:66:10: ++ 44:8f:ad:05:eb:f8:79:ac:a6:1b:e8:37:34:9d:53:c9:61:aa: ++ a2:52:af:4a:70:16:86:c2:3a:c8:b1:13:70:36:d8:cf:ee:f4: ++ 0a:34:d5:5b:4c:fd:07:9c:a2:ba:d9:01:72:5c:f3:4d:c1:dd: ++ 0e:b1:1c:0d:c4:63:be:ad:f4:14:fb:89:ec:a2:41:0e:4c:cc: ++ c8:57:40:d0:6e:03:aa:cd:0c:8e:89:99:99:6c:f0:3c:30:af: ++ 38:df:6f:bc:a3:be:29:20:27:ab:74:ff:13:22:78:de:97:52: ++ 55:1e:83:b5:54:20:03:ee:ae:c0:4f:56:de:37:cc:c3:7f:aa: ++ 04:27:bb:d3:77:b8:62:db:17:7c:9c:28:22:13:73:6c:cf:26: ++ f5:8a:29:e7 ++-----BEGIN CERTIFICATE----- ++MIIDljCCAn6gAwIBAgIQC5McOtY5Z+pnI7/Dr5r0SzANBgkqhkiG9w0BAQsFADBl ++MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 ++d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv ++b3QgRzIwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQG ++EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl ++cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIwggEi ++MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5ygvUj82ckmIkzTz+GoeMVSA ++n61UQbVH35ao1K+ALbkKz3X9iaV9JPrjIgwrvJUXCzO/GU1BBpAAvQxNEP4Htecc ++biJVMWWXvdMX0h5i89vqbFCMP4QMls+3ywPgym2hFEwbid3tALBSfK+RbLE4E9Hp ++EgjAALAcKxHad3A2m67OeYfcgnDmCXRwVWmvo2ifv922ebPynXApVfSr/5Vh88lA ++bx3RvpO704gqu52/clpWcTs/1PPRCv4o76Pu2ZmvA9OPYLfykqGxvYmJHzDNw6Yu ++YjOuFgJ3RFrngQo8p0Quebg/BLxcoIfhG69Rjs3sLPr4/m3wOnyqi+RnlTGNAgMB ++AAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQW ++BBTOw0q5mVXyuNtgv6l+vVa1lzan1jANBgkqhkiG9w0BAQsFAAOCAQEAyqVVjOPI ++QW5pJ6d1Ee88hjZv0p3GeDgdaZaikmkuOGybfQTUiaWxMTeKySHMq2zNixya1r9I ++0jJmwYrA8y8678Dj1JGG0VDjA9tzd29KOVPt3ibHtX2vK0LRdWLjSisCx1BL4Gni ++lmwORGYQRI+tBev4eaymG+g3NJ1TyWGqolKvSnAWhsI6yLETcDbYz+70CjTVW0z9 ++B5yiutkBclzzTcHdDrEcDcRjvq30FPuJ7KJBDkzMyFdA0G4Dqs0MjomZmWzwPDCv ++ON9vvKO+KSAnq3T/EyJ43pdSVR6DtVQgA+6uwE9W3jfMw3+qBCe703e4YtsXfJwo ++IhNzbM8m9Yop5w== ++-----END CERTIFICATE----- ++ ++# 7e37cb8b4c47090cab36551ba6f45db840680fba166a952db100717f43053fc2 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 0b:a1:5a:fa:1d:df:a0:b5:49:44:af:cd:24:a0:6c:ec ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3 ++ Validity ++ Not Before: Aug 1 12:00:00 2013 GMT ++ Not After : Jan 15 12:00:00 2038 GMT ++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:19:e7:bc:ac:44:65:ed:cd:b8:3f:58:fb:8d:b1: ++ 57:a9:44:2d:05:15:f2:ef:0b:ff:10:74:9f:b5:62: ++ 52:5f:66:7e:1f:e5:dc:1b:45:79:0b:cc:c6:53:0a: ++ 9d:8d:5d:02:d9:a9:59:de:02:5a:f6:95:2a:0e:8d: ++ 38:4a:8a:49:c6:bc:c6:03:38:07:5f:55:da:7e:09: ++ 6e:e2:7f:5e:d0:45:20:0f:59:76:10:d6:a0:24:f0: ++ 2d:de:36:f2:6c:29:39 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ CB:D0:BD:A9:E1:98:05:51:A1:4D:37:A2:83:79:CE:8D:1D:2A:E4:84 ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:64:02:30:25:a4:81:45:02:6b:12:4b:75:74:4f:c8:23:e3: ++ 70:f2:75:72:de:7c:89:f0:cf:91:72:61:9e:5e:10:92:59:56: ++ b9:83:c7:10:e7:38:e9:58:26:36:7d:d5:e4:34:86:39:02:30: ++ 7c:36:53:f0:30:e5:62:63:3a:99:e2:b6:a3:3b:9b:34:fa:1e: ++ da:10:92:71:5e:91:13:a7:dd:a4:6e:92:cc:32:d6:f5:21:66: ++ c7:2f:ea:96:63:6a:65:45:92:95:01:b4 ++-----BEGIN CERTIFICATE----- ++MIICRjCCAc2gAwIBAgIQC6Fa+h3foLVJRK/NJKBs7DAKBggqhkjOPQQDAzBlMQsw ++CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu ++ZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3Qg ++RzMwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQGEwJV ++UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu ++Y29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwdjAQBgcq ++hkjOPQIBBgUrgQQAIgNiAAQZ57ysRGXtzbg/WPuNsVepRC0FFfLvC/8QdJ+1YlJf ++Zn4f5dwbRXkLzMZTCp2NXQLZqVneAlr2lSoOjThKiknGvMYDOAdfVdp+CW7if17Q ++RSAPWXYQ1qAk8C3eNvJsKTmjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/ ++BAQDAgGGMB0GA1UdDgQWBBTL0L2p4ZgFUaFNN6KDec6NHSrkhDAKBggqhkjOPQQD ++AwNnADBkAjAlpIFFAmsSS3V0T8gj43DydXLefInwz5FyYZ5eEJJZVrmDxxDnOOlY ++JjZ91eQ0hjkCMHw2U/Aw5WJjOpnitqM7mzT6HtoQknFekROn3aRukswy1vUhZscv ++6pZjamVFkpUBtA== + -----END CERTIFICATE----- +\ No newline at end of file diff --git a/meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch b/meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch new file mode 100644 index 0000000000..dc8f97ac88 --- /dev/null +++ b/meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch @@ -0,0 +1,14324 @@ +From d41d8ee720f48e16b4625e2e1a2d7bce787ed146 Mon Sep 17 00:00:00 2001 +From: Gregory Cooke +Date: Tue, 16 Jun 2026 11:27:32 -0700 +Subject: [PATCH] Update repo roots to chromium roots (#42094) + +The roots that we ship with gRPC have become extremely dated. See https://github.com/grpc/grpc/issues/37602 for more discussion. + +This PR replaces them with the Chromium roots and updates the README to describe how to update them. + +RELEASE NOTES: +* Update the fallback repo roots to the current Chromium trust store. These are the roots used if there are none configured by the user and there are none in the expected files on the system on which the gRPC process is running. + +Closes #42094 + +COPYBARA_INTEGRATE_REVIEW=https://github.com/grpc/grpc/pull/42094 from gtcooke94:update_roots dfa9351d9d47eb29618368bad6f476b5b3d5f613 +PiperOrigin-RevId: 933202525 + +Upstream-Status: Backport [https://github.com/sergiitk/grpc/commit/c3b4c8f47cf52fa48d1ebfbfe1c5e8583db316c3] +Signed-off-by: Peter Marko +--- + etc/roots.pem | 14129 +++++++++++++++++++++++++++++++++++------------- + 1 file changed, 10337 insertions(+), 3792 deletions(-) + +diff --git a/etc/roots.pem b/etc/roots.pem +index e5c84fa..4c535ad 100644 +--- a/etc/roots.pem ++++ b/etc/roots.pem +@@ -1,1470 +1,99 @@ +-# This Source Code Form is subject to the terms of the Mozilla Public +-# License, v. 2.0. If a copy of the MPL was not distributed with this +-# file, You can obtain one at http://mozilla.org/MPL/2.0/. ++# This file contains certificates referenced by root_store.textproto. Although ++# only the PEM files are processed, to aid maintenance, each entry should be ++# prefixed with its SHA-256 hash and kept in the same order as the textproto ++# file. + +-# Issuer: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA +-# Subject: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA +-# Label: "GlobalSign Root CA" +-# Serial: 4835703278459707669005204 +-# MD5 Fingerprint: 3e:45:52:15:09:51:92:e1:b7:5d:37:9f:b1:87:29:8a +-# SHA1 Fingerprint: b1:bc:96:8b:d4:f4:9d:62:2a:a8:9a:81:f2:15:01:52:a4:1d:82:9c +-# SHA256 Fingerprint: eb:d4:10:40:e4:bb:3e:c7:42:c9:e3:81:d3:1e:f2:a4:1a:48:b6:68:5c:96:e7:ce:f3:c1:df:6c:d4:33:1c:99 +------BEGIN CERTIFICATE----- +-MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkG +-A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv +-b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAw +-MDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9i +-YWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJHbG9iYWxT +-aWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDuaZ +-jc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavp +-xy0Sy6scTHAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz8kHp +-1Wrjsok6Vjk4bwY8iGlbKk3Fp1S4bInMm/k8yuX9ifUSPJJ4ltbcdG6TRGHRjcdG +-snUOhugZitVtbNV4FpWi6cgKOOvyJBNPc1STE4U6G7weNLWLBYy5d4ux2x8gkasJ +-U26Qzns3dLlwR5EiUWMWea6xrkEmCMgZK9FGqkjWZCrXgzT/LCrBbBlDSgeF59N8 +-9iFo7+ryUp9/k5DPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8E +-BTADAQH/MB0GA1UdDgQWBBRge2YaRQ2XyolQL30EzTSo//z9SzANBgkqhkiG9w0B +-AQUFAAOCAQEA1nPnfE920I2/7LqivjTFKDK1fPxsnCwrvQmeU79rXqoRSLblCKOz +-yj1hTdNGCbM+w6DjY1Ub8rrvrTnhQ7k4o+YviiY776BQVvnGCv04zcQLcFGUl5gE +-38NflNUVyRRBnMRddWQVDf9VMOyGj/8N7yy5Y0b2qvzfvGn9LhJIZJrglfCm7ymP +-AbEVtQwdpf5pLGkkeB6zpxxxYu7KyJesF12KwvhHhm4qxFYxldBniYUr+WymXUad +-DKqC5JlR3XC321Y9YeRq4VzW9v493kHMB65jUr9TU/Qr6cf9tveCX4XSQRjbgbME +-HMUfpIBvFSDJ3gyICh3WZlXi/EjJKSZp4A== +------END CERTIFICATE----- ++# 55926084ec963a64b96e2abe01ce0ba86a64fbfebcc7aab5afc155b37fd76066 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 6271844772424770508 (0x570a119742c4e3cc) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = IT, L = Milan, O = Actalis S.p.A./03358520967, CN = Actalis Authentication Root CA ++ Validity ++ Not Before: Sep 22 11:22:02 2011 GMT ++ Not After : Sep 22 11:22:02 2030 GMT ++ Subject: C = IT, L = Milan, O = Actalis S.p.A./03358520967, CN = Actalis Authentication Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:a7:c6:c4:a5:29:a4:2c:ef:e5:18:c5:b0:50:a3: ++ 6f:51:3b:9f:0a:5a:c9:c2:48:38:0a:c2:1c:a0:18: ++ 7f:91:b5:87:b9:40:3f:dd:1d:68:1f:08:83:d5:2d: ++ 1e:88:a0:f8:8f:56:8f:6d:99:02:92:90:16:d5:5f: ++ 08:6c:89:d7:e1:ac:bc:20:c2:b1:e0:83:51:8a:69: ++ 4d:00:96:5a:6f:2f:c0:44:7e:a3:0e:e4:91:cd:58: ++ ee:dc:fb:c7:1e:45:47:dd:27:b9:08:01:9f:a6:21: ++ 1d:f5:41:2d:2f:4c:fd:28:ad:e0:8a:ad:22:b4:56: ++ 65:8e:86:54:8f:93:43:29:de:39:46:78:a3:30:23: ++ ba:cd:f0:7d:13:57:c0:5d:d2:83:6b:48:4c:c4:ab: ++ 9f:80:5a:5b:3a:bd:c9:a7:22:3f:80:27:33:5b:0e: ++ b7:8a:0c:5d:07:37:08:cb:6c:d2:7a:47:22:44:35: ++ c5:cc:cc:2e:8e:dd:2a:ed:b7:7d:66:0d:5f:61:51: ++ 22:55:1b:e3:46:e3:e3:3d:d0:35:62:9a:db:af:14: ++ c8:5b:a1:cc:89:1b:e1:30:26:fc:a0:9b:1f:81:a7: ++ 47:1f:04:eb:a3:39:92:06:9f:99:d3:bf:d3:ea:4f: ++ 50:9c:19:fe:96:87:1e:3c:65:f6:a3:18:24:83:86: ++ 10:e7:54:3e:a8:3a:76:24:4f:81:21:c5:e3:0f:02: ++ f8:93:94:47:20:bb:fe:d4:0e:d3:68:b9:dd:c4:7a: ++ 84:82:e3:53:54:79:dd:db:9c:d2:f2:07:9b:2e:b6: ++ bc:3e:ed:85:6d:ef:25:11:f2:97:1a:42:61:f7:4a: ++ 97:e8:8b:b1:10:07:fa:65:81:b2:a2:39:cf:f7:3c: ++ ff:18:fb:c6:f1:5a:8b:59:e2:02:ac:7b:92:d0:4e: ++ 14:4f:59:45:f6:0c:5e:28:5f:b0:e8:3f:45:cf:cf: ++ af:9b:6f:fb:84:d3:77:5a:95:6f:ac:94:84:9e:ee: ++ bc:c0:4a:8f:4a:93:f8:44:21:e2:31:45:61:50:4e: ++ 10:d8:e3:35:7c:4c:19:b4:de:05:bf:a3:06:9f:c8: ++ b5:cd:e4:1f:d7:17:06:0d:7a:95:74:55:0d:68:1a: ++ fc:10:1b:62:64:9d:6d:e0:95:a0:c3:94:07:57:0d: ++ 14:e6:bd:05:fb:b8:9f:e6:df:8b:e2:c6:e7:7e:96: ++ f6:53:c5:80:34:50:28:58:f0:12:50:71:17:30:ba: ++ e6:78:63:bc:f4:b2:ad:9b:2b:b2:fe:e1:39:8c:5e: ++ ba:0b:20:94:de:7b:83:b8:ff:e3:56:8d:b7:11:e9: ++ 3b:8c:f2:b1:c1:5d:9d:a4:0b:4c:2b:d9:b2:18:f5: ++ b5:9f:4b ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0 ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ keyid:52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0 + +-# Issuer: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R2 +-# Subject: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R2 +-# Label: "GlobalSign Root CA - R2" +-# Serial: 4835703278459682885658125 +-# MD5 Fingerprint: 94:14:77:7e:3e:5e:fd:8f:30:bd:41:b0:cf:e7:d0:30 +-# SHA1 Fingerprint: 75:e0:ab:b6:13:85:12:27:1c:04:f8:5f:dd:de:38:e4:b7:24:2e:fe +-# SHA256 Fingerprint: ca:42:dd:41:74:5f:d0:b8:1e:b9:02:36:2c:f9:d8:bf:71:9d:a1:bd:1b:1e:fc:94:6f:5b:4c:99:f4:2c:1b:9e +------BEGIN CERTIFICATE----- +-MIIDujCCAqKgAwIBAgILBAAAAAABD4Ym5g0wDQYJKoZIhvcNAQEFBQAwTDEgMB4G +-A1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjIxEzARBgNVBAoTCkdsb2JhbFNp +-Z24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDYxMjE1MDgwMDAwWhcNMjExMjE1 +-MDgwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMjETMBEG +-A1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjCCASIwDQYJKoZI +-hvcNAQEBBQADggEPADCCAQoCggEBAKbPJA6+Lm8omUVCxKs+IVSbC9N/hHD6ErPL +-v4dfxn+G07IwXNb9rfF73OX4YJYJkhD10FPe+3t+c4isUoh7SqbKSaZeqKeMWhG8 +-eoLrvozps6yWJQeXSpkqBy+0Hne/ig+1AnwblrjFuTosvNYSuetZfeLQBoZfXklq +-tTleiDTsvHgMCJiEbKjNS7SgfQx5TfC4LcshytVsW33hoCmEofnTlEnLJGKRILzd +-C9XZzPnqJworc5HGnRusyMvo4KD0L5CLTfuwNhv2GXqF4G3yYROIXJ/gkwpRl4pa +-zq+r1feqCapgvdzZX99yqWATXgAByUr6P6TqBwMhAo6CygPCm48CAwEAAaOBnDCB +-mTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUm+IH +-V2ccHsBqBt5ZtJot39wZhi4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NybC5n +-bG9iYWxzaWduLm5ldC9yb290LXIyLmNybDAfBgNVHSMEGDAWgBSb4gdXZxwewGoG +-3lm0mi3f3BmGLjANBgkqhkiG9w0BAQUFAAOCAQEAmYFThxxol4aR7OBKuEQLq4Gs +-J0/WwbgcQ3izDJr86iw8bmEbTUsp9Z8FHSbBuOmDAGJFtqkIk7mpM0sYmsL4h4hO +-291xNBrBVNpGP+DTKqttVCL1OmLNIG+6KYnX3ZHu01yiPqFbQfXf5WRDLenVOavS +-ot+3i9DAgBkcRcAtjOj4LaR0VknFBbVPFd5uRHg5h6h+u/N5GJG79G+dwfCMNYxd +-AfvDbbnvRG15RjF+Cv6pgsH/76tuIMRQyV+dTZsXjAzlAcmgQWpzU/qlULRuJQ/7 +-TBj0/VLZjmmx6BEP3ojY+x1J96relc8geMJgEtslQIxq/H5COEBkEveegeGTLg== +------END CERTIFICATE----- +- +-# Issuer: CN=Entrust.net Certification Authority (2048) O=Entrust.net OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)/(c) 1999 Entrust.net Limited +-# Subject: CN=Entrust.net Certification Authority (2048) O=Entrust.net OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)/(c) 1999 Entrust.net Limited +-# Label: "Entrust.net Premium 2048 Secure Server CA" +-# Serial: 946069240 +-# MD5 Fingerprint: ee:29:31:bc:32:7e:9a:e6:e8:b5:f7:51:b4:34:71:90 +-# SHA1 Fingerprint: 50:30:06:09:1d:97:d4:f5:ae:39:f7:cb:e7:92:7d:7d:65:2d:34:31 +-# SHA256 Fingerprint: 6d:c4:71:72:e0:1c:bc:b0:bf:62:58:0d:89:5f:e2:b8:ac:9a:d4:f8:73:80:1e:0c:10:b9:c8:37:d2:1e:b1:77 +------BEGIN CERTIFICATE----- +-MIIEKjCCAxKgAwIBAgIEOGPe+DANBgkqhkiG9w0BAQUFADCBtDEUMBIGA1UEChML +-RW50cnVzdC5uZXQxQDA+BgNVBAsUN3d3dy5lbnRydXN0Lm5ldC9DUFNfMjA0OCBp +-bmNvcnAuIGJ5IHJlZi4gKGxpbWl0cyBsaWFiLikxJTAjBgNVBAsTHChjKSAxOTk5 +-IEVudHJ1c3QubmV0IExpbWl0ZWQxMzAxBgNVBAMTKkVudHJ1c3QubmV0IENlcnRp +-ZmljYXRpb24gQXV0aG9yaXR5ICgyMDQ4KTAeFw05OTEyMjQxNzUwNTFaFw0yOTA3 +-MjQxNDE1MTJaMIG0MRQwEgYDVQQKEwtFbnRydXN0Lm5ldDFAMD4GA1UECxQ3d3d3 +-LmVudHJ1c3QubmV0L0NQU18yMDQ4IGluY29ycC4gYnkgcmVmLiAobGltaXRzIGxp +-YWIuKTElMCMGA1UECxMcKGMpIDE5OTkgRW50cnVzdC5uZXQgTGltaXRlZDEzMDEG +-A1UEAxMqRW50cnVzdC5uZXQgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgKDIwNDgp +-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU1LqRKGsuqjIAcVFmQq +-K0vRvwtKTY7tgHalZ7d4QMBzQshowNtTK91euHaYNZOLGp18EzoOH1u3Hs/lJBQe +-sYGpjX24zGtLA/ECDNyrpUAkAH90lKGdCCmziAv1h3edVc3kw37XamSrhRSGlVuX +-MlBvPci6Zgzj/L24ScF2iUkZ/cCovYmjZy/Gn7xxGWC4LeksyZB2ZnuU4q941mVT +-XTzWnLLPKQP5L6RQstRIzgUyVYr9smRMDuSYB3Xbf9+5CFVghTAp+XtIpGmG4zU/ +-HoZdenoVve8AjhUiVBcAkCaTvA5JaJG/+EfTnZVCwQ5N328mz8MYIWJmQ3DW1cAH +-4QIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV +-HQ4EFgQUVeSB0RGAvtiJuQijMfmhJAkWuXAwDQYJKoZIhvcNAQEFBQADggEBADub +-j1abMOdTmXx6eadNl9cZlZD7Bh/KM3xGY4+WZiT6QBshJ8rmcnPyT/4xmf3IDExo +-U8aAghOY+rat2l098c5u9hURlIIM7j+VrxGrD9cv3h8Dj1csHsm7mhpElesYT6Yf +-zX1XEC+bBAlahLVu2B064dae0Wx5XnkcFMXj0EyTO2U87d89vqbllRrDtRnDvV5b +-u/8j72gZyxKTJ1wDLW8w0B62GqzeWvfRqqgnpv55gcR5mTNXuhKwqeBCbJPKVt7+ +-bYQLCIt+jerXmCHG8+c8eS9enNFMFY3h7CI3zJpDC5fcgJCNs2ebb0gIFVbPv/Er +-fF6adulZkMV8gzURZVE= +------END CERTIFICATE----- +- +-# Issuer: CN=Baltimore CyberTrust Root O=Baltimore OU=CyberTrust +-# Subject: CN=Baltimore CyberTrust Root O=Baltimore OU=CyberTrust +-# Label: "Baltimore CyberTrust Root" +-# Serial: 33554617 +-# MD5 Fingerprint: ac:b6:94:a5:9c:17:e0:d7:91:52:9b:b1:97:06:a6:e4 +-# SHA1 Fingerprint: d4:de:20:d0:5e:66:fc:53:fe:1a:50:88:2c:78:db:28:52:ca:e4:74 +-# SHA256 Fingerprint: 16:af:57:a9:f6:76:b0:ab:12:60:95:aa:5e:ba:de:f2:2a:b3:11:19:d6:44:ac:95:cd:4b:93:db:f3:f2:6a:eb +------BEGIN CERTIFICATE----- +-MIIDdzCCAl+gAwIBAgIEAgAAuTANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJ +-RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD +-VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTAwMDUxMjE4NDYwMFoX +-DTI1MDUxMjIzNTkwMFowWjELMAkGA1UEBhMCSUUxEjAQBgNVBAoTCUJhbHRpbW9y +-ZTETMBEGA1UECxMKQ3liZXJUcnVzdDEiMCAGA1UEAxMZQmFsdGltb3JlIEN5YmVy +-VHJ1c3QgUm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKMEuyKr +-mD1X6CZymrV51Cni4eiVgLGw41uOKymaZN+hXe2wCQVt2yguzmKiYv60iNoS6zjr +-IZ3AQSsBUnuId9Mcj8e6uYi1agnnc+gRQKfRzMpijS3ljwumUNKoUMMo6vWrJYeK +-mpYcqWe4PwzV9/lSEy/CG9VwcPCPwBLKBsua4dnKM3p31vjsufFoREJIE9LAwqSu +-XmD+tqYF/LTdB1kC1FkYmGP1pWPgkAx9XbIGevOF6uvUA65ehD5f/xXtabz5OTZy +-dc93Uk3zyZAsuT3lySNTPx8kmCFcB5kpvcY67Oduhjprl3RjM71oGDHweI12v/ye +-jl0qhqdNkNwnGjkCAwEAAaNFMEMwHQYDVR0OBBYEFOWdWTCCR1jMrPoIVDaGezq1 +-BE3wMBIGA1UdEwEB/wQIMAYBAf8CAQMwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3 +-DQEBBQUAA4IBAQCFDF2O5G9RaEIFoN27TyclhAO992T9Ldcw46QQF+vaKSm2eT92 +-9hkTI7gQCvlYpNRhcL0EYWoSihfVCr3FvDB81ukMJY2GQE/szKN+OMY3EU/t3Wgx +-jkzSswF07r51XgdIGn9w/xZchMB5hbgF/X++ZRGjD8ACtPhSNzkE1akxehi/oCr0 +-Epn3o0WC4zxe9Z2etciefC7IpJ5OCBRLbf1wbWsaY71k5h+3zvDyny67G7fyUIhz +-ksLi4xaNmjICq44Y3ekQEe5+NauQrz4wlHrQMz2nZQ/1/I6eYs9HRCwBXbsdtTLS +-R9I4LtD+gdwyah617jzV/OeBHRnDJELqYzmp +------END CERTIFICATE----- +- +-# Issuer: CN=Entrust Root Certification Authority O=Entrust, Inc. OU=www.entrust.net/CPS is incorporated by reference/(c) 2006 Entrust, Inc. +-# Subject: CN=Entrust Root Certification Authority O=Entrust, Inc. OU=www.entrust.net/CPS is incorporated by reference/(c) 2006 Entrust, Inc. +-# Label: "Entrust Root Certification Authority" +-# Serial: 1164660820 +-# MD5 Fingerprint: d6:a5:c3:ed:5d:dd:3e:00:c1:3d:87:92:1f:1d:3f:e4 +-# SHA1 Fingerprint: b3:1e:b1:b7:40:e3:6c:84:02:da:dc:37:d4:4d:f5:d4:67:49:52:f9 +-# SHA256 Fingerprint: 73:c1:76:43:4f:1b:c6:d5:ad:f4:5b:0e:76:e7:27:28:7c:8d:e5:76:16:c1:e6:e6:14:1a:2b:2c:bc:7d:8e:4c +------BEGIN CERTIFICATE----- +-MIIEkTCCA3mgAwIBAgIERWtQVDANBgkqhkiG9w0BAQUFADCBsDELMAkGA1UEBhMC +-VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0 +-Lm5ldC9DUFMgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW +-KGMpIDIwMDYgRW50cnVzdCwgSW5jLjEtMCsGA1UEAxMkRW50cnVzdCBSb290IENl +-cnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA2MTEyNzIwMjM0MloXDTI2MTEyNzIw +-NTM0MlowgbAxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMTkw +-NwYDVQQLEzB3d3cuZW50cnVzdC5uZXQvQ1BTIGlzIGluY29ycG9yYXRlZCBieSBy +-ZWZlcmVuY2UxHzAdBgNVBAsTFihjKSAyMDA2IEVudHJ1c3QsIEluYy4xLTArBgNV +-BAMTJEVudHJ1c3QgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJ +-KoZIhvcNAQEBBQADggEPADCCAQoCggEBALaVtkNC+sZtKm9I35RMOVcF7sN5EUFo +-Nu3s/poBj6E4KPz3EEZmLk0eGrEaTsbRwJWIsMn/MYszA9u3g3s+IIRe7bJWKKf4 +-4LlAcTfFy0cOlypowCKVYhXbR9n10Cv/gkvJrT7eTNuQgFA/CYqEAOwwCj0Yzfv9 +-KlmaI5UXLEWeH25DeW0MXJj+SKfFI0dcXv1u5x609mhF0YaDW6KKjbHjKYD+JXGI +-rb68j6xSlkuqUY3kEzEZ6E5Nn9uss2rVvDlUccp6en+Q3X0dgNmBu1kmwhH+5pPi +-94DkZfs0Nw4pgHBNrziGLp5/V6+eF67rHMsoIV+2HNjnogQi+dPa2MsCAwEAAaOB +-sDCBrTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zArBgNVHRAEJDAi +-gA8yMDA2MTEyNzIwMjM0MlqBDzIwMjYxMTI3MjA1MzQyWjAfBgNVHSMEGDAWgBRo +-kORnpKZTgMeGZqTx90tD+4S9bTAdBgNVHQ4EFgQUaJDkZ6SmU4DHhmak8fdLQ/uE +-vW0wHQYJKoZIhvZ9B0EABBAwDhsIVjcuMTo0LjADAgSQMA0GCSqGSIb3DQEBBQUA +-A4IBAQCT1DCw1wMgKtD5Y+iRDAUgqV8ZyntyTtSx29CW+1RaGSwMCPeyvIWonX9t +-O1KzKtvn1ISMY/YPyyYBkVBs9F8U4pN0wBOeMDpQ47RgxRzwIkSNcUesyBrJ6Zua +-AGAT/3B+XxFNSRuzFVJ7yVTav52Vr2ua2J7p8eRDjeIRRDq/r72DQnNSi6q7pynP +-9WQcCk3RvKqsnyrQ/39/2n3qse0wJcGE2jTSW3iDVuycNsMm4hH2Z0kdkquM++v/ +-eu6FSqdQgPCnXEqULl8FmTxSQeDNtGPPAUO6nIPcj2A781q0tHuu2guQOHXvgR1m +-0vdXcDazv/wor3ElhVsT/h5/WrQ8 +------END CERTIFICATE----- +- +-# Issuer: CN=AAA Certificate Services O=Comodo CA Limited +-# Subject: CN=AAA Certificate Services O=Comodo CA Limited +-# Label: "Comodo AAA Services root" +-# Serial: 1 +-# MD5 Fingerprint: 49:79:04:b0:eb:87:19:ac:47:b0:bc:11:51:9b:74:d0 +-# SHA1 Fingerprint: d1:eb:23:a4:6d:17:d6:8f:d9:25:64:c2:f1:f1:60:17:64:d8:e3:49 +-# SHA256 Fingerprint: d7:a7:a0:fb:5d:7e:27:31:d7:71:e9:48:4e:bc:de:f7:1d:5f:0c:3e:0a:29:48:78:2b:c8:3e:e0:ea:69:9e:f4 +------BEGIN CERTIFICATE----- +-MIIEMjCCAxqgAwIBAgIBATANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJHQjEb +-MBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHDAdTYWxmb3JkMRow +-GAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UEAwwYQUFBIENlcnRpZmlj +-YXRlIFNlcnZpY2VzMB4XDTA0MDEwMTAwMDAwMFoXDTI4MTIzMTIzNTk1OVowezEL +-MAkGA1UEBhMCR0IxGzAZBgNVBAgMEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UE +-BwwHU2FsZm9yZDEaMBgGA1UECgwRQ29tb2RvIENBIExpbWl0ZWQxITAfBgNVBAMM +-GEFBQSBDZXJ0aWZpY2F0ZSBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEBBQADggEP +-ADCCAQoCggEBAL5AnfRu4ep2hxxNRUSOvkbIgwadwSr+GB+O5AL686tdUIoWMQua +-BtDFcCLNSS1UY8y2bmhGC1Pqy0wkwLxyTurxFa70VJoSCsN6sjNg4tqJVfMiWPPe +-3M/vg4aijJRPn2jymJBGhCfHdr/jzDUsi14HZGWCwEiwqJH5YZ92IFCokcdmtet4 +-YgNW8IoaE+oxox6gmf049vYnMlhvB/VruPsUK6+3qszWY19zjNoFmag4qMsXeDZR +-rOme9Hg6jc8P2ULimAyrL58OAd7vn5lJ8S3frHRNG5i1R8XlKdH5kBjHYpy+g8cm +-ez6KJcfA3Z3mNWgQIJ2P2N7Sw4ScDV7oL8kCAwEAAaOBwDCBvTAdBgNVHQ4EFgQU +-oBEKIz6W8Qfs4q8p74Klf9AwpLQwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQF +-MAMBAf8wewYDVR0fBHQwcjA4oDagNIYyaHR0cDovL2NybC5jb21vZG9jYS5jb20v +-QUFBQ2VydGlmaWNhdGVTZXJ2aWNlcy5jcmwwNqA0oDKGMGh0dHA6Ly9jcmwuY29t +-b2RvLm5ldC9BQUFDZXJ0aWZpY2F0ZVNlcnZpY2VzLmNybDANBgkqhkiG9w0BAQUF +-AAOCAQEACFb8AvCb6P+k+tZ7xkSAzk/ExfYAWMymtrwUSWgEdujm7l3sAg9g1o1Q +-GE8mTgHj5rCl7r+8dFRBv/38ErjHT1r0iWAFf2C3BUrz9vHCv8S5dIa2LX1rzNLz +-Rt0vxuBqw8M0Ayx9lt1awg6nCpnBBYurDC/zXDrPbDdVCYfeU0BsWO/8tqtlbgT2 +-G9w84FoVxp7Z8VlIMCFlA2zs6SFz7JsDoeA3raAVGI/6ugLOpyypEBMs1OUIJqsi +-l2D4kF501KKaU73yqWjgom7C12yxow+ev+to51byrvLjKzg6CYG1a4XXvi3tPxq3 +-smPi9WIsgtRqAEFQ8TmDn5XpNpaYbg== +------END CERTIFICATE----- +- +-# Issuer: CN=QuoVadis Root CA 2 O=QuoVadis Limited +-# Subject: CN=QuoVadis Root CA 2 O=QuoVadis Limited +-# Label: "QuoVadis Root CA 2" +-# Serial: 1289 +-# MD5 Fingerprint: 5e:39:7b:dd:f8:ba:ec:82:e9:ac:62:ba:0c:54:00:2b +-# SHA1 Fingerprint: ca:3a:fb:cf:12:40:36:4b:44:b2:16:20:88:80:48:39:19:93:7c:f7 +-# SHA256 Fingerprint: 85:a0:dd:7d:d7:20:ad:b7:ff:05:f8:3d:54:2b:20:9d:c7:ff:45:28:f7:d6:77:b1:83:89:fe:a5:e5:c4:9e:86 +------BEGIN CERTIFICATE----- +-MIIFtzCCA5+gAwIBAgICBQkwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0x +-GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJv +-b3QgQ0EgMjAeFw0wNjExMjQxODI3MDBaFw0zMTExMjQxODIzMzNaMEUxCzAJBgNV +-BAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMRswGQYDVQQDExJRdW9W +-YWRpcyBSb290IENBIDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCa +-GMpLlA0ALa8DKYrwD4HIrkwZhR0In6spRIXzL4GtMh6QRr+jhiYaHv5+HBg6XJxg +-Fyo6dIMzMH1hVBHL7avg5tKifvVrbxi3Cgst/ek+7wrGsxDp3MJGF/hd/aTa/55J +-WpzmM+Yklvc/ulsrHHo1wtZn/qtmUIttKGAr79dgw8eTvI02kfN/+NsRE8Scd3bB +-rrcCaoF6qUWD4gXmuVbBlDePSHFjIuwXZQeVikvfj8ZaCuWw419eaxGrDPmF60Tp +-+ARz8un+XJiM9XOva7R+zdRcAitMOeGylZUtQofX1bOQQ7dsE/He3fbE+Ik/0XX1 +-ksOR1YqI0JDs3G3eicJlcZaLDQP9nL9bFqyS2+r+eXyt66/3FsvbzSUr5R/7mp/i +-Ucw6UwxI5g69ybR2BlLmEROFcmMDBOAENisgGQLodKcftslWZvB1JdxnwQ5hYIiz +-PtGo/KPaHbDRsSNU30R2be1B2MGyIrZTHN81Hdyhdyox5C315eXbyOD/5YDXC2Og +-/zOhD7osFRXql7PSorW+8oyWHhqPHWykYTe5hnMz15eWniN9gqRMgeKh0bpnX5UH +-oycR7hYQe7xFSkyyBNKr79X9DFHOUGoIMfmR2gyPZFwDwzqLID9ujWc9Otb+fVuI +-yV77zGHcizN300QyNQliBJIWENieJ0f7OyHj+OsdWwIDAQABo4GwMIGtMA8GA1Ud +-EwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBQahGK8SEwzJQTU7tD2 +-A8QZRtGUazBuBgNVHSMEZzBlgBQahGK8SEwzJQTU7tD2A8QZRtGUa6FJpEcwRTEL +-MAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMT +-ElF1b1ZhZGlzIFJvb3QgQ0EgMoICBQkwDQYJKoZIhvcNAQEFBQADggIBAD4KFk2f +-BluornFdLwUvZ+YTRYPENvbzwCYMDbVHZF34tHLJRqUDGCdViXh9duqWNIAXINzn +-g/iN/Ae42l9NLmeyhP3ZRPx3UIHmfLTJDQtyU/h2BwdBR5YM++CCJpNVjP4iH2Bl +-fF/nJrP3MpCYUNQ3cVX2kiF495V5+vgtJodmVjB3pjd4M1IQWK4/YY7yarHvGH5K +-WWPKjaJW1acvvFYfzznB4vsKqBUsfU16Y8Zsl0Q80m/DShcK+JDSV6IZUaUtl0Ha +-B0+pUNqQjZRG4T7wlP0QADj1O+hA4bRuVhogzG9Yje0uRY/W6ZM/57Es3zrWIozc +-hLsib9D45MY56QSIPMO661V6bYCZJPVsAfv4l7CUW+v90m/xd2gNNWQjrLhVoQPR +-TUIZ3Ph1WVaj+ahJefivDrkRoHy3au000LYmYjgahwz46P0u05B/B5EqHdZ+XIWD +-mbA4CD/pXvk1B+TJYm5Xf6dQlfe6yJvmjqIBxdZmv3lh8zwc4bmCXF2gw+nYSL0Z +-ohEUGW6yhhtoPkg3Goi3XZZenMfvJ2II4pEZXNLxId26F0KCl3GBUzGpn/Z9Yr9y +-4aOTHcyKJloJONDO1w2AFrR4pTqHTI2KpdVGl/IsELm8VCLAAVBpQ570su9t+Oza +-8eOx79+Rj1QqCyXBJhnEUhAFZdWCEOrCMc0u +------END CERTIFICATE----- +- +-# Issuer: CN=QuoVadis Root CA 3 O=QuoVadis Limited +-# Subject: CN=QuoVadis Root CA 3 O=QuoVadis Limited +-# Label: "QuoVadis Root CA 3" +-# Serial: 1478 +-# MD5 Fingerprint: 31:85:3c:62:94:97:63:b9:aa:fd:89:4e:af:6f:e0:cf +-# SHA1 Fingerprint: 1f:49:14:f7:d8:74:95:1d:dd:ae:02:c0:be:fd:3a:2d:82:75:51:85 +-# SHA256 Fingerprint: 18:f1:fc:7f:20:5d:f8:ad:dd:eb:7f:e0:07:dd:57:e3:af:37:5a:9c:4d:8d:73:54:6b:f4:f1:fe:d1:e1:8d:35 +------BEGIN CERTIFICATE----- +-MIIGnTCCBIWgAwIBAgICBcYwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0x +-GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJv +-b3QgQ0EgMzAeFw0wNjExMjQxOTExMjNaFw0zMTExMjQxOTA2NDRaMEUxCzAJBgNV +-BAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMRswGQYDVQQDExJRdW9W +-YWRpcyBSb290IENBIDMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDM +-V0IWVJzmmNPTTe7+7cefQzlKZbPoFog02w1ZkXTPkrgEQK0CSzGrvI2RaNggDhoB +-4hp7Thdd4oq3P5kazethq8Jlph+3t723j/z9cI8LoGe+AaJZz3HmDyl2/7FWeUUr +-H556VOijKTVopAFPD6QuN+8bv+OPEKhyq1hX51SGyMnzW9os2l2ObjyjPtr7guXd +-8lyyBTNvijbO0BNO/79KDDRMpsMhvVAEVeuxu537RR5kFd5VAYwCdrXLoT9Cabwv +-vWhDFlaJKjdhkf2mrk7AyxRllDdLkgbvBNDInIjbC3uBr7E9KsRlOni27tyAsdLT +-mZw67mtaa7ONt9XOnMK+pUsvFrGeaDsGb659n/je7Mwpp5ijJUMv7/FfJuGITfhe +-btfZFG4ZM2mnO4SJk8RTVROhUXhA+LjJou57ulJCg54U7QVSWllWp5f8nT8KKdjc +-T5EOE7zelaTfi5m+rJsziO+1ga8bxiJTyPbH7pcUsMV8eFLI8M5ud2CEpukqdiDt +-WAEXMJPpGovgc2PZapKUSU60rUqFxKMiMPwJ7Wgic6aIDFUhWMXhOp8q3crhkODZ +-c6tsgLjoC2SToJyMGf+z0gzskSaHirOi4XCPLArlzW1oUevaPwV/izLmE1xr/l9A +-4iLItLRkT9a6fUg+qGkM17uGcclzuD87nSVL2v9A6wIDAQABo4IBlTCCAZEwDwYD +-VR0TAQH/BAUwAwEB/zCB4QYDVR0gBIHZMIHWMIHTBgkrBgEEAb5YAAMwgcUwgZMG +-CCsGAQUFBwICMIGGGoGDQW55IHVzZSBvZiB0aGlzIENlcnRpZmljYXRlIGNvbnN0 +-aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFF1b1ZhZGlzIFJvb3QgQ0EgMyBDZXJ0 +-aWZpY2F0ZSBQb2xpY3kgLyBDZXJ0aWZpY2F0aW9uIFByYWN0aWNlIFN0YXRlbWVu +-dC4wLQYIKwYBBQUHAgEWIWh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL2Nw +-czALBgNVHQ8EBAMCAQYwHQYDVR0OBBYEFPLAE+CCQz777i9nMpY1XNu4ywLQMG4G +-A1UdIwRnMGWAFPLAE+CCQz777i9nMpY1XNu4ywLQoUmkRzBFMQswCQYDVQQGEwJC +-TTEZMBcGA1UEChMQUXVvVmFkaXMgTGltaXRlZDEbMBkGA1UEAxMSUXVvVmFkaXMg +-Um9vdCBDQSAzggIFxjANBgkqhkiG9w0BAQUFAAOCAgEAT62gLEz6wPJv92ZVqyM0 +-7ucp2sNbtrCD2dDQ4iH782CnO11gUyeim/YIIirnv6By5ZwkajGxkHon24QRiSem +-d1o417+shvzuXYO8BsbRd2sPbSQvS3pspweWyuOEn62Iix2rFo1bZhfZFvSLgNLd +-+LJ2w/w4E6oM3kJpK27zPOuAJ9v1pkQNn1pVWQvVDVJIxa6f8i+AxeoyUDUSly7B +-4f/xI4hROJ/yZlZ25w9Rl6VSDE1JUZU2Pb+iSwwQHYaZTKrzchGT5Or2m9qoXadN +-t54CrnMAyNojA+j56hl0YgCUyyIgvpSnWbWCar6ZeXqp8kokUvd0/bpO5qgdAm6x +-DYBEwa7TIzdfu4V8K5Iu6H6li92Z4b8nby1dqnuH/grdS/yO9SbkbnBCbjPsMZ57 +-k8HkyWkaPcBrTiJt7qtYTcbQQcEr6k8Sh17rRdhs9ZgC06DYVYoGmRmioHfRMJ6s +-zHXug/WwYjnPbFfiTNKRCw51KBuav/0aQ/HKd/s7j2G4aSgWQgRecCocIdiP4b0j +-Wy10QJLZYxkNc91pvGJHvOB0K7Lrfb5BG7XARsWhIstfTsEokt4YutUqKLsRixeT +-mJlglFwjz1onl14LBQaTNx47aTbrqZ5hHY8y2o4M1nQ+ewkk2gF3R8Q7zTSMmfXK +-4SVhM7JZG+Ju1zdXtg2pEto= +------END CERTIFICATE----- +- +-# Issuer: O=SECOM Trust.net OU=Security Communication RootCA1 +-# Subject: O=SECOM Trust.net OU=Security Communication RootCA1 +-# Label: "Security Communication Root CA" +-# Serial: 0 +-# MD5 Fingerprint: f1:bc:63:6a:54:e0:b5:27:f5:cd:e7:1a:e3:4d:6e:4a +-# SHA1 Fingerprint: 36:b1:2b:49:f9:81:9e:d7:4c:9e:bc:38:0f:c6:56:8f:5d:ac:b2:f7 +-# SHA256 Fingerprint: e7:5e:72:ed:9f:56:0e:ec:6e:b4:80:00:73:a4:3f:c3:ad:19:19:5a:39:22:82:01:78:95:97:4a:99:02:6b:6c +------BEGIN CERTIFICATE----- +-MIIDWjCCAkKgAwIBAgIBADANBgkqhkiG9w0BAQUFADBQMQswCQYDVQQGEwJKUDEY +-MBYGA1UEChMPU0VDT00gVHJ1c3QubmV0MScwJQYDVQQLEx5TZWN1cml0eSBDb21t +-dW5pY2F0aW9uIFJvb3RDQTEwHhcNMDMwOTMwMDQyMDQ5WhcNMjMwOTMwMDQyMDQ5 +-WjBQMQswCQYDVQQGEwJKUDEYMBYGA1UEChMPU0VDT00gVHJ1c3QubmV0MScwJQYD +-VQQLEx5TZWN1cml0eSBDb21tdW5pY2F0aW9uIFJvb3RDQTEwggEiMA0GCSqGSIb3 +-DQEBAQUAA4IBDwAwggEKAoIBAQCzs/5/022x7xZ8V6UMbXaKL0u/ZPtM7orw8yl8 +-9f/uKuDp6bpbZCKamm8sOiZpUQWZJtzVHGpxxpp9Hp3dfGzGjGdnSj74cbAZJ6kJ +-DKaVv0uMDPpVmDvY6CKhS3E4eayXkmmziX7qIWgGmBSWh9JhNrxtJ1aeV+7AwFb9 +-Ms+k2Y7CI9eNqPPYJayX5HA49LY6tJ07lyZDo6G8SVlyTCMwhwFY9k6+HGhWZq/N +-QV3Is00qVUarH9oe4kA92819uZKAnDfdDJZkndwi92SL32HeFZRSFaB9UslLqCHJ +-xrHty8OVYNEP8Ktw+N/LTX7s1vqr2b1/VPKl6Xn62dZ2JChzAgMBAAGjPzA9MB0G +-A1UdDgQWBBSgc0mZaNyFW2XjmygvV5+9M7wHSDALBgNVHQ8EBAMCAQYwDwYDVR0T +-AQH/BAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEAaECpqLvkT115swW1F7NgE+vG +-kl3g0dNq/vu+m22/xwVtWSDEHPC32oRYAmP6SBbvT6UL90qY8j+eG61Ha2POCEfr +-Uj94nK9NrvjVT8+amCoQQTlSxN3Zmw7vkwGusi7KaEIkQmywszo+zenaSMQVy+n5 +-Bw+SUEmK3TGXX8npN6o7WWWXlDLJs58+OmJYxUmtYg5xpTKqL8aJdkNAExNnPaJU +-JRDL8Try2frbSVa7pv6nQTXD4IhhyYjH3zYQIphZ6rBK+1YWc26sTfcioU+tHXot +-RSflMMFe8toTyyVCUZVHA4xsIcx0Qu1T/zOLjw9XARYvz6buyXAiFL39vmwLAw== +------END CERTIFICATE----- +- +-# Issuer: CN=XRamp Global Certification Authority O=XRamp Security Services Inc OU=www.xrampsecurity.com +-# Subject: CN=XRamp Global Certification Authority O=XRamp Security Services Inc OU=www.xrampsecurity.com +-# Label: "XRamp Global CA Root" +-# Serial: 107108908803651509692980124233745014957 +-# MD5 Fingerprint: a1:0b:44:b3:ca:10:d8:00:6e:9d:0f:d8:0f:92:0a:d1 +-# SHA1 Fingerprint: b8:01:86:d1:eb:9c:86:a5:41:04:cf:30:54:f3:4c:52:b7:e5:58:c6 +-# SHA256 Fingerprint: ce:cd:dc:90:50:99:d8:da:df:c5:b1:d2:09:b7:37:cb:e2:c1:8c:fb:2c:10:c0:ff:0b:cf:0d:32:86:fc:1a:a2 +------BEGIN CERTIFICATE----- +-MIIEMDCCAxigAwIBAgIQUJRs7Bjq1ZxN1ZfvdY+grTANBgkqhkiG9w0BAQUFADCB +-gjELMAkGA1UEBhMCVVMxHjAcBgNVBAsTFXd3dy54cmFtcHNlY3VyaXR5LmNvbTEk +-MCIGA1UEChMbWFJhbXAgU2VjdXJpdHkgU2VydmljZXMgSW5jMS0wKwYDVQQDEyRY +-UmFtcCBHbG9iYWwgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDQxMTAxMTcx +-NDA0WhcNMzUwMTAxMDUzNzE5WjCBgjELMAkGA1UEBhMCVVMxHjAcBgNVBAsTFXd3 +-dy54cmFtcHNlY3VyaXR5LmNvbTEkMCIGA1UEChMbWFJhbXAgU2VjdXJpdHkgU2Vy +-dmljZXMgSW5jMS0wKwYDVQQDEyRYUmFtcCBHbG9iYWwgQ2VydGlmaWNhdGlvbiBB +-dXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYJB69FbS6 +-38eMpSe2OAtp87ZOqCwuIR1cRN8hXX4jdP5efrRKt6atH67gBhbim1vZZ3RrXYCP +-KZ2GG9mcDZhtdhAoWORlsH9KmHmf4MMxfoArtYzAQDsRhtDLooY2YKTVMIJt2W7Q +-DxIEM5dfT2Fa8OT5kavnHTu86M/0ay00fOJIYRyO82FEzG+gSqmUsE3a56k0enI4 +-qEHMPJQRfevIpoy3hsvKMzvZPTeL+3o+hiznc9cKV6xkmxnr9A8ECIqsAxcZZPRa +-JSKNNCyy9mgdEm3Tih4U2sSPpuIjhdV6Db1q4Ons7Be7QhtnqiXtRYMh/MHJfNVi +-PvryxS3T/dRlAgMBAAGjgZ8wgZwwEwYJKwYBBAGCNxQCBAYeBABDAEEwCwYDVR0P +-BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFMZPoj0GY4QJnM5i5ASs +-jVy16bYbMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9jcmwueHJhbXBzZWN1cml0 +-eS5jb20vWEdDQS5jcmwwEAYJKwYBBAGCNxUBBAMCAQEwDQYJKoZIhvcNAQEFBQAD +-ggEBAJEVOQMBG2f7Shz5CmBbodpNl2L5JFMn14JkTpAuw0kbK5rc/Kh4ZzXxHfAR +-vbdI4xD2Dd8/0sm2qlWkSLoC295ZLhVbO50WfUfXN+pfTXYSNrsf16GBBEYgoyxt +-qZ4Bfj8pzgCT3/3JknOJiWSe5yvkHJEs0rnOfc5vMZnT5r7SHpDwCRR5XCOrTdLa +-IR9NmXmd4c8nnxCbHIgNsIpkQTG4DmyQJKSbXHGPurt+HBvbaoAPIbzp26a3QPSy +-i6mx5O+aGtA9aZnuqCij4Tyz8LIRnM98QObd50N9otg6tamN8jSZxNQQ4Qb9CYQQ +-O+7ETPTsJ3xCwnR8gooJybQDJbw= +------END CERTIFICATE----- +- +-# Issuer: O=The Go Daddy Group, Inc. OU=Go Daddy Class 2 Certification Authority +-# Subject: O=The Go Daddy Group, Inc. OU=Go Daddy Class 2 Certification Authority +-# Label: "Go Daddy Class 2 CA" +-# Serial: 0 +-# MD5 Fingerprint: 91:de:06:25:ab:da:fd:32:17:0c:bb:25:17:2a:84:67 +-# SHA1 Fingerprint: 27:96:ba:e6:3f:18:01:e2:77:26:1b:a0:d7:77:70:02:8f:20:ee:e4 +-# SHA256 Fingerprint: c3:84:6b:f2:4b:9e:93:ca:64:27:4c:0e:c6:7c:1e:cc:5e:02:4f:fc:ac:d2:d7:40:19:35:0e:81:fe:54:6a:e4 +------BEGIN CERTIFICATE----- +-MIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEh +-MB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBE +-YWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3 +-MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkGA1UEBhMCVVMxITAfBgNVBAoTGFRo +-ZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28gRGFkZHkgQ2xhc3Mg +-MiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQADggEN +-ADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d/+TvZxz0ZWizV3GgXne77ZtJ6XCA +-PVYYYwhv2vLM0D9/AlQiVBDYsoHUwHU9S3/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6w +-wdhFJ2+qN1j3hybX2C32qRe3H3I2TqYXP2WYktsqbl2i/ojgC95/5Y0V4evLOtXi +-EqITLdiOr18SPaAIBQi2XKVlOARFmR6jYGB0xUGlcmIbYsUfb18aQr4CUWWoriMY +-avx4A6lNf4DD+qta/KFApMoZFv6yyO9ecw3ud72a9nmYvLEHZ6IVDd2gWMZEewo+ +-YihfukEHU1jPEX44dMX4/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0OBBYEFNLE +-sNKR1EwRcbNhyz2h/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h +-/t2oatTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5 +-IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmlj +-YXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD +-ggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wimPQoZ+YeAEW5p5JYXMP80kWNy +-OO7MHAGjHZQopDH2esRU1/blMVgDoszOYtuURXO1v0XJJLXVggKtI3lpjbi2Tc7P +-TMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQ +-HmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0/ZM/iZx4mER +-dEr/VxqHD3VILs9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5Cuf +-ReYNnyicsbkqWletNw+vHX/bvZ8= +------END CERTIFICATE----- +- +-# Issuer: O=Starfield Technologies, Inc. OU=Starfield Class 2 Certification Authority +-# Subject: O=Starfield Technologies, Inc. OU=Starfield Class 2 Certification Authority +-# Label: "Starfield Class 2 CA" +-# Serial: 0 +-# MD5 Fingerprint: 32:4a:4b:bb:c8:63:69:9b:be:74:9a:c6:dd:1d:46:24 +-# SHA1 Fingerprint: ad:7e:1c:28:b0:64:ef:8f:60:03:40:20:14:c3:d0:e3:37:0e:b5:8a +-# SHA256 Fingerprint: 14:65:fa:20:53:97:b8:76:fa:a6:f0:a9:95:8e:55:90:e4:0f:cc:7f:aa:4f:b7:c2:c8:67:75:21:fb:5f:b6:58 +------BEGIN CERTIFICATE----- +-MIIEDzCCAvegAwIBAgIBADANBgkqhkiG9w0BAQUFADBoMQswCQYDVQQGEwJVUzEl +-MCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEyMDAGA1UECxMp +-U3RhcmZpZWxkIENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDQw +-NjI5MTczOTE2WhcNMzQwNjI5MTczOTE2WjBoMQswCQYDVQQGEwJVUzElMCMGA1UE +-ChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEyMDAGA1UECxMpU3RhcmZp +-ZWxkIENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwggEgMA0GCSqGSIb3 +-DQEBAQUAA4IBDQAwggEIAoIBAQC3Msj+6XGmBIWtDBFk385N78gDGIc/oav7PKaf +-8MOh2tTYbitTkPskpD6E8J7oX+zlJ0T1KKY/e97gKvDIr1MvnsoFAZMej2YcOadN +-+lq2cwQlZut3f+dZxkqZJRRU6ybH838Z1TBwj6+wRir/resp7defqgSHo9T5iaU0 +-X9tDkYI22WY8sbi5gv2cOj4QyDvvBmVmepsZGD3/cVE8MC5fvj13c7JdBmzDI1aa +-K4UmkhynArPkPw2vCHmCuDY96pzTNbO8acr1zJ3o/WSNF4Azbl5KXZnJHoe0nRrA +-1W4TNSNe35tfPe/W93bC6j67eA0cQmdrBNj41tpvi/JEoAGrAgEDo4HFMIHCMB0G +-A1UdDgQWBBS/X7fRzt0fhvRbVazc1xDCDqmI5zCBkgYDVR0jBIGKMIGHgBS/X7fR +-zt0fhvRbVazc1xDCDqmI56FspGowaDELMAkGA1UEBhMCVVMxJTAjBgNVBAoTHFN0 +-YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xMjAwBgNVBAsTKVN0YXJmaWVsZCBD +-bGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8w +-DQYJKoZIhvcNAQEFBQADggEBAAWdP4id0ckaVaGsafPzWdqbAYcaT1epoXkJKtv3 +-L7IezMdeatiDh6GX70k1PncGQVhiv45YuApnP+yz3SFmH8lU+nLMPUxA2IGvd56D +-eruix/U0F47ZEUD0/CwqTRV/p2JdLiXTAAsgGh1o+Re49L2L7ShZ3U0WixeDyLJl +-xy16paq8U4Zt3VekyvggQQto8PT7dL5WXXp59fkdheMtlb71cZBDzI0fmgAKhynp +-VSJYACPq4xJDKVtHCN2MQWplBqjlIapBtJUhlbl90TSrE9atvNziPTnNvT51cKEY +-WQPJIrSPnNVeKtelttQKbfi3QBFGmh95DmK/D5fs4C8fF5Q= +------END CERTIFICATE----- +- +-# Issuer: CN=DigiCert Assured ID Root CA O=DigiCert Inc OU=www.digicert.com +-# Subject: CN=DigiCert Assured ID Root CA O=DigiCert Inc OU=www.digicert.com +-# Label: "DigiCert Assured ID Root CA" +-# Serial: 17154717934120587862167794914071425081 +-# MD5 Fingerprint: 87:ce:0b:7b:2a:0e:49:00:e1:58:71:9b:37:a8:93:72 +-# SHA1 Fingerprint: 05:63:b8:63:0d:62:d7:5a:bb:c8:ab:1e:4b:df:b5:a8:99:b2:4d:43 +-# SHA256 Fingerprint: 3e:90:99:b5:01:5e:8f:48:6c:00:bc:ea:9d:11:1e:e7:21:fa:ba:35:5a:89:bc:f1:df:69:56:1e:3d:c6:32:5c +------BEGIN CERTIFICATE----- +-MIIDtzCCAp+gAwIBAgIQDOfg5RfYRv6P5WD8G/AwOTANBgkqhkiG9w0BAQUFADBl +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv +-b3QgQ0EwHhcNMDYxMTEwMDAwMDAwWhcNMzExMTEwMDAwMDAwWjBlMQswCQYDVQQG +-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl +-cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwggEi +-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDhXO5EOAXLGH87dg+XESpa7c +-JpSIqvTO9SA5KFhgDPiA2qkVlTJhPLWxKISKityfCgyDF3qPkKyK53lTXDGEKvYP +-mDI2dsze3Tyoou9q+yHyUmHfnyDXH+Kx2f4YZNISW1/5WBg1vEfNoTb5a3/UsDg+ +-wRvDjDPZ2C8Y/igPs6eD1sNuRMBhNZYW/lmci3Zt1/GiSw0r/wty2p5g0I6QNcZ4 +-VYcgoc/lbQrISXwxmDNsIumH0DJaoroTghHtORedmTpyoeb6pNnVFzF1roV9Iq4/ +-AUaG9ih5yLHa5FcXxH4cDrC0kqZWs72yl+2qp/C3xag/lRbQ/6GW6whfGHdPAgMB +-AAGjYzBhMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW +-BBRF66Kv9JLLgjEtUYunpyGd823IDzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYun +-pyGd823IDzANBgkqhkiG9w0BAQUFAAOCAQEAog683+Lt8ONyc3pklL/3cmbYMuRC +-dWKuh+vy1dneVrOfzM4UKLkNl2BcEkxY5NM9g0lFWJc1aRqoR+pWxnmrEthngYTf +-fwk8lOa4JiwgvT2zKIn3X/8i4peEH+ll74fg38FnSbNd67IJKusm7Xi+fT8r87cm +-NW1fiQG2SVufAQWbqz0lwcy2f8Lxb4bG+mRo64EtlOtCt/qMHt1i8b5QZ7dsvfPx +-H2sMNgcWfzd8qVttevESRmCD1ycEvkvOl77DZypoEd+A5wwzZr8TDRRu838fYxAe +-+o0bJW1sj6W3YQGx0qMmoRBxna3iw/nDmVG3KwcIzi7mULKn+gpFL6Lw8g== +------END CERTIFICATE----- +- +-# Issuer: CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com +-# Subject: CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com +-# Label: "DigiCert Global Root CA" +-# Serial: 10944719598952040374951832963794454346 +-# MD5 Fingerprint: 79:e4:a9:84:0d:7d:3a:96:d7:c0:4f:e2:43:4c:89:2e +-# SHA1 Fingerprint: a8:98:5d:3a:65:e5:e5:c4:b2:d7:d6:6d:40:c6:dd:2f:b1:9c:54:36 +-# SHA256 Fingerprint: 43:48:a0:e9:44:4c:78:cb:26:5e:05:8d:5e:89:44:b4:d8:4f:96:62:bd:26:db:25:7f:89:34:a4:43:c7:01:61 +------BEGIN CERTIFICATE----- +-MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD +-QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT +-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j +-b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG +-9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB +-CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97 +-nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt +-43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P +-T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4 +-gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO +-BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR +-TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw +-DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr +-hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg +-06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF +-PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls +-YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk +-CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4= +------END CERTIFICATE----- +- +-# Issuer: CN=DigiCert High Assurance EV Root CA O=DigiCert Inc OU=www.digicert.com +-# Subject: CN=DigiCert High Assurance EV Root CA O=DigiCert Inc OU=www.digicert.com +-# Label: "DigiCert High Assurance EV Root CA" +-# Serial: 3553400076410547919724730734378100087 +-# MD5 Fingerprint: d4:74:de:57:5c:39:b2:d3:9c:85:83:c5:c0:65:49:8a +-# SHA1 Fingerprint: 5f:b7:ee:06:33:e2:59:db:ad:0c:4c:9a:e6:d3:8f:1a:61:c7:dc:25 +-# SHA256 Fingerprint: 74:31:e5:f4:c3:c1:ce:46:90:77:4f:0b:61:e0:54:40:88:3b:a9:a0:1e:d0:0b:a6:ab:d7:80:6e:d3:b1:18:cf +------BEGIN CERTIFICATE----- +-MIIDxTCCAq2gAwIBAgIQAqxcJmoLQJuPC3nyrkYldzANBgkqhkiG9w0BAQUFADBs +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j +-ZSBFViBSb290IENBMB4XDTA2MTExMDAwMDAwMFoXDTMxMTExMDAwMDAwMFowbDEL +-MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3 +-LmRpZ2ljZXJ0LmNvbTErMCkGA1UEAxMiRGlnaUNlcnQgSGlnaCBBc3N1cmFuY2Ug +-RVYgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbM5XPm +-+9S75S0tMqbf5YE/yc0lSbZxKsPVlDRnogocsF9ppkCxxLeyj9CYpKlBWTrT3JTW +-PNt0OKRKzE0lgvdKpVMSOO7zSW1xkX5jtqumX8OkhPhPYlG++MXs2ziS4wblCJEM +-xChBVfvLWokVfnHoNb9Ncgk9vjo4UFt3MRuNs8ckRZqnrG0AFFoEt7oT61EKmEFB +-Ik5lYYeBQVCmeVyJ3hlKV9Uu5l0cUyx+mM0aBhakaHPQNAQTXKFx01p8VdteZOE3 +-hzBWBOURtCmAEvF5OYiiAhF8J2a3iLd48soKqDirCmTCv2ZdlYTBoSUeh10aUAsg +-EsxBu24LUTi4S8sCAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQF +-MAMBAf8wHQYDVR0OBBYEFLE+w2kD+L9HAdSYJhoIAu9jZCvDMB8GA1UdIwQYMBaA +-FLE+w2kD+L9HAdSYJhoIAu9jZCvDMA0GCSqGSIb3DQEBBQUAA4IBAQAcGgaX3Nec +-nzyIZgYIVyHbIUf4KmeqvxgydkAQV8GK83rZEWWONfqe/EW1ntlMMUu4kehDLI6z +-eM7b41N5cdblIZQB2lWHmiRk9opmzN6cN82oNLFpmyPInngiK3BD41VHMWEZ71jF +-hS9OMPagMRYjyOfiZRYzy78aG6A9+MpeizGLYAiJLQwGXFK3xPkKmNEVX58Svnw2 +-Yzi9RKR/5CYrCsSXaQ3pjOLAEFe4yHYSkVXySGnYvCoCWw9E1CAx2/S6cCZdkGCe +-vEsXCS+0yx5DaMkHJ8HSXPfqIbloEpw8nL+e/IBcm2PN7EeqJSdnoDfzAIJ9VNep +-+OkuE6N36B9K +------END CERTIFICATE----- +- +-# Issuer: CN=SwissSign Gold CA - G2 O=SwissSign AG +-# Subject: CN=SwissSign Gold CA - G2 O=SwissSign AG +-# Label: "SwissSign Gold CA - G2" +-# Serial: 13492815561806991280 +-# MD5 Fingerprint: 24:77:d9:a8:91:d1:3b:fa:88:2d:c2:ff:f8:cd:33:93 +-# SHA1 Fingerprint: d8:c5:38:8a:b7:30:1b:1b:6e:d4:7a:e6:45:25:3a:6f:9f:1a:27:61 +-# SHA256 Fingerprint: 62:dd:0b:e9:b9:f5:0a:16:3e:a0:f8:e7:5c:05:3b:1e:ca:57:ea:55:c8:68:8f:64:7c:68:81:f2:c8:35:7b:95 +------BEGIN CERTIFICATE----- +-MIIFujCCA6KgAwIBAgIJALtAHEP1Xk+wMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNV +-BAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxHzAdBgNVBAMTFlN3aXNzU2ln +-biBHb2xkIENBIC0gRzIwHhcNMDYxMDI1MDgzMDM1WhcNMzYxMDI1MDgzMDM1WjBF +-MQswCQYDVQQGEwJDSDEVMBMGA1UEChMMU3dpc3NTaWduIEFHMR8wHQYDVQQDExZT +-d2lzc1NpZ24gR29sZCBDQSAtIEcyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC +-CgKCAgEAr+TufoskDhJuqVAtFkQ7kpJcyrhdhJJCEyq8ZVeCQD5XJM1QiyUqt2/8 +-76LQwB8CJEoTlo8jE+YoWACjR8cGp4QjK7u9lit/VcyLwVcfDmJlD909Vopz2q5+ +-bbqBHH5CjCA12UNNhPqE21Is8w4ndwtrvxEvcnifLtg+5hg3Wipy+dpikJKVyh+c +-6bM8K8vzARO/Ws/BtQpgvd21mWRTuKCWs2/iJneRjOBiEAKfNA+k1ZIzUd6+jbqE +-emA8atufK+ze3gE/bk3lUIbLtK/tREDFylqM2tIrfKjuvqblCqoOpd8FUrdVxyJd +-MmqXl2MT28nbeTZ7hTpKxVKJ+STnnXepgv9VHKVxaSvRAiTysybUa9oEVeXBCsdt +-MDeQKuSeFDNeFhdVxVu1yzSJkvGdJo+hB9TGsnhQ2wwMC3wLjEHXuendjIj3o02y +-MszYF9rNt85mndT9Xv+9lz4pded+p2JYryU0pUHHPbwNUMoDAw8IWh+Vc3hiv69y +-FGkOpeUDDniOJihC8AcLYiAQZzlG+qkDzAQ4embvIIO1jEpWjpEA/I5cgt6IoMPi +-aG59je883WX0XaxR7ySArqpWl2/5rX3aYT+YdzylkbYcjCbaZaIJbcHiVOO5ykxM +-gI93e2CaHt+28kgeDrpOVG2Y4OGiGqJ3UM/EY5LsRxmd6+ZrzsECAwEAAaOBrDCB +-qTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUWyV7 +-lqRlUX64OfPAeGZe6Drn8O4wHwYDVR0jBBgwFoAUWyV7lqRlUX64OfPAeGZe6Drn +-8O4wRgYDVR0gBD8wPTA7BglghXQBWQECAQEwLjAsBggrBgEFBQcCARYgaHR0cDov +-L3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS8wDQYJKoZIhvcNAQEFBQADggIBACe6 +-45R88a7A3hfm5djV9VSwg/S7zV4Fe0+fdWavPOhWfvxyeDgD2StiGwC5+OlgzczO +-UYrHUDFu4Up+GC9pWbY9ZIEr44OE5iKHjn3g7gKZYbge9LgriBIWhMIxkziWMaa5 +-O1M/wySTVltpkuzFwbs4AOPsF6m43Md8AYOfMke6UiI0HTJ6CVanfCU2qT1L2sCC +-bwq7EsiHSycR+R4tx5M/nttfJmtS2S6K8RTGRI0Vqbe/vd6mGu6uLftIdxf+u+yv +-GPUqUfA5hJeVbG4bwyvEdGB5JbAKJ9/fXtI5z0V9QkvfsywexcZdylU6oJxpmo/a +-77KwPJ+HbBIrZXAVUjEaJM9vMSNQH4xPjyPDdEFjHFWoFN0+4FFQz/EbMFYOkrCC +-hdiDyyJkvC24JdVUorgG6q2SpCSgwYa1ShNqR88uC1aVVMvOmttqtKay20EIhid3 +-92qgQmwLOM7XdVAyksLfKzAiSNDVQTglXaTpXZ/GlHXQRf0wl0OPkKsKx4ZzYEpp +-Ld6leNcG2mqeSz53OiATIgHQv2ieY2BrNU0LbbqhPcCT4H8js1WtciVORvnSFu+w +-ZMEBnunKoGqYDs/YYPIvSbjkQuE4NRb0yG5P94FW6LqjviOvrv1vA+ACOzB2+htt +-Qc8Bsem4yWb02ybzOqR08kkkW8mw0FfB+j564ZfJ +------END CERTIFICATE----- +- +-# Issuer: CN=SwissSign Silver CA - G2 O=SwissSign AG +-# Subject: CN=SwissSign Silver CA - G2 O=SwissSign AG +-# Label: "SwissSign Silver CA - G2" +-# Serial: 5700383053117599563 +-# MD5 Fingerprint: e0:06:a1:c9:7d:cf:c9:fc:0d:c0:56:75:96:d8:62:13 +-# SHA1 Fingerprint: 9b:aa:e5:9f:56:ee:21:cb:43:5a:be:25:93:df:a7:f0:40:d1:1d:cb +-# SHA256 Fingerprint: be:6c:4d:a2:bb:b9:ba:59:b6:f3:93:97:68:37:42:46:c3:c0:05:99:3f:a9:8f:02:0d:1d:ed:be:d4:8a:81:d5 +------BEGIN CERTIFICATE----- +-MIIFvTCCA6WgAwIBAgIITxvUL1S7L0swDQYJKoZIhvcNAQEFBQAwRzELMAkGA1UE +-BhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEhMB8GA1UEAxMYU3dpc3NTaWdu +-IFNpbHZlciBDQSAtIEcyMB4XDTA2MTAyNTA4MzI0NloXDTM2MTAyNTA4MzI0Nlow +-RzELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEhMB8GA1UEAxMY +-U3dpc3NTaWduIFNpbHZlciBDQSAtIEcyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A +-MIICCgKCAgEAxPGHf9N4Mfc4yfjDmUO8x/e8N+dOcbpLj6VzHVxumK4DV644N0Mv +-Fz0fyM5oEMF4rhkDKxD6LHmD9ui5aLlV8gREpzn5/ASLHvGiTSf5YXu6t+WiE7br +-YT7QbNHm+/pe7R20nqA1W6GSy/BJkv6FCgU+5tkL4k+73JU3/JHpMjUi0R86TieF +-nbAVlDLaYQ1HTWBCrpJH6INaUFjpiou5XaHc3ZlKHzZnu0jkg7Y360g6rw9njxcH +-6ATK72oxh9TAtvmUcXtnZLi2kUpCe2UuMGoM9ZDulebyzYLs2aFK7PayS+VFheZt +-eJMELpyCbTapxDFkH4aDCyr0NQp4yVXPQbBH6TCfmb5hqAaEuSh6XzjZG6k4sIN/ +-c8HDO0gqgg8hm7jMqDXDhBuDsz6+pJVpATqJAHgE2cn0mRmrVn5bi4Y5FZGkECwJ +-MoBgs5PAKrYYC51+jUnyEEp/+dVGLxmSo5mnJqy7jDzmDrxHB9xzUfFwZC8I+bRH +-HTBsROopN4WSaGa8gzj+ezku01DwH/teYLappvonQfGbGHLy9YR0SslnxFSuSGTf +-jNFusB3hB48IHpmccelM2KX3RxIfdNFRnobzwqIjQAtz20um53MGjMGg6cFZrEb6 +-5i/4z3GcRm25xBWNOHkDRUjvxF3XCO6HOSKGsg0PWEP3calILv3q1h8CAwEAAaOB +-rDCBqTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU +-F6DNweRBtjpbO8tFnb0cwpj6hlgwHwYDVR0jBBgwFoAUF6DNweRBtjpbO8tFnb0c +-wpj6hlgwRgYDVR0gBD8wPTA7BglghXQBWQEDAQEwLjAsBggrBgEFBQcCARYgaHR0 +-cDovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS8wDQYJKoZIhvcNAQEFBQADggIB +-AHPGgeAn0i0P4JUw4ppBf1AsX19iYamGamkYDHRJ1l2E6kFSGG9YrVBWIGrGvShp +-WJHckRE1qTodvBqlYJ7YH39FkWnZfrt4csEGDyrOj4VwYaygzQu4OSlWhDJOhrs9 +-xCrZ1x9y7v5RoSJBsXECYxqCsGKrXlcSH9/L3XWgwF15kIwb4FDm3jH+mHtwX6WQ +-2K34ArZv02DdQEsixT2tOnqfGhpHkXkzuoLcMmkDlm4fS/Bx/uNncqCxv1yL5PqZ +-IseEuRuNI5c/7SXgz2W79WEE790eslpBIlqhn10s6FvJbakMDHiqYMZWjwFaDGi8 +-aRl5xB9+lwW/xekkUV7U1UtT7dkjWjYDZaPBA61BMPNGG4WQr2W11bHkFlt4dR2X +-em1ZqSqPe97Dh4kQmUlzeMg9vVE1dCrV8X5pGyq7O70luJpaPXJhkGaH7gzWTdQR +-dAtq/gsD/KNVV4n+SsuuWxcFyPKNIzFTONItaj+CuY0IavdeQXRuwxF+B6wpYJE/ +-OMpXEA29MC/HpeZBoNquBYeaoKRlbEwJDIm6uNO5wJOKMPqN5ZprFQFOZ6raYlY+ +-hAhm0sQ2fac+EPyI4NSA5QC9qvNOBqN6avlicuMJT+ubDgEj8Z+7fNzcbBGXJbLy +-tGMU0gYqZ4yD9c7qB9iaah7s5Aq7KkzrCWA5zspi2C5u +------END CERTIFICATE----- +- +-# Issuer: CN=SecureTrust CA O=SecureTrust Corporation +-# Subject: CN=SecureTrust CA O=SecureTrust Corporation +-# Label: "SecureTrust CA" +-# Serial: 17199774589125277788362757014266862032 +-# MD5 Fingerprint: dc:32:c3:a7:6d:25:57:c7:68:09:9d:ea:2d:a9:a2:d1 +-# SHA1 Fingerprint: 87:82:c6:c3:04:35:3b:cf:d2:96:92:d2:59:3e:7d:44:d9:34:ff:11 +-# SHA256 Fingerprint: f1:c1:b5:0a:e5:a2:0d:d8:03:0e:c9:f6:bc:24:82:3d:d3:67:b5:25:57:59:b4:e7:1b:61:fc:e9:f7:37:5d:73 +------BEGIN CERTIFICATE----- +-MIIDuDCCAqCgAwIBAgIQDPCOXAgWpa1Cf/DrJxhZ0DANBgkqhkiG9w0BAQUFADBI +-MQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24x +-FzAVBgNVBAMTDlNlY3VyZVRydXN0IENBMB4XDTA2MTEwNzE5MzExOFoXDTI5MTIz +-MTE5NDA1NVowSDELMAkGA1UEBhMCVVMxIDAeBgNVBAoTF1NlY3VyZVRydXN0IENv +-cnBvcmF0aW9uMRcwFQYDVQQDEw5TZWN1cmVUcnVzdCBDQTCCASIwDQYJKoZIhvcN +-AQEBBQADggEPADCCAQoCggEBAKukgeWVzfX2FI7CT8rU4niVWJxB4Q2ZQCQXOZEz +-Zum+4YOvYlyJ0fwkW2Gz4BERQRwdbvC4u/jep4G6pkjGnx29vo6pQT64lO0pGtSO +-0gMdA+9tDWccV9cGrcrI9f4Or2YlSASWC12juhbDCE/RRvgUXPLIXgGZbf2IzIao +-wW8xQmxSPmjL8xk037uHGFaAJsTQ3MBv396gwpEWoGQRS0S8Hvbn+mPeZqx2pHGj +-7DaUaHp3pLHnDi+BeuK1cobvomuL8A/b01k/unK8RCSc43Oz969XL0Imnal0ugBS +-8kvNU3xHCzaFDmapCJcWNFfBZveA4+1wVMeT4C4oFVmHursCAwEAAaOBnTCBmjAT +-BgkrBgEEAYI3FAIEBh4EAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB +-/zAdBgNVHQ4EFgQUQjK2FvoE/f5dS3rD/fdMQB1aQ68wNAYDVR0fBC0wKzApoCeg +-JYYjaHR0cDovL2NybC5zZWN1cmV0cnVzdC5jb20vU1RDQS5jcmwwEAYJKwYBBAGC +-NxUBBAMCAQAwDQYJKoZIhvcNAQEFBQADggEBADDtT0rhWDpSclu1pqNlGKa7UTt3 +-6Z3q059c4EVlew3KW+JwULKUBRSuSceNQQcSc5R+DCMh/bwQf2AQWnL1mA6s7Ll/ +-3XpvXdMc9P+IBWlCqQVxyLesJugutIxq/3HcuLHfmbx8IVQr5Fiiu1cprp6poxkm +-D5kuCLDv/WnPmRoJjeOnnyvJNjR7JLN4TJUXpAYmHrZkUjZfYGfZnMUFdAvnZyPS +-CPyI6a6Lf+Ew9Dd+/cYy2i2eRDAwbO4H3tI0/NL/QPZL9GZGBlSm8jIKYyYwa5vR +-3ItHuuG51WLQoqD0ZwV4KWMabwTW+MZMo5qxN7SN5ShLHZ4swrhovO0C7jE= +------END CERTIFICATE----- +- +-# Issuer: CN=Secure Global CA O=SecureTrust Corporation +-# Subject: CN=Secure Global CA O=SecureTrust Corporation +-# Label: "Secure Global CA" +-# Serial: 9751836167731051554232119481456978597 +-# MD5 Fingerprint: cf:f4:27:0d:d4:ed:dc:65:16:49:6d:3d:da:bf:6e:de +-# SHA1 Fingerprint: 3a:44:73:5a:e5:81:90:1f:24:86:61:46:1e:3b:9c:c4:5f:f5:3a:1b +-# SHA256 Fingerprint: 42:00:f5:04:3a:c8:59:0e:bb:52:7d:20:9e:d1:50:30:29:fb:cb:d4:1c:a1:b5:06:ec:27:f1:5a:de:7d:ac:69 +------BEGIN CERTIFICATE----- +-MIIDvDCCAqSgAwIBAgIQB1YipOjUiolN9BPI8PjqpTANBgkqhkiG9w0BAQUFADBK +-MQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24x +-GTAXBgNVBAMTEFNlY3VyZSBHbG9iYWwgQ0EwHhcNMDYxMTA3MTk0MjI4WhcNMjkx +-MjMxMTk1MjA2WjBKMQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3Qg +-Q29ycG9yYXRpb24xGTAXBgNVBAMTEFNlY3VyZSBHbG9iYWwgQ0EwggEiMA0GCSqG +-SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNS7YrGxVaQZx5RNoJLNP2MwhR/jxYDiJ +-iQPpvepeRlMJ3Fz1Wuj3RSoC6zFh1ykzTM7HfAo3fg+6MpjhHZevj8fcyTiW89sa +-/FHtaMbQbqR8JNGuQsiWUGMu4P51/pinX0kuleM5M2SOHqRfkNJnPLLZ/kG5VacJ +-jnIFHovdRIWCQtBJwB1g8NEXLJXr9qXBkqPFwqcIYA1gBBCWeZ4WNOaptvolRTnI +-HmX5k/Wq8VLcmZg9pYYaDDUz+kulBAYVHDGA76oYa8J719rO+TMg1fW9ajMtgQT7 +-sFzUnKPiXB3jqUJ1XnvUd+85VLrJChgbEplJL4hL/VBi0XPnj3pDAgMBAAGjgZ0w +-gZowEwYJKwYBBAGCNxQCBAYeBABDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQF +-MAMBAf8wHQYDVR0OBBYEFK9EBMJBfkiD2045AuzshHrmzsmkMDQGA1UdHwQtMCsw +-KaAnoCWGI2h0dHA6Ly9jcmwuc2VjdXJldHJ1c3QuY29tL1NHQ0EuY3JsMBAGCSsG +-AQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEBBQUAA4IBAQBjGghAfaReUw132HquHw0L +-URYD7xh8yOOvaliTFGCRsoTciE6+OYo68+aCiV0BN7OrJKQVDpI1WkpEXk5X+nXO +-H0jOZvQ8QCaSmGwb7iRGDBezUqXbpZGRzzfTb+cnCDpOGR86p1hcF895P4vkp9Mm +-I50mD1hp/Ed+stCNi5O/KU9DaXR2Z0vPB4zmAve14bRDtUstFJ/53CYNv6ZHdAbY +-iNE6KTCEztI5gGIbqMdXSbxqVVFnFUq+NQfk1XWYN3kwFNspnWzFacxHVaIw98xc +-f8LDmBxrThaA63p4ZUWiABqvDA1VZDRIuJK58bRQKfJPIx/abKwfROHdI3hRW8cW +------END CERTIFICATE----- +- +-# Issuer: CN=COMODO Certification Authority O=COMODO CA Limited +-# Subject: CN=COMODO Certification Authority O=COMODO CA Limited +-# Label: "COMODO Certification Authority" +-# Serial: 104350513648249232941998508985834464573 +-# MD5 Fingerprint: 5c:48:dc:f7:42:72:ec:56:94:6d:1c:cc:71:35:80:75 +-# SHA1 Fingerprint: 66:31:bf:9e:f7:4f:9e:b6:c9:d5:a6:0c:ba:6a:be:d1:f7:bd:ef:7b +-# SHA256 Fingerprint: 0c:2c:d6:3d:f7:80:6f:a3:99:ed:e8:09:11:6b:57:5b:f8:79:89:f0:65:18:f9:80:8c:86:05:03:17:8b:af:66 +------BEGIN CERTIFICATE----- +-MIIEHTCCAwWgAwIBAgIQToEtioJl4AsC7j41AkblPTANBgkqhkiG9w0BAQUFADCB +-gTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G +-A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJzAlBgNV +-BAMTHkNPTU9ETyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNjEyMDEwMDAw +-MDBaFw0yOTEyMzEyMzU5NTlaMIGBMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl +-YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01P +-RE8gQ0EgTGltaXRlZDEnMCUGA1UEAxMeQ09NT0RPIENlcnRpZmljYXRpb24gQXV0 +-aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECLi3LjkRv3 +-UcEbVASY06m/weaKXTuH+7uIzg3jLz8GlvCiKVCZrts7oVewdFFxze1CkU1B/qnI +-2GqGd0S7WWaXUF601CxwRM/aN5VCaTwwxHGzUvAhTaHYujl8HJ6jJJ3ygxaYqhZ8 +-Q5sVW7euNJH+1GImGEaaP+vB+fGQV+useg2L23IwambV4EajcNxo2f8ESIl33rXp +-+2dtQem8Ob0y2WIC8bGoPW43nOIv4tOiJovGuFVDiOEjPqXSJDlqR6sA1KGzqSX+ +-DT+nHbrTUcELpNqsOO9VUCQFZUaTNE8tja3G1CEZ0o7KBWFxB3NH5YoZEr0ETc5O +-nKVIrLsm9wIDAQABo4GOMIGLMB0GA1UdDgQWBBQLWOWLxkwVN6RAqTCpIb5HNlpW +-/zAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBJBgNVHR8EQjBAMD6g +-PKA6hjhodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9DZXJ0aWZpY2F0aW9u +-QXV0aG9yaXR5LmNybDANBgkqhkiG9w0BAQUFAAOCAQEAPpiem/Yb6dc5t3iuHXIY +-SdOH5EOC6z/JqvWote9VfCFSZfnVDeFs9D6Mk3ORLgLETgdxb8CPOGEIqB6BCsAv +-IC9Bi5HcSEW88cbeunZrM8gALTFGTO3nnc+IlP8zwFboJIYmuNg4ON8qa90SzMc/ +-RxdMosIGlgnW2/4/PEZB31jiVg88O8EckzXZOFKs7sjsLjBOlDW0JB9LeGna8gI4 +-zJVSk/BwJVmcIGfE7vmLV2H0knZ9P4SNVbfo5azV8fUZVqZa+5Acr5Pr5RzUZ5dd +-BA6+C4OmF4O5MBKgxTMVBbkN+8cFduPYSo38NBejxiEovjBFMR7HeL5YYTisO+IB +-ZQ== +------END CERTIFICATE----- +- +-# Issuer: CN=Network Solutions Certificate Authority O=Network Solutions L.L.C. +-# Subject: CN=Network Solutions Certificate Authority O=Network Solutions L.L.C. +-# Label: "Network Solutions Certificate Authority" +-# Serial: 116697915152937497490437556386812487904 +-# MD5 Fingerprint: d3:f3:a6:16:c0:fa:6b:1d:59:b1:2d:96:4d:0e:11:2e +-# SHA1 Fingerprint: 74:f8:a3:c3:ef:e7:b3:90:06:4b:83:90:3c:21:64:60:20:e5:df:ce +-# SHA256 Fingerprint: 15:f0:ba:00:a3:ac:7a:f3:ac:88:4c:07:2b:10:11:a0:77:bd:77:c0:97:f4:01:64:b2:f8:59:8a:bd:83:86:0c +------BEGIN CERTIFICATE----- +-MIID5jCCAs6gAwIBAgIQV8szb8JcFuZHFhfjkDFo4DANBgkqhkiG9w0BAQUFADBi +-MQswCQYDVQQGEwJVUzEhMB8GA1UEChMYTmV0d29yayBTb2x1dGlvbnMgTC5MLkMu +-MTAwLgYDVQQDEydOZXR3b3JrIFNvbHV0aW9ucyBDZXJ0aWZpY2F0ZSBBdXRob3Jp +-dHkwHhcNMDYxMjAxMDAwMDAwWhcNMjkxMjMxMjM1OTU5WjBiMQswCQYDVQQGEwJV +-UzEhMB8GA1UEChMYTmV0d29yayBTb2x1dGlvbnMgTC5MLkMuMTAwLgYDVQQDEydO +-ZXR3b3JrIFNvbHV0aW9ucyBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggEiMA0GCSqG +-SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkvH6SMG3G2I4rC7xGzuAnlt7e+foS0zwz +-c7MEL7xxjOWftiJgPl9dzgn/ggwbmlFQGiaJ3dVhXRncEg8tCqJDXRfQNJIg6nPP +-OCwGJgl6cvf6UDL4wpPTaaIjzkGxzOTVHzbRijr4jGPiFFlp7Q3Tf2vouAPlT2rl +-mGNpSAW+Lv8ztumXWWn4Zxmuk2GWRBXTcrA/vGp97Eh/jcOrqnErU2lBUzS1sLnF +-BgrEsEX1QV1uiUV7PTsmjHTC5dLRfbIR1PtYMiKagMnc/Qzpf14Dl847ABSHJ3A4 +-qY5usyd2mFHgBeMhqxrVhSI8KbWaFsWAqPS7azCPL0YCorEMIuDTAgMBAAGjgZcw +-gZQwHQYDVR0OBBYEFCEwyfsA106Y2oeqKtCnLrFAMadMMA4GA1UdDwEB/wQEAwIB +-BjAPBgNVHRMBAf8EBTADAQH/MFIGA1UdHwRLMEkwR6BFoEOGQWh0dHA6Ly9jcmwu +-bmV0c29sc3NsLmNvbS9OZXR3b3JrU29sdXRpb25zQ2VydGlmaWNhdGVBdXRob3Jp +-dHkuY3JsMA0GCSqGSIb3DQEBBQUAA4IBAQC7rkvnt1frf6ott3NHhWrB5KUd5Oc8 +-6fRZZXe1eltajSU24HqXLjjAV2CDmAaDn7l2em5Q4LqILPxFzBiwmZVRDuwduIj/ +-h1AcgsLj4DKAv6ALR8jDMe+ZZzKATxcheQxpXN5eNK4CtSbqUN9/GGUsyfJj4akH +-/nxxH2szJGoeBfcFaMBqEssuXmHLrijTfsK0ZpEmXzwuJF/LWA/rKOyvEZbz3Htv +-wKeI8lN3s2Berq4o2jUsbzRF0ybh3uxbTydrFny9RAQYgrOJeRcQcT16ohZO9QHN +-pGxlaKFJdlxDydi8NmdspZS11My5vWo1ViHe2MPr+8ukYEywVaCge1ey +------END CERTIFICATE----- +- +-# Issuer: CN=COMODO ECC Certification Authority O=COMODO CA Limited +-# Subject: CN=COMODO ECC Certification Authority O=COMODO CA Limited +-# Label: "COMODO ECC Certification Authority" +-# Serial: 41578283867086692638256921589707938090 +-# MD5 Fingerprint: 7c:62:ff:74:9d:31:53:5e:68:4a:d5:78:aa:1e:bf:23 +-# SHA1 Fingerprint: 9f:74:4e:9f:2b:4d:ba:ec:0f:31:2c:50:b6:56:3b:8e:2d:93:c3:11 +-# SHA256 Fingerprint: 17:93:92:7a:06:14:54:97:89:ad:ce:2f:8f:34:f7:f0:b6:6d:0f:3a:e3:a3:b8:4d:21:ec:15:db:ba:4f:ad:c7 +------BEGIN CERTIFICATE----- +-MIICiTCCAg+gAwIBAgIQH0evqmIAcFBUTAGem2OZKjAKBggqhkjOPQQDAzCBhTEL +-MAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UE +-BxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMT +-IkNPTU9ETyBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDgwMzA2MDAw +-MDAwWhcNMzgwMTE4MjM1OTU5WjCBhTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdy +-ZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09N +-T0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBFQ0MgQ2VydGlmaWNhdGlv +-biBBdXRob3JpdHkwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQDR3svdcmCFYX7deSR +-FtSrYpn1PlILBs5BAH+X4QokPB0BBO490o0JlwzgdeT6+3eKKvUDYEs2ixYjFq0J +-cfRK9ChQtP6IHG4/bC8vCVlbpVsLM5niwz2J+Wos77LTBumjQjBAMB0GA1UdDgQW +-BBR1cacZSBm8nZ3qQUfflMRId5nTeTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/ +-BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjEA7wNbeqy3eApyt4jf/7VGFAkK+qDm +-fQjGGoe9GKhzvSbKYAydzpmfz1wPMOG+FDHqAjAU9JM8SaczepBGR7NjfRObTrdv +-GDeAU/7dIOA1mjbRxwG55tzd8/8dLDoWV9mSOdY= +------END CERTIFICATE----- +- +-# Issuer: CN=Certigna O=Dhimyotis +-# Subject: CN=Certigna O=Dhimyotis +-# Label: "Certigna" +-# Serial: 18364802974209362175 +-# MD5 Fingerprint: ab:57:a6:5b:7d:42:82:19:b5:d8:58:26:28:5e:fd:ff +-# SHA1 Fingerprint: b1:2e:13:63:45:86:a4:6f:1a:b2:60:68:37:58:2d:c4:ac:fd:94:97 +-# SHA256 Fingerprint: e3:b6:a2:db:2e:d7:ce:48:84:2f:7a:c5:32:41:c7:b7:1d:54:14:4b:fb:40:c1:1f:3f:1d:0b:42:f5:ee:a1:2d +------BEGIN CERTIFICATE----- +-MIIDqDCCApCgAwIBAgIJAP7c4wEPyUj/MA0GCSqGSIb3DQEBBQUAMDQxCzAJBgNV +-BAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hMB4X +-DTA3MDYyOTE1MTMwNVoXDTI3MDYyOTE1MTMwNVowNDELMAkGA1UEBhMCRlIxEjAQ +-BgNVBAoMCURoaW15b3RpczERMA8GA1UEAwwIQ2VydGlnbmEwggEiMA0GCSqGSIb3 +-DQEBAQUAA4IBDwAwggEKAoIBAQDIaPHJ1tazNHUmgh7stL7qXOEm7RFHYeGifBZ4 +-QCHkYJ5ayGPhxLGWkv8YbWkj4Sti993iNi+RB7lIzw7sebYs5zRLcAglozyHGxny +-gQcPOJAZ0xH+hrTy0V4eHpbNgGzOOzGTtvKg0KmVEn2lmsxryIRWijOp5yIVUxbw +-zBfsV1/pogqYCd7jX5xv3EjjhQsVWqa6n6xI4wmy9/Qy3l40vhx4XUJbzg4ij02Q +-130yGLMLLGq/jj8UEYkgDncUtT2UCIf3JR7VsmAA7G8qKCVuKj4YYxclPz5EIBb2 +-JsglrgVKtOdjLPOMFlN+XPsRGgjBRmKfIrjxwo1p3Po6WAbfAgMBAAGjgbwwgbkw +-DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUGu3+QTmQtCRZvgHyUtVF9lo53BEw +-ZAYDVR0jBF0wW4AUGu3+QTmQtCRZvgHyUtVF9lo53BGhOKQ2MDQxCzAJBgNVBAYT +-AkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hggkA/tzj +-AQ/JSP8wDgYDVR0PAQH/BAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG +-9w0BAQUFAAOCAQEAhQMeknH2Qq/ho2Ge6/PAD/Kl1NqV5ta+aDY9fm4fTIrv0Q8h +-bV6lUmPOEvjvKtpv6zf+EwLHyzs+ImvaYS5/1HI93TDhHkxAGYwP15zRgzB7mFnc +-fca5DClMoTOi62c6ZYTTluLtdkVwj7Ur3vkj1kluPBS1xp81HlDQwY9qcEQCYsuu +-HWhBp6pX6FOqB9IG9tUUBguRA3UsbHK1YZWaDYu5Def131TN3ubY1gkIl2PlwS6w +-t0QmwCbAr1UwnjvVNioZBPRcHv/PLLf/0P2HQBHVESO7SMAhqaQoLf0V+LBOK/Qw +-WyH8EZE0vkHve52Xdf+XlcCWWC/qu0bXu+TZLg== +------END CERTIFICATE----- +- +-# Issuer: CN=Cybertrust Global Root O=Cybertrust, Inc +-# Subject: CN=Cybertrust Global Root O=Cybertrust, Inc +-# Label: "Cybertrust Global Root" +-# Serial: 4835703278459682877484360 +-# MD5 Fingerprint: 72:e4:4a:87:e3:69:40:80:77:ea:bc:e3:f4:ff:f0:e1 +-# SHA1 Fingerprint: 5f:43:e5:b1:bf:f8:78:8c:ac:1c:c7:ca:4a:9a:c6:22:2b:cc:34:c6 +-# SHA256 Fingerprint: 96:0a:df:00:63:e9:63:56:75:0c:29:65:dd:0a:08:67:da:0b:9c:bd:6e:77:71:4a:ea:fb:23:49:ab:39:3d:a3 +------BEGIN CERTIFICATE----- +-MIIDoTCCAomgAwIBAgILBAAAAAABD4WqLUgwDQYJKoZIhvcNAQEFBQAwOzEYMBYG +-A1UEChMPQ3liZXJ0cnVzdCwgSW5jMR8wHQYDVQQDExZDeWJlcnRydXN0IEdsb2Jh +-bCBSb290MB4XDTA2MTIxNTA4MDAwMFoXDTIxMTIxNTA4MDAwMFowOzEYMBYGA1UE +-ChMPQ3liZXJ0cnVzdCwgSW5jMR8wHQYDVQQDExZDeWJlcnRydXN0IEdsb2JhbCBS +-b290MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Mi8vRRQZhP/8NN5 +-7CPytxrHjoXxEnOmGaoQ25yiZXRadz5RfVb23CO21O1fWLE3TdVJDm71aofW0ozS +-J8bi/zafmGWgE07GKmSb1ZASzxQG9Dvj1Ci+6A74q05IlG2OlTEQXO2iLb3VOm2y +-HLtgwEZLAfVJrn5GitB0jaEMAs7u/OePuGtm839EAL9mJRQr3RAwHQeWP032a7iP +-t3sMpTjr3kfb1V05/Iin89cqdPHoWqI7n1C6poxFNcJQZZXcY4Lv3b93TZxiyWNz +-FtApD0mpSPCzqrdsxacwOUBdrsTiXSZT8M4cIwhhqJQZugRiQOwfOHB3EgZxpzAY +-XSUnpQIDAQABo4GlMIGiMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ +-MB0GA1UdDgQWBBS2CHsNesysIEyGVjJez6tuhS1wVzA/BgNVHR8EODA2MDSgMqAw +-hi5odHRwOi8vd3d3Mi5wdWJsaWMtdHJ1c3QuY29tL2NybC9jdC9jdHJvb3QuY3Js +-MB8GA1UdIwQYMBaAFLYIew16zKwgTIZWMl7Pq26FLXBXMA0GCSqGSIb3DQEBBQUA +-A4IBAQBW7wojoFROlZfJ+InaRcHUowAl9B8Tq7ejhVhpwjCt2BWKLePJzYFa+HMj +-Wqd8BfP9IjsO0QbE2zZMcwSO5bAi5MXzLqXZI+O4Tkogp24CJJ8iYGd7ix1yCcUx +-XOl5n4BHPa2hCwcUPUf/A2kaDAtE52Mlp3+yybh2hO0j9n0Hq0V+09+zv+mKts2o +-omcrUtW3ZfA5TGOgkXmTUg9U3YO7n9GPp1Nzw8v/MOx8BLjYRB+TX3EJIrduPuoc +-A06dGiBh+4E37F78CkWr1+cXVdCg6mCbpvbjjFspwgZgFJ0tl0ypkxWdYcQBX0jW +-WL1WMRJOEcgh4LMRkWXbtKaIOM5V +------END CERTIFICATE----- +- +-# Issuer: O=Chunghwa Telecom Co., Ltd. OU=ePKI Root Certification Authority +-# Subject: O=Chunghwa Telecom Co., Ltd. OU=ePKI Root Certification Authority +-# Label: "ePKI Root Certification Authority" +-# Serial: 28956088682735189655030529057352760477 +-# MD5 Fingerprint: 1b:2e:00:ca:26:06:90:3d:ad:fe:6f:15:68:d3:6b:b3 +-# SHA1 Fingerprint: 67:65:0d:f1:7e:8e:7e:5b:82:40:a4:f4:56:4b:cf:e2:3d:69:c6:f0 +-# SHA256 Fingerprint: c0:a6:f4:dc:63:a2:4b:fd:cf:54:ef:2a:6a:08:2a:0a:72:de:35:80:3e:2f:f5:ff:52:7a:e5:d8:72:06:df:d5 +------BEGIN CERTIFICATE----- +-MIIFsDCCA5igAwIBAgIQFci9ZUdcr7iXAF7kBtK8nTANBgkqhkiG9w0BAQUFADBe +-MQswCQYDVQQGEwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0 +-ZC4xKjAoBgNVBAsMIWVQS0kgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe +-Fw0wNDEyMjAwMjMxMjdaFw0zNDEyMjAwMjMxMjdaMF4xCzAJBgNVBAYTAlRXMSMw +-IQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwgTHRkLjEqMCgGA1UECwwhZVBL +-SSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEF +-AAOCAg8AMIICCgKCAgEA4SUP7o3biDN1Z82tH306Tm2d0y8U82N0ywEhajfqhFAH +-SyZbCUNsIZ5qyNUD9WBpj8zwIuQf5/dqIjG3LBXy4P4AakP/h2XGtRrBp0xtInAh +-ijHyl3SJCRImHJ7K2RKilTza6We/CKBk49ZCt0Xvl/T29de1ShUCWH2YWEtgvM3X +-DZoTM1PRYfl61dd4s5oz9wCGzh1NlDivqOx4UXCKXBCDUSH3ET00hl7lSM2XgYI1 +-TBnsZfZrxQWh7kcT1rMhJ5QQCtkkO7q+RBNGMD+XPNjX12ruOzjjK9SXDrkb5wdJ +-fzcq+Xd4z1TtW0ado4AOkUPB1ltfFLqfpo0kR0BZv3I4sjZsN/+Z0V0OWQqraffA +-sgRFelQArr5T9rXn4fg8ozHSqf4hUmTFpmfwdQcGlBSBVcYn5AGPF8Fqcde+S/uU +-WH1+ETOxQvdibBjWzwloPn9s9h6PYq2lY9sJpx8iQkEeb5mKPtf5P0B6ebClAZLS +-nT0IFaUQAS2zMnaolQ2zepr7BxB4EW/hj8e6DyUadCrlHJhBmd8hh+iVBmoKs2pH +-dmX2Os+PYhcZewoozRrSgx4hxyy/vv9haLdnG7t4TY3OZ+XkwY63I2binZB1NJip +-NiuKmpS5nezMirH4JYlcWrYvjB9teSSnUmjDhDXiZo1jDiVN1Rmy5nk3pyKdVDEC +-AwEAAaNqMGgwHQYDVR0OBBYEFB4M97Zn8uGSJglFwFU5Lnc/QkqiMAwGA1UdEwQF +-MAMBAf8wOQYEZyoHAAQxMC8wLQIBADAJBgUrDgMCGgUAMAcGBWcqAwAABBRFsMLH +-ClZ87lt4DJX5GFPBphzYEDANBgkqhkiG9w0BAQUFAAOCAgEACbODU1kBPpVJufGB +-uvl2ICO1J2B01GqZNF5sAFPZn/KmsSQHRGoqxqWOeBLoR9lYGxMqXnmbnwoqZ6Yl +-PwZpVnPDimZI+ymBV3QGypzqKOg4ZyYr8dW1P2WT+DZdjo2NQCCHGervJ8A9tDkP +-JXtoUHRVnAxZfVo9QZQlUgjgRywVMRnVvwdVxrsStZf0X4OFunHB2WyBEXYKCrC/ +-gpf36j36+uwtqSiUO1bd0lEursC9CBWMd1I0ltabrNMdjmEPNXubrjlpC2JgQCA2 +-j6/7Nu4tCEoduL+bXPjqpRugc6bY+G7gMwRfaKonh+3ZwZCc7b3jajWvY9+rGNm6 +-5ulK6lCKD2GTHuItGeIwlDWSXQ62B68ZgI9HkFFLLk3dheLSClIKF5r8GrBQAuUB +-o2M3IUxExJtRmREOc5wGj1QupyheRDmHVi03vYVElOEMSyycw5KFNGHLD7ibSkNS +-/jQ6fbjpKdx2qcgw+BRxgMYeNkh0IkFch4LoGHGLQYlE535YW6i4jRPpp2zDR+2z +-Gp1iro2C6pSe3VkQw63d4k3jMdXH7OjysP6SHhYKGvzZ8/gntsm+HbRsZJB/9OTE +-W9c3rkIO3aQab3yIVMUWbuF6aC74Or8NpDyJO3inTmODBCEIZ43ygknQW/2xzQ+D +-hNQ+IIX3Sj0rnP0qCglN6oH4EZw= +------END CERTIFICATE----- +- +-# Issuer: O=certSIGN OU=certSIGN ROOT CA +-# Subject: O=certSIGN OU=certSIGN ROOT CA +-# Label: "certSIGN ROOT CA" +-# Serial: 35210227249154 +-# MD5 Fingerprint: 18:98:c0:d6:e9:3a:fc:f9:b0:f5:0c:f7:4b:01:44:17 +-# SHA1 Fingerprint: fa:b7:ee:36:97:26:62:fb:2d:b0:2a:f6:bf:03:fd:e8:7c:4b:2f:9b +-# SHA256 Fingerprint: ea:a9:62:c4:fa:4a:6b:af:eb:e4:15:19:6d:35:1c:cd:88:8d:4f:53:f3:fa:8a:e6:d7:c4:66:a9:4e:60:42:bb +------BEGIN CERTIFICATE----- +-MIIDODCCAiCgAwIBAgIGIAYFFnACMA0GCSqGSIb3DQEBBQUAMDsxCzAJBgNVBAYT +-AlJPMREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBD +-QTAeFw0wNjA3MDQxNzIwMDRaFw0zMTA3MDQxNzIwMDRaMDsxCzAJBgNVBAYTAlJP +-MREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBDQTCC +-ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALczuX7IJUqOtdu0KBuqV5Do +-0SLTZLrTk+jUrIZhQGpgV2hUhE28alQCBf/fm5oqrl0Hj0rDKH/v+yv6efHHrfAQ +-UySQi2bJqIirr1qjAOm+ukbuW3N7LBeCgV5iLKECZbO9xSsAfsT8AzNXDe3i+s5d +-RdY4zTW2ssHQnIFKquSyAVwdj1+ZxLGt24gh65AIgoDzMKND5pCCrlUoSe1b16kQ +-OA7+j0xbm0bqQfWwCHTD0IgztnzXdN/chNFDDnU5oSVAKOp4yw4sLjmdjItuFhwv +-JoIQ4uNllAoEwF73XVv4EOLQunpL+943AAAaWyjj0pxzPjKHmKHJUS/X3qwzs08C +-AwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAcYwHQYDVR0O +-BBYEFOCMm9slSbPxfIbWskKHC9BroNnkMA0GCSqGSIb3DQEBBQUAA4IBAQA+0hyJ +-LjX8+HXd5n9liPRyTMks1zJO890ZeUe9jjtbkw9QSSQTaxQGcu8J06Gh40CEyecY +-MnQ8SG4Pn0vU9x7Tk4ZkVJdjclDVVc/6IJMCopvDI5NOFlV2oHB5bc0hH88vLbwZ +-44gx+FkagQnIl6Z0x2DEW8xXjrJ1/RsCCdtZb3KTafcxQdaIOL+Hsr0Wefmq5L6I +-Jd1hJyMctTEHBDa0GpC9oHRxUIltvBTjD4au8as+x6AJzKNI0eDbZOeStc+vckNw +-i/nDhDwTqn6Sm1dTk/pwwpEOMfmbZ13pljheX7NzTogVZ96edhBiIL5VaZVDADlN +-9u6wWk5JRFRYX0KD +------END CERTIFICATE----- +- +-# Issuer: CN=NetLock Arany (Class Gold) Főtanúsítvány O=NetLock Kft. OU=Tanúsítványkiadók (Certification Services) +-# Subject: CN=NetLock Arany (Class Gold) Főtanúsítvány O=NetLock Kft. OU=Tanúsítványkiadók (Certification Services) +-# Label: "NetLock Arany (Class Gold) Főtanúsítvány" +-# Serial: 80544274841616 +-# MD5 Fingerprint: c5:a1:b7:ff:73:dd:d6:d7:34:32:18:df:fc:3c:ad:88 +-# SHA1 Fingerprint: 06:08:3f:59:3f:15:a1:04:a0:69:a4:6b:a9:03:d0:06:b7:97:09:91 +-# SHA256 Fingerprint: 6c:61:da:c3:a2:de:f0:31:50:6b:e0:36:d2:a6:fe:40:19:94:fb:d1:3d:f9:c8:d4:66:59:92:74:c4:46:ec:98 +------BEGIN CERTIFICATE----- +-MIIEFTCCAv2gAwIBAgIGSUEs5AAQMA0GCSqGSIb3DQEBCwUAMIGnMQswCQYDVQQG +-EwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFTATBgNVBAoMDE5ldExvY2sgS2Z0LjE3 +-MDUGA1UECwwuVGFuw7pzw610dsOhbnlraWFkw7NrIChDZXJ0aWZpY2F0aW9uIFNl +-cnZpY2VzKTE1MDMGA1UEAwwsTmV0TG9jayBBcmFueSAoQ2xhc3MgR29sZCkgRsWR +-dGFuw7pzw610dsOhbnkwHhcNMDgxMjExMTUwODIxWhcNMjgxMjA2MTUwODIxWjCB +-pzELMAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRUwEwYDVQQKDAxOZXRM +-b2NrIEtmdC4xNzA1BgNVBAsMLlRhbsO6c8OtdHbDoW55a2lhZMOzayAoQ2VydGlm +-aWNhdGlvbiBTZXJ2aWNlcykxNTAzBgNVBAMMLE5ldExvY2sgQXJhbnkgKENsYXNz +-IEdvbGQpIEbFkXRhbsO6c8OtdHbDoW55MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A +-MIIBCgKCAQEAxCRec75LbRTDofTjl5Bu0jBFHjzuZ9lk4BqKf8owyoPjIMHj9DrT +-lF8afFttvzBPhCf2nx9JvMaZCpDyD/V/Q4Q3Y1GLeqVw/HpYzY6b7cNGbIRwXdrz +-AZAj/E4wqX7hJ2Pn7WQ8oLjJM2P+FpD/sLj916jAwJRDC7bVWaaeVtAkH3B5r9s5 +-VA1lddkVQZQBr17s9o3x/61k/iCa11zr/qYfCGSji3ZVrR47KGAuhyXoqq8fxmRG +-ILdwfzzeSNuWU7c5d+Qa4scWhHaXWy+7GRWF+GmF9ZmnqfI0p6m2pgP8b4Y9VHx2 +-BJtr+UBdADTHLpl1neWIA6pN+APSQnbAGwIDAKiLo0UwQzASBgNVHRMBAf8ECDAG +-AQH/AgEEMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUzPpnk/C2uNClwB7zU/2M +-U9+D15YwDQYJKoZIhvcNAQELBQADggEBAKt/7hwWqZw8UQCgwBEIBaeZ5m8BiFRh +-bvG5GK1Krf6BQCOUL/t1fC8oS2IkgYIL9WHxHG64YTjrgfpioTtaYtOUZcTh5m2C +-+C8lcLIhJsFyUR+MLMOEkMNaj7rP9KdlpeuY0fsFskZ1FSNqb4VjMIDw1Z4fKRzC +-bLBQWV2QWzuoDTDPv31/zvGdg73JRm4gpvlhUbohL3u+pRVjodSVh/GeufOJ8z2F +-uLjbvrW5KfnaNwUASZQDhETnv0Mxz3WLJdH0pmT1kvarBes96aULNmLazAZfNou2 +-XjG4Kvte9nHfRCaexOYNkbQudZWAUWpLMKawYqGT8ZvYzsRjdT9ZR7E= +------END CERTIFICATE----- +- +-# Issuer: CN=Hongkong Post Root CA 1 O=Hongkong Post +-# Subject: CN=Hongkong Post Root CA 1 O=Hongkong Post +-# Label: "Hongkong Post Root CA 1" +-# Serial: 1000 +-# MD5 Fingerprint: a8:0d:6f:39:78:b9:43:6d:77:42:6d:98:5a:cc:23:ca +-# SHA1 Fingerprint: d6:da:a8:20:8d:09:d2:15:4d:24:b5:2f:cb:34:6e:b2:58:b2:8a:58 +-# SHA256 Fingerprint: f9:e6:7d:33:6c:51:00:2a:c0:54:c6:32:02:2d:66:dd:a2:e7:e3:ff:f1:0a:d0:61:ed:31:d8:bb:b4:10:cf:b2 +------BEGIN CERTIFICATE----- +-MIIDMDCCAhigAwIBAgICA+gwDQYJKoZIhvcNAQEFBQAwRzELMAkGA1UEBhMCSEsx +-FjAUBgNVBAoTDUhvbmdrb25nIFBvc3QxIDAeBgNVBAMTF0hvbmdrb25nIFBvc3Qg +-Um9vdCBDQSAxMB4XDTAzMDUxNTA1MTMxNFoXDTIzMDUxNTA0NTIyOVowRzELMAkG +-A1UEBhMCSEsxFjAUBgNVBAoTDUhvbmdrb25nIFBvc3QxIDAeBgNVBAMTF0hvbmdr +-b25nIFBvc3QgUm9vdCBDQSAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC +-AQEArP84tulmAknjorThkPlAj3n54r15/gK97iSSHSL22oVyaf7XPwnU3ZG1ApzQ +-jVrhVcNQhrkpJsLj2aDxaQMoIIBFIi1WpztUlVYiWR8o3x8gPW2iNr4joLFutbEn +-PzlTCeqrauh0ssJlXI6/fMN4hM2eFvz1Lk8gKgifd/PFHsSaUmYeSF7jEAaPIpjh +-ZY4bXSNmO7ilMlHIhqqhqZ5/dpTCpmy3QfDVyAY45tQM4vM7TG1QjMSDJ8EThFk9 +-nnV0ttgCXjqQesBCNnLsak3c78QA3xMYV18meMjWCnl3v/evt3a5pQuEF10Q6m/h +-q5URX208o1xNg1vysxmKgIsLhwIDAQABoyYwJDASBgNVHRMBAf8ECDAGAQH/AgED +-MA4GA1UdDwEB/wQEAwIBxjANBgkqhkiG9w0BAQUFAAOCAQEADkbVPK7ih9legYsC +-mEEIjEy82tvuJxuC52pF7BaLT4Wg87JwvVqWuspube5Gi27nKi6Wsxkz67SfqLI3 +-7piol7Yutmcn1KZJ/RyTZXaeQi/cImyaT/JaFTmxcdcrUehtHJjA2Sr0oYJ71clB +-oiMBdDhViw+5LmeiIAQ32pwL0xch4I+XeTRvhEgCIDMb5jREn5Fw9IBehEPCKdJs +-EhTkYY2sEJCehFC78JZvRZ+K88psT/oROhUVRsPNH4NbLUES7VBnQRM9IauUiqpO +-fMGx+6fWtScvl6tu4B3i0RwsH0Ti/L6RoZz71ilTc4afU9hDDl3WY4JxHYB0yvbi +-AmvZWg== +------END CERTIFICATE----- +- +-# Issuer: CN=SecureSign RootCA11 O=Japan Certification Services, Inc. +-# Subject: CN=SecureSign RootCA11 O=Japan Certification Services, Inc. +-# Label: "SecureSign RootCA11" +-# Serial: 1 +-# MD5 Fingerprint: b7:52:74:e2:92:b4:80:93:f2:75:e4:cc:d7:f2:ea:26 +-# SHA1 Fingerprint: 3b:c4:9f:48:f8:f3:73:a0:9c:1e:bd:f8:5b:b1:c3:65:c7:d8:11:b3 +-# SHA256 Fingerprint: bf:0f:ee:fb:9e:3a:58:1a:d5:f9:e9:db:75:89:98:57:43:d2:61:08:5c:4d:31:4f:6f:5d:72:59:aa:42:16:12 +------BEGIN CERTIFICATE----- +-MIIDbTCCAlWgAwIBAgIBATANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQGEwJKUDEr +-MCkGA1UEChMiSmFwYW4gQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcywgSW5jLjEcMBoG +-A1UEAxMTU2VjdXJlU2lnbiBSb290Q0ExMTAeFw0wOTA0MDgwNDU2NDdaFw0yOTA0 +-MDgwNDU2NDdaMFgxCzAJBgNVBAYTAkpQMSswKQYDVQQKEyJKYXBhbiBDZXJ0aWZp +-Y2F0aW9uIFNlcnZpY2VzLCBJbmMuMRwwGgYDVQQDExNTZWN1cmVTaWduIFJvb3RD +-QTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/XeqpRyQBTvLTJsz +-i1oURaTnkBbR31fSIRCkF/3frNYfp+TbfPfs37gD2pRY/V1yfIw/XwFndBWW4wI8 +-h9uuywGOwvNmxoVF9ALGOrVisq/6nL+k5tSAMJjzDbaTj6nU2DbysPyKyiyhFTOV +-MdrAG/LuYpmGYz+/3ZMqg6h2uRMft85OQoWPIucuGvKVCbIFtUROd6EgvanyTgp9 +-UK31BQ1FT0Zx/Sg+U/sE2C3XZR1KG/rPO7AxmjVuyIsG0wCR8pQIZUyxNAYAeoni +-8McDWc/V1uinMrPmmECGxc0nEovMe863ETxiYAcjPitAbpSACW22s293bzUIUPsC +-h8U+iQIDAQABo0IwQDAdBgNVHQ4EFgQUW/hNT7KlhtQ60vFjmqC+CfZXt94wDgYD +-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEB +-AKChOBZmLqdWHyGcBvod7bkixTgm2E5P7KN/ed5GIaGHd48HCJqypMWvDzKYC3xm +-KbabfSVSSUOrTC4rbnpwrxYO4wJs+0LmGJ1F2FXI6Dvd5+H0LgscNFxsWEr7jIhQ +-X5Ucv+2rIrVls4W6ng+4reV6G4pQOh29Dbx7VFALuUKvVaAYga1lme++5Jy/xIWr +-QbJUb9wlze144o4MjQlJ3WN7WmmWAiGovVJZ6X01y8hSyn+B/tlr0/cR7SXf+Of5 +-pPpyl4RTDaXQMhhRdlkUbA/r7F+AjHVDg8OFmP9Mni0N5HeDk061lgeLKBObjBmN +-QSdJQO7e5iNEOdyhIta6A/I= +------END CERTIFICATE----- +- +-# Issuer: CN=Microsec e-Szigno Root CA 2009 O=Microsec Ltd. +-# Subject: CN=Microsec e-Szigno Root CA 2009 O=Microsec Ltd. +-# Label: "Microsec e-Szigno Root CA 2009" +-# Serial: 14014712776195784473 +-# MD5 Fingerprint: f8:49:f4:03:bc:44:2d:83:be:48:69:7d:29:64:fc:b1 +-# SHA1 Fingerprint: 89:df:74:fe:5c:f4:0f:4a:80:f9:e3:37:7d:54:da:91:e1:01:31:8e +-# SHA256 Fingerprint: 3c:5f:81:fe:a5:fa:b8:2c:64:bf:a2:ea:ec:af:cd:e8:e0:77:fc:86:20:a7:ca:e5:37:16:3d:f3:6e:db:f3:78 +------BEGIN CERTIFICATE----- +-MIIECjCCAvKgAwIBAgIJAMJ+QwRORz8ZMA0GCSqGSIb3DQEBCwUAMIGCMQswCQYD +-VQQGEwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFjAUBgNVBAoMDU1pY3Jvc2VjIEx0 +-ZC4xJzAlBgNVBAMMHk1pY3Jvc2VjIGUtU3ppZ25vIFJvb3QgQ0EgMjAwOTEfMB0G +-CSqGSIb3DQEJARYQaW5mb0BlLXN6aWduby5odTAeFw0wOTA2MTYxMTMwMThaFw0y +-OTEyMzAxMTMwMThaMIGCMQswCQYDVQQGEwJIVTERMA8GA1UEBwwIQnVkYXBlc3Qx +-FjAUBgNVBAoMDU1pY3Jvc2VjIEx0ZC4xJzAlBgNVBAMMHk1pY3Jvc2VjIGUtU3pp +-Z25vIFJvb3QgQ0EgMjAwOTEfMB0GCSqGSIb3DQEJARYQaW5mb0BlLXN6aWduby5o +-dTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOn4j/NjrdqG2KfgQvvP +-kd6mJviZpWNwrZuuyjNAfW2WbqEORO7hE52UQlKavXWFdCyoDh2Tthi3jCyoz/tc +-cbna7P7ofo/kLx2yqHWH2Leh5TvPmUpG0IMZfcChEhyVbUr02MelTTMuhTlAdX4U +-fIASmFDHQWe4oIBhVKZsTh/gnQ4H6cm6M+f+wFUoLAKApxn1ntxVUwOXewdI/5n7 +-N4okxFnMUBBjjqqpGrCEGob5X7uxUG6k0QrM1XF+H6cbfPVTbiJfyyvm1HxdrtbC +-xkzlBQHZ7Vf8wSN5/PrIJIOV87VqUQHQd9bpEqH5GoP7ghu5sJf0dgYzQ0mg/wu1 +-+rUCAwEAAaOBgDB+MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0G +-A1UdDgQWBBTLD8bfQkPMPcu1SCOhGnqmKrs0aDAfBgNVHSMEGDAWgBTLD8bfQkPM +-Pcu1SCOhGnqmKrs0aDAbBgNVHREEFDASgRBpbmZvQGUtc3ppZ25vLmh1MA0GCSqG +-SIb3DQEBCwUAA4IBAQDJ0Q5eLtXMs3w+y/w9/w0olZMEyL/azXm4Q5DwpL7v8u8h +-mLzU1F0G9u5C7DBsoKqpyvGvivo/C3NqPuouQH4frlRheesuCDfXI/OMn74dseGk +-ddug4lQUsbocKaQY9hK6ohQU4zE1yED/t+AFdlfBHFny+L/k7SViXITwfn4fs775 +-tyERzAMBVnCnEJIeGzSBHq2cGsMEPO0CYdYeBvNfOofyK/FFh+U9rNHHV4S9a67c +-2Pm2G2JwCz02yULyMtd6YebS2z3PyKnJm9zbWETXbzivf3jTo60adbocwTZ8jx5t +-HMN1Rq41Bab2XD0h7lbwyYIiLXpUq3DDfSJlgnCW +------END CERTIFICATE----- +- +-# Issuer: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R3 +-# Subject: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R3 +-# Label: "GlobalSign Root CA - R3" +-# Serial: 4835703278459759426209954 +-# MD5 Fingerprint: c5:df:b8:49:ca:05:13:55:ee:2d:ba:1a:c3:3e:b0:28 +-# SHA1 Fingerprint: d6:9b:56:11:48:f0:1c:77:c5:45:78:c1:09:26:df:5b:85:69:76:ad +-# SHA256 Fingerprint: cb:b5:22:d7:b7:f1:27:ad:6a:01:13:86:5b:df:1c:d4:10:2e:7d:07:59:af:63:5a:7c:f4:72:0d:c9:63:c5:3b +------BEGIN CERTIFICATE----- +-MIIDXzCCAkegAwIBAgILBAAAAAABIVhTCKIwDQYJKoZIhvcNAQELBQAwTDEgMB4G +-A1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNp +-Z24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDkwMzE4MTAwMDAwWhcNMjkwMzE4 +-MTAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEG +-A1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjCCASIwDQYJKoZI +-hvcNAQEBBQADggEPADCCAQoCggEBAMwldpB5BngiFvXAg7aEyiie/QV2EcWtiHL8 +-RgJDx7KKnQRfJMsuS+FggkbhUqsMgUdwbN1k0ev1LKMPgj0MK66X17YUhhB5uzsT +-gHeMCOFJ0mpiLx9e+pZo34knlTifBtc+ycsmWQ1z3rDI6SYOgxXG71uL0gRgykmm +-KPZpO/bLyCiR5Z2KYVc3rHQU3HTgOu5yLy6c+9C7v/U9AOEGM+iCK65TpjoWc4zd +-QQ4gOsC0p6Hpsk+QLjJg6VfLuQSSaGjlOCZgdbKfd/+RFO+uIEn8rUAVSNECMWEZ +-XriX7613t2Saer9fwRPvm2L7DWzgVGkWqQPabumDk3F2xmmFghcCAwEAAaNCMEAw +-DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFI/wS3+o +-LkUkrk1Q+mOai97i3Ru8MA0GCSqGSIb3DQEBCwUAA4IBAQBLQNvAUKr+yAzv95ZU +-RUm7lgAJQayzE4aGKAczymvmdLm6AC2upArT9fHxD4q/c2dKg8dEe3jgr25sbwMp +-jjM5RcOO5LlXbKr8EpbsU8Yt5CRsuZRj+9xTaGdWPoO4zzUhw8lo/s7awlOqzJCK +-6fBdRoyV3XpYKBovHd7NADdBj+1EbddTKJd+82cEHhXXipa0095MJ6RMG3NzdvQX +-mcIfeg7jLQitChws/zyrVQ4PkX4268NXSb7hLi18YIvDQVETI53O9zJrlAGomecs +-Mx86OyXShkDOOyyGeMlhLxS67ttVb9+E7gUJTb0o2HLO02JQZR7rkpeDMdmztcpH +-WD9f +------END CERTIFICATE----- +- +-# Issuer: CN=Autoridad de Certificacion Firmaprofesional CIF A62634068 +-# Subject: CN=Autoridad de Certificacion Firmaprofesional CIF A62634068 +-# Label: "Autoridad de Certificacion Firmaprofesional CIF A62634068" +-# Serial: 6047274297262753887 +-# MD5 Fingerprint: 73:3a:74:7a:ec:bb:a3:96:a6:c2:e4:e2:c8:9b:c0:c3 +-# SHA1 Fingerprint: ae:c5:fb:3f:c8:e1:bf:c4:e5:4f:03:07:5a:9a:e8:00:b7:f7:b6:fa +-# SHA256 Fingerprint: 04:04:80:28:bf:1f:28:64:d4:8f:9a:d4:d8:32:94:36:6a:82:88:56:55:3f:3b:14:30:3f:90:14:7f:5d:40:ef +------BEGIN CERTIFICATE----- +-MIIGFDCCA/ygAwIBAgIIU+w77vuySF8wDQYJKoZIhvcNAQEFBQAwUTELMAkGA1UE +-BhMCRVMxQjBABgNVBAMMOUF1dG9yaWRhZCBkZSBDZXJ0aWZpY2FjaW9uIEZpcm1h +-cHJvZmVzaW9uYWwgQ0lGIEE2MjYzNDA2ODAeFw0wOTA1MjAwODM4MTVaFw0zMDEy +-MzEwODM4MTVaMFExCzAJBgNVBAYTAkVTMUIwQAYDVQQDDDlBdXRvcmlkYWQgZGUg +-Q2VydGlmaWNhY2lvbiBGaXJtYXByb2Zlc2lvbmFsIENJRiBBNjI2MzQwNjgwggIi +-MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKlmuO6vj78aI14H9M2uDDUtd9 +-thDIAl6zQyrET2qyyhxdKJp4ERppWVevtSBC5IsP5t9bpgOSL/UR5GLXMnE42QQM +-cas9UX4PB99jBVzpv5RvwSmCwLTaUbDBPLutN0pcyvFLNg4kq7/DhHf9qFD0sefG +-L9ItWY16Ck6WaVICqjaY7Pz6FIMMNx/Jkjd/14Et5cS54D40/mf0PmbR0/RAz15i +-NA9wBj4gGFrO93IbJWyTdBSTo3OxDqqHECNZXyAFGUftaI6SEspd/NYrspI8IM/h +-X68gvqB2f3bl7BqGYTM+53u0P6APjqK5am+5hyZvQWyIplD9amML9ZMWGxmPsu2b +-m8mQ9QEM3xk9Dz44I8kvjwzRAv4bVdZO0I08r0+k8/6vKtMFnXkIoctXMbScyJCy +-Z/QYFpM6/EfY0XiWMR+6KwxfXZmtY4laJCB22N/9q06mIqqdXuYnin1oKaPnirja +-EbsXLZmdEyRG98Xi2J+Of8ePdG1asuhy9azuJBCtLxTa/y2aRnFHvkLfuwHb9H/T +-KI8xWVvTyQKmtFLKbpf7Q8UIJm+K9Lv9nyiqDdVF8xM6HdjAeI9BZzwelGSuewvF +-6NkBiDkal4ZkQdU7hwxu+g/GvUgUvzlN1J5Bto+WHWOWk9mVBngxaJ43BjuAiUVh +-OSPHG0SjFeUc+JIwuwIDAQABo4HvMIHsMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYD +-VR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRlzeurNR4APn7VdMActHNHDhpkLzCBpgYD +-VR0gBIGeMIGbMIGYBgRVHSAAMIGPMC8GCCsGAQUFBwIBFiNodHRwOi8vd3d3LmZp +-cm1hcHJvZmVzaW9uYWwuY29tL2NwczBcBggrBgEFBQcCAjBQHk4AUABhAHMAZQBv +-ACAAZABlACAAbABhACAAQgBvAG4AYQBuAG8AdgBhACAANAA3ACAAQgBhAHIAYwBl +-AGwAbwBuAGEAIAAwADgAMAAxADcwDQYJKoZIhvcNAQEFBQADggIBABd9oPm03cXF +-661LJLWhAqvdpYhKsg9VSytXjDvlMd3+xDLx51tkljYyGOylMnfX40S2wBEqgLk9 +-am58m9Ot/MPWo+ZkKXzR4Tgegiv/J2Wv+xYVxC5xhOW1//qkR71kMrv2JYSiJ0L1 +-ILDCExARzRAVukKQKtJE4ZYm6zFIEv0q2skGz3QeqUvVhyj5eTSSPi5E6PaPT481 +-PyWzOdxjKpBrIF/EUhJOlywqrJ2X3kjyo2bbwtKDlaZmp54lD+kLM5FlClrD2VQS +-3a/DTg4fJl4N3LON7NWBcN7STyQF82xO9UxJZo3R/9ILJUFI/lGExkKvgATP0H5k +-SeTy36LssUzAKh3ntLFlosS88Zj0qnAHY7S42jtM+kAiMFsRpvAFDsYCA0irhpuF +-3dvd6qJ2gHN99ZwExEWN57kci57q13XRcrHedUTnQn3iV2t93Jm8PYMo6oCTjcVM +-ZcFwgbg4/EMxsvYDNEeyrPsiBsse3RdHHF9mudMaotoRsaS8I8nkvof/uZS2+F0g +-StRf571oe2XyFR7SOqkt6dhrJKyXWERHrVkY8SFlcN7ONGCoQPHzPKTDKCOM/icz +-Q0CgFzzr6juwcqajuUpLXhZI9LK8yIySxZ2frHI2vDSANGupi5LAuBft7HZT9SQB +-jLMi6Et8Vcad+qMUu2WFbm5PEn4KPJ2V +------END CERTIFICATE----- +- +-# Issuer: CN=Izenpe.com O=IZENPE S.A. +-# Subject: CN=Izenpe.com O=IZENPE S.A. +-# Label: "Izenpe.com" +-# Serial: 917563065490389241595536686991402621 +-# MD5 Fingerprint: a6:b0:cd:85:80:da:5c:50:34:a3:39:90:2f:55:67:73 +-# SHA1 Fingerprint: 2f:78:3d:25:52:18:a7:4a:65:39:71:b5:2c:a2:9c:45:15:6f:e9:19 +-# SHA256 Fingerprint: 25:30:cc:8e:98:32:15:02:ba:d9:6f:9b:1f:ba:1b:09:9e:2d:29:9e:0f:45:48:bb:91:4f:36:3b:c0:d4:53:1f +------BEGIN CERTIFICATE----- +-MIIF8TCCA9mgAwIBAgIQALC3WhZIX7/hy/WL1xnmfTANBgkqhkiG9w0BAQsFADA4 +-MQswCQYDVQQGEwJFUzEUMBIGA1UECgwLSVpFTlBFIFMuQS4xEzARBgNVBAMMCkl6 +-ZW5wZS5jb20wHhcNMDcxMjEzMTMwODI4WhcNMzcxMjEzMDgyNzI1WjA4MQswCQYD +-VQQGEwJFUzEUMBIGA1UECgwLSVpFTlBFIFMuQS4xEzARBgNVBAMMCkl6ZW5wZS5j +-b20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDJ03rKDx6sp4boFmVq +-scIbRTJxldn+EFvMr+eleQGPicPK8lVx93e+d5TzcqQsRNiekpsUOqHnJJAKClaO +-xdgmlOHZSOEtPtoKct2jmRXagaKH9HtuJneJWK3W6wyyQXpzbm3benhB6QiIEn6H +-LmYRY2xU+zydcsC8Lv/Ct90NduM61/e0aL6i9eOBbsFGb12N4E3GVFWJGjMxCrFX +-uaOKmMPsOzTFlUFpfnXCPCDFYbpRR6AgkJOhkEvzTnyFRVSa0QUmQbC1TR0zvsQD +-yCV8wXDbO/QJLVQnSKwv4cSsPsjLkkxTOTcj7NMB+eAJRE1NZMDhDVqHIrytG6P+ +-JrUV86f8hBnp7KGItERphIPzidF0BqnMC9bC3ieFUCbKF7jJeodWLBoBHmy+E60Q +-rLUk9TiRodZL2vG70t5HtfG8gfZZa88ZU+mNFctKy6lvROUbQc/hhqfK0GqfvEyN +-BjNaooXlkDWgYlwWTvDjovoDGrQscbNYLN57C9saD+veIR8GdwYDsMnvmfzAuU8L +-hij+0rnq49qlw0dpEuDb8PYZi+17cNcC1u2HGCgsBCRMd+RIihrGO5rUD8r6ddIB +-QFqNeb+Lz0vPqhbBleStTIo+F5HUsWLlguWABKQDfo2/2n+iD5dPDNMN+9fR5XJ+ +-HMh3/1uaD7euBUbl8agW7EekFwIDAQABo4H2MIHzMIGwBgNVHREEgagwgaWBD2lu +-Zm9AaXplbnBlLmNvbaSBkTCBjjFHMEUGA1UECgw+SVpFTlBFIFMuQS4gLSBDSUYg +-QTAxMzM3MjYwLVJNZXJjLlZpdG9yaWEtR2FzdGVpeiBUMTA1NSBGNjIgUzgxQzBB +-BgNVBAkMOkF2ZGEgZGVsIE1lZGl0ZXJyYW5lbyBFdG9yYmlkZWEgMTQgLSAwMTAx +-MCBWaXRvcmlhLUdhc3RlaXowDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC +-AQYwHQYDVR0OBBYEFB0cZQ6o8iV7tJHP5LGx5r1VdGwFMA0GCSqGSIb3DQEBCwUA +-A4ICAQB4pgwWSp9MiDrAyw6lFn2fuUhfGI8NYjb2zRlrrKvV9pF9rnHzP7MOeIWb +-laQnIUdCSnxIOvVFfLMMjlF4rJUT3sb9fbgakEyrkgPH7UIBzg/YsfqikuFgba56 +-awmqxinuaElnMIAkejEWOVt+8Rwu3WwJrfIxwYJOubv5vr8qhT/AQKM6WfxZSzwo +-JNu0FXWuDYi6LnPAvViH5ULy617uHjAimcs30cQhbIHsvm0m5hzkQiCeR7Csg1lw +-LDXWrzY0tM07+DKo7+N4ifuNRSzanLh+QBxh5z6ikixL8s36mLYp//Pye6kfLqCT +-VyvehQP5aTfLnnhqBbTFMXiJ7HqnheG5ezzevh55hM6fcA5ZwjUukCox2eRFekGk +-LhObNA5me0mrZJfQRsN5nXJQY6aYWwa9SG3YOYNw6DXwBdGqvOPbyALqfP2C2sJb +-UjWumDqtujWTI6cfSN01RpiyEGjkpTHCClguGYEQyVB1/OpaFs4R1+7vUIgtYf8/ +-QnMFlEPVjjxOAToZpR9GTnfQXeWBIiGH/pR9hNiTrdZoQ0iy2+tzJOeRf1SktoA+ +-naM8THLCV8Sg1Mw4J87VBp6iSNnpn86CcDaTmjvfliHjWbcM2pE38P1ZWrOZyGls +-QyYBNWNgVYkDOnXYukrZVP/u3oDYLdE41V4tC5h9Pmzb/CaIxw== +------END CERTIFICATE----- +- +-# Issuer: CN=Go Daddy Root Certificate Authority - G2 O=GoDaddy.com, Inc. +-# Subject: CN=Go Daddy Root Certificate Authority - G2 O=GoDaddy.com, Inc. +-# Label: "Go Daddy Root Certificate Authority - G2" +-# Serial: 0 +-# MD5 Fingerprint: 80:3a:bc:22:c1:e6:fb:8d:9b:3b:27:4a:32:1b:9a:01 +-# SHA1 Fingerprint: 47:be:ab:c9:22:ea:e8:0e:78:78:34:62:a7:9f:45:c2:54:fd:e6:8b +-# SHA256 Fingerprint: 45:14:0b:32:47:eb:9c:c8:c5:b4:f0:d7:b5:30:91:f7:32:92:08:9e:6e:5a:63:e2:74:9d:d3:ac:a9:19:8e:da +------BEGIN CERTIFICATE----- +-MIIDxTCCAq2gAwIBAgIBADANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx +-EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT +-EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp +-ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5MDkwMTAwMDAwMFoXDTM3MTIzMTIz +-NTk1OVowgYMxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH +-EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjExMC8GA1UE +-AxMoR28gRGFkZHkgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIw +-DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL9xYgjx+lk09xvJGKP3gElY6SKD +-E6bFIEMBO4Tx5oVJnyfq9oQbTqC023CYxzIBsQU+B07u9PpPL1kwIuerGVZr4oAH +-/PMWdYA5UXvl+TW2dE6pjYIT5LY/qQOD+qK+ihVqf94Lw7YZFAXK6sOoBJQ7Rnwy +-DfMAZiLIjWltNowRGLfTshxgtDj6AozO091GB94KPutdfMh8+7ArU6SSYmlRJQVh +-GkSBjCypQ5Yj36w6gZoOKcUcqeldHraenjAKOc7xiID7S13MMuyFYkMlNAJWJwGR +-tDtwKj9useiciAF9n9T521NtYJ2/LOdYq7hfRvzOxBsDPAnrSTFcaUaz4EcCAwEA +-AaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYE +-FDqahQcQZyi27/a9BUFuIMGU2g/eMA0GCSqGSIb3DQEBCwUAA4IBAQCZ21151fmX +-WWcDYfF+OwYxdS2hII5PZYe096acvNjpL9DbWu7PdIxztDhC2gV7+AJ1uP2lsdeu +-9tfeE8tTEH6KRtGX+rcuKxGrkLAngPnon1rpN5+r5N9ss4UXnT3ZJE95kTXWXwTr +-gIOrmgIttRD02JDHBHNA7XIloKmf7J6raBKZV8aPEjoJpL1E/QYVN8Gb5DKj7Tjo +-2GTzLH4U/ALqn83/B2gX2yKQOC16jdFU8WnjXzPKej17CuPKf1855eJ1usV2GDPO +-LPAvTK33sefOT6jEm0pUBsV/fdUID+Ic/n4XuKxe9tQWskMJDE32p2u0mYRlynqI +-4uJEvlz36hz1 +------END CERTIFICATE----- +- +-# Issuer: CN=Starfield Root Certificate Authority - G2 O=Starfield Technologies, Inc. +-# Subject: CN=Starfield Root Certificate Authority - G2 O=Starfield Technologies, Inc. +-# Label: "Starfield Root Certificate Authority - G2" +-# Serial: 0 +-# MD5 Fingerprint: d6:39:81:c6:52:7e:96:69:fc:fc:ca:66:ed:05:f2:96 +-# SHA1 Fingerprint: b5:1c:06:7c:ee:2b:0c:3d:f8:55:ab:2d:92:f4:fe:39:d4:e7:0f:0e +-# SHA256 Fingerprint: 2c:e1:cb:0b:f9:d2:f9:e1:02:99:3f:be:21:51:52:c3:b2:dd:0c:ab:de:1c:68:e5:31:9b:83:91:54:db:b7:f5 +------BEGIN CERTIFICATE----- +-MIID3TCCAsWgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBjzELMAkGA1UEBhMCVVMx +-EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoT +-HFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xMjAwBgNVBAMTKVN0YXJmaWVs +-ZCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5MDkwMTAwMDAw +-MFoXDTM3MTIzMTIzNTk1OVowgY8xCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6 +-b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxTdGFyZmllbGQgVGVj +-aG5vbG9naWVzLCBJbmMuMTIwMAYDVQQDEylTdGFyZmllbGQgUm9vdCBDZXJ0aWZp +-Y2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC +-ggEBAL3twQP89o/8ArFvW59I2Z154qK3A2FWGMNHttfKPTUuiUP3oWmb3ooa/RMg +-nLRJdzIpVv257IzdIvpy3Cdhl+72WoTsbhm5iSzchFvVdPtrX8WJpRBSiUZV9Lh1 +-HOZ/5FSuS/hVclcCGfgXcVnrHigHdMWdSL5stPSksPNkN3mSwOxGXn/hbVNMYq/N +-Hwtjuzqd+/x5AJhhdM8mgkBj87JyahkNmcrUDnXMN/uLicFZ8WJ/X7NfZTD4p7dN +-dloedl40wOiWVpmKs/B/pM293DIxfJHP4F8R+GuqSVzRmZTRouNjWwl2tVZi4Ut0 +-HZbUJtQIBFnQmA4O5t78w+wfkPECAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAO +-BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFHwMMh+n2TB/xH1oo2Kooc6rB1snMA0G +-CSqGSIb3DQEBCwUAA4IBAQARWfolTwNvlJk7mh+ChTnUdgWUXuEok21iXQnCoKjU +-sHU48TRqneSfioYmUeYs0cYtbpUgSpIB7LiKZ3sx4mcujJUDJi5DnUox9g61DLu3 +-4jd/IroAow57UvtruzvE03lRTs2Q9GcHGcg8RnoNAX3FWOdt5oUwF5okxBDgBPfg +-8n/Uqgr/Qh037ZTlZFkSIHc40zI+OIF1lnP6aI+xy84fxez6nH7PfrHxBy22/L/K +-pL/QlwVKvOoYKAKQvVR4CSFx09F9HdkWsKlhPdAKACL8x3vLCWRFCztAgfd9fDL1 +-mMpYjn0q7pBZc2T5NnReJaH1ZgUufzkVqSr7UIuOhWn0 +------END CERTIFICATE----- +- +-# Issuer: CN=Starfield Services Root Certificate Authority - G2 O=Starfield Technologies, Inc. +-# Subject: CN=Starfield Services Root Certificate Authority - G2 O=Starfield Technologies, Inc. +-# Label: "Starfield Services Root Certificate Authority - G2" +-# Serial: 0 +-# MD5 Fingerprint: 17:35:74:af:7b:61:1c:eb:f4:f9:3c:e2:ee:40:f9:a2 +-# SHA1 Fingerprint: 92:5a:8f:8d:2c:6d:04:e0:66:5f:59:6a:ff:22:d8:63:e8:25:6f:3f +-# SHA256 Fingerprint: 56:8d:69:05:a2:c8:87:08:a4:b3:02:51:90:ed:cf:ed:b1:97:4a:60:6a:13:c6:e5:29:0f:cb:2a:e6:3e:da:b5 +------BEGIN CERTIFICATE----- +-MIID7zCCAtegAwIBAgIBADANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UEBhMCVVMx +-EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoT +-HFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xOzA5BgNVBAMTMlN0YXJmaWVs +-ZCBTZXJ2aWNlcyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5 +-MDkwMTAwMDAwMFoXDTM3MTIzMTIzNTk1OVowgZgxCzAJBgNVBAYTAlVTMRAwDgYD +-VQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxTdGFy +-ZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTswOQYDVQQDEzJTdGFyZmllbGQgU2Vy +-dmljZXMgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZI +-hvcNAQEBBQADggEPADCCAQoCggEBANUMOsQq+U7i9b4Zl1+OiFOxHz/Lz58gE20p +-OsgPfTz3a3Y4Y9k2YKibXlwAgLIvWX/2h/klQ4bnaRtSmpDhcePYLQ1Ob/bISdm2 +-8xpWriu2dBTrz/sm4xq6HZYuajtYlIlHVv8loJNwU4PahHQUw2eeBGg6345AWh1K +-Ts9DkTvnVtYAcMtS7nt9rjrnvDH5RfbCYM8TWQIrgMw0R9+53pBlbQLPLJGmpufe +-hRhJfGZOozptqbXuNC66DQO4M99H67FrjSXZm86B0UVGMpZwh94CDklDhbZsc7tk +-6mFBrMnUVN+HL8cisibMn1lUaJ/8viovxFUcdUBgF4UCVTmLfwUCAwEAAaNCMEAw +-DwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJxfAN+q +-AdcwKziIorhtSpzyEZGDMA0GCSqGSIb3DQEBCwUAA4IBAQBLNqaEd2ndOxmfZyMI +-bw5hyf2E3F/YNoHN2BtBLZ9g3ccaaNnRbobhiCPPE95Dz+I0swSdHynVv/heyNXB +-ve6SbzJ08pGCL72CQnqtKrcgfU28elUSwhXqvfdqlS5sdJ/PHLTyxQGjhdByPq1z +-qwubdQxtRbeOlKyWN7Wg0I8VRw7j6IPdj/3vQQF3zCepYoUz8jcI73HPdwbeyBkd +-iEDPfUYd/x7H4c7/I9vG+o1VTqkC50cRRj70/b17KSa7qWFiNyi2LSr2EIZkyXCn +-0q23KXB56jzaYyWf/Wi3MOxw+3WKt21gZ7IeyLnp2KhvAotnDU0mV3HaIPzBSlCN +-sSi6 +------END CERTIFICATE----- +- +-# Issuer: CN=AffirmTrust Commercial O=AffirmTrust +-# Subject: CN=AffirmTrust Commercial O=AffirmTrust +-# Label: "AffirmTrust Commercial" +-# Serial: 8608355977964138876 +-# MD5 Fingerprint: 82:92:ba:5b:ef:cd:8a:6f:a6:3d:55:f9:84:f6:d6:b7 +-# SHA1 Fingerprint: f9:b5:b6:32:45:5f:9c:be:ec:57:5f:80:dc:e9:6e:2c:c7:b2:78:b7 +-# SHA256 Fingerprint: 03:76:ab:1d:54:c5:f9:80:3c:e4:b2:e2:01:a0:ee:7e:ef:7b:57:b6:36:e8:a9:3c:9b:8d:48:60:c9:6f:5f:a7 +------BEGIN CERTIFICATE----- +-MIIDTDCCAjSgAwIBAgIId3cGJyapsXwwDQYJKoZIhvcNAQELBQAwRDELMAkGA1UE +-BhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVz +-dCBDb21tZXJjaWFsMB4XDTEwMDEyOTE0MDYwNloXDTMwMTIzMTE0MDYwNlowRDEL +-MAkGA1UEBhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZp +-cm1UcnVzdCBDb21tZXJjaWFsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC +-AQEA9htPZwcroRX1BiLLHwGy43NFBkRJLLtJJRTWzsO3qyxPxkEylFf6EqdbDuKP +-Hx6GGaeqtS25Xw2Kwq+FNXkyLbscYjfysVtKPcrNcV/pQr6U6Mje+SJIZMblq8Yr +-ba0F8PrVC8+a5fBQpIs7R6UjW3p6+DM/uO+Zl+MgwdYoic+U+7lF7eNAFxHUdPAL +-MeIrJmqbTFeurCA+ukV6BfO9m2kVrn1OIGPENXY6BwLJN/3HR+7o8XYdcxXyl6S1 +-yHp52UKqK39c/s4mT6NmgTWvRLpUHhwwMmWd5jyTXlBOeuM61G7MGvv50jeuJCqr +-VwMiKA1JdX+3KNp1v47j3A55MQIDAQABo0IwQDAdBgNVHQ4EFgQUnZPGU4teyq8/ +-nx4P5ZmVvCT2lI8wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwDQYJ +-KoZIhvcNAQELBQADggEBAFis9AQOzcAN/wr91LoWXym9e2iZWEnStB03TX8nfUYG +-XUPGhi4+c7ImfU+TqbbEKpqrIZcUsd6M06uJFdhrJNTxFq7YpFzUf1GO7RgBsZNj +-vbz4YYCanrHOQnDiqX0GJX0nof5v7LMeJNrjS1UaADs1tDvZ110w/YETifLCBivt +-Z8SOyUOyXGsViQK8YvxO8rUzqrJv0wqiUOP2O+guRMLbZjipM1ZI8W0bM40NjD9g +-N53Tym1+NH4Nn3J2ixufcv1SNUFFApYvHLKac0khsUlHRUe072o0EclNmsxZt9YC +-nlpOZbWUrhvfKbAW8b8Angc6F2S1BLUjIZkKlTuXfO8= +------END CERTIFICATE----- +- +-# Issuer: CN=AffirmTrust Networking O=AffirmTrust +-# Subject: CN=AffirmTrust Networking O=AffirmTrust +-# Label: "AffirmTrust Networking" +-# Serial: 8957382827206547757 +-# MD5 Fingerprint: 42:65:ca:be:01:9a:9a:4c:a9:8c:41:49:cd:c0:d5:7f +-# SHA1 Fingerprint: 29:36:21:02:8b:20:ed:02:f5:66:c5:32:d1:d6:ed:90:9f:45:00:2f +-# SHA256 Fingerprint: 0a:81:ec:5a:92:97:77:f1:45:90:4a:f3:8d:5d:50:9f:66:b5:e2:c5:8f:cd:b5:31:05:8b:0e:17:f3:f0:b4:1b +------BEGIN CERTIFICATE----- +-MIIDTDCCAjSgAwIBAgIIfE8EORzUmS0wDQYJKoZIhvcNAQEFBQAwRDELMAkGA1UE +-BhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVz +-dCBOZXR3b3JraW5nMB4XDTEwMDEyOTE0MDgyNFoXDTMwMTIzMTE0MDgyNFowRDEL +-MAkGA1UEBhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZp +-cm1UcnVzdCBOZXR3b3JraW5nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC +-AQEAtITMMxcua5Rsa2FSoOujz3mUTOWUgJnLVWREZY9nZOIG41w3SfYvm4SEHi3y +-YJ0wTsyEheIszx6e/jarM3c1RNg1lho9Nuh6DtjVR6FqaYvZ/Ls6rnla1fTWcbua +-kCNrmreIdIcMHl+5ni36q1Mr3Lt2PpNMCAiMHqIjHNRqrSK6mQEubWXLviRmVSRL +-QESxG9fhwoXA3hA/Pe24/PHxI1Pcv2WXb9n5QHGNfb2V1M6+oF4nI979ptAmDgAp +-6zxG8D1gvz9Q0twmQVGeFDdCBKNwV6gbh+0t+nvujArjqWaJGctB+d1ENmHP4ndG +-yH329JKBNv3bNPFyfvMMFr20FQIDAQABo0IwQDAdBgNVHQ4EFgQUBx/S55zawm6i +-QLSwelAQUHTEyL0wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwDQYJ +-KoZIhvcNAQEFBQADggEBAIlXshZ6qML91tmbmzTCnLQyFE2npN/svqe++EPbkTfO +-tDIuUFUaNU52Q3Eg75N3ThVwLofDwR1t3Mu1J9QsVtFSUzpE0nPIxBsFZVpikpzu +-QY0x2+c06lkh1QF612S4ZDnNye2v7UsDSKegmQGA3GWjNq5lWUhPgkvIZfFXHeVZ +-Lgo/bNjR9eUJtGxUAArgFU2HdW23WJZa3W3SAKD0m0i+wzekujbgfIeFlxoVot4u +-olu9rxj5kFDNcFn4J2dHy8egBzp90SxdbBk6ZrV9/ZFvgrG+CJPbFEfxojfHRZ48 +-x3evZKiT3/Zpg4Jg8klCNO1aAFSFHBY2kgxc+qatv9s= +------END CERTIFICATE----- +- +-# Issuer: CN=AffirmTrust Premium O=AffirmTrust +-# Subject: CN=AffirmTrust Premium O=AffirmTrust +-# Label: "AffirmTrust Premium" +-# Serial: 7893706540734352110 +-# MD5 Fingerprint: c4:5d:0e:48:b6:ac:28:30:4e:0a:bc:f9:38:16:87:57 +-# SHA1 Fingerprint: d8:a6:33:2c:e0:03:6f:b1:85:f6:63:4f:7d:6a:06:65:26:32:28:27 +-# SHA256 Fingerprint: 70:a7:3f:7f:37:6b:60:07:42:48:90:45:34:b1:14:82:d5:bf:0e:69:8e:cc:49:8d:f5:25:77:eb:f2:e9:3b:9a +------BEGIN CERTIFICATE----- +-MIIFRjCCAy6gAwIBAgIIbYwURrGmCu4wDQYJKoZIhvcNAQEMBQAwQTELMAkGA1UE +-BhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MRwwGgYDVQQDDBNBZmZpcm1UcnVz +-dCBQcmVtaXVtMB4XDTEwMDEyOTE0MTAzNloXDTQwMTIzMTE0MTAzNlowQTELMAkG +-A1UEBhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MRwwGgYDVQQDDBNBZmZpcm1U +-cnVzdCBQcmVtaXVtMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxBLf +-qV/+Qd3d9Z+K4/as4Tx4mrzY8H96oDMq3I0gW64tb+eT2TZwamjPjlGjhVtnBKAQ +-JG9dKILBl1fYSCkTtuG+kU3fhQxTGJoeJKJPj/CihQvL9Cl/0qRY7iZNyaqoe5rZ +-+jjeRFcV5fiMyNlI4g0WJx0eyIOFJbe6qlVBzAMiSy2RjYvmia9mx+n/K+k8rNrS +-s8PhaJyJ+HoAVt70VZVs+7pk3WKL3wt3MutizCaam7uqYoNMtAZ6MMgpv+0GTZe5 +-HMQxK9VfvFMSF5yZVylmd2EhMQcuJUmdGPLu8ytxjLW6OQdJd/zvLpKQBY0tL3d7 +-70O/Nbua2Plzpyzy0FfuKE4mX4+QaAkvuPjcBukumj5Rp9EixAqnOEhss/n/fauG +-V+O61oV4d7pD6kh/9ti+I20ev9E2bFhc8e6kGVQa9QPSdubhjL08s9NIS+LI+H+S +-qHZGnEJlPqQewQcDWkYtuJfzt9WyVSHvutxMAJf7FJUnM7/oQ0dG0giZFmA7mn7S +-5u046uwBHjxIVkkJx0w3AJ6IDsBz4W9m6XJHMD4Q5QsDyZpCAGzFlH5hxIrff4Ia +-C1nEWTJ3s7xgaVY5/bQGeyzWZDbZvUjthB9+pSKPKrhC9IK31FOQeE4tGv2Bb0TX +-OwF0lkLgAOIua+rF7nKsu7/+6qqo+Nz2snmKtmcCAwEAAaNCMEAwHQYDVR0OBBYE +-FJ3AZ6YMItkm9UWrpmVSESfYRaxjMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/ +-BAQDAgEGMA0GCSqGSIb3DQEBDAUAA4ICAQCzV00QYk465KzquByvMiPIs0laUZx2 +-KI15qldGF9X1Uva3ROgIRL8YhNILgM3FEv0AVQVhh0HctSSePMTYyPtwni94loMg +-Nt58D2kTiKV1NpgIpsbfrM7jWNa3Pt668+s0QNiigfV4Py/VpfzZotReBA4Xrf5B +-8OWycvpEgjNC6C1Y91aMYj+6QrCcDFx+LmUmXFNPALJ4fqENmS2NuB2OosSw/WDQ +-MKSOyARiqcTtNd56l+0OOF6SL5Nwpamcb6d9Ex1+xghIsV5n61EIJenmJWtSKZGc +-0jlzCFfemQa0W50QBuHCAKi4HEoCChTQwUHK+4w1IX2COPKpVJEZNZOUbWo6xbLQ +-u4mGk+ibyQ86p3q4ofB4Rvr8Ny/lioTz3/4E2aFooC8k4gmVBtWVyuEklut89pMF +-u+1z6S3RdTnX5yTb2E5fQ4+e0BQ5v1VwSJlXMbSc7kqYA5YwH2AG7hsj/oFgIxpH +-YoWlzBk0gG+zrBrjn/B7SK3VAdlntqlyk+otZrWyuOQ9PLLvTIzq6we/qzWaVYa8 +-GKa1qF60g2xraUDTn9zxw2lrueFtCfTxqlB2Cnp9ehehVZZCmTEJ3WARjQUwfuaO +-RtGdFNrHF+QFlozEJLUbzxQHskD4o55BhrwE0GuWyCqANP2/7waj3VjFhT0+j/6e +-KeC2uAloGRwYQw== +------END CERTIFICATE----- +- +-# Issuer: CN=AffirmTrust Premium ECC O=AffirmTrust +-# Subject: CN=AffirmTrust Premium ECC O=AffirmTrust +-# Label: "AffirmTrust Premium ECC" +-# Serial: 8401224907861490260 +-# MD5 Fingerprint: 64:b0:09:55:cf:b1:d5:99:e2:be:13:ab:a6:5d:ea:4d +-# SHA1 Fingerprint: b8:23:6b:00:2f:1d:16:86:53:01:55:6c:11:a4:37:ca:eb:ff:c3:bb +-# SHA256 Fingerprint: bd:71:fd:f6:da:97:e4:cf:62:d1:64:7a:dd:25:81:b0:7d:79:ad:f8:39:7e:b4:ec:ba:9c:5e:84:88:82:14:23 +------BEGIN CERTIFICATE----- +-MIIB/jCCAYWgAwIBAgIIdJclisc/elQwCgYIKoZIzj0EAwMwRTELMAkGA1UEBhMC +-VVMxFDASBgNVBAoMC0FmZmlybVRydXN0MSAwHgYDVQQDDBdBZmZpcm1UcnVzdCBQ +-cmVtaXVtIEVDQzAeFw0xMDAxMjkxNDIwMjRaFw00MDEyMzExNDIwMjRaMEUxCzAJ +-BgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1UcnVzdDEgMB4GA1UEAwwXQWZmaXJt +-VHJ1c3QgUHJlbWl1bSBFQ0MwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQNMF4bFZ0D +-0KF5Nbc6PJJ6yhUczWLznCZcBz3lVPqj1swS6vQUX+iOGasvLkjmrBhDeKzQN8O9 +-ss0s5kfiGuZjuD0uL3jET9v0D6RoTFVya5UdThhClXjMNzyR4ptlKymjQjBAMB0G +-A1UdDgQWBBSaryl6wBE1NSZRMADDav5A1a7WPDAPBgNVHRMBAf8EBTADAQH/MA4G +-A1UdDwEB/wQEAwIBBjAKBggqhkjOPQQDAwNnADBkAjAXCfOHiFBar8jAQr9HX/Vs +-aobgxCd05DhT1wV/GzTjxi+zygk8N53X57hG8f2h4nECMEJZh0PUUd+60wkyWs6I +-flc9nF9Ca/UHLbXwgpP5WW+uZPpY5Yse42O+tYHNbwKMeQ== +------END CERTIFICATE----- +- +-# Issuer: CN=Certum Trusted Network CA O=Unizeto Technologies S.A. OU=Certum Certification Authority +-# Subject: CN=Certum Trusted Network CA O=Unizeto Technologies S.A. OU=Certum Certification Authority +-# Label: "Certum Trusted Network CA" +-# Serial: 279744 +-# MD5 Fingerprint: d5:e9:81:40:c5:18:69:fc:46:2c:89:75:62:0f:aa:78 +-# SHA1 Fingerprint: 07:e0:32:e0:20:b7:2c:3f:19:2f:06:28:a2:59:3a:19:a7:0f:06:9e +-# SHA256 Fingerprint: 5c:58:46:8d:55:f5:8e:49:7e:74:39:82:d2:b5:00:10:b6:d1:65:37:4a:cf:83:a7:d4:a3:2d:b7:68:c4:40:8e +------BEGIN CERTIFICATE----- +-MIIDuzCCAqOgAwIBAgIDBETAMA0GCSqGSIb3DQEBBQUAMH4xCzAJBgNVBAYTAlBM +-MSIwIAYDVQQKExlVbml6ZXRvIFRlY2hub2xvZ2llcyBTLkEuMScwJQYDVQQLEx5D +-ZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIjAgBgNVBAMTGUNlcnR1bSBU +-cnVzdGVkIE5ldHdvcmsgQ0EwHhcNMDgxMDIyMTIwNzM3WhcNMjkxMjMxMTIwNzM3 +-WjB+MQswCQYDVQQGEwJQTDEiMCAGA1UEChMZVW5pemV0byBUZWNobm9sb2dpZXMg +-Uy5BLjEnMCUGA1UECxMeQ2VydHVtIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSIw +-IAYDVQQDExlDZXJ0dW0gVHJ1c3RlZCBOZXR3b3JrIENBMIIBIjANBgkqhkiG9w0B +-AQEFAAOCAQ8AMIIBCgKCAQEA4/t9o3K6wvDJFIf1awFO4W5AB7ptJ11/91sts1rH +-UV+rpDKmYYe2bg+G0jACl/jXaVehGDldamR5xgFZrDwxSjh80gTSSyjoIF87B6LM +-TXPb865Px1bVWqeWifrzq2jUI4ZZJ88JJ7ysbnKDHDBy3+Ci6dLhdHUZvSqeexVU +-BBvXQzmtVSjF4hq79MDkrjhJM8x2hZ85RdKknvISjFH4fOQtf/WsX+sWn7Et0brM +-kUJ3TCXJkDhv2/DM+44el1k+1WBO5gUo7Ul5E0u6SNsv+XLTOcr+H9g0cvW0QM8x +-AcPs3hEtF10fuFDRXhmnad4HMyjKUJX5p1TLVIZQRan5SQIDAQABo0IwQDAPBgNV +-HRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIds3LB/8k9sXN7buQvOKEN0Z19zAOBgNV +-HQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEFBQADggEBAKaorSLOAT2mo/9i0Eidi15y +-sHhE49wcrwn9I0j6vSrEuVUEtRCjjSfeC4Jj0O7eDDd5QVsisrCaQVymcODU0HfL +-I9MA4GxWL+FpDQ3Zqr8hgVDZBqWo/5U30Kr+4rP1mS1FhIrlQgnXdAIv94nYmem8 +-J9RHjboNRhx3zxSkHLmkMcScKHQDNP8zGSal6Q10tz6XxnboJ5ajZt3hrvJBW8qY +-VoNzcOSGGtIxQbovvi0TWnZvTuhOgQ4/WwMioBK+ZlgRSssDxLQqKi2WF+A5VLxI +-03YnnZotBqbJ7DnSq9ufmgsnAjUpsUCV5/nonFWIGUbWtzT1fs45mtk48VH3Tyw= +------END CERTIFICATE----- +- +-# Issuer: CN=TWCA Root Certification Authority O=TAIWAN-CA OU=Root CA +-# Subject: CN=TWCA Root Certification Authority O=TAIWAN-CA OU=Root CA +-# Label: "TWCA Root Certification Authority" +-# Serial: 1 +-# MD5 Fingerprint: aa:08:8f:f6:f9:7b:b7:f2:b1:a7:1e:9b:ea:ea:bd:79 +-# SHA1 Fingerprint: cf:9e:87:6d:d3:eb:fc:42:26:97:a3:b5:a3:7a:a0:76:a9:06:23:48 +-# SHA256 Fingerprint: bf:d8:8f:e1:10:1c:41:ae:3e:80:1b:f8:be:56:35:0e:e9:ba:d1:a6:b9:bd:51:5e:dc:5c:6d:5b:87:11:ac:44 +------BEGIN CERTIFICATE----- +-MIIDezCCAmOgAwIBAgIBATANBgkqhkiG9w0BAQUFADBfMQswCQYDVQQGEwJUVzES +-MBAGA1UECgwJVEFJV0FOLUNBMRAwDgYDVQQLDAdSb290IENBMSowKAYDVQQDDCFU +-V0NBIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDgwODI4MDcyNDMz +-WhcNMzAxMjMxMTU1OTU5WjBfMQswCQYDVQQGEwJUVzESMBAGA1UECgwJVEFJV0FO +-LUNBMRAwDgYDVQQLDAdSb290IENBMSowKAYDVQQDDCFUV0NBIFJvb3QgQ2VydGlm +-aWNhdGlvbiBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB +-AQCwfnK4pAOU5qfeCTiRShFAh6d8WWQUe7UREN3+v9XAu1bihSX0NXIP+FPQQeFE +-AcK0HMMxQhZHhTMidrIKbw/lJVBPhYa+v5guEGcevhEFhgWQxFnQfHgQsIBct+HH +-K3XLfJ+utdGdIzdjp9xCoi2SBBtQwXu4PhvJVgSLL1KbralW6cH/ralYhzC2gfeX +-RfwZVzsrb+RH9JlF/h3x+JejiB03HFyP4HYlmlD4oFT/RJB2I9IyxsOrBr/8+7/z +-rX2SYgJbKdM1o5OaQ2RgXbL6Mv87BK9NQGr5x+PvI/1ry+UPizgN7gr8/g+YnzAx +-3WxSZfmLgb4i4RxYA7qRG4kHAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV +-HRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqOFsmjd6LWvJPelSDGRjjCDWmujANBgkq +-hkiG9w0BAQUFAAOCAQEAPNV3PdrfibqHDAhUaiBQkr6wQT25JmSDCi/oQMCXKCeC +-MErJk/9q56YAf4lCmtYR5VPOL8zy2gXE/uJQxDqGfczafhAJO5I1KlOy/usrBdls +-XebQ79NqZp4VKIV66IIArB6nCWlWQtNoURi+VJq/REG6Sb4gumlc7rh3zc5sH62D +-lhh9DrUUOYTxKOkto557HnpyWoOzeW/vtPzQCqVYT0bf+215WfKEIlKuD8z7fDvn +-aspHYcN6+NOSBB+4IIThNlQWx0DeO4pz3N/GCUzf7Nr/1FNCocnyYh0igzyXxfkZ +-YiesZSLX0zzG5Y6yU8xJzrww/nsOM5D77dIUkR8Hrw== +------END CERTIFICATE----- +- +-# Issuer: O=SECOM Trust Systems CO.,LTD. OU=Security Communication RootCA2 +-# Subject: O=SECOM Trust Systems CO.,LTD. OU=Security Communication RootCA2 +-# Label: "Security Communication RootCA2" +-# Serial: 0 +-# MD5 Fingerprint: 6c:39:7d:a4:0e:55:59:b2:3f:d6:41:b1:12:50:de:43 +-# SHA1 Fingerprint: 5f:3b:8c:f2:f8:10:b3:7d:78:b4:ce:ec:19:19:c3:73:34:b9:c7:74 +-# SHA256 Fingerprint: 51:3b:2c:ec:b8:10:d4:cd:e5:dd:85:39:1a:df:c6:c2:dd:60:d8:7b:b7:36:d2:b5:21:48:4a:a4:7a:0e:be:f6 +------BEGIN CERTIFICATE----- +-MIIDdzCCAl+gAwIBAgIBADANBgkqhkiG9w0BAQsFADBdMQswCQYDVQQGEwJKUDEl +-MCMGA1UEChMcU0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4sTFRELjEnMCUGA1UECxMe +-U2VjdXJpdHkgQ29tbXVuaWNhdGlvbiBSb290Q0EyMB4XDTA5MDUyOTA1MDAzOVoX +-DTI5MDUyOTA1MDAzOVowXTELMAkGA1UEBhMCSlAxJTAjBgNVBAoTHFNFQ09NIFRy +-dXN0IFN5c3RlbXMgQ08uLExURC4xJzAlBgNVBAsTHlNlY3VyaXR5IENvbW11bmlj +-YXRpb24gUm9vdENBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANAV +-OVKxUrO6xVmCxF1SrjpDZYBLx/KWvNs2l9amZIyoXvDjChz335c9S672XewhtUGr +-zbl+dp+++T42NKA7wfYxEUV0kz1XgMX5iZnK5atq1LXaQZAQwdbWQonCv/Q4EpVM +-VAX3NuRFg3sUZdbcDE3R3n4MqzvEFb46VqZab3ZpUql6ucjrappdUtAtCms1FgkQ +-hNBqyjoGADdH5H5XTz+L62e4iKrFvlNVspHEfbmwhRkGeC7bYRr6hfVKkaHnFtWO +-ojnflLhwHyg/i/xAXmODPIMqGplrz95Zajv8bxbXH/1KEOtOghY6rCcMU/Gt1SSw +-awNQwS08Ft1ENCcadfsCAwEAAaNCMEAwHQYDVR0OBBYEFAqFqXdlBZh8QIH4D5cs +-OPEK7DzPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3 +-DQEBCwUAA4IBAQBMOqNErLlFsceTfsgLCkLfZOoc7llsCLqJX2rKSpWeeo8HxdpF +-coJxDjrSzG+ntKEju/Ykn8sX/oymzsLS28yN/HH8AynBbF0zX2S2ZTuJbxh2ePXc +-okgfGT+Ok+vx+hfuzU7jBBJV1uXk3fs+BXziHV7Gp7yXT2g69ekuCkO2r1dcYmh8 +-t/2jioSgrGK+KwmHNPBqAbubKVY8/gA3zyNs8U6qtnRGEmyR7jTV7JqR50S+kDFy +-1UkC9gLl9B/rfNmWVan/7Ir5mUf/NVoCqgTLiluHcSmRvaS0eg29mvVXIwAHIRc/ +-SjnRBUkLp7Y3gaVdjKozXoEofKd9J+sAro03 +------END CERTIFICATE----- +- +-# Issuer: CN=EC-ACC O=Agencia Catalana de Certificacio (NIF Q-0801176-I) OU=Serveis Publics de Certificacio/Vegeu https://www.catcert.net/verarrel (c)03/Jerarquia Entitats de Certificacio Catalanes +-# Subject: CN=EC-ACC O=Agencia Catalana de Certificacio (NIF Q-0801176-I) OU=Serveis Publics de Certificacio/Vegeu https://www.catcert.net/verarrel (c)03/Jerarquia Entitats de Certificacio Catalanes +-# Label: "EC-ACC" +-# Serial: -23701579247955709139626555126524820479 +-# MD5 Fingerprint: eb:f5:9d:29:0d:61:f9:42:1f:7c:c2:ba:6d:e3:15:09 +-# SHA1 Fingerprint: 28:90:3a:63:5b:52:80:fa:e6:77:4c:0b:6d:a7:d6:ba:a6:4a:f2:e8 +-# SHA256 Fingerprint: 88:49:7f:01:60:2f:31:54:24:6a:e2:8c:4d:5a:ef:10:f1:d8:7e:bb:76:62:6f:4a:e0:b7:f9:5b:a7:96:87:99 +------BEGIN CERTIFICATE----- +-MIIFVjCCBD6gAwIBAgIQ7is969Qh3hSoYqwE893EATANBgkqhkiG9w0BAQUFADCB +-8zELMAkGA1UEBhMCRVMxOzA5BgNVBAoTMkFnZW5jaWEgQ2F0YWxhbmEgZGUgQ2Vy +-dGlmaWNhY2lvIChOSUYgUS0wODAxMTc2LUkpMSgwJgYDVQQLEx9TZXJ2ZWlzIFB1 +-YmxpY3MgZGUgQ2VydGlmaWNhY2lvMTUwMwYDVQQLEyxWZWdldSBodHRwczovL3d3 +-dy5jYXRjZXJ0Lm5ldC92ZXJhcnJlbCAoYykwMzE1MDMGA1UECxMsSmVyYXJxdWlh +-IEVudGl0YXRzIGRlIENlcnRpZmljYWNpbyBDYXRhbGFuZXMxDzANBgNVBAMTBkVD +-LUFDQzAeFw0wMzAxMDcyMzAwMDBaFw0zMTAxMDcyMjU5NTlaMIHzMQswCQYDVQQG +-EwJFUzE7MDkGA1UEChMyQWdlbmNpYSBDYXRhbGFuYSBkZSBDZXJ0aWZpY2FjaW8g +-KE5JRiBRLTA4MDExNzYtSSkxKDAmBgNVBAsTH1NlcnZlaXMgUHVibGljcyBkZSBD +-ZXJ0aWZpY2FjaW8xNTAzBgNVBAsTLFZlZ2V1IGh0dHBzOi8vd3d3LmNhdGNlcnQu +-bmV0L3ZlcmFycmVsIChjKTAzMTUwMwYDVQQLEyxKZXJhcnF1aWEgRW50aXRhdHMg +-ZGUgQ2VydGlmaWNhY2lvIENhdGFsYW5lczEPMA0GA1UEAxMGRUMtQUNDMIIBIjAN +-BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyLHT+KXQpWIR4NA9h0X84NzJB5R +-85iKw5K4/0CQBXCHYMkAqbWUZRkiFRfCQ2xmRJoNBD45b6VLeqpjt4pEndljkYRm +-4CgPukLjbo73FCeTae6RDqNfDrHrZqJyTxIThmV6PttPB/SnCWDaOkKZx7J/sxaV +-HMf5NLWUhdWZXqBIoH7nF2W4onW4HvPlQn2v7fOKSGRdghST2MDk/7NQcvJ29rNd +-QlB50JQ+awwAvthrDk4q7D7SzIKiGGUzE3eeml0aE9jD2z3Il3rucO2n5nzbcc8t +-lGLfbdb1OL4/pYUKGbio2Al1QnDE6u/LDsg0qBIimAy4E5S2S+zw0JDnJwIDAQAB +-o4HjMIHgMB0GA1UdEQQWMBSBEmVjX2FjY0BjYXRjZXJ0Lm5ldDAPBgNVHRMBAf8E +-BTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUoMOLRKo3pUW/l4Ba0fF4 +-opvpXY0wfwYDVR0gBHgwdjB0BgsrBgEEAfV4AQMBCjBlMCwGCCsGAQUFBwIBFiBo +-dHRwczovL3d3dy5jYXRjZXJ0Lm5ldC92ZXJhcnJlbDA1BggrBgEFBQcCAjApGidW +-ZWdldSBodHRwczovL3d3dy5jYXRjZXJ0Lm5ldC92ZXJhcnJlbCAwDQYJKoZIhvcN +-AQEFBQADggEBAKBIW4IB9k1IuDlVNZyAelOZ1Vr/sXE7zDkJlF7W2u++AVtd0x7Y +-/X1PzaBB4DSTv8vihpw3kpBWHNzrKQXlxJ7HNd+KDM3FIUPpqojlNcAZQmNaAl6k +-SBg6hW/cnbw/nZzBh7h6YQjpdwt/cKt63dmXLGQehb+8dJahw3oS7AwaboMMPOhy +-Rp/7SNVel+axofjk70YllJyJ22k4vuxcDlbHZVHlUIiIv0LVKz3l+bqeLrPK9HOS +-Agu+TGbrIP65y7WZf+a2E/rKS03Z7lNGBjvGTq2TWoF+bCpLagVFjPIhpDGQh2xl +-nJ2lYJU6Un/10asIbvPuW/mIPX64b24D5EI= +------END CERTIFICATE----- +- +-# Issuer: CN=Hellenic Academic and Research Institutions RootCA 2011 O=Hellenic Academic and Research Institutions Cert. Authority +-# Subject: CN=Hellenic Academic and Research Institutions RootCA 2011 O=Hellenic Academic and Research Institutions Cert. Authority +-# Label: "Hellenic Academic and Research Institutions RootCA 2011" +-# Serial: 0 +-# MD5 Fingerprint: 73:9f:4c:4b:73:5b:79:e9:fa:ba:1c:ef:6e:cb:d5:c9 +-# SHA1 Fingerprint: fe:45:65:9b:79:03:5b:98:a1:61:b5:51:2e:ac:da:58:09:48:22:4d +-# SHA256 Fingerprint: bc:10:4f:15:a4:8b:e7:09:dc:a5:42:a7:e1:d4:b9:df:6f:05:45:27:e8:02:ea:a9:2d:59:54:44:25:8a:fe:71 +------BEGIN CERTIFICATE----- +-MIIEMTCCAxmgAwIBAgIBADANBgkqhkiG9w0BAQUFADCBlTELMAkGA1UEBhMCR1Ix +-RDBCBgNVBAoTO0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1 +-dGlvbnMgQ2VydC4gQXV0aG9yaXR5MUAwPgYDVQQDEzdIZWxsZW5pYyBBY2FkZW1p +-YyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25zIFJvb3RDQSAyMDExMB4XDTExMTIw +-NjEzNDk1MloXDTMxMTIwMTEzNDk1MlowgZUxCzAJBgNVBAYTAkdSMUQwQgYDVQQK +-EztIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25zIENl +-cnQuIEF1dGhvcml0eTFAMD4GA1UEAxM3SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl +-c2VhcmNoIEluc3RpdHV0aW9ucyBSb290Q0EgMjAxMTCCASIwDQYJKoZIhvcNAQEB +-BQADggEPADCCAQoCggEBAKlTAOMupvaO+mDYLZU++CwqVE7NuYRhlFhPjz2L5EPz +-dYmNUeTDN9KKiE15HrcS3UN4SoqS5tdI1Q+kOilENbgH9mgdVc04UfCMJDGFr4PJ +-fel3r+0ae50X+bOdOFAPplp5kYCvN66m0zH7tSYJnTxa71HFK9+WXesyHgLacEns +-bgzImjeN9/E2YEsmLIKe0HjzDQ9jpFEw4fkrJxIH2Oq9GGKYsFk3fb7u8yBRQlqD +-75O6aRXxYp2fmTmCobd0LovUxQt7L/DICto9eQqakxylKHJzkUOap9FNhYS5qXSP +-FEDH3N6sQWRstBmbAmNtJGSPRLIl6s5ddAxjMlyNh+UCAwEAAaOBiTCBhjAPBgNV +-HRMBAf8EBTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUppFC/RNhSiOeCKQp +-5dgTBCPuQSUwRwYDVR0eBEAwPqA8MAWCAy5ncjAFggMuZXUwBoIELmVkdTAGggQu +-b3JnMAWBAy5ncjAFgQMuZXUwBoEELmVkdTAGgQQub3JnMA0GCSqGSIb3DQEBBQUA +-A4IBAQAf73lB4XtuP7KMhjdCSk4cNx6NZrokgclPEg8hwAOXhiVtXdMiKahsog2p +-6z0GW5k6x8zDmjR/qw7IThzh+uTczQ2+vyT+bOdrwg3IBp5OjWEopmr95fZi6hg8 +-TqBTnbI6nOulnJEWtk2C4AwFSKls9cz4y51JtPACpf1wA+2KIaWuE4ZJwzNzvoc7 +-dIsXRSZMFpGD/md9zU1jZ/rzAxKWeAaNsWftjj++n08C9bMJL/NMh98qy5V8Acys +-Nnq/onN694/BtZqhFLKPM58N7yLcZnuEvUUXBj08yrl3NI/K6s8/MT7jiOOASSXI +-l7WdmplNsDz4SgCbZN2fOUvRJ9e4 +------END CERTIFICATE----- +- +-# Issuer: CN=Actalis Authentication Root CA O=Actalis S.p.A./03358520967 +-# Subject: CN=Actalis Authentication Root CA O=Actalis S.p.A./03358520967 +-# Label: "Actalis Authentication Root CA" +-# Serial: 6271844772424770508 +-# MD5 Fingerprint: 69:c1:0d:4f:07:a3:1b:c3:fe:56:3d:04:bc:11:f6:a6 +-# SHA1 Fingerprint: f3:73:b3:87:06:5a:28:84:8a:f2:f3:4a:ce:19:2b:dd:c7:8e:9c:ac +-# SHA256 Fingerprint: 55:92:60:84:ec:96:3a:64:b9:6e:2a:be:01:ce:0b:a8:6a:64:fb:fe:bc:c7:aa:b5:af:c1:55:b3:7f:d7:60:66 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ 0b:7b:72:87:c0:60:a6:49:4c:88:58:e6:1d:88:f7:14:64:48: ++ a6:d8:58:0a:0e:4f:13:35:df:35:1d:d4:ed:06:31:c8:81:3e: ++ 6a:d5:dd:3b:1a:32:ee:90:3d:11:d2:2e:f4:8e:c3:63:2e:23: ++ 66:b0:67:be:6f:b6:c0:13:39:60:aa:a2:34:25:93:75:52:de: ++ a7:9d:ad:0e:87:89:52:71:6a:16:3c:19:1d:83:f8:9a:29:65: ++ be:f4:3f:9a:d9:f0:f3:5a:87:21:71:80:4d:cb:e0:38:9b:3f: ++ bb:fa:e0:30:4d:cf:86:d3:65:10:19:18:d1:97:02:b1:2b:72: ++ 42:68:ac:a0:bd:4e:5a:da:18:bf:6b:98:81:d0:fd:9a:be:5e: ++ 15:48:cd:11:15:b9:c0:29:5c:b4:e8:88:f7:3e:36:ae:b7:62: ++ fd:1e:62:de:70:78:10:1c:48:5b:da:bc:a4:38:ba:67:ed:55: ++ 3e:5e:57:df:d4:03:40:4c:81:a4:d2:4f:63:a7:09:42:09:14: ++ fc:00:a9:c2:80:73:4f:2e:c0:40:d9:11:7b:48:ea:7a:02:c0: ++ d3:eb:28:01:26:58:74:c1:c0:73:22:6d:93:95:fd:39:7d:bb: ++ 2a:e3:f6:82:e3:2c:97:5f:4e:1f:91:94:fa:fe:2c:a3:d8:76: ++ 1a:b8:4d:b2:38:4f:9b:fa:1d:48:60:79:26:e2:f3:fd:a9:d0: ++ 9a:e8:70:8f:49:7a:d6:e5:bd:0a:0e:db:2d:f3:8d:bf:eb:e3: ++ a4:7d:cb:c7:95:71:e8:da:a3:7c:c5:c2:f8:74:92:04:1b:86: ++ ac:a4:22:53:40:b6:ac:fe:4c:76:cf:fb:94:32:c0:35:9f:76: ++ 3f:6e:e5:90:6e:a0:a6:26:a2:b8:2c:be:d1:2b:85:fd:a7:68: ++ c8:ba:01:2b:b1:6c:74:1d:b8:73:95:e7:ee:b7:c7:25:f0:00: ++ 4c:00:b2:7e:b6:0b:8b:1c:f3:c0:50:9e:25:b9:e0:08:de:36: ++ 66:ff:37:a5:d1:bb:54:64:2c:c9:27:b5:4b:92:7e:65:ff:d3: ++ 2d:e1:b9:4e:bc:7f:a4:41:21:90:41:77:a6:39:1f:ea:9e:e3: ++ 9f:d0:66:6f:05:ec:aa:76:7e:bf:6b:16:a0:eb:b5:c7:fc:92: ++ 54:2f:2b:11:27:25:37:78:4c:51:6a:b0:f3:cc:58:5d:14:f1: ++ 6a:48:15:ff:c2:07:b6:b1:8d:0f:8e:5c:50:46:b3:3d:bf:01: ++ 98:4f:b2:59:54:47:3e:34:7b:78:6d:56:93:2e:73:ea:66:28: ++ 78:cd:1d:14:bf:a0:8f:2f:2e:b8:2e:8e:f2:14:8a:cc:e9:b5: ++ 7c:fb:6c:9d:0c:a5:e1:96 + -----BEGIN CERTIFICATE----- + MIIFuzCCA6OgAwIBAgIIVwoRl0LE48wwDQYJKoZIhvcNAQELBQAwazELMAkGA1UE + BhMCSVQxDjAMBgNVBAcMBU1pbGFuMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8w +@@ -1499,13 +128,690 @@ LysRJyU3eExRarDzzFhdFPFqSBX/wge2sY0PjlxQRrM9vwGYT7JZVEc+NHt4bVaT + LnPqZih4zR0Uv6CPLy64Lo7yFIrM6bV8+2ydDKXhlg== + -----END CERTIFICATE----- + +-# Issuer: CN=Buypass Class 2 Root CA O=Buypass AS-983163327 +-# Subject: CN=Buypass Class 2 Root CA O=Buypass AS-983163327 +-# Label: "Buypass Class 2 Root CA" +-# Serial: 2 +-# MD5 Fingerprint: 46:a7:d2:fe:45:fb:64:5a:a8:59:90:9b:78:44:9b:29 +-# SHA1 Fingerprint: 49:0a:75:74:de:87:0a:47:fe:58:ee:f6:c7:6b:eb:c6:0b:12:40:99 +-# SHA256 Fingerprint: 9a:11:40:25:19:7c:5b:b9:5d:94:e6:3d:55:cd:43:79:08:47:b6:46:b2:3c:df:11:ad:a4:a0:0e:ff:15:fb:48 ++# 18ce6cfe7bf14e60b2e347b8dfe868cb31d02ebb3ada271569f50343b46db3a4 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 06:6c:9f:d5:74:97:36:66:3f:3b:0b:9a:d9:e8:9e:76:03:f2:4a ++ Signature Algorithm: ecdsa-with-SHA256 ++ Issuer: C = US, O = Amazon, CN = Amazon Root CA 3 ++ Validity ++ Not Before: May 26 00:00:00 2015 GMT ++ Not After : May 26 00:00:00 2040 GMT ++ Subject: C = US, O = Amazon, CN = Amazon Root CA 3 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (256 bit) ++ pub: ++ 04:29:97:a7:c6:41:7f:c0:0d:9b:e8:01:1b:56:c6: ++ f2:52:a5:ba:2d:b2:12:e8:d2:2e:d7:fa:c9:c5:d8: ++ aa:6d:1f:73:81:3b:3b:98:6b:39:7c:33:a5:c5:4e: ++ 86:8e:80:17:68:62:45:57:7d:44:58:1d:b3:37:e5: ++ 67:08:eb:66:de ++ ASN1 OID: prime256v1 ++ NIST CURVE: P-256 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ AB:B6:DB:D7:06:9E:37:AC:30:86:07:91:70:C7:9C:C4:19:B1:78:C0 ++ Signature Algorithm: ecdsa-with-SHA256 ++ 30:46:02:21:00:e0:85:92:a3:17:b7:8d:f9:2b:06:a5:93:ac: ++ 1a:98:68:61:72:fa:e1:a1:d0:fb:1c:78:60:a6:43:99:c5:b8: ++ c4:02:21:00:9c:02:ef:f1:94:9c:b3:96:f9:eb:c6:2a:f8:b6: ++ 2c:fe:3a:90:14:16:d7:8c:63:24:48:1c:df:30:7d:d5:68:3b ++-----BEGIN CERTIFICATE----- ++MIIBtjCCAVugAwIBAgITBmyf1XSXNmY/Owua2eiedgPySjAKBggqhkjOPQQDAjA5 ++MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24g ++Um9vdCBDQSAzMB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkG ++A1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJvb3Qg ++Q0EgMzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABCmXp8ZBf8ANm+gBG1bG8lKl ++ui2yEujSLtf6ycXYqm0fc4E7O5hrOXwzpcVOho6AF2hiRVd9RFgdszflZwjrZt6j ++QjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSr ++ttvXBp43rDCGB5Fwx5zEGbF4wDAKBggqhkjOPQQDAgNJADBGAiEA4IWSoxe3jfkr ++BqWTrBqYaGFy+uGh0PsceGCmQ5nFuMQCIQCcAu/xlJyzlvnrxir4tiz+OpAUFteM ++YyRIHN8wfdVoOw== ++-----END CERTIFICATE----- ++ ++# 1ba5b2aa8c65401a82960118f80bec4f62304d83cec4713a19c39c011ea46db4 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 06:6c:9f:d2:96:35:86:9f:0a:0f:e5:86:78:f8:5b:26:bb:8a:37 ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C = US, O = Amazon, CN = Amazon Root CA 2 ++ Validity ++ Not Before: May 26 00:00:00 2015 GMT ++ Not After : May 26 00:00:00 2040 GMT ++ Subject: C = US, O = Amazon, CN = Amazon Root CA 2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:ad:96:9f:2d:9c:4a:4c:4a:81:79:51:99:ec:8a: ++ cb:6b:60:51:13:bc:4d:6d:06:fc:b0:08:8d:dd:19: ++ 10:6a:c7:26:0c:35:d8:c0:6f:20:84:e9:94:b1:9b: ++ 85:03:c3:5b:db:4a:e8:c8:f8:90:76:d9:5b:4f:e3: ++ 4c:e8:06:36:4d:cc:9a:ac:3d:0c:90:2b:92:d4:06: ++ 19:60:ac:37:44:79:85:81:82:ad:5a:37:e0:0d:cc: ++ 9d:a6:4c:52:76:ea:43:9d:b7:04:d1:50:f6:55:e0: ++ d5:d2:a6:49:85:e9:37:e9:ca:7e:ae:5c:95:4d:48: ++ 9a:3f:ae:20:5a:6d:88:95:d9:34:b8:52:1a:43:90: ++ b0:bf:6c:05:b9:b6:78:b7:ea:d0:e4:3a:3c:12:53: ++ 62:ff:4a:f2:7b:be:35:05:a9:12:34:e3:f3:64:74: ++ 62:2c:3d:00:49:5a:28:fe:32:44:bb:87:dd:65:27: ++ 02:71:3b:da:4a:f7:1f:da:cd:f7:21:55:90:4f:0f: ++ ec:ae:82:e1:9f:6b:d9:45:d3:bb:f0:5f:87:ed:3c: ++ 2c:39:86:da:3f:de:ec:72:55:eb:79:a3:ad:db:dd: ++ 7c:b0:ba:1c:ce:fc:de:4f:35:76:cf:0f:f8:78:1f: ++ 6a:36:51:46:27:61:5b:e9:9e:cf:f0:a2:55:7d:7c: ++ 25:8a:6f:2f:b4:c5:cf:84:2e:2b:fd:0d:51:10:6c: ++ fb:5f:1b:bc:1b:7e:c5:ae:3b:98:01:31:92:ff:0b: ++ 57:f4:9a:b2:b9:57:e9:ab:ef:0d:76:d1:f0:ee:f4: ++ ce:86:a7:e0:6e:e9:b4:69:a1:df:69:f6:33:c6:69: ++ 2e:97:13:9e:a5:87:b0:57:10:81:37:c9:53:b3:bb: ++ 7f:f6:92:d1:9c:d0:18:f4:92:6e:da:83:4f:a6:63: ++ 99:4c:a5:fb:5e:ef:21:64:7a:20:5f:6c:64:85:15: ++ cb:37:e9:62:0c:0b:2a:16:dc:01:2e:32:da:3e:4b: ++ f5:9e:3a:f6:17:40:94:ef:9e:91:08:86:fa:be:63: ++ a8:5a:33:ec:cb:74:43:95:f9:6c:69:52:36:c7:29: ++ 6f:fc:55:03:5c:1f:fb:9f:bd:47:eb:e7:49:47:95: ++ 0b:4e:89:22:09:49:e0:f5:61:1e:f1:bf:2e:8a:72: ++ 6e:80:59:ff:57:3a:f9:75:32:a3:4e:5f:ec:ed:28: ++ 62:d9:4d:73:f2:cc:81:17:60:ed:cd:eb:dc:db:a7: ++ ca:c5:7e:02:bd:f2:54:08:54:fd:b4:2d:09:2c:17: ++ 54:4a:98:d1:54:e1:51:67:08:d2:ed:6e:7e:6f:3f: ++ d2:2d:81:59:29:66:cb:90:39:95:11:1e:74:27:fe: ++ dd:eb:af ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ B0:0C:F0:4C:30:F4:05:58:02:48:FD:33:E5:52:AF:4B:84:E3:66:52 ++ Signature Algorithm: sha384WithRSAEncryption ++ aa:a8:80:8f:0e:78:a3:e0:a2:d4:cd:e6:f5:98:7a:3b:ea:00: ++ 03:b0:97:0e:93:bc:5a:a8:f6:2c:8c:72:87:a9:b1:fc:7f:73: ++ fd:63:71:78:a5:87:59:cf:30:e1:0d:10:b2:13:5a:6d:82:f5: ++ 6a:e6:80:9f:a0:05:0b:68:e4:47:6b:c7:6a:df:b6:fd:77:32: ++ 72:e5:18:fa:09:f4:a0:93:2c:5d:d2:8c:75:85:76:65:90:0c: ++ 03:79:b7:31:23:63:ad:78:83:09:86:68:84:ca:ff:f9:cf:26: ++ 9a:92:79:e7:cd:4b:c5:e7:61:a7:17:cb:f3:a9:12:93:93:6b: ++ a7:e8:2f:53:92:c4:60:58:b0:cc:02:51:18:5b:85:8d:62:59: ++ 63:b6:ad:b4:de:9a:fb:26:f7:00:27:c0:5d:55:37:74:99:c9: ++ 50:7f:e3:59:2e:44:e3:2c:25:ee:ec:4c:32:77:b4:9f:1a:e9: ++ 4b:5d:20:c5:da:fd:1c:87:16:c6:43:e8:d4:bb:26:9a:45:70: ++ 5e:a9:0b:37:53:e2:46:7b:27:fd:e0:46:f2:89:b7:cc:42:b6: ++ cb:28:26:6e:d9:a5:c9:3a:c8:41:13:60:f7:50:8c:15:ae:b2: ++ 6d:1a:15:1a:57:78:e6:92:2a:d9:65:90:82:3f:6c:02:af:ae: ++ 12:3a:27:96:36:04:d7:1d:a2:80:63:a9:9b:f1:e5:ba:b4:7c: ++ 14:b0:4e:c9:b1:1f:74:5f:38:f6:51:ea:9b:fa:2c:a2:11:d4: ++ a9:2d:27:1a:45:b1:af:b2:4e:71:0d:c0:58:46:d6:69:06:cb: ++ 53:cb:b3:fe:6b:41:cd:41:7e:7d:4c:0f:7c:72:79:7a:59:cd: ++ 5e:4a:0e:ac:9b:a9:98:73:79:7c:b4:f4:cc:b9:b8:07:0c:b2: ++ 74:5c:b8:c7:6f:88:a1:90:a7:f4:aa:f9:bf:67:3a:f4:1a:15: ++ 62:1e:b7:9f:be:3d:b1:29:af:67:a1:12:f2:58:10:19:53:03: ++ 30:1b:b8:1a:89:f6:9c:bd:97:03:8e:a3:09:f3:1d:8b:21:f1: ++ b4:df:e4:1c:d1:9f:65:02:06:ea:5c:d6:13:b3:84:ef:a2:a5: ++ 5c:8c:77:29:a7:68:c0:6b:ae:40:d2:a8:b4:ea:cd:f0:8d:4b: ++ 38:9c:19:9a:1b:28:54:b8:89:90:ef:ca:75:81:3e:1e:f2:64: ++ 24:c7:18:af:4e:ff:47:9e:07:f6:35:65:a4:d3:0a:56:ff:f5: ++ 17:64:6c:ef:a8:22:25:49:93:b6:df:00:17:da:58:7e:5d:ee: ++ c5:1b:b0:d1:d1:5f:21:10:c7:f9:f3:ba:02:0a:27:07:c5:f1: ++ d6:c7:d3:e0:fb:09:60:6c ++-----BEGIN CERTIFICATE----- ++MIIFQTCCAymgAwIBAgITBmyf0pY1hp8KD+WGePhbJruKNzANBgkqhkiG9w0BAQwF ++ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6 ++b24gUm9vdCBDQSAyMB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTEL ++MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv ++b3QgQ0EgMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2Wny2cSkxK ++gXlRmeyKy2tgURO8TW0G/LAIjd0ZEGrHJgw12MBvIITplLGbhQPDW9tK6Mj4kHbZ ++W0/jTOgGNk3Mmqw9DJArktQGGWCsN0R5hYGCrVo34A3MnaZMUnbqQ523BNFQ9lXg ++1dKmSYXpN+nKfq5clU1Imj+uIFptiJXZNLhSGkOQsL9sBbm2eLfq0OQ6PBJTYv9K ++8nu+NQWpEjTj82R0Yiw9AElaKP4yRLuH3WUnAnE72kr3H9rN9yFVkE8P7K6C4Z9r ++2UXTu/Bfh+08LDmG2j/e7HJV63mjrdvdfLC6HM783k81ds8P+HgfajZRRidhW+me ++z/CiVX18JYpvL7TFz4QuK/0NURBs+18bvBt+xa47mAExkv8LV/SasrlX6avvDXbR ++8O70zoan4G7ptGmh32n2M8ZpLpcTnqWHsFcQgTfJU7O7f/aS0ZzQGPSSbtqDT6Zj ++mUyl+17vIWR6IF9sZIUVyzfpYgwLKhbcAS4y2j5L9Z469hdAlO+ekQiG+r5jqFoz ++7Mt0Q5X5bGlSNscpb/xVA1wf+5+9R+vnSUeVC06JIglJ4PVhHvG/LopyboBZ/1c6 +++XUyo05f7O0oYtlNc/LMgRdg7c3r3NunysV+Ar3yVAhU/bQtCSwXVEqY0VThUWcI ++0u1ufm8/0i2BWSlmy5A5lREedCf+3euvAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMB ++Af8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSwDPBMMPQFWAJI/TPlUq9LhONm ++UjANBgkqhkiG9w0BAQwFAAOCAgEAqqiAjw54o+Ci1M3m9Zh6O+oAA7CXDpO8Wqj2 ++LIxyh6mx/H9z/WNxeKWHWc8w4Q0QshNabYL1auaAn6AFC2jkR2vHat+2/XcycuUY +++gn0oJMsXdKMdYV2ZZAMA3m3MSNjrXiDCYZohMr/+c8mmpJ5581LxedhpxfL86kS ++k5Nrp+gvU5LEYFiwzAJRGFuFjWJZY7attN6a+yb3ACfAXVU3dJnJUH/jWS5E4ywl ++7uxMMne0nxrpS10gxdr9HIcWxkPo1LsmmkVwXqkLN1PiRnsn/eBG8om3zEK2yygm ++btmlyTrIQRNg91CMFa6ybRoVGld45pIq2WWQgj9sAq+uEjonljYE1x2igGOpm/Hl ++urR8FLBOybEfdF849lHqm/osohHUqS0nGkWxr7JOcQ3AWEbWaQbLU8uz/mtBzUF+ ++fUwPfHJ5elnNXkoOrJupmHN5fLT0zLm4BwyydFy4x2+IoZCn9Kr5v2c69BoVYh63 ++n749sSmvZ6ES8lgQGVMDMBu4Gon2nL2XA46jCfMdiyHxtN/kHNGfZQIG6lzWE7OE ++76KlXIx3KadowGuuQNKotOrN8I1LOJwZmhsoVLiJkO/KdYE+HvJkJMcYr07/R54H ++9jVlpNMKVv/1F2Rs76giJUmTtt8AF9pYfl3uxRuw0dFfIRDH+fO6AgonB8Xx1sfT ++4PsJYGw= ++-----END CERTIFICATE----- ++ ++# 8ecde6884f3d87b1125ba31ac3fcb13d7016de7f57cc904fe1cb97c6ae98196e ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 06:6c:9f:cf:99:bf:8c:0a:39:e2:f0:78:8a:43:e6:96:36:5b:ca ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = US, O = Amazon, CN = Amazon Root CA 1 ++ Validity ++ Not Before: May 26 00:00:00 2015 GMT ++ Not After : Jan 17 00:00:00 2038 GMT ++ Subject: C = US, O = Amazon, CN = Amazon Root CA 1 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:b2:78:80:71:ca:78:d5:e3:71:af:47:80:50:74: ++ 7d:6e:d8:d7:88:76:f4:99:68:f7:58:21:60:f9:74: ++ 84:01:2f:ac:02:2d:86:d3:a0:43:7a:4e:b2:a4:d0: ++ 36:ba:01:be:8d:db:48:c8:07:17:36:4c:f4:ee:88: ++ 23:c7:3e:eb:37:f5:b5:19:f8:49:68:b0:de:d7:b9: ++ 76:38:1d:61:9e:a4:fe:82:36:a5:e5:4a:56:e4:45: ++ e1:f9:fd:b4:16:fa:74:da:9c:9b:35:39:2f:fa:b0: ++ 20:50:06:6c:7a:d0:80:b2:a6:f9:af:ec:47:19:8f: ++ 50:38:07:dc:a2:87:39:58:f8:ba:d5:a9:f9:48:67: ++ 30:96:ee:94:78:5e:6f:89:a3:51:c0:30:86:66:a1: ++ 45:66:ba:54:eb:a3:c3:91:f9:48:dc:ff:d1:e8:30: ++ 2d:7d:2d:74:70:35:d7:88:24:f7:9e:c4:59:6e:bb: ++ 73:87:17:f2:32:46:28:b8:43:fa:b7:1d:aa:ca:b4: ++ f2:9f:24:0e:2d:4b:f7:71:5c:5e:69:ff:ea:95:02: ++ cb:38:8a:ae:50:38:6f:db:fb:2d:62:1b:c5:c7:1e: ++ 54:e1:77:e0:67:c8:0f:9c:87:23:d6:3f:40:20:7f: ++ 20:80:c4:80:4c:3e:3b:24:26:8e:04:ae:6c:9a:c8: ++ aa:0d ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ 84:18:CC:85:34:EC:BC:0C:94:94:2E:08:59:9C:C7:B2:10:4E:0A:08 ++ Signature Algorithm: sha256WithRSAEncryption ++ 98:f2:37:5a:41:90:a1:1a:c5:76:51:28:20:36:23:0e:ae:e6: ++ 28:bb:aa:f8:94:ae:48:a4:30:7f:1b:fc:24:8d:4b:b4:c8:a1: ++ 97:f6:b6:f1:7a:70:c8:53:93:cc:08:28:e3:98:25:cf:23:a4: ++ f9:de:21:d3:7c:85:09:ad:4e:9a:75:3a:c2:0b:6a:89:78:76: ++ 44:47:18:65:6c:8d:41:8e:3b:7f:9a:cb:f4:b5:a7:50:d7:05: ++ 2c:37:e8:03:4b:ad:e9:61:a0:02:6e:f5:f2:f0:c5:b2:ed:5b: ++ b7:dc:fa:94:5c:77:9e:13:a5:7f:52:ad:95:f2:f8:93:3b:de: ++ 8b:5c:5b:ca:5a:52:5b:60:af:14:f7:4b:ef:a3:fb:9f:40:95: ++ 6d:31:54:fc:42:d3:c7:46:1f:23:ad:d9:0f:48:70:9a:d9:75: ++ 78:71:d1:72:43:34:75:6e:57:59:c2:02:5c:26:60:29:cf:23: ++ 19:16:8e:88:43:a5:d4:e4:cb:08:fb:23:11:43:e8:43:29:72: ++ 62:a1:a9:5d:5e:08:d4:90:ae:b8:d8:ce:14:c2:d0:55:f2:86: ++ f6:c4:93:43:77:66:61:c0:b9:e8:41:d7:97:78:60:03:6e:4a: ++ 72:ae:a5:d1:7d:ba:10:9e:86:6c:1b:8a:b9:59:33:f8:eb:c4: ++ 90:be:f1:b9 ++-----BEGIN CERTIFICATE----- ++MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF ++ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6 ++b24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL ++MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv ++b3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXj ++ca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM ++9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qw ++IFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6 ++VOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L ++93FcXmn/6pUCyziKrlA4b9v7LWIbxcceVOF34GfID5yHI9Y/QCB/IIDEgEw+OyQm ++jgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC ++AYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3DQEBCwUA ++A4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDI ++U5PMCCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUs ++N+gDS63pYaACbvXy8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vv ++o/ufQJVtMVT8QtPHRh8jrdkPSHCa2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU ++5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2xJNDd2ZhwLnoQdeXeGADbkpy ++rqXRfboQnoZsG4q5WTP468SQvvG5 ++-----END CERTIFICATE----- ++ ++# e35d28419ed02025cfa69038cd623962458da5c695fbdea3c22b0bfb25897092 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 06:6c:9f:d7:c1:bb:10:4c:29:43:e5:71:7b:7b:2c:c8:1a:c1:0e ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = US, O = Amazon, CN = Amazon Root CA 4 ++ Validity ++ Not Before: May 26 00:00:00 2015 GMT ++ Not After : May 26 00:00:00 2040 GMT ++ Subject: C = US, O = Amazon, CN = Amazon Root CA 4 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:d2:ab:8a:37:4f:a3:53:0d:fe:c1:8a:7b:4b:a8: ++ 7b:46:4b:63:b0:62:f6:2d:1b:db:08:71:21:d2:00: ++ e8:63:bd:9a:27:fb:f0:39:6e:5d:ea:3d:a5:c9:81: ++ aa:a3:5b:20:98:45:5d:16:db:fd:e8:10:6d:e3:9c: ++ e0:e3:bd:5f:84:62:f3:70:64:33:a0:cb:24:2f:70: ++ ba:88:a1:2a:a0:75:f8:81:ae:62:06:c4:81:db:39: ++ 6e:29:b0:1e:fa:2e:5c ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ D3:EC:C7:3A:65:6E:CC:E1:DA:76:9A:56:FB:9C:F3:86:6D:57:E5:81 ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:65:02:30:3a:8b:21:f1:bd:7e:11:ad:d0:ef:58:96:2f:d6: ++ eb:9d:7e:90:8d:2b:cf:66:55:c3:2c:e3:28:a9:70:0a:47:0e: ++ f0:37:59:12:ff:2d:99:94:28:4e:2a:4f:35:4d:33:5a:02:31: ++ 00:ea:75:00:4e:3b:c4:3a:94:12:91:c9:58:46:9d:21:13:72: ++ a7:88:9c:8a:e4:4c:4a:db:96:d4:ac:8b:6b:6b:49:12:53:33: ++ ad:d7:e4:be:24:fc:b5:0a:76:d4:a5:bc:10 ++-----BEGIN CERTIFICATE----- ++MIIB8jCCAXigAwIBAgITBmyf18G7EEwpQ+Vxe3ssyBrBDjAKBggqhkjOPQQDAzA5 ++MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24g ++Um9vdCBDQSA0MB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkG ++A1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJvb3Qg ++Q0EgNDB2MBAGByqGSM49AgEGBSuBBAAiA2IABNKrijdPo1MN/sGKe0uoe0ZLY7Bi ++9i0b2whxIdIA6GO9mif78DluXeo9pcmBqqNbIJhFXRbb/egQbeOc4OO9X4Ri83Bk ++M6DLJC9wuoihKqB1+IGuYgbEgds5bimwHvouXKNCMEAwDwYDVR0TAQH/BAUwAwEB ++/zAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYEFNPsxzplbszh2naaVvuc84ZtV+WB ++MAoGCCqGSM49BAMDA2gAMGUCMDqLIfG9fhGt0O9Yli/W651+kI0rz2ZVwyzjKKlw ++CkcO8DdZEv8tmZQoTipPNU0zWgIxAOp1AE47xDqUEpHJWEadIRNyp4iciuRMStuW ++1KyLa2tJElMzrdfkviT8tQp21KW8EA== ++-----END CERTIFICATE----- ++ ++# 5c58468d55f58e497e743982d2b50010b6d165374acf83a7d4a32db768c4408e ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 279744 (0x444c0) ++ Signature Algorithm: sha1WithRSAEncryption ++ Issuer: C = PL, O = Unizeto Technologies S.A., OU = Certum Certification Authority, CN = Certum Trusted Network CA ++ Validity ++ Not Before: Oct 22 12:07:37 2008 GMT ++ Not After : Dec 31 12:07:37 2029 GMT ++ Subject: C = PL, O = Unizeto Technologies S.A., OU = Certum Certification Authority, CN = Certum Trusted Network CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:e3:fb:7d:a3:72:ba:c2:f0:c9:14:87:f5:6b:01: ++ 4e:e1:6e:40:07:ba:6d:27:5d:7f:f7:5b:2d:b3:5a: ++ c7:51:5f:ab:a4:32:a6:61:87:b6:6e:0f:86:d2:30: ++ 02:97:f8:d7:69:57:a1:18:39:5d:6a:64:79:c6:01: ++ 59:ac:3c:31:4a:38:7c:d2:04:d2:4b:28:e8:20:5f: ++ 3b:07:a2:cc:4d:73:db:f3:ae:4f:c7:56:d5:5a:a7: ++ 96:89:fa:f3:ab:68:d4:23:86:59:27:cf:09:27:bc: ++ ac:6e:72:83:1c:30:72:df:e0:a2:e9:d2:e1:74:75: ++ 19:bd:2a:9e:7b:15:54:04:1b:d7:43:39:ad:55:28: ++ c5:e2:1a:bb:f4:c0:e4:ae:38:49:33:cc:76:85:9f: ++ 39:45:d2:a4:9e:f2:12:8c:51:f8:7c:e4:2d:7f:f5: ++ ac:5f:eb:16:9f:b1:2d:d1:ba:cc:91:42:77:4c:25: ++ c9:90:38:6f:db:f0:cc:fb:8e:1e:97:59:3e:d5:60: ++ 4e:e6:05:28:ed:49:79:13:4b:ba:48:db:2f:f9:72: ++ d3:39:ca:fe:1f:d8:34:72:f5:b4:40:cf:31:01:c3: ++ ec:de:11:2d:17:5d:1f:b8:50:d1:5e:19:a7:69:de: ++ 07:33:28:ca:50:95:f9:a7:54:cb:54:86:50:45:a9: ++ f9:49 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 08:76:CD:CB:07:FF:24:F6:C5:CD:ED:BB:90:BC:E2:84:37:46:75:F7 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Signature Algorithm: sha1WithRSAEncryption ++ a6:a8:ad:22:ce:01:3d:a6:a3:ff:62:d0:48:9d:8b:5e:72:b0: ++ 78:44:e3:dc:1c:af:09:fd:23:48:fa:bd:2a:c4:b9:55:04:b5: ++ 10:a3:8d:27:de:0b:82:63:d0:ee:de:0c:37:79:41:5b:22:b2: ++ b0:9a:41:5c:a6:70:e0:d4:d0:77:cb:23:d3:00:e0:6c:56:2f: ++ e1:69:0d:0d:d9:aa:bf:21:81:50:d9:06:a5:a8:ff:95:37:d0: ++ aa:fe:e2:b3:f5:99:2d:45:84:8a:e5:42:09:d7:74:02:2f:f7: ++ 89:d8:99:e9:bc:27:d4:47:8d:ba:0d:46:1c:77:cf:14:a4:1c: ++ b9:a4:31:c4:9c:28:74:03:34:ff:33:19:26:a5:e9:0d:74:b7: ++ 3e:97:c6:76:e8:27:96:a3:66:dd:e1:ae:f2:41:5b:ca:98:56: ++ 83:73:70:e4:86:1a:d2:31:41:ba:2f:be:2d:13:5a:76:6f:4e: ++ e8:4e:81:0e:3f:5b:03:22:a0:12:be:66:58:11:4a:cb:03:c4: ++ b4:2a:2a:2d:96:17:e0:39:54:bc:48:d3:76:27:9d:9a:2d:06: ++ a6:c9:ec:39:d2:ab:db:9f:9a:0b:27:02:35:29:b1:40:95:e7: ++ f9:e8:9c:55:88:19:46:d6:b7:34:f5:7e:ce:39:9a:d9:38:f1: ++ 51:f7:4f:2c ++-----BEGIN CERTIFICATE----- ++MIIDuzCCAqOgAwIBAgIDBETAMA0GCSqGSIb3DQEBBQUAMH4xCzAJBgNVBAYTAlBM ++MSIwIAYDVQQKExlVbml6ZXRvIFRlY2hub2xvZ2llcyBTLkEuMScwJQYDVQQLEx5D ++ZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIjAgBgNVBAMTGUNlcnR1bSBU ++cnVzdGVkIE5ldHdvcmsgQ0EwHhcNMDgxMDIyMTIwNzM3WhcNMjkxMjMxMTIwNzM3 ++WjB+MQswCQYDVQQGEwJQTDEiMCAGA1UEChMZVW5pemV0byBUZWNobm9sb2dpZXMg ++Uy5BLjEnMCUGA1UECxMeQ2VydHVtIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSIw ++IAYDVQQDExlDZXJ0dW0gVHJ1c3RlZCBOZXR3b3JrIENBMIIBIjANBgkqhkiG9w0B ++AQEFAAOCAQ8AMIIBCgKCAQEA4/t9o3K6wvDJFIf1awFO4W5AB7ptJ11/91sts1rH ++UV+rpDKmYYe2bg+G0jACl/jXaVehGDldamR5xgFZrDwxSjh80gTSSyjoIF87B6LM ++TXPb865Px1bVWqeWifrzq2jUI4ZZJ88JJ7ysbnKDHDBy3+Ci6dLhdHUZvSqeexVU ++BBvXQzmtVSjF4hq79MDkrjhJM8x2hZ85RdKknvISjFH4fOQtf/WsX+sWn7Et0brM ++kUJ3TCXJkDhv2/DM+44el1k+1WBO5gUo7Ul5E0u6SNsv+XLTOcr+H9g0cvW0QM8x ++AcPs3hEtF10fuFDRXhmnad4HMyjKUJX5p1TLVIZQRan5SQIDAQABo0IwQDAPBgNV ++HRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIds3LB/8k9sXN7buQvOKEN0Z19zAOBgNV ++HQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEFBQADggEBAKaorSLOAT2mo/9i0Eidi15y ++sHhE49wcrwn9I0j6vSrEuVUEtRCjjSfeC4Jj0O7eDDd5QVsisrCaQVymcODU0HfL ++I9MA4GxWL+FpDQ3Zqr8hgVDZBqWo/5U30Kr+4rP1mS1FhIrlQgnXdAIv94nYmem8 ++J9RHjboNRhx3zxSkHLmkMcScKHQDNP8zGSal6Q10tz6XxnboJ5ajZt3hrvJBW8qY ++VoNzcOSGGtIxQbovvi0TWnZvTuhOgQ4/WwMioBK+ZlgRSssDxLQqKi2WF+A5VLxI ++03YnnZotBqbJ7DnSq9ufmgsnAjUpsUCV5/nonFWIGUbWtzT1fs45mtk48VH3Tyw= ++-----END CERTIFICATE----- ++ ++# f356bea244b7a91eb35d53ca9ad7864ace018e2d35d5f8f96ddf68a6f41aa474 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 6643877497813316402 (0x5c33cb622c5fb332) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: CN = Atos TrustedRoot 2011, O = Atos, C = DE ++ Validity ++ Not Before: Jul 7 14:58:30 2011 GMT ++ Not After : Dec 31 23:59:59 2030 GMT ++ Subject: CN = Atos TrustedRoot 2011, O = Atos, C = DE ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:95:85:3b:97:6f:2a:3b:2e:3b:cf:a6:f3:29:35: ++ be:cf:18:ac:3e:aa:d9:f8:4d:a0:3e:1a:47:b9:bc: ++ 9a:df:f2:fe:cc:3e:47:e8:7a:96:c2:24:8e:35:f4: ++ a9:0c:fc:82:fd:6d:c1:72:62:27:bd:ea:6b:eb:e7: ++ 8a:cc:54:3e:90:50:cf:80:d4:95:fb:e8:b5:82:d4: ++ 14:c5:b6:a9:55:25:57:db:b1:50:f6:b0:60:64:59: ++ 7a:69:cf:03:b7:6f:0d:be:ca:3e:6f:74:72:ea:aa: ++ 30:2a:73:62:be:49:91:61:c8:11:fe:0e:03:2a:f7: ++ 6a:20:dc:02:15:0d:5e:15:6a:fc:e3:82:c1:b5:c5: ++ 9d:64:09:6c:a3:59:98:07:27:c7:1b:96:2b:61:74: ++ 71:6c:43:f1:f7:35:89:10:e0:9e:ec:55:a1:37:22: ++ a2:87:04:05:2c:47:7d:b4:1c:b9:62:29:66:28:ca: ++ b7:e1:93:f5:a4:94:03:99:b9:70:85:b5:e6:48:ea: ++ 8d:50:fc:d9:de:cc:6f:07:0e:dd:0b:72:9d:80:30: ++ 16:07:95:3f:28:0e:fd:c5:75:4f:53:d6:74:9a:b4: ++ 24:2e:8e:02:91:cf:76:c5:9b:1e:55:74:9c:78:21: ++ b1:f0:2d:f1:0b:9f:c2:d5:96:18:1f:f0:54:22:7a: ++ 8c:07 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ A7:A5:06:B1:2C:A6:09:60:EE:D1:97:E9:70:AE:BC:3B:19:6C:DB:21 ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ keyid:A7:A5:06:B1:2C:A6:09:60:EE:D1:97:E9:70:AE:BC:3B:19:6C:DB:21 ++ ++ X509v3 Certificate Policies: ++ Policy: 1.3.6.1.4.1.6189.3.4.1.1 ++ ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ 26:77:34:db:94:48:86:2a:41:9d:2c:3e:06:90:60:c4:8c:ac: ++ 0b:54:b8:1f:b9:7b:d3:07:39:e4:fa:3e:7b:b2:3d:4e:ed:9f: ++ 23:bd:97:f3:6b:5c:ef:ee:fd:40:a6:df:a1:93:a1:0a:86:ac: ++ ef:20:d0:79:01:bd:78:f7:19:d8:24:31:34:04:01:a6:ba:15: ++ 9a:c3:27:dc:d8:4f:0f:cc:18:63:ff:99:0f:0e:91:6b:75:16: ++ e1:21:fc:d8:26:c7:47:b7:a6:cf:58:72:71:7e:ba:e1:4d:95: ++ 47:3b:c9:af:6d:a1:b4:c1:ec:89:f6:b4:0f:38:b5:e2:64:dc: ++ 25:cf:a6:db:eb:9a:5c:99:a1:c5:08:de:fd:e6:da:d5:d6:5a: ++ 45:0c:c4:b7:c2:b5:14:ef:b4:11:ff:0e:15:b5:f5:f5:db:c6: ++ bd:eb:5a:a7:f0:56:22:a9:3c:65:54:c6:15:a8:bd:86:9e:cd: ++ 83:96:68:7a:71:81:89:e1:0b:e1:ea:11:1b:68:08:cc:69:9e: ++ ec:9e:41:9e:44:32:26:7a:e2:87:0a:71:3d:eb:e4:5a:a4:d2: ++ db:c5:cd:c6:de:60:7f:b9:f3:4f:44:92:ef:2a:b7:18:3e:a7: ++ 19:d9:0b:7d:b1:37:41:42:b0:ba:60:1d:f2:fe:09:11:b0:f0: ++ 87:7b:a7:9d ++-----BEGIN CERTIFICATE----- ++MIIDdzCCAl+gAwIBAgIIXDPLYixfszIwDQYJKoZIhvcNAQELBQAwPDEeMBwGA1UE ++AwwVQXRvcyBUcnVzdGVkUm9vdCAyMDExMQ0wCwYDVQQKDARBdG9zMQswCQYDVQQG ++EwJERTAeFw0xMTA3MDcxNDU4MzBaFw0zMDEyMzEyMzU5NTlaMDwxHjAcBgNVBAMM ++FUF0b3MgVHJ1c3RlZFJvb3QgMjAxMTENMAsGA1UECgwEQXRvczELMAkGA1UEBhMC ++REUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVhTuXbyo7LjvPpvMp ++Nb7PGKw+qtn4TaA+Gke5vJrf8v7MPkfoepbCJI419KkM/IL9bcFyYie96mvr54rM ++VD6QUM+A1JX76LWC1BTFtqlVJVfbsVD2sGBkWXppzwO3bw2+yj5vdHLqqjAqc2K+ ++SZFhyBH+DgMq92og3AIVDV4VavzjgsG1xZ1kCWyjWZgHJ8cblithdHFsQ/H3NYkQ ++4J7sVaE3IqKHBAUsR320HLliKWYoyrfhk/WklAOZuXCFteZI6o1Q/NnezG8HDt0L ++cp2AMBYHlT8oDv3FdU9T1nSatCQujgKRz3bFmx5VdJx4IbHwLfELn8LVlhgf8FQi ++eowHAgMBAAGjfTB7MB0GA1UdDgQWBBSnpQaxLKYJYO7Rl+lwrrw7GWzbITAPBgNV ++HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFKelBrEspglg7tGX6XCuvDsZbNshMBgG ++A1UdIAQRMA8wDQYLKwYBBAGwLQMEAQEwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3 ++DQEBCwUAA4IBAQAmdzTblEiGKkGdLD4GkGDEjKwLVLgfuXvTBznk+j57sj1O7Z8j ++vZfza1zv7v1Apt+hk6EKhqzvINB5Ab149xnYJDE0BAGmuhWawyfc2E8PzBhj/5kP ++DpFrdRbhIfzYJsdHt6bPWHJxfrrhTZVHO8mvbaG0weyJ9rQPOLXiZNwlz6bb65pc ++maHFCN795trV1lpFDMS3wrUU77QR/w4VtfX128a961qn8FYiqTxlVMYVqL2Gns2D ++lmh6cYGJ4Qvh6hEbaAjMaZ7snkGeRDImeuKHCnE96+RapNLbxc3G3mB/ufNPRJLv ++KrcYPqcZ2Qt9sTdBQrC6YB3y/gkRsPCHe6ed ++-----END CERTIFICATE----- ++ ++# 57de0583efd2b26e0361da99da9df4648def7ee8441c3b728afa9bcde0f9b26a ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 1977337328857672817 (0x1b70e9d2ffae6c71) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = ES, CN = Autoridad de Certificacion Firmaprofesional CIF A62634068 ++ Validity ++ Not Before: Sep 23 15:22:07 2014 GMT ++ Not After : May 5 15:22:07 2036 GMT ++ Subject: C = ES, CN = Autoridad de Certificacion Firmaprofesional CIF A62634068 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:ca:96:6b:8e:ea:f8:fb:f1:a2:35:e0:7f:4c:da: ++ e0:c3:52:d7:7d:b6:10:c8:02:5e:b3:43:2a:c4:4f: ++ 6a:b2:ca:1c:5d:28:9a:78:11:1a:69:59:57:af:b5: ++ 20:42:e4:8b:0f:e6:df:5b:a6:03:92:2f:f5:11:e4: ++ 62:d7:32:71:38:d9:04:0c:71:ab:3d:51:7e:0f:07: ++ df:63:05:5c:e9:bf:94:6f:c1:29:82:c0:b4:da:51: ++ b0:c1:3c:bb:ad:37:4a:5c:ca:f1:4b:36:0e:24:ab: ++ bf:c3:84:77:fd:a8:50:f4:b1:e7:c6:2f:d2:2d:59: ++ 8d:7a:0a:4e:96:69:52:02:aa:36:98:ec:fc:fa:14: ++ 83:0c:37:1f:c9:92:37:7f:d7:81:2d:e5:c4:b9:e0: ++ 3e:34:fe:67:f4:3e:66:d1:d3:f4:40:cf:5e:62:34: ++ 0f:70:06:3e:20:18:5a:ce:f7:72:1b:25:6c:93:74: ++ 14:93:a3:73:b1:0e:aa:87:10:23:59:5f:20:05:19: ++ 47:ed:68:8e:92:12:ca:5d:fc:d6:2b:b2:92:3c:20: ++ cf:e1:5f:af:20:be:a0:76:7f:76:e5:ec:1a:86:61: ++ 33:3e:e7:7b:b4:3f:a0:0f:8e:a2:b9:6a:6f:b9:87: ++ 26:6f:41:6c:88:a6:50:fd:6a:63:0b:f5:93:16:1b: ++ 19:8f:b2:ed:9b:9b:c9:90:f5:01:0c:df:19:3d:0f: ++ 3e:38:23:c9:2f:8f:0c:d1:02:fe:1b:55:d6:4e:d0: ++ 8d:3c:af:4f:a4:f3:fe:af:2a:d3:05:9d:79:08:a1: ++ cb:57:31:b4:9c:c8:90:b2:67:f4:18:16:93:3a:fc: ++ 47:d8:d1:78:96:31:1f:ba:2b:0c:5f:5d:99:ad:63: ++ 89:5a:24:20:76:d8:df:fd:ab:4e:a6:22:aa:9d:5e: ++ e6:27:8a:7d:68:29:a3:e7:8a:b8:da:11:bb:17:2d: ++ 99:9d:13:24:46:f7:c5:e2:d8:9f:8e:7f:c7:8f:74: ++ 6d:5a:b2:e8:72:f5:ac:ee:24:10:ad:2f:14:da:ff: ++ 2d:9a:46:71:47:be:42:df:bb:01:db:f4:7f:d3:28: ++ 8f:31:59:5b:d3:c9:02:a6:b4:52:ca:6e:97:fb:43: ++ c5:08:26:6f:8a:f4:bb:fd:9f:28:aa:0d:d5:45:f3: ++ 13:3a:1d:d8:c0:78:8f:41:67:3c:1e:94:64:ae:7b: ++ 0b:c5:e8:d9:01:88:39:1a:97:86:64:41:d5:3b:87: ++ 0c:6e:fa:0f:c6:bd:48:14:bf:39:4d:d4:9e:41:b6: ++ 8f:96:1d:63:96:93:d9:95:06:78:31:68:9e:37:06: ++ 3b:80:89:45:61:39:23:c7:1b:44:a3:15:e5:1c:f8: ++ 92:30:bb ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 65:CD:EB:AB:35:1E:00:3E:7E:D5:74:C0:1C:B4:73:47:0E:1A:64:2F ++ X509v3 Basic Constraints: critical ++ CA:TRUE, pathlen:1 ++ X509v3 Certificate Policies: ++ Policy: X509v3 Any Policy ++ CPS: http://www.firmaprofesional.com/cps ++ User Notice: ++ Explicit Text: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ Signature Value: ++ 74:87:28:02:2b:77:1f:66:89:64:ed:8f:74:2e:46:1c:bb:a8: ++ f8:f8:0b:1d:83:b6:3a:a7:e8:45:8a:07:b7:e0:3e:20:cb:e1: ++ 08:db:13:08:f8:28:a1:35:b2:80:b3:0b:51:c0:d3:56:9a:8d: ++ 33:45:49:af:49:f0:e0:3d:07:7a:45:13:5a:ff:c8:97:d8:d3: ++ 18:2c:7d:96:f8:dd:a2:65:43:70:93:90:15:ba:90:df:e8:19: ++ b0:db:2c:8a:60:0f:b7:6f:94:07:1e:1d:a6:c9:85:f6:bd:34: ++ f8:40:78:62:10:70:3a:be:7d:4b:39:81:a9:10:d4:96:41:bb: ++ f8:5f:1c:0b:1d:08:f2:b1:b0:89:7a:f2:f7:a0:e0:c4:8f:8b: ++ 78:b5:3b:58:a5:23:8e:4f:55:fe:36:3b:e0:0c:b7:ca:2a:30: ++ 41:20:b4:80:cd:ae:fc:76:66:73:a8:ae:6e:e1:7c:da:03:e8: ++ 94:20:e6:22:a3:d0:1f:90:5d:20:53:14:26:57:da:54:97:df: ++ 16:44:10:01:1e:88:66:8f:72:38:93:dd:20:b7:34:be:d7:f1: ++ ee:63:8e:47:79:28:06:fc:f3:59:45:25:60:22:33:1b:a3:5f: ++ a8:ba:2a:da:1a:3d:cd:40:ea:8c:ee:05:15:95:d5:a5:2c:20: ++ 2f:a7:98:28:ee:45:fc:f1:b8:88:00:2c:8f:42:da:51:d5:9c: ++ e5:13:68:71:45:43:8b:9e:0b:21:3c:4b:5c:05:dc:1a:9f:98: ++ 8e:da:bd:22:9e:72:cd:ad:0a:cb:cc:a3:67:9b:28:74:c4:9b: ++ d7:1a:3c:04:58:a6:82:9d:ad:c7:7b:6f:ff:80:96:e9:f8:8d: ++ 6a:bd:18:90:1d:ff:49:1a:90:52:37:93:2f:3c:02:5d:82:76: ++ 0b:51:e7:16:c7:57:f8:38:f9:a7:cd:9b:22:54:ef:63:b0:15: ++ 6d:53:65:03:4a:5e:4a:a0:b2:a7:8e:49:00:59:38:d5:c7:f4: ++ 80:64:f5:6e:95:50:b8:11:7e:15:70:38:4a:b0:7f:d0:c4:32: ++ 70:c0:19:ff:c9:38:2d:14:2c:66:f4:42:44:e6:55:76:1b:80: ++ 15:57:ff:c0:a7:a7:aa:39:aa:d8:d3:70:d0:2e:ba:eb:94:6a: ++ fa:5f:34:86:e7:62:b5:fd:8a:f0:30:85:94:c9:af:24:02:2f: ++ 6f:d6:dd:67:fe:e3:b0:55:4f:04:98:4f:a4:41:56:e2:93:d0: ++ 6a:e8:d6:f3:fb:65:e0:ce:75:c4:31:59:0c:ee:82:c8:0c:60: ++ 33:4a:19:ba:84:67:27:0f:bc:42:5d:bd:24:54:0d:ec:1d:70: ++ 06:5f:a4:bc:fa:20:7c:55 ++-----BEGIN CERTIFICATE----- ++MIIGFDCCA/ygAwIBAgIIG3Dp0v+ubHEwDQYJKoZIhvcNAQELBQAwUTELMAkGA1UE ++BhMCRVMxQjBABgNVBAMMOUF1dG9yaWRhZCBkZSBDZXJ0aWZpY2FjaW9uIEZpcm1h ++cHJvZmVzaW9uYWwgQ0lGIEE2MjYzNDA2ODAeFw0xNDA5MjMxNTIyMDdaFw0zNjA1 ++MDUxNTIyMDdaMFExCzAJBgNVBAYTAkVTMUIwQAYDVQQDDDlBdXRvcmlkYWQgZGUg ++Q2VydGlmaWNhY2lvbiBGaXJtYXByb2Zlc2lvbmFsIENJRiBBNjI2MzQwNjgwggIi ++MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKlmuO6vj78aI14H9M2uDDUtd9 ++thDIAl6zQyrET2qyyhxdKJp4ERppWVevtSBC5IsP5t9bpgOSL/UR5GLXMnE42QQM ++cas9UX4PB99jBVzpv5RvwSmCwLTaUbDBPLutN0pcyvFLNg4kq7/DhHf9qFD0sefG ++L9ItWY16Ck6WaVICqjaY7Pz6FIMMNx/Jkjd/14Et5cS54D40/mf0PmbR0/RAz15i ++NA9wBj4gGFrO93IbJWyTdBSTo3OxDqqHECNZXyAFGUftaI6SEspd/NYrspI8IM/h ++X68gvqB2f3bl7BqGYTM+53u0P6APjqK5am+5hyZvQWyIplD9amML9ZMWGxmPsu2b ++m8mQ9QEM3xk9Dz44I8kvjwzRAv4bVdZO0I08r0+k8/6vKtMFnXkIoctXMbScyJCy ++Z/QYFpM6/EfY0XiWMR+6KwxfXZmtY4laJCB22N/9q06mIqqdXuYnin1oKaPnirja ++EbsXLZmdEyRG98Xi2J+Of8ePdG1asuhy9azuJBCtLxTa/y2aRnFHvkLfuwHb9H/T ++KI8xWVvTyQKmtFLKbpf7Q8UIJm+K9Lv9nyiqDdVF8xM6HdjAeI9BZzwelGSuewvF ++6NkBiDkal4ZkQdU7hwxu+g/GvUgUvzlN1J5Bto+WHWOWk9mVBngxaJ43BjuAiUVh ++OSPHG0SjFeUc+JIwuwIDAQABo4HvMIHsMB0GA1UdDgQWBBRlzeurNR4APn7VdMAc ++tHNHDhpkLzASBgNVHRMBAf8ECDAGAQH/AgEBMIGmBgNVHSAEgZ4wgZswgZgGBFUd ++IAAwgY8wLwYIKwYBBQUHAgEWI2h0dHA6Ly93d3cuZmlybWFwcm9mZXNpb25hbC5j ++b20vY3BzMFwGCCsGAQUFBwICMFAeTgBQAGEAcwBlAG8AIABkAGUAIABsAGEAIABC ++AG8AbgBhAG4AbwB2AGEAIAA0ADcAIABCAGEAcgBjAGUAbABvAG4AYQAgADAAOAAw ++ADEANzAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQADggIBAHSHKAIrdx9m ++iWTtj3QuRhy7qPj4Cx2Dtjqn6EWKB7fgPiDL4QjbEwj4KKE1soCzC1HA01aajTNF ++Sa9J8OA9B3pFE1r/yJfY0xgsfZb43aJlQ3CTkBW6kN/oGbDbLIpgD7dvlAceHabJ ++hfa9NPhAeGIQcDq+fUs5gakQ1JZBu/hfHAsdCPKxsIl68veg4MSPi3i1O1ilI45P ++Vf42O+AMt8oqMEEgtIDNrvx2ZnOorm7hfNoD6JQg5iKj0B+QXSBTFCZX2lSX3xZE ++EAEeiGaPcjiT3SC3NL7X8e5jjkd5KAb881lFJWAiMxujX6i6KtoaPc1A6ozuBRWV ++1aUsIC+nmCjuRfzxuIgALI9C2lHVnOUTaHFFQ4ueCyE8S1wF3BqfmI7avSKecs2t ++CsvMo2ebKHTEm9caPARYpoKdrcd7b/+Alun4jWq9GJAd/0kakFI3ky88Al2CdgtR ++5xbHV/g4+afNmyJU72OwFW1TZQNKXkqgsqeOSQBZONXH9IBk9W6VULgRfhVwOEqw ++f9DEMnDAGf/JOC0ULGb0QkTmVXYbgBVX/8Cnp6o5qtjTcNAuuuuUavpfNIbnYrX9 ++ivAwhZTJryQCL2/W3Wf+47BVTwSYT6RBVuKT0Gro1vP7ZeDOdcQxWQzugsgMYDNK ++GbqEZycPvEJdvSRUDewdcAZfpLz6IHxV ++-----END CERTIFICATE----- ++ ++# 9a114025197c5bb95d94e63d55cd43790847b646b23cdf11ada4a00eff15fb48 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 2 (0x2) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = NO, O = Buypass AS-983163327, CN = Buypass Class 2 Root CA ++ Validity ++ Not Before: Oct 26 08:38:03 2010 GMT ++ Not After : Oct 26 08:38:03 2040 GMT ++ Subject: C = NO, O = Buypass AS-983163327, CN = Buypass Class 2 Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:d7:c7:5e:f7:c1:07:d4:77:fb:43:21:f4:f4:f5: ++ 69:e4:ee:32:01:db:a3:86:1f:e4:59:0d:ba:e7:75: ++ 83:52:eb:ea:1c:61:15:48:bb:1d:07:ca:8c:ae:b0: ++ dc:96:9d:ea:c3:60:92:86:82:28:73:9c:56:06:ff: ++ 4b:64:f0:0c:2a:37:49:b5:e5:cf:0c:7c:ee:f1:4a: ++ bb:73:30:65:f3:d5:2f:83:b6:7e:e3:e7:f5:9e:ab: ++ 60:f9:d3:f1:9d:92:74:8a:e4:1c:96:ac:5b:80:e9: ++ b5:f4:31:87:a3:51:fc:c7:7e:a1:6f:8e:53:77:d4: ++ 97:c1:55:33:92:3e:18:2f:75:d4:ad:86:49:cb:95: ++ af:54:06:6c:d8:06:13:8d:5b:ff:e1:26:19:59:c0: ++ 24:ba:81:71:79:90:44:50:68:24:94:5f:b8:b3:11: ++ f1:29:41:61:a3:41:cb:23:36:d5:c1:f1:32:50:10: ++ 4e:7f:f4:86:93:ec:84:d3:8e:bc:4b:bf:5c:01:4e: ++ 07:3d:dc:14:8a:94:0a:a4:ea:73:fb:0b:51:e8:13: ++ 07:18:fa:0e:f1:2b:d1:54:15:7d:3c:e1:f7:b4:19: ++ 42:67:62:5e:77:e0:a2:55:ec:b6:d9:69:17:d5:3a: ++ af:44:ed:4a:c5:9e:e4:7a:27:7c:e5:75:d7:aa:cb: ++ 25:e7:df:6b:0a:db:0f:4d:93:4e:a8:a0:cd:7b:2e: ++ f2:59:01:6a:b7:0d:b8:07:81:7e:8b:38:1b:38:e6: ++ 0a:57:99:3d:ee:21:e8:a3:f5:0c:16:dd:8b:ec:34: ++ 8e:9c:2a:1c:00:15:17:8d:68:83:d2:70:9f:18:08: ++ cd:11:68:d5:c9:6b:52:cd:c4:46:8f:dc:b5:f3:d8: ++ 57:73:1e:e9:94:39:04:bf:d3:de:38:de:b4:53:ec: ++ 69:1c:a2:7e:c4:8f:e4:1b:70:ad:f2:a2:f9:fb:f7: ++ 16:64:66:69:9f:49:51:a2:e2:15:18:67:06:4a:7f: ++ d5:6c:b5:4d:b3:33:e0:61:eb:5d:be:e9:98:0f:32: ++ d7:1d:4b:3c:2e:5a:01:52:91:09:f2:df:ea:8d:d8: ++ 06:40:63:aa:11:e4:fe:c3:37:9e:14:52:3f:f4:e2: ++ cc:f2:61:93:d1:fd:67:6b:d7:52:ae:bf:68:ab:40: ++ 43:a0:57:35:53:78:f0:53:f8:61:42:07:64:c6:d7: ++ 6f:9b:4c:38:0d:63:ac:62:af:36:8b:a2:73:0a:0d: ++ f5:21:bd:74:aa:4d:ea:72:03:49:db:c7:5f:1d:62: ++ 63:c7:fd:dd:91:ec:33:ee:f5:6d:b4:6e:30:68:de: ++ c8:d6:26:b0:75:5e:7b:b4:07:20:98:a1:76:32:b8: ++ 4d:6c:4f ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ C9:80:77:E0:62:92:82:F5:46:9C:F3:BA:F7:4C:C3:DE:B8:A3:AD:39 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ 53:5f:21:f5:ba:b0:3a:52:39:2c:92:b0:6c:00:c9:ef:ce:20: ++ ef:06:f2:96:9e:e9:a4:74:7f:7a:16:fc:b7:f5:b6:fb:15:1b: ++ 3f:ab:a6:c0:72:5d:10:b1:71:ee:bc:4f:e3:ad:ac:03:6d:2e: ++ 71:2e:af:c4:e3:ad:a3:bd:0c:11:a7:b4:ff:4a:b2:7b:10:10: ++ 1f:a7:57:41:b2:c0:ae:f4:2c:59:d6:47:10:88:f3:21:51:29: ++ 30:ca:60:86:af:46:ab:1d:ed:3a:5b:b0:94:de:44:e3:41:08: ++ a2:c1:ec:1d:d6:fd:4f:b6:d6:47:d0:14:0b:ca:e6:ca:b5:7b: ++ 77:7e:41:1f:5e:83:c7:b6:8c:39:96:b0:3f:96:81:41:6f:60: ++ 90:e2:e8:f9:fb:22:71:d9:7d:b3:3d:46:bf:b4:84:af:90:1c: ++ 0f:8f:12:6a:af:ef:ee:1e:7a:ae:02:4a:8a:17:2b:76:fe:ac: ++ 54:89:24:2c:4f:3f:b6:b2:a7:4e:8c:a8:91:97:fb:29:c6:7b: ++ 5c:2d:b9:cb:66:b6:b7:a8:5b:12:51:85:b5:09:7e:62:78:70: ++ fe:a9:6a:60:b6:1d:0e:79:0c:fd:ca:ea:24:80:72:c3:97:3f: ++ f2:77:ab:43:22:0a:c7:eb:b6:0c:84:82:2c:80:6b:41:8a:08: ++ c0:eb:a5:6b:df:99:12:cb:8a:d5:5e:80:0c:91:e0:26:08:36: ++ 48:c5:fa:38:11:35:ff:25:83:2d:f2:7a:bf:da:fd:8e:fe:a5: ++ cb:45:2c:1f:c4:88:53:ae:77:0e:d9:9a:76:c5:8e:2c:1d:a3: ++ ba:d5:ec:32:ae:c0:aa:ac:f7:d1:7a:4d:eb:d4:07:e2:48:f7: ++ 22:8e:b0:a4:9f:6a:ce:8e:b2:b2:60:f4:a3:22:d0:23:eb:94: ++ 5a:7a:69:dd:0f:bf:40:57:ac:6b:59:50:d9:a3:99:e1:6e:fe: ++ 8d:01:79:27:23:15:de:92:9d:7b:09:4d:5a:e7:4b:48:30:5a: ++ 18:e6:0a:6d:e6:8f:e0:d2:bb:e6:df:7c:6e:21:82:c1:68:39: ++ 4d:b4:98:58:66:62:cc:4a:90:5e:c3:fa:27:04:b1:79:15:74: ++ 99:cc:be:ad:20:de:26:60:1c:eb:56:51:a6:a3:ea:e4:a3:3f: ++ a7:ff:61:dc:f1:5a:4d:6c:32:23:43:ee:ac:a8:ee:ee:4a:12: ++ 09:3c:5d:71:c2:be:79:fa:c2:87:68:1d:0b:fd:5c:69:cc:06: ++ d0:9a:7d:54:99:2a:c9:39:1a:19:af:4b:2a:43:f3:63:5d:5a: ++ 58:e2:2f:e3:1d:e4:a9:d6:d0:0a:d0:9e:bf:d7:81:09:f1:c9: ++ c7:26:0d:ac:98:16:56:a0 + -----BEGIN CERTIFICATE----- + MIIFWTCCA0GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEd + MBsGA1UECgwUQnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3Mg +@@ -1538,13 +844,94 @@ I+uUWnpp3Q+/QFesa1lQ2aOZ4W7+jQF5JyMV3pKdewlNWudLSDBaGOYKbeaP4NK7 + Y11aWOIv4x3kqdbQCtCev9eBCfHJxyYNrJgWVqA= + -----END CERTIFICATE----- + +-# Issuer: CN=Buypass Class 3 Root CA O=Buypass AS-983163327 +-# Subject: CN=Buypass Class 3 Root CA O=Buypass AS-983163327 +-# Label: "Buypass Class 3 Root CA" +-# Serial: 2 +-# MD5 Fingerprint: 3d:3b:18:9e:2c:64:5a:e8:d5:88:ce:0e:f9:37:c2:ec +-# SHA1 Fingerprint: da:fa:f7:fa:66:84:ec:06:8f:14:50:bd:c7:c2:81:a5:bc:a9:64:57 +-# SHA256 Fingerprint: ed:f7:eb:bc:a2:7a:2a:38:4d:38:7b:7d:40:10:c6:66:e2:ed:b4:84:3e:4c:29:b4:ae:1d:5b:93:32:e6:b2:4d ++# edf7ebbca27a2a384d387b7d4010c666e2edb4843e4c29b4ae1d5b9332e6b24d ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 2 (0x2) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = NO, O = Buypass AS-983163327, CN = Buypass Class 3 Root CA ++ Validity ++ Not Before: Oct 26 08:28:58 2010 GMT ++ Not After : Oct 26 08:28:58 2040 GMT ++ Subject: C = NO, O = Buypass AS-983163327, CN = Buypass Class 3 Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:a5:da:0a:95:16:50:e3:95:f2:5e:9d:76:31:06: ++ 32:7a:9b:f1:10:76:b8:00:9a:b5:52:36:cd:24:47: ++ b0:9f:18:64:bc:9a:f6:fa:d5:79:d8:90:62:4c:22: ++ 2f:de:38:3d:d6:e0:a8:e9:1c:2c:db:78:11:e9:8e: ++ 68:51:15:72:c7:f3:33:87:e4:a0:5d:0b:5c:e0:57: ++ 07:2a:30:f5:cd:c4:37:77:28:4d:18:91:e6:bf:d5: ++ 52:fd:71:2d:70:3e:e7:c6:c4:8a:e3:f0:28:0b:f4: ++ 76:98:a1:8b:87:55:b2:3a:13:fc:b7:3e:27:37:8e: ++ 22:e3:a8:4f:2a:ef:60:bb:3d:b7:39:c3:0e:01:47: ++ 99:5d:12:4f:db:43:fa:57:a1:ed:f9:9d:be:11:47: ++ 26:5b:13:98:ab:5d:16:8a:b0:37:1c:57:9d:45:ff: ++ 88:96:36:bf:bb:ca:07:7b:6f:87:63:d7:d0:32:6a: ++ d6:5d:6c:0c:f1:b3:6e:39:e2:6b:31:2e:39:00:27: ++ 14:de:38:c0:ec:19:66:86:12:e8:9d:72:16:13:64: ++ 52:c7:a9:37:1c:fd:82:30:ed:84:18:1d:f4:ae:5c: ++ ff:70:13:00:eb:b1:f5:33:7a:4b:d6:55:f8:05:8d: ++ 4b:69:b0:f5:b3:28:36:5c:14:c4:51:73:4d:6b:0b: ++ f1:34:07:db:17:39:d7:dc:28:7b:6b:f5:9f:f3:2e: ++ c1:4f:17:2a:10:f3:cc:ca:e8:eb:fd:6b:ab:2e:9a: ++ 9f:2d:82:6e:04:d4:52:01:93:2d:3d:86:fc:7e:fc: ++ df:ef:42:1d:a6:6b:ef:b9:20:c6:f7:bd:a0:a7:95: ++ fd:a7:e6:89:24:d8:cc:8c:34:6c:e2:23:2f:d9:12: ++ 1a:21:b9:55:91:6f:0b:91:79:19:0c:ad:40:88:0b: ++ 70:e2:7a:d2:0e:d8:68:48:bb:82:13:39:10:58:e9: ++ d8:2a:07:c6:12:db:58:db:d2:3b:55:10:47:05:15: ++ 67:62:7e:18:63:a6:46:3f:09:0e:54:32:5e:bf:0d: ++ 62:7a:27:ef:80:e8:db:d9:4b:06:5a:37:5a:25:d0: ++ 08:12:77:d4:6f:09:50:97:3d:c8:1d:c3:df:8c:45: ++ 30:56:c6:d3:64:ab:66:f3:c0:5e:96:9c:c3:c4:ef: ++ c3:7c:6b:8b:3a:79:7f:b3:49:cf:3d:e2:89:9f:a0: ++ 30:4b:85:b9:9c:94:24:79:8f:7d:6b:a9:45:68:0f: ++ 2b:d0:f1:da:1c:cb:69:b8:ca:49:62:6d:c8:d0:63: ++ 62:dd:60:0f:58:aa:8f:a1:bc:05:a5:66:a2:cf:1b: ++ 76:b2:84:64:b1:4c:39:52:c0:30:ba:f0:8c:4b:02: ++ b0:b6:b7 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 47:B8:CD:FF:E5:6F:EE:F8:B2:EC:2F:4E:0E:F9:25:B0:8E:3C:6B:C3 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ 00:20:23:41:35:04:90:c2:40:62:60:ef:e2:35:4c:d7:3f:ac: ++ e2:34:90:b8:a1:6f:76:fa:16:16:a4:48:37:2c:e9:90:c2:f2: ++ 3c:f8:0a:9f:d8:81:e5:bb:5b:da:25:2c:a4:a7:55:71:24:32: ++ f6:c8:0b:f2:bc:6a:f8:93:ac:b2:07:c2:5f:9f:db:cc:c8:8a: ++ aa:be:6a:6f:e1:49:10:cc:31:d7:80:bb:bb:c8:d8:a2:0e:64: ++ 57:ea:a2:f5:c2:a9:31:15:d2:20:6a:ec:fc:22:01:28:cf:86: ++ b8:80:1e:a9:cc:11:a5:3c:f2:16:b3:47:9d:fc:d2:80:21:c4: ++ cb:d0:47:70:41:a1:ca:83:19:08:2c:6d:f2:5d:77:9c:8a:14: ++ 13:d4:36:1c:92:f0:e5:06:37:dc:a6:e6:90:9b:38:8f:5c:6b: ++ 1b:46:86:43:42:5f:3e:01:07:53:54:5d:65:7d:f7:8a:73:a1: ++ 9a:54:5a:1f:29:43:14:27:c2:85:0f:b5:88:7b:1a:3b:94:b7: ++ 1d:60:a7:b5:9c:e7:29:69:57:5a:9b:93:7a:43:30:1b:03:d7: ++ 62:c8:40:a6:aa:fc:64:e4:4a:d7:91:53:01:a8:20:88:6e:9c: ++ 5f:44:b9:cb:60:81:34:ec:6f:d3:7d:da:48:5f:eb:b4:90:bc: ++ 2d:a9:1c:0b:ac:1c:d5:a2:68:20:80:04:d6:fc:b1:8f:2f:bb: ++ 4a:31:0d:4a:86:1c:eb:e2:36:29:26:f5:da:d8:c4:f2:75:61: ++ cf:7e:ae:76:63:4a:7a:40:65:93:87:f8:1e:80:8c:86:e5:86: ++ d6:8f:0e:fc:53:2c:60:e8:16:61:1a:a2:3e:43:7b:cd:39:60: ++ 54:6a:f5:f2:89:26:01:68:83:48:a2:33:e8:c9:04:91:b2:11: ++ 34:11:3e:ea:d0:43:19:1f:03:93:90:0c:ff:51:3d:57:f4:41: ++ 6e:e1:cb:a0:be:eb:c9:63:cd:6d:cc:e4:f8:36:aa:68:9d:ed: ++ bd:5d:97:70:44:0d:b6:0e:35:dc:e1:0c:5d:bb:a0:51:94:cb: ++ 7e:16:eb:11:2f:a3:92:45:c8:4c:71:d9:bc:c9:99:52:57:46: ++ 2f:50:cf:bd:35:69:f4:3d:15:ce:06:a5:2c:0f:3e:f6:81:ba: ++ 94:bb:c3:bb:bf:65:78:d2:86:79:ff:49:3b:1a:83:0c:f0:de: ++ 78:ec:c8:f2:4d:4c:1a:de:82:29:f8:c1:5a:da:ed:ee:e6:27: ++ 5e:e8:45:d0:9d:1c:51:a8:68:ab:44:e3:d0:8b:6a:e3:f8:3b: ++ bb:dc:4d:d7:64:f2:51:be:e6:aa:ab:5a:e9:31:ee:06:bc:73: ++ bf:13:62:0a:9f:c7:b9:97 + -----BEGIN CERTIFICATE----- + MIIFWTCCA0GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEd + MBsGA1UECgwUQnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3Mg +@@ -1577,44 +964,518 @@ u79leNKGef9JOxqDDPDeeOzI8k1MGt6CKfjBWtrt7uYnXuhF0J0cUahoq0Tj0Itq + 4/g7u9xN12TyUb7mqqta6THuBrxzvxNiCp/HuZc= + -----END CERTIFICATE----- + +-# Issuer: CN=T-TeleSec GlobalRoot Class 3 O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center +-# Subject: CN=T-TeleSec GlobalRoot Class 3 O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center +-# Label: "T-TeleSec GlobalRoot Class 3" +-# Serial: 1 +-# MD5 Fingerprint: ca:fb:40:a8:4e:39:92:8a:1d:fe:8e:2f:c4:27:ea:ef +-# SHA1 Fingerprint: 55:a6:72:3e:cb:f2:ec:cd:c3:23:74:70:19:9d:2a:be:11:e3:81:d1 +-# SHA256 Fingerprint: fd:73:da:d3:1c:64:4f:f1:b4:3b:ef:0c:cd:da:96:71:0b:9c:d9:87:5e:ca:7e:31:70:7a:f3:e9:6d:52:2b:bd ++# 657cfe2fa73faa38462571f332a2363a46fce7020951710702cdfbb6eeda3305 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 11:00:34:b6:4e:c6:36:2d:36 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = RO, O = CERTSIGN SA, OU = certSIGN ROOT CA G2 ++ Validity ++ Not Before: Feb 6 09:27:35 2017 GMT ++ Not After : Feb 6 09:27:35 2042 GMT ++ Subject: C = RO, O = CERTSIGN SA, OU = certSIGN ROOT CA G2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:c0:c5:75:19:91:7d:44:74:74:87:fe:0e:3b:96: ++ dc:d8:01:16:cc:ee:63:91:e7:0b:6f:ce:3b:0a:69: ++ 1a:7c:c2:e3:af:82:8e:86:d7:5e:8f:57:eb:d3:21: ++ 59:fd:39:37:42:30:be:50:ea:b6:0f:a9:88:d8:2e: ++ 2d:69:21:e7:d1:37:18:4e:7d:91:d5:16:5f:6b:5b: ++ 00:c2:39:43:0d:36:85:52:b9:53:65:0f:1d:42:e5: ++ 8f:cf:05:d3:ee:dc:0c:1a:d9:b8:8b:78:22:67:e4: ++ 69:b0:68:c5:3c:e4:6c:5a:46:e7:cd:c7:fa:ef:c4: ++ ec:4b:bd:6a:a4:ac:fd:cc:28:51:ef:92:b4:29:ab: ++ ab:35:9a:4c:e4:c4:08:c6:26:cc:f8:69:9f:e4:9c: ++ f0:29:d3:5c:f9:c6:16:25:9e:23:c3:20:c1:3d:0f: ++ 3f:38:40:b0:fe:82:44:38:aa:5a:1a:8a:6b:63:58: ++ 38:b4:15:d3:b6:11:69:7b:1e:54:ee:8c:1a:22:ac: ++ 72:97:3f:23:59:9b:c9:22:84:c1:07:4f:cc:7f:e2: ++ 57:ca:12:70:bb:a6:65:f3:69:75:63:bd:95:fb:1b: ++ 97:cd:e4:a8:af:f6:d1:4e:a8:d9:8a:71:24:cd:36: ++ 3d:bc:96:c4:f1:6c:a9:ae:e5:cf:0d:6e:28:0d:b0: ++ 0e:b5:ca:51:7b:78:14:c3:20:2f:7f:fb:14:55:e1: ++ 11:99:fd:d5:0a:a1:9e:02:e3:62:5f:eb:35:4b:2c: ++ b8:72:e8:3e:3d:4f:ac:2c:bb:2e:86:e2:a3:76:8f: ++ e5:93:2a:cf:a5:ab:c8:5c:8d:4b:06:ff:12:46:ac: ++ 78:cb:14:07:35:e0:a9:df:8b:e9:af:15:4f:16:89: ++ 5b:bd:f6:8d:c6:59:ae:88:85:0e:c1:89:eb:1f:67: ++ c5:45:8e:ff:6d:37:36:2b:78:66:83:91:51:2b:3d: ++ ff:51:77:76:62:a1:ec:67:3e:3e:81:83:e0:56:a9: ++ 50:1f:1f:7a:99:ab:63:bf:84:17:77:f1:0d:3b:df: ++ f7:9c:61:b3:35:98:8a:3a:b2:ec:3c:1a:37:3f:7e: ++ 8f:92:cf:d9:12:14:64:da:10:02:15:41:ff:4f:c4: ++ eb:1c:a3:c9:fa:99:f7:46:e9:e1:18:d9:b1:b8:32: ++ 2d:cb:14:0c:50:d8:83:65:83:ee:b9:5c:cf:cb:05: ++ 5a:4c:fa:19:97:6b:d6:5d:13:d3:c2:5c:54:bc:32: ++ 73:a0:78:f5:f1:6d:1e:cb:9f:a5:a6:9f:22:dc:d1: ++ 51:9e:82:79:64:60:29:13:3e:a3:fd:4f:72:6a:ab: ++ e2:d4:e5:b8:24:55:2c:44:4b:8a:88:44:9c:ca:84: ++ d3:2a:3b ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ 82:21:2D:66:C6:D7:A0:E0:15:EB:CE:4C:09:77:C4:60:9E:54:6E:03 ++ Signature Algorithm: sha256WithRSAEncryption ++ 60:de:1a:b8:e7:f2:60:82:d5:03:33:81:cb:06:8a:f1:22:49: ++ e9:e8:ea:91:7f:c6:33:5e:68:19:03:86:3b:43:01:cf:07:70: ++ e4:08:1e:65:85:91:e6:11:22:b7:f5:02:23:8e:ae:b9:1e:7d: ++ 1f:7e:6c:e6:bd:25:d5:95:1a:f2:05:a6:af:85:02:6f:ae:f8: ++ d6:31:ff:25:c9:4a:c8:c7:8a:a9:d9:9f:4b:49:9b:11:57:99: ++ 92:43:11:de:b6:33:a4:cc:d7:8d:64:7d:d4:cd:3c:28:2c:b4: ++ 9a:96:ea:4d:f5:c4:44:c4:25:aa:20:80:d8:29:55:f7:e0:41: ++ fc:06:26:ff:b9:36:f5:43:14:03:66:78:e1:11:b1:da:20:5f: ++ 46:00:78:00:21:a5:1e:00:28:61:78:6f:a8:01:01:8f:9d:34: ++ 9a:ff:f4:38:90:fb:b8:d1:b3:72:06:c9:71:e6:81:c5:79:ed: ++ 0b:a6:79:f2:13:0b:9c:f7:5d:0e:7b:24:93:b4:48:db:86:5f: ++ de:50:86:78:e7:40:e6:31:a8:90:76:70:61:af:9c:37:2c:11: ++ b5:82:b7:aa:ae:24:34:5b:72:0c:69:0d:cd:59:9f:f6:71:af: ++ 9c:0b:d1:0a:38:f9:06:22:83:53:25:0c:fc:51:c4:e6:be:e2: ++ 39:95:0b:24:ad:af:d1:95:e4:96:d7:74:64:6b:71:4e:02:3c: ++ aa:85:f3:20:a3:43:39:76:5b:6c:50:fe:9a:9c:14:1e:65:14: ++ 8a:15:bd:a3:82:45:5a:49:56:6a:d2:9c:b1:63:32:e5:61:e0: ++ 53:22:0e:a7:0a:49:ea:cb:7e:1f:a8:e2:62:80:f6:10:45:52: ++ 98:06:18:de:a5:cd:2f:7f:aa:d4:e9:3e:08:72:ec:23:03:02: ++ 3c:a6:aa:d8:bc:67:74:3d:14:17:fb:54:4b:17:e3:d3:79:3d: ++ 6d:6b:49:c9:28:0e:2e:74:50:bf:0c:d9:46:3a:10:86:c9:a7: ++ 3f:e9:a0:ec:7f:eb:a5:77:58:69:71:e6:83:0a:37:f2:86:49: ++ 6a:be:79:08:90:f6:02:16:64:3e:e5:da:4c:7e:0c:34:c9:f9: ++ 5f:b6:b3:28:51:a7:a7:2b:aa:49:fa:8d:65:29:4e:e3:6b:13: ++ a7:94:a3:2d:51:6d:78:0c:44:cb:df:de:08:6f:ce:a3:64:ab: ++ d3:95:84:d4:b9:52:54:72:7b:96:25:cc:bc:69:e3:48:6e:0d: ++ d0:c7:9d:27:9a:aa:f8:13:92:dd:1e:df:63:9f:35:a9:16:36: ++ ec:8c:b8:83:f4:3d:89:8f:cd:b4:17:5e:d7:b3:17:41:10:5d: ++ 27:73:60:85:57:49:22:07 + -----BEGIN CERTIFICATE----- +-MIIDwzCCAqugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBgjELMAkGA1UEBhMCREUx +-KzApBgNVBAoMIlQtU3lzdGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAd +-BgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBDZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNl +-YyBHbG9iYWxSb290IENsYXNzIDMwHhcNMDgxMDAxMTAyOTU2WhcNMzMxMDAxMjM1 +-OTU5WjCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoMIlQtU3lzdGVtcyBFbnRlcnBy +-aXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBDZW50 +-ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDMwggEiMA0G +-CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9dZPwYiJvJK7genasfb3ZJNW4t/zN +-8ELg63iIVl6bmlQdTQyK9tPPcPRStdiTBONGhnFBSivwKixVA9ZIw+A5OO3yXDw/ +-RLyTPWGrTs0NvvAgJ1gORH8EGoel15YUNpDQSXuhdfsaa3Ox+M6pCSzyU9XDFES4 +-hqX2iys52qMzVNn6chr3IhUciJFrf2blw2qAsCTz34ZFiP0Zf3WHHx+xGwpzJFu5 +-ZeAsVMhg02YXP+HMVDNzkQI6pn97djmiH5a2OK61yJN0HZ65tOVgnS9W0eDrXltM +-EnAMbEQgqxHY9Bn20pxSN+f6tsIxO0rUFJmtxxr1XV/6B7h8DR/Wgx6zAgMBAAGj +-QjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS1 +-A/d2O2GCahKqGFPrAyGUv/7OyjANBgkqhkiG9w0BAQsFAAOCAQEAVj3vlNW92nOy +-WL6ukK2YJ5f+AbGwUgC4TeQbIXQbfsDuXmkqJa9c1h3a0nnJ85cp4IaH3gRZD/FZ +-1GSFS5mvJQQeyUapl96Cshtwn5z2r3Ex3XsFpSzTucpH9sry9uetuUg/vBa3wW30 +-6gmv7PO15wWeph6KU1HWk4HMdJP2udqmJQV0eVp+QD6CSyYRMG7hP0HHRwA11fXT +-91Q+gT3aSWqas+8QPebrb9HIIkfLzM8BMZLZGOMivgkeGj5asuRrDFR6fUNOuIml +-e9eiPZaGzPImNC1qkp2aGtAw4l1OBLBfiyB+d8E9lYLRRpo7PHi4b6HQDWSieB4p +-TpPDpFQUWw== ++MIIFRzCCAy+gAwIBAgIJEQA0tk7GNi02MA0GCSqGSIb3DQEBCwUAMEExCzAJBgNV ++BAYTAlJPMRQwEgYDVQQKEwtDRVJUU0lHTiBTQTEcMBoGA1UECxMTY2VydFNJR04g ++Uk9PVCBDQSBHMjAeFw0xNzAyMDYwOTI3MzVaFw00MjAyMDYwOTI3MzVaMEExCzAJ ++BgNVBAYTAlJPMRQwEgYDVQQKEwtDRVJUU0lHTiBTQTEcMBoGA1UECxMTY2VydFNJ ++R04gUk9PVCBDQSBHMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMDF ++dRmRfUR0dIf+DjuW3NgBFszuY5HnC2/OOwppGnzC46+CjobXXo9X69MhWf05N0Iw ++vlDqtg+piNguLWkh59E3GE59kdUWX2tbAMI5Qw02hVK5U2UPHULlj88F0+7cDBrZ ++uIt4ImfkabBoxTzkbFpG583H+u/E7Eu9aqSs/cwoUe+StCmrqzWaTOTECMYmzPhp ++n+Sc8CnTXPnGFiWeI8MgwT0PPzhAsP6CRDiqWhqKa2NYOLQV07YRaXseVO6MGiKs ++cpc/I1mbySKEwQdPzH/iV8oScLumZfNpdWO9lfsbl83kqK/20U6o2YpxJM02PbyW ++xPFsqa7lzw1uKA2wDrXKUXt4FMMgL3/7FFXhEZn91QqhngLjYl/rNUssuHLoPj1P ++rCy7Lobio3aP5ZMqz6WryFyNSwb/EkaseMsUBzXgqd+L6a8VTxaJW732jcZZroiF ++DsGJ6x9nxUWO/203Nit4ZoORUSs9/1F3dmKh7Gc+PoGD4FapUB8fepmrY7+EF3fx ++DTvf95xhszWYijqy7DwaNz9+j5LP2RIUZNoQAhVB/0/E6xyjyfqZ90bp4RjZsbgy ++LcsUDFDYg2WD7rlcz8sFWkz6GZdr1l0T08JcVLwyc6B49fFtHsufpaafItzRUZ6C ++eWRgKRM+o/1Pcmqr4tTluCRVLERLiohEnMqE0yo7AgMBAAGjQjBAMA8GA1UdEwEB ++/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBSCIS1mxteg4BXrzkwJ ++d8RgnlRuAzANBgkqhkiG9w0BAQsFAAOCAgEAYN4auOfyYILVAzOBywaK8SJJ6ejq ++kX/GM15oGQOGO0MBzwdw5AgeZYWR5hEit/UCI46uuR59H35s5r0l1ZUa8gWmr4UC ++b6741jH/JclKyMeKqdmfS0mbEVeZkkMR3rYzpMzXjWR91M08KCy0mpbqTfXERMQl ++qiCA2ClV9+BB/AYm/7k29UMUA2Z44RGx2iBfRgB4ACGlHgAoYXhvqAEBj500mv/0 ++OJD7uNGzcgbJceaBxXntC6Z58hMLnPddDnskk7RI24Zf3lCGeOdA5jGokHZwYa+c ++NywRtYK3qq4kNFtyDGkNzVmf9nGvnAvRCjj5BiKDUyUM/FHE5r7iOZULJK2v0ZXk ++ltd0ZGtxTgI8qoXzIKNDOXZbbFD+mpwUHmUUihW9o4JFWklWatKcsWMy5WHgUyIO ++pwpJ6st+H6jiYoD2EEVSmAYY3qXNL3+q1Ok+CHLsIwMCPKaq2LxndD0UF/tUSxfj ++03k9bWtJySgOLnRQvwzZRjoQhsmnP+mg7H/rpXdYaXHmgwo38oZJar55CJD2AhZk ++PuXaTH4MNMn5X7azKFGnpyuqSfqNZSlO42sTp5SjLVFteAxEy9/eCG/Oo2Sr05WE ++1LlSVHJ7liXMvGnjSG4N0MedJ5qq+BOS3R7fY581qRY27Iy4g/Q9iY/NtBde17MX ++QRBdJ3NghVdJIgc= + -----END CERTIFICATE----- + +-# Issuer: CN=D-TRUST Root Class 3 CA 2 2009 O=D-Trust GmbH +-# Subject: CN=D-TRUST Root Class 3 CA 2 2009 O=D-Trust GmbH +-# Label: "D-TRUST Root Class 3 CA 2 2009" +-# Serial: 623603 +-# MD5 Fingerprint: cd:e0:25:69:8d:47:ac:9c:89:35:90:f7:fd:51:3d:2f +-# SHA1 Fingerprint: 58:e8:ab:b0:36:15:33:fb:80:f7:9b:1b:6d:29:d3:ff:8d:5f:00:f0 +-# SHA256 Fingerprint: 49:e7:a4:42:ac:f0:ea:62:87:05:00:54:b5:25:64:b6:50:e4:f4:9e:42:e3:48:d6:aa:38:e0:39:e9:57:b1:c1 ++# eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 35210227249154 (0x200605167002) ++ Signature Algorithm: sha1WithRSAEncryption ++ Issuer: C = RO, O = certSIGN, OU = certSIGN ROOT CA ++ Validity ++ Not Before: Jul 4 17:20:04 2006 GMT ++ Not After : Jul 4 17:20:04 2031 GMT ++ Subject: C = RO, O = certSIGN, OU = certSIGN ROOT CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:b7:33:b9:7e:c8:25:4a:8e:b5:db:b4:28:1b:aa: ++ 57:90:e8:d1:22:d3:64:ba:d3:93:e8:d4:ac:86:61: ++ 40:6a:60:57:68:54:84:4d:bc:6a:54:02:05:ff:df: ++ 9b:9a:2a:ae:5d:07:8f:4a:c3:28:7f:ef:fb:2b:fa: ++ 79:f1:c7:ad:f0:10:53:24:90:8b:66:c9:a8:88:ab: ++ af:5a:a3:00:e9:be:ba:46:ee:5b:73:7b:2c:17:82: ++ 81:5e:62:2c:a1:02:65:b3:bd:c5:2b:00:7e:c4:fc: ++ 03:33:57:0d:ed:e2:fa:ce:5d:45:d6:38:cd:35:b6: ++ b2:c1:d0:9c:81:4a:aa:e4:b2:01:5c:1d:8f:5f:99: ++ c4:b1:ad:db:88:21:eb:90:08:82:80:f3:30:a3:43: ++ e6:90:82:ae:55:28:49:ed:5b:d7:a9:10:38:0e:fe: ++ 8f:4c:5b:9b:46:ea:41:f5:b0:08:74:c3:d0:88:33: ++ b6:7c:d7:74:df:dc:84:d1:43:0e:75:39:a1:25:40: ++ 28:ea:78:cb:0e:2c:2e:39:9d:8c:8b:6e:16:1c:2f: ++ 26:82:10:e2:e3:65:94:0a:04:c0:5e:f7:5d:5b:f8: ++ 10:e2:d0:ba:7a:4b:fb:de:37:00:00:1a:5b:28:e3: ++ d2:9c:73:3e:32:87:98:a1:c9:51:2f:d7:de:ac:33: ++ b3:4f ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Non Repudiation, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ E0:8C:9B:DB:25:49:B3:F1:7C:86:D6:B2:42:87:0B:D0:6B:A0:D9:E4 ++ Signature Algorithm: sha1WithRSAEncryption ++ 3e:d2:1c:89:2e:35:fc:f8:75:dd:e6:7f:65:88:f4:72:4c:c9: ++ 2c:d7:32:4e:f3:dd:19:79:47:bd:8e:3b:5b:93:0f:50:49:24: ++ 13:6b:14:06:72:ef:09:d3:a1:a1:e3:40:84:c9:e7:18:32:74: ++ 3c:48:6e:0f:9f:4b:d4:f7:1e:d3:93:86:64:54:97:63:72:50: ++ d5:55:cf:fa:20:93:02:a2:9b:c3:23:93:4e:16:55:76:a0:70: ++ 79:6d:cd:21:1f:cf:2f:2d:bc:19:e3:88:31:f8:59:1a:81:09: ++ c8:97:a6:74:c7:60:c4:5b:cc:57:8e:b2:75:fd:1b:02:09:db: ++ 59:6f:72:93:69:f7:31:41:d6:88:38:bf:87:b2:bd:16:79:f9: ++ aa:e4:be:88:25:dd:61:27:23:1c:b5:31:07:04:36:b4:1a:90: ++ bd:a0:74:71:50:89:6d:bc:14:e3:0f:86:ae:f1:ab:3e:c7:a0: ++ 09:cc:a3:48:d1:e0:db:64:e7:92:b5:cf:af:72:43:70:8b:f9: ++ c3:84:3c:13:aa:7e:92:9b:57:53:93:fa:70:c2:91:0e:31:f9: ++ 9b:67:5d:e9:96:38:5e:5f:b3:73:4e:88:15:67:de:9e:76:10: ++ 62:20:be:55:69:95:43:00:39:4d:f6:ee:b0:5a:4e:49:44:54: ++ 58:5f:42:83 ++-----BEGIN CERTIFICATE----- ++MIIDODCCAiCgAwIBAgIGIAYFFnACMA0GCSqGSIb3DQEBBQUAMDsxCzAJBgNVBAYT ++AlJPMREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBD ++QTAeFw0wNjA3MDQxNzIwMDRaFw0zMTA3MDQxNzIwMDRaMDsxCzAJBgNVBAYTAlJP ++MREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBDQTCC ++ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALczuX7IJUqOtdu0KBuqV5Do ++0SLTZLrTk+jUrIZhQGpgV2hUhE28alQCBf/fm5oqrl0Hj0rDKH/v+yv6efHHrfAQ ++UySQi2bJqIirr1qjAOm+ukbuW3N7LBeCgV5iLKECZbO9xSsAfsT8AzNXDe3i+s5d ++RdY4zTW2ssHQnIFKquSyAVwdj1+ZxLGt24gh65AIgoDzMKND5pCCrlUoSe1b16kQ ++OA7+j0xbm0bqQfWwCHTD0IgztnzXdN/chNFDDnU5oSVAKOp4yw4sLjmdjItuFhwv ++JoIQ4uNllAoEwF73XVv4EOLQunpL+943AAAaWyjj0pxzPjKHmKHJUS/X3qwzs08C ++AwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAcYwHQYDVR0O ++BBYEFOCMm9slSbPxfIbWskKHC9BroNnkMA0GCSqGSIb3DQEBBQUAA4IBAQA+0hyJ ++LjX8+HXd5n9liPRyTMks1zJO890ZeUe9jjtbkw9QSSQTaxQGcu8J06Gh40CEyecY ++MnQ8SG4Pn0vU9x7Tk4ZkVJdjclDVVc/6IJMCopvDI5NOFlV2oHB5bc0hH88vLbwZ ++44gx+FkagQnIl6Z0x2DEW8xXjrJ1/RsCCdtZb3KTafcxQdaIOL+Hsr0Wefmq5L6I ++Jd1hJyMctTEHBDa0GpC9oHRxUIltvBTjD4au8as+x6AJzKNI0eDbZOeStc+vckNw ++i/nDhDwTqn6Sm1dTk/pwwpEOMfmbZ13pljheX7NzTogVZ96edhBiIL5VaZVDADlN ++9u6wWk5JRFRYX0KD ++-----END CERTIFICATE----- ++ ++# 5cc3d78e4e1d5e45547a04e6873e64f90cf9536d1ccc2ef800f355c4c5fd70fd ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 407555286 (0x184accd6) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = CN, O = China Financial Certification Authority, CN = CFCA EV ROOT ++ Validity ++ Not Before: Aug 8 03:07:01 2012 GMT ++ Not After : Dec 31 03:07:01 2029 GMT ++ Subject: C = CN, O = China Financial Certification Authority, CN = CFCA EV ROOT ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:d7:5d:6b:cd:10:3f:1f:05:59:d5:05:4d:37:b1: ++ 0e:ec:98:2b:8e:15:1d:fa:93:4b:17:82:21:71:10: ++ 52:d7:51:64:70:16:c2:55:69:4d:8e:15:6d:9f:bf: ++ 0c:1b:c2:e0:a3:67:d6:0c:ac:cf:22:ae:af:77:54: ++ 2a:4b:4c:8a:53:52:7a:c3:ee:2e:de:b3:71:25:c1: ++ e9:5d:3d:ee:a1:2f:a3:f7:2a:3c:c9:23:1d:6a:ab: ++ 1d:a1:a7:f1:f3:ec:a0:d5:44:cf:15:cf:72:2f:1d: ++ 63:97:e8:99:f9:fd:93:a4:54:80:4c:52:d4:52:ab: ++ 2e:49:df:90:cd:b8:5f:be:3f:de:a1:ca:4d:20:d4: ++ 25:e8:84:29:53:b7:b1:88:1f:ff:fa:da:90:9f:0a: ++ a9:2d:41:3f:b1:f1:18:29:ee:16:59:2c:34:49:1a: ++ a8:06:d7:a8:88:d2:03:72:7a:32:e2:ea:68:4d:6e: ++ 2c:96:65:7b:ca:59:fa:f2:e2:dd:ee:30:2c:fb:cc: ++ 46:ac:c4:63:eb:6f:7f:36:2b:34:73:12:94:7f:df: ++ cc:26:9e:f1:72:5d:50:65:59:8f:69:b3:87:5e:32: ++ 6f:c3:18:8a:b5:95:8f:b0:7a:37:de:5a:45:3b:c7: ++ 36:e1:ef:67:d1:39:d3:97:5b:73:62:19:48:2d:87: ++ 1c:06:fb:74:98:20:49:73:f0:05:d2:1b:b1:a0:a3: ++ b7:1b:70:d3:88:69:b9:5a:d6:38:f4:62:dc:25:8b: ++ 78:bf:f8:e8:7e:b8:5c:c9:95:4f:5f:a7:2d:b9:20: ++ 6b:cf:6b:dd:f5:0d:f4:82:b7:f4:b2:66:2e:10:28: ++ f6:97:5a:7b:96:16:8f:01:19:2d:6c:6e:7f:39:58: ++ 06:64:83:01:83:83:c3:4d:92:dd:32:c6:87:a4:37: ++ e9:16:ce:aa:2d:68:af:0a:81:65:3a:70:c1:9b:ad: ++ 4d:6d:54:ca:2a:2d:4b:85:1b:b3:80:e6:70:45:0d: ++ 6b:5e:35:f0:7f:3b:b8:9c:e4:04:70:89:12:25:93: ++ da:0a:99:22:60:6a:63:60:4e:76:06:98:4e:bd:83: ++ ad:1d:58:8a:25:85:d2:c7:65:1e:2d:8e:c6:df:b6: ++ c6:e1:7f:8a:04:21:15:29:74:f0:3e:9c:90:9d:0c: ++ 2e:f1:8a:3e:5a:aa:0c:09:1e:c7:d5:3c:a3:ed:97: ++ c3:1e:34:fa:38:f9:08:0e:e3:c0:5d:2b:83:d1:56: ++ 6a:c9:b6:a8:54:53:2e:78:32:67:3d:82:7f:74:d0: ++ fb:e1:b6:05:60:b9:70:db:8e:0b:f9:13:58:6f:71: ++ 60:10:52:10:b9:c1:41:09:ef:72:1f:67:31:78:ff: ++ 96:05:8d ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Authority Key Identifier: ++ keyid:E3:FE:2D:FD:28:D0:0B:B5:BA:B6:A2:C4:BF:06:AA:05:8C:93:FB:2F ++ ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ E3:FE:2D:FD:28:D0:0B:B5:BA:B6:A2:C4:BF:06:AA:05:8C:93:FB:2F ++ Signature Algorithm: sha256WithRSAEncryption ++ 25:c6:ba:6b:eb:87:cb:de:82:39:96:3d:f0:44:a7:6b:84:73: ++ 03:de:9d:2b:4f:ba:20:7f:bc:78:b2:cf:97:b0:1b:9c:f3:d7: ++ 79:2e:f5:48:b6:d2:fb:17:88:e6:d3:7a:3f:ed:53:13:d0:e2: ++ 2f:6a:79:cb:00:23:28:e6:1e:37:57:35:89:84:c2:76:4f:34: ++ 36:ad:67:c3:ce:41:06:88:c5:f7:ee:d8:1a:b8:d6:0b:7f:50: ++ ff:93:aa:17:4b:8c:ec:ed:52:60:b2:a4:06:ea:4e:eb:f4:6b: ++ 19:fd:eb:f5:1a:e0:25:2a:9a:dc:c7:41:36:f7:c8:74:05:84: ++ 39:95:39:d6:0b:3b:a4:27:fa:08:d8:5c:1e:f8:04:60:52:11: ++ 28:28:03:ff:ef:53:66:00:a5:4a:34:16:66:7c:fd:09:a4:ae: ++ 9e:67:1a:6f:41:0b:6b:06:13:9b:8f:86:71:05:b4:2f:8d:89: ++ 66:33:29:76:54:9a:11:f8:27:fa:b2:3f:91:e0:ce:0d:1b:f3: ++ 30:1a:ad:bf:22:5d:1b:d3:bf:25:05:4d:e1:92:1a:7f:99:9f: ++ 3c:44:93:ca:d4:40:49:6c:80:87:d7:04:3a:c3:32:52:35:0e: ++ 56:f8:a5:dd:7d:c4:8b:0d:11:1f:53:cb:1e:b2:17:b6:68:77: ++ 5a:e0:d4:cb:c8:07:ae:f5:3a:2e:8e:37:b7:d0:01:4b:43:29: ++ 77:8c:39:97:8f:82:5a:f8:51:e5:89:a0:18:e7:68:7f:5d:0a: ++ 2e:fb:a3:47:0e:3d:a6:23:7a:c6:01:c7:8f:c8:5e:bf:6d:80: ++ 56:be:8a:24:ba:33:ea:9f:e1:32:11:9e:f1:d2:4f:80:f6:1b: ++ 40:af:38:9e:11:50:79:73:12:12:cd:e6:6c:9d:2c:88:72:3c: ++ 30:81:06:91:22:ea:59:ad:da:19:2e:22:c2:8d:b9:8c:87:e0: ++ 66:bc:73:23:5f:21:64:63:80:48:f5:a0:3c:18:3d:94:c8:48: ++ 41:1d:40:ba:5e:fe:fe:56:39:a1:c8:cf:5e:9e:19:64:46:10: ++ da:17:91:b7:05:80:ac:8b:99:92:7d:e7:a2:d8:07:0b:36:27: ++ e7:48:79:60:8a:c3:d7:13:5c:f8:72:40:df:4a:cb:cf:99:00: ++ 0a:00:0b:11:95:da:56:45:03:88:0a:9f:67:d0:d5:79:b1:a8: ++ 8d:40:6d:0d:c2:7a:40:fa:f3:5f:64:47:92:cb:53:b9:bb:59: ++ ce:4f:fd:d0:15:53:01:d8:df:eb:d9:e6:76:ef:d0:23:bb:3b: ++ a9:79:b3:d5:02:29:cd:89:a3:96:0f:4a:35:e7:4e:42:c0:75: ++ cd:07:cf:e6:2c:eb:7b:2e ++-----BEGIN CERTIFICATE----- ++MIIFjTCCA3WgAwIBAgIEGErM1jANBgkqhkiG9w0BAQsFADBWMQswCQYDVQQGEwJD ++TjEwMC4GA1UECgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmljYXRpb24gQXV0aG9y ++aXR5MRUwEwYDVQQDDAxDRkNBIEVWIFJPT1QwHhcNMTIwODA4MDMwNzAxWhcNMjkx ++MjMxMDMwNzAxWjBWMQswCQYDVQQGEwJDTjEwMC4GA1UECgwnQ2hpbmEgRmluYW5j ++aWFsIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRUwEwYDVQQDDAxDRkNBIEVWIFJP ++T1QwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDXXWvNED8fBVnVBU03 ++sQ7smCuOFR36k0sXgiFxEFLXUWRwFsJVaU2OFW2fvwwbwuCjZ9YMrM8irq93VCpL ++TIpTUnrD7i7es3ElweldPe6hL6P3KjzJIx1qqx2hp/Hz7KDVRM8Vz3IvHWOX6Jn5 ++/ZOkVIBMUtRSqy5J35DNuF++P96hyk0g1CXohClTt7GIH//62pCfCqktQT+x8Rgp ++7hZZLDRJGqgG16iI0gNyejLi6mhNbiyWZXvKWfry4t3uMCz7zEasxGPrb382KzRz ++EpR/38wmnvFyXVBlWY9ps4deMm/DGIq1lY+wejfeWkU7xzbh72fROdOXW3NiGUgt ++hxwG+3SYIElz8AXSG7Ggo7cbcNOIabla1jj0Ytwli3i/+Oh+uFzJlU9fpy25IGvP ++a931DfSCt/SyZi4QKPaXWnuWFo8BGS1sbn85WAZkgwGDg8NNkt0yxoekN+kWzqot ++aK8KgWU6cMGbrU1tVMoqLUuFG7OA5nBFDWteNfB/O7ic5ARwiRIlk9oKmSJgamNg ++TnYGmE69g60dWIolhdLHZR4tjsbftsbhf4oEIRUpdPA+nJCdDC7xij5aqgwJHsfV ++PKPtl8MeNPo4+QgO48BdK4PRVmrJtqhUUy54Mmc9gn900PvhtgVguXDbjgv5E1hv ++cWAQUhC5wUEJ73IfZzF4/5YFjQIDAQABo2MwYTAfBgNVHSMEGDAWgBTj/i39KNAL ++tbq2osS/BqoFjJP7LzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAd ++BgNVHQ4EFgQU4/4t/SjQC7W6tqLEvwaqBYyT+y8wDQYJKoZIhvcNAQELBQADggIB ++ACXGumvrh8vegjmWPfBEp2uEcwPenStPuiB/vHiyz5ewG5zz13ku9Ui20vsXiObT ++ej/tUxPQ4i9qecsAIyjmHjdXNYmEwnZPNDatZ8POQQaIxffu2Bq41gt/UP+TqhdL ++jOztUmCypAbqTuv0axn96/Ua4CUqmtzHQTb3yHQFhDmVOdYLO6Qn+gjYXB74BGBS ++ESgoA//vU2YApUo0FmZ8/Qmkrp5nGm9BC2sGE5uPhnEFtC+NiWYzKXZUmhH4J/qy ++P5Hgzg0b8zAarb8iXRvTvyUFTeGSGn+ZnzxEk8rUQElsgIfXBDrDMlI1Dlb4pd19 ++xIsNER9Tyx6yF7Zod1rg1MvIB671Oi6ON7fQAUtDKXeMOZePglr4UeWJoBjnaH9d ++Ci77o0cOPaYjesYBx4/IXr9tgFa+iiS6M+qf4TIRnvHST4D2G0CvOJ4RUHlzEhLN ++5mydLIhyPDCBBpEi6lmt2hkuIsKNuYyH4Ga8cyNfIWRjgEj1oDwYPZTISEEdQLpe ++/v5WOaHIz16eGWRGENoXkbcFgKyLmZJ956LYBws2J+dIeWCKw9cTXPhyQN9Ky8+Z ++AAoACxGV2lZFA4gKn2fQ1XmxqI1AbQ3CekD6819kR5LLU7m7Wc5P/dAVUwHY3+vZ ++5nbv0CO7O6l5s9UCKc2Jo5YPSjXnTkLAdc0Hz+Ys63su ++-----END CERTIFICATE----- ++ ++# c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 15:c8:bd:65:47:5c:af:b8:97:00:5e:e4:06:d2:bc:9d ++ Signature Algorithm: sha1WithRSAEncryption ++ Issuer: C = TW, O = "Chunghwa Telecom Co., Ltd.", OU = ePKI Root Certification Authority ++ Validity ++ Not Before: Dec 20 02:31:27 2004 GMT ++ Not After : Dec 20 02:31:27 2034 GMT ++ Subject: C = TW, O = "Chunghwa Telecom Co., Ltd.", OU = ePKI Root Certification Authority ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:e1:25:0f:ee:8d:db:88:33:75:67:cd:ad:1f:7d: ++ 3a:4e:6d:9d:d3:2f:14:f3:63:74:cb:01:21:6a:37: ++ ea:84:50:07:4b:26:5b:09:43:6c:21:9e:6a:c8:d5: ++ 03:f5:60:69:8f:cc:f0:22:e4:1f:e7:f7:6a:22:31: ++ b7:2c:15:f2:e0:fe:00:6a:43:ff:87:65:c6:b5:1a: ++ c1:a7:4c:6d:22:70:21:8a:31:f2:97:74:89:09:12: ++ 26:1c:9e:ca:d9:12:a2:95:3c:da:e9:67:bf:08:a0: ++ 64:e3:d6:42:b7:45:ef:97:f4:f6:f5:d7:b5:4a:15: ++ 02:58:7d:98:58:4b:60:bc:cd:d7:0d:9a:13:33:53: ++ d1:61:f9:7a:d5:d7:78:b3:9a:33:f7:00:86:ce:1d: ++ 4d:94:38:af:a8:ec:78:51:70:8a:5c:10:83:51:21: ++ f7:11:3d:34:86:5e:e5:48:cd:97:81:82:35:4c:19: ++ ec:65:f6:6b:c5:05:a1:ee:47:13:d6:b3:21:27:94: ++ 10:0a:d9:24:3b:ba:be:44:13:46:30:3f:97:3c:d8: ++ d7:d7:6a:ee:3b:38:e3:2b:d4:97:0e:b9:1b:e7:07: ++ 49:7f:37:2a:f9:77:78:cf:54:ed:5b:46:9d:a3:80: ++ 0e:91:43:c1:d6:5b:5f:14:ba:9f:a6:8d:24:47:40: ++ 59:bf:72:38:b2:36:6c:37:ff:99:d1:5d:0e:59:0a: ++ ab:69:f7:c0:b2:04:45:7a:54:00:ae:be:53:f6:b5: ++ e7:e1:f8:3c:a3:31:d2:a9:fe:21:52:64:c5:a6:67: ++ f0:75:07:06:94:14:81:55:c6:27:e4:01:8f:17:c1: ++ 6a:71:d7:be:4b:fb:94:58:7d:7e:11:33:b1:42:f7: ++ 62:6c:18:d6:cf:09:68:3e:7f:6c:f6:1e:8f:62:ad: ++ a5:63:db:09:a7:1f:22:42:41:1e:6f:99:8a:3e:d7: ++ f9:3f:40:7a:79:b0:a5:01:92:d2:9d:3d:08:15:a5: ++ 10:01:2d:b3:32:76:a8:95:0d:b3:7a:9a:fb:07:10: ++ 78:11:6f:e1:8f:c7:ba:0f:25:1a:74:2a:e5:1c:98: ++ 41:99:df:21:87:e8:95:06:6a:0a:b3:6a:47:76:65: ++ f6:3a:cf:8f:62:17:19:7b:0a:28:cd:1a:d2:83:1e: ++ 21:c7:2c:bf:be:ff:61:68:b7:67:1b:bb:78:4d:8d: ++ ce:67:e5:e4:c1:8e:b7:23:66:e2:9d:90:75:34:98: ++ a9:36:2b:8a:9a:94:b9:9d:ec:cc:8a:b1:f8:25:89: ++ 5c:5a:b6:2f:8c:1f:6d:79:24:a7:52:68:c3:84:35: ++ e2:66:8d:63:0e:25:4d:d5:19:b2:e6:79:37:a7:22: ++ 9d:54:31 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 1E:0C:F7:B6:67:F2:E1:92:26:09:45:C0:55:39:2E:77:3F:42:4A:A2 ++ X509v3 Basic Constraints: ++ CA:TRUE ++ setCext-hashedRoot: ++ 0/0-...0...+......0...g*.....E... ++V|.[x....S..... ++ Signature Algorithm: sha1WithRSAEncryption ++ 09:b3:83:53:59:01:3e:95:49:b9:f1:81:ba:f9:76:20:23:b5: ++ 27:60:74:d4:6a:99:34:5e:6c:00:53:d9:9f:f2:a6:b1:24:07: ++ 44:6a:2a:c6:a5:8e:78:12:e8:47:d9:58:1b:13:2a:5e:79:9b: ++ 9f:0a:2a:67:a6:25:3f:06:69:56:73:c3:8a:66:48:fb:29:81: ++ 57:74:06:ca:9c:ea:28:e8:38:67:26:2b:f1:d5:b5:3f:65:93: ++ f8:36:5d:8e:8d:8d:40:20:87:19:ea:ef:27:c0:3d:b4:39:0f: ++ 25:7b:68:50:74:55:9c:0c:59:7d:5a:3d:41:94:25:52:08:e0: ++ 47:2c:15:31:19:d5:bf:07:55:c6:bb:12:b5:97:f4:5f:83:85: ++ ba:71:c1:d9:6c:81:11:76:0a:0a:b0:bf:82:97:f7:ea:3d:fa: ++ fa:ec:2d:a9:28:94:3b:56:dd:d2:51:2e:ae:c0:bd:08:15:8c: ++ 77:52:34:96:d6:9b:ac:d3:1d:8e:61:0f:35:7b:9b:ae:39:69: ++ 0b:62:60:40:20:36:8f:af:fb:36:ee:2d:08:4a:1d:b8:bf:9b: ++ 5c:f8:ea:a5:1b:a0:73:a6:d8:f8:6e:e0:33:04:5f:68:aa:27: ++ 87:ed:d9:c1:90:9c:ed:bd:e3:6a:35:af:63:df:ab:18:d9:ba: ++ e6:e9:4a:ea:50:8a:0f:61:93:1e:e2:2d:19:e2:30:94:35:92: ++ 5d:0e:b6:07:af:19:80:8f:47:90:51:4b:2e:4d:dd:85:e2:d2: ++ 0a:52:0a:17:9a:fc:1a:b0:50:02:e5:01:a3:63:37:21:4c:44: ++ c4:9b:51:99:11:0e:73:9c:06:8f:54:2e:a7:28:5e:44:39:87: ++ 56:2d:37:bd:85:44:94:e1:0c:4b:2c:9c:c3:92:85:34:61:cb: ++ 0f:b8:9b:4a:43:52:fe:34:3a:7d:b8:e9:29:dc:76:a9:c8:30: ++ f8:14:71:80:c6:1e:36:48:74:22:41:5c:87:82:e8:18:71:8b: ++ 41:89:44:e7:7e:58:5b:a8:b8:8d:13:e9:a7:6c:c3:47:ed:b3: ++ 1a:9d:62:ae:8d:82:ea:94:9e:dd:59:10:c3:ad:dd:e2:4d:e3: ++ 31:d5:c7:ec:e8:f2:b0:fe:92:1e:16:0a:1a:fc:d9:f3:f8:27: ++ b6:c9:be:1d:b4:6c:64:90:7f:f4:e4:c4:5b:d7:37:ae:42:0e: ++ dd:a4:1a:6f:7c:88:54:c5:16:6e:e1:7a:68:2e:f8:3a:bf:0d: ++ a4:3c:89:3b:78:a7:4e:63:83:04:21:08:67:8d:f2:82:49:d0: ++ 5b:fd:b1:cd:0f:83:84:d4:3e:20:85:f7:4a:3d:2b:9c:fd:2a: ++ 0a:09:4d:ea:81:f8:11:9c ++-----BEGIN CERTIFICATE----- ++MIIFsDCCA5igAwIBAgIQFci9ZUdcr7iXAF7kBtK8nTANBgkqhkiG9w0BAQUFADBe ++MQswCQYDVQQGEwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0 ++ZC4xKjAoBgNVBAsMIWVQS0kgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe ++Fw0wNDEyMjAwMjMxMjdaFw0zNDEyMjAwMjMxMjdaMF4xCzAJBgNVBAYTAlRXMSMw ++IQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwgTHRkLjEqMCgGA1UECwwhZVBL ++SSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEF ++AAOCAg8AMIICCgKCAgEA4SUP7o3biDN1Z82tH306Tm2d0y8U82N0ywEhajfqhFAH ++SyZbCUNsIZ5qyNUD9WBpj8zwIuQf5/dqIjG3LBXy4P4AakP/h2XGtRrBp0xtInAh ++ijHyl3SJCRImHJ7K2RKilTza6We/CKBk49ZCt0Xvl/T29de1ShUCWH2YWEtgvM3X ++DZoTM1PRYfl61dd4s5oz9wCGzh1NlDivqOx4UXCKXBCDUSH3ET00hl7lSM2XgYI1 ++TBnsZfZrxQWh7kcT1rMhJ5QQCtkkO7q+RBNGMD+XPNjX12ruOzjjK9SXDrkb5wdJ ++fzcq+Xd4z1TtW0ado4AOkUPB1ltfFLqfpo0kR0BZv3I4sjZsN/+Z0V0OWQqraffA ++sgRFelQArr5T9rXn4fg8ozHSqf4hUmTFpmfwdQcGlBSBVcYn5AGPF8Fqcde+S/uU ++WH1+ETOxQvdibBjWzwloPn9s9h6PYq2lY9sJpx8iQkEeb5mKPtf5P0B6ebClAZLS ++nT0IFaUQAS2zMnaolQ2zepr7BxB4EW/hj8e6DyUadCrlHJhBmd8hh+iVBmoKs2pH ++dmX2Os+PYhcZewoozRrSgx4hxyy/vv9haLdnG7t4TY3OZ+XkwY63I2binZB1NJip ++NiuKmpS5nezMirH4JYlcWrYvjB9teSSnUmjDhDXiZo1jDiVN1Rmy5nk3pyKdVDEC ++AwEAAaNqMGgwHQYDVR0OBBYEFB4M97Zn8uGSJglFwFU5Lnc/QkqiMAwGA1UdEwQF ++MAMBAf8wOQYEZyoHAAQxMC8wLQIBADAJBgUrDgMCGgUAMAcGBWcqAwAABBRFsMLH ++ClZ87lt4DJX5GFPBphzYEDANBgkqhkiG9w0BAQUFAAOCAgEACbODU1kBPpVJufGB ++uvl2ICO1J2B01GqZNF5sAFPZn/KmsSQHRGoqxqWOeBLoR9lYGxMqXnmbnwoqZ6Yl ++PwZpVnPDimZI+ymBV3QGypzqKOg4ZyYr8dW1P2WT+DZdjo2NQCCHGervJ8A9tDkP ++JXtoUHRVnAxZfVo9QZQlUgjgRywVMRnVvwdVxrsStZf0X4OFunHB2WyBEXYKCrC/ ++gpf36j36+uwtqSiUO1bd0lEursC9CBWMd1I0ltabrNMdjmEPNXubrjlpC2JgQCA2 ++j6/7Nu4tCEoduL+bXPjqpRugc6bY+G7gMwRfaKonh+3ZwZCc7b3jajWvY9+rGNm6 ++5ulK6lCKD2GTHuItGeIwlDWSXQ62B68ZgI9HkFFLLk3dheLSClIKF5r8GrBQAuUB ++o2M3IUxExJtRmREOc5wGj1QupyheRDmHVi03vYVElOEMSyycw5KFNGHLD7ibSkNS ++/jQ6fbjpKdx2qcgw+BRxgMYeNkh0IkFch4LoGHGLQYlE535YW6i4jRPpp2zDR+2z ++Gp1iro2C6pSe3VkQw63d4k3jMdXH7OjysP6SHhYKGvzZ8/gntsm+HbRsZJB/9OTE ++W9c3rkIO3aQab3yIVMUWbuF6aC74Or8NpDyJO3inTmODBCEIZ43ygknQW/2xzQ+D ++hNQ+IIX3Sj0rnP0qCglN6oH4EZw= ++-----END CERTIFICATE----- ++ ++# 49e7a442acf0ea6287050054b52564b650e4f49e42e348d6aa38e039e957b1c1 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 623603 (0x983f3) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = DE, O = D-Trust GmbH, CN = D-TRUST Root Class 3 CA 2 2009 ++ Validity ++ Not Before: Nov 5 08:35:58 2009 GMT ++ Not After : Nov 5 08:35:58 2029 GMT ++ Subject: C = DE, O = D-Trust GmbH, CN = D-TRUST Root Class 3 CA 2 2009 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:d3:b2:4a:cf:7a:47:ef:75:9b:23:fa:3a:2f:d6: ++ 50:45:89:35:3a:c6:6b:db:fe:db:00:68:a8:e0:03: ++ 11:1d:37:50:08:9f:4d:4a:68:94:35:b3:53:d1:94: ++ 63:a7:20:56:af:de:51:78:ec:2a:3d:f3:48:48:50: ++ 3e:0a:df:46:55:8b:27:6d:c3:10:4d:0d:91:52:43: ++ d8:87:e0:5d:4e:36:b5:21:ca:5f:39:40:04:5f:5b: ++ 7e:cc:a3:c6:2b:a9:40:1e:d9:36:84:d6:48:f3:92: ++ 1e:34:46:20:24:c1:a4:51:8e:4a:1a:ef:50:3f:69: ++ 5d:19:7f:45:c3:c7:01:8f:51:c9:23:e8:72:ae:b4: ++ bc:56:09:7f:12:cb:1c:b1:af:29:90:0a:c9:55:cc: ++ 0f:d3:b4:1a:ed:47:35:5a:4a:ed:9c:73:04:21:d0: ++ aa:bd:0c:13:b5:00:ca:26:6c:c4:6b:0c:94:5a:95: ++ 94:da:50:9a:f1:ff:a5:2b:66:31:a4:c9:38:a0:df: ++ 1d:1f:b8:09:2e:f3:a7:e8:67:52:ab:95:1f:e0:46: ++ 3e:d8:a4:c3:ca:5a:c5:31:80:e8:48:9a:9f:94:69: ++ fe:19:dd:d8:73:7c:81:ca:96:de:8e:ed:b3:32:05: ++ 65:84:34:e6:e6:fd:57:10:b5:5f:76:bf:2f:b0:10: ++ 0d:c5 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ FD:DA:14:C4:9F:30:DE:21:BD:1E:42:39:FC:AB:63:23:49:E0:F1:84 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 CRL Distribution Points: ++ ++ Full Name: ++ URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist ++ ++ Full Name: ++ URI:http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl ++ ++ Signature Algorithm: sha256WithRSAEncryption ++ 7f:97:db:30:c8:df:a4:9c:7d:21:7a:80:70:ce:14:12:69:88: ++ 14:95:60:44:01:ac:b2:e9:30:4f:9b:50:c2:66:d8:7e:8d:30: ++ b5:70:31:e9:e2:69:c7:f3:70:db:20:15:86:d0:0d:f0:be:ac: ++ 01:75:84:ce:7e:9f:4d:bf:b7:60:3b:9c:f3:ca:1d:e2:5e:68: ++ d8:a3:9d:97:e5:40:60:d2:36:21:fe:d0:b4:b8:17:da:74:a3: ++ 7f:d4:df:b0:98:02:ac:6f:6b:6b:2c:25:24:72:a1:65:ee:25: ++ 5a:e5:e6:32:e7:f2:df:ab:49:fa:f3:90:69:23:db:04:d9:e7: ++ 5c:58:fc:65:d4:97:be:cc:fc:2e:0a:cc:25:2a:35:04:f8:60: ++ 91:15:75:3d:41:ff:23:1f:19:c8:6c:eb:82:53:04:a6:e4:4c: ++ 22:4d:8d:8c:ba:ce:5b:73:ec:64:54:50:6d:d1:9c:55:fb:69: ++ c3:36:c3:8c:bc:3c:85:a6:6b:0a:26:0d:e0:93:98:60:ae:7e: ++ c6:24:97:8a:61:5f:91:8e:66:92:09:87:36:cd:8b:9b:2d:3e: ++ f6:51:d4:50:d4:59:28:bd:83:f2:cc:28:7b:53:86:6d:d8:26: ++ 88:70:d7:ea:91:cd:3e:b9:ca:c0:90:6e:5a:c6:5e:74:65:d7: ++ 5c:fe:a3:e2 + -----BEGIN CERTIFICATE----- + MIIEMzCCAxugAwIBAgIDCYPzMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAkRF + MRUwEwYDVQQKDAxELVRydXN0IEdtYkgxJzAlBgNVBAMMHkQtVFJVU1QgUm9vdCBD +@@ -1641,13 +1502,71 @@ PIWmawomDeCTmGCufsYkl4phX5GOZpIJhzbNi5stPvZR1FDUWSi9g/LMKHtThm3Y + Johw1+qRzT65ysCQblrGXnRl11z+o+I= + -----END CERTIFICATE----- + +-# Issuer: CN=D-TRUST Root Class 3 CA 2 EV 2009 O=D-Trust GmbH +-# Subject: CN=D-TRUST Root Class 3 CA 2 EV 2009 O=D-Trust GmbH +-# Label: "D-TRUST Root Class 3 CA 2 EV 2009" +-# Serial: 623604 +-# MD5 Fingerprint: aa:c6:43:2c:5e:2d:cd:c4:34:c0:50:4f:11:02:4f:b6 +-# SHA1 Fingerprint: 96:c9:1b:0b:95:b4:10:98:42:fa:d0:d8:22:79:fe:60:fa:b9:16:83 +-# SHA256 Fingerprint: ee:c5:49:6b:98:8c:e9:86:25:b9:34:09:2e:ec:29:08:be:d0:b0:f3:16:c2:d4:73:0c:84:ea:f1:f3:d3:48:81 ++# eec5496b988ce98625b934092eec2908bed0b0f316c2d4730c84eaf1f3d34881 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 623604 (0x983f4) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = DE, O = D-Trust GmbH, CN = D-TRUST Root Class 3 CA 2 EV 2009 ++ Validity ++ Not Before: Nov 5 08:50:46 2009 GMT ++ Not After : Nov 5 08:50:46 2029 GMT ++ Subject: C = DE, O = D-Trust GmbH, CN = D-TRUST Root Class 3 CA 2 EV 2009 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:99:f1:84:34:70:ba:2f:b7:30:a0:8e:bd:7c:04: ++ cf:be:62:bc:99:fd:82:97:d2:7a:0a:67:96:38:09: ++ f6:10:4e:95:22:73:99:8d:da:15:2d:e7:05:fc:19: ++ 73:22:b7:8e:98:00:bc:3c:3d:ac:a1:6c:fb:d6:79: ++ 25:4b:ad:f0:cc:64:da:88:3e:29:b8:0f:09:d3:34: ++ dd:33:f5:62:d1:e1:cd:19:e9:ee:18:4f:4c:58:ae: ++ e2:1e:d6:0c:5b:15:5a:d8:3a:b8:c4:18:64:1e:e3: ++ 33:b2:b5:89:77:4e:0c:bf:d9:94:6b:13:97:6f:12: ++ a3:fe:99:a9:04:cc:15:ec:60:68:36:ed:08:7b:b7: ++ f5:bf:93:ed:66:31:83:8c:c6:71:34:87:4e:17:ea: ++ af:8b:91:8d:1c:56:41:ae:22:37:5e:37:f2:1d:d9: ++ d1:2d:0d:2f:69:51:a7:be:66:a6:8a:3a:2a:bd:c7: ++ 1a:b1:e1:14:f0:be:3a:1d:b9:cf:5b:b1:6a:fe:b4: ++ b1:46:20:a2:fb:1e:3b:70:ef:93:98:7d:8c:73:96: ++ f2:c5:ef:85:70:ad:29:26:fc:1e:04:3e:1c:a0:d8: ++ 0f:cb:52:83:62:7c:ee:8b:53:95:90:a9:57:a2:ea: ++ 61:05:d8:f9:4d:c4:27:fa:6e:ad:ed:f9:d7:51:f7: ++ 6b:a5 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ D3:94:8A:4C:62:13:2A:19:2E:CC:AF:72:8A:7D:36:D7:9A:1C:DC:67 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 CRL Distribution Points: ++ ++ Full Name: ++ URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%20EV%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist ++ ++ Full Name: ++ URI:http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_ev_2009.crl ++ ++ Signature Algorithm: sha256WithRSAEncryption ++ 34:ed:7b:5a:3c:a4:94:88:ef:1a:11:75:07:2f:b3:fe:3c:fa: ++ 1e:51:26:eb:87:f6:29:de:e0:f1:d4:c6:24:09:e9:c1:cf:55: ++ 1b:b4:30:d9:ce:1a:fe:06:51:a6:15:a4:2d:ef:b2:4b:bf:20: ++ 28:25:49:d1:a6:36:77:34:e8:64:df:52:b1:11:c7:73:7a:cd: ++ 39:9e:c2:ad:8c:71:21:f2:5a:6b:af:df:3c:4e:55:af:b2:84: ++ 65:14:89:b9:77:cb:2a:31:be:cf:a3:6d:cf:6f:48:94:32:46: ++ 6f:e7:71:8c:a0:a6:84:19:37:07:f2:03:45:09:2b:86:75:7c: ++ df:5f:69:57:00:db:6e:d8:a6:72:22:4b:50:d4:75:98:56:df: ++ b7:18:ff:43:43:50:ae:7a:44:7b:f0:79:51:d7:43:3d:a7:d3: ++ 81:d3:f0:c9:4f:b9:da:c6:97:86:d0:82:c3:e4:42:6d:fe:b0: ++ e2:64:4e:0e:26:e7:40:34:26:b5:08:89:d7:08:63:63:38:27: ++ 75:1e:33:ea:6e:a8:dd:9f:99:4f:74:4d:81:89:80:4b:dd:9a: ++ 97:29:5c:2f:be:81:41:b9:8c:ff:ea:7d:60:06:9e:cd:d7:3d: ++ d3:2e:a3:15:bc:a8:e6:26:e5:6f:c3:dc:b8:03:21:ea:9f:16: ++ f1:2c:54:b5 + -----BEGIN CERTIFICATE----- + MIIEQzCCAyugAwIBAgIDCYP0MA0GCSqGSIb3DQEBCwUAMFAxCzAJBgNVBAYTAkRF + MRUwEwYDVQQKDAxELVRydXN0IEdtYkgxKjAoBgNVBAMMIUQtVFJVU1QgUm9vdCBD +@@ -1674,13 +1593,1133 @@ xpeG0ILD5EJt/rDiZE4OJudANCa1CInXCGNjOCd1HjPqbqjdn5lPdE2BiYBL3ZqX + KVwvvoFBuYz/6n1gBp7N1z3TLqMVvKjmJuVvw9y4AyHqnxbxLFS1 + -----END CERTIFICATE----- + +-# Issuer: CN=CA Disig Root R2 O=Disig a.s. +-# Subject: CN=CA Disig Root R2 O=Disig a.s. +-# Label: "CA Disig Root R2" +-# Serial: 10572350602393338211 +-# MD5 Fingerprint: 26:01:fb:d8:27:a7:17:9a:45:54:38:1a:43:01:3b:03 +-# SHA1 Fingerprint: b5:61:eb:ea:a4:de:e4:25:4b:69:1a:98:a5:57:47:c2:34:c7:d9:71 +-# SHA256 Fingerprint: e2:3d:4a:03:6d:7b:70:e9:f5:95:b1:42:20:79:d2:b9:1e:df:bb:1f:b6:51:a0:63:3e:aa:8a:9d:c5:f8:07:03 ++# 91e2f5788d5810eba7ba58737de1548a8ecacd014598bc0b143e041b17052552 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 1 (0x1) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 2 ++ Validity ++ Not Before: Oct 1 10:40:14 2008 GMT ++ Not After : Oct 1 23:59:59 2033 GMT ++ Subject: C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:aa:5f:da:1b:5f:e8:73:91:e5:da:5c:f4:a2:e6: ++ 47:e5:f3:68:55:60:05:1d:02:a4:b3:9b:59:f3:1e: ++ 8a:af:34:ad:fc:0d:c2:d9:48:19:ee:69:8f:c9:20: ++ fc:21:aa:07:19:ed:b0:5c:ac:65:c7:5f:ed:02:7c: ++ 7b:7c:2d:1b:d6:ba:b9:80:c2:18:82:16:84:fa:66: ++ b0:08:c6:54:23:81:e4:cd:b9:49:3f:f6:4f:6e:37: ++ 48:28:38:0f:c5:be:e7:68:70:fd:39:97:4d:d2:c7: ++ 98:91:50:aa:c4:44:b3:23:7d:39:47:e9:52:62:d6: ++ 12:93:5e:b7:31:96:42:05:fb:76:a7:1e:a3:f5:c2: ++ fc:e9:7a:c5:6c:a9:71:4f:ea:cb:78:bc:60:af:c7: ++ de:f4:d9:cb:be:7e:33:a5:6e:94:83:f0:34:fa:21: ++ ab:ea:8e:72:a0:3f:a4:de:30:5b:ef:86:4d:6a:95: ++ 5b:43:44:a8:10:15:1c:e5:01:57:c5:98:f1:e6:06: ++ 28:91:aa:20:c5:b7:53:26:51:43:b2:0b:11:95:58: ++ e1:c0:0f:76:d9:c0:8d:7c:81:f3:72:70:9e:6f:fe: ++ 1a:8e:d9:5f:35:c6:b2:6f:34:7c:be:48:4f:e2:5a: ++ 39:d7:d8:9d:78:9e:9f:86:3e:03:5e:19:8b:44:a2: ++ d5:c7 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ BF:59:20:36:00:79:A0:A0:22:6B:8C:D5:F2:61:D2:B8:2C:CB:82:4A ++ Signature Algorithm: sha256WithRSAEncryption ++ 31:03:a2:61:0b:1f:74:e8:72:36:c6:6d:f9:4d:9e:fa:22:a8: ++ e1:81:56:cf:cd:bb:9f:ea:ab:91:19:38:af:aa:7c:15:4d:f3: ++ b6:a3:8d:a5:f4:8e:f6:44:a9:a7:e8:21:95:ad:3e:00:62:16: ++ 88:f0:02:ba:fc:61:23:e6:33:9b:30:7a:6b:36:62:7b:ad:04: ++ 23:84:58:65:e2:db:2b:8a:e7:25:53:37:62:53:5f:bc:da:01: ++ 62:29:a2:a6:27:71:e6:3a:22:7e:c1:6f:1d:95:70:20:4a:07: ++ 34:df:ea:ff:15:80:e5:ba:d7:7a:d8:5b:75:7c:05:7a:29:47: ++ 7e:40:a8:31:13:77:cd:40:3b:b4:51:47:7a:2e:11:e3:47:11: ++ de:9d:66:d0:8b:d5:54:66:fa:83:55:ea:7c:c2:29:89:1b:e9: ++ 6f:b3:ce:e2:05:84:c9:2f:3e:78:85:62:6e:c9:5f:c1:78:63: ++ 74:58:c0:48:18:0c:99:39:eb:a4:cc:1a:b5:79:5a:8d:15:9c: ++ d8:14:0d:f6:7a:07:57:c7:22:83:05:2d:3c:9b:25:26:3d:18: ++ b3:a9:43:7c:c8:c8:ab:64:8f:0e:a3:bf:9c:1b:9d:30:db:da: ++ d0:19:2e:aa:3c:f1:fb:33:80:76:e4:cd:ad:19:4f:05:27:8e: ++ 13:a1:6e:c2 ++-----BEGIN CERTIFICATE----- ++MIIDwzCCAqugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBgjELMAkGA1UEBhMCREUx ++KzApBgNVBAoMIlQtU3lzdGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAd ++BgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBDZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNl ++YyBHbG9iYWxSb290IENsYXNzIDIwHhcNMDgxMDAxMTA0MDE0WhcNMzMxMDAxMjM1 ++OTU5WjCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoMIlQtU3lzdGVtcyBFbnRlcnBy ++aXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBDZW50 ++ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDIwggEiMA0G ++CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqX9obX+hzkeXaXPSi5kfl82hVYAUd ++AqSzm1nzHoqvNK38DcLZSBnuaY/JIPwhqgcZ7bBcrGXHX+0CfHt8LRvWurmAwhiC ++FoT6ZrAIxlQjgeTNuUk/9k9uN0goOA/FvudocP05l03Sx5iRUKrERLMjfTlH6VJi ++1hKTXrcxlkIF+3anHqP1wvzpesVsqXFP6st4vGCvx9702cu+fjOlbpSD8DT6Iavq ++jnKgP6TeMFvvhk1qlVtDRKgQFRzlAVfFmPHmBiiRqiDFt1MmUUOyCxGVWOHAD3bZ ++wI18gfNycJ5v/hqO2V81xrJvNHy+SE/iWjnX2J14np+GPgNeGYtEotXHAgMBAAGj ++QjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS/ ++WSA2AHmgoCJrjNXyYdK4LMuCSjANBgkqhkiG9w0BAQsFAAOCAQEAMQOiYQsfdOhy ++NsZt+U2e+iKo4YFWz827n+qrkRk4r6p8FU3ztqONpfSO9kSpp+ghla0+AGIWiPAC ++uvxhI+YzmzB6azZie60EI4RYZeLbK4rnJVM3YlNfvNoBYimipidx5joifsFvHZVw ++IEoHNN/q/xWA5brXethbdXwFeilHfkCoMRN3zUA7tFFHei4R40cR3p1m0IvVVGb6 ++g1XqfMIpiRvpb7PO4gWEyS8+eIVibslfwXhjdFjASBgMmTnrpMwatXlajRWc2BQN ++9noHV8cigwUtPJslJj0Ys6lDfMjIq2SPDqO/nBudMNva0Bkuqjzx+zOAduTNrRlP ++BSeOE6Fuwg== ++-----END CERTIFICATE----- ++ ++# fd73dad31c644ff1b43bef0ccdda96710b9cd9875eca7e31707af3e96d522bbd ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 1 (0x1) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 3 ++ Validity ++ Not Before: Oct 1 10:29:56 2008 GMT ++ Not After : Oct 1 23:59:59 2033 GMT ++ Subject: C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 3 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:bd:75:93:f0:62:22:6f:24:ae:e0:7a:76:ac:7d: ++ bd:d9:24:d5:b8:b7:fc:cd:f0:42:e0:eb:78:88:56: ++ 5e:9b:9a:54:1d:4d:0c:8a:f6:d3:cf:70:f4:52:b5: ++ d8:93:04:e3:46:86:71:41:4a:2b:f0:2a:2c:55:03: ++ d6:48:c3:e0:39:38:ed:f2:5c:3c:3f:44:bc:93:3d: ++ 61:ab:4e:cd:0d:be:f0:20:27:58:0e:44:7f:04:1a: ++ 87:a5:d7:96:14:36:90:d0:49:7b:a1:75:fb:1a:6b: ++ 73:b1:f8:ce:a9:09:2c:f2:53:d5:c3:14:44:b8:86: ++ a5:f6:8b:2b:39:da:a3:33:54:d9:fa:72:1a:f7:22: ++ 15:1c:88:91:6b:7f:66:e5:c3:6a:80:b0:24:f3:df: ++ 86:45:88:fd:19:7f:75:87:1f:1f:b1:1b:0a:73:24: ++ 5b:b9:65:e0:2c:54:c8:60:d3:66:17:3f:e1:cc:54: ++ 33:73:91:02:3a:a6:7f:7b:76:39:a2:1f:96:b6:38: ++ ae:b5:c8:93:74:1d:9e:b9:b4:e5:60:9d:2f:56:d1: ++ e0:eb:5e:5b:4c:12:70:0c:6c:44:20:ab:11:d8:f4: ++ 19:f6:d2:9c:52:37:e7:fa:b6:c2:31:3b:4a:d4:14: ++ 99:ad:c7:1a:f5:5d:5f:fa:07:b8:7c:0d:1f:d6:83: ++ 1e:b3 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ B5:03:F7:76:3B:61:82:6A:12:AA:18:53:EB:03:21:94:BF:FE:CE:CA ++ Signature Algorithm: sha256WithRSAEncryption ++ 56:3d:ef:94:d5:bd:da:73:b2:58:be:ae:90:ad:98:27:97:fe: ++ 01:b1:b0:52:00:b8:4d:e4:1b:21:74:1b:7e:c0:ee:5e:69:2a: ++ 25:af:5c:d6:1d:da:d2:79:c9:f3:97:29:e0:86:87:de:04:59: ++ 0f:f1:59:d4:64:85:4b:99:af:25:04:1e:c9:46:a9:97:de:82: ++ b2:1b:70:9f:9c:f6:af:71:31:dd:7b:05:a5:2c:d3:b9:ca:47: ++ f6:ca:f2:f6:e7:ad:b9:48:3f:bc:16:b7:c1:6d:f4:ea:09:af: ++ ec:f3:b5:e7:05:9e:a6:1e:8a:53:51:d6:93:81:cc:74:93:f6: ++ b9:da:a6:25:05:74:79:5a:7e:40:3e:82:4b:26:11:30:6e:e1: ++ 3f:41:c7:47:00:35:d5:f5:d3:f7:54:3e:81:3d:da:49:6a:9a: ++ b3:ef:10:3d:e6:eb:6f:d1:c8:22:47:cb:cc:cf:01:31:92:d9: ++ 18:e3:22:be:09:1e:1a:3e:5a:b2:e4:6b:0c:54:7a:7d:43:4e: ++ b8:89:a5:7b:d7:a2:3d:96:86:cc:f2:26:34:2d:6a:92:9d:9a: ++ 1a:d0:30:e2:5d:4e:04:b0:5f:8b:20:7e:77:c1:3d:95:82:d1: ++ 46:9a:3b:3c:78:b8:6f:a1:d0:0d:64:a2:78:1e:29:4e:93:c3: ++ a4:54:14:5b ++-----BEGIN CERTIFICATE----- ++MIIDwzCCAqugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBgjELMAkGA1UEBhMCREUx ++KzApBgNVBAoMIlQtU3lzdGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAd ++BgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBDZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNl ++YyBHbG9iYWxSb290IENsYXNzIDMwHhcNMDgxMDAxMTAyOTU2WhcNMzMxMDAxMjM1 ++OTU5WjCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoMIlQtU3lzdGVtcyBFbnRlcnBy ++aXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBDZW50 ++ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDMwggEiMA0G ++CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9dZPwYiJvJK7genasfb3ZJNW4t/zN ++8ELg63iIVl6bmlQdTQyK9tPPcPRStdiTBONGhnFBSivwKixVA9ZIw+A5OO3yXDw/ ++RLyTPWGrTs0NvvAgJ1gORH8EGoel15YUNpDQSXuhdfsaa3Ox+M6pCSzyU9XDFES4 ++hqX2iys52qMzVNn6chr3IhUciJFrf2blw2qAsCTz34ZFiP0Zf3WHHx+xGwpzJFu5 ++ZeAsVMhg02YXP+HMVDNzkQI6pn97djmiH5a2OK61yJN0HZ65tOVgnS9W0eDrXltM ++EnAMbEQgqxHY9Bn20pxSN+f6tsIxO0rUFJmtxxr1XV/6B7h8DR/Wgx6zAgMBAAGj ++QjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS1 ++A/d2O2GCahKqGFPrAyGUv/7OyjANBgkqhkiG9w0BAQsFAAOCAQEAVj3vlNW92nOy ++WL6ukK2YJ5f+AbGwUgC4TeQbIXQbfsDuXmkqJa9c1h3a0nnJ85cp4IaH3gRZD/FZ ++1GSFS5mvJQQeyUapl96Cshtwn5z2r3Ex3XsFpSzTucpH9sry9uetuUg/vBa3wW30 ++6gmv7PO15wWeph6KU1HWk4HMdJP2udqmJQV0eVp+QD6CSyYRMG7hP0HHRwA11fXT ++91Q+gT3aSWqas+8QPebrb9HIIkfLzM8BMZLZGOMivgkeGj5asuRrDFR6fUNOuIml ++e9eiPZaGzPImNC1qkp2aGtAw4l1OBLBfiyB+d8E9lYLRRpo7PHi4b6HQDWSieB4p ++TpPDpFQUWw== ++-----END CERTIFICATE----- ++ ++# d48d3d23eedb50a459e55197601c27774b9d7b18c94d5a059511a10250b93168 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ ca:e9:1b:89:f1:55:03:0d:a3:e6:41:6d:c4:e3:a6:e1 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA ++ Validity ++ Not Before: Oct 1 08:32:27 2013 GMT ++ Not After : Oct 1 08:32:27 2033 GMT ++ Subject: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:cd:18:39:65:1a:59:b1:ea:64:16:0e:8c:94:24: ++ 95:7c:83:d3:c5:39:26:dc:0c:ef:16:57:8d:d7:d8: ++ ac:a3:42:7f:82:ca:ed:cd:5b:db:0e:b7:2d:ed:45: ++ 08:17:b2:d9:b3:cb:d6:17:52:72:28:db:8e:4e:9e: ++ 8a:b6:0b:f9:9e:84:9a:4d:76:de:22:29:5c:d2:b3: ++ d2:06:3e:30:39:a9:74:a3:92:56:1c:a1:6f:4c:0a: ++ 20:6d:9f:23:7a:b4:c6:da:2c:e4:1d:2c:dc:b3:28: ++ d0:13:f2:4c:4e:02:49:a1:54:40:9e:e6:e5:05:a0: ++ 2d:84:c8:ff:98:6c:d0:eb:8a:1a:84:08:1e:b7:68: ++ 23:ee:23:d5:70:ce:6d:51:69:10:ee:a1:7a:c2:d1: ++ 22:31:c2:82:85:d2:f2:55:76:50:7c:25:7a:c9:84: ++ 5c:0b:ac:dd:42:4e:2b:e7:82:a2:24:89:cb:90:b2: ++ d0:ee:23:ba:66:4c:bb:62:a4:f9:53:5a:64:7b:7c: ++ 98:fa:a3:48:9e:0f:95:ae:a7:18:f4:6a:ec:2e:03: ++ 45:af:f0:74:f8:2a:cd:7a:5d:d1:be:44:26:32:29: ++ f1:f1:f5:6c:cc:7e:02:21:0b:9f:6f:a4:3f:be:9d: ++ 53:e2:cf:7d:a9:2c:7c:58:1a:97:e1:3d:37:37:18: ++ 66:28:d2:40:c5:51:8a:8c:c3:2d:ce:53:88:24:58: ++ 64:30:16:c5:aa:e0:d6:0a:a6:40:df:78:f6:f5:04: ++ 7c:69:13:84:bc:d1:d1:a7:06:cf:01:f7:68:c0:a8: ++ 57:bb:3a:61:ad:04:8c:93:e3:ad:fc:f0:db:44:6d: ++ 59:dc:49:59:ae:ac:9a:99:36:30:41:7b:76:33:22: ++ 87:a3:c2:92:86:6e:f9:70:ee:ae:87:87:95:1b:c4: ++ 7a:bd:31:f3:d4:d2:e5:99:ff:be:48:ec:75:f5:78: ++ 16:1d:a6:70:c1:7f:3c:1b:a1:92:fb:cf:c8:3c:d6: ++ c5:93:0a:8f:f5:55:3a:76:95:ce:59:98:8a:09:95: ++ 77:32:9a:83:ba:2c:04:3a:97:bd:d4:2f:be:d7:6c: ++ 9b:a2:ca:7d:6d:26:c9:55:d5:cf:c3:79:52:08:09: ++ 99:07:24:2d:64:25:6b:a6:21:69:9b:6a:dd:74:4d: ++ 6b:97:7a:41:bd:ab:17:f9:90:17:48:8f:36:f9:2d: ++ d5:c5:db:ee:aa:85:45:41:fa:cd:3a:45:b1:68:e6: ++ 36:4c:9b:90:57:ec:23:b9:87:08:c2:c4:09:f1:97: ++ 86:2a:28:4d:e2:74:c0:da:c4:8c:db:df:e2:a1:17: ++ 59:ce:24:59:74:31:da:7f:fd:30:6d:d9:dc:e1:6a: ++ e1:fc:5f ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ 18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B ++ X509v3 Authority Key Identifier: ++ keyid:18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B ++ ++ X509v3 Certificate Policies: ++ Policy: X509v3 Any Policy ++ CPS: https://wwww.certigna.fr/autorites/ ++ ++ X509v3 CRL Distribution Points: ++ ++ Full Name: ++ URI:http://crl.certigna.fr/certignarootca.crl ++ ++ Full Name: ++ URI:http://crl.dhimyotis.com/certignarootca.crl ++ ++ Signature Algorithm: sha256WithRSAEncryption ++ 94:b8:9e:4f:f0:e3:95:08:22:e7:cd:68:41:f7:1c:55:d5:7c: ++ 00:e2:2d:3a:89:5d:68:38:2f:51:22:0b:4a:8d:cb:e9:bb:5d: ++ 3e:bb:5c:3d:b1:28:fe:e4:53:55:13:cf:a1:90:1b:02:1d:5f: ++ 66:46:09:33:28:e1:0d:24:97:70:d3:10:1f:ea:64:57:96:bb: ++ 5d:da:e7:c4:8c:4f:4c:64:46:1d:5c:87:e3:59:de:42:d1:9b: ++ a8:7e:a6:89:dd:8f:1c:c9:30:82:ed:3b:9c:cd:c0:e9:19:e0: ++ 6a:d8:02:75:37:ab:f7:34:28:28:91:f2:04:0a:4f:35:e3:60: ++ 26:01:fa:d0:11:8c:f9:11:6a:ee:af:3d:c3:50:d3:8f:5f:33: ++ 79:3c:86:a8:73:45:90:8c:20:b6:72:73:17:23:be:07:65:e5: ++ 78:92:0d:ba:01:c0:eb:8c:1c:66:bf:ac:86:77:01:94:0d:9c: ++ e6:e9:39:8d:1f:a6:51:8c:99:0c:39:77:e1:b4:9b:fa:1c:67: ++ 57:6f:6a:6a:8e:a9:2b:4c:57:79:7a:57:22:cf:cd:5f:63:46: ++ 8d:5c:59:3a:86:f8:32:47:62:a3:67:0d:18:91:dc:fb:a6:6b: ++ f5:48:61:73:23:59:8e:02:a7:bc:44:ea:f4:49:9d:f1:54:58: ++ f9:60:af:da:18:a4:2f:28:45:dc:7a:a0:88:86:5d:f3:3b:e7: ++ ff:29:35:80:fc:64:43:94:e6:e3:1c:6f:be:ad:0e:2a:63:99: ++ 2b:c9:7e:85:f6:71:e8:06:03:95:fe:de:8f:48:1c:5a:d4:92: ++ e8:2b:ee:e7:31:db:ba:04:6a:87:98:e7:c5:5f:ef:7d:a7:22: ++ f7:01:d8:4d:f9:89:d0:0e:9a:05:59:a4:9e:98:d9:6f:2b:ca: ++ 70:be:64:c2:55:a3:f4:e9:af:c3:92:29:dc:88:16:24:99:3c: ++ 8d:26:98:b6:5b:b7:cc:ce:b7:37:07:fd:26:d9:98:85:24:ff: ++ 59:23:03:9a:ed:9d:9d:a8:e4:5e:38:ce:d7:52:0d:6f:d2:3f: ++ 6d:b1:05:6b:49:ce:8a:91:46:73:f4:f6:2f:f0:a8:73:77:0e: ++ 65:ac:a1:8d:66:52:69:7e:4b:68:0c:c7:1e:37:27:83:a5:8c: ++ c7:02:e4:14:cd:49:01:b0:73:b3:fd:c6:90:3a:6f:d2:6c:ed: ++ 3b:ee:ec:91:be:a2:43:5d:8b:00:4a:66:25:44:70:de:40:0f: ++ f8:7c:15:f7:a2:ce:3c:d7:5e:13:8c:81:17:18:17:d1:bd:f1: ++ 77:10:3a:d4:65:39:c1:27:ac:57:2c:25:54:ff:a2:da:4f:8a: ++ 61:39:5e:ae:3d:4a:8c:bd ++-----BEGIN CERTIFICATE----- ++MIIGWzCCBEOgAwIBAgIRAMrpG4nxVQMNo+ZBbcTjpuEwDQYJKoZIhvcNAQELBQAw ++WjELMAkGA1UEBhMCRlIxEjAQBgNVBAoMCURoaW15b3RpczEcMBoGA1UECwwTMDAw ++MiA0ODE0NjMwODEwMDAzNjEZMBcGA1UEAwwQQ2VydGlnbmEgUm9vdCBDQTAeFw0x ++MzEwMDEwODMyMjdaFw0zMzEwMDEwODMyMjdaMFoxCzAJBgNVBAYTAkZSMRIwEAYD ++VQQKDAlEaGlteW90aXMxHDAaBgNVBAsMEzAwMDIgNDgxNDYzMDgxMDAwMzYxGTAX ++BgNVBAMMEENlcnRpZ25hIFJvb3QgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw ++ggIKAoICAQDNGDllGlmx6mQWDoyUJJV8g9PFOSbcDO8WV43X2KyjQn+Cyu3NW9sO ++ty3tRQgXstmzy9YXUnIo245Onoq2C/mehJpNdt4iKVzSs9IGPjA5qXSjklYcoW9M ++CiBtnyN6tMbaLOQdLNyzKNAT8kxOAkmhVECe5uUFoC2EyP+YbNDrihqECB63aCPu ++I9Vwzm1RaRDuoXrC0SIxwoKF0vJVdlB8JXrJhFwLrN1CTivngqIkicuQstDuI7pm ++TLtipPlTWmR7fJj6o0ieD5Wupxj0auwuA0Wv8HT4Ks16XdG+RCYyKfHx9WzMfgIh ++C59vpD++nVPiz32pLHxYGpfhPTc3GGYo0kDFUYqMwy3OU4gkWGQwFsWq4NYKpkDf ++ePb1BHxpE4S80dGnBs8B92jAqFe7OmGtBIyT46388NtEbVncSVmurJqZNjBBe3Yz ++IoejwpKGbvlw7q6Hh5UbxHq9MfPU0uWZ/75I7HX1eBYdpnDBfzwboZL7z8g81sWT ++Co/1VTp2lc5ZmIoJlXcymoO6LAQ6l73UL77XbJuiyn1tJslV1c/DeVIICZkHJC1k ++JWumIWmbat10TWuXekG9qxf5kBdIjzb5LdXF2+6qhUVB+s06RbFo5jZMm5BX7CO5 ++hwjCxAnxl4YqKE3idMDaxIzb3+KhF1nOJFl0Mdp//TBt2dzhauH8XwIDAQABo4IB ++GjCCARYwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYE ++FBiHVuBud+4kNTxOc5of1uHieX4rMB8GA1UdIwQYMBaAFBiHVuBud+4kNTxOc5of ++1uHieX4rMEQGA1UdIAQ9MDswOQYEVR0gADAxMC8GCCsGAQUFBwIBFiNodHRwczov ++L3d3d3cuY2VydGlnbmEuZnIvYXV0b3JpdGVzLzBtBgNVHR8EZjBkMC+gLaArhilo ++dHRwOi8vY3JsLmNlcnRpZ25hLmZyL2NlcnRpZ25hcm9vdGNhLmNybDAxoC+gLYYr ++aHR0cDovL2NybC5kaGlteW90aXMuY29tL2NlcnRpZ25hcm9vdGNhLmNybDANBgkq ++hkiG9w0BAQsFAAOCAgEAlLieT/DjlQgi581oQfccVdV8AOItOoldaDgvUSILSo3L ++6btdPrtcPbEo/uRTVRPPoZAbAh1fZkYJMyjhDSSXcNMQH+pkV5a7XdrnxIxPTGRG ++HVyH41neQtGbqH6mid2PHMkwgu07nM3A6RngatgCdTer9zQoKJHyBApPNeNgJgH6 ++0BGM+RFq7q89w1DTj18zeTyGqHNFkIwgtnJzFyO+B2XleJINugHA64wcZr+shncB ++lA2c5uk5jR+mUYyZDDl34bSb+hxnV29qao6pK0xXeXpXIs/NX2NGjVxZOob4Mkdi ++o2cNGJHc+6Zr9UhhcyNZjgKnvETq9Emd8VRY+WCv2hikLyhF3HqgiIZd8zvn/yk1 ++gPxkQ5Tm4xxvvq0OKmOZK8l+hfZx6AYDlf7ej0gcWtSS6Cvu5zHbugRqh5jnxV/v ++faci9wHYTfmJ0A6aBVmknpjZbyvKcL5kwlWj9Omvw5Ip3IgWJJk8jSaYtlu3zM63 ++Nwf9JtmYhST/WSMDmu2dnajkXjjO11INb9I/bbEFa0nOipFGc/T2L/Coc3cOZayh ++jWZSaX5LaAzHHjcng6WMxwLkFM1JAbBzs/3GkDpv0mztO+7skb6iQ12LAEpmJURw ++3kAP+HwV96LOPNdeE4yBFxgX0b3xdxA61GU5wSesVywlVP+i2k+KYTlerj1KjL0= ++-----END CERTIFICATE----- ++ ++# e3b6a2db2ed7ce48842f7ac53241c7b71d54144bfb40c11f3f1d0b42f5eea12d ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ fe:dc:e3:01:0f:c9:48:ff ++ Signature Algorithm: sha1WithRSAEncryption ++ Issuer: C = FR, O = Dhimyotis, CN = Certigna ++ Validity ++ Not Before: Jun 29 15:13:05 2007 GMT ++ Not After : Jun 29 15:13:05 2027 GMT ++ Subject: C = FR, O = Dhimyotis, CN = Certigna ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:c8:68:f1:c9:d6:d6:b3:34:75:26:82:1e:ec:b4: ++ be:ea:5c:e1:26:ed:11:47:61:e1:a2:7c:16:78:40: ++ 21:e4:60:9e:5a:c8:63:e1:c4:b1:96:92:ff:18:6d: ++ 69:23:e1:2b:62:f7:dd:e2:36:2f:91:07:b9:48:cf: ++ 0e:ec:79:b6:2c:e7:34:4b:70:08:25:a3:3c:87:1b: ++ 19:f2:81:07:0f:38:90:19:d3:11:fe:86:b4:f2:d1: ++ 5e:1e:1e:96:cd:80:6c:ce:3b:31:93:b6:f2:a0:d0: ++ a9:95:12:7d:a5:9a:cc:6b:c8:84:56:8a:33:a9:e7: ++ 22:15:53:16:f0:cc:17:ec:57:5f:e9:a2:0a:98:09: ++ de:e3:5f:9c:6f:dc:48:e3:85:0b:15:5a:a6:ba:9f: ++ ac:48:e3:09:b2:f7:f4:32:de:5e:34:be:1c:78:5d: ++ 42:5b:ce:0e:22:8f:4d:90:d7:7d:32:18:b3:0b:2c: ++ 6a:bf:8e:3f:14:11:89:20:0e:77:14:b5:3d:94:08: ++ 87:f7:25:1e:d5:b2:60:00:ec:6f:2a:28:25:6e:2a: ++ 3e:18:63:17:25:3f:3e:44:20:16:f6:26:c8:25:ae: ++ 05:4a:b4:e7:63:2c:f3:8c:16:53:7e:5c:fb:11:1a: ++ 08:c1:46:62:9f:22:b8:f1:c2:8d:69:dc:fa:3a:58: ++ 06:df ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11 ++ X509v3 Authority Key Identifier: ++ keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11 ++ DirName:/C=FR/O=Dhimyotis/CN=Certigna ++ serial:FE:DC:E3:01:0F:C9:48:FF ++ ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Netscape Cert Type: ++ SSL CA, S/MIME CA, Object Signing CA ++ Signature Algorithm: sha1WithRSAEncryption ++ 85:03:1e:92:71:f6:42:af:e1:a3:61:9e:eb:f3:c0:0f:f2:a5: ++ d4:da:95:e6:d6:be:68:36:3d:7e:6e:1f:4c:8a:ef:d1:0f:21: ++ 6d:5e:a5:52:63:ce:12:f8:ef:2a:da:6f:eb:37:fe:13:02:c7: ++ cb:3b:3e:22:6b:da:61:2e:7f:d4:72:3d:dd:30:e1:1e:4c:40: ++ 19:8c:0f:d7:9c:d1:83:30:7b:98:59:dc:7d:c6:b9:0c:29:4c: ++ a1:33:a2:eb:67:3a:65:84:d3:96:e2:ed:76:45:70:8f:b5:2b: ++ de:f9:23:d6:49:6e:3c:14:b5:c6:9f:35:1e:50:d0:c1:8f:6a: ++ 70:44:02:62:cb:ae:1d:68:41:a7:aa:57:e8:53:aa:07:d2:06: ++ f6:d5:14:06:0b:91:03:75:2c:6c:72:b5:61:95:9a:0d:8b:b9: ++ 0d:e7:f5:df:54:cd:de:e6:d8:d6:09:08:97:63:e5:c1:2e:b0: ++ b7:44:26:c0:26:c0:af:55:30:9e:3b:d5:36:2a:19:04:f4:5c: ++ 1e:ff:cf:2c:b7:ff:d0:fd:87:40:11:d5:11:23:bb:48:c0:21: ++ a9:a4:28:2d:fd:15:f8:b0:4e:2b:f4:30:5b:21:fc:11:91:34: ++ be:41:ef:7b:9d:97:75:ff:97:95:c0:96:58:2f:ea:bb:46:d7: ++ bb:e4:d9:2e ++-----BEGIN CERTIFICATE----- ++MIIDqDCCApCgAwIBAgIJAP7c4wEPyUj/MA0GCSqGSIb3DQEBBQUAMDQxCzAJBgNV ++BAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hMB4X ++DTA3MDYyOTE1MTMwNVoXDTI3MDYyOTE1MTMwNVowNDELMAkGA1UEBhMCRlIxEjAQ ++BgNVBAoMCURoaW15b3RpczERMA8GA1UEAwwIQ2VydGlnbmEwggEiMA0GCSqGSIb3 ++DQEBAQUAA4IBDwAwggEKAoIBAQDIaPHJ1tazNHUmgh7stL7qXOEm7RFHYeGifBZ4 ++QCHkYJ5ayGPhxLGWkv8YbWkj4Sti993iNi+RB7lIzw7sebYs5zRLcAglozyHGxny ++gQcPOJAZ0xH+hrTy0V4eHpbNgGzOOzGTtvKg0KmVEn2lmsxryIRWijOp5yIVUxbw ++zBfsV1/pogqYCd7jX5xv3EjjhQsVWqa6n6xI4wmy9/Qy3l40vhx4XUJbzg4ij02Q ++130yGLMLLGq/jj8UEYkgDncUtT2UCIf3JR7VsmAA7G8qKCVuKj4YYxclPz5EIBb2 ++JsglrgVKtOdjLPOMFlN+XPsRGgjBRmKfIrjxwo1p3Po6WAbfAgMBAAGjgbwwgbkw ++DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUGu3+QTmQtCRZvgHyUtVF9lo53BEw ++ZAYDVR0jBF0wW4AUGu3+QTmQtCRZvgHyUtVF9lo53BGhOKQ2MDQxCzAJBgNVBAYT ++AkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hggkA/tzj ++AQ/JSP8wDgYDVR0PAQH/BAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG ++9w0BAQUFAAOCAQEAhQMeknH2Qq/ho2Ge6/PAD/Kl1NqV5ta+aDY9fm4fTIrv0Q8h ++bV6lUmPOEvjvKtpv6zf+EwLHyzs+ImvaYS5/1HI93TDhHkxAGYwP15zRgzB7mFnc ++fca5DClMoTOi62c6ZYTTluLtdkVwj7Ur3vkj1kluPBS1xp81HlDQwY9qcEQCYsuu ++HWhBp6pX6FOqB9IG9tUUBguRA3UsbHK1YZWaDYu5Def131TN3ubY1gkIl2PlwS6w ++t0QmwCbAr1UwnjvVNioZBPRcHv/PLLf/0P2HQBHVESO7SMAhqaQoLf0V+LBOK/Qw ++WyH8EZE0vkHve52Xdf+XlcCWWC/qu0bXu+TZLg== ++-----END CERTIFICATE----- ++ ++# 31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 05:55:56:bc:f2:5e:a4:35:35:c3:a4:0f:d5:ab:45:72 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G3 ++ Validity ++ Not Before: Aug 1 12:00:00 2013 GMT ++ Not After : Jan 15 12:00:00 2038 GMT ++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G3 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:dd:a7:d9:bb:8a:b8:0b:fb:0b:7f:21:d2:f0:be: ++ be:73:f3:33:5d:1a:bc:34:ea:de:c6:9b:bc:d0:95: ++ f6:f0:cc:d0:0b:ba:61:5b:51:46:7e:9e:2d:9f:ee: ++ 8e:63:0c:17:ec:07:70:f5:cf:84:2e:40:83:9c:e8: ++ 3f:41:6d:3b:ad:d3:a4:14:59:36:78:9d:03:43:ee: ++ 10:13:6c:72:de:ae:88:a7:a1:6b:b5:43:ce:67:dc: ++ 23:ff:03:1c:a3:e2:3e ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6 ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:65:02:31:00:ad:bc:f2:6c:3f:12:4a:d1:2d:39:c3:0a:09: ++ 97:73:f4:88:36:8c:88:27:bb:e6:88:8d:50:85:a7:63:f9:9e: ++ 32:de:66:93:0f:f1:cc:b1:09:8f:dd:6c:ab:fa:6b:7f:a0:02: ++ 30:39:66:5b:c2:64:8d:b8:9e:50:dc:a8:d5:49:a2:ed:c7:dc: ++ d1:49:7f:17:01:b8:c8:86:8f:4e:8c:88:2b:a8:9a:a9:8a:c5: ++ d1:00:bd:f8:54:e2:9a:e5:5b:7c:b3:27:17 ++-----BEGIN CERTIFICATE----- ++MIICPzCCAcWgAwIBAgIQBVVWvPJepDU1w6QP1atFcjAKBggqhkjOPQQDAzBhMQsw ++CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu ++ZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMzAe ++Fw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVTMRUw ++EwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20x ++IDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEczMHYwEAYHKoZIzj0CAQYF ++K4EEACIDYgAE3afZu4q4C/sLfyHS8L6+c/MzXRq8NOrexpu80JX28MzQC7phW1FG ++fp4tn+6OYwwX7Adw9c+ELkCDnOg/QW07rdOkFFk2eJ0DQ+4QE2xy3q6Ip6FrtUPO ++Z9wj/wMco+I+o0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAd ++BgNVHQ4EFgQUs9tIpPmhxdiuNkHMEWNpYim8S8YwCgYIKoZIzj0EAwMDaAAwZQIx ++AK288mw/EkrRLTnDCgmXc/SINoyIJ7vmiI1Qhadj+Z4y3maTD/HMsQmP3Wyr+mt/ ++oAIwOWZbwmSNuJ5Q3KjVSaLtx9zRSX8XAbjIho9OjIgrqJqpisXRAL34VOKa5Vt8 ++sycX ++-----END CERTIFICATE----- ++ ++# 3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39 ++ Signature Algorithm: sha1WithRSAEncryption ++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root CA ++ Validity ++ Not Before: Nov 10 00:00:00 2006 GMT ++ Not After : Nov 10 00:00:00 2031 GMT ++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:ad:0e:15:ce:e4:43:80:5c:b1:87:f3:b7:60:f9: ++ 71:12:a5:ae:dc:26:94:88:aa:f4:ce:f5:20:39:28: ++ 58:60:0c:f8:80:da:a9:15:95:32:61:3c:b5:b1:28: ++ 84:8a:8a:dc:9f:0a:0c:83:17:7a:8f:90:ac:8a:e7: ++ 79:53:5c:31:84:2a:f6:0f:98:32:36:76:cc:de:dd: ++ 3c:a8:a2:ef:6a:fb:21:f2:52:61:df:9f:20:d7:1f: ++ e2:b1:d9:fe:18:64:d2:12:5b:5f:f9:58:18:35:bc: ++ 47:cd:a1:36:f9:6b:7f:d4:b0:38:3e:c1:1b:c3:8c: ++ 33:d9:d8:2f:18:fe:28:0f:b3:a7:83:d6:c3:6e:44: ++ c0:61:35:96:16:fe:59:9c:8b:76:6d:d7:f1:a2:4b: ++ 0d:2b:ff:0b:72:da:9e:60:d0:8e:90:35:c6:78:55: ++ 87:20:a1:cf:e5:6d:0a:c8:49:7c:31:98:33:6c:22: ++ e9:87:d0:32:5a:a2:ba:13:82:11:ed:39:17:9d:99: ++ 3a:72:a1:e6:fa:a4:d9:d5:17:31:75:ae:85:7d:22: ++ ae:3f:01:46:86:f6:28:79:c8:b1:da:e4:57:17:c4: ++ 7e:1c:0e:b0:b4:92:a6:56:b3:bd:b2:97:ed:aa:a7: ++ f0:b7:c5:a8:3f:95:16:d0:ff:a1:96:eb:08:5f:18: ++ 77:4f ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F ++ X509v3 Authority Key Identifier: ++ keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F ++ ++ Signature Algorithm: sha1WithRSAEncryption ++ a2:0e:bc:df:e2:ed:f0:e3:72:73:7a:64:94:bf:f7:72:66:d8: ++ 32:e4:42:75:62:ae:87:eb:f2:d5:d9:de:56:b3:9f:cc:ce:14: ++ 28:b9:0d:97:60:5c:12:4c:58:e4:d3:3d:83:49:45:58:97:35: ++ 69:1a:a8:47:ea:56:c6:79:ab:12:d8:67:81:84:df:7f:09:3c: ++ 94:e6:b8:26:2c:20:bd:3d:b3:28:89:f7:5f:ff:22:e2:97:84: ++ 1f:e9:65:ef:87:e0:df:c1:67:49:b3:5d:eb:b2:09:2a:eb:26: ++ ed:78:be:7d:3f:2b:f3:b7:26:35:6d:5f:89:01:b6:49:5b:9f: ++ 01:05:9b:ab:3d:25:c1:cc:b6:7f:c2:f1:6f:86:c6:fa:64:68: ++ eb:81:2d:94:eb:42:b7:fa:8c:1e:dd:62:f1:be:50:67:b7:6c: ++ bd:f3:f1:1f:6b:0c:36:07:16:7f:37:7c:a9:5b:6d:7a:f1:12: ++ 46:60:83:d7:27:04:be:4b:ce:97:be:c3:67:2a:68:11:df:80: ++ e7:0c:33:66:bf:13:0d:14:6e:f3:7f:1f:63:10:1e:fa:8d:1b: ++ 25:6d:6c:8f:a5:b7:61:01:b1:d2:a3:26:a1:10:71:9d:ad:e2: ++ c3:f9:c3:99:51:b7:2b:07:08:ce:2e:e6:50:b2:a7:fa:0a:45: ++ 2f:a2:f0:f2 ++-----BEGIN CERTIFICATE----- ++MIIDtzCCAp+gAwIBAgIQDOfg5RfYRv6P5WD8G/AwOTANBgkqhkiG9w0BAQUFADBl ++MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 ++d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv ++b3QgQ0EwHhcNMDYxMTEwMDAwMDAwWhcNMzExMTEwMDAwMDAwWjBlMQswCQYDVQQG ++EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl ++cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwggEi ++MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDhXO5EOAXLGH87dg+XESpa7c ++JpSIqvTO9SA5KFhgDPiA2qkVlTJhPLWxKISKityfCgyDF3qPkKyK53lTXDGEKvYP ++mDI2dsze3Tyoou9q+yHyUmHfnyDXH+Kx2f4YZNISW1/5WBg1vEfNoTb5a3/UsDg+ ++wRvDjDPZ2C8Y/igPs6eD1sNuRMBhNZYW/lmci3Zt1/GiSw0r/wty2p5g0I6QNcZ4 ++VYcgoc/lbQrISXwxmDNsIumH0DJaoroTghHtORedmTpyoeb6pNnVFzF1roV9Iq4/ ++AUaG9ih5yLHa5FcXxH4cDrC0kqZWs72yl+2qp/C3xag/lRbQ/6GW6whfGHdPAgMB ++AAGjYzBhMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW ++BBRF66Kv9JLLgjEtUYunpyGd823IDzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYun ++pyGd823IDzANBgkqhkiG9w0BAQUFAAOCAQEAog683+Lt8ONyc3pklL/3cmbYMuRC ++dWKuh+vy1dneVrOfzM4UKLkNl2BcEkxY5NM9g0lFWJc1aRqoR+pWxnmrEthngYTf ++fwk8lOa4JiwgvT2zKIn3X/8i4peEH+ll74fg38FnSbNd67IJKusm7Xi+fT8r87cm ++NW1fiQG2SVufAQWbqz0lwcy2f8Lxb4bG+mRo64EtlOtCt/qMHt1i8b5QZ7dsvfPx ++H2sMNgcWfzd8qVttevESRmCD1ycEvkvOl77DZypoEd+A5wwzZr8TDRRu838fYxAe +++o0bJW1sj6W3YQGx0qMmoRBxna3iw/nDmVG3KwcIzi7mULKn+gpFL6Lw8g== ++-----END CERTIFICATE----- ++ ++# 4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 08:3b:e0:56:90:42:46:b1:a1:75:6a:c9:59:91:c7:4a ++ Signature Algorithm: sha1WithRSAEncryption ++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA ++ Validity ++ Not Before: Nov 10 00:00:00 2006 GMT ++ Not After : Nov 10 00:00:00 2031 GMT ++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:e2:3b:e1:11:72:de:a8:a4:d3:a3:57:aa:50:a2: ++ 8f:0b:77:90:c9:a2:a5:ee:12:ce:96:5b:01:09:20: ++ cc:01:93:a7:4e:30:b7:53:f7:43:c4:69:00:57:9d: ++ e2:8d:22:dd:87:06:40:00:81:09:ce:ce:1b:83:bf: ++ df:cd:3b:71:46:e2:d6:66:c7:05:b3:76:27:16:8f: ++ 7b:9e:1e:95:7d:ee:b7:48:a3:08:da:d6:af:7a:0c: ++ 39:06:65:7f:4a:5d:1f:bc:17:f8:ab:be:ee:28:d7: ++ 74:7f:7a:78:99:59:85:68:6e:5c:23:32:4b:bf:4e: ++ c0:e8:5a:6d:e3:70:bf:77:10:bf:fc:01:f6:85:d9: ++ a8:44:10:58:32:a9:75:18:d5:d1:a2:be:47:e2:27: ++ 6a:f4:9a:33:f8:49:08:60:8b:d4:5f:b4:3a:84:bf: ++ a1:aa:4a:4c:7d:3e:cf:4f:5f:6c:76:5e:a0:4b:37: ++ 91:9e:dc:22:e6:6d:ce:14:1a:8e:6a:cb:fe:cd:b3: ++ 14:64:17:c7:5b:29:9e:32:bf:f2:ee:fa:d3:0b:42: ++ d4:ab:b7:41:32:da:0c:d4:ef:f8:81:d5:bb:8d:58: ++ 3f:b5:1b:e8:49:28:a2:70:da:31:04:dd:f7:b2:16: ++ f2:4c:0a:4e:07:a8:ed:4a:3d:5e:b5:7f:a3:90:c3: ++ af:27 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55 ++ X509v3 Authority Key Identifier: ++ keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55 ++ ++ Signature Algorithm: sha1WithRSAEncryption ++ cb:9c:37:aa:48:13:12:0a:fa:dd:44:9c:4f:52:b0:f4:df:ae: ++ 04:f5:79:79:08:a3:24:18:fc:4b:2b:84:c0:2d:b9:d5:c7:fe: ++ f4:c1:1f:58:cb:b8:6d:9c:7a:74:e7:98:29:ab:11:b5:e3:70: ++ a0:a1:cd:4c:88:99:93:8c:91:70:e2:ab:0f:1c:be:93:a9:ff: ++ 63:d5:e4:07:60:d3:a3:bf:9d:5b:09:f1:d5:8e:e3:53:f4:8e: ++ 63:fa:3f:a7:db:b4:66:df:62:66:d6:d1:6e:41:8d:f2:2d:b5: ++ ea:77:4a:9f:9d:58:e2:2b:59:c0:40:23:ed:2d:28:82:45:3e: ++ 79:54:92:26:98:e0:80:48:a8:37:ef:f0:d6:79:60:16:de:ac: ++ e8:0e:cd:6e:ac:44:17:38:2f:49:da:e1:45:3e:2a:b9:36:53: ++ cf:3a:50:06:f7:2e:e8:c4:57:49:6c:61:21:18:d5:04:ad:78: ++ 3c:2c:3a:80:6b:a7:eb:af:15:14:e9:d8:89:c1:b9:38:6c:e2: ++ 91:6c:8a:ff:64:b9:77:25:57:30:c0:1b:24:a3:e1:dc:e9:df: ++ 47:7c:b5:b4:24:08:05:30:ec:2d:bd:0b:bf:45:bf:50:b9:a9: ++ f3:eb:98:01:12:ad:c8:88:c6:98:34:5f:8d:0a:3c:c6:e9:d5: ++ 95:95:6d:de ++-----BEGIN CERTIFICATE----- ++MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh ++MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 ++d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD ++QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT ++MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j ++b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG ++9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB ++CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97 ++nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt ++43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P ++T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4 ++gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO ++BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR ++TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw ++DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr ++hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg ++06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF ++PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls ++YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk ++CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4= ++-----END CERTIFICATE----- ++ ++# 552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4 ++ Validity ++ Not Before: Aug 1 12:00:00 2013 GMT ++ Not After : Jan 15 12:00:00 2038 GMT ++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:bf:e6:90:73:68:de:bb:e4:5d:4a:3c:30:22:30: ++ 69:33:ec:c2:a7:25:2e:c9:21:3d:f2:8a:d8:59:c2: ++ e1:29:a7:3d:58:ab:76:9a:cd:ae:7b:1b:84:0d:c4: ++ 30:1f:f3:1b:a4:38:16:eb:56:c6:97:6d:1d:ab:b2: ++ 79:f2:ca:11:d2:e4:5f:d6:05:3c:52:0f:52:1f:c6: ++ 9e:15:a5:7e:be:9f:a9:57:16:59:55:72:af:68:93: ++ 70:c2:b2:ba:75:99:6a:73:32:94:d1:10:44:10:2e: ++ df:82:f3:07:84:e6:74:3b:6d:71:e2:2d:0c:1b:ee: ++ 20:d5:c9:20:1d:63:29:2d:ce:ec:5e:4e:c8:93:f8: ++ 21:61:9b:34:eb:05:c6:5e:ec:5b:1a:bc:eb:c9:cf: ++ cd:ac:34:40:5f:b1:7a:66:ee:77:c8:48:a8:66:57: ++ 57:9f:54:58:8e:0c:2b:b7:4f:a7:30:d9:56:ee:ca: ++ 7b:5d:e3:ad:c9:4f:5e:e5:35:e7:31:cb:da:93:5e: ++ dc:8e:8f:80:da:b6:91:98:40:90:79:c3:78:c7:b6: ++ b1:c4:b5:6a:18:38:03:10:8d:d8:d4:37:a4:2e:05: ++ 7d:88:f5:82:3e:10:91:70:ab:55:82:41:32:d7:db: ++ 04:73:2a:6e:91:01:7c:21:4c:d4:bc:ae:1b:03:75: ++ 5d:78:66:d9:3a:31:44:9a:33:40:bf:08:d7:5a:49: ++ a4:c2:e6:a9:a0:67:dd:a4:27:bc:a1:4f:39:b5:11: ++ 58:17:f7:24:5c:46:8f:64:f7:c1:69:88:76:98:76: ++ 3d:59:5d:42:76:87:89:97:69:7a:48:f0:e0:a2:12: ++ 1b:66:9a:74:ca:de:4b:1e:e7:0e:63:ae:e6:d4:ef: ++ 92:92:3a:9e:3d:dc:00:e4:45:25:89:b6:9a:44:19: ++ 2b:7e:c0:94:b4:d2:61:6d:eb:33:d9:c5:df:4b:04: ++ 00:cc:7d:1c:95:c3:8f:f7:21:b2:b2:11:b7:bb:7f: ++ f2:d5:8c:70:2c:41:60:aa:b1:63:18:44:95:1a:76: ++ 62:7e:f6:80:b0:fb:e8:64:a6:33:d1:89:07:e1:bd: ++ b7:e6:43:a4:18:b8:a6:77:01:e1:0f:94:0c:21:1d: ++ b2:54:29:25:89:6c:e5:0e:52:51:47:74:be:26:ac: ++ b6:41:75:de:7a:ac:5f:8d:3f:c9:bc:d3:41:11:12: ++ 5b:e5:10:50:eb:31:c5:ca:72:16:22:09:df:7c:4c: ++ 75:3f:63:ec:21:5f:c4:20:51:6b:6f:b1:ab:86:8b: ++ 4f:c2:d6:45:5f:9d:20:fc:a1:1e:c5:c0:8f:a2:b1: ++ 7e:0a:26:99:f5:e4:69:2f:98:1d:2d:f5:d9:a9:b2: ++ 1d:e5:1b ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ EC:D7:E3:82:D2:71:5D:64:4C:DF:2E:67:3F:E7:BA:98:AE:1C:0F:4F ++ Signature Algorithm: sha384WithRSAEncryption ++ bb:61:d9:7d:a9:6c:be:17:c4:91:1b:c3:a1:a2:00:8d:e3:64: ++ 68:0f:56:cf:77:ae:70:f9:fd:9a:4a:99:b9:c9:78:5c:0c:0c: ++ 5f:e4:e6:14:29:56:0b:36:49:5d:44:63:e0:ad:9c:96:18:66: ++ 1b:23:0d:3d:79:e9:6d:6b:d6:54:f8:d2:3c:c1:43:40:ae:1d: ++ 50:f5:52:fc:90:3b:bb:98:99:69:6b:c7:c1:a7:a8:68:a4:27: ++ dc:9d:f9:27:ae:30:85:b9:f6:67:4d:3a:3e:8f:59:39:22:53: ++ 44:eb:c8:5d:03:ca:ed:50:7a:7d:62:21:0a:80:c8:73:66:d1: ++ a0:05:60:5f:e8:a5:b4:a7:af:a8:f7:6d:35:9c:7c:5a:8a:d6: ++ a2:38:99:f3:78:8b:f4:4d:d2:20:0b:de:04:ee:8c:9b:47:81: ++ 72:0d:c0:14:32:ef:30:59:2e:ae:e0:71:f2:56:e4:6a:97:6f: ++ 92:50:6d:96:8d:68:7a:9a:b2:36:14:7a:06:f2:24:b9:09:11: ++ 50:d7:08:b1:b8:89:7a:84:23:61:42:29:e5:a3:cd:a2:20:41: ++ d7:d1:9c:64:d9:ea:26:a1:8b:14:d7:4c:19:b2:50:41:71:3d: ++ 3f:4d:70:23:86:0c:4a:dc:81:d2:cc:32:94:84:0d:08:09:97: ++ 1c:4f:c0:ee:6b:20:74:30:d2:e0:39:34:10:85:21:15:01:08: ++ e8:55:32:de:71:49:d9:28:17:50:4d:e6:be:4d:d1:75:ac:d0: ++ ca:fb:41:b8:43:a5:aa:d3:c3:05:44:4f:2c:36:9b:e2:fa:e2: ++ 45:b8:23:53:6c:06:6f:67:55:7f:46:b5:4c:3f:6e:28:5a:79: ++ 26:d2:a4:a8:62:97:d2:1e:e2:ed:4a:8b:bc:1b:fd:47:4a:0d: ++ df:67:66:7e:b2:5b:41:d0:3b:e4:f4:3b:f4:04:63:e9:ef:c2: ++ 54:00:51:a0:8a:2a:c9:ce:78:cc:d5:ea:87:04:18:b3:ce:af: ++ 49:88:af:f3:92:99:b6:b3:e6:61:0f:d2:85:00:e7:50:1a:e4: ++ 1b:95:9d:19:a1:b9:9c:b1:9b:b1:00:1e:ef:d0:0f:4f:42:6c: ++ c9:0a:bc:ee:43:fa:3a:71:a5:c8:4d:26:a5:35:fd:89:5d:bc: ++ 85:62:1d:32:d2:a0:2b:54:ed:9a:57:c1:db:fa:10:cf:19:b7: ++ 8b:4a:1b:8f:01:b6:27:95:53:e8:b6:89:6d:5b:bc:68:d4:23: ++ e8:8b:51:a2:56:f9:f0:a6:80:a0:d6:1e:b3:bc:0f:0f:53:75: ++ 29:aa:ea:13:77:e4:de:8c:81:21:ad:07:10:47:11:ad:87:3d: ++ 07:d1:75:bc:cf:f3:66:7e ++-----BEGIN CERTIFICATE----- ++MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBi ++MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 ++d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg ++RzQwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBiMQswCQYDVQQGEwJV ++UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu ++Y29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0GCSqG ++SIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3y ++ithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1If ++xp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDV ++ySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfISKhmV1efVFiO ++DCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jHtrHEtWoYOAMQ ++jdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6MUSaM0C/ ++CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCi ++EhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADM ++fRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QY ++uKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXK ++chYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4KJpn15GkvmB0t ++9dmpsh3lGwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB ++hjAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wDQYJKoZIhvcNAQEMBQAD ++ggIBALth2X2pbL4XxJEbw6GiAI3jZGgPVs93rnD5/ZpKmbnJeFwMDF/k5hQpVgs2 ++SV1EY+CtnJYYZhsjDT156W1r1lT40jzBQ0CuHVD1UvyQO7uYmWlrx8GnqGikJ9yd +++SeuMIW59mdNOj6PWTkiU0TryF0Dyu1Qen1iIQqAyHNm0aAFYF/opbSnr6j3bTWc ++fFqK1qI4mfN4i/RN0iAL3gTujJtHgXINwBQy7zBZLq7gcfJW5GqXb5JQbZaNaHqa ++sjYUegbyJLkJEVDXCLG4iXqEI2FCKeWjzaIgQdfRnGTZ6iahixTXTBmyUEFxPT9N ++cCOGDErcgdLMMpSEDQgJlxxPwO5rIHQw0uA5NBCFIRUBCOhVMt5xSdkoF1BN5r5N ++0XWs0Mr7QbhDparTwwVETyw2m+L64kW4I1NsBm9nVX9GtUw/bihaeSbSpKhil9Ie ++4u1Ki7wb/UdKDd9nZn6yW0HQO+T0O/QEY+nvwlQAUaCKKsnOeMzV6ocEGLPOr0mI ++r/OSmbaz5mEP0oUA51Aa5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1 ++/YldvIViHTLSoCtU7ZpXwdv6EM8Zt4tKG48BtieVU+i2iW1bvGjUI+iLUaJW+fCm ++gKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+ ++-----END CERTIFICATE----- ++ ++# 7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77 ++ Signature Algorithm: sha1WithRSAEncryption ++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA ++ Validity ++ Not Before: Nov 10 00:00:00 2006 GMT ++ Not After : Nov 10 00:00:00 2031 GMT ++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:c6:cc:e5:73:e6:fb:d4:bb:e5:2d:2d:32:a6:df: ++ e5:81:3f:c9:cd:25:49:b6:71:2a:c3:d5:94:34:67: ++ a2:0a:1c:b0:5f:69:a6:40:b1:c4:b7:b2:8f:d0:98: ++ a4:a9:41:59:3a:d3:dc:94:d6:3c:db:74:38:a4:4a: ++ cc:4d:25:82:f7:4a:a5:53:12:38:ee:f3:49:6d:71: ++ 91:7e:63:b6:ab:a6:5f:c3:a4:84:f8:4f:62:51:be: ++ f8:c5:ec:db:38:92:e3:06:e5:08:91:0c:c4:28:41: ++ 55:fb:cb:5a:89:15:7e:71:e8:35:bf:4d:72:09:3d: ++ be:3a:38:50:5b:77:31:1b:8d:b3:c7:24:45:9a:a7: ++ ac:6d:00:14:5a:04:b7:ba:13:eb:51:0a:98:41:41: ++ 22:4e:65:61:87:81:41:50:a6:79:5c:89:de:19:4a: ++ 57:d5:2e:e6:5d:1c:53:2c:7e:98:cd:1a:06:16:a4: ++ 68:73:d0:34:04:13:5c:a1:71:d3:5a:7c:55:db:5e: ++ 64:e1:37:87:30:56:04:e5:11:b4:29:80:12:f1:79: ++ 39:88:a2:02:11:7c:27:66:b7:88:b7:78:f2:ca:0a: ++ a8:38:ab:0a:64:c2:bf:66:5d:95:84:c1:a1:25:1e: ++ 87:5d:1a:50:0b:20:12:cc:41:bb:6e:0b:51:38:b8: ++ 4b:cb ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3 ++ X509v3 Authority Key Identifier: ++ keyid:B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3 ++ ++ Signature Algorithm: sha1WithRSAEncryption ++ 1c:1a:06:97:dc:d7:9c:9f:3c:88:66:06:08:57:21:db:21:47: ++ f8:2a:67:aa:bf:18:32:76:40:10:57:c1:8a:f3:7a:d9:11:65: ++ 8e:35:fa:9e:fc:45:b5:9e:d9:4c:31:4b:b8:91:e8:43:2c:8e: ++ b3:78:ce:db:e3:53:79:71:d6:e5:21:94:01:da:55:87:9a:24: ++ 64:f6:8a:66:cc:de:9c:37:cd:a8:34:b1:69:9b:23:c8:9e:78: ++ 22:2b:70:43:e3:55:47:31:61:19:ef:58:c5:85:2f:4e:30:f6: ++ a0:31:16:23:c8:e7:e2:65:16:33:cb:bf:1a:1b:a0:3d:f8:ca: ++ 5e:8b:31:8b:60:08:89:2d:0c:06:5c:52:b7:c4:f9:0a:98:d1: ++ 15:5f:9f:12:be:7c:36:63:38:bd:44:a4:7f:e4:26:2b:0a:c4: ++ 97:69:0d:e9:8c:e2:c0:10:57:b8:c8:76:12:91:55:f2:48:69: ++ d8:bc:2a:02:5b:0f:44:d4:20:31:db:f4:ba:70:26:5d:90:60: ++ 9e:bc:4b:17:09:2f:b4:cb:1e:43:68:c9:07:27:c1:d2:5c:f7: ++ ea:21:b9:68:12:9c:3c:9c:bf:9e:fc:80:5c:9b:63:cd:ec:47: ++ aa:25:27:67:a0:37:f3:00:82:7d:54:d7:a9:f8:e9:2e:13:a3: ++ 77:e8:1f:4a ++-----BEGIN CERTIFICATE----- ++MIIDxTCCAq2gAwIBAgIQAqxcJmoLQJuPC3nyrkYldzANBgkqhkiG9w0BAQUFADBs ++MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 ++d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j ++ZSBFViBSb290IENBMB4XDTA2MTExMDAwMDAwMFoXDTMxMTExMDAwMDAwMFowbDEL ++MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3 ++LmRpZ2ljZXJ0LmNvbTErMCkGA1UEAxMiRGlnaUNlcnQgSGlnaCBBc3N1cmFuY2Ug ++RVYgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbM5XPm +++9S75S0tMqbf5YE/yc0lSbZxKsPVlDRnogocsF9ppkCxxLeyj9CYpKlBWTrT3JTW ++PNt0OKRKzE0lgvdKpVMSOO7zSW1xkX5jtqumX8OkhPhPYlG++MXs2ziS4wblCJEM ++xChBVfvLWokVfnHoNb9Ncgk9vjo4UFt3MRuNs8ckRZqnrG0AFFoEt7oT61EKmEFB ++Ik5lYYeBQVCmeVyJ3hlKV9Uu5l0cUyx+mM0aBhakaHPQNAQTXKFx01p8VdteZOE3 ++hzBWBOURtCmAEvF5OYiiAhF8J2a3iLd48soKqDirCmTCv2ZdlYTBoSUeh10aUAsg ++EsxBu24LUTi4S8sCAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQF ++MAMBAf8wHQYDVR0OBBYEFLE+w2kD+L9HAdSYJhoIAu9jZCvDMB8GA1UdIwQYMBaA ++FLE+w2kD+L9HAdSYJhoIAu9jZCvDMA0GCSqGSIb3DQEBBQUAA4IBAQAcGgaX3Nec ++nzyIZgYIVyHbIUf4KmeqvxgydkAQV8GK83rZEWWONfqe/EW1ntlMMUu4kehDLI6z ++eM7b41N5cdblIZQB2lWHmiRk9opmzN6cN82oNLFpmyPInngiK3BD41VHMWEZ71jF ++hS9OMPagMRYjyOfiZRYzy78aG6A9+MpeizGLYAiJLQwGXFK3xPkKmNEVX58Svnw2 ++Yzi9RKR/5CYrCsSXaQ3pjOLAEFe4yHYSkVXySGnYvCoCWw9E1CAx2/S6cCZdkGCe ++vEsXCS+0yx5DaMkHJ8HSXPfqIbloEpw8nL+e/IBcm2PN7EeqJSdnoDfzAIJ9VNep +++OkuE6N36B9K ++-----END CERTIFICATE----- ++ ++# 7d05ebb682339f8c9451ee094eebfefa7953a114edb2f44949452fab7d2fc185 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 0b:93:1c:3a:d6:39:67:ea:67:23:bf:c3:af:9a:f4:4b ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2 ++ Validity ++ Not Before: Aug 1 12:00:00 2013 GMT ++ Not After : Jan 15 12:00:00 2038 GMT ++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:d9:e7:28:2f:52:3f:36:72:49:88:93:34:f3:f8: ++ 6a:1e:31:54:80:9f:ad:54:41:b5:47:df:96:a8:d4: ++ af:80:2d:b9:0a:cf:75:fd:89:a5:7d:24:fa:e3:22: ++ 0c:2b:bc:95:17:0b:33:bf:19:4d:41:06:90:00:bd: ++ 0c:4d:10:fe:07:b5:e7:1c:6e:22:55:31:65:97:bd: ++ d3:17:d2:1e:62:f3:db:ea:6c:50:8c:3f:84:0c:96: ++ cf:b7:cb:03:e0:ca:6d:a1:14:4c:1b:89:dd:ed:00: ++ b0:52:7c:af:91:6c:b1:38:13:d1:e9:12:08:c0:00: ++ b0:1c:2b:11:da:77:70:36:9b:ae:ce:79:87:dc:82: ++ 70:e6:09:74:70:55:69:af:a3:68:9f:bf:dd:b6:79: ++ b3:f2:9d:70:29:55:f4:ab:ff:95:61:f3:c9:40:6f: ++ 1d:d1:be:93:bb:d3:88:2a:bb:9d:bf:72:5a:56:71: ++ 3b:3f:d4:f3:d1:0a:fe:28:ef:a3:ee:d9:99:af:03: ++ d3:8f:60:b7:f2:92:a1:b1:bd:89:89:1f:30:cd:c3: ++ a6:2e:62:33:ae:16:02:77:44:5a:e7:81:0a:3c:a7: ++ 44:2e:79:b8:3f:04:bc:5c:a0:87:e1:1b:af:51:8e: ++ cd:ec:2c:fa:f8:fe:6d:f0:3a:7c:aa:8b:e4:67:95: ++ 31:8d ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ CE:C3:4A:B9:99:55:F2:B8:DB:60:BF:A9:7E:BD:56:B5:97:36:A7:D6 ++ Signature Algorithm: sha256WithRSAEncryption ++ ca:a5:55:8c:e3:c8:41:6e:69:27:a7:75:11:ef:3c:86:36:6f: ++ d2:9d:c6:78:38:1d:69:96:a2:92:69:2e:38:6c:9b:7d:04:d4: ++ 89:a5:b1:31:37:8a:c9:21:cc:ab:6c:cd:8b:1c:9a:d6:bf:48: ++ d2:32:66:c1:8a:c0:f3:2f:3a:ef:c0:e3:d4:91:86:d1:50:e3: ++ 03:db:73:77:6f:4a:39:53:ed:de:26:c7:b5:7d:af:2b:42:d1: ++ 75:62:e3:4a:2b:02:c7:50:4b:e0:69:e2:96:6c:0e:44:66:10: ++ 44:8f:ad:05:eb:f8:79:ac:a6:1b:e8:37:34:9d:53:c9:61:aa: ++ a2:52:af:4a:70:16:86:c2:3a:c8:b1:13:70:36:d8:cf:ee:f4: ++ 0a:34:d5:5b:4c:fd:07:9c:a2:ba:d9:01:72:5c:f3:4d:c1:dd: ++ 0e:b1:1c:0d:c4:63:be:ad:f4:14:fb:89:ec:a2:41:0e:4c:cc: ++ c8:57:40:d0:6e:03:aa:cd:0c:8e:89:99:99:6c:f0:3c:30:af: ++ 38:df:6f:bc:a3:be:29:20:27:ab:74:ff:13:22:78:de:97:52: ++ 55:1e:83:b5:54:20:03:ee:ae:c0:4f:56:de:37:cc:c3:7f:aa: ++ 04:27:bb:d3:77:b8:62:db:17:7c:9c:28:22:13:73:6c:cf:26: ++ f5:8a:29:e7 ++-----BEGIN CERTIFICATE----- ++MIIDljCCAn6gAwIBAgIQC5McOtY5Z+pnI7/Dr5r0SzANBgkqhkiG9w0BAQsFADBl ++MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 ++d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv ++b3QgRzIwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQG ++EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl ++cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIwggEi ++MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5ygvUj82ckmIkzTz+GoeMVSA ++n61UQbVH35ao1K+ALbkKz3X9iaV9JPrjIgwrvJUXCzO/GU1BBpAAvQxNEP4Htecc ++biJVMWWXvdMX0h5i89vqbFCMP4QMls+3ywPgym2hFEwbid3tALBSfK+RbLE4E9Hp ++EgjAALAcKxHad3A2m67OeYfcgnDmCXRwVWmvo2ifv922ebPynXApVfSr/5Vh88lA ++bx3RvpO704gqu52/clpWcTs/1PPRCv4o76Pu2ZmvA9OPYLfykqGxvYmJHzDNw6Yu ++YjOuFgJ3RFrngQo8p0Quebg/BLxcoIfhG69Rjs3sLPr4/m3wOnyqi+RnlTGNAgMB ++AAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQW ++BBTOw0q5mVXyuNtgv6l+vVa1lzan1jANBgkqhkiG9w0BAQsFAAOCAQEAyqVVjOPI ++QW5pJ6d1Ee88hjZv0p3GeDgdaZaikmkuOGybfQTUiaWxMTeKySHMq2zNixya1r9I ++0jJmwYrA8y8678Dj1JGG0VDjA9tzd29KOVPt3ibHtX2vK0LRdWLjSisCx1BL4Gni ++lmwORGYQRI+tBev4eaymG+g3NJ1TyWGqolKvSnAWhsI6yLETcDbYz+70CjTVW0z9 ++B5yiutkBclzzTcHdDrEcDcRjvq30FPuJ7KJBDkzMyFdA0G4Dqs0MjomZmWzwPDCv ++ON9vvKO+KSAnq3T/EyJ43pdSVR6DtVQgA+6uwE9W3jfMw3+qBCe703e4YtsXfJwo ++IhNzbM8m9Yop5w== ++-----END CERTIFICATE----- ++ ++# 7e37cb8b4c47090cab36551ba6f45db840680fba166a952db100717f43053fc2 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 0b:a1:5a:fa:1d:df:a0:b5:49:44:af:cd:24:a0:6c:ec ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3 ++ Validity ++ Not Before: Aug 1 12:00:00 2013 GMT ++ Not After : Jan 15 12:00:00 2038 GMT ++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:19:e7:bc:ac:44:65:ed:cd:b8:3f:58:fb:8d:b1: ++ 57:a9:44:2d:05:15:f2:ef:0b:ff:10:74:9f:b5:62: ++ 52:5f:66:7e:1f:e5:dc:1b:45:79:0b:cc:c6:53:0a: ++ 9d:8d:5d:02:d9:a9:59:de:02:5a:f6:95:2a:0e:8d: ++ 38:4a:8a:49:c6:bc:c6:03:38:07:5f:55:da:7e:09: ++ 6e:e2:7f:5e:d0:45:20:0f:59:76:10:d6:a0:24:f0: ++ 2d:de:36:f2:6c:29:39 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ CB:D0:BD:A9:E1:98:05:51:A1:4D:37:A2:83:79:CE:8D:1D:2A:E4:84 ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:64:02:30:25:a4:81:45:02:6b:12:4b:75:74:4f:c8:23:e3: ++ 70:f2:75:72:de:7c:89:f0:cf:91:72:61:9e:5e:10:92:59:56: ++ b9:83:c7:10:e7:38:e9:58:26:36:7d:d5:e4:34:86:39:02:30: ++ 7c:36:53:f0:30:e5:62:63:3a:99:e2:b6:a3:3b:9b:34:fa:1e: ++ da:10:92:71:5e:91:13:a7:dd:a4:6e:92:cc:32:d6:f5:21:66: ++ c7:2f:ea:96:63:6a:65:45:92:95:01:b4 ++-----BEGIN CERTIFICATE----- ++MIICRjCCAc2gAwIBAgIQC6Fa+h3foLVJRK/NJKBs7DAKBggqhkjOPQQDAzBlMQsw ++CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu ++ZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3Qg ++RzMwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQGEwJV ++UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu ++Y29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwdjAQBgcq ++hkjOPQIBBgUrgQQAIgNiAAQZ57ysRGXtzbg/WPuNsVepRC0FFfLvC/8QdJ+1YlJf ++Zn4f5dwbRXkLzMZTCp2NXQLZqVneAlr2lSoOjThKiknGvMYDOAdfVdp+CW7if17Q ++RSAPWXYQ1qAk8C3eNvJsKTmjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/ ++BAQDAgGGMB0GA1UdDgQWBBTL0L2p4ZgFUaFNN6KDec6NHSrkhDAKBggqhkjOPQQD ++AwNnADBkAjAlpIFFAmsSS3V0T8gj43DydXLefInwz5FyYZ5eEJJZVrmDxxDnOOlY ++JjZ91eQ0hjkCMHw2U/Aw5WJjOpnitqM7mzT6HtoQknFekROn3aRukswy1vUhZscv ++6pZjamVFkpUBtA== ++-----END CERTIFICATE----- ++ ++# cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 03:3a:f1:e6:a7:11:a9:a0:bb:28:64:b1:1d:09:fa:e5 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2 ++ Validity ++ Not Before: Aug 1 12:00:00 2013 GMT ++ Not After : Jan 15 12:00:00 2038 GMT ++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:bb:37:cd:34:dc:7b:6b:c9:b2:68:90:ad:4a:75: ++ ff:46:ba:21:0a:08:8d:f5:19:54:c9:fb:88:db:f3: ++ ae:f2:3a:89:91:3c:7a:e6:ab:06:1a:6b:cf:ac:2d: ++ e8:5e:09:24:44:ba:62:9a:7e:d6:a3:a8:7e:e0:54: ++ 75:20:05:ac:50:b7:9c:63:1a:6c:30:dc:da:1f:19: ++ b1:d7:1e:de:fd:d7:e0:cb:94:83:37:ae:ec:1f:43: ++ 4e:dd:7b:2c:d2:bd:2e:a5:2f:e4:a9:b8:ad:3a:d4: ++ 99:a4:b6:25:e9:9b:6b:00:60:92:60:ff:4f:21:49: ++ 18:f7:67:90:ab:61:06:9c:8f:f2:ba:e9:b4:e9:92: ++ 32:6b:b5:f3:57:e8:5d:1b:cd:8c:1d:ab:95:04:95: ++ 49:f3:35:2d:96:e3:49:6d:dd:77:e3:fb:49:4b:b4: ++ ac:55:07:a9:8f:95:b3:b4:23:bb:4c:6d:45:f0:f6: ++ a9:b2:95:30:b4:fd:4c:55:8c:27:4a:57:14:7c:82: ++ 9d:cd:73:92:d3:16:4a:06:0c:8c:50:d1:8f:1e:09: ++ be:17:a1:e6:21:ca:fd:83:e5:10:bc:83:a5:0a:c4: ++ 67:28:f6:73:14:14:3d:46:76:c3:87:14:89:21:34: ++ 4d:af:0f:45:0c:a6:49:a1:ba:bb:9c:c5:b1:33:83: ++ 29:85 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ 4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39 ++ Signature Algorithm: sha256WithRSAEncryption ++ 60:67:28:94:6f:0e:48:63:eb:31:dd:ea:67:18:d5:89:7d:3c: ++ c5:8b:4a:7f:e9:be:db:2b:17:df:b0:5f:73:77:2a:32:13:39: ++ 81:67:42:84:23:f2:45:67:35:ec:88:bf:f8:8f:b0:61:0c:34: ++ a4:ae:20:4c:84:c6:db:f8:35:e1:76:d9:df:a6:42:bb:c7:44: ++ 08:86:7f:36:74:24:5a:da:6c:0d:14:59:35:bd:f2:49:dd:b6: ++ 1f:c9:b3:0d:47:2a:3d:99:2f:bb:5c:bb:b5:d4:20:e1:99:5f: ++ 53:46:15:db:68:9b:f0:f3:30:d5:3e:31:e2:8d:84:9e:e3:8a: ++ da:da:96:3e:35:13:a5:5f:f0:f9:70:50:70:47:41:11:57:19: ++ 4e:c0:8f:ae:06:c4:95:13:17:2f:1b:25:9f:75:f2:b1:8e:99: ++ a1:6f:13:b1:41:71:fe:88:2a:c8:4f:10:20:55:d7:f3:14:45: ++ e5:e0:44:f4:ea:87:95:32:93:0e:fe:53:46:fa:2c:9d:ff:8b: ++ 22:b9:4b:d9:09:45:a4:de:a4:b8:9a:58:dd:1b:7d:52:9f:8e: ++ 59:43:88:81:a4:9e:26:d5:6f:ad:dd:0d:c6:37:7d:ed:03:92: ++ 1b:e5:77:5f:76:ee:3c:8d:c4:5d:56:5b:a2:d9:66:6e:b3:35: ++ 37:e5:32:b6 ++-----BEGIN CERTIFICATE----- ++MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh ++MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 ++d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH ++MjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVT ++MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j ++b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG ++9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI ++2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx ++1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ ++q2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz ++tCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ ++vIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo0IwQDAP ++BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV ++5uNu5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY ++1Yl9PMWLSn/pvtsrF9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4 ++NeF22d+mQrvHRAiGfzZ0JFrabA0UWTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NG ++Fdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBHQRFXGU7Aj64GxJUTFy8bJZ91 ++8rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/iyK5S9kJRaTe ++pLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl ++MrY= ++-----END CERTIFICATE----- ++ ++# e23d4a036d7b70e9f595b1422079d2b91edfbb1fb651a0633eaa8a9dc5f80703 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 92:b8:88:db:b0:8a:c1:63 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = SK, L = Bratislava, O = Disig a.s., CN = CA Disig Root R2 ++ Validity ++ Not Before: Jul 19 09:15:30 2012 GMT ++ Not After : Jul 19 09:15:30 2042 GMT ++ Subject: C = SK, L = Bratislava, O = Disig a.s., CN = CA Disig Root R2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:a2:a3:c4:00:09:d6:85:5d:2d:6d:14:f6:c2:c3: ++ 73:9e:35:c2:71:55:7e:81:fb:ab:46:50:e0:c1:7c: ++ 49:78:e6:ab:79:58:3c:da:ff:7c:1c:9f:d8:97:02: ++ 78:3e:6b:41:04:e9:41:bd:be:03:2c:45:f6:2f:64: ++ d4:ab:5d:a3:47:3d:64:9b:e9:68:9a:c6:cc:1b:3f: ++ ba:be:b2:8b:34:02:2e:98:55:19:fc:8c:6f:aa:5f: ++ da:4c:ce:4d:03:21:a3:d8:d2:34:93:56:96:cb:4c: ++ 0c:00:16:3c:5f:1a:cd:c8:c7:6c:a6:ad:d3:31:a7: ++ bc:e8:e5:e1:66:d6:d2:fb:03:b4:41:65:c9:10:ae: ++ 0e:05:63:c6:80:6a:69:30:fd:d2:ee:90:ef:0d:27: ++ df:9f:95:73:f4:e1:25:da:6c:16:de:41:38:34:ea: ++ 8b:fc:d1:e8:04:14:61:2d:41:7e:ac:c7:77:4e:cb: ++ 51:54:fb:5e:92:18:1b:04:5a:68:c6:c9:c4:fa:b7: ++ 13:a0:98:b7:11:2b:b7:d6:57:cc:7c:9e:17:d1:cb: ++ 25:fe:86:4e:24:2e:56:0c:78:4d:9e:01:12:a6:2b: ++ a7:01:65:6e:7c:62:1d:84:84:df:ea:c0:6b:b5:a5: ++ 2a:95:83:c3:53:11:0c:73:1d:0b:b2:46:90:d1:42: ++ 3a:ce:40:6e:95:ad:ff:c6:94:ad:6e:97:84:8e:7d: ++ 6f:9e:8a:80:0d:49:6d:73:e2:7b:92:1e:c3:f3:c1: ++ f3:eb:2e:05:6f:d9:1b:cf:37:76:04:c8:b4:5a:e4: ++ 17:a7:cb:dd:76:1f:d0:19:76:e8:2c:05:b3:d6:9c: ++ 34:d8:96:dc:61:87:91:05:e4:44:08:33:c1:da:b9: ++ 08:65:d4:ae:b2:36:0d:eb:ba:38:ba:0c:e5:9b:9e: ++ eb:8d:66:dd:99:cf:d6:89:41:f6:04:92:8a:29:29: ++ 6d:6b:3a:1c:e7:75:7d:02:71:0e:f3:c0:e7:bd:cb: ++ 19:dd:9d:60:b2:c2:66:60:b6:b1:04:ee:c9:e6:86: ++ b9:9a:66:40:a8:e7:11:ed:81:45:03:8b:f6:67:59: ++ e8:c1:06:11:bd:dd:cf:80:02:4f:65:40:78:5c:47: ++ 50:c8:9b:e6:1f:81:7b:e4:44:a8:5b:85:9a:e2:de: ++ 5a:d5:c7:f9:3a:44:66:4b:e4:32:54:7c:e4:6c:9c: ++ b3:0e:3d:17:a2:b2:34:12:d6:7e:b2:a8:49:bb:d1: ++ 7a:28:40:be:a2:16:1f:df:e4:37:1f:11:73:fb:90: ++ 0a:65:43:a2:0d:7c:f8:06:01:55:33:7d:b0:0d:b8: ++ f4:f5:ae:a5:42:57:7c:36:11:8c:7b:5e:c4:03:9d: ++ 8c:79:9d ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ B5:99:F8:AF:B0:94:F5:E3:20:D6:0A:AD:CE:4E:56:A4:2E:6E:42:ED ++ Signature Algorithm: sha256WithRSAEncryption ++ 26:06:5e:70:e7:65:33:c8:82:6e:d9:9c:17:3a:1b:7a:66:b2: ++ 01:f6:78:3b:69:5e:2f:ea:ff:4e:f9:28:c3:98:2a:61:4c:b4: ++ 24:12:8a:7d:6d:11:14:f7:9c:b5:ca:e6:bc:9e:27:8e:4c:19: ++ c8:a9:bd:7a:c0:d7:36:0e:6d:85:72:6e:a8:c6:a2:6d:f6:fa: ++ 73:63:7f:bc:6e:79:08:1c:9d:8a:9f:1a:8a:53:a6:d8:bb:d9: ++ 35:55:b1:11:c5:a9:03:b3:56:3b:b9:84:93:22:5e:7e:c1:f6: ++ 12:52:8b:ea:2c:67:bc:fe:36:4c:f5:b8:cf:d1:b3:49:92:3b: ++ d3:29:0e:99:1b:96:f7:61:b8:3b:c4:2b:b6:78:6c:b4:23:6f: ++ f0:fd:d3:b2:5e:75:1f:99:95:a8:ac:f6:da:e1:c5:31:7b:fb: ++ d1:46:b3:d2:bc:67:b4:62:54:ba:09:f7:63:b0:93:a2:9a:f9: ++ e9:52:2e:8b:60:12:ab:fc:f5:60:56:ef:10:5c:8b:c4:1a:42: ++ dc:83:5b:64:0e:cb:b5:bc:d6:4f:c1:7c:3c:6e:8d:13:6d:fb: ++ 7b:eb:30:d0:dc:4d:af:c5:d5:b6:a5:4c:5b:71:c9:e8:31:be: ++ e8:38:06:48:a1:1a:e2:ea:d2:de:12:39:58:1a:ff:80:0e:82: ++ 75:e6:b7:c9:07:6c:0e:ef:ff:38:f1:98:71:c4:b7:7f:0e:15: ++ d0:25:69:bd:22:9d:2b:ed:05:f6:46:47:ac:ed:c0:f0:d4:3b: ++ e2:ec:ee:96:5b:90:13:4e:1e:56:3a:eb:b0:ef:96:bb:96:23: ++ 11:ba:f2:43:86:74:64:95:c8:28:75:df:1d:35:ba:d2:37:83: ++ 38:53:38:36:3b:cf:6c:e9:f9:6b:0e:d0:fb:04:e8:4f:77:d7: ++ 65:01:78:86:0c:7a:3e:21:62:f1:7f:63:71:0c:c9:9f:44:db: ++ a8:27:a2:75:be:6e:81:3e:d7:c0:eb:1b:98:0f:70:5c:34:b2: ++ 8a:cc:c0:85:18:eb:6e:7a:b3:f7:5a:a1:07:bf:a9:42:92:f3: ++ 60:22:97:e4:14:a1:07:9b:4e:76:c0:8e:7d:fd:a4:25:c7:47: ++ ed:ff:1f:73:ac:cc:c3:a5:e9:6f:0a:8e:9b:65:c2:50:85:b5: ++ a3:a0:53:12:cc:55:87:61:f3:81:ae:10:46:61:bd:44:21:b8: ++ c2:3d:74:cf:7e:24:35:fa:1c:07:0e:9b:3d:22:ca:ef:31:2f: ++ 8c:ac:12:bd:ef:40:28:fc:29:67:9f:b2:13:4f:66:24:c4:53: ++ 19:e9:1e:29:15:ef:e6:6d:b0:7f:2d:67:fd:f3:6c:1b:75:46: ++ a3:e5:4a:17:e9:a4:d7:0b + -----BEGIN CERTIFICATE----- + MIIFaTCCA1GgAwIBAgIJAJK4iNuwisFjMA0GCSqGSIb3DQEBCwUAMFIxCzAJBgNV + BAYTAlNLMRMwEQYDVQQHEwpCcmF0aXNsYXZhMRMwEQYDVQQKEwpEaXNpZyBhLnMu +@@ -1713,13 +2752,1316 @@ zMOl6W8KjptlwlCFtaOgUxLMVYdh84GuEEZhvUQhuMI9dM9+JDX6HAcOmz0iyu8x + L4ysEr3vQCj8KWefshNPZiTEUxnpHikV7+ZtsH8tZ/3zbBt1RqPlShfppNcL + -----END CERTIFICATE----- + +-# Issuer: CN=ACCVRAIZ1 O=ACCV OU=PKIACCV +-# Subject: CN=ACCVRAIZ1 O=ACCV OU=PKIACCV +-# Label: "ACCVRAIZ1" +-# Serial: 6828503384748696800 +-# MD5 Fingerprint: d0:a0:5a:ee:05:b6:09:94:21:a1:7d:f1:b2:29:82:02 +-# SHA1 Fingerprint: 93:05:7a:88:15:c6:4f:ce:88:2f:fa:91:16:52:28:78:bc:53:64:17 +-# SHA256 Fingerprint: 9a:6e:c0:12:e1:a7:da:9d:be:34:19:4d:47:8a:d7:c0:db:18:22:fb:07:1d:f1:29:81:49:6e:d1:04:38:41:13 ++# 40f6af0346a99aa1cd1d555a4e9cce62c7f9634603ee406615833dc8c8d00367 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 31:f5:e4:62:0c:6c:58:ed:d6:d8 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign Root CA - G1 ++ Validity ++ Not Before: Feb 18 18:30:00 2018 GMT ++ Not After : Feb 18 18:30:00 2043 GMT ++ Subject: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign Root CA - G1 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:93:4b:bb:e9:66:8a:ee:9d:5b:d5:34:93:d0:1b: ++ 1e:c3:e7:9e:b8:64:33:7f:63:78:68:b4:cd:2e:71: ++ 75:d7:9b:20:c6:4d:29:bc:b6:68:60:8a:f7:21:9a: ++ 56:35:5a:f3:76:bd:d8:cd:9a:ff:93:56:4b:a5:59: ++ 06:a1:93:34:29:dd:16:34:75:4e:f2:81:b4:c7:96: ++ 4e:ad:19:15:52:4a:fe:3c:70:75:70:cd:af:2b:ab: ++ 15:9a:33:3c:aa:b3:8b:aa:cd:43:fd:f5:ea:70:ff: ++ ed:cf:11:3b:94:ce:4e:32:16:d3:23:40:2a:77:b3: ++ af:3c:01:2c:6c:ed:99:2c:8b:d9:4e:69:98:b2:f7: ++ 8f:41:b0:32:78:61:d6:0d:5f:c3:fa:a2:40:92:1d: ++ 5c:17:e6:70:3e:35:e7:a2:b7:c2:62:e2:ab:a4:38: ++ 4c:b5:39:35:6f:ea:03:69:fa:3a:54:68:85:6d:d6: ++ f2:2f:43:55:1e:91:0d:0e:d8:d5:6a:a4:96:d1:13: ++ 3c:2c:78:50:e8:3a:92:d2:17:56:e5:35:1a:40:1c: ++ 3e:8d:2c:ed:39:df:42:e0:83:41:74:df:a3:cd:c2: ++ 86:60:48:68:e3:69:0b:54:00:8b:e4:76:69:21:0d: ++ 79:4e:34:08:5e:14:c2:cc:b1:b7:ad:d7:7c:70:8a: ++ c7:85 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ FB:EF:0D:86:9E:B0:E3:DD:A9:B9:F1:21:17:7F:3E:FC:F0:77:2B:1A ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: sha256WithRSAEncryption ++ 59:ff:f2:8c:f5:87:7d:71:3d:a3:9f:1b:5b:d1:da:f8:d3:9c: ++ 6b:36:bd:9b:a9:61:eb:de:16:2c:74:3d:9e:e6:75:da:d7:ba: ++ a7:bc:42:17:e7:3d:91:eb:e5:7d:dd:3e:9c:f1:cf:92:ac:6c: ++ 48:cc:c2:22:3f:69:3b:c5:b6:15:2f:a3:35:c6:68:2a:1c:57: ++ af:39:ef:8d:d0:35:c3:18:0c:7b:00:56:1c:cd:8b:19:74:de: ++ be:0f:12:e0:d0:aa:a1:3f:02:34:b1:70:ce:9d:18:d6:08:03: ++ 09:46:ee:60:e0:7e:b6:c4:49:04:51:7d:70:60:bc:aa:b2:ff: ++ 79:72:7a:a6:1d:3d:5f:2a:f8:ca:e2:fd:39:b7:47:b9:eb:7e: ++ df:04:23:af:fa:9c:06:07:e9:fb:63:93:80:40:b5:c6:6c:0a: ++ 31:28:ce:0c:9f:cf:b3:23:35:80:41:8d:6c:c4:37:7b:81:2f: ++ 80:a1:40:42:85:e9:d9:38:8d:e8:a1:53:cd:01:bf:69:e8:5a: ++ 06:f2:45:0b:90:fa:ae:e1:bf:9d:f2:ae:57:3c:a5:ae:b2:56: ++ f4:8b:65:40:e9:fd:31:81:2c:f4:39:09:d8:ee:6b:a7:b4:a6: ++ 1d:15:a5:98:f7:01:81:d8:85:7d:f3:51:5c:71:88:de:ba:cc: ++ 1f:80:7e:4a ++-----BEGIN CERTIFICATE----- ++MIIDlDCCAnygAwIBAgIKMfXkYgxsWO3W2DANBgkqhkiG9w0BAQsFADBnMQswCQYD ++VQQGEwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBU ++ZWNobm9sb2dpZXMgTGltaXRlZDEcMBoGA1UEAxMTZW1TaWduIFJvb3QgQ0EgLSBH ++MTAeFw0xODAyMTgxODMwMDBaFw00MzAyMTgxODMwMDBaMGcxCzAJBgNVBAYTAklO ++MRMwEQYDVQQLEwplbVNpZ24gUEtJMSUwIwYDVQQKExxlTXVkaHJhIFRlY2hub2xv ++Z2llcyBMaW1pdGVkMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEcxMIIBIjAN ++BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0u76WaK7p1b1TST0Bsew+eeuGQz ++f2N4aLTNLnF115sgxk0pvLZoYIr3IZpWNVrzdr3YzZr/k1ZLpVkGoZM0Kd0WNHVO ++8oG0x5ZOrRkVUkr+PHB1cM2vK6sVmjM8qrOLqs1D/fXqcP/tzxE7lM5OMhbTI0Aq ++d7OvPAEsbO2ZLIvZTmmYsvePQbAyeGHWDV/D+qJAkh1cF+ZwPjXnorfCYuKrpDhM ++tTk1b+oDafo6VGiFbdbyL0NVHpENDtjVaqSW0RM8LHhQ6DqS0hdW5TUaQBw+jSzt ++Od9C4INBdN+jzcKGYEho42kLVACL5HZpIQ15TjQIXhTCzLG3rdd8cIrHhQIDAQAB ++o0IwQDAdBgNVHQ4EFgQU++8Nhp6w492pufEhF38+/PB3KxowDgYDVR0PAQH/BAQD ++AgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAFn/8oz1h31x ++PaOfG1vR2vjTnGs2vZupYeveFix0PZ7mddrXuqe8QhfnPZHr5X3dPpzxz5KsbEjM ++wiI/aTvFthUvozXGaCocV685743QNcMYDHsAVhzNixl03r4PEuDQqqE/AjSxcM6d ++GNYIAwlG7mDgfrbESQRRfXBgvKqy/3lyeqYdPV8q+Mri/Tm3R7nrft8EI6/6nAYH ++6ftjk4BAtcZsCjEozgyfz7MjNYBBjWzEN3uBL4ChQEKF6dk4jeihU80Bv2noWgby ++RQuQ+q7hv53yrlc8pa6yVvSLZUDp/TGBLPQ5Cdjua6e0ph0VpZj3AYHYhX3zUVxx ++iN66zB+Afko= ++-----END CERTIFICATE----- ++ ++# 86a1ecba089c4a8d3bbe2734c612ba341d813e043cf9e8a862cd5c57a36bbe6b ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 3c:f6:07:a9:68:70:0e:da:8b:84 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign ECC Root CA - G3 ++ Validity ++ Not Before: Feb 18 18:30:00 2018 GMT ++ Not After : Feb 18 18:30:00 2043 GMT ++ Subject: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign ECC Root CA - G3 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:23:a5:0c:b8:2d:12:f5:28:f3:b1:b2:dd:e2:02: ++ 12:80:9e:39:5f:49:4d:9f:c9:25:34:59:74:ec:bb: ++ 06:1c:e7:c0:72:af:e8:ae:2f:e1:41:54:87:14:a8: ++ 4a:b2:e8:7c:82:e6:5b:6a:b5:dc:b3:75:ce:8b:06: ++ d0:86:23:bf:46:d5:8e:0f:3f:04:f4:d7:1c:92:7e: ++ f6:a5:63:c2:f5:5f:8e:2e:4f:a1:18:19:02:2b:32: ++ 0a:82:64:7d:16:93:d1 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:66:02:31:00:be:f3:61:cf:02:10:1d:64:95:07:b8:18:6e: ++ 88:85:05:2f:83:08:17:90:ca:1f:8a:4c:e8:0d:1b:7a:b1:ad: ++ d5:81:09:47:ef:3b:ac:08:04:7c:5c:99:b1:ed:47:07:d2:02: ++ 31:00:9d:ba:55:fc:a9:4a:e8:ed:ed:e6:76:01:42:7b:c8:f8: ++ 60:d9:8d:51:8b:55:3b:fb:8c:7b:eb:65:09:c3:f8:96:cd:47: ++ a8:82:f2:16:55:77:24:7e:12:10:95:04:2c:a3 ++-----BEGIN CERTIFICATE----- ++MIICTjCCAdOgAwIBAgIKPPYHqWhwDtqLhDAKBggqhkjOPQQDAzBrMQswCQYDVQQG ++EwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNo ++bm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g ++RzMwHhcNMTgwMjE4MTgzMDAwWhcNNDMwMjE4MTgzMDAwWjBrMQswCQYDVQQGEwJJ ++TjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9s ++b2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0gRzMw ++djAQBgcqhkjOPQIBBgUrgQQAIgNiAAQjpQy4LRL1KPOxst3iAhKAnjlfSU2fySU0 ++WXTsuwYc58Byr+iuL+FBVIcUqEqy6HyC5ltqtdyzdc6LBtCGI79G1Y4PPwT01xyS ++fvalY8L1X44uT6EYGQIrMgqCZH0Wk9GjQjBAMB0GA1UdDgQWBBR8XQKEE9TMipuB ++zhccLikenEhjQjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggq ++hkjOPQQDAwNpADBmAjEAvvNhzwIQHWSVB7gYboiFBS+DCBeQyh+KTOgNG3qxrdWB ++CUfvO6wIBHxcmbHtRwfSAjEAnbpV/KlK6O3t5nYBQnvI+GDZjVGLVTv7jHvrZQnD +++JbNR6iC8hZVdyR+EhCVBCyj ++-----END CERTIFICATE----- ++ ++# bfff8fd04433487d6a8aa60c1a29767a9fc2bbb05e420f713a13b992891d3893 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 9009899650740120186 (0x7d0997fef047ea7a) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = CN, O = "GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.", CN = GDCA TrustAUTH R5 ROOT ++ Validity ++ Not Before: Nov 26 05:13:15 2014 GMT ++ Not After : Dec 31 15:59:59 2040 GMT ++ Subject: C = CN, O = "GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.", CN = GDCA TrustAUTH R5 ROOT ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:d9:a3:16:f0:c8:74:74:77:9b:ef:33:0d:3b:06: ++ 7e:55:fc:b5:60:8f:76:86:12:42:7d:56:66:3e:88: ++ 82:ed:72:63:0e:9e:8b:dd:34:2c:02:51:51:c3:19: ++ fd:59:54:84:c9:f1:6b:b3:4c:b0:e9:e8:46:5d:38: ++ c6:a2:a7:2e:11:57:ba:82:15:a2:9c:8f:6d:b0:99: ++ 4a:0a:f2:eb:89:70:63:4e:79:c4:b7:5b:bd:a2:5d: ++ b1:f2:41:02:2b:ad:a9:3a:a3:ec:79:0a:ec:5f:3a: ++ e3:fd:ef:80:3c:ad:34:9b:1a:ab:88:26:7b:56:a2: ++ 82:86:1f:eb:35:89:83:7f:5f:ae:29:4e:3d:b6:6e: ++ ec:ae:c1:f0:27:9b:ae:e3:f4:ec:ef:ae:7f:f7:86: ++ 3d:72:7a:eb:a5:fb:59:4e:a7:eb:95:8c:22:39:79: ++ e1:2d:08:8f:cc:bc:91:b8:41:f7:14:c1:23:a9:c3: ++ ad:9a:45:44:b3:b2:d7:2c:cd:c6:29:e2:50:10:ae: ++ 5c:cb:82:8e:17:18:36:7d:97:e6:88:9a:b0:4d:34: ++ 09:f4:2c:b9:5a:66:2a:b0:17:9b:9e:1e:76:9d:4a: ++ 66:31:41:df:3f:fb:c5:06:ef:1b:b6:7e:1a:46:36: ++ f7:64:63:3b:e3:39:18:23:e7:67:75:14:d5:75:57: ++ 92:37:bd:be:6a:1b:26:50:f2:36:26:06:90:c5:70: ++ 01:64:6d:76:66:e1:91:db:6e:07:c0:61:80:2e:b2: ++ 2e:2f:8c:70:a7:d1:3b:3c:b3:91:e4:6e:b6:c4:3b: ++ 70:f2:6c:92:97:09:cd:47:7d:18:c0:f3:bb:9e:0f: ++ d6:8b:ae:07:b6:5a:0f:ce:0b:0c:47:a7:e5:3e:b8: ++ bd:7d:c7:9b:35:a0:61:97:3a:41:75:17:cc:2b:96: ++ 77:2a:92:21:1e:d9:95:76:20:67:68:cf:0d:bd:df: ++ d6:1f:09:6a:9a:e2:cc:73:71:a4:2f:7d:12:80:b7: ++ 53:30:46:5e:4b:54:99:0f:67:c9:a5:c8:f2:20:c1: ++ 82:ec:9d:11:df:c2:02:fb:1a:3b:d1:ed:20:9a:ef: ++ 65:64:92:10:0d:2a:e2:de:70:f1:18:67:82:8c:61: ++ de:b8:bc:d1:2f:9c:fb:0f:d0:2b:ed:1b:76:b9:e4: ++ 39:55:f8:f8:a1:1d:b8:aa:80:00:4c:82:e7:b2:7f: ++ 09:b8:bc:30:a0:2f:0d:f5:52:9e:8e:f7:92:b3:0a: ++ 00:1d:00:54:97:06:e0:b1:07:d9:c7:0f:5c:65:7d: ++ 3c:6d:59:57:e4:ed:a5:8d:e9:40:53:9f:15:4b:a0: ++ 71:f6:1a:21:e3:da:70:06:21:58:14:87:85:77:79: ++ aa:82:79 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ E2:C9:40:9F:4D:CE:E8:9A:A1:7C:CF:0E:3F:65:C5:29:88:6A:19:51 ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ d1:49:57:e0:a7:cc:68:58:ba:01:0f:2b:19:cd:8d:b0:61:45: ++ ac:11:ed:63:50:69:f8:1f:7f:be:16:8f:fd:9d:eb:0b:aa:32: ++ 47:76:d2:67:24:ed:bd:7c:33:32:97:2a:c7:05:86:66:0d:17: ++ 7d:14:15:1b:d4:eb:fd:1f:9a:f6:5e:97:69:b7:1a:25:a4:0a: ++ b3:91:3f:5f:36:ac:8b:ec:57:a8:3e:e7:81:8a:18:57:39:85: ++ 74:1a:42:c7:e9:5b:13:5f:8f:f9:08:e9:92:74:8d:f5:47:d2: ++ ab:3b:d6:fb:78:66:4e:36:7d:f9:e9:92:e9:04:de:fd:49:63: ++ fc:6d:fb:14:71:93:67:2f:47:4a:b7:b9:ff:1e:2a:73:70:46: ++ 30:bf:5a:f2:2f:79:a5:e1:8d:0c:d9:f9:b2:63:37:8c:37:65: ++ 85:70:6a:5c:5b:09:72:b9:ad:63:3c:b1:dd:f8:fc:32:bf:37: ++ 86:e4:bb:8e:98:27:7e:ba:1f:16:e1:70:11:f2:03:df:25:62: ++ 32:27:26:18:32:84:9f:ff:00:3a:13:ba:9a:4d:f4:4f:b8:14: ++ 70:22:b1:ca:2b:90:ce:29:c1:70:f4:2f:9d:7f:f2:90:1e:d6: ++ 5a:df:b7:46:fc:e6:86:fa:cb:e0:20:76:7a:ba:a6:cb:f5:7c: ++ de:62:a5:b1:8b:ee:de:82:66:8a:4e:3a:30:1f:3f:80:cb:ad: ++ 27:ba:0c:5e:d7:d0:b1:56:ca:77:71:b2:b5:75:a1:50:a9:40: ++ 43:17:c2:28:d9:cf:52:8b:5b:c8:63:d4:42:3e:a0:33:7a:46: ++ 2e:f7:0a:20:46:54:7e:6a:4f:31:f1:81:7e:42:74:38:65:73: ++ 27:ee:c6:7c:b8:8e:d7:a5:3a:d7:98:a1:9c:8c:10:55:d3:db: ++ 4b:ec:40:90:f2:cd:6e:57:d2:62:0e:7c:57:93:b1:a7:6d:cd: ++ 9d:83:bb:2a:e7:e5:b6:3b:71:58:ad:fd:d1:45:bc:5a:91:ee: ++ 53:15:6f:d3:45:09:75:6e:ba:90:5d:1e:04:cf:37:df:1e:a8: ++ 66:b1:8c:e6:20:6a:ef:fc:48:4e:74:98:42:af:29:6f:2e:6a: ++ c7:fb:7d:d1:66:31:22:cc:86:00:7e:66:83:0c:42:f4:bd:34: ++ 92:c3:1a:ea:4f:ca:7e:72:4d:0b:70:8c:a6:48:bb:a6:a1:14: ++ f6:fb:58:44:99:14:ae:aa:0b:93:69:a0:29:25:4a:a5:cb:2b: ++ dd:8a:66:07:16:78:15:57:71:1b:ec:f5:47:84:f3:9e:31:37: ++ 7a:d5:7f:24:ad:e4:bc:fd:fd:cc:6e:83:e8:0c:a8:b7:41:6c: ++ 07:dd:bd:3c:86:97:2f:d2 ++-----BEGIN CERTIFICATE----- ++MIIFiDCCA3CgAwIBAgIIfQmX/vBH6nowDQYJKoZIhvcNAQELBQAwYjELMAkGA1UE ++BhMCQ04xMjAwBgNVBAoMKUdVQU5HIERPTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZ ++IENPLixMVEQuMR8wHQYDVQQDDBZHRENBIFRydXN0QVVUSCBSNSBST09UMB4XDTE0 ++MTEyNjA1MTMxNVoXDTQwMTIzMTE1NTk1OVowYjELMAkGA1UEBhMCQ04xMjAwBgNV ++BAoMKUdVQU5HIERPTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZIENPLixMVEQuMR8w ++HQYDVQQDDBZHRENBIFRydXN0QVVUSCBSNSBST09UMIICIjANBgkqhkiG9w0BAQEF ++AAOCAg8AMIICCgKCAgEA2aMW8Mh0dHeb7zMNOwZ+Vfy1YI92hhJCfVZmPoiC7XJj ++Dp6L3TQsAlFRwxn9WVSEyfFrs0yw6ehGXTjGoqcuEVe6ghWinI9tsJlKCvLriXBj ++TnnEt1u9ol2x8kECK62pOqPseQrsXzrj/e+APK00mxqriCZ7VqKChh/rNYmDf1+u ++KU49tm7srsHwJ5uu4/Ts765/94Y9cnrrpftZTqfrlYwiOXnhLQiPzLyRuEH3FMEj ++qcOtmkVEs7LXLM3GKeJQEK5cy4KOFxg2fZfmiJqwTTQJ9Cy5WmYqsBebnh52nUpm ++MUHfP/vFBu8btn4aRjb3ZGM74zkYI+dndRTVdVeSN72+ahsmUPI2JgaQxXABZG12 ++ZuGR224HwGGALrIuL4xwp9E7PLOR5G62xDtw8mySlwnNR30YwPO7ng/Wi64HtloP ++zgsMR6flPri9fcebNaBhlzpBdRfMK5Z3KpIhHtmVdiBnaM8Nvd/WHwlqmuLMc3Gk ++L30SgLdTMEZeS1SZD2fJpcjyIMGC7J0R38IC+xo70e0gmu9lZJIQDSri3nDxGGeC ++jGHeuLzRL5z7D9Ar7Rt2ueQ5Vfj4oR24qoAATILnsn8JuLwwoC8N9VKejveSswoA ++HQBUlwbgsQfZxw9cZX08bVlX5O2ljelAU58VS6Bx9hoh49pwBiFYFIeFd3mqgnkC ++AwEAAaNCMEAwHQYDVR0OBBYEFOLJQJ9NzuiaoXzPDj9lxSmIahlRMA8GA1UdEwEB ++/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQDRSVfg ++p8xoWLoBDysZzY2wYUWsEe1jUGn4H3++Fo/9nesLqjJHdtJnJO29fDMylyrHBYZm ++DRd9FBUb1Ov9H5r2XpdptxolpAqzkT9fNqyL7FeoPueBihhXOYV0GkLH6VsTX4/5 ++COmSdI31R9KrO9b7eGZONn356ZLpBN79SWP8bfsUcZNnL0dKt7n/HipzcEYwv1ry ++L3ml4Y0M2fmyYzeMN2WFcGpcWwlyua1jPLHd+PwyvzeG5LuOmCd+uh8W4XAR8gPf ++JWIyJyYYMoSf/wA6E7qaTfRPuBRwIrHKK5DOKcFw9C+df/KQHtZa37dG/OaG+svg ++IHZ6uqbL9XzeYqWxi+7egmaKTjowHz+Ay60nugxe19CxVsp3cbK1daFQqUBDF8Io ++2c9Si1vIY9RCPqAzekYu9wogRlR+ak8x8YF+QnQ4ZXMn7sZ8uI7XpTrXmKGcjBBV ++09tL7ECQ8s1uV9JiDnxXk7Gnbc2dg7sq5+W2O3FYrf3RRbxake5TFW/TRQl1brqQ ++XR4EzzffHqhmsYzmIGrv/EhOdJhCrylvLmrH+33RZjEizIYAfmaDDEL0vTSSwxrq ++T8p+ck0LcIymSLumoRT2+1hEmRSuqguTaaApJUqlyyvdimYHFngVV3Eb7PVHhPOe ++MTd61X8kreS8/f3MboPoDKi3QWwH3b08hpcv0g== ++-----END CERTIFICATE----- ++ ++# 179fbc148a3dd00fd24ea13458cc43bfa7f59c8182d783a513f6ebec100c8924 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 60:59:49:e0:26:2e:bb:55:f9:0a:77:8a:71:f9:4a:d8:6c ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: OU = GlobalSign ECC Root CA - R5, O = GlobalSign, CN = GlobalSign ++ Validity ++ Not Before: Nov 13 00:00:00 2012 GMT ++ Not After : Jan 19 03:14:07 2038 GMT ++ Subject: OU = GlobalSign ECC Root CA - R5, O = GlobalSign, CN = GlobalSign ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:47:45:0e:96:fb:7d:5d:bf:e9:39:d1:21:f8:9f: ++ 0b:b6:d5:7b:1e:92:3a:48:59:1c:f0:62:31:2d:c0: ++ 7a:28:fe:1a:a7:5c:b3:b6:cc:97:e7:45:d4:58:fa: ++ d1:77:6d:43:a2:c0:87:65:34:0a:1f:7a:dd:eb:3c: ++ 33:a1:c5:9d:4d:a4:6f:41:95:38:7f:c9:1e:84:eb: ++ d1:9e:49:92:87:94:87:0c:3a:85:4a:66:9f:9d:59: ++ 93:4d:97:61:06:86:4a ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 3D:E6:29:48:9B:EA:07:CA:21:44:4A:26:DE:6E:DE:D2:83:D0:9F:59 ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:65:02:31:00:e5:69:12:c9:6e:db:c6:31:ba:09:41:e1:97: ++ f8:fb:fd:9a:e2:7d:12:c9:ed:7c:64:d3:cb:05:25:8b:56:d9: ++ a0:e7:5e:5d:4e:0b:83:9c:5b:76:29:a0:09:26:21:6a:62:02: ++ 30:71:d2:b5:8f:5c:ea:3b:e1:78:09:85:a8:75:92:3b:c8:5c: ++ fd:48:ef:0d:74:22:a8:08:e2:6e:c5:49:ce:c7:0c:bc:a7:61: ++ 69:f1:f7:3b:e1:2a:cb:f9:2b:f3:66:90:37 ++-----BEGIN CERTIFICATE----- ++MIICHjCCAaSgAwIBAgIRYFlJ4CYuu1X5CneKcflK2GwwCgYIKoZIzj0EAwMwUDEk ++MCIGA1UECxMbR2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI1MRMwEQYDVQQKEwpH ++bG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWduMB4XDTEyMTExMzAwMDAwMFoX ++DTM4MDExOTAzMTQwN1owUDEkMCIGA1UECxMbR2xvYmFsU2lnbiBFQ0MgUm9vdCBD ++QSAtIFI1MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWdu ++MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAER0UOlvt9Xb/pOdEh+J8LttV7HpI6SFkc ++8GIxLcB6KP4ap1yztsyX50XUWPrRd21DosCHZTQKH3rd6zwzocWdTaRvQZU4f8ke ++hOvRnkmSh5SHDDqFSmafnVmTTZdhBoZKo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYD ++VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUPeYpSJvqB8ohREom3m7e0oPQn1kwCgYI ++KoZIzj0EAwMDaAAwZQIxAOVpEslu28YxuglB4Zf4+/2a4n0Sye18ZNPLBSWLVtmg ++515dTguDnFt2KaAJJiFqYgIwcdK1j1zqO+F4CYWodZI7yFz9SO8NdCKoCOJuxUnO ++xwy8p2Fp8fc74SrL+SvzZpA3 ++-----END CERTIFICATE----- ++ ++# 2cabeafe37d06ca22aba7391c0033d25982952c453647349763a3ab5ad6ccf69 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51 ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: OU = GlobalSign Root CA - R6, O = GlobalSign, CN = GlobalSign ++ Validity ++ Not Before: Dec 10 00:00:00 2014 GMT ++ Not After : Dec 10 00:00:00 2034 GMT ++ Subject: OU = GlobalSign Root CA - R6, O = GlobalSign, CN = GlobalSign ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:95:07:e8:73:ca:66:f9:ec:14:ca:7b:3c:f7:0d: ++ 08:f1:b4:45:0b:2c:82:b4:48:c6:eb:5b:3c:ae:83: ++ b8:41:92:33:14:a4:6f:7f:e9:2a:cc:c6:b0:88:6b: ++ c5:b6:89:d1:c6:b2:ff:14:ce:51:14:21:ec:4a:dd: ++ 1b:5a:c6:d6:87:ee:4d:3a:15:06:ed:64:66:0b:92: ++ 80:ca:44:de:73:94:4e:f3:a7:89:7f:4f:78:63:08: ++ c8:12:50:6d:42:66:2f:4d:b9:79:28:4d:52:1a:8a: ++ 1a:80:b7:19:81:0e:7e:c4:8a:bc:64:4c:21:1c:43: ++ 68:d7:3d:3c:8a:c5:b2:66:d5:90:9a:b7:31:06:c5: ++ be:e2:6d:32:06:a6:1e:f9:b9:eb:aa:a3:b8:bf:be: ++ 82:63:50:d0:f0:18:89:df:e4:0f:79:f5:ea:a2:1f: ++ 2a:d2:70:2e:7b:e7:bc:93:bb:6d:53:e2:48:7c:8c: ++ 10:07:38:ff:66:b2:77:61:7e:e0:ea:8c:3c:aa:b4: ++ a4:f6:f3:95:4a:12:07:6d:fd:8c:b2:89:cf:d0:a0: ++ 61:77:c8:58:74:b0:d4:23:3a:f7:5d:3a:ca:a2:db: ++ 9d:09:de:5d:44:2d:90:f1:81:cd:57:92:fa:7e:bc: ++ 50:04:63:34:df:6b:93:18:be:6b:36:b2:39:e4:ac: ++ 24:36:b7:f0:ef:b6:1c:13:57:93:b6:de:b2:f8:e2: ++ 85:b7:73:a2:b8:35:aa:45:f2:e0:9d:36:a1:6f:54: ++ 8a:f1:72:56:6e:2e:88:c5:51:42:44:15:94:ee:a3: ++ c5:38:96:9b:4e:4e:5a:0b:47:f3:06:36:49:77:30: ++ bc:71:37:e5:a6:ec:21:08:75:fc:e6:61:16:3f:77: ++ d5:d9:91:97:84:0a:6c:d4:02:4d:74:c0:14:ed:fd: ++ 39:fb:83:f2:5e:14:a1:04:b0:0b:e9:fe:ee:8f:e1: ++ 6e:0b:b2:08:b3:61:66:09:6a:b1:06:3a:65:96:59: ++ c0:f0:35:fd:c9:da:28:8d:1a:11:87:70:81:0a:a8: ++ 9a:75:1d:9e:3a:86:05:00:9e:db:80:d6:25:f9:dc: ++ 05:9e:27:59:4c:76:39:5b:ea:f9:a5:a1:d8:83:0f: ++ d1:ff:df:30:11:f9:85:cf:33:48:f5:ca:6d:64:14: ++ 2c:7a:58:4f:d3:4b:08:49:c5:95:64:1a:63:0e:79: ++ 3d:f5:b3:8c:ca:58:ad:9c:42:45:79:6e:0e:87:19: ++ 5c:54:b1:65:b6:bf:8c:9b:dc:13:e9:0d:6f:b8:2e: ++ dc:67:6e:c9:8b:11:b5:84:14:8a:00:19:70:83:79: ++ 91:97:91:d4:1a:27:bf:37:1e:32:07:d8:14:63:3c: ++ 28:4c:af ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0 ++ X509v3 Authority Key Identifier: ++ keyid:AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0 ++ ++ Signature Algorithm: sha384WithRSAEncryption ++ 83:25:ed:e8:d1:fd:95:52:cd:9e:c0:04:a0:91:69:e6:5c:d0: ++ 84:de:dc:ad:a2:4f:e8:47:78:d6:65:98:a9:5b:a8:3c:87:7c: ++ 02:8a:d1:6e:b7:16:73:e6:5f:c0:54:98:d5:74:be:c1:cd:e2: ++ 11:91:ad:23:18:3d:dd:e1:72:44:96:b4:95:5e:c0:7b:8e:99: ++ 78:16:43:13:56:57:b3:a2:b3:3b:b5:77:dc:40:72:ac:a3:eb: ++ 9b:35:3e:b1:08:21:a1:e7:c4:43:37:79:32:be:b5:e7:9c:2c: ++ 4c:bc:43:29:99:8e:30:d3:ac:21:e0:e3:1d:fa:d8:07:33:76: ++ 54:00:22:2a:b9:4d:20:2e:70:68:da:e5:53:fc:83:5c:d3:9d: ++ f2:ff:44:0c:44:66:f2:d2:e3:bd:46:00:1a:6d:02:ba:25:5d: ++ 8d:a1:31:51:dd:54:46:1c:4d:db:99:96:ef:1a:1c:04:5c:a6: ++ 15:ef:78:e0:79:fe:5d:db:3e:aa:4c:55:fd:9a:15:a9:6f:e1: ++ a6:fb:df:70:30:e9:c3:ee:42:46:ed:c2:93:05:89:fa:7d:63: ++ 7b:3f:d0:71:81:7c:00:e8:98:ae:0e:78:34:c3:25:fb:af:0a: ++ 9f:20:6b:dd:3b:13:8f:12:8c:e2:41:1a:48:7a:73:a0:77:69: ++ c7:b6:5c:7f:82:c8:1e:fe:58:1b:28:2b:a8:6c:ad:5e:6d:c0: ++ 05:d2:7b:b7:eb:80:fe:25:37:fe:02:9b:68:ac:42:5d:c3:ee: ++ f5:cc:dc:f0:50:75:d2:36:69:9c:e6:7b:04:df:6e:06:69:b6: ++ de:0a:09:48:59:87:eb:7b:14:60:7a:64:aa:69:43:ef:91:c7: ++ 4c:ec:18:dd:6c:ef:53:2d:8c:99:e1:5e:f2:72:3e:cf:54:c8: ++ bd:67:ec:a4:0f:4c:45:ff:d3:b9:30:23:07:4c:8f:10:bf:86: ++ 96:d9:99:5a:b4:99:57:1c:a4:cc:bb:15:89:53:ba:2c:05:0f: ++ e4:c4:9e:19:b1:18:34:d5:4c:9d:ba:ed:f7:1f:af:24:95:04: ++ 78:a8:03:bb:ee:81:e5:da:5f:7c:8b:4a:a1:90:74:25:a7:b3: ++ 3e:4b:c8:2c:56:bd:c7:c8:ef:38:e2:5c:92:f0:79:f7:9c:84: ++ ba:74:2d:61:01:20:7e:7e:d1:f2:4f:07:59:5f:8b:2d:43:52: ++ eb:46:0c:94:e1:f5:66:47:79:77:d5:54:5b:1f:ad:24:37:cb: ++ 45:5a:4e:a0:44:48:c8:d8:b0:99:c5:15:84:09:f6:d6:49:49: ++ c0:65:b8:e6:1a:71:6e:a0:a8:f1:82:e8:45:3e:6c:d6:02:d7: ++ 0a:67:83:05:5a:c9:a4:10 ++-----BEGIN CERTIFICATE----- ++MIIFgzCCA2ugAwIBAgIORea7A4Mzw4VlSOb/RVEwDQYJKoZIhvcNAQEMBQAwTDEg ++MB4GA1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjYxEzARBgNVBAoTCkdsb2Jh ++bFNpZ24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMTQxMjEwMDAwMDAwWhcNMzQx ++MjEwMDAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSNjET ++MBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjCCAiIwDQYJ ++KoZIhvcNAQEBBQADggIPADCCAgoCggIBAJUH6HPKZvnsFMp7PPcNCPG0RQssgrRI ++xutbPK6DuEGSMxSkb3/pKszGsIhrxbaJ0cay/xTOURQh7ErdG1rG1ofuTToVBu1k ++ZguSgMpE3nOUTvOniX9PeGMIyBJQbUJmL025eShNUhqKGoC3GYEOfsSKvGRMIRxD ++aNc9PIrFsmbVkJq3MQbFvuJtMgamHvm566qjuL++gmNQ0PAYid/kD3n16qIfKtJw ++LnvnvJO7bVPiSHyMEAc4/2ayd2F+4OqMPKq0pPbzlUoSB239jLKJz9CgYXfIWHSw ++1CM69106yqLbnQneXUQtkPGBzVeS+n68UARjNN9rkxi+azayOeSsJDa38O+2HBNX ++k7besvjihbdzorg1qkXy4J02oW9UivFyVm4uiMVRQkQVlO6jxTiWm05OWgtH8wY2 ++SXcwvHE35absIQh1/OZhFj931dmRl4QKbNQCTXTAFO39OfuD8l4UoQSwC+n+7o/h ++bguyCLNhZglqsQY6ZZZZwPA1/cnaKI0aEYdwgQqomnUdnjqGBQCe24DWJfncBZ4n ++WUx2OVvq+aWh2IMP0f/fMBH5hc8zSPXKbWQULHpYT9NLCEnFlWQaYw55PfWzjMpY ++rZxCRXluDocZXFSxZba/jJvcE+kNb7gu3GduyYsRtYQUigAZcIN5kZeR1Bonvzce ++MgfYFGM8KEyvAgMBAAGjYzBhMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTAD ++AQH/MB0GA1UdDgQWBBSubAWjkxPioufi1xzWx/B/yGdToDAfBgNVHSMEGDAWgBSu ++bAWjkxPioufi1xzWx/B/yGdToDANBgkqhkiG9w0BAQwFAAOCAgEAgyXt6NH9lVLN ++nsAEoJFp5lzQhN7craJP6Ed41mWYqVuoPId8AorRbrcWc+ZfwFSY1XS+wc3iEZGt ++Ixg93eFyRJa0lV7Ae46ZeBZDE1ZXs6KzO7V33EByrKPrmzU+sQghoefEQzd5Mr61 ++55wsTLxDKZmOMNOsIeDjHfrYBzN2VAAiKrlNIC5waNrlU/yDXNOd8v9EDERm8tLj ++vUYAGm0CuiVdjaExUd1URhxN25mW7xocBFymFe944Hn+Xds+qkxV/ZoVqW/hpvvf ++cDDpw+5CRu3CkwWJ+n1jez/QcYF8AOiYrg54NMMl+68KnyBr3TsTjxKM4kEaSHpz ++oHdpx7Zcf4LIHv5YGygrqGytXm3ABdJ7t+uA/iU3/gKbaKxCXcPu9czc8FB10jZp ++nOZ7BN9uBmm23goJSFmH63sUYHpkqmlD75HHTOwY3WzvUy2MmeFe8nI+z1TIvWfs ++pA9MRf/TuTAjB0yPEL+GltmZWrSZVxykzLsViVO6LAUP5MSeGbEYNNVMnbrt9x+v ++JJUEeKgDu+6B5dpffItKoZB0JaezPkvILFa9x8jvOOJckvB595yEunQtYQEgfn7R ++8k8HWV+LLUNS60YMlOH1Zkd5d9VUWx+tJDfLRVpOoERIyNiwmcUVhAn21klJwGW4 ++5hpxbqCo8YLoRT5s1gLXCmeDBVrJpBA= ++-----END CERTIFICATE----- ++ ++# cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 04:00:00:00:00:01:21:58:53:08:a2 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign ++ Validity ++ Not Before: Mar 18 10:00:00 2009 GMT ++ Not After : Mar 18 10:00:00 2029 GMT ++ Subject: OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:cc:25:76:90:79:06:78:22:16:f5:c0:83:b6:84: ++ ca:28:9e:fd:05:76:11:c5:ad:88:72:fc:46:02:43: ++ c7:b2:8a:9d:04:5f:24:cb:2e:4b:e1:60:82:46:e1: ++ 52:ab:0c:81:47:70:6c:dd:64:d1:eb:f5:2c:a3:0f: ++ 82:3d:0c:2b:ae:97:d7:b6:14:86:10:79:bb:3b:13: ++ 80:77:8c:08:e1:49:d2:6a:62:2f:1f:5e:fa:96:68: ++ df:89:27:95:38:9f:06:d7:3e:c9:cb:26:59:0d:73: ++ de:b0:c8:e9:26:0e:83:15:c6:ef:5b:8b:d2:04:60: ++ ca:49:a6:28:f6:69:3b:f6:cb:c8:28:91:e5:9d:8a: ++ 61:57:37:ac:74:14:dc:74:e0:3a:ee:72:2f:2e:9c: ++ fb:d0:bb:bf:f5:3d:00:e1:06:33:e8:82:2b:ae:53: ++ a6:3a:16:73:8c:dd:41:0e:20:3a:c0:b4:a7:a1:e9: ++ b2:4f:90:2e:32:60:e9:57:cb:b9:04:92:68:68:e5: ++ 38:26:60:75:b2:9f:77:ff:91:14:ef:ae:20:49:fc: ++ ad:40:15:48:d1:02:31:61:19:5e:b8:97:ef:ad:77: ++ b7:64:9a:7a:bf:5f:c1:13:ef:9b:62:fb:0d:6c:e0: ++ 54:69:16:a9:03:da:6e:e9:83:93:71:76:c6:69:85: ++ 82:17 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC ++ Signature Algorithm: sha256WithRSAEncryption ++ 4b:40:db:c0:50:aa:fe:c8:0c:ef:f7:96:54:45:49:bb:96:00: ++ 09:41:ac:b3:13:86:86:28:07:33:ca:6b:e6:74:b9:ba:00:2d: ++ ae:a4:0a:d3:f5:f1:f1:0f:8a:bf:73:67:4a:83:c7:44:7b:78: ++ e0:af:6e:6c:6f:03:29:8e:33:39:45:c3:8e:e4:b9:57:6c:aa: ++ fc:12:96:ec:53:c6:2d:e4:24:6c:b9:94:63:fb:dc:53:68:67: ++ 56:3e:83:b8:cf:35:21:c3:c9:68:fe:ce:da:c2:53:aa:cc:90: ++ 8a:e9:f0:5d:46:8c:95:dd:7a:58:28:1a:2f:1d:de:cd:00:37: ++ 41:8f:ed:44:6d:d7:53:28:97:7e:f3:67:04:1e:15:d7:8a:96: ++ b4:d3:de:4c:27:a4:4c:1b:73:73:76:f4:17:99:c2:1f:7a:0e: ++ e3:2d:08:ad:0a:1c:2c:ff:3c:ab:55:0e:0f:91:7e:36:eb:c3: ++ 57:49:be:e1:2e:2d:7c:60:8b:c3:41:51:13:23:9d:ce:f7:32: ++ 6b:94:01:a8:99:e7:2c:33:1f:3a:3b:25:d2:86:40:ce:3b:2c: ++ 86:78:c9:61:2f:14:ba:ee:db:55:6f:df:84:ee:05:09:4d:bd: ++ 28:d8:72:ce:d3:62:50:65:1e:eb:92:97:83:31:d9:b3:b5:ca: ++ 47:58:3f:5f ++-----BEGIN CERTIFICATE----- ++MIIDXzCCAkegAwIBAgILBAAAAAABIVhTCKIwDQYJKoZIhvcNAQELBQAwTDEgMB4G ++A1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNp ++Z24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDkwMzE4MTAwMDAwWhcNMjkwMzE4 ++MTAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEG ++A1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjCCASIwDQYJKoZI ++hvcNAQEBBQADggEPADCCAQoCggEBAMwldpB5BngiFvXAg7aEyiie/QV2EcWtiHL8 ++RgJDx7KKnQRfJMsuS+FggkbhUqsMgUdwbN1k0ev1LKMPgj0MK66X17YUhhB5uzsT ++gHeMCOFJ0mpiLx9e+pZo34knlTifBtc+ycsmWQ1z3rDI6SYOgxXG71uL0gRgykmm ++KPZpO/bLyCiR5Z2KYVc3rHQU3HTgOu5yLy6c+9C7v/U9AOEGM+iCK65TpjoWc4zd ++QQ4gOsC0p6Hpsk+QLjJg6VfLuQSSaGjlOCZgdbKfd/+RFO+uIEn8rUAVSNECMWEZ ++XriX7613t2Saer9fwRPvm2L7DWzgVGkWqQPabumDk3F2xmmFghcCAwEAAaNCMEAw ++DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFI/wS3+o ++LkUkrk1Q+mOai97i3Ru8MA0GCSqGSIb3DQEBCwUAA4IBAQBLQNvAUKr+yAzv95ZU ++RUm7lgAJQayzE4aGKAczymvmdLm6AC2upArT9fHxD4q/c2dKg8dEe3jgr25sbwMp ++jjM5RcOO5LlXbKr8EpbsU8Yt5CRsuZRj+9xTaGdWPoO4zzUhw8lo/s7awlOqzJCK ++6fBdRoyV3XpYKBovHd7NADdBj+1EbddTKJd+82cEHhXXipa0095MJ6RMG3NzdvQX ++mcIfeg7jLQitChws/zyrVQ4PkX4268NXSb7hLi18YIvDQVETI53O9zJrlAGomecs ++Mx86OyXShkDOOyyGeMlhLxS67ttVb9+E7gUJTb0o2HLO02JQZR7rkpeDMdmztcpH ++WD9f ++-----END CERTIFICATE----- ++ ++# 2ce1cb0bf9d2f9e102993fbe215152c3b2dd0cabde1c68e5319b839154dbb7f5 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 0 (0x0) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Root Certificate Authority - G2 ++ Validity ++ Not Before: Sep 1 00:00:00 2009 GMT ++ Not After : Dec 31 23:59:59 2037 GMT ++ Subject: C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Root Certificate Authority - G2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:bd:ed:c1:03:fc:f6:8f:fc:02:b1:6f:5b:9f:48: ++ d9:9d:79:e2:a2:b7:03:61:56:18:c3:47:b6:d7:ca: ++ 3d:35:2e:89:43:f7:a1:69:9b:de:8a:1a:fd:13:20: ++ 9c:b4:49:77:32:29:56:fd:b9:ec:8c:dd:22:fa:72: ++ dc:27:61:97:ee:f6:5a:84:ec:6e:19:b9:89:2c:dc: ++ 84:5b:d5:74:fb:6b:5f:c5:89:a5:10:52:89:46:55: ++ f4:b8:75:1c:e6:7f:e4:54:ae:4b:f8:55:72:57:02: ++ 19:f8:17:71:59:eb:1e:28:07:74:c5:9d:48:be:6c: ++ b4:f4:a4:b0:f3:64:37:79:92:c0:ec:46:5e:7f:e1: ++ 6d:53:4c:62:af:cd:1f:0b:63:bb:3a:9d:fb:fc:79: ++ 00:98:61:74:cf:26:82:40:63:f3:b2:72:6a:19:0d: ++ 99:ca:d4:0e:75:cc:37:fb:8b:89:c1:59:f1:62:7f: ++ 5f:b3:5f:65:30:f8:a7:b7:4d:76:5a:1e:76:5e:34: ++ c0:e8:96:56:99:8a:b3:f0:7f:a4:cd:bd:dc:32:31: ++ 7c:91:cf:e0:5f:11:f8:6b:aa:49:5c:d1:99:94:d1: ++ a2:e3:63:5b:09:76:b5:56:62:e1:4b:74:1d:96:d4: ++ 26:d4:08:04:59:d0:98:0e:0e:e6:de:fc:c3:ec:1f: ++ 90:f1 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ 7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27 ++ Signature Algorithm: sha256WithRSAEncryption ++ 11:59:fa:25:4f:03:6f:94:99:3b:9a:1f:82:85:39:d4:76:05: ++ 94:5e:e1:28:93:6d:62:5d:09:c2:a0:a8:d4:b0:75:38:f1:34: ++ 6a:9d:e4:9f:8a:86:26:51:e6:2c:d1:c6:2d:6e:95:20:4a:92: ++ 01:ec:b8:8a:67:7b:31:e2:67:2e:8c:95:03:26:2e:43:9d:4a: ++ 31:f6:0e:b5:0c:bb:b7:e2:37:7f:22:ba:00:a3:0e:7b:52:fb: ++ 6b:bb:3b:c4:d3:79:51:4e:cd:90:f4:67:07:19:c8:3c:46:7a: ++ 0d:01:7d:c5:58:e7:6d:e6:85:30:17:9a:24:c4:10:e0:04:f7: ++ e0:f2:7f:d4:aa:0a:ff:42:1d:37:ed:94:e5:64:59:12:20:77: ++ 38:d3:32:3e:38:81:75:96:73:fa:68:8f:b1:cb:ce:1f:c5:ec: ++ fa:9c:7e:cf:7e:b1:f1:07:2d:b6:fc:bf:ca:a4:bf:d0:97:05: ++ 4a:bc:ea:18:28:02:90:bd:54:78:09:21:71:d3:d1:7d:1d:d9: ++ 16:b0:a9:61:3d:d0:0a:00:22:fc:c7:7b:cb:09:64:45:0b:3b: ++ 40:81:f7:7d:7c:32:f5:98:ca:58:8e:7d:2a:ee:90:59:73:64: ++ f9:36:74:5e:25:a1:f5:66:05:2e:7f:39:15:a9:2a:fb:50:8b: ++ 8e:85:69:f4 ++-----BEGIN CERTIFICATE----- ++MIID3TCCAsWgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBjzELMAkGA1UEBhMCVVMx ++EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoT ++HFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xMjAwBgNVBAMTKVN0YXJmaWVs ++ZCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5MDkwMTAwMDAw ++MFoXDTM3MTIzMTIzNTk1OVowgY8xCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6 ++b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxTdGFyZmllbGQgVGVj ++aG5vbG9naWVzLCBJbmMuMTIwMAYDVQQDEylTdGFyZmllbGQgUm9vdCBDZXJ0aWZp ++Y2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ++ggEBAL3twQP89o/8ArFvW59I2Z154qK3A2FWGMNHttfKPTUuiUP3oWmb3ooa/RMg ++nLRJdzIpVv257IzdIvpy3Cdhl+72WoTsbhm5iSzchFvVdPtrX8WJpRBSiUZV9Lh1 ++HOZ/5FSuS/hVclcCGfgXcVnrHigHdMWdSL5stPSksPNkN3mSwOxGXn/hbVNMYq/N ++Hwtjuzqd+/x5AJhhdM8mgkBj87JyahkNmcrUDnXMN/uLicFZ8WJ/X7NfZTD4p7dN ++dloedl40wOiWVpmKs/B/pM293DIxfJHP4F8R+GuqSVzRmZTRouNjWwl2tVZi4Ut0 ++HZbUJtQIBFnQmA4O5t78w+wfkPECAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAO ++BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFHwMMh+n2TB/xH1oo2Kooc6rB1snMA0G ++CSqGSIb3DQEBCwUAA4IBAQARWfolTwNvlJk7mh+ChTnUdgWUXuEok21iXQnCoKjU ++sHU48TRqneSfioYmUeYs0cYtbpUgSpIB7LiKZ3sx4mcujJUDJi5DnUox9g61DLu3 ++4jd/IroAow57UvtruzvE03lRTs2Q9GcHGcg8RnoNAX3FWOdt5oUwF5okxBDgBPfg ++8n/Uqgr/Qh037ZTlZFkSIHc40zI+OIF1lnP6aI+xy84fxez6nH7PfrHxBy22/L/K ++pL/QlwVKvOoYKAKQvVR4CSFx09F9HdkWsKlhPdAKACL8x3vLCWRFCztAgfd9fDL1 ++mMpYjn0q7pBZc2T5NnReJaH1ZgUufzkVqSr7UIuOhWn0 ++-----END CERTIFICATE----- ++ ++# 45140b3247eb9cc8c5b4f0d7b53091f73292089e6e5a63e2749dd3aca9198eda ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 0 (0x0) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", CN = Go Daddy Root Certificate Authority - G2 ++ Validity ++ Not Before: Sep 1 00:00:00 2009 GMT ++ Not After : Dec 31 23:59:59 2037 GMT ++ Subject: C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", CN = Go Daddy Root Certificate Authority - G2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:bf:71:62:08:f1:fa:59:34:f7:1b:c9:18:a3:f7: ++ 80:49:58:e9:22:83:13:a6:c5:20:43:01:3b:84:f1: ++ e6:85:49:9f:27:ea:f6:84:1b:4e:a0:b4:db:70:98: ++ c7:32:01:b1:05:3e:07:4e:ee:f4:fa:4f:2f:59:30: ++ 22:e7:ab:19:56:6b:e2:80:07:fc:f3:16:75:80:39: ++ 51:7b:e5:f9:35:b6:74:4e:a9:8d:82:13:e4:b6:3f: ++ a9:03:83:fa:a2:be:8a:15:6a:7f:de:0b:c3:b6:19: ++ 14:05:ca:ea:c3:a8:04:94:3b:46:7c:32:0d:f3:00: ++ 66:22:c8:8d:69:6d:36:8c:11:18:b7:d3:b2:1c:60: ++ b4:38:fa:02:8c:ce:d3:dd:46:07:de:0a:3e:eb:5d: ++ 7c:c8:7c:fb:b0:2b:53:a4:92:62:69:51:25:05:61: ++ 1a:44:81:8c:2c:a9:43:96:23:df:ac:3a:81:9a:0e: ++ 29:c5:1c:a9:e9:5d:1e:b6:9e:9e:30:0a:39:ce:f1: ++ 88:80:fb:4b:5d:cc:32:ec:85:62:43:25:34:02:56: ++ 27:01:91:b4:3b:70:2a:3f:6e:b1:e8:9c:88:01:7d: ++ 9f:d4:f9:db:53:6d:60:9d:bf:2c:e7:58:ab:b8:5f: ++ 46:fc:ce:c4:1b:03:3c:09:eb:49:31:5c:69:46:b3: ++ e0:47 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ 3A:9A:85:07:10:67:28:B6:EF:F6:BD:05:41:6E:20:C1:94:DA:0F:DE ++ Signature Algorithm: sha256WithRSAEncryption ++ 99:db:5d:79:d5:f9:97:59:67:03:61:f1:7e:3b:06:31:75:2d: ++ a1:20:8e:4f:65:87:b4:f7:a6:9c:bc:d8:e9:2f:d0:db:5a:ee: ++ cf:74:8c:73:b4:38:42:da:05:7b:f8:02:75:b8:fd:a5:b1:d7: ++ ae:f6:d7:de:13:cb:53:10:7e:8a:46:d1:97:fa:b7:2e:2b:11: ++ ab:90:b0:27:80:f9:e8:9f:5a:e9:37:9f:ab:e4:df:6c:b3:85: ++ 17:9d:3d:d9:24:4f:79:91:35:d6:5f:04:eb:80:83:ab:9a:02: ++ 2d:b5:10:f4:d8:90:c7:04:73:40:ed:72:25:a0:a9:9f:ec:9e: ++ ab:68:12:99:57:c6:8f:12:3a:09:a4:bd:44:fd:06:15:37:c1: ++ 9b:e4:32:a3:ed:38:e8:d8:64:f3:2c:7e:14:fc:02:ea:9f:cd: ++ ff:07:68:17:db:22:90:38:2d:7a:8d:d1:54:f1:69:e3:5f:33: ++ ca:7a:3d:7b:0a:e3:ca:7f:5f:39:e5:e2:75:ba:c5:76:18:33: ++ ce:2c:f0:2f:4c:ad:f7:b1:e7:ce:4f:a8:c4:9b:4a:54:06:c5: ++ 7f:7d:d5:08:0f:e2:1c:fe:7e:17:b8:ac:5e:f6:d4:16:b2:43: ++ 09:0c:4d:f6:a7:6b:b4:99:84:65:ca:7a:88:e2:e2:44:be:5c: ++ f7:ea:1c:f5 ++-----BEGIN CERTIFICATE----- ++MIIDxTCCAq2gAwIBAgIBADANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx ++EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT ++EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp ++ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5MDkwMTAwMDAwMFoXDTM3MTIzMTIz ++NTk1OVowgYMxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH ++EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjExMC8GA1UE ++AxMoR28gRGFkZHkgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIw ++DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL9xYgjx+lk09xvJGKP3gElY6SKD ++E6bFIEMBO4Tx5oVJnyfq9oQbTqC023CYxzIBsQU+B07u9PpPL1kwIuerGVZr4oAH ++/PMWdYA5UXvl+TW2dE6pjYIT5LY/qQOD+qK+ihVqf94Lw7YZFAXK6sOoBJQ7Rnwy ++DfMAZiLIjWltNowRGLfTshxgtDj6AozO091GB94KPutdfMh8+7ArU6SSYmlRJQVh ++GkSBjCypQ5Yj36w6gZoOKcUcqeldHraenjAKOc7xiID7S13MMuyFYkMlNAJWJwGR ++tDtwKj9useiciAF9n9T521NtYJ2/LOdYq7hfRvzOxBsDPAnrSTFcaUaz4EcCAwEA ++AaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYE ++FDqahQcQZyi27/a9BUFuIMGU2g/eMA0GCSqGSIb3DQEBCwUAA4IBAQCZ21151fmX ++WWcDYfF+OwYxdS2hII5PZYe096acvNjpL9DbWu7PdIxztDhC2gV7+AJ1uP2lsdeu ++9tfeE8tTEH6KRtGX+rcuKxGrkLAngPnon1rpN5+r5N9ss4UXnT3ZJE95kTXWXwTr ++gIOrmgIttRD02JDHBHNA7XIloKmf7J6raBKZV8aPEjoJpL1E/QYVN8Gb5DKj7Tjo ++2GTzLH4U/ALqn83/B2gX2yKQOC16jdFU8WnjXzPKej17CuPKf1855eJ1usV2GDPO ++LPAvTK33sefOT6jEm0pUBsV/fdUID+Ic/n4XuKxe9tQWskMJDE32p2u0mYRlynqI ++4uJEvlz36hz1 ++-----END CERTIFICATE----- ++ ++# 34d8a73ee208d9bcdb0d956520934b4e40e69482596e8b6f73c8426b010a6f48 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 02:03:e5:b8:82:eb:20:f8:25:27:6d:3d:66 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R3 ++ Validity ++ Not Before: Jun 22 00:00:00 2016 GMT ++ Not After : Jun 22 00:00:00 2036 GMT ++ Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R3 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:1f:4f:33:87:33:29:8a:a1:84:de:cb:c7:21:58: ++ 41:89:ea:56:9d:2b:4b:85:c6:1d:4c:27:bc:7f:26: ++ 51:72:6f:e2:9f:d6:a3:ca:cc:45:14:46:8b:ad:ef: ++ 7e:86:8c:ec:b1:7e:2f:ff:a9:71:9d:18:84:45:04: ++ 41:55:6e:2b:ea:26:7f:bb:90:01:e3:4b:19:ba:e4: ++ 54:96:45:09:b1:d5:6c:91:44:ad:84:13:8e:9a:8c: ++ 0d:80:0c:32:f6:e0:27 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ C1:F1:26:BA:A0:2D:AE:85:81:CF:D3:F1:2A:12:BD:B8:0A:67:FD:BC ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:66:02:31:00:f6:e1:20:95:14:7b:54:a3:90:16:11:bf:84: ++ c8:ea:6f:6b:17:9e:1e:46:98:20:9b:9f:d3:0d:d9:ac:d3:2f: ++ cd:7c:f8:5b:2e:55:bb:bf:dd:92:f7:a4:0c:dc:31:e1:a2:02: ++ 31:00:fc:97:66:66:e5:43:16:13:83:dd:c7:df:2f:be:14:38: ++ ed:01:ce:b1:17:1a:11:75:e9:bd:03:8f:26:7e:84:e5:c9:60: ++ a6:95:d7:54:59:b7:e7:11:2c:89:d4:b9:ee:17 ++-----BEGIN CERTIFICATE----- ++MIICCTCCAY6gAwIBAgINAgPluILrIPglJ209ZjAKBggqhkjOPQQDAzBHMQswCQYD ++VQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIG ++A1UEAxMLR1RTIFJvb3QgUjMwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAw ++WjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2Vz ++IExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwdjAQBgcqhkjOPQIBBgUrgQQAIgNi ++AAQfTzOHMymKoYTey8chWEGJ6ladK0uFxh1MJ7x/JlFyb+Kf1qPKzEUURout736G ++jOyxfi//qXGdGIRFBEFVbivqJn+7kAHjSxm65FSWRQmx1WyRRK2EE46ajA2ADDL2 ++4CejQjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW ++BBTB8Sa6oC2uhYHP0/EqEr24Cmf9vDAKBggqhkjOPQQDAwNpADBmAjEA9uEglRR7 ++VKOQFhG/hMjqb2sXnh5GmCCbn9MN2azTL818+FsuVbu/3ZL3pAzcMeGiAjEA/Jdm ++ZuVDFhOD3cffL74UOO0BzrEXGhF16b0DjyZ+hOXJYKaV11RZt+cRLInUue4X ++-----END CERTIFICATE----- ++ ++# d947432abde7b7fa90fc2e6b59101b1280e0e1c7e4e40fa3c6887fff57a7f4cf ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 02:03:e5:93:6f:31:b0:13:49:88:6b:a2:17 ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R1 ++ Validity ++ Not Before: Jun 22 00:00:00 2016 GMT ++ Not After : Jun 22 00:00:00 2036 GMT ++ Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R1 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:b6:11:02:8b:1e:e3:a1:77:9b:3b:dc:bf:94:3e: ++ b7:95:a7:40:3c:a1:fd:82:f9:7d:32:06:82:71:f6: ++ f6:8c:7f:fb:e8:db:bc:6a:2e:97:97:a3:8c:4b:f9: ++ 2b:f6:b1:f9:ce:84:1d:b1:f9:c5:97:de:ef:b9:f2: ++ a3:e9:bc:12:89:5e:a7:aa:52:ab:f8:23:27:cb:a4: ++ b1:9c:63:db:d7:99:7e:f0:0a:5e:eb:68:a6:f4:c6: ++ 5a:47:0d:4d:10:33:e3:4e:b1:13:a3:c8:18:6c:4b: ++ ec:fc:09:90:df:9d:64:29:25:23:07:a1:b4:d2:3d: ++ 2e:60:e0:cf:d2:09:87:bb:cd:48:f0:4d:c2:c2:7a: ++ 88:8a:bb:ba:cf:59:19:d6:af:8f:b0:07:b0:9e:31: ++ f1:82:c1:c0:df:2e:a6:6d:6c:19:0e:b5:d8:7e:26: ++ 1a:45:03:3d:b0:79:a4:94:28:ad:0f:7f:26:e5:a8: ++ 08:fe:96:e8:3c:68:94:53:ee:83:3a:88:2b:15:96: ++ 09:b2:e0:7a:8c:2e:75:d6:9c:eb:a7:56:64:8f:96: ++ 4f:68:ae:3d:97:c2:84:8f:c0:bc:40:c0:0b:5c:bd: ++ f6:87:b3:35:6c:ac:18:50:7f:84:e0:4c:cd:92:d3: ++ 20:e9:33:bc:52:99:af:32:b5:29:b3:25:2a:b4:48: ++ f9:72:e1:ca:64:f7:e6:82:10:8d:e8:9d:c2:8a:88: ++ fa:38:66:8a:fc:63:f9:01:f9:78:fd:7b:5c:77:fa: ++ 76:87:fa:ec:df:b1:0e:79:95:57:b4:bd:26:ef:d6: ++ 01:d1:eb:16:0a:bb:8e:0b:b5:c5:c5:8a:55:ab:d3: ++ ac:ea:91:4b:29:cc:19:a4:32:25:4e:2a:f1:65:44: ++ d0:02:ce:aa:ce:49:b4:ea:9f:7c:83:b0:40:7b:e7: ++ 43:ab:a7:6c:a3:8f:7d:89:81:fa:4c:a5:ff:d5:8e: ++ c3:ce:4b:e0:b5:d8:b3:8e:45:cf:76:c0:ed:40:2b: ++ fd:53:0f:b0:a7:d5:3b:0d:b1:8a:a2:03:de:31:ad: ++ cc:77:ea:6f:7b:3e:d6:df:91:22:12:e6:be:fa:d8: ++ 32:fc:10:63:14:51:72:de:5d:d6:16:93:bd:29:68: ++ 33:ef:3a:66:ec:07:8a:26:df:13:d7:57:65:78:27: ++ de:5e:49:14:00:a2:00:7f:9a:a8:21:b6:a9:b1:95: ++ b0:a5:b9:0d:16:11:da:c7:6c:48:3c:40:e0:7e:0d: ++ 5a:cd:56:3c:d1:97:05:b9:cb:4b:ed:39:4b:9c:c4: ++ 3f:d2:55:13:6e:24:b0:d6:71:fa:f4:c1:ba:cc:ed: ++ 1b:f5:fe:81:41:d8:00:98:3d:3a:c8:ae:7a:98:37: ++ 18:05:95 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E ++ Signature Algorithm: sha384WithRSAEncryption ++ 9f:aa:42:26:db:0b:9b:be:ff:1e:96:92:2e:3e:a2:65:4a:6a: ++ 98:ba:22:cb:7d:c1:3a:d8:82:0a:06:c6:f6:a5:de:c0:4e:87: ++ 66:79:a1:f9:a6:58:9c:aa:f9:b5:e6:60:e7:e0:e8:b1:1e:42: ++ 41:33:0b:37:3d:ce:89:70:15:ca:b5:24:a8:cf:6b:b5:d2:40: ++ 21:98:cf:22:34:cf:3b:c5:22:84:e0:c5:0e:8a:7c:5d:88:e4: ++ 35:24:ce:9b:3e:1a:54:1e:6e:db:b2:87:a7:fc:f3:fa:81:55: ++ 14:62:0a:59:a9:22:05:31:3e:82:d6:ee:db:57:34:bc:33:95: ++ d3:17:1b:e8:27:a2:8b:7b:4e:26:1a:7a:5a:64:b6:d1:ac:37: ++ f1:fd:a0:f3:38:ec:72:f0:11:75:9d:cb:34:52:8d:e6:76:6b: ++ 17:c6:df:86:ab:27:8e:49:2b:75:66:81:10:21:a6:ea:3e:f4: ++ ae:25:ff:7c:15:de:ce:8c:25:3f:ca:62:70:0a:f7:2f:09:66: ++ 07:c8:3f:1c:fc:f0:db:45:30:df:62:88:c1:b5:0f:9d:c3:9f: ++ 4a:de:59:59:47:c5:87:22:36:e6:82:a7:ed:0a:b9:e2:07:a0: ++ 8d:7b:7a:4a:3c:71:d2:e2:03:a1:1f:32:07:dd:1b:e4:42:ce: ++ 0c:00:45:61:80:b5:0b:20:59:29:78:bd:f9:55:cb:63:c5:3c: ++ 4c:f4:b6:ff:db:6a:5f:31:6b:99:9e:2c:c1:6b:50:a4:d7:e6: ++ 18:14:bd:85:3f:67:ab:46:9f:a0:ff:42:a7:3a:7f:5c:cb:5d: ++ b0:70:1d:2b:34:f5:d4:76:09:0c:eb:78:4c:59:05:f3:33:42: ++ c3:61:15:10:1b:77:4d:ce:22:8c:d4:85:f2:45:7d:b7:53:ea: ++ ef:40:5a:94:0a:5c:20:5f:4e:40:5d:62:22:76:df:ff:ce:61: ++ bd:8c:23:78:d2:37:02:e0:8e:de:d1:11:37:89:f6:bf:ed:49: ++ 07:62:ae:92:ec:40:1a:af:14:09:d9:d0:4e:b2:a2:f7:be:ee: ++ ee:d8:ff:dc:1a:2d:de:b8:36:71:e2:fc:79:b7:94:25:d1:48: ++ 73:5b:a1:35:e7:b3:99:67:75:c1:19:3a:2b:47:4e:d3:42:8e: ++ fd:31:c8:16:66:da:d2:0c:3c:db:b3:8e:c9:a1:0d:80:0f:7b: ++ 16:77:14:bf:ff:db:09:94:b2:93:bc:20:58:15:e9:db:71:43: ++ f3:de:10:c3:00:dc:a8:2a:95:b6:c2:d6:3f:90:6b:76:db:6c: ++ fe:8c:bc:f2:70:35:0c:dc:99:19:35:dc:d7:c8:46:63:d5:36: ++ 71:ae:57:fb:b7:82:6d:dc ++-----BEGIN CERTIFICATE----- ++MIIFVzCCAz+gAwIBAgINAgPlk28xsBNJiGuiFzANBgkqhkiG9w0BAQwFADBHMQsw ++CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU ++MBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAw ++MDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp ++Y2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwggIiMA0GCSqGSIb3DQEBAQUA ++A4ICDwAwggIKAoICAQC2EQKLHuOhd5s73L+UPreVp0A8of2C+X0yBoJx9vaMf/vo ++27xqLpeXo4xL+Sv2sfnOhB2x+cWX3u+58qPpvBKJXqeqUqv4IyfLpLGcY9vXmX7w ++Cl7raKb0xlpHDU0QM+NOsROjyBhsS+z8CZDfnWQpJSMHobTSPS5g4M/SCYe7zUjw ++TcLCeoiKu7rPWRnWr4+wB7CeMfGCwcDfLqZtbBkOtdh+JhpFAz2weaSUKK0Pfybl ++qAj+lug8aJRT7oM6iCsVlgmy4HqMLnXWnOunVmSPlk9orj2XwoSPwLxAwAtcvfaH ++szVsrBhQf4TgTM2S0yDpM7xSma8ytSmzJSq0SPly4cpk9+aCEI3oncKKiPo4Zor8 ++Y/kB+Xj9e1x3+naH+uzfsQ55lVe0vSbv1gHR6xYKu44LtcXFilWr06zqkUspzBmk ++MiVOKvFlRNACzqrOSbTqn3yDsEB750Orp2yjj32JgfpMpf/VjsPOS+C12LOORc92 ++wO1AK/1TD7Cn1TsNsYqiA94xrcx36m97PtbfkSIS5r762DL8EGMUUXLeXdYWk70p ++aDPvOmbsB4om3xPXV2V4J95eSRQAogB/mqghtqmxlbCluQ0WEdrHbEg8QOB+DVrN ++VjzRlwW5y0vtOUucxD/SVRNuJLDWcfr0wbrM7Rv1/oFB2ACYPTrIrnqYNxgFlQID ++AQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4E ++FgQU5K8rJnEaK0gnhS9SZizv8IkTcT4wDQYJKoZIhvcNAQEMBQADggIBAJ+qQibb ++C5u+/x6Wki4+omVKapi6Ist9wTrYggoGxval3sBOh2Z5ofmmWJyq+bXmYOfg6LEe ++QkEzCzc9zolwFcq1JKjPa7XSQCGYzyI0zzvFIoTgxQ6KfF2I5DUkzps+GlQebtuy ++h6f88/qBVRRiClmpIgUxPoLW7ttXNLwzldMXG+gnoot7TiYaelpkttGsN/H9oPM4 ++7HLwEXWdyzRSjeZ2axfG34arJ45JK3VmgRAhpuo+9K4l/3wV3s6MJT/KYnAK9y8J ++ZgfIPxz88NtFMN9iiMG1D53Dn0reWVlHxYciNuaCp+0KueIHoI17eko8cdLiA6Ef ++MgfdG+RCzgwARWGAtQsgWSl4vflVy2PFPEz0tv/bal8xa5meLMFrUKTX5hgUvYU/ ++Z6tGn6D/Qqc6f1zLXbBwHSs09dR2CQzreExZBfMzQsNhFRAbd03OIozUhfJFfbdT ++6u9AWpQKXCBfTkBdYiJ23//OYb2MI3jSNwLgjt7RETeJ9r/tSQdirpLsQBqvFAnZ ++0E6yove+7u7Y/9waLd64NnHi/Hm3lCXRSHNboTXns5lndcEZOitHTtNCjv0xyBZm ++2tIMPNuzjsmhDYAPexZ3FL//2wmUspO8IFgV6dtxQ/PeEMMA3KgqlbbC1j+Qa3bb ++bP6MvPJwNQzcmRk13NfIRmPVNnGuV/u3gm3c ++-----END CERTIFICATE----- ++ ++# 349dfa4058c5e263123b398ae795573c4e1313c83fe68f93556cd5e8031b3c7d ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 02:03:e5:c0:68:ef:63:1a:9c:72:90:50:52 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R4 ++ Validity ++ Not Before: Jun 22 00:00:00 2016 GMT ++ Not After : Jun 22 00:00:00 2036 GMT ++ Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R4 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:f3:74:73:a7:68:8b:60:ae:43:b8:35:c5:81:30: ++ 7b:4b:49:9d:fb:c1:61:ce:e6:de:46:bd:6b:d5:61: ++ 18:35:ae:40:dd:73:f7:89:91:30:5a:eb:3c:ee:85: ++ 7c:a2:40:76:3b:a9:c6:b8:47:d8:2a:e7:92:91:6a: ++ 73:e9:b1:72:39:9f:29:9f:a2:98:d3:5f:5e:58:86: ++ 65:0f:a1:84:65:06:d1:dc:8b:c9:c7:73:c8:8c:6a: ++ 2f:e5:c4:ab:d1:1d:8a ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:66:02:31:00:e8:40:ff:83:de:03:f4:9f:ae:1d:7a:a7:2e: ++ b9:af:4f:f6:83:1d:0e:2d:85:01:1d:d1:d9:6a:ec:0f:c2:af: ++ c7:5e:56:5e:5c:d5:1c:58:22:28:0b:f7:30:b6:2f:b1:7c:02: ++ 31:00:f0:61:3c:a7:f4:a0:82:e3:21:d5:84:1d:73:86:9c:2d: ++ af:ca:34:9b:f1:9f:b9:23:36:e2:bc:60:03:9d:80:b3:9a:56: ++ c8:e1:e2:bb:14:79:ca:cd:21:d4:94:b5:49:43 ++-----BEGIN CERTIFICATE----- ++MIICCTCCAY6gAwIBAgINAgPlwGjvYxqccpBQUjAKBggqhkjOPQQDAzBHMQswCQYD ++VQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIG ++A1UEAxMLR1RTIFJvb3QgUjQwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAw ++WjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2Vz ++IExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjQwdjAQBgcqhkjOPQIBBgUrgQQAIgNi ++AATzdHOnaItgrkO4NcWBMHtLSZ37wWHO5t5GvWvVYRg1rkDdc/eJkTBa6zzuhXyi ++QHY7qca4R9gq55KRanPpsXI5nymfopjTX15YhmUPoYRlBtHci8nHc8iMai/lxKvR ++HYqjQjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW ++BBSATNbrdP9JNqPV2Py1PsVq8JQdjDAKBggqhkjOPQQDAwNpADBmAjEA6ED/g94D ++9J+uHXqnLrmvT/aDHQ4thQEd0dlq7A/Cr8deVl5c1RxYIigL9zC2L7F8AjEA8GE8 ++p/SgguMh1YQdc4acLa/KNJvxn7kjNuK8YAOdgLOaVsjh4rsUecrNIdSUtUlD ++-----END CERTIFICATE----- ++ ++# b085d70b964f191a73e4af0d54ae7a0e07aafdaf9b71dd0862138ab7325a24a2 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 02:03:e5:7e:f5:3f:93:fd:a5:09:21:b2:a6 ++ Signature Algorithm: ecdsa-with-SHA256 ++ Issuer: OU = GlobalSign ECC Root CA - R4, O = GlobalSign, CN = GlobalSign ++ Validity ++ Not Before: Nov 13 00:00:00 2012 GMT ++ Not After : Jan 19 03:14:07 2038 GMT ++ Subject: OU = GlobalSign ECC Root CA - R4, O = GlobalSign, CN = GlobalSign ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (256 bit) ++ pub: ++ 04:b8:c6:79:d3:8f:6c:25:0e:9f:2e:39:19:1c:03: ++ a4:ae:9a:e5:39:07:09:16:ca:63:b1:b9:86:f8:8a: ++ 57:c1:57:ce:42:fa:73:a1:f7:65:42:ff:1e:c1:00: ++ b2:6e:73:0e:ff:c7:21:e5:18:a4:aa:d9:71:3f:a8: ++ d4:b9:ce:8c:1d ++ ASN1 OID: prime256v1 ++ NIST CURVE: P-256 ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 54:B0:7B:AD:45:B8:E2:40:7F:FB:0A:6E:FB:BE:33:C9:3C:A3:84:D5 ++ Signature Algorithm: ecdsa-with-SHA256 ++ Signature Value: ++ 30:44:02:20:22:4f:74:72:b9:60:af:f1:e6:9c:a0:16:05:50: ++ 5f:c3:5e:3b:6e:61:74:ef:be:01:c4:be:18:48:59:61:82:32: ++ 02:20:26:9d:54:63:40:de:37:60:50:cf:c8:d8:ed:9d:82:ae: ++ 37:98:bc:a3:8f:4c:4c:a9:34:2b:6c:ef:fb:95:9b:26 ++-----BEGIN CERTIFICATE----- ++MIIB3DCCAYOgAwIBAgINAgPlfvU/k/2lCSGypjAKBggqhkjOPQQDAjBQMSQwIgYD ++VQQLExtHbG9iYWxTaWduIEVDQyBSb290IENBIC0gUjQxEzARBgNVBAoTCkdsb2Jh ++bFNpZ24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMTIxMTEzMDAwMDAwWhcNMzgw ++MTE5MDMxNDA3WjBQMSQwIgYDVQQLExtHbG9iYWxTaWduIEVDQyBSb290IENBIC0g ++UjQxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkdsb2JhbFNpZ24wWTAT ++BgcqhkjOPQIBBggqhkjOPQMBBwNCAAS4xnnTj2wlDp8uORkcA6SumuU5BwkWymOx ++uYb4ilfBV85C+nOh92VC/x7BALJucw7/xyHlGKSq2XE/qNS5zowdo0IwQDAOBgNV ++HQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUVLB7rUW44kB/ +++wpu+74zyTyjhNUwCgYIKoZIzj0EAwIDRwAwRAIgIk90crlgr/HmnKAWBVBfw147 ++bmF0774BxL4YSFlhgjICICadVGNA3jdgUM/I2O2dgq43mLyjj0xMqTQrbO/7lZsm ++-----END CERTIFICATE----- ++ ++# 8d25cd97229dbf70356bda4eb3cc734031e24cf00fafcfd32dc76eb5841c7ea8 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 02:03:e5:ae:c5:8d:04:25:1a:ab:11:25:aa ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R2 ++ Validity ++ Not Before: Jun 22 00:00:00 2016 GMT ++ Not After : Jun 22 00:00:00 2036 GMT ++ Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:ce:de:fd:a6:fb:ec:ec:14:34:3c:07:06:5a:6c: ++ 59:f7:19:35:dd:f7:c1:9d:55:aa:d3:cd:3b:a4:93: ++ 72:ef:0a:fa:6d:9d:f6:f0:85:80:5b:a1:48:52:9f: ++ 39:c5:b7:ee:28:ac:ef:cb:76:68:14:b9:df:ad:01: ++ 6c:99:1f:c4:22:1d:9f:fe:72:77:e0:2c:5b:af:e4: ++ 04:bf:4f:72:a0:1a:34:98:e8:39:68:ec:95:25:7b: ++ 76:a1:e6:69:b9:85:19:bd:89:8c:fe:ad:ed:36:ea: ++ 73:bc:ff:83:e2:cb:7d:c1:d2:ce:4a:b3:8d:05:9e: ++ 8b:49:93:df:c1:5b:d0:6e:5e:f0:2e:30:2e:82:fc: ++ fa:bc:b4:17:0a:48:e5:88:9b:c5:9b:6b:de:b0:ca: ++ b4:03:f0:da:f4:90:b8:65:64:f7:5c:4c:ad:e8:7e: ++ 66:5e:99:d7:b8:c2:3e:c8:d0:13:9d:ad:ee:e4:45: ++ 7b:89:55:f7:8a:1f:62:52:84:12:b3:c2:40:97:e3: ++ 8a:1f:47:91:a6:74:5a:d2:f8:b1:63:28:10:b8:b3: ++ 09:b8:56:77:40:a2:26:98:79:c6:fe:df:25:ee:3e: ++ e5:a0:7f:d4:61:0f:51:4b:3c:3f:8c:da:e1:70:74: ++ d8:c2:68:a1:f9:c1:0c:e9:a1:e2:7f:bb:55:3c:76: ++ 06:ee:6a:4e:cc:92:88:30:4d:9a:bd:4f:0b:48:9a: ++ 84:b5:98:a3:d5:fb:73:c1:57:61:dd:28:56:75:13: ++ ae:87:8e:e7:0c:51:09:10:75:88:4c:bc:8d:f9:7b: ++ 3c:d4:22:48:1f:2a:dc:eb:6b:bb:44:b1:cb:33:71: ++ 32:46:af:ad:4a:f1:8c:e8:74:3a:ac:e7:1a:22:73: ++ 80:d2:30:f7:25:42:c7:22:3b:3b:12:ad:96:2e:c6: ++ c3:76:07:aa:20:b7:35:49:57:e9:92:49:e8:76:16: ++ 72:31:67:2b:96:7e:8a:a3:c7:94:56:22:bf:6a:4b: ++ 7e:01:21:b2:23:32:df:e4:9a:44:6d:59:5b:5d:f5: ++ 00:a0:1c:9b:c6:78:97:8d:90:ff:9b:c8:aa:b4:af: ++ 11:51:39:5e:d9:fb:67:ad:d5:5b:11:9d:32:9a:1b: ++ bd:d5:ba:5b:a5:c9:cb:25:69:53:55:27:5c:e0:ca: ++ 36:cb:88:61:fb:1e:b7:d0:cb:ee:16:fb:d3:a6:4c: ++ de:92:a5:d4:e2:df:f5:06:54:de:2e:9d:4b:b4:93: ++ 30:aa:81:ce:dd:1a:dc:51:73:0d:4f:70:e9:e5:b6: ++ 16:21:19:79:b2:e6:89:0b:75:64:ca:d5:ab:bc:09: ++ c1:18:a1:ff:d4:54:a1:85:3c:fd:14:24:03:b2:87: ++ d3:a4:b7 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ BB:FF:CA:8E:23:9F:4F:99:CA:DB:E2:68:A6:A5:15:27:17:1E:D9:0E ++ Signature Algorithm: sha384WithRSAEncryption ++ 1f:ca:ce:dd:c7:be:a1:9f:d9:27:4c:0b:dc:17:98:11:6a:88: ++ de:3d:e6:71:56:72:b2:9e:1a:4e:9c:d5:2b:98:24:5d:9b:6b: ++ 7b:b0:33:82:09:bd:df:25:46:ea:98:9e:b6:1b:fe:83:3c:d2: ++ 62:61:c1:04:ed:ce:e0:c5:c9:c8:13:13:55:e7:a8:63:ad:8c: ++ 7b:01:fe:77:30:e1:ce:68:9b:05:f8:12:ee:79:31:a0:41:45: ++ 35:28:0a:71:a4:24:4f:8c:dc:3c:82:07:5f:66:dc:7d:10:fe: ++ 0c:61:b3:05:95:ee:e1:ae:81:0f:a8:f8:c7:8f:4d:a8:23:02: ++ 26:6b:1d:83:52:55:ce:b5:2f:00:ca:80:40:e0:e1:74:ac:60: ++ f5:87:80:9d:ae:36:64:91:5d:b0:68:18:ea:8a:61:c9:77:a8: ++ 97:c4:c9:c7:a5:fc:55:4b:f3:f0:7f:b9:65:3d:27:68:d0:cc: ++ 6b:fa:53:9d:e1:91:1a:c9:5d:1a:96:6d:32:87:ed:03:20:c8: ++ 02:ce:5a:be:d9:ea:fd:b2:4d:c4:2f:1b:df:5f:7a:f5:f8:8b: ++ c6:ee:31:3a:25:51:55:67:8d:64:32:7b:e9:9e:c3:82:ba:2a: ++ 2d:e9:1e:b4:e0:48:06:a2:fc:67:af:1f:22:02:73:fb:20:0a: ++ af:9d:54:4b:a1:cd:ff:60:47:b0:3f:5d:ef:1b:56:bd:97:21: ++ 96:2d:0a:d1:5e:9d:38:02:47:6c:b9:f4:f6:23:25:b8:a0:6a: ++ 9a:2b:77:08:fa:c4:b1:28:90:26:58:08:3c:e2:7e:aa:d7:3d: ++ 6f:ba:31:88:0a:05:eb:27:b5:a1:49:ee:a0:45:54:7b:e6:27: ++ 65:99:20:21:a8:a3:bc:fb:18:96:bb:52:6f:0c:ed:83:51:4c: ++ e9:59:e2:20:60:c5:c2:65:92:82:8c:f3:10:1f:0e:8a:97:be: ++ 77:82:6d:3f:8f:1d:5d:bc:49:27:bd:cc:4f:0f:e1:ce:76:86: ++ 04:23:c5:c0:8c:12:5b:fd:db:84:a0:24:f1:48:ff:64:7c:d0: ++ be:5c:16:d1:ef:99:ad:c0:1f:fb:cb:ae:bc:38:22:06:26:64: ++ da:da:97:0e:3f:28:15:44:a8:4f:00:ca:f0:9a:cc:cf:74:6a: ++ b4:3e:3c:eb:95:ec:b5:d3:5a:d8:81:99:e9:43:18:37:eb:b3: ++ bb:d1:58:62:41:f3:66:d2:8f:aa:78:95:54:20:c3:5a:2e:74: ++ 2b:d5:d1:be:18:69:c0:ac:d5:a4:cf:39:ba:51:84:03:65:e9: ++ 62:c0:62:fe:d8:4d:55:96:e2:d0:11:fa:48:34:11:ec:9e:ed: ++ 05:1d:e4:c8:d6:1d:86:cb ++-----BEGIN CERTIFICATE----- ++MIIFVzCCAz+gAwIBAgINAgPlrsWNBCUaqxElqjANBgkqhkiG9w0BAQwFADBHMQsw ++CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU ++MBIGA1UEAxMLR1RTIFJvb3QgUjIwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAw ++MDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp ++Y2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjIwggIiMA0GCSqGSIb3DQEBAQUA ++A4ICDwAwggIKAoICAQDO3v2m++zsFDQ8BwZabFn3GTXd98GdVarTzTukk3LvCvpt ++nfbwhYBboUhSnznFt+4orO/LdmgUud+tAWyZH8QiHZ/+cnfgLFuv5AS/T3KgGjSY ++6Dlo7JUle3ah5mm5hRm9iYz+re026nO8/4Piy33B0s5Ks40FnotJk9/BW9BuXvAu ++MC6C/Pq8tBcKSOWIm8Wba96wyrQD8Nr0kLhlZPdcTK3ofmZemde4wj7I0BOdre7k ++RXuJVfeKH2JShBKzwkCX44ofR5GmdFrS+LFjKBC4swm4VndAoiaYecb+3yXuPuWg ++f9RhD1FLPD+M2uFwdNjCaKH5wQzpoeJ/u1U8dgbuak7MkogwTZq9TwtImoS1mKPV +++3PBV2HdKFZ1E66HjucMUQkQdYhMvI35ezzUIkgfKtzra7tEscszcTJGr61K8Yzo ++dDqs5xoic4DSMPclQsciOzsSrZYuxsN2B6ogtzVJV+mSSeh2FnIxZyuWfoqjx5RW ++Ir9qS34BIbIjMt/kmkRtWVtd9QCgHJvGeJeNkP+byKq0rxFROV7Z+2et1VsRnTKa ++G73VululycslaVNVJ1zgyjbLiGH7HrfQy+4W+9OmTN6SpdTi3/UGVN4unUu0kzCq ++gc7dGtxRcw1PcOnlthYhGXmy5okLdWTK1au8CcEYof/UVKGFPP0UJAOyh9OktwID ++AQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4E ++FgQUu//KjiOfT5nK2+JopqUVJxce2Q4wDQYJKoZIhvcNAQEMBQADggIBAB/Kzt3H ++vqGf2SdMC9wXmBFqiN495nFWcrKeGk6c1SuYJF2ba3uwM4IJvd8lRuqYnrYb/oM8 ++0mJhwQTtzuDFycgTE1XnqGOtjHsB/ncw4c5omwX4Eu55MaBBRTUoCnGkJE+M3DyC ++B19m3H0Q/gxhswWV7uGugQ+o+MePTagjAiZrHYNSVc61LwDKgEDg4XSsYPWHgJ2u ++NmSRXbBoGOqKYcl3qJfEycel/FVL8/B/uWU9J2jQzGv6U53hkRrJXRqWbTKH7QMg ++yALOWr7Z6v2yTcQvG99fevX4i8buMTolUVVnjWQye+mew4K6Ki3pHrTgSAai/Gev ++HyICc/sgCq+dVEuhzf9gR7A/Xe8bVr2XIZYtCtFenTgCR2y59PYjJbigapordwj6 ++xLEokCZYCDzifqrXPW+6MYgKBesntaFJ7qBFVHvmJ2WZICGoo7z7GJa7Um8M7YNR ++TOlZ4iBgxcJlkoKM8xAfDoqXvneCbT+PHV28SSe9zE8P4c52hgQjxcCMElv924Sg ++JPFI/2R80L5cFtHvma3AH/vLrrw4IgYmZNralw4/KBVEqE8AyvCazM90arQ+POuV ++7LXTWtiBmelDGDfrs7vRWGJB82bSj6p4lVQgw1oudCvV0b4YacCs1aTPObpRhANl ++6WLAYv7YTVWW4tAR+kg0Eeye7QUd5MjWHYbL ++-----END CERTIFICATE----- ++ ++# 5a2fc03f0c83b090bbfa40604b0988446c7636183df9846e17101a447fb8efd6 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 08:16:5f:8a:4c:a5:ec:00:c9:93:40:df:c4:c6:ae:23:b8:1c:5a:a4 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = HK, ST = Hong Kong, L = Hong Kong, O = Hongkong Post, CN = Hongkong Post Root CA 3 ++ Validity ++ Not Before: Jun 3 02:29:46 2017 GMT ++ Not After : Jun 3 02:29:46 2042 GMT ++ Subject: C = HK, ST = Hong Kong, L = Hong Kong, O = Hongkong Post, CN = Hongkong Post Root CA 3 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:b3:88:d7:ea:ce:0f:20:4e:be:e6:d6:03:6d:ee: ++ 59:fc:c2:57:df:29:68:a1:83:0e:3e:68:c7:68:58: ++ 9c:1c:60:4b:89:43:0c:b9:d4:15:b2:ee:c1:4e:75: ++ e9:b5:a7:ef:e5:e9:35:99:e4:cc:1c:e7:4b:5f:8d: ++ 33:30:20:33:53:d9:a6:bb:d5:3e:13:8e:e9:1f:87: ++ 49:ad:50:2d:50:ca:18:be:01:58:a2:13:70:96:bb: ++ 89:88:56:80:5c:f8:bd:2c:3c:e1:4c:57:88:bb:d3: ++ b9:95:ef:cb:c7:f6:da:31:74:28:a6:e6:54:89:f5: ++ 41:31:ca:e5:26:1a:cd:82:e0:70:da:3b:29:bb:d5: ++ 03:f5:99:ba:55:f5:64:d1:60:0e:b3:89:49:b8:8a: ++ 2f:05:d2:84:45:28:7c:8f:68:50:12:78:fc:0b:b5: ++ 53:cb:c2:98:1c:84:a3:9e:b0:be:23:a4:da:dc:c8: ++ 2b:1e:da:6e:45:1e:89:98:da:f9:00:2e:06:e9:0c: ++ 3b:70:d5:50:25:88:99:cb:cd:73:60:f7:d5:ff:35: ++ 67:c5:a1:bc:5e:ab:cd:4a:b8:45:eb:c8:68:1e:0d: ++ 0d:14:46:12:e3:d2:64:62:8a:42:98:bc:b4:c6:08: ++ 08:f8:fd:a8:4c:64:9c:76:01:bd:2f:a9:6c:33:0f: ++ d8:3f:28:b8:3c:69:01:42:86:7e:69:c1:c9:06:ca: ++ e5:7a:46:65:e9:c2:d6:50:41:2e:3f:b7:e4:ed:6c: ++ d7:bf:26:01:11:a2:16:29:4a:6b:34:06:90:ec:13: ++ d2:b6:fb:6a:76:d2:3c:ed:f0:d6:2d:dd:e1:15:ec: ++ a3:9b:2f:2c:c9:3e:2b:e4:69:3b:ff:72:25:b1:36: ++ 86:5b:c7:7f:6b:8b:55:1b:4a:c5:20:61:3d:ae:cb: ++ 50:e1:08:3a:be:b0:8f:63:41:53:30:08:59:3c:98: ++ 1d:77:ba:63:91:7a:ca:10:50:60:bf:f0:d7:bc:95: ++ 87:8f:97:c5:fe:97:6a:01:94:a3:7c:5b:85:1d:2a: ++ 39:3a:d0:54:a1:d1:39:71:9d:fd:21:f9:b5:7b:f0: ++ e2:e0:02:8f:6e:96:24:25:2c:a0:1e:2c:a8:c4:89: ++ a7:ef:ed:99:06:2f:b6:0a:4c:4f:db:a2:cc:37:1a: ++ af:47:85:2d:8a:5f:c4:34:34:4c:00:fd:18:93:67: ++ 13:d1:37:e6:48:b4:8b:06:c5:57:7b:19:86:0a:79: ++ cb:00:c9:52:af:42:ff:37:8f:e1:a3:1e:7a:3d:50: ++ ab:63:06:e7:15:b5:3f:b6:45:37:94:37:b1:7e:f2: ++ 48:c3:7f:c5:75:fe:97:8d:45:8f:1a:a7:1a:72:28: ++ 1a:40:0f ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Authority Key Identifier: ++ keyid:17:9D:CD:1E:8B:D6:39:2B:70:D3:5C:D4:A0:B8:1F:B0:00:FC:C5:61 ++ ++ X509v3 Subject Key Identifier: ++ 17:9D:CD:1E:8B:D6:39:2B:70:D3:5C:D4:A0:B8:1F:B0:00:FC:C5:61 ++ Signature Algorithm: sha256WithRSAEncryption ++ 56:d5:7b:6e:e6:22:01:d2:42:9b:18:d5:0e:d7:66:23:5c:e3: ++ fe:a0:c7:92:d2:e9:94:ad:4b:a2:c6:ec:12:7c:74:d5:48:d2: ++ 59:14:99:c0:eb:b9:d1:eb:f4:48:30:5b:ad:a7:57:73:99:a9: ++ d3:e5:b7:d1:2e:59:24:58:dc:68:2e:2e:62:d8:6a:e4:70:0b: ++ 2d:20:50:20:a4:32:95:d1:00:98:bb:d3:fd:f7:32:f2:49:ae: ++ c6:7a:e0:47:be:6e:ce:cb:a3:72:3a:2d:69:5d:cb:c8:e8:45: ++ 39:d4:fa:42:c1:11:4c:77:5d:92:fb:6a:ff:58:44:e5:eb:81: ++ 9e:af:a0:99:ad:be:a9:01:66:cb:38:1d:3c:df:43:1f:f4:4d: ++ 6e:b4:ba:17:46:fc:7d:fd:87:81:79:6a:0d:33:0f:fa:2f:f8: ++ 14:b9:80:b3:5d:4d:aa:97:e1:f9:e4:18:c5:f8:d5:38:8c:26: ++ 3c:fd:f2:28:e2:ee:5a:49:88:2c:df:79:3d:8e:9e:90:3c:bd: ++ 41:4a:3a:dd:5b:f6:9a:b4:ce:3f:25:30:7f:32:7d:a2:03:94: ++ d0:dc:7a:a1:52:de:6e:93:8d:18:26:fd:55:ac:bd:8f:9b:d2: ++ cf:af:e7:86:2c:cb:1f:09:6f:a3:6f:a9:84:d4:73:bf:4d:a1: ++ 74:1b:4e:23:60:f2:cc:0e:aa:7f:a4:9c:4c:25:a8:b2:66:3b: ++ 38:ff:d9:94:30:f6:72:84:be:68:55:10:0f:c6:73:2c:16:69: ++ 93:07:fe:b1:45:ed:bb:a2:55:6a:b0:da:b5:4a:02:25:27:85: ++ d7:b7:b7:86:44:16:89:6c:80:2b:3e:97:a9:9c:d5:7e:55:4c: ++ c6:de:45:10:1c:ea:e9:3b:9f:03:53:ee:ee:7a:01:02:16:78: ++ d4:e8:c2:be:46:76:88:13:3f:22:bb:48:12:1d:52:00:b4:02: ++ 7e:21:1a:1e:9c:25:f4:f3:3d:5e:1e:d2:1c:f9:b3:2d:b6:f7: ++ 37:5c:c6:cb:21:4e:b0:f7:99:47:18:85:c1:2b:ba:55:ae:06: ++ ea:d0:07:b2:dc:ab:d0:82:96:75:ce:d2:50:fe:99:e7:cf:2f: ++ 9f:e7:76:d1:61:2a:fb:21:bb:31:d0:aa:9f:47:a4:b2:22:ca: ++ 16:3a:50:57:c4:5b:43:67:c5:65:62:03:49:01:eb:43:d9:d8: ++ f8:9e:ad:cf:b1:63:0e:45:f4:a0:5a:2c:9b:2d:c5:a6:c0:ad: ++ a8:47:f4:27:4c:38:0d:2e:1b:49:3b:52:f4:e8:88:83:2b:54: ++ 28:d4:f2:35:52:b4:32:83:62:69:64:0c:91:9c:9f:97:ea:74: ++ 16:fd:1f:11:06:9a:9b:f4 ++-----BEGIN CERTIFICATE----- ++MIIFzzCCA7egAwIBAgIUCBZfikyl7ADJk0DfxMauI7gcWqQwDQYJKoZIhvcNAQEL ++BQAwbzELMAkGA1UEBhMCSEsxEjAQBgNVBAgTCUhvbmcgS29uZzESMBAGA1UEBxMJ ++SG9uZyBLb25nMRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25n ++a29uZyBQb3N0IFJvb3QgQ0EgMzAeFw0xNzA2MDMwMjI5NDZaFw00MjA2MDMwMjI5 ++NDZaMG8xCzAJBgNVBAYTAkhLMRIwEAYDVQQIEwlIb25nIEtvbmcxEjAQBgNVBAcT ++CUhvbmcgS29uZzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEgMB4GA1UEAxMXSG9u ++Z2tvbmcgUG9zdCBSb290IENBIDMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK ++AoICAQCziNfqzg8gTr7m1gNt7ln8wlffKWihgw4+aMdoWJwcYEuJQwy51BWy7sFO ++dem1p+/l6TWZ5Mwc50tfjTMwIDNT2aa71T4Tjukfh0mtUC1Qyhi+AViiE3CWu4mI ++VoBc+L0sPOFMV4i707mV78vH9toxdCim5lSJ9UExyuUmGs2C4HDaOym71QP1mbpV ++9WTRYA6ziUm4ii8F0oRFKHyPaFASePwLtVPLwpgchKOesL4jpNrcyCse2m5FHomY ++2vkALgbpDDtw1VAliJnLzXNg99X/NWfFobxeq81KuEXryGgeDQ0URhLj0mRiikKY ++vLTGCAj4/ahMZJx2Ab0vqWwzD9g/KLg8aQFChn5pwckGyuV6RmXpwtZQQS4/t+Tt ++bNe/JgERohYpSms0BpDsE9K2+2p20jzt8NYt3eEV7KObLyzJPivkaTv/ciWxNoZb ++x39ri1UbSsUgYT2uy1DhCDq+sI9jQVMwCFk8mB13umOResoQUGC/8Ne8lYePl8X+ ++l2oBlKN8W4UdKjk60FSh0Tlxnf0h+bV78OLgAo9uliQlLKAeLKjEiafv7ZkGL7YK ++TE/bosw3Gq9HhS2KX8Q0NEwA/RiTZxPRN+ZItIsGxVd7GYYKecsAyVKvQv83j+Gj ++Hno9UKtjBucVtT+2RTeUN7F+8kjDf8V1/peNRY8apxpyKBpADwIDAQABo2MwYTAP ++BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAfBgNVHSMEGDAWgBQXnc0e ++i9Y5K3DTXNSguB+wAPzFYTAdBgNVHQ4EFgQUF53NHovWOStw01zUoLgfsAD8xWEw ++DQYJKoZIhvcNAQELBQADggIBAFbVe27mIgHSQpsY1Q7XZiNc4/6gx5LS6ZStS6LG ++7BJ8dNVI0lkUmcDrudHr9EgwW62nV3OZqdPlt9EuWSRY3GguLmLYauRwCy0gUCCk ++MpXRAJi70/33MvJJrsZ64Ee+bs7Lo3I6LWldy8joRTnU+kLBEUx3XZL7av9YROXr ++gZ6voJmtvqkBZss4HTzfQx/0TW60uhdG/H39h4F5ag0zD/ov+BS5gLNdTaqX4fnk ++GMX41TiMJjz98iji7lpJiCzfeT2OnpA8vUFKOt1b9pq0zj8lMH8yfaIDlNDceqFS ++3m6TjRgm/VWsvY+b0s+v54Ysyx8Jb6NvqYTUc79NoXQbTiNg8swOqn+knEwlqLJm ++Ozj/2ZQw9nKEvmhVEA/GcywWaZMH/rFF7buiVWqw2rVKAiUnhde3t4ZEFolsgCs+ ++l6mc1X5VTMbeRRAc6uk7nwNT7u56AQIWeNTowr5GdogTPyK7SBIdUgC0An4hGh6c ++JfTzPV4e0hz5sy229zdcxsshTrD3mUcYhcErulWuBurQB7Lcq9CClnXO0lD+mefP ++L5/ndtFhKvshuzHQqp9HpLIiyhY6UFfEW0NnxWViA0kB60PZ2Pierc+xYw5F9KBa ++LJstxabArahH9CdMOA0uG0k7UvToiIMrVCjU8jVStDKDYmlkDJGcn5fqdBb9HxEG ++mpv0 ++-----END CERTIFICATE----- ++ ++# 9a6ec012e1a7da9dbe34194d478ad7c0db1822fb071df12981496ed104384113 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 6828503384748696800 (0x5ec3b7a6437fa4e0) ++ Signature Algorithm: sha1WithRSAEncryption ++ Issuer: CN = ACCVRAIZ1, OU = PKIACCV, O = ACCV, C = ES ++ Validity ++ Not Before: May 5 09:37:37 2011 GMT ++ Not After : Dec 31 09:37:37 2030 GMT ++ Subject: CN = ACCVRAIZ1, OU = PKIACCV, O = ACCV, C = ES ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:9b:a9:ab:bf:61:4a:97:af:2f:97:66:9a:74:5f: ++ d0:d9:96:fd:cf:e2:e4:66:ef:1f:1f:47:33:c2:44: ++ a3:df:9a:de:1f:b5:54:dd:15:7c:69:35:11:6f:bb: ++ c8:0c:8e:6a:18:1e:d8:8f:d9:16:bc:10:48:36:5c: ++ f0:63:b3:90:5a:5c:24:37:d7:a3:d6:cb:09:71:b9: ++ f1:01:72:84:b0:7d:db:4d:80:cd:fc:d3:6f:c9:f8: ++ da:b6:0e:82:d2:45:85:a8:1b:68:a8:3d:e8:f4:44: ++ 6c:bd:a1:c2:cb:03:be:8c:3e:13:00:84:df:4a:48: ++ c0:e3:22:0a:e8:e9:37:a7:18:4c:b1:09:0d:23:56: ++ 7f:04:4d:d9:17:84:18:a5:c8:da:40:94:73:eb:ce: ++ 0e:57:3c:03:81:3a:9d:0a:a1:57:43:69:ac:57:6d: ++ 79:90:78:e5:b5:b4:3b:d8:bc:4c:8d:28:a1:a7:a3: ++ a7:ba:02:4e:25:d1:2a:ae:ed:ae:03:22:b8:6b:20: ++ 0f:30:28:54:95:7f:e0:ee:ce:0a:66:9d:d1:40:2d: ++ 6e:22:af:9d:1a:c1:05:19:d2:6f:c0:f2:9f:f8:7b: ++ b3:02:42:fb:50:a9:1d:2d:93:0f:23:ab:c6:c1:0f: ++ 92:ff:d0:a2:15:f5:53:09:71:1c:ff:45:13:84:e6: ++ 26:5e:f8:e0:88:1c:0a:fc:16:b6:a8:73:06:b8:f0: ++ 63:84:02:a0:c6:5a:ec:e7:74:df:70:ae:a3:83:25: ++ ea:d6:c7:97:87:93:a7:c6:8a:8a:33:97:60:37:10: ++ 3e:97:3e:6e:29:15:d6:a1:0f:d1:88:2c:12:9f:6f: ++ aa:a4:c6:42:eb:41:a2:e3:95:43:d3:01:85:6d:8e: ++ bb:3b:f3:23:36:c7:fe:3b:e0:a1:25:07:48:ab:c9: ++ 89:74:ff:08:8f:80:bf:c0:96:65:f3:ee:ec:4b:68: ++ bd:9d:88:c3:31:b3:40:f1:e8:cf:f6:38:bb:9c:e4: ++ d1:7f:d4:e5:58:9b:7c:fa:d4:f3:0e:9b:75:91:e4: ++ ba:52:2e:19:7e:d1:f5:cd:5a:19:fc:ba:06:f6:fb: ++ 52:a8:4b:99:04:dd:f8:f9:b4:8b:50:a3:4e:62:89: ++ f0:87:24:fa:83:42:c1:87:fa:d5:2d:29:2a:5a:71: ++ 7a:64:6a:d7:27:60:63:0d:db:ce:49:f5:8d:1f:90: ++ 89:32:17:f8:73:43:b8:d2:5a:93:86:61:d6:e1:75: ++ 0a:ea:79:66:76:88:4f:71:eb:04:25:d6:0a:5a:7a: ++ 93:e5:b9:4b:17:40:0f:b1:b6:b9:f5:de:4f:dc:e0: ++ b3:ac:3b:11:70:60:84:4a:43:6e:99:20:c0:29:71: ++ 0a:c0:65 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ Authority Information Access: ++ CA Issuers - URI:http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1.crt ++ OCSP - URI:http://ocsp.accv.es ++ ++ X509v3 Subject Key Identifier: ++ D2:87:B4:E3:DF:37:27:93:55:F6:56:EA:81:E5:36:CC:8C:1E:3F:BD ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ keyid:D2:87:B4:E3:DF:37:27:93:55:F6:56:EA:81:E5:36:CC:8C:1E:3F:BD ++ ++ X509v3 Certificate Policies: ++ Policy: X509v3 Any Policy ++ User Notice: ++ Explicit Text: ++ CPS: http://www.accv.es/legislacion_c.htm ++ ++ X509v3 CRL Distribution Points: ++ ++ Full Name: ++ URI:http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1_der.crl ++ ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Alternative Name: ++ email:accv@accv.es ++ Signature Algorithm: sha1WithRSAEncryption ++ 97:31:02:9f:e7:fd:43:67:48:44:14:e4:29:87:ed:4c:28:66: ++ d0:8f:35:da:4d:61:b7:4a:97:4d:b5:db:90:e0:05:2e:0e:c6: ++ 79:d0:f2:97:69:0f:bd:04:47:d9:be:db:b5:29:da:9b:d9:ae: ++ a9:99:d5:d3:3c:30:93:f5:8d:a1:a8:fc:06:8d:44:f4:ca:16: ++ 95:7c:33:dc:62:8b:a8:37:f8:27:d8:09:2d:1b:ef:c8:14:27: ++ 20:a9:64:44:ff:2e:d6:75:aa:6c:4d:60:40:19:49:43:54:63: ++ da:e2:cc:ba:66:e5:4f:44:7a:5b:d9:6a:81:2b:40:d5:7f:f9: ++ 01:27:58:2c:c8:ed:48:91:7c:3f:a6:00:cf:c4:29:73:11:36: ++ de:86:19:3e:9d:ee:19:8a:1b:d5:b0:ed:8e:3d:9c:2a:c0:0d: ++ d8:3d:66:e3:3c:0d:bd:d5:94:5c:e2:e2:a7:35:1b:04:00:f6: ++ 3f:5a:8d:ea:43:bd:5f:89:1d:a9:c1:b0:cc:99:e2:4d:00:0a: ++ da:c9:27:5b:e7:13:90:5c:e4:f5:33:a2:55:6d:dc:e0:09:4d: ++ 2f:b1:26:5b:27:75:00:09:c4:62:77:29:08:5f:9e:59:ac:b6: ++ 7e:ad:9f:54:30:22:03:c1:1e:71:64:fe:f9:38:0a:96:18:dd: ++ 02:14:ac:23:cb:06:1c:1e:a4:7d:8d:0d:de:27:41:e8:ad:da: ++ 15:b7:b0:23:dd:2b:a8:d3:da:25:87:ed:e8:55:44:4d:88:f4: ++ 36:7e:84:9a:78:ac:f7:0e:56:49:0e:d6:33:25:d6:84:50:42: ++ 6c:20:12:1d:2a:d5:be:bc:f2:70:81:a4:70:60:be:05:b5:9b: ++ 9e:04:44:be:61:23:ac:e9:a5:24:8c:11:80:94:5a:a2:a2:b9: ++ 49:d2:c1:dc:d1:a7:ed:31:11:2c:9e:19:a6:ee:e1:55:e1:c0: ++ ea:cf:0d:84:e4:17:b7:a2:7c:a5:de:55:25:06:ee:cc:c0:87: ++ 5c:40:da:cc:95:3f:55:e0:35:c7:b8:84:be:b4:5d:cd:7a:83: ++ 01:72:ee:87:e6:5f:1d:ae:b5:85:c6:26:df:e6:c1:9a:e9:1e: ++ 02:47:9f:2a:a8:6d:a9:5b:cf:ec:45:77:7f:98:27:9a:32:5d: ++ 2a:e3:84:ee:c5:98:66:2f:96:20:1d:dd:d8:c3:27:d7:b0:f9: ++ fe:d9:7d:cd:d0:9f:8f:0b:14:58:51:9f:2f:8b:c3:38:2d:de: ++ e8:8f:d6:8d:87:a4:f5:56:43:16:99:2c:f4:a4:56:b4:34:b8: ++ 61:37:c9:c2:58:80:1b:a0:97:a1:fc:59:8d:e9:11:f6:d1:0f: ++ 4b:55:34:46:2a:8b:86:3b + -----BEGIN CERTIFICATE----- + MIIH0zCCBbugAwIBAgIIXsO3pkN/pOAwDQYJKoZIhvcNAQEFBQAwQjESMBAGA1UE + AwwJQUNDVlJBSVoxMRAwDgYDVQQLDAdQS0lBQ0NWMQ0wCwYDVQQKDARBQ0NWMQsw +@@ -1765,272 +4107,1426 @@ d3+YJ5oyXSrjhO7FmGYvliAd3djDJ9ew+f7Zfc3Qn48LFFhRny+Lwzgt3uiP1o2H + pPVWQxaZLPSkVrQ0uGE3ycJYgBugl6H8WY3pEfbRD0tVNEYqi4Y7 + -----END CERTIFICATE----- + +-# Issuer: CN=TWCA Global Root CA O=TAIWAN-CA OU=Root CA +-# Subject: CN=TWCA Global Root CA O=TAIWAN-CA OU=Root CA +-# Label: "TWCA Global Root CA" +-# Serial: 3262 +-# MD5 Fingerprint: f9:03:7e:cf:e6:9e:3c:73:7a:2a:90:07:69:ff:2b:96 +-# SHA1 Fingerprint: 9c:bb:48:53:f6:a4:f6:d3:52:a4:e8:32:52:55:60:13:f5:ad:af:65 +-# SHA256 Fingerprint: 59:76:90:07:f7:68:5d:0f:cd:50:87:2f:9f:95:d5:75:5a:5b:2b:45:7d:81:f3:69:2b:61:0a:98:67:2f:0e:1b ++# ebc5570c29018c4d67b1aa127baf12f703b4611ebc17b7dab5573894179b93fa ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 5d:93:8d:30:67:36:c8:06:1d:1a:c7:54:84:69:07 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = ES, O = FNMT-RCM, OU = AC RAIZ FNMT-RCM ++ Validity ++ Not Before: Oct 29 15:59:56 2008 GMT ++ Not After : Jan 1 00:00:00 2030 GMT ++ Subject: C = ES, O = FNMT-RCM, OU = AC RAIZ FNMT-RCM ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:ba:71:80:7a:4c:86:6e:7f:c8:13:6d:c0:c6:7d: ++ 1c:00:97:8f:2c:0c:23:bb:10:9a:40:a9:1a:b7:87: ++ 88:f8:9b:56:6a:fb:e6:7b:8e:8b:92:8e:a7:25:5d: ++ 59:11:db:36:2e:b7:51:17:1f:a9:08:1f:04:17:24: ++ 58:aa:37:4a:18:df:e5:39:d4:57:fd:d7:c1:2c:91: ++ 01:91:e2:22:d4:03:c0:58:fc:77:47:ec:8f:3e:74: ++ 43:ba:ac:34:8d:4d:38:76:67:8e:b0:c8:6f:30:33: ++ 58:71:5c:b4:f5:6b:6e:d4:01:50:b8:13:7e:6c:4a: ++ a3:49:d1:20:19:ee:bc:c0:29:18:65:a7:de:fe:ef: ++ dd:0a:90:21:e7:1a:67:92:42:10:98:5f:4f:30:bc: ++ 3e:1c:45:b4:10:d7:68:40:14:c0:40:fa:e7:77:17: ++ 7a:e6:0b:8f:65:5b:3c:d9:9a:52:db:b5:bd:9e:46: ++ cf:3d:eb:91:05:02:c0:96:b2:76:4c:4d:10:96:3b: ++ 92:fa:9c:7f:0f:99:df:be:23:35:45:1e:02:5c:fe: ++ b5:a8:9b:99:25:da:5e:f3:22:c3:39:f5:e4:2a:2e: ++ d3:c6:1f:c4:6c:aa:c5:1c:6a:01:05:4a:2f:d2:c5: ++ c1:a8:34:26:5d:66:a5:d2:02:21:f9:18:b7:06:f5: ++ 4e:99:6f:a8:ab:4c:51:e8:cf:50:18:c5:77:c8:39: ++ 09:2c:49:92:32:99:a8:bb:17:17:79:b0:5a:c5:e6: ++ a3:c4:59:65:47:35:83:5e:a9:e8:35:0b:99:bb:e4: ++ cd:20:c6:9b:4a:06:39:b5:68:fc:22:ba:ee:55:8c: ++ 2b:4e:ea:f3:b1:e3:fc:b6:99:9a:d5:42:fa:71:4d: ++ 08:cf:87:1e:6a:71:7d:f9:d3:b4:e9:a5:71:81:7b: ++ c2:4e:47:96:a5:f6:76:85:a3:28:8f:e9:80:6e:81: ++ 53:a5:6d:5f:b8:48:f9:c2:f9:36:a6:2e:49:ff:b8: ++ 96:c2:8c:07:b3:9b:88:58:fc:eb:1b:1c:de:2d:70: ++ e2:97:92:30:a1:89:e3:bc:55:a8:27:d6:4b:ed:90: ++ ad:8b:fa:63:25:59:2d:a8:35:dd:ca:97:33:bc:e5: ++ cd:c7:9d:d1:ec:ef:5e:0e:4a:90:06:26:63:ad:b9: ++ d9:35:2d:07:ba:76:65:2c:ac:57:8f:7d:f4:07:94: ++ d7:81:02:96:5d:a3:07:49:d5:7a:d0:57:f9:1b:e7: ++ 53:46:75:aa:b0:79:42:cb:68:71:08:e9:60:bd:39: ++ 69:ce:f4:af:c3:56:40:c7:ad:52:a2:09:e4:6f:86: ++ 47:8a:1f:eb:28:27:5d:83:20:af:04:c9:6c:56:9a: ++ 8b:46:f5 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ F7:7D:C5:FD:C4:E8:9A:1B:77:64:A7:F5:1D:A0:CC:BF:87:60:9A:6D ++ X509v3 Certificate Policies: ++ Policy: X509v3 Any Policy ++ CPS: http://www.cert.fnmt.es/dpcs/ ++ ++ Signature Algorithm: sha256WithRSAEncryption ++ 07:90:4a:df:f3:23:4e:f0:c3:9c:51:65:9b:9c:22:a2:8a:0c: ++ 85:f3:73:29:6b:4d:fe:01:e2:a9:0c:63:01:bf:04:67:a5:9d: ++ 98:5f:fd:01:13:fa:ec:9a:62:e9:86:fe:b6:62:d2:6e:4c:94: ++ fb:c0:75:45:7c:65:0c:f8:b2:37:cf:ac:0f:cf:8d:6f:f9:19: ++ f7:8f:ec:1e:f2:70:9e:f0:ca:b8:ef:b7:ff:76:37:76:5b:f6: ++ 6e:88:f3:af:62:32:22:93:0d:3a:6a:8e:14:66:0c:2d:53:74: ++ 57:65:1e:d5:b2:dd:23:81:3b:a5:66:23:27:67:09:8f:e1:77: ++ aa:43:cd:65:51:08:ed:51:58:fe:e6:39:f9:cb:47:84:a4:15: ++ f1:76:bb:a4:ee:a4:3b:c4:5f:ef:b2:33:96:11:18:b7:c9:65: ++ be:18:e1:a3:a4:dc:fa:18:f9:d3:bc:13:9b:39:7a:34:ba:d3: ++ 41:fb:fa:32:8a:2a:b7:2b:86:0b:69:83:38:be:cd:8a:2e:0b: ++ 70:ad:8d:26:92:ee:1e:f5:01:2b:0a:d9:d6:97:9b:6e:e0:a8: ++ 19:1c:3a:21:8b:0c:1e:40:ad:03:e7:dd:66:7e:f5:b9:20:0d: ++ 03:e8:96:f9:82:45:d4:39:e0:a0:00:5d:d7:98:e6:7d:9e:67: ++ 73:c3:9a:2a:f7:ab:8b:a1:3a:14:ef:34:bc:52:0e:89:98:9a: ++ 04:40:84:1d:7e:45:69:93:57:ce:eb:ce:f8:50:7c:4f:1c:6e: ++ 04:43:9b:f9:d6:3b:23:18:e9:ea:8e:d1:4d:46:8d:f1:3b:e4: ++ 6a:ca:ba:fb:23:b7:9b:fa:99:01:29:5a:58:5a:2d:e3:f9:d4: ++ 6d:0e:26:ad:c1:6e:34:bc:32:f8:0c:05:fa:65:a3:db:3b:37: ++ 83:22:e9:d6:dc:72:33:fd:5d:f2:20:bd:76:3c:23:da:28:f7: ++ f9:1b:eb:59:64:d5:dc:5f:72:7e:20:fc:cd:89:b5:90:67:4d: ++ 62:7a:3f:4e:ad:1d:c3:39:fe:7a:f4:28:16:df:41:f6:48:80: ++ 05:d7:0f:51:79:ac:10:ab:d4:ec:03:66:e6:6a:b0:ba:31:92: ++ 42:40:6a:be:3a:d3:72:e1:6a:37:55:bc:ac:1d:95:b7:69:61: ++ f2:43:91:74:e6:a0:d3:0a:24:46:a1:08:af:d6:da:45:19:96: ++ d4:53:1d:5b:84:79:f0:c0:f7:47:ef:8b:8f:c5:06:ae:9d:4c: ++ 62:9d:ff:46:04:f8:d3:c9:b6:10:25:40:75:fe:16:aa:c9:4a: ++ 60:86:2f:ba:ef:30:77:e4:54:e2:b8:84:99:58:80:aa:13:8b: ++ 51:3a:4f:48:f6:8b:b6:b3 + -----BEGIN CERTIFICATE----- +-MIIFQTCCAymgAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwUTELMAkGA1UEBhMCVFcx +-EjAQBgNVBAoTCVRBSVdBTi1DQTEQMA4GA1UECxMHUm9vdCBDQTEcMBoGA1UEAxMT +-VFdDQSBHbG9iYWwgUm9vdCBDQTAeFw0xMjA2MjcwNjI4MzNaFw0zMDEyMzExNTU5 +-NTlaMFExCzAJBgNVBAYTAlRXMRIwEAYDVQQKEwlUQUlXQU4tQ0ExEDAOBgNVBAsT +-B1Jvb3QgQ0ExHDAaBgNVBAMTE1RXQ0EgR2xvYmFsIFJvb3QgQ0EwggIiMA0GCSqG +-SIb3DQEBAQUAA4ICDwAwggIKAoICAQCwBdvI64zEbooh745NnHEKH1Jw7W2CnJfF +-10xORUnLQEK1EjRsGcJ0pDFfhQKX7EMzClPSnIyOt7h52yvVavKOZsTuKwEHktSz +-0ALfUPZVr2YOy+BHYC8rMjk1Ujoog/h7FsYYuGLWRyWRzvAZEk2tY/XTP3VfKfCh +-MBwqoJimFb3u/Rk28OKRQ4/6ytYQJ0lM793B8YVwm8rqqFpD/G2Gb3PpN0Wp8DbH +-zIh1HrtsBv+baz4X7GGqcXzGHaL3SekVtTzWoWH1EfcFbx39Eb7QMAfCKbAJTibc +-46KokWofwpFFiFzlmLhxpRUZyXx1EcxwdE8tmx2RRP1WKKD+u4ZqyPpcC1jcxkt2 +-yKsi2XMPpfRaAok/T54igu6idFMqPVMnaR1sjjIsZAAmY2E2TqNGtz99sy2sbZCi +-laLOz9qC5wc0GZbpuCGqKX6mOL6OKUohZnkfs8O1CWfe1tQHRvMq2uYiN2DLgbYP +-oA/pyJV/v1WRBXrPPRXAb94JlAGD1zQbzECl8LibZ9WYkTunhHiVJqRaCPgrdLQA +-BDzfuBSO6N+pjWxnkjMdwLfS7JLIvgm/LCkFbwJrnu+8vyq8W8BQj0FwcYeyTbcE +-qYSjMq+u7msXi7Kx/mzhkIyIqJdIzshNy/MGz19qCkKxHh53L46g5pIOBvwFItIm +-4TFRfTLcDwIDAQABoyMwITAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB +-/zANBgkqhkiG9w0BAQsFAAOCAgEAXzSBdu+WHdXltdkCY4QWwa6gcFGn90xHNcgL +-1yg9iXHZqjNB6hQbbCEAwGxCGX6faVsgQt+i0trEfJdLjbDorMjupWkEmQqSpqsn +-LhpNgb+E1HAerUf+/UqdM+DyucRFCCEK2mlpc3INvjT+lIutwx4116KD7+U4x6WF +-H6vPNOw/KP4M8VeGTslV9xzU2KV9Bnpv1d8Q34FOIWWxtuEXeZVFBs5fzNxGiWNo +-RI2T9GRwoD2dKAXDOXC4Ynsg/eTb6QihuJ49CcdP+yz4k3ZB3lLg4VfSnQO8d57+ +-nile98FRYB/e2guyLXW3Q0iT5/Z5xoRdgFlglPx4mI88k1HtQJAH32RjJMtOcQWh +-15QaiDLxInQirqWm2BJpTGCjAu4r7NRjkgtevi92a6O2JryPA9gK8kxkRr05YuWW +-6zRjESjMlfGt7+/cgFhI6Uu46mWs6fyAtbXIRfmswZ/ZuepiiI7E8UuDEq3mi4TW +-nsLrgxifarsbJGAzcMzs9zLzXNl5fe+epP7JI8Mk7hWSsT2RTyaGvWZzJBPqpK5j +-wa19hAM8EHiGG3njxPPyBJUgriOCxLM6AGK/5jYk4Ve6xx6QddVfP5VhK8E7zeWz +-aGHQRiapIVJpLesux+t3zqY6tQMzT3bR51xUAV3LePTJDL/PEo4XLSNolOer/qmy +-KwbQBM0= ++MIIFgzCCA2ugAwIBAgIPXZONMGc2yAYdGsdUhGkHMA0GCSqGSIb3DQEBCwUAMDsx ++CzAJBgNVBAYTAkVTMREwDwYDVQQKDAhGTk1ULVJDTTEZMBcGA1UECwwQQUMgUkFJ ++WiBGTk1ULVJDTTAeFw0wODEwMjkxNTU5NTZaFw0zMDAxMDEwMDAwMDBaMDsxCzAJ ++BgNVBAYTAkVTMREwDwYDVQQKDAhGTk1ULVJDTTEZMBcGA1UECwwQQUMgUkFJWiBG ++Tk1ULVJDTTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALpxgHpMhm5/ ++yBNtwMZ9HACXjywMI7sQmkCpGreHiPibVmr75nuOi5KOpyVdWRHbNi63URcfqQgf ++BBckWKo3Shjf5TnUV/3XwSyRAZHiItQDwFj8d0fsjz50Q7qsNI1NOHZnjrDIbzAz ++WHFctPVrbtQBULgTfmxKo0nRIBnuvMApGGWn3v7v3QqQIecaZ5JCEJhfTzC8PhxF ++tBDXaEAUwED653cXeuYLj2VbPNmaUtu1vZ5Gzz3rkQUCwJaydkxNEJY7kvqcfw+Z ++374jNUUeAlz+taibmSXaXvMiwzn15Cou08YfxGyqxRxqAQVKL9LFwag0Jl1mpdIC ++IfkYtwb1TplvqKtMUejPUBjFd8g5CSxJkjKZqLsXF3mwWsXmo8RZZUc1g16p6DUL ++mbvkzSDGm0oGObVo/CK67lWMK07q87Hj/LaZmtVC+nFNCM+HHmpxffnTtOmlcYF7 ++wk5HlqX2doWjKI/pgG6BU6VtX7hI+cL5NqYuSf+4lsKMB7ObiFj86xsc3i1w4peS ++MKGJ47xVqCfWS+2QrYv6YyVZLag13cqXM7zlzced0ezvXg5KkAYmY6252TUtB7p2 ++ZSysV4999AeU14ECll2jB0nVetBX+RvnU0Z1qrB5QstocQjpYL05ac70r8NWQMet ++UqIJ5G+GR4of6ygnXYMgrwTJbFaai0b1AgMBAAGjgYMwgYAwDwYDVR0TAQH/BAUw ++AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFPd9xf3E6Jobd2Sn9R2gzL+H ++YJptMD4GA1UdIAQ3MDUwMwYEVR0gADArMCkGCCsGAQUFBwIBFh1odHRwOi8vd3d3 ++LmNlcnQuZm5tdC5lcy9kcGNzLzANBgkqhkiG9w0BAQsFAAOCAgEAB5BK3/MjTvDD ++nFFlm5wioooMhfNzKWtN/gHiqQxjAb8EZ6WdmF/9ARP67Jpi6Yb+tmLSbkyU+8B1 ++RXxlDPiyN8+sD8+Nb/kZ94/sHvJwnvDKuO+3/3Y3dlv2bojzr2IyIpMNOmqOFGYM ++LVN0V2Ue1bLdI4E7pWYjJ2cJj+F3qkPNZVEI7VFY/uY5+ctHhKQV8Xa7pO6kO8Rf ++77IzlhEYt8llvhjho6Tc+hj507wTmzl6NLrTQfv6MooqtyuGC2mDOL7Nii4LcK2N ++JpLuHvUBKwrZ1pebbuCoGRw6IYsMHkCtA+fdZn71uSANA+iW+YJF1DngoABd15jm ++fZ5nc8OaKveri6E6FO80vFIOiZiaBECEHX5FaZNXzuvO+FB8TxxuBEOb+dY7Ixjp ++6o7RTUaN8Tvkasq6+yO3m/qZASlaWFot4/nUbQ4mrcFuNLwy+AwF+mWj2zs3gyLp ++1txyM/1d8iC9djwj2ij3+RvrWWTV3F9yfiD8zYm1kGdNYno/Tq0dwzn+evQoFt9B ++9kiABdcPUXmsEKvU7ANm5mqwujGSQkBqvjrTcuFqN1W8rB2Vt2lh8kORdOag0wok ++RqEIr9baRRmW1FMdW4R58MD3R++Lj8UGrp1MYp3/RgT408m2ECVAdf4WqslKYIYv ++uu8wd+RU4riEmViAqhOLUTpPSPaLtrM= + -----END CERTIFICATE----- + +-# Issuer: CN=TeliaSonera Root CA v1 O=TeliaSonera +-# Subject: CN=TeliaSonera Root CA v1 O=TeliaSonera +-# Label: "TeliaSonera Root CA v1" +-# Serial: 199041966741090107964904287217786801558 +-# MD5 Fingerprint: 37:41:49:1b:18:56:9a:26:f5:ad:c2:66:fb:40:a5:4c +-# SHA1 Fingerprint: 43:13:bb:96:f1:d5:86:9b:c1:4e:6a:92:f6:cf:f6:34:69:87:82:37 +-# SHA256 Fingerprint: dd:69:36:fe:21:f8:f0:77:c1:23:a1:a5:21:c1:22:24:f7:22:55:b7:3e:03:a7:26:06:93:e8:a2:4b:0f:a3:89 ++# 46edc3689046d53a453fb3104ab80dcaec658b2660ea1629dd7e867990648716 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 1 (0x1) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = TR, L = Gebze - Kocaeli, O = Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, OU = Kamu Sertifikasyon Merkezi - Kamu SM, CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1 ++ Validity ++ Not Before: Nov 25 08:25:55 2013 GMT ++ Not After : Oct 25 08:25:55 2043 GMT ++ Subject: C = TR, L = Gebze - Kocaeli, O = Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, OU = Kamu Sertifikasyon Merkezi - Kamu SM, CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:af:75:30:33:aa:bb:6b:d3:99:2c:12:37:84:d9: ++ 8d:7b:97:80:d3:6e:e7:ff:9b:50:95:3e:90:95:56: ++ 42:d7:19:7c:26:84:8d:92:fa:01:1d:3a:0f:e2:64: ++ 38:b7:8c:bc:e8:88:f9:8b:24:ab:2e:a3:f5:37:e4: ++ 40:8e:18:25:79:83:75:1f:3b:ff:6c:a8:c5:c6:56: ++ f8:b4:ed:8a:44:a3:ab:6c:4c:fc:1d:d0:dc:ef:68: ++ bd:cf:e4:aa:ce:f0:55:f7:a2:34:d4:83:6b:37:7c: ++ 1c:c2:fe:b5:03:ec:57:ce:bc:b4:b5:c5:ed:00:0f: ++ 53:37:2a:4d:f4:4f:0c:83:fb:86:cf:cb:fe:8c:4e: ++ bd:87:f9:a7:8b:21:57:9c:7a:df:03:67:89:2c:9d: ++ 97:61:a7:10:b8:55:90:7f:0e:2d:27:38:74:df:e7: ++ fd:da:4e:12:e3:4d:15:22:02:c8:e0:e0:fc:0f:ad: ++ 8a:d7:c9:54:50:cc:3b:0f:ca:16:80:84:d0:51:56: ++ c3:8e:56:7f:89:22:33:2f:e6:85:0a:bd:a5:a8:1b: ++ 36:de:d3:dc:2c:6d:3b:c7:13:bd:59:23:2c:e6:e5: ++ a4:f7:d8:0b:ed:ea:90:40:44:a8:95:bb:93:d5:d0: ++ 80:34:b6:46:78:0e:1f:00:93:46:e1:ee:e9:f9:ec: ++ 4f:17 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 65:3F:C7:8A:86:C6:3C:DD:3C:54:5C:35:F8:3A:ED:52:0C:47:57:C8 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: sha256WithRSAEncryption ++ 2a:3f:e1:f1:32:8e:ae:e1:98:5c:4b:5e:cf:6b:1e:6a:09:d2: ++ 22:a9:12:c7:5e:57:7d:73:56:64:80:84:7a:93:e4:09:b9:10: ++ cd:9f:2a:27:e1:00:77:be:48:c8:35:a8:81:9f:e4:b8:2c:c9: ++ 7f:0e:b0:d2:4b:37:5d:ea:b9:d5:0b:5e:34:bd:f4:73:29:c3: ++ ed:26:15:9c:7e:08:53:8a:58:8d:d0:4b:28:df:c1:b3:df:20: ++ f3:f9:e3:e3:3a:df:cc:9c:94:d8:4e:4f:c3:6b:17:b7:f7:72: ++ e8:ad:66:33:b5:25:53:ab:e0:f8:4c:a9:9d:fd:f2:0d:ba:ae: ++ b9:d9:aa:c6:6b:f9:93:bb:ae:ab:b8:97:3c:03:1a:ba:43:c6: ++ 96:b9:45:72:38:b3:a7:a1:96:3d:91:7b:7e:c0:21:53:4c:87: ++ ed:f2:0b:54:95:51:93:d5:22:a5:0d:8a:f1:93:0e:3e:54:0e: ++ b0:d8:c9:4e:dc:f2:31:32:56:ea:64:f9:ea:b5:9d:16:66:42: ++ 72:f3:7f:d3:b1:31:43:fc:a4:8e:17:f1:6d:23:ab:94:66:f8: ++ ad:fb:0f:08:6e:26:2d:7f:17:07:09:b2:8c:fb:50:c0:9f:96: ++ 8d:cf:b6:fd:00:9d:5a:14:9a:bf:02:44:f5:c1:c2:9f:22:5e: ++ a2:0f:a1:e3 + -----BEGIN CERTIFICATE----- +-MIIFODCCAyCgAwIBAgIRAJW+FqD3LkbxezmCcvqLzZYwDQYJKoZIhvcNAQEFBQAw +-NzEUMBIGA1UECgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJv +-b3QgQ0EgdjEwHhcNMDcxMDE4MTIwMDUwWhcNMzIxMDE4MTIwMDUwWjA3MRQwEgYD +-VQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UEAwwWVGVsaWFTb25lcmEgUm9vdCBDQSB2 +-MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMK+6yfwIaPzaSZVfp3F +-VRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65ItqwA3GV1 +-7CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+X +-Z75Ljo1kB1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+ +-/jXh7VB7qTCNGdMJjmhnXb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs +-81Mt8Bz17Ww5OXOAFshSsCPN4D7c3TxHoLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkm +-dtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+JWov3F0fUTPHSiXk+TT2YqGHe +-Oh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0hADnJoWjiUIMu +-sDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4 +-pgd7gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fs +-slESl1MpWtTwEhDcTwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQ +-arMCpgKIv7NHfirZ1fpoeDVNAgMBAAGjPzA9MA8GA1UdEwEB/wQFMAMBAf8wCwYD +-VR0PBAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1j5qWDNXr+nuqF+gTEjANBgkqhkiG +-9w0BAQUFAAOCAgEAvuRcYk4k9AwI//DTDGjkk0kiP0Qnb7tt3oNmzqjMDfz1mgbl +-dxSR651Be5kqhOX//CHBXfDkH1e3damhXwIm/9fH907eT/j3HEbAek9ALCI18Bmx +-0GtnLLCo4MBANzX2hFxc469CeP6nyQ1Q6g2EdvZR74NTxnr/DlZJLo961gzmJ1Tj +-TQpgcmLNkQfWpb/ImWvtxBnmq0wROMVvMeJuScg/doAmAyYp4Db29iBT4xdwNBed +-Y2gea+zDTYa4EzAvXUYNR0PVG6pZDrlcjQZIrXSHX8f8MVRBE+LHIQ6e4B4N4cB7 +-Q4WQxYpYxmUKeFfyxiMPAdkgS94P+5KFdSpcc41teyWRyu5FrgZLAMzTsVlQ2jqI +-OylDRl6XK1TOU2+NSueW+r9xDkKLfP0ooNBIytrEgUy7onOTJsjrDNYmiLbAJM+7 +-vVvrdX3pCI6GMyx5dwlppYn8s3CQh3aP0yK7Qs69cwsgJirQmz1wHiRszYd2qReW +-t88NkvuOGKmYSdGe/mBEciG5Ge3C9THxOUiIkCR1VBatzvT4aRRkOfujuLpwQMcn +-HL/EVlP6Y2XQ8xwOFvVrhlhNGNTkDY6lnVuR3HYkUD/GKvvZt5y11ubQ2egZixVx +-SK236thZiNSQvxaz2emsWWFUyBy6ysHK4bkgTI86k4mloMy/0/Z1pHWWbVY= ++MIIEYzCCA0ugAwIBAgIBATANBgkqhkiG9w0BAQsFADCB0jELMAkGA1UEBhMCVFIx ++GDAWBgNVBAcTD0dlYnplIC0gS29jYWVsaTFCMEAGA1UEChM5VHVya2l5ZSBCaWxp ++bXNlbCB2ZSBUZWtub2xvamlrIEFyYXN0aXJtYSBLdXJ1bXUgLSBUVUJJVEFLMS0w ++KwYDVQQLEyRLYW11IFNlcnRpZmlrYXN5b24gTWVya2V6aSAtIEthbXUgU00xNjA0 ++BgNVBAMTLVRVQklUQUsgS2FtdSBTTSBTU0wgS29rIFNlcnRpZmlrYXNpIC0gU3Vy ++dW0gMTAeFw0xMzExMjUwODI1NTVaFw00MzEwMjUwODI1NTVaMIHSMQswCQYDVQQG ++EwJUUjEYMBYGA1UEBxMPR2ViemUgLSBLb2NhZWxpMUIwQAYDVQQKEzlUdXJraXll ++IEJpbGltc2VsIHZlIFRla25vbG9qaWsgQXJhc3Rpcm1hIEt1cnVtdSAtIFRVQklU ++QUsxLTArBgNVBAsTJEthbXUgU2VydGlmaWthc3lvbiBNZXJrZXppIC0gS2FtdSBT ++TTE2MDQGA1UEAxMtVFVCSVRBSyBLYW11IFNNIFNTTCBLb2sgU2VydGlmaWthc2kg ++LSBTdXJ1bSAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3UwM6q7 ++a9OZLBI3hNmNe5eA027n/5tQlT6QlVZC1xl8JoSNkvoBHToP4mQ4t4y86Ij5iySr ++LqP1N+RAjhgleYN1Hzv/bKjFxlb4tO2KRKOrbEz8HdDc72i9z+SqzvBV96I01INr ++N3wcwv61A+xXzry0tcXtAA9TNypN9E8Mg/uGz8v+jE69h/mniyFXnHrfA2eJLJ2X ++YacQuFWQfw4tJzh03+f92k4S400VIgLI4OD8D62K18lUUMw7D8oWgITQUVbDjlZ/ ++iSIzL+aFCr2lqBs23tPcLG07xxO9WSMs5uWk99gL7eqQQESolbuT1dCANLZGeA4f ++AJNG4e7p+exPFwIDAQABo0IwQDAdBgNVHQ4EFgQUZT/HiobGPN08VFw1+DrtUgxH ++V8gwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL ++BQADggEBACo/4fEyjq7hmFxLXs9rHmoJ0iKpEsdeV31zVmSAhHqT5Am5EM2fKifh ++AHe+SMg1qIGf5LgsyX8OsNJLN13qudULXjS99HMpw+0mFZx+CFOKWI3QSyjfwbPf ++IPP54+M638yclNhOT8NrF7f3cuitZjO1JVOr4PhMqZ398g26rrnZqsZr+ZO7rqu4 ++lzwDGrpDxpa5RXI4s6ehlj2Re37AIVNMh+3yC1SVUZPVIqUNivGTDj5UDrDYyU7c ++8jEyVupk+eq1nRZmQnLzf9OxMUP8pI4X8W0jq5Rm+K37DwhuJi1/FwcJsoz7UMCf ++lo3Ptv0AnVoUmr8CRPXBwp8iXqIPoeM= + -----END CERTIFICATE----- + +-# Issuer: CN=E-Tugra Certification Authority O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş. OU=E-Tugra Sertifikasyon Merkezi +-# Subject: CN=E-Tugra Certification Authority O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş. OU=E-Tugra Sertifikasyon Merkezi +-# Label: "E-Tugra Certification Authority" +-# Serial: 7667447206703254355 +-# MD5 Fingerprint: b8:a1:03:63:b0:bd:21:71:70:8a:6f:13:3a:bb:79:49 +-# SHA1 Fingerprint: 51:c6:e7:08:49:06:6e:f3:92:d4:5c:a0:0d:6d:a3:62:8f:c3:52:39 +-# SHA256 Fingerprint: b0:bf:d5:2b:b0:d7:d9:bd:92:bf:5d:4d:c1:3d:a2:55:c0:2c:54:2f:37:83:65:ea:89:39:11:f5:5e:55:f2:3c ++# 5d56499be4d2e08bcfcad08a3e38723d50503bde706948e42f55603019e528ae ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 0a:01:42:80:00:00:01:45:23:c8:44:b5:00:00:00:02 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = US, O = IdenTrust, CN = IdenTrust Commercial Root CA 1 ++ Validity ++ Not Before: Jan 16 18:12:23 2014 GMT ++ Not After : Jan 16 18:12:23 2034 GMT ++ Subject: C = US, O = IdenTrust, CN = IdenTrust Commercial Root CA 1 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:a7:50:19:de:3f:99:3d:d4:33:46:f1:6f:51:61: ++ 82:b2:a9:4f:8f:67:89:5d:84:d9:53:dd:0c:28:d9: ++ d7:f0:ff:ae:95:43:72:99:f9:b5:5d:7c:8a:c1:42: ++ e1:31:50:74:d1:81:0d:7c:cd:9b:21:ab:43:e2:ac: ++ ad:5e:86:6e:f3:09:8a:1f:5a:32:bd:a2:eb:94:f9: ++ e8:5c:0a:ec:ff:98:d2:af:71:b3:b4:53:9f:4e:87: ++ ef:92:bc:bd:ec:4f:32:30:88:4b:17:5e:57:c4:53: ++ c2:f6:02:97:8d:d9:62:2b:bf:24:1f:62:8d:df:c3: ++ b8:29:4b:49:78:3c:93:60:88:22:fc:99:da:36:c8: ++ c2:a2:d4:2c:54:00:67:35:6e:73:bf:02:58:f0:a4: ++ dd:e5:b0:a2:26:7a:ca:e0:36:a5:19:16:f5:fd:b7: ++ ef:ae:3f:40:f5:6d:5a:04:fd:ce:34:ca:24:dc:74: ++ 23:1b:5d:33:13:12:5d:c4:01:25:f6:30:dd:02:5d: ++ 9f:e0:d5:47:bd:b4:eb:1b:a1:bb:49:49:d8:9f:5b: ++ 02:f3:8a:e4:24:90:e4:62:4f:4f:c1:af:8b:0e:74: ++ 17:a8:d1:72:88:6a:7a:01:49:cc:b4:46:79:c6:17: ++ b1:da:98:1e:07:59:fa:75:21:85:65:dd:90:56:ce: ++ fb:ab:a5:60:9d:c4:9d:f9:52:b0:8b:bd:87:f9:8f: ++ 2b:23:0a:23:76:3b:f7:33:e1:c9:00:f3:69:f9:4b: ++ a2:e0:4e:bc:7e:93:39:84:07:f7:44:70:7e:fe:07: ++ 5a:e5:b1:ac:d1:18:cc:f2:35:e5:49:49:08:ca:56: ++ c9:3d:fb:0f:18:7d:8b:3b:c1:13:c2:4d:8f:c9:4f: ++ 0e:37:e9:1f:a1:0e:6a:df:62:2e:cb:35:06:51:79: ++ 2c:c8:25:38:f4:fa:4b:a7:89:5c:9c:d2:e3:0d:39: ++ 86:4a:74:7c:d5:59:87:c2:3f:4e:0c:5c:52:f4:3d: ++ f7:52:82:f1:ea:a3:ac:fd:49:34:1a:28:f3:41:88: ++ 3a:13:ee:e8:de:ff:99:1d:5f:ba:cb:e8:1e:f2:b9: ++ 50:60:c0:31:d3:73:e5:ef:be:a0:ed:33:0b:74:be: ++ 20:20:c4:67:6c:f0:08:03:7a:55:80:7f:46:4e:96: ++ a7:f4:1e:3e:e1:f6:d8:09:e1:33:64:2b:63:d7:32: ++ 5e:9f:f9:c0:7b:0f:78:6f:97:bc:93:9a:f9:9c:12: ++ 90:78:7a:80:87:15:d7:72:74:9c:55:74:78:b1:ba: ++ e1:6e:70:04:ba:4f:a0:ba:68:c3:7b:ff:31:f0:73: ++ 3d:3d:94:2a:b1:0b:41:0e:a0:fe:4d:88:65:6b:79: ++ 33:b4:d7 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ ED:44:19:C0:D3:F0:06:8B:EE:A4:7B:BE:42:E7:26:54:C8:8E:36:76 ++ Signature Algorithm: sha256WithRSAEncryption ++ 0d:ae:90:32:f6:a6:4b:7c:44:76:19:61:1e:27:28:cd:5e:54: ++ ef:25:bc:e3:08:90:f9:29:d7:ae:68:08:e1:94:00:58:ef:2e: ++ 2e:7e:53:52:8c:b6:5c:07:ea:88:ba:99:8b:50:94:d7:82:80: ++ df:61:09:00:93:ad:0d:14:e6:ce:c1:f2:37:94:78:b0:5f:9c: ++ b3:a2:73:b8:8f:05:93:38:cd:8d:3e:b0:b8:fb:c0:cf:b1:f2: ++ ec:2d:2d:1b:cc:ec:aa:9a:b3:aa:60:82:1b:2d:3b:c3:84:3d: ++ 57:8a:96:1e:9c:75:b8:d3:30:cd:60:08:83:90:d3:8e:54:f1: ++ 4d:66:c0:5d:74:03:40:a3:ee:85:7e:c2:1f:77:9c:06:e8:c1: ++ a7:18:5d:52:95:ed:c9:dd:25:9e:6d:fa:a9:ed:a3:3a:34:d0: ++ 59:7b:da:ed:50:f3:35:bf:ed:eb:14:4d:31:c7:60:f4:da:f1: ++ 87:9c:e2:48:e2:c6:c5:37:fb:06:10:fa:75:59:66:31:47:29: ++ da:76:9a:1c:e9:82:ae:ef:9a:b9:51:f7:88:23:9a:69:95:62: ++ 3c:e5:55:80:36:d7:54:02:ff:f1:b9:5d:ce:d4:23:6f:d8:45: ++ 84:4a:5b:65:ef:89:0c:dd:14:a7:20:cb:18:a5:25:b4:0d:f9: ++ 01:f0:a2:d2:f4:00:c8:74:8e:a1:2a:48:8e:65:db:13:c4:e2: ++ 25:17:7d:eb:be:87:5b:17:20:54:51:93:4a:53:03:0b:ec:5d: ++ ca:33:ed:62:fd:45:c7:2f:5b:dc:58:a0:80:39:e6:fa:d7:fe: ++ 13:14:a6:ed:3d:94:4a:42:74:d4:c3:77:59:73:cd:8f:46:be: ++ 55:38:ef:fa:e8:91:32:ea:97:58:04:22:de:38:c3:cc:bc:6d: ++ c9:33:3a:6a:0a:69:3f:a0:c8:ea:72:8f:8c:63:86:23:bd:6d: ++ 3c:96:9e:95:e0:49:4c:aa:a2:b9:2a:1b:9c:36:81:78:ed:c3: ++ e8:46:e2:26:59:44:75:1e:d9:75:89:51:cd:10:84:9d:61:60: ++ cb:5d:f9:97:22:4d:8e:98:e6:e3:7f:f6:5b:bb:ae:cd:ca:4a: ++ 81:6b:5e:0b:f3:51:e1:74:2b:e9:7e:27:a7:d9:99:49:4e:f8: ++ a5:80:db:25:0f:1c:63:62:8a:c9:33:67:6b:3c:10:83:c6:ad: ++ de:a8:cd:16:8e:8d:f0:07:37:71:9f:f2:ab:fc:41:f5:c1:8b: ++ ec:00:37:5d:09:e5:4e:80:ef:fa:b1:5c:38:06:a5:1b:4a:e1: ++ dc:38:2d:3c:dc:ab:1f:90:1a:d5:4a:9c:ee:d1:70:6c:cc:ee: ++ f4:57:f8:18:ba:84:6e:87 + -----BEGIN CERTIFICATE----- +-MIIGSzCCBDOgAwIBAgIIamg+nFGby1MwDQYJKoZIhvcNAQELBQAwgbIxCzAJBgNV +-BAYTAlRSMQ8wDQYDVQQHDAZBbmthcmExQDA+BgNVBAoMN0UtVHXEn3JhIEVCRyBC +-aWxpxZ9pbSBUZWtub2xvamlsZXJpIHZlIEhpem1ldGxlcmkgQS7Fni4xJjAkBgNV +-BAsMHUUtVHVncmEgU2VydGlmaWthc3lvbiBNZXJrZXppMSgwJgYDVQQDDB9FLVR1 +-Z3JhIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTEzMDMwNTEyMDk0OFoXDTIz +-MDMwMzEyMDk0OFowgbIxCzAJBgNVBAYTAlRSMQ8wDQYDVQQHDAZBbmthcmExQDA+ +-BgNVBAoMN0UtVHXEn3JhIEVCRyBCaWxpxZ9pbSBUZWtub2xvamlsZXJpIHZlIEhp +-em1ldGxlcmkgQS7Fni4xJjAkBgNVBAsMHUUtVHVncmEgU2VydGlmaWthc3lvbiBN +-ZXJrZXppMSgwJgYDVQQDDB9FLVR1Z3JhIENlcnRpZmljYXRpb24gQXV0aG9yaXR5 +-MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4vU/kwVRHoViVF56C/UY +-B4Oufq9899SKa6VjQzm5S/fDxmSJPZQuVIBSOTkHS0vdhQd2h8y/L5VMzH2nPbxH +-D5hw+IyFHnSOkm0bQNGZDbt1bsipa5rAhDGvykPL6ys06I+XawGb1Q5KCKpbknSF +-Q9OArqGIW66z6l7LFpp3RMih9lRozt6Plyu6W0ACDGQXwLWTzeHxE2bODHnv0ZEo +-q1+gElIwcxmOj+GMB6LDu0rw6h8VqO4lzKRG+Bsi77MOQ7osJLjFLFzUHPhdZL3D +-k14opz8n8Y4e0ypQBaNV2cvnOVPAmJ6MVGKLJrD3fY185MaeZkJVgkfnsliNZvcH +-fC425lAcP9tDJMW/hkd5s3kc91r0E+xs+D/iWR+V7kI+ua2oMoVJl0b+SzGPWsut +-dEcf6ZG33ygEIqDUD13ieU/qbIWGvaimzuT6w+Gzrt48Ue7LE3wBf4QOXVGUnhMM +-ti6lTPk5cDZvlsouDERVxcr6XQKj39ZkjFqzAQqptQpHF//vkUAqjqFGOjGY5RH8 +-zLtJVor8udBhmm9lbObDyz51Sf6Pp+KJxWfXnUYTTjF2OySznhFlhqt/7x3U+Lzn +-rFpct1pHXFXOVbQicVtbC/DP3KBhZOqp12gKY6fgDT+gr9Oq0n7vUaDmUStVkhUX +-U8u3Zg5mTPj5dUyQ5xJwx0UCAwEAAaNjMGEwHQYDVR0OBBYEFC7j27JJ0JxUeVz6 +-Jyr+zE7S6E5UMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAULuPbsknQnFR5 +-XPonKv7MTtLoTlQwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4ICAQAF +-Nzr0TbdF4kV1JI+2d1LoHNgQk2Xz8lkGpD4eKexd0dCrfOAKkEh47U6YA5n+KGCR +-HTAduGN8qOY1tfrTYXbm1gdLymmasoR6d5NFFxWfJNCYExL/u6Au/U5Mh/jOXKqY +-GwXgAEZKgoClM4so3O0409/lPun++1ndYYRP0lSWE2ETPo+Aab6TR7U1Q9Jauz1c +-77NCR807VRMGsAnb/WP2OogKmW9+4c4bU2pEZiNRCHu8W1Ki/QY3OEBhj0qWuJA3 +-+GbHeJAAFS6LrVE1Uweoa2iu+U48BybNCAVwzDk/dr2l02cmAYamU9JgO3xDf1WK +-vJUawSg5TB9D0pH0clmKuVb8P7Sd2nCcdlqMQ1DujjByTd//SffGqWfZbawCEeI6 +-FiWnWAjLb1NBnEg4R2gz0dfHj9R0IdTDBZB6/86WiLEVKV0jq9BgoRJP3vQXzTLl +-yb/IQ639Lo7xr+L0mPoSHyDYwKcMhcWQ9DstliaxLL5Mq+ux0orJ23gTDx4JnW2P +-AJ8C2sH6H3p6CcRK5ogql5+Ji/03X186zjhZhkuvcQu02PJwT58yE+Owp1fl2tpD +-y4Q08ijE6m30Ku/Ba3ba+367hTzSU8JNvnHhRdH9I2cNE3X7z2VnIp2usAnRCf8d +-NL/+I5c30jn6PQ0GC7TbO6Orb1wdtn7os4I07QZcJA== ++MIIFYDCCA0igAwIBAgIQCgFCgAAAAUUjyES1AAAAAjANBgkqhkiG9w0BAQsFADBK ++MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVu ++VHJ1c3QgQ29tbWVyY2lhbCBSb290IENBIDEwHhcNMTQwMTE2MTgxMjIzWhcNMzQw ++MTE2MTgxMjIzWjBKMQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MScw ++JQYDVQQDEx5JZGVuVHJ1c3QgQ29tbWVyY2lhbCBSb290IENBIDEwggIiMA0GCSqG ++SIb3DQEBAQUAA4ICDwAwggIKAoICAQCnUBneP5k91DNG8W9RYYKyqU+PZ4ldhNlT ++3Qwo2dfw/66VQ3KZ+bVdfIrBQuExUHTRgQ18zZshq0PirK1ehm7zCYofWjK9ouuU +++ehcCuz/mNKvcbO0U59Oh++SvL3sTzIwiEsXXlfEU8L2ApeN2WIrvyQfYo3fw7gp ++S0l4PJNgiCL8mdo2yMKi1CxUAGc1bnO/AljwpN3lsKImesrgNqUZFvX9t++uP0D1 ++bVoE/c40yiTcdCMbXTMTEl3EASX2MN0CXZ/g1Ue9tOsbobtJSdifWwLziuQkkORi ++T0/Br4sOdBeo0XKIanoBScy0RnnGF7HamB4HWfp1IYVl3ZBWzvurpWCdxJ35UrCL ++vYf5jysjCiN2O/cz4ckA82n5S6LgTrx+kzmEB/dEcH7+B1rlsazRGMzyNeVJSQjK ++Vsk9+w8YfYs7wRPCTY/JTw436R+hDmrfYi7LNQZReSzIJTj0+kuniVyc0uMNOYZK ++dHzVWYfCP04MXFL0PfdSgvHqo6z9STQaKPNBiDoT7uje/5kdX7rL6B7yuVBgwDHT ++c+XvvqDtMwt0viAgxGds8AgDelWAf0ZOlqf0Hj7h9tgJ4TNkK2PXMl6f+cB7D3hv ++l7yTmvmcEpB4eoCHFddydJxVdHixuuFucAS6T6C6aMN7/zHwcz09lCqxC0EOoP5N ++iGVreTO01wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB ++/zAdBgNVHQ4EFgQU7UQZwNPwBovupHu+QucmVMiONnYwDQYJKoZIhvcNAQELBQAD ++ggIBAA2ukDL2pkt8RHYZYR4nKM1eVO8lvOMIkPkp165oCOGUAFjvLi5+U1KMtlwH ++6oi6mYtQlNeCgN9hCQCTrQ0U5s7B8jeUeLBfnLOic7iPBZM4zY0+sLj7wM+x8uwt ++LRvM7Kqas6pgghstO8OEPVeKlh6cdbjTMM1gCIOQ045U8U1mwF10A0Cj7oV+wh93 ++nAbowacYXVKV7cndJZ5t+qntozo00Fl72u1Q8zW/7esUTTHHYPTa8Yec4kjixsU3 +++wYQ+nVZZjFHKdp2mhzpgq7vmrlR94gjmmmVYjzlVYA211QC//G5Xc7UI2/YRYRK ++W2XviQzdFKcgyxilJbQN+QHwotL0AMh0jqEqSI5l2xPE4iUXfeu+h1sXIFRRk0pT ++AwvsXcoz7WL9RccvW9xYoIA55vrX/hMUpu09lEpCdNTDd1lzzY9GvlU47/rokTLq ++l1gEIt44w8y8bckzOmoKaT+gyOpyj4xjhiO9bTyWnpXgSUyqorkqG5w2gXjtw+hG ++4iZZRHUe2XWJUc0QhJ1hYMtd+ZciTY6Y5uN/9lu7rs3KSoFrXgvzUeF0K+l+J6fZ ++mUlO+KWA2yUPHGNiiskzZ2s8EIPGrd6ozRaOjfAHN3Gf8qv8QfXBi+wAN10J5U6A ++7/qxXDgGpRtK4dw4LTzcqx+QGtVKnO7RcGzM7vRX+Bi6hG6H + -----END CERTIFICATE----- + +-# Issuer: CN=T-TeleSec GlobalRoot Class 2 O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center +-# Subject: CN=T-TeleSec GlobalRoot Class 2 O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center +-# Label: "T-TeleSec GlobalRoot Class 2" +-# Serial: 1 +-# MD5 Fingerprint: 2b:9b:9e:e4:7b:6c:1f:00:72:1a:cc:c1:77:79:df:6a +-# SHA1 Fingerprint: 59:0d:2d:7d:88:4f:40:2e:61:7e:a5:62:32:17:65:cf:17:d8:94:e9 +-# SHA256 Fingerprint: 91:e2:f5:78:8d:58:10:eb:a7:ba:58:73:7d:e1:54:8a:8e:ca:cd:01:45:98:bc:0b:14:3e:04:1b:17:05:25:52 ++# 96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 82:10:cf:b0:d2:40:e3:59:44:63:e0:bb:63:82:8b:00 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = US, O = Internet Security Research Group, CN = ISRG Root X1 ++ Validity ++ Not Before: Jun 4 11:04:38 2015 GMT ++ Not After : Jun 4 11:04:38 2035 GMT ++ Subject: C = US, O = Internet Security Research Group, CN = ISRG Root X1 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:ad:e8:24:73:f4:14:37:f3:9b:9e:2b:57:28:1c: ++ 87:be:dc:b7:df:38:90:8c:6e:3c:e6:57:a0:78:f7: ++ 75:c2:a2:fe:f5:6a:6e:f6:00:4f:28:db:de:68:86: ++ 6c:44:93:b6:b1:63:fd:14:12:6b:bf:1f:d2:ea:31: ++ 9b:21:7e:d1:33:3c:ba:48:f5:dd:79:df:b3:b8:ff: ++ 12:f1:21:9a:4b:c1:8a:86:71:69:4a:66:66:6c:8f: ++ 7e:3c:70:bf:ad:29:22:06:f3:e4:c0:e6:80:ae:e2: ++ 4b:8f:b7:99:7e:94:03:9f:d3:47:97:7c:99:48:23: ++ 53:e8:38:ae:4f:0a:6f:83:2e:d1:49:57:8c:80:74: ++ b6:da:2f:d0:38:8d:7b:03:70:21:1b:75:f2:30:3c: ++ fa:8f:ae:dd:da:63:ab:eb:16:4f:c2:8e:11:4b:7e: ++ cf:0b:e8:ff:b5:77:2e:f4:b2:7b:4a:e0:4c:12:25: ++ 0c:70:8d:03:29:a0:e1:53:24:ec:13:d9:ee:19:bf: ++ 10:b3:4a:8c:3f:89:a3:61:51:de:ac:87:07:94:f4: ++ 63:71:ec:2e:e2:6f:5b:98:81:e1:89:5c:34:79:6c: ++ 76:ef:3b:90:62:79:e6:db:a4:9a:2f:26:c5:d0:10: ++ e1:0e:de:d9:10:8e:16:fb:b7:f7:a8:f7:c7:e5:02: ++ 07:98:8f:36:08:95:e7:e2:37:96:0d:36:75:9e:fb: ++ 0e:72:b1:1d:9b:bc:03:f9:49:05:d8:81:dd:05:b4: ++ 2a:d6:41:e9:ac:01:76:95:0a:0f:d8:df:d5:bd:12: ++ 1f:35:2f:28:17:6c:d2:98:c1:a8:09:64:77:6e:47: ++ 37:ba:ce:ac:59:5e:68:9d:7f:72:d6:89:c5:06:41: ++ 29:3e:59:3e:dd:26:f5:24:c9:11:a7:5a:a3:4c:40: ++ 1f:46:a1:99:b5:a7:3a:51:6e:86:3b:9e:7d:72:a7: ++ 12:05:78:59:ed:3e:51:78:15:0b:03:8f:8d:d0:2f: ++ 05:b2:3e:7b:4a:1c:4b:73:05:12:fc:c6:ea:e0:50: ++ 13:7c:43:93:74:b3:ca:74:e7:8e:1f:01:08:d0:30: ++ d4:5b:71:36:b4:07:ba:c1:30:30:5c:48:b7:82:3b: ++ 98:a6:7d:60:8a:a2:a3:29:82:cc:ba:bd:83:04:1b: ++ a2:83:03:41:a1:d6:05:f1:1b:c2:b6:f0:a8:7c:86: ++ 3b:46:a8:48:2a:88:dc:76:9a:76:bf:1f:6a:a5:3d: ++ 19:8f:eb:38:f3:64:de:c8:2b:0d:0a:28:ff:f7:db: ++ e2:15:42:d4:22:d0:27:5d:e1:79:fe:18:e7:70:88: ++ ad:4e:e6:d9:8b:3a:c6:dd:27:51:6e:ff:bc:64:f5: ++ 33:43:4f ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E ++ Signature Algorithm: sha256WithRSAEncryption ++ 55:1f:58:a9:bc:b2:a8:50:d0:0c:b1:d8:1a:69:20:27:29:08: ++ ac:61:75:5c:8a:6e:f8:82:e5:69:2f:d5:f6:56:4b:b9:b8:73: ++ 10:59:d3:21:97:7e:e7:4c:71:fb:b2:d2:60:ad:39:a8:0b:ea: ++ 17:21:56:85:f1:50:0e:59:eb:ce:e0:59:e9:ba:c9:15:ef:86: ++ 9d:8f:84:80:f6:e4:e9:91:90:dc:17:9b:62:1b:45:f0:66:95: ++ d2:7c:6f:c2:ea:3b:ef:1f:cf:cb:d6:ae:27:f1:a9:b0:c8:ae: ++ fd:7d:7e:9a:fa:22:04:eb:ff:d9:7f:ea:91:2b:22:b1:17:0e: ++ 8f:f2:8a:34:5b:58:d8:fc:01:c9:54:b9:b8:26:cc:8a:88:33: ++ 89:4c:2d:84:3c:82:df:ee:96:57:05:ba:2c:bb:f7:c4:b7:c7: ++ 4e:3b:82:be:31:c8:22:73:73:92:d1:c2:80:a4:39:39:10:33: ++ 23:82:4c:3c:9f:86:b2:55:98:1d:be:29:86:8c:22:9b:9e:e2: ++ 6b:3b:57:3a:82:70:4d:dc:09:c7:89:cb:0a:07:4d:6c:e8:5d: ++ 8e:c9:ef:ce:ab:c7:bb:b5:2b:4e:45:d6:4a:d0:26:cc:e5:72: ++ ca:08:6a:a5:95:e3:15:a1:f7:a4:ed:c9:2c:5f:a5:fb:ff:ac: ++ 28:02:2e:be:d7:7b:bb:e3:71:7b:90:16:d3:07:5e:46:53:7c: ++ 37:07:42:8c:d3:c4:96:9c:d5:99:b5:2a:e0:95:1a:80:48:ae: ++ 4c:39:07:ce:cc:47:a4:52:95:2b:ba:b8:fb:ad:d2:33:53:7d: ++ e5:1d:4d:6d:d5:a1:b1:c7:42:6f:e6:40:27:35:5c:a3:28:b7: ++ 07:8d:e7:8d:33:90:e7:23:9f:fb:50:9c:79:6c:46:d5:b4:15: ++ b3:96:6e:7e:9b:0c:96:3a:b8:52:2d:3f:d6:5b:e1:fb:08:c2: ++ 84:fe:24:a8:a3:89:da:ac:6a:e1:18:2a:b1:a8:43:61:5b:d3: ++ 1f:dc:3b:8d:76:f2:2d:e8:8d:75:df:17:33:6c:3d:53:fb:7b: ++ cb:41:5f:ff:dc:a2:d0:61:38:e1:96:b8:ac:5d:8b:37:d7:75: ++ d5:33:c0:99:11:ae:9d:41:c1:72:75:84:be:02:41:42:5f:67: ++ 24:48:94:d1:9b:27:be:07:3f:b9:b8:4f:81:74:51:e1:7a:b7: ++ ed:9d:23:e2:be:e0:d5:28:04:13:3c:31:03:9e:dd:7a:6c:8f: ++ c6:07:18:c6:7f:de:47:8e:3f:28:9e:04:06:cf:a5:54:34:77: ++ bd:ec:89:9b:e9:17:43:df:5b:db:5f:fe:8e:1e:57:a2:cd:40: ++ 9d:7e:62:22:da:de:18:27 + -----BEGIN CERTIFICATE----- +-MIIDwzCCAqugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBgjELMAkGA1UEBhMCREUx +-KzApBgNVBAoMIlQtU3lzdGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAd +-BgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBDZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNl +-YyBHbG9iYWxSb290IENsYXNzIDIwHhcNMDgxMDAxMTA0MDE0WhcNMzMxMDAxMjM1 +-OTU5WjCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoMIlQtU3lzdGVtcyBFbnRlcnBy +-aXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBDZW50 +-ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDIwggEiMA0G +-CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqX9obX+hzkeXaXPSi5kfl82hVYAUd +-AqSzm1nzHoqvNK38DcLZSBnuaY/JIPwhqgcZ7bBcrGXHX+0CfHt8LRvWurmAwhiC +-FoT6ZrAIxlQjgeTNuUk/9k9uN0goOA/FvudocP05l03Sx5iRUKrERLMjfTlH6VJi +-1hKTXrcxlkIF+3anHqP1wvzpesVsqXFP6st4vGCvx9702cu+fjOlbpSD8DT6Iavq +-jnKgP6TeMFvvhk1qlVtDRKgQFRzlAVfFmPHmBiiRqiDFt1MmUUOyCxGVWOHAD3bZ +-wI18gfNycJ5v/hqO2V81xrJvNHy+SE/iWjnX2J14np+GPgNeGYtEotXHAgMBAAGj +-QjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS/ +-WSA2AHmgoCJrjNXyYdK4LMuCSjANBgkqhkiG9w0BAQsFAAOCAQEAMQOiYQsfdOhy +-NsZt+U2e+iKo4YFWz827n+qrkRk4r6p8FU3ztqONpfSO9kSpp+ghla0+AGIWiPAC +-uvxhI+YzmzB6azZie60EI4RYZeLbK4rnJVM3YlNfvNoBYimipidx5joifsFvHZVw +-IEoHNN/q/xWA5brXethbdXwFeilHfkCoMRN3zUA7tFFHei4R40cR3p1m0IvVVGb6 +-g1XqfMIpiRvpb7PO4gWEyS8+eIVibslfwXhjdFjASBgMmTnrpMwatXlajRWc2BQN +-9noHV8cigwUtPJslJj0Ys6lDfMjIq2SPDqO/nBudMNva0Bkuqjzx+zOAduTNrRlP +-BSeOE6Fuwg== ++MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw ++TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh ++cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4 ++WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJu ++ZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBY ++MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54rVygc ++h77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+ ++0TM8ukj13Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6U ++A5/TR5d8mUgjU+g4rk8Kb4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sW ++T8KOEUt+zwvo/7V3LvSye0rgTBIlDHCNAymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyH ++B5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ4Q7e2RCOFvu396j3x+UC ++B5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf1b0SHzUv ++KBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWn ++OlFuhjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTn ++jh8BCNAw1FtxNrQHusEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbw ++qHyGO0aoSCqI3Haadr8faqU9GY/rOPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CI ++rU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV ++HRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY9umbbjANBgkq ++hkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL ++ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ ++3BebYhtF8GaV0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KK ++NFtY2PwByVS5uCbMiogziUwthDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5 ++ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJwTdwJx4nLCgdNbOhdjsnvzqvHu7Ur ++TkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nxe5AW0wdeRlN8NwdC ++jNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZAJzVc ++oyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq ++4RgqsahDYVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPA ++mRGunUHBcnWEvgJBQl9nJEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57d ++emyPxgcYxn/eR44/KJ4EBs+lVDR3veyJm+kXQ99b21/+jh5Xos1AnX5iItreGCc= + -----END CERTIFICATE----- + +-# Issuer: CN=Atos TrustedRoot 2011 O=Atos +-# Subject: CN=Atos TrustedRoot 2011 O=Atos +-# Label: "Atos TrustedRoot 2011" +-# Serial: 6643877497813316402 +-# MD5 Fingerprint: ae:b9:c4:32:4b:ac:7f:5d:66:cc:77:94:bb:2a:77:56 +-# SHA1 Fingerprint: 2b:b1:f5:3e:55:0c:1d:c5:f1:d4:e6:b7:6a:46:4b:55:06:02:ac:21 +-# SHA256 Fingerprint: f3:56:be:a2:44:b7:a9:1e:b3:5d:53:ca:9a:d7:86:4a:ce:01:8e:2d:35:d5:f8:f9:6d:df:68:a6:f4:1a:a4:74 ++# 2530cc8e98321502bad96f9b1fba1b099e2d299e0f4548bb914f363bc0d4531f ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ b0:b7:5a:16:48:5f:bf:e1:cb:f5:8b:d7:19:e6:7d ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = ES, O = IZENPE S.A., CN = Izenpe.com ++ Validity ++ Not Before: Dec 13 13:08:28 2007 GMT ++ Not After : Dec 13 08:27:25 2037 GMT ++ Subject: C = ES, O = IZENPE S.A., CN = Izenpe.com ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:c9:d3:7a:ca:0f:1e:ac:a7:86:e8:16:65:6a:b1: ++ c2:1b:45:32:71:95:d9:fe:10:5b:cc:af:e7:a5:79: ++ 01:8f:89:c3:ca:f2:55:71:f7:77:be:77:94:f3:72: ++ a4:2c:44:d8:9e:92:9b:14:3a:a1:e7:24:90:0a:0a: ++ 56:8e:c5:d8:26:94:e1:d9:48:e1:2d:3e:da:0a:72: ++ dd:a3:99:15:da:81:a2:87:f4:7b:6e:26:77:89:58: ++ ad:d6:eb:0c:b2:41:7a:73:6e:6d:db:7a:78:41:e9: ++ 08:88:12:7e:87:2e:66:11:63:6c:54:fb:3c:9d:72: ++ c0:bc:2e:ff:c2:b7:dd:0d:76:e3:3a:d7:f7:b4:68: ++ be:a2:f5:e3:81:6e:c1:46:6f:5d:8d:e0:4d:c6:54: ++ 55:89:1a:33:31:0a:b1:57:b9:a3:8a:98:c3:ec:3b: ++ 34:c5:95:41:69:7e:75:c2:3c:20:c5:61:ba:51:47: ++ a0:20:90:93:a1:90:4b:f3:4e:7c:85:45:54:9a:d1: ++ 05:26:41:b0:b5:4d:1d:33:be:c4:03:c8:25:7c:c1: ++ 70:db:3b:f4:09:2d:54:27:48:ac:2f:e1:c4:ac:3e: ++ c8:cb:92:4c:53:39:37:23:ec:d3:01:f9:e0:09:44: ++ 4d:4d:64:c0:e1:0d:5a:87:22:bc:ad:1b:a3:fe:26: ++ b5:15:f3:a7:fc:84:19:e9:ec:a1:88:b4:44:69:84: ++ 83:f3:89:d1:74:06:a9:cc:0b:d6:c2:de:27:85:50: ++ 26:ca:17:b8:c9:7a:87:56:2c:1a:01:1e:6c:be:13: ++ ad:10:ac:b5:24:f5:38:91:a1:d6:4b:da:f1:bb:d2: ++ de:47:b5:f1:bc:81:f6:59:6b:cf:19:53:e9:8d:15: ++ cb:4a:cb:a9:6f:44:e5:1b:41:cf:e1:86:a7:ca:d0: ++ 6a:9f:bc:4c:8d:06:33:5a:a2:85:e5:90:35:a0:62: ++ 5c:16:4e:f0:e3:a2:fa:03:1a:b4:2c:71:b3:58:2c: ++ de:7b:0b:db:1a:0f:eb:de:21:1f:06:77:06:03:b0: ++ c9:ef:99:fc:c0:b9:4f:0b:86:28:fe:d2:b9:ea:e3: ++ da:a5:c3:47:69:12:e0:db:f0:f6:19:8b:ed:7b:70: ++ d7:02:d6:ed:87:18:28:2c:04:24:4c:77:e4:48:8a: ++ 1a:c6:3b:9a:d4:0f:ca:fa:75:d2:01:40:5a:8d:79: ++ bf:8b:cf:4b:cf:aa:16:c1:95:e4:ad:4c:8a:3e:17: ++ 91:d4:b1:62:e5:82:e5:80:04:a4:03:7e:8d:bf:da: ++ 7f:a2:0f:97:4f:0c:d3:0d:fb:d7:d1:e5:72:7e:1c: ++ c8:77:ff:5b:9a:0f:b7:ae:05:46:e5:f1:a8:16:ec: ++ 47:a4:17 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Alternative Name: ++ email:info@izenpe.com, DirName:/O=IZENPE S.A. - CIF A01337260-RMerc.Vitoria-Gasteiz T1055 F62 S8/street=Avda del Mediterraneo Etorbidea 14 - 01010 Vitoria-Gasteiz ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ 1D:1C:65:0E:A8:F2:25:7B:B4:91:CF:E4:B1:B1:E6:BD:55:74:6C:05 ++ Signature Algorithm: sha256WithRSAEncryption ++ 78:a6:0c:16:4a:9f:4c:88:3a:c0:cb:0e:a5:16:7d:9f:b9:48: ++ 5f:18:8f:0d:62:36:f6:cd:19:6b:ac:ab:d5:f6:91:7d:ae:71: ++ f3:3f:b3:0e:78:85:9b:95:a4:27:21:47:42:4a:7c:48:3a:f5: ++ 45:7c:b3:0c:8e:51:78:ac:95:13:de:c6:fd:7d:b8:1a:90:4c: ++ ab:92:03:c7:ed:42:01:ce:0f:d8:b1:fa:a2:92:e1:60:6d:ae: ++ 7a:6b:09:aa:c6:29:ee:68:49:67:30:80:24:7a:31:16:39:5b: ++ 7e:f1:1c:2e:dd:6c:09:ad:f2:31:c1:82:4e:b9:bb:f9:be:bf: ++ 2a:85:3f:c0:40:a3:3a:59:fc:59:4b:3c:28:24:db:b4:15:75: ++ ae:0d:88:ba:2e:73:c0:bd:58:87:e5:42:f2:eb:5e:ee:1e:30: ++ 22:99:cb:37:d1:c4:21:6c:81:ec:be:6d:26:e6:1c:e4:42:20: ++ 9e:47:b0:ac:83:59:70:2c:35:d6:af:36:34:b4:cd:3b:f8:32: ++ a8:ef:e3:78:89:fb:8d:45:2c:da:9c:b8:7e:40:1c:61:e7:3e: ++ a2:92:2c:4b:f2:cd:fa:98:b6:29:ff:f3:f2:7b:a9:1f:2e:a0: ++ 93:57:2b:de:85:03:f9:69:37:cb:9e:78:6a:05:b4:c5:31:78: ++ 89:ec:7a:a7:85:e1:b9:7b:3c:de:be:1e:79:84:ce:9f:70:0e: ++ 59:c2:35:2e:90:2a:31:d9:e4:45:7a:41:a4:2e:13:9b:34:0e: ++ 66:7b:49:ab:64:97:d0:46:c3:79:9d:72:50:63:a6:98:5b:06: ++ bd:48:6d:d8:39:83:70:e8:35:f0:05:d1:aa:bc:e3:db:c8:02: ++ ea:7c:fd:82:da:c2:5b:52:35:ae:98:3a:ad:ba:35:93:23:a7: ++ 1f:48:dd:35:46:98:b2:10:68:e4:a5:31:c2:0a:58:2e:19:81: ++ 10:c9:50:75:fc:ea:5a:16:ce:11:d7:ee:ef:50:88:2d:61:ff: ++ 3f:42:73:05:94:43:d5:8e:3c:4e:01:3a:19:a5:1f:46:4e:77: ++ d0:5d:e5:81:22:21:87:fe:94:7d:84:d8:93:ad:d6:68:43:48: ++ b2:db:eb:73:24:e7:91:7f:54:a4:b6:80:3e:9d:a3:3c:4c:72: ++ c2:57:c4:a0:d4:cc:38:27:ce:d5:06:9e:a2:48:d9:e9:9f:ce: ++ 82:70:36:93:9a:3b:df:96:21:e3:59:b7:0c:da:91:37:f0:fd: ++ 59:5a:b3:99:c8:69:6c:43:26:01:35:63:60:55:89:03:3a:75: ++ d8:ba:4a:d9:54:ff:ee:de:80:d8:2d:d1:38:d5:5e:2d:0b:98: ++ 7d:3e:6c:db:fc:26:88:c7 + -----BEGIN CERTIFICATE----- +-MIIDdzCCAl+gAwIBAgIIXDPLYixfszIwDQYJKoZIhvcNAQELBQAwPDEeMBwGA1UE +-AwwVQXRvcyBUcnVzdGVkUm9vdCAyMDExMQ0wCwYDVQQKDARBdG9zMQswCQYDVQQG +-EwJERTAeFw0xMTA3MDcxNDU4MzBaFw0zMDEyMzEyMzU5NTlaMDwxHjAcBgNVBAMM +-FUF0b3MgVHJ1c3RlZFJvb3QgMjAxMTENMAsGA1UECgwEQXRvczELMAkGA1UEBhMC +-REUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVhTuXbyo7LjvPpvMp +-Nb7PGKw+qtn4TaA+Gke5vJrf8v7MPkfoepbCJI419KkM/IL9bcFyYie96mvr54rM +-VD6QUM+A1JX76LWC1BTFtqlVJVfbsVD2sGBkWXppzwO3bw2+yj5vdHLqqjAqc2K+ +-SZFhyBH+DgMq92og3AIVDV4VavzjgsG1xZ1kCWyjWZgHJ8cblithdHFsQ/H3NYkQ +-4J7sVaE3IqKHBAUsR320HLliKWYoyrfhk/WklAOZuXCFteZI6o1Q/NnezG8HDt0L +-cp2AMBYHlT8oDv3FdU9T1nSatCQujgKRz3bFmx5VdJx4IbHwLfELn8LVlhgf8FQi +-eowHAgMBAAGjfTB7MB0GA1UdDgQWBBSnpQaxLKYJYO7Rl+lwrrw7GWzbITAPBgNV +-HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFKelBrEspglg7tGX6XCuvDsZbNshMBgG +-A1UdIAQRMA8wDQYLKwYBBAGwLQMEAQEwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3 +-DQEBCwUAA4IBAQAmdzTblEiGKkGdLD4GkGDEjKwLVLgfuXvTBznk+j57sj1O7Z8j +-vZfza1zv7v1Apt+hk6EKhqzvINB5Ab149xnYJDE0BAGmuhWawyfc2E8PzBhj/5kP +-DpFrdRbhIfzYJsdHt6bPWHJxfrrhTZVHO8mvbaG0weyJ9rQPOLXiZNwlz6bb65pc +-maHFCN795trV1lpFDMS3wrUU77QR/w4VtfX128a961qn8FYiqTxlVMYVqL2Gns2D +-lmh6cYGJ4Qvh6hEbaAjMaZ7snkGeRDImeuKHCnE96+RapNLbxc3G3mB/ufNPRJLv +-KrcYPqcZ2Qt9sTdBQrC6YB3y/gkRsPCHe6ed ++MIIF8TCCA9mgAwIBAgIQALC3WhZIX7/hy/WL1xnmfTANBgkqhkiG9w0BAQsFADA4 ++MQswCQYDVQQGEwJFUzEUMBIGA1UECgwLSVpFTlBFIFMuQS4xEzARBgNVBAMMCkl6 ++ZW5wZS5jb20wHhcNMDcxMjEzMTMwODI4WhcNMzcxMjEzMDgyNzI1WjA4MQswCQYD ++VQQGEwJFUzEUMBIGA1UECgwLSVpFTlBFIFMuQS4xEzARBgNVBAMMCkl6ZW5wZS5j ++b20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDJ03rKDx6sp4boFmVq ++scIbRTJxldn+EFvMr+eleQGPicPK8lVx93e+d5TzcqQsRNiekpsUOqHnJJAKClaO ++xdgmlOHZSOEtPtoKct2jmRXagaKH9HtuJneJWK3W6wyyQXpzbm3benhB6QiIEn6H ++LmYRY2xU+zydcsC8Lv/Ct90NduM61/e0aL6i9eOBbsFGb12N4E3GVFWJGjMxCrFX ++uaOKmMPsOzTFlUFpfnXCPCDFYbpRR6AgkJOhkEvzTnyFRVSa0QUmQbC1TR0zvsQD ++yCV8wXDbO/QJLVQnSKwv4cSsPsjLkkxTOTcj7NMB+eAJRE1NZMDhDVqHIrytG6P+ ++JrUV86f8hBnp7KGItERphIPzidF0BqnMC9bC3ieFUCbKF7jJeodWLBoBHmy+E60Q ++rLUk9TiRodZL2vG70t5HtfG8gfZZa88ZU+mNFctKy6lvROUbQc/hhqfK0GqfvEyN ++BjNaooXlkDWgYlwWTvDjovoDGrQscbNYLN57C9saD+veIR8GdwYDsMnvmfzAuU8L ++hij+0rnq49qlw0dpEuDb8PYZi+17cNcC1u2HGCgsBCRMd+RIihrGO5rUD8r6ddIB ++QFqNeb+Lz0vPqhbBleStTIo+F5HUsWLlguWABKQDfo2/2n+iD5dPDNMN+9fR5XJ+ ++HMh3/1uaD7euBUbl8agW7EekFwIDAQABo4H2MIHzMIGwBgNVHREEgagwgaWBD2lu ++Zm9AaXplbnBlLmNvbaSBkTCBjjFHMEUGA1UECgw+SVpFTlBFIFMuQS4gLSBDSUYg ++QTAxMzM3MjYwLVJNZXJjLlZpdG9yaWEtR2FzdGVpeiBUMTA1NSBGNjIgUzgxQzBB ++BgNVBAkMOkF2ZGEgZGVsIE1lZGl0ZXJyYW5lbyBFdG9yYmlkZWEgMTQgLSAwMTAx ++MCBWaXRvcmlhLUdhc3RlaXowDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC ++AQYwHQYDVR0OBBYEFB0cZQ6o8iV7tJHP5LGx5r1VdGwFMA0GCSqGSIb3DQEBCwUA ++A4ICAQB4pgwWSp9MiDrAyw6lFn2fuUhfGI8NYjb2zRlrrKvV9pF9rnHzP7MOeIWb ++laQnIUdCSnxIOvVFfLMMjlF4rJUT3sb9fbgakEyrkgPH7UIBzg/YsfqikuFgba56 ++awmqxinuaElnMIAkejEWOVt+8Rwu3WwJrfIxwYJOubv5vr8qhT/AQKM6WfxZSzwo ++JNu0FXWuDYi6LnPAvViH5ULy617uHjAimcs30cQhbIHsvm0m5hzkQiCeR7Csg1lw ++LDXWrzY0tM07+DKo7+N4ifuNRSzanLh+QBxh5z6ikixL8s36mLYp//Pye6kfLqCT ++VyvehQP5aTfLnnhqBbTFMXiJ7HqnheG5ezzevh55hM6fcA5ZwjUukCox2eRFekGk ++LhObNA5me0mrZJfQRsN5nXJQY6aYWwa9SG3YOYNw6DXwBdGqvOPbyALqfP2C2sJb ++UjWumDqtujWTI6cfSN01RpiyEGjkpTHCClguGYEQyVB1/OpaFs4R1+7vUIgtYf8/ ++QnMFlEPVjjxOAToZpR9GTnfQXeWBIiGH/pR9hNiTrdZoQ0iy2+tzJOeRf1SktoA+ ++naM8THLCV8Sg1Mw4J87VBp6iSNnpn86CcDaTmjvfliHjWbcM2pE38P1ZWrOZyGls ++QyYBNWNgVYkDOnXYukrZVP/u3oDYLdE41V4tC5h9Pmzb/CaIxw== + -----END CERTIFICATE----- + +-# Issuer: CN=QuoVadis Root CA 1 G3 O=QuoVadis Limited +-# Subject: CN=QuoVadis Root CA 1 G3 O=QuoVadis Limited +-# Label: "QuoVadis Root CA 1 G3" +-# Serial: 687049649626669250736271037606554624078720034195 +-# MD5 Fingerprint: a4:bc:5b:3f:fe:37:9a:fa:64:f0:e2:fa:05:3d:0b:ab +-# SHA1 Fingerprint: 1b:8e:ea:57:96:29:1a:c9:39:ea:b8:0a:81:1a:73:73:c0:93:79:67 +-# SHA256 Fingerprint: 8a:86:6f:d1:b2:76:b5:7e:57:8e:92:1c:65:82:8a:2b:ed:58:e9:f2:f2:88:05:41:34:b7:f1:f4:bf:c9:cc:74 ++# a1339d33281a0b56e557d3d32b1ce7f9367eb094bd5fa72a7e5004c8ded7cafe ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 3e:8a:5d:07:ec:55:d2:32:d5:b7:e3:b6:5f:01:eb:2d:dc:e4:d6:e4 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = PL, O = Krajowa Izba Rozliczeniowa S.A., CN = SZAFIR ROOT CA2 ++ Validity ++ Not Before: Oct 19 07:43:30 2015 GMT ++ Not After : Oct 19 07:43:30 2035 GMT ++ Subject: C = PL, O = Krajowa Izba Rozliczeniowa S.A., CN = SZAFIR ROOT CA2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:b7:bc:3e:50:a8:4b:cd:40:b5:ce:61:e7:96:ca: ++ b4:a1:da:0c:22:b0:fa:b5:7b:76:00:77:8c:0b:cf: ++ 7d:a8:86:cc:26:51:e4:20:3d:85:0c:d6:58:e3:e7: ++ f4:2a:18:9d:da:d1:ae:26:ee:eb:53:dc:f4:90:d6: ++ 13:4a:0c:90:3c:c3:f4:da:d2:8e:0d:92:3a:dc:b1: ++ b1:ff:38:de:c3:ba:2d:5f:80:b9:02:bd:4a:9d:1b: ++ 0f:b4:c3:c2:c1:67:03:dd:dc:1b:9c:3d:b3:b0:de: ++ 00:1e:a8:34:47:bb:9a:eb:fe:0b:14:bd:36:84:da: ++ 0d:20:bf:fa:5b:cb:a9:16:20:ad:39:60:ee:2f:75: ++ b6:e7:97:9c:f9:3e:fd:7e:4d:6f:4d:2f:ef:88:0d: ++ 6a:fa:dd:f1:3d:6e:20:a5:a0:12:b4:4d:70:b9:ce: ++ d7:72:3b:89:93:a7:80:84:1c:27:49:72:49:b5:ff: ++ 3b:95:9e:c1:cc:c8:01:ec:e8:0e:8a:0a:96:e7:b3: ++ a6:87:e5:d6:f9:05:2b:0d:97:40:70:3c:ba:ac:75: ++ 5a:9c:d5:4d:9d:02:0a:d2:4b:9b:66:4b:46:07:17: ++ 65:ad:9f:6c:88:00:dc:22:89:e0:e1:64:d4:67:bc: ++ 31:79:61:3c:bb:ca:41:cd:5c:6a:00:c8:3c:38:8e: ++ 58:af ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ 2E:16:A9:4A:18:B5:CB:CC:F5:6F:50:F3:23:5F:F8:5D:E7:AC:F0:C8 ++ Signature Algorithm: sha256WithRSAEncryption ++ b5:73:f8:03:dc:59:5b:1d:76:e9:a3:2a:7b:90:28:b2:4d:c0: ++ 33:4f:aa:9a:b1:d4:b8:e4:27:ff:a9:96:99:ce:46:e0:6d:7c: ++ 4c:a2:38:a4:06:70:f0:f4:41:11:ec:3f:47:8d:3f:72:87:f9: ++ 3b:fd:a4:6f:2b:53:00:e0:ff:39:b9:6a:07:0e:eb:1d:1c:f6: ++ a2:72:90:cb:82:3d:11:82:8b:d2:bb:9f:2a:af:21:e6:63:86: ++ 9d:79:19:ef:f7:bb:0c:35:90:c3:8a:ed:4f:0f:f5:cc:12:d9: ++ a4:3e:bb:a0:fc:20:95:5f:4f:26:2f:11:23:83:4e:75:07:0f: ++ bf:9b:d1:b4:1d:e9:10:04:fe:ca:60:8f:a2:4c:b8:ad:cf:e1: ++ 90:0f:cd:ae:0a:c7:5d:7b:b7:50:d2:d4:61:fa:d5:15:db:d7: ++ 9f:87:51:54:eb:a5:e3:eb:c9:85:a0:25:20:37:fb:8e:ce:0c: ++ 34:84:e1:3c:81:b2:77:4e:43:a5:88:5f:86:67:a1:3d:e6:b4: ++ 5c:61:b6:3e:db:fe:b7:28:c5:a2:07:ae:b5:ca:ca:8d:2a:12: ++ ef:97:ed:c2:30:a4:c9:2a:7a:fb:f3:4d:23:1b:99:33:34:a0: ++ 2e:f5:a9:0b:3f:d4:5d:e1:cf:84:9f:e2:19:c2:5f:8a:d6:20: ++ 1e:e3:73:b7 + -----BEGIN CERTIFICATE----- +-MIIFYDCCA0igAwIBAgIUeFhfLq0sGUvjNwc1NBMotZbUZZMwDQYJKoZIhvcNAQEL +-BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc +-BgNVBAMTFVF1b1ZhZGlzIFJvb3QgQ0EgMSBHMzAeFw0xMjAxMTIxNzI3NDRaFw00 +-MjAxMTIxNzI3NDRaMEgxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBM +-aW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDEgRzMwggIiMA0GCSqG +-SIb3DQEBAQUAA4ICDwAwggIKAoICAQCgvlAQjunybEC0BJyFuTHK3C3kEakEPBtV +-wedYMB0ktMPvhd6MLOHBPd+C5k+tR4ds7FtJwUrVu4/sh6x/gpqG7D0DmVIB0jWe +-rNrwU8lmPNSsAgHaJNM7qAJGr6Qc4/hzWHa39g6QDbXwz8z6+cZM5cOGMAqNF341 +-68Xfuw6cwI2H44g4hWf6Pser4BOcBRiYz5P1sZK0/CPTz9XEJ0ngnjybCKOLXSoh +-4Pw5qlPafX7PGglTvF0FBM+hSo+LdoINofjSxxR3W5A2B4GbPgb6Ul5jxaYA/qXp +-UhtStZI5cgMJYr2wYBZupt0lwgNm3fME0UDiTouG9G/lg6AnhF4EwfWQvTA9xO+o +-abw4m6SkltFi2mnAAZauy8RRNOoMqv8hjlmPSlzkYZqn0ukqeI1RPToV7qJZjqlc +-3sX5kCLliEVx3ZGZbHqfPT2YfF72vhZooF6uCyP8Wg+qInYtyaEQHeTTRCOQiJ/G +-KubX9ZqzWB4vMIkIG1SitZgj7Ah3HJVdYdHLiZxfokqRmu8hqkkWCKi9YSgxyXSt +-hfbZxbGL0eUQMk1fiyA6PEkfM4VZDdvLCXVDaXP7a3F98N/ETH3Goy7IlXnLc6KO +-Tk0k+17kBL5yG6YnLUlamXrXXAkgt3+UuU/xDRxeiEIbEbfnkduebPRq34wGmAOt +-zCjvpUfzUwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB +-BjAdBgNVHQ4EFgQUo5fW816iEOGrRZ88F2Q87gFwnMwwDQYJKoZIhvcNAQELBQAD +-ggIBABj6W3X8PnrHX3fHyt/PX8MSxEBd1DKquGrX1RUVRpgjpeaQWxiZTOOtQqOC +-MTaIzen7xASWSIsBx40Bz1szBpZGZnQdT+3Btrm0DWHMY37XLneMlhwqI2hrhVd2 +-cDMT/uFPpiN3GPoajOi9ZcnPP/TJF9zrx7zABC4tRi9pZsMbj/7sPtPKlL92CiUN +-qXsCHKnQO18LwIE6PWThv6ctTr1NxNgpxiIY0MWscgKCP6o6ojoilzHdCGPDdRS5 +-YCgtW2jgFqlmgiNR9etT2DGbe+m3nUvriBbP+V04ikkwj+3x6xn0dxoxGE1nVGwv +-b2X52z3sIexe9PSLymBlVNFxZPT5pqOBMzYzcfCkeF9OrYMh3jRJjehZrJ3ydlo2 +-8hP0r+AJx2EqbPfgna67hkooby7utHnNkDPDs3b69fBsnQGQ+p6Q9pxyz0fawx/k +-NSBT8lTR32GDpgLiJTjehTItXnOQUl1CxM49S+H5GYQd1aJQzEH7QRTDvdbJWqNj +-ZgKAvQU6O0ec7AAmTPWIUb+oI38YB7AL7YsmoWTTYUrrXJ/es69nA7Mf3W1daWhp +-q1467HxpvMc7hU6eFbm0FU/DlXpY18ls6Wy58yljXrQs8C097Vpl4KlbQMJImYFt +-nh8GKjwStIsPm6Ik8KaN1nrgS7ZklmOVhMJKzRwuJIczYOXD ++MIIDcjCCAlqgAwIBAgIUPopdB+xV0jLVt+O2XwHrLdzk1uQwDQYJKoZIhvcNAQEL ++BQAwUTELMAkGA1UEBhMCUEwxKDAmBgNVBAoMH0tyYWpvd2EgSXpiYSBSb3psaWN6 ++ZW5pb3dhIFMuQS4xGDAWBgNVBAMMD1NaQUZJUiBST09UIENBMjAeFw0xNTEwMTkw ++NzQzMzBaFw0zNTEwMTkwNzQzMzBaMFExCzAJBgNVBAYTAlBMMSgwJgYDVQQKDB9L ++cmFqb3dhIEl6YmEgUm96bGljemVuaW93YSBTLkEuMRgwFgYDVQQDDA9TWkFGSVIg ++Uk9PVCBDQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vD5QqEvN ++QLXOYeeWyrSh2gwisPq1e3YAd4wLz32ohswmUeQgPYUM1ljj5/QqGJ3a0a4m7utT ++3PSQ1hNKDJA8w/Ta0o4NkjrcsbH/ON7Dui1fgLkCvUqdGw+0w8LBZwPd3BucPbOw ++3gAeqDRHu5rr/gsUvTaE2g0gv/pby6kWIK05YO4vdbbnl5z5Pv1+TW9NL++IDWr6 ++3fE9biCloBK0TXC5ztdyO4mTp4CEHCdJckm1/zuVnsHMyAHs6A6KCpbns6aH5db5 ++BSsNl0BwPLqsdVqc1U2dAgrSS5tmS0YHF2Wtn2yIANwiieDhZNRnvDF5YTy7ykHN ++XGoAyDw4jlivAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD ++AgEGMB0GA1UdDgQWBBQuFqlKGLXLzPVvUPMjX/hd56zwyDANBgkqhkiG9w0BAQsF ++AAOCAQEAtXP4A9xZWx126aMqe5Aosk3AM0+qmrHUuOQn/6mWmc5G4G18TKI4pAZw ++8PRBEew/R40/cof5O/2kbytTAOD/OblqBw7rHRz2onKQy4I9EYKL0rufKq8h5mOG ++nXkZ7/e7DDWQw4rtTw/1zBLZpD67oPwglV9PJi8RI4NOdQcPv5vRtB3pEAT+ymCP ++oky4rc/hkA/NrgrHXXu3UNLUYfrVFdvXn4dRVOul4+vJhaAlIDf7js4MNIThPIGy ++d05DpYhfhmehPea0XGG2Ptv+tyjFogeutcrKjSoS75ftwjCkySp6+/NNIxuZMzSg ++LvWpCz/UXeHPhJ/iGcJfitYgHuNztw== + -----END CERTIFICATE----- + +-# Issuer: CN=QuoVadis Root CA 2 G3 O=QuoVadis Limited +-# Subject: CN=QuoVadis Root CA 2 G3 O=QuoVadis Limited +-# Label: "QuoVadis Root CA 2 G3" +-# Serial: 390156079458959257446133169266079962026824725800 +-# MD5 Fingerprint: af:0c:86:6e:bf:40:2d:7f:0b:3e:12:50:ba:12:3d:06 +-# SHA1 Fingerprint: 09:3c:61:f3:8b:8b:dc:7d:55:df:75:38:02:05:00:e1:25:f5:c8:36 +-# SHA256 Fingerprint: 8f:e4:fb:0a:f9:3a:4d:0d:67:db:0b:eb:b2:3e:37:c7:1b:f3:25:dc:bc:dd:24:0e:a0:4d:af:58:b4:7e:18:40 ++# 3c5f81fea5fab82c64bfa2eaecafcde8e077fc8620a7cae537163df36edbf378 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ c2:7e:43:04:4e:47:3f:19 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu ++ Validity ++ Not Before: Jun 16 11:30:18 2009 GMT ++ Not After : Dec 30 11:30:18 2029 GMT ++ Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:e9:f8:8f:f3:63:ad:da:86:d8:a7:e0:42:fb:cf: ++ 91:de:a6:26:f8:99:a5:63:70:ad:9b:ae:ca:33:40: ++ 7d:6d:96:6e:a1:0e:44:ee:e1:13:9d:94:42:52:9a: ++ bd:75:85:74:2c:a8:0e:1d:93:b6:18:b7:8c:2c:a8: ++ cf:fb:5c:71:b9:da:ec:fe:e8:7e:8f:e4:2f:1d:b2: ++ a8:75:87:d8:b7:a1:e5:3b:cf:99:4a:46:d0:83:19: ++ 7d:c0:a1:12:1c:95:6d:4a:f4:d8:c7:a5:4d:33:2e: ++ 85:39:40:75:7e:14:7c:80:12:98:50:c7:41:67:b8: ++ a0:80:61:54:a6:6c:4e:1f:e0:9d:0e:07:e9:c9:ba: ++ 33:e7:fe:c0:55:28:2c:02:80:a7:19:f5:9e:dc:55: ++ 53:03:97:7b:07:48:ff:99:fb:37:8a:24:c4:59:cc: ++ 50:10:63:8e:aa:a9:1a:b0:84:1a:86:f9:5f:bb:b1: ++ 50:6e:a4:d1:0a:cc:d5:71:7e:1f:a7:1b:7c:f5:53: ++ 6e:22:5f:cb:2b:e6:d4:7c:5d:ae:d6:c2:c6:4c:e5: ++ 05:01:d9:ed:57:fc:c1:23:79:fc:fa:c8:24:83:95: ++ f3:b5:6a:51:01:d0:77:d6:e9:12:a1:f9:1a:83:fb: ++ 82:1b:b9:b0:97:f4:76:06:33:43:49:a0:ff:0b:b5: ++ fa:b5 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68 ++ X509v3 Authority Key Identifier: ++ keyid:CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68 ++ ++ X509v3 Subject Alternative Name: ++ email:info@e-szigno.hu ++ Signature Algorithm: sha256WithRSAEncryption ++ c9:d1:0e:5e:2e:d5:cc:b3:7c:3e:cb:fc:3d:ff:0d:28:95:93: ++ 04:c8:bf:da:cd:79:b8:43:90:f0:a4:be:ef:f2:ef:21:98:bc: ++ d4:d4:5d:06:f6:ee:42:ec:30:6c:a0:aa:a9:ca:f1:af:8a:fa: ++ 3f:0b:73:6a:3e:ea:2e:40:7e:1f:ae:54:61:79:eb:2e:08:37: ++ d7:23:f3:8c:9f:be:1d:b1:e1:a4:75:db:a0:e2:54:14:b1:ba: ++ 1c:29:a4:18:f6:12:ba:a2:14:14:e3:31:35:c8:40:ff:b7:e0: ++ 05:76:57:c1:1c:59:f2:f8:bf:e4:ed:25:62:5c:84:f0:7e:7e: ++ 1f:b3:be:f9:b7:21:11:cc:03:01:56:70:a7:10:92:1e:1b:34: ++ 81:1e:ad:9c:1a:c3:04:3c:ed:02:61:d6:1e:06:f3:5f:3a:87: ++ f2:2b:f1:45:87:e5:3d:ac:d1:c7:57:84:bd:6b:ae:dc:d8:f9: ++ b6:1b:62:70:0b:3d:36:c9:42:f2:32:d7:7a:61:e6:d2:db:3d: ++ cf:c8:a9:c9:9b:dc:db:58:44:d7:6f:38:af:7f:78:d3:a3:ad: ++ 1a:75:ba:1c:c1:36:7c:8f:1e:6d:1c:c3:75:46:ae:35:05:a6: ++ f6:5c:3d:21:ee:56:f0:c9:82:22:2d:7a:54:ab:70:c3:7d:22: ++ 65:82:70:96 + -----BEGIN CERTIFICATE----- +-MIIFYDCCA0igAwIBAgIURFc0JFuBiZs18s64KztbpybwdSgwDQYJKoZIhvcNAQEL +-BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc +-BgNVBAMTFVF1b1ZhZGlzIFJvb3QgQ0EgMiBHMzAeFw0xMjAxMTIxODU5MzJaFw00 +-MjAxMTIxODU5MzJaMEgxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBM +-aW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDIgRzMwggIiMA0GCSqG +-SIb3DQEBAQUAA4ICDwAwggIKAoICAQChriWyARjcV4g/Ruv5r+LrI3HimtFhZiFf +-qq8nUeVuGxbULX1QsFN3vXg6YOJkApt8hpvWGo6t/x8Vf9WVHhLL5hSEBMHfNrMW +-n4rjyduYNM7YMxcoRvynyfDStNVNCXJJ+fKH46nafaF9a7I6JaltUkSs+L5u+9ym +-c5GQYaYDFCDy54ejiK2toIz/pgslUiXnFgHVy7g1gQyjO/Dh4fxaXc6AcW34Sas+ +-O7q414AB+6XrW7PFXmAqMaCvN+ggOp+oMiwMzAkd056OXbxMmO7FGmh77FOm6RQ1 +-o9/NgJ8MSPsc9PG/Srj61YxxSscfrf5BmrODXfKEVu+lV0POKa2Mq1W/xPtbAd0j +-IaFYAI7D0GoT7RPjEiuA3GfmlbLNHiJuKvhB1PLKFAeNilUSxmn1uIZoL1NesNKq +-IcGY5jDjZ1XHm26sGahVpkUG0CM62+tlXSoREfA7T8pt9DTEceT/AFr2XK4jYIVz +-8eQQsSWu1ZK7E8EM4DnatDlXtas1qnIhO4M15zHfeiFuuDIIfR0ykRVKYnLP43eh +-vNURG3YBZwjgQQvD6xVu+KQZ2aKrr+InUlYrAoosFCT5v0ICvybIxo/gbjh9Uy3l +-7ZizlWNof/k19N+IxWA1ksB8aRxhlRbQ694Lrz4EEEVlWFA4r0jyWbYW8jwNkALG +-cC4BrTwV1wIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB +-BjAdBgNVHQ4EFgQU7edvdlq/YOxJW8ald7tyFnGbxD0wDQYJKoZIhvcNAQELBQAD +-ggIBAJHfgD9DCX5xwvfrs4iP4VGyvD11+ShdyLyZm3tdquXK4Qr36LLTn91nMX66 +-AarHakE7kNQIXLJgapDwyM4DYvmL7ftuKtwGTTwpD4kWilhMSA/ohGHqPHKmd+RC +-roijQ1h5fq7KpVMNqT1wvSAZYaRsOPxDMuHBR//47PERIjKWnML2W2mWeyAMQ0Ga +-W/ZZGYjeVYg3UQt4XAoeo0L9x52ID8DyeAIkVJOviYeIyUqAHerQbj5hLja7NQ4n +-lv1mNDthcnPxFlxHBlRJAHpYErAK74X9sbgzdWqTHBLmYF5vHX/JHyPLhGGfHoJE +-+V+tYlUkmlKY7VHnoX6XOuYvHxHaU4AshZ6rNRDbIl9qxV6XU/IyAgkwo1jwDQHV +-csaxfGl7w/U2Rcxhbl5MlMVerugOXou/983g7aEOGzPuVBj+D77vfoRrQ+NwmNtd +-dbINWQeFFSM51vHfqSYP1kjHs6Yi9TM3WpVHn3u6GBVv/9YUZINJ0gpnIdsPNWNg +-KCLjsZWDzYWm3S8P52dSbrsvhXz1SnPnxT7AvSESBT/8twNJAlvIJebiVDj1eYeM +-HVOyToV7BjjHLPj4sHKNJeV3UvQDHEimUF+IIDBu8oJDqz2XhOdT+yHBTw8imoa4 +-WSr2Rz0ZiC3oheGe7IUIarFsNMkd7EgrO3jtZsSOeWmD3n+M ++MIIECjCCAvKgAwIBAgIJAMJ+QwRORz8ZMA0GCSqGSIb3DQEBCwUAMIGCMQswCQYD ++VQQGEwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFjAUBgNVBAoMDU1pY3Jvc2VjIEx0 ++ZC4xJzAlBgNVBAMMHk1pY3Jvc2VjIGUtU3ppZ25vIFJvb3QgQ0EgMjAwOTEfMB0G ++CSqGSIb3DQEJARYQaW5mb0BlLXN6aWduby5odTAeFw0wOTA2MTYxMTMwMThaFw0y ++OTEyMzAxMTMwMThaMIGCMQswCQYDVQQGEwJIVTERMA8GA1UEBwwIQnVkYXBlc3Qx ++FjAUBgNVBAoMDU1pY3Jvc2VjIEx0ZC4xJzAlBgNVBAMMHk1pY3Jvc2VjIGUtU3pp ++Z25vIFJvb3QgQ0EgMjAwOTEfMB0GCSqGSIb3DQEJARYQaW5mb0BlLXN6aWduby5o ++dTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOn4j/NjrdqG2KfgQvvP ++kd6mJviZpWNwrZuuyjNAfW2WbqEORO7hE52UQlKavXWFdCyoDh2Tthi3jCyoz/tc ++cbna7P7ofo/kLx2yqHWH2Leh5TvPmUpG0IMZfcChEhyVbUr02MelTTMuhTlAdX4U ++fIASmFDHQWe4oIBhVKZsTh/gnQ4H6cm6M+f+wFUoLAKApxn1ntxVUwOXewdI/5n7 ++N4okxFnMUBBjjqqpGrCEGob5X7uxUG6k0QrM1XF+H6cbfPVTbiJfyyvm1HxdrtbC ++xkzlBQHZ7Vf8wSN5/PrIJIOV87VqUQHQd9bpEqH5GoP7ghu5sJf0dgYzQ0mg/wu1 +++rUCAwEAAaOBgDB+MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0G ++A1UdDgQWBBTLD8bfQkPMPcu1SCOhGnqmKrs0aDAfBgNVHSMEGDAWgBTLD8bfQkPM ++Pcu1SCOhGnqmKrs0aDAbBgNVHREEFDASgRBpbmZvQGUtc3ppZ25vLmh1MA0GCSqG ++SIb3DQEBCwUAA4IBAQDJ0Q5eLtXMs3w+y/w9/w0olZMEyL/azXm4Q5DwpL7v8u8h ++mLzU1F0G9u5C7DBsoKqpyvGvivo/C3NqPuouQH4frlRheesuCDfXI/OMn74dseGk ++ddug4lQUsbocKaQY9hK6ohQU4zE1yED/t+AFdlfBHFny+L/k7SViXITwfn4fs775 ++tyERzAMBVnCnEJIeGzSBHq2cGsMEPO0CYdYeBvNfOofyK/FFh+U9rNHHV4S9a67c ++2Pm2G2JwCz02yULyMtd6YebS2z3PyKnJm9zbWETXbzivf3jTo60adbocwTZ8jx5t ++HMN1Rq41Bab2XD0h7lbwyYIiLXpUq3DDfSJlgnCW + -----END CERTIFICATE----- + +-# Issuer: CN=QuoVadis Root CA 3 G3 O=QuoVadis Limited +-# Subject: CN=QuoVadis Root CA 3 G3 O=QuoVadis Limited +-# Label: "QuoVadis Root CA 3 G3" +-# Serial: 268090761170461462463995952157327242137089239581 +-# MD5 Fingerprint: df:7d:b9:ad:54:6f:68:a1:df:89:57:03:97:43:b0:d7 +-# SHA1 Fingerprint: 48:12:bd:92:3c:a8:c4:39:06:e7:30:6d:27:96:e6:a4:cf:22:2e:7d +-# SHA256 Fingerprint: 88:ef:81:de:20:2e:b0:18:45:2e:43:f8:64:72:5c:ea:5f:bd:1f:c2:d9:d2:05:73:07:09:c5:d8:b8:69:0f:46 ++# beb00b30839b9bc32c32e4447905950641f26421b15ed089198b518ae2ea1b99 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 01:54:48:ef:21:fd:97:59:0d:f5:04:0a ++ Signature Algorithm: ecdsa-with-SHA256 ++ Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017 ++ Validity ++ Not Before: Aug 22 12:07:06 2017 GMT ++ Not After : Aug 22 12:07:06 2042 GMT ++ Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (256 bit) ++ pub: ++ 04:96:dc:3d:8a:d8:b0:7b:6f:c6:27:be:44:90:b1: ++ b3:56:15:7b:8e:43:24:7d:1a:84:59:ee:63:68:b2: ++ c6:5e:87:d0:15:48:1e:a8:90:ad:bd:53:a2:da:de: ++ 3a:90:a6:60:5f:68:32:b5:86:41:df:87:5b:2c:7b: ++ c5:fe:7c:7a:da ++ ASN1 OID: prime256v1 ++ NIST CURVE: P-256 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ 87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0 ++ X509v3 Authority Key Identifier: ++ keyid:87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0 ++ ++ Signature Algorithm: ecdsa-with-SHA256 ++ 30:46:02:21:00:b5:57:dd:d7:8a:55:0b:36:e1:86:44:fa:d4: ++ d9:68:8d:b8:dc:23:8a:8a:0d:d4:2f:7d:ea:73:ec:bf:4d:6c: ++ a8:02:21:00:cb:a5:b4:12:fa:e7:b5:e8:cf:7e:93:fc:f3:35: ++ 8f:6f:4e:5a:7c:b4:bc:4e:b2:fc:72:aa:5b:59:f9:e7:dc:31 ++-----BEGIN CERTIFICATE----- ++MIICQDCCAeWgAwIBAgIMAVRI7yH9l1kN9QQKMAoGCCqGSM49BAMCMHExCzAJBgNV ++BAYTAkhVMREwDwYDVQQHDAhCdWRhcGVzdDEWMBQGA1UECgwNTWljcm9zZWMgTHRk ++LjEXMBUGA1UEYQwOVkFUSFUtMjM1ODQ0OTcxHjAcBgNVBAMMFWUtU3ppZ25vIFJv ++b3QgQ0EgMjAxNzAeFw0xNzA4MjIxMjA3MDZaFw00MjA4MjIxMjA3MDZaMHExCzAJ ++BgNVBAYTAkhVMREwDwYDVQQHDAhCdWRhcGVzdDEWMBQGA1UECgwNTWljcm9zZWMg ++THRkLjEXMBUGA1UEYQwOVkFUSFUtMjM1ODQ0OTcxHjAcBgNVBAMMFWUtU3ppZ25v ++IFJvb3QgQ0EgMjAxNzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABJbcPYrYsHtv ++xie+RJCxs1YVe45DJH0ahFnuY2iyxl6H0BVIHqiQrb1TotreOpCmYF9oMrWGQd+H ++Wyx7xf58etqjYzBhMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0G ++A1UdDgQWBBSHERUI0arBeAyxr87GyZDvvzAEwDAfBgNVHSMEGDAWgBSHERUI0arB ++eAyxr87GyZDvvzAEwDAKBggqhkjOPQQDAgNJADBGAiEAtVfd14pVCzbhhkT61Nlo ++jbjcI4qKDdQvfepz7L9NbKgCIQDLpbQS+ue16M9+k/zzNY9vTlp8tLxOsvxyqltZ +++efcMQ== ++-----END CERTIFICATE----- ++ ++# 358df39d764af9e1b766e9c972df352ee15cfac227af6ad1d70e8e4a6edcba02 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 66:f2:3d:af:87:de:8b:b1:4a:ea:0c:57:31:01:c2:ec ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = US, O = Microsoft Corporation, CN = Microsoft ECC Root Certificate Authority 2017 ++ Validity ++ Not Before: Dec 18 23:06:45 2019 GMT ++ Not After : Jul 18 23:16:04 2042 GMT ++ Subject: C = US, O = Microsoft Corporation, CN = Microsoft ECC Root Certificate Authority 2017 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:d4:bc:3d:02:42:75:41:13:23:cd:80:04:86:02: ++ 51:2f:6a:a8:81:62:0b:65:cc:f6:ca:9d:1e:6f:4a: ++ 66:51:a2:03:d9:9d:91:fa:b6:16:b1:8c:6e:de:7c: ++ cd:db:79:a6:2f:ce:bb:ce:71:2f:e5:a5:ab:28:ec: ++ 63:04:66:99:f8:fa:f2:93:10:05:e1:81:28:42:e3: ++ c6:68:f4:e6:1b:84:60:4a:89:af:ed:79:0f:3b:ce: ++ f1:f6:44:f5:01:78:c0 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ C8:CB:99:72:70:52:0C:F8:E6:BE:B2:04:57:29:2A:CF:42:10:ED:35 ++ 1.3.6.1.4.1.311.21.1: ++ ... ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:65:02:30:58:f2:4d:ea:0c:f9:5f:5e:ee:60:29:cb:3a:f2: ++ db:d6:32:84:19:3f:7c:d5:2f:c2:b1:cc:93:ae:50:bb:09:32: ++ c6:c6:ed:7e:c9:36:94:12:e4:68:85:06:a2:1b:d0:2f:02:31: ++ 00:99:e9:16:b4:0e:fa:56:48:d4:a4:30:16:91:78:db:54:8c: ++ 65:01:8a:e7:50:66:c2:31:b7:39:ba:b8:1a:22:07:4e:fc:6b: ++ 54:16:20:ff:2b:b5:e7:4c:0c:4d:a6:4f:73 ++-----BEGIN CERTIFICATE----- ++MIICWTCCAd+gAwIBAgIQZvI9r4fei7FK6gxXMQHC7DAKBggqhkjOPQQDAzBlMQsw ++CQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYwNAYD ++VQQDEy1NaWNyb3NvZnQgRUNDIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIw ++MTcwHhcNMTkxMjE4MjMwNjQ1WhcNNDIwNzE4MjMxNjA0WjBlMQswCQYDVQQGEwJV ++UzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYwNAYDVQQDEy1NaWNy ++b3NvZnQgRUNDIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTcwdjAQBgcq ++hkjOPQIBBgUrgQQAIgNiAATUvD0CQnVBEyPNgASGAlEvaqiBYgtlzPbKnR5vSmZR ++ogPZnZH6thaxjG7efM3beaYvzrvOcS/lpaso7GMEZpn4+vKTEAXhgShC48Zo9OYb ++hGBKia/teQ87zvH2RPUBeMCjVDBSMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8E ++BTADAQH/MB0GA1UdDgQWBBTIy5lycFIM+Oa+sgRXKSrPQhDtNTAQBgkrBgEEAYI3 ++FQEEAwIBADAKBggqhkjOPQQDAwNoADBlAjBY8k3qDPlfXu5gKcs68tvWMoQZP3zV ++L8KxzJOuULsJMsbG7X7JNpQS5GiFBqIb0C8CMQCZ6Ra0DvpWSNSkMBaReNtUjGUB ++iudQZsIxtzm6uBoiB078a1QWIP8rtedMDE2mT3M= ++-----END CERTIFICATE----- ++ ++# c741f70f4b2a8d88bf2e71c14122ef53ef10eba0cfa5e64cfa20f418853073e0 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 1e:d3:97:09:5f:d8:b4:b3:47:70:1e:aa:be:7f:45:b3 ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C = US, O = Microsoft Corporation, CN = Microsoft RSA Root Certificate Authority 2017 ++ Validity ++ Not Before: Dec 18 22:51:22 2019 GMT ++ Not After : Jul 18 23:00:23 2042 GMT ++ Subject: C = US, O = Microsoft Corporation, CN = Microsoft RSA Root Certificate Authority 2017 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:ca:5b:be:94:33:8c:29:95:91:16:0a:95:bd:47: ++ 62:c1:89:f3:99:36:df:46:90:c9:a5:ed:78:6a:6f: ++ 47:91:68:f8:27:67:50:33:1d:a1:a6:fb:e0:e5:43: ++ a3:84:02:57:01:5d:9c:48:40:82:53:10:bc:bf:c7: ++ 3b:68:90:b6:82:2d:e5:f4:65:d0:cc:6d:19:cc:95: ++ f9:7b:ac:4a:94:ad:0e:de:4b:43:1d:87:07:92:13: ++ 90:80:83:64:35:39:04:fc:e5:e9:6c:b3:b6:1f:50: ++ 94:38:65:50:5c:17:46:b9:b6:85:b5:1c:b5:17:e8: ++ d6:45:9d:d8:b2:26:b0:ca:c4:70:4a:ae:60:a4:dd: ++ b3:d9:ec:fc:3b:d5:57:72:bc:3f:c8:c9:b2:de:4b: ++ 6b:f8:23:6c:03:c0:05:bd:95:c7:cd:73:3b:66:80: ++ 64:e3:1a:ac:2e:f9:47:05:f2:06:b6:9b:73:f5:78: ++ 33:5b:c7:a1:fb:27:2a:a1:b4:9a:91:8c:91:d3:3a: ++ 82:3e:76:40:b4:cd:52:61:51:70:28:3f:c5:c5:5a: ++ f2:c9:8c:49:bb:14:5b:4d:c8:ff:67:4d:4c:12:96: ++ ad:f5:fe:78:a8:97:87:d7:fd:5e:20:80:dc:a1:4b: ++ 22:fb:d4:89:ad:ba:ce:47:97:47:55:7b:8f:45:c8: ++ 67:28:84:95:1c:68:30:ef:ef:49:e0:35:7b:64:e7: ++ 98:b0:94:da:4d:85:3b:3e:55:c4:28:af:57:f3:9e: ++ 13:db:46:27:9f:1e:a2:5e:44:83:a4:a5:ca:d5:13: ++ b3:4b:3f:c4:e3:c2:e6:86:61:a4:52:30:b9:7a:20: ++ 4f:6f:0f:38:53:cb:33:0c:13:2b:8f:d6:9a:bd:2a: ++ c8:2d:b1:1c:7d:4b:51:ca:47:d1:48:27:72:5d:87: ++ eb:d5:45:e6:48:65:9d:af:52:90:ba:5b:a2:18:65: ++ 57:12:9f:68:b9:d4:15:6b:94:c4:69:22:98:f4:33: ++ e0:ed:f9:51:8e:41:50:c9:34:4f:76:90:ac:fc:38: ++ c1:d8:e1:7b:b9:e3:e3:94:e1:46:69:cb:0e:0a:50: ++ 6b:13:ba:ac:0f:37:5a:b7:12:b5:90:81:1e:56:ae: ++ 57:22:86:d9:c9:d2:d1:d7:51:e3:ab:3b:c6:55:fd: ++ 1e:0e:d3:74:0a:d1:da:aa:ea:69:b8:97:28:8f:48: ++ c4:07:f8:52:43:3a:f4:ca:55:35:2c:b0:a6:6a:c0: ++ 9c:f9:f2:81:e1:12:6a:c0:45:d9:67:b3:ce:ff:23: ++ a2:89:0a:54:d4:14:b9:2a:a8:d7:ec:f9:ab:cd:25: ++ 58:32:79:8f:90:5b:98:39:c4:08:06:c1:ac:7f:0e: ++ 3d:00:a5 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 09:CB:59:7F:86:B2:70:8F:1A:C3:39:E3:C0:D9:E9:BF:BB:4D:B2:23 ++ 1.3.6.1.4.1.311.21.1: ++ ... ++ Signature Algorithm: sha384WithRSAEncryption ++ ac:af:3e:5d:c2:11:96:89:8e:a3:e7:92:d6:97:15:b8:13:a2: ++ a6:42:2e:02:cd:16:05:59:27:ca:20:e8:ba:b8:e8:1a:ec:4d: ++ a8:97:56:ae:65:43:b1:8f:00:9b:52:cd:55:cd:53:39:6d:62: ++ 4c:8b:0d:5b:7c:2e:44:bf:83:10:8f:f3:53:82:80:c3:4f:3a: ++ c7:6e:11:3f:e6:e3:16:91:84:fb:6d:84:7f:34:74:ad:89:a7: ++ ce:b9:d7:d7:9f:84:64:92:be:95:a1:ad:09:53:33:dd:ee:0a: ++ ea:4a:51:8e:6f:55:ab:ba:b5:94:46:ae:8c:7f:d8:a2:50:25: ++ 65:60:80:46:db:33:04:ae:6c:b5:98:74:54:25:dc:93:e4:f8: ++ e3:55:15:3d:b8:6d:c3:0a:a4:12:c1:69:85:6e:df:64:f1:53: ++ 99:e1:4a:75:20:9d:95:0f:e4:d6:dc:03:f1:59:18:e8:47:89: ++ b2:57:5a:94:b6:a9:d8:17:2b:17:49:e5:76:cb:c1:56:99:3a: ++ 37:b1:ff:69:2c:91:91:93:e1:df:4c:a3:37:76:4d:a1:9f:f8: ++ 6d:1e:1d:d3:fa:ec:fb:f4:45:1d:13:6d:cf:f7:59:e5:22:27: ++ 72:2b:86:f3:57:bb:30:ed:24:4d:dc:7d:56:bb:a3:b3:f8:34: ++ 79:89:c1:e0:f2:02:61:f7:a6:fc:0f:bb:1c:17:0b:ae:41:d9: ++ 7c:bd:27:a3:fd:2e:3a:d1:93:94:b1:73:1d:24:8b:af:5b:20: ++ 89:ad:b7:67:66:79:f5:3a:c6:a6:96:33:fe:53:92:c8:46:b1: ++ 11:91:c6:99:7f:8f:c9:d6:66:31:20:41:10:87:2d:0c:d6:c1: ++ af:34:98:ca:64:83:fb:13:57:d1:c1:f0:3c:7a:8c:a5:c1:fd: ++ 95:21:a0:71:c1:93:67:71:12:ea:8f:88:0a:69:19:64:99:23: ++ 56:fb:ac:2a:2e:70:be:66:c4:0c:84:ef:e5:8b:f3:93:01:f8: ++ 6a:90:93:67:4b:b2:68:a3:b5:62:8f:e9:3f:8c:7a:3b:5e:0f: ++ e7:8c:b8:c6:7c:ef:37:fd:74:e2:c8:4f:33:72:e1:94:39:6d: ++ bd:12:af:be:0c:4e:70:7c:1b:6f:8d:b3:32:93:73:44:16:6d: ++ e8:f4:f7:e0:95:80:8f:96:5d:38:a4:f4:ab:de:0a:30:87:93: ++ d8:4d:00:71:62:45:27:4b:3a:42:84:5b:7f:65:b7:67:34:52: ++ 2d:9c:16:6b:aa:a8:d8:7b:a3:42:4c:71:c7:0c:ca:3e:83:e4: ++ a6:ef:b7:01:30:5e:51:a3:79:f5:70:69:a6:41:44:0f:86:b0: ++ 2c:91:c6:3d:ea:ae:0f:84 ++-----BEGIN CERTIFICATE----- ++MIIFqDCCA5CgAwIBAgIQHtOXCV/YtLNHcB6qvn9FszANBgkqhkiG9w0BAQwFADBl ++MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYw ++NAYDVQQDEy1NaWNyb3NvZnQgUlNBIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5 ++IDIwMTcwHhcNMTkxMjE4MjI1MTIyWhcNNDIwNzE4MjMwMDIzWjBlMQswCQYDVQQG ++EwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYwNAYDVQQDEy1N ++aWNyb3NvZnQgUlNBIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTcwggIi ++MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKW76UM4wplZEWCpW9R2LBifOZ ++Nt9GkMml7Xhqb0eRaPgnZ1AzHaGm++DlQ6OEAlcBXZxIQIJTELy/xztokLaCLeX0 ++ZdDMbRnMlfl7rEqUrQ7eS0MdhweSE5CAg2Q1OQT85elss7YfUJQ4ZVBcF0a5toW1 ++HLUX6NZFndiyJrDKxHBKrmCk3bPZ7Pw71VdyvD/IybLeS2v4I2wDwAW9lcfNcztm ++gGTjGqwu+UcF8ga2m3P1eDNbx6H7JyqhtJqRjJHTOoI+dkC0zVJhUXAoP8XFWvLJ ++jEm7FFtNyP9nTUwSlq31/niol4fX/V4ggNyhSyL71Imtus5Hl0dVe49FyGcohJUc ++aDDv70ngNXtk55iwlNpNhTs+VcQor1fznhPbRiefHqJeRIOkpcrVE7NLP8TjwuaG ++YaRSMLl6IE9vDzhTyzMMEyuP1pq9KsgtsRx9S1HKR9FIJ3Jdh+vVReZIZZ2vUpC6 ++W6IYZVcSn2i51BVrlMRpIpj0M+Dt+VGOQVDJNE92kKz8OMHY4Xu54+OU4UZpyw4K ++UGsTuqwPN1q3ErWQgR5WrlcihtnJ0tHXUeOrO8ZV/R4O03QK0dqq6mm4lyiPSMQH +++FJDOvTKVTUssKZqwJz58oHhEmrARdlns87/I6KJClTUFLkqqNfs+avNJVgyeY+Q ++W5g5xAgGwax/Dj0ApQIDAQABo1QwUjAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/ ++BAUwAwEB/zAdBgNVHQ4EFgQUCctZf4aycI8awznjwNnpv7tNsiMwEAYJKwYBBAGC ++NxUBBAMCAQAwDQYJKoZIhvcNAQEMBQADggIBAKyvPl3CEZaJjqPnktaXFbgToqZC ++LgLNFgVZJ8og6Lq46BrsTaiXVq5lQ7GPAJtSzVXNUzltYkyLDVt8LkS/gxCP81OC ++gMNPOsduET/m4xaRhPtthH80dK2Jp86519efhGSSvpWhrQlTM93uCupKUY5vVau6 ++tZRGrox/2KJQJWVggEbbMwSubLWYdFQl3JPk+ONVFT24bcMKpBLBaYVu32TxU5nh ++SnUgnZUP5NbcA/FZGOhHibJXWpS2qdgXKxdJ5XbLwVaZOjex/2kskZGT4d9Mozd2 ++TaGf+G0eHdP67Pv0RR0Tbc/3WeUiJ3IrhvNXuzDtJE3cfVa7o7P4NHmJweDyAmH3 ++pvwPuxwXC65B2Xy9J6P9LjrRk5Sxcx0ki69bIImtt2dmefU6xqaWM/5TkshGsRGR ++xpl/j8nWZjEgQRCHLQzWwa80mMpkg/sTV9HB8Dx6jKXB/ZUhoHHBk2dxEuqPiApp ++GWSZI1b7rCoucL5mxAyE7+WL85MB+GqQk2dLsmijtWKP6T+MejteD+eMuMZ87zf9 ++dOLITzNy4ZQ5bb0Sr74MTnB8G2+NszKTc0QWbej09+CVgI+WXTik9KveCjCHk9hN ++AHFiRSdLOkKEW39lt2c0Ui2cFmuqqNh7o0JMcccMyj6D5KbvtwEwXlGjefVwaaZB ++RA+GsCyRxj3qrg+E ++-----END CERTIFICATE----- ++ ++# 6c61dac3a2def031506be036d2a6fe401994fbd13df9c8d466599274c446ec98 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 80544274841616 (0x49412ce40010) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = HU, L = Budapest, O = NetLock Kft., OU = Tan\C3\BAs\C3\ADtv\C3\A1nykiad\C3\B3k (Certification Services), CN = NetLock Arany (Class Gold) F\C5\91tan\C3\BAs\C3\ADtv\C3\A1ny ++ Validity ++ Not Before: Dec 11 15:08:21 2008 GMT ++ Not After : Dec 6 15:08:21 2028 GMT ++ Subject: C = HU, L = Budapest, O = NetLock Kft., OU = Tan\C3\BAs\C3\ADtv\C3\A1nykiad\C3\B3k (Certification Services), CN = NetLock Arany (Class Gold) F\C5\91tan\C3\BAs\C3\ADtv\C3\A1ny ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:c4:24:5e:73:be:4b:6d:14:c3:a1:f4:e3:97:90: ++ 6e:d2:30:45:1e:3c:ee:67:d9:64:e0:1a:8a:7f:ca: ++ 30:ca:83:e3:20:c1:e3:f4:3a:d3:94:5f:1a:7c:5b: ++ 6d:bf:30:4f:84:27:f6:9f:1f:49:bc:c6:99:0a:90: ++ f2:0f:f5:7f:43:84:37:63:51:8b:7a:a5:70:fc:7a: ++ 58:cd:8e:9b:ed:c3:46:6c:84:70:5d:da:f3:01:90: ++ 23:fc:4e:30:a9:7e:e1:27:63:e7:ed:64:3c:a0:b8: ++ c9:33:63:fe:16:90:ff:b0:b8:fd:d7:a8:c0:c0:94: ++ 43:0b:b6:d5:59:a6:9e:56:d0:24:1f:70:79:af:db: ++ 39:54:0d:65:75:d9:15:41:94:01:af:5e:ec:f6:8d: ++ f1:ff:ad:64:fe:20:9a:d7:5c:eb:fe:a6:1f:08:64: ++ a3:8b:76:55:ad:1e:3b:28:60:2e:87:25:e8:aa:af: ++ 1f:c6:64:46:20:b7:70:7f:3c:de:48:db:96:53:b7: ++ 39:77:e4:1a:e2:c7:16:84:76:97:5b:2f:bb:19:15: ++ 85:f8:69:85:f5:99:a7:a9:f2:34:a7:a9:b6:a6:03: ++ fc:6f:86:3d:54:7c:76:04:9b:6b:f9:40:5d:00:34: ++ c7:2e:99:75:9d:e5:88:03:aa:4d:f8:03:d2:42:76: ++ c0:1b ++ Exponent: 43147 (0xa88b) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE, pathlen:4 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ CC:FA:67:93:F0:B6:B8:D0:A5:C0:1E:F3:53:FD:8C:53:DF:83:D7:96 ++ Signature Algorithm: sha256WithRSAEncryption ++ ab:7f:ee:1c:16:a9:9c:3c:51:00:a0:c0:11:08:05:a7:99:e6: ++ 6f:01:88:54:61:6e:f1:b9:18:ad:4a:ad:fe:81:40:23:94:2f: ++ fb:75:7c:2f:28:4b:62:24:81:82:0b:f5:61:f1:1c:6e:b8:61: ++ 38:eb:81:fa:62:a1:3b:5a:62:d3:94:65:c4:e1:e6:6d:82:f8: ++ 2f:25:70:b2:21:26:c1:72:51:1f:8c:2c:c3:84:90:c3:5a:8f: ++ ba:cf:f4:a7:65:a5:eb:98:d1:fb:05:b2:46:75:15:23:6a:6f: ++ 85:63:30:80:f0:d5:9e:1f:29:1c:c2:6c:b0:50:59:5d:90:5b: ++ 3b:a8:0d:30:cf:bf:7d:7f:ce:f1:9d:83:bd:c9:46:6e:20:a6: ++ f9:61:51:ba:21:2f:7b:be:a5:15:63:a1:d4:95:87:f1:9e:b9: ++ f3:89:f3:3d:85:b8:b8:db:be:b5:b9:29:f9:da:37:05:00:49: ++ 94:03:84:44:e7:bf:43:31:cf:75:8b:25:d1:f4:a6:64:f5:92: ++ f6:ab:05:eb:3d:e9:a5:0b:36:62:da:cc:06:5f:36:8b:b6:5e: ++ 31:b8:2a:fb:5e:f6:71:df:44:26:9e:c4:e6:0d:91:b4:2e:75: ++ 95:80:51:6a:4b:30:a6:b0:62:a1:93:f1:9b:d8:ce:c4:63:75: ++ 3f:59:47:b1 ++-----BEGIN CERTIFICATE----- ++MIIEFTCCAv2gAwIBAgIGSUEs5AAQMA0GCSqGSIb3DQEBCwUAMIGnMQswCQYDVQQG ++EwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFTATBgNVBAoMDE5ldExvY2sgS2Z0LjE3 ++MDUGA1UECwwuVGFuw7pzw610dsOhbnlraWFkw7NrIChDZXJ0aWZpY2F0aW9uIFNl ++cnZpY2VzKTE1MDMGA1UEAwwsTmV0TG9jayBBcmFueSAoQ2xhc3MgR29sZCkgRsWR ++dGFuw7pzw610dsOhbnkwHhcNMDgxMjExMTUwODIxWhcNMjgxMjA2MTUwODIxWjCB ++pzELMAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRUwEwYDVQQKDAxOZXRM ++b2NrIEtmdC4xNzA1BgNVBAsMLlRhbsO6c8OtdHbDoW55a2lhZMOzayAoQ2VydGlm ++aWNhdGlvbiBTZXJ2aWNlcykxNTAzBgNVBAMMLE5ldExvY2sgQXJhbnkgKENsYXNz ++IEdvbGQpIEbFkXRhbsO6c8OtdHbDoW55MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A ++MIIBCgKCAQEAxCRec75LbRTDofTjl5Bu0jBFHjzuZ9lk4BqKf8owyoPjIMHj9DrT ++lF8afFttvzBPhCf2nx9JvMaZCpDyD/V/Q4Q3Y1GLeqVw/HpYzY6b7cNGbIRwXdrz ++AZAj/E4wqX7hJ2Pn7WQ8oLjJM2P+FpD/sLj916jAwJRDC7bVWaaeVtAkH3B5r9s5 ++VA1lddkVQZQBr17s9o3x/61k/iCa11zr/qYfCGSji3ZVrR47KGAuhyXoqq8fxmRG ++ILdwfzzeSNuWU7c5d+Qa4scWhHaXWy+7GRWF+GmF9ZmnqfI0p6m2pgP8b4Y9VHx2 ++BJtr+UBdADTHLpl1neWIA6pN+APSQnbAGwIDAKiLo0UwQzASBgNVHRMBAf8ECDAG ++AQH/AgEEMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUzPpnk/C2uNClwB7zU/2M ++U9+D15YwDQYJKoZIhvcNAQELBQADggEBAKt/7hwWqZw8UQCgwBEIBaeZ5m8BiFRh ++bvG5GK1Krf6BQCOUL/t1fC8oS2IkgYIL9WHxHG64YTjrgfpioTtaYtOUZcTh5m2C +++C8lcLIhJsFyUR+MLMOEkMNaj7rP9KdlpeuY0fsFskZ1FSNqb4VjMIDw1Z4fKRzC ++bLBQWV2QWzuoDTDPv31/zvGdg73JRm4gpvlhUbohL3u+pRVjodSVh/GeufOJ8z2F ++uLjbvrW5KfnaNwUASZQDhETnv0Mxz3WLJdH0pmT1kvarBes96aULNmLazAZfNou2 ++XjG4Kvte9nHfRCaexOYNkbQudZWAUWpLMKawYqGT8ZvYzsRjdT9ZR7E= ++-----END CERTIFICATE----- ++ ++# 6b9c08e86eb0f767cfad65cd98b62149e5494a67f5845e7bd1ed019f27b86bd6 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 76:b1:20:52:74:f0:85:87:46:b3:f8:23:1a:f6:c2:c0 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = CH, O = WISeKey, OU = OISTE Foundation Endorsed, CN = OISTE WISeKey Global Root GB CA ++ Validity ++ Not Before: Dec 1 15:00:32 2014 GMT ++ Not After : Dec 1 15:10:31 2039 GMT ++ Subject: C = CH, O = WISeKey, OU = OISTE Foundation Endorsed, CN = OISTE WISeKey Global Root GB CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:d8:17:b7:1c:4a:24:2a:d6:97:b1:ca:e2:1e:fb: ++ 7d:38:ef:98:f5:b2:39:98:4e:27:b8:11:5d:7b:d2: ++ 25:94:88:82:15:26:6a:1b:31:bb:a8:5b:21:21:2b: ++ d8:0f:4e:9f:5a:f1:b1:5a:e4:79:d6:32:23:2b:e1: ++ 53:cc:99:45:5c:7b:4f:ad:bc:bf:87:4a:0b:4b:97: ++ 5a:a8:f6:48:ec:7d:7b:0d:cd:21:06:df:9e:15:fd: ++ 41:8a:48:b7:20:f4:a1:7a:1b:57:d4:5d:50:ff:ba: ++ 67:d8:23:99:1f:c8:3f:e3:de:ff:6f:5b:77:b1:6b: ++ 6e:b8:c9:64:f7:e1:ca:41:46:0e:29:71:d0:b9:23: ++ fc:c9:81:5f:4e:f7:6f:df:bf:84:ad:73:64:bb:b7: ++ 42:8e:69:f6:d4:76:1d:7e:9d:a7:b8:57:8a:51:67: ++ 72:d7:d4:a8:b8:95:54:40:73:03:f6:ea:f4:eb:fe: ++ 28:42:77:3f:9d:23:1b:b2:b6:3d:80:14:07:4c:2e: ++ 4f:f7:d5:0a:16:0d:bd:66:43:37:7e:23:43:79:c3: ++ 40:86:f5:4c:29:da:8e:9a:ad:0d:a5:04:87:88:1e: ++ 85:e3:e9:53:d5:9b:c8:8b:03:63:78:eb:e0:19:4a: ++ 6e:bb:2f:6b:33:64:58:93:ad:69:bf:8f:1b:ef:82: ++ 48:c7 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 35:0F:C8:36:63:5E:E2:A3:EC:F9:3B:66:15:CE:51:52:E3:91:9A:3D ++ 1.3.6.1.4.1.311.21.1: ++ ... ++ Signature Algorithm: sha256WithRSAEncryption ++ 40:4c:fb:87:b2:99:81:90:7e:9d:c5:b0:b0:26:cd:88:7b:2b: ++ 32:8d:6e:b8:21:71:58:97:7d:ae:37:14:af:3e:e7:f7:9a:e2: ++ 7d:f6:71:98:99:04:aa:43:74:78:a3:e3:49:61:3e:73:8c:4d: ++ 94:e0:f9:71:c4:b6:16:0e:53:78:1f:d6:a2:87:2f:02:39:81: ++ 29:3c:af:15:98:21:30:fe:28:90:00:8c:d1:e1:cb:fa:5e:c8: ++ fd:f8:10:46:3b:a2:78:42:91:17:74:55:0a:de:50:67:4d:66: ++ d1:a7:ff:fd:d9:c0:b5:a8:a3:8a:ce:66:f5:0f:43:cd:a7:2b: ++ 57:7b:63:46:6a:aa:2e:52:d8:f4:ed:e1:6d:ad:29:90:78:48: ++ ba:e1:23:aa:a3:89:ec:b5:ab:96:c0:b4:4b:a2:1d:97:9e:7a: ++ f2:6e:40:71:df:68:f1:65:4d:ce:7c:05:df:53:65:a9:a5:f0: ++ b1:97:04:70:15:46:03:98:d4:d2:bf:54:b4:a0:58:7d:52:6f: ++ da:56:26:62:d4:d8:db:89:31:6f:1c:f0:22:c2:d3:62:1c:35: ++ cd:4c:69:15:54:1a:90:98:de:eb:1e:5f:ca:77:c7:cb:8e:3d: ++ 43:69:9c:9a:58:d0:24:3b:df:1b:40:96:7e:35:ad:81:c7:4e: ++ 71:ba:88:13 ++-----BEGIN CERTIFICATE----- ++MIIDtTCCAp2gAwIBAgIQdrEgUnTwhYdGs/gjGvbCwDANBgkqhkiG9w0BAQsFADBt ++MQswCQYDVQQGEwJDSDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUg ++Rm91bmRhdGlvbiBFbmRvcnNlZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9i ++YWwgUm9vdCBHQiBDQTAeFw0xNDEyMDExNTAwMzJaFw0zOTEyMDExNTEwMzFaMG0x ++CzAJBgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYDVQQLExlPSVNURSBG ++b3VuZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEdsb2Jh ++bCBSb290IEdCIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Be3 ++HEokKtaXscriHvt9OO+Y9bI5mE4nuBFde9IllIiCFSZqGzG7qFshISvYD06fWvGx ++WuR51jIjK+FTzJlFXHtPrby/h0oLS5daqPZI7H17Dc0hBt+eFf1Biki3IPShehtX ++1F1Q/7pn2COZH8g/497/b1t3sWtuuMlk9+HKQUYOKXHQuSP8yYFfTvdv37+ErXNk ++u7dCjmn21HYdfp2nuFeKUWdy19SouJVUQHMD9ur06/4oQnc/nSMbsrY9gBQHTC5P ++99UKFg29ZkM3fiNDecNAhvVMKdqOmq0NpQSHiB6F4+lT1ZvIiwNjeOvgGUpuuy9r ++M2RYk61pv48b74JIxwIDAQABo1EwTzALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUw ++AwEB/zAdBgNVHQ4EFgQUNQ/INmNe4qPs+TtmFc5RUuORmj0wEAYJKwYBBAGCNxUB ++BAMCAQAwDQYJKoZIhvcNAQELBQADggEBAEBM+4eymYGQfp3FsLAmzYh7KzKNbrgh ++cViXfa43FK8+5/ea4n32cZiZBKpDdHij40lhPnOMTZTg+XHEthYOU3gf1qKHLwI5 ++gSk8rxWYITD+KJAAjNHhy/peyP34EEY7onhCkRd0VQreUGdNZtGn//3ZwLWoo4rO ++ZvUPQ82nK1d7Y0Zqqi5S2PTt4W2tKZB4SLrhI6qjiey1q5bAtEuiHZeeevJuQHHf ++aPFlTc58Bd9TZaml8LGXBHAVRgOY1NK/VLSgWH1Sb9pWJmLU2NuJMW8c8CLC02Ic ++Nc1MaRVUGpCY3useX8p3x8uOPUNpnJpY0CQ73xtAln41rYHHTnG6iBM= ++-----END CERTIFICATE----- ++ ++# 8560f91c3624daba9570b5fea0dbe36ff11a8323be9486854fb3f34a5571198d ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 21:2a:56:0c:ae:da:0c:ab:40:45:bf:2b:a2:2d:3a:ea ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = CH, O = WISeKey, OU = OISTE Foundation Endorsed, CN = OISTE WISeKey Global Root GC CA ++ Validity ++ Not Before: May 9 09:48:34 2017 GMT ++ Not After : May 9 09:58:33 2042 GMT ++ Subject: C = CH, O = WISeKey, OU = OISTE Foundation Endorsed, CN = OISTE WISeKey Global Root GC CA ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:4c:e9:50:c0:c6:0f:72:18:bc:d8:f1:ba:b3:89: ++ e2:79:4a:a3:16:a7:6b:54:24:db:51:ff:ea:f4:09: ++ 24:c3:0b:22:9f:cb:6a:27:82:81:0d:d2:c0:af:31: ++ e4:74:82:6e:ca:25:d9:8c:75:9d:f1:db:d0:9a:a2: ++ 4b:21:7e:16:a7:63:90:d2:39:d4:b1:87:78:5f:18: ++ 96:0f:50:1b:35:37:0f:6a:c6:dc:d9:13:4d:a4:8e: ++ 90:37:e6:bd:5b:31:91 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 48:87:14:AC:E3:C3:9E:90:60:3A:D7:CA:89:EE:D3:AD:8C:B4:50:66 ++ 1.3.6.1.4.1.311.21.1: ++ ... ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:65:02:30:26:c7:69:5b:dc:d5:e7:b2:e7:c8:0c:8c:8c:c3: ++ dd:79:8c:1b:63:d5:c9:52:94:4e:4d:82:4a:73:1e:b2:80:84: ++ a9:25:c0:4c:5a:6d:49:29:60:78:13:e2:7e:48:eb:64:02:31: ++ 00:db:34:20:32:08:ff:9a:49:02:b6:88:de:14:af:5d:6c:99: ++ 71:8d:1a:3f:8b:d7:e0:a2:36:86:1c:07:82:3a:76:53:fd:c2: ++ a2:ed:ef:7b:b0:80:4f:58:0f:4b:53:39:bd ++-----BEGIN CERTIFICATE----- ++MIICaTCCAe+gAwIBAgIQISpWDK7aDKtARb8roi066jAKBggqhkjOPQQDAzBtMQsw ++CQYDVQQGEwJDSDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUgRm91 ++bmRhdGlvbiBFbmRvcnNlZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9iYWwg ++Um9vdCBHQyBDQTAeFw0xNzA1MDkwOTQ4MzRaFw00MjA1MDkwOTU4MzNaMG0xCzAJ ++BgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYDVQQLExlPSVNURSBGb3Vu ++ZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEdsb2JhbCBS ++b290IEdDIENBMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAETOlQwMYPchi82PG6s4ni ++eUqjFqdrVCTbUf/q9Akkwwsin8tqJ4KBDdLArzHkdIJuyiXZjHWd8dvQmqJLIX4W ++p2OQ0jnUsYd4XxiWD1AbNTcPasbc2RNNpI6QN+a9WzGRo1QwUjAOBgNVHQ8BAf8E ++BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUSIcUrOPDnpBgOtfKie7T ++rYy0UGYwEAYJKwYBBAGCNxUBBAMCAQAwCgYIKoZIzj0EAwMDaAAwZQIwJsdpW9zV ++57LnyAyMjMPdeYwbY9XJUpROTYJKcx6ygISpJcBMWm1JKWB4E+J+SOtkAjEA2zQg ++Mgj/mkkCtojeFK9dbJlxjRo/i9fgojaGHAeCOnZT/cKi7e97sIBPWA9LUzm9 ++-----END CERTIFICATE----- ++ ++# 85a0dd7dd720adb7ff05f83d542b209dc7ff4528f7d677b18389fea5e5c49e86 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 1289 (0x509) ++ Signature Algorithm: sha1WithRSAEncryption ++ Issuer: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2 ++ Validity ++ Not Before: Nov 24 18:27:00 2006 GMT ++ Not After : Nov 24 18:23:33 2031 GMT ++ Subject: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:9a:18:ca:4b:94:0d:00:2d:af:03:29:8a:f0:0f: ++ 81:c8:ae:4c:19:85:1d:08:9f:ab:29:44:85:f3:2f: ++ 81:ad:32:1e:90:46:bf:a3:86:26:1a:1e:fe:7e:1c: ++ 18:3a:5c:9c:60:17:2a:3a:74:83:33:30:7d:61:54: ++ 11:cb:ed:ab:e0:e6:d2:a2:7e:f5:6b:6f:18:b7:0a: ++ 0b:2d:fd:e9:3e:ef:0a:c6:b3:10:e9:dc:c2:46:17: ++ f8:5d:fd:a4:da:ff:9e:49:5a:9c:e6:33:e6:24:96: ++ f7:3f:ba:5b:2b:1c:7a:35:c2:d6:67:fe:ab:66:50: ++ 8b:6d:28:60:2b:ef:d7:60:c3:c7:93:bc:8d:36:91: ++ f3:7f:f8:db:11:13:c4:9c:77:76:c1:ae:b7:02:6a: ++ 81:7a:a9:45:83:e2:05:e6:b9:56:c1:94:37:8f:48: ++ 71:63:22:ec:17:65:07:95:8a:4b:df:8f:c6:5a:0a: ++ e5:b0:e3:5f:5e:6b:11:ab:0c:f9:85:eb:44:e9:f8: ++ 04:73:f2:e9:fe:5c:98:8c:f5:73:af:6b:b4:7e:cd: ++ d4:5c:02:2b:4c:39:e1:b2:95:95:2d:42:87:d7:d5: ++ b3:90:43:b7:6c:13:f1:de:dd:f6:c4:f8:89:3f:d1: ++ 75:f5:92:c3:91:d5:8a:88:d0:90:ec:dc:6d:de:89: ++ c2:65:71:96:8b:0d:03:fd:9c:bf:5b:16:ac:92:db: ++ ea:fe:79:7c:ad:eb:af:f7:16:cb:db:cd:25:2b:e5: ++ 1f:fb:9a:9f:e2:51:cc:3a:53:0c:48:e6:0e:bd:c9: ++ b4:76:06:52:e6:11:13:85:72:63:03:04:e0:04:36: ++ 2b:20:19:02:e8:74:a7:1f:b6:c9:56:66:f0:75:25: ++ dc:67:c1:0e:61:60:88:b3:3e:d1:a8:fc:a3:da:1d: ++ b0:d1:b1:23:54:df:44:76:6d:ed:41:d8:c1:b2:22: ++ b6:53:1c:df:35:1d:dc:a1:77:2a:31:e4:2d:f5:e5: ++ e5:db:c8:e0:ff:e5:80:d7:0b:63:a0:ff:33:a1:0f: ++ ba:2c:15:15:ea:97:b3:d2:a2:b5:be:f2:8c:96:1e: ++ 1a:8f:1d:6c:a4:61:37:b9:86:73:33:d7:97:96:9e: ++ 23:7d:82:a4:4c:81:e2:a1:d1:ba:67:5f:95:07:a3: ++ 27:11:ee:16:10:7b:bc:45:4a:4c:b2:04:d2:ab:ef: ++ d5:fd:0c:51:ce:50:6a:08:31:f9:91:da:0c:8f:64: ++ 5c:03:c3:3a:8b:20:3f:6e:8d:67:3d:3a:d6:fe:7d: ++ 5b:88:c9:5e:fb:cc:61:dc:8b:33:77:d3:44:32:35: ++ 09:62:04:92:16:10:d8:9e:27:47:fb:3b:21:e3:f8: ++ eb:1d:5b ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ 1A:84:62:BC:48:4C:33:25:04:D4:EE:D0:F6:03:C4:19:46:D1:94:6B ++ X509v3 Authority Key Identifier: ++ keyid:1A:84:62:BC:48:4C:33:25:04:D4:EE:D0:F6:03:C4:19:46:D1:94:6B ++ DirName:/C=BM/O=QuoVadis Limited/CN=QuoVadis Root CA 2 ++ serial:05:09 ++ ++ Signature Algorithm: sha1WithRSAEncryption ++ 3e:0a:16:4d:9f:06:5b:a8:ae:71:5d:2f:05:2f:67:e6:13:45: ++ 83:c4:36:f6:f3:c0:26:0c:0d:b5:47:64:5d:f8:b4:72:c9:46: ++ a5:03:18:27:55:89:78:7d:76:ea:96:34:80:17:20:dc:e7:83: ++ f8:8d:fc:07:b8:da:5f:4d:2e:67:b2:84:fd:d9:44:fc:77:50: ++ 81:e6:7c:b4:c9:0d:0b:72:53:f8:76:07:07:41:47:96:0c:fb: ++ e0:82:26:93:55:8c:fe:22:1f:60:65:7c:5f:e7:26:b3:f7:32: ++ 90:98:50:d4:37:71:55:f6:92:21:78:f7:95:79:fa:f8:2d:26: ++ 87:66:56:30:77:a6:37:78:33:52:10:58:ae:3f:61:8e:f2:6a: ++ b1:ef:18:7e:4a:59:63:ca:8d:a2:56:d5:a7:2f:bc:56:1f:cf: ++ 39:c1:e2:fb:0a:a8:15:2c:7d:4d:7a:63:c6:6c:97:44:3c:d2: ++ 6f:c3:4a:17:0a:f8:90:d2:57:a2:19:51:a5:2d:97:41:da:07: ++ 4f:a9:50:da:90:8d:94:46:e1:3e:f0:94:fd:10:00:38:f5:3b: ++ e8:40:e1:b4:6e:56:1a:20:cc:6f:58:8d:ed:2e:45:8f:d6:e9: ++ 93:3f:e7:b1:2c:df:3a:d6:22:8c:dc:84:bb:22:6f:d0:f8:e4: ++ c6:39:e9:04:88:3c:c3:ba:eb:55:7a:6d:80:99:24:f5:6c:01: ++ fb:f8:97:b0:94:5b:eb:fd:d2:6f:f1:77:68:0d:35:64:23:ac: ++ b8:55:a1:03:d1:4d:42:19:dc:f8:75:59:56:a3:f9:a8:49:79: ++ f8:af:0e:b9:11:a0:7c:b7:6a:ed:34:d0:b6:26:62:38:1a:87: ++ 0c:f8:e8:fd:2e:d3:90:7f:07:91:2a:1d:d6:7e:5c:85:83:99: ++ b0:38:08:3f:e9:5e:f9:35:07:e4:c9:62:6e:57:7f:a7:50:95: ++ f7:ba:c8:9b:e6:8e:a2:01:c5:d6:66:bf:79:61:f3:3c:1c:e1: ++ b9:82:5c:5d:a0:c3:e9:d8:48:bd:19:a2:11:14:19:6e:b2:86: ++ 1b:68:3e:48:37:1a:88:b7:5d:96:5e:9c:c7:ef:27:62:08:e2: ++ 91:19:5c:d2:f1:21:dd:ba:17:42:82:97:71:81:53:31:a9:9f: ++ f6:7d:62:bf:72:e1:a3:93:1d:cc:8a:26:5a:09:38:d0:ce:d7: ++ 0d:80:16:b4:78:a5:3a:87:4c:8d:8a:a5:d5:46:97:f2:2c:10: ++ b9:bc:54:22:c0:01:50:69:43:9e:f4:b2:ef:6d:f8:ec:da:f1: ++ e3:b1:ef:df:91:8f:54:2a:0b:25:c1:26:19:c4:52:10:05:65: ++ d5:82:10:ea:c2:31:cd:2e ++-----BEGIN CERTIFICATE----- ++MIIFtzCCA5+gAwIBAgICBQkwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0x ++GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJv ++b3QgQ0EgMjAeFw0wNjExMjQxODI3MDBaFw0zMTExMjQxODIzMzNaMEUxCzAJBgNV ++BAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMRswGQYDVQQDExJRdW9W ++YWRpcyBSb290IENBIDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCa ++GMpLlA0ALa8DKYrwD4HIrkwZhR0In6spRIXzL4GtMh6QRr+jhiYaHv5+HBg6XJxg ++Fyo6dIMzMH1hVBHL7avg5tKifvVrbxi3Cgst/ek+7wrGsxDp3MJGF/hd/aTa/55J ++WpzmM+Yklvc/ulsrHHo1wtZn/qtmUIttKGAr79dgw8eTvI02kfN/+NsRE8Scd3bB ++rrcCaoF6qUWD4gXmuVbBlDePSHFjIuwXZQeVikvfj8ZaCuWw419eaxGrDPmF60Tp +++ARz8un+XJiM9XOva7R+zdRcAitMOeGylZUtQofX1bOQQ7dsE/He3fbE+Ik/0XX1 ++ksOR1YqI0JDs3G3eicJlcZaLDQP9nL9bFqyS2+r+eXyt66/3FsvbzSUr5R/7mp/i ++Ucw6UwxI5g69ybR2BlLmEROFcmMDBOAENisgGQLodKcftslWZvB1JdxnwQ5hYIiz ++PtGo/KPaHbDRsSNU30R2be1B2MGyIrZTHN81Hdyhdyox5C315eXbyOD/5YDXC2Og ++/zOhD7osFRXql7PSorW+8oyWHhqPHWykYTe5hnMz15eWniN9gqRMgeKh0bpnX5UH ++oycR7hYQe7xFSkyyBNKr79X9DFHOUGoIMfmR2gyPZFwDwzqLID9ujWc9Otb+fVuI ++yV77zGHcizN300QyNQliBJIWENieJ0f7OyHj+OsdWwIDAQABo4GwMIGtMA8GA1Ud ++EwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBQahGK8SEwzJQTU7tD2 ++A8QZRtGUazBuBgNVHSMEZzBlgBQahGK8SEwzJQTU7tD2A8QZRtGUa6FJpEcwRTEL ++MAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMT ++ElF1b1ZhZGlzIFJvb3QgQ0EgMoICBQkwDQYJKoZIhvcNAQEFBQADggIBAD4KFk2f ++BluornFdLwUvZ+YTRYPENvbzwCYMDbVHZF34tHLJRqUDGCdViXh9duqWNIAXINzn ++g/iN/Ae42l9NLmeyhP3ZRPx3UIHmfLTJDQtyU/h2BwdBR5YM++CCJpNVjP4iH2Bl ++fF/nJrP3MpCYUNQ3cVX2kiF495V5+vgtJodmVjB3pjd4M1IQWK4/YY7yarHvGH5K ++WWPKjaJW1acvvFYfzznB4vsKqBUsfU16Y8Zsl0Q80m/DShcK+JDSV6IZUaUtl0Ha ++B0+pUNqQjZRG4T7wlP0QADj1O+hA4bRuVhogzG9Yje0uRY/W6ZM/57Es3zrWIozc ++hLsib9D45MY56QSIPMO661V6bYCZJPVsAfv4l7CUW+v90m/xd2gNNWQjrLhVoQPR ++TUIZ3Ph1WVaj+ahJefivDrkRoHy3au000LYmYjgahwz46P0u05B/B5EqHdZ+XIWD ++mbA4CD/pXvk1B+TJYm5Xf6dQlfe6yJvmjqIBxdZmv3lh8zwc4bmCXF2gw+nYSL0Z ++ohEUGW6yhhtoPkg3Goi3XZZenMfvJ2II4pEZXNLxId26F0KCl3GBUzGpn/Z9Yr9y ++4aOTHcyKJloJONDO1w2AFrR4pTqHTI2KpdVGl/IsELm8VCLAAVBpQ570su9t+Oza ++8eOx79+Rj1QqCyXBJhnEUhAFZdWCEOrCMc0u ++-----END CERTIFICATE----- ++ ++# 88ef81de202eb018452e43f864725cea5fbd1fc2d9d205730709c5d8b8690f46 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 2e:f5:9b:02:28:a7:db:7a:ff:d5:a3:a9:ee:bd:03:a0:cf:12:6a:1d ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 3 G3 ++ Validity ++ Not Before: Jan 12 20:26:32 2012 GMT ++ Not After : Jan 12 20:26:32 2042 GMT ++ Subject: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 3 G3 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:b3:cb:0e:10:67:8e:ea:14:97:a7:32:2a:0a:56: ++ 36:7f:68:4c:c7:b3:6f:3a:23:14:91:ff:19:7f:a5: ++ ca:ac:ee:b3:76:9d:7a:e9:8b:1b:ab:6b:31:db:fa: ++ 0b:53:4c:af:c5:a5:1a:79:3c:8a:4c:ff:ac:df:25: ++ de:4e:d9:82:32:0b:44:de:ca:db:8c:ac:a3:6e:16: ++ 83:3b:a6:64:4b:32:89:fb:16:16:38:7e:eb:43:e2: ++ d3:74:4a:c2:62:0a:73:0a:dd:49:b3:57:d2:b0:0a: ++ 85:9d:71:3c:de:a3:cb:c0:32:f3:01:39:20:43:1b: ++ 35:d1:53:b3:b1:ee:c5:93:69:82:3e:16:b5:28:46: ++ a1:de:ea:89:09:ed:43:b8:05:46:8a:86:f5:59:47: ++ be:1b:6f:01:21:10:b9:fd:a9:d2:28:ca:10:39:09: ++ ca:13:36:cf:9c:ad:ad:40:74:79:2b:02:3f:34:ff: ++ fa:20:69:7d:d3:ee:61:f5:ba:b3:e7:30:d0:37:23: ++ 86:72:61:45:29:48:59:68:6f:77:a6:2e:81:be:07: ++ 4d:6f:af:ce:c4:45:13:91:14:70:06:8f:1f:9f:f8: ++ 87:69:b1:0e:ef:c3:89:19:eb:ea:1c:61:fc:7a:6c: ++ 8a:dc:d6:03:0b:9e:26:ba:12:dd:d4:54:39:ab:26: ++ a3:33:ea:75:81:da:2d:cd:0f:4f:e4:03:d1:ef:15: ++ 97:1b:6b:90:c5:02:90:93:66:02:21:b1:47:de:8b: ++ 9a:4a:80:b9:55:8f:b5:a2:2f:c0:d6:33:67:da:7e: ++ c4:a7:b4:04:44:eb:47:fb:e6:58:b9:f7:0c:f0:7b: ++ 2b:b1:c0:70:29:c3:40:62:2d:3b:48:69:dc:23:3c: ++ 48:eb:7b:09:79:a9:6d:da:a8:30:98:cf:80:72:03: ++ 88:a6:5b:46:ae:72:79:7c:08:03:21:65:ae:b7:e1: ++ 1c:a5:b1:2a:a2:31:de:66:04:f7:c0:74:e8:71:de: ++ ff:3d:59:cc:96:26:12:8b:85:95:57:1a:ab:6b:75: ++ 0b:44:3d:11:28:3c:7b:61:b7:e2:8f:67:4f:e5:ec: ++ 3c:4c:60:80:69:57:38:1e:01:5b:8d:55:e8:c7:df: ++ c0:cc:77:23:34:49:75:7c:f6:98:11:eb:2d:de:ed: ++ 41:2e:14:05:02:7f:e0:fe:20:eb:35:e7:11:ac:22: ++ ce:57:3d:de:c9:30:6d:10:03:85:cd:f1:ff:8c:16: ++ b5:c1:b2:3e:88:6c:60:7f:90:4f:95:f7:f6:2d:ad: ++ 01:39:07:04:fa:75:80:7d:bf:49:50:ed:ef:c9:c4: ++ 7c:1c:eb:80:7e:db:b6:d0:dd:13:fe:c9:d3:9c:d7: ++ b2:97:a9 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ C6:17:D0:BC:A8:EA:02:43:F2:1B:06:99:5D:2B:90:20:B9:D7:9C:E4 ++ Signature Algorithm: sha256WithRSAEncryption ++ 34:61:d9:56:b5:12:87:55:4d:dd:a3:35:31:46:bb:a4:07:72: ++ bc:5f:61:62:e8:a5:fb:0b:37:b1:3c:b6:b3:fa:29:9d:7f:02: ++ f5:a4:c9:a8:93:b7:7a:71:28:69:8f:73:e1:52:90:da:d5:be: ++ 3a:e5:b7:76:6a:56:80:21:df:5d:e6:e9:3a:9e:e5:3e:f6:a2: ++ 69:c7:2a:0a:b0:18:47:dc:20:70:7d:52:a3:3e:59:7c:c1:ba: ++ c9:c8:15:40:61:ca:72:d6:70:ac:d2:b7:f0:1c:e4:86:29:f0: ++ ce:ef:68:63:d0:b5:20:8a:15:61:9a:7e:86:98:b4:c9:c2:76: ++ fb:cc:ba:30:16:cc:a3:61:c6:74:13:e5:6b:ef:a3:15:ea:03: ++ fe:13:8b:64:e4:d3:c1:d2:e8:84:fb:49:d1:10:4d:79:66:eb: ++ aa:fd:f4:8d:31:1e:70:14:ad:dc:de:67:13:4c:81:15:61:bc: ++ b7:d9:91:77:71:19:81:60:bb:f0:58:a5:b5:9c:0b:f7:8f:22: ++ 55:27:c0:4b:01:6d:3b:99:0d:d4:1d:9b:63:67:2f:d0:ee:0d: ++ ca:66:bc:94:4f:a6:ad:ed:fc:ee:63:ac:57:3f:65:25:cf:b2: ++ 86:8f:d0:08:ff:b8:76:14:6e:de:e5:27:ec:ab:78:b5:53:b9: ++ b6:3f:e8:20:f9:d2:a8:be:61:46:ca:87:8c:84:f3:f9:f1:a0: ++ 68:9b:22:1e:81:26:9b:10:04:91:71:c0:06:1f:dc:a0:d3:b9: ++ 56:a7:e3:98:2d:7f:83:9d:df:8c:2b:9c:32:8e:32:94:f0:01: ++ 3c:22:2a:9f:43:c2:2e:c3:98:39:07:38:7b:fc:5e:00:42:1f: ++ f3:32:26:79:83:84:f6:e5:f0:c1:51:12:c0:0b:1e:04:23:0c: ++ 54:a5:4c:2f:49:c5:4a:d1:b6:6e:60:0d:6b:fc:6b:8b:85:24: ++ 64:b7:89:0e:ab:25:47:5b:3c:cf:7e:49:bd:c7:e9:0a:c6:da: ++ f7:7e:0e:17:08:d3:48:97:d0:71:92:f0:0f:39:3e:34:6a:1c: ++ 7d:d8:f2:22:ae:bb:69:f4:33:b4:a6:48:55:d1:0f:0e:26:e8: ++ ec:b6:0b:2d:a7:85:35:cd:fd:59:c8:9f:d1:cd:3e:5a:29:34: ++ b9:3d:84:ce:b1:65:d4:59:91:91:56:75:21:c1:77:9e:f9:7a: ++ e1:60:9d:d3:ad:04:18:f4:7c:eb:5e:93:8f:53:4a:22:29:f8: ++ 48:2b:3e:4d:86:ac:5b:7f:cb:06:99:59:60:d8:58:65:95:8d: ++ 44:d1:f7:7f:7e:27:7f:7d:ae:80:f5:07:4c:b6:3e:9c:71:54: ++ 99:04:4b:fd:58:f9:98:f4 + -----BEGIN CERTIFICATE----- + MIIFYDCCA0igAwIBAgIULvWbAiin23r/1aOp7r0DoM8Sah0wDQYJKoZIhvcNAQEL + BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc +@@ -2063,159 +5559,489 @@ PlopNLk9hM6xZdRZkZFWdSHBd575euFgndOtBBj0fOtek49TSiIp+EgrPk2GrFt/ + ywaZWWDYWGWVjUTR939+J399roD1B0y2PpxxVJkES/1Y+Zj0 + -----END CERTIFICATE----- + +-# Issuer: CN=DigiCert Assured ID Root G2 O=DigiCert Inc OU=www.digicert.com +-# Subject: CN=DigiCert Assured ID Root G2 O=DigiCert Inc OU=www.digicert.com +-# Label: "DigiCert Assured ID Root G2" +-# Serial: 15385348160840213938643033620894905419 +-# MD5 Fingerprint: 92:38:b9:f8:63:24:82:65:2c:57:33:e6:fe:81:8f:9d +-# SHA1 Fingerprint: a1:4b:48:d9:43:ee:0a:0e:40:90:4f:3c:e0:a4:c0:91:93:51:5d:3f +-# SHA256 Fingerprint: 7d:05:eb:b6:82:33:9f:8c:94:51:ee:09:4e:eb:fe:fa:79:53:a1:14:ed:b2:f4:49:49:45:2f:ab:7d:2f:c1:85 ++# 8fe4fb0af93a4d0d67db0bebb23e37c71bf325dcbcdd240ea04daf58b47e1840 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 44:57:34:24:5b:81:89:9b:35:f2:ce:b8:2b:3b:5b:a7:26:f0:75:28 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2 G3 ++ Validity ++ Not Before: Jan 12 18:59:32 2012 GMT ++ Not After : Jan 12 18:59:32 2042 GMT ++ Subject: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2 G3 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:a1:ae:25:b2:01:18:dc:57:88:3f:46:eb:f9:af: ++ e2:eb:23:71:e2:9a:d1:61:66:21:5f:aa:af:27:51: ++ e5:6e:1b:16:d4:2d:7d:50:b0:53:77:bd:78:3a:60: ++ e2:64:02:9b:7c:86:9b:d6:1a:8e:ad:ff:1f:15:7f: ++ d5:95:1e:12:cb:e6:14:84:04:c1:df:36:b3:16:9f: ++ 8a:e3:c9:db:98:34:ce:d8:33:17:28:46:fc:a7:c9: ++ f0:d2:b4:d5:4d:09:72:49:f9:f2:87:e3:a9:da:7d: ++ a1:7d:6b:b2:3a:25:a9:6d:52:44:ac:f8:be:6e:fb: ++ dc:a6:73:91:90:61:a6:03:14:20:f2:e7:87:a3:88: ++ ad:ad:a0:8c:ff:a6:0b:25:52:25:e7:16:01:d5:cb: ++ b8:35:81:0c:a3:3b:f0:e1:e1:fc:5a:5d:ce:80:71: ++ 6d:f8:49:ab:3e:3b:ba:b8:d7:80:01:fb:a5:eb:5b: ++ b3:c5:5e:60:2a:31:a0:af:37:e8:20:3a:9f:a8:32: ++ 2c:0c:cc:09:1d:d3:9e:8e:5d:bc:4c:98:ee:c5:1a: ++ 68:7b:ec:53:a6:e9:14:35:a3:df:cd:80:9f:0c:48: ++ fb:1c:f4:f1:bf:4a:b8:fa:d5:8c:71:4a:c7:1f:ad: ++ fe:41:9a:b3:83:5d:f2:84:56:ef:a5:57:43:ce:29: ++ ad:8c:ab:55:bf:c4:fb:5b:01:dd:23:21:a1:58:00: ++ 8e:c3:d0:6a:13:ed:13:e3:12:2b:80:dc:67:e6:95: ++ b2:cd:1e:22:6e:2a:f8:41:d4:f2:ca:14:07:8d:8a: ++ 55:12:c6:69:f5:b8:86:68:2f:53:5e:b0:d2:aa:21: ++ c1:98:e6:30:e3:67:55:c7:9b:6e:ac:19:a8:55:a6: ++ 45:06:d0:23:3a:db:eb:65:5d:2a:11:11:f0:3b:4f: ++ ca:6d:f4:34:c4:71:e4:ff:00:5a:f6:5c:ae:23:60: ++ 85:73:f1:e4:10:b1:25:ae:d5:92:bb:13:c1:0c:e0: ++ 39:da:b4:39:57:b5:ab:35:aa:72:21:3b:83:35:e7: ++ 31:df:7a:21:6e:b8:32:08:7d:1d:32:91:15:4a:62: ++ 72:cf:e3:77:a1:bc:d5:11:1b:76:01:67:08:e0:41: ++ 0b:c3:eb:15:6e:f8:a4:19:d9:a2:ab:af:e2:27:52: ++ 56:2b:02:8a:2c:14:24:f9:bf:42:02:bf:26:c8:c6: ++ 8f:e0:6e:38:7d:53:2d:e5:ed:98:b3:95:63:68:7f: ++ f9:35:f4:df:88:c5:60:35:92:c0:7c:69:1c:61:95: ++ 16:d0:eb:de:0b:af:3e:04:10:45:65:58:50:38:af: ++ 48:f2:59:b6:16:f2:3c:0d:90:02:c6:70:2e:01:ad: ++ 3c:15:d7 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ ED:E7:6F:76:5A:BF:60:EC:49:5B:C6:A5:77:BB:72:16:71:9B:C4:3D ++ Signature Algorithm: sha256WithRSAEncryption ++ 91:df:80:3f:43:09:7e:71:c2:f7:eb:b3:88:8f:e1:51:b2:bc: ++ 3d:75:f9:28:5d:c8:bc:99:9b:7b:5d:aa:e5:ca:e1:0a:f7:e8: ++ b2:d3:9f:dd:67:31:7e:ba:01:aa:c7:6a:41:3b:90:d4:08:5c: ++ b2:60:6a:90:f0:c8:ce:03:62:f9:8b:ed:fb:6e:2a:dc:06:4d: ++ 3c:29:0f:89:16:8a:58:4c:48:0f:e8:84:61:ea:3c:72:a6:77: ++ e4:42:ae:88:a3:43:58:79:7e:ae:ca:a5:53:0d:a9:3d:70:bd: ++ 20:19:61:a4:6c:38:fc:43:32:e1:c1:47:ff:f8:ec:f1:11:22: ++ 32:96:9c:c2:f6:5b:69:96:7b:20:0c:43:41:9a:5b:f6:59:19: ++ 88:de:55:88:37:51:0b:78:5c:0a:1e:a3:42:fd:c7:9d:88:0f: ++ c0:f2:78:02:24:54:93:af:89:87:88:c9:4a:80:1d:ea:d0:6e: ++ 3e:61:2e:36:bb:35:0e:27:96:fd:66:34:3b:61:72:73:f1:16: ++ 5c:47:06:54:49:00:7a:58:12:b0:0a:ef:85:fd:b1:b8:33:75: ++ 6a:93:1c:12:e6:60:5e:6f:1d:7f:c9:1f:23:cb:84:61:9f:1e: ++ 82:44:f9:5f:ad:62:55:24:9a:52:98:ed:51:e7:a1:7e:97:3a: ++ e6:2f:1f:11:da:53:80:2c:85:9e:ab:35:10:db:22:5f:6a:c5: ++ 5e:97:53:f2:32:02:09:30:a3:58:f0:0d:01:d5:72:c6:b1:7c: ++ 69:7b:c3:f5:36:45:cc:61:6e:5e:4c:94:c5:5e:ae:e8:0e:5e: ++ 8b:bf:f7:cd:e0:ed:a1:0e:1b:33:ee:54:18:fe:0f:be:ef:7e: ++ 84:6b:43:e3:70:98:db:5d:75:b2:0d:59:07:85:15:23:39:d6: ++ f1:df:a9:26:0f:d6:48:c7:b3:a6:22:f5:33:37:5a:95:47:9f: ++ 7b:ba:18:15:6f:ff:d6:14:64:83:49:d2:0a:67:21:db:0f:35: ++ 63:60:28:22:e3:b1:95:83:cd:85:a6:dd:2f:0f:e7:67:52:6e: ++ bb:2f:85:7c:f5:4a:73:e7:c5:3e:c0:bd:21:12:05:3f:fc:b7: ++ 03:49:02:5b:c8:25:e6:e2:54:38:f5:79:87:8c:1d:53:b2:4e: ++ 85:7b:06:38:c7:2c:f8:f8:b0:72:8d:25:e5:77:52:f4:03:1c: ++ 48:a6:50:5f:88:20:30:6e:f2:82:43:ab:3d:97:84:e7:53:fb: ++ 21:c1:4f:0f:22:9a:86:b8:59:2a:f6:47:3d:19:88:2d:e8:85: ++ e1:9e:ec:85:08:6a:b1:6c:34:c9:1d:ec:48:2b:3b:78:ed:66: ++ c4:8e:79:69:83:de:7f:8c + -----BEGIN CERTIFICATE----- +-MIIDljCCAn6gAwIBAgIQC5McOtY5Z+pnI7/Dr5r0SzANBgkqhkiG9w0BAQsFADBl +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv +-b3QgRzIwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQG +-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl +-cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIwggEi +-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5ygvUj82ckmIkzTz+GoeMVSA +-n61UQbVH35ao1K+ALbkKz3X9iaV9JPrjIgwrvJUXCzO/GU1BBpAAvQxNEP4Htecc +-biJVMWWXvdMX0h5i89vqbFCMP4QMls+3ywPgym2hFEwbid3tALBSfK+RbLE4E9Hp +-EgjAALAcKxHad3A2m67OeYfcgnDmCXRwVWmvo2ifv922ebPynXApVfSr/5Vh88lA +-bx3RvpO704gqu52/clpWcTs/1PPRCv4o76Pu2ZmvA9OPYLfykqGxvYmJHzDNw6Yu +-YjOuFgJ3RFrngQo8p0Quebg/BLxcoIfhG69Rjs3sLPr4/m3wOnyqi+RnlTGNAgMB +-AAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQW +-BBTOw0q5mVXyuNtgv6l+vVa1lzan1jANBgkqhkiG9w0BAQsFAAOCAQEAyqVVjOPI +-QW5pJ6d1Ee88hjZv0p3GeDgdaZaikmkuOGybfQTUiaWxMTeKySHMq2zNixya1r9I +-0jJmwYrA8y8678Dj1JGG0VDjA9tzd29KOVPt3ibHtX2vK0LRdWLjSisCx1BL4Gni +-lmwORGYQRI+tBev4eaymG+g3NJ1TyWGqolKvSnAWhsI6yLETcDbYz+70CjTVW0z9 +-B5yiutkBclzzTcHdDrEcDcRjvq30FPuJ7KJBDkzMyFdA0G4Dqs0MjomZmWzwPDCv +-ON9vvKO+KSAnq3T/EyJ43pdSVR6DtVQgA+6uwE9W3jfMw3+qBCe703e4YtsXfJwo +-IhNzbM8m9Yop5w== ++MIIFYDCCA0igAwIBAgIURFc0JFuBiZs18s64KztbpybwdSgwDQYJKoZIhvcNAQEL ++BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc ++BgNVBAMTFVF1b1ZhZGlzIFJvb3QgQ0EgMiBHMzAeFw0xMjAxMTIxODU5MzJaFw00 ++MjAxMTIxODU5MzJaMEgxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBM ++aW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDIgRzMwggIiMA0GCSqG ++SIb3DQEBAQUAA4ICDwAwggIKAoICAQChriWyARjcV4g/Ruv5r+LrI3HimtFhZiFf ++qq8nUeVuGxbULX1QsFN3vXg6YOJkApt8hpvWGo6t/x8Vf9WVHhLL5hSEBMHfNrMW ++n4rjyduYNM7YMxcoRvynyfDStNVNCXJJ+fKH46nafaF9a7I6JaltUkSs+L5u+9ym ++c5GQYaYDFCDy54ejiK2toIz/pgslUiXnFgHVy7g1gQyjO/Dh4fxaXc6AcW34Sas+ ++O7q414AB+6XrW7PFXmAqMaCvN+ggOp+oMiwMzAkd056OXbxMmO7FGmh77FOm6RQ1 ++o9/NgJ8MSPsc9PG/Srj61YxxSscfrf5BmrODXfKEVu+lV0POKa2Mq1W/xPtbAd0j ++IaFYAI7D0GoT7RPjEiuA3GfmlbLNHiJuKvhB1PLKFAeNilUSxmn1uIZoL1NesNKq ++IcGY5jDjZ1XHm26sGahVpkUG0CM62+tlXSoREfA7T8pt9DTEceT/AFr2XK4jYIVz ++8eQQsSWu1ZK7E8EM4DnatDlXtas1qnIhO4M15zHfeiFuuDIIfR0ykRVKYnLP43eh ++vNURG3YBZwjgQQvD6xVu+KQZ2aKrr+InUlYrAoosFCT5v0ICvybIxo/gbjh9Uy3l ++7ZizlWNof/k19N+IxWA1ksB8aRxhlRbQ694Lrz4EEEVlWFA4r0jyWbYW8jwNkALG ++cC4BrTwV1wIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB ++BjAdBgNVHQ4EFgQU7edvdlq/YOxJW8ald7tyFnGbxD0wDQYJKoZIhvcNAQELBQAD ++ggIBAJHfgD9DCX5xwvfrs4iP4VGyvD11+ShdyLyZm3tdquXK4Qr36LLTn91nMX66 ++AarHakE7kNQIXLJgapDwyM4DYvmL7ftuKtwGTTwpD4kWilhMSA/ohGHqPHKmd+RC ++roijQ1h5fq7KpVMNqT1wvSAZYaRsOPxDMuHBR//47PERIjKWnML2W2mWeyAMQ0Ga ++W/ZZGYjeVYg3UQt4XAoeo0L9x52ID8DyeAIkVJOviYeIyUqAHerQbj5hLja7NQ4n ++lv1mNDthcnPxFlxHBlRJAHpYErAK74X9sbgzdWqTHBLmYF5vHX/JHyPLhGGfHoJE +++V+tYlUkmlKY7VHnoX6XOuYvHxHaU4AshZ6rNRDbIl9qxV6XU/IyAgkwo1jwDQHV ++csaxfGl7w/U2Rcxhbl5MlMVerugOXou/983g7aEOGzPuVBj+D77vfoRrQ+NwmNtd ++dbINWQeFFSM51vHfqSYP1kjHs6Yi9TM3WpVHn3u6GBVv/9YUZINJ0gpnIdsPNWNg ++KCLjsZWDzYWm3S8P52dSbrsvhXz1SnPnxT7AvSESBT/8twNJAlvIJebiVDj1eYeM ++HVOyToV7BjjHLPj4sHKNJeV3UvQDHEimUF+IIDBu8oJDqz2XhOdT+yHBTw8imoa4 ++WSr2Rz0ZiC3oheGe7IUIarFsNMkd7EgrO3jtZsSOeWmD3n+M + -----END CERTIFICATE----- + +-# Issuer: CN=DigiCert Assured ID Root G3 O=DigiCert Inc OU=www.digicert.com +-# Subject: CN=DigiCert Assured ID Root G3 O=DigiCert Inc OU=www.digicert.com +-# Label: "DigiCert Assured ID Root G3" +-# Serial: 15459312981008553731928384953135426796 +-# MD5 Fingerprint: 7c:7f:65:31:0c:81:df:8d:ba:3e:99:e2:5c:ad:6e:fb +-# SHA1 Fingerprint: f5:17:a2:4f:9a:48:c6:c9:f8:a2:00:26:9f:dc:0f:48:2c:ab:30:89 +-# SHA256 Fingerprint: 7e:37:cb:8b:4c:47:09:0c:ab:36:55:1b:a6:f4:5d:b8:40:68:0f:ba:16:6a:95:2d:b1:00:71:7f:43:05:3f:c2 ++# 513b2cecb810d4cde5dd85391adfc6c2dd60d87bb736d2b521484aa47a0ebef6 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 0 (0x0) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = JP, O = "SECOM Trust Systems CO.,LTD.", OU = Security Communication RootCA2 ++ Validity ++ Not Before: May 29 05:00:39 2009 GMT ++ Not After : May 29 05:00:39 2029 GMT ++ Subject: C = JP, O = "SECOM Trust Systems CO.,LTD.", OU = Security Communication RootCA2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:d0:15:39:52:b1:52:b3:ba:c5:59:82:c4:5d:52: ++ ae:3a:43:65:80:4b:c7:f2:96:bc:db:36:97:d6:a6: ++ 64:8c:a8:5e:f0:e3:0a:1c:f7:df:97:3d:4b:ae:f6: ++ 5d:ec:21:b5:41:ab:cd:b9:7e:76:9f:be:f9:3e:36: ++ 34:a0:3b:c1:f6:31:11:45:74:93:3d:57:80:c5:f9: ++ 89:99:ca:e5:ab:6a:d4:b5:da:41:90:10:c1:d6:d6: ++ 42:89:c2:bf:f4:38:12:95:4c:54:05:f7:36:e4:45: ++ 83:7b:14:65:d6:dc:0c:4d:d1:de:7e:0c:ab:3b:c4: ++ 15:be:3a:56:a6:5a:6f:76:69:52:a9:7a:b9:c8:eb: ++ 6a:9a:5d:52:d0:2d:0a:6b:35:16:09:10:84:d0:6a: ++ ca:3a:06:00:37:47:e4:7e:57:4f:3f:8b:eb:67:b8: ++ 88:aa:c5:be:53:55:b2:91:c4:7d:b9:b0:85:19:06: ++ 78:2e:db:61:1a:fa:85:f5:4a:91:a1:e7:16:d5:8e: ++ a2:39:df:94:b8:70:1f:28:3f:8b:fc:40:5e:63:83: ++ 3c:83:2a:1a:99:6b:cf:de:59:6a:3b:fc:6f:16:d7: ++ 1f:fd:4a:10:eb:4e:82:16:3a:ac:27:0c:53:f1:ad: ++ d5:24:b0:6b:03:50:c1:2d:3c:16:dd:44:34:27:1a: ++ 75:fb ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 0A:85:A9:77:65:05:98:7C:40:81:F8:0F:97:2C:38:F1:0A:EC:3C:CF ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: sha256WithRSAEncryption ++ 4c:3a:a3:44:ac:b9:45:b1:c7:93:7e:c8:0b:0a:42:df:64:ea: ++ 1c:ee:59:6c:08:ba:89:5f:6a:ca:4a:95:9e:7a:8f:07:c5:da: ++ 45:72:82:71:0e:3a:d2:cc:6f:a7:b4:a1:23:bb:f6:24:9f:cb: ++ 17:fe:8c:a6:ce:c2:d2:db:cc:8d:fc:71:fc:03:29:c1:6c:5d: ++ 33:5f:64:b6:65:3b:89:6f:18:76:78:f5:dc:a2:48:1f:19:3f: ++ 8e:93:eb:f1:fa:17:ee:cd:4e:e3:04:12:55:d6:e5:e4:dd:fb: ++ 3e:05:7c:e2:1d:5e:c6:a7:bc:97:4f:68:3a:f5:e9:2e:0a:43: ++ b6:af:57:5c:62:68:7c:b7:fd:a3:8a:84:a0:ac:62:be:2b:09: ++ 87:34:f0:6a:01:bb:9b:29:56:3c:fe:00:37:cf:23:6c:f1:4e: ++ aa:b6:74:46:12:6c:91:ee:34:d5:ec:9a:91:e7:44:be:90:31: ++ 72:d5:49:02:f6:02:e5:f4:1f:eb:7c:d9:96:55:a9:ff:ec:8a: ++ f9:99:47:ff:35:5a:02:aa:04:cb:8a:5b:87:71:29:91:bd:a4: ++ b4:7a:0d:bd:9a:f5:57:23:00:07:21:17:3f:4a:39:d1:05:49: ++ 0b:a7:b6:37:81:a5:5d:8c:aa:33:5e:81:28:7c:a7:7d:27:eb: ++ 00:ae:8d:37 + -----BEGIN CERTIFICATE----- +-MIICRjCCAc2gAwIBAgIQC6Fa+h3foLVJRK/NJKBs7DAKBggqhkjOPQQDAzBlMQsw +-CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu +-ZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3Qg +-RzMwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQGEwJV +-UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu +-Y29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwdjAQBgcq +-hkjOPQIBBgUrgQQAIgNiAAQZ57ysRGXtzbg/WPuNsVepRC0FFfLvC/8QdJ+1YlJf +-Zn4f5dwbRXkLzMZTCp2NXQLZqVneAlr2lSoOjThKiknGvMYDOAdfVdp+CW7if17Q +-RSAPWXYQ1qAk8C3eNvJsKTmjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/ +-BAQDAgGGMB0GA1UdDgQWBBTL0L2p4ZgFUaFNN6KDec6NHSrkhDAKBggqhkjOPQQD +-AwNnADBkAjAlpIFFAmsSS3V0T8gj43DydXLefInwz5FyYZ5eEJJZVrmDxxDnOOlY +-JjZ91eQ0hjkCMHw2U/Aw5WJjOpnitqM7mzT6HtoQknFekROn3aRukswy1vUhZscv +-6pZjamVFkpUBtA== ++MIIDdzCCAl+gAwIBAgIBADANBgkqhkiG9w0BAQsFADBdMQswCQYDVQQGEwJKUDEl ++MCMGA1UEChMcU0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4sTFRELjEnMCUGA1UECxMe ++U2VjdXJpdHkgQ29tbXVuaWNhdGlvbiBSb290Q0EyMB4XDTA5MDUyOTA1MDAzOVoX ++DTI5MDUyOTA1MDAzOVowXTELMAkGA1UEBhMCSlAxJTAjBgNVBAoTHFNFQ09NIFRy ++dXN0IFN5c3RlbXMgQ08uLExURC4xJzAlBgNVBAsTHlNlY3VyaXR5IENvbW11bmlj ++YXRpb24gUm9vdENBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANAV ++OVKxUrO6xVmCxF1SrjpDZYBLx/KWvNs2l9amZIyoXvDjChz335c9S672XewhtUGr ++zbl+dp+++T42NKA7wfYxEUV0kz1XgMX5iZnK5atq1LXaQZAQwdbWQonCv/Q4EpVM ++VAX3NuRFg3sUZdbcDE3R3n4MqzvEFb46VqZab3ZpUql6ucjrappdUtAtCms1FgkQ ++hNBqyjoGADdH5H5XTz+L62e4iKrFvlNVspHEfbmwhRkGeC7bYRr6hfVKkaHnFtWO ++ojnflLhwHyg/i/xAXmODPIMqGplrz95Zajv8bxbXH/1KEOtOghY6rCcMU/Gt1SSw ++awNQwS08Ft1ENCcadfsCAwEAAaNCMEAwHQYDVR0OBBYEFAqFqXdlBZh8QIH4D5cs ++OPEK7DzPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3 ++DQEBCwUAA4IBAQBMOqNErLlFsceTfsgLCkLfZOoc7llsCLqJX2rKSpWeeo8HxdpF ++coJxDjrSzG+ntKEju/Ykn8sX/oymzsLS28yN/HH8AynBbF0zX2S2ZTuJbxh2ePXc ++okgfGT+Ok+vx+hfuzU7jBBJV1uXk3fs+BXziHV7Gp7yXT2g69ekuCkO2r1dcYmh8 ++t/2jioSgrGK+KwmHNPBqAbubKVY8/gA3zyNs8U6qtnRGEmyR7jTV7JqR50S+kDFy ++1UkC9gLl9B/rfNmWVan/7Ir5mUf/NVoCqgTLiluHcSmRvaS0eg29mvVXIwAHIRc/ ++SjnRBUkLp7Y3gaVdjKozXoEofKd9J+sAro03 + -----END CERTIFICATE----- + +-# Issuer: CN=DigiCert Global Root G2 O=DigiCert Inc OU=www.digicert.com +-# Subject: CN=DigiCert Global Root G2 O=DigiCert Inc OU=www.digicert.com +-# Label: "DigiCert Global Root G2" +-# Serial: 4293743540046975378534879503202253541 +-# MD5 Fingerprint: e4:a6:8a:c8:54:ac:52:42:46:0a:fd:72:48:1b:2a:44 +-# SHA1 Fingerprint: df:3c:24:f9:bf:d6:66:76:1b:26:80:73:fe:06:d1:cc:8d:4f:82:a4 +-# SHA256 Fingerprint: cb:3c:cb:b7:60:31:e5:e0:13:8f:8d:d3:9a:23:f9:de:47:ff:c3:5e:43:c1:14:4c:ea:27:d4:6a:5a:b1:cb:5f ++# 1a0d20445de5ba1862d19ef880858cbce50102b36e8f0a040c3c69e74522fe6e ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 20:a4:c4:7f:dd:df:e1:c7:53:63:07:13:88:77:60:12 ++ Signature Algorithm: sha1WithRSAEncryption ++ Issuer: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO Certification Authority ++ Validity ++ Not Before: Jan 1 00:00:00 2011 GMT ++ Not After : Dec 31 23:59:59 2030 GMT ++ Subject: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO Certification Authority ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:d0:40:8b:8b:72:e3:91:1b:f7:51:c1:1b:54:04: ++ 98:d3:a9:bf:c1:e6:8a:5d:3b:87:fb:bb:88:ce:0d: ++ e3:2f:3f:06:96:f0:a2:29:50:99:ae:db:3b:a1:57: ++ b0:74:51:71:cd:ed:42:91:4d:41:fe:a9:c8:d8:6a: ++ 86:77:44:bb:59:66:97:50:5e:b4:d4:2c:70:44:cf: ++ da:37:95:42:69:3c:30:c4:71:b3:52:f0:21:4d:a1: ++ d8:ba:39:7c:1c:9e:a3:24:9d:f2:83:16:98:aa:16: ++ 7c:43:9b:15:5b:b7:ae:34:91:fe:d4:62:26:18:46: ++ 9a:3f:eb:c1:f9:f1:90:57:eb:ac:7a:0d:8b:db:72: ++ 30:6a:66:d5:e0:46:a3:70:dc:68:d9:ff:04:48:89: ++ 77:de:b5:e9:fb:67:6d:41:e9:bc:39:bd:32:d9:62: ++ 02:f1:b1:a8:3d:6e:37:9c:e2:2f:e2:d3:a2:26:8b: ++ c6:b8:55:43:88:e1:23:3e:a5:d2:24:39:6a:47:ab: ++ 00:d4:a1:b3:a9:25:fe:0d:3f:a7:1d:ba:d3:51:c1: ++ 0b:a4:da:ac:38:ef:55:50:24:05:65:46:93:34:4f: ++ 2d:8d:ad:c6:d4:21:19:d2:8e:ca:05:61:71:07:73: ++ 47:e5:8a:19:12:bd:04:4d:ce:4e:9c:a5:48:ac:bb: ++ 26:f7 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 0B:58:E5:8B:C6:4C:15:37:A4:40:A9:30:A9:21:BE:47:36:5A:56:FF ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: sha1WithRSAEncryption ++ 2f:c9:c4:1c:07:3b:cf:61:02:00:b1:d9:21:51:75:72:03:30: ++ b0:c4:16:1f:6c:00:8b:10:ac:af:f1:47:d4:ae:10:3c:0c:1a: ++ f8:d4:93:6c:ac:10:37:7c:b7:a6:83:64:ad:cd:df:0e:87:33: ++ 9d:37:b0:c6:7b:38:72:b1:f3:1a:0e:a3:f9:55:7a:6d:03:66: ++ 03:17:95:4a:f1:b1:7a:df:56:21:06:42:8f:b1:d3:a8:85:de: ++ ee:97:1d:62:eb:a7:e7:31:12:66:c3:0f:a6:4b:2e:41:82:f7: ++ fd:c9:1b:a8:1b:af:ee:3c:ce:e3:9c:ae:28:07:a1:2c:9b:24: ++ c2:0f:23:26:83:32:8b:86:0f:1f:2b:12:46:25:16:8f:76:90: ++ 03:6b:de:bc:aa:22:68:6b:8c:a1:ac:2b:11:39:a6:db:70:c2: ++ 7d:72:e9:33:e7:fc:26:f1:74:5a:91:e6:9d:84:ac:f8:a8:06: ++ 19:46:e6:a7:e9:aa:34:22:a4:a1:9f:7a:ad:b7:b2:a4:9a:33: ++ 88:71:02:3c:2e:d6:7a:b2:1f:a2:ca:c0:dd:2f:10:94:fd:b3: ++ 8c:84:20:79:46:d5:05:d4:10:e4:d2:db:64:4f:b8:5b:ee:1b: ++ c5:20:47:5b:94:ab:6e:d4:95:33:1d:a6:15:71:f1:f8:94:ca: ++ 54:39:3e:c1 + -----BEGIN CERTIFICATE----- +-MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH +-MjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVT +-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j +-b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG +-9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI +-2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx +-1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ +-q2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz +-tCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ +-vIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo0IwQDAP +-BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV +-5uNu5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY +-1Yl9PMWLSn/pvtsrF9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4 +-NeF22d+mQrvHRAiGfzZ0JFrabA0UWTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NG +-Fdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBHQRFXGU7Aj64GxJUTFy8bJZ91 +-8rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/iyK5S9kJRaTe +-pLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl +-MrY= ++MIID0DCCArigAwIBAgIQIKTEf93f4cdTYwcTiHdgEjANBgkqhkiG9w0BAQUFADCB ++gTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G ++A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJzAlBgNV ++BAMTHkNPTU9ETyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTAxMDEwMDAw ++MDBaFw0zMDEyMzEyMzU5NTlaMIGBMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl ++YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01P ++RE8gQ0EgTGltaXRlZDEnMCUGA1UEAxMeQ09NT0RPIENlcnRpZmljYXRpb24gQXV0 ++aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECLi3LjkRv3 ++UcEbVASY06m/weaKXTuH+7uIzg3jLz8GlvCiKVCZrts7oVewdFFxze1CkU1B/qnI ++2GqGd0S7WWaXUF601CxwRM/aN5VCaTwwxHGzUvAhTaHYujl8HJ6jJJ3ygxaYqhZ8 ++Q5sVW7euNJH+1GImGEaaP+vB+fGQV+useg2L23IwambV4EajcNxo2f8ESIl33rXp +++2dtQem8Ob0y2WIC8bGoPW43nOIv4tOiJovGuFVDiOEjPqXSJDlqR6sA1KGzqSX+ ++DT+nHbrTUcELpNqsOO9VUCQFZUaTNE8tja3G1CEZ0o7KBWFxB3NH5YoZEr0ETc5O ++nKVIrLsm9wIDAQABo0IwQDAdBgNVHQ4EFgQUC1jli8ZMFTekQKkwqSG+RzZaVv8w ++DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD ++ggEBAC/JxBwHO89hAgCx2SFRdXIDMLDEFh9sAIsQrK/xR9SuEDwMGvjUk2ysEDd8 ++t6aDZK3N3w6HM503sMZ7OHKx8xoOo/lVem0DZgMXlUrxsXrfViEGQo+x06iF3u6X ++HWLrp+cxEmbDD6ZLLkGC9/3JG6gbr+48zuOcrigHoSybJMIPIyaDMouGDx8rEkYl ++Fo92kANr3ryqImhrjKGsKxE5pttwwn1y6TPn/CbxdFqR5p2ErPioBhlG5qfpqjQi ++pKGfeq23sqSaM4hxAjwu1nqyH6LKwN0vEJT9s4yEIHlG1QXUEOTS22RPuFvuG8Ug ++R1uUq27UlTMdphVx8fiUylQ5PsE= + -----END CERTIFICATE----- + +-# Issuer: CN=DigiCert Global Root G3 O=DigiCert Inc OU=www.digicert.com +-# Subject: CN=DigiCert Global Root G3 O=DigiCert Inc OU=www.digicert.com +-# Label: "DigiCert Global Root G3" +-# Serial: 7089244469030293291760083333884364146 +-# MD5 Fingerprint: f5:5d:a4:50:a5:fb:28:7e:1e:0f:0d:cc:96:57:56:ca +-# SHA1 Fingerprint: 7e:04:de:89:6a:3e:66:6d:00:e6:87:d3:3f:fa:d9:3b:e8:3d:34:9e +-# SHA256 Fingerprint: 31:ad:66:48:f8:10:41:38:c7:38:f3:9e:a4:32:01:33:39:3e:3a:18:cc:02:29:6e:f9:7c:2a:c9:ef:67:31:d0 ++# 1793927a0614549789adce2f8f34f7f0b66d0f3ae3a3b84d21ec15dbba4fadc7 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 1f:47:af:aa:62:00:70:50:54:4c:01:9e:9b:63:99:2a ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO ECC Certification Authority ++ Validity ++ Not Before: Mar 6 00:00:00 2008 GMT ++ Not After : Jan 18 23:59:59 2038 GMT ++ Subject: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO ECC Certification Authority ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:03:47:7b:2f:75:c9:82:15:85:fb:75:e4:91:16: ++ d4:ab:62:99:f5:3e:52:0b:06:ce:41:00:7f:97:e1: ++ 0a:24:3c:1d:01:04:ee:3d:d2:8d:09:97:0c:e0:75: ++ e4:fa:fb:77:8a:2a:f5:03:60:4b:36:8b:16:23:16: ++ ad:09:71:f4:4a:f4:28:50:b4:fe:88:1c:6e:3f:6c: ++ 2f:2f:09:59:5b:a5:5b:0b:33:99:e2:c3:3d:89:f9: ++ 6a:2c:ef:b2:d3:06:e9 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 75:71:A7:19:48:19:BC:9D:9D:EA:41:47:DF:94:C4:48:77:99:D3:79 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:65:02:31:00:ef:03:5b:7a:ac:b7:78:0a:72:b7:88:df:ff: ++ b5:46:14:09:0a:fa:a0:e6:7d:08:c6:1a:87:bd:18:a8:73:bd: ++ 26:ca:60:0c:9d:ce:99:9f:cf:5c:0f:30:e1:be:14:31:ea:02: ++ 30:14:f4:93:3c:49:a7:33:7a:90:46:47:b3:63:7d:13:9b:4e: ++ b7:6f:18:37:80:53:fe:dd:20:e0:35:9a:36:d1:c7:01:b9:e6: ++ dc:dd:f3:ff:1d:2c:3a:16:57:d9:92:39:d6 + -----BEGIN CERTIFICATE----- +-MIICPzCCAcWgAwIBAgIQBVVWvPJepDU1w6QP1atFcjAKBggqhkjOPQQDAzBhMQsw +-CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu +-ZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMzAe +-Fw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVTMRUw +-EwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20x +-IDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEczMHYwEAYHKoZIzj0CAQYF +-K4EEACIDYgAE3afZu4q4C/sLfyHS8L6+c/MzXRq8NOrexpu80JX28MzQC7phW1FG +-fp4tn+6OYwwX7Adw9c+ELkCDnOg/QW07rdOkFFk2eJ0DQ+4QE2xy3q6Ip6FrtUPO +-Z9wj/wMco+I+o0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAd +-BgNVHQ4EFgQUs9tIpPmhxdiuNkHMEWNpYim8S8YwCgYIKoZIzj0EAwMDaAAwZQIx +-AK288mw/EkrRLTnDCgmXc/SINoyIJ7vmiI1Qhadj+Z4y3maTD/HMsQmP3Wyr+mt/ +-oAIwOWZbwmSNuJ5Q3KjVSaLtx9zRSX8XAbjIho9OjIgrqJqpisXRAL34VOKa5Vt8 +-sycX ++MIICiTCCAg+gAwIBAgIQH0evqmIAcFBUTAGem2OZKjAKBggqhkjOPQQDAzCBhTEL ++MAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UE ++BxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMT ++IkNPTU9ETyBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDgwMzA2MDAw ++MDAwWhcNMzgwMTE4MjM1OTU5WjCBhTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdy ++ZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09N ++T0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBFQ0MgQ2VydGlmaWNhdGlv ++biBBdXRob3JpdHkwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQDR3svdcmCFYX7deSR ++FtSrYpn1PlILBs5BAH+X4QokPB0BBO490o0JlwzgdeT6+3eKKvUDYEs2ixYjFq0J ++cfRK9ChQtP6IHG4/bC8vCVlbpVsLM5niwz2J+Wos77LTBumjQjBAMB0GA1UdDgQW ++BBR1cacZSBm8nZ3qQUfflMRId5nTeTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/ ++BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjEA7wNbeqy3eApyt4jf/7VGFAkK+qDm ++fQjGGoe9GKhzvSbKYAydzpmfz1wPMOG+FDHqAjAU9JM8SaczepBGR7NjfRObTrdv ++GDeAU/7dIOA1mjbRxwG55tzd8/8dLDoWV9mSOdY= + -----END CERTIFICATE----- + +-# Issuer: CN=DigiCert Trusted Root G4 O=DigiCert Inc OU=www.digicert.com +-# Subject: CN=DigiCert Trusted Root G4 O=DigiCert Inc OU=www.digicert.com +-# Label: "DigiCert Trusted Root G4" +-# Serial: 7451500558977370777930084869016614236 +-# MD5 Fingerprint: 78:f2:fc:aa:60:1f:2f:b4:eb:c9:37:ba:53:2e:75:49 +-# SHA1 Fingerprint: dd:fb:16:cd:49:31:c9:73:a2:03:7d:3f:c8:3a:4d:7d:77:5d:05:e4 +-# SHA256 Fingerprint: 55:2f:7b:dc:f1:a7:af:9e:6c:e6:72:01:7f:4f:12:ab:f7:72:40:c7:8e:76:1a:c2:03:d1:d9:d2:0a:c8:99:88 ++# 4ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 5c:8b:99:c5:5a:94:c5:d2:71:56:de:cd:89:80:cc:26 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust ECC Certification Authority ++ Validity ++ Not Before: Feb 1 00:00:00 2010 GMT ++ Not After : Jan 18 23:59:59 2038 GMT ++ Subject: C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust ECC Certification Authority ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:1a:ac:54:5a:a9:f9:68:23:e7:7a:d5:24:6f:53: ++ c6:5a:d8:4b:ab:c6:d5:b6:d1:e6:73:71:ae:dd:9c: ++ d6:0c:61:fd:db:a0:89:03:b8:05:14:ec:57:ce:ee: ++ 5d:3f:e2:21:b3:ce:f7:d4:8a:79:e0:a3:83:7e:2d: ++ 97:d0:61:c4:f1:99:dc:25:91:63:ab:7f:30:a3:b4: ++ 70:e2:c7:a1:33:9c:f3:bf:2e:5c:53:b1:5f:b3:7d: ++ 32:7f:8a:34:e3:79:79 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:65:02:30:36:67:a1:16:08:dc:e4:97:00:41:1d:4e:be:e1: ++ 63:01:cf:3b:aa:42:11:64:a0:9d:94:39:02:11:79:5c:7b:1d: ++ fa:64:b9:ee:16:42:b3:bf:8a:c2:09:c4:ec:e4:b1:4d:02:31: ++ 00:e9:2a:61:47:8c:52:4a:4b:4e:18:70:f6:d6:44:d6:6e:f5: ++ 83:ba:6d:58:bd:24:d9:56:48:ea:ef:c4:a2:46:81:88:6a:3a: ++ 46:d1:a9:9b:4d:c9:61:da:d1:5d:57:6a:18 + -----BEGIN CERTIFICATE----- +-MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBi +-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 +-d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg +-RzQwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBiMQswCQYDVQQGEwJV +-UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu +-Y29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0GCSqG +-SIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3y +-ithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1If +-xp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDV +-ySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfISKhmV1efVFiO +-DCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jHtrHEtWoYOAMQ +-jdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6MUSaM0C/ +-CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCi +-EhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADM +-fRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QY +-uKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXK +-chYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4KJpn15GkvmB0t +-9dmpsh3lGwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB +-hjAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wDQYJKoZIhvcNAQEMBQAD +-ggIBALth2X2pbL4XxJEbw6GiAI3jZGgPVs93rnD5/ZpKmbnJeFwMDF/k5hQpVgs2 +-SV1EY+CtnJYYZhsjDT156W1r1lT40jzBQ0CuHVD1UvyQO7uYmWlrx8GnqGikJ9yd +-+SeuMIW59mdNOj6PWTkiU0TryF0Dyu1Qen1iIQqAyHNm0aAFYF/opbSnr6j3bTWc +-fFqK1qI4mfN4i/RN0iAL3gTujJtHgXINwBQy7zBZLq7gcfJW5GqXb5JQbZaNaHqa +-sjYUegbyJLkJEVDXCLG4iXqEI2FCKeWjzaIgQdfRnGTZ6iahixTXTBmyUEFxPT9N +-cCOGDErcgdLMMpSEDQgJlxxPwO5rIHQw0uA5NBCFIRUBCOhVMt5xSdkoF1BN5r5N +-0XWs0Mr7QbhDparTwwVETyw2m+L64kW4I1NsBm9nVX9GtUw/bihaeSbSpKhil9Ie +-4u1Ki7wb/UdKDd9nZn6yW0HQO+T0O/QEY+nvwlQAUaCKKsnOeMzV6ocEGLPOr0mI +-r/OSmbaz5mEP0oUA51Aa5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1 +-/YldvIViHTLSoCtU7ZpXwdv6EM8Zt4tKG48BtieVU+i2iW1bvGjUI+iLUaJW+fCm +-gKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+ ++MIICjzCCAhWgAwIBAgIQXIuZxVqUxdJxVt7NiYDMJjAKBggqhkjOPQQDAzCBiDEL ++MAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNl ++eSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMT ++JVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTAwMjAx ++MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgT ++Ck5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVUaGUg ++VVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBFQ0MgQ2VydGlm ++aWNhdGlvbiBBdXRob3JpdHkwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQarFRaqflo ++I+d61SRvU8Za2EurxtW20eZzca7dnNYMYf3boIkDuAUU7FfO7l0/4iGzzvfUinng ++o4N+LZfQYcTxmdwlkWOrfzCjtHDix6EznPO/LlxTsV+zfTJ/ijTjeXmjQjBAMB0G ++A1UdDgQWBBQ64QmG1M8ZwpZ2dEl23OA1xmNjmjAOBgNVHQ8BAf8EBAMCAQYwDwYD ++VR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjA2Z6EWCNzklwBBHU6+4WMB ++zzuqQhFkoJ2UOQIReVx7Hfpkue4WQrO/isIJxOzksU0CMQDpKmFHjFJKS04YcPbW ++RNZu9YO6bVi9JNlWSOrvxKJGgYhqOkbRqZtNyWHa0V1Xahg= + -----END CERTIFICATE----- + +-# Issuer: CN=COMODO RSA Certification Authority O=COMODO CA Limited +-# Subject: CN=COMODO RSA Certification Authority O=COMODO CA Limited +-# Label: "COMODO RSA Certification Authority" +-# Serial: 101909084537582093308941363524873193117 +-# MD5 Fingerprint: 1b:31:b0:71:40:36:cc:14:36:91:ad:c4:3e:fd:ec:18 +-# SHA1 Fingerprint: af:e5:d2:44:a8:d1:19:42:30:ff:47:9f:e2:f8:97:bb:cd:7a:8c:b4 +-# SHA256 Fingerprint: 52:f0:e1:c4:e5:8e:c6:29:29:1b:60:31:7f:07:46:71:b8:5d:7e:a8:0d:5b:07:27:34:63:53:4b:32:b4:02:34 ++# 52f0e1c4e58ec629291b60317f074671b85d7ea80d5b07273463534b32b40234 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority ++ Validity ++ Not Before: Jan 19 00:00:00 2010 GMT ++ Not After : Jan 18 23:59:59 2038 GMT ++ Subject: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:91:e8:54:92:d2:0a:56:b1:ac:0d:24:dd:c5:cf: ++ 44:67:74:99:2b:37:a3:7d:23:70:00:71:bc:53:df: ++ c4:fa:2a:12:8f:4b:7f:10:56:bd:9f:70:72:b7:61: ++ 7f:c9:4b:0f:17:a7:3d:e3:b0:04:61:ee:ff:11:97: ++ c7:f4:86:3e:0a:fa:3e:5c:f9:93:e6:34:7a:d9:14: ++ 6b:e7:9c:b3:85:a0:82:7a:76:af:71:90:d7:ec:fd: ++ 0d:fa:9c:6c:fa:df:b0:82:f4:14:7e:f9:be:c4:a6: ++ 2f:4f:7f:99:7f:b5:fc:67:43:72:bd:0c:00:d6:89: ++ eb:6b:2c:d3:ed:8f:98:1c:14:ab:7e:e5:e3:6e:fc: ++ d8:a8:e4:92:24:da:43:6b:62:b8:55:fd:ea:c1:bc: ++ 6c:b6:8b:f3:0e:8d:9a:e4:9b:6c:69:99:f8:78:48: ++ 30:45:d5:ad:e1:0d:3c:45:60:fc:32:96:51:27:bc: ++ 67:c3:ca:2e:b6:6b:ea:46:c7:c7:20:a0:b1:1f:65: ++ de:48:08:ba:a4:4e:a9:f2:83:46:37:84:eb:e8:cc: ++ 81:48:43:67:4e:72:2a:9b:5c:bd:4c:1b:28:8a:5c: ++ 22:7b:b4:ab:98:d9:ee:e0:51:83:c3:09:46:4e:6d: ++ 3e:99:fa:95:17:da:7c:33:57:41:3c:8d:51:ed:0b: ++ b6:5c:af:2c:63:1a:df:57:c8:3f:bc:e9:5d:c4:9b: ++ af:45:99:e2:a3:5a:24:b4:ba:a9:56:3d:cf:6f:aa: ++ ff:49:58:be:f0:a8:ff:f4:b8:ad:e9:37:fb:ba:b8: ++ f4:0b:3a:f9:e8:43:42:1e:89:d8:84:cb:13:f1:d9: ++ bb:e1:89:60:b8:8c:28:56:ac:14:1d:9c:0a:e7:71: ++ eb:cf:0e:dd:3d:a9:96:a1:48:bd:3c:f7:af:b5:0d: ++ 22:4c:c0:11:81:ec:56:3b:f6:d3:a2:e2:5b:b7:b2: ++ 04:22:52:95:80:93:69:e8:8e:4c:65:f1:91:03:2d: ++ 70:74:02:ea:8b:67:15:29:69:52:02:bb:d7:df:50: ++ 6a:55:46:bf:a0:a3:28:61:7f:70:d0:c3:a2:aa:2c: ++ 21:aa:47:ce:28:9c:06:45:76:bf:82:18:27:b4:d5: ++ ae:b4:cb:50:e6:6b:f4:4c:86:71:30:e9:a6:df:16: ++ 86:e0:d8:ff:40:dd:fb:d0:42:88:7f:a3:33:3a:2e: ++ 5c:1e:41:11:81:63:ce:18:71:6b:2b:ec:a6:8a:b7: ++ 31:5c:3a:6a:47:e0:c3:79:59:d6:20:1a:af:f2:6a: ++ 98:aa:72:bc:57:4a:d2:4b:9d:bb:10:fc:b0:4c:41: ++ e5:ed:1d:3d:5e:28:9d:9c:cc:bf:b3:51:da:a7:47: ++ e5:84:53 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ BB:AF:7E:02:3D:FA:A6:F1:3C:84:8E:AD:EE:38:98:EC:D9:32:32:D4 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: sha384WithRSAEncryption ++ 0a:f1:d5:46:84:b7:ae:51:bb:6c:b2:4d:41:14:00:93:4c:9c: ++ cb:e5:c0:54:cf:a0:25:8e:02:f9:fd:b0:a2:0d:f5:20:98:3c: ++ 13:2d:ac:56:a2:b0:d6:7e:11:92:e9:2e:ba:9e:2e:9a:72:b1: ++ bd:19:44:6c:61:35:a2:9a:b4:16:12:69:5a:8c:e1:d7:3e:a4: ++ 1a:e8:2f:03:f4:ae:61:1d:10:1b:2a:a4:8b:7a:c5:fe:05:a6: ++ e1:c0:d6:c8:fe:9e:ae:8f:2b:ba:3d:99:f8:d8:73:09:58:46: ++ 6e:a6:9c:f4:d7:27:d3:95:da:37:83:72:1c:d3:73:e0:a2:47: ++ 99:03:38:5d:d5:49:79:00:29:1c:c7:ec:9b:20:1c:07:24:69: ++ 57:78:b2:39:fc:3a:84:a0:b5:9c:7c:8d:bf:2e:93:62:27:b7: ++ 39:da:17:18:ae:bd:3c:09:68:ff:84:9b:3c:d5:d6:0b:03:e3: ++ 57:9e:14:f7:d1:eb:4f:c8:bd:87:23:b7:b6:49:43:79:85:5c: ++ ba:eb:92:0b:a1:c6:e8:68:a8:4c:16:b1:1a:99:0a:e8:53:2c: ++ 92:bb:a1:09:18:75:0c:65:a8:7b:cb:23:b7:1a:c2:28:85:c3: ++ 1b:ff:d0:2b:62:ef:a4:7b:09:91:98:67:8c:14:01:cd:68:06: ++ 6a:63:21:75:03:80:88:8a:6e:81:c6:85:f2:a9:a4:2d:e7:f4: ++ a5:24:10:47:83:ca:cd:f4:8d:79:58:b1:06:9b:e7:1a:2a:d9: ++ 9d:01:d7:94:7d:ed:03:4a:ca:f0:db:e8:a9:01:3e:f5:56:99: ++ c9:1e:8e:49:3d:bb:e5:09:b9:e0:4f:49:92:3d:16:82:40:cc: ++ cc:59:c6:e6:3a:ed:12:2e:69:3c:6c:95:b1:fd:aa:1d:7b:7f: ++ 86:be:1e:0e:32:46:fb:fb:13:8f:75:7f:4c:8b:4b:46:63:fe: ++ 00:34:40:70:c1:c3:b9:a1:dd:a6:70:e2:04:b3:41:bc:e9:80: ++ 91:ea:64:9c:7a:e1:22:03:a9:9c:6e:6f:0e:65:4f:6c:87:87: ++ 5e:f3:6e:a0:f9:75:a5:9b:40:e8:53:b2:27:9d:4a:b9:c0:77: ++ 21:8d:ff:87:f2:de:bc:8c:ef:17:df:b7:49:0b:d1:f2:6e:30: ++ 0b:1a:0e:4e:76:ed:11:fc:f5:e9:56:b2:7d:bf:c7:6d:0a:93: ++ 8c:a5:d0:c0:b6:1d:be:3a:4e:94:a2:d7:6e:6c:0b:c2:8a:7c: ++ fa:20:f3:c4:e4:e5:cd:0d:a8:cb:91:92:b1:7c:85:ec:b5:14: ++ 69:66:0e:82:e7:cd:ce:c8:2d:a6:51:7f:21:c1:35:53:85:06: ++ 4a:5d:9f:ad:bb:1b:5f:74 + -----BEGIN CERTIFICATE----- + MIIF2DCCA8CgAwIBAgIQTKr5yttjb+Af907YWwOGnTANBgkqhkiG9w0BAQwFADCB + hTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G +@@ -2251,13 +6077,95 @@ QOhTsiedSrnAdyGN/4fy3ryM7xfft0kL0fJuMAsaDk527RH89elWsn2/x20Kk4yl + NVOFBkpdn627G190 + -----END CERTIFICATE----- + +-# Issuer: CN=USERTrust RSA Certification Authority O=The USERTRUST Network +-# Subject: CN=USERTrust RSA Certification Authority O=The USERTRUST Network +-# Label: "USERTrust RSA Certification Authority" +-# Serial: 2645093764781058787591871645665788717 +-# MD5 Fingerprint: 1b:fe:69:d1:91:b7:19:33:a3:72:a8:0f:e1:55:e5:b5 +-# SHA1 Fingerprint: 2b:8f:1b:57:33:0d:bb:a2:d0:7a:6c:51:f7:0e:e9:0d:da:b9:ad:8e +-# SHA256 Fingerprint: e7:93:c9:b0:2f:d8:aa:13:e2:1c:31:22:8a:cc:b0:81:19:64:3b:74:9c:89:89:64:b1:74:6d:46:c3:d4:cb:d2 ++# e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2d ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority ++ Validity ++ Not Before: Feb 1 00:00:00 2010 GMT ++ Not After : Jan 18 23:59:59 2038 GMT ++ Subject: C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:80:12:65:17:36:0e:c3:db:08:b3:d0:ac:57:0d: ++ 76:ed:cd:27:d3:4c:ad:50:83:61:e2:aa:20:4d:09: ++ 2d:64:09:dc:ce:89:9f:cc:3d:a9:ec:f6:cf:c1:dc: ++ f1:d3:b1:d6:7b:37:28:11:2b:47:da:39:c6:bc:3a: ++ 19:b4:5f:a6:bd:7d:9d:a3:63:42:b6:76:f2:a9:3b: ++ 2b:91:f8:e2:6f:d0:ec:16:20:90:09:3e:e2:e8:74: ++ c9:18:b4:91:d4:62:64:db:7f:a3:06:f1:88:18:6a: ++ 90:22:3c:bc:fe:13:f0:87:14:7b:f6:e4:1f:8e:d4: ++ e4:51:c6:11:67:46:08:51:cb:86:14:54:3f:bc:33: ++ fe:7e:6c:9c:ff:16:9d:18:bd:51:8e:35:a6:a7:66: ++ c8:72:67:db:21:66:b1:d4:9b:78:03:c0:50:3a:e8: ++ cc:f0:dc:bc:9e:4c:fe:af:05:96:35:1f:57:5a:b7: ++ ff:ce:f9:3d:b7:2c:b6:f6:54:dd:c8:e7:12:3a:4d: ++ ae:4c:8a:b7:5c:9a:b4:b7:20:3d:ca:7f:22:34:ae: ++ 7e:3b:68:66:01:44:e7:01:4e:46:53:9b:33:60:f7: ++ 94:be:53:37:90:73:43:f3:32:c3:53:ef:db:aa:fe: ++ 74:4e:69:c7:6b:8c:60:93:de:c4:c7:0c:df:e1:32: ++ ae:cc:93:3b:51:78:95:67:8b:ee:3d:56:fe:0c:d0: ++ 69:0f:1b:0f:f3:25:26:6b:33:6d:f7:6e:47:fa:73: ++ 43:e5:7e:0e:a5:66:b1:29:7c:32:84:63:55:89:c4: ++ 0d:c1:93:54:30:19:13:ac:d3:7d:37:a7:eb:5d:3a: ++ 6c:35:5c:db:41:d7:12:da:a9:49:0b:df:d8:80:8a: ++ 09:93:62:8e:b5:66:cf:25:88:cd:84:b8:b1:3f:a4: ++ 39:0f:d9:02:9e:eb:12:4c:95:7c:f3:6b:05:a9:5e: ++ 16:83:cc:b8:67:e2:e8:13:9d:cc:5b:82:d3:4c:b3: ++ ed:5b:ff:de:e5:73:ac:23:3b:2d:00:bf:35:55:74: ++ 09:49:d8:49:58:1a:7f:92:36:e6:51:92:0e:f3:26: ++ 7d:1c:4d:17:bc:c9:ec:43:26:d0:bf:41:5f:40:a9: ++ 44:44:f4:99:e7:57:87:9e:50:1f:57:54:a8:3e:fd: ++ 74:63:2f:b1:50:65:09:e6:58:42:2e:43:1a:4c:b4: ++ f0:25:47:59:fa:04:1e:93:d4:26:46:4a:50:81:b2: ++ de:be:78:b7:fc:67:15:e1:c9:57:84:1e:0f:63:d6: ++ e9:62:ba:d6:5f:55:2e:ea:5c:c6:28:08:04:25:39: ++ b8:0e:2b:a9:f2:4c:97:1c:07:3f:0d:52:f5:ed:ef: ++ 2f:82:0f ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: sha384WithRSAEncryption ++ 5c:d4:7c:0d:cf:f7:01:7d:41:99:65:0c:73:c5:52:9f:cb:f8: ++ cf:99:06:7f:1b:da:43:15:9f:9e:02:55:57:96:14:f1:52:3c: ++ 27:87:94:28:ed:1f:3a:01:37:a2:76:fc:53:50:c0:84:9b:c6: ++ 6b:4e:ba:8c:21:4f:a2:8e:55:62:91:f3:69:15:d8:bc:88:e3: ++ c4:aa:0b:fd:ef:a8:e9:4b:55:2a:06:20:6d:55:78:29:19:ee: ++ 5f:30:5c:4b:24:11:55:ff:24:9a:6e:5e:2a:2b:ee:0b:4d:9f: ++ 7f:f7:01:38:94:14:95:43:07:09:fb:60:a9:ee:1c:ab:12:8c: ++ a0:9a:5e:a7:98:6a:59:6d:8b:3f:08:fb:c8:d1:45:af:18:15: ++ 64:90:12:0f:73:28:2e:c5:e2:24:4e:fc:58:ec:f0:f4:45:fe: ++ 22:b3:eb:2f:8e:d2:d9:45:61:05:c1:97:6f:a8:76:72:8f:8b: ++ 8c:36:af:bf:0d:05:ce:71:8d:e6:a6:6f:1f:6c:a6:71:62:c5: ++ d8:d0:83:72:0c:f1:67:11:89:0c:9c:13:4c:72:34:df:bc:d5: ++ 71:df:aa:71:dd:e1:b9:6c:8c:3c:12:5d:65:da:bd:57:12:b6: ++ 43:6b:ff:e5:de:4d:66:11:51:cf:99:ae:ec:17:b6:e8:71:91: ++ 8c:de:49:fe:dd:35:71:a2:15:27:94:1c:cf:61:e3:26:bb:6f: ++ a3:67:25:21:5d:e6:dd:1d:0b:2e:68:1b:3b:82:af:ec:83:67: ++ 85:d4:98:51:74:b1:b9:99:80:89:ff:7f:78:19:5c:79:4a:60: ++ 2e:92:40:ae:4c:37:2a:2c:c9:c7:62:c8:0e:5d:f7:36:5b:ca: ++ e0:25:25:01:b4:dd:1a:07:9c:77:00:3f:d0:dc:d5:ec:3d:d4: ++ fa:bb:3f:cc:85:d6:6f:7f:a9:2d:df:b9:02:f7:f5:97:9a:b5: ++ 35:da:c3:67:b0:87:4a:a9:28:9e:23:8e:ff:5c:27:6b:e1:b0: ++ 4f:f3:07:ee:00:2e:d4:59:87:cb:52:41:95:ea:f4:47:d7:ee: ++ 64:41:55:7c:8d:59:02:95:dd:62:9d:c2:b9:ee:5a:28:74:84: ++ a5:9b:b7:90:c7:0c:07:df:f5:89:36:74:32:d6:28:c1:b0:b0: ++ 0b:e0:9c:4c:c3:1c:d6:fc:e3:69:b5:47:46:81:2f:a2:82:ab: ++ d3:63:44:70:c4:8d:ff:2d:33:ba:ad:8f:7b:b5:70:88:ae:3e: ++ 19:cf:40:28:d8:fc:c8:90:bb:5d:99:22:f5:52:e6:58:c5:1f: ++ 88:31:43:ee:88:1d:d7:c6:8e:3c:43:6a:1d:a7:18:de:7d:3d: ++ 16:f1:62:f9:ca:90:a8:fd + -----BEGIN CERTIFICATE----- + MIIF3jCCA8agAwIBAgIQAf1tMPyjylGoG7xkDjUDLTANBgkqhkiG9w0BAQwFADCB + iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl +@@ -2293,1590 +6201,203 @@ L6KCq9NjRHDEjf8tM7qtj3u1cIiuPhnPQCjY/MiQu12ZIvVS5ljFH4gxQ+6IHdfG + jjxDah2nGN59PRbxYvnKkKj9 + -----END CERTIFICATE----- + +-# Issuer: CN=USERTrust ECC Certification Authority O=The USERTRUST Network +-# Subject: CN=USERTrust ECC Certification Authority O=The USERTRUST Network +-# Label: "USERTrust ECC Certification Authority" +-# Serial: 123013823720199481456569720443997572134 +-# MD5 Fingerprint: fa:68:bc:d9:b5:7f:ad:fd:c9:1d:06:83:28:cc:24:c1 +-# SHA1 Fingerprint: d1:cb:ca:5d:b2:d5:2a:7f:69:3b:67:4d:e5:f0:5a:1d:0c:95:7d:f0 +-# SHA256 Fingerprint: 4f:f4:60:d5:4b:9c:86:da:bf:bc:fc:57:12:e0:40:0d:2b:ed:3f:bc:4d:4f:bd:aa:86:e0:6a:dc:d2:a9:ad:7a ++# 55903859c8c0c3ebb8759ece4e2557225ff5758bbd38ebd48276601e1bd58097 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 08:bd:85:97:6c:99:27:a4:80:68:47:3b ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P384 Certification Authority ++ Validity ++ Not Before: Aug 23 19:36:43 2017 GMT ++ Not After : Aug 23 19:36:43 2042 GMT ++ Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P384 Certification Authority ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:6b:da:0d:75:35:08:31:47:05:ae:45:99:55:f1: ++ 11:13:2e:4a:f8:10:31:23:a3:7e:83:d3:7f:28:08: ++ 3a:26:1a:3a:cf:97:82:1f:80:b7:27:09:8f:d1:8e: ++ 30:c4:0a:9b:0e:ac:58:04:ab:f7:36:7d:94:23:a4: ++ 9b:0a:8a:8b:ab:eb:fd:39:25:66:f1:5e:fe:8c:ae: ++ 8d:41:79:9d:09:60:ce:28:a9:d3:8a:6d:f3:d6:45: ++ d4:f2:98:84:38:65:a0 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ 55:A9:84:89:D2:C1:32:BD:18:CB:6C:A6:07:4E:C8:E7:9D:BE:82:90 ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:64:02:30:37:01:92:97:45:12:7e:a0:f3:3e:ad:19:3a:72: ++ dd:f4:50:93:03:12:be:44:d2:4f:41:a4:8c:9c:9d:1f:a3:f6: ++ c2:92:e7:48:14:fe:4e:9b:a5:91:57:ae:c6:37:72:bb:02:30: ++ 67:25:0a:b1:0c:5e:ee:a9:63:92:6f:e5:90:0b:fe:66:22:ca: ++ 47:fd:8a:31:f7:83:fe:7a:bf:10:be:18:2b:1e:8f:f6:29:1e: ++ 94:59:ef:8e:21:37:cb:51:98:a5:6e:4b + -----BEGIN CERTIFICATE----- +-MIICjzCCAhWgAwIBAgIQXIuZxVqUxdJxVt7NiYDMJjAKBggqhkjOPQQDAzCBiDEL +-MAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNl +-eSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMT +-JVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTAwMjAx +-MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgT +-Ck5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVUaGUg +-VVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBFQ0MgQ2VydGlm +-aWNhdGlvbiBBdXRob3JpdHkwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQarFRaqflo +-I+d61SRvU8Za2EurxtW20eZzca7dnNYMYf3boIkDuAUU7FfO7l0/4iGzzvfUinng +-o4N+LZfQYcTxmdwlkWOrfzCjtHDix6EznPO/LlxTsV+zfTJ/ijTjeXmjQjBAMB0G +-A1UdDgQWBBQ64QmG1M8ZwpZ2dEl23OA1xmNjmjAOBgNVHQ8BAf8EBAMCAQYwDwYD +-VR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjA2Z6EWCNzklwBBHU6+4WMB +-zzuqQhFkoJ2UOQIReVx7Hfpkue4WQrO/isIJxOzksU0CMQDpKmFHjFJKS04YcPbW +-RNZu9YO6bVi9JNlWSOrvxKJGgYhqOkbRqZtNyWHa0V1Xahg= ++MIICnTCCAiSgAwIBAgIMCL2Fl2yZJ6SAaEc7MAoGCCqGSM49BAMDMIGRMQswCQYD ++VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf ++BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3 ++YXZlIEdsb2JhbCBFQ0MgUDM4NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x ++NzA4MjMxOTM2NDNaFw00MjA4MjMxOTM2NDNaMIGRMQswCQYDVQQGEwJVUzERMA8G ++A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0 ++d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF ++Q0MgUDM4NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTB2MBAGByqGSM49AgEGBSuB ++BAAiA2IABGvaDXU1CDFHBa5FmVXxERMuSvgQMSOjfoPTfygIOiYaOs+Xgh+AtycJ ++j9GOMMQKmw6sWASr9zZ9lCOkmwqKi6vr/TklZvFe/oyujUF5nQlgziip04pt89ZF ++1PKYhDhloKNDMEEwDwYDVR0TAQH/BAUwAwEB/zAPBgNVHQ8BAf8EBQMDBwYAMB0G ++A1UdDgQWBBRVqYSJ0sEyvRjLbKYHTsjnnb6CkDAKBggqhkjOPQQDAwNnADBkAjA3 ++AZKXRRJ+oPM+rRk6ct30UJMDEr5E0k9BpIycnR+j9sKS50gU/k6bpZFXrsY3crsC ++MGclCrEMXu6pY5Jv5ZAL/mYiykf9ijH3g/56vxC+GCsej/YpHpRZ744hN8tRmKVu ++Sw== + -----END CERTIFICATE----- + +-# Issuer: CN=GlobalSign O=GlobalSign OU=GlobalSign ECC Root CA - R4 +-# Subject: CN=GlobalSign O=GlobalSign OU=GlobalSign ECC Root CA - R4 +-# Label: "GlobalSign ECC Root CA - R4" +-# Serial: 14367148294922964480859022125800977897474 +-# MD5 Fingerprint: 20:f0:27:68:d1:7e:a0:9d:0e:e6:2a:ca:df:5c:89:8e +-# SHA1 Fingerprint: 69:69:56:2e:40:80:f4:24:a1:e7:19:9f:14:ba:f3:ee:58:ab:6a:bb +-# SHA256 Fingerprint: be:c9:49:11:c2:95:56:76:db:6c:0a:55:09:86:d7:6e:3b:a0:05:66:7c:44:2c:97:62:b4:fb:b7:73:de:22:8c ++# 945bbc825ea554f489d1fd51a73ddf2ea624ac7019a05205225c22a78ccfa8b4 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 0d:6a:5f:08:3f:28:5c:3e:51:95:df:5d ++ Signature Algorithm: ecdsa-with-SHA256 ++ Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P256 Certification Authority ++ Validity ++ Not Before: Aug 23 19:35:10 2017 GMT ++ Not After : Aug 23 19:35:10 2042 GMT ++ Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P256 Certification Authority ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (256 bit) ++ pub: ++ 04:7e:fb:6c:e6:23:e3:73:32:08:ca:60:e6:53:9c: ++ ba:74:8d:18:b0:78:90:52:80:dd:38:c0:4a:1d:d1: ++ a8:cc:93:a4:97:06:38:ca:0d:15:62:c6:8e:01:2a: ++ 65:9d:aa:df:34:91:2e:81:c1:e4:33:92:31:c4:fd: ++ 09:3a:a6:3f:ad ++ ASN1 OID: prime256v1 ++ NIST CURVE: P-256 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ A3:41:06:AC:90:6D:D1:4A:EB:75:A5:4A:10:99:B3:B1:A1:8B:4A:F7 ++ Signature Algorithm: ecdsa-with-SHA256 ++ 30:44:02:20:07:e6:54:da:0e:a0:5a:b2:ae:11:9f:87:c5:b6: ++ ff:69:de:25:be:f8:a0:b7:08:f3:44:ce:2a:df:08:21:0c:37: ++ 02:20:2d:26:03:a0:05:bd:6b:d1:f6:5c:f8:65:cc:86:6d:b3: ++ 9c:34:48:63:84:09:c5:8d:77:1a:e2:cc:9c:e1:74:7b + -----BEGIN CERTIFICATE----- +-MIIB4TCCAYegAwIBAgIRKjikHJYKBN5CsiilC+g0mAIwCgYIKoZIzj0EAwIwUDEk +-MCIGA1UECxMbR2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI0MRMwEQYDVQQKEwpH +-bG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWduMB4XDTEyMTExMzAwMDAwMFoX +-DTM4MDExOTAzMTQwN1owUDEkMCIGA1UECxMbR2xvYmFsU2lnbiBFQ0MgUm9vdCBD +-QSAtIFI0MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWdu +-MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEuMZ5049sJQ6fLjkZHAOkrprlOQcJ +-FspjsbmG+IpXwVfOQvpzofdlQv8ewQCybnMO/8ch5RikqtlxP6jUuc6MHaNCMEAw +-DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFFSwe61F +-uOJAf/sKbvu+M8k8o4TVMAoGCCqGSM49BAMCA0gAMEUCIQDckqGgE6bPA7DmxCGX +-kPoUVy0D7O48027KqGx2vKLeuwIgJ6iFJzWbVsaj8kfSt24bAgAXqmemFZHe+pTs +-ewv4n4Q= ++MIICYDCCAgegAwIBAgIMDWpfCD8oXD5Rld9dMAoGCCqGSM49BAMCMIGRMQswCQYD ++VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf ++BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3 ++YXZlIEdsb2JhbCBFQ0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x ++NzA4MjMxOTM1MTBaFw00MjA4MjMxOTM1MTBaMIGRMQswCQYDVQQGEwJVUzERMA8G ++A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0 ++d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF ++Q0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTBZMBMGByqGSM49AgEGCCqG ++SM49AwEHA0IABH77bOYj43MyCMpg5lOcunSNGLB4kFKA3TjASh3RqMyTpJcGOMoN ++FWLGjgEqZZ2q3zSRLoHB5DOSMcT9CTqmP62jQzBBMA8GA1UdEwEB/wQFMAMBAf8w ++DwYDVR0PAQH/BAUDAwcGADAdBgNVHQ4EFgQUo0EGrJBt0UrrdaVKEJmzsaGLSvcw ++CgYIKoZIzj0EAwIDRwAwRAIgB+ZU2g6gWrKuEZ+Hxbb/ad4lvvigtwjzRM4q3wgh ++DDcCIC0mA6AFvWvR9lz4ZcyGbbOcNEhjhAnFjXca4syc4XR7 + -----END CERTIFICATE----- + +-# Issuer: CN=GlobalSign O=GlobalSign OU=GlobalSign ECC Root CA - R5 +-# Subject: CN=GlobalSign O=GlobalSign OU=GlobalSign ECC Root CA - R5 +-# Label: "GlobalSign ECC Root CA - R5" +-# Serial: 32785792099990507226680698011560947931244 +-# MD5 Fingerprint: 9f:ad:3b:1c:02:1e:8a:ba:17:74:38:81:0c:a2:bc:08 +-# SHA1 Fingerprint: 1f:24:c6:30:cd:a4:18:ef:20:69:ff:ad:4f:dd:5f:46:3a:1b:69:aa +-# SHA256 Fingerprint: 17:9f:bc:14:8a:3d:d0:0f:d2:4e:a1:34:58:cc:43:bf:a7:f5:9c:81:82:d7:83:a5:13:f6:eb:ec:10:0c:89:24 +------BEGIN CERTIFICATE----- +-MIICHjCCAaSgAwIBAgIRYFlJ4CYuu1X5CneKcflK2GwwCgYIKoZIzj0EAwMwUDEk +-MCIGA1UECxMbR2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI1MRMwEQYDVQQKEwpH +-bG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWduMB4XDTEyMTExMzAwMDAwMFoX +-DTM4MDExOTAzMTQwN1owUDEkMCIGA1UECxMbR2xvYmFsU2lnbiBFQ0MgUm9vdCBD +-QSAtIFI1MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWdu +-MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAER0UOlvt9Xb/pOdEh+J8LttV7HpI6SFkc +-8GIxLcB6KP4ap1yztsyX50XUWPrRd21DosCHZTQKH3rd6zwzocWdTaRvQZU4f8ke +-hOvRnkmSh5SHDDqFSmafnVmTTZdhBoZKo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYD +-VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUPeYpSJvqB8ohREom3m7e0oPQn1kwCgYI +-KoZIzj0EAwMDaAAwZQIxAOVpEslu28YxuglB4Zf4+/2a4n0Sye18ZNPLBSWLVtmg +-515dTguDnFt2KaAJJiFqYgIwcdK1j1zqO+F4CYWodZI7yFz9SO8NdCKoCOJuxUnO +-xwy8p2Fp8fc74SrL+SvzZpA3 +------END CERTIFICATE----- +- +-# Issuer: CN=Staat der Nederlanden EV Root CA O=Staat der Nederlanden +-# Subject: CN=Staat der Nederlanden EV Root CA O=Staat der Nederlanden +-# Label: "Staat der Nederlanden EV Root CA" +-# Serial: 10000013 +-# MD5 Fingerprint: fc:06:af:7b:e8:1a:f1:9a:b4:e8:d2:70:1f:c0:f5:ba +-# SHA1 Fingerprint: 76:e2:7e:c1:4f:db:82:c1:c0:a6:75:b5:05:be:3d:29:b4:ed:db:bb +-# SHA256 Fingerprint: 4d:24:91:41:4c:fe:95:67:46:ec:4c:ef:a6:cf:6f:72:e2:8a:13:29:43:2f:9d:8a:90:7a:c4:cb:5d:ad:c1:5a +------BEGIN CERTIFICATE----- +-MIIFcDCCA1igAwIBAgIEAJiWjTANBgkqhkiG9w0BAQsFADBYMQswCQYDVQQGEwJO +-TDEeMBwGA1UECgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSkwJwYDVQQDDCBTdGFh +-dCBkZXIgTmVkZXJsYW5kZW4gRVYgUm9vdCBDQTAeFw0xMDEyMDgxMTE5MjlaFw0y +-MjEyMDgxMTEwMjhaMFgxCzAJBgNVBAYTAk5MMR4wHAYDVQQKDBVTdGFhdCBkZXIg +-TmVkZXJsYW5kZW4xKTAnBgNVBAMMIFN0YWF0IGRlciBOZWRlcmxhbmRlbiBFViBS +-b290IENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA48d+ifkkSzrS +-M4M1LGns3Amk41GoJSt5uAg94JG6hIXGhaTK5skuU6TJJB79VWZxXSzFYGgEt9nC +-UiY4iKTWO0Cmws0/zZiTs1QUWJZV1VD+hq2kY39ch/aO5ieSZxeSAgMs3NZmdO3d +-Z//BYY1jTw+bbRcwJu+r0h8QoPnFfxZpgQNH7R5ojXKhTbImxrpsX23Wr9GxE46p +-rfNeaXUmGD5BKyF/7otdBwadQ8QpCiv8Kj6GyzyDOvnJDdrFmeK8eEEzduG/L13l +-pJhQDBXd4Pqcfzho0LKmeqfRMb1+ilgnQ7O6M5HTp5gVXJrm0w912fxBmJc+qiXb +-j5IusHsMX/FjqTf5m3VpTCgmJdrV8hJwRVXj33NeN/UhbJCONVrJ0yPr08C+eKxC +-KFhmpUZtcALXEPlLVPxdhkqHz3/KRawRWrUgUY0viEeXOcDPusBCAUCZSCELa6fS +-/ZbV0b5GnUngC6agIk440ME8MLxwjyx1zNDFjFE7PZQIZCZhfbnDZY8UnCHQqv0X +-cgOPvZuM5l5Tnrmd74K74bzickFbIZTTRTeU0d8JOV3nI6qaHcptqAqGhYqCvkIH +-1vI4gnPah1vlPNOePqc7nvQDs/nxfRN0Av+7oeX6AHkcpmZBiFxgV6YuCcS6/ZrP +-px9Aw7vMWgpVSzs4dlG4Y4uElBbmVvMCAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB +-/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFP6rAJCYniT8qcwaivsnuL8wbqg7 +-MA0GCSqGSIb3DQEBCwUAA4ICAQDPdyxuVr5Os7aEAJSrR8kN0nbHhp8dB9O2tLsI +-eK9p0gtJ3jPFrK3CiAJ9Brc1AsFgyb/E6JTe1NOpEyVa/m6irn0F3H3zbPB+po3u +-2dfOWBfoqSmuc0iH55vKbimhZF8ZE/euBhD/UcabTVUlT5OZEAFTdfETzsemQUHS +-v4ilf0X8rLiltTMMgsT7B/Zq5SWEXwbKwYY5EdtYzXc7LMJMD16a4/CrPmEbUCTC +-wPTxGfARKbalGAKb12NMcIxHowNDXLldRqANb/9Zjr7dn3LDWyvfjFvO5QxGbJKy +-CqNMVEIYFRIYvdr8unRu/8G2oGTYqV9Vrp9canaW2HNnh/tNf1zuacpzEPuKqf2e +-vTY4SUmH9A4U8OmHuD+nT3pajnnUk+S7aFKErGzp85hwVXIy+TSrK0m1zSBi5Dp6 +-Z2Orltxtrpfs/J92VoguZs9btsmksNcFuuEnL5O7Jiqik7Ab846+HUCjuTaPPoIa +-Gl6I6lD4WeKDRikL40Rc4ZW2aZCaFG+XroHPaO+Zmr615+F/+PoTRxZMzG0IQOeL +-eG9QgkRQP2YGiqtDhFZKDyAthg710tvSeopLzaXoTvFeJiUBWSOgftL2fiFX1ye8 +-FVdMpEbB4IMeDExNH08GGeL5qPQ6gqGyeUN51q1veieQA6TqJIc/2b3Z6fJfUEkc +-7uzXLg== +------END CERTIFICATE----- +- +-# Issuer: CN=IdenTrust Commercial Root CA 1 O=IdenTrust +-# Subject: CN=IdenTrust Commercial Root CA 1 O=IdenTrust +-# Label: "IdenTrust Commercial Root CA 1" +-# Serial: 13298821034946342390520003877796839426 +-# MD5 Fingerprint: b3:3e:77:73:75:ee:a0:d3:e3:7e:49:63:49:59:bb:c7 +-# SHA1 Fingerprint: df:71:7e:aa:4a:d9:4e:c9:55:84:99:60:2d:48:de:5f:bc:f0:3a:25 +-# SHA256 Fingerprint: 5d:56:49:9b:e4:d2:e0:8b:cf:ca:d0:8a:3e:38:72:3d:50:50:3b:de:70:69:48:e4:2f:55:60:30:19:e5:28:ae +------BEGIN CERTIFICATE----- +-MIIFYDCCA0igAwIBAgIQCgFCgAAAAUUjyES1AAAAAjANBgkqhkiG9w0BAQsFADBK +-MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVu +-VHJ1c3QgQ29tbWVyY2lhbCBSb290IENBIDEwHhcNMTQwMTE2MTgxMjIzWhcNMzQw +-MTE2MTgxMjIzWjBKMQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MScw +-JQYDVQQDEx5JZGVuVHJ1c3QgQ29tbWVyY2lhbCBSb290IENBIDEwggIiMA0GCSqG +-SIb3DQEBAQUAA4ICDwAwggIKAoICAQCnUBneP5k91DNG8W9RYYKyqU+PZ4ldhNlT +-3Qwo2dfw/66VQ3KZ+bVdfIrBQuExUHTRgQ18zZshq0PirK1ehm7zCYofWjK9ouuU +-+ehcCuz/mNKvcbO0U59Oh++SvL3sTzIwiEsXXlfEU8L2ApeN2WIrvyQfYo3fw7gp +-S0l4PJNgiCL8mdo2yMKi1CxUAGc1bnO/AljwpN3lsKImesrgNqUZFvX9t++uP0D1 +-bVoE/c40yiTcdCMbXTMTEl3EASX2MN0CXZ/g1Ue9tOsbobtJSdifWwLziuQkkORi +-T0/Br4sOdBeo0XKIanoBScy0RnnGF7HamB4HWfp1IYVl3ZBWzvurpWCdxJ35UrCL +-vYf5jysjCiN2O/cz4ckA82n5S6LgTrx+kzmEB/dEcH7+B1rlsazRGMzyNeVJSQjK +-Vsk9+w8YfYs7wRPCTY/JTw436R+hDmrfYi7LNQZReSzIJTj0+kuniVyc0uMNOYZK +-dHzVWYfCP04MXFL0PfdSgvHqo6z9STQaKPNBiDoT7uje/5kdX7rL6B7yuVBgwDHT +-c+XvvqDtMwt0viAgxGds8AgDelWAf0ZOlqf0Hj7h9tgJ4TNkK2PXMl6f+cB7D3hv +-l7yTmvmcEpB4eoCHFddydJxVdHixuuFucAS6T6C6aMN7/zHwcz09lCqxC0EOoP5N +-iGVreTO01wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB +-/zAdBgNVHQ4EFgQU7UQZwNPwBovupHu+QucmVMiONnYwDQYJKoZIhvcNAQELBQAD +-ggIBAA2ukDL2pkt8RHYZYR4nKM1eVO8lvOMIkPkp165oCOGUAFjvLi5+U1KMtlwH +-6oi6mYtQlNeCgN9hCQCTrQ0U5s7B8jeUeLBfnLOic7iPBZM4zY0+sLj7wM+x8uwt +-LRvM7Kqas6pgghstO8OEPVeKlh6cdbjTMM1gCIOQ045U8U1mwF10A0Cj7oV+wh93 +-nAbowacYXVKV7cndJZ5t+qntozo00Fl72u1Q8zW/7esUTTHHYPTa8Yec4kjixsU3 +-+wYQ+nVZZjFHKdp2mhzpgq7vmrlR94gjmmmVYjzlVYA211QC//G5Xc7UI2/YRYRK +-W2XviQzdFKcgyxilJbQN+QHwotL0AMh0jqEqSI5l2xPE4iUXfeu+h1sXIFRRk0pT +-AwvsXcoz7WL9RccvW9xYoIA55vrX/hMUpu09lEpCdNTDd1lzzY9GvlU47/rokTLq +-l1gEIt44w8y8bckzOmoKaT+gyOpyj4xjhiO9bTyWnpXgSUyqorkqG5w2gXjtw+hG +-4iZZRHUe2XWJUc0QhJ1hYMtd+ZciTY6Y5uN/9lu7rs3KSoFrXgvzUeF0K+l+J6fZ +-mUlO+KWA2yUPHGNiiskzZ2s8EIPGrd6ozRaOjfAHN3Gf8qv8QfXBi+wAN10J5U6A +-7/qxXDgGpRtK4dw4LTzcqx+QGtVKnO7RcGzM7vRX+Bi6hG6H +------END CERTIFICATE----- +- +-# Issuer: CN=IdenTrust Public Sector Root CA 1 O=IdenTrust +-# Subject: CN=IdenTrust Public Sector Root CA 1 O=IdenTrust +-# Label: "IdenTrust Public Sector Root CA 1" +-# Serial: 13298821034946342390521976156843933698 +-# MD5 Fingerprint: 37:06:a5:b0:fc:89:9d:ba:f4:6b:8c:1a:64:cd:d5:ba +-# SHA1 Fingerprint: ba:29:41:60:77:98:3f:f4:f3:ef:f2:31:05:3b:2e:ea:6d:4d:45:fd +-# SHA256 Fingerprint: 30:d0:89:5a:9a:44:8a:26:20:91:63:55:22:d1:f5:20:10:b5:86:7a:ca:e1:2c:78:ef:95:8f:d4:f4:38:9f:2f +------BEGIN CERTIFICATE----- +-MIIFZjCCA06gAwIBAgIQCgFCgAAAAUUjz0Z8AAAAAjANBgkqhkiG9w0BAQsFADBN +-MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MSowKAYDVQQDEyFJZGVu +-VHJ1c3QgUHVibGljIFNlY3RvciBSb290IENBIDEwHhcNMTQwMTE2MTc1MzMyWhcN +-MzQwMTE2MTc1MzMyWjBNMQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0 +-MSowKAYDVQQDEyFJZGVuVHJ1c3QgUHVibGljIFNlY3RvciBSb290IENBIDEwggIi +-MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2IpT8pEiv6EdrCvsnduTyP4o7 +-ekosMSqMjbCpwzFrqHd2hCa2rIFCDQjrVVi7evi8ZX3yoG2LqEfpYnYeEe4IFNGy +-RBb06tD6Hi9e28tzQa68ALBKK0CyrOE7S8ItneShm+waOh7wCLPQ5CQ1B5+ctMlS +-bdsHyo+1W/CD80/HLaXIrcuVIKQxKFdYWuSNG5qrng0M8gozOSI5Cpcu81N3uURF +-/YTLNiCBWS2ab21ISGHKTN9T0a9SvESfqy9rg3LvdYDaBjMbXcjaY8ZNzaxmMc3R +-3j6HEDbhuaR672BQssvKplbgN6+rNBM5Jeg5ZuSYeqoSmJxZZoY+rfGwyj4GD3vw +-EUs3oERte8uojHH01bWRNszwFcYr3lEXsZdMUD2xlVl8BX0tIdUAvwFnol57plzy +-9yLxkA2T26pEUWbMfXYD62qoKjgZl3YNa4ph+bz27nb9cCvdKTz4Ch5bQhyLVi9V +-GxyhLrXHFub4qjySjmm2AcG1hp2JDws4lFTo6tyePSW8Uybt1as5qsVATFSrsrTZ +-2fjXctscvG29ZV/viDUqZi/u9rNl8DONfJhBaUYPQxxp+pu10GFqzcpL2UyQRqsV +-WaFHVCkugyhfHMKiq3IXAAaOReyL4jM9f9oZRORicsPfIsbyVtTdX5Vy7W1f90gD +-W/3FKqD2cyOEEBsB5wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/ +-BAUwAwEB/zAdBgNVHQ4EFgQU43HgntinQtnbcZFrlJPrw6PRFKMwDQYJKoZIhvcN +-AQELBQADggIBAEf63QqwEZE4rU1d9+UOl1QZgkiHVIyqZJnYWv6IAcVYpZmxI1Qj +-t2odIFflAWJBF9MJ23XLblSQdf4an4EKwt3X9wnQW3IV5B4Jaj0z8yGa5hV+rVHV +-DRDtfULAj+7AmgjVQdZcDiFpboBhDhXAuM/FSRJSzL46zNQuOAXeNf0fb7iAaJg9 +-TaDKQGXSc3z1i9kKlT/YPyNtGtEqJBnZhbMX73huqVjRI9PHE+1yJX9dsXNw0H8G +-lwmEKYBhHfpe/3OsoOOJuBxxFcbeMX8S3OFtm6/n6J91eEyrRjuazr8FGF1NFTwW +-mhlQBJqymm9li1JfPFgEKCXAZmExfrngdbkaqIHWchezxQMxNRF4eKLg6TCMf4Df +-WN88uieW4oA0beOY02QnrEh+KHdcxiVhJfiFDGX6xDIvpZgF5PgLZxYWxoK4Mhn5 +-+bl53B/N66+rDt0b20XkeucC4pVd/GnwU2lhlXV5C15V5jgclKlZM57IcXR5f1GJ +-tshquDDIajjDbp7hNxbqBWJMWxJH7ae0s1hWx0nzfxJoCTFx8G34Tkf71oXuxVhA +-GaQdp/lLQzfcaFpPz+vCZHTetBXZ9FRUGi8c15dxVJCO2SCdUyt/q4/i6jC8UDfv +-8Ue1fXwsBOxonbRJRBD0ckscZOf85muQ3Wl9af0AVqW3rLatt8o+Ae+c +------END CERTIFICATE----- +- +-# Issuer: CN=Entrust Root Certification Authority - G2 O=Entrust, Inc. OU=See www.entrust.net/legal-terms/(c) 2009 Entrust, Inc. - for authorized use only +-# Subject: CN=Entrust Root Certification Authority - G2 O=Entrust, Inc. OU=See www.entrust.net/legal-terms/(c) 2009 Entrust, Inc. - for authorized use only +-# Label: "Entrust Root Certification Authority - G2" +-# Serial: 1246989352 +-# MD5 Fingerprint: 4b:e2:c9:91:96:65:0c:f4:0e:5a:93:92:a0:0a:fe:b2 +-# SHA1 Fingerprint: 8c:f4:27:fd:79:0c:3a:d1:66:06:8d:e8:1e:57:ef:bb:93:22:72:d4 +-# SHA256 Fingerprint: 43:df:57:74:b0:3e:7f:ef:5f:e4:0d:93:1a:7b:ed:f1:bb:2e:6b:42:73:8c:4e:6d:38:41:10:3d:3a:a7:f3:39 +------BEGIN CERTIFICATE----- +-MIIEPjCCAyagAwIBAgIESlOMKDANBgkqhkiG9w0BAQsFADCBvjELMAkGA1UEBhMC +-VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50 +-cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDA5IEVudHJ1c3Qs +-IEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEyMDAGA1UEAxMpRW50cnVz +-dCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIwHhcNMDkwNzA3MTcy +-NTU0WhcNMzAxMjA3MTc1NTU0WjCBvjELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVu +-dHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwt +-dGVybXMxOTA3BgNVBAsTMChjKSAyMDA5IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0 +-aG9yaXplZCB1c2Ugb25seTEyMDAGA1UEAxMpRW50cnVzdCBSb290IENlcnRpZmlj +-YXRpb24gQXV0aG9yaXR5IC0gRzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK +-AoIBAQC6hLZy254Ma+KZ6TABp3bqMriVQRrJ2mFOWHLP/vaCeb9zYQYKpSfYs1/T +-RU4cctZOMvJyig/3gxnQaoCAAEUesMfnmr8SVycco2gvCoe9amsOXmXzHHfV1IWN +-cCG0szLni6LVhjkCsbjSR87kyUnEO6fe+1R9V77w6G7CebI6C1XiUJgWMhNcL3hW +-wcKUs/Ja5CeanyTXxuzQmyWC48zCxEXFjJd6BmsqEZ+pCm5IO2/b1BEZQvePB7/1 +-U1+cPvQXLOZprE4yTGJ36rfo5bs0vBmLrpxR57d+tVOxMyLlbc9wPBr64ptntoP0 +-jaWvYkxN4FisZDQSA/i2jZRjJKRxAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAP +-BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqciZ60B7vfec7aVHUbI2fkBJmqzAN +-BgkqhkiG9w0BAQsFAAOCAQEAeZ8dlsa2eT8ijYfThwMEYGprmi5ZiXMRrEPR9RP/ +-jTkrwPK9T3CMqS/qF8QLVJ7UG5aYMzyorWKiAHarWWluBh1+xLlEjZivEtRh2woZ +-Rkfz6/djwUAFQKXSt/S1mja/qYh2iARVBCuch38aNzx+LaUa2NSJXsq9rD1s2G2v +-1fN2D807iDginWyTmsQ9v4IbZT+mD12q/OWyFcq1rca8PdCE6OoGcrBNOTJ4vz4R +-nAuknZoh8/CbCzB428Hch0P+vGOaysXCHMnHjf87ElgI5rY97HosTvuDls4MPGmH +-VHOkc8KT/1EQrBVUAdj8BbGJoX90g5pJ19xOe4pIb4tF9g== +------END CERTIFICATE----- +- +-# Issuer: CN=Entrust Root Certification Authority - EC1 O=Entrust, Inc. OU=See www.entrust.net/legal-terms/(c) 2012 Entrust, Inc. - for authorized use only +-# Subject: CN=Entrust Root Certification Authority - EC1 O=Entrust, Inc. OU=See www.entrust.net/legal-terms/(c) 2012 Entrust, Inc. - for authorized use only +-# Label: "Entrust Root Certification Authority - EC1" +-# Serial: 51543124481930649114116133369 +-# MD5 Fingerprint: b6:7e:1d:f0:58:c5:49:6c:24:3b:3d:ed:98:18:ed:bc +-# SHA1 Fingerprint: 20:d8:06:40:df:9b:25:f5:12:25:3a:11:ea:f7:59:8a:eb:14:b5:47 +-# SHA256 Fingerprint: 02:ed:0e:b2:8c:14:da:45:16:5c:56:67:91:70:0d:64:51:d7:fb:56:f0:b2:ab:1d:3b:8e:b0:70:e5:6e:df:f5 +------BEGIN CERTIFICATE----- +-MIIC+TCCAoCgAwIBAgINAKaLeSkAAAAAUNCR+TAKBggqhkjOPQQDAzCBvzELMAkG +-A1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3 +-d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVu +-dHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEzMDEGA1UEAxMq +-RW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRUMxMB4XDTEy +-MTIxODE1MjUzNloXDTM3MTIxODE1NTUzNlowgb8xCzAJBgNVBAYTAlVTMRYwFAYD +-VQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQLEx9TZWUgd3d3LmVudHJ1c3QubmV0 +-L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykgMjAxMiBFbnRydXN0LCBJbmMuIC0g +-Zm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxMzAxBgNVBAMTKkVudHJ1c3QgUm9vdCBD +-ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEVDMTB2MBAGByqGSM49AgEGBSuBBAAi +-A2IABIQTydC6bUF74mzQ61VfZgIaJPRbiWlH47jCffHyAsWfoPZb1YsGGYZPUxBt +-ByQnoaD41UcZYUx9ypMn6nQM72+WCf5j7HBdNq1nd67JnXxVRDqiY1Ef9eNi1KlH +-Bz7MIKNCMEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0O +-BBYEFLdj5xrdjekIplWDpOBqUEFlEUJJMAoGCCqGSM49BAMDA2cAMGQCMGF52OVC +-R98crlOZF7ZvHH3hvxGU0QOIdeSNiaSKd0bebWHvAvX7td/M/k7//qnmpwIwW5nX +-hTcGtXsI/esni0qU+eH6p44mCOh8kmhtc9hvJqwhAriZtyZBWyVgrtBIGu4G +------END CERTIFICATE----- +- +-# Issuer: CN=CFCA EV ROOT O=China Financial Certification Authority +-# Subject: CN=CFCA EV ROOT O=China Financial Certification Authority +-# Label: "CFCA EV ROOT" +-# Serial: 407555286 +-# MD5 Fingerprint: 74:e1:b6:ed:26:7a:7a:44:30:33:94:ab:7b:27:81:30 +-# SHA1 Fingerprint: e2:b8:29:4b:55:84:ab:6b:58:c2:90:46:6c:ac:3f:b8:39:8f:84:83 +-# SHA256 Fingerprint: 5c:c3:d7:8e:4e:1d:5e:45:54:7a:04:e6:87:3e:64:f9:0c:f9:53:6d:1c:cc:2e:f8:00:f3:55:c4:c5:fd:70:fd +------BEGIN CERTIFICATE----- +-MIIFjTCCA3WgAwIBAgIEGErM1jANBgkqhkiG9w0BAQsFADBWMQswCQYDVQQGEwJD +-TjEwMC4GA1UECgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmljYXRpb24gQXV0aG9y +-aXR5MRUwEwYDVQQDDAxDRkNBIEVWIFJPT1QwHhcNMTIwODA4MDMwNzAxWhcNMjkx +-MjMxMDMwNzAxWjBWMQswCQYDVQQGEwJDTjEwMC4GA1UECgwnQ2hpbmEgRmluYW5j +-aWFsIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRUwEwYDVQQDDAxDRkNBIEVWIFJP +-T1QwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDXXWvNED8fBVnVBU03 +-sQ7smCuOFR36k0sXgiFxEFLXUWRwFsJVaU2OFW2fvwwbwuCjZ9YMrM8irq93VCpL +-TIpTUnrD7i7es3ElweldPe6hL6P3KjzJIx1qqx2hp/Hz7KDVRM8Vz3IvHWOX6Jn5 +-/ZOkVIBMUtRSqy5J35DNuF++P96hyk0g1CXohClTt7GIH//62pCfCqktQT+x8Rgp +-7hZZLDRJGqgG16iI0gNyejLi6mhNbiyWZXvKWfry4t3uMCz7zEasxGPrb382KzRz +-EpR/38wmnvFyXVBlWY9ps4deMm/DGIq1lY+wejfeWkU7xzbh72fROdOXW3NiGUgt +-hxwG+3SYIElz8AXSG7Ggo7cbcNOIabla1jj0Ytwli3i/+Oh+uFzJlU9fpy25IGvP +-a931DfSCt/SyZi4QKPaXWnuWFo8BGS1sbn85WAZkgwGDg8NNkt0yxoekN+kWzqot +-aK8KgWU6cMGbrU1tVMoqLUuFG7OA5nBFDWteNfB/O7ic5ARwiRIlk9oKmSJgamNg +-TnYGmE69g60dWIolhdLHZR4tjsbftsbhf4oEIRUpdPA+nJCdDC7xij5aqgwJHsfV +-PKPtl8MeNPo4+QgO48BdK4PRVmrJtqhUUy54Mmc9gn900PvhtgVguXDbjgv5E1hv +-cWAQUhC5wUEJ73IfZzF4/5YFjQIDAQABo2MwYTAfBgNVHSMEGDAWgBTj/i39KNAL +-tbq2osS/BqoFjJP7LzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAd +-BgNVHQ4EFgQU4/4t/SjQC7W6tqLEvwaqBYyT+y8wDQYJKoZIhvcNAQELBQADggIB +-ACXGumvrh8vegjmWPfBEp2uEcwPenStPuiB/vHiyz5ewG5zz13ku9Ui20vsXiObT +-ej/tUxPQ4i9qecsAIyjmHjdXNYmEwnZPNDatZ8POQQaIxffu2Bq41gt/UP+TqhdL +-jOztUmCypAbqTuv0axn96/Ua4CUqmtzHQTb3yHQFhDmVOdYLO6Qn+gjYXB74BGBS +-ESgoA//vU2YApUo0FmZ8/Qmkrp5nGm9BC2sGE5uPhnEFtC+NiWYzKXZUmhH4J/qy +-P5Hgzg0b8zAarb8iXRvTvyUFTeGSGn+ZnzxEk8rUQElsgIfXBDrDMlI1Dlb4pd19 +-xIsNER9Tyx6yF7Zod1rg1MvIB671Oi6ON7fQAUtDKXeMOZePglr4UeWJoBjnaH9d +-Ci77o0cOPaYjesYBx4/IXr9tgFa+iiS6M+qf4TIRnvHST4D2G0CvOJ4RUHlzEhLN +-5mydLIhyPDCBBpEi6lmt2hkuIsKNuYyH4Ga8cyNfIWRjgEj1oDwYPZTISEEdQLpe +-/v5WOaHIz16eGWRGENoXkbcFgKyLmZJ956LYBws2J+dIeWCKw9cTXPhyQN9Ky8+Z +-AAoACxGV2lZFA4gKn2fQ1XmxqI1AbQ3CekD6819kR5LLU7m7Wc5P/dAVUwHY3+vZ +-5nbv0CO7O6l5s9UCKc2Jo5YPSjXnTkLAdc0Hz+Ys63su +------END CERTIFICATE----- +- +-# Issuer: CN=OISTE WISeKey Global Root GB CA O=WISeKey OU=OISTE Foundation Endorsed +-# Subject: CN=OISTE WISeKey Global Root GB CA O=WISeKey OU=OISTE Foundation Endorsed +-# Label: "OISTE WISeKey Global Root GB CA" +-# Serial: 157768595616588414422159278966750757568 +-# MD5 Fingerprint: a4:eb:b9:61:28:2e:b7:2f:98:b0:35:26:90:99:51:1d +-# SHA1 Fingerprint: 0f:f9:40:76:18:d3:d7:6a:4b:98:f0:a8:35:9e:0c:fd:27:ac:cc:ed +-# SHA256 Fingerprint: 6b:9c:08:e8:6e:b0:f7:67:cf:ad:65:cd:98:b6:21:49:e5:49:4a:67:f5:84:5e:7b:d1:ed:01:9f:27:b8:6b:d6 +------BEGIN CERTIFICATE----- +-MIIDtTCCAp2gAwIBAgIQdrEgUnTwhYdGs/gjGvbCwDANBgkqhkiG9w0BAQsFADBt +-MQswCQYDVQQGEwJDSDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUg +-Rm91bmRhdGlvbiBFbmRvcnNlZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9i +-YWwgUm9vdCBHQiBDQTAeFw0xNDEyMDExNTAwMzJaFw0zOTEyMDExNTEwMzFaMG0x +-CzAJBgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYDVQQLExlPSVNURSBG +-b3VuZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEdsb2Jh +-bCBSb290IEdCIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Be3 +-HEokKtaXscriHvt9OO+Y9bI5mE4nuBFde9IllIiCFSZqGzG7qFshISvYD06fWvGx +-WuR51jIjK+FTzJlFXHtPrby/h0oLS5daqPZI7H17Dc0hBt+eFf1Biki3IPShehtX +-1F1Q/7pn2COZH8g/497/b1t3sWtuuMlk9+HKQUYOKXHQuSP8yYFfTvdv37+ErXNk +-u7dCjmn21HYdfp2nuFeKUWdy19SouJVUQHMD9ur06/4oQnc/nSMbsrY9gBQHTC5P +-99UKFg29ZkM3fiNDecNAhvVMKdqOmq0NpQSHiB6F4+lT1ZvIiwNjeOvgGUpuuy9r +-M2RYk61pv48b74JIxwIDAQABo1EwTzALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUw +-AwEB/zAdBgNVHQ4EFgQUNQ/INmNe4qPs+TtmFc5RUuORmj0wEAYJKwYBBAGCNxUB +-BAMCAQAwDQYJKoZIhvcNAQELBQADggEBAEBM+4eymYGQfp3FsLAmzYh7KzKNbrgh +-cViXfa43FK8+5/ea4n32cZiZBKpDdHij40lhPnOMTZTg+XHEthYOU3gf1qKHLwI5 +-gSk8rxWYITD+KJAAjNHhy/peyP34EEY7onhCkRd0VQreUGdNZtGn//3ZwLWoo4rO +-ZvUPQ82nK1d7Y0Zqqi5S2PTt4W2tKZB4SLrhI6qjiey1q5bAtEuiHZeeevJuQHHf +-aPFlTc58Bd9TZaml8LGXBHAVRgOY1NK/VLSgWH1Sb9pWJmLU2NuJMW8c8CLC02Ic +-Nc1MaRVUGpCY3useX8p3x8uOPUNpnJpY0CQ73xtAln41rYHHTnG6iBM= +------END CERTIFICATE----- +- +-# Issuer: CN=SZAFIR ROOT CA2 O=Krajowa Izba Rozliczeniowa S.A. +-# Subject: CN=SZAFIR ROOT CA2 O=Krajowa Izba Rozliczeniowa S.A. +-# Label: "SZAFIR ROOT CA2" +-# Serial: 357043034767186914217277344587386743377558296292 +-# MD5 Fingerprint: 11:64:c1:89:b0:24:b1:8c:b1:07:7e:89:9e:51:9e:99 +-# SHA1 Fingerprint: e2:52:fa:95:3f:ed:db:24:60:bd:6e:28:f3:9c:cc:cf:5e:b3:3f:de +-# SHA256 Fingerprint: a1:33:9d:33:28:1a:0b:56:e5:57:d3:d3:2b:1c:e7:f9:36:7e:b0:94:bd:5f:a7:2a:7e:50:04:c8:de:d7:ca:fe +------BEGIN CERTIFICATE----- +-MIIDcjCCAlqgAwIBAgIUPopdB+xV0jLVt+O2XwHrLdzk1uQwDQYJKoZIhvcNAQEL +-BQAwUTELMAkGA1UEBhMCUEwxKDAmBgNVBAoMH0tyYWpvd2EgSXpiYSBSb3psaWN6 +-ZW5pb3dhIFMuQS4xGDAWBgNVBAMMD1NaQUZJUiBST09UIENBMjAeFw0xNTEwMTkw +-NzQzMzBaFw0zNTEwMTkwNzQzMzBaMFExCzAJBgNVBAYTAlBMMSgwJgYDVQQKDB9L +-cmFqb3dhIEl6YmEgUm96bGljemVuaW93YSBTLkEuMRgwFgYDVQQDDA9TWkFGSVIg +-Uk9PVCBDQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vD5QqEvN +-QLXOYeeWyrSh2gwisPq1e3YAd4wLz32ohswmUeQgPYUM1ljj5/QqGJ3a0a4m7utT +-3PSQ1hNKDJA8w/Ta0o4NkjrcsbH/ON7Dui1fgLkCvUqdGw+0w8LBZwPd3BucPbOw +-3gAeqDRHu5rr/gsUvTaE2g0gv/pby6kWIK05YO4vdbbnl5z5Pv1+TW9NL++IDWr6 +-3fE9biCloBK0TXC5ztdyO4mTp4CEHCdJckm1/zuVnsHMyAHs6A6KCpbns6aH5db5 +-BSsNl0BwPLqsdVqc1U2dAgrSS5tmS0YHF2Wtn2yIANwiieDhZNRnvDF5YTy7ykHN +-XGoAyDw4jlivAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD +-AgEGMB0GA1UdDgQWBBQuFqlKGLXLzPVvUPMjX/hd56zwyDANBgkqhkiG9w0BAQsF +-AAOCAQEAtXP4A9xZWx126aMqe5Aosk3AM0+qmrHUuOQn/6mWmc5G4G18TKI4pAZw +-8PRBEew/R40/cof5O/2kbytTAOD/OblqBw7rHRz2onKQy4I9EYKL0rufKq8h5mOG +-nXkZ7/e7DDWQw4rtTw/1zBLZpD67oPwglV9PJi8RI4NOdQcPv5vRtB3pEAT+ymCP +-oky4rc/hkA/NrgrHXXu3UNLUYfrVFdvXn4dRVOul4+vJhaAlIDf7js4MNIThPIGy +-d05DpYhfhmehPea0XGG2Ptv+tyjFogeutcrKjSoS75ftwjCkySp6+/NNIxuZMzSg +-LvWpCz/UXeHPhJ/iGcJfitYgHuNztw== +------END CERTIFICATE----- +- +-# Issuer: CN=Certum Trusted Network CA 2 O=Unizeto Technologies S.A. OU=Certum Certification Authority +-# Subject: CN=Certum Trusted Network CA 2 O=Unizeto Technologies S.A. OU=Certum Certification Authority +-# Label: "Certum Trusted Network CA 2" +-# Serial: 44979900017204383099463764357512596969 +-# MD5 Fingerprint: 6d:46:9e:d9:25:6d:08:23:5b:5e:74:7d:1e:27:db:f2 +-# SHA1 Fingerprint: d3:dd:48:3e:2b:bf:4c:05:e8:af:10:f5:fa:76:26:cf:d3:dc:30:92 +-# SHA256 Fingerprint: b6:76:f2:ed:da:e8:77:5c:d3:6c:b0:f6:3c:d1:d4:60:39:61:f4:9e:62:65:ba:01:3a:2f:03:07:b6:d0:b8:04 +------BEGIN CERTIFICATE----- +-MIIF0jCCA7qgAwIBAgIQIdbQSk8lD8kyN/yqXhKN6TANBgkqhkiG9w0BAQ0FADCB +-gDELMAkGA1UEBhMCUEwxIjAgBgNVBAoTGVVuaXpldG8gVGVjaG5vbG9naWVzIFMu +-QS4xJzAlBgNVBAsTHkNlcnR1bSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEkMCIG +-A1UEAxMbQ2VydHVtIFRydXN0ZWQgTmV0d29yayBDQSAyMCIYDzIwMTExMDA2MDgz +-OTU2WhgPMjA0NjEwMDYwODM5NTZaMIGAMQswCQYDVQQGEwJQTDEiMCAGA1UEChMZ +-VW5pemV0byBUZWNobm9sb2dpZXMgUy5BLjEnMCUGA1UECxMeQ2VydHVtIENlcnRp +-ZmljYXRpb24gQXV0aG9yaXR5MSQwIgYDVQQDExtDZXJ0dW0gVHJ1c3RlZCBOZXR3 +-b3JrIENBIDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC9+Xj45tWA +-DGSdhhuWZGc/IjoedQF97/tcZ4zJzFxrqZHmuULlIEub2pt7uZld2ZuAS9eEQCsn +-0+i6MLs+CRqnSZXvK0AkwpfHp+6bJe+oCgCXhVqqndwpyeI1B+twTUrWwbNWuKFB +-OJvR+zF/j+Bf4bE/D44WSWDXBo0Y+aomEKsq09DRZ40bRr5HMNUuctHFY9rnY3lE +-fktjJImGLjQ/KUxSiyqnwOKRKIm5wFv5HdnnJ63/mgKXwcZQkpsCLL2puTRZCr+E +-Sv/f/rOf69me4Jgj7KZrdxYq28ytOxykh9xGc14ZYmhFV+SQgkK7QtbwYeDBoz1m +-o130GO6IyY0XRSmZMnUCMe4pJshrAua1YkV/NxVaI2iJ1D7eTiew8EAMvE0Xy02i +-sx7QBlrd9pPPV3WZ9fqGGmd4s7+W/jTcvedSVuWz5XV710GRBdxdaeOVDUO5/IOW +-OZV7bIBaTxNyxtd9KXpEulKkKtVBRgkg/iKgtlswjbyJDNXXcPiHUv3a76xRLgez +-Tv7QCdpw75j6VuZt27VXS9zlLCUVyJ4ueE742pyehizKV/Ma5ciSixqClnrDvFAS +-adgOWkaLOusm+iPJtrCBvkIApPjW/jAux9JG9uWOdf3yzLnQh1vMBhBgu4M1t15n +-3kfsmUjxpKEV/q2MYo45VU85FrmxY53/twIDAQABo0IwQDAPBgNVHRMBAf8EBTAD +-AQH/MB0GA1UdDgQWBBS2oVQ5AsOgP46KvPrU+Bym0ToO/TAOBgNVHQ8BAf8EBAMC +-AQYwDQYJKoZIhvcNAQENBQADggIBAHGlDs7k6b8/ONWJWsQCYftMxRQXLYtPU2sQ +-F/xlhMcQSZDe28cmk4gmb3DWAl45oPePq5a1pRNcgRRtDoGCERuKTsZPpd1iHkTf +-CVn0W3cLN+mLIMb4Ck4uWBzrM9DPhmDJ2vuAL55MYIR4PSFk1vtBHxgP58l1cb29 +-XN40hz5BsA72udY/CROWFC/emh1auVbONTqwX3BNXuMp8SMoclm2q8KMZiYcdywm +-djWLKKdpoPk79SPdhRB0yZADVpHnr7pH1BKXESLjokmUbOe3lEu6LaTaM4tMpkT/ +-WjzGHWTYtTHkpjx6qFcL2+1hGsvxznN3Y6SHb0xRONbkX8eftoEq5IVIeVheO/jb +-AoJnwTnbw3RLPTYe+SmTiGhbqEQZIfCn6IENLOiTNrQ3ssqwGyZ6miUfmpqAnksq +-P/ujmv5zMnHCnsZy4YpoJ/HkD7TETKVhk/iXEAcqMCWpuchxuO9ozC1+9eB+D4Ko +-b7a6bINDd82Kkhehnlt4Fj1F4jNy3eFmypnTycUm/Q1oBEauttmbjL4ZvrHG8hnj +-XALKLNhvSgfZyTXaQHXyxKcZb55CEJh15pWLYLztxRLXis7VmFxWlgPF7ncGNf/P +-5O4/E2Hu29othfDNrp2yGAlFw5Khchf8R7agCyzxxN5DaAhqXzvwdmP7zAYspsbi +-DrW5viSP +------END CERTIFICATE----- +- +-# Issuer: CN=Hellenic Academic and Research Institutions RootCA 2015 O=Hellenic Academic and Research Institutions Cert. Authority +-# Subject: CN=Hellenic Academic and Research Institutions RootCA 2015 O=Hellenic Academic and Research Institutions Cert. Authority +-# Label: "Hellenic Academic and Research Institutions RootCA 2015" +-# Serial: 0 +-# MD5 Fingerprint: ca:ff:e2:db:03:d9:cb:4b:e9:0f:ad:84:fd:7b:18:ce +-# SHA1 Fingerprint: 01:0c:06:95:a6:98:19:14:ff:bf:5f:c6:b0:b6:95:ea:29:e9:12:a6 +-# SHA256 Fingerprint: a0:40:92:9a:02:ce:53:b4:ac:f4:f2:ff:c6:98:1c:e4:49:6f:75:5e:6d:45:fe:0b:2a:69:2b:cd:52:52:3f:36 +------BEGIN CERTIFICATE----- +-MIIGCzCCA/OgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBpjELMAkGA1UEBhMCR1Ix +-DzANBgNVBAcTBkF0aGVuczFEMEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5k +-IFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0LiBBdXRob3JpdHkxQDA+BgNVBAMT +-N0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgUm9v +-dENBIDIwMTUwHhcNMTUwNzA3MTAxMTIxWhcNNDAwNjMwMTAxMTIxWjCBpjELMAkG +-A1UEBhMCR1IxDzANBgNVBAcTBkF0aGVuczFEMEIGA1UEChM7SGVsbGVuaWMgQWNh +-ZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0LiBBdXRob3JpdHkx +-QDA+BgNVBAMTN0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1 +-dGlvbnMgUm9vdENBIDIwMTUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC +-AQDC+Kk/G4n8PDwEXT2QNrCROnk8ZlrvbTkBSRq0t89/TSNTt5AA4xMqKKYx8ZEA +-4yjsriFBzh/a/X0SWwGDD7mwX5nh8hKDgE0GPt+sr+ehiGsxr/CL0BgzuNtFajT0 +-AoAkKAoCFZVedioNmToUW/bLy1O8E00BiDeUJRtCvCLYjqOWXjrZMts+6PAQZe10 +-4S+nfK8nNLspfZu2zwnI5dMK/IhlZXQK3HMcXM1AsRzUtoSMTFDPaI6oWa7CJ06C +-ojXdFPQf/7J31Ycvqm59JCfnxssm5uX+Zwdj2EUN3TpZZTlYepKZcj2chF6IIbjV +-9Cz82XBST3i4vTwri5WY9bPRaM8gFH5MXF/ni+X1NYEZN9cRCLdmvtNKzoNXADrD +-gfgXy5I2XdGj2HUb4Ysn6npIQf1FGQatJ5lOwXBH3bWfgVMS5bGMSF0xQxfjjMZ6 +-Y5ZLKTBOhE5iGV48zpeQpX8B653g+IuJ3SWYPZK2fu/Z8VFRfS0myGlZYeCsargq +-NhEEelC9MoS+L9xy1dcdFkfkR2YgP/SWxa+OAXqlD3pk9Q0Yh9muiNX6hME6wGko +-LfINaFGq46V3xqSQDqE3izEjR8EJCOtu93ib14L8hCCZSRm2Ekax+0VVFqmjZayc +-Bw/qa9wfLgZy7IaIEuQt218FL+TwA9MmM+eAws1CoRc0CwIDAQABo0IwQDAPBgNV +-HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUcRVnyMjJvXVd +-ctA4GGqd83EkVAswDQYJKoZIhvcNAQELBQADggIBAHW7bVRLqhBYRjTyYtcWNl0I +-XtVsyIe9tC5G8jH4fOpCtZMWVdyhDBKg2mF+D1hYc2Ryx+hFjtyp8iY/xnmMsVMI +-M4GwVhO+5lFc2JsKT0ucVlMC6U/2DWDqTUJV6HwbISHTGzrMd/K4kPFox/la/vot +-9L/J9UUbzjgQKjeKeaO04wlshYaT/4mWJ3iBj2fjRnRUjtkNaeJK9E10A/+yd+2V +-Z5fkscWrv2oj6NSU4kQoYsRL4vDY4ilrGnB+JGGTe08DMiUNRSQrlrRGar9KC/ea +-j8GsGsVn82800vpzY4zvFrCopEYq+OsS7HK07/grfoxSwIuEVPkvPuNVqNxmsdnh +-X9izjFk0WaSrT2y7HxjbdavYy5LNlDhhDgcGH0tGEPEVvo2FXDtKK4F5D7Rpn0lQ +-l033DlZdwJVqwjbDG2jJ9SrcR5q+ss7FJej6A7na+RZukYT1HCjI/CbM1xyQVqdf +-bzoEvM14iQuODy+jqk+iGxI9FghAD/FGTNeqewjBCvVtJ94Cj8rDtSvK6evIIVM4 +-pcw72Hc3MKJP2W/R8kCtQXoXxdZKNYm3QdV8hn9VTYNKpXMgwDqvkPGaJI7ZjnHK +-e7iG2rKPmT4dEw0SEe7Uq/DpFXYC5ODfqiAeW2GFZECpkJcNrVPSWh2HagCXZWK0 +-vm9qp/UsQu0yrbYhnr68 +------END CERTIFICATE----- +- +-# Issuer: CN=Hellenic Academic and Research Institutions ECC RootCA 2015 O=Hellenic Academic and Research Institutions Cert. Authority +-# Subject: CN=Hellenic Academic and Research Institutions ECC RootCA 2015 O=Hellenic Academic and Research Institutions Cert. Authority +-# Label: "Hellenic Academic and Research Institutions ECC RootCA 2015" +-# Serial: 0 +-# MD5 Fingerprint: 81:e5:b4:17:eb:c2:f5:e1:4b:0d:41:7b:49:92:fe:ef +-# SHA1 Fingerprint: 9f:f1:71:8d:92:d5:9a:f3:7d:74:97:b4:bc:6f:84:68:0b:ba:b6:66 +-# SHA256 Fingerprint: 44:b5:45:aa:8a:25:e6:5a:73:ca:15:dc:27:fc:36:d2:4c:1c:b9:95:3a:06:65:39:b1:15:82:dc:48:7b:48:33 +------BEGIN CERTIFICATE----- +-MIICwzCCAkqgAwIBAgIBADAKBggqhkjOPQQDAjCBqjELMAkGA1UEBhMCR1IxDzAN +-BgNVBAcTBkF0aGVuczFEMEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl +-c2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0LiBBdXRob3JpdHkxRDBCBgNVBAMTO0hl +-bGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgRUNDIFJv +-b3RDQSAyMDE1MB4XDTE1MDcwNzEwMzcxMloXDTQwMDYzMDEwMzcxMlowgaoxCzAJ +-BgNVBAYTAkdSMQ8wDQYDVQQHEwZBdGhlbnMxRDBCBgNVBAoTO0hlbGxlbmljIEFj +-YWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ2VydC4gQXV0aG9yaXR5 +-MUQwQgYDVQQDEztIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0 +-dXRpb25zIEVDQyBSb290Q0EgMjAxNTB2MBAGByqGSM49AgEGBSuBBAAiA2IABJKg +-QehLgoRc4vgxEZmGZE4JJS+dQS8KrjVPdJWyUWRrjWvmP3CV8AVER6ZyOFB2lQJa +-jq4onvktTpnvLEhvTCUp6NFxW98dwXU3tNf6e3pCnGoKVlp8aQuqgAkkbH7BRqNC +-MEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFLQi +-C4KZJAEOnLvkDv2/+5cgk5kqMAoGCCqGSM49BAMCA2cAMGQCMGfOFmI4oqxiRaep +-lSTAGiecMjvAwNW6qef4BENThe5SId6d9SWDPp5YSy/XZxMOIQIwBeF1Ad5o7Sof +-TUwJCA3sS61kFyjndc5FZXIhF8siQQ6ME5g4mlRtm8rifOoCWCKR +------END CERTIFICATE----- +- +-# Issuer: CN=ISRG Root X1 O=Internet Security Research Group +-# Subject: CN=ISRG Root X1 O=Internet Security Research Group +-# Label: "ISRG Root X1" +-# Serial: 172886928669790476064670243504169061120 +-# MD5 Fingerprint: 0c:d2:f9:e0:da:17:73:e9:ed:86:4d:a5:e3:70:e7:4e +-# SHA1 Fingerprint: ca:bd:2a:79:a1:07:6a:31:f2:1d:25:36:35:cb:03:9d:43:29:a5:e8 +-# SHA256 Fingerprint: 96:bc:ec:06:26:49:76:f3:74:60:77:9a:cf:28:c5:a7:cf:e8:a3:c0:aa:e1:1a:8f:fc:ee:05:c0:bd:df:08:c6 +------BEGIN CERTIFICATE----- +-MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw +-TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh +-cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4 +-WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJu +-ZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBY +-MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54rVygc +-h77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+ +-0TM8ukj13Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6U +-A5/TR5d8mUgjU+g4rk8Kb4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sW +-T8KOEUt+zwvo/7V3LvSye0rgTBIlDHCNAymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyH +-B5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ4Q7e2RCOFvu396j3x+UC +-B5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf1b0SHzUv +-KBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWn +-OlFuhjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTn +-jh8BCNAw1FtxNrQHusEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbw +-qHyGO0aoSCqI3Haadr8faqU9GY/rOPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CI +-rU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV +-HRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY9umbbjANBgkq +-hkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL +-ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ +-3BebYhtF8GaV0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KK +-NFtY2PwByVS5uCbMiogziUwthDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5 +-ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJwTdwJx4nLCgdNbOhdjsnvzqvHu7Ur +-TkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nxe5AW0wdeRlN8NwdC +-jNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZAJzVc +-oyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq +-4RgqsahDYVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPA +-mRGunUHBcnWEvgJBQl9nJEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57d +-emyPxgcYxn/eR44/KJ4EBs+lVDR3veyJm+kXQ99b21/+jh5Xos1AnX5iItreGCc= +------END CERTIFICATE----- +- +-# Issuer: O=FNMT-RCM OU=AC RAIZ FNMT-RCM +-# Subject: O=FNMT-RCM OU=AC RAIZ FNMT-RCM +-# Label: "AC RAIZ FNMT-RCM" +-# Serial: 485876308206448804701554682760554759 +-# MD5 Fingerprint: e2:09:04:b4:d3:bd:d1:a0:14:fd:1a:d2:47:c4:57:1d +-# SHA1 Fingerprint: ec:50:35:07:b2:15:c4:95:62:19:e2:a8:9a:5b:42:99:2c:4c:2c:20 +-# SHA256 Fingerprint: eb:c5:57:0c:29:01:8c:4d:67:b1:aa:12:7b:af:12:f7:03:b4:61:1e:bc:17:b7:da:b5:57:38:94:17:9b:93:fa +------BEGIN CERTIFICATE----- +-MIIFgzCCA2ugAwIBAgIPXZONMGc2yAYdGsdUhGkHMA0GCSqGSIb3DQEBCwUAMDsx +-CzAJBgNVBAYTAkVTMREwDwYDVQQKDAhGTk1ULVJDTTEZMBcGA1UECwwQQUMgUkFJ +-WiBGTk1ULVJDTTAeFw0wODEwMjkxNTU5NTZaFw0zMDAxMDEwMDAwMDBaMDsxCzAJ +-BgNVBAYTAkVTMREwDwYDVQQKDAhGTk1ULVJDTTEZMBcGA1UECwwQQUMgUkFJWiBG +-Tk1ULVJDTTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALpxgHpMhm5/ +-yBNtwMZ9HACXjywMI7sQmkCpGreHiPibVmr75nuOi5KOpyVdWRHbNi63URcfqQgf +-BBckWKo3Shjf5TnUV/3XwSyRAZHiItQDwFj8d0fsjz50Q7qsNI1NOHZnjrDIbzAz +-WHFctPVrbtQBULgTfmxKo0nRIBnuvMApGGWn3v7v3QqQIecaZ5JCEJhfTzC8PhxF +-tBDXaEAUwED653cXeuYLj2VbPNmaUtu1vZ5Gzz3rkQUCwJaydkxNEJY7kvqcfw+Z +-374jNUUeAlz+taibmSXaXvMiwzn15Cou08YfxGyqxRxqAQVKL9LFwag0Jl1mpdIC +-IfkYtwb1TplvqKtMUejPUBjFd8g5CSxJkjKZqLsXF3mwWsXmo8RZZUc1g16p6DUL +-mbvkzSDGm0oGObVo/CK67lWMK07q87Hj/LaZmtVC+nFNCM+HHmpxffnTtOmlcYF7 +-wk5HlqX2doWjKI/pgG6BU6VtX7hI+cL5NqYuSf+4lsKMB7ObiFj86xsc3i1w4peS +-MKGJ47xVqCfWS+2QrYv6YyVZLag13cqXM7zlzced0ezvXg5KkAYmY6252TUtB7p2 +-ZSysV4999AeU14ECll2jB0nVetBX+RvnU0Z1qrB5QstocQjpYL05ac70r8NWQMet +-UqIJ5G+GR4of6ygnXYMgrwTJbFaai0b1AgMBAAGjgYMwgYAwDwYDVR0TAQH/BAUw +-AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFPd9xf3E6Jobd2Sn9R2gzL+H +-YJptMD4GA1UdIAQ3MDUwMwYEVR0gADArMCkGCCsGAQUFBwIBFh1odHRwOi8vd3d3 +-LmNlcnQuZm5tdC5lcy9kcGNzLzANBgkqhkiG9w0BAQsFAAOCAgEAB5BK3/MjTvDD +-nFFlm5wioooMhfNzKWtN/gHiqQxjAb8EZ6WdmF/9ARP67Jpi6Yb+tmLSbkyU+8B1 +-RXxlDPiyN8+sD8+Nb/kZ94/sHvJwnvDKuO+3/3Y3dlv2bojzr2IyIpMNOmqOFGYM +-LVN0V2Ue1bLdI4E7pWYjJ2cJj+F3qkPNZVEI7VFY/uY5+ctHhKQV8Xa7pO6kO8Rf +-77IzlhEYt8llvhjho6Tc+hj507wTmzl6NLrTQfv6MooqtyuGC2mDOL7Nii4LcK2N +-JpLuHvUBKwrZ1pebbuCoGRw6IYsMHkCtA+fdZn71uSANA+iW+YJF1DngoABd15jm +-fZ5nc8OaKveri6E6FO80vFIOiZiaBECEHX5FaZNXzuvO+FB8TxxuBEOb+dY7Ixjp +-6o7RTUaN8Tvkasq6+yO3m/qZASlaWFot4/nUbQ4mrcFuNLwy+AwF+mWj2zs3gyLp +-1txyM/1d8iC9djwj2ij3+RvrWWTV3F9yfiD8zYm1kGdNYno/Tq0dwzn+evQoFt9B +-9kiABdcPUXmsEKvU7ANm5mqwujGSQkBqvjrTcuFqN1W8rB2Vt2lh8kORdOag0wok +-RqEIr9baRRmW1FMdW4R58MD3R++Lj8UGrp1MYp3/RgT408m2ECVAdf4WqslKYIYv +-uu8wd+RU4riEmViAqhOLUTpPSPaLtrM= +------END CERTIFICATE----- +- +-# Issuer: CN=Amazon Root CA 1 O=Amazon +-# Subject: CN=Amazon Root CA 1 O=Amazon +-# Label: "Amazon Root CA 1" +-# Serial: 143266978916655856878034712317230054538369994 +-# MD5 Fingerprint: 43:c6:bf:ae:ec:fe:ad:2f:18:c6:88:68:30:fc:c8:e6 +-# SHA1 Fingerprint: 8d:a7:f9:65:ec:5e:fc:37:91:0f:1c:6e:59:fd:c1:cc:6a:6e:de:16 +-# SHA256 Fingerprint: 8e:cd:e6:88:4f:3d:87:b1:12:5b:a3:1a:c3:fc:b1:3d:70:16:de:7f:57:cc:90:4f:e1:cb:97:c6:ae:98:19:6e +------BEGIN CERTIFICATE----- +-MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF +-ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6 +-b24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL +-MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv +-b3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXj +-ca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM +-9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qw +-IFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6 +-VOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L +-93FcXmn/6pUCyziKrlA4b9v7LWIbxcceVOF34GfID5yHI9Y/QCB/IIDEgEw+OyQm +-jgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC +-AYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3DQEBCwUA +-A4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDI +-U5PMCCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUs +-N+gDS63pYaACbvXy8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vv +-o/ufQJVtMVT8QtPHRh8jrdkPSHCa2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU +-5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2xJNDd2ZhwLnoQdeXeGADbkpy +-rqXRfboQnoZsG4q5WTP468SQvvG5 +------END CERTIFICATE----- +- +-# Issuer: CN=Amazon Root CA 2 O=Amazon +-# Subject: CN=Amazon Root CA 2 O=Amazon +-# Label: "Amazon Root CA 2" +-# Serial: 143266982885963551818349160658925006970653239 +-# MD5 Fingerprint: c8:e5:8d:ce:a8:42:e2:7a:c0:2a:5c:7c:9e:26:bf:66 +-# SHA1 Fingerprint: 5a:8c:ef:45:d7:a6:98:59:76:7a:8c:8b:44:96:b5:78:cf:47:4b:1a +-# SHA256 Fingerprint: 1b:a5:b2:aa:8c:65:40:1a:82:96:01:18:f8:0b:ec:4f:62:30:4d:83:ce:c4:71:3a:19:c3:9c:01:1e:a4:6d:b4 +------BEGIN CERTIFICATE----- +-MIIFQTCCAymgAwIBAgITBmyf0pY1hp8KD+WGePhbJruKNzANBgkqhkiG9w0BAQwF +-ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6 +-b24gUm9vdCBDQSAyMB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTEL +-MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv +-b3QgQ0EgMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2Wny2cSkxK +-gXlRmeyKy2tgURO8TW0G/LAIjd0ZEGrHJgw12MBvIITplLGbhQPDW9tK6Mj4kHbZ +-W0/jTOgGNk3Mmqw9DJArktQGGWCsN0R5hYGCrVo34A3MnaZMUnbqQ523BNFQ9lXg +-1dKmSYXpN+nKfq5clU1Imj+uIFptiJXZNLhSGkOQsL9sBbm2eLfq0OQ6PBJTYv9K +-8nu+NQWpEjTj82R0Yiw9AElaKP4yRLuH3WUnAnE72kr3H9rN9yFVkE8P7K6C4Z9r +-2UXTu/Bfh+08LDmG2j/e7HJV63mjrdvdfLC6HM783k81ds8P+HgfajZRRidhW+me +-z/CiVX18JYpvL7TFz4QuK/0NURBs+18bvBt+xa47mAExkv8LV/SasrlX6avvDXbR +-8O70zoan4G7ptGmh32n2M8ZpLpcTnqWHsFcQgTfJU7O7f/aS0ZzQGPSSbtqDT6Zj +-mUyl+17vIWR6IF9sZIUVyzfpYgwLKhbcAS4y2j5L9Z469hdAlO+ekQiG+r5jqFoz +-7Mt0Q5X5bGlSNscpb/xVA1wf+5+9R+vnSUeVC06JIglJ4PVhHvG/LopyboBZ/1c6 +-+XUyo05f7O0oYtlNc/LMgRdg7c3r3NunysV+Ar3yVAhU/bQtCSwXVEqY0VThUWcI +-0u1ufm8/0i2BWSlmy5A5lREedCf+3euvAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMB +-Af8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSwDPBMMPQFWAJI/TPlUq9LhONm +-UjANBgkqhkiG9w0BAQwFAAOCAgEAqqiAjw54o+Ci1M3m9Zh6O+oAA7CXDpO8Wqj2 +-LIxyh6mx/H9z/WNxeKWHWc8w4Q0QshNabYL1auaAn6AFC2jkR2vHat+2/XcycuUY +-+gn0oJMsXdKMdYV2ZZAMA3m3MSNjrXiDCYZohMr/+c8mmpJ5581LxedhpxfL86kS +-k5Nrp+gvU5LEYFiwzAJRGFuFjWJZY7attN6a+yb3ACfAXVU3dJnJUH/jWS5E4ywl +-7uxMMne0nxrpS10gxdr9HIcWxkPo1LsmmkVwXqkLN1PiRnsn/eBG8om3zEK2yygm +-btmlyTrIQRNg91CMFa6ybRoVGld45pIq2WWQgj9sAq+uEjonljYE1x2igGOpm/Hl +-urR8FLBOybEfdF849lHqm/osohHUqS0nGkWxr7JOcQ3AWEbWaQbLU8uz/mtBzUF+ +-fUwPfHJ5elnNXkoOrJupmHN5fLT0zLm4BwyydFy4x2+IoZCn9Kr5v2c69BoVYh63 +-n749sSmvZ6ES8lgQGVMDMBu4Gon2nL2XA46jCfMdiyHxtN/kHNGfZQIG6lzWE7OE +-76KlXIx3KadowGuuQNKotOrN8I1LOJwZmhsoVLiJkO/KdYE+HvJkJMcYr07/R54H +-9jVlpNMKVv/1F2Rs76giJUmTtt8AF9pYfl3uxRuw0dFfIRDH+fO6AgonB8Xx1sfT +-4PsJYGw= +------END CERTIFICATE----- +- +-# Issuer: CN=Amazon Root CA 3 O=Amazon +-# Subject: CN=Amazon Root CA 3 O=Amazon +-# Label: "Amazon Root CA 3" +-# Serial: 143266986699090766294700635381230934788665930 +-# MD5 Fingerprint: a0:d4:ef:0b:f7:b5:d8:49:95:2a:ec:f5:c4:fc:81:87 +-# SHA1 Fingerprint: 0d:44:dd:8c:3c:8c:1a:1a:58:75:64:81:e9:0f:2e:2a:ff:b3:d2:6e +-# SHA256 Fingerprint: 18:ce:6c:fe:7b:f1:4e:60:b2:e3:47:b8:df:e8:68:cb:31:d0:2e:bb:3a:da:27:15:69:f5:03:43:b4:6d:b3:a4 +------BEGIN CERTIFICATE----- +-MIIBtjCCAVugAwIBAgITBmyf1XSXNmY/Owua2eiedgPySjAKBggqhkjOPQQDAjA5 +-MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24g +-Um9vdCBDQSAzMB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkG +-A1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJvb3Qg +-Q0EgMzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABCmXp8ZBf8ANm+gBG1bG8lKl +-ui2yEujSLtf6ycXYqm0fc4E7O5hrOXwzpcVOho6AF2hiRVd9RFgdszflZwjrZt6j +-QjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSr +-ttvXBp43rDCGB5Fwx5zEGbF4wDAKBggqhkjOPQQDAgNJADBGAiEA4IWSoxe3jfkr +-BqWTrBqYaGFy+uGh0PsceGCmQ5nFuMQCIQCcAu/xlJyzlvnrxir4tiz+OpAUFteM +-YyRIHN8wfdVoOw== +------END CERTIFICATE----- +- +-# Issuer: CN=Amazon Root CA 4 O=Amazon +-# Subject: CN=Amazon Root CA 4 O=Amazon +-# Label: "Amazon Root CA 4" +-# Serial: 143266989758080763974105200630763877849284878 +-# MD5 Fingerprint: 89:bc:27:d5:eb:17:8d:06:6a:69:d5:fd:89:47:b4:cd +-# SHA1 Fingerprint: f6:10:84:07:d6:f8:bb:67:98:0c:c2:e2:44:c2:eb:ae:1c:ef:63:be +-# SHA256 Fingerprint: e3:5d:28:41:9e:d0:20:25:cf:a6:90:38:cd:62:39:62:45:8d:a5:c6:95:fb:de:a3:c2:2b:0b:fb:25:89:70:92 +------BEGIN CERTIFICATE----- +-MIIB8jCCAXigAwIBAgITBmyf18G7EEwpQ+Vxe3ssyBrBDjAKBggqhkjOPQQDAzA5 +-MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24g +-Um9vdCBDQSA0MB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkG +-A1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJvb3Qg +-Q0EgNDB2MBAGByqGSM49AgEGBSuBBAAiA2IABNKrijdPo1MN/sGKe0uoe0ZLY7Bi +-9i0b2whxIdIA6GO9mif78DluXeo9pcmBqqNbIJhFXRbb/egQbeOc4OO9X4Ri83Bk +-M6DLJC9wuoihKqB1+IGuYgbEgds5bimwHvouXKNCMEAwDwYDVR0TAQH/BAUwAwEB +-/zAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYEFNPsxzplbszh2naaVvuc84ZtV+WB +-MAoGCCqGSM49BAMDA2gAMGUCMDqLIfG9fhGt0O9Yli/W651+kI0rz2ZVwyzjKKlw +-CkcO8DdZEv8tmZQoTipPNU0zWgIxAOp1AE47xDqUEpHJWEadIRNyp4iciuRMStuW +-1KyLa2tJElMzrdfkviT8tQp21KW8EA== +------END CERTIFICATE----- +- +-# Issuer: CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1 O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK OU=Kamu Sertifikasyon Merkezi - Kamu SM +-# Subject: CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1 O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK OU=Kamu Sertifikasyon Merkezi - Kamu SM +-# Label: "TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1" +-# Serial: 1 +-# MD5 Fingerprint: dc:00:81:dc:69:2f:3e:2f:b0:3b:f6:3d:5a:91:8e:49 +-# SHA1 Fingerprint: 31:43:64:9b:ec:ce:27:ec:ed:3a:3f:0b:8f:0d:e4:e8:91:dd:ee:ca +-# SHA256 Fingerprint: 46:ed:c3:68:90:46:d5:3a:45:3f:b3:10:4a:b8:0d:ca:ec:65:8b:26:60:ea:16:29:dd:7e:86:79:90:64:87:16 +------BEGIN CERTIFICATE----- +-MIIEYzCCA0ugAwIBAgIBATANBgkqhkiG9w0BAQsFADCB0jELMAkGA1UEBhMCVFIx +-GDAWBgNVBAcTD0dlYnplIC0gS29jYWVsaTFCMEAGA1UEChM5VHVya2l5ZSBCaWxp +-bXNlbCB2ZSBUZWtub2xvamlrIEFyYXN0aXJtYSBLdXJ1bXUgLSBUVUJJVEFLMS0w +-KwYDVQQLEyRLYW11IFNlcnRpZmlrYXN5b24gTWVya2V6aSAtIEthbXUgU00xNjA0 +-BgNVBAMTLVRVQklUQUsgS2FtdSBTTSBTU0wgS29rIFNlcnRpZmlrYXNpIC0gU3Vy +-dW0gMTAeFw0xMzExMjUwODI1NTVaFw00MzEwMjUwODI1NTVaMIHSMQswCQYDVQQG +-EwJUUjEYMBYGA1UEBxMPR2ViemUgLSBLb2NhZWxpMUIwQAYDVQQKEzlUdXJraXll +-IEJpbGltc2VsIHZlIFRla25vbG9qaWsgQXJhc3Rpcm1hIEt1cnVtdSAtIFRVQklU +-QUsxLTArBgNVBAsTJEthbXUgU2VydGlmaWthc3lvbiBNZXJrZXppIC0gS2FtdSBT +-TTE2MDQGA1UEAxMtVFVCSVRBSyBLYW11IFNNIFNTTCBLb2sgU2VydGlmaWthc2kg +-LSBTdXJ1bSAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3UwM6q7 +-a9OZLBI3hNmNe5eA027n/5tQlT6QlVZC1xl8JoSNkvoBHToP4mQ4t4y86Ij5iySr +-LqP1N+RAjhgleYN1Hzv/bKjFxlb4tO2KRKOrbEz8HdDc72i9z+SqzvBV96I01INr +-N3wcwv61A+xXzry0tcXtAA9TNypN9E8Mg/uGz8v+jE69h/mniyFXnHrfA2eJLJ2X +-YacQuFWQfw4tJzh03+f92k4S400VIgLI4OD8D62K18lUUMw7D8oWgITQUVbDjlZ/ +-iSIzL+aFCr2lqBs23tPcLG07xxO9WSMs5uWk99gL7eqQQESolbuT1dCANLZGeA4f +-AJNG4e7p+exPFwIDAQABo0IwQDAdBgNVHQ4EFgQUZT/HiobGPN08VFw1+DrtUgxH +-V8gwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL +-BQADggEBACo/4fEyjq7hmFxLXs9rHmoJ0iKpEsdeV31zVmSAhHqT5Am5EM2fKifh +-AHe+SMg1qIGf5LgsyX8OsNJLN13qudULXjS99HMpw+0mFZx+CFOKWI3QSyjfwbPf +-IPP54+M638yclNhOT8NrF7f3cuitZjO1JVOr4PhMqZ398g26rrnZqsZr+ZO7rqu4 +-lzwDGrpDxpa5RXI4s6ehlj2Re37AIVNMh+3yC1SVUZPVIqUNivGTDj5UDrDYyU7c +-8jEyVupk+eq1nRZmQnLzf9OxMUP8pI4X8W0jq5Rm+K37DwhuJi1/FwcJsoz7UMCf +-lo3Ptv0AnVoUmr8CRPXBwp8iXqIPoeM= +------END CERTIFICATE----- +- +-# Issuer: CN=GDCA TrustAUTH R5 ROOT O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD. +-# Subject: CN=GDCA TrustAUTH R5 ROOT O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD. +-# Label: "GDCA TrustAUTH R5 ROOT" +-# Serial: 9009899650740120186 +-# MD5 Fingerprint: 63:cc:d9:3d:34:35:5c:6f:53:a3:e2:08:70:48:1f:b4 +-# SHA1 Fingerprint: 0f:36:38:5b:81:1a:25:c3:9b:31:4e:83:ca:e9:34:66:70:cc:74:b4 +-# SHA256 Fingerprint: bf:ff:8f:d0:44:33:48:7d:6a:8a:a6:0c:1a:29:76:7a:9f:c2:bb:b0:5e:42:0f:71:3a:13:b9:92:89:1d:38:93 +------BEGIN CERTIFICATE----- +-MIIFiDCCA3CgAwIBAgIIfQmX/vBH6nowDQYJKoZIhvcNAQELBQAwYjELMAkGA1UE +-BhMCQ04xMjAwBgNVBAoMKUdVQU5HIERPTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZ +-IENPLixMVEQuMR8wHQYDVQQDDBZHRENBIFRydXN0QVVUSCBSNSBST09UMB4XDTE0 +-MTEyNjA1MTMxNVoXDTQwMTIzMTE1NTk1OVowYjELMAkGA1UEBhMCQ04xMjAwBgNV +-BAoMKUdVQU5HIERPTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZIENPLixMVEQuMR8w +-HQYDVQQDDBZHRENBIFRydXN0QVVUSCBSNSBST09UMIICIjANBgkqhkiG9w0BAQEF +-AAOCAg8AMIICCgKCAgEA2aMW8Mh0dHeb7zMNOwZ+Vfy1YI92hhJCfVZmPoiC7XJj +-Dp6L3TQsAlFRwxn9WVSEyfFrs0yw6ehGXTjGoqcuEVe6ghWinI9tsJlKCvLriXBj +-TnnEt1u9ol2x8kECK62pOqPseQrsXzrj/e+APK00mxqriCZ7VqKChh/rNYmDf1+u +-KU49tm7srsHwJ5uu4/Ts765/94Y9cnrrpftZTqfrlYwiOXnhLQiPzLyRuEH3FMEj +-qcOtmkVEs7LXLM3GKeJQEK5cy4KOFxg2fZfmiJqwTTQJ9Cy5WmYqsBebnh52nUpm +-MUHfP/vFBu8btn4aRjb3ZGM74zkYI+dndRTVdVeSN72+ahsmUPI2JgaQxXABZG12 +-ZuGR224HwGGALrIuL4xwp9E7PLOR5G62xDtw8mySlwnNR30YwPO7ng/Wi64HtloP +-zgsMR6flPri9fcebNaBhlzpBdRfMK5Z3KpIhHtmVdiBnaM8Nvd/WHwlqmuLMc3Gk +-L30SgLdTMEZeS1SZD2fJpcjyIMGC7J0R38IC+xo70e0gmu9lZJIQDSri3nDxGGeC +-jGHeuLzRL5z7D9Ar7Rt2ueQ5Vfj4oR24qoAATILnsn8JuLwwoC8N9VKejveSswoA +-HQBUlwbgsQfZxw9cZX08bVlX5O2ljelAU58VS6Bx9hoh49pwBiFYFIeFd3mqgnkC +-AwEAAaNCMEAwHQYDVR0OBBYEFOLJQJ9NzuiaoXzPDj9lxSmIahlRMA8GA1UdEwEB +-/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQDRSVfg +-p8xoWLoBDysZzY2wYUWsEe1jUGn4H3++Fo/9nesLqjJHdtJnJO29fDMylyrHBYZm +-DRd9FBUb1Ov9H5r2XpdptxolpAqzkT9fNqyL7FeoPueBihhXOYV0GkLH6VsTX4/5 +-COmSdI31R9KrO9b7eGZONn356ZLpBN79SWP8bfsUcZNnL0dKt7n/HipzcEYwv1ry +-L3ml4Y0M2fmyYzeMN2WFcGpcWwlyua1jPLHd+PwyvzeG5LuOmCd+uh8W4XAR8gPf +-JWIyJyYYMoSf/wA6E7qaTfRPuBRwIrHKK5DOKcFw9C+df/KQHtZa37dG/OaG+svg +-IHZ6uqbL9XzeYqWxi+7egmaKTjowHz+Ay60nugxe19CxVsp3cbK1daFQqUBDF8Io +-2c9Si1vIY9RCPqAzekYu9wogRlR+ak8x8YF+QnQ4ZXMn7sZ8uI7XpTrXmKGcjBBV +-09tL7ECQ8s1uV9JiDnxXk7Gnbc2dg7sq5+W2O3FYrf3RRbxake5TFW/TRQl1brqQ +-XR4EzzffHqhmsYzmIGrv/EhOdJhCrylvLmrH+33RZjEizIYAfmaDDEL0vTSSwxrq +-T8p+ck0LcIymSLumoRT2+1hEmRSuqguTaaApJUqlyyvdimYHFngVV3Eb7PVHhPOe +-MTd61X8kreS8/f3MboPoDKi3QWwH3b08hpcv0g== +------END CERTIFICATE----- +- +-# Issuer: CN=TrustCor RootCert CA-1 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority +-# Subject: CN=TrustCor RootCert CA-1 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority +-# Label: "TrustCor RootCert CA-1" +-# Serial: 15752444095811006489 +-# MD5 Fingerprint: 6e:85:f1:dc:1a:00:d3:22:d5:b2:b2:ac:6b:37:05:45 +-# SHA1 Fingerprint: ff:bd:cd:e7:82:c8:43:5e:3c:6f:26:86:5c:ca:a8:3a:45:5b:c3:0a +-# SHA256 Fingerprint: d4:0e:9c:86:cd:8f:e4:68:c1:77:69:59:f4:9e:a7:74:fa:54:86:84:b6:c4:06:f3:90:92:61:f4:dc:e2:57:5c +------BEGIN CERTIFICATE----- +-MIIEMDCCAxigAwIBAgIJANqb7HHzA7AZMA0GCSqGSIb3DQEBCwUAMIGkMQswCQYD +-VQQGEwJQQTEPMA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5hbWEgQ2l0eTEk +-MCIGA1UECgwbVHJ1c3RDb3IgU3lzdGVtcyBTLiBkZSBSLkwuMScwJQYDVQQLDB5U +-cnVzdENvciBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxHzAdBgNVBAMMFlRydXN0Q29y +-IFJvb3RDZXJ0IENBLTEwHhcNMTYwMjA0MTIzMjE2WhcNMjkxMjMxMTcyMzE2WjCB +-pDELMAkGA1UEBhMCUEExDzANBgNVBAgMBlBhbmFtYTEUMBIGA1UEBwwLUGFuYW1h +-IENpdHkxJDAiBgNVBAoMG1RydXN0Q29yIFN5c3RlbXMgUy4gZGUgUi5MLjEnMCUG +-A1UECwweVHJ1c3RDb3IgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MR8wHQYDVQQDDBZU +-cnVzdENvciBSb290Q2VydCBDQS0xMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB +-CgKCAQEAv463leLCJhJrMxnHQFgKq1mqjQCj/IDHUHuO1CAmujIS2CNUSSUQIpid +-RtLByZ5OGy4sDjjzGiVoHKZaBeYei0i/mJZ0PmnK6bV4pQa81QBeCQryJ3pS/C3V +-seq0iWEk8xoT26nPUu0MJLq5nux+AHT6k61sKZKuUbS701e/s/OojZz0JEsq1pme +-9J7+wH5COucLlVPat2gOkEz7cD+PSiyU8ybdY2mplNgQTsVHCJCZGxdNuWxu72CV +-EY4hgLW9oHPY0LJ3xEXqWib7ZnZ2+AYfYW0PVcWDtxBWcgYHpfOxGgMFZA6dWorW +-hnAbJN7+KIor0Gqw/Hqi3LJ5DotlDwIDAQABo2MwYTAdBgNVHQ4EFgQU7mtJPHo/ +-DeOxCbeKyKsZn3MzUOcwHwYDVR0jBBgwFoAU7mtJPHo/DeOxCbeKyKsZn3MzUOcw +-DwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwDQYJKoZIhvcNAQELBQAD +-ggEBACUY1JGPE+6PHh0RU9otRCkZoB5rMZ5NDp6tPVxBb5UrJKF5mDo4Nvu7Zp5I +-/5CQ7z3UuJu0h3U/IJvOcs+hVcFNZKIZBqEHMwwLKeXx6quj7LUKdJDHfXLy11yf +-ke+Ri7fc7Waiz45mO7yfOgLgJ90WmMCV1Aqk5IGadZQ1nJBfiDcGrVmVCrDRZ9MZ +-yonnMlo2HD6CqFqTvsbQZJG2z9m2GM/bftJlo6bEjhcxwft+dtvTheNYsnd6djts +-L1Ac59v2Z3kf9YKVmgenFK+P3CghZwnS1k1aHBkcjndcw5QkPTJrS37UeJSDvjdN +-zl/HHk484IkzlQsPpTLWPFp5LBk= +------END CERTIFICATE----- +- +-# Issuer: CN=TrustCor RootCert CA-2 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority +-# Subject: CN=TrustCor RootCert CA-2 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority +-# Label: "TrustCor RootCert CA-2" +-# Serial: 2711694510199101698 +-# MD5 Fingerprint: a2:e1:f8:18:0b:ba:45:d5:c7:41:2a:bb:37:52:45:64 +-# SHA1 Fingerprint: b8:be:6d:cb:56:f1:55:b9:63:d4:12:ca:4e:06:34:c7:94:b2:1c:c0 +-# SHA256 Fingerprint: 07:53:e9:40:37:8c:1b:d5:e3:83:6e:39:5d:ae:a5:cb:83:9e:50:46:f1:bd:0e:ae:19:51:cf:10:fe:c7:c9:65 +------BEGIN CERTIFICATE----- +-MIIGLzCCBBegAwIBAgIIJaHfyjPLWQIwDQYJKoZIhvcNAQELBQAwgaQxCzAJBgNV +-BAYTAlBBMQ8wDQYDVQQIDAZQYW5hbWExFDASBgNVBAcMC1BhbmFtYSBDaXR5MSQw +-IgYDVQQKDBtUcnVzdENvciBTeXN0ZW1zIFMuIGRlIFIuTC4xJzAlBgNVBAsMHlRy +-dXN0Q29yIENlcnRpZmljYXRlIEF1dGhvcml0eTEfMB0GA1UEAwwWVHJ1c3RDb3Ig +-Um9vdENlcnQgQ0EtMjAeFw0xNjAyMDQxMjMyMjNaFw0zNDEyMzExNzI2MzlaMIGk +-MQswCQYDVQQGEwJQQTEPMA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5hbWEg +-Q2l0eTEkMCIGA1UECgwbVHJ1c3RDb3IgU3lzdGVtcyBTLiBkZSBSLkwuMScwJQYD +-VQQLDB5UcnVzdENvciBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxHzAdBgNVBAMMFlRy +-dXN0Q29yIFJvb3RDZXJ0IENBLTIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK +-AoICAQCnIG7CKqJiJJWQdsg4foDSq8GbZQWU9MEKENUCrO2fk8eHyLAnK0IMPQo+ +-QVqedd2NyuCb7GgypGmSaIwLgQ5WoD4a3SwlFIIvl9NkRvRUqdw6VC0xK5mC8tkq +-1+9xALgxpL56JAfDQiDyitSSBBtlVkxs1Pu2YVpHI7TYabS3OtB0PAx1oYxOdqHp +-2yqlO/rOsP9+aij9JxzIsekp8VduZLTQwRVtDr4uDkbIXvRR/u8OYzo7cbrPb1nK +-DOObXUm4TOJXsZiKQlecdu/vvdFoqNL0Cbt3Nb4lggjEFixEIFapRBF37120Hape +-az6LMvYHL1cEksr1/p3C6eizjkxLAjHZ5DxIgif3GIJ2SDpxsROhOdUuxTTCHWKF +-3wP+TfSvPd9cW436cOGlfifHhi5qjxLGhF5DUVCcGZt45vz27Ud+ez1m7xMTiF88 +-oWP7+ayHNZ/zgp6kPwqcMWmLmaSISo5uZk3vFsQPeSghYA2FFn3XVDjxklb9tTNM +-g9zXEJ9L/cb4Qr26fHMC4P99zVvh1Kxhe1fVSntb1IVYJ12/+CtgrKAmrhQhJ8Z3 +-mjOAPF5GP/fDsaOGM8boXg25NSyqRsGFAnWAoOsk+xWq5Gd/bnc/9ASKL3x74xdh +-8N0JqSDIvgmk0H5Ew7IwSjiqqewYmgeCK9u4nBit2uBGF6zPXQIDAQABo2MwYTAd +-BgNVHQ4EFgQU2f4hQG6UnrybPZx9mCAZ5YwwYrIwHwYDVR0jBBgwFoAU2f4hQG6U +-nrybPZx9mCAZ5YwwYrIwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYw +-DQYJKoZIhvcNAQELBQADggIBAJ5Fngw7tu/hOsh80QA9z+LqBrWyOrsGS2h60COX +-dKcs8AjYeVrXWoSK2BKaG9l9XE1wxaX5q+WjiYndAfrs3fnpkpfbsEZC89NiqpX+ +-MWcUaViQCqoL7jcjx1BRtPV+nuN79+TMQjItSQzL/0kMmx40/W5ulop5A7Zv2wnL +-/V9lFDfhOPXzYRZY5LVtDQsEGz9QLX+zx3oaFoBg+Iof6Rsqxvm6ARppv9JYx1RX +-CI/hOWB3S6xZhBqI8d3LT3jX5+EzLfzuQfogsL7L9ziUwOHQhQ+77Sxzq+3+knYa +-ZH9bDTMJBzN7Bj8RpFxwPIXAz+OQqIN3+tvmxYxoZxBnpVIt8MSZj3+/0WvitUfW +-2dCFmU2Umw9Lje4AWkcdEQOsQRivh7dvDDqPys/cA8GiCcjl/YBeyGBCARsaU1q7 +-N6a3vLqE6R5sGtRk2tRD/pOLS/IseRYQ1JMLiI+h2IYURpFHmygk71dSTlxCnKr3 +-Sewn6EAes6aJInKc9Q0ztFijMDvd1GpUk74aTfOTlPf8hAs/hCBcNANExdqtvArB +-As8e5ZTZ845b2EzwnexhF7sUMlQMAimTHpKG9n/v55IFDlndmQguLvqcAFLTxWYp +-5KeXRKQOKIETNcX2b2TmQcTVL8w0RSXPQQCWPUouwpaYT05KnJe32x+SMsj/D1Fu +-1uwJ +------END CERTIFICATE----- +- +-# Issuer: CN=TrustCor ECA-1 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority +-# Subject: CN=TrustCor ECA-1 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority +-# Label: "TrustCor ECA-1" +-# Serial: 9548242946988625984 +-# MD5 Fingerprint: 27:92:23:1d:0a:f5:40:7c:e9:e6:6b:9d:d8:f5:e7:6c +-# SHA1 Fingerprint: 58:d1:df:95:95:67:6b:63:c0:f0:5b:1c:17:4d:8b:84:0b:c8:78:bd +-# SHA256 Fingerprint: 5a:88:5d:b1:9c:01:d9:12:c5:75:93:88:93:8c:af:bb:df:03:1a:b2:d4:8e:91:ee:15:58:9b:42:97:1d:03:9c +------BEGIN CERTIFICATE----- +-MIIEIDCCAwigAwIBAgIJAISCLF8cYtBAMA0GCSqGSIb3DQEBCwUAMIGcMQswCQYD +-VQQGEwJQQTEPMA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5hbWEgQ2l0eTEk +-MCIGA1UECgwbVHJ1c3RDb3IgU3lzdGVtcyBTLiBkZSBSLkwuMScwJQYDVQQLDB5U +-cnVzdENvciBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxFzAVBgNVBAMMDlRydXN0Q29y +-IEVDQS0xMB4XDTE2MDIwNDEyMzIzM1oXDTI5MTIzMTE3MjgwN1owgZwxCzAJBgNV +-BAYTAlBBMQ8wDQYDVQQIDAZQYW5hbWExFDASBgNVBAcMC1BhbmFtYSBDaXR5MSQw +-IgYDVQQKDBtUcnVzdENvciBTeXN0ZW1zIFMuIGRlIFIuTC4xJzAlBgNVBAsMHlRy +-dXN0Q29yIENlcnRpZmljYXRlIEF1dGhvcml0eTEXMBUGA1UEAwwOVHJ1c3RDb3Ig +-RUNBLTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPj+ARtZ+odnbb +-3w9U73NjKYKtR8aja+3+XzP4Q1HpGjORMRegdMTUpwHmspI+ap3tDvl0mEDTPwOA +-BoJA6LHip1GnHYMma6ve+heRK9jGrB6xnhkB1Zem6g23xFUfJ3zSCNV2HykVh0A5 +-3ThFEXXQmqc04L/NyFIduUd+Dbi7xgz2c1cWWn5DkR9VOsZtRASqnKmcp0yJF4Ou +-owReUoCLHhIlERnXDH19MURB6tuvsBzvgdAsxZohmz3tQjtQJvLsznFhBmIhVE5/ +-wZ0+fyCMgMsq2JdiyIMzkX2woloPV+g7zPIlstR8L+xNxqE6FXrntl019fZISjZF +-ZtS6mFjBAgMBAAGjYzBhMB0GA1UdDgQWBBREnkj1zG1I1KBLf/5ZJC+Dl5mahjAf +-BgNVHSMEGDAWgBREnkj1zG1I1KBLf/5ZJC+Dl5mahjAPBgNVHRMBAf8EBTADAQH/ +-MA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQsFAAOCAQEABT41XBVwm8nHc2Fv +-civUwo/yQ10CzsSUuZQRg2dd4mdsdXa/uwyqNsatR5Nj3B5+1t4u/ukZMjgDfxT2 +-AHMsWbEhBuH7rBiVDKP/mZb3Kyeb1STMHd3BOuCYRLDE5D53sXOpZCz2HAF8P11F +-hcCF5yWPldwX8zyfGm6wyuMdKulMY/okYWLW2n62HGz1Ah3UKt1VkOsqEUc8Ll50 +-soIipX1TH0XsJ5F95yIW6MBoNtjG8U+ARDL54dHRHareqKucBK+tIA5kmE2la8BI +-WJZpTdwHjFGTot+fDz2LYLSCjaoITmJF4PkL0uDgPFveXHEnJcLmA4GLEFPjx1Wi +-tJ/X5g== +------END CERTIFICATE----- +- +-# Issuer: CN=SSL.com Root Certification Authority RSA O=SSL Corporation +-# Subject: CN=SSL.com Root Certification Authority RSA O=SSL Corporation +-# Label: "SSL.com Root Certification Authority RSA" +-# Serial: 8875640296558310041 +-# MD5 Fingerprint: 86:69:12:c0:70:f1:ec:ac:ac:c2:d5:bc:a5:5b:a1:29 +-# SHA1 Fingerprint: b7:ab:33:08:d1:ea:44:77:ba:14:80:12:5a:6f:bd:a9:36:49:0c:bb +-# SHA256 Fingerprint: 85:66:6a:56:2e:e0:be:5c:e9:25:c1:d8:89:0a:6f:76:a8:7e:c1:6d:4d:7d:5f:29:ea:74:19:cf:20:12:3b:69 +------BEGIN CERTIFICATE----- +-MIIF3TCCA8WgAwIBAgIIeyyb0xaAMpkwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UE +-BhMCVVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQK +-DA9TU0wgQ29ycG9yYXRpb24xMTAvBgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZp +-Y2F0aW9uIEF1dGhvcml0eSBSU0EwHhcNMTYwMjEyMTczOTM5WhcNNDEwMjEyMTcz +-OTM5WjB8MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hv +-dXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjExMC8GA1UEAwwoU1NMLmNv +-bSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IFJTQTCCAiIwDQYJKoZIhvcN +-AQEBBQADggIPADCCAgoCggIBAPkP3aMrfcvQKv7sZ4Wm5y4bunfh4/WvpOz6Sl2R +-xFdHaxh3a3by/ZPkPQ/CFp4LZsNWlJ4Xg4XOVu/yFv0AYvUiCVToZRdOQbngT0aX +-qhvIuG5iXmmxX9sqAn78bMrzQdjt0Oj8P2FI7bADFB0QDksZ4LtO7IZl/zbzXmcC +-C52GVWH9ejjt/uIZALdvoVBidXQ8oPrIJZK0bnoix/geoeOy3ZExqysdBP+lSgQ3 +-6YWkMyv94tZVNHwZpEpox7Ko07fKoZOI68GXvIz5HdkihCR0xwQ9aqkpk8zruFvh +-/l8lqjRYyMEjVJ0bmBHDOJx+PYZspQ9AhnwC9FwCTyjLrnGfDzrIM/4RJTXq/LrF +-YD3ZfBjVsqnTdXgDciLKOsMf7yzlLqn6niy2UUb9rwPW6mBo6oUWNmuF6R7As93E +-JNyAKoFBbZQ+yODJgUEAnl6/f8UImKIYLEJAs/lvOCdLToD0PYFH4Ih86hzOtXVc +-US4cK38acijnALXRdMbX5J+tB5O2UzU1/Dfkw/ZdFr4hc96SCvigY2q8lpJqPvi8 +-ZVWb3vUNiSYE/CUapiVpy8JtynziWV+XrOvvLsi81xtZPCvM8hnIk2snYxnP/Okm +-+Mpxm3+T/jRnhE6Z6/yzeAkzcLpmpnbtG3PrGqUNxCITIJRWCk4sbE6x/c+cCbqi +-M+2HAgMBAAGjYzBhMB0GA1UdDgQWBBTdBAkHovV6fVJTEpKV7jiAJQ2mWTAPBgNV +-HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFN0ECQei9Xp9UlMSkpXuOIAlDaZZMA4G +-A1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAIBgRlCn7Jp0cHh5wYfGV +-cpNxJK1ok1iOMq8bs3AD/CUrdIWQPXhq9LmLpZc7tRiRux6n+UBbkflVma8eEdBc +-Hadm47GUBwwyOabqG7B52B2ccETjit3E+ZUfijhDPwGFpUenPUayvOUiaPd7nNgs +-PgohyC0zrL/FgZkxdMF1ccW+sfAjRfSda/wZY52jvATGGAslu1OJD7OAUN5F7kR/ +-q5R4ZJjT9ijdh9hwZXT7DrkT66cPYakylszeu+1jTBi7qUD3oFRuIIhxdRjqerQ0 +-cuAjJ3dctpDqhiVAq+8zD8ufgr6iIPv2tS0a5sKFsXQP+8hlAqRSAUfdSSLBv9jr +-a6x+3uxjMxW3IwiPxg+NQVrdjsW5j+VFP3jbutIbQLH+cU0/4IGiul607BXgk90I +-H37hVZkLId6Tngr75qNJvTYw/ud3sqB1l7UtgYgXZSD32pAAn8lSzDLKNXz1PQ/Y +-K9f1JmzJBjSWFupwWRoyeXkLtoh/D1JIPb9s2KJELtFOt3JY04kTlf5Eq/jXixtu +-nLwsoFvVagCvXzfh1foQC5ichucmj87w7G6KVwuA406ywKBjYZC6VWg3dGq2ktuf +-oYYitmUnDuy2n0Jg5GfCtdpBC8TTi2EbvPofkSvXRAdeuims2cXp71NIWuuA8ShY +-Ic2wBlX7Jz9TkHCpBB5XJ7k= +------END CERTIFICATE----- +- +-# Issuer: CN=SSL.com Root Certification Authority ECC O=SSL Corporation +-# Subject: CN=SSL.com Root Certification Authority ECC O=SSL Corporation +-# Label: "SSL.com Root Certification Authority ECC" +-# Serial: 8495723813297216424 +-# MD5 Fingerprint: 2e:da:e4:39:7f:9c:8f:37:d1:70:9f:26:17:51:3a:8e +-# SHA1 Fingerprint: c3:19:7c:39:24:e6:54:af:1b:c4:ab:20:95:7a:e2:c3:0e:13:02:6a +-# SHA256 Fingerprint: 34:17:bb:06:cc:60:07:da:1b:96:1c:92:0b:8a:b4:ce:3f:ad:82:0e:4a:a3:0b:9a:cb:c4:a7:4e:bd:ce:bc:65 +------BEGIN CERTIFICATE----- +-MIICjTCCAhSgAwIBAgIIdebfy8FoW6gwCgYIKoZIzj0EAwIwfDELMAkGA1UEBhMC +-VVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9T +-U0wgQ29ycG9yYXRpb24xMTAvBgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZpY2F0 +-aW9uIEF1dGhvcml0eSBFQ0MwHhcNMTYwMjEyMTgxNDAzWhcNNDEwMjEyMTgxNDAz +-WjB8MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0 +-b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjExMC8GA1UEAwwoU1NMLmNvbSBS +-b290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IEVDQzB2MBAGByqGSM49AgEGBSuB +-BAAiA2IABEVuqVDEpiM2nl8ojRfLliJkP9x6jh3MCLOicSS6jkm5BBtHllirLZXI +-7Z4INcgn64mMU1jrYor+8FsPazFSY0E7ic3s7LaNGdM0B9y7xgZ/wkWV7Mt/qCPg +-CemB+vNH06NjMGEwHQYDVR0OBBYEFILRhXMw5zUE044CkvvlpNHEIejNMA8GA1Ud +-EwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUgtGFczDnNQTTjgKS++Wk0cQh6M0wDgYD +-VR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA2cAMGQCMG/n61kRpGDPYbCWe+0F+S8T +-kdzt5fxQaxFGRrMcIQBiu77D5+jNB5n5DQtdcj7EqgIwH7y6C+IwJPt8bYBVCpk+ +-gA0z5Wajs6O7pdWLjwkspl1+4vAHCGht0nxpbl/f5Wpl +------END CERTIFICATE----- +- +-# Issuer: CN=SSL.com EV Root Certification Authority RSA R2 O=SSL Corporation +-# Subject: CN=SSL.com EV Root Certification Authority RSA R2 O=SSL Corporation +-# Label: "SSL.com EV Root Certification Authority RSA R2" +-# Serial: 6248227494352943350 +-# MD5 Fingerprint: e1:1e:31:58:1a:ae:54:53:02:f6:17:6a:11:7b:4d:95 +-# SHA1 Fingerprint: 74:3a:f0:52:9b:d0:32:a0:f4:4a:83:cd:d4:ba:a9:7b:7c:2e:c4:9a +-# SHA256 Fingerprint: 2e:7b:f1:6c:c2:24:85:a7:bb:e2:aa:86:96:75:07:61:b0:ae:39:be:3b:2f:e9:d0:cc:6d:4e:f7:34:91:42:5c +------BEGIN CERTIFICATE----- +-MIIF6zCCA9OgAwIBAgIIVrYpzTS8ePYwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNV +-BAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjEYMBYGA1UE +-CgwPU1NMIENvcnBvcmF0aW9uMTcwNQYDVQQDDC5TU0wuY29tIEVWIFJvb3QgQ2Vy +-dGlmaWNhdGlvbiBBdXRob3JpdHkgUlNBIFIyMB4XDTE3MDUzMTE4MTQzN1oXDTQy +-MDUzMDE4MTQzN1owgYIxCzAJBgNVBAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4G +-A1UEBwwHSG91c3RvbjEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMTcwNQYDVQQD +-DC5TU0wuY29tIEVWIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgUlNBIFIy +-MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAjzZlQOHWTcDXtOlG2mvq +-M0fNTPl9fb69LT3w23jhhqXZuglXaO1XPqDQCEGD5yhBJB/jchXQARr7XnAjssuf +-OePPxU7Gkm0mxnu7s9onnQqG6YE3Bf7wcXHswxzpY6IXFJ3vG2fThVUCAtZJycxa +-4bH3bzKfydQ7iEGonL3Lq9ttewkfokxykNorCPzPPFTOZw+oz12WGQvE43LrrdF9 +-HSfvkusQv1vrO6/PgN3B0pYEW3p+pKk8OHakYo6gOV7qd89dAFmPZiw+B6KjBSYR +-aZfqhbcPlgtLyEDhULouisv3D5oi53+aNxPN8k0TayHRwMwi8qFG9kRpnMphNQcA +-b9ZhCBHqurj26bNg5U257J8UZslXWNvNh2n4ioYSA0e/ZhN2rHd9NCSFg83XqpyQ +-Gp8hLH94t2S42Oim9HizVcuE0jLEeK6jj2HdzghTreyI/BXkmg3mnxp3zkyPuBQV +-PWKchjgGAGYS5Fl2WlPAApiiECtoRHuOec4zSnaqW4EWG7WK2NAAe15itAnWhmMO +-pgWVSbooi4iTsjQc2KRVbrcc0N6ZVTsj9CLg+SlmJuwgUHfbSguPvuUCYHBBXtSu +-UDkiFCbLsjtzdFVHB3mBOagwE0TlBIqulhMlQg+5U8Sb/M3kHN48+qvWBkofZ6aY +-MBzdLNvcGJVXZsb/XItW9XcCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAfBgNV +-HSMEGDAWgBT5YLvU49U09rj1BoAlp3PbRmmonjAdBgNVHQ4EFgQU+WC71OPVNPa4 +-9QaAJadz20ZpqJ4wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQBW +-s47LCp1Jjr+kxJG7ZhcFUZh1++VQLHqe8RT6q9OKPv+RKY9ji9i0qVQBDb6Thi/5 +-Sm3HXvVX+cpVHBK+Rw82xd9qt9t1wkclf7nxY/hoLVUE0fKNsKTPvDxeH3jnpaAg +-cLAExbf3cqfeIg29MyVGjGSSJuM+LmOW2puMPfgYCdcDzH2GguDKBAdRUNf/ktUM +-79qGn5nX67evaOI5JpS6aLe/g9Pqemc9YmeuJeVy6OLk7K4S9ksrPJ/psEDzOFSz +-/bdoyNrGj1E8svuR3Bznm53htw1yj+KkxKl4+esUrMZDBcJlOSgYAsOCsp0FvmXt +-ll9ldDz7CTUue5wT/RsPXcdtgTpWD8w74a8CLyKsRspGPKAcTNZEtF4uXBVmCeEm +-Kf7GUmG6sXP/wwyc5WxqlD8UykAWlYTzWamsX0xhk23RO8yilQwipmdnRC652dKK +-QbNmC1r7fSOl8hqw/96bg5Qu0T/fkreRrwU7ZcegbLHNYhLDkBvjJc40vG93drEQ +-w/cFGsDWr3RiSBd3kmmQYRzelYB0VI8YHMPzA9C/pEN1hlMYegouCRw2n5H9gooi +-S9EOUCXdywMMF8mDAAhONU2Ki+3wApRmLER/y5UnlhetCTCstnEXbosX9hwJ1C07 +-mKVx01QT2WDz9UtmT/rx7iASjbSsV7FFY6GsdqnC+w== +------END CERTIFICATE----- +- +-# Issuer: CN=SSL.com EV Root Certification Authority ECC O=SSL Corporation +-# Subject: CN=SSL.com EV Root Certification Authority ECC O=SSL Corporation +-# Label: "SSL.com EV Root Certification Authority ECC" +-# Serial: 3182246526754555285 +-# MD5 Fingerprint: 59:53:22:65:83:42:01:54:c0:ce:42:b9:5a:7c:f2:90 +-# SHA1 Fingerprint: 4c:dd:51:a3:d1:f5:20:32:14:b0:c6:c5:32:23:03:91:c7:46:42:6d +-# SHA256 Fingerprint: 22:a2:c1:f7:bd:ed:70:4c:c1:e7:01:b5:f4:08:c3:10:88:0f:e9:56:b5:de:2a:4a:44:f9:9c:87:3a:25:a7:c8 +------BEGIN CERTIFICATE----- +-MIIClDCCAhqgAwIBAgIILCmcWxbtBZUwCgYIKoZIzj0EAwIwfzELMAkGA1UEBhMC +-VVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9T +-U0wgQ29ycG9yYXRpb24xNDAyBgNVBAMMK1NTTC5jb20gRVYgUm9vdCBDZXJ0aWZp +-Y2F0aW9uIEF1dGhvcml0eSBFQ0MwHhcNMTYwMjEyMTgxNTIzWhcNNDEwMjEyMTgx +-NTIzWjB/MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hv +-dXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjE0MDIGA1UEAwwrU1NMLmNv +-bSBFViBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IEVDQzB2MBAGByqGSM49 +-AgEGBSuBBAAiA2IABKoSR5CYG/vvw0AHgyBO8TCCogbR8pKGYfL2IWjKAMTH6kMA +-VIbc/R/fALhBYlzccBYy3h+Z1MzFB8gIH2EWB1E9fVwHU+M1OIzfzZ/ZLg1Kthku +-WnBaBu2+8KGwytAJKaNjMGEwHQYDVR0OBBYEFFvKXuXe0oGqzagtZFG22XKbl+ZP +-MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUW8pe5d7SgarNqC1kUbbZcpuX +-5k8wDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA2gAMGUCMQCK5kCJN+vp1RPZ +-ytRrJPOwPYdGWBrssd9v+1a6cGvHOMzosYxPD/fxZ3YOg9AeUY8CMD32IygmTMZg +-h5Mmm7I1HrrW9zzRHM76JTymGoEVW/MSD2zuZYrJh6j5B+BimoxcSg== +------END CERTIFICATE----- +- +-# Issuer: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R6 +-# Subject: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R6 +-# Label: "GlobalSign Root CA - R6" +-# Serial: 1417766617973444989252670301619537 +-# MD5 Fingerprint: 4f:dd:07:e4:d4:22:64:39:1e:0c:37:42:ea:d1:c6:ae +-# SHA1 Fingerprint: 80:94:64:0e:b5:a7:a1:ca:11:9c:1f:dd:d5:9f:81:02:63:a7:fb:d1 +-# SHA256 Fingerprint: 2c:ab:ea:fe:37:d0:6c:a2:2a:ba:73:91:c0:03:3d:25:98:29:52:c4:53:64:73:49:76:3a:3a:b5:ad:6c:cf:69 +------BEGIN CERTIFICATE----- +-MIIFgzCCA2ugAwIBAgIORea7A4Mzw4VlSOb/RVEwDQYJKoZIhvcNAQEMBQAwTDEg +-MB4GA1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjYxEzARBgNVBAoTCkdsb2Jh +-bFNpZ24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMTQxMjEwMDAwMDAwWhcNMzQx +-MjEwMDAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSNjET +-MBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjCCAiIwDQYJ +-KoZIhvcNAQEBBQADggIPADCCAgoCggIBAJUH6HPKZvnsFMp7PPcNCPG0RQssgrRI +-xutbPK6DuEGSMxSkb3/pKszGsIhrxbaJ0cay/xTOURQh7ErdG1rG1ofuTToVBu1k +-ZguSgMpE3nOUTvOniX9PeGMIyBJQbUJmL025eShNUhqKGoC3GYEOfsSKvGRMIRxD +-aNc9PIrFsmbVkJq3MQbFvuJtMgamHvm566qjuL++gmNQ0PAYid/kD3n16qIfKtJw +-LnvnvJO7bVPiSHyMEAc4/2ayd2F+4OqMPKq0pPbzlUoSB239jLKJz9CgYXfIWHSw +-1CM69106yqLbnQneXUQtkPGBzVeS+n68UARjNN9rkxi+azayOeSsJDa38O+2HBNX +-k7besvjihbdzorg1qkXy4J02oW9UivFyVm4uiMVRQkQVlO6jxTiWm05OWgtH8wY2 +-SXcwvHE35absIQh1/OZhFj931dmRl4QKbNQCTXTAFO39OfuD8l4UoQSwC+n+7o/h +-bguyCLNhZglqsQY6ZZZZwPA1/cnaKI0aEYdwgQqomnUdnjqGBQCe24DWJfncBZ4n +-WUx2OVvq+aWh2IMP0f/fMBH5hc8zSPXKbWQULHpYT9NLCEnFlWQaYw55PfWzjMpY +-rZxCRXluDocZXFSxZba/jJvcE+kNb7gu3GduyYsRtYQUigAZcIN5kZeR1Bonvzce +-MgfYFGM8KEyvAgMBAAGjYzBhMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTAD +-AQH/MB0GA1UdDgQWBBSubAWjkxPioufi1xzWx/B/yGdToDAfBgNVHSMEGDAWgBSu +-bAWjkxPioufi1xzWx/B/yGdToDANBgkqhkiG9w0BAQwFAAOCAgEAgyXt6NH9lVLN +-nsAEoJFp5lzQhN7craJP6Ed41mWYqVuoPId8AorRbrcWc+ZfwFSY1XS+wc3iEZGt +-Ixg93eFyRJa0lV7Ae46ZeBZDE1ZXs6KzO7V33EByrKPrmzU+sQghoefEQzd5Mr61 +-55wsTLxDKZmOMNOsIeDjHfrYBzN2VAAiKrlNIC5waNrlU/yDXNOd8v9EDERm8tLj +-vUYAGm0CuiVdjaExUd1URhxN25mW7xocBFymFe944Hn+Xds+qkxV/ZoVqW/hpvvf +-cDDpw+5CRu3CkwWJ+n1jez/QcYF8AOiYrg54NMMl+68KnyBr3TsTjxKM4kEaSHpz +-oHdpx7Zcf4LIHv5YGygrqGytXm3ABdJ7t+uA/iU3/gKbaKxCXcPu9czc8FB10jZp +-nOZ7BN9uBmm23goJSFmH63sUYHpkqmlD75HHTOwY3WzvUy2MmeFe8nI+z1TIvWfs +-pA9MRf/TuTAjB0yPEL+GltmZWrSZVxykzLsViVO6LAUP5MSeGbEYNNVMnbrt9x+v +-JJUEeKgDu+6B5dpffItKoZB0JaezPkvILFa9x8jvOOJckvB595yEunQtYQEgfn7R +-8k8HWV+LLUNS60YMlOH1Zkd5d9VUWx+tJDfLRVpOoERIyNiwmcUVhAn21klJwGW4 +-5hpxbqCo8YLoRT5s1gLXCmeDBVrJpBA= +------END CERTIFICATE----- +- +-# Issuer: CN=OISTE WISeKey Global Root GC CA O=WISeKey OU=OISTE Foundation Endorsed +-# Subject: CN=OISTE WISeKey Global Root GC CA O=WISeKey OU=OISTE Foundation Endorsed +-# Label: "OISTE WISeKey Global Root GC CA" +-# Serial: 44084345621038548146064804565436152554 +-# MD5 Fingerprint: a9:d6:b9:2d:2f:93:64:f8:a5:69:ca:91:e9:68:07:23 +-# SHA1 Fingerprint: e0:11:84:5e:34:de:be:88:81:b9:9c:f6:16:26:d1:96:1f:c3:b9:31 +-# SHA256 Fingerprint: 85:60:f9:1c:36:24:da:ba:95:70:b5:fe:a0:db:e3:6f:f1:1a:83:23:be:94:86:85:4f:b3:f3:4a:55:71:19:8d +------BEGIN CERTIFICATE----- +-MIICaTCCAe+gAwIBAgIQISpWDK7aDKtARb8roi066jAKBggqhkjOPQQDAzBtMQsw +-CQYDVQQGEwJDSDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUgRm91 +-bmRhdGlvbiBFbmRvcnNlZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9iYWwg +-Um9vdCBHQyBDQTAeFw0xNzA1MDkwOTQ4MzRaFw00MjA1MDkwOTU4MzNaMG0xCzAJ +-BgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYDVQQLExlPSVNURSBGb3Vu +-ZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEdsb2JhbCBS +-b290IEdDIENBMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAETOlQwMYPchi82PG6s4ni +-eUqjFqdrVCTbUf/q9Akkwwsin8tqJ4KBDdLArzHkdIJuyiXZjHWd8dvQmqJLIX4W +-p2OQ0jnUsYd4XxiWD1AbNTcPasbc2RNNpI6QN+a9WzGRo1QwUjAOBgNVHQ8BAf8E +-BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUSIcUrOPDnpBgOtfKie7T +-rYy0UGYwEAYJKwYBBAGCNxUBBAMCAQAwCgYIKoZIzj0EAwMDaAAwZQIwJsdpW9zV +-57LnyAyMjMPdeYwbY9XJUpROTYJKcx6ygISpJcBMWm1JKWB4E+J+SOtkAjEA2zQg +-Mgj/mkkCtojeFK9dbJlxjRo/i9fgojaGHAeCOnZT/cKi7e97sIBPWA9LUzm9 +------END CERTIFICATE----- +- +-# Issuer: CN=GTS Root R1 O=Google Trust Services LLC +-# Subject: CN=GTS Root R1 O=Google Trust Services LLC +-# Label: "GTS Root R1" +-# Serial: 146587175971765017618439757810265552097 +-# MD5 Fingerprint: 82:1a:ef:d4:d2:4a:f2:9f:e2:3d:97:06:14:70:72:85 +-# SHA1 Fingerprint: e1:c9:50:e6:ef:22:f8:4c:56:45:72:8b:92:20:60:d7:d5:a7:a3:e8 +-# SHA256 Fingerprint: 2a:57:54:71:e3:13:40:bc:21:58:1c:bd:2c:f1:3e:15:84:63:20:3e:ce:94:bc:f9:d3:cc:19:6b:f0:9a:54:72 +------BEGIN CERTIFICATE----- +-MIIFWjCCA0KgAwIBAgIQbkepxUtHDA3sM9CJuRz04TANBgkqhkiG9w0BAQwFADBH +-MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM +-QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIy +-MDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNl +-cnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwggIiMA0GCSqGSIb3DQEB +-AQUAA4ICDwAwggIKAoICAQC2EQKLHuOhd5s73L+UPreVp0A8of2C+X0yBoJx9vaM +-f/vo27xqLpeXo4xL+Sv2sfnOhB2x+cWX3u+58qPpvBKJXqeqUqv4IyfLpLGcY9vX +-mX7wCl7raKb0xlpHDU0QM+NOsROjyBhsS+z8CZDfnWQpJSMHobTSPS5g4M/SCYe7 +-zUjwTcLCeoiKu7rPWRnWr4+wB7CeMfGCwcDfLqZtbBkOtdh+JhpFAz2weaSUKK0P +-fyblqAj+lug8aJRT7oM6iCsVlgmy4HqMLnXWnOunVmSPlk9orj2XwoSPwLxAwAtc +-vfaHszVsrBhQf4TgTM2S0yDpM7xSma8ytSmzJSq0SPly4cpk9+aCEI3oncKKiPo4 +-Zor8Y/kB+Xj9e1x3+naH+uzfsQ55lVe0vSbv1gHR6xYKu44LtcXFilWr06zqkUsp +-zBmkMiVOKvFlRNACzqrOSbTqn3yDsEB750Orp2yjj32JgfpMpf/VjsPOS+C12LOO +-Rc92wO1AK/1TD7Cn1TsNsYqiA94xrcx36m97PtbfkSIS5r762DL8EGMUUXLeXdYW +-k70paDPvOmbsB4om3xPXV2V4J95eSRQAogB/mqghtqmxlbCluQ0WEdrHbEg8QOB+ +-DVrNVjzRlwW5y0vtOUucxD/SVRNuJLDWcfr0wbrM7Rv1/oFB2ACYPTrIrnqYNxgF +-lQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV +-HQ4EFgQU5K8rJnEaK0gnhS9SZizv8IkTcT4wDQYJKoZIhvcNAQEMBQADggIBADiW +-Cu49tJYeX++dnAsznyvgyv3SjgofQXSlfKqE1OXyHuY3UjKcC9FhHb8owbZEKTV1 +-d5iyfNm9dKyKaOOpMQkpAWBz40d8U6iQSifvS9efk+eCNs6aaAyC58/UEBZvXw6Z +-XPYfcX3v73svfuo21pdwCxXu11xWajOl40k4DLh9+42FpLFZXvRq4d2h9mREruZR +-gyFmxhE+885H7pwoHyXa/6xmld01D1zvICxi/ZG6qcz8WpyTgYMpl0p8WnK0OdC3 +-d8t5/Wk6kjftbjhlRn7pYL15iJdfOBL07q9bgsiG1eGZbYwE8na6SfZu6W0eX6Dv +-J4J2QPim01hcDyxC2kLGe4g0x8HYRZvBPsVhHdljUEn2NIVq4BjFbkerQUIpm/Zg +-DdIx02OYI5NaAIFItO/Nis3Jz5nu2Z6qNuFoS3FJFDYoOj0dzpqPJeaAcWErtXvM +-+SUWgeExX6GjfhaknBZqlxi9dnKlC54dNuYvoS++cJEPqOba+MSSQGwlfnuzCdyy +-F62ARPBopY+Udf90WuioAnwMCeKpSwughQtiue+hMZL77/ZRBIls6Kl0obsXs7X9 +-SQ98POyDGCBDTtWTurQ0sR8WNh8M5mQ5Fkzc4P4dyKliPUDqysU0ArSuiYgzNdws +-E3PYJ/HQcu51OyLemGhmW/HGY0dVHLqlCFF1pkgl +------END CERTIFICATE----- +- +-# Issuer: CN=GTS Root R2 O=Google Trust Services LLC +-# Subject: CN=GTS Root R2 O=Google Trust Services LLC +-# Label: "GTS Root R2" +-# Serial: 146587176055767053814479386953112547951 +-# MD5 Fingerprint: 44:ed:9a:0e:a4:09:3b:00:f2:ae:4c:a3:c6:61:b0:8b +-# SHA1 Fingerprint: d2:73:96:2a:2a:5e:39:9f:73:3f:e1:c7:1e:64:3f:03:38:34:fc:4d +-# SHA256 Fingerprint: c4:5d:7b:b0:8e:6d:67:e6:2e:42:35:11:0b:56:4e:5f:78:fd:92:ef:05:8c:84:0a:ea:4e:64:55:d7:58:5c:60 +------BEGIN CERTIFICATE----- +-MIIFWjCCA0KgAwIBAgIQbkepxlqz5yDFMJo/aFLybzANBgkqhkiG9w0BAQwFADBH +-MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM +-QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjIwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIy +-MDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNl +-cnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjIwggIiMA0GCSqGSIb3DQEB +-AQUAA4ICDwAwggIKAoICAQDO3v2m++zsFDQ8BwZabFn3GTXd98GdVarTzTukk3Lv +-CvptnfbwhYBboUhSnznFt+4orO/LdmgUud+tAWyZH8QiHZ/+cnfgLFuv5AS/T3Kg +-GjSY6Dlo7JUle3ah5mm5hRm9iYz+re026nO8/4Piy33B0s5Ks40FnotJk9/BW9Bu +-XvAuMC6C/Pq8tBcKSOWIm8Wba96wyrQD8Nr0kLhlZPdcTK3ofmZemde4wj7I0BOd +-re7kRXuJVfeKH2JShBKzwkCX44ofR5GmdFrS+LFjKBC4swm4VndAoiaYecb+3yXu +-PuWgf9RhD1FLPD+M2uFwdNjCaKH5wQzpoeJ/u1U8dgbuak7MkogwTZq9TwtImoS1 +-mKPV+3PBV2HdKFZ1E66HjucMUQkQdYhMvI35ezzUIkgfKtzra7tEscszcTJGr61K +-8YzodDqs5xoic4DSMPclQsciOzsSrZYuxsN2B6ogtzVJV+mSSeh2FnIxZyuWfoqj +-x5RWIr9qS34BIbIjMt/kmkRtWVtd9QCgHJvGeJeNkP+byKq0rxFROV7Z+2et1VsR +-nTKaG73VululycslaVNVJ1zgyjbLiGH7HrfQy+4W+9OmTN6SpdTi3/UGVN4unUu0 +-kzCqgc7dGtxRcw1PcOnlthYhGXmy5okLdWTK1au8CcEYof/UVKGFPP0UJAOyh9Ok +-twIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV +-HQ4EFgQUu//KjiOfT5nK2+JopqUVJxce2Q4wDQYJKoZIhvcNAQEMBQADggIBALZp +-8KZ3/p7uC4Gt4cCpx/k1HUCCq+YEtN/L9x0Pg/B+E02NjO7jMyLDOfxA325BS0JT +-vhaI8dI4XsRomRyYUpOM52jtG2pzegVATX9lO9ZY8c6DR2Dj/5epnGB3GFW1fgiT +-z9D2PGcDFWEJ+YF59exTpJ/JjwGLc8R3dtyDovUMSRqodt6Sm2T4syzFJ9MHwAiA +-pJiS4wGWAqoC7o87xdFtCjMwc3i5T1QWvwsHoaRc5svJXISPD+AVdyx+Jn7axEvb +-pxZ3B7DNdehyQtaVhJ2Gg/LkkM0JR9SLA3DaWsYDQvTtN6LwG1BUSw7YhN4ZKJmB +-R64JGz9I0cNv4rBgF/XuIwKl2gBbbZCr7qLpGzvpx0QnRY5rn/WkhLx3+WuXrD5R +-RaIRpsyF7gpo8j5QOHokYh4XIDdtak23CZvJ/KRY9bb7nE4Yu5UC56GtmwfuNmsk +-0jmGwZODUNKBRqhfYlcsu2xkiAhu7xNUX90txGdj08+JN7+dIPT7eoOboB6BAFDC +-5AwiWVIQ7UNWhwD4FFKnHYuTjKJNRn8nxnGbJN7k2oaLDX5rIMHAnuFl2GqjpuiF +-izoHCBy69Y9Vmhh1fuXsgWbRIXOhNUQLgD1bnF5vKheW0YMjiGZt5obicDIvUiLn +-yOd/xCxgXS/Dr55FBcOEArf9LAhST4Ldo/DUhgkC +------END CERTIFICATE----- +- +-# Issuer: CN=GTS Root R3 O=Google Trust Services LLC +-# Subject: CN=GTS Root R3 O=Google Trust Services LLC +-# Label: "GTS Root R3" +-# Serial: 146587176140553309517047991083707763997 +-# MD5 Fingerprint: 1a:79:5b:6b:04:52:9c:5d:c7:74:33:1b:25:9a:f9:25 +-# SHA1 Fingerprint: 30:d4:24:6f:07:ff:db:91:89:8a:0b:e9:49:66:11:eb:8c:5e:46:e5 +-# SHA256 Fingerprint: 15:d5:b8:77:46:19:ea:7d:54:ce:1c:a6:d0:b0:c4:03:e0:37:a9:17:f1:31:e8:a0:4e:1e:6b:7a:71:ba:bc:e5 +------BEGIN CERTIFICATE----- +-MIICDDCCAZGgAwIBAgIQbkepx2ypcyRAiQ8DVd2NHTAKBggqhkjOPQQDAzBHMQsw +-CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU +-MBIGA1UEAxMLR1RTIFJvb3QgUjMwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAw +-MDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp +-Y2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwdjAQBgcqhkjOPQIBBgUrgQQA +-IgNiAAQfTzOHMymKoYTey8chWEGJ6ladK0uFxh1MJ7x/JlFyb+Kf1qPKzEUURout +-736GjOyxfi//qXGdGIRFBEFVbivqJn+7kAHjSxm65FSWRQmx1WyRRK2EE46ajA2A +-DDL24CejQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud +-DgQWBBTB8Sa6oC2uhYHP0/EqEr24Cmf9vDAKBggqhkjOPQQDAwNpADBmAjEAgFuk +-fCPAlaUs3L6JbyO5o91lAFJekazInXJ0glMLfalAvWhgxeG4VDvBNhcl2MG9AjEA +-njWSdIUlUfUk7GRSJFClH9voy8l27OyCbvWFGFPouOOaKaqW04MjyaR7YbPMAuhd +------END CERTIFICATE----- +- +-# Issuer: CN=GTS Root R4 O=Google Trust Services LLC +-# Subject: CN=GTS Root R4 O=Google Trust Services LLC +-# Label: "GTS Root R4" +-# Serial: 146587176229350439916519468929765261721 +-# MD5 Fingerprint: 5d:b6:6a:c4:60:17:24:6a:1a:99:a8:4b:ee:5e:b4:26 +-# SHA1 Fingerprint: 2a:1d:60:27:d9:4a:b1:0a:1c:4d:91:5c:cd:33:a0:cb:3e:2d:54:cb +-# SHA256 Fingerprint: 71:cc:a5:39:1f:9e:79:4b:04:80:25:30:b3:63:e1:21:da:8a:30:43:bb:26:66:2f:ea:4d:ca:7f:c9:51:a4:bd +------BEGIN CERTIFICATE----- +-MIICCjCCAZGgAwIBAgIQbkepyIuUtui7OyrYorLBmTAKBggqhkjOPQQDAzBHMQsw +-CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU +-MBIGA1UEAxMLR1RTIFJvb3QgUjQwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAw +-MDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp +-Y2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjQwdjAQBgcqhkjOPQIBBgUrgQQA +-IgNiAATzdHOnaItgrkO4NcWBMHtLSZ37wWHO5t5GvWvVYRg1rkDdc/eJkTBa6zzu +-hXyiQHY7qca4R9gq55KRanPpsXI5nymfopjTX15YhmUPoYRlBtHci8nHc8iMai/l +-xKvRHYqjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud +-DgQWBBSATNbrdP9JNqPV2Py1PsVq8JQdjDAKBggqhkjOPQQDAwNnADBkAjBqUFJ0 +-CMRw3J5QdCHojXohw0+WbhXRIjVhLfoIN+4Zba3bssx9BzT1YBkstTTZbyACMANx +-sbqjYAuG7ZoIapVon+Kz4ZNkfF6Tpt95LY2F45TPI11xzPKwTdb+mciUqXWi4w== +------END CERTIFICATE----- +- +-# Issuer: CN=UCA Global G2 Root O=UniTrust +-# Subject: CN=UCA Global G2 Root O=UniTrust +-# Label: "UCA Global G2 Root" +-# Serial: 124779693093741543919145257850076631279 +-# MD5 Fingerprint: 80:fe:f0:c4:4a:f0:5c:62:32:9f:1c:ba:78:a9:50:f8 +-# SHA1 Fingerprint: 28:f9:78:16:19:7a:ff:18:25:18:aa:44:fe:c1:a0:ce:5c:b6:4c:8a +-# SHA256 Fingerprint: 9b:ea:11:c9:76:fe:01:47:64:c1:be:56:a6:f9:14:b5:a5:60:31:7a:bd:99:88:39:33:82:e5:16:1a:a0:49:3c +------BEGIN CERTIFICATE----- +-MIIFRjCCAy6gAwIBAgIQXd+x2lqj7V2+WmUgZQOQ7zANBgkqhkiG9w0BAQsFADA9 +-MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxGzAZBgNVBAMMElVDQSBH +-bG9iYWwgRzIgUm9vdDAeFw0xNjAzMTEwMDAwMDBaFw00MDEyMzEwMDAwMDBaMD0x +-CzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDEbMBkGA1UEAwwSVUNBIEds +-b2JhbCBHMiBSb290MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxeYr +-b3zvJgUno4Ek2m/LAfmZmqkywiKHYUGRO8vDaBsGxUypK8FnFyIdK+35KYmToni9 +-kmugow2ifsqTs6bRjDXVdfkX9s9FxeV67HeToI8jrg4aA3++1NDtLnurRiNb/yzm +-VHqUwCoV8MmNsHo7JOHXaOIxPAYzRrZUEaalLyJUKlgNAQLx+hVRZ2zA+te2G3/R +-VogvGjqNO7uCEeBHANBSh6v7hn4PJGtAnTRnvI3HLYZveT6OqTwXS3+wmeOwcWDc +-C/Vkw85DvG1xudLeJ1uK6NjGruFZfc8oLTW4lVYa8bJYS7cSN8h8s+1LgOGN+jIj +-tm+3SJUIsUROhYw6AlQgL9+/V087OpAh18EmNVQg7Mc/R+zvWr9LesGtOxdQXGLY +-D0tK3Cv6brxzks3sx1DoQZbXqX5t2Okdj4q1uViSukqSKwxW/YDrCPBeKW4bHAyv +-j5OJrdu9o54hyokZ7N+1wxrrFv54NkzWbtA+FxyQF2smuvt6L78RHBgOLXMDj6Dl +-NaBa4kx1HXHhOThTeEDMg5PXCp6dW4+K5OXgSORIskfNTip1KnvyIvbJvgmRlld6 +-iIis7nCs+dwp4wwcOxJORNanTrAmyPPZGpeRaOrvjUYG0lZFWJo8DA+DuAUlwznP +-O6Q0ibd5Ei9Hxeepl2n8pndntd978XplFeRhVmUCAwEAAaNCMEAwDgYDVR0PAQH/ +-BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFIHEjMz15DD/pQwIX4wV +-ZyF0Ad/fMA0GCSqGSIb3DQEBCwUAA4ICAQATZSL1jiutROTL/7lo5sOASD0Ee/oj +-L3rtNtqyzm325p7lX1iPyzcyochltq44PTUbPrw7tgTQvPlJ9Zv3hcU2tsu8+Mg5 +-1eRfB70VVJd0ysrtT7q6ZHafgbiERUlMjW+i67HM0cOU2kTC5uLqGOiiHycFutfl +-1qnN3e92mI0ADs0b+gO3joBYDic/UvuUospeZcnWhNq5NXHzJsBPd+aBJ9J3O5oU +-b3n09tDh05S60FdRvScFDcH9yBIw7m+NESsIndTUv4BFFJqIRNow6rSn4+7vW4LV +-PtateJLbXDzz2K36uGt/xDYotgIVilQsnLAXc47QN6MUPJiVAAwpBVueSUmxX8fj +-y88nZY41F7dXyDDZQVu5FLbowg+UMaeUmMxq67XhJ/UQqAHojhJi6IjMtX9Gl8Cb +-EGY4GjZGXyJoPd/JxhMnq1MGrKI8hgZlb7F+sSlEmqO6SWkoaY/X5V+tBIZkbxqg +-DMUIYs6Ao9Dz7GjevjPHF1t/gMRMTLGmhIrDO7gJzRSBuhjjVFc2/tsvfEehOjPI +-+Vg7RE+xygKJBJYoaMVLuCaJu9YzL1DV/pqJuhgyklTGW+Cd+V7lDSKb9triyCGy +-YiGqhkCyLmTTX8jjfhFnRR8F/uOi77Oos/N9j/gMHyIfLXC0uAE0djAA5SN4p1bX +-UB+K+wb1whnw0A== +------END CERTIFICATE----- +- +-# Issuer: CN=UCA Extended Validation Root O=UniTrust +-# Subject: CN=UCA Extended Validation Root O=UniTrust +-# Label: "UCA Extended Validation Root" +-# Serial: 106100277556486529736699587978573607008 +-# MD5 Fingerprint: a1:f3:5f:43:c6:34:9b:da:bf:8c:7e:05:53:ad:96:e2 +-# SHA1 Fingerprint: a3:a1:b0:6f:24:61:23:4a:e3:36:a5:c2:37:fc:a6:ff:dd:f0:d7:3a +-# SHA256 Fingerprint: d4:3a:f9:b3:54:73:75:5c:96:84:fc:06:d7:d8:cb:70:ee:5c:28:e7:73:fb:29:4e:b4:1e:e7:17:22:92:4d:24 +------BEGIN CERTIFICATE----- +-MIIFWjCCA0KgAwIBAgIQT9Irj/VkyDOeTzRYZiNwYDANBgkqhkiG9w0BAQsFADBH +-MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxJTAjBgNVBAMMHFVDQSBF +-eHRlbmRlZCBWYWxpZGF0aW9uIFJvb3QwHhcNMTUwMzEzMDAwMDAwWhcNMzgxMjMx +-MDAwMDAwWjBHMQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxJTAjBgNV +-BAMMHFVDQSBFeHRlbmRlZCBWYWxpZGF0aW9uIFJvb3QwggIiMA0GCSqGSIb3DQEB +-AQUAA4ICDwAwggIKAoICAQCpCQcoEwKwmeBkqh5DFnpzsZGgdT6o+uM4AHrsiWog +-D4vFsJszA1qGxliG1cGFu0/GnEBNyr7uaZa4rYEwmnySBesFK5pI0Lh2PpbIILvS +-sPGP2KxFRv+qZ2C0d35qHzwaUnoEPQc8hQ2E0B92CvdqFN9y4zR8V05WAT558aop +-O2z6+I9tTcg1367r3CTueUWnhbYFiN6IXSV8l2RnCdm/WhUFhvMJHuxYMjMR83dk +-sHYf5BA1FxvyDrFspCqjc/wJHx4yGVMR59mzLC52LqGj3n5qiAno8geK+LLNEOfi +-c0CTuwjRP+H8C5SzJe98ptfRr5//lpr1kXuYC3fUfugH0mK1lTnj8/FtDw5lhIpj +-VMWAtuCeS31HJqcBCF3RiJ7XwzJE+oJKCmhUfzhTA8ykADNkUVkLo4KRel7sFsLz +-KuZi2irbWWIQJUoqgQtHB0MGcIfS+pMRKXpITeuUx3BNr2fVUbGAIAEBtHoIppB/ +-TuDvB0GHr2qlXov7z1CymlSvw4m6WC31MJixNnI5fkkE/SmnTHnkBVfblLkWU41G +-sx2VYVdWf6/wFlthWG82UBEL2KwrlRYaDh8IzTY0ZRBiZtWAXxQgXy0MoHgKaNYs +-1+lvK9JKBZP8nm9rZ/+I8U6laUpSNwXqxhaN0sSZ0YIrO7o1dfdRUVjzyAfd5LQD +-fwIDAQABo0IwQDAdBgNVHQ4EFgQU2XQ65DA9DfcS3H5aBZ8eNJr34RQwDwYDVR0T +-AQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwDQYJKoZIhvcNAQELBQADggIBADaN +-l8xCFWQpN5smLNb7rhVpLGsaGvdftvkHTFnq88nIua7Mui563MD1sC3AO6+fcAUR +-ap8lTwEpcOPlDOHqWnzcSbvBHiqB9RZLcpHIojG5qtr8nR/zXUACE/xOHAbKsxSQ +-VBcZEhrxH9cMaVr2cXj0lH2RC47skFSOvG+hTKv8dGT9cZr4QQehzZHkPJrgmzI5 +-c6sq1WnIeJEmMX3ixzDx/BR4dxIOE/TdFpS/S2d7cFOFyrC78zhNLJA5wA3CXWvp +-4uXViI3WLL+rG761KIcSF3Ru/H38j9CHJrAb+7lsq+KePRXBOy5nAliRn+/4Qh8s +-t2j1da3Ptfb/EX3C8CSlrdP6oDyp+l3cpaDvRKS+1ujl5BOWF3sGPjLtx7dCvHaj +-2GU4Kzg1USEODm8uNBNA4StnDG1KQTAYI1oyVZnJF+A83vbsea0rWBmirSwiGpWO +-vpaQXUJXxPkUAzUrHC1RVwinOt4/5Mi0A3PCwSaAuwtCH60NryZy2sy+s6ODWA2C +-xR9GUeOcGMyNm43sSet1UNWMKFnKdDTajAshqx7qG+XH/RU+wBeq+yNuJkbL+vmx +-cmtpzyKEC2IPrNkZAJSidjzULZrtBJ4tBmIQN1IchXIbJ+XMxjHsN+xjWZsLHXbM +-fjKaiJUINlK73nZfdklJrX+9ZSCyycErdhh2n1ax +------END CERTIFICATE----- +- +-# Issuer: CN=Certigna Root CA O=Dhimyotis OU=0002 48146308100036 +-# Subject: CN=Certigna Root CA O=Dhimyotis OU=0002 48146308100036 +-# Label: "Certigna Root CA" +-# Serial: 269714418870597844693661054334862075617 +-# MD5 Fingerprint: 0e:5c:30:62:27:eb:5b:bc:d7:ae:62:ba:e9:d5:df:77 +-# SHA1 Fingerprint: 2d:0d:52:14:ff:9e:ad:99:24:01:74:20:47:6e:6c:85:27:27:f5:43 +-# SHA256 Fingerprint: d4:8d:3d:23:ee:db:50:a4:59:e5:51:97:60:1c:27:77:4b:9d:7b:18:c9:4d:5a:05:95:11:a1:02:50:b9:31:68 +------BEGIN CERTIFICATE----- +-MIIGWzCCBEOgAwIBAgIRAMrpG4nxVQMNo+ZBbcTjpuEwDQYJKoZIhvcNAQELBQAw +-WjELMAkGA1UEBhMCRlIxEjAQBgNVBAoMCURoaW15b3RpczEcMBoGA1UECwwTMDAw +-MiA0ODE0NjMwODEwMDAzNjEZMBcGA1UEAwwQQ2VydGlnbmEgUm9vdCBDQTAeFw0x +-MzEwMDEwODMyMjdaFw0zMzEwMDEwODMyMjdaMFoxCzAJBgNVBAYTAkZSMRIwEAYD +-VQQKDAlEaGlteW90aXMxHDAaBgNVBAsMEzAwMDIgNDgxNDYzMDgxMDAwMzYxGTAX +-BgNVBAMMEENlcnRpZ25hIFJvb3QgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw +-ggIKAoICAQDNGDllGlmx6mQWDoyUJJV8g9PFOSbcDO8WV43X2KyjQn+Cyu3NW9sO +-ty3tRQgXstmzy9YXUnIo245Onoq2C/mehJpNdt4iKVzSs9IGPjA5qXSjklYcoW9M +-CiBtnyN6tMbaLOQdLNyzKNAT8kxOAkmhVECe5uUFoC2EyP+YbNDrihqECB63aCPu +-I9Vwzm1RaRDuoXrC0SIxwoKF0vJVdlB8JXrJhFwLrN1CTivngqIkicuQstDuI7pm +-TLtipPlTWmR7fJj6o0ieD5Wupxj0auwuA0Wv8HT4Ks16XdG+RCYyKfHx9WzMfgIh +-C59vpD++nVPiz32pLHxYGpfhPTc3GGYo0kDFUYqMwy3OU4gkWGQwFsWq4NYKpkDf +-ePb1BHxpE4S80dGnBs8B92jAqFe7OmGtBIyT46388NtEbVncSVmurJqZNjBBe3Yz +-IoejwpKGbvlw7q6Hh5UbxHq9MfPU0uWZ/75I7HX1eBYdpnDBfzwboZL7z8g81sWT +-Co/1VTp2lc5ZmIoJlXcymoO6LAQ6l73UL77XbJuiyn1tJslV1c/DeVIICZkHJC1k +-JWumIWmbat10TWuXekG9qxf5kBdIjzb5LdXF2+6qhUVB+s06RbFo5jZMm5BX7CO5 +-hwjCxAnxl4YqKE3idMDaxIzb3+KhF1nOJFl0Mdp//TBt2dzhauH8XwIDAQABo4IB +-GjCCARYwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYE +-FBiHVuBud+4kNTxOc5of1uHieX4rMB8GA1UdIwQYMBaAFBiHVuBud+4kNTxOc5of +-1uHieX4rMEQGA1UdIAQ9MDswOQYEVR0gADAxMC8GCCsGAQUFBwIBFiNodHRwczov +-L3d3d3cuY2VydGlnbmEuZnIvYXV0b3JpdGVzLzBtBgNVHR8EZjBkMC+gLaArhilo +-dHRwOi8vY3JsLmNlcnRpZ25hLmZyL2NlcnRpZ25hcm9vdGNhLmNybDAxoC+gLYYr +-aHR0cDovL2NybC5kaGlteW90aXMuY29tL2NlcnRpZ25hcm9vdGNhLmNybDANBgkq +-hkiG9w0BAQsFAAOCAgEAlLieT/DjlQgi581oQfccVdV8AOItOoldaDgvUSILSo3L +-6btdPrtcPbEo/uRTVRPPoZAbAh1fZkYJMyjhDSSXcNMQH+pkV5a7XdrnxIxPTGRG +-HVyH41neQtGbqH6mid2PHMkwgu07nM3A6RngatgCdTer9zQoKJHyBApPNeNgJgH6 +-0BGM+RFq7q89w1DTj18zeTyGqHNFkIwgtnJzFyO+B2XleJINugHA64wcZr+shncB +-lA2c5uk5jR+mUYyZDDl34bSb+hxnV29qao6pK0xXeXpXIs/NX2NGjVxZOob4Mkdi +-o2cNGJHc+6Zr9UhhcyNZjgKnvETq9Emd8VRY+WCv2hikLyhF3HqgiIZd8zvn/yk1 +-gPxkQ5Tm4xxvvq0OKmOZK8l+hfZx6AYDlf7ej0gcWtSS6Cvu5zHbugRqh5jnxV/v +-faci9wHYTfmJ0A6aBVmknpjZbyvKcL5kwlWj9Omvw5Ip3IgWJJk8jSaYtlu3zM63 +-Nwf9JtmYhST/WSMDmu2dnajkXjjO11INb9I/bbEFa0nOipFGc/T2L/Coc3cOZayh +-jWZSaX5LaAzHHjcng6WMxwLkFM1JAbBzs/3GkDpv0mztO+7skb6iQ12LAEpmJURw +-3kAP+HwV96LOPNdeE4yBFxgX0b3xdxA61GU5wSesVywlVP+i2k+KYTlerj1KjL0= +------END CERTIFICATE----- +- +-# Issuer: CN=emSign Root CA - G1 O=eMudhra Technologies Limited OU=emSign PKI +-# Subject: CN=emSign Root CA - G1 O=eMudhra Technologies Limited OU=emSign PKI +-# Label: "emSign Root CA - G1" +-# Serial: 235931866688319308814040 +-# MD5 Fingerprint: 9c:42:84:57:dd:cb:0b:a7:2e:95:ad:b6:f3:da:bc:ac +-# SHA1 Fingerprint: 8a:c7:ad:8f:73:ac:4e:c1:b5:75:4d:a5:40:f4:fc:cf:7c:b5:8e:8c +-# SHA256 Fingerprint: 40:f6:af:03:46:a9:9a:a1:cd:1d:55:5a:4e:9c:ce:62:c7:f9:63:46:03:ee:40:66:15:83:3d:c8:c8:d0:03:67 +------BEGIN CERTIFICATE----- +-MIIDlDCCAnygAwIBAgIKMfXkYgxsWO3W2DANBgkqhkiG9w0BAQsFADBnMQswCQYD +-VQQGEwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBU +-ZWNobm9sb2dpZXMgTGltaXRlZDEcMBoGA1UEAxMTZW1TaWduIFJvb3QgQ0EgLSBH +-MTAeFw0xODAyMTgxODMwMDBaFw00MzAyMTgxODMwMDBaMGcxCzAJBgNVBAYTAklO +-MRMwEQYDVQQLEwplbVNpZ24gUEtJMSUwIwYDVQQKExxlTXVkaHJhIFRlY2hub2xv +-Z2llcyBMaW1pdGVkMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEcxMIIBIjAN +-BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0u76WaK7p1b1TST0Bsew+eeuGQz +-f2N4aLTNLnF115sgxk0pvLZoYIr3IZpWNVrzdr3YzZr/k1ZLpVkGoZM0Kd0WNHVO +-8oG0x5ZOrRkVUkr+PHB1cM2vK6sVmjM8qrOLqs1D/fXqcP/tzxE7lM5OMhbTI0Aq +-d7OvPAEsbO2ZLIvZTmmYsvePQbAyeGHWDV/D+qJAkh1cF+ZwPjXnorfCYuKrpDhM +-tTk1b+oDafo6VGiFbdbyL0NVHpENDtjVaqSW0RM8LHhQ6DqS0hdW5TUaQBw+jSzt +-Od9C4INBdN+jzcKGYEho42kLVACL5HZpIQ15TjQIXhTCzLG3rdd8cIrHhQIDAQAB +-o0IwQDAdBgNVHQ4EFgQU++8Nhp6w492pufEhF38+/PB3KxowDgYDVR0PAQH/BAQD +-AgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAFn/8oz1h31x +-PaOfG1vR2vjTnGs2vZupYeveFix0PZ7mddrXuqe8QhfnPZHr5X3dPpzxz5KsbEjM +-wiI/aTvFthUvozXGaCocV685743QNcMYDHsAVhzNixl03r4PEuDQqqE/AjSxcM6d +-GNYIAwlG7mDgfrbESQRRfXBgvKqy/3lyeqYdPV8q+Mri/Tm3R7nrft8EI6/6nAYH +-6ftjk4BAtcZsCjEozgyfz7MjNYBBjWzEN3uBL4ChQEKF6dk4jeihU80Bv2noWgby +-RQuQ+q7hv53yrlc8pa6yVvSLZUDp/TGBLPQ5Cdjua6e0ph0VpZj3AYHYhX3zUVxx +-iN66zB+Afko= +------END CERTIFICATE----- +- +-# Issuer: CN=emSign ECC Root CA - G3 O=eMudhra Technologies Limited OU=emSign PKI +-# Subject: CN=emSign ECC Root CA - G3 O=eMudhra Technologies Limited OU=emSign PKI +-# Label: "emSign ECC Root CA - G3" +-# Serial: 287880440101571086945156 +-# MD5 Fingerprint: ce:0b:72:d1:9f:88:8e:d0:50:03:e8:e3:b8:8b:67:40 +-# SHA1 Fingerprint: 30:43:fa:4f:f2:57:dc:a0:c3:80:ee:2e:58:ea:78:b2:3f:e6:bb:c1 +-# SHA256 Fingerprint: 86:a1:ec:ba:08:9c:4a:8d:3b:be:27:34:c6:12:ba:34:1d:81:3e:04:3c:f9:e8:a8:62:cd:5c:57:a3:6b:be:6b +------BEGIN CERTIFICATE----- +-MIICTjCCAdOgAwIBAgIKPPYHqWhwDtqLhDAKBggqhkjOPQQDAzBrMQswCQYDVQQG +-EwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNo +-bm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g +-RzMwHhcNMTgwMjE4MTgzMDAwWhcNNDMwMjE4MTgzMDAwWjBrMQswCQYDVQQGEwJJ +-TjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9s +-b2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0gRzMw +-djAQBgcqhkjOPQIBBgUrgQQAIgNiAAQjpQy4LRL1KPOxst3iAhKAnjlfSU2fySU0 +-WXTsuwYc58Byr+iuL+FBVIcUqEqy6HyC5ltqtdyzdc6LBtCGI79G1Y4PPwT01xyS +-fvalY8L1X44uT6EYGQIrMgqCZH0Wk9GjQjBAMB0GA1UdDgQWBBR8XQKEE9TMipuB +-zhccLikenEhjQjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggq +-hkjOPQQDAwNpADBmAjEAvvNhzwIQHWSVB7gYboiFBS+DCBeQyh+KTOgNG3qxrdWB +-CUfvO6wIBHxcmbHtRwfSAjEAnbpV/KlK6O3t5nYBQnvI+GDZjVGLVTv7jHvrZQnD +-+JbNR6iC8hZVdyR+EhCVBCyj +------END CERTIFICATE----- +- +-# Issuer: CN=emSign Root CA - C1 O=eMudhra Inc OU=emSign PKI +-# Subject: CN=emSign Root CA - C1 O=eMudhra Inc OU=emSign PKI +-# Label: "emSign Root CA - C1" +-# Serial: 825510296613316004955058 +-# MD5 Fingerprint: d8:e3:5d:01:21:fa:78:5a:b0:df:ba:d2:ee:2a:5f:68 +-# SHA1 Fingerprint: e7:2e:f1:df:fc:b2:09:28:cf:5d:d4:d5:67:37:b1:51:cb:86:4f:01 +-# SHA256 Fingerprint: 12:56:09:aa:30:1d:a0:a2:49:b9:7a:82:39:cb:6a:34:21:6f:44:dc:ac:9f:39:54:b1:42:92:f2:e8:c8:60:8f +------BEGIN CERTIFICATE----- +-MIIDczCCAlugAwIBAgILAK7PALrEzzL4Q7IwDQYJKoZIhvcNAQELBQAwVjELMAkG +-A1UEBhMCVVMxEzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEg +-SW5jMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEMxMB4XDTE4MDIxODE4MzAw +-MFoXDTQzMDIxODE4MzAwMFowVjELMAkGA1UEBhMCVVMxEzARBgNVBAsTCmVtU2ln +-biBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMRwwGgYDVQQDExNlbVNpZ24gUm9v +-dCBDQSAtIEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+upufGZ +-BczYKCFK83M0UYRWEPWgTywS4/oTmifQz/l5GnRfHXk5/Fv4cI7gklL35CX5VIPZ +-HdPIWoU/Xse2B+4+wM6ar6xWQio5JXDWv7V7Nq2s9nPczdcdioOl+yuQFTdrHCZH +-3DspVpNqs8FqOp099cGXOFgFixwR4+S0uF2FHYP+eF8LRWgYSKVGczQ7/g/IdrvH +-GPMF0Ybzhe3nudkyrVWIzqa2kbBPrH4VI5b2P/AgNBbeCsbEBEV5f6f9vtKppa+c +-xSMq9zwhbL2vj07FOrLzNBL834AaSaTUqZX3noleoomslMuoaJuvimUnzYnu3Yy1 +-aylwQ6BpC+S5DwIDAQABo0IwQDAdBgNVHQ4EFgQU/qHgcB4qAzlSWkK+XJGFehiq +-TbUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL +-BQADggEBAMJKVvoVIXsoounlHfv4LcQ5lkFMOycsxGwYFYDGrK9HWS8mC+M2sO87 +-/kOXSTKZEhVb3xEp/6tT+LvBeA+snFOvV71ojD1pM/CjoCNjO2RnIkSt1XHLVip4 +-kqNPEjE2NuLe/gDEo2APJ62gsIq1NnpSob0n9CAnYuhNlCQT5AoE6TyrLshDCUrG +-YQTlSTR+08TI9Q/Aqum6VF7zYytPT1DU/rl7mYw9wC68AivTxEDkigcxHpvOJpkT +-+xHqmiIMERnHXhuBUDDIlhJu58tBf5E7oke3VIAb3ADMmpDqw8NQBmIMMMAVSKeo +-WXzhriKi4gp6D/piq1JM4fHfyr6DDUI= +------END CERTIFICATE----- +- +-# Issuer: CN=emSign ECC Root CA - C3 O=eMudhra Inc OU=emSign PKI +-# Subject: CN=emSign ECC Root CA - C3 O=eMudhra Inc OU=emSign PKI +-# Label: "emSign ECC Root CA - C3" +-# Serial: 582948710642506000014504 +-# MD5 Fingerprint: 3e:53:b3:a3:81:ee:d7:10:f8:d3:b0:1d:17:92:f5:d5 +-# SHA1 Fingerprint: b6:af:43:c2:9b:81:53:7d:f6:ef:6b:c3:1f:1f:60:15:0c:ee:48:66 +-# SHA256 Fingerprint: bc:4d:80:9b:15:18:9d:78:db:3e:1d:8c:f4:f9:72:6a:79:5d:a1:64:3c:a5:f1:35:8e:1d:db:0e:dc:0d:7e:b3 +------BEGIN CERTIFICATE----- +-MIICKzCCAbGgAwIBAgIKe3G2gla4EnycqDAKBggqhkjOPQQDAzBaMQswCQYDVQQG +-EwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMx +-IDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAw +-MFoXDTQzMDIxODE4MzAwMFowWjELMAkGA1UEBhMCVVMxEzARBgNVBAsTCmVtU2ln +-biBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMSAwHgYDVQQDExdlbVNpZ24gRUND +-IFJvb3QgQ0EgLSBDMzB2MBAGByqGSM49AgEGBSuBBAAiA2IABP2lYa57JhAd6bci +-MK4G9IGzsUJxlTm801Ljr6/58pc1kjZGDoeVjbk5Wum739D+yAdBPLtVb4Ojavti +-sIGJAnB9SMVK4+kiVCJNk7tCDK93nCOmfddhEc5lx/h//vXyqaNCMEAwHQYDVR0O +-BBYEFPtaSNCAIEDyqOkAB2kZd6fmw/TPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMB +-Af8EBTADAQH/MAoGCCqGSM49BAMDA2gAMGUCMQC02C8Cif22TGK6Q04ThHK1rt0c +-3ta13FaPWEBaLd4gTCKDypOofu4SQMfWh0/434UCMBwUZOR8loMRnLDRWmFLpg9J +-0wD8ofzkpf9/rdcw0Md3f76BB1UwUCAU9Vc4CqgxUQ== +------END CERTIFICATE----- +- +-# Issuer: CN=Hongkong Post Root CA 3 O=Hongkong Post +-# Subject: CN=Hongkong Post Root CA 3 O=Hongkong Post +-# Label: "Hongkong Post Root CA 3" +-# Serial: 46170865288971385588281144162979347873371282084 +-# MD5 Fingerprint: 11:fc:9f:bd:73:30:02:8a:fd:3f:f3:58:b9:cb:20:f0 +-# SHA1 Fingerprint: 58:a2:d0:ec:20:52:81:5b:c1:f3:f8:64:02:24:4e:c2:8e:02:4b:02 +-# SHA256 Fingerprint: 5a:2f:c0:3f:0c:83:b0:90:bb:fa:40:60:4b:09:88:44:6c:76:36:18:3d:f9:84:6e:17:10:1a:44:7f:b8:ef:d6 +------BEGIN CERTIFICATE----- +-MIIFzzCCA7egAwIBAgIUCBZfikyl7ADJk0DfxMauI7gcWqQwDQYJKoZIhvcNAQEL +-BQAwbzELMAkGA1UEBhMCSEsxEjAQBgNVBAgTCUhvbmcgS29uZzESMBAGA1UEBxMJ +-SG9uZyBLb25nMRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25n +-a29uZyBQb3N0IFJvb3QgQ0EgMzAeFw0xNzA2MDMwMjI5NDZaFw00MjA2MDMwMjI5 +-NDZaMG8xCzAJBgNVBAYTAkhLMRIwEAYDVQQIEwlIb25nIEtvbmcxEjAQBgNVBAcT +-CUhvbmcgS29uZzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEgMB4GA1UEAxMXSG9u +-Z2tvbmcgUG9zdCBSb290IENBIDMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK +-AoICAQCziNfqzg8gTr7m1gNt7ln8wlffKWihgw4+aMdoWJwcYEuJQwy51BWy7sFO +-dem1p+/l6TWZ5Mwc50tfjTMwIDNT2aa71T4Tjukfh0mtUC1Qyhi+AViiE3CWu4mI +-VoBc+L0sPOFMV4i707mV78vH9toxdCim5lSJ9UExyuUmGs2C4HDaOym71QP1mbpV +-9WTRYA6ziUm4ii8F0oRFKHyPaFASePwLtVPLwpgchKOesL4jpNrcyCse2m5FHomY +-2vkALgbpDDtw1VAliJnLzXNg99X/NWfFobxeq81KuEXryGgeDQ0URhLj0mRiikKY +-vLTGCAj4/ahMZJx2Ab0vqWwzD9g/KLg8aQFChn5pwckGyuV6RmXpwtZQQS4/t+Tt +-bNe/JgERohYpSms0BpDsE9K2+2p20jzt8NYt3eEV7KObLyzJPivkaTv/ciWxNoZb +-x39ri1UbSsUgYT2uy1DhCDq+sI9jQVMwCFk8mB13umOResoQUGC/8Ne8lYePl8X+ +-l2oBlKN8W4UdKjk60FSh0Tlxnf0h+bV78OLgAo9uliQlLKAeLKjEiafv7ZkGL7YK +-TE/bosw3Gq9HhS2KX8Q0NEwA/RiTZxPRN+ZItIsGxVd7GYYKecsAyVKvQv83j+Gj +-Hno9UKtjBucVtT+2RTeUN7F+8kjDf8V1/peNRY8apxpyKBpADwIDAQABo2MwYTAP +-BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAfBgNVHSMEGDAWgBQXnc0e +-i9Y5K3DTXNSguB+wAPzFYTAdBgNVHQ4EFgQUF53NHovWOStw01zUoLgfsAD8xWEw +-DQYJKoZIhvcNAQELBQADggIBAFbVe27mIgHSQpsY1Q7XZiNc4/6gx5LS6ZStS6LG +-7BJ8dNVI0lkUmcDrudHr9EgwW62nV3OZqdPlt9EuWSRY3GguLmLYauRwCy0gUCCk +-MpXRAJi70/33MvJJrsZ64Ee+bs7Lo3I6LWldy8joRTnU+kLBEUx3XZL7av9YROXr +-gZ6voJmtvqkBZss4HTzfQx/0TW60uhdG/H39h4F5ag0zD/ov+BS5gLNdTaqX4fnk +-GMX41TiMJjz98iji7lpJiCzfeT2OnpA8vUFKOt1b9pq0zj8lMH8yfaIDlNDceqFS +-3m6TjRgm/VWsvY+b0s+v54Ysyx8Jb6NvqYTUc79NoXQbTiNg8swOqn+knEwlqLJm +-Ozj/2ZQw9nKEvmhVEA/GcywWaZMH/rFF7buiVWqw2rVKAiUnhde3t4ZEFolsgCs+ +-l6mc1X5VTMbeRRAc6uk7nwNT7u56AQIWeNTowr5GdogTPyK7SBIdUgC0An4hGh6c +-JfTzPV4e0hz5sy229zdcxsshTrD3mUcYhcErulWuBurQB7Lcq9CClnXO0lD+mefP +-L5/ndtFhKvshuzHQqp9HpLIiyhY6UFfEW0NnxWViA0kB60PZ2Pierc+xYw5F9KBa +-LJstxabArahH9CdMOA0uG0k7UvToiIMrVCjU8jVStDKDYmlkDJGcn5fqdBb9HxEG +-mpv0 +------END CERTIFICATE----- +- +-# Issuer: CN=Entrust Root Certification Authority - G4 O=Entrust, Inc. OU=See www.entrust.net/legal-terms/(c) 2015 Entrust, Inc. - for authorized use only +-# Subject: CN=Entrust Root Certification Authority - G4 O=Entrust, Inc. OU=See www.entrust.net/legal-terms/(c) 2015 Entrust, Inc. - for authorized use only +-# Label: "Entrust Root Certification Authority - G4" +-# Serial: 289383649854506086828220374796556676440 +-# MD5 Fingerprint: 89:53:f1:83:23:b7:7c:8e:05:f1:8c:71:38:4e:1f:88 +-# SHA1 Fingerprint: 14:88:4e:86:26:37:b0:26:af:59:62:5c:40:77:ec:35:29:ba:96:01 +-# SHA256 Fingerprint: db:35:17:d1:f6:73:2a:2d:5a:b9:7c:53:3e:c7:07:79:ee:32:70:a6:2f:b4:ac:42:38:37:24:60:e6:f0:1e:88 +------BEGIN CERTIFICATE----- +-MIIGSzCCBDOgAwIBAgIRANm1Q3+vqTkPAAAAAFVlrVgwDQYJKoZIhvcNAQELBQAw +-gb4xCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL +-Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg +-MjAxNSBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxMjAw +-BgNVBAMTKUVudHJ1c3QgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEc0 +-MB4XDTE1MDUyNzExMTExNloXDTM3MTIyNzExNDExNlowgb4xCzAJBgNVBAYTAlVT +-MRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQLEx9TZWUgd3d3LmVudHJ1 +-c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykgMjAxNSBFbnRydXN0LCBJ +-bmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxMjAwBgNVBAMTKUVudHJ1c3Qg +-Um9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEc0MIICIjANBgkqhkiG9w0B +-AQEFAAOCAg8AMIICCgKCAgEAsewsQu7i0TD/pZJH4i3DumSXbcr3DbVZwbPLqGgZ +-2K+EbTBwXX7zLtJTmeH+H17ZSK9dE43b/2MzTdMAArzE+NEGCJR5WIoV3imz/f3E +-T+iq4qA7ec2/a0My3dl0ELn39GjUu9CH1apLiipvKgS1sqbHoHrmSKvS0VnM1n4j +-5pds8ELl3FFLFUHtSUrJ3hCX1nbB76W1NhSXNdh4IjVS70O92yfbYVaCNNzLiGAM +-C1rlLAHGVK/XqsEQe9IFWrhAnoanw5CGAlZSCXqc0ieCU0plUmr1POeo8pyvi73T +-DtTUXm6Hnmo9RR3RXRv06QqsYJn7ibT/mCzPfB3pAqoEmh643IhuJbNsZvc8kPNX +-wbMv9W3y+8qh+CmdRouzavbmZwe+LGcKKh9asj5XxNMhIWNlUpEbsZmOeX7m640A +-2Vqq6nPopIICR5b+W45UYaPrL0swsIsjdXJ8ITzI9vF01Bx7owVV7rtNOzK+mndm +-nqxpkCIHH2E6lr7lmk/MBTwoWdPBDFSoWWG9yHJM6Nyfh3+9nEg2XpWjDrk4JFX8 +-dWbrAuMINClKxuMrLzOg2qOGpRKX/YAr2hRC45K9PvJdXmd0LhyIRyk0X+IyqJwl +-N4y6mACXi0mWHv0liqzc2thddG5msP9E36EYxr5ILzeUePiVSj9/E15dWf10hkNj +-c0kCAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYD +-VR0OBBYEFJ84xFYjwznooHFs6FRM5Og6sb9nMA0GCSqGSIb3DQEBCwUAA4ICAQAS +-5UKme4sPDORGpbZgQIeMJX6tuGguW8ZAdjwD+MlZ9POrYs4QjbRaZIxowLByQzTS +-Gwv2LFPSypBLhmb8qoMi9IsabyZIrHZ3CL/FmFz0Jomee8O5ZDIBf9PD3Vht7LGr +-hFV0d4QEJ1JrhkzO3bll/9bGXp+aEJlLdWr+aumXIOTkdnrG0CSqkM0gkLpHZPt/ +-B7NTeLUKYvJzQ85BK4FqLoUWlFPUa19yIqtRLULVAJyZv967lDtX/Zr1hstWO1uI +-AeV8KEsD+UmDfLJ/fOPtjqF/YFOOVZ1QNBIPt5d7bIdKROf1beyAN/BYGW5KaHbw +-H5Lk6rWS02FREAutp9lfx1/cH6NcjKF+m7ee01ZvZl4HliDtC3T7Zk6LERXpgUl+ +-b7DUUH8i119lAg2m9IUe2K4GS0qn0jFmwvjO5QimpAKWRGhXxNUzzxkvFMSUHHuk +-2fCfDrGA4tGeEWSpiBE6doLlYsKA2KSD7ZPvfC+QsDJMlhVoSFLUmQjAJOgc47Ol +-IQ6SwJAfzyBfyjs4x7dtOvPmRLgOMWuIjnDrnBdSqEGULoe256YSxXXfW8AKbnuk +-5F6G+TaU33fD6Q3AOfF5u0aOq0NZJ7cguyPpVkAh7DE9ZapD8j3fcEThuk0mEDuY +-n/PIjhs4ViFqUZPTkcpG2om3PVODLAgfi49T3f+sHw== +------END CERTIFICATE----- +- +-# Issuer: CN=Microsoft ECC Root Certificate Authority 2017 O=Microsoft Corporation +-# Subject: CN=Microsoft ECC Root Certificate Authority 2017 O=Microsoft Corporation +-# Label: "Microsoft ECC Root Certificate Authority 2017" +-# Serial: 136839042543790627607696632466672567020 +-# MD5 Fingerprint: dd:a1:03:e6:4a:93:10:d1:bf:f0:19:42:cb:fe:ed:67 +-# SHA1 Fingerprint: 99:9a:64:c3:7f:f4:7d:9f:ab:95:f1:47:69:89:14:60:ee:c4:c3:c5 +-# SHA256 Fingerprint: 35:8d:f3:9d:76:4a:f9:e1:b7:66:e9:c9:72:df:35:2e:e1:5c:fa:c2:27:af:6a:d1:d7:0e:8e:4a:6e:dc:ba:02 +------BEGIN CERTIFICATE----- +-MIICWTCCAd+gAwIBAgIQZvI9r4fei7FK6gxXMQHC7DAKBggqhkjOPQQDAzBlMQsw +-CQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYwNAYD +-VQQDEy1NaWNyb3NvZnQgRUNDIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIw +-MTcwHhcNMTkxMjE4MjMwNjQ1WhcNNDIwNzE4MjMxNjA0WjBlMQswCQYDVQQGEwJV +-UzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYwNAYDVQQDEy1NaWNy +-b3NvZnQgRUNDIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTcwdjAQBgcq +-hkjOPQIBBgUrgQQAIgNiAATUvD0CQnVBEyPNgASGAlEvaqiBYgtlzPbKnR5vSmZR +-ogPZnZH6thaxjG7efM3beaYvzrvOcS/lpaso7GMEZpn4+vKTEAXhgShC48Zo9OYb +-hGBKia/teQ87zvH2RPUBeMCjVDBSMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8E +-BTADAQH/MB0GA1UdDgQWBBTIy5lycFIM+Oa+sgRXKSrPQhDtNTAQBgkrBgEEAYI3 +-FQEEAwIBADAKBggqhkjOPQQDAwNoADBlAjBY8k3qDPlfXu5gKcs68tvWMoQZP3zV +-L8KxzJOuULsJMsbG7X7JNpQS5GiFBqIb0C8CMQCZ6Ra0DvpWSNSkMBaReNtUjGUB +-iudQZsIxtzm6uBoiB078a1QWIP8rtedMDE2mT3M= +------END CERTIFICATE----- +- +-# Issuer: CN=Microsoft RSA Root Certificate Authority 2017 O=Microsoft Corporation +-# Subject: CN=Microsoft RSA Root Certificate Authority 2017 O=Microsoft Corporation +-# Label: "Microsoft RSA Root Certificate Authority 2017" +-# Serial: 40975477897264996090493496164228220339 +-# MD5 Fingerprint: 10:ff:00:ff:cf:c9:f8:c7:7a:c0:ee:35:8e:c9:0f:47 +-# SHA1 Fingerprint: 73:a5:e6:4a:3b:ff:83:16:ff:0e:dc:cc:61:8a:90:6e:4e:ae:4d:74 +-# SHA256 Fingerprint: c7:41:f7:0f:4b:2a:8d:88:bf:2e:71:c1:41:22:ef:53:ef:10:eb:a0:cf:a5:e6:4c:fa:20:f4:18:85:30:73:e0 +------BEGIN CERTIFICATE----- +-MIIFqDCCA5CgAwIBAgIQHtOXCV/YtLNHcB6qvn9FszANBgkqhkiG9w0BAQwFADBl +-MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYw +-NAYDVQQDEy1NaWNyb3NvZnQgUlNBIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5 +-IDIwMTcwHhcNMTkxMjE4MjI1MTIyWhcNNDIwNzE4MjMwMDIzWjBlMQswCQYDVQQG +-EwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYwNAYDVQQDEy1N +-aWNyb3NvZnQgUlNBIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTcwggIi +-MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKW76UM4wplZEWCpW9R2LBifOZ +-Nt9GkMml7Xhqb0eRaPgnZ1AzHaGm++DlQ6OEAlcBXZxIQIJTELy/xztokLaCLeX0 +-ZdDMbRnMlfl7rEqUrQ7eS0MdhweSE5CAg2Q1OQT85elss7YfUJQ4ZVBcF0a5toW1 +-HLUX6NZFndiyJrDKxHBKrmCk3bPZ7Pw71VdyvD/IybLeS2v4I2wDwAW9lcfNcztm +-gGTjGqwu+UcF8ga2m3P1eDNbx6H7JyqhtJqRjJHTOoI+dkC0zVJhUXAoP8XFWvLJ +-jEm7FFtNyP9nTUwSlq31/niol4fX/V4ggNyhSyL71Imtus5Hl0dVe49FyGcohJUc +-aDDv70ngNXtk55iwlNpNhTs+VcQor1fznhPbRiefHqJeRIOkpcrVE7NLP8TjwuaG +-YaRSMLl6IE9vDzhTyzMMEyuP1pq9KsgtsRx9S1HKR9FIJ3Jdh+vVReZIZZ2vUpC6 +-W6IYZVcSn2i51BVrlMRpIpj0M+Dt+VGOQVDJNE92kKz8OMHY4Xu54+OU4UZpyw4K +-UGsTuqwPN1q3ErWQgR5WrlcihtnJ0tHXUeOrO8ZV/R4O03QK0dqq6mm4lyiPSMQH +-+FJDOvTKVTUssKZqwJz58oHhEmrARdlns87/I6KJClTUFLkqqNfs+avNJVgyeY+Q +-W5g5xAgGwax/Dj0ApQIDAQABo1QwUjAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/ +-BAUwAwEB/zAdBgNVHQ4EFgQUCctZf4aycI8awznjwNnpv7tNsiMwEAYJKwYBBAGC +-NxUBBAMCAQAwDQYJKoZIhvcNAQEMBQADggIBAKyvPl3CEZaJjqPnktaXFbgToqZC +-LgLNFgVZJ8og6Lq46BrsTaiXVq5lQ7GPAJtSzVXNUzltYkyLDVt8LkS/gxCP81OC +-gMNPOsduET/m4xaRhPtthH80dK2Jp86519efhGSSvpWhrQlTM93uCupKUY5vVau6 +-tZRGrox/2KJQJWVggEbbMwSubLWYdFQl3JPk+ONVFT24bcMKpBLBaYVu32TxU5nh +-SnUgnZUP5NbcA/FZGOhHibJXWpS2qdgXKxdJ5XbLwVaZOjex/2kskZGT4d9Mozd2 +-TaGf+G0eHdP67Pv0RR0Tbc/3WeUiJ3IrhvNXuzDtJE3cfVa7o7P4NHmJweDyAmH3 +-pvwPuxwXC65B2Xy9J6P9LjrRk5Sxcx0ki69bIImtt2dmefU6xqaWM/5TkshGsRGR +-xpl/j8nWZjEgQRCHLQzWwa80mMpkg/sTV9HB8Dx6jKXB/ZUhoHHBk2dxEuqPiApp +-GWSZI1b7rCoucL5mxAyE7+WL85MB+GqQk2dLsmijtWKP6T+MejteD+eMuMZ87zf9 +-dOLITzNy4ZQ5bb0Sr74MTnB8G2+NszKTc0QWbej09+CVgI+WXTik9KveCjCHk9hN +-AHFiRSdLOkKEW39lt2c0Ui2cFmuqqNh7o0JMcccMyj6D5KbvtwEwXlGjefVwaaZB +-RA+GsCyRxj3qrg+E +------END CERTIFICATE----- +- +-# Issuer: CN=e-Szigno Root CA 2017 O=Microsec Ltd. +-# Subject: CN=e-Szigno Root CA 2017 O=Microsec Ltd. +-# Label: "e-Szigno Root CA 2017" +-# Serial: 411379200276854331539784714 +-# MD5 Fingerprint: de:1f:f6:9e:84:ae:a7:b4:21:ce:1e:58:7d:d1:84:98 +-# SHA1 Fingerprint: 89:d4:83:03:4f:9e:9a:48:80:5f:72:37:d4:a9:a6:ef:cb:7c:1f:d1 +-# SHA256 Fingerprint: be:b0:0b:30:83:9b:9b:c3:2c:32:e4:44:79:05:95:06:41:f2:64:21:b1:5e:d0:89:19:8b:51:8a:e2:ea:1b:99 +------BEGIN CERTIFICATE----- +-MIICQDCCAeWgAwIBAgIMAVRI7yH9l1kN9QQKMAoGCCqGSM49BAMCMHExCzAJBgNV +-BAYTAkhVMREwDwYDVQQHDAhCdWRhcGVzdDEWMBQGA1UECgwNTWljcm9zZWMgTHRk +-LjEXMBUGA1UEYQwOVkFUSFUtMjM1ODQ0OTcxHjAcBgNVBAMMFWUtU3ppZ25vIFJv +-b3QgQ0EgMjAxNzAeFw0xNzA4MjIxMjA3MDZaFw00MjA4MjIxMjA3MDZaMHExCzAJ +-BgNVBAYTAkhVMREwDwYDVQQHDAhCdWRhcGVzdDEWMBQGA1UECgwNTWljcm9zZWMg +-THRkLjEXMBUGA1UEYQwOVkFUSFUtMjM1ODQ0OTcxHjAcBgNVBAMMFWUtU3ppZ25v +-IFJvb3QgQ0EgMjAxNzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABJbcPYrYsHtv +-xie+RJCxs1YVe45DJH0ahFnuY2iyxl6H0BVIHqiQrb1TotreOpCmYF9oMrWGQd+H +-Wyx7xf58etqjYzBhMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0G +-A1UdDgQWBBSHERUI0arBeAyxr87GyZDvvzAEwDAfBgNVHSMEGDAWgBSHERUI0arB +-eAyxr87GyZDvvzAEwDAKBggqhkjOPQQDAgNJADBGAiEAtVfd14pVCzbhhkT61Nlo +-jbjcI4qKDdQvfepz7L9NbKgCIQDLpbQS+ue16M9+k/zzNY9vTlp8tLxOsvxyqltZ +-+efcMQ== +------END CERTIFICATE----- +- +-# Issuer: O=CERTSIGN SA OU=certSIGN ROOT CA G2 +-# Subject: O=CERTSIGN SA OU=certSIGN ROOT CA G2 +-# Label: "certSIGN Root CA G2" +-# Serial: 313609486401300475190 +-# MD5 Fingerprint: 8c:f1:75:8a:c6:19:cf:94:b7:f7:65:20:87:c3:97:c7 +-# SHA1 Fingerprint: 26:f9:93:b4:ed:3d:28:27:b0:b9:4b:a7:e9:15:1d:a3:8d:92:e5:32 +-# SHA256 Fingerprint: 65:7c:fe:2f:a7:3f:aa:38:46:25:71:f3:32:a2:36:3a:46:fc:e7:02:09:51:71:07:02:cd:fb:b6:ee:da:33:05 +------BEGIN CERTIFICATE----- +-MIIFRzCCAy+gAwIBAgIJEQA0tk7GNi02MA0GCSqGSIb3DQEBCwUAMEExCzAJBgNV +-BAYTAlJPMRQwEgYDVQQKEwtDRVJUU0lHTiBTQTEcMBoGA1UECxMTY2VydFNJR04g +-Uk9PVCBDQSBHMjAeFw0xNzAyMDYwOTI3MzVaFw00MjAyMDYwOTI3MzVaMEExCzAJ +-BgNVBAYTAlJPMRQwEgYDVQQKEwtDRVJUU0lHTiBTQTEcMBoGA1UECxMTY2VydFNJ +-R04gUk9PVCBDQSBHMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMDF +-dRmRfUR0dIf+DjuW3NgBFszuY5HnC2/OOwppGnzC46+CjobXXo9X69MhWf05N0Iw +-vlDqtg+piNguLWkh59E3GE59kdUWX2tbAMI5Qw02hVK5U2UPHULlj88F0+7cDBrZ +-uIt4ImfkabBoxTzkbFpG583H+u/E7Eu9aqSs/cwoUe+StCmrqzWaTOTECMYmzPhp +-n+Sc8CnTXPnGFiWeI8MgwT0PPzhAsP6CRDiqWhqKa2NYOLQV07YRaXseVO6MGiKs +-cpc/I1mbySKEwQdPzH/iV8oScLumZfNpdWO9lfsbl83kqK/20U6o2YpxJM02PbyW +-xPFsqa7lzw1uKA2wDrXKUXt4FMMgL3/7FFXhEZn91QqhngLjYl/rNUssuHLoPj1P +-rCy7Lobio3aP5ZMqz6WryFyNSwb/EkaseMsUBzXgqd+L6a8VTxaJW732jcZZroiF +-DsGJ6x9nxUWO/203Nit4ZoORUSs9/1F3dmKh7Gc+PoGD4FapUB8fepmrY7+EF3fx +-DTvf95xhszWYijqy7DwaNz9+j5LP2RIUZNoQAhVB/0/E6xyjyfqZ90bp4RjZsbgy +-LcsUDFDYg2WD7rlcz8sFWkz6GZdr1l0T08JcVLwyc6B49fFtHsufpaafItzRUZ6C +-eWRgKRM+o/1Pcmqr4tTluCRVLERLiohEnMqE0yo7AgMBAAGjQjBAMA8GA1UdEwEB +-/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBSCIS1mxteg4BXrzkwJ +-d8RgnlRuAzANBgkqhkiG9w0BAQsFAAOCAgEAYN4auOfyYILVAzOBywaK8SJJ6ejq +-kX/GM15oGQOGO0MBzwdw5AgeZYWR5hEit/UCI46uuR59H35s5r0l1ZUa8gWmr4UC +-b6741jH/JclKyMeKqdmfS0mbEVeZkkMR3rYzpMzXjWR91M08KCy0mpbqTfXERMQl +-qiCA2ClV9+BB/AYm/7k29UMUA2Z44RGx2iBfRgB4ACGlHgAoYXhvqAEBj500mv/0 +-OJD7uNGzcgbJceaBxXntC6Z58hMLnPddDnskk7RI24Zf3lCGeOdA5jGokHZwYa+c +-NywRtYK3qq4kNFtyDGkNzVmf9nGvnAvRCjj5BiKDUyUM/FHE5r7iOZULJK2v0ZXk +-ltd0ZGtxTgI8qoXzIKNDOXZbbFD+mpwUHmUUihW9o4JFWklWatKcsWMy5WHgUyIO +-pwpJ6st+H6jiYoD2EEVSmAYY3qXNL3+q1Ok+CHLsIwMCPKaq2LxndD0UF/tUSxfj +-03k9bWtJySgOLnRQvwzZRjoQhsmnP+mg7H/rpXdYaXHmgwo38oZJar55CJD2AhZk +-PuXaTH4MNMn5X7azKFGnpyuqSfqNZSlO42sTp5SjLVFteAxEy9/eCG/Oo2Sr05WE +-1LlSVHJ7liXMvGnjSG4N0MedJ5qq+BOS3R7fY581qRY27Iy4g/Q9iY/NtBde17MX +-QRBdJ3NghVdJIgc= +------END CERTIFICATE----- +- +-# Issuer: CN=Trustwave Global Certification Authority O=Trustwave Holdings, Inc. +-# Subject: CN=Trustwave Global Certification Authority O=Trustwave Holdings, Inc. +-# Label: "Trustwave Global Certification Authority" +-# Serial: 1846098327275375458322922162 +-# MD5 Fingerprint: f8:1c:18:2d:2f:ba:5f:6d:a1:6c:bc:c7:ab:91:c7:0e +-# SHA1 Fingerprint: 2f:8f:36:4f:e1:58:97:44:21:59:87:a5:2a:9a:d0:69:95:26:7f:b5 +-# SHA256 Fingerprint: 97:55:20:15:f5:dd:fc:3c:87:88:c0:06:94:45:55:40:88:94:45:00:84:f1:00:86:70:86:bc:1a:2b:b5:8d:c8 ++# 97552015f5ddfc3c8788c006944555408894450084f100867086bc1a2bb58dc8 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 05:f7:0e:86:da:49:f3:46:35:2e:ba:b2 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global Certification Authority ++ Validity ++ Not Before: Aug 23 19:34:12 2017 GMT ++ Not After : Aug 23 19:34:12 2042 GMT ++ Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global Certification Authority ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:b9:5d:51:28:4b:3c:37:92:d1:82:ce:bd:1d:bd: ++ cd:dd:b8:ab:cf:0a:3e:e1:5d:e5:dc:aa:09:b9:57: ++ 02:3e:e6:63:61:df:f2:0f:82:63:ae:a3:f7:ac:73: ++ d1:7c:e7:b3:0b:af:08:00:09:59:7f:cd:29:2a:88: ++ 93:87:17:18:80:ed:88:b2:b4:b6:10:1f:2d:d6:5f: ++ 55:a2:13:5d:d1:c6:eb:06:56:89:88:fe:ac:32:9d: ++ fd:5c:c3:05:c7:6e:ee:86:89:ba:88:03:9d:72:21: ++ 86:90:ae:8f:03:a5:dc:9f:88:28:cb:a3:92:49:0f: ++ ec:d0:0f:e2:6d:44:4f:80:6a:b2:d4:e7:a0:0a:53: ++ 01:ba:8e:97:91:76:6e:bc:fc:d5:6b:36:e6:40:88: ++ d6:7b:2f:5f:05:e8:2c:6d:11:f3:e7:b2:be:92:44: ++ 4c:d2:97:a4:fe:d2:72:81:43:07:9c:e9:11:3e:f5: ++ 8b:1a:59:7d:1f:68:58:dd:04:00:2c:96:f3:43:b3: ++ 7e:98:19:74:d9:9c:73:d9:18:be:41:c7:34:79:d9: ++ f4:62:c2:43:b9:b3:27:b0:22:cb:f9:3d:52:c7:30: ++ 47:b3:c9:3e:b8:6a:e2:e7:e8:81:70:5e:42:8b:4f: ++ 26:a5:fe:3a:c2:20:6e:bb:f8:16:8e:cd:0c:a9:b4: ++ 1b:6c:76:10:e1:58:79:46:3e:54:ce:80:a8:57:09: ++ 37:29:1b:99:13:8f:0c:c8:d6:2c:1c:fb:05:e8:08: ++ 95:3d:65:46:dc:ee:cd:69:e2:4d:8f:87:28:4e:34: ++ 0b:3e:cf:14:d9:bb:dd:b6:50:9a:ad:77:d4:19:d6: ++ da:1a:88:c8:4e:1b:27:75:d8:b2:08:f1:ae:83:30: ++ b9:11:0e:cd:87:f0:84:8d:15:72:7c:a1:ef:cc:f2: ++ 88:61:ba:f4:69:bb:0c:8c:0b:75:57:04:b8:4e:2a: ++ 14:2e:3d:0f:1c:1e:32:a6:62:36:ee:66:e2:22:b8: ++ 05:40:63:10:22:f3:33:1d:74:72:8a:2c:f5:39:29: ++ a0:d3:e7:1b:80:84:2d:c5:3d:e3:4d:b1:fd:1a:6f: ++ ba:65:07:3b:58:ec:42:45:26:fb:d8:da:25:72:c4: ++ f6:00:b1:22:79:bd:e3:7c:59:62:4a:9c:05:6f:3d: ++ ce:e6:d6:47:63:99:c6:24:6f:72:12:c8:ac:7f:90: ++ b4:0b:91:70:e8:b7:e6:16:10:71:17:ce:de:06:4f: ++ 48:41:7d:35:4a:a3:89:f2:c9:4b:7b:41:11:6d:67: ++ b7:08:98:4c:e5:11:19:ae:42:80:dc:fb:90:05:d4: ++ f8:50:ca:be:e4:ad:c7:c2:94:d7:16:9d:e6:17:8f: ++ af:36:fb ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 99:E0:19:67:0D:62:DB:76:B3:DA:3D:B8:5B:E8:FD:42:D2:31:0E:87 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ 98:73:70:e2:b0:d3:ed:39:ec:4c:60:d9:a9:12:86:17:1e:96: ++ d0:e8:54:28:3b:64:2d:21:a6:f8:9d:56:13:6a:48:3d:4f:c7: ++ 3e:29:db:6d:58:83:54:3d:87:7d:23:05:d4:e4:1c:dc:e8:38: ++ 65:86:c5:75:a7:5a:db:35:05:bd:77:de:bb:29:37:40:05:07: ++ c3:94:52:9f:ca:64:dd:f1:1b:2b:dc:46:0a:10:02:31:fd:4a: ++ 68:0d:07:64:90:e6:1e:f5:2a:a1:a8:bb:3c:5d:f9:a3:08:0b: ++ 11:0c:f1:3f:2d:10:94:6f:fe:e2:34:87:83:d6:cf:e5:1b:35: ++ 6d:d2:03:e1:b0:0d:a8:a0:aa:46:27:82:36:a7:15:b6:08:a6: ++ 42:54:57:b6:99:5a:e2:0b:79:90:d7:57:12:51:35:19:88:41: ++ 68:25:d4:37:17:84:15:fb:01:72:dc:95:de:52:26:20:98:26: ++ e2:76:f5:27:6f:fa:00:3b:4a:61:d9:0d:cb:51:93:2a:fd:16: ++ 06:96:a7:23:9a:23:48:fe:51:bd:b6:c4:b0:b1:54:ce:de:6c: ++ 41:ad:16:67:7e:db:fd:38:cd:b9:38:4e:b2:c1:60:cb:9d:17: ++ df:58:9e:7a:62:b2:26:8f:74:95:9b:e4:5b:1d:d2:0f:dd:98: ++ 1c:9b:59:b9:23:d3:31:a0:a6:ff:38:dd:cf:20:4f:e9:58:56: ++ 3a:67:c3:d1:f6:99:99:9d:ba:36:b6:80:2f:88:47:4f:86:bf: ++ 44:3a:80:e4:37:1c:a6:ba:ea:97:98:11:d0:84:62:47:64:1e: ++ aa:ee:40:bf:34:b1:9c:8f:4e:e1:f2:92:4f:1f:8e:f3:9e:97: ++ de:f3:a6:79:6a:89:71:4f:4b:27:17:48:fe:ec:f4:50:0f:4f: ++ 49:7d:cc:45:e3:bd:7a:40:c5:41:dc:61:56:27:06:69:e5:72: ++ 41:81:d3:b6:01:89:a0:2f:3a:72:79:fe:3a:30:bf:41:ec:c7: ++ 62:3e:91:4b:c7:d9:31:76:42:f9:f7:3c:63:ec:26:8c:73:0c: ++ 7d:1a:1d:ea:a8:7c:87:a8:c2:27:7c:e1:33:41:0f:cf:cf:fc: ++ 00:a0:22:80:9e:4a:a7:6f:00:b0:41:45:b7:22:ca:68:48:c5: ++ 42:a2:ae:dd:1d:f2:e0:6e:4e:05:58:b1:c0:90:16:2a:a4:3d: ++ 10:40:be:8f:62:63:83:a9:9c:82:7d:2d:02:e9:83:30:7c:cb: ++ 27:c9:fd:1e:66:00:b0:2e:d3:21:2f:8e:33:16:6c:98:ed:10: ++ a8:07:d6:cc:93:cf:db:d1:69:1c:e4:ca:c9:e0:b6:9c:e9:ce: ++ 71:71:de:6c:3f:16:a4:79 + -----BEGIN CERTIFICATE----- + MIIF2jCCA8KgAwIBAgIMBfcOhtpJ80Y1LrqyMA0GCSqGSIb3DQEBCwUAMIGIMQsw + CQYDVQQGEwJVUzERMA8GA1UECAwISWxsaW5vaXMxEDAOBgNVBAcMB0NoaWNhZ28x +@@ -3912,61 +6433,2000 @@ EEC+j2Jjg6mcgn0tAumDMHzLJ8n9HmYAsC7TIS+OMxZsmO0QqAfWzJPP29FpHOTK + yeC2nOnOcXHebD8WpHk= + -----END CERTIFICATE----- + +-# Issuer: CN=Trustwave Global ECC P256 Certification Authority O=Trustwave Holdings, Inc. +-# Subject: CN=Trustwave Global ECC P256 Certification Authority O=Trustwave Holdings, Inc. +-# Label: "Trustwave Global ECC P256 Certification Authority" +-# Serial: 4151900041497450638097112925 +-# MD5 Fingerprint: 5b:44:e3:8d:5d:36:86:26:e8:0d:05:d2:59:a7:83:54 +-# SHA1 Fingerprint: b4:90:82:dd:45:0c:be:8b:5b:b1:66:d3:e2:a4:08:26:cd:ed:42:cf +-# SHA256 Fingerprint: 94:5b:bc:82:5e:a5:54:f4:89:d1:fd:51:a7:3d:df:2e:a6:24:ac:70:19:a0:52:05:22:5c:22:a7:8c:cf:a8:b4 ++# f1c1b50ae5a20dd8030ec9f6bc24823dd367b5255759b4e71b61fce9f7375d73 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 0c:f0:8e:5c:08:16:a5:ad:42:7f:f0:eb:27:18:59:d0 ++ Signature Algorithm: sha1WithRSAEncryption ++ Issuer: C = US, O = SecureTrust Corporation, CN = SecureTrust CA ++ Validity ++ Not Before: Nov 7 19:31:18 2006 GMT ++ Not After : Dec 31 19:40:55 2029 GMT ++ Subject: C = US, O = SecureTrust Corporation, CN = SecureTrust CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (2048 bit) ++ Modulus: ++ 00:ab:a4:81:e5:95:cd:f5:f6:14:8e:c2:4f:ca:d4: ++ e2:78:95:58:9c:41:e1:0d:99:40:24:17:39:91:33: ++ 66:e9:be:e1:83:af:62:5c:89:d1:fc:24:5b:61:b3: ++ e0:11:11:41:1c:1d:6e:f0:b8:bb:f8:de:a7:81:ba: ++ a6:48:c6:9f:1d:bd:be:8e:a9:41:3e:b8:94:ed:29: ++ 1a:d4:8e:d2:03:1d:03:ef:6d:0d:67:1c:57:d7:06: ++ ad:ca:c8:f5:fe:0e:af:66:25:48:04:96:0b:5d:a3: ++ ba:16:c3:08:4f:d1:46:f8:14:5c:f2:c8:5e:01:99: ++ 6d:fd:88:cc:86:a8:c1:6f:31:42:6c:52:3e:68:cb: ++ f3:19:34:df:bb:87:18:56:80:26:c4:d0:dc:c0:6f: ++ df:de:a0:c2:91:16:a0:64:11:4b:44:bc:1e:f6:e7: ++ fa:63:de:66:ac:76:a4:71:a3:ec:36:94:68:7a:77: ++ a4:b1:e7:0e:2f:81:7a:e2:b5:72:86:ef:a2:6b:8b: ++ f0:0f:db:d3:59:3f:ba:72:bc:44:24:9c:e3:73:b3: ++ f7:af:57:2f:42:26:9d:a9:74:ba:00:52:f2:4b:cd: ++ 53:7c:47:0b:36:85:0e:66:a9:08:97:16:34:57:c1: ++ 66:f7:80:e3:ed:70:54:c7:93:e0:2e:28:15:59:87: ++ ba:bb ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ 1.3.6.1.4.1.311.20.2: ++ ...C.A ++ X509v3 Key Usage: ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 42:32:B6:16:FA:04:FD:FE:5D:4B:7A:C3:FD:F7:4C:40:1D:5A:43:AF ++ X509v3 CRL Distribution Points: ++ ++ Full Name: ++ URI:http://crl.securetrust.com/STCA.crl ++ ++ 1.3.6.1.4.1.311.21.1: ++ ... ++ Signature Algorithm: sha1WithRSAEncryption ++ 30:ed:4f:4a:e1:58:3a:52:72:5b:b5:a6:a3:65:18:a6:bb:51: ++ 3b:77:e9:9d:ea:d3:9f:5c:e0:45:65:7b:0d:ca:5b:e2:70:50: ++ b2:94:05:14:ae:49:c7:8d:41:07:12:73:94:7e:0c:23:21:fd: ++ bc:10:7f:60:10:5a:72:f5:98:0e:ac:ec:b9:7f:dd:7a:6f:5d: ++ d3:1c:f4:ff:88:05:69:42:a9:05:71:c8:b7:ac:26:e8:2e:b4: ++ 8c:6a:ff:71:dc:b8:b1:df:99:bc:7c:21:54:2b:e4:58:a2:bb: ++ 57:29:ae:9e:a9:a3:19:26:0f:99:2e:08:b0:ef:fd:69:cf:99: ++ 1a:09:8d:e3:a7:9f:2b:c9:36:34:7b:24:b3:78:4c:95:17:a4: ++ 06:26:1e:b6:64:52:36:5f:60:67:d9:9c:c5:05:74:0b:e7:67: ++ 23:d2:08:fc:88:e9:ae:8b:7f:e1:30:f4:37:7e:fd:c6:32:da: ++ 2d:9e:44:30:30:6c:ee:07:de:d2:34:fc:d2:ff:40:f6:4b:f4: ++ 66:46:06:54:a6:f2:32:0a:63:26:30:6b:9b:d1:dc:8b:47:ba: ++ e1:b9:d5:62:d0:a2:a0:f4:67:05:78:29:63:1a:6f:04:d6:f8: ++ c6:4c:a3:9a:b1:37:b4:8d:e5:28:4b:1d:9e:2c:c2:b8:68:bc: ++ ed:02:ee:31 + -----BEGIN CERTIFICATE----- +-MIICYDCCAgegAwIBAgIMDWpfCD8oXD5Rld9dMAoGCCqGSM49BAMCMIGRMQswCQYD +-VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf +-BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3 +-YXZlIEdsb2JhbCBFQ0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x +-NzA4MjMxOTM1MTBaFw00MjA4MjMxOTM1MTBaMIGRMQswCQYDVQQGEwJVUzERMA8G +-A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0 +-d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF +-Q0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTBZMBMGByqGSM49AgEGCCqG +-SM49AwEHA0IABH77bOYj43MyCMpg5lOcunSNGLB4kFKA3TjASh3RqMyTpJcGOMoN +-FWLGjgEqZZ2q3zSRLoHB5DOSMcT9CTqmP62jQzBBMA8GA1UdEwEB/wQFMAMBAf8w +-DwYDVR0PAQH/BAUDAwcGADAdBgNVHQ4EFgQUo0EGrJBt0UrrdaVKEJmzsaGLSvcw +-CgYIKoZIzj0EAwIDRwAwRAIgB+ZU2g6gWrKuEZ+Hxbb/ad4lvvigtwjzRM4q3wgh +-DDcCIC0mA6AFvWvR9lz4ZcyGbbOcNEhjhAnFjXca4syc4XR7 ++MIIDuDCCAqCgAwIBAgIQDPCOXAgWpa1Cf/DrJxhZ0DANBgkqhkiG9w0BAQUFADBI ++MQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24x ++FzAVBgNVBAMTDlNlY3VyZVRydXN0IENBMB4XDTA2MTEwNzE5MzExOFoXDTI5MTIz ++MTE5NDA1NVowSDELMAkGA1UEBhMCVVMxIDAeBgNVBAoTF1NlY3VyZVRydXN0IENv ++cnBvcmF0aW9uMRcwFQYDVQQDEw5TZWN1cmVUcnVzdCBDQTCCASIwDQYJKoZIhvcN ++AQEBBQADggEPADCCAQoCggEBAKukgeWVzfX2FI7CT8rU4niVWJxB4Q2ZQCQXOZEz ++Zum+4YOvYlyJ0fwkW2Gz4BERQRwdbvC4u/jep4G6pkjGnx29vo6pQT64lO0pGtSO ++0gMdA+9tDWccV9cGrcrI9f4Or2YlSASWC12juhbDCE/RRvgUXPLIXgGZbf2IzIao ++wW8xQmxSPmjL8xk037uHGFaAJsTQ3MBv396gwpEWoGQRS0S8Hvbn+mPeZqx2pHGj ++7DaUaHp3pLHnDi+BeuK1cobvomuL8A/b01k/unK8RCSc43Oz969XL0Imnal0ugBS ++8kvNU3xHCzaFDmapCJcWNFfBZveA4+1wVMeT4C4oFVmHursCAwEAAaOBnTCBmjAT ++BgkrBgEEAYI3FAIEBh4EAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB ++/zAdBgNVHQ4EFgQUQjK2FvoE/f5dS3rD/fdMQB1aQ68wNAYDVR0fBC0wKzApoCeg ++JYYjaHR0cDovL2NybC5zZWN1cmV0cnVzdC5jb20vU1RDQS5jcmwwEAYJKwYBBAGC ++NxUBBAMCAQAwDQYJKoZIhvcNAQEFBQADggEBADDtT0rhWDpSclu1pqNlGKa7UTt3 ++6Z3q059c4EVlew3KW+JwULKUBRSuSceNQQcSc5R+DCMh/bwQf2AQWnL1mA6s7Ll/ ++3XpvXdMc9P+IBWlCqQVxyLesJugutIxq/3HcuLHfmbx8IVQr5Fiiu1cprp6poxkm ++D5kuCLDv/WnPmRoJjeOnnyvJNjR7JLN4TJUXpAYmHrZkUjZfYGfZnMUFdAvnZyPS ++CPyI6a6Lf+Ew9Dd+/cYy2i2eRDAwbO4H3tI0/NL/QPZL9GZGBlSm8jIKYyYwa5vR ++3ItHuuG51WLQoqD0ZwV4KWMabwTW+MZMo5qxN7SN5ShLHZ4swrhovO0C7jE= + -----END CERTIFICATE----- + +-# Issuer: CN=Trustwave Global ECC P384 Certification Authority O=Trustwave Holdings, Inc. +-# Subject: CN=Trustwave Global ECC P384 Certification Authority O=Trustwave Holdings, Inc. +-# Label: "Trustwave Global ECC P384 Certification Authority" +-# Serial: 2704997926503831671788816187 +-# MD5 Fingerprint: ea:cf:60:c4:3b:b9:15:29:40:a1:97:ed:78:27:93:d6 +-# SHA1 Fingerprint: e7:f3:a3:c8:cf:6f:c3:04:2e:6d:0e:67:32:c5:9e:68:95:0d:5e:d2 +-# SHA256 Fingerprint: 55:90:38:59:c8:c0:c3:eb:b8:75:9e:ce:4e:25:57:22:5f:f5:75:8b:bd:38:eb:d4:82:76:60:1e:1b:d5:80:97 ++# 9bea11c976fe014764c1be56a6f914b5a560317abd9988393382e5161aa0493c ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 5d:df:b1:da:5a:a3:ed:5d:be:5a:65:20:65:03:90:ef ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = CN, O = UniTrust, CN = UCA Global G2 Root ++ Validity ++ Not Before: Mar 11 00:00:00 2016 GMT ++ Not After : Dec 31 00:00:00 2040 GMT ++ Subject: C = CN, O = UniTrust, CN = UCA Global G2 Root ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:c5:e6:2b:6f:7c:ef:26:05:27:a3:81:24:da:6f: ++ cb:01:f9:99:9a:a9:32:c2:22:87:61:41:91:3b:cb: ++ c3:68:1b:06:c5:4c:a9:2b:c1:67:17:22:1d:2b:ed: ++ f9:29:89:93:a2:78:bd:92:6b:a0:a3:0d:a2:7e:ca: ++ 93:b3:a6:d1:8c:35:d5:75:f9:17:f6:cf:45:c5:e5: ++ 7a:ec:77:93:a0:8f:23:ae:0e:1a:03:7f:be:d4:d0: ++ ed:2e:7b:ab:46:23:5b:ff:2c:e6:54:7a:94:c0:2a: ++ 15:f0:c9:8d:b0:7a:3b:24:e1:d7:68:e2:31:3c:06: ++ 33:46:b6:54:11:a6:a5:2f:22:54:2a:58:0d:01:02: ++ f1:fa:15:51:67:6c:c0:fa:d7:b6:1b:7f:d1:56:88: ++ 2f:1a:3a:8d:3b:bb:82:11:e0:47:00:d0:52:87:ab: ++ fb:86:7e:0f:24:6b:40:9d:34:67:bc:8d:c7:2d:86: ++ 6f:79:3e:8e:a9:3c:17:4b:7f:b0:99:e3:b0:71:60: ++ dc:0b:f5:64:c3:ce:43:bc:6d:71:b9:d2:de:27:5b: ++ 8a:e8:d8:c6:ae:e1:59:7d:cf:28:2d:35:b8:95:56: ++ 1a:f1:b2:58:4b:b7:12:37:c8:7c:b3:ed:4b:80:e1: ++ 8d:fa:32:23:b6:6f:b7:48:95:08:b1:44:4e:85:8c: ++ 3a:02:54:20:2f:df:bf:57:4f:3b:3a:90:21:d7:c1: ++ 26:35:54:20:ec:c7:3f:47:ec:ef:5a:bf:4b:7a:c1: ++ ad:3b:17:50:5c:62:d8:0f:4b:4a:dc:2b:fa:6e:bc: ++ 73:92:cd:ec:c7:50:e8:41:96:d7:a9:7e:6d:d8:e9: ++ 1d:8f:8a:b5:b9:58:92:ba:4a:92:2b:0c:56:fd:80: ++ eb:08:f0:5e:29:6e:1b:1c:0c:af:8f:93:89:ad:db: ++ bd:a3:9e:21:ca:89:19:ec:df:b5:c3:1a:eb:16:fe: ++ 78:36:4c:d6:6e:d0:3e:17:1c:90:17:6b:26:ba:fb: ++ 7a:2f:bf:11:1c:18:0e:2d:73:03:8f:a0:e5:35:a0: ++ 5a:e2:4c:75:1d:71:e1:39:38:53:78:40:cc:83:93: ++ d7:0a:9e:9d:5b:8f:8a:e4:e5:e0:48:e4:48:b2:47: ++ cd:4e:2a:75:2a:7b:f2:22:f6:c9:be:09:91:96:57: ++ 7a:88:88:ac:ee:70:ac:f9:dc:29:e3:0c:1c:3b:12: ++ 4e:44:d6:a7:4e:b0:26:c8:f3:d9:1a:97:91:68:ea: ++ ef:8d:46:06:d2:56:45:58:9a:3c:0c:0f:83:b8:05: ++ 25:c3:39:cf:3b:a4:34:89:b7:79:12:2f:47:c5:e7: ++ a9:97:69:fc:a6:77:67:b5:df:7b:f1:7a:65:15:e4: ++ 61:56:65 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 81:C4:8C:CC:F5:E4:30:FF:A5:0C:08:5F:8C:15:67:21:74:01:DF:DF ++ Signature Algorithm: sha256WithRSAEncryption ++ 13:65:22:f5:8e:2b:ad:44:e4:cb:ff:b9:68:e6:c3:80:48:3d: ++ 04:7b:fa:23:2f:7a:ed:36:da:b2:ce:6d:f6:e6:9e:e5:5f:58: ++ 8f:cb:37:32:a1:c8:65:b6:ae:38:3d:35:1b:3e:bc:3b:b6:04: ++ d0:bc:f9:49:f5:9b:f7:85:c5:36:b6:cb:bc:f8:c8:39:d5:e4: ++ 5f:07:bd:15:54:97:74:ca:ca:ed:4f:ba:ba:64:76:9f:81:b8: ++ 84:45:49:4c:8d:6f:a2:eb:b1:cc:d1:c3:94:da:44:c2:e6:e2: ++ ea:18:e8:a2:1f:27:05:ba:d7:e5:d6:a9:cd:dd:ef:76:98:8d: ++ 00:0e:cd:1b:fa:03:b7:8e:80:58:0e:27:3f:52:fb:94:a2:ca: ++ 5e:65:c9:d6:84:da:b9:35:71:f3:26:c0:4f:77:e6:81:27:d2: ++ 77:3b:9a:14:6f:79:f4:f6:d0:e1:d3:94:ba:d0:57:51:bd:27: ++ 05:0d:c1:fd:c8:12:30:ee:6f:8d:11:2b:08:9d:d4:d4:bf:80: ++ 45:14:9a:88:44:da:30:ea:b4:a7:e3:ee:ef:5b:82:d5:3e:d6: ++ ad:78:92:db:5c:3c:f3:d8:ad:fa:b8:6b:7f:c4:36:28:b6:02: ++ 15:8a:54:2c:9c:b0:17:73:8e:d0:37:a3:14:3c:98:95:00:0c: ++ 29:05:5b:9e:49:49:b1:5f:c7:e3:cb:cf:27:65:8e:35:17:b7: ++ 57:c8:30:d9:41:5b:b9:14:b6:e8:c2:0f:94:31:a7:94:98:cc: ++ 6a:eb:b5:e1:27:f5:10:a8:01:e8:8e:12:62:e8:88:cc:b5:7f: ++ 46:97:c0:9b:10:66:38:1a:36:46:5f:22:68:3d:df:c9:c6:13: ++ 27:ab:53:06:ac:a2:3c:86:06:65:6f:b1:7e:b1:29:44:9a:a3: ++ ba:49:69:28:69:8f:d7:e5:5f:ad:04:86:64:6f:1a:a0:0c:c5: ++ 08:62:ce:80:a3:d0:f3:ec:68:de:be:33:c7:17:5b:7f:80:c4: ++ 4c:4c:b1:a6:84:8a:c3:3b:b8:09:cd:14:81:ba:18:e3:54:57: ++ 36:fe:db:2f:7c:47:a1:3a:33:c8:f9:58:3b:44:4f:b1:ca:02: ++ 89:04:96:28:68:c5:4b:b8:26:89:bb:d6:33:2f:50:d5:fe:9a: ++ 89:ba:18:32:92:54:c6:5b:e0:9d:f9:5e:e5:0d:22:9b:f6:da: ++ e2:c8:21:b2:62:21:aa:86:40:b2:2e:64:d3:5f:c8:e3:7e:11: ++ 67:45:1f:05:fe:e3:a2:ef:b3:a8:b3:f3:7d:8f:f8:0c:1f:22: ++ 1f:2d:70:b4:b8:01:34:76:30:00:e5:23:78:a7:56:d7:50:1f: ++ 8a:fb:06:f5:c2:19:f0:d0 + -----BEGIN CERTIFICATE----- +-MIICnTCCAiSgAwIBAgIMCL2Fl2yZJ6SAaEc7MAoGCCqGSM49BAMDMIGRMQswCQYD +-VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf +-BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3 +-YXZlIEdsb2JhbCBFQ0MgUDM4NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x +-NzA4MjMxOTM2NDNaFw00MjA4MjMxOTM2NDNaMIGRMQswCQYDVQQGEwJVUzERMA8G +-A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0 +-d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF +-Q0MgUDM4NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTB2MBAGByqGSM49AgEGBSuB +-BAAiA2IABGvaDXU1CDFHBa5FmVXxERMuSvgQMSOjfoPTfygIOiYaOs+Xgh+AtycJ +-j9GOMMQKmw6sWASr9zZ9lCOkmwqKi6vr/TklZvFe/oyujUF5nQlgziip04pt89ZF +-1PKYhDhloKNDMEEwDwYDVR0TAQH/BAUwAwEB/zAPBgNVHQ8BAf8EBQMDBwYAMB0G +-A1UdDgQWBBRVqYSJ0sEyvRjLbKYHTsjnnb6CkDAKBggqhkjOPQQDAwNnADBkAjA3 +-AZKXRRJ+oPM+rRk6ct30UJMDEr5E0k9BpIycnR+j9sKS50gU/k6bpZFXrsY3crsC +-MGclCrEMXu6pY5Jv5ZAL/mYiykf9ijH3g/56vxC+GCsej/YpHpRZ744hN8tRmKVu +-Sw== ++MIIFRjCCAy6gAwIBAgIQXd+x2lqj7V2+WmUgZQOQ7zANBgkqhkiG9w0BAQsFADA9 ++MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxGzAZBgNVBAMMElVDQSBH ++bG9iYWwgRzIgUm9vdDAeFw0xNjAzMTEwMDAwMDBaFw00MDEyMzEwMDAwMDBaMD0x ++CzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDEbMBkGA1UEAwwSVUNBIEds ++b2JhbCBHMiBSb290MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxeYr ++b3zvJgUno4Ek2m/LAfmZmqkywiKHYUGRO8vDaBsGxUypK8FnFyIdK+35KYmToni9 ++kmugow2ifsqTs6bRjDXVdfkX9s9FxeV67HeToI8jrg4aA3++1NDtLnurRiNb/yzm ++VHqUwCoV8MmNsHo7JOHXaOIxPAYzRrZUEaalLyJUKlgNAQLx+hVRZ2zA+te2G3/R ++VogvGjqNO7uCEeBHANBSh6v7hn4PJGtAnTRnvI3HLYZveT6OqTwXS3+wmeOwcWDc ++C/Vkw85DvG1xudLeJ1uK6NjGruFZfc8oLTW4lVYa8bJYS7cSN8h8s+1LgOGN+jIj ++tm+3SJUIsUROhYw6AlQgL9+/V087OpAh18EmNVQg7Mc/R+zvWr9LesGtOxdQXGLY ++D0tK3Cv6brxzks3sx1DoQZbXqX5t2Okdj4q1uViSukqSKwxW/YDrCPBeKW4bHAyv ++j5OJrdu9o54hyokZ7N+1wxrrFv54NkzWbtA+FxyQF2smuvt6L78RHBgOLXMDj6Dl ++NaBa4kx1HXHhOThTeEDMg5PXCp6dW4+K5OXgSORIskfNTip1KnvyIvbJvgmRlld6 ++iIis7nCs+dwp4wwcOxJORNanTrAmyPPZGpeRaOrvjUYG0lZFWJo8DA+DuAUlwznP ++O6Q0ibd5Ei9Hxeepl2n8pndntd978XplFeRhVmUCAwEAAaNCMEAwDgYDVR0PAQH/ ++BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFIHEjMz15DD/pQwIX4wV ++ZyF0Ad/fMA0GCSqGSIb3DQEBCwUAA4ICAQATZSL1jiutROTL/7lo5sOASD0Ee/oj ++L3rtNtqyzm325p7lX1iPyzcyochltq44PTUbPrw7tgTQvPlJ9Zv3hcU2tsu8+Mg5 ++1eRfB70VVJd0ysrtT7q6ZHafgbiERUlMjW+i67HM0cOU2kTC5uLqGOiiHycFutfl ++1qnN3e92mI0ADs0b+gO3joBYDic/UvuUospeZcnWhNq5NXHzJsBPd+aBJ9J3O5oU ++b3n09tDh05S60FdRvScFDcH9yBIw7m+NESsIndTUv4BFFJqIRNow6rSn4+7vW4LV ++PtateJLbXDzz2K36uGt/xDYotgIVilQsnLAXc47QN6MUPJiVAAwpBVueSUmxX8fj ++y88nZY41F7dXyDDZQVu5FLbowg+UMaeUmMxq67XhJ/UQqAHojhJi6IjMtX9Gl8Cb ++EGY4GjZGXyJoPd/JxhMnq1MGrKI8hgZlb7F+sSlEmqO6SWkoaY/X5V+tBIZkbxqg ++DMUIYs6Ao9Dz7GjevjPHF1t/gMRMTLGmhIrDO7gJzRSBuhjjVFc2/tsvfEehOjPI +++Vg7RE+xygKJBJYoaMVLuCaJu9YzL1DV/pqJuhgyklTGW+Cd+V7lDSKb9triyCGy ++YiGqhkCyLmTTX8jjfhFnRR8F/uOi77Oos/N9j/gMHyIfLXC0uAE0djAA5SN4p1bX ++UB+K+wb1whnw0A== + -----END CERTIFICATE----- + +-# Issuer: CN=NAVER Global Root Certification Authority O=NAVER BUSINESS PLATFORM Corp. +-# Subject: CN=NAVER Global Root Certification Authority O=NAVER BUSINESS PLATFORM Corp. +-# Label: "NAVER Global Root Certification Authority" +-# Serial: 9013692873798656336226253319739695165984492813 +-# MD5 Fingerprint: c8:7e:41:f6:25:3b:f5:09:b3:17:e8:46:3d:bf:d0:9b +-# SHA1 Fingerprint: 8f:6b:f2:a9:27:4a:da:14:a0:c4:f4:8e:61:27:f9:c0:1e:78:5d:d1 +-# SHA256 Fingerprint: 88:f4:38:dc:f8:ff:d1:fa:8f:42:91:15:ff:e5:f8:2a:e1:e0:6e:0c:70:c3:75:fa:ad:71:7b:34:a4:9e:72:65 ++# d43af9b35473755c9684fc06d7d8cb70ee5c28e773fb294eb41ee71722924d24 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 4f:d2:2b:8f:f5:64:c8:33:9e:4f:34:58:66:23:70:60 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = CN, O = UniTrust, CN = UCA Extended Validation Root ++ Validity ++ Not Before: Mar 13 00:00:00 2015 GMT ++ Not After : Dec 31 00:00:00 2038 GMT ++ Subject: C = CN, O = UniTrust, CN = UCA Extended Validation Root ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:a9:09:07:28:13:02:b0:99:e0:64:aa:1e:43:16: ++ 7a:73:b1:91:a0:75:3e:a8:fa:e3:38:00:7a:ec:89: ++ 6a:20:0f:8b:c5:b0:9b:33:03:5a:86:c6:58:86:d5: ++ c1:85:bb:4f:c6:9c:40:4d:ca:be:ee:69:96:b8:ad: ++ 81:30:9a:7c:92:05:eb:05:2b:9a:48:d0:b8:76:3e: ++ 96:c8:20:bb:d2:b0:f1:8f:d8:ac:45:46:ff:aa:67: ++ 60:b4:77:7e:6a:1f:3c:1a:52:7a:04:3d:07:3c:85: ++ 0d:84:d0:1f:76:0a:f7:6a:14:df:72:e3:34:7c:57: ++ 4e:56:01:3e:79:f1:aa:29:3b:6c:fa:f8:8f:6d:4d: ++ c8:35:df:ae:eb:dc:24:ee:79:45:a7:85:b6:05:88: ++ de:88:5d:25:7c:97:64:67:09:d9:bf:5a:15:05:86: ++ f3:09:1e:ec:58:32:33:11:f3:77:64:b0:76:1f:e4: ++ 10:35:17:1b:f2:0e:b1:6c:a4:2a:a3:73:fc:09:1f: ++ 1e:32:19:53:11:e7:d9:b3:2c:2e:76:2e:a1:a3:de: ++ 7e:6a:88:09:e8:f2:07:8a:f8:b2:cd:10:e7:e2:73: ++ 40:93:bb:08:d1:3f:e1:fc:0b:94:b3:25:ef:7c:a6: ++ d7:d1:af:9f:ff:96:9a:f5:91:7b:98:0b:77:d4:7e: ++ e8:07:d2:62:b5:95:39:e3:f3:f1:6d:0f:0e:65:84: ++ 8a:63:54:c5:80:b6:e0:9e:4b:7d:47:26:a7:01:08: ++ 5d:d1:88:9e:d7:c3:32:44:fa:82:4a:0a:68:54:7f: ++ 38:53:03:cc:a4:00:33:64:51:59:0b:a3:82:91:7a: ++ 5e:ec:16:c2:f3:2a:e6:62:da:2a:db:59:62:10:25: ++ 4a:2a:81:0b:47:07:43:06:70:87:d2:fa:93:11:29: ++ 7a:48:4d:eb:94:c7:70:4d:af:67:d5:51:b1:80:20: ++ 01:01:b4:7a:08:a6:90:7f:4e:e0:ef:07:41:87:af: ++ 6a:a5:5e:8b:fb:cf:50:b2:9a:54:af:c3:89:ba:58: ++ 2d:f5:30:98:b1:36:72:39:7e:49:04:fd:29:a7:4c: ++ 79:e4:05:57:db:94:b9:16:53:8d:46:b3:1d:95:61: ++ 57:56:7f:af:f0:16:5b:61:58:6f:36:50:11:0b:d8: ++ ac:2b:95:16:1a:0e:1f:08:cd:36:34:65:10:62:66: ++ d5:80:5f:14:20:5f:2d:0c:a0:78:0a:68:d6:2c:d7: ++ e9:6f:2b:d2:4a:05:93:fc:9e:6f:6b:67:ff:88:f1: ++ 4e:a5:69:4a:52:37:05:ea:c6:16:8d:d2:c4:99:d1: ++ 82:2b:3b:ba:35:75:f7:51:51:58:f3:c8:07:dd:e4: ++ b4:03:7f ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ D9:74:3A:E4:30:3D:0D:F7:12:DC:7E:5A:05:9F:1E:34:9A:F7:E1:14 ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ 36:8d:97:cc:42:15:64:29:37:9b:26:2c:d6:fb:ae:15:69:2c: ++ 6b:1a:1a:f7:5f:b6:f9:07:4c:59:ea:f3:c9:c8:b9:ae:cc:ba: ++ 2e:7a:dc:c0:f5:b0:2d:c0:3b:af:9f:70:05:11:6a:9f:25:4f: ++ 01:29:70:e3:e5:0c:e1:ea:5a:7c:dc:49:bb:c1:1e:2a:81:f5: ++ 16:4b:72:91:c8:a2:31:b9:aa:da:fc:9d:1f:f3:5d:40:02:13: ++ fc:4e:1c:06:ca:b3:14:90:54:17:19:12:1a:f1:1f:d7:0c:69: ++ 5a:f6:71:78:f4:94:7d:91:0b:8e:ec:90:54:8e:bc:6f:a1:4c: ++ ab:fc:74:64:fd:71:9a:f8:41:07:a1:cd:91:e4:3c:9a:e0:9b: ++ 32:39:73:ab:2a:d5:69:c8:78:91:26:31:7d:e2:c7:30:f1:fc: ++ 14:78:77:12:0e:13:f4:dd:16:94:bf:4b:67:7b:70:53:85:ca: ++ b0:bb:f3:38:4d:2c:90:39:c0:0d:c2:5d:6b:e9:e2:e5:d5:88: ++ 8d:d6:2c:bf:ab:1b:be:b5:28:87:12:17:74:6e:fc:7d:fc:8f: ++ d0:87:26:b0:1b:fb:b9:6c:ab:e2:9e:3d:15:c1:3b:2e:67:02: ++ 58:91:9f:ef:f8:42:1f:2c:b7:68:f5:75:ad:cf:b5:f6:ff:11: ++ 7d:c2:f0:24:a5:ad:d3:fa:a0:3c:a9:fa:5d:dc:a5:a0:ef:44: ++ a4:be:d6:e8:e5:e4:13:96:17:7b:06:3e:32:ed:c7:b7:42:bc: ++ 76:a3:d8:65:38:2b:38:35:51:21:0e:0e:6f:2e:34:13:40:e1: ++ 2b:67:0c:6d:4a:41:30:18:23:5a:32:55:99:c9:17:e0:3c:de: ++ f6:ec:79:ad:2b:58:19:a2:ad:2c:22:1a:95:8e:be:96:90:5d: ++ 42:57:c4:f9:14:03:35:2b:1c:2d:51:57:08:a7:3a:de:3f:e4: ++ c8:b4:03:73:c2:c1:26:80:bb:0b:42:1f:ad:0d:af:26:72:da: ++ cc:be:b3:a3:83:58:0d:82:c5:1f:46:51:e3:9c:18:cc:8d:9b: ++ 8d:ec:49:eb:75:50:d5:8c:28:59:ca:74:34:da:8c:0b:21:ab: ++ 1e:ea:1b:e5:c7:fd:15:3e:c0:17:aa:fb:23:6e:26:46:cb:fa: ++ f9:b1:72:6b:69:cf:22:84:0b:62:0f:ac:d9:19:00:94:a2:76: ++ 3c:d4:2d:9a:ed:04:9e:2d:06:62:10:37:52:1c:85:72:1b:27: ++ e5:cc:c6:31:ec:37:ec:63:59:9b:0b:1d:76:cc:7e:32:9a:88: ++ 95:08:36:52:bb:de:76:5f:76:49:49:ad:7f:bd:65:20:b2:c9: ++ c1:2b:76:18:76:9f:56:b1 ++-----BEGIN CERTIFICATE----- ++MIIFWjCCA0KgAwIBAgIQT9Irj/VkyDOeTzRYZiNwYDANBgkqhkiG9w0BAQsFADBH ++MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxJTAjBgNVBAMMHFVDQSBF ++eHRlbmRlZCBWYWxpZGF0aW9uIFJvb3QwHhcNMTUwMzEzMDAwMDAwWhcNMzgxMjMx ++MDAwMDAwWjBHMQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxJTAjBgNV ++BAMMHFVDQSBFeHRlbmRlZCBWYWxpZGF0aW9uIFJvb3QwggIiMA0GCSqGSIb3DQEB ++AQUAA4ICDwAwggIKAoICAQCpCQcoEwKwmeBkqh5DFnpzsZGgdT6o+uM4AHrsiWog ++D4vFsJszA1qGxliG1cGFu0/GnEBNyr7uaZa4rYEwmnySBesFK5pI0Lh2PpbIILvS ++sPGP2KxFRv+qZ2C0d35qHzwaUnoEPQc8hQ2E0B92CvdqFN9y4zR8V05WAT558aop ++O2z6+I9tTcg1367r3CTueUWnhbYFiN6IXSV8l2RnCdm/WhUFhvMJHuxYMjMR83dk ++sHYf5BA1FxvyDrFspCqjc/wJHx4yGVMR59mzLC52LqGj3n5qiAno8geK+LLNEOfi ++c0CTuwjRP+H8C5SzJe98ptfRr5//lpr1kXuYC3fUfugH0mK1lTnj8/FtDw5lhIpj ++VMWAtuCeS31HJqcBCF3RiJ7XwzJE+oJKCmhUfzhTA8ykADNkUVkLo4KRel7sFsLz ++KuZi2irbWWIQJUoqgQtHB0MGcIfS+pMRKXpITeuUx3BNr2fVUbGAIAEBtHoIppB/ ++TuDvB0GHr2qlXov7z1CymlSvw4m6WC31MJixNnI5fkkE/SmnTHnkBVfblLkWU41G ++sx2VYVdWf6/wFlthWG82UBEL2KwrlRYaDh8IzTY0ZRBiZtWAXxQgXy0MoHgKaNYs ++1+lvK9JKBZP8nm9rZ/+I8U6laUpSNwXqxhaN0sSZ0YIrO7o1dfdRUVjzyAfd5LQD ++fwIDAQABo0IwQDAdBgNVHQ4EFgQU2XQ65DA9DfcS3H5aBZ8eNJr34RQwDwYDVR0T ++AQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwDQYJKoZIhvcNAQELBQADggIBADaN ++l8xCFWQpN5smLNb7rhVpLGsaGvdftvkHTFnq88nIua7Mui563MD1sC3AO6+fcAUR ++ap8lTwEpcOPlDOHqWnzcSbvBHiqB9RZLcpHIojG5qtr8nR/zXUACE/xOHAbKsxSQ ++VBcZEhrxH9cMaVr2cXj0lH2RC47skFSOvG+hTKv8dGT9cZr4QQehzZHkPJrgmzI5 ++c6sq1WnIeJEmMX3ixzDx/BR4dxIOE/TdFpS/S2d7cFOFyrC78zhNLJA5wA3CXWvp ++4uXViI3WLL+rG761KIcSF3Ru/H38j9CHJrAb+7lsq+KePRXBOy5nAliRn+/4Qh8s ++t2j1da3Ptfb/EX3C8CSlrdP6oDyp+l3cpaDvRKS+1ujl5BOWF3sGPjLtx7dCvHaj ++2GU4Kzg1USEODm8uNBNA4StnDG1KQTAYI1oyVZnJF+A83vbsea0rWBmirSwiGpWO ++vpaQXUJXxPkUAzUrHC1RVwinOt4/5Mi0A3PCwSaAuwtCH60NryZy2sy+s6ODWA2C ++xR9GUeOcGMyNm43sSet1UNWMKFnKdDTajAshqx7qG+XH/RU+wBeq+yNuJkbL+vmx ++cmtpzyKEC2IPrNkZAJSidjzULZrtBJ4tBmIQN1IchXIbJ+XMxjHsN+xjWZsLHXbM ++fjKaiJUINlK73nZfdklJrX+9ZSCyycErdhh2n1ax ++-----END CERTIFICATE----- ++ ++# 22a2c1f7bded704cc1e701b5f408c310880fe956b5de2a4a44f99c873a25a7c8 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 3182246526754555285 (0x2c299c5b16ed0595) ++ Signature Algorithm: ecdsa-with-SHA256 ++ Issuer: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com EV Root Certification Authority ECC ++ Validity ++ Not Before: Feb 12 18:15:23 2016 GMT ++ Not After : Feb 12 18:15:23 2041 GMT ++ Subject: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com EV Root Certification Authority ECC ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:aa:12:47:90:98:1b:fb:ef:c3:40:07:83:20:4e: ++ f1:30:82:a2:06:d1:f2:92:86:61:f2:f6:21:68:ca: ++ 00:c4:c7:ea:43:00:54:86:dc:fd:1f:df:00:b8:41: ++ 62:5c:dc:70:16:32:de:1f:99:d4:cc:c5:07:c8:08: ++ 1f:61:16:07:51:3d:7d:5c:07:53:e3:35:38:8c:df: ++ cd:9f:d9:2e:0d:4a:b6:19:2e:5a:70:5a:06:ed:be: ++ f0:a1:b0:ca:d0:09:29 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 5B:CA:5E:E5:DE:D2:81:AA:CD:A8:2D:64:51:B6:D9:72:9B:97:E6:4F ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ keyid:5B:CA:5E:E5:DE:D2:81:AA:CD:A8:2D:64:51:B6:D9:72:9B:97:E6:4F ++ ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: ecdsa-with-SHA256 ++ 30:65:02:31:00:8a:e6:40:89:37:eb:e9:d5:13:d9:ca:d4:6b: ++ 24:f3:b0:3d:87:46:58:1a:ec:b1:df:6f:fb:56:ba:70:6b:c7: ++ 38:cc:e8:b1:8c:4f:0f:f7:f1:67:76:0e:83:d0:1e:51:8f:02: ++ 30:3d:f6:23:28:26:4c:c6:60:87:93:26:9b:b2:35:1e:ba:d6: ++ f7:3c:d1:1c:ce:fa:25:3c:a6:1a:81:15:5b:f3:12:0f:6c:ee: ++ 65:8a:c9:87:a8:f9:07:e0:62:9a:8c:5c:4a ++-----BEGIN CERTIFICATE----- ++MIIClDCCAhqgAwIBAgIILCmcWxbtBZUwCgYIKoZIzj0EAwIwfzELMAkGA1UEBhMC ++VVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9T ++U0wgQ29ycG9yYXRpb24xNDAyBgNVBAMMK1NTTC5jb20gRVYgUm9vdCBDZXJ0aWZp ++Y2F0aW9uIEF1dGhvcml0eSBFQ0MwHhcNMTYwMjEyMTgxNTIzWhcNNDEwMjEyMTgx ++NTIzWjB/MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hv ++dXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjE0MDIGA1UEAwwrU1NMLmNv ++bSBFViBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IEVDQzB2MBAGByqGSM49 ++AgEGBSuBBAAiA2IABKoSR5CYG/vvw0AHgyBO8TCCogbR8pKGYfL2IWjKAMTH6kMA ++VIbc/R/fALhBYlzccBYy3h+Z1MzFB8gIH2EWB1E9fVwHU+M1OIzfzZ/ZLg1Kthku ++WnBaBu2+8KGwytAJKaNjMGEwHQYDVR0OBBYEFFvKXuXe0oGqzagtZFG22XKbl+ZP ++MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUW8pe5d7SgarNqC1kUbbZcpuX ++5k8wDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA2gAMGUCMQCK5kCJN+vp1RPZ ++ytRrJPOwPYdGWBrssd9v+1a6cGvHOMzosYxPD/fxZ3YOg9AeUY8CMD32IygmTMZg ++h5Mmm7I1HrrW9zzRHM76JTymGoEVW/MSD2zuZYrJh6j5B+BimoxcSg== ++-----END CERTIFICATE----- ++ ++# 2e7bf16cc22485a7bbe2aa8696750761b0ae39be3b2fe9d0cc6d4ef73491425c ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 6248227494352943350 (0x56b629cd34bc78f6) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com EV Root Certification Authority RSA R2 ++ Validity ++ Not Before: May 31 18:14:37 2017 GMT ++ Not After : May 30 18:14:37 2042 GMT ++ Subject: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com EV Root Certification Authority RSA R2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:8f:36:65:40:e1:d6:4d:c0:d7:b4:e9:46:da:6b: ++ ea:33:47:cd:4c:f9:7d:7d:be:bd:2d:3d:f0:db:78: ++ e1:86:a5:d9:ba:09:57:68:ed:57:3e:a0:d0:08:41: ++ 83:e7:28:41:24:1f:e3:72:15:d0:01:1a:fb:5e:70: ++ 23:b2:cb:9f:39:e3:cf:c5:4e:c6:92:6d:26:c6:7b: ++ bb:b3:da:27:9d:0a:86:e9:81:37:05:fe:f0:71:71: ++ ec:c3:1c:e9:63:a2:17:14:9d:ef:1b:67:d3:85:55: ++ 02:02:d6:49:c9:cc:5a:e1:b1:f7:6f:32:9f:c9:d4: ++ 3b:88:41:a8:9c:bd:cb:ab:db:6d:7b:09:1f:a2:4c: ++ 72:90:da:2b:08:fc:cf:3c:54:ce:67:0f:a8:cf:5d: ++ 96:19:0b:c4:e3:72:eb:ad:d1:7d:1d:27:ef:92:eb: ++ 10:bf:5b:eb:3b:af:cf:80:dd:c1:d2:96:04:5b:7a: ++ 7e:a4:a9:3c:38:76:a4:62:8e:a0:39:5e:ea:77:cf: ++ 5d:00:59:8f:66:2c:3e:07:a2:a3:05:26:11:69:97: ++ ea:85:b7:0f:96:0b:4b:c8:40:e1:50:ba:2e:8a:cb: ++ f7:0f:9a:22:e7:7f:9a:37:13:cd:f2:4d:13:6b:21: ++ d1:c0:cc:22:f2:a1:46:f6:44:69:9c:ca:61:35:07: ++ 00:6f:d6:61:08:11:ea:ba:b8:f6:e9:b3:60:e5:4d: ++ b9:ec:9f:14:66:c9:57:58:db:cd:87:69:f8:8a:86: ++ 12:03:47:bf:66:13:76:ac:77:7d:34:24:85:83:cd: ++ d7:aa:9c:90:1a:9f:21:2c:7f:78:b7:64:b8:d8:e8: ++ a6:f4:78:b3:55:cb:84:d2:32:c4:78:ae:a3:8f:61: ++ dd:ce:08:53:ad:ec:88:fc:15:e4:9a:0d:e6:9f:1a: ++ 77:ce:4c:8f:b8:14:15:3d:62:9c:86:38:06:00:66: ++ 12:e4:59:76:5a:53:c0:02:98:a2:10:2b:68:44:7b: ++ 8e:79:ce:33:4a:76:aa:5b:81:16:1b:b5:8a:d8:d0: ++ 00:7b:5e:62:b4:09:d6:86:63:0e:a6:05:95:49:ba: ++ 28:8b:88:93:b2:34:1c:d8:a4:55:6e:b7:1c:d0:de: ++ 99:55:3b:23:f4:22:e0:f9:29:66:26:ec:20:50:77: ++ db:4a:0b:8f:be:e5:02:60:70:41:5e:d4:ae:50:39: ++ 22:14:26:cb:b2:3b:73:74:55:47:07:79:81:39:a8: ++ 30:13:44:e5:04:8a:ae:96:13:25:42:0f:b9:53:c4: ++ 9b:fc:cd:e4:1c:de:3c:fa:ab:d6:06:4a:1f:67:a6: ++ 98:30:1c:dd:2c:db:dc:18:95:57:66:c6:ff:5c:8b: ++ 56:f5:77 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ keyid:F9:60:BB:D4:E3:D5:34:F6:B8:F5:06:80:25:A7:73:DB:46:69:A8:9E ++ ++ X509v3 Subject Key Identifier: ++ F9:60:BB:D4:E3:D5:34:F6:B8:F5:06:80:25:A7:73:DB:46:69:A8:9E ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ 56:b3:8e:cb:0a:9d:49:8e:bf:a4:c4:91:bb:66:17:05:51:98: ++ 75:fb:e5:50:2c:7a:9e:f1:14:fa:ab:d3:8a:3e:ff:91:29:8f: ++ 63:8b:d8:b4:a9:54:01:0d:be:93:86:2f:f9:4a:6d:c7:5e:f5: ++ 57:f9:ca:55:1c:12:be:47:0f:36:c5:df:6a:b7:db:75:c2:47: ++ 25:7f:b9:f1:63:f8:68:2d:55:04:d1:f2:8d:b0:a4:cf:bc:3c: ++ 5e:1f:78:e7:a5:a0:20:70:b0:04:c5:b7:f7:72:a7:de:22:0d: ++ bd:33:25:46:8c:64:92:26:e3:3e:2e:63:96:da:9b:8c:3d:f8: ++ 18:09:d7:03:cc:7d:86:82:e0:ca:04:07:51:50:d7:ff:92:d5: ++ 0c:ef:da:86:9f:99:d7:eb:b7:af:68:e2:39:26:94:ba:68:b7: ++ bf:83:d3:ea:7a:67:3d:62:67:ae:25:e5:72:e8:e2:e4:ec:ae: ++ 12:f6:4b:2b:3c:9f:e9:b0:40:f3:38:54:b3:fd:b7:68:c8:da: ++ c6:8f:51:3c:b2:fb:91:dc:1c:e7:9b:9d:e1:b7:0d:72:8f:e2: ++ a4:c4:a9:78:f9:eb:14:ac:c6:43:05:c2:65:39:28:18:02:c3: ++ 82:b2:9d:05:be:65:ed:96:5f:65:74:3c:fb:09:35:2e:7b:9c: ++ 13:fd:1b:0f:5d:c7:6d:81:3a:56:0f:cc:3b:e1:af:02:2f:22: ++ ac:46:ca:46:3c:a0:1c:4c:d6:44:b4:5e:2e:5c:15:66:09:e1: ++ 26:29:fe:c6:52:61:ba:b1:73:ff:c3:0c:9c:e5:6c:6a:94:3f: ++ 14:ca:40:16:95:84:f3:59:a9:ac:5f:4c:61:93:6d:d1:3b:cc: ++ a2:95:0c:22:a6:67:67:44:2e:b9:d9:d2:8a:41:b3:66:0b:5a: ++ fb:7d:23:a5:f2:1a:b0:ff:de:9b:83:94:2e:d1:3f:df:92:b7: ++ 91:af:05:3b:65:c7:a0:6c:b1:cd:62:12:c3:90:1b:e3:25:ce: ++ 34:bc:6f:77:76:b1:10:c3:f7:05:1a:c0:d6:af:74:62:48:17: ++ 77:92:69:90:61:1c:de:95:80:74:54:8f:18:1c:c3:f3:03:d0: ++ bf:a4:43:75:86:53:18:7a:0a:2e:09:1c:36:9f:91:fd:82:8a: ++ 22:4b:d1:0e:50:25:dd:cb:03:0c:17:c9:83:00:08:4e:35:4d: ++ 8a:8b:ed:f0:02:94:66:2c:44:7f:cb:95:27:96:17:ad:09:30: ++ ac:b6:71:17:6e:8b:17:f6:1c:09:d4:2d:3b:98:a5:71:d3:54: ++ 13:d9:60:f3:f5:4b:66:4f:fa:f1:ee:20:12:8d:b4:ac:57:b1: ++ 45:63:a1:ac:76:a9:c2:fb ++-----BEGIN CERTIFICATE----- ++MIIF6zCCA9OgAwIBAgIIVrYpzTS8ePYwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNV ++BAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjEYMBYGA1UE ++CgwPU1NMIENvcnBvcmF0aW9uMTcwNQYDVQQDDC5TU0wuY29tIEVWIFJvb3QgQ2Vy ++dGlmaWNhdGlvbiBBdXRob3JpdHkgUlNBIFIyMB4XDTE3MDUzMTE4MTQzN1oXDTQy ++MDUzMDE4MTQzN1owgYIxCzAJBgNVBAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4G ++A1UEBwwHSG91c3RvbjEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMTcwNQYDVQQD ++DC5TU0wuY29tIEVWIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgUlNBIFIy ++MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAjzZlQOHWTcDXtOlG2mvq ++M0fNTPl9fb69LT3w23jhhqXZuglXaO1XPqDQCEGD5yhBJB/jchXQARr7XnAjssuf ++OePPxU7Gkm0mxnu7s9onnQqG6YE3Bf7wcXHswxzpY6IXFJ3vG2fThVUCAtZJycxa ++4bH3bzKfydQ7iEGonL3Lq9ttewkfokxykNorCPzPPFTOZw+oz12WGQvE43LrrdF9 ++HSfvkusQv1vrO6/PgN3B0pYEW3p+pKk8OHakYo6gOV7qd89dAFmPZiw+B6KjBSYR ++aZfqhbcPlgtLyEDhULouisv3D5oi53+aNxPN8k0TayHRwMwi8qFG9kRpnMphNQcA ++b9ZhCBHqurj26bNg5U257J8UZslXWNvNh2n4ioYSA0e/ZhN2rHd9NCSFg83XqpyQ ++Gp8hLH94t2S42Oim9HizVcuE0jLEeK6jj2HdzghTreyI/BXkmg3mnxp3zkyPuBQV ++PWKchjgGAGYS5Fl2WlPAApiiECtoRHuOec4zSnaqW4EWG7WK2NAAe15itAnWhmMO ++pgWVSbooi4iTsjQc2KRVbrcc0N6ZVTsj9CLg+SlmJuwgUHfbSguPvuUCYHBBXtSu ++UDkiFCbLsjtzdFVHB3mBOagwE0TlBIqulhMlQg+5U8Sb/M3kHN48+qvWBkofZ6aY ++MBzdLNvcGJVXZsb/XItW9XcCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAfBgNV ++HSMEGDAWgBT5YLvU49U09rj1BoAlp3PbRmmonjAdBgNVHQ4EFgQU+WC71OPVNPa4 ++9QaAJadz20ZpqJ4wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQBW ++s47LCp1Jjr+kxJG7ZhcFUZh1++VQLHqe8RT6q9OKPv+RKY9ji9i0qVQBDb6Thi/5 ++Sm3HXvVX+cpVHBK+Rw82xd9qt9t1wkclf7nxY/hoLVUE0fKNsKTPvDxeH3jnpaAg ++cLAExbf3cqfeIg29MyVGjGSSJuM+LmOW2puMPfgYCdcDzH2GguDKBAdRUNf/ktUM ++79qGn5nX67evaOI5JpS6aLe/g9Pqemc9YmeuJeVy6OLk7K4S9ksrPJ/psEDzOFSz ++/bdoyNrGj1E8svuR3Bznm53htw1yj+KkxKl4+esUrMZDBcJlOSgYAsOCsp0FvmXt ++ll9ldDz7CTUue5wT/RsPXcdtgTpWD8w74a8CLyKsRspGPKAcTNZEtF4uXBVmCeEm ++Kf7GUmG6sXP/wwyc5WxqlD8UykAWlYTzWamsX0xhk23RO8yilQwipmdnRC652dKK ++QbNmC1r7fSOl8hqw/96bg5Qu0T/fkreRrwU7ZcegbLHNYhLDkBvjJc40vG93drEQ ++w/cFGsDWr3RiSBd3kmmQYRzelYB0VI8YHMPzA9C/pEN1hlMYegouCRw2n5H9gooi ++S9EOUCXdywMMF8mDAAhONU2Ki+3wApRmLER/y5UnlhetCTCstnEXbosX9hwJ1C07 ++mKVx01QT2WDz9UtmT/rx7iASjbSsV7FFY6GsdqnC+w== ++-----END CERTIFICATE----- ++ ++# 3417bb06cc6007da1b961c920b8ab4ce3fad820e4aa30b9acbc4a74ebdcebc65 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 8495723813297216424 (0x75e6dfcbc1685ba8) ++ Signature Algorithm: ecdsa-with-SHA256 ++ Issuer: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com Root Certification Authority ECC ++ Validity ++ Not Before: Feb 12 18:14:03 2016 GMT ++ Not After : Feb 12 18:14:03 2041 GMT ++ Subject: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com Root Certification Authority ECC ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:45:6e:a9:50:c4:a6:23:36:9e:5f:28:8d:17:cb: ++ 96:22:64:3f:dc:7a:8e:1d:cc:08:b3:a2:71:24:ba: ++ 8e:49:b9:04:1b:47:96:58:ab:2d:95:c8:ed:9e:08: ++ 35:c8:27:eb:89:8c:53:58:eb:62:8a:fe:f0:5b:0f: ++ 6b:31:52:63:41:3b:89:cd:ec:ec:b6:8d:19:d3:34: ++ 07:dc:bb:c6:06:7f:c2:45:95:ec:cb:7f:a8:23:e0: ++ 09:e9:81:fa:f3:47:d3 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 82:D1:85:73:30:E7:35:04:D3:8E:02:92:FB:E5:A4:D1:C4:21:E8:CD ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ keyid:82:D1:85:73:30:E7:35:04:D3:8E:02:92:FB:E5:A4:D1:C4:21:E8:CD ++ ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: ecdsa-with-SHA256 ++ 30:64:02:30:6f:e7:eb:59:11:a4:60:cf:61:b0:96:7b:ed:05: ++ f9:2f:13:91:dc:ed:e5:fc:50:6b:11:46:46:b3:1c:21:00:62: ++ bb:be:c3:e7:e8:cd:07:99:f9:0d:0b:5d:72:3e:c4:aa:02:30: ++ 1f:bc:ba:0b:e2:30:24:fb:7c:6d:80:55:0a:99:3e:80:0d:33: ++ e5:66:a3:b3:a3:bb:a5:d5:8b:8f:09:2c:a6:5d:7e:e2:f0:07: ++ 08:68:6d:d2:7c:69:6e:5f:df:e5:6a:65 ++-----BEGIN CERTIFICATE----- ++MIICjTCCAhSgAwIBAgIIdebfy8FoW6gwCgYIKoZIzj0EAwIwfDELMAkGA1UEBhMC ++VVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9T ++U0wgQ29ycG9yYXRpb24xMTAvBgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZpY2F0 ++aW9uIEF1dGhvcml0eSBFQ0MwHhcNMTYwMjEyMTgxNDAzWhcNNDEwMjEyMTgxNDAz ++WjB8MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0 ++b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjExMC8GA1UEAwwoU1NMLmNvbSBS ++b290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IEVDQzB2MBAGByqGSM49AgEGBSuB ++BAAiA2IABEVuqVDEpiM2nl8ojRfLliJkP9x6jh3MCLOicSS6jkm5BBtHllirLZXI ++7Z4INcgn64mMU1jrYor+8FsPazFSY0E7ic3s7LaNGdM0B9y7xgZ/wkWV7Mt/qCPg ++CemB+vNH06NjMGEwHQYDVR0OBBYEFILRhXMw5zUE044CkvvlpNHEIejNMA8GA1Ud ++EwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUgtGFczDnNQTTjgKS++Wk0cQh6M0wDgYD ++VR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA2cAMGQCMG/n61kRpGDPYbCWe+0F+S8T ++kdzt5fxQaxFGRrMcIQBiu77D5+jNB5n5DQtdcj7EqgIwH7y6C+IwJPt8bYBVCpk+ ++gA0z5Wajs6O7pdWLjwkspl1+4vAHCGht0nxpbl/f5Wpl ++-----END CERTIFICATE----- ++ ++# 85666a562ee0be5ce925c1d8890a6f76a87ec16d4d7d5f29ea7419cf20123b69 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 8875640296558310041 (0x7b2c9bd316803299) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com Root Certification Authority RSA ++ Validity ++ Not Before: Feb 12 17:39:39 2016 GMT ++ Not After : Feb 12 17:39:39 2041 GMT ++ Subject: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com Root Certification Authority RSA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:f9:0f:dd:a3:2b:7d:cb:d0:2a:fe:ec:67:85:a6: ++ e7:2e:1b:ba:77:e1:e3:f5:af:a4:ec:fa:4a:5d:91: ++ c4:57:47:6b:18:77:6b:76:f2:fd:93:e4:3d:0f:c2: ++ 16:9e:0b:66:c3:56:94:9e:17:83:85:ce:56:ef:f2: ++ 16:fd:00:62:f5:22:09:54:e8:65:17:4e:41:b9:e0: ++ 4f:46:97:aa:1b:c8:b8:6e:62:5e:69:b1:5f:db:2a: ++ 02:7e:fc:6c:ca:f3:41:d8:ed:d0:e8:fc:3f:61:48: ++ ed:b0:03:14:1d:10:0e:4b:19:e0:bb:4e:ec:86:65: ++ ff:36:f3:5e:67:02:0b:9d:86:55:61:fd:7a:38:ed: ++ fe:e2:19:00:b7:6f:a1:50:62:75:74:3c:a0:fa:c8: ++ 25:92:b4:6e:7a:22:c7:f8:1e:a1:e3:b2:dd:91:31: ++ ab:2b:1d:04:ff:a5:4a:04:37:e9:85:a4:33:2b:fd: ++ e2:d6:55:34:7c:19:a4:4a:68:c7:b2:a8:d3:b7:ca: ++ a1:93:88:eb:c1:97:bc:8c:f9:1d:d9:22:84:24:74: ++ c7:04:3d:6a:a9:29:93:cc:eb:b8:5b:e1:fe:5f:25: ++ aa:34:58:c8:c1:23:54:9d:1b:98:11:c3:38:9c:7e: ++ 3d:86:6c:a5:0f:40:86:7c:02:f4:5c:02:4f:28:cb: ++ ae:71:9f:0f:3a:c8:33:fe:11:25:35:ea:fc:ba:c5: ++ 60:3d:d9:7c:18:d5:b2:a9:d3:75:78:03:72:22:ca: ++ 3a:c3:1f:ef:2c:e5:2e:a9:fa:9e:2c:b6:51:46:fd: ++ af:03:d6:ea:60:68:ea:85:16:36:6b:85:e9:1e:c0: ++ b3:dd:c4:24:dc:80:2a:81:41:6d:94:3e:c8:e0:c9: ++ 81:41:00:9e:5e:bf:7f:c5:08:98:a2:18:2c:42:40: ++ b3:f9:6f:38:27:4b:4e:80:f4:3d:81:47:e0:88:7c: ++ ea:1c:ce:b5:75:5c:51:2e:1c:2b:7f:1a:72:28:e7: ++ 00:b5:d1:74:c6:d7:e4:9f:ad:07:93:b6:53:35:35: ++ fc:37:e4:c3:f6:5d:16:be:21:73:de:92:0a:f8:a0: ++ 63:6a:bc:96:92:6a:3e:f8:bc:65:55:9b:de:f5:0d: ++ 89:26:04:fc:25:1a:a6:25:69:cb:c2:6d:ca:7c:e2: ++ 59:5f:97:ac:eb:ef:2e:c8:bc:d7:1b:59:3c:2b:cc: ++ f2:19:c8:93:6b:27:63:19:cf:fc:e9:26:f8:ca:71: ++ 9b:7f:93:fe:34:67:84:4e:99:eb:fc:b3:78:09:33: ++ 70:ba:66:a6:76:ed:1b:73:eb:1a:a5:0d:c4:22:13: ++ 20:94:56:0a:4e:2c:6c:4e:b1:fd:cf:9c:09:ba:a2: ++ 33:ed:87 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ DD:04:09:07:A2:F5:7A:7D:52:53:12:92:95:EE:38:80:25:0D:A6:59 ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ keyid:DD:04:09:07:A2:F5:7A:7D:52:53:12:92:95:EE:38:80:25:0D:A6:59 ++ ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ 20:18:11:94:29:fb:26:9d:1c:1e:1e:70:61:f1:95:72:93:71: ++ 24:ad:68:93:58:8e:32:af:1b:b3:70:03:fc:25:2b:74:85:90: ++ 3d:78:6a:f4:b9:8b:a5:97:3b:b5:18:91:bb:1e:a7:f9:40:5b: ++ 91:f9:55:99:af:1e:11:d0:5c:1d:a7:66:e3:b1:94:07:0c:32: ++ 39:a6:ea:1b:b0:79:d8:1d:9c:70:44:e3:8a:dd:c4:f9:95:1f: ++ 8a:38:43:3f:01:85:a5:47:a7:3d:46:b2:bc:e5:22:68:f7:7b: ++ 9c:d8:2c:3e:0a:21:c8:2d:33:ac:bf:c5:81:99:31:74:c1:75: ++ 71:c5:be:b1:f0:23:45:f4:9d:6b:fc:19:63:9d:a3:bc:04:c6: ++ 18:0b:25:bb:53:89:0f:b3:80:50:de:45:ee:44:7f:ab:94:78: ++ 64:98:d3:f6:28:dd:87:d8:70:65:74:fb:0e:b9:13:eb:a7:0f: ++ 61:a9:32:96:cc:de:bb:ed:63:4c:18:bb:a9:40:f7:a0:54:6e: ++ 20:88:71:75:18:ea:7a:b4:34:72:e0:23:27:77:5c:b6:90:ea: ++ 86:25:40:ab:ef:33:0f:cb:9f:82:be:a2:20:fb:f6:b5:2d:1a: ++ e6:c2:85:b1:74:0f:fb:c8:65:02:a4:52:01:47:dd:49:22:c1: ++ bf:d8:eb:6b:ac:7e:de:ec:63:33:15:b7:23:08:8f:c6:0f:8d: ++ 41:5a:dd:8e:c5:b9:8f:e5:45:3f:78:db:ba:d2:1b:40:b1:fe: ++ 71:4d:3f:e0:81:a2:ba:5e:b4:ec:15:e0:93:dd:08:1f:7e:e1: ++ 55:99:0b:21:de:93:9e:0a:fb:e6:a3:49:bd:36:30:fe:e7:77: ++ b2:a0:75:97:b5:2d:81:88:17:65:20:f7:da:90:00:9f:c9:52: ++ cc:32:ca:35:7c:f5:3d:0f:d8:2b:d7:f5:26:6c:c9:06:34:96: ++ 16:ea:70:59:1a:32:79:79:0b:b6:88:7f:0f:52:48:3d:bf:6c: ++ d8:a2:44:2e:d1:4e:b7:72:58:d3:89:13:95:fe:44:ab:f8:d7: ++ 8b:1b:6e:9c:bc:2c:a0:5b:d5:6a:00:af:5f:37:e1:d5:fa:10: ++ 0b:98:9c:86:e7:26:8f:ce:f0:ec:6e:8a:57:0b:80:e3:4e:b2: ++ c0:a0:63:61:90:ba:55:68:37:74:6a:b6:92:db:9f:a1:86:22: ++ b6:65:27:0e:ec:b6:9f:42:60:e4:67:c2:b5:da:41:0b:c4:d3: ++ 8b:61:1b:bc:fa:1f:91:2b:d7:44:07:5e:ba:29:ac:d9:c5:e9: ++ ef:53:48:5a:eb:80:f1:28:58:21:cd:b0:06:55:fb:27:3f:53: ++ 90:70:a9:04:1e:57:27:b9 ++-----BEGIN CERTIFICATE----- ++MIIF3TCCA8WgAwIBAgIIeyyb0xaAMpkwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UE ++BhMCVVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQK ++DA9TU0wgQ29ycG9yYXRpb24xMTAvBgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZp ++Y2F0aW9uIEF1dGhvcml0eSBSU0EwHhcNMTYwMjEyMTczOTM5WhcNNDEwMjEyMTcz ++OTM5WjB8MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hv ++dXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjExMC8GA1UEAwwoU1NMLmNv ++bSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IFJTQTCCAiIwDQYJKoZIhvcN ++AQEBBQADggIPADCCAgoCggIBAPkP3aMrfcvQKv7sZ4Wm5y4bunfh4/WvpOz6Sl2R ++xFdHaxh3a3by/ZPkPQ/CFp4LZsNWlJ4Xg4XOVu/yFv0AYvUiCVToZRdOQbngT0aX ++qhvIuG5iXmmxX9sqAn78bMrzQdjt0Oj8P2FI7bADFB0QDksZ4LtO7IZl/zbzXmcC ++C52GVWH9ejjt/uIZALdvoVBidXQ8oPrIJZK0bnoix/geoeOy3ZExqysdBP+lSgQ3 ++6YWkMyv94tZVNHwZpEpox7Ko07fKoZOI68GXvIz5HdkihCR0xwQ9aqkpk8zruFvh ++/l8lqjRYyMEjVJ0bmBHDOJx+PYZspQ9AhnwC9FwCTyjLrnGfDzrIM/4RJTXq/LrF ++YD3ZfBjVsqnTdXgDciLKOsMf7yzlLqn6niy2UUb9rwPW6mBo6oUWNmuF6R7As93E ++JNyAKoFBbZQ+yODJgUEAnl6/f8UImKIYLEJAs/lvOCdLToD0PYFH4Ih86hzOtXVc ++US4cK38acijnALXRdMbX5J+tB5O2UzU1/Dfkw/ZdFr4hc96SCvigY2q8lpJqPvi8 ++ZVWb3vUNiSYE/CUapiVpy8JtynziWV+XrOvvLsi81xtZPCvM8hnIk2snYxnP/Okm +++Mpxm3+T/jRnhE6Z6/yzeAkzcLpmpnbtG3PrGqUNxCITIJRWCk4sbE6x/c+cCbqi ++M+2HAgMBAAGjYzBhMB0GA1UdDgQWBBTdBAkHovV6fVJTEpKV7jiAJQ2mWTAPBgNV ++HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFN0ECQei9Xp9UlMSkpXuOIAlDaZZMA4G ++A1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAIBgRlCn7Jp0cHh5wYfGV ++cpNxJK1ok1iOMq8bs3AD/CUrdIWQPXhq9LmLpZc7tRiRux6n+UBbkflVma8eEdBc ++Hadm47GUBwwyOabqG7B52B2ccETjit3E+ZUfijhDPwGFpUenPUayvOUiaPd7nNgs ++PgohyC0zrL/FgZkxdMF1ccW+sfAjRfSda/wZY52jvATGGAslu1OJD7OAUN5F7kR/ ++q5R4ZJjT9ijdh9hwZXT7DrkT66cPYakylszeu+1jTBi7qUD3oFRuIIhxdRjqerQ0 ++cuAjJ3dctpDqhiVAq+8zD8ufgr6iIPv2tS0a5sKFsXQP+8hlAqRSAUfdSSLBv9jr ++a6x+3uxjMxW3IwiPxg+NQVrdjsW5j+VFP3jbutIbQLH+cU0/4IGiul607BXgk90I ++H37hVZkLId6Tngr75qNJvTYw/ud3sqB1l7UtgYgXZSD32pAAn8lSzDLKNXz1PQ/Y ++K9f1JmzJBjSWFupwWRoyeXkLtoh/D1JIPb9s2KJELtFOt3JY04kTlf5Eq/jXixtu ++nLwsoFvVagCvXzfh1foQC5ichucmj87w7G6KVwuA406ywKBjYZC6VWg3dGq2ktuf ++oYYitmUnDuy2n0Jg5GfCtdpBC8TTi2EbvPofkSvXRAdeuims2cXp71NIWuuA8ShY ++Ic2wBlX7Jz9TkHCpBB5XJ7k= ++-----END CERTIFICATE----- ++ ++# 62dd0be9b9f50a163ea0f8e75c053b1eca57ea55c8688f647c6881f2c8357b95 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ bb:40:1c:43:f5:5e:4f:b0 ++ Signature Algorithm: sha1WithRSAEncryption ++ Issuer: C = CH, O = SwissSign AG, CN = SwissSign Gold CA - G2 ++ Validity ++ Not Before: Oct 25 08:30:35 2006 GMT ++ Not After : Oct 25 08:30:35 2036 GMT ++ Subject: C = CH, O = SwissSign AG, CN = SwissSign Gold CA - G2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:af:e4:ee:7e:8b:24:0e:12:6e:a9:50:2d:16:44: ++ 3b:92:92:5c:ca:b8:5d:84:92:42:13:2a:bc:65:57: ++ 82:40:3e:57:24:cd:50:8b:25:2a:b7:6f:fc:ef:a2: ++ d0:c0:1f:02:24:4a:13:96:8f:23:13:e6:28:58:00: ++ a3:47:c7:06:a7:84:23:2b:bb:bd:96:2b:7f:55:cc: ++ 8b:c1:57:1f:0e:62:65:0f:dd:3d:56:8a:73:da:ae: ++ 7e:6d:ba:81:1c:7e:42:8c:20:35:d9:43:4d:84:fa: ++ 84:db:52:2c:f3:0e:27:77:0b:6b:bf:11:2f:72:78: ++ 9f:2e:d8:3e:e6:18:37:5a:2a:72:f9:da:62:90:92: ++ 95:ca:1f:9c:e9:b3:3c:2b:cb:f3:01:13:bf:5a:cf: ++ c1:b5:0a:60:bd:dd:b5:99:64:53:b8:a0:96:b3:6f: ++ e2:26:77:91:8c:e0:62:10:02:9f:34:0f:a4:d5:92: ++ 33:51:de:be:8d:ba:84:7a:60:3c:6a:db:9f:2b:ec: ++ de:de:01:3f:6e:4d:e5:50:86:cb:b4:af:ed:44:40: ++ c5:ca:5a:8c:da:d2:2b:7c:a8:ee:be:a6:e5:0a:aa: ++ 0e:a5:df:05:52:b7:55:c7:22:5d:32:6a:97:97:63: ++ 13:db:c9:db:79:36:7b:85:3a:4a:c5:52:89:f9:24: ++ e7:9d:77:a9:82:ff:55:1c:a5:71:69:2b:d1:02:24: ++ f2:b3:26:d4:6b:da:04:55:e5:c1:0a:c7:6d:30:37: ++ 90:2a:e4:9e:14:33:5e:16:17:55:c5:5b:b5:cb:34: ++ 89:92:f1:9d:26:8f:a1:07:d4:c6:b2:78:50:db:0c: ++ 0c:0b:7c:0b:8c:41:d7:b9:e9:dd:8c:88:f7:a3:4d: ++ b2:32:cc:d8:17:da:cd:b7:ce:66:9d:d4:fd:5e:ff: ++ bd:97:3e:29:75:e7:7e:a7:62:58:af:25:34:a5:41: ++ c7:3d:bc:0d:50:ca:03:03:0f:08:5a:1f:95:73:78: ++ 62:bf:af:72:14:69:0e:a5:e5:03:0e:78:8e:26:28: ++ 42:f0:07:0b:62:20:10:67:39:46:fa:a9:03:cc:04: ++ 38:7a:66:ef:20:83:b5:8c:4a:56:8e:91:00:fc:8e: ++ 5c:82:de:88:a0:c3:e2:68:6e:7d:8d:ef:3c:dd:65: ++ f4:5d:ac:51:ef:24:80:ae:aa:56:97:6f:f9:ad:7d: ++ da:61:3f:98:77:3c:a5:91:b6:1c:8c:26:da:65:a2: ++ 09:6d:c1:e2:54:e3:b9:ca:4c:4c:80:8f:77:7b:60: ++ 9a:1e:df:b6:f2:48:1e:0e:ba:4e:54:6d:98:e0:e1: ++ a2:1a:a2:77:50:cf:c4:63:92:ec:47:19:9d:eb:e6: ++ 6b:ce:c1 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 5B:25:7B:96:A4:65:51:7E:B8:39:F3:C0:78:66:5E:E8:3A:E7:F0:EE ++ X509v3 Authority Key Identifier: ++ keyid:5B:25:7B:96:A4:65:51:7E:B8:39:F3:C0:78:66:5E:E8:3A:E7:F0:EE ++ ++ X509v3 Certificate Policies: ++ Policy: 2.16.756.1.89.1.2.1.1 ++ CPS: http://repository.swisssign.com/ ++ ++ Signature Algorithm: sha1WithRSAEncryption ++ 27:ba:e3:94:7c:f1:ae:c0:de:17:e6:e5:d8:d5:f5:54:b0:83: ++ f4:bb:cd:5e:05:7b:4f:9f:75:66:af:3c:e8:56:7e:fc:72:78: ++ 38:03:d9:2b:62:1b:00:b9:f8:e9:60:cd:cc:ce:51:8a:c7:50: ++ 31:6e:e1:4a:7e:18:2f:69:59:b6:3d:64:81:2b:e3:83:84:e6: ++ 22:87:8e:7d:e0:ee:02:99:61:b8:1e:f4:b8:2b:88:12:16:84: ++ c2:31:93:38:96:31:a6:b9:3b:53:3f:c3:24:93:56:5b:69:92: ++ ec:c5:c1:bb:38:00:e3:ec:17:a9:b8:dc:c7:7c:01:83:9f:32: ++ 47:ba:52:22:34:1d:32:7a:09:56:a7:7c:25:36:a9:3d:4b:da: ++ c0:82:6f:0a:bb:12:c8:87:4b:27:11:f9:1e:2d:c7:93:3f:9e: ++ db:5f:26:6b:52:d9:2e:8a:f1:14:c6:44:8d:15:a9:b7:bf:bd: ++ de:a6:1a:ee:ae:2d:fb:48:77:17:fe:bb:ec:af:18:f5:2a:51: ++ f0:39:84:97:95:6c:6e:1b:c3:2b:c4:74:60:79:25:b0:0a:27: ++ df:df:5e:d2:39:cf:45:7d:42:4b:df:b3:2c:1e:c5:c6:5d:ca: ++ 55:3a:a0:9c:69:9a:8f:da:ef:b2:b0:3c:9f:87:6c:12:2b:65: ++ 70:15:52:31:1a:24:cf:6f:31:23:50:1f:8c:4f:8f:23:c3:74: ++ 41:63:1c:55:a8:14:dd:3e:e0:51:50:cf:f1:1b:30:56:0e:92: ++ b0:82:85:d8:83:cb:22:64:bc:2d:b8:25:d5:54:a2:b8:06:ea: ++ ad:92:a4:24:a0:c1:86:b5:4a:13:6a:47:cf:2e:0b:56:95:54: ++ cb:ce:9a:db:6a:b4:a6:b2:db:41:08:86:27:77:f7:6a:a0:42: ++ 6c:0b:38:ce:d7:75:50:32:92:c2:df:2b:30:22:48:d0:d5:41: ++ 38:25:5d:a4:e9:5d:9f:c6:94:75:d0:45:fd:30:97:43:8f:90: ++ ab:0a:c7:86:73:60:4a:69:2d:de:a5:78:d7:06:da:6a:9e:4b: ++ 3e:77:3a:20:13:22:01:d0:bf:68:9e:63:60:6b:35:4d:0b:6d: ++ ba:a1:3d:c0:93:e0:7f:23:b3:55:ad:72:25:4e:46:f9:d2:16: ++ ef:b0:64:c1:01:9e:e9:ca:a0:6a:98:0e:cf:d8:60:f2:2f:49: ++ b8:e4:42:e1:38:35:16:f4:c8:6e:4f:f7:81:56:e8:ba:a3:be: ++ 23:af:ae:fd:6f:03:e0:02:3b:30:76:fa:1b:6d:41:cf:01:b1: ++ e9:b8:c9:66:f4:db:26:f3:3a:a4:74:f2:49:24:5b:c9:b0:d0: ++ 57:c1:fa:3e:7a:e1:97:c9 ++-----BEGIN CERTIFICATE----- ++MIIFujCCA6KgAwIBAgIJALtAHEP1Xk+wMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNV ++BAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxHzAdBgNVBAMTFlN3aXNzU2ln ++biBHb2xkIENBIC0gRzIwHhcNMDYxMDI1MDgzMDM1WhcNMzYxMDI1MDgzMDM1WjBF ++MQswCQYDVQQGEwJDSDEVMBMGA1UEChMMU3dpc3NTaWduIEFHMR8wHQYDVQQDExZT ++d2lzc1NpZ24gR29sZCBDQSAtIEcyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC ++CgKCAgEAr+TufoskDhJuqVAtFkQ7kpJcyrhdhJJCEyq8ZVeCQD5XJM1QiyUqt2/8 ++76LQwB8CJEoTlo8jE+YoWACjR8cGp4QjK7u9lit/VcyLwVcfDmJlD909Vopz2q5+ ++bbqBHH5CjCA12UNNhPqE21Is8w4ndwtrvxEvcnifLtg+5hg3Wipy+dpikJKVyh+c ++6bM8K8vzARO/Ws/BtQpgvd21mWRTuKCWs2/iJneRjOBiEAKfNA+k1ZIzUd6+jbqE ++emA8atufK+ze3gE/bk3lUIbLtK/tREDFylqM2tIrfKjuvqblCqoOpd8FUrdVxyJd ++MmqXl2MT28nbeTZ7hTpKxVKJ+STnnXepgv9VHKVxaSvRAiTysybUa9oEVeXBCsdt ++MDeQKuSeFDNeFhdVxVu1yzSJkvGdJo+hB9TGsnhQ2wwMC3wLjEHXuendjIj3o02y ++MszYF9rNt85mndT9Xv+9lz4pded+p2JYryU0pUHHPbwNUMoDAw8IWh+Vc3hiv69y ++FGkOpeUDDniOJihC8AcLYiAQZzlG+qkDzAQ4embvIIO1jEpWjpEA/I5cgt6IoMPi ++aG59je883WX0XaxR7ySArqpWl2/5rX3aYT+YdzylkbYcjCbaZaIJbcHiVOO5ykxM ++gI93e2CaHt+28kgeDrpOVG2Y4OGiGqJ3UM/EY5LsRxmd6+ZrzsECAwEAAaOBrDCB ++qTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUWyV7 ++lqRlUX64OfPAeGZe6Drn8O4wHwYDVR0jBBgwFoAUWyV7lqRlUX64OfPAeGZe6Drn ++8O4wRgYDVR0gBD8wPTA7BglghXQBWQECAQEwLjAsBggrBgEFBQcCARYgaHR0cDov ++L3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS8wDQYJKoZIhvcNAQEFBQADggIBACe6 ++45R88a7A3hfm5djV9VSwg/S7zV4Fe0+fdWavPOhWfvxyeDgD2StiGwC5+OlgzczO ++UYrHUDFu4Up+GC9pWbY9ZIEr44OE5iKHjn3g7gKZYbge9LgriBIWhMIxkziWMaa5 ++O1M/wySTVltpkuzFwbs4AOPsF6m43Md8AYOfMke6UiI0HTJ6CVanfCU2qT1L2sCC ++bwq7EsiHSycR+R4tx5M/nttfJmtS2S6K8RTGRI0Vqbe/vd6mGu6uLftIdxf+u+yv ++GPUqUfA5hJeVbG4bwyvEdGB5JbAKJ9/fXtI5z0V9QkvfsywexcZdylU6oJxpmo/a ++77KwPJ+HbBIrZXAVUjEaJM9vMSNQH4xPjyPDdEFjHFWoFN0+4FFQz/EbMFYOkrCC ++hdiDyyJkvC24JdVUorgG6q2SpCSgwYa1ShNqR88uC1aVVMvOmttqtKay20EIhid3 ++92qgQmwLOM7XdVAyksLfKzAiSNDVQTglXaTpXZ/GlHXQRf0wl0OPkKsKx4ZzYEpp ++Ld6leNcG2mqeSz53OiATIgHQv2ieY2BrNU0LbbqhPcCT4H8js1WtciVORvnSFu+w ++ZMEBnunKoGqYDs/YYPIvSbjkQuE4NRb0yG5P94FW6LqjviOvrv1vA+ACOzB2+htt ++Qc8Bsem4yWb02ybzOqR08kkkW8mw0FfB+j564ZfJ ++-----END CERTIFICATE----- ++ ++# 59769007f7685d0fcd50872f9f95d5755a5b2b457d81f3692b610a98672f0e1b ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 3262 (0xcbe) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = TW, O = TAIWAN-CA, OU = Root CA, CN = TWCA Global Root CA ++ Validity ++ Not Before: Jun 27 06:28:33 2012 GMT ++ Not After : Dec 31 15:59:59 2030 GMT ++ Subject: C = TW, O = TAIWAN-CA, OU = Root CA, CN = TWCA Global Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:b0:05:db:c8:eb:8c:c4:6e:8a:21:ef:8e:4d:9c: ++ 71:0a:1f:52:70:ed:6d:82:9c:97:c5:d7:4c:4e:45: ++ 49:cb:40:42:b5:12:34:6c:19:c2:74:a4:31:5f:85: ++ 02:97:ec:43:33:0a:53:d2:9c:8c:8e:b7:b8:79:db: ++ 2b:d5:6a:f2:8e:66:c4:ee:2b:01:07:92:d4:b3:d0: ++ 02:df:50:f6:55:af:66:0e:cb:e0:47:60:2f:2b:32: ++ 39:35:52:3a:28:83:f8:7b:16:c6:18:b8:62:d6:47: ++ 25:91:ce:f0:19:12:4d:ad:63:f5:d3:3f:75:5f:29: ++ f0:a1:30:1c:2a:a0:98:a6:15:bd:ee:fd:19:36:f0: ++ e2:91:43:8f:fa:ca:d6:10:27:49:4c:ef:dd:c1:f1: ++ 85:70:9b:ca:ea:a8:5a:43:fc:6d:86:6f:73:e9:37: ++ 45:a9:f0:36:c7:cc:88:75:1e:bb:6c:06:ff:9b:6b: ++ 3e:17:ec:61:aa:71:7c:c6:1d:a2:f7:49:e9:15:b5: ++ 3c:d6:a1:61:f5:11:f7:05:6f:1d:fd:11:be:d0:30: ++ 07:c2:29:b0:09:4e:26:dc:e3:a2:a8:91:6a:1f:c2: ++ 91:45:88:5c:e5:98:b8:71:a5:15:19:c9:7c:75:11: ++ cc:70:74:4f:2d:9b:1d:91:44:fd:56:28:a0:fe:bb: ++ 86:6a:c8:fa:5c:0b:58:dc:c6:4b:76:c8:ab:22:d9: ++ 73:0f:a5:f4:5a:02:89:3f:4f:9e:22:82:ee:a2:74: ++ 53:2a:3d:53:27:69:1d:6c:8e:32:2c:64:00:26:63: ++ 61:36:4e:a3:46:b7:3f:7d:b3:2d:ac:6d:90:a2:95: ++ a2:ce:cf:da:82:e7:07:34:19:96:e9:b8:21:aa:29: ++ 7e:a6:38:be:8e:29:4a:21:66:79:1f:b3:c3:b5:09: ++ 67:de:d6:d4:07:46:f3:2a:da:e6:22:37:60:cb:81: ++ b6:0f:a0:0f:e9:c8:95:7f:bf:55:91:05:7a:cf:3d: ++ 15:c0:6f:de:09:94:01:83:d7:34:1b:cc:40:a5:f0: ++ b8:9b:67:d5:98:91:3b:a7:84:78:95:26:a4:5a:08: ++ f8:2b:74:b4:00:04:3c:df:b8:14:8e:e8:df:a9:8d: ++ 6c:67:92:33:1d:c0:b7:d2:ec:92:c8:be:09:bf:2c: ++ 29:05:6f:02:6b:9e:ef:bc:bf:2a:bc:5b:c0:50:8f: ++ 41:70:71:87:b2:4d:b7:04:a9:84:a3:32:af:ae:ee: ++ 6b:17:8b:b2:b1:fe:6c:e1:90:8c:88:a8:97:48:ce: ++ c8:4d:cb:f3:06:cf:5f:6a:0a:42:b1:1e:1e:77:2f: ++ 8e:a0:e6:92:0e:06:fc:05:22:d2:26:e1:31:51:7d: ++ 32:dc:0f ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: sha256WithRSAEncryption ++ 5f:34:81:76:ef:96:1d:d5:e5:b5:d9:02:63:84:16:c1:ae:a0: ++ 70:51:a7:f7:4c:47:35:c8:0b:d7:28:3d:89:71:d9:aa:33:41: ++ ea:14:1b:6c:21:00:c0:6c:42:19:7e:9f:69:5b:20:42:df:a2: ++ d2:da:c4:7c:97:4b:8d:b0:e8:ac:c8:ee:a5:69:04:99:0a:92: ++ a6:ab:27:2e:1a:4d:81:bf:84:d4:70:1e:ad:47:fe:fd:4a:9d: ++ 33:e0:f2:b9:c4:45:08:21:0a:da:69:69:73:72:0d:be:34:fe: ++ 94:8b:ad:c3:1e:35:d7:a2:83:ef:e5:38:c7:a5:85:1f:ab:cf: ++ 34:ec:3f:28:fe:0c:f1:57:86:4e:c9:55:f7:1c:d4:d8:a5:7d: ++ 06:7a:6f:d5:df:10:df:81:4e:21:65:b1:b6:e1:17:79:95:45: ++ 06:ce:5f:cc:dc:46:89:63:68:44:8d:93:f4:64:70:a0:3d:9d: ++ 28:05:c3:39:70:b8:62:7b:20:fd:e4:db:e9:08:a1:b8:9e:3d: ++ 09:c7:4f:fb:2c:f8:93:76:41:de:52:e0:e1:57:d2:9d:03:bc: ++ 77:9e:fe:9e:29:5e:f7:c1:51:60:1f:de:da:0b:b2:2d:75:b7: ++ 43:48:93:e7:f6:79:c6:84:5d:80:59:60:94:fc:78:98:8f:3c: ++ 93:51:ed:40:90:07:df:64:63:24:cb:4e:71:05:a1:d7:94:1a: ++ 88:32:f1:22:74:22:ae:a5:a6:d8:12:69:4c:60:a3:02:ee:2b: ++ ec:d4:63:92:0b:5e:be:2f:76:6b:a3:b6:26:bc:8f:03:d8:0a: ++ f2:4c:64:46:bd:39:62:e5:96:eb:34:63:11:28:cc:95:f1:ad: ++ ef:ef:dc:80:58:48:e9:4b:b8:ea:65:ac:e9:fc:80:b5:b5:c8: ++ 45:f9:ac:c1:9f:d9:b9:ea:62:88:8e:c4:f1:4b:83:12:ad:e6: ++ 8b:84:d6:9e:c2:eb:83:18:9f:6a:bb:1b:24:60:33:70:cc:ec: ++ f7:32:f3:5c:d9:79:7d:ef:9e:a4:fe:c9:23:c3:24:ee:15:92: ++ b1:3d:91:4f:26:86:bd:66:73:24:13:ea:a4:ae:63:c1:ad:7d: ++ 84:03:3c:10:78:86:1b:79:e3:c4:f3:f2:04:95:20:ae:23:82: ++ c4:b3:3a:00:62:bf:e6:36:24:e1:57:ba:c7:1e:90:75:d5:5f: ++ 3f:95:61:2b:c1:3b:cd:e5:b3:68:61:d0:46:26:a9:21:52:69: ++ 2d:eb:2e:c7:eb:77:ce:a6:3a:b5:03:33:4f:76:d1:e7:5c:54: ++ 01:5d:cb:78:f4:c9:0c:bf:cf:12:8e:17:2d:23:68:94:e7:ab: ++ fe:a9:b2:2b:06:d0:04:cd ++-----BEGIN CERTIFICATE----- ++MIIFQTCCAymgAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwUTELMAkGA1UEBhMCVFcx ++EjAQBgNVBAoTCVRBSVdBTi1DQTEQMA4GA1UECxMHUm9vdCBDQTEcMBoGA1UEAxMT ++VFdDQSBHbG9iYWwgUm9vdCBDQTAeFw0xMjA2MjcwNjI4MzNaFw0zMDEyMzExNTU5 ++NTlaMFExCzAJBgNVBAYTAlRXMRIwEAYDVQQKEwlUQUlXQU4tQ0ExEDAOBgNVBAsT ++B1Jvb3QgQ0ExHDAaBgNVBAMTE1RXQ0EgR2xvYmFsIFJvb3QgQ0EwggIiMA0GCSqG ++SIb3DQEBAQUAA4ICDwAwggIKAoICAQCwBdvI64zEbooh745NnHEKH1Jw7W2CnJfF ++10xORUnLQEK1EjRsGcJ0pDFfhQKX7EMzClPSnIyOt7h52yvVavKOZsTuKwEHktSz ++0ALfUPZVr2YOy+BHYC8rMjk1Ujoog/h7FsYYuGLWRyWRzvAZEk2tY/XTP3VfKfCh ++MBwqoJimFb3u/Rk28OKRQ4/6ytYQJ0lM793B8YVwm8rqqFpD/G2Gb3PpN0Wp8DbH ++zIh1HrtsBv+baz4X7GGqcXzGHaL3SekVtTzWoWH1EfcFbx39Eb7QMAfCKbAJTibc ++46KokWofwpFFiFzlmLhxpRUZyXx1EcxwdE8tmx2RRP1WKKD+u4ZqyPpcC1jcxkt2 ++yKsi2XMPpfRaAok/T54igu6idFMqPVMnaR1sjjIsZAAmY2E2TqNGtz99sy2sbZCi ++laLOz9qC5wc0GZbpuCGqKX6mOL6OKUohZnkfs8O1CWfe1tQHRvMq2uYiN2DLgbYP ++oA/pyJV/v1WRBXrPPRXAb94JlAGD1zQbzECl8LibZ9WYkTunhHiVJqRaCPgrdLQA ++BDzfuBSO6N+pjWxnkjMdwLfS7JLIvgm/LCkFbwJrnu+8vyq8W8BQj0FwcYeyTbcE ++qYSjMq+u7msXi7Kx/mzhkIyIqJdIzshNy/MGz19qCkKxHh53L46g5pIOBvwFItIm ++4TFRfTLcDwIDAQABoyMwITAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB ++/zANBgkqhkiG9w0BAQsFAAOCAgEAXzSBdu+WHdXltdkCY4QWwa6gcFGn90xHNcgL ++1yg9iXHZqjNB6hQbbCEAwGxCGX6faVsgQt+i0trEfJdLjbDorMjupWkEmQqSpqsn ++LhpNgb+E1HAerUf+/UqdM+DyucRFCCEK2mlpc3INvjT+lIutwx4116KD7+U4x6WF ++H6vPNOw/KP4M8VeGTslV9xzU2KV9Bnpv1d8Q34FOIWWxtuEXeZVFBs5fzNxGiWNo ++RI2T9GRwoD2dKAXDOXC4Ynsg/eTb6QihuJ49CcdP+yz4k3ZB3lLg4VfSnQO8d57+ ++nile98FRYB/e2guyLXW3Q0iT5/Z5xoRdgFlglPx4mI88k1HtQJAH32RjJMtOcQWh ++15QaiDLxInQirqWm2BJpTGCjAu4r7NRjkgtevi92a6O2JryPA9gK8kxkRr05YuWW ++6zRjESjMlfGt7+/cgFhI6Uu46mWs6fyAtbXIRfmswZ/ZuepiiI7E8UuDEq3mi4TW ++nsLrgxifarsbJGAzcMzs9zLzXNl5fe+epP7JI8Mk7hWSsT2RTyaGvWZzJBPqpK5j ++wa19hAM8EHiGG3njxPPyBJUgriOCxLM6AGK/5jYk4Ve6xx6QddVfP5VhK8E7zeWz ++aGHQRiapIVJpLesux+t3zqY6tQMzT3bR51xUAV3LePTJDL/PEo4XLSNolOer/qmy ++KwbQBM0= ++-----END CERTIFICATE----- ++ ++# dd6936fe21f8f077c123a1a521c12224f72255b73e03a7260693e8a24b0fa389 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 95:be:16:a0:f7:2e:46:f1:7b:39:82:72:fa:8b:cd:96 ++ Signature Algorithm: sha1WithRSAEncryption ++ Issuer: O = TeliaSonera, CN = TeliaSonera Root CA v1 ++ Validity ++ Not Before: Oct 18 12:00:50 2007 GMT ++ Not After : Oct 18 12:00:50 2032 GMT ++ Subject: O = TeliaSonera, CN = TeliaSonera Root CA v1 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:c2:be:eb:27:f0:21:a3:f3:69:26:55:7e:9d:c5: ++ 55:16:91:5c:fd:ef:21:bf:53:80:7a:2d:d2:91:8c: ++ 63:31:f0:ec:24:f0:c3:a5:d2:72:7c:10:6d:f4:37: ++ b7:e5:e6:7c:79:ea:8c:b5:82:8b:ae:48:b6:ac:00: ++ dc:65:75:ec:2a:4d:5f:c1:87:f5:20:65:2b:81:a8: ++ 47:3e:89:23:95:30:16:90:7f:e8:57:07:48:e7:19: ++ ae:bf:45:67:b1:37:1b:06:2a:fe:de:f9:ac:7d:83: ++ fb:5e:ba:e4:8f:97:67:be:4b:8e:8d:64:07:57:38: ++ 55:69:34:36:3d:13:48:ef:4f:e2:d3:66:1e:a4:cf: ++ 1a:b7:5e:36:33:d4:b4:06:bd:18:01:fd:77:84:50: ++ 00:45:f5:8c:5d:e8:23:bc:7e:fe:35:e1:ed:50:7b: ++ a9:30:8d:19:d3:09:8e:68:67:5d:bf:3c:97:18:53: ++ bb:29:62:c5:ca:5e:72:c1:c7:96:d4:db:2d:a0:b4: ++ 1f:69:03:ec:ea:e2:50:f1:0c:3c:f0:ac:f3:53:2d: ++ f0:1c:f5:ed:6c:39:39:73:80:16:c8:52:b0:23:cd: ++ e0:3e:dc:dd:3c:47:a0:bb:35:8a:e2:98:68:8b:be: ++ e5:bf:72:ee:d2:fa:a5:ed:12:ed:fc:98:18:a9:26: ++ 76:dc:28:4b:10:20:1c:d3:7f:16:77:2d:ed:6f:80: ++ f7:49:bb:53:05:bb:5d:68:c7:d4:c8:75:16:3f:89: ++ 5a:8b:f7:17:47:d4:4c:f1:d2:89:79:3e:4d:3d:98: ++ a8:61:de:3a:1e:d2:f8:5e:03:e0:c1:c9:1c:8c:d3: ++ 8d:4d:d3:95:36:b3:37:5f:63:63:9b:33:14:f0:2d: ++ 26:6b:53:7c:89:8c:32:c2:6e:ec:3d:21:00:39:c9: ++ a1:68:e2:50:83:2e:b0:3a:2b:f3:36:a0:ac:2f:e4: ++ 6f:61:c2:51:09:39:3e:8b:53:b9:bb:67:da:dc:53: ++ b9:76:59:36:9d:43:e5:20:e0:3d:32:60:85:22:51: ++ b7:c7:33:bb:dd:15:2f:a4:78:a6:07:7b:81:46:36: ++ 04:86:dd:79:35:c7:95:2c:3b:b0:a3:17:35:e5:73: ++ 1f:b4:5c:59:ef:da:ea:10:65:7b:7a:d0:7f:9f:b3: ++ b4:2a:37:3b:70:8b:9b:5b:b9:2b:b7:ec:b2:51:12: ++ 97:53:29:5a:d4:f0:12:10:dc:4f:02:bb:12:92:2f: ++ 62:d4:3f:69:43:7c:0d:d6:fc:58:75:01:88:9d:58: ++ 16:4b:de:ba:90:ff:47:01:89:06:6a:f6:5f:b2:90: ++ 6a:b3:02:a6:02:88:bf:b3:47:7e:2a:d9:d5:fa:68: ++ 78:35:4d ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ F0:8F:59:38:00:B3:F5:8F:9A:96:0C:D5:EB:FA:7B:AA:17:E8:13:12 ++ Signature Algorithm: sha1WithRSAEncryption ++ be:e4:5c:62:4e:24:f4:0c:08:ff:f0:d3:0c:68:e4:93:49:22: ++ 3f:44:27:6f:bb:6d:de:83:66:ce:a8:cc:0d:fc:f5:9a:06:e5: ++ 77:14:91:eb:9d:41:7b:99:2a:84:e5:ff:fc:21:c1:5d:f0:e4: ++ 1f:57:b7:75:a9:a1:5f:02:26:ff:d7:c7:f7:4e:de:4f:f8:f7: ++ 1c:46:c0:7a:4f:40:2c:22:35:f0:19:b1:d0:6b:67:2c:b0:a8: ++ e0:c0:40:37:35:f6:84:5c:5c:e3:af:42:78:fe:a7:c9:0d:50: ++ ea:0d:84:76:f6:51:ef:83:53:c6:7a:ff:0e:56:49:2e:8f:7a: ++ d6:0c:e6:27:54:e3:4d:0a:60:72:62:cd:91:07:d6:a5:bf:c8: ++ 99:6b:ed:c4:19:e6:ab:4c:11:38:c5:6f:31:e2:6e:49:c8:3f: ++ 76:80:26:03:26:29:e0:36:f6:f6:20:53:e3:17:70:34:17:9d: ++ 63:68:1e:6b:ec:c3:4d:86:b8:13:30:2f:5d:46:0d:47:43:d5: ++ 1b:aa:59:0e:b9:5c:8d:06:48:ad:74:87:5f:c7:fc:31:54:41: ++ 13:e2:c7:21:0e:9e:e0:1e:0d:e1:c0:7b:43:85:90:c5:8a:58: ++ c6:65:0a:78:57:f2:c6:23:0f:01:d9:20:4b:de:0f:fb:92:85: ++ 75:2a:5c:73:8d:6d:7b:25:91:ca:ee:45:ae:06:4b:00:cc:d3: ++ b1:59:50:da:3a:88:3b:29:43:46:5e:97:2b:54:ce:53:6f:8d: ++ 4a:e7:96:fa:bf:71:0e:42:8b:7c:fd:28:a0:d0:48:ca:da:c4: ++ 81:4c:bb:a2:73:93:26:c8:eb:0c:d6:26:88:b6:c0:24:cf:bb: ++ bd:5b:eb:75:7d:e9:08:8e:86:33:2c:79:77:09:69:a5:89:fc: ++ b3:70:90:87:76:8f:d3:22:bb:42:ce:bd:73:0b:20:26:2a:d0: ++ 9b:3d:70:1e:24:6c:cd:87:76:a9:17:96:b7:cf:0d:92:fb:8e: ++ 18:a9:98:49:d1:9e:fe:60:44:72:21:b9:19:ed:c2:f5:31:f1: ++ 39:48:88:90:24:75:54:16:ad:ce:f4:f8:69:14:64:39:fb:a3: ++ b8:ba:70:40:c7:27:1c:bf:c4:56:53:fa:63:65:d0:f3:1c:0e: ++ 16:f5:6b:86:58:4d:18:d4:e4:0d:8e:a5:9d:5b:91:dc:76:24: ++ 50:3f:c6:2a:fb:d9:b7:9c:b5:d6:e6:d0:d9:e8:19:8b:15:71: ++ 48:ad:b7:ea:d8:59:88:d4:90:bf:16:b3:d9:e9:ac:59:61:54: ++ c8:1c:ba:ca:c1:ca:e1:b9:20:4c:8f:3a:93:89:a5:a0:cc:bf: ++ d3:f6:75:a4:75:96:6d:56 ++-----BEGIN CERTIFICATE----- ++MIIFODCCAyCgAwIBAgIRAJW+FqD3LkbxezmCcvqLzZYwDQYJKoZIhvcNAQEFBQAw ++NzEUMBIGA1UECgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJv ++b3QgQ0EgdjEwHhcNMDcxMDE4MTIwMDUwWhcNMzIxMDE4MTIwMDUwWjA3MRQwEgYD ++VQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UEAwwWVGVsaWFTb25lcmEgUm9vdCBDQSB2 ++MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMK+6yfwIaPzaSZVfp3F ++VRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65ItqwA3GV1 ++7CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+X ++Z75Ljo1kB1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+ ++/jXh7VB7qTCNGdMJjmhnXb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs ++81Mt8Bz17Ww5OXOAFshSsCPN4D7c3TxHoLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkm ++dtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+JWov3F0fUTPHSiXk+TT2YqGHe ++Oh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0hADnJoWjiUIMu ++sDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4 ++pgd7gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fs ++slESl1MpWtTwEhDcTwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQ ++arMCpgKIv7NHfirZ1fpoeDVNAgMBAAGjPzA9MA8GA1UdEwEB/wQFMAMBAf8wCwYD ++VR0PBAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1j5qWDNXr+nuqF+gTEjANBgkqhkiG ++9w0BAQUFAAOCAgEAvuRcYk4k9AwI//DTDGjkk0kiP0Qnb7tt3oNmzqjMDfz1mgbl ++dxSR651Be5kqhOX//CHBXfDkH1e3damhXwIm/9fH907eT/j3HEbAek9ALCI18Bmx ++0GtnLLCo4MBANzX2hFxc469CeP6nyQ1Q6g2EdvZR74NTxnr/DlZJLo961gzmJ1Tj ++TQpgcmLNkQfWpb/ImWvtxBnmq0wROMVvMeJuScg/doAmAyYp4Db29iBT4xdwNBed ++Y2gea+zDTYa4EzAvXUYNR0PVG6pZDrlcjQZIrXSHX8f8MVRBE+LHIQ6e4B4N4cB7 ++Q4WQxYpYxmUKeFfyxiMPAdkgS94P+5KFdSpcc41teyWRyu5FrgZLAMzTsVlQ2jqI ++OylDRl6XK1TOU2+NSueW+r9xDkKLfP0ooNBIytrEgUy7onOTJsjrDNYmiLbAJM+7 ++vVvrdX3pCI6GMyx5dwlppYn8s3CQh3aP0yK7Qs69cwsgJirQmz1wHiRszYd2qReW ++t88NkvuOGKmYSdGe/mBEciG5Ge3C9THxOUiIkCR1VBatzvT4aRRkOfujuLpwQMcn ++HL/EVlP6Y2XQ8xwOFvVrhlhNGNTkDY6lnVuR3HYkUD/GKvvZt5y11ubQ2egZixVx ++SK236thZiNSQvxaz2emsWWFUyBy6ysHK4bkgTI86k4mloMy/0/Z1pHWWbVY= ++-----END CERTIFICATE----- ++ ++# 6b328085625318aa50d173c98d8bda09d57e27413d114cf787a0f5d06c030cf6 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 78:8f:27:5c:81:12:52:20:a5:04:d0:2d:dd:ba:73:f4 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = PL, O = Asseco Data Systems S.A., OU = Certum Certification Authority, CN = Certum EC-384 CA ++ Validity ++ Not Before: Mar 26 07:24:54 2018 GMT ++ Not After : Mar 26 07:24:54 2043 GMT ++ Subject: C = PL, O = Asseco Data Systems S.A., OU = Certum Certification Authority, CN = Certum EC-384 CA ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:c4:28:8e:ab:18:5b:6a:be:6e:64:37:63:e4:cd: ++ ec:ab:3a:f7:cc:a1:b8:0e:82:49:d7:86:29:9f:a1: ++ 94:f2:e3:60:78:98:81:78:06:4d:f2:ec:9a:0e:57: ++ 60:83:9f:b4:e6:17:2f:1a:b3:5d:02:5b:89:23:3c: ++ c2:11:05:2a:a7:88:13:18:f3:50:84:d7:bd:34:2c: ++ 27:89:55:ff:ce:4c:e7:df:a6:1f:28:c4:f0:54:c3: ++ b9:7c:b7:53:ad:eb:c2 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 8D:06:66:74:24:76:3A:F3:89:F7:BC:D6:BD:47:7D:2F:BC:10:5F:4B ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:65:02:30:03:55:2d:a6:e6:18:c4:7c:ef:c9:50:6e:c1:27: ++ 0f:9c:87:af:6e:d5:1b:08:18:bd:92:29:c1:ef:94:91:78:d2: ++ 3a:1c:55:89:62:e5:1b:09:1e:ba:64:6b:f1:76:b4:d4:02:31: ++ 00:b4:42:84:99:ff:ab:e7:9e:fb:91:97:27:5d:dc:b0:5b:30: ++ 71:ce:5e:38:1a:6a:d9:25:e7:ea:f7:61:92:56:f8:ea:da:36: ++ c2:87:65:96:2e:72:25:2f:7f:df:c3:13:c9 ++-----BEGIN CERTIFICATE----- ++MIICZTCCAeugAwIBAgIQeI8nXIESUiClBNAt3bpz9DAKBggqhkjOPQQDAzB0MQsw ++CQYDVQQGEwJQTDEhMB8GA1UEChMYQXNzZWNvIERhdGEgU3lzdGVtcyBTLkEuMScw ++JQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxGTAXBgNVBAMT ++EENlcnR1bSBFQy0zODQgQ0EwHhcNMTgwMzI2MDcyNDU0WhcNNDMwMzI2MDcyNDU0 ++WjB0MQswCQYDVQQGEwJQTDEhMB8GA1UEChMYQXNzZWNvIERhdGEgU3lzdGVtcyBT ++LkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxGTAX ++BgNVBAMTEENlcnR1bSBFQy0zODQgQ0EwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATE ++KI6rGFtqvm5kN2PkzeyrOvfMobgOgknXhimfoZTy42B4mIF4Bk3y7JoOV2CDn7Tm ++Fy8as10CW4kjPMIRBSqniBMY81CE1700LCeJVf/OTOffph8oxPBUw7l8t1Ot68Kj ++QjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFI0GZnQkdjrzife81r1HfS+8 ++EF9LMA4GA1UdDwEB/wQEAwIBBjAKBggqhkjOPQQDAwNoADBlAjADVS2m5hjEfO/J ++UG7BJw+ch69u1RsIGL2SKcHvlJF40jocVYli5RsJHrpka/F2tNQCMQC0QoSZ/6vn ++nvuRlydd3LBbMHHOXjgaatkl5+r3YZJW+OraNsKHZZYuciUvf9/DE8k= ++-----END CERTIFICATE----- ++ ++# fe7696573855773e37a95e7ad4d9cc96c30157c15d31765ba9b15704e1ae78fd ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 1e:bf:59:50:b8:c9:80:37:4c:06:f7:eb:55:4f:b5:ed ++ Signature Algorithm: sha512WithRSAEncryption ++ Issuer: C = PL, O = Asseco Data Systems S.A., OU = Certum Certification Authority, CN = Certum Trusted Root CA ++ Validity ++ Not Before: Mar 16 12:10:13 2018 GMT ++ Not After : Mar 16 12:10:13 2043 GMT ++ Subject: C = PL, O = Asseco Data Systems S.A., OU = Certum Certification Authority, CN = Certum Trusted Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:d1:2d:8e:bb:b7:36:ea:6d:37:91:9f:4e:93:a7: ++ 05:e4:29:03:25:ce:1c:82:f7:7c:99:9f:41:06:cd: ++ ed:a3:ba:c0:db:09:2c:c1:7c:df:29:7e:4b:65:2f: ++ 93:a7:d4:01:6b:03:28:18:a3:d8:9d:05:c1:2a:d8: ++ 45:f1:91:de:df:3b:d0:80:02:8c:cf:38:0f:ea:a7: ++ 5c:78:11:a4:c1:c8:85:5c:25:d3:d3:b2:e7:25:cf: ++ 11:54:97:ab:35:c0:1e:76:1c:ef:00:53:9f:39:dc: ++ 14:a5:2c:22:25:b3:72:72:fc:8d:b3:e5:3e:08:1e: ++ 14:2a:37:0b:88:3c:ca:b0:f4:c8:c2:a1:ae:bc:c1: ++ be:29:67:55:e2:fc:ad:59:5c:fe:bd:57:2c:b0:90: ++ 8d:c2:ed:37:b6:7c:99:88:b5:d5:03:9a:3d:15:0d: ++ 3d:3a:a8:a8:45:f0:95:4e:25:59:1d:cd:98:69:bb: ++ d3:cc:32:c9:8d:ef:81:fe:ad:7d:89:bb:ba:60:13: ++ ca:65:95:67:a0:f3:19:f6:03:56:d4:6a:d3:27:e2: ++ a1:ad:83:f0:4a:12:22:77:1c:05:73:e2:19:71:42: ++ c0:ec:75:46:9a:90:58:e0:6a:8e:2b:a5:46:30:04: ++ 8e:19:b2:17:e3:be:a9:ba:7f:56:f1:24:03:d7:b2: ++ 21:28:76:0e:36:30:4c:79:d5:41:9a:9a:a8:b8:35: ++ ba:0c:3a:f2:44:1b:20:88:f7:c5:25:d7:3d:c6:e3: ++ 3e:43:dd:87:fe:c4:ea:f5:53:3e:4c:65:ff:3b:4a: ++ cb:78:5a:6b:17:5f:0d:c7:c3:4f:4e:9a:2a:a2:ed: ++ 57:4d:22:e2:46:9a:3f:0f:91:34:24:7d:55:e3:8c: ++ 95:37:d3:1a:f0:09:2b:2c:d2:c9:8d:b4:0d:00:ab: ++ 67:29:28:d8:01:f5:19:04:b6:1d:be:76:fe:72:5c: ++ c4:85:ca:d2:80:41:df:05:a8:a3:d5:84:90:4f:0b: ++ f3:e0:3f:9b:19:d2:37:89:3f:f2:7b:52:1c:8c:f6: ++ e1:f7:3c:07:97:8c:0e:a2:59:81:0c:b2:90:3d:d3: ++ e3:59:46:ed:0f:a9:a7:de:80:6b:5a:aa:07:b6:19: ++ cb:bc:57:f3:97:21:7a:0c:b1:2b:74:3e:eb:da:a7: ++ 67:2d:4c:c4:98:9e:36:09:76:66:66:fc:1a:3f:ea: ++ 48:54:1c:be:30:bd:80:50:bf:7c:b5:ce:00:f6:0c: ++ 61:d9:e7:24:03:e0:e3:01:81:0e:bd:d8:85:34:88: ++ bd:b2:36:a8:7b:5c:08:e5:44:80:8c:6f:f8:2f:d5: ++ 21:ca:1d:1c:d0:fb:c4:b5:87:d1:3a:4e:c7:76:b5: ++ 35:48:b5 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 8C:FB:1C:75:BC:02:D3:9F:4E:2E:48:D9:F9:60:54:AA:C4:B3:4F:FA ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Signature Algorithm: sha512WithRSAEncryption ++ 48:a2:d5:00:0b:2e:d0:3f:bc:1c:d5:b5:54:49:1e:5a:6b:f4: ++ e4:f2:e0:40:37:e0:cc:14:7b:b9:c9:fa:35:b5:75:17:93:6a: ++ 05:69:85:9c:cd:4f:19:78:5b:19:81:f3:63:3e:c3:ce:5b:8f: ++ f5:2f:5e:01:76:13:3f:2c:00:b9:cd:96:52:39:49:6d:04:4e: ++ c5:e9:0f:86:0d:e1:fa:b3:5f:82:12:f1:3a:ce:66:06:24:34: ++ 2b:e8:cc:ca:e7:69:dc:87:9d:c2:34:d7:79:d1:d3:77:b8:aa: ++ 59:58:fe:9d:26:fa:38:86:3e:9d:8a:87:64:57:e5:17:3a:e2: ++ f9:8d:b9:e3:33:78:c1:90:d8:b8:dd:b7:83:51:e4:c4:cc:23: ++ d5:06:7c:e6:51:d3:cd:34:31:c0:f6:46:bb:0b:ad:fc:3d:10: ++ 05:2a:3b:4a:91:25:ee:8c:d4:84:87:80:2a:bc:09:8c:aa:3a: ++ 13:5f:e8:34:79:50:c1:10:19:f9:d3:28:1e:d4:d1:51:30:29: ++ b3:ae:90:67:d6:1f:0a:63:b1:c5:a9:c6:42:31:63:17:94:ef: ++ 69:cb:2f:fa:8c:14:7d:c4:43:18:89:d9:f0:32:40:e6:80:e2: ++ 46:5f:e5:e3:c1:00:59:a8:f9:e8:20:bc:89:2c:0e:47:34:0b: ++ ea:57:c2:53:36:fc:a7:d4:af:31:cd:fe:02:e5:75:fa:b9:27: ++ 09:f9:f3:f5:3b:ca:7d:9f:a9:22:cb:88:c9:aa:d1:47:3d:36: ++ 77:a8:59:64:6b:27:cf:ef:27:c1:e3:24:b5:86:f7:ae:7e:32: ++ 4d:b0:79:68:d1:39:e8:90:58:c3:83:bc:0f:2c:d6:97:eb:ce: ++ 0c:e1:20:c7:da:b7:3e:c3:3f:bf:2f:dc:34:a4:fb:2b:21:cd: ++ 67:8f:4b:f4:e3:ea:d4:3f:e7:4f:ba:b9:a5:93:45:1c:66:1f: ++ 21:fa:64:5e:6f:e0:76:94:32:cb:75:f5:6e:e5:f6:8f:c7:b8: ++ a4:cc:a8:96:7d:64:fb:24:5a:4a:03:6c:6b:38:c6:e8:03:43: ++ 9a:f7:57:b9:b3:29:69:93:38:f4:03:f2:bb:fb:82:6b:07:20: ++ d1:52:1f:9a:64:02:7b:98:66:db:5c:4d:5a:0f:d0:84:95:a0: ++ 3c:14:43:06:ca:ca:db:b8:41:36:da:6a:44:67:87:af:af:e3: ++ 45:11:15:69:08:b2:be:16:39:97:24:6f:12:45:d1:67:5d:09: ++ a8:c9:15:da:fa:d2:a6:5f:13:61:1f:bf:85:ac:b4:ad:ad:05: ++ 94:08:83:1e:75:17:d3:71:3b:93:50:23:59:a0:ed:3c:91:54: ++ 9d:76:00:c5:c3:b8:38:db ++-----BEGIN CERTIFICATE----- ++MIIFwDCCA6igAwIBAgIQHr9ZULjJgDdMBvfrVU+17TANBgkqhkiG9w0BAQ0FADB6 ++MQswCQYDVQQGEwJQTDEhMB8GA1UEChMYQXNzZWNvIERhdGEgU3lzdGVtcyBTLkEu ++MScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxHzAdBgNV ++BAMTFkNlcnR1bSBUcnVzdGVkIFJvb3QgQ0EwHhcNMTgwMzE2MTIxMDEzWhcNNDMw ++MzE2MTIxMDEzWjB6MQswCQYDVQQGEwJQTDEhMB8GA1UEChMYQXNzZWNvIERhdGEg ++U3lzdGVtcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRo ++b3JpdHkxHzAdBgNVBAMTFkNlcnR1bSBUcnVzdGVkIFJvb3QgQ0EwggIiMA0GCSqG ++SIb3DQEBAQUAA4ICDwAwggIKAoICAQDRLY67tzbqbTeRn06TpwXkKQMlzhyC93yZ ++n0EGze2jusDbCSzBfN8pfktlL5On1AFrAygYo9idBcEq2EXxkd7fO9CAAozPOA/q ++p1x4EaTByIVcJdPTsuclzxFUl6s1wB52HO8AU5853BSlLCIls3Jy/I2z5T4IHhQq ++NwuIPMqw9MjCoa68wb4pZ1Xi/K1ZXP69VyywkI3C7Te2fJmItdUDmj0VDT06qKhF ++8JVOJVkdzZhpu9PMMsmN74H+rX2Ju7pgE8pllWeg8xn2A1bUatMn4qGtg/BKEiJ3 ++HAVz4hlxQsDsdUaakFjgao4rpUYwBI4Zshfjvqm6f1bxJAPXsiEodg42MEx51UGa ++mqi4NboMOvJEGyCI98Ul1z3G4z5D3Yf+xOr1Uz5MZf87Sst4WmsXXw3Hw09Omiqi ++7VdNIuJGmj8PkTQkfVXjjJU30xrwCSss0smNtA0Aq2cpKNgB9RkEth2+dv5yXMSF ++ytKAQd8FqKPVhJBPC/PgP5sZ0jeJP/J7UhyM9uH3PAeXjA6iWYEMspA90+NZRu0P ++qafegGtaqge2Gcu8V/OXIXoMsSt0Puvap2ctTMSYnjYJdmZm/Bo/6khUHL4wvYBQ ++v3y1zgD2DGHZ5yQD4OMBgQ692IU0iL2yNqh7XAjlRICMb/gv1SHKHRzQ+8S1h9E6 ++Tsd2tTVItQIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSM+xx1 ++vALTn04uSNn5YFSqxLNP+jAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQENBQAD ++ggIBAEii1QALLtA/vBzVtVRJHlpr9OTy4EA34MwUe7nJ+jW1dReTagVphZzNTxl4 ++WxmB82M+w85bj/UvXgF2Ez8sALnNllI5SW0ETsXpD4YN4fqzX4IS8TrOZgYkNCvo ++zMrnadyHncI013nR03e4qllY/p0m+jiGPp2Kh2RX5Rc64vmNueMzeMGQ2Ljdt4NR ++5MTMI9UGfOZR0800McD2RrsLrfw9EAUqO0qRJe6M1ISHgCq8CYyqOhNf6DR5UMEQ ++GfnTKB7U0VEwKbOukGfWHwpjscWpxkIxYxeU72nLL/qMFH3EQxiJ2fAyQOaA4kZf ++5ePBAFmo+eggvIksDkc0C+pXwlM2/KfUrzHN/gLldfq5Jwn58/U7yn2fqSLLiMmq ++0Uc9NneoWWRrJ8/vJ8HjJLWG965+Mk2weWjROeiQWMODvA8s1pfrzgzhIMfatz7D ++P78v3DSk+yshzWePS/Tj6tQ/50+6uaWTRRxmHyH6ZF5v4HaUMst19W7l9o/HuKTM ++qJZ9ZPskWkoDbGs4xugDQ5r3V7mzKWmTOPQD8rv7gmsHINFSH5pkAnuYZttcTVoP ++0ISVoDwUQwbKytu4QTbaakRnh6+v40URFWkIsr4WOZckbxJF0WddCajJFdr60qZf ++E2Efv4WstK2tBZQIgx51F9NxO5NQI1mg7TyRVJ12AMXDuDjb ++-----END CERTIFICATE----- ++ ++# e59aaa816009c22bff5b25bad37df306f049797c1f81d85ab089e657bd8f0044 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 7c:c9:8f:2b:84:d7:df:ea:0f:c9:65:9a:d3:4b:4d:96 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = DE, O = D-Trust GmbH, CN = D-TRUST BR Root CA 1 2020 ++ Validity ++ Not Before: Feb 11 09:45:00 2020 GMT ++ Not After : Feb 11 09:44:59 2035 GMT ++ Subject: C = DE, O = D-Trust GmbH, CN = D-TRUST BR Root CA 1 2020 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:c6:cb:c7:28:d1:fb:84:f5:9a:ef:42:14:20:e1: ++ 43:6b:6e:75:ad:fc:2b:03:84:d4:76:93:25:d7:59: ++ 3b:41:65:6b:1e:e6:34:2a:bb:74:f6:12:ce:e8:6d: ++ e7:ab:e4:3c:4e:3f:44:08:8b:cd:16:71:cb:bf:92: ++ 99:f4:a4:d7:3c:50:54:52:90:85:83:78:94:67:67: ++ a3:1c:09:19:3d:75:34:85:de:ed:60:7d:c7:0c:b4: ++ 41:52:b9:6e:e5:ee:42 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 73:91:10:AB:FF:55:B3:5A:7C:09:25:D5:B2:BA:08:A0:6B:AB:1F:6D ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 CRL Distribution Points: ++ ++ Full Name: ++ URI:http://crl.d-trust.net/crl/d-trust_br_root_ca_1_2020.crl ++ ++ Full Name: ++ URI:ldap://directory.d-trust.net/CN=D-TRUST%20BR%20Root%20CA%201%202020,O=D-Trust%20GmbH,C=DE?certificaterevocationlist ++ ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:66:02:31:00:94:90:2d:13:fa:e1:63:f8:61:63:e8:ad:85: ++ 78:54:91:9c:b8:93:38:3e:1a:41:da:40:16:53:42:08:ca:2f: ++ 8e:f1:3e:81:56:c0:aa:d8:ed:18:c4:b0:ae:f4:3e:fa:26:02: ++ 31:00:f3:28:e2:c6:db:2b:99:fb:b7:51:b8:24:a3:a4:94:7a: ++ 1a:3f:e6:36:e2:03:57:33:8a:30:cb:82:c7:d6:14:11:d5:75: ++ 63:5b:14:95:9c:1f:01:cf:d8:d5:72:a7:0f:3b ++-----BEGIN CERTIFICATE----- ++MIIC2zCCAmCgAwIBAgIQfMmPK4TX3+oPyWWa00tNljAKBggqhkjOPQQDAzBIMQsw ++CQYDVQQGEwJERTEVMBMGA1UEChMMRC1UcnVzdCBHbWJIMSIwIAYDVQQDExlELVRS ++VVNUIEJSIFJvb3QgQ0EgMSAyMDIwMB4XDTIwMDIxMTA5NDUwMFoXDTM1MDIxMTA5 ++NDQ1OVowSDELMAkGA1UEBhMCREUxFTATBgNVBAoTDEQtVHJ1c3QgR21iSDEiMCAG ++A1UEAxMZRC1UUlVTVCBCUiBSb290IENBIDEgMjAyMDB2MBAGByqGSM49AgEGBSuB ++BAAiA2IABMbLxyjR+4T1mu9CFCDhQ2tuda38KwOE1HaTJddZO0Flax7mNCq7dPYS ++zuht56vkPE4/RAiLzRZxy7+SmfSk1zxQVFKQhYN4lGdnoxwJGT11NIXe7WB9xwy0 ++QVK5buXuQqOCAQ0wggEJMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFHOREKv/ ++VbNafAkl1bK6CKBrqx9tMA4GA1UdDwEB/wQEAwIBBjCBxgYDVR0fBIG+MIG7MD6g ++PKA6hjhodHRwOi8vY3JsLmQtdHJ1c3QubmV0L2NybC9kLXRydXN0X2JyX3Jvb3Rf ++Y2FfMV8yMDIwLmNybDB5oHegdYZzbGRhcDovL2RpcmVjdG9yeS5kLXRydXN0Lm5l ++dC9DTj1ELVRSVVNUJTIwQlIlMjBSb290JTIwQ0ElMjAxJTIwMjAyMCxPPUQtVHJ1 ++c3QlMjBHbWJILEM9REU/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdDAKBggqhkjO ++PQQDAwNpADBmAjEAlJAtE/rhY/hhY+ithXhUkZy4kzg+GkHaQBZTQgjKL47xPoFW ++wKrY7RjEsK70PvomAjEA8yjixtsrmfu3Ubgko6SUeho/5jbiA1czijDLgsfWFBHV ++dWNbFJWcHwHP2NVypw87 ++-----END CERTIFICATE----- ++ ++# 08170d1aa36453901a2f959245e347db0c8d37abaabc56b81aa100dc958970db ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 5f:02:41:d7:7a:87:7c:4c:03:a3:ac:96:8d:fb:ff:d0 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = DE, O = D-Trust GmbH, CN = D-TRUST EV Root CA 1 2020 ++ Validity ++ Not Before: Feb 11 10:00:00 2020 GMT ++ Not After : Feb 11 09:59:59 2035 GMT ++ Subject: C = DE, O = D-Trust GmbH, CN = D-TRUST EV Root CA 1 2020 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:f1:0b:dd:86:43:20:19:df:97:85:e8:22:4a:9b: ++ cf:9d:98:bf:b4:05:26:c9:cb:e3:a6:d2:8f:c5:9e: ++ 78:7b:31:89:a9:89:ad:27:3c:65:10:82:fc:df:c3: ++ 9d:4e:f0:33:23:c4:d2:32:f5:1c:b0:df:33:17:5d: ++ c5:f0:b1:8a:f9:ef:b9:b7:14:ca:29:4a:c2:0f:a9: ++ 7f:75:65:49:2a:30:67:f4:64:f7:d6:1a:77:da:c3: ++ c2:97:61:42:7b:49:ad ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 7F:10:01:16:37:3A:A4:28:E4:50:F8:A4:F7:EC:6B:32:B6:FE:E9:8B ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 CRL Distribution Points: ++ ++ Full Name: ++ URI:http://crl.d-trust.net/crl/d-trust_ev_root_ca_1_2020.crl ++ ++ Full Name: ++ URI:ldap://directory.d-trust.net/CN=D-TRUST%20EV%20Root%20CA%201%202020,O=D-Trust%20GmbH,C=DE?certificaterevocationlist ++ ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:66:02:31:00:ca:3c:c6:2a:75:c2:5e:75:62:39:36:00:60: ++ 5a:8b:c1:93:99:cc:d9:db:41:3b:3b:87:99:17:3b:d5:cc:4f: ++ ca:22:f7:a0:80:cb:f9:b4:b1:1b:56:f5:72:d2:fc:19:d1:02: ++ 31:00:91:f7:30:93:3f:10:46:2b:71:a4:d0:3b:44:9b:c0:29: ++ 02:05:b2:41:77:51:f3:79:5a:9e:8e:14:a0:4e:42:d2:5b:81: ++ f3:34:6a:03:e7:22:38:50:5b:ed:19:4f:43:16 ++-----BEGIN CERTIFICATE----- ++MIIC2zCCAmCgAwIBAgIQXwJB13qHfEwDo6yWjfv/0DAKBggqhkjOPQQDAzBIMQsw ++CQYDVQQGEwJERTEVMBMGA1UEChMMRC1UcnVzdCBHbWJIMSIwIAYDVQQDExlELVRS ++VVNUIEVWIFJvb3QgQ0EgMSAyMDIwMB4XDTIwMDIxMTEwMDAwMFoXDTM1MDIxMTA5 ++NTk1OVowSDELMAkGA1UEBhMCREUxFTATBgNVBAoTDEQtVHJ1c3QgR21iSDEiMCAG ++A1UEAxMZRC1UUlVTVCBFViBSb290IENBIDEgMjAyMDB2MBAGByqGSM49AgEGBSuB ++BAAiA2IABPEL3YZDIBnfl4XoIkqbz52Yv7QFJsnL46bSj8WeeHsxiamJrSc8ZRCC ++/N/DnU7wMyPE0jL1HLDfMxddxfCxivnvubcUyilKwg+pf3VlSSowZ/Rk99Yad9rD ++wpdhQntJraOCAQ0wggEJMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFH8QARY3 ++OqQo5FD4pPfsazK2/umLMA4GA1UdDwEB/wQEAwIBBjCBxgYDVR0fBIG+MIG7MD6g ++PKA6hjhodHRwOi8vY3JsLmQtdHJ1c3QubmV0L2NybC9kLXRydXN0X2V2X3Jvb3Rf ++Y2FfMV8yMDIwLmNybDB5oHegdYZzbGRhcDovL2RpcmVjdG9yeS5kLXRydXN0Lm5l ++dC9DTj1ELVRSVVNUJTIwRVYlMjBSb290JTIwQ0ElMjAxJTIwMjAyMCxPPUQtVHJ1 ++c3QlMjBHbWJILEM9REU/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdDAKBggqhkjO ++PQQDAwNpADBmAjEAyjzGKnXCXnViOTYAYFqLwZOZzNnbQTs7h5kXO9XMT8oi96CA ++y/m0sRtW9XLS/BnRAjEAkfcwkz8QRitxpNA7RJvAKQIFskF3UfN5Wp6OFKBOQtJb ++gfM0agPnIjhQW+0ZT0MW ++-----END CERTIFICATE----- ++ ++# cbb9c44d84b8043e1050ea31a69f514955d7bfd2e2c6b49301019ad61d9f5058 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 11:d2:bb:ba:33:6e:d4:bc:e6:24:68:c5:0d:84:1d:98:e8:43 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = BE, O = GlobalSign nv-sa, CN = GlobalSign Root E46 ++ Validity ++ Not Before: Mar 20 00:00:00 2019 GMT ++ Not After : Mar 20 00:00:00 2046 GMT ++ Subject: C = BE, O = GlobalSign nv-sa, CN = GlobalSign Root E46 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:9c:0e:b1:cf:b7:e8:9e:52:77:75:34:fa:a5:46: ++ a7:ad:32:19:32:b4:07:a9:27:ca:94:bb:0c:d2:0a: ++ 10:c7:da:89:b0:97:0c:70:13:09:01:8e:d8:ea:47: ++ ea:be:b2:80:2b:cd:fc:28:0d:db:ac:bc:a4:86:37: ++ ed:70:08:00:75:ea:93:0b:7b:2e:52:9c:23:68:23: ++ 06:43:ec:92:2f:53:84:db:fb:47:14:07:e8:5f:94: ++ 67:5d:c9:7a:81:3c:20 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 31:0A:90:8F:B6:C6:9D:D2:44:4B:80:B5:A2:E6:1F:B1:12:4F:1B:95 ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:65:02:31:00:df:54:90:ed:9b:ef:8b:94:02:93:17:82:99: ++ be:b3:9e:2c:f6:0b:91:8c:9f:4a:14:b1:f6:64:bc:bb:68:51: ++ 13:0c:03:f7:15:8b:84:60:b9:8b:ff:52:8e:e7:8c:bc:1c:02: ++ 30:3c:f9:11:d4:8c:4e:c0:c1:61:c2:15:4c:aa:ab:1d:0b:31: ++ 5f:3b:1c:e2:00:97:44:31:e6:fe:73:96:2f:da:96:d3:fe:08: ++ 07:b3:34:89:bc:05:9f:f7:1e:86:ee:8b:70 ++-----BEGIN CERTIFICATE----- ++MIICCzCCAZGgAwIBAgISEdK7ujNu1LzmJGjFDYQdmOhDMAoGCCqGSM49BAMDMEYx ++CzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRwwGgYDVQQD ++ExNHbG9iYWxTaWduIFJvb3QgRTQ2MB4XDTE5MDMyMDAwMDAwMFoXDTQ2MDMyMDAw ++MDAwMFowRjELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2Ex ++HDAaBgNVBAMTE0dsb2JhbFNpZ24gUm9vdCBFNDYwdjAQBgcqhkjOPQIBBgUrgQQA ++IgNiAAScDrHPt+ieUnd1NPqlRqetMhkytAepJ8qUuwzSChDH2omwlwxwEwkBjtjq ++R+q+soArzfwoDdusvKSGN+1wCAB16pMLey5SnCNoIwZD7JIvU4Tb+0cUB+hflGdd ++yXqBPCCjQjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud ++DgQWBBQxCpCPtsad0kRLgLWi5h+xEk8blTAKBggqhkjOPQQDAwNoADBlAjEA31SQ ++7Zvvi5QCkxeCmb6zniz2C5GMn0oUsfZkvLtoURMMA/cVi4RguYv/Uo7njLwcAjA8 +++RHUjE7AwWHCFUyqqx0LMV87HOIAl0Qx5v5zli/altP+CAezNIm8BZ/3Hobui3A= ++-----END CERTIFICATE----- ++ ++# 4fa3126d8d3a11d1c4855a4f807cbad6cf919d3a5a88b03bea2c6372d93c40c9 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 11:d2:bb:b9:d7:23:18:9e:40:5f:0a:9d:2d:d0:df:25:67:d1 ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C = BE, O = GlobalSign nv-sa, CN = GlobalSign Root R46 ++ Validity ++ Not Before: Mar 20 00:00:00 2019 GMT ++ Not After : Mar 20 00:00:00 2046 GMT ++ Subject: C = BE, O = GlobalSign nv-sa, CN = GlobalSign Root R46 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:ac:ac:74:32:e8:b3:65:e5:ba:ed:43:26:1d:a6: ++ 89:0d:45:ba:29:88:b2:a4:1d:63:dd:d3:c1:2c:09: ++ 57:89:39:a1:55:e9:67:34:77:0c:6e:e4:55:1d:52: ++ 25:d2:13:6b:5e:e1:1d:a9:b7:7d:89:32:5f:0d:9e: ++ 9f:2c:7a:63:60:40:1f:a6:b0:b6:78:8f:99:54:96: ++ 08:58:ae:e4:06:bc:62:05:02:16:bf:af:a8:23:03: ++ b6:94:0f:bc:6e:6c:c2:cb:d5:a6:bb:0c:e9:f6:c1: ++ 02:fb:21:de:66:dd:17:ab:74:42:ef:f0:74:2f:25: ++ f4:ea:6b:55:5b:90:db:9d:df:5e:87:0a:40:fb:ad: ++ 19:6b:fb:f7:ca:60:88:de:da:c1:8f:d6:ae:d5:7f: ++ d4:3c:83:ee:d7:16:4c:83:45:33:6b:27:d0:86:d0: ++ 1c:2d:6b:f3:ab:7d:f1:85:a9:f5:28:d2:ad:ef:f3: ++ 84:4b:1c:87:fc:13:a3:3a:72:a2:5a:11:2b:d6:27: ++ 71:27:ed:81:2d:6d:66:81:92:87:b4:1b:58:7a:cc: ++ 3f:0a:fa:46:4f:4d:78:5c:f8:2b:48:e3:04:84:cb: ++ 5d:f6:b4:6a:b3:65:fc:42:9e:51:26:23:20:cb:3d: ++ 14:f9:81:ed:65:16:00:4f:1a:64:97:66:08:cf:8c: ++ 7b:e3:2b:c0:9d:f9:14:f2:1b:f1:56:6a:16:bf:2c: ++ 85:85:cd:78:38:9a:eb:42:6a:02:34:18:83:17:4e: ++ 94:56:f8:b6:82:b5:f3:96:dd:3d:f3:be:7f:20:77: ++ 3e:7b:19:23:6b:2c:d4:72:73:43:57:7d:e0:f8:d7: ++ 69:4f:17:36:04:f9:c0:90:60:37:45:de:e6:0c:d8: ++ 74:8d:ae:9c:a2:6d:74:5d:42:be:06:f5:d9:64:6e: ++ 02:10:ac:89:b0:4c:3b:07:4d:40:7e:24:c5:8a:98: ++ 82:79:8e:a4:a7:82:20:8d:23:fa:27:71:c9:df:c6: ++ 41:74:a0:4d:f6:91:16:dc:46:8c:5f:29:63:31:59: ++ 71:0c:d8:6f:c2:b6:32:7d:fb:e6:5d:53:a6:7e:15: ++ fc:bb:75:7c:5d:ec:f8:f6:17:1c:ec:c7:6b:19:cb: ++ f3:7b:f0:2b:07:a5:d9:6c:79:54:76:6c:9d:1c:a6: ++ 6e:0e:e9:79:0c:a8:23:6a:a3:df:1b:30:31:9f:b1: ++ 54:7b:fe:6a:cb:66:aa:dc:65:d0:a2:9e:4a:9a:07: ++ 21:6b:81:8f:db:c4:59:fa:de:22:c0:04:9c:e3:aa: ++ 5b:36:93:e8:3d:bd:7a:a1:9d:0b:76:b1:0b:c7:9d: ++ fd:cf:98:a8:06:c2:f8:2a:a3:a1:83:a0:b7:25:72: ++ a5:02:e3 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 03:5C:AB:73:81:87:A8:CC:B0:A6:D5:94:E2:36:96:49:FF:05:99:2C ++ Signature Algorithm: sha384WithRSAEncryption ++ 7c:78:ec:f6:02:2c:bb:5b:7e:92:2b:5d:39:dc:be:d8:1d:a2: ++ 42:33:4d:f9:ef:a4:2a:3b:44:69:1e:ac:d9:45:a3:4e:3c:a7: ++ d8:24:51:b2:54:1c:93:4e:c4:ef:7b:93:85:60:26:ea:09:48: ++ e0:f5:bb:c7:e9:68:d2:bb:6a:31:71:cc:79:ae:11:a8:f0:99: ++ fd:e5:1f:bc:2f:a8:cc:57:eb:76:c4:21:a6:47:53:55:4d:68: ++ bf:05:a4:ee:d7:26:ab:62:da:43:37:4b:e2:c6:b5:e5:b2:83: ++ 19:3a:c7:d3:db:4d:9e:08:7a:f3:ee:cf:3e:62:fb:ac:e8:60: ++ cc:d1:c7:a1:5c:83:45:c4:45:cc:f3:17:6b:14:c9:04:02:3e: ++ d2:24:a6:79:e9:1e:ce:a2:e7:c1:59:15:9f:1d:e2:4b:9a:3e: ++ 9f:76:08:2d:6b:d8:ba:57:14:da:83:ea:fe:8c:55:e9:d0:4e: ++ a9:cc:77:31:b1:44:11:7a:5c:b1:3e:d3:14:45:15:18:62:24: ++ 13:d2:cb:4d:ce:5c:83:c1:36:f2:10:b5:0e:88:6d:b8:e1:56: ++ 9f:89:de:96:66:39:47:64:2c:6e:4d:ae:62:7b:bf:60:74:19: ++ b8:56:ac:92:ac:16:32:ed:ad:68:55:fe:98:ba:d3:34:de:f4: ++ c9:61:c3:0e:86:f6:4b:84:60:ee:0d:7b:b5:32:58:79:91:55: ++ 2c:81:43:b3:74:1f:7a:aa:25:9e:1d:d7:a1:8b:b9:cd:42:2e: ++ 04:a4:66:83:4d:89:35:b6:6c:a8:36:4a:79:21:78:22:d0:42: ++ bc:d1:40:31:90:a1:be:04:cf:ca:67:ed:f5:f0:80:d3:60:c9: ++ 83:2a:22:05:d0:07:3b:52:bf:0c:9e:aa:2b:f9:bb:e6:1f:8f: ++ 25:ba:85:8d:17:1e:02:fe:5d:50:04:57:cf:fe:2d:bc:ef:5c: ++ c0:1a:ab:b6:9f:24:c6:df:73:68:48:90:2c:14:f4:3f:52:1a: ++ e4:d2:cb:14:c3:61:69:cf:e2:f9:18:c5:ba:33:9f:14:a3:04: ++ 5d:b9:71:f7:b5:94:d8:f6:33:c1:5a:c1:34:8b:7c:9b:dd:93: ++ 3a:e7:13:a2:70:61:9f:af:8f:eb:d8:c5:75:f8:33:66:d4:74: ++ 67:3a:37:77:9c:e7:dd:a4:0f:76:43:66:8a:43:f2:9f:fb:0c: ++ 42:78:63:d1:e2:0f:6f:7b:d4:a1:3d:74:97:85:b7:48:39:41: ++ d6:20:fc:d0:3a:b3:fa:e8:6f:c4:8a:ba:71:37:be:8b:97:b1: ++ 78:31:4f:b3:e7:b6:03:13:ce:54:9d:ae:25:59:cc:7f:35:5f: ++ 08:f7:40:45:31:78:2a:7a ++-----BEGIN CERTIFICATE----- ++MIIFWjCCA0KgAwIBAgISEdK7udcjGJ5AXwqdLdDfJWfRMA0GCSqGSIb3DQEBDAUA ++MEYxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRwwGgYD ++VQQDExNHbG9iYWxTaWduIFJvb3QgUjQ2MB4XDTE5MDMyMDAwMDAwMFoXDTQ2MDMy ++MDAwMDAwMFowRjELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYt ++c2ExHDAaBgNVBAMTE0dsb2JhbFNpZ24gUm9vdCBSNDYwggIiMA0GCSqGSIb3DQEB ++AQUAA4ICDwAwggIKAoICAQCsrHQy6LNl5brtQyYdpokNRbopiLKkHWPd08EsCVeJ ++OaFV6Wc0dwxu5FUdUiXSE2te4R2pt32JMl8Nnp8semNgQB+msLZ4j5lUlghYruQG ++vGIFAha/r6gjA7aUD7xubMLL1aa7DOn2wQL7Id5m3RerdELv8HQvJfTqa1VbkNud ++316HCkD7rRlr+/fKYIje2sGP1q7Vf9Q8g+7XFkyDRTNrJ9CG0Bwta/OrffGFqfUo ++0q3v84RLHIf8E6M6cqJaESvWJ3En7YEtbWaBkoe0G1h6zD8K+kZPTXhc+CtI4wSE ++y132tGqzZfxCnlEmIyDLPRT5ge1lFgBPGmSXZgjPjHvjK8Cd+RTyG/FWaha/LIWF ++zXg4mutCagI0GIMXTpRW+LaCtfOW3T3zvn8gdz57GSNrLNRyc0NXfeD412lPFzYE +++cCQYDdF3uYM2HSNrpyibXRdQr4G9dlkbgIQrImwTDsHTUB+JMWKmIJ5jqSngiCN ++I/onccnfxkF0oE32kRbcRoxfKWMxWXEM2G/CtjJ9++ZdU6Z+Ffy7dXxd7Pj2Fxzs ++x2sZy/N78CsHpdlseVR2bJ0cpm4O6XkMqCNqo98bMDGfsVR7/mrLZqrcZdCinkqa ++ByFrgY/bxFn63iLABJzjqls2k+g9vXqhnQt2sQvHnf3PmKgGwvgqo6GDoLclcqUC ++4wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV ++HQ4EFgQUA1yrc4GHqMywptWU4jaWSf8FmSwwDQYJKoZIhvcNAQEMBQADggIBAHx4 ++7PYCLLtbfpIrXTncvtgdokIzTfnvpCo7RGkerNlFo048p9gkUbJUHJNOxO97k4Vg ++JuoJSOD1u8fpaNK7ajFxzHmuEajwmf3lH7wvqMxX63bEIaZHU1VNaL8FpO7XJqti ++2kM3S+LGteWygxk6x9PbTZ4IevPuzz5i+6zoYMzRx6Fcg0XERczzF2sUyQQCPtIk ++pnnpHs6i58FZFZ8d4kuaPp92CC1r2LpXFNqD6v6MVenQTqnMdzGxRBF6XLE+0xRF ++FRhiJBPSy03OXIPBNvIQtQ6IbbjhVp+J3pZmOUdkLG5NrmJ7v2B0GbhWrJKsFjLt ++rWhV/pi60zTe9Mlhww6G9kuEYO4Ne7UyWHmRVSyBQ7N0H3qqJZ4d16GLuc1CLgSk ++ZoNNiTW2bKg2SnkheCLQQrzRQDGQob4Ez8pn7fXwgNNgyYMqIgXQBztSvwyeqiv5 ++u+YfjyW6hY0XHgL+XVAEV8/+LbzvXMAaq7afJMbfc2hIkCwU9D9SGuTSyxTDYWnP ++4vkYxboznxSjBF25cfe1lNj2M8FawTSLfJvdkzrnE6JwYZ+vj+vYxXX4M2bUdGc6 ++N3ec592kD3ZDZopD8p/7DEJ4Y9HiD2971KE9dJeFt0g5QdYg/NA6s/rob8SKunE3 ++vouXsXgxT7PntgMTzlSdriVZzH81Xwj3QEUxeCp6 ++-----END CERTIFICATE----- ++ ++# 3f99cc474acfce4dfed58794665e478d1547739f2e780f1bb4ca9b133097d401 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 67:74:9d:8d:77:d8:3b:6a:db:22:f4:ff:59:e2:bf:ce ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = GR, O = Hellenic Academic and Research Institutions CA, CN = HARICA TLS ECC Root CA 2021 ++ Validity ++ Not Before: Feb 19 11:01:10 2021 GMT ++ Not After : Feb 13 11:01:09 2045 GMT ++ Subject: C = GR, O = Hellenic Academic and Research Institutions CA, CN = HARICA TLS ECC Root CA 2021 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:38:08:fe:b1:a0:96:d2:7a:ac:af:49:3a:d0:c0: ++ e0:c3:3b:28:aa:f1:72:6d:65:00:47:88:84:fc:9a: ++ 26:6b:aa:4b:ba:6c:04:0a:88:5e:17:f2:55:87:fc: ++ 30:b0:34:e2:34:58:57:1a:84:53:e9:30:d9:a9:f2: ++ 96:74:c3:51:1f:58:49:31:cc:98:4e:60:11:87:75: ++ d3:72:94:90:4f:9b:10:25:2a:a8:78:2d:be:90:41: ++ 58:90:15:72:a7:a1:b7 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ C9:1B:53:81:12:FE:04:D5:16:D1:AA:BC:9A:6F:B7:A0:95:19:6E:CA ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:64:02:30:11:de:ae:f8:dc:4e:88:b0:a9:f0:22:ad:c2:51: ++ 40:ef:60:71:2d:ee:8f:02:c4:5d:03:70:49:a4:92:ea:c5:14: ++ 88:70:a6:d3:0d:b0:aa:ca:2c:40:9c:fb:e9:82:6e:9a:02:30: ++ 2b:47:9a:07:c6:d1:c2:81:7c:ca:0b:96:18:41:1b:a3:f4:30: ++ 09:9e:b5:23:28:0d:9f:14:b6:3c:53:a2:4c:06:69:7d:fa:6c: ++ 91:c6:2a:49:45:e6:ec:b7:13:e1:3a:6c ++-----BEGIN CERTIFICATE----- ++MIICVDCCAdugAwIBAgIQZ3SdjXfYO2rbIvT/WeK/zjAKBggqhkjOPQQDAzBsMQsw ++CQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2Vh ++cmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBFQ0MgUm9v ++dCBDQSAyMDIxMB4XDTIxMDIxOTExMDExMFoXDTQ1MDIxMzExMDEwOVowbDELMAkG ++A1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJj ++aCBJbnN0aXR1dGlvbnMgQ0ExJDAiBgNVBAMMG0hBUklDQSBUTFMgRUNDIFJvb3Qg ++Q0EgMjAyMTB2MBAGByqGSM49AgEGBSuBBAAiA2IABDgI/rGgltJ6rK9JOtDA4MM7 ++KKrxcm1lAEeIhPyaJmuqS7psBAqIXhfyVYf8MLA04jRYVxqEU+kw2anylnTDUR9Y ++STHMmE5gEYd103KUkE+bECUqqHgtvpBBWJAVcqeht6NCMEAwDwYDVR0TAQH/BAUw ++AwEB/zAdBgNVHQ4EFgQUyRtTgRL+BNUW0aq8mm+3oJUZbsowDgYDVR0PAQH/BAQD ++AgGGMAoGCCqGSM49BAMDA2cAMGQCMBHervjcToiwqfAircJRQO9gcS3ujwLEXQNw ++SaSS6sUUiHCm0w2wqsosQJz76YJumgIwK0eaB8bRwoF8yguWGEEbo/QwCZ61IygN ++nxS2PFOiTAZpffpskcYqSUXm7LcT4Tps ++-----END CERTIFICATE----- ++ ++# d95d0e8eda79525bf9beb11b14d2100d3294985f0c62d9fabd9cd999eccb7b1d ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 39:ca:93:1c:ef:43:f3:c6:8e:93:c7:f4:64:89:38:7e ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = GR, O = Hellenic Academic and Research Institutions CA, CN = HARICA TLS RSA Root CA 2021 ++ Validity ++ Not Before: Feb 19 10:55:38 2021 GMT ++ Not After : Feb 13 10:55:37 2045 GMT ++ Subject: C = GR, O = Hellenic Academic and Research Institutions CA, CN = HARICA TLS RSA Root CA 2021 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:8b:c2:e7:af:65:9b:05:67:96:c9:0d:24:b9:d0: ++ 0e:64:fc:ce:e2:24:18:2c:84:7f:77:51:cb:04:11: ++ 36:b8:5e:ed:69:71:a7:9e:e4:25:09:97:67:c1:47: ++ c2:cf:91:16:36:62:3d:38:04:e1:51:82:ff:ac:d2: ++ b4:69:dd:2e:ec:11:a3:45:ee:6b:6b:3b:4c:bf:8c: ++ 8d:a4:1e:9d:11:b9:e9:38:f9:7a:0e:0c:98:e2:23: ++ 1d:d1:4e:63:d4:e7:b8:41:44:fb:6b:af:6b:da:1f: ++ d3:c5:91:88:5b:a4:89:92:d1:81:e6:8c:39:58:a0: ++ d6:69:43:a9:ad:98:52:58:6e:db:0a:fb:6b:cf:68: ++ fa:e3:a4:5e:3a:45:73:98:07:ea:5f:02:72:de:0c: ++ a5:b3:9f:ae:a9:1d:b7:1d:b3:fc:8a:59:e7:6e:72: ++ 65:ad:f5:30:94:23:07:f3:82:16:4b:35:98:9c:53: ++ bb:2f:ca:e4:5a:d9:c7:8d:1d:fc:98:99:fb:2c:a4: ++ 82:6b:f0:2a:1f:8e:0b:5f:71:5c:5c:ae:42:7b:29: ++ 89:81:cb:03:a3:99:ca:88:9e:0b:40:09:41:33:db: ++ e6:58:7a:fd:ae:99:70:c0:5a:0f:d6:13:86:71:2f: ++ 76:69:fc:90:dd:db:2d:6e:d1:f2:9b:f5:1a:6b:9e: ++ 6f:15:8c:7a:f0:4b:28:a0:22:38:80:24:6c:36:a4: ++ 3b:f2:30:91:f3:78:13:cf:c1:3f:35:ab:f1:1d:11: ++ 23:b5:43:22:9e:01:92:b7:18:02:e5:11:d1:82:db: ++ 15:00:cc:61:37:c1:2a:7c:9a:e1:d0:ba:b3:50:46: ++ ee:82:ac:9d:31:f8:fb:23:e2:03:00:48:70:a3:09: ++ 26:79:15:53:60:f3:38:5c:ad:38:ea:81:00:63:14: ++ b9:33:5e:dd:0b:db:a0:45:07:1a:33:09:f8:4d:b4: ++ a7:02:a6:69:f4:c2:59:05:88:65:85:56:ae:4b:cb: ++ e0:de:3c:7d:2d:1a:c8:e9:fb:1f:a3:61:4a:d6:2a: ++ 13:ad:77:4c:1a:18:9b:91:0f:58:d8:06:54:c5:97: ++ f8:aa:3f:20:8a:a6:85:a6:77:f6:a6:fc:1c:e2:ee: ++ 6e:94:33:2a:83:50:84:0a:e5:4f:86:f8:50:45:78: ++ 00:81:eb:5b:68:e3:26:8d:cc:7b:5c:51:f4:14:2c: ++ 40:be:1a:60:1d:7a:72:61:1d:1f:63:2d:88:aa:ce: ++ a2:45:90:08:fc:6b:be:b3:50:2a:5a:fd:a8:48:18: ++ 46:d6:90:40:92:90:0a:84:5e:68:31:f8:eb:ed:0d: ++ d3:1d:c6:7d:99:18:55:56:27:65:2e:8d:45:c5:24: ++ ec:ce:e3 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 0A:48:23:A6:60:A4:92:0A:33:EA:93:5B:C5:57:EA:25:4D:BD:12:EE ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ 3e:90:48:aa:6e:62:15:25:66:7b:0c:d5:8c:8b:89:9d:d7:ed: ++ 4e:07:ef:9c:d0:14:5f:5e:50:bd:68:96:90:a4:14:11:aa:68: ++ 6d:09:35:39:40:09:da:f4:09:2c:34:a5:7b:59:84:49:29:97: ++ 74:c8:07:1e:47:6d:f2:ce:1c:50:26:e3:9e:3d:40:53:3f:f7: ++ 7f:96:76:10:c5:46:a5:d0:20:4b:50:f4:35:3b:18:f4:55:6a: ++ 41:1b:47:06:68:3c:bb:09:08:62:d9:5f:55:42:aa:ac:53:85: ++ ac:95:56:36:56:ab:e4:05:8c:c5:a8:da:1f:a3:69:bd:53:0f: ++ c4:ff:dc:ca:e3:7e:f2:4c:88:86:47:46:1a:f3:00:f5:80:91: ++ a2:dc:43:42:94:9b:20:f0:d1:cd:b2:eb:2c:53:c2:53:78:4a: ++ 4f:04:94:41:9a:8f:27:32:c1:e5:49:19:bf:f1:f2:c2:8b:a8: ++ 0a:39:31:28:b4:7d:62:36:2c:4d:ec:1f:33:b6:7e:77:6d:7e: ++ 50:f0:9f:0e:d7:11:8f:cf:18:c5:e3:27:fe:26:ef:05:9d:cf: ++ cf:37:c5:d0:7b:da:3b:b0:16:84:0c:3a:93:d6:be:17:db:0f: ++ 3e:0e:19:78:09:c7:a9:02:72:22:4b:f7:37:76:ba:75:c4:85: ++ 03:5a:63:d5:b1:75:05:c2:b9:bd:94:ad:8c:15:99:a7:93:7d: ++ f6:c5:f3:aa:74:cf:04:85:94:98:00:f4:e2:f9:ca:24:65:bf: ++ e0:62:af:c8:c5:fa:b2:c9:9e:56:48:da:79:fd:96:76:15:be: ++ a3:8e:56:c4:b3:34:fc:be:47:f4:c1:b4:a8:fc:d5:30:88:68: ++ ee:cb:ae:c9:63:c4:76:be:ac:38:18:e1:5e:5c:cf:ae:3a:22: ++ 51:eb:d1:8b:b3:f3:2b:33:07:54:87:fa:b4:b2:13:7b:ba:53: ++ 04:62:01:9d:f1:c0:4f:ee:e1:3a:d4:8b:20:10:fa:02:57:e6: ++ ef:c1:0b:b7:90:46:9c:19:29:8c:dc:6f:a0:4a:69:69:94:b7: ++ 24:65:a0:ff:ac:3f:ce:01:fb:21:2e:fd:68:f8:9b:f2:a5:cf: ++ 31:38:5c:15:aa:e6:97:00:c1:df:5a:a5:a7:39:aa:e9:84:7f: ++ 3c:51:a8:3a:d9:94:5b:8c:bf:4f:08:71:e5:db:a8:5c:d4:d2: ++ a6:fe:00:a3:c6:16:c7:0f:e8:80:ce:1c:28:64:74:19:08:d3: ++ 42:e3:ce:00:5d:7f:b1:dc:13:b0:e1:05:cb:d1:20:aa:86:74: ++ 9e:39:e7:91:fd:ff:5b:d6:f7:ad:a6:2f:03:0b:6d:e3:57:54: ++ eb:76:53:18:8d:11:98:ba ++-----BEGIN CERTIFICATE----- ++MIIFpDCCA4ygAwIBAgIQOcqTHO9D88aOk8f0ZIk4fjANBgkqhkiG9w0BAQsFADBs ++MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl ++c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBSU0Eg ++Um9vdCBDQSAyMDIxMB4XDTIxMDIxOTEwNTUzOFoXDTQ1MDIxMzEwNTUzN1owbDEL ++MAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNl ++YXJjaCBJbnN0aXR1dGlvbnMgQ0ExJDAiBgNVBAMMG0hBUklDQSBUTFMgUlNBIFJv ++b3QgQ0EgMjAyMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAIvC569l ++mwVnlskNJLnQDmT8zuIkGCyEf3dRywQRNrhe7Wlxp57kJQmXZ8FHws+RFjZiPTgE ++4VGC/6zStGndLuwRo0Xua2s7TL+MjaQenRG56Tj5eg4MmOIjHdFOY9TnuEFE+2uv ++a9of08WRiFukiZLRgeaMOVig1mlDqa2YUlhu2wr7a89o+uOkXjpFc5gH6l8Cct4M ++pbOfrqkdtx2z/IpZ525yZa31MJQjB/OCFks1mJxTuy/K5FrZx40d/JiZ+yykgmvw ++Kh+OC19xXFyuQnspiYHLA6OZyoieC0AJQTPb5lh6/a6ZcMBaD9YThnEvdmn8kN3b ++LW7R8pv1GmuebxWMevBLKKAiOIAkbDakO/IwkfN4E8/BPzWr8R0RI7VDIp4BkrcY ++AuUR0YLbFQDMYTfBKnya4dC6s1BG7oKsnTH4+yPiAwBIcKMJJnkVU2DzOFytOOqB ++AGMUuTNe3QvboEUHGjMJ+E20pwKmafTCWQWIZYVWrkvL4N48fS0ayOn7H6NhStYq ++E613TBoYm5EPWNgGVMWX+Ko/IIqmhaZ39qb8HOLubpQzKoNQhArlT4b4UEV4AIHr ++W2jjJo3Me1xR9BQsQL4aYB16cmEdH2MtiKrOokWQCPxrvrNQKlr9qEgYRtaQQJKQ ++CoReaDH46+0N0x3GfZkYVVYnZS6NRcUk7M7jAgMBAAGjQjBAMA8GA1UdEwEB/wQF ++MAMBAf8wHQYDVR0OBBYEFApII6ZgpJIKM+qTW8VX6iVNvRLuMA4GA1UdDwEB/wQE ++AwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAPpBIqm5iFSVmewzVjIuJndftTgfvnNAU ++X15QvWiWkKQUEapobQk1OUAJ2vQJLDSle1mESSmXdMgHHkdt8s4cUCbjnj1AUz/3 ++f5Z2EMVGpdAgS1D0NTsY9FVqQRtHBmg8uwkIYtlfVUKqrFOFrJVWNlar5AWMxaja ++H6NpvVMPxP/cyuN+8kyIhkdGGvMA9YCRotxDQpSbIPDRzbLrLFPCU3hKTwSUQZqP ++JzLB5UkZv/HywouoCjkxKLR9YjYsTewfM7Z+d21+UPCfDtcRj88YxeMn/ibvBZ3P ++zzfF0HvaO7AWhAw6k9a+F9sPPg4ZeAnHqQJyIkv3N3a6dcSFA1pj1bF1BcK5vZSt ++jBWZp5N99sXzqnTPBIWUmAD04vnKJGW/4GKvyMX6ssmeVkjaef2WdhW+o45WxLM0 ++/L5H9MG0qPzVMIho7suuyWPEdr6sOBjhXlzPrjoiUevRi7PzKzMHVIf6tLITe7pT ++BGIBnfHAT+7hOtSLIBD6Alfm78ELt5BGnBkpjNxvoEppaZS3JGWg/6w/zgH7IS79 ++aPib8qXPMThcFarmlwDB31qlpzmq6YR/PFGoOtmUW4y/Twhx5duoXNTSpv4Ao8YW ++xw/ogM4cKGR0GQjTQuPOAF1/sdwTsOEFy9EgqoZ0njnnkf3/W9b3raYvAwtt41dU ++63ZTGI0RmLo= ++-----END CERTIFICATE----- ++ ++# f015ce3cc239bfef064be9f1d2c417e1a0264a0a94be1f0c8d121864eb6949cc ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 2d:dd:ac:ce:62:97:94:a1:43:e8:b0:cd:76:6a:5e:60 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = TW, O = "Chunghwa Telecom Co., Ltd.", CN = HiPKI Root CA - G1 ++ Validity ++ Not Before: Feb 22 09:46:04 2019 GMT ++ Not After : Dec 31 15:59:59 2037 GMT ++ Subject: C = TW, O = "Chunghwa Telecom Co., Ltd.", CN = HiPKI Root CA - G1 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:f4:1e:7f:52:73:32:0c:73:e4:bd:13:74:a3:d4: ++ 30:a8:d0:ae:4b:d8:b6:df:75:47:66:f4:7c:e7:39: ++ 04:1e:6a:70:20:d2:5a:47:72:67:55:f4:a5:e8:9d: ++ d5:1e:21:a1:f0:67:ba:cc:21:68:be:44:53:bf:8d: ++ f9:e2:dc:2f:55:c8:37:3f:1f:a4:c0:9c:b3:e4:77: ++ 5c:a0:46:fe:77:fa:1a:a0:38:ea:ed:9a:72:de:2b: ++ bd:94:57:3a:ba:ec:79:e7:5f:7d:42:64:39:7a:26: ++ 36:f7:24:f0:d5:2f:ba:95:98:11:66:ad:97:35:d6: ++ 75:01:80:e0:af:f4:84:61:8c:0d:1e:5f:7c:87:96: ++ 5e:41:af:eb:87:ea:f8:5d:f1:2e:88:05:3e:4c:22: ++ bb:da:1f:2a:dd:52:46:64:39:f3:42:ce:d9:9e:0c: ++ b3:b0:77:97:64:9c:c0:f4:a3:2e:1f:95:07:b0:17: ++ df:30:db:00:18:96:4c:a1:81:4b:dd:04:6d:53:a3: ++ 3d:fc:07:ac:d4:c5:37:82:eb:e4:95:08:19:28:82: ++ d2:42:3a:a3:d8:53:ec:79:89:60:48:60:c8:72:92: ++ 50:dc:03:8f:83:3f:b2:42:57:5a:db:6a:e9:11:97: ++ dd:85:28:bc:30:4c:ab:e3:c2:b1:45:44:47:1f:e0: ++ 8a:16:07:96:d2:21:0f:53:c0:ed:a9:7e:d4:4e:ec: ++ 9b:09:ec:af:42:ac:30:d6:bf:d1:10:45:e0:a6:16: ++ b2:a5:c5:d3:4f:73:94:33:71:02:a1:6a:a3:d6:33: ++ 97:4f:21:63:1e:5b:8f:d9:c1:5e:45:71:77:0f:81: ++ 5d:5f:21:9a:ad:83:cc:fa:5e:d6:8d:23:5f:1b:3d: ++ 41:af:20:75:66:5a:4a:f6:9f:fb:ab:18:f7:71:c0: ++ b6:1d:31:ec:3b:20:eb:cb:e2:b8:f5:ae:92:b2:f7: ++ e1:84:4b:f2:a2:f2:93:9a:22:9e:d3:14:6f:36:54: ++ bd:1f:5e:59:15:b9:73:a8:c1:7c:6f:7b:62:e9:16: ++ 6c:47:5a:65:f3:0e:11:9b:46:d9:fd:6d:dc:d6:9c: ++ c0:b4:7d:a5:b0:dd:3f:56:6f:a1:f9:f6:e4:12:48: ++ fd:06:7f:12:57:b6:a9:23:4f:5b:03:c3:e0:71:2a: ++ 23:b7:f7:b0:b1:3b:bc:98:bd:d6:98:a8:0c:6b:f6: ++ 8e:12:67:a6:f2:b2:58:e4:02:09:13:3c:a9:bb:10: ++ b4:d2:30:45:f1:ec:f7:00:11:df:65:f8:dc:2b:43: ++ 55:bf:16:97:c4:0f:d5:2c:61:84:aa:72:86:fe:e6: ++ 3a:7e:c2:3f:7d:ee:fc:2f:14:3e:e6:85:dd:50:6f: ++ b7:49:ed ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ F2:77:17:FA:5E:A8:FE:F6:3D:71:D5:68:BA:C9:46:0C:38:D8:AF:B0 ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ 50:51:f0:75:dc:70:04:e3:ff:aa:75:d4:71:a2:cb:9e:8f:a8: ++ a9:d3:af:75:c7:54:cf:3a:1c:04:99:22:ac:c4:11:e2:ef:33: ++ 4a:a6:23:1d:0e:0d:47:d8:37:c7:6f:af:34:7f:4f:81:6b:35: ++ 4f:e9:72:a5:31:e2:78:e7:f7:4e:94:18:5b:40:7d:cf:6b:21: ++ 54:86:e6:95:7a:fb:c6:ca:ea:9c:48:4e:57:09:5d:2f:ac:f4: ++ a5:b4:97:33:58:d5:ac:79:a9:cc:5f:f9:85:fa:52:c5:8d:f8: ++ 91:14:eb:3a:0d:17:d0:52:c2:7b:e3:c2:73:8e:46:78:06:38: ++ 2c:e8:5c:da:66:c4:f4:a4:f0:56:19:33:29:5a:65:92:05:47: ++ 46:4a:ab:84:c3:1e:27:a1:1f:11:92:99:27:75:93:0f:bc:36: ++ 3b:97:57:8f:26:5b:0c:bb:9c:0f:d4:6e:30:07:d4:dc:5f:36: ++ 68:66:39:83:96:27:26:8a:c8:c4:39:fe:9a:21:6f:d5:72:86: ++ e9:7f:62:e5:97:4e:d0:24:d0:40:b0:d0:75:08:8e:bd:68:ee: ++ 08:d7:6e:7c:10:70:46:1b:7c:e0:88:b2:9e:72:86:99:01:e3: ++ bf:9f:49:19:b4:25:be:56:65:ae:17:63:e5:1e:df:e8:ff:47: ++ a5:bf:e1:26:05:84:e4:b0:c0:af:e7:08:99:a8:0c:5e:26:80: ++ 45:d4:f8:68:2f:96:8f:ae:e2:4a:1c:9c:16:0c:13:6f:38:87: ++ f6:bb:c8:34:5f:92:03:51:79:70:a6:df:cb:f5:99:4d:79:cd: ++ 4e:bc:57:9f:43:4e:6b:2e:2b:18:f8:6a:73:8c:ba:c5:35:ef: ++ 39:6a:41:1e:cf:71:a8:a2:b2:86:07:5b:3a:c9:e1:ef:3f:65: ++ 04:80:47:32:44:70:95:4e:31:67:6a:74:5b:10:45:75:ea:b0: ++ 9f:d0:e6:35:fe:4e:9f:8b:cc:2b:92:45:5b:6e:25:60:85:46: ++ cd:d1:aa:b0:76:66:93:77:96:be:83:be:38:b6:24:4e:26:0b: ++ cc:ed:7a:56:1a:e0:e9:5a:c6:64:ad:4c:7a:00:48:44:2f:b9: ++ 40:bb:13:3e:be:15:78:9d:85:81:4a:2a:57:de:d5:19:43:da: ++ db:ca:5b:47:86:83:0b:3f:b6:0d:76:78:73:79:22:5e:b1:80: ++ 1f:cf:be:d1:3f:56:10:98:2b:95:87:a1:1f:9d:64:14:60:39: ++ 2c:b3:00:55:2e:e4:f5:b3:0e:57:c4:91:41:00:9c:3f:e8:a5: ++ df:ea:f6:ff:c8:f0:ad:6d:52:a8:17:ab:9b:61:fc:12:51:35: ++ e4:25:fd:af:aa:6a:86:39 ++-----BEGIN CERTIFICATE----- ++MIIFajCCA1KgAwIBAgIQLd2szmKXlKFD6LDNdmpeYDANBgkqhkiG9w0BAQsFADBP ++MQswCQYDVQQGEwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0 ++ZC4xGzAZBgNVBAMMEkhpUEtJIFJvb3QgQ0EgLSBHMTAeFw0xOTAyMjIwOTQ2MDRa ++Fw0zNzEyMzExNTU5NTlaME8xCzAJBgNVBAYTAlRXMSMwIQYDVQQKDBpDaHVuZ2h3 ++YSBUZWxlY29tIENvLiwgTHRkLjEbMBkGA1UEAwwSSGlQS0kgUm9vdCBDQSAtIEcx ++MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9B5/UnMyDHPkvRN0o9Qw ++qNCuS9i233VHZvR85zkEHmpwINJaR3JnVfSl6J3VHiGh8Ge6zCFovkRTv4354twv ++Vcg3Px+kwJyz5HdcoEb+d/oaoDjq7Zpy3iu9lFc6uux55199QmQ5eiY29yTw1S+6 ++lZgRZq2XNdZ1AYDgr/SEYYwNHl98h5ZeQa/rh+r4XfEuiAU+TCK72h8q3VJGZDnz ++Qs7ZngyzsHeXZJzA9KMuH5UHsBffMNsAGJZMoYFL3QRtU6M9/Aes1MU3guvklQgZ ++KILSQjqj2FPseYlgSGDIcpJQ3AOPgz+yQlda22rpEZfdhSi8MEyr48KxRURHH+CK ++FgeW0iEPU8DtqX7UTuybCeyvQqww1r/REEXgphaypcXTT3OUM3ECoWqj1jOXTyFj ++HluP2cFeRXF3D4FdXyGarYPM+l7WjSNfGz1BryB1ZlpK9p/7qxj3ccC2HTHsOyDr ++y+K49a6SsvfhhEvyovKTmiKe0xRvNlS9H15ZFblzqMF8b3ti6RZsR1pl8w4Rm0bZ ++/W3c1pzAtH2lsN0/Vm+h+fbkEkj9Bn8SV7apI09bA8PgcSojt/ewsTu8mL3WmKgM ++a/aOEmem8rJY5AIJEzypuxC00jBF8ez3ABHfZfjcK0NVvxaXxA/VLGGEqnKG/uY6 ++fsI/fe78LxQ+5oXdUG+3Se0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNV ++HQ4EFgQU8ncX+l6o/vY9cdVouslGDDjYr7AwDgYDVR0PAQH/BAQDAgGGMA0GCSqG ++SIb3DQEBCwUAA4ICAQBQUfB13HAE4/+qddRxosuej6ip0691x1TPOhwEmSKsxBHi ++7zNKpiMdDg1H2DfHb680f0+BazVP6XKlMeJ45/dOlBhbQH3PayFUhuaVevvGyuqc ++SE5XCV0vrPSltJczWNWseanMX/mF+lLFjfiRFOs6DRfQUsJ748JzjkZ4Bjgs6Fza ++ZsT0pPBWGTMpWmWSBUdGSquEwx4noR8RkpkndZMPvDY7l1ePJlsMu5wP1G4wB9Tc ++XzZoZjmDlicmisjEOf6aIW/Vcobpf2Lll07QJNBAsNB1CI69aO4I1258EHBGG3zg ++iLKecoaZAeO/n0kZtCW+VmWuF2PlHt/o/0elv+EmBYTksMCv5wiZqAxeJoBF1Pho ++L5aPruJKHJwWDBNvOIf2u8g0X5IDUXlwpt/L9ZlNec1OvFefQ05rLisY+GpzjLrF ++Ne85akEez3GoorKGB1s6yeHvP2UEgEcyRHCVTjFnanRbEEV16rCf0OY1/k6fi8wr ++kkVbbiVghUbN0aqwdmaTd5a+g744tiROJgvM7XpWGuDpWsZkrUx6AEhEL7lAuxM+ ++vhV4nYWBSipX3tUZQ9rbyltHhoMLP7YNdnhzeSJesYAfz77RP1YQmCuVh6EfnWQU ++YDksswBVLuT1sw5XxJFBAJw/6KXf6vb/yPCtbVKoF6ubYfwSUTXkJf2vqmqGOQ== ++-----END CERTIFICATE----- ++ ++# 69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 41:d2:9d:d1:72:ea:ee:a7:80:c1:2c:6c:e9:2f:87:52 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = US, O = Internet Security Research Group, CN = ISRG Root X2 ++ Validity ++ Not Before: Sep 4 00:00:00 2020 GMT ++ Not After : Sep 17 16:00:00 2040 GMT ++ Subject: C = US, O = Internet Security Research Group, CN = ISRG Root X2 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:cd:9b:d5:9f:80:83:0a:ec:09:4a:f3:16:4a:3e: ++ 5c:cf:77:ac:de:67:05:0d:1d:07:b6:dc:16:fb:5a: ++ 8b:14:db:e2:71:60:c4:ba:45:95:11:89:8e:ea:06: ++ df:f7:2a:16:1c:a4:b9:c5:c5:32:e0:03:e0:1e:82: ++ 18:38:8b:d7:45:d8:0a:6a:6e:e6:00:77:fb:02:51: ++ 7d:22:d8:0a:6e:9a:5b:77:df:f0:fa:41:ec:39:dc: ++ 75:ca:68:07:0c:1f:ea ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 7C:42:96:AE:DE:4B:48:3B:FA:92:F8:9E:8C:CF:6D:8B:A9:72:37:95 ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:65:02:30:7b:79:4e:46:50:84:c2:44:87:46:1b:45:70:ff: ++ 58:99:de:f4:fd:a4:d2:55:a6:20:2d:74:d6:34:bc:41:a3:50: ++ 5f:01:27:56:b4:be:27:75:06:af:12:2e:75:98:8d:fc:02:31: ++ 00:8b:f5:77:6c:d4:c8:65:aa:e0:0b:2c:ee:14:9d:27:37:a4: ++ f9:53:a5:51:e4:29:83:d7:f8:90:31:5b:42:9f:0a:f5:fe:ae: ++ 00:68:e7:8c:49:0f:b6:6f:5b:5b:15:f2:e7 ++-----BEGIN CERTIFICATE----- ++MIICGzCCAaGgAwIBAgIQQdKd0XLq7qeAwSxs6S+HUjAKBggqhkjOPQQDAzBPMQsw ++CQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2gg ++R3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMjAeFw0yMDA5MDQwMDAwMDBaFw00 ++MDA5MTcxNjAwMDBaME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5ldCBT ++ZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgyMHYw ++EAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0HttwW +++1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7AlF9 ++ItgKbppbd9/w+kHsOdx1ymgHDB/qo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0T ++AQH/BAUwAwEB/zAdBgNVHQ4EFgQUfEKWrt5LSDv6kviejM9ti6lyN5UwCgYIKoZI ++zj0EAwMDaAAwZQIwe3lORlCEwkSHRhtFcP9Ymd70/aTSVaYgLXTWNLxBo1BfASdW ++tL4ndQavEi51mI38AjEAi/V3bNTIZargCyzuFJ0nN6T5U6VR5CmD1/iQMVtCnwr1 ++/q4AaOeMSQ+2b1tbFfLn ++-----END CERTIFICATE----- ++ ++# 88f438dcf8ffd1fa8f429115ffe5f82ae1e06e0c70c375faad717b34a49e7265 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 01:94:30:1e:a2:0b:dd:f5:c5:33:2a:b1:43:44:71:f8:d6:50:4d:0d ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C = KR, O = NAVER BUSINESS PLATFORM Corp., CN = NAVER Global Root Certification Authority ++ Validity ++ Not Before: Aug 18 08:58:42 2017 GMT ++ Not After : Aug 18 23:59:59 2037 GMT ++ Subject: C = KR, O = NAVER BUSINESS PLATFORM Corp., CN = NAVER Global Root Certification Authority ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:b6:d4:f1:93:5c:b5:40:89:0a:ab:0d:90:5b:50: ++ 63:ae:90:94:74:17:45:72:d6:7b:65:5a:29:4b:a7: ++ 56:a0:4b:b8:2f:42:75:e9:d9:7b:24:5a:31:65:ab: ++ 17:17:d1:33:3a:d9:11:dc:40:36:87:df:c7:6a:e9: ++ 26:5e:59:8a:77:e3:e8:48:9c:31:16:fa:3e:91:b1: ++ ca:c9:a3:e2:9f:ce:21:53:a3:02:36:30:cb:52:02: ++ e5:da:32:5d:c3:c5:e6:f9:ee:11:c7:8b:c9:44:1e: ++ 84:93:18:4a:b4:9f:e5:12:64:69:d0:26:85:62:01: ++ b6:c9:02:1d:be:83:51:bb:5c:da:f8:ad:15:6a:99: ++ f7:92:54:f7:34:5b:e9:bf:ea:29:81:12:d4:53:91: ++ 96:b3:91:5a:dd:fe:90:73:28:fb:30:46:b5:ca:08: ++ 07:c7:71:72:c9:66:d3:34:97:f6:8c:f4:18:4a:e1: ++ d0:3d:5a:45:b6:69:a7:29:fb:23:ce:88:d8:12:9c: ++ 00:48:a8:a6:0f:b3:3b:92:8d:71:0e:74:c5:8b:c8: ++ 4c:f9:f4:9b:8e:b8:3c:69:ed:6f:3b:50:2f:58:ed: ++ c4:b0:d0:1c:1b:6a:0c:e2:bc:44:aa:d8:cd:14:5d: ++ 94:78:61:bf:0e:6e:da:2a:bc:2f:0c:0b:71:a6:b3: ++ 16:3f:9c:e6:f9:cc:9f:53:35:e2:03:a0:a0:18:bf: ++ bb:f1:be:f4:d6:8c:87:0d:42:f7:06:b9:f1:6d:ed: ++ 04:94:a8:fe:b6:d3:06:c6:40:61:df:9d:9d:f3:54: ++ 76:ce:53:3a:01:a6:92:41:ec:04:a3:8f:0d:a2:d5: ++ 09:ca:d6:cb:9a:f1:ef:43:5d:c0:ab:a5:41:cf:5c: ++ 53:70:70:c9:88:a6:2d:d4:6b:61:73:50:26:86:61: ++ 0e:5f:1b:c2:2b:e2:8c:d5:bb:9d:c1:03:42:ba:94: ++ da:5f:a9:b0:ca:cc:4d:0a:ef:47:69:03:2f:22:fb: ++ f1:28:ce:bf:5d:50:65:a8:90:6d:b3:74:b0:08:c7: ++ ac:a8:d1:eb:3e:9c:fc:5d:1a:83:2e:2b:cb:b5:f3: ++ 44:9d:3a:a7:17:61:96:a2:71:d3:70:96:15:4d:b7: ++ 4c:73:ee:19:5c:c5:5b:3e:41:fe:ac:75:60:3b:1b: ++ 63:ce:00:dd:da:08:90:62:b4:e5:2d:ee:48:a7:6b: ++ 17:99:54:be:87:4a:e3:a9:5e:04:4c:eb:10:6d:54: ++ d6:ef:f1:e8:f2:62:16:cb:80:6b:ed:3d:ed:f5:1f: ++ 30:a5:ae:4b:c9:13:ed:8a:01:01:c9:b8:51:58:c0: ++ 66:3a:b1:66:4b:c4:d5:31:02:62:e9:74:84:0c:db: ++ 4d:46:2d ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ D2:9F:88:DF:A1:CD:2C:BD:EC:F5:3B:01:01:93:33:27:B2:EB:60:4B ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: sha384WithRSAEncryption ++ 32:ca:80:b3:9d:3d:54:06:dd:d2:d2:2e:f0:a4:01:21:0b:67: ++ 48:ca:6d:8e:e0:c8:aa:0d:aa:8d:21:57:8f:c6:3e:7a:ca:db: ++ 51:d4:52:b3:d4:96:84:a5:58:60:7f:e5:0b:8e:1f:f5:dc:0a: ++ 15:81:e5:3b:b6:b7:22:2f:09:9c:13:16:b1:6c:0c:35:08:6d: ++ ab:63:72:ed:dc:be:ec:c7:57:e6:30:20:71:d6:d7:10:c1:13: ++ 55:01:8c:2a:43:e4:41:f1:cf:3a:7a:53:92:ce:a2:03:05:0d: ++ 38:df:02:bb:10:2e:d9:3b:d2:9b:7a:c0:a1:a6:f8:b5:31:e6: ++ f4:75:c9:b9:53:99:75:47:22:5a:14:15:c7:78:1b:b6:9d:e9: ++ 0c:f8:1b:76:f1:85:84:de:a1:da:12:ef:a4:e2:10:97:7a:78: ++ de:0c:51:97:a8:21:40:8b:86:bd:0d:f0:5e:4e:4b:36:bb:3b: ++ 20:1f:8a:42:56:e1:0b:1a:bf:7b:d0:22:43:2c:44:8c:fb:e5: ++ 2a:b4:6c:1c:1c:ba:94:e0:13:7e:21:e6:9a:c2:cb:c5:42:64: ++ b4:1e:94:7b:08:25:c8:71:cc:87:45:57:85:d3:9f:29:62:22: ++ 83:51:97:00:18:97:77:6a:98:92:c9:7c:60:6c:df:6c:7d:4a: ++ e4:70:4c:c2:9e:b8:1d:f7:d0:34:c7:0f:cc:fb:a7:ff:03:be: ++ ad:70:90:da:0b:dd:c8:6d:97:5f:9a:7f:09:32:41:fd:cd:a2: ++ cc:5a:6d:4c:f2:aa:49:fe:66:f8:e9:d8:35:eb:0e:28:1e:ee: ++ 48:2f:3a:d0:79:09:38:7c:a6:22:82:93:95:d0:03:be:be:02: ++ a0:05:dd:20:22:e3:6f:1d:88:34:60:c6:e6:0a:b9:09:75:0b: ++ f0:07:e8:69:96:35:c7:fb:23:81:8e:38:39:b8:45:2b:43:78: ++ a2:d1:2c:14:ff:0d:28:72:72:95:9b:5e:09:db:89:44:98:aa: ++ a1:49:bb:71:52:f2:bf:f6:ff:27:a1:36:af:b8:b6:77:88:dd: ++ 3a:a4:6d:9b:34:90:dc:14:5d:30:bf:b7:eb:17:e4:87:b7:71: ++ d0:a1:d7:77:15:d4:42:d7:f2:f3:31:99:5d:9b:dd:16:6d:3f: ++ ea:06:23:f8:46:a2:22:ed:93:f6:dd:9a:e6:2a:87:b1:98:54: ++ f1:22:f7:6b:45:e3:e2:8e:76:1d:9a:8d:c4:06:8d:36:b7:14: ++ f3:9d:54:69:b7:8e:3c:d5:a4:6d:93:81:b7:ad:f6:bd:64:7b: ++ c2:c9:68:39:a0:92:9c:cd:34:86:91:90:fa:64:51:9d:fe:fe: ++ eb:a5:f5:75:de:89:f7:72 + -----BEGIN CERTIFICATE----- + MIIFojCCA4qgAwIBAgIUAZQwHqIL3fXFMyqxQ0Rx+NZQTQ0wDQYJKoZIhvcNAQEM + BQAwaTELMAkGA1UEBhMCS1IxJjAkBgNVBAoMHU5BVkVSIEJVU0lORVNTIFBMQVRG +@@ -4001,13 +8461,522 @@ dh2ajcQGjTa3FPOdVGm3jjzVpG2Tgbet9r1ke8LJaDmgkpzNNIaRkPpkUZ3+/uul + 9XXeifdy + -----END CERTIFICATE----- + +-# Issuer: CN=AC RAIZ FNMT-RCM SERVIDORES SEGUROS O=FNMT-RCM OU=Ceres +-# Subject: CN=AC RAIZ FNMT-RCM SERVIDORES SEGUROS O=FNMT-RCM OU=Ceres +-# Label: "AC RAIZ FNMT-RCM SERVIDORES SEGUROS" +-# Serial: 131542671362353147877283741781055151509 +-# MD5 Fingerprint: 19:36:9c:52:03:2f:d2:d1:bb:23:cc:dd:1e:12:55:bb +-# SHA1 Fingerprint: 62:ff:d9:9e:c0:65:0d:03:ce:75:93:d2:ed:3f:2d:32:c9:e3:e5:4a +-# SHA256 Fingerprint: 55:41:53:b1:3d:2c:f9:dd:b7:53:bf:be:1a:4e:0a:e0:8d:0a:a4:18:70:58:fe:60:a2:b8:62:b2:e4:b8:7b:cb ++# 242b69742fcb1e5b2abf98898b94572187544e5b4d9911786573621f6a74b82c ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 01:67:5f:27:d6:fe:7a:e3:e4:ac:be:09:5b:05:9e ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = FI, O = Telia Finland Oyj, CN = Telia Root CA v2 ++ Validity ++ Not Before: Nov 29 11:55:54 2018 GMT ++ Not After : Nov 29 11:55:54 2043 GMT ++ Subject: C = FI, O = Telia Finland Oyj, CN = Telia Root CA v2 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:b2:d0:3f:07:bc:e2:7b:d0:6b:99:f8:e2:77:69: ++ e7:ce:9d:a4:03:bc:82:6d:a1:fe:81:65:1f:4c:27: ++ ac:8e:00:ba:16:7b:eb:30:6a:00:c0:b3:74:68:7e: ++ b2:af:c7:d5:62:b3:7a:3f:50:ca:8c:36:44:24:63: ++ d2:36:e9:0c:85:f6:43:76:d5:4c:a1:60:72:67:e2: ++ 28:33:a5:cb:31:b8:3a:22:23:34:b8:7d:bd:56:22: ++ 40:9d:ea:f4:7b:03:ad:68:fc:b2:81:4f:98:d0:74: ++ ea:8d:e5:7d:cd:63:c3:a3:f6:de:92:c2:58:19:e0: ++ 96:bb:c5:c4:a9:3d:a5:74:96:fe:af:f9:89:aa:bd: ++ 95:17:54:d8:78:44:f1:0c:77:15:92:e0:98:42:a7: ++ a4:d6:aa:20:92:cd:c1:a0:b3:96:b2:3a:84:42:8d: ++ 7d:d5:95:e4:d6:db:e9:62:c4:58:b3:79:c5:8c:d3: ++ 35:33:83:9f:75:a1:52:27:61:38:f1:59:3d:8e:50: ++ e0:bd:79:3c:e7:6c:96:fe:5e:d9:02:65:b4:8e:5c: ++ d0:11:34:df:5d:bf:52:a7:81:00:c3:7f:99:45:99: ++ 15:d5:17:c8:0a:53:ec:63:f3:99:7d:cc:69:12:86: ++ c2:17:f0:01:9e:bf:84:bc:d1:52:cb:1b:92:66:ce: ++ a4:53:e5:a1:bf:c4:db:09:d6:e6:89:56:2b:c8:e3: ++ 7c:de:e3:ff:89:e5:35:6e:28:e8:6c:0b:23:51:a9: ++ 25:05:eb:48:f8:dd:b1:ca:fa:6c:08:51:ef:b7:18: ++ 6c:44:ca:26:e1:73:c6:89:06:81:e5:8a:ac:b0:e2: ++ 29:c6:b9:24:b3:6b:44:11:f4:a5:43:c2:4c:43:e5: ++ 70:36:8c:b6:33:57:7a:95:2e:82:a0:f4:5c:10:b3: ++ 61:83:f6:02:05:86:2e:7c:2d:6c:dc:03:46:6e:35: ++ 93:d5:7a:95:2f:de:20:d8:5b:7e:94:90:04:6a:ba: ++ 59:3d:04:05:75:9d:37:a2:0e:2e:3d:eb:c1:a4:52: ++ 83:fe:d0:6b:d4:66:8e:dc:c6:e9:12:4e:1d:2a:57: ++ aa:10:bc:7c:5e:82:7d:a6:a6:c9:f2:2d:b9:f5:17: ++ 27:ad:d1:0e:89:54:2b:95:fa:c0:ad:1d:98:14:78: ++ 33:42:86:0a:a9:73:b5:fb:74:0d:b7:1b:30:19:c4: ++ 5a:0e:1c:27:b7:da:18:d0:ff:8a:c8:05:ba:f1:aa: ++ 1c:a2:37:b7:e6:48:a4:46:2c:94:ea:a8:76:62:47: ++ 8b:10:53:07:48:57:6c:e2:92:4d:b6:ae:05:cb:dc: ++ c1:4a:5e:8f:ac:3d:19:4e:c2:ed:60:75:2b:db:c1: ++ ca:42:d5 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Authority Key Identifier: ++ keyid:72:AC:E4:33:79:AA:45:87:F6:FD:AC:1D:9E:D6:C7:2F:86:D8:24:39 ++ ++ X509v3 Subject Key Identifier: ++ 72:AC:E4:33:79:AA:45:87:F6:FD:AC:1D:9E:D6:C7:2F:86:D8:24:39 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: sha256WithRSAEncryption ++ a0:3b:59:a7:09:94:3e:36:84:d2:7e:2f:39:a5:96:97:fa:11: ++ ad:fc:67:f3:71:09:f2:b2:89:84:67:44:af:b9:ef:ed:96:ec: ++ 9c:64:db:32:30:6f:67:9a:ac:7e:5f:b2:ab:01:36:7e:81:fa: ++ e4:84:5e:d2:ac:36:e0:6b:62:c5:7d:4b:0e:82:6d:d2:76:62: ++ d1:fe:97:f8:9f:30:7c:18:f9:b4:52:77:82:1d:76:db:d3:1d: ++ a9:f0:c1:9a:00:bd:6d:75:d8:7d:e7:fa:c7:38:a3:9c:70:e8: ++ 46:79:03:af:2e:74:db:75:f8:6e:53:0c:03:c8:99:1a:89:35: ++ 19:3c:d3:c9:54:7c:a8:f0:2c:e6:6e:07:79:6f:6a:e1:e6:ea: ++ 91:82:69:0a:1d:c3:7e:59:a2:9e:6b:46:15:98:5b:d3:af:46: ++ 1d:62:c8:ce:80:52:49:11:3f:c9:04:12:c3:13:7c:3f:3b:8a: ++ 96:db:3c:a0:1e:0a:b4:8b:54:b2:24:67:0d:ef:82:cb:be:3c: ++ 7d:d1:e2:7f:ae:16:d6:56:58:b9:da:20:b1:83:15:a1:ef:8a: ++ 4d:32:6f:41:2f:13:52:82:94:d7:1a:c1:78:a2:51:dd:2b:70: ++ 6d:b7:1a:f9:f7:b0:e0:67:97:56:db:7c:61:53:09:03:28:02: ++ 40:c7:b3:d8:fd:9c:70:6a:c6:28:c3:85:e9:e2:ed:1a:93:a0: ++ de:4b:98:a2:84:3e:05:77:01:96:3d:fb:b4:20:0f:9c:72:02: ++ 7a:12:2f:d5:a3:ba:51:78:af:2a:2b:44:65:4e:b5:fd:0a:e8: ++ c1:cd:79:87:61:2b:de:80:57:45:bf:67:f1:9b:91:5e:a5:a4: ++ ec:59:48:10:0d:38:c7:b0:fa:c3:44:6d:04:f5:78:50:1c:92: ++ 96:5b:da:f5:b8:2e:ba:5b:cf:e5:f0:6a:9d:4b:2f:58:73:2d: ++ 4f:2d:c4:1c:3e:f4:b3:3f:ab:15:0e:3b:19:41:8a:a4:c1:57: ++ 12:66:71:4c:fa:53:e3:57:eb:62:95:09:9e:54:dd:d1:c2:3c: ++ 57:3c:bd:38:ad:98:64:b7:b8:03:9a:53:56:60:5d:b3:d8:42: ++ 1b:5c:4b:12:8a:1c:eb:eb:7d:c6:7a:69:c7:27:7f:a4:f8:8b: ++ f2:e4:94:66:87:4b:e9:94:07:09:12:79:8a:b2:eb:74:04:dc: ++ ce:f4:44:59:e0:16:ca:c5:2c:58:d7:3c:7b:cf:62:86:6a:50: ++ 7d:35:36:66:a7:fb:37:e7:28:c7:d8:d0:ad:a5:69:94:8f:e8: ++ c1:df:24:f8:1b:07:31:87:81:d8:5d:f6:e8:28:d8:4a:52:80: ++ ac:13:ee:50:14:1e:98:c7 ++-----BEGIN CERTIFICATE----- ++MIIFdDCCA1ygAwIBAgIPAWdfJ9b+euPkrL4JWwWeMA0GCSqGSIb3DQEBCwUAMEQx ++CzAJBgNVBAYTAkZJMRowGAYDVQQKDBFUZWxpYSBGaW5sYW5kIE95ajEZMBcGA1UE ++AwwQVGVsaWEgUm9vdCBDQSB2MjAeFw0xODExMjkxMTU1NTRaFw00MzExMjkxMTU1 ++NTRaMEQxCzAJBgNVBAYTAkZJMRowGAYDVQQKDBFUZWxpYSBGaW5sYW5kIE95ajEZ ++MBcGA1UEAwwQVGVsaWEgUm9vdCBDQSB2MjCCAiIwDQYJKoZIhvcNAQEBBQADggIP ++ADCCAgoCggIBALLQPwe84nvQa5n44ndp586dpAO8gm2h/oFlH0wnrI4AuhZ76zBq ++AMCzdGh+sq/H1WKzej9Qyow2RCRj0jbpDIX2Q3bVTKFgcmfiKDOlyzG4OiIjNLh9 ++vVYiQJ3q9HsDrWj8soFPmNB06o3lfc1jw6P23pLCWBnglrvFxKk9pXSW/q/5iaq9 ++lRdU2HhE8Qx3FZLgmEKnpNaqIJLNwaCzlrI6hEKNfdWV5Nbb6WLEWLN5xYzTNTOD ++n3WhUidhOPFZPY5Q4L15POdslv5e2QJltI5c0BE0312/UqeBAMN/mUWZFdUXyApT ++7GPzmX3MaRKGwhfwAZ6/hLzRUssbkmbOpFPlob/E2wnW5olWK8jjfN7j/4nlNW4o ++6GwLI1GpJQXrSPjdscr6bAhR77cYbETKJuFzxokGgeWKrLDiKca5JLNrRBH0pUPC ++TEPlcDaMtjNXepUugqD0XBCzYYP2AgWGLnwtbNwDRm41k9V6lS/eINhbfpSQBGq6 ++WT0EBXWdN6IOLj3rwaRSg/7Qa9RmjtzG6RJOHSpXqhC8fF6CfaamyfItufUXJ63R ++DolUK5X6wK0dmBR4M0KGCqlztft0DbcbMBnEWg4cJ7faGND/isgFuvGqHKI3t+ZI ++pEYslOqodmJHixBTB0hXbOKSTbauBcvcwUpej6w9GU7C7WB1K9vBykLVAgMBAAGj ++YzBhMB8GA1UdIwQYMBaAFHKs5DN5qkWH9v2sHZ7Wxy+G2CQ5MB0GA1UdDgQWBBRy ++rOQzeapFh/b9rB2e1scvhtgkOTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUw ++AwEB/zANBgkqhkiG9w0BAQsFAAOCAgEAoDtZpwmUPjaE0n4vOaWWl/oRrfxn83EJ ++8rKJhGdEr7nv7ZbsnGTbMjBvZ5qsfl+yqwE2foH65IRe0qw24GtixX1LDoJt0nZi ++0f6X+J8wfBj5tFJ3gh1229MdqfDBmgC9bXXYfef6xzijnHDoRnkDry5023X4blMM ++A8iZGok1GTzTyVR8qPAs5m4HeW9q4ebqkYJpCh3DflminmtGFZhb069GHWLIzoBS ++SRE/yQQSwxN8PzuKlts8oB4KtItUsiRnDe+Cy748fdHif64W1lZYudogsYMVoe+K ++TTJvQS8TUoKU1xrBeKJR3Stwbbca+few4GeXVtt8YVMJAygCQMez2P2ccGrGKMOF ++6eLtGpOg3kuYooQ+BXcBlj37tCAPnHICehIv1aO6UXivKitEZU61/Qrowc15h2Er ++3oBXRb9n8ZuRXqWk7FlIEA04x7D6w0RtBPV4UBySllva9bguulvP5fBqnUsvWHMt ++Ty3EHD70sz+rFQ47GUGKpMFXEmZxTPpT41frYpUJnlTd0cI8Vzy9OK2YZLe4A5pT ++VmBds9hCG1xLEooc6+t9xnppxyd/pPiL8uSUZodL6ZQHCRJ5irLrdATczvREWeAW ++ysUsWNc8e89ihmpQfTU2Zqf7N+cox9jQraVplI/owd8k+BsHMYeB2F326CjYSlKA ++rBPuUBQemMc= ++-----END CERTIFICATE----- ++ ++# 018e13f0772532cf809bd1b17281867283fc48c6e13be9c69812854a490c1b05 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 09:e0:93:65:ac:f7:d9:c8:b9:3e:1c:0b:04:2a:2e:f3 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = US, O = "DigiCert, Inc.", CN = DigiCert TLS ECC P384 Root G5 ++ Validity ++ Not Before: Jan 15 00:00:00 2021 GMT ++ Not After : Jan 14 23:59:59 2046 GMT ++ Subject: C = US, O = "DigiCert, Inc.", CN = DigiCert TLS ECC P384 Root G5 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:c1:44:a1:cf:11:97:50:9a:de:23:82:35:07:cd: ++ d0:cb:18:9d:d2:f1:7f:77:35:4f:3b:dd:94:72:52: ++ ed:c2:3b:f8:ec:fa:7b:6b:58:20:ec:99:ae:c9:fc: ++ 68:b3:75:b9:db:09:ec:c8:13:f5:4e:c6:0a:1d:66: ++ 30:4c:bb:1f:47:0a:3c:61:10:42:29:7c:a5:08:0e: ++ e0:22:e9:d3:35:68:ce:9b:63:9f:84:b5:99:4d:58: ++ a0:8e:f5:54:e7:95:c9 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ C1:51:45:50:59:AB:3E:E7:2C:5A:FA:20:22:12:07:80:88:7C:11:6A ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:65:02:31:00:89:6a:8d:47:e7:ec:fc:6e:55:03:d9:67:6c: ++ 26:4e:83:c6:fd:c9:fb:2b:13:bc:b7:7a:8c:b4:65:d2:69:69: ++ 63:13:63:3b:26:50:2e:01:a1:79:06:91:9d:48:bf:c2:be:02: ++ 30:47:c3:15:7b:b1:a0:91:99:49:93:a8:3c:7c:e8:46:06:8b: ++ 2c:f2:31:00:94:9d:62:c8:89:bd:19:84:14:e9:a5:fb:01:b8: ++ 0d:76:43:8c:2e:53:cb:7c:df:0c:17:96:50 ++-----BEGIN CERTIFICATE----- ++MIICGTCCAZ+gAwIBAgIQCeCTZaz32ci5PhwLBCou8zAKBggqhkjOPQQDAzBOMQsw ++CQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xJjAkBgNVBAMTHURp ++Z2lDZXJ0IFRMUyBFQ0MgUDM4NCBSb290IEc1MB4XDTIxMDExNTAwMDAwMFoXDTQ2 ++MDExNDIzNTk1OVowTjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJ ++bmMuMSYwJAYDVQQDEx1EaWdpQ2VydCBUTFMgRUNDIFAzODQgUm9vdCBHNTB2MBAG ++ByqGSM49AgEGBSuBBAAiA2IABMFEoc8Rl1Ca3iOCNQfN0MsYndLxf3c1TzvdlHJS ++7cI7+Oz6e2tYIOyZrsn8aLN1udsJ7MgT9U7GCh1mMEy7H0cKPGEQQil8pQgO4CLp ++0zVozptjn4S1mU1YoI71VOeVyaNCMEAwHQYDVR0OBBYEFMFRRVBZqz7nLFr6ICIS ++B4CIfBFqMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MAoGCCqGSM49 ++BAMDA2gAMGUCMQCJao1H5+z8blUD2WdsJk6Dxv3J+ysTvLd6jLRl0mlpYxNjOyZQ ++LgGheQaRnUi/wr4CMEfDFXuxoJGZSZOoPHzoRgaLLPIxAJSdYsiJvRmEFOml+wG4 ++DXZDjC5Ty3zfDBeWUA== ++-----END CERTIFICATE----- ++ ++# 371a00dc0533b3721a7eeb40e8419e70799d2b0a0f2c1d80693165f7cec4ad75 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 08:f9:b4:78:a8:fa:7e:da:6a:33:37:89:de:7c:cf:8a ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C = US, O = "DigiCert, Inc.", CN = DigiCert TLS RSA4096 Root G5 ++ Validity ++ Not Before: Jan 15 00:00:00 2021 GMT ++ Not After : Jan 14 23:59:59 2046 GMT ++ Subject: C = US, O = "DigiCert, Inc.", CN = DigiCert TLS RSA4096 Root G5 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:b3:d0:f4:c9:79:11:9d:fd:fc:66:81:e7:cc:d5: ++ e4:bc:ec:81:3e:6a:35:8e:2e:b7:e7:de:af:f9:07: ++ 4d:cf:30:9d:ea:09:0b:99:bd:6c:57:da:18:4a:b8: ++ 78:ac:3a:39:a8:a6:48:ac:2e:72:e5:bd:eb:f1:1a: ++ cd:e7:a4:03:a9:3f:11:b4:d8:2f:89:16:fb:94:01: ++ 3d:bb:2f:f8:13:05:a1:78:1c:8e:28:e0:45:e0:83: ++ f4:59:1b:95:b3:ae:7e:03:45:e5:be:c2:42:fe:ee: ++ f2:3c:b6:85:13:98:32:9d:16:a8:29:c2:0b:1c:38: ++ dc:9f:31:77:5c:bf:27:a3:fc:27:ac:b7:2b:bd:74: ++ 9b:17:2d:f2:81:da:5d:b0:e1:23:17:3e:88:4a:12: ++ 23:d0:ea:cf:9d:de:03:17:b1:42:4a:a0:16:4c:a4: ++ 6d:93:e9:3f:3a:ee:3a:7c:9d:58:9d:f4:4e:8f:fc: ++ 3b:23:c8:6d:b8:e2:05:da:cc:eb:ec:c3:31:f4:d7: ++ a7:29:54:80:cf:44:5b:4c:6f:30:9e:f3:cc:dd:1f: ++ 94:43:9d:4d:7f:70:70:0d:d4:3a:d1:37:f0:6c:9d: ++ 9b:c0:14:93:58:ef:cd:41:38:75:bc:13:03:95:7c: ++ 7f:e3:5c:e9:d5:0d:d5:e2:7c:10:62:aa:6b:f0:3d: ++ 76:f3:3f:a3:e8:b0:c1:fd:ef:aa:57:4d:ac:86:a7: ++ 18:b4:29:c1:2c:0e:bf:64:be:29:8c:d8:02:2d:cd: ++ 5c:2f:f2:7f:ef:15:f4:0c:15:ac:0a:b0:f1:d3:0d: ++ 4f:6a:4d:77:97:01:a0:f1:66:b7:b7:ce:ef:ce:ec: ++ ec:a5:75:ca:ac:e3:e1:63:f7:b8:a1:04:c8:bc:7b: ++ 3f:5d:2d:16:22:56:ed:48:49:fe:a7:2f:79:30:25: ++ 9b:ba:6b:2d:3f:9d:3b:c4:17:e7:1d:2e:fb:f2:cf: ++ a6:fc:e3:14:2c:96:98:21:8c:b4:91:e9:19:60:83: ++ f2:30:2b:06:73:50:d5:98:3b:06:e9:c7:8a:0c:60: ++ 8c:28:f8:52:9b:6e:e1:f6:4d:bb:06:24:9b:d7:2b: ++ 26:3f:fd:2a:2f:71:f5:d6:24:be:7f:31:9e:0f:6d: ++ e8:8f:4f:4d:a3:3f:ff:35:ea:df:49:5e:41:8f:86: ++ f9:f1:77:79:4b:1b:b4:a3:5e:2f:fb:46:02:d0:66: ++ 13:5e:5e:85:4f:ce:d8:70:88:7b:ce:01:b5:96:97: ++ d7:cd:7d:fd:82:f8:c2:24:c1:ca:01:39:4f:8d:a2: ++ c1:14:40:1f:9c:66:d5:0c:09:46:d6:f2:d0:d1:48: ++ 76:56:3a:43:cb:b6:0a:11:39:ba:8c:13:6c:06:b5: ++ 9e:cf:eb ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 51:33:1C:ED:36:40:AF:17:D3:25:CD:69:68:F2:AF:4E:23:3E:B3:41 ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: sha384WithRSAEncryption ++ 60:a6:af:5b:5f:57:da:89:db:4b:50:a9:c4:23:35:21:ff:d0: ++ 61:30:84:91:b7:3f:10:cf:25:8e:c9:bf:46:34:d9:c1:21:26: ++ 1c:70:19:72:1e:a3:c9:87:fe:a9:43:64:96:3a:c8:53:04:0a: ++ b6:41:bb:c4:47:00:d9:9f:18:18:3b:b2:0e:f3:34:ea:24:f7: ++ dd:af:20:60:ae:92:28:5f:36:e7:5d:e4:de:c7:3c:db:50:39: ++ ad:bb:3d:28:4d:96:7c:76:c6:5b:f4:c1:db:14:a5:ab:19:62: ++ 07:18:40:5f:97:91:dc:9c:c7:ab:b5:51:0d:e6:69:53:55:cc: ++ 39:7d:da:c5:11:55:72:c5:3b:8b:89:f8:34:2d:a4:17:e5:17: ++ e6:99:7d:30:88:21:37:cd:30:17:3d:b8:f2:bc:a8:75:a0:43: ++ dc:3e:89:4b:90:ae:6d:03:e0:1c:a3:a0:96:09:bb:7d:a3:b7: ++ 2a:10:44:4b:46:07:34:63:ed:31:b9:04:ee:a3:9b:9a:ae:e6: ++ 31:78:f4:ea:24:61:3b:ab:58:64:ff:bb:87:27:62:25:81:df: ++ dc:a1:2f:f6:ed:a7:ff:7a:8f:51:2e:30:f8:a4:01:d2:85:39: ++ 5f:01:99:96:6f:5a:5b:70:19:46:fe:86:60:3e:ad:80:10:09: ++ dd:39:25:2f:58:7f:bb:d2:74:f0:f7:46:1f:46:39:4a:d8:53: ++ d0:f3:2e:3b:71:a5:d4:6f:fc:f3:67:e4:07:8f:dd:26:19:e1: ++ 8d:5b:fa:a3:93:11:9b:e9:c8:3a:c3:55:68:9a:92:e1:52:76: ++ 38:e8:e1:ba:bd:fb:4f:d5:ef:b3:e7:48:83:31:f0:82:21:e3: ++ b6:be:a7:ab:6f:ef:9f:df:4c:cf:01:b8:62:6a:23:3d:e7:09: ++ 4d:80:1b:7b:30:a4:c3:dd:07:7f:34:be:a4:26:b2:f6:41:e8: ++ 09:1d:e3:20:98:aa:37:4f:ff:f7:f1:e2:29:70:31:47:3f:74: ++ d0:14:16:fa:21:8a:02:d5:8a:09:94:77:2e:f2:59:28:8b:7c: ++ 50:92:0a:66:78:38:83:75:c4:b5:5a:a8:11:c6:e5:c1:9d:66: ++ 55:cf:53:c4:af:d7:75:85:a9:42:13:56:ec:21:77:81:93:5a: ++ 0c:ea:96:d9:49:ca:a1:08:f2:97:3b:6d:9b:04:18:24:44:8e: ++ 7c:01:f2:dc:25:d8:5e:86:9a:b1:39:db:f5:91:32:6a:d1:a6: ++ 70:8a:a2:f7:de:a4:45:85:26:a8:1e:8c:5d:29:5b:c8:4b:d8: ++ 9a:6a:03:5e:70:f2:85:4f:6c:4b:68:2f:ca:54:f6:8c:da:32: ++ fe:c3:6b:83:3f:38:c6:7e ++-----BEGIN CERTIFICATE----- ++MIIFZjCCA06gAwIBAgIQCPm0eKj6ftpqMzeJ3nzPijANBgkqhkiG9w0BAQwFADBN ++MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xJTAjBgNVBAMT ++HERpZ2lDZXJ0IFRMUyBSU0E0MDk2IFJvb3QgRzUwHhcNMjEwMTE1MDAwMDAwWhcN ++NDYwMTE0MjM1OTU5WjBNMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQs ++IEluYy4xJTAjBgNVBAMTHERpZ2lDZXJ0IFRMUyBSU0E0MDk2IFJvb3QgRzUwggIi ++MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCz0PTJeRGd/fxmgefM1eS87IE+ ++ajWOLrfn3q/5B03PMJ3qCQuZvWxX2hhKuHisOjmopkisLnLlvevxGs3npAOpPxG0 ++2C+JFvuUAT27L/gTBaF4HI4o4EXgg/RZG5Wzrn4DReW+wkL+7vI8toUTmDKdFqgp ++wgscONyfMXdcvyej/Cestyu9dJsXLfKB2l2w4SMXPohKEiPQ6s+d3gMXsUJKoBZM ++pG2T6T867jp8nVid9E6P/DsjyG244gXazOvswzH016cpVIDPRFtMbzCe88zdH5RD ++nU1/cHAN1DrRN/BsnZvAFJNY781BOHW8EwOVfH/jXOnVDdXifBBiqmvwPXbzP6Po ++sMH976pXTayGpxi0KcEsDr9kvimM2AItzVwv8n/vFfQMFawKsPHTDU9qTXeXAaDx ++Zre3zu/O7Oyldcqs4+Fj97ihBMi8ez9dLRYiVu1ISf6nL3kwJZu6ay0/nTvEF+cd ++Lvvyz6b84xQslpghjLSR6Rlgg/IwKwZzUNWYOwbpx4oMYIwo+FKbbuH2TbsGJJvX ++KyY//SovcfXWJL5/MZ4PbeiPT02jP/816t9JXkGPhvnxd3lLG7SjXi/7RgLQZhNe ++XoVPzthwiHvOAbWWl9fNff2C+MIkwcoBOU+NosEUQB+cZtUMCUbW8tDRSHZWOkPL ++tgoRObqME2wGtZ7P6wIDAQABo0IwQDAdBgNVHQ4EFgQUUTMc7TZArxfTJc1paPKv ++TiM+s0EwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcN ++AQEMBQADggIBAGCmr1tfV9qJ20tQqcQjNSH/0GEwhJG3PxDPJY7Jv0Y02cEhJhxw ++GXIeo8mH/qlDZJY6yFMECrZBu8RHANmfGBg7sg7zNOok992vIGCukihfNudd5N7H ++PNtQOa27PShNlnx2xlv0wdsUpasZYgcYQF+Xkdycx6u1UQ3maVNVzDl92sURVXLF ++O4uJ+DQtpBflF+aZfTCIITfNMBc9uPK8qHWgQ9w+iUuQrm0D4ByjoJYJu32jtyoQ ++REtGBzRj7TG5BO6jm5qu5jF49OokYTurWGT/u4cnYiWB39yhL/btp/96j1EuMPik ++AdKFOV8BmZZvWltwGUb+hmA+rYAQCd05JS9Yf7vSdPD3Rh9GOUrYU9DzLjtxpdRv ++/PNn5AeP3SYZ4Y1b+qOTEZvpyDrDVWiakuFSdjjo4bq9+0/V77PnSIMx8IIh47a+ ++p6tv75/fTM8BuGJqIz3nCU2AG3swpMPdB380vqQmsvZB6Akd4yCYqjdP//fx4ilw ++MUc/dNAUFvohigLVigmUdy7yWSiLfFCSCmZ4OIN1xLVaqBHG5cGdZlXPU8Sv13WF ++qUITVuwhd4GTWgzqltlJyqEI8pc7bZsEGCREjnwB8twl2F6GmrE52/WRMmrRpnCK ++ovfepEWFJqgejF0pW8hL2JpqA15w8oVPbEtoL8pU9ozaMv7Da4M/OMZ+ ++-----END CERTIFICATE----- ++ ++# b4585f22e4ac756a4e8612a1361c5d9d031a93fd84febb778fa3068b0fc42dc2 ++ ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 06:25:33:b1:47:03:33:27:5c:f9:8d:9a:b9:bf:cc:f8 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = US, O = Certainly, CN = Certainly Root E1 ++ Validity ++ Not Before: Apr 1 00:00:00 2021 GMT ++ Not After : Apr 1 00:00:00 2046 GMT ++ Subject: C = US, O = Certainly, CN = Certainly Root E1 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:de:6f:f8:7f:1c:df:ed:f9:47:87:86:b1:a4:c0: ++ 8a:f8:82:97:80:ea:8f:c8:4a:5e:2a:7d:88:68:a7: ++ 01:62:14:91:24:7a:5c:9e:a3:17:7d:8a:86:21:34: ++ 18:50:1b:10:de:d0:37:4b:26:c7:19:60:80:e9:34: ++ bd:60:19:36:40:d6:29:87:09:3c:91:7a:f6:bc:13: ++ 23:dd:59:4e:04:5e:cf:c8:02:1c:18:53:c1:31:d8: ++ da:20:e9:44:8d:e4:76 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ F3:28:18:CB:64:75:EE:29:2A:EB:ED:AE:23:58:38:85:EB:C8:22:07 ++ Signature Algorithm: ecdsa-with-SHA384 ++ 30:65:02:31:00:b1:8e:5a:20:c3:b2:19:62:4d:de:b0:4f:df: ++ 6e:d2:70:8a:f1:9f:7e:6a:8c:e6:ba:de:83:69:ca:69:b3:a9: ++ 05:b5:96:92:17:87:c2:d2:ea:d0:7b:ce:d8:41:5b:7c:ae:02: ++ 30:46:de:ea:cb:5d:9a:ec:32:c2:65:16:b0:4c:30:5c:30:f3: ++ da:4e:73:86:06:d8:ce:89:04:48:37:37:f8:dd:33:51:9d:70: ++ af:7b:55:d8:01:2e:7d:05:64:0e:86:b8:91 ++-----BEGIN CERTIFICATE----- ++MIIB9zCCAX2gAwIBAgIQBiUzsUcDMydc+Y2aub/M+DAKBggqhkjOPQQDAzA9MQsw ++CQYDVQQGEwJVUzESMBAGA1UEChMJQ2VydGFpbmx5MRowGAYDVQQDExFDZXJ0YWlu ++bHkgUm9vdCBFMTAeFw0yMTA0MDEwMDAwMDBaFw00NjA0MDEwMDAwMDBaMD0xCzAJ ++BgNVBAYTAlVTMRIwEAYDVQQKEwlDZXJ0YWlubHkxGjAYBgNVBAMTEUNlcnRhaW5s ++eSBSb290IEUxMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE3m/4fxzf7flHh4axpMCK +++IKXgOqPyEpeKn2IaKcBYhSRJHpcnqMXfYqGITQYUBsQ3tA3SybHGWCA6TS9YBk2 ++QNYphwk8kXr2vBMj3VlOBF7PyAIcGFPBMdjaIOlEjeR2o0IwQDAOBgNVHQ8BAf8E ++BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU8ygYy2R17ikq6+2uI1g4 ++hevIIgcwCgYIKoZIzj0EAwMDaAAwZQIxALGOWiDDshliTd6wT99u0nCK8Z9+aozm ++ut6Dacpps6kFtZaSF4fC0urQe87YQVt8rgIwRt7qy12a7DLCZRawTDBcMPPaTnOG ++BtjOiQRINzf43TNRnXCve1XYAS59BWQOhriR ++-----END CERTIFICATE----- ++ ++# 77b82cd8644c4305f7acc5cb156b45675004033d51c60c6202a8e0c33467d3a0 ++ ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 8e:0f:f9:4b:90:71:68:65:33:54:f4:d4:44:39:b7:e0 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = US, O = Certainly, CN = Certainly Root R1 ++ Validity ++ Not Before: Apr 1 00:00:00 2021 GMT ++ Not After : Apr 1 00:00:00 2046 GMT ++ Subject: C = US, O = Certainly, CN = Certainly Root R1 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ RSA Public-Key: (4096 bit) ++ Modulus: ++ 00:d0:36:d4:1f:ea:dd:ab:e4:d1:b6:e6:fb:22:c0: ++ dd:13:0d:6a:7b:22:13:1c:97:3c:68:63:66:32:9c: ++ 03:b5:8d:a4:81:83:da:78:30:11:cf:dc:b2:2b:be: ++ 92:bf:8e:e4:c4:13:be:a4:68:4c:da:02:68:16:74: ++ be:b2:dd:04:e4:6b:2a:dd:37:1f:60:2c:db:f5:f7: ++ a1:7c:95:b7:0c:70:86:2e:f1:3a:ef:52:f7:cc:d3: ++ 9b:f9:8b:be:0e:df:31:b7:9d:68:5c:92:a6:f5:e5: ++ f3:0a:34:b5:ff:7b:a2:e4:87:a1:c6:af:17:00:ef: ++ 03:91:ed:a9:1c:4e:71:3d:d2:8b:6c:89:f4:78:86: ++ e6:6a:49:a0:ce:b5:d2:b0:ab:9b:f6:f4:d4:2e:e3: ++ 72:f9:36:c6:eb:15:b7:25:8c:3a:fc:25:0d:b3:22: ++ 73:21:74:c8:4a:96:61:92:f5:2f:0b:18:a5:f4:ad: ++ e2:ee:41:bd:01:79:fa:96:8c:8d:17:02:30:b4:f9: ++ af:78:1a:8c:b4:36:10:10:07:05:70:d0:f4:31:90: ++ 8a:51:c5:86:26:79:b2:11:88:5e:c5:f0:0a:54:cd: ++ 49:a6:bf:02:9c:d2:44:a7:ed:e3:78:ef:46:5e:6d: ++ 71:d1:79:70:1c:46:5f:51:e9:c9:37:dc:5f:7e:69: ++ 7b:41:df:34:45:e0:3b:84:f4:a1:8a:0a:36:9e:37: ++ cc:62:52:e1:89:0d:28:f9:7a:23:b1:0d:3d:3d:9a: ++ fd:9d:81:ef:2c:90:c0:7b:44:4e:bb:49:e0:0e:4a: ++ 56:92:bc:cb:b5:dd:79:17:89:91:de:61:89:74:92: ++ a8:e3:32:85:be:4e:85:a4:4b:59:cb:2b:c5:78:8e: ++ 71:54:d0:02:37:99:8c:e5:49:ea:e0:54:72:a4:11: ++ 06:2f:0b:8c:c1:5b:be:b5:a1:b0:53:6e:9c:b8:60: ++ 91:1f:59:6b:f9:2d:f4:94:0a:97:b5:ec:c5:76:03: ++ 54:1b:65:52:ba:4c:92:56:51:35:a0:40:d8:29:db: ++ ae:52:76:3b:2d:30:40:9b:8a:d0:42:56:b4:b7:88: ++ 01:a4:87:3b:53:96:cd:a3:16:8f:f3:66:aa:17:b1: ++ c7:60:e0:c1:43:05:0c:ee:9b:5b:60:6f:06:5c:87: ++ 5b:27:f9:40:11:9e:9c:33:c1:b7:e5:35:57:05:7f: ++ 27:ce:17:20:8c:1c:fc:f1:fb:da:31:29:49:ed:f5: ++ 0b:84:a7:4f:c1:f6:4e:c2:28:9c:fa:ee:e0:af:07: ++ fb:33:11:7a:21:4f:0b:21:10:b6:40:3a:ab:22:3a: ++ 04:9c:8b:9b:84:86:72:9a:d2:a7:a5:c4:b4:75:91: ++ a9:2b:23 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ E0:AA:3F:25:8D:9F:44:5C:C1:3A:E8:2E:AE:77:4C:84:3E:67:0C:F4 ++ Signature Algorithm: sha256WithRSAEncryption ++ b9:57:af:b8:12:da:57:83:8f:68:0b:33:1d:03:53:55:f4:95: ++ 70:e4:2b:3d:b0:39:eb:fa:89:62:fd:f7:d6:18:04:2f:21:34: ++ dd:f1:68:f0:d5:96:5a:de:c2:80:a3:c1:8d:c6:6a:f7:59:77: ++ ae:15:64:cf:5b:79:05:77:66:ea:8c:d3:6b:0d:dd:f1:59:2c: ++ c1:33:a5:30:80:15:45:07:45:1a:31:22:b6:92:00:ab:99:4d: ++ 3a:8f:77:af:a9:22:ca:2f:63:ca:15:d6:c7:c6:f0:3d:6c:fc: ++ 1c:0d:98:10:61:9e:11:a2:22:d7:0a:f2:91:7a:6b:39:0e:2f: ++ 30:c3:36:49:9f:e0:e9:0f:02:44:50:37:94:55:7d:ea:9f:f6: ++ 3b:ba:94:a5:4c:e9:bc:3e:51:b4:e8:ca:92:36:54:6d:5c:25: ++ 28:da:dd:ad:14:fd:d3:ee:e2:22:05:eb:d0:f2:b7:68:12:d7: ++ 5a:8a:41:1a:c6:92:a5:5a:3b:63:45:4f:bf:e1:3a:77:22:2f: ++ 5c:bf:46:f9:5a:03:85:13:42:5f:ca:de:53:d7:62:b5:a6:35: ++ 04:c2:47:ff:99:fd:84:df:5c:ce:e9:5e:80:28:41:f2:7d:e7: ++ 1e:90:d8:4f:76:3e:82:3c:0d:fc:a5:03:fa:7b:1a:d9:45:1e: ++ 60:da:c4:8e:f9:fc:2b:c9:7b:95:c5:2a:ff:aa:89:df:82:31: ++ 0f:72:ff:0c:27:d7:0a:1e:56:00:50:1e:0c:90:c1:96:b5:d8: ++ 14:85:bb:a7:0d:16:c1:f8:07:24:1b:ba:85:a1:1a:05:09:80: ++ ba:95:63:c9:3a:ec:25:9f:7f:9d:ba:a4:47:15:9b:44:70:f1: ++ 6a:4b:d6:38:5e:43:f3:18:7e:50:6e:e9:5a:28:e6:65:e6:77: ++ 1b:3a:fd:1d:be:03:26:a3:db:d4:e1:bb:7e:96:27:2b:1d:ee: ++ a4:fb:da:25:54:13:03:de:39:c6:c3:1f:4d:90:ec:8f:1b:4a: ++ d2:1c:ed:85:95:38:50:79:46:d6:c1:90:50:31:a9:5c:9a:6e: ++ 1d:f5:33:56:8b:a7:99:d2:f2:c8:2c:33:93:92:30:c7:4e:8c: ++ 65:33:10:64:17:fd:24:17:96:d1:8d:c2:3a:6a:2b:eb:13:8b: ++ 44:f2:21:f3:4a:1a:b7:77:5f:d7:ed:88:a4:72:e5:39:1f:95: ++ 9d:be:67:c1:70:11:3d:bb:f4:f8:49:b7:e3:26:97:3a:9f:d2: ++ 5f:7c:fb:c0:99:7c:39:29:e0:7b:1d:bf:0d:a7:8f:d2:29:34: ++ 6e:24:15:cb:de:90:5e:bf:1a:c4:66:ea:c2:e6:ba:39:5f:8a: ++ 99:a9:41:59:07:b0:2c:af ++-----BEGIN CERTIFICATE----- ++MIIFRzCCAy+gAwIBAgIRAI4P+UuQcWhlM1T01EQ5t+AwDQYJKoZIhvcNAQELBQAw ++PTELMAkGA1UEBhMCVVMxEjAQBgNVBAoTCUNlcnRhaW5seTEaMBgGA1UEAxMRQ2Vy ++dGFpbmx5IFJvb3QgUjEwHhcNMjEwNDAxMDAwMDAwWhcNNDYwNDAxMDAwMDAwWjA9 ++MQswCQYDVQQGEwJVUzESMBAGA1UEChMJQ2VydGFpbmx5MRowGAYDVQQDExFDZXJ0 ++YWlubHkgUm9vdCBSMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANA2 ++1B/q3avk0bbm+yLA3RMNansiExyXPGhjZjKcA7WNpIGD2ngwEc/csiu+kr+O5MQT ++vqRoTNoCaBZ0vrLdBORrKt03H2As2/X3oXyVtwxwhi7xOu9S98zTm/mLvg7fMbed ++aFySpvXl8wo0tf97ouSHocavFwDvA5HtqRxOcT3Si2yJ9HiG5mpJoM610rCrm/b0 ++1C7jcvk2xusVtyWMOvwlDbMicyF0yEqWYZL1LwsYpfSt4u5BvQF5+paMjRcCMLT5 ++r3gajLQ2EBAHBXDQ9DGQilHFhiZ5shGIXsXwClTNSaa/ApzSRKft43jvRl5tcdF5 ++cBxGX1HpyTfcX35pe0HfNEXgO4T0oYoKNp43zGJS4YkNKPl6I7ENPT2a/Z2B7yyQ ++wHtETrtJ4A5KVpK8y7XdeReJkd5hiXSSqOMyhb5OhaRLWcsrxXiOcVTQAjeZjOVJ ++6uBUcqQRBi8LjMFbvrWhsFNunLhgkR9Za/kt9JQKl7XsxXYDVBtlUrpMklZRNaBA ++2CnbrlJ2Oy0wQJuK0EJWtLeIAaSHO1OWzaMWj/Nmqhexx2DgwUMFDO6bW2BvBlyH ++Wyf5QBGenDPBt+U1VwV/J84XIIwc/PH72jEpSe31C4SnT8H2TsIonPru4K8H+zMR ++eiFPCyEQtkA6qyI6BJyLm4SGcprSp6XEtHWRqSsjAgMBAAGjQjBAMA4GA1UdDwEB ++/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTgqj8ljZ9EXME66C6u ++d0yEPmcM9DANBgkqhkiG9w0BAQsFAAOCAgEAuVevuBLaV4OPaAszHQNTVfSVcOQr ++PbA56/qJYv331hgELyE03fFo8NWWWt7CgKPBjcZq91l3rhVkz1t5BXdm6ozTaw3d ++8VkswTOlMIAVRQdFGjEitpIAq5lNOo93r6kiyi9jyhXWx8bwPWz8HA2YEGGeEaIi ++1wrykXprOQ4vMMM2SZ/g6Q8CRFA3lFV96p/2O7qUpUzpvD5RtOjKkjZUbVwlKNrd ++rRT90+7iIgXr0PK3aBLXWopBGsaSpVo7Y0VPv+E6dyIvXL9G+VoDhRNCX8reU9di ++taY1BMJH/5n9hN9czulegChB8n3nHpDYT3Y+gjwN/KUD+nsa2UUeYNrEjvn8K8l7 ++lcUq/6qJ34IxD3L/DCfXCh5WAFAeDJDBlrXYFIW7pw0WwfgHJBu6haEaBQmAupVj ++yTrsJZ9/nbqkRxWbRHDxakvWOF5D8xh+UG7pWijmZeZ3Gzr9Hb4DJqPb1OG7fpYn ++Kx3upPvaJVQTA945xsMfTZDsjxtK0hzthZU4UHlG1sGQUDGpXJpuHfUzVounmdLy ++yCwzk5Iwx06MZTMQZBf9JBeW0Y3COmor6xOLRPIh80oat3df1+2IpHLlOR+Vnb5n ++wXARPbv0+Em34yaXOp/SX3z7wJl8OSngex2/DaeP0ik0biQVy96QXr8axGbqwua6 ++OV+KmalBWQewLK8= ++-----END CERTIFICATE----- ++ ++# 554153b13d2cf9ddb753bfbe1a4e0ae08d0aa4187058fe60a2b862b2e4b87bcb ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 62:f6:32:6c:e5:c4:e3:68:5c:1b:62:dd:9c:2e:9d:95 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = ES, O = FNMT-RCM, OU = Ceres, organizationIdentifier = VATES-Q2826004J, CN = AC RAIZ FNMT-RCM SERVIDORES SEGUROS ++ Validity ++ Not Before: Dec 20 09:37:33 2018 GMT ++ Not After : Dec 20 09:37:33 2043 GMT ++ Subject: C = ES, O = FNMT-RCM, OU = Ceres, organizationIdentifier = VATES-Q2826004J, CN = AC RAIZ FNMT-RCM SERVIDORES SEGUROS ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:f6:ba:57:53:c8:ca:ab:df:36:4a:52:21:e4:97: ++ d2:83:67:9e:f0:65:51:d0:5e:87:c7:47:b1:59:f2: ++ 57:47:9b:00:02:93:44:17:69:db:42:c7:b1:b2:3a: ++ 18:0e:b4:5d:8c:b3:66:5d:a1:34:f9:36:2c:49:db: ++ f3:46:fc:b3:44:69:44:13:66:fd:d7:c5:fd:af:36: ++ 4d:ce:03:4d:07:71:cf:af:6a:05:d2:a2:43:5a:0a: ++ 52:6f:01:03:4e:8e:8b ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ 01:B9:2F:EF:BF:11:86:60:F2:4F:D0:41:6E:AB:73:1F:E7:D2:6E:49 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Signature Value: ++ 30:66:02:31:00:ae:4a:e3:2b:40:c3:74:11:f2:95:ad:16:23: ++ de:4e:0c:1a:e6:5d:a5:24:5e:6b:44:7b:fc:38:e2:4f:cb:9c: ++ 45:17:11:4c:14:27:26:55:39:75:4a:03:cc:13:90:9f:92:02: ++ 31:00:fa:4a:6c:60:88:73:f3:ee:b8:98:62:a9:ce:2b:c2:d9: ++ 8a:a6:70:31:1d:af:b0:94:4c:eb:4f:c6:e3:d1:f3:62:a7:3c: ++ ff:93:2e:07:5c:49:01:67:69:12:02:72:bf:e7 + -----BEGIN CERTIFICATE----- + MIICbjCCAfOgAwIBAgIQYvYybOXE42hcG2LdnC6dlTAKBggqhkjOPQQDAzB4MQsw + CQYDVQQGEwJFUzERMA8GA1UECgwIRk5NVC1SQ00xDjAMBgNVBAsMBUNlcmVzMRgw +@@ -4025,113 +8994,97 @@ MQD6SmxgiHPz7riYYqnOK8LZiqZwMR2vsJRM60/G49HzYqc8/5MuB1xJAWdpEgJy + v+c= + -----END CERTIFICATE----- + +-# Issuer: CN=GlobalSign Root R46 O=GlobalSign nv-sa +-# Subject: CN=GlobalSign Root R46 O=GlobalSign nv-sa +-# Label: "GlobalSign Root R46" +-# Serial: 1552617688466950547958867513931858518042577 +-# MD5 Fingerprint: c4:14:30:e4:fa:66:43:94:2a:6a:1b:24:5f:19:d0:ef +-# SHA1 Fingerprint: 53:a2:b0:4b:ca:6b:d6:45:e6:39:8a:8e:c4:0d:d2:bf:77:c3:a2:90 +-# SHA256 Fingerprint: 4f:a3:12:6d:8d:3a:11:d1:c4:85:5a:4f:80:7c:ba:d6:cf:91:9d:3a:5a:88:b0:3b:ea:2c:63:72:d9:3c:40:c9 +------BEGIN CERTIFICATE----- +-MIIFWjCCA0KgAwIBAgISEdK7udcjGJ5AXwqdLdDfJWfRMA0GCSqGSIb3DQEBDAUA +-MEYxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRwwGgYD +-VQQDExNHbG9iYWxTaWduIFJvb3QgUjQ2MB4XDTE5MDMyMDAwMDAwMFoXDTQ2MDMy +-MDAwMDAwMFowRjELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYt +-c2ExHDAaBgNVBAMTE0dsb2JhbFNpZ24gUm9vdCBSNDYwggIiMA0GCSqGSIb3DQEB +-AQUAA4ICDwAwggIKAoICAQCsrHQy6LNl5brtQyYdpokNRbopiLKkHWPd08EsCVeJ +-OaFV6Wc0dwxu5FUdUiXSE2te4R2pt32JMl8Nnp8semNgQB+msLZ4j5lUlghYruQG +-vGIFAha/r6gjA7aUD7xubMLL1aa7DOn2wQL7Id5m3RerdELv8HQvJfTqa1VbkNud +-316HCkD7rRlr+/fKYIje2sGP1q7Vf9Q8g+7XFkyDRTNrJ9CG0Bwta/OrffGFqfUo +-0q3v84RLHIf8E6M6cqJaESvWJ3En7YEtbWaBkoe0G1h6zD8K+kZPTXhc+CtI4wSE +-y132tGqzZfxCnlEmIyDLPRT5ge1lFgBPGmSXZgjPjHvjK8Cd+RTyG/FWaha/LIWF +-zXg4mutCagI0GIMXTpRW+LaCtfOW3T3zvn8gdz57GSNrLNRyc0NXfeD412lPFzYE +-+cCQYDdF3uYM2HSNrpyibXRdQr4G9dlkbgIQrImwTDsHTUB+JMWKmIJ5jqSngiCN +-I/onccnfxkF0oE32kRbcRoxfKWMxWXEM2G/CtjJ9++ZdU6Z+Ffy7dXxd7Pj2Fxzs +-x2sZy/N78CsHpdlseVR2bJ0cpm4O6XkMqCNqo98bMDGfsVR7/mrLZqrcZdCinkqa +-ByFrgY/bxFn63iLABJzjqls2k+g9vXqhnQt2sQvHnf3PmKgGwvgqo6GDoLclcqUC +-4wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV +-HQ4EFgQUA1yrc4GHqMywptWU4jaWSf8FmSwwDQYJKoZIhvcNAQEMBQADggIBAHx4 +-7PYCLLtbfpIrXTncvtgdokIzTfnvpCo7RGkerNlFo048p9gkUbJUHJNOxO97k4Vg +-JuoJSOD1u8fpaNK7ajFxzHmuEajwmf3lH7wvqMxX63bEIaZHU1VNaL8FpO7XJqti +-2kM3S+LGteWygxk6x9PbTZ4IevPuzz5i+6zoYMzRx6Fcg0XERczzF2sUyQQCPtIk +-pnnpHs6i58FZFZ8d4kuaPp92CC1r2LpXFNqD6v6MVenQTqnMdzGxRBF6XLE+0xRF +-FRhiJBPSy03OXIPBNvIQtQ6IbbjhVp+J3pZmOUdkLG5NrmJ7v2B0GbhWrJKsFjLt +-rWhV/pi60zTe9Mlhww6G9kuEYO4Ne7UyWHmRVSyBQ7N0H3qqJZ4d16GLuc1CLgSk +-ZoNNiTW2bKg2SnkheCLQQrzRQDGQob4Ez8pn7fXwgNNgyYMqIgXQBztSvwyeqiv5 +-u+YfjyW6hY0XHgL+XVAEV8/+LbzvXMAaq7afJMbfc2hIkCwU9D9SGuTSyxTDYWnP +-4vkYxboznxSjBF25cfe1lNj2M8FawTSLfJvdkzrnE6JwYZ+vj+vYxXX4M2bUdGc6 +-N3ec592kD3ZDZopD8p/7DEJ4Y9HiD2971KE9dJeFt0g5QdYg/NA6s/rob8SKunE3 +-vouXsXgxT7PntgMTzlSdriVZzH81Xwj3QEUxeCp6 +------END CERTIFICATE----- +- +-# Issuer: CN=GlobalSign Root E46 O=GlobalSign nv-sa +-# Subject: CN=GlobalSign Root E46 O=GlobalSign nv-sa +-# Label: "GlobalSign Root E46" +-# Serial: 1552617690338932563915843282459653771421763 +-# MD5 Fingerprint: b5:b8:66:ed:de:08:83:e3:c9:e2:01:34:06:ac:51:6f +-# SHA1 Fingerprint: 39:b4:6c:d5:fe:80:06:eb:e2:2f:4a:bb:08:33:a0:af:db:b9:dd:84 +-# SHA256 Fingerprint: cb:b9:c4:4d:84:b8:04:3e:10:50:ea:31:a6:9f:51:49:55:d7:bf:d2:e2:c6:b4:93:01:01:9a:d6:1d:9f:50:58 +------BEGIN CERTIFICATE----- +-MIICCzCCAZGgAwIBAgISEdK7ujNu1LzmJGjFDYQdmOhDMAoGCCqGSM49BAMDMEYx +-CzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRwwGgYDVQQD +-ExNHbG9iYWxTaWduIFJvb3QgRTQ2MB4XDTE5MDMyMDAwMDAwMFoXDTQ2MDMyMDAw +-MDAwMFowRjELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2Ex +-HDAaBgNVBAMTE0dsb2JhbFNpZ24gUm9vdCBFNDYwdjAQBgcqhkjOPQIBBgUrgQQA +-IgNiAAScDrHPt+ieUnd1NPqlRqetMhkytAepJ8qUuwzSChDH2omwlwxwEwkBjtjq +-R+q+soArzfwoDdusvKSGN+1wCAB16pMLey5SnCNoIwZD7JIvU4Tb+0cUB+hflGdd +-yXqBPCCjQjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud +-DgQWBBQxCpCPtsad0kRLgLWi5h+xEk8blTAKBggqhkjOPQQDAwNoADBlAjEA31SQ +-7Zvvi5QCkxeCmb6zniz2C5GMn0oUsfZkvLtoURMMA/cVi4RguYv/Uo7njLwcAjA8 +-+RHUjE7AwWHCFUyqqx0LMV87HOIAl0Qx5v5zli/altP+CAezNIm8BZ/3Hobui3A= +------END CERTIFICATE----- +- +-# Issuer: CN=GLOBALTRUST 2020 O=e-commerce monitoring GmbH +-# Subject: CN=GLOBALTRUST 2020 O=e-commerce monitoring GmbH +-# Label: "GLOBALTRUST 2020" +-# Serial: 109160994242082918454945253 +-# MD5 Fingerprint: 8a:c7:6f:cb:6d:e3:cc:a2:f1:7c:83:fa:0e:78:d7:e8 +-# SHA1 Fingerprint: d0:67:c1:13:51:01:0c:aa:d0:c7:6a:65:37:31:16:26:4f:53:71:a2 +-# SHA256 Fingerprint: 9a:29:6a:51:82:d1:d4:51:a2:e3:7f:43:9b:74:da:af:a2:67:52:33:29:f9:0f:9a:0d:20:07:c3:34:e2:3c:9a +------BEGIN CERTIFICATE----- +-MIIFgjCCA2qgAwIBAgILWku9WvtPilv6ZeUwDQYJKoZIhvcNAQELBQAwTTELMAkG +-A1UEBhMCQVQxIzAhBgNVBAoTGmUtY29tbWVyY2UgbW9uaXRvcmluZyBHbWJIMRkw +-FwYDVQQDExBHTE9CQUxUUlVTVCAyMDIwMB4XDTIwMDIxMDAwMDAwMFoXDTQwMDYx +-MDAwMDAwMFowTTELMAkGA1UEBhMCQVQxIzAhBgNVBAoTGmUtY29tbWVyY2UgbW9u +-aXRvcmluZyBHbWJIMRkwFwYDVQQDExBHTE9CQUxUUlVTVCAyMDIwMIICIjANBgkq +-hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAri5WrRsc7/aVj6B3GyvTY4+ETUWiD59b +-RatZe1E0+eyLinjF3WuvvcTfk0Uev5E4C64OFudBc/jbu9G4UeDLgztzOG53ig9Z +-YybNpyrOVPu44sB8R85gfD+yc/LAGbaKkoc1DZAoouQVBGM+uq/ufF7MpotQsjj3 +-QWPKzv9pj2gOlTblzLmMCcpL3TGQlsjMH/1WljTbjhzqLL6FLmPdqqmV0/0plRPw +-yJiT2S0WR5ARg6I6IqIoV6Lr/sCMKKCmfecqQjuCgGOlYx8ZzHyyZqjC0203b+J+ +-BlHZRYQfEs4kUmSFC0iAToexIiIwquuuvuAC4EDosEKAA1GqtH6qRNdDYfOiaxaJ +-SaSjpCuKAsR49GiKweR6NrFvG5Ybd0mN1MkGco/PU+PcF4UgStyYJ9ORJitHHmkH +-r96i5OTUawuzXnzUJIBHKWk7buis/UDr2O1xcSvy6Fgd60GXIsUf1DnQJ4+H4xj0 +-4KlGDfV0OoIu0G4skaMxXDtG6nsEEFZegB31pWXogvziB4xiRfUg3kZwhqG8k9Me +-dKZssCz3AwyIDMvUclOGvGBG85hqwvG/Q/lwIHfKN0F5VVJjjVsSn8VoxIidrPIw +-q7ejMZdnrY8XD2zHc+0klGvIg5rQmjdJBKuxFshsSUktq6HQjJLyQUp5ISXbY9e2 +-nKd+Qmn7OmMCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC +-AQYwHQYDVR0OBBYEFNwuH9FhN3nkq9XVsxJxaD1qaJwiMB8GA1UdIwQYMBaAFNwu +-H9FhN3nkq9XVsxJxaD1qaJwiMA0GCSqGSIb3DQEBCwUAA4ICAQCR8EICaEDuw2jA +-VC/f7GLDw56KoDEoqoOOpFaWEhCGVrqXctJUMHytGdUdaG/7FELYjQ7ztdGl4wJC +-XtzoRlgHNQIw4Lx0SsFDKv/bGtCwr2zD/cuz9X9tAy5ZVp0tLTWMstZDFyySCstd +-6IwPS3BD0IL/qMy/pJTAvoe9iuOTe8aPmxadJ2W8esVCgmxcB9CpwYhgROmYhRZf +-+I/KARDOJcP5YBugxZfD0yyIMaK9MOzQ0MAS8cE54+X1+NZK3TTN+2/BT+MAi1bi +-kvcoskJ3ciNnxz8RFbLEAwW+uxF7Cr+obuf/WEPPm2eggAe2HcqtbepBEX4tdJP7 +-wry+UUTF72glJ4DjyKDUEuzZpTcdN3y0kcra1LGWge9oXHYQSa9+pTeAsRxSvTOB +-TI/53WXZFM2KJVj04sWDpQmQ1GwUY7VA3+vA/MRYfg0UFodUJ25W5HCEuGwyEn6C +-MUO+1918oa2u1qsgEu8KwxCMSZY13At1XrFP1U80DhEgB3VDRemjEdqso5nCtnkn +-4rnvyOL2NSl6dPrFf4IFYqYK6miyeUcGbvJXqBUzxvd4Sj1Ce2t+/vdG6tHrju+I +-aFvowdlxfv1k7/9nR4hYJS8+hge9+6jlgqispdNpQ80xiEmEU5LAsTkbOYMBMMTy +-qfrQA71yN2BWHzZ8vTmR9W0Nv3vXkg== +------END CERTIFICATE----- +- +-# Issuer: CN=ANF Secure Server Root CA O=ANF Autoridad de Certificacion OU=ANF CA Raiz +-# Subject: CN=ANF Secure Server Root CA O=ANF Autoridad de Certificacion OU=ANF CA Raiz +-# Label: "ANF Secure Server Root CA" +-# Serial: 996390341000653745 +-# MD5 Fingerprint: 26:a6:44:5a:d9:af:4e:2f:b2:1d:b6:65:b0:4e:e8:96 +-# SHA1 Fingerprint: 5b:6e:68:d0:cc:15:b6:a0:5f:1e:c1:5f:ae:02:fc:6b:2f:5d:6f:74 +-# SHA256 Fingerprint: fb:8f:ec:75:91:69:b9:10:6b:1e:51:16:44:c6:18:c5:13:04:37:3f:6c:06:43:08:8d:8b:ef:fd:1b:99:75:99 ++# fb8fec759169b9106b1e511644c618c51304373f6c0643088d8beffd1b997599 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: 996390341000653745 (0xdd3e3bc6cf96bb1) ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: serialNumber = G63287510, C = ES, O = ANF Autoridad de Certificacion, OU = ANF CA Raiz, CN = ANF Secure Server Root CA ++ Validity ++ Not Before: Sep 4 10:00:38 2019 GMT ++ Not After : Aug 30 10:00:38 2039 GMT ++ Subject: serialNumber = G63287510, C = ES, O = ANF Autoridad de Certificacion, OU = ANF CA Raiz, CN = ANF Secure Server Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:db:eb:6b:2b:e6:64:54:95:82:90:a3:72:a4:19: ++ 01:9d:9c:0b:81:5f:73:49:ba:a7:ac:f3:04:4e:7b: ++ 96:0b:ec:11:e0:5b:a6:1c:ce:1b:d2:0d:83:1c:2b: ++ b8:9e:1d:7e:45:32:60:0f:07:e9:77:58:7e:9f:6a: ++ c8:61:4e:b6:26:c1:4c:8d:ff:4c:ef:34:b2:1f:65: ++ d8:b9:78:f5:ad:a9:71:b9:ef:4f:58:1d:a5:de:74: ++ 20:97:a1:ed:68:4c:de:92:17:4b:bc:ab:ff:65:9a: ++ 9e:fb:47:d9:57:72:f3:09:a1:ae:76:44:13:6e:9c: ++ 2d:44:39:bc:f9:c7:3b:a4:58:3d:41:bd:b4:c2:49: ++ a3:c8:0d:d2:97:2f:07:65:52:00:a7:6e:c8:af:68: ++ ec:f4:14:96:b6:57:1f:56:c3:39:9f:2b:6d:e4:f3: ++ 3e:f6:35:64:da:0c:1c:a1:84:4b:2f:4b:4b:e2:2c: ++ 24:9d:6d:93:40:eb:b5:23:8e:32:ca:6f:45:d3:a8: ++ 89:7b:1e:cf:1e:fa:5b:43:8b:cd:cd:a8:0f:6a:ca: ++ 0c:5e:b9:9e:47:8f:f0:d9:b6:0a:0b:58:65:17:33: ++ b9:23:e4:77:19:7d:cb:4a:2e:92:7b:4f:2f:10:77: ++ b1:8d:2f:68:9c:62:cc:e0:50:f8:ec:91:a7:54:4c: ++ 57:09:d5:76:63:c5:e8:65:1e:ee:6d:6a:cf:09:9d: ++ fa:7c:4f:ad:60:08:fd:56:99:0f:15:2c:7b:a9:80: ++ ab:8c:61:8f:4a:07:76:42:de:3d:f4:dd:b2:24:33: ++ 5b:b8:b5:a3:44:c9:ac:7f:77:3c:1d:23:ec:82:a9: ++ a6:e2:c8:06:4c:02:fe:ac:5c:99:99:0b:2f:10:8a: ++ a6:f4:7f:d5:87:74:0d:59:49:45:f6:f0:71:5c:39: ++ 29:d6:bf:4a:23:8b:f5:5f:01:63:d2:87:73:28:b5: ++ 4b:0a:f5:f8:ab:82:2c:7e:73:25:32:1d:0b:63:0a: ++ 17:81:00:ff:b6:76:5e:e7:b4:b1:40:ca:21:bb:d5: ++ 80:51:e5:48:52:67:2c:d2:61:89:07:0d:0f:ce:42: ++ 77:c0:44:73:9c:44:50:a0:db:10:0a:2d:95:1c:81: ++ af:e4:1c:e5:14:1e:f1:36:41:01:02:2f:7d:73:a7: ++ de:42:cc:4c:e9:89:0d:56:f7:9f:91:d4:03:c6:6c: ++ c9:8f:db:d8:1c:e0:40:98:5d:66:99:98:80:6e:2d: ++ ff:01:c5:ce:cb:46:1f:ac:02:c6:43:e6:ae:a2:84: ++ 3c:c5:4e:1e:3d:6d:c9:14:4c:e3:2e:41:bb:ca:39: ++ bf:36:3c:2a:19:aa:41:87:4e:a5:ce:4b:32:79:dd: ++ 90:49:7f ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Authority Key Identifier: ++ 9C:5F:D0:6C:63:A3:5F:93:CA:93:98:08:AD:8C:87:A5:2C:5C:C1:37 ++ X509v3 Subject Key Identifier: ++ 9C:5F:D0:6C:63:A3:5F:93:CA:93:98:08:AD:8C:87:A5:2C:5C:C1:37 ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: sha256WithRSAEncryption ++ Signature Value: ++ 4e:1e:b9:8a:c6:a0:98:3f:6e:c3:69:c0:6a:5c:49:52:ac:cb: ++ 2b:5d:78:38:c1:d5:54:84:9f:93:f0:87:19:3d:2c:66:89:eb: ++ 0d:42:fc:cc:f0:75:85:3f:8b:f4:80:5d:79:e5:17:67:bd:35: ++ 82:e2:f2:3c:8e:7d:5b:36:cb:5a:80:00:29:f2:ce:2b:2c:f1: ++ 8f:aa:6d:05:93:6c:72:c7:56:eb:df:50:23:28:e5:45:10:3d: ++ e8:67:a3:af:0e:55:0f:90:09:62:ef:4b:59:a2:f6:53:f1:c0: ++ 35:e4:2f:c1:24:bd:79:2f:4e:20:22:3b:fd:1a:20:b0:a4:0e: ++ 2c:70:ed:74:3f:b8:13:95:06:51:c8:e8:87:26:ca:a4:5b:6a: ++ 16:21:92:dd:73:60:9e:10:18:de:3c:81:ea:e8:18:c3:7c:89: ++ f2:8b:50:3e:bd:11:e2:15:03:a8:36:7d:33:01:6c:48:15:d7: ++ 88:90:99:04:c5:cc:e6:07:f4:bc:f4:90:ed:13:e2:ea:8b:c3: ++ 8f:a3:33:0f:c1:29:4c:13:4e:da:15:56:71:73:72:82:50:f6: ++ 9a:33:7c:a2:b1:a8:1a:34:74:65:5c:ce:d1:eb:ab:53:e0:1a: ++ 80:d8:ea:3a:49:e4:26:30:9b:e5:1c:8a:a8:a9:15:32:86:99: ++ 92:0a:10:23:56:12:e0:f6:ce:4c:e2:bb:be:db:8d:92:73:01: ++ 66:2f:62:3e:b2:72:27:45:36:ed:4d:56:e3:97:99:ff:3a:35: ++ 3e:a5:54:4a:52:59:4b:60:db:ee:fe:78:11:7f:4a:dc:14:79: ++ 60:b6:6b:64:03:db:15:83:e1:a2:be:f6:23:97:50:f0:09:33: ++ 36:a7:71:96:25:f3:b9:42:7d:db:38:3f:2c:58:ac:e8:42:e1: ++ 0e:d8:d3:3b:4c:2e:82:e9:83:2e:6b:31:d9:dd:47:86:4f:6d: ++ 97:91:2e:4f:e2:28:71:35:16:d1:f2:73:fe:25:2b:07:47:24: ++ 63:27:c8:f8:f6:d9:6b:fc:12:31:56:08:c0:53:42:af:9c:d0: ++ 33:7e:fc:06:f0:31:44:03:14:f1:58:ea:f2:6a:0d:a9:11:b2: ++ 83:be:c5:1a:bf:07:ea:59:dc:a3:88:35:ef:9c:76:32:3c:4d: ++ 06:22:ce:15:e5:dd:9e:d8:8f:da:de:d2:c4:39:e5:17:81:cf: ++ 38:47:eb:7f:88:6d:59:1b:df:9f:42:14:ae:7e:cf:a8:b0:66: ++ 65:da:37:af:9f:aa:3d:ea:28:b6:de:d5:31:58:16:82:5b:ea: ++ bb:19:75:02:73:1a:ca:48:1a:21:93:90:0a:8e:93:84:a7:7d: ++ 3b:23:18:92:89:a0:8d:ac + -----BEGIN CERTIFICATE----- + MIIF7zCCA9egAwIBAgIIDdPjvGz5a7EwDQYJKoZIhvcNAQELBQAwgYQxEjAQBgNV + BAUTCUc2MzI4NzUxMDELMAkGA1UEBhMCRVMxJzAlBgNVBAoTHkFORiBBdXRvcmlk +@@ -4167,77 +9120,153 @@ MjxNBiLOFeXdntiP2t7SxDnlF4HPOEfrf4htWRvfn0IUrn7PqLBmZdo3r5+qPeoo + tt7VMVgWglvquxl1AnMaykgaIZOQCo6ThKd9OyMYkomgjaw= + -----END CERTIFICATE----- + +-# Issuer: CN=Certum EC-384 CA O=Asseco Data Systems S.A. OU=Certum Certification Authority +-# Subject: CN=Certum EC-384 CA O=Asseco Data Systems S.A. OU=Certum Certification Authority +-# Label: "Certum EC-384 CA" +-# Serial: 160250656287871593594747141429395092468 +-# MD5 Fingerprint: b6:65:b3:96:60:97:12:a1:ec:4e:e1:3d:a3:c6:c9:f1 +-# SHA1 Fingerprint: f3:3e:78:3c:ac:df:f4:a2:cc:ac:67:55:69:56:d7:e5:16:3c:e1:ed +-# SHA256 Fingerprint: 6b:32:80:85:62:53:18:aa:50:d1:73:c9:8d:8b:da:09:d5:7e:27:41:3d:11:4c:f7:87:a0:f5:d0:6c:03:0c:f6 ++# e74fbda55bd564c473a36b441aa799c8a68e077440e8288b9fa1e50e4bbaca11 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ d6:5d:9b:b3:78:81:2e:eb ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = JP, O = "SECOM Trust Systems CO.,LTD.", CN = Security Communication ECC RootCA1 ++ Validity ++ Not Before: Jun 16 05:15:28 2016 GMT ++ Not After : Jan 18 05:15:28 2038 GMT ++ Subject: C = JP, O = "SECOM Trust Systems CO.,LTD.", CN = Security Communication ECC RootCA1 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:a4:a5:6f:60:03:03:c3:bd:31:f4:d3:17:9c:2b: ++ 84:75:ac:e5:fd:3d:57:6e:d7:63:bf:e6:04:89:92: ++ 8e:81:9c:e3:e9:47:6e:ca:90:12:c8:13:e0:a7:9d: ++ f7:65:74:1f:6c:10:b2:e8:e4:e9:ef:6d:85:32:99: ++ 44:b1:5e:fd:cc:76:10:d8:5b:bd:a2:c6:f9:d6:42: ++ e4:57:76:dc:90:c2:35:a9:4b:88:3c:12:47:6d:5c: ++ ff:49:4f:1a:4a:50:b1 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 86:1C:E7:FE:2D:A5:4A:8B:08:FE:28:11:FA:BE:A3:66:F8:60:59:2F ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: ecdsa-with-SHA384 ++ Signature Value: ++ 30:65:02:30:15:5d:42:3d:fc:b6:ee:f7:3b:b1:36:e8:9e:f6: ++ c4:46:28:49:33:d0:58:43:2a:63:29:cc:4d:b1:b4:7a:a2:b9: ++ 0d:38:a5:5d:48:2a:fd:cb:b2:73:5d:a3:88:08:c7:0c:02:31: ++ 00:c0:ab:2d:0e:6d:ed:18:a2:db:53:e9:25:db:55:08:e0:50: ++ cc:df:44:61:16:82:ab:49:b0:b2:81:ec:73:87:78:b4:4c:b2: ++ 62:1b:12:fa:16:4d:25:4b:63:bd:1e:37:d9 + -----BEGIN CERTIFICATE----- +-MIICZTCCAeugAwIBAgIQeI8nXIESUiClBNAt3bpz9DAKBggqhkjOPQQDAzB0MQsw +-CQYDVQQGEwJQTDEhMB8GA1UEChMYQXNzZWNvIERhdGEgU3lzdGVtcyBTLkEuMScw +-JQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxGTAXBgNVBAMT +-EENlcnR1bSBFQy0zODQgQ0EwHhcNMTgwMzI2MDcyNDU0WhcNNDMwMzI2MDcyNDU0 +-WjB0MQswCQYDVQQGEwJQTDEhMB8GA1UEChMYQXNzZWNvIERhdGEgU3lzdGVtcyBT +-LkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxGTAX +-BgNVBAMTEENlcnR1bSBFQy0zODQgQ0EwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATE +-KI6rGFtqvm5kN2PkzeyrOvfMobgOgknXhimfoZTy42B4mIF4Bk3y7JoOV2CDn7Tm +-Fy8as10CW4kjPMIRBSqniBMY81CE1700LCeJVf/OTOffph8oxPBUw7l8t1Ot68Kj +-QjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFI0GZnQkdjrzife81r1HfS+8 +-EF9LMA4GA1UdDwEB/wQEAwIBBjAKBggqhkjOPQQDAwNoADBlAjADVS2m5hjEfO/J +-UG7BJw+ch69u1RsIGL2SKcHvlJF40jocVYli5RsJHrpka/F2tNQCMQC0QoSZ/6vn +-nvuRlydd3LBbMHHOXjgaatkl5+r3YZJW+OraNsKHZZYuciUvf9/DE8k= ++MIICODCCAb6gAwIBAgIJANZdm7N4gS7rMAoGCCqGSM49BAMDMGExCzAJBgNVBAYT ++AkpQMSUwIwYDVQQKExxTRUNPTSBUcnVzdCBTeXN0ZW1zIENPLixMVEQuMSswKQYD ++VQQDEyJTZWN1cml0eSBDb21tdW5pY2F0aW9uIEVDQyBSb290Q0ExMB4XDTE2MDYx ++NjA1MTUyOFoXDTM4MDExODA1MTUyOFowYTELMAkGA1UEBhMCSlAxJTAjBgNVBAoT ++HFNFQ09NIFRydXN0IFN5c3RlbXMgQ08uLExURC4xKzApBgNVBAMTIlNlY3VyaXR5 ++IENvbW11bmljYXRpb24gRUNDIFJvb3RDQTEwdjAQBgcqhkjOPQIBBgUrgQQAIgNi ++AASkpW9gAwPDvTH00xecK4R1rOX9PVdu12O/5gSJko6BnOPpR27KkBLIE+Cnnfdl ++dB9sELLo5OnvbYUymUSxXv3MdhDYW72ixvnWQuRXdtyQwjWpS4g8EkdtXP9JTxpK ++ULGjQjBAMB0GA1UdDgQWBBSGHOf+LaVKiwj+KBH6vqNm+GBZLzAOBgNVHQ8BAf8E ++BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjAVXUI9/Lbu ++9zuxNuie9sRGKEkz0FhDKmMpzE2xtHqiuQ04pV1IKv3LsnNdo4gIxwwCMQDAqy0O ++be0YottT6SXbVQjgUMzfRGEWgqtJsLKB7HOHeLRMsmIbEvoWTSVLY70eN9k= + -----END CERTIFICATE----- + +-# Issuer: CN=Certum Trusted Root CA O=Asseco Data Systems S.A. OU=Certum Certification Authority +-# Subject: CN=Certum Trusted Root CA O=Asseco Data Systems S.A. OU=Certum Certification Authority +-# Label: "Certum Trusted Root CA" +-# Serial: 40870380103424195783807378461123655149 +-# MD5 Fingerprint: 51:e1:c2:e7:fe:4c:84:af:59:0e:2f:f4:54:6f:ea:29 +-# SHA1 Fingerprint: c8:83:44:c0:18:ae:9f:cc:f1:87:b7:8f:22:d1:c5:d7:45:84:ba:e5 +-# SHA256 Fingerprint: fe:76:96:57:38:55:77:3e:37:a9:5e:7a:d4:d9:cc:96:c3:01:57:c1:5d:31:76:5b:a9:b1:57:04:e1:ae:78:fd +------BEGIN CERTIFICATE----- +-MIIFwDCCA6igAwIBAgIQHr9ZULjJgDdMBvfrVU+17TANBgkqhkiG9w0BAQ0FADB6 +-MQswCQYDVQQGEwJQTDEhMB8GA1UEChMYQXNzZWNvIERhdGEgU3lzdGVtcyBTLkEu +-MScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxHzAdBgNV +-BAMTFkNlcnR1bSBUcnVzdGVkIFJvb3QgQ0EwHhcNMTgwMzE2MTIxMDEzWhcNNDMw +-MzE2MTIxMDEzWjB6MQswCQYDVQQGEwJQTDEhMB8GA1UEChMYQXNzZWNvIERhdGEg +-U3lzdGVtcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRo +-b3JpdHkxHzAdBgNVBAMTFkNlcnR1bSBUcnVzdGVkIFJvb3QgQ0EwggIiMA0GCSqG +-SIb3DQEBAQUAA4ICDwAwggIKAoICAQDRLY67tzbqbTeRn06TpwXkKQMlzhyC93yZ +-n0EGze2jusDbCSzBfN8pfktlL5On1AFrAygYo9idBcEq2EXxkd7fO9CAAozPOA/q +-p1x4EaTByIVcJdPTsuclzxFUl6s1wB52HO8AU5853BSlLCIls3Jy/I2z5T4IHhQq +-NwuIPMqw9MjCoa68wb4pZ1Xi/K1ZXP69VyywkI3C7Te2fJmItdUDmj0VDT06qKhF +-8JVOJVkdzZhpu9PMMsmN74H+rX2Ju7pgE8pllWeg8xn2A1bUatMn4qGtg/BKEiJ3 +-HAVz4hlxQsDsdUaakFjgao4rpUYwBI4Zshfjvqm6f1bxJAPXsiEodg42MEx51UGa +-mqi4NboMOvJEGyCI98Ul1z3G4z5D3Yf+xOr1Uz5MZf87Sst4WmsXXw3Hw09Omiqi +-7VdNIuJGmj8PkTQkfVXjjJU30xrwCSss0smNtA0Aq2cpKNgB9RkEth2+dv5yXMSF +-ytKAQd8FqKPVhJBPC/PgP5sZ0jeJP/J7UhyM9uH3PAeXjA6iWYEMspA90+NZRu0P +-qafegGtaqge2Gcu8V/OXIXoMsSt0Puvap2ctTMSYnjYJdmZm/Bo/6khUHL4wvYBQ +-v3y1zgD2DGHZ5yQD4OMBgQ692IU0iL2yNqh7XAjlRICMb/gv1SHKHRzQ+8S1h9E6 +-Tsd2tTVItQIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSM+xx1 +-vALTn04uSNn5YFSqxLNP+jAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQENBQAD +-ggIBAEii1QALLtA/vBzVtVRJHlpr9OTy4EA34MwUe7nJ+jW1dReTagVphZzNTxl4 +-WxmB82M+w85bj/UvXgF2Ez8sALnNllI5SW0ETsXpD4YN4fqzX4IS8TrOZgYkNCvo +-zMrnadyHncI013nR03e4qllY/p0m+jiGPp2Kh2RX5Rc64vmNueMzeMGQ2Ljdt4NR +-5MTMI9UGfOZR0800McD2RrsLrfw9EAUqO0qRJe6M1ISHgCq8CYyqOhNf6DR5UMEQ +-GfnTKB7U0VEwKbOukGfWHwpjscWpxkIxYxeU72nLL/qMFH3EQxiJ2fAyQOaA4kZf +-5ePBAFmo+eggvIksDkc0C+pXwlM2/KfUrzHN/gLldfq5Jwn58/U7yn2fqSLLiMmq +-0Uc9NneoWWRrJ8/vJ8HjJLWG965+Mk2weWjROeiQWMODvA8s1pfrzgzhIMfatz7D +-P78v3DSk+yshzWePS/Tj6tQ/50+6uaWTRRxmHyH6ZF5v4HaUMst19W7l9o/HuKTM +-qJZ9ZPskWkoDbGs4xugDQ5r3V7mzKWmTOPQD8rv7gmsHINFSH5pkAnuYZttcTVoP +-0ISVoDwUQwbKytu4QTbaakRnh6+v40URFWkIsr4WOZckbxJF0WddCajJFdr60qZf +-E2Efv4WstK2tBZQIgx51F9NxO5NQI1mg7TyRVJ12AMXDuDjb +------END CERTIFICATE----- +- +-# Issuer: CN=TunTrust Root CA O=Agence Nationale de Certification Electronique +-# Subject: CN=TunTrust Root CA O=Agence Nationale de Certification Electronique +-# Label: "TunTrust Root CA" +-# Serial: 108534058042236574382096126452369648152337120275 +-# MD5 Fingerprint: 85:13:b9:90:5b:36:5c:b6:5e:b8:5a:f8:e0:31:57:b4 +-# SHA1 Fingerprint: cf:e9:70:84:0f:e0:73:0f:9d:f6:0c:7f:2c:4b:ee:20:46:34:9c:bb +-# SHA256 Fingerprint: 2e:44:10:2a:b5:8c:b8:54:19:45:1c:8e:19:d9:ac:f3:66:2c:af:bc:61:4b:6a:53:96:0a:30:f7:d0:e2:eb:41 ++# 2e44102ab58cb85419451c8e19d9acf3662cafbc614b6a53960a30f7d0e2eb41 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 13:02:d5:e2:40:4c:92:46:86:16:67:5d:b4:bb:bb:b2:6b:3e:fc:13 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = TN, O = Agence Nationale de Certification Electronique, CN = TunTrust Root CA ++ Validity ++ Not Before: Apr 26 08:57:56 2019 GMT ++ Not After : Apr 26 08:57:56 2044 GMT ++ Subject: C = TN, O = Agence Nationale de Certification Electronique, CN = TunTrust Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:c3:cd:d3:fc:bd:04:53:dd:0c:20:3a:d5:88:2e: ++ 05:4b:41:f5:83:82:7e:f7:59:9f:9e:9e:63:e8:73: ++ da:f6:06:a9:4f:1f:b4:f9:0b:1f:39:8c:9a:20:d0: ++ 7e:06:d4:ec:34:d9:86:bc:75:5b:87:88:f0:d2:d9: ++ d4:a3:0a:b2:6c:1b:eb:49:2c:3e:ac:5d:d8:94:03: ++ a0:ec:34:e5:30:c4:35:7d:fb:26:4d:1b:6e:30:54: ++ d8:f5:80:45:9c:39:ad:9c:c9:25:04:4d:9a:90:3e: ++ 4e:40:6e:8a:6b:cd:29:67:c6:cc:2d:e0:74:e8:05: ++ 57:0a:48:50:fa:7a:43:da:7e:ec:5b:9a:0e:62:76: ++ fe:ea:9d:1d:85:72:ec:11:bb:35:e8:1f:27:bf:c1: ++ a1:c7:bb:48:16:dd:56:d7:cc:4e:a0:e1:b9:ac:db: ++ d5:83:19:1a:85:d1:94:97:d7:ca:a3:65:0b:f3:38: ++ f9:02:ae:dd:f6:67:cf:c9:3f:f5:8a:2c:47:1a:99: ++ 6f:05:0d:fd:d0:1d:82:31:fc:29:cc:00:58:97:91: ++ 4c:80:00:1c:33:85:96:2f:cb:41:c2:8b:10:84:c3: ++ 09:24:89:1f:b5:0f:d9:d9:77:47:18:92:94:60:5c: ++ c7:99:03:3c:fe:f7:95:a7:7d:50:a1:80:c2:a9:83: ++ ad:58:96:55:21:db:86:59:d4:af:c6:bc:dd:81:6e: ++ 07:db:60:62:fe:ec:10:6e:da:68:01:f4:83:1b:a9: ++ 3e:a2:5b:23:d7:64:c6:df:dc:a2:7d:d8:4b:ba:82: ++ d2:51:f8:66:bf:06:46:e4:79:2a:26:36:79:8f:1f: ++ 4e:99:1d:b2:8f:0c:0e:1c:ff:c9:5d:c0:fd:90:10: ++ a6:b1:37:f3:cd:3a:24:6e:b4:85:90:bf:80:b9:0c: ++ 8c:d5:9b:d6:c8:f1:56:3f:1a:80:89:7a:a9:e2:1b: ++ 32:51:2c:3e:f2:df:7b:f6:5d:7a:29:19:8e:e5:c8: ++ bd:36:71:8b:5d:4c:c2:1d:3f:ad:58:a2:cf:3d:70: ++ 4d:a6:50:98:25:dc:23:f9:b8:58:41:08:71:bf:4f: ++ b8:84:a0:8f:00:54:15:fc:91:6d:58:a7:96:3b:eb: ++ 4b:96:27:cd:6b:a2:a1:86:ac:0d:7c:54:e6:66:4c: ++ 66:5f:90:be:21:9a:02:46:2d:e4:83:c2:80:b9:cf: ++ 4b:3e:e8:7f:3c:01:ec:8f:5e:cd:7f:d2:28:42:01: ++ 95:8a:e2:97:3d:10:21:7d:f6:9d:1c:c5:34:a1:ec: ++ 2c:0e:0a:52:2c:12:55:70:24:3d:cb:c2:14:35:43: ++ 5d:27:4e:be:c0:bd:aa:7c:96:e7:fc:9e:61:ad:44: ++ d3:00:97 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 06:9A:9B:1F:53:7D:F1:F5:A4:C8:D3:86:3E:A1:73:59:B4:F7:44:21 ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ 06:9A:9B:1F:53:7D:F1:F5:A4:C8:D3:86:3E:A1:73:59:B4:F7:44:21 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ Signature Value: ++ aa:05:6e:b6:dd:15:c9:bf:b3:c6:20:f6:06:47:b0:86:93:25: ++ d3:8d:b9:c8:00:3f:97:f5:52:27:88:71:c9:74:fd:eb:ca:64: ++ db:5b:ef:1e:5d:ba:bf:d1:eb:ee:5c:69:ba:16:c8:f3:b9:8f: ++ d3:36:2e:40:49:07:0d:59:de:8b:10:b0:49:05:e2:ff:91:3f: ++ 4b:b7:dd:02:8e:f8:81:28:5c:cc:dc:6d:af:5f:14:9c:7d:58: ++ 78:0d:f6:80:09:b9:e9:0e:97:29:19:b8:b7:eb:f8:16:cb:55: ++ 12:e4:c6:7d:bb:c4:ec:f8:b5:1c:4e:3e:67:bf:c5:5f:1b:6d: ++ 6d:47:28:aa:04:58:61:d6:76:bf:22:7f:d0:07:6a:a7:64:53: ++ f0:97:8d:9d:80:3f:bb:c1:07:db:65:af:e6:9b:32:9a:c3:54: ++ 93:c4:1c:08:c3:44:fb:7b:63:11:43:d1:6a:1a:61:6a:79:6d: ++ 90:4f:29:8e:47:05:c1:12:69:69:d6:c6:36:31:e1:fc:fa:80: ++ ba:5c:4f:c4:eb:b7:32:ac:f8:75:61:17:d7:10:19:b9:f1:d2: ++ 09:ef:7a:42:9d:5b:5a:0b:d4:c6:95:4e:2a:ce:ff:07:d7:4f: ++ 7e:18:06:88:f1:19:b5:d9:98:bb:ae:71:c4:1c:e7:74:59:58: ++ ef:0c:89:cf:8b:1f:75:93:1a:04:14:92:48:50:a9:eb:57:29: ++ 00:16:e3:36:1c:c8:f8:bf:f0:33:d5:41:0f:c4:cc:3c:dd:e9: ++ 33:43:01:91:10:2b:1e:d1:b9:5d:cd:32:19:8b:8f:8c:20:77: ++ d7:22:c4:42:dc:84:16:9b:25:6d:e8:b4:55:71:7f:b0:7c:b3: ++ d3:71:49:b9:cf:52:a4:04:3f:dc:3d:a0:bb:af:33:9e:0a:30: ++ 60:8e:db:9d:5d:94:a8:bd:60:e7:62:80:76:81:83:0c:8c:cc: ++ 30:46:49:e2:0c:d2:a8:af:eb:61:71:ef:e7:22:62:a9:f7:5c: ++ 64:6c:9f:16:8c:67:36:27:45:f5:09:7b:bf:f6:10:0a:f1:b0: ++ 8d:54:43:8c:04:ba:a3:3f:ef:e2:35:c7:f9:74:e0:6f:34:41: ++ d0:bf:73:65:57:20:f9:9b:67:7a:66:68:24:4e:80:65:bd:10: ++ 99:06:59:f2:65:af:b8:c6:47:bb:fd:90:78:8b:41:73:2e:af: ++ 55:1f:dc:3b:92:72:6e:84:d3:d0:61:4c:0d:cc:76:57:e2:2d: ++ 85:22:15:36:0d:eb:01:9d:eb:d8:eb:c4:84:99:fb:c0:0c:cc: ++ 32:e8:e3:77:da:83:44:8b:9e:55:28:c0:8b:58:d3:90:3e:4e: ++ 1b:00:f1:15:ad:83:2b:9a + -----BEGIN CERTIFICATE----- + MIIFszCCA5ugAwIBAgIUEwLV4kBMkkaGFmddtLu7sms+/BMwDQYJKoZIhvcNAQEL + BQAwYTELMAkGA1UEBhMCVE4xNzA1BgNVBAoMLkFnZW5jZSBOYXRpb25hbGUgZGUg +@@ -4272,66 +9301,1582 @@ u/2QeItBcy6vVR/cO5JyboTT0GFMDcx2V+IthSIVNg3rAZ3r2OvEhJn7wAzMMujj + d9qDRIueVSjAi1jTkD5OGwDxFa2DK5o= + -----END CERTIFICATE----- + +-# Issuer: CN=HARICA TLS RSA Root CA 2021 O=Hellenic Academic and Research Institutions CA +-# Subject: CN=HARICA TLS RSA Root CA 2021 O=Hellenic Academic and Research Institutions CA +-# Label: "HARICA TLS RSA Root CA 2021" +-# Serial: 76817823531813593706434026085292783742 +-# MD5 Fingerprint: 65:47:9b:58:86:dd:2c:f0:fc:a2:84:1f:1e:96:c4:91 +-# SHA1 Fingerprint: 02:2d:05:82:fa:88:ce:14:0c:06:79:de:7f:14:10:e9:45:d7:a5:6d +-# SHA256 Fingerprint: d9:5d:0e:8e:da:79:52:5b:f9:be:b1:1b:14:d2:10:0d:32:94:98:5f:0c:62:d9:fa:bd:9c:d9:99:ec:cb:7b:1d ++# 30fbba2c32238e2a98547af97931e550428b9b3f1c8eeb6633dcfa86c5b27dd3 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 6e:6a:bc:59:aa:53:be:98:39:67:a2:d2:6b:a4:3b:e6:6d:1c:d6:da ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = CN, O = "iTrusChina Co.,Ltd.", CN = vTrus ECC Root CA ++ Validity ++ Not Before: Jul 31 07:26:44 2018 GMT ++ Not After : Jul 31 07:26:44 2043 GMT ++ Subject: C = CN, O = "iTrusChina Co.,Ltd.", CN = vTrus ECC Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:65:50:4a:ae:8c:79:96:4a:aa:1c:08:c3:a3:a2: ++ cd:fe:59:56:41:77:fd:26:94:42:bb:1d:cd:08:db: ++ 73:b2:5b:75:f3:cf:9c:4e:82:f4:bf:f8:61:26:85: ++ 6c:d6:85:5b:72:70:d2:fd:db:62:b4:df:53:8b:bd: ++ b1:44:58:62:42:09:c7:fa:7f:5b:10:e7:fe:40:fd: ++ c0:d8:c3:2b:32:e7:70:a6:b7:a6:20:55:1d:7b:80: ++ 5d:4b:8f:67:4c:f1:10 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 98:39:CD:BE:D8:B2:8C:F7:B2:AB:E1:AD:24:AF:7B:7C:A1:DB:1F:CF ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Signature Algorithm: ecdsa-with-SHA384 ++ Signature Value: ++ 30:65:02:30:57:9d:dd:56:f1:c7:e3:e9:b8:49:50:6b:9b:69: ++ c3:6f:ec:c3:7d:25:e4:57:95:13:40:9b:52:d3:3b:f3:40:19: ++ bc:26:c7:2d:06:9e:b5:7b:36:9f:f5:25:d4:63:6b:00:02:31: ++ 00:e9:d3:c6:9e:56:9a:2a:cc:a1:da:3f:c8:66:2b:d3:58:9c: ++ 20:85:fa:ab:91:8a:70:70:11:38:60:64:0b:62:09:91:58:00: ++ f9:4d:fb:34:68:da:09:ad:21:06:18:94:ce + -----BEGIN CERTIFICATE----- +-MIIFpDCCA4ygAwIBAgIQOcqTHO9D88aOk8f0ZIk4fjANBgkqhkiG9w0BAQsFADBs +-MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl +-c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBSU0Eg +-Um9vdCBDQSAyMDIxMB4XDTIxMDIxOTEwNTUzOFoXDTQ1MDIxMzEwNTUzN1owbDEL +-MAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNl +-YXJjaCBJbnN0aXR1dGlvbnMgQ0ExJDAiBgNVBAMMG0hBUklDQSBUTFMgUlNBIFJv +-b3QgQ0EgMjAyMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAIvC569l +-mwVnlskNJLnQDmT8zuIkGCyEf3dRywQRNrhe7Wlxp57kJQmXZ8FHws+RFjZiPTgE +-4VGC/6zStGndLuwRo0Xua2s7TL+MjaQenRG56Tj5eg4MmOIjHdFOY9TnuEFE+2uv +-a9of08WRiFukiZLRgeaMOVig1mlDqa2YUlhu2wr7a89o+uOkXjpFc5gH6l8Cct4M +-pbOfrqkdtx2z/IpZ525yZa31MJQjB/OCFks1mJxTuy/K5FrZx40d/JiZ+yykgmvw +-Kh+OC19xXFyuQnspiYHLA6OZyoieC0AJQTPb5lh6/a6ZcMBaD9YThnEvdmn8kN3b +-LW7R8pv1GmuebxWMevBLKKAiOIAkbDakO/IwkfN4E8/BPzWr8R0RI7VDIp4BkrcY +-AuUR0YLbFQDMYTfBKnya4dC6s1BG7oKsnTH4+yPiAwBIcKMJJnkVU2DzOFytOOqB +-AGMUuTNe3QvboEUHGjMJ+E20pwKmafTCWQWIZYVWrkvL4N48fS0ayOn7H6NhStYq +-E613TBoYm5EPWNgGVMWX+Ko/IIqmhaZ39qb8HOLubpQzKoNQhArlT4b4UEV4AIHr +-W2jjJo3Me1xR9BQsQL4aYB16cmEdH2MtiKrOokWQCPxrvrNQKlr9qEgYRtaQQJKQ +-CoReaDH46+0N0x3GfZkYVVYnZS6NRcUk7M7jAgMBAAGjQjBAMA8GA1UdEwEB/wQF +-MAMBAf8wHQYDVR0OBBYEFApII6ZgpJIKM+qTW8VX6iVNvRLuMA4GA1UdDwEB/wQE +-AwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAPpBIqm5iFSVmewzVjIuJndftTgfvnNAU +-X15QvWiWkKQUEapobQk1OUAJ2vQJLDSle1mESSmXdMgHHkdt8s4cUCbjnj1AUz/3 +-f5Z2EMVGpdAgS1D0NTsY9FVqQRtHBmg8uwkIYtlfVUKqrFOFrJVWNlar5AWMxaja +-H6NpvVMPxP/cyuN+8kyIhkdGGvMA9YCRotxDQpSbIPDRzbLrLFPCU3hKTwSUQZqP +-JzLB5UkZv/HywouoCjkxKLR9YjYsTewfM7Z+d21+UPCfDtcRj88YxeMn/ibvBZ3P +-zzfF0HvaO7AWhAw6k9a+F9sPPg4ZeAnHqQJyIkv3N3a6dcSFA1pj1bF1BcK5vZSt +-jBWZp5N99sXzqnTPBIWUmAD04vnKJGW/4GKvyMX6ssmeVkjaef2WdhW+o45WxLM0 +-/L5H9MG0qPzVMIho7suuyWPEdr6sOBjhXlzPrjoiUevRi7PzKzMHVIf6tLITe7pT +-BGIBnfHAT+7hOtSLIBD6Alfm78ELt5BGnBkpjNxvoEppaZS3JGWg/6w/zgH7IS79 +-aPib8qXPMThcFarmlwDB31qlpzmq6YR/PFGoOtmUW4y/Twhx5duoXNTSpv4Ao8YW +-xw/ogM4cKGR0GQjTQuPOAF1/sdwTsOEFy9EgqoZ0njnnkf3/W9b3raYvAwtt41dU +-63ZTGI0RmLo= ++MIICDzCCAZWgAwIBAgIUbmq8WapTvpg5Z6LSa6Q75m0c1towCgYIKoZIzj0EAwMw ++RzELMAkGA1UEBhMCQ04xHDAaBgNVBAoTE2lUcnVzQ2hpbmEgQ28uLEx0ZC4xGjAY ++BgNVBAMTEXZUcnVzIEVDQyBSb290IENBMB4XDTE4MDczMTA3MjY0NFoXDTQzMDcz ++MTA3MjY0NFowRzELMAkGA1UEBhMCQ04xHDAaBgNVBAoTE2lUcnVzQ2hpbmEgQ28u ++LEx0ZC4xGjAYBgNVBAMTEXZUcnVzIEVDQyBSb290IENBMHYwEAYHKoZIzj0CAQYF ++K4EEACIDYgAEZVBKrox5lkqqHAjDo6LN/llWQXf9JpRCux3NCNtzslt188+cToL0 ++v/hhJoVs1oVbcnDS/dtitN9Ti72xRFhiQgnH+n9bEOf+QP3A2MMrMudwpremIFUd ++e4BdS49nTPEQo0IwQDAdBgNVHQ4EFgQUmDnNvtiyjPeyq+GtJK97fKHbH88wDwYD ++VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwCgYIKoZIzj0EAwMDaAAwZQIw ++V53dVvHH4+m4SVBrm2nDb+zDfSXkV5UTQJtS0zvzQBm8JsctBp61ezaf9SXUY2sA ++AjEA6dPGnlaaKsyh2j/IZivTWJwghfqrkYpwcBE4YGQLYgmRWAD5Tfs0aNoJrSEG ++GJTO + -----END CERTIFICATE----- + +-# Issuer: CN=HARICA TLS ECC Root CA 2021 O=Hellenic Academic and Research Institutions CA +-# Subject: CN=HARICA TLS ECC Root CA 2021 O=Hellenic Academic and Research Institutions CA +-# Label: "HARICA TLS ECC Root CA 2021" +-# Serial: 137515985548005187474074462014555733966 +-# MD5 Fingerprint: ae:f7:4c:e5:66:35:d1:b7:9b:8c:22:93:74:d3:4b:b0 +-# SHA1 Fingerprint: bc:b0:c1:9d:e9:98:92:70:19:38:57:e9:8d:a7:b4:5d:6e:ee:01:48 +-# SHA256 Fingerprint: 3f:99:cc:47:4a:cf:ce:4d:fe:d5:87:94:66:5e:47:8d:15:47:73:9f:2e:78:0f:1b:b4:ca:9b:13:30:97:d4:01 ++# 8a71de6559336f426c26e53880d00d88a18da4c6a91f0dcb6194e206c5c96387 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 43:e3:71:13:d8:b3:59:14:5d:b7:ce:8c:fd:35:fd:6f:bc:05:8d:45 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = CN, O = "iTrusChina Co.,Ltd.", CN = vTrus Root CA ++ Validity ++ Not Before: Jul 31 07:24:05 2018 GMT ++ Not After : Jul 31 07:24:05 2043 GMT ++ Subject: C = CN, O = "iTrusChina Co.,Ltd.", CN = vTrus Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:bd:55:7c:61:d3:b8:1d:04:62:05:a0:ae:6c:b7: ++ 70:b4:41:ea:4b:03:5e:10:3f:90:5a:1c:8b:3b:b0: ++ 66:8b:6c:48:a6:1c:22:ba:d5:40:92:ee:33:b2:23: ++ 59:c9:8e:bc:58:da:8b:9e:d0:19:f2:2f:59:c6:8c: ++ 63:5a:ba:9f:a3:0b:b0:b3:9a:5c:ba:11:b8:12:e9: ++ 0c:bb:cf:6e:6c:80:87:29:14:03:2c:8d:24:9a:c8: ++ 64:83:b5:6a:ac:13:2c:33:f1:9f:dc:2c:61:3c:1a: ++ 3f:70:55:9b:ad:00:52:7f:cf:04:b9:fe:36:fa:9c: ++ c0:16:ae:62:fe:96:4c:43:7e:55:14:be:1a:b3:d2: ++ 6d:c2:af:76:66:95:6b:2a:b0:94:77:85:5e:04:0f: ++ 62:1d:63:75:f7:6b:e7:cb:5b:9a:70:ec:3e:67:05: ++ f0:fe:07:08:80:cf:28:db:05:c6:14:27:2f:86:7d: ++ f0:27:de:ff:e6:7e:33:48:e7:0b:1e:58:d1:27:2b: ++ 53:0e:57:4a:65:d7:fb:a2:80:60:fc:4c:bc:35:53: ++ 01:6a:97:72:82:af:f1:1d:70:e8:9c:f5:ef:5e:c2: ++ 6c:c7:47:7e:5a:94:85:26:4d:3b:ba:eb:4c:e8:b0: ++ 09:c2:65:c2:9d:9d:09:9b:4e:b5:97:05:ac:f5:06: ++ a0:f7:36:05:7e:f4:90:b2:6b:c4:b4:f9:64:ea:e9: ++ 1a:0a:c8:0d:a8:ed:27:c9:d4:e7:b3:b9:ab:82:22: ++ 90:27:3d:2a:e8:7c:90:ef:bc:4f:fd:e2:0a:24:a7: ++ de:65:24:a4:5d:ea:c0:76:30:d3:77:50:f8:0d:04: ++ 9b:94:36:01:73:ca:06:58:a6:d3:3b:dc:fa:04:46: ++ 13:55:8a:c9:44:47:b8:51:39:1a:2e:e8:34:e2:79: ++ cb:59:4a:0a:7f:bc:a6:ef:1f:03:67:6a:59:2b:25: ++ 62:93:d9:53:19:66:3c:27:62:29:86:4d:a4:6b:ee: ++ ff:d4:4e:ba:d5:b4:e2:8e:48:5a:00:19:09:f1:05: ++ d9:ce:91:b1:f7:eb:e9:39:4f:f6:6f:04:43:9a:55: ++ f5:3e:05:14:bd:bf:b3:59:b4:d8:8e:33:84:a3:90: ++ 52:aa:b3:02:95:60:f9:0c:4c:68:f9:ee:d5:17:0d: ++ f8:71:57:b5:25:e4:29:ee:65:5d:af:d1:ee:3c:17: ++ 0b:5a:43:c5:a5:86:ea:24:9e:e2:05:07:dc:34:42: ++ 12:91:d6:39:74:ae:4c:41:82:db:f2:a6:48:d1:b3: ++ 9b:f3:33:aa:f3:a6:c0:c5:4e:f5:f4:9d:76:63:e6: ++ 02:c6:22:4b:c1:95:3f:50:64:2c:54:e5:b6:f0:3c: ++ 29:cf:57 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 54:62:70:63:F1:75:84:43:58:8E:D1:16:20:B1:C6:AC:1A:BC:F6:89 ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ Signature Value: ++ 29:ba:92:49:a7:ad:f0:f1:70:c3:e4:97:f0:9f:a9:25:d5:6b: ++ 9e:34:fe:e6:1a:64:f6:3a:6b:52:b2:10:78:1a:9f:4c:da:8a: ++ da:ec:1c:37:52:e0:42:4b:fb:6c:76:ca:24:0b:39:12:15:9d: ++ 9f:11:2d:fc:79:64:dc:e0:e0:f5:dd:e0:57:c9:a5:b2:76:70: ++ 50:a4:fe:b7:0a:70:d5:a0:34:f1:75:d7:4d:49:ba:11:d1:b3: ++ d8:ec:82:ff:eb:0e:c4:bf:64:2d:7d:63:6e:17:78:ec:5d:7c: ++ 88:c8:eb:8e:57:76:d9:59:04:fa:bc:52:1f:45:ac:f0:7a:80: ++ ec:ec:6f:76:ae:91:db:10:8e:04:dc:92:df:a0:f6:e6:ae:49: ++ d3:c1:6c:12:1b:cc:29:aa:f9:08:a5:e2:37:14:ca:b1:b8:66: ++ ef:1a:82:e4:f0:f8:f1:a7:16:69:b7:db:a9:61:3c:9f:f5:31: ++ cb:e4:00:46:c2:2f:74:b1:b1:d7:81:ee:a8:26:95:bc:88:af: ++ 4c:35:07:2a:02:ca:78:14:6d:47:2b:40:56:e9:cb:2a:60:a1: ++ 67:03:a0:ce:8c:bc:b0:72:67:c4:31:ce:db:34:e5:25:03:60: ++ 25:7b:71:98:e4:c0:1b:2b:5f:74:42:d2:4b:c5:59:08:07:87: ++ be:c5:c3:7f:e7:96:d9:e1:dc:28:97:d6:8f:05:e3:f5:9b:4e: ++ ca:1d:50:47:05:53:b0:ca:39:e7:85:a0:89:c1:05:3b:01:37: ++ d3:3f:49:e2:77:eb:23:c8:88:66:3b:3d:39:76:21:46:f1:ec: ++ 5f:23:b8:eb:a2:66:75:74:c1:40:f7:d8:68:9a:93:e2:2d:a9: ++ 2e:bd:1c:a3:1e:c8:74:c6:a4:2d:7a:20:ab:3b:b8:b0:46:fd: ++ 6f:dd:5f:52:55:75:62:f0:97:a0:7c:d7:38:fd:25:df:cd:a0: ++ 9b:10:cf:8b:b8:38:5e:5e:c5:b4:a6:02:36:a1:1e:5f:1c:cf: ++ e2:96:9d:29:aa:fd:98:ae:52:e1:f3:41:52:fb:a9:2e:72:96: ++ 9f:27:e3:aa:73:7d:f8:1a:23:66:7b:3b:ab:65:b0:32:01:4b: ++ 15:3e:3d:a2:4f:0c:2b:35:a2:c6:d9:67:12:35:30:cd:76:2e: ++ 16:b3:99:9e:4d:4f:4e:2d:3b:34:43:e1:9a:0e:0d:a4:66:97: ++ ba:d2:1c:4a:4c:2c:2a:8b:8b:81:4f:71:1a:a9:dd:5c:7b:7b: ++ 08:c5:00:0d:37:40:e3:7c:7b:54:5f:2f:85:5f:76:f6:f7:a7: ++ b0:1c:57:56:c1:72:e8:ad:a2:af:8d:33:49:ba:1f:8a:dc:e6: ++ 74:7c:60:86:6f:87:97:7b + -----BEGIN CERTIFICATE----- +-MIICVDCCAdugAwIBAgIQZ3SdjXfYO2rbIvT/WeK/zjAKBggqhkjOPQQDAzBsMQsw +-CQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2Vh +-cmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBFQ0MgUm9v +-dCBDQSAyMDIxMB4XDTIxMDIxOTExMDExMFoXDTQ1MDIxMzExMDEwOVowbDELMAkG +-A1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJj +-aCBJbnN0aXR1dGlvbnMgQ0ExJDAiBgNVBAMMG0hBUklDQSBUTFMgRUNDIFJvb3Qg +-Q0EgMjAyMTB2MBAGByqGSM49AgEGBSuBBAAiA2IABDgI/rGgltJ6rK9JOtDA4MM7 +-KKrxcm1lAEeIhPyaJmuqS7psBAqIXhfyVYf8MLA04jRYVxqEU+kw2anylnTDUR9Y +-STHMmE5gEYd103KUkE+bECUqqHgtvpBBWJAVcqeht6NCMEAwDwYDVR0TAQH/BAUw +-AwEB/zAdBgNVHQ4EFgQUyRtTgRL+BNUW0aq8mm+3oJUZbsowDgYDVR0PAQH/BAQD +-AgGGMAoGCCqGSM49BAMDA2cAMGQCMBHervjcToiwqfAircJRQO9gcS3ujwLEXQNw +-SaSS6sUUiHCm0w2wqsosQJz76YJumgIwK0eaB8bRwoF8yguWGEEbo/QwCZ61IygN +-nxS2PFOiTAZpffpskcYqSUXm7LcT4Tps ++MIIFVjCCAz6gAwIBAgIUQ+NxE9izWRRdt86M/TX9b7wFjUUwDQYJKoZIhvcNAQEL ++BQAwQzELMAkGA1UEBhMCQ04xHDAaBgNVBAoTE2lUcnVzQ2hpbmEgQ28uLEx0ZC4x ++FjAUBgNVBAMTDXZUcnVzIFJvb3QgQ0EwHhcNMTgwNzMxMDcyNDA1WhcNNDMwNzMx ++MDcyNDA1WjBDMQswCQYDVQQGEwJDTjEcMBoGA1UEChMTaVRydXNDaGluYSBDby4s ++THRkLjEWMBQGA1UEAxMNdlRydXMgUm9vdCBDQTCCAiIwDQYJKoZIhvcNAQEBBQAD ++ggIPADCCAgoCggIBAL1VfGHTuB0EYgWgrmy3cLRB6ksDXhA/kFocizuwZotsSKYc ++IrrVQJLuM7IjWcmOvFjai57QGfIvWcaMY1q6n6MLsLOaXLoRuBLpDLvPbmyAhykU ++AyyNJJrIZIO1aqwTLDPxn9wsYTwaP3BVm60AUn/PBLn+NvqcwBauYv6WTEN+VRS+ ++GrPSbcKvdmaVayqwlHeFXgQPYh1jdfdr58tbmnDsPmcF8P4HCIDPKNsFxhQnL4Z9 ++8Cfe/+Z+M0jnCx5Y0ScrUw5XSmXX+6KAYPxMvDVTAWqXcoKv8R1w6Jz1717CbMdH ++flqUhSZNO7rrTOiwCcJlwp2dCZtOtZcFrPUGoPc2BX70kLJrxLT5ZOrpGgrIDajt ++J8nU57O5q4IikCc9Kuh8kO+8T/3iCiSn3mUkpF3qwHYw03dQ+A0Em5Q2AXPKBlim ++0zvc+gRGE1WKyURHuFE5Gi7oNOJ5y1lKCn+8pu8fA2dqWSslYpPZUxlmPCdiKYZN ++pGvu/9ROutW04o5IWgAZCfEF2c6Rsffr6TlP9m8EQ5pV9T4FFL2/s1m02I4zhKOQ ++UqqzApVg+QxMaPnu1RcN+HFXtSXkKe5lXa/R7jwXC1pDxaWG6iSe4gUH3DRCEpHW ++OXSuTEGC2/KmSNGzm/MzqvOmwMVO9fSddmPmAsYiS8GVP1BkLFTltvA8Kc9XAgMB ++AAGjQjBAMB0GA1UdDgQWBBRUYnBj8XWEQ1iO0RYgscasGrz2iTAPBgNVHRMBAf8E ++BTADAQH/MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAgEAKbqSSaet ++8PFww+SX8J+pJdVrnjT+5hpk9jprUrIQeBqfTNqK2uwcN1LgQkv7bHbKJAs5EhWd ++nxEt/Hlk3ODg9d3gV8mlsnZwUKT+twpw1aA08XXXTUm6EdGz2OyC/+sOxL9kLX1j ++bhd47F18iMjrjld22VkE+rxSH0Ws8HqA7Oxvdq6R2xCOBNyS36D25q5J08FsEhvM ++Kar5CKXiNxTKsbhm7xqC5PD48acWabfbqWE8n/Uxy+QARsIvdLGx14HuqCaVvIiv ++TDUHKgLKeBRtRytAVunLKmChZwOgzoy8sHJnxDHO2zTlJQNgJXtxmOTAGytfdELS ++S8VZCAeHvsXDf+eW2eHcKJfWjwXj9ZtOyh1QRwVTsMo554WgicEFOwE30z9J4nfr ++I8iIZjs9OXYhRvHsXyO466JmdXTBQPfYaJqT4i2pLr0cox7IdMakLXogqzu4sEb9 ++b91fUlV1YvCXoHzXOP0l382gmxDPi7g4Xl7FtKYCNqEeXxzP4padKar9mK5S4fNB ++UvupLnKWnyfjqnN9+BojZns7q2WwMgFLFT49ok8MKzWixtlnEjUwzXYuFrOZnk1P ++Ti07NEPhmg4NpGaXutIcSkwsKouLgU9xGqndXHt7CMUADTdA43x7VF8vhV929ven ++sBxXVsFy6K2ir40zSbofitzmdHxghm+Hl3s= + -----END CERTIFICATE----- ++ ++# b2fae53e14ccd7ab9212064701ae279c1d8988facb775fa8a008914e663988a8 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 3d:98:3b:a6:66:3d:90:63:f7:7e:26:57:38:04:ef:00 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: CN = Atos TrustedRoot Root CA ECC TLS 2021, O = Atos, C = DE ++ Validity ++ Not Before: Apr 22 09:26:23 2021 GMT ++ Not After : Apr 17 09:26:22 2041 GMT ++ Subject: CN = Atos TrustedRoot Root CA ECC TLS 2021, O = Atos, C = DE ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:96:86:58:28:37:0a:67:d0:a0:de:24:19:19:e1: ++ e4:05:07:1f:97:ed:e8:64:82:b9:f6:c4:71:50:ce: ++ 8a:0c:ff:d7:b5:76:bb:a1:6c:93:6c:83:a2:68:6e: ++ a5:d9:be:2c:88:95:41:cd:5d:dd:b1:ca:83:63:83: ++ cc:c0:be:74:d9:e0:9d:a4:ee:4a:4e:56:e0:98:29: ++ 41:93:52:10:d5:24:38:02:32:67:f1:94:12:6f:ef: ++ d7:c5:de:2e:fd:19:80 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 76:28:25:D6:7D:E0:66:9A:7A:09:B2:6A:3B:8E:33:D7:36:D3:4F:A2 ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: ecdsa-with-SHA384 ++ Signature Value: ++ 30:65:02:30:5b:99:29:f3:9c:31:b6:89:6b:6c:d6:bd:77:e1: ++ 7c:e7:51:7e:b8:3a:cd:a3:36:5f:7c:f7:3c:77:3e:e4:50:ad: ++ a8:e7:d2:59:0c:26:8e:30:3b:6e:08:2a:c2:a7:5a:c8:02:31: ++ 00:99:e3:0c:e7:a3:c3:af:d3:49:2e:46:82:23:66:5d:c9:00: ++ 14:12:fd:38:f4:e1:98:6b:77:29:7a:db:24:cf:65:40:bf:d2: ++ dc:8c:11:e8:f4:7d:7f:20:84:a9:42:e4:28 ++-----BEGIN CERTIFICATE----- ++MIICFTCCAZugAwIBAgIQPZg7pmY9kGP3fiZXOATvADAKBggqhkjOPQQDAzBMMS4w ++LAYDVQQDDCVBdG9zIFRydXN0ZWRSb290IFJvb3QgQ0EgRUNDIFRMUyAyMDIxMQ0w ++CwYDVQQKDARBdG9zMQswCQYDVQQGEwJERTAeFw0yMTA0MjIwOTI2MjNaFw00MTA0 ++MTcwOTI2MjJaMEwxLjAsBgNVBAMMJUF0b3MgVHJ1c3RlZFJvb3QgUm9vdCBDQSBF ++Q0MgVExTIDIwMjExDTALBgNVBAoMBEF0b3MxCzAJBgNVBAYTAkRFMHYwEAYHKoZI ++zj0CAQYFK4EEACIDYgAEloZYKDcKZ9Cg3iQZGeHkBQcfl+3oZIK59sRxUM6KDP/X ++tXa7oWyTbIOiaG6l2b4siJVBzV3dscqDY4PMwL502eCdpO5KTlbgmClBk1IQ1SQ4 ++AjJn8ZQSb+/Xxd4u/RmAo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR2 ++KCXWfeBmmnoJsmo7jjPXNtNPojAOBgNVHQ8BAf8EBAMCAYYwCgYIKoZIzj0EAwMD ++aAAwZQIwW5kp85wxtolrbNa9d+F851F+uDrNozZffPc8dz7kUK2o59JZDCaOMDtu ++CCrCp1rIAjEAmeMM56PDr9NJLkaCI2ZdyQAUEv049OGYa3cpetskz2VAv9LcjBHo ++9H1/IISpQuQo ++-----END CERTIFICATE----- ++ ++# 81a9088ea59fb364c548a6f85559099b6f0405efbf18e5324ec9f457ba00112f ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 53:d5:cf:e6:19:93:0b:fb:2b:05:12:d8:c2:2a:a2:a4 ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: CN = Atos TrustedRoot Root CA RSA TLS 2021, O = Atos, C = DE ++ Validity ++ Not Before: Apr 22 09:21:10 2021 GMT ++ Not After : Apr 17 09:21:09 2041 GMT ++ Subject: CN = Atos TrustedRoot Root CA RSA TLS 2021, O = Atos, C = DE ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:b6:80:0e:c4:79:bd:05:8c:7d:b0:a3:9d:4d:22: ++ 4d:cb:f0:41:97:4d:59:e0:d1:fe:56:8c:97:f2:d7: ++ bd:8f:6c:b7:23:8f:5f:d5:c4:d8:41:cb:f2:02:1e: ++ 71:e5:e9:f6:5e:cb:08:2a:5e:30:f2:2d:66:c7:84: ++ 1b:64:57:38:9d:75:2d:56:c6:2f:61:ef:96:fc:20: ++ 46:bd:eb:d4:7b:3f:3f:7c:47:38:04:a9:1b:aa:52: ++ df:13:37:d3:15:15:4e:bd:5f:7c:af:ad:63:c7:79: ++ dc:08:7b:d5:a0:e5:f7:5b:75:ac:80:55:99:92:61: ++ 9b:cd:2a:17:7d:db:8f:f4:b5:6a:ea:17:4a:64:28: ++ 66:15:29:6c:02:f1:6b:d5:ba:a3:33:dc:5a:67:a7: ++ 05:e2:bf:65:b6:16:b0:10:ed:cd:50:33:c9:70:50: ++ ec:19:8e:b0:c7:f2:74:5b:6b:44:c6:7d:96:b9:98: ++ 08:59:66:de:29:01:9b:f4:2a:6d:d3:15:3a:90:6a: ++ 67:f1:b4:6b:66:d9:21:eb:ca:d9:62:7c:46:10:5c: ++ de:75:49:67:9e:42:f9:fe:75:a9:a3:ad:ff:76:0a: ++ 67:40:e3:c5:f7:8d:c7:85:9a:59:9e:62:9a:6a:ed: ++ 45:87:98:67:b2:d5:4a:3c:d7:b4:3b:00:0d:c0:8f: ++ 1f:e1:40:c4:ae:6c:21:dc:49:7e:7e:ca:b2:8d:6d: ++ b6:bf:93:2f:a1:5c:3e:8f:ca:ed:80:8e:58:e1:db: ++ 57:cf:85:36:38:b2:71:a4:09:8c:92:89:08:88:48: ++ f1:40:63:18:b2:5b:8c:5a:e3:c3:d3:17:aa:ab:19: ++ a3:2c:1b:e4:d5:c6:e2:66:7a:d7:82:19:a6:3b:16: ++ 2c:2f:71:87:5f:45:9e:95:73:93:c2:42:81:21:13: ++ 96:d7:9d:bb:93:68:15:fa:9d:a4:1d:8c:f2:81:e0: ++ 58:06:bd:c9:b6:e3:f6:89:5d:89:f9:ac:44:a1:cb: ++ 6b:fa:16:f1:c7:50:3d:24:da:f7:c3:e4:87:d5:56: ++ f1:4f:90:30:fa:45:09:59:da:34:ce:e0:13:1c:04: ++ 7c:00:d4:9b:86:a4:40:bc:d9:dc:4c:57:7e:ae:b7: ++ 33:b6:5e:76:e1:65:8b:66:df:8d:ca:d7:98:af:ce: ++ 36:98:8c:9c:83:99:03:70:f3:af:74:ed:c6:0e:36: ++ e7:bd:ec:c1:73:a7:94:5a:cb:92:64:82:a6:00:c1: ++ 70:a1:6e:2c:29:e1:58:57:ec:5a:7c:99:6b:25:a4: ++ 90:3a:80:f4:20:9d:9a:ce:c7:2d:f9:b2:4b:29:95: ++ 83:e9:35:8d:a7:49:48:a7:0f:4c:19:91:d0:f5:bf: ++ 10:e0:71 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 74:49:99:D1:FF:B4:7A:68:45:75:C3:7E:B4:DC:CC:CE:39:33:DA:08 ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: sha384WithRSAEncryption ++ Signature Value: ++ 23:43:53:24:62:5c:6d:fd:3e:c2:cf:55:00:6c:c5:56:88:b9: ++ 0e:dd:3a:e2:25:0d:95:4a:97:ca:80:89:ee:2a:cd:65:f8:db: ++ 16:e0:09:92:e0:18:c7:78:98:bb:f3:ec:42:52:fb:a9:a4:82: ++ d7:4d:d8:8a:fc:e4:4e:fd:ab:90:c4:38:75:32:84:9f:ff:b3: ++ b0:2b:02:33:36:c0:10:90:6f:1d:9c:af:e1:69:93:ec:a3:45: ++ 2f:14:9f:f5:4c:2a:65:43:72:0c:f7:c3:f8:95:8b:14:f3:85: ++ 20:62:dd:54:53:dd:2c:dc:18:95:69:4f:83:47:70:40:33:58: ++ 77:12:0c:a2:eb:52:31:1e:4c:c9:a8:ce:c5:ef:c3:d1:ad:e0: ++ 6b:03:00:34:26:b4:54:21:35:97:01:dc:5f:1b:f1:7c:e7:55: ++ fa:2d:68:77:7b:d3:69:cc:d3:0e:6b:ba:4d:76:44:d6:c2:15: ++ 9a:26:ec:b0:c5:f5:bb:d1:7a:74:c2:6c:cd:c5:b5:5e:f6:4c: ++ e6:5b:2d:81:db:b3:b7:3a:97:9e:ed:cf:46:b2:50:3d:84:60: ++ 99:71:b5:33:b5:57:45:e6:42:47:75:6a:0e:b0:08:0c:ae:bd: ++ de:f7:bb:0f:58:3d:8f:03:31:e8:3d:82:50:ca:2f:5e:0c:5d: ++ b4:97:be:20:34:07:f4:c4:12:e1:ee:d7:b0:d9:59:2d:69:f7: ++ 31:04:f4:f2:f9:ab:f9:13:31:f8:01:77:0e:3d:42:23:26:cc: ++ 9a:72:67:51:21:7a:cc:3c:85:a8:ea:21:6a:3b:db:5a:3c:a5: ++ 34:9e:9a:c0:2c:df:80:9c:29:e0:df:77:94:d1:a2:80:42:ff: ++ 6a:4c:5b:11:d0:f5:cd:a2:be:ae:cc:51:5c:c3:d5:54:7b:0c: ++ ae:d6:b9:06:77:80:e2:ef:07:1a:68:cc:59:51:ad:7e:5c:67: ++ 6b:b9:db:e2:07:42:5b:b8:01:05:58:39:4d:e4:bb:98:a3:b1: ++ 32:ec:d9:a3:d6:6f:94:23:ff:3b:b7:29:65:e6:07:e9:ef:b6: ++ 19:ea:e7:c2:38:1d:32:88:90:3c:13:2b:6e:cc:ef:ab:77:06: ++ 34:77:84:4f:72:e4:81:84:f9:b9:74:34:de:76:4f:92:2a:53: ++ b1:25:39:db:3c:ff:e5:3e:a6:0e:e5:6b:9e:ff:db:ec:2f:74: ++ 83:df:8e:b4:b3:a9:de:14:4d:ff:31:a3:45:73:24:fa:95:29: ++ cc:12:97:04:a2:38:b6:8d:b0:f0:37:fc:c8:21:7f:3f:b3:24: ++ 1b:3d:8b:6e:cc:4d:b0:16:0d:96:1d:83:1f:46:c0:9b:bd:43: ++ 99:e7:c4:96:2e:ce:5f:c9 ++-----BEGIN CERTIFICATE----- ++MIIFZDCCA0ygAwIBAgIQU9XP5hmTC/srBRLYwiqipDANBgkqhkiG9w0BAQwFADBM ++MS4wLAYDVQQDDCVBdG9zIFRydXN0ZWRSb290IFJvb3QgQ0EgUlNBIFRMUyAyMDIx ++MQ0wCwYDVQQKDARBdG9zMQswCQYDVQQGEwJERTAeFw0yMTA0MjIwOTIxMTBaFw00 ++MTA0MTcwOTIxMDlaMEwxLjAsBgNVBAMMJUF0b3MgVHJ1c3RlZFJvb3QgUm9vdCBD ++QSBSU0EgVExTIDIwMjExDTALBgNVBAoMBEF0b3MxCzAJBgNVBAYTAkRFMIICIjAN ++BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtoAOxHm9BYx9sKOdTSJNy/BBl01Z ++4NH+VoyX8te9j2y3I49f1cTYQcvyAh5x5en2XssIKl4w8i1mx4QbZFc4nXUtVsYv ++Ye+W/CBGvevUez8/fEc4BKkbqlLfEzfTFRVOvV98r61jx3ncCHvVoOX3W3WsgFWZ ++kmGbzSoXfduP9LVq6hdKZChmFSlsAvFr1bqjM9xaZ6cF4r9lthawEO3NUDPJcFDs ++GY6wx/J0W2tExn2WuZgIWWbeKQGb9Cpt0xU6kGpn8bRrZtkh68rZYnxGEFzedUln ++nkL5/nWpo63/dgpnQOPF943HhZpZnmKaau1Fh5hnstVKPNe0OwANwI8f4UDErmwh ++3El+fsqyjW22v5MvoVw+j8rtgI5Y4dtXz4U2OLJxpAmMkokIiEjxQGMYsluMWuPD ++0xeqqxmjLBvk1cbiZnrXghmmOxYsL3GHX0WelXOTwkKBIROW1527k2gV+p2kHYzy ++geBYBr3JtuP2iV2J+axEoctr+hbxx1A9JNr3w+SH1VbxT5Aw+kUJWdo0zuATHAR8 ++ANSbhqRAvNncTFd+rrcztl524WWLZt+NyteYr842mIycg5kDcPOvdO3GDjbnvezB ++c6eUWsuSZIKmAMFwoW4sKeFYV+xafJlrJaSQOoD0IJ2azsct+bJLKZWD6TWNp0lI ++pw9MGZHQ9b8Q4HECAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU ++dEmZ0f+0emhFdcN+tNzMzjkz2ggwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEB ++DAUAA4ICAQAjQ1MkYlxt/T7Cz1UAbMVWiLkO3TriJQ2VSpfKgInuKs1l+NsW4AmS ++4BjHeJi78+xCUvuppILXTdiK/ORO/auQxDh1MoSf/7OwKwIzNsAQkG8dnK/haZPs ++o0UvFJ/1TCplQ3IM98P4lYsU84UgYt1UU90s3BiVaU+DR3BAM1h3Egyi61IxHkzJ ++qM7F78PRreBrAwA0JrRUITWXAdxfG/F851X6LWh3e9NpzNMOa7pNdkTWwhWaJuyw ++xfW70Xp0wmzNxbVe9kzmWy2B27O3Opee7c9GslA9hGCZcbUztVdF5kJHdWoOsAgM ++rr3e97sPWD2PAzHoPYJQyi9eDF20l74gNAf0xBLh7tew2VktafcxBPTy+av5EzH4 ++AXcOPUIjJsyacmdRIXrMPIWo6iFqO9taPKU0nprALN+AnCng33eU0aKAQv9qTFsR ++0PXNor6uzFFcw9VUewyu1rkGd4Di7wcaaMxZUa1+XGdrudviB0JbuAEFWDlN5LuY ++o7Ey7Nmj1m+UI/87tyll5gfp77YZ6ufCOB0yiJA8EytuzO+rdwY0d4RPcuSBhPm5 ++dDTedk+SKlOxJTnbPP/lPqYO5Wue/9vsL3SD3460s6neFE3/MaNFcyT6lSnMEpcE ++oji2jbDwN/zIIX8/syQbPYtuzE2wFg2WHYMfRsCbvUOZ58SWLs5fyQ== ++-----END CERTIFICATE----- ++ ++# c90f26f0fb1b4018b22227519b5ca2b53e2ca5b3be5cf18efe1bef47380c5383 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 42:f2:cc:da:1b:69:37:44:5f:15:fe:75:28:10:b8:f4 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root E46 ++ Validity ++ Not Before: Mar 22 00:00:00 2021 GMT ++ Not After : Mar 21 23:59:59 2046 GMT ++ Subject: C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root E46 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:76:fa:99:a9:6e:20:ed:f9:d7:77:e3:07:3b:a8: ++ db:3d:5f:38:e8:ab:55:a6:56:4f:d6:48:ea:ec:7f: ++ 2d:aa:c3:b2:c5:79:ec:99:61:7f:10:79:c7:02:5a: ++ f9:04:37:f5:34:35:2b:77:ce:7f:20:8f:52:a3:00: ++ 89:ec:d5:a7:a2:6d:5b:e3:4b:92:93:a0:80:f5:01: ++ 94:dc:f0:68:07:1e:cd:ee:fe:25:52:b5:20:43:1c: ++ 1b:fe:eb:19:ce:43:a3 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61 ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: ecdsa-with-SHA384 ++ Signature Value: ++ 30:64:02:30:27:ee:a4:5a:a8:21:bb:e9:47:97:94:89:a5:74: ++ 20:6d:79:4f:c8:bd:93:5e:58:18:fb:2d:1a:00:6a:c9:b8:3d: ++ d0:a4:4f:44:47:94:01:56:a2:f8:33:25:0c:42:df:aa:02:30: ++ 1d:ea:e1:2e:88:2e:e1:f9:a7:1d:02:32:4e:f2:9f:6c:55:74: ++ e3:ae:ae:fb:a5:1a:ee:ed:d2:fc:c2:03:11:eb:45:5c:60:10: ++ 3d:5c:7f:99:03:5b:6d:54:48:01:8a:73 ++-----BEGIN CERTIFICATE----- ++MIICOjCCAcGgAwIBAgIQQvLM2htpN0RfFf51KBC49DAKBggqhkjOPQQDAzBfMQsw ++CQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1T ++ZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBFNDYwHhcN ++MjEwMzIyMDAwMDAwWhcNNDYwMzIxMjM1OTU5WjBfMQswCQYDVQQGEwJHQjEYMBYG ++A1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1TZWN0aWdvIFB1YmxpYyBT ++ZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBFNDYwdjAQBgcqhkjOPQIBBgUrgQQA ++IgNiAAR2+pmpbiDt+dd34wc7qNs9Xzjoq1WmVk/WSOrsfy2qw7LFeeyZYX8QeccC ++WvkEN/U0NSt3zn8gj1KjAIns1aeibVvjS5KToID1AZTc8GgHHs3u/iVStSBDHBv+ ++6xnOQ6OjQjBAMB0GA1UdDgQWBBTRItpMWfFLXyY4qp3W7usNw/upYTAOBgNVHQ8B ++Af8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNnADBkAjAn7qRa ++qCG76UeXlImldCBteU/IvZNeWBj7LRoAasm4PdCkT0RHlAFWovgzJQxC36oCMB3q ++4S6ILuH5px0CMk7yn2xVdOOurvulGu7t0vzCAxHrRVxgED1cf5kDW21USAGKcw== ++-----END CERTIFICATE----- ++ ++# 7bb647a62aeeac88bf257aa522d01ffea395e0ab45c73f93f65654ec38f25a06 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 75:8d:fd:8b:ae:7c:07:00:fa:a9:25:a7:e1:c7:ad:14 ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root R46 ++ Validity ++ Not Before: Mar 22 00:00:00 2021 GMT ++ Not After : Mar 21 23:59:59 2046 GMT ++ Subject: C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root R46 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:93:be:d5:36:52:75:d8:01:23:a0:1c:47:42:49: ++ ee:63:b6:b7:21:fd:c4:95:d5:48:2b:26:7c:14:53: ++ 10:da:79:fd:2b:b7:2d:a4:d4:2c:fa:ea:32:dd:49: ++ c2:b9:bd:0f:48:3d:7b:5a:98:54:af:9e:5d:31:74: ++ 4f:07:fc:50:21:dd:a4:cf:68:4f:1b:12:63:6d:25: ++ 99:4c:2a:99:f3:48:30:61:fa:81:7c:1e:a7:08:4a: ++ dc:3e:2b:1c:1f:18:4c:71:aa:35:8c:ad:f8:6e:e8: ++ 3b:4a:d9:e5:94:02:d6:89:84:13:aa:6d:c8:4f:33: ++ cc:50:96:37:92:33:dc:5f:88:e7:9f:54:d9:48:f0: ++ 98:43:d6:66:fd:9f:17:38:43:c5:01:51:0b:d7:e3: ++ 23:0f:14:5d:5b:14:e7:4b:be:dd:f4:c8:da:03:37: ++ d1:d6:39:a1:21:51:30:83:b0:6d:d7:30:4e:96:5b: ++ 91:f0:70:24:ab:bf:45:81:64:43:0d:bd:21:3a:2f: ++ 3c:e9:9e:0d:cb:20:b5:42:27:cc:da:6f:9b:ee:64: ++ 30:90:39:cd:93:65:81:21:31:b5:23:50:33:37:22: ++ e3:38:ed:f8:31:30:cc:45:fe:62:f9:d1:5d:32:79: ++ 42:87:df:6a:cc:56:19:40:4d:ce:aa:bb:f9:b5:76: ++ 49:94:f1:27:f8:91:a5:83:e5:06:b3:63:0e:80:dc: ++ e0:12:55:80:a6:3b:66:b4:39:87:2d:c8:f0:d0:d1: ++ 14:e9:e4:0d:4d:0e:f6:5d:57:72:c5:3b:1c:47:56: ++ 9d:e2:d5:fb:81:61:8c:cc:4d:80:90:34:5b:b7:d7: ++ 14:75:dc:d8:04:48:9f:c0:c1:28:88:b4:e9:1c:ca: ++ a7:b1:f1:56:b7:7b:49:4c:59:e5:20:15:a8:84:02: ++ 29:fa:38:94:69:9a:49:06:8f:cd:1f:79:14:17:12: ++ 0c:83:7a:de:1f:b1:97:ee:f9:97:78:28:a4:c8:44: ++ 92:e9:7d:26:05:a6:58:72:9b:79:13:d8:11:5f:ae: ++ c5:38:62:34:68:b2:86:30:8e:f8:90:61:9e:32:6c: ++ f5:07:36:cd:a2:4c:6e:ec:8a:36:ed:f2:e6:99:15: ++ 44:70:c3:7c:bc:9c:39:c0:b4:e1:6b:f7:83:25:23: ++ 57:d9:12:80:e5:49:f0:75:0f:ef:8d:eb:1c:9b:54: ++ 28:b4:21:3c:fc:7c:0a:ff:ef:7b:6b:75:ff:8b:1d: ++ a0:19:05:ab:fa:f8:2b:81:42:e8:38:ba:bb:fb:aa: ++ fd:3d:e0:f3:ca:df:4e:97:97:29:ed:f3:18:56:e9: ++ a5:96:ac:bd:c3:90:98:b2:e0:f9:a2:d4:a6:47:43: ++ 7c:6d:cf ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ 56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49 ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ Signature Algorithm: sha384WithRSAEncryption ++ Signature Value: ++ 2f:5c:99:3c:fc:06:5e:8c:94:2e:70:ea:d2:32:31:8d:b4:f0: ++ 51:d5:bc:0a:f3:64:9f:07:5e:d5:c1:73:68:64:7a:a2:b9:0e: ++ e8:f9:5d:85:2d:a8:37:45:aa:28:f4:96:05:50:60:a9:49:7e: ++ 9f:e2:99:36:29:13:44:47:6a:9d:55:20:3c:d8:9b:f1:03:32: ++ ba:da:40:a1:73:ea:83:a1:b7:44:a6:0e:99:01:9b:e4:bc:7f: ++ be:13:94:7e:ca:a6:1e:76:80:36:3d:84:06:8b:33:26:65:6d: ++ ca:7e:9e:fe:1f:8c:58:38:7b:1a:83:b1:0f:bc:17:11:bb:e6: ++ 06:cc:63:fa:81:f2:81:4c:da:0b:10:6b:a1:fa:d5:28:a5:cf: ++ 06:40:16:ff:7b:7d:18:5e:39:12:a4:53:9e:7e:32:42:10:a6: ++ 21:91:a9:1c:4e:17:7c:84:bc:9f:8c:d1:e8:df:e6:51:b9:36: ++ 47:3f:90:b9:c7:bc:02:dc:5b:1c:4f:0e:48:c1:25:83:9c:0a: ++ 3f:9e:b1:03:33:12:1a:27:ac:f7:22:6c:24:d1:01:41:f8:58: ++ 03:fe:25:68:22:1f:9a:5a:3c:7c:6c:9e:75:48:f3:81:f1:66: ++ 67:6e:4c:82:c0:ee:ba:57:0e:18:ef:2e:9a:f7:12:d8:a0:6b: ++ e9:05:a5:a1:e9:68:f8:bc:4c:3f:12:1e:45:e8:52:c0:a3:bf: ++ 12:27:79:b9:cc:31:3c:c3:f6:3a:22:16:03:a0:c9:8f:66:a4: ++ 5b:a2:4d:d6:81:25:06:e9:76:a4:00:0a:3e:cb:cd:35:9b:e0: ++ e1:38:cb:60:53:86:28:42:41:1c:44:57:e8:a8:ad:ab:45:e3: ++ 25:10:bc:db:3e:65:41:fb:1b:a6:97:0f:eb:b9:74:79:f9:1e: ++ bc:1d:57:0d:47:af:c3:2f:9f:87:46:a7:eb:26:5a:0f:56:63: ++ b5:62:60:6e:00:fb:e3:27:11:22:e7:fe:99:8f:34:f5:b9:e8: ++ c3:91:72:bd:d8:c3:1e:b9:2e:f2:91:44:51:d0:57:cd:0c:34: ++ d5:48:21:bf:db:13:f1:66:25:43:52:d2:70:22:36:cd:9f:c4: ++ 1c:75:20:ad:63:72:63:06:0f:0e:27:ce:d2:6a:0d:bc:b5:39: ++ 1a:e9:d1:76:7a:d1:5c:e4:e7:49:49:2d:55:37:68:f0:1a:3a: ++ 98:3e:54:17:87:54:e9:a6:27:50:89:7b:20:2f:3f:ff:bf:a1: ++ 8b:4a:47:98:ff:2b:7b:49:3e:c3:29:46:60:18:42:ab:33:29: ++ ba:c0:29:b9:13:89:d3:88:8a:39:41:3b:c9:fd:a6:ed:1f:f4: ++ 60:63:df:d2:2d:55:01:8b ++-----BEGIN CERTIFICATE----- ++MIIFijCCA3KgAwIBAgIQdY39i658BwD6qSWn4cetFDANBgkqhkiG9w0BAQwFADBf ++MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQD ++Ey1TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYw ++HhcNMjEwMzIyMDAwMDAwWhcNNDYwMzIxMjM1OTU5WjBfMQswCQYDVQQGEwJHQjEY ++MBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQDEy1TZWN0aWdvIFB1Ymxp ++YyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYwggIiMA0GCSqGSIb3DQEB ++AQUAA4ICDwAwggIKAoICAQCTvtU2UnXYASOgHEdCSe5jtrch/cSV1UgrJnwUUxDa ++ef0rty2k1Cz66jLdScK5vQ9IPXtamFSvnl0xdE8H/FAh3aTPaE8bEmNtJZlMKpnz ++SDBh+oF8HqcIStw+KxwfGExxqjWMrfhu6DtK2eWUAtaJhBOqbchPM8xQljeSM9xf ++iOefVNlI8JhD1mb9nxc4Q8UBUQvX4yMPFF1bFOdLvt30yNoDN9HWOaEhUTCDsG3X ++ME6WW5HwcCSrv0WBZEMNvSE6Lzzpng3LILVCJ8zab5vuZDCQOc2TZYEhMbUjUDM3 ++IuM47fgxMMxF/mL50V0yeUKH32rMVhlATc6qu/m1dkmU8Sf4kaWD5QazYw6A3OAS ++VYCmO2a0OYctyPDQ0RTp5A1NDvZdV3LFOxxHVp3i1fuBYYzMTYCQNFu31xR13NgE ++SJ/AwSiItOkcyqex8Va3e0lMWeUgFaiEAin6OJRpmkkGj80feRQXEgyDet4fsZfu +++Zd4KKTIRJLpfSYFplhym3kT2BFfrsU4YjRosoYwjviQYZ4ybPUHNs2iTG7sijbt ++8uaZFURww3y8nDnAtOFr94MlI1fZEoDlSfB1D++N6xybVCi0ITz8fAr/73trdf+L ++HaAZBav6+CuBQug4urv7qv094PPK306Xlynt8xhW6aWWrL3DkJiy4Pmi1KZHQ3xt ++zwIDAQABo0IwQDAdBgNVHQ4EFgQUVnNYZJX5khqwEioEYnmhQBWIIUkwDgYDVR0P ++AQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEMBQADggIBAC9c ++mTz8Bl6MlC5w6tIyMY208FHVvArzZJ8HXtXBc2hkeqK5Duj5XYUtqDdFqij0lgVQ ++YKlJfp/imTYpE0RHap1VIDzYm/EDMrraQKFz6oOht0SmDpkBm+S8f74TlH7Kph52 ++gDY9hAaLMyZlbcp+nv4fjFg4exqDsQ+8FxG75gbMY/qB8oFM2gsQa6H61SilzwZA ++Fv97fRheORKkU55+MkIQpiGRqRxOF3yEvJ+M0ejf5lG5Nkc/kLnHvALcWxxPDkjB ++JYOcCj+esQMzEhonrPcibCTRAUH4WAP+JWgiH5paPHxsnnVI84HxZmduTILA7rpX ++DhjvLpr3Etiga+kFpaHpaPi8TD8SHkXoUsCjvxInebnMMTzD9joiFgOgyY9mpFui ++TdaBJQbpdqQACj7LzTWb4OE4y2BThihCQRxEV+ioratF4yUQvNs+ZUH7G6aXD+u5 ++dHn5HrwdVw1Hr8Mvn4dGp+smWg9WY7ViYG4A++MnESLn/pmPNPW56MORcr3Ywx65 ++LvKRRFHQV80MNNVIIb/bE/FmJUNS0nAiNs2fxBx1IK1jcmMGDw4nztJqDby1ORrp ++0XZ60Vzk50lJLVU3aPAaOpg+VBeHVOmmJ1CJeyAvP/+/oYtKR5j/K3tJPsMpRmAY ++QqszKbrAKbkTidOIijlBO8n9pu0f9GBj39ItVQGL ++-----END CERTIFICATE----- ++ ++# c32ffd9f46f936d16c3673990959434b9ad60aafbb9e7cf33654f144cc1ba143 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 14:03:f5:ab:fb:37:8b:17:40:5b:e2:43:b2:a5:d1:c4 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C = US, O = SSL Corporation, CN = SSL.com TLS ECC Root CA 2022 ++ Validity ++ Not Before: Aug 25 16:33:48 2022 GMT ++ Not After : Aug 19 16:33:47 2046 GMT ++ Subject: C = US, O = SSL Corporation, CN = SSL.com TLS ECC Root CA 2022 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:45:29:35:73:fa:c2:b8:23:ce:14:7d:a8:b1:4d: ++ a0:5b:36:ee:2a:2c:53:c3:60:09:35:b2:24:66:26: ++ 69:c0:b3:95:d6:5d:92:40:19:0e:c6:a5:13:70:f4: ++ ef:12:51:28:5d:e7:cc:bd:f9:3c:85:c1:cf:94:90: ++ c9:2b:ce:92:42:58:59:67:fd:94:27:10:64:8c:4f: ++ 04:b1:4d:49:e4:7b:4f:9b:f5:e7:08:f8:03:88:f7: ++ a7:c3:92:4b:19:54:81 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ 89:8F:2F:A3:E8:2B:A0:14:54:7B:F3:56:B8:26:5F:67:38:0B:9C:D0 ++ X509v3 Subject Key Identifier: ++ 89:8F:2F:A3:E8:2B:A0:14:54:7B:F3:56:B8:26:5F:67:38:0B:9C:D0 ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: ecdsa-with-SHA384 ++ Signature Value: ++ 30:65:02:30:55:e3:22:56:e9:d7:92:24:58:4f:1e:94:32:0f: ++ 0c:02:36:c2:fd:ac:74:32:4e:e1:fb:1c:80:88:a3:cc:fb:d7: ++ eb:2b:ff:37:7d:f0:ed:d7:9e:75:6a:35:76:52:45:e0:02:31: ++ 00:c7:8d:6f:42:20:8f:be:b6:4d:59:ed:77:4d:29:c4:20:20: ++ 45:64:86:3a:50:c6:c4:ad:2d:93:f5:18:7d:72:ed:a9:cf:c4: ++ ac:57:36:28:08:65:df:3c:79:66:7e:a0:ea ++-----BEGIN CERTIFICATE----- ++MIICOjCCAcCgAwIBAgIQFAP1q/s3ixdAW+JDsqXRxDAKBggqhkjOPQQDAzBOMQsw ++CQYDVQQGEwJVUzEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMSUwIwYDVQQDDBxT ++U0wuY29tIFRMUyBFQ0MgUm9vdCBDQSAyMDIyMB4XDTIyMDgyNTE2MzM0OFoXDTQ2 ++MDgxOTE2MzM0N1owTjELMAkGA1UEBhMCVVMxGDAWBgNVBAoMD1NTTCBDb3Jwb3Jh ++dGlvbjElMCMGA1UEAwwcU1NMLmNvbSBUTFMgRUNDIFJvb3QgQ0EgMjAyMjB2MBAG ++ByqGSM49AgEGBSuBBAAiA2IABEUpNXP6wrgjzhR9qLFNoFs27iosU8NgCTWyJGYm ++acCzldZdkkAZDsalE3D07xJRKF3nzL35PIXBz5SQySvOkkJYWWf9lCcQZIxPBLFN ++SeR7T5v15wj4A4j3p8OSSxlUgaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSME ++GDAWgBSJjy+j6CugFFR781a4Jl9nOAuc0DAdBgNVHQ4EFgQUiY8vo+groBRUe/NW ++uCZfZzgLnNAwDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMDA2gAMGUCMFXjIlbp ++15IkWE8elDIPDAI2wv2sdDJO4fscgIijzPvX6yv/N33w7deedWo1dlJF4AIxAMeN ++b0Igj762TVntd00pxCAgRWSGOlDGxK0tk/UYfXLtqc/ErFc2KAhl3zx5Zn6g6g== ++-----END CERTIFICATE----- ++ ++# 8faf7d2e2cb4709bb8e0b33666bf75a5dd45b5de480f8ea8d4bfe6bebc17f2ed ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 6f:be:da:ad:73:bd:08:40:e2:8b:4d:be:d4:f7:5b:91 ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C = US, O = SSL Corporation, CN = SSL.com TLS RSA Root CA 2022 ++ Validity ++ Not Before: Aug 25 16:34:22 2022 GMT ++ Not After : Aug 19 16:34:21 2046 GMT ++ Subject: C = US, O = SSL Corporation, CN = SSL.com TLS RSA Root CA 2022 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:d0:a4:09:72:4f:40:88:12:61:3e:35:23:9e:ee: ++ f6:74:cf:2f:7b:58:3d:ce:3c:0d:10:28:90:2f:97: ++ f7:8c:48:d8:a0:d8:25:b1:4c:b0:11:4c:17:73:50: ++ d0:22:4a:63:bb:81:d3:29:6e:d5:b5:09:3e:26:18: ++ 7f:b2:12:7f:93:98:b7:af:f0:36:bf:f2:ee:18:9e: ++ 9c:3b:52:c5:47:19:5d:74:f3:64:66:d5:5d:c7:68: ++ b4:bf:1b:1c:06:a3:bc:8f:40:23:b6:1e:c6:84:bd: ++ 51:c4:1b:39:c1:95:d2:29:ec:4b:ae:7b:2d:bf:39: ++ fd:b4:62:de:96:7b:41:c6:9c:a0:e0:06:72:fb:f0: ++ 07:97:09:39:81:74:af:f7:34:59:11:57:0a:c2:5b: ++ c1:24:f4:31:73:30:82:c6:9d:ba:02:f7:3e:7c:44: ++ 5f:83:0d:f3:f1:dd:20:69:16:09:50:e2:d4:55:b6: ++ e0:80:72:76:6e:4c:47:b7:75:55:59:b4:53:74:d9: ++ 94:c6:41:ad:58:8a:31:66:0f:1e:a2:1b:29:40:4e: ++ 2f:df:7b:e6:16:2c:2d:fc:bf:ec:f3:b4:fa:be:18: ++ f6:9b:49:d4:ee:05:6e:d9:34:f3:9c:f1:ec:01:8b: ++ d1:20:c6:0f:a0:b5:bc:17:4e:48:7b:51:c2:fc:e9: ++ 5c:69:37:47:66:b3:68:f8:15:28:f0:b9:d3:a4:15: ++ cc:5a:4f:ba:52:70:a3:12:45:dd:c6:ba:4e:fb:c2: ++ d0:f7:a8:52:27:6d:6e:79:b5:8c:fc:7b:8c:c1:16: ++ 4c:ee:80:7f:be:f0:76:be:41:53:12:33:ae:5a:38: ++ 42:ab:d7:0f:3e:41:8d:76:07:32:d5:ab:89:f6:4e: ++ 67:d9:b1:42:75:23:6e:f3:cd:42:b2:fc:55:f5:53: ++ 87:17:3b:c0:33:58:f1:52:d2:f9:80:a4:f0:e8:f0: ++ 3b:8b:38:cc:a4:c6:90:7f:0f:9c:fd:8b:d1:a3:cf: ++ da:83:a7:69:c9:50:36:d5:5c:05:d2:0a:41:74:db: ++ 63:11:37:c1:a5:a0:96:4b:1e:8c:16:12:77:ae:94: ++ 34:7b:1e:7f:c2:66:00:e4:aa:83:ea:8a:90:ad:ce: ++ 36:44:4d:d1:51:e9:bc:1f:f3:6a:05:fd:c0:74:1f: ++ 25:19:40:51:6e:ea:82:51:40:df:9b:b9:08:2a:06: ++ 02:d5:23:1c:13:d6:e9:db:db:c6:b0:7a:cb:7b:27: ++ 9b:fb:e0:d5:46:24:ed:10:4b:63:4b:a5:05:8f:ba: ++ b8:1d:2b:a6:fa:91:e2:92:52:bd:ec:eb:67:97:6d: ++ 9a:2d:9f:81:32:05:67:32:fb:48:08:3f:d9:25:b8: ++ 04:25:2f ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ FB:2E:37:EE:E3:84:7A:27:2E:CD:19:35:B1:33:7C:FF:D4:44:42:B9 ++ X509v3 Subject Key Identifier: ++ FB:2E:37:EE:E3:84:7A:27:2E:CD:19:35:B1:33:7C:FF:D4:44:42:B9 ++ X509v3 Key Usage: critical ++ Digital Signature, Certificate Sign, CRL Sign ++ Signature Algorithm: sha256WithRSAEncryption ++ Signature Value: ++ 8d:89:6d:84:45:18:f1:4f:b3:a0:ef:68:a4:c0:1d:ac:30:bc: ++ 67:66:b0:9a:cd:b6:ab:22:19:66:d3:3b:41:b5:10:9d:10:ba: ++ 72:6e:29:24:20:1c:01:99:62:d3:96:e0:e2:fb:0c:42:d7:e1: ++ 5a:c4:96:4d:54:cd:8f:ca:43:53:fd:2a:b8:ea:f8:65:ca:01: ++ c2:ad:60:68:06:9f:39:1a:51:d9:e0:8d:26:f9:0b:4e:a5:53: ++ 25:7a:23:a4:1c:ce:08:1b:df:47:88:b2:ad:3e:e0:27:87:8b: ++ 49:8c:1f:a9:47:58:7b:96:f2:88:1d:18:ae:b3:d1:a6:0a:94: ++ fa:db:d3:e5:38:0a:6b:79:12:33:fb:4a:59:37:16:40:0e:bb: ++ de:f5:89:0c:f1:6c:d3:f7:51:6b:5e:35:f5:db:c0:26:ea:12: ++ 73:4e:a9:91:90:a6:17:c3:6c:2f:38:d4:a3:72:94:43:2c:62: ++ e1:4e:5c:32:3d:bd:4c:7d:19:47:a2:c3:49:e7:96:3f:8f:9a: ++ d3:3b:e4:11:d8:8b:03:dc:f6:b6:60:55:18:a6:81:51:f3:e1: ++ a8:15:6a:eb:e0:0b:f0:14:31:d6:b9:8c:45:3a:a8:10:d8:f0: ++ b9:27:eb:f7:cb:7a:ef:05:72:96:b5:c4:8f:96:73:c4:e8:56: ++ 73:9c:bc:69:51:63:bc:ef:67:1c:43:1a:5f:77:19:1f:18:f8: ++ 1c:25:29:f9:49:99:29:b6:92:3d:a2:83:37:b1:20:91:a8:9b: ++ 30:e9:6a:6c:b4:23:93:65:04:ab:11:f3:0e:1d:53:24:49:53: ++ 1d:a1:3f:9d:48:92:11:e2:7d:0d:4f:f5:d7:bd:a2:58:3e:78: ++ 9d:1e:1f:2b:fe:21:bb:1a:13:b6:b1:28:64:fd:b0:02:00:c7: ++ 6c:80:a2:bd:16:50:20:0f:72:81:5f:cc:94:ff:bb:99:e6:ba: ++ 90:cb:ea:f9:c6:0c:c2:ae:c5:19:ce:33:a1:6b:5c:bb:7e:7c: ++ 34:57:17:ad:f0:3f:ae:cd:ea:af:99:ec:2c:54:7e:8c:ce:2e: ++ 12:56:48:ef:17:3b:3f:4a:5e:60:d2:dc:74:36:bc:a5:43:63: ++ cb:0f:5b:a3:02:56:09:9e:24:2c:e1:86:81:8c:fe:ab:17:2c: ++ fa:c8:e2:32:1a:3a:ff:85:08:c9:83:9f:f2:4a:48:10:54:77: ++ 37:ed:a2:bc:40:be:e4:10:74:f7:e4:5b:bb:b9:f3:89:f9:8f: ++ 41:d8:c7:e4:50:90:35:80:3e:1c:b8:4d:90:d3:d4:f7:c3:b0: ++ a1:7e:84:ca:77:92:31:2c:b8:90:b1:82:7a:74:4e:9b:13:26: ++ b4:d5:50:66:54:78:ae:60 ++-----BEGIN CERTIFICATE----- ++MIIFiTCCA3GgAwIBAgIQb77arXO9CEDii02+1PdbkTANBgkqhkiG9w0BAQsFADBO ++MQswCQYDVQQGEwJVUzEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMSUwIwYDVQQD ++DBxTU0wuY29tIFRMUyBSU0EgUm9vdCBDQSAyMDIyMB4XDTIyMDgyNTE2MzQyMloX ++DTQ2MDgxOTE2MzQyMVowTjELMAkGA1UEBhMCVVMxGDAWBgNVBAoMD1NTTCBDb3Jw ++b3JhdGlvbjElMCMGA1UEAwwcU1NMLmNvbSBUTFMgUlNBIFJvb3QgQ0EgMjAyMjCC ++AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANCkCXJPQIgSYT41I57u9nTP ++L3tYPc48DRAokC+X94xI2KDYJbFMsBFMF3NQ0CJKY7uB0ylu1bUJPiYYf7ISf5OY ++t6/wNr/y7hienDtSxUcZXXTzZGbVXcdotL8bHAajvI9AI7YexoS9UcQbOcGV0ins ++S657Lb85/bRi3pZ7QcacoOAGcvvwB5cJOYF0r/c0WRFXCsJbwST0MXMwgsadugL3 ++PnxEX4MN8/HdIGkWCVDi1FW24IBydm5MR7d1VVm0U3TZlMZBrViKMWYPHqIbKUBO ++L9975hYsLfy/7PO0+r4Y9ptJ1O4Fbtk085zx7AGL0SDGD6C1vBdOSHtRwvzpXGk3 ++R2azaPgVKPC506QVzFpPulJwoxJF3ca6TvvC0PeoUidtbnm1jPx7jMEWTO6Af77w ++dr5BUxIzrlo4QqvXDz5BjXYHMtWrifZOZ9mxQnUjbvPNQrL8VfVThxc7wDNY8VLS +++YCk8OjwO4s4zKTGkH8PnP2L0aPP2oOnaclQNtVcBdIKQXTbYxE3waWglksejBYS ++d66UNHsef8JmAOSqg+qKkK3ONkRN0VHpvB/zagX9wHQfJRlAUW7qglFA35u5CCoG ++AtUjHBPW6dvbxrB6y3snm/vg1UYk7RBLY0ulBY+6uB0rpvqR4pJSvezrZ5dtmi2f ++gTIFZzL7SAg/2SW4BCUvAgMBAAGjYzBhMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0j ++BBgwFoAU+y437uOEeicuzRk1sTN8/9REQrkwHQYDVR0OBBYEFPsuN+7jhHonLs0Z ++NbEzfP/UREK5MA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAjYlt ++hEUY8U+zoO9opMAdrDC8Z2awms22qyIZZtM7QbUQnRC6cm4pJCAcAZli05bg4vsM ++QtfhWsSWTVTNj8pDU/0quOr4ZcoBwq1gaAafORpR2eCNJvkLTqVTJXojpBzOCBvf ++R4iyrT7gJ4eLSYwfqUdYe5byiB0YrrPRpgqU+tvT5TgKa3kSM/tKWTcWQA673vWJ ++DPFs0/dRa1419dvAJuoSc06pkZCmF8NsLzjUo3KUQyxi4U5cMj29TH0ZR6LDSeeW ++P4+a0zvkEdiLA9z2tmBVGKaBUfPhqBVq6+AL8BQx1rmMRTqoENjwuSfr98t67wVy ++lrXEj5ZzxOhWc5y8aVFjvO9nHEMaX3cZHxj4HCUp+UmZKbaSPaKDN7EgkaibMOlq ++bLQjk2UEqxHzDh1TJElTHaE/nUiSEeJ9DU/1172iWD54nR4fK/4huxoTtrEoZP2w ++AgDHbICivRZQIA9ygV/MlP+7mea6kMvq+cYMwq7FGc4zoWtcu358NFcXrfA/rs3q ++r5nsLFR+jM4uElZI7xc7P0peYNLcdDa8pUNjyw9bowJWCZ4kLOGGgYz+qxcs+sji ++Mho6/4UIyYOf8kpIEFR3N+2ivEC+5BB09+Rbu7nzifmPQdjH5FCQNYA+HLhNkNPU ++98OwoX6EyneSMSy4kLGCenROmxMmtNVQZlR4rmA= ++-----END CERTIFICATE----- ++ ++# 3f63bb2814be174ec8b6439cf08d6d56f0b7c405883a5648a334424d6b3ec558 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 40:01:34:8c:c2:00:00:00:00:00:00:00:01:3c:f2:c6 ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA CYBER Root CA ++ Validity ++ Not Before: Nov 22 06:54:29 2022 GMT ++ Not After : Nov 22 15:59:59 2047 GMT ++ Subject: C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA CYBER Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:c6:f8:ca:1e:d9:09:20:7e:1d:6c:4e:ce:8f:e3: ++ 47:33:44:9c:c7:c9:69:aa:3a:5b:78:ee:70:d2:92: ++ f8:04:b3:52:52:1d:67:72:28:a1:df:8b:5d:95:0a: ++ fe:ea:cd:ed:f7:29:ce:f0:6f:7f:ac:cd:3d:ef:b3: ++ 1c:45:6a:f7:28:90:f1:61:57:c5:0c:c4:a3:50:5d: ++ de:d4:b5:cb:19:ca:80:b9:75:ce:29:ce:d2:85:22: ++ ec:02:63:cc:44:30:20:da:ea:91:5b:56:e6:1d:1c: ++ d5:9d:66:c7:3f:df:86:ca:4b:53:c4:d9:8d:b2:1d: ++ ea:f8:dc:27:53:a3:47:e1:61:cc:7d:b5:b0:f8:ee: ++ 73:91:c5:ce:73:6f:ce:ee:10:1f:1a:06:cf:e9:27: ++ 60:c5:4f:19:e4:eb:ce:22:26:45:d7:60:99:dd:ce: ++ 4f:37:e0:7f:e7:63:ad:b0:b8:59:b8:d0:06:68:35: ++ 60:d3:36:ae:71:43:04:f1:69:65:78:7c:f3:1f:f3: ++ ca:28:9f:5a:20:95:66:b4:cd:b7:ee:8f:78:a4:45: ++ 18:e9:26:2f:8d:9b:29:28:b1:a4:b7:3a:6d:b9:d4: ++ 1c:38:72:45:58:b1:5e:eb:f0:28:9b:b7:82:ca:fd: ++ cf:d6:33:0f:9f:fb:97:9e:b1:1c:9c:9e:ea:5f:5e: ++ db:aa:dd:54:e9:30:21:28:6d:8e:79:f3:75:92:8c: ++ 26:fe:dc:c5:f6:c3:b0:df:44:59:43:a3:b6:03:28: ++ f6:08:30:aa:0d:33:e1:ef:9c:a9:07:22:e3:59:5b: ++ 40:8f:da:88:b7:69:08:a8:b7:23:2e:44:09:59:37: ++ 5b:c7:e3:17:f2:22:eb:6e:39:52:c5:de:54:a7:98: ++ c9:4b:20:95:dc:46:89:5f:b4:12:f9:85:29:8e:eb: ++ c8:27:15:20:c0:4b:d4:cc:7c:0c:6c:34:0c:26:9b: ++ 26:31:a6:3c:a7:f6:d9:d0:4b:a2:64:ff:3b:99:41: ++ 72:c1:e0:70:97:f1:24:bb:2b:c4:74:22:b1:ac:6b: ++ 22:32:24:d3:78:2a:c0:c0:a1:2f:f1:52:05:c9:3f: ++ ef:76:66:e2:45:d8:0d:3d:ad:95:c8:c7:89:26:c8: ++ 0f:ae:a7:03:2e:fb:c1:5f:fa:20:e1:70:ad:b0:65: ++ 20:37:33:60:b0:d5:af:d7:0c:1c:c2:90:70:d7:4a: ++ 18:bc:7e:01:b0:b0:eb:15:1e:44:06:cd:a4:4f:e8: ++ 0c:d1:c3:20:10:e1:54:65:9e:b6:51:d0:1a:76:6b: ++ 42:5a:58:76:34:ea:b7:37:19:ae:2e:75:f9:96:e5: ++ c1:59:f7:94:57:29:25:8d:3a:4c:ab:4d:9a:41:d0: ++ 5f:26:03 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ 9D:85:61:14:7C:C1:62:6F:97:68:E4:4F:37:40:E1:AD:E0:0D:56:37 ++ X509v3 Subject Key Identifier: ++ 9D:85:61:14:7C:C1:62:6F:97:68:E4:4F:37:40:E1:AD:E0:0D:56:37 ++ Signature Algorithm: sha384WithRSAEncryption ++ Signature Value: ++ 64:8f:7a:c4:62:0e:b5:88:cc:b8:c7:86:0e:a1:4a:16:cd:70: ++ 0b:b7:a7:85:0b:b3:76:b6:0f:a7:ff:08:8b:0b:25:cf:a8:d4: ++ 83:75:2a:b8:96:88:b6:fb:df:2d:2d:b4:69:53:21:35:57:d6: ++ 89:4d:73:bf:69:8f:70:a3:61:cc:9a:db:1e:9a:e0:20:f8:6c: ++ bb:9b:22:9d:5d:84:31:9a:2c:8a:dd:6a:a1:d7:28:69:ca:fe: ++ 76:55:7a:46:67:eb:cc:43:88:16:a2:03:d6:b9:17:f8:19:6c: ++ 6d:23:02:7f:f1:5f:d0:0a:29:23:3b:d1:aa:0a:ed:a9:17:26: ++ 54:0a:4d:c2:a5:4d:f8:c5:fd:b8:81:cf:2b:2c:78:a3:67:4c: ++ a9:07:9a:f3:df:5e:fb:7c:f5:89:cd:74:97:61:10:6a:07:2b: ++ 81:5a:d2:8e:b7:e7:20:d1:20:6e:24:a8:84:27:a1:57:ac:aa: ++ 55:58:2f:dc:d9:ca:fa:68:04:9e:ed:44:24:f9:74:40:3b:23: ++ 33:ab:83:5a:18:26:42:b6:6d:54:b5:16:60:30:6c:b1:a0:f8: ++ b8:41:a0:5d:49:49:d2:65:05:3a:ea:fe:9d:61:bc:86:d9:bf: ++ de:d3:ba:3a:b1:7f:7e:92:34:8e:c9:00:6e:dc:98:bd:dc:ec: ++ 80:05:ad:02:3d:df:65:ed:0b:03:f7:f7:16:84:04:31:ba:93: ++ 94:d8:f2:12:f8:8a:e3:bf:42:af:a7:d4:cd:11:17:16:c8:42: ++ 1d:14:a8:42:f6:d2:40:86:a0:4f:23:ca:96:45:56:60:06:cd: ++ b7:55:01:a6:01:94:65:fe:6e:05:09:ba:b4:a4:aa:e2:ef:58: ++ be:bd:27:56:d8:ef:73:71:5b:44:33:f2:9a:72:ea:b0:5e:3e: ++ 6e:a9:52:5b:ec:70:6d:b5:87:8f:37:5e:3c:8c:9c:ce:e4:f0: ++ ce:0c:67:41:cc:ce:f6:80:ab:4e:cc:4c:56:f5:c1:61:59:93: ++ b4:3e:a6:da:b8:37:12:9f:2a:32:e3:8b:b8:21:ec:c3:2b:65: ++ 0c:ef:22:de:88:29:3b:4c:d7:fa:fe:b7:e1:47:be:9c:3e:3e: ++ 83:fb:51:5d:f5:68:f7:2e:21:85:dc:bf:f1:5a:e2:7c:d7:c5: ++ e4:83:c1:6a:eb:ba:80:5a:de:5c:2d:70:76:f8:c8:e5:87:87: ++ ca:a0:9d:a1:e5:22:12:27:0f:44:3d:1d:6c:ea:d4:c2:8b:2f: ++ 6f:79:ab:7f:50:a6:c4:19:a7:a1:7a:b7:96:f9:c1:1f:62:5a: ++ a2:43:07:40:5e:26:c6:ac:ed:ae:70:16:c5:aa:ca:72:8a:4d: ++ b0:cf:01:8b:03:3f:6e:d7 ++-----BEGIN CERTIFICATE----- ++MIIFjTCCA3WgAwIBAgIQQAE0jMIAAAAAAAAAATzyxjANBgkqhkiG9w0BAQwFADBQ ++MQswCQYDVQQGEwJUVzESMBAGA1UEChMJVEFJV0FOLUNBMRAwDgYDVQQLEwdSb290 ++IENBMRswGQYDVQQDExJUV0NBIENZQkVSIFJvb3QgQ0EwHhcNMjIxMTIyMDY1NDI5 ++WhcNNDcxMTIyMTU1OTU5WjBQMQswCQYDVQQGEwJUVzESMBAGA1UEChMJVEFJV0FO ++LUNBMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJUV0NBIENZQkVSIFJvb3Qg ++Q0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDG+Moe2Qkgfh1sTs6P ++40czRJzHyWmqOlt47nDSkvgEs1JSHWdyKKHfi12VCv7qze33Kc7wb3+szT3vsxxF ++avcokPFhV8UMxKNQXd7UtcsZyoC5dc4pztKFIuwCY8xEMCDa6pFbVuYdHNWdZsc/ ++34bKS1PE2Y2yHer43CdTo0fhYcx9tbD47nORxc5zb87uEB8aBs/pJ2DFTxnk684i ++JkXXYJndzk834H/nY62wuFm40AZoNWDTNq5xQwTxaWV4fPMf88oon1oglWa0zbfu ++j3ikRRjpJi+NmykosaS3Om251Bw4ckVYsV7r8Cibt4LK/c/WMw+f+5eesRycnupf ++Xtuq3VTpMCEobY5583WSjCb+3MX2w7DfRFlDo7YDKPYIMKoNM+HvnKkHIuNZW0CP ++2oi3aQiotyMuRAlZN1vH4xfyIutuOVLF3lSnmMlLIJXcRolftBL5hSmO68gnFSDA ++S9TMfAxsNAwmmyYxpjyn9tnQS6Jk/zuZQXLB4HCX8SS7K8R0IrGsayIyJNN4KsDA ++oS/xUgXJP+92ZuJF2A09rZXIx4kmyA+upwMu+8Ff+iDhcK2wZSA3M2Cw1a/XDBzC ++kHDXShi8fgGwsOsVHkQGzaRP6AzRwyAQ4VRlnrZR0Bp2a0JaWHY06rc3Ga4udfmW ++5cFZ95RXKSWNOkyrTZpB0F8mAwIDAQABo2MwYTAOBgNVHQ8BAf8EBAMCAQYwDwYD ++VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBSdhWEUfMFib5do5E83QOGt4A1WNzAd ++BgNVHQ4EFgQUnYVhFHzBYm+XaORPN0DhreANVjcwDQYJKoZIhvcNAQEMBQADggIB ++AGSPesRiDrWIzLjHhg6hShbNcAu3p4ULs3a2D6f/CIsLJc+o1IN1KriWiLb73y0t ++tGlTITVX1olNc79pj3CjYcya2x6a4CD4bLubIp1dhDGaLIrdaqHXKGnK/nZVekZn ++68xDiBaiA9a5F/gZbG0jAn/xX9AKKSM70aoK7akXJlQKTcKlTfjF/biBzysseKNn ++TKkHmvPfXvt89YnNdJdhEGoHK4Fa0o635yDRIG4kqIQnoVesqlVYL9zZyvpoBJ7t ++RCT5dEA7IzOrg1oYJkK2bVS1FmAwbLGg+LhBoF1JSdJlBTrq/p1hvIbZv97Tujqx ++f36SNI7JAG7cmL3c7IAFrQI932XtCwP39xaEBDG6k5TY8hL4iuO/Qq+n1M0RFxbI ++Qh0UqEL20kCGoE8jypZFVmAGzbdVAaYBlGX+bgUJurSkquLvWL69J1bY73NxW0Qz ++8ppy6rBePm6pUlvscG21h483XjyMnM7k8M4MZ0HMzvaAq07MTFb1wWFZk7Q+ptq4 ++NxKfKjLji7gh7MMrZQzvIt6IKTtM1/r+t+FHvpw+PoP7UV31aPcuIYXcv/Fa4nzX ++xeSDwWrruoBa3lwtcHb4yOWHh8qgnaHlIhInD0Q9HWzq1MKLL295q39QpsQZp6F6 ++t5b5wR9iWqJDB0BeJsas7a5wFsWqynKKTbDPAYsDP27X ++-----END CERTIFICATE----- ++ ++# c0076b9ef0531fb1a656d67c4ebe97cd5dbaa41ef44598acc2489878c92d8711 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 36:74:e1:4d:7c:65:13:c9:ac:83:55:25:a0:3e:52:7e:2f:50:68:c7 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia TLS ECC Root CA ++ Validity ++ Not Before: May 15 05:41:56 2024 GMT ++ Not After : May 15 05:41:55 2044 GMT ++ Subject: C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia TLS ECC Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:b8:7f:a5:5b:3f:01:3e:7d:f0:88:6d:ae:29:98: ++ e1:9b:5c:53:99:db:f7:08:ff:d5:6a:e0:8e:cb:44: ++ a6:f0:c1:8c:bd:4f:d4:ce:d4:88:53:e8:5e:57:d7: ++ 4e:be:2c:3f:f3:12:a7:00:e9:82:e3:2a:5b:32:7c: ++ 4b:9b:14:29:9e:f8:2d:83:b5:eb:8e:31:49:3d:26: ++ 61:e9:1d:72:8b:89:b6:0a:bb:9c:33:35:0f:da:ec: ++ de:a9:4a:1f:c9:33:b1 ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 2C:85:53:BB:B1:43:CD:32:EA:9E:A3:87:FE:A2:98:A8:A6:93:E9:10 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Signature Algorithm: ecdsa-with-SHA384 ++ Signature Value: ++ 30:65:02:30:54:47:d7:c3:2d:61:86:48:f4:79:5a:55:0d:35: ++ 2f:5f:0d:f6:67:6c:77:40:1a:46:e7:f8:68:5b:4e:27:1d:b8: ++ 98:7d:7f:93:bf:08:4d:c4:da:45:30:a1:0f:5e:4a:78:02:31: ++ 00:a3:91:87:f2:11:33:83:c3:c1:8a:91:3a:4c:2b:50:b1:bd: ++ 22:94:5d:35:89:73:83:c5:9b:19:fe:b4:a1:e9:d4:a1:66:b6: ++ 01:a5:36:f9:d8:68:61:28:b7:74:e1:a2:31 ++-----BEGIN CERTIFICATE----- ++MIICMTCCAbegAwIBAgIUNnThTXxlE8msg1UloD5Sfi9QaMcwCgYIKoZIzj0EAwMw ++WDELMAkGA1UEBhMCQ04xJTAjBgNVBAoTHFRydXN0QXNpYSBUZWNobm9sb2dpZXMs ++IEluYy4xIjAgBgNVBAMTGVRydXN0QXNpYSBUTFMgRUNDIFJvb3QgQ0EwHhcNMjQw ++NTE1MDU0MTU2WhcNNDQwNTE1MDU0MTU1WjBYMQswCQYDVQQGEwJDTjElMCMGA1UE ++ChMcVHJ1c3RBc2lhIFRlY2hub2xvZ2llcywgSW5jLjEiMCAGA1UEAxMZVHJ1c3RB ++c2lhIFRMUyBFQ0MgUm9vdCBDQTB2MBAGByqGSM49AgEGBSuBBAAiA2IABLh/pVs/ ++AT598IhtrimY4ZtcU5nb9wj/1WrgjstEpvDBjL1P1M7UiFPoXlfXTr4sP/MSpwDp ++guMqWzJ8S5sUKZ74LYO1644xST0mYekdcouJtgq7nDM1D9rs3qlKH8kzsaNCMEAw ++DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQULIVTu7FDzTLqnqOH/qKYqKaT6RAw ++DgYDVR0PAQH/BAQDAgEGMAoGCCqGSM49BAMDA2gAMGUCMFRH18MtYYZI9HlaVQ01 ++L18N9mdsd0AaRuf4aFtOJx24mH1/k78ITcTaRTChD15KeAIxAKORh/IRM4PDwYqR ++OkwrULG9IpRdNYlzg8WbGf60oenUoWa2AaU2+dhoYSi3dOGiMQ== ++-----END CERTIFICATE----- ++ ++# 06c08d7dafd876971eb1124fe67f847ec0c7a158d3ea53cbe940e2ea9791f4c3 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 1c:18:d8:cf:e5:53:3f:22:35:46:53:54:24:3c:6c:47:d1:5c:4a:9c ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia TLS RSA Root CA ++ Validity ++ Not Before: May 15 05:41:57 2024 GMT ++ Not After : May 15 05:41:56 2044 GMT ++ Subject: C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia TLS RSA Root CA ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:c3:16:b8:1b:6a:a4:44:73:e5:d6:4e:f4:b9:cf: ++ 5b:0b:c1:d1:9a:81:f5:63:b0:8f:43:c1:bb:08:5a: ++ 1a:7a:e1:07:76:26:1f:8f:69:56:be:fe:36:60:d0: ++ 0c:83:cd:94:ea:e7:c5:2d:5c:2f:05:16:02:9e:0a: ++ a8:2f:e5:60:26:54:96:f8:98:40:1d:ac:ae:9d:74: ++ 67:2f:54:fb:94:63:98:e3:26:4a:83:c6:95:b6:09: ++ 43:50:cd:0d:7d:de:44:0e:60:12:4f:5b:35:bd:bf: ++ 99:38:6d:7d:6c:da:e2:68:73:1f:f9:31:a5:19:10: ++ 73:05:2a:c3:32:19:85:ea:34:aa:dd:42:1e:30:8d: ++ 3f:9e:b5:1e:61:d5:6f:bd:00:72:72:ad:12:3f:aa: ++ a6:49:73:f2:86:15:95:0c:10:5f:51:64:ce:ff:77: ++ b8:c9:6d:ac:e5:d5:98:f1:99:2e:6c:e3:c9:44:f9: ++ b5:43:27:08:4d:f6:7e:de:44:79:bb:b2:8c:1c:da: ++ d3:4b:6c:2e:d6:c3:78:b7:4c:d5:a4:e4:da:dc:8a: ++ 8e:0e:ff:0f:c3:a6:60:26:28:cf:36:bf:fa:57:0a: ++ ec:5b:3f:e9:30:16:7b:c4:db:c4:d4:64:a0:30:fb: ++ e5:fd:1d:71:92:dd:29:8f:41:58:de:00:ad:3a:fd: ++ 3d:7c:1a:a8:b1:17:f0:4e:34:78:58:25:d6:85:21: ++ eb:79:1d:d0:dc:ab:cf:62:3c:b0:c7:97:8b:d6:d0: ++ 9f:d3:fe:3c:de:c5:e3:fc:3a:83:70:84:21:1d:09: ++ c2:a1:fc:bb:28:21:65:53:60:7a:90:6d:96:38:5b: ++ ff:f1:d7:7a:5b:6d:d3:c9:70:49:4a:ba:1d:3a:d0: ++ 50:da:32:20:19:e4:8b:3f:eb:d5:16:26:37:3c:fb: ++ 75:9e:b0:07:70:b8:14:60:77:dc:f6:0f:5c:52:0a: ++ bc:5d:6d:8d:51:0a:da:c5:18:c8:9b:6d:dc:b0:83: ++ b3:7f:a3:4e:78:4c:98:25:ab:f2:7e:2e:20:5e:82: ++ 15:a6:d6:d8:8f:ac:e5:cd:32:86:c8:f9:e4:da:89: ++ e2:3b:3e:93:c5:13:6a:ff:c7:f7:18:fc:67:b5:ef: ++ 18:2c:54:ab:40:d3:6c:4d:ed:c5:c8:b7:38:4f:64: ++ c4:94:4c:4f:a0:cd:ae:a5:c6:27:25:75:27:6d:c6: ++ da:9c:8e:b0:05:99:d5:28:11:c5:21:d4:b8:fc:c7: ++ 96:ab:4a:64:59:61:6b:13:fc:4b:cc:92:a6:0f:a4: ++ 51:bf:0e:58:90:d9:82:83:39:a6:5f:b3:fa:6e:92: ++ b3:cd:33:0e:85:a8:f1:29:d3:ab:59:ad:d6:db:de: ++ d4:2b:81 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ B8:07:91:79:5C:06:F4:46:FD:7B:59:CA:5A:26:91:A7:45:2B:F8:53 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Signature Algorithm: sha384WithRSAEncryption ++ Signature Value: ++ 21:9b:6a:05:20:5d:18:16:a7:12:a4:f7:47:3f:cd:ca:3b:ae: ++ 8e:c0:82:ce:dc:48:25:78:17:6c:e0:e0:70:c4:d6:96:d9:d9: ++ f6:bf:7a:9c:13:bb:53:95:92:ff:cf:92:e0:f3:c5:27:35:57: ++ a8:3b:a2:19:eb:f8:8a:a3:04:de:69:8b:e4:3c:3c:bd:e5:af: ++ d0:12:1b:e5:89:6b:73:9b:6f:25:02:4b:90:82:af:40:c2:ad: ++ ba:9a:60:24:5a:81:4d:05:18:a3:e2:33:79:7a:0b:1f:93:ed: ++ ec:39:4a:f5:13:04:ec:8d:74:9d:81:0a:a8:6f:e8:76:fe:8b: ++ 4f:2b:69:12:86:0a:34:36:dd:82:9b:6f:4f:e0:73:dd:49:7f: ++ 28:3e:c9:3b:a3:57:04:d8:93:d9:3c:29:db:12:10:68:e1:c4: ++ 89:b8:06:20:e7:1b:7a:bc:b1:93:61:9a:19:40:11:b5:6a:85: ++ 57:01:f1:b6:5a:2d:26:73:27:96:f9:b9:3f:5b:d0:88:9d:e4: ++ a0:fd:ba:4e:95:09:83:7f:77:dc:51:05:94:9d:20:71:76:b1: ++ ec:fa:89:b5:9c:2e:85:f1:b9:5b:24:5a:b1:09:ab:da:ca:1a: ++ 07:cd:86:df:db:69:db:b4:48:18:00:2d:bc:a2:c4:89:45:23: ++ a5:0e:e1:44:65:3e:8a:c1:6a:30:1d:e2:60:f8:3a:aa:87:09: ++ 42:b9:81:92:dc:25:88:98:89:f1:7c:35:f1:62:ca:ee:79:f8: ++ 19:2f:fe:5f:f8:db:87:ce:ea:a8:0f:0c:a6:e8:0b:a0:3c:e0: ++ 6b:94:98:9c:7f:ad:06:e6:1c:ea:42:10:5f:e2:26:15:3c:37: ++ 39:f7:d7:bc:ee:b8:e5:ef:03:ee:bd:22:fb:28:86:34:58:c4: ++ 5a:7f:61:a2:78:0f:5e:f3:ca:9d:bc:1b:3c:a7:c8:2d:f6:a7: ++ 22:11:ca:03:d8:e7:67:0a:8a:0e:cb:35:8e:34:39:d8:c8:ea: ++ 8d:9f:64:e0:37:b0:6c:d7:c5:8f:c1:90:61:26:db:24:8c:1e: ++ 4a:c0:88:df:35:90:ce:3f:02:f4:64:61:de:c7:c8:07:95:de: ++ 32:18:3a:8f:a2:42:40:24:e5:d6:33:5d:7c:ae:ef:b1:4d:4f: ++ d4:57:90:35:6a:dc:ae:04:97:49:89:34:97:2e:30:04:e7:98: ++ f7:db:0b:01:90:c1:1f:0a:3f:f8:c2:fe:4e:fa:db:9a:73:73: ++ 16:bc:05:b8:79:d8:59:af:06:e7:3f:67:38:39:b1:7c:ab:94: ++ e0:29:14:a6:28:f2:df:6d:e2:9a:db:54:43:f8:47:58:a3:5d: ++ 74:15:9c:c1:ab:b0:c7:34 ++-----BEGIN CERTIFICATE----- ++MIIFgDCCA2igAwIBAgIUHBjYz+VTPyI1RlNUJDxsR9FcSpwwDQYJKoZIhvcNAQEM ++BQAwWDELMAkGA1UEBhMCQ04xJTAjBgNVBAoTHFRydXN0QXNpYSBUZWNobm9sb2dp ++ZXMsIEluYy4xIjAgBgNVBAMTGVRydXN0QXNpYSBUTFMgUlNBIFJvb3QgQ0EwHhcN ++MjQwNTE1MDU0MTU3WhcNNDQwNTE1MDU0MTU2WjBYMQswCQYDVQQGEwJDTjElMCMG ++A1UEChMcVHJ1c3RBc2lhIFRlY2hub2xvZ2llcywgSW5jLjEiMCAGA1UEAxMZVHJ1 ++c3RBc2lhIFRMUyBSU0EgUm9vdCBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC ++AgoCggIBAMMWuBtqpERz5dZO9LnPWwvB0ZqB9WOwj0PBuwhaGnrhB3YmH49pVr7+ ++NmDQDIPNlOrnxS1cLwUWAp4KqC/lYCZUlviYQB2srp10Zy9U+5RjmOMmSoPGlbYJ ++Q1DNDX3eRA5gEk9bNb2/mThtfWza4mhzH/kxpRkQcwUqwzIZheo0qt1CHjCNP561 ++HmHVb70AcnKtEj+qpklz8oYVlQwQX1Fkzv93uMltrOXVmPGZLmzjyUT5tUMnCE32 ++ft5EebuyjBza00tsLtbDeLdM1aTk2tyKjg7/D8OmYCYozza/+lcK7Fs/6TAWe8Tb ++xNRkoDD75f0dcZLdKY9BWN4ArTr9PXwaqLEX8E40eFgl1oUh63kd0Nyrz2I8sMeX ++i9bQn9P+PN7F4/w6g3CEIR0JwqH8uyghZVNgepBtljhb//HXeltt08lwSUq6HTrQ ++UNoyIBnkiz/r1RYmNzz7dZ6wB3C4FGB33PYPXFIKvF1tjVEK2sUYyJtt3LCDs3+j ++TnhMmCWr8n4uIF6CFabW2I+s5c0yhsj55NqJ4js+k8UTav/H9xj8Z7XvGCxUq0DT ++bE3txci3OE9kxJRMT6DNrqXGJyV1J23G2pyOsAWZ1SgRxSHUuPzHlqtKZFlhaxP8 ++S8ySpg+kUb8OWJDZgoM5pl+z+m6Ss80zDoWo8SnTq1mt1tve1CuBAgMBAAGjQjBA ++MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFLgHkXlcBvRG/XtZylomkadFK/hT ++MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQwFAAOCAgEAIZtqBSBdGBanEqT3 ++Rz/NyjuujsCCztxIJXgXbODgcMTWltnZ9r96nBO7U5WS/8+S4PPFJzVXqDuiGev4 ++iqME3mmL5Dw8veWv0BIb5Ylrc5tvJQJLkIKvQMKtuppgJFqBTQUYo+IzeXoLH5Pt ++7DlK9RME7I10nYEKqG/odv6LTytpEoYKNDbdgptvT+Bz3Ul/KD7JO6NXBNiT2Twp ++2xIQaOHEibgGIOcberyxk2GaGUARtWqFVwHxtlotJnMnlvm5P1vQiJ3koP26TpUJ ++g3933FEFlJ0gcXax7PqJtZwuhfG5WyRasQmr2soaB82G39tp27RIGAAtvKLEiUUj ++pQ7hRGU+isFqMB3iYPg6qocJQrmBktwliJiJ8Xw18WLK7nn4GS/+X/jbh87qqA8M ++pugLoDzga5SYnH+tBuYc6kIQX+ImFTw3OffXvO645e8D7r0i+yiGNFjEWn9hongP ++XvPKnbwbPKfILfanIhHKA9jnZwqKDss1jjQ52MjqjZ9k4DewbNfFj8GQYSbbJIwe ++SsCI3zWQzj8C9GRh3sfIB5XeMhg6j6JCQCTl1jNdfK7vsU1P1FeQNWrcrgSXSYk0 ++ly4wBOeY99sLAZDBHwo/+ML+TvrbmnNzFrwFuHnYWa8G5z9nODmxfKuU4CkUpijy ++323imttUQ/hHWKNddBWcwauwxzQ= ++-----END CERTIFICATE----- ++ ++# 193144f431e0fddb740717d4de926a571133884b4360d30e272913cbe660ce41 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 43:fa:0c:5f:4e:1b:80:18:44:ef:d1:b4:4f:35:1f:44:f4:80:ed:cb ++ Signature Algorithm: sha256WithRSAEncryption ++ Issuer: C=CH, O=SwissSign AG, CN=SwissSign RSA TLS Root CA 2022 - 1 ++ Validity ++ Not Before: Jun 8 11:08:22 2022 GMT ++ Not After : Jun 8 11:08:22 2047 GMT ++ Subject: C=CH, O=SwissSign AG, CN=SwissSign RSA TLS Root CA 2022 - 1 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:cb:2a:68:e2:0b:c3:57:bc:35:63:bc:70:a5:3b: ++ f3:8c:3c:4e:57:96:6e:c3:4e:36:a4:f6:02:ca:1e: ++ aa:ae:b8:de:a8:af:1d:76:da:ba:35:d0:91:70:07: ++ df:b3:06:f2:8a:f2:2e:55:51:7b:bb:2c:24:cb:7f: ++ 92:26:80:a3:b4:94:f6:82:a1:a4:e8:fa:75:1d:59: ++ f3:07:6a:61:64:e2:c6:8c:95:af:a3:bb:8e:6f:56: ++ cf:71:cc:5e:81:61:0d:6d:f2:ab:02:2e:a4:97:e5: ++ 71:fc:8a:b0:91:20:5b:9c:74:52:6d:ae:15:27:59: ++ 78:f2:09:ca:65:0e:7f:cb:f4:eb:e7:dc:a9:4c:77: ++ f6:2b:16:04:95:ae:9c:71:a5:3f:2a:da:41:42:e7: ++ 3c:84:10:f4:e1:3d:8c:6b:e2:2b:91:47:55:4f:b8: ++ 56:be:45:de:22:51:4d:4e:28:d9:5f:19:41:06:8f: ++ 0e:4d:06:e0:70:40:23:01:6a:e4:cb:13:9b:73:ac: ++ 4d:14:48:92:2d:fe:6d:a7:f8:87:6b:79:75:e1:be: ++ 10:b1:aa:88:40:59:54:d7:cf:c4:d0:9b:44:b3:38: ++ 69:64:8c:81:d1:23:7e:aa:39:3c:3b:0f:9f:4a:7b: ++ 82:ca:6b:6f:ca:22:3e:31:d0:b0:d0:2a:1c:92:8a: ++ 8f:d8:19:9c:47:e4:3e:0c:b9:c2:cd:be:41:0c:f8: ++ a4:47:05:db:c1:17:30:38:3a:69:dc:cd:c3:69:23: ++ fd:9a:0f:02:ce:10:6a:ce:ca:f8:b9:29:a3:36:89: ++ 86:ae:0b:c0:4f:63:b9:06:59:49:5e:0e:c1:69:b3: ++ 0a:f3:77:7e:2e:9d:8c:b3:27:98:d2:99:8d:25:a7: ++ 1f:86:b3:a6:54:70:38:fc:7d:5d:e8:4f:83:0c:d1: ++ 93:e5:12:e4:54:da:3e:f2:ad:3a:de:3e:3c:45:f0: ++ 28:0f:06:b9:e1:db:97:7b:99:45:9e:dd:fe:95:59: ++ 04:2f:75:3f:d3:ae:89:99:86:ac:14:b4:a8:84:fa: ++ c8:5d:3b:1b:58:93:c1:17:94:55:c8:0b:e3:82:79: ++ 84:9f:f3:00:84:34:ee:dc:31:d5:8f:f2:fa:4f:96: ++ 4c:06:aa:78:fb:de:64:a2:23:cd:1f:3e:c5:8c:bc: ++ 37:54:0e:bb:5a:72:55:ef:c8:5b:b5:72:f8:78:df: ++ 37:20:4c:57:91:73:92:73:ac:18:77:43:82:20:69: ++ ec:e9:ac:29:46:e5:0b:4e:f8:37:73:89:96:8a:1c: ++ 6d:bd:ef:be:d8:b6:f4:ca:c0:fd:47:f0:ae:0b:58: ++ 20:c5:c8:1d:36:ae:97:8d:50:83:26:24:29:f7:9d: ++ 3b:0f:05 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Authority Key Identifier: ++ 6F:8E:62:8B:93:43:B0:E1:40:F6:A7:C3:FD:F1:0F:B8:0F:15:38:A5 ++ X509v3 Subject Key Identifier: ++ 6F:8E:62:8B:93:43:B0:E1:40:F6:A7:C3:FD:F1:0F:B8:0F:15:38:A5 ++ Signature Algorithm: sha256WithRSAEncryption ++ Signature Value: ++ ac:2c:29:41:7d:fa:5c:f5:1a:95:18:bf:2c:a9:8a:a9:24:54: ++ 75:f5:b8:40:ab:cb:a8:24:51:2b:18:3f:63:a9:ae:98:56:2b: ++ 05:43:22:a3:b7:d7:46:9e:c0:2a:12:3d:8e:96:96:40:df:0c: ++ 33:8b:6b:37:91:3a:95:bb:39:29:6d:c0:02:6c:8a:94:0b:07: ++ 02:4d:18:3e:fb:fb:7b:f5:76:3d:9b:f6:5e:30:06:58:33:1e: ++ aa:78:d5:e6:54:04:3a:b2:82:09:8d:ce:16:33:59:45:28:f1: ++ a5:a3:97:0e:43:23:fd:0b:20:80:90:ff:e3:26:cf:b8:64:91: ++ e5:05:8f:13:a0:76:0d:d7:37:0c:10:88:96:f4:3e:be:95:bd: ++ f1:c3:7d:f0:a3:c3:79:47:0b:5c:92:15:63:ed:52:75:8a:e7: ++ 46:69:cb:51:55:0b:2a:4c:f5:f2:64:4f:a9:5c:ff:67:32:8e: ++ 55:2d:32:82:1c:80:2f:6a:91:f8:cb:bc:7e:18:a2:26:a8:2e: ++ a3:53:28:87:ed:57:e5:65:7a:4e:00:4a:5b:4e:53:c9:62:36: ++ bd:c2:8e:5b:eb:cc:6e:27:81:18:59:8b:44:63:9f:d5:0c:65: ++ f4:29:65:7f:91:2c:e5:7f:7e:e8:89:cf:8f:20:cb:6d:07:42: ++ 11:51:26:32:8a:2e:3a:47:13:b8:8d:bd:47:0d:09:f0:16:a4: ++ ed:96:86:2e:19:d8:be:8c:3a:e8:45:2e:11:ba:ae:5a:e7:b9: ++ bf:b1:cc:8f:e0:a0:ff:b8:b3:d1:85:7b:79:66:a3:39:b5:3b: ++ 66:d8:40:be:cf:b7:67:8b:48:c9:19:25:55:fc:bd:8d:cf:5e: ++ da:4e:a6:f2:69:ce:fd:7f:4c:77:d0:c1:46:35:98:5c:23:9b: ++ 02:45:43:94:5a:dd:bc:47:ad:22:fe:ba:5e:2f:91:29:29:86: ++ 7b:21:de:6e:64:b7:cb:0d:8f:37:5b:a3:08:6a:eb:f4:dd:02: ++ 8f:50:03:02:b1:b8:37:68:96:50:eb:b8:5f:d4:28:8a:a5:22: ++ 0c:8a:84:f0:59:2e:d5:37:d1:61:e5:42:73:58:2a:81:f7:76: ++ db:e2:e2:4d:0d:5f:f6:b7:be:05:b4:ae:4e:0d:de:16:3d:03: ++ 81:b3:26:5e:4b:b8:4b:00:cf:ff:8c:17:ba:6c:60:2d:27:87: ++ 37:24:e6:7a:60:2f:b5:d3:83:04:aa:4f:43:75:a2:c1:83:b2: ++ 27:98:2b:b1:0e:80:ba:c0:85:5e:42:b9:df:b1:60:91:d3:eb: ++ 18:7e:70:78:ae:76:83:be:71:5a:d0:90:e3:ca:c1:16:25:67: ++ 4a:f0:b6:7b:ba:e1:9c:d9 ++-----BEGIN CERTIFICATE----- ++MIIFkzCCA3ugAwIBAgIUQ/oMX04bgBhE79G0TzUfRPSA7cswDQYJKoZIhvcNAQEL ++BQAwUTELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzErMCkGA1UE ++AxMiU3dpc3NTaWduIFJTQSBUTFMgUm9vdCBDQSAyMDIyIC0gMTAeFw0yMjA2MDgx ++MTA4MjJaFw00NzA2MDgxMTA4MjJaMFExCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxT ++d2lzc1NpZ24gQUcxKzApBgNVBAMTIlN3aXNzU2lnbiBSU0EgVExTIFJvb3QgQ0Eg ++MjAyMiAtIDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDLKmjiC8NX ++vDVjvHClO/OMPE5Xlm7DTjak9gLKHqquuN6orx122ro10JFwB9+zBvKK8i5VUXu7 ++LCTLf5ImgKO0lPaCoaTo+nUdWfMHamFk4saMla+ju45vVs9xzF6BYQ1t8qsCLqSX ++5XH8irCRIFucdFJtrhUnWXjyCcplDn/L9Ovn3KlMd/YrFgSVrpxxpT8q2kFC5zyE ++EPThPYxr4iuRR1VPuFa+Rd4iUU1OKNlfGUEGjw5NBuBwQCMBauTLE5tzrE0USJIt ++/m2n+IdreXXhvhCxqohAWVTXz8TQm0SzOGlkjIHRI36qOTw7D59Ke4LKa2/KIj4x ++0LDQKhySio/YGZxH5D4MucLNvkEM+KRHBdvBFzA4OmnczcNpI/2aDwLOEGrOyvi5 ++KaM2iYauC8BPY7kGWUleDsFpswrzd34unYyzJ5jSmY0lpx+Gs6ZUcDj8fV3oT4MM ++0ZPlEuRU2j7yrTrePjxF8CgPBrnh25d7mUWe3f6VWQQvdT/TromZhqwUtKiE+shd ++OxtYk8EXlFXIC+OCeYSf8wCENO7cMdWP8vpPlkwGqnj73mSiI80fPsWMvDdUDrta ++clXvyFu1cvh43zcgTFeRc5JzrBh3Q4IgaezprClG5QtO+DdziZaKHG29777YtvTK ++wP1H8K4LWCDFyB02rpeNUIMmJCn3nTsPBQIDAQABo2MwYTAPBgNVHRMBAf8EBTAD ++AQH/MA4GA1UdDwEB/wQEAwIBBjAfBgNVHSMEGDAWgBRvjmKLk0Ow4UD2p8P98Q+4 ++DxU4pTAdBgNVHQ4EFgQUb45ii5NDsOFA9qfD/fEPuA8VOKUwDQYJKoZIhvcNAQEL ++BQADggIBAKwsKUF9+lz1GpUYvyypiqkkVHX1uECry6gkUSsYP2OprphWKwVDIqO3 ++10aewCoSPY6WlkDfDDOLazeROpW7OSltwAJsipQLBwJNGD77+3v1dj2b9l4wBlgz ++Hqp41eZUBDqyggmNzhYzWUUo8aWjlw5DI/0LIICQ/+Mmz7hkkeUFjxOgdg3XNwwQ ++iJb0Pr6VvfHDffCjw3lHC1ySFWPtUnWK50Zpy1FVCypM9fJkT6lc/2cyjlUtMoIc ++gC9qkfjLvH4YoiaoLqNTKIftV+Vlek4ASltOU8liNr3CjlvrzG4ngRhZi0Rjn9UM ++ZfQpZX+RLOV/fuiJz48gy20HQhFRJjKKLjpHE7iNvUcNCfAWpO2Whi4Z2L6MOuhF ++LhG6rlrnub+xzI/goP+4s9GFe3lmozm1O2bYQL7Pt2eLSMkZJVX8vY3PXtpOpvJp ++zv1/THfQwUY1mFwjmwJFQ5Ra3bxHrSL+ul4vkSkphnsh3m5kt8sNjzdbowhq6/Td ++Ao9QAwKxuDdollDruF/UKIqlIgyKhPBZLtU30WHlQnNYKoH3dtvi4k0NX/a3vgW0 ++rk4N3hY9A4GzJl5LuEsAz/+MF7psYC0nhzck5npgL7XTgwSqT0N1osGDsieYK7EO ++gLrAhV5Cud+xYJHT6xh+cHiudoO+cVrQkOPKwRYlZ0rwtnu64ZzZ ++-----END CERTIFICATE----- ++ ++# 0552e6f83fdf65e8fa9670e666df28a4e21340b510cbe52566f97c4fb94b2bd1 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 73:3b:30:04:48:5b:d9:4d:78:2e:73:4b:c9:a1:dc:66 ++ Signature Algorithm: sha512WithRSAEncryption ++ Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST BR Root CA 2 2023 ++ Validity ++ Not Before: May 9 08:56:31 2023 GMT ++ Not After : May 9 08:56:30 2038 GMT ++ Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST BR Root CA 2 2023 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:ae:ff:09:59:91:80:0a:4a:68:e6:24:3f:b8:a7: ++ e4:c8:3a:0a:3a:16:cd:c9:23:61:a0:93:71:f2:ab: ++ 8b:73:8f:a0:67:65:60:d2:54:6b:63:51:6f:49:33: ++ e0:72:07:13:7d:38:cd:06:92:07:29:52:6b:4e:77: ++ 6c:04:d3:95:fa:dd:4c:8c:d9:5d:c1:61:7d:4b:e7: ++ 28:b3:44:81:7b:51:af:dd:33:b1:68:7c:d6:4e:4c: ++ fe:2b:68:b9:ca:66:69:c4:ec:5e:57:7f:f7:0d:c7: ++ 9c:36:36:e5:07:60:ac:c0:4c:ea:08:6c:ef:06:7c: ++ 4f:5b:28:7a:08:fc:93:5d:9b:f6:9c:b4:8b:86:ba: ++ 21:b9:f4:f0:e8:59:5a:28:a1:34:84:1a:25:91:b6: ++ b5:8f:ef:b2:f9:80:fa:f9:3d:3c:11:72:d8:e3:2f: ++ 86:76:c5:79:2c:c1:a9:90:93:46:98:67:cb:83:6a: ++ a0:50:23:a7:3b:f6:81:39:e0:ed:f0:b9:bf:65:f1: ++ d8:cb:7a:fb:ef:73:03:ce:00:f4:7d:d7:e0:5d:3b: ++ 66:b8:dc:8e:ba:83:cb:87:76:03:fc:25:d9:e7:23: ++ 6f:06:fd:67:f3:e0:ff:84:bc:47:bf:b5:16:18:46: ++ 69:14:cc:05:f7:db:d3:49:ac:6b:cc:ab:e4:b5:0b: ++ 43:24:5e:4b:6b:4d:67:df:d6:b5:3e:4f:78:1f:94: ++ 71:24:ea:de:70:fc:f1:93:fe:9e:93:5a:e4:94:5a: ++ 97:54:0c:35:7b:5f:6c:ee:00:1f:24:ec:03:ba:02: ++ f5:76:f4:9f:d4:9a:ed:85:2c:38:22:2f:c7:d8:2f: ++ 76:11:4f:fd:6c:5c:e8:f5:8e:27:87:7f:19:4a:21: ++ 47:90:1d:79:8d:1c:5b:f8:cf:4a:85:e4:ed:b3:5b: ++ 8d:be:c4:64:28:5d:41:c4:6e:ac:38:5a:4f:23:74: ++ 74:a9:12:c3:f6:d2:b9:11:15:33:07:91:d8:3b:37: ++ 3a:63:30:06:d1:c5:22:36:28:62:23:10:e0:46:cc: ++ 97:ac:d6:2b:5d:64:24:d5:ee:1c:0e:de:fb:08:5a: ++ 75:2a:f6:63:6d:ce:0b:42:be:d1:ba:70:1c:9c:21: ++ e5:0f:31:69:17:d7:fc:0a:b4:de:ed:80:9c:cb:92: ++ b4:8b:f5:de:59:a2:58:09:a5:63:47:0b:e1:41:32: ++ 34:41:d9:9a:b1:d9:a8:b0:1b:5a:de:0d:0d:f4:e2: ++ b2:5d:35:80:b9:81:d4:84:69:91:02:cb:75:d0:8d: ++ c5:b5:3d:09:91:09:8f:14:a1:14:74:79:3e:d6:c9: ++ 15:1d:a4:59:59:22:dc:f6:8a:45:3d:3c:12:d6:3e: ++ 5d:32:2f ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ 67:90:F0:D6:DE:B5:18:D5:46:29:7E:5C:AB:F8:9E:08:BC:64:95:10 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 CRL Distribution Points: ++ Full Name: ++ URI:http://crl.d-trust.net/crl/d-trust_br_root_ca_2_2023.crl ++ ++ Signature Algorithm: sha512WithRSAEncryption ++ Signature Value: ++ 34:f7:b3:77:53:db:30:16:b9:2d:a5:21:f1:40:21:75:eb:eb: ++ 48:16:81:3d:73:e0:9e:27:2a:eb:77:a9:13:a4:6a:0a:5a:5a: ++ 14:33:3d:68:1f:81:ae:69:fd:8c:9f:65:6c:34:42:d9:2d:d0: ++ 7f:78:16:b1:3a:ac:23:31:ad:5e:7f:ae:e7:ae:2b:fa:ba:fc: ++ 3c:97:95:40:93:5f:c3:2d:03:a3:ed:a4:6f:53:d7:fa:40:0e: ++ 30:f5:00:20:2c:00:4c:8c:3b:b4:a3:1f:b6:bf:91:32:ab:af: ++ 92:98:d3:16:e6:d4:d1:54:5c:43:5b:2e:ae:ef:57:2a:a8:b4: ++ 6f:a4:ef:0d:56:14:da:21:ab:20:76:9e:03:fc:26:b8:9e:3f: ++ 3e:03:26:e6:4c:db:9d:5f:42:84:3d:45:03:03:1c:59:88:ca: ++ dc:2e:61:24:5a:a4:ea:27:0b:73:12:be:52:b3:0a:cf:32:17: ++ e2:1e:87:1a:16:95:48:6d:5a:e0:d0:cf:09:92:26:66:91:d8: ++ a3:61:0e:aa:81:81:7f:e8:52:82:d1:42:e7:e0:1d:18:fa:a4: ++ 85:36:e7:86:e0:0d:eb:bc:d4:c9:d6:3c:43:f1:5d:49:6e:7e: ++ 81:9b:69:b5:89:62:8f:88:52:d8:d7:fe:27:c1:23:c5:cb:2b: ++ 02:bb:b1:5f:fe:fb:43:85:03:46:be:5d:c6:ca:21:26:ff:d7: ++ 02:9e:74:4a:dc:f8:13:15:b1:81:57:36:cb:65:5c:d1:1d:31: ++ 77:e9:25:c3:c3:b2:32:37:d5:f1:98:09:e4:6d:63:80:08:ab: ++ 06:92:81:d4:e9:70:8f:a7:3f:b2:ed:86:8c:82:6a:35:c8:42: ++ 5a:82:d1:52:1a:45:0f:15:a5:00:f0:94:7b:65:27:57:39:43: ++ cf:7c:7f:e6:bd:35:b3:7b:f1:19:4c:de:3a:96:cf:e9:76:ee: ++ 03:e7:c2:43:52:3c:6a:81:e8:c1:5a:80:bd:11:5d:93:6b:fb: ++ c7:e6:64:3f:bb:69:1c:e9:dd:25:8b:af:74:c9:54:40:ca:cb: ++ 93:13:0a:ed:fb:66:92:11:ca:f5:c0:fa:d8:83:55:03:7c:d3: ++ c5:22:46:75:70:6b:79:48:06:2a:82:9a:bf:e6:eb:16:0e:22: ++ 45:01:bc:dd:36:94:34:a9:35:26:8a:d7:97:b9:ee:08:72:bf: ++ 34:92:70:83:80:ab:38:aa:59:68:dd:40:a4:18:90:b2:f3:d5: ++ 03:ca:26:ca:ef:d5:c7:e0:8f:53:8e:f0:00:e3:a8:ed:9f:f9: ++ ad:77:e0:2b:63:4f:9e:c3:ee:37:bb:78:09:84:9e:b9:6e:fb: ++ 29:99:90:e8:80:d3:9f:24 ++-----BEGIN CERTIFICATE----- ++MIIFqTCCA5GgAwIBAgIQczswBEhb2U14LnNLyaHcZjANBgkqhkiG9w0BAQ0FADBI ++MQswCQYDVQQGEwJERTEVMBMGA1UEChMMRC1UcnVzdCBHbWJIMSIwIAYDVQQDExlE ++LVRSVVNUIEJSIFJvb3QgQ0EgMiAyMDIzMB4XDTIzMDUwOTA4NTYzMVoXDTM4MDUw ++OTA4NTYzMFowSDELMAkGA1UEBhMCREUxFTATBgNVBAoTDEQtVHJ1c3QgR21iSDEi ++MCAGA1UEAxMZRC1UUlVTVCBCUiBSb290IENBIDIgMjAyMzCCAiIwDQYJKoZIhvcN ++AQEBBQADggIPADCCAgoCggIBAK7/CVmRgApKaOYkP7in5Mg6CjoWzckjYaCTcfKr ++i3OPoGdlYNJUa2NRb0kz4HIHE304zQaSBylSa053bATTlfrdTIzZXcFhfUvnKLNE ++gXtRr90zsWh81k5M/itoucpmacTsXld/9w3HnDY25QdgrMBM6ghs7wZ8T1soegj8 ++k12b9py0i4a6Ibn08OhZWiihNIQaJZG2tY/vsvmA+vk9PBFy2OMvhnbFeSzBqZCT ++Rphny4NqoFAjpzv2gTng7fC5v2Xx2Mt6++9zA84A9H3X4F07ZrjcjrqDy4d2A/wl ++2ecjbwb9Z/Pg/4S8R7+1FhhGaRTMBffb00msa8yr5LULQyReS2tNZ9/WtT5PeB+U ++cSTq3nD88ZP+npNa5JRal1QMNXtfbO4AHyTsA7oC9Xb0n9Sa7YUsOCIvx9gvdhFP ++/Wxc6PWOJ4d/GUohR5AdeY0cW/jPSoXk7bNbjb7EZChdQcRurDhaTyN0dKkSw/bS ++uREVMweR2Ds3OmMwBtHFIjYoYiMQ4EbMl6zWK11kJNXuHA7e+whadSr2Y23OC0K+ ++0bpwHJwh5Q8xaRfX/Aq03u2AnMuStIv13lmiWAmlY0cL4UEyNEHZmrHZqLAbWt4N ++DfTisl01gLmB1IRpkQLLddCNxbU9CZEJjxShFHR5PtbJFR2kWVki3PaKRT08EtY+ ++XTIvAgMBAAGjgY4wgYswDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUZ5Dw1t61 ++GNVGKX5cq/ieCLxklRAwDgYDVR0PAQH/BAQDAgEGMEkGA1UdHwRCMEAwPqA8oDqG ++OGh0dHA6Ly9jcmwuZC10cnVzdC5uZXQvY3JsL2QtdHJ1c3RfYnJfcm9vdF9jYV8y ++XzIwMjMuY3JsMA0GCSqGSIb3DQEBDQUAA4ICAQA097N3U9swFrktpSHxQCF16+tI ++FoE9c+CeJyrrd6kTpGoKWloUMz1oH4Guaf2Mn2VsNELZLdB/eBaxOqwjMa1ef67n ++riv6uvw8l5VAk1/DLQOj7aRvU9f6QA4w9QAgLABMjDu0ox+2v5Eyq6+SmNMW5tTR ++VFxDWy6u71cqqLRvpO8NVhTaIasgdp4D/Ca4nj8+AybmTNudX0KEPUUDAxxZiMrc ++LmEkWqTqJwtzEr5SswrPMhfiHocaFpVIbVrg0M8JkiZmkdijYQ6qgYF/6FKC0ULn ++4B0Y+qSFNueG4A3rvNTJ1jxD8V1Jbn6Bm2m1iWKPiFLY1/4nwSPFyysCu7Ff/vtD ++hQNGvl3GyiEm/9cCnnRK3PgTFbGBVzbLZVzRHTF36SXDw7IyN9XxmAnkbWOACKsG ++koHU6XCPpz+y7YaMgmo1yEJagtFSGkUPFaUA8JR7ZSdXOUPPfH/mvTWze/EZTN46 ++ls/pdu4D58JDUjxqgejBWoC9EV2Ta/vH5mQ/u2kc6d0li690yVRAysuTEwrt+2aS ++Ecr1wPrYg1UDfNPFIkZ1cGt5SAYqgpq/5usWDiJFAbzdNpQ0qTUmiteXue4Icr80 ++knCDgKs4qllo3UCkGJCy89UDyibK79XH4I9TjvAA46jtn/mtd+ArY0+ew+43u3gJ ++hJ65bvspmZDogNOfJA== ++-----END CERTIFICATE----- ++ ++# 8e8221b2e7d4007836a1672f0dcc299c33bc07d316f132fa1a206d587150f1ce ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 69:26:09:7e:80:4b:4c:a0:a7:8c:78:62:53:5f:5a:6f ++ Signature Algorithm: sha512WithRSAEncryption ++ Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST EV Root CA 2 2023 ++ Validity ++ Not Before: May 9 09:10:33 2023 GMT ++ Not After : May 9 09:10:32 2038 GMT ++ Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST EV Root CA 2 2023 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:d8:8e:a3:89:80:0b:b2:57:52:dc:a9:53:4c:37: ++ b9:7f:63:17:13:ef:a7:5b:23:5b:69:75:b0:99:0a: ++ 17:c1:8b:c4:db:a8:e0:cc:31:ba:c2:f2:cd:5d:e9: ++ b7:f8:1d:af:6a:c4:95:87:d7:47:c9:95:d8:82:04: ++ 50:3d:81:08:ff:e4:3d:b3:b1:d6:c5:b2:fd:88:09: ++ db:9c:84:ec:25:17:14:87:7f:30:78:9b:6a:58:c9: ++ b6:73:28:3c:34:f7:99:f7:7f:d3:a6:f8:1c:45:7c: ++ ad:2c:8c:94:3f:d8:67:10:53:7e:22:cd:4e:25:51: ++ f0:25:24:35:11:5e:10:c6:ec:87:66:89:81:68:ba: ++ cc:2b:9d:47:73:1f:bd:cd:91:a4:72:6a:9c:a2:1b: ++ 18:a0:6f:ec:50:f4:7d:40:c2:a8:30:cf:bd:73:c8: ++ 13:2b:10:13:1e:8b:9a:a8:3a:94:73:d3:18:69:0a: ++ 4a:ff:c1:01:03:ff:79:7f:b5:48:7f:7b:ee:e8:29: ++ 6f:36:4c:95:61:86:d8:f9:a2:73:8a:ee:ae:2f:96: ++ ee:68:cd:3d:4d:28:42:f9:45:2b:32:1b:46:55:16: ++ 6a:a6:4b:29:f9:bb:95:56:bf:46:1d:ec:1d:93:1d: ++ c0:65:b2:1f:a1:43:ae:56:9e:a0:b1:8f:6b:12:b7: ++ 60:6d:78:0b:ca:8a:5c:ed:1e:96:0e:83:a6:48:95: ++ 8d:3b:a3:21:c4:ae:58:c6:00:b2:84:b4:23:a4:96: ++ 86:35:b8:d8:9e:d8:ac:34:49:98:63:95:c5:cb:6d: ++ 48:47:e2:f2:2e:18:1e:d0:31:ab:dd:74:ec:f9:dc: ++ 8c:b8:1c:8e:68:23:ba:d0:f3:50:dc:cf:65:8f:73: ++ 3a:32:c7:7c:fe:ca:82:22:4f:be:8e:62:47:66:e5: ++ cd:87:e2:e8:d5:0f:18:9f:e5:04:72:4b:46:3c:10: ++ f2:44:c2:64:56:71:4e:75:e8:9c:c9:26:74:c5:7d: ++ 59:d1:0a:5b:0f:6d:fe:9e:75:1c:18:c6:1a:3a:7c: ++ d8:0d:04:cc:cd:b7:45:65:7a:b1:8f:b8:ae:84:48: ++ 3e:b3:7a:4d:a8:03:e2:e2:7e:01:16:59:68:18:43: ++ 33:b0:d2:dc:b0:1a:43:35:ee:a5:da:a9:46:5c:ae: ++ 86:81:41:01:4a:74:26:ec:9f:06:bf:c2:05:37:64: ++ 75:78:29:68:fd:c5:f5:eb:fe:47:f9:e4:85:b0:e1: ++ 7b:31:9d:a6:7f:72:a3:b9:c4:2c:2e:cc:99:57:0e: ++ 21:0c:45:01:94:65:eb:65:09:c6:63:22:0b:33:49: ++ 92:48:3c:fc:cd:ce:b0:3e:8e:9e:8b:f8:fe:49:c5: ++ 35:72:47 ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Subject Key Identifier: ++ AA:FC:91:10:1B:87:91:5F:16:B9:BF:4F:4B:91:5E:00:1C:B1:32:80 ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 CRL Distribution Points: ++ Full Name: ++ URI:http://crl.d-trust.net/crl/d-trust_ev_root_ca_2_2023.crl ++ ++ Signature Algorithm: sha512WithRSAEncryption ++ Signature Value: ++ 93:cb:a5:1f:99:11:ec:9a:0d:5f:2c:15:93:c6:3f:be:10:8d: ++ 78:42:f0:6e:90:47:47:8e:a3:92:32:8d:70:8f:f6:5b:8d:be: ++ 89:ce:47:01:6a:1b:20:20:89:5b:c8:82:10:6c:e0:e7:99:aa: ++ 6b:c6:2a:a0:63:35:91:6a:85:25:ad:17:38:a5:9b:7e:50:f2: ++ 76:ea:85:05:2a:27:41:2b:b1:81:d1:a2:f6:40:75:a9:0e:cb: ++ f1:55:48:d8:ec:d1:ec:b3:e8:ce:14:a1:35:ec:c2:5e:35:1a: ++ ab:a6:16:01:06:8e:ea:dc:2f:a3:8a:ca:2c:91:eb:52:8e:5f: ++ 0c:9b:17:cf:cb:73:07:19:c4:6a:c2:73:54:ef:7c:43:52:63: ++ c1:11:ca:c2:45:b1:f4:3b:53:f5:69:ae:3c:e3:a5:de:ac:e8: ++ 54:b7:b2:91:fd:ac:a9:1f:f2:87:e4:17:c6:49:a8:7c:d8:0a: ++ 41:f4:f2:3e:e7:77:34:04:52:dd:e8:81:f2:4d:2f:54:45:9d: ++ 15:e1:4f:cc:e5:de:34:57:10:c9:23:72:17:70:8d:50:70:1f: ++ 56:6c:cc:b9:ff:3a:5a:4f:63:7a:c3:6e:65:07:1d:84:a1:ff: ++ a9:0c:63:89:6d:b2:40:88:39:d7:1f:77:68:b5:fc:9c:d5:d6: ++ 67:69:5b:a8:74:db:fc:89:f6:1b:32:f7:a4:24:a6:76:b7:47: ++ 53:ef:8d:49:8f:a9:b6:83:5a:a5:96:90:45:61:f5:de:03:4f: ++ 26:0f:a8:8b:f0:03:96:b0:ac:15:d0:71:5a:6a:7b:94:e6:70: ++ 93:da:f1:69:e0:b2:62:4d:9e:8f:ff:89:9d:9b:5d:cd:45:e9: ++ 94:02:22:8d:e0:35:7f:e8:f1:04:79:71:6c:54:83:f8:33:b9: ++ 05:32:1b:58:55:11:4f:d0:e5:27:47:71:ec:ed:da:67:d6:62: ++ a6:4b:4d:0f:69:a2:c9:bc:ec:22:4b:94:c7:68:94:17:7e:e2: ++ 8e:28:3e:b6:c6:ea:f5:34:6c:9f:37:88:07:38:db:86:71:fa: ++ cd:95:48:43:6e:a3:4f:82:87:d7:34:98:6e:4b:93:79:60:75: ++ 69:0f:f0:1a:d5:53:fa:21:0c:c2:3f:e9:3f:1f:18:8c:92:5d: ++ 78:a7:76:67:19:bb:b2:ea:7f:e9:70:09:56:56:a3:b0:0c:0b: ++ 2d:36:5e:c5:e9:c4:d5:83:cb:86:17:97:2c:6c:13:6f:87:5a: ++ af:49:a6:1d:db:cd:38:04:2e:5f:e2:4a:35:0e:2d:4b:f8:a2: ++ 24:04:8d:d8:e1:63:5e:02:92:34:da:98:61:5c:1c:6f:58:76: ++ 64:b3:fc:02:b8:f5:9d:0a ++-----BEGIN CERTIFICATE----- ++MIIFqTCCA5GgAwIBAgIQaSYJfoBLTKCnjHhiU19abzANBgkqhkiG9w0BAQ0FADBI ++MQswCQYDVQQGEwJERTEVMBMGA1UEChMMRC1UcnVzdCBHbWJIMSIwIAYDVQQDExlE ++LVRSVVNUIEVWIFJvb3QgQ0EgMiAyMDIzMB4XDTIzMDUwOTA5MTAzM1oXDTM4MDUw ++OTA5MTAzMlowSDELMAkGA1UEBhMCREUxFTATBgNVBAoTDEQtVHJ1c3QgR21iSDEi ++MCAGA1UEAxMZRC1UUlVTVCBFViBSb290IENBIDIgMjAyMzCCAiIwDQYJKoZIhvcN ++AQEBBQADggIPADCCAgoCggIBANiOo4mAC7JXUtypU0w3uX9jFxPvp1sjW2l1sJkK ++F8GLxNuo4MwxusLyzV3pt/gdr2rElYfXR8mV2IIEUD2BCP/kPbOx1sWy/YgJ25yE ++7CUXFId/MHibaljJtnMoPDT3mfd/06b4HEV8rSyMlD/YZxBTfiLNTiVR8CUkNRFe ++EMbsh2aJgWi6zCudR3Mfvc2RpHJqnKIbGKBv7FD0fUDCqDDPvXPIEysQEx6Lmqg6 ++lHPTGGkKSv/BAQP/eX+1SH977ugpbzZMlWGG2Pmic4ruri+W7mjNPU0oQvlFKzIb ++RlUWaqZLKfm7lVa/Rh3sHZMdwGWyH6FDrlaeoLGPaxK3YG14C8qKXO0elg6DpkiV ++jTujIcSuWMYAsoS0I6SWhjW42J7YrDRJmGOVxcttSEfi8i4YHtAxq9107PncjLgc ++jmgjutDzUNzPZY9zOjLHfP7KgiJPvo5iR2blzYfi6NUPGJ/lBHJLRjwQ8kTCZFZx ++TnXonMkmdMV9WdEKWw9t/p51HBjGGjp82A0EzM23RWV6sY+4roRIPrN6TagD4uJ+ ++ARZZaBhDM7DS3LAaQzXupdqpRlyuhoFBAUp0JuyfBr/CBTdkdXgpaP3F9ev+R/nk ++hbDhezGdpn9yo7nELC7MmVcOIQxFAZRl62UJxmMiCzNJkkg8/M3OsD6Onov4/knF ++NXJHAgMBAAGjgY4wgYswDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUqvyREBuH ++kV8Wub9PS5FeAByxMoAwDgYDVR0PAQH/BAQDAgEGMEkGA1UdHwRCMEAwPqA8oDqG ++OGh0dHA6Ly9jcmwuZC10cnVzdC5uZXQvY3JsL2QtdHJ1c3RfZXZfcm9vdF9jYV8y ++XzIwMjMuY3JsMA0GCSqGSIb3DQEBDQUAA4ICAQCTy6UfmRHsmg1fLBWTxj++EI14 ++QvBukEdHjqOSMo1wj/Zbjb6JzkcBahsgIIlbyIIQbODnmaprxiqgYzWRaoUlrRc4 ++pZt+UPJ26oUFKidBK7GB0aL2QHWpDsvxVUjY7NHss+jOFKE17MJeNRqrphYBBo7q ++3C+jisosketSjl8MmxfPy3MHGcRqwnNU73xDUmPBEcrCRbH0O1P1aa4846XerOhU ++t7KR/aypH/KH5BfGSah82ApB9PI+53c0BFLd6IHyTS9URZ0V4U/M5d40VxDJI3IX ++cI1QcB9WbMy5/zpaT2N6w25lBx2Eof+pDGOJbbJAiDnXH3dotfyc1dZnaVuodNv8 ++ifYbMvekJKZ2t0dT741Jj6m2g1qllpBFYfXeA08mD6iL8AOWsKwV0HFaanuU5nCT ++2vFp4LJiTZ6P/4mdm13NRemUAiKN4DV/6PEEeXFsVIP4M7kFMhtYVRFP0OUnR3Hs ++7dpn1mKmS00PaaLJvOwiS5THaJQXfuKOKD62xur1NGyfN4gHONuGcfrNlUhDbqNP ++gofXNJhuS5N5YHVpD/Aa1VP6IQzCP+k/HxiMkl14p3ZnGbuy6n/pcAlWVqOwDAst ++Nl7F6cTVg8uGF5csbBNvh1qvSaYd2804BC5f4ko1Di1L+KIkBI3Y4WNeApI02phh ++XBxvWHZks/wCuPWdCg== ++-----END CERTIFICATE----- ++ ++# 578af4ded0853f4e5998db4aeaf9cbea8d945f60b620a38d1a3c13b2bc7ba8e1 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 36:3a:96:8c:c9:5c:b2:58:cd:d0:01:5d:c5:e5:57:00 ++ Signature Algorithm: ecdsa-with-SHA384 ++ Issuer: C=DE, O=Deutsche Telekom Security GmbH, CN=Telekom Security TLS ECC Root 2020 ++ Validity ++ Not Before: Aug 25 07:48:20 2020 GMT ++ Not After : Aug 25 23:59:59 2045 GMT ++ Subject: C=DE, O=Deutsche Telekom Security GmbH, CN=Telekom Security TLS ECC Root 2020 ++ Subject Public Key Info: ++ Public Key Algorithm: id-ecPublicKey ++ Public-Key: (384 bit) ++ pub: ++ 04:ce:bf:fe:57:a8:bf:d5:aa:f7:10:9a:cd:bc:d1: ++ 11:a2:bd:67:42:cc:90:eb:15:18:90:d9:a2:cd:0c: ++ 2a:25:eb:3e:4f:ce:b5:d2:8f:0f:f3:35:da:43:8b: ++ 02:80:be:6f:51:24:1d:0f:6b:2b:ca:9f:c2:6f:50: ++ 32:e5:37:20:b6:20:ff:88:0d:0f:6d:49:bb:db:06: ++ a4:87:90:92:94:f4:09:d0:cf:7f:c8:80:0b:c1:97: ++ b3:bb:35:27:c9:c2:1b ++ ASN1 OID: secp384r1 ++ NIST CURVE: P-384 ++ X509v3 extensions: ++ X509v3 Subject Key Identifier: ++ E3:72:CC:6E:95:99:47:B1:E6:B3:61:4C:D1:CB:AB:E3:BA:CD:DE:9F ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ Signature Algorithm: ecdsa-with-SHA384 ++ Signature Value: ++ 30:64:02:30:75:52:8b:b7:a4:10:4f:ae:4a:10:8b:b2:84:5b: ++ 42:e1:e6:2a:36:02:da:a0:6e:19:3f:25:bf:da:59:32:8e:e4: ++ fb:90:dc:93:64:ce:ad:b4:41:47:60:e2:cf:a7:cb:1e:02:30: ++ 37:41:8c:66:df:41:6b:d6:83:00:41:fd:2f:5a:f7:50:b4:67: ++ d1:2c:a8:71:d7:43:ca:9c:27:24:91:83:48:0d:cf:cd:f7:54: ++ 81:af:ec:7f:e4:67:db:b8:90:ee:dd:25 ++-----BEGIN CERTIFICATE----- ++MIICQjCCAcmgAwIBAgIQNjqWjMlcsljN0AFdxeVXADAKBggqhkjOPQQDAzBjMQsw ++CQYDVQQGEwJERTEnMCUGA1UECgweRGV1dHNjaGUgVGVsZWtvbSBTZWN1cml0eSBH ++bWJIMSswKQYDVQQDDCJUZWxla29tIFNlY3VyaXR5IFRMUyBFQ0MgUm9vdCAyMDIw ++MB4XDTIwMDgyNTA3NDgyMFoXDTQ1MDgyNTIzNTk1OVowYzELMAkGA1UEBhMCREUx ++JzAlBgNVBAoMHkRldXRzY2hlIFRlbGVrb20gU2VjdXJpdHkgR21iSDErMCkGA1UE ++AwwiVGVsZWtvbSBTZWN1cml0eSBUTFMgRUNDIFJvb3QgMjAyMDB2MBAGByqGSM49 ++AgEGBSuBBAAiA2IABM6//leov9Wq9xCazbzREaK9Z0LMkOsVGJDZos0MKiXrPk/O ++tdKPD/M12kOLAoC+b1EkHQ9rK8qfwm9QMuU3ILYg/4gND21Ju9sGpIeQkpT0CdDP ++f8iAC8GXs7s1J8nCG6NCMEAwHQYDVR0OBBYEFONyzG6VmUex5rNhTNHLq+O6zd6f ++MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMAoGCCqGSM49BAMDA2cA ++MGQCMHVSi7ekEE+uShCLsoRbQuHmKjYC2qBuGT8lv9pZMo7k+5Dck2TOrbRBR2Di ++z6fLHgIwN0GMZt9Ba9aDAEH9L1r3ULRn0SyocddDypwnJJGDSA3PzfdUga/sf+Rn ++27iQ7t0l ++-----END CERTIFICATE----- ++ ++# efc65cadbb59adb6efe84da22311b35624b71b3b1ea0da8b6655174ec8978646 ++Certificate: ++ Data: ++ Version: 3 (0x2) ++ Serial Number: ++ 21:9c:54:2d:e8:f6:ec:71:77:fa:4e:e8:c3:70:57:97 ++ Signature Algorithm: sha384WithRSAEncryption ++ Issuer: C=DE, O=Deutsche Telekom Security GmbH, CN=Telekom Security TLS RSA Root 2023 ++ Validity ++ Not Before: Mar 28 12:16:45 2023 GMT ++ Not After : Mar 27 23:59:59 2048 GMT ++ Subject: C=DE, O=Deutsche Telekom Security GmbH, CN=Telekom Security TLS RSA Root 2023 ++ Subject Public Key Info: ++ Public Key Algorithm: rsaEncryption ++ Public-Key: (4096 bit) ++ Modulus: ++ 00:ed:35:a1:81:80:f3:cb:4a:69:5b:c2:fb:51:83: ++ ae:26:fd:e1:6e:f3:81:12:7d:71:40:ff:87:75:42: ++ 29:21:ed:81:52:2c:df:12:c1:19:84:89:c1:bd:c5: ++ 28:d5:d5:4b:6c:44:d6:4c:db:07:96:4a:55:7a:ca: ++ 36:82:04:36:a8:a5:fc:27:f6:49:f1:d5:72:9e:91: ++ f9:23:d6:70:7b:bb:f5:9b:c1:ec:93:cf:19:ea:65: ++ 7e:88:70:a0:73:fc:f6:ff:b5:56:62:e1:73:6a:34: ++ 98:3e:82:b8:ac:95:53:f4:01:a0:27:07:72:a3:00: ++ 53:a0:e4:b2:ab:83:38:57:33:25:94:9f:be:48:1d: ++ 98:e1:a3:ba:9e:5c:cd:04:71:51:7d:75:78:ab:f3: ++ 59:aa:c4:e0:60:be:8f:83:52:b8:75:1a:41:35:ed: ++ bc:f3:3a:63:e9:a9:14:45:d7:e6:52:d1:6e:d2:de: ++ bc:e3:f5:0b:3b:e6:e0:c4:bd:43:64:13:a6:ce:f4: ++ 98:37:6c:8a:95:a8:97:c8:47:0f:f0:5e:10:8b:e7: ++ 1d:1c:fe:b1:3b:a0:05:33:68:05:41:82:c1:03:2b: ++ 01:c8:e7:8f:4d:ab:e8:b5:f6:cd:6b:44:b5:e7:dd: ++ 8b:ec:ea:25:b4:00:22:57:4d:b0:b1:b2:31:c1:16: ++ ce:ff:fd:14:84:b7:47:fa:b2:f1:70:de:db:8b:6c: ++ 36:58:a4:7c:b3:11:d1:c3:77:7f:5f:b6:25:e0:0d: ++ c5:d2:b3:f9:b8:b8:77:db:37:71:71:47:e3:60:18: ++ 4f:24:b6:75:37:78:b9:a3:62:af:bd:c9:72:8e:2f: ++ cc:bb:ae:db:e4:15:52:19:07:33:fb:6a:b7:2d:4b: ++ 90:28:82:73:fe:18:8b:35:8d:db:a7:04:6a:be:ea: ++ c1:4d:36:3b:16:36:91:32:ef:b6:40:89:91:43:e0: ++ f2:a2:ab:04:2e:e6:f2:4c:0e:16:34:20:ac:87:c1: ++ 2d:7e:c9:66:47:17:14:11:a4:f3:f7:a1:24:89:ab: ++ d8:1a:c8:a1:5c:b1:a3:f7:8c:6d:c8:01:c9:4f:c9: ++ ec:c4:fc:ac:51:33:d1:c8:83:d1:c9:9f:1d:d4:47: ++ 34:29:3e:cb:b0:0e:fa:83:0b:28:58:e5:29:dc:3f: ++ 7c:a8:9f:c9:b6:0a:bb:a6:e8:46:16:0f:96:e5:7b: ++ e4:6a:7a:48:6d:76:98:05:a5:dc:6d:1e:42:1e:42: ++ da:1a:e0:52:f7:b5:83:c0:1a:7b:78:35:2c:38:f5: ++ 1f:fd:49:a3:2e:d2:59:63:bf:80:b0:8c:93:73:cb: ++ 35:a6:99:95:22:61:65:03:60:fb:2f:93:4b:fa:9a: ++ 9c:80:3b ++ Exponent: 65537 (0x10001) ++ X509v3 extensions: ++ X509v3 Key Usage: critical ++ Certificate Sign, CRL Sign ++ X509v3 Subject Key Identifier: ++ B6:A7:97:82:3D:74:85:9B:F7:3C:9F:93:9A:95:79:75:52:8C:6D:47 ++ X509v3 Basic Constraints: critical ++ CA:TRUE ++ X509v3 Authority Key Identifier: ++ B6:A7:97:82:3D:74:85:9B:F7:3C:9F:93:9A:95:79:75:52:8C:6D:47 ++ Signature Algorithm: sha384WithRSAEncryption ++ Signature Value: ++ a8:cc:61:a6:be:75:9e:15:50:a4:6b:fb:a8:70:45:7c:ba:7e: ++ b1:5a:fc:5b:23:fa:0a:77:f8:98:71:82:0c:6d:e0:5e:46:aa: ++ 93:f4:1e:a0:c3:e1:93:db:4b:ad:b2:a6:5d:ab:b0:d4:62:cb: ++ 5e:bb:66:f5:2d:ee:97:40:3c:62:eb:5e:d6:14:d6:8c:e2:96: ++ 8b:41:69:93:35:e6:b9:99:6b:62:b4:a1:17:66:34:a6:6b:63: ++ c6:b9:4e:f2:22:e9:58:0d:56:41:d1:fa:0c:4a:f0:33:cd:3b: ++ bb:6d:21:3a:ae:8e:72:b5:c3:4a:fb:e9:7d:e5:b1:9b:86:ee: ++ e2:e0:7d:b4:f7:32:fd:22:84:f1:85:c9:37:79:e9:b5:3f:bf: ++ 5c:e4:74:b2:8f:11:62:00:dd:18:66:a1:d9:7b:23:5f:f1:8e: ++ d5:67:e8:54:da:5b:3a:6b:36:6f:f9:81:b1:33:47:33:77:40: ++ f9:52:aa:dd:d4:83:cf:85:78:99:9a:93:b9:73:67:42:46:11: ++ 21:ea:fe:0a:a9:1b:1a:65:69:b3:8f:ae:16:b6:f6:4b:56:b2: ++ 2d:f9:a5:c8:ec:3b:62:a3:ed:6b:d0:4e:d5:40:09:a4:1f:98: ++ d7:3a:a5:92:59:20:e4:b0:7d:cd:5b:73:68:bd:6d:c4:a2:13: ++ 0e:67:19:b8:8d:42:7e:6c:0c:9a:6e:a0:24:2d:d5:45:1b:dc: ++ c4:02:14:fe:85:5b:65:97:ca:4e:90:50:08:7a:42:35:f9:ea: ++ c2:66:d4:f8:01:ae:1e:b4:be:c3:a8:ef:fe:76:9a:a2:a6:1f: ++ 46:f6:84:ed:fc:db:ce:c4:02:ce:77:48:2c:8c:b2:ec:c3:00: ++ a3:ec:2c:55:18:c1:7e:19:ee:e1:2f:f2:ad:83:9b:9e:ab:19: ++ df:c6:8a:2f:8c:77:e5:b7:05:ec:3b:c1:ec:be:86:b3:86:bc: ++ c0:f7:dc:e7:ea:5b:ae:b2:cc:b5:35:86:4b:d0:e2:3f:b6:d8: ++ f8:0e:00:ee:5d:e3:f7:8d:58:ff:cf:8b:37:e9:63:5f:6e:f7: ++ 09:71:36:c2:12:5d:57:f2:c8:b4:cd:f3:ee:02:df:11:dc:6a: ++ b9:57:84:1d:59:4d:8c:ce:c8:0e:23:c2:b7:26:9a:10:14:71: ++ fe:93:b2:8a:b8:80:f0:0e:10:9e:d3:a8:50:0c:37:82:2f:ea: ++ e0:8a:9d:e1:2c:39:ff:b5:b4:73:00:e4:f7:48:a6:73:ac:bf: ++ b2:de:77:04:87:b4:a3:cd:9b:35:24:37:fa:90:93:13:81:42: ++ c6:98:26:75:37:66:41:10:ac:bb:f5:94:e3:c2:31:2b:ad:e7: ++ 23:56:cc:35:25:92:b3:50 ++-----BEGIN CERTIFICATE----- ++MIIFszCCA5ugAwIBAgIQIZxULej27HF3+k7ow3BXlzANBgkqhkiG9w0BAQwFADBj ++MQswCQYDVQQGEwJERTEnMCUGA1UECgweRGV1dHNjaGUgVGVsZWtvbSBTZWN1cml0 ++eSBHbWJIMSswKQYDVQQDDCJUZWxla29tIFNlY3VyaXR5IFRMUyBSU0EgUm9vdCAy ++MDIzMB4XDTIzMDMyODEyMTY0NVoXDTQ4MDMyNzIzNTk1OVowYzELMAkGA1UEBhMC ++REUxJzAlBgNVBAoMHkRldXRzY2hlIFRlbGVrb20gU2VjdXJpdHkgR21iSDErMCkG ++A1UEAwwiVGVsZWtvbSBTZWN1cml0eSBUTFMgUlNBIFJvb3QgMjAyMzCCAiIwDQYJ ++KoZIhvcNAQEBBQADggIPADCCAgoCggIBAO01oYGA88tKaVvC+1GDrib94W7zgRJ9 ++cUD/h3VCKSHtgVIs3xLBGYSJwb3FKNXVS2xE1kzbB5ZKVXrKNoIENqil/Cf2SfHV ++cp6R+SPWcHu79ZvB7JPPGeplfohwoHP89v+1VmLhc2o0mD6CuKyVU/QBoCcHcqMA ++U6DksquDOFczJZSfvkgdmOGjup5czQRxUX11eKvzWarE4GC+j4NSuHUaQTXtvPM6 ++Y+mpFEXX5lLRbtLevOP1Czvm4MS9Q2QTps70mDdsipWol8hHD/BeEIvnHRz+sTug ++BTNoBUGCwQMrAcjnj02r6LX2zWtEtefdi+zqJbQAIldNsLGyMcEWzv/9FIS3R/qy ++8XDe24tsNlikfLMR0cN3f1+2JeANxdKz+bi4d9s3cXFH42AYTyS2dTd4uaNir73J ++co4vzLuu2+QVUhkHM/tqty1LkCiCc/4YizWN26cEar7qwU02OxY2kTLvtkCJkUPg ++8qKrBC7m8kwOFjQgrIfBLX7JZkcXFBGk8/ehJImr2BrIoVyxo/eMbcgByU/J7MT8 ++rFEz0ciD0cmfHdRHNCk+y7AO+oMLKFjlKdw/fKifybYKu6boRhYPluV75Gp6SG12 ++mAWl3G0eQh5C2hrgUve1g8Aae3g1LDj1H/1Joy7SWWO/gLCMk3PLNaaZlSJhZQNg +++y+TS/qanIA7AgMBAAGjYzBhMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUtqeX ++gj10hZv3PJ+TmpV5dVKMbUcwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBS2 ++p5eCPXSFm/c8n5OalXl1UoxtRzANBgkqhkiG9w0BAQwFAAOCAgEAqMxhpr51nhVQ ++pGv7qHBFfLp+sVr8WyP6Cnf4mHGCDG3gXkaqk/QeoMPhk9tLrbKmXauw1GLLXrtm ++9S3ul0A8Yute1hTWjOKWi0FpkzXmuZlrYrShF2Y0pmtjxrlO8iLpWA1WQdH6DErw ++M807u20hOq6OcrXDSvvpfeWxm4bu4uB9tPcy/SKE8YXJN3nptT+/XOR0so8RYgDd ++GGah2XsjX/GO1WfoVNpbOms2b/mBsTNHM3dA+VKq3dSDz4V4mZqTuXNnQkYRIer+ ++CqkbGmVps4+uFrb2S1ayLfmlyOw7YqPta9BO1UAJpB+Y1zqlklkg5LB9zVtzaL1t ++xKITDmcZuI1CfmwMmm6gJC3VRRvcxAIU/oVbZZfKTpBQCHpCNfnqwmbU+AGuHrS+ ++w6jv/naaoqYfRvaE7fzbzsQCzndILIyy7MMAo+wsVRjBfhnu4S/yrYObnqsZ38aK ++L4x35bcF7DvB7L6Gs4a8wPfc5+pbrrLMtTWGS9DiP7bY+A4A7l3j941Y/8+LN+lj ++X273CXE2whJdV/LItM3z7gLfEdxquVeEHVlNjM7IDiPCtyaaEBRx/pOyiriA8A4Q ++ntOoUAw3gi/q4Iqd4Sw5/7W0cwDk90imc6y/st53BIe0o82bNSQ3+pCTE4FCxpgm ++dTdmQRCsu/WU48IxK63nI1bMNSWSs1A= ++-----END CERTIFICATE----- +\ No newline at end of file diff --git a/meta-python/recipes-devtools/python/python3-grpcio_1.78.0.bb b/meta-python/recipes-devtools/python/python3-grpcio_1.78.0.bb index 5cd530f1c4..43618afa97 100644 --- a/meta-python/recipes-devtools/python/python3-grpcio_1.78.0.bb +++ b/meta-python/recipes-devtools/python/python3-grpcio_1.78.0.bb @@ -13,6 +13,8 @@ DEPENDS += "c-ares openssl python3-protobuf re2 zlib" SRC_URI += "file://0001-python-enable-unbundled-cross-compilation.patch \ file://0001-Fix-OpenSSL-4.0-compatibility.patch \ file://abseil-ppc-fixes.patch \ + file://0001-Update-repo-roots-to-chromium-roots-42094.patch \ + file://0001-Update-gRPC-repo-roots.-43699.patch \ " SRC_URI[sha256sum] = "7382b95189546f375c174f53a5fa873cef91c4b8005faa05cc5b3beea9c4f1c5" @@ -32,6 +34,10 @@ export GRPC_PYTHON_BUILD_SYSTEM_OPENSSL = "1" export GRPC_PYTHON_BUILD_SYSTEM_RE2 = "1" export GRPC_PYTHON_BUILD_SYSTEM_ZLIB = "1" +do_configure:prepend() { + cp ${S}/etc/roots.pem ${S}/src/python/grpcio/grpc/_cython/_credentials/roots.pem +} + do_configure:append() { # Relax strict cython version pin so that the available cython satisfies the requirement. # The C files are pre-generated so cython is not actually used during compilation. From patchwork Wed Oct 28 04:23:46 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102213 Received: from mail-pj1-f52.google.com (mail-pj1-f52.google.com [209.85.216.52]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36222.1793161568557645016 for ; Tue, 27 Oct 2026 21:26:08 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=a3QxFOTp; spf=pass (domain: gmail.com, ip: 209.85.216.52, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f52.google.com with SMTP id 98e67ed59e1d1-3adac5c10e3so302598a91.0 for ; Tue, 27 Oct 2026 21:26:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161568; x=1793766368; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=HCbv5aFli/SUaqr63iGl3VFZls39DwvVgdI8l0oomms=; b=a3QxFOTpyGyWbVnsulrsVLbHVbyBIoHJIMZFd//+41kYsyfyQei9eNl7UbxbN15Xkt 6OdJqfNruzwani66RulgFBDq4bJonkl7XyX0UfUKovn6xQ0sDjtcrZKLUB3qhbthH7sq k12qZhVd/v2w6/jLK8GdG+nWMhm3nUA00mpZW6znYkRZLbboMeaFJYWG/nWevxT9qGNP F06M8xlFsW/KolAi8AOxHMmvpYMcKjE/JC5ev+lAN/WWYFWtd+IruxsrK8+3t3xTIc2b CtcgP1BFQsQHO3ENK5BB9kDdUeun03qmjoU6P7Q2JCEvxYsz5nMZoqmz46HGbgTOH2hn T1ag== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161568; x=1793766368; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=HCbv5aFli/SUaqr63iGl3VFZls39DwvVgdI8l0oomms=; b=QbmjnGB1pGyeJToHbxiWczTCWNlQAZWQpFSUoT224Nsre3zTZ+stqov5b6GuAInbLA jUqee4kVfYtSupADfxFUWZG3GGTNKZ/Emhxz6NJgMCDM5v3eXmNLPaCQ2uuvanVjv/2k ryIXOggM9k+p2lo/VCc9/womYVhh7YbvC3XA3ew+qMFeuQY1QQxwKqhh7xh0QDUx3wqT AUA0Q1kGr6EUwW4Ai2qG0opw4lQbccvcsGjFTN+qS/mp8keVYOSK5g5AXcs2ZrQ3qGAX MiRZzuyhJdAEaAbgBSwOMaswmYRYM0vcFIT7AduU00m0woDOSFxEVoIE0LY8Hlwaos3p gtGg== X-Gm-Message-State: AFq9FYJDAx1br+wmKu3yx7msf1E/9jScqCEpJGC89agVXoSbA5rFDEZv gqWq2LIWrfiYL+vt79aubNL0EQLKTHXGfarouBVWps/Ds97E7AKj0uK9nl6sIw== X-Gm-Gg: AYBFou2+r+jHi7LhEKzCyEsKiqhDtABKpIodYYuXOgbBVq9w2oTT4sSBRhM0L1iOynF Gw5KYjmupV6xb5l8IjsDAcTasTeMPjmYtp+U/Ufe++8kfO6G68DkXSCTPgKpcfwbYlbIOiQB2MS G3Hn03lfpF+DNfvYHOdAVhGWGquAZh70eSWiF6H04llgqWVvNiRQDqmPNpeecgCzyBLlDtsv1zY gH24NMyLeAhqtvROxDWPDQVAHJvWsKKx2Yk4GggWoSJnArTT7sEpbDz3nWmQuAlo31VtVJmpClA ZNkaHZiUFXBo1PcWW7tu96rc3akZ7maqOd/s8RQ3fX4f5I9dtGilpFkKImOOQoihSy22Aw7qhTl X++EoI0g1U/hUys+C+BCb0DO1aMAlI3r5C8GmjLqQ+Q+Tm22+gS/EmH43I3fT9L405oqsuwO+2O uRN6JqZouSuSNCemXk5wAgGMRh7AfLpbbn4A/esaGoyUEyXLa7IkZDOby657cvC3Xb64l4Jd36Q zqLWQljDxZLnsbB4rCdv/HVIu+kxx7428DvLbRkaGP8h+6nH262Y9beEupL5X+5rCCComoj01Dm aKez+f3fWEfeoXkbbd7hUk/T+kWd1qn+Ey+EarKafuUL0Ii5bYVoTqFBTBKasTfZZfoD6h1Y9vv TukoMG44= X-Received: by 2002:a17:90b:50cb:b0:3ad:68f7:dbcd with SMTP id 98e67ed59e1d1-3ae582adcfamr872657a91.55.1793161567863; Tue, 27 Oct 2026 21:26:07 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.26.05 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:26:07 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 48/60] libmspack: patch CVE-2026-110602 Date: Wed, 28 Oct 2026 17:23:46 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:16 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131599 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-110602 Signed-off-by: Ankur Tyagi --- .../libmspack/CVE-2026-110602.patch | 41 +++++++++++++++++++ .../cabextract/libmspack_0.11alpha.bb | 4 +- 2 files changed, 44 insertions(+), 1 deletion(-) create mode 100644 meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch diff --git a/meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch b/meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch new file mode 100644 index 0000000000..15d690945f --- /dev/null +++ b/meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch @@ -0,0 +1,41 @@ +From aca3603bed20772fd86ce5b901005668cee835ad Mon Sep 17 00:00:00 2001 +From: Stuart Caie +Date: Mon, 15 Jun 2026 16:33:33 +0000 +Subject: [PATCH] kwajd_read_headers(): initialise pointers before returning + any error + +CVE: CVE-2026-110602 +Upstream-Status: Backport [https://github.com/kyz/libmspack/commit/4d868504114346aa767d435fbb89a8b76603493f] + +Dropped changes for test and ChangeLog file. + +Signed-off-by: Ankur Tyagi +--- + mspack/kwajd.c | 7 +++++-- + 1 file changed, 5 insertions(+), 2 deletions(-) + +diff --git a/mspack/kwajd.c b/mspack/kwajd.c +index 30caa89..ede91dd 100644 +--- a/mspack/kwajd.c ++++ b/mspack/kwajd.c +@@ -160,6 +160,11 @@ static int kwajd_read_headers(struct mspack_system *sys, + unsigned char buf[16]; + int i; + ++ ++ /* initialise pointers */ ++ hdr->filename = NULL; ++ hdr->extra = NULL; ++ + /* read in the header */ + if (sys->read(fh, &buf[0], kwajh_SIZEOF) != kwajh_SIZEOF) { + return MSPACK_ERR_READ; +@@ -177,8 +182,6 @@ static int kwajd_read_headers(struct mspack_system *sys, + hdr->data_offset = EndGetI16(&buf[kwajh_DataOffset]); + hdr->headers = EndGetI16(&buf[kwajh_Flags]); + hdr->length = 0; +- hdr->filename = NULL; +- hdr->extra = NULL; + hdr->extra_length = 0; + + /* optional headers */ diff --git a/meta-oe/recipes-support/cabextract/libmspack_0.11alpha.bb b/meta-oe/recipes-support/cabextract/libmspack_0.11alpha.bb index 169a5f271b..c612e54e17 100644 --- a/meta-oe/recipes-support/cabextract/libmspack_0.11alpha.bb +++ b/meta-oe/recipes-support/cabextract/libmspack_0.11alpha.bb @@ -8,7 +8,9 @@ LICENSE = "LGPL-2.1-only" LIC_FILES_CHKSUM = "file://COPYING.LIB;md5=7fbc338309ac38fefcd64b04bb903e34" -SRC_URI = "https://www.cabextract.org.uk/libmspack/libmspack-${PV}.tar.gz" +SRC_URI = "https://www.cabextract.org.uk/libmspack/libmspack-${PV}.tar.gz \ + file://CVE-2026-110602.patch \ +" SRC_URI[sha256sum] = "70dd1fb2f0aecc36791b71a1e1840e62173079eadaa081192d1c323a0eeea21b" inherit autotools From patchwork Wed Oct 28 04:23:47 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102215 Received: from mail-pl1-f170.google.com (mail-pl1-f170.google.com [209.85.214.170]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36223.1793161570790418982 for ; Tue, 27 Oct 2026 21:26:10 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=t/lf/Ux4; spf=pass (domain: gmail.com, ip: 209.85.214.170, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pl1-f170.google.com with SMTP id d9443c01a7336-2e5fb79ce82so3187365ad.0 for ; Tue, 27 Oct 2026 21:26:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161570; x=1793766370; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=Rjv6WFBMQzG1BHncFUbXUizK8biVToiSEkCYlL2AO20=; b=t/lf/Ux46uDkzu5tyUg2sPM+tBEKQelEumElhMsYfWXOEW9He+3IzIbly/yPzpBMUe PrUoXvXQTlcM+u/AVnUQ+L9aq42Blsc87+yzwVS66/E54VuupuVPkj/2SNuR3gHZDot7 wnIxQa1NHtmdrQmmWYSAmClQgXDsMXtSG08n7oOhZELxadgMuQbcQWx0MT28K+BYCB1o /XyCIhTVvtiuZpngFOIIIffraQKW5BckrrJXnOpqrigfcYFRJGuzoqr7GTYcB7kCpj2B Wy+qlh4HIxu2cisKKP0jKsqj4o1lWOo2nj+vt3KwVJvXfyYtbVxzE3RuYgn2tUr0wVjP 0ZzA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161570; x=1793766370; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=Rjv6WFBMQzG1BHncFUbXUizK8biVToiSEkCYlL2AO20=; b=G/w+g7F/CIOfWv3qlCd/4e5LDjLIBSkEyXeRxLzX2pfxIq2wuZ5GXMAWHgWHgScE+q CqCH2vL4KX8HuGwU23KXVoi+BV3ZXjx72QcPOBNvpB7F90At8aaKipUkrqLXAtKXxs3+ wXVgm9OiUIaEVANq1BCLfnqubKD/X1D2krmLRTv7+RICMp8BeaKj8GazTSRSDI+IU4cx xZaeFP4zvWvW9obJQgoCkL35NQbO2CfM54i4DNSeFz/Te+uJhnjsZltNzvYn20TXpzU7 4JPKZf4gnluUIGygkq9M4yu5ofUZ2PYLru8EoS5qwX0sdLKICY3lKuZPawgnPPydFBpD qyCQ== X-Gm-Message-State: AFq9FYK06CGptPjJqED2s2hZ1YW+fLMIq4Cn4VVe9Tl1u6EuCEb1dvDl VO9k6wP26k7FAdUyJdDwJcnTjhqRFpOHjwl7sXhgKi8Na7LPhRd4A0Bvot1vMg== X-Gm-Gg: AYBFou0/toXtqGhEhOcf1OSSsyKmyap4K55izoUzQbT+bpW5iabA7mLfvL9mLf6Lk+x Iz7w4YJFEQLKIQknyLXtHj+l52jx6hnVRTfng1Wb5N0MzHhRlQvwI31YoyPpKA/1m5RgCGu8ZKg piGnYDayWGh41KlTuDgavKmZQrcoFtBXmsfNxD95OL6k/hFrzQoFVNlA5ajMoS9j/sG1Fuw1wm4 McDEc4expmAh8eoUJC+HDLOSuJ7Blav13qqTaDSIWPUDxr4tx+Xbg6p16Ov6MSEaVVMn1/KphUM hIgnQgLV6epk/h0nwzc9xhuYIlE6KZq/AYEw+zb92wsV7RMFRVdbWFGRGscAx+tHZNQPBEeruyc fJqrAu7dJ9F7LeGbKknDyLWpEu8tp7u7dFWQ4MYY4Z31zYQWAHSl6EstdRB7mYELlOrx/gAXJQl QyYBi3IzmJfvPkBc3lAqqzpd9X7ntfqR8cfiACpB/gLkQfgo6Sf+2XEbEEzW6aa84aOsPdjNpEx /+AGt8VctUuegWmY7aL8eHrxvRNJ9MpEmPJpxZx1QCwBN9uCcfdN10wNCoeuQr/29ZjTQFezg/b VL1Y1FrQiBR7B584G0ydubQwynKOHxIPI7WZwwj5zUu244xXHY3nQYOVdHJ3iA== X-Received: by 2002:a17:90b:280b:b0:3ac:8af9:4a6a with SMTP id 98e67ed59e1d1-3ae580df8d5mr873483a91.42.1793161570148; Tue, 27 Oct 2026 21:26:10 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.26.08 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:26:09 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 49/60] unbound: upgrade 1.26.1 -> 1.26.2 Date: Wed, 28 Oct 2026 17:23:47 +1300 Message-ID: <03be564adc156776cf0a3c2780de7fd7b6ee9770.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:17 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131601 From: Ankur Tyagi Details: https://github.com/NLnetLabs/unbound/releases/tag/release-1.26.2 Signed-off-by: Ankur Tyagi --- .../unbound/{unbound_1.26.1.bb => unbound_1.26.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-networking/recipes-support/unbound/{unbound_1.26.1.bb => unbound_1.26.2.bb} (98%) diff --git a/meta-networking/recipes-support/unbound/unbound_1.26.1.bb b/meta-networking/recipes-support/unbound/unbound_1.26.2.bb similarity index 98% rename from meta-networking/recipes-support/unbound/unbound_1.26.1.bb rename to meta-networking/recipes-support/unbound/unbound_1.26.2.bb index f426ce351e..8894a59d07 100644 --- a/meta-networking/recipes-support/unbound/unbound_1.26.1.bb +++ b/meta-networking/recipes-support/unbound/unbound_1.26.2.bb @@ -14,7 +14,7 @@ SRC_URI = "git://github.com/NLnetLabs/unbound.git;protocol=https;branch=master;t file://run-ptest \ " -SRCREV = "13b6717f1716810523ffb60f971a6c9c5e8ce127" +SRCREV = "f0cd7067d950921427c91ade4ecf060e944f88eb" inherit autotools pkgconfig systemd update-rc.d ptest From patchwork Wed Oct 28 04:23:48 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102214 Received: from mail-pg1-f174.google.com (mail-pg1-f174.google.com [209.85.215.174]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36078.1793161573248301002 for ; Tue, 27 Oct 2026 21:26:13 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=NFnwIHg1; spf=pass (domain: gmail.com, ip: 209.85.215.174, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f174.google.com with SMTP id 41be03b00d2f7-cd5d2dafeccso318168a12.2 for ; Tue, 27 Oct 2026 21:26:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161573; x=1793766373; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=jzwb18IX82J2jZjACC1WDiXNaFJqOJrGuwWoGPsrXa8=; b=NFnwIHg1A8V3+jf9cH5jwRY9VbIPbhAh/bjB316UEDAnw/JIMZdrctrUo9X4T/SaZB 8NPVybro9tcuLFYT29D81DQB7Wm6XCnJ0UrLeRpUOvfq2SS92jvv4BV5fkch5UGLXcFf OWYGAi4d+WVplet1E195/RpbJ110qs2GNASh0lNrmpa6Wk/Uo7kdoVST8i/bswoqXQZy VMzQUVIqpSqwGaCRtkkg3GpUdvZxMK89KCgddN5LTu1/w+eYYJo9dginAJRLUSvWptPj Hb/3SI13vsgYye1oIbeKGGkYKwv9ylYCgcYy81hGoZeuSRorc8MZFT0cP6XyHuiAeJEq Rq2Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161573; x=1793766373; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=jzwb18IX82J2jZjACC1WDiXNaFJqOJrGuwWoGPsrXa8=; b=EmYsqjh900pEda5pWVlxiW/aNzWu0CcKl51suC5g3OlQkaRQw7VIGFI2DmTfYD/Fap 4DkT9jeRbiJsfHfX9mHbKwGCMFcbJcBHaDeiDeqwIVQuO6Py8d99LQdvkIx/AwmqQD/l TcF82gjmSiCc4W9S89kLeeuC3ciMrB70jLbuWoPliWiklnORv9g6hoQn3uXAZfNYmFvq 06+pDYNd8TalMDCaKPJnFgpiXwLL7HKcyV0XaTd+SKfrq+NbB7SJytwz0Zh47Y+SBbX2 DhUGwth6LTLU87PAVhPBeNKmjGYdNA7wQ4xjw5OehQoyFNTV60mIskOY4aa0kY9JpSw3 JLow== X-Gm-Message-State: AFq9FYJwurWecmCqFtkYsXudtxQo7WQYZ7Tit1YmVSrJLx7bsYKKfHgo NCWT3MZhn8Rs2ZsvdUTERrokFvQ0jTQGSzVDoGwTPB52f7rtejHqsRAja8/SPA== X-Gm-Gg: AYBFou1NMtklsn8MH1OuNecpKEFXmMN02NEL99Jd0LRFWZIYs+uvJL1YKUbBwdQCf/8 cyUnpkQqxXFhRfti1xIQlx9EpdVwa05wgHDqvhF3K/VuZox85timCOyS00a6UNbFHc0Qny9UHvB XrmUuIVcCKRyOkZtg7CX0lo1YEBfiNxSnlTM0L1zSotKEhZ50t/rSHMEmt75nnLEPxB3I789W3z Uoj1t+ltSGkU7sjub6gIFoBVilbkWQv+FbMMt/n0WfUNLmLVe01iL5x+SYSTh57rWjWFNwTZsAe rc6zflsuBaspE4jZFx2ORn9U9LQq8/KsHFNEDvaZwnaJSvA2+IXpWlA21Gs2dARFpXZEIa5iHCr PeFQD2IaqJeJKQz9LyVT+gr5haA8XjOZGNAKAMiVOLnWQr2uz66Tx5cvyyNAeU2DB/qleffI6Qj SRZ+Pm9AGYaqGXq2PcUhLM215xp/3qxHlDCRcJSU8QoENnXyT44vMwWnO1NkZ42NHEjjW5cqTaj sE9xhPt1MtuEXhGG523NOxAPdjH6lzNQhxXMovocSpI4ZpUmuWBNW6XnQeKQqTfkYvLyp+6CHgi 4NrqjLCJi9t+wS5CbSAcO3AaDyvRgIs1X7cy4RkwMKL/cRoy9vdLG5bBtsnllRiwqwncdEffAhf hxmvmZ/A= X-Received: by 2002:a17:90b:3d90:b0:3ab:be66:ddb6 with SMTP id 98e67ed59e1d1-3ae580ae5edmr757114a91.20.1793161572632; Tue, 27 Oct 2026 21:26:12 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.26.10 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:26:12 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi , Khem Raj Subject: [blacksail][PATCH 50/60] ntpsec: upgrade 1.2.5 -> 1.2.6 Date: Wed, 28 Oct 2026 17:23:48 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:17 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131602 From: Ankur Tyagi Changelog: https://gitlab.com/NTPsec/ntpsec/-/blob/NTPsec_1_2_6/NEWS.adoc?ref_type=tags Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj (cherry picked from commit b730ef39a1ee020404c54922e1467403c1533a25) Signed-off-by: Ankur Tyagi --- .../recipes-support/ntpsec/{ntpsec_1.2.5.bb => ntpsec_1.2.6.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-networking/recipes-support/ntpsec/{ntpsec_1.2.5.bb => ntpsec_1.2.6.bb} (98%) diff --git a/meta-networking/recipes-support/ntpsec/ntpsec_1.2.5.bb b/meta-networking/recipes-support/ntpsec/ntpsec_1.2.6.bb similarity index 98% rename from meta-networking/recipes-support/ntpsec/ntpsec_1.2.5.bb rename to meta-networking/recipes-support/ntpsec/ntpsec_1.2.6.bb index 26348f7c4b..832619edc4 100644 --- a/meta-networking/recipes-support/ntpsec/ntpsec_1.2.5.bb +++ b/meta-networking/recipes-support/ntpsec/ntpsec_1.2.6.bb @@ -17,7 +17,7 @@ SRC_URI = "https://ftp.ntpsec.org/pub/releases/ntpsec-${PV}.tar.gz \ file://0001-wscript-Add-BISONFLAGS-support.patch \ " -SRC_URI[sha256sum] = "6fb191cddaf607e7754b1f6915a1a61dc4018b3e4eef3d2ffacec961c9682949" +SRC_URI[sha256sum] = "8023beb9a0c86a93f0bf94d43fd388c71a6fa54d80bcbd747d899915191bb592" UPSTREAM_CHECK_URI = "ftp://ftp.ntpsec.org/pub/releases/" From patchwork Wed Oct 28 04:23:49 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102217 Received: from mail-pg1-f171.google.com (mail-pg1-f171.google.com [209.85.215.171]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36079.1793161575977929750 for ; Tue, 27 Oct 2026 21:26:16 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=LWeapkxM; spf=pass (domain: gmail.com, ip: 209.85.215.171, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f171.google.com with SMTP id 41be03b00d2f7-cdab8873d9dso240008a12.1 for ; Tue, 27 Oct 2026 21:26:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161575; x=1793766375; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=uCALeqgmEZs/AjQm6TdkycJoCCdzjvHnY9QjOJo46z4=; b=LWeapkxMfKbZ1Rj0ty+tZNkNjJ84h7dJc89qhaDv6fPD9vfQyn7Hpn1KicUxY5i+VB y0ZXGlhIBVdTuAJBJ9HfuLE9ucM+KD/uVqW/eCRV2k41GAkQUa9zqZnY43axlXuayaZO EhoDsnT0j8f9pwaeI8XsbRVZIqw+7C9NmEJ1OtGd+ROpC6qTOVXWDzoSzVmiC0opPbw7 ojRjlwu6TWC4KC0G6cZ541upOIRtMBQLqqm050nQDbzGFGw3xJWO1ol5rjTey5MS4cfT M72Ze5WPfCa9OffDcUbzqG4dH+1vfWCPOtTny1xwtt79kXhI7osn0N6IbASPY3O7tgCO KvEw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161575; x=1793766375; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=uCALeqgmEZs/AjQm6TdkycJoCCdzjvHnY9QjOJo46z4=; b=edhX6pWU3lY2j/VoYOILZ5OHKVuri+HdeVAIwKt5r44mJ6Jfe8bldJznnEiNLSpXNw nSu3RBX8qdc5h3O38yNYIwmMX/Hb02uR0F589TW17xQUEjE/899FzDEFuhOE/PFm5tUZ kaNG0QPW77YosVfLcsSCzMInEoQgQ6TAtz4BDODHv1kGkj985HWiztwWRUsPrtAfD4ET 2Aou1cWgIwauc9ih4iFGfMyCjtbG58zfPmwNEMnf6umILPwEIII89/sPopk+NGdQXcwg fgUjBcTMRPdBEpwOFYHJHDOafrCQ1ddnmCSNzad2XEDYqQzdM4PKa4KgtrrjyLSMRgH5 rr6Q== X-Gm-Message-State: AFq9FYLzgJaCy4S6hQxNRKhjLXxmy2dBW58iMAh+ANiNK0yZhjwF87d2 LUqJgRDLAp9rf7g6JqiwNCpcQ04Iu79u8mbxlkUT/2r6KhEru6T9bjIbx4ePmw== X-Gm-Gg: AYBFou2lOMunqnTT+/RfrItD3EAJhOVRd2An+zcJOUKwUAjaEIAexbZXQISctdR9oyh Zeh/f8p3EMt0OPVw8FJsGBe4lC9QIlUOd2fIq20LnZlhGtPRz5gw4jxAYjK6seWibW2iyNc46Uq iVjuPSrxoROGFn0ZkYiLM+um3uvGIKasLH8ZgHoA/ne8KK4Bhb3qCoBjerP4e0SURJ6eWqJ+rmQ k6MoiUr8PMgeWGb4T7uUATgGamE4yKTitm9O0wbqfOjCOF7oiBAG2cDZMzrQkGxNU64IEIyG0JH mn9hUAiBUjuYJae/iby/MNM3CzmLDSgk370Fp7EGbe7zZS6zr6lFDq5trpmQpacpLBpm7VgMpqS h2V+FvzJ7Xgaj+RTA/yMtMM8IAlp8KfKTYlC42QdphGWHSb32G9oAMLYW9OagT9mGe5Y3tJH16I nXe3zYKEWDVVe+h5TABJOCjWp7L6t3Fk8qH+Z6DZkJp+xITzUh2xboo28R3tw/QpIGotR9ekAQ2 IVoFEM7VLXTOeentBjNT4gZzkCck0k4tcbPAmAX3ECtYvnT+rZnDOOh7kLbTjLXIRodcJp4rE5R wNz9hBZwz9q/02gxhOKXAFNF7x21aFF2nWwVpsWHezBhiyqEVIeNJkr4dU/RLQ== X-Received: by 2002:a17:90b:2887:b0:3ac:9d14:feb1 with SMTP id 98e67ed59e1d1-3ae580e0f64mr874078a91.43.1793161575336; Tue, 27 Oct 2026 21:26:15 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.26.13 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:26:15 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Jason Schonberg , Khem Raj , Ankur Tyagi Subject: [blacksail][PATCH 51/60] brotli: upgrade 1.2.0 -> 1.2.1 Date: Wed, 28 Oct 2026 17:23:49 +1300 Message-ID: <82e99aebb4f2f98533d5905e6d6fba66ca41144e.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:17 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131603 From: Jason Schonberg This is a security release CVE-2026-111497: out-of-bounds write permits remote code execution Changelog: https://github.com/google/brotli/releases/tag/v1.2.1 Signed-off-by: Jason Schonberg Signed-off-by: Khem Raj (cherry picked from commit b5d66bf60d7664e5fa15dfabcfdb7986ea83d386) Signed-off-by: Ankur Tyagi --- .../brotli/{brotli_1.2.0.bb => brotli_1.2.1.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-oe/recipes-extended/brotli/{brotli_1.2.0.bb => brotli_1.2.1.bb} (79%) diff --git a/meta-oe/recipes-extended/brotli/brotli_1.2.0.bb b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb similarity index 79% rename from meta-oe/recipes-extended/brotli/brotli_1.2.0.bb rename to meta-oe/recipes-extended/brotli/brotli_1.2.1.bb index 84495a3236..dca16cb79b 100644 --- a/meta-oe/recipes-extended/brotli/brotli_1.2.0.bb +++ b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb @@ -6,8 +6,8 @@ BUGTRACKER = "https://github.com/google/brotli/issues" LICENSE = "MIT" LIC_FILES_CHKSUM = "file://${S}/LICENSE;md5=941ee9cd1609382f946352712a319b4b" -SRC_URI = "git://github.com/google/brotli.git;branch=master;protocol=https" -SRCREV = "028fb5a23661f123017c060daa546b55cf4bde29" +SRC_URI = "git://github.com/google/brotli.git;branch=v${@oe.utils.trim_version('${PV}')};protocol=https;tag=v${PV}" +SRCREV = "db24a98aed38a16de78cc05ca15cdd8dc2a0d92d" inherit cmake lib_package From patchwork Wed Oct 28 04:23:50 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102218 Received: from mail-pj1-f47.google.com (mail-pj1-f47.google.com [209.85.216.47]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36081.1793161578649868562 for ; Tue, 27 Oct 2026 21:26:18 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=SjpgKPjP; spf=pass (domain: gmail.com, ip: 209.85.216.47, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f47.google.com with SMTP id 98e67ed59e1d1-3ab98332238so318048a91.3 for ; Tue, 27 Oct 2026 21:26:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161578; x=1793766378; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=+v+kFaeUGo9KEUia8cHGBQBko9kHDBMiE6A9qBQY2Pg=; b=SjpgKPjPT0eX3PHV/IPLHJ5cfZ+c6D9oQIyj5Cl4WZFkXeqKI9Sn6qTTpqx48g2jN0 6ehnN5lljJefY+vUXKHYq7dfZM7zT7QL0qTMGGgW3JqJA/LmS/XtR4u3uWgzS5EC/poi ZPRM4JdZWs2QmzkPLhHdDJgRYIMf1p/+zgTXUkNYu2R31x0dhIfhKxfSr7NtJMcFyWEU NUJDc+5cubdpHMYhiBFpjE4mjgvdnILpDiqTXTF23uT2xSvcNvmQcjFekzpmZaYkZX4i uXLeAEed8dcP/XlB0Svb0nBfbVOVmS5HalDU4ZN/yykYJHcmQSxvONIokVklKRPubWqe efLQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161578; x=1793766378; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=+v+kFaeUGo9KEUia8cHGBQBko9kHDBMiE6A9qBQY2Pg=; b=OlYHq2pUIz6kRWPhDqd46f8kAAsTqp9V/Kgys7qXZOo7lj6bwuoFnQ63628poPIO6E ft5HFPF0NKC3E5sm2qqxXji4aMQ5N4eFVQINns5Btmd+zMQyqVugn/ZwantCz0n/oz5s U+vt5yHP130A1tKVwv3UXUpkWT3nyH5VVQc3WTLz4vlkuY2ZgdQhIfCDu4bldianHXLP NElj+yNr16niVes29ePT+mTZ7/5rF576EytFtan6rCAagOss3fUU4KFq6PaOvMEN2WIn MLRWEmUefNLTLhpWuuNBiASOWK4cjM3KP640ksgFIbWdaFq5S2kx7+krFFHlZj+PViMV EBPA== X-Gm-Message-State: AFq9FYL7o2+Aw8nB52i3+g+ZlBL9ii3hC/jnG4QNn5EKWU21SGyTqySV Bt+D3W3/sIx20kCi0c4TgbAxkfVNfj7ww14gH9TKm6Til4U76ZcmPiG8hWto/A== X-Gm-Gg: AYBFou2/G1g6kOwkJCEw2Aaf9QimHSQpTswrGWWMUP48cgP48fzBIV7O26BlfILOYMB 4spDog/S82d+jM6m7vf9k+GGM6oW+JfF6HyRTNEnwtqR0PPmu+7empo61Qm3zt8idO9SmH4XO7b WelU16kW7F8HB9FP0bELktCbmeoy73DZS4tKfiD5dpRiFmefXbpSBFzlMxaaw94+qxQrF+tN8zK 9wtDJaR+qzGp3FlzSbEbE8KZYOa5476mttlHjrfkCXPnNuJL/pVbkgpcxOrGRkWTLq1aRkZNVOZ d6NbmJXAuOZwVEyjM6kGZQ76q8e9OMZiK0Mj/NPLdK47IgjaEQxduC2meJtO2ZiX9rLjGasVEVo G7wW3+yb/dvVcuNbUCHgRTnwH0fZ7l2+7zSyRoRuGw4oD+2jW5mIHYx0/P2fgbpDrFlVP6zpuLI QiSxxoAvvSphcu0Hr6Qz+WucBTw+cYMj3Bq1Ejyky8Zmi15OZm12o0pTxlTnPpAq7QsdjOgAWeh JWzPFftFOOnhnBtSoSNt8gwzGIJmNsYfF8LZ6TgrNhuQvcvu4ubz32dfw7dS37XC8Cry2FFoo8g oVid+QZ9ygBQImwt75Rm3jl2ZkOQ9evp4gLLgXdDs33cb6h1cnsX0BSJDpqp2Q== X-Received: by 2002:a17:90b:4a07:b0:3ac:a7ee:6761 with SMTP id 98e67ed59e1d1-3ae57f630aemr930999a91.21.1793161578088; Tue, 27 Oct 2026 21:26:18 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.26.15 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:26:17 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Jason Schonberg , Khem Raj , Ankur Tyagi Subject: [blacksail][PATCH 52/60] php: upgrade 8.5.11 -> 8.5.12 Date: Wed, 28 Oct 2026 17:23:50 +1300 Message-ID: <1e4a1a7cdc8e394fbee08de9992a33cda55fda55.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:27 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131604 From: Jason Schonberg This is a security update. Fixes unauthenticated remote code execution. CVE-2026-109618 CVE-2026-109619 Advisory: https://www.php.net/archive/2026.php#2026-10-21-5 Changelog: https://www.php.net/ChangeLog-8.php#8.5.12 Signed-off-by: Jason Schonberg Signed-off-by: Khem Raj (cherry picked from commit 898ac0ba1caaefb583cb3785c8c466360fc18f63) Signed-off-by: Ankur Tyagi --- meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} (99%) diff --git a/meta-oe/recipes-devtools/php/php_8.5.11.bb b/meta-oe/recipes-devtools/php/php_8.5.12.bb similarity index 99% rename from meta-oe/recipes-devtools/php/php_8.5.11.bb rename to meta-oe/recipes-devtools/php/php_8.5.12.bb index 831e926880..f9759cf7a5 100644 --- a/meta-oe/recipes-devtools/php/php_8.5.11.bb +++ b/meta-oe/recipes-devtools/php/php_8.5.12.bb @@ -32,7 +32,7 @@ UPSTREAM_CHECK_REGEX = "releases/tag/php-(?P\d+(\.\d+)+)" S = "${UNPACKDIR}/php-${PV}" -SRC_URI[sha256sum] = "dc940716a8c73e531c0078eecb955d595d321ec2cc9d47149cf0089ea6e18f64" +SRC_URI[sha256sum] = "ffb60edc437ced63b5137e4984db379a8111c50049c711510d8b958277efc1a8" CVE_PRODUCT = "php:php php_group:php" From patchwork Wed Oct 28 04:23:51 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102219 Received: from mail-pg1-f172.google.com (mail-pg1-f172.google.com [209.85.215.172]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36082.1793161581274369533 for ; Tue, 27 Oct 2026 21:26:21 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=zeXENa3T; spf=pass (domain: gmail.com, ip: 209.85.215.172, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f172.google.com with SMTP id 41be03b00d2f7-cdab6ae1ee9so276130a12.1 for ; Tue, 27 Oct 2026 21:26:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161581; x=1793766381; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=qH93jwhvZJyHUAbhW12B/pfHM99JoC6WKuPR4kR2qi0=; b=zeXENa3TJ1uwup6cc/7MyyFEOYWugq10rSOiCrdYGUw0QqGo9tGKlhYVXAOTOxZm1y AVzwK3DbajzX3wVslRk8TgXKisB3JkTXZKFWzSUNI22zfvc7PJPBROZBuKAXMwAxg/xY rbIdBgyJCvHF4VhFDOPa0SreXQi/u1m1GwMI4TOlVELd8YI5BD0f+2olIEe6ZnvW80JF E7taHlodZXhRWdkiO2OoQ/v1tsNsj3fSIXnkNjFpnJ+Xth5omwJUwvqt2WlK17aEXf4Q 5em4XOBWfhJChROOo24m7asbDLPV6JEFeysVy7YK8BbHdfbFyBCFir4r0TBfOZ6kRzDM mkTQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161581; x=1793766381; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=qH93jwhvZJyHUAbhW12B/pfHM99JoC6WKuPR4kR2qi0=; b=dx5klRVrJYBLRFFE3dvCa+hKbsoa+pEHvlvssHgL2HbaJQO4yMubn1o1lAYfd2wvXU 0QfrN2g0HIHAJGVX68K8oUTqE6nHDvhHm5TbLShfuU20EHKq86ltUEQ6R4/gfOYPhqVS 4ePHEQfKJEzyR4cPHvRhw+iP6Vp6FpzjM06Qdpy0RIufHRf3gnlh7P/pIygzHNqMntnT MiD0rjmv5hXVvaPDk8eePNkhvdF2vANhWe+R9mfx4rAFVw6ihiFHI7kgkPG5J3/t5+xm EqBUZjJeg5cWjOcjXFDOlUl59DYFB07D0hbPfsCJwXZ6Fdn6RnG4FvV68gDiBdpmqj8A Tg8A== X-Gm-Message-State: AFq9FYL3rvEqj/mBZXs3ZqSL/m+PRdqztB8WSQZF38uqHjU9/NcK/YRV Vx5rThWNF3gX52yGrau5uafUCqBVUT0HozQPDJYFlZgMPgAsa0O74n1MsuMD2g== X-Gm-Gg: AYBFou3tx5NNuQBAMVFLpuNfPbSRreysXSvxffA+3FsiAiC/haQhhhANJWVDEYuZCrG wTzHPw38Sole1gJoJ+KN95DUfEayjewGP6TtGLD/MSxJ3Dskwlp5l1MzNUUdOneCDfbAY/ZUAmj EITS1uZ6A1RQABizmAeZQ1eQxDuM2jaKKvuVOvIVj9UpRhunotmn9dukjHpJyMI1YnzvRZ5CMDp uKLCkLH9MKveyTFilq60oUG9vYbrDRKV6oZZMhvBsJIHGmMdh+T8vydsZCk4WlR0quZrKzyER3f JnuTpfrq9seiXcyfEK/f8GSvO7pZAlWl45mOatmd1IO1dpXawaxs0qzzxkV74M8OPxuKIchC1OE 8GNfbET0kMjAbK6yaeXWMu3cyW/tpFK1kPnUum+KPj1zKK/T4DVlUxXfh+Eu8g29yyosITib2N8 R8ZsQPswvri+zLGxR5etTxaEI+efQzkPlZ34PX4dNnWghgo6qXEaqoi9BdtjZ7bNxOvCiYFlIcs bhcrnSE4qEx37v5J3bhD+dkV2Z9WBZRFkAAUoMYkn3FvLMnFHonh1oPsBo99IHHHCwfcEXew89+ QxtRrdFc0PZWnaxEn0kawa9oplGppm0bc3Z5t6npxma3JQLm4ri/SiFaS0XiMg== X-Received: by 2002:a17:90a:ec90:b0:3ae:2961:14db with SMTP id 98e67ed59e1d1-3ae580af9aamr882648a91.21.1793161580638; Tue, 27 Oct 2026 21:26:20 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.26.18 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:26:20 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi , Khem Raj Subject: [blacksail][PATCH 53/60] apache2: upgrade 2.4.68 -> 2.4.69 Date: Wed, 28 Oct 2026 17:23:51 +1300 Message-ID: <496cb3f32736d1d1b1c84e331ce95ff682f44c6f.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:27 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131605 From: Ankur Tyagi Changelog: https://downloads.apache.org/httpd/CHANGES_2.4.69 Signed-off-by: Khem Raj (cherry picked from commit cf030e73b8e0fa463a81ace8f13c82a9f1281ebe) Also dropped patch that is part of the upstream version. Signed-off-by: Ankur Tyagi --- ...mod_md-Add-OpenSSL-4.0-compatibility.patch | 47 ------------------- .../{apache2_2.4.68.bb => apache2_2.4.69.bb} | 3 +- 2 files changed, 1 insertion(+), 49 deletions(-) delete mode 100644 meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.68.bb => apache2_2.4.69.bb} (98%) diff --git a/meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch b/meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch deleted file mode 100644 index ee127681ec..0000000000 --- a/meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch +++ /dev/null @@ -1,47 +0,0 @@ -From 6cd9ea8dcb5bf68a195e90578c7f05e12eba5468 Mon Sep 17 00:00:00 2001 -From: Rainer Jung -Date: Wed, 17 Jun 2026 09:48:52 +0000 -Subject: [PATCH] mod_md: Add OpenSSL 4.0 compatibility - -* Use getters instead of direct member access. - -* Struct was made opaque in OpenSSL 4. Getters exist since OpenSSL 1.1.0. - -* Keep OpenSSL 1.0.2 compatibility. - -Merge from icing/md: -https://github.com/icing/mod_md/commit/9fd90380db0722f0ccc14ff1c4da0ca21d4da75c - -Backport of r1935161 from trunk, [mod_md CTR] - - -Upstream-Status: Backport [https://github.com/apache/httpd/commit/6cd9ea8dcb5bf68a195e90578c7f05e12eba5468] ---- -diff --git a/modules/md/md_ocsp.c b/modules/md/md_ocsp.c -index aee799a7b39..2e7f14dff31 100644 ---- a/modules/md/md_ocsp.c -+++ b/modules/md/md_ocsp.c -@@ -533,13 +533,23 @@ static const char *certid_summary(const OCSP_CERTID *certid, apr_pool_t *p) - serial = issuer = key = "???"; - OCSP_id_get0_info(&aname_hash, &amd_nid, &akey_hash, &aserial, (OCSP_CERTID*)certid); - if (aname_hash) { -+#if OPENSSL_VERSION_NUMBER < 0x10100000L - data.len = (apr_size_t)aname_hash->length; - data.data = (const char*)aname_hash->data; -+#else -+ data.len = (apr_size_t)ASN1_STRING_length(aname_hash); -+ data.data = (const char*)ASN1_STRING_get0_data(aname_hash); -+#endif - md_data_to_hex(&issuer, 0, p, &data); - } - if (akey_hash) { -+#if OPENSSL_VERSION_NUMBER < 0x10100000L - data.len = (apr_size_t)akey_hash->length; - data.data = (const char*)akey_hash->data; -+#else -+ data.len = (apr_size_t)ASN1_STRING_length(akey_hash); -+ data.data = (const char*)ASN1_STRING_get0_data(akey_hash); -+#endif - md_data_to_hex(&key, 0, p, &data); - } - if (aserial) { diff --git a/meta-webserver/recipes-httpd/apache2/apache2_2.4.68.bb b/meta-webserver/recipes-httpd/apache2/apache2_2.4.69.bb similarity index 98% rename from meta-webserver/recipes-httpd/apache2/apache2_2.4.68.bb rename to meta-webserver/recipes-httpd/apache2/apache2_2.4.69.bb index f178007ab7..fba4667bd1 100644 --- a/meta-webserver/recipes-httpd/apache2/apache2_2.4.68.bb +++ b/meta-webserver/recipes-httpd/apache2/apache2_2.4.69.bb @@ -16,7 +16,6 @@ SRC_URI = "${APACHE_MIRROR}/httpd/httpd-${PV}.tar.bz2 \ file://0008-Fix-perl-install-directory-to-usr-bin.patch \ file://0009-support-apxs.in-force-destdir-to-be-empty-string.patch \ file://0001-make_exports.awk-not-expose-the-path.patch \ - file://0011-mod_md-Add-OpenSSL-4.0-compatibility.patch \ " SRC_URI:append:class-target = " \ @@ -28,7 +27,7 @@ SRC_URI:append:class-target = " \ " LIC_FILES_CHKSUM = "file://LICENSE;md5=bddeddfac80b2c9a882241d008bb41c3" -SRC_URI[sha256sum] = "68c74d4df38c26bed4dfbdb8f3baf1eb532f3872357becc1bba5d136f6b63c06" +SRC_URI[sha256sum] = "c5e6ebc66e349b87d7fc6916ae7cc2a808ed348003de134cf9e9d89d3e2cc73d" S = "${UNPACKDIR}/httpd-${PV}" From patchwork Wed Oct 28 04:23:52 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102220 Received: from mail-pj1-f50.google.com (mail-pj1-f50.google.com [209.85.216.50]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36083.1793161583802097880 for ; Tue, 27 Oct 2026 21:26:23 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=tviFzxVJ; spf=pass (domain: gmail.com, ip: 209.85.216.50, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f50.google.com with SMTP id 98e67ed59e1d1-3ac451e128cso405362a91.1 for ; Tue, 27 Oct 2026 21:26:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161583; x=1793766383; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=TgHhFatbRtW33acQKC7ipwW7T/BNqa2AranbMop6hCE=; b=tviFzxVJPnkrsbCc2b2IbZ1YK76kn37kLURjHVCLsWBmDiur8Q6Cnh5DxWF9hGpMsO Yk0OwelRk6NkAhvk9dtFOv7WC5zDNFzeC73EkVG10Ijkd+goIG6oH17I5mX2s165rLyL xYd5Myxwq92APZs7382kixtO4xaWBPWsScHXPwXoPRq13xT2Z0k3+5E23gJKVkiwxjyQ 31XDj5i+LTjNALk6gUM7ZJ715WYBiqnXK4Z4xfJImSdliDwtBvHFMkUK4VafeR02yrJR TNpsMqcIK2Y4846eX1jh0NHMXiVDc0IeY5Hz7qP9jzvjXIrHOsg4yLhMj+t7nmOcHOJy +QjQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161583; x=1793766383; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=TgHhFatbRtW33acQKC7ipwW7T/BNqa2AranbMop6hCE=; b=xqZuBi+MiU6BTvW8ftVgCkevvUYOSVzhqGG+QZhtDT3GCG3FS8KUusCA/hRyJ6jWcF HvD3ONpn14QZli9gXxeufVMQMjhP1F+Zxn8RDsu5cYKqyzgpRM6PdofOg0wrAbaXFdS+ wt7v9ySHFyVi1i5S5UmNbz1feTpuVdaKWh2QHv+3EtUyK+a7sap98SkhgX5KtX3DYsqP pZu271DSCTT4mTDVpY055mv89r+Y9mDmrWf4BAGVhlaCzy0PvqiyiLbMZoyf6WYm4agt UO9WxDjnWaWLtoyIyajyiDuterD0bm11VGib4xx8+cGMgHUEku1x7Ap4aK9czlPad1s9 dDbQ== X-Gm-Message-State: AFq9FYIvDjetkB88qYNVFh4sf2a2Ct/ME7Kze1cw5phiuFrBvZ96ngKh cPnZZVl0zD6fhcQteWBsgREAEUdx5+WW0SiR8MHDLz7wIbDxcIazArVNv7v7RQ== X-Gm-Gg: AYBFou23JtaP2EwG2eK3e4FBsiqHn0FLZAI8OBD313bxQ7/nSu3jxLKQjP0Dafa7VGK BhoyxXQ8bH0RfCFVEvDMlDqt1F8sfJ9qV0dy2FZukxLggcm8kZEupkqa4Zokw2Ngz3miPKmjNEk Rtl1SZZoIr2hFwqKYUqTYko5glu8KSgDMrS17KANdAil0Ndz2MX/89h25Ir9sG74lkHriVqZAJR K6hY4oPJybp1rBsdpyT+Cp4gCbb0E4P7cyUYuAWqpFjxHUL/LAO9WYYIXv1Nj226ZTOuK6wHGsh LjsYIzXVMetFZV6WtzhMOuc/AZ74l/w1Jua2AutXz2sHh3k/JEaD/TZlsM53ZhWIw/z6wH6c8ls nDALseIHW00nUhxT0tKOcac91H+cAfVGYLXHMejC4JhWzehkWV26XeVQK0+1WwmvNl6EjuLex7u +gB9qqNdBp4cG1+LOFm+k8OAOVfIY/2u2zW32QNjn7f89KtJcg0eOFqD3oS6baEQBqQcr8c+Vek 2GzvU8+fpECADXeCcNOkg1Kl1htM1kxxyiiXQNBYaBSQlqo/4Urm8g0DyIE3I/hlJ34ZDE5J/DR 0TtiacmVjMwlC4/hhmgv5/bQ5vv830rqBLVs4Lq54WMsWXJp3GqEllvc1C3LaQ== X-Received: by 2002:a17:90b:1644:b0:3ad:6090:a17b with SMTP id 98e67ed59e1d1-3ae580ae5f8mr691641a91.17.1793161583228; Tue, 27 Oct 2026 21:26:23 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.26.21 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:26:22 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi , Khem Raj Subject: [blacksail][PATCH 54/60] 7zip: upgrade 26.03 -> 26.04 Date: Wed, 28 Oct 2026 17:23:52 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:27 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131606 From: Ankur Tyagi Changelog: https://github.com/ip7z/7zip/releases/tag/26.04 Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj (cherry picked from commit 1c45c216f647175c121e7b7f5fb19c8a042ed99e) Signed-off-by: Ankur Tyagi --- meta-oe/recipes-extended/7zip/{7zip_26.03.bb => 7zip_26.04.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-extended/7zip/{7zip_26.03.bb => 7zip_26.04.bb} (98%) diff --git a/meta-oe/recipes-extended/7zip/7zip_26.03.bb b/meta-oe/recipes-extended/7zip/7zip_26.04.bb similarity index 98% rename from meta-oe/recipes-extended/7zip/7zip_26.03.bb rename to meta-oe/recipes-extended/7zip/7zip_26.04.bb index ca50aed8ea..49437b807d 100644 --- a/meta-oe/recipes-extended/7zip/7zip_26.03.bb +++ b/meta-oe/recipes-extended/7zip/7zip_26.04.bb @@ -12,7 +12,7 @@ SRC_URI = "git://github.com/ip7z/7zip.git;protocol=https;branch=main;tag=${PV} \ file://0001-Remove-treating-warning-as-errors.patch \ file://7z_wrapper.sh \ " -SRCREV = "0766b733fe3e06dd2a7f9a3cfbf2108ac73abd17" +SRCREV = "9128b80e3a471108678e2b3ec3c985861c8d7b0f" UPSTREAM_CHECK_URI = "https://github.com/ip7z/7zip/releases/latest" From patchwork Wed Oct 28 04:23:53 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102221 Received: from mail-pg1-f174.google.com (mail-pg1-f174.google.com [209.85.215.174]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36084.1793161586404596019 for ; Tue, 27 Oct 2026 21:26:26 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=PoYSrfUi; spf=pass (domain: gmail.com, ip: 209.85.215.174, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f174.google.com with SMTP id 41be03b00d2f7-cc4aa0246b7so318691a12.3 for ; Tue, 27 Oct 2026 21:26:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161586; x=1793766386; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=4BRrJmT57+W6tD4KjOXFDKVPQwPydRPm1M1QGOHUlGI=; b=PoYSrfUiViF0enSzBof25XlREptKOOGI724d9Scz99NRZIUJY+rjSbMAweGxRdhbf+ +xuMfzmTFt4FyNB9KDNjXVoHO3d/fTPfNuQWz+zKosiGpCOZ05ZT0hflG6EESq42sgCl n/RNZbJiD0d9y9T5yeTKnKnOfQoF9pJK1v43iR99E3IyypRzmfux5Him+CSN63HNOgDW srEKxJFBIwdvn39xZdbQifRkiaYFFcMM69Wx1m4Sq8NllFGDyyhzkiUvj30iP+Iv8Yeb JlKpsMhnr6+Fq+AcjILhn+2MkhZkCzTwMXd/KnmEbhGX/V7GL/mVJWcZ/0TsgqvNIfL1 qlZQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161586; x=1793766386; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=4BRrJmT57+W6tD4KjOXFDKVPQwPydRPm1M1QGOHUlGI=; b=vilh/mv7UARA4Epp3b/G/uVzPIXy6YMvSekzjE6fJD4U+uHKsAIwEKQdoXMElkt0xC pbjM+kpF+d99sC2WV5zP4VMc7V00H6ymxIQm0ILNP/9l1Zk5CdzjAgjgJw+8vkMHjaGM Z9O/w/Ok+/aAoEdBNu8Z5ErU+EJCGG4BsvAdOIRTUPBEcBWMD/79X3GINuwHc7+Zrn4c okp55LSj6Z3Lw24xPNxQqampLbCo0TM2EoO1XQX16d86sS0uI9N5Vcy0BZPT2lL88UnJ F0V3oPlOhXLMmw+UeQ07M6eMrtOIaxpVf0kYRJc57hIooWV+ka0/ojyOSs90ejvD4VXU MqWQ== X-Gm-Message-State: AFq9FYKNAfqozXB86/+xiLG58AY8xUbWtDdqdE0+lXEalq9uNHnGYXkI XDmJeU1yFAwI9lDK4K4urQcbmhuJtcI3GyqNDQctF/0mM7/YnYAekMcWa6hz4w== X-Gm-Gg: AYBFou0Pag7aLQQUsl8BozyTSqFFR+ZS/gXUz5qI2Cxhg7XDVP43XZq5vx3OTUvmpcd 99cyPgJXqb9Cn9R7E4019k3nlcdaOp6X0qS9B4UI6rDNO/P5IXH72589t+msff8Ci5CojAEpWPt T4zc/hkUH5e7wCsMk/SLNEXDoyWQaRbvBZk/LmqPa/du6YYqpApqDh9jfNvevs/lplWUXl3zRwm +DyiQWwXydiBG4/eh6aBRwrK8Che7WwyHLZFFpF/UdIoMQrFAiOSXovTExwt5ILt+8slgBStkMN 8c4gNariSIN86NNoOh5HeB9kUuG3qI85SWJTtL2wWxU/Lu0F2txogkJVtYo55NO/jZdVtJHa9a/ M9xXRxd/cZu8trUagqavEMlFO7bYZ+KDIyiGY+/gaVnq6MeW8n4cfLJp7dKBaajkBkHiS1mpNpQ SFKM89tUefgylq8ZWXvKtdqcsorvQpYR5vBEX6oe0ZeO/5lj/2be8NN2Py0jUQJWv4Wd+QBBmYw 68k/9geiv0b9P1lRVQ+rvmkgToITMP3u5iMEmXSJXnCor/dt5JDgHbidgdiQIJ0gPgYD011jYLR 4Ns30W6R01jxBIU8KRCFkQSTaK28OLTRQB8CH6eFEwK5AqjNEStEGJVHQsQhsg== X-Received: by 2002:a17:90b:570c:b0:3ac:9e76:aa93 with SMTP id 98e67ed59e1d1-3ae57e34b56mr708846a91.7.1793161585762; Tue, 27 Oct 2026 21:26:25 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.26.23 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:26:25 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi , Khem Raj Subject: [blacksail][PATCH 55/60] 7zip: upgrade 26.04 -> 26.05 Date: Wed, 28 Oct 2026 17:23:53 +1300 Message-ID: <2a8300a0ef7e2bb86e16deef6dfadaeb84533b1f.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:27 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131607 From: Ankur Tyagi Changelog: https://github.com/ip7z/7zip/releases/tag/26.05 Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj (cherry picked from commit 533d0a63ac2a38e77746e32458e09461f12737b6) Signed-off-by: Ankur Tyagi --- meta-oe/recipes-extended/7zip/{7zip_26.04.bb => 7zip_26.05.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-extended/7zip/{7zip_26.04.bb => 7zip_26.05.bb} (98%) diff --git a/meta-oe/recipes-extended/7zip/7zip_26.04.bb b/meta-oe/recipes-extended/7zip/7zip_26.05.bb similarity index 98% rename from meta-oe/recipes-extended/7zip/7zip_26.04.bb rename to meta-oe/recipes-extended/7zip/7zip_26.05.bb index 49437b807d..050673f678 100644 --- a/meta-oe/recipes-extended/7zip/7zip_26.04.bb +++ b/meta-oe/recipes-extended/7zip/7zip_26.05.bb @@ -12,7 +12,7 @@ SRC_URI = "git://github.com/ip7z/7zip.git;protocol=https;branch=main;tag=${PV} \ file://0001-Remove-treating-warning-as-errors.patch \ file://7z_wrapper.sh \ " -SRCREV = "9128b80e3a471108678e2b3ec3c985861c8d7b0f" +SRCREV = "b88c6bc09339de32f7d18bbab900686b244f42ba" UPSTREAM_CHECK_URI = "https://github.com/ip7z/7zip/releases/latest" From patchwork Wed Oct 28 04:23:54 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102222 Received: from mail-pg1-f176.google.com (mail-pg1-f176.google.com [209.85.215.176]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36228.1793161588755936394 for ; Tue, 27 Oct 2026 21:26:28 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=Y/AvZIK6; spf=pass (domain: gmail.com, ip: 209.85.215.176, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f176.google.com with SMTP id 41be03b00d2f7-cd61a2dfd7aso191501a12.1 for ; Tue, 27 Oct 2026 21:26:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161588; x=1793766388; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=75VYq1DXQg+OBSh6+P6xeaheaAaQsaT1yu2VLaj86xo=; b=Y/AvZIK6k2BdnTqY4hwhG5Qt2ICD69qARetBNaf11uxHLPhMpK551WJblneAWPrpQL aMJzD/AmrA7R0IOtmnS4v1ed2+j4Rvf+K1iqBe0UAjgQ+HN14ITwrgrR1ciPsA7vx3M9 eShInH3anI8PgC+yuS+Ivizte62KA1Gc9hHsje4kvTYQvQl5r81J5djTfxff+WbquVj1 OX3q9DLg3hlSp81HHQXMLci2gyF+RkGEFn+O+xmQqYPggJBrCBQ0V6Npdg0fiYCoIQKs yDNt5AUF9BX12cbTHzsQjL59b2uc5V4XMb9vKIfrY6GTd2Bc6ToI4vTHTWuiH5dYk09Q BjCg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161588; x=1793766388; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=75VYq1DXQg+OBSh6+P6xeaheaAaQsaT1yu2VLaj86xo=; b=zTW1CkEoqZnnMfRkGXoYjHmj7k6ojoZNr6hxcK8/EAQVcMdka5dXg8eMeQ6upHyvPJ sRBJntswBaWegBXPic7HYgy+CuA80lsMMEZg/LhYmHW/9MD3uBGUeo3YKacs0srH7wHI CL3m0+0nTAEahMSfw2KTvfdgODG3KXiAA+Hwt7Jn7u0QT0XLjpQueKYCuX/DkkL9JZtB WL9EU+Pogop2kDEIazZm9SZ1T/iOBb3h7QTYtfd66xYdvJcIGk8t/r/xH/7U3le5S7Nj cV/yv1aCTwG/kUw9uzJLpDRw/84Oc7lStKpxwQlD/QCh/tBEXRnvTdWmVn0Pcg96nlfn qM2Q== X-Gm-Message-State: AFq9FYK18lI1ox0H49w5wPdrebhN0Vwx329m6oS9kCoTgFPHfPg3TeZE Vf6c8lhaAF3CFiags7T9bV6ToNPe+AV3E3PHWuUAQl/9fIQ+t5r2iR9TKx1bXQ== X-Gm-Gg: AYBFou30AOfv/0CxTEi34qL903x4ZHC9k54AasYwcIAhU7fvCDARhmOpidEOzR/wSuN FzNb6cBMF9jV1IvJbvUHztz1srLzXwcaQ8oXsux4WuuBuAVdqcdH7PlaHD5aDh6aOs6y/sVARxA uzu/p/DqxOpyKuUAEAGZAirri/2L71ZzIlTI2LW2fkkmOSS981s3ecemp64wC8RenbEp2nPbjxu Rw96CssrkG3/RlPtRvVB2IpL89taT5Cm7xQaPkb5/7LM/zCF+SMIQtKUEbHiKd8vfD0HMeCC4o0 j494jeZ37zvesz7IrBDQgDLmLDl+tQ5MfIzSPBnVTPoelSF512bH7j0UYDFs3oWwfK9jhX+hsoM A1LLjukoNSxJGQuLTT5Sk4pCJBpDgtO4YyJlTcZnP/qKabpE7+fnVFyPHzVHy1NK2GFqEF5Lo92 RGggx6UwXfwmBvmyahT9CZJ2h30sFtS+tmhsEQ4hl+MWgGhUUOWzUZKWnwsIWHW3XBLJs/DMBc8 OZmp0KiqfOkH8Pf0Zd0uoKynrw4IJZfldejGhE7Jllw58O/51T+O6BOBvUajA0IinGluzBvrySw a8EdmcLeIEDhrP/kDqiAfWaud6u2OZY9mT11THU0CthgT3hSHBRq5MihvJguTQ== X-Received: by 2002:a17:90b:50c4:b0:3ab:e588:c295 with SMTP id 98e67ed59e1d1-3ae581b9f0dmr819389a91.42.1793161588123; Tue, 27 Oct 2026 21:26:28 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.26.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:26:27 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 56/60] python3-brotli: upgrade 1.2.0 -> 1.2.1 Date: Wed, 28 Oct 2026 17:23:54 +1300 Message-ID: <1ea3019791e727d9e739f3d7ab4e329b53d0c97d.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:37 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131608 From: Ankur Tyagi Changelog: https://github.com/google/brotli/blob/v1.2.1/CHANGELOG.md#121---2026-10-21 Signed-off-by: Ankur Tyagi --- .../python/{python3-brotli_1.2.0.bb => python3-brotli_1.2.1.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-brotli_1.2.0.bb => python3-brotli_1.2.1.bb} (81%) diff --git a/meta-python/recipes-devtools/python/python3-brotli_1.2.0.bb b/meta-python/recipes-devtools/python/python3-brotli_1.2.1.bb similarity index 81% rename from meta-python/recipes-devtools/python/python3-brotli_1.2.0.bb rename to meta-python/recipes-devtools/python/python3-brotli_1.2.1.bb index 8e493fd0a0..2c1bf23f64 100644 --- a/meta-python/recipes-devtools/python/python3-brotli_1.2.0.bb +++ b/meta-python/recipes-devtools/python/python3-brotli_1.2.1.bb @@ -7,7 +7,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=941ee9cd1609382f946352712a319b4b" CVE_PRODUCT = "brotli" -SRC_URI[sha256sum] = "e310f77e41941c13340a95976fe66a8a95b01e783d430eeaf7a2f87e0a57dd0a" +SRC_URI[sha256sum] = "02b2f7b5a83485efe448a44ddf7983def05c3bb1dcf917d4f7154070260e13de" inherit pypi pkgconfig python_setuptools_build_meta From patchwork Wed Oct 28 04:23:55 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102223 Received: from mail-pj1-f47.google.com (mail-pj1-f47.google.com [209.85.216.47]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36230.1793161591183241191 for ; Tue, 27 Oct 2026 21:26:31 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=a7MbjXQ8; spf=pass (domain: gmail.com, ip: 209.85.216.47, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f47.google.com with SMTP id 98e67ed59e1d1-3ae57dc1ea9so173877a91.2 for ; Tue, 27 Oct 2026 21:26:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161590; x=1793766390; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=GiyYSqYPPUSOJHTQeV/4naIalJhC2vsmp1jzqh526q4=; b=a7MbjXQ8OBwmHD5aypIabYGa/JwYFVZ03eiND/VukkBVMuOUARChK1xX9ZRcEDz5v2 f0HVpb+RFb69HpmrTnZZg5hDcWWZP3SZ+278R2VfzUg51Iyp6xfa9BQs+eSU8mHO52NV 6x8BX6GviFmF1OQTJyJerMHr7mg8kbkHfQUgoJV2pBESwr+d+JF+oDFwlw/fqNfG4Vyj jsr8ZuPBQoUpoKYMzgAbQKX7ker32eIULH6i1uO9oqgM76C9jKuVIf+XUTpI73+hNphF jZSxWo9MI7qS9MAr6X6FduklRigoJMOvosHDIJ3ueTP0GmV/mrbgSBr0Cl/fYoMhjALa vdMA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161590; x=1793766390; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=GiyYSqYPPUSOJHTQeV/4naIalJhC2vsmp1jzqh526q4=; b=zpmQ/GvtZqolzvrbcAIUh4bHvq1y6M/oFWIMGlqbPvkkk6Dkey6g8+0HDNu+gPKC9v 3LEek8jX5BDYdRmATKZySEBLnwRuvNn5XVWUe6/eXAr6Rgawkvul3lplmyIBlwk7cGpA QcEtQMuWHvuq2VWgzOF6cvL8kCgIYAoOQuXHPUD/2MhIjZH1YEB5tnFnDcXdvpWaC3a+ Ckwul/29v/3LPciNSDuua4kgbaVHigx5iH4wSrGbMIePc5w3f08yaVrxX3euij7BpP6w ULbV+yZ64ja3a5jypUyfmno6y1NQOH2yjxdKsCrUGVHInXbj29BNIOPGpEvdipmQ6xkk weCQ== X-Gm-Message-State: AFq9FYIDOzs4ZMk429i3Pie8MJP8EgsJr1DzdgSNoHfFXw9A9niGaXLm m9i3qCUpm68mitJUrTcOV5TqCkSKHXPdlrGnYOm7fgezxS/zZdo382AAm5FZTw== X-Gm-Gg: AYBFou0yPPVndG6HboZMIJFZPUA4KguYDpoOdwuCoC2QQYD9h/YgBtQ7VkjbZsFpVpY 54r0ZyeI3IZMw+d3b2R8H1EG9VnGuQXsQ5lAb3vgIIfNmQ/NcTqq243Pv+gY09LtN7sdEGDHPBk /p0oZRfGZ9T3RmWQcmOgTPAuaoYLBtlzNAKwTyNkgXFIXG8Lslc8/PwuAbXvskDg3kZcdr+YioV URq05GXUqzjhqIrtrr4P5Mg+Ygj1jzW17SCT2ly2kR5PvDFhmrLVTz7sHAoLSf7Z/X9Prim+NIt ncagWxqEa2Ictzq6UriNM/4iZIdVmmRa9w8dFIDt7/cBmZsLoU+bL31Qwnldm/Cl4jDm7PZ5mWF AVQuXWT4J/384/M9okXGy7zFCEV6IJzSqM2qVQ2Dd55wiKU85y7QR4dnFGQ3ZmFNPlsruzBhEaQ EwBwXsVuqMG8dHqXBkawLxhk7xACeLB3NqNkX1QHqA4EOuMKsMaZ/cEEvFbtW+r2lhuuLgGn/rA vp6gsXS4s1Lyw+V+OT6vhIkB/rC3krONmhBd1E0F0nbHasr/HvEtpTz630Djvl7WNucURvTTWC+ LhqyyoMMI/yno5zxFDB8DrMX+ZyoYJO4GgrcoxCLDaGJADgCAAKZP/rQQ6jSObe0zYd6A4e50TN WJCiTjZw= X-Received: by 2002:a17:90b:58cf:b0:3a7:cffb:8b96 with SMTP id 98e67ed59e1d1-3ae58171017mr901949a91.18.1793161590487; Tue, 27 Oct 2026 21:26:30 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.26.28 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:26:30 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi Subject: [blacksail][PATCH 57/60] python3-oauthlib: patch CVE-2026-49265 Date: Wed, 28 Oct 2026 17:23:55 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:37 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131609 From: Ankur Tyagi Details: https://nvd.nist.gov/vuln/detail/cve-2026-49265 Signed-off-by: Ankur Tyagi --- .../python3-oauthlib/CVE-2026-49265.patch | 51 +++++++++++++++++++ .../python/python3-oauthlib_3.3.1.bb | 2 + 2 files changed, 53 insertions(+) create mode 100644 meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch diff --git a/meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch b/meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch new file mode 100644 index 0000000000..8cbc368b6c --- /dev/null +++ b/meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch @@ -0,0 +1,51 @@ +From f3510969587daff0de06a233cf6be3a6233b3429 Mon Sep 17 00:00:00 2001 +From: Jonathan Huot +Date: Sat, 11 Jul 2026 13:15:29 +0200 +Subject: [PATCH] Improve PKCE code comparison + +(cherry picked from commit 74664d3fe037a354e180e305135c6bab1747a6b0) + +CVE: CVE-2026-49265 +Upstream-Status: Backport [https://github.com/oauthlib/oauthlib/commit/74664d3fe037a354e180e305135c6bab1747a6b0] + +Dropped changes to the CHANGELOG file. + +Signed-off-by: Ankur Tyagi +--- + oauthlib/oauth2/rfc6749/grant_types/authorization_code.py | 8 +++++--- + 1 file changed, 5 insertions(+), 3 deletions(-) + +diff --git a/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py b/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py +index 09dc619..c73314a 100644 +--- a/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py ++++ b/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py +@@ -4,6 +4,7 @@ oauthlib.oauth2.rfc6749.grant_types + """ + import base64 + import hashlib ++import hmac + import json + import logging + +@@ -44,9 +45,10 @@ def code_challenge_method_s256(verifier, challenge): + + .. _`Section 4.3`: https://tools.ietf.org/html/rfc7636#section-4.3 + """ +- return base64.urlsafe_b64encode( ++ expected = base64.urlsafe_b64encode( + hashlib.sha256(verifier.encode()).digest() +- ).decode().rstrip('=') == challenge ++ ).decode().rstrip('=') ++ return hmac.compare_digest(expected, challenge) + + + def code_challenge_method_plain(verifier, challenge): +@@ -58,7 +60,7 @@ def code_challenge_method_plain(verifier, challenge): + + .. _`Section 4.3`: https://tools.ietf.org/html/rfc7636#section-4.3 + """ +- return verifier == challenge ++ return hmac.compare_digest(verifier, challenge) + + + class AuthorizationCodeGrant(GrantTypeBase): diff --git a/meta-python/recipes-devtools/python/python3-oauthlib_3.3.1.bb b/meta-python/recipes-devtools/python/python3-oauthlib_3.3.1.bb index bdc1f0e7b4..c375b172c7 100644 --- a/meta-python/recipes-devtools/python/python3-oauthlib_3.3.1.bb +++ b/meta-python/recipes-devtools/python/python3-oauthlib_3.3.1.bb @@ -4,6 +4,8 @@ HOMEPAGE = "https://github.com/idan/oauthlib" LICENSE = "BSD-3-Clause" LIC_FILES_CHKSUM = "file://LICENSE;md5=2699a9fb0d71d5eafd75d8d7c302f7df" +SRC_URI += "file://CVE-2026-49265.patch" + SRC_URI[sha256sum] = "0f0f8aa759826a193cf66c12ea1af1637f87b9b4622d46e866952bb022e538c9" CVE_PRODUCT = "oauthlib" From patchwork Wed Oct 28 04:23:56 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102225 Received: from mail-pj1-f53.google.com (mail-pj1-f53.google.com [209.85.216.53]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.36086.1793161598401299708 for ; Tue, 27 Oct 2026 21:26:38 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=tASTj9E6; spf=pass (domain: gmail.com, ip: 209.85.216.53, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f53.google.com with SMTP id 98e67ed59e1d1-3a4b3ac8fb7so341586a91.0 for ; Tue, 27 Oct 2026 21:26:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161598; x=1793766398; darn=lists.openembedded.org; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=F9rXPvfGNYiT4gWAXwbblK7F2TKoV1/vjUjAvRZAT24=; b=tASTj9E6umqz/nfpAqqrXyHakfdbgkDSsK1oRZs5PS1twzfCPTxjkEzx7plU8eB1S3 gxbhPcWuBft89CXUiyWxYZy/vlldYOlr+kIqZSt4ZFbSC0Dn6s7luQ/3xCIqWabODl+I JEfjrzvEp/Db3gk4Ignp9znjIqFFzroEdjG1u+Il9wFwo1McWrPDNIs/xHXSCSAuED++ VZs4REPtWrFY95eg/qxsGOac5HGXJWyrPIn/pooT7CJTSPJtkRe0MSm3Dp04Hvirfy3p Ln0H0sJx53GrbSik8FXXrd2tDT0AZ37eW+f3LzuRqPEw8CAmJwqIfGmTDQo1wjkFTUb4 rJKA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161598; x=1793766398; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=F9rXPvfGNYiT4gWAXwbblK7F2TKoV1/vjUjAvRZAT24=; b=N4mkBPb94gA9HCDEMezgvkIRTFiu4bLOHSU9r0n9eBPR1JqAXKYIYOIWtv3enAzMXV LzXASEiiIn2i7bnLlbIpAifTZPSMJ9EH6g4mP+WAjz5R7fTze5qFBWjkW6Tn2mg5Fhma FMKcu4v842EtDPqiXXiRgeIun1sUGEXBYGhMbPfxE8ql1Km++h/2zdageFvnenvLIaFw tIb8j64yQHpw4+KJUhf3VjSzKrbj77igEQ94Jb1IeWuib3leQTubUNT20+HLVtNksrgN uV/GrKuUeUDNen7+84TWnyU8MDqkf5LAQbdv9WjQNwB5wVnvcrTwbujZEEcEl6D8MrSQ Anug== X-Gm-Message-State: AFq9FYItsK69dTnQYJ4rM32ETt9li2W0FsNt8tPBv//CV7W06Qtw73Nu 8tld14DaDLBYNYY3LdHyPQg9WKPavXTO+HBes+q4gcLfYAvY0OiXR0SS52dl9A== X-Gm-Gg: AYBFou1LyiGnNdIEFy8ki+ZkOkiCLLQCHMtsH9NDHWM/JYVVcR1oibkzDKE5jAJM8qj 8nGLgxEJBsDSKhkj18zgdSD3GnC2uBhj093Vn9ckU/iScSCeMT4svfC+TNg01U4jmEiOtczj4J5 Faj2FqUZ9osFMuQXIFf7ffztmAZIa1YxgCYmnSbCRNcTEsAttvJBKmZAKZOWxtBLKbCkP+ZvCfq aOwWf0lWDIfFrt7IDO6Cop1ZRhCFwvyHLOA0MGDVmia7cWXQWxxCsrLN0cjj55Cfe8lgrR7RF6X 7nKCEi9DGf5bYAqARhXZUJfbwu+XyOuO7vI4DNX0lLA7UMvgHGK+em9s+UkWS8nLvLIDPpYFnDT bbGaMOFNtbHrP6WkwhBxpnKmuCWLLdAFqm0O2frHDLkrAyj+iTprXF0pumdslSfvi402i8OJ3Ky EzBocgmn7ksegPATXjUXRjZX0IbYT5hpyBpuHs/mbR/VBqAChRFnZXZ5aG5wS0S37BJi/H1jiVA eLpQYaJD0Amvci+0Aj7rw9sjgkAZ/RmV3ZmGPMmlXU4TiNu/63N7wwP3PD0UwCeUHckVcje+e/E oaKNskDbYKWy4ShLDDUXwdyRJin3Mj+Q8mWrDLnfj0P8ggrWcGB844pQj0thFBfxcZeVAC+tq87 ko8MeNmo= X-Received: by 2002:a17:90a:e70e:b0:3ab:c674:cad9 with SMTP id 98e67ed59e1d1-3ae582cdc66mr908340a91.54.1793161594360; Tue, 27 Oct 2026 21:26:34 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.26.30 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:26:33 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Jason Schonberg Subject: [blacksail][PATCH 58/60] c-ares: backport security fixes from 1.34.9 Date: Wed, 28 Oct 2026 17:23:56 +1300 Message-ID: <0d9abd6842ad294764f3c7c11791adcb92bd5d10.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:48 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131611 From: Jason Schonberg Add the eight unique upstream commits that fix the security advisories addressed in c-ares 1.34.9. Several advisories share commits, so patches are ordered by commit rather than duplicated per advisory; each patch lists the GHSA IDs it resolves. Assisted-by: opencode (big-pickle) Signed-off-by: Jason Schonberg --- ...troy-detach-queries-before-callbacks.patch | 2603 +++++++++++++++++ ...ed-socket-server-state-notifications.patch | 393 +++ ...qcache-hand-callbacks-their-own-copy.patch | 1054 +++++++ ...connections-torn-down-by-application.patch | 1107 +++++++ ...pt-an-answer-on-the-right-connection.patch | 575 ++++ ...tions-read-channel-config-under-lock.patch | 243 ++ ...res_inet_pton-reject-a-prefix-length.patch | 364 +++ ...nt-drop-UDP-answers-from-server-port.patch | 178 ++ .../recipes-support/c-ares/c-ares_1.34.8.bb | 8 + 9 files changed, 6525 insertions(+) create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0001-ares_cancel-ares_destroy-detach-queries-before-callbacks.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0002-Deliver-deferred-socket-server-state-notifications.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0003-ares_qcache-hand-callbacks-their-own-copy.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0004-Handle-connections-torn-down-by-application.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0005-ares_process-only-accept-an-answer-on-the-right-connection.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0006-ares_save_options-read-channel-config-under-lock.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0007-ares_inet_pton-reject-a-prefix-length.patch create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0008-ares_conn_read-dont-drop-UDP-answers-from-server-port.patch diff --git a/meta-oe/recipes-support/c-ares/c-ares/0001-ares_cancel-ares_destroy-detach-queries-before-callbacks.patch b/meta-oe/recipes-support/c-ares/c-ares/0001-ares_cancel-ares_destroy-detach-queries-before-callbacks.patch new file mode 100644 index 0000000000..385760f5bc --- /dev/null +++ b/meta-oe/recipes-support/c-ares/c-ares/0001-ares_cancel-ares_destroy-detach-queries-before-callbacks.patch @@ -0,0 +1,2603 @@ +From 7f408deb128fbdcce78122322734ffaa01cad9ae Mon Sep 17 00:00:00 2001 +From: Brad House +Date: Sun, 18 Oct 2026 18:15:41 -0400 +Subject: [PATCH] ares_cancel/ares_destroy: detach queries before running user + callbacks +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Backport of dd62bdfca52ba5c37e88a1469c0a4c5e4a568ccb to v1.34. See that +commit for the full description; it hardens reentrant teardown from +callbacks (ares_cancel(), ares_destroy(), server reconfiguration, and +socket/server state notifications). + +Conflicts were whitespace/alignment only (v1.34 predates the clang-format +reformat in #1238) and were reformatted to v1.34's style. + +Also carries the test portion of #1334 that applies to the tests this +introduces: dead-server tests use 127.0.0.1:53055/53056 instead of +127.0.0.55/56, which only routes on Linux. + +Signed-off-by: Brad House +Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/7f408deb128fbdcce78122322734ffaa01cad9ae] +GHSA: GHSA-wpr3-8q3r-4q8c, GHSA-97vq-4mxv-7vhm, GHSA-mw23-pfg6-2x9r, GHSA-rf6g-ww74-97qh, GHSA-v33j-65h4-4ch8, GHSA-pj7p-v3cw-hq66 +--- + docs/ares_cancel.3 | 17 + + docs/ares_destroy.3 | 7 + + docs/ares_init_options.3 | 15 + + docs/ares_set_server_state_callback.3 | 31 +- + docs/ares_set_servers_csv.3 | 17 + + src/lib/ares_cancel.c | 25 +- + src/lib/ares_close_sockets.c | 82 +- + src/lib/ares_conn.c | 217 ++++- + src/lib/ares_conn.h | 37 +- + src/lib/ares_destroy.c | 85 +- + src/lib/ares_private.h | 110 ++- + src/lib/ares_process.c | 235 +++++- + src/lib/ares_send.c | 35 + + src/lib/ares_update_servers.c | 42 +- + test/ares-test-mock.cc | 1068 +++++++++++++++++++++++++ + 15 files changed, 1959 insertions(+), 64 deletions(-) + +diff --git a/docs/ares_cancel.3 b/docs/ares_cancel.3 +index 967a946b49..069f226c10 100644 +--- a/docs/ares_cancel.3 ++++ b/docs/ares_cancel.3 +@@ -21,6 +21,23 @@ These calls give the callbacks a chance to clean up any state which might have + been stored in their arguments. If such a callback invocation adds a new + request to the channel, that request will \fInot\fP be cancelled by the + current invocation of \fBares_cancel(3)\fP. ++.SH REENTRANCY ++A callback invoked by ++.BR ares_cancel (3) ++may call c-ares functions on the same channel. The channel lock is recursive, ++and each query is unlinked from the library's internal structures before its ++callback runs, so a reentrant call cannot encounter a query that is part-way ++through being torn down. ++ ++This includes starting new lookups, as described above, and reconfiguring the ++server list with ++.BR ares_set_servers_csv (3) ++and related functions. ++ ++.SH AVAILABILITY ++The reentrancy guarantee described above applies as of c-ares version 1.35.0, ++and c-ares version 1.34.9 on the 1.34 branch. ++ + .SH SEE ALSO + .BR ares_init (3) + .BR ares_destroy (3) +diff --git a/docs/ares_destroy.3 b/docs/ares_destroy.3 +index d1984b7cc9..0b6380e609 100644 +--- a/docs/ares_destroy.3 ++++ b/docs/ares_destroy.3 +@@ -20,6 +20,13 @@ by the channel. + channel, passing a status of \fIARES_EDESTRUCTION\fP. These calls give the + callbacks a chance to clean up any state which might have been stored in their + arguments. A callback must not add new requests to a channel being destroyed. ++Such a request is refused: the request is not started, and its callback is ++invoked with a status of \fIARES_EDESTRUCTION\fP so that any state attached to ++its argument can be released. A request made from within that notification is ++refused without a further notification, so that a callback which responds to ++failure by retrying cannot recurse without bound; its argument is not handed ++back. This applies as of c-ares version 1.35.0, and c-ares version 1.34.9 on ++the 1.34 branch. + + There is no ability to make this function thread-safe. No additional calls + using this channel may be made once this function is called. +diff --git a/docs/ares_init_options.3 b/docs/ares_init_options.3 +index 9b3b481535..e6f6ee8ba6 100644 +--- a/docs/ares_init_options.3 ++++ b/docs/ares_init_options.3 +@@ -231,6 +231,21 @@ will be passed the socket whose state has changed; + will be set to true if the socket should listen for read events, and + .I writable + will be set to true if the socket should listen for write events. ++ ++This callback may call c-ares functions on the same channel, including ++.BR ares_cancel (3) ++and the server configuration functions. Notifications are delivered once the ++library has finished the work that produced them rather than part-way through ++it, so a reentrant call cannot close a socket the library is still using. They ++arrive in the order the state changes occurred, and always before the ++outermost c-ares call returns. A call made from within a callback is not the ++outermost one, so notifications it produces arrive after it has returned. ++.BR ares_destroy (3) ++is no exception: the closure of every socket the channel still holds is ++reported before it returns, and the callback is never invoked afterwards. ++This applies as of c-ares version 1.35.0, and c-ares version 1.34.9 on the ++1.34 branch. ++ + The value of + .I sock_state_cb_data + will be passed as the +diff --git a/docs/ares_set_server_state_callback.3 b/docs/ares_set_server_state_callback.3 +index 04fbde4c7a..e95db327ce 100644 +--- a/docs/ares_set_server_state_callback.3 ++++ b/docs/ares_set_server_state_callback.3 +@@ -47,6 +47,31 @@ the DNS servers used by an ares channel. For example, it can be used to track + metrics about the numbers and types of queries sent to each server or to + detect when a server is uncontactable or unhealthy. + ++.SH REENTRANCY ++The server state callback may call c-ares functions on the same channel, ++including ++.BR ares_cancel (3) ++and the server configuration functions. The channel lock is recursive and the ++library holds no query, connection or server state across the callback. ++ ++Notifications are queued and delivered once the library has finished the work ++that produced them, rather than part-way through it. A notification is ++therefore observed after the processing pass that generated it, not during. ++ ++The callback and its ++.I user_data ++are read when the notification is delivered, not when it is queued. An ++application that replaces its callback between those two points will see the ++notification delivered to the new one; unregistering by passing a ++.B NULL ++callback discards any notification still queued. ++ ++This applies to a replacement made from within a c-ares callback, where the ++channel lock is held. ++.BR ares_set_server_state_callback (3) ++does not take the channel lock, so replacing the callback from another thread ++while the channel is processing is not synchronized against delivery. ++ + .SH FLAGS + .TP 5 + .B ARES_SERV_STATE_UDP +@@ -58,5 +83,9 @@ Indicates that the query was tried over TCP. + .SH AVAILABILITY + This function was first introduced in c-ares version 1.29.0. + ++The reentrancy guarantee described above applies as of c-ares version 1.35.0, ++and c-ares version 1.34.9 on the 1.34 branch. ++ + .SH SEE ALSO +-.BR ares_get_servers_csv (3) ++.BR ares_get_servers_csv (3), ++.BR ares_cancel (3) +diff --git a/docs/ares_set_servers_csv.3 b/docs/ares_set_servers_csv.3 +index f1435143f5..f9f5b82e28 100644 +--- a/docs/ares_set_servers_csv.3 ++++ b/docs/ares_set_servers_csv.3 +@@ -126,6 +126,23 @@ are identical. Prior versions would simply omit ports in \fBares_set_servers_cs + but due to the addition of link local interface support, this difference was + removed. + ++.SH REENTRANCY ++These functions may be called from within a c-ares callback. Removing a server ++closes its connections, which ends the lookups that were using it and invokes ++their callbacks, so a reconfiguration can be requested from inside one. ++ ++A nested call reconciles the whole server list, and the outer call leaves that ++result in place rather than deleting the servers the nested call installed. ++The consequence is that the outer call's own list does not survive, even ++though it returns ++.B ARES_SUCCESS: ++the last configuration applied is the one the channel keeps. An application ++that reconfigures from a callback should therefore not assume the list it ++passed to the outer call is in effect when that call returns. ++ ++This applies as of c-ares version 1.35.0, and c-ares version 1.34.9 on the ++1.34 branch. ++ + .SH EXAMPLE + .nf + 192.168.1.100,[fe80::1]:53%eth0,dns://192.168.1.1?tcpport=1153 +diff --git a/src/lib/ares_cancel.c b/src/lib/ares_cancel.c +index 75600dea6b..aa167e4486 100644 +--- a/src/lib/ares_cancel.c ++++ b/src/lib/ares_cancel.c +@@ -38,10 +38,10 @@ void ares_cancel(ares_channel_t *channel) + } + + ares_channel_lock(channel); ++ ares_deferred_cb_enter(channel); + + if (ares_llist_len(channel->all_queries) > 0) { + ares_llist_node_t *node = NULL; +- ares_llist_node_t *next = NULL; + + /* Swap list heads, so that only those queries which were present on entry + * into this function are cancelled. New queries added by callbacks of +@@ -57,21 +57,29 @@ void ares_cancel(ares_channel_t *channel) + goto done; /* LCOV_EXCL_LINE: OutOfMemory */ + } + +- node = ares_llist_node_first(list_copy); +- while (node != NULL) { ++ /* Re-read the head each iteration rather than caching the next node: a ++ * callback below may cause other queries in this same list to be ended ++ * and their nodes destroyed. */ ++ while ((node = ares_llist_node_first(list_copy)) != NULL) { + ares_query_t *query; + +- /* Cache next since this node is being deleted */ +- next = ares_llist_node_next(node); ++ query = ares_llist_node_claim(node); + +- query = ares_llist_node_claim(node); ++ /* Must come first: node_claim() already destroyed this node, so ++ * ares_detach_query() would otherwise destroy it a second time. */ + query->node_all_queries = NULL; + ++ /* Detach from queries_by_qid, the connection and the timeout list ++ * before running user code. Otherwise a reentrant teardown from ++ * within the callback -- ares_set_servers_csv(), or a new query ++ * hitting a connection error -- still finds this query, ends it a ++ * second time and frees it, and the ares_free_query() below then ++ * double-frees. */ ++ ares_detach_query(query); ++ + /* NOTE: its possible this may enqueue new queries */ + query->callback(query->arg, ARES_ECANCELLED, 0, NULL); + ares_free_query(query); +- +- node = next; + } + + ares_llist_destroy(list_copy); +@@ -83,5 +91,6 @@ void ares_cancel(ares_channel_t *channel) + ares_queue_notify_empty(channel); + + done: ++ ares_deferred_cb_leave(channel); + ares_channel_unlock(channel); + } +diff --git a/src/lib/ares_close_sockets.c b/src/lib/ares_close_sockets.c +index 7bb72c31ec..6be662fdd3 100644 +--- a/src/lib/ares_close_sockets.c ++++ b/src/lib/ares_close_sockets.c +@@ -41,12 +41,47 @@ static void ares_requeue_queries(ares_conn_t *conn, + } + } + ++/*! Release a connection's memory. Split from the unlink below so that the ++ * two can happen at different times: a caller further up the stack may still ++ * hold this pointer, and reading a detached connection is safe where reading ++ * a freed one is not. */ ++void ares_conn_reap(ares_conn_t *conn) ++{ ++ if (conn == NULL) { ++ return; /* LCOV_EXCL_LINE: DefensiveCoding */ ++ } ++ ++ ares_buf_destroy(conn->in_buf); ++ ares_buf_destroy(conn->out_buf); ++ ares_llist_destroy(conn->queries_to_conn); ++ ares_free(conn); ++} ++ + void ares_close_connection(ares_conn_t *conn, ares_status_t requeue_status) + { +- ares_server_t *server = conn->server; +- ares_channel_t *channel = server->channel; ++ ares_server_t *server; ++ ares_channel_t *channel; ++ ++ if (conn == NULL) { ++ return; /* LCOV_EXCL_LINE: DefensiveCoding */ ++ } ++ ++ /* Already torn down and awaiting reclamation. Reaching here twice is ++ * ordinary once a connection can outlive its teardown: a caller holding it ++ * from before -- handle_conn_error() after a failed write, say -- closes it ++ * again without knowing. Doing the work twice would requeue queries that ++ * have already moved and would put this connection on the pending list a ++ * second time, which is a double free. */ ++ if (conn->flags & ARES_CONN_FLAG_DEAD) { ++ return; ++ } + +- /* Unlink */ ++ server = conn->server; ++ channel = server->channel; ++ ++ /* Unlink from everything that can find this connection. After this it is ++ * unreachable by lookup, which is what stops anything new from picking it ++ * up; anything that already holds it is handled by the deferral below. */ + ares_llist_node_claim( + ares_htable_asvp_get_direct(channel->connnode_by_socket, conn->fd)); + ares_htable_asvp_remove(channel->connnode_by_socket, conn->fd); +@@ -55,19 +90,40 @@ void ares_close_connection(ares_conn_t *conn, ares_status_t requeue_status) + server->tcp_conn = NULL; + } + +- ares_buf_destroy(conn->in_buf); +- ares_buf_destroy(conn->out_buf); ++ /* Marked dead as soon as it is unlinked, before anything below can run ++ * application code. ares_requeue_queries() ends queries terminally once ++ * their retries are exhausted, which invokes the application's callback; if ++ * the flag were set after that, a second ares_close_connection() reaching ++ * this connection in the meantime would run the body again -- closing the ++ * descriptor twice and listing the connection for reclamation twice, which ++ * is a double free. It also gives ares_close_sockets() its termination ++ * condition: dead implies unlinked, so its re-read-the-head loop cannot see ++ * a dead connection and spin. */ ++ conn->flags |= ARES_CONN_FLAG_DEAD; + + /* Requeue queries to other connections */ + ares_requeue_queries(conn, requeue_status); + +- ares_llist_destroy(conn->queries_to_conn); +- +- ares_conn_sock_state_cb_update(conn, ARES_CONN_STATE_NONE); +- +- ares_socket_close(channel, conn->fd); ++ /* Hands the descriptor to the queued notification when one is due, so the ++ * application is told to stop watching it before it is closed. Otherwise ++ * nothing will carry it and we close it here. */ ++ if (!ares_conn_sock_state_cb_close(conn)) { ++ ares_socket_close(channel, conn->fd); ++ } ++ conn->fd = ARES_SOCKET_BAD; ++ ++ /* If a library call is in progress it may be holding this connection -- ++ * read_answers() and ares_send_query_int() both do, across code that can ++ * reach here. Keep it readable until that call unwinds. The buffers and ++ * the query list are freed by ares_conn_reap(), so a stale holder sees an ++ * emptied connection rather than freed memory. */ ++ if (channel->deferred_cb_depth > 0) { ++ conn->next_pending = channel->pending_conns; ++ channel->pending_conns = conn; ++ return; ++ } + +- ares_free(conn); ++ ares_conn_reap(conn); + } + + void ares_close_sockets(ares_server_t *server) +@@ -76,6 +132,10 @@ void ares_close_sockets(ares_server_t *server) + + while ((node = ares_llist_node_first(server->connections)) != NULL) { + ares_conn_t *conn = ares_llist_node_val(node); ++ /* This loop re-reads the head each time and relies on the close below ++ * unlinking it. A dead connection returns early without unlinking, so ++ * one on this list would spin forever holding the channel lock. */ ++ assert(!(conn->flags & ARES_CONN_FLAG_DEAD)); + ares_close_connection(conn, ARES_SUCCESS); + } + } +diff --git a/src/lib/ares_conn.c b/src/lib/ares_conn.c +index 6b315b0548..78f57e7d10 100644 +--- a/src/lib/ares_conn.c ++++ b/src/lib/ares_conn.c +@@ -26,19 +26,210 @@ + */ + #include "ares_private.h" + +-void ares_conn_sock_state_cb_update(ares_conn_t *conn, +- ares_conn_state_flags_t flags) ++/*! A queued socket-state notification. Holds the descriptor and the state, ++ * never the connection, so a queued entry cannot outlive what it refers to. ++ * ++ * When \c owns_fd is set, this message carries the only remaining reference to ++ * the descriptor: the connection is gone and the descriptor is deliberately ++ * left open until after the application has been told to stop watching it. ++ * Closing first would let the number be reused -- by application code running ++ * from a deferred query callback, for instance -- before the notification ++ * naming it is delivered. */ ++typedef struct { ++ ares_socket_t fd; ++ ares_bool_t readable; ++ ares_bool_t writable; ++ ares_bool_t owns_fd; ++} ares_sock_state_msg_t; ++ ++static ares_bool_t ares_sock_state_queue(ares_channel_t *channel, ++ const ares_sock_state_msg_t *msg) + { +- ares_channel_t *channel = conn->server->channel; ++ if (channel->sock_state_queue == NULL) { ++ channel->sock_state_queue = ares_array_create(sizeof(*msg), NULL); ++ if (channel->sock_state_queue == NULL) { ++ return ARES_FALSE; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ } ++ ++ if (ares_array_insertdata_last(channel->sock_state_queue, msg) != ++ ARES_SUCCESS) { ++ return ARES_FALSE; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ ++ return ARES_TRUE; ++} ++ ++/*! Deliver every socket-state notification the channel has queued. Loops ++ * rather than snapshotting: a callback is allowed to re-enter the library and ++ * queue more, and those belong to this same delivery point. */ ++static void ares_sock_state_dispatch(ares_channel_t *channel) ++{ ++ while (ares_array_len(channel->sock_state_queue) > 0) { ++ ares_sock_state_msg_t msg; ++ ++ if (ares_array_claim_at(&msg, sizeof(msg), channel->sock_state_queue, 0) != ++ ARES_SUCCESS) { ++ break; /* LCOV_EXCL_LINE: DefensiveCoding */ ++ } + +- if ((conn->state_flags & ARES_CONN_STATE_CBFLAGS) != flags && +- channel->sock_state_cb) { +- channel->sock_state_cb(channel->sock_state_cb_data, conn->fd, +- flags & ARES_CONN_STATE_READ ? 1 : 0, +- flags & ARES_CONN_STATE_WRITE ? 1 : 0); ++ if (channel->sock_state_cb != NULL) { ++ /* The public callback takes ints. */ ++ channel->sock_state_cb(channel->sock_state_cb_data, msg.fd, ++ msg.readable ? 1 : 0, msg.writable ? 1 : 0); ++ } ++ ++ /* Told first, closed second -- the ordering the application depends on to ++ * keep its descriptor set honest. */ ++ if (msg.owns_fd) { ++ ares_socket_close(channel, msg.fd); ++ } ++ } ++ ++ ares_array_destroy(channel->sock_state_queue); ++ channel->sock_state_queue = NULL; ++} ++ ++static void ares_deferred_cb_flush(ares_channel_t *channel) ++{ ++ /* Only the outermost frame delivers: anything above us on the stack may ++ * still be holding the connection a reentrant call from one of these ++ * callbacks could free. ++ * ++ * The dispatch below counts as a nesting level of its own. Without that, a ++ * callback that calls back into the library re-enters here through the ++ * enter/leave pair on that call, drains the rest of the queue and destroys ++ * it underneath the loop -- and hands the next notification to the ++ * application from inside the current one. With the counter held, the ++ * nested leave returns immediately and whatever it queued is picked up by ++ * the loop that is already running. */ ++ if (channel->deferred_cb_depth > 0) { ++ return; ++ } ++ channel->deferred_cb_depth++; ++ ++ /* Both kinds of deferred notification share this one delivery point. Loop ++ * rather than calling each once: a socket-state callback may put the library ++ * on a path that queues a server-state notification, and the reverse, and ++ * both belong to this delivery point rather than the next one. */ ++ while (ares_array_len(channel->sock_state_queue) > 0 || ++ ares_array_len(channel->server_state_queue) > 0) { ++ ares_sock_state_dispatch(channel); ++ ares_server_state_dispatch(channel); ++ } ++ ++ /* The outermost call is unwinding and the callbacks above have run, so ++ * nothing can still be holding a server or connection that was unlinked ++ * during it. Now they can be freed. */ ++ ares_deferred_reclaim(channel); ++ ++ channel->deferred_cb_depth--; ++} ++ ++void ares_deferred_reclaim(ares_channel_t *channel) ++{ ++ /* Connections first: a pending server's connection list is already empty, ++ * but this keeps the ordering obvious rather than incidental. */ ++ while (channel->pending_conns != NULL) { ++ ares_conn_t *conn = channel->pending_conns; ++ channel->pending_conns = conn->next_pending; ++ conn->next_pending = NULL; ++ ares_conn_reap(conn); ++ } ++ ++ while (channel->pending_servers != NULL) { ++ ares_server_t *server = channel->pending_servers; ++ channel->pending_servers = server->next_pending; ++ server->next_pending = NULL; ++ ares_server_reap(server); ++ } ++} ++ ++void ares_deferred_cb_enter(ares_channel_t *channel) ++{ ++ channel->deferred_cb_depth++; ++} ++ ++void ares_deferred_cb_leave(ares_channel_t *channel) ++{ ++ if (channel->deferred_cb_depth > 0) { ++ channel->deferred_cb_depth--; ++ } ++ ares_deferred_cb_flush(channel); ++} ++ ++ares_bool_t ares_conn_sock_state_cb_close(ares_conn_t *conn) ++{ ++ ares_channel_t *channel = conn->server->channel; ++ ares_sock_state_msg_t msg; ++ ++ /* No callback to run, so nothing will ever carry this descriptor: the ++ * caller closes it itself, exactly as before. */ ++ if (channel->sock_state_cb == NULL) { ++ return ARES_FALSE; ++ } ++ ++ /* Already reported as unwatched, so no notification is due and no message ++ * will be queued to hold the descriptor. */ ++ if ((conn->state_flags & ARES_CONN_STATE_CBFLAGS) == ARES_CONN_STATE_NONE) { ++ return ARES_FALSE; ++ } ++ ++ msg.fd = conn->fd; ++ msg.readable = ARES_FALSE; ++ msg.writable = ARES_FALSE; ++ msg.owns_fd = ARES_TRUE; ++ ++ if (!ares_sock_state_queue(channel, &msg)) { ++ return ARES_FALSE; /* LCOV_EXCL_LINE: OutOfMemory */ + } + + conn->state_flags &= ~((unsigned int)ARES_CONN_STATE_CBFLAGS); ++ ++ return ARES_TRUE; ++} ++ ++void ares_conn_sock_state_cb_update(ares_conn_t *conn, ++ ares_conn_state_flags_t flags) ++{ ++ ares_channel_t *channel = conn->server->channel; ++ ares_sock_state_msg_t msg; ++ ares_bool_t changed = ARES_FALSE; ++ ++ if ((conn->state_flags & ARES_CONN_STATE_CBFLAGS) != flags) { ++ changed = ARES_TRUE; ++ } ++ ++ msg.fd = conn->fd; ++ msg.readable = flags & ARES_CONN_STATE_READ ? ARES_TRUE : ARES_FALSE; ++ msg.writable = flags & ARES_CONN_STATE_WRITE ? ARES_TRUE : ARES_FALSE; ++ msg.owns_fd = ARES_FALSE; /* the connection still owns it */ ++ ++ if (!changed || channel->sock_state_cb == NULL) { ++ conn->state_flags &= ~((unsigned int)ARES_CONN_STATE_CBFLAGS); ++ conn->state_flags |= flags; ++ return; ++ } ++ ++ /* Queue rather than dispatch. This runs in the middle of opening, writing ++ * to or closing a connection, and every caller keeps using that connection ++ * afterwards. The callback is application code that may reentrantly call ++ * ares_cancel() or ares_set_servers_csv(), either of which frees the ++ * connection -- the first through the idle-connection sweep, the second by ++ * destroying the server that owns it. Deliver once no frame still holds ++ * it. ++ * ++ * Only the descriptor and the state are captured, never the connection, and ++ * insertion order is preserved so the application observes the same ++ * sequence it would have seen inline. */ ++ if (!ares_sock_state_queue(channel, &msg)) { ++ return; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ ++ /* Recorded as reported only now: on either failure above the connection ++ * stays eligible to notify again, rather than remembering a state the ++ * application was never told about. */ ++ conn->state_flags &= ~((unsigned int)ARES_CONN_STATE_CBFLAGS); + conn->state_flags |= flags; + } + +@@ -435,6 +626,16 @@ ares_status_t ares_open_connection(ares_conn_t **conn_out, + conn->flags |= ARES_CONN_FLAG_TFO_INITIAL; + } + ++ /* The socket-configure and socket-create callbacks above are application ++ * code, and either may reconfigure the servers -- which destroys the ones ++ * the new configuration omits, including possibly this one. Everything ++ * below dereferences it, starting with conn->server in ++ * ares_conn_set_self_ip(). */ ++ if (!ares_server_in_channel(channel, server)) { ++ status = ARES_ECONNREFUSED; ++ goto done; ++ } ++ + /* Need to store our own ip for DNS cookie support */ + status = ares_conn_set_self_ip(conn, ARES_TRUE); + if (status != ARES_SUCCESS) { +diff --git a/src/lib/ares_conn.h b/src/lib/ares_conn.h +index c332de14b1..fc177b84f6 100644 +--- a/src/lib/ares_conn.h ++++ b/src/lib/ares_conn.h +@@ -49,7 +49,14 @@ typedef enum { + * it). Its in-flight queries continue to drain and it is cleaned up once + * idle. This is a per-connection signal so that a transient failure does + * not evict otherwise-healthy connections to the same server. */ +- ARES_CONN_FLAG_NONEW = 1 << 3 ++ ARES_CONN_FLAG_NONEW = 1 << 3, ++ /*! Connection has been torn down: unlinked from every lookup structure, its ++ * descriptor closed or handed to a pending notification, and its queries ++ * requeued. It survives only so that a caller further up the stack which ++ * captured it before the teardown can still read it; see ++ * ares_deferred_reclaim(). Teardown is idempotent -- a second ++ * ares_close_connection() on a dead connection does nothing. */ ++ ARES_CONN_FLAG_DEAD = 1 << 4 + } ares_conn_flags_t; + + typedef enum { +@@ -84,6 +91,10 @@ struct ares_conn { + + /* list of outstanding queries to this connection */ + ares_llist_t *queries_to_conn; ++ ++ /*! Next connection awaiting reclamation. Set only while this connection is ++ * on channel->pending_conns; see ares_deferred_reclaim(). */ ++ ares_conn_t *next_pending; + }; + + /*! Various buckets for grouping history */ +@@ -168,6 +179,10 @@ struct ares_server { + + /* Link back to owning channel */ + ares_channel_t *channel; ++ ++ /*! Next server awaiting reclamation. Set only while this server is on ++ * channel->pending_servers; see ares_deferred_reclaim(). */ ++ ares_server_t *next_pending; + }; + + void ares_close_connection(ares_conn_t *conn, ares_status_t requeue_status); +@@ -185,8 +200,24 @@ ares_status_t ares_conn_flush(ares_conn_t *conn); + ares_conn_err_t ares_conn_read(ares_conn_t *conn, void *data, size_t len, + size_t *read_bytes); + ares_conn_t *ares_conn_from_fd(const ares_channel_t *channel, ares_socket_t fd); +-void ares_conn_sock_state_cb_update(ares_conn_t *conn, +- ares_conn_state_flags_t flags); ++ ++/*! Queue the "stop watching this descriptor" notification for a connection ++ * being torn down, handing the descriptor to that queued message. ++ * ++ * The application must be told to stop watching a descriptor while it is ++ * still open -- close first and the number can be handed to something else, ++ * including by application code running from a deferred query callback, ++ * before the notification naming it is delivered. ++ * ++ * \param[in] conn Connection being closed. ++ * \return ARES_TRUE if the queued notification took the descriptor, in which ++ * case the caller must not close it; ARES_FALSE if no notification is ++ * due, and the caller closes the descriptor itself. ++ */ ++ares_bool_t ares_conn_sock_state_cb_close(ares_conn_t *conn); ++ ++void ares_conn_sock_state_cb_update(ares_conn_t *conn, ++ ares_conn_state_flags_t flags); + ares_conn_err_t ares_socket_recv(ares_channel_t *channel, ares_socket_t s, + ares_bool_t is_tcp, void *data, + size_t data_len, size_t *read_bytes); +diff --git a/src/lib/ares_destroy.c b/src/lib/ares_destroy.c +index 1e5706e0e0..e0534c800d 100644 +--- a/src/lib/ares_destroy.c ++++ b/src/lib/ares_destroy.c +@@ -69,17 +69,31 @@ void ares_destroy(ares_channel_t *channel) + * callbacks need to hold a channel lock. */ + ares_channel_lock(channel); + +- /* Destroy all queries */ +- node = ares_llist_node_first(channel->all_queries); +- while (node != NULL) { +- ares_llist_node_t *next = ares_llist_node_next(node); +- ares_query_t *query = ares_llist_node_claim(node); +- ++ /* Destroy all queries. ++ * ++ * The queries are detached before their callbacks run. Claiming the node ++ * only unlinks a query from all_queries; it stays in queries_by_qid, on ++ * conn->queries_to_conn and in queries_by_timeout. A reentrant teardown ++ * from inside the callback -- ares_set_servers_csv(), or a new query ++ * hitting a connection error -- would otherwise still find the query, end ++ * it a second time (invoking the application callback twice for one ++ * lookup) and free it, and the ares_free_query() below would double-free. ++ * ++ * The loop re-reads the first node each iteration rather than caching the ++ * next one, since a callback can cause other queries in this same list to ++ * be ended and their nodes destroyed. No list swap is needed: sys_up is ++ * already cleared above, so ares_send_nolock() refuses new queries and ++ * nothing can be added while we drain. */ ++ while ((node = ares_llist_node_first(channel->all_queries)) != NULL) { ++ ares_query_t *query = ares_llist_node_claim(node); ++ ++ /* Must come first: node_claim() already destroyed this node, so ++ * ares_detach_query() would otherwise destroy it a second time. */ + query->node_all_queries = NULL; ++ ares_detach_query(query); ++ + query->callback(query->arg, ARES_EDESTRUCTION, 0, NULL); + ares_free_query(query); +- +- node = next; + } + + ares_queue_notify_empty(channel); +@@ -93,7 +107,28 @@ void ares_destroy(ares_channel_t *channel) + assert(ares_slist_len(channel->queries_by_timeout) == 0); + #endif + ++ /* Tearing down the servers closes every remaining connection. Applications ++ * rely on being told about those closures so they can drop the descriptors ++ * from their own event loop, so the notifications are still delivered here ++ * rather than discarded -- just after the teardown instead of during it. */ ++ ares_deferred_cb_enter(channel); + ares_destroy_servers_state(channel); ++ ares_deferred_cb_leave(channel); ++ ++ /* The leave above delivered and destroyed both queues and reclaimed ++ * everything the teardown unlinked, so these are normally no-ops. They are ++ * not redundant: if the first insert into a freshly created queue fails, ++ * the array is left allocated and empty, the flush loop never runs because ++ * both queues are empty, and nothing else would ever free it. */ ++ ares_array_destroy(channel->sock_state_queue); ++ channel->sock_state_queue = NULL; ++ ares_array_destroy(channel->server_state_queue); ++ channel->server_state_queue = NULL; ++ ++#ifndef NDEBUG ++ assert(channel->pending_servers == NULL); ++ assert(channel->pending_conns == NULL); ++#endif + + #ifndef NDEBUG + assert(ares_htable_asvp_num_keys(channel->connnode_by_socket) == 0); +@@ -134,17 +169,47 @@ void ares_destroy(ares_channel_t *channel) + ares_free(channel); + } + +-void ares_destroy_server(ares_server_t *server) ++/*! Release a server's memory. Split from ares_destroy_server() for the same ++ * reason ares_conn_reap() is split out: a caller further up the stack may ++ * still hold this pointer. */ ++void ares_server_reap(ares_server_t *server) + { + if (server == NULL) { + return; /* LCOV_EXCL_LINE: DefensiveCoding */ + } + +- ares_close_sockets(server); + ares_llist_destroy(server->connections); + ares_free(server); + } + ++void ares_destroy_server(ares_server_t *server) ++{ ++ ares_channel_t *channel; ++ ++ if (server == NULL) { ++ return; /* LCOV_EXCL_LINE: DefensiveCoding */ ++ } ++ ++ channel = server->channel; ++ ++ /* Closes and unlinks every connection; each is deferred or reaped by ++ * ares_close_connection() on the same rule applied below. */ ++ ares_close_sockets(server); ++ ++ /* The caller has already unlinked this server from channel->servers, so it ++ * can no longer be found -- ares_server_in_channel() and ++ * ares_slist_node_find() both report it gone, which is what callers check ++ * before acting on one. But a library call in progress may still be ++ * holding the pointer, so keep it readable until that call unwinds. */ ++ if (channel != NULL && channel->deferred_cb_depth > 0) { ++ server->next_pending = channel->pending_servers; ++ channel->pending_servers = server; ++ return; ++ } ++ ++ ares_server_reap(server); ++} ++ + void ares_destroy_servers_state(ares_channel_t *channel) + { + ares_slist_node_t *node; +diff --git a/src/lib/ares_private.h b/src/lib/ares_private.h +index 04d4576ed2..0a1029e0f8 100644 +--- a/src/lib/ares_private.h ++++ b/src/lib/ares_private.h +@@ -147,7 +147,10 @@ typedef struct ares_query ares_query_t; + struct ares_query { + /* Query ID from qbuf, for faster lookup, and current timeout */ + unsigned short qid; /* host byte order */ +- ares_timeval_t ts; /*!< Timestamp query was sent */ ++ /*! Distinguishes this query from any later one handed the same qid. ++ * Query ids are 16-bit and recycled; this counter is not. */ ++ size_t serial; ++ ares_timeval_t ts; /*!< Timestamp query was sent */ + ares_timeval_t timeout; + ares_channel_t *channel; + +@@ -227,6 +230,9 @@ struct ares_channeldata { + /* Server addresses and communications state. Sorted by least consecutive + * failures, followed by the configuration order if failures are equal. */ + ares_slist_t *servers; ++ /*! Bumped by each ares_servers_update(). Lets the stale-server removal loop ++ * tell that a nested reconfiguration reconciled the list underneath it. */ ++ size_t servers_generation; + + /* random state to use when generating new ids and generating retry penalties + */ +@@ -237,6 +243,10 @@ struct ares_channeldata { + /* Queries bucketed by qid, for quickly dispatching DNS responses: */ + ares_htable_szvp_t *queries_by_qid; + ++ /*! Monotonic source for ares_query_t.serial. Never reused for the life of ++ * the channel, so a recycled query id cannot impersonate an older query. */ ++ size_t query_serial; ++ + /* Queries bucketed by timeout, for quickly handling timeouts: */ + ares_slist_t *queries_by_timeout; + +@@ -248,6 +258,29 @@ struct ares_channeldata { + + ares_sock_state_cb sock_state_cb; + void *sock_state_cb_data; ++ /*! Socket-state notifications queued during processing, delivered once the ++ * library is no longer holding a connection a reentrant call could free. ++ * Insertion order is preserved, so an application observes the same ++ * sequence of state changes it would have seen inline. */ ++ ares_array_t *sock_state_queue; ++ /*! Depth of nested library entry points that may produce a deferred ++ * application notification. Queues are delivered as this returns to ++ * zero. Shared by every deferred callback kind rather than one counter ++ * per kind, so the delivery rule exists in exactly one place. */ ++ size_t deferred_cb_depth; ++ ++ /*! Servers and connections that have been unlinked from every lookup ++ * structure but not yet freed, because a library call was in progress and ++ * may still hold a pointer to them. Drained by the same flush that ++ * delivers deferred notifications, once no frame can still be holding one. ++ * ++ * This is what makes a stale ares_server_t or ares_conn_t readable rather ++ * than freed for the remainder of the call that captured it. Callers ++ * still revalidate before *acting* on one -- ares_server_in_channel() and ++ * friends -- but a missed check is now "used a server that was removed" ++ * rather than a use-after-free. */ ++ ares_server_t *pending_servers; ++ ares_conn_t *pending_conns; + + ares_sock_create_callback sock_create_cb; + void *sock_create_cb_data; +@@ -295,6 +328,10 @@ struct ares_channeldata { + /* Callback triggered when a server has a successful or failed response */ + ares_server_state_callback server_state_cb; + void *server_state_cb_data; ++ /*! Server-state notifications queued during processing, dispatched once the ++ * library is no longer holding pointers a reentrant callback could free. ++ * See ares_deferred_cb_leave(). */ ++ ares_array_t *server_state_queue; + + /* TRUE if a reinit is pending. Reinit spawns a thread to read the system + * configuration and then apply the configuration since configuration +@@ -308,6 +345,11 @@ struct ares_channeldata { + * system config changes might get triggered and we need a flag to make + * sure we don't take action. */ + ares_bool_t sys_up; ++ ++ /*! Set while ares_send_nolock() is running the refusal notification for a ++ * channel being destroyed. Bounds the recursion at one frame when the ++ * application's callback responds by starting another lookup. */ ++ ares_bool_t in_shutdown_refusal; + }; + + /* Does the domain end in ".onion" or ".onion."? Case-insensitive. */ +@@ -351,6 +393,16 @@ void *ares_dnsrec_convert_arg(ares_callback callback, void *arg); + void ares_dnsrec_convert_cb(void *arg, ares_status_t status, size_t timeouts, + const ares_dns_record_t *dnsrec); + ++/*! Unlink a query from every list and table that tracks it. ++ * ++ * Must be called before running application code that could reach the query ++ * again, so a reentrant teardown cannot find it and end it a second time. ++ * ++ * \param[in] query Query to detach. Safe to call more than once on the ++ * same query. ++ */ ++void ares_detach_query(ares_query_t *query); ++ + void ares_free_query(ares_query_t *query); + + unsigned short ares_generate_new_id(ares_rand_state *state); +@@ -390,7 +442,6 @@ ares_status_t ares_sysconfig_set_options(ares_sysconfig_t *sysconfig, + + ares_status_t ares_init_by_environment(ares_sysconfig_t *sysconfig); + +- + typedef ares_status_t (*ares_sysconfig_line_cb_t)(const ares_channel_t *channel, + ares_sysconfig_t *sysconfig, + ares_buf_t *line); +@@ -589,6 +640,60 @@ ares_status_t ares_dns_name_write(ares_buf_t *buf, ares_llist_t **list, + */ + void ares_queue_notify_empty(ares_channel_t *channel); + ++/*! Is this server still installed on the channel? ++ * ++ * Application callbacks may reconfigure the servers, which destroys any that ++ * the new configuration omits. A raw ares_server_t captured before such a ++ * callback must be revalidated before it is used again. ++ * ++ * \param[in] channel Initialized ares channel. ++ * \param[in] server Server pointer captured earlier. ++ * \return ARES_TRUE if still present. ++ */ ++ares_bool_t ares_server_in_channel(const ares_channel_t *channel, ++ const ares_server_t *server); ++ ++/*! Free everything awaiting reclamation on the channel. ++ * ++ * Called only from the deferred-callback flush, at the point where the ++ * outermost library call is unwinding and no frame can still hold a pointer ++ * to an unlinked server or connection. ++ * ++ * \param[in] channel Initialized ares channel. ++ */ ++void ares_deferred_reclaim(ares_channel_t *channel); ++ ++/*! Free one connection's memory. Only for the deferred-reclaim path and the ++ * immediate path in ares_close_connection(). */ ++void ares_conn_reap(ares_conn_t *conn); ++ ++/*! Free one server's memory. Only for the deferred-reclaim path and the ++ * immediate path in ares_destroy_server(). */ ++void ares_server_reap(ares_server_t *server); ++ ++/*! Enter a region that may produce application notifications the library is ++ * not in a position to deliver yet -- socket-state and server-state changes. ++ * Nesting is counted; queued notifications are delivered by the outermost ++ * leave. ++ * ++ * \param[in] channel Initialized ares channel. ++ */ ++void ares_deferred_cb_enter(ares_channel_t *channel); ++ ++/*! Leave such a region. The outermost leave delivers the queues, at which ++ * point the library holds no connection a reentrant call could free. ++ * ++ * \param[in] channel Initialized ares channel. ++ */ ++void ares_deferred_cb_leave(ares_channel_t *channel); ++ ++/*! Deliver every server-state notification the channel has queued. Called ++ * only from the shared deferred-callback flush. ++ * ++ * \param[in] channel Initialized ares channel. ++ */ ++void ares_server_state_dispatch(ares_channel_t *channel); ++ + #define ARES_CONFIG_CHECK(x) \ + (x && x->lookups && ares_slist_len(x->servers) > 0 && x->timeout > 0 && \ + x->tries > 0) +@@ -636,7 +741,6 @@ typedef struct ares_event_thread ares_event_thread_t; + void ares_event_thread_destroy(ares_channel_t *channel); + ares_status_t ares_event_thread_init(ares_channel_t *channel); + +- + #ifdef _WIN32 + # define HOSTENT_ADDRTYPE_TYPE short + # define HOSTENT_LENGTH_TYPE short +diff --git a/src/lib/ares_process.c b/src/lib/ares_process.c +index b2316c4b33..82f53610fb 100644 +--- a/src/lib/ares_process.c ++++ b/src/lib/ares_process.c +@@ -69,7 +69,6 @@ static ares_status_t ares_send_query_int(ares_server_t *requested_server, + ares_query_t *query, + const ares_timeval_t *now, + ares_array_t **requeue); +-static void ares_detach_query(ares_query_t *query); + + static void ares_query_remove_from_conn(ares_query_t *query) + { +@@ -81,14 +80,32 @@ static void ares_query_remove_from_conn(ares_query_t *query) + query->conn = NULL; + } + ++/*! A queued server-state notification. Holds the formatted address rather ++ * than the server, so it stays valid however the server list changes. */ ++typedef struct { ++ char *server_string; ++ ares_bool_t success; ++ int flags; ++} ares_server_state_msg_t; ++ ++static void ares_server_state_msg_free(void *arg) ++{ ++ ares_server_state_msg_t *msg = arg; ++ if (msg == NULL) { ++ return; /* LCOV_EXCL_LINE: DefensiveCoding */ ++ } ++ ares_free(msg->server_string); ++} ++ + /* Invoke the server state callback after a success or failure */ + static void invoke_server_state_cb(const ares_server_t *server, + ares_bool_t success, int flags) + { +- const ares_channel_t *channel = server->channel; +- ares_buf_t *buf; +- ares_status_t status; +- char *server_string; ++ ares_channel_t *channel = server->channel; ++ ares_buf_t *buf; ++ ares_status_t status; ++ char *server_string; ++ ares_server_state_msg_t msg; + + if (channel->server_state_cb == NULL) { + return; +@@ -111,9 +128,57 @@ static void invoke_server_state_cb(const ares_server_t *server, + return; /* LCOV_EXCL_LINE: OutOfMemory */ + } + +- channel->server_state_cb(server_string, success, flags, +- channel->server_state_cb_data); +- ares_free(server_string); ++ /* Queue rather than dispatch. This runs in the middle of processing, and ++ * every caller keeps using its query / connection / server afterwards. The ++ * callback is application code that may reentrantly call ares_cancel(), ++ * which frees those objects -- so dispatch once the library is no longer ++ * holding them. Same philosophy as the deferred query-callback dispatch. ++ * ++ * Only the formatted address is captured, never the ares_server_t, so a ++ * queued entry cannot outlive anything it points at. */ ++ if (channel->server_state_queue == NULL) { ++ channel->server_state_queue = ares_array_create( ++ sizeof(ares_server_state_msg_t), ares_server_state_msg_free); ++ if (channel->server_state_queue == NULL) { ++ /* LCOV_EXCL_START: OutOfMemory */ ++ ares_free(server_string); ++ return; ++ /* LCOV_EXCL_STOP */ ++ } ++ } ++ ++ msg.server_string = server_string; ++ msg.success = success; ++ msg.flags = flags; ++ ++ if (ares_array_insertdata_last(channel->server_state_queue, &msg) != ++ ARES_SUCCESS) { ++ ares_free(server_string); /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++} ++ ++/*! Deliver every server-state notification the channel has queued. Loops ++ * rather than snapshotting: a callback is allowed to re-enter the library and ++ * queue more, and those belong to this same delivery point. */ ++void ares_server_state_dispatch(ares_channel_t *channel) ++{ ++ while (ares_array_len(channel->server_state_queue) > 0) { ++ ares_server_state_msg_t msg; ++ ++ if (ares_array_claim_at(&msg, sizeof(msg), channel->server_state_queue, ++ 0) != ARES_SUCCESS) { ++ break; /* LCOV_EXCL_LINE: DefensiveCoding */ ++ } ++ ++ if (channel->server_state_cb != NULL) { ++ channel->server_state_cb(msg.server_string, msg.success, msg.flags, ++ channel->server_state_cb_data); ++ } ++ ares_free(msg.server_string); ++ } ++ ++ ares_array_destroy(channel->server_state_queue); ++ channel->server_state_queue = NULL; + } + + static void server_increment_failures(ares_server_t *server, +@@ -204,6 +269,8 @@ static ares_status_t ares_process_fds_nolock(ares_channel_t *channel, + return ARES_EFORMERR; /* LCOV_EXCL_LINE: DefensiveCoding */ + } + ++ ares_deferred_cb_enter(channel); ++ + ares_tvnow(&now); + + /* Process write events */ +@@ -244,6 +311,8 @@ static ares_status_t ares_process_fds_nolock(ares_channel_t *channel, + } + + done: ++ ares_deferred_cb_leave(channel); ++ + if (status == ARES_ENOMEM) { + return ARES_ENOMEM; + } +@@ -553,6 +622,8 @@ typedef enum { + typedef struct { + requeue_type_t type; /* type of entry, requeue or endquery */ + unsigned short qid; /* query id */ ++ size_t serial; /* identifies the query the qid meant when ++ * this entry was appended */ + ares_server_t *server; /* requeue only: optional */ + ares_status_t status; /* endquery only */ + ares_dns_record_t *dnsrec; /* endquery only: optional */ +@@ -578,6 +649,7 @@ static ares_status_t ares_append_requeue_int(ares_array_t **requeue, + + entry.type = type; + entry.qid = query->qid; ++ entry.serial = query->serial; + entry.server = server; + entry.status = status; + entry.dnsrec = dnsrec; +@@ -601,6 +673,53 @@ static ares_status_t ares_append_endqueue(ares_array_t **requeue, + dnsrec); + } + ++/*! Is the query the caller captured still the one holding \a qid? ++ * ++ * A query id is a 16-bit wire value reissued as soon as the query holding it ++ * is detached, so it names a slot rather than a query, and comparing the ++ * pointer as well does not help: the replacement is often allocated at the ++ * address the freed one had. The serial is a channel-wide counter that is ++ * never reused. */ ++static ares_bool_t ares_query_is_live(const ares_channel_t *channel, ++ unsigned short qid, size_t serial) ++{ ++ const ares_query_t *query = ++ ares_htable_szvp_get_direct(channel->queries_by_qid, qid); ++ ++ if (query == NULL || query->serial != serial) { ++ return ARES_FALSE; ++ } ++ ++ return ARES_TRUE; ++} ++ ++/*! Is this exact server object still in the channel's server list? ++ * ++ * Compares pointers only and never dereferences \a server. Deferred ++ * reclamation keeps an unlinked server readable for the rest of the call ++ * that captured it, so reading through it is no longer a use-after-free -- ++ * but it has been removed from the configuration and must not be acted on, ++ * which is what this reports. A channel has a handful of servers, so the ++ * linear scan does not matter. */ ++ares_bool_t ares_server_in_channel(const ares_channel_t *channel, ++ const ares_server_t *server) ++{ ++ ares_slist_node_t *node; ++ ++ if (server == NULL) { ++ return ARES_FALSE; ++ } ++ ++ for (node = ares_slist_node_first(channel->servers); node != NULL; ++ node = ares_slist_node_next(node)) { ++ if (ares_slist_node_val(node) == server) { ++ return ARES_TRUE; ++ } ++ } ++ ++ return ARES_FALSE; ++} ++ + /* Drain the deferred requeue/endqueue list iteratively. All flush sites + * (read_answers(), process_timeouts(), and ares_send_query()) funnel through + * here so that: +@@ -636,11 +755,35 @@ static ares_status_t ares_flush_requeue(ares_channel_t *channel, + + query = ares_htable_szvp_get_direct(channel->queries_by_qid, entry.qid); + ++ /* A query id is a 16-bit wire value and generate_unique_qid() only avoids ++ * ids that are live when it runs. Within a single drain, a callback can ++ * cancel a query whose entry is still in this array -- releasing its id -- ++ * and start a new lookup that is handed the same id. The lookup above ++ * would then resolve this entry to a completely different query: an ++ * endquery entry would deliver one lookup's answer to another and free it, ++ * a requeue entry would put an in-flight query on the wire twice. The ++ * serial is a channel-wide counter that is never reused, so it tells the ++ * two apart. */ ++ if (query != NULL && query->serial != entry.serial) { ++ query = NULL; ++ } ++ + if (entry.type == REQUEUE_REQUEUE) { + /* Query disappeared (e.g. a prior callback in this drain cancelled it) */ + if (query == NULL) { + continue; + } ++ /* entry.server is a raw pointer captured before any callback in this ++ * drain ran. A callback may legally re-enter the public API -- the ++ * channel lock is recursive -- and ares_set_servers*() destroys servers ++ * that are absent from the new configuration, so it may already be ++ * freed. The query above is revalidated by qid for exactly this ++ * reason; do the same for the server, falling back to ordinary ++ * selection when it has gone. */ ++ if (!ares_server_in_channel(channel, entry.server)) { ++ entry.server = NULL; ++ } ++ + /* Re-dispatch via the internal entrypoint so any further requeues are + * appended back onto this same list and drained by the loop above, + * rather than recursing. */ +@@ -1377,6 +1520,7 @@ ares_status_t ares_send_query(ares_server_t *requested_server, + ares_channel_t *channel = query->channel; + ares_array_t *requeue = NULL; + unsigned short qid = query->qid; ++ size_t serial = query->serial; + ares_status_t status; + + status = ares_send_query_int(requested_server, query, now, &requeue); +@@ -1393,8 +1537,7 @@ ares_status_t ares_send_query(ares_server_t *requested_server, + * been freed. Do not dereference 'query' here. If it is no longer tracked + * it ended, so don't report success to the caller (which would, e.g., cause + * ares_send_nolock() to write to a now-freed *qid). */ +- if (status == ARES_SUCCESS && +- ares_htable_szvp_get_direct(channel->queries_by_qid, qid) == NULL) { ++ if (status == ARES_SUCCESS && !ares_query_is_live(channel, qid, serial)) { + status = ARES_ETIMEOUT; + } + +@@ -1412,6 +1555,9 @@ static ares_status_t ares_send_query_int(ares_server_t *requested_server, + size_t timeplus; + ares_status_t status; + ares_bool_t probe_downed_server = ARES_TRUE; ++ /* Captured before any application callback below, which may free the query */ ++ unsigned short qid = query->qid; ++ size_t serial = query->serial; + + /* Choose the server to send the query to */ + if (requested_server != NULL) { +@@ -1443,6 +1589,32 @@ static ares_status_t ares_send_query_int(ares_server_t *requested_server, + conn = ares_fetch_connection(channel, server, query); + if (conn == NULL) { + status = ares_open_connection(&conn, channel, server, query->using_tcp); ++ ++ /* Opening a connection runs application code -- the socket-open function ++ * from ares_set_socket_functions_ex(), and the ares_set_socket_callback() ++ * and ares_set_socket_configure_callback() callbacks -- any of which may ++ * reentrantly call ares_cancel() and free this query. Re-check liveness ++ * by the qid captured at entry rather than dereferencing a possibly-freed ++ * query. */ ++ if (!ares_query_is_live(channel, qid, serial)) { ++ return ARES_ECANCELLED; ++ } ++ ++ /* Those same callbacks may have reconfigured the servers, which frees the ++ * ones the new configuration omits. 'server' was captured before the ++ * open; everything below reads it, including server_increment_failures() ++ * on the failure paths of the switch. ++ * ++ * Requeue rather than return: every exit from this function must either ++ * enqueue the query or end it, and the query is still live here -- it has ++ * not been written, is not attached to a connection, and on a first send ++ * has no timeout node, so returning would strand it forever. ++ * query->conn is NULL, so this does not read through the freed server. */ ++ if (!ares_server_in_channel(channel, server)) { ++ return ares_requeue_query(query, now, ARES_ECONNREFUSED, ARES_TRUE, NULL, ++ requeue); ++ } ++ + switch (status) { + /* Good result, continue on */ + case ARES_SUCCESS: +@@ -1464,6 +1636,14 @@ static ares_status_t ares_send_query_int(ares_server_t *requested_server, + + /* Write the query */ + status = ares_conn_query_write(conn, query, now); ++ ++ /* Writing runs application code too: ares_conn_query_write() reaches the ++ * send function installed by ares_set_socket_functions_ex(), which may ++ * reentrantly call ares_cancel() with the same hazard as above. */ ++ if (!ares_query_is_live(channel, qid, serial)) { ++ return ARES_ECANCELLED; ++ } ++ + switch (status) { + /* Good result, continue on */ + case ARES_SUCCESS: +@@ -1479,6 +1659,17 @@ static ares_status_t ares_send_query_int(ares_server_t *requested_server, + case ARES_ECONNREFUSED: + case ARES_EBADFAMILY: + handle_conn_error(conn, ARES_TRUE, status); ++ /* handle_conn_error() -> ares_close_connection() -> ++ * ares_requeue_queries() walks conn->queries_to_conn and may terminally ++ * end other queries on this connection. If one of their callbacks ++ * reentrantly calls ares_cancel(), this query is freed too -- it is still ++ * linked in all_queries, since it only joins conn->queries_to_conn on the ++ * success path below. Re-check liveness by the qid captured at entry ++ * rather than dereferencing a possibly-freed query. Mirrors the guard in ++ * ares_send_query(). */ ++ if (!ares_query_is_live(channel, qid, serial)) { ++ return ARES_ECONNREFUSED; ++ } + status = ares_requeue_query(query, now, status, ARES_TRUE, NULL, requeue); + if (status == ARES_ETIMEOUT) { + status = ARES_ECONNREFUSED; +@@ -1597,11 +1788,18 @@ static ares_bool_t same_questions(const ares_query_t *query, + return rv; + } + +-static void ares_detach_query(ares_query_t *query) ++void ares_detach_query(ares_query_t *query) + { + /* Remove the query from all the lists in which it is linked */ + ares_query_remove_from_conn(query); +- ares_htable_szvp_remove(query->channel->queries_by_qid, query->qid); ++ /* Only release the qid slot if it is still ours. A query detached before ++ * its callback can have its qid reissued to a lookup started from within ++ * that callback, and the ares_free_query() that follows detaches a second ++ * time -- which would otherwise evict the new lookup instead. */ ++ if (ares_htable_szvp_get_direct(query->channel->queries_by_qid, query->qid) == ++ query) { ++ ares_htable_szvp_remove(query->channel->queries_by_qid, query->qid); ++ } + ares_llist_node_destroy(query->node_all_queries); + query->node_all_queries = NULL; + } +@@ -1624,6 +1822,16 @@ static void end_query(ares_channel_t *channel, ares_server_t *server, + return; + } + ++ /* Detach from all lookup lists before the callback, otherwise a reentrant ++ * ares_cancel() from within it would find this query still linked, free it, ++ * and the ares_free_query() below would double-free. Mirrors ++ * ares_flush_requeue() for every synchronous path that reaches here with a ++ * NULL requeue: connection teardown via handle_conn_error(), and server ++ * removal via ares_servers_update() and ares_destroy_servers_state(), both ++ * of which reach ares_close_sockets(). ++ * ares_detach_query() may safely run twice on the same query. */ ++ ares_detach_query(query); ++ + /* Invoke the callback. */ + query->callback(query->arg, status, query->timeouts, dnsrec); + ares_free_query(query); +@@ -1631,7 +1839,8 @@ static void end_query(ares_channel_t *channel, ares_server_t *server, + /* Check and notify if no other queries are enqueued on the channel. This + * must come after the callback and freeing the query for 2 reasons. + * 1) The callback itself may enqueue a new query +- * 2) Technically the current query isn't detached until it is free()'d. ++ * 2) The current query is detached above, before the callback, so by this ++ * point it is no longer tracked. + */ + ares_queue_notify_empty(channel); + } +diff --git a/src/lib/ares_send.c b/src/lib/ares_send.c +index 6efa9580b2..2e0482bf19 100644 +--- a/src/lib/ares_send.c ++++ b/src/lib/ares_send.c +@@ -117,6 +117,27 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server, + unsigned short id = generate_unique_qid(channel); + const ares_dns_record_t *dnsrec_resp = NULL; + ++ /* A channel being destroyed accepts no new queries. ares_destroy(3) ++ * documents that a callback must not add new requests to a channel being ++ * destroyed. Refuse it, but still notify: ARES_EDESTRUCTION is documented ++ * in ares_query(3), ares_send(3), ares_search(3) and ares_getaddrinfo(3) as ++ * a status delivered to the callback, and every caller frees its own ++ * context from there. ++ * ++ * Not notified if we are already inside such a notification: an application ++ * whose callback starts a replacement lookup on every invocation would ++ * otherwise re-enter here from within the callback without bound and ++ * exhaust the stack. At that depth it is already past the contract ++ * ares_destroy(3) documents. */ ++ if (!channel->sys_up) { ++ if (!channel->in_shutdown_refusal) { ++ channel->in_shutdown_refusal = ARES_TRUE; ++ callback(arg, ARES_EDESTRUCTION, 0, NULL); ++ channel->in_shutdown_refusal = ARES_FALSE; ++ } ++ return ARES_EDESTRUCTION; ++ } ++ + ares_tvnow(&now); + + if (ares_slist_len(channel->servers) == 0) { +@@ -145,6 +166,7 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server, + + query->channel = channel; + query->qid = id; ++ query->serial = ++channel->query_serial; + query->timeout.sec = 0; + query->timeout.usec = 0; + query->using_tcp = +@@ -209,6 +231,12 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server, + */ + if (!ares_htable_szvp_insert(channel->queries_by_qid, query->qid, query)) { + /* LCOV_EXCL_START: OutOfMemory */ ++ /* The query is already chained into all_queries, so a reentrant ++ * ares_cancel() from the callback below would find it, run the ++ * application callback a second time for one lookup, and free it -- and ++ * the ares_free_query() here would then double-free. Same ordering as ++ * ares_cancel() and ares_destroy(): unlink first, notify second. */ ++ ares_detach_query(query); + callback(arg, ARES_ENOMEM, 0, NULL); + ares_free_query(query); + return ARES_ENOMEM; +@@ -217,10 +245,17 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server, + + /* Perform the first query action. */ + ++ /* Sending opens and writes to connections and can mark a server down, both ++ * of which notify. Deliver those once we are done with the connection and ++ * the server, not part-way through. */ ++ ares_deferred_cb_enter(channel); + status = ares_send_query(server, query, &now); ++ ares_deferred_cb_leave(channel); ++ + if (status == ARES_SUCCESS && qid) { + *qid = id; + } ++ + return status; + } + +diff --git a/src/lib/ares_update_servers.c b/src/lib/ares_update_servers.c +index f8d441accf..50a9c27925 100644 +--- a/src/lib/ares_update_servers.c ++++ b/src/lib/ares_update_servers.c +@@ -740,17 +740,36 @@ static ares_bool_t ares_servers_remove_stale(ares_channel_t *channel, + { + ares_bool_t stale_removed = ARES_FALSE; + ares_slist_node_t *snode = ares_slist_node_first(channel->servers); ++ size_t generation = channel->servers_generation; + ++ /* Re-read from the head each pass rather than caching the next node. ++ * ares_slist_node_destroy() below reaches application callbacks, by way of ++ * ares_destroy_server() -> ares_close_sockets() -> ares_requeue_queries(), ++ * and a nested reconfiguration from one of those destroys the remaining ++ * stale servers -- including whichever one a cached pointer referred to. */ + while (snode != NULL) { +- ares_slist_node_t *snext = ares_slist_node_next(snode); + const ares_server_t *server = ares_slist_node_val(snode); +- if (!ares_server_in_newconfig(server, srvlist)) { +- /* This will clean up all server state via the destruction callback and +- * move any queries to new servers */ +- ares_slist_node_destroy(snode); +- stale_removed = ARES_TRUE; ++ ++ if (ares_server_in_newconfig(server, srvlist)) { ++ snode = ares_slist_node_next(snode); ++ continue; + } +- snode = snext; ++ ++ /* This will clean up all server state via the destruction callback and ++ * move any queries to new servers */ ++ ares_slist_node_destroy(snode); ++ stale_removed = ARES_TRUE; ++ ++ /* A callback reached from the destroy above may have reconfigured the ++ * server list against a newer configuration. That call has already ++ * reconciled the whole list, so whatever remains belongs to it and not to ++ * srvlist -- stop rather than deleting its servers. */ ++ if (channel->servers_generation != generation) { ++ break; ++ } ++ ++ /* The callbacks above may have removed further servers, so restart. */ ++ snode = ares_slist_node_first(channel->servers); + } + return stale_removed; + } +@@ -775,6 +794,14 @@ ares_status_t ares_servers_update(ares_channel_t *channel, + return ARES_EFORMERR; /* LCOV_EXCL_LINE: DefensiveCoding */ + } + ++ /* Removing servers closes their connections, which notifies. Deliver ++ * once this call is done rather than from inside the teardown. */ ++ ares_deferred_cb_enter(channel); ++ ++ /* Bumped before anything below can reach an application callback, so a ++ * nested reconfiguration is distinguishable from our own work. */ ++ channel->servers_generation++; ++ + /* NOTE: a NULL or zero entry server list is considered valid due to + * real-world people needing support for this for their test harnesses + */ +@@ -843,6 +870,7 @@ ares_status_t ares_servers_update(ares_channel_t *channel, + status = ARES_SUCCESS; + + done: ++ ares_deferred_cb_leave(channel); + return status; + } + +diff --git a/test/ares-test-mock.cc b/test/ares-test-mock.cc +index c0c0279abb..2158c5a913 100644 +--- a/test/ares-test-mock.cc ++++ b/test/ares-test-mock.cc +@@ -31,6 +31,11 @@ + #include + #endif + ++#ifndef _WIN32 ++# include ++# include ++#endif ++ + #include + #include + +@@ -1914,6 +1919,7 @@ TEST_P(MockRetryDepthChannelTest, HighRetryNoStackOverflow) { + struct CancelInCbData { + ares_channel_t *channel; + bool done; ++ size_t cbs; + }; + + static void CancelChannelCallback(void *arg, ares_status_t status, +@@ -1925,10 +1931,1071 @@ static void CancelChannelCallback(void *arg, ares_status_t status, + (void)timeouts; + (void)dnsrec; + data->done = true; ++ data->cbs++; + /* Reentrant cancel from within the callback. Must not double-free. */ + ares_cancel(data->channel); + } + ++// ares_destroy() notifies each still-running query that the channel is going ++// away, and holds a pointer to the next one in its list while doing so. A ++// reentrant ares_cancel() from one of those callbacks frees every remaining ++// query -- including that cached next, which ares_destroy() then follows. ++// ++// ares_cancel() is immune to the same pattern because it swaps the list head ++// before walking it; ares_destroy() did not. Two queries are required: with ++// only one in flight there is no next to cache and nothing goes wrong. ++// tries=1 so a teardown ends the query outright instead of retrying it, which ++// is the precondition this family of bugs shares. ++class MockUDPSingleTryTest : public MockChannelOptsTest, ++ public ::testing::WithParamInterface { ++public: ++ MockUDPSingleTryTest() ++ : MockChannelOptsTest(1, GetParam(), false, false, FillOptions(&opts_), ++ ARES_OPT_TRIES) ++ { ++ } ++ ++ static struct ares_options *FillOptions(struct ares_options *opts) ++ { ++ memset(opts, 0, sizeof(struct ares_options)); ++ opts->tries = 1; ++ return opts; ++ } ++ ++private: ++ struct ares_options opts_; ++}; ++ ++// ares_cancel() and ares_destroy() free a query themselves rather than going ++// through end_query(). Both used to invoke the application callback while the ++// query was still in queries_by_qid, on conn->queries_to_conn and in ++// queries_by_timeout -- only all_queries was unlinked first. A reentrant ++// teardown from within that callback therefore still found the query, ended it ++// a second time, and freed it; the ares_free_query() that followed then ++// double-freed. One query in flight is enough. ++static void ReconfigureServersCallback(void *arg, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) { ++ CancelInCbData *data = static_cast(arg); ++ (void)status; ++ (void)timeouts; ++ (void)dnsrec; ++ data->done = true; ++ data->cbs++; ++ /* Frees every server absent from the new configuration, closing their ++ * connections -- which still hold the queries being torn down. */ ++ ares_set_servers_csv(data->channel, "127.0.0.1:53055"); ++} ++ ++// Reconfiguring the server list from a cancellation callback. ++TEST_P(MockUDPSingleTryTest, ReconfigureInCancelCallbackNoDoubleFree) { ++ CancelInCbData data; ++ data.channel = channel_; ++ data.done = false; ++ data.cbs = 0; ++ ++ QueryResult result; ++ /* Left unanswered, so both stay attached to the connection. */ ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, ReconfigureServersCallback, ++ &data, NULL)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_query_dnsrec(channel_, "www.example.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, QueryCallback, &result, NULL)); ++ ++ ares_cancel(channel_); ++ EXPECT_TRUE(data.done); ++ EXPECT_TRUE(result.done_); ++ /* Each lookup must be notified exactly once, not twice. */ ++ EXPECT_EQ((size_t)1, data.cbs); ++} ++ ++/* The replacement lookup's result outlives the callback that starts it. */ ++static QueryResult g_replacement_result; ++ ++static void NewQueryOnFailingWriteCallback(void *arg, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) { ++ /* ares_set_socket_functions() stores the pointer rather than copying it, so ++ * this must outlive the call. */ ++ static ares_socket_functions sock_funcs; ++ CancelInCbData *data = static_cast(arg); ++ (void)status; ++ (void)timeouts; ++ (void)dnsrec; ++ ++ data->cbs++; ++ ++ /* Only the first cancellation callback starts a replacement lookup. */ ++ if (data->done) { ++ return; ++ } ++ data->done = true; ++ ++ memset(&sock_funcs, 0, sizeof(sock_funcs)); ++ sock_funcs.asendv = LibraryTest::ares_sendv_fail; ++ ares_set_socket_functions(data->channel, &sock_funcs, NULL); ++ LibraryTest::SetFailSend(); ++ ++ ares_query_dnsrec(data->channel, "www.probe.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, QueryCallback, &g_replacement_result, ++ NULL); ++} ++ ++// No reconfiguration at all: the cancellation callback simply starts a ++// replacement lookup -- an ordinary retry pattern -- and that lookup's write ++// fails. ares_close_connection() then walks conn->queries_to_conn, which ++// still holds the queries ares_cancel() is in the middle of. Wider than the ++// case above: it needs nothing more than a connection error. ++TEST_P(MockUDPSingleTryTest, NewQueryInCancelCallbackConnErrorNoDoubleFree) { ++ CancelInCbData data; ++ data.channel = channel_; ++ data.done = false; ++ data.cbs = 0; ++ ++ g_replacement_result.done_ = false; ++ ++ QueryResult result; ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, NewQueryOnFailingWriteCallback, ++ &data, NULL)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_query_dnsrec(channel_, "www.example.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, QueryCallback, &result, NULL)); ++ ++ ares_cancel(channel_); ++ EXPECT_TRUE(data.done); ++ EXPECT_TRUE(result.done_); ++ /* Each lookup must be notified exactly once, not twice. */ ++ EXPECT_EQ((size_t)1, data.cbs); ++ /* Pins that the replacement lookup ran and its write failed, which is what ++ * drives the connection teardown this test is about. */ ++ EXPECT_TRUE(g_replacement_result.done_); ++} ++ ++// The same shape through ares_destroy() rather than ares_cancel(). Swapping ++// the all_queries head does not help here: the reentrant teardown reaches the ++// query through the connection, not through all_queries. ++TEST_P(MockUDPSingleTryTest, ReconfigureInDestroyCallbackNoDoubleFree) { ++ CancelInCbData data; ++ data.channel = channel_; ++ data.done = false; ++ data.cbs = 0; ++ ++ QueryResult result; ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, ReconfigureServersCallback, ++ &data, NULL)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_query_dnsrec(channel_, "www.example.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, QueryCallback, &result, NULL)); ++ ++ ares_destroy(channel_); ++ channel_ = nullptr; /* destroyed here, don't let the fixture repeat it */ ++ ++ EXPECT_TRUE(data.done); ++ EXPECT_TRUE(result.done_); ++ /* Each lookup must be notified exactly once, not twice. */ ++ EXPECT_EQ((size_t)1, data.cbs); ++} ++ ++// Once ares_destroy() has begun, a lookup started from a destruction callback ++// is refused rather than allocated into a channel being torn down -- and the ++// refusal still runs the caller's callback with ARES_EDESTRUCTION, so context ++// attached to `arg` can be reclaimed. ares_cancel() leaves sys_up true, so a ++// destruction callback is the only way to reach this. ++struct DestroyReentryData { ++ ares_channel_t *channel; ++ size_t outer_cbs; ++ size_t replacement_cbs; ++ ares_status_t replacement_status; ++}; ++ ++static void DestroyReplacementCallback(void *arg, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) { ++ DestroyReentryData *data = static_cast(arg); ++ (void)timeouts; ++ (void)dnsrec; ++ data->replacement_cbs++; ++ data->replacement_status = status; ++} ++ ++static void DestroyReentryCallback(void *arg, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) { ++ DestroyReentryData *data = static_cast(arg); ++ (void)status; ++ (void)timeouts; ++ (void)dnsrec; ++ data->outer_cbs++; ++ ares_query_dnsrec(data->channel, "www.example.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, DestroyReplacementCallback, data, NULL); ++} ++ ++TEST_F(LibraryTest, NewQueryInDestroyCallbackIsRefusedAndNotified) { ++ ares_channel_t *channel = nullptr; ++ struct ares_options opts; ++ int optmask = 0; ++ ++ memset(&opts, 0, sizeof(opts)); ++ opts.tries = 1; ++ optmask |= ARES_OPT_TRIES; ++ opts.flags = ARES_FLAG_NOSEARCH; ++ optmask |= ARES_OPT_FLAGS; ++ ++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&channel, &opts, optmask)); ++ // Nothing listens here; no traffic is needed. ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(channel, "127.0.0.1:53055")); ++ ++ DestroyReentryData data; ++ data.channel = channel; ++ data.outer_cbs = 0; ++ data.replacement_cbs = 0; ++ data.replacement_status = ARES_SUCCESS; ++ ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_query_dnsrec(channel, "www.google.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, DestroyReentryCallback, &data, ++ NULL)); ++ ++ ares_destroy(channel); ++ ++ EXPECT_EQ((size_t)1, data.outer_cbs); ++ // Refused -- but notified, so the caller can release whatever it attached. ++ EXPECT_EQ((size_t)1, data.replacement_cbs); ++ EXPECT_EQ(ARES_EDESTRUCTION, data.replacement_status); ++} ++ ++INSTANTIATE_TEST_SUITE_P(AddressFamilies, MockUDPSingleTryTest, ++ ::testing::ValuesIn(ares::test::families), ++ PrintFamily); ++ ++TEST_P(MockUDPChannelTest, CancelInDestroyCallbackNoUseAfterFree) { ++ CancelInCbData data; ++ data.channel = channel_; ++ data.done = false; ++ data.cbs = 0; ++ ++ /* Left unanswered, so both are still pending when the channel goes down. */ ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, CancelChannelCallback, &data, ++ NULL)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_query_dnsrec(channel_, "www.example.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, CancelChannelCallback, &data, ++ NULL)); ++ /* Without this the test can pass vacuously if a query failed to start. */ ++ EXPECT_EQ(2, ares_queue_active_queries(channel_)); ++ ++ ares_destroy(channel_); ++ channel_ = nullptr; /* destroyed here, don't let the fixture repeat it */ ++ ++ EXPECT_TRUE(data.done); ++ /* Every query must be notified exactly once. */ ++ EXPECT_EQ((size_t)2, data.cbs); ++} ++ ++// Fixture with tries=1 so the first failure ends the query outright instead of ++// retrying it -- that is what drives execution into end_query()'s synchronous ++// (requeue==NULL) branch. ++// The tests below use the MockUDPSingleTryTest fixture defined above: tries=1, ++// so the first failure ends the query outright instead of retrying it, which ++// is what drives execution into end_query()'s synchronous (requeue==NULL) ++// branch. ++// ++ ++// Connection-teardown route into the synchronous branch. A malformed reply ++// makes process_answer() return EBADRESP, so handle_conn_error() tears the ++// connection down and ares_close_connection() requeues its queries with a NULL ++// requeue; with tries=1 the query is ended right there. CVE-2026-33630 fixed ++// the deferred flush path only, so this one still double-freed. ++TEST_P(MockUDPSingleTryTest, CancelInCallbackConnTeardownNoDoubleFree) { ++ /* Too short to be a DNS header, so it fails to parse. */ ++ std::vector malformed = {0x00, 0x00, 0x00, 0x00}; ++ ON_CALL(server_, OnRequest("www.google.com", T_A)) ++ .WillByDefault(SetReplyData(&server_, malformed)); ++ ++ CancelInCbData data; ++ data.channel = channel_; ++ data.done = false; ++ data.cbs = 0; ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ CancelChannelCallback, &data, NULL); ++ Process(); ++ EXPECT_TRUE(data.done); ++} ++ ++// Server-removal route into the same synchronous branch, which the ++// connection-teardown test above does not cover. Reconfiguring the server list ++// destroys the servers that are gone, and ares_close_sockets() closes their ++// connections with a NULL requeue -- a second way to reach end_query() with the ++// query still linked. No Process() call is needed: the query is attached to a ++// connection by ares_query_dnsrec() itself, and nothing has replied to it. ++TEST_P(MockUDPSingleTryTest, CancelInCallbackServerRemovalNoDoubleFree) { ++ CancelInCbData data; ++ data.channel = channel_; ++ data.done = false; ++ data.cbs = 0; ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ CancelChannelCallback, &data, NULL); ++ ++ /* Drops the server the in-flight query is attached to. */ ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(channel_, "127.0.0.1:53055")); ++ EXPECT_TRUE(data.done); ++} ++ ++// ares_send_query_int() calls handle_conn_error() on a retryable write failure ++// and then keeps using its own query. That teardown requeues the *other* ++// queries on the connection, and with tries=1 they are ended outright; if one ++// of their callbacks reentrantly cancels the channel, this query is freed too ++// -- it is still linked in all_queries, having only joined ++// conn->queries_to_conn on the success path further down. Using it afterwards ++// is a use-after-free. ++// ++// The first query is left unanswered so it stays on the connection, then the ++// next write is made to fail with ECONNREFUSED so the second query takes the ++// error path while the first is still attached. ++// ++// Note this is masked on code that has not fixed the end_query() double-free: ++// that aborts inside handle_conn_error() before control returns here. ++TEST_P(MockUDPSingleTryTest, CancelInSiblingCallbackConnErrorNoUseAfterFree) { ++ CancelInCbData data; ++ data.channel = channel_; ++ data.done = false; ++ data.cbs = 0; ++ ++ /* No reply configured for this one, so it stays attached to the connection. */ ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ CancelChannelCallback, &data, NULL); ++ ++ ares_socket_functions sock_funcs; ++ memset(&sock_funcs, 0, sizeof(sock_funcs)); ++ sock_funcs.asendv = ares_sendv_fail; ++ ares_set_socket_functions(channel_, &sock_funcs, NULL); ++ LibraryTest::SetFailSend(); ++ ++ QueryResult result; ++ ares_query_dnsrec(channel_, "www.example.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ QueryCallback, &result, NULL); ++ ++ /* The write failure above tears the connection down, which ends the first ++ * query, whose callback cancels the channel and frees this one. */ ++ EXPECT_TRUE(data.done); ++ /* The sibling is cancelled from the first query's callback rather than ++ * requeued; pin that rather than leaving it unstated. */ ++ EXPECT_TRUE(result.done_); ++ EXPECT_EQ(ARES_ECANCELLED, result.status_); ++} ++ ++// The socket-state callback -- registered with ARES_OPT_SOCK_STATE_CB, the ++// usual way c-ares is driven from an event loop -- used to be dispatched from ++// the middle of opening a connection, and ares_open_connection() keeps using ++// that connection afterwards. A reentrant ares_cancel() from the callback ++// frees both the connection (through the idle sweep) and the in-flight query, ++// leaving the library using either. ++struct SockStateCancelData { ++ ares_channel_t *channel; ++ size_t calls; ++}; ++ ++static void SockStateCancelCallback(void *data, ares_socket_t socket_fd, ++ int readable, int writable) ++{ ++ SockStateCancelData *d = static_cast(data); ++ (void)socket_fd; ++ (void)readable; ++ (void)writable; ++ d->calls++; ++ // Reentrant cancel from the socket-state notification. ++ if (d->channel != nullptr) { ++ ares_cancel(d->channel); ++ } ++} ++ ++TEST_F(LibraryTest, CancelInSockStateCallbackNoUseAfterFree) { ++ SockStateCancelData data; ++ ares_channel_t *chan = nullptr; ++ struct ares_options opts; ++ int optmask = 0; ++ ++ data.channel = nullptr; ++ data.calls = 0; ++ ++ memset(&opts, 0, sizeof(opts)); ++ opts.sock_state_cb = SockStateCancelCallback; ++ opts.sock_state_cb_data = &data; ++ optmask = ARES_OPT_SOCK_STATE_CB; ++ ++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&chan, &opts, optmask)); ++ ASSERT_NE(nullptr, chan); ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055")); ++ ++ /* Armed only now, so channel setup itself does not cancel. */ ++ data.channel = chan; ++ ++ QueryResult result; ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ QueryCallback, &result, NULL); ++ ++ /* Opening the connection notifies, the notification cancels, and the ++ * library must still be able to finish -- and the lookup must actually be ++ * cancelled rather than the cancel quietly doing nothing. */ ++ EXPECT_GT(data.calls, (size_t)0); ++ EXPECT_TRUE(result.done_); ++ EXPECT_EQ(ARES_ECANCELLED, result.status_); ++ ++ data.channel = nullptr; /* don't cancel from teardown notifications */ ++ ares_destroy(chan); ++} ++ ++// Deferring the notification must not reorder it past the close of the ++// descriptor it names. An event loop is told "stop watching fd N"; if fd N is ++// already closed by then, the number can have been handed to something else -- ++// including to application code running from a deferred query callback -- and ++// the application ends up setting and clearing interest in a descriptor it now ++// owns for another purpose. ++// ++// The invariant is checked directly: while the callback naming the descriptor ++// runs, that descriptor must still be open. ++#ifndef _WIN32 ++struct SockStateCloseOrderData { ++ size_t closes_seen; ++ size_t closed_while_already_shut; ++}; ++ ++static void SockStateCloseOrderCallback(void *data, ares_socket_t socket_fd, ++ int readable, int writable) ++{ ++ SockStateCloseOrderData *d = static_cast(data); ++ if (readable || writable) { ++ return; ++ } ++ d->closes_seen++; ++ // F_GETFD on a closed descriptor fails with EBADF. c-ares must not have ++ // closed it yet at this point. ++ if (fcntl(static_cast(socket_fd), F_GETFD) == -1 && errno == EBADF) { ++ d->closed_while_already_shut++; ++ } ++} ++ ++TEST_F(LibraryTest, SockStateCloseIsReportedBeforeDescriptorCloses) { ++ SockStateCloseOrderData data; ++ ares_channel_t *chan = nullptr; ++ struct ares_options opts; ++ ++ data.closes_seen = 0; ++ data.closed_while_already_shut = 0; ++ ++ memset(&opts, 0, sizeof(opts)); ++ opts.sock_state_cb = SockStateCloseOrderCallback; ++ opts.sock_state_cb_data = &data; ++ ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_init_options(&chan, &opts, ARES_OPT_SOCK_STATE_CB)); ++ ASSERT_NE(nullptr, chan); ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055")); ++ ++ QueryResult result; ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ QueryCallback, &result, NULL); ++ ares_destroy(chan); ++ ++ EXPECT_GT(data.closes_seen, (size_t)0); ++ EXPECT_EQ((size_t)0, data.closed_while_already_shut) ++ << "the application was told to stop watching a descriptor c-ares had " ++ "already closed"; ++} ++#endif ++ ++// Reconfiguring the servers from an I/O hook frees the server and its ++// connection while the library is still holding both. Deferred reclamation is ++// what makes these safe: the objects are unlinked from every lookup structure ++// immediately, so nothing can find them, but their memory survives until the ++// outermost call unwinds. Without it these are heap-use-after-free in ++// ares_conn_connect() and handle_conn_error() respectively. ++// ++// This is the class behind CVE-2025-31498 and CVE-2025-62408 -- a connection ++// cleaned up while a caller further up the stack still held it. ++struct ReconfigureFromHookData { ++ ares_channel_t *channel; ++ bool done; ++ int status; ++}; ++ ++static int ReconfigureConfigureCallback(ares_socket_t fd, int type, void *data) ++{ ++ ReconfigureFromHookData *d = static_cast(data); ++ (void)fd; ++ (void)type; ++ // Frees the server this connection is being opened for. ++ ares_set_servers_csv(d->channel, "127.0.0.1:53056"); ++ return 0; ++} ++ ++static void ReconfigureFromHookCallback(void *arg, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) ++{ ++ ReconfigureFromHookData *d = static_cast(arg); ++ (void)timeouts; ++ (void)dnsrec; ++ d->done = true; ++ d->status = static_cast(status); ++} ++ ++TEST_F(LibraryTest, ReconfigureInConfigureHookNoUseAfterFree) { ++ ares_channel_t *chan = nullptr; ++ struct ares_options opts; ++ int optmask = 0; ++ ReconfigureFromHookData data; ++ ++ memset(&opts, 0, sizeof(opts)); ++ opts.tries = 1; ++ optmask |= ARES_OPT_TRIES; ++ opts.flags = ARES_FLAG_NOSEARCH; ++ optmask |= ARES_OPT_FLAGS; ++ ++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&chan, &opts, optmask)); ++ ASSERT_NE(nullptr, chan); ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055")); ++ ++ data.channel = chan; ++ data.done = false; ++ data.status = ARES_SUCCESS; ++ ares_set_socket_configure_callback(chan, ReconfigureConfigureCallback, &data); ++ ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ ReconfigureFromHookCallback, &data, NULL); ++ ++ // Must complete rather than be stranded -- every exit from the send path ++ // either enqueues the query or ends it. ++ EXPECT_TRUE(data.done); ++ EXPECT_EQ((size_t)0, ares_queue_active_queries(chan)); ++ ares_destroy(chan); ++} ++ ++// The second route to the same freed connection, and the one that drove the ++// change from suppressing the idle sweep to deferring the notification: ++// reconfiguring the servers from the socket-state callback destroys the server ++// and with it the connection ares_open_connection() is still using. Nothing ++// covered this route, so a regression in it would have gone unnoticed. ++struct SockStateReconfigureData { ++ ares_channel_t *channel; ++ size_t calls; ++}; ++ ++static void SockStateReconfigureCallback(void *data, ares_socket_t socket_fd, ++ int readable, int writable) ++{ ++ SockStateReconfigureData *d = ++ static_cast(data); ++ (void)socket_fd; ++ (void)readable; ++ (void)writable; ++ d->calls++; ++ if (d->channel != nullptr) { ++ // Destroys the server, and with it the connection being opened. ++ ares_set_servers_csv(d->channel, "127.0.0.1:53056"); ++ } ++} ++ ++TEST_F(LibraryTest, ReconfigureInSockStateCallbackNoUseAfterFree) { ++ SockStateReconfigureData data; ++ ares_channel_t *chan = nullptr; ++ struct ares_options opts; ++ ++ data.channel = nullptr; ++ data.calls = 0; ++ ++ memset(&opts, 0, sizeof(opts)); ++ opts.sock_state_cb = SockStateReconfigureCallback; ++ opts.sock_state_cb_data = &data; ++ ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_init_options(&chan, &opts, ARES_OPT_SOCK_STATE_CB)); ++ ASSERT_NE(nullptr, chan); ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055")); ++ ++ /* Armed only now, so channel setup itself does not reconfigure. */ ++ data.channel = chan; ++ ++ QueryResult result; ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ QueryCallback, &result, NULL); ++ ++ EXPECT_GT(data.calls, (size_t)0); ++ ++ data.channel = nullptr; /* don't reconfigure from teardown notifications */ ++ ares_destroy(chan); ++} ++ ++// Deferring the notifications must not lose them: every public entry point ++// that closes a socket still has to tell the application about it before it ++// returns, or an event loop is left polling a descriptor that c-ares closed. ++struct SockStateRecordData { ++ std::vector> events; /* fd, still-armed */ ++}; ++ ++static void SockStateRecordCallback(void *data, ares_socket_t socket_fd, ++ int readable, int writable) ++{ ++ SockStateRecordData *d = static_cast(data); ++ d->events.push_back(std::make_pair(socket_fd, readable || writable)); ++} ++ ++static bool SawClose(const SockStateRecordData &d) ++{ ++ for (size_t i = 0; i < d.events.size(); i++) { ++ if (!d.events[i].second) { ++ return true; ++ } ++ } ++ return false; ++} ++ ++class SockStateDeliveryTest : public LibraryTest { ++protected: ++ void OpenConnection(ares_channel_t **chan, SockStateRecordData *data, ++ QueryResult *result) ++ { ++ struct ares_options opts; ++ memset(&opts, 0, sizeof(opts)); ++ opts.sock_state_cb = SockStateRecordCallback; ++ opts.sock_state_cb_data = data; ++ ++ ASSERT_EQ(ARES_SUCCESS, ++ ares_init_options(chan, &opts, ARES_OPT_SOCK_STATE_CB)); ++ ASSERT_NE(nullptr, *chan); ++ /* TEST-NET-1, guaranteed not to answer, so the socket is still open when ++ * the call under test runs. */ ++ ASSERT_EQ(ARES_SUCCESS, ares_set_servers_csv(*chan, "192.0.2.1:53")); ++ ++ ares_query_dnsrec(*chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ QueryCallback, result, NULL); ++ ASSERT_FALSE(result->done_); ++ ASSERT_FALSE(data->events.empty()); ++ ASSERT_TRUE(data->events.back().second); /* opened, armed for read */ ++ data->events.clear(); ++ } ++}; ++ ++TEST_F(SockStateDeliveryTest, CancelReportsSocketClose) { ++ ares_channel_t *chan = nullptr; ++ SockStateRecordData data; ++ QueryResult result; ++ ++ OpenConnection(&chan, &data, &result); ++ ares_cancel(chan); ++ EXPECT_TRUE(SawClose(data)) << "ares_cancel() closed the socket without " ++ "telling the application"; ++ ares_destroy(chan); ++} ++ ++TEST_F(SockStateDeliveryTest, SetServersReportsSocketClose) { ++ ares_channel_t *chan = nullptr; ++ SockStateRecordData data; ++ QueryResult result; ++ ++ OpenConnection(&chan, &data, &result); ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "198.51.100.1:53")); ++ EXPECT_TRUE(SawClose(data)) << "ares_set_servers_csv() closed the socket " ++ "without telling the application"; ++ ares_destroy(chan); ++} ++ ++TEST_F(SockStateDeliveryTest, DestroyReportsSocketClose) { ++ ares_channel_t *chan = nullptr; ++ SockStateRecordData data; ++ QueryResult result; ++ ++ OpenConnection(&chan, &data, &result); ++ ares_destroy(chan); ++ EXPECT_TRUE(SawClose(data)) << "ares_destroy() closed the socket without " ++ "telling the application"; ++} ++ ++// The server-state callback is dispatched from the middle of processing, and ++// every caller keeps using its query afterwards. Nothing documents the ++// callback as non-reentrant, and the channel lock is recursive precisely so ++// API calls from callbacks are allowed -- so an application that cancels from ++// it left the library using a freed query. ++// ++// No hostile input is needed: an ordinary timeout reaches the same place. A ++// SERVFAIL is used here because it is deterministic in the harness. ++struct ServerStateCancelData { ++ ares_channel_t *channel; ++ int server_cb_calls; ++ bool query_done; ++}; ++ ++static void ServerStateCancelCallback(const char *server_string, ++ ares_bool_t success, int flags, ++ void *data) { ++ ServerStateCancelData *d = static_cast(data); ++ (void)server_string; ++ (void)success; ++ (void)flags; ++ d->server_cb_calls++; ++ // Reentrant cancel from the notification. ++ ares_cancel(d->channel); ++} ++ ++static void ServerStateQueryCallback(void *arg, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) { ++ ServerStateCancelData *d = static_cast(arg); ++ (void)status; ++ (void)timeouts; ++ (void)dnsrec; ++ d->query_done = true; ++} ++ ++// The advisory's headline claim is that no hostile input is needed, because an ++// ordinary timeout reaches the same place. The SERVFAIL test below does not ++// show that; this one does. ++class ServerStateTimeoutCancelTest ++ : public MockChannelOptsTest, ++ public ::testing::WithParamInterface { ++ public: ++ ServerStateTimeoutCancelTest() ++ : MockChannelOptsTest(1, GetParam(), false, false, FillOptions(&opts_), ++ ARES_OPT_TIMEOUTMS | ARES_OPT_TRIES) {} ++ static struct ares_options *FillOptions(struct ares_options *opts) { ++ memset(opts, 0, sizeof(struct ares_options)); ++ opts->timeout = 100; ++ opts->tries = 3; ++ return opts; ++ } ++ ++ private: ++ struct ares_options opts_; ++}; ++ ++TEST_P(ServerStateTimeoutCancelTest, CancelInServerStateCallbackOnTimeout) { ++ ServerStateCancelData data; ++ data.channel = channel_; ++ data.server_cb_calls = 0; ++ data.query_done = false; ++ ++ ares_set_server_state_callback(channel_, ServerStateCancelCallback, &data); ++ ++ // No reply configured, so the query times out and the notification comes ++ // from process_timeouts() rather than from a response. ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, ServerStateQueryCallback, &data, ++ NULL)); ++ Process(); ++ ++ EXPECT_GT(data.server_cb_calls, 0); ++ EXPECT_TRUE(data.query_done); ++} ++ ++INSTANTIATE_TEST_SUITE_P(AddressFamilies, ServerStateTimeoutCancelTest, ++ ::testing::ValuesIn(ares::test::families), ++ PrintFamily); ++ ++// Unregistering with a NULL callback discards whatever is still queued -- the ++// documented behaviour of deferring delivery, and the only way an application ++// can opt back out once notifications are in flight. ++struct ServerStateUnregisterData { ++ ares_channel_t *channel; ++ size_t server_cb_calls; ++ bool query_done; ++}; ++ ++static void ServerStateUnregisterCallback(const char *server_string, ++ ares_bool_t success, ++ int flags, void *user_data) ++{ ++ ServerStateUnregisterData *d = ++ static_cast(user_data); ++ (void)server_string; ++ (void)success; ++ (void)flags; ++ d->server_cb_calls++; ++ // Clear ourselves from inside the first notification. Any notification ++ // still queued behind this one must be dropped rather than delivered. ++ ares_set_server_state_callback(d->channel, NULL, NULL); ++} ++ ++static void ServerStateUnregisterQueryCallback(void *arg, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) ++{ ++ ServerStateUnregisterData *d = ++ static_cast(arg); ++ (void)status; ++ (void)timeouts; ++ (void)dnsrec; ++ d->query_done = true; ++} ++ ++TEST_P(ServerStateTimeoutCancelTest, UnregisterInCallbackDiscardsQueued) { ++ ServerStateUnregisterData data; ++ data.channel = channel_; ++ data.server_cb_calls = 0; ++ data.query_done = false; ++ ++ ares_set_server_state_callback(channel_, ServerStateUnregisterCallback, ++ &data); ++ ++ // No reply configured: the query times out on every try, so more than one ++ // notification is queued before the flush point is reached. ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, ++ ServerStateUnregisterQueryCallback, &data, NULL)); ++ Process(); ++ ++ EXPECT_EQ((size_t)1, data.server_cb_calls); ++ EXPECT_TRUE(data.query_done); ++} ++ ++TEST_P(MockUDPChannelTest, CancelInServerStateCallbackNoUseAfterFree) { ++ DNSPacket servfail; ++ servfail.set_response().set_aa().set_rcode(SERVFAIL) ++ .add_question(new DNSQuestion("www.google.com", T_A)); ++ ON_CALL(server_, OnRequest("www.google.com", T_A)) ++ .WillByDefault(SetReply(&server_, &servfail)); ++ ++ ServerStateCancelData data; ++ data.channel = channel_; ++ data.server_cb_calls = 0; ++ data.query_done = false; ++ ++ ares_set_server_state_callback(channel_, ServerStateCancelCallback, &data); ++ ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ ServerStateQueryCallback, &data, NULL); ++ Process(); ++ ++ EXPECT_GT(data.server_cb_calls, 0); ++ EXPECT_TRUE(data.query_done); ++} ++ ++// The deferred requeue list records the target server as a raw pointer, and ++// the drain never revalidated it -- although it does revalidate the query, by ++// qid, for exactly the same reason. Application callbacks run from inside that ++// drain, and a callback may legally reconfigure the servers, which frees the ++// ones no longer in the list. A later entry in the same drain then dispatches ++// through a freed ares_server_t. ++// ++// Two replies must be read in one batch: an ordinary answer whose callback ++// reconfigures, and a FORMERR carrying no OPT record, which is what makes ++// process_answer() queue a retry *to the same server* (the EDNS fallback -- ++// the only site that records a server pointer at all). ++struct ReconfigureInCbData { ++ ares_channel_t *channel; ++ bool done; ++}; ++ ++static void ReconfigureChannelCallback(void *arg, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) { ++ ReconfigureInCbData *data = static_cast(arg); ++ (void)status; ++ (void)timeouts; ++ (void)dnsrec; ++ data->done = true; ++ /* Frees every server absent from the new configuration. */ ++ ares_set_servers_csv(data->channel, "127.0.0.1:53055"); ++} ++ ++TEST_P(MockUDPChannelTest, ReconfigureInCallbackStaleRequeueServer) { ++ DNSPacket okrsp; ++ okrsp.set_response().set_aa() ++ .add_question(new DNSQuestion("www.google.com", T_A)) ++ .add_answer(new DNSARR("www.google.com", 100, {1, 2, 3, 4})); ++ ON_CALL(server_, OnRequest("www.google.com", T_A)) ++ .WillByDefault(SetReply(&server_, &okrsp)); ++ ++ /* FORMERR with no OPT record: the server looks like it does not understand ++ * EDNS, so the query is queued for retry to this same server. */ ++ DNSPacket formerr; ++ formerr.set_response().set_aa().set_rcode(FORMERR) ++ .add_question(new DNSQuestion("www.example.com", T_A)); ++ ON_CALL(server_, OnRequest("www.example.com", T_A)) ++ .WillByDefault(SetReply(&server_, &formerr)); ++ ++ ReconfigureInCbData data; ++ data.channel = channel_; ++ data.done = false; ++ ++ QueryResult second; ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ ReconfigureChannelCallback, &data, NULL); ++ ares_query_dnsrec(channel_, "www.example.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ QueryCallback, &second, NULL); ++ ++ /* Both replies have to be consumed in a single pass so they share one ++ * deferred-requeue scope -- that is what puts the ENDQUERY entry whose ++ * callback reconfigures ahead of the REQUEUE entry holding a server ++ * pointer. The usual Process() loop lets c-ares read between the two, so ++ * they never share a batch; answer both first, then read once. */ ++ for (int i = 0; i < 4; i++) { ++ std::set server_fds = fds(); ++ fd_set r; ++ struct timeval tv = {0, 20000}; ++ int nfds = 0; ++ FD_ZERO(&r); ++ for (ares_socket_t fd : server_fds) { ++ FD_SET(fd, &r); ++ if ((int)fd >= nfds) { ++ nfds = (int)fd + 1; ++ } ++ } ++ if (select(nfds, &r, nullptr, nullptr, &tv) <= 0) { ++ break; ++ } ++ for (ares_socket_t fd : server_fds) { ++ if (FD_ISSET(fd, &r)) { ++ ProcessFD(fd); ++ } ++ } ++ } ++ { ++ fd_set readers; ++ fd_set writers; ++ struct timeval tv = {0, 0}; ++ int nfds; ++ FD_ZERO(&readers); ++ FD_ZERO(&writers); ++ nfds = ares_fds(channel_, &readers, &writers); ++ select(nfds, &readers, &writers, nullptr, &tv); ++ ares_process(channel_, &readers, &writers); ++ } ++ ++ EXPECT_TRUE(data.done); ++ ++ /* With the fix the FORMERR query is correctly re-dispatched (to the newly ++ * configured, unreachable server) rather than going through a freed one, so ++ * it is still outstanding here. Cancel it so its callback runs while its ++ * result object is still in scope. */ ++ ares_cancel(channel_); ++ EXPECT_TRUE(second.done_); ++} ++ ++// ares_servers_remove_stale() destroys each stale server in turn, and that ++// reaches application callbacks (ares_destroy_server() -> ares_close_sockets() ++// -> ares_requeue_queries() -> end_query()). A callback that reconfigures the ++// servers again destroys the servers the outer loop has not visited yet, so a ++// cached "next" node points at freed memory. ++struct NestedReconfigureData { ++ ares_channel_t *channel; ++ bool nested; ++}; ++ ++static void NestedReconfigureCallback(void *arg, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) { ++ NestedReconfigureData *data = static_cast(arg); ++ (void)status; ++ (void)timeouts; ++ (void)dnsrec; ++ if (data->nested) { ++ return; ++ } ++ data->nested = true; ++ // Destroys the stale servers the outer removal loop has not reached yet. ++ ares_set_servers_csv(data->channel, ""); ++} ++ ++TEST_F(LibraryTest, NestedReconfigureInCallbackRemoveStale) { ++ ares_channel_t *channel = nullptr; ++ struct ares_options opts; ++ int optmask = 0; ++ ++ memset(&opts, 0, sizeof(opts)); ++ /* One try per server, so tearing them down exhausts the query's retries and ++ * runs its callback from inside the removal loop. */ ++ opts.tries = 1; ++ optmask |= ARES_OPT_TRIES; ++ opts.flags = ARES_FLAG_NOSEARCH; ++ optmask |= ARES_OPT_FLAGS; ++ ++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&channel, &opts, optmask)); ++ /* Three servers, so the loop still has entries after destroying the first. ++ * Nothing listens on these ports; no traffic is needed. */ ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_set_servers_csv(channel, "127.0.0.1:53101,127.0.0.1:53102," ++ "127.0.0.1:53103")); ++ ++ NestedReconfigureData data; ++ data.channel = channel; ++ data.nested = false; ++ ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_query_dnsrec(channel, "www.example.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, NestedReconfigureCallback, ++ &data, NULL)); ++ ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(channel, "")); ++ EXPECT_TRUE(data.nested); ++ ++ ares_destroy(channel); ++} ++ ++// The same nesting, but the nested reconfiguration *installs* a server rather ++// than clearing the list. Restarting the removal walk from the head then ++// re-judges that server against the outer call's list, decides it is stale and ++// deletes it -- so ares_set_servers_csv() returns success and leaves the ++// channel with no servers at all. Memory-safe and still wrong. ++static void NestedReplaceCallback(void *arg, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) { ++ NestedReconfigureData *data = static_cast(arg); ++ (void)status; ++ (void)timeouts; ++ (void)dnsrec; ++ if (data->nested) { ++ return; ++ } ++ data->nested = true; ++ // Installs a server the outer loop has never seen. ++ ares_set_servers_csv(data->channel, "127.0.0.1:53201"); ++} ++ ++TEST_F(LibraryTest, NestedReconfigureInCallbackKeepsNestedServers) { ++ ares_channel_t *channel = nullptr; ++ struct ares_options opts; ++ int optmask = 0; ++ ++ memset(&opts, 0, sizeof(opts)); ++ opts.tries = 1; ++ optmask |= ARES_OPT_TRIES; ++ opts.flags = ARES_FLAG_NOSEARCH; ++ optmask |= ARES_OPT_FLAGS; ++ ++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&channel, &opts, optmask)); ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(channel, "127.0.0.1:53101")); ++ ++ NestedReconfigureData data; ++ data.channel = channel; ++ data.nested = false; ++ ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_query_dnsrec(channel, "www.example.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, NestedReplaceCallback, &data, ++ NULL)); ++ ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(channel, "127.0.0.1:53301")); ++ EXPECT_TRUE(data.nested); ++ ++ // The nested call reconciled the whole list; what it installed must survive. ++ char *csv = ares_get_servers_csv(channel); ++ ASSERT_NE(nullptr, csv); ++ EXPECT_STREQ("127.0.0.1:53201", csv); ++ ares_free_string(csv); ++ ++ ares_destroy(channel); ++} ++ + TEST_P(MockUDPChannelTest, CancelInCallbackNoDoubleFree) { + DNSPacket reply; + reply.set_response().set_aa() +@@ -1940,6 +3007,7 @@ TEST_P(MockUDPChannelTest, CancelInCallbackNoDoubleFree) { + CancelInCbData data; + data.channel = channel_; + data.done = false; ++ data.cbs = 0; + ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, + CancelChannelCallback, &data, NULL); + Process(); diff --git a/meta-oe/recipes-support/c-ares/c-ares/0002-Deliver-deferred-socket-server-state-notifications.patch b/meta-oe/recipes-support/c-ares/c-ares/0002-Deliver-deferred-socket-server-state-notifications.patch new file mode 100644 index 0000000000..c34d3ab7c7 --- /dev/null +++ b/meta-oe/recipes-support/c-ares/c-ares/0002-Deliver-deferred-socket-server-state-notifications.patch @@ -0,0 +1,393 @@ +From f944c4718fd672c9c0befd65a340abb2ccfc1a31 Mon Sep 17 00:00:00 2001 +From: Brad House +Date: Sun, 18 Oct 2026 20:28:11 -0400 +Subject: [PATCH] Deliver deferred socket/server-state notifications only from + the outermost public call (#1340) +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Backport of f023a52a (#1340) to v1.34. + +The recent change that queues socket-state and server-state +notifications delivers them, and runs the deferred cleanup, only from +the outermost `ares_deferred_cb_leave()`. `ares_send_nolock()` brackets +`ares_send_query()` itself, but most public lookup functions never +opened a region of their own. When reached from `ares_getaddrinfo()`, +`ares_query_dnsrec()` and similar, the bracket inside +`ares_send_nolock()` was therefore the outermost one. Notifications were +then delivered from inside an internal call while the library was still +in the middle of the public call, and its callers were still using their +lookup state (the host query, the query id out-pointer, ...). A +server-state callback that reconfigures the servers, which +`ares_set_server_state_callback(3)` documents as allowed, could end that +lookup before the caller was done with it. + +This is a regression in unreleased code. No released version is +affected. + +The outermost region is now opened by the public entry points +themselves, under the channel lock: + +- `ares_send_dnsrec()` (also used by `ares_send()`) +- `ares_query_dnsrec()` (also used by `ares_query()`) +- `ares_search()`, `ares_search_dnsrec()` +- `ares_getaddrinfo()` (also used by `ares_gethostbyname()`) +- `ares_gethostbyaddr()`, `ares_getnameinfo()` +- `ares_process_pending_write()`: a failed flush closes the connection +and fails its queries over, and this function had no bracket at all. + +`ares_process_fds()` (and through it +`ares_process()`/`ares_process_fd()`), `ares_cancel()`, `ares_destroy()` +and the server configuration functions already had their own. The nested +bracket in `ares_send_nolock()` stays, because it keeps connections and +servers unlinked during the send readable until the send returns. +Internal sends made from query callbacks (search next domain, +getaddrinfo next lookup, requeue, server probes) already run inside the +processing bracket. + +The comments on `ares_deferred_cb_enter()` and the flush now state the +rule: the outermost region belongs to the public entry point, never to +an internal helper. + +The documented behaviour (notifications arrive before the outermost +c-ares call returns) does not change, so no man page changes. + +Two new `LibraryTest` cases in `test/ares-test-mock.cc`. The IPv6 server +cannot get a socket, so the first send fails over to the IPv4 server, +and a server-state callback then reconfigures the servers: + +- `ServerFailoverDuringGetAddrInfo`: the lookup completes cleanly. It +fails under ASAN without this change. +- `ServerFailoverDuringQuery`: the query id from `ares_query_dnsrec()` +is already reported by the time the query callback runs. It fails +without this change. + +The full non-live suite passes under ASAN/UBSAN and with +`-DCARES_WERROR=ON`. + +Signed-off-by: Brad House +Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/f944c4718fd672c9c0befd65a340abb2ccfc1a31] +GHSA: GHSA-wpr3-8q3r-4q8c, GHSA-97vq-4mxv-7vhm, GHSA-mw23-pfg6-2x9r, GHSA-rf6g-ww74-97qh, GHSA-v33j-65h4-4ch8, GHSA-pj7p-v3cw-hq66 +--- + src/lib/ares_conn.c | 4 +- + src/lib/ares_getaddrinfo.c | 5 ++ + src/lib/ares_gethostbyaddr.c | 5 ++ + src/lib/ares_getnameinfo.c | 5 ++ + src/lib/ares_private.h | 10 ++++ + src/lib/ares_process.c | 6 ++ + src/lib/ares_query.c | 5 ++ + src/lib/ares_search.c | 10 ++++ + src/lib/ares_send.c | 13 ++++- + test/ares-test-mock.cc | 106 +++++++++++++++++++++++++++++++++++ + 10 files changed, 166 insertions(+), 3 deletions(-) + +diff --git a/src/lib/ares_conn.c b/src/lib/ares_conn.c +index 78f57e7d10..4cc0d1871d 100644 +--- a/src/lib/ares_conn.c ++++ b/src/lib/ares_conn.c +@@ -94,7 +94,9 @@ static void ares_deferred_cb_flush(ares_channel_t *channel) + { + /* Only the outermost frame delivers: anything above us on the stack may + * still be holding the connection a reentrant call from one of these +- * callbacks could free. ++ * callbacks could free, or lookup state of its own that a callback could ++ * end. That is why the outermost frame belongs to the public entry point ++ * and never to an internal helper; see ares_deferred_cb_enter(). + * + * The dispatch below counts as a nesting level of its own. Without that, a + * callback that calls back into the library re-enters here through the +diff --git a/src/lib/ares_getaddrinfo.c b/src/lib/ares_getaddrinfo.c +index 6d9e21af4b..5d9ddb311e 100644 +--- a/src/lib/ares_getaddrinfo.c ++++ b/src/lib/ares_getaddrinfo.c +@@ -762,7 +762,12 @@ void ares_getaddrinfo(ares_channel_t *channel, const char *name, + return; + } + ares_channel_lock(channel); ++ /* Notifications raised along the way are delivered once this whole call ++ * has unwound, not from inside the internals it runs. See ++ * ares_deferred_cb_enter(). */ ++ ares_deferred_cb_enter(channel); + ares_getaddrinfo_int(channel, name, service, hints, callback, arg); ++ ares_deferred_cb_leave(channel); + ares_channel_unlock(channel); + } + +diff --git a/src/lib/ares_gethostbyaddr.c b/src/lib/ares_gethostbyaddr.c +index 69c509ab11..b314359331 100644 +--- a/src/lib/ares_gethostbyaddr.c ++++ b/src/lib/ares_gethostbyaddr.c +@@ -112,7 +112,12 @@ void ares_gethostbyaddr(ares_channel_t *channel, const void *addr, int addrlen, + return; + } + ares_channel_lock(channel); ++ /* Notifications raised along the way are delivered once this whole call ++ * has unwound, not from inside the internals it runs. See ++ * ares_deferred_cb_enter(). */ ++ ares_deferred_cb_enter(channel); + ares_gethostbyaddr_nolock(channel, addr, addrlen, family, callback, arg); ++ ares_deferred_cb_leave(channel); + ares_channel_unlock(channel); + } + +diff --git a/src/lib/ares_getnameinfo.c b/src/lib/ares_getnameinfo.c +index 0159354530..7365e9ed82 100644 +--- a/src/lib/ares_getnameinfo.c ++++ b/src/lib/ares_getnameinfo.c +@@ -194,7 +194,12 @@ void ares_getnameinfo(ares_channel_t *channel, const struct sockaddr *sa, + } + + ares_channel_lock(channel); ++ /* Notifications raised along the way are delivered once this whole call ++ * has unwound, not from inside the internals it runs. See ++ * ares_deferred_cb_enter(). */ ++ ares_deferred_cb_enter(channel); + ares_getnameinfo_int(channel, sa, salen, flags_int, callback, arg); ++ ares_deferred_cb_leave(channel); + ares_channel_unlock(channel); + } + +diff --git a/src/lib/ares_private.h b/src/lib/ares_private.h +index 0a1029e0f8..9610ba7dab 100644 +--- a/src/lib/ares_private.h ++++ b/src/lib/ares_private.h +@@ -676,6 +676,16 @@ void ares_server_reap(ares_server_t *server); + * Nesting is counted; queued notifications are delivered by the outermost + * leave. + * ++ * The outermost region must be opened by the public entry point itself ++ * (ares_send_dnsrec(), ares_query_dnsrec(), ares_search(), ares_getaddrinfo(), ++ * ares_process_fds(), ares_set_servers_*(), ...), with the channel lock ++ * held, around everything it does. Internal helpers such as ++ * ares_send_nolock() open nested regions of their own, but their callers ++ * often keep using lookup state afterwards -- a host or search query, a ++ * query id out-pointer -- that a callback reentering the library may end ++ * and free. If such a helper were the outermost region, its leave would ++ * run the callbacks while that state is still in use. ++ * + * \param[in] channel Initialized ares channel. + */ + void ares_deferred_cb_enter(ares_channel_t *channel); +diff --git a/src/lib/ares_process.c b/src/lib/ares_process.c +index 82f53610fb..1569408b1b 100644 +--- a/src/lib/ares_process.c ++++ b/src/lib/ares_process.c +@@ -490,6 +490,11 @@ void ares_process_pending_write(ares_channel_t *channel) + return; + } + ++ /* A failed flush closes the connection and fails its queries over, which ++ * notifies. Deliver once we are done walking the servers, and keep ++ * anything unlinked meanwhile readable until then. */ ++ ares_deferred_cb_enter(channel); ++ + /* Set as untriggerd before calling into ares_conn_flush(), this is + * because its possible ares_conn_flush() might cause additional data to + * be enqueued if there is some form of exception so it will need to recurse. +@@ -513,6 +518,7 @@ void ares_process_pending_write(ares_channel_t *channel) + } + } + ++ ares_deferred_cb_leave(channel); + ares_channel_unlock(channel); + } + +diff --git a/src/lib/ares_query.c b/src/lib/ares_query.c +index ca3b6a9b73..0cf7f70760 100644 +--- a/src/lib/ares_query.c ++++ b/src/lib/ares_query.c +@@ -125,7 +125,12 @@ ares_status_t ares_query_dnsrec(ares_channel_t *channel, const char *name, + } + + ares_channel_lock(channel); ++ /* Notifications raised along the way are delivered once this whole call ++ * has unwound, not from inside the internals it runs. See ++ * ares_deferred_cb_enter(). */ ++ ares_deferred_cb_enter(channel); + status = ares_query_nolock(channel, name, dnsclass, type, callback, arg, qid); ++ ares_deferred_cb_leave(channel); + ares_channel_unlock(channel); + return status; + } +diff --git a/src/lib/ares_search.c b/src/lib/ares_search.c +index c605caf42c..ebc3d91e20 100644 +--- a/src/lib/ares_search.c ++++ b/src/lib/ares_search.c +@@ -463,7 +463,12 @@ void ares_search(ares_channel_t *channel, const char *name, int dnsclass, + } + + ares_channel_lock(channel); ++ /* Notifications raised along the way are delivered once this whole call ++ * has unwound, not from inside the internals it runs. See ++ * ares_deferred_cb_enter(). */ ++ ares_deferred_cb_enter(channel); + ares_search_int(channel, dnsrec, ares_dnsrec_convert_cb, carg); ++ ares_deferred_cb_leave(channel); + ares_channel_unlock(channel); + + ares_dns_record_destroy(dnsrec); +@@ -481,7 +486,12 @@ ares_status_t ares_search_dnsrec(ares_channel_t *channel, + } + + ares_channel_lock(channel); ++ /* Notifications raised along the way are delivered once this whole call ++ * has unwound, not from inside the internals it runs. See ++ * ares_deferred_cb_enter(). */ ++ ares_deferred_cb_enter(channel); + status = ares_search_int(channel, dnsrec, callback, arg); ++ ares_deferred_cb_leave(channel); + ares_channel_unlock(channel); + + return status; +diff --git a/src/lib/ares_send.c b/src/lib/ares_send.c +index 2e0482bf19..dd4a28544b 100644 +--- a/src/lib/ares_send.c ++++ b/src/lib/ares_send.c +@@ -246,8 +246,12 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server, + /* Perform the first query action. */ + + /* Sending opens and writes to connections and can mark a server down, both +- * of which notify. Deliver those once we are done with the connection and +- * the server, not part-way through. */ ++ * of which notify. This bracket keeps any connection or server unlinked ++ * during the send readable until it returns. It is never the outermost ++ * one: every public entry point that can get here, and query processing, ++ * holds its own, so delivery waits until the caller -- which may still be ++ * holding its own lookup state, as ares_getaddrinfo() does -- has unwound ++ * too. */ + ares_deferred_cb_enter(channel); + status = ares_send_query(server, query, &now); + ares_deferred_cb_leave(channel); +@@ -271,9 +275,14 @@ ares_status_t ares_send_dnsrec(ares_channel_t *channel, + } + + ares_channel_lock(channel); ++ /* Notifications raised along the way are delivered once this whole call ++ * has unwound, not from inside the internals it runs. See ++ * ares_deferred_cb_enter(). */ ++ ares_deferred_cb_enter(channel); + + status = ares_send_nolock(channel, NULL, 0, dnsrec, callback, arg, qid); + ++ ares_deferred_cb_leave(channel); + ares_channel_unlock(channel); + + return status; +diff --git a/test/ares-test-mock.cc b/test/ares-test-mock.cc +index 2158c5a913..b848c02434 100644 +--- a/test/ares-test-mock.cc ++++ b/test/ares-test-mock.cc +@@ -2533,6 +2533,112 @@ TEST_F(LibraryTest, ReconfigureInSockStateCallbackNoUseAfterFree) { + data.channel = nullptr; /* don't reconfigure from teardown notifications */ + ares_destroy(chan); + } ++// Server-state notifications raised while a public call is issuing its first ++// request must not be delivered until that whole call has unwound. A ++// failover handler that reconfigures the servers ends the in-flight request, ++// and with it the state the issuing call still has to finish with. The IPv6 ++// server cannot get a socket, so the first send fails over to the IPv4 one ++// and queues a failure notification for the handler below. ++static ares_socket_t FailoverNoIPv6Socket(int af, int type, int protocol, ++ void *user_data) ++{ ++ (void)user_data; ++ if (af == AF_INET6) { ++ return ARES_SOCKET_BAD; ++ } ++ return socket(af, type, protocol); ++} ++ ++static void FailoverOnServerDown(const char *server_string, ares_bool_t success, ++ int flags, void *data) ++{ ++ (void)server_string; ++ (void)flags; ++ if (!success) { ++ ares_set_servers_csv(static_cast(data), ++ "127.0.0.1:53063"); ++ } ++} ++ ++static ares_channel_t *FailoverChannel(ares_socket_functions *funcs) ++{ ++ ares_channel_t *chan = nullptr; ++ struct ares_options opts; ++ ++ memset(&opts, 0, sizeof(opts)); ++ opts.tries = 1; ++ opts.flags = ARES_FLAG_NOSEARCH; ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_init_options(&chan, &opts, ARES_OPT_TRIES | ARES_OPT_FLAGS)); ++ if (chan == nullptr) { ++ return nullptr; ++ } ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_set_servers_csv(chan, "[::1]:53061,127.0.0.1:53062")); ++ ares_set_server_state_callback(chan, FailoverOnServerDown, chan); ++ ++ memset(funcs, 0, sizeof(*funcs)); ++ funcs->asocket = FailoverNoIPv6Socket; ++ ares_set_socket_functions(chan, funcs, NULL); ++ return chan; ++} ++ ++TEST_F(LibraryTest, ServerFailoverDuringGetAddrInfo) { ++ ares_socket_functions funcs; ++ struct ares_addrinfo_hints hints; ++ AddrInfoResult result; ++ ares_channel_t *chan = FailoverChannel(&funcs); ++ ASSERT_NE(nullptr, chan); ++ ++ memset(&hints, 0, sizeof(hints)); ++ hints.ai_family = AF_INET; ++ ares_getaddrinfo(chan, "www.google.com", NULL, &hints, AddrInfoCallback, ++ &result); ++ ++ ares_cancel(chan); ++ EXPECT_TRUE(result.done_); ++ ares_destroy(chan); ++} ++ ++// Same, through ares_query_dnsrec(): the query id must already have been ++// reported to the caller by the time the query can complete. ++struct FailoverQueryData { ++ unsigned short qid; ++ unsigned short qid_at_callback; ++ bool done; ++}; ++ ++static void FailoverQueryCallback(void *data, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) ++{ ++ FailoverQueryData *d = static_cast(data); ++ (void)status; ++ (void)timeouts; ++ (void)dnsrec; ++ d->qid_at_callback = d->qid; ++ d->done = true; ++} ++ ++TEST_F(LibraryTest, ServerFailoverDuringQuery) { ++ ares_socket_functions funcs; ++ FailoverQueryData data; ++ ares_channel_t *chan = FailoverChannel(&funcs); ++ ASSERT_NE(nullptr, chan); ++ ++ data.qid = 0; ++ data.qid_at_callback = 0; ++ data.done = false; ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, FailoverQueryCallback, &data, ++ &data.qid)); ++ ++ EXPECT_TRUE(data.done); ++ EXPECT_EQ(data.qid, data.qid_at_callback); ++ ares_destroy(chan); ++} ++ + + // Deferring the notifications must not lose them: every public entry point + // that closes a socket still has to tell the application about it before it diff --git a/meta-oe/recipes-support/c-ares/c-ares/0003-ares_qcache-hand-callbacks-their-own-copy.patch b/meta-oe/recipes-support/c-ares/c-ares/0003-ares_qcache-hand-callbacks-their-own-copy.patch new file mode 100644 index 0000000000..02039e92e0 --- /dev/null +++ b/meta-oe/recipes-support/c-ares/c-ares/0003-ares_qcache-hand-callbacks-their-own-copy.patch @@ -0,0 +1,1054 @@ +From a21160045f9d7039225fa285be7cb1b02173a3a5 Mon Sep 17 00:00:00 2001 +From: Brad House +Date: Sun, 18 Oct 2026 22:12:09 -0400 +Subject: [PATCH] [Backport v1.34] ares_qcache: hand callbacks their own copy + of a cached answer (#1339) +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Backport of 31e2f51e8715d418fa8272a6c3a1ee651917fec5 (`ares_qcache: hand +callbacks their own copy of a cached answer`) to `v1.34`. See that +commit for the full description. + +**Conflicts:** +- `ares_private.h`: alignment only; formatted with `v1.34`'s +`.clang-format`. +- `test/ares-test-internal.cc`: context only — on `main` the new +`QcacheKeyDistinguishesQuestions` test follows the IDNA/punycode tests +(#1031), which are not on `v1.34`, so it is placed after the URI test +instead. + +**Test fixes from #1334:** carries the part of #1334 that applies to the +tests this introduces — `ReentrantFlushInCallbackNoUseAfterFree` +reconfigures to `127.0.0.1:53055` instead of `127.0.0.55` (only routable +on Linux), and `UnknownQueryTypesDoNotShareCacheEntries` drops +`static_cast`, which does not compile on OpenBSD. + +Test file contents match `main`. Independent of the dd62bdfc backport +(#1338); applies cleanly with or without it. + +The full non-live suite passes 650/650 under ASAN+UBSAN and with +`-DCARES_WERROR=ON` on macOS. `ReentrantFlushInCallbackNoUseAfterFree` +is a heap-use-after-free in `ares_dns_record_rr_cnt()` on `v1.34` +without this change, and passes with it. + +Signed-off-by: Brad House +Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/a21160045f9d7039225fa285be7cb1b02173a3a5] +GHSA: GHSA-grv7-fq5q-9vfc, GHSA-wrgc-prmw-27xh +--- + docs/ares_init_options.3 | 11 +- + src/lib/ares_private.h | 44 +++- + src/lib/ares_process.c | 1 + + src/lib/ares_qcache.c | 212 ++++++++++++++++--- + src/lib/ares_send.c | 47 ++++- + test/ares-test-internal.cc | 54 +++++ + test/ares-test-mock.cc | 419 +++++++++++++++++++++++++++++++++++++ + 7 files changed, 743 insertions(+), 45 deletions(-) + +diff --git a/docs/ares_init_options.3 b/docs/ares_init_options.3 +index e6f6ee8ba6..1ce7fb8e30 100644 +--- a/docs/ares_init_options.3 ++++ b/docs/ares_init_options.3 +@@ -324,7 +324,16 @@ with the maximum number of seconds a query result may be cached which will + override a larger TTL in the response message. This must be a non-zero value + otherwise the cache will be disabled. Choose a reasonable value for your + application such as 300 (5 minutes) or 3600 (1 hour). The query cache is +-automatically flushed if a server configuration change is made. ++automatically flushed if a server configuration change is made. As of c-ares ++1.35.0, and c-ares 1.34.9 on the 1.34 branch, a cached answer reports its ++remaining time to live rather than the ++original value received from the server, so TTLs returned on a cache hit ++decrease as the entry ages. Two lookups share a cached answer only if their ++EDNS state matches: the version, the flag bits including DNSSEC OK, and every ++EDNS option other than the DNS cookie and the advertised UDP payload size, ++which are both ignored. Options are compared in the order the application ++added them. An application that attaches its own options and varies them ++between otherwise identical lookups gets a separate cache entry for each. + .br + .TP 18 + .B ARES_OPT_EVENT_THREAD +diff --git a/src/lib/ares_private.h b/src/lib/ares_private.h +index 9610ba7dab..dd06d303b8 100644 +--- a/src/lib/ares_private.h ++++ b/src/lib/ares_private.h +@@ -153,6 +153,9 @@ struct ares_query { + ares_timeval_t ts; /*!< Timestamp query was sent */ + ares_timeval_t timeout; + ares_channel_t *channel; ++ /*! Query cache key, derived from the caller's request before the send path ++ * can mutate query->query. NULL when the cache is disabled. */ ++ char *qcache_key; + + /* + * Node object for each list entry the query belongs to in order to +@@ -718,14 +721,47 @@ ares_status_t ares_qcache_create(ares_rand_state *rand_state, + unsigned int max_ttl, + ares_qcache_t **cache_out); + void ares_qcache_flush(ares_qcache_t *cache); ++/*! Derive the query cache key for a request. Caller owns the result. ++ * ++ * \param[in] dnsrec Request to derive the key from. ++ * \return allocated key, or NULL on failure. ++ */ ++char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec); ++ ++/*! Insert a response into the query cache. ++ * ++ * \param[in] channel Initialized channel object. ++ * \param[in] now Current timestamp. ++ * \param[in] query Query the response answers. Its cache key, derived ++ * when the query was created, becomes the entry key; a ++ * NULL key means caching is switched off. ++ * \param[in] dnsrec Response to cache. Duplicated internally; the caller ++ * retains ownership. ++ * \return ARES_SUCCESS if cached, ARES_ENOTIMP if caching is off or the ++ * response is not cacheable, otherwise another status. ++ */ + ares_status_t ares_qcache_insert(ares_channel_t *channel, + const ares_timeval_t *now, + const ares_query_t *query, + const ares_dns_record_t *dnsrec); +-ares_status_t ares_qcache_fetch(ares_channel_t *channel, +- const ares_timeval_t *now, +- const ares_dns_record_t *dnsrec, +- const ares_dns_record_t **dnsrec_resp); ++/*! Fetch a cached answer for a request. ++ * ++ * \param[in] channel Initialized channel object. ++ * \param[in] now Current timestamp. ++ * \param[in] key Cache key for the request, as produced by ++ * ares_qcache_calc_key(). Owned by the caller. ++ * \param[out] dnsrec_resp On ARES_SUCCESS, the cached answer, owned by the ++ * caller and destroyed with ++ * ares_dns_record_destroy(). Set to NULL on any ++ * other status, except ARES_EFORMERR, which is ++ * returned by the argument check before this is ++ * touched. ++ * \return ARES_SUCCESS on a hit, ARES_ENOTFOUND on a miss, ARES_EFORMERR on ++ * invalid arguments. ++ */ ++ares_status_t ares_qcache_fetch(ares_channel_t *channel, ++ const ares_timeval_t *now, const char *key, ++ ares_dns_record_t **dnsrec_resp); + + void ares_metrics_record(const ares_query_t *query, ares_server_t *server, + ares_status_t status, const ares_dns_record_t *dnsrec); +diff --git a/src/lib/ares_process.c b/src/lib/ares_process.c +index 1569408b1b..88536704ad 100644 +--- a/src/lib/ares_process.c ++++ b/src/lib/ares_process.c +@@ -1859,6 +1859,7 @@ void ares_free_query(ares_query_t *query) + query->arg = NULL; + /* Deallocate the memory associated with the query */ + ares_dns_record_destroy(query->query); ++ ares_free(query->qcache_key); + + ares_free(query); + } +diff --git a/src/lib/ares_qcache.c b/src/lib/ares_qcache.c +index ad3bc83505..f48669b56c 100644 +--- a/src/lib/ares_qcache.c ++++ b/src/lib/ares_qcache.c +@@ -38,7 +38,7 @@ typedef struct { + time_t insert_ts; + } ares_qcache_entry_t; + +-static char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec) ++char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec) + { + ares_buf_t *buf = ares_buf_create(); + size_t i; +@@ -49,7 +49,22 @@ static char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec) + return NULL; /* LCOV_EXCL_LINE: DefensiveCoding */ + } + +- /* Format is OPCODE|FLAGS[|QTYPE1|QCLASS1|QNAME1]... */ ++ /* Format is ++ * OPCODE|FLAGS[|EDNS|VER|FLAGS[|ID:HEX]...]|QDCOUNT[|TYPE|CLASS|LEN:QNAME]... ++ * ++ * The EDNS section matters: an answer fetched under one set of EDNS options ++ * is not interchangeable with one fetched under another. A request with no ++ * OPT record appends nothing; note that EDNS is on by default, so ordinary ++ * lookups do carry one and their keys did change with this. ++ * ++ * Everything a caller does not control is emitted before the questions, so ++ * the names are always last. A name reaches the key unescaped, so anything ++ * keyed after it could otherwise be imitated by a name containing that same ++ * text, giving two different requests one key. The question count is part ++ * of that: without it, a request with two questions and a request with one ++ * whose name spells out the second produce identical keys. Each name is ++ * also length-prefixed, so adjacent names cannot be made to run together ++ * even when the question counts match. */ + + status = ares_buf_append_str( + buf, ares_dns_opcode_tostr(ares_dns_record_get_opcode(dnsrec))); +@@ -63,7 +78,11 @@ static char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec) + } + + flags = ares_dns_record_get_flags(dnsrec); +- /* Only care about RD and CD */ ++ /* RD, CD and AD. AD is here because RFC 6840 section 5.7 defines it in a ++ * request as a signal that the requester wants the AD bit evaluated in the ++ * response, and section 5.8 says a validating resolver should only set AD ++ * in a response when the request carried DO or AD -- so an answer fetched ++ * without it can legitimately differ from one fetched with it. */ + if (flags & ARES_FLAG_RD) { + status = ares_buf_append_str(buf, "rd"); + if (status != ARES_SUCCESS) { +@@ -76,6 +95,95 @@ static char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec) + goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ + } + } ++ if (flags & ARES_FLAG_AD) { ++ status = ares_buf_append_str(buf, "ad"); ++ if (status != ARES_SUCCESS) { ++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ } ++ ++ /* EDNS state. Skipped entirely when the request carries no OPT record. */ ++ { ++ const ares_dns_rr_t *opt = ares_dns_get_opt_rr_const(dnsrec); ++ ++ if (opt != NULL) { ++ size_t opt_cnt = ares_dns_rr_get_opt_cnt(opt, ARES_RR_OPT_OPTIONS); ++ size_t j; ++ ++ status = ares_buf_append_str(buf, "|EDNS|"); ++ if (status != ARES_SUCCESS) { ++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ status = ares_buf_append_num_hex( ++ buf, ares_dns_rr_get_u8(opt, ARES_RR_OPT_VERSION), 0); ++ if (status != ARES_SUCCESS) { ++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ status = ares_buf_append_byte(buf, '|'); ++ if (status != ARES_SUCCESS) { ++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ /* Carries the DO bit, so a DNSSEC-aware request cannot be served an ++ * answer that was fetched without it. */ ++ status = ares_buf_append_num_hex( ++ buf, ares_dns_rr_get_u16(opt, ARES_RR_OPT_FLAGS), 0); ++ if (status != ARES_SUCCESS) { ++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ ++ /* The advertised UDP payload size is deliberately excluded: it ++ * constrains how a response is transported, not what it says. A server ++ * that cannot fit the additional section may omit it without setting ++ * the TC bit (RFC 2181 section 9), so two sizes can produce answers ++ * that differ outside the answer section; that is accepted here. */ ++ for (j = 0; j < opt_cnt; j++) { ++ const unsigned char *val = NULL; ++ size_t val_len = 0; ++ unsigned short optid = ++ ares_dns_rr_get_opt(opt, ARES_RR_OPT_OPTIONS, j, &val, &val_len); ++ ++ /* DNS cookies are per-server transport state and say nothing about ++ * the content of an answer. A cookie c-ares adds never reaches here ++ * -- ares_cookie_apply() writes to query->query, after this key has ++ * been derived -- so this only ever skips one the caller supplied. */ ++ if (optid == ARES_OPT_PARAM_COOKIE) { ++ continue; ++ } ++ ++ status = ares_buf_append_byte(buf, '|'); ++ if (status != ARES_SUCCESS) { ++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ status = ares_buf_append_num_hex(buf, optid, 0); ++ if (status != ARES_SUCCESS) { ++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ status = ares_buf_append_byte(buf, ':'); ++ if (status != ARES_SUCCESS) { ++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ if (val != NULL) { ++ size_t k; ++ for (k = 0; k < val_len; k++) { ++ status = ares_buf_append_num_hex(buf, val[k], 2); ++ if (status != ARES_SUCCESS) { ++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ } ++ } ++ } ++ } ++ } ++ ++ status = ares_buf_append_byte(buf, '|'); ++ if (status != ARES_SUCCESS) { ++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ ++ status = ares_buf_append_num_dec(buf, ares_dns_record_query_cnt(dnsrec), 0); ++ if (status != ARES_SUCCESS) { ++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } + + for (i = 0; i < ares_dns_record_query_cnt(dnsrec); i++) { + const char *name; +@@ -93,7 +201,13 @@ static char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec) + goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ + } + +- status = ares_buf_append_str(buf, ares_dns_rec_type_tostr(qtype)); ++ /* Numeric, not the mnemonic: ares_dns_rec_type_tostr() returns "UNKNOWN" ++ * for every type outside its table, and ares_dns_record_query_add() does ++ * not validate the type, so any 16-bit value reaches here through the ++ * ordinary public API. Two such lookups -- LOC and DNAME, say -- would ++ * otherwise key identically and be answered with each other's records. ++ * The key only has to be injective, not readable. */ ++ status = ares_buf_append_num_dec(buf, (size_t)qtype, 0); + if (status != ARES_SUCCESS) { + goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ + } +@@ -103,7 +217,10 @@ static char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec) + goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ + } + +- status = ares_buf_append_str(buf, ares_dns_class_tostr(qclass)); ++ /* Numeric for the same reason. ares_dns_record_query_add() does reject ++ * classes outside its list today, so the mnemonic is safe -- but the key ++ * should not depend on that validation staying where it is. */ ++ status = ares_buf_append_num_dec(buf, (size_t)qclass, 0); + if (status != ARES_SUCCESS) { + goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ + } +@@ -121,6 +238,21 @@ static char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec) + name_len--; + } + ++ /* Length-prefix the name so it is self-delimiting. The question count ++ * above stops one question imitating two, but with the counts equal the ++ * boundary between adjacent names is still guessable, since names reach ++ * the key unescaped separated only by '|'. A length makes each name ++ * unambiguous for any question count. */ ++ status = ares_buf_append_num_dec(buf, name_len, 0); ++ if (status != ARES_SUCCESS) { ++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ ++ status = ares_buf_append_byte(buf, ':'); ++ if (status != ARES_SUCCESS) { ++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ + if (name_len > 0) { + status = ares_buf_append(buf, (const unsigned char *)name, name_len); + if (status != ARES_SUCCESS) { +@@ -301,10 +433,10 @@ static unsigned int ares_qcache_soa_minimum(ares_dns_record_t *dnsrec) + } + + /* On success, takes ownership of dnsrec */ +-static ares_status_t ares_qcache_insert_int(ares_qcache_t *qcache, +- ares_dns_record_t *qresp, +- const ares_dns_record_t *qreq, +- const ares_timeval_t *now) ++static ares_status_t ares_qcache_insert_int(ares_qcache_t *qcache, ++ ares_dns_record_t *qresp, ++ const char *key, ++ const ares_timeval_t *now) + { + ares_qcache_entry_t *entry; + unsigned int ttl; +@@ -350,11 +482,11 @@ static ares_status_t ares_qcache_insert_int(ares_qcache_t *qcache, + entry->expire_ts = (time_t)now->sec + (time_t)ttl; + entry->insert_ts = (time_t)now->sec; + +- /* We can't guarantee the server responded with the same flags as the +- * request had, so we have to re-parse the request in order to generate the +- * key for caching, but we'll only do this once we know for sure we really +- * want to cache it */ +- entry->key = ares_qcache_calc_key(qreq); ++ /* The key was derived from the caller's request when the query was created. ++ * It must not be recomputed from query->query here: the EDNS fallback path ++ * strips the OPT record from that record before a successful retry, so a ++ * key derived from it would not match the one a later lookup computes. */ ++ entry->key = ares_strdup(key); + if (entry->key == NULL) { + goto fail; /* LCOV_EXCL_LINE: OutOfMemory */ + } +@@ -382,31 +514,25 @@ static ares_status_t ares_qcache_insert_int(ares_qcache_t *qcache, + /* LCOV_EXCL_STOP */ + } + +-ares_status_t ares_qcache_fetch(ares_channel_t *channel, +- const ares_timeval_t *now, +- const ares_dns_record_t *dnsrec, +- const ares_dns_record_t **dnsrec_resp) ++ares_status_t ares_qcache_fetch(ares_channel_t *channel, ++ const ares_timeval_t *now, const char *key, ++ ares_dns_record_t **dnsrec_resp) + { +- char *key = NULL; + ares_qcache_entry_t *entry; + ares_status_t status = ARES_SUCCESS; + +- if (channel == NULL || dnsrec == NULL || dnsrec_resp == NULL) { ++ if (channel == NULL || key == NULL || dnsrec_resp == NULL) { + return ARES_EFORMERR; + } + ++ *dnsrec_resp = NULL; ++ + if (channel->qcache == NULL) { + return ARES_ENOTFOUND; + } + + ares_qcache_expire(channel->qcache, now); + +- key = ares_qcache_calc_key(dnsrec); +- if (key == NULL) { +- status = ARES_ENOMEM; /* LCOV_EXCL_LINE: OutOfMemory */ +- goto done; /* LCOV_EXCL_LINE: OutOfMemory */ +- } +- + entry = ares_htable_strvp_get_direct(channel->qcache->cache, key); + if (entry == NULL) { + status = ARES_ENOTFOUND; +@@ -416,10 +542,24 @@ ares_status_t ares_qcache_fetch(ares_channel_t *channel, + ares_dns_record_ttl_decrement(entry->dnsrec, + (unsigned int)(now->sec - entry->insert_ts)); + +- *dnsrec_resp = entry->dnsrec; ++ /* Hand back a copy the caller owns rather than the cache's own record. ++ * This is passed straight into an application callback, and that callback ++ * is allowed to re-enter c-ares. Any lookup it starts runs the expiry ++ * reaper first, and changing the server list flushes the cache outright -- ++ * either would destroy this entry while the callback still held a pointer ++ * into it. Mirrors the ownership fix already made on the insert side. */ ++ status = ares_dns_record_duplicate_ex(dnsrec_resp, entry->dnsrec); ++ if (status != ARES_SUCCESS) { ++ /* Could not hand back a private copy. Report a miss so the lookup falls ++ * through to a real query rather than failing outright: duplication ++ * writes and re-parses the record, so it can fail for reasons other than ++ * memory exhaustion, and none of them are a reason to fail a lookup that ++ * would have gone to a server a moment earlier. */ ++ status = ARES_ENOTFOUND; /* LCOV_EXCL_LINE: UntestablePath */ ++ goto done; /* LCOV_EXCL_LINE: UntestablePath */ ++ } + + done: +- ares_free(key); + return status; + } + +@@ -428,13 +568,25 @@ ares_status_t ares_qcache_insert(ares_channel_t *channel, + const ares_query_t *query, + const ares_dns_record_t *dnsrec) + { +- ares_dns_record_t *dupdns = ares_dns_record_duplicate(dnsrec); ++ ares_dns_record_t *dupdns; + ares_status_t status; + ++ /* Checked before the duplicate below, which is a full write and re-parse: ++ * no key means caching is switched off, so the copy would be thrown away. ++ * ares_init_options() always creates the cache object -- it is disabled by ++ * a zero maximum TTL, not by a NULL pointer -- so this is the only place ++ * the distinction is visible here. */ ++ if (query->qcache_key == NULL) { ++ return ARES_ENOTIMP; ++ } ++ ++ dupdns = ares_dns_record_duplicate(dnsrec); + if (dupdns == NULL) { + return ARES_ENOMEM; + } +- status = ares_qcache_insert_int(channel->qcache, dupdns, query->query, now); ++ ++ status = ++ ares_qcache_insert_int(channel->qcache, dupdns, query->qcache_key, now); + if (status != ARES_SUCCESS) { + ares_dns_record_destroy(dupdns); + } +diff --git a/src/lib/ares_send.c b/src/lib/ares_send.c +index dd4a28544b..117745ce28 100644 +--- a/src/lib/ares_send.c ++++ b/src/lib/ares_send.c +@@ -111,11 +111,12 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server, + ares_callback_dnsrec callback, void *arg, + unsigned short *qid) + { +- ares_query_t *query; +- ares_timeval_t now; +- ares_status_t status; +- unsigned short id = generate_unique_qid(channel); +- const ares_dns_record_t *dnsrec_resp = NULL; ++ ares_query_t *query; ++ ares_timeval_t now; ++ ares_status_t status; ++ unsigned short id = generate_unique_qid(channel); ++ ares_dns_record_t *dnsrec_resp = NULL; ++ char *qcache_key = NULL; + + /* A channel being destroyed accepts no new queries. ares_destroy(3) + * documents that a callback must not add new requests to a channel being +@@ -145,13 +146,28 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server, + return ARES_ENOSERVER; + } + +- if (!(flags & ARES_SEND_FLAG_NOCACHE)) { ++ /* Derive the cache key once, from the caller's request, and only when the ++ * cache is actually on. The send path may mutate query->query afterwards ++ * -- the EDNS fallback strips its OPT record -- and a key derived from it ++ * later would not match. ares_init_options() always creates the cache ++ * object, so a zero maximum TTL is what "off" means. */ ++ if (channel->qcache_max_ttl > 0) { ++ qcache_key = ares_qcache_calc_key(dnsrec); ++ if (qcache_key == NULL) { ++ callback(arg, ARES_ENOMEM, 0, NULL); /* LCOV_EXCL_LINE: OutOfMemory */ ++ return ARES_ENOMEM; /* LCOV_EXCL_LINE: OutOfMemory */ ++ } ++ } ++ ++ if (qcache_key != NULL && !(flags & ARES_SEND_FLAG_NOCACHE)) { + /* Check query cache */ +- status = ares_qcache_fetch(channel, &now, dnsrec, &dnsrec_resp); ++ status = ares_qcache_fetch(channel, &now, qcache_key, &dnsrec_resp); + if (status != ARES_ENOTFOUND) { + /* ARES_SUCCESS means we retrieved the cache, anything else is a critical + * failure, all result in termination */ ++ ares_free(qcache_key); + callback(arg, status, 0, dnsrec_resp); ++ ares_dns_record_destroy(dnsrec_resp); + return status; + } + } +@@ -159,8 +175,11 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server, + /* Allocate space for query and allocated fields. */ + query = ares_malloc(sizeof(ares_query_t)); + if (!query) { +- callback(arg, ARES_ENOMEM, 0, NULL); /* LCOV_EXCL_LINE: OutOfMemory */ +- return ARES_ENOMEM; /* LCOV_EXCL_LINE: OutOfMemory */ ++ /* LCOV_EXCL_START: OutOfMemory */ ++ ares_free(qcache_key); ++ callback(arg, ARES_ENOMEM, 0, NULL); ++ return ARES_ENOMEM; ++ /* LCOV_EXCL_STOP */ + } + memset(query, 0, sizeof(*query)); + +@@ -173,6 +192,10 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server, + (channel->flags & ARES_FLAG_USEVC) ? ARES_TRUE : ARES_FALSE; + + /* Duplicate Query */ ++ /* The query adopts the key derived above; ares_free_query() releases it. */ ++ query->qcache_key = qcache_key; ++ qcache_key = NULL; ++ + status = ares_dns_record_duplicate_ex(&query->query, dnsrec); + if (status != ARES_SUCCESS) { + /* Sometimes we might get a EBADRESP response from duplicate due to +@@ -180,7 +203,11 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server, + if (status == ARES_EBADRESP) { + status = ARES_EBADQUERY; + } +- ares_free(query); ++ /* ares_free_query() rather than ares_free(): the query was zeroed above, ++ * so detaching finds every node NULL and the qid not yet registered, and ++ * it also releases qcache_key. Reachable without memory pressure -- a ++ * name that is not a valid hostname fails the duplicate. */ ++ ares_free_query(query); + callback(arg, status, 0, NULL); + return status; + } +diff --git a/test/ares-test-internal.cc b/test/ares-test-internal.cc +index 8881f3b7cc..5ba5d2b39b 100644 +--- a/test/ares-test-internal.cc ++++ b/test/ares-test-internal.cc +@@ -502,6 +502,60 @@ TEST_F(LibraryTest, URI) { + EXPECT_NE(ARES_SUCCESS, ares_uri_parse_buf(NULL, NULL)); + EXPECT_NE(ARES_SUCCESS, ares_uri_parse_buf(NULL, NULL)); + } ++ ++// The cache key must distinguish requests whose answers are not ++// interchangeable. Two shapes are easy to get wrong because names reach the ++// key unescaped: a request with two questions versus one whose name spells out ++// the second, and two requests with the same question count whose names can be ++// made to run together. Both are narrow to reach -- they need a hand-built ++// record with more than one question, which real servers reject -- but the key ++// asserts they are distinct, so pin it. ++TEST_F(LibraryTest, QcacheKeyDistinguishesQuestions) { ++ struct qcase { ++ const char *n1; ++ const char *n2; /* nullptr for a single-question record */ ++ }; ++ const qcase cases[] = { ++ { "one.example.net", "two.example.net" }, ++ { "one.example.net|A|IN|two.example.net", nullptr }, ++ { "one.example.net", "two.example.net|A|IN|three.example.net" }, ++ { "one.example.net|A|IN|two.example.net", "three.example.net" }, ++ }; ++ std::vector keys; ++ ++ for (size_t i = 0; i < sizeof(cases) / sizeof(cases[0]); i++) { ++ ares_dns_record_t *req = nullptr; ++ char *key = nullptr; ++ ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_create(&req, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY, ++ ARES_RCODE_NOERROR)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_query_add(req, cases[i].n1, ARES_REC_TYPE_A, ++ ARES_CLASS_IN)); ++ if (cases[i].n2 != nullptr) { ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_query_add(req, cases[i].n2, ARES_REC_TYPE_A, ++ ARES_CLASS_IN)); ++ } ++ ++ key = ares_qcache_calc_key(req); ++ ASSERT_NE(nullptr, key); ++ keys.push_back(std::string(key)); ++ ares_free_string(key); ++ ares_dns_record_destroy(req); ++ } ++ ++ /* Every one of these is a different request, so every key must differ. */ ++ for (size_t i = 0; i < keys.size(); i++) { ++ for (size_t j = i + 1; j < keys.size(); j++) { ++ EXPECT_NE(keys[i], keys[j]) ++ << "cache key collision between case " << i << " and case " << j ++ << ": " << keys[i]; ++ } ++ } ++} ++ + #endif /* !CARES_SYMBOL_HIDING */ + + TEST_F(LibraryTest, InetPtoN) { +diff --git a/test/ares-test-mock.cc b/test/ares-test-mock.cc +index b848c02434..4b409db7c3 100644 +--- a/test/ares-test-mock.cc ++++ b/test/ares-test-mock.cc +@@ -611,6 +611,425 @@ class CacheQueriesTest + struct ares_options opts_; + }; + ++// A cache hit used to hand the callback a pointer to the cache's own record. ++// That is fine only while the callback does nothing else -- but re-entering ++// c-ares from a callback is documented as allowed, and two ordinary things a ++// callback might do destroy the entry underneath it: changing the server list ++// flushes the whole cache, and starting another lookup runs the expiry reaper ++// first. The record must therefore be the caller's own copy. ++// ++// Here the callback changes the server list, which flushes the cache, and then ++// reads the record it was handed. ++struct QcacheReentrantCbData { ++ ares_channel_t *channel; ++ bool done; ++ size_t ancount; ++}; ++ ++static void QcacheReentrantCallback(void *arg, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) { ++ QcacheReentrantCbData *data = static_cast(arg); ++ (void)timeouts; ++ data->done = true; ++ if (status != ARES_SUCCESS || dnsrec == NULL) { ++ return; ++ } ++ /* Documented re-entry. Reconfiguring servers flushes the query cache. */ ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_set_servers_csv(data->channel, "127.0.0.1:53055")); ++ /* Still inside the callback, so this record must still be readable. */ ++ data->ancount = ares_dns_record_rr_cnt(dnsrec, ARES_SECTION_ANSWER); ++} ++ ++TEST_P(CacheQueriesTest, ReentrantFlushInCallbackNoUseAfterFree) { ++ DNSPacket rsp; ++ rsp.set_response().set_aa() ++ .add_question(new DNSQuestion("www.google.com", T_A)) ++ .add_answer(new DNSARR("www.google.com", 100, {2, 3, 4, 5})); ++ ON_CALL(server_, OnRequest("www.google.com", T_A)) ++ .WillByDefault(SetReply(&server_, &rsp)); ++ ++ /* Populate the cache. */ ++ QueryResult first; ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ QueryCallback, &first, NULL); ++ Process(); ++ EXPECT_TRUE(first.done_); ++ ++ /* Served from the cache, so the callback runs synchronously holding the ++ * record the cache handed it. */ ++ QcacheReentrantCbData data; ++ data.channel = channel_; ++ data.done = false; ++ data.ancount = 0; ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ QcacheReentrantCallback, &data, NULL); ++ ++ EXPECT_TRUE(data.done); ++ EXPECT_EQ((size_t)1, data.ancount); ++} ++ ++// The cache key covered the question and a couple of header flags but ignored ++// the request's OPT record entirely, so two requests differing only in their ++// EDNS options collided. An answer obtained under one set of options is not ++// interchangeable with one obtained under another -- most obviously, a request ++// with the DO bit set must not be handed an answer fetched without it. ++// ++// Both requests here ask the identical question; only the EDNS state differs, ++// so the server must see two of them. ++TEST_P(CacheQueriesTest, EdnsOptionsSeparateCacheEntries) { ++ DNSPacket rsp; ++ rsp.set_response().set_aa() ++ .add_question(new DNSQuestion("www.google.com", T_A)) ++ .add_answer(new DNSARR("www.google.com", 100, {2, 3, 4, 5})); ++ EXPECT_CALL(server_, OnRequest("www.google.com", T_A)) ++ .Times(2) ++ .WillRepeatedly(SetReply(&server_, &rsp)); ++ ++ /* First: no OPT record at all. */ ++ ares_dns_record_t *req1 = nullptr; ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_create(&req1, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY, ++ ARES_RCODE_NOERROR)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_query_add(req1, "www.google.com", ARES_REC_TYPE_A, ++ ARES_CLASS_IN)); ++ QueryResult r1; ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_send_dnsrec(channel_, req1, QueryCallback, &r1, nullptr)); ++ Process(); ++ EXPECT_TRUE(r1.done_); ++ EXPECT_EQ(ARES_SUCCESS, r1.status_); ++ ++ /* Second: same question, but carrying EDNS with the DO bit set. */ ++ ares_dns_record_t *req2 = nullptr; ++ ares_dns_rr_t *opt = nullptr; ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_create(&req2, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY, ++ ARES_RCODE_NOERROR)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_query_add(req2, "www.google.com", ARES_REC_TYPE_A, ++ ARES_CLASS_IN)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_rr_add(&opt, req2, ARES_SECTION_ADDITIONAL, "", ++ ARES_REC_TYPE_OPT, ARES_CLASS_IN, 0)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_rr_set_u16(opt, ARES_RR_OPT_UDP_SIZE, 1232)); ++ EXPECT_EQ(ARES_SUCCESS, ares_dns_rr_set_u8(opt, ARES_RR_OPT_VERSION, 0)); ++ /* DO */ ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_rr_set_u16(opt, ARES_RR_OPT_FLAGS, 0x8000)); ++ ++ QueryResult r2; ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_send_dnsrec(channel_, req2, QueryCallback, &r2, nullptr)); ++ Process(); ++ EXPECT_TRUE(r2.done_); ++ EXPECT_EQ(ARES_SUCCESS, r2.status_); ++ ++ ares_dns_record_destroy(req1); ++ ares_dns_record_destroy(req2); ++} ++ ++// The test above sets the DO bit, which lives in the OPT flags -- it never ++// reaches the loop that keys the individual EDNS options. That loop is what ++// separates two client subnets, so it needs its own coverage. ++// The mirror image of the tests above: two things are deliberately left out ++// of the cache key, and leaving them out is a security-relevant judgement -- ++// it declares that two requests differing only in these still have ++// interchangeable answers. Without a test, keying on either one later would ++// turn every request from an affected application into a permanent cache miss ++// and nothing would fail. ++ ++// A DNS cookie is per-server transport state and says nothing about the ++// content of an answer, so two requests differing only in their cookie share ++// an entry. The server must therefore be asked exactly once. ++// Two query types with no mnemonic in ares_dns_rec_type_tostr() both render as ++// "UNKNOWN", so keying the mnemonic made every such type share one entry -- a ++// lookup answered with a record of a type it never asked for. Any 16-bit ++// value reaches here through ares_query_dnsrec(); LOC (29) and DNAME (39) are ++// both real and both outside the table. ++TEST_P(CacheQueriesTest, UnknownQueryTypesDoNotShareCacheEntries) { ++ DNSPacket rsp29; ++ rsp29.set_response().set_aa().add_question( ++ new DNSQuestion("example.net", 29)); ++ DNSPacket rsp39; ++ rsp39.set_response().set_aa().add_question( ++ new DNSQuestion("example.net", 39)); ++ ++ // One call per type: neither may be served the other's answer. ++ EXPECT_CALL(server_, OnRequest("example.net", 29)) ++ .Times(1) ++ .WillRepeatedly(SetReply(&server_, &rsp29)); ++ EXPECT_CALL(server_, OnRequest("example.net", 39)) ++ .Times(1) ++ .WillRepeatedly(SetReply(&server_, &rsp39)); ++ ++ QueryResult r1; ++ ares_query_dnsrec(channel_, "example.net", ARES_CLASS_IN, ++ static_cast(29), QueryCallback, &r1, ++ nullptr); ++ Process(); ++ EXPECT_TRUE(r1.done_); ++ ++ QueryResult r2; ++ ares_query_dnsrec(channel_, "example.net", ARES_CLASS_IN, ++ static_cast(39), QueryCallback, &r2, ++ nullptr); ++ Process(); ++ EXPECT_TRUE(r2.done_); ++} ++ ++// Handing back a duplicate materialises the pending TTL decrement, so a ++// callback that reads the TTL off the record it is given sees the remaining ++// lifetime rather than the value the server sent. docs/ares_init_options.3 ++// states this, so pin it. Only visible to a caller that does not duplicate ++// first -- QueryResult does, which is why the other cache tests cannot see it. ++static unsigned int g_qcache_hit_ttl = 0; ++ ++static void QcacheTtlCallback(void *arg, ares_status_t status, size_t timeouts, ++ const ares_dns_record_t *dnsrec) { ++ const ares_dns_rr_t *rr; ++ (void)arg; ++ (void)timeouts; ++ if (status != ARES_SUCCESS || dnsrec == NULL) { ++ return; ++ } ++ rr = ares_dns_record_rr_get_const(dnsrec, ARES_SECTION_ANSWER, 0); ++ g_qcache_hit_ttl = rr ? ares_dns_rr_get_ttl(rr) : 0; ++} ++ ++TEST_P(CacheQueriesTest, CacheHitReportsRemainingTtl) { ++ DNSPacket rsp; ++ rsp.set_response().set_aa() ++ .add_question(new DNSQuestion("www.google.com", T_A)) ++ .add_answer(new DNSARR("www.google.com", 100, {2, 3, 4, 5})); ++ EXPECT_CALL(server_, OnRequest("www.google.com", T_A)) ++ .Times(1) ++ .WillRepeatedly(SetReply(&server_, &rsp)); ++ ++ g_qcache_hit_ttl = 0; ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ QcacheTtlCallback, nullptr, nullptr); ++ Process(); ++ EXPECT_EQ((unsigned int)100, g_qcache_hit_ttl); ++ ++ ares_sleep_time(2100); ++ ++ g_qcache_hit_ttl = 0; ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ QcacheTtlCallback, nullptr, nullptr); ++ Process(); ++ // Served from the cache, and reporting what is left rather than the ++ // original 100. ++ EXPECT_GT(g_qcache_hit_ttl, (unsigned int)0); ++ EXPECT_LT(g_qcache_hit_ttl, (unsigned int)100); ++} ++ ++TEST_P(CacheQueriesTest, CookieDoesNotSplitCacheEntries) { ++ DNSPacket rsp; ++ rsp.set_response().set_aa() ++ .add_question(new DNSQuestion("www.google.com", T_A)) ++ .add_answer(new DNSARR("www.google.com", 100, {2, 3, 4, 5})); ++ EXPECT_CALL(server_, OnRequest("www.google.com", T_A)) ++ .Times(1) ++ .WillRepeatedly(SetReply(&server_, &rsp)); ++ ++ const unsigned char ck1[] = {1, 2, 3, 4, 5, 6, 7, 8}; ++ const unsigned char ck2[] = {8, 7, 6, 5, 4, 3, 2, 1}; ++ const unsigned char *ck[2] = {ck1, ck2}; ++ QueryResult r[2]; ++ ++ for (int i = 0; i < 2; i++) { ++ ares_dns_record_t *req = nullptr; ++ ares_dns_rr_t *opt = nullptr; ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_create(&req, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY, ++ ARES_RCODE_NOERROR)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_query_add(req, "www.google.com", ARES_REC_TYPE_A, ++ ARES_CLASS_IN)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_rr_add(&opt, req, ARES_SECTION_ADDITIONAL, "", ++ ARES_REC_TYPE_OPT, ARES_CLASS_IN, 0)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_rr_set_u16(opt, ARES_RR_OPT_UDP_SIZE, 1232)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_rr_set_opt(opt, ARES_RR_OPT_OPTIONS, ++ ARES_OPT_PARAM_COOKIE, ck[i], sizeof(ck1))); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_send_dnsrec(channel_, req, QueryCallback, &r[i], nullptr)); ++ Process(); ++ EXPECT_TRUE(r[i].done_); ++ EXPECT_EQ(ARES_SUCCESS, r[i].status_); ++ ares_dns_record_destroy(req); ++ } ++} ++ ++// The advertised UDP payload size constrains how a response is transported, ++// not what it says, so it is excluded too. Same expectation: one request. ++TEST_P(CacheQueriesTest, UdpPayloadSizeDoesNotSplitCacheEntries) { ++ DNSPacket rsp; ++ rsp.set_response().set_aa() ++ .add_question(new DNSQuestion("www.google.com", T_A)) ++ .add_answer(new DNSARR("www.google.com", 100, {2, 3, 4, 5})); ++ EXPECT_CALL(server_, OnRequest("www.google.com", T_A)) ++ .Times(1) ++ .WillRepeatedly(SetReply(&server_, &rsp)); ++ ++ const unsigned short sizes[2] = {512, 1232}; ++ QueryResult r[2]; ++ ++ for (int i = 0; i < 2; i++) { ++ ares_dns_record_t *req = nullptr; ++ ares_dns_rr_t *opt = nullptr; ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_create(&req, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY, ++ ARES_RCODE_NOERROR)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_query_add(req, "www.google.com", ARES_REC_TYPE_A, ++ ARES_CLASS_IN)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_rr_add(&opt, req, ARES_SECTION_ADDITIONAL, "", ++ ARES_REC_TYPE_OPT, ARES_CLASS_IN, 0)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_rr_set_u16(opt, ARES_RR_OPT_UDP_SIZE, sizes[i])); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_send_dnsrec(channel_, req, QueryCallback, &r[i], nullptr)); ++ Process(); ++ EXPECT_TRUE(r[i].done_); ++ EXPECT_EQ(ARES_SUCCESS, r[i].status_); ++ ares_dns_record_destroy(req); ++ } ++} ++ ++TEST_P(CacheQueriesTest, EdnsClientSubnetSeparateCacheEntries) { ++ DNSPacket rsp; ++ rsp.set_response().set_aa() ++ .add_question(new DNSQuestion("www.google.com", T_A)) ++ .add_answer(new DNSARR("www.google.com", 100, {2, 3, 4, 5})); ++ EXPECT_CALL(server_, OnRequest("www.google.com", T_A)) ++ .Times(2) ++ .WillRepeatedly(SetReply(&server_, &rsp)); ++ ++ /* 192.0.2.0/24 and 198.51.100.0/24 */ ++ const unsigned char ecs1[] = {0x00, 0x01, 0x18, 0x00, 0xc0, 0x00, 0x02}; ++ const unsigned char ecs2[] = {0x00, 0x01, 0x18, 0x00, 0xc6, 0x33, 0x64}; ++ const unsigned char *ecs[2] = {ecs1, ecs2}; ++ QueryResult r[2]; ++ ++ for (int i = 0; i < 2; i++) { ++ ares_dns_record_t *req = nullptr; ++ ares_dns_rr_t *opt = nullptr; ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_create(&req, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY, ++ ARES_RCODE_NOERROR)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_query_add(req, "www.google.com", ARES_REC_TYPE_A, ++ ARES_CLASS_IN)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_rr_add(&opt, req, ARES_SECTION_ADDITIONAL, "", ++ ARES_REC_TYPE_OPT, ARES_CLASS_IN, 0)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_rr_set_u16(opt, ARES_RR_OPT_UDP_SIZE, 1232)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_rr_set_opt(opt, ARES_RR_OPT_OPTIONS, ++ ARES_OPT_PARAM_EDNS_CLIENT_SUBNET, ecs[i], ++ sizeof(ecs1))); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_send_dnsrec(channel_, req, QueryCallback, &r[i], nullptr)); ++ Process(); ++ EXPECT_TRUE(r[i].done_); ++ EXPECT_EQ(ARES_SUCCESS, r[i].status_); ++ ares_dns_record_destroy(req); ++ } ++} ++ ++// A server answering an EDNS query with FORMERR makes c-ares strip the OPT ++// record from query->query and retry. The cache key must not be derived from ++// that record afterwards, or the entry is stored under a key no later lookup ++// computes and the cache silently stops working for that name. ++TEST_P(CacheQueriesTest, EdnsFallbackStillCaches) { ++ DNSPacket rspfail; ++ rspfail.set_response().set_aa().set_rcode(FORMERR) ++ .add_question(new DNSQuestion("www.google.com", T_A)); ++ DNSPacket rspok; ++ rspok.set_response().set_aa() ++ .add_question(new DNSQuestion("www.google.com", T_A)) ++ .add_answer(new DNSARR("www.google.com", 100, {1, 2, 3, 4})); ++ /* Two: the FORMERR and the retry. The second lookup must be a cache hit. */ ++ EXPECT_CALL(server_, OnRequest("www.google.com", T_A)) ++ .Times(2) ++ .WillOnce(SetReply(&server_, &rspfail)) ++ .WillRepeatedly(SetReply(&server_, &rspok)); ++ ++ HostResult r1; ++ ares_gethostbyname(channel_, "www.google.com.", AF_INET, HostCallback, &r1); ++ Process(); ++ EXPECT_TRUE(r1.done_); ++ EXPECT_EQ(ARES_SUCCESS, r1.status_); ++ ++ HostResult r2; ++ ares_gethostbyname(channel_, "www.google.com.", AF_INET, HostCallback, &r2); ++ Process(); ++ EXPECT_TRUE(r2.done_); ++ EXPECT_EQ(ARES_SUCCESS, r2.status_); ++} ++ ++// The question name is caller-supplied and unescaped, so anything keyed after ++// it could be imitated by a name containing that same text. A request for ++// "example.net|EDNS|0|8000" with no OPT record must not collide with a request ++// for "example.net" carrying EDNS with the DNSSEC OK bit set. ++TEST_P(CacheQueriesTest, EdnsSectionCannotBeImitatedByName) { ++ DNSPacket rsp; ++ rsp.set_response().set_aa() ++ .add_question(new DNSQuestion("example.net", T_A)) ++ .add_answer(new DNSARR("example.net", 100, {5, 6, 7, 8})); ++ ON_CALL(server_, OnRequest("example.net", T_A)) ++ .WillByDefault(SetReply(&server_, &rsp)); ++ ++ /* Cache an answer for the real name, with EDNS and the DO bit set. */ ++ ares_dns_record_t *req = nullptr; ++ ares_dns_rr_t *opt = nullptr; ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_create(&req, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY, ++ ARES_RCODE_NOERROR)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_query_add(req, "example.net", ARES_REC_TYPE_A, ++ ARES_CLASS_IN)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_rr_add(&opt, req, ARES_SECTION_ADDITIONAL, "", ++ ARES_REC_TYPE_OPT, ARES_CLASS_IN, 0)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_rr_set_u16(opt, ARES_RR_OPT_UDP_SIZE, 1232)); ++ EXPECT_EQ(ARES_SUCCESS, ares_dns_rr_set_u16(opt, ARES_RR_OPT_FLAGS, 0x8000)); ++ QueryResult r1; ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_send_dnsrec(channel_, req, QueryCallback, &r1, nullptr)); ++ Process(); ++ EXPECT_TRUE(r1.done_); ++ EXPECT_EQ(ARES_SUCCESS, r1.status_); ++ ares_dns_record_destroy(req); ++ ++ /* A different name that spells out the EDNS suffix, with no OPT record. ++ * It must not be served the entry above; with the cache keyed correctly it ++ * is refused, because '|' is not valid in a hostname. */ ++ ares_dns_record_t *req2 = nullptr; ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_create(&req2, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY, ++ ARES_RCODE_NOERROR)); ++ EXPECT_EQ(ARES_SUCCESS, ++ ares_dns_record_query_add(req2, "example.net|EDNS|0|8000", ++ ARES_REC_TYPE_A, ARES_CLASS_IN)); ++ QueryResult r2; ++ ares_send_dnsrec(channel_, req2, QueryCallback, &r2, nullptr); ++ Process(); ++ EXPECT_TRUE(r2.done_); ++ EXPECT_NE(ARES_SUCCESS, r2.status_); ++ ares_dns_record_destroy(req2); ++} ++ + TEST_P(CacheQueriesTest, GetHostByNameCache) { + DNSPacket rsp; + rsp.set_response().set_aa() diff --git a/meta-oe/recipes-support/c-ares/c-ares/0004-Handle-connections-torn-down-by-application.patch b/meta-oe/recipes-support/c-ares/c-ares/0004-Handle-connections-torn-down-by-application.patch new file mode 100644 index 0000000000..f78e9726b0 --- /dev/null +++ b/meta-oe/recipes-support/c-ares/c-ares/0004-Handle-connections-torn-down-by-application.patch @@ -0,0 +1,1107 @@ +From 13a10dddbabc30b6fca8e23f9efff73fedba9401 Mon Sep 17 00:00:00 2001 +From: Brad House +Date: Sun, 18 Oct 2026 22:51:53 -0400 +Subject: [PATCH] [Backport v1.34] Handle connections torn down by application + socket functions (#1343) +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Backport of cb25d8bf297aed0aad8f6e0777ca0635cacc6cb1 to `v1.34`. See +that commit for the full description. + +Application code that c-ares calls while using a connection can +reconfigure the servers and so tear that connection down. That includes +the socket functions from `ares_set_socket_functions_ex()` and the older +`ares_set_socket_functions()`, and the pending-write callback. c-ares +now notices this while opening, writing to, reading from or closing a +connection. It requeues the affected queries, or drops the stale data, +instead of continuing to use the connection. + +It applied cleanly on top of the dd62bdfc and #1340 backports (#1338). +Test file contents match `main`. + +Each of the 11 new tests fails on `v1.34` without this change: nine with +an ASAN heap-use-after-free, and the two receive tests on their +assertions. All 11 pass with it. The full non-live suite passes 674/674 +under ASAN+UBSAN and with `-DCARES_WERROR=ON` on macOS. + +Signed-off-by: Brad House +Co-authored-by: Mar +Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/13a10dddbabc30b6fca8e23f9efff73fedba9401] +GHSA: GHSA-pj7p-v3cw-hq66 +--- + src/lib/ares_close_sockets.c | 7 +- + src/lib/ares_conn.c | 29 ++ + src/lib/ares_process.c | 65 ++- + test/ares-test-mock.cc | 842 +++++++++++++++++++++++++++++++++++ + 4 files changed, 935 insertions(+), 8 deletions(-) + +diff --git a/src/lib/ares_close_sockets.c b/src/lib/ares_close_sockets.c +index 6be662fdd3..a3af721bc6 100644 +--- a/src/lib/ares_close_sockets.c ++++ b/src/lib/ares_close_sockets.c +@@ -148,6 +148,7 @@ void ares_check_cleanup_conns(const ares_channel_t *channel) + return; /* LCOV_EXCL_LINE: DefensiveCoding */ + } + ++restart: + /* Iterate across each server */ + for (snode = ares_slist_node_first(channel->servers); snode != NULL; + snode = ares_slist_node_next(snode)) { +@@ -190,8 +191,12 @@ void ares_check_cleanup_conns(const ares_channel_t *channel) + continue; + } + +- /* Clean it up */ ++ /* Clean it up. The close function is application code and may have ++ * reconfigured the servers, freeing the list nodes this walk holds -- ++ * the server's, and the next connection's. Start over; connections ++ * already closed are no longer listed, so this ends. */ + ares_close_connection(conn, ARES_SUCCESS); ++ goto restart; + } + } + } +diff --git a/src/lib/ares_conn.c b/src/lib/ares_conn.c +index 4cc0d1871d..5e0827fbdf 100644 +--- a/src/lib/ares_conn.c ++++ b/src/lib/ares_conn.c +@@ -262,6 +262,15 @@ ares_conn_err_t ares_conn_read(ares_conn_t *conn, void *data, size_t len, + err = ares_socket_recv(channel, conn->fd, ARES_TRUE, data, len, read_bytes); + } + ++ /* The receive function is application code and may have reconfigured the ++ * servers, tearing this connection down. Nothing read from it can be ++ * matched any more -- its queries have moved to the new configuration -- ++ * and its descriptor is gone, so it must not be read again. */ ++ if (conn->flags & ARES_CONN_FLAG_DEAD) { ++ *read_bytes = 0; ++ return ARES_CONN_ERR_CONNCLOSED; ++ } ++ + /* Toggle connected state if needed */ + if (err == ARES_CONN_ERR_SUCCESS) { + conn->state_flags |= ARES_CONN_STATE_CONNECTED; +@@ -408,6 +417,19 @@ ares_conn_err_t ares_conn_write(ares_conn_t *conn, const void *data, size_t len, + } + + done: ++ /* The send function -- from ares_set_socket_functions_ex() or the legacy ++ * ares_set_socket_functions() -- and on the first TCP Fast Open write the ++ * getsockname function, are application code and may have reconfigured the ++ * servers, tearing this connection down. Whatever the write returned, ++ * nothing written here can be answered any more, and the descriptor has ++ * already been closed or handed to the close notification, so there is no ++ * socket state left to report. Say so, so every caller treats it as the ++ * connection failure it is. */ ++ if (conn->flags & ARES_CONN_FLAG_DEAD) { ++ *written = 0; ++ return ARES_CONN_ERR_CONNCLOSED; ++ } ++ + if (err == ARES_CONN_ERR_SUCCESS && len == *written) { + /* Wrote all data, make sure we're not listening for write events unless + * using TFO, in which case we'll need a write event to know when +@@ -644,6 +666,13 @@ ares_status_t ares_open_connection(ares_conn_t **conn_out, + goto done; /* LCOV_EXCL_LINE: UntestablePath */ + } + ++ /* The getsockname function is application code as well, and may have ++ * reconfigured the servers the same way. */ ++ if (!ares_server_in_channel(channel, server)) { ++ status = ARES_ECONNREFUSED; ++ goto done; ++ } ++ + /* TCP connections are thrown to the end as we don't spawn multiple TCP + * connections. UDP connections are put on front where the newest connection + * can be quickly pulled */ +diff --git a/src/lib/ares_process.c b/src/lib/ares_process.c +index 88536704ad..5686b077a6 100644 +--- a/src/lib/ares_process.c ++++ b/src/lib/ares_process.c +@@ -189,7 +189,9 @@ static void server_increment_failures(ares_server_t *server, + ares_timeval_t next_retry_time; + + node = ares_slist_node_find(channel->servers, server); +- if (node == NULL) { ++ /* Matches by sort key, not identity, so a removed server can match the live ++ * one that replaced it at the same configuration index. */ ++ if (node == NULL || ares_slist_node_val(node) != server) { + return; /* LCOV_EXCL_LINE: DefensiveCoding */ + } + +@@ -220,7 +222,9 @@ static void server_set_good(ares_server_t *server, ares_bool_t used_tcp) + const ares_channel_t *channel = server->channel; + + node = ares_slist_node_find(channel->servers, server); +- if (node == NULL) { ++ /* Matches by sort key, not identity, so a removed server can match the live ++ * one that replaced it at the same configuration index. */ ++ if (node == NULL || ares_slist_node_val(node) != server) { + return; /* LCOV_EXCL_LINE: DefensiveCoding */ + } + +@@ -501,21 +505,39 @@ void ares_process_pending_write(ares_channel_t *channel) + */ + channel->notify_pending_write = ARES_FALSE; + +- for (node = ares_slist_node_first(channel->servers); node != NULL; +- node = ares_slist_node_next(node)) { +- ares_server_t *server = ares_slist_node_val(node); +- ares_conn_t *conn = server->tcp_conn; ++ node = ares_slist_node_first(channel->servers); ++ while (node != NULL) { ++ ares_server_t *server = ares_slist_node_val(node); ++ ares_conn_t *conn = server->tcp_conn; ++ size_t generation = channel->servers_generation; + ares_status_t status; + + if (conn == NULL) { ++ node = ares_slist_node_next(node); + continue; + } + +- /* Enqueue any pending data if there is any */ ++ /* Enqueue any pending data if there is any. The flush runs the ++ * application's send function, which may have reconfigured the servers ++ * and removed this one; its connection is then already closed, which ++ * handle_conn_error() ignores. */ + status = ares_conn_flush(conn); + if (status != ARES_SUCCESS) { + handle_conn_error(conn, ARES_TRUE, status); + } ++ ++ /* Tearing down a connection runs the callbacks of the queries it ends, ++ * and those may reconfigure the servers too, destroying the ones the new ++ * configuration omits along with their list nodes. A failure also moves ++ * this server further down the list. So when either may have happened, ++ * start over from the head rather than step from this node; flushing a ++ * connection again is harmless. */ ++ if (status != ARES_SUCCESS || channel->servers_generation != generation) { ++ node = ares_slist_node_first(channel->servers); ++ continue; ++ } ++ ++ node = ares_slist_node_next(node); + } + + ares_deferred_cb_leave(channel); +@@ -902,6 +924,13 @@ static ares_status_t process_read(ares_channel_t *channel, + return status; + } + ++ /* A later call to the receive function may have reconfigured the servers, ++ * tearing this connection down after earlier calls buffered answers on it. ++ * Its queries have moved to the new configuration, so drop the answers. */ ++ if (conn->flags & ARES_CONN_FLAG_DEAD) { ++ return ARES_SUCCESS; ++ } ++ + status = read_answers(conn, now); + if (status != ARES_SUCCESS) { + return status; +@@ -1192,6 +1221,15 @@ static void handle_conn_error(ares_conn_t *conn, ares_bool_t critical_failure, + { + ares_server_t *server = conn->server; + ++ /* Already torn down, most likely by a reconfiguration from application code ++ * the failing call ran, such as the send function. Its queries have been ++ * requeued, and its server did not fail -- it was removed, or the ++ * connection was closed deliberately -- so there is nothing to record and ++ * nothing left to close. */ ++ if (conn->flags & ARES_CONN_FLAG_DEAD) { ++ return; ++ } ++ + /* Increment failures first before requeue so it is unlikely to requeue + * to the same server */ + if (critical_failure) { +@@ -1508,6 +1546,14 @@ static ares_status_t ares_conn_query_write(ares_conn_t *conn, + conn->flags & ARES_CONN_FLAG_TCP) { + channel->notify_pending_write = ARES_TRUE; + channel->notify_pending_write_cb(channel->notify_pending_write_cb_data); ++ ++ /* The callback is application code and may have reconfigured the ++ * servers, closing this connection with the query already buffered on ++ * it. Report it as a connection failure so the query is requeued rather ++ * than attached to the closed connection. */ ++ if (conn->flags & ARES_CONN_FLAG_DEAD) { ++ return ARES_ECONNREFUSED; ++ } + return ARES_SUCCESS; + } + +@@ -1650,6 +1696,11 @@ static ares_status_t ares_send_query_int(ares_server_t *requested_server, + return ARES_ECANCELLED; + } + ++ /* Application code that tore this connection down during the write -- the ++ * send function, or the pending-write callback when the write is deferred, ++ * reconfiguring the servers, say -- surfaces here as ARES_ECONNREFUSED, ++ * even if the send itself reported success or never happened, so the query ++ * is requeued below rather than attached to the closed connection. */ + switch (status) { + /* Good result, continue on */ + case ARES_SUCCESS: +diff --git a/test/ares-test-mock.cc b/test/ares-test-mock.cc +index 4b409db7c3..f1d9d360e7 100644 +--- a/test/ares-test-mock.cc ++++ b/test/ares-test-mock.cc +@@ -2593,6 +2593,86 @@ INSTANTIATE_TEST_SUITE_P(AddressFamilies, MockUDPSingleTryTest, + ::testing::ValuesIn(ares::test::families), + PrintFamily); + ++// ares_process_pending_write() flushes each server's TCP connection. A flush ++// that fails tears the connection down, which ends a query that is out of ++// retries and runs its callback right there. A callback that reconfigures the ++// servers removes the one being flushed, and the walk must not go on to use ++// that server, its connection or its place in the list. ++class MockTCPSingleTryStayOpenTest ++ : public MockChannelOptsTest, ++ public ::testing::WithParamInterface { ++public: ++ MockTCPSingleTryStayOpenTest() ++ : MockChannelOptsTest(1, GetParam(), true, false, FillOptions(&opts_), ++ ARES_OPT_TRIES | ARES_OPT_FLAGS) ++ { ++ } ++ ++ static struct ares_options *FillOptions(struct ares_options *opts) ++ { ++ memset(opts, 0, sizeof(struct ares_options)); ++ opts->tries = 1; ++ /* ARES_OPT_FLAGS replaces the defaults, which include EDNS. */ ++ opts->flags = ARES_FLAG_STAYOPEN | ARES_FLAG_EDNS; ++ return opts; ++ } ++ ++private: ++ struct ares_options opts_; ++}; ++ ++static void PendingWriteNotifyCallback(void *data) ++{ ++ *static_cast(data) = true; ++} ++ ++TEST_P(MockTCPSingleTryStayOpenTest, ReconfigureInPendingWriteFailureCallback) { ++ DNSPacket rsp; ++ rsp.set_response().set_aa() ++ .add_question(new DNSQuestion("www.google.com", T_A)) ++ .add_answer(new DNSARR("www.google.com", 100, {2, 3, 4, 5})); ++ ON_CALL(server_, OnRequest("www.google.com", T_A)) ++ .WillByDefault(SetReply(&server_, &rsp)); ++ ++ /* Answered, so the TCP connection is connected; STAYOPEN keeps it. */ ++ QueryResult first; ++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ QueryCallback, &first, NULL); ++ Process(); ++ EXPECT_TRUE(first.done_); ++ ++ /* From here writes on that connection wait for ares_process_pending_write. */ ++ bool pending = false; ++ ares_set_pending_write_cb(channel_, PendingWriteNotifyCallback, &pending); ++ ++ CancelInCbData data; ++ data.channel = channel_; ++ data.done = false; ++ data.cbs = 0; ++ ares_query_dnsrec(channel_, "www.example.com", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, ReconfigureServersCallback, &data, NULL); ++ EXPECT_TRUE(pending); ++ EXPECT_FALSE(data.done); ++ ++ /* ares_set_socket_functions() stores the pointer rather than copying it. */ ++ static ares_socket_functions sock_funcs; ++ memset(&sock_funcs, 0, sizeof(sock_funcs)); ++ sock_funcs.asendv = ares_sendv_fail; ++ ares_set_socket_functions(channel_, &sock_funcs, NULL); ++ LibraryTest::SetFailSend(); ++ ++ ares_process_pending_write(channel_); ++ ++ EXPECT_TRUE(data.done); ++ EXPECT_EQ((size_t)1, data.cbs); ++ ++ ares_set_pending_write_cb(channel_, NULL, NULL); ++} ++ ++INSTANTIATE_TEST_SUITE_P(AddressFamilies, MockTCPSingleTryStayOpenTest, ++ ::testing::ValuesIn(ares::test::families), ++ PrintFamily); ++ + TEST_P(MockUDPChannelTest, CancelInDestroyCallbackNoUseAfterFree) { + CancelInCbData data; + data.channel = channel_; +@@ -2898,6 +2978,768 @@ TEST_F(LibraryTest, ReconfigureInConfigureHookNoUseAfterFree) { + ares_destroy(chan); + } + ++// Reconfiguring the servers from the application's own send function. The ++// write itself goes through: the send function reports every byte sent. But ++// the reconfiguration has already closed the connection being written to and ++// removed its server, so the query must be moved to the new configuration ++// rather than attached to the closed connection -- where it would sit on a ++// list that is freed once the call unwinds, in flight on no socket. ++struct ReconfigureFromSendData { ++ ares_channel_t *channel; ++ bool done; ++ int status; ++}; ++ ++static ares_ssize_t ReconfigureSendv(ares_socket_t fd, const struct iovec *iov, ++ int iovcnt, void *user_data) ++{ ++ ReconfigureFromSendData *d = ++ static_cast(user_data); ++ ares_ssize_t len = 0; ++ (void)fd; ++ for (int i = 0; i < iovcnt; i++) { ++ len += static_cast(iov[i].iov_len); ++ } ++ // Frees the server this connection belongs to. Reconfiguring to the same ++ // list again is a no-op, so the retry is written normally. ++ ares_set_servers_csv(d->channel, "127.0.0.1:53056"); ++ return len; ++} ++ ++static void ReconfigureFromSendCallback(void *arg, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) ++{ ++ ReconfigureFromSendData *d = static_cast(arg); ++ (void)timeouts; ++ (void)dnsrec; ++ d->done = true; ++ d->status = static_cast(status); ++} ++ ++TEST_F(LibraryTest, ReconfigureInSuccessfulSendNoUseAfterFree) { ++ ares_channel_t *chan = nullptr; ++ struct ares_options opts; ++ int optmask = 0; ++ ares_socket_functions funcs; ++ ReconfigureFromSendData data; ++ ares_socket_t socks[ARES_GETSOCK_MAXNUM]; ++ ++ memset(&opts, 0, sizeof(opts)); ++ opts.flags = ARES_FLAG_NOSEARCH; ++ optmask |= ARES_OPT_FLAGS; ++ ++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&chan, &opts, optmask)); ++ ASSERT_NE(nullptr, chan); ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055")); ++ ++ data.channel = chan; ++ data.done = false; ++ data.status = ARES_SUCCESS; ++ memset(&funcs, 0, sizeof(funcs)); ++ funcs.asendv = ReconfigureSendv; ++ ares_set_socket_functions(chan, &funcs, &data); ++ ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ ReconfigureFromSendCallback, &data, NULL); ++ ++ // Moved to the new server and written there, so it is in flight on a ++ // socket the application can watch. ++ EXPECT_FALSE(data.done); ++ EXPECT_EQ((size_t)1, ares_queue_active_queries(chan)); ++ EXPECT_NE(0, ares_getsock(chan, socks, ARES_GETSOCK_MAXNUM)); ++ ++ ares_cancel(chan); ++ EXPECT_TRUE(data.done); ++ EXPECT_EQ(ARES_ECANCELLED, data.status); ++ EXPECT_EQ((size_t)0, ares_queue_active_queries(chan)); ++ ares_destroy(chan); ++} ++ ++// The connection the send function tore down has already been reported as ++// closed, and its descriptor closed or handed to that notification. Nothing ++// after the send may report socket state for it: doing so names ++// ARES_SOCKET_BAD, a descriptor the application was never given. ++struct BadSocketStateData { ++ size_t calls; ++ size_t bad; ++}; ++ ++static void BadSocketStateCallback(void *data, ares_socket_t socket_fd, ++ int readable, int writable) ++{ ++ BadSocketStateData *d = static_cast(data); ++ (void)readable; ++ (void)writable; ++ d->calls++; ++ if (socket_fd == ARES_SOCKET_BAD) { ++ d->bad++; ++ } ++} ++ ++TEST_F(LibraryTest, ReconfigureInSendReportsNoBadSocket) { ++ ares_channel_t *chan = nullptr; ++ struct ares_options opts; ++ int optmask = 0; ++ ares_socket_functions funcs; ++ ReconfigureFromSendData data; ++ BadSocketStateData sock; ++ ++ memset(&opts, 0, sizeof(opts)); ++ memset(&sock, 0, sizeof(sock)); ++ opts.flags = ARES_FLAG_NOSEARCH; ++ optmask |= ARES_OPT_FLAGS; ++ opts.sock_state_cb = BadSocketStateCallback; ++ opts.sock_state_cb_data = &sock; ++ optmask |= ARES_OPT_SOCK_STATE_CB; ++ ++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&chan, &opts, optmask)); ++ ASSERT_NE(nullptr, chan); ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055")); ++ ++ data.channel = chan; ++ data.done = false; ++ data.status = ARES_SUCCESS; ++ memset(&funcs, 0, sizeof(funcs)); ++ funcs.asendv = ReconfigureSendv; ++ ares_set_socket_functions(chan, &funcs, &data); ++ ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ ReconfigureFromSendCallback, &data, NULL); ++ ares_cancel(chan); ++ EXPECT_TRUE(data.done); ++ ++ EXPECT_NE((size_t)0, sock.calls); ++ EXPECT_EQ((size_t)0, sock.bad); ++ ares_destroy(chan); ++} ++ ++// The same reconfiguration from the send function, reached through the ++// deferred TCP write: ares_set_pending_write_cb() queues the write and the ++// application later flushes it with ares_process_pending_write(). That flush ++// is its own outermost library call, so the connection and server the ++// reconfiguration closes must stay readable until it returns, and its walk of ++// the server list must not step from a list node the reconfiguration freed. ++// Covers both a send that reports success and one that fails. A failure ++// on the removed server must not be charged to the server that replaced it. ++struct PendingWriteReconfigureData { ++ ares_channel_t *channel; ++ bool reconfigure; ++ bool fail; ++ bool pending; ++ size_t done; ++ size_t server_failures; ++}; ++ ++static int PendingWriteConnect(ares_socket_t fd, const struct sockaddr *addr, ++ ares_socklen_t addrlen, void *user_data) ++{ ++ (void)fd; ++ (void)addr; ++ (void)addrlen; ++ (void)user_data; ++ // Pretend the connection is in progress; the test signals it writable. ++ return 0; ++} ++ ++static ares_ssize_t PendingWriteSendv(ares_socket_t fd, const struct iovec *iov, ++ int iovcnt, void *user_data) ++{ ++ PendingWriteReconfigureData *d = ++ static_cast(user_data); ++ ares_ssize_t len = 0; ++ (void)fd; ++ for (int i = 0; i < iovcnt; i++) { ++ len += static_cast(iov[i].iov_len); ++ } ++ if (!d->reconfigure) { ++ return len; ++ } ++ d->reconfigure = false; ++ // Closes this connection and frees its server. ++ ares_set_servers_csv(d->channel, "127.0.0.1:53056"); ++ if (d->fail) { ++#ifdef USE_WINSOCK ++ WSASetLastError(WSAECONNREFUSED); ++#else ++ errno = ECONNREFUSED; ++#endif ++ return -1; ++ } ++ return len; ++} ++ ++static void PendingWriteNotify(void *user_data) ++{ ++ PendingWriteReconfigureData *d = ++ static_cast(user_data); ++ d->pending = true; ++} ++ ++static void PendingWriteServerState(const char *server_string, ++ ares_bool_t success, int flags, ++ void *user_data) ++{ ++ PendingWriteReconfigureData *d = ++ static_cast(user_data); ++ (void)server_string; ++ (void)flags; ++ if (!success) { ++ d->server_failures++; ++ } ++} ++ ++static void PendingWriteCallback(void *arg, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) ++{ ++ PendingWriteReconfigureData *d = ++ static_cast(arg); ++ (void)timeouts; ++ (void)dnsrec; ++ EXPECT_EQ(ARES_ECANCELLED, status); ++ d->done++; ++} ++ ++static void ReconfigureInPendingWrite(bool fail) ++{ ++ ares_channel_t *chan = nullptr; ++ struct ares_options opts; ++ int optmask = 0; ++ ares_socket_functions funcs; ++ PendingWriteReconfigureData data; ++ ares_socket_t socks[ARES_GETSOCK_MAXNUM]; ++ int bitmask; ++ ++ memset(&opts, 0, sizeof(opts)); ++ opts.flags = ARES_FLAG_NOSEARCH | ARES_FLAG_USEVC; ++ optmask |= ARES_OPT_FLAGS; ++ ++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&chan, &opts, optmask)); ++ ASSERT_NE(nullptr, chan); ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055")); ++ ++ data.channel = chan; ++ data.reconfigure = false; ++ data.fail = fail; ++ data.pending = false; ++ data.done = 0; ++ data.server_failures = 0; ++ memset(&funcs, 0, sizeof(funcs)); ++ funcs.aconnect = PendingWriteConnect; ++ funcs.asendv = PendingWriteSendv; ++ ares_set_socket_functions(chan, &funcs, &data); ++ ares_set_pending_write_cb(chan, PendingWriteNotify, &data); ++ ares_set_server_state_callback(chan, PendingWriteServerState, &data); ++ ++ // The first query opens the connection; its write waits for it to connect. ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ PendingWriteCallback, &data, NULL); ++ bitmask = ares_getsock(chan, socks, ARES_GETSOCK_MAXNUM); ++ ASSERT_NE(0, ARES_GETSOCK_WRITABLE(bitmask, 0)); ++ ++ // Report it connected, which writes the first query. ++ ares_process_fd(chan, ARES_SOCKET_BAD, socks[0]); ++ EXPECT_FALSE(data.pending); ++ ++ // Now connected, so the second query's write is deferred to the ++ // application. ++ ares_query_dnsrec(chan, "www.example.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ PendingWriteCallback, &data, NULL); ++ EXPECT_TRUE(data.pending); ++ ++ data.reconfigure = true; ++ ares_process_pending_write(chan); ++ EXPECT_FALSE(data.reconfigure); ++ ++ // Both queries were moved to the new server, which has not failed. ++ EXPECT_EQ((size_t)0, data.done); ++ EXPECT_EQ((size_t)0, data.server_failures); ++ EXPECT_EQ((size_t)2, ares_queue_active_queries(chan)); ++ ++ ares_cancel(chan); ++ EXPECT_EQ((size_t)2, data.done); ++ EXPECT_EQ((size_t)0, ares_queue_active_queries(chan)); ++ ares_destroy(chan); ++} ++ ++TEST_F(LibraryTest, ReconfigureInSuccessfulPendingWriteNoUseAfterFree) { ++ ReconfigureInPendingWrite(false); ++} ++ ++TEST_F(LibraryTest, ReconfigureInFailedPendingWriteNoUseAfterFree) { ++ ReconfigureInPendingWrite(true); ++} ++ ++// The pending-write callback is application code too, and runs once the query ++// has been buffered on the connection. Reconfiguring from it closes that ++// connection, so the query must be requeued rather than attached to it. ++static void PendingWriteReconfigureNotify(void *user_data) ++{ ++ PendingWriteReconfigureData *d = ++ static_cast(user_data); ++ d->pending = true; ++ if (d->reconfigure) { ++ d->reconfigure = false; ++ // Closes the connection the query was just buffered on. ++ ares_set_servers_csv(d->channel, "127.0.0.1:53056"); ++ } ++} ++ ++TEST_F(LibraryTest, ReconfigureInPendingWriteCallbackNoUseAfterFree) { ++ ares_channel_t *chan = nullptr; ++ struct ares_options opts; ++ int optmask = 0; ++ ares_socket_functions funcs; ++ PendingWriteReconfigureData data; ++ ares_socket_t socks[ARES_GETSOCK_MAXNUM]; ++ int bitmask; ++ ++ memset(&opts, 0, sizeof(opts)); ++ opts.flags = ARES_FLAG_NOSEARCH | ARES_FLAG_USEVC; ++ optmask |= ARES_OPT_FLAGS; ++ ++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&chan, &opts, optmask)); ++ ASSERT_NE(nullptr, chan); ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055")); ++ ++ data.channel = chan; ++ data.reconfigure = false; ++ data.fail = false; ++ data.pending = false; ++ data.done = 0; ++ data.server_failures = 0; ++ memset(&funcs, 0, sizeof(funcs)); ++ funcs.aconnect = PendingWriteConnect; ++ funcs.asendv = PendingWriteSendv; ++ ares_set_socket_functions(chan, &funcs, &data); ++ ares_set_pending_write_cb(chan, PendingWriteReconfigureNotify, &data); ++ ++ // The first query opens the connection; its write waits for it to connect. ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ PendingWriteCallback, &data, NULL); ++ bitmask = ares_getsock(chan, socks, ARES_GETSOCK_MAXNUM); ++ ASSERT_NE(0, ARES_GETSOCK_WRITABLE(bitmask, 0)); ++ ++ // Report it connected, which writes the first query. ++ ares_process_fd(chan, ARES_SOCKET_BAD, socks[0]); ++ EXPECT_FALSE(data.pending); ++ ++ // Now connected, so the second query is buffered and the pending-write ++ // callback runs, reconfiguring the servers. ++ data.reconfigure = true; ++ ares_query_dnsrec(chan, "www.example.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ PendingWriteCallback, &data, NULL); ++ EXPECT_TRUE(data.pending); ++ EXPECT_FALSE(data.reconfigure); ++ ++ // Both queries were moved to the new server. ++ EXPECT_EQ((size_t)0, data.done); ++ EXPECT_EQ((size_t)2, ares_queue_active_queries(chan)); ++ ++ ares_cancel(chan); ++ EXPECT_EQ((size_t)2, data.done); ++ EXPECT_EQ((size_t)0, ares_queue_active_queries(chan)); ++ ares_destroy(chan); ++} ++ ++// Fake socket functions, installed with ares_set_socket_functions_ex(), that ++// never touch a real descriptor. Each test arms one of them to reconfigure ++// the servers part-way through c-ares's use of a connection, and they count ++// every call that names ARES_SOCKET_BAD, which a closed connection must never ++// pass to application code. ++struct FakeSockData { ++ ares_channel_t *channel; ++ ares_socket_t next_fd; ++ bool tfo; ++ bool getsockname_fail_first; ++ ares_socket_t getsockname_last_fd; ++ bool getsockname_reconfigure; ++ bool recv_reconfigure; ++ bool recv_answer_then_reconfigure; ++ bool recv_answered; ++ bool recv_answer; ++ bool close_reconfigure; ++ unsigned char query[512]; ++ size_t query_len; ++ struct sockaddr_in peer; ++ size_t recv_calls; ++ size_t bad_fd_calls; ++ size_t sock_state_bad; ++ bool done; ++ int status; ++}; ++ ++static void FakeSockSetErrno(bool wouldblock) ++{ ++#ifdef USE_WINSOCK ++ WSASetLastError(wouldblock ? WSAEWOULDBLOCK : WSAENOTCONN); ++#else ++ errno = wouldblock ? EAGAIN : ENOTCONN; ++#endif ++} ++ ++static ares_socket_t FakeSockSocket(int domain, int type, int protocol, ++ void *user_data) ++{ ++ FakeSockData *d = static_cast(user_data); ++ (void)domain; ++ (void)type; ++ (void)protocol; ++ return d->next_fd++; ++} ++ ++static int FakeSockClose(ares_socket_t sock, void *user_data) ++{ ++ FakeSockData *d = static_cast(user_data); ++ if (sock == ARES_SOCKET_BAD) { ++ d->bad_fd_calls++; ++ } ++ if (d->close_reconfigure) { ++ d->close_reconfigure = false; ++ // Frees the server this connection belonged to. ++ ares_set_servers_csv(d->channel, "127.0.0.1:53056"); ++ } ++ return 0; ++} ++ ++static int FakeSockSetsockopt(ares_socket_t sock, ares_socket_opt_t opt, ++ const void *val, ares_socklen_t val_size, ++ void *user_data) ++{ ++ FakeSockData *d = static_cast(user_data); ++ (void)sock; ++ (void)val; ++ (void)val_size; ++ if (opt == ARES_SOCKET_OPT_TCP_FASTOPEN && !d->tfo) { ++ return -1; ++ } ++ return 0; ++} ++ ++static int FakeSockConnect(ares_socket_t sock, const struct sockaddr *address, ++ ares_socklen_t address_len, unsigned int flags, ++ void *user_data) ++{ ++ FakeSockData *d = static_cast(user_data); ++ (void)sock; ++ (void)flags; ++ if (address->sa_family == AF_INET && address_len >= sizeof(d->peer)) { ++ memcpy(&d->peer, address, sizeof(d->peer)); ++ } ++ return 0; ++} ++ ++static ares_ssize_t FakeSockRecvfrom(ares_socket_t sock, void *buffer, ++ size_t length, int flags, ++ struct sockaddr *address, ++ ares_socklen_t *address_len, ++ void *user_data) ++{ ++ FakeSockData *d = static_cast(user_data); ++ (void)flags; ++ d->recv_calls++; ++ if (sock == ARES_SOCKET_BAD) { ++ d->bad_fd_calls++; ++ } ++ if (d->query_len < 12 || length < d->query_len) { ++ FakeSockSetErrno(true); ++ return -1; ++ } ++ if (d->recv_answer_then_reconfigure) { ++ // Answer first; reconfigure on the next call, which has nothing to read. ++ if (d->recv_answered) { ++ d->recv_answer_then_reconfigure = false; ++ ares_set_servers_csv(d->channel, "127.0.0.1:53056"); ++ FakeSockSetErrno(true); ++ return -1; ++ } ++ d->recv_answered = true; ++ } else if (d->recv_reconfigure) { ++ d->recv_reconfigure = false; ++ // Frees the server this connection belongs to. ++ ares_set_servers_csv(d->channel, "127.0.0.1:53056"); ++ } else if (d->recv_answer) { ++ d->recv_answer = false; ++ } else { ++ FakeSockSetErrno(true); ++ return -1; ++ } ++ // Answer the query: the same message with QR set, no records. ++ memcpy(buffer, d->query, d->query_len); ++ static_cast(buffer)[2] |= 0x80; ++ if (address != NULL && address_len != NULL && ++ *address_len >= (ares_socklen_t)sizeof(d->peer)) { ++ memcpy(address, &d->peer, sizeof(d->peer)); ++ *address_len = sizeof(d->peer); ++ } ++ return static_cast(d->query_len); ++} ++ ++static ares_ssize_t FakeSockSendto(ares_socket_t sock, const void *buffer, ++ size_t length, int flags, ++ const struct sockaddr *address, ++ ares_socklen_t address_len, void *user_data) ++{ ++ FakeSockData *d = static_cast(user_data); ++ (void)flags; ++ (void)address; ++ (void)address_len; ++ if (sock == ARES_SOCKET_BAD) { ++ d->bad_fd_calls++; ++ } ++ if (length <= sizeof(d->query)) { ++ memcpy(d->query, buffer, length); ++ d->query_len = length; ++ } ++ return static_cast(length); ++} ++ ++static int FakeSockGetsockname(ares_socket_t sock, struct sockaddr *address, ++ ares_socklen_t *address_len, void *user_data) ++{ ++ FakeSockData *d = static_cast(user_data); ++ struct sockaddr_in sin; ++ if (sock == ARES_SOCKET_BAD) { ++ d->bad_fd_calls++; ++ } ++ // As during TCP Fast Open, before the first write has connected. ++ if (d->getsockname_fail_first && sock != d->getsockname_last_fd) { ++ d->getsockname_last_fd = sock; ++ FakeSockSetErrno(false); ++ return -1; ++ } ++ if (d->getsockname_reconfigure) { ++ d->getsockname_reconfigure = false; ++ // Frees the server this connection belongs to. ++ ares_set_servers_csv(d->channel, "127.0.0.1:53056"); ++ } ++ if (*address_len < (ares_socklen_t)sizeof(sin)) { ++ FakeSockSetErrno(false); ++ return -1; ++ } ++ memset(&sin, 0, sizeof(sin)); ++ sin.sin_family = AF_INET; ++ sin.sin_port = htons(40000); ++ sin.sin_addr.s_addr = htonl(INADDR_LOOPBACK); ++ memcpy(address, &sin, sizeof(sin)); ++ *address_len = sizeof(sin); ++ return 0; ++} ++ ++static void FakeSockStateCallback(void *data, ares_socket_t socket_fd, ++ int readable, int writable) ++{ ++ FakeSockData *d = static_cast(data); ++ (void)readable; ++ (void)writable; ++ if (socket_fd == ARES_SOCKET_BAD) { ++ d->sock_state_bad++; ++ } ++} ++ ++static void FakeSockQueryCallback(void *arg, ares_status_t status, ++ size_t timeouts, ++ const ares_dns_record_t *dnsrec) ++{ ++ FakeSockData *d = static_cast(arg); ++ (void)timeouts; ++ (void)dnsrec; ++ d->done = true; ++ d->status = static_cast(status); ++} ++ ++static void FakeSockInit(ares_channel_t **chan, FakeSockData *data, ++ int extra_flags, unsigned int sockfunc_flags, ++ bool sock_state = true) ++{ ++ struct ares_options opts; ++ int optmask = 0; ++ struct ares_socket_functions_ex funcs; ++ ++ memset(&opts, 0, sizeof(opts)); ++ opts.flags = ARES_FLAG_NOSEARCH | extra_flags; ++ optmask |= ARES_OPT_FLAGS; ++ // A socket-state callback defers the close of a connection's descriptor ++ // until the outermost call unwinds; without one it is closed inline. ++ if (sock_state) { ++ opts.sock_state_cb = FakeSockStateCallback; ++ opts.sock_state_cb_data = data; ++ optmask |= ARES_OPT_SOCK_STATE_CB; ++ } ++ ASSERT_EQ(ARES_SUCCESS, ares_init_options(chan, &opts, optmask)); ++ ASSERT_NE(nullptr, *chan); ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(*chan, "127.0.0.1:53055")); ++ ++ data->channel = *chan; ++ data->next_fd = 100; ++ data->getsockname_last_fd = ARES_SOCKET_BAD; ++ ++ memset(&funcs, 0, sizeof(funcs)); ++ funcs.version = 1; ++ funcs.flags = sockfunc_flags; ++ funcs.asocket = FakeSockSocket; ++ funcs.aclose = FakeSockClose; ++ funcs.asetsockopt = FakeSockSetsockopt; ++ funcs.aconnect = FakeSockConnect; ++ funcs.arecvfrom = FakeSockRecvfrom; ++ funcs.asendto = FakeSockSendto; ++ funcs.agetsockname = FakeSockGetsockname; ++ EXPECT_EQ(ARES_SUCCESS, ares_set_socket_functions_ex(*chan, &funcs, data)); ++} ++ ++// The getsockname function runs for every new connection, after the checks ++// that follow the socket-configure and socket-create callbacks. Reconfiguring ++// from it must not leave the connection registered on the removed server. ++TEST_F(LibraryTest, ReconfigureInGetsocknameNoUseAfterFree) { ++ ares_channel_t *chan = nullptr; ++ FakeSockData data; ++ ++ memset(&data, 0, sizeof(data)); ++ FakeSockInit(&chan, &data, 0, 0); ++ data.getsockname_reconfigure = true; ++ ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ FakeSockQueryCallback, &data, NULL); ++ EXPECT_FALSE(data.getsockname_reconfigure); ++ ++ // The first connection's descriptor: no longer known to the channel. ++ ares_process_fd(chan, 100, ARES_SOCKET_BAD); ++ ++ // Moved to the new server. ++ EXPECT_FALSE(data.done); ++ EXPECT_EQ((size_t)1, ares_queue_active_queries(chan)); ++ ++ ares_cancel(chan); ++ EXPECT_TRUE(data.done); ++ EXPECT_EQ(ARES_ECANCELLED, data.status); ++ EXPECT_EQ((size_t)0, data.bad_fd_calls); ++ EXPECT_EQ((size_t)0, data.sock_state_bad); ++ ares_destroy(chan); ++} ++ ++// With TCP Fast Open the first getsockname may fail, and is retried after the ++// first write -- from inside ares_conn_write(), after the send function has ++// returned. Reconfiguring from that retry closes the connection the query was ++// just written on. ++TEST_F(LibraryTest, ReconfigureInFastOpenGetsocknameNoUseAfterFree) { ++ ares_channel_t *chan = nullptr; ++ FakeSockData data; ++ ++ memset(&data, 0, sizeof(data)); ++ FakeSockInit(&chan, &data, ARES_FLAG_USEVC, 0); ++ data.tfo = true; ++ data.getsockname_fail_first = true; ++ data.getsockname_reconfigure = true; ++ ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ FakeSockQueryCallback, &data, NULL); ++ EXPECT_FALSE(data.getsockname_reconfigure); ++ ++ // Moved to the new server. ++ EXPECT_FALSE(data.done); ++ EXPECT_EQ((size_t)1, ares_queue_active_queries(chan)); ++ EXPECT_EQ((size_t)0, data.sock_state_bad); ++ ++ ares_cancel(chan); ++ EXPECT_TRUE(data.done); ++ EXPECT_EQ(ARES_ECANCELLED, data.status); ++ EXPECT_EQ((size_t)0, data.bad_fd_calls); ++ ares_destroy(chan); ++} ++ ++// A non-blocking receive function that reconfigures the servers and returns ++// an answer. The connection it read from is closed, so the answer must be ++// dropped -- the query has already moved to the new server -- and the ++// receive function must not be called again on the closed connection. ++TEST_F(LibraryTest, ReconfigureInRecvDropsStaleAnswer) { ++ ares_channel_t *chan = nullptr; ++ FakeSockData data; ++ ++ memset(&data, 0, sizeof(data)); ++ FakeSockInit(&chan, &data, 0, ARES_SOCKFUNC_FLAG_NONBLOCKING); ++ ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ FakeSockQueryCallback, &data, NULL); ++ ASSERT_NE((size_t)0, data.query_len); ++ ++ data.recv_reconfigure = true; ++ ares_process_fd(chan, 100, ARES_SOCKET_BAD); ++ EXPECT_FALSE(data.recv_reconfigure); ++ ++ EXPECT_EQ((size_t)1, data.recv_calls); ++ EXPECT_EQ((size_t)0, data.bad_fd_calls); ++ // Still in flight on the new server. ++ EXPECT_FALSE(data.done); ++ EXPECT_EQ((size_t)1, ares_queue_active_queries(chan)); ++ ++ ares_cancel(chan); ++ EXPECT_TRUE(data.done); ++ EXPECT_EQ(ARES_ECANCELLED, data.status); ++ ares_destroy(chan); ++} ++ ++// As above, but the answer comes from an earlier receive call, and a later ++// call -- which has nothing more to read -- reconfigures the servers. The ++// answer is already buffered on the connection that call tore down, and must ++// be dropped with it. ++TEST_F(LibraryTest, ReconfigureInRecvDropsBufferedAnswer) { ++ ares_channel_t *chan = nullptr; ++ FakeSockData data; ++ ++ memset(&data, 0, sizeof(data)); ++ FakeSockInit(&chan, &data, 0, ARES_SOCKFUNC_FLAG_NONBLOCKING); ++ ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ FakeSockQueryCallback, &data, NULL); ++ ASSERT_NE((size_t)0, data.query_len); ++ ++ data.recv_answer_then_reconfigure = true; ++ ares_process_fd(chan, 100, ARES_SOCKET_BAD); ++ EXPECT_FALSE(data.recv_answer_then_reconfigure); ++ ++ EXPECT_EQ((size_t)2, data.recv_calls); ++ EXPECT_EQ((size_t)0, data.bad_fd_calls); ++ // Still in flight on the new server. ++ EXPECT_FALSE(data.done); ++ EXPECT_EQ((size_t)1, ares_queue_active_queries(chan)); ++ ++ ares_cancel(chan); ++ EXPECT_TRUE(data.done); ++ EXPECT_EQ(ARES_ECANCELLED, data.status); ++ ares_destroy(chan); ++} ++ ++// The close function is application code too. With no socket-state callback ++// to carry the descriptor, it runs inline while ares_check_cleanup_conns() ++// walks the server list and each server's connections, closing idle ones. ++// Reconfiguring from it frees the list nodes that walk holds. ++TEST_F(LibraryTest, ReconfigureInCloseNoUseAfterFree) { ++ ares_channel_t *chan = nullptr; ++ FakeSockData data; ++ ++ memset(&data, 0, sizeof(data)); ++ FakeSockInit(&chan, &data, 0, 0, false); ++ ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ FakeSockQueryCallback, &data, NULL); ++ ASSERT_NE((size_t)0, data.query_len); ++ ++ // Answer it; the now idle connection is then closed. ++ data.recv_answer = true; ++ data.close_reconfigure = true; ++ ares_process_fd(chan, 100, ARES_SOCKET_BAD); ++ EXPECT_FALSE(data.recv_answer); ++ EXPECT_FALSE(data.close_reconfigure); ++ ++ EXPECT_TRUE(data.done); ++ // The fake answer carries no records. ++ EXPECT_EQ(ARES_ENODATA, data.status); ++ EXPECT_EQ((size_t)0, ares_queue_active_queries(chan)); ++ EXPECT_EQ((size_t)0, data.bad_fd_calls); ++ ares_destroy(chan); ++} ++ + // The second route to the same freed connection, and the one that drove the + // change from suppressing the idle sweep to deferring the notification: + // reconfiguring the servers from the socket-state callback destroys the server diff --git a/meta-oe/recipes-support/c-ares/c-ares/0005-ares_process-only-accept-an-answer-on-the-right-connection.patch b/meta-oe/recipes-support/c-ares/c-ares/0005-ares_process-only-accept-an-answer-on-the-right-connection.patch new file mode 100644 index 0000000000..20fef5d2f0 --- /dev/null +++ b/meta-oe/recipes-support/c-ares/c-ares/0005-ares_process-only-accept-an-answer-on-the-right-connection.patch @@ -0,0 +1,575 @@ +From c8bd9ab53329f66ec0c395a11002a5696669b147 Mon Sep 17 00:00:00 2001 +From: Brad House +Date: Mon, 19 Oct 2026 11:53:54 -0400 +Subject: [PATCH] [Backport v1.34] ares_process: only accept an answer on the + connection its query was sent on (#1361) +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Backport of b6f8a9b47e17c681e092a74d05d73bbb35c89a39 to `v1.34`. See +that commit for the full description. + +**Conflicts:** `src/lib/ares_socket.h` only — v1.34 aligns the +neighbouring prototypes differently. Resolved by taking the new doc +comments and the `ares_sockaddr_addr_port_eq()` prototype, then +re-running clang-format for the v1.34 alignment (which also re-wraps the +new `SendData()` declaration in `test/ares-test.h`). All other files +applied unchanged; the `test/` diffs match main exactly. + +**Tests (local, macOS, Debug, Ninja):** +- ASAN+UBSAN and `-DCARES_WERROR=ON` builds: `arestest -4 +--gtest_filter='-*Live*'` — 693/693 passed in both. +- With the `src/` changes reverted, the 4 new test instances fail +(`UDPAnswerFromWrongPortDropped`, `AnswerOnOtherServerConnectionDropped` +UDP/TCP, `CookielessAnswerOnOtherServerDropped`); they pass with them. +- `git clang-format --diff upstream/v1.34` clean. Also tested together +with the other two v1.34 backports (both orders apply cleanly): 699/699 +passed under ASAN+UBSAN and `-Werror`. + +Signed-off-by: Brad House +Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/c8bd9ab53329f66ec0c395a11002a5696669b147] +GHSA: GHSA-fqh5-3x7m-wp44 +--- + src/lib/ares_conn.c | 11 ++- + src/lib/ares_process.c | 18 ++++ + src/lib/ares_socket.c | 24 +++++ + src/lib/ares_socket.h | 21 ++++ + test/ares-test-mock.cc | 218 +++++++++++++++++++++++++++++++++++++++++ + test/ares-test.cc | 86 +++++++++------- + test/ares-test.h | 12 +++ + 7 files changed, 355 insertions(+), 35 deletions(-) + +diff --git a/src/lib/ares_conn.c b/src/lib/ares_conn.c +index 5e0827fbdf..b868053e62 100644 +--- a/src/lib/ares_conn.c ++++ b/src/lib/ares_conn.c +@@ -252,9 +252,16 @@ ares_conn_err_t ares_conn_read(ares_conn_t *conn, void *data, size_t len, + (struct sockaddr *)&sa_storage, &salen, read_bytes); + + #ifdef HAVE_RECVFROM ++ /* The socket is connect()ed, so the kernel normally drops datagrams from ++ * any other address or port already. Application-provided socket ++ * functions might not filter on connect, so also check here that the ++ * datagram came from the server's address and UDP port. RFC 5452 ++ * section 9.1 only requires the address to match; matching the port too ++ * keeps one server from answering for another on the same address. */ + if (err == ARES_CONN_ERR_SUCCESS && +- !ares_sockaddr_addr_eq((struct sockaddr *)&sa_storage, +- &conn->server->addr)) { ++ !ares_sockaddr_addr_port_eq((struct sockaddr *)&sa_storage, ++ &conn->server->addr, ++ conn->server->udp_port)) { + err = ARES_CONN_ERR_WOULDBLOCK; + } + #endif +diff --git a/src/lib/ares_process.c b/src/lib/ares_process.c +index 5686b077a6..06d0ca507c 100644 +--- a/src/lib/ares_process.c ++++ b/src/lib/ares_process.c +@@ -1117,6 +1117,24 @@ static ares_status_t process_answer(ares_channel_t *channel, + goto cleanup; + } + ++ /* RFC 5452 section 9.1: only accept a response that arrives on the ++ * connection the query was sent on, and so from the server it was sent to. ++ * For UDP, ares_conn_read() also drops a datagram whose source address or ++ * port is not the server's; matching the port is hardening beyond RFC 5452 ++ * section 9.1, which only requires the address to match. Otherwise any ++ * server we hold a connection to could answer, and get cached, a query that ++ * was only ever sent to some other server, and the cookie check below would ++ * run against the wrong server's cookie state. Treat it like an unknown ++ * query id, before anything acts on it (cookies, server health, the cache). ++ * Our caller has already consumed the message from the connection's buffer, ++ * so TCP framing stays in sync. A query not attached to any connection ++ * (query->conn == NULL) never matches. This also drops a late answer from ++ * a server tried before a retry. */ ++ if (query->conn != conn) { ++ status = ARES_SUCCESS; ++ goto cleanup; ++ } ++ + /* Validate DNS cookie in response. This function may need to requeue the + * query. */ + if (ares_cookie_validate(query, rdnsrec, conn, now, requeue) +diff --git a/src/lib/ares_socket.c b/src/lib/ares_socket.c +index 4ad3034021..0a12935ab7 100644 +--- a/src/lib/ares_socket.c ++++ b/src/lib/ares_socket.c +@@ -127,6 +127,30 @@ ares_bool_t ares_sockaddr_addr_eq(const struct sockaddr *sa, + return ARES_FALSE; /* different */ + } + ++ares_bool_t ares_sockaddr_addr_port_eq(const struct sockaddr *sa, ++ const struct ares_addr *aa, ++ unsigned short port) ++{ ++ unsigned short sa_port; ++ ++ if (!ares_sockaddr_addr_eq(sa, aa)) { ++ return ARES_FALSE; ++ } ++ ++ /* ares_sockaddr_addr_eq() only matches AF_INET and AF_INET6 */ ++ if (sa->sa_family == AF_INET) { ++ sa_port = (CARES_INADDR_CAST(const struct sockaddr_in *, sa))->sin_port; ++ } else { ++ sa_port = (CARES_INADDR_CAST(const struct sockaddr_in6 *, sa))->sin6_port; ++ } ++ ++ if (ntohs(sa_port) != port) { ++ return ARES_FALSE; ++ } ++ ++ return ARES_TRUE; ++} ++ + ares_conn_err_t ares_socket_write(ares_channel_t *channel, ares_socket_t fd, + const void *data, size_t len, size_t *written, + const struct sockaddr *sa, +diff --git a/src/lib/ares_socket.h b/src/lib/ares_socket.h +index 24a99ab331..f7128e3493 100644 +--- a/src/lib/ares_socket.h ++++ b/src/lib/ares_socket.h +@@ -139,8 +139,29 @@ typedef enum { + ARES_CONN_ERR_FAILURE = 99 /*!< Generic failure */ + } ares_conn_err_t; + ++/*! Compare the IP address of a socket address with an ares_addr. The port ++ * in the socket address is ignored. ++ * ++ * \param[in] sa Socket address (AF_INET or AF_INET6) ++ * \param[in] aa Address to compare against ++ * \return ARES_TRUE if the address families and IP addresses are equal, ++ * ARES_FALSE otherwise ++ */ + ares_bool_t ares_sockaddr_addr_eq(const struct sockaddr *sa, + const struct ares_addr *aa); ++ ++/*! Compare the IP address and port of a socket address with an ares_addr and ++ * port. ++ * ++ * \param[in] sa Socket address (AF_INET or AF_INET6) ++ * \param[in] aa Address to compare against ++ * \param[in] port Port to compare against, in host byte order ++ * \return ARES_TRUE if the address families, IP addresses and ports are ++ * equal, ARES_FALSE otherwise ++ */ ++ares_bool_t ares_sockaddr_addr_port_eq(const struct sockaddr *sa, ++ const struct ares_addr *aa, ++ unsigned short port); + ares_status_t ares_socket_configure(ares_channel_t *channel, int family, + ares_bool_t is_tcp, ares_socket_t fd); + ares_conn_err_t ares_socket_enable_tfo(const ares_channel_t *channel, +diff --git a/test/ares-test-mock.cc b/test/ares-test-mock.cc +index d233f9070f..058dc93001 100644 +--- a/test/ares-test-mock.cc ++++ b/test/ares-test-mock.cc +@@ -3363,6 +3363,7 @@ struct FakeSockData { + unsigned char query[512]; + size_t query_len; + struct sockaddr_in peer; ++ unsigned short recv_port; /* network order; 0 reports the peer's port */ + size_t recv_calls; + size_t bad_fd_calls; + size_t sock_state_bad; +@@ -3471,6 +3472,9 @@ static ares_ssize_t FakeSockRecvfrom(ares_socket_t sock, void *buffer, + if (address != NULL && address_len != NULL && + *address_len >= (ares_socklen_t)sizeof(d->peer)) { + memcpy(address, &d->peer, sizeof(d->peer)); ++ if (d->recv_port != 0) { ++ reinterpret_cast(address)->sin_port = d->recv_port; ++ } + *address_len = sizeof(d->peer); + } + return static_cast(d->query_len); +@@ -3710,6 +3714,42 @@ TEST_F(LibraryTest, ReconfigureInRecvDropsBufferedAnswer) { + ares_destroy(chan); + } + ++// Socket functions need not filter on connect(), so ares_conn_read() checks ++// a UDP datagram's source itself. An answer reported from the server's ++// address but another port (here 127.0.0.1:53 for a server at ++// 127.0.0.1:53055) must be dropped, so that one server cannot answer for ++// another on the same address. The same answer from the right port is then ++// accepted. ++TEST_F(LibraryTest, UDPAnswerFromWrongPortDropped) { ++ ares_channel_t *chan = nullptr; ++ FakeSockData data; ++ ++ memset(&data, 0, sizeof(data)); ++ FakeSockInit(&chan, &data, 0, ARES_SOCKFUNC_FLAG_NONBLOCKING); ++ ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ FakeSockQueryCallback, &data, NULL); ++ ASSERT_NE((size_t)0, data.query_len); ++ ASSERT_EQ(htons(53055), data.peer.sin_port); ++ ++ data.recv_port = htons(53); ++ data.recv_answer = true; ++ ares_process_fd(chan, 100, ARES_SOCKET_BAD); ++ EXPECT_FALSE(data.recv_answer); ++ EXPECT_FALSE(data.done); ++ EXPECT_EQ((size_t)1, ares_queue_active_queries(chan)); ++ ++ data.recv_port = 0; ++ data.recv_answer = true; ++ ares_process_fd(chan, 100, ARES_SOCKET_BAD); ++ EXPECT_FALSE(data.recv_answer); ++ EXPECT_TRUE(data.done); ++ // The fake answer carries no records. ++ EXPECT_EQ(ARES_ENODATA, data.status); ++ EXPECT_EQ((size_t)0, ares_queue_active_queries(chan)); ++ ares_destroy(chan); ++} ++ + // The close function is application code too. With no socket-state callback + // to carry the descriptor, it runs inline while ares_check_cleanup_conns() + // walks the server list and each server's connections, closing idle ones. +@@ -5530,5 +5570,183 @@ INSTANTIATE_TEST_SUITE_P(TransportModes, ServerRecoveryMultiMockTest, ::testing: + + INSTANTIATE_TEST_SUITE_P(TransportModes, ServerRecoveryNoProbeMultiMockTest, ::testing::ValuesIn(ares::test::families_modes), PrintFamilyMode); + ++// An answer is only accepted on the connection its query was sent on ++// (RFC 5452 section 9.1). Two servers: #0 is demoted by a SERVFAIL so a later ++// query goes only to #1, while #0's connection stays open (STAYOPEN). Server ++// #0 then answers that query on its own connection. The answer must be ++// dropped without side effects, and the query must then complete normally. ++class ReplyConnMultiMockTest ++ : public MockChannelOptsTest, ++ public ::testing::WithParamInterface< std::pair > { ++ public: ++ ReplyConnMultiMockTest() ++ : MockChannelOptsTest(2, GetParam().first, GetParam().second, false, ++ FillOptions(&opts_), ++ ARES_OPT_FLAGS | ARES_OPT_TRIES | ++ ARES_OPT_SERVER_FAILOVER | ARES_OPT_NOROTATE) {} ++ ++ static struct ares_options* FillOptions(struct ares_options *opts) { ++ memset(opts, 0, sizeof(struct ares_options)); ++ /* Keep the demoted server's connection open; no DNS 0x20 so the replies ++ * built here match the question exactly */ ++ opts->flags = ARES_FLAG_STAYOPEN | ARES_FLAG_EDNS; ++ /* One try per server: the query goes to #1, then on timeout to #0 */ ++ opts->tries = 1; ++ /* Never probe the demoted server, so the query is sent only to #1 */ ++ opts->server_failover_opts.retry_chance = 0; ++ opts->server_failover_opts.retry_delay = 10000; ++ return opts; ++ } ++ private: ++ struct ares_options opts_; ++}; ++ ++static std::string ReplyConnFirstA(const QueryResult &result) ++{ ++ const ares_dns_rr_t *rr; ++ char addr[64]; ++ ++ if (result.dnsrec_.dnsrec_ == nullptr || ++ ares_dns_record_rr_cnt(result.dnsrec_.dnsrec_, ARES_SECTION_ANSWER) == 0) { ++ return ""; ++ } ++ rr = ares_dns_record_rr_get_const(result.dnsrec_.dnsrec_, ++ ARES_SECTION_ANSWER, 0); ++ if (ares_dns_rr_get_type(rr) != ARES_REC_TYPE_A || ++ ares_inet_ntop(AF_INET, ares_dns_rr_get_addr(rr, ARES_RR_A_ADDR), addr, ++ sizeof(addr)) == nullptr) { ++ return ""; ++ } ++ return addr; ++} ++ ++TEST_P(ReplyConnMultiMockTest, AnswerOnOtherServerConnectionDropped) { ++ DNSPacket warm_servfail; ++ warm_servfail.set_response().set_aa().set_rcode(SERVFAIL) ++ .add_question(new DNSQuestion("warmup.example", T_A)); ++ DNSPacket warm_ok; ++ warm_ok.set_response().set_aa() ++ .add_question(new DNSQuestion("warmup.example", T_A)) ++ .add_answer(new DNSARR("warmup.example", 100, {1, 1, 1, 1})); ++ DNSPacket forged; ++ forged.set_response().set_aa() ++ .add_question(new DNSQuestion("victim.example", T_A)) ++ .add_answer(new DNSARR("victim.example", 100, {6, 6, 6, 6})); ++ DNSPacket genuine; ++ genuine.set_response().set_aa() ++ .add_question(new DNSQuestion("victim.example", T_A)) ++ .add_answer(new DNSARR("victim.example", 100, {1, 2, 3, 4})); ++ unsigned short qid = 0; ++ ++ /* Demote #0, leaving a connection to it open */ ++ EXPECT_CALL(*servers_[0], OnRequest("warmup.example", T_A)) ++ .WillOnce(SetReply(servers_[0].get(), &warm_servfail)); ++ EXPECT_CALL(*servers_[1], OnRequest("warmup.example", T_A)) ++ .WillOnce(SetReply(servers_[1].get(), &warm_ok)); ++ QueryResult warm; ++ ares_query_dnsrec(channel_, "warmup.example", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, QueryCallback, &warm, NULL); ++ Process(); ++ ASSERT_TRUE(warm.done_); ++ ASSERT_EQ(ARES_SUCCESS, warm.status_); ++ ++ /* The query goes only to #1, which does not answer. Meanwhile #0 answers ++ * it on #0's own connection. That answer must be dropped, so the query ++ * times out on #1 and is retried on #0, whose genuine answer is accepted on ++ * the same (still in sync, for TCP) connection. */ ++ EXPECT_CALL(*servers_[1], OnRequest("victim.example", T_A)) ++ .WillOnce(InvokeWithoutArgs([&]() { ++ servers_[0]->SendUnsolicited(&forged, qid); ++ servers_[1]->SetReplyData(std::vector()); ++ })); ++ EXPECT_CALL(*servers_[0], OnRequest("victim.example", T_A)) ++ .WillOnce(SetReply(servers_[0].get(), &genuine)); ++ QueryResult result; ++ ares_query_dnsrec(channel_, "victim.example", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, QueryCallback, &result, &qid); ++ Process(); ++ ASSERT_TRUE(result.done_); ++ EXPECT_EQ(ARES_SUCCESS, result.status_); ++ EXPECT_EQ("1.2.3.4", ReplyConnFirstA(result)); ++ EXPECT_EQ(1, (int)result.timeouts_); ++} ++ ++// DNS cookies (RFC 7873) are per-server state, validated against the server ++// the query was sent to. #1 supports cookies, #0 does not. A cookie-less ++// answer arriving on #0's connection for a query sent only to #1 must not be ++// accepted: it would otherwise be checked against #0's cookie state and pass. ++class ReplyConnCookieMultiMockTest ++ : public MockChannelOptsTest, ++ public ::testing::WithParamInterface { ++ public: ++ ReplyConnCookieMultiMockTest() ++ : MockChannelOptsTest(2, GetParam(), false, false, ++ ReplyConnMultiMockTest::FillOptions(&opts_), ++ ARES_OPT_FLAGS | ARES_OPT_TRIES | ++ ARES_OPT_SERVER_FAILOVER | ARES_OPT_NOROTATE) {} ++ private: ++ struct ares_options opts_; ++}; ++ ++TEST_P(ReplyConnCookieMultiMockTest, CookielessAnswerOnOtherServerDropped) { ++ std::vector server_cookie = { 1, 2, 3, 4, 5, 6, 7, 8 }; ++ DNSPacket warm_servfail; ++ warm_servfail.set_response().set_aa().set_rcode(SERVFAIL) ++ .add_question(new DNSQuestion("warmup.example", T_A)); ++ DNSPacket warm_ok; ++ warm_ok.set_response().set_aa() ++ .add_question(new DNSQuestion("warmup.example", T_A)) ++ .add_answer(new DNSARR("warmup.example", 100, {1, 1, 1, 1})) ++ .add_additional(new DNSOptRR(0, 0, 0, 1280, { }, server_cookie, false)); ++ DNSPacket forged; ++ forged.set_response().set_aa() ++ .add_question(new DNSQuestion("victim.example", T_A)) ++ .add_answer(new DNSARR("victim.example", 100, {6, 6, 6, 6})); ++ DNSPacket genuine; ++ genuine.set_response().set_aa() ++ .add_question(new DNSQuestion("victim.example", T_A)) ++ .add_answer(new DNSARR("victim.example", 100, {1, 2, 3, 4})); ++ unsigned short qid = 0; ++ ++ /* #0 answers without a cookie (and is demoted); #1 answers with one, so ++ * #1's cookie state becomes SUPPORTED */ ++ EXPECT_CALL(*servers_[0], OnRequest("warmup.example", T_A)) ++ .WillOnce(SetReply(servers_[0].get(), &warm_servfail)); ++ EXPECT_CALL(*servers_[1], OnRequest("warmup.example", T_A)) ++ .WillOnce(SetReply(servers_[1].get(), &warm_ok)); ++ QueryResult warm; ++ ares_query_dnsrec(channel_, "warmup.example", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, QueryCallback, &warm, NULL); ++ Process(); ++ ASSERT_TRUE(warm.done_); ++ ASSERT_EQ(ARES_SUCCESS, warm.status_); ++ size_t cookie_len = 0; ++ fetch_server_cookie(warm.dnsrec_.dnsrec_, &cookie_len); ++ ASSERT_EQ(server_cookie.size(), cookie_len); ++ ++ /* The cookie-protected query goes only to #1; a cookie-less answer for it ++ * arrives on #0's connection and must be dropped. The retry to #0 is then ++ * legitimately answered by #0, which does not use cookies. */ ++ EXPECT_CALL(*servers_[1], OnRequest("victim.example", T_A)) ++ .WillOnce(InvokeWithoutArgs([&]() { ++ servers_[0]->SendUnsolicited(&forged, qid); ++ servers_[1]->SetReplyData(std::vector()); ++ })); ++ EXPECT_CALL(*servers_[0], OnRequest("victim.example", T_A)) ++ .WillOnce(SetReply(servers_[0].get(), &genuine)); ++ QueryResult result; ++ ares_query_dnsrec(channel_, "victim.example", ARES_CLASS_IN, ++ ARES_REC_TYPE_A, QueryCallback, &result, &qid); ++ Process(); ++ ASSERT_TRUE(result.done_); ++ EXPECT_EQ(ARES_SUCCESS, result.status_); ++ EXPECT_EQ("1.2.3.4", ReplyConnFirstA(result)); ++ EXPECT_EQ(1, (int)result.timeouts_); ++} ++ ++INSTANTIATE_TEST_SUITE_P(TransportModes, ReplyConnMultiMockTest, ::testing::ValuesIn(ares::test::families_modes), PrintFamilyMode); ++ ++INSTANTIATE_TEST_SUITE_P(AddressFamilies, ReplyConnCookieMultiMockTest, ::testing::ValuesIn(ares::test::families), PrintFamily); ++ + } // namespace test + } // namespace ares +diff --git a/test/ares-test.cc b/test/ares-test.cc +index d333ee9419..0b3ac12c09 100644 +--- a/test/ares-test.cc ++++ b/test/ares-test.cc +@@ -448,6 +448,9 @@ MockServer::MockServer(int family, unsigned short port) + // Create a TCP socket to receive data on. + tcp_data_ = NULL; + tcp_data_len_ = 0; ++ last_fd_ = ARES_SOCKET_BAD; ++ memset(&last_addr_, 0, sizeof(last_addr_)); ++ last_addrlen_ = 0; + tcpfd_ = socket(family, SOCK_STREAM, 0); + EXPECT_NE(ARES_SOCKET_BAD, tcpfd_); + int optval = 1; +@@ -710,6 +713,50 @@ std::set MockServer::fds() const { + return result; + } + ++void MockServer::SendData(ares_socket_t fd, struct sockaddr_storage *addr, ++ ares_socklen_t addrlen, int qid, ++ std::vector reply) { ++ int flags = 0; ++ ++ if (reply.size() >= 2) { ++ // Overwrite the query ID if space to do so. ++ reply[0] = (byte)((qid >> 8) & 0xff); ++ reply[1] = (byte)(qid & 0xff); ++ } ++ if (verbose) { ++ std::cerr << "sending reply " << PacketToString(reply) ++ << " on port " << ((fd == udpfd_) ? udpport_ : tcpport_) ++ << ":" << getaddrport(addr) << std::endl; ++ } ++ ++ // Prefix with 2-byte length if TCP. ++ if (fd != udpfd_) { ++ int len = (int)reply.size(); ++ std::vector vlen = {(byte)((len & 0xFF00) >> 8), (byte)(len & 0xFF)}; ++ reply.insert(reply.begin(), vlen.begin(), vlen.end()); ++ // Also, don't bother with the destination address. ++ addr = nullptr; ++ addrlen = 0; ++ } ++ ++#ifdef MSG_NOSIGNAL ++ flags |= MSG_NOSIGNAL; ++#endif ++ ++ ares_ssize_t rc = (ares_ssize_t)sendto(fd, BYTE_CAST reply.data(), (SEND_TYPE_ARG3)reply.size(), flags, ++ (struct sockaddr *)addr, addrlen); ++ if (rc < static_cast(reply.size())) { ++ std::cerr << "Failed to send full reply, rc=" << rc << std::endl; ++ } ++} ++ ++void MockServer::SendUnsolicited(const DNSPacket *reply, unsigned short qid) { ++ ASSERT_NE(ARES_SOCKET_BAD, last_fd_); ++ ASSERT_TRUE(last_fd_ == udpfd_ || connfds_.count(last_fd_) != 0) ++ << "the most recent requester's connection has closed"; ++ SendData(last_fd_, &last_addr_, last_addrlen_, qid, reply->data()); ++} ++ + void MockServer::ProcessRequest(ares_socket_t fd, struct sockaddr_storage* addr, + ares_socklen_t addrlen, const std::vector &req, + const std::string &reqstr, +@@ -717,10 +764,14 @@ void MockServer::ProcessRequest(ares_socket_t fd, struct sockaddr_storage* addr, + + /* DNS 0x20 will mix case, do case-insensitive matching of name in request */ + char lower_name[256]; +- int flags = 0; + + arestest_strtolower(lower_name, name, sizeof(lower_name)); + ++ // Remember the requester so SendUnsolicited() can reach it. ++ last_fd_ = fd; ++ memcpy(&last_addr_, addr, sizeof(last_addr_)); ++ last_addrlen_ = addrlen; ++ + // Before processing, let gMock know the request is happening. + OnRequest(lower_name, rrtype); + +@@ -747,43 +798,12 @@ void MockServer::ProcessRequest(ares_socket_t fd, struct sockaddr_storage* addr, + return; + } + +- // Make a local copy of the current pending reply. +- std::vector reply = exact_reply_; +- + if (qid_ >= 0) { + // Use the explicitly specified query ID. + qid = qid_; + } +- if (reply.size() >= 2) { +- // Overwrite the query ID if space to do so. +- reply[0] = (byte)((qid >> 8) & 0xff); +- reply[1] = (byte)(qid & 0xff); +- } +- if (verbose) { +- std::cerr << "sending reply " << PacketToString(reply) +- << " on port " << ((fd == udpfd_) ? udpport_ : tcpport_) +- << ":" << getaddrport(addr) << std::endl; +- } +- +- // Prefix with 2-byte length if TCP. +- if (fd != udpfd_) { +- int len = (int)reply.size(); +- std::vector vlen = {(byte)((len & 0xFF00) >> 8), (byte)(len & 0xFF)}; +- reply.insert(reply.begin(), vlen.begin(), vlen.end()); +- // Also, don't bother with the destination address. +- addr = nullptr; +- addrlen = 0; +- } + +-#ifdef MSG_NOSIGNAL +- flags |= MSG_NOSIGNAL; +-#endif +- +- ares_ssize_t rc = (ares_ssize_t)sendto(fd, BYTE_CAST reply.data(), (SEND_TYPE_ARG3)reply.size(), flags, +- (struct sockaddr *)addr, addrlen); +- if (rc < static_cast(reply.size())) { +- std::cerr << "Failed to send full reply, rc=" << rc << std::endl; +- } ++ SendData(fd, addr, addrlen, qid, exact_reply_); + + if (disconnect_after_reply_ && fd != udpfd_) { + disconnect_after_reply_ = false; +diff --git a/test/ares-test.h b/test/ares-test.h +index 2b973c3982..170c284f26 100644 +--- a/test/ares-test.h ++++ b/test/ares-test.h +@@ -303,6 +303,12 @@ class MockServer { + disconnect_after_reply_ = true; + } + ++ // Send reply, with the given query ID, to the client of the most recent ++ // request this server received, on the socket that request arrived on. The ++ // client did not send this server a request with that query ID: this models ++ // a server answering a query that was only sent to some other server. ++ void SendUnsolicited(const DNSPacket *reply, unsigned short qid); ++ + // The set of file descriptors that the server handles. + std::set fds() const; + +@@ -327,6 +333,8 @@ class MockServer { + int rrtype); + void ProcessPacket(ares_socket_t fd, struct sockaddr_storage *addr, + ares_socklen_t addrlen, byte *data, int len); ++ void SendData(ares_socket_t fd, struct sockaddr_storage *addr, ++ ares_socklen_t addrlen, int qid, std::vector reply); + unsigned short udpport_; + unsigned short tcpport_; + ares_socket_t udpfd_; +@@ -339,6 +347,10 @@ class MockServer { + bool disconnect_after_reply_; + unsigned char *tcp_data_; + size_t tcp_data_len_; ++ // Where the most recent request came from, for SendUnsolicited(). ++ ares_socket_t last_fd_; ++ struct sockaddr_storage last_addr_; ++ ares_socklen_t last_addrlen_; + }; + + // Test fixture that uses a mock DNS server. diff --git a/meta-oe/recipes-support/c-ares/c-ares/0006-ares_save_options-read-channel-config-under-lock.patch b/meta-oe/recipes-support/c-ares/c-ares/0006-ares_save_options-read-channel-config-under-lock.patch new file mode 100644 index 0000000000..76c072dd7e --- /dev/null +++ b/meta-oe/recipes-support/c-ares/c-ares/0006-ares_save_options-read-channel-config-under-lock.patch @@ -0,0 +1,243 @@ +From 25a6911370878d4b617b44b142ea0e49d1ccede6 Mon Sep 17 00:00:00 2001 +From: Brad House +Date: Mon, 19 Oct 2026 11:53:59 -0400 +Subject: [PATCH] [Backport v1.34] ares_save_options: read channel + configuration under the channel lock (#1362) +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Backport of 5d878a580a8b57b51d15e2725cf6775c8e7bca0e to `v1.34`. See +that commit for the full description. + +**Conflicts:** none; cherry-picked cleanly. + +**Tests (local, macOS, Debug, Ninja):** +- ASAN+UBSAN and `-DCARES_WERROR=ON` builds: `arestest -4 +--gtest_filter='-*Live*'` — 691/691 passed in both. +- With the `src/` changes reverted, the new `DupConcurrentSetServers` / +`SaveOptionsConcurrentSetServers` tests abort with an ASAN +heap-buffer-overflow; they pass with them. +- `git clang-format --diff upstream/v1.34` clean. Also tested together +with the other two v1.34 backports (both orders apply cleanly): 699/699 +passed under ASAN+UBSAN and `-Werror`. + +Signed-off-by: Brad House +Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/25a6911370878d4b617b44b142ea0e49d1ccede6] +GHSA: GHSA-ph6c-3cvx-mq6v +--- + src/lib/ares_init.c | 3 +- + src/lib/ares_options.c | 45 ++++++++++++++++++---- + test/ares-test-init.cc | 87 ++++++++++++++++++++++++++++++++++++++++++ + 3 files changed, 126 insertions(+), 9 deletions(-) + +diff --git a/src/lib/ares_init.c b/src/lib/ares_init.c +index 4758c5de56..85b2e13050 100644 +--- a/src/lib/ares_init.c ++++ b/src/lib/ares_init.c +@@ -483,7 +483,8 @@ int ares_dup(ares_channel_t **dest, const ares_channel_t *src) + *dest = NULL; /* in case of failure return NULL explicitly */ + + /* First get the options supported by the old ares_save_options() function, +- which is most of them */ ++ * which is most of them. ares_save_options() takes the src channel lock ++ * itself. No lock is held across ares_init_options(). */ + rc = (ares_status_t)ares_save_options(src, &opts, &optmask); + if (rc != ARES_SUCCESS) { + ares_destroy_options(&opts); +diff --git a/src/lib/ares_options.c b/src/lib/ares_options.c +index 2b5624bbea..5ea35b732e 100644 +--- a/src/lib/ares_options.c ++++ b/src/lib/ares_options.c +@@ -55,8 +55,8 @@ static struct in_addr *ares_save_opt_servers(const ares_channel_t *channel, + int *nservers) + { + ares_slist_node_t *snode; +- struct in_addr *out = +- ares_malloc_zero(ares_slist_len(channel->servers) * sizeof(*out)); ++ size_t cnt = ares_slist_len(channel->servers); ++ struct in_addr *out = ares_malloc_zero_array(cnt, sizeof(*out)); + + *nservers = 0; + +@@ -64,7 +64,11 @@ static struct in_addr *ares_save_opt_servers(const ares_channel_t *channel, + return NULL; + } + +- for (snode = ares_slist_node_first(channel->servers); snode != NULL; ++ /* Never write more entries than were allocated. The caller holds the ++ * channel lock so the server list cannot change underneath us; this is ++ * purely defensive. */ ++ for (snode = ares_slist_node_first(channel->servers); ++ snode != NULL && (size_t)*nservers < cnt; + snode = ares_slist_node_next(snode)) { + const ares_server_t *server = ares_slist_node_val(snode); + +@@ -79,9 +83,11 @@ static struct in_addr *ares_save_opt_servers(const ares_channel_t *channel, + return out; + } + +-/* Save options from initialized channel */ +-int ares_save_options(const ares_channel_t *channel, +- struct ares_options *options, int *optmask) ++/* Save options from initialized channel. Caller must hold the channel lock ++ * (if channel is not NULL). */ ++static ares_status_t ares_save_options_nolock(const ares_channel_t *channel, ++ struct ares_options *options, ++ int *optmask) + { + size_t i; + +@@ -150,7 +156,8 @@ int ares_save_options(const ares_channel_t *channel, + if (channel->optmask & ARES_OPT_DOMAINS) { + options->domains = NULL; + if (channel->ndomains) { +- options->domains = ares_malloc(channel->ndomains * sizeof(char *)); ++ options->domains = ++ ares_malloc_zero_array(channel->ndomains, sizeof(char *)); + if (!options->domains) { + return ARES_ENOMEM; + } +@@ -176,7 +183,8 @@ int ares_save_options(const ares_channel_t *channel, + if (channel->optmask & ARES_OPT_SORTLIST) { + options->sortlist = NULL; + if (channel->nsort) { +- options->sortlist = ares_malloc(channel->nsort * sizeof(struct apattern)); ++ options->sortlist = ++ ares_malloc_zero_array(channel->nsort, sizeof(*options->sortlist)); + if (!options->sortlist) { + return ARES_ENOMEM; + } +@@ -238,6 +246,27 @@ int ares_save_options(const ares_channel_t *channel, + return ARES_SUCCESS; + } + ++int ares_save_options(const ares_channel_t *channel, ++ struct ares_options *options, int *optmask) ++{ ++ ares_status_t status; ++ ++ if (channel == NULL) { ++ /* Preserve historic behavior: initialize the pointers so ++ * ares_destroy_options() is safe, then return ARES_ENODATA */ ++ return (int)ares_save_options_nolock(NULL, options, optmask); ++ } ++ ++ /* The configuration may be modified concurrently by other threads (e.g. ++ * ares_set_servers_csv()), so it must only be read with the channel lock ++ * held. */ ++ ares_channel_lock(channel); ++ status = ares_save_options_nolock(channel, options, optmask); ++ ares_channel_unlock(channel); ++ ++ return (int)status; ++} ++ + static ares_status_t ares_init_options_servers(ares_channel_t *channel, + const struct in_addr *servers, + size_t nservers) +diff --git a/test/ares-test-init.cc b/test/ares-test-init.cc +index b44211a1e4..1c5d0f2171 100644 +--- a/test/ares-test-init.cc ++++ b/test/ares-test-init.cc +@@ -25,6 +25,8 @@ + */ + #include "ares-test.h" + ++#include ++ + extern "C" { + #include "ares_private.h" + } +@@ -295,6 +297,91 @@ TEST_F(LibraryTest, FailChannelInit) { + ares_library_cleanup(); + } + ++// CARES_THREADS implies ares_threadsafety() is true ++#ifdef CARES_THREADS ++// Build a CSV list of n distinct IPv4 servers. ++static std::string ConfigRaceServerCsv(size_t n) ++{ ++ std::string csv; ++ for (size_t i = 0; i < n; i++) { ++ if (i != 0) { ++ csv += ","; ++ } ++ csv += "127.0." + std::to_string((i / 250) + 1) + "." + ++ std::to_string((i % 250) + 1) + ":5353"; ++ } ++ return csv; ++} ++ ++// Readers snapshot the channel configuration (via ares_dup() or ++// ares_save_options()) while a writer thread keeps swapping the server list ++// between a short and a long one. The configuration must only be read under ++// the channel lock; otherwise the saved server array is sized from one list ++// and filled from another (heap-buffer-overflow under ASAN). ++static void ConfigRaceRun(bool use_dup, size_t reader_loops) ++{ ++ const size_t nreaders = 4; ++ const std::string small_csv = ConfigRaceServerCsv(4); ++ const std::string large_csv = ConfigRaceServerCsv(400); ++ ares_channel_t *channel = nullptr; ++ std::atomic readers_done(0); ++ ++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&channel, nullptr, 0)); ++ ASSERT_NE(nullptr, channel); ++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(channel, small_csv.c_str())); ++ ++ // Writer runs until every reader finished; readers are bounded so the ++ // whole test is bounded. ++ std::thread writer([&]() { ++ size_t i = 0; ++ while (readers_done.load() < nreaders) { ++ ares_set_servers_csv(channel, ++ (i++ & 1) ? large_csv.c_str() : small_csv.c_str()); ++ } ++ }); ++ ++ std::vector readers; ++ for (size_t r = 0; r < nreaders; r++) { ++ readers.emplace_back([&]() { ++ for (size_t i = 0; i < reader_loops; i++) { ++ if (use_dup) { ++ ares_channel_t *dup = nullptr; ++ EXPECT_EQ(ARES_SUCCESS, ares_dup(&dup, channel)); ++ if (dup != nullptr) { ++ ares_destroy(dup); ++ } ++ } else { ++ struct ares_options opts; ++ int optmask = 0; ++ memset(&opts, 0, sizeof(opts)); ++ EXPECT_EQ(ARES_SUCCESS, ares_save_options(channel, &opts, &optmask)); ++ EXPECT_NE(0, optmask & ARES_OPT_SERVERS); ++ EXPECT_TRUE(opts.nservers == 4 || opts.nservers == 400); ++ ares_destroy_options(&opts); ++ } ++ } ++ readers_done++; ++ }); ++ } ++ ++ for (auto &t : readers) { ++ t.join(); ++ } ++ writer.join(); ++ ares_destroy(channel); ++} ++ ++TEST_F(LibraryTest, DupConcurrentSetServers) ++{ ++ ConfigRaceRun(true, 20); ++} ++ ++TEST_F(LibraryTest, SaveOptionsConcurrentSetServers) ++{ ++ ConfigRaceRun(false, 20000); ++} ++#endif ++ + #ifndef WIN32 + TEST_F(LibraryTest, EnvInit) { + ares_channel_t *channel = nullptr; diff --git a/meta-oe/recipes-support/c-ares/c-ares/0007-ares_inet_pton-reject-a-prefix-length.patch b/meta-oe/recipes-support/c-ares/c-ares/0007-ares_inet_pton-reject-a-prefix-length.patch new file mode 100644 index 0000000000..2cd1ea8c24 --- /dev/null +++ b/meta-oe/recipes-support/c-ares/c-ares/0007-ares_inet_pton-reject-a-prefix-length.patch @@ -0,0 +1,364 @@ +From 7e65b381c0b915aa5671ddc713080c87e15fc42f Mon Sep 17 00:00:00 2001 +From: Brad House +Date: Mon, 19 Oct 2026 12:24:52 -0400 +Subject: [PATCH] [Backport v1.34] ares_inet_pton: reject a prefix length, + always write the full address (#1363) +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Backport of 7b4ef8e555b611be6af39d913aa280cd1a348102 to `v1.34`. See +that commit for the full description. + +**Conflicts:** `test/ares-test-mock-ai.cc` only — the neighbouring +`FamilyV6IgnoresARecords` test (added on main by an unrelated change) +does not exist on v1.34. Resolved by adding only the new +`NumericHostRejectsPrefixLength` test at the same position. Other files +applied unchanged. + +**Also includes** the comment spelling fix from #1364 +(ead5557d1301328536c3920bd01759a1bff5ca9a): "unparseable" -> +"unparsable" in `src/lib/inet_net_pton.c` and +`test/ares-test-internal.cc`, so Codespell passes and the text matches +main. + +**Tests (local, macOS, Debug, Ninja):** +- ASAN+UBSAN and `-DCARES_WERROR=ON` builds: `arestest -4 +--gtest_filter='-*Live*'` — 693/693 passed in both. +- With the `src/` changes reverted, the 4 new test instances fail +(`InetNetPtoNPrefixZeroFills`, `InetPtoNRejectsPrefixLength`, +`NumericHostRejectsPrefixLength` UDP/TCP); they pass with them. +- `git clang-format --diff upstream/v1.34` clean. Also tested together +with the other two v1.34 backports (both orders apply cleanly): 699/699 +passed under ASAN+UBSAN and `-Werror`. + +Signed-off-by: Brad House +Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/7e65b381c0b915aa5671ddc713080c87e15fc42f] +GHSA: GHSA-cfcv-8v2j-qj6r +--- + docs/ares_inet_pton.3 | 18 ++++++++-- + src/lib/ares_inet_net_pton.h | 28 ++++++++++++++++ + src/lib/inet_net_pton.c | 65 ++++++++++++++++++++---------------- + test/ares-test-internal.cc | 54 ++++++++++++++++++++++++++++++ + test/ares-test-mock-ai.cc | 23 +++++++++++++ + 5 files changed, 157 insertions(+), 31 deletions(-) + +diff --git a/docs/ares_inet_pton.3 b/docs/ares_inet_pton.3 +index 34b2df063c..19c5fdfda3 100644 +--- a/docs/ares_inet_pton.3 ++++ b/docs/ares_inet_pton.3 +@@ -12,8 +12,9 @@ ares_inet_pton \- convert an IPv4 or IPv6 address from text to binary form + int ares_inet_pton(int \fIaf\fP, const char *\fIsrc\fP, void *\fIdst\fP); + .fi + .SH DESCRIPTION +-This is a portable version with the identical functionality of the commonly +-available \fIinet_pton\fP. ++This is a portable version of the commonly available \fIinet_pton\fP. It ++behaves the same for AF_INET6, and for AF_INET it additionally accepts the ++legacy forms described below. + + The ares_inet_pton() function converts the address in its standard text + presentation form into its numeric binary form. The \fBaf\fP argument shall +@@ -23,9 +24,20 @@ in. The \fBdst\fP argument points to a buffer into which the function stores + the numeric address; this shall be large enough to hold the numeric address + (32 bits for AF_INET, 128 bits for AF_INET6). + ++The \fBsrc\fP argument must be an address, not a network: a "/bits" prefix ++length suffix (CIDR notation) is not accepted and the function returns 0 for ++such input. On success, the whole address (4 bytes for AF_INET, 16 bytes for ++AF_INET6) is always written to \fBdst\fP. Versions of c-ares before 1.34.9 ++accepted a prefix length here. ++ ++Unlike POSIX \fIinet_pton\fP, AF_INET also accepts shortened forms such as ++"10.1" and hexadecimal forms such as "0x0a000001". Octets that are not given ++are set to zero, so "10.1" is 10.1.0.0. ++ + It returns 1 if the address was valid for the specified address family, or 0 + if the address was not parseable in the specified address family, or -1 if +-some system error occurred (in which case errno will have been set). ++the address family is not supported (in which case errno will have been set ++to EAFNOSUPPORT). + + .SH SEE ALSO + .BR ares_init (3), +diff --git a/src/lib/ares_inet_net_pton.h b/src/lib/ares_inet_net_pton.h +index e3ed83a3cb..e1a6f2d71e 100644 +--- a/src/lib/ares_inet_net_pton.h ++++ b/src/lib/ares_inet_net_pton.h +@@ -26,6 +26,34 @@ + #ifndef HEADER_CARES_INET_NET_PTON_H + #define HEADER_CARES_INET_NET_PTON_H + ++/*! Parse a network (an address with an optional "/bits" prefix length) from ++ * its text form. This is not an address parser: for an address use ++ * ares_inet_pton(), which rejects a prefix length and always writes the ++ * whole address. ++ * ++ * How it differs from ares_inet_pton(): ++ * - A "/bits" prefix length is accepted (0-32 for IPv4, 0-128 for IPv6). ++ * - The return value is the prefix length, not 1. Without "/bits", IPv6 ++ * returns 128 and IPv4 infers it from the address class, widened to ++ * cover every octet given ("10" is 8, "130.155" is 16, "1.2.3.4" is 32, ++ * and a lone "224" is 4). 0 is a valid result ("::1/0"). ++ * - What is written to dst differs by family. On success all size bytes ++ * are zeroed first. IPv4 then writes every octet given, including bits ++ * beyond the prefix ("1.2.3.4/8" writes 1.2.3.4). IPv6 writes only the ++ * (bits+7)/8 bytes covering the prefix ("2001:db8::1/64" writes ++ * 2001:db8::). ++ * ++ * \param[in] af AF_INET or AF_INET6. ++ * \param[in] src NUL-terminated network in text form. ++ * \param[out] dst Buffer to receive the network, in network byte order. ++ * \param[in] size Size of dst in bytes. ++ * \return Prefix length in bits on success. -1 on failure, with SOCKERRNO ++ * set to ENOENT if src is not a valid network, or EMSGSIZE if it ++ * does not fit in size bytes or (IPv6) src is too long to be a ++ * network. On Windows these are the WSA equivalents. An ++ * unsupported af returns -1 without setting SOCKERRNO. On failure ++ * dst may be partially written. ++ */ + int ares_inet_net_pton(int af, const char *src, void *dst, size_t size); + + #endif /* HEADER_CARES_INET_NET_PTON_H */ +diff --git a/src/lib/inet_net_pton.c b/src/lib/inet_net_pton.c +index e1f76ef834..f60823023b 100644 +--- a/src/lib/inet_net_pton.c ++++ b/src/lib/inet_net_pton.c +@@ -51,14 +51,15 @@ const struct ares_in6_addr ares_in6addr_any = { { { 0, 0, 0, 0, 0, 0, 0, 0, 0, + + /* + * static int +- * inet_net_pton_ipv4(src, dst, size) ++ * inet_net_pton_ipv4(src, dst, size, allow_cidr) + * convert IPv4 network number from presentation to network format. +- * accepts hex octets, hex strings, decimal octets, and /CIDR. +- * "size" is in bytes and describes "dst". ++ * accepts hex octets, hex strings, decimal octets, and, if ++ * "allow_cidr" is true, /CIDR. "size" is in bytes and describes "dst". + * return: + * number of bits, either imputed classfully or specified with /CIDR, + * or -1 if some failure occurred (check errno). ENOENT means it was +- * not an IPv4 network specification. ++ * not an IPv4 network specification (including a /CIDR suffix when ++ * "allow_cidr" is false). + * note: + * network byte order assumed. this means 192.5.5.240/28 has + * 0b11110000 in its fourth octet. +@@ -71,7 +72,7 @@ const struct ares_in6_addr ares_in6addr_any = { { { 0, 0, 0, 0, 0, 0, 0, 0, 0, + * Paul Vixie (ISC), June 1996 + */ + static int ares_inet_net_pton_ipv4(const char *src, unsigned char *dst, +- size_t size) ++ size_t size, ares_bool_t allow_cidr) + { + static const char xdigits[] = "0123456789abcdef"; + static const char digits[] = "0123456789"; +@@ -147,7 +148,8 @@ static int ares_inet_net_pton_ipv4(const char *src, unsigned char *dst, + } + + bits = -1; +- if (ch == '/' && ares_isascii(src[0]) && ares_isdigit(src[0]) && dst > odst) { ++ if (allow_cidr && ch == '/' && ares_isascii(src[0]) && ares_isdigit(src[0]) && ++ dst > odst) { + /* CIDR width specifier. Nothing can follow it. */ + ch = *src++; /* Skip over the /. */ + bits = 0; +@@ -317,7 +319,7 @@ static int ares_inet_pton6(const char *src, unsigned char *dst) + continue; + } + if (ch == '.' && ((tp + NS_INADDRSZ) <= endp) && +- ares_inet_net_pton_ipv4(curtok, tp, NS_INADDRSZ) > 0) { ++ ares_inet_net_pton_ipv4(curtok, tp, NS_INADDRSZ, ARES_FALSE) > 0) { + tp += NS_INADDRSZ; + saw_xdigit = 0; + break; /* '\0' was seen by inet_pton4(). */ +@@ -400,29 +402,23 @@ static int ares_inet_net_pton_ipv6(const char *src, unsigned char *dst, + SET_SOCKERRNO(EMSGSIZE); + return -1; + } ++ /* Only the first (bits+7)/8 bytes carry the network, zero the remainder of ++ * the caller's buffer so it never holds uninitialized data. */ ++ memset(dst, 0, size); + memcpy(dst, &in6, bytes); + return (int)bits; + } + +-/* +- * int +- * inet_net_pton(af, src, dst, size) +- * convert network number from presentation to network format. +- * accepts hex octets, hex strings, decimal octets, and /CIDR. +- * "size" is in bytes and describes "dst". +- * return: +- * number of bits, either imputed classfully or specified with /CIDR, +- * or -1 if some failure occurred (check errno). ENOENT means it was +- * not a valid network specification. ++/* Parse a network, not an address. See ares_inet_net_pton.h for the ++ * contract and how it differs from ares_inet_pton(). + * author: + * Paul Vixie (ISC), June 1996 +- * + */ + int ares_inet_net_pton(int af, const char *src, void *dst, size_t size) + { + switch (af) { + case AF_INET: +- return ares_inet_net_pton_ipv4(src, dst, size); ++ return ares_inet_net_pton_ipv4(src, dst, size, ARES_TRUE); + case AF_INET6: + return ares_inet_net_pton_ipv6(src, dst, size); + default: +@@ -430,22 +426,35 @@ int ares_inet_net_pton(int af, const char *src, void *dst, size_t size) + } + } + ++/* ++ * int ++ * inet_pton(af, src, dst) ++ * convert an address (not a network) from presentation to network ++ * format, like POSIX inet_pton(). A "/bits" prefix length denotes a ++ * prefix, not an address (RFC 4291 Section 2.3 vs. the address text ++ * forms of Section 2.2), and is rejected; dst is always fully written ++ * on success (4 bytes for AF_INET, 16 bytes for AF_INET6). ++ * For a network with a prefix length, use ares_inet_net_pton(). ++ * return: ++ * 1 on success, 0 if src is not a valid address for af (as POSIX ++ * inet_pton() does for any unparsable input), or -1 with errno set to ++ * EAFNOSUPPORT if af is not supported. ++ */ + int ares_inet_pton(int af, const char *src, void *dst) + { +- int result; +- size_t size; ++ int result; + + if (af == AF_INET) { +- size = sizeof(struct in_addr); ++ result = ++ ares_inet_net_pton_ipv4(src, dst, sizeof(struct in_addr), ARES_FALSE); + } else if (af == AF_INET6) { +- size = sizeof(struct ares_in6_addr); ++ result = ares_inet_pton6(src, dst); + } else { + SET_SOCKERRNO(EAFNOSUPPORT); + return -1; + } +- result = ares_inet_net_pton(af, src, dst, size); +- if (result == -1 && SOCKERRNO == ENOENT) { +- return 0; +- } +- return (result > -1) ? 1 : -1; ++ /* Neither parser can fail for a system reason: any failure (ENOENT, or ++ * EMSGSIZE for too many IPv4 octets as in "1.2.3.4.5") means src is not a ++ * valid address. */ ++ return (result > -1) ? 1 : 0; + } +diff --git a/test/ares-test-internal.cc b/test/ares-test-internal.cc +index bf06a74605..294e3f4555 100644 +--- a/test/ares-test-internal.cc ++++ b/test/ares-test-internal.cc +@@ -274,6 +274,23 @@ TEST_F(LibraryTest, InetNetPtoN) { + EXPECT_EQ(-1, ares_inet_net_pton(AF_INET, "253", &a4, sizeof(a4) - 1)); + } + ++// An IPv6 network with a prefix length only carries (bits+7)/8 bytes; the ++// rest of the destination must be zeroed rather than left as it was. ++TEST_F(LibraryTest, InetNetPtoNPrefixZeroFills) { ++ unsigned char a6[16]; ++ ++ memset(a6, 0x41, sizeof(a6)); ++ EXPECT_EQ(0, ares_inet_net_pton(AF_INET6, "::1/0", a6, sizeof(a6))); ++ EXPECT_EQ("0000:0000:0000:0000:0000:0000:0000:0000", ++ AddressToString(a6, 16)); ++ ++ memset(a6, 0x41, sizeof(a6)); ++ EXPECT_EQ(64, ares_inet_net_pton(AF_INET6, "2001:db8:1:2:3:4:5:6/64", a6, ++ sizeof(a6))); ++ EXPECT_EQ("2001:0db8:0001:0002:0000:0000:0000:0000", ++ AddressToString(a6, 16)); ++} ++ + TEST_F(LibraryTest, FreeLongChain) { + struct ares_addr_node *data = nullptr; + for (int ii = 0; ii < 100000; ii++) { +@@ -600,9 +617,46 @@ TEST_F(LibraryTest, InetPtoN) { + EXPECT_EQ(1, ares_inet_pton(AF_INET6, "12:34::ff", &a6)); + EXPECT_EQ(1, ares_inet_pton(AF_INET6, "12:34::ffff:1.2.3.4", &a6)); + EXPECT_EQ(0, ares_inet_pton(AF_INET, "xyzzy", &a4)); ++ // Too many octets is unparsable input, not a system error. ++ EXPECT_EQ(0, ares_inet_pton(AF_INET, "1.2.3.4.5", &a4)); ++ EXPECT_EQ(0, ares_inet_pton(AF_INET, "0x0102030405", &a4)); + EXPECT_EQ(-1, ares_inet_pton(AF_INET+AF_INET6, "1.2.3.4", &a4)); + } + ++// ares_inet_pton() parses addresses, not networks: like inet_pton(3) it must ++// reject a "/bits" prefix length. It used to accept one and, for IPv6, write ++// only (bits+7)/8 bytes of dst while still returning 1. ++TEST_F(LibraryTest, InetPtoNRejectsPrefixLength) { ++ const char *cases6[] = { "::1/0", "ffff::1/16", "2001:db8::1/64", ++ "2001:db8::1/128", "::ffff:1.2.3.4/8", ++ "::ffff:1.2.3.4/32" }; ++ const char *cases4[] = { "1.2.3.4/8", "1.2.3.4/0", "1.2.3.4/32", "10/8", ++ "0x0a000000/8" }; ++ unsigned char a4[4]; ++ unsigned char a6[16]; ++ size_t i; ++ ++ for (i = 0; i < sizeof(cases6) / sizeof(*cases6); i++) { ++ EXPECT_EQ(0, ares_inet_pton(AF_INET6, cases6[i], a6)) << cases6[i]; ++ } ++ for (i = 0; i < sizeof(cases4) / sizeof(*cases4); i++) { ++ EXPECT_EQ(0, ares_inet_pton(AF_INET, cases4[i], a4)) << cases4[i]; ++ } ++ ++ // Without a prefix length, the whole destination is written. ++ memset(a6, 0x41, sizeof(a6)); ++ EXPECT_EQ(1, ares_inet_pton(AF_INET6, "ffff::1", a6)); ++ EXPECT_EQ("ffff:0000:0000:0000:0000:0000:0000:0001", ++ AddressToString(a6, 16)); ++ memset(a6, 0x41, sizeof(a6)); ++ EXPECT_EQ(1, ares_inet_pton(AF_INET6, "::ffff:1.2.3.4", a6)); ++ EXPECT_EQ("0000:0000:0000:0000:0000:ffff:0102:0304", ++ AddressToString(a6, 16)); ++ memset(a4, 0x41, sizeof(a4)); ++ EXPECT_EQ(1, ares_inet_pton(AF_INET, "1.2.3.4", a4)); ++ EXPECT_EQ("1.2.3.4", AddressToString(a4, 4)); ++} ++ + TEST_F(LibraryTest, FreeCorruptData) { + // ares_free_data(p) expects that there is a type field and a marker + // field in the memory before p. Feed it incorrect versions of each. +diff --git a/test/ares-test-mock-ai.cc b/test/ares-test-mock-ai.cc +index ae45c45527..43d0b89175 100644 +--- a/test/ares-test-mock-ai.cc ++++ b/test/ares-test-mock-ai.cc +@@ -617,6 +617,29 @@ TEST_P(MockChannelTestAI, FamilyV6) { + EXPECT_THAT(result.ai_, IncludesV6Address("2121:0000:0000:0000:0000:0000:0000:0303")); + } + ++// A numeric host with a "/bits" prefix length is a network, not an address. ++// It used to be accepted, returning uninitialized stack memory as the address. ++TEST_P(MockChannelTestAI, NumericHostRejectsPrefixLength) { ++ struct ares_addrinfo_hints hints = {0, 0, 0, 0}; ++ hints.ai_family = AF_INET6; ++ hints.ai_flags = ARES_AI_NUMERICHOST; ++ ++ AddrInfoResult result; ++ ares_getaddrinfo(channel_, "::1/0", NULL, &hints, AddrInfoCallback, &result); ++ Process(); ++ EXPECT_TRUE(result.done_); ++ EXPECT_NE(ARES_SUCCESS, result.status_); ++ ++ AddrInfoResult result2; ++ ares_getaddrinfo(channel_, "::1", NULL, &hints, AddrInfoCallback, &result2); ++ Process(); ++ EXPECT_TRUE(result2.done_); ++ EXPECT_EQ(ARES_SUCCESS, result2.status_); ++ EXPECT_THAT(result2.ai_, IncludesNumAddresses(1)); ++ EXPECT_THAT(result2.ai_, ++ IncludesV6Address("0000:0000:0000:0000:0000:0000:0000:0001")); ++} ++ + // Test case for Issue #662 + TEST_P(MockChannelTestAI, PartialQueryCancel) { + std::vector nothing; diff --git a/meta-oe/recipes-support/c-ares/c-ares/0008-ares_conn_read-dont-drop-UDP-answers-from-server-port.patch b/meta-oe/recipes-support/c-ares/c-ares/0008-ares_conn_read-dont-drop-UDP-answers-from-server-port.patch new file mode 100644 index 0000000000..f4f182b995 --- /dev/null +++ b/meta-oe/recipes-support/c-ares/c-ares/0008-ares_conn_read-dont-drop-UDP-answers-from-server-port.patch @@ -0,0 +1,178 @@ +From c7fa9ebcb0c0086730c53bf03191c03f03706246 Mon Sep 17 00:00:00 2001 +From: "c-ares-backport-gha[bot]" + <299594594+c-ares-backport-gha[bot]@users.noreply.github.com> +Date: Tue, 20 Oct 2026 02:25:59 +0000 +Subject: [PATCH] [Backport v1.34] ares_conn_read: don't drop UDP answers whose + source port isn't reported (#1371) +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +# Description +Backport of #1370 to `v1.34`. + +Signed-off-by: Brad House +Co-authored-by: Brad House +Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/c7fa9ebcb0c0086730c53bf03191c03f03706246] +GHSA: GHSA-fqh5-3x7m-wp44 +--- + docs/ares_set_socket_functions.3 | 20 ++++++++++++++++++++ + src/lib/ares_conn.c | 9 ++++++++- + src/lib/ares_socket.c | 4 +++- + src/lib/ares_socket.h | 8 +++++--- + test/ares-test-mock.cc | 32 +++++++++++++++++++++++++++++++- + 5 files changed, 67 insertions(+), 6 deletions(-) + +diff --git a/docs/ares_set_socket_functions.3 b/docs/ares_set_socket_functions.3 +index 605beb26ef..75c621cb48 100644 +--- a/docs/ares_set_socket_functions.3 ++++ b/docs/ares_set_socket_functions.3 +@@ -149,6 +149,20 @@ a socket. Additional flags controlling behavior are in + address, the callback should fill this in. The \fIflags\fP parameter is + currently unused. See \fBrecvfrom(2)\fP. + ++For UDP, the callback must fill in the full source address, including the ++source port, exactly as \fBrecvfrom(2)\fP does. c-ares discards a datagram ++whose source address does not match the server it queried, or whose source ++port does not match that server's port. ++ ++\fBSecurity:\fP for compatibility with older callbacks, a reported source port ++of 0 is treated as unknown and only the address is checked. A callback that ++does not fill in the source port is therefore insecure: c-ares will accept ++answers sent from any port on the server's address, for example from another ++DNS server or any other service or user able to send UDP from that host, and ++those answers are cached and returned to the application. Such an ++implementation is non-compliant and should be fixed to report the real source ++port. ++ + .TP 8 + .B ares_ssize_t (*\fIasendto\fP)(ares_socket_t \fIfd\fP, const void * \fIbuffer\fP, size_t \fIlength\fP, int \fIflags\fP, const struct sockaddr * \fIaddress\fP, ares_socklen_t \fIaddress_len\fP, void * \fIuser_data\fP) + .br +@@ -305,6 +319,12 @@ Receives data from remote socket endpoint, if available. If the \fIaddr\fP + parameter is not NULL and the connection protocol provides the source address, + the callback should fill this in. See \fBrecvfrom(2)\fP + ++For UDP, the callback must fill in the full source address, including the ++source port, as described above for \fIarecvfrom\fP in ++\fBares_set_socket_functions_ex\fP. \fBSecurity:\fP a callback that ++does not fill in the source port is insecure, and c-ares will accept answers ++sent from any port on the server's address. ++ + .TP 8 + .B ares_ssize_t (*\fIasendv\fP)(ares_socket_t \fIfd\fP, const struct iovec * \fIdata\fP, int \fIlen\fP, void * \fIuser_data\fP) + .br +diff --git a/src/lib/ares_conn.c b/src/lib/ares_conn.c +index b868053e62..7711d8649e 100644 +--- a/src/lib/ares_conn.c ++++ b/src/lib/ares_conn.c +@@ -257,7 +257,14 @@ ares_conn_err_t ares_conn_read(ares_conn_t *conn, void *data, size_t len, + * functions might not filter on connect, so also check here that the + * datagram came from the server's address and UDP port. RFC 5452 + * section 9.1 only requires the address to match; matching the port too +- * keeps one server from answering for another on the same address. */ ++ * keeps one server from answering for another on the same address. ++ * Socket functions that fill in the source address but leave the port 0 ++ * predate the port check, so for those only the address is checked. A ++ * sender cannot use this to skip the port check: the default socket ++ * functions connect() the socket, so the kernel drops a datagram from ++ * port 0, and an unprivileged process on the server's host cannot send ++ * from port 0, while an off-path attacker able to forge port 0 can forge ++ * the server's real port just as easily. */ + if (err == ARES_CONN_ERR_SUCCESS && + !ares_sockaddr_addr_port_eq((struct sockaddr *)&sa_storage, + &conn->server->addr, +diff --git a/src/lib/ares_socket.c b/src/lib/ares_socket.c +index 0a12935ab7..29d595e1a9 100644 +--- a/src/lib/ares_socket.c ++++ b/src/lib/ares_socket.c +@@ -144,7 +144,9 @@ ares_bool_t ares_sockaddr_addr_port_eq(const struct sockaddr *sa, + sa_port = (CARES_INADDR_CAST(const struct sockaddr_in6 *, sa))->sin6_port; + } + +- if (ntohs(sa_port) != port) { ++ /* A port of 0 means the source port was not reported, so only the address ++ * can be checked. */ ++ if (sa_port != 0 && ntohs(sa_port) != port) { + return ARES_FALSE; + } + +diff --git a/src/lib/ares_socket.h b/src/lib/ares_socket.h +index f7128e3493..1ede6987ee 100644 +--- a/src/lib/ares_socket.h ++++ b/src/lib/ares_socket.h +@@ -151,13 +151,15 @@ ares_bool_t ares_sockaddr_addr_eq(const struct sockaddr *sa, + const struct ares_addr *aa); + + /*! Compare the IP address and port of a socket address with an ares_addr and +- * port. ++ * port. A port of 0 in the socket address means the port is unknown, so it ++ * matches any port. + * + * \param[in] sa Socket address (AF_INET or AF_INET6) + * \param[in] aa Address to compare against + * \param[in] port Port to compare against, in host byte order +- * \return ARES_TRUE if the address families, IP addresses and ports are +- * equal, ARES_FALSE otherwise ++ * \return ARES_TRUE if the address families and IP addresses are equal and ++ * the ports are equal or the socket address port is 0, ARES_FALSE ++ * otherwise + */ + ares_bool_t ares_sockaddr_addr_port_eq(const struct sockaddr *sa, + const struct ares_addr *aa, +diff --git a/test/ares-test-mock.cc b/test/ares-test-mock.cc +index 058dc93001..cc5e6482f2 100644 +--- a/test/ares-test-mock.cc ++++ b/test/ares-test-mock.cc +@@ -3364,6 +3364,7 @@ struct FakeSockData { + size_t query_len; + struct sockaddr_in peer; + unsigned short recv_port; /* network order; 0 reports the peer's port */ ++ bool recv_no_port; /* report the peer's address with port 0 */ + size_t recv_calls; + size_t bad_fd_calls; + size_t sock_state_bad; +@@ -3472,7 +3473,9 @@ static ares_ssize_t FakeSockRecvfrom(ares_socket_t sock, void *buffer, + if (address != NULL && address_len != NULL && + *address_len >= (ares_socklen_t)sizeof(d->peer)) { + memcpy(address, &d->peer, sizeof(d->peer)); +- if (d->recv_port != 0) { ++ if (d->recv_no_port) { ++ reinterpret_cast(address)->sin_port = 0; ++ } else if (d->recv_port != 0) { + reinterpret_cast(address)->sin_port = d->recv_port; + } + *address_len = sizeof(d->peer); +@@ -3750,6 +3753,33 @@ TEST_F(LibraryTest, UDPAnswerFromWrongPortDropped) { + ares_destroy(chan); + } + ++// Socket functions written before the port check may fill in the source ++// address but leave the port 0. The address is still checked, but the answer ++// must not be dropped for its port. ++TEST_F(LibraryTest, UDPAnswerWithoutPortAccepted) ++{ ++ ares_channel_t *chan = nullptr; ++ FakeSockData data; ++ ++ memset(&data, 0, sizeof(data)); ++ FakeSockInit(&chan, &data, 0, ARES_SOCKFUNC_FLAG_NONBLOCKING); ++ ++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A, ++ FakeSockQueryCallback, &data, NULL); ++ ASSERT_NE((size_t)0, data.query_len); ++ ASSERT_EQ(htons(53055), data.peer.sin_port); ++ ++ data.recv_no_port = true; ++ data.recv_answer = true; ++ ares_process_fd(chan, 100, ARES_SOCKET_BAD); ++ EXPECT_FALSE(data.recv_answer); ++ EXPECT_TRUE(data.done); ++ // The fake answer carries no records. ++ EXPECT_EQ(ARES_ENODATA, data.status); ++ EXPECT_EQ((size_t)0, ares_queue_active_queries(chan)); ++ ares_destroy(chan); ++} ++ + // The close function is application code too. With no socket-state callback + // to carry the descriptor, it runs inline while ares_check_cleanup_conns() + // walks the server list and each server's connections, closing idle ones. diff --git a/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb b/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb index 058f3666e7..1d0f3eb343 100644 --- a/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb +++ b/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb @@ -6,6 +6,14 @@ LICENSE = "MIT" LIC_FILES_CHKSUM = "file://LICENSE.md;md5=d3e72a10e08191f2ca1be3f3228d78f3" SRC_URI = "https://github.com/c-ares/c-ares/releases/download/v${PV}/${BPN}-${PV}.tar.gz \ + file://0001-ares_cancel-ares_destroy-detach-queries-before-callbacks.patch \ + file://0002-Deliver-deferred-socket-server-state-notifications.patch \ + file://0003-ares_qcache-hand-callbacks-their-own-copy.patch \ + file://0004-Handle-connections-torn-down-by-application.patch \ + file://0005-ares_process-only-accept-an-answer-on-the-right-connection.patch \ + file://0006-ares_save_options-read-channel-config-under-lock.patch \ + file://0007-ares_inet_pton-reject-a-prefix-length.patch \ + file://0008-ares_conn_read-dont-drop-UDP-answers-from-server-port.patch \ file://run-ptest" SRC_URI[sha256sum] = "c222b6d681096f9444d2c4863d2c1174019e27cacca0a4a5c114d36dd7d7bf78" From patchwork Wed Oct 28 04:23:57 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102224 Received: from mail-pg1-f178.google.com (mail-pg1-f178.google.com [209.85.215.178]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36231.1793161597340658120 for ; Tue, 27 Oct 2026 21:26:37 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=lRiALIo5; spf=pass (domain: gmail.com, ip: 209.85.215.178, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pg1-f178.google.com with SMTP id 41be03b00d2f7-cd5d2dafeccso318283a12.2 for ; Tue, 27 Oct 2026 21:26:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161597; x=1793766397; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=dumgubHzEU1E/yor9IhW5W+tq+KtZhiWvEPkY7OsG3A=; b=lRiALIo5AdKZL4TUCcWsFWzDie0aTLbIjCziOIi3WPqyVeEYmyiVurKfw3PN6i1UsE JGLrMlKresepXIx6pi7gTTc1uhFohsrGSwcjp2HCpkmtSULm2wcrSMM/QtesQmWnXQmL oA7SiDcWj++W4ZPKT8J5QIQZ5Z6f6zSHOkogMgFdc+DMoX8mkBVQD9TyYigHmZ5v/bTV OluNFVMepmaOSh6Y63UBhZWHGNzmp9GJfeKh629+911WXtVZtDYs5L1eawnP/H9AGRqT z2uf662mum9m/+aXdppNRCCicDea4PvrApnOpYJ8ovN5n+zMEwh9jh2NV7H+5pp4vxCm AaQw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161597; x=1793766397; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=dumgubHzEU1E/yor9IhW5W+tq+KtZhiWvEPkY7OsG3A=; b=cXDp6kYlD286WGhmtn1UQvd9HAWczpB7vGjypGZ/odUP3/dduavyYSiZLGcLTj4VNL 2u1Bul4JoGVS93KCqALIGMzhnOochlOa1eXSSU4thtWBjyySxHihNW1n3xiES6EL9SzJ u3RhV2uJBGYuOvpFTvj2Z0/W56qsGadHFAkOBsW5gwMUTFN8FuGQlva+bJOKzdK9TCh4 bzeSjh7hMLESn1hEZZYAUS21n+7orhHurBf8lI4k/DM17YKbH6UlYjlIekPAaMUzKgiz /hGZ7WOQVQpfK6GKiNk6Tdr3RslCf3eD0UG9wnSm3oWKbsHLFgRcw1VwiSHrxcogxzlx OriA== X-Gm-Message-State: AFq9FYLQ8rEfBL1hS832tPeUFM/4mI8t5qri/vRwrAXGKr9+qaeKLa0h kATnFqwdteuVnuIzxk3VmrkO8AD/kDvDET1gH2LULKz4vLJtPO60gy+odoCcnQ== X-Gm-Gg: AYBFou2sagFj9LoVmlLqTVeX83fNDRJxTRDrI0+l/5CB/kmAdvvDR5fFVsQIt21Plya eDRJJcBgcVGGycqD0qVjLXpPC7nLDEeqVQZlzeCdCAy/kV4F6fNlccfKAdJdyTsd4EH+PNTKU8M Rc9tt6S7wUnM03RX6EjfEVHLLGQH3xjxozuDVUFApM0MuHwbMF9NlF/Yg8w5GXON9jBZOourvPT dmLdWkPio1v6Q7ra/xQy6htaGFsbii76ZUDsvlv8XBjgbLH0WniFdAtZJNlaZuXr/XmWFdUTT3P jJ8beEOdY5GHpizFelpL/rLb2EqE/vd2O89ZjFS1mc8QV6DYgcvKgndV3TSOSJt3Z9kJJajKHp2 glM002w7rgol0+xPjW4JcxBgqKzTO8fuDzEaZIslnBZj6+SSTbsSWh83bZyULg7RiLu1I7i9scN jXZu+I+cHCzJf1SbK/A6kIukqAje3WbyPh78dQDD2CC4IaewMp5LuhCsEarDc/TYr57bxn4XxEZ 924cnlLrsPao0K2DMRJIo4PC3IWiBhKkjKzVZaHOBN9eFaIl9q7ILP6oPvp3/soL5SNEUFI+2+9 rYKrDtmaK4ewLsxuMmkbK8bVcLqDIAyvJmXRxBuD9TCPcJI1zZFwPs9eQbh0iQ== X-Received: by 2002:a17:90b:a09:b0:3ad:a270:a623 with SMTP id 98e67ed59e1d1-3ae57e35220mr613465a91.4.1793161596708; Tue, 27 Oct 2026 21:26:36 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.26.34 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:26:36 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: James Lee Subject: [blacksail][PATCH 59/60] mctp: upgrade 2.6 -> 2.6.1 Date: Wed, 28 Oct 2026 17:23:57 +1300 Message-ID: <948fbdea56ba7f8c3dd6358615ff7dab69579916.1793161233.git.ankur.tyagi85@gmail.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:38 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131610 From: James Lee mctp 2.6.1 is a bugfix release that corrects mctpd's systemd service file. mctpd requires CAP_NET_RAW to send MCTP control messages when running as an unprivileged user. This capability is missing from version 2.6, breaking mctpd. Bump mctp and mctpd to version 2.6.1 to correct this. Changelog: https://github.com/CodeConstruct/mctp/blob/v2.6.1/CHANGELOG.md Signed-off-by: James Lee --- meta-networking/recipes-support/mctp/mctp.inc | 4 ++-- .../recipes-support/mctp/{mctp_2.6.bb => mctp_2.6.1.bb} | 0 .../recipes-support/mctp/{mctpd_2.6.bb => mctpd_2.6.1.bb} | 0 3 files changed, 2 insertions(+), 2 deletions(-) rename meta-networking/recipes-support/mctp/{mctp_2.6.bb => mctp_2.6.1.bb} (100%) rename meta-networking/recipes-support/mctp/{mctpd_2.6.bb => mctpd_2.6.1.bb} (100%) diff --git a/meta-networking/recipes-support/mctp/mctp.inc b/meta-networking/recipes-support/mctp/mctp.inc index c8fc98f63a..cc140f23a1 100644 --- a/meta-networking/recipes-support/mctp/mctp.inc +++ b/meta-networking/recipes-support/mctp/mctp.inc @@ -3,8 +3,8 @@ SECTION = "net" LICENSE = "GPL-2.0-only" LIC_FILES_CHKSUM = "file://LICENSE;md5=4cc91856b08b094b4f406a29dc61db21" -SRC_URI = "git://github.com/CodeConstruct/mctp;branch=main;protocol=https;tag=v${PV}" -SRCREV = "31ac0e86b0e23d32abf34d191653a87a47f3c9a7" +SRC_URI = "git://github.com/CodeConstruct/mctp;branch=stable/2.6.x;protocol=https;tag=v${PV}" +SRCREV = "ea1dfa9e59681c42d02ed3bf91cb150161481403" inherit meson pkgconfig diff --git a/meta-networking/recipes-support/mctp/mctp_2.6.bb b/meta-networking/recipes-support/mctp/mctp_2.6.1.bb similarity index 100% rename from meta-networking/recipes-support/mctp/mctp_2.6.bb rename to meta-networking/recipes-support/mctp/mctp_2.6.1.bb diff --git a/meta-networking/recipes-support/mctp/mctpd_2.6.bb b/meta-networking/recipes-support/mctp/mctpd_2.6.1.bb similarity index 100% rename from meta-networking/recipes-support/mctp/mctpd_2.6.bb rename to meta-networking/recipes-support/mctp/mctpd_2.6.1.bb From patchwork Wed Oct 28 04:23:58 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ankur Tyagi X-Patchwork-Id: 102226 Received: from mail-pj1-f43.google.com (mail-pj1-f43.google.com [209.85.216.43]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.36233.1793161600016642442 for ; Tue, 27 Oct 2026 21:26:40 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20260707 header.b=0cNgYegW; spf=pass (domain: gmail.com, ip: 209.85.216.43, mailfrom: ankur.tyagi85@gmail.com) Received: by mail-pj1-f43.google.com with SMTP id 98e67ed59e1d1-3ada8bc2380so260839a91.3 for ; Tue, 27 Oct 2026 21:26:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20260707; t=1793161599; x=1793766399; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=uSYMbw4KZE/3stI5x6hHG/GPJSeBZVJsEyr3A63Ox4o=; b=0cNgYegWchQ+Nty9j9BHGpMGbNeodIfYmDJJBVrknuSz/+zEa1+fBN9d7HfXUsslxo qVgQhlaBFV20fXiFr2oXNrpalbfYmUuRKy9P70K7I8g73sctlsvQiTaUKwJ+hRBlyx1R XelrXoaam7OKyvbafGz25GvpT6O2VHDokrZdaGzG/RnkOMuaiyQbeYrCngtRtybae8sE 0lreeVrAyvTqPO/sjN9Nudpcz7BFaNCRziRW0Rw0/0iHV7yyNW1DBcV2hXLu+dqagGgL +80S0ttvgCoP/urvjPe6rFj3J05UUkoMajHPjCiMCtWtulLoDfWgYjO4YPM/T+qkDo9C 3cvw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793161599; x=1793766399; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=uSYMbw4KZE/3stI5x6hHG/GPJSeBZVJsEyr3A63Ox4o=; b=cUlxVdVyRMdR+yW9UVO5tHo6PdmeN10d0tKCh6+h8jmCOOgRGCyNJQsM+BoujgasUd 85we/Kennny/2KFlkxqA7Ltd4/WZEoPy38FZz8GvI58mRf7Qq3n3Vgo/7iP1+9iCkf1r RY41lW1Rb0kHdEtnFWecQ7rZQy7g+E1jwgSXZO+udrY9dmd9+4fmqFCbOu5weM1EODz0 vu7yTKMOIrB5wi6M1rJcyd/M35FqOALWYtscqUaiIm1Z8gqLArYpmBnaEMuevXMCY82Q l3avgFMEOzzbIF7mXuJDS8DJcX0gmehXU8XmKKDTy6pSySAD59a853I4JwvOKr4E8Zs4 kdvg== X-Gm-Message-State: AFq9FYKRqW3xutmV6PD4NwLBdeX17+Uu8SCPVMTi8k+qD1bZPSorU7pJ DdtyVcuoC8gsH5HiR6A9MrPyeswyeTY0qBrvmifvrXBor08VFfKfeykVpwcLZw== X-Gm-Gg: AYBFou1l7ATaSuXhIo+Fpa79V/5V3Aahjxyv0VhgrB/kIILN5P1XvflYuIYkQd0/g6k Y6dq5cWhpc9na+p7ELqKwxT07GT1bqC3rdYHc+EsuKHXU0IDPbqvfd24uBhzZ4wqOGDA58pR+Ss FmUnAaMLnQGxVpm995uOUnFeEtxT8NBbYW9dwl0qKCRoBfj6tkv1rMazSiabtTDvb/EdeEz215q bwi6XQGUgEF5sbnFzHYUB31tPo3KDFAi+Y3qx7l6NV9DolevG6QL41R6QWUZEecl8qIp6XoBq6+ eVU+zjnERV1oQZGJFjEpBsJnf8ZemNrJi9VRUF+mc4oFLj2pv/sVtraqdSABn462hzijDrxIUnu heNHE5Sps4DBENDhLMCYaCqk1rGEZo4sLQ3wN/WTx6/X9GB6QqFGBUkKmwQAkXJHnM1TpaguKgJ weMZLWYQghWjiIRBASeQyXWDghcpY4DJr/4ZSD/3WeDOUzhXAtM1pp3tugCetYEbUOAAKWltSFE vtqqn4832yvv8FxAMUg2sbjtfNp9pRxQ8RwvB2JjFkR+8CmuILcCzoZerZ9Zwn5AKLbVwGl+bjl 0gxJkJ5BHmxrMwUig1Ag5mjqmttP3EtxlMN7IYeu1MaKDo6IXHpst5G6HRj/xp0AXbqfr0GN6b2 +xJ3OKlOkjg== X-Received: by 2002:a17:90b:3905:b0:3ab:c370:3684 with SMTP id 98e67ed59e1d1-3ae581185a4mr747517a91.30.1793161599272; Tue, 27 Oct 2026 21:26:39 -0700 (PDT) Return-Path: Received: from NVAPF55DW0D-IPD.. ([147.161.217.9]) by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ae5a48c2d3sm1010794a91.5.2026.10.27.21.26.37 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 27 Oct 2026 21:26:38 -0700 (PDT) From: ankur.tyagi85@gmail.com To: openembedded-devel@lists.openembedded.org Cc: Ankur Tyagi , Khem Raj Subject: [blacksail][PATCH 60/60] redis: upgrade 8.10.2 -> 8.10.3 Date: Wed, 28 Oct 2026 17:23:58 +1300 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 28 Oct 2026 04:26:48 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/131612 From: Ankur Tyagi Changelog: https://github.com/redis/redis/releases/tag/8.10.3 Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj (cherry picked from commit 53276e6882048b990201b3c230e0b1fd0b8311b6) Signed-off-by: Ankur Tyagi --- .../0001-hiredis-use-default-CC-if-it-is-set.patch | 0 ...2-lua-update-Makefile-to-use-environment-build-setting.patch | 0 .../0003-hack-to-force-use-of-libc-malloc.patch | 0 .../0004-src-Do-not-reset-FINAL_LIBS.patch | 0 ...05-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch | 0 ...06-src-Makefile-do-not-build-the-test-modules-from-all.patch | 0 .../redis/{redis-8.10.2 => redis-8.10.3}/init-redis-server | 0 .../redis/{redis-8.10.2 => redis-8.10.3}/redis.conf | 0 .../redis/{redis-8.10.2 => redis-8.10.3}/redis.service | 0 .../recipes-extended/redis/{redis_8.10.2.bb => redis_8.10.3.bb} | 2 +- 10 files changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0001-hiredis-use-default-CC-if-it-is-set.patch (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0002-lua-update-Makefile-to-use-environment-build-setting.patch (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0003-hack-to-force-use-of-libc-malloc.patch (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0004-src-Do-not-reset-FINAL_LIBS.patch (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0006-src-Makefile-do-not-build-the-test-modules-from-all.patch (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/init-redis-server (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/redis.conf (100%) rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/redis.service (100%) rename meta-oe/recipes-extended/redis/{redis_8.10.2.bb => redis_8.10.3.bb} (98%) diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/0001-hiredis-use-default-CC-if-it-is-set.patch b/meta-oe/recipes-extended/redis/redis-8.10.3/0001-hiredis-use-default-CC-if-it-is-set.patch similarity index 100% rename from meta-oe/recipes-extended/redis/redis-8.10.2/0001-hiredis-use-default-CC-if-it-is-set.patch rename to meta-oe/recipes-extended/redis/redis-8.10.3/0001-hiredis-use-default-CC-if-it-is-set.patch diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/0002-lua-update-Makefile-to-use-environment-build-setting.patch b/meta-oe/recipes-extended/redis/redis-8.10.3/0002-lua-update-Makefile-to-use-environment-build-setting.patch similarity index 100% rename from meta-oe/recipes-extended/redis/redis-8.10.2/0002-lua-update-Makefile-to-use-environment-build-setting.patch rename to meta-oe/recipes-extended/redis/redis-8.10.3/0002-lua-update-Makefile-to-use-environment-build-setting.patch diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/0003-hack-to-force-use-of-libc-malloc.patch b/meta-oe/recipes-extended/redis/redis-8.10.3/0003-hack-to-force-use-of-libc-malloc.patch similarity index 100% rename from meta-oe/recipes-extended/redis/redis-8.10.2/0003-hack-to-force-use-of-libc-malloc.patch rename to meta-oe/recipes-extended/redis/redis-8.10.3/0003-hack-to-force-use-of-libc-malloc.patch diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/0004-src-Do-not-reset-FINAL_LIBS.patch b/meta-oe/recipes-extended/redis/redis-8.10.3/0004-src-Do-not-reset-FINAL_LIBS.patch similarity index 100% rename from meta-oe/recipes-extended/redis/redis-8.10.2/0004-src-Do-not-reset-FINAL_LIBS.patch rename to meta-oe/recipes-extended/redis/redis-8.10.3/0004-src-Do-not-reset-FINAL_LIBS.patch diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch b/meta-oe/recipes-extended/redis/redis-8.10.3/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch similarity index 100% rename from meta-oe/recipes-extended/redis/redis-8.10.2/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch rename to meta-oe/recipes-extended/redis/redis-8.10.3/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/0006-src-Makefile-do-not-build-the-test-modules-from-all.patch b/meta-oe/recipes-extended/redis/redis-8.10.3/0006-src-Makefile-do-not-build-the-test-modules-from-all.patch similarity index 100% rename from meta-oe/recipes-extended/redis/redis-8.10.2/0006-src-Makefile-do-not-build-the-test-modules-from-all.patch rename to meta-oe/recipes-extended/redis/redis-8.10.3/0006-src-Makefile-do-not-build-the-test-modules-from-all.patch diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/init-redis-server b/meta-oe/recipes-extended/redis/redis-8.10.3/init-redis-server similarity index 100% rename from meta-oe/recipes-extended/redis/redis-8.10.2/init-redis-server rename to meta-oe/recipes-extended/redis/redis-8.10.3/init-redis-server diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/redis.conf b/meta-oe/recipes-extended/redis/redis-8.10.3/redis.conf similarity index 100% rename from meta-oe/recipes-extended/redis/redis-8.10.2/redis.conf rename to meta-oe/recipes-extended/redis/redis-8.10.3/redis.conf diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/redis.service b/meta-oe/recipes-extended/redis/redis-8.10.3/redis.service similarity index 100% rename from meta-oe/recipes-extended/redis/redis-8.10.2/redis.service rename to meta-oe/recipes-extended/redis/redis-8.10.3/redis.service diff --git a/meta-oe/recipes-extended/redis/redis_8.10.2.bb b/meta-oe/recipes-extended/redis/redis_8.10.3.bb similarity index 98% rename from meta-oe/recipes-extended/redis/redis_8.10.2.bb rename to meta-oe/recipes-extended/redis/redis_8.10.3.bb index d24f6825d1..240eb4143f 100644 --- a/meta-oe/recipes-extended/redis/redis_8.10.2.bb +++ b/meta-oe/recipes-extended/redis/redis_8.10.3.bb @@ -17,7 +17,7 @@ SRC_URI = "http://download.redis.io/releases/${BP}.tar.gz \ file://0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch \ file://0006-src-Makefile-do-not-build-the-test-modules-from-all.patch \ " -SRC_URI[sha256sum] = "b9ffee226b5eecdba98a679260dad764b2a4ebd90dce4ad5ac9e9f3eef9c02b3" +SRC_URI[sha256sum] = "edde778f6bdee7581e42fc139ca9e07e2822212092f7501f99989656e3629d02" RPROVIDES:${PN} = "virtual-redis"