From fbc9bd030806fe52a799a6f361154469064d7d15 Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Tue, 13 Feb 2024 17:07:33 -0500 Subject: [PATCH] limbo: regenerate Just to cause a cache miss. Signed-off-by: William Woodruff --- limbo.json | 1100 ++++++++++++++++++++++++++-------------------------- 1 file changed, 550 insertions(+), 550 deletions(-) diff --git a/limbo.json b/limbo.json index 9a863537..93cf64b3 100644 --- a/limbo.json +++ b/limbo.json @@ -8,21 +8,21 @@ "description": "Tests CVE-2024-0567.\n\nProduces the following **valid** trust graph:\n\n```\nleaf -> A1 -> (A <-> B <-> C) -> Root A\n```\n\nIn other words: `leaf` is signed by intermediate `A1`, which in turn is signed\nby `A`, which is mutually cross-signed by CAs `B` and `C`. This naively results\nin a cycle, which can be resolved because `A` is also present as a self-signed\nroot in the trusted set.\n\n`B` and `C` also have subordinate CAs (`B1` and `C1`), but these do not factor\ninto the constructed chain.\n\nAffects GnuTLS prior to 3.8.3.\n\n* Announcement: \n* Patch: \n\nThis testcase is an independent recreation of the testcase in the patch, for CABF\nconformance.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBhzCCASygAwIBAgIUV15R+BPKrc1hIvA/ySlE2YV3yCgwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjARMQ8wDQYDVQQDDAZSb290IEEwWTATBgcqhkjOPQIBBggq\nhkjOPQMBBwNCAASoYZTog9p5xUhsDsxBZHJnGwiiq8TAJ+EPZXla3QSYuz35XxEq\nuUksgWAerhf/EXxSQRq9Sl4QcTui1PY+pIXJo1cwVTAPBgNVHRMBAf8EBTADAQH/\nMAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAdBgNVHQ4EFgQU\nUjN9fognlgkJ4wjiBCdBHzLs6QwwCgYIKoZIzj0EAwIDSQAwRgIhAIcfCaK1Drgp\n7c1jSAjXSQqQhf06koUF2GnfoGbfG3OjAiEA/9nqIGEYKhC+C/xWh98iYR0XSejq\nvEkDvEQuyIoMutA=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nbKNmYpYcVD0rBQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUGJM8Zx4B30XO4GY6maLZG1sx0dgwCgYIKoZIzj0EAwIw\nETEPMA0GA1UEAwwGUm9vdCBBMCAXDTcwMDEwMTAwMDAwMVoYDzI5NjkwNTAzMDAw\nMDAxWjAaMRgwFgYDVQQDDA9JbnRlcm1lZGlhdGUgQTEwWTATBgcqhkjOPQIBBggq\nhkjOPQMBBwNCAASeNJhW/Jk8vE+dtSKjNE+irxtIOKGsJcKkQiU7jl+MBOBCBUKO\nkGydqUsRtEAmK63XX6Pmhg/5Ujob/FHCG9MVo2AwXjAPBgNVHRMBAf8EBTADAQH/\nMAsGA1UdDwQEAwICBDAfBgNVHSMEGDAWgBRSM31+iCeWCQnjCOIEJ0EfMuzpDDAd\nBgNVHQ4EFgQUfk8A+TgqtnimZCTjgfx2fo5uBhkwCgYIKoZIzj0EAwIDSAAwRQIg\nVYHzwg6NtKAXQrZE94uxSVtwxdonC0HmVR1duhJYxRUCIQD2Ez/XjcTkHgD33/fh\nA6tLxKn3Ob7z1CWXE/GYQsDC9Q==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nM8tQmQIYE1Q7\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\neRWzdLZ3UFlt\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUDa1Y7d3uDmREYmE2+FCeTxYkc1EwCgYIKoZIzj0EAwIw\nETEPMA0GA1UEAwwGUm9vdCBCMCAXDTcwMDEwMTAwMDAwMVoYDzI5NjkwNTAzMDAw\nMDAxWjAaMRgwFgYDVQQDDA9JbnRlcm1lZGlhdGUgQjEwWTATBgcqhkjOPQIBBggq\nhkjOPQMBBwNCAAT/mrMBisiVPTgMrLph5ABjAUTd3cO4KTKOWg9aBxvWPxCyqRe9\ngD75QsQEx+J711951iqKXXIHVNuD6U4u0PQ5o2AwXjAPBgNVHRMBAf8EBTADAQH/\nMAsGA1UdDwQEAwICBDAfBgNVHSMEGDAWgBRJ2vwgMzk28M0VwZkwZq9IllQj8DAd\nBgNVHQ4EFgQUYaJPxfVMBFv7pqxe6WRYDPvAH/0wCgYIKoZIzj0EAwIDSAAwRQIh\nAJNvUsQe/GNXJtcbvvLRS6r6UwuejloH/QWaqdigNlaaAiALMQEQAvAD+8jTx5Em\nKvsshwNHpBbfh/I/nBPJHvu40g==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nz4ZAc9mqnb/yPw==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nlzXiPwV7nZRtzA==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nTUA7CgF8Vo6bmL86jquO84JjAA==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nFne8ckN0N2LEZg==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\ncAbI3I9XM7P3VQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nwO8RWQL3TnfNdp1l7vGY6q60lA==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----\nMIIBhjCCASygAwIBAgIUDu4QoGPrqW1xmqbL4JStArMf150wCgYIKoZIzj0EAwIw\nETEPMA0GA1UEAwwGUm9vdCBCMCAXDTcwMDEwMTAwMDAwMVoYDzI5NjkwNTAzMDAw\nMDAxWjARMQ8wDQYDVQQDDAZSb290IEEwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNC\nAAQ9SOkk/thM2+ue/MGLLlGNHYufphQHq73eICer9wHcLqiA1Ti+dO5uPSxexFuX\nAAHY8rIB50Y94GRUKNNW205ho2AwXjAPBgNVHRMBAf8EBTADAQH/MAsGA1UdDwQE\nAwICBDAfBgNVHSMEGDAWgBSZi2aW6zvbsbc5xPRXW+/kJGr4zTAdBgNVHQ4EFgQU\nyJq0nsNfOkQuZh4jviQeA5CeUhUwCgYIKoZIzj0EAwIDSAAwRQIhAJYWNr6XLrSZ\nV2m6nqK6eKsHDPJM9duCVU/IpJi3p4C7AiB07R+nt60U9JsH1D4vZsAmHCpOO9Kp\n+9WJ/aCK50Q2Pg==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nIHHUaLvVkQdh\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nUhtr7afrDo19lqC3fuUgON8OzA==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\n8BJiTIConoZ3Fg==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nnar1CXfh613zSA==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nat4TfzlLiwQ1os+eLiigbukF\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\ntGGwvIsgeBA5jg==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nUgbiDi+/lSV/2B8=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINlbyK+267Mlod7//rFdxLVFoKj6RnEyoboKCuNZcNl8oAoGCCqGSM49\nAwEHoUQDQgAEKfFXz2/w8blYwdA5rBduuSZ4lPQ0BrZAjxo76CB64sTXe3uLURiY\ncA3zGY2FZxNLNUoLfjJh7pQwf0JHa3dGNw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBrTCCAVOgAwIBAgIUc52ml7xi8w4kcY4N8URwVc9KZ+MwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPSW50ZXJtZWRpYXRlIEExMCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAAMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4TVQtgs1\nm93GDtGA+GDcFGPCbwWjoGigeJCwIyx47wQgVovuewe32M/1xZJZhV17m2p/kwxd\n+tm55e3UcKxGz6OBjjCBizAdBgNVHQ4EFgQUKCRd1z5OHPFXr0D5S9gBnb4+7a0w\nHwYDVR0jBBgwFoAUv+y732eO3id53EGkGI0ONa0DQHwwCwYDVR0PBAQDAgeAMBMG\nA1UdJQQMMAoGCCsGAQUFBwMBMCcGA1UdEQEB/wQdMBuCGWN2ZS0yMDI0LTA1Njcu\nZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSAAwRQIgVi9otMg89Fq/j3ERDkV3Na+X\ndI0BEVs0X5z976Kdj+0CIQCbnzwfPTRTVQmhwlOKFgRSms5LMH5TlVrbPgtGFPNu\nAA==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIHXwWpYYC8Ue+AeOY+FNcPgHmmatw4Y1dmWnu5Ygrvb+oAoGCCqGSM49\nAwEHoUQDQgAE4TVQtgs1m93GDtGA+GDcFGPCbwWjoGigeJCwIyx47wQgVovuewe3\n2M/1xZJZhV17m2p/kwxd+tm55e3UcKxGzw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -42,13 +42,13 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> intermediate (pathlen:0) -> EE\n```\n\nThis is a \"trivial\" verification: the intermediate has a `pathlen:0`\nconstraint, but the leaf is an end entity and is therefore allowed.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUPXToiSFQs9DF5zXcTXyFESh6Z6gwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATcHow8YQ8g/9vyoP0w29Nos66H0zPMgPx2fTME\nDRCVh7gb2IC3TVhVbbL0KgSv+1YAAisKRkQwqSnX2CNCu0hpo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUNWFbntuBtlnr0TmeiXWzaaPeE20wCgYIKoZIzj0EAwIDSAAwRQIg\nH3tOc16nxjuR7rEkDSFafDhXwqZW5iMbp0jphj00AdsCIQDXmWeF3w1ylseeafws\n0/m6aVgQzAooV1s3XYnYe10mrw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUbHQ5NkEO4whN7TKjqnEKr+LGjHMwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQS9WJ/aSfnCENNchym7g9EOhkSubTDfdEy+nJk\nrgG6VcKxXSf2bzxJoyhpoHauPAMVu0RKMRwTaMZolwaT33Tyo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUO52/vojHKFjYixh/Quo3+dNpFlUwCgYIKoZIzj0EAwIDSAAwRQIg\nbEjIMCpg9OWnyqX2+qm1ZPl1TPwqguY89oRDSWPg16cCIQC60MUGg0ntC7XHDCcy\n8japTPBGAFgkmfFKjJU63gynRA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIICADCCAaagAwIBAgIUfgdAkWXqduOwmCaQgmy7IW+3FK8wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBnMTkwNwYDVQQLDDAzNTA4NTU1ODAxNzY1ODc3NTQ1MTAw\nNDEzNjA4NzI4MzI3Mzc3ODQ4NjM4MTE0OTYxKjAoBgNVBAMMIXg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tMDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA\nBG8S3f7l6uaIvLLtWnWOs/D5BVk1Udisyvfr68ULl/+ObjiBk01Y+cDo1rCLJiWy\n0pVTXMIR+sBugy4ph8VhNaGjezB5MBIGA1UdEwEB/wQIMAYBAf8CAQAwCwYDVR0P\nBAQDAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB8GA1UdIwQYMBaAFDVhW57b\ngbZZ69E5nol1s2mj3hNtMB0GA1UdDgQWBBSJ+hgyivQ24LXSSInKOiFEPrArKjAK\nBggqhkjOPQQDAgNIADBFAiBq9syh7lTe+sCiZ2uM/DJMdFgZcsZ+gHZwFu0m3WGt\nWAIhAO5LO38GbqVhFgRCdLswwgozMQ6iFkBnLlfiD0G3UYT6\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIB/zCCAaagAwIBAgIUPnx/u3ALmcSnnC9jMveN8JVmRpMwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBnMTkwNwYDVQQLDDA2MTkxNjI4NzM1NTQwMjcyNjE2MTMy\nOTUwMTUzODgwNzQ2NTE0ODI5Nzc2MzU0NDMxKjAoBgNVBAMMIXg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tMDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA\nBIE4MVsmKi/dv2CyMNdk3aqwjIrWNKnS8EftxrKsbRqpsHNd2zkP14ifiJGoMnB7\nl0GJOmfl9CM6wNMZeGyMBt6jezB5MBIGA1UdEwEB/wQIMAYBAf8CAQAwCwYDVR0P\nBAQDAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB8GA1UdIwQYMBaAFDudv76I\nxyhY2IsYf0LqN/nTaRZVMB0GA1UdDgQWBBR7DcGRz0zN8eOrcvu7uHQ5LwkmSzAK\nBggqhkjOPQQDAgNHADBEAiAuUSDvHDkh9Ez2ygF9qkpg+I23Dk2hfUPG4J+NIy28\nUwIgOAnLqJr3TcZOhftvryEmO4qme1xIeMAC207JVI1bvgE=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/TCCAaOgAwIBAgIUcAbvelrd51n5jOK0jJ+Hqoyex88wCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwMzUwODU1NTgwMTc2NTg3NzU0NTEwMDQxMzYwODcyODMyNzM3\nNzg0ODYzODExNDk2MSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTAwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAELrKL\nqCApSef0KY/1+aMRTfrQILfSt8y/ZJLlAIkhySascQUekbryqnZOdXJjFV1p8UgW\nPj9u7MGercvi+FnncqN8MHowHQYDVR0OBBYEFPpf9QWm/Mk9v+B/gI5rb4J75vJR\nMB8GA1UdIwQYMBaAFIn6GDKK9DbgtdJIico6IUQ+sCsqMAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNIADBFAiEAqhQWN8ngL0yG1CjKRhdbp6P0tR8Tx5yq5UHbDiutcZcC\nIAWtg1uCkOFzZ/RZVpa6j8x+W8V2L8rgFPte/utQcws7\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJOeuh2xDBQbIgQHAVO/LxKObXW/OIrUTAIu46G1Gxr9oAoGCCqGSM49\nAwEHoUQDQgAELrKLqCApSef0KY/1+aMRTfrQILfSt8y/ZJLlAIkhySascQUekbry\nqnZOdXJjFV1p8UgWPj9u7MGercvi+Fnncg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIF2eCtDlwAl0aRjHBuoXEfarRXLWHWr3g27YSsn02BCi\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJKz9aRHPIDYYRfsyMF/E6h4zWocOq4UfPsb4pXyl+TtoAoGCCqGSM49\nAwEHoUQDQgAEaopz3VDg+Pxk/tWvXon86emdiFhn2DdkFz5cP5o9/hGnME5GzANc\nC3sczFAi9jgihKV3DKJz3i+cY+WdS0/wjg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -68,13 +68,13 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> intermediate (pathlen:1) -> EE\n```\n\nThis is a \"trivial\" verification: the intermediate has a `pathlen:1`\nconstraint, but the leaf is an end entity and is therefore allowed.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nx8olrvUl+w7rP9Jms4XOxDPVeg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nqNSG9D/6CyXf+GwrHH3MEaRc\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nugIgUXLkAijSUwwGNSyy+t92J1dtpuk264UkoeZPcMN2O3k=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nxVcCIQD30lL72pHqINcDTE0Pt1pYFqkbjuNXSv1FqGfVq0dGhQ==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAPfl5ajzDn836m5AAuMR+ALyFTj4Y3lZClsk6b7fAbGu\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIA73KOCTfhWIZXYaWaHJjJ4VEo2ctwfldqJJstTWg0JgoAoGCCqGSM49\nAwEHoUQDQgAEm567BTch5W52hc0r2DW80QghzYomUB1NmT6PZI2OhENwMUx3k2dz\nvIAalopiTSwGLEWU0b5m3vvEcUYT8/NNeg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIQCxUMolNWkHf1yKv+/8Pff/uRsZ9AisrFHSxK72mE1WHQ==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIB0l5IuycjIzKwEBjPDCBFAEc9q8qdv5JkZsPTVPpX5koAoGCCqGSM49\nAwEHoUQDQgAEiSYG64GNEB4Aud6WZRpkZG2RdbWWc4vR6CToVcZC9OdnO0Csoo1C\nRIOAp9Jgb+HfECKeJds3mVPeA0aMEToUWw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -94,13 +94,13 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> intermediate (pathlen:2) -> EE\n```\n\nThis is a \"trivial\" verification: the intermediate has a `pathlen:2`\nconstraint, but the leaf is an end entity and is therefore allowed.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUULLB4ai7P6L7jujJboU3/X4bjUAwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQyELi0KqEUlBhPSWabRzJTN4GTogYVZaJ20sh7\nVgyg84ZH6O50rgd3JCC1wDPbKfv/2xAzR5T+WZQSZnibUObQo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUREf89hAI3RT9Q/+qML556g/lFHwwCgYIKoZIzj0EAwIDSAAwRQIg\nQV87WwkD8/9qAjgV6/hf/GWyeWJ4uJsHPvbHDgRNEQQCIQD2aZr4fTaW9dADdtTH\nl2BIG2tcM3G9sHjE0RugS2yRWA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n5akG6wiT9r8dRLs2UdujUo0cmQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nJgIhANF/I99v1bzeTkigB/WmFiITogkJSFnZ46RIFW+rgUrn\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n8gIgJ2oI72r8Z9976d82x5pZA5AeXfwVK+5TLBM+uDlg7Zo=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nMZSYeLPb7QOZYKOI9Cp593shdY84dEul7qlKd69ukiA=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJ38K6ZnOjhIT1QF/+ndwcgN+AHSINNzufXjG7S8yAIqoAoGCCqGSM49\nAwEHoUQDQgAEWqKB9TkliMGrOd1Rx+n1354Xo7lGQuzvBzSvAfiNnYAS5lHqTqJ+\np0fgDjPpYG4noaeuEuE+TWvtnnJtUfVcFQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nQrcAvRRcyYSJOBN6C5LYV9zL6qsGO2KaU/wxsfnLvTI=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMcrLtKlrQ5g28PkT5EqgCup7iXL/c1Sb3gfaP3V9fvVoAoGCCqGSM49\nAwEHoUQDQgAEVN2olZsBrKPSyilWU9Q1FhlcXDaZUQiOkoeCYATW529NL+/kAZmB\nsijtd6z8vIS8dWtgKV3XmOf2htMVQ0Ajxw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -120,13 +120,13 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> intermediate (pathlen:0) -> intermediate (pathlen:0)\n```\n\nThis is, unintuitively, a valid chain construction: RFC 5280 4.2.1.9\nnotes that the leaf certificate in a validation path is definitionally\nnot an intermediate, meaning that it is not included in the maximum\nnumber of intermediate certificates that may follow a path length\nconstrained CA certificate:\n\n> Note: The last certificate in the certification path is not an intermediate\n> certificate, and is not included in this limit. Usually, the last certificate\n> is an end entity certificate, but it can be a CA certificate.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nOXKkS632gVj7q/h8o+NcJrLBUCU=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nkd0LybF1Qfuxh6S8iZP0Q+Lm\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIIB/zCCAaagAwIBAgIUTqPTBzIrIE5HLdcfTwZbw7+R1gcwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBnMTkwNwYDVQQLDDA2MzE1MDk3MjE4NTA3NjY0ODUwNzc4\nMjIzNjY3NTY1NjAwMzg3NDc4MzcwNDg4MDMxKjAoBgNVBAMMIXg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tMDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA\nBEvIu5FsoQZExss9V+27lTp6LQO11EVZB1KC9RJx4hA6s+xtRlJEaBw93zchqShv\ni2d2UN15YMy+wskwvVm4UaejezB5MBIGA1UdEwEB/wQIMAYBAf8CAQAwCwYDVR0P\nBAQDAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB8GA1UdIwQYMBaAFPqc0dAV\nEitfEICMl7+k8Bb0SU7YMB0GA1UdDgQWBBQS/kHq9/Tx/LIn5uVbm/23Ug2pfDAK\nBggqhkjOPQQDAgNHADBEAiBWnjcH9FopeX9zJLvR9I+HY1w5SOVAsEx60qYrL8M8\nvQIgNrchq/l0orweEPd3nG72bjZPeaucDoZErkwhFDePUk8=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nAiAehpK6yA5UhFMZVcFuKBkghJY2JJXYB7uB6uUrAseA5A==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nCJVEkXnL+dSBxuzw8i1T73cN\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDtKrFocv0+Kcb7NFwRw3VXlRx9vDdyPndYw3q7VkXgvoAoGCCqGSM49\nAwEHoUQDQgAEAiCNFOikc28KYAymjRQyonZDYDsbGWOPiE6ErQkGYPjGQBK5XOe3\nzjxen30SEIXnJSraaF4LBUVgLWL1xU2woQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\ntVwt3MtY2y0XR5RpS+k=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINXEZI3/TaYoDaBN1fkKjvtKwGEDqdH6KMxN9Uum+e0goAoGCCqGSM49\nAwEHoUQDQgAEx+Gn96hjmfYHddBuhae4gdbHDVtGikK111kJoew/wXpJcTYELroD\nZd+siEcBFmrdFIf2oyggGF0dzC9GlZV5jg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -146,14 +146,14 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate (pathlen:0) -> intermediate (pathlen:0) -> EE\n```\n\nThis violates the first intermediate's `pathlen:0` constraint,\nwhich requires that any subsequent certificate be an end-entity and not\na CA itself.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\naOGVhb79hsXYD3VGPLZeNwYFOw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUDepFai4NbeMgvWGmXu0i6uSda8YwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATzkiexmDxgc93+raMaiIRG4cCUqIjaky5ZRFrN\nsWAkJXvKe0wzLETHD+yoXDQOpLbqOlb74sMIEvL7Ra1ZOAyRo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUmEw6WHnFni8FehKO5S+oCCjJz/QwCgYIKoZIzj0EAwIDSAAwRQIh\nAIwkM3lBoarBLxBUrvEs53sCuimMCsIibFopKi+tGehtAiBcLiLtNM8stvhgI4hz\ni1warvJMnReSWNP9IxtwbHRg5g==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\ni90CIQDje1KKPXVF3HGN/62GEAiFFOxpIOkUfV1NxFsJkXAA9Q==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----\nMIICTjCCAfOgAwIBAgIUK2ic595P8xmNBwoU6OMCuc8gKvcwCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwMTA4ODU4NTk3MjMzNzU5MDEzMzIxOTU4NTAzNzQ5NjgxNTkx\nNDc0NDY3NTczOTAyMSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTAwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMGcxOTA3\nBgNVBAsMMDEwMTYwMjI4MzE1NjM2MjgyMTAwMjY5NDMyMjQ1OTE2MDk0NDk2Mzkw\nMjcxNTUzNTEqMCgGA1UEAwwheDUwOS1saW1iby1pbnRlcm1lZGlhdGUtcGF0aGxl\nbi0wMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEIqBRiIzZM0Q7Ux/7pDjEWoLg\nllnb6zAjgD03ZHHn8hWfbThT2Q7Bu3vfA6FNRtEIWTpDSVPlsBOkF60o6Cd5e6N7\nMHkwEgYDVR0TAQH/BAgwBgEB/wIBADALBgNVHQ8EBAMCAgQwFgYDVR0RBA8wDYIL\nZXhhbXBsZS5jb20wHwYDVR0jBBgwFoAUp5FtJEc3/HE7OvW9SJeB/rUq0L8wHQYD\nVR0OBBYEFJMVx6pvA9AwIbhI4bKldHFEZF7xMAoGCCqGSM49BAMCA0kAMEYCIQCW\nlgVJLl34xBgE34xP5htoNCJ7KD8MmFzUJxHlWNilIgIhAOWmfZXBj9vmA+iIKp78\nAZicr4hhd1lpopCS2ll+wL5w\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nAiEA214w8ffEMSVGyae4DCRni+yrhN+XAykwor88OTAI4rA=\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\n1mWC1ipWLqrqQWmtK53c\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nU8k68/9U5uJI7R6qidUFTY57x8mwtC3+PCymsBaaqlc=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJjCz2vpK18P13ZzUoJ5jccaTORXBe6izc8SJp5MXvOXoAoGCCqGSM49\nAwEHoUQDQgAE9I/vsBn/sM0tuIfqXVthmmBwk3HkqnP5POa+Y5eIbO6AdNVW5o25\npX6mqQDXvRUOrd/FH8el+PvhmfdISEqklg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/jCCAaOgAwIBAgIUPiJn0qOXOdSYdG2khIvuk+oqMQEwCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwMjA5NDQ2MDkyMzk5MTM1MDEyOTMxMTM4Nzg4NzcwMzY4MDQw\nNDg5MzcxODAyNDMxMSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTAwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5hLu\nnoghSRJr5w0xJEXnCahv4cpbWzF5pPfuYjkhYicZdZ36p8lrl0YITb1n0qK0CCoW\nmgJJHM9siW8/+INW4aN8MHowHQYDVR0OBBYEFPycld8Npml/bFta+iyPjpF8R7jm\nMB8GA1UdIwQYMBaAFKwh6mT4djlHmmpSS8Qi/Muzc7cZMAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNJADBGAiEA3zPoSTwi9ONrMtyDpVpOLTMCYTLEaGTmtZn/jHJHUEUC\nIQCiQQxG/nbSsRi7mS4mj/VRb/3/YCXHA3KJNrHCLm0gjQ==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIIEExJtT77GsMJ53b3M2ADkURNtDNjATHTs3kApxpHUioAoGCCqGSM49\nAwEHoUQDQgAE5hLunoghSRJr5w0xJEXnCahv4cpbWzF5pPfuYjkhYicZdZ36p8lr\nl0YITb1n0qK0CCoWmgJJHM9siW8/+INW4Q==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -173,14 +173,14 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> intermediate (pathlen:1) -> intermediate (pathlen:2) -> EE\n```\n\nThis is a less straightforward case as the second intermediate's `pathlen:2`\nconstraint seems to contradict the first intermediate's `pathlen:1`\nconstraint.\n\nRFC 5280 permits this as part of supporting multiple validation paths.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nRqtSAcwk19uCoqbYPTugs3ufAQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nNaB3mVh24kTCx7hJJyJt+oZ7GA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\ndAIgFymzhUjKE/HOi4Qv7lreVur/0KpTfGm6mZYQ/ItJhh0=\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nzMCrlWJ/gVKn5bL8YB/U+Kw=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nBvcCIQCimnBrEUTEdBx/sG3eYMdz5KVJ9z5Av02FsRpxuPqiaQ==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nfFR9cstW7QGRSqKSIkuiCg==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/TCCAaOgAwIBAgIUKEkp38cSH8qZNHcLI/Tk4fwv1K4wCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwMzUyMjQxOTU2NzMzNTQ1OTQ1OTYwNTUzODAyMDQ0OTEyODg2\nMjI3NTUzNTAwMzY3MSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTIwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6+SC\nvUPqMOvAq/2sHx84vQQi8AHRG56NwwyCd2EfzN3krIjrlQErS9KDMONNT6Tf0VSP\nwIgCTg1C9bVVNQcme6N8MHowHQYDVR0OBBYEFNklf1ikZjb1Q5hBA2mY7gcE+Y1N\nMB8GA1UdIwQYMBaAFHGSs95S+AudGwVgK/ty5vVcaZtAMAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNIADBFAiEAubLyeFIg174o3BSDiRFD9cDnElu6TbCKVKyYmRm26SAC\nIHxJg+EfEI8lSm/1WSnsaXTDzvlzxtUNqGI/D2X3MrzX\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIOnf4vnebZHlxRIDkUAALdCC+518n8rx/7oxGmKs6sr7oAoGCCqGSM49\nAwEHoUQDQgAE6+SCvUPqMOvAq/2sHx84vQQi8AHRG56NwwyCd2EfzN3krIjrlQEr\nS9KDMONNT6Tf0VSPwIgCTg1C9bVVNQcmew==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIQDPZ3bkaTOHqpLVrq0OcYWQhrYsuEbIuoxkQko6C4W2kg==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEel2tkwUEv2QUsLR0BlCrX6gU0SbWLZRAlzBM1/WMh7oAoGCCqGSM49\nAwEHoUQDQgAEbgmXucEvOnQBz6/FPWLwO3/IQF7uRUGoevyRhDQqoF7TJMz263su\niO23m1ROYYN5if8VUdkuYX+7MLcEuZvcJQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -200,15 +200,15 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate (pathlen:1) -> intermediate (pathlen:0) -> intermediate (pathlen:0) -> EE\n```\n\nThis violates the second intermediate's `pathlen:0` constraint, which\nforbids any subsequent issuing certificates (which the third intermediate\nis).", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nQb4JdezTXyHVJAzSDkDOtB7z6w==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nP+5+5EGyT/0BTWwi97kmBojUqw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nCKACIQCfejToa6J8u8nk3p49sa5hjTjWEoAmPB6fMli1cLh+/A==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\n5G4IfM+2vUZk3gABe3lpEQU5\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nbFBTl482Bmg2iB++6trddQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nATsCIFiT/6Yqk5ktuP8XhD+cA1tIqSEu6W3jmF5X5XUi9szl\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nAMX+yh27tiwXzlwE6Rky\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nuVoU61N1KnsF59i4SgX5\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/DCCAaOgAwIBAgIUF8gWggaFOG2VeUeHrMyWo5EFlDMwCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwNDI4MzAyMDUzNzc3NDM5MDM0NjQ5NDg1MDIwODU1NjA0MTgy\nNDcyNDAzNTA5NDI0MSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTAwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEl/f9\nH9OhUd9+JhKZLB/gmjVD30Cvz6rIdKcwKxBNEm/lCGhp25mw4offC4ybaRsYpP/k\nyFGkCU3zlGt3E14VbqN8MHowHQYDVR0OBBYEFM/pcd21p+lkC0MdoBPHFwc6DlaX\nMB8GA1UdIwQYMBaAFHs3XVabTAm+Hsdswjhn76t86IAuMAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNHADBEAiAR4PsYKsu3KG5i79MW4ZM0H24eAkFN2aUgF8hyXzLtLQIg\nQz8XqL4efFk18sQGDCziFG8boewdL1x/insamo4Ai9s=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIHGpstRQNtsKvU2DVU3Q+WQpLgYia6SQDOE7U7fUz/fRoAoGCCqGSM49\nAwEHoUQDQgAEl/f9H9OhUd9+JhKZLB/gmjVD30Cvz6rIdKcwKxBNEm/lCGhp25mw\n4offC4ybaRsYpP/kyFGkCU3zlGt3E14Vbg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAOWftURsO+13HX0s+YiJPYTZw4T5jgkvRzvnOTPLoIvS\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIFgZ2PYbJfuZG7QWhjE429pAGX6eOP6Hu7AraghzV6oJoAoGCCqGSM49\nAwEHoUQDQgAEJ3sVLEokHEkgZ1WIFGAcV5xq18gSu2k2fpD7+Y8o3JaJ8eG5DcIj\nAd0502zSKcehrlE6giPdws5QwFGO5hTZZA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -228,15 +228,15 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> ICA' (pathlen:1) -> ICA' (pathlen:1) -> ICA'' (pathlen:0) -> EE\n```\n\nThe second ICA' intermediate is a self-issued certificate. Self-issued certificates\nare certificates with identical issuers and subjects. While this chain trivially\nseems to violate the assigned path length constraints, the RFC 5280 4.2.1.9\nstates that self issued certificates should not be counted.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n/fjstwEYfo9uOlcdIoHf0qlhMQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUCAo4B3ftXyFoE0PORpvvD3RAHgQwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARWpOIpBZwtld5pbC3gYhqlVRtG+b7uveclBlSk\nfGRo6V4T13RqQxJM7CEKgKITdnjR5m1RPy+XEkAetNcSYVAro1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUp4Q76TM53O+QSdK3NcqBNuY/gqUwCgYIKoZIzj0EAwIDSAAwRQIh\nAIoKWbnYYF/OLjLtmYI54hXm9IcbEiD5TMudPrUmTykIAiBMZdf/1cJQrwSK+CVb\nXM5uZ/5nwsEnYmPtOvUxWpzpuw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nIQIgA95rh+lbX9hegHCCcLPixP4M0/O9mqzMGxc+i396VP0=\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nt4u/q0lJJxAi+nFRHvC6NFc=\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nUZbFDr70E66Hqz/k5n3HYVxw\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nAiBTh4IGXv1Z/3GGvc2zQqzfajeiPMpXjNjmJ984kzykrA==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\n+5fq8To7QUq54Y3DXMHyIA==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----\nMIICSzCCAfKgAwIBAgIUYJdM4qftJCc535qUzMb0Elig2QcwCgYIKoZIzj0EAwIw\nZjE4MDYGA1UECwwvNDU4OTk4MTQ0NDc5NzU0MDQ3NzUxOTExNDcxMDU2OTcwMjQ4\nMTU3NjU5MjEyODQxKjAoBgNVBAMMIXg1MDktbGltYm8taW50ZXJtZWRpYXRlLXBh\ndGhsZW4tMTAgFw03MDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowZzE5MDcG\nA1UECwwwMTk1NDc0MjYyMjUwNDI5OTk2NzAyNDMwNDczNTQ0OTgxNzI4NjE1ODgy\nNTI2MDExMSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1wYXRobGVu\nLTAwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQ7xquqj6lLznGaRq3gm4wn9sog\nGymEF8UWijkXSDFVsDe/KKL5XbTWmlClpXexFhEIflsRckmfeu1v9WrQexpCo3sw\neTASBgNVHRMBAf8ECDAGAQH/AgEAMAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtl\neGFtcGxlLmNvbTAfBgNVHSMEGDAWgBTTMIHndTVBE2Jzq+TldRzrQh+TmjAdBgNV\nHQ4EFgQUh3e09IFhW3ilQ/oO7i6oYZCK/CAwCgYIKoZIzj0EAwIDRwAwRAIge6gs\nZWYKRF3XMeETMPsHZTgfcXQ8DCRe/PXYcN+gSi8CICQupEdoJAua5/Jpl9wiJRuK\nfa2sW8CZoY9mgPTgG/kY\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIA0XgHlas/jnad+4Si3XDyvxhdrLkX9MkiotUuzwaz9+\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIF4XAeqzMR7MWDoOyiXhRoR/ClBU0skxxHRnapdKACP9oAoGCCqGSM49\nAwEHoUQDQgAEetG/Xf6rFRrATauSL8iSEtfvYS4Z6v2B60aqcYhWpWf0c0oUnL28\nSBjafROddV/O1yuXUvwVNXCMVXwpbs82Vg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nICls31yaYClh7MS2+2M2uTso7PFtiOlLTHkylASGY/7j\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIOS15oaI4dWNWjsLDqV7FQNswsMxih8WSObT5PTn/mTOoAoGCCqGSM49\nAwEHoUQDQgAE2rRip+5ZabXkfM1EoeawdmFoipzRrfiSd5JrmDGhvN8Ecc48ForF\nFYZsKOyHisamAXHvaFvjDLYpGvDy9CVtwA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -258,11 +258,11 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nWhen validating with a maximum chain depth of 0, there may not be any\nintermediates.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nZ1sMVP9taYl9VXy8W0J6IPvhfVo=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nq0trc2HcdhqeCkP8AR81pB/W\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nBS+2QBQ=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIOcL6rSdeTy0pX/bAU9bMA2ZPJ2SOOXA6ouO431+4gqroAoGCCqGSM49\nAwEHoUQDQgAEUzQ5+yQn4pf96hVczY5TPPh0bjMzuTKd+xnURg30D/pkhwIhPEni\nJmvTlFS/rDNZsAYl/8AW0jxshr2abz5/Ag==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nn7Yr7w==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEYW92kaWx6x/VmFYtVh2GoaP55474A22hSh09A4jelToAoGCCqGSM49\nAwEHoUQDQgAE3gmhisKPmpi17Vio8q2wI6GKjwl2peKl0dO6F0nwZcpo+CmtlFLH\n+EqAqHn/ZJUft20umne2GM7L507pO500zg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -284,13 +284,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA' -> leaf\n```\n\nWhen validating with a maximum chain depth of 0, there may not be any\nintermediates.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUGCpymp2te2t0s1ReEzgB+w+gSggwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATai47xgYpRL+2GK+kP23DcuR1/9ZxVxCYN77a7\nXmfacaL4TbG0EJ157Dz4ONGAu/lgA/wvxAvgPckcn98JX+w0o1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUDdziuv0XSR6l5sen/t82Xjl+BhMwCgYIKoZIzj0EAwIDSAAwRQIh\nAPWQJ2asOdPyLAlCD7NEQxQkDHkETMEjylLChykfqrzlAiAZc+oYN1rW1j+qU+9j\na45yWouNFSX4M207P65w5nLXpQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nf2TpBmhY4WV71TgspgkVfkBN0Q==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nlAIgay3QTw12922+krpf0XAneDuiar6jteX16OzM8Brv4IQ=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIB/zCCAaagAwIBAgIUbARILAP17Xzw9m9Qc9+snDur9dcwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBqMTkwNwYDVQQLDDA2ODY2MzcwNDI1Mzc4MTA2ODEyMzA4\nNzMwMzk5MTYxNDEyNTI5NjIyMzIyMDIzMjUxLTArBgNVBAMMJHg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABH4aWoFFZfpSBlR3P7D01UcTyE7zr8wQZRYR6DiLKrT72znXgh02PNQJiFRP\nuWFNGLfw9XRacHFHmyhphpSEU72jeDB2MA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0P\nBAQDAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB8GA1UdIwQYMBaAFJZsWq7M\nOnjMZep+UKnB1hw5BRkEMB0GA1UdDgQWBBTmt9IVxkAZifvlugpgPrRTaPKDujAK\nBggqhkjOPQQDAgNHADBEAiBFktI93r2yjtMMMAOUmGLwD8TF3gMVjsgM1Izy/vMz\ndwIgRmSjqQ+QVh/mPy/ceM4CF3I9tyMEUP1dYL8teGxPa3M=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nSwIgI/7bu5tf44EfSmc4A4oLAaQnZ2JsvCz/hW2llap4Te8=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIG+uAv/73TCJZEzm7oe3vAE0+jXnHLsqryok0CLs65WFoAoGCCqGSM49\nAwEHoUQDQgAE99ma42vfOPpymiFC809GAStmrhT9TH5qLSMFLT6LDY9o87gMyXWR\nlTnQoFBn/kVKeBTHZ7UB66LO8RXeTE5ggg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\neAIgDoeLDG6NwIq0DK55Def05PNQTagjlXTKfEtLMqMJVoU=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPjkuk9iTqwCcVhed9Qr8BtFmivCf8CoDtxvni1PyBjwoAoGCCqGSM49\nAwEHoUQDQgAEzt9NzvdCmVrzLh9pQDvMvTgqsR1A8yTk4GLXaKIYV+xPGTnZUuRr\nAUGpwbzqqWx1HKPiiK7Tec1UK8wwyJkI6g==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -312,13 +312,13 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> ICA' -> leaf\n```\n\nWhen validating with a maximum chain depth of 1, there may only be one\nlogical intermediate.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBkDCCATWgAwIBAgIUEU6HS1RTmzRSIauexmdpghME2SUwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASXtNtBCAbC+cxqNgJVTpkcA0CnUxfMKITeVsOH\nk6Ch78pmptCMqw/giaufru6vyHDvnaYpJYxQJmEOQcxGGgiLo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUFz3I0KKQtqWLE7GYQsN9i6Q2WQ0wCgYIKoZIzj0EAwIDSQAwRgIh\nAKpOzwIOubX4KevQlvK6Hu1pBLw4e6xVksW1ttUQOUHqAiEAm5mNYHeRsWq09QRD\nksdIgpXnba+ansu9Ecta4TZHB8o=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nBT3xx9uxjxlkenPsphLVr1VmXw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nHAIhALMvmALo2m2SYi+k45maKrYl4PcL8tkRcBeK1i/Ap4Bx\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n8u8CIHSkcArMJKSFGbLNHHFfSkb6qY0pKsHu/R9dm8H7xgZe\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAiEAjl3aHti0l4fCKT8m1XKKaDLL2pdVaVE2kaqZqidXmzU=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIGBkQ8GF7rsE4XIcPU8yLnOiIzZOmkoRI3LE4eY8HqOToAoGCCqGSM49\nAwEHoUQDQgAEL1FDD7uW9sZIsKP+OJskX2TSqqv/EVYpFkCbgggy7ld/JewjPAB6\nLR3BZ+CWePcJabBQNOWIsXarYHiCRSDScg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nGAIgXUAMGuT2fI2xBW5Acj3w7r7Ji8xo4xrYX0nCjhbLIEw=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIO3F/77VcyESTnp4vALGQIobe/B4uv4tcq038TqSi8I+oAoGCCqGSM49\nAwEHoUQDQgAEqMdIOApWl+QbYLaPs1SUxNsMjcqKH9kpRkMSBXkJoLxLcDOB16BZ\nk+Kq6d00hu7H0IskqjNQN+0pz5agK5cJFw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -340,14 +340,14 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA' -> ICA'' -> leaf\n```\n\nWhen validating with a maximum chain depth of 1, there may only be one\nlogical intermediate.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nqUOdcypoP/c451eau2YEBsdyIQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nlY3LwOc09tUrTsdbB9iyIG8meBg=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nRAIgC1dHrW8B6dFjCAuKjvJ758TLfDGVTIPVVprcUoi/yzE=\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\ntqEMxxngcqU1XUjIxlszUyneuZk=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nHR8CIGUSHkuXgK9dMT+6tX1QQeqE2G5y4LNXrJYrWoPE3glK\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\no8m2w62gABLHgsV7MfI59GAh\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICADCCAaagAwIBAgIUKq2mogo+AFrUhxiieEY3nkO8b+cwCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwMTgxNzMzMjgxODcyMjcyMTU5NDc1MzEwMDkyNTE4MjcwOTU2\nMjU0MzQzNjYzMzg1MS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYx\nFDASBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE\nE0QqYv6ihBJP11Y6IwkxSYycVikTWZUQhMhSuZNnr9OMimjDVbOPOZjRl90TJRW2\nxCgoou1mqX7X4FIcr4EMVKN8MHowHQYDVR0OBBYEFPUsedMoskzCxszt+li69Mof\nH1hfMB8GA1UdIwQYMBaAFEDRx4wtmHw896Iqb0lJM8s4V5zDMAsGA1UdDwQEAwIH\ngDATBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAK\nBggqhkjOPQQDAgNIADBFAiEAlBqmsmlHdTxufwYTohZwmvdOo3aejmadNGbefTEl\nVOwCIFXPJQPPd0vV655b0Ebj5O4zZlZFlEngiRBF7vjeYMPD\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIGKfcwbi4m+XfDTtSLySZPc45gg8RWhNWiM3CA5jNJiWoAoGCCqGSM49\nAwEHoUQDQgAEE0QqYv6ihBJP11Y6IwkxSYycVikTWZUQhMhSuZNnr9OMimjDVbOP\nOZjRl90TJRW2xCgoou1mqX7X4FIcr4EMVA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAiEAqrosOglXECKsbH34mQq/YlAuKuusVL/JXPrjozZLNKg=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJw5kIp03c48hmQ7W5U23HM53OEyiT7JzZ6rtfvfy29doAoGCCqGSM49\nAwEHoUQDQgAEeFNmoDFCb0lDJR+eziYPI9pUY15O3gicxmYuhgJ8KBrk4C6N70ol\n98Jn7KWrqucepp2D0eFFBaIBnMPVJVdsPA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -369,14 +369,14 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> ICA' -> ICA' -> leaf\n```\n\nWhen validating with a maximum chain depth of 1, there may only be one\nlogical intermediate.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nyNmF6kr650Z7mMorKbWw7n6yaw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nG4BC0yRDlVIb8cBOP1mPV9qL\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\npK0CIHCC/hhXfZ4qTVwV4aSxL2VsZZlCXPykFq71Sykhd6Ru\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----\nMIICUDCCAfagAwIBAgIUSBh5k2O/byAWq7CM872ltkUjqa4wCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwMjY1MTgwODcxNTc1MDIzMDQ3NDQ4MjMwODg2OTI0MzYwNjQ3\nNTczNzg5NzcxMjY5MS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMGox\nOTA3BgNVBAsMMDI2NTE4MDg3MTU3NTAyMzA0NzQ0ODIzMDg4NjkyNDM2MDY0NzU3\nMzc4OTc3MTI2OTEtMCsGA1UEAwwkeDUwOS1saW1iby1pbnRlcm1lZGlhdGUtcGF0\naGxlbi1Ob25lMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEZlj/joEbf+pkry3A\nKcMyRjfUtPjYC7EinYOGUSgayCLhMiq4/60it5B1AUKWVAyAyRhqlnPn4cLSlwgE\nwnUgfaN4MHYwDwYDVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAgQwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wHwYDVR0jBBgwFoAUPYo4l+iIUfIZRAi68X3pqQCY7v4w\nHQYDVR0OBBYEFDqW/LCZXXl04Yipb8WyCP9AEs+3MAoGCCqGSM49BAMCA0gAMEUC\nIQDm/PlMvQw4slS83vwvRFd5W344PBRI0jObSDncvyENwgIgAJJbHJhuFH3y2Gyg\nuhDeZIHlIUqYMdCvVNgsbEqwLK8=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nlXkCIQCKU4z2U5/A0IqeI9Mh28Cb20hr9PTXLGQOFOUg6l1qHQ==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nxYLFp0EHLLJUktetaEUpXrxDzeS8\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\ndXACIQDnjs6zTZVT/AIG8Us94InXP5IngSC9Lkxa0+0lLRbvbQ==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIOvNCY1WClJCYk7nF6rMOTg4YMZcG2pvJmy6vj+FuT27oAoGCCqGSM49\nAwEHoUQDQgAEJxcCFEgSD0k4AryG9NVVWQPJFzu0iDdS+I2vZwxpgMnswRwykFXc\nzcOY08d8PXtDtI2A23Mw9bdbCpDcit33NA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n1wIhALmN/tsHnMn7CaQNvE7vAlMKLNGohbMYEgWbKsb+L14T\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIHr3co2tZWh1OnVx5xD8UvSWQjIKivLeBr1scUbHwJ6FoAoGCCqGSM49\nAwEHoUQDQgAE03cxKOMJ9BLYzAQxPk0ZZb+VB8BHrtrTglmQ5YlHrsXzR65PSeal\n+mttSbXHT+67CtLGP/klpe23pbknL4Ijiw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -396,14 +396,14 @@ "description": "Produces the following chain:\n\n```\nroot 2 -> intermediate (expired) -> root -> EE\n```\n\nBoth roots are trusted. A chain should be built successfully, disregarding\nthe expired intermediate certificate and the second root. This scenario is\nknown as the \"chain of pain\"; for further reference, see\n.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUUhPG6ycUjVZaaSCEFKhllDfEpI0wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQ85xIihlDoS1L7BJNXuv2HfDlsJEOCUx9XHDqX\nJLbVEMCg2JLMq/HfFXUbJZq5qNqRKhoLYlef09+7goLzTSaXo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUZ4zhnGsF2eN+8KdB4FRKsCdGPBQwCgYIKoZIzj0EAwIDSAAwRQIg\nB5FjKR20AtC6Z1Cx6mam9uw4+414tcQnQPl6Ssm5/10CIQDO2NFjV5JTK7ZJvFS4\nul8nxNnH1j82AB1nOpdlVVHAEQ==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\n+V1AUgC3uoLzyvlJ5z/4ZOvrxIErq9o=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nIsZsKxBw26+4VCTNRngKsO259g==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----\nMIIBkzCCATmgAwIBAgIUfb5bWAmCphtS3Kjm6HVgBCpzRBwwCgYIKoZIzj0EAwIw\nHDEaMBgGA1UEAwwReDUwOS1saW1iby1yb290LTIwIBcNNzAwMTAxMDAwMDAxWhgP\nMjk2OTA1MDMwMDAwMDFaMBwxGjAYBgNVBAMMEXg1MDktbGltYm8tcm9vdC0yMFkw\nEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAETg9jv1+P+t9F7UiMsUjSDYQsL9uvSIQm\noRc4NLFqGRh1MLBazoSBDXdEB5l4SHdiR+wO5EwQ/yCphJZmGbzq6aNXMFUwDwYD\nVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5j\nb20wHQYDVR0OBBYEFJgr2qNQ7noffzF4Vrx5amXK3mzAMAoGCCqGSM49BAMCA0gA\nMEUCIQDy75ZTuglCwzILnQyhqnoElQE8me7eR0tiTYNDwEP6JwIgbFY/+BDqMSIL\nwRsDC6RmG8dj5QHv7PRCpueOjIZLPfs=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nR3NaFR9V\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nRDFozS1B\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nSWZy3w==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIGXYKALHbSXCP5dG8hR7+cg1NbcwPl4NMrpoO0iCHvsQoAoGCCqGSM49\nAwEHoUQDQgAE2gsv5pcw8+DBRnuIIRDftoQubskPb8JBN+os7JCfvKDw1h3TPs1L\nDiy/rf1tYFMqaSkJCMHedWDU7czqRFGOOw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nrfcj30I=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIHo9wQUZtGeTCLdGyYd0WjeshjsFyHk4HUhkTdJSkSVNoAoGCCqGSM49\nAwEHoUQDQgAEMWF53TwAVxGfgYMz5W+m58XebggGduxE10/eaztUB6vqUqjQVssY\niGoHk8e6RzteYSzLrok8ja8ssLBiwHtVYA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -423,14 +423,14 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -/-> (ICA' <-> ICA'') -> EE\n```\n\n`ICA'` and `ICA''` are separate logical CAs that sign for each other.\nNeither chains up to the root.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nMqd0fDS8/j8vlslDMSY3G1PYdA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUKasTWVXldieKewG8MZSn0mXl9QQwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQOnFg8GIMJtZLtJnzmAuQhKbuFSmjsz06TSO10\nUok8Mjn7vdc1o6uj0KdrIJRjfyi5bwTk//pSvXjrvCP0muoso1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUhuarUDRTuQ78Z3/qJu07jEpd7n8wCgYIKoZIzj0EAwIDSAAwRQIh\nAKQR66sPt62AW3fu1imui5C5dGrjEGrjzOPKP438LbqqAiA45s40od+XvJyxxKDT\n4NHqYj7Sjs/8Zk13v93kzyqCSQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n06vakL8uzRvfD7Y=\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nbhBjZeKGMUFWwEyvtw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nu40ZUyrtJ4RVsFYa\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----\nMIIBuTCCAV6gAwIBAgIUCAsgfzvBV72VwL717U22aUxVpPwwCgYIKoZIzj0EAwIw\nKjEoMCYGA1UEAwwfaW50ZXJtZWRpYXRlLWN5Y2xlLWRpc3RpbmN0LWNhMTAgFw03\nMDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowKjEoMCYGA1UEAwwfaW50ZXJt\nZWRpYXRlLWN5Y2xlLWRpc3RpbmN0LWNhMjBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABOVmMkxkeaEj6cBg6Td34CuvZmoTzBkX6KLoJ9Aeqeli4YYqzpX6zGxD7eGd\ntIk8/LmqFqlhl+ElfQ7dRBFolXSjYDBeMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0P\nBAQDAgIEMB8GA1UdIwQYMBaAFC840xTbAuqifBxAl4s4L00GoU2BMB0GA1UdDgQW\nBBQANd4Elg/H6UFUT2KfwUlheZrJCDAKBggqhkjOPQQDAgNJADBGAiEAh1T3hb6S\nRTrK88DpvN8EeidA9SWkswnJbKXWwAQgD4oCIQCPRRg8adAqPIRMyV4K2BBFwlEE\n7Jm45rWnEfyH5sozOg==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nxUFgvpKe3ogasZe4uEIA5sadvJA=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIGhuI6+yMv6X0x0oVoj6AEdEaLJM4Pv0/lXTY0UqxBLeoAoGCCqGSM49\nAwEHoUQDQgAE2Mn2/17uGUVQKOa1UBCaTz42rrFQCfqzkusNy+Zg4gYzcv+p6o71\nNU8PQDR69QC4Tkjz3UGrqSE63dPrUWuZ2Q==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBvzCCAWagAwIBAgIUIQvC13XDIB+JbDypc52uT9dW4/MwCgYIKoZIzj0EAwIw\nKjEoMCYGA1UEAwwfaW50ZXJtZWRpYXRlLWN5Y2xlLWRpc3RpbmN0LWNhMTAgFw03\nMDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowFjEUMBIGA1UEAwwLZXhhbXBs\nZS5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASCXDGlnaQwyaJAAG2PDvbc\nHmF7V2Pp77aBaq9Vji9HnbzFWVz6LncpaCcpMAfItgG8RcNvFM5dmZHs8b9pmao8\no3wwejAdBgNVHQ4EFgQUFoN4vMDkHw5Iyrfy5Eucd0VmxfYwHwYDVR0jBBgwFoAU\nLzjTFNsC6qJ8HECXizgvTQahTYEwCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoGCCsG\nAQUFBwMBMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMAoGCCqGSM49BAMCA0cAMEQC\nIDxcLK4lykmctePVzUHpBtCudbh4hxwxyD55MjWej+2HAiBWQiQekF66wlASVi3t\nRnYIdeRoQdeFjZyiYA6A41SKzQ==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEILJu5vlXHrtx89gKzJUWVbJ52u3NyCBOth1gJ6qs3VvdoAoGCCqGSM49\nAwEHoUQDQgAEglwxpZ2kMMmiQABtjw723B5he1dj6e+2gWqvVY4vR528xVlc+i53\nKWgnKTAHyLYBvEXDbxTOXZmR7PG/aZmqPA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -450,14 +450,14 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -/-> (ICA' <-> ICA'') -> EE\n```\n\n`ICA'` and `ICA''` are separate logical CAs that sign for each other.\nNeither chains up to the root.\n\nThis testcase is identical to `intermediate-cycle-distinct-cas`, except\nthat it specifies a large explicit max depth.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nXsRVv3uVAXSSA14+sQbOETo=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nwPjNCMIzkKQ4n9F6dkNZX3J39w==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nYEGLjgZ5dDSuMl0wsg==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----\nMIIBuTCCAV6gAwIBAgIUQGkqlZkUd4f2fkDUU909T87XypQwCgYIKoZIzj0EAwIw\nKjEoMCYGA1UEAwwfaW50ZXJtZWRpYXRlLWN5Y2xlLWRpc3RpbmN0LWNhMTAgFw03\nMDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowKjEoMCYGA1UEAwwfaW50ZXJt\nZWRpYXRlLWN5Y2xlLWRpc3RpbmN0LWNhMjBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABHUmbwFgvkdYlBs9evnuAdreqzYYao1RCJfqtPenws+dVYVPQivmFlxfOGpc\n6ocandlGr7wjT16Ay/+9FN3M6V6jYDBeMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0P\nBAQDAgIEMB8GA1UdIwQYMBaAFDHeCPs7e4/WDnyxtbTvyFpfnkMuMB0GA1UdDgQW\nBBQWzMn2VNxIUPZ3BlpQzzr2M6TXAjAKBggqhkjOPQQDAgNJADBGAiEA+QHsktdf\nkzuS1PPNjGYVTn0h/B3bBk+sJe+TSRs+aSQCIQDj2dAIr/jBNURvXLp7rl2XGqZU\nfgfotRio3YkMPX2OBw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n75FuFj6ni3ZgRWo=\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nQQZd1CB5fAnqSX39\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nNRqZo/gHbzpNvRzRSMNXPwsW2Vw=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIIh/kg1k9O5l20QNJRRMwPgOJUDIsozKgfl3jTAkNAPQoAoGCCqGSM49\nAwEHoUQDQgAEerxM7lF63QiUhA9S28rYjT5/32SPzg3qO2wKxQvhZdLNe67UMWTA\n5NOBcstN4Rja77UVqPHCKqF+r4XAD0JG3A==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n1imUkJyUhRtCL39CfKI/xTitJRpG\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIATj+9D0YuDT7vN0PrFzbCXrb2fe8dYaTk28idxw3RfUoAoGCCqGSM49\nAwEHoUQDQgAEpYmisr6k9moEyN7Zf7tGRobUXWIQ7HU9Zw+U/TZFgMvCIE4nFuVP\nwpB8LO0bh80TgXlFucFKtcPC4Nvbk/iIKg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -477,14 +477,14 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -/-> (ICA <-> ICA) -> EE\n```\n\nThe two ICA certificates are from the same logical CA (same subject),\nbut have different keys and sign for each other, forming a cycle.\nNeither chains up to the root.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\ntDCmlYgsmFogI7To+JAhZSFYDg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nsnxlB8R2553bjTvwSCDrN636TJU=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n5V1iCbw=\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\njf9IGA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBsDCCAVegAwIBAgIUKeHftSC+Bcoq9HlvEai8qTVP3CUwCgYIKoZIzj0EAwIw\nLTErMCkGA1UEAwwiaW50ZXJtZWRpYXRlLWN5Y2xlLXNhbWUtbG9naWNhbC1jYTAg\nFw03MDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowLTErMCkGA1UEAwwiaW50\nZXJtZWRpYXRlLWN5Y2xlLXNhbWUtbG9naWNhbC1jYTBZMBMGByqGSM49AgEGCCqG\nSM49AwEHA0IABPH41atj/ZElmg81JHj+Ya3bp+ZqHKpc7/hpoQV68FCY4ODnHylU\nZyOk6MxbA2hRfnj/HFSqR/hqv9fNFtwFjk2jUzBRMA8GA1UdEwEB/wQFMAMBAf8w\nHwYDVR0jBBgwFoAUAMY3Qk14Jf52V/EeCgXbRPLqTbgwHQYDVR0OBBYEFOmpieq3\nqTCBMBuBkSBo2fqBA45tMAoGCCqGSM49BAMCA0cAMEQCIFHwXxX2sIOThTrDhcYl\nXM9QA81vL10j6Tq6Efq19QvfAiBP6lPrEnKxnomssijS56zZb0C0oziK68PO47zc\nha+w1w==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----\nMIIBsTCCAVegAwIBAgIUMCd/2tCKuiKiTYNwdQAZOPBZ9jcwCgYIKoZIzj0EAwIw\nLTErMCkGA1UEAwwiaW50ZXJtZWRpYXRlLWN5Y2xlLXNhbWUtbG9naWNhbC1jYTAg\nFw03MDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowLTErMCkGA1UEAwwiaW50\nZXJtZWRpYXRlLWN5Y2xlLXNhbWUtbG9naWNhbC1jYTBZMBMGByqGSM49AgEGCCqG\nSM49AwEHA0IABMsHP+bdOY0VZTwZdlsWEdU/oOePAgtGo/Vm5295wJnTnGXJR0FX\nPXtsNHUHNbk7SynpoRHU5AO+4yHFI5KusaajUzBRMA8GA1UdEwEB/wQFMAMBAf8w\nHwYDVR0jBBgwFoAU6amJ6repMIEwG4GRIGjZ+oEDjm0wHQYDVR0OBBYEFADGN0JN\neCX+dlfxHgoF20Ty6k24MAoGCCqGSM49BAMCA0gAMEUCID2PZo7T+VU6MttALIGO\nqOX/NNc/veppLbGc4hrj/N80AiEA4+66eJzWaVEGjZvLJGY5hubHD5NsR4NcWIGV\nHBEXNTU=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBxDCCAWmgAwIBAgIUY/5rBRkKbX7sZ2ED+esRy/HJxsgwCgYIKoZIzj0EAwIw\nLTErMCkGA1UEAwwiaW50ZXJtZWRpYXRlLWN5Y2xlLXNhbWUtbG9naWNhbC1jYTAg\nFw03MDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowFjEUMBIGA1UEAwwLZXhh\nbXBsZS5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAS/QIJBnXdP6YlDmd56\nfE0Y+VYd3McX1cPJdgyjBMSsHcXoy/hM+0Avhgumvz4lel/8oCPL6bqFEBH8IuZ1\nG0/Wo3wwejAdBgNVHQ4EFgQUGmQMRA1mK/zGX7V32VHXaWexmE0wHwYDVR0jBBgw\nFoAUt+BcWE/K2RxGqVDqrJqfqymxYXMwCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoG\nCCsGAQUFBwMBMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kA\nMEYCIQDsMOLE/Gy0QyR1ii6V+SSSbr5TwZlo1ZPaM645w0bqHAIhAIyga+s4eEFF\nIzbPfxtvGsPevGusWJsqfO/qz7vKTwpO\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEILgmATIsOJNuoUpJgpz5q6tUWf+U/MOOcbbZgkAfUJW/oAoGCCqGSM49\nAwEHoUQDQgAEv0CCQZ13T+mJQ5neenxNGPlWHdzHF9XDyXYMowTErB3F6Mv4TPtA\nL4YLpr8+JXpf/KAjy+m6hRAR/CLmdRtP1g==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\ncg3WfvPx8EDrL1iz6jSDxi+WwddxfYIZ\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJr1EVn4ARTc8hePcnTjwk8qKXVhj/ezVHLjfbYUDpe2oAoGCCqGSM49\nAwEHoUQDQgAEUS+qzc9oLDMZpnWZQxyZPzUrf5/9+0f23qSJO2JDcQ+GHHvfZJPQ\nLtTDZbF+YnDibMJePALzIPxqf3SM766yYA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -504,11 +504,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert has an AKI extension marked as critical, which is disallowed\nunder RFC 5280 4.2.1.1:\n\n> Conforming CAs MUST mark this extension as non-critical.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBsjCCAVmgAwIBAgIUaNWZ6/Niq6ypOyPh+c/5LuTAYCkwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQIrypv5AOpQUd3OnEaJNYZl5JUF5V2o2Mdxjll\nMGGyz1nFYYP9R+Y5UaNEo7y/xduvZprV3VAhMXcNgmisVOCgo3sweTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAi\nBgNVHSMBAf8EGDAWgBSYTU7oCnuQ1FPrrGpRCuP5UzuEPDAdBgNVHQ4EFgQUmE1O\n6Ap7kNRT66xqUQrj+VM7hDwwCgYIKoZIzj0EAwIDRwAwRAIgfXTphCd+Ttb+Brel\nsfXnYpVKhZcZAcSkgNT/6d6ec+4CIAbcihXkr81fMXXV3vABuC9bqzNbjn8eIf+B\n2YOuZ6Yq\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nbL9A75j/8wM=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nB6k0OQ==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJDxfO/8oylP2ND3Toqgx9qAJnhZNyVZy+b4ANKjweaIoAoGCCqGSM49\nAwEHoUQDQgAEZ82/e2RS6CEbp3CsQACPKNnj7BNzAjWBNt/OePJamufzz0SeyYM0\nh1zx+9vo6a1PxoOAyOqc+tA0P5EUyAoYJQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAhjOaA==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEILj6nsroOkOTk8FQgnyHxod/6sVenkZt1zunmoQaR8d/oAoGCCqGSM49\nAwEHoUQDQgAEE3HmF0cRYhkZwJyY2haizizkfVl2cnaheu0okz6WbJgQH9KvtwQ6\n32s7v2VCc0HIchT5xmrLa8dXcnbvYiQRMw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -528,11 +528,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert is signed by the root but missing the AKI extension, which is\nforbidden under RFC 5280 4.2.1.1.\n\n> The keyIdentifier field of the authorityKeyIdentifier extension MUST\n> be included in all certificates generated by conforming CAs to\n> facilitate certification path construction.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n6/pLyn0RT02toKKJcMV3ChohLtM=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n2Ynthc3C/y0YC+ESQZWRgGKxyw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nyiYst9lfwTd2SkFgdDNUDFud\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIF5Re+/FP3rg+7c1odKEQPXhb9V65kXnlZIWHDG9gKrLoAoGCCqGSM49\nAwEHoUQDQgAE1WAQMdC7ims7T9lpK9uzaCuKqHb/oNMbGjh1f10pOHv3Z+oAvsqF\nSv3hGzreu69YLy01afA6sUCf1AA/95dKkg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nYDS8BK5HYDsUbn2WSAZGqyv8Sg==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDnx1Bdya8CeBb9fJbIgB+HnrGaf2mkgJNMEy+jVccdRoAoGCCqGSM49\nAwEHoUQDQgAERNVwPpd2xownMV+BurQ8mf3w/o4w4RR1T/I41T/PVSGFJvHGLwtc\nOeU1jLpzU6zyTbV9Ml+X7+rI108pXyVsPA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -552,13 +552,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> EE\n```\n\nThe intermediate is signed by the root but missing the AKI extension, which\nis forbidden under RFC 5280 4.2.1.1.\n\n> The keyIdentifier field of the authorityKeyIdentifier extension MUST\n> be included in all certificates generated by conforming CAs to\n> facilitate certification path construction.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nnGr7/yWpc6kp6NkvboBpdcfEVw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\njweD+IiB1xXbCKMEIqjCPgCaEYk=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nbm4=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n5A==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n5+adkwt/UpiIX9xHyH7vTFd1CdGmGGhRp6hYsJ06Hkw=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIC0EKoPfHQrtOVCK5zragz6YOvAkGNp2IT5kIIAlltzcoAoGCCqGSM49\nAwEHoUQDQgAEze50SDJ6W5JTS568escbvKD/ocLIqloq2Re3SLClYSm2IfMvFpkE\nf1q3c64G2PLOzJAJxUbfcs0dRz21m1lOpg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nkx+FFSc/Sxp64LHVo3GVMWaiQC472nXHobazxefVKw==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINGYxd1YjI3fQO5h9f6QMYD8YGRkwXyN6Mr4aswAbDOyoAoGCCqGSM49\nAwEHoUQDQgAE9MkBXCcm38YGelBlgWMqa1xBp52rfdtSgOJwTm54HMuCwvhoGrkb\nWh87mAR2L5aIXl+a2ogZYOm36Mp9FJy36Q==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -578,11 +578,11 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert is missing the AKI extension, which is ordinarily forbidden\nunder RFC 5280 4.2.1.1 **unless** the certificate is self-signed,\nwhich this root is:\n\n> The keyIdentifier field of the authorityKeyIdentifier extension MUST\n> be included in all certificates generated by conforming CAs to\n> facilitate certification path construction. There is one exception;\n> where a CA distributes its public key in the form of a \"self-signed\"\n> certificate, the authority key identifier MAY be omitted.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nxm4xedpzVVcDO9Vyvk63EdS7G/E=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nH+apHkoOG4aNGlTTcHyiF5LO\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nbwMtxA==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIAGZLMRzxQMziIarvmWtwHJWdPKS3cDF3OZO/yFegnVNoAoGCCqGSM49\nAwEHoUQDQgAEfGeNMfMUwEiygcyFwOSFOA1VeDu9vSm0ytGhFnYz3J7VPzDlKNTF\nSNuAREl28T3lzNhmVLt3j5Wic5cJbNBvHw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nwXAe\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJbHDfgVKme6+fpqIn3W8Hk7TXRqKr8yhRebmvOBGmchoAoGCCqGSM49\nAwEHoUQDQgAEavoVzCz0F+e+5nnXS14i8hAzbpEDNxPZOQzHbP1f3Ck5kph7Bh7t\nIiWSaE2Mo62uVYXYlqdQGF/331VXG1xHDA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -604,11 +604,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root is cross signed by another root but missing the AKI extension,\nwhich is ambiguous but potentially disallowed under RFC 5280 4.2.1.1.\n\n> The keyIdentifier field of the authorityKeyIdentifier extension MUST\n> be included in all certificates generated by conforming CAs to\n> facilitate certification path construction.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n9gwg\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nWu8F/g==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIQD8DrB27lxRhSzH/XhAvBIurOQWEctXyMzvF6BmG9gT2Q==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEXuRzSEI0fw04NtB73cA5dekVmiMbZD9b/hTOWgtTGWoAoGCCqGSM49\nAwEHoUQDQgAE9Eb6y5TVnK7dJUXJoqmvX4lABaEXGvJ+WLSCl2+TBLfrXP1/fkuC\n1komfdYJ6/wJqUZkbtkKm/6uM2cCYgJ8vQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/TCCAaOgAwIBAgIUM8jkBGIL9xSaJwGr36/MssjkT+4wCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwNjcyMTU0OTcwOTk5MDQ1MDk2OTQyMTQzOTQ5MDc5MjcwMzk5\nOTUwODM3NzM3NzQwMSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTAwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEfxCu\n6Go2+dYp8XyjbniDOTsSjxJEwMjixIhlQXB0pb3EmQevUXsd01TI9cHx3d8wwWnB\nb7M1Mlt8BqV4aBFgKKN8MHowHQYDVR0OBBYEFOg0jJyeRsU4P6oAgBRkkTvXenBP\nMB8GA1UdIwQYMBaAFMQYBbYLb59auYSOfiDkqZgQ2clCMAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNIADBFAiEAr3dwUEtaO+cyxqbTwsmMUGi/NMiQerLz74LcFxt3rSMC\nIBDp45YbaXHgshli8hV0H80p5U+F5kzIgOIbIgevMuOz\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEICIzRrQ0nuYqXuscs5GhyCzrunQ3MmdoUGOiwqBrPf2coAoGCCqGSM49\nAwEHoUQDQgAEfxCu6Go2+dYp8XyjbniDOTsSjxJEwMjixIhlQXB0pb3EmQevUXsd\n01TI9cHx3d8wwWnBb7M1Mlt8BqV4aBFgKA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -628,11 +628,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe chain is correctly constructed, but the EE cert contains\nan Extended Key Usage extension that contains just `id-kp-clientAuth`\nwhile the validator expects `id-kp-serverAuth`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nRIaxbzqKVAo/zvPmuN7orjD9HNg=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\np5uncOAWNu2bsjuf//1p0NLc\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n/Syqug==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIAz4PCzmWdoAPduWt9tWMmiP/fC8rQVlvukl0HvMcevLoAoGCCqGSM49\nAwEHoUQDQgAEy6kj6dsJp7S5/JuabhahJNwM4e/7ZSeEmovz2b9eBVsqip3pyKaX\nezxzPMpISxJqB/U6jzN4c0vTPliu+Ir+Zw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n9QUL4g==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIF6/g+vIArlyrshnGQoA43Y22U0AJdG8KcwgB2WksU2doAoGCCqGSM49\nAwEHoUQDQgAERFZNS/ygm8DdcPUmKxou+LdweF8x50Cb6vVpqpHGCA9dJ39mgA3w\n7/OfH5Y4O4NspNcUiOiFLBvOpqhLY3210w==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -656,11 +656,11 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> EE\n```\n\nThe EE is missing an extKeyUsage extension, which is permitted under\nRFC 5280 4.2.1.12.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nmCdOeNDEBeEhftJN9TRA9S1Fq3g=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nKRNkuT7G1JVn8zJx6X0jNYd05w==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nkFZvS37yPwg5SHgt/gh/JH2tiwhJam7GBPwRsaX3USo=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIHkISwtTsS4vHH8mE9kb99UP/hHwY3FTZhHCh63UBcd8oAoGCCqGSM49\nAwEHoUQDQgAE71FhS6p6F4oDxHtFfmXo+h4qYeA1WUPn6+PhoJWhWXosqprd36Gd\nJ0OyjqTnEQijJT2Vdi6xEy4p8vdJIEULPw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nhLzyOFIT/R8+IRqgUBG6MrqYhrhZpPgbYfxJq7d4nsQ=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMiyMkDywJkLgce8E7VYP9LX0taeiM5cD/T6fgnzrplsoAoGCCqGSM49\nAwEHoUQDQgAEVFfdJoLYuX8Qzmt7XTUgr58AAi8xSaYm90Lsdw7KIlKmGwP3Wg60\nYXpwNis8I+k8+RXvplsDT//3BbNWWWH1CQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -680,11 +680,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted dNSName\n\"example.com\", whereas the leaf certificate has a SubjectAlternativeName with a\ndNSName of \"not-example.com\".", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nEZ4=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBrjCCAVSgAwIBAgIUJXZVoa9glundEJ2IRCOUkyQrj2owCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATGeBSSQYOuKmbPMyy2NxjkcMcy4DEPegpAx1m3\nTTymfwPlXiHNpvb6g5b/IPbprYeZzCt0ZbAbvBNKpht79er9o3YwdDAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUxso+hRbuwqoQqLlvYSUqLV1ZaLswHQYDVR0eAQH/BBMwEaAPMA2C\nC2V4YW1wbGUuY29tMAoGCCqGSM49BAMCA0gAMEUCIQD5j1EAYZBjK/v1lqSek73G\nxye+9D/2pqCFjy6lcu8b9wIgJprptR5m0AH6DfrDeWoEqfZ5T6Hc2CN8m7j09nqD\nTQs=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBtTCCAVugAwIBAgIUM0hhN+3RCdhjdI3swNaO7trh2tkwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABLhAc4zU/nNywjOdGzVWeDr0a8X+42g7dAMv5PIR61k1\nMefFYS1MpcXHjacQwTXjrx9wWDsTQ8fjCkUX6gl+B1OjgYAwfjAdBgNVHQ4EFgQU\nMxzZZRz6260cnPiXLJek66o5fvEwHwYDVR0jBBgwFoAUNrjdOWKtrEX+j++UZXt9\nEkWxJUgwCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBoGA1UdEQQT\nMBGCD25vdC1leGFtcGxlLmNvbTAKBggqhkjOPQQDAgNIADBFAiBMUImE5A/iHjwA\n5acTbQJrUHxDe9qlQ5jgXH0oHLcHmgIhAOd56ooJmejrneXf8EMOsxvz3oXlEh6u\nRI43qDcA1N2f\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMHmUUdVoeRec7wQyZc3YRueMPPga8vHnFf9aMosCwmdoAoGCCqGSM49\nAwEHoUQDQgAEuEBzjNT+c3LCM50bNVZ4OvRrxf7jaDt0Ay/k8hHrWTUx58VhLUyl\nxceNpxDBNeOvH3BYOxNDx+MKRRfqCX4HUw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBtTCCAVugAwIBAgIUJHVZFk+eRDRTuje20J2RpMzl37MwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABNfN60vYAi0fi0NdinCESLZFqqfdI+nsVXDC6FgIKZ2K\n7R6rXM+1diryqKdzAlbEWQ12Ju8x2pGsjTYm2K5cizqjgYAwfjAdBgNVHQ4EFgQU\nr9xuWZgBd0fxx6QSN9SfjYejuWkwHwYDVR0jBBgwFoAUxso+hRbuwqoQqLlvYSUq\nLV1ZaLswCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBoGA1UdEQQT\nMBGCD25vdC1leGFtcGxlLmNvbTAKBggqhkjOPQQDAgNIADBFAiBWVJQVJrwzKkPp\nFOrp2Dqgbv/tRlIByQz9qS1yjIaEpQIhAKxcXCE59UkWUqpOLvMZF5Ni5yHNJUxw\nalkmDGUkk6vh\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIB7/xDaFE22X6jRJsYMZfRd5LXTujXeL1Wa8eUMGugSioAoGCCqGSM49\nAwEHoUQDQgAE183rS9gCLR+LQ12KcIRItkWqp90j6exVcMLoWAgpnYrtHqtcz7V2\nKvKop3MCVsRZDXYm7zHakayNNibYrlyLOg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -704,13 +704,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA -> leaf\n```\n\nThe ICA contains a NameConstraints extension with an excluded dNSName of\n\"example.com\", matching the leaf's SubjectAlternativeName.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nGOdegqHQ9t1Yhd20oJfnhZlg\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nAMWwXr1Xo2u6miHnOKO9ZyUP2Q==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIICIjCCAcegAwIBAgIULihMr+MXKDu89eTwuXkHtRVKbbwwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBqMTkwNwYDVQQLDDA0MDI4NDA1MTA4NzU0MDkxMjg5OTQw\nMDM4MTg2MzYxOTIzMTQwNTc4MTc0NzU4MzYxLTArBgNVBAMMJHg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABLDxcZgEuM0eES+FUKzMpsKgOpsWpvRPGg1Wt0HPbjmoqNbq+G3nvHhhnIXy\nMhDgEbDoyxKHR1M04KjPwzC6yr6jgZgwgZUwDwYDVR0TAQH/BAUwAwEB/zALBgNV\nHQ8EBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wHwYDVR0jBBgwFoAUuh8+\nThqcbRz25hVKdjdN3Q2UwdEwHQYDVR0OBBYEFD4iR+AxiGPECGG3uldXr+7FSLF1\nMB0GA1UdHgEB/wQTMBGhDzANggtleGFtcGxlLmNvbTAKBggqhkjOPQQDAgNJADBG\nAiEA19h6JbSNRKF3gXplgq0LfN1JMpN7Rc1lOy5cDhBzOGQCIQDkq6+mwpc6j+wi\nt98NP7jlHwGmVYcfZNrj2mjPQ0IQcw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nvHO5wIVAfIuliFdiOQjwJZlsOXgm\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\npgIgYUvptTJ6GviMg7nJcWXqrmIC+1Pq2o91bPk5/SRqtlw=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMYo8xeuJluZQURxduXv8TA85+X89eQHz1GPwOI3bbzeoAoGCCqGSM49\nAwEHoUQDQgAEHuDucb8+YFRXvq24ScZ+/LhBDi///yI1E5fIQJkXOODLfLdl8YwE\n36iM+nf0kLOh25ttDBs2m16dB92mRc36Pg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n5gIhALTBbmvnSXYDZANskgkl3oKiNtyD64r84j/xXVibK2rF\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIP09F31cVxedbB5I+/czlnecMcHYBR46yUYzncpHjBvXoAoGCCqGSM49\nAwEHoUQDQgAEkE3ru2RYYk9wsJdqopAVjbvJA81QHI6pPwpudImu6kTVb0rTmWOm\n4aCIXZtzQHa1tr9e6e1RLZYfzM94Mf4xgg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -730,11 +730,11 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted dNSName of\n\"example.com\", matching the leaf's SubjectAlternativeName.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBrjCCAVSgAwIBAgIUdxPxfkJyQGxJWGrFEpjiOk+6JfIwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASfl/jdWYNkfD9FKB27rNIaZqOyA5qlcdTcysyq\nRoUVBMaEicDP+OE/6pIat8386RkwNcQg2gex7IjmXNh2BIWzo3YwdDAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUTC7MXRpRW75BKxsgAOi89rXQ/ycwHQYDVR0eAQH/BBMwEaAPMA2C\nC2V4YW1wbGUuY29tMAoGCCqGSM49BAMCA0gAMEUCIF7dNk7JFomV7RTcwe2Z4hL/\nzFJthAYog0kjtRiN90lZAiEA12dPRSFytkVSIQfUyg7B9QloFg+Q3jndF6DANLHR\npuY=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\ni8Q=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n9dIFW5c=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIIF6vF79qUEgs4qQXowSmchGEqUckgAOauy+uzpbYYiMoAoGCCqGSM49\nAwEHoUQDQgAEK3orWKVIv+jlt2jWmx//khHZ8kuqqgCftmCPUElbOXwOzkk2GB2u\nlD0dsX6erL3TB5aKLCOVgi5m9oOozU+eFA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nckIc\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDvUvqo4609KnddUtyxhWs1J8gGxcItMkrjV4jGHcxSYoAoGCCqGSM49\nAwEHoUQDQgAEBF8E7gVkjdaTB+LaChCWlF5whsvykr7LqDgUXFV9w+uta1TNdx2g\nGHxDMucL3cCHJvWc3Yn4Ya81JV0ZLNVZDg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -758,11 +758,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted dNSName of\n\"example.com\", matching the leaf's SubjectAlternativeName. However,\nthe NameConstraints extension is not marked as critical, which is required by\nthe RFC 5280 profile.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n1uQu\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIH6rmCVYNjyoSK+t7nXuKjdIuDnQx9cBpjnL47jJhJInoAoGCCqGSM49\nAwEHoUQDQgAE/NGZSrjPg30qTtn8jyr/1Qj7i/8NLjVgEjM+ld7pl5kJh+PyfcjN\n/tBrVvbqfNYEPPNLu8CFE0w8Sc2kFJjb4w==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n2uclZg==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEID19VTdMX+kvjq19Dy9SXFOuVpMQCIlkrZXBNlToUyNooAoGCCqGSM49\nAwEHoUQDQgAE5ogzQEXkCulw90IxhXRgh7bH+Y+m6LEOYOP0UUdznPDuYFj5KruY\nU71C8OU6hS1/1ZULsd9UhldBmAhhWac2Ww==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -782,11 +782,11 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted dNSName of\n\"example.com\". The leaf's \"foo.bar.example.com\" satisfies this constraint\nper the RFC 5280 profile:\n\n> DNS name restrictions are expressed as host.example.com. Any DNS\n> name that can be constructed by simply adding zero or more labels to\n> the left-hand side of the name satisfies the name constraint. For\n> example, www.host.example.com would satisfy the constraint but\n> host1.example.com would not.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBrjCCAVSgAwIBAgIUTOTXUr1hT9+wjCn4nlPqwoEVmN8wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASDBxYYAnIfYjg6KwQwRM3z51KaEmGZyNY97FGk\ndfp2jsybe84wUUdrHMyg23Eoe1qz1sFV+c75QBJAQwwUK1WXo3YwdDAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUBYEVKFMWLc75tk4bhGumBXA8bSQwHQYDVR0eAQH/BBMwEaAPMA2C\nC2V4YW1wbGUuY29tMAoGCCqGSM49BAMCA0gAMEUCIQCGVigSUpWtPdzVgV4qt9FL\n1GzHprVXwUARrcpb+q/XhgIgeou8RZsPiwqH7qVA2hsaHNrBEz2yko4W1QaNkE/C\n7UQ=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nqg==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nn8ngOkzAOmRLQH5qGg==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIOH/41Wxnlbt2PPSmZcE7qGl+UDoxGWqZo4Ta/2LY506oAoGCCqGSM49\nAwEHoUQDQgAEKNMwTIQ3enI2wLMBc7Y2TrR5KPbkUJtA+6rv9kk/MRlNoJCh3/hI\nQ4/eNxyLqWiKZKbU20s+mzf9zJg/7uvXzQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nxuoRnIlES5Wwut0mbw==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIAX7qjAvBY2UpvUAGnxb/XrwmYB1hJcWqU+go26so/sioAoGCCqGSM49\nAwEHoUQDQgAE49y1w56v3XA9I5HyDmC4HWQVr/Be5HGxwG4OokksSRQhgMlStVyz\nv0eCTw/EF1JH20gOVbPn0hsoXM03vHAWXw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -806,11 +806,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with an excluded dNSName of\n\"not-allowed.example.com\". This should match the leaf's second\nSubjectAlternativeName entry.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nCHi4SGP7R2PklZSTiC1aHg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nzI4KE2XAelv7/B+qto0gyg==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nv2ROb41Agj709BlUPbO/Tgo/wnhb1avEMdehOjPc\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEICVEhwR0LJ9oiJrWRyvKuQhdROjqbf8C8XoPVhz+xA8LoAoGCCqGSM49\nAwEHoUQDQgAE1ow0A1PF3gGeCgcQ6Lo2j3R5FLVmqcEe5Fb7si/Nhmc9odSzCnx7\nnzndvoeOYOpj9Pm1BHr+uVefxp4B1UAFzg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nT5Lgb6eiztpdoTF5PdNkqKFvTFtVexbSWtek7njorA==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIBvNxuPIXqPvo9cml6xx3qUseI3o3xQlpmlRS3/Em8QUoAoGCCqGSM49\nAwEHoUQDQgAEgN10RNvRXQZG0zvL6Pw7K+A7zOIQhkm5Te32+T3rJejfA8Xe7vdE\nKyYiawgGyPYKFRsyH3lu2cNTRzpi5AAGSA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -830,11 +830,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted iPAddress of\n`192.0.2.0/24`, which does not match the iPAddress in the SubjectAlternativeName\nof the leaf.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBqTCCAU+gAwIBAgIUTWvY25+mKZgy3igySNWj7qwYdHEwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABMxvekKSBqj9HlxDmsm9BVUX0d6N39oxzR4+k4jHHChh\nGkiLwrZC0EGlVCkRyduZcYY06ttqtWCzqeI8tzfk4JejdTBzMB0GA1UdDgQWBBTb\ndoRouiCqdl+tVcnXBEY/f1aQJjAfBgNVHSMEGDAWgBQ6xcnKBDLyT8tMbdPTsF+n\nNErv7zALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDwYDVR0RBAgw\nBocEwAADATAKBggqhkjOPQQDAgNIADBFAiAeT39Z7uWVCt+ZIKhNdBhqcXv+I3Tu\nI1jzv6Yh7JOKVgIhAMGt3XTUmT5flHwuJXVtLGyvlYl9U8oZcMRa75smRGd5\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIKdsViF1ClNJY6HaSjCiMftXggFVZRWCYhbJ7c6jz8OboAoGCCqGSM49\nAwEHoUQDQgAEzG96QpIGqP0eXEOayb0FVRfR3o3f2jHNHj6TiMccKGEaSIvCtkLQ\nQaVUKRHJ25lxhjTq22q1YLOp4jy3N+Tglw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDc9zMxrej6zO0SRdw9RX6nZJNn9R7vgjdW3MP11KygLoAoGCCqGSM49\nAwEHoUQDQgAEJ3Mg1v7OALaA4pARNjMc3bS8R4S/csJltMQLI/9Nj9+HR+Fz8Qt/\naQQCspUYVBLEP5d2c5UAN3gnDZuSUVI2dA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -854,11 +854,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with an excluded iPAddress of\n`192.0.2.0/24`, matching the iPAddress in the SubjectAlternativeName of the leaf.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBqjCCAU+gAwIBAgIUcStoo1C3Slc6UE9ZmcU7dlb+UvkwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABClKFZJxK6rj78AstjPTqVeLD3IaBCI6S8Addk52VzQz\nGYgRTVRx21azvFS6lkJ1wlUK4pxmqHPgf4kQoHBGzf+jdTBzMB0GA1UdDgQWBBS8\nbZvzY1M1dIlbxh259KVDhrxjHDAfBgNVHSMEGDAWgBSenMm1W1QPvknKK13m6Nql\nfPM08jALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDwYDVR0RBAgw\nBocEwAACATAKBggqhkjOPQQDAgNJADBGAiEAtuoBCSXghRxTsH8eZYRVWbyZec99\nERvAMbGlFgYXrxkCIQDClhTucP8J18/hcrWH0AsntTIukNaf9UWaWgUxgjtWIA==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJdUsKqZNEygvGxT6m2O4XBXga+evfx9pAxiLIe6VLr+oAoGCCqGSM49\nAwEHoUQDQgAEKUoVknErquPvwCy2M9OpV4sPchoEIjpLwB12TnZXNDMZiBFNVHHb\nVrO8VLqWQnXCVQrinGaoc+B/iRCgcEbN/w==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPj9JQdjNt5HTripMJVtpPJ0cR0fIy4udOFnSEKWAyBwoAoGCCqGSM49\nAwEHoUQDQgAEXrfJc4R1FaFld12BmyCzZTLk8WDDb9M1S9sxaMrdgxBcwCCR3ar+\nXRE90gcnCWMOyEGiNvlrTWTkWMvJ9Ua8zg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -878,11 +878,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with an excluded iPAddress of\n`::1/128`, matching the iPAddress in the SubjectAlternativeName of the leaf.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nfg+YMhndY0Rj1JNq+CiKu/uZJXibTCU/EA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nvM/sikjqCouLDjdfJDpPqyitCl5pCHUqjQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\noN/CCW1RLqh1\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIOUcsGnkZSBg5mC0zv68WhSDyE6HKDIc+iYk4JX7FI5+oAoGCCqGSM49\nAwEHoUQDQgAEDO2hcjIfXTnNHFbZxRMawjS9nyloCuAnM7QFLDqWH2brYwHcn0Nc\nRurDcikl0racLNrr49cL50iv3TUsepVQCQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nf0axypV6AyYYmw==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEuVo3jKY8DpUb96ssMfQ6QAG++5w2/GpXFhzbWCLdxroAoGCCqGSM49\nAwEHoUQDQgAECR3MEs3yW0gJbKMMBnkGGM3N0A7ejUtpDRaRp/zL7WJf2PcxNK1K\nO/nyqGX4uTp6ui7/dg2s+QwGgM92pZ0tUw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -902,11 +902,11 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted iPAddress of\n`192.0.2.0/24`, which matches the iPAddress in the SubjectAlternativeName\nof the leaf.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPQoRJ+NuuOsUNxG01lvAKVt/M+nmSatjjfI+pvRoYUsoAoGCCqGSM49\nAwEHoUQDQgAEcn1tVL9F5E2sC5mmyFLk8Zl/Tx9nx1xfjlZCqGtBMZqVhQLzt4lA\ndY0zrvr8SypMsZjkTJ411GwTaDR9kKrXaQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINUR8rnEPr+q+6gEjkLBJneXZAWpwdXlO0f9kThSMhFdoAoGCCqGSM49\nAwEHoUQDQgAEZBzMB0IJGQE5TrY8QosJwf/N7iwH09E/ZcdNufPcaKLhgQ4fnz2U\ndHrMZSo033gjeT8KaCzqBxcPdNPJ3ye8zw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -926,11 +926,11 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted iPAddress of\n`::1/128`, which matches the iPAddress in the SubjectAlternativeName\nof the leaf.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n+XND4NiKizCFA34KFOU9YIkDxFcpAKmfQiU=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n+Q8r3O3fU1etIHyv42h1RCZmmLaHBTnxiqQ=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBtTCCAVygAwIBAgIUDX60vjQwig/wCubE5o6UbotyCnUwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABHAJBaJwv95knasJhi4KBLWGNTqUIOfg2sXj93gcqHy6\nI5SeVSNKjUyt2CE5G1DIeChJeO2oVRFs57HvTCvc3ROjgYEwfzAdBgNVHQ4EFgQU\nzvcovaKrLMgJ19tNmtrCl0Cm3xkwHwYDVR0jBBgwFoAUs3EG2ew7XNgnUJ9Fd6Ru\nzV6z5ygwCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBsGA1UdEQQU\nMBKHEAAAAAAAAAAAAAAAAAAAAAEwCgYIKoZIzj0EAwIDRwAwRAIgay1/1GwyNnBX\nbfTR3DkeUwwTUfE32baZoUAZNF+9TBICIBNBgGyPkcKI0qs2CZlwWx4BVmN8RfNf\njaY7Z8UDeoPu\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJf0FMnkxCXSoJhK/NgetVms5HtBweodP1mYgYBpX/PYoAoGCCqGSM49\nAwEHoUQDQgAEcAkFonC/3mSdqwmGLgoEtYY1OpQg5+DaxeP3eByofLojlJ5VI0qN\nTK3YITkbUMh4KEl47ahVEWznse9MK9zdEw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nbSYC4yWdFnXpMQ==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIOBD5eJVEzXiA9jyZWNGFUBytWp/hoguks6D9AQuRFa3oAoGCCqGSM49\nAwEHoUQDQgAELUDY07/pWBINHHTb0ZBsEMaPNIItGHHZnLmsUxn6vupUhIGb2tM+\n6UsSyqpvh5VGHH/J4lcrpLDBuXxQUuY0VA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -952,11 +952,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted DirectoryName\nof `CN=foo`. This should not match the child's DirectoryName of `CN=not-foo`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n1P7cllaM2uM=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nomJQGh9MdQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n7LePAoJZHKSA7w==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDITP+W+fZvm23I5f0Ro1ghct7tcOFEXuzhYUiOCV3croAoGCCqGSM49\nAwEHoUQDQgAEFy+IOlfE1qK+awZEkyEZK5bi767D3DkStslWDaIaLE7JvsU7TxIg\nUPVrvW3u7FW//oHFfF3CfEIVuXcNqNfhcw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nMcm8ZD7n5B+EiOg=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDgicS7UHw94KeG5SeR4jv+G4vKBx/9mwMLFTvMpZnAJoAoGCCqGSM49\nAwEHoUQDQgAEOv/YqNi/jNlyw0lUgcGxmzvmWBb7SjS0MtcPMRFqhwzkLU3gA5lz\nZMoZMSojuKfPpvn9nYLfoWBahYiiGUscnw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -978,11 +978,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with an excluded DirectoryName\nof `CN=foo`, matching the leaf's SubjectAlternativeName.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nbtWQ9aNnyg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nkfiim9g28Q==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nFig=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMwaUraisAOOdpNXgx9uYv2q2vZzD57bNkQ1O13v7U2boAoGCCqGSM49\nAwEHoUQDQgAEnsRGo4bJ3rYeDkqHv/Y/mt31Pwt3MxoszeEG1twjERzehpwBqEc1\nbYKAcxKQm3qJyJs1Vsz/XsB22xGjYEMy9A==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nWQJU\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIAZXKoFZm6h1+qpbWrGy2Z5HAfDRN5ORkIUxxk8WCM3qoAoGCCqGSM49\nAwEHoUQDQgAEc7zXo30K7RiguPDTHXrn44/5ftVmGdiANh8TopzPjPw1Fra45tly\n+6Cq6uMpj9Pfgblo4yGV/LhvWRNYlxpzJQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1004,11 +1004,11 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted DirectoryName\nof `CN=foo`, matching the leaf's SubjectAlternativeName.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nnZxT1z4roA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nb8y1Nlfc3Eg=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\noUep\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDaE1d8BMD8eKzI3db5VaTCF+T4l9LzjA87QlG1aCQmloAoGCCqGSM49\nAwEHoUQDQgAEfp4ityKhznfXJ25Op/dm4NCFj81q8aRAkpWY0zyJyn6IxKOwdGbx\njHUWXsyQOmPnQmu7kbAifRjfKCyyhQFPtA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIbw=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEILgHK+0WB5h5aJg/4n7KRRCMxazM7oX1K2D31dfKfSfuoAoGCCqGSM49\nAwEHoUQDQgAEuDlrieFRMzQ9yaE2WSHJCaMpSKQ4aZ6JzqRj37Vzycypp96D+ifM\nCyOGhsRocFuSIztk5+H7JoUR78S7661rqA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1030,11 +1030,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted DirectoryName\nof \"CN=foo\", matching the leaf's SubjectAlternativeName but not its subject.\nThe leaf must be rejected per RFC 5280 4.2.1.10 due to this mismatch:\n\n> Restrictions of the form directoryName MUST be applied to the subject\n> field in the certificate (when the certificate includes a non-empty\n> subject field) and to any names of type directoryName in the\n> subjectAltName extension.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBszCCAVmgAwIBAgIUcHCR11hetzw25Ycjgdkzec4wXLAwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATyfJoIrZtyMI0+yHezIdfCUDQHUwMMacaVOs8w\n0aY7/4QpIwtxcRWxNYlrCuEr3c1ycn5urbaWDmA3n+18S+geo3sweTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUzGFmITzgsXgX/lh5g38TGc/iHiMwIgYDVR0eAQH/BBgwFqAUMBKk\nEDAOMQwwCgYDVQQDDANmb28wCgYIKoZIzj0EAwIDSAAwRQIgUxOJuEaSCB+AjmvE\nZoi0bPedII6QwmozQuR2uWK+r0QCIQCsVo+vy0ef4tSY1VKIQ1LuRCzGm3BHDvJn\nwMYS2KNwcA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nGgg/b3Gq8Q==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nTC//pUH0\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJA3nohNLnxJeJAOA2ovKibZ4CNtTH/lOixH9/CPWS24oAoGCCqGSM49\nAwEHoUQDQgAESmzwmzl8urNTE74Aa+cZzcWOv+UzQzoN0EyNEnDWD+u+MNEGyiQJ\nwJ86tLSVvLeh7iBjiFUWUUXp09IvJ9goKA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nyIhVQ/MozQ==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIAUX9E6GTk9Hzqf3bsaqDySkq1DdYon6sPvhmhqCov9moAoGCCqGSM49\nAwEHoUQDQgAElHIFjOiQb+joPMEsOeZOiE3kcRQev8iD/hkb3eaQ82Nr2o3pS7GM\n2pNe0Y3txl2avZUIsOhtUoNjQLRZ0edkJQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1056,11 +1056,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with an excluded DirectoryName\nof \"CN=foo\", matching the leaf's subject but not its SubjectAlternativeName.\nThe leaf must be rejected per RFC 5280 4.2.1.10 due to this match:\n\n> Restrictions of the form directoryName MUST be applied to the subject\n> field in the certificate (when the certificate includes a non-empty\n> subject field) and to any names of type directoryName in the\n> subjectAltName extension.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nk2b7NwRuW+E=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n2dIoHMB8IA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nATC1FpoRff0=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDu+I0k1WWyea7i4xpPUgoFoFz0AKt47TFHf7ymKfcgaoAoGCCqGSM49\nAwEHoUQDQgAEtopwYBHaou2rY1Xb7+nZJ9dBz8IWH43/CkyQZTY+xSgRu3Ux0d+o\nj8fZsSXu6D34M7hb2MmkFqiqSIr8rTCWaA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBsjCCAVmgAwIBAgIUH5kZbfQgx2xrd1JsgljOTeOIpVwwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAOMQwwCgYDVQQDDANmb28wWTATBgcqhkjOPQIBBggqhkjO\nPQMBBwNCAAQzj2PYPuWITQUvXcOYKcLVFtdMqOpOATyA4E82XYD/xdSRbPN2gPzf\nP7H9vaCGnyFwJoIUd7gL003Ehs+1CD4uo4GGMIGDMB0GA1UdDgQWBBTZ382bpxqp\n2cpljv0DOCCJ3XcVYzAfBgNVHSMEGDAWgBT0DnPXqfBj7bmAviGPGftDMwkinDAL\nBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwHwYDVR0RBBgwFqQUMBIx\nEDAOBgNVBAMMB25vdC1mb28wCgYIKoZIzj0EAwIDRwAwRAIgJcj136Hi+0DkT0za\n/+6nkbtFdCwGXnaYFa0bSFaFgTgCIGw9n5/NWtP7b5zdDerHb+weNuVIsd050BQz\nZ4OlTt2k\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIIlUdCiuc+KEf3J5l61BXQ8oUWUmYSHyX71d2bp50CZsoAoGCCqGSM49\nAwEHoUQDQgAEM49j2D7liE0FL13DmCnC1RbXTKjqTgE8gOBPNl2A/8XUkWzzdoD8\n3z+x/b2ghp8hcCaCFHe4C9NNxIbPtQg+Lg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1080,13 +1080,13 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> intermediate -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted dNSName of\n\"example.com\", whereas the intermediate certificate has a\nSubjectAlternativeName with a dNSName of \"not-example.com\".\n\nNormally, this would mean that the chain would be rejected, however the\nintermediate is self-issued so name constraints don't apply to it.\n\n> Name constraints are not applied to self-issued certificates (unless\n> the certificate is the final certificate in the path). (This could\n> prevent CAs that use name constraints from employing self-issued\n> certificates to implement key rollover.)", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nx8t/A4Sk\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nCAgm8K8=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n5KrRJ+09Ufw=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n1VxwbrY/KAU=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nMzZX0WM=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINjfVbt1Kwe4M6RhFFnl+Z4SVl+EqCKFfhvrmTdfp7hEoAoGCCqGSM49\nAwEHoUQDQgAE9uAXVGAehTwMZoVbbXD3OKNyI0ZPyoWejEpvzLcpuYQ0l0IdCWyg\ni1uOnvlyfSgnIBBSDmX9TU52TEal2NbsVw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nfEyz7A==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEICIS0VnRFCXddaSViQynU7YpMRY9LMfepOo/uvse02kuoAoGCCqGSM49\nAwEHoUQDQgAEOmHA7kmMqQsBI43VIxKmrGT3l3viwV5mhh7HZ6RME2tA0YD34IiQ\ne/NNhsyOIB9sW6Pf+XWYVKgmZqR55DI0/Q==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1106,13 +1106,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted dNSName of\n\"example.com\", whereas the leaf certificate has a SubjectAlternativeName\nwith a dNSName of \"not-example.com\".\n\nIn this case, the chain would still be rejected as name constraints do apply\nto self-issued certificates if they are in the leaf position.\n\n> Name constraints are not applied to self-issued certificates (unless\n> the certificate is the final certificate in the path). (This could\n> prevent CAs that use name constraints from employing self-issued\n> certificates to implement key rollover.)", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nvw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBrjCCAVSgAwIBAgIUbVMibDcwbM/cPV0V0XvcikkRnM4wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARKI+i2HwCbk2ZA0PFT+oAstXMVoFmQ994ke2q5\n7DfXvIuy30Ki8xyN82/7JEMKpYJVJPoT/FAzN5AZTsfXjW0so3YwdDAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUPhUsshfZdSApBwPu96mK4B1UMZkwHQYDVR0eAQH/BBMwEaAPMA2C\nC2V4YW1wbGUuY29tMAoGCCqGSM49BAMCA0gAMEUCICaybZWNdZ0vwkVKg8NkggA7\njfXhxmcLy3KnXzkVbk7KAiEAp9lpk+FfykBjko6sUGY2XjElg2sOgM7p9D6bGxPt\noVM=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nfPqjUcgPug==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n5xuc/IIau9c=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\ny1Q0D1LY4V4o9cErGTk=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIH2uK38GsWLhrLHdcw7tD5hT0hVzDY7TKzFUaudpwrjBoAoGCCqGSM49\nAwEHoUQDQgAEBzDI9p7mwEgon97n/kcW292YqyxowL0cyefQs0x6aiDfJ8kggi0J\nHtDk8Lg/fn9yAWvjNo9JfwpiLaYObD/PmA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBujCCAV+gAwIBAgIUHZhYdWHL7Nid1qCfVIwhRKqpRUowCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPbm90LWV4YW1wbGUuY29tMCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA9ub3QtZXhhbXBsZS5jb20wWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARXuOmH0wbumCZiHmEMxhD4nu+i9msdGzNCWmNk\nBJn5kLxs7p+MwHTOqlEfGlVCFftD2j/zMyDcGpjUdafICfbZo4GAMH4wHQYDVR0O\nBBYEFOWAqiWLLxja8nl0gSeU/UOhvbJnMB8GA1UdIwQYMBaAFCtQrTKK5ivYlfMN\n23Pjz+tC0tF6MAsGA1UdDwQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDATAaBgNV\nHREEEzARgg9ub3QtZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSQAwRgIhAN3UxLXU\nJKLCTnh/0JCh9g38BHR803cM1e+srTlnSvN6AiEAx4FhzDgAHTKiXmZLyX13Sx+0\nBz73XO77kRjZT44dcyg=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEII2T7frqTKWWZVjiD8JVaRnyYjeTM993+PPabKJxzhY9oAoGCCqGSM49\nAwEHoUQDQgAEV7jph9MG7pgmYh5hDMYQ+J7vovZrHRszQlpjZASZ+ZC8bO6fjMB0\nzqpRHxpVQhX7Q9o/8zMg3BqY1HWnyAn22Q==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1132,11 +1132,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted and excluded\ndNSName of \"example.com\", both of which match the leaf's\nSubjectAlternativeName.\n\nThe excluded constraint takes precedence over the the permitted so this\nchain should be marked as invalid.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\njiEyxhoeplNeZcjPhD6mbGB7NoGx8Q==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nwlGpp3GtIourGghtLP4ey/xdlxHJgw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nq050zTM=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMBMmtHeqvIRdd+HpqnP5/Tx/b7enPHp/o/rBLxeapCqoAoGCCqGSM49\nAwEHoUQDQgAE8iVTfFvlAywiMNQKaQuHMrMSM9x4Q0F/vRYaGDSWGxT4Kny+0GGN\nUFN7oY1shqP0qr2kw0HMct76NRto2Zi2kA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\noGhtxw==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEkIfCHlNrz5ukGFveej3fpgUTrhOX6s/n/eMzc57o60oAoGCCqGSM49\nAwEHoUQDQgAEFR8BGbQwss9M0RQU9eu7qcB4T0pteX/gVEtzR2MltPvaAlqQuPlL\nMapgmG2fcuWwBRxoMvMeoMuAqIqfCdAndA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1156,11 +1156,11 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted iPAddress of\n`192.0.2.0/24`, while the leaf's SubjectAlternativeName is a dNSName.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nlB2RTg==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDb+LgiWpY/dAm/aul4nGKtJ7tb/VRhXT4qJu5ShoeOEoAoGCCqGSM49\nAwEHoUQDQgAE7U9ylo6klJzUaSpmkN8jluuPwlEA4RPTQyJcoyUXgL/cl7hJgmoy\ngkoF9uVP216y4e7LvFLu7lex5Qhz/4687A==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBsDCCAVagAwIBAgIUWqfojbPNwLnzc6+ktg2tIpnsqUQwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABAs9DDAUHzjHmUDgpV6kIM49uRQ689f+c6/XVR7j2bIZ\nS7VuScnMocWpDXMPTkYO3iCU7NWsRc8BYOUGKu5lFiKjfDB6MB0GA1UdDgQWBBTn\nX+YLzpOqYGHx68/sae3dHEXhFjAfBgNVHSMEGDAWgBR554YD7iPmZCqMG47qTS0B\nXWeNijALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSAAwRQIgItcaYf6Mp3xqBjW8X3C0\naImff711SfvywoXj5ZruysYCIQCaRoiex9rFA9arOM+h9VEpKilOX94yntY7edJZ\nOu1+bQ==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEICIy6315gXKWjf8vfnhrKfUnREWQYP/+BapwX1W8PsqSoAoGCCqGSM49\nAwEHoUQDQgAECz0MMBQfOMeZQOClXqQgzj25FDrz1/5zr9dVHuPZshlLtW5Jycyh\nxakNcw9ORg7eIJTs1axFzwFg5QYq7mUWIg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1180,11 +1180,11 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with an excluded iPAddress of\n`192.0.2.0/24`, while the leaf's SubjectAlternativeName is a dNSName.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBqjCCAVGgAwIBAgIUGm8f7ViRtVwMzqUycih66GWIGGIwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAR/kgRhWqQ0/vJn7yqzbTUkqb7eCpgVvV+ActpJ\nEI3NxL6PoStGU0RRTxmpW9bYIXKE0+bVCYAAzJjKniv6jUreo3MwcTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUwJk2eXeHqXBLZBN90MKtw9CH8kwwGgYDVR0eAQH/BBAwDqEMMAqH\nCMAAAgD///8AMAoGCCqGSM49BAMCA0cAMEQCIG9Y4ogonkZ4kI4j683N/724uJj3\nOq+gf6CCP/XwGLkCAiAU4/7vvV4R5+l5ivUkOzr0KhjTLq7b/SOLG7PLIyTw1A==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nhYIWmg==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPV8EBWB8hXGPEQLGvWNgenkFwtXBchQ02aTQvmpNdrMoAoGCCqGSM49\nAwEHoUQDQgAEUOElWdQP+2Nni16vr4JQ9ITHYeDRi1ZSSDlNCs0rIMyvXjLF1+2k\no69y95FI1R0MQj+PLBgQYS8fFtABTRTFvA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n2sCmtw==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIAKJgk+TZX6D2mPfdmSA/79czXcwiHehKxcs4b2DN1j4oAoGCCqGSM49\nAwEHoUQDQgAEOcx5T7lg5xuo2mVz5E3djNTrX2z5nZQbGeA8bD5Ap+10nwSWF/rn\n4Qb9Q4HQ8tWOfs8gZfuj539pSFPBHbPL9w==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1204,11 +1204,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a malformed dNSName\n(uses a wildcard pattern, which is not permitted under RFC 5280).", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nh+mkQA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nW/jq5w==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBtDCCAVugAwIBAgIUbPRsBV0k+giZoiJd35fn+zuPs24wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABBXEMp5Q3axCUdgigeZ7A2v92fFI+4ikoL4eZv0rDxiQ\nsc4aS1LVq66fj/m7mEXElEZj/TiXHwVx9lQlbnDvz3WjgYAwfjAdBgNVHQ4EFgQU\nPt5oT03/j/I8Z2TQt0hrEIIReBYwHwYDVR0jBBgwFoAUyO9+lAYv0oTQcb+P+VRi\nh5ZDafgwCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBoGA1UdEQQT\nMBGCD2Zvby5leGFtcGxlLmNvbTAKBggqhkjOPQQDAgNHADBEAiA0gCmv8Cm6nuHg\nC0ax71gPuwfcxkpQpbsXFLmRc2OZwAIgam6mPWdiFgMlFD/nQ+bBWPWPjSUnqr99\ndTv2XPzLjdc=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINDoTfRrpqugLBcQCtZZHVxgW9ClBe4ofDoZEvq/Eol1oAoGCCqGSM49\nAwEHoUQDQgAEFcQynlDdrEJR2CKB5nsDa/3Z8Uj7iKSgvh5m/SsPGJCxzhpLUtWr\nrp+P+buYRcSURmP9OJcfBXH2VCVucO/PdQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nQiuBEiXUWX0=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEwSsM5fvHjmg8GN8LdCqyUCHFnhpyWP+R0LG746Y3vFoAoGCCqGSM49\nAwEHoUQDQgAEPK5uK2mWVKHyyshoZuBzSAmZq4EHmvjABlSl4OxvAqkoNe7IJGK7\nSsEiQW6fe62vru6dHavgmRBZgcBIrPdndQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1228,11 +1228,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a malformed IPv4\niPAddress (not in CIDR form).", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nMSMroCzLKA4CIFLsLtOggusn6SREGvGbM85j0VDxIIGYxt6E25ossBlk\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nFeEoAFLXFb4CIHZaRfO4P4p5bmw69TBBJrQHDaDYDBwemqE8VhhR4wr7\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIF7ZDDG2329XuBpG+Icuszi0n+iOWtI5B1nIMWH24PqgoAoGCCqGSM49\nAwEHoUQDQgAEgiDmtnuXcMaWxMDj7WbeCBJ/2lgRmyQD+VKpV9Aqfo0DWqcCLvMV\nK8ngl93HcYgCX2Bs4ure3KCJVVgx0XxQ+Q==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJyQTGxQV1tUReNaBWxzmSl7kFYD2SN/fQQBm+j812Z0oAoGCCqGSM49\nAwEHoUQDQgAEX5PpdM/koXGgemaP4WeHpymC9GOfPLdKb8XUlFmade6dCOroLkt/\nLdyBwiUD4RSKzvZHXcuYlMD2PqbYP80u2A==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1252,11 +1252,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a malformed IPv6\niPAddress (not in CIDR form).", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n62NAQMCF\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nhPhjU6Nc\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nVQB0rBl/kYc7/U0=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJTqJ8AmcBSU4u02elN2vsmYEmAKzW1TMut2qxfH0A/7oAoGCCqGSM49\nAwEHoUQDQgAEb76RSoZctbt27gJHPsh4Bq5uvbMvJEkJTYM3m5xWKSLRJaDgLavT\ncD8hvQruVqp8jJIokByfPqrm7DphMtz/3A==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\ny1/MLzr4raNZ\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIB9xdiA9RsKX0TNFiQE3W8tjEkEiPXAZiSD8jW0XbiCIoAoGCCqGSM49\nAwEHoUQDQgAETNEXARsg4HdR7YbcUorvPLMvqE4NCjzcjd2VPuhzdtnP8QoWZRYj\nxjnmwz4AEAjWN9mHb4hE93sCyrQiDgzv+w==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1276,11 +1276,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE contains a non-critical NameConstraints extension, which is not\npermitted under the RFC 5280 profile:\n\n> The name constraints extension, which MUST be used only in a CA certificate", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\ndjwzEgUDtkfqcP3UgkDRN6O/EdM=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nmC+hZqxnSbmZweuwlaTW5jvxrw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIQDsbIECsH/khVtlshOntD9/t/K0v+1QOdZqb2mTHZPf3w==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDX6hlhH4a2Ell8ZQ52yRZtBmIf76TjINKwmrYMdqrlgoAoGCCqGSM49\nAwEHoUQDQgAE2GhJCnq6qECtgSaaE3T2cKq57aydndfIbNnGdzb04y1bWryrGZRq\nkpGlmf0B2NMM3Avrcch18QMoa6r7neMefg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIDrG3A8DYhJbtAV+GFmyZXkQNmbEAW4JyJ5D31/4VtZT\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIB1YT34PTCQWUPxhicrv9RzZQJNWvK63eNEQVvTX4oc3oAoGCCqGSM49\nAwEHoUQDQgAEa9naJ9s1esC1t3wFHZ0YanJbVibeMGghSLi+yxx+f8l4wNQPzd8c\nDkGArgSDnLEs7UYsKj+1Prtygjy94ehvVA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1300,11 +1300,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE contains a critical NameConstraints extension, which is not\npermitted under the RFC 5280 profile:\n\n> The name constraints extension, which MUST be used only in a CA certificate", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n6kyTc4s5Ypr22rJ0Y5bCGlJ+AzM=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nszsvSTV7v9WJI/MkV+DOU2WQBhc=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nZhoCIFWHr+bgbAtLw9GG32wel5sbXLJxImB27JG/02GC0oi6\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEuSiA2iN4Uox9wCgjGZpzxC6bT9GYrw+KOk9nZUAvZRoAoGCCqGSM49\nAwEHoUQDQgAEV6I2MnRN0H15j1Iu3kaeix67yRlk2VaXabcg+QGgkiypiHCmLLOd\nPvNUAxF1JGUCNqZdcVV0H9fmA0Tpki8Piw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nnr8CIQCcwygNRZ/6kNEP50Awz53GjsAp6BZNgpUxYh7MOAb97A==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIAa9b3wbRPU+ccqgh3rwfwvjdsQtu8L21YgNwap5NmoFoAoGCCqGSM49\nAwEHoUQDQgAE+de4h68UpoUIysiKxF5jyCGJF+t4SXc2NIO9SqFkG9ZEHXEEozxT\njNHWnIqKlJtG+92D4WfIA6GIECJjL9Sg8Q==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1324,14 +1324,14 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA1 -> ICA2 -> EE\n | | |\n | | |\n NC SAN1 SAN2\n```\n\nICA1 contains a NameConstraints extension that forbids\nSAN1 (forbidden.example.com) and permits SAN2 (permitted.example.com),\nwhich should be rejected under RFC 5280:\n\n> The name constraints extension, which MUST be used only in a CA\n> certificate, indicates a name space within which all subject names in\n> subsequent certificates in a certification path MUST be located.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n9iriBApSriYCH2qqg67p4Hkevoo=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nEovxDnnBQa2Sw6D7+fJW5NO+\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\ngbxPe7IrbekI\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nUsGO66Y41Pv23lDYDSedguizgONoQ4Eyq6ywZ5BE\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nK2LY54ourFHczw==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\na4yyBvM4yODF27PmjRjNQoC2l1MXCGmRxKco28myfQ==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJ7mpEseyWUDy+icYfFtb6V96DEOP7Khdz7xiYfzPpcBoAoGCCqGSM49\nAwEHoUQDQgAElDde5b/JrTeHcaaaxRaOQ/PPTHdd7MosvZviof98mOvBAeUuOCxY\n1ur3rPz7rSDbVonZqlDuzx9AVoK+gmdPxA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIHGbh7fEasprHICyis5Mg1beYn28WfhBeCZ7qw29v2l3oAoGCCqGSM49\nAwEHoUQDQgAElVt3WzJLqOnIbLUrXPDFum2TCwvbp8BDsDretTHU/JOyDAttvqe8\nSTgJtVsSBw0Puu0C/pQaNjaQNlhxQmYHaw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1351,14 +1351,14 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA1 -> ICA2 -> EE\n | | |\n | | |\n NC SAN1 SAN2\n```\n\nThe root contains a NameConstraints extension that forbids\nSAN1 (forbidden.example.com) and permits SAN2 (permitted.example.com),\nwhich should be rejected under RFC 5280:\n\n> The name constraints extension, which MUST be used only in a CA\n> certificate, indicates a name space within which all subject names in\n> subsequent certificates in a certification path MUST be located.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIB1DCCAXugAwIBAgIUVavTWTz/OWCsRhPC9VRCiYw/2gowCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQpsAfUwjGb2VwjsUeqPeccC+YNBoaOe8kJ/jbB\nPuSp53+QyRTaxFM4ngjeUOhLmAzqofX+iILENhYP5+n2jLtKo4GcMIGZMA8GA1Ud\nEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29t\nMB0GA1UdDgQWBBSJA2+1AlI3IHL5UB7XR7RUubK8WjBCBgNVHR4BAf8EODA2oBkw\nF4IVcGVybWl0dGVkLmV4YW1wbGUuY29toRkwF4IVZm9yYmlkZGVuLmV4YW1wbGUu\nY29tMAoGCCqGSM49BAMCA0cAMEQCIEyufHEsIA298ApPEAWVTCeImmjZahv17sFb\nzyXFescxAiAg++QJrUK0EYeh2nX/1t2raG4rueC/EKHTwZdbx6yfMw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nntKNIP0mAiEA0ZjXySqwVv1PPq6sVQibLbo+xtmSZQRYpwnf4/vNKpg=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n1asCIHtt77gNRKsc6pGptD5qKR0kqEP1UOdQFCfRSQetXwow\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\n07m+R/FLyxbDzOHaAGrITrCLZyYV7EZc1rptTNuBr+A=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nXGICIGSDIBfaP9qZ6PLN6uIs1xZ4giXi5hg/UBe7PrSk7Gnv\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nAJC0t8hhVFQQwIsGHjfvEPe39V6d64xRwzQpv6uwxSAe\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDi/UnQmAptcNfpGk79GNmqAnE6DA9Zti0vR4CcXHkvBoAoGCCqGSM49\nAwEHoUQDQgAE9TPYSiEgDPqTdfAbKDWDv7Y0dKZwu80lPz2WbD9c76e2buq9vjmW\n9E11pL3MDJyMeaZZwNrVApNXvbdxQmmCoA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIOpL1kyi9NtEPbPPSJf3udnDB3OUsLRkz/ZpNtsDDVPXoAoGCCqGSM49\nAwEHoUQDQgAE75sP5WxFNIOjwj7ktYQnpf/rmEyftrN1iAsYzVOZMTNHewbqcLpn\ntNJbLd+GD7GdrwvwiEbQaq+hHj/oEe3EUw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1378,14 +1378,14 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA1 -> ICA2 -> EE\n | | |\n permits: permits: SAN: foo.example.com\n foo.example.com bar.example.com\n bar.example.com\n```\n\nICA1 contains a NameConstraints extension permitting `foo.example.com`\nand `bar.example.com`, while ICA2 contains a NameConstraints extension\npermitting only `bar.example.com`. The EE then contains a SAN for\n`foo.example.com`, which should be rejected under RFC 5280:\n\n> a name space within which all subject names in\n> subsequent certificates in a certification path MUST be located.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nxbR3Q7w+YebWvit0iO13ZXuMbQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nz65oAVq+TaMhSVZa4AkDCLOq\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIICNzCCAd6gAwIBAgIUEStLVwOjk+Jpl4jwij7EpsG87RQwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBqMTkwNwYDVQQLDDAyMDI2MjA5MTkyMDAwMjMzNjEzOTQz\nNjM5NDUxMjkyMDkzMzM0MTY3NjcxNjA5MjMxLTArBgNVBAMMJHg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABLIwpee3wFHGlhwGKKRvXyYvetmMe3rL9bWibEbrfs/tHMQrv2w6smBffTyD\nE3X6EljqK8S0o/1hY0adyGGI8/Cjga8wgawwDwYDVR0TAQH/BAUwAwEB/zALBgNV\nHQ8EBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wHwYDVR0jBBgwFoAUw8sg\nutOe0SpJLJbXTjvtLLa09/EwHQYDVR0OBBYEFK1qCXeV9dXlu8iPoY7xWs2xEt/T\nMDQGA1UdHgEB/wQqMCigJjARgg9mb28uZXhhbXBsZS5jb20wEYIPYmFyLmV4YW1w\nbGUuY29tMAoGCCqGSM49BAMCA0cAMEQCIGJBF2qguy4CN0Ppy0RsjnViiPJQSv3w\nhCVFnJFX5rzxAiA0y+LMFpY6HQ60MulFB2fWzvvLZKnqbeBOrxlbZcyMOg==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nYzNhetjQ6g==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nw4m6jp/+lpiMAiEAseJSTSVS7HNSBtfXuDQxtga48icY3WaDjA62yUwEtF0=\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----\nMIICdDCCAhqgAwIBAgIUTOpLEssnTVyyqCULgvYgc3hNifswCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwNTQ3MzQxNDcyMDI5NzU5MzgwODA3MDYzODY3NzA2ODYxNDYw\nMjg3OTEwOTE0ODQzMS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMGkx\nODA2BgNVBAsMLzMwMzIyNDA0ODUxMzEzNTc4NjI1ODYxOTM4ODYyOTA3NzIzNjMz\nMDUyODY4MTI0MS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1wYXRo\nbGVuLU5vbmUwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQz0jIJYg35sbzmcYXp\nIK1bif3JstUqCDNww7hsTOiU5Uml1/ZjzCL000XZs6ny+dFw1T61KWbtcsFZQCVv\nDMdHo4GcMIGZMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgIEMBYGA1UdEQQP\nMA2CC2V4YW1wbGUuY29tMB8GA1UdIwQYMBaAFML3oWLAc0DWEf2p3cQsRaczVmcn\nMB0GA1UdDgQWBBSW0Om4sU1zfaJ0pbSDPCgQqP2VSTAhBgNVHR4BAf8EFzAVoBMw\nEYIPYmFyLmV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0gAMEUCIQDUerQtpDikVPQc\n12puDOZuZo4p8A7DFzToACAgQC8jlgIgC2wxXKH4Pm87sgnyNbLQWtp0LAizKG+q\nwik0EWeS7+k=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICBDCCAaqgAwIBAgIUarD5R5qDtv0ADMWh6XbSkCMXdQgwCgYIKoZIzj0EAwIw\naTE4MDYGA1UECwwvOTgwMTgzMzgxNzgzODk5MjA2NzQ5NDU4MDk5NjQ4MjI0OTg2\nMzE0NjIyMTkwMjgxLTArBgNVBAMMJHg1MDktbGltYm8taW50ZXJtZWRpYXRlLXBh\ndGhsZW4tTm9uZTAgFw03MDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowFjEU\nMBIGA1UEAwwLZXhhbXBsZS5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQ0\nW2ypR26MisAmyNr+ATzo7khlttz5miTiQZfraJVJPGN05D2sB3nj884ajHVWUHT9\ntFaJpO3XZfKLwjOnkiROo4GAMH4wHQYDVR0OBBYEFJAjJlDhVLi5qfwCy8sLeGHJ\nXx6GMB8GA1UdIwQYMBaAFI5cmneGvOfw6X1E/e3Js7/fJrGHMAsGA1UdDwQEAwIH\ngDATBgNVHSUEDDAKBggrBgEFBQcDATAaBgNVHREEEzARgg9mb28uZXhhbXBsZS5j\nb20wCgYIKoZIzj0EAwIDSAAwRQIhAOi5mtccXkgEXQihKMrkiL+3yadt4URi+/AC\n6fAa/+3XAiBD1TnWcNSZOqrQjkN4ImtbkCvMuh1GuVJieIpvSddRkg==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINvbBYfSFA8MDLEWNDMJ18BUoQcfpPh/g7sRoQKy22OAoAoGCCqGSM49\nAwEHoUQDQgAENFtsqUdujIrAJsja/gE86O5IZbbc+Zok4kGX62iVSTxjdOQ9rAd5\n4/POGox1VlB0/bRWiaTt12Xyi8Izp5IkTg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICBDCCAaqgAwIBAgIUY0G0lTLI9rGqiMvvZA3QHCmKif4wCgYIKoZIzj0EAwIw\naTE4MDYGA1UECwwvMzAzMjI0MDQ4NTEzMTM1Nzg2MjU4NjE5Mzg4NjI5MDc3MjM2\nMzMwNTI4NjgxMjQxLTArBgNVBAMMJHg1MDktbGltYm8taW50ZXJtZWRpYXRlLXBh\ndGhsZW4tTm9uZTAgFw03MDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowFjEU\nMBIGA1UEAwwLZXhhbXBsZS5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAR7\nkMITjLnm1/rQpzTV9+kGeST1UY7p/dnVlwLtwU3GskeSKGbqFxLVS8tK6VRUOZOe\nxEXL+r9oytBV4houSY2bo4GAMH4wHQYDVR0OBBYEFKwnlvCvMJyZ9dJqwS/FIlOe\nD7bbMB8GA1UdIwQYMBaAFJbQ6bixTXN9onSltIM8KBCo/ZVJMAsGA1UdDwQEAwIH\ngDATBgNVHSUEDDAKBggrBgEFBQcDATAaBgNVHREEEzARgg9mb28uZXhhbXBsZS5j\nb20wCgYIKoZIzj0EAwIDSAAwRQIgS8fx9ygrgJ1OuR9DYDFydykWOW+FlD3/TAYX\nWXqLl0UCIQCtsxiW1YtpaHIzTOKBqjaZjna1ze3zQtuGFeuYHmglBQ==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMfIFN02SNDo6gzPfrGz98Tl3/NjMQAhRJwn1I130b5AoAoGCCqGSM49\nAwEHoUQDQgAEe5DCE4y55tf60Kc01ffpBnkk9VGO6f3Z1ZcC7cFNxrJHkihm6hcS\n1UvLSulUVDmTnsRFy/q/aMrQVeIaLkmNmw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1405,14 +1405,14 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA1 -> ICA2 -> EE\n | | |\n permits: permits: SAN: foo.example.com\n bar.example.com foo.example.com\n bar.example.com\n```\n\nICA1 contains a NameConstraints extension permitting only `bar.example.com`,\nwhile ICA2 contains a NameConstraints extension permitting `foo.example.com`\nand `bar.example.com`. The EE then contains a SAN for `foo.example.com`,\nwhich should be rejected under RFC 5280:\n\n> a name space within which all subject names in\n> subsequent certificates in a certification path MUST be located.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n+UAiot5jtERPSgG0cWhwLq2k9Q==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nXCVcQg/MQOSq3T+n84y0jLfQ2g==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nvF8bb1ie19h8ktSz8Ny++bdUMiN5BJxCaew=\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\naEqdSBMkfCxYAec+NSgZSTf+YLB4yiY1XjsQ+w==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nfJ4Dqk7ro3J9GQ+ci2P5AN0QsPzDt2pw\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nHAz9CDI/A6hiPR0x8wMeKwO5SkmHyZtAccfl\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n1CvCQwEGAiEAwhmNSt8Y8G48D2Cs6O647tWa+Pm2C0A01C26hjnO7Sw=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIG/E4c7sMiqmc3soLiXTilbJPF2Rd95cpH5qd63M56h9oAoGCCqGSM49\nAwEHoUQDQgAEMc+FaoiaX7/kLUaurSUwMW4Y3ooH99rqaNOG83tl/2rn4/Y9m1u2\nXhtVeuydC4J0CK86DtCloV+ytSw83kwCzQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nLdW8TLGI0gIgPluoWaAVmxFaAfQPVLbuSYBujZYa2koW6ekddU3NbzI=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINyQTCwIzyTrHsC4rbxKGP8uHmr1jQ7xcXeb/VB8kmY9oAoGCCqGSM49\nAwEHoUQDQgAEIzylEl1gL8zlOaPIhLMT7/z4yjQV7PvVEtTjlUcJhIQ44pZ5+6mr\nYB24DIguBZbKwhtz9hK70GICTIRbkoiWeg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1432,13 +1432,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA (NC: example.com) -> EE (SAN: .example.com)\n```\n\nThe ICA contains a NC that allows `example.com` and all subdomains,\nbut the EE's SAN contains a malformed DNS name (`.example.com`). This should\nfail per RFC 5280, since all names MUST be located within the\npermitted namespace.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n3PIeXCsPBxdcaMSah/EIddfC2g==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nBd1cCLeRsuv1JiXwzhmkOcOpTw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIICIjCCAcegAwIBAgIUC4+T5xxLbH92/qmFdw7neBk8VbkwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBqMTkwNwYDVQQLDDAxOTgwNTk0MDM4NzE0NDE1NjY5Mjg0\nNzQzNTc3MzkyNTAxMzI3MDc3Mjc0ODM5OTYxLTArBgNVBAMMJHg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABIc7LEKvidsMWFLFfQ49QW2daxUf8ndGZngZPnKX/3sWhvKieoSXcyp1U67G\nobFMJOqe435BOfGefaHnyUqrsYGjgZgwgZUwDwYDVR0TAQH/BAUwAwEB/zALBgNV\nHQ8EBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wHwYDVR0jBBgwFoAUjSMb\naEI01b21QsTYCcnoiAmfqIAwHQYDVR0OBBYEFA33SEANYOoLrSXpWZEYITh0nPoF\nMB0GA1UdHgEB/wQTMBGgDzANggtleGFtcGxlLmNvbTAKBggqhkjOPQQDAgNJADBG\nAiEAnS6rPDGAbdQ983nKyNem24RrpBjMYN/MaEvRqwHpMlYCIQDw0wLjIyHmI8CF\nbSiemVDrVM3aGBkrTz3Hb6GlRBlwQw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nOxq55W3bsEZ/yBqESu3VeSQW69xuDg==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nHN6g1FAfySA=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPL5H+smoApYMSr2IwPmeCnmaybk8L7qxon5SUMuFxCmoAoGCCqGSM49\nAwEHoUQDQgAEErL5FIPovNBNjw2ENbGN+qzLUsAz9fCFPte00ROGGxgiqglswy6V\nKrXCaS2htizrm0/FlSu6HoI1W9kt+SFFew==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nxIzMn9OumVM=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIL3sJ+7E8GOwLf5OMSXhqqf8wV373EbpNXuzWl8NSoXboAoGCCqGSM49\nAwEHoUQDQgAEk2dkPXcWUzSch8F/y2+4NFiJrXMo9aN+T/FT/hlnursfxPI2KRDx\nAkd/WKi7yUIlRibB/4agFkHc2CCW9lDypQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1458,13 +1458,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA (NC: 192.0.2.0/24) -> EE (SAN: 192.0.2.0/24)\n```\n\nThe ICA contains a NC that permits 192.0.2.0/24, but the EE's SAN\nis malformed (containing a CIDR range instead of an IP address). This should\nfail per RFC 5280, since all names MUST be located within the\npermitted namespace.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nucSm1kfS3YnDZlAtmoNgIPNgnQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUMnivGsG7AOT3wTQE5TlVTqg3O+gwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAS4SHCQLBVuhwrt73jht2QZBBAKo5zaG5Q8ojdB\nPl+nxfmF4qIoywWSqJuaz9WPLO3txpCOSTqcHs00sQr0Ek9Ho1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUONdJI9iYx12g1SjStvtdpCYwe0QwCgYIKoZIzj0EAwIDSAAwRQIg\nCAwpJRgvbEgojyJBqFuDTDGxUT58FBMv9kXuGZT7NHQCIQDhLoC+8yWH/MC+pSQz\nsbCjDg8aK4ibKkaolD5RuZ4s2A==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIICHzCCAcSgAwIBAgIUbgGlbjMsgrS+mRgSJHNMyuiSd4MwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBqMTkwNwYDVQQLDDA3MDE4NTAzNjAzNDEwMTg0MjUwODg4\nNDMzNjA3ODM1MDU0NzA4OTAwNjA5MTYxNDUxLTArBgNVBAMMJHg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABAzzQkU6VlQRvZ00rfjAm5XwHd6kDF3Y3+i/skzsNLyAmbEq8F7Ts5NgQM4P\nM1sNvPTOIy1myCVhWdZQbQ7zBySjgZUwgZIwDwYDVR0TAQH/BAUwAwEB/zALBgNV\nHQ8EBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wHwYDVR0jBBgwFoAUly/T\nbvoNborpjJr+3tcLRVvf4QgwHQYDVR0OBBYEFEu6mvaP3sItSzHvQ4GN2VB+tPrT\nMBoGA1UdHgEB/wQQMA6gDDAKhwjAAAIA////ADAKBggqhkjOPQQDAgNJADBGAiEA\nqcm61dJmnU5wyE9myRhKQs5p0r3G8WwKSYVIDS++PkgCIQDxhGauaGo+ODBJHEqi\nCtZKh4UUy3NyZnR7ykDNfi160Q==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n1wfv6XXIltoxPuAYJbJkSeM=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nPsRqXQIhAMvwRHnCbHOuKtYPytJwwyB/Kb3ORyh9+x/gKD0Ya0z/\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEuB+ASxxOrqGFqcEpnkPOxntUg9IZ2cgDcgYEpf0XqioAoGCCqGSM49\nAwEHoUQDQgAE+7i1pv3JCAfCPj4R1FkJEdjdHffnV95fRYsC3veO5bP+j5ICCJkh\ngK2Ld9sIWpTlSYC/8PY2jV0rP+TePiu4Vw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICBDCCAamgAwIBAgIUeSbINqK0FM29zYFLip/SnDKL2K4wCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwMjg4MTQwODgxNzE5OTA3MjI5ODE1OTM2ODg0NTY0NDI3Nzcx\nNzAxNjA5NTc3NDQ4MS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYx\nFDASBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE\nOH5GjNtL/RgRnoi4bCCO7QwDNrk1VANpcAQt4hECmcTxCNVAoo7f42eFixwDGg4o\ntTaA/BvRTZln0Nsu/M9VQaN/MH0wHQYDVR0OBBYEFFK3UrBODKpukkucBKtgVoPk\n/IFYMB8GA1UdIwQYMBaAFDfJNbiZc+K4oboDfNz1VoSp1iGvMAsGA1UdDwQEAwIH\ngDATBgNVHSUEDDAKBggrBgEFBQcDATAZBgNVHREEEjAQhwjAAAIA////AIcEwAAC\nATAKBggqhkjOPQQDAgNJADBGAiEAl55jwvu02VeOW7WHx46QJ1ewJla5D9nba8Iw\ncbjne10CIQCNuI1zifWLcr7RxadvZ/tzFxggoWYWBIZPqwAMHw+/+g==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIBiEHAMhbo8KphXf0Zgc/S8vBp/VygR//uExkcemg47ToAoGCCqGSM49\nAwEHoUQDQgAEOH5GjNtL/RgRnoi4bCCO7QwDNrk1VANpcAQt4hECmcTxCNVAoo7f\n42eFixwDGg4otTaA/BvRTZln0Nsu/M9VQQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1484,15 +1484,15 @@ "description": "Produces the following **valid** graph:\n\n```\nEE (SAN:X) +-> ICA_B' (SAN:Y) -> No root to chain to\n |-> ICA_B'' (no SAN) -> ICA_A (NC forbids SAN:Y) -> Root\n```\n\n`ICA_B'` and `ICA_B''` are certificates for the same logical intermediate,\nbut issued by different logical root CAs.\n\nThis graph allows validation through `EE -> ICA_B'' -> Root`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBdjCCAR2gAwIBAgIUZRFVR6hhWKVe9C74jE4j1aEL5PMwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAT0mHzNrJgNSBMOt9UyShVfIoXAhsPmbxDUwwtV\nVpvEGM6TV1QHhmEcRz6oRZ4SRNsd3yEkM5GNcEH4ALWZ5OIQoz8wPTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAdBgNVHQ4EFgQUhRF82vKqddFtSGE8klgE\nugL5PDEwCgYIKoZIzj0EAwIDRwAwRAIgPUMBtkZi7YJg2xX0zeAbONJEhC4IC/Qa\nmR0ANMCMmwUCIDalPZPRFQF+POh0r1yPYHYW/FF63SgndqRKUDoGAVpD\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBdjCCAR2gAwIBAgIUTPHVI4DSmDfICgy9mk40VPK4klYwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARe2zfCE9W1t5Pq5s/9poFpgu2W9ruiWMbtJqHQ\nwrPa2kwPIvwmxZ0Rx69x/NRX23zOCeseVh02iWPEIlVZ7B3Joz8wPTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAdBgNVHQ4EFgQUyADFUDz0n7dSifAZKNlF\n+StTnzIwCgYIKoZIzj0EAwIDRwAwRAIgfIzIq/5sk362Wr87riwQYrznNFQ2PbIl\nDaJjXEX6WtkCIFACsSgI4Lw7elp/yCdmUXytyFQfGUDkfTjHKAdZZhvW\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nIGld4TjAVhI4CLTYgSn2lnM8uSOnU71kgWQrjAfM5iyu\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----\nMIIBvDCCAWKgAwIBAgIUa6VsmtlUGQp56zLP3mob2TWKrekwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA9hbi1pbnRlcm1lZGlhdGUwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASCBPE2Yg35duApnOnuoCBbuymxfgmO6Ti7vNO5\n0l48Iv7i3QH/E+YYGPThNPXr9Ju8MdOoCJ8+klFI7HcY9i6wo4GDMIGAMA8GA1Ud\nEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgIEMCAGA1UdEQQZMBeCFWZvcmJpZGRlbi5l\neGFtcGxlLmNvbTAfBgNVHSMEGDAWgBRIT8YCHE6CyVRAeKk8BCsjkbSvzjAdBgNV\nHQ4EFgQU9PxuzXCVinQ8+XbqaONBTZX89sowCgYIKoZIzj0EAwIDSAAwRQIgaQcc\n6JC8FmJ7TC4wvJRgHH6OP+X7m66Ajy2YcUNw7XsCIQC6av0vAULlXAz7qIYeolpD\n7dcTvX9ZwxDYEcnGe60M5w==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\niQbis/bBUFLHHZg/\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIICLjCCAdSgAwIBAgIURFAnXLlJUWyNDxrSFl9MBNS/s8IwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBqMTkwNwYDVQQLDDA0MzkyNzYzNDUxNzM0Nzg2NDQzMzA2\nOTAzODUxODU1OTgyNTgxOTczODA1MDIxMDIxLTArBgNVBAMMJHg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABPS5eBumDjlKfeHOQH9ppOeJC4E1TurJ8aXuKq/jmCMDSV7OJsvExUOVJysl\n+Zi3PYXPXNkAgQ+ROXydLtFirS6jgaUwgaIwDwYDVR0TAQH/BAUwAwEB/zALBgNV\nHQ8EBAMCAgQwHwYDVR0jBBgwFoAUyADFUDz0n7dSifAZKNlF+StTnzIwHQYDVR0O\nBBYEFFIDvLDoVPwTfEAoiGYdl+8gZbl/MEIGA1UdHgEB/wQ4MDagGTAXghVwZXJt\naXR0ZWQuZXhhbXBsZS5jb22hGTAXghVmb3JiaWRkZW4uZXhhbXBsZS5jb20wCgYI\nKoZIzj0EAwIDSAAwRQIhAMoUiTvIWJnTVfq6BswFVj7Qi6Wk+DdShITUw8N0CJJr\nAiBCf1QA5HNHBCy6uNDDF/O9dvXii72fpsHeoBnjhrzvRQ==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\noKpn1ZAXhKFSb0eWJC9M\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nxuvX4y/xpujMPwOZ\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nTXba1HUMLpE/DAv/JjcG98cLptqCO8IImnM=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINrOF9LzTI1PWj9R56LrLaZ4CJJzfnzDkYiaRc4Qp5VyoAoGCCqGSM49\nAwEHoUQDQgAE0Na4ZoUj+iOrgwHqKmFKHStCR/SE+bLuPR2rzZj+IR9LanCLG1Dg\nV0izb6/kvRYpBDdFBsGYxeiDIzMs0Wxv9Q==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nTqn6AxeGnddb01j3tFqK1EdTCWCTGBydQY0=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJySKTMFVyPMvQhkFG/BDahfndfiwdhuu6woxMJEXa3IoAoGCCqGSM49\nAwEHoUQDQgAEEQLRVDvVNJkfJn9gGZNq/1mw4O6wjl/AU2UGsSTwLI+lgFf9cjAH\nY5kdfxsRaMKsbXDZSZz2eRr+WvEf7L960A==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1512,16 +1512,16 @@ "description": "Produces the following **valid** graph:\n\n```\nEE (SAN:X) +-> ICA_B' (SAN:Y) -> ICA_A (forbid: SAN:Y) -> RCA_A\n |-> ICA_B'' (SAN:Z) -> RCA_B (no NC)\n```\n\n`ICA_B'` and `ICA_B''` are certificates for the same logical intermediate,\nbut chained to different logical root CAs. Both root CAs are trusted,\nbut `ICA_B'` is issued through `ICA_A`, which forbids `ICA_B'`'s SAN.\n\nThis graph allows validation through `EE -> ICA_B'' -> RCA_B`", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBdzCCAR2gAwIBAgIUDZPDZx9cAlgzwXcp5HJlCXr2F8AwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATfMWiKuCRE8T8pO2lybTmI5IKgJ12N4XdQuwi8\nsO4uPO9QG0yUFAE+8kcrF04kOioY2CEMni/FkZ45pFhohY/Zoz8wPTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAdBgNVHQ4EFgQU93+ccouBuPgincYdrOv6\nNnCotuswCgYIKoZIzj0EAwIDSAAwRQIhAIKQVZG4erOkaMa+W1BIL0nZDQghNOuz\nOkZ0VM7DDKL/AiB9cnyDtQfWbPXew9LUItHIonEuTMm+MF4r0VddqEsyHA==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----\nMIIBdzCCAR2gAwIBAgIUWsc5TAos2NkCIT97YZ4nac1QsFUwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARKNuO2GXvBVMtO22/mxNI1bZrMquPwnQfobpFF\nOxQzNEu1p7cQvXplGSVZAxk84fGtaZ2Ehm+flpk7bNX/+ZOSoz8wPTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAdBgNVHQ4EFgQUhvopFf4RBQdQGeERuAT2\nLX0AQfAwCgYIKoZIzj0EAwIDSAAwRQIgLKK4xNjrQnzUoBaec1VpHd5MO8mMl+Ra\nZmjjYMl/OmYCIQD8l34+zyQUG2+uOKUq1DiekxzkiKBp81C5OPzyF+kjvw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBdjCCAR2gAwIBAgIUWo3gHs0/7DQC7PW//ASzrQ3DGrAwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASFI7IEK8JZJ+oxkdmk/bXbQx5deWvQmfUq1uIN\n+b9NREVDVGKZw15dKJO/dj0RK+54q0U1GekUougBIPnnQR9Doz8wPTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAdBgNVHQ4EFgQUkk9uFc9RLe607L/zJQhL\nYPOnO24wCgYIKoZIzj0EAwIDRwAwRAIgMzMeiIhUhUouoCQjQhE7teK7HlNHNez7\nUFpa5Z6/lVUCIGfOF/q2s9bptp1iP3JP/ucg5kHn4e0YSf742f+J99zk\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----\nMIIBdzCCAR2gAwIBAgIUI24r7WOg+FkNcstD+YDuz1VqNQ0wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAR4+KuHrDRgyXijsgvaVBqVq7oo900paklOTbe0\nDIStTosQZE8JcRXadO7wu2Bb+gXoQin8AkwMq0+QHRFfXxbuoz8wPTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAdBgNVHQ4EFgQU38SCqkcdmRI6EsnAwpQD\nMsmud+EwCgYIKoZIzj0EAwIDSAAwRQIhANeHxRA64l6QYMoBFju0DYo5oItiXgPG\n0IYcaLkS2xB8AiArYttMGi5kLVpRVkIni9QSLgX1Xx7cd2TrtORfSopEyA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nJQXYbu99oA==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\n2ocuVCFSjPwFf81dE8lC1yzw2TxLBVw=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIICFDCCAbmgAwIBAgIUQ8ywd8jbSP1mWzPT38MLNXXHYtswCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBqMTkwNwYDVQQLDDA1MTY5NzMwOTgwODA0ODE3NDE1NzQ3\nNzQwMzA1ODkxNzk5MzQyOTg4ODQ3NDE4MDgxLTArBgNVBAMMJHg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABPopAMMlvrKRPuWsTUouLiC3hFiRnvNEPNJzlX+Y1RILLu7IpUXZ6OBUUlfq\n7bHzv7inN4JrGhX8SikQI3HHDjajgYowgYcwDwYDVR0TAQH/BAUwAwEB/zALBgNV\nHQ8EBAMCAgQwHwYDVR0jBBgwFoAUkk9uFc9RLe607L/zJQhLYPOnO24wHQYDVR0O\nBBYEFDYbV7QxgX3HgoOjlwAsjtuENVH5MCcGA1UdHgEB/wQdMBuhGTAXghVmb3Ji\naWRkZW4uZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSQAwRgIhAKg8zls8GrSVszKh\ndUOlpGpLX7WqVB4MRPlSh36h+Z9JAiEA0RgDdaoGk+8180xm5vlNUdseS+RvFgde\nuI1s+nQgYM8=\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nkQ==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nZelgvidFessyRejsYW+nHVyZoSSEu85GZw==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBzjCCAXSgAwIBAgIUUMNE3i3UK/RXNo0vxYFWCcHbqiowCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPYW4taW50ZXJtZWRpYXRlMCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAkMSIwIAYDVQQDDBl1bmNvbnN0cmFpbmVkLmV4YW1wbGUu\nY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEOUJNMIYlmeOyHeNiu77xNOQC\n7B++pjYDKsnKyGQykN8bos6lxpvSIYjv/7oaWK/Aj+zgXBcXjJsfyGzzcG2s/KOB\nizCBiDAdBgNVHQ4EFgQUPA2wBJKOOe+zrXAzcc6FkcEMFrYwHwYDVR0jBBgwFoAU\n/+g6Qvsl2ZQMjW/7WaqGDlVi1j0wCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoGCCsG\nAQUFBwMBMCQGA1UdEQQdMBuCGXVuY29uc3RyYWluZWQuZXhhbXBsZS5jb20wCgYI\nKoZIzj0EAwIDSAAwRQIhAMifYJC92Z+krkBTo3wumsY0UpQAHFSm4bp5BBwV+UKn\nAiAD00rHEGicEam5qwDs10DftjOdAwnHqRYg4Reu2zYEPA==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIGYZi3uqz/tFgIz2LCIHWt6aI7nbEB2105nNMrlMAnRNoAoGCCqGSM49\nAwEHoUQDQgAEOUJNMIYlmeOyHeNiu77xNOQC7B++pjYDKsnKyGQykN8bos6lxpvS\nIYjv/7oaWK/Aj+zgXBcXjJsfyGzzcG2s/A==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIDhSVS7kSPJ198xt5kNt0J6HXksAyWIxu4inhCmXIOIn\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIN9+eXjAF5Zrgp3aluAxT2SnHNG5TK0bYVQRPkBK9VqLoAoGCCqGSM49\nAwEHoUQDQgAEtkWYi/3dQ0gWchGmm8tWT2bdq10oYW0mBVWc/9RoMuGplREbnZuS\nj1fnKM05jwAMTt4w+Ukj3fXxFl7yA7PRYg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1543,13 +1543,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA -> EE\n```\n\nThe ICA has a `PolicyConstraints` extension marked as non-critical,\nwhich is disallowed under RFC 5280 4.2.1.11:\n\n> Conforming CAs MUST mark this extension as critical.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nP5d6e/uDsZWAAQom4/dcNAbiaSU=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n5Ao0LCwGxTX5JjRaPsykRJ/J9T4=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nPRWblw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\naqFMNJQ=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nOQIhAPwm85sAn9Ig4jeMyTBPwrs+J28xwnePaWJKM8lQQq12\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJs8gufl4NOFlkbRHfYRHMqITOt8jOAHJVlRUKEjH9bPoAoGCCqGSM49\nAwEHoUQDQgAE7+qQZsGpDjvZqJ+6IeNE4nZKZBbHGtP/76C/2e0uR2Hs2dbGvpti\nkONxG63btr00SfWOLlrENiSTcEGhcjWfvg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICADCCAaagAwIBAgIUVk/z5MxV0PMela5jGfmcnCdXPF4wCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwMjQ4NzI0NTA0NDQ1NTU4NzcxNDYzOTIyNTk0MzI2MjQ2MDM0\nMzQwOTUxNjk5MDYyMS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYx\nFDASBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE\nYhgxoGLSHN90W/T7UmfLn6U4fwan/BvSm/HbomIX8Qg+uHamm2AnLgDLlcT2VQ+L\nLMh441YA7QV5r9nGvHt9aaN8MHowHQYDVR0OBBYEFKM5vKZJAYU1oa3DhCu/40Rl\nmuHuMB8GA1UdIwQYMBaAFG3PZeZGft4Hytoke2CkA3BizfDQMAsGA1UdDwQEAwIH\ngDATBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAK\nBggqhkjOPQQDAgNIADBFAiEA2hXokmeY1/ZFymlTgxIlhkbBlo9B9M6f+w3O5/Bw\nm7UCIE+uqWC/cfM66xcQWwS3Y6LABoPNCNyuTY0TyALNbzsS\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIL8R1MWO8BmRsOBdwfPB8QXVw+6zoqGdlpUZRMu6vMiCoAoGCCqGSM49\nAwEHoUQDQgAEYhgxoGLSHN90W/T7UmfLn6U4fwan/BvSm/HbomIX8Qg+uHamm2An\nLgDLlcT2VQ+LLMh441YA7QV5r9nGvHt9aQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1569,11 +1569,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert has a SubjectAlternativeName with a value in ASCII bytes, rather\nthan in the expected DER encoding.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\ndrnpsCFfOwUeLNZKfruD9fRdSQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBkDCCATWgAwIBAgIUbsBUJkbXIhURKbqUfYN3N4vratEwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATmomA5WyRc6eN9S3p0rRU0dEvuyF8i5I5dBroV\n7O/mY597VFz2BhIVi+r/+iHPOpqL3dxOXwPtgx/iZM/7BQZMo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQU+fucdTwmfiMd7YqmQoX6YVb/Tn0wCgYIKoZIzj0EAwIDSQAwRgIh\nAOPUyK9vKyguGUmuhoQbqo/7ig72FCOWv8yCHhBaOKBHAiEA3mjfPGeZuC9Kl2Sn\nhKDow9SJHJWUIn0asPTwd4oyrE0=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIB/ohowf7BgSH7m9lfKgzszVX4NEO6xjNs6CAH3NNw2zoAoGCCqGSM49\nAwEHoUQDQgAEDx9C8Xm7Xi61aefGrkJkrh+3fH31KD4uIg+vXKIXh3lg4O+eYUIy\nH+YWnEFXZtqrurhZFRUEi+I7COkrH/WedA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIE9v7rYrLOygSkAK1o/XG87R1FXy6m89ChhPUDNi4lCloAoGCCqGSM49\nAwEHoUQDQgAE5DE1b/PLsqQyQ3uGIEWLgMxSeEzC4mlFtEowxgo+CC5fZeDjgcr0\nlOTaObnQ72bUwNPrBnLawmrUTw2N5y6Jeg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1593,11 +1593,11 @@ "description": "Produces an **invalid** chain due to an invalid EE cert.\n\nThe EE cert contains a non-critical Subject Alternative Name extension,\nwhich is disallowed when the cert's Subject is empty under\nRFC 5280:\n\n> If the subject field contains an empty sequence, then the issuing CA MUST\n> include a subjectAltName extension that is marked as critical.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIUBuYl0ZZWG2lE6QrACWKvw0kUx00wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASpEFaMSNyVgV/8oH3/AMg9NDZPfrHXMTqnmzKF\nE19o3UV6KQ2vnEZ6CyMAESaRKIzj7Kjuidu6Fqzch1CuVbZ/o1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUctR0Vz1WsNpyJq3zLW6Eiho8g4UwCgYIKoZIzj0EAwIDRwAwRAIg\nL6euWUjdTdMHWUQEbSUixb9GR/8lGqQebKY0Jli0oHYCIHYcZv5Pr7bex+N8pTPF\nxK1Ssc3JGR4YNlDZ3goOn61D\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nqeYySF2hBEDPpORCNc554xNL\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nxK3eTadlil+xPlfo5LYSy6glH7AmdjUOOr461kNz\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIHVW7qO3yydwN/bnweHyVgc0z7v+yuzug9Fu/DZ3ZL/5oAoGCCqGSM49\nAwEHoUQDQgAERqUw6ZoNOneERZ1souTybPlE5YcMHRuzHyWVbOrCUIZbggn/TDBp\n1+t4qn4AIJKLL8rTRomrxvKqP+5dd7WQwg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nturQITmTP8bX19VGt+7ezBuV9GRt3dtYu+ZqMQ6lgw==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEII9E3dRw1mpyAK3WCa8dorozhZ3hBrzA9spMNRqR5E3WoAoGCCqGSM49\nAwEHoUQDQgAEnk9Hbdvha/l1VkyUe31Nr/1uJuogrudXI/2ZHPWr0u1MxmFysxZU\n9YPKmr+PRKUKy8d+btxmLh08xdlnG1yC3w==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1619,11 +1619,11 @@ "description": "Produces an **invalid** chain due to an invalid EE cert.\n\nThe EE cert contains a serial number longer than 20 octets, which is\ndisallowed under RFC 5280.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nKAZDMSSayO2cz539q8SKcyR9Q6U=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUfQrPFRFlXqeEOD9KU7UGRyivLIwwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQsrxvKgbWqUVo+PMNyPWHAxxv599iTC0eqhxOg\n9zEz3YvTEDvx0qoSEBmSh1g50sZd4ejvBszsOljWiJ8sdGnHo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUL12t/zEp2Ez8gR6JtCGWdqdzKYYwCgYIKoZIzj0EAwIDSAAwRQIg\napSgjUAdMzDmFi9LwZX/x4vfA80RzClyESfjRiGzLpECIQDQR52rFXadzJfyoEa5\njgpZN5IZVrNSaK1TaBjpY3dzWw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nq7ciJrnZ\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJwlyQxn4hlEZIRgtO/8bFQiaj8kWZnWEhA02vT9aZexoAoGCCqGSM49\nAwEHoUQDQgAEkV8TTxdYdUUqULF/gTADO5HgoDm0pwciMYTbLnzMEeTlRjliLvrS\ncLBfRvhWQaurFm3/g6nywDOiaMBoGJ+8gw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\ndKr+tuZLlg==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIOSL9l+K6B+CFxJvKF3uTXTFBl8HtCpokxK4geUEU52IoAoGCCqGSM49\nAwEHoUQDQgAEV6gQ2/tzgZ2I9POOmG2+jIu6A3yePi9uZFlmVtcRIrvmmaysWY/A\n9KtSn1mb+3agz3xScURSn6V0QzX2vaBMgw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1645,11 +1645,11 @@ "description": "Produces an **invalid** chain due to an invalid EE cert.\n\nThe EE cert contains a serial number of zero, which is disallowed\nunder RFC 5280.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nWx6HOonO6smQNExaivuyVhvZNw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIUMBCKICzb7aDTdUYdFIR8WjSdoIIwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQuAlDIDWjxXt/SKMtwQrwTQ2IYH7Qlc5HMNFZd\n14YoMAhQYtyj+vSDo1e3Xn549QsaxfXUohkwijM24K4ia0PIo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUyLUdQyuy1R0t0SCyD8IE2+ZfaXYwCgYIKoZIzj0EAwIDRwAwRAIg\nRgQqxQphs4/ZGR+7nHnJUBxzpyCaR6+snlSSEPG/8JMCIAdUcDLpKGQ2mpAJavhM\nLmLJsbejuksHUW/u+4S5cRBO\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBnTCCAUOgAwIBAgIBADAKBggqhkjOPQQDAjAaMRgwFgYDVQQDDA94NTA5LWxp\nbWJvLXJvb3QwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEpvOG\nmGQgkuUhrzvXr7cXYo42bue7zjUVSnWkBt5a47iNC3YYAcc1zzTbCuEfR9GmA/nV\nAQ32T4qdCK2+VWFZhKN8MHowHQYDVR0OBBYEFJ+3S5J5C5aInjz07RFFhDlYSobT\nMB8GA1UdIwQYMBaAFM/Q8QJxyMze2REQHbHhOjku9prTMAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNIADBFAiBFiRNRBJuMYPUVUBFgmtQy/1FeSiVSs+5zxhD6St8Z+AIh\nAPzSl6BtmGtK1LA4zfdAjTvuP9Q1bk+NwSyZblRWCi6V\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPu4quoOUr97ex/mCFtJIwXh8Cpnl++ikJoGZFK3Nf6foAoGCCqGSM49\nAwEHoUQDQgAEpvOGmGQgkuUhrzvXr7cXYo42bue7zjUVSnWkBt5a47iNC3YYAcc1\nzzTbCuEfR9GmA/nVAQ32T4qdCK2+VWFZhA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBnTCCAUOgAwIBAgIBADAKBggqhkjOPQQDAjAaMRgwFgYDVQQDDA94NTA5LWxp\nbWJvLXJvb3QwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEaMsH\nw6H/UyW3NIUjx89bt+kNFO2cKloSkzQxaEEzSs23cAFu3qokyRy1GBWPIgnVoFl/\nXji9xIjyGJaUbpAyDqN8MHowHQYDVR0OBBYEFEGC1ZjbkL27Zgq+5YgvlWyyimmk\nMB8GA1UdIwQYMBaAFMi1HUMrstUdLdEgsg/CBNvmX2l2MAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNIADBFAiBauKj7MufSVHjysfaSAj6GotTCQRYlxjtC78VF3pom0wIh\nAL7PwrSAE7CyZAGcmB4StiVLP9bhcWF2SPbPJG1osDT9\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPRmlizQuPEoCKUKB5GoTpzNc+XuJw/kNPyPBZawzjpRoAoGCCqGSM49\nAwEHoUQDQgAEaMsHw6H/UyW3NIUjx89bt+kNFO2cKloSkzQxaEEzSs23cAFu3qok\nyRy1GBWPIgnVoFl/Xji9xIjyGJaUbpAyDg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1695,11 +1695,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert has an SKI extension marked as critical, which is disallowed\nunder RFC 5280 4.2.1.2.\n\n> Conforming CAs MUST mark this extension as non-critical.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nGYDCnMbIG/2UHeC2rWZGga9QIRBsI0g=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBkjCCATigAwIBAgIUV0aLsVqWLQYGLBKfv5qTSpqzZpcwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARkORwJsnKY+YtiEA0Fi6CMfTgMHcvap7mLbG0d\na/1ApFabBx6rjA/ITJ63WueFerMA3r9FAvBnFL79uKJ4mJleo1owWDAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAg\nBgNVHQ4BAf8EFgQUIMuKXAQW8ltXRKhOrIBVJfioqckwCgYIKoZIzj0EAwIDSAAw\nRQIgBEEDrqDsIdhEGrZw+xPSjzCcBC9IgDCHwRQrcqUR+nsCIQCSANMC9n+oKi0u\nLUoIZPbfH/m0aToD2YpA9ObWCfr2Ag==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\ntHoHnQ==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIL/Vy2jvNycdVOC7/pG+IS/6m0aOC5G7OBnJRI35I+4+oAoGCCqGSM49\nAwEHoUQDQgAE0kVJQxBIF7fUYca3ZOB+lSJ92i+e5clHaR8dCgDrGSqk1VpYyZMW\nn9mrqnq4P+yc590DlHQVgz4KR6OIuXHwfw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n2prqcA==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJg4iBLdiZkao5Vxtr5ZEnU5bMOePnVoHa8JU6Cd6y4AoAoGCCqGSM49\nAwEHoUQDQgAE2uXitmTwuiZBuVFD2J3KbagYBXklPAiY2TlP0TpLZADVqRi4csoI\nHcZO3xFCefCYE2mavIzoWRMS9cRTjnaDuQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1719,11 +1719,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert is missing the SKI extension, which is disallowed under\nRFC 5280 4.2.1.2.\n\n> To facilitate certification path construction, this extension MUST\n> appear in all conforming CA certificates, that is, all certificates\n> including the basic constraints extension (Section 4.2.1.9) where the\n> value of cA is TRUE.\n\nNote: for roots, the SKI should be the same value as the AKI, therefore,\nthis extension isn't strictly necessary, although required by the RFC.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBcDCCARagAwIBAgIUaBL7500iL61fXuQ/rDjWqvBSw2QwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASHasZf4EN3xSk8Zo67yjKea48Kcuw+7lJ+FFxF\n6X9fEBDFKHGhVixERMKFAKSZ36MWcxhNmtgvCyCP2dcK6spkozgwNjAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAK\nBggqhkjOPQQDAgNIADBFAiBizlqk5/gSZ7yqgHhkXNVwAK2AxA/cKFlkhsNRC8v8\n1QIhAM7Yht9dLpxu/Z1RzYg4udoBm54i7JgEqsn0Chew8VgB\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBcDCCARagAwIBAgIUDVAw9vcfg8zYviPJ2ggylNUSpT4wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQoLayw2yeXh4PQCGcX8s+JOChu9ONFfM9IXG1X\nRfuK/4Co2xulwoeKfU4RRmgu4F/jNUMoJo5J0yux8wBOcPVFozgwNjAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAK\nBggqhkjOPQQDAgNIADBFAiA0fsgqQMOrus7wTWuIGrakXSwQtUfMRjSPe6ASHgXW\nYgIhALnWmIoR2Sle2ulwfc0ysS1evaKtabE4LfBN9W98Z8Tx\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nQ6qbdw==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMochI5MxEl8HebBve3LfvsAx+Ivm/1MnSsl/OL6RHRXoAoGCCqGSM49\nAwEHoUQDQgAEU6dLUFHrmsYejNo4U+FM/7TWhJyjJPlzaD3saIz3vsniaxLHCpkH\nR2xqfQTnQ+6lXaPBjLNtYiQCDU8TE3xV3w==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nmZeiEQ==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIOp+F3lsTpKa/EBcWQ5c+6rhAhiSNWFDenZsXpY6CQxhoAoGCCqGSM49\nAwEHoUQDQgAECSpppOJhsjzaWrzmQ0lhJkQlV71LDA1bF/sb7LMPT5hBTQgo/CMK\nDS9KIt3fD/zw8+xfysicAztC3m6FjAt5qA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1743,13 +1743,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA -> EE\n```\n\nThe intermediate cert is missing the SKI extension, which is disallowed under\nRFC 5280 4.2.1.2.\n\n> To facilitate certification path construction, this extension MUST\n> appear in all conforming CA certificates, that is, all certificates\n> including the basic constraints extension (Section 4.2.1.9) where the\n> value of cA is TRUE.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n2MKZj7XeXLAsH15azBmX1M+lLUw=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nK2uC5+8/YU79YV3y+OfvjQPb\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIIB4jCCAYegAwIBAgIUWslboIBKMlKC4nHYVUh8aYn9shgwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBqMTkwNwYDVQQLDDA2MzA5MDEyMTQxMTc1ODgxMjY0MTc3\nMjk0NTczODIwNzQ2NjgwODc2MDQ0NzA5OTgxLTArBgNVBAMMJHg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABHhO8TUzv/k7aq66WcU3TAj7LJPBMwCyHn8WS34jpgHdbVkpx/YPUl7n0Q9L\neAHtwpY3r0TSkKJF4FzgEK9MGSqjWTBXMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0P\nBAQDAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB8GA1UdIwQYMBaAFE44tn1k\noG+p/soO6vN8xYReLhyXMAoGCCqGSM49BAMCA0kAMEYCIQDW5vzu25XeGfAIjCmf\nRxVvyHnmmJ+ufDmSxplbg1qbtAIhAKVoYOTJYEEDEaJVR7Z9s8e20AOz1YG9P+EZ\ntqlpFaGu\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nPPQ8po0=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nhfUCIQDPPhShSSOnyUxx4nt5gPrKE00uQn6G9gays/qLKSUyaQ==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJLa3vD3JXQdO3e7MION+QTAavg1O2EEooluclM6u4pUoAoGCCqGSM49\nAwEHoUQDQgAEy7dMLMveaVful5+dTkineL0KKjYEJP2G9LlsQr+t3CYegoV3sp0r\nVmo9/sTtfHxJHULGTaMEp5QJLEXMWsgbGw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICADCCAaagAwIBAgIUTu7wROJ8xl7lCN6kUvWvuIpRaA4wCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwNDU0NTE3MjgyNjgxMTM5Mzc0ODU4MjQxNjkxNTg3MjUxMzgx\nMDAxODQ4NDU0MDE4MS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYx\nFDASBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE\nzIWtatIBAC3xv+aJ1OGCCXsgIWYQKLKeIX1ELTPSH3TPQtRfG3Be1di9z+50s+i0\nG1ps3LHm/R1E8TwL4KrEOKN8MHowHQYDVR0OBBYEFIgo5xhZP5jWLO7p8VI4yd/n\nRM9ZMB8GA1UdIwQYMBaAFEXeXfQ4KxNBIu9G8lXX12Koi8OGMAsGA1UdDwQEAwIH\ngDATBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAK\nBggqhkjOPQQDAgNIADBFAiBFsDQJe55Kbj7ucmbNE+KWILoaPYYrx4WVhgKbuz0e\nEQIhANEL36UapHjizl5zXY3FXQauXzOl8ZgYUKreO2Q2t8Kq\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIACL94Rf3HT5LG/qvD6pmCet3VWEsg7LIKbsx1XyXmC8oAoGCCqGSM49\nAwEHoUQDQgAEzIWtatIBAC3xv+aJ1OGCCXsgIWYQKLKeIX1ELTPSH3TPQtRfG3Be\n1di9z+50s+i0G1ps3LHm/R1E8TwL4KrEOA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1769,13 +1769,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> EE\n```\n\nAll three certificates are well-formed, but the root\n(and only the root) is expired at the validation time.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nfuRYgVG74Pn0xSxaWMwjNoU=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nid0NftH6QiejolQpJPuaACM=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIIB/jCCAaSgAwIBAgIUHtfiW0bFs6Abm1vgUcTTwSZlDeIwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MB4XDTE2MDEwMTAwMDAwMFoXDTI2\nMDEwMTAwMDAwMFowajE5MDcGA1UECwwwMzcwNjUwNjk0MjQ2MDkwMzM4NzIwMDI4\nNzk1NTY1OTE4ODk2NDgzODgwNDAzOTg0MS0wKwYDVQQDDCR4NTA5LWxpbWJvLWlu\ndGVybWVkaWF0ZS1wYXRobGVuLU5vbmUwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNC\nAATazX/+XC1aWFtlukQbP3cLPXsxuMton1nqNlHOrLhuNzUwl6a0BZhRWLDnBBQo\nG5SzmLjzxEKNJbRhempJjXKNo3gwdjAPBgNVHRMBAf8EBTADAQH/MAsGA1UdDwQE\nAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAfBgNVHSMEGDAWgBQ2Hrz0hTl0\na/7mG7qVSl+ERjI+AzAdBgNVHQ4EFgQU6GHvveV/EygJ1osJQCLenoyYAXkwCgYI\nKoZIzj0EAwIDSAAwRQIgNGHeEFU8GeHu41/CPXpxUmb+0SClL0PHg7BbDfv1t2MC\nIQDleMsOuPOVUuvJyGKkrQuH55cyNsNu7x6CqLEMv1esOg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nICmHbP5jA4/o/kst1RLymKNxxnW6jrBstqsNEfhw2cnm\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIQDFI2d4nlJFadqxaYyyjc3VYeOysrB15UxGABtG6LrBVw==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPCoYbyCnPbNA5KLG/DjLfmIJHaNHZ5CWo2+8eV3BdL/oAoGCCqGSM49\nAwEHoUQDQgAEn8Rr6/ihkJQk7ru6OcxhOcPA/3ZwrjulyQAVd3MoL35lbnMgiNoc\nuxnNd4U2btVQfwZ5/UqO/ZCj1P02HXeRyg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAiEA4+1FAq2eDDFNpmuNN4RCwuxqRGR6rwlZTPCOWKeGKPk=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJzJIWxw8vQLOWKKJS7pzaXZY8gG9iQNHjeuzw4EnlTioAoGCCqGSM49\nAwEHoUQDQgAEfcrAtrkAYodA/1S1LGw7zLIiRT8YYwZfZSesWeA2/sTyPjLXvb1f\nUpLrLfXRvesGX5P8ZCFdcHqi6la7aviKAw==\n-----END EC PRIVATE KEY-----\n", "validation_time": "2022-01-01T00:00:00+00:00", "signature_algorithms": [], "key_usage": [], @@ -1795,13 +1795,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> EE\n```\n\nAll three certificates are well-formed, but the intermediate\n(and only the intermediate) is expired at the validation time.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjTCCATOgAwIBAgIUbAnSULGe7gDHFRgxPjasu5EWksMwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MB4XDTE2MDEwMTAwMDAwMFoXDTI2\nMDEwMTAwMDAwMFowGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MFkwEwYHKoZI\nzj0CAQYIKoZIzj0DAQcDQgAEaTDYFrW5Szc5+J+AoYXvAS4rhDMaM1HRxeMJrDgS\nEaKEOY5I833PgA+vZxGva9zNiYvmMsZWOGuaqxI750H5JaNXMFUwDwYDVR0TAQH/\nBAUwAwEB/zALBgNVHQ8EBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wHQYD\nVR0OBBYEFCdx7p3Yoc9psBHqng/HK1UM0hjFMAoGCCqGSM49BAMCA0gAMEUCICjv\npOopklDwr49jcq/+8/9GLN7FIIjoA5Z1BV7aMWGxAiEAmoffU875OQAaZFdtTEno\nxJT9rt/XSZcqbe0RxxycR2s=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nJW2lhi92wRiwivoN+27DMRA=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nIG93eqrEI7KPvEKcMA5/zqTynHE115bzz1Yqi8rpct4v\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nIBlx2+8ylKfzOw9N/DcO+qmZ1FrdRBhIxD0yzC9caq6g\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIQCuLRzEquLYUIUCCU/Q2aQzWzP9P8Balf/jFD5nUmTnsw==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIBftAUw9b8umYcI1QbtS2QduiZ0jDV7ITctB6YnwOK9xoAoGCCqGSM49\nAwEHoUQDQgAEbUOjRXk/9ZWeyaT2U+uZ4OqNBBozwopsQYAyMDvYBESGuNJTjOPn\n75kIibSnkQFzrrem3K0P0uuKW15+ZTs4fg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/zCCAaSgAwIBAgIULbfcashRRhnPC76DjTi6m2KvmRswCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwNjczNDY0NzEwMDYwNjA0MTMzNzg5ODg1MTE3MTgwNzc4ODky\nMjc1Nzc5OTczMTQ4MS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwHhcNMTgwMTAxMDAwMDAwWhcNMjMwMTAxMDAwMDAwWjAWMRQw\nEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABBCh\nrILsU34bsPm/jpZQqEBZSFvwauYckxAsjk8guDTHpRnS5LpFI3y6CDRKOaLjZrYS\nsY+gQQq0n0nzn/ytwhGjfDB6MB0GA1UdDgQWBBSjh6D1KPdSPHf48psiAHBy09bk\nnTAfBgNVHSMEGDAWgBTtQ3v5b8PriKRWeLs9BRwoTABhUTALBgNVHQ8EBAMCB4Aw\nEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wCgYI\nKoZIzj0EAwIDSQAwRgIhAOOPrPOjeW9pSOOQaoeOnz0h1Qv7f36iKwrBP8BwlOSp\nAiEA+MaVzda60JizT2NNL0CkSZRsVCnpOO38Ju7+NocjmUM=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJgyQ4AyTDOB+R9tki76PGGtX+YKFjTvlLTRbAiJbIpwoAoGCCqGSM49\nAwEHoUQDQgAEEKGsguxTfhuw+b+OllCoQFlIW/Bq5hyTECyOTyC4NMelGdLkukUj\nfLoINEo5ouNmthKxj6BBCrSfSfOf/K3CEQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": "2022-01-01T00:00:00+00:00", "signature_algorithms": [], "key_usage": [], @@ -1821,13 +1821,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> EE\n```\n\nAll three certificates are well-formed, but the leaf\n(and only the leaf) is expired at the validation time.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nInZrrVwQhMM41AAstDcXVQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nOmcWXm4Qqcv7QMuw7AOQLPQ=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nAiAu8Ecgd2KZglJYHnya6+1vMBRkOlayyM1jCKwRgtn0PA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIB/jCCAaSgAwIBAgIUaXFVh8yt+nTPCFlexQcA0ff2DL0wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MB4XDTE2MDEwMTAwMDAwMFoXDTI2\nMDEwMTAwMDAwMFowajE5MDcGA1UECwwwNTEzNDI0MDAzMTczNDA1Njc0ODU1NTQz\nNTcxMTk5MTU3Njc4ODU3OTgzMTk2OTk2MS0wKwYDVQQDDCR4NTA5LWxpbWJvLWlu\ndGVybWVkaWF0ZS1wYXRobGVuLU5vbmUwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNC\nAATCjSFXHAu+iPV7Z7ge/Zx8kCe8f/vFz7STMrk+G9sUjeXtv9rCTdiF8Rylksg3\nUG7V8kwpyYcIow679I/CMIheo3gwdjAPBgNVHRMBAf8EBTADAQH/MAsGA1UdDwQE\nAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAfBgNVHSMEGDAWgBS9Z0kg9cE6\n1TB12IWeQ22QZ7QunzAdBgNVHQ4EFgQUa96m4iezvNkRnjQgUO7W4GyJ+OswCgYI\nKoZIzj0EAwIDSAAwRQIgSI02lhodNwiTcdqXD6iA5k1fJaS6/LMSuzO3iHY9lH4C\nIQCCdzYfwV+Zm9qrmcHcbmWnGps+kTK/TblcRjfbaSC11A==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAiB3yv4t+dS58XgiAa43fRf6cgoBzTgOTpEB3aoY6IGEXg==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIFwKslLuBGY/0EVteBiG9P2bOw5qHtjg/HBmzG4ywJTloAoGCCqGSM49\nAwEHoUQDQgAEQz49v2xrmefZOlk94QCHSJ1Mg/WHRVY8RcgxPropHf9dzRwZU3aB\nAKahuPMFlMUYB+p5ACdq/SYapue06HF2wA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAiBFbF5K9Ly7BxwyrYiOdvssaCTOsqdQTTYbdBeOq1169A==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJUIl/yRchgm5XYzP9HqfHGWIC8kKtKUJwmNwih0haSFoAoGCCqGSM49\nAwEHoUQDQgAEN6hkhqOb25EorFR0QQn6ib5Iq3FJ3Dq0akpZ7XT8jDGIcaAmuHnB\nRJm9JP9jVkHdJp1nvBFHa+A3VkqI6hKPsg==\n-----END EC PRIVATE KEY-----\n", "validation_time": "2022-01-01T00:00:00+00:00", "signature_algorithms": [], "key_usage": [], @@ -1847,11 +1847,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThis chain is invalid solely because of the EE cert's construction:\nit has an empty issuer name, which isn't allowed under the RFC 5280 profile.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBcjCCARigAwIBAgIUdMiz0mmq4x9SbQlx9KNqIqWHQFEwCgYIKoZIzj0EAwIw\nADAgFw03MDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowFzEVMBMGA1UEAwwM\nZW1wdHktaXNzdWVyMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEbM1CGLFXVN2Y\nCN2nu5EZQkGA7a69va0HDj/dvn74JEfBh/Cdq8IROUsVHTI2NB9SsMnp+NAF4RbH\nszypW4uRwaNXMFUwDwYDVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAgQwFgYDVR0R\nBA8wDYILZXhhbXBsZS5jb20wHQYDVR0OBBYEFMLdDb+TYWwP7rlS4KpBmicHzgdJ\nMAoGCCqGSM49BAMCA0gAMEUCIQDerEfROcBi0FpivGCejQE2e9WPo0FJiqGlsW6i\nKo6/PgIgRBBIcpK7yMm0JoEZ3L9jDgNAXTkGLCOAjhPE7Bt8AME=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBcTCCARigAwIBAgIUPOduJzPbsjJgIr4t1iN/aXIL4xMwCgYIKoZIzj0EAwIw\nADAgFw03MDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowFzEVMBMGA1UEAwwM\nZW1wdHktaXNzdWVyMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEI4wW6TxD1i4N\ncT8FvfBO9982GovPitTTLXXK2L0RfeD8111VxPKdwhTlp4L0/gxLI4dIrLufVpFb\nURNZmxLw2aNXMFUwDwYDVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAgQwFgYDVR0R\nBA8wDYILZXhhbXBsZS5jb20wHQYDVR0OBBYEFHPJBTuHSHIOJpQwrzKPcpSCWiWo\nMAoGCCqGSM49BAMCA0cAMEQCICjJ0+yhLDCLrF5QwKYY2tn7Hne818DA/VzZ/aIw\nP0NyAiAOvDaSTH26SgiUdB9+cmG7ZnHm1c3J2V1uDvS737IJQQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBrTCCAVOgAwIBAgIUO5JU+rdpwTvog8uv0xrKl4nDhYowCgYIKoZIzj0EAwIw\nFzEVMBMGA1UEAwwMZW1wdHktaXNzdWVyMCAXDTcwMDEwMTAwMDAwMVoYDzI5Njkw\nNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49AgEG\nCCqGSM49AwEHA0IABCsLiaBymDmMeqCiQbaRNt17BIVrxS1giuyKK7qcAUtBK0CT\nQ+4cvL25eJaPfPTMxHz6VS1wDWf9rhZRrpzORPWjfDB6MB0GA1UdDgQWBBTi+wxB\n6mo3wwkjEZnmk+LZI2NZCTAfBgNVHSMEGDAWgBTC3Q2/k2FsD+65UuCqQZonB84H\nSTALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8wDYIL\nZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSAAwRQIgLnc10h7F7IKpwN9J3BIG8pSL\naP7roiGseCMDSsM4FU4CIQDLhEW4Ys1j98Jtq3UKVEmRMkuZTTMg1IcatEtFRsFl\ndA==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIBsCSkKhYGcoTXFjI9qeN5TpsnXwtjXx8EFnHUV236lxoAoGCCqGSM49\nAwEHoUQDQgAEKwuJoHKYOYx6oKJBtpE23XsEhWvFLWCK7IorupwBS0ErQJND7hy8\nvbl4lo989MzEfPpVLXANZ/2uFlGunM5E9Q==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nB4o=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIBQaUiAViuNZTLpbxZNhr8AbONeusYmSmTYqtlGvhWjMoAoGCCqGSM49\nAwEHoUQDQgAEzga2hG2fvF7UEWH48lu9z+i8/HpKWPz8HY5gxJZfAr2/SO9Pci4z\nYApKrqmiug+4JEXO9tw4qNQt5lLDb1d8Hg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1871,11 +1871,11 @@ "description": "Produces an **invalid** chain due to an invalid CA cert.\n\nThe CA cert contains an empty Subject `SEQUENCE`, which is disallowed\nunder RFC 5280:\n\n> If the subject is a CA [...], then the subject field MUST be populated\n> with a non-empty distinguished name", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBdjCCARugAwIBAgIUVA4LljT0NUe+qsVUGOn0Eg6T8vIwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAAMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEvmKZmxhl\ndpujAc8+d9nr+ZKwnuKX1/LCEBopTm4Q5SEFGmWFytTYY2NKenkd/SvyfPha4iMF\nL43IKSA4NMB676NXMFUwDwYDVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAgQwFgYD\nVR0RBA8wDYILZXhhbXBsZS5jb20wHQYDVR0OBBYEFEJuvyUCH36m0KA9Z+DWH4YK\nb4CwMAoGCCqGSM49BAMCA0kAMEYCIQDowE7W/CSn1XWlKLawoD2C6QYV1QQxFoLs\n+0MOyDNXTAIhAKXWdWQvXdwzc81DLTj4g8erNFYz3DIpxHF++jUwAMgb\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBdjCCARugAwIBAgIUaqqcurS2DvMVPS6LuTPWVBvVymMwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAAMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEA5UW7KC/\nHdmn3hsdqfxiAB4z1hvNGEJXdtHJaiNlMcH6HPO2D+CP+9b70JmxqaatVlm/mD8g\nbzjejMHCYbJe26NXMFUwDwYDVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAgQwFgYD\nVR0RBA8wDYILZXhhbXBsZS5jb20wHQYDVR0OBBYEFIyfK39ADlBabJkdmKZObL+Y\nTl+UMAoGCCqGSM49BAMCA0kAMEYCIQCV8gRiQRMGRR8dCdffCMxwVCpuPCfu1k2H\nzYDaW6kkHwIhALqCWsZC4NlqljvYh8XcmmR/buQZEE3tdIIaP24Y4ZW5\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nRo7uXzCeteaZJqM26c7f/SAyZLIYWTODNKM=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIHgg2CdRHr1tsQ/n2chOr4yCA6qW5e++4/fZ7ECJ5ZwFoAoGCCqGSM49\nAwEHoUQDQgAEt0op28ZmKwoVtGAhj0I4ifPn8AMFsMnYx9CJauSOr7nPqPVpDORY\nyn++rq9khhg/D3UJeoly+q4IlU8xZDrg0g==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nC5SwQ+zush/7++/QUImwYz3nmCydfi+TAg==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIGhVAFqxUcqaO2HuPx2AuAeDsdx8uNwyAKamqMCMI6CSoAoGCCqGSM49\nAwEHoUQDQgAEKwf8i8lscJlZ+SunfG6FmpZTSl4RdXXmlOxzhNu9HIwtfrwzyLe9\nM8JcmukFoEA6IGkEnczlLZJN+VQyptxrKQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1895,11 +1895,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert has an extension, 1.3.6.1.4.1.55738.666.1, that no implementation\nshould recognize. As this unrecognized extension is marked as critical, a\nchain should not be built with this EE.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nIid0oxbmIG7trrxDDB9bogKD\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nCySMc8aXfk/hftTfpAI2Prlr\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nCHWe1Lopul2J8/zh3mWWMgo5KpW34Xrd2iSk\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINzlzE5r5t4r6yhFq6Bxp6+F0heaVnG7IVncuRqthrr1oAoGCCqGSM49\nAwEHoUQDQgAExfSu8Sd3qiH1qFbCiSzsjTqfxvUSGVPVl6r2TYKMEPY+oZZ/Nq7T\nCEakMHywLGQ/JtdelT85wbICft7f3IwGZw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n57dYwN1hi9YqK8JkQrT5t2fcdga7jMrGCQ==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJlwdF9F8am+W0ORxGMvAZ+JiREw54ul9Nq1w4yiObfuoAoGCCqGSM49\nAwEHoUQDQgAEZ4LsL/cvHj/DdZ3mh/N0LnIeHVUyoX1HtXzvNb2/RdTKwBjj6Yab\nVPbPbsLaBmy17U9OVydmUVSgUWbQ50AsEw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1919,11 +1919,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root has an extension, 1.3.6.1.4.1.55738.666.1, that no implementation\nshould recognize. As this unrecognized extension is marked as critical, a\nchain should not be built with this root.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nD06DwQIhAMZBbPg3XB3wPyygmEL7TNcKRTqH4UYDo2cszA/iLMme\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nzHTfUq4CIQCYRski1U1RpEK7s7Ot7xtwHtxrEcgkqoP/jh3vS5oKTw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nbFVSBg==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIFmLvhefGZ3WnnywUa7EktvEkQKVgzicBxrty4ni2Bo5oAoGCCqGSM49\nAwEHoUQDQgAEqy0sSF7LEEcgPfWoHOmRaBj5sPSqcQfYfkX6dfD5cmP64CqQQObN\n/lhXjLAE64sie0Oq7oNj/gwS2woBjHC27w==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n9Yo+fw==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEILJiupjZrlCwLMHgJV3NTae2Z8OSM8tb1L8J/LgbRCE4oAoGCCqGSM49\nAwEHoUQDQgAEpdNZHs02SzgSDV82wh6mKON5Sd1HoUg92Jr6mbKQaPdLec1RsSVy\nbTL0B7iziFymkBQnaQxgGK+XqqNp0dSinQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1943,13 +1943,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate (pathlen:0) -> EE\n```\n\nThe intermediate has an extension, 1.3.6.1.4.1.55738.666.1, that no implementation\nshould recognize. As this unrecognized extension is marked as critical, a\nchain should not be built with this intermediate.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUWplmbtrNgUJMj4tkBK+yyfmoX/AwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQpxOiokd9c98PRmqbCMbuAR9n4hS8dbumDzq/h\nAVES2BYisblTlod2jiQD0PN2XXbSQM2kL7LF0WSAgaSzmffro1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUn4oZQd83tswh0gIWu239DlGCDOYwCgYIKoZIzj0EAwIDSAAwRQIh\nAL4zSMWhhhUNicdksGm2r8FifRn74iAmm1pTTqYj95A5AiArKwwf/zHOdruco8i+\nQhbK9zWoZB2rIaUEtldPGqYJJg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIUcBPJRP3l4XnrzkFpl7EKJx0ZqdowCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATW8bCEDRFz+WNPlK3kL2LtLJB5WbTt1GRGedu2\nAxg3I7Atrnd8Ci5iDgWnSABFvInmyLHJuSYbRxmyj/n/8c+do1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQU3cNov0ZQ5O980/a9THb+ELfEd3IwCgYIKoZIzj0EAwIDRwAwRAIg\nTIV3etF7/8QevaqVsdJxHk8GMoaLMl/1lEBQo+8og38CIHWhFt+TTWdNs8pZdh/e\nBXBSDyvNfA3JEiGBQFEQtOaG\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIICFjCCAbygAwIBAgIUE3Us6pGGkhtUaA7v/ZUAlGbpPbIwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBnMTkwNwYDVQQLDDA1MTcyMzAxMDY1NjQ1ODQ4ODg5OTA3\nMzAxNDI4NjI4Nzk1MTQwMTY0OTU0NjAzMzYxKjAoBgNVBAMMIXg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tMDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA\nBPbqNpiEV+bUQ8POLDRg885D5PXUuGPFacgBQ91Ep38xi2T1OiFevrvISnYTCiSf\n6qB85BZ+sz5w+vJCHdgS9P2jgZAwgY0wEgYDVR0TAQH/BAgwBgEB/wIBADALBgNV\nHQ8EBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wHwYDVR0jBBgwFoAUn4oZ\nQd83tswh0gIWu239DlGCDOYwHQYDVR0OBBYEFJGvIg4INW3IlDUyQVKdTPaTC9CD\nMBIGCysGAQQBg7M6hRoBAQH/BAAwCgYIKoZIzj0EAwIDSAAwRQIgNuKuHT4ltCyi\nLGVGPH+KO6P2MK2CJiJ0HqfCQtPTTgMCIQDWCRW1c7FdeFQvW8aFC9Mu8lT7SD54\nfPcFJaEby0EaGg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\njDyV+uKUNF7RBg==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIQCjjcX6ijFxot283JU1wqKhIGezPOmG8/lMJUBYVygyzQ==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIFDXO2xzsuUarrzMzEqADCy71nEgi2jNh5s5tarWAmi9oAoGCCqGSM49\nAwEHoUQDQgAEGH9IsYXfNtZmjLjnLYhFOujt2qHxSPWXgeYPeWoKbt9kttvajkxG\nic8wVx2+k+ra0b0g9lHArQZRU46McmTvcw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nALoDXLTcth2ogb+TIBTmncat1UvGb58OGyCJkr93u6B+\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIIuSTKS5urs2Av0Rru9XxUHyrvE69NfgsAeW7B4gb1D1oAoGCCqGSM49\nAwEHoUQDQgAEkLjBrTchwde5eYOD1B+MFj73b0gko80JI1L74OdRKz+6bPYRLS4x\nR6W4p7+dLVA5LW7qKnf1eBCdlcJilNIlYA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1969,14 +1969,14 @@ "description": "Produces the following chain:\n\n```\nroot (untrusted) -> intermediate -> EE\n```\n\nThe root is not in the trusted set, thus no chain should be built.\nVerification can't be achieved without trusted certificates so we add an\nunrelated root CA to create a more realistic scenario.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nSB4lN+QCIGehv1jXW0aTpqlS7coQVwa/iGxLhsQbEmW0uaPrR1uR\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nvkXfKLICIQDbdKjVwPxV9qXoaQM3Hw1FWqERRy/zo8q7f9BeJ1R6+g==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nfGD+kgdbqnmbn75yiZ1SSceyeA==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nVQIgLAffKSCWPsZCFiWDNj5KWIyOUJkZuE/UPG9cq/TLsXc=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n3sas5yZ1DSZOThWgJ0huyGft/7s=\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nFwIgW4mSqV61fzfnIf5s/XDtXKFGqfVW1LLbMmjYmEBJDTM=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAISPz/4NuDVEoqlDo5vQRjEODw79SD+84WPU4JfWZyGj\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIIhWopJ/ygUuMqGHXy/E9TTlmqtuZgQ3q3Fg/8IaKYYYoAoGCCqGSM49\nAwEHoUQDQgAEdXBJZ+Yh0aPjn16Zta+nYx0SC29NSBUhSz3v186r0tW+tliQwk/K\nwc31C3wPJw4XnzSQHczmlgszx0rqOPzcJA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nNToWzDUdFp1ll+MW8wTs7jHQ+c8mZ5e0v25MbVKCaVM=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEd++Q1OaKTFCVhWleZN3eCqea4+fCgqexinMHq/1VPOoAoGCCqGSM49\nAwEHoUQDQgAEgK2vCLljkVmBCrxfycbRJlaF09DpsCp7Jtr38CCgdDgUbCcL0Q5L\n/DsVS40rbYrPsDz/nK1had7qtZ0MruKrLQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1996,13 +1996,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> EE\n```\n\nThe intermediate CA does not have the cA bit set in BasicConstraints, thus\nno valid chain to the leaf exists per RFC 5280 4.2.1.9:\n\n> If the basic constraints extension is not present in a version 3\n> certificate, or the extension is present but the cA boolean\n> is not asserted, then the certified public key MUST NOT be used to\n> verify certificate signatures.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nRXbjPiK8GTYbdsavgB6xgN4s3cY=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n2fVWtlw57k9MG0NGl/M4pI1Okw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nsNVYrZU0hGsmQCC13FfvdbywIlTllq9NEFzkeeGXW5A=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIB/TCCAaOgAwIBAgIUKF/firQEyDKt/0tEOInzVB6tY7cwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBqMTkwNwYDVQQLDDA3MDUyODM0NjQ3NjU0ODI5NzQ4NDQy\nMzg5NzE3NjQ1MzQzOTgzMTAzMzkxNDA2NzIxLTArBgNVBAMMJHg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABBLeEfgyGZpqcZSDgFsHccW6krOqmyl2g1K7elMufGo+2vsXaVpoFD2frD84\nLbpepMYgTobvU6zUOX3oBeXpjNyjdTBzMAwGA1UdEwEB/wQCMAAwCwYDVR0PBAQD\nAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB8GA1UdIwQYMBaAFHDz0mKAdWtW\n7qljwaXcmkXwmq/iMB0GA1UdDgQWBBQmZU/4sJw9p/wb1Sf82VP10VRsKDAKBggq\nhkjOPQQDAgNIADBFAiA3XClqp1W+1SiOCA3mxgFEgFacMGpn1iW5xtsncTD1cAIh\nAM5g2pDBC2bj71w+ncIpan66wD10xV/mItmnRGmrXiOM\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICADCCAaWgAwIBAgIUZFgm92q6sJLRR3PBHKao/qWvFgcwCgYIKoZIzj0EAwIw\naTE4MDYGA1UECwwvMjQ0MzA1MzAwNzg4MDMxMjIyMzAwMDIxMjEzNzkyMDQ5ODU3\nNDQ3OTAzNzYwMTgxLTArBgNVBAMMJHg1MDktbGltYm8taW50ZXJtZWRpYXRlLXBh\ndGhsZW4tTm9uZTAgFw03MDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowFjEU\nMBIGA1UEAwwLZXhhbXBsZS5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATF\n9Ce++HfjqKDige3jPeHA1GUFaUeD0I4uISXijvSq7brphYdWkv/GyGG8ZYSJlNOK\nLXFHJf13kxLscWoaK+wAo3wwejAdBgNVHQ4EFgQU7qGEXjGq+49QNMRukjo4Dbqi\n95EwHwYDVR0jBBgwFoAUBk0w5VMvYqpaVBrezY5GJab6UzQwCwYDVR0PBAQDAgeA\nMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMAoG\nCCqGSM49BAMCA0kAMEYCIQDSycFFEDZs+8Zbd53CS4WsRvPWWn5AhVUHUU5B3z+q\nmgIhAO938+yktRwBetE+S3DEdOvy42HP1cmwOOeR754x2Par\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIFBm9ey8QLqCzXc0ZsPhEcQ38T/eRicIFwTXLvcR2a1EoAoGCCqGSM49\nAwEHoUQDQgAExfQnvvh346ig4oHt4z3hwNRlBWlHg9COLiEl4o70qu266YWHVpL/\nxshhvGWEiZTTii1xRyX9d5MS7HFqGivsAA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\ncgIhAOOQoYSH81MnobPNnVUS1I1PtN4MZssTEi3yVAwh75S+\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIAwzG0TIVVYhQhU7+jtDVPDLMJ/HnTaOHJ5gMonIfEEyoAoGCCqGSM49\nAwEHoUQDQgAENVenLhA/B2Z7k238S9cLtEW1bfUbLK/139Q4IT9PvFODjIEA4sgR\ndKpxZnZm0rRs7ZW03N519uvtbUGX9/rXCg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2022,11 +2022,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA -> EE\n```\n\nThe intermediate CA is missing the BasicConstraints extension, which is disallowed\nunder RFC 5280 4.2.1.9:\n\n> Conforming CAs MUST include this extension in all CA certificates\n> that contain public keys used to validate digital signatures on\n> certificates and MUST mark the extension as critical in such\n> certificates.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBkDCCATWgAwIBAgIUUqLZ5xPPduBtjB2utxUmi3LqPbkwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASl3TqsatyuSSVhmwiyfd2Qd01tWUfRhVKI1Zx4\npLkyOQd/c0B5tZbIZCDhiewBgHqNh8Eko145HiB7YuFl3OEYo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUrzcU8Sj8o28HGNQrwNAHH4epE3YwCgYIKoZIzj0EAwIDSQAwRgIh\nAOFy0BBwKN+rXZ8KdOhIxNz+Nn2W4EobBUsfkUvyS1pDAiEAwhyHL0gMKBOE29Rp\n4K7xUoyNpmUHXY5j6PXvpC7QfYo=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nBqBs5N7blCNtwaNNSqtEq6SKiVw=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nPgYCIQCrv/bow59J9HLqJVy9EfMgqBuBV/TXVC6comDhjU/3gw==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIIw9OQH9LOclWIZfioNPJ4OKF9CJK8wa5/Q7Hsi0FQA/oAoGCCqGSM49\nAwEHoUQDQgAEoAdM+VRe7VUgQH0ldoqcphrKPljDVqAh4JjcFxwPDEaskZiHquIf\nVtXaMDi1n5O8jlSrJf3uJXNDb4DszcXe8A==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nrFMCIQDRSjok2w0CMETaxbAZJ7CyN9qib0fB34bizMl5Igq+FA==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPoewyV+/VOKcpw8C1+2YebT5eNN6yRYJwG3uF78+EmtoAoGCCqGSM49\nAwEHoUQDQgAEJ2m5DLSkgqHOC90Thqm+7t3AIyI8t0CRv7QGo+Hux97+hFzv6iJO\ndrj7R4BDKwLpwxoNMEE8D+4YAM/TXJlHJg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2046,11 +2046,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root CA is missing the BasicConstraints extension, which is disallowed\nunder RFC 5280 4.2.1.9:\n\n> Conforming CAs MUST include this extension in all CA certificates\n> that contain public keys used to validate digital signatures on\n> certificates and MUST mark the extension as critical in such\n> certificates.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBfjCCASSgAwIBAgIUPjQLo364C90cyhyez/VFIH37tb8wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAT1EZVJjHhbOI6GMjE52ZFVQSQluC4pAbla+77a\n4Via9gm4vKtZLgNap0LKVius4tib/A5jvCA9UTeAEotjpMb4o0YwRDALBgNVHQ8E\nBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wHQYDVR0OBBYEFGFHojyNDkhq\nFZV+8IGBlnopNiQwMAoGCCqGSM49BAMCA0gAMEUCIQDduTz2/zkVmL2vEiIoslqs\nZpQtW8SsLorZiYuJ5zcAIQIgCfDUklG/2/wVBC5lN7zGLTKkhoJ+2AvGg432rfCV\nMnk=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBfzCCASSgAwIBAgIUf523N+lspcWY95d8HZFJs2wCi7YwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAT2+o3WcXDPZkdU5Uyk0lGnGY4ykGyPmNiNYxML\n9Dqxd0A5MCkClei3dJ0JA10B1Ml3moULQlfYTzxVSpEZ+yTao0YwRDALBgNVHQ8E\nBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wHQYDVR0OBBYEFCSi/OL5eGuA\nyVGCfAK7/TQLlgHQMAoGCCqGSM49BAMCA0kAMEYCIQChvkZOubCtuJTz+O/ztkJ3\njmkJsEhoMz3iMvEj5T++KAIhAIZ17TTg+4OWcYC5CXwNV+7RZNbXur2yGg++SDrg\n1dqI\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\ngAWsOA==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIKK3V5GPpydW+TzvwCzDVvEbhPj6OA/YUv8isQNpAg+yoAoGCCqGSM49\nAwEHoUQDQgAE7DMgkYg0tiOhjXW8ldGTax++3/iQcP/O83/DWKnFSp6MxOhQ6YQy\nDbau2S/rAsxBdTwLMr6oqdFU1/SixPHkoQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\njdZ3\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDjzoHA0+J5ztBD+MpIvOH30Si0sx6l9Jdx4RKA8Ix4foAoGCCqGSM49\nAwEHoUQDQgAEJ5RiP2uouRGPxGgYQ+sMjaQGeiYTDe4MRFYFqGZEByzvNYIPLoJf\n/iIUAWxNYC7pKldrYcsY3Cd9/MEPm/twRw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2070,11 +2070,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root CA has a non-critical BasicConstraints extension, which is disallowed\nunder RFC 5280 4.2.1.9:\n\n> Conforming CAs MUST include this extension in all CA certificates\n> that contain public keys used to validate digital signatures on\n> certificates and MUST mark the extension as critical in such\n> certificates.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjDCCATKgAwIBAgIUIWmg7NrnzLUqUK4IIs6e53L5Rv8wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATnp8VTKyFK4GWbJ0OVd0VqGQdyOuNhUPEzzG/b\nEMwXWPF4A+1niPpwPodkO4fp/vnFOE3ASatoOnWVvUrEn1zLo1QwUjAMBgNVHRME\nBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAdBgNV\nHQ4EFgQUgJTNfLJpAbUNGESt5IUtjJdWBeUwCgYIKoZIzj0EAwIDSAAwRQIgbXnf\nvgv0+ktlR8MAr5/VLsS4w/yH0dse31TbM7t4+NwCIQDzZIzCJkOmvsa3pAuZIaeO\nnmfznX0miCZ85mXd6dpKMw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjDCCATKgAwIBAgIUDeGq4JnV6EsI+x0kkBenOHiRyMcwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQP/r+q08epGKTpOQsHw3ZxRBFI2uQkTHbD7gOb\ncGt6Z0rN4tV63bJGEAA1dKArAVBCCOYUDyr6SsFyiyE9fNzMo1QwUjAMBgNVHRME\nBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAdBgNV\nHQ4EFgQUDinnhMCPvIgJIypyvdWF7pXq4WowCgYIKoZIzj0EAwIDSAAwRQIgM0e1\n+VAICV4ASJh338MGcwC9U6+uEgcm02WboF913QYCIQDyfSsY1DADAfkshgrlPNmq\nrd6mhwOhCwbxpedtOH6smw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nStymwA==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEILn1eaUCS+RiG6dqBKkmfZfHFM6SdBLd4VqgeEGjJzW8oAoGCCqGSM49\nAwEHoUQDQgAECzPA8fmCPyHfc/wQYLlr7Blyv3xK9tl2L2medU50oEVMho82Kh5u\nPAGLTmeUj2rhc41s2GA0vSDae4IQfp5MFA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nwluhB60=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEICa3cByDW0Gpy/mNd/Zkb1tthaExOOJU0DHyyNPofsF/oAoGCCqGSM49\nAwEHoUQDQgAENQH6jo7H37GvyJQIdQ0zhkfgKqnpOZMTAQ2iS82nqJQ7gwlXqLEi\n7XrF254hGcBHeVOg1Pefa9gSJDzUVdi7Kg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2094,11 +2094,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root CA has `BasicConstraints.cA=TRUE` and `KeyUsage.keyCertSign=FALSE`.\nAccording to RFC 5280, these two fields are related in the\nfollowing ways:\n\n> If the keyCertSign bit is asserted, then the cA bit in the basic\n> constraints extension MUST also be asserted. (Section 4.2.1.3)\n\nand\n\n> If the cA boolean is not asserted, then the keyCertSign bit in the\n> key usage extension MUST NOT be asserted. (Section 4.2.1.9)\n\nAlthough the profile does not directly state that keyCertSign must be asserted\nwhen cA is asserted, this configuration is inconsistent and clients should\nreject it.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nfPxnfhxXBkFuL9QkSiYvicav\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nVtw8KcZgXlWgjzzcArYptTDT\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\naYBo\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIBFw9KlrQZZnhOLGi+Ily4W2hY3XDRjoZpxWe7FFX/EroAoGCCqGSM49\nAwEHoUQDQgAEsWUA/AhUdmLE4OtXTjsKyPE4MLbUlQ99AWz4Eaf1+I9t3cyQJz7x\nfp/mLyGmaFU6H5Nes0L3aKOXzpU5QtXDmA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n2fmhGSM=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJsu3IKEHoeVebyCh3cqo3w8QwQhVOx9+rWimfYez+N7oAoGCCqGSM49\nAwEHoUQDQgAEiybSUARByaV6VQY8ZeDDfKEt8NiKDBP0gHesSO18DUieyU70DO4J\nPIcCo0NjrBmU1lg9QizIJJ58KWJw7MfXQw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2118,11 +2118,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA -> EE\n```\n\nThe intermediate CA includes BasicConstraints with pathLenConstraint=0 and\nKeyUsage.keyCertSign=FALSE, which is disallowed under RFC 5280 4.2.1.9:\n\n> CAs MUST NOT include the pathLenConstraint field unless the cA\n> boolean is asserted and the key usage extension asserts the\n> keyCertSign bit.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nCPNOaqWUOL8VkTo/DG8uRcgKaA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nlgtBTuwBsR3Y7gbZdkXkbaUOLxI=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/TCCAaKgAwIBAgIUViDx4QjcChlK3fBwPlxPyu6iIncwCgYIKoZIzj0EAwIw\nZjE4MDYGA1UECwwvNTQ3NTk2NTQ0OTE0NDAzNDUwNzYxMjg5Mzc3MTMzNDE3OTg1\nNTY0NzgxNjY0MTkxKjAoBgNVBAMMIXg1MDktbGltYm8taW50ZXJtZWRpYXRlLXBh\ndGhsZW4tMDAgFw03MDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowFjEUMBIG\nA1UEAwwLZXhhbXBsZS5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATIE3j2\n15GhiAXhvjpWQOg5MZlIR3XOlDLhpjQV03kQ70dQDNxI/uGFKSiyMsTFbTTmHG4U\n2cgSy0H6dQXlyZPeo3wwejAdBgNVHQ4EFgQU2NLqu9xIHlcJZfNcyGSGJ7VxoV4w\nHwYDVR0jBBgwFoAUvgFc3zJr4U4Yrb1ykc1Tl5fjMKUwCwYDVR0PBAQDAgeAMBMG\nA1UdJQQMMAoGCCsGAQUFBwMBMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMAoGCCqG\nSM49BAMCA0kAMEYCIQCdn1oMgo6Xu2IG9BC3s5SHpJPYiU7PNg2p5cYxIAPx8wIh\nAPA/ljs+lnKH/5AteJihIGucOuHCdJray8xIDpn5B9ZZ\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIF1bFhqPDgT+RGu+Ys9WuxgwI1/aeDwPmUTDa/oN5xn+oAoGCCqGSM49\nAwEHoUQDQgAEyBN49teRoYgF4b46VkDoOTGZSEd1zpQy4aY0FdN5EO9HUAzcSP7h\nhSkosjLExW005hxuFNnIEstB+nUF5cmT3g==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIDcPQaY7qYr1b8D00Uj7wLYNVXUHMeMZINlAZ8uGN1rZ\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIAaKZHHk2J4ufmBkIfzVdVYrOMa1Oc31zDOoYZsDHLPMoAoGCCqGSM49\nAwEHoUQDQgAEEBINwdyFRONiwvzbuDCVXTEwoMivJkYEhJru+iZYVMzatWsVsOuQ\nYTiqK0oXIiYInnJtF9SHP2qeUiNdKheNXw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2142,11 +2142,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe leaf has a BasicConstraints extension with cA=FALSE and a KeyUsage\nextension with keyCertSign=TRUE. This is disallowed under\nRFC 5280 4.2.1.9:\n\n> The cA boolean indicates whether the certified public key may be used\n> to verify certificate signatures. If the cA boolean is not asserted,\n> then the keyCertSign bit in the key usage extension MUST NOT be\n> asserted.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nrB7ImcNxf4nCRsnhxswMIrrevII=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nAqYFoUE2FAuImwF5vGLLBsIIsw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nVo9s6XZPzgQxpDhOmwDST/CJURqg\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIL9CNjYqyhAhw89R1lgUaHfh0CpNz/E8l7lCqsHf8ua7oAoGCCqGSM49\nAwEHoUQDQgAEnODK+nU2z5ekaGxg4jfkdwfXvpb/vo+SjgNswh61/BXuWCjx9LE+\nJWHy4Qk/07zNjfeF4tAB9tuvRtOfKCtiwg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBwTCCAWagAwIBAgIUOsUqMRLEWY/4Pk9Xsh33zg9siyowCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABG9kaW1L4mIriqPYwLERCrWGD1TPmaI/0eR5KhxhEAOc\naLW/z5J/rjEGcS9tKDj63JE1GetRTFx3swG8cMAdR+ajgYswgYgwHQYDVR0OBBYE\nFJooigsuF/2N2rq5XAMxJVrpPHCxMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAU\nPUYvTBWiPeoud8gve6c+Jm9q408wCwYDVR0PBAQDAgKEMBMGA1UdJQQMMAoGCCsG\nAQUFBwMBMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kAMEYC\nIQCXQnpdn42HpD9PxpdWTadwLNHmoQu7vM0RNcxuQZ8KDAIhAKN3E1M3tPgbm5+X\nS86lcY8SL4ZC2Q55AwbZhpLpl8+T\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIARjBjDdJJ2eIgfLwh4gl/p2uNfjAF9CrnYlhfc/8VAyoAoGCCqGSM49\nAwEHoUQDQgAEb2RpbUviYiuKo9jAsREKtYYPVM+Zoj/R5HkqHGEQA5xotb/Pkn+u\nMQZxL20oOPrckTUZ61FMXHezAbxwwB1H5g==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2166,11 +2166,11 @@ "description": "Produces a **valid** chain with an EE cert.\n\nThis EE cert contains an Authority Information Access extension with a CA Issuer Access\nDescription.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nawgobiQ7h69V+GFEgb7AjNQ8og==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBkDCCATWgAwIBAgIUHjrHXjXe29sJUOR16IFHnjJqy8cwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARs/OTYDUhmj4+ZPY+lJI0pDhPLuw83Wj+KRAag\nA75+A9w0pVhotyvE2IirkReDkiKhl2LtF1aWwQCEKEZ6rWhAo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUN667t/+nABSNvf0MjKvR1kh/9WcwCgYIKoZIzj0EAwIDSQAwRgIh\nALODc+2UE747rQoIQ5QlzRYerGv3Z/wSsA7b+jyHe48AAiEAufNmvpUQJJF8BC0k\nfVzl2eW4gxrzO3OrebCYK5zonwU=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDmnFu2NsH3tOkTBRfSdTrKyhuzKwSZsiND8fnKLFMH8oAoGCCqGSM49\nAwEHoUQDQgAEvDiPHEO5GbEDDJ5XZuR89+N9LVXvoxY2Spvo8jZqta0p34YbtFGi\nK4ytkhoKoYq0X72a8iEdPlac7mF9QSY9jw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIIH0gPt0bi0fN0twdeN7dNxZIcqhnkM7UyWgx2XP/mC5oAoGCCqGSM49\nAwEHoUQDQgAEGDWZXc4nQyyOG+R1ZfjnEGrx8OO9GWBdrpRdV1iuSrLkfAU6N6eV\nB18viIKcFtqE+eTzt4dGthrrr4q7xJre+g==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2190,11 +2190,11 @@ "description": "Produces a **invalid** chain with an EE cert.\n\nThis EE cert contains an Authority Information Access extension with a CA Issuer Access\nDescription. The AIA extension is marked as critical, which is disallowed\nunder RFC 5280:\n\n> Conforming CAs MUST mark this extension as non-critical.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\npttZqrcdCrQvA7Y4yIqIIWLmgQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nhS1kEcvdIzPgLomo8jZVbWbWMw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n9Rw=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIFstkeIFY1sLKaWyqXs3PaRC4PPiT9FiZEX95rLR+uOBoAoGCCqGSM49\nAwEHoUQDQgAE/xCZ7Pg0Q4fRr4ezpUPeOZ7RUeOOlb+J/IJXS1BLqbXDEfN+UOEC\nVjyhh91ZXyO3LnIx0OfYpOIAfUKvL03Dqw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\noDBe\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIGQQVjruM3+sP+ZoGxWDFJdryMobb3XddZ1Mljpu5jyMoAoGCCqGSM49\nAwEHoUQDQgAEROgcBqCv+D12qYKp760kwkexQbCtXeYj6KO0ckmDBPSVYxzV8zhk\nlqAEU8QbYL/cIBHRJYYVxQdNXbaiHKvqdg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2214,11 +2214,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThis chain is invalid solely because of the EE cert's construction:\nit contains multiple X.509v3 extensions with the same OID, which\nis prohibited under RFC 5280 4.2.\n\n> A certificate MUST NOT include more than one instance of a particular\n> extension.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nazM4Yf8CE3SsAnqGra9rAIx1sw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nVG9xkDOePgxtFydxfWvztSxHAQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n72MfioiduNcZ0iZwa/waCuQcqbP/HHLir6lrBlX2HQ==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIG4eNGp0tAFNvM6dt/LbcPhbBKW9WTkZd2JP87rjvmoDoAoGCCqGSM49\nAwEHoUQDQgAEhDvUUKV/zWArWz8PRygDaG8XaiXOcLfHZcVNo1K7BIoYB8m2WI3B\na9oneyd79Qik99GguulDRDv9W4vlIlFRsw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n+VHvZGbJhz94mTFBS2oaZkceJX2GxX76wsW/vJD8RA==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPFJWV/XbipcrJw5X3lhWvDVtucw3Rmd9ENzt5ur2b+ZoAoGCCqGSM49\nAwEHoUQDQgAE6tM5C8xEY499fLP5VDXLDvU/xh/ZGFZgi4tufBLC4G4tBO3XSh+L\n3E1qSGbAJdMGYRv4vLzNCfTt/mw/QgrsQQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2238,11 +2238,11 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> EE\n```\n\nThe EE lacks a Key Usage extension, which is not required for\nend-entity certificates under the RFC 5280 profile.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nbsU84bGovfJAi6QIBHuJ/DnsAg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nFCYu/AdQl40YbXq6zxbi2xQp9g==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nF9eL6wIhAJDpMibYFBLzvfOBZ070+Av9f/Gw2XH3oQ07QoFHUYS+\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIP7mlYz1dwzTpBqmzH8K89PEozdfQzoDzcKHqTZNJ3hFoAoGCCqGSM49\nAwEHoUQDQgAEYF7lQhJ5iFSBmZiotYb+pkBZqKDJZIG8B+9CJkP7csWsjxd9MhLk\n1fDp7qJVoo044rw/99gmc6Z68du9iZNMGQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nWE6lrkQCIQDUKBRVBbkis8VpNKQaL464fyx/sE7UMZWg85dKOGxc6w==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIFFCclJvLJE77y1cSgN+ite4aP7DVmffSaZupyxE6zxhoAoGCCqGSM49\nAwEHoUQDQgAErBnatugaMCbuTsbjSLMpTUD73a0EoZzWjTKzOOXbck3y9E1CoZUN\nAQU56m2/cf4lWhxoABXjPGeLd/cTCTFeUw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2262,11 +2262,11 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> EE\n```\n\nThe EE lacks a Basic Constraints extension, which is not required for\nend-entity certificates under the RFC 5280 profile.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n5Jt1e3HOVslMARgzllV1NvKojg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nqP9JImBkMu3prFsTJBhKRnpZZQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBrzCCAVagAwIBAgIUCdwD27EQCvMMJxgmHDPHUUALLe0wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABHoQsQ6ILJM3MlLkDX2yiXt5MC/Ffyuf8V6T2s//WAlQ\n91Fd835DsrO8Qaq7GSmeIKzz8ZA/Ocdm3Kk3qYndXdmjfDB6MB0GA1UdDgQWBBTg\nuslOh45/uthNmUn1o96gqgo/OzAfBgNVHSMEGDAWgBS6FUWA6md5Yg+8CFSyKLrf\nEILubzALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDRwAwRAIga2QpfONkJDNkwuWxiXUW\nXF8seyrPQP6m+xw09KvoN1ACIDB5aeXFr90Jjg9BSO8/4kqqfCx3nKFTYjoKCkQr\nrjWN\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIKNAxBGF8yy3Gxn+HGzXpZJpemvYXnuK052uCbkvELaAoAoGCCqGSM49\nAwEHoUQDQgAEehCxDogskzcyUuQNfbKJe3kwL8V/K5/xXpPaz/9YCVD3UV3zfkOy\ns7xBqrsZKZ4grPPxkD85x2bcqTepid1d2Q==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nr4tn\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEfzlH+/3mH7ia0Fd8NHrhM3WmJ5KxGg+Po1aRbLom+EoAoGCCqGSM49\nAwEHoUQDQgAEyOVEvRc4ObadRRZAACl1uYpLf9H29bfFgN3NMKQj7YatAK1tVMdZ\noEvvxVchxvRTj4KZtSnIGmStyYbEovbKrw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2314,11 +2314,11 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> ICA\n```\n\nThe ICA is in leaf position, despite being a CA certificate. This\nis permitted under RFC 5280, which makes no stipulations about CA/EE\nstate in the leaf position.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUWKiWP/I+VTXY4IUjkme2olwUGvIwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAT4qqYwW20EkxPClF7/d/NeyHbZ3aGxRNJF94yo\nCjt39KDGhjrobxVLE8G0tdGhNV9+nkpMTIV5zpw1ryYb4OINo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUEO8i8zWcb0AF2sloBR602L0k5vMwCgYIKoZIzj0EAwIDSAAwRQIh\nAP6kyp08uTsOSGaMT8pasCUrct3w+CNzGWRlYa5rY3MzAiAB6bl6rLEx3dtjmoMc\naKpjJZJ+bUrL40N7j4+B4Z6z1w==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nVI0N5tVhFToztvuTJcCeT7Nw\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n8JvdjNYCIE+QHJGSG7KLTdGZcEiW4O9CgNUB/jbcRQ5B1+n8He2M\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIKTfAqzGtOmpIfaFuHX8A+rg0hrndCgQAzG1gALeWiI/oAoGCCqGSM49\nAwEHoUQDQgAEd4zrSsU4lcAMx1YKVOfKkszyamc88fTTohgXVae4UR6c+0SAHTey\ndCBYjoomTwhm8SmrDeXJLito+5YMTIEevA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nZxZmmekCIG5JuYfAozMOMbbbbqNhru+MLW6QuUZ4FW743pq7lS9O\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEICPXjxmL+J2wVBt4sxdjszKAnHghmW9Dw/lbmkz8ZEvPoAoGCCqGSM49\nAwEHoUQDQgAEvYofZa4QF+Hr/60ms2YdKAsacW41/fM/crcGJlFHINcCl/BgkP2d\ntIQuZ2WZZYIuKXvjdrDpK3geSHhH/viZDQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2338,11 +2338,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA\n```\n\nThe ICA is in leaf position, despite being a CA certificate. This\nis permitted under RFC 5280, which makes no stipulations about CA/EE\nstate in the leaf position. However, the ICA *also* has a different\nSAN than expected, resulting in a failure.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n5uWp6BLfVmOzJcjBz7WUvU9JUw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUKp4N2IEOlC8Ywqq1sEO4Np1+KI4wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAS0nHWtxuwE5fAh3MLfEjvw3LDkxV2dcPrHvjdT\nDNAs0Nn8GeM0dwJXC49Nnj1hqeThyBJxgn5X+DpHMCeNrf5bo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUpHR/ueRL4pQYhY+VrAGFygIpqFEwCgYIKoZIzj0EAwIDSAAwRQIg\nSQ4N4//z399Pdkf/kIm1ZkRanHcKD855FLqvmo5Ry9kCIQDliGBnQ2eBZDZim0Bf\n3HQHkLi5dQedbeXi+Ef1wJ12EQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nlNCJmN0CIQC8Ro4CE/F9qGkz126XEqwMLfViaPz2W77DX6Pax5Nt2Q==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIFtPLPLOZtOI3tmLqw8Dx22vGHhq1ykwfLY2kiFC1HTsoAoGCCqGSM49\nAwEHoUQDQgAEXP4gyZ5Hukl9jTx9u9+xLsEpGY0PYRiy1UqlO8tFUTZoPPw7Rxvp\nLrbDUFLubF4oqrg8hmwK5sKgO57c9tO8zQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\ndCh1hAIgNTdEOCJxzaWMZGrnf5xmMhFvgMVYGJ9nXMhczECX48w=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINIvkU3jY1LYMMjsvA+FmUF6aIT/qfb5YqIzWAymExvyoAoGCCqGSM49\nAwEHoUQDQgAENgeenZVDG5z6bmMJQDU4ZJy86uD1WTr5NXq264c+gsgnc4u3IHEp\nXAc50KmF4mSs/iZnbTnMa2+8lB8nMJjtTQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2362,11 +2362,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert incudes the authorityKeyIdentifier extension but without\nthe keyIdentifier field, which is required under CABF:\n\n> 7.1.2.1.3 Root CA Authority Key Identifier\n> Field Description\n> ...\n> keyIdentifier MUST be present. MUST be identical to the subjectKeyIdentifier field.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\ndpeeVRU3jvi8xgOKD+hEiBniViXlBAFgAGoyloMf\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nK0aqX6YWiWsL6Hu0kKtLQaa/e6mBcTomcGxfBpM=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nr6Uprg==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEID6a/EUwf9qr9bW6AmPSBk/+6X9uPz1gDFKwV+c2PtX4oAoGCCqGSM49\nAwEHoUQDQgAEMLJkigl/AIZ4v9NHDYB3HTKsx9lsosU21juyU/JUr8sA3ni+eGgb\n4tQ7R4Nzydfgyhr98YQLcyD2FnsMwCHJqA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nw7u48w==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEICylz2Ss7xUOFWiIe6B5evPCPvQloqNKDCg7IIOaHekQoAoGCCqGSM49\nAwEHoUQDQgAETCiPlSZmTjukos+JS4fNAZ3lsBPPKWXtOMR3yGhHfUFcVuS+Xb7I\nz71Id6/5+nAKD3n0kUrsq35WHEWmBfokfg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2386,11 +2386,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert includes the authorityKeyIdentifier extension with the\nauthorityCertIssuer field, which is forbidden under CABF:\n\n> 7.1.2.1.3 Root CA Authority Key Identifier\n> Field Description\n> ...\n> authorityCertIssuer MUST NOT be present", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nUTqW18gdGr9rIsbZmkeQM8tOYiMrVLBraZEt\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nLoZ/tfQJWhEaEby3NUidYCaHiYmwjs2HihzoMA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nlUUu\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDyC0svigtboVYa72wGiZHyCGQ/QdBPVLGCIcdiTY041oAoGCCqGSM49\nAwEHoUQDQgAEbz+RUILN9YL5bH7vjOjkbuttA6cnQZwib9NkqULmVVhokm/ifihY\nLtN0Al2Jb7/GTqjxkOP0+Y4/Y+hNPHGRXA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\ncuLEYKY=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIL8sCbLbYZ06Rgj61eYvjiDd1zQAzD41D4yngFy40XBGoAoGCCqGSM49\nAwEHoUQDQgAEUPojebyU9IQRlExbuzQ0uWNWNJu139m2nnVN4rCJ2JOTJbnkNfIJ\npiDyUQrZHWrQ3qcogVUWcLz7zRfWKlmYWg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2410,11 +2410,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert includes the authorityKeyIdentifier extension with the\nauthorityCertSerialNumber field, which is forbidden under the\n[CA/B BR profile]:\n\n> 7.1.2.1.3 Root CA Authority Key Identifier\n> Field Description\n> ...\n> authorityCertSerialNumber MUST NOT be present", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nJZQy49SnhDI=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nIwLXs3ZopUT0\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBsTCCAVagAwIBAgIUUdy5bfR/1h7UaWOK7yAymP8/gRkwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABFkf3600WXvH83KHTq1AETMSHJfoBMScAzS8brHHBNFg\nGpLvvx8HkhtH82eSmvi57Lu4RdPEKAWunswQDCGefhSjfDB6MB0GA1UdDgQWBBQX\n7b25m0ma15cjMindhSgU9ukh7jAfBgNVHSMEGDAWgBQQmnTjCPlj/TAXIMmxIbnS\ngkRHXzALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSQAwRgIhAJf7bPtoGcFBH6mUjpwL\n9dvA993Eaxwf1qGAbIQmpWT7AiEA+OxoGd//dTHVCtLJ1M7i0NDoki1unOsqv/ji\nMEUwCU0=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINn183lfahUsSu1dohbaBzprFiZJInLuG6Gj22Ca7t6voAoGCCqGSM49\nAwEHoUQDQgAEWR/frTRZe8fzcodOrUARMxIcl+gExJwDNLxusccE0WAaku+/HweS\nG0fzZ5Ka+Lnsu7hF08QoBa6ezBAMIZ5+FA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n/EmP0g==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIH2fWVgpVK9T3jsKRoN5p7l7WSBwI0wnnzG3ikHQav7yoAoGCCqGSM49\nAwEHoUQDQgAEpFPlT/2D0ajF493wZK11M+VjE756ISIOdOuDmMr0aq2k1AlHxxNe\nMQarmeQgO9lCPQ9L+ISKGENuAAwxwXmEFg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2434,11 +2434,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert includes the authorityKeyIdentifier extension with the\nauthorityCertIssuer and authorityCertSerialNumber fields, which is\nforbidden under CABF:\n\n> 7.1.2.1.3 Root CA Authority Key Identifier\n> Field Description\n> ...\n> authorityCertIssuer MUST NOT be present\n> authorityCertSerialNumber MUST NOT be present", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nLkMuyBcrFk1nUvdsioyFscaTk8rg0/ZwIh6/Uy4PVw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nVHDlGLtlRW19YTQ6G35j7so8Fmo+JxU6pf27wX28+A==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n2okAwPo=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEII1fbsY29vRe5HBWMMd6NvLhpw7nTdLZPak9p4XOZphzoAoGCCqGSM49\nAwEHoUQDQgAEvUrxlEwR7bB9VuiNJZOxpFsEmR+QH56KtlGx6ZPB1CflU+zki9xz\nooFY1myXdmzRcLRBoiymB9fVWPfJYGa3Xg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nfB5tUg==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJeKNoU08N4dsiZxYiTgXSwV7PhaubdMUjSwfDQUudJOoAoGCCqGSM49\nAwEHoUQDQgAEEVFM3VVMIgqEl2Ei21gFs7GIkFovoSOFFVBEtKdIvncDj3Us1Uo9\nEOc+umDPgP59gRDT1dqpl+gYSHI4WlczuA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2458,11 +2458,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert is self-signed contains an authorityKeyIdentifier, but\nthe keyIdentifier field doesn't match the subjectKeyIdentifier field\nas required under CABF.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBrzCCAVagAwIBAgIUVJdQ0bOQ2m8PQhFXPfZARNX2V3kwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASgyhe4em9FvvYxZPI1t5JOjBdYiqfy+9j6y/1L\nHDIMycnUjNT9tfsBJK3X6ZvbZEyA8ALmQll5L6XquvxVduK2o3gwdjAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAf\nBgNVHSMEGDAWgBTi/V++fVjU3Xl2nfghhYG2gJr1pzAdBgNVHQ4EFgQUn+11Lb1k\nTwtmNkfInGE5idBqbZwwCgYIKoZIzj0EAwIDRwAwRAIgVud2kUbSmG+xmosGHPWv\nbV8QRZteQGMgEt8748CtpsACIHnFAZZAchyuV4YwTe4Q2KW3VaCMyEIBt7WdKi9H\nOdwU\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nGQu4GQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nqFAQsec=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINPPG9BRJhb0Ldzd+MeQH+tB7R9Sqhr2yzBf1eO2dAknoAoGCCqGSM49\nAwEHoUQDQgAEFD7GaIZeG3vJc6m0TBdO993E5i24pSTZY+sTlLGn1L9pR+74wXOe\nfNLSg3HwBtV/Ce4G35Lz31R3TIxnLnM1bw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBsTCCAVagAwIBAgIUII9Gv9PsL8zYIYb+6+7JgeCNoXgwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABJYdAnaOqJum3pdRf1BK3n9jvVaoQJnlzBF0ocWHO4Ep\nmfoXeJWu6YKXRsDY3szs0OlXkXndMPdqfB5uruKiht6jfDB6MB0GA1UdDgQWBBSN\n+hA4KfWfOPowcYU8RSMtievhITAfBgNVHSMEGDAWgBQGSZPa9NUYEjwdCskYC8Nb\nedzefDALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSQAwRgIhAIY6Ns1r1JXgCeU6RUov\n1wXHD8NOFEi61RX85SZhZWrXAiEA8zWTKjVUZrzeROTV3JLXPJi0I0fjJqTIRSqo\nP2+cXOM=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIH9py3HK4rEpQ9IibehTTmZQ2vES07b+H45e+0D93vzroAoGCCqGSM49\nAwEHoUQDQgAElh0Cdo6om6bel1F/UEref2O9VqhAmeXMEXShxYc7gSmZ+hd4la7p\ngpdGwNjezOzQ6VeRed0w92p8Hm6u4qKG3g==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2484,11 +2484,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThis chain is correctly constructed, but the EE cert contains an\nExtended Key Usage extension that contains `anyExtendedKeyUsage`,\nwhich is explicitly forbidden under CABF 7.1.2.7.10.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nhDCNjglwPlXz6AcTpP0QOWxrMw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n/WM+Xx/s/kCBMZNlr82E0BEFiA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBuTCCAV6gAwIBAgIUStVssYII4LYUkDAqtRrzg3y1N3wwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABOm+VsYJTIRXb1bhIK6J0drP8lSSV8AaJombMLYfZV50\nqMkAk72E7PtamXdN8kMyIPuzF9NGzdJ4I54XV5m/bDKjgYMwgYAwHQYDVR0OBBYE\nFCR5N4/eF1sSSelulwgUdnA9oNMIMB8GA1UdIwQYMBaAFBOZcXnetHjEh9Fknq7X\n/Tb/me51MAsGA1UdDwQEAwIHgDAZBgNVHSUEEjAQBggrBgEFBQcDAQYEVR0lADAW\nBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggqhkjOPQQDAgNJADBGAiEA7DcJeGnt\nwnA+wOUbQxZR18RNrM36PWg+xNnGq6VZIYsCIQC1q+XAttkGXUmvAB6PnjvC9LD3\n+hwa9doHR/MOTtv8TQ==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMXGYU68ogsiOkvpeAQVbaNr04qISXUF5eqE5exjdwewoAoGCCqGSM49\nAwEHoUQDQgAE6b5WxglMhFdvVuEgronR2s/yVJJXwBomiZswth9lXnSoyQCTvYTs\n+1qZd03yQzIg+7MX00bN0ngjnhdXmb9sMg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nC//U39C3GQUkQ1E=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIOXI4IdB3tf8j3KdJqHpBAewwJvNLG/iak4lwFlL8FvroAoGCCqGSM49\nAwEHoUQDQgAEspFKbtzIvnKVzAVO9Qh62Rs0adnlFNau3gWUGU5jdWSEP0UWHUp+\nfNLsYOkuVvjG6zv9mtOzm/y12Bf7h7QnQQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2512,11 +2512,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThis chain is correctly constructed, but the EE has an extKeyUsage extension\nmarked as critical, which is forbidden per CABF 7.1.2.7.6.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nlJOkK83dkYGeEI+kd4lK1W+H\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n0EHBHIWdJNKgQMLusJvmp4zyxA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nlWyWE3ydaQ==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIE4LhlyW0hSeQpkLQQwmpmjcDdP9XRC0UWmKoLgeG/f4oAoGCCqGSM49\nAwEHoUQDQgAEY8W7Cj+Tk2xj1fs2kXAMxHn/c7R0G8My1bdLDHI96eqEz+4WodKl\nqjgyQtHQBqcQuOBKFoLm9wQpOhbaOWDcYw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\noudZtaj3bQ==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIKdiXtYJn1Fzxi1m7yhUAPvbWzCmY/qn5KwcLGkJuFu9oAoGCCqGSM49\nAwEHoUQDQgAE/34x3aqHIw87ueoi7x7+HcaqZfkf/hxEglJo2JeFEUr8N89vVpJG\nA7UR7gdwQTcje27aRCGxQcjBSUmkHcYgtw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2542,11 +2542,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThis chain is correctly constructed, but the EE does not have\nthe extKeyUsage extension, which is required per CABF 7.1.2.7.6.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUbu7xC0oJgw6nCpWojmYHQ0bFJHwwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASsG2THCjmD9eUCIPuzM8nxOsNbaIoMVYwe+3S0\nHPqrhisxf3crsnUC6QCtsvjNKE2pMVRHwTd9c52ZS/zjWikio1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQU3F1KUvRvEMJ98/vSFKbrPhiVStUwCgYIKoZIzj0EAwIDSAAwRQIg\nVpWYYtxEuhnNQHqUcFmsrpPQAJnnAIbrvLT5c7jH7lMCIQD94Q4pFAzQrOaLBIpE\nS2Cwb2qpbx1CQSGGK04T4HoOrA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nPafDI+bKFBryIftKm2bnI8MORA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n9qQmEYu+Di7Mhcq3Q6i5wKd8ZrgzlAQnsF7rF7hc1a8=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIIA2K4aedUcDm7FtT+VbsvudzqqZXZqGi9MnrKPxvaw9oAoGCCqGSM49\nAwEHoUQDQgAEHP3dcaoHjCIEbXVgtMKWCFNA2JbHaZIC12jGNrB3ANOF8sDr6fH0\nUc6E2TV6QjFFcYsML42fGLHjcmkD/rmx1Q==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nnPq4sWb0pnU6jd//CGotnvDZdq1kuWv71bvR3qzwaw==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIGrk3y9DZf8HCqiZd/MRvE6RhYmli0EQJalDlq2hNi8moAoGCCqGSM49\nAwEHoUQDQgAEj59ZKXCBHqkJo4IFMRJmB4ZaM+JZpKVqleOivMymzsD83q4+XGY1\nHVXCDcAyc2Gj/3G9crrvmnG8fKpQKOMSSA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2568,11 +2568,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert includes the extKeyUsage extension, which is forbidden\nunder CABF:\n\n> 7.1.2.1.2 Root CA Extensions\n> Extension Presence Critical\n> ...\n> extKeyUsage MUST NOT N", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nt2pS2QsCIQCR8uilYtBVE4pzE3odGM0JOEYJFyj/2CfkMcnPXkoR4g==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBpDCCAUqgAwIBAgIUJtnd8QCAUb0ppZEtOp9Om1DZ3PAwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASehxRpfLWlyXbwWoG/RPRrTTPL9ezHH+G8Jvzr\ngJ0OUUolfCYkAhx+NHIUOixfiS7sPZD2W69Oc1Q9u5XUO6x8o2wwajAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUc9PGOkqIzpYfa8lSZoub2gchHBowEwYDVR0lBAwwCgYIKwYBBQUH\nAwEwCgYIKoZIzj0EAwIDSAAwRQIhANt4nsT5PxE8N8UAf8sZzPjZEzkImfdfgOBJ\nCxBsylAZAiBYi+SE+0+Ww4lu6YRrbTuRdQ+Ymq7i5zH5MRt+PqD7AQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nnNi2xIE=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIIDTOmyU3Qy5+g+65RFUFIaJ1GeNV+rOpFfp/2G5o+7FoAoGCCqGSM49\nAwEHoUQDQgAE3Fj1vkknUYR+7IZ6rd7QNKzsuAZf214W/5zICBhZCmlCy/8DPNWO\nUAWpBOb4O+5j0crBUC1e9R77lwWS0YEWYQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIETC4w==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEII8x0zV6XI62h3nO13ZimKO+LRbkuWrrjhYd9RjLrMM+oAoGCCqGSM49\nAwEHoUQDQgAESaWejRrJaCEAxSU557XrR9MFZlbZE6+wWWZfsD/pRScxHeQwCa1D\nszZ0YMAABgkhjr8dwL3+fvLS4fAKjGR/cQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2596,11 +2596,11 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted dNSName of\n\"example.com\", matching the leaf's SubjectAlternativeName.\nThe NameConstraints extension is marked as non-critical, which would\nbe a violation of RFC 5280, but CABF explicitly permits this as an\nexception to RFC 5280:\n\n> As an explicit exception from RFC 5280, this extension SHOULD be marked\n> critical, but MAY be marked non-critical if compatibility with certain\n> legacy applications that do not support Name Constraints is necessary.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBrzCCAVagAwIBAgIUesF+MpZd/2v8Ay4yN4+iaizKlgAwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABKF+eBDH/JLyeUUXUolzsw+rjK+dygOKYHiojnQcRgwq\nDpD0Y369s6yZWPbWNd+b46xycXlo5fW4po2thS6chr+jfDB6MB0GA1UdDgQWBBSK\n8aRArd/3AZEqaLEPT/nJrNks5jAfBgNVHSMEGDAWgBSJ/vTM4Li7aLpTBfb51Nky\nWu/fmzALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDRwAwRAIgdOTEuIjHPcI5OmeupTv8\n8dYUsu9PwJfoS4eiicSHM+UCIBQSl2W46w8CFkBsel6GdCJ5FI2mDDDrACIFi6oU\n0fyJ\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIKELWKj9/vnmVVYstolw1amNhN/DYu6hl7e1TTEcglYxoAoGCCqGSM49\nAwEHoUQDQgAEoX54EMf8kvJ5RRdSiXOzD6uMr53KA4pgeKiOdBxGDCoOkPRjfr2z\nrJlY9tY135vjrHJxeWjl9bimja2FLpyGvw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBrzCCAVagAwIBAgIUUZ4wcXWiwSSB7aL3VZsgm+EZc6YwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABE8ZMnPjwgv/UdOfK0fm6mMtAFe4xsNzKU3L4Sf4qN6V\nrOs4WaE+BME6oWuFIQBf6dJYR0FD/RS8yWYy+Eq2uHyjfDB6MB0GA1UdDgQWBBSI\nDdUwzdddisJOXYi1TzntqdZ6izAfBgNVHSMEGDAWgBRb4XDs0lX2M0J44+biNUnq\nZwwfRDALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDRwAwRAIgeKr9RhDfoWfBLjKKRpYU\nwVJoavr8C/EEqXkbWrV9u9QCIDzCHsNLvo2Kl64NtVlVfW9wXsR2E7wiqKCGQqnq\nlzPL\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPVsaU3oaw5M9IsS/hk7MNXZN+yCjJ1wdINBpNeZDHcdoAoGCCqGSM49\nAwEHoUQDQgAETxkyc+PCC/9R058rR+bqYy0AV7jGw3MpTcvhJ/io3pWs6zhZoT4E\nwTqha4UhAF/p0lhHQUP9FLzJZjL4Sra4fA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2620,13 +2620,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> leaf\n```\n\nThe intermediate contains a NameConstraints extension with `ASN.1 NULL` for\nboth permittedSubtrees and excludedSubtrees, which is forbidden under\nCABF 7.1.2.5.2.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nq8JI8yagUFz5cAIxLs9bQW7R4Ds=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n9+EWx/EZYGtTT7dEG2AwZILv\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n+YiYCA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\neSt3Iyk=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nHBUCIDbqr2ZCzE2pOZozs0u/oef5r0YPcGNLf8xVYOXoQeln\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIGYTbaS5FvHoFjTk3pYMKh9oazH6S0ebnGaSqAEEdgUEoAoGCCqGSM49\nAwEHoUQDQgAE8sCvRntjfxeG4ag9YEaGsx7m5PSC1NTBgMcCiw0XQyNdKy7khe34\nYsAIv6ej1/YarkYp/3kdP/BTNLTHbt2KKg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICATCCAaagAwIBAgIUCZr0RO7LMvPMZ+QevNwun8XzJLgwCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwMTgxNDAzNDkyOTk0NjU2MDEyNzc3ODczMzA1MjY3MTg5MzQy\nNzQ3MzczNTU2NDU2MS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYx\nFDASBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE\nOzyLj01+zfIHJeJm+qU9eZ8mgZCVXAPKeCvMr/S+4g1DNU9fYLzAlTbBlobtuyCA\n742UlJtdMIQNQsQcaIQxi6N8MHowHQYDVR0OBBYEFHwIdAKaexiAwYDl03ZDxatH\nGQV4MB8GA1UdIwQYMBaAFF5fr97Udxs4OMppVIRle4AKDq/LMAsGA1UdDwQEAwIH\ngDATBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAK\nBggqhkjOPQQDAgNJADBGAiEA9Lu3ikWHKnZp3Zzju2iMELad38EC9b7xwTkNjoxS\non0CIQDLWWZ/ksnLtbV9NEcD/O+EWQVI+iEqVhP9qtM734w/6A==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIAyWwkLJ6F0Wp/5L0zlrbxfMAjTMUIGpqdJL/K2PnGjKoAoGCCqGSM49\nAwEHoUQDQgAEOzyLj01+zfIHJeJm+qU9eZ8mgZCVXAPKeCvMr/S+4g1DNU9fYLzA\nlTbBlobtuyCA742UlJtdMIQNQsQcaIQxiw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2646,13 +2646,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> leaf\n```\n\nThe intermediate contains a NameConstraints extension with empty sequences for\nboth permittedSubtrees and excludedSubtrees, which is forbidden under\nCABF 7.1.2.5.2.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\neWfJuY87Fc0NhtWE92teGIfy\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n3B8k8EIoZvo0hmS8MbT6eDdUbA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\ncxwwYNgHXxI=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n/IPXFOnkFX0=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICADCCAaagAwIBAgIUYypT8aRm4EmYSyQV7NGNyKWB+gcwCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwNDUxMTAwOTk2MDg1MjQ4Nzc4MjA0MjAwNjU5OTQ1MDQxMTg1\nMTYxMDY1MzcyNDEyMS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYx\nFDASBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE\n6RgXeVfnlZFWgVe1TXhB5NNT/yAlq2Y371U2mppLz2xPLIThxNpfqUu77r64Oero\npgLd87On3SZutefiLcBZyqN8MHowHQYDVR0OBBYEFDsjAJ67b79aR6bt11fzAiSS\nC9HxMB8GA1UdIwQYMBaAFLAPPI4+iafnlrqT/MkPRUEMA5hDMAsGA1UdDwQEAwIH\ngDATBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAK\nBggqhkjOPQQDAgNIADBFAiEAt+O+O+dDVVGWd5/ukjNID2tgvezOElOsNu7pudbs\n4EgCIGe3Ykycu2POLL/I47D8A3hXZ9xWDKE5ZT13DTOT2cqK\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIFwv9b/ktTACngbdZYSxtILiljKrYSALX3tUBFNZIBtroAoGCCqGSM49\nAwEHoUQDQgAE6RgXeVfnlZFWgVe1TXhB5NNT/yAlq2Y371U2mppLz2xPLIThxNpf\nqUu77r64OeropgLd87On3SZutefiLcBZyg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICATCCAaagAwIBAgIUWt5kJRdq9V73fiSIEsmlWAE89CMwCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwNjE4NTE3ODg0NDY4NzA0MjI1MDM2NzU2Nzc1MDMzNjQzMjg1\nOTE5Mjg0OTQ5MDQ3MS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYx\nFDASBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE\n1fBkkYj9lcwmFMQgXGWhyh75+uui2reHzGtopjdG8l8jaNv6wDTd70A1EXsf2RTQ\n9gf2p+euGn3dwGF8ySWz46N8MHowHQYDVR0OBBYEFBFHOQLMcltRGC+DxonsQqsw\ni+70MB8GA1UdIwQYMBaAFMip0Xf1Ku4Fu3je7DNmiBgii/p7MAsGA1UdDwQEAwIH\ngDATBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAK\nBggqhkjOPQQDAgNJADBGAiEA/rJjkk6FtBj092Ef1sUR4oO12QCBD+0QWAaZYMUe\nFVUCIQCuJf+xUzR7q/RDg26jt8nOKU7MD/Spd5wHSKMUJoq6SA==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIC4oTxE7MSEKP132AtqTC6GV6n9EPXiOyabGaDD5UQo8oAoGCCqGSM49\nAwEHoUQDQgAE1fBkkYj9lcwmFMQgXGWhyh75+uui2reHzGtopjdG8l8jaNv6wDTd\n70A1EXsf2RTQ9gf2p+euGn3dwGF8ySWz4w==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2672,11 +2672,11 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"example.com\".\nThis should verify successfully against the domain \"example.com\", per\nRFC 6125 6.4.1.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n7ClMsrDbG+/R17m/USX12Dwsr7g=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nkN++e9x7kgHuWMyz9FW3xyJFwK0=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nDQl9UU0=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINTYSQtuG+swllB1HbOZwDcSibXxrCE1UfESpk+DyFa7oAoGCCqGSM49\nAwEHoUQDQgAEK0OyE17OqUSTLvIvSkFklqYfeuISUgrhQahr48SRIq4x9tUZ4/Ci\n9CpoCj8rOp+e7rjS2trAfWHz56rNIlfr9w==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nRT/t\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIGXvO8RTRHh27mkMZUGf4Z+Hw6AE+72pTTx67tFzabnKoAoGCCqGSM49\nAwEHoUQDQgAEvraXHZGmLbacy4I5fOdjZMoYmp8d8D0J2Qo0mid8TqgiPV6fs2Ud\ng8dF5PVYK9t80+QBq2g7zlYWxjdhZuVs2w==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2696,11 +2696,11 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"example.com\".\nThis should **fail to verify** against the domain \"example2.com\", per RFC 6125 6.4.1.\n\n> Each label MUST match in order for the names to be considered to match,\n> except as supplemented by the rule about checking of wildcard labels.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUL661g2z5dDEj1gp66yCWTThFEygwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARIJpOVsh+pQ0N/++pz6wWocEZ/YQuF5/3K+2xL\npChnsg8HrYl2D7+KWGkaipIY/iD+UTOcqqRkbudB8OIza6Kbo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUaTK4X5rxrxeP1PabYlklRAB8rPAwCgYIKoZIzj0EAwIDSAAwRQIh\nAJAhPMUv9H5Dt1uNbCWCr4lHPmlNW4EE5BT70ONs0GCyAiBsHb5BCscu/h2hwjgJ\nEWGxemULV19ZM7QiZKlKe/sfrQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nboS4iafaBxGsNfiYrdrb8Z4yBcg=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nqmg2q48=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIBHNAf8v6kVTkHvOxwmy+FYUQFPcBXNt/92eYBwmyynsoAoGCCqGSM49\nAwEHoUQDQgAEEvjgxiGa25DUip1CYvRSNObq4gjuRFKoehh6oHKn3xKFqDenjav2\nLQOLOOGSkfFlScYBv3NHiCS9H4ffRfpElA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n1mJD\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIOLjxfBffFqAzVKxohqXNUN+hrO/LlTW1/AUGG3xc5bUoAoGCCqGSM49\nAwEHoUQDQgAEDTyK/U/4qHcpxRVzhnF2kTgyMw6QXO7Qe6Kugz/DOL41G+oJnY5a\nm18JNNdIDqW29tnpbFtZ4HL8QsEvZ65ACA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2720,11 +2720,11 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"abc.example.com\".\nThis should **fail to verify** against the domain \"def.example.com\", per RFC 6125 6.4.1.\n\n> Each label MUST match in order for the names to be considered to match,\n> except as supplemented by the rule about checking of wildcard labels.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nl6mb2QfzftGfmjQOwvwoD8L6\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nKAKFJn+KJ1ym9CCxC0uuIiHKdw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nxJSnOJOjwpcNkA==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEID07do9yPIODcTWGW0ikwSTj79klIPiF2HbiN2VPsJjkoAoGCCqGSM49\nAwEHoUQDQgAEag/ofzG5nGnVOGaPg5p0/fUiaA3up5FYxeOHIybAtAHw4ybaUIBi\nKMfsQIa7GrZ8Pps26nM0+ykz3DulpkYchQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nK1vEtFeex8Hm\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIECHxPb4RrqHP0UPP56WIf2MLr7n5xuh1oQSnpqNNSh6oAoGCCqGSM49\nAwEHoUQDQgAEpVYQ8o2Sb70gIMavgsLB6VY2wxpArcuicCO6R1AKrCfWxKH28ZzK\n3erbCX1apisIee1ZC7AHHCS4/tzhL+n9QA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2744,11 +2744,11 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"example.com\".\nThis should **fail to verify** against the domain \"abc.example.com\", per RFC 6125 6.4.1.\n\n> Each label MUST match in order for the names to be considered to match,\n> except as supplemented by the rule about checking of wildcard labels.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nHJ4JgX9RxY7eJgsFy2QZJepbex0=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nCywl61SUOnEEeG0xgaaw+weUWmI=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nsF4UPA==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIIivSZg553liiWJtgUGRbixsDdNpDGjGcgYkWhMOmeuPoAoGCCqGSM49\nAwEHoUQDQgAEPONYbVlhrrGWHmbb/K21WVuP57a5w4b95+kBCb+8Idud33OJ1BAU\n8HfkGxDEIwo8tgL8hatrnF2QFT3HTv7F8w==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nLlAu\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDwazF5qkyLWdP8V70jm6zc2zEkjCu9G+Z+Xg/7sgbMNoAoGCCqGSM49\nAwEHoUQDQgAEKsbP8NTgg2Sk3TIhrJotEFKQUlgEeOXVPuU6Rujw17MaaRkZe7DX\nbI38Qn8r4eeW/Hua0IKT36bVKki8PWaVmg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2768,11 +2768,11 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"abc.example.com\".\nThis should **fail to verify** against the domain \"example.com\", per RFC 6125 6.4.1.\n\n> Each label MUST match in order for the names to be considered to match,\n> except as supplemented by the rule about checking of wildcard labels.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\ngq+p3UXrYZdXWrpgrtGup0Cf\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIUCdemJCWqtRbiXGfY2B+Dt0+M4MswCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATk38cHPtxMkDTZXT12/Y6M6jz6G8qw/93mXTYH\nOFf5KWFUJ2otL5wMhR9D62MP+NRlesjtqU43r7kUm0ND17cGo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUsR6ZqnwECt17gskKxYU2ygtno9MwCgYIKoZIzj0EAwIDRwAwRAIg\nMhetnlqel3868tvUpJzFeXo3awVzODiRBLM1ylRgUnoCID6SY2eooDg7zeEHd64s\nVhjzi0vvirwCVYIp+MEsDc+G\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nMqN/bUOkjMY=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMqZu7lF1DZW2+2CnqVjSQbcYPb+XLm0y9ChyyDvZ6D1oAoGCCqGSM49\nAwEHoUQDQgAE+tZERA8GrIGkj9+kRQyKoYb+EAQFHI8odf+K4zPj4IlM+mXBWJet\nMdm5EMAxrHe7QKs+TXxu0lN/sTXaAS0Hog==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nk43QtBWzQ8KI\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDvkh/NZTHv+jRu5UwumZ1K78hDX55z0XOeRSrBwNgAQoAoGCCqGSM49\nAwEHoUQDQgAE+GeMvyk2Fqq9xGtanQTdTxKGdatNyqoidVcAlMDnjiESbH7Wq/ii\nX0cNVMhZ1gEcZUwCpK2768w2ErTM5poazw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2794,11 +2794,11 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative name with the dNSName \"*.com\".\nConformant CAs should not issue such a certificate, according to CABF:\n\n> If the FQDN portion of any Wildcard Domain Name is “registry‐controlled”\n> or is a “public suffix”, CAs MUST refuse issuance unless the Applicant\n> proves its rightful control of the entire Domain Namespace.\n\nWhile the Baseline Requirements do not specify how clients should behave\nwhen given such a certificate, it is generally safe to assume that wildcard\ncertificates spanning a gTLD are malicious, and clients should reject them.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n1777bBLBZ6VxfMvouN69LwqYFDo=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIULb+Kl0yIjXKJENLeLYMWZw2q00IwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATjfQFoygxlCkrcXofsBaxujD8txjhKKYHfPuTJ\n9dPmPAp1/7ykHiuQph5Kzn7oQB8HcpjB8wAPLDIWDXl3NCVno1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUTGOdzY0n83txMjtsWDvZwN4s0JMwCgYIKoZIzj0EAwIDRwAwRAIg\nCY+6VjFHsEDnd/Ef1rbM7aOVBDHAVyH3Es/mtWO9+m0CICwA+5ChNqrRKaxQP3gW\nRGDpWAdLG9XB4wqbGc1n3TKp\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIKAB6xntyrHHx02rkIAWoPY6m/07G3GOj9xfxjyuLVNGoAoGCCqGSM49\nAwEHoUQDQgAEkYTs5s3upscKTO4C4TwV6HNFtolsVJNH/Y2ZHLEH3rfmWlszd5Zb\nAtFVg4zjL8wI4F41s7H1iF2Ep/7O7I/tfQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIGmaBdNOxF6sI5TCu6Eby3iDcy9ubKfaFz56jxHfyoDyoAoGCCqGSM49\nAwEHoUQDQgAEA/CInH6GrhmKUf0BUgqrA0pykLgiGCr97+nzWD1lpk2TKSqQOQZR\nbSYXkqA8f6oWGRSx48ZcjEQLmAjENi22rQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2818,11 +2818,11 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"*.example.com\".\nThis should verify successfully against the domain \"foo.example.com\", per RFC 6125 6.4.3.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUdyzi3UNRuTINZkJHLiPYbZQDvT0wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAToES7IT+C+BtLjtCXEVGz+bNScuc32/62Pa+CP\nfYVGymGkaNB5Utf39bIM4vREdFdzzBrYoGNGSl2wIPqw+yEao1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUC7MNyxlh2SaEEmeM4+pOFTuNFicwCgYIKoZIzj0EAwIDSAAwRQIg\nKWGAnqGc0PZ4XeOD+xPzvH/FcIkMLJlTjyUwjjM04nICIQDzfIrs9y5qGdswmual\nWjHS/UU0obUNv6yglqEetnp5lA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n330oEly4nmhESQrMt7+AN4I1xg==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBszCCAVigAwIBAgIUIB8v0rHdqUqYXhTaYmdXBgGHW1EwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABMms/z1l1QXxfPl/nPRz/bZNALjYoT5Ff3i+Exim9sDY\n46ek1GdWHRByoFDP28ACklcacX10kYOyF6WQTA09eTKjfjB8MB0GA1UdDgQWBBQj\n3y+b3MGmL5/hufVH31LXJSJ1pjAfBgNVHSMEGDAWgBQLsw3LGWHZJoQSZ4zj6k4V\nO40WJzALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwGAYDVR0RBBEw\nD4INKi5leGFtcGxlLmNvbTAKBggqhkjOPQQDAgNJADBGAiEAxrajD6ICrqRVTcZA\nQh5WmgMANoHI4opAy6F4YVY0zEECIQC5fjE7eKRGO0BdBhar7XHtTVgPc4/LgXgn\nfRlXZvYwPw==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIOC7brYFPPQ74XL0uAJUfeIiUeVt3CUfnZMVEctKCTOVoAoGCCqGSM49\nAwEHoUQDQgAEyaz/PWXVBfF8+X+c9HP9tk0AuNihPkV/eL4TGKb2wNjjp6TUZ1Yd\nEHKgUM/bwAKSVxpxfXSRg7IXpZBMDT15Mg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n5NVLgYU=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMcnE+PK+zTRaadRK+/HKFthjHK1BbJXLM59Tc03Mw+qoAoGCCqGSM49\nAwEHoUQDQgAETMnCjn5Z25OBmHHOvhOqu+VY/5dFhF0Ms4Jt0gS72A2+Ooi81jTm\n94lHgrvPAMzvUDDjxf9jaRLc33lMFr+UAw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2842,11 +2842,11 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"ba*.example.com\".\nThis should **fail to verify** against the domain \"baz.example.com\", per CABF.\n\n> Wildcard Domain Name: A string starting with “*.” (U+002A ASTERISK, U+002E FULL STOP)\n> immediately followed by a Fully-Qualified Domain Name.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUbr4CSGe+4eVViBXFu9sZs/Z22LowCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATuMje9UunAqqdIjjsJWjNNu1HoktI+yfvN04+i\nG+JI0JbP2sGQl5oGvIbVMh4GhJTluystYsfLE0s0R+FRRtAto1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUfFi1eT0imkN1CNChT6Xy9FTbxXEwCgYIKoZIzj0EAwIDSAAwRQIg\nc9dux1G9u38tXCXOURrV/5s7cO+wt7PIlkYMpJCZnecCIQDLhzIFzItYzoQV/vSE\nBmSfrqSizyD1Y2SvgbJDrKOuWw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nU4BKXUBNbNn9GE/L0KShVL3f\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nPmsam0uqTZk=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDkqjEteIoGMjHYjuwTaSnP4dHxiLuKdQlZvboBAOzahoAoGCCqGSM49\nAwEHoUQDQgAEySOHIrBU6MBFwyURvbQ07EYDe/7pAXua3RqwXoqvAFGPd2m0bG5z\nYi703OSLT9N/UEVdtIL5n7y0ear9+rbGLg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nVAjagvCWjU8=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIHSwhjFAW9oiabmON288GyaX5YrItBAUMbXDd3s20wwgoAoGCCqGSM49\nAwEHoUQDQgAEEG8yLT8Xpy8ZODZ4iPLve/K+pVb0OydDhzOCz4iuQYqCrep+6XeW\nuuZY2YolG3llTkJkwRaq+N5tNIqP2afhYw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2866,11 +2866,11 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"foo.*.example.com\".\nThis should **fail to verify** against the domain \"foo.bar.example.com\", per RFC 6125 6.4.3.\n\n> The client SHOULD NOT attempt to match a presented identifier in\n> which the wildcard character comprises a label other than the\n> left-most label (e.g., do not match bar.*.example.net).", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nWlsQLxQPsBhfwm0TkHm0jjTlwrM=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\noBDdLpOoh2ZmEhI85CXUNmpZJDs=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBuDCCAV6gAwIBAgIUWXQ7b1sa/ZV/H0Pl5oDsbLnTVS8wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABJJ7ESqzg5FhnYb0X6y3y7PUJzJE90VUeArQ9YqGYq5a\nlpnQ+vlf3KiSKcYrNAcGPrWFwKuKWmFPZpaeJobrXVyjgYMwgYAwHQYDVR0OBBYE\nFNtNIBslJhvz66qYTs10jTeIP0akMB8GA1UdIwQYMBaAFJrV4J/WvjBkl+41sStl\nVjpWVclrMAsGA1UdDwQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDATAcBgNVHREE\nFTATghFmb28uKi5leGFtcGxlLmNvbTAKBggqhkjOPQQDAgNIADBFAiEA0+s2TVxp\nSuvpemEx2sfWWRCvRU6a06vUMZgTcz6cw0cCIF/QPvHOGClH1xRELGIBnJf4flCs\ntDE9myvs23FoJxrD\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIHh99ZNOa2LEbjdVzp8tSsyb0xI4O/3Po452no0jMVb5oAoGCCqGSM49\nAwEHoUQDQgAEknsRKrODkWGdhvRfrLfLs9QnMkT3RVR4CtD1ioZirlqWmdD6+V/c\nqJIpxis0BwY+tYXAq4paYU9mlp4mhutdXA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBuTCCAV6gAwIBAgIUMipIX8ZRNVK584k5yUn9gf4eWf4wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABPFYQnIC5wDTECqcX/6GcjXZkuUki7N4OxT+tQ4GAjsd\nXT120T90hgV8lKD6a2rsFe4jAApJzHOh0GPFllDdRbmjgYMwgYAwHQYDVR0OBBYE\nFIdh5BVJB60EhZDjNfcFi2/3p18mMB8GA1UdIwQYMBaAFGM8w3QdDBkAb0NLcC2o\nXxBRuDeKMAsGA1UdDwQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDATAcBgNVHREE\nFTATghFmb28uKi5leGFtcGxlLmNvbTAKBggqhkjOPQQDAgNJADBGAiEAr+REiIjQ\nR2AIEch6+WK2s9Ba/cCBBFm1pybtxFOenIsCIQClNTWjFltkybfTI7SvTcqfBAv2\n7XMp3WrytTFM+eUD3w==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINhvI9qPrEm0BgGOm+mwhZxeIH+V08mXTz6FuIgWqOCJoAoGCCqGSM49\nAwEHoUQDQgAE8VhCcgLnANMQKpxf/oZyNdmS5SSLs3g7FP61DgYCOx1dPXbRP3SG\nBXyUoPprauwV7iMACknMc6HQY8WWUN1FuQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2890,11 +2890,11 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"*.example.com\".\nThis should **fail to verify** against the domain \"foo.bar.example.com\", per RFC 6125 6.4.3.\n\n> If the wildcard character is the only character of the left-most\n> label in the presented identifier, the client SHOULD NOT compare\n> against anything but the left-most label of the reference\n> identifier (e.g., *.example.com would match foo.example.com but\n> not bar.foo.example.com or example.com).", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nKfLMVfwmgcLUCgF+IGDZNqRb\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nmPyX4xHvMV7yTaeMwipZtoBUp9c=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nVet9lK/N\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMvjGy0BzAi6yIukw0gdKTaKNtT0G4MEMVlT6NdB6l7eoAoGCCqGSM49\nAwEHoUQDQgAEn0wr9NHGlsZe9XuPSKwP2ldTZmF34f0Gfj7uib8fQVToWQzeJJEQ\nJ4LHm0GQbrCO107GC3wU70ZtbFudzB9xEg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nwjdJbBx0\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEXf07mneft15mwvSnHwzYXH3xEwm9uynHXKGdSOxuckoAoGCCqGSM49\nAwEHoUQDQgAEF0+fmx+sGhWlk3evZUfpRlXP553KH+0ysYLXUO0/9Kc/cyoN1d8U\ndwdL0XGVmrK76iHKYw2CN7yLjm9iE8D9aw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2914,11 +2914,11 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName\n\"xn--*-1b3c148a.example.com\". This should **fail to verify** against the domain\n\"xn--bliss-1b3c148a.example.com\", per RFC 6125 6.4.3:\n\n> ... the client SHOULD NOT attempt to match a presented identifier\n> where the wildcard character is embedded within an A-label or\n> U-label [IDNA-DEFS] of an internationalized domain name [IDNA-PROTO].", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n0KeYU58g5Twnyg8VmWRYR80i\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUWN+GYjyKiLLw7Q4mJwnZbej1/MowCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARS7ZlQ/cWHVhMygjgfKSt09lOVVz5HVf5YlyG0\n9I4e9th+zy/biPgijsCIjXMfEXBAZ94pEUZGm3wA2Wu8aDXyo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUF1rIX0C3ha/rfWhRVGoBDX3XL+8wCgYIKoZIzj0EAwIDSAAwRQIg\nE37dHAtrK75KFh1OnXJArkYPlAhNuY+EMWcDr0GYE8UCIQCV03sexynUctUXlM5F\nvRUAzDC0UyNCSwvDwm56k0JgsA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\ns8ZQYSCIG3N77Em/L4SgjMZNZUdi\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEINC6lmFDMDsP3TcsB7UUf47Y40yLYA1n21Mp5qhWFz0NoAoGCCqGSM49\nAwEHoUQDQgAEEPrnaGcvWZBI6kdhQ1Bpzi6R0o/ERT+LuySRbadUd+A98hk0Lh1I\nIo/MM1DEXwg64SXwaY/Nb/Xok0K8izo8UA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nOuzW7gSgfLokUFlhvKdi0NFgS0E7qw==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEILFE4qnEQJc/l2R5lVySmT8JwsKNGImUnDpmUiXBLdf/oAoGCCqGSM49\nAwEHoUQDQgAEbXIHUdaSHUiJYNSdXuHscsFc95h6zBhq0otCD4sdOAEjgaH5viCm\n82BV4ZImbI6DY0dKGbzYTRfdtm0Lsx9CNw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2938,11 +2938,11 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"😜.example.com\",\nThis should **fail to verify** against the domain \"xn--628h.example.com\",\nper RFC 5280 7.2:\n\n> IA5String is limited to the set of ASCII characters. To accommodate\n> internationalized domain names in the current structure, conforming\n> implementations MUST convert internationalized domain names to the\n> ASCII Compatible Encoding (ACE) format as specified in Section 4 of\n> RFC 3490 before storage in the dNSName field.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\no9XtrVIav6R4hxjbqFReDw3i91I=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n10prjDxqbgivFZ/Lg+o7IKrcxA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n5mLxdc9UHscNKg==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPhqmsmas758StoPtYemdt1L7/5vuNpebGbbuAYZsEUEoAoGCCqGSM49\nAwEHoUQDQgAEWE/zbC6awvKXS5wROcVJvc54uwJrmbvQ2r1J/GrLMEbW23Jwf+XA\nKKo1j7uCZ0tHFhRZADk5jbhaZSDIFP6tcg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBtjCCAVygAwIBAgIUHhjSa0HoTJKnh+4Q0JJWx0D7TmcwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABDuEGdLRcgr2kMAQCVkxCh3OU3cHsetVqMOKyfj6VTTL\nxbVHz1R6By9dNdEAmAzJ8dTeArTNpTR0B0tSiiwZlQ2jgYEwfzAdBgNVHQ4EFgQU\nPSaCzNfgabTWEF9dEcr4HQ6+iYMwHwYDVR0jBBgwFoAU4RaRJPKf2fkZAgnJWnbF\n/M6itpcwCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBsGA1UdEQQU\nMBKCEPCfmJwuZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSAAwRQIhAMSma1qsXc3Z\nw0oVZmDgCwZEDASobEdeQPKL83Ny22kzAiB3mK5rJI7gwN8rAcRBBVV+g8ykY4gj\nFm0sKiLLYjQCsg==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIMFMe2kccPpfl8LrD1foj2ugfs9FwY8slEBNImHvUWeOoAoGCCqGSM49\nAwEHoUQDQgAEO4QZ0tFyCvaQwBAJWTEKHc5Tdwex61Wow4rJ+PpVNMvFtUfPVHoH\nL1010QCYDMnx1N4CtM2lNHQHS1KKLBmVDQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2962,11 +2962,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe chain is correctly constructed, but the EE cert does not have a\nSubject Alternative Name, which is required. This is invalid even when\nthe Subject contains a valid domain name in its Common Name component.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nQ8wtQGL2mkg58uJJ9whXFVFCeWQ=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nvMXb2ZmFvCFGA3/F+44Vi1Tvww==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBmDCCAT6gAwIBAgIUZN1zHsmXHQBGYGGMDXtj8ralVbEwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABHVmZCbowbJVynbhqnC/N7iXsOsAmYCcHIOUuJi9zVvX\nx8NR9cVcgOM/4KCpJ9ZFZrgE3pf6egfq8OK1I1eOfJ+jZDBiMB0GA1UdDgQWBBSa\nG/EoHVSFxmus69hdoTuURRj+szAfBgNVHSMEGDAWgBQs/PO4sPA5bSnGo8aFbsBW\nYnK5CjALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwCgYIKoZIzj0E\nAwIDSAAwRQIgTK7n05GR1Pf23GtCHV/KmQrwtNHTtqw29lIAlI/brIQCIQCkb42c\nS2dRCGnesmphrS4DOYFYR2lAAQicyjy6ENYXpw==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEUce7frv+L7O4SF/7Y5FMHOXqQQ8c1c8imoPhnUBkIQoAoGCCqGSM49\nAwEHoUQDQgAEdWZkJujBslXKduGqcL83uJew6wCZgJwcg5S4mL3NW9fHw1H1xVyA\n4z/goKkn1kVmuATel/p6B+rw4rUjV458nw==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nYzJeFIFRaFGlg16XEPdX4zylJih5MZHLCaH+lA==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIBTkN8aqJMgikjLLDHMZY98EI8jwlBgoPtM0dWz+MVMKoAoGCCqGSM49\nAwEHoUQDQgAE3WjtCC4b4fMU9/DYnrQe4HN4/fRBNQnN4TZZHailnM+UsJJECmnd\nALMNfd3dWjTgu9fNZih95OIqnYAd+svLPA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2986,11 +2986,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert includes a critical subjectAlternativeName extension, which\nis forbidden under CABF when the subject is non-empty:\n\n> If the subject field of the certificate is an empty SEQUENCE, this\n> extension MUST be marked critical, as specified in RFC 5280,\n> Section 4.2.1.6. Otherwise, this extension MUST NOT be marked\n> critical.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nwW7AT2QGtDLDCkxEHAmw9ajIpNw=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nXNrKnsN5RvRVG1LuMWlIphHl\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nPx8Sx/f79/upiw==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIN7nrJzKMsKYzlCpRJ5hfyaQOSlYTatgSfDryjl8uEEUoAoGCCqGSM49\nAwEHoUQDQgAEfa7P2bSVzStvaotHqazHLOvstLgBa6m2trLLmEgK8jH7UaV6du7v\n6nhmVG5z81BVszMDKWT/0fpdPenwoe1pQA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nM6Zhrid8fTv3RA==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIJOjLAir4LYoOLgG1p5CbfQlgI6yydfSaEHDrurzyb/7oAoGCCqGSM49\nAwEHoUQDQgAE86bIIjVC1PtxVcR+5NtpukhCEHEGjmZVusDakdIk4CozamJhHiar\nNTBRsQM7PKHW5A0wwrJKeY0rgpjMjK666Q==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -3064,11 +3064,11 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains an Authority Information Access extension with malformed\ncontents. This is **invalid** per CABF.\n\n> The AuthorityInfoAccessSyntax MUST contain one or more AccessDescriptions.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nPgqbGLGoyoYMP6XbRRiukXHq\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\ng2pXgniBYtur2ujKVrOuEITW\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n2e5BeKIsYSlm/0Uk13ws4owIC78inFXmjP7oJwGl\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIBkLgBmpox/ShmvyklnpOwVoJLLO7tvwFHuoa4aDuJoEoAoGCCqGSM49\nAwEHoUQDQgAEQfXx22rPxaBD1QZfMIQFMuzOStn8zd2sK34Bq+68qs0E3HR9ajBX\nmoaClpb4gR/AeNc809TE7UdhfR5lGWjF6Q==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nJosmomfRNygXJ19hwBnUX78sImG/XNjmMOrvJMc=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPZPU8GJJAFaAOqfSKKGWf1COlilmkedkkaDCn/2HyE4oAoGCCqGSM49\nAwEHoUQDQgAEz3J3EJxtMrauJqAIMn0QgEZeqKCBwUpDh9gvqfHFtM0UTVlz3AP8\ny0tVkEPrGOyeAhnuGDirzwcJ/oP3MMCCIw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -3088,11 +3088,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert conveys a P-192 key and signs for the EE with it,\nwhich is not permitted under the CABF's key or signature types.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBcDCCASWgAwIBAgIUAss6Pgq04Uwy6YDLRyc6cy4y6gUwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwSTATBgcq\nhkjOPQIBBggqhkjOPQMBAQMyAARSZWimkDYk9ooLVd9YTzkWertqU7v+fdXTJNXE\nx5VjNOcwFua2YujeZMqLE90ml1+jVzBVMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0P\nBAQDAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB0GA1UdDgQWBBTzyMVglJTL\ncQmvuUXi60JO9se4pzAKBggqhkjOPQQDAgM5ADA2AhkAxWNhq1fuS4kiY/BSAy7s\nqDMnaIWkEAHaAhkAmM1a6Or6dKhynC9EzosuFBjQiULk/YTR\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBbzCCASWgAwIBAgIUI00gqB+6x/S0b5IGSjk5cfmLCRAwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwSTATBgcq\nhkjOPQIBBggqhkjOPQMBAQMyAAQe0Vh48McdQOI6BDEfAEmC/WDrIYH2/6m4N0y1\nuIiWJrWzilEebLeLOEO8sfTOmhqjVzBVMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0P\nBAQDAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB0GA1UdDgQWBBSPAA1be+25\n+S8FhVfonQxo2bZcBTAKBggqhkjOPQQDAgM4ADA1AhgUeJqKZG/zrgxi/IDBMWrx\nOlVQ1ROMZzICGQCYei0ouBofyzFKwJaCk/KdfFNNOeGkZs4=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nMiElOD0QSASv5gIYRR0vxXOTPTQB2TYUdp6eVX9NcQ1hAr9C\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIP7EDBovCQILpgQfY5oeOdiRt2wN4Yr/smCl9Hoy3JxHoAoGCCqGSM49\nAwEHoUQDQgAElTW4nnbo32kxAVcNA9vExDAzIhE0MqE96KuiH8+eVJNR5I3UFPJ+\nCWGkcsecZ+vJaJ5XURvXbqb/kbTDVLr+yA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nxkxWLi58McSEnQIZAJlE7KDa5YQKXEdTi9JK+IcaZwR9+/FLlg==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPENqFFGEh12MUqNth1FmNFxW3Ceiuj9PTBz2VJUTp8boAoGCCqGSM49\nAwEHoUQDQgAEzioHlpaknyrwCDOZJ4d196N3udZJSl3bf5JVIWnA58uTIhwwZ+IW\nV4uTYj9Z0/9urPZPzlQ9pT0f3R7r8uLI5A==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -3114,11 +3114,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert conveys a P-192 key, which is not one of the permitted\npublic keys under CABF.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nsXpBNDKq4PeVkxNWwMPE052wuwg=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nXa3iLpc6+iuy5K4D2kF3x9BSJQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nqwIhAPwtAKHm3VrzmOsNpx2kc8ffEBQwgDluGhZpXQGKtiYT\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMF8CAQEEGJdOSGfR/GLB7q9fcfWk7Z5hD5er1I6XB6AKBggqhkjOPQMBAaE0AzIA\nBIjgkf13Aig48fhrNa5CyvtltjP7JWS6eiJ3s0nYap4AjpqM7PQOt0OYuYS7dJa2\nag==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n6QECIDjmmnY9yGPHJbU85nDRZTFVEjS2Jp111Jr++3zdwWBj\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMF8CAQEEGFuxJBtdRou9rcrIjgXCBhKNNLg44zEdd6AKBggqhkjOPQMBAaE0AzIA\nBCsRTMlD4dTUlp5pcIVaVf9m7yjLs91pSRhGlhTJ1lH+VJing527p/EhzflbAje4\nHw==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -3138,11 +3138,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert conveys a DSA-30272 key and signs for the EE with it,\nwhich is not permitted under the CABF's key or signature types.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nQNUuIQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nEqI1\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBsjCCAVegAwIBAgIUZTaCL67stpuMiJHLwUj6ZqKE2nwwCwYJYIZIAWUDBAMC\nMBoxGDAWBgNVBAMMD3g1MDktbGltYm8tcm9vdDAgFw03MDAxMDEwMDAwMDFaGA8y\nOTY5MDUwMzAwMDAwMVowFjEUMBIGA1UEAwwLZXhhbXBsZS5jb20wWTATBgcqhkjO\nPQIBBggqhkjOPQMBBwNCAATXg4dyZq3AI7H9gvQn8FbTELyZvXWWgXizqAxqeThZ\nCvnccrQI10XcfDj/hoUnwPoPt4Bg2O6Lizod76PLNQTKo3wwejAdBgNVHQ4EFgQU\nwKtb5NgqXFW36h79agO85Y+LoMkwHwYDVR0jBBgwFoAUETUJE3SyPgdFzrVDSjIB\nQVzUlV0wCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBYGA1UdEQQP\nMA2CC2V4YW1wbGUuY29tMAsGCWCGSAFlAwQDAgNIADBFAiEAwQNvlO5QFjfRwurN\nAkmaQ3s/AVwMJlDwW9cVVVJ+T5ACIELjypdgSOS/Hl4q1/zRoG7erorD6UGoO+Vc\n668q6Meb\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIPpp1afs4lI57nf7SlFtskm/YbRfU/zlI8dOshU2M3/ZoAoGCCqGSM49\nAwEHoUQDQgAE14OHcmatwCOx/YL0J/BW0xC8mb11loF4s6gMank4WQr53HK0CNdF\n3Hw4/4aFJ8D6D7eAYNjui4s6He+jyzUEyg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nCQ+OUGFN\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEEoeVpUzGIbWXeHLY+fXmf2wLuz/Y3ua+Rmp5KBfV3xoAoGCCqGSM49\nAwEHoUQDQgAE+KduwvGZojPP1y3MPELZ6BO+bbT0mZIhlBlv/brGxNWEvng8ZnO3\nwVcrvZ+Jp7ozaRBSEfphizokDpxaHIVXaA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -3164,11 +3164,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert conveys a DSA key, which is not one of the permitted\npublic keys under CABF.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nUsiDhM8121WFpFtKMxkykUnu9Q==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n2VGynW1wbAWcWGV2Yzfef7K3dg==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nlkMCIQD5Pugl1FQvw4UmYyOKKi+pHl9S6meycjVyVydnSnKD9Q==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN DSA PRIVATE KEY-----\nMIIE1gIBAAKCAYEA+a7sB0h5KkOtfDHfgk3kYsfVP82RbMC9XYXpzLLCKQa/0vFr\nIFJQAxxT/fBLRJW/K+LY0wIIHaqgiX0gq+YiuofpNREf4WwDT+EEh6x78fpsv1kT\nxmpX9VeOjdEyRIdqFFxRgWTY/658m4LiwNkfbeYZCtOSHy0XMcqzSsnOJ35M8bXm\n9emOrZeRGR94cq4qLeaJu4nl2IQt39qzVfPH9J+TqaxfD+d9zRG67DTemKGUQqbh\nzvvDKAl9z7dgJmF8Fca9pEqiVL5Jiv0q7Laa2OG2iHAZivzE4wKYzg6Dw6QqmvyH\n/RbfE0vNEMIHZqncKR/5wcjbxXi0AVG1N1zREYtAArN6q1/e4ey8a/9MwP8RtlnW\nq6m/t1iwmA9ymfIDNbHYnEHeZPmAJE2qABgWhQ9PZXYVJQftUHBy1E+cE29Lt7q4\nEi4yhK5NXo9vfmMqj7Qt0hBWxQzqjrVUPcQaSMQiVaIrg1WnWA5CS1xh3byyIjOe\nEhkb0GAX3Kn+zSc/AiEAliIZ39LmXc5gaLARYOKYOf5WaLi9rkBB+D/vKNTqidcC\nggGBAIR+03DEAoHrWP6flqxKgg0eVGh0yqajaNdO3nAofHeWW5Por+5ppi1WApFY\n5+kJdo6Y2KdSxifk9dOHGJTXfHaHCxO7yJEPB8xR0WBi6/2qarrCURfn8HCBCZu1\ni1dsThjg8cqDCv0r7vEoIKkhTzNASabWykFv7eWFrElYQCcpm7yMNLTF7IKjD4Qe\n1+MD1I3oiAeLI4jbGKUZHC1q5jVlJAEtl6w6Dsno0J+Vk9YEn50wLy5RV5M3Q9ed\nCQPomPyzUGHz83prm8yrwOvT1cBASeU0NN83wo65Nlfy1kJ3o+kcxYeto3aVEmro\nmEi7Lik3KiLG5N8AYpuXBPDXZ1JihYrTpYj92n3LW9t0PD/JMZG0TvC+UWm4n+hU\n/r4v5WnIS0Dv6TLOXTvDcRowxTV6lh51i1XfpTKedFRFauUbvk1qLuqB2LkqyKwz\nq72IPdVpXy8sHxc7XYFU8gzbyZ90An8tI20X0oVOvhN3wbtA3FQ7+fLuW071L/3i\nftm5pwKCAYAbCLCAkjpIZHB3ZHCL0KLXXV3wnhyzM73t3pSO5kxMqXdzxBdG2UBw\nL9IshHVz7Wo+IKsscGqcaz9E9fi0lWwjRrdJM9+SPWgXUToVJ5IZwK/zlhLXJRqe\nNkRlAozm2OnJT2aDnMGpoRbagE71on01B1mdd/o9zaG5OWRy9VixtnwnRjz+XOin\nPqWs+8KK7zXKLXpd5JHmIHlWeQzPOtEvflLmgcsXAC0wl90H67VX5BnmKmmZSbwi\nhbtU5BV8v7zdEs1Iy483d8X8XFOub9Lr7rhmfqDvimobPMe60RG/ZGNmZnQQ2T16\nVb0lMPmrcytGX/aO6Mhh/5zMd5Z7IfO6UlsPkRDfN2RPtN3vLwrnDso7FZUcGR1r\nf/1XupljD3MwW2V2/KRmuFDXWQ4sYb8alg5SJKwZFD87i5M8zPiP7V4eTgcepBBx\niVGHr9WiAuG8GolRX+HNp1T2tFsOpHjGnj6irTszEBUhBBEMsrNEr5fem8k9Cnvt\n6P8FKCMv2r4CIGuXHP/2Xkf45epIwwb5CJo2X2qiEp3gdw2xD9tHa5tL\n-----END DSA PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIGHzCCBcWgAwIBAgIUfmrL61Yyfw+7cbijXLlRb8vnIfswCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTCCBMYwggM5Bgcq\nhkjOOAQBMIIDLAKCAYEA2ZdQZo9flS1vbOjR4oHQEtFDG0QCzcZe01Qbu8oQhLU3\np+VBhKo0kDCy0TIE7s6tDOSyZ1J+qWpBt8q8RD6Ilf6ERvxefUaAMrQ6C2zD3Aj5\nctyMeQY274ATDCZc7Dj9Lbh2hau2+ssGjwusjCkgkc0WmS5zeg5uf/dnKtW7Feaz\n4+vqb40mEbvdr5ZgyCrJ6EK3P35oxn574tBCpAQWRNMDKkpYEDqDA+todd/+f3w0\nUqK2sa9VAx+H4yRkQhAvBey2V9Yn8St7qP4SjnfI3IpT1LmF66KTppCRBqpUGwJL\ng+rrPVr+xH3W+VMSp+se24x4WAR9IozsRo5+cpHGQrFjuIZ1yIpkMRzcZnWNWIkv\nDC/0s9s9+qu7E+2FTld31ahJO6BRWg4+G0rcKNfaytmz3PWYIDasEFWl3ftprEI6\nFNRffa3IpgwW+fzw4xn2zGXyE/n5KfcOcUeJmSnvA7Zkad4nTcUfooj+YB+qDC7Q\n+KyoiJ+8KHzrOw6t/LzfAiEAuUo29HHmrQLgGrn1WXzTUIRkkDifmacYnyiu0jkp\nb6sCggGAGZlMxDjRl4bzW70W4sTJPHjC0XGuthXicFORqCQBR0j6BdXUCPpGlJuE\ntLZliwMdZiqQu52tAghUR2odmTrrSIuJU9Q/t9HiH817IXWyLzNYHmLHt82eAKdk\nU0fOVzKKOK9YTRLGiYBHd9GIULuSglQbzRUwEjA8/FMK9vj8XN6JHuZCPcZywpVL\nuPTo8Dqt/QyLTmNZWYuoSxshChHcb7ghXiqw2gwlUjMQci/19H0lB1+KTbSGpzzV\njLh6ncNrUfSrPp3+0Uc7oVqx5VMAA+Ex0O1LHhWrMa/yhDEZw1twcd9DdgiA6PCk\nzhoMf6tCzgFs6kz7mr7vxhRamlWJGrOj27/g4IYEOqQHoGng/3Q7UPleSFhp4dfD\ne7LsSZH4t9/smu1IJUHjWHYQJkOnbv/bgIDtetpLMUUd7lLNcl/ggt5FkaMkOwbA\n8+4Ul5q8ygCfOmecCckpwCxRKIpbhDCZcGQ8ES7UUfklDZ+Ff55mAE52Z9yMbQ80\nlMwrtiMEA4IBhQACggGANtRQchKe9v/pARRyE0znb9hC5XwsDKmgFylR447by0N+\nUiQKA/Zch2JhhdMrVemo8RFBmtIn5PMqfdF4qvaG12X/hAWuDrr79Tv10QF7Bt/o\n6plW8vVVtY6gfph8bBTl3Lz50diUcKBfdXbyo/mDwzb2BaJyW0vex8TLdKqY2L8Y\nF1TDjnknLHyN6fgMWUKjdfGgXHLcVgOqplQ833JjFLnIGw6LoW3L+ZIMQVBKpwam\neBvCKeUb3pGwLck9XyafIxv3CjOc7wSoD0rL7wVWRgMrRxzsDTxc3FPkenM2+/C7\ntbpYIi6mde8J1jPrsjeQwkAV4o4cWHMpAEMfhhNyH0btQLZzqlG7Ua+PuD6WQ5vX\nul4mEpCGARWx8+GJjzgphw9vLwgIsnj8CE3FqwkDLvDHHv8EXVvJqsfDZqvqMcOJ\n8snjq3DNZZTHhjxiW8AHBFu0zgZgq78R21qGDXwofzBLJArddJVhG5YzpGLreww+\nWn0NCykdelvakssosqQ3o3wwejAdBgNVHQ4EFgQUDSdFqQn4vqQxX9Do5xFLMg7O\nPxMwHwYDVR0jBBgwFoAUQuvV7IKSN4Mf8WqQvXGYTqxiG4swCwYDVR0PBAQDAgeA\nMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMAoG\nCCqGSM49BAMCA0gAMEUCIQDJGkuveGJxXYzoMv9g8gKURr22TlTDv69v11NPEX8b\n9QIgKayuKFMiCOmKSpZonv2GUSskSt4uuuvAhLD9WvgIHVk=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN DSA PRIVATE KEY-----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\n2pLLKLKkNwIgDJD10nMBcln9/03mMJ5FJV1HXVKI3yF9DE4HTvJAXF0=\n-----END DSA PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -3188,11 +3188,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert is signed with and conveys an RSA-1024 key, which is\nbelow the security margin (2048) required under CABF 6.1.5.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIICFjCCAX+gAwIBAgIUIX8iMzwmYN4jeutyuUAKun5+AVowDQYJKoZIhvcNAQEL\nBQAwGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoY\nDzI5NjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwgZ8w\nDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMDgT+uCqWat0v770Bc6XN74L6ujUZN4\nQpgvdThpUjcRn1NqnXIllsh18e8ceQqJ3LFSzFG0y/S4lDMJMeP4kSgre/OqLaO1\ne2StJro0Gb0R526lUjrkz8oTWBDcelms+DMmT8fAlUNYXPyYdhQdUYiv34r0j4tB\nKjKLC6XTGkQjAgMBAAGjVzBVMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgIE\nMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB0GA1UdDgQWBBRNIZneANgFO9Uch0iN\nqOE2aWJuXjANBgkqhkiG9w0BAQsFAAOBgQAzC7XxmD/deEBvhg1uTo+zYbijxr9f\noDnBjCrmRH897QGvyF4hx33ttx1ypEdrN0XoAYGQCwYI2keFVEcfhj/I8RcaXbKK\nUk1CYvWWgsifq25inLW4KMWTOMoswJVT7b1qLiocA7OZpPSd/KGMbRmlSchqjd5+\nG+zRALLE3XM+hQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIICFjCCAX+gAwIBAgIUF8DMUAoAn+CIewdul0d6KayVrkswDQYJKoZIhvcNAQEL\nBQAwGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoY\nDzI5NjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwgZ8w\nDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAN+L3DFRfXd0LGBUuXHIRz/EHOWAzDs1\niy9rQINi+AO5PdAXOPGFFl8c+thmW+xFACgyKd4fh+HLQmQth48m4/ItX8JjyRwz\nbF+NgScCc36XJcW91Q6LFvhN2dGPdCjd/tqNCVpupgWLO3Px478wCs4rk7Q//x5u\na2PAv0MiyiEtAgMBAAGjVzBVMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgIE\nMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB0GA1UdDgQWBBS3FabLf3wdm19coeTv\n+S7NX98EvDANBgkqhkiG9w0BAQsFAAOBgQASwy+JSt/0gm7TNooWUlOXxhjt/qum\nyFx38DZis5VixZ/tmIvuhaiZmd38JlKcXo4Re0BzO8vZal+yEkHTqfof+sQ5cHH4\nxWsoTZpdIyR6o3+ViGG6xmB15m3nposeqfjyv5vgEUekdThr9E49V0PjV++Vl6ii\n0GXICYdJCzeAhA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB8DCCAVmgAwIBAgIUHYJi59qGi4KKdrzUftyDkJBDYuUwDQYJKoZIhvcNAQEL\nBQAwGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoY\nDzI5NjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqG\nSM49AgEGCCqGSM49AwEHA0IABIO6bR79u897sKh+xbH/BlVSn1k5LW6eTWE2A08h\nyTIXDCrRjBatObJ0BXfT+C1RLco6uOdRTSLOGlLCrQZqsqSjfDB6MB0GA1UdDgQW\nBBRxhK4gKwGnSxS9uYY2+5iP53rEpDAfBgNVHSMEGDAWgBRNIZneANgFO9Uch0iN\nqOE2aWJuXjALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0R\nBA8wDYILZXhhbXBsZS5jb20wDQYJKoZIhvcNAQELBQADgYEATZ4/Yf29Sve3lAsO\nV7UpVeGv8fTPB9ffh+zq1dU/Ein7BgfSDQIdyoT2fnvvhgch4SyN+Hauhu15kIy8\nqUQy+eTXeDUERo3vsuTr/mMbiUjD56EoboEsznbInr1s7lblRyldo7gF90f84I3J\nw+xsPjs46RvIIlZBoM89jAMKW28=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIAy2Z1dwg26ajaFRAaTLxKY4mL3DJaPQgSH490YWU3NVoAoGCCqGSM49\nAwEHoUQDQgAEg7ptHv27z3uwqH7Fsf8GVVKfWTktbp5NYTYDTyHJMhcMKtGMFq05\nsnQFd9P4LVEtyjq451FNIs4aUsKtBmqypA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nCmiE+doKJDzNBApTzk7OmBUyfX0=\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIOXIqZ5Z5QH38zTTM+EEvi7LNBEdcLJ+D4kEcYbJtojgoAoGCCqGSM49\nAwEHoUQDQgAEQbqGbSIKM5E2mQezrKC/tqWy/Gc+fxonRYF8PGtft8fsXvys3UrA\nLPXkk0dmTpjkBdc5fJxYBk+E4l7k67fOrA==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -3214,11 +3214,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert conveys an RSA 1024 key, which is below the security margin\n(2048) required under CABF 6.1.5.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nYt4dG3/6BKmNM+/q53aJnBGlZuU=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBkDCCATWgAwIBAgIUT6bPohzZoB8R7kNe5I82K3q1oLwwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARgaEPybNIzlNPPz2JAy0zJBZM5slVipBWQFikf\nkE/PkPEnE6irDjill0Ar6jZUy9atGfmGRqMRZ7ZuPwpvKtTvo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUNdnRMLpce4ZLC8dcqLlvhNHCbzwwCgYIKoZIzj0EAwIDSQAwRgIh\nALGypCTPwf1RUz9nZjPCBS0L2exZaGyf+vHgkrsMDZZ0AiEAqfUAPV7JwFrSwMzD\n1YqnbeGgvS0BgyANqkVZ6CG9lNg=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nO0IEmsK9Ix2KtDn7RkvvPZZnMqxtokqHlAOU\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN RSA PRIVATE KEY-----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\n3tKt2CSoMrmheu0DBYdVTbzZG6CFLrBrT8UT+yW5KzE=\n-----END RSA PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nM+iSIqaV+bIJalnBzZeoFbX4GPOqTu5fK2o5JQ==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN RSA PRIVATE KEY-----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\na0h4S1RxR/jBwPqnOKWg6oIlPRa2yd1fvn8mcOJtOuVk8g==\n-----END RSA PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -3238,11 +3238,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert is signed with and conveys an RSA-2052 key, which is\nabove the security margin (2048) but not divisible by 8, as is required\nunder CABF 6.1.5.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIDHDCCAgOgAwIBAgIUNf/xfsvlK5tuw8syQRTg4U2RZqIwDQYJKoZIhvcNAQEL\nBQAwGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoY\nDzI5NjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwggEi\nMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQt5gEWqZSClKEEUBo25tvt4yk7d\nqDY7FGqGclRfAYC9WSjGH9H3H3BXQ4A91YEfECfXDSV3qfL1e/fahoGR3rW+cVMG\nVxHGATGrN4i7rEsdxfEx8lxl1Ps3R5CfOmESlU+IFqrBgE+7b6kXdnJ5/+efLZE1\nsq/9YCZ2eLuj/A+NXtQVKL5c2oC44UfbcnVrZ7PPxELR12JH+FIB4Or+dw4jVtqk\nz4oyfXYLkKVNzKE9ecyJxPTCMqHc+ttLswS61Iv4XXdjM7zp2RIm01F7PrzEfXpN\n8PIHzHrPXLsGfSexrINN3IG0Ug1NYRXISMtANUGwWXR7debM72XA3cySJN1/AgMB\nAAGjVzBVMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgIEMBYGA1UdEQQPMA2C\nC2V4YW1wbGUuY29tMB0GA1UdDgQWBBQGFx8L5983HfitYPKs3HqvEfIl2DANBgkq\nhkiG9w0BAQsFAAOCAQIAAU0Dk8ZePW6dLD5dKhpT6ZNRWFqt5e7TtuygZYEnfQjp\njRNsek5QG6j9qZQA6X4MgXUCqcUYdpf9GNbi++uYjXyyyhoJxQJ++IzUE9WydJm9\nirW6eCzg+clk+IyemAxgRgyyhcIkYsdbHSm81z5EfMZAxLmL4yEH8y271FgwFp7F\nKpVmIGb+pp5zM5FOpVma8A7sbdrC59v/0g6QxiyNgck9TbLH+3dF25z8QXDNvjx4\nVRMzxjdyJfLMl57+F15H4dHfWMREx24Tt0Q0DG7C31Wj72b8B+hlr/JYhKZLOufl\nHcVG9aigsSbMSMfSbvVmGrWk3HSddA1f1Or696Sm6vA=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nbuQxqu0eTcYiD1gwkdMzfIImYi5c0rWUouovumwiG3E=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICcjCCAVmgAwIBAgIUYSe2BjPNxHvHsoAGxzZM08qVmfUwDQYJKoZIhvcNAQEL\nBQAwGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoY\nDzI5NjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqG\nSM49AgEGCCqGSM49AwEHA0IABDbAPOhvilGaEnqtU41kbboQM9IHMH739SMDms8f\ns/aK9oqm+kvBlydTEa4nXkyAbCK9yysDATLjU7EgIIxhx/yjfDB6MB0GA1UdDgQW\nBBR3avMAeX2RGSE/9o0kNSYDq7U7uDAfBgNVHSMEGDAWgBQGFx8L5983HfitYPKs\n3HqvEfIl2DALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0R\nBA8wDYILZXhhbXBsZS5jb20wDQYJKoZIhvcNAQELBQADggECAAN5N5+E2h1eGNOu\nc/GQ+KhWB/0753MXQNxa3soYBFaJa0b5XamTdzkHMWxCrMzjFDWDxuaUNqJ9imr8\n/kDKICv6fDaEvWwP36zHm5IBD4BDj4mvf0nEq9wA27g5SeKslw2qmHR0Q/kXjcXl\nthL36CgUeWAaSP9F128+xh+b5pp2CTgYCwqrAXVsEgKkkfYsgMlfKiijoak44KuP\n2DQ9TGhVw336m/ZIK5r0A+Q5QWE47n7peWq79QfiMP06c6zLTAOEdSLTZObu+aGw\npwI5sAM2mZaevOSe4/TqIr2zqckLzzm0u2L+HVKGMvuLu7I5tkBcMkTP4hxvgjly\nvI/nWE9K\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDhk/bWRz9snvg/QACjBRDmet7Qb4by9iMv3j15jdVhkoAoGCCqGSM49\nAwEHoUQDQgAENsA86G+KUZoSeq1TjWRtuhAz0gcwfvf1IwOazx+z9or2iqb6S8GX\nJ1MRrideTIBsIr3LKwMBMuNTsSAgjGHH/A==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICcjCCAVmgAwIBAgIUf+AVl0KDi9m5G4lOd9IQp8k8y+UwDQYJKoZIhvcNAQEL\nBQAwGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoY\nDzI5NjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqG\nSM49AgEGCCqGSM49AwEHA0IABEC7ey99XlSaMaGrUkPwjHfbEylWKidGEAQpYtaf\nFlrMtTbo8Vkse/9NyTnP9nxUX5uMrOg2zOB+p+uESysOw0mjfDB6MB0GA1UdDgQW\nBBR7MuFRCCUrOpV85kLFlTlFdQ8FKzAfBgNVHSMEGDAWgBSDbShF4QiM8/WvFyOu\nURU3tEgsTzALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0R\nBA8wDYILZXhhbXBsZS5jb20wDQYJKoZIhvcNAQELBQADggECAAJ9T6nt4vY6BCEV\npWOPaDgLFXs/8rw2QqISsgXGKc5y662oBXOT4kUPdlebZ49XUTQVlNAFcwz6VZro\njLuAnYgbd6S898LnGc6DMJzZDaAX2ZG5383uYfFbdM4RCGESzNya/H+aD2akpak3\nUEFa4aE/mF8Zrf31h99mH74nT8MHMrInCIB5WrPuxQ7M5o481M+znLjDsSrXfkGR\naHje5U0WP+lqcmhh9FMiahu5RhqWzr5Fo/b4SS6tGH0y0sW9l7so5OPH1sVOQcHB\nAhIQxjZzvk+F4ic5QgJmSoonoVfs3Y2vd5PDMqfSGuoPrWPpbGsS09VUshQpWa1X\nR1/kVQTn\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIAh0aIAlgiXpFJraP0UFiT80A2kc5ZBIPgDgPSo4K+m6oAoGCCqGSM49\nAwEHoUQDQgAEQLt7L31eVJoxoatSQ/CMd9sTKVYqJ0YQBCli1p8WWsy1NujxWSx7\n/03JOc/2fFRfm4ys6DbM4H6n64RLKw7DSQ==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -3264,11 +3264,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert conveys an RSA-2052 key, which is above the security margin\n(2048) but not divisible by 8, as is required under CABF 6.1.5.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nMhJlafMK1D4KJCXV+vjk0eRXlok=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nLGcbcmuapW4do7bwc4MYsRNU\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n3OayXLSrrm/BvFkVSC4=\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN RSA PRIVATE KEY-----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\naeOvUbaru2B6nAhBwYhS2VivO3S4nbIW5TnJ1wwlOwZmskj788mehD8=\n-----END RSA PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nNBA2dciTEOYACBxpxnVN8w==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN RSA PRIVATE KEY-----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\neHiKq4xxir/KsmHwnx0tpjEsHqk0yHc8jy21tEOb+sY7Syi4jIWj3yw=\n-----END RSA PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -3288,11 +3288,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThis chain is correctly constructed, but the EE cert is marked with\nversion 2 (ordinal 1) rather than version 3 (ordinal 2). This is invalid,\nper CABF 7.1.1:\n\n> Certificates MUST be of type X.509 v3.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n3COftUO9hpdBdJBc63qznee5pQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUd1HDLSbnSFfQ51N8s7FA4u+Et28wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQRlXtSdwOSoATMI/J9Bg0qnqdhveGRkSAX+20f\n5EugjbQq/wI4+rFTArmMWkACu2qx+9aTWqSyxOhaegbxZWpro1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUhoJBZcWdnhor80oP/6gdPsSDw9wwCgYIKoZIzj0EAwIDSAAwRQIg\nW2S5JXkXd/kmgRvYXHXvZ2z3ajmTulqLRVxvX1MD45QCIQD2qhJ7NxQxOs9A8yB5\nT949S6Ufxj8nyZrQB5Ugf1O9dQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBLDCB0wIUYKiTRXK3+xqWbiftd/lPJG3waswwCgYIKoZIzj0EAwIwGjEYMBYG\nA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5NjkwNTAz\nMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqG\nSM49AwEHA0IABOYRefjuw2UoKSnJDF1pvRflrXAE3MoTst4My34+xIQ07pLKX47G\n419qzUU5UmwiOGhVDw5isldBMGZWuifimhowCgYIKoZIzj0EAwIDSAAwRQIhAPka\nubacRRSJMrnCq/JIpLHguDMBI8T0iX5d11YkBJ2BAiBXj+WbqLXZ8hofkg3pXxdF\nCEJut0xzW2C735or/HEJzQ==\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEEc7tnGHa3+Gm5eklXweADVkROXAbzlzDLWLtIx/3fvoAoGCCqGSM49\nAwEHoUQDQgAE5hF5+O7DZSgpKckMXWm9F+WtcATcyhOy3gzLfj7EhDTukspfjsbj\nX2rNRTlSbCI4aFUPDmKyV0EwZla6J+KaGg==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBLDCB0wIUHXvA4sInhHB3PNM5p0s76jFq/+wwCgYIKoZIzj0EAwIwGjEYMBYG\nA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5NjkwNTAz\nMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqG\nSM49AwEHA0IABAZ44jbQgcyf2U+1iV3WKdRWW+14apYHwY2FpC6g4lnV+bpSi/l8\nT7I6K9R3gbLjyKg8Tc2EAEFWwPGqXGFltKowCgYIKoZIzj0EAwIDSAAwRQIgWgtn\nBspWC7YUnzBtGk4MRY6t5kdbHFDtbjwryPtxGtgCIQDoNSHkrXqxMzCjkULLOFGG\nNkmR7hZvWHgBppUdk9g6kA==\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIEWMM/BuHrNLB8qxUQ82eQMr7awjOmSbKSu4uhmp3oP6oAoGCCqGSM49\nAwEHoUQDQgAEBnjiNtCBzJ/ZT7WJXdYp1FZb7XhqlgfBjYWkLqDiWdX5ulKL+XxP\nsjor1HeBsuPIqDxNzYQAQVbA8apcYWW0qg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -3312,11 +3312,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE certificate has `keyUsage.keyCertSign=FALSE` but\n`basicConstraints.cA=TRUE`, which is explicitly forbidden under\nCABF 7.1.2.7.8:\n\n> cA MUST be FALSE", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n5v/QMNvgj+1wX3L18KHGIrRNHw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUTMXCyMgnmkMYAsRhWzKKuY+SI5EwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARQQfhFljjEwfnsOAbQQHw02PtcSSdL+7QaBGj9\nfR6iS2Q66aK3cL8fjpD6V7sclhzTAkpEKi/22GDX5VQYY6Sso1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUnRjUXgQpQ9lPSnqXNTXMu+tFZ5AwCgYIKoZIzj0EAwIDSAAwRQIg\nKQq1MaC1vHlQxjreGoNB8z6E1NBVYVnl1mMhzfMYAwgCIQDOlDfGVt8Rk22pviK2\nNGI8yf/+6mBae7pW0MzhI4sRjA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nPNODe7mQq7aO36JqLsfg/0uzTE6EazE0\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIIftsq/+nUUNk/ruN+5HsUuDrPXgVFJhn3b1ZfcRJ19koAoGCCqGSM49\nAwEHoUQDQgAEqC+XK2U6z9wTp0l8RM9qa7l45bxCE6kw3Ek2+c3HCGE29sSIPlKS\nlf4ZwqrVqgXNKIyCtinLNJ3Ghse5iiZ1xA==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBxDCCAWmgAwIBAgIUHWMocpp2z4M6gD9JddECa2hsvnwwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABO/fBiqKuCjyJ0OmA9+cqRoxVbdh4U8ntDNaxtXa1rwX\nIGvQCknk0wQY/eTtJ9PZJd7Pu3HOFtmW4TVidLJQiw6jgY4wgYswHQYDVR0OBBYE\nFP6osjgmxkQOlCZjFwZtp1wntkvZMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgw\nFoAUnRjUXgQpQ9lPSnqXNTXMu+tFZ5AwCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoG\nCCsGAQUFBwMBMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kA\nMEYCIQC0wGK1HEPgXqKDNyd3hMhITdVjGuAMD8H+ZXNyz4JO1wIhAPBE7sQU2+ct\ngbUERo3XlY7rbPPkWbETW3NAgZOmg2sb\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDViiODVbe5AcskXRteHihy1ruCwLVAouRNfDUZ5BWjOoAoGCCqGSM49\nAwEHoUQDQgAE798GKoq4KPInQ6YD35ypGjFVt2HhTye0M1rG1drWvBcga9AKSeTT\nBBj95O0n09kl3s+7cc4W2ZbhNWJ0slCLDg==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -3338,11 +3338,11 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA\n```\n\nThe ICA is in leaf position, despite being a CA certificate,\nwhich is explicitly forbidden under CABF 7.1.2.7.11 (`keyUsage.keyCertSign` must NOT be\npermitted) and 7.1.2.7.8 (`basicConstraints.cA` MUST be false`).", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nAIN+WPBbIyl/4lfsNbJHPTVQMA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nfV7fLNL5QDDCCTEi+hcFtslsAHw=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nlfwMmwIhAL8GMHV5MZYxw8TcyMYdackDUDETY8McL8LxcHQaOe7r\n-----END CERTIFICATE-----\n", - "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEILFr4b27AU8odi6ms27SmAvucmTJukXNrppK+S0p5AfUoAoGCCqGSM49\nAwEHoUQDQgAEn0Gv/8NXUQ7BE9brfs+4d1etlfMKTqSmvxGj1uHHks26KhSn5TsF\nVAdHFxFNkwdPoi8DBCWQXHv33+87PM38DQ==\n-----END EC PRIVATE KEY-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nYUKgLwIhALhZlz6ZJnTtJr1XVQm8YxOatD+ybafmcYXUqd4Pf/oG\n-----END CERTIFICATE-----\n", + "peer_certificate_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEICY54fcun7dT1Xi06kfy8jhY3nfIMbQu1rwUCATU0OC4oAoGCCqGSM49\nAwEHoUQDQgAE7hjkY9nhPX9qCvr0kllizRXJ8c3QM2URk/ypYJjUG05gW60OqRuD\nB+CzPmsFYLjL9aW4yp9wq+2qgaDVnAD/0Q==\n-----END EC PRIVATE KEY-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -262492,365 +262492,365 @@ "max_chain_depth": null }, { - "id": "online::storage.googleapis.com", + "id": "online::akamai.com", "conflicts_with": [], "features": [], - "description": "A valid chain for `storage.googleapis.com`.", + "description": "A valid chain for `akamai.com`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nbP6MvPJwNQzcmRk13NfIRmPVNnGuV/u3gm3c\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nCAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n1IXNDw9bg1kWRxYtnCQ6yICmJhSFm/Y3m6xv+cXDBlHz4n/FsRC6UfTd\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nA7sKPPcw7+uvTPyLNhBzPvOk\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n7AcEDwxmivUZxDf/rOyq4lTS5PYJVs1beCsM1g==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nqaCk2c5Z\n-----END CERTIFICATE-----\n", "peer_certificate_key": null, - "validation_time": "2024-01-02T13:14:17+00:00", + "validation_time": "2023-04-25T00:00:01+00:00", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], "expected_result": "SUCCESS", "expected_peer_name": { "kind": "DNS", - "value": "storage.googleapis.com" + "value": "akamai.com" }, "expected_peer_names": [], "max_chain_depth": null }, { - "id": "online::stackoverflow.com", + "id": "online::bing.com", "conflicts_with": [], "features": [], - "description": "A valid chain for `stackoverflow.com`.", + "description": "A valid chain for `bing.com`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIICGzCCAaGgAwIBAgIQQdKd0XLq7qeAwSxs6S+HUjAKBggqhkjOPQQDAzBPMQsw\nCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2gg\nR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMjAeFw0yMDA5MDQwMDAwMDBaFw00\nMDA5MTcxNjAwMDBaME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5ldCBT\nZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgyMHYw\nEAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0HttwW\n+1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7AlF9\nItgKbppbd9/w+kHsOdx1ymgHDB/qo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0T\nAQH/BAUwAwEB/zAdBgNVHQ4EFgQUfEKWrt5LSDv6kviejM9ti6lyN5UwCgYIKoZI\nzj0EAwMDaAAwZQIwe3lORlCEwkSHRhtFcP9Ymd70/aTSVaYgLXTWNLxBo1BfASdW\ntL4ndQavEi51mI38AjEAi/V3bNTIZargCyzuFJ0nN6T5U6VR5CmD1/iQMVtCnwr1\n/q4AaOeMSQ+2b1tbFfLn\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nMrY=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nYJkgsTgDyj2gJrjubi1K9sZmHzOa25JK1fUpE8ZwYii6I4zPPS/Lgul/\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIF8zCCBNugAwIBAgIQDGrpfM7VmYOGkKAKnqUyFDANBgkqhkiG9w0BAQwFADBh\nMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3\nd3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH\nMjAeFw0yMDA3MjkxMjMwMDBaFw0yNDA2MjcyMzU5NTlaMFkxCzAJBgNVBAYTAlVT\nMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKjAoBgNVBAMTIU1pY3Jv\nc29mdCBBenVyZSBUTFMgSXNzdWluZyBDQSAwMjCCAiIwDQYJKoZIhvcNAQEBBQAD\nggIPADCCAgoCggIBAOBiO1K6Fk4fHI6t3mJkpg7lxoeUgL8tz9wuI2z0UgY8vFra\n3VBo7QznC4K3s9jqKWEyIQY11Le0108bSYa/TK0aioO6itpGiigEG+vH/iqtQXPS\nu6D804ri0NFZ1SOP9IzjYuQiK6AWntCqP4WAcZAPtpNrNLPBIyiqmiTDS4dlFg1d\nskMuVpT4z0MpgEMmxQnrSZ615rBQ25vnVbBNig04FCsh1V3S8ve5Gzh08oIrL/g5\nxq95oRrgEeOBIeiegQpoKrLYyo3R1Tt48HmSJCBYQ52Qc34RgxQdZsLXMUrWuL1J\nLAZP6yeo47ySSxKCjhq5/AUWvQBP3N/cP/iJzKKKw23qJ/kkVrE0DSVDiIiXWF0c\n9abSGhYl9SPl86IHcIAIzwelJ4SKpHrVbh0/w4YHdFi5QbdAp7O5KxfxBYhQOeHy\nis01zkpYn6SqUFGvbK8eZ8y9Aclt8PIUftMG6q5BhdlBZkDDV3n70RlXwYvllzfZ\n/nV94l+hYp+GLW7jSmpxZLG/XEz4OXtTtWwLV+IkIOe/EDF79KCazW2SXOIvVInP\noi1PqN4TudNv0GyBF5tRC/aBjUqply1YYfeKwgRVs83z5kuiOicmdGZKH9SqU5bn\nKse7IlyfZLg6yAxYyTNe7A9acJ3/pGmCIkJ/9dfLUFc4hYb3YyIIYGmqm2/3AgMB\nAAGjggGtMIIBqTAdBgNVHQ4EFgQUAKuR/CFiJpeaqHkbYUGQYKliZ/0wHwYDVR0j\nBBgwFoAUTiJUIBiV5uNu5g/6+rkS7QYXjzkwDgYDVR0PAQH/BAQDAgGGMB0GA1Ud\nJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/AgEAMHYG\nCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQu\nY29tMEAGCCsGAQUFBzAChjRodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGln\naUNlcnRHbG9iYWxSb290RzIuY3J0MHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6Ly9j\ncmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RHMi5jcmwwN6A1oDOG\nMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RHMi5j\ncmwwHQYDVR0gBBYwFDAIBgZngQwBAgEwCAYGZ4EMAQICMBAGCSsGAQQBgjcVAQQD\nAgEAMA0GCSqGSIb3DQEBDAUAA4IBAQAzo/KdmWPPTaYLQW7J5DqxEiBT9QyYGUfe\nZd7TR1837H6DSkFa/mGM1kLwi5y9miZKA9k6T9OwTx8CflcvbNO2UkFW0VCldEGH\niyx5421+HpRxMQIRjligePtOtRGXwaNOQ7ySWfJhRhKcPKe2PGFHQI7/3n+T3kXQ\n/SLu2lk9Qs5YgSJ3VhxBUznYn1KVKJWPE07M55kuUgCquAV0PksZj7EC4nK6e/UV\nbPumlj1nyjlxhvNud4WYmr4ntbBev6cSbK78dpI/3cr7P/WJPYJuL0EsO3MgjS3e\nDCX7NXp5ylue3TcpQfRU8BL+yZC1wqX98R4ndw7X4qfGaE7SlF7I\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nHBHbXS573G/ixn2m\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n5fr9llAV81tRw3ifgfGP5ovk\n-----END CERTIFICATE-----\n", "peer_certificate_key": null, - "validation_time": "2024-01-14T18:00:57+00:00", + "validation_time": "2024-01-21T13:42:34+00:00", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], "expected_result": "SUCCESS", "expected_peer_name": { "kind": "DNS", - "value": "stackoverflow.com" + "value": "bing.com" }, "expected_peer_names": [], "max_chain_depth": null }, { - "id": "online::bing.com", + "id": "online::fastly.com", "conflicts_with": [], "features": [], - "description": "A valid chain for `bing.com`.", + "description": "A valid chain for `fastly.com`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh\nMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3\nd3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH\nMjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVT\nMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j\nb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG\n9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI\n2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx\n1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ\nq2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz\ntCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ\nvIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo0IwQDAP\nBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV\n5uNu5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY\n1Yl9PMWLSn/pvtsrF9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4\nNeF22d+mQrvHRAiGfzZ0JFrabA0UWTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NG\nFdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBHQRFXGU7Aj64GxJUTFy8bJZ91\n8rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/iyK5S9kJRaTe\npLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl\nMrY=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nWD9f\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIIF8zCCBNugAwIBAgIQDGrpfM7VmYOGkKAKnqUyFDANBgkqhkiG9w0BAQwFADBh\nMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3\nd3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH\nMjAeFw0yMDA3MjkxMjMwMDBaFw0yNDA2MjcyMzU5NTlaMFkxCzAJBgNVBAYTAlVT\nMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKjAoBgNVBAMTIU1pY3Jv\nc29mdCBBenVyZSBUTFMgSXNzdWluZyBDQSAwMjCCAiIwDQYJKoZIhvcNAQEBBQAD\nggIPADCCAgoCggIBAOBiO1K6Fk4fHI6t3mJkpg7lxoeUgL8tz9wuI2z0UgY8vFra\n3VBo7QznC4K3s9jqKWEyIQY11Le0108bSYa/TK0aioO6itpGiigEG+vH/iqtQXPS\nu6D804ri0NFZ1SOP9IzjYuQiK6AWntCqP4WAcZAPtpNrNLPBIyiqmiTDS4dlFg1d\nskMuVpT4z0MpgEMmxQnrSZ615rBQ25vnVbBNig04FCsh1V3S8ve5Gzh08oIrL/g5\nxq95oRrgEeOBIeiegQpoKrLYyo3R1Tt48HmSJCBYQ52Qc34RgxQdZsLXMUrWuL1J\nLAZP6yeo47ySSxKCjhq5/AUWvQBP3N/cP/iJzKKKw23qJ/kkVrE0DSVDiIiXWF0c\n9abSGhYl9SPl86IHcIAIzwelJ4SKpHrVbh0/w4YHdFi5QbdAp7O5KxfxBYhQOeHy\nis01zkpYn6SqUFGvbK8eZ8y9Aclt8PIUftMG6q5BhdlBZkDDV3n70RlXwYvllzfZ\n/nV94l+hYp+GLW7jSmpxZLG/XEz4OXtTtWwLV+IkIOe/EDF79KCazW2SXOIvVInP\noi1PqN4TudNv0GyBF5tRC/aBjUqply1YYfeKwgRVs83z5kuiOicmdGZKH9SqU5bn\nKse7IlyfZLg6yAxYyTNe7A9acJ3/pGmCIkJ/9dfLUFc4hYb3YyIIYGmqm2/3AgMB\nAAGjggGtMIIBqTAdBgNVHQ4EFgQUAKuR/CFiJpeaqHkbYUGQYKliZ/0wHwYDVR0j\nBBgwFoAUTiJUIBiV5uNu5g/6+rkS7QYXjzkwDgYDVR0PAQH/BAQDAgGGMB0GA1Ud\nJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/AgEAMHYG\nCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQu\nY29tMEAGCCsGAQUFBzAChjRodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGln\naUNlcnRHbG9iYWxSb290RzIuY3J0MHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6Ly9j\ncmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RHMi5jcmwwN6A1oDOG\nMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RHMi5j\ncmwwHQYDVR0gBBYwFDAIBgZngQwBAgEwCAYGZ4EMAQICMBAGCSsGAQQBgjcVAQQD\nAgEAMA0GCSqGSIb3DQEBDAUAA4IBAQAzo/KdmWPPTaYLQW7J5DqxEiBT9QyYGUfe\nZd7TR1837H6DSkFa/mGM1kLwi5y9miZKA9k6T9OwTx8CflcvbNO2UkFW0VCldEGH\niyx5421+HpRxMQIRjligePtOtRGXwaNOQ7ySWfJhRhKcPKe2PGFHQI7/3n+T3kXQ\n/SLu2lk9Qs5YgSJ3VhxBUznYn1KVKJWPE07M55kuUgCquAV0PksZj7EC4nK6e/UV\nbPumlj1nyjlxhvNud4WYmr4ntbBev6cSbK78dpI/3cr7P/WJPYJuL0EsO3MgjS3e\nDCX7NXp5ylue3TcpQfRU8BL+yZC1wqX98R4ndw7X4qfGaE7SlF7I\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n2LduNzj/aVv/K6qMH95aCmxINw==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n5fr9llAV81tRw3ifgfGP5ovk\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIGgDCCBWigAwIBAgIQAbGrGkGagBmbpLHKtkuhRzANBgkqhkiG9w0BAQsFADBY\nMQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE\nAxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRMzAeFw0yMzEw\nMDYxNDM4MzRaFw0yNDExMDYxNDM4MzNaMBkxFzAVBgNVBAMMDnd3dy5mYXN0bHku\nY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCDaLd7qUa3h9IYT\nIkGl0LpywPyxDthwSW5VFWRWeKOMfucMXUQTSBj7CQAtuYpAWEqDjdKojsvCJ+H9\n+UEea5Mtiuo3RZO89vXLWLJEQ/uoBSx3XmXiVorPbE0MTch0h07NhVa/08vBoRDD\nf71s2Ra6pqT3UbvCtQnWxNvcFqQStkRlPPfyOmyLhcAy0ZiTcKxU6faer6C5eWo8\nQF0ffcoDsNMZBusu0649qkWEzRKXPFKdgF19mxf/rln0s0L5W5XmEhg/iTalBtiX\nIOMq1rn3nwOl8N3LFswTHOupJ5V1Iuof9f/A1gqVkj+fBhaIAuloUWAOtnjZn/TV\nh2/EYQIDAQABo4IDgzCCA38wOwYDVR0RBDQwMoIOd3d3LmZhc3RseS5jb22CFGRl\ndmVsb3Blci5mYXN0bHkuY29tggpmYXN0bHkuY29tMA4GA1UdDwEB/wQEAwIFoDAd\nBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFPxUoYYcaxuJ\nInLt0NYD0GKBvdHSMFcGA1UdIARQME4wCAYGZ4EMAQIBMEIGCisGAQQBoDIKAQMw\nNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3Np\ndG9yeS8wDAYDVR0TAQH/BAIwADCBngYIKwYBBQUHAQEEgZEwgY4wQAYIKwYBBQUH\nMAGGNGh0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2NhL2dzYXRsYXNyM2R2dGxz\nY2EyMDIzcTMwSgYIKwYBBQUHMAKGPmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5j\nb20vY2FjZXJ0L2dzYXRsYXNyM2R2dGxzY2EyMDIzcTMuY3J0MB8GA1UdIwQYMBaA\nFO2g5gEFPjSCGqRPX8W9EUGq3/NhMEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9j\ncmwuZ2xvYmFsc2lnbi5jb20vY2EvZ3NhdGxhc3IzZHZ0bHNjYTIwMjNxMy5jcmww\nggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/\nH4Vq68G/KIXs+GRuAAABiwVtDrYAAAQDAEcwRQIgbNTQAc3MnYjz2d9H1nUarsHB\nFR+O/tQONfX1URK9dkQCIQCASB3n0Am1larhQFjT5dGyo8icOBMsNwh+bdZBRuJv\n6QB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABiwVtDmkAAAQD\nAEYwRAIgKBdMD+0aTlWYwd/G0D9QFS1cRReBd2sdY7FNqLS+1HkCICVpcO22VPhm\nyj9VrECHsJjEAeeyL+C5kwSKupIY1naPAHYASLDja9qmRzQP5WoC+p0w6xxSActW\n3SyB2bu/qznYhHMAAAGLBW0QOAAABAMARzBFAiEA6d8XzB9KchqN/NxNxWYfKvEP\nBQ2LRq5+CaQK+e3IE/QCICt/RJiO3SRBFSe3HEq6HOjj8T95b6I9y4tj8clzhvTA\nMA0GCSqGSIb3DQEBCwUAA4IBAQCDhNOnqibkVnMpZLOYo/nbELgYwyCLRBTChNM9\nLQ5rLSaqOa7aNs+QRtytxh9mnUwpfMckqVHmQqiDv5T5sI9gJc2nug6Nz1815z3o\nVnhsjXVNWEYnR+SsgI0K0H/TzndCmK/IMeXYoVSs89NawEGBoBMVoPZZCRSkCRdP\nHtV8vNEGC93SR9Peis1/fmFTiRvCixpk80nYxoh5HaiYIqhS13wwDUSlS54UcPF+\nKa3naPYLdsL9aUK5SCZF5dOIR3dfNcFCztv5QGEjRI5bN2kVdjzUh5woH+KaX8L7\nBwVe6Ng4xdi8r0BPxYWF/Ncx3ffSxsdA9ShxhHYmRqjvtX/L\n-----END CERTIFICATE-----\n", "peer_certificate_key": null, - "validation_time": "2024-01-21T13:42:34+00:00", + "validation_time": "2023-10-06T14:38:35+00:00", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], "expected_result": "SUCCESS", "expected_peer_name": { "kind": "DNS", - "value": "bing.com" + "value": "fastly.com" }, "expected_peer_names": [], "max_chain_depth": null }, { - "id": "online::microsoft.com", + "id": "online::s3.amazonaws.com", "conflicts_with": [], "features": [], - "description": "A valid chain for `microsoft.com`.", + "description": "A valid chain for `s3.amazonaws.com`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nMrY=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF\nADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6\nb24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL\nMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv\nb3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXj\nca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM\n9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qw\nIFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6\nVOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L\n93FcXmn/6pUCyziKrlA4b9v7LWIbxcceVOF34GfID5yHI9Y/QCB/IIDEgEw+OyQm\njgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC\nAYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3DQEBCwUA\nA4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDI\nU5PMCCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUs\nN+gDS63pYaACbvXy8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vv\no/ufQJVtMVT8QtPHRh8jrdkPSHCa2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU\n5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2xJNDd2ZhwLnoQdeXeGADbkpy\nrqXRfboQnoZsG4q5WTP468SQvvG5\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n+ItQCmz7TjRH4ptX5Zh9pw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nxRRrwszrzX/WWGm6wyB+f7C4\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nnHAJz0DOdnJ5/ED7jvQJm+GyWraLHvX1nw==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", "peer_certificate_key": null, - "validation_time": "2023-12-18T22:25:04+00:00", + "validation_time": "2023-10-10T00:00:01+00:00", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], "expected_result": "SUCCESS", "expected_peer_name": { "kind": "DNS", - "value": "microsoft.com" + "value": "s3.amazonaws.com" }, "expected_peer_names": [], "max_chain_depth": null }, { - "id": "online::apple.com", + "id": "online::aws.amazon.com", "conflicts_with": [], "features": [], - "description": "A valid chain for `apple.com`.", + "description": "A valid chain for `aws.amazon.com`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nsycX\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nrqXRfboQnoZsG4q5WTP468SQvvG5\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nFdg3+7LWIiW9sUjtJC6kGmRyGm6vV4oAhEDd9jdk4q+7b5zlid4=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nxRRrwszrzX/WWGm6wyB+f7C4\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nz3cN+ZmO/PfjttCc9dmrWuJ6khAR\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIGWTCCBUGgAwIBAgIQCTCOaF/9dQeXKKDeCaSCEjANBgkqhkiG9w0BAQsFADA8\nMQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g\nUlNBIDIwNDggTTAxMB4XDTI0MDExODAwMDAwMFoXDTI0MTIzMTIzNTk1OVowGTEX\nMBUGA1UEAxMOYXdzLmFtYXpvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw\nggEKAoIBAQC64AHJOBKooqR9oYooe6olbDvyOZkw6pElO+keoLi+x+6i4N8f8euH\n+1JGzv2sQvYZS9olMPUCdWfoTW6Fy/fUcPDvvYtL3H01XjoV8JeBHP0/0HIZefHX\nDO76EJLgLUxK8o3S5KYa9rJKqcwWT2GfkXAg7UgmZoKSALxVMFSx0+4763jz3Qya\nNnrhtW3pRbg7x3W1L+zqOxzwyhDgHKu28Rj27C8AeI5QYk0azcMqEsNs63OvHW9h\n91V5u6QuLaiDrP0gS0bhggOcnPYB4520U9UQCYz2ZAz8OoQ0KNhN7CKFV41PGBg+\nt89gJs5y8dFaWSFtOu7QNLKfNxq6ofmdAgMBAAGjggN4MIIDdDAfBgNVHSMEGDAW\ngBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQU84h9+rMoZMA2IUKxty55\neiPxvtUwgaoGA1UdEQSBojCBn4IOYXdzLmFtYXpvbi5jb22CEnd3dy5hd3MuYW1h\nem9uLmNvbYIYYXdzLXVzLWVhc3QtMS5hbWF6b24uY29tghhhd3MtdXMtd2VzdC0y\nLmFtYXpvbi5jb22CE2FtYXpvbmF3cy1jaGluYS5jb22CF3d3dy5hbWF6b25hd3Mt\nY2hpbmEuY29tghcxLmF3cy1sYnIuYW1hem9uYXdzLmNvbTATBgNVHSAEDDAKMAgG\nBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG\nAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDEuYW1hem9u\ndHJ1c3QuY29tL3IybTAxLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGG\nIWh0dHA6Ly9vY3NwLnIybTAxLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYq\naHR0cDovL2NydC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY2VyMAwGA1Ud\nEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AO7N0GTV2xrOxVy3\nnbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjRvkvkwAAAQDAEYwRAIgSMCVlqIrOXq4\ndvc482wrmyOkKsgpg6/PwU88lPNmbsICIHvb5D0a5mb6rLUuXfDWfKarthSm1gM7\nu0114pyyHyPDAHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGN\nG+S+vQAABAMARjBEAiBDj3PWGiN4z7/bikP9hlM/nio/2iA+QbZeEuR8yChGYQIg\naimvYN1/wXlzJhmFlYKwTMiCqNYS11sIVEPWCc5tYeoAdwA/F0tP1yJHWJQdZRyE\nvg0S7ZA3fx+FauvBvyiF7PhkbgAAAY0b5L6UAAAEAwBIMEYCIQCNcxjGbcDxBKX7\nrtIwki14G8nVPpEWZnGu+CWUJ0FotAIhAJq1+pqQOoyVJVeEWrDvpczwsL+mK+1R\n/0RhuNDH5iZvMA0GCSqGSIb3DQEBCwUAA4IBAQAk7FHYsBny8ZZTzn01jfd0deEH\nyVvA/5oa/jxyHtgFQIrux6i4eFVG5MawTAxtwWUUKSiRQFyVhVdbobxAmY1JxYnm\nK+PyNKpsnP8m7manS6TWOzTifbrKSaD2yLK1FybT4xaEsgmE8VIUMCDfe6PRazye\nAtnREupcXzeahWYH1AdLHP5u2GYQYmoV9DvTXxTfBabSubhM4K2HUnG+gDLFsHCO\nFfP35YHaejHm/Mewczkz2DQXSc3/tOlkK0hxOkwRdcurDJwPaDD2xPlTaw5bcblQ\nIVvjurI+f5kJtpSpVV233CnPmp/tWzBv8D2eYJDDMyzNZbkUwj8eHx0CuywN\n-----END CERTIFICATE-----\n", "peer_certificate_key": null, - "validation_time": "2023-12-01T22:17:48+00:00", + "validation_time": "2024-01-18T00:00:01+00:00", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], "expected_result": "SUCCESS", "expected_peer_name": { "kind": "DNS", - "value": "apple.com" + "value": "aws.amazon.com" }, "expected_peer_names": [], "max_chain_depth": null }, { - "id": "online::s3.amazonaws.com", + "id": "online::docs.python.org", "conflicts_with": [], "features": [], - "description": "A valid chain for `s3.amazonaws.com`.", + "description": "A valid chain for `docs.python.org`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nrqXRfboQnoZsG4q5WTP468SQvvG5\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nWD9f\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nxRRrwszrzX/WWGm6wyB+f7C4\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nmselKkpUuoQRK+a3PDU2+FZ9/A==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\neVd78VgsTeXmD9d3quDztnts4btw8Kjx9n4JS61Z6kbj/lII6A==\n-----END CERTIFICATE-----\n", "peer_certificate_key": null, - "validation_time": "2023-10-10T00:00:01+00:00", + "validation_time": "2023-06-29T16:48:44+00:00", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], "expected_result": "SUCCESS", "expected_peer_name": { "kind": "DNS", - "value": "s3.amazonaws.com" + "value": "docs.python.org" }, "expected_peer_names": [], "max_chain_depth": null }, { - "id": "online::akamai.com", + "id": "online::amazon.com", "conflicts_with": [], "features": [], - "description": "A valid chain for `akamai.com`.", + "description": "A valid chain for `amazon.com`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nCAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh\nMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3\nd3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH\nMjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVT\nMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j\nb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG\n9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI\n2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx\n1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ\nq2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz\ntCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ\nvIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo0IwQDAP\nBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV\n5uNu5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY\n1Yl9PMWLSn/pvtsrF9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4\nNeF22d+mQrvHRAiGfzZ0JFrabA0UWTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NG\nFdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBHQRFXGU7Aj64GxJUTFy8bJZ91\n8rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/iyK5S9kJRaTe\npLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl\nMrY=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nA7sKPPcw7+uvTPyLNhBzPvOk\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n92hiHuwZ4STyhxGs6QiA\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nqaCk2c5Z\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n5KjJIfMyy2OB69kiVncD1qAMZUHykpq/G+7wA8gXDA==\n-----END CERTIFICATE-----\n", "peer_certificate_key": null, - "validation_time": "2023-04-25T00:00:01+00:00", + "validation_time": "2023-07-15T00:00:01+00:00", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], "expected_result": "SUCCESS", "expected_peer_name": { "kind": "DNS", - "value": "akamai.com" + "value": "amazon.com" }, "expected_peer_names": [], "max_chain_depth": null }, { - "id": "online::docs.python.org", + "id": "online::facebook.com", "conflicts_with": [], "features": [], - "description": "A valid chain for `docs.python.org`.", + "description": "A valid chain for `facebook.com`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nWD9f\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n+OkuE6N36B9K\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIIEjzCCA3egAwIBAgIQffBRYMpdKHtndvoC4Na6vDANBgkqhkiG9w0BAQsFADBM\nMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xv\nYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0yMzAxMTgwMzM2NTJaFw0y\nNTAxMTgwMDAwMDBaMFgxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWdu\nIG52LXNhMS4wLAYDVQQDEyVHbG9iYWxTaWduIEF0bGFzIFIzIERWIFRMUyBDQSAy\nMDIzIFEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJEYi/+MlyjD\nfPurLxz+m2kByaM69fy6TaHKf9mooO2Zs7PbBX3foTrQCDZYL0oY7kY7ptS6FcvD\nGqYqMbbU/ROSzXVVLPLSG/zTp6xBMeEIxb2NpaHnSjWPz1QPAg1W5rEcADnW3Aqp\n9yDY+Ma2UfLranQtwX8k+bqzH586mQ1F3Krw9MhEEWKE1fGADkir4vH1WmY/2O99\nimdvkYzq7azCK0DBN/Auf4BttcCDryiQStRQVOudBvqcsF3FcGnVlcYM4z5ytWFc\nKQfl7WNB19wwkKac3bBnqfF1yAMsiYd7TN50Xo4BarmQauzT++vY3OfA+kbK5ivT\nUZLLH1tP/QIDAQABo4IBXzCCAVswDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQG\nCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQW\nBBTGomETRRXMkI+6way8zDsNDtDeBjAfBgNVHSMEGDAWgBSP8Et/qC5FJK5NUPpj\nmove4t0bvDB7BggrBgEFBQcBAQRvMG0wLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw\nMi5nbG9iYWxzaWduLmNvbS9yb290cjMwOwYIKwYBBQUHMAKGL2h0dHA6Ly9zZWN1\ncmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L3Jvb3QtcjMuY3J0MDYGA1UdHwQvMC0w\nK6ApoCeGJWh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vcm9vdC1yMy5jcmwwIQYD\nVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAGgMgoBAzANBgkqhkiG9w0BAQsFAAOC\nAQEAB5nSuyDMJBzQBTAr1BObHy1YMFLvcb+CxqrrwI3pkiYa/CSY3ioedfTApTE2\nAQHHZbXTPxvLlaJZvvcxMNrwCRegllOFTPypkM8eMTsgzU6NU1l4x1IPpAGdRwEF\nJlSZv5JypYkyc9X+wSlckQci0R97AJXpfoKGepcZL4feDGnW9ZhxlVOMhO1bfvFs\n+vt9oGg1rv0w/9PBIxUW8aHy6Ci+jQ2axxUNHPSgeFn4DBMiWFTAfpwPsg6qB6tz\nUvydn11c8vMFYr15yMVY5PiciVe64AEswTGfXW1zepuSM3MMmgxCGrQt61iGymfx\nmselKkpUuoQRK+a3PDU2+FZ9/A==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\ncPUeybQ=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\neVd78VgsTeXmD9d3quDztnts4btw8Kjx9n4JS61Z6kbj/lII6A==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nDSu+UPyZkKMsnNNKHQ==\n-----END CERTIFICATE-----\n", "peer_certificate_key": null, - "validation_time": "2023-06-29T16:48:44+00:00", + "validation_time": "2023-11-10T00:00:01+00:00", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], "expected_result": "SUCCESS", "expected_peer_name": { "kind": "DNS", - "value": "docs.python.org" + "value": "facebook.com" }, "expected_peer_names": [], "max_chain_depth": null }, { - "id": "online::fastly.com", + "id": "online::google.com", "conflicts_with": [], "features": [], - "description": "A valid chain for `fastly.com`.", + "description": "A valid chain for `google.com`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nWD9f\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nbP6MvPJwNQzcmRk13NfIRmPVNnGuV/u3gm3c\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n2LduNzj/aVv/K6qMH95aCmxINw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIFljCCA36gAwIBAgINAgO8U1lrNMcY9QFQZjANBgkqhkiG9w0BAQsFADBHMQsw\nCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU\nMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjAwODEzMDAwMDQyWhcNMjcwOTMwMDAw\nMDQyWjBGMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp\nY2VzIExMQzETMBEGA1UEAxMKR1RTIENBIDFDMzCCASIwDQYJKoZIhvcNAQEBBQAD\nggEPADCCAQoCggEBAPWI3+dijB43+DdCkH9sh9D7ZYIl/ejLa6T/belaI+KZ9hzp\nkgOZE3wJCor6QtZeViSqejOEH9Hpabu5dOxXTGZok3c3VVP+ORBNtzS7XyV3NzsX\nlOo85Z3VvMO0Q+sup0fvsEQRY9i0QYXdQTBIkxu/t/bgRQIh4JZCF8/ZK2VWNAcm\nBA2o/X3KLu/qSHw3TT8An4Pf73WELnlXXPxXbhqW//yMmqaZviXZf5YsBvcRKgKA\ngOtjGDxQSYflispfGStZloEAoPtR28p3CwvJlk/vcEnHXG0g/Zm0tOLKLnf9LdwL\ntmsTDIwZKxeWmLnwi/agJ7u2441Rj72ux5uxiZ0CAwEAAaOCAYAwggF8MA4GA1Ud\nDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0T\nAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUinR/r4XN7pXNPZzQ4kYU83E1HScwHwYD\nVR0jBBgwFoAU5K8rJnEaK0gnhS9SZizv8IkTcT4waAYIKwYBBQUHAQEEXDBaMCYG\nCCsGAQUFBzABhhpodHRwOi8vb2NzcC5wa2kuZ29vZy9ndHNyMTAwBggrBgEFBQcw\nAoYkaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzcjEuZGVyMDQGA1UdHwQt\nMCswKaAnoCWGI2h0dHA6Ly9jcmwucGtpLmdvb2cvZ3RzcjEvZ3RzcjEuY3JsMFcG\nA1UdIARQME4wOAYKKwYBBAHWeQIFAzAqMCgGCCsGAQUFBwIBFhxodHRwczovL3Br\naS5nb29nL3JlcG9zaXRvcnkvMAgGBmeBDAECATAIBgZngQwBAgIwDQYJKoZIhvcN\nAQELBQADggIBAIl9rCBcDDy+mqhXlRu0rvqrpXJxtDaV/d9AEQNMwkYUuxQkq/BQ\ncSLbrcRuf8/xam/IgxvYzolfh2yHuKkMo5uhYpSTld9brmYZCwKWnvy15xBpPnrL\nRklfRuFBsdeYTWU0AIAaP0+fbH9JAIFTQaSSIYKCGvGjRFsqUBITTcFTNvNCCK9U\n+o53UxtkOCcXCb1YyRt8OS1b887U7ZfbFAO/CVMkH8IMBHmYJvJh8VNS/UKMG2Yr\nPxWhu//2m+OBmgEGcYk1KCTd4b3rGS3hSMs9WYNRtHTGnXzGsYZbr8w0xNPM1IER\nlQCh9BIiAfq0g3GvjLeMcySsN1PCAJA/Ef5c7TaUEDu9Ka7ixzpiO2xj2YC/WXGs\nYye5TBeg2vZzFb8q3o/zpWwygTMD0IZRcZk0upONXbVRWPeyk+gB9lm+cZv9TSjO\nz23HFtz30dZGm6fKa+l3D/2gthsjgx0QGtkJAITgRNOidSOzNIb2ILCkXhAd4FJG\nAJ2xDx8hcFH1mt0G/FX0Kw4zd8NLQsLxdxP8c4CU6x+7Nz/OAipmsHMdMqUybDKw\njuDEI/9bfU1lcKwrmz3O2+BtjjKAvpafkmO8l7tdufThcV4q5O8DIrGKZTqPwJNl\n1IXNDw9bg1kWRxYtnCQ6yICmJhSFm/Y3m6xv+cXDBlHz4n/FsRC6UfTd\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nBwVe6Ng4xdi8r0BPxYWF/Ncx3ffSxsdA9ShxhHYmRqjvtX/L\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIOcjCCDVqgAwIBAgIRALef+kSce4CwCsv4fJi/3xgwDQYJKoZIhvcNAQELBQAw\nRjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM\nTEMxEzARBgNVBAMTCkdUUyBDQSAxQzMwHhcNMjQwMTAyMTMwMjUyWhcNMjQwMzI2\nMTMwMjUxWjAXMRUwEwYDVQQDDAwqLmdvb2dsZS5jb20wWTATBgcqhkjOPQIBBggq\nhkjOPQMBBwNCAASeWlrFS54W9uWvFAX6Zd2jS8J4arOn47TrxD2YfstePCy4jTBI\nTENASj40u8PjLlAllMuWcaeOQCMVOwgIYO5Go4IMUzCCDE8wDgYDVR0PAQH/BAQD\nAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE\nFOI4CYbNjh3peGW+E7ZQVDB6ghgcMB8GA1UdIwQYMBaAFIp0f6+Fze6VzT2c0OJG\nFPNxNR0nMGoGCCsGAQUFBwEBBF4wXDAnBggrBgEFBQcwAYYbaHR0cDovL29jc3Au\ncGtpLmdvb2cvZ3RzMWMzMDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVw\nby9jZXJ0cy9ndHMxYzMuZGVyMIIKAwYDVR0RBIIJ+jCCCfaCDCouZ29vZ2xlLmNv\nbYIWKi5hcHBlbmdpbmUuZ29vZ2xlLmNvbYIJKi5iZG4uZGV2ghUqLm9yaWdpbi10\nZXN0LmJkbi5kZXaCEiouY2xvdWQuZ29vZ2xlLmNvbYIYKi5jcm93ZHNvdXJjZS5n\nb29nbGUuY29tghgqLmRhdGFjb21wdXRlLmdvb2dsZS5jb22CCyouZ29vZ2xlLmNh\nggsqLmdvb2dsZS5jbIIOKi5nb29nbGUuY28uaW6CDiouZ29vZ2xlLmNvLmpwgg4q\nLmdvb2dsZS5jby51a4IPKi5nb29nbGUuY29tLmFygg8qLmdvb2dsZS5jb20uYXWC\nDyouZ29vZ2xlLmNvbS5icoIPKi5nb29nbGUuY29tLmNvgg8qLmdvb2dsZS5jb20u\nbXiCDyouZ29vZ2xlLmNvbS50coIPKi5nb29nbGUuY29tLnZuggsqLmdvb2dsZS5k\nZYILKi5nb29nbGUuZXOCCyouZ29vZ2xlLmZyggsqLmdvb2dsZS5odYILKi5nb29n\nbGUuaXSCCyouZ29vZ2xlLm5sggsqLmdvb2dsZS5wbIILKi5nb29nbGUucHSCEiou\nZ29vZ2xlYWRhcGlzLmNvbYIPKi5nb29nbGVhcGlzLmNughEqLmdvb2dsZXZpZGVv\nLmNvbYIMKi5nc3RhdGljLmNughAqLmdzdGF0aWMtY24uY29tgg9nb29nbGVjbmFw\ncHMuY26CESouZ29vZ2xlY25hcHBzLmNughFnb29nbGVhcHBzLWNuLmNvbYITKi5n\nb29nbGVhcHBzLWNuLmNvbYIMZ2tlY25hcHBzLmNugg4qLmdrZWNuYXBwcy5jboIS\nZ29vZ2xlZG93bmxvYWRzLmNughQqLmdvb2dsZWRvd25sb2Fkcy5jboIQcmVjYXB0\nY2hhLm5ldC5jboISKi5yZWNhcHRjaGEubmV0LmNughByZWNhcHRjaGEtY24ubmV0\nghIqLnJlY2FwdGNoYS1jbi5uZXSCC3dpZGV2aW5lLmNugg0qLndpZGV2aW5lLmNu\nghFhbXBwcm9qZWN0Lm9yZy5jboITKi5hbXBwcm9qZWN0Lm9yZy5jboIRYW1wcHJv\namVjdC5uZXQuY26CEyouYW1wcHJvamVjdC5uZXQuY26CF2dvb2dsZS1hbmFseXRp\nY3MtY24uY29tghkqLmdvb2dsZS1hbmFseXRpY3MtY24uY29tghdnb29nbGVhZHNl\ncnZpY2VzLWNuLmNvbYIZKi5nb29nbGVhZHNlcnZpY2VzLWNuLmNvbYIRZ29vZ2xl\ndmFkcy1jbi5jb22CEyouZ29vZ2xldmFkcy1jbi5jb22CEWdvb2dsZWFwaXMtY24u\nY29tghMqLmdvb2dsZWFwaXMtY24uY29tghVnb29nbGVvcHRpbWl6ZS1jbi5jb22C\nFyouZ29vZ2xlb3B0aW1pemUtY24uY29tghJkb3VibGVjbGljay1jbi5uZXSCFCou\nZG91YmxlY2xpY2stY24ubmV0ghgqLmZscy5kb3VibGVjbGljay1jbi5uZXSCFiou\nZy5kb3VibGVjbGljay1jbi5uZXSCDmRvdWJsZWNsaWNrLmNughAqLmRvdWJsZWNs\naWNrLmNughQqLmZscy5kb3VibGVjbGljay5jboISKi5nLmRvdWJsZWNsaWNrLmNu\nghFkYXJ0c2VhcmNoLWNuLm5ldIITKi5kYXJ0c2VhcmNoLWNuLm5ldIIdZ29vZ2xl\ndHJhdmVsYWRzZXJ2aWNlcy1jbi5jb22CHyouZ29vZ2xldHJhdmVsYWRzZXJ2aWNl\ncy1jbi5jb22CGGdvb2dsZXRhZ3NlcnZpY2VzLWNuLmNvbYIaKi5nb29nbGV0YWdz\nZXJ2aWNlcy1jbi5jb22CF2dvb2dsZXRhZ21hbmFnZXItY24uY29tghkqLmdvb2ds\nZXRhZ21hbmFnZXItY24uY29tghhnb29nbGVzeW5kaWNhdGlvbi1jbi5jb22CGiou\nZ29vZ2xlc3luZGljYXRpb24tY24uY29tgiQqLnNhZmVmcmFtZS5nb29nbGVzeW5k\naWNhdGlvbi1jbi5jb22CFmFwcC1tZWFzdXJlbWVudC1jbi5jb22CGCouYXBwLW1l\nYXN1cmVtZW50LWNuLmNvbYILZ3Z0MS1jbi5jb22CDSouZ3Z0MS1jbi5jb22CC2d2\ndDItY24uY29tgg0qLmd2dDItY24uY29tggsybWRuLWNuLm5ldIINKi4ybWRuLWNu\nLm5ldIIUZ29vZ2xlZmxpZ2h0cy1jbi5uZXSCFiouZ29vZ2xlZmxpZ2h0cy1jbi5u\nZXSCDGFkbW9iLWNuLmNvbYIOKi5hZG1vYi1jbi5jb22CFGdvb2dsZXNhbmRib3gt\nY24uY29tghYqLmdvb2dsZXNhbmRib3gtY24uY29tgh4qLnNhZmVudXAuZ29vZ2xl\nc2FuZGJveC1jbi5jb22CDSouZ3N0YXRpYy5jb22CFCoubWV0cmljLmdzdGF0aWMu\nY29tggoqLmd2dDEuY29tghEqLmdjcGNkbi5ndnQxLmNvbYIKKi5ndnQyLmNvbYIO\nKi5nY3AuZ3Z0Mi5jb22CECoudXJsLmdvb2dsZS5jb22CFioueW91dHViZS1ub2Nv\nb2tpZS5jb22CCyoueXRpbWcuY29tggthbmRyb2lkLmNvbYINKi5hbmRyb2lkLmNv\nbYITKi5mbGFzaC5hbmRyb2lkLmNvbYIEZy5jboIGKi5nLmNuggRnLmNvggYqLmcu\nY2+CBmdvby5nbIIKd3d3Lmdvby5nbIIUZ29vZ2xlLWFuYWx5dGljcy5jb22CFiou\nZ29vZ2xlLWFuYWx5dGljcy5jb22CCmdvb2dsZS5jb22CEmdvb2dsZWNvbW1lcmNl\nLmNvbYIUKi5nb29nbGVjb21tZXJjZS5jb22CCGdncGh0LmNuggoqLmdncGh0LmNu\nggp1cmNoaW4uY29tggwqLnVyY2hpbi5jb22CCHlvdXR1LmJlggt5b3V0dWJlLmNv\nbYINKi55b3V0dWJlLmNvbYIUeW91dHViZWVkdWNhdGlvbi5jb22CFioueW91dHVi\nZWVkdWNhdGlvbi5jb22CD3lvdXR1YmVraWRzLmNvbYIRKi55b3V0dWJla2lkcy5j\nb22CBXl0LmJlggcqLnl0LmJlghphbmRyb2lkLmNsaWVudHMuZ29vZ2xlLmNvbYIb\nZGV2ZWxvcGVyLmFuZHJvaWQuZ29vZ2xlLmNughxkZXZlbG9wZXJzLmFuZHJvaWQu\nZ29vZ2xlLmNughhzb3VyY2UuYW5kcm9pZC5nb29nbGUuY26CGmRldmVsb3Blci5j\naHJvbWUuZ29vZ2xlLmNughh3ZWIuZGV2ZWxvcGVycy5nb29nbGUuY24wIQYDVR0g\nBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6Athito\ndHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxYzMvUXFGeGJpOU00OGMuY3JsMIIBBAYK\nKwYBBAHWeQIEAgSB9QSB8gDwAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/m\nZ0xaOnQAAAGMynwDqQAABAMARzBFAiAX37biBR0Q8bMpnI8+2HWqsiLE6EiVFjuF\nXIxNzZCSEwIhAMTVmRn+Bafev3ZTqWu86aNJXuucGo/UMlyK0v9OC9fDAHYA2ra/\naz+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGMynwHngAABAMARzBFAiAv\n/qA5IziL8IrD47kTbTdUAgUfWUGh8L0QaZfUQqYM5gIhANC5Bz/d8+C3wtV7jVy5\n41PrgxqTC2GkN+sas67Nf6G+MA0GCSqGSIb3DQEBCwUAA4IBAQAmddtHSmLA50Yo\nOd2CP4NeKt20KOnz7OI10gzQUwSvz0GOrKx3ZtxJgdTjT57ii/drsZZFYW+TeXSN\nzPrCm1jEx6P0vRXmtm81mjWK6yGVpHs3huC4DL9KE4GxK+BN8ojLn0cDDGF8p5Q2\neJdO0+YHD2/VgLmuAYjUGZGdC3U7P+l2ByM2TQ5xWzEMjGGyUvMc53X9axrjg3Gq\nUCB5pIIL7rzhiGzd9UQLMrTjnh2mRWSD35klPkDT1+4/CtmSIeV6iSyoFIBvEx81\nPaQaAcyGYV4rCgCOCeHkjiOkJU2pMQisqFPkQB8XQfsGKGrtioY2SbAC3XQ90Uk3\ncu8DxNov\n-----END CERTIFICATE-----\n", "peer_certificate_key": null, - "validation_time": "2023-10-06T14:38:35+00:00", + "validation_time": "2024-01-02T13:02:53+00:00", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], "expected_result": "SUCCESS", "expected_peer_name": { "kind": "DNS", - "value": "fastly.com" + "value": "google.com" }, "expected_peer_names": [], "max_chain_depth": null }, { - "id": "online::facebook.com", + "id": "online::storage.googleapis.com", "conflicts_with": [], "features": [], - "description": "A valid chain for `facebook.com`.", + "description": "A valid chain for `storage.googleapis.com`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n+OkuE6N36B9K\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nbP6MvPJwNQzcmRk13NfIRmPVNnGuV/u3gm3c\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIIEsTCCA5mgAwIBAgIQBOHnpNxc8vNtwCtCuF0VnzANBgkqhkiG9w0BAQsFADBs\nMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3\nd3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j\nZSBFViBSb290IENBMB4XDTEzMTAyMjEyMDAwMFoXDTI4MTAyMjEyMDAwMFowcDEL\nMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3\nLmRpZ2ljZXJ0LmNvbTEvMC0GA1UEAxMmRGlnaUNlcnQgU0hBMiBIaWdoIEFzc3Vy\nYW5jZSBTZXJ2ZXIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2\n4C/CJAbIbQRf1+8KZAayfSImZRauQkCbztyfn3YHPsMwVYcZuU+UDlqUH1VWtMIC\nKq/QmO4LQNfE0DtyyBSe75CxEamu0si4QzrZCwvV1ZX1QK/IHe1NnF9Xt4ZQaJn1\nitrSxwUfqJfJ3KSxgoQtxq2lnMcZgqaFD15EWCo3j/018QsIJzJa9buLnqS9UdAn\n4t07QjOjBSjEuyjMmqwrIw14xnvmXnG3Sj4I+4G3FhahnSMSTeXXkgisdaScus0X\nsh5ENWV/UyU50RwKmmMbGZJ0aAo3wsJSSMs5WqK24V3B3aAguCGikyZvFEohQcft\nbZvySC/zA/WiaJJTL17jAgMBAAGjggFJMIIBRTASBgNVHRMBAf8ECDAGAQH/AgEA\nMA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw\nNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy\ndC5jb20wSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29t\nL0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUVWUm9vdENBLmNybDA9BgNVHSAENjA0MDIG\nBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ\nUzAdBgNVHQ4EFgQUUWj/kK8CB3U8zNllZGKiErhZcjswHwYDVR0jBBgwFoAUsT7D\naQP4v0cB1JgmGggC72NkK8MwDQYJKoZIhvcNAQELBQADggEBABiKlYkD5m3fXPwd\naOpKj4PWUS+Na0QWnqxj9dJubISZi6qBcYRb7TROsLd5kinMLYBq8I4g4Xmk/gNH\nE+r1hspZcX30BJZr01lYPf7TMSVcGDiEo+afgv2MW5gxTs14nhr9hctJqvIni5ly\n/D6q1UEL2tU2ob8cbkdJf17ZSHwD2f2LSaCYJkJA69aSEaRkCldUxPUd1gJea6zu\nxICaEnL6VpPX/78whQYwvwt/Tv9XBZ0k7YXDK/umdaisLRbvfXknsuvCnQsH6qqF\n0wGjIChBWUMo0oHjqvbsezt3tkBigAVBRQHvFwY+3sAzm2fTYS5yh+Rp/BIAV0Ae\ncPUeybQ=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIFljCCA36gAwIBAgINAgO8U1lrNMcY9QFQZjANBgkqhkiG9w0BAQsFADBHMQsw\nCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU\nMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjAwODEzMDAwMDQyWhcNMjcwOTMwMDAw\nMDQyWjBGMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp\nY2VzIExMQzETMBEGA1UEAxMKR1RTIENBIDFDMzCCASIwDQYJKoZIhvcNAQEBBQAD\nggEPADCCAQoCggEBAPWI3+dijB43+DdCkH9sh9D7ZYIl/ejLa6T/belaI+KZ9hzp\nkgOZE3wJCor6QtZeViSqejOEH9Hpabu5dOxXTGZok3c3VVP+ORBNtzS7XyV3NzsX\nlOo85Z3VvMO0Q+sup0fvsEQRY9i0QYXdQTBIkxu/t/bgRQIh4JZCF8/ZK2VWNAcm\nBA2o/X3KLu/qSHw3TT8An4Pf73WELnlXXPxXbhqW//yMmqaZviXZf5YsBvcRKgKA\ngOtjGDxQSYflispfGStZloEAoPtR28p3CwvJlk/vcEnHXG0g/Zm0tOLKLnf9LdwL\ntmsTDIwZKxeWmLnwi/agJ7u2441Rj72ux5uxiZ0CAwEAAaOCAYAwggF8MA4GA1Ud\nDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0T\nAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUinR/r4XN7pXNPZzQ4kYU83E1HScwHwYD\nVR0jBBgwFoAU5K8rJnEaK0gnhS9SZizv8IkTcT4waAYIKwYBBQUHAQEEXDBaMCYG\nCCsGAQUFBzABhhpodHRwOi8vb2NzcC5wa2kuZ29vZy9ndHNyMTAwBggrBgEFBQcw\nAoYkaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzcjEuZGVyMDQGA1UdHwQt\nMCswKaAnoCWGI2h0dHA6Ly9jcmwucGtpLmdvb2cvZ3RzcjEvZ3RzcjEuY3JsMFcG\nA1UdIARQME4wOAYKKwYBBAHWeQIFAzAqMCgGCCsGAQUFBwIBFhxodHRwczovL3Br\naS5nb29nL3JlcG9zaXRvcnkvMAgGBmeBDAECATAIBgZngQwBAgIwDQYJKoZIhvcN\nAQELBQADggIBAIl9rCBcDDy+mqhXlRu0rvqrpXJxtDaV/d9AEQNMwkYUuxQkq/BQ\ncSLbrcRuf8/xam/IgxvYzolfh2yHuKkMo5uhYpSTld9brmYZCwKWnvy15xBpPnrL\nRklfRuFBsdeYTWU0AIAaP0+fbH9JAIFTQaSSIYKCGvGjRFsqUBITTcFTNvNCCK9U\n+o53UxtkOCcXCb1YyRt8OS1b887U7ZfbFAO/CVMkH8IMBHmYJvJh8VNS/UKMG2Yr\nPxWhu//2m+OBmgEGcYk1KCTd4b3rGS3hSMs9WYNRtHTGnXzGsYZbr8w0xNPM1IER\nlQCh9BIiAfq0g3GvjLeMcySsN1PCAJA/Ef5c7TaUEDu9Ka7ixzpiO2xj2YC/WXGs\nYye5TBeg2vZzFb8q3o/zpWwygTMD0IZRcZk0upONXbVRWPeyk+gB9lm+cZv9TSjO\nz23HFtz30dZGm6fKa+l3D/2gthsjgx0QGtkJAITgRNOidSOzNIb2ILCkXhAd4FJG\nAJ2xDx8hcFH1mt0G/FX0Kw4zd8NLQsLxdxP8c4CU6x+7Nz/OAipmsHMdMqUybDKw\njuDEI/9bfU1lcKwrmz3O2+BtjjKAvpafkmO8l7tdufThcV4q5O8DIrGKZTqPwJNl\n1IXNDw9bg1kWRxYtnCQ6yICmJhSFm/Y3m6xv+cXDBlHz4n/FsRC6UfTd\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nDSu+UPyZkKMsnNNKHQ==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n7AcEDwxmivUZxDf/rOyq4lTS5PYJVs1beCsM1g==\n-----END CERTIFICATE-----\n", "peer_certificate_key": null, - "validation_time": "2023-11-10T00:00:01+00:00", + "validation_time": "2024-01-02T13:14:17+00:00", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], "expected_result": "SUCCESS", "expected_peer_name": { "kind": "DNS", - "value": "facebook.com" + "value": "storage.googleapis.com" }, "expected_peer_names": [], "max_chain_depth": null }, { - "id": "online::cloudflare.com", + "id": "online::apple.com", "conflicts_with": [], "features": [], - "description": "A valid chain for `cloudflare.com`.", + "description": "A valid chain for `apple.com`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nR9I4LtD+gdwyah617jzV/OeBHRnDJELqYzmp\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nsycX\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n6DEdfgkfCv4+3ao8XnTSrLE=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nFdg3+7LWIiW9sUjtJC6kGmRyGm6vV4oAhEDd9jdk4q+7b5zlid4=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nz3cN+ZmO/PfjttCc9dmrWuJ6khAR\n-----END CERTIFICATE-----\n", "peer_certificate_key": null, - "validation_time": "2024-01-30T00:00:01+00:00", + "validation_time": "2023-12-01T22:17:48+00:00", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], "expected_result": "SUCCESS", "expected_peer_name": { "kind": "DNS", - "value": "cloudflare.com" + "value": "apple.com" }, "expected_peer_names": [], "max_chain_depth": null }, { - "id": "online::google.com", + "id": "online::cloudflare.com", "conflicts_with": [], "features": [], - "description": "A valid chain for `google.com`.", + "description": "A valid chain for `cloudflare.com`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nbP6MvPJwNQzcmRk13NfIRmPVNnGuV/u3gm3c\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIDdzCCAl+gAwIBAgIEAgAAuTANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJ\nRTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD\nVQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTAwMDUxMjE4NDYwMFoX\nDTI1MDUxMjIzNTkwMFowWjELMAkGA1UEBhMCSUUxEjAQBgNVBAoTCUJhbHRpbW9y\nZTETMBEGA1UECxMKQ3liZXJUcnVzdDEiMCAGA1UEAxMZQmFsdGltb3JlIEN5YmVy\nVHJ1c3QgUm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKMEuyKr\nmD1X6CZymrV51Cni4eiVgLGw41uOKymaZN+hXe2wCQVt2yguzmKiYv60iNoS6zjr\nIZ3AQSsBUnuId9Mcj8e6uYi1agnnc+gRQKfRzMpijS3ljwumUNKoUMMo6vWrJYeK\nmpYcqWe4PwzV9/lSEy/CG9VwcPCPwBLKBsua4dnKM3p31vjsufFoREJIE9LAwqSu\nXmD+tqYF/LTdB1kC1FkYmGP1pWPgkAx9XbIGevOF6uvUA65ehD5f/xXtabz5OTZy\ndc93Uk3zyZAsuT3lySNTPx8kmCFcB5kpvcY67Oduhjprl3RjM71oGDHweI12v/ye\njl0qhqdNkNwnGjkCAwEAAaNFMEMwHQYDVR0OBBYEFOWdWTCCR1jMrPoIVDaGezq1\nBE3wMBIGA1UdEwEB/wQIMAYBAf8CAQMwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3\nDQEBBQUAA4IBAQCFDF2O5G9RaEIFoN27TyclhAO992T9Ldcw46QQF+vaKSm2eT92\n9hkTI7gQCvlYpNRhcL0EYWoSihfVCr3FvDB81ukMJY2GQE/szKN+OMY3EU/t3Wgx\njkzSswF07r51XgdIGn9w/xZchMB5hbgF/X++ZRGjD8ACtPhSNzkE1akxehi/oCr0\nEpn3o0WC4zxe9Z2etciefC7IpJ5OCBRLbf1wbWsaY71k5h+3zvDyny67G7fyUIhz\nksLi4xaNmjICq44Y3ekQEe5+NauQrz4wlHrQMz2nZQ/1/I6eYs9HRCwBXbsdtTLS\nR9I4LtD+gdwyah617jzV/OeBHRnDJELqYzmp\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n1IXNDw9bg1kWRxYtnCQ6yICmJhSFm/Y3m6xv+cXDBlHz4n/FsRC6UfTd\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n6DEdfgkfCv4+3ao8XnTSrLE=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\ncu8DxNov\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", "peer_certificate_key": null, - "validation_time": "2024-01-02T13:02:53+00:00", + "validation_time": "2024-01-30T00:00:01+00:00", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], "expected_result": "SUCCESS", "expected_peer_name": { "kind": "DNS", - "value": "google.com" + "value": "cloudflare.com" }, "expected_peer_names": [], "max_chain_depth": null }, { - "id": "online::amazon.com", + "id": "online::microsoft.com", "conflicts_with": [], "features": [], - "description": "A valid chain for `amazon.com`.", + "description": "A valid chain for `microsoft.com`.", "validation_kind": "SERVER", "trusted_certs": [ "-----BEGIN CERTIFICATE-----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\nMrY=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n92hiHuwZ4STyhxGs6QiA\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n+ItQCmz7TjRH4ptX5Zh9pw==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n5KjJIfMyy2OB69kiVncD1qAMZUHykpq/G+7wA8gXDA==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nnHAJz0DOdnJ5/ED7jvQJm+GyWraLHvX1nw==\n-----END CERTIFICATE-----\n", "peer_certificate_key": null, - "validation_time": "2023-07-15T00:00:01+00:00", + "validation_time": "2023-12-18T22:25:04+00:00", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], "expected_result": "SUCCESS", "expected_peer_name": { "kind": "DNS", - "value": "amazon.com" + "value": "microsoft.com" }, "expected_peer_names": [], "max_chain_depth": null }, { - "id": "online::aws.amazon.com", + "id": "online::stackoverflow.com", "conflicts_with": [], "features": [], - "description": "A valid chain for `aws.amazon.com`.", + "description": "A valid chain for `stackoverflow.com`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF\nADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6\nb24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL\nMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv\nb3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXj\nca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM\n9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qw\nIFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6\nVOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L\n93FcXmn/6pUCyziKrlA4b9v7LWIbxcceVOF34GfID5yHI9Y/QCB/IIDEgEw+OyQm\njgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC\nAYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3DQEBCwUA\nA4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDI\nU5PMCCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUs\nN+gDS63pYaACbvXy8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vv\no/ufQJVtMVT8QtPHRh8jrdkPSHCa2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU\n5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2xJNDd2ZhwLnoQdeXeGADbkpy\nrqXRfboQnoZsG4q5WTP468SQvvG5\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n/q4AaOeMSQ+2b1tbFfLn\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nxRRrwszrzX/WWGm6wyB+f7C4\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIICxjCCAk2gAwIBAgIRALO93/inhFu86QOgQTWzSkUwCgYIKoZIzj0EAwMwTzEL\nMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2VhcmNo\nIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDIwHhcNMjAwOTA0MDAwMDAwWhcN\nMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3MgRW5j\ncnlwdDELMAkGA1UEAxMCRTEwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQkXC2iKv0c\nS6Zdl3MnMayyoGli72XoprDwrEuf/xwLcA/TmC9N/A8AmzfwdAVXMpcuBe8qQyWj\n+240JxP2T35p0wKZXuskR5LBJJvmsSGPwSSB/GjMH2m6WPUZIvd0xhajggEIMIIB\nBDAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMB\nMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFFrz7Sv8NsI3eblSMOpUb89V\nyy6sMB8GA1UdIwQYMBaAFHxClq7eS0g7+pL4nozPbYupcjeVMDIGCCsGAQUFBwEB\nBCYwJDAiBggrBgEFBQcwAoYWaHR0cDovL3gyLmkubGVuY3Iub3JnLzAnBgNVHR8E\nIDAeMBygGqAYhhZodHRwOi8veDIuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYG\nZ4EMAQIBMA0GCysGAQQBgt8TAQEBMAoGCCqGSM49BAMDA2cAMGQCMHt01VITjWH+\nDbo/AwCd89eYhNlXLr3pD5xcSAQh8suzYHKOl9YST8pE9kLJ03uGqQIwWrGxtO3q\nYJkgsTgDyj2gJrjubi1K9sZmHzOa25JK1fUpE8ZwYii6I4zPPS/Lgul/\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nHBHbXS573G/ixn2m\n-----END CERTIFICATE-----\n", "peer_certificate_key": null, - "validation_time": "2024-01-18T00:00:01+00:00", + "validation_time": "2024-01-14T18:00:57+00:00", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], "expected_result": "SUCCESS", "expected_peer_name": { "kind": "DNS", - "value": "aws.amazon.com" + "value": "stackoverflow.com" }, "expected_peer_names": [], "max_chain_depth": null