diff --git a/limbo.json b/limbo.json index 0c839225..2d3a29f3 100644 --- a/limbo.json +++ b/limbo.json @@ -8,12 +8,12 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> intermediate (pathlen:0) -> EE\n```\n\nThis is a \"trivial\" verification: the intermediate has a `pathlen:0`\nconstraint, but the leaf is an end entity and is therefore allowed.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\ndkhQNHtti8cPXg7WgucBQJ1fZc4=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUYzVqsyWjrOpHCSqePq+m7CLtIvYwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASlopLBsNbpl7TeO4LWTV9+v2PtX8tL3e4ucPqa\nDfV4lBlqNLZtj+X55QTpPJbu2hGdRTdthmyWr17MPX4SytIto1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUufjK+4vr2h9LsYF/LOSffysGbm0wCgYIKoZIzj0EAwIDSAAwRQIh\nAN8Zi5R1BMW43oXwLSgZt7d2fIBN0//EuG7g/RshAhF7AiB8ulWLKJ572ncCC2bu\nQZvYBuHqGUkNXRMLzA2gfUesfA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nxWoCIQC7lKurp0QdefAMi7dw6BBVLYf+phRhi22Aacl8Feuyjg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\naAIhALUgR3gYnuEWA5Vk8N99Lqf4WR9+4x40E2nnvWzZAxFh\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/TCCAaOgAwIBAgIURhtc0juIcCmyUTaMwXH2GJwHakgwCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwNTY4ODM3MzkzMTk5ODQ3Nzc5NzU1MzMzMTY3NzM5NTY5MjI2\nMDM0NTA5MzQ5MjI3MSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTAwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEPfya\nvQx6RFHrTZNQ1WxkCHDAcm3ObE4jRf9i5V+G+kxNnx33tAdSaGDjkVJKDBzGD440\nSMHZqJYnf7JkftW0vaN8MHowHQYDVR0OBBYEFLN+o4tP8F0dh2G5CjwUHdwORQUs\nMB8GA1UdIwQYMBaAFJmepwIWaJaw5x6fAJVZIJGdJWrsMAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNIADBFAiAiA3jPkonq2e8oCyHr0tYFGfweR8L7irah5Jh5uEf7IQIh\nALzE7HQ9/DZZR9Ss7DPkPlY/hLUCF9JbVnSIALPKTnjC\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/DCCAaOgAwIBAgIUYOcdbMGa2k0bqmp9Fv/yGPNX4fIwCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwNTY2MzgxMzIwNjY5OTY1OTY4NzI3NTIxNTc2OTYyMDk4NTcy\nMDYyMjY2MDQxMDc4MSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTAwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE03kr\nffDg31/GuZO3ANLccyIfZlfQ8Dkns/JSx4r/fD/4VaIYAv9QoscHo0u0uYrBB5qi\n9f5vDI6zlDNzwD9IL6N8MHowHQYDVR0OBBYEFNJ36aA1smlWsb1ZMHFPbYj7q9jf\nMB8GA1UdIwQYMBaAFLVHX0A21pPsJPT+1BIxFMR5T2Y0MAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNHADBEAiB4Wqssx8uRgbzgOZqd6PcOjQSYGSXMgiDh1E+RnggEBwIg\nGS5Q4kVPsszrW34KWAWYv9kOcvEV2ilJyjjAarsNL6E=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -33,12 +33,12 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> intermediate (pathlen:1) -> EE\n```\n\nThis is a \"trivial\" verification: the intermediate has a `pathlen:1`\nconstraint, but the leaf is an end entity and is therefore allowed.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nkZ9DJvXcU0MZ9rwiiU/BYqvS\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nCzLvdlEIAEcNWRS/Fpbl6ihq3g==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nvgIgR9hflICqvGzaFR3cxncjK5KlCuRQw04w8HKGsImp5ic=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIICATCCAaagAwIBAgIUJzWeLX7znXwLnD/S0LsBbI3N7egwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBnMTkwNwYDVQQLDDAxNjY3Nzk3MjIzODc0NzQ2MTc5MjI3\nMzgyMTM2MTQ3MzU1OTA1NjYwMDg2NTI1NjkxKjAoBgNVBAMMIXg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tMTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA\nBNFjY+H0bmn2H46CnSYGpRdSnHhyf2/oH/GoxPzo+vLhzv3mwZzRtokMIwrtfiNc\nRwgNZu+RI6G2oS5DFCVNUBajezB5MBIGA1UdEwEB/wQIMAYBAf8CAQEwCwYDVR0P\nBAQDAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB8GA1UdIwQYMBaAFKoyPSKd\nWPmiCCpw9t5gR3pjUQmnMB0GA1UdDgQWBBQl6jVjFhpXgoGjLgSOvPsFj1JQxTAK\nBggqhkjOPQQDAgNJADBGAiEAl0JGsu0clchDkSL8wh/iX/2x/mYA8kgYY7+boFJh\npA8CIQC3lOcNYop1MrF/peL32flmburzOeQEz/qCcRyzsdQncw==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/TCCAaOgAwIBAgIUMmd4rOy5d0pXIi+/GE6klKlp2y4wCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwNTYxNTg3Mzg1MDgzMDA2MDM5Mjg4NjYyOTI2MzM2NzgzMzM0\nNjU2MzEwNDQ1NzU3MSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTEwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEKBjf\n+aUXNwoQKzMHT0NQY5Bf8z8pt4Kq274DxgoHKvW3v1bvKQVFAWDdz3jjstsuHTj/\noNT27PhFHHXKJzzdf6N8MHowHQYDVR0OBBYEFCGxl/kN5lFfETlZJAXAbZA4NG2j\nMB8GA1UdIwQYMBaAFKbWpfCrYIRt75e3C5ml05xd0llVMAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNIADBFAiBhu9Tk9Fkbd2ZuW2+n/bOfbu2hv5iUJRW67nBp35P+nwIh\nAPBWouxh7krzUilizVarcmCoHtMC9QpaVcoQmdlXEWSu\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\ndEn/KH2UfPdyIGSpg5yj7u/OYhr6SDqu6Hv5fN45IbE=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -58,12 +58,12 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> intermediate (pathlen:2) -> EE\n```\n\nThis is a \"trivial\" verification: the intermediate has a `pathlen:2`\nconstraint, but the leaf is an end entity and is therefore allowed.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nwnw3HB7rK2pHQp5c4MkHM19LS2A=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nnb+WZZFeyrJnGeT6dL/G7B2hw2k=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nXAIhALcW49lSXbwqXQTfxMOCx/UxH+dUGEI0zIJVb16oRPtm\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nQwIgSggdGCVOpFRpS39nGuqHMcQ7viYKjEeZVG6+FZ+c/ls=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/TCCAaOgAwIBAgIUUTpk2LI7u3XpOMViC32M695qIj8wCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwMTI1Mjg5MDQ3MDQyNTE0MzQ1NDMyNjYwODQxMzAwODg5MzE2\nNDQyNjQ1MjA1OTI3MSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTIwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4pHH\nWruCbZnQvALK/l+PgxbBG8s4m5GA5Ai1y0KbJqZOv22S9v8xcC/GhSkRX60aVznS\nVkwPmdmfFdXA/5MHwqN8MHowHQYDVR0OBBYEFKLwIpaN5mF00d5nBEV235eACN72\nMB8GA1UdIwQYMBaAFBORb4ZebrPVEy1eOdC+D3WjHGArMAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNIADBFAiBiYyRH3Ne4Mh3XIRAN7uSbZmXchio++tDAwGNSrIAl2AIh\nAIJxxVmePF98yCw/i0dz0e2i/i+9RMUy9mDDuPynXfGi\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIAxamGsZ6M0Vl+KnxL58QxgRF7gufTpuh0ZKyAeJMNuV\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -83,12 +83,12 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> intermediate (pathlen:0) -> intermediate (pathlen:0)\n```\n\nThis is, unintuitively, a valid chain construction: RFC 5280 4.2.1.9\nnotes that the leaf certificate in a validation path is definitionally\nnot an intermediate, meaning that it is not included in the maximum\nnumber of intermediate certificates that may follow a path length\nconstrained CA certificate:\n\n> Note: The last certificate in the certification path is not an intermediate\n> certificate, and is not included in this limit. Usually, the last certificate\n> is an end entity certificate, but it can be a CA certificate.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nvCvvgHNZsaQG0WB4daHFfI+m\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUTkZhgOw1WTQ+r6TkG1tH/8acLyEwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATaH4dcB2Ko/kp04MoPw4HT3mNQlGleLRuNMzsn\nfk3hW0QzypbCN/I2F86Y9ImeNtgjM2jcrq/iWXHsJbfIwsZoo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUiaIcadxMy5XKI60iBCsmqUu8QMAwCgYIKoZIzj0EAwIDSAAwRQIh\nANwWMj4V6GIYbQiu+ZvfgmTKLeyrLwyfdKGHAVEGaYHaAiAvRaUhrxuSSanhlu2k\nyyGv9gBe2sCA+/wEdeauWgvzPw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n6QIhANPhnzesnhcG+jfgHFoKSXmzKjnIJqDLxkKgeYEgoWJG\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nVwIgU4zuQrOop9/WLUZsn2dpeMIYWj4YL3aG6OzG4Gmag4o=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nKCdYe1LhxdxNB/eHU/iNZJw=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICTjCCAfOgAwIBAgIUBrwfTa1bgf+8V81RrHYvNoyi1sIwCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwNDQ2ODcwODI2MDUwMDA5NzgxMTQ2NjAyODQ3NDkwODQxMjc1\nNzEyNTM1Mjc3MzQ1MSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTAwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMGcxOTA3\nBgNVBAsMMDMwOTIxMDk0MTM3MTA4OTc3MzQyODAyNzkyOTkzMDY2NDEwOTE0NTg0\nMjI3MzQ2NzEqMCgGA1UEAwwheDUwOS1saW1iby1pbnRlcm1lZGlhdGUtcGF0aGxl\nbi0wMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEp86RpAqRc6LJj0/Fw/tmWPLf\nGhpLPKNfd88ll0bfxTG6vo3af6CQZBHWDY63QKN9oTzUozEIMI97Plt+ayZ4L6N7\nMHkwEgYDVR0TAQH/BAgwBgEB/wIBADALBgNVHQ8EBAMCAgQwFgYDVR0RBA8wDYIL\nZXhhbXBsZS5jb20wHwYDVR0jBBgwFoAUsZYCQltgi+18Uwmdk7/krcy0IUAwHQYD\nVR0OBBYEFDmmSJJgemJFoAh9CAe3HGVIuguoMAoGCCqGSM49BAMCA0kAMEYCIQDw\nzDi4AX5N8xFh87CUz1ZCtPBdJNPPepGD23XLpVRcTAIhAM4J9ph1/bEUDrTnqA68\nwMqyYdn2ORfF11k66FdoAHhp\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -108,13 +108,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate (pathlen:0) -> intermediate (pathlen:0) -> EE\n```\n\nThis violates the first intermediate's `pathlen:0` constraint,\nwhich requires that any subsequent certificate be an end-entity and not\na CA itself.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIUYWLXrWO5Wr7ZNu/G2V7pBhO2oPowCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARXdukbRGKzzuwzoiBEduexEQK5WDQ7gxKNUd23\nBBaXsFhMpLmQjAclR4dcqnBLfMSNJosKOvRVVj4NrEtu/ubVo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUCY5lN21Cyc0QSe2DPvUkC0WdcBwwCgYIKoZIzj0EAwIDRwAwRAIg\nV1S1xZr9gDoJOpPQlBMd2xUnYODys/48X+VHltRfeLoCIDnKToFFQYaMEWfyqfoC\nPiE41M7TuD6b6NGf+/rLkZbU\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nTBA4XI/1NcbQWpf2Rvp2qL1AIA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nwAcCIQCMRSyku90qbqgAuaKFh7G/B8oMWBiw4RZ89u/4fRezxQ==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nRwI7bRUfpYDjWHuk9T+5\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nCgIhAJv82qJE9VsWOipuNQ0YSnTcHUMDMdOPTHWM2EkjLyC2\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----\nMIICSjCCAfGgAwIBAgIUYgwIzrZx29AkRtl4Qk4sDd/6U6EwCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwMzA5MjE2NjA2MzE5ODA5NDQwNTEzMTk2NjkwNzk3NTA0OTA4\nNTc2MTE3NjU3MTg4MSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTAwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMGUxNzA1\nBgNVBAsMLjk0MzM2NjA5MDAzMjk5MTQ5NDkzMjg4Nzc2NTIyOTYyNDczODkzNDY4\nNTc0MzcxKjAoBgNVBAMMIXg1MDktbGltYm8taW50ZXJtZWRpYXRlLXBhdGhsZW4t\nMDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABB/ESt1MNvHjx3NW36LfqNWEihgD\nPsSxMA87/bngNxsDaP4Ma1/Lw5TIh9X2scWPMfy9n5yg2LcgeU1Ptz0xkUWjezB5\nMBIGA1UdEwEB/wQIMAYBAf8CAQAwCwYDVR0PBAQDAgIEMBYGA1UdEQQPMA2CC2V4\nYW1wbGUuY29tMB8GA1UdIwQYMBaAFBbPeWa/Y1OdhctXCi8n2M1tj/euMB0GA1Ud\nDgQWBBQcXcoUquesg/jVq33w/yooaPsLGTAKBggqhkjOPQQDAgNHADBEAiA2f3xH\nZcYnhvJOYnWPTvTWSqJa6gbg0b/++cBrhRRy0QIgWKi8mkk+kj/G8lazu+F2Yx0K\nPuoU9e4VGnl6hkZ3ZB4=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAO7QipYfdCpS7p3uG1AFLP+MhuY1VxAAgBunsYKawKBE\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nCfczb0BJD3PAZ10yJ+Toe5XTrnYVI+upnGkCxwmx9Q==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -134,13 +134,13 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> intermediate (pathlen:1) -> intermediate (pathlen:2) -> EE\n```\n\nThis is a less straightforward case as the second intermediate's `pathlen:2`\nconstraint seems to contradict the first intermediate's `pathlen:1`\nconstraint.\n\nRFC 5280 permits this as part of supporting multiple validation paths.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nHOSyPID8HN/f2qohZdRWag7U\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nOlOYOXRk61oFLLai6PVwdm0C\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nKgIhANyiI/w2cKBb7x+c52gIE6sAUuGWo4k2qiYROffJuEnX\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nVegMyYIfFnCrBFKUsUM=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nYAIhALZl7XkDuJfCfX8NP7Rij5VPzGy1To73i9zeB81UVz60\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nmS2AUpnIoPhaLPs73zlIF34=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\naVSUXAY5EXJOu7g+RyUBIgc2G7EIIPOyRMlHzvMJ6oE=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIA7ZdXgkXhFEKZBu+qKnQ0Ai127TtTcKj5z5YU9ZV5hc\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -160,14 +160,14 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate (pathlen:1) -> intermediate (pathlen:0) -> intermediate (pathlen:0) -> EE\n```\n\nThis violates the second intermediate's `pathlen:0` constraint, which\nforbids any subsequent issuing certificates (which the third intermediate\nis).", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\ngC9E7vvidcnCGc/2/oinzzRRKA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIUc/sVXpyqC7hTmLXfvAvEeTjfYuwwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQ0DsOmh64B+GShLGbuxOWsaSXkC65vVcu2IpV3\nbMyN5Zn7jyacBznyNOElkh6onC4jXmHAuKVNDzPd9KZDlA7Do1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQU6lpnszlmHWB2cxsMioJDwZSXELMwCgYIKoZIzj0EAwIDRwAwRAIg\ndsRGLz4BgWNXUeN4+hIgvt8R0rTZ2fzOx8FzSp0oyTcCIG8gW0ZDAXkFxP6t5aP2\nlnWA+9BTl1c+R4SwHmho03f9\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nVwoCIQCcQgsKJ8psvEOgmgK5EXLaJY23cKqvrvsOVuyb5ymDMw==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----\nMIICTTCCAfOgAwIBAgIUCr3x4vrcVZNptAU80FEpAgzhJwwwCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwMTg2ODA2NDQxMjQ2MDA2ODA2NDUzMTI5MTc2OTEzNTkzMzMy\nNjI0MTAzMzMzOTEwMSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTEwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMGcxOTA3\nBgNVBAsMMDM5NTE3Mzg5NTg0NjE2MjAzNzczOTA5MzU3OTMwMzM2MjA4NDg5MjA5\nMjc2MTQ4NjEqMCgGA1UEAwwheDUwOS1saW1iby1pbnRlcm1lZGlhdGUtcGF0aGxl\nbi0wMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEqh8e09o3VkJ4IH4O5hb9x12g\n+TALef15+tqzNiWiQab6pSBBBej390b46GhwWc4RBTRDbXa0qvlbYVgo3zNE1aN7\nMHkwEgYDVR0TAQH/BAgwBgEB/wIBADALBgNVHQ8EBAMCAgQwFgYDVR0RBA8wDYIL\nZXhhbXBsZS5jb20wHwYDVR0jBBgwFoAUuKX3xafMFoKtwvwP1wu5YPMPsrYwHQYD\nVR0OBBYEFC1a4jtwtXG9tJ8w3csUHxo7N5bwMAoGCCqGSM49BAMCA0gAMEUCIQC4\n3+MhCcQ0oDygNJqe2TuTZbXXz6UBAZ5rOyMg5r6TPAIgV8n2743qFwnGE50stul1\nNpG2CDP2R9YrLx0dapqmQi8=\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----\nMIICSzCCAfKgAwIBAgIUWq8mPUo0RBrD9B2+GQ7AB56y+FQwCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwMzk1MTczODk1ODQ2MTYyMDM3NzM5MDkzNTc5MzAzMzYyMDg0\nODkyMDkyNzYxNDg2MSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTAwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMGYxODA2\nBgNVBAsMLzYxMzI1ODE5ODQ4OTM2MjAxMzA2NzkyNjU2MzE5NDQzNjIwMTIxMDk4\nMTM1MzA4MSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1wYXRobGVu\nLTAwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQW/202m1w8OCOiZWug9fYTQi0c\nvE/HyuQaI8lEVOQpMtluj/HV9oLrtN9OEhh7IT82oPOTItgDZD4TvrRTJtLwo3sw\neTASBgNVHRMBAf8ECDAGAQH/AgEAMAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtl\neGFtcGxlLmNvbTAfBgNVHSMEGDAWgBQtWuI7cLVxvbSfMN3LFB8aOzeW8DAdBgNV\nHQ4EFgQUQ+jugDLMiDiPrZkNvbQ4GFrq21cwCgYIKoZIzj0EAwIDRwAwRAIgRA9h\nf56IAu1QmlFEJb4710trghUDKsrdlfgDNhs/tB8CIAvtI/dpXEZM9+BN+ZTAOaDu\n1+PRyDH26x6I/CPYz6Ln\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nf7oCICoo/VQcI62Be3U3Ph+i7y4cGBaeY3vSVsX8fcXRc5uu\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\n4iPhkCAWeRO5devzEgm6qQhJ\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\n7jlCke9MGwSdLV9cnBwZ9H7B\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nlwEOC/nB9sueiZnw41/pvgvcRBXck/4wDdzZPJmOLrc=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/TCCAaOgAwIBAgIUVmDVvaCIfXMr5SqpSUJG2kGTGvUwCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwMzA3ODYzMzk1MDQ2Mjc2MTI4NjA0MzQzNDY3NjUyNTQzNzYz\nMzQ4ODA2Mzc1OTQ2MSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTAwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEkkTl\nXhodUH7ggMqVVdOJoCBjsQcowzY0iwBvYdbk5xsi30DYl1lyXuipPCj3NzebNF5M\nRlxdbKXPtD5oRjZHw6N8MHowHQYDVR0OBBYEFHA/LOtXmklBVcfIsTdsa0vn1e5a\nMB8GA1UdIwQYMBaAFG55MSR2eOFY/bUnbp5LQdLhEBXdMAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNIADBFAiEA5n8FqjQt/3vne6jBsG9Bf+76Dw3tGza7B5xkJ2NjBHUC\nICxAqI4yJIZyHGoXSBhcwV5ZIzw+g3HOJCLPs+euYYGE\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -187,14 +187,14 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> ICA' (pathlen:1) -> ICA' (pathlen:1) -> ICA'' (pathlen:0) -> EE\n```\n\nThe second ICA' intermediate is a self-issued certificate. Self-issued certificates\nare certificates with identical issuers and subjects. While this chain trivially\nseems to violate the assigned path length constraints, the RFC 5280 4.2.1.9\nstates that self issued certificates should not be counted.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n2m/W2NsSwHd0mQc/UOG91WCPPQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUfNJmOn1fQcqSTkwm00+NbH99gH0wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARoBSFQVg1UOddyhvNCovtYlPSQfWY/oTwZVSlf\nIHt8f78cUP0zhE3LYxA51mbK3clkJWf3MXmgU9HlqlQ2AZ8Wo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUER3UaheDbHMoTEDUar+CBGb8fAcwCgYIKoZIzj0EAwIDSAAwRQIh\nAPfEFJWSbrCIh3RAkyLpJ04BimRjucRZlRd7cgLUp/k5AiBd0YrzfefVCSPkbHQl\nZ0qvF4sT/MYpu9DTZv+LbYEMJA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nPAIgG9BfUs6mMvqz/dSCTRY5uMoD4i31cFeecyOw+C+ZYKk=\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nhxZ6//k0midZFqJkmCc239cz\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nde2zq718ptnbV7l0cuNJbQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nvyMCIQCdTnEZE3OrDOgsRYxpQDBwmvD2wi6IrRiL3hLvPHcE5A==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nLU/ptkyHEFYMkxjnVCAZSbxr\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nED6WB/oZMxmxfKewL0qkoYKD\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAJbpfxsWltqZz15/VYDEplx45DTlGAIRwrPCEMnLZVzP\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/TCCAaOgAwIBAgIUaQb9HDB61oW+Td1U0rkLrMtHRxgwCgYIKoZIzj0EAwIw\nZzE5MDcGA1UECwwwNDgzODExMDcyNjg4NTM2NDQxOTkwMjA0NTk4OTA4NTkxMDg3\nMDk5ODI3NjEzMjA1MSowKAYDVQQDDCF4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLTAwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE/50y\nRYo+U73LbmzSXM0g5S1iIzd1+tHyqKhGh1ki9fVNappbjIMxkuYWNo4HUwRxqmKg\njbWWCjjeovkn+3HwQqN8MHowHQYDVR0OBBYEFG6npCJf8nwJy2jNJm8rUJt+K1kE\nMB8GA1UdIwQYMBaAFDqc3SkfFGBQ/ukrt4P9G68bLOLSMAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNIADBFAiEA9rx9T4GUnZwh2XX5aonfxkJ3Jix2w7BBZSqW/U5qfT0C\nIF5dJz4WXrBzhmLTbTz/MH/BZ2ATUcjQtrPvmYBq2dyh\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -216,10 +216,10 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nWhen validating with a maximum chain depth of 0, there may not be any\nintermediates.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\niF2g1A33DoeKx/x0CdfVDvrkLw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIUFX/9tRRcZDND0BcIfqJPf32hJPAwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQg3+VlJvSL5yjE1v0PIV+gwFlvWGGN35xI8ut4\nGctKpIiP99ATD1XrhBrPQV3fDDNJWLhSR8Arfct1xpNekW/Vo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUFv04/0xU2jOia+mlHT2pGKy1WuYwCgYIKoZIzj0EAwIDRwAwRAIg\nQdqxzAoSCl7tuBBF4sOrenq82q30/T1ZEVwwP9Kig8cCICtZSzgaFuT6DhUS59YX\nm4dl/OM9hUJBNucqhHneJjNn\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\neAXR\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nlE0G13E=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -241,12 +241,12 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA' -> leaf\n```\n\nWhen validating with a maximum chain depth of 0, there may not be any\nintermediates.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nuIfnlEeVngnOZD35PgvsQSyl\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nvHTTjVDtiXo/9CfWhv+aDNOP5qE=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nOWcCIHsqa71gARfkFUJYNCVpEEr26jI8fRFY7agmraxI5bl5\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nOQIhAP8SbqZZQih++1KvLoFfoFl1TAsoiEKLh44fZqGLAKoO\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n+QIgdoVNoPGF+M6CrQ6MCR/2Mq7xYibgoz8T5Xd6P9TrrTY=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nZz4CIH0+ZMymTc1Mp89XGHc+EkpsvCbExvUWjFe8yEXSLReM\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -268,12 +268,12 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> ICA' -> leaf\n```\n\nWhen validating with a maximum chain depth of 1, there may only be one\nlogical intermediate.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nWoE5grttUg8GCDTtFFCJJOlnQQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIULe0Gv6So8RmlMat9gZDxJKv3PuYwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAROYXDAk3xQlpY2aaxH++6UmtVy01b/Vl8t1im7\nUChnkplDrFrrKjFiskcypmGWwSmYRZRPku6LfwlPOJKVDKWgo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUhfBOC5WndlCrqMu6pNFMoG7JTJMwCgYIKoZIzj0EAwIDRwAwRAIg\nOeqY3MwU2d3NqSDPr2yQPhk/X2dhixVz6c9GsYfX4AsCIBJB26eQpNfmc5ShnBD7\nEyEX6ddLaGBeINr3WGtf2+PR\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIICATCCAaagAwIBAgIUZfOuHMBT8xpT0549MqqSFVCKRvUwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBqMTkwNwYDVQQLDDA1MDkwOTE5OTkyNTc3NTgzODQ0OTc1\nMDQ4MzQ1OTI0ODQ2NTEyNjc1MTA4OTg4MTcxLTArBgNVBAMMJHg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABPUWssxxuooNod+ZnX/KpX0WRPhLehoIlwIP0fonQgrVH/chQWpGT1BrRYJ8\nrZ9Ec2LAruUIiYNdchsEYBSb5v+jeDB2MA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0P\nBAQDAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB8GA1UdIwQYMBaAFMHaVHRh\nij3oBQhPz0s5BO4VPIPOMB0GA1UdDgQWBBRMm+GV0YxsveaLChtZIcPZBE002jAK\nBggqhkjOPQQDAgNJADBGAiEAhHXBsEGg+gw8LwFcTKei50/TI/bjChcqZTJdu/8A\naQECIQC7oQio0otpGQdBoW4kIacJ3pFCnCbjFccqjs5z0b/4zQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nhgIgDrWqPDjMobrKOr83xEVLSLtBbaQDJSiXXaW4Xu01dU8=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n1QIgEfwHIVnRNJDsf/A1iyeWf3y8ybYAYhmVsGFHF30F/I0=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nVwIhAJhWZL9ihbR2yWwMfyRujh/FNk+6p8EU87gdNAdanu9r\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -295,13 +295,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA' -> ICA'' -> leaf\n```\n\nWhen validating with a maximum chain depth of 1, there may only be one\nlogical intermediate.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nMrnumYtskFoYfTUhgVfn6vIj\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nq0fSIEMmdVstkqp7lGIhKL4Btw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nzwIgb1egFVs5AjolPBV66774qN7V6tOe0keCIznnf2APgUQ=\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nNO2UHAECxQWbaBFKtYFPO010KQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nxwIhAKGl9BQH8BYBAwtNUiNzlSEli8OEw5ErPdYmZYPaK0l3\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nf7NI3niP27uT5HGz3QexJhuB9pV6\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAiBPbeptEr2lEzYHEwKXZjAFltqBA13fQmK2b4oCFqi8ew==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nmz0CIF6x23QwaCP77PNJbyI509LoARvqzrKuJtRKKVDZepHl\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -323,13 +323,13 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> ICA' -> ICA' -> leaf\n```\n\nWhen validating with a maximum chain depth of 1, there may only be one\nlogical intermediate.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nAaYtlNhEyLN5M0u4c6I89DS1Qg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIUFTkPCZKEwlfzf/myW7Pw6dqXVIgwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAT+wJbRYoEoMhpxvKhkBYa+ME/ErBnqVs5GmfmZ\nq5dKgGPhxDS2YEUhxO5d4CZZRiOwbiLhWk2Dza1y7oSMc0klo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUFTpzEzhvbY++NceV5gSkWAtENB0wCgYIKoZIzj0EAwIDRwAwRAIg\nbjkmyvzAkxEkwGxDyRfPbLBFbCg6tBNje3Tcvv1XKPYCIBdIaWFCGBNa9x3vifAp\nEt+nGk+kKYPh4NTUbfjAPENs\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\ncSgCIHu9q0JysgGmSTU3DbCf8Eu2skxRZ3iQFvTTdf3eng4c\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----\nMIICUDCCAfagAwIBAgIUOvHYkcsZ06INQO3uDmjZ2QYCVV4wCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwMzM0MjM0NDY1NjcxMzAzMTYxODYyMDExODk3ODQwNTg5NDA0\nMDA0NTMzMDEyMjAyMS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMGox\nOTA3BgNVBAsMMDMzNDIzNDQ2NTY3MTMwMzE2MTg2MjAxMTg5Nzg0MDU4OTQwNDAw\nNDUzMzAxMjIwMjEtMCsGA1UEAwwkeDUwOS1saW1iby1pbnRlcm1lZGlhdGUtcGF0\naGxlbi1Ob25lMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAENwdr9SVD/S0b+Y+A\nScZWi8YViPDa7W6oitxG4m+f7QGubYgDiiSD7mebC0SVGZ53zOyZ1h5VM1yORnv5\noF0g9qN4MHYwDwYDVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAgQwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wHwYDVR0jBBgwFoAUYlbVVpnPOMhRP+elB8x95+391Z0w\nHQYDVR0OBBYEFF+GU416NtklFWSrz0Iw0/cuqfY/MAoGCCqGSM49BAMCA0gAMEUC\nIDoeIwE9I3GNZEFzmU6KqkWhsn0dHuaBclrwVlWO2YwBAiEAuSLRGyYNbYZXpE1l\njoJLkGz3YN72yJAahuhN8URfLtQ=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nkQIhAJlOVxsKeejpd3toyNHrW3dXM1d61srl49/+WMtbrxnC\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nxq04NPylCg/lMfk5QjtUe+zl6Uo=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nYAIhAJZfMlDNn1c/i4dKnnkDUMEXY7GeT4HViS3yy0gLQQq8\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nEQIhAKTbF0OH3sQFlWZfnQijK+sxvgA2aTKMnZS6H6k3dbsE\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -349,13 +349,13 @@ "description": "Produces the following chain:\n\n```\nroot 2 -> intermediate (expired) -> root -> EE\n```\n\nBoth roots are trusted. A chain should be built successfully, disregarding\nthe expired intermediate certificate and the second root. This scenario is\nknown as the \"chain of pain\"; for further reference, see\n.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nVbXUPwFOpktV1zUy78+sTclPASI=\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nyCJ5TiLerJxi5G/bkh0TLVH4VOTfmOk=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nzVSSsmLCSj6rD21gPCPOgJGIiw==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----\nMIIBlDCCATmgAwIBAgIUEmwPn9WizvsHsZPbg/fyI3ZorOIwCgYIKoZIzj0EAwIw\nHDEaMBgGA1UEAwwReDUwOS1saW1iby1yb290LTIwIBcNNzAwMTAxMDAwMDAxWhgP\nMjk2OTA1MDMwMDAwMDFaMBwxGjAYBgNVBAMMEXg1MDktbGltYm8tcm9vdC0yMFkw\nEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAED9itg2Ce65FNFR3XaqNZFgnLvyqlqOYs\nvrSKqXMAeLnRl6+/6BdS+d7R3DcQbW4Sa8+XGoIQZqUXlDYH6dwqTqNXMFUwDwYD\nVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5j\nb20wHQYDVR0OBBYEFMzYFBZAProum8wbS9vE5q4LrCJ8MAoGCCqGSM49BAMCA0kA\nMEYCIQCnYUS0ptQCQCai5l4aZE+Lb7DykD2cp2ytuSvxIp1S4AIhAJGiXU7XuGm0\n6umWdohpCOfioU1stwdKrqXNspbiCtwa\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n541FBKJMFA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nb3ltRaf39v0=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nq3XeyIc=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBsDCCAVagAwIBAgIUSi59nBiABn83mCbf6nt6LxtYi5wwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABL31GRlCM6x63T5w8BJ8RXTchPKZFadIbJcQsWw+rJxF\n82CfY0b/thyy9aKS40AMZg/II4xpCxsjPzUID3cpF6SjfDB6MB0GA1UdDgQWBBRZ\no17Ev48ie2BvN5+jpfkOEdPXLzAfBgNVHSMEGDAWgBSwo9Mc29RYtFckq6p+fvXx\nvnFZWTALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSAAwRQIgX+nLde/jxBvSElFfl05l\n8/RgyPOZ2/4tHNf5l2Lh6zoCIQCHRnVSMwBrnzJG5AWvdWJ3KfK8jBrpEfV0Zq7z\n86YVVA==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -375,13 +375,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -/-> (ICA' <-> ICA'') -> EE\n```\n\n`ICA'` and `ICA''` are separate logical CAs that sign for each other.\nNeither chains up to the root.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nBY8HGoqviXgynseZxhdCwKva\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBkDCCATWgAwIBAgIUZSQjZI4OqPklADYDVomvXTZ9b14wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQqfl+RHkaTfOBQVVYRxbNdYqenu9LtyeuB5aOj\nvlt0dOcOKxpSueqzs+H77bro0gFHLby/XkI22DWyqAbVIFtJo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUgZRbD0QMscGsdU2CXgP8jgkp5ZgwCgYIKoZIzj0EAwIDSQAwRgIh\nAKphXQJZPKEMI+AGCZOApMcGwCWH36On2WdZq1MFPNaWAiEA4FnHf3kg16c+lVUH\nKqBO9LUHYEiBvfnPCApoEt1Djkg=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nLPxPStjlo5W+rao2\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\n5xXykF+KeycKHb9KeA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nDwwd3TSnJ0tv+rjpgg==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nEXDZRvrxNAV7X5d/\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\njULXmHSo48Gj4uyiLLcQNPv3Jw==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nXQfw7s1f4wjBVVWTgV6aEM4PXQ==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -401,13 +401,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -/-> (ICA' <-> ICA'') -> EE\n```\n\n`ICA'` and `ICA''` are separate logical CAs that sign for each other.\nNeither chains up to the root.\n\nThis testcase is identical to `intermediate-cycle-distinct-cas`, except\nthat it specifies a large explicit max depth.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nW1MxpejRm/8iJ5zw9kVuVFANytQ=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nCBKUsP/mcXwXZCxgZ9gkg9lT\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n5TgFjS6Cb8Ml5ok=\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nA/COMSZH6jRP62cb3A==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n0VKcB/q4LUjek1o37A==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nV5laCOVuvieUO4ws\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\neyboZtKW3NZrMJn1Kd+HwOnxE7w1\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n8Igsd7ni2o5Jjt6y5/GZwWsGQFD1\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -427,13 +427,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -/-> (ICA <-> ICA) -> EE\n```\n\nThe two ICA certificates are from the same logical CA (same subject),\nbut have different keys and sign for each other, forming a cycle.\nNeither chains up to the root.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nZ720674ktcKdAlYkafVyNC9zfA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nsygpMLe2KAUPRap6wa7J8j9rNCA=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nE6JQ2Q==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nVZjqWic=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nN8gOBw==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\ncq+pWPk=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nEf8jocoaO7u7Ex+vFaBXjdKf0RZPOg==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nA2vD7+lDEX3LpCWtIkhLFQP9/p9MtZc=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -453,10 +453,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert has an AKI extension marked as critical, which is disallowed\nunder RFC 5280 4.2.1.1:\n\n> Conforming CAs MUST mark this extension as non-critical.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\ngSRmO6KwtA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nfzgn9uP+\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\neeCt\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nbrsb\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -476,10 +476,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert is signed by the root but missing the AKI extension, which is\nforbidden under RFC 5280 4.2.1.1.\n\n> The keyIdentifier field of the authorityKeyIdentifier extension MUST\n> be included in all certificates generated by conforming CAs to\n> facilitate certification path construction.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUbsPRQZsfz9+l98wuv4jn+lDtduwwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAT1gly2sscWW6Q5wg1ETiEwzCNlzlwEf9ITa+cx\nCH9Hh64G7oEwp+Ug+/0GAdt7wCnuYYxWZtIs74VczN5i9C3go1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUSfL5Qbh8wlvzPWGgkUTl1+GatucwCgYIKoZIzj0EAwIDSAAwRQIh\nAPYODj6ZyWOIbJUJqGQtBuZ92dCfQiiGH+js8f+e/cPyAiAeQTLtDZnYBIPsthKN\nnXF7ZiS/uFgEvjE1LxN0qmVqoQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIUJ+e/KyjxtcZehVUcbb1Fz2+QkEswCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASLekk47i35B4BfvlpalUBos/L1DhRUmGO6I0cp\n4iUKcZYgJ15HzxLCaYUsJLLOcZlpgG9qW23WGzqTKafAWO+po1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUx9ZMaH1otpyaOtkWCc7Tx6MRr28wCgYIKoZIzj0EAwIDRwAwRAIg\nCoYE0d0iUJN41p/ERVkQRyCWeUj5QJYoa4VR3J6OW6gCIH0k2ZvXm48mxRBcSJYs\nvcjkv1NLTw8UDvCJlj6LaUDs\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nMmjf3WtkaKrXKDl6g83DGuMrW1E=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nziiXHmqcgvmnqNSc3HN30/BckBY=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -499,12 +499,12 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> EE\n```\n\nThe intermediate is signed by the root but missing the AKI extension, which\nis forbidden under RFC 5280 4.2.1.1.\n\n> The keyIdentifier field of the authorityKeyIdentifier extension MUST\n> be included in all certificates generated by conforming CAs to\n> facilitate certification path construction.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n+nBCSr8CyPHTQd+0SnL38fbEKg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n2aLQaJPnHO9SekHwOlc9Qq2L\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n9Lg6\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIB3zCCAYWgAwIBAgIUHmoYfPIGyySQycQTbxuW0bVQ6QUwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBnMTkwNwYDVQQLDDAyOTcyOTI1MTE4OTc2MjA5MjIyNzI4\nNTI2NTEwODgyMjA0OTU5ODM0MDQ2OTg0NDUxKjAoBgNVBAMMIXg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tMDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA\nBO99CYmQB/CMiFYdnQC16pm+2c8b/PtIBuC47q2YNXh3L8lAIitdhEGA4TLwDEg3\n7k+Eoldiaade8JbgkpTpybajWjBYMBIGA1UdEwEB/wQIMAYBAf8CAQAwCwYDVR0P\nBAQDAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB0GA1UdDgQWBBQDsT0OqK2O\nZITUOnIPaUqg4J/4PzAKBggqhkjOPQQDAgNIADBFAiEA2P/XTu2Bjl2+uCAy5j1y\nudoIA/DCtvNLbjpKwirMOkICIGkX8xGl8pv0bAuUyOXOA7hSa+JWeKmfMXlaQAtW\nJUxo\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nICYquztcP2GdzhgpbmLPI2tp4l2sSH952TByL+pYn4iX\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nTY13jnYnQy5GOXrRmyB0Q9JZfRNGPwePsGOHIujmT3U=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -524,10 +524,10 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert is missing the AKI extension, which is ordinarily forbidden\nunder RFC 5280 4.2.1.1 **unless** the certificate is self-signed,\nwhich this root is:\n\n> The keyIdentifier field of the authorityKeyIdentifier extension MUST\n> be included in all certificates generated by conforming CAs to\n> facilitate certification path construction. There is one exception;\n> where a CA distributes its public key in the form of a \"self-signed\"\n> certificate, the authority key identifier MAY be omitted.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nv9XgajjP+i9wXUlmdsKaCrkxdw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUQODQFP116p0I7la8tG3j6DdqCyYwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASGnelVHzEHAasmBnovw7QRyWtisGxUY9TvD2f4\nIXIjiaogeZJWTQ3k/P8kvwwZZ7gUmgFASi5dTFG1LTyXwRKmo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQU2Fz42EvwtaYQzc1tDhsX2/fF5GkwCgYIKoZIzj0EAwIDSAAwRQIg\nd/D3uoyDEcPodX2gGqw6RE2ZMgNyLzCt6EMi0YMgPb4CIQCdBjZCINuHSCKL40vp\nqEsyk/26FOkHZ38tekP2CY9P7Q==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n1op1ELQ=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nkjkO\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -549,10 +549,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root is cross signed by another root but missing the AKI extension,\nwhich is ambiguous but potentially disallowed under RFC 5280 4.2.1.1.\n\n> The keyIdentifier field of the authorityKeyIdentifier extension MUST\n> be included in all certificates generated by conforming CAs to\n> facilitate certification path construction.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nyxKM\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nUcE=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAIh4iSKWhG3+j0fJE8Jmt6gOqnQcmGw7vD8Sn+9e4Hy2\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nHwS+4/qgyPPwBVc3+LtfYIFMVDP+VTMl/Zd6UY70CWA=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -572,10 +572,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe chain is correctly constructed, but the EE cert contains\nan Extended Key Usage extension that contains just `id-kp-clientAuth`\nwhile the validator expects `id-kp-serverAuth`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n9iczSmegOSXeOTCPcPsa/OLpyg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nScPASlc8B6TMMiqDUTESxJwn\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nGm3Q4Ow=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBsDCCAVagAwIBAgIUCP0yR/MellOj2uQLEUmGIoLRfBkwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABISUqraBmflOPdl47nDifvQy6LR+a1aZB6sCnIDsbqnO\no0Leeo3C+JqsxHmcpERL2IFA91JpouAggS0PvFlstjujfDB6MB0GA1UdDgQWBBRc\nYuVU4BZooV/VBhXV9alNDsWjfjAfBgNVHSMEGDAWgBQbjw64H/iDcRb+OhPp2pCa\nsSFiezALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwIwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSAAwRQIhAKws8sVA/Yo70MUr4Ill\n9bk6RcSNVukBtTju4k7+DOY5AiBTm9ZRonBGWqIPfZDu7RhzLkWAEFRh+X6hkG0o\ne4faEQ==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -599,10 +599,10 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> EE\n```\n\nThe EE is missing an extKeyUsage extension, which is permitted under\nRFC 5280 4.2.1.12.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n5QXmxLzzOmiPxF7ePyJrfw3diw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBkDCCATWgAwIBAgIUYgjVhtXxLNZaAbdchRtEVkskKbkwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAROCWb35CtemLzeYy5k3yevRj9aUVOrMZfmpM7G\nbasRhBN9PtMiOkWzl4CNK+Dn4LvTSiG0TMwgqAIbxXWOpNKio1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUqSTY3fWPyyOkt0xYg43LxMeFQ6swCgYIKoZIzj0EAwIDSQAwRgIh\nAJs7LkX4lZknyVC7rWBlosnQ8VQspg5ojSBTA6nFnN+oAiEAi6Az4jf9izHdsU9m\nx/yDsoV+ZhE22KyXC5LgRWcSYr4=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nCsKYR4pFTo2sTsbRT2I/1LzbimvB6glJGGFkBBiIqA==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nk8qwzCLMEezeGq1n8SBHKa8L42uuhg98tEccCq/MqJM=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -622,10 +622,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted dNSName\n\"example.com\", whereas the leaf certificate has a SubjectAlternativeName with a\ndNSName of \"not-example.com\".", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nlzQ=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n+8MW\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBtTCCAVugAwIBAgIUNX3WaaI9CmvNBzXXsWrXO3a0sQUwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABI5Uma3o16Arxln5jAhLYHt2m8SzpdPSvHa8pT9KjK1i\nxo8ZdUN8cTm0DoyT2Z22K5OFBDz/ucZcxVxXhZPx4g6jgYAwfjAdBgNVHQ4EFgQU\n0x45whyMnWcihad+Ss5T0FkSYSkwHwYDVR0jBBgwFoAUJQC3T9W7F7lijnnPKCQX\n6mqMph0wCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBoGA1UdEQQT\nMBGCD25vdC1leGFtcGxlLmNvbTAKBggqhkjOPQQDAgNIADBFAiAgv/gHu0YbTi41\nzr7LD/gWSdtrPLDAZfUv1ahZXAy1+QIhAJXle643Xry9yCsyZII3XrJchSNETpIv\nHS1oQH9lxXlz\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\ntSJT8fBto57j\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -645,12 +645,12 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA -> leaf\n```\n\nThe ICA contains a NameConstraints extension with an excluded dNSName of\n\"example.com\", matching the leaf's SubjectAlternativeName.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n0Cr19eAZMrQixXBQ3cWePAz6\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIUbP1eXnDxOS75BVxEelVdAk3Q2OgwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATPiPLvBpUEqwkyhaJdRTn6cSWJcMVYPy6vKoHT\nL2ILk3ALMdSY7XMSmEY394J2PmUOO6y62C73itbiQSMqe7Ono1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQU28lZpyoNkfdT9ZqGK19b+3rf3MUwCgYIKoZIzj0EAwIDRwAwRAIg\nYzfPFfUpC+dqNbJitxaquFy/Owxin9irdCZ0F8OYCGMCIEyEVFMgTyJnSrDIUiZz\n8bV9ZMp9lk5DVmYCFSMtjpZG\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nk1YxgEV9I7id27bBuyPs+u5ndig=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\noKgLfDr8rzoO75xKt8l61n6GpoFw\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n1gIhAMvxMnNugesj4B8ZJvtWbJaLXam9k7rhVfADFIt/qrS6\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\ngwIhAMelaizDA5ettfpo711JGjOVeiGPwVbjsiRP/S/9Lg6p\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -670,10 +670,10 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted dNSName of\n\"example.com\", matching the leaf's SubjectAlternativeName.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nTGQ=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBrzCCAVSgAwIBAgIUflrmbR4i2lHxG9KKjL3cYxjmlDQwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASrSW47shiALCK919EJyicgE3eqonqEZDxFY0QS\ni488IjM4jKGvzRTEGTrytnwQOJJ1Lh1gkBWoohDJBQ2e2gdXo3YwdDAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUPoVao6cMHw8SMB4ACONcpsL6DF4wHQYDVR0eAQH/BBMwEaAPMA2C\nC2V4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kAMEYCIQDa7l0+zUHl8G4vhZmIAnQX\nLMAWAZ7+sP4k27CSe5txugIhAIozufwn1NJud80MQGj0dwJwhQc5FzYN3Q4GbH99\nPvPH\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\ntYZG\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n5PcXqw==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -697,10 +697,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted dNSName of\n\"example.com\", matching the leaf's SubjectAlternativeName. However,\nthe NameConstraints extension is not marked as critical, which is required by\nthe RFC 5280 profile.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBqzCCAVGgAwIBAgIUQ7FhMoGZMbvexxvCzpHWBKz7iIowCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAT1RuXRFOYwb0eMiHMThUkw3//9NokGtknWFnIE\nEoDn4ltmqyPOxdAmsjLD9c6sR3GJM9oQatkVUFrOuyrbf1jro3MwcTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUgZLNiZsc8c2ZZ0LW6oZ+8B37lG8wGgYDVR0eBBMwEaAPMA2CC2V4\nYW1wbGUuY29tMAoGCCqGSM49BAMCA0gAMEUCIQCgSmO5qy8NuFwzlRikeKCzmHJE\nTGrxrKZ1cxsJjHRugAIgHG2ccCUPj6MfYVNrS6KQA7vG29k43xjhl6l/tWhrx0Q=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nfHW43Q==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nJi8vWrU=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -720,10 +720,10 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted dNSName of\n\"example.com\". The leaf's \"foo.bar.example.com\" satisfies this constraint\nper the RFC 5280 profile:\n\n> DNS name restrictions are expressed as host.example.com. Any DNS\n> name that can be constructed by simply adding zero or more labels to\n> the left-hand side of the name satisfies the name constraint. For\n> example, www.host.example.com would satisfy the constraint but\n> host1.example.com would not.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n4g==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n4A==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n3FW5kZ1DoMY569GUkg==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\ntVqeDQ+zRIsi52RE7mg=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -743,10 +743,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with an excluded dNSName of\n\"not-allowed.example.com\". This should match the leaf's second\nSubjectAlternativeName entry.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n6HbHgfxJCY5GLrw7FCymyA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nVgAu0grGE9cVmCalKMr13Q==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nrE3/R7NEFxYbdYkv3m+VPLgzvQD7Q5laUNI6QI27qg==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAP2OA3y5RuK/seNlRyyqgYg+uKhGqcD4vMAWpWoZKg==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -766,10 +766,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted iPAddress of\n`192.0.2.0/24`, which does not match the iPAddress in the SubjectAlternativeName\nof the leaf.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBqzCCAVGgAwIBAgIUEPcjVplm0FuIs0tIH6h/LPDK0X0wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASe1bTVr+cNFFgsj+CyQKUqfXVH6RwDRUNd/c1G\n05QwWbvJMQth9bgtY3r4XtImtZbGyCBs9v7EQp2qUD0JGUiBo3MwcTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUhA8d1inFe3pqgPTTIU/lV56UMc8wGgYDVR0eAQH/BBAwDqAMMAqH\nCMAAAgD///8AMAoGCCqGSM49BAMCA0gAMEUCIQDVuMx3WT+jd7vUhDC9ss6ToXkn\ncwX0667JXwvHFkZQgwIgLo+rbdWwcZGyV68X53+zkdQUXQ1pnHYTutYKMs3gqqc=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -789,10 +789,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with an excluded iPAddress of\n`192.0.2.0/24`, matching the iPAddress in the SubjectAlternativeName of the leaf.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBqjCCAVGgAwIBAgIUbaZX/Puej0e9yeDrbrLihlAzSkowCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAS9boB1wBXL6fTwSmL84lAsbjMlxZgwqXZHmeLZ\nG7CZr6Eq2SLgObJ2rfYh5fgljcoUUm+W1LwkOLm2tyriXo+Do3MwcTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQU/jHiJYLvUOSf1vQvtUGDqDJ1pdkwGgYDVR0eAQH/BBAwDqEMMAqH\nCMAAAgD///8AMAoGCCqGSM49BAMCA0cAMEQCIC5UMLK50/l021OutGBmEA5tXTPN\nwGPOC0rHMsH04CJqAiAOWNbKR/yrRWUhc/boPxQB/Upjf6atbdJ+MfsqOzFWvA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -812,10 +812,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with an excluded iPAddress of\n`::1/128`, matching the iPAddress in the SubjectAlternativeName of the leaf.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nNzERZyHCD3Apt3xWrJcNJj2mZBTwaQTO\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\ngKq2zatvIyGjB1Erbu9chFVUzyPpqrf/Hg==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nKtZU8lcF0gG4qg==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nwaOozb7nwMwK\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -835,10 +835,10 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted iPAddress of\n`192.0.2.0/24`, which matches the iPAddress in the SubjectAlternativeName\nof the leaf.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -858,10 +858,10 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted iPAddress of\n`::1/128`, which matches the iPAddress in the SubjectAlternativeName\nof the leaf.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBxTCCAWugAwIBAgIUaSeg+R2F64V7PEJGsk/N1rnjBp4wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARhwhNDbvzFl4pQn0k1uHD4IPQ+TlxcJl4Yp/5W\n5ygBFg7wAgmshRbLeinxaM4U50ioKN8KLvYpnNX5DRkPD1Fjo4GMMIGJMA8GA1Ud\nEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29t\nMB0GA1UdDgQWBBQXKCiFAU2UmwVAKD5O4bQ+bRhEEDAyBgNVHR4BAf8EKDAmoCQw\nIocgAAAAAAAAAAAAAAAAAAAAAf////////////////////8wCgYIKoZIzj0EAwID\nSAAwRQIgXVZrGVpzDpIXT489oL1S1A+MtRNSRBAf2H5dx/cdWTgCIQDq4qTjlb1c\nchiD3MWpZvBf/FsQaixqYngCqL56nKxRWw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nTTYU3NLax9QWJxzF/jclYFwJoO4vc55bkg==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nT1A3bDeKPSdB+Q==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n+j2yP+FJkvXZqg==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -883,10 +883,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted DirectoryName\nof `CN=foo`. This should not match the child's DirectoryName of `CN=not-foo`.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nDG2x7vIp4DE=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nAmG+lvob+g==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n0SflhfgdOYPpa9g=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nVrRiq78dzMmP1w==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -908,10 +908,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with an excluded DirectoryName\nof `CN=foo`, matching the leaf's SubjectAlternativeName.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nxHKttfdVkg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nDNgdOjCw4w==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nx04=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n1Q==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -933,10 +933,10 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted DirectoryName\nof `CN=foo`, matching the leaf's SubjectAlternativeName.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBsjCCAVmgAwIBAgIUUzYRAQUGgw00uJsX3F8+OWPGt7gwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARjLq7Nus0p3I8PWokL4w5H8zWeyWmhACD3FUJh\nC7iJkKeVGnTIWF3eSC1NcQFeeIJK91nb+KI75i1Sv+h/rEJzo3sweTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUT7cWmivuPxPMf+givs3DZbwKEUwwIgYDVR0eAQH/BBgwFqAUMBKk\nEDAOMQwwCgYDVQQDDANmb28wCgYIKoZIzj0EAwIDRwAwRAIgLWGCebjQUC2jT7Qq\nqMkXOXagXQxVBnxMk8baAoP1rikCIHd2ZNue+Ueb9u5oN+9UJzcZqGjTL/bgKJ35\nuK10tCsG\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nlj/G9xScIw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nDyk=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nuoY=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -958,10 +958,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted DirectoryName\nof \"CN=foo\", matching the leaf's SubjectAlternativeName but not its subject.\nThe leaf must be rejected per RFC 5280 4.2.1.10 due to this mismatch:\n\n> Restrictions of the form directoryName MUST be applied to the subject\n> field in the certificate (when the certificate includes a non-empty\n> subject field) and to any names of type directoryName in the\n> subjectAltName extension.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nF1fKfc+uxA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nu7CowdYf\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIKRSj+QK+A==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nlGWcFnAX\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -983,10 +983,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with an excluded DirectoryName\nof \"CN=foo\", matching the leaf's subject but not its SubjectAlternativeName.\nThe leaf must be rejected per RFC 5280 4.2.1.10 due to this match:\n\n> Restrictions of the form directoryName MUST be applied to the subject\n> field in the certificate (when the certificate includes a non-empty\n> subject field) and to any names of type directoryName in the\n> subjectAltName extension.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\ny4i29Bx6nyo=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n73eRgsVR\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nvlQj66aa\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nI4Fvs6ST\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1006,12 +1006,12 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> intermediate -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted dNSName of\n\"example.com\", whereas the intermediate certificate has a\nSubjectAlternativeName with a dNSName of \"not-example.com\".\n\nNormally, this would mean that the chain would be rejected, however the\nintermediate is self-issued so name constraints don't apply to it.\n\n> Name constraints are not applied to self-issued certificates (unless\n> the certificate is the final certificate in the path). (This could\n> prevent CAs that use name constraints from employing self-issued\n> certificates to implement key rollover.)", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBszCCAVigAwIBAgIUZDFWwDw+ZuE/neP5kojvVpCDZJwwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPbm90LWV4YW1wbGUuY29tMCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA9ub3QtZXhhbXBsZS5jb20wWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQ/voeu4UAroC5YTEMo8Lz6u5LL/uLsI889+koy\nQtzN9o3Bk5bBgJsN7iFgabe2akuOhqfR+H1uROhzqfKcbV0mo3oweDAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAaBgNVHREEEzARgg9ub3QtZXhhbXBsZS5j\nb20wHQYDVR0OBBYEFPtdIe/jZ2anfyJAt3Y2Zg2Iy976MB0GA1UdHgEB/wQTMBGg\nDzANggtleGFtcGxlLmNvbTAKBggqhkjOPQQDAgNJADBGAiEAkrLBZxJga8OB5d8I\nlZ/NpyUDantfg5r/C0w8gY7kDsECIQDbh8JSNA7pQC3WNX15bXiIkX06aBaWyos+\nlL3diYTYyA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBsTCCAVigAwIBAgIUAXj5mWXChXlXb8WryJV6fLV8lr8wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPbm90LWV4YW1wbGUuY29tMCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA9ub3QtZXhhbXBsZS5jb20wWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATqHPoM33WYNZBTqTUEr1SmpjIlYg1UYZeAD3dv\ngu573A62s+cJLC/IyLzIvQoYzPhiVZ9S6nSCO3lzoj8WOzLCo3oweDAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAaBgNVHREEEzARgg9ub3QtZXhhbXBsZS5j\nb20wHQYDVR0OBBYEFFt+e01a4d8Hpm1yueZT1gSThHgpMB0GA1UdHgEB/wQTMBGg\nDzANggtleGFtcGxlLmNvbTAKBggqhkjOPQQDAgNHADBEAiB2Qusw2Iz2Vg+3wWbe\nsrELXA/Fm0b+RCzqYU9+Zvb0TAIgc3OtfeQF0vUhiWm9BkqOyhus/WG8/fHPwzA8\nx2yeNhw=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n9jXjebkj+pmg\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nab6do/1nfiw=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nvixv8g==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nVnLT0Jk=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1031,12 +1031,12 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted dNSName of\n\"example.com\", whereas the leaf certificate has a SubjectAlternativeName\nwith a dNSName of \"not-example.com\".\n\nIn this case, the chain would still be rejected as name constraints do apply\nto self-issued certificates if they are in the leaf position.\n\n> Name constraints are not applied to self-issued certificates (unless\n> the certificate is the final certificate in the path). (This could\n> prevent CAs that use name constraints from employing self-issued\n> certificates to implement key rollover.)", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nouc=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBrzCCAVSgAwIBAgIUfHc+APhFpnFXbVu2IclODFLvJcowCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASPjJdzSVqEgtQtu4xFdmhd92v8998bdnFewIIM\n5Eh3MefwUX2YOjpsmn6xlA3a6ZqyDZxt+W4C+SP3kcKCyNF0o3YwdDAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUsihDfF+W2aFj6PH3VYvrnuyV36kwHQYDVR0eAQH/BBMwEaAPMA2C\nC2V4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kAMEYCIQChsfitiDXqXBvWgu52+rJP\nadTgEv2cpEJCKW4M+KbymAIhANVxzSh6xBM59gqFV8aAy/oH4G678rv6ko3ecUem\nLvQO\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nEwexNefLuHQ=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nTLISU+1LgnOS\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nHDdMsdXEPshoWHcgP7E=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\noz2s2bVxzGF9EvxPNBY=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1056,10 +1056,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted and excluded\ndNSName of \"example.com\", both of which match the leaf's\nSubjectAlternativeName.\n\nThe excluded constraint takes precedence over the the permitted so this\nchain should be marked as invalid.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\niwbKT+BQpqvxLJNXUbj7balRg54A\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nBAyP+dn1R8d6u2O45HoH659cuiv0\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBsDCCAVagAwIBAgIUf+RBEFv7/jI3lYMqzaRlUhBXTEkwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABM9F92zoEqIVMdLgGvYbWhCox2yRi092KMSYg2AJdH3/\nT4jHNlCZUN54HrJDk75zXfQQJoFMbTIrwRfmDJRfHIKjfDB6MB0GA1UdDgQWBBTo\n4xJbWQK4aoi+ol5V8WKGCLAYdzAfBgNVHSMEGDAWgBRK5mhB5hW+AMmrABhf9L57\n8cU/AjALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSAAwRQIhAK3VrH+R7671PgTueYxJ\nJyluwausCIrNpSk3yAGlAF72AiBEQaQ4Qes7gXd6tgnBMLbvtq1hbZiTG01WtBLh\n3orVMg==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nraZvZg==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1079,10 +1079,10 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted iPAddress of\n`192.0.2.0/24`, while the leaf's SubjectAlternativeName is a dNSName.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\na2cm4Do=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nbJlP\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1102,10 +1102,10 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with an excluded iPAddress of\n`192.0.2.0/24`, while the leaf's SubjectAlternativeName is a dNSName.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBrDCCAVGgAwIBAgIUfyVFm64j/eUhK6eI2ERlkrZQcoQwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARRF90dv5BF7rAwNToYt2NVFZsa3po/JGbvI6oH\n+015WVewnhgmGfCzdDdluJ9spfquAdDHIi+4avml5qJRbt/ro3MwcTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUQy2Dh2yLfhfTkFzBCastYslWW0UwGgYDVR0eAQH/BBAwDqEMMAqH\nCMAAAgD///8AMAoGCCqGSM49BAMCA0kAMEYCIQC0tt5hRnVdoCGfaXZAknHtW4Rb\nJ6Pll7Xtq9hWRdJAagIhAINsPx1J0GRQSAo0YfjElyH6ZgY2DgLiOA91pBI/Hk8N\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n7eIr\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nYvkNm44=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1125,10 +1125,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a malformed dNSName\n(uses a wildcard pattern, which is not permitted under RFC 5280).", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBsDCCAVagAwIBAgIUAuU8UYZ5zVT0SAKcOMnJErPUlVAwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATHVrPZdgAnL5Q+SLLARo+dp+VWTldhu2KV19rD\nPGz8wAbNq6r4pqJTzDBIiu7DntetwEInKzGWFNtAzTwy0U60o3gwdjAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQU11Q2/Gl0XGJoLw9//Avh1vA0H8owHwYDVR0eAQH/BBUwE6ARMA+C\nDSouZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSAAwRQIhAIXnXWiUo8sGjhCLTe+B\nKI7r+miEUgcf84XipFcLGmEXAiBTPK/O3pyZ9V/FThhA5zoHPwNbTP2EYK/W14oW\nLkPrJg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n3hX6GA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\njQxa1gKlSJq2\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBtDCCAVugAwIBAgIUDyVztfwq9gd+OHMbciOqnZNKL3wwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABAs/IxRJn62KbmxxLPEb8pZSNvR+WVAeSWg41biOY4Wy\nvQz/HFo/SBmuxcIlX9agdcjHx23CRKoGua1Rnsg+Y/WjgYAwfjAdBgNVHQ4EFgQU\nd2RibjlcnToTgSsePi/+5EkWMl4wHwYDVR0jBBgwFoAUUt/Y64EHs7HVf4ZltUus\nwws8VwgwCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBoGA1UdEQQT\nMBGCD2Zvby5leGFtcGxlLmNvbTAKBggqhkjOPQQDAgNHADBEAiA6XC65mgJqt9Wx\nTfASmirt+mYS7L7Rwvt3INco672TCAIgTuCD1zMwNFajrK1/N8QII8/WBIJqW52a\nG59XMQgsU5g=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1148,10 +1148,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a malformed IPv4\niPAddress (not in CIDR form).", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nxgof5dMtm7miAiBVnOnV1FmDnFpFyo7NEgIslROPOBLuIr+JLeA5mkz4rQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n2rjMltDwmEUCIHNu2xqwemZfIg0CHyC4wF0AHo0o0Jb0pSXhZ7scQyLa\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nD680VeSmPqXZrwIgMaumJ3aYgSXe4g3TDU/3UOqPrvDaMiKRRdK2TQjpquM=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nTWq3VH+v7fRjLAIgb8k+81pEg6cc4ajKFEGPhuw1eCf2lAQGNafIiofrW1Y=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1171,10 +1171,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a malformed IPv6\niPAddress (not in CIDR form).", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nJppvdH6I\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nUofY4uPnsQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nhuxf4NG5HJ5SBg==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n+D4FtbfbR2MZb8w=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1194,10 +1194,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE contains a non-critical NameConstraints extension, which is not\npermitted under the RFC 5280 profile:\n\n> The name constraints extension, which MUST be used only in a CA certificate", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n866zji7oY1duIZkhE36ON8g=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nAWTvbsvIDd63nhvZT1lRlg8khw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nICNwrMtZdFlVUGGJa0gD92NCGQXbPM8qIN1Qyoj6AZp5\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIHTyFnqGA34knT8kpfXDfij2iSEL/SAVB5z2sUINr3mj\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1217,10 +1217,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE contains a critical NameConstraints extension, which is not\npermitted under the RFC 5280 profile:\n\n> The name constraints extension, which MUST be used only in a CA certificate", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUaefRhqml6kbLVMsXLC0BEUqP0fUwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQDX0xKevszAzQZFukjeOCXHFBO10yge44994mB\nj9Oy9DWOfFgKvJuXmg5AsQDcnFZmEB9wkjJfA8uE3hLhcxX0o1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUB0mYZHiLQEnIzamkC+GoyFaVn7gwCgYIKoZIzj0EAwIDSAAwRQIh\nAKoRAurozG8jsXIpJvNjB+evUBciPinGVS29MuldRRD7AiBPmqTAu4NCbPXW67K4\nGgbc84PJJ74XWruHO0eTYfZSSg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIUPPhHNanvPkueocYIL6JZE2Ji08UwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATApA26Yi65vzaD1JAvJyBjQBOU647DqgRmnhkG\nD2CsmBH+GUt5MjwNdZjq+9PczIFJ+KChWJ1lV+P15xsQfnEDo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUvK0iv6svUkFs5+kuk7XDSzNCfeIwCgYIKoZIzj0EAwIDRwAwRAIg\nad0/yG1/V6WnYDU9exfnC4tvJamvdsbgtaeqwIb/T74CIHEs8m6OayjCTJU4x2ay\nbr1ZLHbqxzYu7yG6/N1khc8T\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n+1teAiBua7h4Y2nzwU/k/Sho3xDEbnC80IF0whY8bhA9YGGwwA==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n8FcCIQDzcLJRCblhAYXrMJP+b012cEZ6+oFx2Zy0szb9ArvVDQ==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1240,13 +1240,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA1 -> ICA2 -> EE\n | | |\n | | |\n NC SAN1 SAN2\n```\n\nICA1 contains a NameConstraints extension that forbids\nSAN1 (forbidden.example.com) and permits SAN2 (permitted.example.com),\nwhich should be rejected under RFC 5280:\n\n> The name constraints extension, which MUST be used only in a CA\n> certificate, indicates a name space within which all subject names in\n> subsequent certificates in a certification path MUST be located.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nkyoUMF0Y1GquWB5sWpfCz3nK\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nxih1fOMIywOUWAXbBZONgeWd\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIICRzCCAeygAwIBAgIUN+nPDy5tkimGUo6kyqIRfivrDEAwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBqMTkwNwYDVQQLDDAxNzQ1NDExMjA0MjQwMzE0MTM0MTA4\nNzY3MjM3NDg4MjIyNDA0NDM2Mzg5MjY4NTAxLTArBgNVBAMMJHg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABGZbYbvczLVaS98dCR14okc7/8hrujWcAeYgMrzLBnhhNy40r36cR4L0SFyq\n4Y7ZXk4NG57fZjtFf3m9KxwM65mjgb0wgbowDwYDVR0TAQH/BAUwAwEB/zALBgNV\nHQ8EBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wHwYDVR0jBBgwFoAUkXDC\nynPeyH+ZxfH+cVn5whGkj5AwHQYDVR0OBBYEFB7ywT9AAMXHAWbXnEn4FZS/sW/Y\nMEIGA1UdHgEB/wQ4MDagGTAXghVwZXJtaXR0ZWQuZXhhbXBsZS5jb22hGTAXghVm\nb3JiaWRkZW4uZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSQAwRgIhAJK/8YPBXIJS\nPdYlXeVnHCO7Zv9xVCqS0ib5+rxpaNjhAiEAxY7lFx+Me/04nLzbjNNbjhS108qY\nl6cur0tbbKRu9mQ=\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\noCqiPQAg1Jnqz1QYB06qLNyodVLdtS0anaqc15YNWcc=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nN9Nce84PiMVO\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\n6YC0tAv+Zk5GemCUhTxslh8iGtPPVrZEvPA58r4x\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1266,13 +1266,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA1 -> ICA2 -> EE\n | | |\n | | |\n NC SAN1 SAN2\n```\n\nThe root contains a NameConstraints extension that forbids\nSAN1 (forbidden.example.com) and permits SAN2 (permitted.example.com),\nwhich should be rejected under RFC 5280:\n\n> The name constraints extension, which MUST be used only in a CA\n> certificate, indicates a name space within which all subject names in\n> subsequent certificates in a certification path MUST be located.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n3HqySzU86wIgOP1JUlji2v/CZ0Id2blL3ffI+HskFe7jvai9CkiuE6M=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nT244L6czAiBCvmYIU9qS0MyPbUiNYwQxYGUpx96rLubCp6gOiGb0rQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nAiEA6wx2BF7LLxi/uD/4tS8awalbdDbT6I26rFE0KD499ms=\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----\nMIICWzCCAgGgAwIBAgIUNqoifbdW9Nun2AlGDvIvKigLjcswCgYIKoZIzj0EAwIw\naTE4MDYGA1UECwwvNDE3MzYxMzA3ODEzOTg0OTI3MjcyNTkyMjEwNjk5NzU2NTk3\nNTQxMjA3MzE5NDMxLTArBgNVBAMMJHg1MDktbGltYm8taW50ZXJtZWRpYXRlLXBh\ndGhsZW4tTm9uZTAgFw03MDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowajE5\nMDcGA1UECwwwNDExMTUxMTI3NjQ1MTY4NjE1NzAwNjQ5MDIwMjAzMzQ4NjAyNzY5\nMTIzODI5NTU0MS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1wYXRo\nbGVuLU5vbmUwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQVOnX0Ofs7ndlR6zr/\n+7niqGHgbjKRRrv2fOI66WqQS4WJKYOtJ3hmGg4G5Vk8kpGjXxOom1DHbYTnyL+7\ns/HOo4GDMIGAMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgIEMCAGA1UdEQQZ\nMBeCFWZvcmJpZGRlbi5leGFtcGxlLmNvbTAfBgNVHSMEGDAWgBSKUEqeUl+eFwGj\n3YDrxO8DFgXvnzAdBgNVHQ4EFgQUnZj40w6J0/n1FX/5wXNJgQ8a/9UwCgYIKoZI\nzj0EAwIDSAAwRQIgUmsRvvK4eTujiQ+Wljhjrs4xfurkoi0Lu6gon8ieNd8CIQCO\nCXpxUuOlLThrpbfXRY1ExIcVCRciMLnSWH1IGkAeFQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n+tICIQDtEIssL35kdJWWms6Ae5ejQ63NG30789YhL+Aw4dOHxw==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nqnkc7OzcKWo2zOV9o0sVXj4g/CGZfStFU3EwzPya2w==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1292,13 +1292,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA1 -> ICA2 -> EE\n | | |\n permits: permits: SAN: foo.example.com\n foo.example.com bar.example.com\n bar.example.com\n```\n\nICA1 contains a NameConstraints extension permitting `foo.example.com`\nand `bar.example.com`, while ICA2 contains a NameConstraints extension\npermitting only `bar.example.com`. The EE then contains a SAN for\n`foo.example.com`, which should be rejected under RFC 5280:\n\n> a name space within which all subject names in\n> subsequent certificates in a certification path MUST be located.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUbUqcH8uopWr95k8m7V4zYUuKp9IwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQMPOqYNNbRA/CJoqzYXjQdANOooLXR3zLq+EUh\nnQf7qaX1E/XlDj20ws7Pw5mZ7HHVaVb85Y8fKaW7QyEtwsvDo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUw2F6BxYrdSahMymLSI9RKg0HBD8wCgYIKoZIzj0EAwIDSAAwRQIg\nd5ztqzHrcvpoU3M9A7/EqOc+aSyAAzb51RllxH1lbIYCIQCrE6n53hnwLLfSNunj\nwPQNPXKBlPALuGkv/Zsd/1imGA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\niUeJYJ3ryGIxD+nIbE/LoTlpgA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nk5sXaNGW2NZwAiBldnAyoVDaCT4MmQV2MD2A+35AVPuCCViTvGz5qF7xEQ==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\n6v3k3isaNqSK\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nBpZBG37078S89gIgUXApHXfpbwubshz8cT1qRPe1EhKwGS/F0r5hGfatF4M=\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nIz19Keinm7A=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICBTCCAaugAwIBAgIUFNMRkq0s+OIIRHm/CHlD+95dpTAwCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwMjE0OTI3MDMwMjE5MTE3NjcyMjA3MzExNTk4NzQyOTA0OTc5\nNTEyMTgyNDkxODk5MS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYx\nFDASBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE\n8pEa5NSvouq06kINIo+uXjs8rD9qcXzIsTS/9aU23M7g9enhyg9ZQjkYhAGSmaa3\nTKxoA9PwHur7i//lXDdzk6OBgDB+MB0GA1UdDgQWBBR+dMV15ZRBKHjRBlx0oFvN\nn3c75DAfBgNVHSMEGDAWgBSHzyjVq/u4Ws8ACzmY4kaoenNQNzALBgNVHQ8EBAMC\nB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwGgYDVR0RBBMwEYIPZm9vLmV4YW1wbGUu\nY29tMAoGCCqGSM49BAMCA0gAMEUCIQDVhhNEAo6vrIiuIdc+zI18AuNmk31vG+AY\nsYMUh6F41QIgR1nFOD87azFFpXJymRAe9pF4+b54yOX7dlMGLlZyHms=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n1JAWqtLKEwIgR52VQOnEoV1o5A336qynUBDe536yR1HkDPKVdcjS1gw=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1318,13 +1318,13 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA1 -> ICA2 -> EE\n | | |\n permits: permits: SAN: foo.example.com\n bar.example.com foo.example.com\n bar.example.com\n```\n\nICA1 contains a NameConstraints extension permitting only `bar.example.com`,\nwhile ICA2 contains a NameConstraints extension permitting `foo.example.com`\nand `bar.example.com`. The EE then contains a SAN for `foo.example.com`,\nwhich should be rejected under RFC 5280:\n\n> a name space within which all subject names in\n> subsequent certificates in a certification path MUST be located.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nKX2JeitWMzBrEL5wuap6xD8lKsk=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nPAOL/ly2zTyRP4iooYWm83oKbw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIICJTCCAcugAwIBAgIUJu+dxbeu7niIKHamULbXBclCS9IwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBqMTkwNwYDVQQLDDAxODE0Nzc4MDU4MzYyNjUwOTkxNTI3\nOTI5NTk2ODQxNDIwMTUwNjQ3ODQ0OTU0MjQxLTArBgNVBAMMJHg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABAMW7UTQUnZIGgrdp1QOtcwRzurqNfgy5ItKgzycAmtq+JDNT0+AiG9WPn4s\nSjVg8MWn0H1b+zAdvpwPyIp4rLKjgZwwgZkwDwYDVR0TAQH/BAUwAwEB/zALBgNV\nHQ8EBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wHwYDVR0jBBgwFoAUUyxY\n8XYD0j9FoJ3jhP+jPc9mMDgwHQYDVR0OBBYEFLpIeJjizEdyDjD1L6htKeeainU4\nMCEGA1UdHgEB/wQXMBWgEzARgg9iYXIuZXhhbXBsZS5jb20wCgYIKoZIzj0EAwID\nSAAwRQIhAMjgSe3MTotwh4iIDuI4QFnAmLv/sFBPJx8fY3dVgR+UAiAtEPE6Ypic\nZw3V75ekwg5Lb+dwMwRIOkRiexAwxHbhrA==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\nNC8smCXpiPqLarq1hFShOUPAaH6KLuEDm/qk\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIICJTCCAcugAwIBAgIUHNVRALz9I4IMZ7B3ZloccTSihTgwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBqMTkwNwYDVQQLDDAzNDI0ODUzMDUyNTgyNzUzMjY4NzA3\nMzgwNzM3NTc2MzcyMTc3ODc0MDM3NTQwMjYxLTArBgNVBAMMJHg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABJ52ep3SzTKJORxK9cJkvGUrkYsY8ujLY7fnZluojcGgIxNXzOULr9cMjNPQ\noEyWVFcr8E8oaLt0yUOVgP6PKfyjgZwwgZkwDwYDVR0TAQH/BAUwAwEB/zALBgNV\nHQ8EBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wHwYDVR0jBBgwFoAU87OM\n7P9ZPu43IBJ9QNN9SSJeMFQwHQYDVR0OBBYEFAiT08Us8AlKcGdFOZK9nKYoaFsZ\nMCEGA1UdHgEB/wQXMBWgEzARgg9iYXIuZXhhbXBsZS5jb20wCgYIKoZIzj0EAwID\nSAAwRQIhAPsE+T4JuUmlamlPEIT4OOGdm+8akrMCElWNyUNFxApWAiASudU141l6\nWhWIoKJ779FO0B4MOrsM8aqVGDgs1LaxPQ==\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\n6Fo78rW5nh2C/ou/XzPClKQE/EAC4TlJxil53w==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nLP/E33gTAiAxyjWqBKYy7Cr/yzoHlD59KQVedN4eubWQQhRPlvLTow==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nttQxmmMO0AIgd7OpszUhJSQV79i6fbrCOUnoT6nDI5z1iuel8jnK17w=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1344,12 +1344,12 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA (NC: example.com) -> EE (SAN: .example.com)\n```\n\nThe ICA contains a NC that allows `example.com` and all subdomains,\nbut the EE's SAN contains a malformed DNS name (`.example.com`). This should\nfail per RFC 5280, since all names MUST be located within the\npermitted namespace.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nJ2pbCXdYMXyG+r1z62Irv7ta\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\njZIzqzQ1fnKL2E1JLLviYKba\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n452c3h6ns9SQD7yB6L35ucP21Gio\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nc1NmRneUhvZFIhT1ga40aqBsna9f\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICFTCCAbqgAwIBAgIUW/5BtGv5dYjlmMuBPpbYA/DShdIwCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwMTg5NTg0NTc5NTM5OTMzNTc1MjQ4MzcxMDA0OTY1MzMyMzM4\nMDcyMzc5Njc2NzQzMS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYx\nFDASBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE\n8Ujuq7gbRaaOLyWqxCMdpOIdHOehgGrEaxpWyvq08FV0zBx7RuClZQfGlN2n/piN\n51UhsyuXIOqTjoPsysPOHKOBjzCBjDAdBgNVHQ4EFgQUTRz/Dx5uj9uZ/ELP1QXT\ngklKlfQwHwYDVR0jBBgwFoAUEa7naGN9dtBdPmz+ngBLeEe7rBwwCwYDVR0PBAQD\nAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMCgGA1UdEQQhMB+CDC5leGFtcGxlLmNv\nbYIPZm9vLmV4YW1wbGUuY29tMAoGCCqGSM49BAMCA0kAMEYCIQCZphWNfEdD3kDw\nf3Rlp9xYlkcwwfT43ug0tKuwXO9UtwIhAKeqNxsrTAGofhEdayFqXdc1LHcQlTS2\nC85F1WAcFzwo\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIY+bYxQmSw==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1369,12 +1369,12 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA (NC: 192.0.2.0/24) -> EE (SAN: 192.0.2.0/24)\n```\n\nThe ICA contains a NC that permits 192.0.2.0/24, but the EE's SAN\nis malformed (containing a CIDR range instead of an IP address). This should\nfail per RFC 5280, since all names MUST be located within the\npermitted namespace.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nw5qWIeSrM+KAW6eJ1h+iBtDX\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\na6A1EPd8Q0XIJ944fLoLezEd\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\n/SAHaVXuP1N+2Pp30GiHEbzG\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\ng0SKCFm5R9/mnmtAORnNPdbN\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nPFL795YCIQD0Dre4mHPZzV8/+ef0fJxHOAmAPlsuGnEUoTw4fKLL8A==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nyqSK/BgCIQDVcEYM4i45EgkdslAytZi50uDmR13SaX03RylJ6PuGUQ==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1394,10 +1394,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert has a SubjectAlternativeName with a value in ASCII bytes, rather\nthan in the expected DER encoding.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nPD6JNsIfF2yYsXaRciGF81Vxt4w=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBkDCCATWgAwIBAgIUT/E9b7FQHxewhEZYhMZYG/caTBkwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQeQn6bv2K60a62d1M85mEdgG6LjNBSnHmT0yfi\noO+Z+lnoRt5KK2PVOPeAvOCAKFAS4wuwgkPkgf2FXUpETgV9o1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUuuLqlhx8LbTrnmO9sEpSDq0d2yEwCgYIKoZIzj0EAwIDSQAwRgIh\nANJZAUiOjMOIGto3iJYll4LGLdxDOj+XCjOqvEo92L9zAiEAlvghHiW9hGTwHSEp\nOqih9iSo33XXNNO8F06qyON6I64=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nwA==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1417,10 +1417,10 @@ "description": "Produces an **invalid** chain due to an invalid EE cert.\n\nThe EE cert contains a non-critical Subject Alternative Name extension,\nwhich is disallowed when the cert's Subject is empty under\nRFC 5280:\n\n> If the subject field contains an empty sequence, then the issuing CA MUST\n> include a subjectAltName extension that is marked as critical.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUMTee4Id9AD2o2CWBrE5sRwSBRI0wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATtBjYdsbmgDy4Zk9RVqQhx1AJYr01Y9/R0awYw\nfmKlKaadTxatGMhll4dyv9WLwRwHojd2vtwgTricm72YDftno1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUEN6QaTtlOADM+gkVhHTwO04/SHAwCgYIKoZIzj0EAwIDSAAwRQIh\nAKkwKpRInLyiKz5zshjuLWV2PVKwm+wf04VfQDr55d46AiB64IzcpMcDjS+iPkCr\nT1hxBBfiA/Wad7tjwSUOHuVz3Q==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nMeoFXznOK/SpZiT0L1Cglqa6z8g=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nrkPfZjZVbXHlVjzfTSSm3hOkOIjRxMn/N5rCskA=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n1BracjU9s0KI035I8PMotdx96a5cTpaDFIOTQuI=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1442,10 +1442,10 @@ "description": "Produces an **invalid** chain due to an invalid EE cert.\n\nThe EE cert contains a serial number longer than 20 octets, which is\ndisallowed under RFC 5280.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n+3res/tE/hk59l1rQhI/xwmk\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nYKLon+aTmITsqZpfZWHFwDOv\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n9aVbZZcEhqw=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nvRHzbwoZ\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1467,10 +1467,10 @@ "description": "Produces an **invalid** chain due to an invalid EE cert.\n\nThe EE cert contains a serial number of zero, which is disallowed\nunder RFC 5280.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUMseGq33czK/r1UQXnk4YyTRMlz0wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAT7tiLlIQh17RyMcowDDbUySGKWOyYyFqFn9iR/\nsgd9EEPddb88mCCX+cxkjl6y3My2+OxegndxYIJdqCQ+ty/Xo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUSbH8G3N2+fVALIXFZQX3b0OiWq8wCgYIKoZIzj0EAwIDSAAwRQIg\nPiTN9q9v2GRpSoL/HSfJS2gmRnokAH9MiCl1iWkrAc8CIQD8bH4FY++gXuSt8EDH\nJUwzxWesIPFZ8zCbKzB4Qc8VHQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nZdOsBuZQdFQxOx9+8ds90URg\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nUy+w4tpDjT0mBX5jRPXq/1lK1iAKxRZ1nHFU8rEKlIE=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\ne1k4/x2BeZqGq/Mwn+zH9YYfLvVESSAVAvk6JcV/yHo=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1515,10 +1515,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert has an SKI extension marked as critical, which is disallowed\nunder RFC 5280 4.2.1.2.\n\n> Conforming CAs MUST mark this extension as non-critical.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nXe6+zjHzTvFQrxBhAZI3YRPvfmhGkQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBkjCCATigAwIBAgIUPXQa2dVweGFy0SR4YOMsSGdei88wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARhyiBlQgNMYqBrZlPVbpvyhnPjmWUYxUfVvVVz\nBf8kL2yv0fwBbv6XmW4HZ3DOkeysMjnoHRXosGGLY2E1htRZo1owWDAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAg\nBgNVHQ4BAf8EFgQUQH5GYqL6fbopkrLDssiWuWjVMvcwCgYIKoZIzj0EAwIDSAAw\nRQIhAJhzirde5dffQRC8f1yYtkW1wNS+ggV4El8AgviuygOtAiBnHi89XbuwpcGd\nF8WoRFSnU0Fwzvtt7j+iwamYgemyWg==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nYBQOzQ==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBsTCCAVagAwIBAgIUR12hgPYT1s5kt9cByoWIDAOtFO4wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABE64bZfAHSECXcg1lHBHx+EsTBHQd1JyDAWkGBVexjy3\nZTlQtl/maH0HsXHb0ACTpHT91jhsxr0M3Xx0RK0xyZWjfDB6MB0GA1UdDgQWBBRu\nJ8OYA9riQ6xWU+K4vtjvANIm1zAfBgNVHSMEGDAWgBSkTnOjvmFfFuF9YomCd1SW\nuNkIwzALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSQAwRgIhAKLylm+xQbfcLBKhb8yQ\nq5ZO26LfJvOcId5Xb+rpOGFCAiEA1STx04XRJPtBF5fY9bEBUC410KO1I0DiTbYt\neE/SoF0=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1538,10 +1538,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert is missing the SKI extension, which is disallowed under\nRFC 5280 4.2.1.2.\n\n> To facilitate certification path construction, this extension MUST\n> appear in all conforming CA certificates, that is, all certificates\n> including the basic constraints extension (Section 4.2.1.9) where the\n> value of cA is TRUE.\n\nNote: for roots, the SKI should be the same value as the AKI, therefore,\nthis extension isn't strictly necessary, although required by the RFC.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBcDCCARagAwIBAgIUExmA1KyFXm/BXc8z5uAIYPLDI/MwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASHGFOLyy/RyJX+zxnK/nta+j8l7QoIrdqCky/9\nlvrdGvfk7aMPvy/3jau2UuhvnlvwTMfHwbq5O/AxYmsA39gwozgwNjAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAK\nBggqhkjOPQQDAgNIADBFAiEA5DVSZ28jZtlSfSzTJS0a09qExU/aLXgeHmSWRN74\nA3oCIF1Vfx7ZGcHwZKvMPjDSAX+MymyEAg8qybFutn5/dYJ6\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBcTCCARagAwIBAgIUTqTCnBTrmwQnyFF0JHZvJIhpZZUwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATUAneWXId0c2kTDFgL+DWI4TxAhLSoYzs1UmHU\nPbEARm+unhomFUSc3WYCkc+w2Rr0gMbYREol74YowSnV3GlFozgwNjAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAK\nBggqhkjOPQQDAgNJADBGAiEAzgzliOESQgJsbI6IFD0izigUFAz4LwAtRnVWl2nu\nNrwCIQDElJj3pKdyfbeYDdT6LrPSMVZYHOptNJbKYH4+HNdxQA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nZpZ24zA=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\niYsrdh4=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1561,12 +1561,12 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA -> EE\n```\n\nThe intermediate cert is missing the SKI extension, which is disallowed under\nRFC 5280 4.2.1.2.\n\n> To facilitate certification path construction, this extension MUST\n> appear in all conforming CA certificates, that is, all certificates\n> including the basic constraints extension (Section 4.2.1.9) where the\n> value of cA is TRUE.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\npJUjE+FNv5HBSKxc0Azie3+tiA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nIIWO4XzGSiLm/j4MvLvlgQ3wxpo=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nRMBrJU5q\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIB4TCCAYegAwIBAgIUPmrhx9x4Wh+nHmYZi+nHrfLVgvUwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBqMTkwNwYDVQQLDDA2NDIzNTU0MDE2NDAwMTI1OTU1OTgy\nODMzMTQ5OTgyMzQ2ODExNDYxODUyNzI5NDgxLTArBgNVBAMMJHg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEH\nA0IABGM7hB4RQvsOyWveWz5vu7nduKh3ahXadxRspV1JRXlNV0fw8LaEe18SEyQk\nDBlqXbnGiSmqIZgqazykeHCxHsqjWTBXMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0P\nBAQDAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB8GA1UdIwQYMBaAFEmMXpT8\nHumF0zr15tnvWB5FB3rYMAoGCCqGSM49BAMCA0gAMEUCICAgQUfFVDxHGbL5iF31\nOOn03HW/GBdWWVm23+/GQcOSAiEA3zIkH8cumIr/1KHHWrlihpDnXVyg+71bSuvs\n790z8BY=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nh6UCIEeRKsj3unXNIn8wUgovLdAZuKOFmbpQjKtCqrgCVVx5\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nGwIgeVrFLkW3CEKJ0GMucI4ymTh7/cCsEFf5jRF3v3snzrk=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1586,12 +1586,12 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> EE\n```\n\nAll three certificates are well-formed, but the root\n(and only the root) is expired at the validation time.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n1Be5UMSo2EkaDogGFLD9kJU=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nMkDR3nVuu+4NsSjjFREytCI=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nIQCTbi38Dt8O3YqhJMTX0ALO1v8A/jHjAQ3dFkpGO1gKEQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nAiBARreC4kRFyi0znZSGv+upiKh7rGBLg9pOAWnBhg+VEg==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAiBF57XFK1UhKmcGMcGjodfYnCFdGoFIRmck2mILtseVBA==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIQDu+LGOopd6e4xIV5VeT3+wXjhQIJ8CczBP4/uBcaJqJg==\n-----END CERTIFICATE-----\n", "validation_time": "2022-01-01T00:00:00Z", "signature_algorithms": [], "key_usage": [], @@ -1611,12 +1611,12 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> EE\n```\n\nAll three certificates are well-formed, but the intermediate\n(and only the intermediate) is expired at the validation time.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nfRPO1NwCvKGXIWpnKg9+Ww==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nmctNkf52PU9Yvr+MGUsl9+M=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIIB/TCCAaOgAwIBAgIUELmEnAIMGORfJ3rhwsh94pRx5AgwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MB4XDTE2MDEwMTAwMDAwMFoXDTIw\nMDEwMTAwMDAwMFowaTE4MDYGA1UECwwvMjY3MTcyMzk3NjMxMDgwMDI2MTg2MjEz\nNTI2MjA4NTA3NjMzNTM5NjE1MDg0ODgxLTArBgNVBAMMJHg1MDktbGltYm8taW50\nZXJtZWRpYXRlLXBhdGhsZW4tTm9uZTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA\nBCS5hDIaWGhi51hImTLh+7X9Dl+rfXMAuh3w9E7A9Lhrmq/1YTKMm20oizK2Dyqx\n0MD9WcV3q4ViGnrjBlt1DQ2jeDB2MA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQD\nAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB8GA1UdIwQYMBaAFC0az9vXvlSg\ntLwft/5LTrj52zO+MB0GA1UdDgQWBBTJj0y+BGa/igkR5ZV3EXrWnSmTozAKBggq\nhkjOPQQDAgNIADBFAiEAjE4ktYL16MxQ5n7eFTfKTyPzdge//xs68KhPPxGvopEC\nIHQS0Y/a3Nm2A0skBefI1K1L5sOGhTdXRgZFYekPrYDS\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nIQDBzKT0Kd6QlK+Q8F87UuwvNanDh+2LFh96OY1fWQSp1g==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/jCCAaOgAwIBAgIUH0oQnDDQnNHMl+2vJntGMatK5XgwCgYIKoZIzj0EAwIw\naTE4MDYGA1UECwwvMjY3MTcyMzk3NjMxMDgwMDI2MTg2MjEzNTI2MjA4NTA3NjMz\nNTM5NjE1MDg0ODgxLTArBgNVBAMMJHg1MDktbGltYm8taW50ZXJtZWRpYXRlLXBh\ndGhsZW4tTm9uZTAeFw0xODAxMDEwMDAwMDBaFw0yMzAxMDEwMDAwMDBaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5ceE\nzuCZsuSd++qi3rXQdxX239cYas3JPptgCJmEozePhNojaUDIclmA/io7iwEGTT2G\nf+ObaEUIsvZlCO25h6N8MHowHQYDVR0OBBYEFP787eWy+CqYvENleVOxXl2bUuZA\nMB8GA1UdIwQYMBaAFMmPTL4EZr+KCRHllXcRetadKZOjMAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNJADBGAiEA9sqPHwB/oQnxzlNsFC0Voz1G3DUuy4ucIt86nsZjDPcC\nIQCX6pvBn2C4dKyqZUzSWVNGZYdRc1aarBA69B96Dqbzlw==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/zCCAaSgAwIBAgIUIufk9a8ivSrVkssctHB1kC1I2OowCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwMzY5MzY3MjcyNTUyNDg4OTg2MDI1NzA3NzUwNDYyODY4MzYx\nNzk3OTEzODY1ODAyMS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwHhcNMTgwMTAxMDAwMDAwWhcNMjMwMTAxMDAwMDAwWjAWMRQw\nEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABD0k\nXjn7umSnbV5tmtBwlCOXXxGCMrfYx1cNbVsdR/N0S9DJiREj+Y04KLlTrrCxCRMr\n1fMI6fASm3SadgldMO+jfDB6MB0GA1UdDgQWBBRx1Dp0zZCTdjdqrx+dDvPaS+bM\n3jAfBgNVHSMEGDAWgBTWgmgZFHYa3ygHx8XPdWpsNmhViTALBgNVHQ8EBAMCB4Aw\nEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wCgYI\nKoZIzj0EAwIDSQAwRgIhAPIP+AbXvUXn8f7BxOVVpNbToYlfwqfwK1+dlyKQfp3b\nAiEA1ijOD+CypICOsKQixswXpfXzFROTbxz0HyU5/VXXR10=\n-----END CERTIFICATE-----\n", "validation_time": "2022-01-01T00:00:00Z", "signature_algorithms": [], "key_usage": [], @@ -1636,12 +1636,12 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> EE\n```\n\nAll three certificates are well-formed, but the leaf\n(and only the leaf) is expired at the validation time.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nTAN3NILN1pMFM+o7sClFBA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\njr+uiBvYjT8c+NB8arIJPvJH\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----\nMIIB/zCCAaSgAwIBAgIURdGpt/9XDoBz1J7whhn4oqK19r0wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MB4XDTE2MDEwMTAwMDAwMFoXDTI2\nMDEwMTAwMDAwMFowajE5MDcGA1UECwwwNTY0MjQ2Nzg2Mzg5MjEzOTI3MjAxOTUw\nNjM2NzMyNzEyMjg0MzI3Njg1ODgyNDMwMS0wKwYDVQQDDCR4NTA5LWxpbWJvLWlu\ndGVybWVkaWF0ZS1wYXRobGVuLU5vbmUwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNC\nAATDjY4S2fKVG0f16SOR2V0h64pejnGk3rWsz4/714PFIGvolwAeAvVT2Gf9wRC1\nWhy/l0NRNZK3k1RcA8Gukhlyo3gwdjAPBgNVHRMBAf8EBTADAQH/MAsGA1UdDwQE\nAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAfBgNVHSMEGDAWgBTj6MbDy1yn\nISaCsFW05jsK1wyRWTAdBgNVHQ4EFgQUke1xboTYWnaBfY2woGJq+68kwuswCgYI\nKoZIzj0EAwIDSQAwRgIhAMHUmKeyjdJzqxDKdQejJbBKxoWe6Ap9tOCpUH9jscIt\nAiEAgbZQywtQ4TV1bTi1d4csApDBpK+vs8ebs8yZv9Ro3nE=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nIBBBojLz0V25bGzNTimTY42tR2fwPlOkrOTzqrcJhbLS\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAiANY4YHGO0rNpIfoeoM9GA2JNcGwyUOWjIX6G/wnVgSrg==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAiBclfEWj6u48Q19DkYt9/s9/1BpjnoB989f9UXMa/iUUw==\n-----END CERTIFICATE-----\n", "validation_time": "2022-01-01T00:00:00Z", "signature_algorithms": [], "key_usage": [], @@ -1661,10 +1661,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThis chain is invalid solely because of the EE cert's construction:\nit has an empty issuer name, which isn't allowed under the RFC 5280 profile.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBcjCCARigAwIBAgIUcJVqrza74jcapzG7Wc+CtVaFatowCgYIKoZIzj0EAwIw\nADAgFw03MDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowFzEVMBMGA1UEAwwM\nZW1wdHktaXNzdWVyMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEVCYM6xL+5+nG\nZgR8SCEYSHwSNDrY0hXIC26MGvsnJ4ZeaZs8u0ONC0ou+WnPC3YbKpakLgqI6w18\nH1t5AZEEQqNXMFUwDwYDVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAgQwFgYDVR0R\nBA8wDYILZXhhbXBsZS5jb20wHQYDVR0OBBYEFKRsnG5yQOp0UI2q6T9r16G5uf+b\nMAoGCCqGSM49BAMCA0gAMEUCICYwHnXbI50bLow1RnmvcbkROq/S1piwEpZyhvOx\n0ALGAiEAmtthRrbVKzS8i74E/ld1bM0W9CLofsIyCzhAv4cIb38=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBcjCCARigAwIBAgIUWcjJ6hExYcHnCrQYy80kgNcyidowCgYIKoZIzj0EAwIw\nADAgFw03MDAxMDEwMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowFzEVMBMGA1UEAwwM\nZW1wdHktaXNzdWVyMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAENTda0r5raq70\nr6AXMnxztA/1idU8ucqIlyczTIajzQwPytf7UGhQfpkSFjjVmVUrWq5j5DG3Rbic\nDm61ugCK+qNXMFUwDwYDVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAgQwFgYDVR0R\nBA8wDYILZXhhbXBsZS5jb20wHQYDVR0OBBYEFM1xOPrUFP7RnglTUK3PTimUKm8N\nMAoGCCqGSM49BAMCA0gAMEUCIQDCCNwRGVuVmrxXxBXqFNjX06HrKxm9XDO7cX3j\nwrzIKwIgIWBCiaQ52J7+FRvUXQiC1L1DuUYDLToj/MdiIfoim8I=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nmGg=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nhg==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1684,10 +1684,10 @@ "description": "Produces an **invalid** chain due to an invalid CA cert.\n\nThe CA cert contains an empty Subject `SEQUENCE`, which is disallowed\nunder RFC 5280:\n\n> If the subject is a CA [...], then the subject field MUST be populated\n> with a non-empty distinguished name", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBdjCCARugAwIBAgIUVDyk+mQGItqpRXHoyrWJSqM8AwwwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAAMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEioA1aV/+\nvYZ4RDR1AOw4Aec0wgQyA3iDz02o3wvKlgHpSQ7WRkL5xIMy95PI/H61nLyktG/u\nJNCV6O8o5RxxRKNXMFUwDwYDVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAgQwFgYD\nVR0RBA8wDYILZXhhbXBsZS5jb20wHQYDVR0OBBYEFOz4OM3AusrlsOs+UuL9GgZA\ngaxsMAoGCCqGSM49BAMCA0kAMEYCIQDY2QMlo12mKINSY8zYW/85R+Z1Vnf9WAFy\nArnIRpqUOgIhALHVXCOpAX706BUebhmH2CZ7PNP4iMqNrcvCEZSikADH\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBdDCCARugAwIBAgIUcMPNZYub/RvOxI2Rj5vsBBwUhe8wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAAMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEt7ftV/Dy\ngjPuYbILi1pIcgfwHsQ5kfcjiyZy4t4CE3QFXZO73u7+49iBr7EsuLyI81tMvy/g\nAW4WbrFjDWSXWaNXMFUwDwYDVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAgQwFgYD\nVR0RBA8wDYILZXhhbXBsZS5jb20wHQYDVR0OBBYEFMsGylCg5T14yiQ2fGZxKEx0\neoJ+MAoGCCqGSM49BAMCA0cAMEQCIDi8PduR/yPJZncxL7zIa5ee+YVuqPyHN2vO\nBdZxPIcvAiANufL/F4mmz5dsuvqLMkHLV4MmqiJbIfoe0QpRJ2aOAA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nD6eV+8f4cXC9yO94ReHCNMe1Yksck2H2dXY=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nzMmxkxMrwjav6OQBamNsId9ChodFULlZjpX/\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1707,10 +1707,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert has an extension, 1.3.6.1.4.1.55738.666.1, that no implementation\nshould recognize. As this unrecognized extension is marked as critical, a\nchain should not be built with this EE.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nLFuN9/e87XuDnraod/FRImIqhA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nFaRoMLFZirYnNVIIZPpQGXeYAg==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\njoZR9+q/kg99enQF4h1zQGmWo7mTLncafA==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nJM4zhluLMsgdLMsHc+0JEP4T+iy7FUbNYg==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1730,10 +1730,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root has an extension, 1.3.6.1.4.1.55738.666.1, that no implementation\nshould recognize. As this unrecognized extension is marked as critical, a\nchain should not be built with this root.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n4V448pgCIQDcfHcwHh3eNu4MtvAeRLIRidujaVRBy3tANr4I25bZfw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\ndrUm1Q4CIQDzVO/eVFQwxVhVW0nrtejvI332z8Dih6bQmiIEEjKPdg==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAlmAP4A=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nwtf+LA==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1753,12 +1753,12 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate (pathlen:0) -> EE\n```\n\nThe intermediate has an extension, 1.3.6.1.4.1.55738.666.1, that no implementation\nshould recognize. As this unrecognized extension is marked as critical, a\nchain should not be built with this intermediate.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\noI9gFTOGeplRQ0DQrCBjwDdN8w==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nmfTqa0OeXLJcOh8LqsR/KASvuiY=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nx3n8K3E23HsSwQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIICFjCCAbygAwIBAgIUNXXTyRMszSslN/sFTqd6faUaWE4wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBnMTkwNwYDVQQLDDA2MjQ4MzE0NDc3Mjg1MDY2OTgxMTkz\nNDk5MTI1NDU5NDg3NjE5MTIyOTk0NTIwNzUxKjAoBgNVBAMMIXg1MDktbGltYm8t\naW50ZXJtZWRpYXRlLXBhdGhsZW4tMDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA\nBC9SMhsBjEhGuZjQ+w5MHT0+6RIUZFDbIgjMMEZTC3YUlt8Iz9iNrY+2rlaJObq7\nLo+sl3R39prRNIcWutJs1eWjgZAwgY0wEgYDVR0TAQH/BAgwBgEB/wIBADALBgNV\nHQ8EBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wHwYDVR0jBBgwFoAUxq/8\nQqTG1Savs62awS5pxYLsxiQwHQYDVR0OBBYEFEaYw6HUtala+m6EIX+W3J7aAgpe\nMBIGCysGAQQBg7M6hRoBAQH/BAAwCgYIKoZIzj0EAwIDSAAwRQIhAKJhQa0HABG9\nwkhgZnBtDCesdeWswthu6dp5ZnH5xcdUAiBH96ozMYdQJ418C9r0pZclsBcpvImJ\n6kup7PeIhcpSkA==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIF3PBr1Xij0dzyROYGI3nNTgni9BBcvVqZzU1r1TiwzA\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAKi5dTi2kDVmnakxFFidFl+ZU5okLOimH3rHd9h4Dymv\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1778,13 +1778,13 @@ "description": "Produces the following chain:\n\n```\nroot (untrusted) -> intermediate -> EE\n```\n\nThe root is not in the trusted set, thus no chain should be built.\nVerification can't be achieved without trusted certificates so we add an\nunrelated root CA to create a more realistic scenario.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBozCCAUmgAwIBAgIUeMfyfhVhzoJ/SFCIJmGRocAIV2UwCgYIKoZIzj0EAwIw\nJDEiMCAGA1UEAwwZeDUwOS1saW1iby11bnJlbGF0ZWQtcm9vdDAgFw03MDAxMDEw\nMDAwMDFaGA8yOTY5MDUwMzAwMDAwMVowJDEiMCAGA1UEAwwZeDUwOS1saW1iby11\nbnJlbGF0ZWQtcm9vdDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABGPrCqHKjrAH\nK4m/+BitVgjy/YrgzHCn0/OwzFRBjXvN40Z7eQ1NbLVlVX5WE1SbnApvK7kyabj+\nxG8lc/aKwxOjVzBVMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgIEMBYGA1Ud\nEQQPMA2CC2V4YW1wbGUuY29tMB0GA1UdDgQWBBSM7/CjDNXG18wnjE16sHLQGVOE\nVTAKBggqhkjOPQQDAgNIADBFAiBV9fEG4Kww7q3zTb/QlObGtMOsmJTMO/6Q4/rR\n5RIX4gIhAMVrokD4Lc1wyReSosN2NaaWfKCqHAglCKQLtXPpiixW\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\na10y/WcCIDCdCQn9a5DQKdcUKHzGoHWETKsTQc1211qWM6Gu/85e\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nD6K3yBOBekGM25XXZvSEI0/vWw==\n-----END CERTIFICATE-----\n", - "-----BEGIN CERTIFICATE-----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\n0fICIEiIMAZWqarCXCMrSenBFLff7ah71q29MaxcRBFtTa8D\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nNegfAVZ3X/tZz87bN1WgB+hq\n-----END CERTIFICATE-----\n", + "-----BEGIN CERTIFICATE-----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\nPh4CIQDoI5bu3fwmwvpni/CwpvihCBeAYxlNMMI8sSaqL4OryQ==\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nAJ6Ttylmq8Qcmbq9UeVue47m0G+/lFyBEAtMP2jfjG0f\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIQCNY8Gip3buwTWBHW4xDh8ftz3gzAtQBHTsqOVu0dUEiA==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1804,12 +1804,12 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> EE\n```\n\nThe intermediate CA does not have the cA bit set in BasicConstraints, thus\nno valid chain to the leaf exists per RFC 5280 4.2.1.9:\n\n> If the basic constraints extension is not present in a version 3\n> certificate, or the extension is present but the cA boolean\n> is not asserted, then the certified public key MUST NOT be used to\n> verify certificate signatures.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n1Uh7ul2kRYCpC14WuUslMPau\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjTCCATSgAwIBAgITFYRDeEULu5F/OZ+tRWQN35zGQzAKBggqhkjOPQQDAjAa\nMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwIBcNNzAwMTAxMDAwMDAxWhgPMjk2\nOTA1MDMwMDAwMDFaMBoxGDAWBgNVBAMMD3g1MDktbGltYm8tcm9vdDBZMBMGByqG\nSM49AgEGCCqGSM49AwEHA0IABCMeyX28OmrG7+Nvd8PAIyJCb+liyhYcmPK6G2/F\nRIqv8raohozH/+tLCCFJeu6Hrix9KGjfagx2iv78Lkzdw2GjVzBVMA8GA1UdEwEB\n/wQFMAMBAf8wCwYDVR0PBAQDAgIEMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMB0G\nA1UdDgQWBBTeQEAJf0aFYJo8R8z1SYJPSSu6EzAKBggqhkjOPQQDAgNHADBEAiBD\nHoY1BniVwQaJwOfXT36MvhxAmnTnHSntkuJClW8I4wIgBnCZl0NviiOKGZEcUwsm\nveyDrQRmrEyqfevN8ghLH1s=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nIF0vhiZjsduJo3GyrTgvX9uJk7MhOBogO3eWBUM1wsgm\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nmGMTaxwbj6u8VhoYRoPzgP7O5s6eRGYp97+AL2w=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nQwIgQ6ZHI7k9avjFGw+w0zy22HS+chlAQot6pHTwxH9am/4=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB/jCCAaOgAwIBAgIUQQnqCjoo1skrJd7nW3YTN+6y6tEwCgYIKoZIzj0EAwIw\nZzE2MDQGA1UECwwtNDc5ODM3NDI5Njk2NTg1MDg2MDM2NjI2Nzk4NzgzMzEyNDM2\nOTE4MDExNDU5MS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1wYXRo\nbGVuLU5vbmUwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYxFDAS\nBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEo1Zs\nxp/Npcqd0rqwGb3VVPKjiLUeyGdX1pTrscmFIy4wQ51lz1eoCZnjFussJCMbcDC7\nMgYskskCw85oKyB8baN8MHowHQYDVR0OBBYEFE93+Vt5D1Gn0S8mjqkviXLHUSku\nMB8GA1UdIwQYMBaAFAfWJmQCDCX27mILd3noOcy8FbjrMAsGA1UdDwQEAwIHgDAT\nBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAKBggq\nhkjOPQQDAgNJADBGAiEAxw0H5J+106BdHiaJYxYJqxugg8dlRyhEg9ve7brh1bIC\nIQCY2u4rfjrOTF88nlEfxanZN0yVJ/H0olBP33txMLYkZA==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1829,10 +1829,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA -> EE\n```\n\nThe intermediate CA is missing the BasicConstraints extension, which is disallowed\nunder RFC 5280 4.2.1.9:\n\n> Conforming CAs MUST include this extension in all CA certificates\n> that contain public keys used to validate digital signatures on\n> certificates and MUST mark the extension as critical in such\n> certificates.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nT/P3BF2GqnmHsHa2Nv0ej8vPAbU=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\ndPkaTPQOoLWaOxBqu3C1BBQhPQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\naq8CIQDg91NulMyS18vElybUj+GZFFSG9MjahBSJToyQa+iM8w==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n8wIgOszZWfSoiUCTtayYfkIJCVqtpFvrESz+bbKZhvhzNnM=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1852,10 +1852,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root CA is missing the BasicConstraints extension, which is disallowed\nunder RFC 5280 4.2.1.9:\n\n> Conforming CAs MUST include this extension in all CA certificates\n> that contain public keys used to validate digital signatures on\n> certificates and MUST mark the extension as critical in such\n> certificates.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBfjCCASSgAwIBAgIUfz2N3kz0YziwKHbXrOCv/uHmGM4wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARTzAZgm3yPQQL4LwtdLOhO2esjin22+egTM2jA\nDzC36Lq4CWuj/Z+/uuAPx3JP5M2MEVPXFfp2n6tx9tE3Um+2o0YwRDALBgNVHQ8E\nBAMCAgQwFgYDVR0RBA8wDYILZXhhbXBsZS5jb20wHQYDVR0OBBYEFFIAvxdOJcN0\n34qzigrU/jcLuBqsMAoGCCqGSM49BAMCA0gAMEUCIEUx/9HYXV3TRrjRHppuOHLW\ny44D0i7cHpl4ehqBuVBQAiEArD5WDh/ZvNoLamNnbZJpZbu//8IdV5Cs8d6UVSRx\nZcA=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nbA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBsTCCAVagAwIBAgIUE6H38sztzX316N6AHjvC85RNblkwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABJasodJoquaiMVeJH8+Pp5KVrFVnrOSudJEI7BpSVqZs\n+xZpOvl+Gm1DeMuOqKnn4oWVldS6QDIQwgfRv3HMa/2jfDB6MB0GA1UdDgQWBBR1\nEXzaVv9aeD4yzlM0SEUi21dPfTAfBgNVHSMEGDAWgBRSAL8XTiXDdN+Ks4oK1P43\nC7garDALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSQAwRgIhAP+xDA+6G/yzGwuq8GUt\n6cLdsjTE3kskjZw4bi/jHsY7AiEA0Ic3DQ4U8XCGCA2kzwTYcshxt7wvKd3QglSe\nS2j0d/k=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n1GpCFQ==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1875,10 +1875,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root CA has a non-critical BasicConstraints extension, which is disallowed\nunder RFC 5280 4.2.1.9:\n\n> Conforming CAs MUST include this extension in all CA certificates\n> that contain public keys used to validate digital signatures on\n> certificates and MUST mark the extension as critical in such\n> certificates.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nqtzrPW7HgT5U91ZcF2bmIA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nYVHO0pkG4tWcXmDNXwpy\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nF1IxcQ==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nvde94K4=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1898,10 +1898,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root CA has `BasicConstraints.cA=TRUE` and `KeyUsage.keyCertSign=FALSE`.\nAccording to RFC 5280, these two fields are related in the\nfollowing ways:\n\n> If the keyCertSign bit is asserted, then the cA bit in the basic\n> constraints extension MUST also be asserted. (Section 4.2.1.3)\n\nand\n\n> If the cA boolean is not asserted, then the keyCertSign bit in the\n> key usage extension MUST NOT be asserted. (Section 4.2.1.9)\n\nAlthough the profile does not directly state that keyCertSign must be asserted\nwhen cA is asserted, this configuration is inconsistent and clients should\nreject it.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nKu2DSV40gzthheCLUMvVuNa19w==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n+3jMZas4m8m8ijqhRqxZvpRQ\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nJz5dSk4=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nj8xS1w==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1921,10 +1921,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> ICA -> EE\n```\n\nThe intermediate CA includes BasicConstraints with pathLenConstraint=0 and\nKeyUsage.keyCertSign=FALSE, which is disallowed under RFC 5280 4.2.1.9:\n\n> CAs MUST NOT include the pathLenConstraint field unless the cA\n> boolean is asserted and the key usage extension asserts the\n> keyCertSign bit.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n03HRAf7e4HSG1AcrtXyGwMCf6A==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nxUFnwruHgiwQaFyF440azcIx\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIGfq9qZhfzUf/yw15fvyBSFQTx122+pAYcnHlthans2L\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIQCeoLbUqmlpSHtM9HjTtVrVbgnPH0aju+qCOsknQKvfaA==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1944,10 +1944,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe leaf has a BasicConstraints extension with cA=FALSE and a KeyUsage\nextension with keyCertSign=TRUE. This is disallowed under\nRFC 5280 4.2.1.9:\n\n> The cA boolean indicates whether the certified public key may be used\n> to verify certificate signatures. If the cA boolean is not asserted,\n> then the keyCertSign bit in the key usage extension MUST NOT be\n> asserted.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nS74NKz3fBUwzS6zBtgwn8DNLdZg=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nuxrsw/X/57jE0c3NAztO66m+5g==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBvzCCAWagAwIBAgIUEl4KkvZlzke1oJ1U+45ABGIlkeUwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABKLmzLR68f8r+BsmHxJvmeREBCWNxLzLuwd7jl9yXfcI\n2ZvGx3eYr0bph87/Ry9OELXktW0yRFwxe7wPNcNaZcqjgYswgYgwHQYDVR0OBBYE\nFOd7kntokzwfoWRI5U90Surnv7pRMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAU\newFpjjsYLcLS0H5zC6PrnAeaUWAwCwYDVR0PBAQDAgKEMBMGA1UdJQQMMAoGCCsG\nAQUFBwMBMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMAoGCCqGSM49BAMCA0cAMEQC\nIGlqJ8rVWPgkPpbt279pCX1yOlnZYzCxsOFOJ4G3x78nAiBo8cwKxJC2Xuke0sIC\nbwh+IJx3zEiXqM+dw1SRC4k43w==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nvwEX5P64fJLIq1kIHMhyFecyDjwn\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1967,10 +1967,10 @@ "description": "Produces a **valid** chain with an EE cert.\n\nThis EE cert contains an Authority Information Access extension with a CA Issuer Access\nDescription.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nQIsyd+0qHILd/D5dWtRHbATiO+4=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\ncD3ebIYeW8R4jZvGMO/rIr8xZQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIB2zCCAYGgAwIBAgIUJ6iWFFM6tdV+m+h+HC8nGW3BgmswCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABBgnFDpBAk3KsfaYT/xr5UsiFmlGi4xA3QXJ5LceNnLu\n5MO83dLR9C5bihFiIEcfoIcXfE/iEeK2FEIwzpMkrvCjgaYwgaMwHQYDVR0OBBYE\nFNZIO3fCb+cS8zx+ru6nhkYcX2alMB8GA1UdIwQYMBaAFPmWN2QpPdRgMMti5aMO\n8M26/K8fMAsGA1UdDwQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREE\nDzANggtleGFtcGxlLmNvbTAnBggrBgEFBQcBAQQbMBkwFwYIKwYBBQUHMAKCC2V4\nYW1wbGUuY29tMAoGCCqGSM49BAMCA0gAMEUCIQCnGcB5x8DzQr+IFBTRTwz2FCJF\nxtUBP6KDnNSunKqBvwIgOz/gC7syF2RrhfBfHMDtAKVtm0vLNT+IFN8AnURpKhE=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -1990,10 +1990,10 @@ "description": "Produces a **invalid** chain with an EE cert.\n\nThis EE cert contains an Authority Information Access extension with a CA Issuer Access\nDescription. The AIA extension is marked as critical, which is disallowed\nunder RFC 5280:\n\n> Conforming CAs MUST mark this extension as non-critical.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n6ITokeDW1bZR/6uy2hh/Et+Icw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUawDaWxL0/kfpyItW1wrBL6DkhdwwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATBsE5FIB41HkfIV4UgjD4u9XkKBUmXCn78LpUv\nBN+77NWXJS0X+lvGzrKuqUES881nJPsz6nBqof6lNQ0JYrRVo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQU8XiMxTydBAbaUAZBaJofCxrcqiEwCgYIKoZIzj0EAwIDSAAwRQIh\nAJC0nFWEWJgcugPXcsRIGWa2LqoeAgRG5ibxle4U85dwAiA6ZfAZDKQFco6s44bc\nfgPD5PaMK5IV+ZSB1su6JEkBIQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n26wf\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\ng9M=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2013,10 +2013,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThis chain is invalid solely because of the EE cert's construction:\nit contains multiple X.509v3 extensions with the same OID, which\nis prohibited under RFC 5280 4.2.\n\n> A certificate MUST NOT include more than one instance of a particular\n> extension.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n4kGIXReyJGtydUCJgdpM/ks5\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n6CGLwfi+c1Wm4I7K3xjMWwfY3qQ=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nTYe1nYD0kizIAAqEHqC3yVC9yw+bP2cKCVbppYIXVA==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\njIAchwZy9EUxQ7ImOiyvMp16ovvrlA1jtSOh2lZy\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2036,10 +2036,10 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> EE\n```\n\nThe EE lacks a Key Usage extension, which is not required for\nend-entity certificates under the RFC 5280 profile.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nfdPFqdmjpdEfDJyDMscllSdFKlg=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nk1Y/6+ofQPQeduSDKBtW9T4tnQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBpDCCAUmgAwIBAgIUJrEafJMpoK+65bXNbbSCLRtVX5wwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABL4QzqU4+0plq0d1PTd2ywvOJuxw6hK6q+AoaJAd65K+\n5oLXg1QygYFZNsuOAV/dWSi4JwaD8GZj+ZzxA2SDq2SjbzBtMB0GA1UdDgQWBBTA\nYBFsMba3aTfnD8IuzBAeNkR+IjAfBgNVHSMEGDAWgBSYE+4tVhEsBu2h5+ROC4Di\nfi/8BjATBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNv\nbTAKBggqhkjOPQQDAgNJADBGAiEA9trKG1KQ6MWixDe1l69Q/XZna/wkiaJqsOtN\nhODxAgICIQD6RpU1HBLzL+i0JTITEK3kxW4Zb08+UfuqXT/L3PCxVw==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nu05WTwIhAON7xoK89+ZBsN/KWntgfA6WAp5+NREBpsXUQrBTw6SA\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2059,10 +2059,10 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> EE\n```\n\nThe EE lacks a Basic Constraints extension, which is not required for\nend-entity certificates under the RFC 5280 profile.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nG07VZ9IW/tjBs8LgDX5zVVP1wQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nIO2Hd4HPrF1lJxs9oUUVwca8x18=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nncoWrFQ=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nz2VY\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2107,10 +2107,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert incudes the authorityKeyIdentifier extension but without\nthe keyIdentifier field, which is required under CABF:\n\n> 7.1.2.1.3 Root CA Authority Key Identifier\n> Field Description\n> ...\n> keyIdentifier MUST be present. MUST be identical to the subjectKeyIdentifier field.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nQOGREGMKFLezp8oVNQTGd42OaCpmsuICZCt3so79DA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nCImkdT8VcJUXtbyKDpkEEfrM7Apx3vA2dHSL9DA=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n6TIeHA==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nzCoc7A==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2130,10 +2130,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert includes the authorityKeyIdentifier extension with the\nauthorityCertIssuer field, which is forbidden under CABF:\n\n> 7.1.2.1.3 Root CA Authority Key Identifier\n> Field Description\n> ...\n> authorityCertIssuer MUST NOT be present", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\ngXoRIggEi/okiVpqpXQosqF0nL3ArcxSFG2q\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\np5PU1jBjBFly8t01vcAjRJLVCOHsohKCJUWgaQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nwB07UA==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nM9MnzA==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2153,10 +2153,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert includes the authorityKeyIdentifier extension with the\nauthorityCertSerialNumber field, which is forbidden under the\n[CA/B BR profile]:\n\n> 7.1.2.1.3 Root CA Authority Key Identifier\n> Field Description\n> ...\n> authorityCertSerialNumber MUST NOT be present", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n7eeKn0TvEw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBtDCCAVqgAwIBAgIUMsmcxrdr9TMWJ5FQdXwYtn6ZC1EwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASLil/fg80sVETI0/F57DabfPOZAyvht5Dff00G\nBHR7SnJqbELLl8yYOTkkCwOlWdm4kKuq92LNLYMhy6o3RAeno3wwejAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAj\nBgNVHSMEHDAagBQELvsOLhobLHJG9KJBEFO868erx4ICBNIwHQYDVR0OBBYEFAQu\n+w4uGhssckb0okEQU7zrx6vHMAoGCCqGSM49BAMCA0gAMEUCIQDumShnOZB94l+4\nvloncxrPqOs5xX5tsIrY2+H5TWGZEQIgJ6qIg9EpZwgUtReiuU+JlgXW2AwaBr25\nCr/QU/RvP+8=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBrzCCAVagAwIBAgIUAq7Lv/Ln7+jvtEOOm8idEbNizZ0wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABEmx4d6rxXwVGbLSOmd5VMPISrf61yhz7aMsKF8w4fbQ\nBYMZNJ6b6XKX14mVC9bV0qtSCs8EDJzbmaNWHLqfW9ujfDB6MB0GA1UdDgQWBBQW\nqOeeCXKrLOu+lLnsFU0yHi7dLDAfBgNVHSMEGDAWgBQKSEEOz/gkR70uNQIS8o4c\ntZsrEDALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDRwAwRAIgIIUYEoSyDVZ96MU3JxWx\n2u5gwkOMApXqIB68YNW48rcCIDlu0gFBf8tlYOkDwBLVcQORXlJ6iGXvnIgLmkhK\nEYPg\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nydzJ\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2176,10 +2176,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert includes the authorityKeyIdentifier extension with the\nauthorityCertIssuer and authorityCertSerialNumber fields, which is\nforbidden under CABF:\n\n> 7.1.2.1.3 Root CA Authority Key Identifier\n> Field Description\n> ...\n> authorityCertIssuer MUST NOT be present\n> authorityCertSerialNumber MUST NOT be present", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\neCCj3hjz8OE5zqVYGjZ+/VSQOWLT9G4XvRbQHUAE\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n+XJoz4V7o3UAUGsW29X68rtcbxIMqzeKOcDiPs9Q3Q==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n1Q295Ic=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n731i\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2199,10 +2199,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert is self-signed contains an authorityKeyIdentifier, but\nthe keyIdentifier field doesn't match the subjectKeyIdentifier field\nas required under CABF.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nOnJUFKw=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\npJ+bGA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nmh8RZg==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nFQweag==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2224,10 +2224,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThis chain is correctly constructed, but the EE cert contains an\nExtended Key Usage extension that contains `anyExtendedKeyUsage`,\nwhich is explicitly forbidden under CABF 7.1.2.7.10.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nThiEiAojI4FRuyJWQ5UC3alTP04=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nOped0S+WZTpF3jPzFUpcf2r9\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nWU2BtKSkzJhZdCzj\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nJa0ilzhZbooPnNRz8Q==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2251,10 +2251,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThis chain is correctly constructed, but the EE has an extKeyUsage extension\nmarked as critical, which is forbidden per CABF 7.1.2.7.6.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBkDCCATWgAwIBAgIUEn8r/9ExCVhj7Ivn0HUvPz3147QwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASdUaWQ11WnQNKVv24qeekwW/ZoLlpt8hVqzfEl\nyTjvcdNxAUJnGdpNAFUwnDJ5fGBEGISLO/aMQapL31wUwAIho1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQU6GRIJJ/Rs2/UJvoEBXdh9L4cuccwCgYIKoZIzj0EAwIDSQAwRgIh\nAIhhblR8adQ54n4aUm6yHofClqv2MZo5m6XlKBjqGBQhAiEAugUZV17FlD73IrP2\nIxl6TtINRqhFhFuAbEC9V1foClw=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nwcW+0YaK9muSxMI0gVuN68gabA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nLBjKXgQL\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nx3nctwVbFw==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2280,10 +2280,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThis chain is correctly constructed, but the EE does not have\nthe extKeyUsage extension, which is required per CABF 7.1.2.7.6.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nxt3R0bZFBdSzZhMvRhS8ghEiPg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBkDCCATWgAwIBAgIUHXGEtASOPMUrfPwVUER/zfejmHIwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARyTDA2Vy5UVBL05SgldiZlFvii9YcFEqBh2bab\nXBUPUwJ0qTGJ9kG80pbB0eEZuLCA/ALnyhTzsxd4zQUOWHj4o1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUoKzOqrpRU5YP7aZgW8lV/YAlnQAwCgYIKoZIzj0EAwIDSQAwRgIh\nAMTQ4UBToMqh+aYorNgeZvp42PYVOX7OIE6kkJE2oe7hAiEA/5zLElR+M0D4gV77\n7C1aB++opq82egtkirnzp4gLGGU=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nALVyPZivqfQ92C1k5dyGi8ds9LX76TjXnt0FBhRWoA==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nSTfudi2Q9Su+cYn3Dg0YgSB8G0kCQZ3fDKYqmfjHKw==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2305,10 +2305,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert includes the extKeyUsage extension, which is forbidden\nunder CABF:\n\n> 7.1.2.1.2 Root CA Extensions\n> Extension Presence Critical\n> ...\n> extKeyUsage MUST NOT N", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nA2xkpcAOAiEAnedPKGVS3i32XNHwFymtX9yEjnt7mPXDStTr54ogXGQ=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nUZvv1oEgAiEA0WQv6OfDxUX8CEs7fKigI3wsmsmV77SDwLgJiGcfWHw=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nR3alWQ==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBsTCCAVagAwIBAgIUVp06szKWuzLqpO5p8SCf268me58wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABHZ6O4foxv4auy+Xh8F8z0N4C9+MPjI3hAxyvOxU9tRF\nH1DawPkGCeGRUA+2bS4NvdKzMFl/OQ2vVDOkFK4DXbKjfDB6MB0GA1UdDgQWBBR5\nFFy3GuzUZ+oNH2tEbirJ4hzzsDAfBgNVHSMEGDAWgBR481MdZjlMh0gUddftvtFP\nOI2cFTALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSQAwRgIhAM3xbaETxq7+d8JRLyjn\nyzeu4AwU2+njw1+aUgfQZD5ZAiEAiMh/l35ONmxgzscGKYma62rYxsDdWtc9gETe\nmT8Xzew=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2332,10 +2332,10 @@ "description": "Produces the following **valid** chain:\n\n```\nroot -> leaf\n```\n\nThe root contains a NameConstraints extension with a permitted dNSName of\n\"example.com\", matching the leaf's SubjectAlternativeName.\nThe NameConstraints extension is marked as non-critical, which would\nbe a violation of RFC 5280, but CABF explicitly permits this as an\nexception to RFC 5280:\n\n> As an explicit exception from RFC 5280, this extension SHOULD be marked\n> critical, but MAY be marked non-critical if compatibility with certain\n> legacy applications that do not support Name Constraints is necessary.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBsDCCAVagAwIBAgIUPq7ltVW5w4yCgStv3N2niYlJKjswCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABG0Dp/uEBjfh9AwZvF9WoQrJXHX2LeKJGv88SUaN4eLH\nKPM6aHCrlpQ0fOxlYRp5XSPSYIbsv6XJTQF8mkSlQvijfDB6MB0GA1UdDgQWBBQz\na/uv/dyzmC/rb3aOS+mbuH2L2jAfBgNVHSMEGDAWgBQTw1IVQ6xyTarpGGPJW2Ul\nc1E4ZTALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDSAAwRQIhAL8/mesZ4SzNQTRs2HrU\nzjas2Fufz0dagDY0s35eRbopAiAOATe6G5vM6ereJ9yDvvJOTNaGRe2UcXj6FuJU\nZ4/6ug==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBrzCCAVagAwIBAgIUUi4Vba1edZmpOmq55iVxqo0Rs64wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABFNx+13IgLwuL4M4KVHHKfNFGuDuOCmpTuET2ZiRA7Ox\nJemawePk9bmfYqi5ERZ8LscPRJhnbPDD1WBNNFsqIHejfDB6MB0GA1UdDgQWBBRg\nDFR4Wh7EC/rWv+f8LBJqx1rI+jAfBgNVHSMEGDAWgBSTp1NO9ZsYF/INIukhZ2vL\nd7wATzALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwFgYDVR0RBA8w\nDYILZXhhbXBsZS5jb20wCgYIKoZIzj0EAwIDRwAwRAIgObtaHHQUhYhR1wgU1Oiv\nh9cMrY+zgiAesSMR3KHSwNkCICejbxNUgIgz/5weEnPOBsFFKxG8+YaZXAuHEkpg\nCD5X\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2355,12 +2355,12 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> leaf\n```\n\nThe intermediate contains a NameConstraints extension with `ASN.1 NULL` for\nboth permittedSubtrees and excludedSubtrees, which is forbidden under\nCABF 7.1.2.5.2.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nSHDVyVuxt18nW/Dr9hHZ07MUoA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBkDCCATWgAwIBAgIUUY3X2+fxl6BgjOK8NNrlAkUmAl0wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQx75eJbuS9D9aSim9Uy/ZoV8LZGLC+K710kuT/\nBwdNJDRDhrD/P7dtVuPZf4f7ebtyi35wwAfOAwrNs/EGY6Bso1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUS18+45XqLKky2BeYdEy9Wcv3LpowCgYIKoZIzj0EAwIDSQAwRgIh\nAINzNq3YWm2iuKQtm+Ym+5h14PuaOPEMls3tRSPWVKIMAiEA7yEh3699Fc7V+pEf\nJkngUs91BD8EyJo4Uiq57IPPCtI=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nN3VN\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nNnfH\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIICADCCAaagAwIBAgIUMtOwFcCyIXn7DdPaNMK+2O4gKBUwCgYIKoZIzj0EAwIw\najE5MDcGA1UECwwwMjM3NzQxODczODEyOTA4Mjk4MjA0OTE0MTkwMjUxOTI3MjQ1\nNjEyNjM4MzY1OTc0MS0wKwYDVQQDDCR4NTA5LWxpbWJvLWludGVybWVkaWF0ZS1w\nYXRobGVuLU5vbmUwIBcNNzAwMTAxMDAwMDAxWhgPMjk2OTA1MDMwMDAwMDFaMBYx\nFDASBgNVBAMMC2V4YW1wbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE\ndk0ZuxbLI7ohZu43Q9QIEwjC4RqFjSoJKDRGAf32BQzUZq2KG2NyE2Zf3zbZBfUr\nBqffxwvoBO0NiNUC6RgmmKN8MHowHQYDVR0OBBYEFFGxEBO+X/PfeUgykc1R3o68\nF8gzMB8GA1UdIwQYMBaAFDFNbue2G2n4DzTCBqU2m4j36rw9MAsGA1UdDwQEAwIH\ngDATBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAK\nBggqhkjOPQQDAgNIADBFAiEAn90YpglIihn7ZI+gAbN1VPzzdTjyUQk1utzdLWzp\nD/QCIEwuVLvtxL3ski68vENTFlI1tRzgIlADkE//2ljGHeXP\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nlwIgSxEpssfq4ooS3/0CXBjQ4tCAH7twCX4AAYfkSmgN/hQ=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2380,12 +2380,12 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> intermediate -> leaf\n```\n\nThe intermediate contains a NameConstraints extension with empty sequences for\nboth permittedSubtrees and excludedSubtrees, which is forbidden under\nCABF 7.1.2.5.2.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nTvIxrl4PoAbyOUYy+kSfhXxb\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUBVkP3dXUIP7cdxsrPwbq4NAF3wIwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAR2KF+2x6jj/QBHt3J+DrqWUD+ndTfervzngHOl\nNP5r/QqDjBkaQoKqz36WTmzvs4yBgRPj02eJPSwReJ39f1hTo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQULSskM37WY9ZIAbpmL1GV/a79v6EwCgYIKoZIzj0EAwIDSAAwRQIg\ndqv4QQ9mIhezIYB5mdptXHV5y4/TmICUfP44Wsafdl8CIQCmqKYeS4OahCQ0EMSs\nAOYOHGwZa/okGkWYFw24MNn5pQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [ - "-----BEGIN CERTIFICATE-----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\nE9/6qmpWmLE=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIICEjCCAbmgAwIBAgIUKdz2UUN+Fcb6zWxPFRjQQ0wmPkYwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjBpMTgwNgYDVQQLDC8zMDUzMTEwMjM0NzcwNzQ4ODI3NzM1\nMDI3NTU3Njc2NzczNTYxMjgxMzIwNTI1MDEtMCsGA1UEAwwkeDUwOS1saW1iby1p\nbnRlcm1lZGlhdGUtcGF0aGxlbi1Ob25lMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcD\nQgAEWgZ4GmEqvII8OwltzYcNQX5/ggUyCfM/kSOe87ztLxGFfT0dA6VJkP/7U6DI\nnt6aIRzLr9Aw9CGev5/woMsPBKOBizCBiDAPBgNVHRMBAf8EBTADAQH/MAsGA1Ud\nDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAfBgNVHSMEGDAWgBQtKyQz\nftZj1kgBumYvUZX9rv2/oTAdBgNVHQ4EFgQUrgRTYl5VKWnZrMsxDTjfSC02zUMw\nEAYDVR0eAQH/BAYwBKAAoQAwCgYIKoZIzj0EAwIDRwAwRAIgdJ6m8yjwxcmEMoG7\niyeTuOtuqJ063B0rfDHLDJOacU4CIBxqz/83t8JN5xfqUun+tX/WcEuNc7gvyURo\nqdzZRVL+\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nbgIhAKlboTJlfQ0XVLhH9iiy/Toc2eKMw3v5qJfyuuwrjd/P\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n9QIhANNhWY7S04Of8o8Ms84Hkwgh8OwN4nCxOVW/eCJzzh6i\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2405,10 +2405,10 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"example.com\".\nThis should verify successfully against the domain \"example.com\", per\nRFC 6125 6.4.1.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIUM+RfT8vh1BPS0B6U/fienKfBETswCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATs2D9fvkxj1/R/Ih7fbUuqaX1WTHPGaBBZGMx/\nZGMSg3lMU2HrLNyP3dIWmPgxJ8B8bxjq4AL3vEB4Ez4qPcR1o1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUyQxctSvzy4Yr4g4/pOSRnviXe8IwCgYIKoZIzj0EAwIDRwAwRAIg\nS5jHFRihuhFKvWNRUl3iskGQa7dH0G1KpEfnfLnxazgCIAH4/4La8MGAVT5QGbRY\nwWTS4MMt4tsMYR7+1dgzOQmq\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUQ0F7ToZ35yd2hfMsW7FoI14H3xQwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARQRCUT9efE7ZCgIc9mUww8W/nFMCSe1nfOGuQj\na+pVCMi3j6m2SdIWXFILBXyyi5/GNHMs5bifz2vCoY0S0GQ9o1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQU98OkYmH5rA/LoQegfAxvEY7WmXkwCgYIKoZIzj0EAwIDSAAwRQIh\nAJNAszLVPsa333/LzV66wKrqMAX8DaL5UMhdqfteLv8sAiA8V+9eFnfLoHNZQ/si\nGqfkPIHeeY0GiIuUHeAfl3X1Mg==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nJJL91XM=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nJ/9QMg==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2428,10 +2428,10 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"example.com\".\nThis should **fail to verify** against the domain \"example2.com\", per RFC 6125 6.4.1.\n\n> Each label MUST match in order for the names to be considered to match,\n> except as supplemented by the rule about checking of wildcard labels.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nLqWMGlvqx0H0qgSDKPeuszI1ug==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nFT7aqPluyBfA6h2ojlnoMXfaCQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nhwxA\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n/CRCsQ==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2451,10 +2451,10 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"abc.example.com\".\nThis should **fail to verify** against the domain \"def.example.com\", per RFC 6125 6.4.1.\n\n> Each label MUST match in order for the names to be considered to match,\n> except as supplemented by the rule about checking of wildcard labels.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nApI+pV0HyQCmZ5QXKTrNQycs\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nR+Y71GzLQfYSJ91/OSdyVrfkwaA=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n5dQB8uCqve69yg==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nDq7DJZTSQKUgng==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2474,10 +2474,10 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"example.com\".\nThis should **fail to verify** against the domain \"abc.example.com\", per RFC 6125 6.4.1.\n\n> Each label MUST match in order for the names to be considered to match,\n> except as supplemented by the rule about checking of wildcard labels.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nBkzJ2qhh92MnI7KH/Eku9QpORw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nd+1K1rTVUZcBzwRGD7I/PbmALuY=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nYEFMuA==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nr9zr78c=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2497,10 +2497,10 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"abc.example.com\".\nThis should **fail to verify** against the domain \"example.com\", per RFC 6125 6.4.1.\n\n> Each label MUST match in order for the names to be considered to match,\n> except as supplemented by the rule about checking of wildcard labels.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nAlqKrSPotewUywkF9N5nY5aLAg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nNHyhwvPvRVEd2tt41abe49r2kFA=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBtTCCAVugAwIBAgIUGS05aR7aT3yJtiu20U5m86hVM6IwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABMGnt7iZep5wL+/j1DZDGT1f02WSVuUSjD/lDQlCDbv/\nGiX3PGHoUqIMG9wFJIjQtjaCRjNzBev0lzJJ9CoNNjyjgYAwfjAdBgNVHQ4EFgQU\nuLuW/w8h7Uf1Xx1kr/ADtJJsVRAwHwYDVR0jBBgwFoAUh1WQzroTUQHw7ijPc8/f\n+7QT2tYwCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBoGA1UdEQQT\nMBGCD2FiYy5leGFtcGxlLmNvbTAKBggqhkjOPQQDAgNIADBFAiBW/Hw1V20IftTP\nV0gckmO6kKouNYYBVW0x3e9pGn2kIwIhAKvlIJb9E6nD0yte6F5g8iWNnxnJxaq2\npr81NQGe9yTr\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nJDHCbpY2gswS7Q==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2522,10 +2522,10 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative name with the dNSName \"*.com\".\nConformant CAs should not issue such a certificate, according to CABF:\n\n> If the FQDN portion of any Wildcard Domain Name is “registry‐controlled”\n> or is a “public suffix”, CAs MUST refuse issuance unless the Applicant\n> proves its rightful control of the entire Domain Namespace.\n\nWhile the Baseline Requirements do not specify how clients should behave\nwhen given such a certificate, it is generally safe to assume that wildcard\ncertificates spanning a gTLD are malicious, and clients should reject them.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIUYUlZMOrRIG5CCN2RwXSVBp3n9vMwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQUmPWcAFq3taZMRLxOURTLICF/Nz29gN9jiAY7\nBzZfnQSzAPyvptVvY6IPMXVrArXwW0y35a1AaSCzJ9XMdR0Po1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUlPjCH3HouwHDqKIvKd+xZvtB1C0wCgYIKoZIzj0EAwIDRwAwRAIg\nStvdizUsYp0GHEHxBUVjoBcjnbhPeFARwozPEHGY4tgCICVrh0gz6VvXqYWqDkBF\nzo9YPqWhfSqezG21oq5zPvB7\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBkDCCATWgAwIBAgIUdIiZ30eKS5esYpE7DHm1PBheprIwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASg7c3VdlBlq/Qq+f8SV6hPL+CqeDuP5YsmPRjX\n7/HhEDBJ26ldzeZ0ZT5HYkbo/JX1vHEbymROOd1B/cPNIjvNo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUg1QQew2CFtEVSXVytVpJ4gQonzAwCgYIKoZIzj0EAwIDSQAwRgIh\nAM3CU7VeIPi/Pjn/kN65fCXuHvP4e0FS98KLF1UlegooAiEAq4A/5Cf2uDH++f+k\nArvzdIJhJvbEfygRxsYIzlZ58VA=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBqzCCAVCgAwIBAgIUeEDA2MXlqpg8CAasblydpd/U3tQwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABEDYR7N9sB24N+xee3G/MgFqcjYN/Ws1nKv8B6L0B0JL\ntAkbyv0tGS/MSSDJFw1umlqo7GLHRSuf4PUDj8zijkCjdjB0MB0GA1UdDgQWBBQi\ni6/8OleXrZWKEyCTmuPBpNjPGzAfBgNVHSMEGDAWgBSU+MIfcei7AcOooi8p37Fm\n+0HULTALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwEAYDVR0RBAkw\nB4IFKi5jb20wCgYIKoZIzj0EAwIDSQAwRgIhAONsH6iEBA6HZuRjSmb2pvtoqnK4\nSgHwGs33uS7aAJfEAiEAySs+zx2iFjNqHZ7eblD7Ev+1MzzIVsmK7kijVYbf0O8=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBqzCCAVCgAwIBAgIUB10cmIma1pJ+06oYG3wN1nSlymwwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABPJdhqb5KTSzGbASUjSts+ewC2g6uVORVDUBygJNus54\nhYOE3ovVcl4JbXW2EEZxa4zJMTwOJWDX2tckoyaJwAmjdjB0MB0GA1UdDgQWBBTC\n3eTw2Du2joLLwmsrpqQ3hclVkjAfBgNVHSMEGDAWgBSDVBB7DYIW0RVJdXK1Wkni\nBCifMDALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwEAYDVR0RBAkw\nB4IFKi5jb20wCgYIKoZIzj0EAwIDSQAwRgIhALIZs/LXoBuAIMnyGEIQtBwRhYkD\nryqAoaL06cIRIPzpAiEAgEflsuAsjPSUHDaVr+IqS4/xKwwH4JYt/P2fpyqXNn4=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2545,10 +2545,10 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"*.example.com\".\nThis should verify successfully against the domain \"foo.example.com\", per RFC 6125 6.4.3.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nPWjJUR48YPjJp21ort0yCo81\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nEqGYZxsGAPdNXOwOZZieDW/KNg==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBszCCAVigAwIBAgIULFUB3gWFnbicXcHAAw+2KheePKEwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABM6fGTFFRkC+1tRjU661x5L6sL5WEznD+VgsK7Xxo5tS\nJLmML+CS3MhTEYmZKTAhyyjkonEosUHFgNXZzV5QtYKjfjB8MB0GA1UdDgQWBBTD\nlDkDYqdN67vm+gcMzObOW8gkTjAfBgNVHSMEGDAWgBT4ybUBKDT7VobxMqKLgu5y\nWDUzADALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwGAYDVR0RBBEw\nD4INKi5leGFtcGxlLmNvbTAKBggqhkjOPQQDAgNJADBGAiEAhCDSayANfryIR+6i\n15SXf1e+KSgDO9Pg0G9JGOr2VJ4CIQC8WEezlqdlWZgC0bKQcK23/+nWi+ECTV2V\nEcLvIqzhsA==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nLKe8Svvpaw==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2568,10 +2568,10 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"ba*.example.com\".\nThis should **fail to verify** against the domain \"baz.example.com\", per CABF.\n\n> Wildcard Domain Name: A string starting with “*.” (U+002A ASTERISK, U+002E FULL STOP)\n> immediately followed by a Fully-Qualified Domain Name.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nvZqA6jHyfJ26NnJVeHuSxqK9pjY=\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nKduSqfp0XXQcIHtd5uP74mUj\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBtjCCAVugAwIBAgIUS++3G2bbs0Pd8y+qmnRjKcfNDZ4wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABHSiJW1+Mb2OUsIL/zQHWnTiKOJQB7Ld42uidu06EzG5\njr+FJL9hTAiC2fX95tBEj743NgYTT4HHkp60NwKy2SijgYAwfjAdBgNVHQ4EFgQU\n/UaGdtqYugOG6FeKaZrG3QWpfREwHwYDVR0jBBgwFoAUes/opqd8rjOC8npC/SkC\nQeS/2TcwCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBoGA1UdEQQT\nMBGCD2JhKi5leGFtcGxlLmNvbTAKBggqhkjOPQQDAgNJADBGAiEAlFdwEpRhXpFX\nwpubo94uW5k5sngiQERsxAkZRBfCLBwCIQDYuwJOO1NXG0hSZluEfl9PvvQUuWQ/\ntId01kdNHAqhGg==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n09A3c25OPS4g\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2591,10 +2591,10 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"foo.*.example.com\".\nThis should **fail to verify** against the domain \"foo.bar.example.com\", per RFC 6125 6.4.3.\n\n> The client SHOULD NOT attempt to match a presented identifier in\n> which the wildcard character comprises a label other than the\n> left-most label (e.g., do not match bar.*.example.net).", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUCLn0oaEc1+h/dkp6yn0csNDrM5YwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQ9rNhyArdsH+0l3HvMt00tKbyBrtKBD+u9GFyc\nmRuW6rpCIGUeu60rxMrfMNGbz2LvtWdqsknLycnF4fr4/EyFo1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUhk//tO6z0QpdEyZZotUJq1yJGr8wCgYIKoZIzj0EAwIDSAAwRQIh\nAPwvALoAOq3lr6p9chFPOW7T98PCXFfoz3LQtrqzUCJMAiBCPnlks2sOtMWN85Pf\noZHiArEThTuROBqvhGl1+K0ovA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nuysBwgLRpL7u0KmkIJlI/trLow==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\ndeQuXr+7XDNaq+Kd\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n564nwXmji4fcPxxK\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2614,10 +2614,10 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"*.example.com\".\nThis should **fail to verify** against the domain \"foo.bar.example.com\", per RFC 6125 6.4.3.\n\n> If the wildcard character is the only character of the left-most\n> label in the presented identifier, the client SHOULD NOT compare\n> against anything but the left-most label of the reference\n> identifier (e.g., *.example.com would match foo.example.com but\n> not bar.foo.example.com or example.com).", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIULLivW4cTm7cMKc9fYHaO8XeHQFswCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATVmHjdrQ5K9DyyWxZIBIv/QMMh9qmupy7Wpumx\nlQsgm1mNhh+Uu+yFrzCj3J0QpIsFSV3rkog4nwlVWTrgKIw8o1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUklNDz5j7NrLXpPF7pDrjELD9wM4wCgYIKoZIzj0EAwIDRwAwRAIg\nIlnmz+svxkeKttwxn/y89rWEHwlEQDlbM+LHpfOyXLoCIDn4WGAfGfH0EWazqxi9\nEGwjMSd9XNQvRMKjE/XQqVTR\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nFNsEnxBDho/6YMwxhrDHkPyKAw==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nhN61MuG3\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nKM6raCI=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2637,10 +2637,10 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName\n\"xn--*-1b3c148a.example.com\". This should **fail to verify** against the domain\n\"xn--bliss-1b3c148a.example.com\", per RFC 6125 6.4.3:\n\n> ... the client SHOULD NOT attempt to match a presented identifier\n> where the wildcard character is embedded within an A-label or\n> U-label [IDNA-DEFS] of an internationalized domain name [IDNA-PROTO].", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nwnCYtt8NbaHXUlcypx5jQKB6\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n/hdweFXtX+5N9DiM09SSAOcK\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nwffv/SbtG85SFm2Mr/vG5J6DiYK0\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nFIdDZnBTxHTD2qhg10cZLMBK05g=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2660,10 +2660,10 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains a Subject Alternative Name with the dNSName \"😜.example.com\",\nThis should **fail to verify** against the domain \"xn--628h.example.com\",\nper RFC 5280 7.2:\n\n> IA5String is limited to the set of ASCII characters. To accommodate\n> internationalized domain names in the current structure, conforming\n> implementations MUST convert internationalized domain names to the\n> ASCII Compatible Encoding (ACE) format as specified in Section 4 of\n> RFC 3490 before storage in the dNSName field.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjjCCATWgAwIBAgIUdXPk7XWsUvAhyzpNXxslFpyESV0wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAATZfK3iK69s850fX5Yy1/egK0BF2NPkNIoEpID7\n2xkn0QIGJwjyilTN4JwnabxKBapGUxJx9zvujFDjfl1ohl4co1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQUW+yUtFrXtt/1VlcpJwk2yaiVBAkwCgYIKoZIzj0EAwIDRwAwRAIg\nD9tdjMMAaCLoqR7fTG05utMfl7HNoRi5aqAUc9yMMTACIDQLXoIdfSq+uQDY+3y/\n6elcRjUW4k/n3/S1wtEo8wPh\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nNrW8aTi8wCGfDineMbMOHiPP\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n42Elbm/jVnoz\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n++PArIvJu6aGxw==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2683,10 +2683,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe chain is correctly constructed, but the EE cert does not have a\nSubject Alternative Name, which is required. This is invalid even when\nthe Subject contains a valid domain name in its Common Name component.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\noWST50JgILbWMAofKkmMZnezGQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nZBjH0Xy7CaPo9dmQm/P5Li//\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nSMu7pBmOFayzip6Vqvr80hkeFWAAs4isIY7ahw==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBmDCCAT6gAwIBAgIUD+cM9i5j6Pb/2nyKj8e01iGrJI4wCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49\nAgEGCCqGSM49AwEHA0IABH7GEEnmNs3hCBu+RK+wS2kcM2qfKx3Bk2/7GHXdicxu\no206P6zDG0EvCfnZh1soPxPzn9NoQ18uQM6QvQ2PIAKjZDBiMB0GA1UdDgQWBBQl\nYS4hqznHOPk7LAsnWEr1H7vNJzAfBgNVHSMEGDAWgBS34BVCaCVJtVc5TGWaaF2o\n+QhCWjALBgNVHQ8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwCgYIKoZIzj0E\nAwIDSAAwRQIgcsRfDGERBDq83RwBovIhsNg6joGw+PoAA7gETWQO9TICIQCsEI1N\nLN92EOM/HvY8iZt8oz7iKZACaKmFqQIXv65Bcw==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2706,10 +2706,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert includes a critical subjectAlternativeName extension, which\nis forbidden under CABF:\n\n> If the subject field of the certificate is an empty SEQUENCE, this\n> extension MUST be marked critical, as specified in RFC 5280,\n> Section 4.2.1.6. Otherwise, this extension MUST NOT be marked\n> critical.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\naZU62MRzdQgpPk9TQdEIHjwICQ==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nxVT4PmKNB0aUagM8cVFFLrKwCA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nCO9RIYmLtfi5\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nRMfLww6fDXBIPw==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2781,10 +2781,10 @@ "description": "Produces a chain with an EE cert.\n\nThis EE cert contains an Authority Information Access extension with malformed\ncontents. This is **invalid** per CABF.\n\n> The AuthorityInfoAccessSyntax MUST contain one or more AccessDescriptions.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nE3bnGTSEob2J4uPaSXUse7Ei\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nq8YYGWnqZEY+JK45KFcSxLaX\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n8DGNA7O8iYMt+FSI/ESQ1lyZQn22z++CgodiDAfm\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nTrigDl5v3vG+UeCzdpwBe0r4kuUV1xk47/rE5nM=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2806,10 +2806,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert contains a P-192 key, which is not one of the permitted\npublic keys under CABF.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nlrCLs1pfPhgtuOwoKazQLNF/Bw==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nsHMsEJFrtBgbD1lERCIMP4ASyaQ=\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nJQIgVMIwsUWrqLOS4/daw7s4RfkyJftGhmURKiCZzMguUUo=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBoDCCAUagAwIBAgIUb/xTyzWIlEaXg1+DXPndS5LwXPQwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBJMBMGByqGSM49\nAgEGCCqGSM49AwEBAzIABDnehEcrfItK+Cm4kdEZRh6MVAKUAD3LkhrnOLjI9ifY\nss8rRm/W9htQ6fP7AIcwSaN8MHowHQYDVR0OBBYEFKMJI7ZvsYHwXFPrIqUIAtA0\n3syOMB8GA1UdIwQYMBaAFKBBVBgAa822JlASAaN+bnrnQgsxMAsGA1UdDwQEAwIH\ngDATBgNVHSUEDDAKBggrBgEFBQcDATAWBgNVHREEDzANggtleGFtcGxlLmNvbTAK\nBggqhkjOPQQDAgNIADBFAiAYCRIcFI5CTMdh2yDyFTZWNG6XV5vPajtVELzsugIh\nUQIhAOUkD06q9Xbiq/psZKemmk5ZXwHaYl48u/FNe2Uc/365\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2831,10 +2831,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert is signed with a DSA key, which is not one of the permitted\npublic keys under CABF.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUIuMAu1CjlMOg/0QtJtxvMV2RdoMwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAAQfYD/47Zavea4/sOJGrRJzrZY9vzZkIrLc2KcR\nPB2ws61nt51GwXyqKXBGOdtvtf0tUNkDh27vAphymG/DPTF2o1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQU7qpvihq9HJmPcwtR3sks90HH5CgwCgYIKoZIzj0EAwIDSAAwRQIg\nb+ivDzKMKPapeqi9igxVAGrugQvBwx9iEjpOI5HKRYUCIQDmiGx6u0laFLeSXQcV\nrwBOwxsCH0ffoddTerun2dIMzA==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUR6kHAFB9ZoJLCs0TXLYqUD6SmNcwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAASja65/qmPxoNH6Ymog+oZBmEzHrnplRcEOwgtM\nlxRgFyj9gqsCIVtvfAlP5Qoet2F/d2U//GMrvG9mXo58T8w2o1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQU4WOouAR9vZqsXqH52W3qeREr4wkwCgYIKoZIzj0EAwIDSAAwRQIg\nevwZJuE9GWx8qsqY7M7UWRVgCsfg4uN6zlu8MlP4X8cCIQDtukgFX8XOInQuaZIw\nDV57snOCATWqYmRN2HPKFYkdLA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nDAsCIQDIUbrMZGC6qL86JMTyAnrub7DatDRboflhafHlUprWsw==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\n2QIgfMGr9E3AD0hu+hQX/Q/QSCk8+lBjzeFYMkx5Gevqx2c=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2854,10 +2854,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe root cert is signed with a DSA-3072 key, which is not one of the\npermitted signature algorithms under CABF.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nm8bq\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n80X+fg==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\n4MIpn0Ur\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nTYybYKA=\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2879,10 +2879,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE cert is signed with a DSA-3072 key, which is not one of the\npermitted signature algorithms under CABF.\n\nThis case is distinct from `forbidden_signature_algorithm_in_root`,\nas DSA keys are forbidden in both places but not all implementations\ncheck both.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\n9Al35mF0X4J3qhg7OuEnun9t\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\nDBeqBWTI6cDpZbEUusCHGa1tkA==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIGHzCCBcWgAwIBAgIURc061k7BOI2v4yuObWQfak/qgRgwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTCCBMYwggM5Bgcq\nhkjOOAQBMIIDLAKCAYEArU0Obnub4dRHTIDu+AP5Sfpddcfv5/UaLy/zkHlm31PM\nkj70KFPvH+W6ZdobgypyEgpaSnb6VTYHH8loar822He1ypgPd8ufAlSP9+JpzRBX\ngQlS0t53Shl/3QFOUJ6lNlOk65MzJ5JDr5gi65soVp3eBEQgn9tWcoyRmEVNTA3M\nMJ5bKzMy1fKt/4IVPaKYPE3lyULWd4IGB6vwrERGOwNgP+AtSnl+fOGRHDUvdVlT\nfTs9pd4aF0qxBWBr1gh1uiRB6OjfZiq18HDpYI4uyFzHm8dG3nCoIGBKcRZVmgJV\n4CIHaYgMArl3OZqdWTefdWt/KwlQHgnAgtUdmAK9cut5118M9NT6EpffykNKR7Ap\n48Bz5ef/HLDURj7TmrPILSUsoML0BSu18t990EaBzhCH/bggTDV5rFt62rUG/VaA\nOoanXTKTp/F3YWZI8CudNzeEomLrlS0VKqYUREsg8foLQZDcKQMBrDk2iaHYhyX9\no+jC5i14zwqKFcJDjFaNAiEAmU7si73FTYcU52uomprED9bHTPJPLYF+N7ZEoSbS\n7yUCggGAXPH0LpYCiwvK+Cin7jf3cqocRy/SJ0aiZU4w3bwnuSLZ3sq586R9g1/G\nuYGmGQZwlbbPQh5J7w2zHsuboY+FHQIkkvltr8+syJR4xgaNTJIJIJ+6l8Xliyy8\nXvim499bkNHKkKJfTgZlFy3jkr2Ux86dyKjQJMEX9a3j3h2PlBVU/pqpLJAbyahF\ns5lPTgSs2B1/b7RjmkoQJsB6uCovVCUn2EOBLAEqmlb2tNzuWme9ux+ck9KK9utV\nJXKE5kzd3GpZ4M9l+xKyEOM4P4+h24+AgZdiaJziiVaWfFuQevN5IbI5LLc26YXP\nGQiwiXh3GvlX5qULCFxEtbN6t2aUeBgt0sV+SqK2U5L9/bEld2cwHH61rsNzOOlI\nh2cFwti5zrBTikOThtkte+oJZrU+UxBXxtPBj3DeV3n+7fm3GKdTj3QSUF7+PPJZ\ndR0vmlvWVFxm6tRTaVuFtiFVPIkfR1juOs6NuLI/eaxDt0UnvFNiZL6h86WAls3F\niv9AWV9CA4IBhQACggGAMQhJVhjCjCCQfXtxwez+mrhHjCQR6/HI/5KzIn525uno\nWKYpl3+QljvtDRZiDutS14GtcXtT1WV7DyYHfwNEPlJeA22CKptnWvfmoHfvFIdl\ndfKJ/dCTog2IXG9uzVWXUBLyflnUrFcxPf6q7bv+U2SHebDsbpxQKgeLC54QyvMx\noinvSAYqWQ9OaU9q91qJPYYnzDhUsW7pugukhfZj34DluAsqeKon92Pjzu4V7x9d\ngKhM0/0J+W6favMiPERGMCQ9PFQoA26h/dBYIFmfnGdKlxOeuSThzmya3MYwVQdd\n4an5q7jfb2RTD5QtbL8LZ9jxc7vAGtZax174MHexqIck2hvMQLwgBSAZxEYWN9ZT\nkld8T+woFxW3xdlUhm1cRdTVIYY6j24V0veR1+MecUnrDR1zzmLBRk2zmfVt9790\nfc5RpcmS/Y8gWtFE8HBUYLEahzbuDG1AZZ1BeErxizffdm9M89pxHu7b+ejAtIrs\nFG7uTYd9MaKqLUKR4vEso3wwejAdBgNVHQ4EFgQUSS41iEykntd2DJ3/6J68Q/Sm\nG5AwHwYDVR0jBBgwFoAUcLFInoi/6YowAxLMgERFkVDdlbwwCwYDVR0PBAQDAgeA\nMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBYGA1UdEQQPMA2CC2V4YW1wbGUuY29tMAoG\nCCqGSM49BAMCA0gAMEUCIQCqaAGW++6zcvAnrka6kkBEsO8LlZdwpv/X1MRKCxUy\n8QIgEdneQrWeWvxlOKcJpYOfpTyaNlV7+FIWvVgp288sm24=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nxAIhAKEMvGZJUokcndpqWJpfOtV6REnyDoi705dSVHaOXI8a\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2902,10 +2902,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThis chain is correctly constructed, but the EE cert is marked with\nversion 2 (ordinal 1) rather than version 3 (ordinal 2). This is invalid,\nper CABF 7.1.1:\n\n> Certificates MUST be of type X.509 v3.", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\ntMh2jAWUjyYTmBWRE4x8UG23+w==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----\nMIIBjzCCATWgAwIBAgIUY1QjtTB7ImQJdE9u53W6Sg4gjykwCgYIKoZIzj0EAwIw\nGjEYMBYGA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5\nNjkwNTAzMDAwMDAxWjAaMRgwFgYDVQQDDA94NTA5LWxpbWJvLXJvb3QwWTATBgcq\nhkjOPQIBBggqhkjOPQMBBwNCAARv+d77cbOHnIHFd0QnUk9v+NreNzGtXvXNsJ7D\nLuNMIZlLopCU0FqDfEVyYgaTmgz8jQuOfE9NIl42/gma3Wkko1cwVTAPBgNVHRMB\nAf8EBTADAQH/MAsGA1UdDwQEAwICBDAWBgNVHREEDzANggtleGFtcGxlLmNvbTAd\nBgNVHQ4EFgQURVYWqb/xYBmIcTn+lMUSlQ7vsgMwCgYIKoZIzj0EAwIDSAAwRQIh\nAJs9gKaEJ21s155A/JUnQVaWOxQA/2aEWrGc5pUlmoH6AiAyZ6RWalVNLjc7iiFw\nrNK4YuujJw1FE0Yl9bcF41A6yg==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBLDCB0wIUfiZWDfUIfsL5TvLYMv2+bUvjAS4wCgYIKoZIzj0EAwIwGjEYMBYG\nA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5NjkwNTAz\nMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqG\nSM49AwEHA0IABAJXxsMe3zFb1GK3AHA8ktiXQ1Dq/RZ020mVFZErQYGQJoujuxuD\nGSz838nBuyYjtVzY6xNXPwpb+NwkdMf9ziYwCgYIKoZIzj0EAwIDSAAwRQIgD8s5\nihzrHSzN2Ydeez5ydXZ/3zGz/w8iOrZdBm8pvRQCIQDvJWgu7DJdQQfvN0GkaGiq\nUaASk2iPlt9TRrS05HrSMA==\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIBLDCB0wIUDCXY7RJwkAiiWB+1JiTlveXvE+wwCgYIKoZIzj0EAwIwGjEYMBYG\nA1UEAwwPeDUwOS1saW1iby1yb290MCAXDTcwMDEwMTAwMDAwMVoYDzI5NjkwNTAz\nMDAwMDAxWjAWMRQwEgYDVQQDDAtleGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqG\nSM49AwEHA0IABMCd2WsAqVocAwnSoHnrshzAV6w0qnynekcP8nIW1G95g7My+0G6\nACsBkEHjYR+jvlW8LPDIY5QTVzzyqBk+WzwwCgYIKoZIzj0EAwIDSAAwRQIgGnKe\ngeBEWIcReiD5N8JSzJL3M/pjOZ7KMjQUrMU6aX0CIQD2WO8LPprWdTnXvWGIA7OU\nW2VxD/MqPgKDLbTZhIbAqQ==\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -2925,10 +2925,10 @@ "description": "Produces the following **invalid** chain:\n\n```\nroot -> EE\n```\n\nThe EE certificate has `keyUsage.keyCertSign=FALSE` but\n`basicConstraints.cA=TRUE`, which is explicitly forbidden under\nCABF 7.1.2.7.8:\n\n> cA MUST be FALSE", "validation_kind": "SERVER", "trusted_certs": [ - "-----BEGIN CERTIFICATE-----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\nbozpWPrmtUGOAubP5pnW2UY0wg==\n-----END CERTIFICATE-----\n" + "-----BEGIN CERTIFICATE-----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\n8JdDSiEE72sxeT8B92KQEVAwWQ==\n-----END CERTIFICATE-----\n" ], "untrusted_intermediates": [], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\nTc/JTYqtZpSHKepeU1QuTAI+MZi2FR8=\n-----END CERTIFICATE-----\n", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nIg0fH9mEb2HjsCR2znNugTh2EBOT5NPw\n-----END CERTIFICATE-----\n", "validation_time": null, "signature_algorithms": [], "key_usage": [], @@ -252692,8 +252692,8 @@ "untrusted_intermediates": [ "-----BEGIN CERTIFICATE-----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\ncPUeybQ=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----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\ncZ4hFWvLxdBHCQ==\n-----END CERTIFICATE-----\n", - "validation_time": "2023-09-27T00:00:01Z", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nfa0NVlPGWb0nqNJH\n-----END CERTIFICATE-----\n", + "validation_time": "2023-09-28T00:00:01Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/limbo/_assets/online/akamai.com.limbo.json b/limbo/_assets/online/akamai.com.limbo.json index 2fc534c4..482ea10c 100644 --- a/limbo/_assets/online/akamai.com.limbo.json +++ b/limbo/_assets/online/akamai.com.limbo.json @@ -11,7 +11,7 @@ "-----BEGIN CERTIFICATE-----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\nA7sKPPcw7+uvTPyLNhBzPvOk\n-----END CERTIFICATE-----\n" ], "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIGAjCCBOqgAwIBAgIQBkN1zR+sS+PC+kWvOJwagjANBgkqhkiG9w0BAQsFADBP\nMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE\naWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzA0MjUwMDAwMDBa\nFw0yNDA0MjUyMzU5NTlaMHYxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNo\ndXNldHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxIjAgBgNVBAoTGUFrYW1haSBUZWNo\nbm9sb2dpZXMsIEluYy4xFzAVBgNVBAMTDnd3dy5ha2FtYWkuY29tMFkwEwYHKoZI\nzj0CAQYIKoZIzj0DAQcDQgAEazkJqPize87Z0TvOKqKpmfyMOOZotoW2EL4YUz2+\nOEcbZ3SY+aULa2c8/Y15S9ZDa+dssAUZ0r4Zy4x/W7Jx5aOCA3wwggN4MB8GA1Ud\nIwQYMBaAFLdrouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBQxd8ph2AKQD7PD\nVrXvZgwe+GZs4DAlBgNVHREEHjAcgg53d3cuYWthbWFpLmNvbYIKYWthbWFpLmNv\nbTAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC\nMIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9E\naWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwQKA+oDyGOmh0dHA6Ly9j\ncmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5j\ncmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3\ndy5kaWdpY2VydC5jb20vQ1BTMH8GCCsGAQUFBwEBBHMwcTAkBggrBgEFBQcwAYYY\naHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEkGCCsGAQUFBzAChj1odHRwOi8vY2Fj\nZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTEu\nY3J0MAkGA1UdEwQCMAAwggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3AO7N0GTV\n2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABh7W705QAAAQDAEgwRgIhAPVk\n7yDDPj3tAQc4cvqb9A0B0HjlyhdRFVP/H7/BRNmpAiEAycsOC/0dh53xb/G/BTL6\nGJPQgjc/MtM8D/eWAbCNUKoAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+r\nOdiEcwAAAYe1u9PtAAAEAwBIMEYCIQDfupV1HkMJ8PWrMU/1qx6LrJ5UlmKesvqc\n7+87ct4ejwIhAOmSrN2AduhQODpqlLc0cvGzeGXKjIonGkoVRCkv3egyAHYA2ra/\naz+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGHtbvTrgAABAMARzBFAiEA\nse+cqNPobp9xgg7xBXa8hGm2Pxdwe+U043YEzlVujPQCIBhYLChVIaCMEDPC9VRv\nq7WJLHNa7WNrqBY2niGEPCFeMA0GCSqGSIb3DQEBCwUAA4IBAQCou6fmQrBrvt7x\nE6rJzQ2OArQWWB7G1UX/NOfkZh3NolCA/b36QNJETbHk2OCGKOwjBdaTsu1ekjI2\nLbzASgM8A0VvsnIIgLawZOzZmKO+OtRzBzNQYm9fkMqoDdY/OqmGrEJ+JwXrg2qz\n8+o5l8Nl7uDf6C3PBpu9w+rWV0arBsSHNWu0Vz82K5031WteXoZdoAJBJJTgjmSE\nUVmhXLWZ0G/JOQlpBk903/JNAtRyReELNxWJCms+OIa3EmelAJ4wbDjHxMqxH2Y2\n+d0jhh/LzTOp8sl2BHlzpMavTX0808PQtO0ywZRCYpPBCPFs4HDDrGwVCVLyevJx\nqaCk2c5Z\n-----END CERTIFICATE-----\n", - "validation_time": "2023-04-25T00:00:01+00:00", + "validation_time": "2023-04-25T00:00:01Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/limbo/_assets/online/amazon.com.limbo.json b/limbo/_assets/online/amazon.com.limbo.json index 58c86e16..a5eaee4c 100644 --- a/limbo/_assets/online/amazon.com.limbo.json +++ b/limbo/_assets/online/amazon.com.limbo.json @@ -11,7 +11,7 @@ "-----BEGIN CERTIFICATE-----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\n92hiHuwZ4STyhxGs6QiA\n-----END CERTIFICATE-----\n" ], "peer_certificate": "-----BEGIN CERTIFICATE-----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\n5KjJIfMyy2OB69kiVncD1qAMZUHykpq/G+7wA8gXDA==\n-----END CERTIFICATE-----\n", - "validation_time": "2023-07-15T00:00:01+00:00", + "validation_time": "2023-07-15T00:00:01Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/limbo/_assets/online/apple.com.limbo.json b/limbo/_assets/online/apple.com.limbo.json index 16284bf4..1a74b669 100644 --- a/limbo/_assets/online/apple.com.limbo.json +++ b/limbo/_assets/online/apple.com.limbo.json @@ -11,7 +11,7 @@ "-----BEGIN CERTIFICATE-----\nMIIDsjCCAzigAwIBAgIQDKuq0c7E6XzCZliB0CE49zAKBggqhkjOPQQDAzBhMQsw\nCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu\nZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMzAe\nFw0yMDA0MjkxMjM0NTJaFw0zMDA0MTAyMzU5NTlaMFExCzAJBgNVBAYTAlVTMRMw\nEQYDVQQKEwpBcHBsZSBJbmMuMS0wKwYDVQQDEyRBcHBsZSBQdWJsaWMgRVYgU2Vy\ndmVyIEVDQyBDQSAxIC0gRzEwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQp+OFa\nuYdEBJj/FpCG+eDhQmVfhv0DGPzGz40TW8BeWxipYTOa4FLieAYoU+3t2tg9FZKt\nA4BDTO43YprLZm6zo4IB4DCCAdwwHQYDVR0OBBYEFOCFSH0TptMQGZ9cy2t4JJL4\nrhuuMB8GA1UdIwQYMBaAFLPbSKT5ocXYrjZBzBFjaWIpvEvGMA4GA1UdDwEB/wQE\nAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgw\nBgEB/wIBADA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw\nLmRpZ2ljZXJ0LmNvbTBCBgNVHR8EOzA5MDegNaAzhjFodHRwOi8vY3JsMy5kaWdp\nY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290RzMuY3JsMIHcBgNVHSAEgdQwgdEw\ngcUGCWCGSAGG/WwCATCBtzAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNl\ncnQuY29tL0NQUzCBigYIKwYBBQUHAgIwfgx8QW55IHVzZSBvZiB0aGlzIENlcnRp\nZmljYXRlIGNvbnN0aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFJlbHlpbmcgUGFy\ndHkgQWdyZWVtZW50IGxvY2F0ZWQgYXQgaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29t\nL3JwYS11YTAHBgVngQwBATAKBggqhkjOPQQDAwNoADBlAjEAyHLAT/4iBuxi4/NH\nhZde4PZO8CnG2/A3oGO0Nsjpoe2SV94Hr+JpYHrBzT8hyeKSAjBnRXyRac9sM8KN\nFdg3+7LWIiW9sUjtJC6kGmRyGm6vV4oAhEDd9jdk4q+7b5zlid4=\n-----END CERTIFICATE-----\n" ], "peer_certificate": "-----BEGIN CERTIFICATE-----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\nz3cN+ZmO/PfjttCc9dmrWuJ6khAR\n-----END CERTIFICATE-----\n", - "validation_time": "2023-12-01T22:17:48+00:00", + "validation_time": "2023-12-01T22:17:48Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/limbo/_assets/online/aws.amazon.com.limbo.json b/limbo/_assets/online/aws.amazon.com.limbo.json index f240664b..e97cd130 100644 --- a/limbo/_assets/online/aws.amazon.com.limbo.json +++ b/limbo/_assets/online/aws.amazon.com.limbo.json @@ -11,7 +11,7 @@ "-----BEGIN CERTIFICATE-----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\nxRRrwszrzX/WWGm6wyB+f7C4\n-----END CERTIFICATE-----\n" ], "peer_certificate": "-----BEGIN CERTIFICATE-----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\nY62JXl2Ipxp73RBz+CMgirA5uqlPc/TnWYSbXlKlbD+7TJWfib43pTNPgso=\n-----END CERTIFICATE-----\n", - "validation_time": "2023-03-08T00:00:01+00:00", + "validation_time": "2023-03-08T00:00:01Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/limbo/_assets/online/bing.com.limbo.json b/limbo/_assets/online/bing.com.limbo.json index 5436e680..6321cc0f 100644 --- a/limbo/_assets/online/bing.com.limbo.json +++ b/limbo/_assets/online/bing.com.limbo.json @@ -11,7 +11,7 @@ "-----BEGIN CERTIFICATE-----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\n+kPgfyMIOY1DMJ21NxOJ2xPRC/wAh/hzSBRVtoAnyuxtkZ4VjIOh\n-----END CERTIFICATE-----\n" ], "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIINfjCCC2agAwIBAgITMwDVZNmBTNm88CzmfwAAANVk2TANBgkqhkiG9w0BAQwF\nADBZMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u\nMSowKAYDVQQDEyFNaWNyb3NvZnQgQXp1cmUgVExTIElzc3VpbmcgQ0EgMDEwHhcN\nMjMxMDI0MDc0MjIyWhcNMjQwNDIxMDc0MjIyWjBjMQswCQYDVQQGEwJVUzELMAkG\nA1UECBMCV0ExEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD\nb3Jwb3JhdGlvbjEVMBMGA1UEAxMMd3d3LmJpbmcuY29tMIIBIjANBgkqhkiG9w0B\nAQEFAAOCAQ8AMIIBCgKCAQEApqDyS8HMAB5wen2zeJQg7O/XJ/MLnLe8NjMZOYC7\nKcR1lQDiJyfHlexgLlH1lrF4h0JG8mOGFB0WwX5HdVip4NYKp/Gd8vB3AHZx4wZL\nu6gXdjHoSGc999ORiH+TNJmrj5Ep6oM8zG6BmdHJ2+XfQ2yXAqFm6M47F7Vn4HA+\n9tERf9MNKYdo7JBE2cQ4Gm5WhrhHukOCNIaO0Sh/8GygxBNxfmZy6zGAcidbqP3y\nnFVAxUzrtiAoSOzPgkb2yVTeoSOG2vy8w59XvubooYwAY1WJGDAjZma2ibXJR3sE\n1fLENtgtkHjEROOqVj3EbUTEfvsa3Vi5x74OOk4u2PuV/QIDAQABo4IJMzCCCS8w\nggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8\nvOzew1FIWUZxH7WbAAABi2CrrssAAAQDAEYwRAIgTTULoH0bYH540BgWylZZqeJo\nzpEFS6DGR1/WZCO0TKwCIGgCpdtDgyQ4z+T7FArsC3ZaKwV9UXLBaTmWn94rSW+c\nAHcA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLYKuu4gAABAMA\nSDBGAiEA7qQ0HWEcTK0C4q2/E4zaabXi668LXbwwFLREioFbPvcCIQCSFLeF8h5v\nUJyQPpS9U2sLovJem5C5WKgAsHk0hVzTtAB1AEiw42vapkc0D+VqAvqdMOscUgHL\nVt0sgdm7v6s52IRzAAABi2CrrtYAAAQDAEYwRAIgK17bo6TRAr5XYc+gKB65YF+b\nphZLNbaL7mKEq8caS74CIANQp/UcGJBHpcJnpiNBYbRuvXaVW0qaxzKljVxbnz2P\nMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwIwCgYIKwYBBQUHAwEwPAYJKwYB\nBAGCNxUHBC8wLQYlKwYBBAGCNxUIh73XG4Hn60aCgZ0ujtAMh/DaHV2Cq+cwh+3x\nHwIBZAIBLTCBrgYIKwYBBQUHAQEEgaEwgZ4wbQYIKwYBBQUHMAKGYWh0dHA6Ly93\nd3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQXp1cmUl\nMjBUTFMlMjBJc3N1aW5nJTIwQ0ElMjAwMSUyMC0lMjB4c2lnbi5jcnQwLQYIKwYB\nBQUHMAGGIWh0dHA6Ly9vbmVvY3NwLm1pY3Jvc29mdC5jb20vb2NzcDAdBgNVHQ4E\nFgQUMhI55yDyt7bYUL8l0dVG/XzHBQ0wDgYDVR0PAQH/BAQDAgWgMIIFRwYDVR0R\nBIIFPjCCBTqCEyoucGxhdGZvcm0uYmluZy5jb22CCiouYmluZy5jb22CCGJpbmcu\nY29tghZpZW9ubGluZS5taWNyb3NvZnQuY29tghMqLndpbmRvd3NzZWFyY2guY29t\nghljbi5pZW9ubGluZS5taWNyb3NvZnQuY29tghEqLm9yaWdpbi5iaW5nLmNvbYIN\nKi5tbS5iaW5nLm5ldIIOKi5hcGkuYmluZy5jb22CDSouY24uYmluZy5uZXSCDSou\nY24uYmluZy5jb22CEHNzbC1hcGkuYmluZy5jb22CEHNzbC1hcGkuYmluZy5uZXSC\nDiouYXBpLmJpbmcubmV0gg4qLmJpbmdhcGlzLmNvbYIPYmluZ3NhbmRib3guY29t\nghZmZWVkYmFjay5taWNyb3NvZnQuY29tghtpbnNlcnRtZWRpYS5iaW5nLm9mZmlj\nZS5uZXSCDnIuYmF0LmJpbmcuY29tghAqLnIuYmF0LmJpbmcuY29tgg8qLmRpY3Qu\nYmluZy5jb22CDiouc3NsLmJpbmcuY29tghAqLmFwcGV4LmJpbmcuY29tghYqLnBs\nYXRmb3JtLmNuLmJpbmcuY29tgg13cC5tLmJpbmcuY29tggwqLm0uYmluZy5jb22C\nD2dsb2JhbC5iaW5nLmNvbYIRd2luZG93c3NlYXJjaC5jb22CDnNlYXJjaC5tc24u\nY29tghEqLmJpbmdzYW5kYm94LmNvbYIZKi5hcGkudGlsZXMuZGl0dS5saXZlLmNv\nbYIPKi5kaXR1LmxpdmUuY29tghgqLnQwLnRpbGVzLmRpdHUubGl2ZS5jb22CGCou\ndDEudGlsZXMuZGl0dS5saXZlLmNvbYIYKi50Mi50aWxlcy5kaXR1LmxpdmUuY29t\nghgqLnQzLnRpbGVzLmRpdHUubGl2ZS5jb22CFSoudGlsZXMuZGl0dS5saXZlLmNv\nbYILM2QubGl2ZS5jb22CE2FwaS5zZWFyY2gubGl2ZS5jb22CFGJldGEuc2VhcmNo\nLmxpdmUuY29tghVjbndlYi5zZWFyY2gubGl2ZS5jb22CDGRldi5saXZlLmNvbYIN\nZGl0dS5saXZlLmNvbYIRZmFyZWNhc3QubGl2ZS5jb22CDmltYWdlLmxpdmUuY29t\ngg9pbWFnZXMubGl2ZS5jb22CEWxvY2FsLmxpdmUuY29tLmF1ghRsb2NhbHNlYXJj\naC5saXZlLmNvbYIUbHM0ZC5zZWFyY2gubGl2ZS5jb22CDW1haWwubGl2ZS5jb22C\nEW1hcGluZGlhLmxpdmUuY29tgg5sb2NhbC5saXZlLmNvbYINbWFwcy5saXZlLmNv\nbYIQbWFwcy5saXZlLmNvbS5hdYIPbWluZGlhLmxpdmUuY29tgg1uZXdzLmxpdmUu\nY29tghxvcmlnaW4uY253ZWIuc2VhcmNoLmxpdmUuY29tghZwcmV2aWV3LmxvY2Fs\nLmxpdmUuY29tgg9zZWFyY2gubGl2ZS5jb22CEnRlc3QubWFwcy5saXZlLmNvbYIO\ndmlkZW8ubGl2ZS5jb22CD3ZpZGVvcy5saXZlLmNvbYIVdmlydHVhbGVhcnRoLmxp\ndmUuY29tggx3YXAubGl2ZS5jb22CEndlYm1hc3Rlci5saXZlLmNvbYIVd3d3Lmxv\nY2FsLmxpdmUuY29tLmF1ghR3d3cubWFwcy5saXZlLmNvbS5hdYITd2VibWFzdGVy\ncy5saXZlLmNvbYIYZWNuLmRldi52aXJ0dWFsZWFydGgubmV0ggx3d3cuYmluZy5j\nb20wDAYDVR0TAQH/BAIwADBkBgNVHR8EXTBbMFmgV6BVhlNodHRwOi8vd3d3Lm1p\nY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBBenVyZSUyMFRMUyUy\nMElzc3VpbmclMjBDQSUyMDAxLmNybDBmBgNVHSAEXzBdMFEGDCsGAQQBgjdMg30B\nATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3Bz\nL0RvY3MvUmVwb3NpdG9yeS5odG0wCAYGZ4EMAQICMB8GA1UdIwQYMBaAFA8gXdeh\nV5Xbks8r0MfCdwTOcoB2MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAN\nBgkqhkiG9w0BAQwFAAOCAgEAuP0x7VYM2GXL1zhWT5Vh52jZdCvVhjekcCkFBcWB\nadCxyAUTmbkQ/1E9XHzl2z8GyFVUxfvspyiw/b+RrEiKunAkYFQY/2tBKTCObo1v\nPV3WRIlMjl9qSI5y+ILfamh+WWoxrIZrV5WT7+P+0GqehqkAjSdtgfMdjuzbZ5hR\nXZINsUG/yyQyPtBxWVgykE6zeQsxnni4dtFtqitY150ACP4/oKXngP8uQz5jc7lI\n/yRtTy7RJeciFMFPE5a+1bvCddUBWEl10CCVAu9D/soxS9w1d39vc1U3UAYk8a6O\nUaPcF9Ge9aRc1U75gA+Ch+nFiUrqdregOkcUAiGDImWyaQO2mY+ULw1a2Q/w0IXe\n5XmJ6Xwrd2Pkt2YlrWjWCusVQCHcam4daWFj5c4+NDTGGFdy4JW9vVi/UbZW+TJm\nw135HkF7ts5PLAkvFYYIdnSsiUMKO2ev92IK/mUeVc5EgVlIN/lYh9+UG/o8elZK\nzruvDR+5FvlYF7QmT8WofRFFWs8rYYXbmR54nFoVrpwAgxQzgiggQeCzlf7pSRs8\nLb54DS9hUtjmp+Vw7PIB9XNY8CxNHzszHItlO/1/7j9C0dzhASZ7dQG9Vf1aQMAB\nRyWoJRkOsb3iAXS1fU1esgKwAfcDMRiWJQbAUR4xaI6ouksovjCFqXxjGzis2qV/\nG98=\n-----END CERTIFICATE-----\n", - "validation_time": "2023-10-24T07:42:23+00:00", + "validation_time": "2023-10-24T07:42:23Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/limbo/_assets/online/cloudflare.com.limbo.json b/limbo/_assets/online/cloudflare.com.limbo.json index 921c6fd5..afbcd92e 100644 --- a/limbo/_assets/online/cloudflare.com.limbo.json +++ b/limbo/_assets/online/cloudflare.com.limbo.json @@ -11,7 +11,7 @@ "-----BEGIN CERTIFICATE-----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\n6DEdfgkfCv4+3ao8XnTSrLE=\n-----END CERTIFICATE-----\n" ], "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "validation_time": "2023-12-01T00:00:01+00:00", + "validation_time": "2023-12-01T00:00:01Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/limbo/_assets/online/docs.python.org.limbo.json b/limbo/_assets/online/docs.python.org.limbo.json index ca3d7d63..00d20c18 100644 --- a/limbo/_assets/online/docs.python.org.limbo.json +++ b/limbo/_assets/online/docs.python.org.limbo.json @@ -11,7 +11,7 @@ "-----BEGIN CERTIFICATE-----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\nmselKkpUuoQRK+a3PDU2+FZ9/A==\n-----END CERTIFICATE-----\n" ], "peer_certificate": "-----BEGIN CERTIFICATE-----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\neVd78VgsTeXmD9d3quDztnts4btw8Kjx9n4JS61Z6kbj/lII6A==\n-----END CERTIFICATE-----\n", - "validation_time": "2023-06-29T16:48:44+00:00", + "validation_time": "2023-06-29T16:48:44Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/limbo/_assets/online/facebook.com.limbo.json b/limbo/_assets/online/facebook.com.limbo.json index d25602ee..c333c790 100644 --- a/limbo/_assets/online/facebook.com.limbo.json +++ b/limbo/_assets/online/facebook.com.limbo.json @@ -10,8 +10,8 @@ "untrusted_intermediates": [ "-----BEGIN CERTIFICATE-----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\ncPUeybQ=\n-----END CERTIFICATE-----\n" ], - "peer_certificate": "-----BEGIN CERTIFICATE-----\nMIIGljCCBX6gAwIBAgIQB1xa5Y7NT7dh9Y/5z2V/2DANBgkqhkiG9w0BAQsFADBw\nMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3\nd3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz\ndXJhbmNlIFNlcnZlciBDQTAeFw0yMzA5MjcwMDAwMDBaFw0yMzEyMjYyMzU5NTla\nMG8xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRMwEQYDVQQHEwpN\nZW5sbyBQYXJrMR0wGwYDVQQKExRNZXRhIFBsYXRmb3JtcywgSW5jLjEXMBUGA1UE\nAwwOKi5mYWNlYm9vay5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASg4XLL\nGtqWWftgIbi1ld57rDV9TbDpbTos3C2MEvkRsxX8QiaBVPTrSqjWjp6J137SafGT\nj1HrcKOrw2+1agHGo4ID9jCCA/IwHwYDVR0jBBgwFoAUUWj/kK8CB3U8zNllZGKi\nErhZcjswHQYDVR0OBBYEFFGkHtOUVUtATAbLr4RW6xWlKkl1MIG1BgNVHREEga0w\ngaqCDiouZmFjZWJvb2suY29tgg4qLmZhY2Vib29rLm5ldIILKi5mYmNkbi5uZXSC\nCyouZmJzYnguY29tghAqLm0uZmFjZWJvb2suY29tgg8qLm1lc3Nlbmdlci5jb22C\nDioueHguZmJjZG4ubmV0gg4qLnh5LmZiY2RuLm5ldIIOKi54ei5mYmNkbi5uZXSC\nDGZhY2Vib29rLmNvbYINbWVzc2VuZ2VyLmNvbTA+BgNVHSAENzA1MDMGBmeBDAEC\nAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYD\nVR0PAQH/BAQDAgOIMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNV\nHR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1oYS1z\nZXJ2ZXItZzYuY3JsMDSgMqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hh\nMi1oYS1zZXJ2ZXItZzYuY3JsMIGDBggrBgEFBQcBAQR3MHUwJAYIKwYBBQUHMAGG\nGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBNBggrBgEFBQcwAoZBaHR0cDovL2Nh\nY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkhpZ2hBc3N1cmFuY2VTZXJ2\nZXJDQS5jcnQwDAYDVR0TAQH/BAIwADCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFm\nAHYA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGK1AfENwAABAMA\nRzBFAiAnVHTFJibxz6VdBfofzTiY20XNLHPvPHuiWG+IclxQHgIhAKRCKm0+cIHk\n9WgAZ+/FFRCrkWhDFWSLFRPqCT4oO81rAHUAejKMVNi3LbYg6jjgUh7phBZwMhOF\nTTvSK8E6V6NS61IAAAGK1AfEXwAABAMARjBEAiAS/UeeSpZTHfVjX9Oe9hMfENr0\nBUV3SjAT3cV3fZ+avAIgVa8nnEleHfXaNOMZURBn15P7hMM8KCti11bcj8TH6s0A\ndQC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYrUB8SYAAAEAwBG\nMEQCIHW2vaZOPWpXA31YPMXgxwJKt3TQJ67Po1s3GnEP4X+4AiAc19qweB35fK7T\nQRhbC3e7cAUXkgpSZx3JEPIoCKxJ7zANBgkqhkiG9w0BAQsFAAOCAQEAD2Na716y\nraUq/3Df+9lyjwdNqR9JMyFvEKjrls/59uf7/lEsKsJIJOpJXPuOQL34gaTKQEhM\nWGCFuIN5w/7syAbDEcJ94WVfXR29N2LIdxoYHzfvLE75LCn6Sfs57Qq0xbgoboe3\nEOb5dU+buPNo4ThOuWHBYnAAy9P3q8B2g7nfA3oDNkRB7Bu9X374Ctz7Diyh/jvr\n8syGxdxzVFGxoLHY1Sjxg4POrycMMmjaaaE+8cRsvHmlpCnl/1TLoDDjgtHSlOPn\nz9GNRXG5a85QxVn03NJAxIkU4CQcw2ktaq288RBKqBk3CPidpfIprI+cT9CZZxam\ncZ4hFWvLxdBHCQ==\n-----END CERTIFICATE-----\n", - "validation_time": "2023-09-27T00:00:01+00:00", + "peer_certificate": "-----BEGIN CERTIFICATE-----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\nfa0NVlPGWb0nqNJH\n-----END CERTIFICATE-----\n", + "validation_time": "2023-09-28T00:00:01Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/limbo/_assets/online/fastly.com.limbo.json b/limbo/_assets/online/fastly.com.limbo.json index d99d06cb..78f40cb7 100644 --- a/limbo/_assets/online/fastly.com.limbo.json +++ b/limbo/_assets/online/fastly.com.limbo.json @@ -11,7 +11,7 @@ "-----BEGIN CERTIFICATE-----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\n2LduNzj/aVv/K6qMH95aCmxINw==\n-----END CERTIFICATE-----\n" ], "peer_certificate": "-----BEGIN CERTIFICATE-----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\nBwVe6Ng4xdi8r0BPxYWF/Ncx3ffSxsdA9ShxhHYmRqjvtX/L\n-----END CERTIFICATE-----\n", - "validation_time": "2023-10-06T14:38:35+00:00", + "validation_time": "2023-10-06T14:38:35Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/limbo/_assets/online/google.com.limbo.json b/limbo/_assets/online/google.com.limbo.json index 35c29293..a1abd521 100644 --- a/limbo/_assets/online/google.com.limbo.json +++ b/limbo/_assets/online/google.com.limbo.json @@ -11,7 +11,7 @@ "-----BEGIN CERTIFICATE-----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\n1IXNDw9bg1kWRxYtnCQ6yICmJhSFm/Y3m6xv+cXDBlHz4n/FsRC6UfTd\n-----END CERTIFICATE-----\n" ], "peer_certificate": "-----BEGIN CERTIFICATE-----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\nGLPRZMQ=\n-----END CERTIFICATE-----\n", - "validation_time": "2023-11-20T08:02:56+00:00", + "validation_time": "2023-11-20T08:02:56Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/limbo/_assets/online/microsoft.com.limbo.json b/limbo/_assets/online/microsoft.com.limbo.json index a9ccae1f..22418d04 100644 --- a/limbo/_assets/online/microsoft.com.limbo.json +++ b/limbo/_assets/online/microsoft.com.limbo.json @@ -11,7 +11,7 @@ "-----BEGIN CERTIFICATE-----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\n+ItQCmz7TjRH4ptX5Zh9pw==\n-----END CERTIFICATE-----\n" ], "peer_certificate": "-----BEGIN CERTIFICATE-----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\nnHAJz0DOdnJ5/ED7jvQJm+GyWraLHvX1nw==\n-----END CERTIFICATE-----\n", - "validation_time": "2023-12-18T22:25:04+00:00", + "validation_time": "2023-12-18T22:25:04Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/limbo/_assets/online/s3.amazonaws.com.limbo.json b/limbo/_assets/online/s3.amazonaws.com.limbo.json index 77b36190..411c61d5 100644 --- a/limbo/_assets/online/s3.amazonaws.com.limbo.json +++ b/limbo/_assets/online/s3.amazonaws.com.limbo.json @@ -11,7 +11,7 @@ "-----BEGIN CERTIFICATE-----\nMIIEXjCCA0agAwIBAgITB3MSOAudZoijOx7Zv5zNpo4ODzANBgkqhkiG9w0BAQsF\nADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6\nb24gUm9vdCBDQSAxMB4XDTIyMDgyMzIyMjEyOFoXDTMwMDgyMzIyMjEyOFowPDEL\nMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEcMBoGA1UEAxMTQW1hem9uIFJT\nQSAyMDQ4IE0wMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOtxLKnL\nH4gokjIwr4pXD3i3NyWVVYesZ1yX0yLI2qIUZ2t88Gfa4gMqs1YSXca1R/lnCKeT\nepWSGA+0+fkQNpp/L4C2T7oTTsddUx7g3ZYzByDTlrwS5HRQQqEFE3O1T5tEJP4t\nf+28IoXsNiEzl3UGzicYgtzj2cWCB41eJgEmJmcf2T8TzzK6a614ZPyq/w4CPAff\nnAV4coz96nW3AyiE2uhuB4zQUIXvgVSycW7sbWLvj5TDXunEpNCRwC4kkZjK7rol\njtT2cbb7W2s4Bkg3R42G3PLqBvt2N32e/0JOTViCk8/iccJ4sXqrS1uUN4iB5Nmv\nJK74csVl+0u0UecCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYD\nVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNV\nHQ4EFgQUgbgOY4qJEhjl+js7UJWf5uWQE4UwHwYDVR0jBBgwFoAUhBjMhTTsvAyU\nlC4IWZzHshBOCggwewYIKwYBBQUHAQEEbzBtMC8GCCsGAQUFBzABhiNodHRwOi8v\nb2NzcC5yb290Y2ExLmFtYXpvbnRydXN0LmNvbTA6BggrBgEFBQcwAoYuaHR0cDov\nL2NydC5yb290Y2ExLmFtYXpvbnRydXN0LmNvbS9yb290Y2ExLmNlcjA/BgNVHR8E\nODA2MDSgMqAwhi5odHRwOi8vY3JsLnJvb3RjYTEuYW1hem9udHJ1c3QuY29tL3Jv\nb3RjYTEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA0GCSqGSIb3DQEBCwUAA4IB\nAQCtAN4CBSMuBjJitGuxlBbkEUDeK/pZwTXv4KqPK0G50fOHOQAd8j21p0cMBgbG\nkfMHVwLU7b0XwZCav0h1ogdPMN1KakK1DT0VwA/+hFvGPJnMV1Kx2G4S1ZaSk0uU\n5QfoiYIIano01J5k4T2HapKQmmOhS/iPtuo00wW+IMLeBuKMn3OLn005hcrOGTad\nhcmeyfhQP7Z+iKHvyoQGi1C0ClymHETx/chhQGDyYSWqB/THwnN15AwLQo0E5V9E\nSJlbe4mBlqeInUsNYugExNf+tOiybcrswBy8OFsd34XOW3rjSUtsuafd9AWySa3h\nxRRrwszrzX/WWGm6wyB+f7C4\n-----END CERTIFICATE-----\n" ], "peer_certificate": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n", - "validation_time": "2023-10-10T00:00:01+00:00", + "validation_time": "2023-10-10T00:00:01Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/limbo/_assets/online/stackoverflow.com.limbo.json b/limbo/_assets/online/stackoverflow.com.limbo.json index bc908c56..50cc1222 100644 --- a/limbo/_assets/online/stackoverflow.com.limbo.json +++ b/limbo/_assets/online/stackoverflow.com.limbo.json @@ -11,7 +11,7 @@ "-----BEGIN CERTIFICATE-----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\nYJkgsTgDyj2gJrjubi1K9sZmHzOa25JK1fUpE8ZwYii6I4zPPS/Lgul/\n-----END CERTIFICATE-----\n" ], "peer_certificate": "-----BEGIN CERTIFICATE-----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\nKEMFkeXOoqvKCuRJ\n-----END CERTIFICATE-----\n", - "validation_time": "2023-11-16T15:32:34+00:00", + "validation_time": "2023-11-16T15:32:34Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/limbo/_assets/online/storage.googleapis.com.limbo.json b/limbo/_assets/online/storage.googleapis.com.limbo.json index 4d989d52..52736550 100644 --- a/limbo/_assets/online/storage.googleapis.com.limbo.json +++ b/limbo/_assets/online/storage.googleapis.com.limbo.json @@ -11,7 +11,7 @@ "-----BEGIN CERTIFICATE-----\nMIIFljCCA36gAwIBAgINAgO8U1lrNMcY9QFQZjANBgkqhkiG9w0BAQsFADBHMQsw\nCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU\nMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjAwODEzMDAwMDQyWhcNMjcwOTMwMDAw\nMDQyWjBGMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp\nY2VzIExMQzETMBEGA1UEAxMKR1RTIENBIDFDMzCCASIwDQYJKoZIhvcNAQEBBQAD\nggEPADCCAQoCggEBAPWI3+dijB43+DdCkH9sh9D7ZYIl/ejLa6T/belaI+KZ9hzp\nkgOZE3wJCor6QtZeViSqejOEH9Hpabu5dOxXTGZok3c3VVP+ORBNtzS7XyV3NzsX\nlOo85Z3VvMO0Q+sup0fvsEQRY9i0QYXdQTBIkxu/t/bgRQIh4JZCF8/ZK2VWNAcm\nBA2o/X3KLu/qSHw3TT8An4Pf73WELnlXXPxXbhqW//yMmqaZviXZf5YsBvcRKgKA\ngOtjGDxQSYflispfGStZloEAoPtR28p3CwvJlk/vcEnHXG0g/Zm0tOLKLnf9LdwL\ntmsTDIwZKxeWmLnwi/agJ7u2441Rj72ux5uxiZ0CAwEAAaOCAYAwggF8MA4GA1Ud\nDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0T\nAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUinR/r4XN7pXNPZzQ4kYU83E1HScwHwYD\nVR0jBBgwFoAU5K8rJnEaK0gnhS9SZizv8IkTcT4waAYIKwYBBQUHAQEEXDBaMCYG\nCCsGAQUFBzABhhpodHRwOi8vb2NzcC5wa2kuZ29vZy9ndHNyMTAwBggrBgEFBQcw\nAoYkaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzcjEuZGVyMDQGA1UdHwQt\nMCswKaAnoCWGI2h0dHA6Ly9jcmwucGtpLmdvb2cvZ3RzcjEvZ3RzcjEuY3JsMFcG\nA1UdIARQME4wOAYKKwYBBAHWeQIFAzAqMCgGCCsGAQUFBwIBFhxodHRwczovL3Br\naS5nb29nL3JlcG9zaXRvcnkvMAgGBmeBDAECATAIBgZngQwBAgIwDQYJKoZIhvcN\nAQELBQADggIBAIl9rCBcDDy+mqhXlRu0rvqrpXJxtDaV/d9AEQNMwkYUuxQkq/BQ\ncSLbrcRuf8/xam/IgxvYzolfh2yHuKkMo5uhYpSTld9brmYZCwKWnvy15xBpPnrL\nRklfRuFBsdeYTWU0AIAaP0+fbH9JAIFTQaSSIYKCGvGjRFsqUBITTcFTNvNCCK9U\n+o53UxtkOCcXCb1YyRt8OS1b887U7ZfbFAO/CVMkH8IMBHmYJvJh8VNS/UKMG2Yr\nPxWhu//2m+OBmgEGcYk1KCTd4b3rGS3hSMs9WYNRtHTGnXzGsYZbr8w0xNPM1IER\nlQCh9BIiAfq0g3GvjLeMcySsN1PCAJA/Ef5c7TaUEDu9Ka7ixzpiO2xj2YC/WXGs\nYye5TBeg2vZzFb8q3o/zpWwygTMD0IZRcZk0upONXbVRWPeyk+gB9lm+cZv9TSjO\nz23HFtz30dZGm6fKa+l3D/2gthsjgx0QGtkJAITgRNOidSOzNIb2ILCkXhAd4FJG\nAJ2xDx8hcFH1mt0G/FX0Kw4zd8NLQsLxdxP8c4CU6x+7Nz/OAipmsHMdMqUybDKw\njuDEI/9bfU1lcKwrmz3O2+BtjjKAvpafkmO8l7tdufThcV4q5O8DIrGKZTqPwJNl\n1IXNDw9bg1kWRxYtnCQ6yICmJhSFm/Y3m6xv+cXDBlHz4n/FsRC6UfTd\n-----END CERTIFICATE-----\n" ], "peer_certificate": "-----BEGIN CERTIFICATE-----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\nfqLZ1u+nENToi/8FMg4+Fhw/emLMUkLNOXRn9Q==\n-----END CERTIFICATE-----\n", - "validation_time": "2023-11-20T08:13:20+00:00", + "validation_time": "2023-11-20T08:13:20Z", "signature_algorithms": [], "key_usage": [], "extended_key_usage": [], diff --git a/pyproject.toml b/pyproject.toml index 510abe3b..912d7a48 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -37,6 +37,7 @@ site = [ "pymdown-extensions", "mkdocs-material", "py-markdown-table==0.4.0", + "json-schema-for-humans==0.47", ] dev = ["limbo[doc,test,lint,site]", "twine", "wheel", "build"] [project.scripts] diff --git a/site/render-testcases.py b/site/render-testcases.py index 5deaa5fb..c060d967 100644 --- a/site/render-testcases.py +++ b/site/render-testcases.py @@ -4,12 +4,16 @@ # TODO(ww): Use some kind of Markdown builder API here, rather than # smashing strings together. +import json import re from collections import defaultdict from dataclasses import dataclass from pathlib import Path +from tempfile import NamedTemporaryFile import mkdocs_gen_files +from json_schema_for_humans.generate import generate_from_file_object +from json_schema_for_humans.generation_configuration import GenerationConfiguration from py_markdown_table.markdown_table import markdown_table from limbo.models import ( @@ -27,6 +31,9 @@ LIMBO_JSON = _HERE.parent / "limbo.json" assert LIMBO_JSON.is_file() +LIMBO_SCHEMA_JSON = _HERE.parent / "limbo-schema.json" +assert LIMBO_SCHEMA_JSON.is_file() + RESULTS = _HERE.parent / "results" BASE_URL = "https://trailofbits.github.io/x509-limbo" @@ -178,3 +185,15 @@ def _render_harness_results( ), file=f, ) + +with mkdocs_gen_files.open("schema.md", "w") as f, NamedTemporaryFile(mode="w+") as schema: + print(json.dumps(Limbo.model_json_schema()), file=schema) + schema.seek(0) + generate_from_file_object( + schema, + f, + config=GenerationConfiguration( + template_name="md", + show_toc=False, + ), + )