* [blacksail][PATCH 01/60] zeroconf: ignore CVEs
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
@ 2026-10-28 4:22 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 02/60] udisks2: patch CVE-2026-7867 ankur.tyagi85
` (59 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:22 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-47180
https://nvd.nist.gov/vuln/detail/cve-2026-47183
https://nvd.nist.gov/vuln/detail/cve-2026-47184
https://nvd.nist.gov/vuln/detail/cve-2026-48045
https://nvd.nist.gov/vuln/detail/cve-2026-48487
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb b/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb
index cb26699212..a9c19cb38f 100644
--- a/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb
+++ b/meta-networking/recipes-protocols/zeroconf/zeroconf_0.9.bb
@@ -35,3 +35,9 @@ do_install () {
install -c -m 755 ${UNPACKDIR}/debian-zeroconf ${D}${sysconfdir}/network/if-up.d/zeroconf
install -c ${UNPACKDIR}/zeroconf-default ${D}${sysconfdir}/default/zeroconf
}
+
+CVE_STATUS[CVE-2026-47180] = "cpe-incorrect: this vulnerability is for Python Zeroconf library"
+CVE_STATUS[CVE-2026-47183] = "cpe-incorrect: this vulnerability is for Python Zeroconf library"
+CVE_STATUS[CVE-2026-47184] = "cpe-incorrect: this vulnerability is for Python Zeroconf library"
+CVE_STATUS[CVE-2026-48045] = "cpe-incorrect: this vulnerability is for Python Zeroconf library"
+CVE_STATUS[CVE-2026-48487] = "cpe-incorrect: this vulnerability is for Python Zeroconf library"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 02/60] udisks2: patch CVE-2026-7867
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
2026-10-28 4:22 ` [blacksail][PATCH 01/60] zeroconf: ignore CVEs ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 03/60] tmate: patch CVE-2026-4751 ankur.tyagi85
` (58 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Backport commits from the PR[1].
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-7867
[1]https://github.com/storaged-project/udisks/pull/1530
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../udisks/udisks2/CVE-2026-7867-1.patch | 249 +++++++++++++
.../udisks/udisks2/CVE-2026-7867-2.patch | 208 +++++++++++
.../udisks/udisks2/CVE-2026-7867-3.patch | 53 +++
.../udisks/udisks2/CVE-2026-7867-4.patch | 40 ++
.../udisks/udisks2/CVE-2026-7867-5.patch | 348 ++++++++++++++++++
.../recipes-support/udisks/udisks2_2.10.2.bb | 9 +-
6 files changed, 905 insertions(+), 2 deletions(-)
create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch
create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch
create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch
create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch
create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch
diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch
new file mode 100644
index 0000000000..e7a5704f6c
--- /dev/null
+++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch
@@ -0,0 +1,249 @@
+From 1b417fd9a69e7141927a03bfb39d4d5a78b891b4 Mon Sep 17 00:00:00 2001
+From: Tomas Bzatek <tbzatek@redhat.com>
+Date: Tue, 28 Apr 2026 19:10:09 +0200
+Subject: [PATCH] udiskslinuxfilesystem: Separate real caller identity from
+ as-user target
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+When the 'as-user' option is specified in Filesystem.Mount(), the code
+previously overwrote caller_uid/caller_gid with the target user's identity.
+This meant downstream functions received a uid they believed was the
+D-Bus caller's, but was actually the target's.
+
+Introduce effective_uid/effective_gid/effective_user_name to hold the
+as-user target identity (or the caller's identity when as-user is not
+set). The real D-Bus caller identity is now always resolved into
+caller_uid/caller_gid and used for authorization-related decisions
+(setup_by_user, on_user_seat checks), while effective_* is used for
+mount point calculation, run_as_uid/run_as_gid, and state tracking.
+
+Reported-by: Azizcan Daştan <azizcan.dastan5@gmail.com>
+Reported-by: Özlem Ozan <oozan1725@gmail.com>
+Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
+(cherry picked from commit 397eea88d58f77f6e02d537c4c961201b9245943)
+(cherry picked from commit 2d97818f41fbeb645fbb7b0373ed448bd26503f6)
+
+CVE: CVE-2026-7867
+Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/2d97818f41fbeb645fbb7b0373ed448bd26503f6]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ src/udiskslinuxfilesystem.c | 93 +++++++++++++++++++++----------------
+ 1 file changed, 53 insertions(+), 40 deletions(-)
+
+diff --git a/src/udiskslinuxfilesystem.c b/src/udiskslinuxfilesystem.c
+index 9f4880ad..ebdd2e05 100644
+--- a/src/udiskslinuxfilesystem.c
++++ b/src/udiskslinuxfilesystem.c
+@@ -905,7 +905,8 @@ handle_mount_fstab (UDisksDaemon *daemon,
+ UDisksObject *object,
+ uid_t caller_uid,
+ gid_t caller_gid,
+- gboolean mount_other_user,
++ uid_t effective_uid,
++ gid_t effective_gid,
+ const gchar *mount_point_to_use,
+ const gchar *fstab_mount_options,
+ GDBusMethodInvocation *invocation,
+@@ -936,7 +937,7 @@ handle_mount_fstab (UDisksDaemon *daemon,
+ * will be replaced by the name of the drive/device in question
+ */
+ message = N_("Authentication is required to mount $(drive)");
+- if (mount_other_user)
++ if (caller_uid != effective_uid)
+ {
+ action_id = "org.freedesktop.udisks2.filesystem-mount-other-user";
+ }
+@@ -981,14 +982,14 @@ handle_mount_fstab (UDisksDaemon *daemon,
+ job = udisks_daemon_launch_simple_job (daemon,
+ UDISKS_OBJECT (object),
+ "filesystem-mount",
+- mount_fstab_as_root ? 0 : caller_uid,
++ mount_fstab_as_root ? 0 : effective_uid,
+ NULL /* cancellable */);
+
+ /* XXX: using run_as_uid for root doesn't work even if the caller is already root */
+- if (!mount_fstab_as_root && caller_uid != 0)
++ if (!mount_fstab_as_root && effective_uid != 0)
+ {
+- BDExtraArg uid_arg = { g_strdup ("run_as_uid"), g_strdup_printf ("%d", caller_uid) };
+- BDExtraArg gid_arg = { g_strdup ("run_as_gid"), g_strdup_printf ("%d", caller_gid) };
++ BDExtraArg uid_arg = { g_strdup ("run_as_uid"), g_strdup_printf ("%d", effective_uid) };
++ BDExtraArg gid_arg = { g_strdup ("run_as_gid"), g_strdup_printf ("%d", effective_gid) };
+ const BDExtraArg *extra_args[3] = { &uid_arg, &gid_arg, NULL };
+
+ success = bd_fs_mount (NULL, mount_point_to_use, NULL, NULL, extra_args, &error);
+@@ -1066,8 +1067,9 @@ handle_mount_dynamic (UDisksDaemon *daemon,
+ UDisksObject *object,
+ uid_t caller_uid,
+ gid_t caller_gid,
+- const gchar *caller_user_name,
+- gboolean mount_other_user,
++ uid_t effective_uid,
++ gid_t effective_gid,
++ const gchar *effective_user_name,
+ gchar **mount_point_to_use,
+ gboolean *mpoint_persistent,
+ GDBusMethodInvocation *invocation,
+@@ -1127,7 +1129,7 @@ handle_mount_dynamic (UDisksDaemon *daemon,
+ * will be replaced by the name of the drive/device in question
+ */
+ message = N_("Authentication is required to mount $(drive)");
+- if (mount_other_user)
++ if (caller_uid != effective_uid)
+ {
+ action_id = "org.freedesktop.udisks2.filesystem-mount-other-user";
+ }
+@@ -1161,9 +1163,9 @@ handle_mount_dynamic (UDisksDaemon *daemon,
+ /* Calculate mount point (guaranteed to be valid UTF-8) */
+ *mount_point_to_use = calculate_mount_point (daemon,
+ block,
+- caller_uid,
+- caller_gid,
+- caller_user_name,
++ effective_uid,
++ effective_gid,
++ effective_user_name,
+ fs_type_to_use,
+ mpoint_persistent,
+ &error);
+@@ -1178,7 +1180,7 @@ handle_mount_dynamic (UDisksDaemon *daemon,
+ /* Calculate mount options (guaranteed to be valid UTF-8) */
+ mount_options = udisks_linux_calculate_mount_options (daemon,
+ block,
+- caller_uid,
++ effective_uid,
+ fs_signature,
+ fs_type_to_use,
+ options,
+@@ -1258,14 +1260,16 @@ handle_mount (UDisksFilesystem *filesystem,
+ UDisksBlock *block;
+ UDisksDaemon *daemon;
+ UDisksState *state = NULL;
+- gchar *opt_as_user = NULL;
++ const gchar *opt_as_user = NULL;
+ uid_t caller_uid;
+ gid_t caller_gid;
++ uid_t effective_uid = 0;
++ gid_t effective_gid = 0;
++ gchar *effective_user_name = NULL;
+ const gchar * const *existing_mount_points;
+ gchar *mount_point_to_use = NULL;
+ gboolean mpoint_persistent = TRUE;
+ gchar *fstab_mount_options = NULL;
+- gchar *caller_user_name = NULL;
+ GError *error = NULL;
+ gboolean system_managed = FALSE;
+ gchar *device = NULL;
+@@ -1323,35 +1327,42 @@ handle_mount (UDisksFilesystem *filesystem,
+ goto out;
+ }
+
++ /* Always resolve the real D-Bus caller identity */
++ if (!udisks_daemon_util_get_caller_uid_sync (daemon,
++ invocation,
++ NULL /* GCancellable */,
++ &caller_uid,
++ &error))
++ {
++ g_dbus_method_invocation_return_gerror (invocation, error);
++ g_clear_error (&error);
++ goto out;
++ }
++
++ if (!udisks_daemon_util_get_user_info (caller_uid,
++ &caller_gid,
++ opt_as_user ? NULL : &effective_user_name,
++ &error))
++ {
++ g_dbus_method_invocation_return_gerror (invocation, error);
++ g_clear_error (&error);
++ goto out;
++ }
++
+ if (opt_as_user)
+ {
+- if (!udisks_daemon_util_get_user_info_by_name (opt_as_user, &caller_uid, &caller_gid, &error))
++ if (!udisks_daemon_util_get_user_info_by_name (opt_as_user, &effective_uid, &effective_gid, &error))
+ {
+ g_dbus_method_invocation_return_gerror (invocation, error);
+ g_clear_error (&error);
+ goto out;
+ }
+- caller_user_name = g_strdup (opt_as_user);
++ effective_user_name = g_strdup (opt_as_user);
+ }
+ else
+ {
+- if (!udisks_daemon_util_get_caller_uid_sync (daemon,
+- invocation,
+- NULL /* GCancellable */,
+- &caller_uid,
+- &error))
+- {
+- g_dbus_method_invocation_return_gerror (invocation, error);
+- g_clear_error (&error);
+- goto out;
+- }
+-
+- if (!udisks_daemon_util_get_user_info (caller_uid, &caller_gid, &caller_user_name, &error))
+- {
+- g_dbus_method_invocation_return_gerror (invocation, error);
+- g_clear_error (&error);
+- goto out;
+- }
++ effective_uid = caller_uid;
++ effective_gid = caller_gid;
+ }
+
+ /* Mount it */
+@@ -1361,7 +1372,8 @@ handle_mount (UDisksFilesystem *filesystem,
+ object,
+ caller_uid,
+ caller_gid,
+- opt_as_user != NULL,
++ effective_uid,
++ effective_gid,
+ mount_point_to_use,
+ fstab_mount_options,
+ invocation,
+@@ -1374,8 +1386,9 @@ handle_mount (UDisksFilesystem *filesystem,
+ object,
+ caller_uid,
+ caller_gid,
+- caller_user_name,
+- opt_as_user != NULL,
++ effective_uid,
++ effective_gid,
++ effective_user_name,
+ &mount_point_to_use,
+ &mpoint_persistent,
+ invocation,
+@@ -1387,7 +1400,7 @@ handle_mount (UDisksFilesystem *filesystem,
+ udisks_state_add_mounted_fs (state,
+ mount_point_to_use,
+ udisks_block_get_device_number (block),
+- caller_uid,
++ effective_uid,
+ system_managed,
+ system_managed ? FALSE : mpoint_persistent);
+
+@@ -1395,7 +1408,7 @@ handle_mount (UDisksFilesystem *filesystem,
+ device,
+ system_managed ? " (system)" : "",
+ mount_point_to_use,
+- caller_uid);
++ effective_uid);
+
+ udisks_linux_block_object_trigger_uevent_sync (UDISKS_LINUX_BLOCK_OBJECT (object),
+ UDISKS_DEFAULT_WAIT_TIMEOUT);
+@@ -1409,7 +1422,7 @@ handle_mount (UDisksFilesystem *filesystem,
+ udisks_state_check (state);
+ g_free (mount_point_to_use);
+ g_free (fstab_mount_options);
+- g_free (caller_user_name);
++ g_free (effective_user_name);
+ g_free (device);
+ g_clear_object (&object);
+
diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch
new file mode 100644
index 0000000000..dff53c87d8
--- /dev/null
+++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch
@@ -0,0 +1,208 @@
+From 53a3e81a90fa6d71cfb59d63ffffa22bbe071886 Mon Sep 17 00:00:00 2001
+From: Tomas Bzatek <tbzatek@redhat.com>
+Date: Tue, 28 Apr 2026 19:29:14 +0200
+Subject: [PATCH] udiskslinuxfilesystem: Rework fstab mount authorization for
+ as-user
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+The polkit authorization logic in handle_mount_fstab() had two problems
+when 'as-user' was combined with fstab entries containing 'user',
+'users' or 'x-udisks-auth' mount options:
+
+1. The 'filesystem-mount-other-user' polkit check was inside the code
+ block that is skipped when 'user'/'users'/'x-udisks-auth' options
+ are present, allowing an unprivileged caller to mount on behalf of
+ another user without any authorization.
+
+2. When 'user' or 'users' fstab options were present and the initial
+ mount attempt failed with a permission error, the code would fall
+ back to mounting as root. This fallback should only be available
+ when 'x-udisks-auth' is explicitly specified.
+
+Restructure the authorization flow so that:
+ - The 'filesystem-mount-other-user' check is evaluated first,
+ independently of fstab mount options, and is always enforced
+ when caller_uid != effective_uid.
+ - The root fallback on BD_FS_ERROR_AUTH is gated on 'x-udisks-auth'
+ being present, not just any of the user-level mount options.
+ - When root uses 'as-user' without 'user'/'users' fstab options,
+ the root fallback is implicitly enabled.
+ - Regular polkit checks (filesystem-mount, mount-system,
+ mount-other-seat) only apply for same-user mounts without
+ 'user'/'users'/'x-udisks-auth'.
+
+Update the D-Bus API documentation to reflect the new behavior.
+
+Reported-by: Azizcan Daştan <azizcan.dastan5@gmail.com>
+Reported-by: Özlem Ozan <oozan1725@gmail.com>
+Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
+(cherry picked from commit 68108081aa9049cf3bb2fb0044cb4de83f962390)
+(cherry picked from commit 0050f51d40e468f6a3197ccdc77b5bd59c923a37)
+
+CVE: CVE-2026-7867
+Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/0050f51d40e468f6a3197ccdc77b5bd59c923a37]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ data/org.freedesktop.UDisks2.xml | 24 ++++++-----
+ src/udiskslinuxfilesystem.c | 73 ++++++++++++++++++++++++--------
+ 2 files changed, 70 insertions(+), 27 deletions(-)
+
+diff --git a/data/org.freedesktop.UDisks2.xml b/data/org.freedesktop.UDisks2.xml
+index 53194c70..f7201adc 100644
+--- a/data/org.freedesktop.UDisks2.xml
++++ b/data/org.freedesktop.UDisks2.xml
+@@ -2654,7 +2654,8 @@
+ filesystem is mounted on behalf of the specified user instead
+ of the calling one. This has usually an effect on the returned
+ @mount_path and it also allows that user to unmount the
+- filesystem later. This option expects a user name, not a UID.
++ filesystem later. This option expects a user name, not a UID
++ and always performs an authorization check.
+
+ If the device in question is referenced in the
+ <filename>/etc/fstab</filename> file, the
+@@ -2662,15 +2663,18 @@
+ and the given options or filesystem type given in @options are
+ ignored.
+
+- If <literal>x-udisks-auth</literal> is specified as an option
+- for the device in the <filename>/etc/fstab</filename> file,
+- then the <command>mount</command> command is run as the
+- calling user, without performing any authorization check
+- mentioned above. If this fails because of insufficient
+- permissions, an authorization check is performed (which
+- typically results in the user having to authenticate as an
+- administrator). If authorized, the <command>mount</command>
+- command is then run as root.
++ If <literal>x-udisks-auth</literal>, <literal>user</literal> or
++ <literal>users</literal> are specified as options for the
++ device in the <filename>/etc/fstab</filename> file, then the
++ <command>mount</command> command is run as the calling user
++ (or the effective user of the <parameter>as-user</parameter>
++ option respectively), without performing any authorization check
++ mentioned above. If this fails because of insufficient permissions
++ and <literal>x-udisks-auth</literal> is specified, an
++ authorization check is performed (which typically results in
++ the user having to authenticate as an administrator). If
++ authorized, the <command>mount</command> command is then run
++ as root.
+
+ The filesystem should be unmounted using the
+ org.freedesktop.UDisks2.Filesystem.Unmount() method.
+diff --git a/src/udiskslinuxfilesystem.c b/src/udiskslinuxfilesystem.c
+index ebdd2e05..eb2a3f21 100644
+--- a/src/udiskslinuxfilesystem.c
++++ b/src/udiskslinuxfilesystem.c
+@@ -918,30 +918,60 @@ handle_mount_fstab (UDisksDaemon *daemon,
+ const gchar *message = NULL;
+ gboolean success = FALSE;
+ gboolean mount_fstab_as_root = FALSE;
++ gboolean x_udisks_auth = FALSE;
++ gboolean user_mount = FALSE;
+ UDisksBaseJob *job = NULL;
+ GError *error = NULL;
+
+ block = udisks_object_peek_block (object);
+ device = udisks_block_get_device (block);
+
+- if (!has_option (fstab_mount_options, "x-udisks-auth") &&
+- !has_option (fstab_mount_options, "user") &&
+- !has_option (fstab_mount_options, "users"))
++ x_udisks_auth = has_option (fstab_mount_options, "x-udisks-auth");
++ user_mount = x_udisks_auth ||
++ has_option (fstab_mount_options, "user") ||
++ has_option (fstab_mount_options, "users");
++
++ /* 'as-user' rules:
++ * - when caller is root:
++ * - if 'user'/'users' present, do not fall back to mounting as root, unless 'x-udisks-auth' is specified
++ * - if 'user'/'users' not present, try as effective user first and allow fallback to mounting as root (implies 'x-udisks-auth')
++ * - when caller is unprivileged:
++ * - always require polkit auth to prevent identity spoofing
++ * - do not fall back to mounting as root, unless 'x-udisks-auth' is specified
++ * - if neither 'user'/'users'/'x-udisks-auth' present, failure is expected by nature (unless 'as-user=root')
++ *
++ * general fstab mounting rules:
++ * - when caller is root, mount as root, allow anything
++ * - when caller is unprivileged:
++ * - if 'user'/'users' present, do not fall back to mounting as root, unless 'x-udisks-auth' is specified
++ * - if only 'x-udisks-auth' present, mount as user and fall back to mounting as root if not successful
++ * - if neither 'user'/'users'/'x-udisks-auth' present, require polkit auth and mount as root
++ *
++ * Further assumptions:
++ * - when 'user'/'users' not present and mounting as unprivileged, this typically fails but it is still beneficial to try that e.g. for FUSE mounts
++ * - assuming libblockdev mount error code mapping works reliably (for the BD_FS_ERROR_AUTH check)
++ */
++
++ if (caller_uid != effective_uid)
++ {
++ /* Always require authorization when mounting on behalf of another user,
++ * regardless of fstab mount options.
++ */
++ action_id = "org.freedesktop.udisks2.filesystem-mount-other-user";
++
++ /* When 'user'/'users' not present and the caller is root, allow
++ * fallback mounting as root.
++ */
++ if (caller_uid == 0 && !user_mount)
++ x_udisks_auth = TRUE;
++ }
++ else
++ if (!user_mount)
+ {
+ mount_fstab_as_root = TRUE;
++
+ action_id = "org.freedesktop.udisks2.filesystem-mount";
+- /* Translators: Shown in authentication dialog when the user
+- * requests mounting a filesystem.
+- *
+- * Do not translate $(drive), it's a placeholder and
+- * will be replaced by the name of the drive/device in question
+- */
+- message = N_("Authentication is required to mount $(drive)");
+- if (caller_uid != effective_uid)
+- {
+- action_id = "org.freedesktop.udisks2.filesystem-mount-other-user";
+- }
+- else if (!udisks_daemon_util_setup_by_user (daemon, object, caller_uid))
++ if (!udisks_daemon_util_setup_by_user (daemon, object, caller_uid))
+ {
+ if (udisks_block_get_hint_system (block))
+ {
+@@ -952,7 +982,17 @@ handle_mount_fstab (UDisksDaemon *daemon,
+ action_id = "org.freedesktop.udisks2.filesystem-mount-other-seat";
+ }
+ }
++ }
+
++ if (action_id)
++ {
++ /* Translators: Shown in authentication dialog when the user
++ * requests mounting a filesystem.
++ *
++ * Do not translate $(drive), it's a placeholder and
++ * will be replaced by the name of the drive/device in question
++ */
++ message = N_("Authentication is required to mount $(drive)");
+ if (!udisks_daemon_util_check_authorization_sync (daemon,
+ object,
+ action_id,
+@@ -962,7 +1002,6 @@ handle_mount_fstab (UDisksDaemon *daemon,
+ return FALSE;
+ }
+
+-
+ if (!g_file_test (mount_point_to_use, G_FILE_TEST_IS_DIR))
+ {
+ if (g_mkdir_with_parents (mount_point_to_use, 0755) != 0)
+@@ -1011,7 +1050,7 @@ handle_mount_fstab (UDisksDaemon *daemon,
+
+ if (!success)
+ {
+- if (!mount_fstab_as_root && g_error_matches (error, BD_FS_ERROR, BD_FS_ERROR_AUTH))
++ if (!mount_fstab_as_root && g_error_matches (error, BD_FS_ERROR, BD_FS_ERROR_AUTH) && x_udisks_auth)
+ {
+ g_clear_error (&error);
+ action_id = "org.freedesktop.udisks2.filesystem-fstab";
diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch
new file mode 100644
index 0000000000..245e46ac00
--- /dev/null
+++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch
@@ -0,0 +1,53 @@
+From 68a82f2afb3a5ca0da207cdd5bbd55e777940e12 Mon Sep 17 00:00:00 2001
+From: Tomas Bzatek <tbzatek@redhat.com>
+Date: Sun, 3 May 2026 14:00:01 +0200
+Subject: [PATCH] udiskslinuxfilesystem: Log real caller uid for as-user mounts
+
+When a mount is performed with the as-user option targeting a different
+user, log both the effective (target) uid and the real caller uid to
+provide an audit trail of who authorized the operation.
+
+Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
+(cherry picked from commit 98e5a76c155640d155280cdb642791f00def736a)
+(cherry picked from commit 132ebab4a196f7fbd01fa28283627b2227eb399b)
+
+CVE: CVE-2026-7867
+Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/132ebab4a196f7fbd01fa28283627b2227eb399b]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ src/udiskslinuxfilesystem.c | 22 +++++++++++++++++-----
+ 1 file changed, 17 insertions(+), 5 deletions(-)
+
+diff --git a/src/udiskslinuxfilesystem.c b/src/udiskslinuxfilesystem.c
+index eb2a3f21..5e2508cc 100644
+--- a/src/udiskslinuxfilesystem.c
++++ b/src/udiskslinuxfilesystem.c
+@@ -1443,11 +1443,23 @@ handle_mount (UDisksFilesystem *filesystem,
+ system_managed,
+ system_managed ? FALSE : mpoint_persistent);
+
+- udisks_notice ("Mounted %s%s at %s on behalf of uid %u",
+- device,
+- system_managed ? " (system)" : "",
+- mount_point_to_use,
+- effective_uid);
++ if (effective_uid != caller_uid)
++ {
++ udisks_notice ("Mounted %s%s at %s on behalf of uid %u (requested by uid %u)",
++ device,
++ system_managed ? " (system)" : "",
++ mount_point_to_use,
++ effective_uid,
++ caller_uid);
++ }
++ else
++ {
++ udisks_notice ("Mounted %s%s at %s on behalf of uid %u",
++ device,
++ system_managed ? " (system)" : "",
++ mount_point_to_use,
++ effective_uid);
++ }
+
+ udisks_linux_block_object_trigger_uevent_sync (UDISKS_LINUX_BLOCK_OBJECT (object),
+ UDISKS_DEFAULT_WAIT_TIMEOUT);
diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch
new file mode 100644
index 0000000000..726f3271dc
--- /dev/null
+++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch
@@ -0,0 +1,40 @@
+From a17202ed591f07109ce978e5abb999c67de9b3f1 Mon Sep 17 00:00:00 2001
+From: Tomas Bzatek <tbzatek@redhat.com>
+Date: Tue, 28 Apr 2026 19:10:38 +0200
+Subject: [PATCH] udisksdaemonutil: Pass as-user target to polkit details
+
+When the 'as-user' D-Bus method option is present, propagate the
+target username to polkit details as 'mount.as-user'. This allows
+polkit rules to make fine-grained authorization decisions based on
+who the mount is being performed for.
+
+Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
+(cherry picked from commit 681d58a76f6aaa5045eb43e665c65f497d35b810)
+(cherry picked from commit 3b016cc881b1d3c3d843ec13e35102beaaac7023)
+
+CVE: CVE-2026-7867
+Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/3b016cc881b1d3c3d843ec13e35102beaaac7023]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ src/udisksdaemonutil.c | 8 ++++++++
+ 1 file changed, 8 insertions(+)
+
+diff --git a/src/udisksdaemonutil.c b/src/udisksdaemonutil.c
+index 3db92f58..36e3184b 100644
+--- a/src/udisksdaemonutil.c
++++ b/src/udisksdaemonutil.c
+@@ -797,6 +797,14 @@ udisks_daemon_util_check_authorization_sync_with_error (UDisksDaemon *
+ polkit_details_insert (details, "polkit.message", message);
+ polkit_details_insert (details, "polkit.gettext_domain", "udisks2");
+
++ if (options != NULL &&
++ g_strcmp0 (action_id, "org.freedesktop.udisks2.filesystem-mount-other-user") == 0)
++ {
++ const gchar *as_user = NULL;
++ g_variant_lookup (options, "as-user", "&s", &as_user);
++ _safe_polkit_details_insert (details, "mount.as-user", as_user);
++ }
++
+ /* Find drive associated with the block device, if any */
+ if (object != NULL)
+ {
diff --git a/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch
new file mode 100644
index 0000000000..6901e71d37
--- /dev/null
+++ b/meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch
@@ -0,0 +1,348 @@
+From 7e77f3cb5c6658f5522d8d56e882e8df02978d76 Mon Sep 17 00:00:00 2001
+From: Tomas Bzatek <tbzatek@redhat.com>
+Date: Wed, 29 Apr 2026 16:36:45 +0200
+Subject: [PATCH] tests: Add security tests for as-user mount authorization
+
+Add tests verifying that an unprivileged D-Bus caller cannot exploit
+the 'as-user' option in Filesystem.Mount() to mount on behalf of
+another user without polkit authorization. Use a dedicated
+'udisks_test_target' user instead of 'nobody' to avoid OS-level
+special treatment of system users that could mask real behavior.
+
+Dynamic mount tests (in UdisksFSTestCase, inherited by all FS types):
+- test_mount_as_user_denied: as-user=<another_user> is denied
+- test_mount_as_user_root_denied: as-user=root is denied
+- test_mount_as_user_self: as-user=<self> behaves like plain mount
+
+Fstab mount tests (in NonPOSIXTestCase, inherited by VFAT/EXFAT):
+- test_mount_fstab_{users,user,x-udisks-auth}_as_user_denied:
+ fstab entries that normally allow unprivileged mounting must still
+ require authorization when as-user is specified
+- test_mount_fstab_{users,user,x-udisks-auth}_as_root_denied:
+ same but with as-user=root
+- test_mount_fstab_defaults_as_user_from_root: root can mount
+ fstab 'defaults' device with as-user targeting a non-root user
+- test_mount_fstab_defaults_as_user_denied: unprivileged user
+ cannot mount fstab 'defaults' device with as-user
+
+Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
+(cherry picked from commit 5ec20c9d5719ead510d800bc3eb5a731e5712f39)
+(cherry picked from commit 36231768dde088c8b4d4796ff2d311d089d84052)
+
+CVE: CVE-2026-7867
+Upstream-Status: Backport [https://github.com/storaged-project/udisks/commit/36231768dde088c8b4d4796ff2d311d089d84052]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ src/tests/dbus-tests/test_80_filesystem.py | 278 +++++++++++++++++++++
+ 1 file changed, 278 insertions(+)
+
+diff --git a/src/tests/dbus-tests/test_80_filesystem.py b/src/tests/dbus-tests/test_80_filesystem.py
+index 1f375ac6..03336512 100644
+--- a/src/tests/dbus-tests/test_80_filesystem.py
++++ b/src/tests/dbus-tests/test_80_filesystem.py
+@@ -30,6 +30,8 @@ class UdisksFSTestCase(udiskstestcase.UdisksTestCase):
+ _can_query_size = False
+
+ username = 'udisks_test_user'
++ # a separate target user used for 'as-user' mount tests
++ target_username = 'udisks_test_target'
+
+ requested_plugins = BlockDev.plugin_specs_from_names(("fs",))
+
+@@ -1037,6 +1039,174 @@ class UdisksFSTestCase(udiskstestcase.UdisksTestCase):
+ pipe.send([True, ''])
+ pipe.close()
+
++ def _mount_with_as_user_fail(self, pipe, uid, gid, device, target_user):
++ """ Try to mount @device as user with given @uid and @gid using the
++ 'as-user' option set to @target_user. This is expected to fail
++ with a NotAuthorized error.
++ """
++ os.setresgid(gid, gid, gid)
++ os.setresuid(uid, uid, uid)
++
++ try:
++ safe_dbus.call_sync(self.iface_prefix,
++ self.path_prefix + '/block_devices/' + os.path.basename(device),
++ self.iface_prefix + '.Filesystem',
++ 'Mount',
++ GLib.Variant('(a{sv})', ({'as-user': GLib.Variant('s', target_user)},)))
++ except Exception as e:
++ msg = str(e)
++ if 'org.freedesktop.UDisks2.Error.NotAuthorized' in msg and \
++ 'Not authorized to perform operation' in msg:
++ pipe.send([True, ''])
++ pipe.close()
++ return
++ else:
++ pipe.send([False, 'Mount DBus call failed with unexpected exception: %s' % msg])
++ pipe.close()
++ return
++
++ pipe.send([False, 'Mount with as-user=%s unexpectedly succeeded for uid %d' % (target_user, uid)])
++ pipe.close()
++
++ def _test_mount_as_user_denied(self, target_user):
++ """ Test that an unprivileged user cannot use as-user to mount on
++ behalf of @target_user without polkit authorization.
++ """
++ self._check_can_create()
++
++ if not self._can_mount:
++ self.skipTest('Cannot mount %s filesystem' % self._fs_signature)
++
++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0]))
++ self.assertIsNotNone(disk)
++
++ disk.Format(self._fs_signature, self.no_options, dbus_interface=self.iface_prefix + '.Block')
++ self.addCleanup(self.wipe_fs, self.vdevs[0])
++ self.addCleanup(self.try_unmount, self.vdevs[0])
++
++ self.addCleanup(self._remove_user, self.username)
++ uid, gid = self._add_user(self.username)
++
++ if target_user != 'root':
++ self.addCleanup(self._remove_user, target_user)
++ self._add_user(target_user)
++
++ parent_conn, child_conn = Pipe()
++ proc = Process(target=self._mount_with_as_user_fail,
++ args=(child_conn, int(uid), int(gid), self.vdevs[0], target_user))
++ proc.start()
++ res = parent_conn.recv()
++ parent_conn.close()
++ proc.join()
++
++ if not res[0]:
++ self.fail(res[1])
++
++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE)
++ def test_mount_as_user_denied(self):
++ """ Test that an unprivileged user cannot use as-user to mount on
++ behalf of another user without authorization.
++ """
++ self._test_mount_as_user_denied(self.target_username)
++
++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE)
++ def test_mount_as_user_root_denied(self):
++ """ Test that an unprivileged user cannot use as-user=root to mount
++ without authorization.
++ """
++ self._test_mount_as_user_denied('root')
++
++ def _mount_as_user_result(self, pipe, uid, gid, device, options):
++ """ Try to mount @device as user with given @uid and @gid using
++ the given @options dict. Returns [True, error_string] on D-Bus
++ error or [True, ''] on success.
++ """
++ os.setresgid(gid, gid, gid)
++ os.setresuid(uid, uid, uid)
++
++ try:
++ safe_dbus.call_sync(self.iface_prefix,
++ self.path_prefix + '/block_devices/' + os.path.basename(device),
++ self.iface_prefix + '.Filesystem',
++ 'Mount',
++ GLib.Variant('(a{sv})', (options,)))
++ except Exception as e:
++ pipe.send([True, str(e)])
++ pipe.close()
++ return
++
++ pipe.send([True, ''])
++ pipe.close()
++
++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE)
++ def test_mount_as_user_self(self):
++ """ Test that as-user targeting the caller's own username behaves
++ identically to mounting without as-user (no extra mount-other-user
++ authorization required).
++ """
++ self._check_can_create()
++
++ if not self._can_mount:
++ self.skipTest('Cannot mount %s filesystem' % self._fs_signature)
++
++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0]))
++ self.assertIsNotNone(disk)
++
++ disk.Format(self._fs_signature, self.no_options, dbus_interface=self.iface_prefix + '.Block')
++ self.addCleanup(self.wipe_fs, self.vdevs[0])
++ self.addCleanup(self.try_unmount, self.vdevs[0])
++
++ self.addCleanup(self._remove_user, self.username)
++ uid, gid = self._add_user(self.username)
++
++ # first try a plain mount without as-user
++ parent_conn, child_conn = Pipe()
++ proc = Process(target=self._mount_as_user_result,
++ args=(child_conn, int(uid), int(gid), self.vdevs[0], {}))
++ proc.start()
++ res_plain = parent_conn.recv()
++ parent_conn.close()
++ proc.join()
++
++ self.assertTrue(res_plain[0])
++ plain_error = res_plain[1]
++
++ # unmount if the plain mount succeeded
++ if not plain_error:
++ self.try_unmount(self.vdevs[0])
++
++ # now try with as-user=<self>
++ parent_conn, child_conn = Pipe()
++ proc = Process(target=self._mount_as_user_result,
++ args=(child_conn, int(uid), int(gid), self.vdevs[0],
++ {'as-user': GLib.Variant('s', self.username)}))
++ proc.start()
++ res_as_user = parent_conn.recv()
++ parent_conn.close()
++ proc.join()
++
++ self.assertTrue(res_as_user[0])
++ as_user_error = res_as_user[1]
++
++ if not plain_error and not as_user_error:
++ return
++ if plain_error and as_user_error:
++ # extract the GDBus error name (e.g. 'org.freedesktop.UDisks2.Error.NotAuthorizedCanObtain')
++ dbus_err_re = re.compile(r'GDBus\.Error:([\w.]+):')
++ plain_match = dbus_err_re.search(plain_error)
++ as_user_match = dbus_err_re.search(as_user_error)
++ plain_err_name = plain_match.group(1) if plain_match else plain_error
++ as_user_err_name = as_user_match.group(1) if as_user_match else as_user_error
++ self.assertEqual(plain_err_name, as_user_err_name,
++ 'as-user=<self> produced a different error than plain mount: '
++ 'plain=%s, as-user=%s' % (plain_error, as_user_error))
++ return
++
++ if plain_error:
++ self.fail('Plain mount failed (%s) but as-user=<self> succeeded' % plain_error)
++ else:
++ self.fail('Plain mount succeeded but as-user=<self> failed: %s' % as_user_error)
++
+ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE)
+ def test_mount_as_user(self):
+ """ Test mounting a filesystem on behalf of a different user."""
+@@ -1550,6 +1720,108 @@ class NonPOSIXTestCase(UdisksFSTestCase):
+ self.fail(res[1])
+
+
++ def _test_mount_fstab_as_user_denied(self, fstab_options, target_user):
++ """ Test that an unprivileged user cannot use 'as-user' option to mount
++ a device listed in /etc/fstab with @fstab_options on behalf of
++ @target_user without polkit authorization.
++ """
++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0]))
++ self.assertIsNotNone(disk)
++
++ self.addCleanup(self._remove_user, self.username)
++ uid, gid = self._add_user(self.username)
++
++ if target_user != 'root':
++ self.addCleanup(self._remove_user, target_user)
++ self._add_user(target_user)
++
++ self.addCleanup(self.try_unmount, self.vdevs[0])
++ self._prepare_mount_test(disk, True, fstab_options)
++
++ parent_conn, child_conn = Pipe()
++ proc = Process(target=self._mount_with_as_user_fail,
++ args=(child_conn, int(uid), int(gid), self.vdevs[0], target_user))
++ proc.start()
++ res = parent_conn.recv()
++ parent_conn.close()
++ proc.join()
++
++ if not res[0]:
++ self.fail(res[1])
++
++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE)
++ def test_mount_fstab_as_user_denied(self):
++ """ Test that user cannot use as-user to mount fstab 'users' device
++ on behalf of another user without authorization.
++ """
++ self._test_mount_fstab_as_user_denied('users', self.target_username)
++
++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE)
++ def test_mount_fstab_user_as_user_denied(self):
++ """ Test that user cannot use as-user to mount fstab 'user' device
++ on behalf of another user without authorization.
++ """
++ self._test_mount_fstab_as_user_denied('user', self.target_username)
++
++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE)
++ def test_mount_fstab_x_udisks_auth_as_user_denied(self):
++ """ Test that user cannot use as-user to mount fstab 'x-udisks-auth'
++ device on behalf of another user without authorization.
++ """
++ self._test_mount_fstab_as_user_denied('x-udisks-auth', self.target_username)
++
++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE)
++ def test_mount_fstab_as_root_denied(self):
++ """ Test that user cannot use as-user=root to mount fstab 'users'
++ device without authorization.
++ """
++ self._test_mount_fstab_as_user_denied('users', 'root')
++
++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE)
++ def test_mount_fstab_user_as_root_denied(self):
++ """ Test that user cannot use as-user=root to mount fstab 'user'
++ device without authorization.
++ """
++ self._test_mount_fstab_as_user_denied('user', 'root')
++
++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE)
++ def test_mount_fstab_x_udisks_auth_as_root_denied(self):
++ """ Test that user cannot use as-user=root to mount fstab
++ 'x-udisks-auth' device without authorization.
++ """
++ self._test_mount_fstab_as_user_denied('x-udisks-auth', 'root')
++
++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE)
++ def test_mount_fstab_defaults_as_user_from_root(self):
++ """ Test that root can mount a device listed in /etc/fstab with
++ 'defaults' (no 'user', 'users' or 'x-udisks-auth' options)
++ using the 'as-user' option targeting a non-root user.
++ """
++ disk = self.get_object('/block_devices/' + os.path.basename(self.vdevs[0]))
++ self.assertIsNotNone(disk)
++
++ self.addCleanup(self._remove_user, self.target_username)
++ self._add_user(self.target_username)
++
++ self.addCleanup(self.try_unmount, self.vdevs[0])
++ self._prepare_mount_test(disk, True, 'defaults')
++
++ d = dbus.Dictionary(signature='sv')
++ d['as-user'] = self.target_username
++ mnt_path = disk.Mount(d, dbus_interface=self.iface_prefix + '.Filesystem')
++ self.assertIsNotNone(mnt_path)
++ self.assertTrue(os.path.ismount(mnt_path))
++
++ @udiskstestcase.tag_test(udiskstestcase.TestTags.UNSAFE)
++ def test_mount_fstab_defaults_as_user_denied(self):
++ """ Test that an unprivileged user cannot use 'as-user' option to
++ mount a device listed in /etc/fstab with 'defaults' (no 'user',
++ 'users' or 'x-udisks-auth') on behalf of another user without
++ polkit authorization.
++ """
++ self._test_mount_fstab_as_user_denied('defaults', self.target_username)
++
++
+ class VFATTestCase(NonPOSIXTestCase):
+ _fs_signature = 'vfat'
+ _can_mount = True
+@@ -1691,6 +1963,12 @@ class UDFTestCase(UdisksFSTestCase):
+ def test_mount_fstab_complex_label_bad(self):
+ super(UDFTestCase, self).test_mount_fstab_complex_label_bad()
+
++ def test_mount_as_user_denied(self):
++ self.skipTest('Skipping as-user authorization test for UDF')
++
++ def test_mount_as_user_root_denied(self):
++ self.skipTest('Skipping as-user authorization test for UDF')
++
+
+ class FailsystemTestCase(UdisksFSTestCase):
+ # test that not supported operations fail 'nicely'
diff --git a/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb b/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb
index d4c5385ae0..776b5c5043 100644
--- a/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb
+++ b/meta-oe/recipes-support/udisks/udisks2_2.10.2.bb
@@ -18,8 +18,13 @@ DEPENDS += "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)}"
RDEPENDS:${PN} = "acl"
SRC_URI = " \
- git://github.com/storaged-project/udisks.git;branch=2.10.x-branch;protocol=https \
- file://0001-Makefile.am-Dont-include-buildpath.patch \
+ git://github.com/storaged-project/udisks.git;branch=2.10.x-branch;protocol=https \
+ file://0001-Makefile.am-Dont-include-buildpath.patch \
+ file://CVE-2026-7867-1.patch \
+ file://CVE-2026-7867-2.patch \
+ file://CVE-2026-7867-3.patch \
+ file://CVE-2026-7867-4.patch \
+ file://CVE-2026-7867-5.patch \
"
SRCREV = "bc623acf9e7488dc105e4b00069d57e303e2616b"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 03/60] tmate: patch CVE-2026-4751
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
2026-10-28 4:22 ` [blacksail][PATCH 01/60] zeroconf: ignore CVEs ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 02/60] udisks2: patch CVE-2026-7867 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 04/60] tinyproxy: patch CVE-2026-54388 ankur.tyagi85
` (57 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-4751
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../tmate/files/CVE-2026-4751.patch | 75 +++++++++++++++++++
meta-oe/recipes-extended/tmate/tmate_2.4.0.bb | 1 +
2 files changed, 76 insertions(+)
create mode 100644 meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch
diff --git a/meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch b/meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch
new file mode 100644
index 0000000000..faf3d2a3ae
--- /dev/null
+++ b/meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch
@@ -0,0 +1,75 @@
+From 27f07d414949259f17aebc02a61f103629d547f1 Mon Sep 17 00:00:00 2001
+From: npt-1707 <npthanh132@gmail.com>
+Date: Tue, 10 Mar 2026 00:19:33 +0800
+Subject: [PATCH] Fix CVE-2018-19387
+
+(cherry picked from commit 3e12f558c7b71b7135403cdd2df77d38538a695c)
+
+CVE: CVE-2026-4751
+Upstream-Status: Backport [https://github.com/tmate-io/tmate/commit/3e12f558c7b71b7135403cdd2df77d38538a695c]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ format.c | 2 ++
+ input.c | 2 ++
+ server-client.c | 6 ++++++
+ window.c | 2 ++
+ 4 files changed, 12 insertions(+)
+
+diff --git a/format.c b/format.c
+index f771c85f..3bbb8cf1 100644
+--- a/format.c
++++ b/format.c
+@@ -468,6 +468,8 @@ format_cb_pane_tabs(struct format_tree *ft, struct format_entry *fe)
+ return;
+
+ buffer = evbuffer_new();
++ if (buffer == NULL)
++ fatalx("out of memory");
+ for (i = 0; i < wp->base.grid->sx; i++) {
+ if (!bit_test(wp->base.tabs, i))
+ continue;
+diff --git a/input.c b/input.c
+index 18c8eb9a..8a66d89e 100644
+--- a/input.c
++++ b/input.c
+@@ -766,6 +766,8 @@ input_init(struct window_pane *wp)
+ ictx->input_buf = xmalloc(INPUT_BUF_START);
+
+ ictx->since_ground = evbuffer_new();
++ if (ictx->since_ground == NULL)
++ fatalx("out of memory");
+
+ input_reset(wp, 0);
+ }
+diff --git a/server-client.c b/server-client.c
+index 21cccc85..e8614d40 100644
+--- a/server-client.c
++++ b/server-client.c
+@@ -121,8 +121,14 @@ server_client_create(int fd)
+ c->cmdq->client_exit = 1;
+
+ c->stdin_data = evbuffer_new();
++ if (c->stdin_data == NULL)
++ fatalx("out of memory");
+ c->stdout_data = evbuffer_new();
++ if (c->stdout_data == NULL)
++ fatalx("out of memory");
+ c->stderr_data = evbuffer_new();
++ if (c->stderr_data == NULL)
++ fatalx("out of memory");
+
+ c->tty.fd = -1;
+ c->title = NULL;
+diff --git a/window.c b/window.c
+index 45ec7790..9d95bb77 100644
+--- a/window.c
++++ b/window.c
+@@ -945,6 +945,8 @@ window_pane_spawn(struct window_pane *wp, int argc, char **argv,
+
+ wp->event = bufferevent_new(wp->fd, window_pane_read_callback, NULL,
+ window_pane_error_callback, wp);
++ if (wp->event == NULL)
++ fatalx("out of memory");
+
+ bufferevent_setwatermark(wp->event, EV_READ, 0, READ_SIZE);
+ bufferevent_enable(wp->event, EV_READ|EV_WRITE);
diff --git a/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb b/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb
index 5fb28b0085..9027826ea6 100644
--- a/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb
+++ b/meta-oe/recipes-extended/tmate/tmate_2.4.0.bb
@@ -8,6 +8,7 @@ DEPENDS:append = " libevent libssh msgpack-c ncurses"
SRC_URI = "\
git://github.com/tmate-io/tmate.git;protocol=https;branch=master \
file://0001-fix-finding-msgpack.patch \
+ file://CVE-2026-4751.patch \
"
SRCREV = "5e00bfa5e137e76c81888727712ced2b3fd99f5b"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 04/60] tinyproxy: patch CVE-2026-54388
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (2 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 03/60] tmate: patch CVE-2026-4751 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 05/60] flatpak: upgrade 1.18.0 -> 1.18.4 ankur.tyagi85
` (56 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-54388
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../tinyproxy/tinyproxy/CVE-2026-54388.patch | 32 +++++++++++++++++++
.../tinyproxy/tinyproxy_1.11.3.bb | 1 +
2 files changed, 33 insertions(+)
create mode 100644 meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch
diff --git a/meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch b/meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch
new file mode 100644
index 0000000000..4dc7f88310
--- /dev/null
+++ b/meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch
@@ -0,0 +1,32 @@
+From 2639058707dd9d199196b167823ba1865a60ea08 Mon Sep 17 00:00:00 2001
+From: rofl0r <rofl0r@users.noreply.github.com>
+Date: Thu, 7 May 2026 16:39:48 +0000
+Subject: [PATCH] reqs: prevent multiple content-lengths getting emitted
+
+addressing point 2 of #609
+
+(cherry picked from commit 364cdb67e0ea00a8e4a7037e2693e0711e816adb)
+
+CVE: CVE-2026-54388
+Upstream-Status: Backport [https://github.com/tinyproxy/tinyproxy/commit/364cdb67e0ea00a8e4a7037e2693e0711e816adb]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ src/reqs.c | 5 +++++
+ 1 file changed, 5 insertions(+)
+
+diff --git a/src/reqs.c b/src/reqs.c
+index d5037cf..117d755 100644
+--- a/src/reqs.c
++++ b/src/reqs.c
+@@ -681,6 +681,11 @@ add_header_to_connection (pseudomap *hashofheaders, char *header, size_t len)
+ /* Calculate the new length of just the data */
+ len -= sep - header - 1;
+
++ /* prevent multiple content-length headers from being inserted */
++ if (!strcasecmp(header, "content-length") &&
++ pseudomap_find (hashofheaders, "content-length"))
++ return 0;
++
+ return pseudomap_append (hashofheaders, header, sep);
+ }
+
diff --git a/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb b/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb
index 25df44301b..46d3a4d7c6 100644
--- a/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb
+++ b/meta-networking/recipes-support/tinyproxy/tinyproxy_1.11.3.bb
@@ -12,6 +12,7 @@ SRC_URI = "https://github.com/${BPN}/${BPN}/releases/download/${PV}/${BP}.tar.gz
file://CVE-2026-31842.patch \
file://CVE-2026-54387.patch \
file://CVE-2026-55202.patch \
+ file://CVE-2026-54388.patch \
"
SRC_URI[sha256sum] = "9bcf46db1a2375ff3e3d27a41982f1efec4706cce8899ff9f33323a8218f7592"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 05/60] flatpak: upgrade 1.18.0 -> 1.18.4
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (3 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 04/60] tinyproxy: patch CVE-2026-54388 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 06/60] xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9 ankur.tyagi85
` (55 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://github.com/flatpak/flatpak/blob/1.18.4/NEWS
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../flatpak/{flatpak_1.18.0.bb => flatpak_1.18.4.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta-oe/recipes-extended/flatpak/{flatpak_1.18.0.bb => flatpak_1.18.4.bb} (94%)
diff --git a/meta-oe/recipes-extended/flatpak/flatpak_1.18.0.bb b/meta-oe/recipes-extended/flatpak/flatpak_1.18.4.bb
similarity index 94%
rename from meta-oe/recipes-extended/flatpak/flatpak_1.18.0.bb
rename to meta-oe/recipes-extended/flatpak/flatpak_1.18.4.bb
index 879455f63c..74bfb89e62 100644
--- a/meta-oe/recipes-extended/flatpak/flatpak_1.18.0.bb
+++ b/meta-oe/recipes-extended/flatpak/flatpak_1.18.4.bb
@@ -4,11 +4,11 @@ LICENSE = "LGPL-2.1-only"
LIC_FILES_CHKSUM = "file://COPYING;md5=4fbd65380cdd255951079008b364516c"
SRC_URI = " \
- git://github.com/flatpak/flatpak;protocol=https;branch=main;tag=${PV} \
+ git://github.com/flatpak/flatpak;protocol=https;branch=flatpak-1.18.x;tag=${PV} \
file://0001-flatpak-pc-add-pc_sysrootdir.patch \
"
-SRCREV = "5de2b58bdafde88515d9d6b9189bd1cfd3b88c46"
+SRCREV = "a02d0ba48abe9aacc377de15699e5d8c024b5669"
inherit meson pkgconfig gettext systemd gtk-doc gobject-introspection python3native mime features_check useradd
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 06/60] xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (4 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 05/60] flatpak: upgrade 1.18.0 -> 1.18.4 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 07/60] swagger-ui: upgrade 5.33.1 -> 5.33.2 ankur.tyagi85
` (54 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://github.com/flatpak/xdg-dbus-proxy/blob/0.1.9/NEWS
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../{xdg-dbus-proxy_0.1.7.bb => xdg-dbus-proxy_0.1.9.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-oe/recipes-support/xdg-dbus-proxy/{xdg-dbus-proxy_0.1.7.bb => xdg-dbus-proxy_0.1.9.bb} (93%)
diff --git a/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb b/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.9.bb
similarity index 93%
rename from meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb
rename to meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.9.bb
index eb21f701d6..1a65874155 100644
--- a/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.7.bb
+++ b/meta-oe/recipes-support/xdg-dbus-proxy/xdg-dbus-proxy_0.1.9.bb
@@ -16,7 +16,7 @@ SRC_URI = " \
file://run-ptest \
"
-SRCREV = "6a170fa77e3cbecb48f9dd2478fe5c0a119eb467"
+SRCREV = "72b40c8f6d9d585cfbdb249690724f740d207087"
CVE_STATUS[CVE-2026-34080] = "fixed-version: fixed in 0.1.7"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 07/60] swagger-ui: upgrade 5.33.1 -> 5.33.2
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (5 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 06/60] xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 08/60] freerdp3: upgrade 3.32.1 -> 3.32.2 ankur.tyagi85
` (53 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://github.com/swagger-api/swagger-ui/releases/tag/v5.33.2
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../swagger-ui/{swagger-ui_5.33.1.bb => swagger-ui_5.33.2.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.33.1.bb => swagger-ui_5.33.2.bb} (94%)
diff --git a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.1.bb b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb
similarity index 94%
rename from meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.1.bb
rename to meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb
index db2bb498a8..aeee9e4da6 100644
--- a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.1.bb
+++ b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb
@@ -12,7 +12,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
SRC_URI = "git://github.com/swagger-api/swagger-ui;branch=main;protocol=https;tag=v${PV}"
-SRCREV = "cac3d136b5e37bfbe3288c8591f6f4fcf9870599"
+SRCREV = "e89a91f13cdee432d97ca9d3d1ac1969ff797036"
CVE_STATUS[CVE-2016-1000229] = "fixed-version: fixed since 2.2.1"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 08/60] freerdp3: upgrade 3.32.1 -> 3.32.2
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (6 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 07/60] swagger-ui: upgrade 5.33.1 -> 5.33.2 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 09/60] spitools: upgrade 1.1.0 -> 1.1.1 ankur.tyagi85
` (52 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Dropped patch that is part of the upstream version.
Changelog:
https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.2
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
...1-winpr-tools-link-only-winpr-public.patch | 76 -------------------
...{freerdp3_3.32.1.bb => freerdp3_3.32.2.bb} | 3 +-
2 files changed, 1 insertion(+), 78 deletions(-)
delete mode 100644 meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch
rename meta-oe/recipes-support/freerdp/{freerdp3_3.32.1.bb => freerdp3_3.32.2.bb} (98%)
diff --git a/meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch b/meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch
deleted file mode 100644
index 2dea69c3c4..0000000000
--- a/meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch
+++ /dev/null
@@ -1,76 +0,0 @@
-From 6682e9ca667271b8ba148a301b4a2f9ac78be2b9 Mon Sep 17 00:00:00 2001
-From: Armin Novak <armin.novak@thincast.com>
-Date: Mon, 28 Sep 2026 11:57:22 +0200
-Subject: [PATCH] [winpr,tools] link only winpr public
-
-Upstream-Status: Backport [https://github.com/FreeRDP/FreeRDP/commit/6682e9ca667271b8ba148a301b4a2f9ac78be2b9]
-Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
----
- winpr/tools/CMakeLists.txt | 18 +++++++++++++-----
- winpr/tools/makecert/CMakeLists.txt | 6 +++---
- 2 files changed, 16 insertions(+), 8 deletions(-)
-
-diff --git a/winpr/tools/CMakeLists.txt b/winpr/tools/CMakeLists.txt
-index 5719c1c65..225b70744 100644
---- a/winpr/tools/CMakeLists.txt
-+++ b/winpr/tools/CMakeLists.txt
-@@ -28,7 +28,8 @@ set(WINPR_TOOLS_API_VERSION "${WINPR_TOOLS_VERSION_MAJOR}")
-
- set(WINPR_TOOLS_DIR ${CMAKE_CURRENT_SOURCE_DIR})
- set(WINPR_TOOLS_SRCS "")
--set(WINPR_TOOLS_LIBS "")
-+set(WINPR_TOOLS_PUBLIC_LIBS "")
-+set(WINPR_TOOLS_PRIVATE_LIBS "")
- set(WINPR_TOOLS_INCLUDES "")
- set(WINPR_TOOLS_DEFINITIONS "")
-
-@@ -64,11 +65,18 @@ macro(winpr_tools_include_directory_add)
- endif()
- endmacro()
-
--macro(winpr_tools_library_add)
-+macro(winpr_tools_library_public_add)
- foreach(_lib ${ARGN})
-- list(APPEND WINPR_TOOLS_LIBS "${_lib}")
-+ list(APPEND WINPR_TOOLS_PUBLIC_LIBS "${_lib}")
- endforeach()
-- set(WINPR_TOOLS_LIBS ${WINPR_TOOLS_LIBS} PARENT_SCOPE)
-+ set(WINPR_TOOLS_PUBLIC_LIBS ${WINPR_TOOLS_PUBLIC_LIBS} PARENT_SCOPE)
-+endmacro()
-+
-+macro(winpr_tools_library_private_add)
-+ foreach(_lib ${ARGN})
-+ list(APPEND WINPR_TOOLS_PRIVATE_LIBS "${_lib}")
-+ endforeach()
-+ set(WINPR_TOOLS_PRIVATE_LIBS ${WINPR_TOOLS_PRIVATE_LIBS} PARENT_SCOPE)
- endmacro()
-
- macro(winpr_tools_definition_add)
-@@ -89,7 +97,7 @@ addtargetwithresourcefile(${MODULE_NAME} FALSE "${WINPR_VERSION}" WINPR_TOOLS_SR
-
- add_compile_definitions(${WINPR_DEFINITIONS})
- target_include_directories(${MODULE_NAME} INTERFACE $<INSTALL_INTERFACE:include/winpr${WINPR_VERSION_MAJOR}>)
--target_link_libraries(${MODULE_NAME} PUBLIC ${WINPR_TOOLS_LIBS})
-+target_link_libraries(${MODULE_NAME} PRIVATE ${WINPR_TOOLS_PRIVATE_LIBS} PUBLIC ${WINPR_TOOLS_PUBLIC_LIBS})
-
- installwithrpath(
- TARGETS
-diff --git a/winpr/tools/makecert/CMakeLists.txt b/winpr/tools/makecert/CMakeLists.txt
-index 37b831125..0af1fcc08 100644
---- a/winpr/tools/makecert/CMakeLists.txt
-+++ b/winpr/tools/makecert/CMakeLists.txt
-@@ -31,11 +31,11 @@ endif()
- winpr_tools_module_add(${${MODULE_PREFIX}_SRCS})
-
- if(OPENSSL_FOUND)
-- list(APPEND ${MODULE_PREFIX}_LIBS ${OPENSSL_LIBRARIES})
-+ winpr_tools_library_private_add(${OPENSSL_LIBRARIES})
- endif()
-
- if(MBEDTLS_FOUND)
-- list(APPEND ${MODULE_PREFIX}_LIBS ${MBEDTLS_LIBRARIES})
-+ winpr_tools_library_private_add(${MBEDTLS_LIBRARIES})
- endif()
-
--winpr_tools_library_add(${${MODULE_PREFIX}_LIBS} winpr)
-+winpr_tools_library_public_add(winpr)
diff --git a/meta-oe/recipes-support/freerdp/freerdp3_3.32.1.bb b/meta-oe/recipes-support/freerdp/freerdp3_3.32.2.bb
similarity index 98%
rename from meta-oe/recipes-support/freerdp/freerdp3_3.32.1.bb
rename to meta-oe/recipes-support/freerdp/freerdp3_3.32.2.bb
index f43c8cc7d2..2a985522c0 100644
--- a/meta-oe/recipes-support/freerdp/freerdp3_3.32.1.bb
+++ b/meta-oe/recipes-support/freerdp/freerdp3_3.32.2.bb
@@ -8,9 +8,8 @@ RDEPENDS:${PN}-ptest += "cmake coreutils"
inherit pkgconfig cmake ptest
-SRCREV = "bf217a504e54cc719880c228e82353382cd7d4fa"
+SRCREV = "97eff6ddfbbfaa8e42a126d362686bd001ff8bdc"
SRC_URI = "git://github.com/FreeRDP/FreeRDP.git;nobranch=1;protocol=https;tag=${PV} \
- file://0001-winpr-tools-link-only-winpr-public.patch \
file://run-ptest"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 09/60] spitools: upgrade 1.1.0 -> 1.1.1
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (7 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 08/60] freerdp3: upgrade 3.32.1 -> 3.32.2 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 10/60] libspdm: upgrade 3.8.2 -> 3.8.3 ankur.tyagi85
` (51 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../spitools/{spitools_1.1.0.bb => spitools_1.1.1.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-oe/recipes-support/spitools/{spitools_1.1.0.bb => spitools_1.1.1.bb} (87%)
diff --git a/meta-oe/recipes-support/spitools/spitools_1.1.0.bb b/meta-oe/recipes-support/spitools/spitools_1.1.1.bb
similarity index 87%
rename from meta-oe/recipes-support/spitools/spitools_1.1.0.bb
rename to meta-oe/recipes-support/spitools/spitools_1.1.1.bb
index 69f527a6eb..e2ab0a5d11 100644
--- a/meta-oe/recipes-support/spitools/spitools_1.1.0.bb
+++ b/meta-oe/recipes-support/spitools/spitools_1.1.1.bb
@@ -3,7 +3,7 @@ HOMEPAGE = "https://github.com/cpb-/spi-tools"
LICENSE = "GPL-2.0-only"
LIC_FILES_CHKSUM = "file://LICENSE;md5=8c16666ae6c159876a0ba63099614381"
-SRCREV = "a19dffe44fee857124a993598caae0c85894f914"
+SRCREV = "74ba65b19e0cf9d1eabd52d17d842200ef901d61"
SRC_URI = "git://github.com/cpb-/spi-tools.git;protocol=https;branch=master;tag=${PV}"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 10/60] libspdm: upgrade 3.8.2 -> 3.8.3
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (8 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 09/60] spitools: upgrade 1.1.0 -> 1.1.1 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 11/60] libmikmod: upgrade 3.3.14 -> 3.3.15 ankur.tyagi85
` (50 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://github.com/DMTF/libspdm/releases/tag/3.8.3
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../libspdm/{libspdm_3.8.2.bb => libspdm_3.8.3.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-oe/recipes-support/libspdm/{libspdm_3.8.2.bb => libspdm_3.8.3.bb} (98%)
diff --git a/meta-oe/recipes-support/libspdm/libspdm_3.8.2.bb b/meta-oe/recipes-support/libspdm/libspdm_3.8.3.bb
similarity index 98%
rename from meta-oe/recipes-support/libspdm/libspdm_3.8.2.bb
rename to meta-oe/recipes-support/libspdm/libspdm_3.8.3.bb
index f77057d9fd..3ab77a5cfe 100644
--- a/meta-oe/recipes-support/libspdm/libspdm_3.8.2.bb
+++ b/meta-oe/recipes-support/libspdm/libspdm_3.8.3.bb
@@ -10,7 +10,7 @@ LIC_FILES_CHKSUM = "file://LICENSE.md;md5=8f9b59a81a88da8e812af43728b72dd7"
DEPENDS = "openssl"
SRC_URI = "git://github.com/DMTF/libspdm.git;branch=release-3.8;protocol=https;tag=${PV}"
-SRCREV = "f55cf6d48ec69b4ac60a63903e9c6a2cb0fd155d"
+SRCREV = "98253fee253c9e0b4313e64b373af3c7614c90e5"
inherit cmake
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 11/60] libmikmod: upgrade 3.3.14 -> 3.3.15
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (9 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 10/60] libspdm: upgrade 3.8.2 -> 3.8.3 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 12/60] libxmp: upgrade 4.7.3 -> 4.7.4 ankur.tyagi85
` (49 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://sourceforge.net/p/mikmod/mikmod/ci/libmikmod-3.3.15/tree/libmikmod/NEWS
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../mikmod/{libmikmod_3.3.14.bb => libmikmod_3.3.15.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-oe/recipes-multimedia/mikmod/{libmikmod_3.3.14.bb => libmikmod_3.3.15.bb} (90%)
diff --git a/meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.14.bb b/meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.15.bb
similarity index 90%
rename from meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.14.bb
rename to meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.15.bb
index 2468943349..bfd15cabe1 100644
--- a/meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.14.bb
+++ b/meta-oe/recipes-multimedia/mikmod/libmikmod_3.3.15.bb
@@ -8,7 +8,7 @@ DEPENDS = "alsa-lib texinfo"
SRC_URI = "\
${SOURCEFORGE_MIRROR}/project/mikmod/${BPN}/${PV}/${BPN}-${PV}.tar.gz \
"
-SRC_URI[sha256sum] = "dffd82b8f254c3489c32098da831f33eac7136843d1e7ccb802f1254ad5b4219"
+SRC_URI[sha256sum] = "dc27b338154b8f88dc9e6317196d42c6abc13bf63c4e055257a18d4e38e1afa2"
UPSTREAM_CHECK_URI = "https://sourceforge.net/projects/mikmod/files/libmikmod/"
UPSTREAM_CHECK_REGEX = "/(?P<pver>\d+(\.\d+)+)/"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 12/60] libxmp: upgrade 4.7.3 -> 4.7.4
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (10 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 11/60] libmikmod: upgrade 3.3.14 -> 3.3.15 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 13/60] python3-pyjwt: upgrade 2.13.0 -> 2.14.0 ankur.tyagi85
` (48 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://github.com/libxmp/libxmp/releases/tag/libxmp-4.7.4
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../libxmp/{libxmp_4.7.3.bb => libxmp_4.7.4.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-oe/recipes-multimedia/libxmp/{libxmp_4.7.3.bb => libxmp_4.7.4.bb} (85%)
diff --git a/meta-oe/recipes-multimedia/libxmp/libxmp_4.7.3.bb b/meta-oe/recipes-multimedia/libxmp/libxmp_4.7.4.bb
similarity index 85%
rename from meta-oe/recipes-multimedia/libxmp/libxmp_4.7.3.bb
rename to meta-oe/recipes-multimedia/libxmp/libxmp_4.7.4.bb
index 1600686229..a287124801 100644
--- a/meta-oe/recipes-multimedia/libxmp/libxmp_4.7.3.bb
+++ b/meta-oe/recipes-multimedia/libxmp/libxmp_4.7.4.bb
@@ -6,5 +6,5 @@ LIC_FILES_CHKSUM = "file://README;beginline=59;md5=b25470e2863502c9ac9886f09c21a
inherit cmake pkgconfig
SRC_URI = "git://github.com/libxmp/libxmp.git;protocol=https;branch=master;tag=libxmp-${PV}"
-SRCREV = "1e0812137e4f9e15cc026c0c75af82d71d3cb5ad"
+SRCREV = "5d4f6aa2c7dcdf8e9cd8129fe579d45b36a302da"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 13/60] python3-pyjwt: upgrade 2.13.0 -> 2.14.0
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (11 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 12/60] libxmp: upgrade 4.7.3 -> 4.7.4 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 14/60] python3-cbor2: upgrade 6.1.4 -> 6.1.5 ankur.tyagi85
` (47 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://github.com/jpadilla/pyjwt/blob/2.14.0/CHANGELOG.rst
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../python/{python3-pyjwt_2.13.0.bb => python3-pyjwt_2.14.0.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-python/recipes-devtools/python/{python3-pyjwt_2.13.0.bb => python3-pyjwt_2.14.0.bb} (84%)
diff --git a/meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb b/meta-python/recipes-devtools/python/python3-pyjwt_2.14.0.bb
similarity index 84%
rename from meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb
rename to meta-python/recipes-devtools/python/python3-pyjwt_2.14.0.bb
index 1b018f605b..a2cb84587b 100644
--- a/meta-python/recipes-devtools/python/python3-pyjwt_2.13.0.bb
+++ b/meta-python/recipes-devtools/python/python3-pyjwt_2.14.0.bb
@@ -5,7 +5,7 @@ HOMEPAGE = "https://github.com/jpadilla/pyjwt"
LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://LICENSE;md5=e4b56d2c9973d8cf54655555be06e551"
-SRC_URI[sha256sum] = "41571c89ca91598c79e8ef18a2d07367d4810fbbd6f637794879baf1b7703423"
+SRC_URI[sha256sum] = "77283c83fb56ecf566a886c757a714bc83668e38156de2cce8263302f42e0b86"
CVE_PRODUCT = "pyjwt"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 14/60] python3-cbor2: upgrade 6.1.4 -> 6.1.5
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (12 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 13/60] python3-pyjwt: upgrade 2.13.0 -> 2.14.0 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 15/60] samba: ignore CVE-2026-2340 ankur.tyagi85
` (46 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://github.com/agronholm/cbor2/releases/tag/6.1.5
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../python/{python3-cbor2_6.1.4.bb => python3-cbor2_6.1.5.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-python/recipes-devtools/python/{python3-cbor2_6.1.4.bb => python3-cbor2_6.1.5.bb} (87%)
diff --git a/meta-python/recipes-devtools/python/python3-cbor2_6.1.4.bb b/meta-python/recipes-devtools/python/python3-cbor2_6.1.5.bb
similarity index 87%
rename from meta-python/recipes-devtools/python/python3-cbor2_6.1.4.bb
rename to meta-python/recipes-devtools/python/python3-cbor2_6.1.5.bb
index 6a894848d6..94d3f30dbb 100644
--- a/meta-python/recipes-devtools/python/python3-cbor2_6.1.4.bb
+++ b/meta-python/recipes-devtools/python/python3-cbor2_6.1.5.bb
@@ -3,7 +3,7 @@ LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a79e64179819c7ce293372c059f1dbd8"
DEPENDS += "python3-setuptools-scm-native"
-SRC_URI[sha256sum] = "01ecc79a28f33d17331943ce508fc1e21f4b06553c73f874f4c77120d72b2ef9"
+SRC_URI[sha256sum] = "6eb06160c42315ac0c4ded461c7d84d92fa18c69d13d17fc1dfc1fae96580c95"
inherit pypi python_setuptools3_rust cargo-update-recipe-crates ptest-python-pytest
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 15/60] samba: ignore CVE-2026-2340
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (13 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 14/60] python3-cbor2: upgrade 6.1.4 -> 6.1.5 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 16/60] rapidjson: mark CVE-2024-38517 fixed ankur.tyagi85
` (45 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Also confirmed in the release notes[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-2340
[1]https://www.samba.org/samba/history/samba-4.23.8.html
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
meta-networking/recipes-connectivity/samba/samba_4.23.11.bb | 1 +
1 file changed, 1 insertion(+)
diff --git a/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb b/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb
index e498b30bcb..c0d8fe4a00 100644
--- a/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb
+++ b/meta-networking/recipes-connectivity/samba/samba_4.23.11.bb
@@ -46,6 +46,7 @@ UPSTREAM_CHECK_REGEX = "samba\-(?P<pver>\d+\.\d+(\.\d+)+).tar.gz"
inherit systemd waf-samba cpan-base perlnative update-rc.d perl-version pkgconfig
CVE_STATUS[CVE-2011-2411] = "not-applicable-platform: vulnerable only on HP NonStop Servers"
+CVE_STATUS[CVE-2026-2340] = "fixed-version: fixed since v4.23.8"
# remove default added RDEPENDS on perl
RDEPENDS:${PN}:remove = "perl"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 16/60] rapidjson: mark CVE-2024-38517 fixed
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (14 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 15/60] samba: ignore CVE-2026-2340 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 17/60] psqlodbc: patch CVE-2026-109448 ankur.tyagi85
` (44 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Commit mentioned in the NVD is part of the current version:
$ git log HEAD --oneline | grep 8269bc2b
8269bc2b Prevent int underflow when parsing exponents
Details:
https://nvd.nist.gov/vuln/detail/cve-2024-38517
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb | 2 ++
1 file changed, 2 insertions(+)
diff --git a/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb b/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb
index fa20b4d448..f565f0a175 100644
--- a/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb
+++ b/meta-oe/recipes-devtools/rapidjson/rapidjson_git.bb
@@ -21,3 +21,5 @@ EXTRA_OECMAKE += "-DLIB_INSTALL_DIR=${libdir}"
ALLOW_EMPTY:${PN} = "1"
BBCLASSEXTEND = "native nativesdk"
+
+CVE_STATUS[CVE-2024-38517] = "fixed-version: fixed in the current v1.1.0"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 17/60] psqlodbc: patch CVE-2026-109448
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (15 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 16/60] rapidjson: mark CVE-2024-38517 fixed ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 18/60] proftpd: mark CVE-2026-53994 fixed ankur.tyagi85
` (43 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Backport the commit identified by Debian[1]
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-109448
[1]https://security-tracker.debian.org/tracker/CVE-2026-109448
PTEST pass:
root@qemuarm64:~# ptest-runner psqlodbc
START: ptest-runner
2026-10-17T09:22
BEGIN: /usr/lib/psqlodbc/ptest
...
DURATION: 43
END: /usr/lib/psqlodbc/ptest
2026-10-17T09:23
STOP: ptest-runner
TOTAL: 1 FAIL: 0
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../psqlodbc/files/CVE-2026-109448.patch | 243 ++++++++++++++++++
.../psqlodbc/psqlodbc_18.00.0002.bb | 1 +
2 files changed, 244 insertions(+)
create mode 100644 meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch
diff --git a/meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch b/meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch
new file mode 100644
index 0000000000..12f6cdd1d8
--- /dev/null
+++ b/meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch
@@ -0,0 +1,243 @@
+From 5c9443fb0c8c0e263e1f8d0298987e91c4f5ccea Mon Sep 17 00:00:00 2001
+From: Dave Cramer <davecramer@gmail.com>
+Date: Mon, 12 Oct 2026 11:47:08 -0400
+Subject: [PATCH] Merge commit from fork
+
+The APD, IPD and put-data binding counts are SQLSMALLINT. Binding
+parameter 32768 wrapped the count to -32768, so execution failed with
+07002 even though every parameter was bound; binding parameter 32769
+then extended the arrays with a memset starting at index -32768,
+writing zeros up to 1.25 MiB before the start of the APD array (and
+likewise for the IPD and put-data arrays), which corrupts the heap.
+
+SQLNumParams and SQL_DESC_COUNT are SQLSMALLINT too, so 32767 is the
+largest parameter count ODBC can describe. PGAPI_BindParameter now
+returns 07009 for parameter numbers outside 1..32767, which also covers
+parameter number 0 for applications that call the driver without a
+driver manager.
+
+New param-count-limit test binds 32767, 32768 and 32769 parameters.
+
+Assisted-By: Claude
+(cherry picked from commit 86e4418e9553aa0891315db7531f8cd31eb1575e)
+
+CVE: CVE-2026-109448
+Upstream-Status: Backport [https://github.com/postgresql-interfaces/psqlodbc/commit/86e4418e9553aa0891315db7531f8cd31eb1575e]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ bind.c | 12 +++
+ test/expected/param-count-limit.out | 12 +++
+ test/src/param-count-limit-test.c | 142 ++++++++++++++++++++++++++++
+ test/tests | 1 +
+ 4 files changed, 167 insertions(+)
+ create mode 100644 test/expected/param-count-limit.out
+ create mode 100644 test/src/param-count-limit-test.c
+
+diff --git a/bind.c b/bind.c
+index 3b566ec..b3e5ca3 100644
+--- a/bind.c
++++ b/bind.c
+@@ -16,6 +16,7 @@
+ /* #include <stdlib.h> */
+ #include <string.h>
+ #include <ctype.h>
++#include <limits.h>
+ #include "bind.h"
+ #include "misc.h"
+
+@@ -57,6 +58,17 @@ PGAPI_BindParameter(HSTMT hstmt,
+ }
+ SC_clear_error(stmt);
+
++ /*
++ * The APD, IPD and put-data counts are SQLSMALLINT, like SQLNumParams
++ * and SQL_DESC_COUNT, so a larger parameter number would wrap the count
++ * negative and the next binding would write before the bindings array.
++ */
++ if (ipar < 1 || ipar > SHRT_MAX)
++ {
++ SC_set_error(stmt, STMT_BAD_PARAMETER_NUMBER_ERROR, "Invalid parameter number for PGAPI_BindParameter.", func);
++ return SQL_ERROR;
++ }
++
+ apdopts = SC_get_APDF(stmt);
+ if (apdopts->allocated < ipar)
+ extend_parameter_bindings(apdopts, ipar);
+diff --git a/test/expected/param-count-limit.out b/test/expected/param-count-limit.out
+new file mode 100644
+index 0000000..623bcbf
+--- /dev/null
++++ b/test/expected/param-count-limit.out
+@@ -0,0 +1,12 @@
++connected
++APD SQL_DESC_COUNT=-1: error SQLSTATE=07009
++APD bind 1 after SQL_DESC_COUNT=-1: ok
++IPD SQL_DESC_COUNT=-1: error SQLSTATE=07009
++IPD bind 1 after SQL_DESC_COUNT=-1: ok
++bind 0: error SQLSTATE=07009
++32767 params, bind 32767: ok
++32767 params, execute: ok
++32767 params, result 1
++32768 params, bind 32768: error SQLSTATE=07009
++32769 params, bind 32768: error SQLSTATE=07009
++disconnecting
+diff --git a/test/src/param-count-limit-test.c b/test/src/param-count-limit-test.c
+new file mode 100644
+index 0000000..e9554cd
+--- /dev/null
++++ b/test/src/param-count-limit-test.c
+@@ -0,0 +1,142 @@
++/*
++ * Test the limits on parameter numbers and descriptor counts. The driver
++ * keeps parameter binding counts in SQLSMALLINT, so SQLBindParameter with a
++ * parameter number above 32767, or SQL_DESC_COUNT set negative, used to
++ * wrap the count negative and make the next binding write zeros before the
++ * start of the bindings array.
++ */
++#include <stdio.h>
++#include <stdlib.h>
++#include <string.h>
++
++#include "common.h"
++
++#define MAX_PARAMS 32767
++
++static void
++print_state(const char *what, SQLRETURN rc, SQLSMALLINT htype, SQLHANDLE h)
++{
++ SQLCHAR state[6] = "";
++ SQLINTEGER native;
++ SQLCHAR msg[256];
++ SQLSMALLINT len;
++
++ printf("%s: ", what);
++ if (SQL_SUCCEEDED(rc))
++ {
++ printf("ok\n");
++ return;
++ }
++ SQLGetDiagRec(htype, h, 1, state, &native, msg, sizeof(msg), &len);
++ printf("error SQLSTATE=%s\n", (char *) state);
++}
++
++/* SELECT 1 WHERE 1 IN (?, ?, ..., ?) with nparams markers, all bound to 1 */
++static void
++run_with_params(int nparams)
++{
++ SQLRETURN rc;
++ HSTMT hstmt = SQL_NULL_HSTMT;
++ SQLINTEGER one = 1;
++ SQLINTEGER result = 0;
++ char *sql, *p;
++ char what[64];
++ int i;
++
++ rc = SQLAllocHandle(SQL_HANDLE_STMT, conn, &hstmt);
++ CHECK_CONN_RESULT(rc, "SQLAllocHandle failed", conn);
++
++ sql = malloc(32 + 2 * nparams);
++ p = sql + sprintf(sql, "SELECT 1 WHERE 1 IN (");
++ for (i = 0; i < nparams; i++)
++ {
++ if (i > 0)
++ *p++ = ',';
++ *p++ = '?';
++ }
++ strcpy(p, ")");
++
++ for (i = 1; i <= nparams; i++)
++ {
++ rc = SQLBindParameter(hstmt, (SQLUSMALLINT) i, SQL_PARAM_INPUT,
++ SQL_C_SLONG, SQL_INTEGER, 0, 0, &one, 0, NULL);
++ if (!SQL_SUCCEEDED(rc))
++ break;
++ }
++ snprintf(what, sizeof(what), "%d params, bind %d", nparams, i <= nparams ? i : nparams);
++ print_state(what, rc, SQL_HANDLE_STMT, hstmt);
++
++ if (SQL_SUCCEEDED(rc))
++ {
++ rc = SQLExecDirect(hstmt, (SQLCHAR *) sql, SQL_NTS);
++ snprintf(what, sizeof(what), "%d params, execute", nparams);
++ print_state(what, rc, SQL_HANDLE_STMT, hstmt);
++ }
++ if (SQL_SUCCEEDED(rc))
++ {
++ rc = SQLBindCol(hstmt, 1, SQL_C_SLONG, &result, 0, NULL);
++ CHECK_STMT_RESULT(rc, "SQLBindCol failed", hstmt);
++ rc = SQLFetch(hstmt);
++ CHECK_STMT_RESULT(rc, "SQLFetch failed", hstmt);
++ printf("%d params, result %d\n", nparams, (int) result);
++ }
++
++ free(sql);
++ SQLFreeHandle(SQL_HANDLE_STMT, hstmt);
++}
++
++/* Set SQL_DESC_COUNT of the statement's APD or IPD to -1, then bind */
++static void
++negative_desc_count(SQLINTEGER desc_attr, const char *desc_name)
++{
++ SQLRETURN rc;
++ HSTMT hstmt = SQL_NULL_HSTMT;
++ SQLHDESC hdesc;
++ SQLINTEGER one = 1;
++ char what[64];
++
++ rc = SQLAllocHandle(SQL_HANDLE_STMT, conn, &hstmt);
++ CHECK_CONN_RESULT(rc, "SQLAllocHandle failed", conn);
++
++ rc = SQLGetStmtAttr(hstmt, desc_attr, &hdesc, 0, NULL);
++ CHECK_STMT_RESULT(rc, "SQLGetStmtAttr failed", hstmt);
++
++ rc = SQLSetDescField(hdesc, 0, SQL_DESC_COUNT, (SQLPOINTER) (SQLLEN) -1, 0);
++ snprintf(what, sizeof(what), "%s SQL_DESC_COUNT=-1", desc_name);
++ print_state(what, rc, SQL_HANDLE_DESC, hdesc);
++
++ rc = SQLBindParameter(hstmt, 1, SQL_PARAM_INPUT, SQL_C_SLONG,
++ SQL_INTEGER, 0, 0, &one, 0, NULL);
++ snprintf(what, sizeof(what), "%s bind 1 after SQL_DESC_COUNT=-1", desc_name);
++ print_state(what, rc, SQL_HANDLE_STMT, hstmt);
++
++ SQLFreeHandle(SQL_HANDLE_STMT, hstmt);
++}
++
++int
++main(int argc, char **argv)
++{
++ SQLRETURN rc;
++ HSTMT hstmt = SQL_NULL_HSTMT;
++ SQLINTEGER one = 1;
++
++ test_connect();
++
++ negative_desc_count(SQL_ATTR_APP_PARAM_DESC, "APD");
++ negative_desc_count(SQL_ATTR_IMP_PARAM_DESC, "IPD");
++
++ rc = SQLAllocHandle(SQL_HANDLE_STMT, conn, &hstmt);
++ CHECK_CONN_RESULT(rc, "SQLAllocHandle failed", conn);
++ rc = SQLBindParameter(hstmt, 0, SQL_PARAM_INPUT, SQL_C_SLONG,
++ SQL_INTEGER, 0, 0, &one, 0, NULL);
++ print_state("bind 0", rc, SQL_HANDLE_STMT, hstmt);
++ SQLFreeHandle(SQL_HANDLE_STMT, hstmt);
++
++ run_with_params(MAX_PARAMS);
++ run_with_params(MAX_PARAMS + 1);
++ run_with_params(MAX_PARAMS + 2);
++
++ test_disconnect();
++
++ return 0;
++}
+diff --git a/test/tests b/test/tests
+index 5074bca..c8af1ab 100644
+--- a/test/tests
++++ b/test/tests
+@@ -63,6 +63,7 @@ TESTBINS = exe/connect-test \
+ exe/descriptors-free-test \
+ exe/primarykeys-include-test \
+ exe/interval-overflow-test \
++ exe/param-count-limit-test \
+ exe/conn-settings-test \
+ exe/percent-decode-test \
+ exe/dbms-version-test \
diff --git a/meta-oe/recipes-dbs/psqlodbc/psqlodbc_18.00.0002.bb b/meta-oe/recipes-dbs/psqlodbc/psqlodbc_18.00.0002.bb
index ae1d603e1d..9756bcfad2 100644
--- a/meta-oe/recipes-dbs/psqlodbc/psqlodbc_18.00.0002.bb
+++ b/meta-oe/recipes-dbs/psqlodbc/psqlodbc_18.00.0002.bb
@@ -23,6 +23,7 @@ SRC_URI = "git://github.com/postgresql-interfaces/psqlodbc.git;protocol=https;br
file://psqlodbc-remove-some-checks-for-cross-compiling.patch \
file://psqlodbc-donot-use-the-hardcode-libdir.patch \
file://psqlodbc-fix-for-ptest-support.patch \
+ file://CVE-2026-109448.patch \
file://run-ptest \
"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 18/60] proftpd: mark CVE-2026-53994 fixed
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (16 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 17/60] psqlodbc: patch CVE-2026-109448 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 19/60] postfix: ignore CVE-2023-32182 ankur.tyagi85
` (42 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Debian[1] identified the issue[2] associated with this CVE.
Changelog[3] confirms the resolution.
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-53994
[]https://security-tracker.debian.org/tracker/CVE-2026-53994
[]https://github.com/proftpd/proftpd/issues/2115
[]https://github.com/proftpd/proftpd/blob/v1.3.9b/NEWS#L35
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb | 1 +
1 file changed, 1 insertion(+)
diff --git a/meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb b/meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb
index 81a7094359..5c194ebb23 100644
--- a/meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb
+++ b/meta-networking/recipes-daemons/proftpd/proftpd_1.3.9d.bb
@@ -26,6 +26,7 @@ CVE_VERSION_SUFFIX = "alphabetical"
CVE_STATUS[CVE-2001-0027] = "fixed-version: version 1.2.0rc3 removed affected module"
CVE_STATUS[CVE-2021-47865] = "upstream-wontfix: it is not a vulnerability but inproper configuration"
+CVE_STATUS[CVE-2026-53994] = "fixed-version: fixed since v1.3.9b"
EXTRA_OECONF += "--enable-largefile INSTALL=install"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 19/60] postfix: ignore CVE-2023-32182
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (17 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 18/60] proftpd: mark CVE-2026-53994 fixed ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 20/60] poppler: patch CVE-2026-102621 ankur.tyagi85
` (41 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2023-32182
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb | 2 ++
1 file changed, 2 insertions(+)
diff --git a/meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb b/meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb
index 99a77dd6c3..fe0dd95994 100644
--- a/meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb
+++ b/meta-networking/recipes-daemons/postfix/postfix_3.11.7.bb
@@ -249,3 +249,5 @@ FILES:${PN}-bin += "${localstatedir} ${bindir}/* ${sbindir}/* \
FILES:${PN}-cfg = "${sysconfdir}"
FILES:${PN}-dbg += "${libexecdir}/postfix/.debug"
ALLOW_EMPTY:${PN} = "1"
+
+CVE_STATUS[CVE-2023-32182] = "not-applicable-platform: this vulnerability is Suse specific"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 20/60] poppler: patch CVE-2026-102621
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (18 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 19/60] postfix: ignore CVE-2023-32182 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 21/60] poppler: patch CVE-2026-102620 ankur.tyagi85
` (40 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-102621
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../poppler/poppler/CVE-2026-102621.patch | 40 +++++++++++++++++++
.../poppler/poppler_26.08.0.bb | 1 +
2 files changed, 41 insertions(+)
create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch
diff --git a/meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch
new file mode 100644
index 0000000000..823c3a33db
--- /dev/null
+++ b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch
@@ -0,0 +1,40 @@
+From eaeeb2fe58aad490bc82aa33d75217dead0dd0de Mon Sep 17 00:00:00 2001
+From: Albert Astals Cid <aacid@kde.org>
+Date: Sat, 8 Aug 2026 15:02:27 +0200
+Subject: [PATCH] Fix integer overflow in SplashClip::clipToPath
+
+Issue #1763
+
+(cherry picked from commit 323c91036d99926a8b90dc14329f7b40aece22f8)
+
+CVE: CVE-2026-102621
+Upstream-Status: Backport [https://gitlab.freedesktop.org/poppler/poppler/-/commit/323c91036d99926a8b90dc14329f7b40aece22f8]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ splash/SplashClip.cc | 6 +++++-
+ 1 file changed, 5 insertions(+), 1 deletion(-)
+
+diff --git a/splash/SplashClip.cc b/splash/SplashClip.cc
+index 78249652c..b096beebd 100644
+--- a/splash/SplashClip.cc
++++ b/splash/SplashClip.cc
+@@ -23,6 +23,8 @@
+ #include <config.h>
+
+ #include <algorithm>
++#include "goo/GooCheckedOps.h"
++#include "goo/GooLikely.h"
+ #include "SplashErrorCodes.h"
+ #include "SplashMath.h"
+ #include "SplashPath.h"
+@@ -211,7 +213,9 @@ SplashError SplashClip::clipToPath(const SplashPath &path, const std::array<doub
+ } else {
+ if (antialias) {
+ xPath.aaScale();
+- yMinAA = yMinI * splashAASize;
++ if (unlikely(checkedMultiply(yMinI, splashAASize, &yMinAA))) {
++ return SplashError::Generic;
++ }
+ yMaxAA = (yMaxI + 1) * splashAASize - 1;
+ } else {
+ yMinAA = yMinI;
diff --git a/meta-oe/recipes-support/poppler/poppler_26.08.0.bb b/meta-oe/recipes-support/poppler/poppler_26.08.0.bb
index 8b0783d001..f24ca34366 100644
--- a/meta-oe/recipes-support/poppler/poppler_26.08.0.bb
+++ b/meta-oe/recipes-support/poppler/poppler_26.08.0.bb
@@ -8,6 +8,7 @@ SRC_URI = "http://poppler.freedesktop.org/${BP}.tar.xz \
file://basename-include.patch \
file://0001-cmake-Do-not-use-isystem.patch \
file://0001-workaround-build-racing.patch \
+ file://CVE-2026-102621.patch \
"
SRC_URI[sha256sum] = "dc906e68cea698109706ac6aa3d2c9d4512fcfcac42d90b8afcda486d1b9abd0"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 21/60] poppler: patch CVE-2026-102620
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (19 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 20/60] poppler: patch CVE-2026-102621 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 22/60] opensc: patch CVE-2026-103531 ankur.tyagi85
` (39 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Also backport commit[1] to allow cherry-pick of the commit fixing the CVE.
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-102620
[1]https://gitlab.freedesktop.org/poppler/poppler/-/commit/786b06dac87dbe28e85ec7ea3d340810f151c25b
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../poppler/poppler/CVE-2026-102620-1.patch | 145 ++++++++++++++++++
.../poppler/poppler/CVE-2026-102620-2.patch | 34 ++++
.../poppler/poppler_26.08.0.bb | 2 +
3 files changed, 181 insertions(+)
create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch
create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch
diff --git a/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch
new file mode 100644
index 0000000000..e85866eddf
--- /dev/null
+++ b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch
@@ -0,0 +1,145 @@
+From b8ce8bb5df02fd3a70f4b34f3d64c88df7089409 Mon Sep 17 00:00:00 2001
+From: Albert Astals Cid <aacid@kde.org>
+Date: Sat, 8 Aug 2026 15:30:32 +0200
+Subject: [PATCH] FoFiTrueType::cvtSfnts: Move variables closer to where they
+ are used
+
+(cherry picked from commit 786b06dac87dbe28e85ec7ea3d340810f151c25b)
+
+CVE: CVE-2026-102620
+Upstream-Status: Backport [https://gitlab.freedesktop.org/poppler/poppler/-/commit/786b06dac87dbe28e85ec7ea3d340810f151c25b]
+
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ fofi/FoFiTrueType.cc | 42 +++++++++++++++++++-----------------------
+ 1 file changed, 19 insertions(+), 23 deletions(-)
+
+diff --git a/fofi/FoFiTrueType.cc b/fofi/FoFiTrueType.cc
+index 133fbc45e..e15cfc576 100644
+--- a/fofi/FoFiTrueType.cc
++++ b/fofi/FoFiTrueType.cc
+@@ -1058,9 +1058,6 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const
+ TrueTypeTable newTables[nT42Tables];
+ unsigned char tableDir[12 + nT42Tables * 16];
+ bool ok;
+- unsigned int checksum;
+- int nNewTables;
+- int glyfTableLen, length, glyfPos, j, k;
+ std::array<unsigned char, 36> vheaTab = {
+ 0, 1, 0, 0, // table version number
+ 0, 0, // ascent
+@@ -1081,8 +1078,6 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const
+ 0, 1 // number of advance heights in vmtx table
+ };
+ std::vector<unsigned char> vmtxTab;
+- bool needVhea, needVmtx;
+- int advance;
+
+ *maxUsedGlyph = -1;
+
+@@ -1116,7 +1111,7 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const
+ i = seekTable("loca");
+ pos = tables[i].offset;
+ i = seekTable("glyf");
+- glyfTableLen = tables[i].len;
++ const int glyfTableLen = tables[i].len;
+ ok = true;
+ for (i = 0; i <= nGlyphs; ++i) {
+ locaTable[i].idx = i;
+@@ -1169,16 +1164,16 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const
+ }
+
+ // count the number of tables
+- nNewTables = 0;
++ int nNewTables = 0;
+ for (i = 0; i < nT42Tables; ++i) {
+ if (t42Tables[i].required || seekTable(t42Tables[i].tag) >= 0) {
+ ++nNewTables;
+ }
+ }
+- advance = 0; // make gcc happy
++ int advance = 0; // make gcc happy
+ if (needVerticalMetrics) {
+- needVhea = seekTable("vhea") < 0;
+- needVmtx = seekTable("vmtx") < 0;
++ const bool needVhea = seekTable("vhea") < 0;
++ const bool needVmtx = seekTable("vmtx") < 0;
+ if (needVhea || needVmtx) {
+ i = seekTable("head");
+ advance = getU16BE(tables[i].offset + 18, &ok); // units per em
+@@ -1194,10 +1189,10 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const
+ // construct the new table headers, including table checksums
+ // (pad each table out to a multiple of 4 bytes)
+ pos = 12 + nNewTables * 16;
+- k = 0;
++ int k = 0;
+ for (i = 0; i < nT42Tables; ++i) {
+- length = -1;
+- checksum = 0; // make gcc happy
++ int length = -1;
++ unsigned int checksum = 0; // make gcc happy
+ if (i == t42HeadTable) {
+ length = 54;
+ checksum = computeTableChecksum(headData);
+@@ -1207,8 +1202,8 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const
+ } else if (i == t42GlyfTable) {
+ length = 0;
+ checksum = 0;
+- glyfPos = tables[seekTable("glyf")].offset;
+- for (j = 0; j < nGlyphs; ++j) {
++ const int glyfPos = tables[seekTable("glyf")].offset;
++ for (int j = 0; j < nGlyphs; ++j) {
+ length += locaTable[j].len;
+ if (length & 3) {
+ length += 4 - (length & 3);
+@@ -1218,7 +1213,8 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const
+ }
+ }
+ } else {
+- if ((j = seekTable(t42Tables[i].tag)) >= 0) {
++ const int j = seekTable(t42Tables[i].tag);
++ if (j >= 0) {
+ length = tables[j].len;
+ if (checkRegion(tables[j].offset, length)) {
+ checksum = computeTableChecksum(std::span(file.data() + tables[j].offset, length));
+@@ -1298,7 +1294,7 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const
+ }
+
+ // compute the font checksum and store it in the head table
+- checksum = computeTableChecksum(std::span(tableDir, 12 + nNewTables * 16));
++ unsigned int checksum = computeTableChecksum(std::span(tableDir, 12 + nNewTables * 16));
+ for (i = 0; i < nNewTables; ++i) {
+ checksum += newTables[i].checksum;
+ }
+@@ -1325,11 +1321,10 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const
+ if (i == t42HeadTable) {
+ dumpString(headData, outputFunc, outputStream);
+ } else if (i == t42LocaTable) {
+- length = (nGlyphs + 1) * (locaFmt ? 4 : 2);
+ dumpString(locaData, outputFunc, outputStream);
+ } else if (i == t42GlyfTable) {
+- glyfPos = tables[seekTable("glyf")].offset;
+- for (j = 0; j < nGlyphs; ++j) {
++ const int glyfPos = tables[seekTable("glyf")].offset;
++ for (int j = 0; j < nGlyphs; ++j) {
+ if (locaTable[j].len > 0 && checkRegion(glyfPos + locaTable[j].origOffset, locaTable[j].len)) {
+ dumpString(std::span(file.data() + glyfPos + locaTable[j].origOffset, locaTable[j].len), outputFunc, outputStream);
+ }
+@@ -1338,13 +1333,14 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const
+ // length == 0 means the table is missing and the error was
+ // already reported during the construction of the table
+ // headers
+- if ((length = newTables[i].len) > 0) {
+- if ((j = seekTable(t42Tables[i].tag)) >= 0 && checkRegion(tables[j].offset, tables[j].len)) {
++ const int length = newTables[i].len;
++ if (length > 0) {
++ const int j = seekTable(t42Tables[i].tag);
++ if (j >= 0 && checkRegion(tables[j].offset, tables[j].len)) {
+ dumpString(std::span(file.data() + tables[j].offset, tables[j].len), outputFunc, outputStream);
+ } else if (needVerticalMetrics && i == t42VheaTable) {
+ if (unlikely(static_cast<size_t>(length) > sizeof(vheaTab))) {
+ error(errSyntaxWarning, -1, "length bigger than vheaTab size");
+- length = sizeof(vheaTab);
+ }
+ dumpString(vheaTab, outputFunc, outputStream);
+ } else if (needVerticalMetrics && i == t42VmtxTable) {
diff --git a/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch
new file mode 100644
index 0000000000..e41e65ffd9
--- /dev/null
+++ b/meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch
@@ -0,0 +1,34 @@
+From ac82c990768a4cb3dd4fd15edb92af97b4ac6589 Mon Sep 17 00:00:00 2001
+From: Albert Astals Cid <aacid@kde.org>
+Date: Sat, 8 Aug 2026 15:47:43 +0200
+Subject: [PATCH] Fix integer overflow in FoFiTrueType::cvtSfnts
+
+Issue #1762
+
+(cherry picked from commit 245d3c6823377755f2c1d5fdddd010279c6ed94d)
+
+CVE: CVE-2026-102620
+Upstream-Status: Backport [https://gitlab.freedesktop.org/poppler/poppler/-/commit/245d3c6823377755f2c1d5fdddd010279c6ed94d]
+
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ fofi/FoFiTrueType.cc | 6 +++++-
+ 1 file changed, 5 insertions(+), 1 deletion(-)
+
+diff --git a/fofi/FoFiTrueType.cc b/fofi/FoFiTrueType.cc
+index e15cfc576..9e280fe89 100644
+--- a/fofi/FoFiTrueType.cc
++++ b/fofi/FoFiTrueType.cc
+@@ -1204,7 +1204,11 @@ void FoFiTrueType::cvtSfnts(FoFiOutputFunc outputFunc, void *outputStream, const
+ checksum = 0;
+ const int glyfPos = tables[seekTable("glyf")].offset;
+ for (int j = 0; j < nGlyphs; ++j) {
+- length += locaTable[j].len;
++ if (unlikely(checkedAdd(length, locaTable[j].len, &length))) {
++ error(errSyntaxError, -1, "Integer overflow in glyph table length calculation");
++ ok = false;
++ break;
++ }
+ if (length & 3) {
+ length += 4 - (length & 3);
+ }
diff --git a/meta-oe/recipes-support/poppler/poppler_26.08.0.bb b/meta-oe/recipes-support/poppler/poppler_26.08.0.bb
index f24ca34366..6cfcf3cf0f 100644
--- a/meta-oe/recipes-support/poppler/poppler_26.08.0.bb
+++ b/meta-oe/recipes-support/poppler/poppler_26.08.0.bb
@@ -9,6 +9,8 @@ SRC_URI = "http://poppler.freedesktop.org/${BP}.tar.xz \
file://0001-cmake-Do-not-use-isystem.patch \
file://0001-workaround-build-racing.patch \
file://CVE-2026-102621.patch \
+ file://CVE-2026-102620-1.patch \
+ file://CVE-2026-102620-2.patch \
"
SRC_URI[sha256sum] = "dc906e68cea698109706ac6aa3d2c9d4512fcfcac42d90b8afcda486d1b9abd0"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 22/60] opensc: patch CVE-2026-103531
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (20 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 21/60] poppler: patch CVE-2026-102620 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 23/60] pjproject: mark CVE-2026-26967 fixed ankur.tyagi85
` (38 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-103531
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../opensc/opensc/CVE-2026-103531.patch | 54 +++++++++++++++++++
.../recipes-support/opensc/opensc_0.27.1.bb | 1 +
2 files changed, 55 insertions(+)
create mode 100644 meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch
diff --git a/meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch b/meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch
new file mode 100644
index 0000000000..22776e525b
--- /dev/null
+++ b/meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch
@@ -0,0 +1,54 @@
+From 4b0f46d922866d9453e3631ff5e0a24900fae8dd Mon Sep 17 00:00:00 2001
+From: wanglanlan <wanglanlan@users.noreply.github.com>
+Date: Wed, 2 Sep 2026 08:36:47 +0000
+Subject: [PATCH] setcos: Fix buffer overflow in setcos_construct_fci_44
+
+The FCI construction copied type_attr, sec_attr and prop_attr of the
+file into a fixed 64-byte stack buffer without checking the length.
+Malicious or corrupted attribute lengths (e.g. prop_attr_len > 64,
+reachable through fuzz_pkcs15init and attacker-controlled card
+responses) caused a stack buffer overflow (write).
+
+Return SC_ERROR_INVALID_DATA if any attribute exceeds the buffer size.
+
+Found with the fuzz_pkcs15init fuzzer.
+
+Co-Authored-By: Claude <noreply@anthropic.com>
+(cherry picked from commit ad730304052937c32b4eb489a06835ac6123632c)
+
+CVE: CVE-2026-103531
+Upstream-Status: Backport [https://github.com/OpenSC/OpenSC/commit/ad730304052937c32b4eb489a06835ac6123632c]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ src/libopensc/card-setcos.c | 6 ++++++
+ 1 file changed, 6 insertions(+)
+
+diff --git a/src/libopensc/card-setcos.c b/src/libopensc/card-setcos.c
+index 0ebe7c34f..8c7baa3e4 100644
+--- a/src/libopensc/card-setcos.c
++++ b/src/libopensc/card-setcos.c
+@@ -218,6 +218,8 @@ static int setcos_construct_fci_44(sc_card_t *card, const sc_file_t *file, u8 *o
+
+ /* Type */
+ if (file->type_attr_len) {
++ if (file->type_attr_len > sizeof(buf))
++ LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_DATA);
+ memcpy(buf, file->type_attr, file->type_attr_len);
+ sc_asn1_put_tag(0x82, buf, file->type_attr_len, p, *outlen - (p - out), &p);
+ } else {
+@@ -271,11 +273,15 @@ static int setcos_construct_fci_44(sc_card_t *card, const sc_file_t *file, u8 *o
+ }
+
+ /* Security Attributes */
++ if (file->sec_attr_len > sizeof(buf))
++ LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_DATA);
+ memcpy(buf, file->sec_attr, file->sec_attr_len);
+ sc_asn1_put_tag(0x86, buf, file->sec_attr_len, p, *outlen - (p - out), &p);
+
+ /* Life cycle status */
+ if (file->prop_attr_len) {
++ if (file->prop_attr_len > sizeof(buf))
++ LOG_FUNC_RETURN(card->ctx, SC_ERROR_INVALID_DATA);
+ memcpy(buf, file->prop_attr, file->prop_attr_len);
+ sc_asn1_put_tag(0x8A, buf, file->prop_attr_len, p, *outlen - (p - out), &p);
+ }
diff --git a/meta-oe/recipes-support/opensc/opensc_0.27.1.bb b/meta-oe/recipes-support/opensc/opensc_0.27.1.bb
index a1930744ea..bcd94dfb90 100644
--- a/meta-oe/recipes-support/opensc/opensc_0.27.1.bb
+++ b/meta-oe/recipes-support/opensc/opensc_0.27.1.bb
@@ -14,6 +14,7 @@ DEPENDS = "openssl"
SRCREV = "19868984dc4dc697af6a86d65ab32a1f19a43ea4"
SRC_URI = "git://github.com/OpenSC/OpenSC;branch=master;protocol=https \
file://0001-Changes-for-OpenSSL-4.0.0.patch \
+ file://CVE-2026-103531.patch \
"
CVE_STATUS[CVE-2024-8443] = "fixed-version: this is fixed since 0.26.0"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 23/60] pjproject: mark CVE-2026-26967 fixed
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (21 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 22/60] opensc: patch CVE-2026-103531 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 24/60] pjproject: patch CVE-2026-57160 ankur.tyagi85
` (37 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-26967
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb | 2 ++
1 file changed, 2 insertions(+)
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
index 8aa7775205..59684ac7c7 100644
--- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
@@ -118,3 +118,5 @@ RDEPENDS:python3-pjsua2 = "python3-core"
# and ${PN}-staticdev (the .a files) by bitbake's own default FILES
# patterns - ${PN} itself ships nothing.
ALLOW_EMPTY:${PN} = "1"
+
+CVE_STATUS[CVE-2026-26967] = "fixed-version: fixed in v2.17"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 24/60] pjproject: patch CVE-2026-57160
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (22 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 23/60] pjproject: mark CVE-2026-26967 fixed ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 25/60] pjproject: patch CVE-2026-57161 ankur.tyagi85
` (36 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-57160
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../pjproject/pjproject/CVE-2026-57160.patch | 42 +++++++++++++++++++
.../pjproject/pjproject_2.17.bb | 1 +
2 files changed, 43 insertions(+)
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch
new file mode 100644
index 0000000000..a25ed5a28e
--- /dev/null
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch
@@ -0,0 +1,42 @@
+From b14ebbccf5c228ca298ad11ecae2cedde792edae Mon Sep 17 00:00:00 2001
+From: Nanang Izzuddin <nanang@teluu.com>
+Date: Wed, 17 Jun 2026 15:43:46 +0700
+Subject: [PATCH] Merge commit from fork
+
+When printing a generic array header (e.g. Allow, Require, Supported,
+Unsupported), the ": " delimiter following the header name was written
+with two unchecked stores. copy_advance() only guarantees that the
+header name itself fits, leaving as little as one byte before the end
+of the buffer. The colon then consumed the last byte and the trailing
+space was written one byte past the buffer end.
+
+Use copy_advance_char_check() for both delimiter bytes, matching the
+boundary-checked pattern already used by every other header printer in
+this file.
+
+Co-Authored-By Claude Code
+
+(cherry picked from commit d6a0e7f76611c3a6f530ee051e3e7a622bb1748c)
+
+CVE: CVE-2026-57160
+Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/d6a0e7f76611c3a6f530ee051e3e7a622bb1748c]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ pjsip/src/pjsip/sip_msg.c | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/pjsip/src/pjsip/sip_msg.c b/pjsip/src/pjsip/sip_msg.c
+index 06c8cce86..cdc99ff9e 100644
+--- a/pjsip/src/pjsip/sip_msg.c
++++ b/pjsip/src/pjsip/sip_msg.c
+@@ -964,8 +964,8 @@ static int pjsip_generic_array_hdr_print( pjsip_generic_array_hdr *hdr,
+ &hdr->sname : &hdr->name;
+
+ copy_advance(p, (*hname));
+- *p++ = ':';
+- *p++ = ' ';
++ copy_advance_char_check(p, ':');
++ copy_advance_char_check(p, ' ');
+
+ if (hdr->count > 0) {
+ unsigned i;
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
index 59684ac7c7..254a2952a2 100644
--- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
@@ -14,6 +14,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263"
SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag=${PV} \
file://0001-ssl_sock_ossl-fix-OpenSSL-4.0-compatibility.patch \
+ file://CVE-2026-57160.patch \
"
SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 00/60] Blacksail pull request
@ 2026-10-28 4:23 ankur.tyagi85
2026-10-28 4:22 ` [blacksail][PATCH 01/60] zeroconf: ignore CVEs ankur.tyagi85
` (60 more replies)
0 siblings, 61 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel
Cc: Ankur Tyagi, Peter Marko, Khem Raj, Jason Schonberg, James Lee
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Please merge these changes in blacksail. Tested locally and on autobuilder.
https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1904
The following changes since commit a9d69bc066bf9498397db27902c287dd666fdfd4:
lvgl-demo-fb: fix SRCREV (2026-10-14 09:26:03 +1300)
are available in the Git repository at:
https://git.openembedded.org/meta-openembedded-contrib ankurt/blacksail
https://git.openembedded.org/meta-openembedded-contrib/log/?h=ankurt/blacksail
for you to fetch changes up to bb956bf8ff7a32f31deaa83e96880d10ab564d14:
redis: upgrade 8.10.2 -> 8.10.3 (2026-10-28 08:22:29 +1300)
----------------------------------------------------------------
Ankur Tyagi (51):
zeroconf: ignore CVEs
udisks2: patch CVE-2026-7867
tmate: patch CVE-2026-4751
tinyproxy: patch CVE-2026-54388
flatpak: upgrade 1.18.0 -> 1.18.4
xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9
swagger-ui: upgrade 5.33.1 -> 5.33.2
freerdp3: upgrade 3.32.1 -> 3.32.2
spitools: upgrade 1.1.0 -> 1.1.1
libspdm: upgrade 3.8.2 -> 3.8.3
libmikmod: upgrade 3.3.14 -> 3.3.15
libxmp: upgrade 4.7.3 -> 4.7.4
python3-pyjwt: upgrade 2.13.0 -> 2.14.0
python3-cbor2: upgrade 6.1.4 -> 6.1.5
samba: ignore CVE-2026-2340
rapidjson: mark CVE-2024-38517 fixed
psqlodbc: patch CVE-2026-109448
proftpd: mark CVE-2026-53994 fixed
postfix: ignore CVE-2023-32182
poppler: patch CVE-2026-102621
poppler: patch CVE-2026-102620
opensc: patch CVE-2026-103531
pjproject: mark CVE-2026-26967 fixed
pjproject: patch CVE-2026-57160
pjproject: patch CVE-2026-57161
pjproject: patch CVE-2026-57162
pjproject: patch CVE-2026-57163
pjproject: patch CVE-2026-57164
pjproject: patch CVE-2026-57165
pjproject: patch CVE-2026-57166
pjproject: patch CVE-2026-77396
pjproject: patch CVE-2026-84975
nmap: patch CVE-2026-58058
nmap: patch CVE-2026-72712
netdata: mark CVE-2026-83602 fixed
mtr: patch CVE-2026-14461
ncp: ignore CVE-2025-14577 and CVE-2026-35087
libvncserver: patch CVE-2026-44988
libvncserver: patch CVE-2026-32854
libvncserver: patch CVE-2026-32853
libvncserver: patch CVE-2026-50538
swagger-ui: upgrade 5.33.2 -> 5.33.3
libmspack: patch CVE-2026-110602
unbound: upgrade 1.26.1 -> 1.26.2
ntpsec: upgrade 1.2.5 -> 1.2.6
apache2: upgrade 2.4.68 -> 2.4.69
7zip: upgrade 26.03 -> 26.04
7zip: upgrade 26.04 -> 26.05
python3-brotli: upgrade 1.2.0 -> 1.2.1
python3-oauthlib: patch CVE-2026-49265
redis: upgrade 8.10.2 -> 8.10.3
James Lee (1):
mctp: upgrade 2.6 -> 2.6.1
Jason Schonberg (3):
brotli: upgrade 1.2.0 -> 1.2.1
php: upgrade 8.5.11 -> 8.5.12
c-ares: backport security fixes from 1.34.9
Peter Marko (5):
nginx: upgrade 1.30.5 -> 1.30.6
nginx: set CVE_STATUS for CVE-2026-95101 and CVE-2026-97629
nss: remove compromised eMudhra certificates
grpc: update gRPC repo roots
python3-grpcio: update gRPC repo roots
.../pjproject/pjproject/CVE-2026-57160.patch | 42 +
.../pjproject/pjproject/CVE-2026-57161.patch | 49 +
.../pjproject/pjproject/CVE-2026-57162.patch | 43 +
.../pjproject/pjproject/CVE-2026-57163.patch | 52 +
.../pjproject/pjproject/CVE-2026-57164.patch | 66 +
.../pjproject/pjproject/CVE-2026-57165.patch | 85 +
.../pjproject/pjproject/CVE-2026-57166.patch | 228 +
.../pjproject/pjproject/CVE-2026-77396.patch | 74 +
.../pjproject/pjproject/CVE-2026-84975.patch | 87 +
.../pjproject/pjproject_2.17.bb | 11 +
.../samba/samba_4.23.11.bb | 1 +
.../recipes-daemons/postfix/postfix_3.11.7.bb | 2 +
.../recipes-daemons/proftpd/proftpd_1.3.9d.bb | 1 +
.../zeroconf/zeroconf_0.9.bb | 6 +
meta-networking/recipes-support/mctp/mctp.inc | 4 +-
.../mctp/{mctp_2.6.bb => mctp_2.6.1.bb} | 0
.../mctp/{mctpd_2.6.bb => mctpd_2.6.1.bb} | 0
.../mtr/mtr/CVE-2026-14461.patch | 32 +
.../recipes-support/mtr/mtr_0.96.bb | 4 +-
.../recipes-support/ncp/ncp_1.2.4.bb | 3 +
.../{ntpsec_1.2.5.bb => ntpsec_1.2.6.bb} | 2 +-
.../tinyproxy/tinyproxy/CVE-2026-54388.patch | 32 +
.../tinyproxy/tinyproxy_1.11.3.bb | 1 +
.../{unbound_1.26.1.bb => unbound_1.26.2.bb} | 2 +-
.../psqlodbc/files/CVE-2026-109448.patch | 243 +
.../psqlodbc/psqlodbc_18.00.0002.bb | 1 +
...curity-Update-gRPC-repo-roots.-43699.patch | 2617 +++
meta-oe/recipes-devtools/grpc/grpc_1.84.0.bb | 1 +
.../php/{php_8.5.11.bb => php_8.5.12.bb} | 2 +-
.../rapidjson/rapidjson_git.bb | 2 +
.../7zip/{7zip_26.03.bb => 7zip_26.05.bb} | 2 +-
.../{brotli_1.2.0.bb => brotli_1.2.1.bb} | 4 +-
.../{flatpak_1.18.0.bb => flatpak_1.18.4.bb} | 4 +-
...-hiredis-use-default-CC-if-it-is-set.patch | 0
...ile-to-use-environment-build-setting.patch | 0
...003-hack-to-force-use-of-libc-malloc.patch | 0
.../0004-src-Do-not-reset-FINAL_LIBS.patch | 0
...RCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch | 0
...-not-build-the-test-modules-from-all.patch | 0
.../init-redis-server | 0
.../{redis-8.10.2 => redis-8.10.3}/redis.conf | 0
.../redis.service | 0
.../{redis_8.10.2.bb => redis_8.10.3.bb} | 2 +-
.../tmate/files/CVE-2026-4751.patch | 75 +
meta-oe/recipes-extended/tmate/tmate_2.4.0.bb | 1 +
.../libvncserver/CVE-2026-32853.patch | 76 +
.../libvncserver/CVE-2026-32854.patch | 66 +
.../libvncserver/CVE-2026-44988.patch | 71 +
.../libvncserver/CVE-2026-50538.patch | 49 +
.../libvncserver/libvncserver_0.9.15.bb | 4 +
.../{libxmp_4.7.3.bb => libxmp_4.7.4.bb} | 2 +-
...ibmikmod_3.3.14.bb => libmikmod_3.3.15.bb} | 2 +-
.../nmap/files/CVE-2026-58058.patch | 34 +
.../nmap/files/CVE-2026-72712.patch | 46 +
meta-oe/recipes-security/nmap/nmap_7.99.bb | 2 +
...troy-detach-queries-before-callbacks.patch | 2603 +++
...ed-socket-server-state-notifications.patch | 393 +
...qcache-hand-callbacks-their-own-copy.patch | 1054 ++
...connections-torn-down-by-application.patch | 1107 ++
...pt-an-answer-on-the-right-connection.patch | 575 +
...tions-read-channel-config-under-lock.patch | 243 +
...res_inet_pton-reject-a-prefix-length.patch | 364 +
...nt-drop-UDP-answers-from-server-port.patch | 178 +
.../recipes-support/c-ares/c-ares_1.34.8.bb | 8 +
.../libmspack/CVE-2026-110602.patch | 41 +
.../cabextract/libmspack_0.11alpha.bb | 4 +-
...1-winpr-tools-link-only-winpr-public.patch | 76 -
...{freerdp3_3.32.1.bb => freerdp3_3.32.2.bb} | 3 +-
.../{libspdm_3.8.2.bb => libspdm_3.8.3.bb} | 2 +-
...ve-eMudhra-emSign-Root-CA-C1-and-emS.patch | 272 +
...ve-eMudhra-emSign-Root-CA-G3-from-NS.patch | 143 +
meta-oe/recipes-support/nss/nss_3.126.bb | 2 +
.../opensc/opensc/CVE-2026-103531.patch | 54 +
.../recipes-support/opensc/opensc_0.27.1.bb | 1 +
.../poppler/poppler/CVE-2026-102620-1.patch | 145 +
.../poppler/poppler/CVE-2026-102620-2.patch | 34 +
.../poppler/poppler/CVE-2026-102621.patch | 40 +
.../poppler/poppler_26.08.0.bb | 3 +
.../{spitools_1.1.0.bb => spitools_1.1.1.bb} | 2 +-
.../udisks/udisks2/CVE-2026-7867-1.patch | 249 +
.../udisks/udisks2/CVE-2026-7867-2.patch | 208 +
.../udisks/udisks2/CVE-2026-7867-3.patch | 53 +
.../udisks/udisks2/CVE-2026-7867-4.patch | 40 +
.../udisks/udisks2/CVE-2026-7867-5.patch | 348 +
.../recipes-support/udisks/udisks2_2.10.2.bb | 9 +-
...proxy_0.1.7.bb => xdg-dbus-proxy_0.1.9.bb} | 2 +-
...rotli_1.2.0.bb => python3-brotli_1.2.1.bb} | 2 +-
...-cbor2_6.1.4.bb => python3-cbor2_6.1.5.bb} | 2 +-
.../0001-Update-gRPC-repo-roots.-43699.patch | 2617 +++
...e-repo-roots-to-chromium-roots-42094.patch | 14324 ++++++++++++++++
.../python/python3-grpcio_1.78.0.bb | 6 +
.../python3-oauthlib/CVE-2026-49265.patch | 51 +
.../python/python3-oauthlib_3.3.1.bb | 2 +
...yjwt_2.13.0.bb => python3-pyjwt_2.14.0.bb} | 2 +-
...gger-ui_5.33.1.bb => swagger-ui_5.33.3.bb} | 2 +-
...mod_md-Add-OpenSSL-4.0-compatibility.patch | 47 -
.../{apache2_2.4.68.bb => apache2_2.4.69.bb} | 3 +-
.../{nginx_1.30.5.bb => nginx_1.30.6.bb} | 5 +-
.../netdata/netdata_2.10.4.bb | 2 +
99 files changed, 29302 insertions(+), 152 deletions(-)
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch
rename meta-networking/recipes-support/mctp/{mctp_2.6.bb => mctp_2.6.1.bb} (100%)
rename meta-networking/recipes-support/mctp/{mctpd_2.6.bb => mctpd_2.6.1.bb} (100%)
create mode 100644 meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch
rename meta-networking/recipes-support/ntpsec/{ntpsec_1.2.5.bb => ntpsec_1.2.6.bb} (98%)
create mode 100644 meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch
rename meta-networking/recipes-support/unbound/{unbound_1.26.1.bb => unbound_1.26.2.bb} (98%)
create mode 100644 meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch
create mode 100644 meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch
rename meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} (99%)
rename meta-oe/recipes-extended/7zip/{7zip_26.03.bb => 7zip_26.05.bb} (98%)
rename meta-oe/recipes-extended/brotli/{brotli_1.2.0.bb => brotli_1.2.1.bb} (79%)
rename meta-oe/recipes-extended/flatpak/{flatpak_1.18.0.bb => flatpak_1.18.4.bb} (94%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0001-hiredis-use-default-CC-if-it-is-set.patch (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0002-lua-update-Makefile-to-use-environment-build-setting.patch (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0003-hack-to-force-use-of-libc-malloc.patch (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0004-src-Do-not-reset-FINAL_LIBS.patch (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0006-src-Makefile-do-not-build-the-test-modules-from-all.patch (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/init-redis-server (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/redis.conf (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/redis.service (100%)
rename meta-oe/recipes-extended/redis/{redis_8.10.2.bb => redis_8.10.3.bb} (98%)
create mode 100644 meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch
create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch
create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch
create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch
create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch
rename meta-oe/recipes-multimedia/libxmp/{libxmp_4.7.3.bb => libxmp_4.7.4.bb} (85%)
rename meta-oe/recipes-multimedia/mikmod/{libmikmod_3.3.14.bb => libmikmod_3.3.15.bb} (90%)
create mode 100644 meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch
create mode 100644 meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0001-ares_cancel-ares_destroy-detach-queries-before-callbacks.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0002-Deliver-deferred-socket-server-state-notifications.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0003-ares_qcache-hand-callbacks-their-own-copy.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0004-Handle-connections-torn-down-by-application.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0005-ares_process-only-accept-an-answer-on-the-right-connection.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0006-ares_save_options-read-channel-config-under-lock.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0007-ares_inet_pton-reject-a-prefix-length.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0008-ares_conn_read-dont-drop-UDP-answers-from-server-port.patch
create mode 100644 meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch
delete mode 100644 meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch
rename meta-oe/recipes-support/freerdp/{freerdp3_3.32.1.bb => freerdp3_3.32.2.bb} (98%)
rename meta-oe/recipes-support/libspdm/{libspdm_3.8.2.bb => libspdm_3.8.3.bb} (98%)
create mode 100644 meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch
create mode 100644 meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch
create mode 100644 meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch
create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch
create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch
create mode 100644 meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch
rename meta-oe/recipes-support/spitools/{spitools_1.1.0.bb => spitools_1.1.1.bb} (87%)
create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch
create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch
create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch
create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch
create mode 100644 meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch
rename meta-oe/recipes-support/xdg-dbus-proxy/{xdg-dbus-proxy_0.1.7.bb => xdg-dbus-proxy_0.1.9.bb} (93%)
rename meta-python/recipes-devtools/python/{python3-brotli_1.2.0.bb => python3-brotli_1.2.1.bb} (81%)
rename meta-python/recipes-devtools/python/{python3-cbor2_6.1.4.bb => python3-cbor2_6.1.5.bb} (87%)
create mode 100644 meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch
create mode 100644 meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch
create mode 100644 meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch
rename meta-python/recipes-devtools/python/{python3-pyjwt_2.13.0.bb => python3-pyjwt_2.14.0.bb} (84%)
rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.33.1.bb => swagger-ui_5.33.3.bb} (94%)
delete mode 100644 meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch
rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.68.bb => apache2_2.4.69.bb} (98%)
rename meta-webserver/recipes-httpd/nginx/{nginx_1.30.5.bb => nginx_1.30.6.bb} (63%)
^ permalink raw reply [flat|nested] 62+ messages in thread
* [blacksail][PATCH 25/60] pjproject: patch CVE-2026-57161
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (23 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 24/60] pjproject: patch CVE-2026-57160 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 26/60] pjproject: patch CVE-2026-57162 ankur.tyagi85
` (35 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-57161
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../pjproject/pjproject/CVE-2026-57161.patch | 49 +++++++++++++++++++
.../pjproject/pjproject_2.17.bb | 1 +
2 files changed, 50 insertions(+)
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch
new file mode 100644
index 0000000000..3296013efd
--- /dev/null
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch
@@ -0,0 +1,49 @@
+From 656cd5ec76f0178448053a9ca44ce075cd7a27f9 Mon Sep 17 00:00:00 2001
+From: Nanang Izzuddin <nanang@teluu.com>
+Date: Wed, 17 Jun 2026 15:44:40 +0700
+Subject: [PATCH] Merge commit from fork
+
+Bound the number of Service-Route URIs stored in the fixed-size uri[]
+array by checking uri_cnt against PJ_ARRAY_SIZE(uri) before each write.
+Previously the count was only checked as the do/while continuation
+condition, which does not catch accumulation across multiple
+single-URI Service-Route headers, allowing a registrar response with
+more than PJSUA_ACC_MAX_PROXIES headers to write past the array.
+
+Co-Authored-By Claude Code
+
+(cherry picked from commit acc03b57cef7a7d31b8e1f5b9117437d7e87c591)
+
+CVE: CVE-2026-57161
+Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/acc03b57cef7a7d31b8e1f5b9117437d7e87c591]
+
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ pjsip/src/pjsua-lib/pjsua_acc.c | 12 ++++++------
+ 1 file changed, 6 insertions(+), 6 deletions(-)
+
+diff --git a/pjsip/src/pjsua-lib/pjsua_acc.c b/pjsip/src/pjsua-lib/pjsua_acc.c
+index f52518a2a..08c5efced 100644
+--- a/pjsip/src/pjsua-lib/pjsua_acc.c
++++ b/pjsip/src/pjsua-lib/pjsua_acc.c
+@@ -2278,14 +2278,14 @@ static void update_service_route(pjsua_acc *acc, pjsip_rx_data *rdata)
+ return;
+ }
+
++ if (uri_cnt >= PJ_ARRAY_SIZE(uri)) {
++ PJ_LOG(1,(THIS_FILE, "Error: too many Service-Route headers"));
++ return;
++ }
++
+ uri[uri_cnt++] = h->name_addr.uri;
+ h = h->next;
+- } while (h != hr && uri_cnt != PJ_ARRAY_SIZE(uri));
+-
+- if (h != hr) {
+- PJ_LOG(1,(THIS_FILE, "Error: too many Service-Route headers"));
+- return;
+- }
++ } while (h != hr);
+
+ /* Prepare to find next Service-Route header */
+ hsr = hsr->next;
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
index 254a2952a2..4c00c4215c 100644
--- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
@@ -15,6 +15,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263"
SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag=${PV} \
file://0001-ssl_sock_ossl-fix-OpenSSL-4.0-compatibility.patch \
file://CVE-2026-57160.patch \
+ file://CVE-2026-57161.patch \
"
SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 26/60] pjproject: patch CVE-2026-57162
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (24 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 25/60] pjproject: patch CVE-2026-57161 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 27/60] pjproject: patch CVE-2026-57163 ankur.tyagi85
` (34 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-57162
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../pjproject/pjproject/CVE-2026-57162.patch | 43 +++++++++++++++++++
.../pjproject/pjproject_2.17.bb | 1 +
2 files changed, 44 insertions(+)
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch
new file mode 100644
index 0000000000..85a9394e25
--- /dev/null
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch
@@ -0,0 +1,43 @@
+From 1b64bfb240731bbf0fc194dec68bb9d9b08a20b2 Mon Sep 17 00:00:00 2001
+From: Nanang Izzuddin <nanang@teluu.com>
+Date: Wed, 17 Jun 2026 15:45:33 +0700
+Subject: [PATCH] Merge commit from fork
+
+sdes_encode_sdp() in transport_srtp_sdes.c wrote each parsed crypto tag
+into the fixed int tags[64] array without bounding the count, while the
+SDP parser allows up to PJMEDIA_MAX_SDP_ATTR (68) attributes. Reject
+the SDP with PJMEDIA_SRTP_ESDPINCRYPTO once the array capacity is
+reached, before the out-of-bounds write.
+
+Co-Authored-By Claude Code
+
+(cherry picked from commit a1b707c0c9b0506faf2a8a438b60f11ffd6a6fd9)
+
+CVE: CVE-2026-57162
+Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/a1b707c0c9b0506faf2a8a438b60f11ffd6a6fd9]
+
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ pjmedia/src/pjmedia/transport_srtp_sdes.c | 9 +++++++++
+ 1 file changed, 9 insertions(+)
+
+diff --git a/pjmedia/src/pjmedia/transport_srtp_sdes.c b/pjmedia/src/pjmedia/transport_srtp_sdes.c
+index 8f98292ba..45038e585 100644
+--- a/pjmedia/src/pjmedia/transport_srtp_sdes.c
++++ b/pjmedia/src/pjmedia/transport_srtp_sdes.c
+@@ -478,6 +478,15 @@ static pj_status_t sdes_encode_sdp( pjmedia_transport *tp,
+
+ has_crypto_attr = PJ_TRUE;
+
++ /* Bound writes to tags[] by its capacity. m_rem->attr_count
++ * is capped by the SDP parser at PJMEDIA_MAX_SDP_ATTR, which
++ * can exceed PJ_ARRAY_SIZE(tags); without this guard a remote
++ * peer can overflow the stack array by sending more than
++ * PJ_ARRAY_SIZE(tags) a=crypto attributes.
++ */
++ if (cr_attr_count >= PJ_ARRAY_SIZE(tags))
++ return PJMEDIA_SRTP_ESDPINCRYPTO;
++
+ status = parse_attr_crypto(srtp->pool, m_rem->attr[i],
+ &tmp_rx_crypto,
+ &tags[cr_attr_count]);
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
index 4c00c4215c..f47d661400 100644
--- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
@@ -16,6 +16,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag
file://0001-ssl_sock_ossl-fix-OpenSSL-4.0-compatibility.patch \
file://CVE-2026-57160.patch \
file://CVE-2026-57161.patch \
+ file://CVE-2026-57162.patch \
"
SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 27/60] pjproject: patch CVE-2026-57163
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (25 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 26/60] pjproject: patch CVE-2026-57162 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 28/60] pjproject: patch CVE-2026-57164 ankur.tyagi85
` (33 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-57163
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../pjproject/pjproject/CVE-2026-57163.patch | 52 +++++++++++++++++++
.../pjproject/pjproject_2.17.bb | 1 +
2 files changed, 53 insertions(+)
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch
new file mode 100644
index 0000000000..7b3c681cb9
--- /dev/null
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch
@@ -0,0 +1,52 @@
+From 2276d5ff1fe185a6bb51ab741dd5d88e45dbaa47 Mon Sep 17 00:00:00 2001
+From: Nanang Izzuddin <nanang@teluu.com>
+Date: Wed, 17 Jun 2026 15:46:16 +0700
+Subject: [PATCH] Merge commit from fork
+
+The SAN-counting loop in tls_cert_get_info() (ssl_sock_gtls.c) called
+gnutls_x509_crt_get_subject_alt_name() with len still holding
+sizeof(buf) (512) from an earlier getter, while the output buffer is
+only 256 bytes, so an oversized SAN entry overflowed the stack. Set len
+to the true capacity (sizeof(out) - 1, matching the populate loop) on
+every iteration.
+
+Co-Authored-By Claude Code
+
+(cherry picked from commit c4a151af86fadd16d9480b2603eeb2abf4fb4f78)
+
+CVE: CVE-2026-57163
+Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/c4a151af86fadd16d9480b2603eeb2abf4fb4f78]
+
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ pjlib/src/pj/ssl_sock_gtls.c | 12 +++++++++++-
+ 1 file changed, 11 insertions(+), 1 deletion(-)
+
+diff --git a/pjlib/src/pj/ssl_sock_gtls.c b/pjlib/src/pj/ssl_sock_gtls.c
+index de3d5e99e..68ceea3f3 100644
+--- a/pjlib/src/pj/ssl_sock_gtls.c
++++ b/pjlib/src/pj/ssl_sock_gtls.c
+@@ -1018,12 +1018,22 @@ static void tls_cert_get_info(pj_pool_t *pool, pj_ssl_cert_info *ci,
+ if (ci->version >= 3) {
+ char out[256] = { 0 };
+ /* Get the number of all alternate names so that we can allocate
+- * the correct number of bytes in subj_alt_name */
++ * the correct number of bytes in subj_alt_name.
++ *
++ * Pass the true capacity of 'out' as the in/out size argument on
++ * every iteration. 'len' otherwise still holds sizeof(buf) (512)
++ * from an earlier getter, which would let GnuTLS copy an oversized
++ * SubjectAltName entry past the end of the 256-byte 'out' buffer.
++ * Use sizeof(out) - 1 to match the populate loop below, leaving
++ * room for the NUL terminator GnuTLS appends to string names.
++ */
++ len = sizeof(out) - 1;
+ while (gnutls_x509_crt_get_subject_alt_name(cert, seq, out, &len,
+ NULL) !=
+ GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE)
+ {
+ seq++;
++ len = sizeof(out) - 1;
+ }
+
+ ci->subj_alt_name.entry = pj_pool_calloc(pool, seq,
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
index f47d661400..de8c847271 100644
--- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
@@ -17,6 +17,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag
file://CVE-2026-57160.patch \
file://CVE-2026-57161.patch \
file://CVE-2026-57162.patch \
+ file://CVE-2026-57163.patch \
"
SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 28/60] pjproject: patch CVE-2026-57164
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (26 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 27/60] pjproject: patch CVE-2026-57163 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 29/60] pjproject: patch CVE-2026-57165 ankur.tyagi85
` (32 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-57164
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../pjproject/pjproject/CVE-2026-57164.patch | 66 +++++++++++++++++++
.../pjproject/pjproject_2.17.bb | 1 +
2 files changed, 67 insertions(+)
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch
new file mode 100644
index 0000000000..0686d681c3
--- /dev/null
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch
@@ -0,0 +1,66 @@
+From 1160ff3c15cfa79f50d4bc6ce8066854f656066c Mon Sep 17 00:00:00 2001
+From: Nanang Izzuddin <nanang@teluu.com>
+Date: Wed, 17 Jun 2026 15:46:48 +0700
+Subject: [PATCH] Merge commit from fork
+
+http_on_data_read() in http_client.c grew the response buffer by a
+single doubling, which is insufficient when the server sends a body
+larger than twice the (attacker-supplied) Content-Length used for the
+initial allocation. Loop the doubling until the buffer fits, with a
+floor for the size==0 case to avoid an infinite loop.
+
+Co-Authored-By Claude Code
+
+(cherry picked from commit 8d5956afab2ede95ddb199078dc19a8ac0114f3d)
+
+CVE: CVE-2026-57164
+Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/8d5956afab2ede95ddb199078dc19a8ac0114f3d]
+
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ pjlib-util/src/pjlib-util/http_client.c | 27 ++++++++++++++++++-------
+ 1 file changed, 20 insertions(+), 7 deletions(-)
+
+diff --git a/pjlib-util/src/pjlib-util/http_client.c b/pjlib-util/src/pjlib-util/http_client.c
+index bd441acb9..d2771d240 100644
+--- a/pjlib-util/src/pjlib-util/http_client.c
++++ b/pjlib-util/src/pjlib-util/http_client.c
+@@ -432,18 +432,31 @@ static pj_bool_t http_on_data_read(pj_activesock_t *asock,
+ hreq->response.size);
+ }
+
+- /* If the size of data received exceeds its current size,
+- * grow the buffer by a factor of 2.
++ /* If the size of data received exceeds its current size, grow the
++ * buffer by a factor of 2 repeatedly, until it can actually hold
++ * everything received so far. A single doubling is not sufficient
++ * when the server delivers a body chunk larger than twice the
++ * (possibly undersized) Content-Length used for the initial
++ * allocation, which would otherwise overflow the buffer in the
++ * pj_memcpy() below.
+ */
+- if (hreq->tcp_state.current_read_size + size >
+- hreq->response.size)
++ if (hreq->tcp_state.current_read_size + size >
++ hreq->response.size)
+ {
+ void *olddata = hreq->response.data;
++ pj_size_t new_size = hreq->response.size;
+
+- hreq->response.data = pj_pool_alloc(hreq->pool,
+- hreq->response.size << 1);
++ /* Guard against size==0 (Content-Length: 0 with a body), which
++ * would make the doubling loop below spin forever.
++ */
++ if (new_size == 0)
++ new_size = INITIAL_DATA_BUF_SIZE;
++ while (hreq->tcp_state.current_read_size + size > new_size)
++ new_size <<= 1;
++
++ hreq->response.data = pj_pool_alloc(hreq->pool, new_size);
+ pj_memcpy(hreq->response.data, olddata, hreq->response.size);
+- hreq->response.size <<= 1;
++ hreq->response.size = new_size;
+ }
+
+ /* Append the response data. */
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
index de8c847271..8e0b358ffe 100644
--- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
@@ -18,6 +18,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag
file://CVE-2026-57161.patch \
file://CVE-2026-57162.patch \
file://CVE-2026-57163.patch \
+ file://CVE-2026-57164.patch \
"
SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 29/60] pjproject: patch CVE-2026-57165
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (27 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 28/60] pjproject: patch CVE-2026-57164 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 30/60] pjproject: patch CVE-2026-57166 ankur.tyagi85
` (31 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-57165
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../pjproject/pjproject/CVE-2026-57165.patch | 85 +++++++++++++++++++
.../pjproject/pjproject_2.17.bb | 1 +
2 files changed, 86 insertions(+)
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch
new file mode 100644
index 0000000000..e2d62b0eef
--- /dev/null
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch
@@ -0,0 +1,85 @@
+From 5776ee452296d5277d71e2bb011709adec80a533 Mon Sep 17 00:00:00 2001
+From: Nanang Izzuddin <nanang@teluu.com>
+Date: Wed, 17 Jun 2026 15:47:29 +0700
+Subject: [PATCH] Merge commit from fork
+
+handle_up_down() in cli_telnet.c accumulated cur_pos + 2*rcmd->len +
+history->slen bytes into a fixed PJ_CLI_MAX_CMDBUF stack buffer with no
+bound check. Size the buffer for the worst case, clamp each term to
+PJ_CLI_MAX_CMDBUF, and replace the trailing unchecked pj_strcat with a
+bounded pj_memcpy.
+
+Co-Authored-By Claude Code
+
+(cherry picked from commit 628b71638465bacf66e767959e6acbab822eccd6)
+
+CVE: CVE-2026-57165
+Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/628b71638465bacf66e767959e6acbab822eccd6]
+
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ pjlib-util/src/pjlib-util/cli_telnet.c | 33 ++++++++++++++++++++------
+ 1 file changed, 26 insertions(+), 7 deletions(-)
+
+diff --git a/pjlib-util/src/pjlib-util/cli_telnet.c b/pjlib-util/src/pjlib-util/cli_telnet.c
+index 150727bb5..0a2954bd4 100644
+--- a/pjlib-util/src/pjlib-util/cli_telnet.c
++++ b/pjlib-util/src/pjlib-util/cli_telnet.c
+@@ -1141,7 +1141,14 @@ static pj_bool_t handle_up_down(cli_telnet_sess *sess, pj_bool_t is_up)
+ history = get_prev_history(sess, is_up);
+ if (history) {
+ pj_str_t send_data;
+- char str[PJ_CLI_MAX_CMDBUF];
++ /* The redraw sequence can accumulate up to
++ * cur_pos + 2 * rcmd->len + history->slen
++ * bytes, each term bounded by PJ_CLI_MAX_CMDBUF, so size the
++ * local buffer for the worst case and clamp each term below.
++ */
++ char str[PJ_CLI_MAX_CMDBUF * 4];
++ unsigned cur_pos, buf_len;
++ pj_size_t hist_len;
+ enum {
+ MOVE_CURSOR_LEFT = 0x08,
+ CLEAR_CHAR = 0x20
+@@ -1149,15 +1156,24 @@ static pj_bool_t handle_up_down(cli_telnet_sess *sess, pj_bool_t is_up)
+ send_data.ptr = str;
+ send_data.slen = 0;
+
++ cur_pos = sess->rcmd->cur_pos;
++ buf_len = sess->rcmd->len;
++ hist_len = history->slen;
++ if (cur_pos > PJ_CLI_MAX_CMDBUF)
++ cur_pos = PJ_CLI_MAX_CMDBUF;
++ if (buf_len > PJ_CLI_MAX_CMDBUF)
++ buf_len = PJ_CLI_MAX_CMDBUF;
++ if (hist_len > PJ_CLI_MAX_CMDBUF)
++ hist_len = PJ_CLI_MAX_CMDBUF;
++
+ /* Move cursor position to the beginning of line */
+- if (sess->rcmd->cur_pos > 0) {
+- pj_memset(send_data.ptr, MOVE_CURSOR_LEFT, sess->rcmd->cur_pos);
+- send_data.slen = sess->rcmd->cur_pos;
++ if (cur_pos > 0) {
++ pj_memset(send_data.ptr, MOVE_CURSOR_LEFT, cur_pos);
++ send_data.slen = cur_pos;
+ }
+
+- if (sess->rcmd->len > (unsigned)history->slen) {
++ if (buf_len > (unsigned)hist_len) {
+ /* Clear the command currently shown*/
+- unsigned buf_len = sess->rcmd->len;
+ pj_memset(&send_data.ptr[send_data.slen], CLEAR_CHAR, buf_len);
+ send_data.slen += buf_len;
+
+@@ -1167,7 +1183,10 @@ static pj_bool_t handle_up_down(cli_telnet_sess *sess, pj_bool_t is_up)
+ send_data.slen += buf_len;
+ }
+ /* Send data */
+- pj_strcat(&send_data, history);
++ if (hist_len > 0) {
++ pj_memcpy(&send_data.ptr[send_data.slen], history->ptr, hist_len);
++ send_data.slen += hist_len;
++ }
+ telnet_sess_send(sess, &send_data);
+ pj_ansi_strxcpy2((char*)sess->rcmd->rbuf, history,
+ sizeof(sess->rcmd->rbuf));
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
index 8e0b358ffe..e7cae469ed 100644
--- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
@@ -19,6 +19,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag
file://CVE-2026-57162.patch \
file://CVE-2026-57163.patch \
file://CVE-2026-57164.patch \
+ file://CVE-2026-57165.patch \
"
SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 30/60] pjproject: patch CVE-2026-57166
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (28 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 29/60] pjproject: patch CVE-2026-57165 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 31/60] pjproject: patch CVE-2026-77396 ankur.tyagi85
` (30 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-57166
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../pjproject/pjproject/CVE-2026-57166.patch | 228 ++++++++++++++++++
.../pjproject/pjproject_2.17.bb | 1 +
2 files changed, 229 insertions(+)
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch
new file mode 100644
index 0000000000..8311d4c36d
--- /dev/null
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch
@@ -0,0 +1,228 @@
+From d0b42b902bb6ca8a0a1393799db487642d3bf8ae Mon Sep 17 00:00:00 2001
+From: Nanang Izzuddin <nanang@teluu.com>
+Date: Wed, 17 Jun 2026 15:55:53 +0700
+Subject: [PATCH] Merge commit from fork
+
+* Fix pre-auth stack overflow formatting telnet CLI error indicator
+
+send_err_arg() in cli_telnet.c rendered the error caret into a fixed
+256-byte stack buffer using unchecked pj_strcat2; info->err_pos is
+bounded only by PJ_CLI_MAX_CMDBUF, so a long command line overflowed
+the buffer. Stream the spaces in bounded chunks via telnet_sess_send2,
+clamp the caret offset to PJ_CLI_MAX_CMDBUF, and send the message,
+prompt and echoed command separately, removing the stack buffer.
+
+Co-Authored-By Claude Code
+
+* Apply the same overflow fix to send_ambi_arg()
+
+Per review, send_ambi_arg() has the same issue as send_err_arg(): it
+renders an attacker-influenced number of caret spaces and appends the
+last command into a fixed 1028-byte stack buffer with unchecked
+pj_strcat2. info->err_pos and sess->rcmd->rbuf are bounded only by
+PJ_CLI_MAX_CMDBUF, so a long ambiguous command line could overflow it.
+
+Stream the caret offset in bounded chunks (clamped to PJ_CLI_MAX_CMDBUF)
+and stream the clamped last command separately, mirroring the
+send_err_arg() fix, instead of writing them into the fixed buffer. The
+shared SPACES constant is hoisted to file scope.
+
+Co-Authored-By Claude Code
+
+* Bound completion append in handle_tab()
+
+handle_tab() appended the matched command name into the fixed-size
+sess->rcmd->rbuf at offset len (the current command length) without
+checking that len + name length fits the buffer. len is bounded by the
+receive path, but the completion suffix is added on top, so a long
+completable command line could write past rbuf and its NUL terminator.
+
+Clamp the appended length to the space remaining in rbuf, leaving room
+for the terminator. Found while auditing the telnet CLI for the same
+fixed-buffer overflow pattern as send_err_arg()/send_ambi_arg().
+
+Co-Authored-By Claude Code
+
+(cherry picked from commit 4472a31d77a7506ff175dad5abef490f4e31bed1)
+
+CVE: CVE-2026-57166
+Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/4472a31d77a7506ff175dad5abef490f4e31bed1]
+
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ pjlib-util/src/pjlib-util/cli_telnet.c | 116 ++++++++++++++++++-------
+ 1 file changed, 84 insertions(+), 32 deletions(-)
+
+diff --git a/pjlib-util/src/pjlib-util/cli_telnet.c b/pjlib-util/src/pjlib-util/cli_telnet.c
+index 0a2954bd4..67898fdd8 100644
+--- a/pjlib-util/src/pjlib-util/cli_telnet.c
++++ b/pjlib-util/src/pjlib-util/cli_telnet.c
+@@ -680,6 +680,13 @@ static void send_prompt_str(cli_telnet_sess *sess)
+ telnet_sess_send(sess, &send_data);
+ }
+
++/* Buffer of spaces, used to stream the caret offset in bounded chunks
++ * instead of writing an attacker-influenced number of spaces into a
++ * fixed-size stack buffer. Shared by send_err_arg() and send_ambi_arg().
++ */
++static const unsigned char SPACES[64] =
++ " ";
++
+ /*
+ * This method is used to send error message to client, including
+ * the error position of the source command.
+@@ -690,32 +697,45 @@ static void send_err_arg(cli_telnet_sess *sess,
+ pj_bool_t with_return,
+ pj_bool_t with_last_cmd)
+ {
+- pj_str_t send_data;
+- char data_str[256];
+- pj_size_t len;
+- unsigned i;
++ pj_size_t len, remaining;
+ cli_telnet_fe *fe = (cli_telnet_fe *)sess->base.fe;
+
+- send_data.ptr = data_str;
+- send_data.slen = 0;
+-
+ if (with_return)
+- pj_strcat2(&send_data, "\r\n");
++ telnet_sess_send2(sess, (const unsigned char*)"\r\n", 2);
+
++ /* Compute the caret offset. info->err_pos is derived from
++ * attacker-supplied input (pj_cli_sess_parse) and is bounded only by
++ * PJ_CLI_MAX_CMDBUF, so clamp it before emitting spaces. Otherwise a
++ * ~500-byte command line would overflow the fixed-size stack buffer
++ * this function previously used.
++ */
+ len = fe->cfg.prompt_str.slen + info->err_pos;
+-
+- /* Set the error pointer mark */
+- for (i=0;i<len;++i) {
+- pj_strcat2(&send_data, " ");
++ if (len > PJ_CLI_MAX_CMDBUF)
++ len = PJ_CLI_MAX_CMDBUF;
++
++ remaining = len;
++ while (remaining > 0) {
++ pj_size_t chunk = (remaining > sizeof(SPACES)) ? sizeof(SPACES)
++ : remaining;
++ telnet_sess_send2(sess, SPACES, (int)chunk);
++ remaining -= chunk;
+ }
+- pj_strcat2(&send_data, "^");
+- pj_strcat2(&send_data, "\r\n");
+- pj_strcat(&send_data, msg);
+- pj_strcat(&send_data, &fe->cfg.prompt_str);
+- if (with_last_cmd)
+- pj_strcat2(&send_data, (char *)sess->rcmd->rbuf);
+
+- telnet_sess_send(sess, &send_data);
++ telnet_sess_send2(sess, (const unsigned char*)"^\r\n", 3);
++
++ if (msg && msg->slen > 0)
++ telnet_sess_send(sess, msg);
++ if (fe->cfg.prompt_str.slen > 0)
++ telnet_sess_send(sess, &fe->cfg.prompt_str);
++ if (with_last_cmd) {
++ pj_str_t last;
++ last.ptr = (char *)sess->rcmd->rbuf;
++ last.slen = (pj_ssize_t)pj_ansi_strlen((const char *)sess->rcmd->rbuf);
++ if (last.slen > PJ_CLI_MAX_CMDBUF)
++ last.slen = PJ_CLI_MAX_CMDBUF;
++ if (last.slen > 0)
++ telnet_sess_send(sess, &last);
++ }
+ }
+
+ static void send_inv_arg(cli_telnet_sess *sess,
+@@ -765,7 +785,7 @@ static void send_ambi_arg(cli_telnet_sess *sess,
+ pj_bool_t with_last_cmd)
+ {
+ unsigned i;
+- pj_size_t len;
++ pj_size_t len, remaining;
+ pj_str_t send_data;
+ char data[1028];
+ cli_telnet_fe *fe = (cli_telnet_fe *)sess->base.fe;
+@@ -779,14 +799,25 @@ static void send_ambi_arg(cli_telnet_sess *sess,
+ send_data.slen = 0;
+
+ if (with_return)
+- pj_strcat2(&send_data, "\r\n");
++ telnet_sess_send2(sess, (const unsigned char*)"\r\n", 2);
+
++ /* Compute and clamp the caret offset, then stream the spaces, like
++ * send_err_arg(). info->err_pos is attacker-bounded only by
++ * PJ_CLI_MAX_CMDBUF, so it must not drive writes into data[].
++ */
+ len = fe->cfg.prompt_str.slen + info->err_pos;
+-
+- for (i=0;i<len;++i) {
+- pj_strcat2(&send_data, " ");
++ if (len > PJ_CLI_MAX_CMDBUF)
++ len = PJ_CLI_MAX_CMDBUF;
++
++ remaining = len;
++ while (remaining > 0) {
++ pj_size_t chunk = (remaining > sizeof(SPACES)) ? sizeof(SPACES)
++ : remaining;
++ telnet_sess_send2(sess, SPACES, (int)chunk);
++ remaining -= chunk;
+ }
+- pj_strcat2(&send_data, "^");
++ telnet_sess_send2(sess, (const unsigned char*)"^", 1);
++
+ /* Get the max length of the command name */
+ for (i=0;i<info->hint_cnt;++i) {
+ if (hint[i].type.slen > 0) {
+@@ -874,10 +905,21 @@ static void send_ambi_arg(cli_telnet_sess *sess,
+ }
+ pj_strcat2(&send_data, "\r\n");
+ pj_strcat(&send_data, &fe->cfg.prompt_str);
+- if (with_last_cmd)
+- pj_strcat2(&send_data, (char *)sess->rcmd->rbuf);
+-
+ telnet_sess_send(sess, &send_data);
++
++ /* Stream the last command separately with a clamp; sess->rcmd->rbuf
++ * is attacker-bounded only by PJ_CLI_MAX_CMDBUF, so appending it into
++ * data[] could overflow the fixed-size buffer.
++ */
++ if (with_last_cmd) {
++ pj_str_t last;
++ last.ptr = (char *)sess->rcmd->rbuf;
++ last.slen = (pj_ssize_t)pj_ansi_strlen((const char *)sess->rcmd->rbuf);
++ if (last.slen > PJ_CLI_MAX_CMDBUF)
++ last.slen = PJ_CLI_MAX_CMDBUF;
++ if (last.slen > 0)
++ telnet_sess_send(sess, &last);
++ }
+ }
+
+ /*
+@@ -1035,10 +1077,20 @@ static pj_bool_t handle_tab(cli_telnet_sess *sess)
+ }
+ send_comp_arg(sess, &info);
+
+- pj_memcpy(&sess->rcmd->rbuf[len], info.hint[0].name.ptr,
+- info.hint[0].name.slen);
+-
+- len += (unsigned)info.hint[0].name.slen;
++ /* Append the matched name into the fixed-size rbuf. len is
++ * attacker-influenced (the typed command length), so clamp
++ * the copy to leave room for the NUL terminator and avoid
++ * overflowing rbuf.
++ */
++ if (len < sizeof(sess->rcmd->rbuf) - 1) {
++ pj_size_t avail = sizeof(sess->rcmd->rbuf) - 1 - len;
++ pj_size_t cplen = (pj_size_t)info.hint[0].name.slen;
++ if (cplen > avail)
++ cplen = avail;
++ pj_memcpy(&sess->rcmd->rbuf[len],
++ info.hint[0].name.ptr, cplen);
++ len += (unsigned)cplen;
++ }
+ sess->rcmd->rbuf[len] = 0;
+ }
+ } else {
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
index e7cae469ed..9d1e6af253 100644
--- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
@@ -20,6 +20,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag
file://CVE-2026-57163.patch \
file://CVE-2026-57164.patch \
file://CVE-2026-57165.patch \
+ file://CVE-2026-57166.patch \
"
SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 31/60] pjproject: patch CVE-2026-77396
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (29 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 30/60] pjproject: patch CVE-2026-57166 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 32/60] pjproject: patch CVE-2026-84975 ankur.tyagi85
` (29 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-77396
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../pjproject/pjproject/CVE-2026-77396.patch | 74 +++++++++++++++++++
.../pjproject/pjproject_2.17.bb | 1 +
2 files changed, 75 insertions(+)
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch
new file mode 100644
index 0000000000..a02268bf11
--- /dev/null
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch
@@ -0,0 +1,74 @@
+From a927a964d462e9966864b7b2c432942b61038d6b Mon Sep 17 00:00:00 2001
+From: Nanang Izzuddin <nanang@teluu.com>
+Date: Mon, 13 Jul 2026 09:27:02 +0700
+Subject: [PATCH] Merge commit from fork
+
+The AVI player used a chunk length taken from the input file as the
+number of bytes to read into the video frame buffer, whose capacity is
+derived from the (also file-supplied) declared dimensions, without
+reconciling the two. A crafted file could therefore cause a write past
+the end of the buffer. The only guard was an assertion, which is a
+no-op in release builds.
+
+Clamp the read to the frame buffer capacity, skip any remaining chunk
+bytes so the file position stays aligned, and remove the reliance on
+the assertion for validating a file-supplied length.
+
+Ref: GHSA-6p2p-5wf8-h5hr
+(cherry picked from commit 7ecc6584969a923c4190b6912afbf5952b5a4b9f)
+
+CVE: CVE-2026-77396
+Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/7ecc6584969a923c4190b6912afbf5952b5a4b9f]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ pjmedia/src/pjmedia/avi_player.c | 34 +++++++++++++++++++++++++++++---
+ 1 file changed, 31 insertions(+), 3 deletions(-)
+
+diff --git a/pjmedia/src/pjmedia/avi_player.c b/pjmedia/src/pjmedia/avi_player.c
+index dc87b8a41..8b4b94d16 100644
+--- a/pjmedia/src/pjmedia/avi_player.c
++++ b/pjmedia/src/pjmedia/avi_player.c
+@@ -1199,12 +1199,40 @@ static pj_status_t avi_get_frame(pjmedia_port *this_port,
+ goto on_error2;
+ fport->size_left -= size_to_read;
+ } else {
+- pj_assert(frame->size >= ch.len);
+- status = file_read3(fport->fd, frame->buf, ch.len,
++ pj_uint32_t read_len = ch.len;
++
++ /* Clamp the read to the frame buffer capacity. A crafted
++ * file may declare a chunk larger than the buffer, whose
++ * size is derived from the (also file-supplied) video
++ * dimensions; never write past frame->buf (frame->size
++ * bytes). Do not rely on pj_assert() here, as it is a no-op
++ * in release builds.
++ */
++ if (read_len > frame->size) {
++ PJ_LOG(3, (THIS_FILE,
++ "AVI video chunk (%u) exceeds frame buffer "
++ "(%u), truncating",
++ (unsigned)ch.len, (unsigned)frame->size));
++ read_len = (pj_uint32_t)frame->size;
++ }
++
++ status = file_read3(fport->fd, frame->buf, read_len,
+ 0, &size_read);
+ if (status != PJ_SUCCESS)
+ goto on_error2;
+- frame->size = ch.len;
++
++ /* Skip any remaining chunk bytes that did not fit, so the
++ * file position stays aligned to the next chunk.
++ */
++ if (ch.len > read_len) {
++ status = pj_file_setpos(fport->fd,
++ (pj_off_t)ch.len - read_len,
++ PJ_SEEK_CUR);
++ if (status != PJ_SUCCESS)
++ goto on_error2;
++ }
++
++ frame->size = read_len;
+ fport->size_left = 0;
+ }
+
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
index 9d1e6af253..89763b3011 100644
--- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
@@ -21,6 +21,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag
file://CVE-2026-57164.patch \
file://CVE-2026-57165.patch \
file://CVE-2026-57166.patch \
+ file://CVE-2026-77396.patch \
"
SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 32/60] pjproject: patch CVE-2026-84975
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (30 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 31/60] pjproject: patch CVE-2026-77396 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 33/60] nmap: patch CVE-2026-58058 ankur.tyagi85
` (28 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-84975
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../pjproject/pjproject/CVE-2026-84975.patch | 87 +++++++++++++++++++
.../pjproject/pjproject_2.17.bb | 1 +
2 files changed, 88 insertions(+)
create mode 100644 meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch
new file mode 100644
index 0000000000..007096a6ff
--- /dev/null
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch
@@ -0,0 +1,87 @@
+From f00f023079d0f9a74477da47056bfce76374b2a7 Mon Sep 17 00:00:00 2001
+From: sauwming <ming@teluu.com>
+Date: Fri, 17 Jul 2026 16:46:33 +0800
+Subject: [PATCH] Merge commit from fork
+
+SubjectAltName entries from the OpenSSL and GnuTLS backends were copied
+with pj_strdup2(), which re-derives the length with strlen() and thus
+discards the length already returned by ASN1_STRING_to_UTF8() /
+gnutls_x509_crt_get_subject_alt_name(). A DNS SAN such as
+"victim.example\0.attacker" was therefore truncated to "victim.example".
+
+sip_transport_tls.c disables socket-layer verification and performs its
+own length-aware identity match against subj_alt_name, so the truncated
+prefix compared equal to the target host and a crafted certificate was
+accepted for the prefix hostname (server identity / hostname verification
+bypass; OpenSSL's own X509_check_host() rejects the same certificate).
+
+Copy the SAN using its explicit length via pj_strset()/pj_strdup_with_null()
+so embedded NULs are preserved and no longer truncated. The mbedTLS backend
+already copied with a length-bearing pj_str_t and was not affected.
+
+Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
+(cherry picked from commit 43d3bd77bb6833eab4c493503b8d564a754ddfdd)
+
+CVE: CVE-2026-84975
+Upstream-Status: Backport [https://github.com/pjsip/pjproject/commit/43d3bd77bb6833eab4c493503b8d564a754ddfdd]
+
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ pjlib/src/pj/ssl_sock_gtls.c | 17 +++++++++++++++--
+ pjlib/src/pj/ssl_sock_ossl.c | 14 +++++++++++---
+ 2 files changed, 26 insertions(+), 5 deletions(-)
+
+diff --git a/pjlib/src/pj/ssl_sock_gtls.c b/pjlib/src/pj/ssl_sock_gtls.c
+index 68ceea3f3..ee977116b 100644
+--- a/pjlib/src/pj/ssl_sock_gtls.c
++++ b/pjlib/src/pj/ssl_sock_gtls.c
+@@ -1072,9 +1072,22 @@ static void tls_cert_get_info(pj_pool_t *pool, pj_ssl_cert_info *ci,
+
+ if (len && type != PJ_SSL_CERT_NAME_UNKNOWN) {
+ ci->subj_alt_name.entry[ci->subj_alt_name.cnt].type = type;
+- pj_strdup2(pool,
++ if (type == PJ_SSL_CERT_NAME_IP) {
++ pj_strdup2(pool,
+ &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name,
+- type == PJ_SSL_CERT_NAME_IP ? buf : out);
++ buf);
++ } else {
++ /* Preserve the reported length instead of using strlen(),
++ * so a DNS SAN containing an embedded NUL is not truncated
++ * at the NUL (which would allow a crafted cert to be
++ * accepted for the prefix hostname; identity bypass).
++ */
++ pj_str_t tmp;
++ pj_strset(&tmp, out, len);
++ pj_strdup_with_null(pool,
++ &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name,
++ &tmp);
++ }
+ ci->subj_alt_name.cnt++;
+ }
+ }
+diff --git a/pjlib/src/pj/ssl_sock_ossl.c b/pjlib/src/pj/ssl_sock_ossl.c
+index 30b4eeaee..ceb6bca5b 100644
+--- a/pjlib/src/pj/ssl_sock_ossl.c
++++ b/pjlib/src/pj/ssl_sock_ossl.c
+@@ -2270,9 +2270,17 @@ static void get_cert_info(pj_pool_t *pool, pj_ssl_cert_info *ci, X509 *x,
+ &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name,
+ buf);
+ } else {
+- pj_strdup2(pool,
+- &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name,
+- (char*)p);
++ /* Preserve the explicit ASN.1 string length instead of
++ * treating the data as a NUL-terminated C string. A DNS
++ * SAN such as "host.example\0.attacker" would otherwise be
++ * truncated at the embedded NUL, letting a crafted cert be
++ * accepted for the prefix hostname (identity bypass).
++ */
++ pj_str_t tmp;
++ pj_strset(&tmp, (char*)p, len);
++ pj_strdup_with_null(pool,
++ &ci->subj_alt_name.entry[ci->subj_alt_name.cnt].name,
++ &tmp);
+ OPENSSL_free(p);
+ }
+ ci->subj_alt_name.cnt++;
diff --git a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
index 89763b3011..893559090f 100644
--- a/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
+++ b/meta-multimedia/recipes-multimedia/pjproject/pjproject_2.17.bb
@@ -22,6 +22,7 @@ SRC_URI = "git://github.com/pjsip/pjproject.git;protocol=https;branch=master;tag
file://CVE-2026-57165.patch \
file://CVE-2026-57166.patch \
file://CVE-2026-77396.patch \
+ file://CVE-2026-84975.patch \
"
SRCREV = "5a457451fa2712ba18e12b01738e8ff3af2b26fd"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 33/60] nmap: patch CVE-2026-58058
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (31 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 32/60] pjproject: patch CVE-2026-84975 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 34/60] nmap: patch CVE-2026-72712 ankur.tyagi85
` (27 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-58058
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../nmap/files/CVE-2026-58058.patch | 34 +++++++++++++++++++
meta-oe/recipes-security/nmap/nmap_7.99.bb | 1 +
2 files changed, 35 insertions(+)
create mode 100644 meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch
diff --git a/meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch b/meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch
new file mode 100644
index 0000000000..3717d37b5d
--- /dev/null
+++ b/meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch
@@ -0,0 +1,34 @@
+From 63815f6a8865d8c99a1f3abb9d7383a2be0ea67e Mon Sep 17 00:00:00 2001
+From: dmiller <dmiller@e0a8ed71-7df4-0310-8962-fdc924857419>
+Date: Thu, 25 Jun 2026 21:58:49 +0000
+Subject: [PATCH] Fix extension header parsing. Credit: Himanshu Anand
+
+(cherry picked from commit bb6754e76bb1686315008e1aa1c40202a513fb83)
+
+CVE: CVE-2026-58058
+Upstream-Status: Backport [https://github.com/nmap/nmap/commit/bb6754e76bb1686315008e1aa1c40202a513fb83]
+
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ libnetutil/netutil.cc | 4 +++-
+ 1 file changed, 3 insertions(+), 1 deletion(-)
+
+diff --git a/libnetutil/netutil.cc b/libnetutil/netutil.cc
+index 6e81f558c..0adf18b8e 100644
+--- a/libnetutil/netutil.cc
++++ b/libnetutil/netutil.cc
+@@ -615,11 +615,13 @@ static const void *ipv6_get_data_primitive(const struct ip6_hdr *ip6,
+ *nxt = ip6->ip6_nxt;
+ p += sizeof(*ip6);
+ while (p < end && ipv6_is_extension_header(*nxt)) {
+- if (p + 2 > end)
++ if (p + 8 > end)
+ return NULL;
+ *nxt = *p;
+ p += (*(p + 1) + 1) * 8;
+ }
++ if (p >= end)
++ return NULL;
+
+ *len = end - p;
+ if (upperlayer_only && !ipv6_is_upperlayer(*nxt))
diff --git a/meta-oe/recipes-security/nmap/nmap_7.99.bb b/meta-oe/recipes-security/nmap/nmap_7.99.bb
index ea792d30f6..515623d63d 100644
--- a/meta-oe/recipes-security/nmap/nmap_7.99.bb
+++ b/meta-oe/recipes-security/nmap/nmap_7.99.bb
@@ -11,6 +11,7 @@ SRC_URI = "http://nmap.org/dist/${BP}.tar.bz2 \
file://0002-Fix-building-with-libc.patch \
file://0001-fix-racing-between-build-ncat-and-build-lua.patch \
file://0004-libdnet-fix-PF_PACKET-conftest-nested-function.patch \
+ file://CVE-2026-58058.patch \
"
SRC_URI[sha256sum] = "df512492ffd108e53a27a06f26d8635bbe89e0e569455dc8ffef058c035d51b2"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 34/60] nmap: patch CVE-2026-72712
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (32 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 33/60] nmap: patch CVE-2026-58058 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 35/60] netdata: mark CVE-2026-83602 fixed ankur.tyagi85
` (26 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-72712
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../nmap/files/CVE-2026-72712.patch | 46 +++++++++++++++++++
meta-oe/recipes-security/nmap/nmap_7.99.bb | 1 +
2 files changed, 47 insertions(+)
create mode 100644 meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch
diff --git a/meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch b/meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch
new file mode 100644
index 0000000000..f5e81aac0e
--- /dev/null
+++ b/meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch
@@ -0,0 +1,46 @@
+From 120d13b8aca52ec306e50eae9a74fb1bfe49540a Mon Sep 17 00:00:00 2001
+From: dmiller <dmiller@e0a8ed71-7df4-0310-8962-fdc924857419>
+Date: Thu, 11 Jun 2026 18:31:31 +0000
+Subject: [PATCH] Stop parsing on a zero-length packet option
+
+Fixes #3368. Closes #3373.
+
+(cherry picked from commit 7ef4ee030a0023fe22616387a000032e1a678b6a)
+
+CVE: CVE-2026-72712
+Upstream-Status: Backport [https://github.com/nmap/nmap/commit/7ef4ee030a0023fe22616387a000032e1a678b6a]
+
+Dropped changes to the CHANGELOG file.
+
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ nselib/packet.lua | 8 +++++---
+ 1 file changed, 5 insertions(+), 3 deletions(-)
+
+diff --git a/nselib/packet.lua b/nselib/packet.lua
+index ec6db40a2..e17972d88 100644
+--- a/nselib/packet.lua
++++ b/nselib/packet.lua
+@@ -686,10 +686,7 @@ function Packet:parse_options(offset, length)
+ local opt_ptr = 0
+ while opt_ptr < length do
+ local t, l, d
+- options[op] = {}
+-
+ t = self:u8(offset + opt_ptr)
+- options[op].type = t
+ if t==0 or t==1 then
+ l = 1
+ d = nil
+@@ -699,6 +696,11 @@ function Packet:parse_options(offset, length)
+ d = self:raw(offset + opt_ptr + 2, l-2)
+ end
+ end
++ if l==0 then
++ break
++ end
++ options[op] = {}
++ options[op].type = t
+ options[op].len = l
+ options[op].data = d
+ opt_ptr = opt_ptr + l
diff --git a/meta-oe/recipes-security/nmap/nmap_7.99.bb b/meta-oe/recipes-security/nmap/nmap_7.99.bb
index 515623d63d..0cbef990cb 100644
--- a/meta-oe/recipes-security/nmap/nmap_7.99.bb
+++ b/meta-oe/recipes-security/nmap/nmap_7.99.bb
@@ -12,6 +12,7 @@ SRC_URI = "http://nmap.org/dist/${BP}.tar.bz2 \
file://0001-fix-racing-between-build-ncat-and-build-lua.patch \
file://0004-libdnet-fix-PF_PACKET-conftest-nested-function.patch \
file://CVE-2026-58058.patch \
+ file://CVE-2026-72712.patch \
"
SRC_URI[sha256sum] = "df512492ffd108e53a27a06f26d8635bbe89e0e569455dc8ffef058c035d51b2"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 35/60] netdata: mark CVE-2026-83602 fixed
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (33 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 34/60] nmap: patch CVE-2026-72712 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 36/60] nginx: upgrade 1.30.5 -> 1.30.6 ankur.tyagi85
` (25 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Fix identified by NVD is included in the patch release[1] v2.10.4
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-83602
[1]https://github.com/netdata/netdata/pull/22825
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb | 2 ++
1 file changed, 2 insertions(+)
diff --git a/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb b/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb
index ed4c54fbe4..9df846cec9 100644
--- a/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb
+++ b/meta-webserver/recipes-webadmin/netdata/netdata_2.10.4.bb
@@ -167,3 +167,5 @@ FILES:${PN} += "\
"
RDEPENDS:${PN} = "bash python3-core zlib"
+
+CVE_STATUS[CVE-2026-83602] = "fixed-version: fixed in v2.10.4"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 36/60] nginx: upgrade 1.30.5 -> 1.30.6
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (34 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 35/60] netdata: mark CVE-2026-83602 fixed ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 37/60] nginx: set CVE_STATUS for CVE-2026-95101 and CVE-2026-97629 ankur.tyagi85
` (24 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Peter Marko, Khem Raj, Ankur Tyagi
From: Peter Marko <peter.marko@siemens.com>
2026-10-14 nginx-1.30.6 stable and nginx-1.31.7 mainline versions have
been released, with fixes for buffer overflow vulnerability when using
alias with rewrite (CVE-2026-15176), buffer overflow vulnerability when
evaluating string expressions with variables (CVE-2026-93479), request
body injection vulnerability in HTTP/3 (CVE-2026-95101), session forgery
vulnerability when using TLS session ticket key rotation
(CVE-2026-97629), and use-after-free vulnerability when using
ngx_http_ssi_module with AIO (CVE-2026-97205).
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 6cdd413248db5aed93c6cc138cbfe0f83ed81f56)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../recipes-httpd/nginx/{nginx_1.30.5.bb => nginx_1.30.6.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-webserver/recipes-httpd/nginx/{nginx_1.30.5.bb => nginx_1.30.6.bb} (81%)
diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.30.5.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb
similarity index 81%
rename from meta-webserver/recipes-httpd/nginx/nginx_1.30.5.bb
rename to meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb
index 6b638cdd96..5d699e63ce 100644
--- a/meta-webserver/recipes-httpd/nginx/nginx_1.30.5.bb
+++ b/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb
@@ -2,7 +2,7 @@ require nginx.inc
LIC_FILES_CHKSUM = "file://LICENSE;md5=79da1c70d587d3a199af9255ad393f99"
-SRC_URI[sha256sum] = "6c20565aa2325cb82216ae804f4a4ff1875179014759a381c42ddc8e11c4906d"
+SRC_URI[sha256sum] = "3cf46f5ed7504d460125866b7bea99fb357f31d887e2e63b35503310e9b8b6c8"
inherit upstream-version-is-even
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 37/60] nginx: set CVE_STATUS for CVE-2026-95101 and CVE-2026-97629
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (35 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 36/60] nginx: upgrade 1.30.5 -> 1.30.6 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 38/60] mtr: patch CVE-2026-14461 ankur.tyagi85
` (23 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Peter Marko, Khem Raj, Mohammad Abdoli, Ankur Tyagi
From: Peter Marko <peter.marko@siemens.com>
These CVEs are fixed in latest release however still show-up in open
CVE reports. Reason is that the DB contains entries:
{
"lessThan": "*",
"status": "affected",
"version": "1.23.3",
"versionType": "custom"
}
Which should mean that the first affected release is 1.23.3, however
without the upper limit it will match all higher releases.
The entry with >= 1.30.0 && < 1.30.6 cannot change the result as it
works by flagging CVEs where at least one version match is present.
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 959f4c8f098a90c24a818831a5e3dd8090cee641)
Tested-by: Mohammad Abdoli <mominux@gmail.com>
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb | 3 +++
1 file changed, 3 insertions(+)
diff --git a/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb b/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb
index 5d699e63ce..73204da558 100644
--- a/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb
+++ b/meta-webserver/recipes-httpd/nginx/nginx_1.30.6.bb
@@ -6,6 +6,9 @@ SRC_URI[sha256sum] = "3cf46f5ed7504d460125866b7bea99fb357f31d887e2e63b35503310e9
inherit upstream-version-is-even
+CVE_STATUS[CVE-2026-95101] = "fixed-version: Fixed since 1.30.6"
+CVE_STATUS[CVE-2026-97629] = "fixed-version: Fixed since 1.30.6"
+
# Remove following entries when upgrading recipe to 1.32
CVE_STATUS[CVE-2026-42055] = "fixed-version: Fixed since 1.30.3"
CVE_STATUS[CVE-2026-48142] = "fixed-version: Fixed since 1.30.3"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 38/60] mtr: patch CVE-2026-14461
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (36 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 37/60] nginx: set CVE_STATUS for CVE-2026-95101 and CVE-2026-97629 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 39/60] ncp: ignore CVE-2025-14577 and CVE-2026-35087 ankur.tyagi85
` (22 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-14461
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../mtr/mtr/CVE-2026-14461.patch | 32 +++++++++++++++++++
.../recipes-support/mtr/mtr_0.96.bb | 4 ++-
2 files changed, 35 insertions(+), 1 deletion(-)
create mode 100644 meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch
diff --git a/meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch b/meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch
new file mode 100644
index 0000000000..6628d9d7be
--- /dev/null
+++ b/meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch
@@ -0,0 +1,32 @@
+From 4c75fae93d9515f3ecdfecc966b8c6471efb7ea5 Mon Sep 17 00:00:00 2001
+From: "R.E. Wolff" <R.E.Wolff@BitWizard.nl>
+Date: Tue, 16 Jun 2026 11:03:39 +0200
+Subject: [PATCH] =?UTF-8?q?Fixed=20possible=20buffer=20overrun=20in=20asn?=
+ =?UTF-8?q?=20code--=20Micha=C5=82=20Majchrowicz?=
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+(cherry picked from commit 48e1794414d338ce47abc0f27c25ade8788af9c3)
+
+CVE: CVE-2026-14461
+Upstream-Status: Backport [https://github.com/traviscross/mtr/commit/48e1794414d338ce47abc0f27c25ade8788af9c3]
+
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ ui/asn.c | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/ui/asn.c b/ui/asn.c
+index 111c394..487d9e8 100644
+--- a/ui/asn.c
++++ b/ui/asn.c
+@@ -94,6 +94,8 @@ static char *ipinfo_lookup(
+ DEB_syslog(LOG_INFO, "Malloc-txt: %s", UNKN);
+ return xstrdup(UNKN);
+ }
++ // Clip len to PACKETSZ. -- Michał Majchrowicz
++ if (len > PACKETSZ) len = PACKETSZ;
+
+ pt = answer + sizeof(HEADER);
+
diff --git a/meta-networking/recipes-support/mtr/mtr_0.96.bb b/meta-networking/recipes-support/mtr/mtr_0.96.bb
index 9008223264..2716ca92aa 100644
--- a/meta-networking/recipes-support/mtr/mtr_0.96.bb
+++ b/meta-networking/recipes-support/mtr/mtr_0.96.bb
@@ -9,7 +9,9 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263 \
file://ui/mtr.c;beginline=5;endline=16;md5=00a894a39d53726a27386534d1c4e468"
SRCREV = "f392168771570b0fdc104c38dea6bbc2ce585710"
-SRC_URI = "git://github.com/traviscross/mtr;branch=master;protocol=https;tag=v${PV}"
+SRC_URI = "git://github.com/traviscross/mtr;branch=master;protocol=https;tag=v${PV} \
+ file://CVE-2026-14461.patch \
+"
inherit autotools pkgconfig
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 39/60] ncp: ignore CVE-2025-14577 and CVE-2026-35087
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (37 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 38/60] mtr: patch CVE-2026-14461 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 40/60] libvncserver: patch CVE-2026-44988 ankur.tyagi85
` (21 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2025-14577
https://nvd.nist.gov/vuln/detail/cve-2026-35087
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
meta-networking/recipes-support/ncp/ncp_1.2.4.bb | 3 +++
1 file changed, 3 insertions(+)
diff --git a/meta-networking/recipes-support/ncp/ncp_1.2.4.bb b/meta-networking/recipes-support/ncp/ncp_1.2.4.bb
index ec6d918744..19fb258aec 100644
--- a/meta-networking/recipes-support/ncp/ncp_1.2.4.bb
+++ b/meta-networking/recipes-support/ncp/ncp_1.2.4.bb
@@ -29,3 +29,6 @@ do_install() {
}
BBCLASSEXTEND = "native nativesdk"
+
+CVE_STATUS[CVE-2025-14577] = "cpe-incorrect: This vulnerability is for Slican NCP"
+CVE_STATUS[CVE-2026-35087] = "cpe-incorrect: This vulnerability is for Slican NCP"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 40/60] libvncserver: patch CVE-2026-44988
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (38 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 39/60] ncp: ignore CVE-2025-14577 and CVE-2026-35087 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 41/60] libvncserver: patch CVE-2026-32854 ankur.tyagi85
` (20 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44988
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../libvncserver/CVE-2026-44988.patch | 71 +++++++++++++++++++
.../libvncserver/libvncserver_0.9.15.bb | 1 +
2 files changed, 72 insertions(+)
create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch
diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch
new file mode 100644
index 0000000000..e26abc9db7
--- /dev/null
+++ b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch
@@ -0,0 +1,71 @@
+From db5779f2bec717f577fb66321b3b079ff156da95 Mon Sep 17 00:00:00 2001
+From: Kang Hee chan <24s101h0659@sonline20.sen.go.kr>
+Date: Wed, 6 May 2026 21:48:54 +0900
+Subject: [PATCH] libvncclient: fix Tight gradient decoding overflow
+
+(cherry picked from commit 5b270544b85233668b98161323297d418a8f5fd1)
+
+CVE: CVE-2026-44988
+Upstream-Status: Backport [https://github.com/LibVNC/libvncserver/commit/5b270544b85233668b98161323297d418a8f5fd1]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ include/rfb/rfbclient.h | 3 ++-
+ src/libvncclient/tight.c | 10 +++++++---
+ 2 files changed, 9 insertions(+), 4 deletions(-)
+
+diff --git a/include/rfb/rfbclient.h b/include/rfb/rfbclient.h
+index a974ff5f..666dcb90 100644
+--- a/include/rfb/rfbclient.h
++++ b/include/rfb/rfbclient.h
+@@ -314,10 +314,11 @@ typedef struct _rfbClient {
+ rfbBool zlibStreamActive[4];
+
+ /* Filter stuff. Should be initialized by filter initialization code. */
++#define TIGHT_GRADIENT_MAX_WIDTH 2048
+ rfbBool cutZeros;
+ int rectWidth, rectColors;
+ char tightPalette[256*4];
+- uint8_t tightPrevRow[2048*3*sizeof(uint16_t)];
++ uint8_t tightPrevRow[TIGHT_GRADIENT_MAX_WIDTH*3*sizeof(uint16_t)];
+
+ #ifdef LIBVNCSERVER_HAVE_LIBJPEG
+ /** JPEG decoder state (obsolete-- do not use). */
+diff --git a/src/libvncclient/tight.c b/src/libvncclient/tight.c
+index 57a3715b..dad5514f 100644
+--- a/src/libvncclient/tight.c
++++ b/src/libvncclient/tight.c
+@@ -229,6 +229,11 @@ HandleTightBPP (rfbClient* client, int rx, int ry, int rw, int rh)
+ bitsPixel = InitFilterPaletteBPP(client, rw, rh);
+ break;
+ case rfbTightFilterGradient:
++ if (rw > TIGHT_GRADIENT_MAX_WIDTH) {
++ rfbClientLog("Tight Gradient rectangle width %d exceeds maximum %d.\n",
++ rw, TIGHT_GRADIENT_MAX_WIDTH);
++ return FALSE;
++ }
+ filterFn = FilterGradientBPP;
+ bitsPixel = InitFilterGradientBPP(client, rw, rh);
+ break;
+@@ -430,7 +435,7 @@ FilterGradient24 (rfbClient* client, int srcx, int srcy, int numRows)
+ CARDBPP *dst =
+ (CARDBPP *)&client->frameBuffer[(srcy * client->width + srcx) * BPP / 8];
+ int x, y, c;
+- uint8_t thisRow[2048*3];
++ uint8_t thisRow[TIGHT_GRADIENT_MAX_WIDTH*3];
+ uint8_t pix[3];
+ int est[3];
+
+@@ -473,7 +478,7 @@ FilterGradientBPP (rfbClient* client, int srcx, int srcy, int numRows)
+ int x, y, c;
+ CARDBPP *src = (CARDBPP *)client->buffer;
+ uint16_t *thatRow = (uint16_t *)client->tightPrevRow;
+- uint16_t thisRow[2048*3];
++ uint16_t thisRow[TIGHT_GRADIENT_MAX_WIDTH*3];
+ uint16_t pix[3];
+ uint16_t max[3];
+ int shift[3];
+@@ -705,4 +710,3 @@ ReadCompactLen (rfbClient* client)
+ /* LIBVNCSERVER_HAVE_LIBZ and LIBVNCSERVER_HAVE_LIBJPEG */
+ #endif
+ #endif
+-
diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb
index 77612e1626..47e42cd094 100644
--- a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb
+++ b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb
@@ -46,6 +46,7 @@ inherit cmake pkgconfig
SRC_URI = "git://github.com/LibVNC/libvncserver;branch=master;protocol=https;tag=LibVNCServer-${PV} \
file://0001-CMake-require-at-least-CMake-3.5.patch \
+ file://CVE-2026-44988.patch \
"
SRCREV = "9b54b1ec32731bd23158ca014dc18014db4194c3"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 41/60] libvncserver: patch CVE-2026-32854
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (39 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 40/60] libvncserver: patch CVE-2026-44988 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 42/60] libvncserver: patch CVE-2026-32853 ankur.tyagi85
` (19 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-32854
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../libvncserver/CVE-2026-32854.patch | 66 +++++++++++++++++++
.../libvncserver/libvncserver_0.9.15.bb | 1 +
2 files changed, 67 insertions(+)
create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch
diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch
new file mode 100644
index 0000000000..85adf3eba2
--- /dev/null
+++ b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch
@@ -0,0 +1,66 @@
+From bf01ccc67bc8181568af2d1f6e1f6f6888b51bde Mon Sep 17 00:00:00 2001
+From: Kazuma Matsumoto <269371721+y637F9QQ2x@users.noreply.github.com>
+Date: Thu, 19 Mar 2026 17:42:00 +0900
+Subject: [PATCH] libvncserver: fix NULL pointer dereferences in httpd proxy
+ handlers
+
+httpProcessInput() passes the return value of strchr() to atoi()
+and strncmp() without checking for NULL. If a CONNECT request
+contains no colon, or a GET request contains no slash, strchr()
+returns NULL, leading to a segmentation fault.
+
+Add NULL checks before using the strchr() return values.
+
+(cherry picked from commit dc78dee51a7e270e537a541a17befdf2073f5314)
+
+CVE: CVE-2026-32854
+Upstream-Status: Backport [https://github.com/LibVNC/libvncserver/commit/dc78dee51a7e270e537a541a17befdf2073f5314]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ src/libvncserver/httpd.c | 24 ++++++++++++++----------
+ 1 file changed, 14 insertions(+), 10 deletions(-)
+
+diff --git a/src/libvncserver/httpd.c b/src/libvncserver/httpd.c
+index 2186ae54..604e5bf9 100644
+--- a/src/libvncserver/httpd.c
++++ b/src/libvncserver/httpd.c
+@@ -337,10 +337,11 @@ httpProcessInput(rfbScreenInfoPtr rfbScreen)
+
+
+ /* Process the request. */
+- if(rfbScreen->httpEnableProxyConnect) {
++if(rfbScreen->httpEnableProxyConnect) {
+ const static char* PROXY_OK_STR = "HTTP/1.0 200 OK\r\nContent-Type: octet-stream\r\nPragma: no-cache\r\n\r\n";
+ if(!strncmp(buf, "CONNECT ", 8)) {
+- if(atoi(strchr(buf, ':')+1)!=rfbScreen->port) {
++ char *colon = strchr(buf, ':');
++ if(colon == NULL || atoi(colon+1)!=rfbScreen->port) {
+ rfbErr("httpd: CONNECT format invalid.\n");
+ rfbWriteExact(&cl,INVALID_REQUEST_STR, strlen(INVALID_REQUEST_STR));
+ httpCloseSock(rfbScreen);
+@@ -353,14 +354,17 @@ httpProcessInput(rfbScreenInfoPtr rfbScreen)
+ rfbScreen->httpSock = RFB_INVALID_SOCKET;
+ return;
+ }
+- if (!strncmp(buf, "GET ",4) && !strncmp(strchr(buf,'/'),"/proxied.connection HTTP/1.", 27)) {
+- /* proxy connection */
+- rfbLog("httpd: client asked for /proxied.connection\n");
+- rfbWriteExact(&cl,PROXY_OK_STR,strlen(PROXY_OK_STR));
+- rfbNewClientConnection(rfbScreen,rfbScreen->httpSock);
+- rfbScreen->httpSock = RFB_INVALID_SOCKET;
+- return;
+- }
++ if (!strncmp(buf, "GET ",4)) {
++ char *slash = strchr(buf, '/');
++ if (slash != NULL && !strncmp(slash,"/proxied.connection HTTP/1.", 27)) {
++ /* proxy connection */
++ rfbLog("httpd: client asked for /proxied.connection\n");
++ rfbWriteExact(&cl,PROXY_OK_STR,strlen(PROXY_OK_STR));
++ rfbNewClientConnection(rfbScreen,rfbScreen->httpSock);
++ rfbScreen->httpSock = RFB_INVALID_SOCKET;
++ return;
++ }
++ }
+ }
+
+ if (strncmp(buf, "GET ", 4)) {
diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb
index 47e42cd094..9fbec58c72 100644
--- a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb
+++ b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb
@@ -47,6 +47,7 @@ inherit cmake pkgconfig
SRC_URI = "git://github.com/LibVNC/libvncserver;branch=master;protocol=https;tag=LibVNCServer-${PV} \
file://0001-CMake-require-at-least-CMake-3.5.patch \
file://CVE-2026-44988.patch \
+ file://CVE-2026-32854.patch \
"
SRCREV = "9b54b1ec32731bd23158ca014dc18014db4194c3"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 42/60] libvncserver: patch CVE-2026-32853
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (40 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 41/60] libvncserver: patch CVE-2026-32854 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 43/60] libvncserver: patch CVE-2026-50538 ankur.tyagi85
` (18 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-32853
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../libvncserver/CVE-2026-32853.patch | 76 +++++++++++++++++++
.../libvncserver/libvncserver_0.9.15.bb | 1 +
2 files changed, 77 insertions(+)
create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch
diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch
new file mode 100644
index 0000000000..23d6a3df1f
--- /dev/null
+++ b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch
@@ -0,0 +1,76 @@
+From 4d5c0ea960e4a22cd8b8fb3c6e18b5a1b1797783 Mon Sep 17 00:00:00 2001
+From: Kazuma Matsumoto <269371721+y637F9QQ2x@users.noreply.github.com>
+Date: Sun, 22 Mar 2026 20:35:49 +0100
+Subject: [PATCH] libvncclient: add bounds checks to UltraZip subrectangle
+ parsing
+
+HandleUltraZipBPP() iterates over sub-rectangles using numCacheRects
+(derived from the attacker-controlled rect.r.x) without validating
+that the pointer stays within the decompressed data buffer. A malicious
+server can set a large numCacheRects value, causing heap out-of-bounds
+reads via the memcpy calls in the parsing loop.
+
+Add bounds checks before reading the 12-byte subrect header and before
+advancing the pointer by the raw pixel data size. Use uint64_t for the
+raw data size calculation to prevent integer overflow on 32-bit platforms.
+
+(cherry picked from commit 009008e2f4d5a54dd71f422070df3af7b3dbc931)
+
+CVE: CVE-2026-32853
+Upstream-Status: Backport [https://github.com/LibVNC/libvncserver/commit/009008e2f4d5a54dd71f422070df3af7b3dbc931]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ src/libvncclient/ultra.c | 16 +++++++++++++++-
+ 1 file changed, 15 insertions(+), 1 deletion(-)
+
+diff --git a/src/libvncclient/ultra.c b/src/libvncclient/ultra.c
+index 1d3aaba6..5633b8cb 100644
+--- a/src/libvncclient/ultra.c
++++ b/src/libvncclient/ultra.c
+@@ -126,6 +126,7 @@ HandleUltraZipBPP (rfbClient* client, int rx, int ry, int rw, int rh)
+ int toRead=0;
+ int inflateResult=0;
+ unsigned char *ptr=NULL;
++ unsigned char *ptr_end=NULL;
+ lzo_uint uncompressedBytes = ry + (rw * 65535);
+ unsigned int numCacheRects = rx;
+
+@@ -194,11 +195,18 @@ HandleUltraZipBPP (rfbClient* client, int rx, int ry, int rw, int rh)
+
+ /* Put the uncompressed contents of the update on the screen. */
+ ptr = (unsigned char *)client->raw_buffer;
++ ptr_end = ptr + uncompressedBytes;
+ for (i=0; i<numCacheRects; i++)
+ {
+ unsigned short sx, sy, sw, sh;
+ unsigned int se;
+
++ /* subrect header: sx(2) + sy(2) + sw(2) + sh(2) + se(4) = 12 bytes */
++ if (ptr + 12 > ptr_end) {
++ rfbClientLog("UltraZip: subrect %d header exceeds decompressed data bounds\n", i);
++ return FALSE;
++ }
++
+ memcpy((char *)&sx, ptr, 2); ptr += 2;
+ memcpy((char *)&sy, ptr, 2); ptr += 2;
+ memcpy((char *)&sw, ptr, 2); ptr += 2;
+@@ -213,8 +221,13 @@ HandleUltraZipBPP (rfbClient* client, int rx, int ry, int rw, int rh)
+
+ if (se == rfbEncodingRaw)
+ {
++ uint64_t rawBytes = (uint64_t)sw * sh * (BPP / 8);
++ if (rawBytes > (size_t)(ptr_end - ptr)) {
++ rfbClientLog("UltraZip: subrect %d raw data exceeds decompressed data bounds\n", i);
++ return FALSE;
++ }
+ client->GotBitmap(client, (unsigned char *)ptr, sx, sy, sw, sh);
+- ptr += ((sw * sh) * (BPP / 8));
++ ptr += (size_t)rawBytes;
+ }
+ }
+
+@@ -222,3 +235,4 @@ HandleUltraZipBPP (rfbClient* client, int rx, int ry, int rw, int rh)
+ }
+
+ #undef CARDBPP
++
diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb
index 9fbec58c72..e2f995947f 100644
--- a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb
+++ b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb
@@ -48,6 +48,7 @@ SRC_URI = "git://github.com/LibVNC/libvncserver;branch=master;protocol=https;tag
file://0001-CMake-require-at-least-CMake-3.5.patch \
file://CVE-2026-44988.patch \
file://CVE-2026-32854.patch \
+ file://CVE-2026-32853.patch \
"
SRCREV = "9b54b1ec32731bd23158ca014dc18014db4194c3"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 43/60] libvncserver: patch CVE-2026-50538
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (41 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 42/60] libvncserver: patch CVE-2026-32853 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 44/60] swagger-ui: upgrade 5.33.2 -> 5.33.3 ankur.tyagi85
` (17 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50538
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../libvncserver/CVE-2026-50538.patch | 49 +++++++++++++++++++
.../libvncserver/libvncserver_0.9.15.bb | 1 +
2 files changed, 50 insertions(+)
create mode 100644 meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch
diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch
new file mode 100644
index 0000000000..da01736323
--- /dev/null
+++ b/meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch
@@ -0,0 +1,49 @@
+From e824e7d8ea71feccb81aeb34771eb83e052c3fe2 Mon Sep 17 00:00:00 2001
+From: "Bas.Levering" <45083161+Bazskillz@users.noreply.github.com>
+Date: Fri, 29 May 2026 09:08:28 +0200
+Subject: [PATCH] Merge commit from fork
+
+HandleTightBPP's basic-compression loop wrote each batch of decompressed
+rows straight into client->frameBuffer (via FilterCopy/Palette/Gradient)
+and only compared the running total against the rectangle height rh after
+the loop. A malicious or man-in-the-middle server can send a zlib stream
+that decompresses to more rows than rh, so the writes run past the end of
+the framebuffer allocation: an attacker-controlled heap out-of-bounds
+write reachable in a default build (Tight is advertised when built with
+libz+libjpeg), pre-authentication, from one FramebufferUpdate.
+
+Clamp numRows to the remaining height before calling filterFn, matching
+the existing house style (trle.c and the Tight JPEG path already clamp to
+the rectangle height).
+
+Co-authored-by: Bas Levering <basdaniel3@gmail.com>
+(cherry picked from commit 540332be3e0acc566fa64da6f1b4680c72c724dd)
+
+CVE: CVE-2026-50538
+Upstream-Status: Backport [https://github.com/LibVNC/libvncserver/commit/540332be3e0acc566fa64da6f1b4680c72c724dd]
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ src/libvncclient/tight.c | 10 ++++++++++
+ 1 file changed, 10 insertions(+)
+
+diff --git a/src/libvncclient/tight.c b/src/libvncclient/tight.c
+index dad5514f..3ee0d5e0 100644
+--- a/src/libvncclient/tight.c
++++ b/src/libvncclient/tight.c
+@@ -341,6 +341,16 @@ HandleTightBPP (rfbClient* client, int rx, int ry, int rw, int rh)
+
+ numRows = (bufferSize - zs->avail_out) / rowSize;
+
++ /* The decompressed stream is server-controlled and may yield more rows
++ than the rectangle's declared height. filterFn() writes directly into
++ client->frameBuffer, so clamp here before writing to avoid running past
++ the framebuffer (heap out-of-bounds write). The post-loop
++ "rowsProcessed != rh" check happens too late. */
++ if (numRows > rh - rowsProcessed) {
++ rfbClientLog("Tight: too many scan lines after decompression.\n");
++ return FALSE;
++ }
++
+ filterFn(client, rx, ry+rowsProcessed, numRows);
+
+ extraBytes = bufferSize - zs->avail_out - numRows * rowSize;
diff --git a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb
index e2f995947f..ff7327c6cf 100644
--- a/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb
+++ b/meta-oe/recipes-graphics/libvncserver/libvncserver_0.9.15.bb
@@ -49,6 +49,7 @@ SRC_URI = "git://github.com/LibVNC/libvncserver;branch=master;protocol=https;tag
file://CVE-2026-44988.patch \
file://CVE-2026-32854.patch \
file://CVE-2026-32853.patch \
+ file://CVE-2026-50538.patch \
"
SRCREV = "9b54b1ec32731bd23158ca014dc18014db4194c3"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 44/60] swagger-ui: upgrade 5.33.2 -> 5.33.3
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (42 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 43/60] libvncserver: patch CVE-2026-50538 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 45/60] nss: remove compromised eMudhra certificates ankur.tyagi85
` (16 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi, Khem Raj
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://github.com/swagger-api/swagger-ui/releases/tag/v5.33.3
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 67b4387a4d9f2fbc111b52ec6cd3b7620116c6d1)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../swagger-ui/{swagger-ui_5.33.2.bb => swagger-ui_5.33.3.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.33.2.bb => swagger-ui_5.33.3.bb} (94%)
diff --git a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.3.bb
similarity index 94%
rename from meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb
rename to meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.3.bb
index aeee9e4da6..6f69070033 100644
--- a/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.2.bb
+++ b/meta-webserver/recipes-devtools/swagger-ui/swagger-ui_5.33.3.bb
@@ -12,7 +12,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
SRC_URI = "git://github.com/swagger-api/swagger-ui;branch=main;protocol=https;tag=v${PV}"
-SRCREV = "e89a91f13cdee432d97ca9d3d1ac1969ff797036"
+SRCREV = "38ca10e1867a66525751590d8d51011973107ad1"
CVE_STATUS[CVE-2016-1000229] = "fixed-version: fixed since 2.2.1"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 45/60] nss: remove compromised eMudhra certificates
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (43 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 44/60] swagger-ui: upgrade 5.33.2 -> 5.33.3 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 46/60] grpc: update gRPC repo roots ankur.tyagi85
` (15 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Peter Marko
From: Peter Marko <peter.marko@siemens.com>
See https://emudhra.we-have-a-problem.com/
Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
...ve-eMudhra-emSign-Root-CA-C1-and-emS.patch | 272 ++++++++++++++++++
...ve-eMudhra-emSign-Root-CA-G3-from-NS.patch | 143 +++++++++
meta-oe/recipes-support/nss/nss_3.126.bb | 2 +
3 files changed, 417 insertions(+)
create mode 100644 meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch
create mode 100644 meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch
diff --git a/meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch b/meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch
new file mode 100644
index 0000000000..f153eccb86
--- /dev/null
+++ b/meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch
@@ -0,0 +1,272 @@
+From 15734105a44679969114534ac5ceaf08e9630dd3 Mon Sep 17 00:00:00 2001
+From: Anna <anna.weine@mozilla.com>
+Date: Tue, 20 Oct 2026 09:03:59 +0000
+Subject: [PATCH] Bug 2083709 - Remove eMudhra emSign Root CA - C1 and emSign
+ ECC Root CA - C3 from NSS
+
+Differential Revision: https://phabricator.services.mozilla.com/D335517
+
+Upstream-Status: Backport [https://github.com/mozilla/nss/commit/15734105a44679969114534ac5ceaf08e9630dd3]
+Signed-off-by: Peter Marko <peter.marko@siemens.com>
+---
+ nss/lib/ckfw/builtins/certdata.txt | 247 -----------------------------
+ 1 file changed, 247 deletions(-)
+
+diff --git a/nss/lib/ckfw/builtins/certdata.txt b/nss/lib/ckfw/builtins/certdata.txt
+index 0a451693c..05172ca23 100644
+--- a/nss/lib/ckfw/builtins/certdata.txt
++++ b/nss/lib/ckfw/builtins/certdata.txt
+@@ -12221,253 +12221,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+-#
+-# Certificate "emSign Root CA - C1"
+-#
+-# Issuer: CN=emSign Root CA - C1,O=eMudhra Inc,OU=emSign PKI,C=US
+-# Serial Number:00:ae:cf:00:ba:c4:cf:32:f8:43:b2
+-# Subject: CN=emSign Root CA - C1,O=eMudhra Inc,OU=emSign PKI,C=US
+-# Not Valid Before: Sun Feb 18 18:30:00 2018
+-# Not Valid After : Wed Feb 18 18:30:00 2043
+-# Fingerprint (SHA-256): 12:56:09:AA:30:1D:A0:A2:49:B9:7A:82:39:CB:6A:34:21:6F:44:DC:AC:9F:39:54:B1:42:92:F2:E8:C8:60:8F
+-# Fingerprint (SHA1): E7:2E:F1:DF:FC:B2:09:28:CF:5D:D4:D5:67:37:B1:51:CB:86:4F:01
+-CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
+-CKA_TOKEN CK_BBOOL CK_TRUE
+-CKA_PRIVATE CK_BBOOL CK_FALSE
+-CKA_MODIFIABLE CK_BBOOL CK_FALSE
+-CKA_LABEL UTF8 "emSign Root CA - C1"
+-CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
+-CKA_SUBJECT MULTILINE_OCTAL
+-\060\126\061\013\060\011\006\003\125\004\006\023\002\125\123\061
+-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156
+-\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013\145
+-\115\165\144\150\162\141\040\111\156\143\061\034\060\032\006\003
+-\125\004\003\023\023\145\155\123\151\147\156\040\122\157\157\164
+-\040\103\101\040\055\040\103\061
+-END
+-CKA_ID UTF8 "0"
+-CKA_ISSUER MULTILINE_OCTAL
+-\060\126\061\013\060\011\006\003\125\004\006\023\002\125\123\061
+-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156
+-\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013\145
+-\115\165\144\150\162\141\040\111\156\143\061\034\060\032\006\003
+-\125\004\003\023\023\145\155\123\151\147\156\040\122\157\157\164
+-\040\103\101\040\055\040\103\061
+-END
+-CKA_SERIAL_NUMBER MULTILINE_OCTAL
+-\002\013\000\256\317\000\272\304\317\062\370\103\262
+-END
+-CKA_VALUE MULTILINE_OCTAL
+-\060\202\003\163\060\202\002\133\240\003\002\001\002\002\013\000
+-\256\317\000\272\304\317\062\370\103\262\060\015\006\011\052\206
+-\110\206\367\015\001\001\013\005\000\060\126\061\013\060\011\006
+-\003\125\004\006\023\002\125\123\061\023\060\021\006\003\125\004
+-\013\023\012\145\155\123\151\147\156\040\120\113\111\061\024\060
+-\022\006\003\125\004\012\023\013\145\115\165\144\150\162\141\040
+-\111\156\143\061\034\060\032\006\003\125\004\003\023\023\145\155
+-\123\151\147\156\040\122\157\157\164\040\103\101\040\055\040\103
+-\061\060\036\027\015\061\070\060\062\061\070\061\070\063\060\060
+-\060\132\027\015\064\063\060\062\061\070\061\070\063\060\060\060
+-\132\060\126\061\013\060\011\006\003\125\004\006\023\002\125\123
+-\061\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147
+-\156\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013
+-\145\115\165\144\150\162\141\040\111\156\143\061\034\060\032\006
+-\003\125\004\003\023\023\145\155\123\151\147\156\040\122\157\157
+-\164\040\103\101\040\055\040\103\061\060\202\001\042\060\015\006
+-\011\052\206\110\206\367\015\001\001\001\005\000\003\202\001\017
+-\000\060\202\001\012\002\202\001\001\000\317\353\251\271\361\231
+-\005\314\330\050\041\112\363\163\064\121\204\126\020\365\240\117
+-\054\022\343\372\023\232\047\320\317\371\171\032\164\137\035\171
+-\071\374\133\370\160\216\340\222\122\367\344\045\371\124\203\331
+-\035\323\310\132\205\077\136\307\266\007\356\076\300\316\232\257
+-\254\126\102\052\071\045\160\326\277\265\173\066\255\254\366\163
+-\334\315\327\035\212\203\245\373\053\220\025\067\153\034\046\107
+-\334\073\051\126\223\152\263\301\152\072\235\075\365\301\227\070
+-\130\005\213\034\021\343\344\264\270\135\205\035\203\376\170\137
+-\013\105\150\030\110\245\106\163\064\073\376\017\310\166\273\307
+-\030\363\005\321\206\363\205\355\347\271\331\062\255\125\210\316
+-\246\266\221\260\117\254\176\025\043\226\366\077\360\040\064\026
+-\336\012\306\304\004\105\171\177\247\375\276\322\251\245\257\234
+-\305\043\052\367\074\041\154\275\257\217\116\305\072\262\363\064
+-\022\374\337\200\032\111\244\324\251\225\367\236\211\136\242\211
+-\254\224\313\250\150\233\257\212\145\047\315\211\356\335\214\265
+-\153\051\160\103\240\151\013\344\271\017\002\003\001\000\001\243
+-\102\060\100\060\035\006\003\125\035\016\004\026\004\024\376\241
+-\340\160\036\052\003\071\122\132\102\276\134\221\205\172\030\252
+-\115\265\060\016\006\003\125\035\017\001\001\377\004\004\003\002
+-\001\006\060\017\006\003\125\035\023\001\001\377\004\005\060\003
+-\001\001\377\060\015\006\011\052\206\110\206\367\015\001\001\013
+-\005\000\003\202\001\001\000\302\112\126\372\025\041\173\050\242
+-\351\345\035\373\370\055\304\071\226\101\114\073\047\054\304\154
+-\030\025\200\306\254\257\107\131\057\046\013\343\066\260\357\073
+-\376\103\227\111\062\231\022\025\133\337\021\051\377\253\123\370
+-\273\301\170\017\254\234\123\257\127\275\150\214\075\151\063\360
+-\243\240\043\143\073\144\147\042\104\255\325\161\313\126\052\170
+-\222\243\117\022\061\066\066\342\336\376\000\304\243\140\017\047
+-\255\240\260\212\265\066\172\122\241\275\047\364\040\047\142\350
+-\115\224\044\023\344\012\004\351\074\253\056\310\103\011\112\306
+-\141\004\345\111\064\176\323\304\310\365\017\300\252\351\272\124
+-\136\363\143\053\117\117\120\324\376\271\173\231\214\075\300\056
+-\274\002\053\323\304\100\344\212\007\061\036\233\316\046\231\023
+-\373\021\352\232\042\014\021\031\307\136\033\201\120\060\310\226
+-\022\156\347\313\101\177\221\073\242\107\267\124\200\033\334\000
+-\314\232\220\352\303\303\120\006\142\014\060\300\025\110\247\250
+-\131\174\341\256\042\242\342\012\172\017\372\142\253\122\114\341
+-\361\337\312\276\203\015\102
+-END
+-CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
+-CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE
+-CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE
+-
+-# Trust for "emSign Root CA - C1"
+-# Issuer: CN=emSign Root CA - C1,O=eMudhra Inc,OU=emSign PKI,C=US
+-# Serial Number:00:ae:cf:00:ba:c4:cf:32:f8:43:b2
+-# Subject: CN=emSign Root CA - C1,O=eMudhra Inc,OU=emSign PKI,C=US
+-# Not Valid Before: Sun Feb 18 18:30:00 2018
+-# Not Valid After : Wed Feb 18 18:30:00 2043
+-# Fingerprint (SHA-256): 12:56:09:AA:30:1D:A0:A2:49:B9:7A:82:39:CB:6A:34:21:6F:44:DC:AC:9F:39:54:B1:42:92:F2:E8:C8:60:8F
+-# Fingerprint (SHA1): E7:2E:F1:DF:FC:B2:09:28:CF:5D:D4:D5:67:37:B1:51:CB:86:4F:01
+-CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
+-CKA_TOKEN CK_BBOOL CK_TRUE
+-CKA_PRIVATE CK_BBOOL CK_FALSE
+-CKA_MODIFIABLE CK_BBOOL CK_FALSE
+-CKA_LABEL UTF8 "emSign Root CA - C1"
+-CKA_CERT_SHA1_HASH MULTILINE_OCTAL
+-\347\056\361\337\374\262\011\050\317\135\324\325\147\067\261\121
+-\313\206\117\001
+-END
+-CKA_CERT_MD5_HASH MULTILINE_OCTAL
+-\330\343\135\001\041\372\170\132\260\337\272\322\356\052\137\150
+-END
+-CKA_ISSUER MULTILINE_OCTAL
+-\060\126\061\013\060\011\006\003\125\004\006\023\002\125\123\061
+-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156
+-\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013\145
+-\115\165\144\150\162\141\040\111\156\143\061\034\060\032\006\003
+-\125\004\003\023\023\145\155\123\151\147\156\040\122\157\157\164
+-\040\103\101\040\055\040\103\061
+-END
+-CKA_SERIAL_NUMBER MULTILINE_OCTAL
+-\002\013\000\256\317\000\272\304\317\062\370\103\262
+-END
+-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+-CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+-
+-#
+-# Certificate "emSign ECC Root CA - C3"
+-#
+-# Issuer: CN=emSign ECC Root CA - C3,O=eMudhra Inc,OU=emSign PKI,C=US
+-# Serial Number:7b:71:b6:82:56:b8:12:7c:9c:a8
+-# Subject: CN=emSign ECC Root CA - C3,O=eMudhra Inc,OU=emSign PKI,C=US
+-# Not Valid Before: Sun Feb 18 18:30:00 2018
+-# Not Valid After : Wed Feb 18 18:30:00 2043
+-# Fingerprint (SHA-256): BC:4D:80:9B:15:18:9D:78:DB:3E:1D:8C:F4:F9:72:6A:79:5D:A1:64:3C:A5:F1:35:8E:1D:DB:0E:DC:0D:7E:B3
+-# Fingerprint (SHA1): B6:AF:43:C2:9B:81:53:7D:F6:EF:6B:C3:1F:1F:60:15:0C:EE:48:66
+-CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
+-CKA_TOKEN CK_BBOOL CK_TRUE
+-CKA_PRIVATE CK_BBOOL CK_FALSE
+-CKA_MODIFIABLE CK_BBOOL CK_FALSE
+-CKA_LABEL UTF8 "emSign ECC Root CA - C3"
+-CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
+-CKA_SUBJECT MULTILINE_OCTAL
+-\060\132\061\013\060\011\006\003\125\004\006\023\002\125\123\061
+-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156
+-\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013\145
+-\115\165\144\150\162\141\040\111\156\143\061\040\060\036\006\003
+-\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103\040
+-\122\157\157\164\040\103\101\040\055\040\103\063
+-END
+-CKA_ID UTF8 "0"
+-CKA_ISSUER MULTILINE_OCTAL
+-\060\132\061\013\060\011\006\003\125\004\006\023\002\125\123\061
+-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156
+-\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013\145
+-\115\165\144\150\162\141\040\111\156\143\061\040\060\036\006\003
+-\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103\040
+-\122\157\157\164\040\103\101\040\055\040\103\063
+-END
+-CKA_SERIAL_NUMBER MULTILINE_OCTAL
+-\002\012\173\161\266\202\126\270\022\174\234\250
+-END
+-CKA_VALUE MULTILINE_OCTAL
+-\060\202\002\053\060\202\001\261\240\003\002\001\002\002\012\173
+-\161\266\202\126\270\022\174\234\250\060\012\006\010\052\206\110
+-\316\075\004\003\003\060\132\061\013\060\011\006\003\125\004\006
+-\023\002\125\123\061\023\060\021\006\003\125\004\013\023\012\145
+-\155\123\151\147\156\040\120\113\111\061\024\060\022\006\003\125
+-\004\012\023\013\145\115\165\144\150\162\141\040\111\156\143\061
+-\040\060\036\006\003\125\004\003\023\027\145\155\123\151\147\156
+-\040\105\103\103\040\122\157\157\164\040\103\101\040\055\040\103
+-\063\060\036\027\015\061\070\060\062\061\070\061\070\063\060\060
+-\060\132\027\015\064\063\060\062\061\070\061\070\063\060\060\060
+-\132\060\132\061\013\060\011\006\003\125\004\006\023\002\125\123
+-\061\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147
+-\156\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013
+-\145\115\165\144\150\162\141\040\111\156\143\061\040\060\036\006
+-\003\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103
+-\040\122\157\157\164\040\103\101\040\055\040\103\063\060\166\060
+-\020\006\007\052\206\110\316\075\002\001\006\005\053\201\004\000
+-\042\003\142\000\004\375\245\141\256\173\046\020\035\351\267\042
+-\060\256\006\364\201\263\261\102\161\225\071\274\323\122\343\257
+-\257\371\362\227\065\222\066\106\016\207\225\215\271\071\132\351
+-\273\337\320\376\310\007\101\074\273\125\157\203\243\152\373\142
+-\260\201\211\002\160\175\110\305\112\343\351\042\124\042\115\223
+-\273\102\014\257\167\234\043\246\175\327\141\021\316\145\307\370
+-\177\376\365\362\251\243\102\060\100\060\035\006\003\125\035\016
+-\004\026\004\024\373\132\110\320\200\040\100\362\250\351\000\007
+-\151\031\167\247\346\303\364\317\060\016\006\003\125\035\017\001
+-\001\377\004\004\003\002\001\006\060\017\006\003\125\035\023\001
+-\001\377\004\005\060\003\001\001\377\060\012\006\010\052\206\110
+-\316\075\004\003\003\003\150\000\060\145\002\061\000\264\330\057
+-\002\211\375\266\114\142\272\103\116\023\204\162\265\256\335\034
+-\336\326\265\334\126\217\130\100\132\055\336\040\114\042\203\312
+-\223\250\176\356\022\100\307\326\207\117\370\337\205\002\060\034
+-\024\144\344\174\226\203\021\234\260\321\132\141\113\246\017\111
+-\323\000\374\241\374\344\245\377\177\255\327\060\320\307\167\177
+-\276\201\007\125\060\120\040\024\365\127\070\012\250\061\121
+-END
+-CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
+-CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE
+-CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE
+-
+-# Trust for "emSign ECC Root CA - C3"
+-# Issuer: CN=emSign ECC Root CA - C3,O=eMudhra Inc,OU=emSign PKI,C=US
+-# Serial Number:7b:71:b6:82:56:b8:12:7c:9c:a8
+-# Subject: CN=emSign ECC Root CA - C3,O=eMudhra Inc,OU=emSign PKI,C=US
+-# Not Valid Before: Sun Feb 18 18:30:00 2018
+-# Not Valid After : Wed Feb 18 18:30:00 2043
+-# Fingerprint (SHA-256): BC:4D:80:9B:15:18:9D:78:DB:3E:1D:8C:F4:F9:72:6A:79:5D:A1:64:3C:A5:F1:35:8E:1D:DB:0E:DC:0D:7E:B3
+-# Fingerprint (SHA1): B6:AF:43:C2:9B:81:53:7D:F6:EF:6B:C3:1F:1F:60:15:0C:EE:48:66
+-CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
+-CKA_TOKEN CK_BBOOL CK_TRUE
+-CKA_PRIVATE CK_BBOOL CK_FALSE
+-CKA_MODIFIABLE CK_BBOOL CK_FALSE
+-CKA_LABEL UTF8 "emSign ECC Root CA - C3"
+-CKA_CERT_SHA1_HASH MULTILINE_OCTAL
+-\266\257\103\302\233\201\123\175\366\357\153\303\037\037\140\025
+-\014\356\110\146
+-END
+-CKA_CERT_MD5_HASH MULTILINE_OCTAL
+-\076\123\263\243\201\356\327\020\370\323\260\035\027\222\365\325
+-END
+-CKA_ISSUER MULTILINE_OCTAL
+-\060\132\061\013\060\011\006\003\125\004\006\023\002\125\123\061
+-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156
+-\040\120\113\111\061\024\060\022\006\003\125\004\012\023\013\145
+-\115\165\144\150\162\141\040\111\156\143\061\040\060\036\006\003
+-\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103\040
+-\122\157\157\164\040\103\101\040\055\040\103\063
+-END
+-CKA_SERIAL_NUMBER MULTILINE_OCTAL
+-\002\012\173\161\266\202\126\270\022\174\234\250
+-END
+-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+-CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+-
+ #
+ # Certificate "Hongkong Post Root CA 3"
+ #
diff --git a/meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch b/meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch
new file mode 100644
index 0000000000..3d999e16dd
--- /dev/null
+++ b/meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch
@@ -0,0 +1,143 @@
+From 0a2b0c75fa036930d98331b721c0780693a3e17a Mon Sep 17 00:00:00 2001
+From: Anna <anna.weine@mozilla.com>
+Date: Tue, 20 Oct 2026 10:05:35 +0000
+Subject: [PATCH] Bug 2084101 - Remove eMudhra emSign Root CA - G3 from NSS
+
+Differential Revision: https://phabricator.services.mozilla.com/D335548
+
+Upstream-Status: Backport [https://github.com/mozilla/nss/commit/0a2b0c75fa036930d98331b721c0780693a3e17a]
+Signed-off-by: Peter Marko <peter.marko@siemens.com>
+---
+ nss/lib/ckfw/builtins/certdata.txt | 119 -----------------------------
+ 1 file changed, 119 deletions(-)
+
+diff --git a/nss/lib/ckfw/builtins/certdata.txt b/nss/lib/ckfw/builtins/certdata.txt
+index 05172ca23..9ee50e8d5 100644
+--- a/nss/lib/ckfw/builtins/certdata.txt
++++ b/nss/lib/ckfw/builtins/certdata.txt
+@@ -12102,125 +12102,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+ CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+ CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+
+-#
+-# Certificate "emSign ECC Root CA - G3"
+-#
+-# Issuer: CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN
+-# Serial Number:3c:f6:07:a9:68:70:0e:da:8b:84
+-# Subject: CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN
+-# Not Valid Before: Sun Feb 18 18:30:00 2018
+-# Not Valid After : Wed Feb 18 18:30:00 2043
+-# Fingerprint (SHA-256): 86:A1:EC:BA:08:9C:4A:8D:3B:BE:27:34:C6:12:BA:34:1D:81:3E:04:3C:F9:E8:A8:62:CD:5C:57:A3:6B:BE:6B
+-# Fingerprint (SHA1): 30:43:FA:4F:F2:57:DC:A0:C3:80:EE:2E:58:EA:78:B2:3F:E6:BB:C1
+-CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE
+-CKA_TOKEN CK_BBOOL CK_TRUE
+-CKA_PRIVATE CK_BBOOL CK_FALSE
+-CKA_MODIFIABLE CK_BBOOL CK_FALSE
+-CKA_LABEL UTF8 "emSign ECC Root CA - G3"
+-CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509
+-CKA_SUBJECT MULTILINE_OCTAL
+-\060\153\061\013\060\011\006\003\125\004\006\023\002\111\116\061
+-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156
+-\040\120\113\111\061\045\060\043\006\003\125\004\012\023\034\145
+-\115\165\144\150\162\141\040\124\145\143\150\156\157\154\157\147
+-\151\145\163\040\114\151\155\151\164\145\144\061\040\060\036\006
+-\003\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103
+-\040\122\157\157\164\040\103\101\040\055\040\107\063
+-END
+-CKA_ID UTF8 "0"
+-CKA_ISSUER MULTILINE_OCTAL
+-\060\153\061\013\060\011\006\003\125\004\006\023\002\111\116\061
+-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156
+-\040\120\113\111\061\045\060\043\006\003\125\004\012\023\034\145
+-\115\165\144\150\162\141\040\124\145\143\150\156\157\154\157\147
+-\151\145\163\040\114\151\155\151\164\145\144\061\040\060\036\006
+-\003\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103
+-\040\122\157\157\164\040\103\101\040\055\040\107\063
+-END
+-CKA_SERIAL_NUMBER MULTILINE_OCTAL
+-\002\012\074\366\007\251\150\160\016\332\213\204
+-END
+-CKA_VALUE MULTILINE_OCTAL
+-\060\202\002\116\060\202\001\323\240\003\002\001\002\002\012\074
+-\366\007\251\150\160\016\332\213\204\060\012\006\010\052\206\110
+-\316\075\004\003\003\060\153\061\013\060\011\006\003\125\004\006
+-\023\002\111\116\061\023\060\021\006\003\125\004\013\023\012\145
+-\155\123\151\147\156\040\120\113\111\061\045\060\043\006\003\125
+-\004\012\023\034\145\115\165\144\150\162\141\040\124\145\143\150
+-\156\157\154\157\147\151\145\163\040\114\151\155\151\164\145\144
+-\061\040\060\036\006\003\125\004\003\023\027\145\155\123\151\147
+-\156\040\105\103\103\040\122\157\157\164\040\103\101\040\055\040
+-\107\063\060\036\027\015\061\070\060\062\061\070\061\070\063\060
+-\060\060\132\027\015\064\063\060\062\061\070\061\070\063\060\060
+-\060\132\060\153\061\013\060\011\006\003\125\004\006\023\002\111
+-\116\061\023\060\021\006\003\125\004\013\023\012\145\155\123\151
+-\147\156\040\120\113\111\061\045\060\043\006\003\125\004\012\023
+-\034\145\115\165\144\150\162\141\040\124\145\143\150\156\157\154
+-\157\147\151\145\163\040\114\151\155\151\164\145\144\061\040\060
+-\036\006\003\125\004\003\023\027\145\155\123\151\147\156\040\105
+-\103\103\040\122\157\157\164\040\103\101\040\055\040\107\063\060
+-\166\060\020\006\007\052\206\110\316\075\002\001\006\005\053\201
+-\004\000\042\003\142\000\004\043\245\014\270\055\022\365\050\363
+-\261\262\335\342\002\022\200\236\071\137\111\115\237\311\045\064
+-\131\164\354\273\006\034\347\300\162\257\350\256\057\341\101\124
+-\207\024\250\112\262\350\174\202\346\133\152\265\334\263\165\316
+-\213\006\320\206\043\277\106\325\216\017\077\004\364\327\034\222
+-\176\366\245\143\302\365\137\216\056\117\241\030\031\002\053\062
+-\012\202\144\175\026\223\321\243\102\060\100\060\035\006\003\125
+-\035\016\004\026\004\024\174\135\002\204\023\324\314\212\233\201
+-\316\027\034\056\051\036\234\110\143\102\060\016\006\003\125\035
+-\017\001\001\377\004\004\003\002\001\006\060\017\006\003\125\035
+-\023\001\001\377\004\005\060\003\001\001\377\060\012\006\010\052
+-\206\110\316\075\004\003\003\003\151\000\060\146\002\061\000\276
+-\363\141\317\002\020\035\144\225\007\270\030\156\210\205\005\057
+-\203\010\027\220\312\037\212\114\350\015\033\172\261\255\325\201
+-\011\107\357\073\254\010\004\174\134\231\261\355\107\007\322\002
+-\061\000\235\272\125\374\251\112\350\355\355\346\166\001\102\173
+-\310\370\140\331\215\121\213\125\073\373\214\173\353\145\011\303
+-\370\226\315\107\250\202\362\026\125\167\044\176\022\020\225\004
+-\054\243
+-END
+-CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE
+-CKA_NSS_SERVER_DISTRUST_AFTER CK_BBOOL CK_FALSE
+-CKA_NSS_EMAIL_DISTRUST_AFTER CK_BBOOL CK_FALSE
+-
+-# Trust for "emSign ECC Root CA - G3"
+-# Issuer: CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN
+-# Serial Number:3c:f6:07:a9:68:70:0e:da:8b:84
+-# Subject: CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN
+-# Not Valid Before: Sun Feb 18 18:30:00 2018
+-# Not Valid After : Wed Feb 18 18:30:00 2043
+-# Fingerprint (SHA-256): 86:A1:EC:BA:08:9C:4A:8D:3B:BE:27:34:C6:12:BA:34:1D:81:3E:04:3C:F9:E8:A8:62:CD:5C:57:A3:6B:BE:6B
+-# Fingerprint (SHA1): 30:43:FA:4F:F2:57:DC:A0:C3:80:EE:2E:58:EA:78:B2:3F:E6:BB:C1
+-CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST
+-CKA_TOKEN CK_BBOOL CK_TRUE
+-CKA_PRIVATE CK_BBOOL CK_FALSE
+-CKA_MODIFIABLE CK_BBOOL CK_FALSE
+-CKA_LABEL UTF8 "emSign ECC Root CA - G3"
+-CKA_CERT_SHA1_HASH MULTILINE_OCTAL
+-\060\103\372\117\362\127\334\240\303\200\356\056\130\352\170\262
+-\077\346\273\301
+-END
+-CKA_CERT_MD5_HASH MULTILINE_OCTAL
+-\316\013\162\321\237\210\216\320\120\003\350\343\270\213\147\100
+-END
+-CKA_ISSUER MULTILINE_OCTAL
+-\060\153\061\013\060\011\006\003\125\004\006\023\002\111\116\061
+-\023\060\021\006\003\125\004\013\023\012\145\155\123\151\147\156
+-\040\120\113\111\061\045\060\043\006\003\125\004\012\023\034\145
+-\115\165\144\150\162\141\040\124\145\143\150\156\157\154\157\147
+-\151\145\163\040\114\151\155\151\164\145\144\061\040\060\036\006
+-\003\125\004\003\023\027\145\155\123\151\147\156\040\105\103\103
+-\040\122\157\157\164\040\103\101\040\055\040\107\063
+-END
+-CKA_SERIAL_NUMBER MULTILINE_OCTAL
+-\002\012\074\366\007\251\150\160\016\332\213\204
+-END
+-CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR
+-CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST
+-CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE
+-
+ #
+ # Certificate "Hongkong Post Root CA 3"
+ #
diff --git a/meta-oe/recipes-support/nss/nss_3.126.bb b/meta-oe/recipes-support/nss/nss_3.126.bb
index f26e70539f..2caf15302b 100644
--- a/meta-oe/recipes-support/nss/nss_3.126.bb
+++ b/meta-oe/recipes-support/nss/nss_3.126.bb
@@ -32,6 +32,8 @@ SRC_URI = "https://ftp.mozilla.org/pub/security/nss/releases/${VERSION_DIR}/src/
file://0005-nss-does-not-build-on-mips-with-clang-because-wrong-.patch \
file://0006-Fix-nss-multilib-build-on-openSUSE-11.x-32bit.patch \
file://0007-freebl-add-a-configure-option-to-disable-ARM-HW-cryp.patch \
+ file://0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch \
+ file://0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch \
"
SRC_URI[sha256sum] = "7aa07c758be1453d82d739240b249ffb7aef0041be488067e1c0f348e1f9e337"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 46/60] grpc: update gRPC repo roots
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (44 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 45/60] nss: remove compromised eMudhra certificates ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 47/60] python3-grpcio: " ankur.tyagi85
` (14 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Peter Marko
From: Peter Marko <peter.marko@siemens.com>
See https://emudhra.we-have-a-problem.com/
Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
...curity-Update-gRPC-repo-roots.-43699.patch | 2617 +++++++++++++++++
meta-oe/recipes-devtools/grpc/grpc_1.84.0.bb | 1 +
2 files changed, 2618 insertions(+)
create mode 100644 meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch
diff --git a/meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch b/meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch
new file mode 100644
index 0000000000..35806a18f1
--- /dev/null
+++ b/meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch
@@ -0,0 +1,2617 @@
+From 8b32af3bf498c2ba9667410eaa8c836e700e97e6 Mon Sep 17 00:00:00 2001
+From: Matthew Stevenson <mattstev@google.com>
+Date: Tue, 20 Oct 2026 15:07:37 -0700
+Subject: [PATCH] [security] Update gRPC repo roots. (#43699)
+
+Context: https://emudhra.we-have-a-problem.com/
+
+This PR was created by running
+
+```
+curl "https://chromium.googlesource.com/chromium/src/+/refs/heads/main/net/data/ssl/chrome_root_store/root_store.certs?format=TEXT" | base64 -d > etc/roots.pem
+```
+
+Following https://github.com/certifi/python-certifi/pull/440 and https://github.com/certifi/python-certifi/issues/439 (and other similar decisions across the industry), the `emSign Root CA - G1` is preserved.
+
+Closes #43699
+
+COPYBARA_INTEGRATE_REVIEW=https://github.com/grpc/grpc/pull/43699 from matthewstevenson88:root-update 294a8b29e8f18e286e82f64eba19549309c0efa4
+PiperOrigin-RevId: 1003426346
+
+Upstream-Status: Backport [https://github.com/sergiitk/grpc/commit/8b32af3bf498c2ba9667410eaa8c836e700e97e6]
+Signed-off-by: Peter Marko <peter.marko@siemens.com>
+---
+ etc/roots.pem | 2483 ++++++++++---------------------------------------
+ 1 file changed, 505 insertions(+), 1978 deletions(-)
+
+diff --git a/etc/roots.pem b/etc/roots.pem
+index 4c535adeba..69d9e43eb9 100644
+--- a/etc/roots.pem
++++ b/etc/roots.pem
+@@ -509,91 +509,6 @@ VoNzcOSGGtIxQbovvi0TWnZvTuhOgQ4/WwMioBK+ZlgRSssDxLQqKi2WF+A5VLxI
+ 03YnnZotBqbJ7DnSq9ufmgsnAjUpsUCV5/nonFWIGUbWtzT1fs45mtk48VH3Tyw=
+ -----END CERTIFICATE-----
+
+-# f356bea244b7a91eb35d53ca9ad7864ace018e2d35d5f8f96ddf68a6f41aa474
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number: 6643877497813316402 (0x5c33cb622c5fb332)
+- Signature Algorithm: sha256WithRSAEncryption
+- Issuer: CN = Atos TrustedRoot 2011, O = Atos, C = DE
+- Validity
+- Not Before: Jul 7 14:58:30 2011 GMT
+- Not After : Dec 31 23:59:59 2030 GMT
+- Subject: CN = Atos TrustedRoot 2011, O = Atos, C = DE
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:95:85:3b:97:6f:2a:3b:2e:3b:cf:a6:f3:29:35:
+- be:cf:18:ac:3e:aa:d9:f8:4d:a0:3e:1a:47:b9:bc:
+- 9a:df:f2:fe:cc:3e:47:e8:7a:96:c2:24:8e:35:f4:
+- a9:0c:fc:82:fd:6d:c1:72:62:27:bd:ea:6b:eb:e7:
+- 8a:cc:54:3e:90:50:cf:80:d4:95:fb:e8:b5:82:d4:
+- 14:c5:b6:a9:55:25:57:db:b1:50:f6:b0:60:64:59:
+- 7a:69:cf:03:b7:6f:0d:be:ca:3e:6f:74:72:ea:aa:
+- 30:2a:73:62:be:49:91:61:c8:11:fe:0e:03:2a:f7:
+- 6a:20:dc:02:15:0d:5e:15:6a:fc:e3:82:c1:b5:c5:
+- 9d:64:09:6c:a3:59:98:07:27:c7:1b:96:2b:61:74:
+- 71:6c:43:f1:f7:35:89:10:e0:9e:ec:55:a1:37:22:
+- a2:87:04:05:2c:47:7d:b4:1c:b9:62:29:66:28:ca:
+- b7:e1:93:f5:a4:94:03:99:b9:70:85:b5:e6:48:ea:
+- 8d:50:fc:d9:de:cc:6f:07:0e:dd:0b:72:9d:80:30:
+- 16:07:95:3f:28:0e:fd:c5:75:4f:53:d6:74:9a:b4:
+- 24:2e:8e:02:91:cf:76:c5:9b:1e:55:74:9c:78:21:
+- b1:f0:2d:f1:0b:9f:c2:d5:96:18:1f:f0:54:22:7a:
+- 8c:07
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Subject Key Identifier:
+- A7:A5:06:B1:2C:A6:09:60:EE:D1:97:E9:70:AE:BC:3B:19:6C:DB:21
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Authority Key Identifier:
+- keyid:A7:A5:06:B1:2C:A6:09:60:EE:D1:97:E9:70:AE:BC:3B:19:6C:DB:21
+-
+- X509v3 Certificate Policies:
+- Policy: 1.3.6.1.4.1.6189.3.4.1.1
+-
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- Signature Algorithm: sha256WithRSAEncryption
+- 26:77:34:db:94:48:86:2a:41:9d:2c:3e:06:90:60:c4:8c:ac:
+- 0b:54:b8:1f:b9:7b:d3:07:39:e4:fa:3e:7b:b2:3d:4e:ed:9f:
+- 23:bd:97:f3:6b:5c:ef:ee:fd:40:a6:df:a1:93:a1:0a:86:ac:
+- ef:20:d0:79:01:bd:78:f7:19:d8:24:31:34:04:01:a6:ba:15:
+- 9a:c3:27:dc:d8:4f:0f:cc:18:63:ff:99:0f:0e:91:6b:75:16:
+- e1:21:fc:d8:26:c7:47:b7:a6:cf:58:72:71:7e:ba:e1:4d:95:
+- 47:3b:c9:af:6d:a1:b4:c1:ec:89:f6:b4:0f:38:b5:e2:64:dc:
+- 25:cf:a6:db:eb:9a:5c:99:a1:c5:08:de:fd:e6:da:d5:d6:5a:
+- 45:0c:c4:b7:c2:b5:14:ef:b4:11:ff:0e:15:b5:f5:f5:db:c6:
+- bd:eb:5a:a7:f0:56:22:a9:3c:65:54:c6:15:a8:bd:86:9e:cd:
+- 83:96:68:7a:71:81:89:e1:0b:e1:ea:11:1b:68:08:cc:69:9e:
+- ec:9e:41:9e:44:32:26:7a:e2:87:0a:71:3d:eb:e4:5a:a4:d2:
+- db:c5:cd:c6:de:60:7f:b9:f3:4f:44:92:ef:2a:b7:18:3e:a7:
+- 19:d9:0b:7d:b1:37:41:42:b0:ba:60:1d:f2:fe:09:11:b0:f0:
+- 87:7b:a7:9d
+------BEGIN CERTIFICATE-----
+-MIIDdzCCAl+gAwIBAgIIXDPLYixfszIwDQYJKoZIhvcNAQELBQAwPDEeMBwGA1UE
+-AwwVQXRvcyBUcnVzdGVkUm9vdCAyMDExMQ0wCwYDVQQKDARBdG9zMQswCQYDVQQG
+-EwJERTAeFw0xMTA3MDcxNDU4MzBaFw0zMDEyMzEyMzU5NTlaMDwxHjAcBgNVBAMM
+-FUF0b3MgVHJ1c3RlZFJvb3QgMjAxMTENMAsGA1UECgwEQXRvczELMAkGA1UEBhMC
+-REUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVhTuXbyo7LjvPpvMp
+-Nb7PGKw+qtn4TaA+Gke5vJrf8v7MPkfoepbCJI419KkM/IL9bcFyYie96mvr54rM
+-VD6QUM+A1JX76LWC1BTFtqlVJVfbsVD2sGBkWXppzwO3bw2+yj5vdHLqqjAqc2K+
+-SZFhyBH+DgMq92og3AIVDV4VavzjgsG1xZ1kCWyjWZgHJ8cblithdHFsQ/H3NYkQ
+-4J7sVaE3IqKHBAUsR320HLliKWYoyrfhk/WklAOZuXCFteZI6o1Q/NnezG8HDt0L
+-cp2AMBYHlT8oDv3FdU9T1nSatCQujgKRz3bFmx5VdJx4IbHwLfELn8LVlhgf8FQi
+-eowHAgMBAAGjfTB7MB0GA1UdDgQWBBSnpQaxLKYJYO7Rl+lwrrw7GWzbITAPBgNV
+-HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFKelBrEspglg7tGX6XCuvDsZbNshMBgG
+-A1UdIAQRMA8wDQYLKwYBBAGwLQMEAQEwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3
+-DQEBCwUAA4IBAQAmdzTblEiGKkGdLD4GkGDEjKwLVLgfuXvTBznk+j57sj1O7Z8j
+-vZfza1zv7v1Apt+hk6EKhqzvINB5Ab149xnYJDE0BAGmuhWawyfc2E8PzBhj/5kP
+-DpFrdRbhIfzYJsdHt6bPWHJxfrrhTZVHO8mvbaG0weyJ9rQPOLXiZNwlz6bb65pc
+-maHFCN795trV1lpFDMS3wrUU77QR/w4VtfX128a961qn8FYiqTxlVMYVqL2Gns2D
+-lmh6cYGJ4Qvh6hEbaAjMaZ7snkGeRDImeuKHCnE96+RapNLbxc3G3mB/ufNPRJLv
+-KrcYPqcZ2Qt9sTdBQrC6YB3y/gkRsPCHe6ed
+------END CERTIFICATE-----
+-
+ # 57de0583efd2b26e0361da99da9df4648def7ee8441c3b728afa9bcde0f9b26a
+ Certificate:
+ Data:
+@@ -1085,84 +1000,6 @@ PuXaTH4MNMn5X7azKFGnpyuqSfqNZSlO42sTp5SjLVFteAxEy9/eCG/Oo2Sr05WE
+ QRBdJ3NghVdJIgc=
+ -----END CERTIFICATE-----
+
+-# eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number: 35210227249154 (0x200605167002)
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = RO, O = certSIGN, OU = certSIGN ROOT CA
+- Validity
+- Not Before: Jul 4 17:20:04 2006 GMT
+- Not After : Jul 4 17:20:04 2031 GMT
+- Subject: C = RO, O = certSIGN, OU = certSIGN ROOT CA
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:b7:33:b9:7e:c8:25:4a:8e:b5:db:b4:28:1b:aa:
+- 57:90:e8:d1:22:d3:64:ba:d3:93:e8:d4:ac:86:61:
+- 40:6a:60:57:68:54:84:4d:bc:6a:54:02:05:ff:df:
+- 9b:9a:2a:ae:5d:07:8f:4a:c3:28:7f:ef:fb:2b:fa:
+- 79:f1:c7:ad:f0:10:53:24:90:8b:66:c9:a8:88:ab:
+- af:5a:a3:00:e9:be:ba:46:ee:5b:73:7b:2c:17:82:
+- 81:5e:62:2c:a1:02:65:b3:bd:c5:2b:00:7e:c4:fc:
+- 03:33:57:0d:ed:e2:fa:ce:5d:45:d6:38:cd:35:b6:
+- b2:c1:d0:9c:81:4a:aa:e4:b2:01:5c:1d:8f:5f:99:
+- c4:b1:ad:db:88:21:eb:90:08:82:80:f3:30:a3:43:
+- e6:90:82:ae:55:28:49:ed:5b:d7:a9:10:38:0e:fe:
+- 8f:4c:5b:9b:46:ea:41:f5:b0:08:74:c3:d0:88:33:
+- b6:7c:d7:74:df:dc:84:d1:43:0e:75:39:a1:25:40:
+- 28:ea:78:cb:0e:2c:2e:39:9d:8c:8b:6e:16:1c:2f:
+- 26:82:10:e2:e3:65:94:0a:04:c0:5e:f7:5d:5b:f8:
+- 10:e2:d0:ba:7a:4b:fb:de:37:00:00:1a:5b:28:e3:
+- d2:9c:73:3e:32:87:98:a1:c9:51:2f:d7:de:ac:33:
+- b3:4f
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage: critical
+- Digital Signature, Non Repudiation, Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- E0:8C:9B:DB:25:49:B3:F1:7C:86:D6:B2:42:87:0B:D0:6B:A0:D9:E4
+- Signature Algorithm: sha1WithRSAEncryption
+- 3e:d2:1c:89:2e:35:fc:f8:75:dd:e6:7f:65:88:f4:72:4c:c9:
+- 2c:d7:32:4e:f3:dd:19:79:47:bd:8e:3b:5b:93:0f:50:49:24:
+- 13:6b:14:06:72:ef:09:d3:a1:a1:e3:40:84:c9:e7:18:32:74:
+- 3c:48:6e:0f:9f:4b:d4:f7:1e:d3:93:86:64:54:97:63:72:50:
+- d5:55:cf:fa:20:93:02:a2:9b:c3:23:93:4e:16:55:76:a0:70:
+- 79:6d:cd:21:1f:cf:2f:2d:bc:19:e3:88:31:f8:59:1a:81:09:
+- c8:97:a6:74:c7:60:c4:5b:cc:57:8e:b2:75:fd:1b:02:09:db:
+- 59:6f:72:93:69:f7:31:41:d6:88:38:bf:87:b2:bd:16:79:f9:
+- aa:e4:be:88:25:dd:61:27:23:1c:b5:31:07:04:36:b4:1a:90:
+- bd:a0:74:71:50:89:6d:bc:14:e3:0f:86:ae:f1:ab:3e:c7:a0:
+- 09:cc:a3:48:d1:e0:db:64:e7:92:b5:cf:af:72:43:70:8b:f9:
+- c3:84:3c:13:aa:7e:92:9b:57:53:93:fa:70:c2:91:0e:31:f9:
+- 9b:67:5d:e9:96:38:5e:5f:b3:73:4e:88:15:67:de:9e:76:10:
+- 62:20:be:55:69:95:43:00:39:4d:f6:ee:b0:5a:4e:49:44:54:
+- 58:5f:42:83
+------BEGIN CERTIFICATE-----
+-MIIDODCCAiCgAwIBAgIGIAYFFnACMA0GCSqGSIb3DQEBBQUAMDsxCzAJBgNVBAYT
+-AlJPMREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBD
+-QTAeFw0wNjA3MDQxNzIwMDRaFw0zMTA3MDQxNzIwMDRaMDsxCzAJBgNVBAYTAlJP
+-MREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBDQTCC
+-ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALczuX7IJUqOtdu0KBuqV5Do
+-0SLTZLrTk+jUrIZhQGpgV2hUhE28alQCBf/fm5oqrl0Hj0rDKH/v+yv6efHHrfAQ
+-UySQi2bJqIirr1qjAOm+ukbuW3N7LBeCgV5iLKECZbO9xSsAfsT8AzNXDe3i+s5d
+-RdY4zTW2ssHQnIFKquSyAVwdj1+ZxLGt24gh65AIgoDzMKND5pCCrlUoSe1b16kQ
+-OA7+j0xbm0bqQfWwCHTD0IgztnzXdN/chNFDDnU5oSVAKOp4yw4sLjmdjItuFhwv
+-JoIQ4uNllAoEwF73XVv4EOLQunpL+943AAAaWyjj0pxzPjKHmKHJUS/X3qwzs08C
+-AwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAcYwHQYDVR0O
+-BBYEFOCMm9slSbPxfIbWskKHC9BroNnkMA0GCSqGSIb3DQEBBQUAA4IBAQA+0hyJ
+-LjX8+HXd5n9liPRyTMks1zJO890ZeUe9jjtbkw9QSSQTaxQGcu8J06Gh40CEyecY
+-MnQ8SG4Pn0vU9x7Tk4ZkVJdjclDVVc/6IJMCopvDI5NOFlV2oHB5bc0hH88vLbwZ
+-44gx+FkagQnIl6Z0x2DEW8xXjrJ1/RsCCdtZb3KTafcxQdaIOL+Hsr0Wefmq5L6I
+-Jd1hJyMctTEHBDa0GpC9oHRxUIltvBTjD4au8as+x6AJzKNI0eDbZOeStc+vckNw
+-i/nDhDwTqn6Sm1dTk/pwwpEOMfmbZ13pljheX7NzTogVZ96edhBiIL5VaZVDADlN
+-9u6wWk5JRFRYX0KD
+------END CERTIFICATE-----
+-
+ # 5cc3d78e4e1d5e45547a04e6873e64f90cf9536d1ccc2ef800f355c4c5fd70fd
+ Certificate:
+ Data:
+@@ -1287,130 +1124,6 @@ AAoACxGV2lZFA4gKn2fQ1XmxqI1AbQ3CekD6819kR5LLU7m7Wc5P/dAVUwHY3+vZ
+ 5nbv0CO7O6l5s9UCKc2Jo5YPSjXnTkLAdc0Hz+Ys63su
+ -----END CERTIFICATE-----
+
+-# c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 15:c8:bd:65:47:5c:af:b8:97:00:5e:e4:06:d2:bc:9d
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = TW, O = "Chunghwa Telecom Co., Ltd.", OU = ePKI Root Certification Authority
+- Validity
+- Not Before: Dec 20 02:31:27 2004 GMT
+- Not After : Dec 20 02:31:27 2034 GMT
+- Subject: C = TW, O = "Chunghwa Telecom Co., Ltd.", OU = ePKI Root Certification Authority
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (4096 bit)
+- Modulus:
+- 00:e1:25:0f:ee:8d:db:88:33:75:67:cd:ad:1f:7d:
+- 3a:4e:6d:9d:d3:2f:14:f3:63:74:cb:01:21:6a:37:
+- ea:84:50:07:4b:26:5b:09:43:6c:21:9e:6a:c8:d5:
+- 03:f5:60:69:8f:cc:f0:22:e4:1f:e7:f7:6a:22:31:
+- b7:2c:15:f2:e0:fe:00:6a:43:ff:87:65:c6:b5:1a:
+- c1:a7:4c:6d:22:70:21:8a:31:f2:97:74:89:09:12:
+- 26:1c:9e:ca:d9:12:a2:95:3c:da:e9:67:bf:08:a0:
+- 64:e3:d6:42:b7:45:ef:97:f4:f6:f5:d7:b5:4a:15:
+- 02:58:7d:98:58:4b:60:bc:cd:d7:0d:9a:13:33:53:
+- d1:61:f9:7a:d5:d7:78:b3:9a:33:f7:00:86:ce:1d:
+- 4d:94:38:af:a8:ec:78:51:70:8a:5c:10:83:51:21:
+- f7:11:3d:34:86:5e:e5:48:cd:97:81:82:35:4c:19:
+- ec:65:f6:6b:c5:05:a1:ee:47:13:d6:b3:21:27:94:
+- 10:0a:d9:24:3b:ba:be:44:13:46:30:3f:97:3c:d8:
+- d7:d7:6a:ee:3b:38:e3:2b:d4:97:0e:b9:1b:e7:07:
+- 49:7f:37:2a:f9:77:78:cf:54:ed:5b:46:9d:a3:80:
+- 0e:91:43:c1:d6:5b:5f:14:ba:9f:a6:8d:24:47:40:
+- 59:bf:72:38:b2:36:6c:37:ff:99:d1:5d:0e:59:0a:
+- ab:69:f7:c0:b2:04:45:7a:54:00:ae:be:53:f6:b5:
+- e7:e1:f8:3c:a3:31:d2:a9:fe:21:52:64:c5:a6:67:
+- f0:75:07:06:94:14:81:55:c6:27:e4:01:8f:17:c1:
+- 6a:71:d7:be:4b:fb:94:58:7d:7e:11:33:b1:42:f7:
+- 62:6c:18:d6:cf:09:68:3e:7f:6c:f6:1e:8f:62:ad:
+- a5:63:db:09:a7:1f:22:42:41:1e:6f:99:8a:3e:d7:
+- f9:3f:40:7a:79:b0:a5:01:92:d2:9d:3d:08:15:a5:
+- 10:01:2d:b3:32:76:a8:95:0d:b3:7a:9a:fb:07:10:
+- 78:11:6f:e1:8f:c7:ba:0f:25:1a:74:2a:e5:1c:98:
+- 41:99:df:21:87:e8:95:06:6a:0a:b3:6a:47:76:65:
+- f6:3a:cf:8f:62:17:19:7b:0a:28:cd:1a:d2:83:1e:
+- 21:c7:2c:bf:be:ff:61:68:b7:67:1b:bb:78:4d:8d:
+- ce:67:e5:e4:c1:8e:b7:23:66:e2:9d:90:75:34:98:
+- a9:36:2b:8a:9a:94:b9:9d:ec:cc:8a:b1:f8:25:89:
+- 5c:5a:b6:2f:8c:1f:6d:79:24:a7:52:68:c3:84:35:
+- e2:66:8d:63:0e:25:4d:d5:19:b2:e6:79:37:a7:22:
+- 9d:54:31
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Subject Key Identifier:
+- 1E:0C:F7:B6:67:F2:E1:92:26:09:45:C0:55:39:2E:77:3F:42:4A:A2
+- X509v3 Basic Constraints:
+- CA:TRUE
+- setCext-hashedRoot:
+- 0/0-...0...+......0...g*.....E...
+-V|.[x....S.....
+- Signature Algorithm: sha1WithRSAEncryption
+- 09:b3:83:53:59:01:3e:95:49:b9:f1:81:ba:f9:76:20:23:b5:
+- 27:60:74:d4:6a:99:34:5e:6c:00:53:d9:9f:f2:a6:b1:24:07:
+- 44:6a:2a:c6:a5:8e:78:12:e8:47:d9:58:1b:13:2a:5e:79:9b:
+- 9f:0a:2a:67:a6:25:3f:06:69:56:73:c3:8a:66:48:fb:29:81:
+- 57:74:06:ca:9c:ea:28:e8:38:67:26:2b:f1:d5:b5:3f:65:93:
+- f8:36:5d:8e:8d:8d:40:20:87:19:ea:ef:27:c0:3d:b4:39:0f:
+- 25:7b:68:50:74:55:9c:0c:59:7d:5a:3d:41:94:25:52:08:e0:
+- 47:2c:15:31:19:d5:bf:07:55:c6:bb:12:b5:97:f4:5f:83:85:
+- ba:71:c1:d9:6c:81:11:76:0a:0a:b0:bf:82:97:f7:ea:3d:fa:
+- fa:ec:2d:a9:28:94:3b:56:dd:d2:51:2e:ae:c0:bd:08:15:8c:
+- 77:52:34:96:d6:9b:ac:d3:1d:8e:61:0f:35:7b:9b:ae:39:69:
+- 0b:62:60:40:20:36:8f:af:fb:36:ee:2d:08:4a:1d:b8:bf:9b:
+- 5c:f8:ea:a5:1b:a0:73:a6:d8:f8:6e:e0:33:04:5f:68:aa:27:
+- 87:ed:d9:c1:90:9c:ed:bd:e3:6a:35:af:63:df:ab:18:d9:ba:
+- e6:e9:4a:ea:50:8a:0f:61:93:1e:e2:2d:19:e2:30:94:35:92:
+- 5d:0e:b6:07:af:19:80:8f:47:90:51:4b:2e:4d:dd:85:e2:d2:
+- 0a:52:0a:17:9a:fc:1a:b0:50:02:e5:01:a3:63:37:21:4c:44:
+- c4:9b:51:99:11:0e:73:9c:06:8f:54:2e:a7:28:5e:44:39:87:
+- 56:2d:37:bd:85:44:94:e1:0c:4b:2c:9c:c3:92:85:34:61:cb:
+- 0f:b8:9b:4a:43:52:fe:34:3a:7d:b8:e9:29:dc:76:a9:c8:30:
+- f8:14:71:80:c6:1e:36:48:74:22:41:5c:87:82:e8:18:71:8b:
+- 41:89:44:e7:7e:58:5b:a8:b8:8d:13:e9:a7:6c:c3:47:ed:b3:
+- 1a:9d:62:ae:8d:82:ea:94:9e:dd:59:10:c3:ad:dd:e2:4d:e3:
+- 31:d5:c7:ec:e8:f2:b0:fe:92:1e:16:0a:1a:fc:d9:f3:f8:27:
+- b6:c9:be:1d:b4:6c:64:90:7f:f4:e4:c4:5b:d7:37:ae:42:0e:
+- dd:a4:1a:6f:7c:88:54:c5:16:6e:e1:7a:68:2e:f8:3a:bf:0d:
+- a4:3c:89:3b:78:a7:4e:63:83:04:21:08:67:8d:f2:82:49:d0:
+- 5b:fd:b1:cd:0f:83:84:d4:3e:20:85:f7:4a:3d:2b:9c:fd:2a:
+- 0a:09:4d:ea:81:f8:11:9c
+------BEGIN CERTIFICATE-----
+-MIIFsDCCA5igAwIBAgIQFci9ZUdcr7iXAF7kBtK8nTANBgkqhkiG9w0BAQUFADBe
+-MQswCQYDVQQGEwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0
+-ZC4xKjAoBgNVBAsMIWVQS0kgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe
+-Fw0wNDEyMjAwMjMxMjdaFw0zNDEyMjAwMjMxMjdaMF4xCzAJBgNVBAYTAlRXMSMw
+-IQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwgTHRkLjEqMCgGA1UECwwhZVBL
+-SSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEF
+-AAOCAg8AMIICCgKCAgEA4SUP7o3biDN1Z82tH306Tm2d0y8U82N0ywEhajfqhFAH
+-SyZbCUNsIZ5qyNUD9WBpj8zwIuQf5/dqIjG3LBXy4P4AakP/h2XGtRrBp0xtInAh
+-ijHyl3SJCRImHJ7K2RKilTza6We/CKBk49ZCt0Xvl/T29de1ShUCWH2YWEtgvM3X
+-DZoTM1PRYfl61dd4s5oz9wCGzh1NlDivqOx4UXCKXBCDUSH3ET00hl7lSM2XgYI1
+-TBnsZfZrxQWh7kcT1rMhJ5QQCtkkO7q+RBNGMD+XPNjX12ruOzjjK9SXDrkb5wdJ
+-fzcq+Xd4z1TtW0ado4AOkUPB1ltfFLqfpo0kR0BZv3I4sjZsN/+Z0V0OWQqraffA
+-sgRFelQArr5T9rXn4fg8ozHSqf4hUmTFpmfwdQcGlBSBVcYn5AGPF8Fqcde+S/uU
+-WH1+ETOxQvdibBjWzwloPn9s9h6PYq2lY9sJpx8iQkEeb5mKPtf5P0B6ebClAZLS
+-nT0IFaUQAS2zMnaolQ2zepr7BxB4EW/hj8e6DyUadCrlHJhBmd8hh+iVBmoKs2pH
+-dmX2Os+PYhcZewoozRrSgx4hxyy/vv9haLdnG7t4TY3OZ+XkwY63I2binZB1NJip
+-NiuKmpS5nezMirH4JYlcWrYvjB9teSSnUmjDhDXiZo1jDiVN1Rmy5nk3pyKdVDEC
+-AwEAAaNqMGgwHQYDVR0OBBYEFB4M97Zn8uGSJglFwFU5Lnc/QkqiMAwGA1UdEwQF
+-MAMBAf8wOQYEZyoHAAQxMC8wLQIBADAJBgUrDgMCGgUAMAcGBWcqAwAABBRFsMLH
+-ClZ87lt4DJX5GFPBphzYEDANBgkqhkiG9w0BAQUFAAOCAgEACbODU1kBPpVJufGB
+-uvl2ICO1J2B01GqZNF5sAFPZn/KmsSQHRGoqxqWOeBLoR9lYGxMqXnmbnwoqZ6Yl
+-PwZpVnPDimZI+ymBV3QGypzqKOg4ZyYr8dW1P2WT+DZdjo2NQCCHGervJ8A9tDkP
+-JXtoUHRVnAxZfVo9QZQlUgjgRywVMRnVvwdVxrsStZf0X4OFunHB2WyBEXYKCrC/
+-gpf36j36+uwtqSiUO1bd0lEursC9CBWMd1I0ltabrNMdjmEPNXubrjlpC2JgQCA2
+-j6/7Nu4tCEoduL+bXPjqpRugc6bY+G7gMwRfaKonh+3ZwZCc7b3jajWvY9+rGNm6
+-5ulK6lCKD2GTHuItGeIwlDWSXQ62B68ZgI9HkFFLLk3dheLSClIKF5r8GrBQAuUB
+-o2M3IUxExJtRmREOc5wGj1QupyheRDmHVi03vYVElOEMSyycw5KFNGHLD7ibSkNS
+-/jQ6fbjpKdx2qcgw+BRxgMYeNkh0IkFch4LoGHGLQYlE535YW6i4jRPpp2zDR+2z
+-Gp1iro2C6pSe3VkQw63d4k3jMdXH7OjysP6SHhYKGvzZ8/gntsm+HbRsZJB/9OTE
+-W9c3rkIO3aQab3yIVMUWbuF6aC74Or8NpDyJO3inTmODBCEIZ43ygknQW/2xzQ+D
+-hNQ+IIX3Sj0rnP0qCglN6oH4EZw=
+------END CERTIFICATE-----
+-
+ # 49e7a442acf0ea6287050054b52564b650e4f49e42e348d6aa38e039e957b1c1
+ Certificate:
+ Data:
+@@ -1896,94 +1609,6 @@ jWZSaX5LaAzHHjcng6WMxwLkFM1JAbBzs/3GkDpv0mztO+7skb6iQ12LAEpmJURw
+ 3kAP+HwV96LOPNdeE4yBFxgX0b3xdxA61GU5wSesVywlVP+i2k+KYTlerj1KjL0=
+ -----END CERTIFICATE-----
+
+-# e3b6a2db2ed7ce48842f7ac53241c7b71d54144bfb40c11f3f1d0b42f5eea12d
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- fe:dc:e3:01:0f:c9:48:ff
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = FR, O = Dhimyotis, CN = Certigna
+- Validity
+- Not Before: Jun 29 15:13:05 2007 GMT
+- Not After : Jun 29 15:13:05 2027 GMT
+- Subject: C = FR, O = Dhimyotis, CN = Certigna
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:c8:68:f1:c9:d6:d6:b3:34:75:26:82:1e:ec:b4:
+- be:ea:5c:e1:26:ed:11:47:61:e1:a2:7c:16:78:40:
+- 21:e4:60:9e:5a:c8:63:e1:c4:b1:96:92:ff:18:6d:
+- 69:23:e1:2b:62:f7:dd:e2:36:2f:91:07:b9:48:cf:
+- 0e:ec:79:b6:2c:e7:34:4b:70:08:25:a3:3c:87:1b:
+- 19:f2:81:07:0f:38:90:19:d3:11:fe:86:b4:f2:d1:
+- 5e:1e:1e:96:cd:80:6c:ce:3b:31:93:b6:f2:a0:d0:
+- a9:95:12:7d:a5:9a:cc:6b:c8:84:56:8a:33:a9:e7:
+- 22:15:53:16:f0:cc:17:ec:57:5f:e9:a2:0a:98:09:
+- de:e3:5f:9c:6f:dc:48:e3:85:0b:15:5a:a6:ba:9f:
+- ac:48:e3:09:b2:f7:f4:32:de:5e:34:be:1c:78:5d:
+- 42:5b:ce:0e:22:8f:4d:90:d7:7d:32:18:b3:0b:2c:
+- 6a:bf:8e:3f:14:11:89:20:0e:77:14:b5:3d:94:08:
+- 87:f7:25:1e:d5:b2:60:00:ec:6f:2a:28:25:6e:2a:
+- 3e:18:63:17:25:3f:3e:44:20:16:f6:26:c8:25:ae:
+- 05:4a:b4:e7:63:2c:f3:8c:16:53:7e:5c:fb:11:1a:
+- 08:c1:46:62:9f:22:b8:f1:c2:8d:69:dc:fa:3a:58:
+- 06:df
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- 1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
+- X509v3 Authority Key Identifier:
+- keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
+- DirName:/C=FR/O=Dhimyotis/CN=Certigna
+- serial:FE:DC:E3:01:0F:C9:48:FF
+-
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- Netscape Cert Type:
+- SSL CA, S/MIME CA, Object Signing CA
+- Signature Algorithm: sha1WithRSAEncryption
+- 85:03:1e:92:71:f6:42:af:e1:a3:61:9e:eb:f3:c0:0f:f2:a5:
+- d4:da:95:e6:d6:be:68:36:3d:7e:6e:1f:4c:8a:ef:d1:0f:21:
+- 6d:5e:a5:52:63:ce:12:f8:ef:2a:da:6f:eb:37:fe:13:02:c7:
+- cb:3b:3e:22:6b:da:61:2e:7f:d4:72:3d:dd:30:e1:1e:4c:40:
+- 19:8c:0f:d7:9c:d1:83:30:7b:98:59:dc:7d:c6:b9:0c:29:4c:
+- a1:33:a2:eb:67:3a:65:84:d3:96:e2:ed:76:45:70:8f:b5:2b:
+- de:f9:23:d6:49:6e:3c:14:b5:c6:9f:35:1e:50:d0:c1:8f:6a:
+- 70:44:02:62:cb:ae:1d:68:41:a7:aa:57:e8:53:aa:07:d2:06:
+- f6:d5:14:06:0b:91:03:75:2c:6c:72:b5:61:95:9a:0d:8b:b9:
+- 0d:e7:f5:df:54:cd:de:e6:d8:d6:09:08:97:63:e5:c1:2e:b0:
+- b7:44:26:c0:26:c0:af:55:30:9e:3b:d5:36:2a:19:04:f4:5c:
+- 1e:ff:cf:2c:b7:ff:d0:fd:87:40:11:d5:11:23:bb:48:c0:21:
+- a9:a4:28:2d:fd:15:f8:b0:4e:2b:f4:30:5b:21:fc:11:91:34:
+- be:41:ef:7b:9d:97:75:ff:97:95:c0:96:58:2f:ea:bb:46:d7:
+- bb:e4:d9:2e
+------BEGIN CERTIFICATE-----
+-MIIDqDCCApCgAwIBAgIJAP7c4wEPyUj/MA0GCSqGSIb3DQEBBQUAMDQxCzAJBgNV
+-BAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hMB4X
+-DTA3MDYyOTE1MTMwNVoXDTI3MDYyOTE1MTMwNVowNDELMAkGA1UEBhMCRlIxEjAQ
+-BgNVBAoMCURoaW15b3RpczERMA8GA1UEAwwIQ2VydGlnbmEwggEiMA0GCSqGSIb3
+-DQEBAQUAA4IBDwAwggEKAoIBAQDIaPHJ1tazNHUmgh7stL7qXOEm7RFHYeGifBZ4
+-QCHkYJ5ayGPhxLGWkv8YbWkj4Sti993iNi+RB7lIzw7sebYs5zRLcAglozyHGxny
+-gQcPOJAZ0xH+hrTy0V4eHpbNgGzOOzGTtvKg0KmVEn2lmsxryIRWijOp5yIVUxbw
+-zBfsV1/pogqYCd7jX5xv3EjjhQsVWqa6n6xI4wmy9/Qy3l40vhx4XUJbzg4ij02Q
+-130yGLMLLGq/jj8UEYkgDncUtT2UCIf3JR7VsmAA7G8qKCVuKj4YYxclPz5EIBb2
+-JsglrgVKtOdjLPOMFlN+XPsRGgjBRmKfIrjxwo1p3Po6WAbfAgMBAAGjgbwwgbkw
+-DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUGu3+QTmQtCRZvgHyUtVF9lo53BEw
+-ZAYDVR0jBF0wW4AUGu3+QTmQtCRZvgHyUtVF9lo53BGhOKQ2MDQxCzAJBgNVBAYT
+-AkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hggkA/tzj
+-AQ/JSP8wDgYDVR0PAQH/BAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG
+-9w0BAQUFAAOCAQEAhQMeknH2Qq/ho2Ge6/PAD/Kl1NqV5ta+aDY9fm4fTIrv0Q8h
+-bV6lUmPOEvjvKtpv6zf+EwLHyzs+ImvaYS5/1HI93TDhHkxAGYwP15zRgzB7mFnc
+-fca5DClMoTOi62c6ZYTTluLtdkVwj7Ur3vkj1kluPBS1xp81HlDQwY9qcEQCYsuu
+-HWhBp6pX6FOqB9IG9tUUBguRA3UsbHK1YZWaDYu5Def131TN3ubY1gkIl2PlwS6w
+-t0QmwCbAr1UwnjvVNioZBPRcHv/PLLf/0P2HQBHVESO7SMAhqaQoLf0V+LBOK/Qw
+-WyH8EZE0vkHve52Xdf+XlcCWWC/qu0bXu+TZLg==
+------END CERTIFICATE-----
+-
+ # 31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0
+ Certificate:
+ Data:
+@@ -2039,517 +1664,6 @@ oAIwOWZbwmSNuJ5Q3KjVSaLtx9zRSX8XAbjIho9OjIgrqJqpisXRAL34VOKa5Vt8
+ sycX
+ -----END CERTIFICATE-----
+
+-# 3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root CA
+- Validity
+- Not Before: Nov 10 00:00:00 2006 GMT
+- Not After : Nov 10 00:00:00 2031 GMT
+- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root CA
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:ad:0e:15:ce:e4:43:80:5c:b1:87:f3:b7:60:f9:
+- 71:12:a5:ae:dc:26:94:88:aa:f4:ce:f5:20:39:28:
+- 58:60:0c:f8:80:da:a9:15:95:32:61:3c:b5:b1:28:
+- 84:8a:8a:dc:9f:0a:0c:83:17:7a:8f:90:ac:8a:e7:
+- 79:53:5c:31:84:2a:f6:0f:98:32:36:76:cc:de:dd:
+- 3c:a8:a2:ef:6a:fb:21:f2:52:61:df:9f:20:d7:1f:
+- e2:b1:d9:fe:18:64:d2:12:5b:5f:f9:58:18:35:bc:
+- 47:cd:a1:36:f9:6b:7f:d4:b0:38:3e:c1:1b:c3:8c:
+- 33:d9:d8:2f:18:fe:28:0f:b3:a7:83:d6:c3:6e:44:
+- c0:61:35:96:16:fe:59:9c:8b:76:6d:d7:f1:a2:4b:
+- 0d:2b:ff:0b:72:da:9e:60:d0:8e:90:35:c6:78:55:
+- 87:20:a1:cf:e5:6d:0a:c8:49:7c:31:98:33:6c:22:
+- e9:87:d0:32:5a:a2:ba:13:82:11:ed:39:17:9d:99:
+- 3a:72:a1:e6:fa:a4:d9:d5:17:31:75:ae:85:7d:22:
+- ae:3f:01:46:86:f6:28:79:c8:b1:da:e4:57:17:c4:
+- 7e:1c:0e:b0:b4:92:a6:56:b3:bd:b2:97:ed:aa:a7:
+- f0:b7:c5:a8:3f:95:16:d0:ff:a1:96:eb:08:5f:18:
+- 77:4f
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- 45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F
+- X509v3 Authority Key Identifier:
+- keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F
+-
+- Signature Algorithm: sha1WithRSAEncryption
+- a2:0e:bc:df:e2:ed:f0:e3:72:73:7a:64:94:bf:f7:72:66:d8:
+- 32:e4:42:75:62:ae:87:eb:f2:d5:d9:de:56:b3:9f:cc:ce:14:
+- 28:b9:0d:97:60:5c:12:4c:58:e4:d3:3d:83:49:45:58:97:35:
+- 69:1a:a8:47:ea:56:c6:79:ab:12:d8:67:81:84:df:7f:09:3c:
+- 94:e6:b8:26:2c:20:bd:3d:b3:28:89:f7:5f:ff:22:e2:97:84:
+- 1f:e9:65:ef:87:e0:df:c1:67:49:b3:5d:eb:b2:09:2a:eb:26:
+- ed:78:be:7d:3f:2b:f3:b7:26:35:6d:5f:89:01:b6:49:5b:9f:
+- 01:05:9b:ab:3d:25:c1:cc:b6:7f:c2:f1:6f:86:c6:fa:64:68:
+- eb:81:2d:94:eb:42:b7:fa:8c:1e:dd:62:f1:be:50:67:b7:6c:
+- bd:f3:f1:1f:6b:0c:36:07:16:7f:37:7c:a9:5b:6d:7a:f1:12:
+- 46:60:83:d7:27:04:be:4b:ce:97:be:c3:67:2a:68:11:df:80:
+- e7:0c:33:66:bf:13:0d:14:6e:f3:7f:1f:63:10:1e:fa:8d:1b:
+- 25:6d:6c:8f:a5:b7:61:01:b1:d2:a3:26:a1:10:71:9d:ad:e2:
+- c3:f9:c3:99:51:b7:2b:07:08:ce:2e:e6:50:b2:a7:fa:0a:45:
+- 2f:a2:f0:f2
+------BEGIN CERTIFICATE-----
+-MIIDtzCCAp+gAwIBAgIQDOfg5RfYRv6P5WD8G/AwOTANBgkqhkiG9w0BAQUFADBl
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv
+-b3QgQ0EwHhcNMDYxMTEwMDAwMDAwWhcNMzExMTEwMDAwMDAwWjBlMQswCQYDVQQG
+-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl
+-cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwggEi
+-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDhXO5EOAXLGH87dg+XESpa7c
+-JpSIqvTO9SA5KFhgDPiA2qkVlTJhPLWxKISKityfCgyDF3qPkKyK53lTXDGEKvYP
+-mDI2dsze3Tyoou9q+yHyUmHfnyDXH+Kx2f4YZNISW1/5WBg1vEfNoTb5a3/UsDg+
+-wRvDjDPZ2C8Y/igPs6eD1sNuRMBhNZYW/lmci3Zt1/GiSw0r/wty2p5g0I6QNcZ4
+-VYcgoc/lbQrISXwxmDNsIumH0DJaoroTghHtORedmTpyoeb6pNnVFzF1roV9Iq4/
+-AUaG9ih5yLHa5FcXxH4cDrC0kqZWs72yl+2qp/C3xag/lRbQ/6GW6whfGHdPAgMB
+-AAGjYzBhMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW
+-BBRF66Kv9JLLgjEtUYunpyGd823IDzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYun
+-pyGd823IDzANBgkqhkiG9w0BAQUFAAOCAQEAog683+Lt8ONyc3pklL/3cmbYMuRC
+-dWKuh+vy1dneVrOfzM4UKLkNl2BcEkxY5NM9g0lFWJc1aRqoR+pWxnmrEthngYTf
+-fwk8lOa4JiwgvT2zKIn3X/8i4peEH+ll74fg38FnSbNd67IJKusm7Xi+fT8r87cm
+-NW1fiQG2SVufAQWbqz0lwcy2f8Lxb4bG+mRo64EtlOtCt/qMHt1i8b5QZ7dsvfPx
+-H2sMNgcWfzd8qVttevESRmCD1ycEvkvOl77DZypoEd+A5wwzZr8TDRRu838fYxAe
+-+o0bJW1sj6W3YQGx0qMmoRBxna3iw/nDmVG3KwcIzi7mULKn+gpFL6Lw8g==
+------END CERTIFICATE-----
+-
+-# 4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 08:3b:e0:56:90:42:46:b1:a1:75:6a:c9:59:91:c7:4a
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
+- Validity
+- Not Before: Nov 10 00:00:00 2006 GMT
+- Not After : Nov 10 00:00:00 2031 GMT
+- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:e2:3b:e1:11:72:de:a8:a4:d3:a3:57:aa:50:a2:
+- 8f:0b:77:90:c9:a2:a5:ee:12:ce:96:5b:01:09:20:
+- cc:01:93:a7:4e:30:b7:53:f7:43:c4:69:00:57:9d:
+- e2:8d:22:dd:87:06:40:00:81:09:ce:ce:1b:83:bf:
+- df:cd:3b:71:46:e2:d6:66:c7:05:b3:76:27:16:8f:
+- 7b:9e:1e:95:7d:ee:b7:48:a3:08:da:d6:af:7a:0c:
+- 39:06:65:7f:4a:5d:1f:bc:17:f8:ab:be:ee:28:d7:
+- 74:7f:7a:78:99:59:85:68:6e:5c:23:32:4b:bf:4e:
+- c0:e8:5a:6d:e3:70:bf:77:10:bf:fc:01:f6:85:d9:
+- a8:44:10:58:32:a9:75:18:d5:d1:a2:be:47:e2:27:
+- 6a:f4:9a:33:f8:49:08:60:8b:d4:5f:b4:3a:84:bf:
+- a1:aa:4a:4c:7d:3e:cf:4f:5f:6c:76:5e:a0:4b:37:
+- 91:9e:dc:22:e6:6d:ce:14:1a:8e:6a:cb:fe:cd:b3:
+- 14:64:17:c7:5b:29:9e:32:bf:f2:ee:fa:d3:0b:42:
+- d4:ab:b7:41:32:da:0c:d4:ef:f8:81:d5:bb:8d:58:
+- 3f:b5:1b:e8:49:28:a2:70:da:31:04:dd:f7:b2:16:
+- f2:4c:0a:4e:07:a8:ed:4a:3d:5e:b5:7f:a3:90:c3:
+- af:27
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- 03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
+- X509v3 Authority Key Identifier:
+- keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
+-
+- Signature Algorithm: sha1WithRSAEncryption
+- cb:9c:37:aa:48:13:12:0a:fa:dd:44:9c:4f:52:b0:f4:df:ae:
+- 04:f5:79:79:08:a3:24:18:fc:4b:2b:84:c0:2d:b9:d5:c7:fe:
+- f4:c1:1f:58:cb:b8:6d:9c:7a:74:e7:98:29:ab:11:b5:e3:70:
+- a0:a1:cd:4c:88:99:93:8c:91:70:e2:ab:0f:1c:be:93:a9:ff:
+- 63:d5:e4:07:60:d3:a3:bf:9d:5b:09:f1:d5:8e:e3:53:f4:8e:
+- 63:fa:3f:a7:db:b4:66:df:62:66:d6:d1:6e:41:8d:f2:2d:b5:
+- ea:77:4a:9f:9d:58:e2:2b:59:c0:40:23:ed:2d:28:82:45:3e:
+- 79:54:92:26:98:e0:80:48:a8:37:ef:f0:d6:79:60:16:de:ac:
+- e8:0e:cd:6e:ac:44:17:38:2f:49:da:e1:45:3e:2a:b9:36:53:
+- cf:3a:50:06:f7:2e:e8:c4:57:49:6c:61:21:18:d5:04:ad:78:
+- 3c:2c:3a:80:6b:a7:eb:af:15:14:e9:d8:89:c1:b9:38:6c:e2:
+- 91:6c:8a:ff:64:b9:77:25:57:30:c0:1b:24:a3:e1:dc:e9:df:
+- 47:7c:b5:b4:24:08:05:30:ec:2d:bd:0b:bf:45:bf:50:b9:a9:
+- f3:eb:98:01:12:ad:c8:88:c6:98:34:5f:8d:0a:3c:c6:e9:d5:
+- 95:95:6d:de
+------BEGIN CERTIFICATE-----
+-MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
+-QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
+-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
+-b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
+-9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
+-CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
+-nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
+-43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
+-T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
+-gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
+-BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
+-TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
+-DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
+-hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
+-06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
+-PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
+-YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
+-CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
+------END CERTIFICATE-----
+-
+-# 552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
+- Signature Algorithm: sha384WithRSAEncryption
+- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4
+- Validity
+- Not Before: Aug 1 12:00:00 2013 GMT
+- Not After : Jan 15 12:00:00 2038 GMT
+- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (4096 bit)
+- Modulus:
+- 00:bf:e6:90:73:68:de:bb:e4:5d:4a:3c:30:22:30:
+- 69:33:ec:c2:a7:25:2e:c9:21:3d:f2:8a:d8:59:c2:
+- e1:29:a7:3d:58:ab:76:9a:cd:ae:7b:1b:84:0d:c4:
+- 30:1f:f3:1b:a4:38:16:eb:56:c6:97:6d:1d:ab:b2:
+- 79:f2:ca:11:d2:e4:5f:d6:05:3c:52:0f:52:1f:c6:
+- 9e:15:a5:7e:be:9f:a9:57:16:59:55:72:af:68:93:
+- 70:c2:b2:ba:75:99:6a:73:32:94:d1:10:44:10:2e:
+- df:82:f3:07:84:e6:74:3b:6d:71:e2:2d:0c:1b:ee:
+- 20:d5:c9:20:1d:63:29:2d:ce:ec:5e:4e:c8:93:f8:
+- 21:61:9b:34:eb:05:c6:5e:ec:5b:1a:bc:eb:c9:cf:
+- cd:ac:34:40:5f:b1:7a:66:ee:77:c8:48:a8:66:57:
+- 57:9f:54:58:8e:0c:2b:b7:4f:a7:30:d9:56:ee:ca:
+- 7b:5d:e3:ad:c9:4f:5e:e5:35:e7:31:cb:da:93:5e:
+- dc:8e:8f:80:da:b6:91:98:40:90:79:c3:78:c7:b6:
+- b1:c4:b5:6a:18:38:03:10:8d:d8:d4:37:a4:2e:05:
+- 7d:88:f5:82:3e:10:91:70:ab:55:82:41:32:d7:db:
+- 04:73:2a:6e:91:01:7c:21:4c:d4:bc:ae:1b:03:75:
+- 5d:78:66:d9:3a:31:44:9a:33:40:bf:08:d7:5a:49:
+- a4:c2:e6:a9:a0:67:dd:a4:27:bc:a1:4f:39:b5:11:
+- 58:17:f7:24:5c:46:8f:64:f7:c1:69:88:76:98:76:
+- 3d:59:5d:42:76:87:89:97:69:7a:48:f0:e0:a2:12:
+- 1b:66:9a:74:ca:de:4b:1e:e7:0e:63:ae:e6:d4:ef:
+- 92:92:3a:9e:3d:dc:00:e4:45:25:89:b6:9a:44:19:
+- 2b:7e:c0:94:b4:d2:61:6d:eb:33:d9:c5:df:4b:04:
+- 00:cc:7d:1c:95:c3:8f:f7:21:b2:b2:11:b7:bb:7f:
+- f2:d5:8c:70:2c:41:60:aa:b1:63:18:44:95:1a:76:
+- 62:7e:f6:80:b0:fb:e8:64:a6:33:d1:89:07:e1:bd:
+- b7:e6:43:a4:18:b8:a6:77:01:e1:0f:94:0c:21:1d:
+- b2:54:29:25:89:6c:e5:0e:52:51:47:74:be:26:ac:
+- b6:41:75:de:7a:ac:5f:8d:3f:c9:bc:d3:41:11:12:
+- 5b:e5:10:50:eb:31:c5:ca:72:16:22:09:df:7c:4c:
+- 75:3f:63:ec:21:5f:c4:20:51:6b:6f:b1:ab:86:8b:
+- 4f:c2:d6:45:5f:9d:20:fc:a1:1e:c5:c0:8f:a2:b1:
+- 7e:0a:26:99:f5:e4:69:2f:98:1d:2d:f5:d9:a9:b2:
+- 1d:e5:1b
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- EC:D7:E3:82:D2:71:5D:64:4C:DF:2E:67:3F:E7:BA:98:AE:1C:0F:4F
+- Signature Algorithm: sha384WithRSAEncryption
+- bb:61:d9:7d:a9:6c:be:17:c4:91:1b:c3:a1:a2:00:8d:e3:64:
+- 68:0f:56:cf:77:ae:70:f9:fd:9a:4a:99:b9:c9:78:5c:0c:0c:
+- 5f:e4:e6:14:29:56:0b:36:49:5d:44:63:e0:ad:9c:96:18:66:
+- 1b:23:0d:3d:79:e9:6d:6b:d6:54:f8:d2:3c:c1:43:40:ae:1d:
+- 50:f5:52:fc:90:3b:bb:98:99:69:6b:c7:c1:a7:a8:68:a4:27:
+- dc:9d:f9:27:ae:30:85:b9:f6:67:4d:3a:3e:8f:59:39:22:53:
+- 44:eb:c8:5d:03:ca:ed:50:7a:7d:62:21:0a:80:c8:73:66:d1:
+- a0:05:60:5f:e8:a5:b4:a7:af:a8:f7:6d:35:9c:7c:5a:8a:d6:
+- a2:38:99:f3:78:8b:f4:4d:d2:20:0b:de:04:ee:8c:9b:47:81:
+- 72:0d:c0:14:32:ef:30:59:2e:ae:e0:71:f2:56:e4:6a:97:6f:
+- 92:50:6d:96:8d:68:7a:9a:b2:36:14:7a:06:f2:24:b9:09:11:
+- 50:d7:08:b1:b8:89:7a:84:23:61:42:29:e5:a3:cd:a2:20:41:
+- d7:d1:9c:64:d9:ea:26:a1:8b:14:d7:4c:19:b2:50:41:71:3d:
+- 3f:4d:70:23:86:0c:4a:dc:81:d2:cc:32:94:84:0d:08:09:97:
+- 1c:4f:c0:ee:6b:20:74:30:d2:e0:39:34:10:85:21:15:01:08:
+- e8:55:32:de:71:49:d9:28:17:50:4d:e6:be:4d:d1:75:ac:d0:
+- ca:fb:41:b8:43:a5:aa:d3:c3:05:44:4f:2c:36:9b:e2:fa:e2:
+- 45:b8:23:53:6c:06:6f:67:55:7f:46:b5:4c:3f:6e:28:5a:79:
+- 26:d2:a4:a8:62:97:d2:1e:e2:ed:4a:8b:bc:1b:fd:47:4a:0d:
+- df:67:66:7e:b2:5b:41:d0:3b:e4:f4:3b:f4:04:63:e9:ef:c2:
+- 54:00:51:a0:8a:2a:c9:ce:78:cc:d5:ea:87:04:18:b3:ce:af:
+- 49:88:af:f3:92:99:b6:b3:e6:61:0f:d2:85:00:e7:50:1a:e4:
+- 1b:95:9d:19:a1:b9:9c:b1:9b:b1:00:1e:ef:d0:0f:4f:42:6c:
+- c9:0a:bc:ee:43:fa:3a:71:a5:c8:4d:26:a5:35:fd:89:5d:bc:
+- 85:62:1d:32:d2:a0:2b:54:ed:9a:57:c1:db:fa:10:cf:19:b7:
+- 8b:4a:1b:8f:01:b6:27:95:53:e8:b6:89:6d:5b:bc:68:d4:23:
+- e8:8b:51:a2:56:f9:f0:a6:80:a0:d6:1e:b3:bc:0f:0f:53:75:
+- 29:aa:ea:13:77:e4:de:8c:81:21:ad:07:10:47:11:ad:87:3d:
+- 07:d1:75:bc:cf:f3:66:7e
+------BEGIN CERTIFICATE-----
+-MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBi
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg
+-RzQwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBiMQswCQYDVQQGEwJV
+-UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu
+-Y29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0GCSqG
+-SIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3y
+-ithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1If
+-xp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDV
+-ySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfISKhmV1efVFiO
+-DCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jHtrHEtWoYOAMQ
+-jdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6MUSaM0C/
+-CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCi
+-EhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADM
+-fRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QY
+-uKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXK
+-chYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4KJpn15GkvmB0t
+-9dmpsh3lGwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB
+-hjAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wDQYJKoZIhvcNAQEMBQAD
+-ggIBALth2X2pbL4XxJEbw6GiAI3jZGgPVs93rnD5/ZpKmbnJeFwMDF/k5hQpVgs2
+-SV1EY+CtnJYYZhsjDT156W1r1lT40jzBQ0CuHVD1UvyQO7uYmWlrx8GnqGikJ9yd
+-+SeuMIW59mdNOj6PWTkiU0TryF0Dyu1Qen1iIQqAyHNm0aAFYF/opbSnr6j3bTWc
+-fFqK1qI4mfN4i/RN0iAL3gTujJtHgXINwBQy7zBZLq7gcfJW5GqXb5JQbZaNaHqa
+-sjYUegbyJLkJEVDXCLG4iXqEI2FCKeWjzaIgQdfRnGTZ6iahixTXTBmyUEFxPT9N
+-cCOGDErcgdLMMpSEDQgJlxxPwO5rIHQw0uA5NBCFIRUBCOhVMt5xSdkoF1BN5r5N
+-0XWs0Mr7QbhDparTwwVETyw2m+L64kW4I1NsBm9nVX9GtUw/bihaeSbSpKhil9Ie
+-4u1Ki7wb/UdKDd9nZn6yW0HQO+T0O/QEY+nvwlQAUaCKKsnOeMzV6ocEGLPOr0mI
+-r/OSmbaz5mEP0oUA51Aa5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1
+-/YldvIViHTLSoCtU7ZpXwdv6EM8Zt4tKG48BtieVU+i2iW1bvGjUI+iLUaJW+fCm
+-gKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+
+------END CERTIFICATE-----
+-
+-# 7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA
+- Validity
+- Not Before: Nov 10 00:00:00 2006 GMT
+- Not After : Nov 10 00:00:00 2031 GMT
+- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:c6:cc:e5:73:e6:fb:d4:bb:e5:2d:2d:32:a6:df:
+- e5:81:3f:c9:cd:25:49:b6:71:2a:c3:d5:94:34:67:
+- a2:0a:1c:b0:5f:69:a6:40:b1:c4:b7:b2:8f:d0:98:
+- a4:a9:41:59:3a:d3:dc:94:d6:3c:db:74:38:a4:4a:
+- cc:4d:25:82:f7:4a:a5:53:12:38:ee:f3:49:6d:71:
+- 91:7e:63:b6:ab:a6:5f:c3:a4:84:f8:4f:62:51:be:
+- f8:c5:ec:db:38:92:e3:06:e5:08:91:0c:c4:28:41:
+- 55:fb:cb:5a:89:15:7e:71:e8:35:bf:4d:72:09:3d:
+- be:3a:38:50:5b:77:31:1b:8d:b3:c7:24:45:9a:a7:
+- ac:6d:00:14:5a:04:b7:ba:13:eb:51:0a:98:41:41:
+- 22:4e:65:61:87:81:41:50:a6:79:5c:89:de:19:4a:
+- 57:d5:2e:e6:5d:1c:53:2c:7e:98:cd:1a:06:16:a4:
+- 68:73:d0:34:04:13:5c:a1:71:d3:5a:7c:55:db:5e:
+- 64:e1:37:87:30:56:04:e5:11:b4:29:80:12:f1:79:
+- 39:88:a2:02:11:7c:27:66:b7:88:b7:78:f2:ca:0a:
+- a8:38:ab:0a:64:c2:bf:66:5d:95:84:c1:a1:25:1e:
+- 87:5d:1a:50:0b:20:12:cc:41:bb:6e:0b:51:38:b8:
+- 4b:cb
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3
+- X509v3 Authority Key Identifier:
+- keyid:B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3
+-
+- Signature Algorithm: sha1WithRSAEncryption
+- 1c:1a:06:97:dc:d7:9c:9f:3c:88:66:06:08:57:21:db:21:47:
+- f8:2a:67:aa:bf:18:32:76:40:10:57:c1:8a:f3:7a:d9:11:65:
+- 8e:35:fa:9e:fc:45:b5:9e:d9:4c:31:4b:b8:91:e8:43:2c:8e:
+- b3:78:ce:db:e3:53:79:71:d6:e5:21:94:01:da:55:87:9a:24:
+- 64:f6:8a:66:cc:de:9c:37:cd:a8:34:b1:69:9b:23:c8:9e:78:
+- 22:2b:70:43:e3:55:47:31:61:19:ef:58:c5:85:2f:4e:30:f6:
+- a0:31:16:23:c8:e7:e2:65:16:33:cb:bf:1a:1b:a0:3d:f8:ca:
+- 5e:8b:31:8b:60:08:89:2d:0c:06:5c:52:b7:c4:f9:0a:98:d1:
+- 15:5f:9f:12:be:7c:36:63:38:bd:44:a4:7f:e4:26:2b:0a:c4:
+- 97:69:0d:e9:8c:e2:c0:10:57:b8:c8:76:12:91:55:f2:48:69:
+- d8:bc:2a:02:5b:0f:44:d4:20:31:db:f4:ba:70:26:5d:90:60:
+- 9e:bc:4b:17:09:2f:b4:cb:1e:43:68:c9:07:27:c1:d2:5c:f7:
+- ea:21:b9:68:12:9c:3c:9c:bf:9e:fc:80:5c:9b:63:cd:ec:47:
+- aa:25:27:67:a0:37:f3:00:82:7d:54:d7:a9:f8:e9:2e:13:a3:
+- 77:e8:1f:4a
+------BEGIN CERTIFICATE-----
+-MIIDxTCCAq2gAwIBAgIQAqxcJmoLQJuPC3nyrkYldzANBgkqhkiG9w0BAQUFADBs
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
+-ZSBFViBSb290IENBMB4XDTA2MTExMDAwMDAwMFoXDTMxMTExMDAwMDAwMFowbDEL
+-MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3
+-LmRpZ2ljZXJ0LmNvbTErMCkGA1UEAxMiRGlnaUNlcnQgSGlnaCBBc3N1cmFuY2Ug
+-RVYgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbM5XPm
+-+9S75S0tMqbf5YE/yc0lSbZxKsPVlDRnogocsF9ppkCxxLeyj9CYpKlBWTrT3JTW
+-PNt0OKRKzE0lgvdKpVMSOO7zSW1xkX5jtqumX8OkhPhPYlG++MXs2ziS4wblCJEM
+-xChBVfvLWokVfnHoNb9Ncgk9vjo4UFt3MRuNs8ckRZqnrG0AFFoEt7oT61EKmEFB
+-Ik5lYYeBQVCmeVyJ3hlKV9Uu5l0cUyx+mM0aBhakaHPQNAQTXKFx01p8VdteZOE3
+-hzBWBOURtCmAEvF5OYiiAhF8J2a3iLd48soKqDirCmTCv2ZdlYTBoSUeh10aUAsg
+-EsxBu24LUTi4S8sCAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQF
+-MAMBAf8wHQYDVR0OBBYEFLE+w2kD+L9HAdSYJhoIAu9jZCvDMB8GA1UdIwQYMBaA
+-FLE+w2kD+L9HAdSYJhoIAu9jZCvDMA0GCSqGSIb3DQEBBQUAA4IBAQAcGgaX3Nec
+-nzyIZgYIVyHbIUf4KmeqvxgydkAQV8GK83rZEWWONfqe/EW1ntlMMUu4kehDLI6z
+-eM7b41N5cdblIZQB2lWHmiRk9opmzN6cN82oNLFpmyPInngiK3BD41VHMWEZ71jF
+-hS9OMPagMRYjyOfiZRYzy78aG6A9+MpeizGLYAiJLQwGXFK3xPkKmNEVX58Svnw2
+-Yzi9RKR/5CYrCsSXaQ3pjOLAEFe4yHYSkVXySGnYvCoCWw9E1CAx2/S6cCZdkGCe
+-vEsXCS+0yx5DaMkHJ8HSXPfqIbloEpw8nL+e/IBcm2PN7EeqJSdnoDfzAIJ9VNep
+-+OkuE6N36B9K
+------END CERTIFICATE-----
+-
+-# 7d05ebb682339f8c9451ee094eebfefa7953a114edb2f44949452fab7d2fc185
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 0b:93:1c:3a:d6:39:67:ea:67:23:bf:c3:af:9a:f4:4b
+- Signature Algorithm: sha256WithRSAEncryption
+- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2
+- Validity
+- Not Before: Aug 1 12:00:00 2013 GMT
+- Not After : Jan 15 12:00:00 2038 GMT
+- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:d9:e7:28:2f:52:3f:36:72:49:88:93:34:f3:f8:
+- 6a:1e:31:54:80:9f:ad:54:41:b5:47:df:96:a8:d4:
+- af:80:2d:b9:0a:cf:75:fd:89:a5:7d:24:fa:e3:22:
+- 0c:2b:bc:95:17:0b:33:bf:19:4d:41:06:90:00:bd:
+- 0c:4d:10:fe:07:b5:e7:1c:6e:22:55:31:65:97:bd:
+- d3:17:d2:1e:62:f3:db:ea:6c:50:8c:3f:84:0c:96:
+- cf:b7:cb:03:e0:ca:6d:a1:14:4c:1b:89:dd:ed:00:
+- b0:52:7c:af:91:6c:b1:38:13:d1:e9:12:08:c0:00:
+- b0:1c:2b:11:da:77:70:36:9b:ae:ce:79:87:dc:82:
+- 70:e6:09:74:70:55:69:af:a3:68:9f:bf:dd:b6:79:
+- b3:f2:9d:70:29:55:f4:ab:ff:95:61:f3:c9:40:6f:
+- 1d:d1:be:93:bb:d3:88:2a:bb:9d:bf:72:5a:56:71:
+- 3b:3f:d4:f3:d1:0a:fe:28:ef:a3:ee:d9:99:af:03:
+- d3:8f:60:b7:f2:92:a1:b1:bd:89:89:1f:30:cd:c3:
+- a6:2e:62:33:ae:16:02:77:44:5a:e7:81:0a:3c:a7:
+- 44:2e:79:b8:3f:04:bc:5c:a0:87:e1:1b:af:51:8e:
+- cd:ec:2c:fa:f8:fe:6d:f0:3a:7c:aa:8b:e4:67:95:
+- 31:8d
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- CE:C3:4A:B9:99:55:F2:B8:DB:60:BF:A9:7E:BD:56:B5:97:36:A7:D6
+- Signature Algorithm: sha256WithRSAEncryption
+- ca:a5:55:8c:e3:c8:41:6e:69:27:a7:75:11:ef:3c:86:36:6f:
+- d2:9d:c6:78:38:1d:69:96:a2:92:69:2e:38:6c:9b:7d:04:d4:
+- 89:a5:b1:31:37:8a:c9:21:cc:ab:6c:cd:8b:1c:9a:d6:bf:48:
+- d2:32:66:c1:8a:c0:f3:2f:3a:ef:c0:e3:d4:91:86:d1:50:e3:
+- 03:db:73:77:6f:4a:39:53:ed:de:26:c7:b5:7d:af:2b:42:d1:
+- 75:62:e3:4a:2b:02:c7:50:4b:e0:69:e2:96:6c:0e:44:66:10:
+- 44:8f:ad:05:eb:f8:79:ac:a6:1b:e8:37:34:9d:53:c9:61:aa:
+- a2:52:af:4a:70:16:86:c2:3a:c8:b1:13:70:36:d8:cf:ee:f4:
+- 0a:34:d5:5b:4c:fd:07:9c:a2:ba:d9:01:72:5c:f3:4d:c1:dd:
+- 0e:b1:1c:0d:c4:63:be:ad:f4:14:fb:89:ec:a2:41:0e:4c:cc:
+- c8:57:40:d0:6e:03:aa:cd:0c:8e:89:99:99:6c:f0:3c:30:af:
+- 38:df:6f:bc:a3:be:29:20:27:ab:74:ff:13:22:78:de:97:52:
+- 55:1e:83:b5:54:20:03:ee:ae:c0:4f:56:de:37:cc:c3:7f:aa:
+- 04:27:bb:d3:77:b8:62:db:17:7c:9c:28:22:13:73:6c:cf:26:
+- f5:8a:29:e7
+------BEGIN CERTIFICATE-----
+-MIIDljCCAn6gAwIBAgIQC5McOtY5Z+pnI7/Dr5r0SzANBgkqhkiG9w0BAQsFADBl
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv
+-b3QgRzIwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQG
+-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl
+-cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIwggEi
+-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5ygvUj82ckmIkzTz+GoeMVSA
+-n61UQbVH35ao1K+ALbkKz3X9iaV9JPrjIgwrvJUXCzO/GU1BBpAAvQxNEP4Htecc
+-biJVMWWXvdMX0h5i89vqbFCMP4QMls+3ywPgym2hFEwbid3tALBSfK+RbLE4E9Hp
+-EgjAALAcKxHad3A2m67OeYfcgnDmCXRwVWmvo2ifv922ebPynXApVfSr/5Vh88lA
+-bx3RvpO704gqu52/clpWcTs/1PPRCv4o76Pu2ZmvA9OPYLfykqGxvYmJHzDNw6Yu
+-YjOuFgJ3RFrngQo8p0Quebg/BLxcoIfhG69Rjs3sLPr4/m3wOnyqi+RnlTGNAgMB
+-AAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQW
+-BBTOw0q5mVXyuNtgv6l+vVa1lzan1jANBgkqhkiG9w0BAQsFAAOCAQEAyqVVjOPI
+-QW5pJ6d1Ee88hjZv0p3GeDgdaZaikmkuOGybfQTUiaWxMTeKySHMq2zNixya1r9I
+-0jJmwYrA8y8678Dj1JGG0VDjA9tzd29KOVPt3ibHtX2vK0LRdWLjSisCx1BL4Gni
+-lmwORGYQRI+tBev4eaymG+g3NJ1TyWGqolKvSnAWhsI6yLETcDbYz+70CjTVW0z9
+-B5yiutkBclzzTcHdDrEcDcRjvq30FPuJ7KJBDkzMyFdA0G4Dqs0MjomZmWzwPDCv
+-ON9vvKO+KSAnq3T/EyJ43pdSVR6DtVQgA+6uwE9W3jfMw3+qBCe703e4YtsXfJwo
+-IhNzbM8m9Yop5w==
+------END CERTIFICATE-----
+-
+-# 7e37cb8b4c47090cab36551ba6f45db840680fba166a952db100717f43053fc2
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 0b:a1:5a:fa:1d:df:a0:b5:49:44:af:cd:24:a0:6c:ec
+- Signature Algorithm: ecdsa-with-SHA384
+- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3
+- Validity
+- Not Before: Aug 1 12:00:00 2013 GMT
+- Not After : Jan 15 12:00:00 2038 GMT
+- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3
+- Subject Public Key Info:
+- Public Key Algorithm: id-ecPublicKey
+- Public-Key: (384 bit)
+- pub:
+- 04:19:e7:bc:ac:44:65:ed:cd:b8:3f:58:fb:8d:b1:
+- 57:a9:44:2d:05:15:f2:ef:0b:ff:10:74:9f:b5:62:
+- 52:5f:66:7e:1f:e5:dc:1b:45:79:0b:cc:c6:53:0a:
+- 9d:8d:5d:02:d9:a9:59:de:02:5a:f6:95:2a:0e:8d:
+- 38:4a:8a:49:c6:bc:c6:03:38:07:5f:55:da:7e:09:
+- 6e:e2:7f:5e:d0:45:20:0f:59:76:10:d6:a0:24:f0:
+- 2d:de:36:f2:6c:29:39
+- ASN1 OID: secp384r1
+- NIST CURVE: P-384
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- CB:D0:BD:A9:E1:98:05:51:A1:4D:37:A2:83:79:CE:8D:1D:2A:E4:84
+- Signature Algorithm: ecdsa-with-SHA384
+- 30:64:02:30:25:a4:81:45:02:6b:12:4b:75:74:4f:c8:23:e3:
+- 70:f2:75:72:de:7c:89:f0:cf:91:72:61:9e:5e:10:92:59:56:
+- b9:83:c7:10:e7:38:e9:58:26:36:7d:d5:e4:34:86:39:02:30:
+- 7c:36:53:f0:30:e5:62:63:3a:99:e2:b6:a3:3b:9b:34:fa:1e:
+- da:10:92:71:5e:91:13:a7:dd:a4:6e:92:cc:32:d6:f5:21:66:
+- c7:2f:ea:96:63:6a:65:45:92:95:01:b4
+------BEGIN CERTIFICATE-----
+-MIICRjCCAc2gAwIBAgIQC6Fa+h3foLVJRK/NJKBs7DAKBggqhkjOPQQDAzBlMQsw
+-CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu
+-ZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3Qg
+-RzMwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQGEwJV
+-UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu
+-Y29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwdjAQBgcq
+-hkjOPQIBBgUrgQQAIgNiAAQZ57ysRGXtzbg/WPuNsVepRC0FFfLvC/8QdJ+1YlJf
+-Zn4f5dwbRXkLzMZTCp2NXQLZqVneAlr2lSoOjThKiknGvMYDOAdfVdp+CW7if17Q
+-RSAPWXYQ1qAk8C3eNvJsKTmjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/
+-BAQDAgGGMB0GA1UdDgQWBBTL0L2p4ZgFUaFNN6KDec6NHSrkhDAKBggqhkjOPQQD
+-AwNnADBkAjAlpIFFAmsSS3V0T8gj43DydXLefInwz5FyYZ5eEJJZVrmDxxDnOOlY
+-JjZ91eQ0hjkCMHw2U/Aw5WJjOpnitqM7mzT6HtoQknFekROn3aRukswy1vUhZscv
+-6pZjamVFkpUBtA==
+------END CERTIFICATE-----
+-
+ # cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
+ Certificate:
+ Data:
+@@ -2833,61 +1947,6 @@ RQuQ+q7hv53yrlc8pa6yVvSLZUDp/TGBLPQ5Cdjua6e0ph0VpZj3AYHYhX3zUVxx
+ iN66zB+Afko=
+ -----END CERTIFICATE-----
+
+-# 86a1ecba089c4a8d3bbe2734c612ba341d813e043cf9e8a862cd5c57a36bbe6b
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 3c:f6:07:a9:68:70:0e:da:8b:84
+- Signature Algorithm: ecdsa-with-SHA384
+- Issuer: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign ECC Root CA - G3
+- Validity
+- Not Before: Feb 18 18:30:00 2018 GMT
+- Not After : Feb 18 18:30:00 2043 GMT
+- Subject: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign ECC Root CA - G3
+- Subject Public Key Info:
+- Public Key Algorithm: id-ecPublicKey
+- Public-Key: (384 bit)
+- pub:
+- 04:23:a5:0c:b8:2d:12:f5:28:f3:b1:b2:dd:e2:02:
+- 12:80:9e:39:5f:49:4d:9f:c9:25:34:59:74:ec:bb:
+- 06:1c:e7:c0:72:af:e8:ae:2f:e1:41:54:87:14:a8:
+- 4a:b2:e8:7c:82:e6:5b:6a:b5:dc:b3:75:ce:8b:06:
+- d0:86:23:bf:46:d5:8e:0f:3f:04:f4:d7:1c:92:7e:
+- f6:a5:63:c2:f5:5f:8e:2e:4f:a1:18:19:02:2b:32:
+- 0a:82:64:7d:16:93:d1
+- ASN1 OID: secp384r1
+- NIST CURVE: P-384
+- X509v3 extensions:
+- X509v3 Subject Key Identifier:
+- 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- Signature Algorithm: ecdsa-with-SHA384
+- 30:66:02:31:00:be:f3:61:cf:02:10:1d:64:95:07:b8:18:6e:
+- 88:85:05:2f:83:08:17:90:ca:1f:8a:4c:e8:0d:1b:7a:b1:ad:
+- d5:81:09:47:ef:3b:ac:08:04:7c:5c:99:b1:ed:47:07:d2:02:
+- 31:00:9d:ba:55:fc:a9:4a:e8:ed:ed:e6:76:01:42:7b:c8:f8:
+- 60:d9:8d:51:8b:55:3b:fb:8c:7b:eb:65:09:c3:f8:96:cd:47:
+- a8:82:f2:16:55:77:24:7e:12:10:95:04:2c:a3
+------BEGIN CERTIFICATE-----
+-MIICTjCCAdOgAwIBAgIKPPYHqWhwDtqLhDAKBggqhkjOPQQDAzBrMQswCQYDVQQG
+-EwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNo
+-bm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g
+-RzMwHhcNMTgwMjE4MTgzMDAwWhcNNDMwMjE4MTgzMDAwWjBrMQswCQYDVQQGEwJJ
+-TjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9s
+-b2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0gRzMw
+-djAQBgcqhkjOPQIBBgUrgQQAIgNiAAQjpQy4LRL1KPOxst3iAhKAnjlfSU2fySU0
+-WXTsuwYc58Byr+iuL+FBVIcUqEqy6HyC5ltqtdyzdc6LBtCGI79G1Y4PPwT01xyS
+-fvalY8L1X44uT6EYGQIrMgqCZH0Wk9GjQjBAMB0GA1UdDgQWBBR8XQKEE9TMipuB
+-zhccLikenEhjQjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggq
+-hkjOPQQDAwNpADBmAjEAvvNhzwIQHWSVB7gYboiFBS+DCBeQyh+KTOgNG3qxrdWB
+-CUfvO6wIBHxcmbHtRwfSAjEAnbpV/KlK6O3t5nYBQnvI+GDZjVGLVTv7jHvrZQnD
+-+JbNR6iC8hZVdyR+EhCVBCyj
+------END CERTIFICATE-----
+-
+ # bfff8fd04433487d6a8aa60c1a29767a9fc2bbb05e420f713a13b992891d3893
+ Certificate:
+ Data:
+@@ -3430,59 +2489,6 @@ LPAvTK33sefOT6jEm0pUBsV/fdUID+Ic/n4XuKxe9tQWskMJDE32p2u0mYRlynqI
+ 4uJEvlz36hz1
+ -----END CERTIFICATE-----
+
+-# 34d8a73ee208d9bcdb0d956520934b4e40e69482596e8b6f73c8426b010a6f48
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 02:03:e5:b8:82:eb:20:f8:25:27:6d:3d:66
+- Signature Algorithm: ecdsa-with-SHA384
+- Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R3
+- Validity
+- Not Before: Jun 22 00:00:00 2016 GMT
+- Not After : Jun 22 00:00:00 2036 GMT
+- Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R3
+- Subject Public Key Info:
+- Public Key Algorithm: id-ecPublicKey
+- Public-Key: (384 bit)
+- pub:
+- 04:1f:4f:33:87:33:29:8a:a1:84:de:cb:c7:21:58:
+- 41:89:ea:56:9d:2b:4b:85:c6:1d:4c:27:bc:7f:26:
+- 51:72:6f:e2:9f:d6:a3:ca:cc:45:14:46:8b:ad:ef:
+- 7e:86:8c:ec:b1:7e:2f:ff:a9:71:9d:18:84:45:04:
+- 41:55:6e:2b:ea:26:7f:bb:90:01:e3:4b:19:ba:e4:
+- 54:96:45:09:b1:d5:6c:91:44:ad:84:13:8e:9a:8c:
+- 0d:80:0c:32:f6:e0:27
+- ASN1 OID: secp384r1
+- NIST CURVE: P-384
+- X509v3 extensions:
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- C1:F1:26:BA:A0:2D:AE:85:81:CF:D3:F1:2A:12:BD:B8:0A:67:FD:BC
+- Signature Algorithm: ecdsa-with-SHA384
+- 30:66:02:31:00:f6:e1:20:95:14:7b:54:a3:90:16:11:bf:84:
+- c8:ea:6f:6b:17:9e:1e:46:98:20:9b:9f:d3:0d:d9:ac:d3:2f:
+- cd:7c:f8:5b:2e:55:bb:bf:dd:92:f7:a4:0c:dc:31:e1:a2:02:
+- 31:00:fc:97:66:66:e5:43:16:13:83:dd:c7:df:2f:be:14:38:
+- ed:01:ce:b1:17:1a:11:75:e9:bd:03:8f:26:7e:84:e5:c9:60:
+- a6:95:d7:54:59:b7:e7:11:2c:89:d4:b9:ee:17
+------BEGIN CERTIFICATE-----
+-MIICCTCCAY6gAwIBAgINAgPluILrIPglJ209ZjAKBggqhkjOPQQDAzBHMQswCQYD
+-VQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIG
+-A1UEAxMLR1RTIFJvb3QgUjMwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAw
+-WjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2Vz
+-IExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwdjAQBgcqhkjOPQIBBgUrgQQAIgNi
+-AAQfTzOHMymKoYTey8chWEGJ6ladK0uFxh1MJ7x/JlFyb+Kf1qPKzEUURout736G
+-jOyxfi//qXGdGIRFBEFVbivqJn+7kAHjSxm65FSWRQmx1WyRRK2EE46ajA2ADDL2
+-4CejQjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW
+-BBTB8Sa6oC2uhYHP0/EqEr24Cmf9vDAKBggqhkjOPQQDAwNpADBmAjEA9uEglRR7
+-VKOQFhG/hMjqb2sXnh5GmCCbn9MN2azTL818+FsuVbu/3ZL3pAzcMeGiAjEA/Jdm
+-ZuVDFhOD3cffL74UOO0BzrEXGhF16b0DjyZ+hOXJYKaV11RZt+cRLInUue4X
+------END CERTIFICATE-----
+-
+ # d947432abde7b7fa90fc2e6b59101b1280e0e1c7e4e40fa3c6887fff57a7f4cf
+ Certificate:
+ Data:
+@@ -3706,127 +2712,6 @@ HQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUVLB7rUW44kB/
+ bmF0774BxL4YSFlhgjICICadVGNA3jdgUM/I2O2dgq43mLyjj0xMqTQrbO/7lZsm
+ -----END CERTIFICATE-----
+
+-# 8d25cd97229dbf70356bda4eb3cc734031e24cf00fafcfd32dc76eb5841c7ea8
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 02:03:e5:ae:c5:8d:04:25:1a:ab:11:25:aa
+- Signature Algorithm: sha384WithRSAEncryption
+- Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R2
+- Validity
+- Not Before: Jun 22 00:00:00 2016 GMT
+- Not After : Jun 22 00:00:00 2036 GMT
+- Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R2
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (4096 bit)
+- Modulus:
+- 00:ce:de:fd:a6:fb:ec:ec:14:34:3c:07:06:5a:6c:
+- 59:f7:19:35:dd:f7:c1:9d:55:aa:d3:cd:3b:a4:93:
+- 72:ef:0a:fa:6d:9d:f6:f0:85:80:5b:a1:48:52:9f:
+- 39:c5:b7:ee:28:ac:ef:cb:76:68:14:b9:df:ad:01:
+- 6c:99:1f:c4:22:1d:9f:fe:72:77:e0:2c:5b:af:e4:
+- 04:bf:4f:72:a0:1a:34:98:e8:39:68:ec:95:25:7b:
+- 76:a1:e6:69:b9:85:19:bd:89:8c:fe:ad:ed:36:ea:
+- 73:bc:ff:83:e2:cb:7d:c1:d2:ce:4a:b3:8d:05:9e:
+- 8b:49:93:df:c1:5b:d0:6e:5e:f0:2e:30:2e:82:fc:
+- fa:bc:b4:17:0a:48:e5:88:9b:c5:9b:6b:de:b0:ca:
+- b4:03:f0:da:f4:90:b8:65:64:f7:5c:4c:ad:e8:7e:
+- 66:5e:99:d7:b8:c2:3e:c8:d0:13:9d:ad:ee:e4:45:
+- 7b:89:55:f7:8a:1f:62:52:84:12:b3:c2:40:97:e3:
+- 8a:1f:47:91:a6:74:5a:d2:f8:b1:63:28:10:b8:b3:
+- 09:b8:56:77:40:a2:26:98:79:c6:fe:df:25:ee:3e:
+- e5:a0:7f:d4:61:0f:51:4b:3c:3f:8c:da:e1:70:74:
+- d8:c2:68:a1:f9:c1:0c:e9:a1:e2:7f:bb:55:3c:76:
+- 06:ee:6a:4e:cc:92:88:30:4d:9a:bd:4f:0b:48:9a:
+- 84:b5:98:a3:d5:fb:73:c1:57:61:dd:28:56:75:13:
+- ae:87:8e:e7:0c:51:09:10:75:88:4c:bc:8d:f9:7b:
+- 3c:d4:22:48:1f:2a:dc:eb:6b:bb:44:b1:cb:33:71:
+- 32:46:af:ad:4a:f1:8c:e8:74:3a:ac:e7:1a:22:73:
+- 80:d2:30:f7:25:42:c7:22:3b:3b:12:ad:96:2e:c6:
+- c3:76:07:aa:20:b7:35:49:57:e9:92:49:e8:76:16:
+- 72:31:67:2b:96:7e:8a:a3:c7:94:56:22:bf:6a:4b:
+- 7e:01:21:b2:23:32:df:e4:9a:44:6d:59:5b:5d:f5:
+- 00:a0:1c:9b:c6:78:97:8d:90:ff:9b:c8:aa:b4:af:
+- 11:51:39:5e:d9:fb:67:ad:d5:5b:11:9d:32:9a:1b:
+- bd:d5:ba:5b:a5:c9:cb:25:69:53:55:27:5c:e0:ca:
+- 36:cb:88:61:fb:1e:b7:d0:cb:ee:16:fb:d3:a6:4c:
+- de:92:a5:d4:e2:df:f5:06:54:de:2e:9d:4b:b4:93:
+- 30:aa:81:ce:dd:1a:dc:51:73:0d:4f:70:e9:e5:b6:
+- 16:21:19:79:b2:e6:89:0b:75:64:ca:d5:ab:bc:09:
+- c1:18:a1:ff:d4:54:a1:85:3c:fd:14:24:03:b2:87:
+- d3:a4:b7
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- BB:FF:CA:8E:23:9F:4F:99:CA:DB:E2:68:A6:A5:15:27:17:1E:D9:0E
+- Signature Algorithm: sha384WithRSAEncryption
+- 1f:ca:ce:dd:c7:be:a1:9f:d9:27:4c:0b:dc:17:98:11:6a:88:
+- de:3d:e6:71:56:72:b2:9e:1a:4e:9c:d5:2b:98:24:5d:9b:6b:
+- 7b:b0:33:82:09:bd:df:25:46:ea:98:9e:b6:1b:fe:83:3c:d2:
+- 62:61:c1:04:ed:ce:e0:c5:c9:c8:13:13:55:e7:a8:63:ad:8c:
+- 7b:01:fe:77:30:e1:ce:68:9b:05:f8:12:ee:79:31:a0:41:45:
+- 35:28:0a:71:a4:24:4f:8c:dc:3c:82:07:5f:66:dc:7d:10:fe:
+- 0c:61:b3:05:95:ee:e1:ae:81:0f:a8:f8:c7:8f:4d:a8:23:02:
+- 26:6b:1d:83:52:55:ce:b5:2f:00:ca:80:40:e0:e1:74:ac:60:
+- f5:87:80:9d:ae:36:64:91:5d:b0:68:18:ea:8a:61:c9:77:a8:
+- 97:c4:c9:c7:a5:fc:55:4b:f3:f0:7f:b9:65:3d:27:68:d0:cc:
+- 6b:fa:53:9d:e1:91:1a:c9:5d:1a:96:6d:32:87:ed:03:20:c8:
+- 02:ce:5a:be:d9:ea:fd:b2:4d:c4:2f:1b:df:5f:7a:f5:f8:8b:
+- c6:ee:31:3a:25:51:55:67:8d:64:32:7b:e9:9e:c3:82:ba:2a:
+- 2d:e9:1e:b4:e0:48:06:a2:fc:67:af:1f:22:02:73:fb:20:0a:
+- af:9d:54:4b:a1:cd:ff:60:47:b0:3f:5d:ef:1b:56:bd:97:21:
+- 96:2d:0a:d1:5e:9d:38:02:47:6c:b9:f4:f6:23:25:b8:a0:6a:
+- 9a:2b:77:08:fa:c4:b1:28:90:26:58:08:3c:e2:7e:aa:d7:3d:
+- 6f:ba:31:88:0a:05:eb:27:b5:a1:49:ee:a0:45:54:7b:e6:27:
+- 65:99:20:21:a8:a3:bc:fb:18:96:bb:52:6f:0c:ed:83:51:4c:
+- e9:59:e2:20:60:c5:c2:65:92:82:8c:f3:10:1f:0e:8a:97:be:
+- 77:82:6d:3f:8f:1d:5d:bc:49:27:bd:cc:4f:0f:e1:ce:76:86:
+- 04:23:c5:c0:8c:12:5b:fd:db:84:a0:24:f1:48:ff:64:7c:d0:
+- be:5c:16:d1:ef:99:ad:c0:1f:fb:cb:ae:bc:38:22:06:26:64:
+- da:da:97:0e:3f:28:15:44:a8:4f:00:ca:f0:9a:cc:cf:74:6a:
+- b4:3e:3c:eb:95:ec:b5:d3:5a:d8:81:99:e9:43:18:37:eb:b3:
+- bb:d1:58:62:41:f3:66:d2:8f:aa:78:95:54:20:c3:5a:2e:74:
+- 2b:d5:d1:be:18:69:c0:ac:d5:a4:cf:39:ba:51:84:03:65:e9:
+- 62:c0:62:fe:d8:4d:55:96:e2:d0:11:fa:48:34:11:ec:9e:ed:
+- 05:1d:e4:c8:d6:1d:86:cb
+------BEGIN CERTIFICATE-----
+-MIIFVzCCAz+gAwIBAgINAgPlrsWNBCUaqxElqjANBgkqhkiG9w0BAQwFADBHMQsw
+-CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU
+-MBIGA1UEAxMLR1RTIFJvb3QgUjIwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAw
+-MDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp
+-Y2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjIwggIiMA0GCSqGSIb3DQEBAQUA
+-A4ICDwAwggIKAoICAQDO3v2m++zsFDQ8BwZabFn3GTXd98GdVarTzTukk3LvCvpt
+-nfbwhYBboUhSnznFt+4orO/LdmgUud+tAWyZH8QiHZ/+cnfgLFuv5AS/T3KgGjSY
+-6Dlo7JUle3ah5mm5hRm9iYz+re026nO8/4Piy33B0s5Ks40FnotJk9/BW9BuXvAu
+-MC6C/Pq8tBcKSOWIm8Wba96wyrQD8Nr0kLhlZPdcTK3ofmZemde4wj7I0BOdre7k
+-RXuJVfeKH2JShBKzwkCX44ofR5GmdFrS+LFjKBC4swm4VndAoiaYecb+3yXuPuWg
+-f9RhD1FLPD+M2uFwdNjCaKH5wQzpoeJ/u1U8dgbuak7MkogwTZq9TwtImoS1mKPV
+-+3PBV2HdKFZ1E66HjucMUQkQdYhMvI35ezzUIkgfKtzra7tEscszcTJGr61K8Yzo
+-dDqs5xoic4DSMPclQsciOzsSrZYuxsN2B6ogtzVJV+mSSeh2FnIxZyuWfoqjx5RW
+-Ir9qS34BIbIjMt/kmkRtWVtd9QCgHJvGeJeNkP+byKq0rxFROV7Z+2et1VsRnTKa
+-G73VululycslaVNVJ1zgyjbLiGH7HrfQy+4W+9OmTN6SpdTi3/UGVN4unUu0kzCq
+-gc7dGtxRcw1PcOnlthYhGXmy5okLdWTK1au8CcEYof/UVKGFPP0UJAOyh9OktwID
+-AQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4E
+-FgQUu//KjiOfT5nK2+JopqUVJxce2Q4wDQYJKoZIhvcNAQEMBQADggIBAB/Kzt3H
+-vqGf2SdMC9wXmBFqiN495nFWcrKeGk6c1SuYJF2ba3uwM4IJvd8lRuqYnrYb/oM8
+-0mJhwQTtzuDFycgTE1XnqGOtjHsB/ncw4c5omwX4Eu55MaBBRTUoCnGkJE+M3DyC
+-B19m3H0Q/gxhswWV7uGugQ+o+MePTagjAiZrHYNSVc61LwDKgEDg4XSsYPWHgJ2u
+-NmSRXbBoGOqKYcl3qJfEycel/FVL8/B/uWU9J2jQzGv6U53hkRrJXRqWbTKH7QMg
+-yALOWr7Z6v2yTcQvG99fevX4i8buMTolUVVnjWQye+mew4K6Ki3pHrTgSAai/Gev
+-HyICc/sgCq+dVEuhzf9gR7A/Xe8bVr2XIZYtCtFenTgCR2y59PYjJbigapordwj6
+-xLEokCZYCDzifqrXPW+6MYgKBesntaFJ7qBFVHvmJ2WZICGoo7z7GJa7Um8M7YNR
+-TOlZ4iBgxcJlkoKM8xAfDoqXvneCbT+PHV28SSe9zE8P4c52hgQjxcCMElv924Sg
+-JPFI/2R80L5cFtHvma3AH/vLrrw4IgYmZNralw4/KBVEqE8AyvCazM90arQ+POuV
+-7LXTWtiBmelDGDfrs7vRWGJB82bSj6p4lVQgw1oudCvV0b4YacCs1aTPObpRhANl
+-6WLAYv7YTVWW4tAR+kg0Eeye7QUd5MjWHYbL
+------END CERTIFICATE-----
+-
+ # 5a2fc03f0c83b090bbfa40604b0988446c7636183df9846e17101a447fb8efd6
+ Certificate:
+ Data:
+@@ -5089,88 +3974,6 @@ AHFiRSdLOkKEW39lt2c0Ui2cFmuqqNh7o0JMcccMyj6D5KbvtwEwXlGjefVwaaZB
+ RA+GsCyRxj3qrg+E
+ -----END CERTIFICATE-----
+
+-# 6c61dac3a2def031506be036d2a6fe401994fbd13df9c8d466599274c446ec98
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number: 80544274841616 (0x49412ce40010)
+- Signature Algorithm: sha256WithRSAEncryption
+- Issuer: C = HU, L = Budapest, O = NetLock Kft., OU = Tan\C3\BAs\C3\ADtv\C3\A1nykiad\C3\B3k (Certification Services), CN = NetLock Arany (Class Gold) F\C5\91tan\C3\BAs\C3\ADtv\C3\A1ny
+- Validity
+- Not Before: Dec 11 15:08:21 2008 GMT
+- Not After : Dec 6 15:08:21 2028 GMT
+- Subject: C = HU, L = Budapest, O = NetLock Kft., OU = Tan\C3\BAs\C3\ADtv\C3\A1nykiad\C3\B3k (Certification Services), CN = NetLock Arany (Class Gold) F\C5\91tan\C3\BAs\C3\ADtv\C3\A1ny
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:c4:24:5e:73:be:4b:6d:14:c3:a1:f4:e3:97:90:
+- 6e:d2:30:45:1e:3c:ee:67:d9:64:e0:1a:8a:7f:ca:
+- 30:ca:83:e3:20:c1:e3:f4:3a:d3:94:5f:1a:7c:5b:
+- 6d:bf:30:4f:84:27:f6:9f:1f:49:bc:c6:99:0a:90:
+- f2:0f:f5:7f:43:84:37:63:51:8b:7a:a5:70:fc:7a:
+- 58:cd:8e:9b:ed:c3:46:6c:84:70:5d:da:f3:01:90:
+- 23:fc:4e:30:a9:7e:e1:27:63:e7:ed:64:3c:a0:b8:
+- c9:33:63:fe:16:90:ff:b0:b8:fd:d7:a8:c0:c0:94:
+- 43:0b:b6:d5:59:a6:9e:56:d0:24:1f:70:79:af:db:
+- 39:54:0d:65:75:d9:15:41:94:01:af:5e:ec:f6:8d:
+- f1:ff:ad:64:fe:20:9a:d7:5c:eb:fe:a6:1f:08:64:
+- a3:8b:76:55:ad:1e:3b:28:60:2e:87:25:e8:aa:af:
+- 1f:c6:64:46:20:b7:70:7f:3c:de:48:db:96:53:b7:
+- 39:77:e4:1a:e2:c7:16:84:76:97:5b:2f:bb:19:15:
+- 85:f8:69:85:f5:99:a7:a9:f2:34:a7:a9:b6:a6:03:
+- fc:6f:86:3d:54:7c:76:04:9b:6b:f9:40:5d:00:34:
+- c7:2e:99:75:9d:e5:88:03:aa:4d:f8:03:d2:42:76:
+- c0:1b
+- Exponent: 43147 (0xa88b)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE, pathlen:4
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- CC:FA:67:93:F0:B6:B8:D0:A5:C0:1E:F3:53:FD:8C:53:DF:83:D7:96
+- Signature Algorithm: sha256WithRSAEncryption
+- ab:7f:ee:1c:16:a9:9c:3c:51:00:a0:c0:11:08:05:a7:99:e6:
+- 6f:01:88:54:61:6e:f1:b9:18:ad:4a:ad:fe:81:40:23:94:2f:
+- fb:75:7c:2f:28:4b:62:24:81:82:0b:f5:61:f1:1c:6e:b8:61:
+- 38:eb:81:fa:62:a1:3b:5a:62:d3:94:65:c4:e1:e6:6d:82:f8:
+- 2f:25:70:b2:21:26:c1:72:51:1f:8c:2c:c3:84:90:c3:5a:8f:
+- ba:cf:f4:a7:65:a5:eb:98:d1:fb:05:b2:46:75:15:23:6a:6f:
+- 85:63:30:80:f0:d5:9e:1f:29:1c:c2:6c:b0:50:59:5d:90:5b:
+- 3b:a8:0d:30:cf:bf:7d:7f:ce:f1:9d:83:bd:c9:46:6e:20:a6:
+- f9:61:51:ba:21:2f:7b:be:a5:15:63:a1:d4:95:87:f1:9e:b9:
+- f3:89:f3:3d:85:b8:b8:db:be:b5:b9:29:f9:da:37:05:00:49:
+- 94:03:84:44:e7:bf:43:31:cf:75:8b:25:d1:f4:a6:64:f5:92:
+- f6:ab:05:eb:3d:e9:a5:0b:36:62:da:cc:06:5f:36:8b:b6:5e:
+- 31:b8:2a:fb:5e:f6:71:df:44:26:9e:c4:e6:0d:91:b4:2e:75:
+- 95:80:51:6a:4b:30:a6:b0:62:a1:93:f1:9b:d8:ce:c4:63:75:
+- 3f:59:47:b1
+------BEGIN CERTIFICATE-----
+-MIIEFTCCAv2gAwIBAgIGSUEs5AAQMA0GCSqGSIb3DQEBCwUAMIGnMQswCQYDVQQG
+-EwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFTATBgNVBAoMDE5ldExvY2sgS2Z0LjE3
+-MDUGA1UECwwuVGFuw7pzw610dsOhbnlraWFkw7NrIChDZXJ0aWZpY2F0aW9uIFNl
+-cnZpY2VzKTE1MDMGA1UEAwwsTmV0TG9jayBBcmFueSAoQ2xhc3MgR29sZCkgRsWR
+-dGFuw7pzw610dsOhbnkwHhcNMDgxMjExMTUwODIxWhcNMjgxMjA2MTUwODIxWjCB
+-pzELMAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRUwEwYDVQQKDAxOZXRM
+-b2NrIEtmdC4xNzA1BgNVBAsMLlRhbsO6c8OtdHbDoW55a2lhZMOzayAoQ2VydGlm
+-aWNhdGlvbiBTZXJ2aWNlcykxNTAzBgNVBAMMLE5ldExvY2sgQXJhbnkgKENsYXNz
+-IEdvbGQpIEbFkXRhbsO6c8OtdHbDoW55MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
+-MIIBCgKCAQEAxCRec75LbRTDofTjl5Bu0jBFHjzuZ9lk4BqKf8owyoPjIMHj9DrT
+-lF8afFttvzBPhCf2nx9JvMaZCpDyD/V/Q4Q3Y1GLeqVw/HpYzY6b7cNGbIRwXdrz
+-AZAj/E4wqX7hJ2Pn7WQ8oLjJM2P+FpD/sLj916jAwJRDC7bVWaaeVtAkH3B5r9s5
+-VA1lddkVQZQBr17s9o3x/61k/iCa11zr/qYfCGSji3ZVrR47KGAuhyXoqq8fxmRG
+-ILdwfzzeSNuWU7c5d+Qa4scWhHaXWy+7GRWF+GmF9ZmnqfI0p6m2pgP8b4Y9VHx2
+-BJtr+UBdADTHLpl1neWIA6pN+APSQnbAGwIDAKiLo0UwQzASBgNVHRMBAf8ECDAG
+-AQH/AgEEMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUzPpnk/C2uNClwB7zU/2M
+-U9+D15YwDQYJKoZIhvcNAQELBQADggEBAKt/7hwWqZw8UQCgwBEIBaeZ5m8BiFRh
+-bvG5GK1Krf6BQCOUL/t1fC8oS2IkgYIL9WHxHG64YTjrgfpioTtaYtOUZcTh5m2C
+-+C8lcLIhJsFyUR+MLMOEkMNaj7rP9KdlpeuY0fsFskZ1FSNqb4VjMIDw1Z4fKRzC
+-bLBQWV2QWzuoDTDPv31/zvGdg73JRm4gpvlhUbohL3u+pRVjodSVh/GeufOJ8z2F
+-uLjbvrW5KfnaNwUASZQDhETnv0Mxz3WLJdH0pmT1kvarBes96aULNmLazAZfNou2
+-XjG4Kvte9nHfRCaexOYNkbQudZWAUWpLMKawYqGT8ZvYzsRjdT9ZR7E=
+------END CERTIFICATE-----
+-
+ # 6b9c08e86eb0f767cfad65cd98b62149e5494a67f5845e7bd1ed019f27b86bd6
+ Certificate:
+ Data:
+@@ -5311,133 +4114,6 @@ rYy0UGYwEAYJKwYBBAGCNxUBBAMCAQAwCgYIKoZIzj0EAwMDaAAwZQIwJsdpW9zV
+ Mgj/mkkCtojeFK9dbJlxjRo/i9fgojaGHAeCOnZT/cKi7e97sIBPWA9LUzm9
+ -----END CERTIFICATE-----
+
+-# 85a0dd7dd720adb7ff05f83d542b209dc7ff4528f7d677b18389fea5e5c49e86
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number: 1289 (0x509)
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2
+- Validity
+- Not Before: Nov 24 18:27:00 2006 GMT
+- Not After : Nov 24 18:23:33 2031 GMT
+- Subject: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (4096 bit)
+- Modulus:
+- 00:9a:18:ca:4b:94:0d:00:2d:af:03:29:8a:f0:0f:
+- 81:c8:ae:4c:19:85:1d:08:9f:ab:29:44:85:f3:2f:
+- 81:ad:32:1e:90:46:bf:a3:86:26:1a:1e:fe:7e:1c:
+- 18:3a:5c:9c:60:17:2a:3a:74:83:33:30:7d:61:54:
+- 11:cb:ed:ab:e0:e6:d2:a2:7e:f5:6b:6f:18:b7:0a:
+- 0b:2d:fd:e9:3e:ef:0a:c6:b3:10:e9:dc:c2:46:17:
+- f8:5d:fd:a4:da:ff:9e:49:5a:9c:e6:33:e6:24:96:
+- f7:3f:ba:5b:2b:1c:7a:35:c2:d6:67:fe:ab:66:50:
+- 8b:6d:28:60:2b:ef:d7:60:c3:c7:93:bc:8d:36:91:
+- f3:7f:f8:db:11:13:c4:9c:77:76:c1:ae:b7:02:6a:
+- 81:7a:a9:45:83:e2:05:e6:b9:56:c1:94:37:8f:48:
+- 71:63:22:ec:17:65:07:95:8a:4b:df:8f:c6:5a:0a:
+- e5:b0:e3:5f:5e:6b:11:ab:0c:f9:85:eb:44:e9:f8:
+- 04:73:f2:e9:fe:5c:98:8c:f5:73:af:6b:b4:7e:cd:
+- d4:5c:02:2b:4c:39:e1:b2:95:95:2d:42:87:d7:d5:
+- b3:90:43:b7:6c:13:f1:de:dd:f6:c4:f8:89:3f:d1:
+- 75:f5:92:c3:91:d5:8a:88:d0:90:ec:dc:6d:de:89:
+- c2:65:71:96:8b:0d:03:fd:9c:bf:5b:16:ac:92:db:
+- ea:fe:79:7c:ad:eb:af:f7:16:cb:db:cd:25:2b:e5:
+- 1f:fb:9a:9f:e2:51:cc:3a:53:0c:48:e6:0e:bd:c9:
+- b4:76:06:52:e6:11:13:85:72:63:03:04:e0:04:36:
+- 2b:20:19:02:e8:74:a7:1f:b6:c9:56:66:f0:75:25:
+- dc:67:c1:0e:61:60:88:b3:3e:d1:a8:fc:a3:da:1d:
+- b0:d1:b1:23:54:df:44:76:6d:ed:41:d8:c1:b2:22:
+- b6:53:1c:df:35:1d:dc:a1:77:2a:31:e4:2d:f5:e5:
+- e5:db:c8:e0:ff:e5:80:d7:0b:63:a0:ff:33:a1:0f:
+- ba:2c:15:15:ea:97:b3:d2:a2:b5:be:f2:8c:96:1e:
+- 1a:8f:1d:6c:a4:61:37:b9:86:73:33:d7:97:96:9e:
+- 23:7d:82:a4:4c:81:e2:a1:d1:ba:67:5f:95:07:a3:
+- 27:11:ee:16:10:7b:bc:45:4a:4c:b2:04:d2:ab:ef:
+- d5:fd:0c:51:ce:50:6a:08:31:f9:91:da:0c:8f:64:
+- 5c:03:c3:3a:8b:20:3f:6e:8d:67:3d:3a:d6:fe:7d:
+- 5b:88:c9:5e:fb:cc:61:dc:8b:33:77:d3:44:32:35:
+- 09:62:04:92:16:10:d8:9e:27:47:fb:3b:21:e3:f8:
+- eb:1d:5b
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage:
+- Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- 1A:84:62:BC:48:4C:33:25:04:D4:EE:D0:F6:03:C4:19:46:D1:94:6B
+- X509v3 Authority Key Identifier:
+- keyid:1A:84:62:BC:48:4C:33:25:04:D4:EE:D0:F6:03:C4:19:46:D1:94:6B
+- DirName:/C=BM/O=QuoVadis Limited/CN=QuoVadis Root CA 2
+- serial:05:09
+-
+- Signature Algorithm: sha1WithRSAEncryption
+- 3e:0a:16:4d:9f:06:5b:a8:ae:71:5d:2f:05:2f:67:e6:13:45:
+- 83:c4:36:f6:f3:c0:26:0c:0d:b5:47:64:5d:f8:b4:72:c9:46:
+- a5:03:18:27:55:89:78:7d:76:ea:96:34:80:17:20:dc:e7:83:
+- f8:8d:fc:07:b8:da:5f:4d:2e:67:b2:84:fd:d9:44:fc:77:50:
+- 81:e6:7c:b4:c9:0d:0b:72:53:f8:76:07:07:41:47:96:0c:fb:
+- e0:82:26:93:55:8c:fe:22:1f:60:65:7c:5f:e7:26:b3:f7:32:
+- 90:98:50:d4:37:71:55:f6:92:21:78:f7:95:79:fa:f8:2d:26:
+- 87:66:56:30:77:a6:37:78:33:52:10:58:ae:3f:61:8e:f2:6a:
+- b1:ef:18:7e:4a:59:63:ca:8d:a2:56:d5:a7:2f:bc:56:1f:cf:
+- 39:c1:e2:fb:0a:a8:15:2c:7d:4d:7a:63:c6:6c:97:44:3c:d2:
+- 6f:c3:4a:17:0a:f8:90:d2:57:a2:19:51:a5:2d:97:41:da:07:
+- 4f:a9:50:da:90:8d:94:46:e1:3e:f0:94:fd:10:00:38:f5:3b:
+- e8:40:e1:b4:6e:56:1a:20:cc:6f:58:8d:ed:2e:45:8f:d6:e9:
+- 93:3f:e7:b1:2c:df:3a:d6:22:8c:dc:84:bb:22:6f:d0:f8:e4:
+- c6:39:e9:04:88:3c:c3:ba:eb:55:7a:6d:80:99:24:f5:6c:01:
+- fb:f8:97:b0:94:5b:eb:fd:d2:6f:f1:77:68:0d:35:64:23:ac:
+- b8:55:a1:03:d1:4d:42:19:dc:f8:75:59:56:a3:f9:a8:49:79:
+- f8:af:0e:b9:11:a0:7c:b7:6a:ed:34:d0:b6:26:62:38:1a:87:
+- 0c:f8:e8:fd:2e:d3:90:7f:07:91:2a:1d:d6:7e:5c:85:83:99:
+- b0:38:08:3f:e9:5e:f9:35:07:e4:c9:62:6e:57:7f:a7:50:95:
+- f7:ba:c8:9b:e6:8e:a2:01:c5:d6:66:bf:79:61:f3:3c:1c:e1:
+- b9:82:5c:5d:a0:c3:e9:d8:48:bd:19:a2:11:14:19:6e:b2:86:
+- 1b:68:3e:48:37:1a:88:b7:5d:96:5e:9c:c7:ef:27:62:08:e2:
+- 91:19:5c:d2:f1:21:dd:ba:17:42:82:97:71:81:53:31:a9:9f:
+- f6:7d:62:bf:72:e1:a3:93:1d:cc:8a:26:5a:09:38:d0:ce:d7:
+- 0d:80:16:b4:78:a5:3a:87:4c:8d:8a:a5:d5:46:97:f2:2c:10:
+- b9:bc:54:22:c0:01:50:69:43:9e:f4:b2:ef:6d:f8:ec:da:f1:
+- e3:b1:ef:df:91:8f:54:2a:0b:25:c1:26:19:c4:52:10:05:65:
+- d5:82:10:ea:c2:31:cd:2e
+------BEGIN CERTIFICATE-----
+-MIIFtzCCA5+gAwIBAgICBQkwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0x
+-GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJv
+-b3QgQ0EgMjAeFw0wNjExMjQxODI3MDBaFw0zMTExMjQxODIzMzNaMEUxCzAJBgNV
+-BAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMRswGQYDVQQDExJRdW9W
+-YWRpcyBSb290IENBIDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCa
+-GMpLlA0ALa8DKYrwD4HIrkwZhR0In6spRIXzL4GtMh6QRr+jhiYaHv5+HBg6XJxg
+-Fyo6dIMzMH1hVBHL7avg5tKifvVrbxi3Cgst/ek+7wrGsxDp3MJGF/hd/aTa/55J
+-WpzmM+Yklvc/ulsrHHo1wtZn/qtmUIttKGAr79dgw8eTvI02kfN/+NsRE8Scd3bB
+-rrcCaoF6qUWD4gXmuVbBlDePSHFjIuwXZQeVikvfj8ZaCuWw419eaxGrDPmF60Tp
+-+ARz8un+XJiM9XOva7R+zdRcAitMOeGylZUtQofX1bOQQ7dsE/He3fbE+Ik/0XX1
+-ksOR1YqI0JDs3G3eicJlcZaLDQP9nL9bFqyS2+r+eXyt66/3FsvbzSUr5R/7mp/i
+-Ucw6UwxI5g69ybR2BlLmEROFcmMDBOAENisgGQLodKcftslWZvB1JdxnwQ5hYIiz
+-PtGo/KPaHbDRsSNU30R2be1B2MGyIrZTHN81Hdyhdyox5C315eXbyOD/5YDXC2Og
+-/zOhD7osFRXql7PSorW+8oyWHhqPHWykYTe5hnMz15eWniN9gqRMgeKh0bpnX5UH
+-oycR7hYQe7xFSkyyBNKr79X9DFHOUGoIMfmR2gyPZFwDwzqLID9ujWc9Otb+fVuI
+-yV77zGHcizN300QyNQliBJIWENieJ0f7OyHj+OsdWwIDAQABo4GwMIGtMA8GA1Ud
+-EwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBQahGK8SEwzJQTU7tD2
+-A8QZRtGUazBuBgNVHSMEZzBlgBQahGK8SEwzJQTU7tD2A8QZRtGUa6FJpEcwRTEL
+-MAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMT
+-ElF1b1ZhZGlzIFJvb3QgQ0EgMoICBQkwDQYJKoZIhvcNAQEFBQADggIBAD4KFk2f
+-BluornFdLwUvZ+YTRYPENvbzwCYMDbVHZF34tHLJRqUDGCdViXh9duqWNIAXINzn
+-g/iN/Ae42l9NLmeyhP3ZRPx3UIHmfLTJDQtyU/h2BwdBR5YM++CCJpNVjP4iH2Bl
+-fF/nJrP3MpCYUNQ3cVX2kiF495V5+vgtJodmVjB3pjd4M1IQWK4/YY7yarHvGH5K
+-WWPKjaJW1acvvFYfzznB4vsKqBUsfU16Y8Zsl0Q80m/DShcK+JDSV6IZUaUtl0Ha
+-B0+pUNqQjZRG4T7wlP0QADj1O+hA4bRuVhogzG9Yje0uRY/W6ZM/57Es3zrWIozc
+-hLsib9D45MY56QSIPMO661V6bYCZJPVsAfv4l7CUW+v90m/xd2gNNWQjrLhVoQPR
+-TUIZ3Ph1WVaj+ahJefivDrkRoHy3au000LYmYjgahwz46P0u05B/B5EqHdZ+XIWD
+-mbA4CD/pXvk1B+TJYm5Xf6dQlfe6yJvmjqIBxdZmv3lh8zwc4bmCXF2gw+nYSL0Z
+-ohEUGW6yhhtoPkg3Goi3XZZenMfvJ2II4pEZXNLxId26F0KCl3GBUzGpn/Z9Yr9y
+-4aOTHcyKJloJONDO1w2AFrR4pTqHTI2KpdVGl/IsELm8VCLAAVBpQ570su9t+Oza
+-8eOx79+Rj1QqCyXBJhnEUhAFZdWCEOrCMc0u
+------END CERTIFICATE-----
+-
+ # 88ef81de202eb018452e43f864725cea5fbd1fc2d9d205730709c5d8b8690f46
+ Certificate:
+ Data:
+@@ -5759,88 +4435,6 @@ t/2jioSgrGK+KwmHNPBqAbubKVY8/gA3zyNs8U6qtnRGEmyR7jTV7JqR50S+kDFy
+ SjnRBUkLp7Y3gaVdjKozXoEofKd9J+sAro03
+ -----END CERTIFICATE-----
+
+-# 1a0d20445de5ba1862d19ef880858cbce50102b36e8f0a040c3c69e74522fe6e
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 20:a4:c4:7f:dd:df:e1:c7:53:63:07:13:88:77:60:12
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO Certification Authority
+- Validity
+- Not Before: Jan 1 00:00:00 2011 GMT
+- Not After : Dec 31 23:59:59 2030 GMT
+- Subject: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO Certification Authority
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:d0:40:8b:8b:72:e3:91:1b:f7:51:c1:1b:54:04:
+- 98:d3:a9:bf:c1:e6:8a:5d:3b:87:fb:bb:88:ce:0d:
+- e3:2f:3f:06:96:f0:a2:29:50:99:ae:db:3b:a1:57:
+- b0:74:51:71:cd:ed:42:91:4d:41:fe:a9:c8:d8:6a:
+- 86:77:44:bb:59:66:97:50:5e:b4:d4:2c:70:44:cf:
+- da:37:95:42:69:3c:30:c4:71:b3:52:f0:21:4d:a1:
+- d8:ba:39:7c:1c:9e:a3:24:9d:f2:83:16:98:aa:16:
+- 7c:43:9b:15:5b:b7:ae:34:91:fe:d4:62:26:18:46:
+- 9a:3f:eb:c1:f9:f1:90:57:eb:ac:7a:0d:8b:db:72:
+- 30:6a:66:d5:e0:46:a3:70:dc:68:d9:ff:04:48:89:
+- 77:de:b5:e9:fb:67:6d:41:e9:bc:39:bd:32:d9:62:
+- 02:f1:b1:a8:3d:6e:37:9c:e2:2f:e2:d3:a2:26:8b:
+- c6:b8:55:43:88:e1:23:3e:a5:d2:24:39:6a:47:ab:
+- 00:d4:a1:b3:a9:25:fe:0d:3f:a7:1d:ba:d3:51:c1:
+- 0b:a4:da:ac:38:ef:55:50:24:05:65:46:93:34:4f:
+- 2d:8d:ad:c6:d4:21:19:d2:8e:ca:05:61:71:07:73:
+- 47:e5:8a:19:12:bd:04:4d:ce:4e:9c:a5:48:ac:bb:
+- 26:f7
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Subject Key Identifier:
+- 0B:58:E5:8B:C6:4C:15:37:A4:40:A9:30:A9:21:BE:47:36:5A:56:FF
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- Signature Algorithm: sha1WithRSAEncryption
+- 2f:c9:c4:1c:07:3b:cf:61:02:00:b1:d9:21:51:75:72:03:30:
+- b0:c4:16:1f:6c:00:8b:10:ac:af:f1:47:d4:ae:10:3c:0c:1a:
+- f8:d4:93:6c:ac:10:37:7c:b7:a6:83:64:ad:cd:df:0e:87:33:
+- 9d:37:b0:c6:7b:38:72:b1:f3:1a:0e:a3:f9:55:7a:6d:03:66:
+- 03:17:95:4a:f1:b1:7a:df:56:21:06:42:8f:b1:d3:a8:85:de:
+- ee:97:1d:62:eb:a7:e7:31:12:66:c3:0f:a6:4b:2e:41:82:f7:
+- fd:c9:1b:a8:1b:af:ee:3c:ce:e3:9c:ae:28:07:a1:2c:9b:24:
+- c2:0f:23:26:83:32:8b:86:0f:1f:2b:12:46:25:16:8f:76:90:
+- 03:6b:de:bc:aa:22:68:6b:8c:a1:ac:2b:11:39:a6:db:70:c2:
+- 7d:72:e9:33:e7:fc:26:f1:74:5a:91:e6:9d:84:ac:f8:a8:06:
+- 19:46:e6:a7:e9:aa:34:22:a4:a1:9f:7a:ad:b7:b2:a4:9a:33:
+- 88:71:02:3c:2e:d6:7a:b2:1f:a2:ca:c0:dd:2f:10:94:fd:b3:
+- 8c:84:20:79:46:d5:05:d4:10:e4:d2:db:64:4f:b8:5b:ee:1b:
+- c5:20:47:5b:94:ab:6e:d4:95:33:1d:a6:15:71:f1:f8:94:ca:
+- 54:39:3e:c1
+------BEGIN CERTIFICATE-----
+-MIID0DCCArigAwIBAgIQIKTEf93f4cdTYwcTiHdgEjANBgkqhkiG9w0BAQUFADCB
+-gTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
+-A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJzAlBgNV
+-BAMTHkNPTU9ETyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTAxMDEwMDAw
+-MDBaFw0zMDEyMzEyMzU5NTlaMIGBMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl
+-YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01P
+-RE8gQ0EgTGltaXRlZDEnMCUGA1UEAxMeQ09NT0RPIENlcnRpZmljYXRpb24gQXV0
+-aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECLi3LjkRv3
+-UcEbVASY06m/weaKXTuH+7uIzg3jLz8GlvCiKVCZrts7oVewdFFxze1CkU1B/qnI
+-2GqGd0S7WWaXUF601CxwRM/aN5VCaTwwxHGzUvAhTaHYujl8HJ6jJJ3ygxaYqhZ8
+-Q5sVW7euNJH+1GImGEaaP+vB+fGQV+useg2L23IwambV4EajcNxo2f8ESIl33rXp
+-+2dtQem8Ob0y2WIC8bGoPW43nOIv4tOiJovGuFVDiOEjPqXSJDlqR6sA1KGzqSX+
+-DT+nHbrTUcELpNqsOO9VUCQFZUaTNE8tja3G1CEZ0o7KBWFxB3NH5YoZEr0ETc5O
+-nKVIrLsm9wIDAQABo0IwQDAdBgNVHQ4EFgQUC1jli8ZMFTekQKkwqSG+RzZaVv8w
+-DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD
+-ggEBAC/JxBwHO89hAgCx2SFRdXIDMLDEFh9sAIsQrK/xR9SuEDwMGvjUk2ysEDd8
+-t6aDZK3N3w6HM503sMZ7OHKx8xoOo/lVem0DZgMXlUrxsXrfViEGQo+x06iF3u6X
+-HWLrp+cxEmbDD6ZLLkGC9/3JG6gbr+48zuOcrigHoSybJMIPIyaDMouGDx8rEkYl
+-Fo92kANr3ryqImhrjKGsKxE5pttwwn1y6TPn/CbxdFqR5p2ErPioBhlG5qfpqjQi
+-pKGfeq23sqSaM4hxAjwu1nqyH6LKwN0vEJT9s4yEIHlG1QXUEOTS22RPuFvuG8Ug
+-R1uUq27UlTMdphVx8fiUylQ5PsE=
+------END CERTIFICATE-----
+-
+ # 1793927a0614549789adce2f8f34f7f0b66d0f3ae3a3b84d21ec15dbba4fadc7
+ Certificate:
+ Data:
+@@ -6201,328 +4795,6 @@ L6KCq9NjRHDEjf8tM7qtj3u1cIiuPhnPQCjY/MiQu12ZIvVS5ljFH4gxQ+6IHdfG
+ jjxDah2nGN59PRbxYvnKkKj9
+ -----END CERTIFICATE-----
+
+-# 55903859c8c0c3ebb8759ece4e2557225ff5758bbd38ebd48276601e1bd58097
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 08:bd:85:97:6c:99:27:a4:80:68:47:3b
+- Signature Algorithm: ecdsa-with-SHA384
+- Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P384 Certification Authority
+- Validity
+- Not Before: Aug 23 19:36:43 2017 GMT
+- Not After : Aug 23 19:36:43 2042 GMT
+- Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P384 Certification Authority
+- Subject Public Key Info:
+- Public Key Algorithm: id-ecPublicKey
+- Public-Key: (384 bit)
+- pub:
+- 04:6b:da:0d:75:35:08:31:47:05:ae:45:99:55:f1:
+- 11:13:2e:4a:f8:10:31:23:a3:7e:83:d3:7f:28:08:
+- 3a:26:1a:3a:cf:97:82:1f:80:b7:27:09:8f:d1:8e:
+- 30:c4:0a:9b:0e:ac:58:04:ab:f7:36:7d:94:23:a4:
+- 9b:0a:8a:8b:ab:eb:fd:39:25:66:f1:5e:fe:8c:ae:
+- 8d:41:79:9d:09:60:ce:28:a9:d3:8a:6d:f3:d6:45:
+- d4:f2:98:84:38:65:a0
+- ASN1 OID: secp384r1
+- NIST CURVE: P-384
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- 55:A9:84:89:D2:C1:32:BD:18:CB:6C:A6:07:4E:C8:E7:9D:BE:82:90
+- Signature Algorithm: ecdsa-with-SHA384
+- 30:64:02:30:37:01:92:97:45:12:7e:a0:f3:3e:ad:19:3a:72:
+- dd:f4:50:93:03:12:be:44:d2:4f:41:a4:8c:9c:9d:1f:a3:f6:
+- c2:92:e7:48:14:fe:4e:9b:a5:91:57:ae:c6:37:72:bb:02:30:
+- 67:25:0a:b1:0c:5e:ee:a9:63:92:6f:e5:90:0b:fe:66:22:ca:
+- 47:fd:8a:31:f7:83:fe:7a:bf:10:be:18:2b:1e:8f:f6:29:1e:
+- 94:59:ef:8e:21:37:cb:51:98:a5:6e:4b
+------BEGIN CERTIFICATE-----
+-MIICnTCCAiSgAwIBAgIMCL2Fl2yZJ6SAaEc7MAoGCCqGSM49BAMDMIGRMQswCQYD
+-VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf
+-BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3
+-YXZlIEdsb2JhbCBFQ0MgUDM4NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x
+-NzA4MjMxOTM2NDNaFw00MjA4MjMxOTM2NDNaMIGRMQswCQYDVQQGEwJVUzERMA8G
+-A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0
+-d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF
+-Q0MgUDM4NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTB2MBAGByqGSM49AgEGBSuB
+-BAAiA2IABGvaDXU1CDFHBa5FmVXxERMuSvgQMSOjfoPTfygIOiYaOs+Xgh+AtycJ
+-j9GOMMQKmw6sWASr9zZ9lCOkmwqKi6vr/TklZvFe/oyujUF5nQlgziip04pt89ZF
+-1PKYhDhloKNDMEEwDwYDVR0TAQH/BAUwAwEB/zAPBgNVHQ8BAf8EBQMDBwYAMB0G
+-A1UdDgQWBBRVqYSJ0sEyvRjLbKYHTsjnnb6CkDAKBggqhkjOPQQDAwNnADBkAjA3
+-AZKXRRJ+oPM+rRk6ct30UJMDEr5E0k9BpIycnR+j9sKS50gU/k6bpZFXrsY3crsC
+-MGclCrEMXu6pY5Jv5ZAL/mYiykf9ijH3g/56vxC+GCsej/YpHpRZ744hN8tRmKVu
+-Sw==
+------END CERTIFICATE-----
+-
+-# 945bbc825ea554f489d1fd51a73ddf2ea624ac7019a05205225c22a78ccfa8b4
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 0d:6a:5f:08:3f:28:5c:3e:51:95:df:5d
+- Signature Algorithm: ecdsa-with-SHA256
+- Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P256 Certification Authority
+- Validity
+- Not Before: Aug 23 19:35:10 2017 GMT
+- Not After : Aug 23 19:35:10 2042 GMT
+- Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P256 Certification Authority
+- Subject Public Key Info:
+- Public Key Algorithm: id-ecPublicKey
+- Public-Key: (256 bit)
+- pub:
+- 04:7e:fb:6c:e6:23:e3:73:32:08:ca:60:e6:53:9c:
+- ba:74:8d:18:b0:78:90:52:80:dd:38:c0:4a:1d:d1:
+- a8:cc:93:a4:97:06:38:ca:0d:15:62:c6:8e:01:2a:
+- 65:9d:aa:df:34:91:2e:81:c1:e4:33:92:31:c4:fd:
+- 09:3a:a6:3f:ad
+- ASN1 OID: prime256v1
+- NIST CURVE: P-256
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- A3:41:06:AC:90:6D:D1:4A:EB:75:A5:4A:10:99:B3:B1:A1:8B:4A:F7
+- Signature Algorithm: ecdsa-with-SHA256
+- 30:44:02:20:07:e6:54:da:0e:a0:5a:b2:ae:11:9f:87:c5:b6:
+- ff:69:de:25:be:f8:a0:b7:08:f3:44:ce:2a:df:08:21:0c:37:
+- 02:20:2d:26:03:a0:05:bd:6b:d1:f6:5c:f8:65:cc:86:6d:b3:
+- 9c:34:48:63:84:09:c5:8d:77:1a:e2:cc:9c:e1:74:7b
+------BEGIN CERTIFICATE-----
+-MIICYDCCAgegAwIBAgIMDWpfCD8oXD5Rld9dMAoGCCqGSM49BAMCMIGRMQswCQYD
+-VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf
+-BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3
+-YXZlIEdsb2JhbCBFQ0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x
+-NzA4MjMxOTM1MTBaFw00MjA4MjMxOTM1MTBaMIGRMQswCQYDVQQGEwJVUzERMA8G
+-A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0
+-d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF
+-Q0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTBZMBMGByqGSM49AgEGCCqG
+-SM49AwEHA0IABH77bOYj43MyCMpg5lOcunSNGLB4kFKA3TjASh3RqMyTpJcGOMoN
+-FWLGjgEqZZ2q3zSRLoHB5DOSMcT9CTqmP62jQzBBMA8GA1UdEwEB/wQFMAMBAf8w
+-DwYDVR0PAQH/BAUDAwcGADAdBgNVHQ4EFgQUo0EGrJBt0UrrdaVKEJmzsaGLSvcw
+-CgYIKoZIzj0EAwIDRwAwRAIgB+ZU2g6gWrKuEZ+Hxbb/ad4lvvigtwjzRM4q3wgh
+-DDcCIC0mA6AFvWvR9lz4ZcyGbbOcNEhjhAnFjXca4syc4XR7
+------END CERTIFICATE-----
+-
+-# 97552015f5ddfc3c8788c006944555408894450084f100867086bc1a2bb58dc8
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 05:f7:0e:86:da:49:f3:46:35:2e:ba:b2
+- Signature Algorithm: sha256WithRSAEncryption
+- Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global Certification Authority
+- Validity
+- Not Before: Aug 23 19:34:12 2017 GMT
+- Not After : Aug 23 19:34:12 2042 GMT
+- Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global Certification Authority
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (4096 bit)
+- Modulus:
+- 00:b9:5d:51:28:4b:3c:37:92:d1:82:ce:bd:1d:bd:
+- cd:dd:b8:ab:cf:0a:3e:e1:5d:e5:dc:aa:09:b9:57:
+- 02:3e:e6:63:61:df:f2:0f:82:63:ae:a3:f7:ac:73:
+- d1:7c:e7:b3:0b:af:08:00:09:59:7f:cd:29:2a:88:
+- 93:87:17:18:80:ed:88:b2:b4:b6:10:1f:2d:d6:5f:
+- 55:a2:13:5d:d1:c6:eb:06:56:89:88:fe:ac:32:9d:
+- fd:5c:c3:05:c7:6e:ee:86:89:ba:88:03:9d:72:21:
+- 86:90:ae:8f:03:a5:dc:9f:88:28:cb:a3:92:49:0f:
+- ec:d0:0f:e2:6d:44:4f:80:6a:b2:d4:e7:a0:0a:53:
+- 01:ba:8e:97:91:76:6e:bc:fc:d5:6b:36:e6:40:88:
+- d6:7b:2f:5f:05:e8:2c:6d:11:f3:e7:b2:be:92:44:
+- 4c:d2:97:a4:fe:d2:72:81:43:07:9c:e9:11:3e:f5:
+- 8b:1a:59:7d:1f:68:58:dd:04:00:2c:96:f3:43:b3:
+- 7e:98:19:74:d9:9c:73:d9:18:be:41:c7:34:79:d9:
+- f4:62:c2:43:b9:b3:27:b0:22:cb:f9:3d:52:c7:30:
+- 47:b3:c9:3e:b8:6a:e2:e7:e8:81:70:5e:42:8b:4f:
+- 26:a5:fe:3a:c2:20:6e:bb:f8:16:8e:cd:0c:a9:b4:
+- 1b:6c:76:10:e1:58:79:46:3e:54:ce:80:a8:57:09:
+- 37:29:1b:99:13:8f:0c:c8:d6:2c:1c:fb:05:e8:08:
+- 95:3d:65:46:dc:ee:cd:69:e2:4d:8f:87:28:4e:34:
+- 0b:3e:cf:14:d9:bb:dd:b6:50:9a:ad:77:d4:19:d6:
+- da:1a:88:c8:4e:1b:27:75:d8:b2:08:f1:ae:83:30:
+- b9:11:0e:cd:87:f0:84:8d:15:72:7c:a1:ef:cc:f2:
+- 88:61:ba:f4:69:bb:0c:8c:0b:75:57:04:b8:4e:2a:
+- 14:2e:3d:0f:1c:1e:32:a6:62:36:ee:66:e2:22:b8:
+- 05:40:63:10:22:f3:33:1d:74:72:8a:2c:f5:39:29:
+- a0:d3:e7:1b:80:84:2d:c5:3d:e3:4d:b1:fd:1a:6f:
+- ba:65:07:3b:58:ec:42:45:26:fb:d8:da:25:72:c4:
+- f6:00:b1:22:79:bd:e3:7c:59:62:4a:9c:05:6f:3d:
+- ce:e6:d6:47:63:99:c6:24:6f:72:12:c8:ac:7f:90:
+- b4:0b:91:70:e8:b7:e6:16:10:71:17:ce:de:06:4f:
+- 48:41:7d:35:4a:a3:89:f2:c9:4b:7b:41:11:6d:67:
+- b7:08:98:4c:e5:11:19:ae:42:80:dc:fb:90:05:d4:
+- f8:50:ca:be:e4:ad:c7:c2:94:d7:16:9d:e6:17:8f:
+- af:36:fb
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- 99:E0:19:67:0D:62:DB:76:B3:DA:3D:B8:5B:E8:FD:42:D2:31:0E:87
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- Signature Algorithm: sha256WithRSAEncryption
+- 98:73:70:e2:b0:d3:ed:39:ec:4c:60:d9:a9:12:86:17:1e:96:
+- d0:e8:54:28:3b:64:2d:21:a6:f8:9d:56:13:6a:48:3d:4f:c7:
+- 3e:29:db:6d:58:83:54:3d:87:7d:23:05:d4:e4:1c:dc:e8:38:
+- 65:86:c5:75:a7:5a:db:35:05:bd:77:de:bb:29:37:40:05:07:
+- c3:94:52:9f:ca:64:dd:f1:1b:2b:dc:46:0a:10:02:31:fd:4a:
+- 68:0d:07:64:90:e6:1e:f5:2a:a1:a8:bb:3c:5d:f9:a3:08:0b:
+- 11:0c:f1:3f:2d:10:94:6f:fe:e2:34:87:83:d6:cf:e5:1b:35:
+- 6d:d2:03:e1:b0:0d:a8:a0:aa:46:27:82:36:a7:15:b6:08:a6:
+- 42:54:57:b6:99:5a:e2:0b:79:90:d7:57:12:51:35:19:88:41:
+- 68:25:d4:37:17:84:15:fb:01:72:dc:95:de:52:26:20:98:26:
+- e2:76:f5:27:6f:fa:00:3b:4a:61:d9:0d:cb:51:93:2a:fd:16:
+- 06:96:a7:23:9a:23:48:fe:51:bd:b6:c4:b0:b1:54:ce:de:6c:
+- 41:ad:16:67:7e:db:fd:38:cd:b9:38:4e:b2:c1:60:cb:9d:17:
+- df:58:9e:7a:62:b2:26:8f:74:95:9b:e4:5b:1d:d2:0f:dd:98:
+- 1c:9b:59:b9:23:d3:31:a0:a6:ff:38:dd:cf:20:4f:e9:58:56:
+- 3a:67:c3:d1:f6:99:99:9d:ba:36:b6:80:2f:88:47:4f:86:bf:
+- 44:3a:80:e4:37:1c:a6:ba:ea:97:98:11:d0:84:62:47:64:1e:
+- aa:ee:40:bf:34:b1:9c:8f:4e:e1:f2:92:4f:1f:8e:f3:9e:97:
+- de:f3:a6:79:6a:89:71:4f:4b:27:17:48:fe:ec:f4:50:0f:4f:
+- 49:7d:cc:45:e3:bd:7a:40:c5:41:dc:61:56:27:06:69:e5:72:
+- 41:81:d3:b6:01:89:a0:2f:3a:72:79:fe:3a:30:bf:41:ec:c7:
+- 62:3e:91:4b:c7:d9:31:76:42:f9:f7:3c:63:ec:26:8c:73:0c:
+- 7d:1a:1d:ea:a8:7c:87:a8:c2:27:7c:e1:33:41:0f:cf:cf:fc:
+- 00:a0:22:80:9e:4a:a7:6f:00:b0:41:45:b7:22:ca:68:48:c5:
+- 42:a2:ae:dd:1d:f2:e0:6e:4e:05:58:b1:c0:90:16:2a:a4:3d:
+- 10:40:be:8f:62:63:83:a9:9c:82:7d:2d:02:e9:83:30:7c:cb:
+- 27:c9:fd:1e:66:00:b0:2e:d3:21:2f:8e:33:16:6c:98:ed:10:
+- a8:07:d6:cc:93:cf:db:d1:69:1c:e4:ca:c9:e0:b6:9c:e9:ce:
+- 71:71:de:6c:3f:16:a4:79
+------BEGIN CERTIFICATE-----
+-MIIF2jCCA8KgAwIBAgIMBfcOhtpJ80Y1LrqyMA0GCSqGSIb3DQEBCwUAMIGIMQsw
+-CQYDVQQGEwJVUzERMA8GA1UECAwISWxsaW5vaXMxEDAOBgNVBAcMB0NoaWNhZ28x
+-ITAfBgNVBAoMGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjExMC8GA1UEAwwoVHJ1
+-c3R3YXZlIEdsb2JhbCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xNzA4MjMx
+-OTM0MTJaFw00MjA4MjMxOTM0MTJaMIGIMQswCQYDVQQGEwJVUzERMA8GA1UECAwI
+-SWxsaW5vaXMxEDAOBgNVBAcMB0NoaWNhZ28xITAfBgNVBAoMGFRydXN0d2F2ZSBI
+-b2xkaW5ncywgSW5jLjExMC8GA1UEAwwoVHJ1c3R3YXZlIEdsb2JhbCBDZXJ0aWZp
+-Y2F0aW9uIEF1dGhvcml0eTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
+-ALldUShLPDeS0YLOvR29zd24q88KPuFd5dyqCblXAj7mY2Hf8g+CY66j96xz0Xzn
+-swuvCAAJWX/NKSqIk4cXGIDtiLK0thAfLdZfVaITXdHG6wZWiYj+rDKd/VzDBcdu
+-7oaJuogDnXIhhpCujwOl3J+IKMujkkkP7NAP4m1ET4BqstTnoApTAbqOl5F2brz8
+-1Ws25kCI1nsvXwXoLG0R8+eyvpJETNKXpP7ScoFDB5zpET71ixpZfR9oWN0EACyW
+-80OzfpgZdNmcc9kYvkHHNHnZ9GLCQ7mzJ7Aiy/k9UscwR7PJPrhq4ufogXBeQotP
+-JqX+OsIgbrv4Fo7NDKm0G2x2EOFYeUY+VM6AqFcJNykbmROPDMjWLBz7BegIlT1l
+-RtzuzWniTY+HKE40Cz7PFNm73bZQmq131BnW2hqIyE4bJ3XYsgjxroMwuREOzYfw
+-hI0Vcnyh78zyiGG69Gm7DIwLdVcEuE4qFC49DxweMqZiNu5m4iK4BUBjECLzMx10
+-coos9TkpoNPnG4CELcU9402x/RpvumUHO1jsQkUm+9jaJXLE9gCxInm943xZYkqc
+-BW89zubWR2OZxiRvchLIrH+QtAuRcOi35hYQcRfO3gZPSEF9NUqjifLJS3tBEW1n
+-twiYTOURGa5CgNz7kAXU+FDKvuStx8KU1xad5hePrzb7AgMBAAGjQjBAMA8GA1Ud
+-EwEB/wQFMAMBAf8wHQYDVR0OBBYEFJngGWcNYtt2s9o9uFvo/ULSMQ6HMA4GA1Ud
+-DwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAgEAmHNw4rDT7TnsTGDZqRKGFx6W
+-0OhUKDtkLSGm+J1WE2pIPU/HPinbbViDVD2HfSMF1OQc3Og4ZYbFdada2zUFvXfe
+-uyk3QAUHw5RSn8pk3fEbK9xGChACMf1KaA0HZJDmHvUqoai7PF35owgLEQzxPy0Q
+-lG/+4jSHg9bP5Rs1bdID4bANqKCqRieCNqcVtgimQlRXtpla4gt5kNdXElE1GYhB
+-aCXUNxeEFfsBctyV3lImIJgm4nb1J2/6ADtKYdkNy1GTKv0WBpanI5ojSP5RvbbE
+-sLFUzt5sQa0WZ37b/TjNuThOssFgy50X31ieemKyJo90lZvkWx3SD92YHJtZuSPT
+-MaCm/zjdzyBP6VhWOmfD0faZmZ26NraAL4hHT4a/RDqA5Dccprrql5gR0IRiR2Qe
+-qu5AvzSxnI9O4fKSTx+O856X3vOmeWqJcU9LJxdI/uz0UA9PSX3MReO9ekDFQdxh
+-VicGaeVyQYHTtgGJoC86cnn+OjC/QezHYj6RS8fZMXZC+fc8Y+wmjHMMfRod6qh8
+-h6jCJ3zhM0EPz8/8AKAigJ5Kp28AsEFFtyLKaEjFQqKu3R3y4G5OBVixwJAWKqQ9
+-EEC+j2Jjg6mcgn0tAumDMHzLJ8n9HmYAsC7TIS+OMxZsmO0QqAfWzJPP29FpHOTK
+-yeC2nOnOcXHebD8WpHk=
+------END CERTIFICATE-----
+-
+-# f1c1b50ae5a20dd8030ec9f6bc24823dd367b5255759b4e71b61fce9f7375d73
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 0c:f0:8e:5c:08:16:a5:ad:42:7f:f0:eb:27:18:59:d0
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = US, O = SecureTrust Corporation, CN = SecureTrust CA
+- Validity
+- Not Before: Nov 7 19:31:18 2006 GMT
+- Not After : Dec 31 19:40:55 2029 GMT
+- Subject: C = US, O = SecureTrust Corporation, CN = SecureTrust CA
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:ab:a4:81:e5:95:cd:f5:f6:14:8e:c2:4f:ca:d4:
+- e2:78:95:58:9c:41:e1:0d:99:40:24:17:39:91:33:
+- 66:e9:be:e1:83:af:62:5c:89:d1:fc:24:5b:61:b3:
+- e0:11:11:41:1c:1d:6e:f0:b8:bb:f8:de:a7:81:ba:
+- a6:48:c6:9f:1d:bd:be:8e:a9:41:3e:b8:94:ed:29:
+- 1a:d4:8e:d2:03:1d:03:ef:6d:0d:67:1c:57:d7:06:
+- ad:ca:c8:f5:fe:0e:af:66:25:48:04:96:0b:5d:a3:
+- ba:16:c3:08:4f:d1:46:f8:14:5c:f2:c8:5e:01:99:
+- 6d:fd:88:cc:86:a8:c1:6f:31:42:6c:52:3e:68:cb:
+- f3:19:34:df:bb:87:18:56:80:26:c4:d0:dc:c0:6f:
+- df:de:a0:c2:91:16:a0:64:11:4b:44:bc:1e:f6:e7:
+- fa:63:de:66:ac:76:a4:71:a3:ec:36:94:68:7a:77:
+- a4:b1:e7:0e:2f:81:7a:e2:b5:72:86:ef:a2:6b:8b:
+- f0:0f:db:d3:59:3f:ba:72:bc:44:24:9c:e3:73:b3:
+- f7:af:57:2f:42:26:9d:a9:74:ba:00:52:f2:4b:cd:
+- 53:7c:47:0b:36:85:0e:66:a9:08:97:16:34:57:c1:
+- 66:f7:80:e3:ed:70:54:c7:93:e0:2e:28:15:59:87:
+- ba:bb
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- 1.3.6.1.4.1.311.20.2:
+- ...C.A
+- X509v3 Key Usage:
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- 42:32:B6:16:FA:04:FD:FE:5D:4B:7A:C3:FD:F7:4C:40:1D:5A:43:AF
+- X509v3 CRL Distribution Points:
+-
+- Full Name:
+- URI:http://crl.securetrust.com/STCA.crl
+-
+- 1.3.6.1.4.1.311.21.1:
+- ...
+- Signature Algorithm: sha1WithRSAEncryption
+- 30:ed:4f:4a:e1:58:3a:52:72:5b:b5:a6:a3:65:18:a6:bb:51:
+- 3b:77:e9:9d:ea:d3:9f:5c:e0:45:65:7b:0d:ca:5b:e2:70:50:
+- b2:94:05:14:ae:49:c7:8d:41:07:12:73:94:7e:0c:23:21:fd:
+- bc:10:7f:60:10:5a:72:f5:98:0e:ac:ec:b9:7f:dd:7a:6f:5d:
+- d3:1c:f4:ff:88:05:69:42:a9:05:71:c8:b7:ac:26:e8:2e:b4:
+- 8c:6a:ff:71:dc:b8:b1:df:99:bc:7c:21:54:2b:e4:58:a2:bb:
+- 57:29:ae:9e:a9:a3:19:26:0f:99:2e:08:b0:ef:fd:69:cf:99:
+- 1a:09:8d:e3:a7:9f:2b:c9:36:34:7b:24:b3:78:4c:95:17:a4:
+- 06:26:1e:b6:64:52:36:5f:60:67:d9:9c:c5:05:74:0b:e7:67:
+- 23:d2:08:fc:88:e9:ae:8b:7f:e1:30:f4:37:7e:fd:c6:32:da:
+- 2d:9e:44:30:30:6c:ee:07:de:d2:34:fc:d2:ff:40:f6:4b:f4:
+- 66:46:06:54:a6:f2:32:0a:63:26:30:6b:9b:d1:dc:8b:47:ba:
+- e1:b9:d5:62:d0:a2:a0:f4:67:05:78:29:63:1a:6f:04:d6:f8:
+- c6:4c:a3:9a:b1:37:b4:8d:e5:28:4b:1d:9e:2c:c2:b8:68:bc:
+- ed:02:ee:31
+------BEGIN CERTIFICATE-----
+-MIIDuDCCAqCgAwIBAgIQDPCOXAgWpa1Cf/DrJxhZ0DANBgkqhkiG9w0BAQUFADBI
+-MQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24x
+-FzAVBgNVBAMTDlNlY3VyZVRydXN0IENBMB4XDTA2MTEwNzE5MzExOFoXDTI5MTIz
+-MTE5NDA1NVowSDELMAkGA1UEBhMCVVMxIDAeBgNVBAoTF1NlY3VyZVRydXN0IENv
+-cnBvcmF0aW9uMRcwFQYDVQQDEw5TZWN1cmVUcnVzdCBDQTCCASIwDQYJKoZIhvcN
+-AQEBBQADggEPADCCAQoCggEBAKukgeWVzfX2FI7CT8rU4niVWJxB4Q2ZQCQXOZEz
+-Zum+4YOvYlyJ0fwkW2Gz4BERQRwdbvC4u/jep4G6pkjGnx29vo6pQT64lO0pGtSO
+-0gMdA+9tDWccV9cGrcrI9f4Or2YlSASWC12juhbDCE/RRvgUXPLIXgGZbf2IzIao
+-wW8xQmxSPmjL8xk037uHGFaAJsTQ3MBv396gwpEWoGQRS0S8Hvbn+mPeZqx2pHGj
+-7DaUaHp3pLHnDi+BeuK1cobvomuL8A/b01k/unK8RCSc43Oz969XL0Imnal0ugBS
+-8kvNU3xHCzaFDmapCJcWNFfBZveA4+1wVMeT4C4oFVmHursCAwEAAaOBnTCBmjAT
+-BgkrBgEEAYI3FAIEBh4EAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB
+-/zAdBgNVHQ4EFgQUQjK2FvoE/f5dS3rD/fdMQB1aQ68wNAYDVR0fBC0wKzApoCeg
+-JYYjaHR0cDovL2NybC5zZWN1cmV0cnVzdC5jb20vU1RDQS5jcmwwEAYJKwYBBAGC
+-NxUBBAMCAQAwDQYJKoZIhvcNAQEFBQADggEBADDtT0rhWDpSclu1pqNlGKa7UTt3
+-6Z3q059c4EVlew3KW+JwULKUBRSuSceNQQcSc5R+DCMh/bwQf2AQWnL1mA6s7Ll/
+-3XpvXdMc9P+IBWlCqQVxyLesJugutIxq/3HcuLHfmbx8IVQr5Fiiu1cprp6poxkm
+-D5kuCLDv/WnPmRoJjeOnnyvJNjR7JLN4TJUXpAYmHrZkUjZfYGfZnMUFdAvnZyPS
+-CPyI6a6Lf+Ew9Dd+/cYy2i2eRDAwbO4H3tI0/NL/QPZL9GZGBlSm8jIKYyYwa5vR
+-3ItHuuG51WLQoqD0ZwV4KWMabwTW+MZMo5qxN7SN5ShLHZ4swrhovO0C7jE=
+------END CERTIFICATE-----
+-
+ # 9bea11c976fe014764c1be56a6f914b5a560317abd9988393382e5161aa0493c
+ Certificate:
+ Data:
+@@ -7133,136 +5405,6 @@ oYYitmUnDuy2n0Jg5GfCtdpBC8TTi2EbvPofkSvXRAdeuims2cXp71NIWuuA8ShY
+ Ic2wBlX7Jz9TkHCpBB5XJ7k=
+ -----END CERTIFICATE-----
+
+-# 62dd0be9b9f50a163ea0f8e75c053b1eca57ea55c8688f647c6881f2c8357b95
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- bb:40:1c:43:f5:5e:4f:b0
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = CH, O = SwissSign AG, CN = SwissSign Gold CA - G2
+- Validity
+- Not Before: Oct 25 08:30:35 2006 GMT
+- Not After : Oct 25 08:30:35 2036 GMT
+- Subject: C = CH, O = SwissSign AG, CN = SwissSign Gold CA - G2
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (4096 bit)
+- Modulus:
+- 00:af:e4:ee:7e:8b:24:0e:12:6e:a9:50:2d:16:44:
+- 3b:92:92:5c:ca:b8:5d:84:92:42:13:2a:bc:65:57:
+- 82:40:3e:57:24:cd:50:8b:25:2a:b7:6f:fc:ef:a2:
+- d0:c0:1f:02:24:4a:13:96:8f:23:13:e6:28:58:00:
+- a3:47:c7:06:a7:84:23:2b:bb:bd:96:2b:7f:55:cc:
+- 8b:c1:57:1f:0e:62:65:0f:dd:3d:56:8a:73:da:ae:
+- 7e:6d:ba:81:1c:7e:42:8c:20:35:d9:43:4d:84:fa:
+- 84:db:52:2c:f3:0e:27:77:0b:6b:bf:11:2f:72:78:
+- 9f:2e:d8:3e:e6:18:37:5a:2a:72:f9:da:62:90:92:
+- 95:ca:1f:9c:e9:b3:3c:2b:cb:f3:01:13:bf:5a:cf:
+- c1:b5:0a:60:bd:dd:b5:99:64:53:b8:a0:96:b3:6f:
+- e2:26:77:91:8c:e0:62:10:02:9f:34:0f:a4:d5:92:
+- 33:51:de:be:8d:ba:84:7a:60:3c:6a:db:9f:2b:ec:
+- de:de:01:3f:6e:4d:e5:50:86:cb:b4:af:ed:44:40:
+- c5:ca:5a:8c:da:d2:2b:7c:a8:ee:be:a6:e5:0a:aa:
+- 0e:a5:df:05:52:b7:55:c7:22:5d:32:6a:97:97:63:
+- 13:db:c9:db:79:36:7b:85:3a:4a:c5:52:89:f9:24:
+- e7:9d:77:a9:82:ff:55:1c:a5:71:69:2b:d1:02:24:
+- f2:b3:26:d4:6b:da:04:55:e5:c1:0a:c7:6d:30:37:
+- 90:2a:e4:9e:14:33:5e:16:17:55:c5:5b:b5:cb:34:
+- 89:92:f1:9d:26:8f:a1:07:d4:c6:b2:78:50:db:0c:
+- 0c:0b:7c:0b:8c:41:d7:b9:e9:dd:8c:88:f7:a3:4d:
+- b2:32:cc:d8:17:da:cd:b7:ce:66:9d:d4:fd:5e:ff:
+- bd:97:3e:29:75:e7:7e:a7:62:58:af:25:34:a5:41:
+- c7:3d:bc:0d:50:ca:03:03:0f:08:5a:1f:95:73:78:
+- 62:bf:af:72:14:69:0e:a5:e5:03:0e:78:8e:26:28:
+- 42:f0:07:0b:62:20:10:67:39:46:fa:a9:03:cc:04:
+- 38:7a:66:ef:20:83:b5:8c:4a:56:8e:91:00:fc:8e:
+- 5c:82:de:88:a0:c3:e2:68:6e:7d:8d:ef:3c:dd:65:
+- f4:5d:ac:51:ef:24:80:ae:aa:56:97:6f:f9:ad:7d:
+- da:61:3f:98:77:3c:a5:91:b6:1c:8c:26:da:65:a2:
+- 09:6d:c1:e2:54:e3:b9:ca:4c:4c:80:8f:77:7b:60:
+- 9a:1e:df:b6:f2:48:1e:0e:ba:4e:54:6d:98:e0:e1:
+- a2:1a:a2:77:50:cf:c4:63:92:ec:47:19:9d:eb:e6:
+- 6b:ce:c1
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- 5B:25:7B:96:A4:65:51:7E:B8:39:F3:C0:78:66:5E:E8:3A:E7:F0:EE
+- X509v3 Authority Key Identifier:
+- keyid:5B:25:7B:96:A4:65:51:7E:B8:39:F3:C0:78:66:5E:E8:3A:E7:F0:EE
+-
+- X509v3 Certificate Policies:
+- Policy: 2.16.756.1.89.1.2.1.1
+- CPS: http://repository.swisssign.com/
+-
+- Signature Algorithm: sha1WithRSAEncryption
+- 27:ba:e3:94:7c:f1:ae:c0:de:17:e6:e5:d8:d5:f5:54:b0:83:
+- f4:bb:cd:5e:05:7b:4f:9f:75:66:af:3c:e8:56:7e:fc:72:78:
+- 38:03:d9:2b:62:1b:00:b9:f8:e9:60:cd:cc:ce:51:8a:c7:50:
+- 31:6e:e1:4a:7e:18:2f:69:59:b6:3d:64:81:2b:e3:83:84:e6:
+- 22:87:8e:7d:e0:ee:02:99:61:b8:1e:f4:b8:2b:88:12:16:84:
+- c2:31:93:38:96:31:a6:b9:3b:53:3f:c3:24:93:56:5b:69:92:
+- ec:c5:c1:bb:38:00:e3:ec:17:a9:b8:dc:c7:7c:01:83:9f:32:
+- 47:ba:52:22:34:1d:32:7a:09:56:a7:7c:25:36:a9:3d:4b:da:
+- c0:82:6f:0a:bb:12:c8:87:4b:27:11:f9:1e:2d:c7:93:3f:9e:
+- db:5f:26:6b:52:d9:2e:8a:f1:14:c6:44:8d:15:a9:b7:bf:bd:
+- de:a6:1a:ee:ae:2d:fb:48:77:17:fe:bb:ec:af:18:f5:2a:51:
+- f0:39:84:97:95:6c:6e:1b:c3:2b:c4:74:60:79:25:b0:0a:27:
+- df:df:5e:d2:39:cf:45:7d:42:4b:df:b3:2c:1e:c5:c6:5d:ca:
+- 55:3a:a0:9c:69:9a:8f:da:ef:b2:b0:3c:9f:87:6c:12:2b:65:
+- 70:15:52:31:1a:24:cf:6f:31:23:50:1f:8c:4f:8f:23:c3:74:
+- 41:63:1c:55:a8:14:dd:3e:e0:51:50:cf:f1:1b:30:56:0e:92:
+- b0:82:85:d8:83:cb:22:64:bc:2d:b8:25:d5:54:a2:b8:06:ea:
+- ad:92:a4:24:a0:c1:86:b5:4a:13:6a:47:cf:2e:0b:56:95:54:
+- cb:ce:9a:db:6a:b4:a6:b2:db:41:08:86:27:77:f7:6a:a0:42:
+- 6c:0b:38:ce:d7:75:50:32:92:c2:df:2b:30:22:48:d0:d5:41:
+- 38:25:5d:a4:e9:5d:9f:c6:94:75:d0:45:fd:30:97:43:8f:90:
+- ab:0a:c7:86:73:60:4a:69:2d:de:a5:78:d7:06:da:6a:9e:4b:
+- 3e:77:3a:20:13:22:01:d0:bf:68:9e:63:60:6b:35:4d:0b:6d:
+- ba:a1:3d:c0:93:e0:7f:23:b3:55:ad:72:25:4e:46:f9:d2:16:
+- ef:b0:64:c1:01:9e:e9:ca:a0:6a:98:0e:cf:d8:60:f2:2f:49:
+- b8:e4:42:e1:38:35:16:f4:c8:6e:4f:f7:81:56:e8:ba:a3:be:
+- 23:af:ae:fd:6f:03:e0:02:3b:30:76:fa:1b:6d:41:cf:01:b1:
+- e9:b8:c9:66:f4:db:26:f3:3a:a4:74:f2:49:24:5b:c9:b0:d0:
+- 57:c1:fa:3e:7a:e1:97:c9
+------BEGIN CERTIFICATE-----
+-MIIFujCCA6KgAwIBAgIJALtAHEP1Xk+wMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNV
+-BAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxHzAdBgNVBAMTFlN3aXNzU2ln
+-biBHb2xkIENBIC0gRzIwHhcNMDYxMDI1MDgzMDM1WhcNMzYxMDI1MDgzMDM1WjBF
+-MQswCQYDVQQGEwJDSDEVMBMGA1UEChMMU3dpc3NTaWduIEFHMR8wHQYDVQQDExZT
+-d2lzc1NpZ24gR29sZCBDQSAtIEcyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
+-CgKCAgEAr+TufoskDhJuqVAtFkQ7kpJcyrhdhJJCEyq8ZVeCQD5XJM1QiyUqt2/8
+-76LQwB8CJEoTlo8jE+YoWACjR8cGp4QjK7u9lit/VcyLwVcfDmJlD909Vopz2q5+
+-bbqBHH5CjCA12UNNhPqE21Is8w4ndwtrvxEvcnifLtg+5hg3Wipy+dpikJKVyh+c
+-6bM8K8vzARO/Ws/BtQpgvd21mWRTuKCWs2/iJneRjOBiEAKfNA+k1ZIzUd6+jbqE
+-emA8atufK+ze3gE/bk3lUIbLtK/tREDFylqM2tIrfKjuvqblCqoOpd8FUrdVxyJd
+-MmqXl2MT28nbeTZ7hTpKxVKJ+STnnXepgv9VHKVxaSvRAiTysybUa9oEVeXBCsdt
+-MDeQKuSeFDNeFhdVxVu1yzSJkvGdJo+hB9TGsnhQ2wwMC3wLjEHXuendjIj3o02y
+-MszYF9rNt85mndT9Xv+9lz4pded+p2JYryU0pUHHPbwNUMoDAw8IWh+Vc3hiv69y
+-FGkOpeUDDniOJihC8AcLYiAQZzlG+qkDzAQ4embvIIO1jEpWjpEA/I5cgt6IoMPi
+-aG59je883WX0XaxR7ySArqpWl2/5rX3aYT+YdzylkbYcjCbaZaIJbcHiVOO5ykxM
+-gI93e2CaHt+28kgeDrpOVG2Y4OGiGqJ3UM/EY5LsRxmd6+ZrzsECAwEAAaOBrDCB
+-qTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUWyV7
+-lqRlUX64OfPAeGZe6Drn8O4wHwYDVR0jBBgwFoAUWyV7lqRlUX64OfPAeGZe6Drn
+-8O4wRgYDVR0gBD8wPTA7BglghXQBWQECAQEwLjAsBggrBgEFBQcCARYgaHR0cDov
+-L3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS8wDQYJKoZIhvcNAQEFBQADggIBACe6
+-45R88a7A3hfm5djV9VSwg/S7zV4Fe0+fdWavPOhWfvxyeDgD2StiGwC5+OlgzczO
+-UYrHUDFu4Up+GC9pWbY9ZIEr44OE5iKHjn3g7gKZYbge9LgriBIWhMIxkziWMaa5
+-O1M/wySTVltpkuzFwbs4AOPsF6m43Md8AYOfMke6UiI0HTJ6CVanfCU2qT1L2sCC
+-bwq7EsiHSycR+R4tx5M/nttfJmtS2S6K8RTGRI0Vqbe/vd6mGu6uLftIdxf+u+yv
+-GPUqUfA5hJeVbG4bwyvEdGB5JbAKJ9/fXtI5z0V9QkvfsywexcZdylU6oJxpmo/a
+-77KwPJ+HbBIrZXAVUjEaJM9vMSNQH4xPjyPDdEFjHFWoFN0+4FFQz/EbMFYOkrCC
+-hdiDyyJkvC24JdVUorgG6q2SpCSgwYa1ShNqR88uC1aVVMvOmttqtKay20EIhid3
+-92qgQmwLOM7XdVAyksLfKzAiSNDVQTglXaTpXZ/GlHXQRf0wl0OPkKsKx4ZzYEpp
+-Ld6leNcG2mqeSz53OiATIgHQv2ieY2BrNU0LbbqhPcCT4H8js1WtciVORvnSFu+w
+-ZMEBnunKoGqYDs/YYPIvSbjkQuE4NRb0yG5P94FW6LqjviOvrv1vA+ACOzB2+htt
+-Qc8Bsem4yWb02ybzOqR08kkkW8mw0FfB+j564ZfJ
+------END CERTIFICATE-----
+-
+ # 59769007f7685d0fcd50872f9f95d5755a5b2b457d81f3692b610a98672f0e1b
+ Certificate:
+ Data:
+@@ -7381,126 +5523,6 @@ aGHQRiapIVJpLesux+t3zqY6tQMzT3bR51xUAV3LePTJDL/PEo4XLSNolOer/qmy
+ KwbQBM0=
+ -----END CERTIFICATE-----
+
+-# dd6936fe21f8f077c123a1a521c12224f72255b73e03a7260693e8a24b0fa389
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 95:be:16:a0:f7:2e:46:f1:7b:39:82:72:fa:8b:cd:96
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: O = TeliaSonera, CN = TeliaSonera Root CA v1
+- Validity
+- Not Before: Oct 18 12:00:50 2007 GMT
+- Not After : Oct 18 12:00:50 2032 GMT
+- Subject: O = TeliaSonera, CN = TeliaSonera Root CA v1
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (4096 bit)
+- Modulus:
+- 00:c2:be:eb:27:f0:21:a3:f3:69:26:55:7e:9d:c5:
+- 55:16:91:5c:fd:ef:21:bf:53:80:7a:2d:d2:91:8c:
+- 63:31:f0:ec:24:f0:c3:a5:d2:72:7c:10:6d:f4:37:
+- b7:e5:e6:7c:79:ea:8c:b5:82:8b:ae:48:b6:ac:00:
+- dc:65:75:ec:2a:4d:5f:c1:87:f5:20:65:2b:81:a8:
+- 47:3e:89:23:95:30:16:90:7f:e8:57:07:48:e7:19:
+- ae:bf:45:67:b1:37:1b:06:2a:fe:de:f9:ac:7d:83:
+- fb:5e:ba:e4:8f:97:67:be:4b:8e:8d:64:07:57:38:
+- 55:69:34:36:3d:13:48:ef:4f:e2:d3:66:1e:a4:cf:
+- 1a:b7:5e:36:33:d4:b4:06:bd:18:01:fd:77:84:50:
+- 00:45:f5:8c:5d:e8:23:bc:7e:fe:35:e1:ed:50:7b:
+- a9:30:8d:19:d3:09:8e:68:67:5d:bf:3c:97:18:53:
+- bb:29:62:c5:ca:5e:72:c1:c7:96:d4:db:2d:a0:b4:
+- 1f:69:03:ec:ea:e2:50:f1:0c:3c:f0:ac:f3:53:2d:
+- f0:1c:f5:ed:6c:39:39:73:80:16:c8:52:b0:23:cd:
+- e0:3e:dc:dd:3c:47:a0:bb:35:8a:e2:98:68:8b:be:
+- e5:bf:72:ee:d2:fa:a5:ed:12:ed:fc:98:18:a9:26:
+- 76:dc:28:4b:10:20:1c:d3:7f:16:77:2d:ed:6f:80:
+- f7:49:bb:53:05:bb:5d:68:c7:d4:c8:75:16:3f:89:
+- 5a:8b:f7:17:47:d4:4c:f1:d2:89:79:3e:4d:3d:98:
+- a8:61:de:3a:1e:d2:f8:5e:03:e0:c1:c9:1c:8c:d3:
+- 8d:4d:d3:95:36:b3:37:5f:63:63:9b:33:14:f0:2d:
+- 26:6b:53:7c:89:8c:32:c2:6e:ec:3d:21:00:39:c9:
+- a1:68:e2:50:83:2e:b0:3a:2b:f3:36:a0:ac:2f:e4:
+- 6f:61:c2:51:09:39:3e:8b:53:b9:bb:67:da:dc:53:
+- b9:76:59:36:9d:43:e5:20:e0:3d:32:60:85:22:51:
+- b7:c7:33:bb:dd:15:2f:a4:78:a6:07:7b:81:46:36:
+- 04:86:dd:79:35:c7:95:2c:3b:b0:a3:17:35:e5:73:
+- 1f:b4:5c:59:ef:da:ea:10:65:7b:7a:d0:7f:9f:b3:
+- b4:2a:37:3b:70:8b:9b:5b:b9:2b:b7:ec:b2:51:12:
+- 97:53:29:5a:d4:f0:12:10:dc:4f:02:bb:12:92:2f:
+- 62:d4:3f:69:43:7c:0d:d6:fc:58:75:01:88:9d:58:
+- 16:4b:de:ba:90:ff:47:01:89:06:6a:f6:5f:b2:90:
+- 6a:b3:02:a6:02:88:bf:b3:47:7e:2a:d9:d5:fa:68:
+- 78:35:4d
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage:
+- Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- F0:8F:59:38:00:B3:F5:8F:9A:96:0C:D5:EB:FA:7B:AA:17:E8:13:12
+- Signature Algorithm: sha1WithRSAEncryption
+- be:e4:5c:62:4e:24:f4:0c:08:ff:f0:d3:0c:68:e4:93:49:22:
+- 3f:44:27:6f:bb:6d:de:83:66:ce:a8:cc:0d:fc:f5:9a:06:e5:
+- 77:14:91:eb:9d:41:7b:99:2a:84:e5:ff:fc:21:c1:5d:f0:e4:
+- 1f:57:b7:75:a9:a1:5f:02:26:ff:d7:c7:f7:4e:de:4f:f8:f7:
+- 1c:46:c0:7a:4f:40:2c:22:35:f0:19:b1:d0:6b:67:2c:b0:a8:
+- e0:c0:40:37:35:f6:84:5c:5c:e3:af:42:78:fe:a7:c9:0d:50:
+- ea:0d:84:76:f6:51:ef:83:53:c6:7a:ff:0e:56:49:2e:8f:7a:
+- d6:0c:e6:27:54:e3:4d:0a:60:72:62:cd:91:07:d6:a5:bf:c8:
+- 99:6b:ed:c4:19:e6:ab:4c:11:38:c5:6f:31:e2:6e:49:c8:3f:
+- 76:80:26:03:26:29:e0:36:f6:f6:20:53:e3:17:70:34:17:9d:
+- 63:68:1e:6b:ec:c3:4d:86:b8:13:30:2f:5d:46:0d:47:43:d5:
+- 1b:aa:59:0e:b9:5c:8d:06:48:ad:74:87:5f:c7:fc:31:54:41:
+- 13:e2:c7:21:0e:9e:e0:1e:0d:e1:c0:7b:43:85:90:c5:8a:58:
+- c6:65:0a:78:57:f2:c6:23:0f:01:d9:20:4b:de:0f:fb:92:85:
+- 75:2a:5c:73:8d:6d:7b:25:91:ca:ee:45:ae:06:4b:00:cc:d3:
+- b1:59:50:da:3a:88:3b:29:43:46:5e:97:2b:54:ce:53:6f:8d:
+- 4a:e7:96:fa:bf:71:0e:42:8b:7c:fd:28:a0:d0:48:ca:da:c4:
+- 81:4c:bb:a2:73:93:26:c8:eb:0c:d6:26:88:b6:c0:24:cf:bb:
+- bd:5b:eb:75:7d:e9:08:8e:86:33:2c:79:77:09:69:a5:89:fc:
+- b3:70:90:87:76:8f:d3:22:bb:42:ce:bd:73:0b:20:26:2a:d0:
+- 9b:3d:70:1e:24:6c:cd:87:76:a9:17:96:b7:cf:0d:92:fb:8e:
+- 18:a9:98:49:d1:9e:fe:60:44:72:21:b9:19:ed:c2:f5:31:f1:
+- 39:48:88:90:24:75:54:16:ad:ce:f4:f8:69:14:64:39:fb:a3:
+- b8:ba:70:40:c7:27:1c:bf:c4:56:53:fa:63:65:d0:f3:1c:0e:
+- 16:f5:6b:86:58:4d:18:d4:e4:0d:8e:a5:9d:5b:91:dc:76:24:
+- 50:3f:c6:2a:fb:d9:b7:9c:b5:d6:e6:d0:d9:e8:19:8b:15:71:
+- 48:ad:b7:ea:d8:59:88:d4:90:bf:16:b3:d9:e9:ac:59:61:54:
+- c8:1c:ba:ca:c1:ca:e1:b9:20:4c:8f:3a:93:89:a5:a0:cc:bf:
+- d3:f6:75:a4:75:96:6d:56
+------BEGIN CERTIFICATE-----
+-MIIFODCCAyCgAwIBAgIRAJW+FqD3LkbxezmCcvqLzZYwDQYJKoZIhvcNAQEFBQAw
+-NzEUMBIGA1UECgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJv
+-b3QgQ0EgdjEwHhcNMDcxMDE4MTIwMDUwWhcNMzIxMDE4MTIwMDUwWjA3MRQwEgYD
+-VQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UEAwwWVGVsaWFTb25lcmEgUm9vdCBDQSB2
+-MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMK+6yfwIaPzaSZVfp3F
+-VRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65ItqwA3GV1
+-7CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+X
+-Z75Ljo1kB1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+
+-/jXh7VB7qTCNGdMJjmhnXb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs
+-81Mt8Bz17Ww5OXOAFshSsCPN4D7c3TxHoLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkm
+-dtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+JWov3F0fUTPHSiXk+TT2YqGHe
+-Oh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0hADnJoWjiUIMu
+-sDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4
+-pgd7gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fs
+-slESl1MpWtTwEhDcTwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQ
+-arMCpgKIv7NHfirZ1fpoeDVNAgMBAAGjPzA9MA8GA1UdEwEB/wQFMAMBAf8wCwYD
+-VR0PBAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1j5qWDNXr+nuqF+gTEjANBgkqhkiG
+-9w0BAQUFAAOCAgEAvuRcYk4k9AwI//DTDGjkk0kiP0Qnb7tt3oNmzqjMDfz1mgbl
+-dxSR651Be5kqhOX//CHBXfDkH1e3damhXwIm/9fH907eT/j3HEbAek9ALCI18Bmx
+-0GtnLLCo4MBANzX2hFxc469CeP6nyQ1Q6g2EdvZR74NTxnr/DlZJLo961gzmJ1Tj
+-TQpgcmLNkQfWpb/ImWvtxBnmq0wROMVvMeJuScg/doAmAyYp4Db29iBT4xdwNBed
+-Y2gea+zDTYa4EzAvXUYNR0PVG6pZDrlcjQZIrXSHX8f8MVRBE+LHIQ6e4B4N4cB7
+-Q4WQxYpYxmUKeFfyxiMPAdkgS94P+5KFdSpcc41teyWRyu5FrgZLAMzTsVlQ2jqI
+-OylDRl6XK1TOU2+NSueW+r9xDkKLfP0ooNBIytrEgUy7onOTJsjrDNYmiLbAJM+7
+-vVvrdX3pCI6GMyx5dwlppYn8s3CQh3aP0yK7Qs69cwsgJirQmz1wHiRszYd2qReW
+-t88NkvuOGKmYSdGe/mBEciG5Ge3C9THxOUiIkCR1VBatzvT4aRRkOfujuLpwQMcn
+-HL/EVlP6Y2XQ8xwOFvVrhlhNGNTkDY6lnVuR3HYkUD/GKvvZt5y11ubQ2egZixVx
+-SK236thZiNSQvxaz2emsWWFUyBy6ysHK4bkgTI86k4mloMy/0/Z1pHWWbVY=
+------END CERTIFICATE-----
+-
+ # 6b328085625318aa50d173c98d8bda09d57e27413d114cf787a0f5d06c030cf6
+ Certificate:
+ Data:
+@@ -10879,4 +8901,509 @@ L4x35bcF7DvB7L6Gs4a8wPfc5+pbrrLMtTWGS9DiP7bY+A4A7l3j941Y/8+LN+lj
+ X273CXE2whJdV/LItM3z7gLfEdxquVeEHVlNjM7IDiPCtyaaEBRx/pOyiriA8A4Q
+ ntOoUAw3gi/q4Iqd4Sw5/7W0cwDk90imc6y/st53BIe0o82bNSQ3+pCTE4FCxpgm
+ dTdmQRCsu/WU48IxK63nI1bMNSWSs1A=
++-----END CERTIFICATE-----
++
++# b49141502d00663d740f2e7ec340c52800962666121a36d09cf7dd2b90384fb4
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ e8:6f:18:7b:d6:39:6b:98:4a:49:98:0a
++ Signature Algorithm: ecdsa-with-SHA512
++ Issuer: C=HU, L=Budapest, O=Microsec Ltd., organizationIdentifier=VATHU-23584497, CN=e-Szigno TLS Root CA 2023
++ Validity
++ Not Before: Jul 17 14:00:00 2023 GMT
++ Not After : Jul 17 14:00:00 2038 GMT
++ Subject: C=HU, L=Budapest, O=Microsec Ltd., organizationIdentifier=VATHU-23584497, CN=e-Szigno TLS Root CA 2023
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (521 bit)
++ pub:
++ 04:00:68:0f:df:a2:7c:3c:aa:74:88:61:0a:8d:c2:
++ 4c:a5:01:22:14:d4:f7:60:77:42:9c:0a:38:60:a1:
++ 8c:67:3e:b3:63:e9:fa:91:b0:8b:4b:e6:39:df:02:
++ c2:30:01:52:00:bf:df:8c:ed:59:ad:32:65:ab:09:
++ 59:50:b5:19:c2:68:1c:00:e0:05:5f:da:50:26:1c:
++ c3:ac:04:22:c5:3a:4d:ef:e9:57:58:36:a3:c1:19:
++ 53:10:0a:d1:cd:3f:ef:4b:35:1a:43:8f:42:13:4c:
++ b9:2c:1a:9c:be:30:b6:c4:de:dc:4b:9d:e4:a4:3c:
++ cb:2e:d9:ad:df:df:7d:09:df:2e:92:ff:a1
++ ASN1 OID: secp521r1
++ NIST CURVE: P-521
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ 59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
++ X509v3 Authority Key Identifier:
++ 59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
++ Signature Algorithm: ecdsa-with-SHA512
++ Signature Value:
++ 30:81:87:02:42:01:2d:da:ae:f5:2e:78:b6:66:b8:9f:b6:70:
++ 7f:66:74:cf:ec:8e:7c:fe:c0:01:79:9a:ce:52:02:e7:c3:d1:
++ 0c:7a:6d:cb:b5:5e:ee:17:a4:9b:db:04:76:ee:29:29:e8:af:
++ fb:ad:ac:52:f4:d7:2b:d6:77:84:10:bd:c5:d2:28:68:34:02:
++ 41:35:76:5a:75:f3:92:86:08:f5:b2:1e:0a:f6:65:0b:da:76:
++ c7:52:ff:0b:1e:80:70:22:30:c3:33:db:18:ed:84:d7:8b:ec:
++ ed:d3:a8:63:81:b5:56:7c:47:c7:56:30:94:68:73:6b:d2:2e:
++ a9:b9:d9:2c:1c:29:bd:0c:ba:b9:65:8b
++-----BEGIN CERTIFICATE-----
++MIICzzCCAjGgAwIBAgINAOhvGHvWOWuYSkmYCjAKBggqhkjOPQQDBDB1MQswCQYD
++VQQGEwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFjAUBgNVBAoMDU1pY3Jvc2VjIEx0
++ZC4xFzAVBgNVBGEMDlZBVEhVLTIzNTg0NDk3MSIwIAYDVQQDDBllLVN6aWdubyBU
++TFMgUm9vdCBDQSAyMDIzMB4XDTIzMDcxNzE0MDAwMFoXDTM4MDcxNzE0MDAwMFow
++dTELMAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRYwFAYDVQQKDA1NaWNy
++b3NlYyBMdGQuMRcwFQYDVQRhDA5WQVRIVS0yMzU4NDQ5NzEiMCAGA1UEAwwZZS1T
++emlnbm8gVExTIFJvb3QgQ0EgMjAyMzCBmzAQBgcqhkjOPQIBBgUrgQQAIwOBhgAE
++AGgP36J8PKp0iGEKjcJMpQEiFNT3YHdCnAo4YKGMZz6zY+n6kbCLS+Y53wLCMAFS
++AL/fjO1ZrTJlqwlZULUZwmgcAOAFX9pQJhzDrAQixTpN7+lXWDajwRlTEArRzT/v
++SzUaQ49CE0y5LBqcvjC2xN7cS53kpDzLLtmt3999Cd8ukv+ho2MwYTAPBgNVHRMB
++Af8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUWYQCYlpGePVd3I8K
++ECgj3NXW+0UwHwYDVR0jBBgwFoAUWYQCYlpGePVd3I8KECgj3NXW+0UwCgYIKoZI
++zj0EAwQDgYsAMIGHAkIBLdqu9S54tma4n7Zwf2Z0z+yOfP7AAXmazlIC58PRDHpt
++y7Ve7hekm9sEdu4pKeiv+62sUvTXK9Z3hBC9xdIoaDQCQTV2WnXzkoYI9bIeCvZl
++C9p2x1L/Cx6AcCIwwzPbGO2E14vs7dOoY4G1VnxHx1YwlGhza9IuqbnZLBwpvQy6
++uWWL
++-----END CERTIFICATE-----
++
++# eec997c0c30f216f7e3b8b307d2bae42412d753fc8219dafd1520b2572850f49
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 23:f9:c3:d6:35:af:8f:28:4b:1f:f0:54:ea:7e:97:9d
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C=CH, O=OISTE Foundation, CN=OISTE Server Root ECC G1
++ Validity
++ Not Before: May 31 14:42:28 2023 GMT
++ Not After : May 24 14:42:27 2048 GMT
++ Subject: C=CH, O=OISTE Foundation, CN=OISTE Server Root ECC G1
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:17:2f:fa:12:bc:ac:18:f3:0a:f4:44:d6:76:42:
++ 9e:b3:e8:1f:b7:79:a9:58:b6:f8:65:d1:3a:21:4f:
++ a8:eb:a3:be:a4:32:72:f3:b6:01:c9:2b:fd:77:85:
++ 6e:53:dd:ad:ea:aa:2e:25:92:b6:e9:21:11:a8:af:
++ b5:4c:0b:f3:96:60:9a:3b:e7:ea:1a:78:2e:b4:3d:
++ e5:28:de:1c:80:ba:5c:6e:0d:db:19:a5:e3:3f:9c:
++ 2a:b8:40:4b:dd:e6:4f
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ 37:4D:88:65:CF:FC:3D:8A:D5:A3:F1:49:C0:4E:0C:10:6F:42:B4:9C
++ X509v3 Subject Key Identifier:
++ 37:4D:88:65:CF:FC:3D:8A:D5:A3:F1:49:C0:4E:0C:10:6F:42:B4:9C
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: ecdsa-with-SHA384
++ Signature Value:
++ 30:66:02:31:00:a9:2a:30:1d:d0:c2:9f:90:51:51:40:3e:95:
++ 54:21:cd:16:66:f7:53:6c:08:16:39:d0:12:7c:7f:63:1b:df:
++ e3:38:00:39:d9:2d:53:20:45:0b:1c:60:67:31:43:25:ed:02:
++ 31:00:92:89:ae:e9:5c:62:83:62:61:f9:2d:57:ab:56:b9:11:
++ dd:25:be:6a:4e:4a:1a:82:6b:dc:cf:d3:bc:4a:b3:3c:d7:2e:
++ 9b:db:f8:28:69:bc:6b:2d:ec:31:a1:3a:e3:57
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 9ae36232a5189ffddb353dfd26520c015395d22777dac59db57b98c089a651e6
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 55:a5:d9:67:94:28:c6:ed:0c:fa:27:dd:5b:01:4d:18
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C=CH, O=OISTE Foundation, CN=OISTE Server Root RSA G1
++ Validity
++ Not Before: May 31 14:37:16 2023 GMT
++ Not After : May 24 14:37:15 2048 GMT
++ Subject: C=CH, O=OISTE Foundation, CN=OISTE Server Root RSA G1
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:aa:ae:f4:ab:82:cf:fb:e5:37:0b:e7:d5:96:ad:
++ 90:e8:4b:29:dc:55:60:e3:cc:bc:b3:bc:2d:92:b9:
++ e4:a3:7a:f1:81:b4:9e:72:72:43:df:3f:ab:0b:26:
++ b4:ee:7b:1a:69:fb:28:d0:72:5c:4a:6d:69:99:f0:
++ 63:1e:0c:d2:b1:ff:d6:8c:34:d0:ee:db:ac:48:b9:
++ ea:b0:14:8e:d8:07:a9:24:98:dd:e9:09:be:a8:22:
++ 1b:59:39:d1:27:87:dc:1c:cd:f8:fb:b3:eb:e9:93:
++ 78:ed:0f:ce:37:7c:26:77:6e:a1:d8:2c:21:4c:e4:
++ 8a:4f:c7:13:3c:6e:c7:d5:13:97:b2:a8:db:24:69:
++ 83:56:d3:69:cb:82:12:bb:9d:1b:f2:f8:34:f2:98:
++ 2b:2a:8e:04:67:f6:e3:87:a1:1d:ad:6e:ce:36:74:
++ 0e:5e:33:3b:cb:db:51:97:94:6a:95:3c:ce:18:5a:
++ 6e:4b:c6:fc:07:8f:2e:1a:b9:4a:f7:64:34:29:dc:
++ a6:8d:50:e1:8d:8b:4b:e5:48:1b:6e:2e:80:10:3f:
++ e4:9f:1b:65:3f:11:b4:ea:57:69:9f:b4:00:eb:85:
++ 24:99:24:f5:21:9d:97:aa:fb:34:7f:02:6b:15:90:
++ ad:bb:9e:5a:19:7f:a4:8c:d8:fa:6d:28:fc:38:c7:
++ e3:4c:ad:6a:ce:d9:4e:93:92:8e:cc:0c:67:bf:0b:
++ 4b:96:ce:66:67:53:68:cb:17:11:8e:59:f7:ac:9c:
++ 1b:b9:8e:68:44:b7:18:af:e6:e5:0f:65:dc:95:09:
++ b0:93:12:b5:1f:3e:94:a5:c7:88:75:21:b1:de:09:
++ 24:2a:4c:e2:bc:ec:4c:67:47:c2:29:88:b9:0a:ba:
++ f9:c1:74:ce:8c:18:26:65:da:f7:6f:c6:8c:7b:68:
++ 5c:0b:ee:63:c0:5e:4b:f1:4e:cc:9f:2f:0f:e1:e8:
++ 9a:7a:93:f1:e0:c8:db:bf:27:e6:65:29:7b:36:e0:
++ 33:15:73:f2:9d:6b:84:08:68:2b:36:07:2b:27:cc:
++ 78:d8:6a:87:0e:47:74:f4:aa:a0:13:5d:64:7e:f4:
++ db:14:ae:fb:3a:e4:2f:c1:65:e3:b9:7a:40:6c:f0:
++ 06:b7:7b:28:9b:d7:e1:5f:38:73:94:ac:d9:70:93:
++ 2d:dc:84:af:46:1c:a2:7a:2c:3f:81:26:42:e7:d4:
++ d8:c5:6c:84:66:11:8b:77:6b:54:1c:a3:b5:d8:10:
++ f0:ae:29:f7:67:08:88:17:5c:b8:97:79:cf:ea:2b:
++ 2a:ee:58:33:e5:6d:e9:29:aa:65:01:0d:82:13:ec:
++ 25:0b:5d:2c:40:72:15:29:d3:90:2c:f7:1a:43:d5:
++ 6a:f0:69
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ F2:C9:C1:0F:0D:63:00:BB:EC:45:0E:4A:1F:B5:B1:B3:36:CD:0E:8D
++ X509v3 Subject Key Identifier:
++ F2:C9:C1:0F:0D:63:00:BB:EC:45:0E:4A:1F:B5:B1:B3:36:CD:0E:8D
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: sha384WithRSAEncryption
++ Signature Value:
++ 34:67:79:b2:3a:c6:e5:3d:f7:23:72:b9:09:ef:92:ad:27:1f:
++ a0:4e:0a:b2:f5:da:17:0c:a2:85:d2:7e:92:51:fd:15:65:d7:
++ 5c:6b:64:16:ee:8a:45:ca:0c:43:36:44:35:d9:7f:fe:79:3a:
++ 1c:e8:c6:e4:3d:6b:77:d4:21:10:e3:f6:f3:20:4e:a9:be:89:
++ f3:1c:9c:a9:df:bc:30:3a:17:d1:32:43:d0:aa:8a:72:1c:51:
++ 28:4c:dd:36:c8:e4:2d:67:7d:91:87:1c:9d:bc:fc:ab:28:96:
++ 5e:61:5c:b8:22:33:18:48:16:50:ea:ca:2f:e9:a5:49:dc:7f:
++ 3c:a4:19:bc:36:ad:92:e2:b9:f4:4b:d5:eb:08:ad:e7:78:fe:
++ 17:c0:5d:87:77:e8:67:77:4f:00:66:af:f4:b1:03:3a:be:12:
++ 7c:41:35:e5:f4:a6:1b:47:8b:cb:79:f7:d6:bf:17:6e:4e:65:
++ f0:f8:da:57:c1:94:81:e5:7a:56:0d:bb:46:7f:6f:91:fd:7d:
++ e6:17:e4:81:27:bb:05:88:56:dd:20:a5:f7:98:2d:91:19:69:
++ 31:5f:9b:30:f2:99:ad:72:40:96:cc:d8:77:66:9b:b4:d5:0e:
++ b2:10:fe:14:aa:c3:80:71:9d:3d:8d:e8:7d:14:6c:61:64:86:
++ 46:a6:d7:54:c5:b6:d7:90:16:46:a5:85:ca:9e:3a:e3:e6:13:
++ 16:b6:15:23:cc:a9:29:52:fd:00:c6:f6:90:8e:56:8f:89:08:
++ dd:96:aa:e6:d3:6a:a9:86:35:f6:d5:45:78:42:4a:46:fc:03:
++ c8:5e:d8:66:f6:45:65:24:b4:be:87:7b:55:20:9d:f7:9d:b5:
++ 2a:fc:b9:62:19:cb:6c:3b:af:d3:6d:38:6c:ab:7b:a6:1e:8d:
++ fc:e9:9e:fe:6b:15:b9:db:82:9a:cb:98:df:73:a1:90:a0:a0:
++ c5:e0:e8:01:a8:a3:14:9c:c8:c1:9a:ac:15:50:33:8d:ed:7c:
++ 2a:8b:73:95:40:43:26:fc:81:a4:2a:5f:39:90:b7:27:cb:51:
++ 77:f8:96:93:1e:cf:f2:77:7d:1f:46:93:a2:59:1e:95:44:c5:
++ 2d:75:64:b0:d6:f9:e0:3c:69:ea:04:b5:1c:0b:e2:46:44:4d:
++ 43:3b:97:49:71:11:bd:24:b6:c2:ad:72:54:06:fe:6b:18:f9:
++ 77:db:29:2c:52:9e:6d:77:7b:62:fd:0f:4d:8e:98:32:30:30:
++ 71:12:d6:25:35:e3:9f:f8:6f:9c:b5:eb:6a:1b:ad:ea:10:d3:
++ 96:16:72:06:21:25:c6:4c:bc:8f:70:bb:0c:e4:5e:22:83:2d:
++ d2:be:fe:85:5b:b4:e4:bd
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4
++ Validity
++ Not Before: Aug 1 12:00:00 2013 GMT
++ Not After : Jan 15 12:00:00 2038 GMT
++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:bf:e6:90:73:68:de:bb:e4:5d:4a:3c:30:22:30:
++ 69:33:ec:c2:a7:25:2e:c9:21:3d:f2:8a:d8:59:c2:
++ e1:29:a7:3d:58:ab:76:9a:cd:ae:7b:1b:84:0d:c4:
++ 30:1f:f3:1b:a4:38:16:eb:56:c6:97:6d:1d:ab:b2:
++ 79:f2:ca:11:d2:e4:5f:d6:05:3c:52:0f:52:1f:c6:
++ 9e:15:a5:7e:be:9f:a9:57:16:59:55:72:af:68:93:
++ 70:c2:b2:ba:75:99:6a:73:32:94:d1:10:44:10:2e:
++ df:82:f3:07:84:e6:74:3b:6d:71:e2:2d:0c:1b:ee:
++ 20:d5:c9:20:1d:63:29:2d:ce:ec:5e:4e:c8:93:f8:
++ 21:61:9b:34:eb:05:c6:5e:ec:5b:1a:bc:eb:c9:cf:
++ cd:ac:34:40:5f:b1:7a:66:ee:77:c8:48:a8:66:57:
++ 57:9f:54:58:8e:0c:2b:b7:4f:a7:30:d9:56:ee:ca:
++ 7b:5d:e3:ad:c9:4f:5e:e5:35:e7:31:cb:da:93:5e:
++ dc:8e:8f:80:da:b6:91:98:40:90:79:c3:78:c7:b6:
++ b1:c4:b5:6a:18:38:03:10:8d:d8:d4:37:a4:2e:05:
++ 7d:88:f5:82:3e:10:91:70:ab:55:82:41:32:d7:db:
++ 04:73:2a:6e:91:01:7c:21:4c:d4:bc:ae:1b:03:75:
++ 5d:78:66:d9:3a:31:44:9a:33:40:bf:08:d7:5a:49:
++ a4:c2:e6:a9:a0:67:dd:a4:27:bc:a1:4f:39:b5:11:
++ 58:17:f7:24:5c:46:8f:64:f7:c1:69:88:76:98:76:
++ 3d:59:5d:42:76:87:89:97:69:7a:48:f0:e0:a2:12:
++ 1b:66:9a:74:ca:de:4b:1e:e7:0e:63:ae:e6:d4:ef:
++ 92:92:3a:9e:3d:dc:00:e4:45:25:89:b6:9a:44:19:
++ 2b:7e:c0:94:b4:d2:61:6d:eb:33:d9:c5:df:4b:04:
++ 00:cc:7d:1c:95:c3:8f:f7:21:b2:b2:11:b7:bb:7f:
++ f2:d5:8c:70:2c:41:60:aa:b1:63:18:44:95:1a:76:
++ 62:7e:f6:80:b0:fb:e8:64:a6:33:d1:89:07:e1:bd:
++ b7:e6:43:a4:18:b8:a6:77:01:e1:0f:94:0c:21:1d:
++ b2:54:29:25:89:6c:e5:0e:52:51:47:74:be:26:ac:
++ b6:41:75:de:7a:ac:5f:8d:3f:c9:bc:d3:41:11:12:
++ 5b:e5:10:50:eb:31:c5:ca:72:16:22:09:df:7c:4c:
++ 75:3f:63:ec:21:5f:c4:20:51:6b:6f:b1:ab:86:8b:
++ 4f:c2:d6:45:5f:9d:20:fc:a1:1e:c5:c0:8f:a2:b1:
++ 7e:0a:26:99:f5:e4:69:2f:98:1d:2d:f5:d9:a9:b2:
++ 1d:e5:1b
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ EC:D7:E3:82:D2:71:5D:64:4C:DF:2E:67:3F:E7:BA:98:AE:1C:0F:4F
++ Signature Algorithm: sha384WithRSAEncryption
++ bb:61:d9:7d:a9:6c:be:17:c4:91:1b:c3:a1:a2:00:8d:e3:64:
++ 68:0f:56:cf:77:ae:70:f9:fd:9a:4a:99:b9:c9:78:5c:0c:0c:
++ 5f:e4:e6:14:29:56:0b:36:49:5d:44:63:e0:ad:9c:96:18:66:
++ 1b:23:0d:3d:79:e9:6d:6b:d6:54:f8:d2:3c:c1:43:40:ae:1d:
++ 50:f5:52:fc:90:3b:bb:98:99:69:6b:c7:c1:a7:a8:68:a4:27:
++ dc:9d:f9:27:ae:30:85:b9:f6:67:4d:3a:3e:8f:59:39:22:53:
++ 44:eb:c8:5d:03:ca:ed:50:7a:7d:62:21:0a:80:c8:73:66:d1:
++ a0:05:60:5f:e8:a5:b4:a7:af:a8:f7:6d:35:9c:7c:5a:8a:d6:
++ a2:38:99:f3:78:8b:f4:4d:d2:20:0b:de:04:ee:8c:9b:47:81:
++ 72:0d:c0:14:32:ef:30:59:2e:ae:e0:71:f2:56:e4:6a:97:6f:
++ 92:50:6d:96:8d:68:7a:9a:b2:36:14:7a:06:f2:24:b9:09:11:
++ 50:d7:08:b1:b8:89:7a:84:23:61:42:29:e5:a3:cd:a2:20:41:
++ d7:d1:9c:64:d9:ea:26:a1:8b:14:d7:4c:19:b2:50:41:71:3d:
++ 3f:4d:70:23:86:0c:4a:dc:81:d2:cc:32:94:84:0d:08:09:97:
++ 1c:4f:c0:ee:6b:20:74:30:d2:e0:39:34:10:85:21:15:01:08:
++ e8:55:32:de:71:49:d9:28:17:50:4d:e6:be:4d:d1:75:ac:d0:
++ ca:fb:41:b8:43:a5:aa:d3:c3:05:44:4f:2c:36:9b:e2:fa:e2:
++ 45:b8:23:53:6c:06:6f:67:55:7f:46:b5:4c:3f:6e:28:5a:79:
++ 26:d2:a4:a8:62:97:d2:1e:e2:ed:4a:8b:bc:1b:fd:47:4a:0d:
++ df:67:66:7e:b2:5b:41:d0:3b:e4:f4:3b:f4:04:63:e9:ef:c2:
++ 54:00:51:a0:8a:2a:c9:ce:78:cc:d5:ea:87:04:18:b3:ce:af:
++ 49:88:af:f3:92:99:b6:b3:e6:61:0f:d2:85:00:e7:50:1a:e4:
++ 1b:95:9d:19:a1:b9:9c:b1:9b:b1:00:1e:ef:d0:0f:4f:42:6c:
++ c9:0a:bc:ee:43:fa:3a:71:a5:c8:4d:26:a5:35:fd:89:5d:bc:
++ 85:62:1d:32:d2:a0:2b:54:ed:9a:57:c1:db:fa:10:cf:19:b7:
++ 8b:4a:1b:8f:01:b6:27:95:53:e8:b6:89:6d:5b:bc:68:d4:23:
++ e8:8b:51:a2:56:f9:f0:a6:80:a0:d6:1e:b3:bc:0f:0f:53:75:
++ 29:aa:ea:13:77:e4:de:8c:81:21:ad:07:10:47:11:ad:87:3d:
++ 07:d1:75:bc:cf:f3:66:7e
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 7d05ebb682339f8c9451ee094eebfefa7953a114edb2f44949452fab7d2fc185
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 0b:93:1c:3a:d6:39:67:ea:67:23:bf:c3:af:9a:f4:4b
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2
++ Validity
++ Not Before: Aug 1 12:00:00 2013 GMT
++ Not After : Jan 15 12:00:00 2038 GMT
++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:d9:e7:28:2f:52:3f:36:72:49:88:93:34:f3:f8:
++ 6a:1e:31:54:80:9f:ad:54:41:b5:47:df:96:a8:d4:
++ af:80:2d:b9:0a:cf:75:fd:89:a5:7d:24:fa:e3:22:
++ 0c:2b:bc:95:17:0b:33:bf:19:4d:41:06:90:00:bd:
++ 0c:4d:10:fe:07:b5:e7:1c:6e:22:55:31:65:97:bd:
++ d3:17:d2:1e:62:f3:db:ea:6c:50:8c:3f:84:0c:96:
++ cf:b7:cb:03:e0:ca:6d:a1:14:4c:1b:89:dd:ed:00:
++ b0:52:7c:af:91:6c:b1:38:13:d1:e9:12:08:c0:00:
++ b0:1c:2b:11:da:77:70:36:9b:ae:ce:79:87:dc:82:
++ 70:e6:09:74:70:55:69:af:a3:68:9f:bf:dd:b6:79:
++ b3:f2:9d:70:29:55:f4:ab:ff:95:61:f3:c9:40:6f:
++ 1d:d1:be:93:bb:d3:88:2a:bb:9d:bf:72:5a:56:71:
++ 3b:3f:d4:f3:d1:0a:fe:28:ef:a3:ee:d9:99:af:03:
++ d3:8f:60:b7:f2:92:a1:b1:bd:89:89:1f:30:cd:c3:
++ a6:2e:62:33:ae:16:02:77:44:5a:e7:81:0a:3c:a7:
++ 44:2e:79:b8:3f:04:bc:5c:a0:87:e1:1b:af:51:8e:
++ cd:ec:2c:fa:f8:fe:6d:f0:3a:7c:aa:8b:e4:67:95:
++ 31:8d
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ CE:C3:4A:B9:99:55:F2:B8:DB:60:BF:A9:7E:BD:56:B5:97:36:A7:D6
++ Signature Algorithm: sha256WithRSAEncryption
++ ca:a5:55:8c:e3:c8:41:6e:69:27:a7:75:11:ef:3c:86:36:6f:
++ d2:9d:c6:78:38:1d:69:96:a2:92:69:2e:38:6c:9b:7d:04:d4:
++ 89:a5:b1:31:37:8a:c9:21:cc:ab:6c:cd:8b:1c:9a:d6:bf:48:
++ d2:32:66:c1:8a:c0:f3:2f:3a:ef:c0:e3:d4:91:86:d1:50:e3:
++ 03:db:73:77:6f:4a:39:53:ed:de:26:c7:b5:7d:af:2b:42:d1:
++ 75:62:e3:4a:2b:02:c7:50:4b:e0:69:e2:96:6c:0e:44:66:10:
++ 44:8f:ad:05:eb:f8:79:ac:a6:1b:e8:37:34:9d:53:c9:61:aa:
++ a2:52:af:4a:70:16:86:c2:3a:c8:b1:13:70:36:d8:cf:ee:f4:
++ 0a:34:d5:5b:4c:fd:07:9c:a2:ba:d9:01:72:5c:f3:4d:c1:dd:
++ 0e:b1:1c:0d:c4:63:be:ad:f4:14:fb:89:ec:a2:41:0e:4c:cc:
++ c8:57:40:d0:6e:03:aa:cd:0c:8e:89:99:99:6c:f0:3c:30:af:
++ 38:df:6f:bc:a3:be:29:20:27:ab:74:ff:13:22:78:de:97:52:
++ 55:1e:83:b5:54:20:03:ee:ae:c0:4f:56:de:37:cc:c3:7f:aa:
++ 04:27:bb:d3:77:b8:62:db:17:7c:9c:28:22:13:73:6c:cf:26:
++ f5:8a:29:e7
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 7e37cb8b4c47090cab36551ba6f45db840680fba166a952db100717f43053fc2
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 0b:a1:5a:fa:1d:df:a0:b5:49:44:af:cd:24:a0:6c:ec
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3
++ Validity
++ Not Before: Aug 1 12:00:00 2013 GMT
++ Not After : Jan 15 12:00:00 2038 GMT
++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:19:e7:bc:ac:44:65:ed:cd:b8:3f:58:fb:8d:b1:
++ 57:a9:44:2d:05:15:f2:ef:0b:ff:10:74:9f:b5:62:
++ 52:5f:66:7e:1f:e5:dc:1b:45:79:0b:cc:c6:53:0a:
++ 9d:8d:5d:02:d9:a9:59:de:02:5a:f6:95:2a:0e:8d:
++ 38:4a:8a:49:c6:bc:c6:03:38:07:5f:55:da:7e:09:
++ 6e:e2:7f:5e:d0:45:20:0f:59:76:10:d6:a0:24:f0:
++ 2d:de:36:f2:6c:29:39
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ CB:D0:BD:A9:E1:98:05:51:A1:4D:37:A2:83:79:CE:8D:1D:2A:E4:84
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:64:02:30:25:a4:81:45:02:6b:12:4b:75:74:4f:c8:23:e3:
++ 70:f2:75:72:de:7c:89:f0:cf:91:72:61:9e:5e:10:92:59:56:
++ b9:83:c7:10:e7:38:e9:58:26:36:7d:d5:e4:34:86:39:02:30:
++ 7c:36:53:f0:30:e5:62:63:3a:99:e2:b6:a3:3b:9b:34:fa:1e:
++ da:10:92:71:5e:91:13:a7:dd:a4:6e:92:cc:32:d6:f5:21:66:
++ c7:2f:ea:96:63:6a:65:45:92:95:01:b4
++-----BEGIN CERTIFICATE-----
++MIICRjCCAc2gAwIBAgIQC6Fa+h3foLVJRK/NJKBs7DAKBggqhkjOPQQDAzBlMQsw
++CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu
++ZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3Qg
++RzMwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQGEwJV
++UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu
++Y29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwdjAQBgcq
++hkjOPQIBBgUrgQQAIgNiAAQZ57ysRGXtzbg/WPuNsVepRC0FFfLvC/8QdJ+1YlJf
++Zn4f5dwbRXkLzMZTCp2NXQLZqVneAlr2lSoOjThKiknGvMYDOAdfVdp+CW7if17Q
++RSAPWXYQ1qAk8C3eNvJsKTmjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/
++BAQDAgGGMB0GA1UdDgQWBBTL0L2p4ZgFUaFNN6KDec6NHSrkhDAKBggqhkjOPQQD
++AwNnADBkAjAlpIFFAmsSS3V0T8gj43DydXLefInwz5FyYZ5eEJJZVrmDxxDnOOlY
++JjZ91eQ0hjkCMHw2U/Aw5WJjOpnitqM7mzT6HtoQknFekROn3aRukswy1vUhZscv
++6pZjamVFkpUBtA==
+ -----END CERTIFICATE-----
+\ No newline at end of file
diff --git a/meta-oe/recipes-devtools/grpc/grpc_1.84.0.bb b/meta-oe/recipes-devtools/grpc/grpc_1.84.0.bb
index e38fbb292b..05b3dd5aa4 100644
--- a/meta-oe/recipes-devtools/grpc/grpc_1.84.0.bb
+++ b/meta-oe/recipes-devtools/grpc/grpc_1.84.0.bb
@@ -31,6 +31,7 @@ SRC_URI = "gitsm://github.com/grpc/grpc.git;protocol=https;branch=${BRANCH};tag=
file://0002-tsi-fix-OpenSSL-4.0-const-and-opaque-compatibility.patch \
file://0003-tsi-fix-ssl_transport_security_utils-for-OpenSSL-4.0.patch \
file://0004-tsi-fix-remaining-const-qualifiers-for-OpenSSL-4.0.patch \
+ file://0001-security-Update-gRPC-repo-roots.-43699.patch \
"
inherit cmake pkgconfig
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 47/60] python3-grpcio: update gRPC repo roots
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (45 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 46/60] grpc: update gRPC repo roots ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 48/60] libmspack: patch CVE-2026-110602 ankur.tyagi85
` (13 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Peter Marko
From: Peter Marko <peter.marko@siemens.com>
See https://emudhra.we-have-a-problem.com/
Use a copy function instead of adding the patch two times becuase there
are two copies of certificates in the sources.
Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
.../0001-Update-gRPC-repo-roots.-43699.patch | 2617 +++
...e-repo-roots-to-chromium-roots-42094.patch | 14324 ++++++++++++++++
.../python/python3-grpcio_1.78.0.bb | 6 +
3 files changed, 16947 insertions(+)
create mode 100644 meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch
create mode 100644 meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch
diff --git a/meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch b/meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch
new file mode 100644
index 0000000000..bfd5003c90
--- /dev/null
+++ b/meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch
@@ -0,0 +1,2617 @@
+From b2976adead29991fc0a67a079e10c9aba6be0274 Mon Sep 17 00:00:00 2001
+From: Matthew Stevenson <mattstev@google.com>
+Date: Tue, 20 Oct 2026 15:07:37 -0700
+Subject: [PATCH] Update gRPC repo roots. (#43699)
+
+Context: https://emudhra.we-have-a-problem.com/
+
+This PR was created by running
+
+```
+curl "https://chromium.googlesource.com/chromium/src/+/refs/heads/main/net/data/ssl/chrome_root_store/root_store.certs?format=TEXT" | base64 -d > etc/roots.pem
+```
+
+Following https://github.com/certifi/python-certifi/pull/440 and https://github.com/certifi/python-certifi/issues/439 (and other similar decisions across the industry), the `emSign Root CA - G1` is preserved.
+
+Closes #43699
+
+COPYBARA_INTEGRATE_REVIEW=https://github.com/grpc/grpc/pull/43699 from matthewstevenson88:root-update 294a8b29e8f18e286e82f64eba19549309c0efa4
+PiperOrigin-RevId: 1003426346
+
+Upstream-Status: Backport [https://github.com/sergiitk/grpc/commit/8b32af3bf498c2ba9667410eaa8c836e700e97e6]
+Signed-off-by: Peter Marko <peter.marko@siemens.com>
+---
+ etc/roots.pem | 2483 ++++++++++---------------------------------------
+ 1 file changed, 505 insertions(+), 1978 deletions(-)
+
+diff --git a/etc/roots.pem b/etc/roots.pem
+index 4c535ad..69d9e43 100644
+--- a/etc/roots.pem
++++ b/etc/roots.pem
+@@ -509,91 +509,6 @@ VoNzcOSGGtIxQbovvi0TWnZvTuhOgQ4/WwMioBK+ZlgRSssDxLQqKi2WF+A5VLxI
+ 03YnnZotBqbJ7DnSq9ufmgsnAjUpsUCV5/nonFWIGUbWtzT1fs45mtk48VH3Tyw=
+ -----END CERTIFICATE-----
+
+-# f356bea244b7a91eb35d53ca9ad7864ace018e2d35d5f8f96ddf68a6f41aa474
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number: 6643877497813316402 (0x5c33cb622c5fb332)
+- Signature Algorithm: sha256WithRSAEncryption
+- Issuer: CN = Atos TrustedRoot 2011, O = Atos, C = DE
+- Validity
+- Not Before: Jul 7 14:58:30 2011 GMT
+- Not After : Dec 31 23:59:59 2030 GMT
+- Subject: CN = Atos TrustedRoot 2011, O = Atos, C = DE
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:95:85:3b:97:6f:2a:3b:2e:3b:cf:a6:f3:29:35:
+- be:cf:18:ac:3e:aa:d9:f8:4d:a0:3e:1a:47:b9:bc:
+- 9a:df:f2:fe:cc:3e:47:e8:7a:96:c2:24:8e:35:f4:
+- a9:0c:fc:82:fd:6d:c1:72:62:27:bd:ea:6b:eb:e7:
+- 8a:cc:54:3e:90:50:cf:80:d4:95:fb:e8:b5:82:d4:
+- 14:c5:b6:a9:55:25:57:db:b1:50:f6:b0:60:64:59:
+- 7a:69:cf:03:b7:6f:0d:be:ca:3e:6f:74:72:ea:aa:
+- 30:2a:73:62:be:49:91:61:c8:11:fe:0e:03:2a:f7:
+- 6a:20:dc:02:15:0d:5e:15:6a:fc:e3:82:c1:b5:c5:
+- 9d:64:09:6c:a3:59:98:07:27:c7:1b:96:2b:61:74:
+- 71:6c:43:f1:f7:35:89:10:e0:9e:ec:55:a1:37:22:
+- a2:87:04:05:2c:47:7d:b4:1c:b9:62:29:66:28:ca:
+- b7:e1:93:f5:a4:94:03:99:b9:70:85:b5:e6:48:ea:
+- 8d:50:fc:d9:de:cc:6f:07:0e:dd:0b:72:9d:80:30:
+- 16:07:95:3f:28:0e:fd:c5:75:4f:53:d6:74:9a:b4:
+- 24:2e:8e:02:91:cf:76:c5:9b:1e:55:74:9c:78:21:
+- b1:f0:2d:f1:0b:9f:c2:d5:96:18:1f:f0:54:22:7a:
+- 8c:07
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Subject Key Identifier:
+- A7:A5:06:B1:2C:A6:09:60:EE:D1:97:E9:70:AE:BC:3B:19:6C:DB:21
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Authority Key Identifier:
+- keyid:A7:A5:06:B1:2C:A6:09:60:EE:D1:97:E9:70:AE:BC:3B:19:6C:DB:21
+-
+- X509v3 Certificate Policies:
+- Policy: 1.3.6.1.4.1.6189.3.4.1.1
+-
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- Signature Algorithm: sha256WithRSAEncryption
+- 26:77:34:db:94:48:86:2a:41:9d:2c:3e:06:90:60:c4:8c:ac:
+- 0b:54:b8:1f:b9:7b:d3:07:39:e4:fa:3e:7b:b2:3d:4e:ed:9f:
+- 23:bd:97:f3:6b:5c:ef:ee:fd:40:a6:df:a1:93:a1:0a:86:ac:
+- ef:20:d0:79:01:bd:78:f7:19:d8:24:31:34:04:01:a6:ba:15:
+- 9a:c3:27:dc:d8:4f:0f:cc:18:63:ff:99:0f:0e:91:6b:75:16:
+- e1:21:fc:d8:26:c7:47:b7:a6:cf:58:72:71:7e:ba:e1:4d:95:
+- 47:3b:c9:af:6d:a1:b4:c1:ec:89:f6:b4:0f:38:b5:e2:64:dc:
+- 25:cf:a6:db:eb:9a:5c:99:a1:c5:08:de:fd:e6:da:d5:d6:5a:
+- 45:0c:c4:b7:c2:b5:14:ef:b4:11:ff:0e:15:b5:f5:f5:db:c6:
+- bd:eb:5a:a7:f0:56:22:a9:3c:65:54:c6:15:a8:bd:86:9e:cd:
+- 83:96:68:7a:71:81:89:e1:0b:e1:ea:11:1b:68:08:cc:69:9e:
+- ec:9e:41:9e:44:32:26:7a:e2:87:0a:71:3d:eb:e4:5a:a4:d2:
+- db:c5:cd:c6:de:60:7f:b9:f3:4f:44:92:ef:2a:b7:18:3e:a7:
+- 19:d9:0b:7d:b1:37:41:42:b0:ba:60:1d:f2:fe:09:11:b0:f0:
+- 87:7b:a7:9d
+------BEGIN CERTIFICATE-----
+-MIIDdzCCAl+gAwIBAgIIXDPLYixfszIwDQYJKoZIhvcNAQELBQAwPDEeMBwGA1UE
+-AwwVQXRvcyBUcnVzdGVkUm9vdCAyMDExMQ0wCwYDVQQKDARBdG9zMQswCQYDVQQG
+-EwJERTAeFw0xMTA3MDcxNDU4MzBaFw0zMDEyMzEyMzU5NTlaMDwxHjAcBgNVBAMM
+-FUF0b3MgVHJ1c3RlZFJvb3QgMjAxMTENMAsGA1UECgwEQXRvczELMAkGA1UEBhMC
+-REUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVhTuXbyo7LjvPpvMp
+-Nb7PGKw+qtn4TaA+Gke5vJrf8v7MPkfoepbCJI419KkM/IL9bcFyYie96mvr54rM
+-VD6QUM+A1JX76LWC1BTFtqlVJVfbsVD2sGBkWXppzwO3bw2+yj5vdHLqqjAqc2K+
+-SZFhyBH+DgMq92og3AIVDV4VavzjgsG1xZ1kCWyjWZgHJ8cblithdHFsQ/H3NYkQ
+-4J7sVaE3IqKHBAUsR320HLliKWYoyrfhk/WklAOZuXCFteZI6o1Q/NnezG8HDt0L
+-cp2AMBYHlT8oDv3FdU9T1nSatCQujgKRz3bFmx5VdJx4IbHwLfELn8LVlhgf8FQi
+-eowHAgMBAAGjfTB7MB0GA1UdDgQWBBSnpQaxLKYJYO7Rl+lwrrw7GWzbITAPBgNV
+-HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFKelBrEspglg7tGX6XCuvDsZbNshMBgG
+-A1UdIAQRMA8wDQYLKwYBBAGwLQMEAQEwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3
+-DQEBCwUAA4IBAQAmdzTblEiGKkGdLD4GkGDEjKwLVLgfuXvTBznk+j57sj1O7Z8j
+-vZfza1zv7v1Apt+hk6EKhqzvINB5Ab149xnYJDE0BAGmuhWawyfc2E8PzBhj/5kP
+-DpFrdRbhIfzYJsdHt6bPWHJxfrrhTZVHO8mvbaG0weyJ9rQPOLXiZNwlz6bb65pc
+-maHFCN795trV1lpFDMS3wrUU77QR/w4VtfX128a961qn8FYiqTxlVMYVqL2Gns2D
+-lmh6cYGJ4Qvh6hEbaAjMaZ7snkGeRDImeuKHCnE96+RapNLbxc3G3mB/ufNPRJLv
+-KrcYPqcZ2Qt9sTdBQrC6YB3y/gkRsPCHe6ed
+------END CERTIFICATE-----
+-
+ # 57de0583efd2b26e0361da99da9df4648def7ee8441c3b728afa9bcde0f9b26a
+ Certificate:
+ Data:
+@@ -1085,84 +1000,6 @@ PuXaTH4MNMn5X7azKFGnpyuqSfqNZSlO42sTp5SjLVFteAxEy9/eCG/Oo2Sr05WE
+ QRBdJ3NghVdJIgc=
+ -----END CERTIFICATE-----
+
+-# eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number: 35210227249154 (0x200605167002)
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = RO, O = certSIGN, OU = certSIGN ROOT CA
+- Validity
+- Not Before: Jul 4 17:20:04 2006 GMT
+- Not After : Jul 4 17:20:04 2031 GMT
+- Subject: C = RO, O = certSIGN, OU = certSIGN ROOT CA
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:b7:33:b9:7e:c8:25:4a:8e:b5:db:b4:28:1b:aa:
+- 57:90:e8:d1:22:d3:64:ba:d3:93:e8:d4:ac:86:61:
+- 40:6a:60:57:68:54:84:4d:bc:6a:54:02:05:ff:df:
+- 9b:9a:2a:ae:5d:07:8f:4a:c3:28:7f:ef:fb:2b:fa:
+- 79:f1:c7:ad:f0:10:53:24:90:8b:66:c9:a8:88:ab:
+- af:5a:a3:00:e9:be:ba:46:ee:5b:73:7b:2c:17:82:
+- 81:5e:62:2c:a1:02:65:b3:bd:c5:2b:00:7e:c4:fc:
+- 03:33:57:0d:ed:e2:fa:ce:5d:45:d6:38:cd:35:b6:
+- b2:c1:d0:9c:81:4a:aa:e4:b2:01:5c:1d:8f:5f:99:
+- c4:b1:ad:db:88:21:eb:90:08:82:80:f3:30:a3:43:
+- e6:90:82:ae:55:28:49:ed:5b:d7:a9:10:38:0e:fe:
+- 8f:4c:5b:9b:46:ea:41:f5:b0:08:74:c3:d0:88:33:
+- b6:7c:d7:74:df:dc:84:d1:43:0e:75:39:a1:25:40:
+- 28:ea:78:cb:0e:2c:2e:39:9d:8c:8b:6e:16:1c:2f:
+- 26:82:10:e2:e3:65:94:0a:04:c0:5e:f7:5d:5b:f8:
+- 10:e2:d0:ba:7a:4b:fb:de:37:00:00:1a:5b:28:e3:
+- d2:9c:73:3e:32:87:98:a1:c9:51:2f:d7:de:ac:33:
+- b3:4f
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage: critical
+- Digital Signature, Non Repudiation, Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- E0:8C:9B:DB:25:49:B3:F1:7C:86:D6:B2:42:87:0B:D0:6B:A0:D9:E4
+- Signature Algorithm: sha1WithRSAEncryption
+- 3e:d2:1c:89:2e:35:fc:f8:75:dd:e6:7f:65:88:f4:72:4c:c9:
+- 2c:d7:32:4e:f3:dd:19:79:47:bd:8e:3b:5b:93:0f:50:49:24:
+- 13:6b:14:06:72:ef:09:d3:a1:a1:e3:40:84:c9:e7:18:32:74:
+- 3c:48:6e:0f:9f:4b:d4:f7:1e:d3:93:86:64:54:97:63:72:50:
+- d5:55:cf:fa:20:93:02:a2:9b:c3:23:93:4e:16:55:76:a0:70:
+- 79:6d:cd:21:1f:cf:2f:2d:bc:19:e3:88:31:f8:59:1a:81:09:
+- c8:97:a6:74:c7:60:c4:5b:cc:57:8e:b2:75:fd:1b:02:09:db:
+- 59:6f:72:93:69:f7:31:41:d6:88:38:bf:87:b2:bd:16:79:f9:
+- aa:e4:be:88:25:dd:61:27:23:1c:b5:31:07:04:36:b4:1a:90:
+- bd:a0:74:71:50:89:6d:bc:14:e3:0f:86:ae:f1:ab:3e:c7:a0:
+- 09:cc:a3:48:d1:e0:db:64:e7:92:b5:cf:af:72:43:70:8b:f9:
+- c3:84:3c:13:aa:7e:92:9b:57:53:93:fa:70:c2:91:0e:31:f9:
+- 9b:67:5d:e9:96:38:5e:5f:b3:73:4e:88:15:67:de:9e:76:10:
+- 62:20:be:55:69:95:43:00:39:4d:f6:ee:b0:5a:4e:49:44:54:
+- 58:5f:42:83
+------BEGIN CERTIFICATE-----
+-MIIDODCCAiCgAwIBAgIGIAYFFnACMA0GCSqGSIb3DQEBBQUAMDsxCzAJBgNVBAYT
+-AlJPMREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBD
+-QTAeFw0wNjA3MDQxNzIwMDRaFw0zMTA3MDQxNzIwMDRaMDsxCzAJBgNVBAYTAlJP
+-MREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBDQTCC
+-ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALczuX7IJUqOtdu0KBuqV5Do
+-0SLTZLrTk+jUrIZhQGpgV2hUhE28alQCBf/fm5oqrl0Hj0rDKH/v+yv6efHHrfAQ
+-UySQi2bJqIirr1qjAOm+ukbuW3N7LBeCgV5iLKECZbO9xSsAfsT8AzNXDe3i+s5d
+-RdY4zTW2ssHQnIFKquSyAVwdj1+ZxLGt24gh65AIgoDzMKND5pCCrlUoSe1b16kQ
+-OA7+j0xbm0bqQfWwCHTD0IgztnzXdN/chNFDDnU5oSVAKOp4yw4sLjmdjItuFhwv
+-JoIQ4uNllAoEwF73XVv4EOLQunpL+943AAAaWyjj0pxzPjKHmKHJUS/X3qwzs08C
+-AwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAcYwHQYDVR0O
+-BBYEFOCMm9slSbPxfIbWskKHC9BroNnkMA0GCSqGSIb3DQEBBQUAA4IBAQA+0hyJ
+-LjX8+HXd5n9liPRyTMks1zJO890ZeUe9jjtbkw9QSSQTaxQGcu8J06Gh40CEyecY
+-MnQ8SG4Pn0vU9x7Tk4ZkVJdjclDVVc/6IJMCopvDI5NOFlV2oHB5bc0hH88vLbwZ
+-44gx+FkagQnIl6Z0x2DEW8xXjrJ1/RsCCdtZb3KTafcxQdaIOL+Hsr0Wefmq5L6I
+-Jd1hJyMctTEHBDa0GpC9oHRxUIltvBTjD4au8as+x6AJzKNI0eDbZOeStc+vckNw
+-i/nDhDwTqn6Sm1dTk/pwwpEOMfmbZ13pljheX7NzTogVZ96edhBiIL5VaZVDADlN
+-9u6wWk5JRFRYX0KD
+------END CERTIFICATE-----
+-
+ # 5cc3d78e4e1d5e45547a04e6873e64f90cf9536d1ccc2ef800f355c4c5fd70fd
+ Certificate:
+ Data:
+@@ -1287,130 +1124,6 @@ AAoACxGV2lZFA4gKn2fQ1XmxqI1AbQ3CekD6819kR5LLU7m7Wc5P/dAVUwHY3+vZ
+ 5nbv0CO7O6l5s9UCKc2Jo5YPSjXnTkLAdc0Hz+Ys63su
+ -----END CERTIFICATE-----
+
+-# c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 15:c8:bd:65:47:5c:af:b8:97:00:5e:e4:06:d2:bc:9d
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = TW, O = "Chunghwa Telecom Co., Ltd.", OU = ePKI Root Certification Authority
+- Validity
+- Not Before: Dec 20 02:31:27 2004 GMT
+- Not After : Dec 20 02:31:27 2034 GMT
+- Subject: C = TW, O = "Chunghwa Telecom Co., Ltd.", OU = ePKI Root Certification Authority
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (4096 bit)
+- Modulus:
+- 00:e1:25:0f:ee:8d:db:88:33:75:67:cd:ad:1f:7d:
+- 3a:4e:6d:9d:d3:2f:14:f3:63:74:cb:01:21:6a:37:
+- ea:84:50:07:4b:26:5b:09:43:6c:21:9e:6a:c8:d5:
+- 03:f5:60:69:8f:cc:f0:22:e4:1f:e7:f7:6a:22:31:
+- b7:2c:15:f2:e0:fe:00:6a:43:ff:87:65:c6:b5:1a:
+- c1:a7:4c:6d:22:70:21:8a:31:f2:97:74:89:09:12:
+- 26:1c:9e:ca:d9:12:a2:95:3c:da:e9:67:bf:08:a0:
+- 64:e3:d6:42:b7:45:ef:97:f4:f6:f5:d7:b5:4a:15:
+- 02:58:7d:98:58:4b:60:bc:cd:d7:0d:9a:13:33:53:
+- d1:61:f9:7a:d5:d7:78:b3:9a:33:f7:00:86:ce:1d:
+- 4d:94:38:af:a8:ec:78:51:70:8a:5c:10:83:51:21:
+- f7:11:3d:34:86:5e:e5:48:cd:97:81:82:35:4c:19:
+- ec:65:f6:6b:c5:05:a1:ee:47:13:d6:b3:21:27:94:
+- 10:0a:d9:24:3b:ba:be:44:13:46:30:3f:97:3c:d8:
+- d7:d7:6a:ee:3b:38:e3:2b:d4:97:0e:b9:1b:e7:07:
+- 49:7f:37:2a:f9:77:78:cf:54:ed:5b:46:9d:a3:80:
+- 0e:91:43:c1:d6:5b:5f:14:ba:9f:a6:8d:24:47:40:
+- 59:bf:72:38:b2:36:6c:37:ff:99:d1:5d:0e:59:0a:
+- ab:69:f7:c0:b2:04:45:7a:54:00:ae:be:53:f6:b5:
+- e7:e1:f8:3c:a3:31:d2:a9:fe:21:52:64:c5:a6:67:
+- f0:75:07:06:94:14:81:55:c6:27:e4:01:8f:17:c1:
+- 6a:71:d7:be:4b:fb:94:58:7d:7e:11:33:b1:42:f7:
+- 62:6c:18:d6:cf:09:68:3e:7f:6c:f6:1e:8f:62:ad:
+- a5:63:db:09:a7:1f:22:42:41:1e:6f:99:8a:3e:d7:
+- f9:3f:40:7a:79:b0:a5:01:92:d2:9d:3d:08:15:a5:
+- 10:01:2d:b3:32:76:a8:95:0d:b3:7a:9a:fb:07:10:
+- 78:11:6f:e1:8f:c7:ba:0f:25:1a:74:2a:e5:1c:98:
+- 41:99:df:21:87:e8:95:06:6a:0a:b3:6a:47:76:65:
+- f6:3a:cf:8f:62:17:19:7b:0a:28:cd:1a:d2:83:1e:
+- 21:c7:2c:bf:be:ff:61:68:b7:67:1b:bb:78:4d:8d:
+- ce:67:e5:e4:c1:8e:b7:23:66:e2:9d:90:75:34:98:
+- a9:36:2b:8a:9a:94:b9:9d:ec:cc:8a:b1:f8:25:89:
+- 5c:5a:b6:2f:8c:1f:6d:79:24:a7:52:68:c3:84:35:
+- e2:66:8d:63:0e:25:4d:d5:19:b2:e6:79:37:a7:22:
+- 9d:54:31
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Subject Key Identifier:
+- 1E:0C:F7:B6:67:F2:E1:92:26:09:45:C0:55:39:2E:77:3F:42:4A:A2
+- X509v3 Basic Constraints:
+- CA:TRUE
+- setCext-hashedRoot:
+- 0/0-...0...+......0...g*.....E...
+-V|.[x....S.....
+- Signature Algorithm: sha1WithRSAEncryption
+- 09:b3:83:53:59:01:3e:95:49:b9:f1:81:ba:f9:76:20:23:b5:
+- 27:60:74:d4:6a:99:34:5e:6c:00:53:d9:9f:f2:a6:b1:24:07:
+- 44:6a:2a:c6:a5:8e:78:12:e8:47:d9:58:1b:13:2a:5e:79:9b:
+- 9f:0a:2a:67:a6:25:3f:06:69:56:73:c3:8a:66:48:fb:29:81:
+- 57:74:06:ca:9c:ea:28:e8:38:67:26:2b:f1:d5:b5:3f:65:93:
+- f8:36:5d:8e:8d:8d:40:20:87:19:ea:ef:27:c0:3d:b4:39:0f:
+- 25:7b:68:50:74:55:9c:0c:59:7d:5a:3d:41:94:25:52:08:e0:
+- 47:2c:15:31:19:d5:bf:07:55:c6:bb:12:b5:97:f4:5f:83:85:
+- ba:71:c1:d9:6c:81:11:76:0a:0a:b0:bf:82:97:f7:ea:3d:fa:
+- fa:ec:2d:a9:28:94:3b:56:dd:d2:51:2e:ae:c0:bd:08:15:8c:
+- 77:52:34:96:d6:9b:ac:d3:1d:8e:61:0f:35:7b:9b:ae:39:69:
+- 0b:62:60:40:20:36:8f:af:fb:36:ee:2d:08:4a:1d:b8:bf:9b:
+- 5c:f8:ea:a5:1b:a0:73:a6:d8:f8:6e:e0:33:04:5f:68:aa:27:
+- 87:ed:d9:c1:90:9c:ed:bd:e3:6a:35:af:63:df:ab:18:d9:ba:
+- e6:e9:4a:ea:50:8a:0f:61:93:1e:e2:2d:19:e2:30:94:35:92:
+- 5d:0e:b6:07:af:19:80:8f:47:90:51:4b:2e:4d:dd:85:e2:d2:
+- 0a:52:0a:17:9a:fc:1a:b0:50:02:e5:01:a3:63:37:21:4c:44:
+- c4:9b:51:99:11:0e:73:9c:06:8f:54:2e:a7:28:5e:44:39:87:
+- 56:2d:37:bd:85:44:94:e1:0c:4b:2c:9c:c3:92:85:34:61:cb:
+- 0f:b8:9b:4a:43:52:fe:34:3a:7d:b8:e9:29:dc:76:a9:c8:30:
+- f8:14:71:80:c6:1e:36:48:74:22:41:5c:87:82:e8:18:71:8b:
+- 41:89:44:e7:7e:58:5b:a8:b8:8d:13:e9:a7:6c:c3:47:ed:b3:
+- 1a:9d:62:ae:8d:82:ea:94:9e:dd:59:10:c3:ad:dd:e2:4d:e3:
+- 31:d5:c7:ec:e8:f2:b0:fe:92:1e:16:0a:1a:fc:d9:f3:f8:27:
+- b6:c9:be:1d:b4:6c:64:90:7f:f4:e4:c4:5b:d7:37:ae:42:0e:
+- dd:a4:1a:6f:7c:88:54:c5:16:6e:e1:7a:68:2e:f8:3a:bf:0d:
+- a4:3c:89:3b:78:a7:4e:63:83:04:21:08:67:8d:f2:82:49:d0:
+- 5b:fd:b1:cd:0f:83:84:d4:3e:20:85:f7:4a:3d:2b:9c:fd:2a:
+- 0a:09:4d:ea:81:f8:11:9c
+------BEGIN CERTIFICATE-----
+-MIIFsDCCA5igAwIBAgIQFci9ZUdcr7iXAF7kBtK8nTANBgkqhkiG9w0BAQUFADBe
+-MQswCQYDVQQGEwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0
+-ZC4xKjAoBgNVBAsMIWVQS0kgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe
+-Fw0wNDEyMjAwMjMxMjdaFw0zNDEyMjAwMjMxMjdaMF4xCzAJBgNVBAYTAlRXMSMw
+-IQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwgTHRkLjEqMCgGA1UECwwhZVBL
+-SSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEF
+-AAOCAg8AMIICCgKCAgEA4SUP7o3biDN1Z82tH306Tm2d0y8U82N0ywEhajfqhFAH
+-SyZbCUNsIZ5qyNUD9WBpj8zwIuQf5/dqIjG3LBXy4P4AakP/h2XGtRrBp0xtInAh
+-ijHyl3SJCRImHJ7K2RKilTza6We/CKBk49ZCt0Xvl/T29de1ShUCWH2YWEtgvM3X
+-DZoTM1PRYfl61dd4s5oz9wCGzh1NlDivqOx4UXCKXBCDUSH3ET00hl7lSM2XgYI1
+-TBnsZfZrxQWh7kcT1rMhJ5QQCtkkO7q+RBNGMD+XPNjX12ruOzjjK9SXDrkb5wdJ
+-fzcq+Xd4z1TtW0ado4AOkUPB1ltfFLqfpo0kR0BZv3I4sjZsN/+Z0V0OWQqraffA
+-sgRFelQArr5T9rXn4fg8ozHSqf4hUmTFpmfwdQcGlBSBVcYn5AGPF8Fqcde+S/uU
+-WH1+ETOxQvdibBjWzwloPn9s9h6PYq2lY9sJpx8iQkEeb5mKPtf5P0B6ebClAZLS
+-nT0IFaUQAS2zMnaolQ2zepr7BxB4EW/hj8e6DyUadCrlHJhBmd8hh+iVBmoKs2pH
+-dmX2Os+PYhcZewoozRrSgx4hxyy/vv9haLdnG7t4TY3OZ+XkwY63I2binZB1NJip
+-NiuKmpS5nezMirH4JYlcWrYvjB9teSSnUmjDhDXiZo1jDiVN1Rmy5nk3pyKdVDEC
+-AwEAAaNqMGgwHQYDVR0OBBYEFB4M97Zn8uGSJglFwFU5Lnc/QkqiMAwGA1UdEwQF
+-MAMBAf8wOQYEZyoHAAQxMC8wLQIBADAJBgUrDgMCGgUAMAcGBWcqAwAABBRFsMLH
+-ClZ87lt4DJX5GFPBphzYEDANBgkqhkiG9w0BAQUFAAOCAgEACbODU1kBPpVJufGB
+-uvl2ICO1J2B01GqZNF5sAFPZn/KmsSQHRGoqxqWOeBLoR9lYGxMqXnmbnwoqZ6Yl
+-PwZpVnPDimZI+ymBV3QGypzqKOg4ZyYr8dW1P2WT+DZdjo2NQCCHGervJ8A9tDkP
+-JXtoUHRVnAxZfVo9QZQlUgjgRywVMRnVvwdVxrsStZf0X4OFunHB2WyBEXYKCrC/
+-gpf36j36+uwtqSiUO1bd0lEursC9CBWMd1I0ltabrNMdjmEPNXubrjlpC2JgQCA2
+-j6/7Nu4tCEoduL+bXPjqpRugc6bY+G7gMwRfaKonh+3ZwZCc7b3jajWvY9+rGNm6
+-5ulK6lCKD2GTHuItGeIwlDWSXQ62B68ZgI9HkFFLLk3dheLSClIKF5r8GrBQAuUB
+-o2M3IUxExJtRmREOc5wGj1QupyheRDmHVi03vYVElOEMSyycw5KFNGHLD7ibSkNS
+-/jQ6fbjpKdx2qcgw+BRxgMYeNkh0IkFch4LoGHGLQYlE535YW6i4jRPpp2zDR+2z
+-Gp1iro2C6pSe3VkQw63d4k3jMdXH7OjysP6SHhYKGvzZ8/gntsm+HbRsZJB/9OTE
+-W9c3rkIO3aQab3yIVMUWbuF6aC74Or8NpDyJO3inTmODBCEIZ43ygknQW/2xzQ+D
+-hNQ+IIX3Sj0rnP0qCglN6oH4EZw=
+------END CERTIFICATE-----
+-
+ # 49e7a442acf0ea6287050054b52564b650e4f49e42e348d6aa38e039e957b1c1
+ Certificate:
+ Data:
+@@ -1896,94 +1609,6 @@ jWZSaX5LaAzHHjcng6WMxwLkFM1JAbBzs/3GkDpv0mztO+7skb6iQ12LAEpmJURw
+ 3kAP+HwV96LOPNdeE4yBFxgX0b3xdxA61GU5wSesVywlVP+i2k+KYTlerj1KjL0=
+ -----END CERTIFICATE-----
+
+-# e3b6a2db2ed7ce48842f7ac53241c7b71d54144bfb40c11f3f1d0b42f5eea12d
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- fe:dc:e3:01:0f:c9:48:ff
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = FR, O = Dhimyotis, CN = Certigna
+- Validity
+- Not Before: Jun 29 15:13:05 2007 GMT
+- Not After : Jun 29 15:13:05 2027 GMT
+- Subject: C = FR, O = Dhimyotis, CN = Certigna
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:c8:68:f1:c9:d6:d6:b3:34:75:26:82:1e:ec:b4:
+- be:ea:5c:e1:26:ed:11:47:61:e1:a2:7c:16:78:40:
+- 21:e4:60:9e:5a:c8:63:e1:c4:b1:96:92:ff:18:6d:
+- 69:23:e1:2b:62:f7:dd:e2:36:2f:91:07:b9:48:cf:
+- 0e:ec:79:b6:2c:e7:34:4b:70:08:25:a3:3c:87:1b:
+- 19:f2:81:07:0f:38:90:19:d3:11:fe:86:b4:f2:d1:
+- 5e:1e:1e:96:cd:80:6c:ce:3b:31:93:b6:f2:a0:d0:
+- a9:95:12:7d:a5:9a:cc:6b:c8:84:56:8a:33:a9:e7:
+- 22:15:53:16:f0:cc:17:ec:57:5f:e9:a2:0a:98:09:
+- de:e3:5f:9c:6f:dc:48:e3:85:0b:15:5a:a6:ba:9f:
+- ac:48:e3:09:b2:f7:f4:32:de:5e:34:be:1c:78:5d:
+- 42:5b:ce:0e:22:8f:4d:90:d7:7d:32:18:b3:0b:2c:
+- 6a:bf:8e:3f:14:11:89:20:0e:77:14:b5:3d:94:08:
+- 87:f7:25:1e:d5:b2:60:00:ec:6f:2a:28:25:6e:2a:
+- 3e:18:63:17:25:3f:3e:44:20:16:f6:26:c8:25:ae:
+- 05:4a:b4:e7:63:2c:f3:8c:16:53:7e:5c:fb:11:1a:
+- 08:c1:46:62:9f:22:b8:f1:c2:8d:69:dc:fa:3a:58:
+- 06:df
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- 1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
+- X509v3 Authority Key Identifier:
+- keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
+- DirName:/C=FR/O=Dhimyotis/CN=Certigna
+- serial:FE:DC:E3:01:0F:C9:48:FF
+-
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- Netscape Cert Type:
+- SSL CA, S/MIME CA, Object Signing CA
+- Signature Algorithm: sha1WithRSAEncryption
+- 85:03:1e:92:71:f6:42:af:e1:a3:61:9e:eb:f3:c0:0f:f2:a5:
+- d4:da:95:e6:d6:be:68:36:3d:7e:6e:1f:4c:8a:ef:d1:0f:21:
+- 6d:5e:a5:52:63:ce:12:f8:ef:2a:da:6f:eb:37:fe:13:02:c7:
+- cb:3b:3e:22:6b:da:61:2e:7f:d4:72:3d:dd:30:e1:1e:4c:40:
+- 19:8c:0f:d7:9c:d1:83:30:7b:98:59:dc:7d:c6:b9:0c:29:4c:
+- a1:33:a2:eb:67:3a:65:84:d3:96:e2:ed:76:45:70:8f:b5:2b:
+- de:f9:23:d6:49:6e:3c:14:b5:c6:9f:35:1e:50:d0:c1:8f:6a:
+- 70:44:02:62:cb:ae:1d:68:41:a7:aa:57:e8:53:aa:07:d2:06:
+- f6:d5:14:06:0b:91:03:75:2c:6c:72:b5:61:95:9a:0d:8b:b9:
+- 0d:e7:f5:df:54:cd:de:e6:d8:d6:09:08:97:63:e5:c1:2e:b0:
+- b7:44:26:c0:26:c0:af:55:30:9e:3b:d5:36:2a:19:04:f4:5c:
+- 1e:ff:cf:2c:b7:ff:d0:fd:87:40:11:d5:11:23:bb:48:c0:21:
+- a9:a4:28:2d:fd:15:f8:b0:4e:2b:f4:30:5b:21:fc:11:91:34:
+- be:41:ef:7b:9d:97:75:ff:97:95:c0:96:58:2f:ea:bb:46:d7:
+- bb:e4:d9:2e
+------BEGIN CERTIFICATE-----
+-MIIDqDCCApCgAwIBAgIJAP7c4wEPyUj/MA0GCSqGSIb3DQEBBQUAMDQxCzAJBgNV
+-BAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hMB4X
+-DTA3MDYyOTE1MTMwNVoXDTI3MDYyOTE1MTMwNVowNDELMAkGA1UEBhMCRlIxEjAQ
+-BgNVBAoMCURoaW15b3RpczERMA8GA1UEAwwIQ2VydGlnbmEwggEiMA0GCSqGSIb3
+-DQEBAQUAA4IBDwAwggEKAoIBAQDIaPHJ1tazNHUmgh7stL7qXOEm7RFHYeGifBZ4
+-QCHkYJ5ayGPhxLGWkv8YbWkj4Sti993iNi+RB7lIzw7sebYs5zRLcAglozyHGxny
+-gQcPOJAZ0xH+hrTy0V4eHpbNgGzOOzGTtvKg0KmVEn2lmsxryIRWijOp5yIVUxbw
+-zBfsV1/pogqYCd7jX5xv3EjjhQsVWqa6n6xI4wmy9/Qy3l40vhx4XUJbzg4ij02Q
+-130yGLMLLGq/jj8UEYkgDncUtT2UCIf3JR7VsmAA7G8qKCVuKj4YYxclPz5EIBb2
+-JsglrgVKtOdjLPOMFlN+XPsRGgjBRmKfIrjxwo1p3Po6WAbfAgMBAAGjgbwwgbkw
+-DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUGu3+QTmQtCRZvgHyUtVF9lo53BEw
+-ZAYDVR0jBF0wW4AUGu3+QTmQtCRZvgHyUtVF9lo53BGhOKQ2MDQxCzAJBgNVBAYT
+-AkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hggkA/tzj
+-AQ/JSP8wDgYDVR0PAQH/BAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG
+-9w0BAQUFAAOCAQEAhQMeknH2Qq/ho2Ge6/PAD/Kl1NqV5ta+aDY9fm4fTIrv0Q8h
+-bV6lUmPOEvjvKtpv6zf+EwLHyzs+ImvaYS5/1HI93TDhHkxAGYwP15zRgzB7mFnc
+-fca5DClMoTOi62c6ZYTTluLtdkVwj7Ur3vkj1kluPBS1xp81HlDQwY9qcEQCYsuu
+-HWhBp6pX6FOqB9IG9tUUBguRA3UsbHK1YZWaDYu5Def131TN3ubY1gkIl2PlwS6w
+-t0QmwCbAr1UwnjvVNioZBPRcHv/PLLf/0P2HQBHVESO7SMAhqaQoLf0V+LBOK/Qw
+-WyH8EZE0vkHve52Xdf+XlcCWWC/qu0bXu+TZLg==
+------END CERTIFICATE-----
+-
+ # 31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0
+ Certificate:
+ Data:
+@@ -2039,517 +1664,6 @@ oAIwOWZbwmSNuJ5Q3KjVSaLtx9zRSX8XAbjIho9OjIgrqJqpisXRAL34VOKa5Vt8
+ sycX
+ -----END CERTIFICATE-----
+
+-# 3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root CA
+- Validity
+- Not Before: Nov 10 00:00:00 2006 GMT
+- Not After : Nov 10 00:00:00 2031 GMT
+- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root CA
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:ad:0e:15:ce:e4:43:80:5c:b1:87:f3:b7:60:f9:
+- 71:12:a5:ae:dc:26:94:88:aa:f4:ce:f5:20:39:28:
+- 58:60:0c:f8:80:da:a9:15:95:32:61:3c:b5:b1:28:
+- 84:8a:8a:dc:9f:0a:0c:83:17:7a:8f:90:ac:8a:e7:
+- 79:53:5c:31:84:2a:f6:0f:98:32:36:76:cc:de:dd:
+- 3c:a8:a2:ef:6a:fb:21:f2:52:61:df:9f:20:d7:1f:
+- e2:b1:d9:fe:18:64:d2:12:5b:5f:f9:58:18:35:bc:
+- 47:cd:a1:36:f9:6b:7f:d4:b0:38:3e:c1:1b:c3:8c:
+- 33:d9:d8:2f:18:fe:28:0f:b3:a7:83:d6:c3:6e:44:
+- c0:61:35:96:16:fe:59:9c:8b:76:6d:d7:f1:a2:4b:
+- 0d:2b:ff:0b:72:da:9e:60:d0:8e:90:35:c6:78:55:
+- 87:20:a1:cf:e5:6d:0a:c8:49:7c:31:98:33:6c:22:
+- e9:87:d0:32:5a:a2:ba:13:82:11:ed:39:17:9d:99:
+- 3a:72:a1:e6:fa:a4:d9:d5:17:31:75:ae:85:7d:22:
+- ae:3f:01:46:86:f6:28:79:c8:b1:da:e4:57:17:c4:
+- 7e:1c:0e:b0:b4:92:a6:56:b3:bd:b2:97:ed:aa:a7:
+- f0:b7:c5:a8:3f:95:16:d0:ff:a1:96:eb:08:5f:18:
+- 77:4f
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- 45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F
+- X509v3 Authority Key Identifier:
+- keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F
+-
+- Signature Algorithm: sha1WithRSAEncryption
+- a2:0e:bc:df:e2:ed:f0:e3:72:73:7a:64:94:bf:f7:72:66:d8:
+- 32:e4:42:75:62:ae:87:eb:f2:d5:d9:de:56:b3:9f:cc:ce:14:
+- 28:b9:0d:97:60:5c:12:4c:58:e4:d3:3d:83:49:45:58:97:35:
+- 69:1a:a8:47:ea:56:c6:79:ab:12:d8:67:81:84:df:7f:09:3c:
+- 94:e6:b8:26:2c:20:bd:3d:b3:28:89:f7:5f:ff:22:e2:97:84:
+- 1f:e9:65:ef:87:e0:df:c1:67:49:b3:5d:eb:b2:09:2a:eb:26:
+- ed:78:be:7d:3f:2b:f3:b7:26:35:6d:5f:89:01:b6:49:5b:9f:
+- 01:05:9b:ab:3d:25:c1:cc:b6:7f:c2:f1:6f:86:c6:fa:64:68:
+- eb:81:2d:94:eb:42:b7:fa:8c:1e:dd:62:f1:be:50:67:b7:6c:
+- bd:f3:f1:1f:6b:0c:36:07:16:7f:37:7c:a9:5b:6d:7a:f1:12:
+- 46:60:83:d7:27:04:be:4b:ce:97:be:c3:67:2a:68:11:df:80:
+- e7:0c:33:66:bf:13:0d:14:6e:f3:7f:1f:63:10:1e:fa:8d:1b:
+- 25:6d:6c:8f:a5:b7:61:01:b1:d2:a3:26:a1:10:71:9d:ad:e2:
+- c3:f9:c3:99:51:b7:2b:07:08:ce:2e:e6:50:b2:a7:fa:0a:45:
+- 2f:a2:f0:f2
+------BEGIN CERTIFICATE-----
+-MIIDtzCCAp+gAwIBAgIQDOfg5RfYRv6P5WD8G/AwOTANBgkqhkiG9w0BAQUFADBl
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv
+-b3QgQ0EwHhcNMDYxMTEwMDAwMDAwWhcNMzExMTEwMDAwMDAwWjBlMQswCQYDVQQG
+-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl
+-cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwggEi
+-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDhXO5EOAXLGH87dg+XESpa7c
+-JpSIqvTO9SA5KFhgDPiA2qkVlTJhPLWxKISKityfCgyDF3qPkKyK53lTXDGEKvYP
+-mDI2dsze3Tyoou9q+yHyUmHfnyDXH+Kx2f4YZNISW1/5WBg1vEfNoTb5a3/UsDg+
+-wRvDjDPZ2C8Y/igPs6eD1sNuRMBhNZYW/lmci3Zt1/GiSw0r/wty2p5g0I6QNcZ4
+-VYcgoc/lbQrISXwxmDNsIumH0DJaoroTghHtORedmTpyoeb6pNnVFzF1roV9Iq4/
+-AUaG9ih5yLHa5FcXxH4cDrC0kqZWs72yl+2qp/C3xag/lRbQ/6GW6whfGHdPAgMB
+-AAGjYzBhMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW
+-BBRF66Kv9JLLgjEtUYunpyGd823IDzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYun
+-pyGd823IDzANBgkqhkiG9w0BAQUFAAOCAQEAog683+Lt8ONyc3pklL/3cmbYMuRC
+-dWKuh+vy1dneVrOfzM4UKLkNl2BcEkxY5NM9g0lFWJc1aRqoR+pWxnmrEthngYTf
+-fwk8lOa4JiwgvT2zKIn3X/8i4peEH+ll74fg38FnSbNd67IJKusm7Xi+fT8r87cm
+-NW1fiQG2SVufAQWbqz0lwcy2f8Lxb4bG+mRo64EtlOtCt/qMHt1i8b5QZ7dsvfPx
+-H2sMNgcWfzd8qVttevESRmCD1ycEvkvOl77DZypoEd+A5wwzZr8TDRRu838fYxAe
+-+o0bJW1sj6W3YQGx0qMmoRBxna3iw/nDmVG3KwcIzi7mULKn+gpFL6Lw8g==
+------END CERTIFICATE-----
+-
+-# 4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 08:3b:e0:56:90:42:46:b1:a1:75:6a:c9:59:91:c7:4a
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
+- Validity
+- Not Before: Nov 10 00:00:00 2006 GMT
+- Not After : Nov 10 00:00:00 2031 GMT
+- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:e2:3b:e1:11:72:de:a8:a4:d3:a3:57:aa:50:a2:
+- 8f:0b:77:90:c9:a2:a5:ee:12:ce:96:5b:01:09:20:
+- cc:01:93:a7:4e:30:b7:53:f7:43:c4:69:00:57:9d:
+- e2:8d:22:dd:87:06:40:00:81:09:ce:ce:1b:83:bf:
+- df:cd:3b:71:46:e2:d6:66:c7:05:b3:76:27:16:8f:
+- 7b:9e:1e:95:7d:ee:b7:48:a3:08:da:d6:af:7a:0c:
+- 39:06:65:7f:4a:5d:1f:bc:17:f8:ab:be:ee:28:d7:
+- 74:7f:7a:78:99:59:85:68:6e:5c:23:32:4b:bf:4e:
+- c0:e8:5a:6d:e3:70:bf:77:10:bf:fc:01:f6:85:d9:
+- a8:44:10:58:32:a9:75:18:d5:d1:a2:be:47:e2:27:
+- 6a:f4:9a:33:f8:49:08:60:8b:d4:5f:b4:3a:84:bf:
+- a1:aa:4a:4c:7d:3e:cf:4f:5f:6c:76:5e:a0:4b:37:
+- 91:9e:dc:22:e6:6d:ce:14:1a:8e:6a:cb:fe:cd:b3:
+- 14:64:17:c7:5b:29:9e:32:bf:f2:ee:fa:d3:0b:42:
+- d4:ab:b7:41:32:da:0c:d4:ef:f8:81:d5:bb:8d:58:
+- 3f:b5:1b:e8:49:28:a2:70:da:31:04:dd:f7:b2:16:
+- f2:4c:0a:4e:07:a8:ed:4a:3d:5e:b5:7f:a3:90:c3:
+- af:27
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- 03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
+- X509v3 Authority Key Identifier:
+- keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
+-
+- Signature Algorithm: sha1WithRSAEncryption
+- cb:9c:37:aa:48:13:12:0a:fa:dd:44:9c:4f:52:b0:f4:df:ae:
+- 04:f5:79:79:08:a3:24:18:fc:4b:2b:84:c0:2d:b9:d5:c7:fe:
+- f4:c1:1f:58:cb:b8:6d:9c:7a:74:e7:98:29:ab:11:b5:e3:70:
+- a0:a1:cd:4c:88:99:93:8c:91:70:e2:ab:0f:1c:be:93:a9:ff:
+- 63:d5:e4:07:60:d3:a3:bf:9d:5b:09:f1:d5:8e:e3:53:f4:8e:
+- 63:fa:3f:a7:db:b4:66:df:62:66:d6:d1:6e:41:8d:f2:2d:b5:
+- ea:77:4a:9f:9d:58:e2:2b:59:c0:40:23:ed:2d:28:82:45:3e:
+- 79:54:92:26:98:e0:80:48:a8:37:ef:f0:d6:79:60:16:de:ac:
+- e8:0e:cd:6e:ac:44:17:38:2f:49:da:e1:45:3e:2a:b9:36:53:
+- cf:3a:50:06:f7:2e:e8:c4:57:49:6c:61:21:18:d5:04:ad:78:
+- 3c:2c:3a:80:6b:a7:eb:af:15:14:e9:d8:89:c1:b9:38:6c:e2:
+- 91:6c:8a:ff:64:b9:77:25:57:30:c0:1b:24:a3:e1:dc:e9:df:
+- 47:7c:b5:b4:24:08:05:30:ec:2d:bd:0b:bf:45:bf:50:b9:a9:
+- f3:eb:98:01:12:ad:c8:88:c6:98:34:5f:8d:0a:3c:c6:e9:d5:
+- 95:95:6d:de
+------BEGIN CERTIFICATE-----
+-MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
+-QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
+-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
+-b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
+-9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
+-CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
+-nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
+-43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
+-T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
+-gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
+-BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
+-TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
+-DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
+-hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
+-06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
+-PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
+-YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
+-CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
+------END CERTIFICATE-----
+-
+-# 552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
+- Signature Algorithm: sha384WithRSAEncryption
+- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4
+- Validity
+- Not Before: Aug 1 12:00:00 2013 GMT
+- Not After : Jan 15 12:00:00 2038 GMT
+- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (4096 bit)
+- Modulus:
+- 00:bf:e6:90:73:68:de:bb:e4:5d:4a:3c:30:22:30:
+- 69:33:ec:c2:a7:25:2e:c9:21:3d:f2:8a:d8:59:c2:
+- e1:29:a7:3d:58:ab:76:9a:cd:ae:7b:1b:84:0d:c4:
+- 30:1f:f3:1b:a4:38:16:eb:56:c6:97:6d:1d:ab:b2:
+- 79:f2:ca:11:d2:e4:5f:d6:05:3c:52:0f:52:1f:c6:
+- 9e:15:a5:7e:be:9f:a9:57:16:59:55:72:af:68:93:
+- 70:c2:b2:ba:75:99:6a:73:32:94:d1:10:44:10:2e:
+- df:82:f3:07:84:e6:74:3b:6d:71:e2:2d:0c:1b:ee:
+- 20:d5:c9:20:1d:63:29:2d:ce:ec:5e:4e:c8:93:f8:
+- 21:61:9b:34:eb:05:c6:5e:ec:5b:1a:bc:eb:c9:cf:
+- cd:ac:34:40:5f:b1:7a:66:ee:77:c8:48:a8:66:57:
+- 57:9f:54:58:8e:0c:2b:b7:4f:a7:30:d9:56:ee:ca:
+- 7b:5d:e3:ad:c9:4f:5e:e5:35:e7:31:cb:da:93:5e:
+- dc:8e:8f:80:da:b6:91:98:40:90:79:c3:78:c7:b6:
+- b1:c4:b5:6a:18:38:03:10:8d:d8:d4:37:a4:2e:05:
+- 7d:88:f5:82:3e:10:91:70:ab:55:82:41:32:d7:db:
+- 04:73:2a:6e:91:01:7c:21:4c:d4:bc:ae:1b:03:75:
+- 5d:78:66:d9:3a:31:44:9a:33:40:bf:08:d7:5a:49:
+- a4:c2:e6:a9:a0:67:dd:a4:27:bc:a1:4f:39:b5:11:
+- 58:17:f7:24:5c:46:8f:64:f7:c1:69:88:76:98:76:
+- 3d:59:5d:42:76:87:89:97:69:7a:48:f0:e0:a2:12:
+- 1b:66:9a:74:ca:de:4b:1e:e7:0e:63:ae:e6:d4:ef:
+- 92:92:3a:9e:3d:dc:00:e4:45:25:89:b6:9a:44:19:
+- 2b:7e:c0:94:b4:d2:61:6d:eb:33:d9:c5:df:4b:04:
+- 00:cc:7d:1c:95:c3:8f:f7:21:b2:b2:11:b7:bb:7f:
+- f2:d5:8c:70:2c:41:60:aa:b1:63:18:44:95:1a:76:
+- 62:7e:f6:80:b0:fb:e8:64:a6:33:d1:89:07:e1:bd:
+- b7:e6:43:a4:18:b8:a6:77:01:e1:0f:94:0c:21:1d:
+- b2:54:29:25:89:6c:e5:0e:52:51:47:74:be:26:ac:
+- b6:41:75:de:7a:ac:5f:8d:3f:c9:bc:d3:41:11:12:
+- 5b:e5:10:50:eb:31:c5:ca:72:16:22:09:df:7c:4c:
+- 75:3f:63:ec:21:5f:c4:20:51:6b:6f:b1:ab:86:8b:
+- 4f:c2:d6:45:5f:9d:20:fc:a1:1e:c5:c0:8f:a2:b1:
+- 7e:0a:26:99:f5:e4:69:2f:98:1d:2d:f5:d9:a9:b2:
+- 1d:e5:1b
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- EC:D7:E3:82:D2:71:5D:64:4C:DF:2E:67:3F:E7:BA:98:AE:1C:0F:4F
+- Signature Algorithm: sha384WithRSAEncryption
+- bb:61:d9:7d:a9:6c:be:17:c4:91:1b:c3:a1:a2:00:8d:e3:64:
+- 68:0f:56:cf:77:ae:70:f9:fd:9a:4a:99:b9:c9:78:5c:0c:0c:
+- 5f:e4:e6:14:29:56:0b:36:49:5d:44:63:e0:ad:9c:96:18:66:
+- 1b:23:0d:3d:79:e9:6d:6b:d6:54:f8:d2:3c:c1:43:40:ae:1d:
+- 50:f5:52:fc:90:3b:bb:98:99:69:6b:c7:c1:a7:a8:68:a4:27:
+- dc:9d:f9:27:ae:30:85:b9:f6:67:4d:3a:3e:8f:59:39:22:53:
+- 44:eb:c8:5d:03:ca:ed:50:7a:7d:62:21:0a:80:c8:73:66:d1:
+- a0:05:60:5f:e8:a5:b4:a7:af:a8:f7:6d:35:9c:7c:5a:8a:d6:
+- a2:38:99:f3:78:8b:f4:4d:d2:20:0b:de:04:ee:8c:9b:47:81:
+- 72:0d:c0:14:32:ef:30:59:2e:ae:e0:71:f2:56:e4:6a:97:6f:
+- 92:50:6d:96:8d:68:7a:9a:b2:36:14:7a:06:f2:24:b9:09:11:
+- 50:d7:08:b1:b8:89:7a:84:23:61:42:29:e5:a3:cd:a2:20:41:
+- d7:d1:9c:64:d9:ea:26:a1:8b:14:d7:4c:19:b2:50:41:71:3d:
+- 3f:4d:70:23:86:0c:4a:dc:81:d2:cc:32:94:84:0d:08:09:97:
+- 1c:4f:c0:ee:6b:20:74:30:d2:e0:39:34:10:85:21:15:01:08:
+- e8:55:32:de:71:49:d9:28:17:50:4d:e6:be:4d:d1:75:ac:d0:
+- ca:fb:41:b8:43:a5:aa:d3:c3:05:44:4f:2c:36:9b:e2:fa:e2:
+- 45:b8:23:53:6c:06:6f:67:55:7f:46:b5:4c:3f:6e:28:5a:79:
+- 26:d2:a4:a8:62:97:d2:1e:e2:ed:4a:8b:bc:1b:fd:47:4a:0d:
+- df:67:66:7e:b2:5b:41:d0:3b:e4:f4:3b:f4:04:63:e9:ef:c2:
+- 54:00:51:a0:8a:2a:c9:ce:78:cc:d5:ea:87:04:18:b3:ce:af:
+- 49:88:af:f3:92:99:b6:b3:e6:61:0f:d2:85:00:e7:50:1a:e4:
+- 1b:95:9d:19:a1:b9:9c:b1:9b:b1:00:1e:ef:d0:0f:4f:42:6c:
+- c9:0a:bc:ee:43:fa:3a:71:a5:c8:4d:26:a5:35:fd:89:5d:bc:
+- 85:62:1d:32:d2:a0:2b:54:ed:9a:57:c1:db:fa:10:cf:19:b7:
+- 8b:4a:1b:8f:01:b6:27:95:53:e8:b6:89:6d:5b:bc:68:d4:23:
+- e8:8b:51:a2:56:f9:f0:a6:80:a0:d6:1e:b3:bc:0f:0f:53:75:
+- 29:aa:ea:13:77:e4:de:8c:81:21:ad:07:10:47:11:ad:87:3d:
+- 07:d1:75:bc:cf:f3:66:7e
+------BEGIN CERTIFICATE-----
+-MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBi
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg
+-RzQwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBiMQswCQYDVQQGEwJV
+-UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu
+-Y29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0GCSqG
+-SIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3y
+-ithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1If
+-xp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDV
+-ySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfISKhmV1efVFiO
+-DCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jHtrHEtWoYOAMQ
+-jdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6MUSaM0C/
+-CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCi
+-EhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADM
+-fRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QY
+-uKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXK
+-chYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4KJpn15GkvmB0t
+-9dmpsh3lGwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB
+-hjAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wDQYJKoZIhvcNAQEMBQAD
+-ggIBALth2X2pbL4XxJEbw6GiAI3jZGgPVs93rnD5/ZpKmbnJeFwMDF/k5hQpVgs2
+-SV1EY+CtnJYYZhsjDT156W1r1lT40jzBQ0CuHVD1UvyQO7uYmWlrx8GnqGikJ9yd
+-+SeuMIW59mdNOj6PWTkiU0TryF0Dyu1Qen1iIQqAyHNm0aAFYF/opbSnr6j3bTWc
+-fFqK1qI4mfN4i/RN0iAL3gTujJtHgXINwBQy7zBZLq7gcfJW5GqXb5JQbZaNaHqa
+-sjYUegbyJLkJEVDXCLG4iXqEI2FCKeWjzaIgQdfRnGTZ6iahixTXTBmyUEFxPT9N
+-cCOGDErcgdLMMpSEDQgJlxxPwO5rIHQw0uA5NBCFIRUBCOhVMt5xSdkoF1BN5r5N
+-0XWs0Mr7QbhDparTwwVETyw2m+L64kW4I1NsBm9nVX9GtUw/bihaeSbSpKhil9Ie
+-4u1Ki7wb/UdKDd9nZn6yW0HQO+T0O/QEY+nvwlQAUaCKKsnOeMzV6ocEGLPOr0mI
+-r/OSmbaz5mEP0oUA51Aa5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1
+-/YldvIViHTLSoCtU7ZpXwdv6EM8Zt4tKG48BtieVU+i2iW1bvGjUI+iLUaJW+fCm
+-gKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+
+------END CERTIFICATE-----
+-
+-# 7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA
+- Validity
+- Not Before: Nov 10 00:00:00 2006 GMT
+- Not After : Nov 10 00:00:00 2031 GMT
+- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:c6:cc:e5:73:e6:fb:d4:bb:e5:2d:2d:32:a6:df:
+- e5:81:3f:c9:cd:25:49:b6:71:2a:c3:d5:94:34:67:
+- a2:0a:1c:b0:5f:69:a6:40:b1:c4:b7:b2:8f:d0:98:
+- a4:a9:41:59:3a:d3:dc:94:d6:3c:db:74:38:a4:4a:
+- cc:4d:25:82:f7:4a:a5:53:12:38:ee:f3:49:6d:71:
+- 91:7e:63:b6:ab:a6:5f:c3:a4:84:f8:4f:62:51:be:
+- f8:c5:ec:db:38:92:e3:06:e5:08:91:0c:c4:28:41:
+- 55:fb:cb:5a:89:15:7e:71:e8:35:bf:4d:72:09:3d:
+- be:3a:38:50:5b:77:31:1b:8d:b3:c7:24:45:9a:a7:
+- ac:6d:00:14:5a:04:b7:ba:13:eb:51:0a:98:41:41:
+- 22:4e:65:61:87:81:41:50:a6:79:5c:89:de:19:4a:
+- 57:d5:2e:e6:5d:1c:53:2c:7e:98:cd:1a:06:16:a4:
+- 68:73:d0:34:04:13:5c:a1:71:d3:5a:7c:55:db:5e:
+- 64:e1:37:87:30:56:04:e5:11:b4:29:80:12:f1:79:
+- 39:88:a2:02:11:7c:27:66:b7:88:b7:78:f2:ca:0a:
+- a8:38:ab:0a:64:c2:bf:66:5d:95:84:c1:a1:25:1e:
+- 87:5d:1a:50:0b:20:12:cc:41:bb:6e:0b:51:38:b8:
+- 4b:cb
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3
+- X509v3 Authority Key Identifier:
+- keyid:B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3
+-
+- Signature Algorithm: sha1WithRSAEncryption
+- 1c:1a:06:97:dc:d7:9c:9f:3c:88:66:06:08:57:21:db:21:47:
+- f8:2a:67:aa:bf:18:32:76:40:10:57:c1:8a:f3:7a:d9:11:65:
+- 8e:35:fa:9e:fc:45:b5:9e:d9:4c:31:4b:b8:91:e8:43:2c:8e:
+- b3:78:ce:db:e3:53:79:71:d6:e5:21:94:01:da:55:87:9a:24:
+- 64:f6:8a:66:cc:de:9c:37:cd:a8:34:b1:69:9b:23:c8:9e:78:
+- 22:2b:70:43:e3:55:47:31:61:19:ef:58:c5:85:2f:4e:30:f6:
+- a0:31:16:23:c8:e7:e2:65:16:33:cb:bf:1a:1b:a0:3d:f8:ca:
+- 5e:8b:31:8b:60:08:89:2d:0c:06:5c:52:b7:c4:f9:0a:98:d1:
+- 15:5f:9f:12:be:7c:36:63:38:bd:44:a4:7f:e4:26:2b:0a:c4:
+- 97:69:0d:e9:8c:e2:c0:10:57:b8:c8:76:12:91:55:f2:48:69:
+- d8:bc:2a:02:5b:0f:44:d4:20:31:db:f4:ba:70:26:5d:90:60:
+- 9e:bc:4b:17:09:2f:b4:cb:1e:43:68:c9:07:27:c1:d2:5c:f7:
+- ea:21:b9:68:12:9c:3c:9c:bf:9e:fc:80:5c:9b:63:cd:ec:47:
+- aa:25:27:67:a0:37:f3:00:82:7d:54:d7:a9:f8:e9:2e:13:a3:
+- 77:e8:1f:4a
+------BEGIN CERTIFICATE-----
+-MIIDxTCCAq2gAwIBAgIQAqxcJmoLQJuPC3nyrkYldzANBgkqhkiG9w0BAQUFADBs
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
+-ZSBFViBSb290IENBMB4XDTA2MTExMDAwMDAwMFoXDTMxMTExMDAwMDAwMFowbDEL
+-MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3
+-LmRpZ2ljZXJ0LmNvbTErMCkGA1UEAxMiRGlnaUNlcnQgSGlnaCBBc3N1cmFuY2Ug
+-RVYgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbM5XPm
+-+9S75S0tMqbf5YE/yc0lSbZxKsPVlDRnogocsF9ppkCxxLeyj9CYpKlBWTrT3JTW
+-PNt0OKRKzE0lgvdKpVMSOO7zSW1xkX5jtqumX8OkhPhPYlG++MXs2ziS4wblCJEM
+-xChBVfvLWokVfnHoNb9Ncgk9vjo4UFt3MRuNs8ckRZqnrG0AFFoEt7oT61EKmEFB
+-Ik5lYYeBQVCmeVyJ3hlKV9Uu5l0cUyx+mM0aBhakaHPQNAQTXKFx01p8VdteZOE3
+-hzBWBOURtCmAEvF5OYiiAhF8J2a3iLd48soKqDirCmTCv2ZdlYTBoSUeh10aUAsg
+-EsxBu24LUTi4S8sCAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQF
+-MAMBAf8wHQYDVR0OBBYEFLE+w2kD+L9HAdSYJhoIAu9jZCvDMB8GA1UdIwQYMBaA
+-FLE+w2kD+L9HAdSYJhoIAu9jZCvDMA0GCSqGSIb3DQEBBQUAA4IBAQAcGgaX3Nec
+-nzyIZgYIVyHbIUf4KmeqvxgydkAQV8GK83rZEWWONfqe/EW1ntlMMUu4kehDLI6z
+-eM7b41N5cdblIZQB2lWHmiRk9opmzN6cN82oNLFpmyPInngiK3BD41VHMWEZ71jF
+-hS9OMPagMRYjyOfiZRYzy78aG6A9+MpeizGLYAiJLQwGXFK3xPkKmNEVX58Svnw2
+-Yzi9RKR/5CYrCsSXaQ3pjOLAEFe4yHYSkVXySGnYvCoCWw9E1CAx2/S6cCZdkGCe
+-vEsXCS+0yx5DaMkHJ8HSXPfqIbloEpw8nL+e/IBcm2PN7EeqJSdnoDfzAIJ9VNep
+-+OkuE6N36B9K
+------END CERTIFICATE-----
+-
+-# 7d05ebb682339f8c9451ee094eebfefa7953a114edb2f44949452fab7d2fc185
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 0b:93:1c:3a:d6:39:67:ea:67:23:bf:c3:af:9a:f4:4b
+- Signature Algorithm: sha256WithRSAEncryption
+- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2
+- Validity
+- Not Before: Aug 1 12:00:00 2013 GMT
+- Not After : Jan 15 12:00:00 2038 GMT
+- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:d9:e7:28:2f:52:3f:36:72:49:88:93:34:f3:f8:
+- 6a:1e:31:54:80:9f:ad:54:41:b5:47:df:96:a8:d4:
+- af:80:2d:b9:0a:cf:75:fd:89:a5:7d:24:fa:e3:22:
+- 0c:2b:bc:95:17:0b:33:bf:19:4d:41:06:90:00:bd:
+- 0c:4d:10:fe:07:b5:e7:1c:6e:22:55:31:65:97:bd:
+- d3:17:d2:1e:62:f3:db:ea:6c:50:8c:3f:84:0c:96:
+- cf:b7:cb:03:e0:ca:6d:a1:14:4c:1b:89:dd:ed:00:
+- b0:52:7c:af:91:6c:b1:38:13:d1:e9:12:08:c0:00:
+- b0:1c:2b:11:da:77:70:36:9b:ae:ce:79:87:dc:82:
+- 70:e6:09:74:70:55:69:af:a3:68:9f:bf:dd:b6:79:
+- b3:f2:9d:70:29:55:f4:ab:ff:95:61:f3:c9:40:6f:
+- 1d:d1:be:93:bb:d3:88:2a:bb:9d:bf:72:5a:56:71:
+- 3b:3f:d4:f3:d1:0a:fe:28:ef:a3:ee:d9:99:af:03:
+- d3:8f:60:b7:f2:92:a1:b1:bd:89:89:1f:30:cd:c3:
+- a6:2e:62:33:ae:16:02:77:44:5a:e7:81:0a:3c:a7:
+- 44:2e:79:b8:3f:04:bc:5c:a0:87:e1:1b:af:51:8e:
+- cd:ec:2c:fa:f8:fe:6d:f0:3a:7c:aa:8b:e4:67:95:
+- 31:8d
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- CE:C3:4A:B9:99:55:F2:B8:DB:60:BF:A9:7E:BD:56:B5:97:36:A7:D6
+- Signature Algorithm: sha256WithRSAEncryption
+- ca:a5:55:8c:e3:c8:41:6e:69:27:a7:75:11:ef:3c:86:36:6f:
+- d2:9d:c6:78:38:1d:69:96:a2:92:69:2e:38:6c:9b:7d:04:d4:
+- 89:a5:b1:31:37:8a:c9:21:cc:ab:6c:cd:8b:1c:9a:d6:bf:48:
+- d2:32:66:c1:8a:c0:f3:2f:3a:ef:c0:e3:d4:91:86:d1:50:e3:
+- 03:db:73:77:6f:4a:39:53:ed:de:26:c7:b5:7d:af:2b:42:d1:
+- 75:62:e3:4a:2b:02:c7:50:4b:e0:69:e2:96:6c:0e:44:66:10:
+- 44:8f:ad:05:eb:f8:79:ac:a6:1b:e8:37:34:9d:53:c9:61:aa:
+- a2:52:af:4a:70:16:86:c2:3a:c8:b1:13:70:36:d8:cf:ee:f4:
+- 0a:34:d5:5b:4c:fd:07:9c:a2:ba:d9:01:72:5c:f3:4d:c1:dd:
+- 0e:b1:1c:0d:c4:63:be:ad:f4:14:fb:89:ec:a2:41:0e:4c:cc:
+- c8:57:40:d0:6e:03:aa:cd:0c:8e:89:99:99:6c:f0:3c:30:af:
+- 38:df:6f:bc:a3:be:29:20:27:ab:74:ff:13:22:78:de:97:52:
+- 55:1e:83:b5:54:20:03:ee:ae:c0:4f:56:de:37:cc:c3:7f:aa:
+- 04:27:bb:d3:77:b8:62:db:17:7c:9c:28:22:13:73:6c:cf:26:
+- f5:8a:29:e7
+------BEGIN CERTIFICATE-----
+-MIIDljCCAn6gAwIBAgIQC5McOtY5Z+pnI7/Dr5r0SzANBgkqhkiG9w0BAQsFADBl
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv
+-b3QgRzIwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQG
+-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl
+-cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIwggEi
+-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5ygvUj82ckmIkzTz+GoeMVSA
+-n61UQbVH35ao1K+ALbkKz3X9iaV9JPrjIgwrvJUXCzO/GU1BBpAAvQxNEP4Htecc
+-biJVMWWXvdMX0h5i89vqbFCMP4QMls+3ywPgym2hFEwbid3tALBSfK+RbLE4E9Hp
+-EgjAALAcKxHad3A2m67OeYfcgnDmCXRwVWmvo2ifv922ebPynXApVfSr/5Vh88lA
+-bx3RvpO704gqu52/clpWcTs/1PPRCv4o76Pu2ZmvA9OPYLfykqGxvYmJHzDNw6Yu
+-YjOuFgJ3RFrngQo8p0Quebg/BLxcoIfhG69Rjs3sLPr4/m3wOnyqi+RnlTGNAgMB
+-AAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQW
+-BBTOw0q5mVXyuNtgv6l+vVa1lzan1jANBgkqhkiG9w0BAQsFAAOCAQEAyqVVjOPI
+-QW5pJ6d1Ee88hjZv0p3GeDgdaZaikmkuOGybfQTUiaWxMTeKySHMq2zNixya1r9I
+-0jJmwYrA8y8678Dj1JGG0VDjA9tzd29KOVPt3ibHtX2vK0LRdWLjSisCx1BL4Gni
+-lmwORGYQRI+tBev4eaymG+g3NJ1TyWGqolKvSnAWhsI6yLETcDbYz+70CjTVW0z9
+-B5yiutkBclzzTcHdDrEcDcRjvq30FPuJ7KJBDkzMyFdA0G4Dqs0MjomZmWzwPDCv
+-ON9vvKO+KSAnq3T/EyJ43pdSVR6DtVQgA+6uwE9W3jfMw3+qBCe703e4YtsXfJwo
+-IhNzbM8m9Yop5w==
+------END CERTIFICATE-----
+-
+-# 7e37cb8b4c47090cab36551ba6f45db840680fba166a952db100717f43053fc2
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 0b:a1:5a:fa:1d:df:a0:b5:49:44:af:cd:24:a0:6c:ec
+- Signature Algorithm: ecdsa-with-SHA384
+- Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3
+- Validity
+- Not Before: Aug 1 12:00:00 2013 GMT
+- Not After : Jan 15 12:00:00 2038 GMT
+- Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3
+- Subject Public Key Info:
+- Public Key Algorithm: id-ecPublicKey
+- Public-Key: (384 bit)
+- pub:
+- 04:19:e7:bc:ac:44:65:ed:cd:b8:3f:58:fb:8d:b1:
+- 57:a9:44:2d:05:15:f2:ef:0b:ff:10:74:9f:b5:62:
+- 52:5f:66:7e:1f:e5:dc:1b:45:79:0b:cc:c6:53:0a:
+- 9d:8d:5d:02:d9:a9:59:de:02:5a:f6:95:2a:0e:8d:
+- 38:4a:8a:49:c6:bc:c6:03:38:07:5f:55:da:7e:09:
+- 6e:e2:7f:5e:d0:45:20:0f:59:76:10:d6:a0:24:f0:
+- 2d:de:36:f2:6c:29:39
+- ASN1 OID: secp384r1
+- NIST CURVE: P-384
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- CB:D0:BD:A9:E1:98:05:51:A1:4D:37:A2:83:79:CE:8D:1D:2A:E4:84
+- Signature Algorithm: ecdsa-with-SHA384
+- 30:64:02:30:25:a4:81:45:02:6b:12:4b:75:74:4f:c8:23:e3:
+- 70:f2:75:72:de:7c:89:f0:cf:91:72:61:9e:5e:10:92:59:56:
+- b9:83:c7:10:e7:38:e9:58:26:36:7d:d5:e4:34:86:39:02:30:
+- 7c:36:53:f0:30:e5:62:63:3a:99:e2:b6:a3:3b:9b:34:fa:1e:
+- da:10:92:71:5e:91:13:a7:dd:a4:6e:92:cc:32:d6:f5:21:66:
+- c7:2f:ea:96:63:6a:65:45:92:95:01:b4
+------BEGIN CERTIFICATE-----
+-MIICRjCCAc2gAwIBAgIQC6Fa+h3foLVJRK/NJKBs7DAKBggqhkjOPQQDAzBlMQsw
+-CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu
+-ZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3Qg
+-RzMwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQGEwJV
+-UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu
+-Y29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwdjAQBgcq
+-hkjOPQIBBgUrgQQAIgNiAAQZ57ysRGXtzbg/WPuNsVepRC0FFfLvC/8QdJ+1YlJf
+-Zn4f5dwbRXkLzMZTCp2NXQLZqVneAlr2lSoOjThKiknGvMYDOAdfVdp+CW7if17Q
+-RSAPWXYQ1qAk8C3eNvJsKTmjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/
+-BAQDAgGGMB0GA1UdDgQWBBTL0L2p4ZgFUaFNN6KDec6NHSrkhDAKBggqhkjOPQQD
+-AwNnADBkAjAlpIFFAmsSS3V0T8gj43DydXLefInwz5FyYZ5eEJJZVrmDxxDnOOlY
+-JjZ91eQ0hjkCMHw2U/Aw5WJjOpnitqM7mzT6HtoQknFekROn3aRukswy1vUhZscv
+-6pZjamVFkpUBtA==
+------END CERTIFICATE-----
+-
+ # cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
+ Certificate:
+ Data:
+@@ -2833,61 +1947,6 @@ RQuQ+q7hv53yrlc8pa6yVvSLZUDp/TGBLPQ5Cdjua6e0ph0VpZj3AYHYhX3zUVxx
+ iN66zB+Afko=
+ -----END CERTIFICATE-----
+
+-# 86a1ecba089c4a8d3bbe2734c612ba341d813e043cf9e8a862cd5c57a36bbe6b
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 3c:f6:07:a9:68:70:0e:da:8b:84
+- Signature Algorithm: ecdsa-with-SHA384
+- Issuer: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign ECC Root CA - G3
+- Validity
+- Not Before: Feb 18 18:30:00 2018 GMT
+- Not After : Feb 18 18:30:00 2043 GMT
+- Subject: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign ECC Root CA - G3
+- Subject Public Key Info:
+- Public Key Algorithm: id-ecPublicKey
+- Public-Key: (384 bit)
+- pub:
+- 04:23:a5:0c:b8:2d:12:f5:28:f3:b1:b2:dd:e2:02:
+- 12:80:9e:39:5f:49:4d:9f:c9:25:34:59:74:ec:bb:
+- 06:1c:e7:c0:72:af:e8:ae:2f:e1:41:54:87:14:a8:
+- 4a:b2:e8:7c:82:e6:5b:6a:b5:dc:b3:75:ce:8b:06:
+- d0:86:23:bf:46:d5:8e:0f:3f:04:f4:d7:1c:92:7e:
+- f6:a5:63:c2:f5:5f:8e:2e:4f:a1:18:19:02:2b:32:
+- 0a:82:64:7d:16:93:d1
+- ASN1 OID: secp384r1
+- NIST CURVE: P-384
+- X509v3 extensions:
+- X509v3 Subject Key Identifier:
+- 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- Signature Algorithm: ecdsa-with-SHA384
+- 30:66:02:31:00:be:f3:61:cf:02:10:1d:64:95:07:b8:18:6e:
+- 88:85:05:2f:83:08:17:90:ca:1f:8a:4c:e8:0d:1b:7a:b1:ad:
+- d5:81:09:47:ef:3b:ac:08:04:7c:5c:99:b1:ed:47:07:d2:02:
+- 31:00:9d:ba:55:fc:a9:4a:e8:ed:ed:e6:76:01:42:7b:c8:f8:
+- 60:d9:8d:51:8b:55:3b:fb:8c:7b:eb:65:09:c3:f8:96:cd:47:
+- a8:82:f2:16:55:77:24:7e:12:10:95:04:2c:a3
+------BEGIN CERTIFICATE-----
+-MIICTjCCAdOgAwIBAgIKPPYHqWhwDtqLhDAKBggqhkjOPQQDAzBrMQswCQYDVQQG
+-EwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNo
+-bm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g
+-RzMwHhcNMTgwMjE4MTgzMDAwWhcNNDMwMjE4MTgzMDAwWjBrMQswCQYDVQQGEwJJ
+-TjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9s
+-b2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0gRzMw
+-djAQBgcqhkjOPQIBBgUrgQQAIgNiAAQjpQy4LRL1KPOxst3iAhKAnjlfSU2fySU0
+-WXTsuwYc58Byr+iuL+FBVIcUqEqy6HyC5ltqtdyzdc6LBtCGI79G1Y4PPwT01xyS
+-fvalY8L1X44uT6EYGQIrMgqCZH0Wk9GjQjBAMB0GA1UdDgQWBBR8XQKEE9TMipuB
+-zhccLikenEhjQjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggq
+-hkjOPQQDAwNpADBmAjEAvvNhzwIQHWSVB7gYboiFBS+DCBeQyh+KTOgNG3qxrdWB
+-CUfvO6wIBHxcmbHtRwfSAjEAnbpV/KlK6O3t5nYBQnvI+GDZjVGLVTv7jHvrZQnD
+-+JbNR6iC8hZVdyR+EhCVBCyj
+------END CERTIFICATE-----
+-
+ # bfff8fd04433487d6a8aa60c1a29767a9fc2bbb05e420f713a13b992891d3893
+ Certificate:
+ Data:
+@@ -3430,59 +2489,6 @@ LPAvTK33sefOT6jEm0pUBsV/fdUID+Ic/n4XuKxe9tQWskMJDE32p2u0mYRlynqI
+ 4uJEvlz36hz1
+ -----END CERTIFICATE-----
+
+-# 34d8a73ee208d9bcdb0d956520934b4e40e69482596e8b6f73c8426b010a6f48
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 02:03:e5:b8:82:eb:20:f8:25:27:6d:3d:66
+- Signature Algorithm: ecdsa-with-SHA384
+- Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R3
+- Validity
+- Not Before: Jun 22 00:00:00 2016 GMT
+- Not After : Jun 22 00:00:00 2036 GMT
+- Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R3
+- Subject Public Key Info:
+- Public Key Algorithm: id-ecPublicKey
+- Public-Key: (384 bit)
+- pub:
+- 04:1f:4f:33:87:33:29:8a:a1:84:de:cb:c7:21:58:
+- 41:89:ea:56:9d:2b:4b:85:c6:1d:4c:27:bc:7f:26:
+- 51:72:6f:e2:9f:d6:a3:ca:cc:45:14:46:8b:ad:ef:
+- 7e:86:8c:ec:b1:7e:2f:ff:a9:71:9d:18:84:45:04:
+- 41:55:6e:2b:ea:26:7f:bb:90:01:e3:4b:19:ba:e4:
+- 54:96:45:09:b1:d5:6c:91:44:ad:84:13:8e:9a:8c:
+- 0d:80:0c:32:f6:e0:27
+- ASN1 OID: secp384r1
+- NIST CURVE: P-384
+- X509v3 extensions:
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- C1:F1:26:BA:A0:2D:AE:85:81:CF:D3:F1:2A:12:BD:B8:0A:67:FD:BC
+- Signature Algorithm: ecdsa-with-SHA384
+- 30:66:02:31:00:f6:e1:20:95:14:7b:54:a3:90:16:11:bf:84:
+- c8:ea:6f:6b:17:9e:1e:46:98:20:9b:9f:d3:0d:d9:ac:d3:2f:
+- cd:7c:f8:5b:2e:55:bb:bf:dd:92:f7:a4:0c:dc:31:e1:a2:02:
+- 31:00:fc:97:66:66:e5:43:16:13:83:dd:c7:df:2f:be:14:38:
+- ed:01:ce:b1:17:1a:11:75:e9:bd:03:8f:26:7e:84:e5:c9:60:
+- a6:95:d7:54:59:b7:e7:11:2c:89:d4:b9:ee:17
+------BEGIN CERTIFICATE-----
+-MIICCTCCAY6gAwIBAgINAgPluILrIPglJ209ZjAKBggqhkjOPQQDAzBHMQswCQYD
+-VQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIG
+-A1UEAxMLR1RTIFJvb3QgUjMwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAw
+-WjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2Vz
+-IExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwdjAQBgcqhkjOPQIBBgUrgQQAIgNi
+-AAQfTzOHMymKoYTey8chWEGJ6ladK0uFxh1MJ7x/JlFyb+Kf1qPKzEUURout736G
+-jOyxfi//qXGdGIRFBEFVbivqJn+7kAHjSxm65FSWRQmx1WyRRK2EE46ajA2ADDL2
+-4CejQjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW
+-BBTB8Sa6oC2uhYHP0/EqEr24Cmf9vDAKBggqhkjOPQQDAwNpADBmAjEA9uEglRR7
+-VKOQFhG/hMjqb2sXnh5GmCCbn9MN2azTL818+FsuVbu/3ZL3pAzcMeGiAjEA/Jdm
+-ZuVDFhOD3cffL74UOO0BzrEXGhF16b0DjyZ+hOXJYKaV11RZt+cRLInUue4X
+------END CERTIFICATE-----
+-
+ # d947432abde7b7fa90fc2e6b59101b1280e0e1c7e4e40fa3c6887fff57a7f4cf
+ Certificate:
+ Data:
+@@ -3706,127 +2712,6 @@ HQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUVLB7rUW44kB/
+ bmF0774BxL4YSFlhgjICICadVGNA3jdgUM/I2O2dgq43mLyjj0xMqTQrbO/7lZsm
+ -----END CERTIFICATE-----
+
+-# 8d25cd97229dbf70356bda4eb3cc734031e24cf00fafcfd32dc76eb5841c7ea8
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 02:03:e5:ae:c5:8d:04:25:1a:ab:11:25:aa
+- Signature Algorithm: sha384WithRSAEncryption
+- Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R2
+- Validity
+- Not Before: Jun 22 00:00:00 2016 GMT
+- Not After : Jun 22 00:00:00 2036 GMT
+- Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R2
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (4096 bit)
+- Modulus:
+- 00:ce:de:fd:a6:fb:ec:ec:14:34:3c:07:06:5a:6c:
+- 59:f7:19:35:dd:f7:c1:9d:55:aa:d3:cd:3b:a4:93:
+- 72:ef:0a:fa:6d:9d:f6:f0:85:80:5b:a1:48:52:9f:
+- 39:c5:b7:ee:28:ac:ef:cb:76:68:14:b9:df:ad:01:
+- 6c:99:1f:c4:22:1d:9f:fe:72:77:e0:2c:5b:af:e4:
+- 04:bf:4f:72:a0:1a:34:98:e8:39:68:ec:95:25:7b:
+- 76:a1:e6:69:b9:85:19:bd:89:8c:fe:ad:ed:36:ea:
+- 73:bc:ff:83:e2:cb:7d:c1:d2:ce:4a:b3:8d:05:9e:
+- 8b:49:93:df:c1:5b:d0:6e:5e:f0:2e:30:2e:82:fc:
+- fa:bc:b4:17:0a:48:e5:88:9b:c5:9b:6b:de:b0:ca:
+- b4:03:f0:da:f4:90:b8:65:64:f7:5c:4c:ad:e8:7e:
+- 66:5e:99:d7:b8:c2:3e:c8:d0:13:9d:ad:ee:e4:45:
+- 7b:89:55:f7:8a:1f:62:52:84:12:b3:c2:40:97:e3:
+- 8a:1f:47:91:a6:74:5a:d2:f8:b1:63:28:10:b8:b3:
+- 09:b8:56:77:40:a2:26:98:79:c6:fe:df:25:ee:3e:
+- e5:a0:7f:d4:61:0f:51:4b:3c:3f:8c:da:e1:70:74:
+- d8:c2:68:a1:f9:c1:0c:e9:a1:e2:7f:bb:55:3c:76:
+- 06:ee:6a:4e:cc:92:88:30:4d:9a:bd:4f:0b:48:9a:
+- 84:b5:98:a3:d5:fb:73:c1:57:61:dd:28:56:75:13:
+- ae:87:8e:e7:0c:51:09:10:75:88:4c:bc:8d:f9:7b:
+- 3c:d4:22:48:1f:2a:dc:eb:6b:bb:44:b1:cb:33:71:
+- 32:46:af:ad:4a:f1:8c:e8:74:3a:ac:e7:1a:22:73:
+- 80:d2:30:f7:25:42:c7:22:3b:3b:12:ad:96:2e:c6:
+- c3:76:07:aa:20:b7:35:49:57:e9:92:49:e8:76:16:
+- 72:31:67:2b:96:7e:8a:a3:c7:94:56:22:bf:6a:4b:
+- 7e:01:21:b2:23:32:df:e4:9a:44:6d:59:5b:5d:f5:
+- 00:a0:1c:9b:c6:78:97:8d:90:ff:9b:c8:aa:b4:af:
+- 11:51:39:5e:d9:fb:67:ad:d5:5b:11:9d:32:9a:1b:
+- bd:d5:ba:5b:a5:c9:cb:25:69:53:55:27:5c:e0:ca:
+- 36:cb:88:61:fb:1e:b7:d0:cb:ee:16:fb:d3:a6:4c:
+- de:92:a5:d4:e2:df:f5:06:54:de:2e:9d:4b:b4:93:
+- 30:aa:81:ce:dd:1a:dc:51:73:0d:4f:70:e9:e5:b6:
+- 16:21:19:79:b2:e6:89:0b:75:64:ca:d5:ab:bc:09:
+- c1:18:a1:ff:d4:54:a1:85:3c:fd:14:24:03:b2:87:
+- d3:a4:b7
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Key Usage: critical
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- BB:FF:CA:8E:23:9F:4F:99:CA:DB:E2:68:A6:A5:15:27:17:1E:D9:0E
+- Signature Algorithm: sha384WithRSAEncryption
+- 1f:ca:ce:dd:c7:be:a1:9f:d9:27:4c:0b:dc:17:98:11:6a:88:
+- de:3d:e6:71:56:72:b2:9e:1a:4e:9c:d5:2b:98:24:5d:9b:6b:
+- 7b:b0:33:82:09:bd:df:25:46:ea:98:9e:b6:1b:fe:83:3c:d2:
+- 62:61:c1:04:ed:ce:e0:c5:c9:c8:13:13:55:e7:a8:63:ad:8c:
+- 7b:01:fe:77:30:e1:ce:68:9b:05:f8:12:ee:79:31:a0:41:45:
+- 35:28:0a:71:a4:24:4f:8c:dc:3c:82:07:5f:66:dc:7d:10:fe:
+- 0c:61:b3:05:95:ee:e1:ae:81:0f:a8:f8:c7:8f:4d:a8:23:02:
+- 26:6b:1d:83:52:55:ce:b5:2f:00:ca:80:40:e0:e1:74:ac:60:
+- f5:87:80:9d:ae:36:64:91:5d:b0:68:18:ea:8a:61:c9:77:a8:
+- 97:c4:c9:c7:a5:fc:55:4b:f3:f0:7f:b9:65:3d:27:68:d0:cc:
+- 6b:fa:53:9d:e1:91:1a:c9:5d:1a:96:6d:32:87:ed:03:20:c8:
+- 02:ce:5a:be:d9:ea:fd:b2:4d:c4:2f:1b:df:5f:7a:f5:f8:8b:
+- c6:ee:31:3a:25:51:55:67:8d:64:32:7b:e9:9e:c3:82:ba:2a:
+- 2d:e9:1e:b4:e0:48:06:a2:fc:67:af:1f:22:02:73:fb:20:0a:
+- af:9d:54:4b:a1:cd:ff:60:47:b0:3f:5d:ef:1b:56:bd:97:21:
+- 96:2d:0a:d1:5e:9d:38:02:47:6c:b9:f4:f6:23:25:b8:a0:6a:
+- 9a:2b:77:08:fa:c4:b1:28:90:26:58:08:3c:e2:7e:aa:d7:3d:
+- 6f:ba:31:88:0a:05:eb:27:b5:a1:49:ee:a0:45:54:7b:e6:27:
+- 65:99:20:21:a8:a3:bc:fb:18:96:bb:52:6f:0c:ed:83:51:4c:
+- e9:59:e2:20:60:c5:c2:65:92:82:8c:f3:10:1f:0e:8a:97:be:
+- 77:82:6d:3f:8f:1d:5d:bc:49:27:bd:cc:4f:0f:e1:ce:76:86:
+- 04:23:c5:c0:8c:12:5b:fd:db:84:a0:24:f1:48:ff:64:7c:d0:
+- be:5c:16:d1:ef:99:ad:c0:1f:fb:cb:ae:bc:38:22:06:26:64:
+- da:da:97:0e:3f:28:15:44:a8:4f:00:ca:f0:9a:cc:cf:74:6a:
+- b4:3e:3c:eb:95:ec:b5:d3:5a:d8:81:99:e9:43:18:37:eb:b3:
+- bb:d1:58:62:41:f3:66:d2:8f:aa:78:95:54:20:c3:5a:2e:74:
+- 2b:d5:d1:be:18:69:c0:ac:d5:a4:cf:39:ba:51:84:03:65:e9:
+- 62:c0:62:fe:d8:4d:55:96:e2:d0:11:fa:48:34:11:ec:9e:ed:
+- 05:1d:e4:c8:d6:1d:86:cb
+------BEGIN CERTIFICATE-----
+-MIIFVzCCAz+gAwIBAgINAgPlrsWNBCUaqxElqjANBgkqhkiG9w0BAQwFADBHMQsw
+-CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU
+-MBIGA1UEAxMLR1RTIFJvb3QgUjIwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAw
+-MDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp
+-Y2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjIwggIiMA0GCSqGSIb3DQEBAQUA
+-A4ICDwAwggIKAoICAQDO3v2m++zsFDQ8BwZabFn3GTXd98GdVarTzTukk3LvCvpt
+-nfbwhYBboUhSnznFt+4orO/LdmgUud+tAWyZH8QiHZ/+cnfgLFuv5AS/T3KgGjSY
+-6Dlo7JUle3ah5mm5hRm9iYz+re026nO8/4Piy33B0s5Ks40FnotJk9/BW9BuXvAu
+-MC6C/Pq8tBcKSOWIm8Wba96wyrQD8Nr0kLhlZPdcTK3ofmZemde4wj7I0BOdre7k
+-RXuJVfeKH2JShBKzwkCX44ofR5GmdFrS+LFjKBC4swm4VndAoiaYecb+3yXuPuWg
+-f9RhD1FLPD+M2uFwdNjCaKH5wQzpoeJ/u1U8dgbuak7MkogwTZq9TwtImoS1mKPV
+-+3PBV2HdKFZ1E66HjucMUQkQdYhMvI35ezzUIkgfKtzra7tEscszcTJGr61K8Yzo
+-dDqs5xoic4DSMPclQsciOzsSrZYuxsN2B6ogtzVJV+mSSeh2FnIxZyuWfoqjx5RW
+-Ir9qS34BIbIjMt/kmkRtWVtd9QCgHJvGeJeNkP+byKq0rxFROV7Z+2et1VsRnTKa
+-G73VululycslaVNVJ1zgyjbLiGH7HrfQy+4W+9OmTN6SpdTi3/UGVN4unUu0kzCq
+-gc7dGtxRcw1PcOnlthYhGXmy5okLdWTK1au8CcEYof/UVKGFPP0UJAOyh9OktwID
+-AQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4E
+-FgQUu//KjiOfT5nK2+JopqUVJxce2Q4wDQYJKoZIhvcNAQEMBQADggIBAB/Kzt3H
+-vqGf2SdMC9wXmBFqiN495nFWcrKeGk6c1SuYJF2ba3uwM4IJvd8lRuqYnrYb/oM8
+-0mJhwQTtzuDFycgTE1XnqGOtjHsB/ncw4c5omwX4Eu55MaBBRTUoCnGkJE+M3DyC
+-B19m3H0Q/gxhswWV7uGugQ+o+MePTagjAiZrHYNSVc61LwDKgEDg4XSsYPWHgJ2u
+-NmSRXbBoGOqKYcl3qJfEycel/FVL8/B/uWU9J2jQzGv6U53hkRrJXRqWbTKH7QMg
+-yALOWr7Z6v2yTcQvG99fevX4i8buMTolUVVnjWQye+mew4K6Ki3pHrTgSAai/Gev
+-HyICc/sgCq+dVEuhzf9gR7A/Xe8bVr2XIZYtCtFenTgCR2y59PYjJbigapordwj6
+-xLEokCZYCDzifqrXPW+6MYgKBesntaFJ7qBFVHvmJ2WZICGoo7z7GJa7Um8M7YNR
+-TOlZ4iBgxcJlkoKM8xAfDoqXvneCbT+PHV28SSe9zE8P4c52hgQjxcCMElv924Sg
+-JPFI/2R80L5cFtHvma3AH/vLrrw4IgYmZNralw4/KBVEqE8AyvCazM90arQ+POuV
+-7LXTWtiBmelDGDfrs7vRWGJB82bSj6p4lVQgw1oudCvV0b4YacCs1aTPObpRhANl
+-6WLAYv7YTVWW4tAR+kg0Eeye7QUd5MjWHYbL
+------END CERTIFICATE-----
+-
+ # 5a2fc03f0c83b090bbfa40604b0988446c7636183df9846e17101a447fb8efd6
+ Certificate:
+ Data:
+@@ -5089,88 +3974,6 @@ AHFiRSdLOkKEW39lt2c0Ui2cFmuqqNh7o0JMcccMyj6D5KbvtwEwXlGjefVwaaZB
+ RA+GsCyRxj3qrg+E
+ -----END CERTIFICATE-----
+
+-# 6c61dac3a2def031506be036d2a6fe401994fbd13df9c8d466599274c446ec98
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number: 80544274841616 (0x49412ce40010)
+- Signature Algorithm: sha256WithRSAEncryption
+- Issuer: C = HU, L = Budapest, O = NetLock Kft., OU = Tan\C3\BAs\C3\ADtv\C3\A1nykiad\C3\B3k (Certification Services), CN = NetLock Arany (Class Gold) F\C5\91tan\C3\BAs\C3\ADtv\C3\A1ny
+- Validity
+- Not Before: Dec 11 15:08:21 2008 GMT
+- Not After : Dec 6 15:08:21 2028 GMT
+- Subject: C = HU, L = Budapest, O = NetLock Kft., OU = Tan\C3\BAs\C3\ADtv\C3\A1nykiad\C3\B3k (Certification Services), CN = NetLock Arany (Class Gold) F\C5\91tan\C3\BAs\C3\ADtv\C3\A1ny
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:c4:24:5e:73:be:4b:6d:14:c3:a1:f4:e3:97:90:
+- 6e:d2:30:45:1e:3c:ee:67:d9:64:e0:1a:8a:7f:ca:
+- 30:ca:83:e3:20:c1:e3:f4:3a:d3:94:5f:1a:7c:5b:
+- 6d:bf:30:4f:84:27:f6:9f:1f:49:bc:c6:99:0a:90:
+- f2:0f:f5:7f:43:84:37:63:51:8b:7a:a5:70:fc:7a:
+- 58:cd:8e:9b:ed:c3:46:6c:84:70:5d:da:f3:01:90:
+- 23:fc:4e:30:a9:7e:e1:27:63:e7:ed:64:3c:a0:b8:
+- c9:33:63:fe:16:90:ff:b0:b8:fd:d7:a8:c0:c0:94:
+- 43:0b:b6:d5:59:a6:9e:56:d0:24:1f:70:79:af:db:
+- 39:54:0d:65:75:d9:15:41:94:01:af:5e:ec:f6:8d:
+- f1:ff:ad:64:fe:20:9a:d7:5c:eb:fe:a6:1f:08:64:
+- a3:8b:76:55:ad:1e:3b:28:60:2e:87:25:e8:aa:af:
+- 1f:c6:64:46:20:b7:70:7f:3c:de:48:db:96:53:b7:
+- 39:77:e4:1a:e2:c7:16:84:76:97:5b:2f:bb:19:15:
+- 85:f8:69:85:f5:99:a7:a9:f2:34:a7:a9:b6:a6:03:
+- fc:6f:86:3d:54:7c:76:04:9b:6b:f9:40:5d:00:34:
+- c7:2e:99:75:9d:e5:88:03:aa:4d:f8:03:d2:42:76:
+- c0:1b
+- Exponent: 43147 (0xa88b)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE, pathlen:4
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- CC:FA:67:93:F0:B6:B8:D0:A5:C0:1E:F3:53:FD:8C:53:DF:83:D7:96
+- Signature Algorithm: sha256WithRSAEncryption
+- ab:7f:ee:1c:16:a9:9c:3c:51:00:a0:c0:11:08:05:a7:99:e6:
+- 6f:01:88:54:61:6e:f1:b9:18:ad:4a:ad:fe:81:40:23:94:2f:
+- fb:75:7c:2f:28:4b:62:24:81:82:0b:f5:61:f1:1c:6e:b8:61:
+- 38:eb:81:fa:62:a1:3b:5a:62:d3:94:65:c4:e1:e6:6d:82:f8:
+- 2f:25:70:b2:21:26:c1:72:51:1f:8c:2c:c3:84:90:c3:5a:8f:
+- ba:cf:f4:a7:65:a5:eb:98:d1:fb:05:b2:46:75:15:23:6a:6f:
+- 85:63:30:80:f0:d5:9e:1f:29:1c:c2:6c:b0:50:59:5d:90:5b:
+- 3b:a8:0d:30:cf:bf:7d:7f:ce:f1:9d:83:bd:c9:46:6e:20:a6:
+- f9:61:51:ba:21:2f:7b:be:a5:15:63:a1:d4:95:87:f1:9e:b9:
+- f3:89:f3:3d:85:b8:b8:db:be:b5:b9:29:f9:da:37:05:00:49:
+- 94:03:84:44:e7:bf:43:31:cf:75:8b:25:d1:f4:a6:64:f5:92:
+- f6:ab:05:eb:3d:e9:a5:0b:36:62:da:cc:06:5f:36:8b:b6:5e:
+- 31:b8:2a:fb:5e:f6:71:df:44:26:9e:c4:e6:0d:91:b4:2e:75:
+- 95:80:51:6a:4b:30:a6:b0:62:a1:93:f1:9b:d8:ce:c4:63:75:
+- 3f:59:47:b1
+------BEGIN CERTIFICATE-----
+-MIIEFTCCAv2gAwIBAgIGSUEs5AAQMA0GCSqGSIb3DQEBCwUAMIGnMQswCQYDVQQG
+-EwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFTATBgNVBAoMDE5ldExvY2sgS2Z0LjE3
+-MDUGA1UECwwuVGFuw7pzw610dsOhbnlraWFkw7NrIChDZXJ0aWZpY2F0aW9uIFNl
+-cnZpY2VzKTE1MDMGA1UEAwwsTmV0TG9jayBBcmFueSAoQ2xhc3MgR29sZCkgRsWR
+-dGFuw7pzw610dsOhbnkwHhcNMDgxMjExMTUwODIxWhcNMjgxMjA2MTUwODIxWjCB
+-pzELMAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRUwEwYDVQQKDAxOZXRM
+-b2NrIEtmdC4xNzA1BgNVBAsMLlRhbsO6c8OtdHbDoW55a2lhZMOzayAoQ2VydGlm
+-aWNhdGlvbiBTZXJ2aWNlcykxNTAzBgNVBAMMLE5ldExvY2sgQXJhbnkgKENsYXNz
+-IEdvbGQpIEbFkXRhbsO6c8OtdHbDoW55MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
+-MIIBCgKCAQEAxCRec75LbRTDofTjl5Bu0jBFHjzuZ9lk4BqKf8owyoPjIMHj9DrT
+-lF8afFttvzBPhCf2nx9JvMaZCpDyD/V/Q4Q3Y1GLeqVw/HpYzY6b7cNGbIRwXdrz
+-AZAj/E4wqX7hJ2Pn7WQ8oLjJM2P+FpD/sLj916jAwJRDC7bVWaaeVtAkH3B5r9s5
+-VA1lddkVQZQBr17s9o3x/61k/iCa11zr/qYfCGSji3ZVrR47KGAuhyXoqq8fxmRG
+-ILdwfzzeSNuWU7c5d+Qa4scWhHaXWy+7GRWF+GmF9ZmnqfI0p6m2pgP8b4Y9VHx2
+-BJtr+UBdADTHLpl1neWIA6pN+APSQnbAGwIDAKiLo0UwQzASBgNVHRMBAf8ECDAG
+-AQH/AgEEMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUzPpnk/C2uNClwB7zU/2M
+-U9+D15YwDQYJKoZIhvcNAQELBQADggEBAKt/7hwWqZw8UQCgwBEIBaeZ5m8BiFRh
+-bvG5GK1Krf6BQCOUL/t1fC8oS2IkgYIL9WHxHG64YTjrgfpioTtaYtOUZcTh5m2C
+-+C8lcLIhJsFyUR+MLMOEkMNaj7rP9KdlpeuY0fsFskZ1FSNqb4VjMIDw1Z4fKRzC
+-bLBQWV2QWzuoDTDPv31/zvGdg73JRm4gpvlhUbohL3u+pRVjodSVh/GeufOJ8z2F
+-uLjbvrW5KfnaNwUASZQDhETnv0Mxz3WLJdH0pmT1kvarBes96aULNmLazAZfNou2
+-XjG4Kvte9nHfRCaexOYNkbQudZWAUWpLMKawYqGT8ZvYzsRjdT9ZR7E=
+------END CERTIFICATE-----
+-
+ # 6b9c08e86eb0f767cfad65cd98b62149e5494a67f5845e7bd1ed019f27b86bd6
+ Certificate:
+ Data:
+@@ -5311,133 +4114,6 @@ rYy0UGYwEAYJKwYBBAGCNxUBBAMCAQAwCgYIKoZIzj0EAwMDaAAwZQIwJsdpW9zV
+ Mgj/mkkCtojeFK9dbJlxjRo/i9fgojaGHAeCOnZT/cKi7e97sIBPWA9LUzm9
+ -----END CERTIFICATE-----
+
+-# 85a0dd7dd720adb7ff05f83d542b209dc7ff4528f7d677b18389fea5e5c49e86
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number: 1289 (0x509)
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2
+- Validity
+- Not Before: Nov 24 18:27:00 2006 GMT
+- Not After : Nov 24 18:23:33 2031 GMT
+- Subject: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (4096 bit)
+- Modulus:
+- 00:9a:18:ca:4b:94:0d:00:2d:af:03:29:8a:f0:0f:
+- 81:c8:ae:4c:19:85:1d:08:9f:ab:29:44:85:f3:2f:
+- 81:ad:32:1e:90:46:bf:a3:86:26:1a:1e:fe:7e:1c:
+- 18:3a:5c:9c:60:17:2a:3a:74:83:33:30:7d:61:54:
+- 11:cb:ed:ab:e0:e6:d2:a2:7e:f5:6b:6f:18:b7:0a:
+- 0b:2d:fd:e9:3e:ef:0a:c6:b3:10:e9:dc:c2:46:17:
+- f8:5d:fd:a4:da:ff:9e:49:5a:9c:e6:33:e6:24:96:
+- f7:3f:ba:5b:2b:1c:7a:35:c2:d6:67:fe:ab:66:50:
+- 8b:6d:28:60:2b:ef:d7:60:c3:c7:93:bc:8d:36:91:
+- f3:7f:f8:db:11:13:c4:9c:77:76:c1:ae:b7:02:6a:
+- 81:7a:a9:45:83:e2:05:e6:b9:56:c1:94:37:8f:48:
+- 71:63:22:ec:17:65:07:95:8a:4b:df:8f:c6:5a:0a:
+- e5:b0:e3:5f:5e:6b:11:ab:0c:f9:85:eb:44:e9:f8:
+- 04:73:f2:e9:fe:5c:98:8c:f5:73:af:6b:b4:7e:cd:
+- d4:5c:02:2b:4c:39:e1:b2:95:95:2d:42:87:d7:d5:
+- b3:90:43:b7:6c:13:f1:de:dd:f6:c4:f8:89:3f:d1:
+- 75:f5:92:c3:91:d5:8a:88:d0:90:ec:dc:6d:de:89:
+- c2:65:71:96:8b:0d:03:fd:9c:bf:5b:16:ac:92:db:
+- ea:fe:79:7c:ad:eb:af:f7:16:cb:db:cd:25:2b:e5:
+- 1f:fb:9a:9f:e2:51:cc:3a:53:0c:48:e6:0e:bd:c9:
+- b4:76:06:52:e6:11:13:85:72:63:03:04:e0:04:36:
+- 2b:20:19:02:e8:74:a7:1f:b6:c9:56:66:f0:75:25:
+- dc:67:c1:0e:61:60:88:b3:3e:d1:a8:fc:a3:da:1d:
+- b0:d1:b1:23:54:df:44:76:6d:ed:41:d8:c1:b2:22:
+- b6:53:1c:df:35:1d:dc:a1:77:2a:31:e4:2d:f5:e5:
+- e5:db:c8:e0:ff:e5:80:d7:0b:63:a0:ff:33:a1:0f:
+- ba:2c:15:15:ea:97:b3:d2:a2:b5:be:f2:8c:96:1e:
+- 1a:8f:1d:6c:a4:61:37:b9:86:73:33:d7:97:96:9e:
+- 23:7d:82:a4:4c:81:e2:a1:d1:ba:67:5f:95:07:a3:
+- 27:11:ee:16:10:7b:bc:45:4a:4c:b2:04:d2:ab:ef:
+- d5:fd:0c:51:ce:50:6a:08:31:f9:91:da:0c:8f:64:
+- 5c:03:c3:3a:8b:20:3f:6e:8d:67:3d:3a:d6:fe:7d:
+- 5b:88:c9:5e:fb:cc:61:dc:8b:33:77:d3:44:32:35:
+- 09:62:04:92:16:10:d8:9e:27:47:fb:3b:21:e3:f8:
+- eb:1d:5b
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage:
+- Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- 1A:84:62:BC:48:4C:33:25:04:D4:EE:D0:F6:03:C4:19:46:D1:94:6B
+- X509v3 Authority Key Identifier:
+- keyid:1A:84:62:BC:48:4C:33:25:04:D4:EE:D0:F6:03:C4:19:46:D1:94:6B
+- DirName:/C=BM/O=QuoVadis Limited/CN=QuoVadis Root CA 2
+- serial:05:09
+-
+- Signature Algorithm: sha1WithRSAEncryption
+- 3e:0a:16:4d:9f:06:5b:a8:ae:71:5d:2f:05:2f:67:e6:13:45:
+- 83:c4:36:f6:f3:c0:26:0c:0d:b5:47:64:5d:f8:b4:72:c9:46:
+- a5:03:18:27:55:89:78:7d:76:ea:96:34:80:17:20:dc:e7:83:
+- f8:8d:fc:07:b8:da:5f:4d:2e:67:b2:84:fd:d9:44:fc:77:50:
+- 81:e6:7c:b4:c9:0d:0b:72:53:f8:76:07:07:41:47:96:0c:fb:
+- e0:82:26:93:55:8c:fe:22:1f:60:65:7c:5f:e7:26:b3:f7:32:
+- 90:98:50:d4:37:71:55:f6:92:21:78:f7:95:79:fa:f8:2d:26:
+- 87:66:56:30:77:a6:37:78:33:52:10:58:ae:3f:61:8e:f2:6a:
+- b1:ef:18:7e:4a:59:63:ca:8d:a2:56:d5:a7:2f:bc:56:1f:cf:
+- 39:c1:e2:fb:0a:a8:15:2c:7d:4d:7a:63:c6:6c:97:44:3c:d2:
+- 6f:c3:4a:17:0a:f8:90:d2:57:a2:19:51:a5:2d:97:41:da:07:
+- 4f:a9:50:da:90:8d:94:46:e1:3e:f0:94:fd:10:00:38:f5:3b:
+- e8:40:e1:b4:6e:56:1a:20:cc:6f:58:8d:ed:2e:45:8f:d6:e9:
+- 93:3f:e7:b1:2c:df:3a:d6:22:8c:dc:84:bb:22:6f:d0:f8:e4:
+- c6:39:e9:04:88:3c:c3:ba:eb:55:7a:6d:80:99:24:f5:6c:01:
+- fb:f8:97:b0:94:5b:eb:fd:d2:6f:f1:77:68:0d:35:64:23:ac:
+- b8:55:a1:03:d1:4d:42:19:dc:f8:75:59:56:a3:f9:a8:49:79:
+- f8:af:0e:b9:11:a0:7c:b7:6a:ed:34:d0:b6:26:62:38:1a:87:
+- 0c:f8:e8:fd:2e:d3:90:7f:07:91:2a:1d:d6:7e:5c:85:83:99:
+- b0:38:08:3f:e9:5e:f9:35:07:e4:c9:62:6e:57:7f:a7:50:95:
+- f7:ba:c8:9b:e6:8e:a2:01:c5:d6:66:bf:79:61:f3:3c:1c:e1:
+- b9:82:5c:5d:a0:c3:e9:d8:48:bd:19:a2:11:14:19:6e:b2:86:
+- 1b:68:3e:48:37:1a:88:b7:5d:96:5e:9c:c7:ef:27:62:08:e2:
+- 91:19:5c:d2:f1:21:dd:ba:17:42:82:97:71:81:53:31:a9:9f:
+- f6:7d:62:bf:72:e1:a3:93:1d:cc:8a:26:5a:09:38:d0:ce:d7:
+- 0d:80:16:b4:78:a5:3a:87:4c:8d:8a:a5:d5:46:97:f2:2c:10:
+- b9:bc:54:22:c0:01:50:69:43:9e:f4:b2:ef:6d:f8:ec:da:f1:
+- e3:b1:ef:df:91:8f:54:2a:0b:25:c1:26:19:c4:52:10:05:65:
+- d5:82:10:ea:c2:31:cd:2e
+------BEGIN CERTIFICATE-----
+-MIIFtzCCA5+gAwIBAgICBQkwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0x
+-GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJv
+-b3QgQ0EgMjAeFw0wNjExMjQxODI3MDBaFw0zMTExMjQxODIzMzNaMEUxCzAJBgNV
+-BAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMRswGQYDVQQDExJRdW9W
+-YWRpcyBSb290IENBIDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCa
+-GMpLlA0ALa8DKYrwD4HIrkwZhR0In6spRIXzL4GtMh6QRr+jhiYaHv5+HBg6XJxg
+-Fyo6dIMzMH1hVBHL7avg5tKifvVrbxi3Cgst/ek+7wrGsxDp3MJGF/hd/aTa/55J
+-WpzmM+Yklvc/ulsrHHo1wtZn/qtmUIttKGAr79dgw8eTvI02kfN/+NsRE8Scd3bB
+-rrcCaoF6qUWD4gXmuVbBlDePSHFjIuwXZQeVikvfj8ZaCuWw419eaxGrDPmF60Tp
+-+ARz8un+XJiM9XOva7R+zdRcAitMOeGylZUtQofX1bOQQ7dsE/He3fbE+Ik/0XX1
+-ksOR1YqI0JDs3G3eicJlcZaLDQP9nL9bFqyS2+r+eXyt66/3FsvbzSUr5R/7mp/i
+-Ucw6UwxI5g69ybR2BlLmEROFcmMDBOAENisgGQLodKcftslWZvB1JdxnwQ5hYIiz
+-PtGo/KPaHbDRsSNU30R2be1B2MGyIrZTHN81Hdyhdyox5C315eXbyOD/5YDXC2Og
+-/zOhD7osFRXql7PSorW+8oyWHhqPHWykYTe5hnMz15eWniN9gqRMgeKh0bpnX5UH
+-oycR7hYQe7xFSkyyBNKr79X9DFHOUGoIMfmR2gyPZFwDwzqLID9ujWc9Otb+fVuI
+-yV77zGHcizN300QyNQliBJIWENieJ0f7OyHj+OsdWwIDAQABo4GwMIGtMA8GA1Ud
+-EwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBQahGK8SEwzJQTU7tD2
+-A8QZRtGUazBuBgNVHSMEZzBlgBQahGK8SEwzJQTU7tD2A8QZRtGUa6FJpEcwRTEL
+-MAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMT
+-ElF1b1ZhZGlzIFJvb3QgQ0EgMoICBQkwDQYJKoZIhvcNAQEFBQADggIBAD4KFk2f
+-BluornFdLwUvZ+YTRYPENvbzwCYMDbVHZF34tHLJRqUDGCdViXh9duqWNIAXINzn
+-g/iN/Ae42l9NLmeyhP3ZRPx3UIHmfLTJDQtyU/h2BwdBR5YM++CCJpNVjP4iH2Bl
+-fF/nJrP3MpCYUNQ3cVX2kiF495V5+vgtJodmVjB3pjd4M1IQWK4/YY7yarHvGH5K
+-WWPKjaJW1acvvFYfzznB4vsKqBUsfU16Y8Zsl0Q80m/DShcK+JDSV6IZUaUtl0Ha
+-B0+pUNqQjZRG4T7wlP0QADj1O+hA4bRuVhogzG9Yje0uRY/W6ZM/57Es3zrWIozc
+-hLsib9D45MY56QSIPMO661V6bYCZJPVsAfv4l7CUW+v90m/xd2gNNWQjrLhVoQPR
+-TUIZ3Ph1WVaj+ahJefivDrkRoHy3au000LYmYjgahwz46P0u05B/B5EqHdZ+XIWD
+-mbA4CD/pXvk1B+TJYm5Xf6dQlfe6yJvmjqIBxdZmv3lh8zwc4bmCXF2gw+nYSL0Z
+-ohEUGW6yhhtoPkg3Goi3XZZenMfvJ2II4pEZXNLxId26F0KCl3GBUzGpn/Z9Yr9y
+-4aOTHcyKJloJONDO1w2AFrR4pTqHTI2KpdVGl/IsELm8VCLAAVBpQ570su9t+Oza
+-8eOx79+Rj1QqCyXBJhnEUhAFZdWCEOrCMc0u
+------END CERTIFICATE-----
+-
+ # 88ef81de202eb018452e43f864725cea5fbd1fc2d9d205730709c5d8b8690f46
+ Certificate:
+ Data:
+@@ -5759,88 +4435,6 @@ t/2jioSgrGK+KwmHNPBqAbubKVY8/gA3zyNs8U6qtnRGEmyR7jTV7JqR50S+kDFy
+ SjnRBUkLp7Y3gaVdjKozXoEofKd9J+sAro03
+ -----END CERTIFICATE-----
+
+-# 1a0d20445de5ba1862d19ef880858cbce50102b36e8f0a040c3c69e74522fe6e
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 20:a4:c4:7f:dd:df:e1:c7:53:63:07:13:88:77:60:12
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO Certification Authority
+- Validity
+- Not Before: Jan 1 00:00:00 2011 GMT
+- Not After : Dec 31 23:59:59 2030 GMT
+- Subject: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO Certification Authority
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:d0:40:8b:8b:72:e3:91:1b:f7:51:c1:1b:54:04:
+- 98:d3:a9:bf:c1:e6:8a:5d:3b:87:fb:bb:88:ce:0d:
+- e3:2f:3f:06:96:f0:a2:29:50:99:ae:db:3b:a1:57:
+- b0:74:51:71:cd:ed:42:91:4d:41:fe:a9:c8:d8:6a:
+- 86:77:44:bb:59:66:97:50:5e:b4:d4:2c:70:44:cf:
+- da:37:95:42:69:3c:30:c4:71:b3:52:f0:21:4d:a1:
+- d8:ba:39:7c:1c:9e:a3:24:9d:f2:83:16:98:aa:16:
+- 7c:43:9b:15:5b:b7:ae:34:91:fe:d4:62:26:18:46:
+- 9a:3f:eb:c1:f9:f1:90:57:eb:ac:7a:0d:8b:db:72:
+- 30:6a:66:d5:e0:46:a3:70:dc:68:d9:ff:04:48:89:
+- 77:de:b5:e9:fb:67:6d:41:e9:bc:39:bd:32:d9:62:
+- 02:f1:b1:a8:3d:6e:37:9c:e2:2f:e2:d3:a2:26:8b:
+- c6:b8:55:43:88:e1:23:3e:a5:d2:24:39:6a:47:ab:
+- 00:d4:a1:b3:a9:25:fe:0d:3f:a7:1d:ba:d3:51:c1:
+- 0b:a4:da:ac:38:ef:55:50:24:05:65:46:93:34:4f:
+- 2d:8d:ad:c6:d4:21:19:d2:8e:ca:05:61:71:07:73:
+- 47:e5:8a:19:12:bd:04:4d:ce:4e:9c:a5:48:ac:bb:
+- 26:f7
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Subject Key Identifier:
+- 0B:58:E5:8B:C6:4C:15:37:A4:40:A9:30:A9:21:BE:47:36:5A:56:FF
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- Signature Algorithm: sha1WithRSAEncryption
+- 2f:c9:c4:1c:07:3b:cf:61:02:00:b1:d9:21:51:75:72:03:30:
+- b0:c4:16:1f:6c:00:8b:10:ac:af:f1:47:d4:ae:10:3c:0c:1a:
+- f8:d4:93:6c:ac:10:37:7c:b7:a6:83:64:ad:cd:df:0e:87:33:
+- 9d:37:b0:c6:7b:38:72:b1:f3:1a:0e:a3:f9:55:7a:6d:03:66:
+- 03:17:95:4a:f1:b1:7a:df:56:21:06:42:8f:b1:d3:a8:85:de:
+- ee:97:1d:62:eb:a7:e7:31:12:66:c3:0f:a6:4b:2e:41:82:f7:
+- fd:c9:1b:a8:1b:af:ee:3c:ce:e3:9c:ae:28:07:a1:2c:9b:24:
+- c2:0f:23:26:83:32:8b:86:0f:1f:2b:12:46:25:16:8f:76:90:
+- 03:6b:de:bc:aa:22:68:6b:8c:a1:ac:2b:11:39:a6:db:70:c2:
+- 7d:72:e9:33:e7:fc:26:f1:74:5a:91:e6:9d:84:ac:f8:a8:06:
+- 19:46:e6:a7:e9:aa:34:22:a4:a1:9f:7a:ad:b7:b2:a4:9a:33:
+- 88:71:02:3c:2e:d6:7a:b2:1f:a2:ca:c0:dd:2f:10:94:fd:b3:
+- 8c:84:20:79:46:d5:05:d4:10:e4:d2:db:64:4f:b8:5b:ee:1b:
+- c5:20:47:5b:94:ab:6e:d4:95:33:1d:a6:15:71:f1:f8:94:ca:
+- 54:39:3e:c1
+------BEGIN CERTIFICATE-----
+-MIID0DCCArigAwIBAgIQIKTEf93f4cdTYwcTiHdgEjANBgkqhkiG9w0BAQUFADCB
+-gTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
+-A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJzAlBgNV
+-BAMTHkNPTU9ETyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTAxMDEwMDAw
+-MDBaFw0zMDEyMzEyMzU5NTlaMIGBMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl
+-YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01P
+-RE8gQ0EgTGltaXRlZDEnMCUGA1UEAxMeQ09NT0RPIENlcnRpZmljYXRpb24gQXV0
+-aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECLi3LjkRv3
+-UcEbVASY06m/weaKXTuH+7uIzg3jLz8GlvCiKVCZrts7oVewdFFxze1CkU1B/qnI
+-2GqGd0S7WWaXUF601CxwRM/aN5VCaTwwxHGzUvAhTaHYujl8HJ6jJJ3ygxaYqhZ8
+-Q5sVW7euNJH+1GImGEaaP+vB+fGQV+useg2L23IwambV4EajcNxo2f8ESIl33rXp
+-+2dtQem8Ob0y2WIC8bGoPW43nOIv4tOiJovGuFVDiOEjPqXSJDlqR6sA1KGzqSX+
+-DT+nHbrTUcELpNqsOO9VUCQFZUaTNE8tja3G1CEZ0o7KBWFxB3NH5YoZEr0ETc5O
+-nKVIrLsm9wIDAQABo0IwQDAdBgNVHQ4EFgQUC1jli8ZMFTekQKkwqSG+RzZaVv8w
+-DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD
+-ggEBAC/JxBwHO89hAgCx2SFRdXIDMLDEFh9sAIsQrK/xR9SuEDwMGvjUk2ysEDd8
+-t6aDZK3N3w6HM503sMZ7OHKx8xoOo/lVem0DZgMXlUrxsXrfViEGQo+x06iF3u6X
+-HWLrp+cxEmbDD6ZLLkGC9/3JG6gbr+48zuOcrigHoSybJMIPIyaDMouGDx8rEkYl
+-Fo92kANr3ryqImhrjKGsKxE5pttwwn1y6TPn/CbxdFqR5p2ErPioBhlG5qfpqjQi
+-pKGfeq23sqSaM4hxAjwu1nqyH6LKwN0vEJT9s4yEIHlG1QXUEOTS22RPuFvuG8Ug
+-R1uUq27UlTMdphVx8fiUylQ5PsE=
+------END CERTIFICATE-----
+-
+ # 1793927a0614549789adce2f8f34f7f0b66d0f3ae3a3b84d21ec15dbba4fadc7
+ Certificate:
+ Data:
+@@ -6201,328 +4795,6 @@ L6KCq9NjRHDEjf8tM7qtj3u1cIiuPhnPQCjY/MiQu12ZIvVS5ljFH4gxQ+6IHdfG
+ jjxDah2nGN59PRbxYvnKkKj9
+ -----END CERTIFICATE-----
+
+-# 55903859c8c0c3ebb8759ece4e2557225ff5758bbd38ebd48276601e1bd58097
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 08:bd:85:97:6c:99:27:a4:80:68:47:3b
+- Signature Algorithm: ecdsa-with-SHA384
+- Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P384 Certification Authority
+- Validity
+- Not Before: Aug 23 19:36:43 2017 GMT
+- Not After : Aug 23 19:36:43 2042 GMT
+- Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P384 Certification Authority
+- Subject Public Key Info:
+- Public Key Algorithm: id-ecPublicKey
+- Public-Key: (384 bit)
+- pub:
+- 04:6b:da:0d:75:35:08:31:47:05:ae:45:99:55:f1:
+- 11:13:2e:4a:f8:10:31:23:a3:7e:83:d3:7f:28:08:
+- 3a:26:1a:3a:cf:97:82:1f:80:b7:27:09:8f:d1:8e:
+- 30:c4:0a:9b:0e:ac:58:04:ab:f7:36:7d:94:23:a4:
+- 9b:0a:8a:8b:ab:eb:fd:39:25:66:f1:5e:fe:8c:ae:
+- 8d:41:79:9d:09:60:ce:28:a9:d3:8a:6d:f3:d6:45:
+- d4:f2:98:84:38:65:a0
+- ASN1 OID: secp384r1
+- NIST CURVE: P-384
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- 55:A9:84:89:D2:C1:32:BD:18:CB:6C:A6:07:4E:C8:E7:9D:BE:82:90
+- Signature Algorithm: ecdsa-with-SHA384
+- 30:64:02:30:37:01:92:97:45:12:7e:a0:f3:3e:ad:19:3a:72:
+- dd:f4:50:93:03:12:be:44:d2:4f:41:a4:8c:9c:9d:1f:a3:f6:
+- c2:92:e7:48:14:fe:4e:9b:a5:91:57:ae:c6:37:72:bb:02:30:
+- 67:25:0a:b1:0c:5e:ee:a9:63:92:6f:e5:90:0b:fe:66:22:ca:
+- 47:fd:8a:31:f7:83:fe:7a:bf:10:be:18:2b:1e:8f:f6:29:1e:
+- 94:59:ef:8e:21:37:cb:51:98:a5:6e:4b
+------BEGIN CERTIFICATE-----
+-MIICnTCCAiSgAwIBAgIMCL2Fl2yZJ6SAaEc7MAoGCCqGSM49BAMDMIGRMQswCQYD
+-VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf
+-BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3
+-YXZlIEdsb2JhbCBFQ0MgUDM4NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x
+-NzA4MjMxOTM2NDNaFw00MjA4MjMxOTM2NDNaMIGRMQswCQYDVQQGEwJVUzERMA8G
+-A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0
+-d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF
+-Q0MgUDM4NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTB2MBAGByqGSM49AgEGBSuB
+-BAAiA2IABGvaDXU1CDFHBa5FmVXxERMuSvgQMSOjfoPTfygIOiYaOs+Xgh+AtycJ
+-j9GOMMQKmw6sWASr9zZ9lCOkmwqKi6vr/TklZvFe/oyujUF5nQlgziip04pt89ZF
+-1PKYhDhloKNDMEEwDwYDVR0TAQH/BAUwAwEB/zAPBgNVHQ8BAf8EBQMDBwYAMB0G
+-A1UdDgQWBBRVqYSJ0sEyvRjLbKYHTsjnnb6CkDAKBggqhkjOPQQDAwNnADBkAjA3
+-AZKXRRJ+oPM+rRk6ct30UJMDEr5E0k9BpIycnR+j9sKS50gU/k6bpZFXrsY3crsC
+-MGclCrEMXu6pY5Jv5ZAL/mYiykf9ijH3g/56vxC+GCsej/YpHpRZ744hN8tRmKVu
+-Sw==
+------END CERTIFICATE-----
+-
+-# 945bbc825ea554f489d1fd51a73ddf2ea624ac7019a05205225c22a78ccfa8b4
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 0d:6a:5f:08:3f:28:5c:3e:51:95:df:5d
+- Signature Algorithm: ecdsa-with-SHA256
+- Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P256 Certification Authority
+- Validity
+- Not Before: Aug 23 19:35:10 2017 GMT
+- Not After : Aug 23 19:35:10 2042 GMT
+- Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P256 Certification Authority
+- Subject Public Key Info:
+- Public Key Algorithm: id-ecPublicKey
+- Public-Key: (256 bit)
+- pub:
+- 04:7e:fb:6c:e6:23:e3:73:32:08:ca:60:e6:53:9c:
+- ba:74:8d:18:b0:78:90:52:80:dd:38:c0:4a:1d:d1:
+- a8:cc:93:a4:97:06:38:ca:0d:15:62:c6:8e:01:2a:
+- 65:9d:aa:df:34:91:2e:81:c1:e4:33:92:31:c4:fd:
+- 09:3a:a6:3f:ad
+- ASN1 OID: prime256v1
+- NIST CURVE: P-256
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- A3:41:06:AC:90:6D:D1:4A:EB:75:A5:4A:10:99:B3:B1:A1:8B:4A:F7
+- Signature Algorithm: ecdsa-with-SHA256
+- 30:44:02:20:07:e6:54:da:0e:a0:5a:b2:ae:11:9f:87:c5:b6:
+- ff:69:de:25:be:f8:a0:b7:08:f3:44:ce:2a:df:08:21:0c:37:
+- 02:20:2d:26:03:a0:05:bd:6b:d1:f6:5c:f8:65:cc:86:6d:b3:
+- 9c:34:48:63:84:09:c5:8d:77:1a:e2:cc:9c:e1:74:7b
+------BEGIN CERTIFICATE-----
+-MIICYDCCAgegAwIBAgIMDWpfCD8oXD5Rld9dMAoGCCqGSM49BAMCMIGRMQswCQYD
+-VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf
+-BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3
+-YXZlIEdsb2JhbCBFQ0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x
+-NzA4MjMxOTM1MTBaFw00MjA4MjMxOTM1MTBaMIGRMQswCQYDVQQGEwJVUzERMA8G
+-A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0
+-d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF
+-Q0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTBZMBMGByqGSM49AgEGCCqG
+-SM49AwEHA0IABH77bOYj43MyCMpg5lOcunSNGLB4kFKA3TjASh3RqMyTpJcGOMoN
+-FWLGjgEqZZ2q3zSRLoHB5DOSMcT9CTqmP62jQzBBMA8GA1UdEwEB/wQFMAMBAf8w
+-DwYDVR0PAQH/BAUDAwcGADAdBgNVHQ4EFgQUo0EGrJBt0UrrdaVKEJmzsaGLSvcw
+-CgYIKoZIzj0EAwIDRwAwRAIgB+ZU2g6gWrKuEZ+Hxbb/ad4lvvigtwjzRM4q3wgh
+-DDcCIC0mA6AFvWvR9lz4ZcyGbbOcNEhjhAnFjXca4syc4XR7
+------END CERTIFICATE-----
+-
+-# 97552015f5ddfc3c8788c006944555408894450084f100867086bc1a2bb58dc8
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 05:f7:0e:86:da:49:f3:46:35:2e:ba:b2
+- Signature Algorithm: sha256WithRSAEncryption
+- Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global Certification Authority
+- Validity
+- Not Before: Aug 23 19:34:12 2017 GMT
+- Not After : Aug 23 19:34:12 2042 GMT
+- Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global Certification Authority
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (4096 bit)
+- Modulus:
+- 00:b9:5d:51:28:4b:3c:37:92:d1:82:ce:bd:1d:bd:
+- cd:dd:b8:ab:cf:0a:3e:e1:5d:e5:dc:aa:09:b9:57:
+- 02:3e:e6:63:61:df:f2:0f:82:63:ae:a3:f7:ac:73:
+- d1:7c:e7:b3:0b:af:08:00:09:59:7f:cd:29:2a:88:
+- 93:87:17:18:80:ed:88:b2:b4:b6:10:1f:2d:d6:5f:
+- 55:a2:13:5d:d1:c6:eb:06:56:89:88:fe:ac:32:9d:
+- fd:5c:c3:05:c7:6e:ee:86:89:ba:88:03:9d:72:21:
+- 86:90:ae:8f:03:a5:dc:9f:88:28:cb:a3:92:49:0f:
+- ec:d0:0f:e2:6d:44:4f:80:6a:b2:d4:e7:a0:0a:53:
+- 01:ba:8e:97:91:76:6e:bc:fc:d5:6b:36:e6:40:88:
+- d6:7b:2f:5f:05:e8:2c:6d:11:f3:e7:b2:be:92:44:
+- 4c:d2:97:a4:fe:d2:72:81:43:07:9c:e9:11:3e:f5:
+- 8b:1a:59:7d:1f:68:58:dd:04:00:2c:96:f3:43:b3:
+- 7e:98:19:74:d9:9c:73:d9:18:be:41:c7:34:79:d9:
+- f4:62:c2:43:b9:b3:27:b0:22:cb:f9:3d:52:c7:30:
+- 47:b3:c9:3e:b8:6a:e2:e7:e8:81:70:5e:42:8b:4f:
+- 26:a5:fe:3a:c2:20:6e:bb:f8:16:8e:cd:0c:a9:b4:
+- 1b:6c:76:10:e1:58:79:46:3e:54:ce:80:a8:57:09:
+- 37:29:1b:99:13:8f:0c:c8:d6:2c:1c:fb:05:e8:08:
+- 95:3d:65:46:dc:ee:cd:69:e2:4d:8f:87:28:4e:34:
+- 0b:3e:cf:14:d9:bb:dd:b6:50:9a:ad:77:d4:19:d6:
+- da:1a:88:c8:4e:1b:27:75:d8:b2:08:f1:ae:83:30:
+- b9:11:0e:cd:87:f0:84:8d:15:72:7c:a1:ef:cc:f2:
+- 88:61:ba:f4:69:bb:0c:8c:0b:75:57:04:b8:4e:2a:
+- 14:2e:3d:0f:1c:1e:32:a6:62:36:ee:66:e2:22:b8:
+- 05:40:63:10:22:f3:33:1d:74:72:8a:2c:f5:39:29:
+- a0:d3:e7:1b:80:84:2d:c5:3d:e3:4d:b1:fd:1a:6f:
+- ba:65:07:3b:58:ec:42:45:26:fb:d8:da:25:72:c4:
+- f6:00:b1:22:79:bd:e3:7c:59:62:4a:9c:05:6f:3d:
+- ce:e6:d6:47:63:99:c6:24:6f:72:12:c8:ac:7f:90:
+- b4:0b:91:70:e8:b7:e6:16:10:71:17:ce:de:06:4f:
+- 48:41:7d:35:4a:a3:89:f2:c9:4b:7b:41:11:6d:67:
+- b7:08:98:4c:e5:11:19:ae:42:80:dc:fb:90:05:d4:
+- f8:50:ca:be:e4:ad:c7:c2:94:d7:16:9d:e6:17:8f:
+- af:36:fb
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- 99:E0:19:67:0D:62:DB:76:B3:DA:3D:B8:5B:E8:FD:42:D2:31:0E:87
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- Signature Algorithm: sha256WithRSAEncryption
+- 98:73:70:e2:b0:d3:ed:39:ec:4c:60:d9:a9:12:86:17:1e:96:
+- d0:e8:54:28:3b:64:2d:21:a6:f8:9d:56:13:6a:48:3d:4f:c7:
+- 3e:29:db:6d:58:83:54:3d:87:7d:23:05:d4:e4:1c:dc:e8:38:
+- 65:86:c5:75:a7:5a:db:35:05:bd:77:de:bb:29:37:40:05:07:
+- c3:94:52:9f:ca:64:dd:f1:1b:2b:dc:46:0a:10:02:31:fd:4a:
+- 68:0d:07:64:90:e6:1e:f5:2a:a1:a8:bb:3c:5d:f9:a3:08:0b:
+- 11:0c:f1:3f:2d:10:94:6f:fe:e2:34:87:83:d6:cf:e5:1b:35:
+- 6d:d2:03:e1:b0:0d:a8:a0:aa:46:27:82:36:a7:15:b6:08:a6:
+- 42:54:57:b6:99:5a:e2:0b:79:90:d7:57:12:51:35:19:88:41:
+- 68:25:d4:37:17:84:15:fb:01:72:dc:95:de:52:26:20:98:26:
+- e2:76:f5:27:6f:fa:00:3b:4a:61:d9:0d:cb:51:93:2a:fd:16:
+- 06:96:a7:23:9a:23:48:fe:51:bd:b6:c4:b0:b1:54:ce:de:6c:
+- 41:ad:16:67:7e:db:fd:38:cd:b9:38:4e:b2:c1:60:cb:9d:17:
+- df:58:9e:7a:62:b2:26:8f:74:95:9b:e4:5b:1d:d2:0f:dd:98:
+- 1c:9b:59:b9:23:d3:31:a0:a6:ff:38:dd:cf:20:4f:e9:58:56:
+- 3a:67:c3:d1:f6:99:99:9d:ba:36:b6:80:2f:88:47:4f:86:bf:
+- 44:3a:80:e4:37:1c:a6:ba:ea:97:98:11:d0:84:62:47:64:1e:
+- aa:ee:40:bf:34:b1:9c:8f:4e:e1:f2:92:4f:1f:8e:f3:9e:97:
+- de:f3:a6:79:6a:89:71:4f:4b:27:17:48:fe:ec:f4:50:0f:4f:
+- 49:7d:cc:45:e3:bd:7a:40:c5:41:dc:61:56:27:06:69:e5:72:
+- 41:81:d3:b6:01:89:a0:2f:3a:72:79:fe:3a:30:bf:41:ec:c7:
+- 62:3e:91:4b:c7:d9:31:76:42:f9:f7:3c:63:ec:26:8c:73:0c:
+- 7d:1a:1d:ea:a8:7c:87:a8:c2:27:7c:e1:33:41:0f:cf:cf:fc:
+- 00:a0:22:80:9e:4a:a7:6f:00:b0:41:45:b7:22:ca:68:48:c5:
+- 42:a2:ae:dd:1d:f2:e0:6e:4e:05:58:b1:c0:90:16:2a:a4:3d:
+- 10:40:be:8f:62:63:83:a9:9c:82:7d:2d:02:e9:83:30:7c:cb:
+- 27:c9:fd:1e:66:00:b0:2e:d3:21:2f:8e:33:16:6c:98:ed:10:
+- a8:07:d6:cc:93:cf:db:d1:69:1c:e4:ca:c9:e0:b6:9c:e9:ce:
+- 71:71:de:6c:3f:16:a4:79
+------BEGIN CERTIFICATE-----
+-MIIF2jCCA8KgAwIBAgIMBfcOhtpJ80Y1LrqyMA0GCSqGSIb3DQEBCwUAMIGIMQsw
+-CQYDVQQGEwJVUzERMA8GA1UECAwISWxsaW5vaXMxEDAOBgNVBAcMB0NoaWNhZ28x
+-ITAfBgNVBAoMGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjExMC8GA1UEAwwoVHJ1
+-c3R3YXZlIEdsb2JhbCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xNzA4MjMx
+-OTM0MTJaFw00MjA4MjMxOTM0MTJaMIGIMQswCQYDVQQGEwJVUzERMA8GA1UECAwI
+-SWxsaW5vaXMxEDAOBgNVBAcMB0NoaWNhZ28xITAfBgNVBAoMGFRydXN0d2F2ZSBI
+-b2xkaW5ncywgSW5jLjExMC8GA1UEAwwoVHJ1c3R3YXZlIEdsb2JhbCBDZXJ0aWZp
+-Y2F0aW9uIEF1dGhvcml0eTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
+-ALldUShLPDeS0YLOvR29zd24q88KPuFd5dyqCblXAj7mY2Hf8g+CY66j96xz0Xzn
+-swuvCAAJWX/NKSqIk4cXGIDtiLK0thAfLdZfVaITXdHG6wZWiYj+rDKd/VzDBcdu
+-7oaJuogDnXIhhpCujwOl3J+IKMujkkkP7NAP4m1ET4BqstTnoApTAbqOl5F2brz8
+-1Ws25kCI1nsvXwXoLG0R8+eyvpJETNKXpP7ScoFDB5zpET71ixpZfR9oWN0EACyW
+-80OzfpgZdNmcc9kYvkHHNHnZ9GLCQ7mzJ7Aiy/k9UscwR7PJPrhq4ufogXBeQotP
+-JqX+OsIgbrv4Fo7NDKm0G2x2EOFYeUY+VM6AqFcJNykbmROPDMjWLBz7BegIlT1l
+-RtzuzWniTY+HKE40Cz7PFNm73bZQmq131BnW2hqIyE4bJ3XYsgjxroMwuREOzYfw
+-hI0Vcnyh78zyiGG69Gm7DIwLdVcEuE4qFC49DxweMqZiNu5m4iK4BUBjECLzMx10
+-coos9TkpoNPnG4CELcU9402x/RpvumUHO1jsQkUm+9jaJXLE9gCxInm943xZYkqc
+-BW89zubWR2OZxiRvchLIrH+QtAuRcOi35hYQcRfO3gZPSEF9NUqjifLJS3tBEW1n
+-twiYTOURGa5CgNz7kAXU+FDKvuStx8KU1xad5hePrzb7AgMBAAGjQjBAMA8GA1Ud
+-EwEB/wQFMAMBAf8wHQYDVR0OBBYEFJngGWcNYtt2s9o9uFvo/ULSMQ6HMA4GA1Ud
+-DwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAgEAmHNw4rDT7TnsTGDZqRKGFx6W
+-0OhUKDtkLSGm+J1WE2pIPU/HPinbbViDVD2HfSMF1OQc3Og4ZYbFdada2zUFvXfe
+-uyk3QAUHw5RSn8pk3fEbK9xGChACMf1KaA0HZJDmHvUqoai7PF35owgLEQzxPy0Q
+-lG/+4jSHg9bP5Rs1bdID4bANqKCqRieCNqcVtgimQlRXtpla4gt5kNdXElE1GYhB
+-aCXUNxeEFfsBctyV3lImIJgm4nb1J2/6ADtKYdkNy1GTKv0WBpanI5ojSP5RvbbE
+-sLFUzt5sQa0WZ37b/TjNuThOssFgy50X31ieemKyJo90lZvkWx3SD92YHJtZuSPT
+-MaCm/zjdzyBP6VhWOmfD0faZmZ26NraAL4hHT4a/RDqA5Dccprrql5gR0IRiR2Qe
+-qu5AvzSxnI9O4fKSTx+O856X3vOmeWqJcU9LJxdI/uz0UA9PSX3MReO9ekDFQdxh
+-VicGaeVyQYHTtgGJoC86cnn+OjC/QezHYj6RS8fZMXZC+fc8Y+wmjHMMfRod6qh8
+-h6jCJ3zhM0EPz8/8AKAigJ5Kp28AsEFFtyLKaEjFQqKu3R3y4G5OBVixwJAWKqQ9
+-EEC+j2Jjg6mcgn0tAumDMHzLJ8n9HmYAsC7TIS+OMxZsmO0QqAfWzJPP29FpHOTK
+-yeC2nOnOcXHebD8WpHk=
+------END CERTIFICATE-----
+-
+-# f1c1b50ae5a20dd8030ec9f6bc24823dd367b5255759b4e71b61fce9f7375d73
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 0c:f0:8e:5c:08:16:a5:ad:42:7f:f0:eb:27:18:59:d0
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = US, O = SecureTrust Corporation, CN = SecureTrust CA
+- Validity
+- Not Before: Nov 7 19:31:18 2006 GMT
+- Not After : Dec 31 19:40:55 2029 GMT
+- Subject: C = US, O = SecureTrust Corporation, CN = SecureTrust CA
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (2048 bit)
+- Modulus:
+- 00:ab:a4:81:e5:95:cd:f5:f6:14:8e:c2:4f:ca:d4:
+- e2:78:95:58:9c:41:e1:0d:99:40:24:17:39:91:33:
+- 66:e9:be:e1:83:af:62:5c:89:d1:fc:24:5b:61:b3:
+- e0:11:11:41:1c:1d:6e:f0:b8:bb:f8:de:a7:81:ba:
+- a6:48:c6:9f:1d:bd:be:8e:a9:41:3e:b8:94:ed:29:
+- 1a:d4:8e:d2:03:1d:03:ef:6d:0d:67:1c:57:d7:06:
+- ad:ca:c8:f5:fe:0e:af:66:25:48:04:96:0b:5d:a3:
+- ba:16:c3:08:4f:d1:46:f8:14:5c:f2:c8:5e:01:99:
+- 6d:fd:88:cc:86:a8:c1:6f:31:42:6c:52:3e:68:cb:
+- f3:19:34:df:bb:87:18:56:80:26:c4:d0:dc:c0:6f:
+- df:de:a0:c2:91:16:a0:64:11:4b:44:bc:1e:f6:e7:
+- fa:63:de:66:ac:76:a4:71:a3:ec:36:94:68:7a:77:
+- a4:b1:e7:0e:2f:81:7a:e2:b5:72:86:ef:a2:6b:8b:
+- f0:0f:db:d3:59:3f:ba:72:bc:44:24:9c:e3:73:b3:
+- f7:af:57:2f:42:26:9d:a9:74:ba:00:52:f2:4b:cd:
+- 53:7c:47:0b:36:85:0e:66:a9:08:97:16:34:57:c1:
+- 66:f7:80:e3:ed:70:54:c7:93:e0:2e:28:15:59:87:
+- ba:bb
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- 1.3.6.1.4.1.311.20.2:
+- ...C.A
+- X509v3 Key Usage:
+- Digital Signature, Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- 42:32:B6:16:FA:04:FD:FE:5D:4B:7A:C3:FD:F7:4C:40:1D:5A:43:AF
+- X509v3 CRL Distribution Points:
+-
+- Full Name:
+- URI:http://crl.securetrust.com/STCA.crl
+-
+- 1.3.6.1.4.1.311.21.1:
+- ...
+- Signature Algorithm: sha1WithRSAEncryption
+- 30:ed:4f:4a:e1:58:3a:52:72:5b:b5:a6:a3:65:18:a6:bb:51:
+- 3b:77:e9:9d:ea:d3:9f:5c:e0:45:65:7b:0d:ca:5b:e2:70:50:
+- b2:94:05:14:ae:49:c7:8d:41:07:12:73:94:7e:0c:23:21:fd:
+- bc:10:7f:60:10:5a:72:f5:98:0e:ac:ec:b9:7f:dd:7a:6f:5d:
+- d3:1c:f4:ff:88:05:69:42:a9:05:71:c8:b7:ac:26:e8:2e:b4:
+- 8c:6a:ff:71:dc:b8:b1:df:99:bc:7c:21:54:2b:e4:58:a2:bb:
+- 57:29:ae:9e:a9:a3:19:26:0f:99:2e:08:b0:ef:fd:69:cf:99:
+- 1a:09:8d:e3:a7:9f:2b:c9:36:34:7b:24:b3:78:4c:95:17:a4:
+- 06:26:1e:b6:64:52:36:5f:60:67:d9:9c:c5:05:74:0b:e7:67:
+- 23:d2:08:fc:88:e9:ae:8b:7f:e1:30:f4:37:7e:fd:c6:32:da:
+- 2d:9e:44:30:30:6c:ee:07:de:d2:34:fc:d2:ff:40:f6:4b:f4:
+- 66:46:06:54:a6:f2:32:0a:63:26:30:6b:9b:d1:dc:8b:47:ba:
+- e1:b9:d5:62:d0:a2:a0:f4:67:05:78:29:63:1a:6f:04:d6:f8:
+- c6:4c:a3:9a:b1:37:b4:8d:e5:28:4b:1d:9e:2c:c2:b8:68:bc:
+- ed:02:ee:31
+------BEGIN CERTIFICATE-----
+-MIIDuDCCAqCgAwIBAgIQDPCOXAgWpa1Cf/DrJxhZ0DANBgkqhkiG9w0BAQUFADBI
+-MQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24x
+-FzAVBgNVBAMTDlNlY3VyZVRydXN0IENBMB4XDTA2MTEwNzE5MzExOFoXDTI5MTIz
+-MTE5NDA1NVowSDELMAkGA1UEBhMCVVMxIDAeBgNVBAoTF1NlY3VyZVRydXN0IENv
+-cnBvcmF0aW9uMRcwFQYDVQQDEw5TZWN1cmVUcnVzdCBDQTCCASIwDQYJKoZIhvcN
+-AQEBBQADggEPADCCAQoCggEBAKukgeWVzfX2FI7CT8rU4niVWJxB4Q2ZQCQXOZEz
+-Zum+4YOvYlyJ0fwkW2Gz4BERQRwdbvC4u/jep4G6pkjGnx29vo6pQT64lO0pGtSO
+-0gMdA+9tDWccV9cGrcrI9f4Or2YlSASWC12juhbDCE/RRvgUXPLIXgGZbf2IzIao
+-wW8xQmxSPmjL8xk037uHGFaAJsTQ3MBv396gwpEWoGQRS0S8Hvbn+mPeZqx2pHGj
+-7DaUaHp3pLHnDi+BeuK1cobvomuL8A/b01k/unK8RCSc43Oz969XL0Imnal0ugBS
+-8kvNU3xHCzaFDmapCJcWNFfBZveA4+1wVMeT4C4oFVmHursCAwEAAaOBnTCBmjAT
+-BgkrBgEEAYI3FAIEBh4EAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB
+-/zAdBgNVHQ4EFgQUQjK2FvoE/f5dS3rD/fdMQB1aQ68wNAYDVR0fBC0wKzApoCeg
+-JYYjaHR0cDovL2NybC5zZWN1cmV0cnVzdC5jb20vU1RDQS5jcmwwEAYJKwYBBAGC
+-NxUBBAMCAQAwDQYJKoZIhvcNAQEFBQADggEBADDtT0rhWDpSclu1pqNlGKa7UTt3
+-6Z3q059c4EVlew3KW+JwULKUBRSuSceNQQcSc5R+DCMh/bwQf2AQWnL1mA6s7Ll/
+-3XpvXdMc9P+IBWlCqQVxyLesJugutIxq/3HcuLHfmbx8IVQr5Fiiu1cprp6poxkm
+-D5kuCLDv/WnPmRoJjeOnnyvJNjR7JLN4TJUXpAYmHrZkUjZfYGfZnMUFdAvnZyPS
+-CPyI6a6Lf+Ew9Dd+/cYy2i2eRDAwbO4H3tI0/NL/QPZL9GZGBlSm8jIKYyYwa5vR
+-3ItHuuG51WLQoqD0ZwV4KWMabwTW+MZMo5qxN7SN5ShLHZ4swrhovO0C7jE=
+------END CERTIFICATE-----
+-
+ # 9bea11c976fe014764c1be56a6f914b5a560317abd9988393382e5161aa0493c
+ Certificate:
+ Data:
+@@ -7133,136 +5405,6 @@ oYYitmUnDuy2n0Jg5GfCtdpBC8TTi2EbvPofkSvXRAdeuims2cXp71NIWuuA8ShY
+ Ic2wBlX7Jz9TkHCpBB5XJ7k=
+ -----END CERTIFICATE-----
+
+-# 62dd0be9b9f50a163ea0f8e75c053b1eca57ea55c8688f647c6881f2c8357b95
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- bb:40:1c:43:f5:5e:4f:b0
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C = CH, O = SwissSign AG, CN = SwissSign Gold CA - G2
+- Validity
+- Not Before: Oct 25 08:30:35 2006 GMT
+- Not After : Oct 25 08:30:35 2036 GMT
+- Subject: C = CH, O = SwissSign AG, CN = SwissSign Gold CA - G2
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (4096 bit)
+- Modulus:
+- 00:af:e4:ee:7e:8b:24:0e:12:6e:a9:50:2d:16:44:
+- 3b:92:92:5c:ca:b8:5d:84:92:42:13:2a:bc:65:57:
+- 82:40:3e:57:24:cd:50:8b:25:2a:b7:6f:fc:ef:a2:
+- d0:c0:1f:02:24:4a:13:96:8f:23:13:e6:28:58:00:
+- a3:47:c7:06:a7:84:23:2b:bb:bd:96:2b:7f:55:cc:
+- 8b:c1:57:1f:0e:62:65:0f:dd:3d:56:8a:73:da:ae:
+- 7e:6d:ba:81:1c:7e:42:8c:20:35:d9:43:4d:84:fa:
+- 84:db:52:2c:f3:0e:27:77:0b:6b:bf:11:2f:72:78:
+- 9f:2e:d8:3e:e6:18:37:5a:2a:72:f9:da:62:90:92:
+- 95:ca:1f:9c:e9:b3:3c:2b:cb:f3:01:13:bf:5a:cf:
+- c1:b5:0a:60:bd:dd:b5:99:64:53:b8:a0:96:b3:6f:
+- e2:26:77:91:8c:e0:62:10:02:9f:34:0f:a4:d5:92:
+- 33:51:de:be:8d:ba:84:7a:60:3c:6a:db:9f:2b:ec:
+- de:de:01:3f:6e:4d:e5:50:86:cb:b4:af:ed:44:40:
+- c5:ca:5a:8c:da:d2:2b:7c:a8:ee:be:a6:e5:0a:aa:
+- 0e:a5:df:05:52:b7:55:c7:22:5d:32:6a:97:97:63:
+- 13:db:c9:db:79:36:7b:85:3a:4a:c5:52:89:f9:24:
+- e7:9d:77:a9:82:ff:55:1c:a5:71:69:2b:d1:02:24:
+- f2:b3:26:d4:6b:da:04:55:e5:c1:0a:c7:6d:30:37:
+- 90:2a:e4:9e:14:33:5e:16:17:55:c5:5b:b5:cb:34:
+- 89:92:f1:9d:26:8f:a1:07:d4:c6:b2:78:50:db:0c:
+- 0c:0b:7c:0b:8c:41:d7:b9:e9:dd:8c:88:f7:a3:4d:
+- b2:32:cc:d8:17:da:cd:b7:ce:66:9d:d4:fd:5e:ff:
+- bd:97:3e:29:75:e7:7e:a7:62:58:af:25:34:a5:41:
+- c7:3d:bc:0d:50:ca:03:03:0f:08:5a:1f:95:73:78:
+- 62:bf:af:72:14:69:0e:a5:e5:03:0e:78:8e:26:28:
+- 42:f0:07:0b:62:20:10:67:39:46:fa:a9:03:cc:04:
+- 38:7a:66:ef:20:83:b5:8c:4a:56:8e:91:00:fc:8e:
+- 5c:82:de:88:a0:c3:e2:68:6e:7d:8d:ef:3c:dd:65:
+- f4:5d:ac:51:ef:24:80:ae:aa:56:97:6f:f9:ad:7d:
+- da:61:3f:98:77:3c:a5:91:b6:1c:8c:26:da:65:a2:
+- 09:6d:c1:e2:54:e3:b9:ca:4c:4c:80:8f:77:7b:60:
+- 9a:1e:df:b6:f2:48:1e:0e:ba:4e:54:6d:98:e0:e1:
+- a2:1a:a2:77:50:cf:c4:63:92:ec:47:19:9d:eb:e6:
+- 6b:ce:c1
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Key Usage: critical
+- Certificate Sign, CRL Sign
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Subject Key Identifier:
+- 5B:25:7B:96:A4:65:51:7E:B8:39:F3:C0:78:66:5E:E8:3A:E7:F0:EE
+- X509v3 Authority Key Identifier:
+- keyid:5B:25:7B:96:A4:65:51:7E:B8:39:F3:C0:78:66:5E:E8:3A:E7:F0:EE
+-
+- X509v3 Certificate Policies:
+- Policy: 2.16.756.1.89.1.2.1.1
+- CPS: http://repository.swisssign.com/
+-
+- Signature Algorithm: sha1WithRSAEncryption
+- 27:ba:e3:94:7c:f1:ae:c0:de:17:e6:e5:d8:d5:f5:54:b0:83:
+- f4:bb:cd:5e:05:7b:4f:9f:75:66:af:3c:e8:56:7e:fc:72:78:
+- 38:03:d9:2b:62:1b:00:b9:f8:e9:60:cd:cc:ce:51:8a:c7:50:
+- 31:6e:e1:4a:7e:18:2f:69:59:b6:3d:64:81:2b:e3:83:84:e6:
+- 22:87:8e:7d:e0:ee:02:99:61:b8:1e:f4:b8:2b:88:12:16:84:
+- c2:31:93:38:96:31:a6:b9:3b:53:3f:c3:24:93:56:5b:69:92:
+- ec:c5:c1:bb:38:00:e3:ec:17:a9:b8:dc:c7:7c:01:83:9f:32:
+- 47:ba:52:22:34:1d:32:7a:09:56:a7:7c:25:36:a9:3d:4b:da:
+- c0:82:6f:0a:bb:12:c8:87:4b:27:11:f9:1e:2d:c7:93:3f:9e:
+- db:5f:26:6b:52:d9:2e:8a:f1:14:c6:44:8d:15:a9:b7:bf:bd:
+- de:a6:1a:ee:ae:2d:fb:48:77:17:fe:bb:ec:af:18:f5:2a:51:
+- f0:39:84:97:95:6c:6e:1b:c3:2b:c4:74:60:79:25:b0:0a:27:
+- df:df:5e:d2:39:cf:45:7d:42:4b:df:b3:2c:1e:c5:c6:5d:ca:
+- 55:3a:a0:9c:69:9a:8f:da:ef:b2:b0:3c:9f:87:6c:12:2b:65:
+- 70:15:52:31:1a:24:cf:6f:31:23:50:1f:8c:4f:8f:23:c3:74:
+- 41:63:1c:55:a8:14:dd:3e:e0:51:50:cf:f1:1b:30:56:0e:92:
+- b0:82:85:d8:83:cb:22:64:bc:2d:b8:25:d5:54:a2:b8:06:ea:
+- ad:92:a4:24:a0:c1:86:b5:4a:13:6a:47:cf:2e:0b:56:95:54:
+- cb:ce:9a:db:6a:b4:a6:b2:db:41:08:86:27:77:f7:6a:a0:42:
+- 6c:0b:38:ce:d7:75:50:32:92:c2:df:2b:30:22:48:d0:d5:41:
+- 38:25:5d:a4:e9:5d:9f:c6:94:75:d0:45:fd:30:97:43:8f:90:
+- ab:0a:c7:86:73:60:4a:69:2d:de:a5:78:d7:06:da:6a:9e:4b:
+- 3e:77:3a:20:13:22:01:d0:bf:68:9e:63:60:6b:35:4d:0b:6d:
+- ba:a1:3d:c0:93:e0:7f:23:b3:55:ad:72:25:4e:46:f9:d2:16:
+- ef:b0:64:c1:01:9e:e9:ca:a0:6a:98:0e:cf:d8:60:f2:2f:49:
+- b8:e4:42:e1:38:35:16:f4:c8:6e:4f:f7:81:56:e8:ba:a3:be:
+- 23:af:ae:fd:6f:03:e0:02:3b:30:76:fa:1b:6d:41:cf:01:b1:
+- e9:b8:c9:66:f4:db:26:f3:3a:a4:74:f2:49:24:5b:c9:b0:d0:
+- 57:c1:fa:3e:7a:e1:97:c9
+------BEGIN CERTIFICATE-----
+-MIIFujCCA6KgAwIBAgIJALtAHEP1Xk+wMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNV
+-BAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxHzAdBgNVBAMTFlN3aXNzU2ln
+-biBHb2xkIENBIC0gRzIwHhcNMDYxMDI1MDgzMDM1WhcNMzYxMDI1MDgzMDM1WjBF
+-MQswCQYDVQQGEwJDSDEVMBMGA1UEChMMU3dpc3NTaWduIEFHMR8wHQYDVQQDExZT
+-d2lzc1NpZ24gR29sZCBDQSAtIEcyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
+-CgKCAgEAr+TufoskDhJuqVAtFkQ7kpJcyrhdhJJCEyq8ZVeCQD5XJM1QiyUqt2/8
+-76LQwB8CJEoTlo8jE+YoWACjR8cGp4QjK7u9lit/VcyLwVcfDmJlD909Vopz2q5+
+-bbqBHH5CjCA12UNNhPqE21Is8w4ndwtrvxEvcnifLtg+5hg3Wipy+dpikJKVyh+c
+-6bM8K8vzARO/Ws/BtQpgvd21mWRTuKCWs2/iJneRjOBiEAKfNA+k1ZIzUd6+jbqE
+-emA8atufK+ze3gE/bk3lUIbLtK/tREDFylqM2tIrfKjuvqblCqoOpd8FUrdVxyJd
+-MmqXl2MT28nbeTZ7hTpKxVKJ+STnnXepgv9VHKVxaSvRAiTysybUa9oEVeXBCsdt
+-MDeQKuSeFDNeFhdVxVu1yzSJkvGdJo+hB9TGsnhQ2wwMC3wLjEHXuendjIj3o02y
+-MszYF9rNt85mndT9Xv+9lz4pded+p2JYryU0pUHHPbwNUMoDAw8IWh+Vc3hiv69y
+-FGkOpeUDDniOJihC8AcLYiAQZzlG+qkDzAQ4embvIIO1jEpWjpEA/I5cgt6IoMPi
+-aG59je883WX0XaxR7ySArqpWl2/5rX3aYT+YdzylkbYcjCbaZaIJbcHiVOO5ykxM
+-gI93e2CaHt+28kgeDrpOVG2Y4OGiGqJ3UM/EY5LsRxmd6+ZrzsECAwEAAaOBrDCB
+-qTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUWyV7
+-lqRlUX64OfPAeGZe6Drn8O4wHwYDVR0jBBgwFoAUWyV7lqRlUX64OfPAeGZe6Drn
+-8O4wRgYDVR0gBD8wPTA7BglghXQBWQECAQEwLjAsBggrBgEFBQcCARYgaHR0cDov
+-L3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS8wDQYJKoZIhvcNAQEFBQADggIBACe6
+-45R88a7A3hfm5djV9VSwg/S7zV4Fe0+fdWavPOhWfvxyeDgD2StiGwC5+OlgzczO
+-UYrHUDFu4Up+GC9pWbY9ZIEr44OE5iKHjn3g7gKZYbge9LgriBIWhMIxkziWMaa5
+-O1M/wySTVltpkuzFwbs4AOPsF6m43Md8AYOfMke6UiI0HTJ6CVanfCU2qT1L2sCC
+-bwq7EsiHSycR+R4tx5M/nttfJmtS2S6K8RTGRI0Vqbe/vd6mGu6uLftIdxf+u+yv
+-GPUqUfA5hJeVbG4bwyvEdGB5JbAKJ9/fXtI5z0V9QkvfsywexcZdylU6oJxpmo/a
+-77KwPJ+HbBIrZXAVUjEaJM9vMSNQH4xPjyPDdEFjHFWoFN0+4FFQz/EbMFYOkrCC
+-hdiDyyJkvC24JdVUorgG6q2SpCSgwYa1ShNqR88uC1aVVMvOmttqtKay20EIhid3
+-92qgQmwLOM7XdVAyksLfKzAiSNDVQTglXaTpXZ/GlHXQRf0wl0OPkKsKx4ZzYEpp
+-Ld6leNcG2mqeSz53OiATIgHQv2ieY2BrNU0LbbqhPcCT4H8js1WtciVORvnSFu+w
+-ZMEBnunKoGqYDs/YYPIvSbjkQuE4NRb0yG5P94FW6LqjviOvrv1vA+ACOzB2+htt
+-Qc8Bsem4yWb02ybzOqR08kkkW8mw0FfB+j564ZfJ
+------END CERTIFICATE-----
+-
+ # 59769007f7685d0fcd50872f9f95d5755a5b2b457d81f3692b610a98672f0e1b
+ Certificate:
+ Data:
+@@ -7381,126 +5523,6 @@ aGHQRiapIVJpLesux+t3zqY6tQMzT3bR51xUAV3LePTJDL/PEo4XLSNolOer/qmy
+ KwbQBM0=
+ -----END CERTIFICATE-----
+
+-# dd6936fe21f8f077c123a1a521c12224f72255b73e03a7260693e8a24b0fa389
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number:
+- 95:be:16:a0:f7:2e:46:f1:7b:39:82:72:fa:8b:cd:96
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: O = TeliaSonera, CN = TeliaSonera Root CA v1
+- Validity
+- Not Before: Oct 18 12:00:50 2007 GMT
+- Not After : Oct 18 12:00:50 2032 GMT
+- Subject: O = TeliaSonera, CN = TeliaSonera Root CA v1
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public-Key: (4096 bit)
+- Modulus:
+- 00:c2:be:eb:27:f0:21:a3:f3:69:26:55:7e:9d:c5:
+- 55:16:91:5c:fd:ef:21:bf:53:80:7a:2d:d2:91:8c:
+- 63:31:f0:ec:24:f0:c3:a5:d2:72:7c:10:6d:f4:37:
+- b7:e5:e6:7c:79:ea:8c:b5:82:8b:ae:48:b6:ac:00:
+- dc:65:75:ec:2a:4d:5f:c1:87:f5:20:65:2b:81:a8:
+- 47:3e:89:23:95:30:16:90:7f:e8:57:07:48:e7:19:
+- ae:bf:45:67:b1:37:1b:06:2a:fe:de:f9:ac:7d:83:
+- fb:5e:ba:e4:8f:97:67:be:4b:8e:8d:64:07:57:38:
+- 55:69:34:36:3d:13:48:ef:4f:e2:d3:66:1e:a4:cf:
+- 1a:b7:5e:36:33:d4:b4:06:bd:18:01:fd:77:84:50:
+- 00:45:f5:8c:5d:e8:23:bc:7e:fe:35:e1:ed:50:7b:
+- a9:30:8d:19:d3:09:8e:68:67:5d:bf:3c:97:18:53:
+- bb:29:62:c5:ca:5e:72:c1:c7:96:d4:db:2d:a0:b4:
+- 1f:69:03:ec:ea:e2:50:f1:0c:3c:f0:ac:f3:53:2d:
+- f0:1c:f5:ed:6c:39:39:73:80:16:c8:52:b0:23:cd:
+- e0:3e:dc:dd:3c:47:a0:bb:35:8a:e2:98:68:8b:be:
+- e5:bf:72:ee:d2:fa:a5:ed:12:ed:fc:98:18:a9:26:
+- 76:dc:28:4b:10:20:1c:d3:7f:16:77:2d:ed:6f:80:
+- f7:49:bb:53:05:bb:5d:68:c7:d4:c8:75:16:3f:89:
+- 5a:8b:f7:17:47:d4:4c:f1:d2:89:79:3e:4d:3d:98:
+- a8:61:de:3a:1e:d2:f8:5e:03:e0:c1:c9:1c:8c:d3:
+- 8d:4d:d3:95:36:b3:37:5f:63:63:9b:33:14:f0:2d:
+- 26:6b:53:7c:89:8c:32:c2:6e:ec:3d:21:00:39:c9:
+- a1:68:e2:50:83:2e:b0:3a:2b:f3:36:a0:ac:2f:e4:
+- 6f:61:c2:51:09:39:3e:8b:53:b9:bb:67:da:dc:53:
+- b9:76:59:36:9d:43:e5:20:e0:3d:32:60:85:22:51:
+- b7:c7:33:bb:dd:15:2f:a4:78:a6:07:7b:81:46:36:
+- 04:86:dd:79:35:c7:95:2c:3b:b0:a3:17:35:e5:73:
+- 1f:b4:5c:59:ef:da:ea:10:65:7b:7a:d0:7f:9f:b3:
+- b4:2a:37:3b:70:8b:9b:5b:b9:2b:b7:ec:b2:51:12:
+- 97:53:29:5a:d4:f0:12:10:dc:4f:02:bb:12:92:2f:
+- 62:d4:3f:69:43:7c:0d:d6:fc:58:75:01:88:9d:58:
+- 16:4b:de:ba:90:ff:47:01:89:06:6a:f6:5f:b2:90:
+- 6a:b3:02:a6:02:88:bf:b3:47:7e:2a:d9:d5:fa:68:
+- 78:35:4d
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints: critical
+- CA:TRUE
+- X509v3 Key Usage:
+- Certificate Sign, CRL Sign
+- X509v3 Subject Key Identifier:
+- F0:8F:59:38:00:B3:F5:8F:9A:96:0C:D5:EB:FA:7B:AA:17:E8:13:12
+- Signature Algorithm: sha1WithRSAEncryption
+- be:e4:5c:62:4e:24:f4:0c:08:ff:f0:d3:0c:68:e4:93:49:22:
+- 3f:44:27:6f:bb:6d:de:83:66:ce:a8:cc:0d:fc:f5:9a:06:e5:
+- 77:14:91:eb:9d:41:7b:99:2a:84:e5:ff:fc:21:c1:5d:f0:e4:
+- 1f:57:b7:75:a9:a1:5f:02:26:ff:d7:c7:f7:4e:de:4f:f8:f7:
+- 1c:46:c0:7a:4f:40:2c:22:35:f0:19:b1:d0:6b:67:2c:b0:a8:
+- e0:c0:40:37:35:f6:84:5c:5c:e3:af:42:78:fe:a7:c9:0d:50:
+- ea:0d:84:76:f6:51:ef:83:53:c6:7a:ff:0e:56:49:2e:8f:7a:
+- d6:0c:e6:27:54:e3:4d:0a:60:72:62:cd:91:07:d6:a5:bf:c8:
+- 99:6b:ed:c4:19:e6:ab:4c:11:38:c5:6f:31:e2:6e:49:c8:3f:
+- 76:80:26:03:26:29:e0:36:f6:f6:20:53:e3:17:70:34:17:9d:
+- 63:68:1e:6b:ec:c3:4d:86:b8:13:30:2f:5d:46:0d:47:43:d5:
+- 1b:aa:59:0e:b9:5c:8d:06:48:ad:74:87:5f:c7:fc:31:54:41:
+- 13:e2:c7:21:0e:9e:e0:1e:0d:e1:c0:7b:43:85:90:c5:8a:58:
+- c6:65:0a:78:57:f2:c6:23:0f:01:d9:20:4b:de:0f:fb:92:85:
+- 75:2a:5c:73:8d:6d:7b:25:91:ca:ee:45:ae:06:4b:00:cc:d3:
+- b1:59:50:da:3a:88:3b:29:43:46:5e:97:2b:54:ce:53:6f:8d:
+- 4a:e7:96:fa:bf:71:0e:42:8b:7c:fd:28:a0:d0:48:ca:da:c4:
+- 81:4c:bb:a2:73:93:26:c8:eb:0c:d6:26:88:b6:c0:24:cf:bb:
+- bd:5b:eb:75:7d:e9:08:8e:86:33:2c:79:77:09:69:a5:89:fc:
+- b3:70:90:87:76:8f:d3:22:bb:42:ce:bd:73:0b:20:26:2a:d0:
+- 9b:3d:70:1e:24:6c:cd:87:76:a9:17:96:b7:cf:0d:92:fb:8e:
+- 18:a9:98:49:d1:9e:fe:60:44:72:21:b9:19:ed:c2:f5:31:f1:
+- 39:48:88:90:24:75:54:16:ad:ce:f4:f8:69:14:64:39:fb:a3:
+- b8:ba:70:40:c7:27:1c:bf:c4:56:53:fa:63:65:d0:f3:1c:0e:
+- 16:f5:6b:86:58:4d:18:d4:e4:0d:8e:a5:9d:5b:91:dc:76:24:
+- 50:3f:c6:2a:fb:d9:b7:9c:b5:d6:e6:d0:d9:e8:19:8b:15:71:
+- 48:ad:b7:ea:d8:59:88:d4:90:bf:16:b3:d9:e9:ac:59:61:54:
+- c8:1c:ba:ca:c1:ca:e1:b9:20:4c:8f:3a:93:89:a5:a0:cc:bf:
+- d3:f6:75:a4:75:96:6d:56
+------BEGIN CERTIFICATE-----
+-MIIFODCCAyCgAwIBAgIRAJW+FqD3LkbxezmCcvqLzZYwDQYJKoZIhvcNAQEFBQAw
+-NzEUMBIGA1UECgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJv
+-b3QgQ0EgdjEwHhcNMDcxMDE4MTIwMDUwWhcNMzIxMDE4MTIwMDUwWjA3MRQwEgYD
+-VQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UEAwwWVGVsaWFTb25lcmEgUm9vdCBDQSB2
+-MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMK+6yfwIaPzaSZVfp3F
+-VRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65ItqwA3GV1
+-7CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+X
+-Z75Ljo1kB1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+
+-/jXh7VB7qTCNGdMJjmhnXb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs
+-81Mt8Bz17Ww5OXOAFshSsCPN4D7c3TxHoLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkm
+-dtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+JWov3F0fUTPHSiXk+TT2YqGHe
+-Oh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0hADnJoWjiUIMu
+-sDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4
+-pgd7gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fs
+-slESl1MpWtTwEhDcTwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQ
+-arMCpgKIv7NHfirZ1fpoeDVNAgMBAAGjPzA9MA8GA1UdEwEB/wQFMAMBAf8wCwYD
+-VR0PBAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1j5qWDNXr+nuqF+gTEjANBgkqhkiG
+-9w0BAQUFAAOCAgEAvuRcYk4k9AwI//DTDGjkk0kiP0Qnb7tt3oNmzqjMDfz1mgbl
+-dxSR651Be5kqhOX//CHBXfDkH1e3damhXwIm/9fH907eT/j3HEbAek9ALCI18Bmx
+-0GtnLLCo4MBANzX2hFxc469CeP6nyQ1Q6g2EdvZR74NTxnr/DlZJLo961gzmJ1Tj
+-TQpgcmLNkQfWpb/ImWvtxBnmq0wROMVvMeJuScg/doAmAyYp4Db29iBT4xdwNBed
+-Y2gea+zDTYa4EzAvXUYNR0PVG6pZDrlcjQZIrXSHX8f8MVRBE+LHIQ6e4B4N4cB7
+-Q4WQxYpYxmUKeFfyxiMPAdkgS94P+5KFdSpcc41teyWRyu5FrgZLAMzTsVlQ2jqI
+-OylDRl6XK1TOU2+NSueW+r9xDkKLfP0ooNBIytrEgUy7onOTJsjrDNYmiLbAJM+7
+-vVvrdX3pCI6GMyx5dwlppYn8s3CQh3aP0yK7Qs69cwsgJirQmz1wHiRszYd2qReW
+-t88NkvuOGKmYSdGe/mBEciG5Ge3C9THxOUiIkCR1VBatzvT4aRRkOfujuLpwQMcn
+-HL/EVlP6Y2XQ8xwOFvVrhlhNGNTkDY6lnVuR3HYkUD/GKvvZt5y11ubQ2egZixVx
+-SK236thZiNSQvxaz2emsWWFUyBy6ysHK4bkgTI86k4mloMy/0/Z1pHWWbVY=
+------END CERTIFICATE-----
+-
+ # 6b328085625318aa50d173c98d8bda09d57e27413d114cf787a0f5d06c030cf6
+ Certificate:
+ Data:
+@@ -10879,4 +8901,509 @@ L4x35bcF7DvB7L6Gs4a8wPfc5+pbrrLMtTWGS9DiP7bY+A4A7l3j941Y/8+LN+lj
+ X273CXE2whJdV/LItM3z7gLfEdxquVeEHVlNjM7IDiPCtyaaEBRx/pOyiriA8A4Q
+ ntOoUAw3gi/q4Iqd4Sw5/7W0cwDk90imc6y/st53BIe0o82bNSQ3+pCTE4FCxpgm
+ dTdmQRCsu/WU48IxK63nI1bMNSWSs1A=
++-----END CERTIFICATE-----
++
++# b49141502d00663d740f2e7ec340c52800962666121a36d09cf7dd2b90384fb4
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ e8:6f:18:7b:d6:39:6b:98:4a:49:98:0a
++ Signature Algorithm: ecdsa-with-SHA512
++ Issuer: C=HU, L=Budapest, O=Microsec Ltd., organizationIdentifier=VATHU-23584497, CN=e-Szigno TLS Root CA 2023
++ Validity
++ Not Before: Jul 17 14:00:00 2023 GMT
++ Not After : Jul 17 14:00:00 2038 GMT
++ Subject: C=HU, L=Budapest, O=Microsec Ltd., organizationIdentifier=VATHU-23584497, CN=e-Szigno TLS Root CA 2023
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (521 bit)
++ pub:
++ 04:00:68:0f:df:a2:7c:3c:aa:74:88:61:0a:8d:c2:
++ 4c:a5:01:22:14:d4:f7:60:77:42:9c:0a:38:60:a1:
++ 8c:67:3e:b3:63:e9:fa:91:b0:8b:4b:e6:39:df:02:
++ c2:30:01:52:00:bf:df:8c:ed:59:ad:32:65:ab:09:
++ 59:50:b5:19:c2:68:1c:00:e0:05:5f:da:50:26:1c:
++ c3:ac:04:22:c5:3a:4d:ef:e9:57:58:36:a3:c1:19:
++ 53:10:0a:d1:cd:3f:ef:4b:35:1a:43:8f:42:13:4c:
++ b9:2c:1a:9c:be:30:b6:c4:de:dc:4b:9d:e4:a4:3c:
++ cb:2e:d9:ad:df:df:7d:09:df:2e:92:ff:a1
++ ASN1 OID: secp521r1
++ NIST CURVE: P-521
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ 59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
++ X509v3 Authority Key Identifier:
++ 59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
++ Signature Algorithm: ecdsa-with-SHA512
++ Signature Value:
++ 30:81:87:02:42:01:2d:da:ae:f5:2e:78:b6:66:b8:9f:b6:70:
++ 7f:66:74:cf:ec:8e:7c:fe:c0:01:79:9a:ce:52:02:e7:c3:d1:
++ 0c:7a:6d:cb:b5:5e:ee:17:a4:9b:db:04:76:ee:29:29:e8:af:
++ fb:ad:ac:52:f4:d7:2b:d6:77:84:10:bd:c5:d2:28:68:34:02:
++ 41:35:76:5a:75:f3:92:86:08:f5:b2:1e:0a:f6:65:0b:da:76:
++ c7:52:ff:0b:1e:80:70:22:30:c3:33:db:18:ed:84:d7:8b:ec:
++ ed:d3:a8:63:81:b5:56:7c:47:c7:56:30:94:68:73:6b:d2:2e:
++ a9:b9:d9:2c:1c:29:bd:0c:ba:b9:65:8b
++-----BEGIN CERTIFICATE-----
++MIICzzCCAjGgAwIBAgINAOhvGHvWOWuYSkmYCjAKBggqhkjOPQQDBDB1MQswCQYD
++VQQGEwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFjAUBgNVBAoMDU1pY3Jvc2VjIEx0
++ZC4xFzAVBgNVBGEMDlZBVEhVLTIzNTg0NDk3MSIwIAYDVQQDDBllLVN6aWdubyBU
++TFMgUm9vdCBDQSAyMDIzMB4XDTIzMDcxNzE0MDAwMFoXDTM4MDcxNzE0MDAwMFow
++dTELMAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRYwFAYDVQQKDA1NaWNy
++b3NlYyBMdGQuMRcwFQYDVQRhDA5WQVRIVS0yMzU4NDQ5NzEiMCAGA1UEAwwZZS1T
++emlnbm8gVExTIFJvb3QgQ0EgMjAyMzCBmzAQBgcqhkjOPQIBBgUrgQQAIwOBhgAE
++AGgP36J8PKp0iGEKjcJMpQEiFNT3YHdCnAo4YKGMZz6zY+n6kbCLS+Y53wLCMAFS
++AL/fjO1ZrTJlqwlZULUZwmgcAOAFX9pQJhzDrAQixTpN7+lXWDajwRlTEArRzT/v
++SzUaQ49CE0y5LBqcvjC2xN7cS53kpDzLLtmt3999Cd8ukv+ho2MwYTAPBgNVHRMB
++Af8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUWYQCYlpGePVd3I8K
++ECgj3NXW+0UwHwYDVR0jBBgwFoAUWYQCYlpGePVd3I8KECgj3NXW+0UwCgYIKoZI
++zj0EAwQDgYsAMIGHAkIBLdqu9S54tma4n7Zwf2Z0z+yOfP7AAXmazlIC58PRDHpt
++y7Ve7hekm9sEdu4pKeiv+62sUvTXK9Z3hBC9xdIoaDQCQTV2WnXzkoYI9bIeCvZl
++C9p2x1L/Cx6AcCIwwzPbGO2E14vs7dOoY4G1VnxHx1YwlGhza9IuqbnZLBwpvQy6
++uWWL
++-----END CERTIFICATE-----
++
++# eec997c0c30f216f7e3b8b307d2bae42412d753fc8219dafd1520b2572850f49
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 23:f9:c3:d6:35:af:8f:28:4b:1f:f0:54:ea:7e:97:9d
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C=CH, O=OISTE Foundation, CN=OISTE Server Root ECC G1
++ Validity
++ Not Before: May 31 14:42:28 2023 GMT
++ Not After : May 24 14:42:27 2048 GMT
++ Subject: C=CH, O=OISTE Foundation, CN=OISTE Server Root ECC G1
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:17:2f:fa:12:bc:ac:18:f3:0a:f4:44:d6:76:42:
++ 9e:b3:e8:1f:b7:79:a9:58:b6:f8:65:d1:3a:21:4f:
++ a8:eb:a3:be:a4:32:72:f3:b6:01:c9:2b:fd:77:85:
++ 6e:53:dd:ad:ea:aa:2e:25:92:b6:e9:21:11:a8:af:
++ b5:4c:0b:f3:96:60:9a:3b:e7:ea:1a:78:2e:b4:3d:
++ e5:28:de:1c:80:ba:5c:6e:0d:db:19:a5:e3:3f:9c:
++ 2a:b8:40:4b:dd:e6:4f
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ 37:4D:88:65:CF:FC:3D:8A:D5:A3:F1:49:C0:4E:0C:10:6F:42:B4:9C
++ X509v3 Subject Key Identifier:
++ 37:4D:88:65:CF:FC:3D:8A:D5:A3:F1:49:C0:4E:0C:10:6F:42:B4:9C
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: ecdsa-with-SHA384
++ Signature Value:
++ 30:66:02:31:00:a9:2a:30:1d:d0:c2:9f:90:51:51:40:3e:95:
++ 54:21:cd:16:66:f7:53:6c:08:16:39:d0:12:7c:7f:63:1b:df:
++ e3:38:00:39:d9:2d:53:20:45:0b:1c:60:67:31:43:25:ed:02:
++ 31:00:92:89:ae:e9:5c:62:83:62:61:f9:2d:57:ab:56:b9:11:
++ dd:25:be:6a:4e:4a:1a:82:6b:dc:cf:d3:bc:4a:b3:3c:d7:2e:
++ 9b:db:f8:28:69:bc:6b:2d:ec:31:a1:3a:e3:57
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 9ae36232a5189ffddb353dfd26520c015395d22777dac59db57b98c089a651e6
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 55:a5:d9:67:94:28:c6:ed:0c:fa:27:dd:5b:01:4d:18
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C=CH, O=OISTE Foundation, CN=OISTE Server Root RSA G1
++ Validity
++ Not Before: May 31 14:37:16 2023 GMT
++ Not After : May 24 14:37:15 2048 GMT
++ Subject: C=CH, O=OISTE Foundation, CN=OISTE Server Root RSA G1
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:aa:ae:f4:ab:82:cf:fb:e5:37:0b:e7:d5:96:ad:
++ 90:e8:4b:29:dc:55:60:e3:cc:bc:b3:bc:2d:92:b9:
++ e4:a3:7a:f1:81:b4:9e:72:72:43:df:3f:ab:0b:26:
++ b4:ee:7b:1a:69:fb:28:d0:72:5c:4a:6d:69:99:f0:
++ 63:1e:0c:d2:b1:ff:d6:8c:34:d0:ee:db:ac:48:b9:
++ ea:b0:14:8e:d8:07:a9:24:98:dd:e9:09:be:a8:22:
++ 1b:59:39:d1:27:87:dc:1c:cd:f8:fb:b3:eb:e9:93:
++ 78:ed:0f:ce:37:7c:26:77:6e:a1:d8:2c:21:4c:e4:
++ 8a:4f:c7:13:3c:6e:c7:d5:13:97:b2:a8:db:24:69:
++ 83:56:d3:69:cb:82:12:bb:9d:1b:f2:f8:34:f2:98:
++ 2b:2a:8e:04:67:f6:e3:87:a1:1d:ad:6e:ce:36:74:
++ 0e:5e:33:3b:cb:db:51:97:94:6a:95:3c:ce:18:5a:
++ 6e:4b:c6:fc:07:8f:2e:1a:b9:4a:f7:64:34:29:dc:
++ a6:8d:50:e1:8d:8b:4b:e5:48:1b:6e:2e:80:10:3f:
++ e4:9f:1b:65:3f:11:b4:ea:57:69:9f:b4:00:eb:85:
++ 24:99:24:f5:21:9d:97:aa:fb:34:7f:02:6b:15:90:
++ ad:bb:9e:5a:19:7f:a4:8c:d8:fa:6d:28:fc:38:c7:
++ e3:4c:ad:6a:ce:d9:4e:93:92:8e:cc:0c:67:bf:0b:
++ 4b:96:ce:66:67:53:68:cb:17:11:8e:59:f7:ac:9c:
++ 1b:b9:8e:68:44:b7:18:af:e6:e5:0f:65:dc:95:09:
++ b0:93:12:b5:1f:3e:94:a5:c7:88:75:21:b1:de:09:
++ 24:2a:4c:e2:bc:ec:4c:67:47:c2:29:88:b9:0a:ba:
++ f9:c1:74:ce:8c:18:26:65:da:f7:6f:c6:8c:7b:68:
++ 5c:0b:ee:63:c0:5e:4b:f1:4e:cc:9f:2f:0f:e1:e8:
++ 9a:7a:93:f1:e0:c8:db:bf:27:e6:65:29:7b:36:e0:
++ 33:15:73:f2:9d:6b:84:08:68:2b:36:07:2b:27:cc:
++ 78:d8:6a:87:0e:47:74:f4:aa:a0:13:5d:64:7e:f4:
++ db:14:ae:fb:3a:e4:2f:c1:65:e3:b9:7a:40:6c:f0:
++ 06:b7:7b:28:9b:d7:e1:5f:38:73:94:ac:d9:70:93:
++ 2d:dc:84:af:46:1c:a2:7a:2c:3f:81:26:42:e7:d4:
++ d8:c5:6c:84:66:11:8b:77:6b:54:1c:a3:b5:d8:10:
++ f0:ae:29:f7:67:08:88:17:5c:b8:97:79:cf:ea:2b:
++ 2a:ee:58:33:e5:6d:e9:29:aa:65:01:0d:82:13:ec:
++ 25:0b:5d:2c:40:72:15:29:d3:90:2c:f7:1a:43:d5:
++ 6a:f0:69
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ F2:C9:C1:0F:0D:63:00:BB:EC:45:0E:4A:1F:B5:B1:B3:36:CD:0E:8D
++ X509v3 Subject Key Identifier:
++ F2:C9:C1:0F:0D:63:00:BB:EC:45:0E:4A:1F:B5:B1:B3:36:CD:0E:8D
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: sha384WithRSAEncryption
++ Signature Value:
++ 34:67:79:b2:3a:c6:e5:3d:f7:23:72:b9:09:ef:92:ad:27:1f:
++ a0:4e:0a:b2:f5:da:17:0c:a2:85:d2:7e:92:51:fd:15:65:d7:
++ 5c:6b:64:16:ee:8a:45:ca:0c:43:36:44:35:d9:7f:fe:79:3a:
++ 1c:e8:c6:e4:3d:6b:77:d4:21:10:e3:f6:f3:20:4e:a9:be:89:
++ f3:1c:9c:a9:df:bc:30:3a:17:d1:32:43:d0:aa:8a:72:1c:51:
++ 28:4c:dd:36:c8:e4:2d:67:7d:91:87:1c:9d:bc:fc:ab:28:96:
++ 5e:61:5c:b8:22:33:18:48:16:50:ea:ca:2f:e9:a5:49:dc:7f:
++ 3c:a4:19:bc:36:ad:92:e2:b9:f4:4b:d5:eb:08:ad:e7:78:fe:
++ 17:c0:5d:87:77:e8:67:77:4f:00:66:af:f4:b1:03:3a:be:12:
++ 7c:41:35:e5:f4:a6:1b:47:8b:cb:79:f7:d6:bf:17:6e:4e:65:
++ f0:f8:da:57:c1:94:81:e5:7a:56:0d:bb:46:7f:6f:91:fd:7d:
++ e6:17:e4:81:27:bb:05:88:56:dd:20:a5:f7:98:2d:91:19:69:
++ 31:5f:9b:30:f2:99:ad:72:40:96:cc:d8:77:66:9b:b4:d5:0e:
++ b2:10:fe:14:aa:c3:80:71:9d:3d:8d:e8:7d:14:6c:61:64:86:
++ 46:a6:d7:54:c5:b6:d7:90:16:46:a5:85:ca:9e:3a:e3:e6:13:
++ 16:b6:15:23:cc:a9:29:52:fd:00:c6:f6:90:8e:56:8f:89:08:
++ dd:96:aa:e6:d3:6a:a9:86:35:f6:d5:45:78:42:4a:46:fc:03:
++ c8:5e:d8:66:f6:45:65:24:b4:be:87:7b:55:20:9d:f7:9d:b5:
++ 2a:fc:b9:62:19:cb:6c:3b:af:d3:6d:38:6c:ab:7b:a6:1e:8d:
++ fc:e9:9e:fe:6b:15:b9:db:82:9a:cb:98:df:73:a1:90:a0:a0:
++ c5:e0:e8:01:a8:a3:14:9c:c8:c1:9a:ac:15:50:33:8d:ed:7c:
++ 2a:8b:73:95:40:43:26:fc:81:a4:2a:5f:39:90:b7:27:cb:51:
++ 77:f8:96:93:1e:cf:f2:77:7d:1f:46:93:a2:59:1e:95:44:c5:
++ 2d:75:64:b0:d6:f9:e0:3c:69:ea:04:b5:1c:0b:e2:46:44:4d:
++ 43:3b:97:49:71:11:bd:24:b6:c2:ad:72:54:06:fe:6b:18:f9:
++ 77:db:29:2c:52:9e:6d:77:7b:62:fd:0f:4d:8e:98:32:30:30:
++ 71:12:d6:25:35:e3:9f:f8:6f:9c:b5:eb:6a:1b:ad:ea:10:d3:
++ 96:16:72:06:21:25:c6:4c:bc:8f:70:bb:0c:e4:5e:22:83:2d:
++ d2:be:fe:85:5b:b4:e4:bd
++-----BEGIN CERTIFICATE-----
++MIIFgzCCA2ugAwIBAgIQVaXZZ5Qoxu0M+ifdWwFNGDANBgkqhkiG9w0BAQwFADBL
++MQswCQYDVQQGEwJDSDEZMBcGA1UECgwQT0lTVEUgRm91bmRhdGlvbjEhMB8GA1UE
++AwwYT0lTVEUgU2VydmVyIFJvb3QgUlNBIEcxMB4XDTIzMDUzMTE0MzcxNloXDTQ4
++MDUyNDE0MzcxNVowSzELMAkGA1UEBhMCQ0gxGTAXBgNVBAoMEE9JU1RFIEZvdW5k
++YXRpb24xITAfBgNVBAMMGE9JU1RFIFNlcnZlciBSb290IFJTQSBHMTCCAiIwDQYJ
++KoZIhvcNAQEBBQADggIPADCCAgoCggIBAKqu9KuCz/vlNwvn1ZatkOhLKdxVYOPM
++vLO8LZK55KN68YG0nnJyQ98/qwsmtO57Gmn7KNByXEptaZnwYx4M0rH/1ow00O7b
++rEi56rAUjtgHqSSY3ekJvqgiG1k50SeH3BzN+Puz6+mTeO0Pzjd8JnduodgsIUzk
++ik/HEzxux9UTl7Ko2yRpg1bTacuCErudG/L4NPKYKyqOBGf244ehHa1uzjZ0Dl4z
++O8vbUZeUapU8zhhabkvG/AePLhq5SvdkNCncpo1Q4Y2LS+VIG24ugBA/5J8bZT8R
++tOpXaZ+0AOuFJJkk9SGdl6r7NH8CaxWQrbueWhl/pIzY+m0o/DjH40ytas7ZTpOS
++jswMZ78LS5bOZmdTaMsXEY5Z96ycG7mOaES3GK/m5Q9l3JUJsJMStR8+lKXHiHUh
++sd4JJCpM4rzsTGdHwimIuQq6+cF0zowYJmXa92/GjHtoXAvuY8BeS/FOzJ8vD+Ho
++mnqT8eDI278n5mUpezbgMxVz8p1rhAhoKzYHKyfMeNhqhw5HdPSqoBNdZH702xSu
+++zrkL8Fl47l6QGzwBrd7KJvX4V84c5Ss2XCTLdyEr0YconosP4EmQufU2MVshGYR
++i3drVByjtdgQ8K4p92cIiBdcuJd5z+orKu5YM+Vt6SmqZQENghPsJQtdLEByFSnT
++kCz3GkPVavBpAgMBAAGjYzBhMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU
++8snBDw1jALvsRQ5KH7WxszbNDo0wHQYDVR0OBBYEFPLJwQ8NYwC77EUOSh+1sbM2
++zQ6NMA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQwFAAOCAgEANGd5sjrG5T33
++I3K5Ce+SrScfoE4KsvXaFwyihdJ+klH9FWXXXGtkFu6KRcoMQzZENdl//nk6HOjG
++5D1rd9QhEOP28yBOqb6J8xycqd+8MDoX0TJD0KqKchxRKEzdNsjkLWd9kYccnbz8
++qyiWXmFcuCIzGEgWUOrKL+mlSdx/PKQZvDatkuK59EvV6wit53j+F8Bdh3foZ3dP
++AGav9LEDOr4SfEE15fSmG0eLy3n31r8Xbk5l8PjaV8GUgeV6Vg27Rn9vkf195hfk
++gSe7BYhW3SCl95gtkRlpMV+bMPKZrXJAlszYd2abtNUOshD+FKrDgHGdPY3ofRRs
++YWSGRqbXVMW215AWRqWFyp464+YTFrYVI8ypKVL9AMb2kI5Wj4kI3Zaq5tNqqYY1
++9tVFeEJKRvwDyF7YZvZFZSS0vod7VSCd9521Kvy5YhnLbDuv0204bKt7ph6N/Ome
++/msVuduCmsuY33OhkKCgxeDoAaijFJzIwZqsFVAzje18KotzlUBDJvyBpCpfOZC3
++J8tRd/iWkx7P8nd9H0aTolkelUTFLXVksNb54Dxp6gS1HAviRkRNQzuXSXERvSS2
++wq1yVAb+axj5d9spLFKebXd7Yv0PTY6YMjAwcRLWJTXjn/hvnLXrahut6hDTlhZy
++BiElxky8j3C7DOReIoMt0r7+hVu05L0=
++-----END CERTIFICATE-----
++
++# 552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4
++ Validity
++ Not Before: Aug 1 12:00:00 2013 GMT
++ Not After : Jan 15 12:00:00 2038 GMT
++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:bf:e6:90:73:68:de:bb:e4:5d:4a:3c:30:22:30:
++ 69:33:ec:c2:a7:25:2e:c9:21:3d:f2:8a:d8:59:c2:
++ e1:29:a7:3d:58:ab:76:9a:cd:ae:7b:1b:84:0d:c4:
++ 30:1f:f3:1b:a4:38:16:eb:56:c6:97:6d:1d:ab:b2:
++ 79:f2:ca:11:d2:e4:5f:d6:05:3c:52:0f:52:1f:c6:
++ 9e:15:a5:7e:be:9f:a9:57:16:59:55:72:af:68:93:
++ 70:c2:b2:ba:75:99:6a:73:32:94:d1:10:44:10:2e:
++ df:82:f3:07:84:e6:74:3b:6d:71:e2:2d:0c:1b:ee:
++ 20:d5:c9:20:1d:63:29:2d:ce:ec:5e:4e:c8:93:f8:
++ 21:61:9b:34:eb:05:c6:5e:ec:5b:1a:bc:eb:c9:cf:
++ cd:ac:34:40:5f:b1:7a:66:ee:77:c8:48:a8:66:57:
++ 57:9f:54:58:8e:0c:2b:b7:4f:a7:30:d9:56:ee:ca:
++ 7b:5d:e3:ad:c9:4f:5e:e5:35:e7:31:cb:da:93:5e:
++ dc:8e:8f:80:da:b6:91:98:40:90:79:c3:78:c7:b6:
++ b1:c4:b5:6a:18:38:03:10:8d:d8:d4:37:a4:2e:05:
++ 7d:88:f5:82:3e:10:91:70:ab:55:82:41:32:d7:db:
++ 04:73:2a:6e:91:01:7c:21:4c:d4:bc:ae:1b:03:75:
++ 5d:78:66:d9:3a:31:44:9a:33:40:bf:08:d7:5a:49:
++ a4:c2:e6:a9:a0:67:dd:a4:27:bc:a1:4f:39:b5:11:
++ 58:17:f7:24:5c:46:8f:64:f7:c1:69:88:76:98:76:
++ 3d:59:5d:42:76:87:89:97:69:7a:48:f0:e0:a2:12:
++ 1b:66:9a:74:ca:de:4b:1e:e7:0e:63:ae:e6:d4:ef:
++ 92:92:3a:9e:3d:dc:00:e4:45:25:89:b6:9a:44:19:
++ 2b:7e:c0:94:b4:d2:61:6d:eb:33:d9:c5:df:4b:04:
++ 00:cc:7d:1c:95:c3:8f:f7:21:b2:b2:11:b7:bb:7f:
++ f2:d5:8c:70:2c:41:60:aa:b1:63:18:44:95:1a:76:
++ 62:7e:f6:80:b0:fb:e8:64:a6:33:d1:89:07:e1:bd:
++ b7:e6:43:a4:18:b8:a6:77:01:e1:0f:94:0c:21:1d:
++ b2:54:29:25:89:6c:e5:0e:52:51:47:74:be:26:ac:
++ b6:41:75:de:7a:ac:5f:8d:3f:c9:bc:d3:41:11:12:
++ 5b:e5:10:50:eb:31:c5:ca:72:16:22:09:df:7c:4c:
++ 75:3f:63:ec:21:5f:c4:20:51:6b:6f:b1:ab:86:8b:
++ 4f:c2:d6:45:5f:9d:20:fc:a1:1e:c5:c0:8f:a2:b1:
++ 7e:0a:26:99:f5:e4:69:2f:98:1d:2d:f5:d9:a9:b2:
++ 1d:e5:1b
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ EC:D7:E3:82:D2:71:5D:64:4C:DF:2E:67:3F:E7:BA:98:AE:1C:0F:4F
++ Signature Algorithm: sha384WithRSAEncryption
++ bb:61:d9:7d:a9:6c:be:17:c4:91:1b:c3:a1:a2:00:8d:e3:64:
++ 68:0f:56:cf:77:ae:70:f9:fd:9a:4a:99:b9:c9:78:5c:0c:0c:
++ 5f:e4:e6:14:29:56:0b:36:49:5d:44:63:e0:ad:9c:96:18:66:
++ 1b:23:0d:3d:79:e9:6d:6b:d6:54:f8:d2:3c:c1:43:40:ae:1d:
++ 50:f5:52:fc:90:3b:bb:98:99:69:6b:c7:c1:a7:a8:68:a4:27:
++ dc:9d:f9:27:ae:30:85:b9:f6:67:4d:3a:3e:8f:59:39:22:53:
++ 44:eb:c8:5d:03:ca:ed:50:7a:7d:62:21:0a:80:c8:73:66:d1:
++ a0:05:60:5f:e8:a5:b4:a7:af:a8:f7:6d:35:9c:7c:5a:8a:d6:
++ a2:38:99:f3:78:8b:f4:4d:d2:20:0b:de:04:ee:8c:9b:47:81:
++ 72:0d:c0:14:32:ef:30:59:2e:ae:e0:71:f2:56:e4:6a:97:6f:
++ 92:50:6d:96:8d:68:7a:9a:b2:36:14:7a:06:f2:24:b9:09:11:
++ 50:d7:08:b1:b8:89:7a:84:23:61:42:29:e5:a3:cd:a2:20:41:
++ d7:d1:9c:64:d9:ea:26:a1:8b:14:d7:4c:19:b2:50:41:71:3d:
++ 3f:4d:70:23:86:0c:4a:dc:81:d2:cc:32:94:84:0d:08:09:97:
++ 1c:4f:c0:ee:6b:20:74:30:d2:e0:39:34:10:85:21:15:01:08:
++ e8:55:32:de:71:49:d9:28:17:50:4d:e6:be:4d:d1:75:ac:d0:
++ ca:fb:41:b8:43:a5:aa:d3:c3:05:44:4f:2c:36:9b:e2:fa:e2:
++ 45:b8:23:53:6c:06:6f:67:55:7f:46:b5:4c:3f:6e:28:5a:79:
++ 26:d2:a4:a8:62:97:d2:1e:e2:ed:4a:8b:bc:1b:fd:47:4a:0d:
++ df:67:66:7e:b2:5b:41:d0:3b:e4:f4:3b:f4:04:63:e9:ef:c2:
++ 54:00:51:a0:8a:2a:c9:ce:78:cc:d5:ea:87:04:18:b3:ce:af:
++ 49:88:af:f3:92:99:b6:b3:e6:61:0f:d2:85:00:e7:50:1a:e4:
++ 1b:95:9d:19:a1:b9:9c:b1:9b:b1:00:1e:ef:d0:0f:4f:42:6c:
++ c9:0a:bc:ee:43:fa:3a:71:a5:c8:4d:26:a5:35:fd:89:5d:bc:
++ 85:62:1d:32:d2:a0:2b:54:ed:9a:57:c1:db:fa:10:cf:19:b7:
++ 8b:4a:1b:8f:01:b6:27:95:53:e8:b6:89:6d:5b:bc:68:d4:23:
++ e8:8b:51:a2:56:f9:f0:a6:80:a0:d6:1e:b3:bc:0f:0f:53:75:
++ 29:aa:ea:13:77:e4:de:8c:81:21:ad:07:10:47:11:ad:87:3d:
++ 07:d1:75:bc:cf:f3:66:7e
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 7d05ebb682339f8c9451ee094eebfefa7953a114edb2f44949452fab7d2fc185
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 0b:93:1c:3a:d6:39:67:ea:67:23:bf:c3:af:9a:f4:4b
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2
++ Validity
++ Not Before: Aug 1 12:00:00 2013 GMT
++ Not After : Jan 15 12:00:00 2038 GMT
++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:d9:e7:28:2f:52:3f:36:72:49:88:93:34:f3:f8:
++ 6a:1e:31:54:80:9f:ad:54:41:b5:47:df:96:a8:d4:
++ af:80:2d:b9:0a:cf:75:fd:89:a5:7d:24:fa:e3:22:
++ 0c:2b:bc:95:17:0b:33:bf:19:4d:41:06:90:00:bd:
++ 0c:4d:10:fe:07:b5:e7:1c:6e:22:55:31:65:97:bd:
++ d3:17:d2:1e:62:f3:db:ea:6c:50:8c:3f:84:0c:96:
++ cf:b7:cb:03:e0:ca:6d:a1:14:4c:1b:89:dd:ed:00:
++ b0:52:7c:af:91:6c:b1:38:13:d1:e9:12:08:c0:00:
++ b0:1c:2b:11:da:77:70:36:9b:ae:ce:79:87:dc:82:
++ 70:e6:09:74:70:55:69:af:a3:68:9f:bf:dd:b6:79:
++ b3:f2:9d:70:29:55:f4:ab:ff:95:61:f3:c9:40:6f:
++ 1d:d1:be:93:bb:d3:88:2a:bb:9d:bf:72:5a:56:71:
++ 3b:3f:d4:f3:d1:0a:fe:28:ef:a3:ee:d9:99:af:03:
++ d3:8f:60:b7:f2:92:a1:b1:bd:89:89:1f:30:cd:c3:
++ a6:2e:62:33:ae:16:02:77:44:5a:e7:81:0a:3c:a7:
++ 44:2e:79:b8:3f:04:bc:5c:a0:87:e1:1b:af:51:8e:
++ cd:ec:2c:fa:f8:fe:6d:f0:3a:7c:aa:8b:e4:67:95:
++ 31:8d
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ CE:C3:4A:B9:99:55:F2:B8:DB:60:BF:A9:7E:BD:56:B5:97:36:A7:D6
++ Signature Algorithm: sha256WithRSAEncryption
++ ca:a5:55:8c:e3:c8:41:6e:69:27:a7:75:11:ef:3c:86:36:6f:
++ d2:9d:c6:78:38:1d:69:96:a2:92:69:2e:38:6c:9b:7d:04:d4:
++ 89:a5:b1:31:37:8a:c9:21:cc:ab:6c:cd:8b:1c:9a:d6:bf:48:
++ d2:32:66:c1:8a:c0:f3:2f:3a:ef:c0:e3:d4:91:86:d1:50:e3:
++ 03:db:73:77:6f:4a:39:53:ed:de:26:c7:b5:7d:af:2b:42:d1:
++ 75:62:e3:4a:2b:02:c7:50:4b:e0:69:e2:96:6c:0e:44:66:10:
++ 44:8f:ad:05:eb:f8:79:ac:a6:1b:e8:37:34:9d:53:c9:61:aa:
++ a2:52:af:4a:70:16:86:c2:3a:c8:b1:13:70:36:d8:cf:ee:f4:
++ 0a:34:d5:5b:4c:fd:07:9c:a2:ba:d9:01:72:5c:f3:4d:c1:dd:
++ 0e:b1:1c:0d:c4:63:be:ad:f4:14:fb:89:ec:a2:41:0e:4c:cc:
++ c8:57:40:d0:6e:03:aa:cd:0c:8e:89:99:99:6c:f0:3c:30:af:
++ 38:df:6f:bc:a3:be:29:20:27:ab:74:ff:13:22:78:de:97:52:
++ 55:1e:83:b5:54:20:03:ee:ae:c0:4f:56:de:37:cc:c3:7f:aa:
++ 04:27:bb:d3:77:b8:62:db:17:7c:9c:28:22:13:73:6c:cf:26:
++ f5:8a:29:e7
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 7e37cb8b4c47090cab36551ba6f45db840680fba166a952db100717f43053fc2
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 0b:a1:5a:fa:1d:df:a0:b5:49:44:af:cd:24:a0:6c:ec
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3
++ Validity
++ Not Before: Aug 1 12:00:00 2013 GMT
++ Not After : Jan 15 12:00:00 2038 GMT
++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:19:e7:bc:ac:44:65:ed:cd:b8:3f:58:fb:8d:b1:
++ 57:a9:44:2d:05:15:f2:ef:0b:ff:10:74:9f:b5:62:
++ 52:5f:66:7e:1f:e5:dc:1b:45:79:0b:cc:c6:53:0a:
++ 9d:8d:5d:02:d9:a9:59:de:02:5a:f6:95:2a:0e:8d:
++ 38:4a:8a:49:c6:bc:c6:03:38:07:5f:55:da:7e:09:
++ 6e:e2:7f:5e:d0:45:20:0f:59:76:10:d6:a0:24:f0:
++ 2d:de:36:f2:6c:29:39
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ CB:D0:BD:A9:E1:98:05:51:A1:4D:37:A2:83:79:CE:8D:1D:2A:E4:84
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:64:02:30:25:a4:81:45:02:6b:12:4b:75:74:4f:c8:23:e3:
++ 70:f2:75:72:de:7c:89:f0:cf:91:72:61:9e:5e:10:92:59:56:
++ b9:83:c7:10:e7:38:e9:58:26:36:7d:d5:e4:34:86:39:02:30:
++ 7c:36:53:f0:30:e5:62:63:3a:99:e2:b6:a3:3b:9b:34:fa:1e:
++ da:10:92:71:5e:91:13:a7:dd:a4:6e:92:cc:32:d6:f5:21:66:
++ c7:2f:ea:96:63:6a:65:45:92:95:01:b4
++-----BEGIN CERTIFICATE-----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+ -----END CERTIFICATE-----
+\ No newline at end of file
diff --git a/meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch b/meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch
new file mode 100644
index 0000000000..dc8f97ac88
--- /dev/null
+++ b/meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch
@@ -0,0 +1,14324 @@
+From d41d8ee720f48e16b4625e2e1a2d7bce787ed146 Mon Sep 17 00:00:00 2001
+From: Gregory Cooke <gregorycooke@google.com>
+Date: Tue, 16 Jun 2026 11:27:32 -0700
+Subject: [PATCH] Update repo roots to chromium roots (#42094)
+
+The roots that we ship with gRPC have become extremely dated. See https://github.com/grpc/grpc/issues/37602 for more discussion.
+
+This PR replaces them with the Chromium roots and updates the README to describe how to update them.
+
+RELEASE NOTES:
+* Update the fallback repo roots to the current Chromium trust store. These are the roots used if there are none configured by the user and there are none in the expected files on the system on which the gRPC process is running.
+
+Closes #42094
+
+COPYBARA_INTEGRATE_REVIEW=https://github.com/grpc/grpc/pull/42094 from gtcooke94:update_roots dfa9351d9d47eb29618368bad6f476b5b3d5f613
+PiperOrigin-RevId: 933202525
+
+Upstream-Status: Backport [https://github.com/sergiitk/grpc/commit/c3b4c8f47cf52fa48d1ebfbfe1c5e8583db316c3]
+Signed-off-by: Peter Marko <peter.marko@siemens.com>
+---
+ etc/roots.pem | 14129 +++++++++++++++++++++++++++++++++++-------------
+ 1 file changed, 10337 insertions(+), 3792 deletions(-)
+
+diff --git a/etc/roots.pem b/etc/roots.pem
+index e5c84fa..4c535ad 100644
+--- a/etc/roots.pem
++++ b/etc/roots.pem
+@@ -1,1470 +1,99 @@
+-# This Source Code Form is subject to the terms of the Mozilla Public
+-# License, v. 2.0. If a copy of the MPL was not distributed with this
+-# file, You can obtain one at http://mozilla.org/MPL/2.0/.
++# This file contains certificates referenced by root_store.textproto. Although
++# only the PEM files are processed, to aid maintenance, each entry should be
++# prefixed with its SHA-256 hash and kept in the same order as the textproto
++# file.
+
+-# Issuer: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA
+-# Subject: CN=GlobalSign Root CA O=GlobalSign nv-sa OU=Root CA
+-# Label: "GlobalSign Root CA"
+-# Serial: 4835703278459707669005204
+-# MD5 Fingerprint: 3e:45:52:15:09:51:92:e1:b7:5d:37:9f:b1:87:29:8a
+-# SHA1 Fingerprint: b1:bc:96:8b:d4:f4:9d:62:2a:a8:9a:81:f2:15:01:52:a4:1d:82:9c
+-# SHA256 Fingerprint: eb:d4:10:40:e4:bb:3e:c7:42:c9:e3:81:d3:1e:f2:a4:1a:48:b6:68:5c:96:e7:ce:f3:c1:df:6c:d4:33:1c:99
+------BEGIN CERTIFICATE-----
+-MIIDdTCCAl2gAwIBAgILBAAAAAABFUtaw5QwDQYJKoZIhvcNAQEFBQAwVzELMAkG
+-A1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jv
+-b3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw05ODA5MDExMjAw
+-MDBaFw0yODAxMjgxMjAwMDBaMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9i
+-YWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJHbG9iYWxT
+-aWduIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDuaZ
+-jc6j40+Kfvvxi4Mla+pIH/EqsLmVEQS98GPR4mdmzxzdzxtIK+6NiY6arymAZavp
+-xy0Sy6scTHAHoT0KMM0VjU/43dSMUBUc71DuxC73/OlS8pF94G3VNTCOXkNz8kHp
+-1Wrjsok6Vjk4bwY8iGlbKk3Fp1S4bInMm/k8yuX9ifUSPJJ4ltbcdG6TRGHRjcdG
+-snUOhugZitVtbNV4FpWi6cgKOOvyJBNPc1STE4U6G7weNLWLBYy5d4ux2x8gkasJ
+-U26Qzns3dLlwR5EiUWMWea6xrkEmCMgZK9FGqkjWZCrXgzT/LCrBbBlDSgeF59N8
+-9iFo7+ryUp9/k5DPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8E
+-BTADAQH/MB0GA1UdDgQWBBRge2YaRQ2XyolQL30EzTSo//z9SzANBgkqhkiG9w0B
+-AQUFAAOCAQEA1nPnfE920I2/7LqivjTFKDK1fPxsnCwrvQmeU79rXqoRSLblCKOz
+-yj1hTdNGCbM+w6DjY1Ub8rrvrTnhQ7k4o+YviiY776BQVvnGCv04zcQLcFGUl5gE
+-38NflNUVyRRBnMRddWQVDf9VMOyGj/8N7yy5Y0b2qvzfvGn9LhJIZJrglfCm7ymP
+-AbEVtQwdpf5pLGkkeB6zpxxxYu7KyJesF12KwvhHhm4qxFYxldBniYUr+WymXUad
+-DKqC5JlR3XC321Y9YeRq4VzW9v493kHMB65jUr9TU/Qr6cf9tveCX4XSQRjbgbME
+-HMUfpIBvFSDJ3gyICh3WZlXi/EjJKSZp4A==
+------END CERTIFICATE-----
++# 55926084ec963a64b96e2abe01ce0ba86a64fbfebcc7aab5afc155b37fd76066
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 6271844772424770508 (0x570a119742c4e3cc)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = IT, L = Milan, O = Actalis S.p.A./03358520967, CN = Actalis Authentication Root CA
++ Validity
++ Not Before: Sep 22 11:22:02 2011 GMT
++ Not After : Sep 22 11:22:02 2030 GMT
++ Subject: C = IT, L = Milan, O = Actalis S.p.A./03358520967, CN = Actalis Authentication Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:a7:c6:c4:a5:29:a4:2c:ef:e5:18:c5:b0:50:a3:
++ 6f:51:3b:9f:0a:5a:c9:c2:48:38:0a:c2:1c:a0:18:
++ 7f:91:b5:87:b9:40:3f:dd:1d:68:1f:08:83:d5:2d:
++ 1e:88:a0:f8:8f:56:8f:6d:99:02:92:90:16:d5:5f:
++ 08:6c:89:d7:e1:ac:bc:20:c2:b1:e0:83:51:8a:69:
++ 4d:00:96:5a:6f:2f:c0:44:7e:a3:0e:e4:91:cd:58:
++ ee:dc:fb:c7:1e:45:47:dd:27:b9:08:01:9f:a6:21:
++ 1d:f5:41:2d:2f:4c:fd:28:ad:e0:8a:ad:22:b4:56:
++ 65:8e:86:54:8f:93:43:29:de:39:46:78:a3:30:23:
++ ba:cd:f0:7d:13:57:c0:5d:d2:83:6b:48:4c:c4:ab:
++ 9f:80:5a:5b:3a:bd:c9:a7:22:3f:80:27:33:5b:0e:
++ b7:8a:0c:5d:07:37:08:cb:6c:d2:7a:47:22:44:35:
++ c5:cc:cc:2e:8e:dd:2a:ed:b7:7d:66:0d:5f:61:51:
++ 22:55:1b:e3:46:e3:e3:3d:d0:35:62:9a:db:af:14:
++ c8:5b:a1:cc:89:1b:e1:30:26:fc:a0:9b:1f:81:a7:
++ 47:1f:04:eb:a3:39:92:06:9f:99:d3:bf:d3:ea:4f:
++ 50:9c:19:fe:96:87:1e:3c:65:f6:a3:18:24:83:86:
++ 10:e7:54:3e:a8:3a:76:24:4f:81:21:c5:e3:0f:02:
++ f8:93:94:47:20:bb:fe:d4:0e:d3:68:b9:dd:c4:7a:
++ 84:82:e3:53:54:79:dd:db:9c:d2:f2:07:9b:2e:b6:
++ bc:3e:ed:85:6d:ef:25:11:f2:97:1a:42:61:f7:4a:
++ 97:e8:8b:b1:10:07:fa:65:81:b2:a2:39:cf:f7:3c:
++ ff:18:fb:c6:f1:5a:8b:59:e2:02:ac:7b:92:d0:4e:
++ 14:4f:59:45:f6:0c:5e:28:5f:b0:e8:3f:45:cf:cf:
++ af:9b:6f:fb:84:d3:77:5a:95:6f:ac:94:84:9e:ee:
++ bc:c0:4a:8f:4a:93:f8:44:21:e2:31:45:61:50:4e:
++ 10:d8:e3:35:7c:4c:19:b4:de:05:bf:a3:06:9f:c8:
++ b5:cd:e4:1f:d7:17:06:0d:7a:95:74:55:0d:68:1a:
++ fc:10:1b:62:64:9d:6d:e0:95:a0:c3:94:07:57:0d:
++ 14:e6:bd:05:fb:b8:9f:e6:df:8b:e2:c6:e7:7e:96:
++ f6:53:c5:80:34:50:28:58:f0:12:50:71:17:30:ba:
++ e6:78:63:bc:f4:b2:ad:9b:2b:b2:fe:e1:39:8c:5e:
++ ba:0b:20:94:de:7b:83:b8:ff:e3:56:8d:b7:11:e9:
++ 3b:8c:f2:b1:c1:5d:9d:a4:0b:4c:2b:d9:b2:18:f5:
++ b5:9f:4b
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ keyid:52:D8:88:3A:C8:9F:78:66:ED:89:F3:7B:38:70:94:C9:02:02:36:D0
+
+-# Issuer: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R2
+-# Subject: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R2
+-# Label: "GlobalSign Root CA - R2"
+-# Serial: 4835703278459682885658125
+-# MD5 Fingerprint: 94:14:77:7e:3e:5e:fd:8f:30:bd:41:b0:cf:e7:d0:30
+-# SHA1 Fingerprint: 75:e0:ab:b6:13:85:12:27:1c:04:f8:5f:dd:de:38:e4:b7:24:2e:fe
+-# SHA256 Fingerprint: ca:42:dd:41:74:5f:d0:b8:1e:b9:02:36:2c:f9:d8:bf:71:9d:a1:bd:1b:1e:fc:94:6f:5b:4c:99:f4:2c:1b:9e
+------BEGIN CERTIFICATE-----
+-MIIDujCCAqKgAwIBAgILBAAAAAABD4Ym5g0wDQYJKoZIhvcNAQEFBQAwTDEgMB4G
+-A1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjIxEzARBgNVBAoTCkdsb2JhbFNp
+-Z24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDYxMjE1MDgwMDAwWhcNMjExMjE1
+-MDgwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMjETMBEG
+-A1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjCCASIwDQYJKoZI
+-hvcNAQEBBQADggEPADCCAQoCggEBAKbPJA6+Lm8omUVCxKs+IVSbC9N/hHD6ErPL
+-v4dfxn+G07IwXNb9rfF73OX4YJYJkhD10FPe+3t+c4isUoh7SqbKSaZeqKeMWhG8
+-eoLrvozps6yWJQeXSpkqBy+0Hne/ig+1AnwblrjFuTosvNYSuetZfeLQBoZfXklq
+-tTleiDTsvHgMCJiEbKjNS7SgfQx5TfC4LcshytVsW33hoCmEofnTlEnLJGKRILzd
+-C9XZzPnqJworc5HGnRusyMvo4KD0L5CLTfuwNhv2GXqF4G3yYROIXJ/gkwpRl4pa
+-zq+r1feqCapgvdzZX99yqWATXgAByUr6P6TqBwMhAo6CygPCm48CAwEAAaOBnDCB
+-mTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUm+IH
+-V2ccHsBqBt5ZtJot39wZhi4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NybC5n
+-bG9iYWxzaWduLm5ldC9yb290LXIyLmNybDAfBgNVHSMEGDAWgBSb4gdXZxwewGoG
+-3lm0mi3f3BmGLjANBgkqhkiG9w0BAQUFAAOCAQEAmYFThxxol4aR7OBKuEQLq4Gs
+-J0/WwbgcQ3izDJr86iw8bmEbTUsp9Z8FHSbBuOmDAGJFtqkIk7mpM0sYmsL4h4hO
+-291xNBrBVNpGP+DTKqttVCL1OmLNIG+6KYnX3ZHu01yiPqFbQfXf5WRDLenVOavS
+-ot+3i9DAgBkcRcAtjOj4LaR0VknFBbVPFd5uRHg5h6h+u/N5GJG79G+dwfCMNYxd
+-AfvDbbnvRG15RjF+Cv6pgsH/76tuIMRQyV+dTZsXjAzlAcmgQWpzU/qlULRuJQ/7
+-TBj0/VLZjmmx6BEP3ojY+x1J96relc8geMJgEtslQIxq/H5COEBkEveegeGTLg==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Entrust.net Certification Authority (2048) O=Entrust.net OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)/(c) 1999 Entrust.net Limited
+-# Subject: CN=Entrust.net Certification Authority (2048) O=Entrust.net OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)/(c) 1999 Entrust.net Limited
+-# Label: "Entrust.net Premium 2048 Secure Server CA"
+-# Serial: 946069240
+-# MD5 Fingerprint: ee:29:31:bc:32:7e:9a:e6:e8:b5:f7:51:b4:34:71:90
+-# SHA1 Fingerprint: 50:30:06:09:1d:97:d4:f5:ae:39:f7:cb:e7:92:7d:7d:65:2d:34:31
+-# SHA256 Fingerprint: 6d:c4:71:72:e0:1c:bc:b0:bf:62:58:0d:89:5f:e2:b8:ac:9a:d4:f8:73:80:1e:0c:10:b9:c8:37:d2:1e:b1:77
+------BEGIN CERTIFICATE-----
+-MIIEKjCCAxKgAwIBAgIEOGPe+DANBgkqhkiG9w0BAQUFADCBtDEUMBIGA1UEChML
+-RW50cnVzdC5uZXQxQDA+BgNVBAsUN3d3dy5lbnRydXN0Lm5ldC9DUFNfMjA0OCBp
+-bmNvcnAuIGJ5IHJlZi4gKGxpbWl0cyBsaWFiLikxJTAjBgNVBAsTHChjKSAxOTk5
+-IEVudHJ1c3QubmV0IExpbWl0ZWQxMzAxBgNVBAMTKkVudHJ1c3QubmV0IENlcnRp
+-ZmljYXRpb24gQXV0aG9yaXR5ICgyMDQ4KTAeFw05OTEyMjQxNzUwNTFaFw0yOTA3
+-MjQxNDE1MTJaMIG0MRQwEgYDVQQKEwtFbnRydXN0Lm5ldDFAMD4GA1UECxQ3d3d3
+-LmVudHJ1c3QubmV0L0NQU18yMDQ4IGluY29ycC4gYnkgcmVmLiAobGltaXRzIGxp
+-YWIuKTElMCMGA1UECxMcKGMpIDE5OTkgRW50cnVzdC5uZXQgTGltaXRlZDEzMDEG
+-A1UEAxMqRW50cnVzdC5uZXQgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgKDIwNDgp
+-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU1LqRKGsuqjIAcVFmQq
+-K0vRvwtKTY7tgHalZ7d4QMBzQshowNtTK91euHaYNZOLGp18EzoOH1u3Hs/lJBQe
+-sYGpjX24zGtLA/ECDNyrpUAkAH90lKGdCCmziAv1h3edVc3kw37XamSrhRSGlVuX
+-MlBvPci6Zgzj/L24ScF2iUkZ/cCovYmjZy/Gn7xxGWC4LeksyZB2ZnuU4q941mVT
+-XTzWnLLPKQP5L6RQstRIzgUyVYr9smRMDuSYB3Xbf9+5CFVghTAp+XtIpGmG4zU/
+-HoZdenoVve8AjhUiVBcAkCaTvA5JaJG/+EfTnZVCwQ5N328mz8MYIWJmQ3DW1cAH
+-4QIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV
+-HQ4EFgQUVeSB0RGAvtiJuQijMfmhJAkWuXAwDQYJKoZIhvcNAQEFBQADggEBADub
+-j1abMOdTmXx6eadNl9cZlZD7Bh/KM3xGY4+WZiT6QBshJ8rmcnPyT/4xmf3IDExo
+-U8aAghOY+rat2l098c5u9hURlIIM7j+VrxGrD9cv3h8Dj1csHsm7mhpElesYT6Yf
+-zX1XEC+bBAlahLVu2B064dae0Wx5XnkcFMXj0EyTO2U87d89vqbllRrDtRnDvV5b
+-u/8j72gZyxKTJ1wDLW8w0B62GqzeWvfRqqgnpv55gcR5mTNXuhKwqeBCbJPKVt7+
+-bYQLCIt+jerXmCHG8+c8eS9enNFMFY3h7CI3zJpDC5fcgJCNs2ebb0gIFVbPv/Er
+-fF6adulZkMV8gzURZVE=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Baltimore CyberTrust Root O=Baltimore OU=CyberTrust
+-# Subject: CN=Baltimore CyberTrust Root O=Baltimore OU=CyberTrust
+-# Label: "Baltimore CyberTrust Root"
+-# Serial: 33554617
+-# MD5 Fingerprint: ac:b6:94:a5:9c:17:e0:d7:91:52:9b:b1:97:06:a6:e4
+-# SHA1 Fingerprint: d4:de:20:d0:5e:66:fc:53:fe:1a:50:88:2c:78:db:28:52:ca:e4:74
+-# SHA256 Fingerprint: 16:af:57:a9:f6:76:b0:ab:12:60:95:aa:5e:ba:de:f2:2a:b3:11:19:d6:44:ac:95:cd:4b:93:db:f3:f2:6a:eb
+------BEGIN CERTIFICATE-----
+-MIIDdzCCAl+gAwIBAgIEAgAAuTANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJ
+-RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD
+-VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTAwMDUxMjE4NDYwMFoX
+-DTI1MDUxMjIzNTkwMFowWjELMAkGA1UEBhMCSUUxEjAQBgNVBAoTCUJhbHRpbW9y
+-ZTETMBEGA1UECxMKQ3liZXJUcnVzdDEiMCAGA1UEAxMZQmFsdGltb3JlIEN5YmVy
+-VHJ1c3QgUm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKMEuyKr
+-mD1X6CZymrV51Cni4eiVgLGw41uOKymaZN+hXe2wCQVt2yguzmKiYv60iNoS6zjr
+-IZ3AQSsBUnuId9Mcj8e6uYi1agnnc+gRQKfRzMpijS3ljwumUNKoUMMo6vWrJYeK
+-mpYcqWe4PwzV9/lSEy/CG9VwcPCPwBLKBsua4dnKM3p31vjsufFoREJIE9LAwqSu
+-XmD+tqYF/LTdB1kC1FkYmGP1pWPgkAx9XbIGevOF6uvUA65ehD5f/xXtabz5OTZy
+-dc93Uk3zyZAsuT3lySNTPx8kmCFcB5kpvcY67Oduhjprl3RjM71oGDHweI12v/ye
+-jl0qhqdNkNwnGjkCAwEAAaNFMEMwHQYDVR0OBBYEFOWdWTCCR1jMrPoIVDaGezq1
+-BE3wMBIGA1UdEwEB/wQIMAYBAf8CAQMwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3
+-DQEBBQUAA4IBAQCFDF2O5G9RaEIFoN27TyclhAO992T9Ldcw46QQF+vaKSm2eT92
+-9hkTI7gQCvlYpNRhcL0EYWoSihfVCr3FvDB81ukMJY2GQE/szKN+OMY3EU/t3Wgx
+-jkzSswF07r51XgdIGn9w/xZchMB5hbgF/X++ZRGjD8ACtPhSNzkE1akxehi/oCr0
+-Epn3o0WC4zxe9Z2etciefC7IpJ5OCBRLbf1wbWsaY71k5h+3zvDyny67G7fyUIhz
+-ksLi4xaNmjICq44Y3ekQEe5+NauQrz4wlHrQMz2nZQ/1/I6eYs9HRCwBXbsdtTLS
+-R9I4LtD+gdwyah617jzV/OeBHRnDJELqYzmp
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Entrust Root Certification Authority O=Entrust, Inc. OU=www.entrust.net/CPS is incorporated by reference/(c) 2006 Entrust, Inc.
+-# Subject: CN=Entrust Root Certification Authority O=Entrust, Inc. OU=www.entrust.net/CPS is incorporated by reference/(c) 2006 Entrust, Inc.
+-# Label: "Entrust Root Certification Authority"
+-# Serial: 1164660820
+-# MD5 Fingerprint: d6:a5:c3:ed:5d:dd:3e:00:c1:3d:87:92:1f:1d:3f:e4
+-# SHA1 Fingerprint: b3:1e:b1:b7:40:e3:6c:84:02:da:dc:37:d4:4d:f5:d4:67:49:52:f9
+-# SHA256 Fingerprint: 73:c1:76:43:4f:1b:c6:d5:ad:f4:5b:0e:76:e7:27:28:7c:8d:e5:76:16:c1:e6:e6:14:1a:2b:2c:bc:7d:8e:4c
+------BEGIN CERTIFICATE-----
+-MIIEkTCCA3mgAwIBAgIERWtQVDANBgkqhkiG9w0BAQUFADCBsDELMAkGA1UEBhMC
+-VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0
+-Lm5ldC9DUFMgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW
+-KGMpIDIwMDYgRW50cnVzdCwgSW5jLjEtMCsGA1UEAxMkRW50cnVzdCBSb290IENl
+-cnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA2MTEyNzIwMjM0MloXDTI2MTEyNzIw
+-NTM0MlowgbAxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMTkw
+-NwYDVQQLEzB3d3cuZW50cnVzdC5uZXQvQ1BTIGlzIGluY29ycG9yYXRlZCBieSBy
+-ZWZlcmVuY2UxHzAdBgNVBAsTFihjKSAyMDA2IEVudHJ1c3QsIEluYy4xLTArBgNV
+-BAMTJEVudHJ1c3QgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJ
+-KoZIhvcNAQEBBQADggEPADCCAQoCggEBALaVtkNC+sZtKm9I35RMOVcF7sN5EUFo
+-Nu3s/poBj6E4KPz3EEZmLk0eGrEaTsbRwJWIsMn/MYszA9u3g3s+IIRe7bJWKKf4
+-4LlAcTfFy0cOlypowCKVYhXbR9n10Cv/gkvJrT7eTNuQgFA/CYqEAOwwCj0Yzfv9
+-KlmaI5UXLEWeH25DeW0MXJj+SKfFI0dcXv1u5x609mhF0YaDW6KKjbHjKYD+JXGI
+-rb68j6xSlkuqUY3kEzEZ6E5Nn9uss2rVvDlUccp6en+Q3X0dgNmBu1kmwhH+5pPi
+-94DkZfs0Nw4pgHBNrziGLp5/V6+eF67rHMsoIV+2HNjnogQi+dPa2MsCAwEAAaOB
+-sDCBrTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zArBgNVHRAEJDAi
+-gA8yMDA2MTEyNzIwMjM0MlqBDzIwMjYxMTI3MjA1MzQyWjAfBgNVHSMEGDAWgBRo
+-kORnpKZTgMeGZqTx90tD+4S9bTAdBgNVHQ4EFgQUaJDkZ6SmU4DHhmak8fdLQ/uE
+-vW0wHQYJKoZIhvZ9B0EABBAwDhsIVjcuMTo0LjADAgSQMA0GCSqGSIb3DQEBBQUA
+-A4IBAQCT1DCw1wMgKtD5Y+iRDAUgqV8ZyntyTtSx29CW+1RaGSwMCPeyvIWonX9t
+-O1KzKtvn1ISMY/YPyyYBkVBs9F8U4pN0wBOeMDpQ47RgxRzwIkSNcUesyBrJ6Zua
+-AGAT/3B+XxFNSRuzFVJ7yVTav52Vr2ua2J7p8eRDjeIRRDq/r72DQnNSi6q7pynP
+-9WQcCk3RvKqsnyrQ/39/2n3qse0wJcGE2jTSW3iDVuycNsMm4hH2Z0kdkquM++v/
+-eu6FSqdQgPCnXEqULl8FmTxSQeDNtGPPAUO6nIPcj2A781q0tHuu2guQOHXvgR1m
+-0vdXcDazv/wor3ElhVsT/h5/WrQ8
+------END CERTIFICATE-----
+-
+-# Issuer: CN=AAA Certificate Services O=Comodo CA Limited
+-# Subject: CN=AAA Certificate Services O=Comodo CA Limited
+-# Label: "Comodo AAA Services root"
+-# Serial: 1
+-# MD5 Fingerprint: 49:79:04:b0:eb:87:19:ac:47:b0:bc:11:51:9b:74:d0
+-# SHA1 Fingerprint: d1:eb:23:a4:6d:17:d6:8f:d9:25:64:c2:f1:f1:60:17:64:d8:e3:49
+-# SHA256 Fingerprint: d7:a7:a0:fb:5d:7e:27:31:d7:71:e9:48:4e:bc:de:f7:1d:5f:0c:3e:0a:29:48:78:2b:c8:3e:e0:ea:69:9e:f4
+------BEGIN CERTIFICATE-----
+-MIIEMjCCAxqgAwIBAgIBATANBgkqhkiG9w0BAQUFADB7MQswCQYDVQQGEwJHQjEb
+-MBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHDAdTYWxmb3JkMRow
+-GAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UEAwwYQUFBIENlcnRpZmlj
+-YXRlIFNlcnZpY2VzMB4XDTA0MDEwMTAwMDAwMFoXDTI4MTIzMTIzNTk1OVowezEL
+-MAkGA1UEBhMCR0IxGzAZBgNVBAgMEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UE
+-BwwHU2FsZm9yZDEaMBgGA1UECgwRQ29tb2RvIENBIExpbWl0ZWQxITAfBgNVBAMM
+-GEFBQSBDZXJ0aWZpY2F0ZSBTZXJ2aWNlczCCASIwDQYJKoZIhvcNAQEBBQADggEP
+-ADCCAQoCggEBAL5AnfRu4ep2hxxNRUSOvkbIgwadwSr+GB+O5AL686tdUIoWMQua
+-BtDFcCLNSS1UY8y2bmhGC1Pqy0wkwLxyTurxFa70VJoSCsN6sjNg4tqJVfMiWPPe
+-3M/vg4aijJRPn2jymJBGhCfHdr/jzDUsi14HZGWCwEiwqJH5YZ92IFCokcdmtet4
+-YgNW8IoaE+oxox6gmf049vYnMlhvB/VruPsUK6+3qszWY19zjNoFmag4qMsXeDZR
+-rOme9Hg6jc8P2ULimAyrL58OAd7vn5lJ8S3frHRNG5i1R8XlKdH5kBjHYpy+g8cm
+-ez6KJcfA3Z3mNWgQIJ2P2N7Sw4ScDV7oL8kCAwEAAaOBwDCBvTAdBgNVHQ4EFgQU
+-oBEKIz6W8Qfs4q8p74Klf9AwpLQwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQF
+-MAMBAf8wewYDVR0fBHQwcjA4oDagNIYyaHR0cDovL2NybC5jb21vZG9jYS5jb20v
+-QUFBQ2VydGlmaWNhdGVTZXJ2aWNlcy5jcmwwNqA0oDKGMGh0dHA6Ly9jcmwuY29t
+-b2RvLm5ldC9BQUFDZXJ0aWZpY2F0ZVNlcnZpY2VzLmNybDANBgkqhkiG9w0BAQUF
+-AAOCAQEACFb8AvCb6P+k+tZ7xkSAzk/ExfYAWMymtrwUSWgEdujm7l3sAg9g1o1Q
+-GE8mTgHj5rCl7r+8dFRBv/38ErjHT1r0iWAFf2C3BUrz9vHCv8S5dIa2LX1rzNLz
+-Rt0vxuBqw8M0Ayx9lt1awg6nCpnBBYurDC/zXDrPbDdVCYfeU0BsWO/8tqtlbgT2
+-G9w84FoVxp7Z8VlIMCFlA2zs6SFz7JsDoeA3raAVGI/6ugLOpyypEBMs1OUIJqsi
+-l2D4kF501KKaU73yqWjgom7C12yxow+ev+to51byrvLjKzg6CYG1a4XXvi3tPxq3
+-smPi9WIsgtRqAEFQ8TmDn5XpNpaYbg==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=QuoVadis Root CA 2 O=QuoVadis Limited
+-# Subject: CN=QuoVadis Root CA 2 O=QuoVadis Limited
+-# Label: "QuoVadis Root CA 2"
+-# Serial: 1289
+-# MD5 Fingerprint: 5e:39:7b:dd:f8:ba:ec:82:e9:ac:62:ba:0c:54:00:2b
+-# SHA1 Fingerprint: ca:3a:fb:cf:12:40:36:4b:44:b2:16:20:88:80:48:39:19:93:7c:f7
+-# SHA256 Fingerprint: 85:a0:dd:7d:d7:20:ad:b7:ff:05:f8:3d:54:2b:20:9d:c7:ff:45:28:f7:d6:77:b1:83:89:fe:a5:e5:c4:9e:86
+------BEGIN CERTIFICATE-----
+-MIIFtzCCA5+gAwIBAgICBQkwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0x
+-GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJv
+-b3QgQ0EgMjAeFw0wNjExMjQxODI3MDBaFw0zMTExMjQxODIzMzNaMEUxCzAJBgNV
+-BAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMRswGQYDVQQDExJRdW9W
+-YWRpcyBSb290IENBIDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCa
+-GMpLlA0ALa8DKYrwD4HIrkwZhR0In6spRIXzL4GtMh6QRr+jhiYaHv5+HBg6XJxg
+-Fyo6dIMzMH1hVBHL7avg5tKifvVrbxi3Cgst/ek+7wrGsxDp3MJGF/hd/aTa/55J
+-WpzmM+Yklvc/ulsrHHo1wtZn/qtmUIttKGAr79dgw8eTvI02kfN/+NsRE8Scd3bB
+-rrcCaoF6qUWD4gXmuVbBlDePSHFjIuwXZQeVikvfj8ZaCuWw419eaxGrDPmF60Tp
+-+ARz8un+XJiM9XOva7R+zdRcAitMOeGylZUtQofX1bOQQ7dsE/He3fbE+Ik/0XX1
+-ksOR1YqI0JDs3G3eicJlcZaLDQP9nL9bFqyS2+r+eXyt66/3FsvbzSUr5R/7mp/i
+-Ucw6UwxI5g69ybR2BlLmEROFcmMDBOAENisgGQLodKcftslWZvB1JdxnwQ5hYIiz
+-PtGo/KPaHbDRsSNU30R2be1B2MGyIrZTHN81Hdyhdyox5C315eXbyOD/5YDXC2Og
+-/zOhD7osFRXql7PSorW+8oyWHhqPHWykYTe5hnMz15eWniN9gqRMgeKh0bpnX5UH
+-oycR7hYQe7xFSkyyBNKr79X9DFHOUGoIMfmR2gyPZFwDwzqLID9ujWc9Otb+fVuI
+-yV77zGHcizN300QyNQliBJIWENieJ0f7OyHj+OsdWwIDAQABo4GwMIGtMA8GA1Ud
+-EwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBQahGK8SEwzJQTU7tD2
+-A8QZRtGUazBuBgNVHSMEZzBlgBQahGK8SEwzJQTU7tD2A8QZRtGUa6FJpEcwRTEL
+-MAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMT
+-ElF1b1ZhZGlzIFJvb3QgQ0EgMoICBQkwDQYJKoZIhvcNAQEFBQADggIBAD4KFk2f
+-BluornFdLwUvZ+YTRYPENvbzwCYMDbVHZF34tHLJRqUDGCdViXh9duqWNIAXINzn
+-g/iN/Ae42l9NLmeyhP3ZRPx3UIHmfLTJDQtyU/h2BwdBR5YM++CCJpNVjP4iH2Bl
+-fF/nJrP3MpCYUNQ3cVX2kiF495V5+vgtJodmVjB3pjd4M1IQWK4/YY7yarHvGH5K
+-WWPKjaJW1acvvFYfzznB4vsKqBUsfU16Y8Zsl0Q80m/DShcK+JDSV6IZUaUtl0Ha
+-B0+pUNqQjZRG4T7wlP0QADj1O+hA4bRuVhogzG9Yje0uRY/W6ZM/57Es3zrWIozc
+-hLsib9D45MY56QSIPMO661V6bYCZJPVsAfv4l7CUW+v90m/xd2gNNWQjrLhVoQPR
+-TUIZ3Ph1WVaj+ahJefivDrkRoHy3au000LYmYjgahwz46P0u05B/B5EqHdZ+XIWD
+-mbA4CD/pXvk1B+TJYm5Xf6dQlfe6yJvmjqIBxdZmv3lh8zwc4bmCXF2gw+nYSL0Z
+-ohEUGW6yhhtoPkg3Goi3XZZenMfvJ2II4pEZXNLxId26F0KCl3GBUzGpn/Z9Yr9y
+-4aOTHcyKJloJONDO1w2AFrR4pTqHTI2KpdVGl/IsELm8VCLAAVBpQ570su9t+Oza
+-8eOx79+Rj1QqCyXBJhnEUhAFZdWCEOrCMc0u
+------END CERTIFICATE-----
+-
+-# Issuer: CN=QuoVadis Root CA 3 O=QuoVadis Limited
+-# Subject: CN=QuoVadis Root CA 3 O=QuoVadis Limited
+-# Label: "QuoVadis Root CA 3"
+-# Serial: 1478
+-# MD5 Fingerprint: 31:85:3c:62:94:97:63:b9:aa:fd:89:4e:af:6f:e0:cf
+-# SHA1 Fingerprint: 1f:49:14:f7:d8:74:95:1d:dd:ae:02:c0:be:fd:3a:2d:82:75:51:85
+-# SHA256 Fingerprint: 18:f1:fc:7f:20:5d:f8:ad:dd:eb:7f:e0:07:dd:57:e3:af:37:5a:9c:4d:8d:73:54:6b:f4:f1:fe:d1:e1:8d:35
+------BEGIN CERTIFICATE-----
+-MIIGnTCCBIWgAwIBAgICBcYwDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCQk0x
+-GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZBgNVBAMTElF1b1ZhZGlzIFJv
+-b3QgQ0EgMzAeFw0wNjExMjQxOTExMjNaFw0zMTExMjQxOTA2NDRaMEUxCzAJBgNV
+-BAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMRswGQYDVQQDExJRdW9W
+-YWRpcyBSb290IENBIDMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDM
+-V0IWVJzmmNPTTe7+7cefQzlKZbPoFog02w1ZkXTPkrgEQK0CSzGrvI2RaNggDhoB
+-4hp7Thdd4oq3P5kazethq8Jlph+3t723j/z9cI8LoGe+AaJZz3HmDyl2/7FWeUUr
+-H556VOijKTVopAFPD6QuN+8bv+OPEKhyq1hX51SGyMnzW9os2l2ObjyjPtr7guXd
+-8lyyBTNvijbO0BNO/79KDDRMpsMhvVAEVeuxu537RR5kFd5VAYwCdrXLoT9Cabwv
+-vWhDFlaJKjdhkf2mrk7AyxRllDdLkgbvBNDInIjbC3uBr7E9KsRlOni27tyAsdLT
+-mZw67mtaa7ONt9XOnMK+pUsvFrGeaDsGb659n/je7Mwpp5ijJUMv7/FfJuGITfhe
+-btfZFG4ZM2mnO4SJk8RTVROhUXhA+LjJou57ulJCg54U7QVSWllWp5f8nT8KKdjc
+-T5EOE7zelaTfi5m+rJsziO+1ga8bxiJTyPbH7pcUsMV8eFLI8M5ud2CEpukqdiDt
+-WAEXMJPpGovgc2PZapKUSU60rUqFxKMiMPwJ7Wgic6aIDFUhWMXhOp8q3crhkODZ
+-c6tsgLjoC2SToJyMGf+z0gzskSaHirOi4XCPLArlzW1oUevaPwV/izLmE1xr/l9A
+-4iLItLRkT9a6fUg+qGkM17uGcclzuD87nSVL2v9A6wIDAQABo4IBlTCCAZEwDwYD
+-VR0TAQH/BAUwAwEB/zCB4QYDVR0gBIHZMIHWMIHTBgkrBgEEAb5YAAMwgcUwgZMG
+-CCsGAQUFBwICMIGGGoGDQW55IHVzZSBvZiB0aGlzIENlcnRpZmljYXRlIGNvbnN0
+-aXR1dGVzIGFjY2VwdGFuY2Ugb2YgdGhlIFF1b1ZhZGlzIFJvb3QgQ0EgMyBDZXJ0
+-aWZpY2F0ZSBQb2xpY3kgLyBDZXJ0aWZpY2F0aW9uIFByYWN0aWNlIFN0YXRlbWVu
+-dC4wLQYIKwYBBQUHAgEWIWh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL2Nw
+-czALBgNVHQ8EBAMCAQYwHQYDVR0OBBYEFPLAE+CCQz777i9nMpY1XNu4ywLQMG4G
+-A1UdIwRnMGWAFPLAE+CCQz777i9nMpY1XNu4ywLQoUmkRzBFMQswCQYDVQQGEwJC
+-TTEZMBcGA1UEChMQUXVvVmFkaXMgTGltaXRlZDEbMBkGA1UEAxMSUXVvVmFkaXMg
+-Um9vdCBDQSAzggIFxjANBgkqhkiG9w0BAQUFAAOCAgEAT62gLEz6wPJv92ZVqyM0
+-7ucp2sNbtrCD2dDQ4iH782CnO11gUyeim/YIIirnv6By5ZwkajGxkHon24QRiSem
+-d1o417+shvzuXYO8BsbRd2sPbSQvS3pspweWyuOEn62Iix2rFo1bZhfZFvSLgNLd
+-+LJ2w/w4E6oM3kJpK27zPOuAJ9v1pkQNn1pVWQvVDVJIxa6f8i+AxeoyUDUSly7B
+-4f/xI4hROJ/yZlZ25w9Rl6VSDE1JUZU2Pb+iSwwQHYaZTKrzchGT5Or2m9qoXadN
+-t54CrnMAyNojA+j56hl0YgCUyyIgvpSnWbWCar6ZeXqp8kokUvd0/bpO5qgdAm6x
+-DYBEwa7TIzdfu4V8K5Iu6H6li92Z4b8nby1dqnuH/grdS/yO9SbkbnBCbjPsMZ57
+-k8HkyWkaPcBrTiJt7qtYTcbQQcEr6k8Sh17rRdhs9ZgC06DYVYoGmRmioHfRMJ6s
+-zHXug/WwYjnPbFfiTNKRCw51KBuav/0aQ/HKd/s7j2G4aSgWQgRecCocIdiP4b0j
+-Wy10QJLZYxkNc91pvGJHvOB0K7Lrfb5BG7XARsWhIstfTsEokt4YutUqKLsRixeT
+-mJlglFwjz1onl14LBQaTNx47aTbrqZ5hHY8y2o4M1nQ+ewkk2gF3R8Q7zTSMmfXK
+-4SVhM7JZG+Ju1zdXtg2pEto=
+------END CERTIFICATE-----
+-
+-# Issuer: O=SECOM Trust.net OU=Security Communication RootCA1
+-# Subject: O=SECOM Trust.net OU=Security Communication RootCA1
+-# Label: "Security Communication Root CA"
+-# Serial: 0
+-# MD5 Fingerprint: f1:bc:63:6a:54:e0:b5:27:f5:cd:e7:1a:e3:4d:6e:4a
+-# SHA1 Fingerprint: 36:b1:2b:49:f9:81:9e:d7:4c:9e:bc:38:0f:c6:56:8f:5d:ac:b2:f7
+-# SHA256 Fingerprint: e7:5e:72:ed:9f:56:0e:ec:6e:b4:80:00:73:a4:3f:c3:ad:19:19:5a:39:22:82:01:78:95:97:4a:99:02:6b:6c
+------BEGIN CERTIFICATE-----
+-MIIDWjCCAkKgAwIBAgIBADANBgkqhkiG9w0BAQUFADBQMQswCQYDVQQGEwJKUDEY
+-MBYGA1UEChMPU0VDT00gVHJ1c3QubmV0MScwJQYDVQQLEx5TZWN1cml0eSBDb21t
+-dW5pY2F0aW9uIFJvb3RDQTEwHhcNMDMwOTMwMDQyMDQ5WhcNMjMwOTMwMDQyMDQ5
+-WjBQMQswCQYDVQQGEwJKUDEYMBYGA1UEChMPU0VDT00gVHJ1c3QubmV0MScwJQYD
+-VQQLEx5TZWN1cml0eSBDb21tdW5pY2F0aW9uIFJvb3RDQTEwggEiMA0GCSqGSIb3
+-DQEBAQUAA4IBDwAwggEKAoIBAQCzs/5/022x7xZ8V6UMbXaKL0u/ZPtM7orw8yl8
+-9f/uKuDp6bpbZCKamm8sOiZpUQWZJtzVHGpxxpp9Hp3dfGzGjGdnSj74cbAZJ6kJ
+-DKaVv0uMDPpVmDvY6CKhS3E4eayXkmmziX7qIWgGmBSWh9JhNrxtJ1aeV+7AwFb9
+-Ms+k2Y7CI9eNqPPYJayX5HA49LY6tJ07lyZDo6G8SVlyTCMwhwFY9k6+HGhWZq/N
+-QV3Is00qVUarH9oe4kA92819uZKAnDfdDJZkndwi92SL32HeFZRSFaB9UslLqCHJ
+-xrHty8OVYNEP8Ktw+N/LTX7s1vqr2b1/VPKl6Xn62dZ2JChzAgMBAAGjPzA9MB0G
+-A1UdDgQWBBSgc0mZaNyFW2XjmygvV5+9M7wHSDALBgNVHQ8EBAMCAQYwDwYDVR0T
+-AQH/BAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEAaECpqLvkT115swW1F7NgE+vG
+-kl3g0dNq/vu+m22/xwVtWSDEHPC32oRYAmP6SBbvT6UL90qY8j+eG61Ha2POCEfr
+-Uj94nK9NrvjVT8+amCoQQTlSxN3Zmw7vkwGusi7KaEIkQmywszo+zenaSMQVy+n5
+-Bw+SUEmK3TGXX8npN6o7WWWXlDLJs58+OmJYxUmtYg5xpTKqL8aJdkNAExNnPaJU
+-JRDL8Try2frbSVa7pv6nQTXD4IhhyYjH3zYQIphZ6rBK+1YWc26sTfcioU+tHXot
+-RSflMMFe8toTyyVCUZVHA4xsIcx0Qu1T/zOLjw9XARYvz6buyXAiFL39vmwLAw==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=XRamp Global Certification Authority O=XRamp Security Services Inc OU=www.xrampsecurity.com
+-# Subject: CN=XRamp Global Certification Authority O=XRamp Security Services Inc OU=www.xrampsecurity.com
+-# Label: "XRamp Global CA Root"
+-# Serial: 107108908803651509692980124233745014957
+-# MD5 Fingerprint: a1:0b:44:b3:ca:10:d8:00:6e:9d:0f:d8:0f:92:0a:d1
+-# SHA1 Fingerprint: b8:01:86:d1:eb:9c:86:a5:41:04:cf:30:54:f3:4c:52:b7:e5:58:c6
+-# SHA256 Fingerprint: ce:cd:dc:90:50:99:d8:da:df:c5:b1:d2:09:b7:37:cb:e2:c1:8c:fb:2c:10:c0:ff:0b:cf:0d:32:86:fc:1a:a2
+------BEGIN CERTIFICATE-----
+-MIIEMDCCAxigAwIBAgIQUJRs7Bjq1ZxN1ZfvdY+grTANBgkqhkiG9w0BAQUFADCB
+-gjELMAkGA1UEBhMCVVMxHjAcBgNVBAsTFXd3dy54cmFtcHNlY3VyaXR5LmNvbTEk
+-MCIGA1UEChMbWFJhbXAgU2VjdXJpdHkgU2VydmljZXMgSW5jMS0wKwYDVQQDEyRY
+-UmFtcCBHbG9iYWwgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDQxMTAxMTcx
+-NDA0WhcNMzUwMTAxMDUzNzE5WjCBgjELMAkGA1UEBhMCVVMxHjAcBgNVBAsTFXd3
+-dy54cmFtcHNlY3VyaXR5LmNvbTEkMCIGA1UEChMbWFJhbXAgU2VjdXJpdHkgU2Vy
+-dmljZXMgSW5jMS0wKwYDVQQDEyRYUmFtcCBHbG9iYWwgQ2VydGlmaWNhdGlvbiBB
+-dXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYJB69FbS6
+-38eMpSe2OAtp87ZOqCwuIR1cRN8hXX4jdP5efrRKt6atH67gBhbim1vZZ3RrXYCP
+-KZ2GG9mcDZhtdhAoWORlsH9KmHmf4MMxfoArtYzAQDsRhtDLooY2YKTVMIJt2W7Q
+-DxIEM5dfT2Fa8OT5kavnHTu86M/0ay00fOJIYRyO82FEzG+gSqmUsE3a56k0enI4
+-qEHMPJQRfevIpoy3hsvKMzvZPTeL+3o+hiznc9cKV6xkmxnr9A8ECIqsAxcZZPRa
+-JSKNNCyy9mgdEm3Tih4U2sSPpuIjhdV6Db1q4Ons7Be7QhtnqiXtRYMh/MHJfNVi
+-PvryxS3T/dRlAgMBAAGjgZ8wgZwwEwYJKwYBBAGCNxQCBAYeBABDAEEwCwYDVR0P
+-BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFMZPoj0GY4QJnM5i5ASs
+-jVy16bYbMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9jcmwueHJhbXBzZWN1cml0
+-eS5jb20vWEdDQS5jcmwwEAYJKwYBBAGCNxUBBAMCAQEwDQYJKoZIhvcNAQEFBQAD
+-ggEBAJEVOQMBG2f7Shz5CmBbodpNl2L5JFMn14JkTpAuw0kbK5rc/Kh4ZzXxHfAR
+-vbdI4xD2Dd8/0sm2qlWkSLoC295ZLhVbO50WfUfXN+pfTXYSNrsf16GBBEYgoyxt
+-qZ4Bfj8pzgCT3/3JknOJiWSe5yvkHJEs0rnOfc5vMZnT5r7SHpDwCRR5XCOrTdLa
+-IR9NmXmd4c8nnxCbHIgNsIpkQTG4DmyQJKSbXHGPurt+HBvbaoAPIbzp26a3QPSy
+-i6mx5O+aGtA9aZnuqCij4Tyz8LIRnM98QObd50N9otg6tamN8jSZxNQQ4Qb9CYQQ
+-O+7ETPTsJ3xCwnR8gooJybQDJbw=
+------END CERTIFICATE-----
+-
+-# Issuer: O=The Go Daddy Group, Inc. OU=Go Daddy Class 2 Certification Authority
+-# Subject: O=The Go Daddy Group, Inc. OU=Go Daddy Class 2 Certification Authority
+-# Label: "Go Daddy Class 2 CA"
+-# Serial: 0
+-# MD5 Fingerprint: 91:de:06:25:ab:da:fd:32:17:0c:bb:25:17:2a:84:67
+-# SHA1 Fingerprint: 27:96:ba:e6:3f:18:01:e2:77:26:1b:a0:d7:77:70:02:8f:20:ee:e4
+-# SHA256 Fingerprint: c3:84:6b:f2:4b:9e:93:ca:64:27:4c:0e:c6:7c:1e:cc:5e:02:4f:fc:ac:d2:d7:40:19:35:0e:81:fe:54:6a:e4
+------BEGIN CERTIFICATE-----
+-MIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEh
+-MB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBE
+-YWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3
+-MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkGA1UEBhMCVVMxITAfBgNVBAoTGFRo
+-ZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28gRGFkZHkgQ2xhc3Mg
+-MiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQADggEN
+-ADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d/+TvZxz0ZWizV3GgXne77ZtJ6XCA
+-PVYYYwhv2vLM0D9/AlQiVBDYsoHUwHU9S3/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6w
+-wdhFJ2+qN1j3hybX2C32qRe3H3I2TqYXP2WYktsqbl2i/ojgC95/5Y0V4evLOtXi
+-EqITLdiOr18SPaAIBQi2XKVlOARFmR6jYGB0xUGlcmIbYsUfb18aQr4CUWWoriMY
+-avx4A6lNf4DD+qta/KFApMoZFv6yyO9ecw3ud72a9nmYvLEHZ6IVDd2gWMZEewo+
+-YihfukEHU1jPEX44dMX4/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0OBBYEFNLE
+-sNKR1EwRcbNhyz2h/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h
+-/t2oatTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5
+-IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmlj
+-YXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD
+-ggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wimPQoZ+YeAEW5p5JYXMP80kWNy
+-OO7MHAGjHZQopDH2esRU1/blMVgDoszOYtuURXO1v0XJJLXVggKtI3lpjbi2Tc7P
+-TMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQ
+-HmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0/ZM/iZx4mER
+-dEr/VxqHD3VILs9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5Cuf
+-ReYNnyicsbkqWletNw+vHX/bvZ8=
+------END CERTIFICATE-----
+-
+-# Issuer: O=Starfield Technologies, Inc. OU=Starfield Class 2 Certification Authority
+-# Subject: O=Starfield Technologies, Inc. OU=Starfield Class 2 Certification Authority
+-# Label: "Starfield Class 2 CA"
+-# Serial: 0
+-# MD5 Fingerprint: 32:4a:4b:bb:c8:63:69:9b:be:74:9a:c6:dd:1d:46:24
+-# SHA1 Fingerprint: ad:7e:1c:28:b0:64:ef:8f:60:03:40:20:14:c3:d0:e3:37:0e:b5:8a
+-# SHA256 Fingerprint: 14:65:fa:20:53:97:b8:76:fa:a6:f0:a9:95:8e:55:90:e4:0f:cc:7f:aa:4f:b7:c2:c8:67:75:21:fb:5f:b6:58
+------BEGIN CERTIFICATE-----
+-MIIEDzCCAvegAwIBAgIBADANBgkqhkiG9w0BAQUFADBoMQswCQYDVQQGEwJVUzEl
+-MCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEyMDAGA1UECxMp
+-U3RhcmZpZWxkIENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDQw
+-NjI5MTczOTE2WhcNMzQwNjI5MTczOTE2WjBoMQswCQYDVQQGEwJVUzElMCMGA1UE
+-ChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEyMDAGA1UECxMpU3RhcmZp
+-ZWxkIENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwggEgMA0GCSqGSIb3
+-DQEBAQUAA4IBDQAwggEIAoIBAQC3Msj+6XGmBIWtDBFk385N78gDGIc/oav7PKaf
+-8MOh2tTYbitTkPskpD6E8J7oX+zlJ0T1KKY/e97gKvDIr1MvnsoFAZMej2YcOadN
+-+lq2cwQlZut3f+dZxkqZJRRU6ybH838Z1TBwj6+wRir/resp7defqgSHo9T5iaU0
+-X9tDkYI22WY8sbi5gv2cOj4QyDvvBmVmepsZGD3/cVE8MC5fvj13c7JdBmzDI1aa
+-K4UmkhynArPkPw2vCHmCuDY96pzTNbO8acr1zJ3o/WSNF4Azbl5KXZnJHoe0nRrA
+-1W4TNSNe35tfPe/W93bC6j67eA0cQmdrBNj41tpvi/JEoAGrAgEDo4HFMIHCMB0G
+-A1UdDgQWBBS/X7fRzt0fhvRbVazc1xDCDqmI5zCBkgYDVR0jBIGKMIGHgBS/X7fR
+-zt0fhvRbVazc1xDCDqmI56FspGowaDELMAkGA1UEBhMCVVMxJTAjBgNVBAoTHFN0
+-YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xMjAwBgNVBAsTKVN0YXJmaWVsZCBD
+-bGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8w
+-DQYJKoZIhvcNAQEFBQADggEBAAWdP4id0ckaVaGsafPzWdqbAYcaT1epoXkJKtv3
+-L7IezMdeatiDh6GX70k1PncGQVhiv45YuApnP+yz3SFmH8lU+nLMPUxA2IGvd56D
+-eruix/U0F47ZEUD0/CwqTRV/p2JdLiXTAAsgGh1o+Re49L2L7ShZ3U0WixeDyLJl
+-xy16paq8U4Zt3VekyvggQQto8PT7dL5WXXp59fkdheMtlb71cZBDzI0fmgAKhynp
+-VSJYACPq4xJDKVtHCN2MQWplBqjlIapBtJUhlbl90TSrE9atvNziPTnNvT51cKEY
+-WQPJIrSPnNVeKtelttQKbfi3QBFGmh95DmK/D5fs4C8fF5Q=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=DigiCert Assured ID Root CA O=DigiCert Inc OU=www.digicert.com
+-# Subject: CN=DigiCert Assured ID Root CA O=DigiCert Inc OU=www.digicert.com
+-# Label: "DigiCert Assured ID Root CA"
+-# Serial: 17154717934120587862167794914071425081
+-# MD5 Fingerprint: 87:ce:0b:7b:2a:0e:49:00:e1:58:71:9b:37:a8:93:72
+-# SHA1 Fingerprint: 05:63:b8:63:0d:62:d7:5a:bb:c8:ab:1e:4b:df:b5:a8:99:b2:4d:43
+-# SHA256 Fingerprint: 3e:90:99:b5:01:5e:8f:48:6c:00:bc:ea:9d:11:1e:e7:21:fa:ba:35:5a:89:bc:f1:df:69:56:1e:3d:c6:32:5c
+------BEGIN CERTIFICATE-----
+-MIIDtzCCAp+gAwIBAgIQDOfg5RfYRv6P5WD8G/AwOTANBgkqhkiG9w0BAQUFADBl
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv
+-b3QgQ0EwHhcNMDYxMTEwMDAwMDAwWhcNMzExMTEwMDAwMDAwWjBlMQswCQYDVQQG
+-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl
+-cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwggEi
+-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDhXO5EOAXLGH87dg+XESpa7c
+-JpSIqvTO9SA5KFhgDPiA2qkVlTJhPLWxKISKityfCgyDF3qPkKyK53lTXDGEKvYP
+-mDI2dsze3Tyoou9q+yHyUmHfnyDXH+Kx2f4YZNISW1/5WBg1vEfNoTb5a3/UsDg+
+-wRvDjDPZ2C8Y/igPs6eD1sNuRMBhNZYW/lmci3Zt1/GiSw0r/wty2p5g0I6QNcZ4
+-VYcgoc/lbQrISXwxmDNsIumH0DJaoroTghHtORedmTpyoeb6pNnVFzF1roV9Iq4/
+-AUaG9ih5yLHa5FcXxH4cDrC0kqZWs72yl+2qp/C3xag/lRbQ/6GW6whfGHdPAgMB
+-AAGjYzBhMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW
+-BBRF66Kv9JLLgjEtUYunpyGd823IDzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYun
+-pyGd823IDzANBgkqhkiG9w0BAQUFAAOCAQEAog683+Lt8ONyc3pklL/3cmbYMuRC
+-dWKuh+vy1dneVrOfzM4UKLkNl2BcEkxY5NM9g0lFWJc1aRqoR+pWxnmrEthngYTf
+-fwk8lOa4JiwgvT2zKIn3X/8i4peEH+ll74fg38FnSbNd67IJKusm7Xi+fT8r87cm
+-NW1fiQG2SVufAQWbqz0lwcy2f8Lxb4bG+mRo64EtlOtCt/qMHt1i8b5QZ7dsvfPx
+-H2sMNgcWfzd8qVttevESRmCD1ycEvkvOl77DZypoEd+A5wwzZr8TDRRu838fYxAe
+-+o0bJW1sj6W3YQGx0qMmoRBxna3iw/nDmVG3KwcIzi7mULKn+gpFL6Lw8g==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com
+-# Subject: CN=DigiCert Global Root CA O=DigiCert Inc OU=www.digicert.com
+-# Label: "DigiCert Global Root CA"
+-# Serial: 10944719598952040374951832963794454346
+-# MD5 Fingerprint: 79:e4:a9:84:0d:7d:3a:96:d7:c0:4f:e2:43:4c:89:2e
+-# SHA1 Fingerprint: a8:98:5d:3a:65:e5:e5:c4:b2:d7:d6:6d:40:c6:dd:2f:b1:9c:54:36
+-# SHA256 Fingerprint: 43:48:a0:e9:44:4c:78:cb:26:5e:05:8d:5e:89:44:b4:d8:4f:96:62:bd:26:db:25:7f:89:34:a4:43:c7:01:61
+------BEGIN CERTIFICATE-----
+-MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
+-QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
+-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
+-b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
+-9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
+-CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
+-nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
+-43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
+-T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
+-gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
+-BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
+-TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
+-DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
+-hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
+-06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
+-PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
+-YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
+-CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=DigiCert High Assurance EV Root CA O=DigiCert Inc OU=www.digicert.com
+-# Subject: CN=DigiCert High Assurance EV Root CA O=DigiCert Inc OU=www.digicert.com
+-# Label: "DigiCert High Assurance EV Root CA"
+-# Serial: 3553400076410547919724730734378100087
+-# MD5 Fingerprint: d4:74:de:57:5c:39:b2:d3:9c:85:83:c5:c0:65:49:8a
+-# SHA1 Fingerprint: 5f:b7:ee:06:33:e2:59:db:ad:0c:4c:9a:e6:d3:8f:1a:61:c7:dc:25
+-# SHA256 Fingerprint: 74:31:e5:f4:c3:c1:ce:46:90:77:4f:0b:61:e0:54:40:88:3b:a9:a0:1e:d0:0b:a6:ab:d7:80:6e:d3:b1:18:cf
+------BEGIN CERTIFICATE-----
+-MIIDxTCCAq2gAwIBAgIQAqxcJmoLQJuPC3nyrkYldzANBgkqhkiG9w0BAQUFADBs
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
+-ZSBFViBSb290IENBMB4XDTA2MTExMDAwMDAwMFoXDTMxMTExMDAwMDAwMFowbDEL
+-MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3
+-LmRpZ2ljZXJ0LmNvbTErMCkGA1UEAxMiRGlnaUNlcnQgSGlnaCBBc3N1cmFuY2Ug
+-RVYgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbM5XPm
+-+9S75S0tMqbf5YE/yc0lSbZxKsPVlDRnogocsF9ppkCxxLeyj9CYpKlBWTrT3JTW
+-PNt0OKRKzE0lgvdKpVMSOO7zSW1xkX5jtqumX8OkhPhPYlG++MXs2ziS4wblCJEM
+-xChBVfvLWokVfnHoNb9Ncgk9vjo4UFt3MRuNs8ckRZqnrG0AFFoEt7oT61EKmEFB
+-Ik5lYYeBQVCmeVyJ3hlKV9Uu5l0cUyx+mM0aBhakaHPQNAQTXKFx01p8VdteZOE3
+-hzBWBOURtCmAEvF5OYiiAhF8J2a3iLd48soKqDirCmTCv2ZdlYTBoSUeh10aUAsg
+-EsxBu24LUTi4S8sCAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQF
+-MAMBAf8wHQYDVR0OBBYEFLE+w2kD+L9HAdSYJhoIAu9jZCvDMB8GA1UdIwQYMBaA
+-FLE+w2kD+L9HAdSYJhoIAu9jZCvDMA0GCSqGSIb3DQEBBQUAA4IBAQAcGgaX3Nec
+-nzyIZgYIVyHbIUf4KmeqvxgydkAQV8GK83rZEWWONfqe/EW1ntlMMUu4kehDLI6z
+-eM7b41N5cdblIZQB2lWHmiRk9opmzN6cN82oNLFpmyPInngiK3BD41VHMWEZ71jF
+-hS9OMPagMRYjyOfiZRYzy78aG6A9+MpeizGLYAiJLQwGXFK3xPkKmNEVX58Svnw2
+-Yzi9RKR/5CYrCsSXaQ3pjOLAEFe4yHYSkVXySGnYvCoCWw9E1CAx2/S6cCZdkGCe
+-vEsXCS+0yx5DaMkHJ8HSXPfqIbloEpw8nL+e/IBcm2PN7EeqJSdnoDfzAIJ9VNep
+-+OkuE6N36B9K
+------END CERTIFICATE-----
+-
+-# Issuer: CN=SwissSign Gold CA - G2 O=SwissSign AG
+-# Subject: CN=SwissSign Gold CA - G2 O=SwissSign AG
+-# Label: "SwissSign Gold CA - G2"
+-# Serial: 13492815561806991280
+-# MD5 Fingerprint: 24:77:d9:a8:91:d1:3b:fa:88:2d:c2:ff:f8:cd:33:93
+-# SHA1 Fingerprint: d8:c5:38:8a:b7:30:1b:1b:6e:d4:7a:e6:45:25:3a:6f:9f:1a:27:61
+-# SHA256 Fingerprint: 62:dd:0b:e9:b9:f5:0a:16:3e:a0:f8:e7:5c:05:3b:1e:ca:57:ea:55:c8:68:8f:64:7c:68:81:f2:c8:35:7b:95
+------BEGIN CERTIFICATE-----
+-MIIFujCCA6KgAwIBAgIJALtAHEP1Xk+wMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNV
+-BAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxHzAdBgNVBAMTFlN3aXNzU2ln
+-biBHb2xkIENBIC0gRzIwHhcNMDYxMDI1MDgzMDM1WhcNMzYxMDI1MDgzMDM1WjBF
+-MQswCQYDVQQGEwJDSDEVMBMGA1UEChMMU3dpc3NTaWduIEFHMR8wHQYDVQQDExZT
+-d2lzc1NpZ24gR29sZCBDQSAtIEcyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
+-CgKCAgEAr+TufoskDhJuqVAtFkQ7kpJcyrhdhJJCEyq8ZVeCQD5XJM1QiyUqt2/8
+-76LQwB8CJEoTlo8jE+YoWACjR8cGp4QjK7u9lit/VcyLwVcfDmJlD909Vopz2q5+
+-bbqBHH5CjCA12UNNhPqE21Is8w4ndwtrvxEvcnifLtg+5hg3Wipy+dpikJKVyh+c
+-6bM8K8vzARO/Ws/BtQpgvd21mWRTuKCWs2/iJneRjOBiEAKfNA+k1ZIzUd6+jbqE
+-emA8atufK+ze3gE/bk3lUIbLtK/tREDFylqM2tIrfKjuvqblCqoOpd8FUrdVxyJd
+-MmqXl2MT28nbeTZ7hTpKxVKJ+STnnXepgv9VHKVxaSvRAiTysybUa9oEVeXBCsdt
+-MDeQKuSeFDNeFhdVxVu1yzSJkvGdJo+hB9TGsnhQ2wwMC3wLjEHXuendjIj3o02y
+-MszYF9rNt85mndT9Xv+9lz4pded+p2JYryU0pUHHPbwNUMoDAw8IWh+Vc3hiv69y
+-FGkOpeUDDniOJihC8AcLYiAQZzlG+qkDzAQ4embvIIO1jEpWjpEA/I5cgt6IoMPi
+-aG59je883WX0XaxR7ySArqpWl2/5rX3aYT+YdzylkbYcjCbaZaIJbcHiVOO5ykxM
+-gI93e2CaHt+28kgeDrpOVG2Y4OGiGqJ3UM/EY5LsRxmd6+ZrzsECAwEAAaOBrDCB
+-qTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUWyV7
+-lqRlUX64OfPAeGZe6Drn8O4wHwYDVR0jBBgwFoAUWyV7lqRlUX64OfPAeGZe6Drn
+-8O4wRgYDVR0gBD8wPTA7BglghXQBWQECAQEwLjAsBggrBgEFBQcCARYgaHR0cDov
+-L3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS8wDQYJKoZIhvcNAQEFBQADggIBACe6
+-45R88a7A3hfm5djV9VSwg/S7zV4Fe0+fdWavPOhWfvxyeDgD2StiGwC5+OlgzczO
+-UYrHUDFu4Up+GC9pWbY9ZIEr44OE5iKHjn3g7gKZYbge9LgriBIWhMIxkziWMaa5
+-O1M/wySTVltpkuzFwbs4AOPsF6m43Md8AYOfMke6UiI0HTJ6CVanfCU2qT1L2sCC
+-bwq7EsiHSycR+R4tx5M/nttfJmtS2S6K8RTGRI0Vqbe/vd6mGu6uLftIdxf+u+yv
+-GPUqUfA5hJeVbG4bwyvEdGB5JbAKJ9/fXtI5z0V9QkvfsywexcZdylU6oJxpmo/a
+-77KwPJ+HbBIrZXAVUjEaJM9vMSNQH4xPjyPDdEFjHFWoFN0+4FFQz/EbMFYOkrCC
+-hdiDyyJkvC24JdVUorgG6q2SpCSgwYa1ShNqR88uC1aVVMvOmttqtKay20EIhid3
+-92qgQmwLOM7XdVAyksLfKzAiSNDVQTglXaTpXZ/GlHXQRf0wl0OPkKsKx4ZzYEpp
+-Ld6leNcG2mqeSz53OiATIgHQv2ieY2BrNU0LbbqhPcCT4H8js1WtciVORvnSFu+w
+-ZMEBnunKoGqYDs/YYPIvSbjkQuE4NRb0yG5P94FW6LqjviOvrv1vA+ACOzB2+htt
+-Qc8Bsem4yWb02ybzOqR08kkkW8mw0FfB+j564ZfJ
+------END CERTIFICATE-----
+-
+-# Issuer: CN=SwissSign Silver CA - G2 O=SwissSign AG
+-# Subject: CN=SwissSign Silver CA - G2 O=SwissSign AG
+-# Label: "SwissSign Silver CA - G2"
+-# Serial: 5700383053117599563
+-# MD5 Fingerprint: e0:06:a1:c9:7d:cf:c9:fc:0d:c0:56:75:96:d8:62:13
+-# SHA1 Fingerprint: 9b:aa:e5:9f:56:ee:21:cb:43:5a:be:25:93:df:a7:f0:40:d1:1d:cb
+-# SHA256 Fingerprint: be:6c:4d:a2:bb:b9:ba:59:b6:f3:93:97:68:37:42:46:c3:c0:05:99:3f:a9:8f:02:0d:1d:ed:be:d4:8a:81:d5
+------BEGIN CERTIFICATE-----
+-MIIFvTCCA6WgAwIBAgIITxvUL1S7L0swDQYJKoZIhvcNAQEFBQAwRzELMAkGA1UE
+-BhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEhMB8GA1UEAxMYU3dpc3NTaWdu
+-IFNpbHZlciBDQSAtIEcyMB4XDTA2MTAyNTA4MzI0NloXDTM2MTAyNTA4MzI0Nlow
+-RzELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEhMB8GA1UEAxMY
+-U3dpc3NTaWduIFNpbHZlciBDQSAtIEcyMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A
+-MIICCgKCAgEAxPGHf9N4Mfc4yfjDmUO8x/e8N+dOcbpLj6VzHVxumK4DV644N0Mv
+-Fz0fyM5oEMF4rhkDKxD6LHmD9ui5aLlV8gREpzn5/ASLHvGiTSf5YXu6t+WiE7br
+-YT7QbNHm+/pe7R20nqA1W6GSy/BJkv6FCgU+5tkL4k+73JU3/JHpMjUi0R86TieF
+-nbAVlDLaYQ1HTWBCrpJH6INaUFjpiou5XaHc3ZlKHzZnu0jkg7Y360g6rw9njxcH
+-6ATK72oxh9TAtvmUcXtnZLi2kUpCe2UuMGoM9ZDulebyzYLs2aFK7PayS+VFheZt
+-eJMELpyCbTapxDFkH4aDCyr0NQp4yVXPQbBH6TCfmb5hqAaEuSh6XzjZG6k4sIN/
+-c8HDO0gqgg8hm7jMqDXDhBuDsz6+pJVpATqJAHgE2cn0mRmrVn5bi4Y5FZGkECwJ
+-MoBgs5PAKrYYC51+jUnyEEp/+dVGLxmSo5mnJqy7jDzmDrxHB9xzUfFwZC8I+bRH
+-HTBsROopN4WSaGa8gzj+ezku01DwH/teYLappvonQfGbGHLy9YR0SslnxFSuSGTf
+-jNFusB3hB48IHpmccelM2KX3RxIfdNFRnobzwqIjQAtz20um53MGjMGg6cFZrEb6
+-5i/4z3GcRm25xBWNOHkDRUjvxF3XCO6HOSKGsg0PWEP3calILv3q1h8CAwEAAaOB
+-rDCBqTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
+-F6DNweRBtjpbO8tFnb0cwpj6hlgwHwYDVR0jBBgwFoAUF6DNweRBtjpbO8tFnb0c
+-wpj6hlgwRgYDVR0gBD8wPTA7BglghXQBWQEDAQEwLjAsBggrBgEFBQcCARYgaHR0
+-cDovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS8wDQYJKoZIhvcNAQEFBQADggIB
+-AHPGgeAn0i0P4JUw4ppBf1AsX19iYamGamkYDHRJ1l2E6kFSGG9YrVBWIGrGvShp
+-WJHckRE1qTodvBqlYJ7YH39FkWnZfrt4csEGDyrOj4VwYaygzQu4OSlWhDJOhrs9
+-xCrZ1x9y7v5RoSJBsXECYxqCsGKrXlcSH9/L3XWgwF15kIwb4FDm3jH+mHtwX6WQ
+-2K34ArZv02DdQEsixT2tOnqfGhpHkXkzuoLcMmkDlm4fS/Bx/uNncqCxv1yL5PqZ
+-IseEuRuNI5c/7SXgz2W79WEE790eslpBIlqhn10s6FvJbakMDHiqYMZWjwFaDGi8
+-aRl5xB9+lwW/xekkUV7U1UtT7dkjWjYDZaPBA61BMPNGG4WQr2W11bHkFlt4dR2X
+-em1ZqSqPe97Dh4kQmUlzeMg9vVE1dCrV8X5pGyq7O70luJpaPXJhkGaH7gzWTdQR
+-dAtq/gsD/KNVV4n+SsuuWxcFyPKNIzFTONItaj+CuY0IavdeQXRuwxF+B6wpYJE/
+-OMpXEA29MC/HpeZBoNquBYeaoKRlbEwJDIm6uNO5wJOKMPqN5ZprFQFOZ6raYlY+
+-hAhm0sQ2fac+EPyI4NSA5QC9qvNOBqN6avlicuMJT+ubDgEj8Z+7fNzcbBGXJbLy
+-tGMU0gYqZ4yD9c7qB9iaah7s5Aq7KkzrCWA5zspi2C5u
+------END CERTIFICATE-----
+-
+-# Issuer: CN=SecureTrust CA O=SecureTrust Corporation
+-# Subject: CN=SecureTrust CA O=SecureTrust Corporation
+-# Label: "SecureTrust CA"
+-# Serial: 17199774589125277788362757014266862032
+-# MD5 Fingerprint: dc:32:c3:a7:6d:25:57:c7:68:09:9d:ea:2d:a9:a2:d1
+-# SHA1 Fingerprint: 87:82:c6:c3:04:35:3b:cf:d2:96:92:d2:59:3e:7d:44:d9:34:ff:11
+-# SHA256 Fingerprint: f1:c1:b5:0a:e5:a2:0d:d8:03:0e:c9:f6:bc:24:82:3d:d3:67:b5:25:57:59:b4:e7:1b:61:fc:e9:f7:37:5d:73
+------BEGIN CERTIFICATE-----
+-MIIDuDCCAqCgAwIBAgIQDPCOXAgWpa1Cf/DrJxhZ0DANBgkqhkiG9w0BAQUFADBI
+-MQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24x
+-FzAVBgNVBAMTDlNlY3VyZVRydXN0IENBMB4XDTA2MTEwNzE5MzExOFoXDTI5MTIz
+-MTE5NDA1NVowSDELMAkGA1UEBhMCVVMxIDAeBgNVBAoTF1NlY3VyZVRydXN0IENv
+-cnBvcmF0aW9uMRcwFQYDVQQDEw5TZWN1cmVUcnVzdCBDQTCCASIwDQYJKoZIhvcN
+-AQEBBQADggEPADCCAQoCggEBAKukgeWVzfX2FI7CT8rU4niVWJxB4Q2ZQCQXOZEz
+-Zum+4YOvYlyJ0fwkW2Gz4BERQRwdbvC4u/jep4G6pkjGnx29vo6pQT64lO0pGtSO
+-0gMdA+9tDWccV9cGrcrI9f4Or2YlSASWC12juhbDCE/RRvgUXPLIXgGZbf2IzIao
+-wW8xQmxSPmjL8xk037uHGFaAJsTQ3MBv396gwpEWoGQRS0S8Hvbn+mPeZqx2pHGj
+-7DaUaHp3pLHnDi+BeuK1cobvomuL8A/b01k/unK8RCSc43Oz969XL0Imnal0ugBS
+-8kvNU3xHCzaFDmapCJcWNFfBZveA4+1wVMeT4C4oFVmHursCAwEAAaOBnTCBmjAT
+-BgkrBgEEAYI3FAIEBh4EAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB
+-/zAdBgNVHQ4EFgQUQjK2FvoE/f5dS3rD/fdMQB1aQ68wNAYDVR0fBC0wKzApoCeg
+-JYYjaHR0cDovL2NybC5zZWN1cmV0cnVzdC5jb20vU1RDQS5jcmwwEAYJKwYBBAGC
+-NxUBBAMCAQAwDQYJKoZIhvcNAQEFBQADggEBADDtT0rhWDpSclu1pqNlGKa7UTt3
+-6Z3q059c4EVlew3KW+JwULKUBRSuSceNQQcSc5R+DCMh/bwQf2AQWnL1mA6s7Ll/
+-3XpvXdMc9P+IBWlCqQVxyLesJugutIxq/3HcuLHfmbx8IVQr5Fiiu1cprp6poxkm
+-D5kuCLDv/WnPmRoJjeOnnyvJNjR7JLN4TJUXpAYmHrZkUjZfYGfZnMUFdAvnZyPS
+-CPyI6a6Lf+Ew9Dd+/cYy2i2eRDAwbO4H3tI0/NL/QPZL9GZGBlSm8jIKYyYwa5vR
+-3ItHuuG51WLQoqD0ZwV4KWMabwTW+MZMo5qxN7SN5ShLHZ4swrhovO0C7jE=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Secure Global CA O=SecureTrust Corporation
+-# Subject: CN=Secure Global CA O=SecureTrust Corporation
+-# Label: "Secure Global CA"
+-# Serial: 9751836167731051554232119481456978597
+-# MD5 Fingerprint: cf:f4:27:0d:d4:ed:dc:65:16:49:6d:3d:da:bf:6e:de
+-# SHA1 Fingerprint: 3a:44:73:5a:e5:81:90:1f:24:86:61:46:1e:3b:9c:c4:5f:f5:3a:1b
+-# SHA256 Fingerprint: 42:00:f5:04:3a:c8:59:0e:bb:52:7d:20:9e:d1:50:30:29:fb:cb:d4:1c:a1:b5:06:ec:27:f1:5a:de:7d:ac:69
+------BEGIN CERTIFICATE-----
+-MIIDvDCCAqSgAwIBAgIQB1YipOjUiolN9BPI8PjqpTANBgkqhkiG9w0BAQUFADBK
+-MQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3QgQ29ycG9yYXRpb24x
+-GTAXBgNVBAMTEFNlY3VyZSBHbG9iYWwgQ0EwHhcNMDYxMTA3MTk0MjI4WhcNMjkx
+-MjMxMTk1MjA2WjBKMQswCQYDVQQGEwJVUzEgMB4GA1UEChMXU2VjdXJlVHJ1c3Qg
+-Q29ycG9yYXRpb24xGTAXBgNVBAMTEFNlY3VyZSBHbG9iYWwgQ0EwggEiMA0GCSqG
+-SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNS7YrGxVaQZx5RNoJLNP2MwhR/jxYDiJ
+-iQPpvepeRlMJ3Fz1Wuj3RSoC6zFh1ykzTM7HfAo3fg+6MpjhHZevj8fcyTiW89sa
+-/FHtaMbQbqR8JNGuQsiWUGMu4P51/pinX0kuleM5M2SOHqRfkNJnPLLZ/kG5VacJ
+-jnIFHovdRIWCQtBJwB1g8NEXLJXr9qXBkqPFwqcIYA1gBBCWeZ4WNOaptvolRTnI
+-HmX5k/Wq8VLcmZg9pYYaDDUz+kulBAYVHDGA76oYa8J719rO+TMg1fW9ajMtgQT7
+-sFzUnKPiXB3jqUJ1XnvUd+85VLrJChgbEplJL4hL/VBi0XPnj3pDAgMBAAGjgZ0w
+-gZowEwYJKwYBBAGCNxQCBAYeBABDAEEwCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQF
+-MAMBAf8wHQYDVR0OBBYEFK9EBMJBfkiD2045AuzshHrmzsmkMDQGA1UdHwQtMCsw
+-KaAnoCWGI2h0dHA6Ly9jcmwuc2VjdXJldHJ1c3QuY29tL1NHQ0EuY3JsMBAGCSsG
+-AQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEBBQUAA4IBAQBjGghAfaReUw132HquHw0L
+-URYD7xh8yOOvaliTFGCRsoTciE6+OYo68+aCiV0BN7OrJKQVDpI1WkpEXk5X+nXO
+-H0jOZvQ8QCaSmGwb7iRGDBezUqXbpZGRzzfTb+cnCDpOGR86p1hcF895P4vkp9Mm
+-I50mD1hp/Ed+stCNi5O/KU9DaXR2Z0vPB4zmAve14bRDtUstFJ/53CYNv6ZHdAbY
+-iNE6KTCEztI5gGIbqMdXSbxqVVFnFUq+NQfk1XWYN3kwFNspnWzFacxHVaIw98xc
+-f8LDmBxrThaA63p4ZUWiABqvDA1VZDRIuJK58bRQKfJPIx/abKwfROHdI3hRW8cW
+------END CERTIFICATE-----
+-
+-# Issuer: CN=COMODO Certification Authority O=COMODO CA Limited
+-# Subject: CN=COMODO Certification Authority O=COMODO CA Limited
+-# Label: "COMODO Certification Authority"
+-# Serial: 104350513648249232941998508985834464573
+-# MD5 Fingerprint: 5c:48:dc:f7:42:72:ec:56:94:6d:1c:cc:71:35:80:75
+-# SHA1 Fingerprint: 66:31:bf:9e:f7:4f:9e:b6:c9:d5:a6:0c:ba:6a:be:d1:f7:bd:ef:7b
+-# SHA256 Fingerprint: 0c:2c:d6:3d:f7:80:6f:a3:99:ed:e8:09:11:6b:57:5b:f8:79:89:f0:65:18:f9:80:8c:86:05:03:17:8b:af:66
+------BEGIN CERTIFICATE-----
+-MIIEHTCCAwWgAwIBAgIQToEtioJl4AsC7j41AkblPTANBgkqhkiG9w0BAQUFADCB
+-gTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
+-A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJzAlBgNV
+-BAMTHkNPTU9ETyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNjEyMDEwMDAw
+-MDBaFw0yOTEyMzEyMzU5NTlaMIGBMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl
+-YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01P
+-RE8gQ0EgTGltaXRlZDEnMCUGA1UEAxMeQ09NT0RPIENlcnRpZmljYXRpb24gQXV0
+-aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECLi3LjkRv3
+-UcEbVASY06m/weaKXTuH+7uIzg3jLz8GlvCiKVCZrts7oVewdFFxze1CkU1B/qnI
+-2GqGd0S7WWaXUF601CxwRM/aN5VCaTwwxHGzUvAhTaHYujl8HJ6jJJ3ygxaYqhZ8
+-Q5sVW7euNJH+1GImGEaaP+vB+fGQV+useg2L23IwambV4EajcNxo2f8ESIl33rXp
+-+2dtQem8Ob0y2WIC8bGoPW43nOIv4tOiJovGuFVDiOEjPqXSJDlqR6sA1KGzqSX+
+-DT+nHbrTUcELpNqsOO9VUCQFZUaTNE8tja3G1CEZ0o7KBWFxB3NH5YoZEr0ETc5O
+-nKVIrLsm9wIDAQABo4GOMIGLMB0GA1UdDgQWBBQLWOWLxkwVN6RAqTCpIb5HNlpW
+-/zAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBJBgNVHR8EQjBAMD6g
+-PKA6hjhodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9DZXJ0aWZpY2F0aW9u
+-QXV0aG9yaXR5LmNybDANBgkqhkiG9w0BAQUFAAOCAQEAPpiem/Yb6dc5t3iuHXIY
+-SdOH5EOC6z/JqvWote9VfCFSZfnVDeFs9D6Mk3ORLgLETgdxb8CPOGEIqB6BCsAv
+-IC9Bi5HcSEW88cbeunZrM8gALTFGTO3nnc+IlP8zwFboJIYmuNg4ON8qa90SzMc/
+-RxdMosIGlgnW2/4/PEZB31jiVg88O8EckzXZOFKs7sjsLjBOlDW0JB9LeGna8gI4
+-zJVSk/BwJVmcIGfE7vmLV2H0knZ9P4SNVbfo5azV8fUZVqZa+5Acr5Pr5RzUZ5dd
+-BA6+C4OmF4O5MBKgxTMVBbkN+8cFduPYSo38NBejxiEovjBFMR7HeL5YYTisO+IB
+-ZQ==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Network Solutions Certificate Authority O=Network Solutions L.L.C.
+-# Subject: CN=Network Solutions Certificate Authority O=Network Solutions L.L.C.
+-# Label: "Network Solutions Certificate Authority"
+-# Serial: 116697915152937497490437556386812487904
+-# MD5 Fingerprint: d3:f3:a6:16:c0:fa:6b:1d:59:b1:2d:96:4d:0e:11:2e
+-# SHA1 Fingerprint: 74:f8:a3:c3:ef:e7:b3:90:06:4b:83:90:3c:21:64:60:20:e5:df:ce
+-# SHA256 Fingerprint: 15:f0:ba:00:a3:ac:7a:f3:ac:88:4c:07:2b:10:11:a0:77:bd:77:c0:97:f4:01:64:b2:f8:59:8a:bd:83:86:0c
+------BEGIN CERTIFICATE-----
+-MIID5jCCAs6gAwIBAgIQV8szb8JcFuZHFhfjkDFo4DANBgkqhkiG9w0BAQUFADBi
+-MQswCQYDVQQGEwJVUzEhMB8GA1UEChMYTmV0d29yayBTb2x1dGlvbnMgTC5MLkMu
+-MTAwLgYDVQQDEydOZXR3b3JrIFNvbHV0aW9ucyBDZXJ0aWZpY2F0ZSBBdXRob3Jp
+-dHkwHhcNMDYxMjAxMDAwMDAwWhcNMjkxMjMxMjM1OTU5WjBiMQswCQYDVQQGEwJV
+-UzEhMB8GA1UEChMYTmV0d29yayBTb2x1dGlvbnMgTC5MLkMuMTAwLgYDVQQDEydO
+-ZXR3b3JrIFNvbHV0aW9ucyBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggEiMA0GCSqG
+-SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkvH6SMG3G2I4rC7xGzuAnlt7e+foS0zwz
+-c7MEL7xxjOWftiJgPl9dzgn/ggwbmlFQGiaJ3dVhXRncEg8tCqJDXRfQNJIg6nPP
+-OCwGJgl6cvf6UDL4wpPTaaIjzkGxzOTVHzbRijr4jGPiFFlp7Q3Tf2vouAPlT2rl
+-mGNpSAW+Lv8ztumXWWn4Zxmuk2GWRBXTcrA/vGp97Eh/jcOrqnErU2lBUzS1sLnF
+-BgrEsEX1QV1uiUV7PTsmjHTC5dLRfbIR1PtYMiKagMnc/Qzpf14Dl847ABSHJ3A4
+-qY5usyd2mFHgBeMhqxrVhSI8KbWaFsWAqPS7azCPL0YCorEMIuDTAgMBAAGjgZcw
+-gZQwHQYDVR0OBBYEFCEwyfsA106Y2oeqKtCnLrFAMadMMA4GA1UdDwEB/wQEAwIB
+-BjAPBgNVHRMBAf8EBTADAQH/MFIGA1UdHwRLMEkwR6BFoEOGQWh0dHA6Ly9jcmwu
+-bmV0c29sc3NsLmNvbS9OZXR3b3JrU29sdXRpb25zQ2VydGlmaWNhdGVBdXRob3Jp
+-dHkuY3JsMA0GCSqGSIb3DQEBBQUAA4IBAQC7rkvnt1frf6ott3NHhWrB5KUd5Oc8
+-6fRZZXe1eltajSU24HqXLjjAV2CDmAaDn7l2em5Q4LqILPxFzBiwmZVRDuwduIj/
+-h1AcgsLj4DKAv6ALR8jDMe+ZZzKATxcheQxpXN5eNK4CtSbqUN9/GGUsyfJj4akH
+-/nxxH2szJGoeBfcFaMBqEssuXmHLrijTfsK0ZpEmXzwuJF/LWA/rKOyvEZbz3Htv
+-wKeI8lN3s2Berq4o2jUsbzRF0ybh3uxbTydrFny9RAQYgrOJeRcQcT16ohZO9QHN
+-pGxlaKFJdlxDydi8NmdspZS11My5vWo1ViHe2MPr+8ukYEywVaCge1ey
+------END CERTIFICATE-----
+-
+-# Issuer: CN=COMODO ECC Certification Authority O=COMODO CA Limited
+-# Subject: CN=COMODO ECC Certification Authority O=COMODO CA Limited
+-# Label: "COMODO ECC Certification Authority"
+-# Serial: 41578283867086692638256921589707938090
+-# MD5 Fingerprint: 7c:62:ff:74:9d:31:53:5e:68:4a:d5:78:aa:1e:bf:23
+-# SHA1 Fingerprint: 9f:74:4e:9f:2b:4d:ba:ec:0f:31:2c:50:b6:56:3b:8e:2d:93:c3:11
+-# SHA256 Fingerprint: 17:93:92:7a:06:14:54:97:89:ad:ce:2f:8f:34:f7:f0:b6:6d:0f:3a:e3:a3:b8:4d:21:ec:15:db:ba:4f:ad:c7
+------BEGIN CERTIFICATE-----
+-MIICiTCCAg+gAwIBAgIQH0evqmIAcFBUTAGem2OZKjAKBggqhkjOPQQDAzCBhTEL
+-MAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UE
+-BxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMT
+-IkNPTU9ETyBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDgwMzA2MDAw
+-MDAwWhcNMzgwMTE4MjM1OTU5WjCBhTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdy
+-ZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09N
+-T0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBFQ0MgQ2VydGlmaWNhdGlv
+-biBBdXRob3JpdHkwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQDR3svdcmCFYX7deSR
+-FtSrYpn1PlILBs5BAH+X4QokPB0BBO490o0JlwzgdeT6+3eKKvUDYEs2ixYjFq0J
+-cfRK9ChQtP6IHG4/bC8vCVlbpVsLM5niwz2J+Wos77LTBumjQjBAMB0GA1UdDgQW
+-BBR1cacZSBm8nZ3qQUfflMRId5nTeTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/
+-BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjEA7wNbeqy3eApyt4jf/7VGFAkK+qDm
+-fQjGGoe9GKhzvSbKYAydzpmfz1wPMOG+FDHqAjAU9JM8SaczepBGR7NjfRObTrdv
+-GDeAU/7dIOA1mjbRxwG55tzd8/8dLDoWV9mSOdY=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Certigna O=Dhimyotis
+-# Subject: CN=Certigna O=Dhimyotis
+-# Label: "Certigna"
+-# Serial: 18364802974209362175
+-# MD5 Fingerprint: ab:57:a6:5b:7d:42:82:19:b5:d8:58:26:28:5e:fd:ff
+-# SHA1 Fingerprint: b1:2e:13:63:45:86:a4:6f:1a:b2:60:68:37:58:2d:c4:ac:fd:94:97
+-# SHA256 Fingerprint: e3:b6:a2:db:2e:d7:ce:48:84:2f:7a:c5:32:41:c7:b7:1d:54:14:4b:fb:40:c1:1f:3f:1d:0b:42:f5:ee:a1:2d
+------BEGIN CERTIFICATE-----
+-MIIDqDCCApCgAwIBAgIJAP7c4wEPyUj/MA0GCSqGSIb3DQEBBQUAMDQxCzAJBgNV
+-BAYTAkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hMB4X
+-DTA3MDYyOTE1MTMwNVoXDTI3MDYyOTE1MTMwNVowNDELMAkGA1UEBhMCRlIxEjAQ
+-BgNVBAoMCURoaW15b3RpczERMA8GA1UEAwwIQ2VydGlnbmEwggEiMA0GCSqGSIb3
+-DQEBAQUAA4IBDwAwggEKAoIBAQDIaPHJ1tazNHUmgh7stL7qXOEm7RFHYeGifBZ4
+-QCHkYJ5ayGPhxLGWkv8YbWkj4Sti993iNi+RB7lIzw7sebYs5zRLcAglozyHGxny
+-gQcPOJAZ0xH+hrTy0V4eHpbNgGzOOzGTtvKg0KmVEn2lmsxryIRWijOp5yIVUxbw
+-zBfsV1/pogqYCd7jX5xv3EjjhQsVWqa6n6xI4wmy9/Qy3l40vhx4XUJbzg4ij02Q
+-130yGLMLLGq/jj8UEYkgDncUtT2UCIf3JR7VsmAA7G8qKCVuKj4YYxclPz5EIBb2
+-JsglrgVKtOdjLPOMFlN+XPsRGgjBRmKfIrjxwo1p3Po6WAbfAgMBAAGjgbwwgbkw
+-DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUGu3+QTmQtCRZvgHyUtVF9lo53BEw
+-ZAYDVR0jBF0wW4AUGu3+QTmQtCRZvgHyUtVF9lo53BGhOKQ2MDQxCzAJBgNVBAYT
+-AkZSMRIwEAYDVQQKDAlEaGlteW90aXMxETAPBgNVBAMMCENlcnRpZ25hggkA/tzj
+-AQ/JSP8wDgYDVR0PAQH/BAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIABzANBgkqhkiG
+-9w0BAQUFAAOCAQEAhQMeknH2Qq/ho2Ge6/PAD/Kl1NqV5ta+aDY9fm4fTIrv0Q8h
+-bV6lUmPOEvjvKtpv6zf+EwLHyzs+ImvaYS5/1HI93TDhHkxAGYwP15zRgzB7mFnc
+-fca5DClMoTOi62c6ZYTTluLtdkVwj7Ur3vkj1kluPBS1xp81HlDQwY9qcEQCYsuu
+-HWhBp6pX6FOqB9IG9tUUBguRA3UsbHK1YZWaDYu5Def131TN3ubY1gkIl2PlwS6w
+-t0QmwCbAr1UwnjvVNioZBPRcHv/PLLf/0P2HQBHVESO7SMAhqaQoLf0V+LBOK/Qw
+-WyH8EZE0vkHve52Xdf+XlcCWWC/qu0bXu+TZLg==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Cybertrust Global Root O=Cybertrust, Inc
+-# Subject: CN=Cybertrust Global Root O=Cybertrust, Inc
+-# Label: "Cybertrust Global Root"
+-# Serial: 4835703278459682877484360
+-# MD5 Fingerprint: 72:e4:4a:87:e3:69:40:80:77:ea:bc:e3:f4:ff:f0:e1
+-# SHA1 Fingerprint: 5f:43:e5:b1:bf:f8:78:8c:ac:1c:c7:ca:4a:9a:c6:22:2b:cc:34:c6
+-# SHA256 Fingerprint: 96:0a:df:00:63:e9:63:56:75:0c:29:65:dd:0a:08:67:da:0b:9c:bd:6e:77:71:4a:ea:fb:23:49:ab:39:3d:a3
+------BEGIN CERTIFICATE-----
+-MIIDoTCCAomgAwIBAgILBAAAAAABD4WqLUgwDQYJKoZIhvcNAQEFBQAwOzEYMBYG
+-A1UEChMPQ3liZXJ0cnVzdCwgSW5jMR8wHQYDVQQDExZDeWJlcnRydXN0IEdsb2Jh
+-bCBSb290MB4XDTA2MTIxNTA4MDAwMFoXDTIxMTIxNTA4MDAwMFowOzEYMBYGA1UE
+-ChMPQ3liZXJ0cnVzdCwgSW5jMR8wHQYDVQQDExZDeWJlcnRydXN0IEdsb2JhbCBS
+-b290MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Mi8vRRQZhP/8NN5
+-7CPytxrHjoXxEnOmGaoQ25yiZXRadz5RfVb23CO21O1fWLE3TdVJDm71aofW0ozS
+-J8bi/zafmGWgE07GKmSb1ZASzxQG9Dvj1Ci+6A74q05IlG2OlTEQXO2iLb3VOm2y
+-HLtgwEZLAfVJrn5GitB0jaEMAs7u/OePuGtm839EAL9mJRQr3RAwHQeWP032a7iP
+-t3sMpTjr3kfb1V05/Iin89cqdPHoWqI7n1C6poxFNcJQZZXcY4Lv3b93TZxiyWNz
+-FtApD0mpSPCzqrdsxacwOUBdrsTiXSZT8M4cIwhhqJQZugRiQOwfOHB3EgZxpzAY
+-XSUnpQIDAQABo4GlMIGiMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/
+-MB0GA1UdDgQWBBS2CHsNesysIEyGVjJez6tuhS1wVzA/BgNVHR8EODA2MDSgMqAw
+-hi5odHRwOi8vd3d3Mi5wdWJsaWMtdHJ1c3QuY29tL2NybC9jdC9jdHJvb3QuY3Js
+-MB8GA1UdIwQYMBaAFLYIew16zKwgTIZWMl7Pq26FLXBXMA0GCSqGSIb3DQEBBQUA
+-A4IBAQBW7wojoFROlZfJ+InaRcHUowAl9B8Tq7ejhVhpwjCt2BWKLePJzYFa+HMj
+-Wqd8BfP9IjsO0QbE2zZMcwSO5bAi5MXzLqXZI+O4Tkogp24CJJ8iYGd7ix1yCcUx
+-XOl5n4BHPa2hCwcUPUf/A2kaDAtE52Mlp3+yybh2hO0j9n0Hq0V+09+zv+mKts2o
+-omcrUtW3ZfA5TGOgkXmTUg9U3YO7n9GPp1Nzw8v/MOx8BLjYRB+TX3EJIrduPuoc
+-A06dGiBh+4E37F78CkWr1+cXVdCg6mCbpvbjjFspwgZgFJ0tl0ypkxWdYcQBX0jW
+-WL1WMRJOEcgh4LMRkWXbtKaIOM5V
+------END CERTIFICATE-----
+-
+-# Issuer: O=Chunghwa Telecom Co., Ltd. OU=ePKI Root Certification Authority
+-# Subject: O=Chunghwa Telecom Co., Ltd. OU=ePKI Root Certification Authority
+-# Label: "ePKI Root Certification Authority"
+-# Serial: 28956088682735189655030529057352760477
+-# MD5 Fingerprint: 1b:2e:00:ca:26:06:90:3d:ad:fe:6f:15:68:d3:6b:b3
+-# SHA1 Fingerprint: 67:65:0d:f1:7e:8e:7e:5b:82:40:a4:f4:56:4b:cf:e2:3d:69:c6:f0
+-# SHA256 Fingerprint: c0:a6:f4:dc:63:a2:4b:fd:cf:54:ef:2a:6a:08:2a:0a:72:de:35:80:3e:2f:f5:ff:52:7a:e5:d8:72:06:df:d5
+------BEGIN CERTIFICATE-----
+-MIIFsDCCA5igAwIBAgIQFci9ZUdcr7iXAF7kBtK8nTANBgkqhkiG9w0BAQUFADBe
+-MQswCQYDVQQGEwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0
+-ZC4xKjAoBgNVBAsMIWVQS0kgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe
+-Fw0wNDEyMjAwMjMxMjdaFw0zNDEyMjAwMjMxMjdaMF4xCzAJBgNVBAYTAlRXMSMw
+-IQYDVQQKDBpDaHVuZ2h3YSBUZWxlY29tIENvLiwgTHRkLjEqMCgGA1UECwwhZVBL
+-SSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEF
+-AAOCAg8AMIICCgKCAgEA4SUP7o3biDN1Z82tH306Tm2d0y8U82N0ywEhajfqhFAH
+-SyZbCUNsIZ5qyNUD9WBpj8zwIuQf5/dqIjG3LBXy4P4AakP/h2XGtRrBp0xtInAh
+-ijHyl3SJCRImHJ7K2RKilTza6We/CKBk49ZCt0Xvl/T29de1ShUCWH2YWEtgvM3X
+-DZoTM1PRYfl61dd4s5oz9wCGzh1NlDivqOx4UXCKXBCDUSH3ET00hl7lSM2XgYI1
+-TBnsZfZrxQWh7kcT1rMhJ5QQCtkkO7q+RBNGMD+XPNjX12ruOzjjK9SXDrkb5wdJ
+-fzcq+Xd4z1TtW0ado4AOkUPB1ltfFLqfpo0kR0BZv3I4sjZsN/+Z0V0OWQqraffA
+-sgRFelQArr5T9rXn4fg8ozHSqf4hUmTFpmfwdQcGlBSBVcYn5AGPF8Fqcde+S/uU
+-WH1+ETOxQvdibBjWzwloPn9s9h6PYq2lY9sJpx8iQkEeb5mKPtf5P0B6ebClAZLS
+-nT0IFaUQAS2zMnaolQ2zepr7BxB4EW/hj8e6DyUadCrlHJhBmd8hh+iVBmoKs2pH
+-dmX2Os+PYhcZewoozRrSgx4hxyy/vv9haLdnG7t4TY3OZ+XkwY63I2binZB1NJip
+-NiuKmpS5nezMirH4JYlcWrYvjB9teSSnUmjDhDXiZo1jDiVN1Rmy5nk3pyKdVDEC
+-AwEAAaNqMGgwHQYDVR0OBBYEFB4M97Zn8uGSJglFwFU5Lnc/QkqiMAwGA1UdEwQF
+-MAMBAf8wOQYEZyoHAAQxMC8wLQIBADAJBgUrDgMCGgUAMAcGBWcqAwAABBRFsMLH
+-ClZ87lt4DJX5GFPBphzYEDANBgkqhkiG9w0BAQUFAAOCAgEACbODU1kBPpVJufGB
+-uvl2ICO1J2B01GqZNF5sAFPZn/KmsSQHRGoqxqWOeBLoR9lYGxMqXnmbnwoqZ6Yl
+-PwZpVnPDimZI+ymBV3QGypzqKOg4ZyYr8dW1P2WT+DZdjo2NQCCHGervJ8A9tDkP
+-JXtoUHRVnAxZfVo9QZQlUgjgRywVMRnVvwdVxrsStZf0X4OFunHB2WyBEXYKCrC/
+-gpf36j36+uwtqSiUO1bd0lEursC9CBWMd1I0ltabrNMdjmEPNXubrjlpC2JgQCA2
+-j6/7Nu4tCEoduL+bXPjqpRugc6bY+G7gMwRfaKonh+3ZwZCc7b3jajWvY9+rGNm6
+-5ulK6lCKD2GTHuItGeIwlDWSXQ62B68ZgI9HkFFLLk3dheLSClIKF5r8GrBQAuUB
+-o2M3IUxExJtRmREOc5wGj1QupyheRDmHVi03vYVElOEMSyycw5KFNGHLD7ibSkNS
+-/jQ6fbjpKdx2qcgw+BRxgMYeNkh0IkFch4LoGHGLQYlE535YW6i4jRPpp2zDR+2z
+-Gp1iro2C6pSe3VkQw63d4k3jMdXH7OjysP6SHhYKGvzZ8/gntsm+HbRsZJB/9OTE
+-W9c3rkIO3aQab3yIVMUWbuF6aC74Or8NpDyJO3inTmODBCEIZ43ygknQW/2xzQ+D
+-hNQ+IIX3Sj0rnP0qCglN6oH4EZw=
+------END CERTIFICATE-----
+-
+-# Issuer: O=certSIGN OU=certSIGN ROOT CA
+-# Subject: O=certSIGN OU=certSIGN ROOT CA
+-# Label: "certSIGN ROOT CA"
+-# Serial: 35210227249154
+-# MD5 Fingerprint: 18:98:c0:d6:e9:3a:fc:f9:b0:f5:0c:f7:4b:01:44:17
+-# SHA1 Fingerprint: fa:b7:ee:36:97:26:62:fb:2d:b0:2a:f6:bf:03:fd:e8:7c:4b:2f:9b
+-# SHA256 Fingerprint: ea:a9:62:c4:fa:4a:6b:af:eb:e4:15:19:6d:35:1c:cd:88:8d:4f:53:f3:fa:8a:e6:d7:c4:66:a9:4e:60:42:bb
+------BEGIN CERTIFICATE-----
+-MIIDODCCAiCgAwIBAgIGIAYFFnACMA0GCSqGSIb3DQEBBQUAMDsxCzAJBgNVBAYT
+-AlJPMREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBD
+-QTAeFw0wNjA3MDQxNzIwMDRaFw0zMTA3MDQxNzIwMDRaMDsxCzAJBgNVBAYTAlJP
+-MREwDwYDVQQKEwhjZXJ0U0lHTjEZMBcGA1UECxMQY2VydFNJR04gUk9PVCBDQTCC
+-ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALczuX7IJUqOtdu0KBuqV5Do
+-0SLTZLrTk+jUrIZhQGpgV2hUhE28alQCBf/fm5oqrl0Hj0rDKH/v+yv6efHHrfAQ
+-UySQi2bJqIirr1qjAOm+ukbuW3N7LBeCgV5iLKECZbO9xSsAfsT8AzNXDe3i+s5d
+-RdY4zTW2ssHQnIFKquSyAVwdj1+ZxLGt24gh65AIgoDzMKND5pCCrlUoSe1b16kQ
+-OA7+j0xbm0bqQfWwCHTD0IgztnzXdN/chNFDDnU5oSVAKOp4yw4sLjmdjItuFhwv
+-JoIQ4uNllAoEwF73XVv4EOLQunpL+943AAAaWyjj0pxzPjKHmKHJUS/X3qwzs08C
+-AwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAcYwHQYDVR0O
+-BBYEFOCMm9slSbPxfIbWskKHC9BroNnkMA0GCSqGSIb3DQEBBQUAA4IBAQA+0hyJ
+-LjX8+HXd5n9liPRyTMks1zJO890ZeUe9jjtbkw9QSSQTaxQGcu8J06Gh40CEyecY
+-MnQ8SG4Pn0vU9x7Tk4ZkVJdjclDVVc/6IJMCopvDI5NOFlV2oHB5bc0hH88vLbwZ
+-44gx+FkagQnIl6Z0x2DEW8xXjrJ1/RsCCdtZb3KTafcxQdaIOL+Hsr0Wefmq5L6I
+-Jd1hJyMctTEHBDa0GpC9oHRxUIltvBTjD4au8as+x6AJzKNI0eDbZOeStc+vckNw
+-i/nDhDwTqn6Sm1dTk/pwwpEOMfmbZ13pljheX7NzTogVZ96edhBiIL5VaZVDADlN
+-9u6wWk5JRFRYX0KD
+------END CERTIFICATE-----
+-
+-# Issuer: CN=NetLock Arany (Class Gold) Főtanúsítvány O=NetLock Kft. OU=Tanúsítványkiadók (Certification Services)
+-# Subject: CN=NetLock Arany (Class Gold) Főtanúsítvány O=NetLock Kft. OU=Tanúsítványkiadók (Certification Services)
+-# Label: "NetLock Arany (Class Gold) Főtanúsítvány"
+-# Serial: 80544274841616
+-# MD5 Fingerprint: c5:a1:b7:ff:73:dd:d6:d7:34:32:18:df:fc:3c:ad:88
+-# SHA1 Fingerprint: 06:08:3f:59:3f:15:a1:04:a0:69:a4:6b:a9:03:d0:06:b7:97:09:91
+-# SHA256 Fingerprint: 6c:61:da:c3:a2:de:f0:31:50:6b:e0:36:d2:a6:fe:40:19:94:fb:d1:3d:f9:c8:d4:66:59:92:74:c4:46:ec:98
+------BEGIN CERTIFICATE-----
+-MIIEFTCCAv2gAwIBAgIGSUEs5AAQMA0GCSqGSIb3DQEBCwUAMIGnMQswCQYDVQQG
+-EwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFTATBgNVBAoMDE5ldExvY2sgS2Z0LjE3
+-MDUGA1UECwwuVGFuw7pzw610dsOhbnlraWFkw7NrIChDZXJ0aWZpY2F0aW9uIFNl
+-cnZpY2VzKTE1MDMGA1UEAwwsTmV0TG9jayBBcmFueSAoQ2xhc3MgR29sZCkgRsWR
+-dGFuw7pzw610dsOhbnkwHhcNMDgxMjExMTUwODIxWhcNMjgxMjA2MTUwODIxWjCB
+-pzELMAkGA1UEBhMCSFUxETAPBgNVBAcMCEJ1ZGFwZXN0MRUwEwYDVQQKDAxOZXRM
+-b2NrIEtmdC4xNzA1BgNVBAsMLlRhbsO6c8OtdHbDoW55a2lhZMOzayAoQ2VydGlm
+-aWNhdGlvbiBTZXJ2aWNlcykxNTAzBgNVBAMMLE5ldExvY2sgQXJhbnkgKENsYXNz
+-IEdvbGQpIEbFkXRhbsO6c8OtdHbDoW55MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
+-MIIBCgKCAQEAxCRec75LbRTDofTjl5Bu0jBFHjzuZ9lk4BqKf8owyoPjIMHj9DrT
+-lF8afFttvzBPhCf2nx9JvMaZCpDyD/V/Q4Q3Y1GLeqVw/HpYzY6b7cNGbIRwXdrz
+-AZAj/E4wqX7hJ2Pn7WQ8oLjJM2P+FpD/sLj916jAwJRDC7bVWaaeVtAkH3B5r9s5
+-VA1lddkVQZQBr17s9o3x/61k/iCa11zr/qYfCGSji3ZVrR47KGAuhyXoqq8fxmRG
+-ILdwfzzeSNuWU7c5d+Qa4scWhHaXWy+7GRWF+GmF9ZmnqfI0p6m2pgP8b4Y9VHx2
+-BJtr+UBdADTHLpl1neWIA6pN+APSQnbAGwIDAKiLo0UwQzASBgNVHRMBAf8ECDAG
+-AQH/AgEEMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUzPpnk/C2uNClwB7zU/2M
+-U9+D15YwDQYJKoZIhvcNAQELBQADggEBAKt/7hwWqZw8UQCgwBEIBaeZ5m8BiFRh
+-bvG5GK1Krf6BQCOUL/t1fC8oS2IkgYIL9WHxHG64YTjrgfpioTtaYtOUZcTh5m2C
+-+C8lcLIhJsFyUR+MLMOEkMNaj7rP9KdlpeuY0fsFskZ1FSNqb4VjMIDw1Z4fKRzC
+-bLBQWV2QWzuoDTDPv31/zvGdg73JRm4gpvlhUbohL3u+pRVjodSVh/GeufOJ8z2F
+-uLjbvrW5KfnaNwUASZQDhETnv0Mxz3WLJdH0pmT1kvarBes96aULNmLazAZfNou2
+-XjG4Kvte9nHfRCaexOYNkbQudZWAUWpLMKawYqGT8ZvYzsRjdT9ZR7E=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Hongkong Post Root CA 1 O=Hongkong Post
+-# Subject: CN=Hongkong Post Root CA 1 O=Hongkong Post
+-# Label: "Hongkong Post Root CA 1"
+-# Serial: 1000
+-# MD5 Fingerprint: a8:0d:6f:39:78:b9:43:6d:77:42:6d:98:5a:cc:23:ca
+-# SHA1 Fingerprint: d6:da:a8:20:8d:09:d2:15:4d:24:b5:2f:cb:34:6e:b2:58:b2:8a:58
+-# SHA256 Fingerprint: f9:e6:7d:33:6c:51:00:2a:c0:54:c6:32:02:2d:66:dd:a2:e7:e3:ff:f1:0a:d0:61:ed:31:d8:bb:b4:10:cf:b2
+------BEGIN CERTIFICATE-----
+-MIIDMDCCAhigAwIBAgICA+gwDQYJKoZIhvcNAQEFBQAwRzELMAkGA1UEBhMCSEsx
+-FjAUBgNVBAoTDUhvbmdrb25nIFBvc3QxIDAeBgNVBAMTF0hvbmdrb25nIFBvc3Qg
+-Um9vdCBDQSAxMB4XDTAzMDUxNTA1MTMxNFoXDTIzMDUxNTA0NTIyOVowRzELMAkG
+-A1UEBhMCSEsxFjAUBgNVBAoTDUhvbmdrb25nIFBvc3QxIDAeBgNVBAMTF0hvbmdr
+-b25nIFBvc3QgUm9vdCBDQSAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
+-AQEArP84tulmAknjorThkPlAj3n54r15/gK97iSSHSL22oVyaf7XPwnU3ZG1ApzQ
+-jVrhVcNQhrkpJsLj2aDxaQMoIIBFIi1WpztUlVYiWR8o3x8gPW2iNr4joLFutbEn
+-PzlTCeqrauh0ssJlXI6/fMN4hM2eFvz1Lk8gKgifd/PFHsSaUmYeSF7jEAaPIpjh
+-ZY4bXSNmO7ilMlHIhqqhqZ5/dpTCpmy3QfDVyAY45tQM4vM7TG1QjMSDJ8EThFk9
+-nnV0ttgCXjqQesBCNnLsak3c78QA3xMYV18meMjWCnl3v/evt3a5pQuEF10Q6m/h
+-q5URX208o1xNg1vysxmKgIsLhwIDAQABoyYwJDASBgNVHRMBAf8ECDAGAQH/AgED
+-MA4GA1UdDwEB/wQEAwIBxjANBgkqhkiG9w0BAQUFAAOCAQEADkbVPK7ih9legYsC
+-mEEIjEy82tvuJxuC52pF7BaLT4Wg87JwvVqWuspube5Gi27nKi6Wsxkz67SfqLI3
+-7piol7Yutmcn1KZJ/RyTZXaeQi/cImyaT/JaFTmxcdcrUehtHJjA2Sr0oYJ71clB
+-oiMBdDhViw+5LmeiIAQ32pwL0xch4I+XeTRvhEgCIDMb5jREn5Fw9IBehEPCKdJs
+-EhTkYY2sEJCehFC78JZvRZ+K88psT/oROhUVRsPNH4NbLUES7VBnQRM9IauUiqpO
+-fMGx+6fWtScvl6tu4B3i0RwsH0Ti/L6RoZz71ilTc4afU9hDDl3WY4JxHYB0yvbi
+-AmvZWg==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=SecureSign RootCA11 O=Japan Certification Services, Inc.
+-# Subject: CN=SecureSign RootCA11 O=Japan Certification Services, Inc.
+-# Label: "SecureSign RootCA11"
+-# Serial: 1
+-# MD5 Fingerprint: b7:52:74:e2:92:b4:80:93:f2:75:e4:cc:d7:f2:ea:26
+-# SHA1 Fingerprint: 3b:c4:9f:48:f8:f3:73:a0:9c:1e:bd:f8:5b:b1:c3:65:c7:d8:11:b3
+-# SHA256 Fingerprint: bf:0f:ee:fb:9e:3a:58:1a:d5:f9:e9:db:75:89:98:57:43:d2:61:08:5c:4d:31:4f:6f:5d:72:59:aa:42:16:12
+------BEGIN CERTIFICATE-----
+-MIIDbTCCAlWgAwIBAgIBATANBgkqhkiG9w0BAQUFADBYMQswCQYDVQQGEwJKUDEr
+-MCkGA1UEChMiSmFwYW4gQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcywgSW5jLjEcMBoG
+-A1UEAxMTU2VjdXJlU2lnbiBSb290Q0ExMTAeFw0wOTA0MDgwNDU2NDdaFw0yOTA0
+-MDgwNDU2NDdaMFgxCzAJBgNVBAYTAkpQMSswKQYDVQQKEyJKYXBhbiBDZXJ0aWZp
+-Y2F0aW9uIFNlcnZpY2VzLCBJbmMuMRwwGgYDVQQDExNTZWN1cmVTaWduIFJvb3RD
+-QTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/XeqpRyQBTvLTJsz
+-i1oURaTnkBbR31fSIRCkF/3frNYfp+TbfPfs37gD2pRY/V1yfIw/XwFndBWW4wI8
+-h9uuywGOwvNmxoVF9ALGOrVisq/6nL+k5tSAMJjzDbaTj6nU2DbysPyKyiyhFTOV
+-MdrAG/LuYpmGYz+/3ZMqg6h2uRMft85OQoWPIucuGvKVCbIFtUROd6EgvanyTgp9
+-UK31BQ1FT0Zx/Sg+U/sE2C3XZR1KG/rPO7AxmjVuyIsG0wCR8pQIZUyxNAYAeoni
+-8McDWc/V1uinMrPmmECGxc0nEovMe863ETxiYAcjPitAbpSACW22s293bzUIUPsC
+-h8U+iQIDAQABo0IwQDAdBgNVHQ4EFgQUW/hNT7KlhtQ60vFjmqC+CfZXt94wDgYD
+-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEB
+-AKChOBZmLqdWHyGcBvod7bkixTgm2E5P7KN/ed5GIaGHd48HCJqypMWvDzKYC3xm
+-KbabfSVSSUOrTC4rbnpwrxYO4wJs+0LmGJ1F2FXI6Dvd5+H0LgscNFxsWEr7jIhQ
+-X5Ucv+2rIrVls4W6ng+4reV6G4pQOh29Dbx7VFALuUKvVaAYga1lme++5Jy/xIWr
+-QbJUb9wlze144o4MjQlJ3WN7WmmWAiGovVJZ6X01y8hSyn+B/tlr0/cR7SXf+Of5
+-pPpyl4RTDaXQMhhRdlkUbA/r7F+AjHVDg8OFmP9Mni0N5HeDk061lgeLKBObjBmN
+-QSdJQO7e5iNEOdyhIta6A/I=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Microsec e-Szigno Root CA 2009 O=Microsec Ltd.
+-# Subject: CN=Microsec e-Szigno Root CA 2009 O=Microsec Ltd.
+-# Label: "Microsec e-Szigno Root CA 2009"
+-# Serial: 14014712776195784473
+-# MD5 Fingerprint: f8:49:f4:03:bc:44:2d:83:be:48:69:7d:29:64:fc:b1
+-# SHA1 Fingerprint: 89:df:74:fe:5c:f4:0f:4a:80:f9:e3:37:7d:54:da:91:e1:01:31:8e
+-# SHA256 Fingerprint: 3c:5f:81:fe:a5:fa:b8:2c:64:bf:a2:ea:ec:af:cd:e8:e0:77:fc:86:20:a7:ca:e5:37:16:3d:f3:6e:db:f3:78
+------BEGIN CERTIFICATE-----
+-MIIECjCCAvKgAwIBAgIJAMJ+QwRORz8ZMA0GCSqGSIb3DQEBCwUAMIGCMQswCQYD
+-VQQGEwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFjAUBgNVBAoMDU1pY3Jvc2VjIEx0
+-ZC4xJzAlBgNVBAMMHk1pY3Jvc2VjIGUtU3ppZ25vIFJvb3QgQ0EgMjAwOTEfMB0G
+-CSqGSIb3DQEJARYQaW5mb0BlLXN6aWduby5odTAeFw0wOTA2MTYxMTMwMThaFw0y
+-OTEyMzAxMTMwMThaMIGCMQswCQYDVQQGEwJIVTERMA8GA1UEBwwIQnVkYXBlc3Qx
+-FjAUBgNVBAoMDU1pY3Jvc2VjIEx0ZC4xJzAlBgNVBAMMHk1pY3Jvc2VjIGUtU3pp
+-Z25vIFJvb3QgQ0EgMjAwOTEfMB0GCSqGSIb3DQEJARYQaW5mb0BlLXN6aWduby5o
+-dTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOn4j/NjrdqG2KfgQvvP
+-kd6mJviZpWNwrZuuyjNAfW2WbqEORO7hE52UQlKavXWFdCyoDh2Tthi3jCyoz/tc
+-cbna7P7ofo/kLx2yqHWH2Leh5TvPmUpG0IMZfcChEhyVbUr02MelTTMuhTlAdX4U
+-fIASmFDHQWe4oIBhVKZsTh/gnQ4H6cm6M+f+wFUoLAKApxn1ntxVUwOXewdI/5n7
+-N4okxFnMUBBjjqqpGrCEGob5X7uxUG6k0QrM1XF+H6cbfPVTbiJfyyvm1HxdrtbC
+-xkzlBQHZ7Vf8wSN5/PrIJIOV87VqUQHQd9bpEqH5GoP7ghu5sJf0dgYzQ0mg/wu1
+-+rUCAwEAAaOBgDB+MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0G
+-A1UdDgQWBBTLD8bfQkPMPcu1SCOhGnqmKrs0aDAfBgNVHSMEGDAWgBTLD8bfQkPM
+-Pcu1SCOhGnqmKrs0aDAbBgNVHREEFDASgRBpbmZvQGUtc3ppZ25vLmh1MA0GCSqG
+-SIb3DQEBCwUAA4IBAQDJ0Q5eLtXMs3w+y/w9/w0olZMEyL/azXm4Q5DwpL7v8u8h
+-mLzU1F0G9u5C7DBsoKqpyvGvivo/C3NqPuouQH4frlRheesuCDfXI/OMn74dseGk
+-ddug4lQUsbocKaQY9hK6ohQU4zE1yED/t+AFdlfBHFny+L/k7SViXITwfn4fs775
+-tyERzAMBVnCnEJIeGzSBHq2cGsMEPO0CYdYeBvNfOofyK/FFh+U9rNHHV4S9a67c
+-2Pm2G2JwCz02yULyMtd6YebS2z3PyKnJm9zbWETXbzivf3jTo60adbocwTZ8jx5t
+-HMN1Rq41Bab2XD0h7lbwyYIiLXpUq3DDfSJlgnCW
+------END CERTIFICATE-----
+-
+-# Issuer: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R3
+-# Subject: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R3
+-# Label: "GlobalSign Root CA - R3"
+-# Serial: 4835703278459759426209954
+-# MD5 Fingerprint: c5:df:b8:49:ca:05:13:55:ee:2d:ba:1a:c3:3e:b0:28
+-# SHA1 Fingerprint: d6:9b:56:11:48:f0:1c:77:c5:45:78:c1:09:26:df:5b:85:69:76:ad
+-# SHA256 Fingerprint: cb:b5:22:d7:b7:f1:27:ad:6a:01:13:86:5b:df:1c:d4:10:2e:7d:07:59:af:63:5a:7c:f4:72:0d:c9:63:c5:3b
+------BEGIN CERTIFICATE-----
+-MIIDXzCCAkegAwIBAgILBAAAAAABIVhTCKIwDQYJKoZIhvcNAQELBQAwTDEgMB4G
+-A1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNp
+-Z24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDkwMzE4MTAwMDAwWhcNMjkwMzE4
+-MTAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEG
+-A1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjCCASIwDQYJKoZI
+-hvcNAQEBBQADggEPADCCAQoCggEBAMwldpB5BngiFvXAg7aEyiie/QV2EcWtiHL8
+-RgJDx7KKnQRfJMsuS+FggkbhUqsMgUdwbN1k0ev1LKMPgj0MK66X17YUhhB5uzsT
+-gHeMCOFJ0mpiLx9e+pZo34knlTifBtc+ycsmWQ1z3rDI6SYOgxXG71uL0gRgykmm
+-KPZpO/bLyCiR5Z2KYVc3rHQU3HTgOu5yLy6c+9C7v/U9AOEGM+iCK65TpjoWc4zd
+-QQ4gOsC0p6Hpsk+QLjJg6VfLuQSSaGjlOCZgdbKfd/+RFO+uIEn8rUAVSNECMWEZ
+-XriX7613t2Saer9fwRPvm2L7DWzgVGkWqQPabumDk3F2xmmFghcCAwEAAaNCMEAw
+-DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFI/wS3+o
+-LkUkrk1Q+mOai97i3Ru8MA0GCSqGSIb3DQEBCwUAA4IBAQBLQNvAUKr+yAzv95ZU
+-RUm7lgAJQayzE4aGKAczymvmdLm6AC2upArT9fHxD4q/c2dKg8dEe3jgr25sbwMp
+-jjM5RcOO5LlXbKr8EpbsU8Yt5CRsuZRj+9xTaGdWPoO4zzUhw8lo/s7awlOqzJCK
+-6fBdRoyV3XpYKBovHd7NADdBj+1EbddTKJd+82cEHhXXipa0095MJ6RMG3NzdvQX
+-mcIfeg7jLQitChws/zyrVQ4PkX4268NXSb7hLi18YIvDQVETI53O9zJrlAGomecs
+-Mx86OyXShkDOOyyGeMlhLxS67ttVb9+E7gUJTb0o2HLO02JQZR7rkpeDMdmztcpH
+-WD9f
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Autoridad de Certificacion Firmaprofesional CIF A62634068
+-# Subject: CN=Autoridad de Certificacion Firmaprofesional CIF A62634068
+-# Label: "Autoridad de Certificacion Firmaprofesional CIF A62634068"
+-# Serial: 6047274297262753887
+-# MD5 Fingerprint: 73:3a:74:7a:ec:bb:a3:96:a6:c2:e4:e2:c8:9b:c0:c3
+-# SHA1 Fingerprint: ae:c5:fb:3f:c8:e1:bf:c4:e5:4f:03:07:5a:9a:e8:00:b7:f7:b6:fa
+-# SHA256 Fingerprint: 04:04:80:28:bf:1f:28:64:d4:8f:9a:d4:d8:32:94:36:6a:82:88:56:55:3f:3b:14:30:3f:90:14:7f:5d:40:ef
+------BEGIN CERTIFICATE-----
+-MIIGFDCCA/ygAwIBAgIIU+w77vuySF8wDQYJKoZIhvcNAQEFBQAwUTELMAkGA1UE
+-BhMCRVMxQjBABgNVBAMMOUF1dG9yaWRhZCBkZSBDZXJ0aWZpY2FjaW9uIEZpcm1h
+-cHJvZmVzaW9uYWwgQ0lGIEE2MjYzNDA2ODAeFw0wOTA1MjAwODM4MTVaFw0zMDEy
+-MzEwODM4MTVaMFExCzAJBgNVBAYTAkVTMUIwQAYDVQQDDDlBdXRvcmlkYWQgZGUg
+-Q2VydGlmaWNhY2lvbiBGaXJtYXByb2Zlc2lvbmFsIENJRiBBNjI2MzQwNjgwggIi
+-MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKlmuO6vj78aI14H9M2uDDUtd9
+-thDIAl6zQyrET2qyyhxdKJp4ERppWVevtSBC5IsP5t9bpgOSL/UR5GLXMnE42QQM
+-cas9UX4PB99jBVzpv5RvwSmCwLTaUbDBPLutN0pcyvFLNg4kq7/DhHf9qFD0sefG
+-L9ItWY16Ck6WaVICqjaY7Pz6FIMMNx/Jkjd/14Et5cS54D40/mf0PmbR0/RAz15i
+-NA9wBj4gGFrO93IbJWyTdBSTo3OxDqqHECNZXyAFGUftaI6SEspd/NYrspI8IM/h
+-X68gvqB2f3bl7BqGYTM+53u0P6APjqK5am+5hyZvQWyIplD9amML9ZMWGxmPsu2b
+-m8mQ9QEM3xk9Dz44I8kvjwzRAv4bVdZO0I08r0+k8/6vKtMFnXkIoctXMbScyJCy
+-Z/QYFpM6/EfY0XiWMR+6KwxfXZmtY4laJCB22N/9q06mIqqdXuYnin1oKaPnirja
+-EbsXLZmdEyRG98Xi2J+Of8ePdG1asuhy9azuJBCtLxTa/y2aRnFHvkLfuwHb9H/T
+-KI8xWVvTyQKmtFLKbpf7Q8UIJm+K9Lv9nyiqDdVF8xM6HdjAeI9BZzwelGSuewvF
+-6NkBiDkal4ZkQdU7hwxu+g/GvUgUvzlN1J5Bto+WHWOWk9mVBngxaJ43BjuAiUVh
+-OSPHG0SjFeUc+JIwuwIDAQABo4HvMIHsMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYD
+-VR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRlzeurNR4APn7VdMActHNHDhpkLzCBpgYD
+-VR0gBIGeMIGbMIGYBgRVHSAAMIGPMC8GCCsGAQUFBwIBFiNodHRwOi8vd3d3LmZp
+-cm1hcHJvZmVzaW9uYWwuY29tL2NwczBcBggrBgEFBQcCAjBQHk4AUABhAHMAZQBv
+-ACAAZABlACAAbABhACAAQgBvAG4AYQBuAG8AdgBhACAANAA3ACAAQgBhAHIAYwBl
+-AGwAbwBuAGEAIAAwADgAMAAxADcwDQYJKoZIhvcNAQEFBQADggIBABd9oPm03cXF
+-661LJLWhAqvdpYhKsg9VSytXjDvlMd3+xDLx51tkljYyGOylMnfX40S2wBEqgLk9
+-am58m9Ot/MPWo+ZkKXzR4Tgegiv/J2Wv+xYVxC5xhOW1//qkR71kMrv2JYSiJ0L1
+-ILDCExARzRAVukKQKtJE4ZYm6zFIEv0q2skGz3QeqUvVhyj5eTSSPi5E6PaPT481
+-PyWzOdxjKpBrIF/EUhJOlywqrJ2X3kjyo2bbwtKDlaZmp54lD+kLM5FlClrD2VQS
+-3a/DTg4fJl4N3LON7NWBcN7STyQF82xO9UxJZo3R/9ILJUFI/lGExkKvgATP0H5k
+-SeTy36LssUzAKh3ntLFlosS88Zj0qnAHY7S42jtM+kAiMFsRpvAFDsYCA0irhpuF
+-3dvd6qJ2gHN99ZwExEWN57kci57q13XRcrHedUTnQn3iV2t93Jm8PYMo6oCTjcVM
+-ZcFwgbg4/EMxsvYDNEeyrPsiBsse3RdHHF9mudMaotoRsaS8I8nkvof/uZS2+F0g
+-StRf571oe2XyFR7SOqkt6dhrJKyXWERHrVkY8SFlcN7ONGCoQPHzPKTDKCOM/icz
+-Q0CgFzzr6juwcqajuUpLXhZI9LK8yIySxZ2frHI2vDSANGupi5LAuBft7HZT9SQB
+-jLMi6Et8Vcad+qMUu2WFbm5PEn4KPJ2V
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Izenpe.com O=IZENPE S.A.
+-# Subject: CN=Izenpe.com O=IZENPE S.A.
+-# Label: "Izenpe.com"
+-# Serial: 917563065490389241595536686991402621
+-# MD5 Fingerprint: a6:b0:cd:85:80:da:5c:50:34:a3:39:90:2f:55:67:73
+-# SHA1 Fingerprint: 2f:78:3d:25:52:18:a7:4a:65:39:71:b5:2c:a2:9c:45:15:6f:e9:19
+-# SHA256 Fingerprint: 25:30:cc:8e:98:32:15:02:ba:d9:6f:9b:1f:ba:1b:09:9e:2d:29:9e:0f:45:48:bb:91:4f:36:3b:c0:d4:53:1f
+------BEGIN CERTIFICATE-----
+-MIIF8TCCA9mgAwIBAgIQALC3WhZIX7/hy/WL1xnmfTANBgkqhkiG9w0BAQsFADA4
+-MQswCQYDVQQGEwJFUzEUMBIGA1UECgwLSVpFTlBFIFMuQS4xEzARBgNVBAMMCkl6
+-ZW5wZS5jb20wHhcNMDcxMjEzMTMwODI4WhcNMzcxMjEzMDgyNzI1WjA4MQswCQYD
+-VQQGEwJFUzEUMBIGA1UECgwLSVpFTlBFIFMuQS4xEzARBgNVBAMMCkl6ZW5wZS5j
+-b20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDJ03rKDx6sp4boFmVq
+-scIbRTJxldn+EFvMr+eleQGPicPK8lVx93e+d5TzcqQsRNiekpsUOqHnJJAKClaO
+-xdgmlOHZSOEtPtoKct2jmRXagaKH9HtuJneJWK3W6wyyQXpzbm3benhB6QiIEn6H
+-LmYRY2xU+zydcsC8Lv/Ct90NduM61/e0aL6i9eOBbsFGb12N4E3GVFWJGjMxCrFX
+-uaOKmMPsOzTFlUFpfnXCPCDFYbpRR6AgkJOhkEvzTnyFRVSa0QUmQbC1TR0zvsQD
+-yCV8wXDbO/QJLVQnSKwv4cSsPsjLkkxTOTcj7NMB+eAJRE1NZMDhDVqHIrytG6P+
+-JrUV86f8hBnp7KGItERphIPzidF0BqnMC9bC3ieFUCbKF7jJeodWLBoBHmy+E60Q
+-rLUk9TiRodZL2vG70t5HtfG8gfZZa88ZU+mNFctKy6lvROUbQc/hhqfK0GqfvEyN
+-BjNaooXlkDWgYlwWTvDjovoDGrQscbNYLN57C9saD+veIR8GdwYDsMnvmfzAuU8L
+-hij+0rnq49qlw0dpEuDb8PYZi+17cNcC1u2HGCgsBCRMd+RIihrGO5rUD8r6ddIB
+-QFqNeb+Lz0vPqhbBleStTIo+F5HUsWLlguWABKQDfo2/2n+iD5dPDNMN+9fR5XJ+
+-HMh3/1uaD7euBUbl8agW7EekFwIDAQABo4H2MIHzMIGwBgNVHREEgagwgaWBD2lu
+-Zm9AaXplbnBlLmNvbaSBkTCBjjFHMEUGA1UECgw+SVpFTlBFIFMuQS4gLSBDSUYg
+-QTAxMzM3MjYwLVJNZXJjLlZpdG9yaWEtR2FzdGVpeiBUMTA1NSBGNjIgUzgxQzBB
+-BgNVBAkMOkF2ZGEgZGVsIE1lZGl0ZXJyYW5lbyBFdG9yYmlkZWEgMTQgLSAwMTAx
+-MCBWaXRvcmlhLUdhc3RlaXowDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC
+-AQYwHQYDVR0OBBYEFB0cZQ6o8iV7tJHP5LGx5r1VdGwFMA0GCSqGSIb3DQEBCwUA
+-A4ICAQB4pgwWSp9MiDrAyw6lFn2fuUhfGI8NYjb2zRlrrKvV9pF9rnHzP7MOeIWb
+-laQnIUdCSnxIOvVFfLMMjlF4rJUT3sb9fbgakEyrkgPH7UIBzg/YsfqikuFgba56
+-awmqxinuaElnMIAkejEWOVt+8Rwu3WwJrfIxwYJOubv5vr8qhT/AQKM6WfxZSzwo
+-JNu0FXWuDYi6LnPAvViH5ULy617uHjAimcs30cQhbIHsvm0m5hzkQiCeR7Csg1lw
+-LDXWrzY0tM07+DKo7+N4ifuNRSzanLh+QBxh5z6ikixL8s36mLYp//Pye6kfLqCT
+-VyvehQP5aTfLnnhqBbTFMXiJ7HqnheG5ezzevh55hM6fcA5ZwjUukCox2eRFekGk
+-LhObNA5me0mrZJfQRsN5nXJQY6aYWwa9SG3YOYNw6DXwBdGqvOPbyALqfP2C2sJb
+-UjWumDqtujWTI6cfSN01RpiyEGjkpTHCClguGYEQyVB1/OpaFs4R1+7vUIgtYf8/
+-QnMFlEPVjjxOAToZpR9GTnfQXeWBIiGH/pR9hNiTrdZoQ0iy2+tzJOeRf1SktoA+
+-naM8THLCV8Sg1Mw4J87VBp6iSNnpn86CcDaTmjvfliHjWbcM2pE38P1ZWrOZyGls
+-QyYBNWNgVYkDOnXYukrZVP/u3oDYLdE41V4tC5h9Pmzb/CaIxw==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Go Daddy Root Certificate Authority - G2 O=GoDaddy.com, Inc.
+-# Subject: CN=Go Daddy Root Certificate Authority - G2 O=GoDaddy.com, Inc.
+-# Label: "Go Daddy Root Certificate Authority - G2"
+-# Serial: 0
+-# MD5 Fingerprint: 80:3a:bc:22:c1:e6:fb:8d:9b:3b:27:4a:32:1b:9a:01
+-# SHA1 Fingerprint: 47:be:ab:c9:22:ea:e8:0e:78:78:34:62:a7:9f:45:c2:54:fd:e6:8b
+-# SHA256 Fingerprint: 45:14:0b:32:47:eb:9c:c8:c5:b4:f0:d7:b5:30:91:f7:32:92:08:9e:6e:5a:63:e2:74:9d:d3:ac:a9:19:8e:da
+------BEGIN CERTIFICATE-----
+-MIIDxTCCAq2gAwIBAgIBADANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
+-EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
+-EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
+-ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5MDkwMTAwMDAwMFoXDTM3MTIzMTIz
+-NTk1OVowgYMxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH
+-EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjExMC8GA1UE
+-AxMoR28gRGFkZHkgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIw
+-DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL9xYgjx+lk09xvJGKP3gElY6SKD
+-E6bFIEMBO4Tx5oVJnyfq9oQbTqC023CYxzIBsQU+B07u9PpPL1kwIuerGVZr4oAH
+-/PMWdYA5UXvl+TW2dE6pjYIT5LY/qQOD+qK+ihVqf94Lw7YZFAXK6sOoBJQ7Rnwy
+-DfMAZiLIjWltNowRGLfTshxgtDj6AozO091GB94KPutdfMh8+7ArU6SSYmlRJQVh
+-GkSBjCypQ5Yj36w6gZoOKcUcqeldHraenjAKOc7xiID7S13MMuyFYkMlNAJWJwGR
+-tDtwKj9useiciAF9n9T521NtYJ2/LOdYq7hfRvzOxBsDPAnrSTFcaUaz4EcCAwEA
+-AaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYE
+-FDqahQcQZyi27/a9BUFuIMGU2g/eMA0GCSqGSIb3DQEBCwUAA4IBAQCZ21151fmX
+-WWcDYfF+OwYxdS2hII5PZYe096acvNjpL9DbWu7PdIxztDhC2gV7+AJ1uP2lsdeu
+-9tfeE8tTEH6KRtGX+rcuKxGrkLAngPnon1rpN5+r5N9ss4UXnT3ZJE95kTXWXwTr
+-gIOrmgIttRD02JDHBHNA7XIloKmf7J6raBKZV8aPEjoJpL1E/QYVN8Gb5DKj7Tjo
+-2GTzLH4U/ALqn83/B2gX2yKQOC16jdFU8WnjXzPKej17CuPKf1855eJ1usV2GDPO
+-LPAvTK33sefOT6jEm0pUBsV/fdUID+Ic/n4XuKxe9tQWskMJDE32p2u0mYRlynqI
+-4uJEvlz36hz1
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Starfield Root Certificate Authority - G2 O=Starfield Technologies, Inc.
+-# Subject: CN=Starfield Root Certificate Authority - G2 O=Starfield Technologies, Inc.
+-# Label: "Starfield Root Certificate Authority - G2"
+-# Serial: 0
+-# MD5 Fingerprint: d6:39:81:c6:52:7e:96:69:fc:fc:ca:66:ed:05:f2:96
+-# SHA1 Fingerprint: b5:1c:06:7c:ee:2b:0c:3d:f8:55:ab:2d:92:f4:fe:39:d4:e7:0f:0e
+-# SHA256 Fingerprint: 2c:e1:cb:0b:f9:d2:f9:e1:02:99:3f:be:21:51:52:c3:b2:dd:0c:ab:de:1c:68:e5:31:9b:83:91:54:db:b7:f5
+------BEGIN CERTIFICATE-----
+-MIID3TCCAsWgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBjzELMAkGA1UEBhMCVVMx
+-EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoT
+-HFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xMjAwBgNVBAMTKVN0YXJmaWVs
+-ZCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5MDkwMTAwMDAw
+-MFoXDTM3MTIzMTIzNTk1OVowgY8xCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6
+-b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxTdGFyZmllbGQgVGVj
+-aG5vbG9naWVzLCBJbmMuMTIwMAYDVQQDEylTdGFyZmllbGQgUm9vdCBDZXJ0aWZp
+-Y2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
+-ggEBAL3twQP89o/8ArFvW59I2Z154qK3A2FWGMNHttfKPTUuiUP3oWmb3ooa/RMg
+-nLRJdzIpVv257IzdIvpy3Cdhl+72WoTsbhm5iSzchFvVdPtrX8WJpRBSiUZV9Lh1
+-HOZ/5FSuS/hVclcCGfgXcVnrHigHdMWdSL5stPSksPNkN3mSwOxGXn/hbVNMYq/N
+-Hwtjuzqd+/x5AJhhdM8mgkBj87JyahkNmcrUDnXMN/uLicFZ8WJ/X7NfZTD4p7dN
+-dloedl40wOiWVpmKs/B/pM293DIxfJHP4F8R+GuqSVzRmZTRouNjWwl2tVZi4Ut0
+-HZbUJtQIBFnQmA4O5t78w+wfkPECAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAO
+-BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFHwMMh+n2TB/xH1oo2Kooc6rB1snMA0G
+-CSqGSIb3DQEBCwUAA4IBAQARWfolTwNvlJk7mh+ChTnUdgWUXuEok21iXQnCoKjU
+-sHU48TRqneSfioYmUeYs0cYtbpUgSpIB7LiKZ3sx4mcujJUDJi5DnUox9g61DLu3
+-4jd/IroAow57UvtruzvE03lRTs2Q9GcHGcg8RnoNAX3FWOdt5oUwF5okxBDgBPfg
+-8n/Uqgr/Qh037ZTlZFkSIHc40zI+OIF1lnP6aI+xy84fxez6nH7PfrHxBy22/L/K
+-pL/QlwVKvOoYKAKQvVR4CSFx09F9HdkWsKlhPdAKACL8x3vLCWRFCztAgfd9fDL1
+-mMpYjn0q7pBZc2T5NnReJaH1ZgUufzkVqSr7UIuOhWn0
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Starfield Services Root Certificate Authority - G2 O=Starfield Technologies, Inc.
+-# Subject: CN=Starfield Services Root Certificate Authority - G2 O=Starfield Technologies, Inc.
+-# Label: "Starfield Services Root Certificate Authority - G2"
+-# Serial: 0
+-# MD5 Fingerprint: 17:35:74:af:7b:61:1c:eb:f4:f9:3c:e2:ee:40:f9:a2
+-# SHA1 Fingerprint: 92:5a:8f:8d:2c:6d:04:e0:66:5f:59:6a:ff:22:d8:63:e8:25:6f:3f
+-# SHA256 Fingerprint: 56:8d:69:05:a2:c8:87:08:a4:b3:02:51:90:ed:cf:ed:b1:97:4a:60:6a:13:c6:e5:29:0f:cb:2a:e6:3e:da:b5
+------BEGIN CERTIFICATE-----
+-MIID7zCCAtegAwIBAgIBADANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UEBhMCVVMx
+-EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoT
+-HFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xOzA5BgNVBAMTMlN0YXJmaWVs
+-ZCBTZXJ2aWNlcyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5
+-MDkwMTAwMDAwMFoXDTM3MTIzMTIzNTk1OVowgZgxCzAJBgNVBAYTAlVTMRAwDgYD
+-VQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxTdGFy
+-ZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTswOQYDVQQDEzJTdGFyZmllbGQgU2Vy
+-dmljZXMgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZI
+-hvcNAQEBBQADggEPADCCAQoCggEBANUMOsQq+U7i9b4Zl1+OiFOxHz/Lz58gE20p
+-OsgPfTz3a3Y4Y9k2YKibXlwAgLIvWX/2h/klQ4bnaRtSmpDhcePYLQ1Ob/bISdm2
+-8xpWriu2dBTrz/sm4xq6HZYuajtYlIlHVv8loJNwU4PahHQUw2eeBGg6345AWh1K
+-Ts9DkTvnVtYAcMtS7nt9rjrnvDH5RfbCYM8TWQIrgMw0R9+53pBlbQLPLJGmpufe
+-hRhJfGZOozptqbXuNC66DQO4M99H67FrjSXZm86B0UVGMpZwh94CDklDhbZsc7tk
+-6mFBrMnUVN+HL8cisibMn1lUaJ/8viovxFUcdUBgF4UCVTmLfwUCAwEAAaNCMEAw
+-DwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJxfAN+q
+-AdcwKziIorhtSpzyEZGDMA0GCSqGSIb3DQEBCwUAA4IBAQBLNqaEd2ndOxmfZyMI
+-bw5hyf2E3F/YNoHN2BtBLZ9g3ccaaNnRbobhiCPPE95Dz+I0swSdHynVv/heyNXB
+-ve6SbzJ08pGCL72CQnqtKrcgfU28elUSwhXqvfdqlS5sdJ/PHLTyxQGjhdByPq1z
+-qwubdQxtRbeOlKyWN7Wg0I8VRw7j6IPdj/3vQQF3zCepYoUz8jcI73HPdwbeyBkd
+-iEDPfUYd/x7H4c7/I9vG+o1VTqkC50cRRj70/b17KSa7qWFiNyi2LSr2EIZkyXCn
+-0q23KXB56jzaYyWf/Wi3MOxw+3WKt21gZ7IeyLnp2KhvAotnDU0mV3HaIPzBSlCN
+-sSi6
+------END CERTIFICATE-----
+-
+-# Issuer: CN=AffirmTrust Commercial O=AffirmTrust
+-# Subject: CN=AffirmTrust Commercial O=AffirmTrust
+-# Label: "AffirmTrust Commercial"
+-# Serial: 8608355977964138876
+-# MD5 Fingerprint: 82:92:ba:5b:ef:cd:8a:6f:a6:3d:55:f9:84:f6:d6:b7
+-# SHA1 Fingerprint: f9:b5:b6:32:45:5f:9c:be:ec:57:5f:80:dc:e9:6e:2c:c7:b2:78:b7
+-# SHA256 Fingerprint: 03:76:ab:1d:54:c5:f9:80:3c:e4:b2:e2:01:a0:ee:7e:ef:7b:57:b6:36:e8:a9:3c:9b:8d:48:60:c9:6f:5f:a7
+------BEGIN CERTIFICATE-----
+-MIIDTDCCAjSgAwIBAgIId3cGJyapsXwwDQYJKoZIhvcNAQELBQAwRDELMAkGA1UE
+-BhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVz
+-dCBDb21tZXJjaWFsMB4XDTEwMDEyOTE0MDYwNloXDTMwMTIzMTE0MDYwNlowRDEL
+-MAkGA1UEBhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZp
+-cm1UcnVzdCBDb21tZXJjaWFsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
+-AQEA9htPZwcroRX1BiLLHwGy43NFBkRJLLtJJRTWzsO3qyxPxkEylFf6EqdbDuKP
+-Hx6GGaeqtS25Xw2Kwq+FNXkyLbscYjfysVtKPcrNcV/pQr6U6Mje+SJIZMblq8Yr
+-ba0F8PrVC8+a5fBQpIs7R6UjW3p6+DM/uO+Zl+MgwdYoic+U+7lF7eNAFxHUdPAL
+-MeIrJmqbTFeurCA+ukV6BfO9m2kVrn1OIGPENXY6BwLJN/3HR+7o8XYdcxXyl6S1
+-yHp52UKqK39c/s4mT6NmgTWvRLpUHhwwMmWd5jyTXlBOeuM61G7MGvv50jeuJCqr
+-VwMiKA1JdX+3KNp1v47j3A55MQIDAQABo0IwQDAdBgNVHQ4EFgQUnZPGU4teyq8/
+-nx4P5ZmVvCT2lI8wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwDQYJ
+-KoZIhvcNAQELBQADggEBAFis9AQOzcAN/wr91LoWXym9e2iZWEnStB03TX8nfUYG
+-XUPGhi4+c7ImfU+TqbbEKpqrIZcUsd6M06uJFdhrJNTxFq7YpFzUf1GO7RgBsZNj
+-vbz4YYCanrHOQnDiqX0GJX0nof5v7LMeJNrjS1UaADs1tDvZ110w/YETifLCBivt
+-Z8SOyUOyXGsViQK8YvxO8rUzqrJv0wqiUOP2O+guRMLbZjipM1ZI8W0bM40NjD9g
+-N53Tym1+NH4Nn3J2ixufcv1SNUFFApYvHLKac0khsUlHRUe072o0EclNmsxZt9YC
+-nlpOZbWUrhvfKbAW8b8Angc6F2S1BLUjIZkKlTuXfO8=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=AffirmTrust Networking O=AffirmTrust
+-# Subject: CN=AffirmTrust Networking O=AffirmTrust
+-# Label: "AffirmTrust Networking"
+-# Serial: 8957382827206547757
+-# MD5 Fingerprint: 42:65:ca:be:01:9a:9a:4c:a9:8c:41:49:cd:c0:d5:7f
+-# SHA1 Fingerprint: 29:36:21:02:8b:20:ed:02:f5:66:c5:32:d1:d6:ed:90:9f:45:00:2f
+-# SHA256 Fingerprint: 0a:81:ec:5a:92:97:77:f1:45:90:4a:f3:8d:5d:50:9f:66:b5:e2:c5:8f:cd:b5:31:05:8b:0e:17:f3:f0:b4:1b
+------BEGIN CERTIFICATE-----
+-MIIDTDCCAjSgAwIBAgIIfE8EORzUmS0wDQYJKoZIhvcNAQEFBQAwRDELMAkGA1UE
+-BhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZpcm1UcnVz
+-dCBOZXR3b3JraW5nMB4XDTEwMDEyOTE0MDgyNFoXDTMwMTIzMTE0MDgyNFowRDEL
+-MAkGA1UEBhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MR8wHQYDVQQDDBZBZmZp
+-cm1UcnVzdCBOZXR3b3JraW5nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
+-AQEAtITMMxcua5Rsa2FSoOujz3mUTOWUgJnLVWREZY9nZOIG41w3SfYvm4SEHi3y
+-YJ0wTsyEheIszx6e/jarM3c1RNg1lho9Nuh6DtjVR6FqaYvZ/Ls6rnla1fTWcbua
+-kCNrmreIdIcMHl+5ni36q1Mr3Lt2PpNMCAiMHqIjHNRqrSK6mQEubWXLviRmVSRL
+-QESxG9fhwoXA3hA/Pe24/PHxI1Pcv2WXb9n5QHGNfb2V1M6+oF4nI979ptAmDgAp
+-6zxG8D1gvz9Q0twmQVGeFDdCBKNwV6gbh+0t+nvujArjqWaJGctB+d1ENmHP4ndG
+-yH329JKBNv3bNPFyfvMMFr20FQIDAQABo0IwQDAdBgNVHQ4EFgQUBx/S55zawm6i
+-QLSwelAQUHTEyL0wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwDQYJ
+-KoZIhvcNAQEFBQADggEBAIlXshZ6qML91tmbmzTCnLQyFE2npN/svqe++EPbkTfO
+-tDIuUFUaNU52Q3Eg75N3ThVwLofDwR1t3Mu1J9QsVtFSUzpE0nPIxBsFZVpikpzu
+-QY0x2+c06lkh1QF612S4ZDnNye2v7UsDSKegmQGA3GWjNq5lWUhPgkvIZfFXHeVZ
+-Lgo/bNjR9eUJtGxUAArgFU2HdW23WJZa3W3SAKD0m0i+wzekujbgfIeFlxoVot4u
+-olu9rxj5kFDNcFn4J2dHy8egBzp90SxdbBk6ZrV9/ZFvgrG+CJPbFEfxojfHRZ48
+-x3evZKiT3/Zpg4Jg8klCNO1aAFSFHBY2kgxc+qatv9s=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=AffirmTrust Premium O=AffirmTrust
+-# Subject: CN=AffirmTrust Premium O=AffirmTrust
+-# Label: "AffirmTrust Premium"
+-# Serial: 7893706540734352110
+-# MD5 Fingerprint: c4:5d:0e:48:b6:ac:28:30:4e:0a:bc:f9:38:16:87:57
+-# SHA1 Fingerprint: d8:a6:33:2c:e0:03:6f:b1:85:f6:63:4f:7d:6a:06:65:26:32:28:27
+-# SHA256 Fingerprint: 70:a7:3f:7f:37:6b:60:07:42:48:90:45:34:b1:14:82:d5:bf:0e:69:8e:cc:49:8d:f5:25:77:eb:f2:e9:3b:9a
+------BEGIN CERTIFICATE-----
+-MIIFRjCCAy6gAwIBAgIIbYwURrGmCu4wDQYJKoZIhvcNAQEMBQAwQTELMAkGA1UE
+-BhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MRwwGgYDVQQDDBNBZmZpcm1UcnVz
+-dCBQcmVtaXVtMB4XDTEwMDEyOTE0MTAzNloXDTQwMTIzMTE0MTAzNlowQTELMAkG
+-A1UEBhMCVVMxFDASBgNVBAoMC0FmZmlybVRydXN0MRwwGgYDVQQDDBNBZmZpcm1U
+-cnVzdCBQcmVtaXVtMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxBLf
+-qV/+Qd3d9Z+K4/as4Tx4mrzY8H96oDMq3I0gW64tb+eT2TZwamjPjlGjhVtnBKAQ
+-JG9dKILBl1fYSCkTtuG+kU3fhQxTGJoeJKJPj/CihQvL9Cl/0qRY7iZNyaqoe5rZ
+-+jjeRFcV5fiMyNlI4g0WJx0eyIOFJbe6qlVBzAMiSy2RjYvmia9mx+n/K+k8rNrS
+-s8PhaJyJ+HoAVt70VZVs+7pk3WKL3wt3MutizCaam7uqYoNMtAZ6MMgpv+0GTZe5
+-HMQxK9VfvFMSF5yZVylmd2EhMQcuJUmdGPLu8ytxjLW6OQdJd/zvLpKQBY0tL3d7
+-70O/Nbua2Plzpyzy0FfuKE4mX4+QaAkvuPjcBukumj5Rp9EixAqnOEhss/n/fauG
+-V+O61oV4d7pD6kh/9ti+I20ev9E2bFhc8e6kGVQa9QPSdubhjL08s9NIS+LI+H+S
+-qHZGnEJlPqQewQcDWkYtuJfzt9WyVSHvutxMAJf7FJUnM7/oQ0dG0giZFmA7mn7S
+-5u046uwBHjxIVkkJx0w3AJ6IDsBz4W9m6XJHMD4Q5QsDyZpCAGzFlH5hxIrff4Ia
+-C1nEWTJ3s7xgaVY5/bQGeyzWZDbZvUjthB9+pSKPKrhC9IK31FOQeE4tGv2Bb0TX
+-OwF0lkLgAOIua+rF7nKsu7/+6qqo+Nz2snmKtmcCAwEAAaNCMEAwHQYDVR0OBBYE
+-FJ3AZ6YMItkm9UWrpmVSESfYRaxjMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/
+-BAQDAgEGMA0GCSqGSIb3DQEBDAUAA4ICAQCzV00QYk465KzquByvMiPIs0laUZx2
+-KI15qldGF9X1Uva3ROgIRL8YhNILgM3FEv0AVQVhh0HctSSePMTYyPtwni94loMg
+-Nt58D2kTiKV1NpgIpsbfrM7jWNa3Pt668+s0QNiigfV4Py/VpfzZotReBA4Xrf5B
+-8OWycvpEgjNC6C1Y91aMYj+6QrCcDFx+LmUmXFNPALJ4fqENmS2NuB2OosSw/WDQ
+-MKSOyARiqcTtNd56l+0OOF6SL5Nwpamcb6d9Ex1+xghIsV5n61EIJenmJWtSKZGc
+-0jlzCFfemQa0W50QBuHCAKi4HEoCChTQwUHK+4w1IX2COPKpVJEZNZOUbWo6xbLQ
+-u4mGk+ibyQ86p3q4ofB4Rvr8Ny/lioTz3/4E2aFooC8k4gmVBtWVyuEklut89pMF
+-u+1z6S3RdTnX5yTb2E5fQ4+e0BQ5v1VwSJlXMbSc7kqYA5YwH2AG7hsj/oFgIxpH
+-YoWlzBk0gG+zrBrjn/B7SK3VAdlntqlyk+otZrWyuOQ9PLLvTIzq6we/qzWaVYa8
+-GKa1qF60g2xraUDTn9zxw2lrueFtCfTxqlB2Cnp9ehehVZZCmTEJ3WARjQUwfuaO
+-RtGdFNrHF+QFlozEJLUbzxQHskD4o55BhrwE0GuWyCqANP2/7waj3VjFhT0+j/6e
+-KeC2uAloGRwYQw==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=AffirmTrust Premium ECC O=AffirmTrust
+-# Subject: CN=AffirmTrust Premium ECC O=AffirmTrust
+-# Label: "AffirmTrust Premium ECC"
+-# Serial: 8401224907861490260
+-# MD5 Fingerprint: 64:b0:09:55:cf:b1:d5:99:e2:be:13:ab:a6:5d:ea:4d
+-# SHA1 Fingerprint: b8:23:6b:00:2f:1d:16:86:53:01:55:6c:11:a4:37:ca:eb:ff:c3:bb
+-# SHA256 Fingerprint: bd:71:fd:f6:da:97:e4:cf:62:d1:64:7a:dd:25:81:b0:7d:79:ad:f8:39:7e:b4:ec:ba:9c:5e:84:88:82:14:23
+------BEGIN CERTIFICATE-----
+-MIIB/jCCAYWgAwIBAgIIdJclisc/elQwCgYIKoZIzj0EAwMwRTELMAkGA1UEBhMC
+-VVMxFDASBgNVBAoMC0FmZmlybVRydXN0MSAwHgYDVQQDDBdBZmZpcm1UcnVzdCBQ
+-cmVtaXVtIEVDQzAeFw0xMDAxMjkxNDIwMjRaFw00MDEyMzExNDIwMjRaMEUxCzAJ
+-BgNVBAYTAlVTMRQwEgYDVQQKDAtBZmZpcm1UcnVzdDEgMB4GA1UEAwwXQWZmaXJt
+-VHJ1c3QgUHJlbWl1bSBFQ0MwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQNMF4bFZ0D
+-0KF5Nbc6PJJ6yhUczWLznCZcBz3lVPqj1swS6vQUX+iOGasvLkjmrBhDeKzQN8O9
+-ss0s5kfiGuZjuD0uL3jET9v0D6RoTFVya5UdThhClXjMNzyR4ptlKymjQjBAMB0G
+-A1UdDgQWBBSaryl6wBE1NSZRMADDav5A1a7WPDAPBgNVHRMBAf8EBTADAQH/MA4G
+-A1UdDwEB/wQEAwIBBjAKBggqhkjOPQQDAwNnADBkAjAXCfOHiFBar8jAQr9HX/Vs
+-aobgxCd05DhT1wV/GzTjxi+zygk8N53X57hG8f2h4nECMEJZh0PUUd+60wkyWs6I
+-flc9nF9Ca/UHLbXwgpP5WW+uZPpY5Yse42O+tYHNbwKMeQ==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Certum Trusted Network CA O=Unizeto Technologies S.A. OU=Certum Certification Authority
+-# Subject: CN=Certum Trusted Network CA O=Unizeto Technologies S.A. OU=Certum Certification Authority
+-# Label: "Certum Trusted Network CA"
+-# Serial: 279744
+-# MD5 Fingerprint: d5:e9:81:40:c5:18:69:fc:46:2c:89:75:62:0f:aa:78
+-# SHA1 Fingerprint: 07:e0:32:e0:20:b7:2c:3f:19:2f:06:28:a2:59:3a:19:a7:0f:06:9e
+-# SHA256 Fingerprint: 5c:58:46:8d:55:f5:8e:49:7e:74:39:82:d2:b5:00:10:b6:d1:65:37:4a:cf:83:a7:d4:a3:2d:b7:68:c4:40:8e
+------BEGIN CERTIFICATE-----
+-MIIDuzCCAqOgAwIBAgIDBETAMA0GCSqGSIb3DQEBBQUAMH4xCzAJBgNVBAYTAlBM
+-MSIwIAYDVQQKExlVbml6ZXRvIFRlY2hub2xvZ2llcyBTLkEuMScwJQYDVQQLEx5D
+-ZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIjAgBgNVBAMTGUNlcnR1bSBU
+-cnVzdGVkIE5ldHdvcmsgQ0EwHhcNMDgxMDIyMTIwNzM3WhcNMjkxMjMxMTIwNzM3
+-WjB+MQswCQYDVQQGEwJQTDEiMCAGA1UEChMZVW5pemV0byBUZWNobm9sb2dpZXMg
+-Uy5BLjEnMCUGA1UECxMeQ2VydHVtIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSIw
+-IAYDVQQDExlDZXJ0dW0gVHJ1c3RlZCBOZXR3b3JrIENBMIIBIjANBgkqhkiG9w0B
+-AQEFAAOCAQ8AMIIBCgKCAQEA4/t9o3K6wvDJFIf1awFO4W5AB7ptJ11/91sts1rH
+-UV+rpDKmYYe2bg+G0jACl/jXaVehGDldamR5xgFZrDwxSjh80gTSSyjoIF87B6LM
+-TXPb865Px1bVWqeWifrzq2jUI4ZZJ88JJ7ysbnKDHDBy3+Ci6dLhdHUZvSqeexVU
+-BBvXQzmtVSjF4hq79MDkrjhJM8x2hZ85RdKknvISjFH4fOQtf/WsX+sWn7Et0brM
+-kUJ3TCXJkDhv2/DM+44el1k+1WBO5gUo7Ul5E0u6SNsv+XLTOcr+H9g0cvW0QM8x
+-AcPs3hEtF10fuFDRXhmnad4HMyjKUJX5p1TLVIZQRan5SQIDAQABo0IwQDAPBgNV
+-HRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIds3LB/8k9sXN7buQvOKEN0Z19zAOBgNV
+-HQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEFBQADggEBAKaorSLOAT2mo/9i0Eidi15y
+-sHhE49wcrwn9I0j6vSrEuVUEtRCjjSfeC4Jj0O7eDDd5QVsisrCaQVymcODU0HfL
+-I9MA4GxWL+FpDQ3Zqr8hgVDZBqWo/5U30Kr+4rP1mS1FhIrlQgnXdAIv94nYmem8
+-J9RHjboNRhx3zxSkHLmkMcScKHQDNP8zGSal6Q10tz6XxnboJ5ajZt3hrvJBW8qY
+-VoNzcOSGGtIxQbovvi0TWnZvTuhOgQ4/WwMioBK+ZlgRSssDxLQqKi2WF+A5VLxI
+-03YnnZotBqbJ7DnSq9ufmgsnAjUpsUCV5/nonFWIGUbWtzT1fs45mtk48VH3Tyw=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=TWCA Root Certification Authority O=TAIWAN-CA OU=Root CA
+-# Subject: CN=TWCA Root Certification Authority O=TAIWAN-CA OU=Root CA
+-# Label: "TWCA Root Certification Authority"
+-# Serial: 1
+-# MD5 Fingerprint: aa:08:8f:f6:f9:7b:b7:f2:b1:a7:1e:9b:ea:ea:bd:79
+-# SHA1 Fingerprint: cf:9e:87:6d:d3:eb:fc:42:26:97:a3:b5:a3:7a:a0:76:a9:06:23:48
+-# SHA256 Fingerprint: bf:d8:8f:e1:10:1c:41:ae:3e:80:1b:f8:be:56:35:0e:e9:ba:d1:a6:b9:bd:51:5e:dc:5c:6d:5b:87:11:ac:44
+------BEGIN CERTIFICATE-----
+-MIIDezCCAmOgAwIBAgIBATANBgkqhkiG9w0BAQUFADBfMQswCQYDVQQGEwJUVzES
+-MBAGA1UECgwJVEFJV0FOLUNBMRAwDgYDVQQLDAdSb290IENBMSowKAYDVQQDDCFU
+-V0NBIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDgwODI4MDcyNDMz
+-WhcNMzAxMjMxMTU1OTU5WjBfMQswCQYDVQQGEwJUVzESMBAGA1UECgwJVEFJV0FO
+-LUNBMRAwDgYDVQQLDAdSb290IENBMSowKAYDVQQDDCFUV0NBIFJvb3QgQ2VydGlm
+-aWNhdGlvbiBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
+-AQCwfnK4pAOU5qfeCTiRShFAh6d8WWQUe7UREN3+v9XAu1bihSX0NXIP+FPQQeFE
+-AcK0HMMxQhZHhTMidrIKbw/lJVBPhYa+v5guEGcevhEFhgWQxFnQfHgQsIBct+HH
+-K3XLfJ+utdGdIzdjp9xCoi2SBBtQwXu4PhvJVgSLL1KbralW6cH/ralYhzC2gfeX
+-RfwZVzsrb+RH9JlF/h3x+JejiB03HFyP4HYlmlD4oFT/RJB2I9IyxsOrBr/8+7/z
+-rX2SYgJbKdM1o5OaQ2RgXbL6Mv87BK9NQGr5x+PvI/1ry+UPizgN7gr8/g+YnzAx
+-3WxSZfmLgb4i4RxYA7qRG4kHAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV
+-HRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqOFsmjd6LWvJPelSDGRjjCDWmujANBgkq
+-hkiG9w0BAQUFAAOCAQEAPNV3PdrfibqHDAhUaiBQkr6wQT25JmSDCi/oQMCXKCeC
+-MErJk/9q56YAf4lCmtYR5VPOL8zy2gXE/uJQxDqGfczafhAJO5I1KlOy/usrBdls
+-XebQ79NqZp4VKIV66IIArB6nCWlWQtNoURi+VJq/REG6Sb4gumlc7rh3zc5sH62D
+-lhh9DrUUOYTxKOkto557HnpyWoOzeW/vtPzQCqVYT0bf+215WfKEIlKuD8z7fDvn
+-aspHYcN6+NOSBB+4IIThNlQWx0DeO4pz3N/GCUzf7Nr/1FNCocnyYh0igzyXxfkZ
+-YiesZSLX0zzG5Y6yU8xJzrww/nsOM5D77dIUkR8Hrw==
+------END CERTIFICATE-----
+-
+-# Issuer: O=SECOM Trust Systems CO.,LTD. OU=Security Communication RootCA2
+-# Subject: O=SECOM Trust Systems CO.,LTD. OU=Security Communication RootCA2
+-# Label: "Security Communication RootCA2"
+-# Serial: 0
+-# MD5 Fingerprint: 6c:39:7d:a4:0e:55:59:b2:3f:d6:41:b1:12:50:de:43
+-# SHA1 Fingerprint: 5f:3b:8c:f2:f8:10:b3:7d:78:b4:ce:ec:19:19:c3:73:34:b9:c7:74
+-# SHA256 Fingerprint: 51:3b:2c:ec:b8:10:d4:cd:e5:dd:85:39:1a:df:c6:c2:dd:60:d8:7b:b7:36:d2:b5:21:48:4a:a4:7a:0e:be:f6
+------BEGIN CERTIFICATE-----
+-MIIDdzCCAl+gAwIBAgIBADANBgkqhkiG9w0BAQsFADBdMQswCQYDVQQGEwJKUDEl
+-MCMGA1UEChMcU0VDT00gVHJ1c3QgU3lzdGVtcyBDTy4sTFRELjEnMCUGA1UECxMe
+-U2VjdXJpdHkgQ29tbXVuaWNhdGlvbiBSb290Q0EyMB4XDTA5MDUyOTA1MDAzOVoX
+-DTI5MDUyOTA1MDAzOVowXTELMAkGA1UEBhMCSlAxJTAjBgNVBAoTHFNFQ09NIFRy
+-dXN0IFN5c3RlbXMgQ08uLExURC4xJzAlBgNVBAsTHlNlY3VyaXR5IENvbW11bmlj
+-YXRpb24gUm9vdENBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANAV
+-OVKxUrO6xVmCxF1SrjpDZYBLx/KWvNs2l9amZIyoXvDjChz335c9S672XewhtUGr
+-zbl+dp+++T42NKA7wfYxEUV0kz1XgMX5iZnK5atq1LXaQZAQwdbWQonCv/Q4EpVM
+-VAX3NuRFg3sUZdbcDE3R3n4MqzvEFb46VqZab3ZpUql6ucjrappdUtAtCms1FgkQ
+-hNBqyjoGADdH5H5XTz+L62e4iKrFvlNVspHEfbmwhRkGeC7bYRr6hfVKkaHnFtWO
+-ojnflLhwHyg/i/xAXmODPIMqGplrz95Zajv8bxbXH/1KEOtOghY6rCcMU/Gt1SSw
+-awNQwS08Ft1ENCcadfsCAwEAAaNCMEAwHQYDVR0OBBYEFAqFqXdlBZh8QIH4D5cs
+-OPEK7DzPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3
+-DQEBCwUAA4IBAQBMOqNErLlFsceTfsgLCkLfZOoc7llsCLqJX2rKSpWeeo8HxdpF
+-coJxDjrSzG+ntKEju/Ykn8sX/oymzsLS28yN/HH8AynBbF0zX2S2ZTuJbxh2ePXc
+-okgfGT+Ok+vx+hfuzU7jBBJV1uXk3fs+BXziHV7Gp7yXT2g69ekuCkO2r1dcYmh8
+-t/2jioSgrGK+KwmHNPBqAbubKVY8/gA3zyNs8U6qtnRGEmyR7jTV7JqR50S+kDFy
+-1UkC9gLl9B/rfNmWVan/7Ir5mUf/NVoCqgTLiluHcSmRvaS0eg29mvVXIwAHIRc/
+-SjnRBUkLp7Y3gaVdjKozXoEofKd9J+sAro03
+------END CERTIFICATE-----
+-
+-# Issuer: CN=EC-ACC O=Agencia Catalana de Certificacio (NIF Q-0801176-I) OU=Serveis Publics de Certificacio/Vegeu https://www.catcert.net/verarrel (c)03/Jerarquia Entitats de Certificacio Catalanes
+-# Subject: CN=EC-ACC O=Agencia Catalana de Certificacio (NIF Q-0801176-I) OU=Serveis Publics de Certificacio/Vegeu https://www.catcert.net/verarrel (c)03/Jerarquia Entitats de Certificacio Catalanes
+-# Label: "EC-ACC"
+-# Serial: -23701579247955709139626555126524820479
+-# MD5 Fingerprint: eb:f5:9d:29:0d:61:f9:42:1f:7c:c2:ba:6d:e3:15:09
+-# SHA1 Fingerprint: 28:90:3a:63:5b:52:80:fa:e6:77:4c:0b:6d:a7:d6:ba:a6:4a:f2:e8
+-# SHA256 Fingerprint: 88:49:7f:01:60:2f:31:54:24:6a:e2:8c:4d:5a:ef:10:f1:d8:7e:bb:76:62:6f:4a:e0:b7:f9:5b:a7:96:87:99
+------BEGIN CERTIFICATE-----
+-MIIFVjCCBD6gAwIBAgIQ7is969Qh3hSoYqwE893EATANBgkqhkiG9w0BAQUFADCB
+-8zELMAkGA1UEBhMCRVMxOzA5BgNVBAoTMkFnZW5jaWEgQ2F0YWxhbmEgZGUgQ2Vy
+-dGlmaWNhY2lvIChOSUYgUS0wODAxMTc2LUkpMSgwJgYDVQQLEx9TZXJ2ZWlzIFB1
+-YmxpY3MgZGUgQ2VydGlmaWNhY2lvMTUwMwYDVQQLEyxWZWdldSBodHRwczovL3d3
+-dy5jYXRjZXJ0Lm5ldC92ZXJhcnJlbCAoYykwMzE1MDMGA1UECxMsSmVyYXJxdWlh
+-IEVudGl0YXRzIGRlIENlcnRpZmljYWNpbyBDYXRhbGFuZXMxDzANBgNVBAMTBkVD
+-LUFDQzAeFw0wMzAxMDcyMzAwMDBaFw0zMTAxMDcyMjU5NTlaMIHzMQswCQYDVQQG
+-EwJFUzE7MDkGA1UEChMyQWdlbmNpYSBDYXRhbGFuYSBkZSBDZXJ0aWZpY2FjaW8g
+-KE5JRiBRLTA4MDExNzYtSSkxKDAmBgNVBAsTH1NlcnZlaXMgUHVibGljcyBkZSBD
+-ZXJ0aWZpY2FjaW8xNTAzBgNVBAsTLFZlZ2V1IGh0dHBzOi8vd3d3LmNhdGNlcnQu
+-bmV0L3ZlcmFycmVsIChjKTAzMTUwMwYDVQQLEyxKZXJhcnF1aWEgRW50aXRhdHMg
+-ZGUgQ2VydGlmaWNhY2lvIENhdGFsYW5lczEPMA0GA1UEAxMGRUMtQUNDMIIBIjAN
+-BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyLHT+KXQpWIR4NA9h0X84NzJB5R
+-85iKw5K4/0CQBXCHYMkAqbWUZRkiFRfCQ2xmRJoNBD45b6VLeqpjt4pEndljkYRm
+-4CgPukLjbo73FCeTae6RDqNfDrHrZqJyTxIThmV6PttPB/SnCWDaOkKZx7J/sxaV
+-HMf5NLWUhdWZXqBIoH7nF2W4onW4HvPlQn2v7fOKSGRdghST2MDk/7NQcvJ29rNd
+-QlB50JQ+awwAvthrDk4q7D7SzIKiGGUzE3eeml0aE9jD2z3Il3rucO2n5nzbcc8t
+-lGLfbdb1OL4/pYUKGbio2Al1QnDE6u/LDsg0qBIimAy4E5S2S+zw0JDnJwIDAQAB
+-o4HjMIHgMB0GA1UdEQQWMBSBEmVjX2FjY0BjYXRjZXJ0Lm5ldDAPBgNVHRMBAf8E
+-BTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUoMOLRKo3pUW/l4Ba0fF4
+-opvpXY0wfwYDVR0gBHgwdjB0BgsrBgEEAfV4AQMBCjBlMCwGCCsGAQUFBwIBFiBo
+-dHRwczovL3d3dy5jYXRjZXJ0Lm5ldC92ZXJhcnJlbDA1BggrBgEFBQcCAjApGidW
+-ZWdldSBodHRwczovL3d3dy5jYXRjZXJ0Lm5ldC92ZXJhcnJlbCAwDQYJKoZIhvcN
+-AQEFBQADggEBAKBIW4IB9k1IuDlVNZyAelOZ1Vr/sXE7zDkJlF7W2u++AVtd0x7Y
+-/X1PzaBB4DSTv8vihpw3kpBWHNzrKQXlxJ7HNd+KDM3FIUPpqojlNcAZQmNaAl6k
+-SBg6hW/cnbw/nZzBh7h6YQjpdwt/cKt63dmXLGQehb+8dJahw3oS7AwaboMMPOhy
+-Rp/7SNVel+axofjk70YllJyJ22k4vuxcDlbHZVHlUIiIv0LVKz3l+bqeLrPK9HOS
+-Agu+TGbrIP65y7WZf+a2E/rKS03Z7lNGBjvGTq2TWoF+bCpLagVFjPIhpDGQh2xl
+-nJ2lYJU6Un/10asIbvPuW/mIPX64b24D5EI=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Hellenic Academic and Research Institutions RootCA 2011 O=Hellenic Academic and Research Institutions Cert. Authority
+-# Subject: CN=Hellenic Academic and Research Institutions RootCA 2011 O=Hellenic Academic and Research Institutions Cert. Authority
+-# Label: "Hellenic Academic and Research Institutions RootCA 2011"
+-# Serial: 0
+-# MD5 Fingerprint: 73:9f:4c:4b:73:5b:79:e9:fa:ba:1c:ef:6e:cb:d5:c9
+-# SHA1 Fingerprint: fe:45:65:9b:79:03:5b:98:a1:61:b5:51:2e:ac:da:58:09:48:22:4d
+-# SHA256 Fingerprint: bc:10:4f:15:a4:8b:e7:09:dc:a5:42:a7:e1:d4:b9:df:6f:05:45:27:e8:02:ea:a9:2d:59:54:44:25:8a:fe:71
+------BEGIN CERTIFICATE-----
+-MIIEMTCCAxmgAwIBAgIBADANBgkqhkiG9w0BAQUFADCBlTELMAkGA1UEBhMCR1Ix
+-RDBCBgNVBAoTO0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1
+-dGlvbnMgQ2VydC4gQXV0aG9yaXR5MUAwPgYDVQQDEzdIZWxsZW5pYyBBY2FkZW1p
+-YyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25zIFJvb3RDQSAyMDExMB4XDTExMTIw
+-NjEzNDk1MloXDTMxMTIwMTEzNDk1MlowgZUxCzAJBgNVBAYTAkdSMUQwQgYDVQQK
+-EztIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25zIENl
+-cnQuIEF1dGhvcml0eTFAMD4GA1UEAxM3SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl
+-c2VhcmNoIEluc3RpdHV0aW9ucyBSb290Q0EgMjAxMTCCASIwDQYJKoZIhvcNAQEB
+-BQADggEPADCCAQoCggEBAKlTAOMupvaO+mDYLZU++CwqVE7NuYRhlFhPjz2L5EPz
+-dYmNUeTDN9KKiE15HrcS3UN4SoqS5tdI1Q+kOilENbgH9mgdVc04UfCMJDGFr4PJ
+-fel3r+0ae50X+bOdOFAPplp5kYCvN66m0zH7tSYJnTxa71HFK9+WXesyHgLacEns
+-bgzImjeN9/E2YEsmLIKe0HjzDQ9jpFEw4fkrJxIH2Oq9GGKYsFk3fb7u8yBRQlqD
+-75O6aRXxYp2fmTmCobd0LovUxQt7L/DICto9eQqakxylKHJzkUOap9FNhYS5qXSP
+-FEDH3N6sQWRstBmbAmNtJGSPRLIl6s5ddAxjMlyNh+UCAwEAAaOBiTCBhjAPBgNV
+-HRMBAf8EBTADAQH/MAsGA1UdDwQEAwIBBjAdBgNVHQ4EFgQUppFC/RNhSiOeCKQp
+-5dgTBCPuQSUwRwYDVR0eBEAwPqA8MAWCAy5ncjAFggMuZXUwBoIELmVkdTAGggQu
+-b3JnMAWBAy5ncjAFgQMuZXUwBoEELmVkdTAGgQQub3JnMA0GCSqGSIb3DQEBBQUA
+-A4IBAQAf73lB4XtuP7KMhjdCSk4cNx6NZrokgclPEg8hwAOXhiVtXdMiKahsog2p
+-6z0GW5k6x8zDmjR/qw7IThzh+uTczQ2+vyT+bOdrwg3IBp5OjWEopmr95fZi6hg8
+-TqBTnbI6nOulnJEWtk2C4AwFSKls9cz4y51JtPACpf1wA+2KIaWuE4ZJwzNzvoc7
+-dIsXRSZMFpGD/md9zU1jZ/rzAxKWeAaNsWftjj++n08C9bMJL/NMh98qy5V8Acys
+-Nnq/onN694/BtZqhFLKPM58N7yLcZnuEvUUXBj08yrl3NI/K6s8/MT7jiOOASSXI
+-l7WdmplNsDz4SgCbZN2fOUvRJ9e4
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Actalis Authentication Root CA O=Actalis S.p.A./03358520967
+-# Subject: CN=Actalis Authentication Root CA O=Actalis S.p.A./03358520967
+-# Label: "Actalis Authentication Root CA"
+-# Serial: 6271844772424770508
+-# MD5 Fingerprint: 69:c1:0d:4f:07:a3:1b:c3:fe:56:3d:04:bc:11:f6:a6
+-# SHA1 Fingerprint: f3:73:b3:87:06:5a:28:84:8a:f2:f3:4a:ce:19:2b:dd:c7:8e:9c:ac
+-# SHA256 Fingerprint: 55:92:60:84:ec:96:3a:64:b9:6e:2a:be:01:ce:0b:a8:6a:64:fb:fe:bc:c7:aa:b5:af:c1:55:b3:7f:d7:60:66
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ 0b:7b:72:87:c0:60:a6:49:4c:88:58:e6:1d:88:f7:14:64:48:
++ a6:d8:58:0a:0e:4f:13:35:df:35:1d:d4:ed:06:31:c8:81:3e:
++ 6a:d5:dd:3b:1a:32:ee:90:3d:11:d2:2e:f4:8e:c3:63:2e:23:
++ 66:b0:67:be:6f:b6:c0:13:39:60:aa:a2:34:25:93:75:52:de:
++ a7:9d:ad:0e:87:89:52:71:6a:16:3c:19:1d:83:f8:9a:29:65:
++ be:f4:3f:9a:d9:f0:f3:5a:87:21:71:80:4d:cb:e0:38:9b:3f:
++ bb:fa:e0:30:4d:cf:86:d3:65:10:19:18:d1:97:02:b1:2b:72:
++ 42:68:ac:a0:bd:4e:5a:da:18:bf:6b:98:81:d0:fd:9a:be:5e:
++ 15:48:cd:11:15:b9:c0:29:5c:b4:e8:88:f7:3e:36:ae:b7:62:
++ fd:1e:62:de:70:78:10:1c:48:5b:da:bc:a4:38:ba:67:ed:55:
++ 3e:5e:57:df:d4:03:40:4c:81:a4:d2:4f:63:a7:09:42:09:14:
++ fc:00:a9:c2:80:73:4f:2e:c0:40:d9:11:7b:48:ea:7a:02:c0:
++ d3:eb:28:01:26:58:74:c1:c0:73:22:6d:93:95:fd:39:7d:bb:
++ 2a:e3:f6:82:e3:2c:97:5f:4e:1f:91:94:fa:fe:2c:a3:d8:76:
++ 1a:b8:4d:b2:38:4f:9b:fa:1d:48:60:79:26:e2:f3:fd:a9:d0:
++ 9a:e8:70:8f:49:7a:d6:e5:bd:0a:0e:db:2d:f3:8d:bf:eb:e3:
++ a4:7d:cb:c7:95:71:e8:da:a3:7c:c5:c2:f8:74:92:04:1b:86:
++ ac:a4:22:53:40:b6:ac:fe:4c:76:cf:fb:94:32:c0:35:9f:76:
++ 3f:6e:e5:90:6e:a0:a6:26:a2:b8:2c:be:d1:2b:85:fd:a7:68:
++ c8:ba:01:2b:b1:6c:74:1d:b8:73:95:e7:ee:b7:c7:25:f0:00:
++ 4c:00:b2:7e:b6:0b:8b:1c:f3:c0:50:9e:25:b9:e0:08:de:36:
++ 66:ff:37:a5:d1:bb:54:64:2c:c9:27:b5:4b:92:7e:65:ff:d3:
++ 2d:e1:b9:4e:bc:7f:a4:41:21:90:41:77:a6:39:1f:ea:9e:e3:
++ 9f:d0:66:6f:05:ec:aa:76:7e:bf:6b:16:a0:eb:b5:c7:fc:92:
++ 54:2f:2b:11:27:25:37:78:4c:51:6a:b0:f3:cc:58:5d:14:f1:
++ 6a:48:15:ff:c2:07:b6:b1:8d:0f:8e:5c:50:46:b3:3d:bf:01:
++ 98:4f:b2:59:54:47:3e:34:7b:78:6d:56:93:2e:73:ea:66:28:
++ 78:cd:1d:14:bf:a0:8f:2f:2e:b8:2e:8e:f2:14:8a:cc:e9:b5:
++ 7c:fb:6c:9d:0c:a5:e1:96
+ -----BEGIN CERTIFICATE-----
+ MIIFuzCCA6OgAwIBAgIIVwoRl0LE48wwDQYJKoZIhvcNAQELBQAwazELMAkGA1UE
+ BhMCSVQxDjAMBgNVBAcMBU1pbGFuMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8w
+@@ -1499,13 +128,690 @@ LysRJyU3eExRarDzzFhdFPFqSBX/wge2sY0PjlxQRrM9vwGYT7JZVEc+NHt4bVaT
+ LnPqZih4zR0Uv6CPLy64Lo7yFIrM6bV8+2ydDKXhlg==
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=Buypass Class 2 Root CA O=Buypass AS-983163327
+-# Subject: CN=Buypass Class 2 Root CA O=Buypass AS-983163327
+-# Label: "Buypass Class 2 Root CA"
+-# Serial: 2
+-# MD5 Fingerprint: 46:a7:d2:fe:45:fb:64:5a:a8:59:90:9b:78:44:9b:29
+-# SHA1 Fingerprint: 49:0a:75:74:de:87:0a:47:fe:58:ee:f6:c7:6b:eb:c6:0b:12:40:99
+-# SHA256 Fingerprint: 9a:11:40:25:19:7c:5b:b9:5d:94:e6:3d:55:cd:43:79:08:47:b6:46:b2:3c:df:11:ad:a4:a0:0e:ff:15:fb:48
++# 18ce6cfe7bf14e60b2e347b8dfe868cb31d02ebb3ada271569f50343b46db3a4
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 06:6c:9f:d5:74:97:36:66:3f:3b:0b:9a:d9:e8:9e:76:03:f2:4a
++ Signature Algorithm: ecdsa-with-SHA256
++ Issuer: C = US, O = Amazon, CN = Amazon Root CA 3
++ Validity
++ Not Before: May 26 00:00:00 2015 GMT
++ Not After : May 26 00:00:00 2040 GMT
++ Subject: C = US, O = Amazon, CN = Amazon Root CA 3
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (256 bit)
++ pub:
++ 04:29:97:a7:c6:41:7f:c0:0d:9b:e8:01:1b:56:c6:
++ f2:52:a5:ba:2d:b2:12:e8:d2:2e:d7:fa:c9:c5:d8:
++ aa:6d:1f:73:81:3b:3b:98:6b:39:7c:33:a5:c5:4e:
++ 86:8e:80:17:68:62:45:57:7d:44:58:1d:b3:37:e5:
++ 67:08:eb:66:de
++ ASN1 OID: prime256v1
++ NIST CURVE: P-256
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ AB:B6:DB:D7:06:9E:37:AC:30:86:07:91:70:C7:9C:C4:19:B1:78:C0
++ Signature Algorithm: ecdsa-with-SHA256
++ 30:46:02:21:00:e0:85:92:a3:17:b7:8d:f9:2b:06:a5:93:ac:
++ 1a:98:68:61:72:fa:e1:a1:d0:fb:1c:78:60:a6:43:99:c5:b8:
++ c4:02:21:00:9c:02:ef:f1:94:9c:b3:96:f9:eb:c6:2a:f8:b6:
++ 2c:fe:3a:90:14:16:d7:8c:63:24:48:1c:df:30:7d:d5:68:3b
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 1ba5b2aa8c65401a82960118f80bec4f62304d83cec4713a19c39c011ea46db4
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 06:6c:9f:d2:96:35:86:9f:0a:0f:e5:86:78:f8:5b:26:bb:8a:37
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C = US, O = Amazon, CN = Amazon Root CA 2
++ Validity
++ Not Before: May 26 00:00:00 2015 GMT
++ Not After : May 26 00:00:00 2040 GMT
++ Subject: C = US, O = Amazon, CN = Amazon Root CA 2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:ad:96:9f:2d:9c:4a:4c:4a:81:79:51:99:ec:8a:
++ cb:6b:60:51:13:bc:4d:6d:06:fc:b0:08:8d:dd:19:
++ 10:6a:c7:26:0c:35:d8:c0:6f:20:84:e9:94:b1:9b:
++ 85:03:c3:5b:db:4a:e8:c8:f8:90:76:d9:5b:4f:e3:
++ 4c:e8:06:36:4d:cc:9a:ac:3d:0c:90:2b:92:d4:06:
++ 19:60:ac:37:44:79:85:81:82:ad:5a:37:e0:0d:cc:
++ 9d:a6:4c:52:76:ea:43:9d:b7:04:d1:50:f6:55:e0:
++ d5:d2:a6:49:85:e9:37:e9:ca:7e:ae:5c:95:4d:48:
++ 9a:3f:ae:20:5a:6d:88:95:d9:34:b8:52:1a:43:90:
++ b0:bf:6c:05:b9:b6:78:b7:ea:d0:e4:3a:3c:12:53:
++ 62:ff:4a:f2:7b:be:35:05:a9:12:34:e3:f3:64:74:
++ 62:2c:3d:00:49:5a:28:fe:32:44:bb:87:dd:65:27:
++ 02:71:3b:da:4a:f7:1f:da:cd:f7:21:55:90:4f:0f:
++ ec:ae:82:e1:9f:6b:d9:45:d3:bb:f0:5f:87:ed:3c:
++ 2c:39:86:da:3f:de:ec:72:55:eb:79:a3:ad:db:dd:
++ 7c:b0:ba:1c:ce:fc:de:4f:35:76:cf:0f:f8:78:1f:
++ 6a:36:51:46:27:61:5b:e9:9e:cf:f0:a2:55:7d:7c:
++ 25:8a:6f:2f:b4:c5:cf:84:2e:2b:fd:0d:51:10:6c:
++ fb:5f:1b:bc:1b:7e:c5:ae:3b:98:01:31:92:ff:0b:
++ 57:f4:9a:b2:b9:57:e9:ab:ef:0d:76:d1:f0:ee:f4:
++ ce:86:a7:e0:6e:e9:b4:69:a1:df:69:f6:33:c6:69:
++ 2e:97:13:9e:a5:87:b0:57:10:81:37:c9:53:b3:bb:
++ 7f:f6:92:d1:9c:d0:18:f4:92:6e:da:83:4f:a6:63:
++ 99:4c:a5:fb:5e:ef:21:64:7a:20:5f:6c:64:85:15:
++ cb:37:e9:62:0c:0b:2a:16:dc:01:2e:32:da:3e:4b:
++ f5:9e:3a:f6:17:40:94:ef:9e:91:08:86:fa:be:63:
++ a8:5a:33:ec:cb:74:43:95:f9:6c:69:52:36:c7:29:
++ 6f:fc:55:03:5c:1f:fb:9f:bd:47:eb:e7:49:47:95:
++ 0b:4e:89:22:09:49:e0:f5:61:1e:f1:bf:2e:8a:72:
++ 6e:80:59:ff:57:3a:f9:75:32:a3:4e:5f:ec:ed:28:
++ 62:d9:4d:73:f2:cc:81:17:60:ed:cd:eb:dc:db:a7:
++ ca:c5:7e:02:bd:f2:54:08:54:fd:b4:2d:09:2c:17:
++ 54:4a:98:d1:54:e1:51:67:08:d2:ed:6e:7e:6f:3f:
++ d2:2d:81:59:29:66:cb:90:39:95:11:1e:74:27:fe:
++ dd:eb:af
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ B0:0C:F0:4C:30:F4:05:58:02:48:FD:33:E5:52:AF:4B:84:E3:66:52
++ Signature Algorithm: sha384WithRSAEncryption
++ aa:a8:80:8f:0e:78:a3:e0:a2:d4:cd:e6:f5:98:7a:3b:ea:00:
++ 03:b0:97:0e:93:bc:5a:a8:f6:2c:8c:72:87:a9:b1:fc:7f:73:
++ fd:63:71:78:a5:87:59:cf:30:e1:0d:10:b2:13:5a:6d:82:f5:
++ 6a:e6:80:9f:a0:05:0b:68:e4:47:6b:c7:6a:df:b6:fd:77:32:
++ 72:e5:18:fa:09:f4:a0:93:2c:5d:d2:8c:75:85:76:65:90:0c:
++ 03:79:b7:31:23:63:ad:78:83:09:86:68:84:ca:ff:f9:cf:26:
++ 9a:92:79:e7:cd:4b:c5:e7:61:a7:17:cb:f3:a9:12:93:93:6b:
++ a7:e8:2f:53:92:c4:60:58:b0:cc:02:51:18:5b:85:8d:62:59:
++ 63:b6:ad:b4:de:9a:fb:26:f7:00:27:c0:5d:55:37:74:99:c9:
++ 50:7f:e3:59:2e:44:e3:2c:25:ee:ec:4c:32:77:b4:9f:1a:e9:
++ 4b:5d:20:c5:da:fd:1c:87:16:c6:43:e8:d4:bb:26:9a:45:70:
++ 5e:a9:0b:37:53:e2:46:7b:27:fd:e0:46:f2:89:b7:cc:42:b6:
++ cb:28:26:6e:d9:a5:c9:3a:c8:41:13:60:f7:50:8c:15:ae:b2:
++ 6d:1a:15:1a:57:78:e6:92:2a:d9:65:90:82:3f:6c:02:af:ae:
++ 12:3a:27:96:36:04:d7:1d:a2:80:63:a9:9b:f1:e5:ba:b4:7c:
++ 14:b0:4e:c9:b1:1f:74:5f:38:f6:51:ea:9b:fa:2c:a2:11:d4:
++ a9:2d:27:1a:45:b1:af:b2:4e:71:0d:c0:58:46:d6:69:06:cb:
++ 53:cb:b3:fe:6b:41:cd:41:7e:7d:4c:0f:7c:72:79:7a:59:cd:
++ 5e:4a:0e:ac:9b:a9:98:73:79:7c:b4:f4:cc:b9:b8:07:0c:b2:
++ 74:5c:b8:c7:6f:88:a1:90:a7:f4:aa:f9:bf:67:3a:f4:1a:15:
++ 62:1e:b7:9f:be:3d:b1:29:af:67:a1:12:f2:58:10:19:53:03:
++ 30:1b:b8:1a:89:f6:9c:bd:97:03:8e:a3:09:f3:1d:8b:21:f1:
++ b4:df:e4:1c:d1:9f:65:02:06:ea:5c:d6:13:b3:84:ef:a2:a5:
++ 5c:8c:77:29:a7:68:c0:6b:ae:40:d2:a8:b4:ea:cd:f0:8d:4b:
++ 38:9c:19:9a:1b:28:54:b8:89:90:ef:ca:75:81:3e:1e:f2:64:
++ 24:c7:18:af:4e:ff:47:9e:07:f6:35:65:a4:d3:0a:56:ff:f5:
++ 17:64:6c:ef:a8:22:25:49:93:b6:df:00:17:da:58:7e:5d:ee:
++ c5:1b:b0:d1:d1:5f:21:10:c7:f9:f3:ba:02:0a:27:07:c5:f1:
++ d6:c7:d3:e0:fb:09:60:6c
++-----BEGIN CERTIFICATE-----
++MIIFQTCCAymgAwIBAgITBmyf0pY1hp8KD+WGePhbJruKNzANBgkqhkiG9w0BAQwF
++ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6
++b24gUm9vdCBDQSAyMB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTEL
++MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv
++b3QgQ0EgMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2Wny2cSkxK
++gXlRmeyKy2tgURO8TW0G/LAIjd0ZEGrHJgw12MBvIITplLGbhQPDW9tK6Mj4kHbZ
++W0/jTOgGNk3Mmqw9DJArktQGGWCsN0R5hYGCrVo34A3MnaZMUnbqQ523BNFQ9lXg
++1dKmSYXpN+nKfq5clU1Imj+uIFptiJXZNLhSGkOQsL9sBbm2eLfq0OQ6PBJTYv9K
++8nu+NQWpEjTj82R0Yiw9AElaKP4yRLuH3WUnAnE72kr3H9rN9yFVkE8P7K6C4Z9r
++2UXTu/Bfh+08LDmG2j/e7HJV63mjrdvdfLC6HM783k81ds8P+HgfajZRRidhW+me
++z/CiVX18JYpvL7TFz4QuK/0NURBs+18bvBt+xa47mAExkv8LV/SasrlX6avvDXbR
++8O70zoan4G7ptGmh32n2M8ZpLpcTnqWHsFcQgTfJU7O7f/aS0ZzQGPSSbtqDT6Zj
++mUyl+17vIWR6IF9sZIUVyzfpYgwLKhbcAS4y2j5L9Z469hdAlO+ekQiG+r5jqFoz
++7Mt0Q5X5bGlSNscpb/xVA1wf+5+9R+vnSUeVC06JIglJ4PVhHvG/LopyboBZ/1c6
+++XUyo05f7O0oYtlNc/LMgRdg7c3r3NunysV+Ar3yVAhU/bQtCSwXVEqY0VThUWcI
++0u1ufm8/0i2BWSlmy5A5lREedCf+3euvAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMB
++Af8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSwDPBMMPQFWAJI/TPlUq9LhONm
++UjANBgkqhkiG9w0BAQwFAAOCAgEAqqiAjw54o+Ci1M3m9Zh6O+oAA7CXDpO8Wqj2
++LIxyh6mx/H9z/WNxeKWHWc8w4Q0QshNabYL1auaAn6AFC2jkR2vHat+2/XcycuUY
+++gn0oJMsXdKMdYV2ZZAMA3m3MSNjrXiDCYZohMr/+c8mmpJ5581LxedhpxfL86kS
++k5Nrp+gvU5LEYFiwzAJRGFuFjWJZY7attN6a+yb3ACfAXVU3dJnJUH/jWS5E4ywl
++7uxMMne0nxrpS10gxdr9HIcWxkPo1LsmmkVwXqkLN1PiRnsn/eBG8om3zEK2yygm
++btmlyTrIQRNg91CMFa6ybRoVGld45pIq2WWQgj9sAq+uEjonljYE1x2igGOpm/Hl
++urR8FLBOybEfdF849lHqm/osohHUqS0nGkWxr7JOcQ3AWEbWaQbLU8uz/mtBzUF+
++fUwPfHJ5elnNXkoOrJupmHN5fLT0zLm4BwyydFy4x2+IoZCn9Kr5v2c69BoVYh63
++n749sSmvZ6ES8lgQGVMDMBu4Gon2nL2XA46jCfMdiyHxtN/kHNGfZQIG6lzWE7OE
++76KlXIx3KadowGuuQNKotOrN8I1LOJwZmhsoVLiJkO/KdYE+HvJkJMcYr07/R54H
++9jVlpNMKVv/1F2Rs76giJUmTtt8AF9pYfl3uxRuw0dFfIRDH+fO6AgonB8Xx1sfT
++4PsJYGw=
++-----END CERTIFICATE-----
++
++# 8ecde6884f3d87b1125ba31ac3fcb13d7016de7f57cc904fe1cb97c6ae98196e
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 06:6c:9f:cf:99:bf:8c:0a:39:e2:f0:78:8a:43:e6:96:36:5b:ca
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = US, O = Amazon, CN = Amazon Root CA 1
++ Validity
++ Not Before: May 26 00:00:00 2015 GMT
++ Not After : Jan 17 00:00:00 2038 GMT
++ Subject: C = US, O = Amazon, CN = Amazon Root CA 1
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:b2:78:80:71:ca:78:d5:e3:71:af:47:80:50:74:
++ 7d:6e:d8:d7:88:76:f4:99:68:f7:58:21:60:f9:74:
++ 84:01:2f:ac:02:2d:86:d3:a0:43:7a:4e:b2:a4:d0:
++ 36:ba:01:be:8d:db:48:c8:07:17:36:4c:f4:ee:88:
++ 23:c7:3e:eb:37:f5:b5:19:f8:49:68:b0:de:d7:b9:
++ 76:38:1d:61:9e:a4:fe:82:36:a5:e5:4a:56:e4:45:
++ e1:f9:fd:b4:16:fa:74:da:9c:9b:35:39:2f:fa:b0:
++ 20:50:06:6c:7a:d0:80:b2:a6:f9:af:ec:47:19:8f:
++ 50:38:07:dc:a2:87:39:58:f8:ba:d5:a9:f9:48:67:
++ 30:96:ee:94:78:5e:6f:89:a3:51:c0:30:86:66:a1:
++ 45:66:ba:54:eb:a3:c3:91:f9:48:dc:ff:d1:e8:30:
++ 2d:7d:2d:74:70:35:d7:88:24:f7:9e:c4:59:6e:bb:
++ 73:87:17:f2:32:46:28:b8:43:fa:b7:1d:aa:ca:b4:
++ f2:9f:24:0e:2d:4b:f7:71:5c:5e:69:ff:ea:95:02:
++ cb:38:8a:ae:50:38:6f:db:fb:2d:62:1b:c5:c7:1e:
++ 54:e1:77:e0:67:c8:0f:9c:87:23:d6:3f:40:20:7f:
++ 20:80:c4:80:4c:3e:3b:24:26:8e:04:ae:6c:9a:c8:
++ aa:0d
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ 84:18:CC:85:34:EC:BC:0C:94:94:2E:08:59:9C:C7:B2:10:4E:0A:08
++ Signature Algorithm: sha256WithRSAEncryption
++ 98:f2:37:5a:41:90:a1:1a:c5:76:51:28:20:36:23:0e:ae:e6:
++ 28:bb:aa:f8:94:ae:48:a4:30:7f:1b:fc:24:8d:4b:b4:c8:a1:
++ 97:f6:b6:f1:7a:70:c8:53:93:cc:08:28:e3:98:25:cf:23:a4:
++ f9:de:21:d3:7c:85:09:ad:4e:9a:75:3a:c2:0b:6a:89:78:76:
++ 44:47:18:65:6c:8d:41:8e:3b:7f:9a:cb:f4:b5:a7:50:d7:05:
++ 2c:37:e8:03:4b:ad:e9:61:a0:02:6e:f5:f2:f0:c5:b2:ed:5b:
++ b7:dc:fa:94:5c:77:9e:13:a5:7f:52:ad:95:f2:f8:93:3b:de:
++ 8b:5c:5b:ca:5a:52:5b:60:af:14:f7:4b:ef:a3:fb:9f:40:95:
++ 6d:31:54:fc:42:d3:c7:46:1f:23:ad:d9:0f:48:70:9a:d9:75:
++ 78:71:d1:72:43:34:75:6e:57:59:c2:02:5c:26:60:29:cf:23:
++ 19:16:8e:88:43:a5:d4:e4:cb:08:fb:23:11:43:e8:43:29:72:
++ 62:a1:a9:5d:5e:08:d4:90:ae:b8:d8:ce:14:c2:d0:55:f2:86:
++ f6:c4:93:43:77:66:61:c0:b9:e8:41:d7:97:78:60:03:6e:4a:
++ 72:ae:a5:d1:7d:ba:10:9e:86:6c:1b:8a:b9:59:33:f8:eb:c4:
++ 90:be:f1:b9
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# e35d28419ed02025cfa69038cd623962458da5c695fbdea3c22b0bfb25897092
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 06:6c:9f:d7:c1:bb:10:4c:29:43:e5:71:7b:7b:2c:c8:1a:c1:0e
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = US, O = Amazon, CN = Amazon Root CA 4
++ Validity
++ Not Before: May 26 00:00:00 2015 GMT
++ Not After : May 26 00:00:00 2040 GMT
++ Subject: C = US, O = Amazon, CN = Amazon Root CA 4
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:d2:ab:8a:37:4f:a3:53:0d:fe:c1:8a:7b:4b:a8:
++ 7b:46:4b:63:b0:62:f6:2d:1b:db:08:71:21:d2:00:
++ e8:63:bd:9a:27:fb:f0:39:6e:5d:ea:3d:a5:c9:81:
++ aa:a3:5b:20:98:45:5d:16:db:fd:e8:10:6d:e3:9c:
++ e0:e3:bd:5f:84:62:f3:70:64:33:a0:cb:24:2f:70:
++ ba:88:a1:2a:a0:75:f8:81:ae:62:06:c4:81:db:39:
++ 6e:29:b0:1e:fa:2e:5c
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ D3:EC:C7:3A:65:6E:CC:E1:DA:76:9A:56:FB:9C:F3:86:6D:57:E5:81
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:65:02:30:3a:8b:21:f1:bd:7e:11:ad:d0:ef:58:96:2f:d6:
++ eb:9d:7e:90:8d:2b:cf:66:55:c3:2c:e3:28:a9:70:0a:47:0e:
++ f0:37:59:12:ff:2d:99:94:28:4e:2a:4f:35:4d:33:5a:02:31:
++ 00:ea:75:00:4e:3b:c4:3a:94:12:91:c9:58:46:9d:21:13:72:
++ a7:88:9c:8a:e4:4c:4a:db:96:d4:ac:8b:6b:6b:49:12:53:33:
++ ad:d7:e4:be:24:fc:b5:0a:76:d4:a5:bc:10
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 5c58468d55f58e497e743982d2b50010b6d165374acf83a7d4a32db768c4408e
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 279744 (0x444c0)
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C = PL, O = Unizeto Technologies S.A., OU = Certum Certification Authority, CN = Certum Trusted Network CA
++ Validity
++ Not Before: Oct 22 12:07:37 2008 GMT
++ Not After : Dec 31 12:07:37 2029 GMT
++ Subject: C = PL, O = Unizeto Technologies S.A., OU = Certum Certification Authority, CN = Certum Trusted Network CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:e3:fb:7d:a3:72:ba:c2:f0:c9:14:87:f5:6b:01:
++ 4e:e1:6e:40:07:ba:6d:27:5d:7f:f7:5b:2d:b3:5a:
++ c7:51:5f:ab:a4:32:a6:61:87:b6:6e:0f:86:d2:30:
++ 02:97:f8:d7:69:57:a1:18:39:5d:6a:64:79:c6:01:
++ 59:ac:3c:31:4a:38:7c:d2:04:d2:4b:28:e8:20:5f:
++ 3b:07:a2:cc:4d:73:db:f3:ae:4f:c7:56:d5:5a:a7:
++ 96:89:fa:f3:ab:68:d4:23:86:59:27:cf:09:27:bc:
++ ac:6e:72:83:1c:30:72:df:e0:a2:e9:d2:e1:74:75:
++ 19:bd:2a:9e:7b:15:54:04:1b:d7:43:39:ad:55:28:
++ c5:e2:1a:bb:f4:c0:e4:ae:38:49:33:cc:76:85:9f:
++ 39:45:d2:a4:9e:f2:12:8c:51:f8:7c:e4:2d:7f:f5:
++ ac:5f:eb:16:9f:b1:2d:d1:ba:cc:91:42:77:4c:25:
++ c9:90:38:6f:db:f0:cc:fb:8e:1e:97:59:3e:d5:60:
++ 4e:e6:05:28:ed:49:79:13:4b:ba:48:db:2f:f9:72:
++ d3:39:ca:fe:1f:d8:34:72:f5:b4:40:cf:31:01:c3:
++ ec:de:11:2d:17:5d:1f:b8:50:d1:5e:19:a7:69:de:
++ 07:33:28:ca:50:95:f9:a7:54:cb:54:86:50:45:a9:
++ f9:49
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 08:76:CD:CB:07:FF:24:F6:C5:CD:ED:BB:90:BC:E2:84:37:46:75:F7
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Signature Algorithm: sha1WithRSAEncryption
++ a6:a8:ad:22:ce:01:3d:a6:a3:ff:62:d0:48:9d:8b:5e:72:b0:
++ 78:44:e3:dc:1c:af:09:fd:23:48:fa:bd:2a:c4:b9:55:04:b5:
++ 10:a3:8d:27:de:0b:82:63:d0:ee:de:0c:37:79:41:5b:22:b2:
++ b0:9a:41:5c:a6:70:e0:d4:d0:77:cb:23:d3:00:e0:6c:56:2f:
++ e1:69:0d:0d:d9:aa:bf:21:81:50:d9:06:a5:a8:ff:95:37:d0:
++ aa:fe:e2:b3:f5:99:2d:45:84:8a:e5:42:09:d7:74:02:2f:f7:
++ 89:d8:99:e9:bc:27:d4:47:8d:ba:0d:46:1c:77:cf:14:a4:1c:
++ b9:a4:31:c4:9c:28:74:03:34:ff:33:19:26:a5:e9:0d:74:b7:
++ 3e:97:c6:76:e8:27:96:a3:66:dd:e1:ae:f2:41:5b:ca:98:56:
++ 83:73:70:e4:86:1a:d2:31:41:ba:2f:be:2d:13:5a:76:6f:4e:
++ e8:4e:81:0e:3f:5b:03:22:a0:12:be:66:58:11:4a:cb:03:c4:
++ b4:2a:2a:2d:96:17:e0:39:54:bc:48:d3:76:27:9d:9a:2d:06:
++ a6:c9:ec:39:d2:ab:db:9f:9a:0b:27:02:35:29:b1:40:95:e7:
++ f9:e8:9c:55:88:19:46:d6:b7:34:f5:7e:ce:39:9a:d9:38:f1:
++ 51:f7:4f:2c
++-----BEGIN CERTIFICATE-----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=
++-----END CERTIFICATE-----
++
++# f356bea244b7a91eb35d53ca9ad7864ace018e2d35d5f8f96ddf68a6f41aa474
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 6643877497813316402 (0x5c33cb622c5fb332)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: CN = Atos TrustedRoot 2011, O = Atos, C = DE
++ Validity
++ Not Before: Jul 7 14:58:30 2011 GMT
++ Not After : Dec 31 23:59:59 2030 GMT
++ Subject: CN = Atos TrustedRoot 2011, O = Atos, C = DE
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:95:85:3b:97:6f:2a:3b:2e:3b:cf:a6:f3:29:35:
++ be:cf:18:ac:3e:aa:d9:f8:4d:a0:3e:1a:47:b9:bc:
++ 9a:df:f2:fe:cc:3e:47:e8:7a:96:c2:24:8e:35:f4:
++ a9:0c:fc:82:fd:6d:c1:72:62:27:bd:ea:6b:eb:e7:
++ 8a:cc:54:3e:90:50:cf:80:d4:95:fb:e8:b5:82:d4:
++ 14:c5:b6:a9:55:25:57:db:b1:50:f6:b0:60:64:59:
++ 7a:69:cf:03:b7:6f:0d:be:ca:3e:6f:74:72:ea:aa:
++ 30:2a:73:62:be:49:91:61:c8:11:fe:0e:03:2a:f7:
++ 6a:20:dc:02:15:0d:5e:15:6a:fc:e3:82:c1:b5:c5:
++ 9d:64:09:6c:a3:59:98:07:27:c7:1b:96:2b:61:74:
++ 71:6c:43:f1:f7:35:89:10:e0:9e:ec:55:a1:37:22:
++ a2:87:04:05:2c:47:7d:b4:1c:b9:62:29:66:28:ca:
++ b7:e1:93:f5:a4:94:03:99:b9:70:85:b5:e6:48:ea:
++ 8d:50:fc:d9:de:cc:6f:07:0e:dd:0b:72:9d:80:30:
++ 16:07:95:3f:28:0e:fd:c5:75:4f:53:d6:74:9a:b4:
++ 24:2e:8e:02:91:cf:76:c5:9b:1e:55:74:9c:78:21:
++ b1:f0:2d:f1:0b:9f:c2:d5:96:18:1f:f0:54:22:7a:
++ 8c:07
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ A7:A5:06:B1:2C:A6:09:60:EE:D1:97:E9:70:AE:BC:3B:19:6C:DB:21
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ keyid:A7:A5:06:B1:2C:A6:09:60:EE:D1:97:E9:70:AE:BC:3B:19:6C:DB:21
++
++ X509v3 Certificate Policies:
++ Policy: 1.3.6.1.4.1.6189.3.4.1.1
++
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ 26:77:34:db:94:48:86:2a:41:9d:2c:3e:06:90:60:c4:8c:ac:
++ 0b:54:b8:1f:b9:7b:d3:07:39:e4:fa:3e:7b:b2:3d:4e:ed:9f:
++ 23:bd:97:f3:6b:5c:ef:ee:fd:40:a6:df:a1:93:a1:0a:86:ac:
++ ef:20:d0:79:01:bd:78:f7:19:d8:24:31:34:04:01:a6:ba:15:
++ 9a:c3:27:dc:d8:4f:0f:cc:18:63:ff:99:0f:0e:91:6b:75:16:
++ e1:21:fc:d8:26:c7:47:b7:a6:cf:58:72:71:7e:ba:e1:4d:95:
++ 47:3b:c9:af:6d:a1:b4:c1:ec:89:f6:b4:0f:38:b5:e2:64:dc:
++ 25:cf:a6:db:eb:9a:5c:99:a1:c5:08:de:fd:e6:da:d5:d6:5a:
++ 45:0c:c4:b7:c2:b5:14:ef:b4:11:ff:0e:15:b5:f5:f5:db:c6:
++ bd:eb:5a:a7:f0:56:22:a9:3c:65:54:c6:15:a8:bd:86:9e:cd:
++ 83:96:68:7a:71:81:89:e1:0b:e1:ea:11:1b:68:08:cc:69:9e:
++ ec:9e:41:9e:44:32:26:7a:e2:87:0a:71:3d:eb:e4:5a:a4:d2:
++ db:c5:cd:c6:de:60:7f:b9:f3:4f:44:92:ef:2a:b7:18:3e:a7:
++ 19:d9:0b:7d:b1:37:41:42:b0:ba:60:1d:f2:fe:09:11:b0:f0:
++ 87:7b:a7:9d
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 57de0583efd2b26e0361da99da9df4648def7ee8441c3b728afa9bcde0f9b26a
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 1977337328857672817 (0x1b70e9d2ffae6c71)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = ES, CN = Autoridad de Certificacion Firmaprofesional CIF A62634068
++ Validity
++ Not Before: Sep 23 15:22:07 2014 GMT
++ Not After : May 5 15:22:07 2036 GMT
++ Subject: C = ES, CN = Autoridad de Certificacion Firmaprofesional CIF A62634068
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:ca:96:6b:8e:ea:f8:fb:f1:a2:35:e0:7f:4c:da:
++ e0:c3:52:d7:7d:b6:10:c8:02:5e:b3:43:2a:c4:4f:
++ 6a:b2:ca:1c:5d:28:9a:78:11:1a:69:59:57:af:b5:
++ 20:42:e4:8b:0f:e6:df:5b:a6:03:92:2f:f5:11:e4:
++ 62:d7:32:71:38:d9:04:0c:71:ab:3d:51:7e:0f:07:
++ df:63:05:5c:e9:bf:94:6f:c1:29:82:c0:b4:da:51:
++ b0:c1:3c:bb:ad:37:4a:5c:ca:f1:4b:36:0e:24:ab:
++ bf:c3:84:77:fd:a8:50:f4:b1:e7:c6:2f:d2:2d:59:
++ 8d:7a:0a:4e:96:69:52:02:aa:36:98:ec:fc:fa:14:
++ 83:0c:37:1f:c9:92:37:7f:d7:81:2d:e5:c4:b9:e0:
++ 3e:34:fe:67:f4:3e:66:d1:d3:f4:40:cf:5e:62:34:
++ 0f:70:06:3e:20:18:5a:ce:f7:72:1b:25:6c:93:74:
++ 14:93:a3:73:b1:0e:aa:87:10:23:59:5f:20:05:19:
++ 47:ed:68:8e:92:12:ca:5d:fc:d6:2b:b2:92:3c:20:
++ cf:e1:5f:af:20:be:a0:76:7f:76:e5:ec:1a:86:61:
++ 33:3e:e7:7b:b4:3f:a0:0f:8e:a2:b9:6a:6f:b9:87:
++ 26:6f:41:6c:88:a6:50:fd:6a:63:0b:f5:93:16:1b:
++ 19:8f:b2:ed:9b:9b:c9:90:f5:01:0c:df:19:3d:0f:
++ 3e:38:23:c9:2f:8f:0c:d1:02:fe:1b:55:d6:4e:d0:
++ 8d:3c:af:4f:a4:f3:fe:af:2a:d3:05:9d:79:08:a1:
++ cb:57:31:b4:9c:c8:90:b2:67:f4:18:16:93:3a:fc:
++ 47:d8:d1:78:96:31:1f:ba:2b:0c:5f:5d:99:ad:63:
++ 89:5a:24:20:76:d8:df:fd:ab:4e:a6:22:aa:9d:5e:
++ e6:27:8a:7d:68:29:a3:e7:8a:b8:da:11:bb:17:2d:
++ 99:9d:13:24:46:f7:c5:e2:d8:9f:8e:7f:c7:8f:74:
++ 6d:5a:b2:e8:72:f5:ac:ee:24:10:ad:2f:14:da:ff:
++ 2d:9a:46:71:47:be:42:df:bb:01:db:f4:7f:d3:28:
++ 8f:31:59:5b:d3:c9:02:a6:b4:52:ca:6e:97:fb:43:
++ c5:08:26:6f:8a:f4:bb:fd:9f:28:aa:0d:d5:45:f3:
++ 13:3a:1d:d8:c0:78:8f:41:67:3c:1e:94:64:ae:7b:
++ 0b:c5:e8:d9:01:88:39:1a:97:86:64:41:d5:3b:87:
++ 0c:6e:fa:0f:c6:bd:48:14:bf:39:4d:d4:9e:41:b6:
++ 8f:96:1d:63:96:93:d9:95:06:78:31:68:9e:37:06:
++ 3b:80:89:45:61:39:23:c7:1b:44:a3:15:e5:1c:f8:
++ 92:30:bb
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 65:CD:EB:AB:35:1E:00:3E:7E:D5:74:C0:1C:B4:73:47:0E:1A:64:2F
++ X509v3 Basic Constraints: critical
++ CA:TRUE, pathlen:1
++ X509v3 Certificate Policies:
++ Policy: X509v3 Any Policy
++ CPS: http://www.firmaprofesional.com/cps
++ User Notice:
++ Explicit Text:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ Signature Value:
++ 74:87:28:02:2b:77:1f:66:89:64:ed:8f:74:2e:46:1c:bb:a8:
++ f8:f8:0b:1d:83:b6:3a:a7:e8:45:8a:07:b7:e0:3e:20:cb:e1:
++ 08:db:13:08:f8:28:a1:35:b2:80:b3:0b:51:c0:d3:56:9a:8d:
++ 33:45:49:af:49:f0:e0:3d:07:7a:45:13:5a:ff:c8:97:d8:d3:
++ 18:2c:7d:96:f8:dd:a2:65:43:70:93:90:15:ba:90:df:e8:19:
++ b0:db:2c:8a:60:0f:b7:6f:94:07:1e:1d:a6:c9:85:f6:bd:34:
++ f8:40:78:62:10:70:3a:be:7d:4b:39:81:a9:10:d4:96:41:bb:
++ f8:5f:1c:0b:1d:08:f2:b1:b0:89:7a:f2:f7:a0:e0:c4:8f:8b:
++ 78:b5:3b:58:a5:23:8e:4f:55:fe:36:3b:e0:0c:b7:ca:2a:30:
++ 41:20:b4:80:cd:ae:fc:76:66:73:a8:ae:6e:e1:7c:da:03:e8:
++ 94:20:e6:22:a3:d0:1f:90:5d:20:53:14:26:57:da:54:97:df:
++ 16:44:10:01:1e:88:66:8f:72:38:93:dd:20:b7:34:be:d7:f1:
++ ee:63:8e:47:79:28:06:fc:f3:59:45:25:60:22:33:1b:a3:5f:
++ a8:ba:2a:da:1a:3d:cd:40:ea:8c:ee:05:15:95:d5:a5:2c:20:
++ 2f:a7:98:28:ee:45:fc:f1:b8:88:00:2c:8f:42:da:51:d5:9c:
++ e5:13:68:71:45:43:8b:9e:0b:21:3c:4b:5c:05:dc:1a:9f:98:
++ 8e:da:bd:22:9e:72:cd:ad:0a:cb:cc:a3:67:9b:28:74:c4:9b:
++ d7:1a:3c:04:58:a6:82:9d:ad:c7:7b:6f:ff:80:96:e9:f8:8d:
++ 6a:bd:18:90:1d:ff:49:1a:90:52:37:93:2f:3c:02:5d:82:76:
++ 0b:51:e7:16:c7:57:f8:38:f9:a7:cd:9b:22:54:ef:63:b0:15:
++ 6d:53:65:03:4a:5e:4a:a0:b2:a7:8e:49:00:59:38:d5:c7:f4:
++ 80:64:f5:6e:95:50:b8:11:7e:15:70:38:4a:b0:7f:d0:c4:32:
++ 70:c0:19:ff:c9:38:2d:14:2c:66:f4:42:44:e6:55:76:1b:80:
++ 15:57:ff:c0:a7:a7:aa:39:aa:d8:d3:70:d0:2e:ba:eb:94:6a:
++ fa:5f:34:86:e7:62:b5:fd:8a:f0:30:85:94:c9:af:24:02:2f:
++ 6f:d6:dd:67:fe:e3:b0:55:4f:04:98:4f:a4:41:56:e2:93:d0:
++ 6a:e8:d6:f3:fb:65:e0:ce:75:c4:31:59:0c:ee:82:c8:0c:60:
++ 33:4a:19:ba:84:67:27:0f:bc:42:5d:bd:24:54:0d:ec:1d:70:
++ 06:5f:a4:bc:fa:20:7c:55
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 9a114025197c5bb95d94e63d55cd43790847b646b23cdf11ada4a00eff15fb48
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 2 (0x2)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = NO, O = Buypass AS-983163327, CN = Buypass Class 2 Root CA
++ Validity
++ Not Before: Oct 26 08:38:03 2010 GMT
++ Not After : Oct 26 08:38:03 2040 GMT
++ Subject: C = NO, O = Buypass AS-983163327, CN = Buypass Class 2 Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:d7:c7:5e:f7:c1:07:d4:77:fb:43:21:f4:f4:f5:
++ 69:e4:ee:32:01:db:a3:86:1f:e4:59:0d:ba:e7:75:
++ 83:52:eb:ea:1c:61:15:48:bb:1d:07:ca:8c:ae:b0:
++ dc:96:9d:ea:c3:60:92:86:82:28:73:9c:56:06:ff:
++ 4b:64:f0:0c:2a:37:49:b5:e5:cf:0c:7c:ee:f1:4a:
++ bb:73:30:65:f3:d5:2f:83:b6:7e:e3:e7:f5:9e:ab:
++ 60:f9:d3:f1:9d:92:74:8a:e4:1c:96:ac:5b:80:e9:
++ b5:f4:31:87:a3:51:fc:c7:7e:a1:6f:8e:53:77:d4:
++ 97:c1:55:33:92:3e:18:2f:75:d4:ad:86:49:cb:95:
++ af:54:06:6c:d8:06:13:8d:5b:ff:e1:26:19:59:c0:
++ 24:ba:81:71:79:90:44:50:68:24:94:5f:b8:b3:11:
++ f1:29:41:61:a3:41:cb:23:36:d5:c1:f1:32:50:10:
++ 4e:7f:f4:86:93:ec:84:d3:8e:bc:4b:bf:5c:01:4e:
++ 07:3d:dc:14:8a:94:0a:a4:ea:73:fb:0b:51:e8:13:
++ 07:18:fa:0e:f1:2b:d1:54:15:7d:3c:e1:f7:b4:19:
++ 42:67:62:5e:77:e0:a2:55:ec:b6:d9:69:17:d5:3a:
++ af:44:ed:4a:c5:9e:e4:7a:27:7c:e5:75:d7:aa:cb:
++ 25:e7:df:6b:0a:db:0f:4d:93:4e:a8:a0:cd:7b:2e:
++ f2:59:01:6a:b7:0d:b8:07:81:7e:8b:38:1b:38:e6:
++ 0a:57:99:3d:ee:21:e8:a3:f5:0c:16:dd:8b:ec:34:
++ 8e:9c:2a:1c:00:15:17:8d:68:83:d2:70:9f:18:08:
++ cd:11:68:d5:c9:6b:52:cd:c4:46:8f:dc:b5:f3:d8:
++ 57:73:1e:e9:94:39:04:bf:d3:de:38:de:b4:53:ec:
++ 69:1c:a2:7e:c4:8f:e4:1b:70:ad:f2:a2:f9:fb:f7:
++ 16:64:66:69:9f:49:51:a2:e2:15:18:67:06:4a:7f:
++ d5:6c:b5:4d:b3:33:e0:61:eb:5d:be:e9:98:0f:32:
++ d7:1d:4b:3c:2e:5a:01:52:91:09:f2:df:ea:8d:d8:
++ 06:40:63:aa:11:e4:fe:c3:37:9e:14:52:3f:f4:e2:
++ cc:f2:61:93:d1:fd:67:6b:d7:52:ae:bf:68:ab:40:
++ 43:a0:57:35:53:78:f0:53:f8:61:42:07:64:c6:d7:
++ 6f:9b:4c:38:0d:63:ac:62:af:36:8b:a2:73:0a:0d:
++ f5:21:bd:74:aa:4d:ea:72:03:49:db:c7:5f:1d:62:
++ 63:c7:fd:dd:91:ec:33:ee:f5:6d:b4:6e:30:68:de:
++ c8:d6:26:b0:75:5e:7b:b4:07:20:98:a1:76:32:b8:
++ 4d:6c:4f
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ C9:80:77:E0:62:92:82:F5:46:9C:F3:BA:F7:4C:C3:DE:B8:A3:AD:39
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ 53:5f:21:f5:ba:b0:3a:52:39:2c:92:b0:6c:00:c9:ef:ce:20:
++ ef:06:f2:96:9e:e9:a4:74:7f:7a:16:fc:b7:f5:b6:fb:15:1b:
++ 3f:ab:a6:c0:72:5d:10:b1:71:ee:bc:4f:e3:ad:ac:03:6d:2e:
++ 71:2e:af:c4:e3:ad:a3:bd:0c:11:a7:b4:ff:4a:b2:7b:10:10:
++ 1f:a7:57:41:b2:c0:ae:f4:2c:59:d6:47:10:88:f3:21:51:29:
++ 30:ca:60:86:af:46:ab:1d:ed:3a:5b:b0:94:de:44:e3:41:08:
++ a2:c1:ec:1d:d6:fd:4f:b6:d6:47:d0:14:0b:ca:e6:ca:b5:7b:
++ 77:7e:41:1f:5e:83:c7:b6:8c:39:96:b0:3f:96:81:41:6f:60:
++ 90:e2:e8:f9:fb:22:71:d9:7d:b3:3d:46:bf:b4:84:af:90:1c:
++ 0f:8f:12:6a:af:ef:ee:1e:7a:ae:02:4a:8a:17:2b:76:fe:ac:
++ 54:89:24:2c:4f:3f:b6:b2:a7:4e:8c:a8:91:97:fb:29:c6:7b:
++ 5c:2d:b9:cb:66:b6:b7:a8:5b:12:51:85:b5:09:7e:62:78:70:
++ fe:a9:6a:60:b6:1d:0e:79:0c:fd:ca:ea:24:80:72:c3:97:3f:
++ f2:77:ab:43:22:0a:c7:eb:b6:0c:84:82:2c:80:6b:41:8a:08:
++ c0:eb:a5:6b:df:99:12:cb:8a:d5:5e:80:0c:91:e0:26:08:36:
++ 48:c5:fa:38:11:35:ff:25:83:2d:f2:7a:bf:da:fd:8e:fe:a5:
++ cb:45:2c:1f:c4:88:53:ae:77:0e:d9:9a:76:c5:8e:2c:1d:a3:
++ ba:d5:ec:32:ae:c0:aa:ac:f7:d1:7a:4d:eb:d4:07:e2:48:f7:
++ 22:8e:b0:a4:9f:6a:ce:8e:b2:b2:60:f4:a3:22:d0:23:eb:94:
++ 5a:7a:69:dd:0f:bf:40:57:ac:6b:59:50:d9:a3:99:e1:6e:fe:
++ 8d:01:79:27:23:15:de:92:9d:7b:09:4d:5a:e7:4b:48:30:5a:
++ 18:e6:0a:6d:e6:8f:e0:d2:bb:e6:df:7c:6e:21:82:c1:68:39:
++ 4d:b4:98:58:66:62:cc:4a:90:5e:c3:fa:27:04:b1:79:15:74:
++ 99:cc:be:ad:20:de:26:60:1c:eb:56:51:a6:a3:ea:e4:a3:3f:
++ a7:ff:61:dc:f1:5a:4d:6c:32:23:43:ee:ac:a8:ee:ee:4a:12:
++ 09:3c:5d:71:c2:be:79:fa:c2:87:68:1d:0b:fd:5c:69:cc:06:
++ d0:9a:7d:54:99:2a:c9:39:1a:19:af:4b:2a:43:f3:63:5d:5a:
++ 58:e2:2f:e3:1d:e4:a9:d6:d0:0a:d0:9e:bf:d7:81:09:f1:c9:
++ c7:26:0d:ac:98:16:56:a0
+ -----BEGIN CERTIFICATE-----
+ MIIFWTCCA0GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEd
+ MBsGA1UECgwUQnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3Mg
+@@ -1538,13 +844,94 @@ I+uUWnpp3Q+/QFesa1lQ2aOZ4W7+jQF5JyMV3pKdewlNWudLSDBaGOYKbeaP4NK7
+ Y11aWOIv4x3kqdbQCtCev9eBCfHJxyYNrJgWVqA=
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=Buypass Class 3 Root CA O=Buypass AS-983163327
+-# Subject: CN=Buypass Class 3 Root CA O=Buypass AS-983163327
+-# Label: "Buypass Class 3 Root CA"
+-# Serial: 2
+-# MD5 Fingerprint: 3d:3b:18:9e:2c:64:5a:e8:d5:88:ce:0e:f9:37:c2:ec
+-# SHA1 Fingerprint: da:fa:f7:fa:66:84:ec:06:8f:14:50:bd:c7:c2:81:a5:bc:a9:64:57
+-# SHA256 Fingerprint: ed:f7:eb:bc:a2:7a:2a:38:4d:38:7b:7d:40:10:c6:66:e2:ed:b4:84:3e:4c:29:b4:ae:1d:5b:93:32:e6:b2:4d
++# edf7ebbca27a2a384d387b7d4010c666e2edb4843e4c29b4ae1d5b9332e6b24d
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 2 (0x2)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = NO, O = Buypass AS-983163327, CN = Buypass Class 3 Root CA
++ Validity
++ Not Before: Oct 26 08:28:58 2010 GMT
++ Not After : Oct 26 08:28:58 2040 GMT
++ Subject: C = NO, O = Buypass AS-983163327, CN = Buypass Class 3 Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:a5:da:0a:95:16:50:e3:95:f2:5e:9d:76:31:06:
++ 32:7a:9b:f1:10:76:b8:00:9a:b5:52:36:cd:24:47:
++ b0:9f:18:64:bc:9a:f6:fa:d5:79:d8:90:62:4c:22:
++ 2f:de:38:3d:d6:e0:a8:e9:1c:2c:db:78:11:e9:8e:
++ 68:51:15:72:c7:f3:33:87:e4:a0:5d:0b:5c:e0:57:
++ 07:2a:30:f5:cd:c4:37:77:28:4d:18:91:e6:bf:d5:
++ 52:fd:71:2d:70:3e:e7:c6:c4:8a:e3:f0:28:0b:f4:
++ 76:98:a1:8b:87:55:b2:3a:13:fc:b7:3e:27:37:8e:
++ 22:e3:a8:4f:2a:ef:60:bb:3d:b7:39:c3:0e:01:47:
++ 99:5d:12:4f:db:43:fa:57:a1:ed:f9:9d:be:11:47:
++ 26:5b:13:98:ab:5d:16:8a:b0:37:1c:57:9d:45:ff:
++ 88:96:36:bf:bb:ca:07:7b:6f:87:63:d7:d0:32:6a:
++ d6:5d:6c:0c:f1:b3:6e:39:e2:6b:31:2e:39:00:27:
++ 14:de:38:c0:ec:19:66:86:12:e8:9d:72:16:13:64:
++ 52:c7:a9:37:1c:fd:82:30:ed:84:18:1d:f4:ae:5c:
++ ff:70:13:00:eb:b1:f5:33:7a:4b:d6:55:f8:05:8d:
++ 4b:69:b0:f5:b3:28:36:5c:14:c4:51:73:4d:6b:0b:
++ f1:34:07:db:17:39:d7:dc:28:7b:6b:f5:9f:f3:2e:
++ c1:4f:17:2a:10:f3:cc:ca:e8:eb:fd:6b:ab:2e:9a:
++ 9f:2d:82:6e:04:d4:52:01:93:2d:3d:86:fc:7e:fc:
++ df:ef:42:1d:a6:6b:ef:b9:20:c6:f7:bd:a0:a7:95:
++ fd:a7:e6:89:24:d8:cc:8c:34:6c:e2:23:2f:d9:12:
++ 1a:21:b9:55:91:6f:0b:91:79:19:0c:ad:40:88:0b:
++ 70:e2:7a:d2:0e:d8:68:48:bb:82:13:39:10:58:e9:
++ d8:2a:07:c6:12:db:58:db:d2:3b:55:10:47:05:15:
++ 67:62:7e:18:63:a6:46:3f:09:0e:54:32:5e:bf:0d:
++ 62:7a:27:ef:80:e8:db:d9:4b:06:5a:37:5a:25:d0:
++ 08:12:77:d4:6f:09:50:97:3d:c8:1d:c3:df:8c:45:
++ 30:56:c6:d3:64:ab:66:f3:c0:5e:96:9c:c3:c4:ef:
++ c3:7c:6b:8b:3a:79:7f:b3:49:cf:3d:e2:89:9f:a0:
++ 30:4b:85:b9:9c:94:24:79:8f:7d:6b:a9:45:68:0f:
++ 2b:d0:f1:da:1c:cb:69:b8:ca:49:62:6d:c8:d0:63:
++ 62:dd:60:0f:58:aa:8f:a1:bc:05:a5:66:a2:cf:1b:
++ 76:b2:84:64:b1:4c:39:52:c0:30:ba:f0:8c:4b:02:
++ b0:b6:b7
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 47:B8:CD:FF:E5:6F:EE:F8:B2:EC:2F:4E:0E:F9:25:B0:8E:3C:6B:C3
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ 00:20:23:41:35:04:90:c2:40:62:60:ef:e2:35:4c:d7:3f:ac:
++ e2:34:90:b8:a1:6f:76:fa:16:16:a4:48:37:2c:e9:90:c2:f2:
++ 3c:f8:0a:9f:d8:81:e5:bb:5b:da:25:2c:a4:a7:55:71:24:32:
++ f6:c8:0b:f2:bc:6a:f8:93:ac:b2:07:c2:5f:9f:db:cc:c8:8a:
++ aa:be:6a:6f:e1:49:10:cc:31:d7:80:bb:bb:c8:d8:a2:0e:64:
++ 57:ea:a2:f5:c2:a9:31:15:d2:20:6a:ec:fc:22:01:28:cf:86:
++ b8:80:1e:a9:cc:11:a5:3c:f2:16:b3:47:9d:fc:d2:80:21:c4:
++ cb:d0:47:70:41:a1:ca:83:19:08:2c:6d:f2:5d:77:9c:8a:14:
++ 13:d4:36:1c:92:f0:e5:06:37:dc:a6:e6:90:9b:38:8f:5c:6b:
++ 1b:46:86:43:42:5f:3e:01:07:53:54:5d:65:7d:f7:8a:73:a1:
++ 9a:54:5a:1f:29:43:14:27:c2:85:0f:b5:88:7b:1a:3b:94:b7:
++ 1d:60:a7:b5:9c:e7:29:69:57:5a:9b:93:7a:43:30:1b:03:d7:
++ 62:c8:40:a6:aa:fc:64:e4:4a:d7:91:53:01:a8:20:88:6e:9c:
++ 5f:44:b9:cb:60:81:34:ec:6f:d3:7d:da:48:5f:eb:b4:90:bc:
++ 2d:a9:1c:0b:ac:1c:d5:a2:68:20:80:04:d6:fc:b1:8f:2f:bb:
++ 4a:31:0d:4a:86:1c:eb:e2:36:29:26:f5:da:d8:c4:f2:75:61:
++ cf:7e:ae:76:63:4a:7a:40:65:93:87:f8:1e:80:8c:86:e5:86:
++ d6:8f:0e:fc:53:2c:60:e8:16:61:1a:a2:3e:43:7b:cd:39:60:
++ 54:6a:f5:f2:89:26:01:68:83:48:a2:33:e8:c9:04:91:b2:11:
++ 34:11:3e:ea:d0:43:19:1f:03:93:90:0c:ff:51:3d:57:f4:41:
++ 6e:e1:cb:a0:be:eb:c9:63:cd:6d:cc:e4:f8:36:aa:68:9d:ed:
++ bd:5d:97:70:44:0d:b6:0e:35:dc:e1:0c:5d:bb:a0:51:94:cb:
++ 7e:16:eb:11:2f:a3:92:45:c8:4c:71:d9:bc:c9:99:52:57:46:
++ 2f:50:cf:bd:35:69:f4:3d:15:ce:06:a5:2c:0f:3e:f6:81:ba:
++ 94:bb:c3:bb:bf:65:78:d2:86:79:ff:49:3b:1a:83:0c:f0:de:
++ 78:ec:c8:f2:4d:4c:1a:de:82:29:f8:c1:5a:da:ed:ee:e6:27:
++ 5e:e8:45:d0:9d:1c:51:a8:68:ab:44:e3:d0:8b:6a:e3:f8:3b:
++ bb:dc:4d:d7:64:f2:51:be:e6:aa:ab:5a:e9:31:ee:06:bc:73:
++ bf:13:62:0a:9f:c7:b9:97
+ -----BEGIN CERTIFICATE-----
+ MIIFWTCCA0GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBOMQswCQYDVQQGEwJOTzEd
+ MBsGA1UECgwUQnV5cGFzcyBBUy05ODMxNjMzMjcxIDAeBgNVBAMMF0J1eXBhc3Mg
+@@ -1577,44 +964,518 @@ u79leNKGef9JOxqDDPDeeOzI8k1MGt6CKfjBWtrt7uYnXuhF0J0cUahoq0Tj0Itq
+ 4/g7u9xN12TyUb7mqqta6THuBrxzvxNiCp/HuZc=
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=T-TeleSec GlobalRoot Class 3 O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center
+-# Subject: CN=T-TeleSec GlobalRoot Class 3 O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center
+-# Label: "T-TeleSec GlobalRoot Class 3"
+-# Serial: 1
+-# MD5 Fingerprint: ca:fb:40:a8:4e:39:92:8a:1d:fe:8e:2f:c4:27:ea:ef
+-# SHA1 Fingerprint: 55:a6:72:3e:cb:f2:ec:cd:c3:23:74:70:19:9d:2a:be:11:e3:81:d1
+-# SHA256 Fingerprint: fd:73:da:d3:1c:64:4f:f1:b4:3b:ef:0c:cd:da:96:71:0b:9c:d9:87:5e:ca:7e:31:70:7a:f3:e9:6d:52:2b:bd
++# 657cfe2fa73faa38462571f332a2363a46fce7020951710702cdfbb6eeda3305
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 11:00:34:b6:4e:c6:36:2d:36
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = RO, O = CERTSIGN SA, OU = certSIGN ROOT CA G2
++ Validity
++ Not Before: Feb 6 09:27:35 2017 GMT
++ Not After : Feb 6 09:27:35 2042 GMT
++ Subject: C = RO, O = CERTSIGN SA, OU = certSIGN ROOT CA G2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:c0:c5:75:19:91:7d:44:74:74:87:fe:0e:3b:96:
++ dc:d8:01:16:cc:ee:63:91:e7:0b:6f:ce:3b:0a:69:
++ 1a:7c:c2:e3:af:82:8e:86:d7:5e:8f:57:eb:d3:21:
++ 59:fd:39:37:42:30:be:50:ea:b6:0f:a9:88:d8:2e:
++ 2d:69:21:e7:d1:37:18:4e:7d:91:d5:16:5f:6b:5b:
++ 00:c2:39:43:0d:36:85:52:b9:53:65:0f:1d:42:e5:
++ 8f:cf:05:d3:ee:dc:0c:1a:d9:b8:8b:78:22:67:e4:
++ 69:b0:68:c5:3c:e4:6c:5a:46:e7:cd:c7:fa:ef:c4:
++ ec:4b:bd:6a:a4:ac:fd:cc:28:51:ef:92:b4:29:ab:
++ ab:35:9a:4c:e4:c4:08:c6:26:cc:f8:69:9f:e4:9c:
++ f0:29:d3:5c:f9:c6:16:25:9e:23:c3:20:c1:3d:0f:
++ 3f:38:40:b0:fe:82:44:38:aa:5a:1a:8a:6b:63:58:
++ 38:b4:15:d3:b6:11:69:7b:1e:54:ee:8c:1a:22:ac:
++ 72:97:3f:23:59:9b:c9:22:84:c1:07:4f:cc:7f:e2:
++ 57:ca:12:70:bb:a6:65:f3:69:75:63:bd:95:fb:1b:
++ 97:cd:e4:a8:af:f6:d1:4e:a8:d9:8a:71:24:cd:36:
++ 3d:bc:96:c4:f1:6c:a9:ae:e5:cf:0d:6e:28:0d:b0:
++ 0e:b5:ca:51:7b:78:14:c3:20:2f:7f:fb:14:55:e1:
++ 11:99:fd:d5:0a:a1:9e:02:e3:62:5f:eb:35:4b:2c:
++ b8:72:e8:3e:3d:4f:ac:2c:bb:2e:86:e2:a3:76:8f:
++ e5:93:2a:cf:a5:ab:c8:5c:8d:4b:06:ff:12:46:ac:
++ 78:cb:14:07:35:e0:a9:df:8b:e9:af:15:4f:16:89:
++ 5b:bd:f6:8d:c6:59:ae:88:85:0e:c1:89:eb:1f:67:
++ c5:45:8e:ff:6d:37:36:2b:78:66:83:91:51:2b:3d:
++ ff:51:77:76:62:a1:ec:67:3e:3e:81:83:e0:56:a9:
++ 50:1f:1f:7a:99:ab:63:bf:84:17:77:f1:0d:3b:df:
++ f7:9c:61:b3:35:98:8a:3a:b2:ec:3c:1a:37:3f:7e:
++ 8f:92:cf:d9:12:14:64:da:10:02:15:41:ff:4f:c4:
++ eb:1c:a3:c9:fa:99:f7:46:e9:e1:18:d9:b1:b8:32:
++ 2d:cb:14:0c:50:d8:83:65:83:ee:b9:5c:cf:cb:05:
++ 5a:4c:fa:19:97:6b:d6:5d:13:d3:c2:5c:54:bc:32:
++ 73:a0:78:f5:f1:6d:1e:cb:9f:a5:a6:9f:22:dc:d1:
++ 51:9e:82:79:64:60:29:13:3e:a3:fd:4f:72:6a:ab:
++ e2:d4:e5:b8:24:55:2c:44:4b:8a:88:44:9c:ca:84:
++ d3:2a:3b
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ 82:21:2D:66:C6:D7:A0:E0:15:EB:CE:4C:09:77:C4:60:9E:54:6E:03
++ Signature Algorithm: sha256WithRSAEncryption
++ 60:de:1a:b8:e7:f2:60:82:d5:03:33:81:cb:06:8a:f1:22:49:
++ e9:e8:ea:91:7f:c6:33:5e:68:19:03:86:3b:43:01:cf:07:70:
++ e4:08:1e:65:85:91:e6:11:22:b7:f5:02:23:8e:ae:b9:1e:7d:
++ 1f:7e:6c:e6:bd:25:d5:95:1a:f2:05:a6:af:85:02:6f:ae:f8:
++ d6:31:ff:25:c9:4a:c8:c7:8a:a9:d9:9f:4b:49:9b:11:57:99:
++ 92:43:11:de:b6:33:a4:cc:d7:8d:64:7d:d4:cd:3c:28:2c:b4:
++ 9a:96:ea:4d:f5:c4:44:c4:25:aa:20:80:d8:29:55:f7:e0:41:
++ fc:06:26:ff:b9:36:f5:43:14:03:66:78:e1:11:b1:da:20:5f:
++ 46:00:78:00:21:a5:1e:00:28:61:78:6f:a8:01:01:8f:9d:34:
++ 9a:ff:f4:38:90:fb:b8:d1:b3:72:06:c9:71:e6:81:c5:79:ed:
++ 0b:a6:79:f2:13:0b:9c:f7:5d:0e:7b:24:93:b4:48:db:86:5f:
++ de:50:86:78:e7:40:e6:31:a8:90:76:70:61:af:9c:37:2c:11:
++ b5:82:b7:aa:ae:24:34:5b:72:0c:69:0d:cd:59:9f:f6:71:af:
++ 9c:0b:d1:0a:38:f9:06:22:83:53:25:0c:fc:51:c4:e6:be:e2:
++ 39:95:0b:24:ad:af:d1:95:e4:96:d7:74:64:6b:71:4e:02:3c:
++ aa:85:f3:20:a3:43:39:76:5b:6c:50:fe:9a:9c:14:1e:65:14:
++ 8a:15:bd:a3:82:45:5a:49:56:6a:d2:9c:b1:63:32:e5:61:e0:
++ 53:22:0e:a7:0a:49:ea:cb:7e:1f:a8:e2:62:80:f6:10:45:52:
++ 98:06:18:de:a5:cd:2f:7f:aa:d4:e9:3e:08:72:ec:23:03:02:
++ 3c:a6:aa:d8:bc:67:74:3d:14:17:fb:54:4b:17:e3:d3:79:3d:
++ 6d:6b:49:c9:28:0e:2e:74:50:bf:0c:d9:46:3a:10:86:c9:a7:
++ 3f:e9:a0:ec:7f:eb:a5:77:58:69:71:e6:83:0a:37:f2:86:49:
++ 6a:be:79:08:90:f6:02:16:64:3e:e5:da:4c:7e:0c:34:c9:f9:
++ 5f:b6:b3:28:51:a7:a7:2b:aa:49:fa:8d:65:29:4e:e3:6b:13:
++ a7:94:a3:2d:51:6d:78:0c:44:cb:df:de:08:6f:ce:a3:64:ab:
++ d3:95:84:d4:b9:52:54:72:7b:96:25:cc:bc:69:e3:48:6e:0d:
++ d0:c7:9d:27:9a:aa:f8:13:92:dd:1e:df:63:9f:35:a9:16:36:
++ ec:8c:b8:83:f4:3d:89:8f:cd:b4:17:5e:d7:b3:17:41:10:5d:
++ 27:73:60:85:57:49:22:07
+ -----BEGIN CERTIFICATE-----
+-MIIDwzCCAqugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBgjELMAkGA1UEBhMCREUx
+-KzApBgNVBAoMIlQtU3lzdGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAd
+-BgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBDZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNl
+-YyBHbG9iYWxSb290IENsYXNzIDMwHhcNMDgxMDAxMTAyOTU2WhcNMzMxMDAxMjM1
+-OTU5WjCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoMIlQtU3lzdGVtcyBFbnRlcnBy
+-aXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBDZW50
+-ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDMwggEiMA0G
+-CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9dZPwYiJvJK7genasfb3ZJNW4t/zN
+-8ELg63iIVl6bmlQdTQyK9tPPcPRStdiTBONGhnFBSivwKixVA9ZIw+A5OO3yXDw/
+-RLyTPWGrTs0NvvAgJ1gORH8EGoel15YUNpDQSXuhdfsaa3Ox+M6pCSzyU9XDFES4
+-hqX2iys52qMzVNn6chr3IhUciJFrf2blw2qAsCTz34ZFiP0Zf3WHHx+xGwpzJFu5
+-ZeAsVMhg02YXP+HMVDNzkQI6pn97djmiH5a2OK61yJN0HZ65tOVgnS9W0eDrXltM
+-EnAMbEQgqxHY9Bn20pxSN+f6tsIxO0rUFJmtxxr1XV/6B7h8DR/Wgx6zAgMBAAGj
+-QjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS1
+-A/d2O2GCahKqGFPrAyGUv/7OyjANBgkqhkiG9w0BAQsFAAOCAQEAVj3vlNW92nOy
+-WL6ukK2YJ5f+AbGwUgC4TeQbIXQbfsDuXmkqJa9c1h3a0nnJ85cp4IaH3gRZD/FZ
+-1GSFS5mvJQQeyUapl96Cshtwn5z2r3Ex3XsFpSzTucpH9sry9uetuUg/vBa3wW30
+-6gmv7PO15wWeph6KU1HWk4HMdJP2udqmJQV0eVp+QD6CSyYRMG7hP0HHRwA11fXT
+-91Q+gT3aSWqas+8QPebrb9HIIkfLzM8BMZLZGOMivgkeGj5asuRrDFR6fUNOuIml
+-e9eiPZaGzPImNC1qkp2aGtAw4l1OBLBfiyB+d8E9lYLRRpo7PHi4b6HQDWSieB4p
+-TpPDpFQUWw==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+ -----END CERTIFICATE-----
+
+-# Issuer: CN=D-TRUST Root Class 3 CA 2 2009 O=D-Trust GmbH
+-# Subject: CN=D-TRUST Root Class 3 CA 2 2009 O=D-Trust GmbH
+-# Label: "D-TRUST Root Class 3 CA 2 2009"
+-# Serial: 623603
+-# MD5 Fingerprint: cd:e0:25:69:8d:47:ac:9c:89:35:90:f7:fd:51:3d:2f
+-# SHA1 Fingerprint: 58:e8:ab:b0:36:15:33:fb:80:f7:9b:1b:6d:29:d3:ff:8d:5f:00:f0
+-# SHA256 Fingerprint: 49:e7:a4:42:ac:f0:ea:62:87:05:00:54:b5:25:64:b6:50:e4:f4:9e:42:e3:48:d6:aa:38:e0:39:e9:57:b1:c1
++# eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 35210227249154 (0x200605167002)
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C = RO, O = certSIGN, OU = certSIGN ROOT CA
++ Validity
++ Not Before: Jul 4 17:20:04 2006 GMT
++ Not After : Jul 4 17:20:04 2031 GMT
++ Subject: C = RO, O = certSIGN, OU = certSIGN ROOT CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:b7:33:b9:7e:c8:25:4a:8e:b5:db:b4:28:1b:aa:
++ 57:90:e8:d1:22:d3:64:ba:d3:93:e8:d4:ac:86:61:
++ 40:6a:60:57:68:54:84:4d:bc:6a:54:02:05:ff:df:
++ 9b:9a:2a:ae:5d:07:8f:4a:c3:28:7f:ef:fb:2b:fa:
++ 79:f1:c7:ad:f0:10:53:24:90:8b:66:c9:a8:88:ab:
++ af:5a:a3:00:e9:be:ba:46:ee:5b:73:7b:2c:17:82:
++ 81:5e:62:2c:a1:02:65:b3:bd:c5:2b:00:7e:c4:fc:
++ 03:33:57:0d:ed:e2:fa:ce:5d:45:d6:38:cd:35:b6:
++ b2:c1:d0:9c:81:4a:aa:e4:b2:01:5c:1d:8f:5f:99:
++ c4:b1:ad:db:88:21:eb:90:08:82:80:f3:30:a3:43:
++ e6:90:82:ae:55:28:49:ed:5b:d7:a9:10:38:0e:fe:
++ 8f:4c:5b:9b:46:ea:41:f5:b0:08:74:c3:d0:88:33:
++ b6:7c:d7:74:df:dc:84:d1:43:0e:75:39:a1:25:40:
++ 28:ea:78:cb:0e:2c:2e:39:9d:8c:8b:6e:16:1c:2f:
++ 26:82:10:e2:e3:65:94:0a:04:c0:5e:f7:5d:5b:f8:
++ 10:e2:d0:ba:7a:4b:fb:de:37:00:00:1a:5b:28:e3:
++ d2:9c:73:3e:32:87:98:a1:c9:51:2f:d7:de:ac:33:
++ b3:4f
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Non Repudiation, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ E0:8C:9B:DB:25:49:B3:F1:7C:86:D6:B2:42:87:0B:D0:6B:A0:D9:E4
++ Signature Algorithm: sha1WithRSAEncryption
++ 3e:d2:1c:89:2e:35:fc:f8:75:dd:e6:7f:65:88:f4:72:4c:c9:
++ 2c:d7:32:4e:f3:dd:19:79:47:bd:8e:3b:5b:93:0f:50:49:24:
++ 13:6b:14:06:72:ef:09:d3:a1:a1:e3:40:84:c9:e7:18:32:74:
++ 3c:48:6e:0f:9f:4b:d4:f7:1e:d3:93:86:64:54:97:63:72:50:
++ d5:55:cf:fa:20:93:02:a2:9b:c3:23:93:4e:16:55:76:a0:70:
++ 79:6d:cd:21:1f:cf:2f:2d:bc:19:e3:88:31:f8:59:1a:81:09:
++ c8:97:a6:74:c7:60:c4:5b:cc:57:8e:b2:75:fd:1b:02:09:db:
++ 59:6f:72:93:69:f7:31:41:d6:88:38:bf:87:b2:bd:16:79:f9:
++ aa:e4:be:88:25:dd:61:27:23:1c:b5:31:07:04:36:b4:1a:90:
++ bd:a0:74:71:50:89:6d:bc:14:e3:0f:86:ae:f1:ab:3e:c7:a0:
++ 09:cc:a3:48:d1:e0:db:64:e7:92:b5:cf:af:72:43:70:8b:f9:
++ c3:84:3c:13:aa:7e:92:9b:57:53:93:fa:70:c2:91:0e:31:f9:
++ 9b:67:5d:e9:96:38:5e:5f:b3:73:4e:88:15:67:de:9e:76:10:
++ 62:20:be:55:69:95:43:00:39:4d:f6:ee:b0:5a:4e:49:44:54:
++ 58:5f:42:83
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 5cc3d78e4e1d5e45547a04e6873e64f90cf9536d1ccc2ef800f355c4c5fd70fd
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 407555286 (0x184accd6)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = CN, O = China Financial Certification Authority, CN = CFCA EV ROOT
++ Validity
++ Not Before: Aug 8 03:07:01 2012 GMT
++ Not After : Dec 31 03:07:01 2029 GMT
++ Subject: C = CN, O = China Financial Certification Authority, CN = CFCA EV ROOT
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:d7:5d:6b:cd:10:3f:1f:05:59:d5:05:4d:37:b1:
++ 0e:ec:98:2b:8e:15:1d:fa:93:4b:17:82:21:71:10:
++ 52:d7:51:64:70:16:c2:55:69:4d:8e:15:6d:9f:bf:
++ 0c:1b:c2:e0:a3:67:d6:0c:ac:cf:22:ae:af:77:54:
++ 2a:4b:4c:8a:53:52:7a:c3:ee:2e:de:b3:71:25:c1:
++ e9:5d:3d:ee:a1:2f:a3:f7:2a:3c:c9:23:1d:6a:ab:
++ 1d:a1:a7:f1:f3:ec:a0:d5:44:cf:15:cf:72:2f:1d:
++ 63:97:e8:99:f9:fd:93:a4:54:80:4c:52:d4:52:ab:
++ 2e:49:df:90:cd:b8:5f:be:3f:de:a1:ca:4d:20:d4:
++ 25:e8:84:29:53:b7:b1:88:1f:ff:fa:da:90:9f:0a:
++ a9:2d:41:3f:b1:f1:18:29:ee:16:59:2c:34:49:1a:
++ a8:06:d7:a8:88:d2:03:72:7a:32:e2:ea:68:4d:6e:
++ 2c:96:65:7b:ca:59:fa:f2:e2:dd:ee:30:2c:fb:cc:
++ 46:ac:c4:63:eb:6f:7f:36:2b:34:73:12:94:7f:df:
++ cc:26:9e:f1:72:5d:50:65:59:8f:69:b3:87:5e:32:
++ 6f:c3:18:8a:b5:95:8f:b0:7a:37:de:5a:45:3b:c7:
++ 36:e1:ef:67:d1:39:d3:97:5b:73:62:19:48:2d:87:
++ 1c:06:fb:74:98:20:49:73:f0:05:d2:1b:b1:a0:a3:
++ b7:1b:70:d3:88:69:b9:5a:d6:38:f4:62:dc:25:8b:
++ 78:bf:f8:e8:7e:b8:5c:c9:95:4f:5f:a7:2d:b9:20:
++ 6b:cf:6b:dd:f5:0d:f4:82:b7:f4:b2:66:2e:10:28:
++ f6:97:5a:7b:96:16:8f:01:19:2d:6c:6e:7f:39:58:
++ 06:64:83:01:83:83:c3:4d:92:dd:32:c6:87:a4:37:
++ e9:16:ce:aa:2d:68:af:0a:81:65:3a:70:c1:9b:ad:
++ 4d:6d:54:ca:2a:2d:4b:85:1b:b3:80:e6:70:45:0d:
++ 6b:5e:35:f0:7f:3b:b8:9c:e4:04:70:89:12:25:93:
++ da:0a:99:22:60:6a:63:60:4e:76:06:98:4e:bd:83:
++ ad:1d:58:8a:25:85:d2:c7:65:1e:2d:8e:c6:df:b6:
++ c6:e1:7f:8a:04:21:15:29:74:f0:3e:9c:90:9d:0c:
++ 2e:f1:8a:3e:5a:aa:0c:09:1e:c7:d5:3c:a3:ed:97:
++ c3:1e:34:fa:38:f9:08:0e:e3:c0:5d:2b:83:d1:56:
++ 6a:c9:b6:a8:54:53:2e:78:32:67:3d:82:7f:74:d0:
++ fb:e1:b6:05:60:b9:70:db:8e:0b:f9:13:58:6f:71:
++ 60:10:52:10:b9:c1:41:09:ef:72:1f:67:31:78:ff:
++ 96:05:8d
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Authority Key Identifier:
++ keyid:E3:FE:2D:FD:28:D0:0B:B5:BA:B6:A2:C4:BF:06:AA:05:8C:93:FB:2F
++
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ E3:FE:2D:FD:28:D0:0B:B5:BA:B6:A2:C4:BF:06:AA:05:8C:93:FB:2F
++ Signature Algorithm: sha256WithRSAEncryption
++ 25:c6:ba:6b:eb:87:cb:de:82:39:96:3d:f0:44:a7:6b:84:73:
++ 03:de:9d:2b:4f:ba:20:7f:bc:78:b2:cf:97:b0:1b:9c:f3:d7:
++ 79:2e:f5:48:b6:d2:fb:17:88:e6:d3:7a:3f:ed:53:13:d0:e2:
++ 2f:6a:79:cb:00:23:28:e6:1e:37:57:35:89:84:c2:76:4f:34:
++ 36:ad:67:c3:ce:41:06:88:c5:f7:ee:d8:1a:b8:d6:0b:7f:50:
++ ff:93:aa:17:4b:8c:ec:ed:52:60:b2:a4:06:ea:4e:eb:f4:6b:
++ 19:fd:eb:f5:1a:e0:25:2a:9a:dc:c7:41:36:f7:c8:74:05:84:
++ 39:95:39:d6:0b:3b:a4:27:fa:08:d8:5c:1e:f8:04:60:52:11:
++ 28:28:03:ff:ef:53:66:00:a5:4a:34:16:66:7c:fd:09:a4:ae:
++ 9e:67:1a:6f:41:0b:6b:06:13:9b:8f:86:71:05:b4:2f:8d:89:
++ 66:33:29:76:54:9a:11:f8:27:fa:b2:3f:91:e0:ce:0d:1b:f3:
++ 30:1a:ad:bf:22:5d:1b:d3:bf:25:05:4d:e1:92:1a:7f:99:9f:
++ 3c:44:93:ca:d4:40:49:6c:80:87:d7:04:3a:c3:32:52:35:0e:
++ 56:f8:a5:dd:7d:c4:8b:0d:11:1f:53:cb:1e:b2:17:b6:68:77:
++ 5a:e0:d4:cb:c8:07:ae:f5:3a:2e:8e:37:b7:d0:01:4b:43:29:
++ 77:8c:39:97:8f:82:5a:f8:51:e5:89:a0:18:e7:68:7f:5d:0a:
++ 2e:fb:a3:47:0e:3d:a6:23:7a:c6:01:c7:8f:c8:5e:bf:6d:80:
++ 56:be:8a:24:ba:33:ea:9f:e1:32:11:9e:f1:d2:4f:80:f6:1b:
++ 40:af:38:9e:11:50:79:73:12:12:cd:e6:6c:9d:2c:88:72:3c:
++ 30:81:06:91:22:ea:59:ad:da:19:2e:22:c2:8d:b9:8c:87:e0:
++ 66:bc:73:23:5f:21:64:63:80:48:f5:a0:3c:18:3d:94:c8:48:
++ 41:1d:40:ba:5e:fe:fe:56:39:a1:c8:cf:5e:9e:19:64:46:10:
++ da:17:91:b7:05:80:ac:8b:99:92:7d:e7:a2:d8:07:0b:36:27:
++ e7:48:79:60:8a:c3:d7:13:5c:f8:72:40:df:4a:cb:cf:99:00:
++ 0a:00:0b:11:95:da:56:45:03:88:0a:9f:67:d0:d5:79:b1:a8:
++ 8d:40:6d:0d:c2:7a:40:fa:f3:5f:64:47:92:cb:53:b9:bb:59:
++ ce:4f:fd:d0:15:53:01:d8:df:eb:d9:e6:76:ef:d0:23:bb:3b:
++ a9:79:b3:d5:02:29:cd:89:a3:96:0f:4a:35:e7:4e:42:c0:75:
++ cd:07:cf:e6:2c:eb:7b:2e
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 15:c8:bd:65:47:5c:af:b8:97:00:5e:e4:06:d2:bc:9d
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C = TW, O = "Chunghwa Telecom Co., Ltd.", OU = ePKI Root Certification Authority
++ Validity
++ Not Before: Dec 20 02:31:27 2004 GMT
++ Not After : Dec 20 02:31:27 2034 GMT
++ Subject: C = TW, O = "Chunghwa Telecom Co., Ltd.", OU = ePKI Root Certification Authority
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:e1:25:0f:ee:8d:db:88:33:75:67:cd:ad:1f:7d:
++ 3a:4e:6d:9d:d3:2f:14:f3:63:74:cb:01:21:6a:37:
++ ea:84:50:07:4b:26:5b:09:43:6c:21:9e:6a:c8:d5:
++ 03:f5:60:69:8f:cc:f0:22:e4:1f:e7:f7:6a:22:31:
++ b7:2c:15:f2:e0:fe:00:6a:43:ff:87:65:c6:b5:1a:
++ c1:a7:4c:6d:22:70:21:8a:31:f2:97:74:89:09:12:
++ 26:1c:9e:ca:d9:12:a2:95:3c:da:e9:67:bf:08:a0:
++ 64:e3:d6:42:b7:45:ef:97:f4:f6:f5:d7:b5:4a:15:
++ 02:58:7d:98:58:4b:60:bc:cd:d7:0d:9a:13:33:53:
++ d1:61:f9:7a:d5:d7:78:b3:9a:33:f7:00:86:ce:1d:
++ 4d:94:38:af:a8:ec:78:51:70:8a:5c:10:83:51:21:
++ f7:11:3d:34:86:5e:e5:48:cd:97:81:82:35:4c:19:
++ ec:65:f6:6b:c5:05:a1:ee:47:13:d6:b3:21:27:94:
++ 10:0a:d9:24:3b:ba:be:44:13:46:30:3f:97:3c:d8:
++ d7:d7:6a:ee:3b:38:e3:2b:d4:97:0e:b9:1b:e7:07:
++ 49:7f:37:2a:f9:77:78:cf:54:ed:5b:46:9d:a3:80:
++ 0e:91:43:c1:d6:5b:5f:14:ba:9f:a6:8d:24:47:40:
++ 59:bf:72:38:b2:36:6c:37:ff:99:d1:5d:0e:59:0a:
++ ab:69:f7:c0:b2:04:45:7a:54:00:ae:be:53:f6:b5:
++ e7:e1:f8:3c:a3:31:d2:a9:fe:21:52:64:c5:a6:67:
++ f0:75:07:06:94:14:81:55:c6:27:e4:01:8f:17:c1:
++ 6a:71:d7:be:4b:fb:94:58:7d:7e:11:33:b1:42:f7:
++ 62:6c:18:d6:cf:09:68:3e:7f:6c:f6:1e:8f:62:ad:
++ a5:63:db:09:a7:1f:22:42:41:1e:6f:99:8a:3e:d7:
++ f9:3f:40:7a:79:b0:a5:01:92:d2:9d:3d:08:15:a5:
++ 10:01:2d:b3:32:76:a8:95:0d:b3:7a:9a:fb:07:10:
++ 78:11:6f:e1:8f:c7:ba:0f:25:1a:74:2a:e5:1c:98:
++ 41:99:df:21:87:e8:95:06:6a:0a:b3:6a:47:76:65:
++ f6:3a:cf:8f:62:17:19:7b:0a:28:cd:1a:d2:83:1e:
++ 21:c7:2c:bf:be:ff:61:68:b7:67:1b:bb:78:4d:8d:
++ ce:67:e5:e4:c1:8e:b7:23:66:e2:9d:90:75:34:98:
++ a9:36:2b:8a:9a:94:b9:9d:ec:cc:8a:b1:f8:25:89:
++ 5c:5a:b6:2f:8c:1f:6d:79:24:a7:52:68:c3:84:35:
++ e2:66:8d:63:0e:25:4d:d5:19:b2:e6:79:37:a7:22:
++ 9d:54:31
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 1E:0C:F7:B6:67:F2:E1:92:26:09:45:C0:55:39:2E:77:3F:42:4A:A2
++ X509v3 Basic Constraints:
++ CA:TRUE
++ setCext-hashedRoot:
++ 0/0-...0...+......0...g*.....E...
++V|.[x....S.....
++ Signature Algorithm: sha1WithRSAEncryption
++ 09:b3:83:53:59:01:3e:95:49:b9:f1:81:ba:f9:76:20:23:b5:
++ 27:60:74:d4:6a:99:34:5e:6c:00:53:d9:9f:f2:a6:b1:24:07:
++ 44:6a:2a:c6:a5:8e:78:12:e8:47:d9:58:1b:13:2a:5e:79:9b:
++ 9f:0a:2a:67:a6:25:3f:06:69:56:73:c3:8a:66:48:fb:29:81:
++ 57:74:06:ca:9c:ea:28:e8:38:67:26:2b:f1:d5:b5:3f:65:93:
++ f8:36:5d:8e:8d:8d:40:20:87:19:ea:ef:27:c0:3d:b4:39:0f:
++ 25:7b:68:50:74:55:9c:0c:59:7d:5a:3d:41:94:25:52:08:e0:
++ 47:2c:15:31:19:d5:bf:07:55:c6:bb:12:b5:97:f4:5f:83:85:
++ ba:71:c1:d9:6c:81:11:76:0a:0a:b0:bf:82:97:f7:ea:3d:fa:
++ fa:ec:2d:a9:28:94:3b:56:dd:d2:51:2e:ae:c0:bd:08:15:8c:
++ 77:52:34:96:d6:9b:ac:d3:1d:8e:61:0f:35:7b:9b:ae:39:69:
++ 0b:62:60:40:20:36:8f:af:fb:36:ee:2d:08:4a:1d:b8:bf:9b:
++ 5c:f8:ea:a5:1b:a0:73:a6:d8:f8:6e:e0:33:04:5f:68:aa:27:
++ 87:ed:d9:c1:90:9c:ed:bd:e3:6a:35:af:63:df:ab:18:d9:ba:
++ e6:e9:4a:ea:50:8a:0f:61:93:1e:e2:2d:19:e2:30:94:35:92:
++ 5d:0e:b6:07:af:19:80:8f:47:90:51:4b:2e:4d:dd:85:e2:d2:
++ 0a:52:0a:17:9a:fc:1a:b0:50:02:e5:01:a3:63:37:21:4c:44:
++ c4:9b:51:99:11:0e:73:9c:06:8f:54:2e:a7:28:5e:44:39:87:
++ 56:2d:37:bd:85:44:94:e1:0c:4b:2c:9c:c3:92:85:34:61:cb:
++ 0f:b8:9b:4a:43:52:fe:34:3a:7d:b8:e9:29:dc:76:a9:c8:30:
++ f8:14:71:80:c6:1e:36:48:74:22:41:5c:87:82:e8:18:71:8b:
++ 41:89:44:e7:7e:58:5b:a8:b8:8d:13:e9:a7:6c:c3:47:ed:b3:
++ 1a:9d:62:ae:8d:82:ea:94:9e:dd:59:10:c3:ad:dd:e2:4d:e3:
++ 31:d5:c7:ec:e8:f2:b0:fe:92:1e:16:0a:1a:fc:d9:f3:f8:27:
++ b6:c9:be:1d:b4:6c:64:90:7f:f4:e4:c4:5b:d7:37:ae:42:0e:
++ dd:a4:1a:6f:7c:88:54:c5:16:6e:e1:7a:68:2e:f8:3a:bf:0d:
++ a4:3c:89:3b:78:a7:4e:63:83:04:21:08:67:8d:f2:82:49:d0:
++ 5b:fd:b1:cd:0f:83:84:d4:3e:20:85:f7:4a:3d:2b:9c:fd:2a:
++ 0a:09:4d:ea:81:f8:11:9c
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 49e7a442acf0ea6287050054b52564b650e4f49e42e348d6aa38e039e957b1c1
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 623603 (0x983f3)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = DE, O = D-Trust GmbH, CN = D-TRUST Root Class 3 CA 2 2009
++ Validity
++ Not Before: Nov 5 08:35:58 2009 GMT
++ Not After : Nov 5 08:35:58 2029 GMT
++ Subject: C = DE, O = D-Trust GmbH, CN = D-TRUST Root Class 3 CA 2 2009
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:d3:b2:4a:cf:7a:47:ef:75:9b:23:fa:3a:2f:d6:
++ 50:45:89:35:3a:c6:6b:db:fe:db:00:68:a8:e0:03:
++ 11:1d:37:50:08:9f:4d:4a:68:94:35:b3:53:d1:94:
++ 63:a7:20:56:af:de:51:78:ec:2a:3d:f3:48:48:50:
++ 3e:0a:df:46:55:8b:27:6d:c3:10:4d:0d:91:52:43:
++ d8:87:e0:5d:4e:36:b5:21:ca:5f:39:40:04:5f:5b:
++ 7e:cc:a3:c6:2b:a9:40:1e:d9:36:84:d6:48:f3:92:
++ 1e:34:46:20:24:c1:a4:51:8e:4a:1a:ef:50:3f:69:
++ 5d:19:7f:45:c3:c7:01:8f:51:c9:23:e8:72:ae:b4:
++ bc:56:09:7f:12:cb:1c:b1:af:29:90:0a:c9:55:cc:
++ 0f:d3:b4:1a:ed:47:35:5a:4a:ed:9c:73:04:21:d0:
++ aa:bd:0c:13:b5:00:ca:26:6c:c4:6b:0c:94:5a:95:
++ 94:da:50:9a:f1:ff:a5:2b:66:31:a4:c9:38:a0:df:
++ 1d:1f:b8:09:2e:f3:a7:e8:67:52:ab:95:1f:e0:46:
++ 3e:d8:a4:c3:ca:5a:c5:31:80:e8:48:9a:9f:94:69:
++ fe:19:dd:d8:73:7c:81:ca:96:de:8e:ed:b3:32:05:
++ 65:84:34:e6:e6:fd:57:10:b5:5f:76:bf:2f:b0:10:
++ 0d:c5
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ FD:DA:14:C4:9F:30:DE:21:BD:1E:42:39:FC:AB:63:23:49:E0:F1:84
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 CRL Distribution Points:
++
++ Full Name:
++ URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
++
++ Full Name:
++ URI:http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl
++
++ Signature Algorithm: sha256WithRSAEncryption
++ 7f:97:db:30:c8:df:a4:9c:7d:21:7a:80:70:ce:14:12:69:88:
++ 14:95:60:44:01:ac:b2:e9:30:4f:9b:50:c2:66:d8:7e:8d:30:
++ b5:70:31:e9:e2:69:c7:f3:70:db:20:15:86:d0:0d:f0:be:ac:
++ 01:75:84:ce:7e:9f:4d:bf:b7:60:3b:9c:f3:ca:1d:e2:5e:68:
++ d8:a3:9d:97:e5:40:60:d2:36:21:fe:d0:b4:b8:17:da:74:a3:
++ 7f:d4:df:b0:98:02:ac:6f:6b:6b:2c:25:24:72:a1:65:ee:25:
++ 5a:e5:e6:32:e7:f2:df:ab:49:fa:f3:90:69:23:db:04:d9:e7:
++ 5c:58:fc:65:d4:97:be:cc:fc:2e:0a:cc:25:2a:35:04:f8:60:
++ 91:15:75:3d:41:ff:23:1f:19:c8:6c:eb:82:53:04:a6:e4:4c:
++ 22:4d:8d:8c:ba:ce:5b:73:ec:64:54:50:6d:d1:9c:55:fb:69:
++ c3:36:c3:8c:bc:3c:85:a6:6b:0a:26:0d:e0:93:98:60:ae:7e:
++ c6:24:97:8a:61:5f:91:8e:66:92:09:87:36:cd:8b:9b:2d:3e:
++ f6:51:d4:50:d4:59:28:bd:83:f2:cc:28:7b:53:86:6d:d8:26:
++ 88:70:d7:ea:91:cd:3e:b9:ca:c0:90:6e:5a:c6:5e:74:65:d7:
++ 5c:fe:a3:e2
+ -----BEGIN CERTIFICATE-----
+ MIIEMzCCAxugAwIBAgIDCYPzMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAkRF
+ MRUwEwYDVQQKDAxELVRydXN0IEdtYkgxJzAlBgNVBAMMHkQtVFJVU1QgUm9vdCBD
+@@ -1641,13 +1502,71 @@ PIWmawomDeCTmGCufsYkl4phX5GOZpIJhzbNi5stPvZR1FDUWSi9g/LMKHtThm3Y
+ Johw1+qRzT65ysCQblrGXnRl11z+o+I=
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=D-TRUST Root Class 3 CA 2 EV 2009 O=D-Trust GmbH
+-# Subject: CN=D-TRUST Root Class 3 CA 2 EV 2009 O=D-Trust GmbH
+-# Label: "D-TRUST Root Class 3 CA 2 EV 2009"
+-# Serial: 623604
+-# MD5 Fingerprint: aa:c6:43:2c:5e:2d:cd:c4:34:c0:50:4f:11:02:4f:b6
+-# SHA1 Fingerprint: 96:c9:1b:0b:95:b4:10:98:42:fa:d0:d8:22:79:fe:60:fa:b9:16:83
+-# SHA256 Fingerprint: ee:c5:49:6b:98:8c:e9:86:25:b9:34:09:2e:ec:29:08:be:d0:b0:f3:16:c2:d4:73:0c:84:ea:f1:f3:d3:48:81
++# eec5496b988ce98625b934092eec2908bed0b0f316c2d4730c84eaf1f3d34881
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 623604 (0x983f4)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = DE, O = D-Trust GmbH, CN = D-TRUST Root Class 3 CA 2 EV 2009
++ Validity
++ Not Before: Nov 5 08:50:46 2009 GMT
++ Not After : Nov 5 08:50:46 2029 GMT
++ Subject: C = DE, O = D-Trust GmbH, CN = D-TRUST Root Class 3 CA 2 EV 2009
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:99:f1:84:34:70:ba:2f:b7:30:a0:8e:bd:7c:04:
++ cf:be:62:bc:99:fd:82:97:d2:7a:0a:67:96:38:09:
++ f6:10:4e:95:22:73:99:8d:da:15:2d:e7:05:fc:19:
++ 73:22:b7:8e:98:00:bc:3c:3d:ac:a1:6c:fb:d6:79:
++ 25:4b:ad:f0:cc:64:da:88:3e:29:b8:0f:09:d3:34:
++ dd:33:f5:62:d1:e1:cd:19:e9:ee:18:4f:4c:58:ae:
++ e2:1e:d6:0c:5b:15:5a:d8:3a:b8:c4:18:64:1e:e3:
++ 33:b2:b5:89:77:4e:0c:bf:d9:94:6b:13:97:6f:12:
++ a3:fe:99:a9:04:cc:15:ec:60:68:36:ed:08:7b:b7:
++ f5:bf:93:ed:66:31:83:8c:c6:71:34:87:4e:17:ea:
++ af:8b:91:8d:1c:56:41:ae:22:37:5e:37:f2:1d:d9:
++ d1:2d:0d:2f:69:51:a7:be:66:a6:8a:3a:2a:bd:c7:
++ 1a:b1:e1:14:f0:be:3a:1d:b9:cf:5b:b1:6a:fe:b4:
++ b1:46:20:a2:fb:1e:3b:70:ef:93:98:7d:8c:73:96:
++ f2:c5:ef:85:70:ad:29:26:fc:1e:04:3e:1c:a0:d8:
++ 0f:cb:52:83:62:7c:ee:8b:53:95:90:a9:57:a2:ea:
++ 61:05:d8:f9:4d:c4:27:fa:6e:ad:ed:f9:d7:51:f7:
++ 6b:a5
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ D3:94:8A:4C:62:13:2A:19:2E:CC:AF:72:8A:7D:36:D7:9A:1C:DC:67
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 CRL Distribution Points:
++
++ Full Name:
++ URI:ldap://directory.d-trust.net/CN=D-TRUST%20Root%20Class%203%20CA%202%20EV%202009,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
++
++ Full Name:
++ URI:http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_ev_2009.crl
++
++ Signature Algorithm: sha256WithRSAEncryption
++ 34:ed:7b:5a:3c:a4:94:88:ef:1a:11:75:07:2f:b3:fe:3c:fa:
++ 1e:51:26:eb:87:f6:29:de:e0:f1:d4:c6:24:09:e9:c1:cf:55:
++ 1b:b4:30:d9:ce:1a:fe:06:51:a6:15:a4:2d:ef:b2:4b:bf:20:
++ 28:25:49:d1:a6:36:77:34:e8:64:df:52:b1:11:c7:73:7a:cd:
++ 39:9e:c2:ad:8c:71:21:f2:5a:6b:af:df:3c:4e:55:af:b2:84:
++ 65:14:89:b9:77:cb:2a:31:be:cf:a3:6d:cf:6f:48:94:32:46:
++ 6f:e7:71:8c:a0:a6:84:19:37:07:f2:03:45:09:2b:86:75:7c:
++ df:5f:69:57:00:db:6e:d8:a6:72:22:4b:50:d4:75:98:56:df:
++ b7:18:ff:43:43:50:ae:7a:44:7b:f0:79:51:d7:43:3d:a7:d3:
++ 81:d3:f0:c9:4f:b9:da:c6:97:86:d0:82:c3:e4:42:6d:fe:b0:
++ e2:64:4e:0e:26:e7:40:34:26:b5:08:89:d7:08:63:63:38:27:
++ 75:1e:33:ea:6e:a8:dd:9f:99:4f:74:4d:81:89:80:4b:dd:9a:
++ 97:29:5c:2f:be:81:41:b9:8c:ff:ea:7d:60:06:9e:cd:d7:3d:
++ d3:2e:a3:15:bc:a8:e6:26:e5:6f:c3:dc:b8:03:21:ea:9f:16:
++ f1:2c:54:b5
+ -----BEGIN CERTIFICATE-----
+ MIIEQzCCAyugAwIBAgIDCYP0MA0GCSqGSIb3DQEBCwUAMFAxCzAJBgNVBAYTAkRF
+ MRUwEwYDVQQKDAxELVRydXN0IEdtYkgxKjAoBgNVBAMMIUQtVFJVU1QgUm9vdCBD
+@@ -1674,13 +1593,1133 @@ xpeG0ILD5EJt/rDiZE4OJudANCa1CInXCGNjOCd1HjPqbqjdn5lPdE2BiYBL3ZqX
+ KVwvvoFBuYz/6n1gBp7N1z3TLqMVvKjmJuVvw9y4AyHqnxbxLFS1
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=CA Disig Root R2 O=Disig a.s.
+-# Subject: CN=CA Disig Root R2 O=Disig a.s.
+-# Label: "CA Disig Root R2"
+-# Serial: 10572350602393338211
+-# MD5 Fingerprint: 26:01:fb:d8:27:a7:17:9a:45:54:38:1a:43:01:3b:03
+-# SHA1 Fingerprint: b5:61:eb:ea:a4:de:e4:25:4b:69:1a:98:a5:57:47:c2:34:c7:d9:71
+-# SHA256 Fingerprint: e2:3d:4a:03:6d:7b:70:e9:f5:95:b1:42:20:79:d2:b9:1e:df:bb:1f:b6:51:a0:63:3e:aa:8a:9d:c5:f8:07:03
++# 91e2f5788d5810eba7ba58737de1548a8ecacd014598bc0b143e041b17052552
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 1 (0x1)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 2
++ Validity
++ Not Before: Oct 1 10:40:14 2008 GMT
++ Not After : Oct 1 23:59:59 2033 GMT
++ Subject: C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:aa:5f:da:1b:5f:e8:73:91:e5:da:5c:f4:a2:e6:
++ 47:e5:f3:68:55:60:05:1d:02:a4:b3:9b:59:f3:1e:
++ 8a:af:34:ad:fc:0d:c2:d9:48:19:ee:69:8f:c9:20:
++ fc:21:aa:07:19:ed:b0:5c:ac:65:c7:5f:ed:02:7c:
++ 7b:7c:2d:1b:d6:ba:b9:80:c2:18:82:16:84:fa:66:
++ b0:08:c6:54:23:81:e4:cd:b9:49:3f:f6:4f:6e:37:
++ 48:28:38:0f:c5:be:e7:68:70:fd:39:97:4d:d2:c7:
++ 98:91:50:aa:c4:44:b3:23:7d:39:47:e9:52:62:d6:
++ 12:93:5e:b7:31:96:42:05:fb:76:a7:1e:a3:f5:c2:
++ fc:e9:7a:c5:6c:a9:71:4f:ea:cb:78:bc:60:af:c7:
++ de:f4:d9:cb:be:7e:33:a5:6e:94:83:f0:34:fa:21:
++ ab:ea:8e:72:a0:3f:a4:de:30:5b:ef:86:4d:6a:95:
++ 5b:43:44:a8:10:15:1c:e5:01:57:c5:98:f1:e6:06:
++ 28:91:aa:20:c5:b7:53:26:51:43:b2:0b:11:95:58:
++ e1:c0:0f:76:d9:c0:8d:7c:81:f3:72:70:9e:6f:fe:
++ 1a:8e:d9:5f:35:c6:b2:6f:34:7c:be:48:4f:e2:5a:
++ 39:d7:d8:9d:78:9e:9f:86:3e:03:5e:19:8b:44:a2:
++ d5:c7
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ BF:59:20:36:00:79:A0:A0:22:6B:8C:D5:F2:61:D2:B8:2C:CB:82:4A
++ Signature Algorithm: sha256WithRSAEncryption
++ 31:03:a2:61:0b:1f:74:e8:72:36:c6:6d:f9:4d:9e:fa:22:a8:
++ e1:81:56:cf:cd:bb:9f:ea:ab:91:19:38:af:aa:7c:15:4d:f3:
++ b6:a3:8d:a5:f4:8e:f6:44:a9:a7:e8:21:95:ad:3e:00:62:16:
++ 88:f0:02:ba:fc:61:23:e6:33:9b:30:7a:6b:36:62:7b:ad:04:
++ 23:84:58:65:e2:db:2b:8a:e7:25:53:37:62:53:5f:bc:da:01:
++ 62:29:a2:a6:27:71:e6:3a:22:7e:c1:6f:1d:95:70:20:4a:07:
++ 34:df:ea:ff:15:80:e5:ba:d7:7a:d8:5b:75:7c:05:7a:29:47:
++ 7e:40:a8:31:13:77:cd:40:3b:b4:51:47:7a:2e:11:e3:47:11:
++ de:9d:66:d0:8b:d5:54:66:fa:83:55:ea:7c:c2:29:89:1b:e9:
++ 6f:b3:ce:e2:05:84:c9:2f:3e:78:85:62:6e:c9:5f:c1:78:63:
++ 74:58:c0:48:18:0c:99:39:eb:a4:cc:1a:b5:79:5a:8d:15:9c:
++ d8:14:0d:f6:7a:07:57:c7:22:83:05:2d:3c:9b:25:26:3d:18:
++ b3:a9:43:7c:c8:c8:ab:64:8f:0e:a3:bf:9c:1b:9d:30:db:da:
++ d0:19:2e:aa:3c:f1:fb:33:80:76:e4:cd:ad:19:4f:05:27:8e:
++ 13:a1:6e:c2
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# fd73dad31c644ff1b43bef0ccdda96710b9cd9875eca7e31707af3e96d522bbd
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 1 (0x1)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 3
++ Validity
++ Not Before: Oct 1 10:29:56 2008 GMT
++ Not After : Oct 1 23:59:59 2033 GMT
++ Subject: C = DE, O = T-Systems Enterprise Services GmbH, OU = T-Systems Trust Center, CN = T-TeleSec GlobalRoot Class 3
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:bd:75:93:f0:62:22:6f:24:ae:e0:7a:76:ac:7d:
++ bd:d9:24:d5:b8:b7:fc:cd:f0:42:e0:eb:78:88:56:
++ 5e:9b:9a:54:1d:4d:0c:8a:f6:d3:cf:70:f4:52:b5:
++ d8:93:04:e3:46:86:71:41:4a:2b:f0:2a:2c:55:03:
++ d6:48:c3:e0:39:38:ed:f2:5c:3c:3f:44:bc:93:3d:
++ 61:ab:4e:cd:0d:be:f0:20:27:58:0e:44:7f:04:1a:
++ 87:a5:d7:96:14:36:90:d0:49:7b:a1:75:fb:1a:6b:
++ 73:b1:f8:ce:a9:09:2c:f2:53:d5:c3:14:44:b8:86:
++ a5:f6:8b:2b:39:da:a3:33:54:d9:fa:72:1a:f7:22:
++ 15:1c:88:91:6b:7f:66:e5:c3:6a:80:b0:24:f3:df:
++ 86:45:88:fd:19:7f:75:87:1f:1f:b1:1b:0a:73:24:
++ 5b:b9:65:e0:2c:54:c8:60:d3:66:17:3f:e1:cc:54:
++ 33:73:91:02:3a:a6:7f:7b:76:39:a2:1f:96:b6:38:
++ ae:b5:c8:93:74:1d:9e:b9:b4:e5:60:9d:2f:56:d1:
++ e0:eb:5e:5b:4c:12:70:0c:6c:44:20:ab:11:d8:f4:
++ 19:f6:d2:9c:52:37:e7:fa:b6:c2:31:3b:4a:d4:14:
++ 99:ad:c7:1a:f5:5d:5f:fa:07:b8:7c:0d:1f:d6:83:
++ 1e:b3
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ B5:03:F7:76:3B:61:82:6A:12:AA:18:53:EB:03:21:94:BF:FE:CE:CA
++ Signature Algorithm: sha256WithRSAEncryption
++ 56:3d:ef:94:d5:bd:da:73:b2:58:be:ae:90:ad:98:27:97:fe:
++ 01:b1:b0:52:00:b8:4d:e4:1b:21:74:1b:7e:c0:ee:5e:69:2a:
++ 25:af:5c:d6:1d:da:d2:79:c9:f3:97:29:e0:86:87:de:04:59:
++ 0f:f1:59:d4:64:85:4b:99:af:25:04:1e:c9:46:a9:97:de:82:
++ b2:1b:70:9f:9c:f6:af:71:31:dd:7b:05:a5:2c:d3:b9:ca:47:
++ f6:ca:f2:f6:e7:ad:b9:48:3f:bc:16:b7:c1:6d:f4:ea:09:af:
++ ec:f3:b5:e7:05:9e:a6:1e:8a:53:51:d6:93:81:cc:74:93:f6:
++ b9:da:a6:25:05:74:79:5a:7e:40:3e:82:4b:26:11:30:6e:e1:
++ 3f:41:c7:47:00:35:d5:f5:d3:f7:54:3e:81:3d:da:49:6a:9a:
++ b3:ef:10:3d:e6:eb:6f:d1:c8:22:47:cb:cc:cf:01:31:92:d9:
++ 18:e3:22:be:09:1e:1a:3e:5a:b2:e4:6b:0c:54:7a:7d:43:4e:
++ b8:89:a5:7b:d7:a2:3d:96:86:cc:f2:26:34:2d:6a:92:9d:9a:
++ 1a:d0:30:e2:5d:4e:04:b0:5f:8b:20:7e:77:c1:3d:95:82:d1:
++ 46:9a:3b:3c:78:b8:6f:a1:d0:0d:64:a2:78:1e:29:4e:93:c3:
++ a4:54:14:5b
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# d48d3d23eedb50a459e55197601c27774b9d7b18c94d5a059511a10250b93168
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ ca:e9:1b:89:f1:55:03:0d:a3:e6:41:6d:c4:e3:a6:e1
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
++ Validity
++ Not Before: Oct 1 08:32:27 2013 GMT
++ Not After : Oct 1 08:32:27 2033 GMT
++ Subject: C = FR, O = Dhimyotis, OU = 0002 48146308100036, CN = Certigna Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:cd:18:39:65:1a:59:b1:ea:64:16:0e:8c:94:24:
++ 95:7c:83:d3:c5:39:26:dc:0c:ef:16:57:8d:d7:d8:
++ ac:a3:42:7f:82:ca:ed:cd:5b:db:0e:b7:2d:ed:45:
++ 08:17:b2:d9:b3:cb:d6:17:52:72:28:db:8e:4e:9e:
++ 8a:b6:0b:f9:9e:84:9a:4d:76:de:22:29:5c:d2:b3:
++ d2:06:3e:30:39:a9:74:a3:92:56:1c:a1:6f:4c:0a:
++ 20:6d:9f:23:7a:b4:c6:da:2c:e4:1d:2c:dc:b3:28:
++ d0:13:f2:4c:4e:02:49:a1:54:40:9e:e6:e5:05:a0:
++ 2d:84:c8:ff:98:6c:d0:eb:8a:1a:84:08:1e:b7:68:
++ 23:ee:23:d5:70:ce:6d:51:69:10:ee:a1:7a:c2:d1:
++ 22:31:c2:82:85:d2:f2:55:76:50:7c:25:7a:c9:84:
++ 5c:0b:ac:dd:42:4e:2b:e7:82:a2:24:89:cb:90:b2:
++ d0:ee:23:ba:66:4c:bb:62:a4:f9:53:5a:64:7b:7c:
++ 98:fa:a3:48:9e:0f:95:ae:a7:18:f4:6a:ec:2e:03:
++ 45:af:f0:74:f8:2a:cd:7a:5d:d1:be:44:26:32:29:
++ f1:f1:f5:6c:cc:7e:02:21:0b:9f:6f:a4:3f:be:9d:
++ 53:e2:cf:7d:a9:2c:7c:58:1a:97:e1:3d:37:37:18:
++ 66:28:d2:40:c5:51:8a:8c:c3:2d:ce:53:88:24:58:
++ 64:30:16:c5:aa:e0:d6:0a:a6:40:df:78:f6:f5:04:
++ 7c:69:13:84:bc:d1:d1:a7:06:cf:01:f7:68:c0:a8:
++ 57:bb:3a:61:ad:04:8c:93:e3:ad:fc:f0:db:44:6d:
++ 59:dc:49:59:ae:ac:9a:99:36:30:41:7b:76:33:22:
++ 87:a3:c2:92:86:6e:f9:70:ee:ae:87:87:95:1b:c4:
++ 7a:bd:31:f3:d4:d2:e5:99:ff:be:48:ec:75:f5:78:
++ 16:1d:a6:70:c1:7f:3c:1b:a1:92:fb:cf:c8:3c:d6:
++ c5:93:0a:8f:f5:55:3a:76:95:ce:59:98:8a:09:95:
++ 77:32:9a:83:ba:2c:04:3a:97:bd:d4:2f:be:d7:6c:
++ 9b:a2:ca:7d:6d:26:c9:55:d5:cf:c3:79:52:08:09:
++ 99:07:24:2d:64:25:6b:a6:21:69:9b:6a:dd:74:4d:
++ 6b:97:7a:41:bd:ab:17:f9:90:17:48:8f:36:f9:2d:
++ d5:c5:db:ee:aa:85:45:41:fa:cd:3a:45:b1:68:e6:
++ 36:4c:9b:90:57:ec:23:b9:87:08:c2:c4:09:f1:97:
++ 86:2a:28:4d:e2:74:c0:da:c4:8c:db:df:e2:a1:17:
++ 59:ce:24:59:74:31:da:7f:fd:30:6d:d9:dc:e1:6a:
++ e1:fc:5f
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ 18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
++ X509v3 Authority Key Identifier:
++ keyid:18:87:56:E0:6E:77:EE:24:35:3C:4E:73:9A:1F:D6:E1:E2:79:7E:2B
++
++ X509v3 Certificate Policies:
++ Policy: X509v3 Any Policy
++ CPS: https://wwww.certigna.fr/autorites/
++
++ X509v3 CRL Distribution Points:
++
++ Full Name:
++ URI:http://crl.certigna.fr/certignarootca.crl
++
++ Full Name:
++ URI:http://crl.dhimyotis.com/certignarootca.crl
++
++ Signature Algorithm: sha256WithRSAEncryption
++ 94:b8:9e:4f:f0:e3:95:08:22:e7:cd:68:41:f7:1c:55:d5:7c:
++ 00:e2:2d:3a:89:5d:68:38:2f:51:22:0b:4a:8d:cb:e9:bb:5d:
++ 3e:bb:5c:3d:b1:28:fe:e4:53:55:13:cf:a1:90:1b:02:1d:5f:
++ 66:46:09:33:28:e1:0d:24:97:70:d3:10:1f:ea:64:57:96:bb:
++ 5d:da:e7:c4:8c:4f:4c:64:46:1d:5c:87:e3:59:de:42:d1:9b:
++ a8:7e:a6:89:dd:8f:1c:c9:30:82:ed:3b:9c:cd:c0:e9:19:e0:
++ 6a:d8:02:75:37:ab:f7:34:28:28:91:f2:04:0a:4f:35:e3:60:
++ 26:01:fa:d0:11:8c:f9:11:6a:ee:af:3d:c3:50:d3:8f:5f:33:
++ 79:3c:86:a8:73:45:90:8c:20:b6:72:73:17:23:be:07:65:e5:
++ 78:92:0d:ba:01:c0:eb:8c:1c:66:bf:ac:86:77:01:94:0d:9c:
++ e6:e9:39:8d:1f:a6:51:8c:99:0c:39:77:e1:b4:9b:fa:1c:67:
++ 57:6f:6a:6a:8e:a9:2b:4c:57:79:7a:57:22:cf:cd:5f:63:46:
++ 8d:5c:59:3a:86:f8:32:47:62:a3:67:0d:18:91:dc:fb:a6:6b:
++ f5:48:61:73:23:59:8e:02:a7:bc:44:ea:f4:49:9d:f1:54:58:
++ f9:60:af:da:18:a4:2f:28:45:dc:7a:a0:88:86:5d:f3:3b:e7:
++ ff:29:35:80:fc:64:43:94:e6:e3:1c:6f:be:ad:0e:2a:63:99:
++ 2b:c9:7e:85:f6:71:e8:06:03:95:fe:de:8f:48:1c:5a:d4:92:
++ e8:2b:ee:e7:31:db:ba:04:6a:87:98:e7:c5:5f:ef:7d:a7:22:
++ f7:01:d8:4d:f9:89:d0:0e:9a:05:59:a4:9e:98:d9:6f:2b:ca:
++ 70:be:64:c2:55:a3:f4:e9:af:c3:92:29:dc:88:16:24:99:3c:
++ 8d:26:98:b6:5b:b7:cc:ce:b7:37:07:fd:26:d9:98:85:24:ff:
++ 59:23:03:9a:ed:9d:9d:a8:e4:5e:38:ce:d7:52:0d:6f:d2:3f:
++ 6d:b1:05:6b:49:ce:8a:91:46:73:f4:f6:2f:f0:a8:73:77:0e:
++ 65:ac:a1:8d:66:52:69:7e:4b:68:0c:c7:1e:37:27:83:a5:8c:
++ c7:02:e4:14:cd:49:01:b0:73:b3:fd:c6:90:3a:6f:d2:6c:ed:
++ 3b:ee:ec:91:be:a2:43:5d:8b:00:4a:66:25:44:70:de:40:0f:
++ f8:7c:15:f7:a2:ce:3c:d7:5e:13:8c:81:17:18:17:d1:bd:f1:
++ 77:10:3a:d4:65:39:c1:27:ac:57:2c:25:54:ff:a2:da:4f:8a:
++ 61:39:5e:ae:3d:4a:8c:bd
++-----BEGIN CERTIFICATE-----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=
++-----END CERTIFICATE-----
++
++# e3b6a2db2ed7ce48842f7ac53241c7b71d54144bfb40c11f3f1d0b42f5eea12d
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ fe:dc:e3:01:0f:c9:48:ff
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C = FR, O = Dhimyotis, CN = Certigna
++ Validity
++ Not Before: Jun 29 15:13:05 2007 GMT
++ Not After : Jun 29 15:13:05 2027 GMT
++ Subject: C = FR, O = Dhimyotis, CN = Certigna
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:c8:68:f1:c9:d6:d6:b3:34:75:26:82:1e:ec:b4:
++ be:ea:5c:e1:26:ed:11:47:61:e1:a2:7c:16:78:40:
++ 21:e4:60:9e:5a:c8:63:e1:c4:b1:96:92:ff:18:6d:
++ 69:23:e1:2b:62:f7:dd:e2:36:2f:91:07:b9:48:cf:
++ 0e:ec:79:b6:2c:e7:34:4b:70:08:25:a3:3c:87:1b:
++ 19:f2:81:07:0f:38:90:19:d3:11:fe:86:b4:f2:d1:
++ 5e:1e:1e:96:cd:80:6c:ce:3b:31:93:b6:f2:a0:d0:
++ a9:95:12:7d:a5:9a:cc:6b:c8:84:56:8a:33:a9:e7:
++ 22:15:53:16:f0:cc:17:ec:57:5f:e9:a2:0a:98:09:
++ de:e3:5f:9c:6f:dc:48:e3:85:0b:15:5a:a6:ba:9f:
++ ac:48:e3:09:b2:f7:f4:32:de:5e:34:be:1c:78:5d:
++ 42:5b:ce:0e:22:8f:4d:90:d7:7d:32:18:b3:0b:2c:
++ 6a:bf:8e:3f:14:11:89:20:0e:77:14:b5:3d:94:08:
++ 87:f7:25:1e:d5:b2:60:00:ec:6f:2a:28:25:6e:2a:
++ 3e:18:63:17:25:3f:3e:44:20:16:f6:26:c8:25:ae:
++ 05:4a:b4:e7:63:2c:f3:8c:16:53:7e:5c:fb:11:1a:
++ 08:c1:46:62:9f:22:b8:f1:c2:8d:69:dc:fa:3a:58:
++ 06:df
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
++ X509v3 Authority Key Identifier:
++ keyid:1A:ED:FE:41:39:90:B4:24:59:BE:01:F2:52:D5:45:F6:5A:39:DC:11
++ DirName:/C=FR/O=Dhimyotis/CN=Certigna
++ serial:FE:DC:E3:01:0F:C9:48:FF
++
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Netscape Cert Type:
++ SSL CA, S/MIME CA, Object Signing CA
++ Signature Algorithm: sha1WithRSAEncryption
++ 85:03:1e:92:71:f6:42:af:e1:a3:61:9e:eb:f3:c0:0f:f2:a5:
++ d4:da:95:e6:d6:be:68:36:3d:7e:6e:1f:4c:8a:ef:d1:0f:21:
++ 6d:5e:a5:52:63:ce:12:f8:ef:2a:da:6f:eb:37:fe:13:02:c7:
++ cb:3b:3e:22:6b:da:61:2e:7f:d4:72:3d:dd:30:e1:1e:4c:40:
++ 19:8c:0f:d7:9c:d1:83:30:7b:98:59:dc:7d:c6:b9:0c:29:4c:
++ a1:33:a2:eb:67:3a:65:84:d3:96:e2:ed:76:45:70:8f:b5:2b:
++ de:f9:23:d6:49:6e:3c:14:b5:c6:9f:35:1e:50:d0:c1:8f:6a:
++ 70:44:02:62:cb:ae:1d:68:41:a7:aa:57:e8:53:aa:07:d2:06:
++ f6:d5:14:06:0b:91:03:75:2c:6c:72:b5:61:95:9a:0d:8b:b9:
++ 0d:e7:f5:df:54:cd:de:e6:d8:d6:09:08:97:63:e5:c1:2e:b0:
++ b7:44:26:c0:26:c0:af:55:30:9e:3b:d5:36:2a:19:04:f4:5c:
++ 1e:ff:cf:2c:b7:ff:d0:fd:87:40:11:d5:11:23:bb:48:c0:21:
++ a9:a4:28:2d:fd:15:f8:b0:4e:2b:f4:30:5b:21:fc:11:91:34:
++ be:41:ef:7b:9d:97:75:ff:97:95:c0:96:58:2f:ea:bb:46:d7:
++ bb:e4:d9:2e
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 05:55:56:bc:f2:5e:a4:35:35:c3:a4:0f:d5:ab:45:72
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G3
++ Validity
++ Not Before: Aug 1 12:00:00 2013 GMT
++ Not After : Jan 15 12:00:00 2038 GMT
++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G3
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:dd:a7:d9:bb:8a:b8:0b:fb:0b:7f:21:d2:f0:be:
++ be:73:f3:33:5d:1a:bc:34:ea:de:c6:9b:bc:d0:95:
++ f6:f0:cc:d0:0b:ba:61:5b:51:46:7e:9e:2d:9f:ee:
++ 8e:63:0c:17:ec:07:70:f5:cf:84:2e:40:83:9c:e8:
++ 3f:41:6d:3b:ad:d3:a4:14:59:36:78:9d:03:43:ee:
++ 10:13:6c:72:de:ae:88:a7:a1:6b:b5:43:ce:67:dc:
++ 23:ff:03:1c:a3:e2:3e
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:65:02:31:00:ad:bc:f2:6c:3f:12:4a:d1:2d:39:c3:0a:09:
++ 97:73:f4:88:36:8c:88:27:bb:e6:88:8d:50:85:a7:63:f9:9e:
++ 32:de:66:93:0f:f1:cc:b1:09:8f:dd:6c:ab:fa:6b:7f:a0:02:
++ 30:39:66:5b:c2:64:8d:b8:9e:50:dc:a8:d5:49:a2:ed:c7:dc:
++ d1:49:7f:17:01:b8:c8:86:8f:4e:8c:88:2b:a8:9a:a9:8a:c5:
++ d1:00:bd:f8:54:e2:9a:e5:5b:7c:b3:27:17
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root CA
++ Validity
++ Not Before: Nov 10 00:00:00 2006 GMT
++ Not After : Nov 10 00:00:00 2031 GMT
++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:ad:0e:15:ce:e4:43:80:5c:b1:87:f3:b7:60:f9:
++ 71:12:a5:ae:dc:26:94:88:aa:f4:ce:f5:20:39:28:
++ 58:60:0c:f8:80:da:a9:15:95:32:61:3c:b5:b1:28:
++ 84:8a:8a:dc:9f:0a:0c:83:17:7a:8f:90:ac:8a:e7:
++ 79:53:5c:31:84:2a:f6:0f:98:32:36:76:cc:de:dd:
++ 3c:a8:a2:ef:6a:fb:21:f2:52:61:df:9f:20:d7:1f:
++ e2:b1:d9:fe:18:64:d2:12:5b:5f:f9:58:18:35:bc:
++ 47:cd:a1:36:f9:6b:7f:d4:b0:38:3e:c1:1b:c3:8c:
++ 33:d9:d8:2f:18:fe:28:0f:b3:a7:83:d6:c3:6e:44:
++ c0:61:35:96:16:fe:59:9c:8b:76:6d:d7:f1:a2:4b:
++ 0d:2b:ff:0b:72:da:9e:60:d0:8e:90:35:c6:78:55:
++ 87:20:a1:cf:e5:6d:0a:c8:49:7c:31:98:33:6c:22:
++ e9:87:d0:32:5a:a2:ba:13:82:11:ed:39:17:9d:99:
++ 3a:72:a1:e6:fa:a4:d9:d5:17:31:75:ae:85:7d:22:
++ ae:3f:01:46:86:f6:28:79:c8:b1:da:e4:57:17:c4:
++ 7e:1c:0e:b0:b4:92:a6:56:b3:bd:b2:97:ed:aa:a7:
++ f0:b7:c5:a8:3f:95:16:d0:ff:a1:96:eb:08:5f:18:
++ 77:4f
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F
++ X509v3 Authority Key Identifier:
++ keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F
++
++ Signature Algorithm: sha1WithRSAEncryption
++ a2:0e:bc:df:e2:ed:f0:e3:72:73:7a:64:94:bf:f7:72:66:d8:
++ 32:e4:42:75:62:ae:87:eb:f2:d5:d9:de:56:b3:9f:cc:ce:14:
++ 28:b9:0d:97:60:5c:12:4c:58:e4:d3:3d:83:49:45:58:97:35:
++ 69:1a:a8:47:ea:56:c6:79:ab:12:d8:67:81:84:df:7f:09:3c:
++ 94:e6:b8:26:2c:20:bd:3d:b3:28:89:f7:5f:ff:22:e2:97:84:
++ 1f:e9:65:ef:87:e0:df:c1:67:49:b3:5d:eb:b2:09:2a:eb:26:
++ ed:78:be:7d:3f:2b:f3:b7:26:35:6d:5f:89:01:b6:49:5b:9f:
++ 01:05:9b:ab:3d:25:c1:cc:b6:7f:c2:f1:6f:86:c6:fa:64:68:
++ eb:81:2d:94:eb:42:b7:fa:8c:1e:dd:62:f1:be:50:67:b7:6c:
++ bd:f3:f1:1f:6b:0c:36:07:16:7f:37:7c:a9:5b:6d:7a:f1:12:
++ 46:60:83:d7:27:04:be:4b:ce:97:be:c3:67:2a:68:11:df:80:
++ e7:0c:33:66:bf:13:0d:14:6e:f3:7f:1f:63:10:1e:fa:8d:1b:
++ 25:6d:6c:8f:a5:b7:61:01:b1:d2:a3:26:a1:10:71:9d:ad:e2:
++ c3:f9:c3:99:51:b7:2b:07:08:ce:2e:e6:50:b2:a7:fa:0a:45:
++ 2f:a2:f0:f2
++-----BEGIN CERTIFICATE-----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==
++-----END CERTIFICATE-----
++
++# 4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 08:3b:e0:56:90:42:46:b1:a1:75:6a:c9:59:91:c7:4a
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
++ Validity
++ Not Before: Nov 10 00:00:00 2006 GMT
++ Not After : Nov 10 00:00:00 2031 GMT
++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:e2:3b:e1:11:72:de:a8:a4:d3:a3:57:aa:50:a2:
++ 8f:0b:77:90:c9:a2:a5:ee:12:ce:96:5b:01:09:20:
++ cc:01:93:a7:4e:30:b7:53:f7:43:c4:69:00:57:9d:
++ e2:8d:22:dd:87:06:40:00:81:09:ce:ce:1b:83:bf:
++ df:cd:3b:71:46:e2:d6:66:c7:05:b3:76:27:16:8f:
++ 7b:9e:1e:95:7d:ee:b7:48:a3:08:da:d6:af:7a:0c:
++ 39:06:65:7f:4a:5d:1f:bc:17:f8:ab:be:ee:28:d7:
++ 74:7f:7a:78:99:59:85:68:6e:5c:23:32:4b:bf:4e:
++ c0:e8:5a:6d:e3:70:bf:77:10:bf:fc:01:f6:85:d9:
++ a8:44:10:58:32:a9:75:18:d5:d1:a2:be:47:e2:27:
++ 6a:f4:9a:33:f8:49:08:60:8b:d4:5f:b4:3a:84:bf:
++ a1:aa:4a:4c:7d:3e:cf:4f:5f:6c:76:5e:a0:4b:37:
++ 91:9e:dc:22:e6:6d:ce:14:1a:8e:6a:cb:fe:cd:b3:
++ 14:64:17:c7:5b:29:9e:32:bf:f2:ee:fa:d3:0b:42:
++ d4:ab:b7:41:32:da:0c:d4:ef:f8:81:d5:bb:8d:58:
++ 3f:b5:1b:e8:49:28:a2:70:da:31:04:dd:f7:b2:16:
++ f2:4c:0a:4e:07:a8:ed:4a:3d:5e:b5:7f:a3:90:c3:
++ af:27
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
++ X509v3 Authority Key Identifier:
++ keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
++
++ Signature Algorithm: sha1WithRSAEncryption
++ cb:9c:37:aa:48:13:12:0a:fa:dd:44:9c:4f:52:b0:f4:df:ae:
++ 04:f5:79:79:08:a3:24:18:fc:4b:2b:84:c0:2d:b9:d5:c7:fe:
++ f4:c1:1f:58:cb:b8:6d:9c:7a:74:e7:98:29:ab:11:b5:e3:70:
++ a0:a1:cd:4c:88:99:93:8c:91:70:e2:ab:0f:1c:be:93:a9:ff:
++ 63:d5:e4:07:60:d3:a3:bf:9d:5b:09:f1:d5:8e:e3:53:f4:8e:
++ 63:fa:3f:a7:db:b4:66:df:62:66:d6:d1:6e:41:8d:f2:2d:b5:
++ ea:77:4a:9f:9d:58:e2:2b:59:c0:40:23:ed:2d:28:82:45:3e:
++ 79:54:92:26:98:e0:80:48:a8:37:ef:f0:d6:79:60:16:de:ac:
++ e8:0e:cd:6e:ac:44:17:38:2f:49:da:e1:45:3e:2a:b9:36:53:
++ cf:3a:50:06:f7:2e:e8:c4:57:49:6c:61:21:18:d5:04:ad:78:
++ 3c:2c:3a:80:6b:a7:eb:af:15:14:e9:d8:89:c1:b9:38:6c:e2:
++ 91:6c:8a:ff:64:b9:77:25:57:30:c0:1b:24:a3:e1:dc:e9:df:
++ 47:7c:b5:b4:24:08:05:30:ec:2d:bd:0b:bf:45:bf:50:b9:a9:
++ f3:eb:98:01:12:ad:c8:88:c6:98:34:5f:8d:0a:3c:c6:e9:d5:
++ 95:95:6d:de
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4
++ Validity
++ Not Before: Aug 1 12:00:00 2013 GMT
++ Not After : Jan 15 12:00:00 2038 GMT
++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Trusted Root G4
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:bf:e6:90:73:68:de:bb:e4:5d:4a:3c:30:22:30:
++ 69:33:ec:c2:a7:25:2e:c9:21:3d:f2:8a:d8:59:c2:
++ e1:29:a7:3d:58:ab:76:9a:cd:ae:7b:1b:84:0d:c4:
++ 30:1f:f3:1b:a4:38:16:eb:56:c6:97:6d:1d:ab:b2:
++ 79:f2:ca:11:d2:e4:5f:d6:05:3c:52:0f:52:1f:c6:
++ 9e:15:a5:7e:be:9f:a9:57:16:59:55:72:af:68:93:
++ 70:c2:b2:ba:75:99:6a:73:32:94:d1:10:44:10:2e:
++ df:82:f3:07:84:e6:74:3b:6d:71:e2:2d:0c:1b:ee:
++ 20:d5:c9:20:1d:63:29:2d:ce:ec:5e:4e:c8:93:f8:
++ 21:61:9b:34:eb:05:c6:5e:ec:5b:1a:bc:eb:c9:cf:
++ cd:ac:34:40:5f:b1:7a:66:ee:77:c8:48:a8:66:57:
++ 57:9f:54:58:8e:0c:2b:b7:4f:a7:30:d9:56:ee:ca:
++ 7b:5d:e3:ad:c9:4f:5e:e5:35:e7:31:cb:da:93:5e:
++ dc:8e:8f:80:da:b6:91:98:40:90:79:c3:78:c7:b6:
++ b1:c4:b5:6a:18:38:03:10:8d:d8:d4:37:a4:2e:05:
++ 7d:88:f5:82:3e:10:91:70:ab:55:82:41:32:d7:db:
++ 04:73:2a:6e:91:01:7c:21:4c:d4:bc:ae:1b:03:75:
++ 5d:78:66:d9:3a:31:44:9a:33:40:bf:08:d7:5a:49:
++ a4:c2:e6:a9:a0:67:dd:a4:27:bc:a1:4f:39:b5:11:
++ 58:17:f7:24:5c:46:8f:64:f7:c1:69:88:76:98:76:
++ 3d:59:5d:42:76:87:89:97:69:7a:48:f0:e0:a2:12:
++ 1b:66:9a:74:ca:de:4b:1e:e7:0e:63:ae:e6:d4:ef:
++ 92:92:3a:9e:3d:dc:00:e4:45:25:89:b6:9a:44:19:
++ 2b:7e:c0:94:b4:d2:61:6d:eb:33:d9:c5:df:4b:04:
++ 00:cc:7d:1c:95:c3:8f:f7:21:b2:b2:11:b7:bb:7f:
++ f2:d5:8c:70:2c:41:60:aa:b1:63:18:44:95:1a:76:
++ 62:7e:f6:80:b0:fb:e8:64:a6:33:d1:89:07:e1:bd:
++ b7:e6:43:a4:18:b8:a6:77:01:e1:0f:94:0c:21:1d:
++ b2:54:29:25:89:6c:e5:0e:52:51:47:74:be:26:ac:
++ b6:41:75:de:7a:ac:5f:8d:3f:c9:bc:d3:41:11:12:
++ 5b:e5:10:50:eb:31:c5:ca:72:16:22:09:df:7c:4c:
++ 75:3f:63:ec:21:5f:c4:20:51:6b:6f:b1:ab:86:8b:
++ 4f:c2:d6:45:5f:9d:20:fc:a1:1e:c5:c0:8f:a2:b1:
++ 7e:0a:26:99:f5:e4:69:2f:98:1d:2d:f5:d9:a9:b2:
++ 1d:e5:1b
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ EC:D7:E3:82:D2:71:5D:64:4C:DF:2E:67:3F:E7:BA:98:AE:1C:0F:4F
++ Signature Algorithm: sha384WithRSAEncryption
++ bb:61:d9:7d:a9:6c:be:17:c4:91:1b:c3:a1:a2:00:8d:e3:64:
++ 68:0f:56:cf:77:ae:70:f9:fd:9a:4a:99:b9:c9:78:5c:0c:0c:
++ 5f:e4:e6:14:29:56:0b:36:49:5d:44:63:e0:ad:9c:96:18:66:
++ 1b:23:0d:3d:79:e9:6d:6b:d6:54:f8:d2:3c:c1:43:40:ae:1d:
++ 50:f5:52:fc:90:3b:bb:98:99:69:6b:c7:c1:a7:a8:68:a4:27:
++ dc:9d:f9:27:ae:30:85:b9:f6:67:4d:3a:3e:8f:59:39:22:53:
++ 44:eb:c8:5d:03:ca:ed:50:7a:7d:62:21:0a:80:c8:73:66:d1:
++ a0:05:60:5f:e8:a5:b4:a7:af:a8:f7:6d:35:9c:7c:5a:8a:d6:
++ a2:38:99:f3:78:8b:f4:4d:d2:20:0b:de:04:ee:8c:9b:47:81:
++ 72:0d:c0:14:32:ef:30:59:2e:ae:e0:71:f2:56:e4:6a:97:6f:
++ 92:50:6d:96:8d:68:7a:9a:b2:36:14:7a:06:f2:24:b9:09:11:
++ 50:d7:08:b1:b8:89:7a:84:23:61:42:29:e5:a3:cd:a2:20:41:
++ d7:d1:9c:64:d9:ea:26:a1:8b:14:d7:4c:19:b2:50:41:71:3d:
++ 3f:4d:70:23:86:0c:4a:dc:81:d2:cc:32:94:84:0d:08:09:97:
++ 1c:4f:c0:ee:6b:20:74:30:d2:e0:39:34:10:85:21:15:01:08:
++ e8:55:32:de:71:49:d9:28:17:50:4d:e6:be:4d:d1:75:ac:d0:
++ ca:fb:41:b8:43:a5:aa:d3:c3:05:44:4f:2c:36:9b:e2:fa:e2:
++ 45:b8:23:53:6c:06:6f:67:55:7f:46:b5:4c:3f:6e:28:5a:79:
++ 26:d2:a4:a8:62:97:d2:1e:e2:ed:4a:8b:bc:1b:fd:47:4a:0d:
++ df:67:66:7e:b2:5b:41:d0:3b:e4:f4:3b:f4:04:63:e9:ef:c2:
++ 54:00:51:a0:8a:2a:c9:ce:78:cc:d5:ea:87:04:18:b3:ce:af:
++ 49:88:af:f3:92:99:b6:b3:e6:61:0f:d2:85:00:e7:50:1a:e4:
++ 1b:95:9d:19:a1:b9:9c:b1:9b:b1:00:1e:ef:d0:0f:4f:42:6c:
++ c9:0a:bc:ee:43:fa:3a:71:a5:c8:4d:26:a5:35:fd:89:5d:bc:
++ 85:62:1d:32:d2:a0:2b:54:ed:9a:57:c1:db:fa:10:cf:19:b7:
++ 8b:4a:1b:8f:01:b6:27:95:53:e8:b6:89:6d:5b:bc:68:d4:23:
++ e8:8b:51:a2:56:f9:f0:a6:80:a0:d6:1e:b3:bc:0f:0f:53:75:
++ 29:aa:ea:13:77:e4:de:8c:81:21:ad:07:10:47:11:ad:87:3d:
++ 07:d1:75:bc:cf:f3:66:7e
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA
++ Validity
++ Not Before: Nov 10 00:00:00 2006 GMT
++ Not After : Nov 10 00:00:00 2031 GMT
++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:c6:cc:e5:73:e6:fb:d4:bb:e5:2d:2d:32:a6:df:
++ e5:81:3f:c9:cd:25:49:b6:71:2a:c3:d5:94:34:67:
++ a2:0a:1c:b0:5f:69:a6:40:b1:c4:b7:b2:8f:d0:98:
++ a4:a9:41:59:3a:d3:dc:94:d6:3c:db:74:38:a4:4a:
++ cc:4d:25:82:f7:4a:a5:53:12:38:ee:f3:49:6d:71:
++ 91:7e:63:b6:ab:a6:5f:c3:a4:84:f8:4f:62:51:be:
++ f8:c5:ec:db:38:92:e3:06:e5:08:91:0c:c4:28:41:
++ 55:fb:cb:5a:89:15:7e:71:e8:35:bf:4d:72:09:3d:
++ be:3a:38:50:5b:77:31:1b:8d:b3:c7:24:45:9a:a7:
++ ac:6d:00:14:5a:04:b7:ba:13:eb:51:0a:98:41:41:
++ 22:4e:65:61:87:81:41:50:a6:79:5c:89:de:19:4a:
++ 57:d5:2e:e6:5d:1c:53:2c:7e:98:cd:1a:06:16:a4:
++ 68:73:d0:34:04:13:5c:a1:71:d3:5a:7c:55:db:5e:
++ 64:e1:37:87:30:56:04:e5:11:b4:29:80:12:f1:79:
++ 39:88:a2:02:11:7c:27:66:b7:88:b7:78:f2:ca:0a:
++ a8:38:ab:0a:64:c2:bf:66:5d:95:84:c1:a1:25:1e:
++ 87:5d:1a:50:0b:20:12:cc:41:bb:6e:0b:51:38:b8:
++ 4b:cb
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3
++ X509v3 Authority Key Identifier:
++ keyid:B1:3E:C3:69:03:F8:BF:47:01:D4:98:26:1A:08:02:EF:63:64:2B:C3
++
++ Signature Algorithm: sha1WithRSAEncryption
++ 1c:1a:06:97:dc:d7:9c:9f:3c:88:66:06:08:57:21:db:21:47:
++ f8:2a:67:aa:bf:18:32:76:40:10:57:c1:8a:f3:7a:d9:11:65:
++ 8e:35:fa:9e:fc:45:b5:9e:d9:4c:31:4b:b8:91:e8:43:2c:8e:
++ b3:78:ce:db:e3:53:79:71:d6:e5:21:94:01:da:55:87:9a:24:
++ 64:f6:8a:66:cc:de:9c:37:cd:a8:34:b1:69:9b:23:c8:9e:78:
++ 22:2b:70:43:e3:55:47:31:61:19:ef:58:c5:85:2f:4e:30:f6:
++ a0:31:16:23:c8:e7:e2:65:16:33:cb:bf:1a:1b:a0:3d:f8:ca:
++ 5e:8b:31:8b:60:08:89:2d:0c:06:5c:52:b7:c4:f9:0a:98:d1:
++ 15:5f:9f:12:be:7c:36:63:38:bd:44:a4:7f:e4:26:2b:0a:c4:
++ 97:69:0d:e9:8c:e2:c0:10:57:b8:c8:76:12:91:55:f2:48:69:
++ d8:bc:2a:02:5b:0f:44:d4:20:31:db:f4:ba:70:26:5d:90:60:
++ 9e:bc:4b:17:09:2f:b4:cb:1e:43:68:c9:07:27:c1:d2:5c:f7:
++ ea:21:b9:68:12:9c:3c:9c:bf:9e:fc:80:5c:9b:63:cd:ec:47:
++ aa:25:27:67:a0:37:f3:00:82:7d:54:d7:a9:f8:e9:2e:13:a3:
++ 77:e8:1f:4a
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 7d05ebb682339f8c9451ee094eebfefa7953a114edb2f44949452fab7d2fc185
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 0b:93:1c:3a:d6:39:67:ea:67:23:bf:c3:af:9a:f4:4b
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2
++ Validity
++ Not Before: Aug 1 12:00:00 2013 GMT
++ Not After : Jan 15 12:00:00 2038 GMT
++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:d9:e7:28:2f:52:3f:36:72:49:88:93:34:f3:f8:
++ 6a:1e:31:54:80:9f:ad:54:41:b5:47:df:96:a8:d4:
++ af:80:2d:b9:0a:cf:75:fd:89:a5:7d:24:fa:e3:22:
++ 0c:2b:bc:95:17:0b:33:bf:19:4d:41:06:90:00:bd:
++ 0c:4d:10:fe:07:b5:e7:1c:6e:22:55:31:65:97:bd:
++ d3:17:d2:1e:62:f3:db:ea:6c:50:8c:3f:84:0c:96:
++ cf:b7:cb:03:e0:ca:6d:a1:14:4c:1b:89:dd:ed:00:
++ b0:52:7c:af:91:6c:b1:38:13:d1:e9:12:08:c0:00:
++ b0:1c:2b:11:da:77:70:36:9b:ae:ce:79:87:dc:82:
++ 70:e6:09:74:70:55:69:af:a3:68:9f:bf:dd:b6:79:
++ b3:f2:9d:70:29:55:f4:ab:ff:95:61:f3:c9:40:6f:
++ 1d:d1:be:93:bb:d3:88:2a:bb:9d:bf:72:5a:56:71:
++ 3b:3f:d4:f3:d1:0a:fe:28:ef:a3:ee:d9:99:af:03:
++ d3:8f:60:b7:f2:92:a1:b1:bd:89:89:1f:30:cd:c3:
++ a6:2e:62:33:ae:16:02:77:44:5a:e7:81:0a:3c:a7:
++ 44:2e:79:b8:3f:04:bc:5c:a0:87:e1:1b:af:51:8e:
++ cd:ec:2c:fa:f8:fe:6d:f0:3a:7c:aa:8b:e4:67:95:
++ 31:8d
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ CE:C3:4A:B9:99:55:F2:B8:DB:60:BF:A9:7E:BD:56:B5:97:36:A7:D6
++ Signature Algorithm: sha256WithRSAEncryption
++ ca:a5:55:8c:e3:c8:41:6e:69:27:a7:75:11:ef:3c:86:36:6f:
++ d2:9d:c6:78:38:1d:69:96:a2:92:69:2e:38:6c:9b:7d:04:d4:
++ 89:a5:b1:31:37:8a:c9:21:cc:ab:6c:cd:8b:1c:9a:d6:bf:48:
++ d2:32:66:c1:8a:c0:f3:2f:3a:ef:c0:e3:d4:91:86:d1:50:e3:
++ 03:db:73:77:6f:4a:39:53:ed:de:26:c7:b5:7d:af:2b:42:d1:
++ 75:62:e3:4a:2b:02:c7:50:4b:e0:69:e2:96:6c:0e:44:66:10:
++ 44:8f:ad:05:eb:f8:79:ac:a6:1b:e8:37:34:9d:53:c9:61:aa:
++ a2:52:af:4a:70:16:86:c2:3a:c8:b1:13:70:36:d8:cf:ee:f4:
++ 0a:34:d5:5b:4c:fd:07:9c:a2:ba:d9:01:72:5c:f3:4d:c1:dd:
++ 0e:b1:1c:0d:c4:63:be:ad:f4:14:fb:89:ec:a2:41:0e:4c:cc:
++ c8:57:40:d0:6e:03:aa:cd:0c:8e:89:99:99:6c:f0:3c:30:af:
++ 38:df:6f:bc:a3:be:29:20:27:ab:74:ff:13:22:78:de:97:52:
++ 55:1e:83:b5:54:20:03:ee:ae:c0:4f:56:de:37:cc:c3:7f:aa:
++ 04:27:bb:d3:77:b8:62:db:17:7c:9c:28:22:13:73:6c:cf:26:
++ f5:8a:29:e7
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 7e37cb8b4c47090cab36551ba6f45db840680fba166a952db100717f43053fc2
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 0b:a1:5a:fa:1d:df:a0:b5:49:44:af:cd:24:a0:6c:ec
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3
++ Validity
++ Not Before: Aug 1 12:00:00 2013 GMT
++ Not After : Jan 15 12:00:00 2038 GMT
++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Assured ID Root G3
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:19:e7:bc:ac:44:65:ed:cd:b8:3f:58:fb:8d:b1:
++ 57:a9:44:2d:05:15:f2:ef:0b:ff:10:74:9f:b5:62:
++ 52:5f:66:7e:1f:e5:dc:1b:45:79:0b:cc:c6:53:0a:
++ 9d:8d:5d:02:d9:a9:59:de:02:5a:f6:95:2a:0e:8d:
++ 38:4a:8a:49:c6:bc:c6:03:38:07:5f:55:da:7e:09:
++ 6e:e2:7f:5e:d0:45:20:0f:59:76:10:d6:a0:24:f0:
++ 2d:de:36:f2:6c:29:39
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ CB:D0:BD:A9:E1:98:05:51:A1:4D:37:A2:83:79:CE:8D:1D:2A:E4:84
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:64:02:30:25:a4:81:45:02:6b:12:4b:75:74:4f:c8:23:e3:
++ 70:f2:75:72:de:7c:89:f0:cf:91:72:61:9e:5e:10:92:59:56:
++ b9:83:c7:10:e7:38:e9:58:26:36:7d:d5:e4:34:86:39:02:30:
++ 7c:36:53:f0:30:e5:62:63:3a:99:e2:b6:a3:3b:9b:34:fa:1e:
++ da:10:92:71:5e:91:13:a7:dd:a4:6e:92:cc:32:d6:f5:21:66:
++ c7:2f:ea:96:63:6a:65:45:92:95:01:b4
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 03:3a:f1:e6:a7:11:a9:a0:bb:28:64:b1:1d:09:fa:e5
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
++ Validity
++ Not Before: Aug 1 12:00:00 2013 GMT
++ Not After : Jan 15 12:00:00 2038 GMT
++ Subject: C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:bb:37:cd:34:dc:7b:6b:c9:b2:68:90:ad:4a:75:
++ ff:46:ba:21:0a:08:8d:f5:19:54:c9:fb:88:db:f3:
++ ae:f2:3a:89:91:3c:7a:e6:ab:06:1a:6b:cf:ac:2d:
++ e8:5e:09:24:44:ba:62:9a:7e:d6:a3:a8:7e:e0:54:
++ 75:20:05:ac:50:b7:9c:63:1a:6c:30:dc:da:1f:19:
++ b1:d7:1e:de:fd:d7:e0:cb:94:83:37:ae:ec:1f:43:
++ 4e:dd:7b:2c:d2:bd:2e:a5:2f:e4:a9:b8:ad:3a:d4:
++ 99:a4:b6:25:e9:9b:6b:00:60:92:60:ff:4f:21:49:
++ 18:f7:67:90:ab:61:06:9c:8f:f2:ba:e9:b4:e9:92:
++ 32:6b:b5:f3:57:e8:5d:1b:cd:8c:1d:ab:95:04:95:
++ 49:f3:35:2d:96:e3:49:6d:dd:77:e3:fb:49:4b:b4:
++ ac:55:07:a9:8f:95:b3:b4:23:bb:4c:6d:45:f0:f6:
++ a9:b2:95:30:b4:fd:4c:55:8c:27:4a:57:14:7c:82:
++ 9d:cd:73:92:d3:16:4a:06:0c:8c:50:d1:8f:1e:09:
++ be:17:a1:e6:21:ca:fd:83:e5:10:bc:83:a5:0a:c4:
++ 67:28:f6:73:14:14:3d:46:76:c3:87:14:89:21:34:
++ 4d:af:0f:45:0c:a6:49:a1:ba:bb:9c:c5:b1:33:83:
++ 29:85
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ 4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
++ Signature Algorithm: sha256WithRSAEncryption
++ 60:67:28:94:6f:0e:48:63:eb:31:dd:ea:67:18:d5:89:7d:3c:
++ c5:8b:4a:7f:e9:be:db:2b:17:df:b0:5f:73:77:2a:32:13:39:
++ 81:67:42:84:23:f2:45:67:35:ec:88:bf:f8:8f:b0:61:0c:34:
++ a4:ae:20:4c:84:c6:db:f8:35:e1:76:d9:df:a6:42:bb:c7:44:
++ 08:86:7f:36:74:24:5a:da:6c:0d:14:59:35:bd:f2:49:dd:b6:
++ 1f:c9:b3:0d:47:2a:3d:99:2f:bb:5c:bb:b5:d4:20:e1:99:5f:
++ 53:46:15:db:68:9b:f0:f3:30:d5:3e:31:e2:8d:84:9e:e3:8a:
++ da:da:96:3e:35:13:a5:5f:f0:f9:70:50:70:47:41:11:57:19:
++ 4e:c0:8f:ae:06:c4:95:13:17:2f:1b:25:9f:75:f2:b1:8e:99:
++ a1:6f:13:b1:41:71:fe:88:2a:c8:4f:10:20:55:d7:f3:14:45:
++ e5:e0:44:f4:ea:87:95:32:93:0e:fe:53:46:fa:2c:9d:ff:8b:
++ 22:b9:4b:d9:09:45:a4:de:a4:b8:9a:58:dd:1b:7d:52:9f:8e:
++ 59:43:88:81:a4:9e:26:d5:6f:ad:dd:0d:c6:37:7d:ed:03:92:
++ 1b:e5:77:5f:76:ee:3c:8d:c4:5d:56:5b:a2:d9:66:6e:b3:35:
++ 37:e5:32:b6
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# e23d4a036d7b70e9f595b1422079d2b91edfbb1fb651a0633eaa8a9dc5f80703
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 92:b8:88:db:b0:8a:c1:63
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = SK, L = Bratislava, O = Disig a.s., CN = CA Disig Root R2
++ Validity
++ Not Before: Jul 19 09:15:30 2012 GMT
++ Not After : Jul 19 09:15:30 2042 GMT
++ Subject: C = SK, L = Bratislava, O = Disig a.s., CN = CA Disig Root R2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:a2:a3:c4:00:09:d6:85:5d:2d:6d:14:f6:c2:c3:
++ 73:9e:35:c2:71:55:7e:81:fb:ab:46:50:e0:c1:7c:
++ 49:78:e6:ab:79:58:3c:da:ff:7c:1c:9f:d8:97:02:
++ 78:3e:6b:41:04:e9:41:bd:be:03:2c:45:f6:2f:64:
++ d4:ab:5d:a3:47:3d:64:9b:e9:68:9a:c6:cc:1b:3f:
++ ba:be:b2:8b:34:02:2e:98:55:19:fc:8c:6f:aa:5f:
++ da:4c:ce:4d:03:21:a3:d8:d2:34:93:56:96:cb:4c:
++ 0c:00:16:3c:5f:1a:cd:c8:c7:6c:a6:ad:d3:31:a7:
++ bc:e8:e5:e1:66:d6:d2:fb:03:b4:41:65:c9:10:ae:
++ 0e:05:63:c6:80:6a:69:30:fd:d2:ee:90:ef:0d:27:
++ df:9f:95:73:f4:e1:25:da:6c:16:de:41:38:34:ea:
++ 8b:fc:d1:e8:04:14:61:2d:41:7e:ac:c7:77:4e:cb:
++ 51:54:fb:5e:92:18:1b:04:5a:68:c6:c9:c4:fa:b7:
++ 13:a0:98:b7:11:2b:b7:d6:57:cc:7c:9e:17:d1:cb:
++ 25:fe:86:4e:24:2e:56:0c:78:4d:9e:01:12:a6:2b:
++ a7:01:65:6e:7c:62:1d:84:84:df:ea:c0:6b:b5:a5:
++ 2a:95:83:c3:53:11:0c:73:1d:0b:b2:46:90:d1:42:
++ 3a:ce:40:6e:95:ad:ff:c6:94:ad:6e:97:84:8e:7d:
++ 6f:9e:8a:80:0d:49:6d:73:e2:7b:92:1e:c3:f3:c1:
++ f3:eb:2e:05:6f:d9:1b:cf:37:76:04:c8:b4:5a:e4:
++ 17:a7:cb:dd:76:1f:d0:19:76:e8:2c:05:b3:d6:9c:
++ 34:d8:96:dc:61:87:91:05:e4:44:08:33:c1:da:b9:
++ 08:65:d4:ae:b2:36:0d:eb:ba:38:ba:0c:e5:9b:9e:
++ eb:8d:66:dd:99:cf:d6:89:41:f6:04:92:8a:29:29:
++ 6d:6b:3a:1c:e7:75:7d:02:71:0e:f3:c0:e7:bd:cb:
++ 19:dd:9d:60:b2:c2:66:60:b6:b1:04:ee:c9:e6:86:
++ b9:9a:66:40:a8:e7:11:ed:81:45:03:8b:f6:67:59:
++ e8:c1:06:11:bd:dd:cf:80:02:4f:65:40:78:5c:47:
++ 50:c8:9b:e6:1f:81:7b:e4:44:a8:5b:85:9a:e2:de:
++ 5a:d5:c7:f9:3a:44:66:4b:e4:32:54:7c:e4:6c:9c:
++ b3:0e:3d:17:a2:b2:34:12:d6:7e:b2:a8:49:bb:d1:
++ 7a:28:40:be:a2:16:1f:df:e4:37:1f:11:73:fb:90:
++ 0a:65:43:a2:0d:7c:f8:06:01:55:33:7d:b0:0d:b8:
++ f4:f5:ae:a5:42:57:7c:36:11:8c:7b:5e:c4:03:9d:
++ 8c:79:9d
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ B5:99:F8:AF:B0:94:F5:E3:20:D6:0A:AD:CE:4E:56:A4:2E:6E:42:ED
++ Signature Algorithm: sha256WithRSAEncryption
++ 26:06:5e:70:e7:65:33:c8:82:6e:d9:9c:17:3a:1b:7a:66:b2:
++ 01:f6:78:3b:69:5e:2f:ea:ff:4e:f9:28:c3:98:2a:61:4c:b4:
++ 24:12:8a:7d:6d:11:14:f7:9c:b5:ca:e6:bc:9e:27:8e:4c:19:
++ c8:a9:bd:7a:c0:d7:36:0e:6d:85:72:6e:a8:c6:a2:6d:f6:fa:
++ 73:63:7f:bc:6e:79:08:1c:9d:8a:9f:1a:8a:53:a6:d8:bb:d9:
++ 35:55:b1:11:c5:a9:03:b3:56:3b:b9:84:93:22:5e:7e:c1:f6:
++ 12:52:8b:ea:2c:67:bc:fe:36:4c:f5:b8:cf:d1:b3:49:92:3b:
++ d3:29:0e:99:1b:96:f7:61:b8:3b:c4:2b:b6:78:6c:b4:23:6f:
++ f0:fd:d3:b2:5e:75:1f:99:95:a8:ac:f6:da:e1:c5:31:7b:fb:
++ d1:46:b3:d2:bc:67:b4:62:54:ba:09:f7:63:b0:93:a2:9a:f9:
++ e9:52:2e:8b:60:12:ab:fc:f5:60:56:ef:10:5c:8b:c4:1a:42:
++ dc:83:5b:64:0e:cb:b5:bc:d6:4f:c1:7c:3c:6e:8d:13:6d:fb:
++ 7b:eb:30:d0:dc:4d:af:c5:d5:b6:a5:4c:5b:71:c9:e8:31:be:
++ e8:38:06:48:a1:1a:e2:ea:d2:de:12:39:58:1a:ff:80:0e:82:
++ 75:e6:b7:c9:07:6c:0e:ef:ff:38:f1:98:71:c4:b7:7f:0e:15:
++ d0:25:69:bd:22:9d:2b:ed:05:f6:46:47:ac:ed:c0:f0:d4:3b:
++ e2:ec:ee:96:5b:90:13:4e:1e:56:3a:eb:b0:ef:96:bb:96:23:
++ 11:ba:f2:43:86:74:64:95:c8:28:75:df:1d:35:ba:d2:37:83:
++ 38:53:38:36:3b:cf:6c:e9:f9:6b:0e:d0:fb:04:e8:4f:77:d7:
++ 65:01:78:86:0c:7a:3e:21:62:f1:7f:63:71:0c:c9:9f:44:db:
++ a8:27:a2:75:be:6e:81:3e:d7:c0:eb:1b:98:0f:70:5c:34:b2:
++ 8a:cc:c0:85:18:eb:6e:7a:b3:f7:5a:a1:07:bf:a9:42:92:f3:
++ 60:22:97:e4:14:a1:07:9b:4e:76:c0:8e:7d:fd:a4:25:c7:47:
++ ed:ff:1f:73:ac:cc:c3:a5:e9:6f:0a:8e:9b:65:c2:50:85:b5:
++ a3:a0:53:12:cc:55:87:61:f3:81:ae:10:46:61:bd:44:21:b8:
++ c2:3d:74:cf:7e:24:35:fa:1c:07:0e:9b:3d:22:ca:ef:31:2f:
++ 8c:ac:12:bd:ef:40:28:fc:29:67:9f:b2:13:4f:66:24:c4:53:
++ 19:e9:1e:29:15:ef:e6:6d:b0:7f:2d:67:fd:f3:6c:1b:75:46:
++ a3:e5:4a:17:e9:a4:d7:0b
+ -----BEGIN CERTIFICATE-----
+ MIIFaTCCA1GgAwIBAgIJAJK4iNuwisFjMA0GCSqGSIb3DQEBCwUAMFIxCzAJBgNV
+ BAYTAlNLMRMwEQYDVQQHEwpCcmF0aXNsYXZhMRMwEQYDVQQKEwpEaXNpZyBhLnMu
+@@ -1713,13 +2752,1316 @@ zMOl6W8KjptlwlCFtaOgUxLMVYdh84GuEEZhvUQhuMI9dM9+JDX6HAcOmz0iyu8x
+ L4ysEr3vQCj8KWefshNPZiTEUxnpHikV7+ZtsH8tZ/3zbBt1RqPlShfppNcL
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=ACCVRAIZ1 O=ACCV OU=PKIACCV
+-# Subject: CN=ACCVRAIZ1 O=ACCV OU=PKIACCV
+-# Label: "ACCVRAIZ1"
+-# Serial: 6828503384748696800
+-# MD5 Fingerprint: d0:a0:5a:ee:05:b6:09:94:21:a1:7d:f1:b2:29:82:02
+-# SHA1 Fingerprint: 93:05:7a:88:15:c6:4f:ce:88:2f:fa:91:16:52:28:78:bc:53:64:17
+-# SHA256 Fingerprint: 9a:6e:c0:12:e1:a7:da:9d:be:34:19:4d:47:8a:d7:c0:db:18:22:fb:07:1d:f1:29:81:49:6e:d1:04:38:41:13
++# 40f6af0346a99aa1cd1d555a4e9cce62c7f9634603ee406615833dc8c8d00367
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 31:f5:e4:62:0c:6c:58:ed:d6:d8
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign Root CA - G1
++ Validity
++ Not Before: Feb 18 18:30:00 2018 GMT
++ Not After : Feb 18 18:30:00 2043 GMT
++ Subject: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign Root CA - G1
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:93:4b:bb:e9:66:8a:ee:9d:5b:d5:34:93:d0:1b:
++ 1e:c3:e7:9e:b8:64:33:7f:63:78:68:b4:cd:2e:71:
++ 75:d7:9b:20:c6:4d:29:bc:b6:68:60:8a:f7:21:9a:
++ 56:35:5a:f3:76:bd:d8:cd:9a:ff:93:56:4b:a5:59:
++ 06:a1:93:34:29:dd:16:34:75:4e:f2:81:b4:c7:96:
++ 4e:ad:19:15:52:4a:fe:3c:70:75:70:cd:af:2b:ab:
++ 15:9a:33:3c:aa:b3:8b:aa:cd:43:fd:f5:ea:70:ff:
++ ed:cf:11:3b:94:ce:4e:32:16:d3:23:40:2a:77:b3:
++ af:3c:01:2c:6c:ed:99:2c:8b:d9:4e:69:98:b2:f7:
++ 8f:41:b0:32:78:61:d6:0d:5f:c3:fa:a2:40:92:1d:
++ 5c:17:e6:70:3e:35:e7:a2:b7:c2:62:e2:ab:a4:38:
++ 4c:b5:39:35:6f:ea:03:69:fa:3a:54:68:85:6d:d6:
++ f2:2f:43:55:1e:91:0d:0e:d8:d5:6a:a4:96:d1:13:
++ 3c:2c:78:50:e8:3a:92:d2:17:56:e5:35:1a:40:1c:
++ 3e:8d:2c:ed:39:df:42:e0:83:41:74:df:a3:cd:c2:
++ 86:60:48:68:e3:69:0b:54:00:8b:e4:76:69:21:0d:
++ 79:4e:34:08:5e:14:c2:cc:b1:b7:ad:d7:7c:70:8a:
++ c7:85
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ FB:EF:0D:86:9E:B0:E3:DD:A9:B9:F1:21:17:7F:3E:FC:F0:77:2B:1A
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: sha256WithRSAEncryption
++ 59:ff:f2:8c:f5:87:7d:71:3d:a3:9f:1b:5b:d1:da:f8:d3:9c:
++ 6b:36:bd:9b:a9:61:eb:de:16:2c:74:3d:9e:e6:75:da:d7:ba:
++ a7:bc:42:17:e7:3d:91:eb:e5:7d:dd:3e:9c:f1:cf:92:ac:6c:
++ 48:cc:c2:22:3f:69:3b:c5:b6:15:2f:a3:35:c6:68:2a:1c:57:
++ af:39:ef:8d:d0:35:c3:18:0c:7b:00:56:1c:cd:8b:19:74:de:
++ be:0f:12:e0:d0:aa:a1:3f:02:34:b1:70:ce:9d:18:d6:08:03:
++ 09:46:ee:60:e0:7e:b6:c4:49:04:51:7d:70:60:bc:aa:b2:ff:
++ 79:72:7a:a6:1d:3d:5f:2a:f8:ca:e2:fd:39:b7:47:b9:eb:7e:
++ df:04:23:af:fa:9c:06:07:e9:fb:63:93:80:40:b5:c6:6c:0a:
++ 31:28:ce:0c:9f:cf:b3:23:35:80:41:8d:6c:c4:37:7b:81:2f:
++ 80:a1:40:42:85:e9:d9:38:8d:e8:a1:53:cd:01:bf:69:e8:5a:
++ 06:f2:45:0b:90:fa:ae:e1:bf:9d:f2:ae:57:3c:a5:ae:b2:56:
++ f4:8b:65:40:e9:fd:31:81:2c:f4:39:09:d8:ee:6b:a7:b4:a6:
++ 1d:15:a5:98:f7:01:81:d8:85:7d:f3:51:5c:71:88:de:ba:cc:
++ 1f:80:7e:4a
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 86a1ecba089c4a8d3bbe2734c612ba341d813e043cf9e8a862cd5c57a36bbe6b
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 3c:f6:07:a9:68:70:0e:da:8b:84
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign ECC Root CA - G3
++ Validity
++ Not Before: Feb 18 18:30:00 2018 GMT
++ Not After : Feb 18 18:30:00 2043 GMT
++ Subject: C = IN, OU = emSign PKI, O = eMudhra Technologies Limited, CN = emSign ECC Root CA - G3
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:23:a5:0c:b8:2d:12:f5:28:f3:b1:b2:dd:e2:02:
++ 12:80:9e:39:5f:49:4d:9f:c9:25:34:59:74:ec:bb:
++ 06:1c:e7:c0:72:af:e8:ae:2f:e1:41:54:87:14:a8:
++ 4a:b2:e8:7c:82:e6:5b:6a:b5:dc:b3:75:ce:8b:06:
++ d0:86:23:bf:46:d5:8e:0f:3f:04:f4:d7:1c:92:7e:
++ f6:a5:63:c2:f5:5f:8e:2e:4f:a1:18:19:02:2b:32:
++ 0a:82:64:7d:16:93:d1
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 7C:5D:02:84:13:D4:CC:8A:9B:81:CE:17:1C:2E:29:1E:9C:48:63:42
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:66:02:31:00:be:f3:61:cf:02:10:1d:64:95:07:b8:18:6e:
++ 88:85:05:2f:83:08:17:90:ca:1f:8a:4c:e8:0d:1b:7a:b1:ad:
++ d5:81:09:47:ef:3b:ac:08:04:7c:5c:99:b1:ed:47:07:d2:02:
++ 31:00:9d:ba:55:fc:a9:4a:e8:ed:ed:e6:76:01:42:7b:c8:f8:
++ 60:d9:8d:51:8b:55:3b:fb:8c:7b:eb:65:09:c3:f8:96:cd:47:
++ a8:82:f2:16:55:77:24:7e:12:10:95:04:2c:a3
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# bfff8fd04433487d6a8aa60c1a29767a9fc2bbb05e420f713a13b992891d3893
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 9009899650740120186 (0x7d0997fef047ea7a)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = CN, O = "GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.", CN = GDCA TrustAUTH R5 ROOT
++ Validity
++ Not Before: Nov 26 05:13:15 2014 GMT
++ Not After : Dec 31 15:59:59 2040 GMT
++ Subject: C = CN, O = "GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.", CN = GDCA TrustAUTH R5 ROOT
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:d9:a3:16:f0:c8:74:74:77:9b:ef:33:0d:3b:06:
++ 7e:55:fc:b5:60:8f:76:86:12:42:7d:56:66:3e:88:
++ 82:ed:72:63:0e:9e:8b:dd:34:2c:02:51:51:c3:19:
++ fd:59:54:84:c9:f1:6b:b3:4c:b0:e9:e8:46:5d:38:
++ c6:a2:a7:2e:11:57:ba:82:15:a2:9c:8f:6d:b0:99:
++ 4a:0a:f2:eb:89:70:63:4e:79:c4:b7:5b:bd:a2:5d:
++ b1:f2:41:02:2b:ad:a9:3a:a3:ec:79:0a:ec:5f:3a:
++ e3:fd:ef:80:3c:ad:34:9b:1a:ab:88:26:7b:56:a2:
++ 82:86:1f:eb:35:89:83:7f:5f:ae:29:4e:3d:b6:6e:
++ ec:ae:c1:f0:27:9b:ae:e3:f4:ec:ef:ae:7f:f7:86:
++ 3d:72:7a:eb:a5:fb:59:4e:a7:eb:95:8c:22:39:79:
++ e1:2d:08:8f:cc:bc:91:b8:41:f7:14:c1:23:a9:c3:
++ ad:9a:45:44:b3:b2:d7:2c:cd:c6:29:e2:50:10:ae:
++ 5c:cb:82:8e:17:18:36:7d:97:e6:88:9a:b0:4d:34:
++ 09:f4:2c:b9:5a:66:2a:b0:17:9b:9e:1e:76:9d:4a:
++ 66:31:41:df:3f:fb:c5:06:ef:1b:b6:7e:1a:46:36:
++ f7:64:63:3b:e3:39:18:23:e7:67:75:14:d5:75:57:
++ 92:37:bd:be:6a:1b:26:50:f2:36:26:06:90:c5:70:
++ 01:64:6d:76:66:e1:91:db:6e:07:c0:61:80:2e:b2:
++ 2e:2f:8c:70:a7:d1:3b:3c:b3:91:e4:6e:b6:c4:3b:
++ 70:f2:6c:92:97:09:cd:47:7d:18:c0:f3:bb:9e:0f:
++ d6:8b:ae:07:b6:5a:0f:ce:0b:0c:47:a7:e5:3e:b8:
++ bd:7d:c7:9b:35:a0:61:97:3a:41:75:17:cc:2b:96:
++ 77:2a:92:21:1e:d9:95:76:20:67:68:cf:0d:bd:df:
++ d6:1f:09:6a:9a:e2:cc:73:71:a4:2f:7d:12:80:b7:
++ 53:30:46:5e:4b:54:99:0f:67:c9:a5:c8:f2:20:c1:
++ 82:ec:9d:11:df:c2:02:fb:1a:3b:d1:ed:20:9a:ef:
++ 65:64:92:10:0d:2a:e2:de:70:f1:18:67:82:8c:61:
++ de:b8:bc:d1:2f:9c:fb:0f:d0:2b:ed:1b:76:b9:e4:
++ 39:55:f8:f8:a1:1d:b8:aa:80:00:4c:82:e7:b2:7f:
++ 09:b8:bc:30:a0:2f:0d:f5:52:9e:8e:f7:92:b3:0a:
++ 00:1d:00:54:97:06:e0:b1:07:d9:c7:0f:5c:65:7d:
++ 3c:6d:59:57:e4:ed:a5:8d:e9:40:53:9f:15:4b:a0:
++ 71:f6:1a:21:e3:da:70:06:21:58:14:87:85:77:79:
++ aa:82:79
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ E2:C9:40:9F:4D:CE:E8:9A:A1:7C:CF:0E:3F:65:C5:29:88:6A:19:51
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ d1:49:57:e0:a7:cc:68:58:ba:01:0f:2b:19:cd:8d:b0:61:45:
++ ac:11:ed:63:50:69:f8:1f:7f:be:16:8f:fd:9d:eb:0b:aa:32:
++ 47:76:d2:67:24:ed:bd:7c:33:32:97:2a:c7:05:86:66:0d:17:
++ 7d:14:15:1b:d4:eb:fd:1f:9a:f6:5e:97:69:b7:1a:25:a4:0a:
++ b3:91:3f:5f:36:ac:8b:ec:57:a8:3e:e7:81:8a:18:57:39:85:
++ 74:1a:42:c7:e9:5b:13:5f:8f:f9:08:e9:92:74:8d:f5:47:d2:
++ ab:3b:d6:fb:78:66:4e:36:7d:f9:e9:92:e9:04:de:fd:49:63:
++ fc:6d:fb:14:71:93:67:2f:47:4a:b7:b9:ff:1e:2a:73:70:46:
++ 30:bf:5a:f2:2f:79:a5:e1:8d:0c:d9:f9:b2:63:37:8c:37:65:
++ 85:70:6a:5c:5b:09:72:b9:ad:63:3c:b1:dd:f8:fc:32:bf:37:
++ 86:e4:bb:8e:98:27:7e:ba:1f:16:e1:70:11:f2:03:df:25:62:
++ 32:27:26:18:32:84:9f:ff:00:3a:13:ba:9a:4d:f4:4f:b8:14:
++ 70:22:b1:ca:2b:90:ce:29:c1:70:f4:2f:9d:7f:f2:90:1e:d6:
++ 5a:df:b7:46:fc:e6:86:fa:cb:e0:20:76:7a:ba:a6:cb:f5:7c:
++ de:62:a5:b1:8b:ee:de:82:66:8a:4e:3a:30:1f:3f:80:cb:ad:
++ 27:ba:0c:5e:d7:d0:b1:56:ca:77:71:b2:b5:75:a1:50:a9:40:
++ 43:17:c2:28:d9:cf:52:8b:5b:c8:63:d4:42:3e:a0:33:7a:46:
++ 2e:f7:0a:20:46:54:7e:6a:4f:31:f1:81:7e:42:74:38:65:73:
++ 27:ee:c6:7c:b8:8e:d7:a5:3a:d7:98:a1:9c:8c:10:55:d3:db:
++ 4b:ec:40:90:f2:cd:6e:57:d2:62:0e:7c:57:93:b1:a7:6d:cd:
++ 9d:83:bb:2a:e7:e5:b6:3b:71:58:ad:fd:d1:45:bc:5a:91:ee:
++ 53:15:6f:d3:45:09:75:6e:ba:90:5d:1e:04:cf:37:df:1e:a8:
++ 66:b1:8c:e6:20:6a:ef:fc:48:4e:74:98:42:af:29:6f:2e:6a:
++ c7:fb:7d:d1:66:31:22:cc:86:00:7e:66:83:0c:42:f4:bd:34:
++ 92:c3:1a:ea:4f:ca:7e:72:4d:0b:70:8c:a6:48:bb:a6:a1:14:
++ f6:fb:58:44:99:14:ae:aa:0b:93:69:a0:29:25:4a:a5:cb:2b:
++ dd:8a:66:07:16:78:15:57:71:1b:ec:f5:47:84:f3:9e:31:37:
++ 7a:d5:7f:24:ad:e4:bc:fd:fd:cc:6e:83:e8:0c:a8:b7:41:6c:
++ 07:dd:bd:3c:86:97:2f:d2
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 179fbc148a3dd00fd24ea13458cc43bfa7f59c8182d783a513f6ebec100c8924
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 60:59:49:e0:26:2e:bb:55:f9:0a:77:8a:71:f9:4a:d8:6c
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: OU = GlobalSign ECC Root CA - R5, O = GlobalSign, CN = GlobalSign
++ Validity
++ Not Before: Nov 13 00:00:00 2012 GMT
++ Not After : Jan 19 03:14:07 2038 GMT
++ Subject: OU = GlobalSign ECC Root CA - R5, O = GlobalSign, CN = GlobalSign
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:47:45:0e:96:fb:7d:5d:bf:e9:39:d1:21:f8:9f:
++ 0b:b6:d5:7b:1e:92:3a:48:59:1c:f0:62:31:2d:c0:
++ 7a:28:fe:1a:a7:5c:b3:b6:cc:97:e7:45:d4:58:fa:
++ d1:77:6d:43:a2:c0:87:65:34:0a:1f:7a:dd:eb:3c:
++ 33:a1:c5:9d:4d:a4:6f:41:95:38:7f:c9:1e:84:eb:
++ d1:9e:49:92:87:94:87:0c:3a:85:4a:66:9f:9d:59:
++ 93:4d:97:61:06:86:4a
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 3D:E6:29:48:9B:EA:07:CA:21:44:4A:26:DE:6E:DE:D2:83:D0:9F:59
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:65:02:31:00:e5:69:12:c9:6e:db:c6:31:ba:09:41:e1:97:
++ f8:fb:fd:9a:e2:7d:12:c9:ed:7c:64:d3:cb:05:25:8b:56:d9:
++ a0:e7:5e:5d:4e:0b:83:9c:5b:76:29:a0:09:26:21:6a:62:02:
++ 30:71:d2:b5:8f:5c:ea:3b:e1:78:09:85:a8:75:92:3b:c8:5c:
++ fd:48:ef:0d:74:22:a8:08:e2:6e:c5:49:ce:c7:0c:bc:a7:61:
++ 69:f1:f7:3b:e1:2a:cb:f9:2b:f3:66:90:37
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 2cabeafe37d06ca22aba7391c0033d25982952c453647349763a3ab5ad6ccf69
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: OU = GlobalSign Root CA - R6, O = GlobalSign, CN = GlobalSign
++ Validity
++ Not Before: Dec 10 00:00:00 2014 GMT
++ Not After : Dec 10 00:00:00 2034 GMT
++ Subject: OU = GlobalSign Root CA - R6, O = GlobalSign, CN = GlobalSign
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:95:07:e8:73:ca:66:f9:ec:14:ca:7b:3c:f7:0d:
++ 08:f1:b4:45:0b:2c:82:b4:48:c6:eb:5b:3c:ae:83:
++ b8:41:92:33:14:a4:6f:7f:e9:2a:cc:c6:b0:88:6b:
++ c5:b6:89:d1:c6:b2:ff:14:ce:51:14:21:ec:4a:dd:
++ 1b:5a:c6:d6:87:ee:4d:3a:15:06:ed:64:66:0b:92:
++ 80:ca:44:de:73:94:4e:f3:a7:89:7f:4f:78:63:08:
++ c8:12:50:6d:42:66:2f:4d:b9:79:28:4d:52:1a:8a:
++ 1a:80:b7:19:81:0e:7e:c4:8a:bc:64:4c:21:1c:43:
++ 68:d7:3d:3c:8a:c5:b2:66:d5:90:9a:b7:31:06:c5:
++ be:e2:6d:32:06:a6:1e:f9:b9:eb:aa:a3:b8:bf:be:
++ 82:63:50:d0:f0:18:89:df:e4:0f:79:f5:ea:a2:1f:
++ 2a:d2:70:2e:7b:e7:bc:93:bb:6d:53:e2:48:7c:8c:
++ 10:07:38:ff:66:b2:77:61:7e:e0:ea:8c:3c:aa:b4:
++ a4:f6:f3:95:4a:12:07:6d:fd:8c:b2:89:cf:d0:a0:
++ 61:77:c8:58:74:b0:d4:23:3a:f7:5d:3a:ca:a2:db:
++ 9d:09:de:5d:44:2d:90:f1:81:cd:57:92:fa:7e:bc:
++ 50:04:63:34:df:6b:93:18:be:6b:36:b2:39:e4:ac:
++ 24:36:b7:f0:ef:b6:1c:13:57:93:b6:de:b2:f8:e2:
++ 85:b7:73:a2:b8:35:aa:45:f2:e0:9d:36:a1:6f:54:
++ 8a:f1:72:56:6e:2e:88:c5:51:42:44:15:94:ee:a3:
++ c5:38:96:9b:4e:4e:5a:0b:47:f3:06:36:49:77:30:
++ bc:71:37:e5:a6:ec:21:08:75:fc:e6:61:16:3f:77:
++ d5:d9:91:97:84:0a:6c:d4:02:4d:74:c0:14:ed:fd:
++ 39:fb:83:f2:5e:14:a1:04:b0:0b:e9:fe:ee:8f:e1:
++ 6e:0b:b2:08:b3:61:66:09:6a:b1:06:3a:65:96:59:
++ c0:f0:35:fd:c9:da:28:8d:1a:11:87:70:81:0a:a8:
++ 9a:75:1d:9e:3a:86:05:00:9e:db:80:d6:25:f9:dc:
++ 05:9e:27:59:4c:76:39:5b:ea:f9:a5:a1:d8:83:0f:
++ d1:ff:df:30:11:f9:85:cf:33:48:f5:ca:6d:64:14:
++ 2c:7a:58:4f:d3:4b:08:49:c5:95:64:1a:63:0e:79:
++ 3d:f5:b3:8c:ca:58:ad:9c:42:45:79:6e:0e:87:19:
++ 5c:54:b1:65:b6:bf:8c:9b:dc:13:e9:0d:6f:b8:2e:
++ dc:67:6e:c9:8b:11:b5:84:14:8a:00:19:70:83:79:
++ 91:97:91:d4:1a:27:bf:37:1e:32:07:d8:14:63:3c:
++ 28:4c:af
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0
++ X509v3 Authority Key Identifier:
++ keyid:AE:6C:05:A3:93:13:E2:A2:E7:E2:D7:1C:D6:C7:F0:7F:C8:67:53:A0
++
++ Signature Algorithm: sha384WithRSAEncryption
++ 83:25:ed:e8:d1:fd:95:52:cd:9e:c0:04:a0:91:69:e6:5c:d0:
++ 84:de:dc:ad:a2:4f:e8:47:78:d6:65:98:a9:5b:a8:3c:87:7c:
++ 02:8a:d1:6e:b7:16:73:e6:5f:c0:54:98:d5:74:be:c1:cd:e2:
++ 11:91:ad:23:18:3d:dd:e1:72:44:96:b4:95:5e:c0:7b:8e:99:
++ 78:16:43:13:56:57:b3:a2:b3:3b:b5:77:dc:40:72:ac:a3:eb:
++ 9b:35:3e:b1:08:21:a1:e7:c4:43:37:79:32:be:b5:e7:9c:2c:
++ 4c:bc:43:29:99:8e:30:d3:ac:21:e0:e3:1d:fa:d8:07:33:76:
++ 54:00:22:2a:b9:4d:20:2e:70:68:da:e5:53:fc:83:5c:d3:9d:
++ f2:ff:44:0c:44:66:f2:d2:e3:bd:46:00:1a:6d:02:ba:25:5d:
++ 8d:a1:31:51:dd:54:46:1c:4d:db:99:96:ef:1a:1c:04:5c:a6:
++ 15:ef:78:e0:79:fe:5d:db:3e:aa:4c:55:fd:9a:15:a9:6f:e1:
++ a6:fb:df:70:30:e9:c3:ee:42:46:ed:c2:93:05:89:fa:7d:63:
++ 7b:3f:d0:71:81:7c:00:e8:98:ae:0e:78:34:c3:25:fb:af:0a:
++ 9f:20:6b:dd:3b:13:8f:12:8c:e2:41:1a:48:7a:73:a0:77:69:
++ c7:b6:5c:7f:82:c8:1e:fe:58:1b:28:2b:a8:6c:ad:5e:6d:c0:
++ 05:d2:7b:b7:eb:80:fe:25:37:fe:02:9b:68:ac:42:5d:c3:ee:
++ f5:cc:dc:f0:50:75:d2:36:69:9c:e6:7b:04:df:6e:06:69:b6:
++ de:0a:09:48:59:87:eb:7b:14:60:7a:64:aa:69:43:ef:91:c7:
++ 4c:ec:18:dd:6c:ef:53:2d:8c:99:e1:5e:f2:72:3e:cf:54:c8:
++ bd:67:ec:a4:0f:4c:45:ff:d3:b9:30:23:07:4c:8f:10:bf:86:
++ 96:d9:99:5a:b4:99:57:1c:a4:cc:bb:15:89:53:ba:2c:05:0f:
++ e4:c4:9e:19:b1:18:34:d5:4c:9d:ba:ed:f7:1f:af:24:95:04:
++ 78:a8:03:bb:ee:81:e5:da:5f:7c:8b:4a:a1:90:74:25:a7:b3:
++ 3e:4b:c8:2c:56:bd:c7:c8:ef:38:e2:5c:92:f0:79:f7:9c:84:
++ ba:74:2d:61:01:20:7e:7e:d1:f2:4f:07:59:5f:8b:2d:43:52:
++ eb:46:0c:94:e1:f5:66:47:79:77:d5:54:5b:1f:ad:24:37:cb:
++ 45:5a:4e:a0:44:48:c8:d8:b0:99:c5:15:84:09:f6:d6:49:49:
++ c0:65:b8:e6:1a:71:6e:a0:a8:f1:82:e8:45:3e:6c:d6:02:d7:
++ 0a:67:83:05:5a:c9:a4:10
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 04:00:00:00:00:01:21:58:53:08:a2
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
++ Validity
++ Not Before: Mar 18 10:00:00 2009 GMT
++ Not After : Mar 18 10:00:00 2029 GMT
++ Subject: OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:cc:25:76:90:79:06:78:22:16:f5:c0:83:b6:84:
++ ca:28:9e:fd:05:76:11:c5:ad:88:72:fc:46:02:43:
++ c7:b2:8a:9d:04:5f:24:cb:2e:4b:e1:60:82:46:e1:
++ 52:ab:0c:81:47:70:6c:dd:64:d1:eb:f5:2c:a3:0f:
++ 82:3d:0c:2b:ae:97:d7:b6:14:86:10:79:bb:3b:13:
++ 80:77:8c:08:e1:49:d2:6a:62:2f:1f:5e:fa:96:68:
++ df:89:27:95:38:9f:06:d7:3e:c9:cb:26:59:0d:73:
++ de:b0:c8:e9:26:0e:83:15:c6:ef:5b:8b:d2:04:60:
++ ca:49:a6:28:f6:69:3b:f6:cb:c8:28:91:e5:9d:8a:
++ 61:57:37:ac:74:14:dc:74:e0:3a:ee:72:2f:2e:9c:
++ fb:d0:bb:bf:f5:3d:00:e1:06:33:e8:82:2b:ae:53:
++ a6:3a:16:73:8c:dd:41:0e:20:3a:c0:b4:a7:a1:e9:
++ b2:4f:90:2e:32:60:e9:57:cb:b9:04:92:68:68:e5:
++ 38:26:60:75:b2:9f:77:ff:91:14:ef:ae:20:49:fc:
++ ad:40:15:48:d1:02:31:61:19:5e:b8:97:ef:ad:77:
++ b7:64:9a:7a:bf:5f:c1:13:ef:9b:62:fb:0d:6c:e0:
++ 54:69:16:a9:03:da:6e:e9:83:93:71:76:c6:69:85:
++ 82:17
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
++ Signature Algorithm: sha256WithRSAEncryption
++ 4b:40:db:c0:50:aa:fe:c8:0c:ef:f7:96:54:45:49:bb:96:00:
++ 09:41:ac:b3:13:86:86:28:07:33:ca:6b:e6:74:b9:ba:00:2d:
++ ae:a4:0a:d3:f5:f1:f1:0f:8a:bf:73:67:4a:83:c7:44:7b:78:
++ e0:af:6e:6c:6f:03:29:8e:33:39:45:c3:8e:e4:b9:57:6c:aa:
++ fc:12:96:ec:53:c6:2d:e4:24:6c:b9:94:63:fb:dc:53:68:67:
++ 56:3e:83:b8:cf:35:21:c3:c9:68:fe:ce:da:c2:53:aa:cc:90:
++ 8a:e9:f0:5d:46:8c:95:dd:7a:58:28:1a:2f:1d:de:cd:00:37:
++ 41:8f:ed:44:6d:d7:53:28:97:7e:f3:67:04:1e:15:d7:8a:96:
++ b4:d3:de:4c:27:a4:4c:1b:73:73:76:f4:17:99:c2:1f:7a:0e:
++ e3:2d:08:ad:0a:1c:2c:ff:3c:ab:55:0e:0f:91:7e:36:eb:c3:
++ 57:49:be:e1:2e:2d:7c:60:8b:c3:41:51:13:23:9d:ce:f7:32:
++ 6b:94:01:a8:99:e7:2c:33:1f:3a:3b:25:d2:86:40:ce:3b:2c:
++ 86:78:c9:61:2f:14:ba:ee:db:55:6f:df:84:ee:05:09:4d:bd:
++ 28:d8:72:ce:d3:62:50:65:1e:eb:92:97:83:31:d9:b3:b5:ca:
++ 47:58:3f:5f
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 2ce1cb0bf9d2f9e102993fbe215152c3b2dd0cabde1c68e5319b839154dbb7f5
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 0 (0x0)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Root Certificate Authority - G2
++ Validity
++ Not Before: Sep 1 00:00:00 2009 GMT
++ Not After : Dec 31 23:59:59 2037 GMT
++ Subject: C = US, ST = Arizona, L = Scottsdale, O = "Starfield Technologies, Inc.", CN = Starfield Root Certificate Authority - G2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:bd:ed:c1:03:fc:f6:8f:fc:02:b1:6f:5b:9f:48:
++ d9:9d:79:e2:a2:b7:03:61:56:18:c3:47:b6:d7:ca:
++ 3d:35:2e:89:43:f7:a1:69:9b:de:8a:1a:fd:13:20:
++ 9c:b4:49:77:32:29:56:fd:b9:ec:8c:dd:22:fa:72:
++ dc:27:61:97:ee:f6:5a:84:ec:6e:19:b9:89:2c:dc:
++ 84:5b:d5:74:fb:6b:5f:c5:89:a5:10:52:89:46:55:
++ f4:b8:75:1c:e6:7f:e4:54:ae:4b:f8:55:72:57:02:
++ 19:f8:17:71:59:eb:1e:28:07:74:c5:9d:48:be:6c:
++ b4:f4:a4:b0:f3:64:37:79:92:c0:ec:46:5e:7f:e1:
++ 6d:53:4c:62:af:cd:1f:0b:63:bb:3a:9d:fb:fc:79:
++ 00:98:61:74:cf:26:82:40:63:f3:b2:72:6a:19:0d:
++ 99:ca:d4:0e:75:cc:37:fb:8b:89:c1:59:f1:62:7f:
++ 5f:b3:5f:65:30:f8:a7:b7:4d:76:5a:1e:76:5e:34:
++ c0:e8:96:56:99:8a:b3:f0:7f:a4:cd:bd:dc:32:31:
++ 7c:91:cf:e0:5f:11:f8:6b:aa:49:5c:d1:99:94:d1:
++ a2:e3:63:5b:09:76:b5:56:62:e1:4b:74:1d:96:d4:
++ 26:d4:08:04:59:d0:98:0e:0e:e6:de:fc:c3:ec:1f:
++ 90:f1
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ 7C:0C:32:1F:A7:D9:30:7F:C4:7D:68:A3:62:A8:A1:CE:AB:07:5B:27
++ Signature Algorithm: sha256WithRSAEncryption
++ 11:59:fa:25:4f:03:6f:94:99:3b:9a:1f:82:85:39:d4:76:05:
++ 94:5e:e1:28:93:6d:62:5d:09:c2:a0:a8:d4:b0:75:38:f1:34:
++ 6a:9d:e4:9f:8a:86:26:51:e6:2c:d1:c6:2d:6e:95:20:4a:92:
++ 01:ec:b8:8a:67:7b:31:e2:67:2e:8c:95:03:26:2e:43:9d:4a:
++ 31:f6:0e:b5:0c:bb:b7:e2:37:7f:22:ba:00:a3:0e:7b:52:fb:
++ 6b:bb:3b:c4:d3:79:51:4e:cd:90:f4:67:07:19:c8:3c:46:7a:
++ 0d:01:7d:c5:58:e7:6d:e6:85:30:17:9a:24:c4:10:e0:04:f7:
++ e0:f2:7f:d4:aa:0a:ff:42:1d:37:ed:94:e5:64:59:12:20:77:
++ 38:d3:32:3e:38:81:75:96:73:fa:68:8f:b1:cb:ce:1f:c5:ec:
++ fa:9c:7e:cf:7e:b1:f1:07:2d:b6:fc:bf:ca:a4:bf:d0:97:05:
++ 4a:bc:ea:18:28:02:90:bd:54:78:09:21:71:d3:d1:7d:1d:d9:
++ 16:b0:a9:61:3d:d0:0a:00:22:fc:c7:7b:cb:09:64:45:0b:3b:
++ 40:81:f7:7d:7c:32:f5:98:ca:58:8e:7d:2a:ee:90:59:73:64:
++ f9:36:74:5e:25:a1:f5:66:05:2e:7f:39:15:a9:2a:fb:50:8b:
++ 8e:85:69:f4
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 45140b3247eb9cc8c5b4f0d7b53091f73292089e6e5a63e2749dd3aca9198eda
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 0 (0x0)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", CN = Go Daddy Root Certificate Authority - G2
++ Validity
++ Not Before: Sep 1 00:00:00 2009 GMT
++ Not After : Dec 31 23:59:59 2037 GMT
++ Subject: C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", CN = Go Daddy Root Certificate Authority - G2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:bf:71:62:08:f1:fa:59:34:f7:1b:c9:18:a3:f7:
++ 80:49:58:e9:22:83:13:a6:c5:20:43:01:3b:84:f1:
++ e6:85:49:9f:27:ea:f6:84:1b:4e:a0:b4:db:70:98:
++ c7:32:01:b1:05:3e:07:4e:ee:f4:fa:4f:2f:59:30:
++ 22:e7:ab:19:56:6b:e2:80:07:fc:f3:16:75:80:39:
++ 51:7b:e5:f9:35:b6:74:4e:a9:8d:82:13:e4:b6:3f:
++ a9:03:83:fa:a2:be:8a:15:6a:7f:de:0b:c3:b6:19:
++ 14:05:ca:ea:c3:a8:04:94:3b:46:7c:32:0d:f3:00:
++ 66:22:c8:8d:69:6d:36:8c:11:18:b7:d3:b2:1c:60:
++ b4:38:fa:02:8c:ce:d3:dd:46:07:de:0a:3e:eb:5d:
++ 7c:c8:7c:fb:b0:2b:53:a4:92:62:69:51:25:05:61:
++ 1a:44:81:8c:2c:a9:43:96:23:df:ac:3a:81:9a:0e:
++ 29:c5:1c:a9:e9:5d:1e:b6:9e:9e:30:0a:39:ce:f1:
++ 88:80:fb:4b:5d:cc:32:ec:85:62:43:25:34:02:56:
++ 27:01:91:b4:3b:70:2a:3f:6e:b1:e8:9c:88:01:7d:
++ 9f:d4:f9:db:53:6d:60:9d:bf:2c:e7:58:ab:b8:5f:
++ 46:fc:ce:c4:1b:03:3c:09:eb:49:31:5c:69:46:b3:
++ e0:47
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ 3A:9A:85:07:10:67:28:B6:EF:F6:BD:05:41:6E:20:C1:94:DA:0F:DE
++ Signature Algorithm: sha256WithRSAEncryption
++ 99:db:5d:79:d5:f9:97:59:67:03:61:f1:7e:3b:06:31:75:2d:
++ a1:20:8e:4f:65:87:b4:f7:a6:9c:bc:d8:e9:2f:d0:db:5a:ee:
++ cf:74:8c:73:b4:38:42:da:05:7b:f8:02:75:b8:fd:a5:b1:d7:
++ ae:f6:d7:de:13:cb:53:10:7e:8a:46:d1:97:fa:b7:2e:2b:11:
++ ab:90:b0:27:80:f9:e8:9f:5a:e9:37:9f:ab:e4:df:6c:b3:85:
++ 17:9d:3d:d9:24:4f:79:91:35:d6:5f:04:eb:80:83:ab:9a:02:
++ 2d:b5:10:f4:d8:90:c7:04:73:40:ed:72:25:a0:a9:9f:ec:9e:
++ ab:68:12:99:57:c6:8f:12:3a:09:a4:bd:44:fd:06:15:37:c1:
++ 9b:e4:32:a3:ed:38:e8:d8:64:f3:2c:7e:14:fc:02:ea:9f:cd:
++ ff:07:68:17:db:22:90:38:2d:7a:8d:d1:54:f1:69:e3:5f:33:
++ ca:7a:3d:7b:0a:e3:ca:7f:5f:39:e5:e2:75:ba:c5:76:18:33:
++ ce:2c:f0:2f:4c:ad:f7:b1:e7:ce:4f:a8:c4:9b:4a:54:06:c5:
++ 7f:7d:d5:08:0f:e2:1c:fe:7e:17:b8:ac:5e:f6:d4:16:b2:43:
++ 09:0c:4d:f6:a7:6b:b4:99:84:65:ca:7a:88:e2:e2:44:be:5c:
++ f7:ea:1c:f5
++-----BEGIN CERTIFICATE-----
++MIIDxTCCAq2gAwIBAgIBADANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
++EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
++EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
++ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTA5MDkwMTAwMDAwMFoXDTM3MTIzMTIz
++NTk1OVowgYMxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH
++EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjExMC8GA1UE
++AxMoR28gRGFkZHkgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIw
++DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL9xYgjx+lk09xvJGKP3gElY6SKD
++E6bFIEMBO4Tx5oVJnyfq9oQbTqC023CYxzIBsQU+B07u9PpPL1kwIuerGVZr4oAH
++/PMWdYA5UXvl+TW2dE6pjYIT5LY/qQOD+qK+ihVqf94Lw7YZFAXK6sOoBJQ7Rnwy
++DfMAZiLIjWltNowRGLfTshxgtDj6AozO091GB94KPutdfMh8+7ArU6SSYmlRJQVh
++GkSBjCypQ5Yj36w6gZoOKcUcqeldHraenjAKOc7xiID7S13MMuyFYkMlNAJWJwGR
++tDtwKj9useiciAF9n9T521NtYJ2/LOdYq7hfRvzOxBsDPAnrSTFcaUaz4EcCAwEA
++AaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYE
++FDqahQcQZyi27/a9BUFuIMGU2g/eMA0GCSqGSIb3DQEBCwUAA4IBAQCZ21151fmX
++WWcDYfF+OwYxdS2hII5PZYe096acvNjpL9DbWu7PdIxztDhC2gV7+AJ1uP2lsdeu
++9tfeE8tTEH6KRtGX+rcuKxGrkLAngPnon1rpN5+r5N9ss4UXnT3ZJE95kTXWXwTr
++gIOrmgIttRD02JDHBHNA7XIloKmf7J6raBKZV8aPEjoJpL1E/QYVN8Gb5DKj7Tjo
++2GTzLH4U/ALqn83/B2gX2yKQOC16jdFU8WnjXzPKej17CuPKf1855eJ1usV2GDPO
++LPAvTK33sefOT6jEm0pUBsV/fdUID+Ic/n4XuKxe9tQWskMJDE32p2u0mYRlynqI
++4uJEvlz36hz1
++-----END CERTIFICATE-----
++
++# 34d8a73ee208d9bcdb0d956520934b4e40e69482596e8b6f73c8426b010a6f48
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 02:03:e5:b8:82:eb:20:f8:25:27:6d:3d:66
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R3
++ Validity
++ Not Before: Jun 22 00:00:00 2016 GMT
++ Not After : Jun 22 00:00:00 2036 GMT
++ Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R3
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:1f:4f:33:87:33:29:8a:a1:84:de:cb:c7:21:58:
++ 41:89:ea:56:9d:2b:4b:85:c6:1d:4c:27:bc:7f:26:
++ 51:72:6f:e2:9f:d6:a3:ca:cc:45:14:46:8b:ad:ef:
++ 7e:86:8c:ec:b1:7e:2f:ff:a9:71:9d:18:84:45:04:
++ 41:55:6e:2b:ea:26:7f:bb:90:01:e3:4b:19:ba:e4:
++ 54:96:45:09:b1:d5:6c:91:44:ad:84:13:8e:9a:8c:
++ 0d:80:0c:32:f6:e0:27
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ C1:F1:26:BA:A0:2D:AE:85:81:CF:D3:F1:2A:12:BD:B8:0A:67:FD:BC
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:66:02:31:00:f6:e1:20:95:14:7b:54:a3:90:16:11:bf:84:
++ c8:ea:6f:6b:17:9e:1e:46:98:20:9b:9f:d3:0d:d9:ac:d3:2f:
++ cd:7c:f8:5b:2e:55:bb:bf:dd:92:f7:a4:0c:dc:31:e1:a2:02:
++ 31:00:fc:97:66:66:e5:43:16:13:83:dd:c7:df:2f:be:14:38:
++ ed:01:ce:b1:17:1a:11:75:e9:bd:03:8f:26:7e:84:e5:c9:60:
++ a6:95:d7:54:59:b7:e7:11:2c:89:d4:b9:ee:17
++-----BEGIN CERTIFICATE-----
++MIICCTCCAY6gAwIBAgINAgPluILrIPglJ209ZjAKBggqhkjOPQQDAzBHMQswCQYD
++VQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIG
++A1UEAxMLR1RTIFJvb3QgUjMwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAwMDAw
++WjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2Vz
++IExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwdjAQBgcqhkjOPQIBBgUrgQQAIgNi
++AAQfTzOHMymKoYTey8chWEGJ6ladK0uFxh1MJ7x/JlFyb+Kf1qPKzEUURout736G
++jOyxfi//qXGdGIRFBEFVbivqJn+7kAHjSxm65FSWRQmx1WyRRK2EE46ajA2ADDL2
++4CejQjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW
++BBTB8Sa6oC2uhYHP0/EqEr24Cmf9vDAKBggqhkjOPQQDAwNpADBmAjEA9uEglRR7
++VKOQFhG/hMjqb2sXnh5GmCCbn9MN2azTL818+FsuVbu/3ZL3pAzcMeGiAjEA/Jdm
++ZuVDFhOD3cffL74UOO0BzrEXGhF16b0DjyZ+hOXJYKaV11RZt+cRLInUue4X
++-----END CERTIFICATE-----
++
++# d947432abde7b7fa90fc2e6b59101b1280e0e1c7e4e40fa3c6887fff57a7f4cf
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 02:03:e5:93:6f:31:b0:13:49:88:6b:a2:17
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R1
++ Validity
++ Not Before: Jun 22 00:00:00 2016 GMT
++ Not After : Jun 22 00:00:00 2036 GMT
++ Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R1
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:b6:11:02:8b:1e:e3:a1:77:9b:3b:dc:bf:94:3e:
++ b7:95:a7:40:3c:a1:fd:82:f9:7d:32:06:82:71:f6:
++ f6:8c:7f:fb:e8:db:bc:6a:2e:97:97:a3:8c:4b:f9:
++ 2b:f6:b1:f9:ce:84:1d:b1:f9:c5:97:de:ef:b9:f2:
++ a3:e9:bc:12:89:5e:a7:aa:52:ab:f8:23:27:cb:a4:
++ b1:9c:63:db:d7:99:7e:f0:0a:5e:eb:68:a6:f4:c6:
++ 5a:47:0d:4d:10:33:e3:4e:b1:13:a3:c8:18:6c:4b:
++ ec:fc:09:90:df:9d:64:29:25:23:07:a1:b4:d2:3d:
++ 2e:60:e0:cf:d2:09:87:bb:cd:48:f0:4d:c2:c2:7a:
++ 88:8a:bb:ba:cf:59:19:d6:af:8f:b0:07:b0:9e:31:
++ f1:82:c1:c0:df:2e:a6:6d:6c:19:0e:b5:d8:7e:26:
++ 1a:45:03:3d:b0:79:a4:94:28:ad:0f:7f:26:e5:a8:
++ 08:fe:96:e8:3c:68:94:53:ee:83:3a:88:2b:15:96:
++ 09:b2:e0:7a:8c:2e:75:d6:9c:eb:a7:56:64:8f:96:
++ 4f:68:ae:3d:97:c2:84:8f:c0:bc:40:c0:0b:5c:bd:
++ f6:87:b3:35:6c:ac:18:50:7f:84:e0:4c:cd:92:d3:
++ 20:e9:33:bc:52:99:af:32:b5:29:b3:25:2a:b4:48:
++ f9:72:e1:ca:64:f7:e6:82:10:8d:e8:9d:c2:8a:88:
++ fa:38:66:8a:fc:63:f9:01:f9:78:fd:7b:5c:77:fa:
++ 76:87:fa:ec:df:b1:0e:79:95:57:b4:bd:26:ef:d6:
++ 01:d1:eb:16:0a:bb:8e:0b:b5:c5:c5:8a:55:ab:d3:
++ ac:ea:91:4b:29:cc:19:a4:32:25:4e:2a:f1:65:44:
++ d0:02:ce:aa:ce:49:b4:ea:9f:7c:83:b0:40:7b:e7:
++ 43:ab:a7:6c:a3:8f:7d:89:81:fa:4c:a5:ff:d5:8e:
++ c3:ce:4b:e0:b5:d8:b3:8e:45:cf:76:c0:ed:40:2b:
++ fd:53:0f:b0:a7:d5:3b:0d:b1:8a:a2:03:de:31:ad:
++ cc:77:ea:6f:7b:3e:d6:df:91:22:12:e6:be:fa:d8:
++ 32:fc:10:63:14:51:72:de:5d:d6:16:93:bd:29:68:
++ 33:ef:3a:66:ec:07:8a:26:df:13:d7:57:65:78:27:
++ de:5e:49:14:00:a2:00:7f:9a:a8:21:b6:a9:b1:95:
++ b0:a5:b9:0d:16:11:da:c7:6c:48:3c:40:e0:7e:0d:
++ 5a:cd:56:3c:d1:97:05:b9:cb:4b:ed:39:4b:9c:c4:
++ 3f:d2:55:13:6e:24:b0:d6:71:fa:f4:c1:ba:cc:ed:
++ 1b:f5:fe:81:41:d8:00:98:3d:3a:c8:ae:7a:98:37:
++ 18:05:95
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ E4:AF:2B:26:71:1A:2B:48:27:85:2F:52:66:2C:EF:F0:89:13:71:3E
++ Signature Algorithm: sha384WithRSAEncryption
++ 9f:aa:42:26:db:0b:9b:be:ff:1e:96:92:2e:3e:a2:65:4a:6a:
++ 98:ba:22:cb:7d:c1:3a:d8:82:0a:06:c6:f6:a5:de:c0:4e:87:
++ 66:79:a1:f9:a6:58:9c:aa:f9:b5:e6:60:e7:e0:e8:b1:1e:42:
++ 41:33:0b:37:3d:ce:89:70:15:ca:b5:24:a8:cf:6b:b5:d2:40:
++ 21:98:cf:22:34:cf:3b:c5:22:84:e0:c5:0e:8a:7c:5d:88:e4:
++ 35:24:ce:9b:3e:1a:54:1e:6e:db:b2:87:a7:fc:f3:fa:81:55:
++ 14:62:0a:59:a9:22:05:31:3e:82:d6:ee:db:57:34:bc:33:95:
++ d3:17:1b:e8:27:a2:8b:7b:4e:26:1a:7a:5a:64:b6:d1:ac:37:
++ f1:fd:a0:f3:38:ec:72:f0:11:75:9d:cb:34:52:8d:e6:76:6b:
++ 17:c6:df:86:ab:27:8e:49:2b:75:66:81:10:21:a6:ea:3e:f4:
++ ae:25:ff:7c:15:de:ce:8c:25:3f:ca:62:70:0a:f7:2f:09:66:
++ 07:c8:3f:1c:fc:f0:db:45:30:df:62:88:c1:b5:0f:9d:c3:9f:
++ 4a:de:59:59:47:c5:87:22:36:e6:82:a7:ed:0a:b9:e2:07:a0:
++ 8d:7b:7a:4a:3c:71:d2:e2:03:a1:1f:32:07:dd:1b:e4:42:ce:
++ 0c:00:45:61:80:b5:0b:20:59:29:78:bd:f9:55:cb:63:c5:3c:
++ 4c:f4:b6:ff:db:6a:5f:31:6b:99:9e:2c:c1:6b:50:a4:d7:e6:
++ 18:14:bd:85:3f:67:ab:46:9f:a0:ff:42:a7:3a:7f:5c:cb:5d:
++ b0:70:1d:2b:34:f5:d4:76:09:0c:eb:78:4c:59:05:f3:33:42:
++ c3:61:15:10:1b:77:4d:ce:22:8c:d4:85:f2:45:7d:b7:53:ea:
++ ef:40:5a:94:0a:5c:20:5f:4e:40:5d:62:22:76:df:ff:ce:61:
++ bd:8c:23:78:d2:37:02:e0:8e:de:d1:11:37:89:f6:bf:ed:49:
++ 07:62:ae:92:ec:40:1a:af:14:09:d9:d0:4e:b2:a2:f7:be:ee:
++ ee:d8:ff:dc:1a:2d:de:b8:36:71:e2:fc:79:b7:94:25:d1:48:
++ 73:5b:a1:35:e7:b3:99:67:75:c1:19:3a:2b:47:4e:d3:42:8e:
++ fd:31:c8:16:66:da:d2:0c:3c:db:b3:8e:c9:a1:0d:80:0f:7b:
++ 16:77:14:bf:ff:db:09:94:b2:93:bc:20:58:15:e9:db:71:43:
++ f3:de:10:c3:00:dc:a8:2a:95:b6:c2:d6:3f:90:6b:76:db:6c:
++ fe:8c:bc:f2:70:35:0c:dc:99:19:35:dc:d7:c8:46:63:d5:36:
++ 71:ae:57:fb:b7:82:6d:dc
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 349dfa4058c5e263123b398ae795573c4e1313c83fe68f93556cd5e8031b3c7d
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 02:03:e5:c0:68:ef:63:1a:9c:72:90:50:52
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R4
++ Validity
++ Not Before: Jun 22 00:00:00 2016 GMT
++ Not After : Jun 22 00:00:00 2036 GMT
++ Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R4
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:f3:74:73:a7:68:8b:60:ae:43:b8:35:c5:81:30:
++ 7b:4b:49:9d:fb:c1:61:ce:e6:de:46:bd:6b:d5:61:
++ 18:35:ae:40:dd:73:f7:89:91:30:5a:eb:3c:ee:85:
++ 7c:a2:40:76:3b:a9:c6:b8:47:d8:2a:e7:92:91:6a:
++ 73:e9:b1:72:39:9f:29:9f:a2:98:d3:5f:5e:58:86:
++ 65:0f:a1:84:65:06:d1:dc:8b:c9:c7:73:c8:8c:6a:
++ 2f:e5:c4:ab:d1:1d:8a
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:66:02:31:00:e8:40:ff:83:de:03:f4:9f:ae:1d:7a:a7:2e:
++ b9:af:4f:f6:83:1d:0e:2d:85:01:1d:d1:d9:6a:ec:0f:c2:af:
++ c7:5e:56:5e:5c:d5:1c:58:22:28:0b:f7:30:b6:2f:b1:7c:02:
++ 31:00:f0:61:3c:a7:f4:a0:82:e3:21:d5:84:1d:73:86:9c:2d:
++ af:ca:34:9b:f1:9f:b9:23:36:e2:bc:60:03:9d:80:b3:9a:56:
++ c8:e1:e2:bb:14:79:ca:cd:21:d4:94:b5:49:43
++-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
++
++# b085d70b964f191a73e4af0d54ae7a0e07aafdaf9b71dd0862138ab7325a24a2
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 02:03:e5:7e:f5:3f:93:fd:a5:09:21:b2:a6
++ Signature Algorithm: ecdsa-with-SHA256
++ Issuer: OU = GlobalSign ECC Root CA - R4, O = GlobalSign, CN = GlobalSign
++ Validity
++ Not Before: Nov 13 00:00:00 2012 GMT
++ Not After : Jan 19 03:14:07 2038 GMT
++ Subject: OU = GlobalSign ECC Root CA - R4, O = GlobalSign, CN = GlobalSign
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (256 bit)
++ pub:
++ 04:b8:c6:79:d3:8f:6c:25:0e:9f:2e:39:19:1c:03:
++ a4:ae:9a:e5:39:07:09:16:ca:63:b1:b9:86:f8:8a:
++ 57:c1:57:ce:42:fa:73:a1:f7:65:42:ff:1e:c1:00:
++ b2:6e:73:0e:ff:c7:21:e5:18:a4:aa:d9:71:3f:a8:
++ d4:b9:ce:8c:1d
++ ASN1 OID: prime256v1
++ NIST CURVE: P-256
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 54:B0:7B:AD:45:B8:E2:40:7F:FB:0A:6E:FB:BE:33:C9:3C:A3:84:D5
++ Signature Algorithm: ecdsa-with-SHA256
++ Signature Value:
++ 30:44:02:20:22:4f:74:72:b9:60:af:f1:e6:9c:a0:16:05:50:
++ 5f:c3:5e:3b:6e:61:74:ef:be:01:c4:be:18:48:59:61:82:32:
++ 02:20:26:9d:54:63:40:de:37:60:50:cf:c8:d8:ed:9d:82:ae:
++ 37:98:bc:a3:8f:4c:4c:a9:34:2b:6c:ef:fb:95:9b:26
++-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
++
++# 8d25cd97229dbf70356bda4eb3cc734031e24cf00fafcfd32dc76eb5841c7ea8
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 02:03:e5:ae:c5:8d:04:25:1a:ab:11:25:aa
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C = US, O = Google Trust Services LLC, CN = GTS Root R2
++ Validity
++ Not Before: Jun 22 00:00:00 2016 GMT
++ Not After : Jun 22 00:00:00 2036 GMT
++ Subject: C = US, O = Google Trust Services LLC, CN = GTS Root R2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:ce:de:fd:a6:fb:ec:ec:14:34:3c:07:06:5a:6c:
++ 59:f7:19:35:dd:f7:c1:9d:55:aa:d3:cd:3b:a4:93:
++ 72:ef:0a:fa:6d:9d:f6:f0:85:80:5b:a1:48:52:9f:
++ 39:c5:b7:ee:28:ac:ef:cb:76:68:14:b9:df:ad:01:
++ 6c:99:1f:c4:22:1d:9f:fe:72:77:e0:2c:5b:af:e4:
++ 04:bf:4f:72:a0:1a:34:98:e8:39:68:ec:95:25:7b:
++ 76:a1:e6:69:b9:85:19:bd:89:8c:fe:ad:ed:36:ea:
++ 73:bc:ff:83:e2:cb:7d:c1:d2:ce:4a:b3:8d:05:9e:
++ 8b:49:93:df:c1:5b:d0:6e:5e:f0:2e:30:2e:82:fc:
++ fa:bc:b4:17:0a:48:e5:88:9b:c5:9b:6b:de:b0:ca:
++ b4:03:f0:da:f4:90:b8:65:64:f7:5c:4c:ad:e8:7e:
++ 66:5e:99:d7:b8:c2:3e:c8:d0:13:9d:ad:ee:e4:45:
++ 7b:89:55:f7:8a:1f:62:52:84:12:b3:c2:40:97:e3:
++ 8a:1f:47:91:a6:74:5a:d2:f8:b1:63:28:10:b8:b3:
++ 09:b8:56:77:40:a2:26:98:79:c6:fe:df:25:ee:3e:
++ e5:a0:7f:d4:61:0f:51:4b:3c:3f:8c:da:e1:70:74:
++ d8:c2:68:a1:f9:c1:0c:e9:a1:e2:7f:bb:55:3c:76:
++ 06:ee:6a:4e:cc:92:88:30:4d:9a:bd:4f:0b:48:9a:
++ 84:b5:98:a3:d5:fb:73:c1:57:61:dd:28:56:75:13:
++ ae:87:8e:e7:0c:51:09:10:75:88:4c:bc:8d:f9:7b:
++ 3c:d4:22:48:1f:2a:dc:eb:6b:bb:44:b1:cb:33:71:
++ 32:46:af:ad:4a:f1:8c:e8:74:3a:ac:e7:1a:22:73:
++ 80:d2:30:f7:25:42:c7:22:3b:3b:12:ad:96:2e:c6:
++ c3:76:07:aa:20:b7:35:49:57:e9:92:49:e8:76:16:
++ 72:31:67:2b:96:7e:8a:a3:c7:94:56:22:bf:6a:4b:
++ 7e:01:21:b2:23:32:df:e4:9a:44:6d:59:5b:5d:f5:
++ 00:a0:1c:9b:c6:78:97:8d:90:ff:9b:c8:aa:b4:af:
++ 11:51:39:5e:d9:fb:67:ad:d5:5b:11:9d:32:9a:1b:
++ bd:d5:ba:5b:a5:c9:cb:25:69:53:55:27:5c:e0:ca:
++ 36:cb:88:61:fb:1e:b7:d0:cb:ee:16:fb:d3:a6:4c:
++ de:92:a5:d4:e2:df:f5:06:54:de:2e:9d:4b:b4:93:
++ 30:aa:81:ce:dd:1a:dc:51:73:0d:4f:70:e9:e5:b6:
++ 16:21:19:79:b2:e6:89:0b:75:64:ca:d5:ab:bc:09:
++ c1:18:a1:ff:d4:54:a1:85:3c:fd:14:24:03:b2:87:
++ d3:a4:b7
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ BB:FF:CA:8E:23:9F:4F:99:CA:DB:E2:68:A6:A5:15:27:17:1E:D9:0E
++ Signature Algorithm: sha384WithRSAEncryption
++ 1f:ca:ce:dd:c7:be:a1:9f:d9:27:4c:0b:dc:17:98:11:6a:88:
++ de:3d:e6:71:56:72:b2:9e:1a:4e:9c:d5:2b:98:24:5d:9b:6b:
++ 7b:b0:33:82:09:bd:df:25:46:ea:98:9e:b6:1b:fe:83:3c:d2:
++ 62:61:c1:04:ed:ce:e0:c5:c9:c8:13:13:55:e7:a8:63:ad:8c:
++ 7b:01:fe:77:30:e1:ce:68:9b:05:f8:12:ee:79:31:a0:41:45:
++ 35:28:0a:71:a4:24:4f:8c:dc:3c:82:07:5f:66:dc:7d:10:fe:
++ 0c:61:b3:05:95:ee:e1:ae:81:0f:a8:f8:c7:8f:4d:a8:23:02:
++ 26:6b:1d:83:52:55:ce:b5:2f:00:ca:80:40:e0:e1:74:ac:60:
++ f5:87:80:9d:ae:36:64:91:5d:b0:68:18:ea:8a:61:c9:77:a8:
++ 97:c4:c9:c7:a5:fc:55:4b:f3:f0:7f:b9:65:3d:27:68:d0:cc:
++ 6b:fa:53:9d:e1:91:1a:c9:5d:1a:96:6d:32:87:ed:03:20:c8:
++ 02:ce:5a:be:d9:ea:fd:b2:4d:c4:2f:1b:df:5f:7a:f5:f8:8b:
++ c6:ee:31:3a:25:51:55:67:8d:64:32:7b:e9:9e:c3:82:ba:2a:
++ 2d:e9:1e:b4:e0:48:06:a2:fc:67:af:1f:22:02:73:fb:20:0a:
++ af:9d:54:4b:a1:cd:ff:60:47:b0:3f:5d:ef:1b:56:bd:97:21:
++ 96:2d:0a:d1:5e:9d:38:02:47:6c:b9:f4:f6:23:25:b8:a0:6a:
++ 9a:2b:77:08:fa:c4:b1:28:90:26:58:08:3c:e2:7e:aa:d7:3d:
++ 6f:ba:31:88:0a:05:eb:27:b5:a1:49:ee:a0:45:54:7b:e6:27:
++ 65:99:20:21:a8:a3:bc:fb:18:96:bb:52:6f:0c:ed:83:51:4c:
++ e9:59:e2:20:60:c5:c2:65:92:82:8c:f3:10:1f:0e:8a:97:be:
++ 77:82:6d:3f:8f:1d:5d:bc:49:27:bd:cc:4f:0f:e1:ce:76:86:
++ 04:23:c5:c0:8c:12:5b:fd:db:84:a0:24:f1:48:ff:64:7c:d0:
++ be:5c:16:d1:ef:99:ad:c0:1f:fb:cb:ae:bc:38:22:06:26:64:
++ da:da:97:0e:3f:28:15:44:a8:4f:00:ca:f0:9a:cc:cf:74:6a:
++ b4:3e:3c:eb:95:ec:b5:d3:5a:d8:81:99:e9:43:18:37:eb:b3:
++ bb:d1:58:62:41:f3:66:d2:8f:aa:78:95:54:20:c3:5a:2e:74:
++ 2b:d5:d1:be:18:69:c0:ac:d5:a4:cf:39:ba:51:84:03:65:e9:
++ 62:c0:62:fe:d8:4d:55:96:e2:d0:11:fa:48:34:11:ec:9e:ed:
++ 05:1d:e4:c8:d6:1d:86:cb
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 5a2fc03f0c83b090bbfa40604b0988446c7636183df9846e17101a447fb8efd6
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 08:16:5f:8a:4c:a5:ec:00:c9:93:40:df:c4:c6:ae:23:b8:1c:5a:a4
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = HK, ST = Hong Kong, L = Hong Kong, O = Hongkong Post, CN = Hongkong Post Root CA 3
++ Validity
++ Not Before: Jun 3 02:29:46 2017 GMT
++ Not After : Jun 3 02:29:46 2042 GMT
++ Subject: C = HK, ST = Hong Kong, L = Hong Kong, O = Hongkong Post, CN = Hongkong Post Root CA 3
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:b3:88:d7:ea:ce:0f:20:4e:be:e6:d6:03:6d:ee:
++ 59:fc:c2:57:df:29:68:a1:83:0e:3e:68:c7:68:58:
++ 9c:1c:60:4b:89:43:0c:b9:d4:15:b2:ee:c1:4e:75:
++ e9:b5:a7:ef:e5:e9:35:99:e4:cc:1c:e7:4b:5f:8d:
++ 33:30:20:33:53:d9:a6:bb:d5:3e:13:8e:e9:1f:87:
++ 49:ad:50:2d:50:ca:18:be:01:58:a2:13:70:96:bb:
++ 89:88:56:80:5c:f8:bd:2c:3c:e1:4c:57:88:bb:d3:
++ b9:95:ef:cb:c7:f6:da:31:74:28:a6:e6:54:89:f5:
++ 41:31:ca:e5:26:1a:cd:82:e0:70:da:3b:29:bb:d5:
++ 03:f5:99:ba:55:f5:64:d1:60:0e:b3:89:49:b8:8a:
++ 2f:05:d2:84:45:28:7c:8f:68:50:12:78:fc:0b:b5:
++ 53:cb:c2:98:1c:84:a3:9e:b0:be:23:a4:da:dc:c8:
++ 2b:1e:da:6e:45:1e:89:98:da:f9:00:2e:06:e9:0c:
++ 3b:70:d5:50:25:88:99:cb:cd:73:60:f7:d5:ff:35:
++ 67:c5:a1:bc:5e:ab:cd:4a:b8:45:eb:c8:68:1e:0d:
++ 0d:14:46:12:e3:d2:64:62:8a:42:98:bc:b4:c6:08:
++ 08:f8:fd:a8:4c:64:9c:76:01:bd:2f:a9:6c:33:0f:
++ d8:3f:28:b8:3c:69:01:42:86:7e:69:c1:c9:06:ca:
++ e5:7a:46:65:e9:c2:d6:50:41:2e:3f:b7:e4:ed:6c:
++ d7:bf:26:01:11:a2:16:29:4a:6b:34:06:90:ec:13:
++ d2:b6:fb:6a:76:d2:3c:ed:f0:d6:2d:dd:e1:15:ec:
++ a3:9b:2f:2c:c9:3e:2b:e4:69:3b:ff:72:25:b1:36:
++ 86:5b:c7:7f:6b:8b:55:1b:4a:c5:20:61:3d:ae:cb:
++ 50:e1:08:3a:be:b0:8f:63:41:53:30:08:59:3c:98:
++ 1d:77:ba:63:91:7a:ca:10:50:60:bf:f0:d7:bc:95:
++ 87:8f:97:c5:fe:97:6a:01:94:a3:7c:5b:85:1d:2a:
++ 39:3a:d0:54:a1:d1:39:71:9d:fd:21:f9:b5:7b:f0:
++ e2:e0:02:8f:6e:96:24:25:2c:a0:1e:2c:a8:c4:89:
++ a7:ef:ed:99:06:2f:b6:0a:4c:4f:db:a2:cc:37:1a:
++ af:47:85:2d:8a:5f:c4:34:34:4c:00:fd:18:93:67:
++ 13:d1:37:e6:48:b4:8b:06:c5:57:7b:19:86:0a:79:
++ cb:00:c9:52:af:42:ff:37:8f:e1:a3:1e:7a:3d:50:
++ ab:63:06:e7:15:b5:3f:b6:45:37:94:37:b1:7e:f2:
++ 48:c3:7f:c5:75:fe:97:8d:45:8f:1a:a7:1a:72:28:
++ 1a:40:0f
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Authority Key Identifier:
++ keyid:17:9D:CD:1E:8B:D6:39:2B:70:D3:5C:D4:A0:B8:1F:B0:00:FC:C5:61
++
++ X509v3 Subject Key Identifier:
++ 17:9D:CD:1E:8B:D6:39:2B:70:D3:5C:D4:A0:B8:1F:B0:00:FC:C5:61
++ Signature Algorithm: sha256WithRSAEncryption
++ 56:d5:7b:6e:e6:22:01:d2:42:9b:18:d5:0e:d7:66:23:5c:e3:
++ fe:a0:c7:92:d2:e9:94:ad:4b:a2:c6:ec:12:7c:74:d5:48:d2:
++ 59:14:99:c0:eb:b9:d1:eb:f4:48:30:5b:ad:a7:57:73:99:a9:
++ d3:e5:b7:d1:2e:59:24:58:dc:68:2e:2e:62:d8:6a:e4:70:0b:
++ 2d:20:50:20:a4:32:95:d1:00:98:bb:d3:fd:f7:32:f2:49:ae:
++ c6:7a:e0:47:be:6e:ce:cb:a3:72:3a:2d:69:5d:cb:c8:e8:45:
++ 39:d4:fa:42:c1:11:4c:77:5d:92:fb:6a:ff:58:44:e5:eb:81:
++ 9e:af:a0:99:ad:be:a9:01:66:cb:38:1d:3c:df:43:1f:f4:4d:
++ 6e:b4:ba:17:46:fc:7d:fd:87:81:79:6a:0d:33:0f:fa:2f:f8:
++ 14:b9:80:b3:5d:4d:aa:97:e1:f9:e4:18:c5:f8:d5:38:8c:26:
++ 3c:fd:f2:28:e2:ee:5a:49:88:2c:df:79:3d:8e:9e:90:3c:bd:
++ 41:4a:3a:dd:5b:f6:9a:b4:ce:3f:25:30:7f:32:7d:a2:03:94:
++ d0:dc:7a:a1:52:de:6e:93:8d:18:26:fd:55:ac:bd:8f:9b:d2:
++ cf:af:e7:86:2c:cb:1f:09:6f:a3:6f:a9:84:d4:73:bf:4d:a1:
++ 74:1b:4e:23:60:f2:cc:0e:aa:7f:a4:9c:4c:25:a8:b2:66:3b:
++ 38:ff:d9:94:30:f6:72:84:be:68:55:10:0f:c6:73:2c:16:69:
++ 93:07:fe:b1:45:ed:bb:a2:55:6a:b0:da:b5:4a:02:25:27:85:
++ d7:b7:b7:86:44:16:89:6c:80:2b:3e:97:a9:9c:d5:7e:55:4c:
++ c6:de:45:10:1c:ea:e9:3b:9f:03:53:ee:ee:7a:01:02:16:78:
++ d4:e8:c2:be:46:76:88:13:3f:22:bb:48:12:1d:52:00:b4:02:
++ 7e:21:1a:1e:9c:25:f4:f3:3d:5e:1e:d2:1c:f9:b3:2d:b6:f7:
++ 37:5c:c6:cb:21:4e:b0:f7:99:47:18:85:c1:2b:ba:55:ae:06:
++ ea:d0:07:b2:dc:ab:d0:82:96:75:ce:d2:50:fe:99:e7:cf:2f:
++ 9f:e7:76:d1:61:2a:fb:21:bb:31:d0:aa:9f:47:a4:b2:22:ca:
++ 16:3a:50:57:c4:5b:43:67:c5:65:62:03:49:01:eb:43:d9:d8:
++ f8:9e:ad:cf:b1:63:0e:45:f4:a0:5a:2c:9b:2d:c5:a6:c0:ad:
++ a8:47:f4:27:4c:38:0d:2e:1b:49:3b:52:f4:e8:88:83:2b:54:
++ 28:d4:f2:35:52:b4:32:83:62:69:64:0c:91:9c:9f:97:ea:74:
++ 16:fd:1f:11:06:9a:9b:f4
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 9a6ec012e1a7da9dbe34194d478ad7c0db1822fb071df12981496ed104384113
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 6828503384748696800 (0x5ec3b7a6437fa4e0)
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: CN = ACCVRAIZ1, OU = PKIACCV, O = ACCV, C = ES
++ Validity
++ Not Before: May 5 09:37:37 2011 GMT
++ Not After : Dec 31 09:37:37 2030 GMT
++ Subject: CN = ACCVRAIZ1, OU = PKIACCV, O = ACCV, C = ES
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:9b:a9:ab:bf:61:4a:97:af:2f:97:66:9a:74:5f:
++ d0:d9:96:fd:cf:e2:e4:66:ef:1f:1f:47:33:c2:44:
++ a3:df:9a:de:1f:b5:54:dd:15:7c:69:35:11:6f:bb:
++ c8:0c:8e:6a:18:1e:d8:8f:d9:16:bc:10:48:36:5c:
++ f0:63:b3:90:5a:5c:24:37:d7:a3:d6:cb:09:71:b9:
++ f1:01:72:84:b0:7d:db:4d:80:cd:fc:d3:6f:c9:f8:
++ da:b6:0e:82:d2:45:85:a8:1b:68:a8:3d:e8:f4:44:
++ 6c:bd:a1:c2:cb:03:be:8c:3e:13:00:84:df:4a:48:
++ c0:e3:22:0a:e8:e9:37:a7:18:4c:b1:09:0d:23:56:
++ 7f:04:4d:d9:17:84:18:a5:c8:da:40:94:73:eb:ce:
++ 0e:57:3c:03:81:3a:9d:0a:a1:57:43:69:ac:57:6d:
++ 79:90:78:e5:b5:b4:3b:d8:bc:4c:8d:28:a1:a7:a3:
++ a7:ba:02:4e:25:d1:2a:ae:ed:ae:03:22:b8:6b:20:
++ 0f:30:28:54:95:7f:e0:ee:ce:0a:66:9d:d1:40:2d:
++ 6e:22:af:9d:1a:c1:05:19:d2:6f:c0:f2:9f:f8:7b:
++ b3:02:42:fb:50:a9:1d:2d:93:0f:23:ab:c6:c1:0f:
++ 92:ff:d0:a2:15:f5:53:09:71:1c:ff:45:13:84:e6:
++ 26:5e:f8:e0:88:1c:0a:fc:16:b6:a8:73:06:b8:f0:
++ 63:84:02:a0:c6:5a:ec:e7:74:df:70:ae:a3:83:25:
++ ea:d6:c7:97:87:93:a7:c6:8a:8a:33:97:60:37:10:
++ 3e:97:3e:6e:29:15:d6:a1:0f:d1:88:2c:12:9f:6f:
++ aa:a4:c6:42:eb:41:a2:e3:95:43:d3:01:85:6d:8e:
++ bb:3b:f3:23:36:c7:fe:3b:e0:a1:25:07:48:ab:c9:
++ 89:74:ff:08:8f:80:bf:c0:96:65:f3:ee:ec:4b:68:
++ bd:9d:88:c3:31:b3:40:f1:e8:cf:f6:38:bb:9c:e4:
++ d1:7f:d4:e5:58:9b:7c:fa:d4:f3:0e:9b:75:91:e4:
++ ba:52:2e:19:7e:d1:f5:cd:5a:19:fc:ba:06:f6:fb:
++ 52:a8:4b:99:04:dd:f8:f9:b4:8b:50:a3:4e:62:89:
++ f0:87:24:fa:83:42:c1:87:fa:d5:2d:29:2a:5a:71:
++ 7a:64:6a:d7:27:60:63:0d:db:ce:49:f5:8d:1f:90:
++ 89:32:17:f8:73:43:b8:d2:5a:93:86:61:d6:e1:75:
++ 0a:ea:79:66:76:88:4f:71:eb:04:25:d6:0a:5a:7a:
++ 93:e5:b9:4b:17:40:0f:b1:b6:b9:f5:de:4f:dc:e0:
++ b3:ac:3b:11:70:60:84:4a:43:6e:99:20:c0:29:71:
++ 0a:c0:65
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ Authority Information Access:
++ CA Issuers - URI:http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1.crt
++ OCSP - URI:http://ocsp.accv.es
++
++ X509v3 Subject Key Identifier:
++ D2:87:B4:E3:DF:37:27:93:55:F6:56:EA:81:E5:36:CC:8C:1E:3F:BD
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ keyid:D2:87:B4:E3:DF:37:27:93:55:F6:56:EA:81:E5:36:CC:8C:1E:3F:BD
++
++ X509v3 Certificate Policies:
++ Policy: X509v3 Any Policy
++ User Notice:
++ Explicit Text:
++ CPS: http://www.accv.es/legislacion_c.htm
++
++ X509v3 CRL Distribution Points:
++
++ Full Name:
++ URI:http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1_der.crl
++
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Alternative Name:
++ email:accv@accv.es
++ Signature Algorithm: sha1WithRSAEncryption
++ 97:31:02:9f:e7:fd:43:67:48:44:14:e4:29:87:ed:4c:28:66:
++ d0:8f:35:da:4d:61:b7:4a:97:4d:b5:db:90:e0:05:2e:0e:c6:
++ 79:d0:f2:97:69:0f:bd:04:47:d9:be:db:b5:29:da:9b:d9:ae:
++ a9:99:d5:d3:3c:30:93:f5:8d:a1:a8:fc:06:8d:44:f4:ca:16:
++ 95:7c:33:dc:62:8b:a8:37:f8:27:d8:09:2d:1b:ef:c8:14:27:
++ 20:a9:64:44:ff:2e:d6:75:aa:6c:4d:60:40:19:49:43:54:63:
++ da:e2:cc:ba:66:e5:4f:44:7a:5b:d9:6a:81:2b:40:d5:7f:f9:
++ 01:27:58:2c:c8:ed:48:91:7c:3f:a6:00:cf:c4:29:73:11:36:
++ de:86:19:3e:9d:ee:19:8a:1b:d5:b0:ed:8e:3d:9c:2a:c0:0d:
++ d8:3d:66:e3:3c:0d:bd:d5:94:5c:e2:e2:a7:35:1b:04:00:f6:
++ 3f:5a:8d:ea:43:bd:5f:89:1d:a9:c1:b0:cc:99:e2:4d:00:0a:
++ da:c9:27:5b:e7:13:90:5c:e4:f5:33:a2:55:6d:dc:e0:09:4d:
++ 2f:b1:26:5b:27:75:00:09:c4:62:77:29:08:5f:9e:59:ac:b6:
++ 7e:ad:9f:54:30:22:03:c1:1e:71:64:fe:f9:38:0a:96:18:dd:
++ 02:14:ac:23:cb:06:1c:1e:a4:7d:8d:0d:de:27:41:e8:ad:da:
++ 15:b7:b0:23:dd:2b:a8:d3:da:25:87:ed:e8:55:44:4d:88:f4:
++ 36:7e:84:9a:78:ac:f7:0e:56:49:0e:d6:33:25:d6:84:50:42:
++ 6c:20:12:1d:2a:d5:be:bc:f2:70:81:a4:70:60:be:05:b5:9b:
++ 9e:04:44:be:61:23:ac:e9:a5:24:8c:11:80:94:5a:a2:a2:b9:
++ 49:d2:c1:dc:d1:a7:ed:31:11:2c:9e:19:a6:ee:e1:55:e1:c0:
++ ea:cf:0d:84:e4:17:b7:a2:7c:a5:de:55:25:06:ee:cc:c0:87:
++ 5c:40:da:cc:95:3f:55:e0:35:c7:b8:84:be:b4:5d:cd:7a:83:
++ 01:72:ee:87:e6:5f:1d:ae:b5:85:c6:26:df:e6:c1:9a:e9:1e:
++ 02:47:9f:2a:a8:6d:a9:5b:cf:ec:45:77:7f:98:27:9a:32:5d:
++ 2a:e3:84:ee:c5:98:66:2f:96:20:1d:dd:d8:c3:27:d7:b0:f9:
++ fe:d9:7d:cd:d0:9f:8f:0b:14:58:51:9f:2f:8b:c3:38:2d:de:
++ e8:8f:d6:8d:87:a4:f5:56:43:16:99:2c:f4:a4:56:b4:34:b8:
++ 61:37:c9:c2:58:80:1b:a0:97:a1:fc:59:8d:e9:11:f6:d1:0f:
++ 4b:55:34:46:2a:8b:86:3b
+ -----BEGIN CERTIFICATE-----
+ MIIH0zCCBbugAwIBAgIIXsO3pkN/pOAwDQYJKoZIhvcNAQEFBQAwQjESMBAGA1UE
+ AwwJQUNDVlJBSVoxMRAwDgYDVQQLDAdQS0lBQ0NWMQ0wCwYDVQQKDARBQ0NWMQsw
+@@ -1765,272 +4107,1426 @@ d3+YJ5oyXSrjhO7FmGYvliAd3djDJ9ew+f7Zfc3Qn48LFFhRny+Lwzgt3uiP1o2H
+ pPVWQxaZLPSkVrQ0uGE3ycJYgBugl6H8WY3pEfbRD0tVNEYqi4Y7
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=TWCA Global Root CA O=TAIWAN-CA OU=Root CA
+-# Subject: CN=TWCA Global Root CA O=TAIWAN-CA OU=Root CA
+-# Label: "TWCA Global Root CA"
+-# Serial: 3262
+-# MD5 Fingerprint: f9:03:7e:cf:e6:9e:3c:73:7a:2a:90:07:69:ff:2b:96
+-# SHA1 Fingerprint: 9c:bb:48:53:f6:a4:f6:d3:52:a4:e8:32:52:55:60:13:f5:ad:af:65
+-# SHA256 Fingerprint: 59:76:90:07:f7:68:5d:0f:cd:50:87:2f:9f:95:d5:75:5a:5b:2b:45:7d:81:f3:69:2b:61:0a:98:67:2f:0e:1b
++# ebc5570c29018c4d67b1aa127baf12f703b4611ebc17b7dab5573894179b93fa
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 5d:93:8d:30:67:36:c8:06:1d:1a:c7:54:84:69:07
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = ES, O = FNMT-RCM, OU = AC RAIZ FNMT-RCM
++ Validity
++ Not Before: Oct 29 15:59:56 2008 GMT
++ Not After : Jan 1 00:00:00 2030 GMT
++ Subject: C = ES, O = FNMT-RCM, OU = AC RAIZ FNMT-RCM
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:ba:71:80:7a:4c:86:6e:7f:c8:13:6d:c0:c6:7d:
++ 1c:00:97:8f:2c:0c:23:bb:10:9a:40:a9:1a:b7:87:
++ 88:f8:9b:56:6a:fb:e6:7b:8e:8b:92:8e:a7:25:5d:
++ 59:11:db:36:2e:b7:51:17:1f:a9:08:1f:04:17:24:
++ 58:aa:37:4a:18:df:e5:39:d4:57:fd:d7:c1:2c:91:
++ 01:91:e2:22:d4:03:c0:58:fc:77:47:ec:8f:3e:74:
++ 43:ba:ac:34:8d:4d:38:76:67:8e:b0:c8:6f:30:33:
++ 58:71:5c:b4:f5:6b:6e:d4:01:50:b8:13:7e:6c:4a:
++ a3:49:d1:20:19:ee:bc:c0:29:18:65:a7:de:fe:ef:
++ dd:0a:90:21:e7:1a:67:92:42:10:98:5f:4f:30:bc:
++ 3e:1c:45:b4:10:d7:68:40:14:c0:40:fa:e7:77:17:
++ 7a:e6:0b:8f:65:5b:3c:d9:9a:52:db:b5:bd:9e:46:
++ cf:3d:eb:91:05:02:c0:96:b2:76:4c:4d:10:96:3b:
++ 92:fa:9c:7f:0f:99:df:be:23:35:45:1e:02:5c:fe:
++ b5:a8:9b:99:25:da:5e:f3:22:c3:39:f5:e4:2a:2e:
++ d3:c6:1f:c4:6c:aa:c5:1c:6a:01:05:4a:2f:d2:c5:
++ c1:a8:34:26:5d:66:a5:d2:02:21:f9:18:b7:06:f5:
++ 4e:99:6f:a8:ab:4c:51:e8:cf:50:18:c5:77:c8:39:
++ 09:2c:49:92:32:99:a8:bb:17:17:79:b0:5a:c5:e6:
++ a3:c4:59:65:47:35:83:5e:a9:e8:35:0b:99:bb:e4:
++ cd:20:c6:9b:4a:06:39:b5:68:fc:22:ba:ee:55:8c:
++ 2b:4e:ea:f3:b1:e3:fc:b6:99:9a:d5:42:fa:71:4d:
++ 08:cf:87:1e:6a:71:7d:f9:d3:b4:e9:a5:71:81:7b:
++ c2:4e:47:96:a5:f6:76:85:a3:28:8f:e9:80:6e:81:
++ 53:a5:6d:5f:b8:48:f9:c2:f9:36:a6:2e:49:ff:b8:
++ 96:c2:8c:07:b3:9b:88:58:fc:eb:1b:1c:de:2d:70:
++ e2:97:92:30:a1:89:e3:bc:55:a8:27:d6:4b:ed:90:
++ ad:8b:fa:63:25:59:2d:a8:35:dd:ca:97:33:bc:e5:
++ cd:c7:9d:d1:ec:ef:5e:0e:4a:90:06:26:63:ad:b9:
++ d9:35:2d:07:ba:76:65:2c:ac:57:8f:7d:f4:07:94:
++ d7:81:02:96:5d:a3:07:49:d5:7a:d0:57:f9:1b:e7:
++ 53:46:75:aa:b0:79:42:cb:68:71:08:e9:60:bd:39:
++ 69:ce:f4:af:c3:56:40:c7:ad:52:a2:09:e4:6f:86:
++ 47:8a:1f:eb:28:27:5d:83:20:af:04:c9:6c:56:9a:
++ 8b:46:f5
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ F7:7D:C5:FD:C4:E8:9A:1B:77:64:A7:F5:1D:A0:CC:BF:87:60:9A:6D
++ X509v3 Certificate Policies:
++ Policy: X509v3 Any Policy
++ CPS: http://www.cert.fnmt.es/dpcs/
++
++ Signature Algorithm: sha256WithRSAEncryption
++ 07:90:4a:df:f3:23:4e:f0:c3:9c:51:65:9b:9c:22:a2:8a:0c:
++ 85:f3:73:29:6b:4d:fe:01:e2:a9:0c:63:01:bf:04:67:a5:9d:
++ 98:5f:fd:01:13:fa:ec:9a:62:e9:86:fe:b6:62:d2:6e:4c:94:
++ fb:c0:75:45:7c:65:0c:f8:b2:37:cf:ac:0f:cf:8d:6f:f9:19:
++ f7:8f:ec:1e:f2:70:9e:f0:ca:b8:ef:b7:ff:76:37:76:5b:f6:
++ 6e:88:f3:af:62:32:22:93:0d:3a:6a:8e:14:66:0c:2d:53:74:
++ 57:65:1e:d5:b2:dd:23:81:3b:a5:66:23:27:67:09:8f:e1:77:
++ aa:43:cd:65:51:08:ed:51:58:fe:e6:39:f9:cb:47:84:a4:15:
++ f1:76:bb:a4:ee:a4:3b:c4:5f:ef:b2:33:96:11:18:b7:c9:65:
++ be:18:e1:a3:a4:dc:fa:18:f9:d3:bc:13:9b:39:7a:34:ba:d3:
++ 41:fb:fa:32:8a:2a:b7:2b:86:0b:69:83:38:be:cd:8a:2e:0b:
++ 70:ad:8d:26:92:ee:1e:f5:01:2b:0a:d9:d6:97:9b:6e:e0:a8:
++ 19:1c:3a:21:8b:0c:1e:40:ad:03:e7:dd:66:7e:f5:b9:20:0d:
++ 03:e8:96:f9:82:45:d4:39:e0:a0:00:5d:d7:98:e6:7d:9e:67:
++ 73:c3:9a:2a:f7:ab:8b:a1:3a:14:ef:34:bc:52:0e:89:98:9a:
++ 04:40:84:1d:7e:45:69:93:57:ce:eb:ce:f8:50:7c:4f:1c:6e:
++ 04:43:9b:f9:d6:3b:23:18:e9:ea:8e:d1:4d:46:8d:f1:3b:e4:
++ 6a:ca:ba:fb:23:b7:9b:fa:99:01:29:5a:58:5a:2d:e3:f9:d4:
++ 6d:0e:26:ad:c1:6e:34:bc:32:f8:0c:05:fa:65:a3:db:3b:37:
++ 83:22:e9:d6:dc:72:33:fd:5d:f2:20:bd:76:3c:23:da:28:f7:
++ f9:1b:eb:59:64:d5:dc:5f:72:7e:20:fc:cd:89:b5:90:67:4d:
++ 62:7a:3f:4e:ad:1d:c3:39:fe:7a:f4:28:16:df:41:f6:48:80:
++ 05:d7:0f:51:79:ac:10:ab:d4:ec:03:66:e6:6a:b0:ba:31:92:
++ 42:40:6a:be:3a:d3:72:e1:6a:37:55:bc:ac:1d:95:b7:69:61:
++ f2:43:91:74:e6:a0:d3:0a:24:46:a1:08:af:d6:da:45:19:96:
++ d4:53:1d:5b:84:79:f0:c0:f7:47:ef:8b:8f:c5:06:ae:9d:4c:
++ 62:9d:ff:46:04:f8:d3:c9:b6:10:25:40:75:fe:16:aa:c9:4a:
++ 60:86:2f:ba:ef:30:77:e4:54:e2:b8:84:99:58:80:aa:13:8b:
++ 51:3a:4f:48:f6:8b:b6:b3
+ -----BEGIN CERTIFICATE-----
+-MIIFQTCCAymgAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwUTELMAkGA1UEBhMCVFcx
+-EjAQBgNVBAoTCVRBSVdBTi1DQTEQMA4GA1UECxMHUm9vdCBDQTEcMBoGA1UEAxMT
+-VFdDQSBHbG9iYWwgUm9vdCBDQTAeFw0xMjA2MjcwNjI4MzNaFw0zMDEyMzExNTU5
+-NTlaMFExCzAJBgNVBAYTAlRXMRIwEAYDVQQKEwlUQUlXQU4tQ0ExEDAOBgNVBAsT
+-B1Jvb3QgQ0ExHDAaBgNVBAMTE1RXQ0EgR2xvYmFsIFJvb3QgQ0EwggIiMA0GCSqG
+-SIb3DQEBAQUAA4ICDwAwggIKAoICAQCwBdvI64zEbooh745NnHEKH1Jw7W2CnJfF
+-10xORUnLQEK1EjRsGcJ0pDFfhQKX7EMzClPSnIyOt7h52yvVavKOZsTuKwEHktSz
+-0ALfUPZVr2YOy+BHYC8rMjk1Ujoog/h7FsYYuGLWRyWRzvAZEk2tY/XTP3VfKfCh
+-MBwqoJimFb3u/Rk28OKRQ4/6ytYQJ0lM793B8YVwm8rqqFpD/G2Gb3PpN0Wp8DbH
+-zIh1HrtsBv+baz4X7GGqcXzGHaL3SekVtTzWoWH1EfcFbx39Eb7QMAfCKbAJTibc
+-46KokWofwpFFiFzlmLhxpRUZyXx1EcxwdE8tmx2RRP1WKKD+u4ZqyPpcC1jcxkt2
+-yKsi2XMPpfRaAok/T54igu6idFMqPVMnaR1sjjIsZAAmY2E2TqNGtz99sy2sbZCi
+-laLOz9qC5wc0GZbpuCGqKX6mOL6OKUohZnkfs8O1CWfe1tQHRvMq2uYiN2DLgbYP
+-oA/pyJV/v1WRBXrPPRXAb94JlAGD1zQbzECl8LibZ9WYkTunhHiVJqRaCPgrdLQA
+-BDzfuBSO6N+pjWxnkjMdwLfS7JLIvgm/LCkFbwJrnu+8vyq8W8BQj0FwcYeyTbcE
+-qYSjMq+u7msXi7Kx/mzhkIyIqJdIzshNy/MGz19qCkKxHh53L46g5pIOBvwFItIm
+-4TFRfTLcDwIDAQABoyMwITAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB
+-/zANBgkqhkiG9w0BAQsFAAOCAgEAXzSBdu+WHdXltdkCY4QWwa6gcFGn90xHNcgL
+-1yg9iXHZqjNB6hQbbCEAwGxCGX6faVsgQt+i0trEfJdLjbDorMjupWkEmQqSpqsn
+-LhpNgb+E1HAerUf+/UqdM+DyucRFCCEK2mlpc3INvjT+lIutwx4116KD7+U4x6WF
+-H6vPNOw/KP4M8VeGTslV9xzU2KV9Bnpv1d8Q34FOIWWxtuEXeZVFBs5fzNxGiWNo
+-RI2T9GRwoD2dKAXDOXC4Ynsg/eTb6QihuJ49CcdP+yz4k3ZB3lLg4VfSnQO8d57+
+-nile98FRYB/e2guyLXW3Q0iT5/Z5xoRdgFlglPx4mI88k1HtQJAH32RjJMtOcQWh
+-15QaiDLxInQirqWm2BJpTGCjAu4r7NRjkgtevi92a6O2JryPA9gK8kxkRr05YuWW
+-6zRjESjMlfGt7+/cgFhI6Uu46mWs6fyAtbXIRfmswZ/ZuepiiI7E8UuDEq3mi4TW
+-nsLrgxifarsbJGAzcMzs9zLzXNl5fe+epP7JI8Mk7hWSsT2RTyaGvWZzJBPqpK5j
+-wa19hAM8EHiGG3njxPPyBJUgriOCxLM6AGK/5jYk4Ve6xx6QddVfP5VhK8E7zeWz
+-aGHQRiapIVJpLesux+t3zqY6tQMzT3bR51xUAV3LePTJDL/PEo4XLSNolOer/qmy
+-KwbQBM0=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+ -----END CERTIFICATE-----
+
+-# Issuer: CN=TeliaSonera Root CA v1 O=TeliaSonera
+-# Subject: CN=TeliaSonera Root CA v1 O=TeliaSonera
+-# Label: "TeliaSonera Root CA v1"
+-# Serial: 199041966741090107964904287217786801558
+-# MD5 Fingerprint: 37:41:49:1b:18:56:9a:26:f5:ad:c2:66:fb:40:a5:4c
+-# SHA1 Fingerprint: 43:13:bb:96:f1:d5:86:9b:c1:4e:6a:92:f6:cf:f6:34:69:87:82:37
+-# SHA256 Fingerprint: dd:69:36:fe:21:f8:f0:77:c1:23:a1:a5:21:c1:22:24:f7:22:55:b7:3e:03:a7:26:06:93:e8:a2:4b:0f:a3:89
++# 46edc3689046d53a453fb3104ab80dcaec658b2660ea1629dd7e867990648716
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 1 (0x1)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = TR, L = Gebze - Kocaeli, O = Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, OU = Kamu Sertifikasyon Merkezi - Kamu SM, CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
++ Validity
++ Not Before: Nov 25 08:25:55 2013 GMT
++ Not After : Oct 25 08:25:55 2043 GMT
++ Subject: C = TR, L = Gebze - Kocaeli, O = Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, OU = Kamu Sertifikasyon Merkezi - Kamu SM, CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:af:75:30:33:aa:bb:6b:d3:99:2c:12:37:84:d9:
++ 8d:7b:97:80:d3:6e:e7:ff:9b:50:95:3e:90:95:56:
++ 42:d7:19:7c:26:84:8d:92:fa:01:1d:3a:0f:e2:64:
++ 38:b7:8c:bc:e8:88:f9:8b:24:ab:2e:a3:f5:37:e4:
++ 40:8e:18:25:79:83:75:1f:3b:ff:6c:a8:c5:c6:56:
++ f8:b4:ed:8a:44:a3:ab:6c:4c:fc:1d:d0:dc:ef:68:
++ bd:cf:e4:aa:ce:f0:55:f7:a2:34:d4:83:6b:37:7c:
++ 1c:c2:fe:b5:03:ec:57:ce:bc:b4:b5:c5:ed:00:0f:
++ 53:37:2a:4d:f4:4f:0c:83:fb:86:cf:cb:fe:8c:4e:
++ bd:87:f9:a7:8b:21:57:9c:7a:df:03:67:89:2c:9d:
++ 97:61:a7:10:b8:55:90:7f:0e:2d:27:38:74:df:e7:
++ fd:da:4e:12:e3:4d:15:22:02:c8:e0:e0:fc:0f:ad:
++ 8a:d7:c9:54:50:cc:3b:0f:ca:16:80:84:d0:51:56:
++ c3:8e:56:7f:89:22:33:2f:e6:85:0a:bd:a5:a8:1b:
++ 36:de:d3:dc:2c:6d:3b:c7:13:bd:59:23:2c:e6:e5:
++ a4:f7:d8:0b:ed:ea:90:40:44:a8:95:bb:93:d5:d0:
++ 80:34:b6:46:78:0e:1f:00:93:46:e1:ee:e9:f9:ec:
++ 4f:17
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 65:3F:C7:8A:86:C6:3C:DD:3C:54:5C:35:F8:3A:ED:52:0C:47:57:C8
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: sha256WithRSAEncryption
++ 2a:3f:e1:f1:32:8e:ae:e1:98:5c:4b:5e:cf:6b:1e:6a:09:d2:
++ 22:a9:12:c7:5e:57:7d:73:56:64:80:84:7a:93:e4:09:b9:10:
++ cd:9f:2a:27:e1:00:77:be:48:c8:35:a8:81:9f:e4:b8:2c:c9:
++ 7f:0e:b0:d2:4b:37:5d:ea:b9:d5:0b:5e:34:bd:f4:73:29:c3:
++ ed:26:15:9c:7e:08:53:8a:58:8d:d0:4b:28:df:c1:b3:df:20:
++ f3:f9:e3:e3:3a:df:cc:9c:94:d8:4e:4f:c3:6b:17:b7:f7:72:
++ e8:ad:66:33:b5:25:53:ab:e0:f8:4c:a9:9d:fd:f2:0d:ba:ae:
++ b9:d9:aa:c6:6b:f9:93:bb:ae:ab:b8:97:3c:03:1a:ba:43:c6:
++ 96:b9:45:72:38:b3:a7:a1:96:3d:91:7b:7e:c0:21:53:4c:87:
++ ed:f2:0b:54:95:51:93:d5:22:a5:0d:8a:f1:93:0e:3e:54:0e:
++ b0:d8:c9:4e:dc:f2:31:32:56:ea:64:f9:ea:b5:9d:16:66:42:
++ 72:f3:7f:d3:b1:31:43:fc:a4:8e:17:f1:6d:23:ab:94:66:f8:
++ ad:fb:0f:08:6e:26:2d:7f:17:07:09:b2:8c:fb:50:c0:9f:96:
++ 8d:cf:b6:fd:00:9d:5a:14:9a:bf:02:44:f5:c1:c2:9f:22:5e:
++ a2:0f:a1:e3
+ -----BEGIN CERTIFICATE-----
+-MIIFODCCAyCgAwIBAgIRAJW+FqD3LkbxezmCcvqLzZYwDQYJKoZIhvcNAQEFBQAw
+-NzEUMBIGA1UECgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJv
+-b3QgQ0EgdjEwHhcNMDcxMDE4MTIwMDUwWhcNMzIxMDE4MTIwMDUwWjA3MRQwEgYD
+-VQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UEAwwWVGVsaWFTb25lcmEgUm9vdCBDQSB2
+-MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMK+6yfwIaPzaSZVfp3F
+-VRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65ItqwA3GV1
+-7CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+X
+-Z75Ljo1kB1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+
+-/jXh7VB7qTCNGdMJjmhnXb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs
+-81Mt8Bz17Ww5OXOAFshSsCPN4D7c3TxHoLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkm
+-dtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+JWov3F0fUTPHSiXk+TT2YqGHe
+-Oh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0hADnJoWjiUIMu
+-sDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4
+-pgd7gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fs
+-slESl1MpWtTwEhDcTwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQ
+-arMCpgKIv7NHfirZ1fpoeDVNAgMBAAGjPzA9MA8GA1UdEwEB/wQFMAMBAf8wCwYD
+-VR0PBAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1j5qWDNXr+nuqF+gTEjANBgkqhkiG
+-9w0BAQUFAAOCAgEAvuRcYk4k9AwI//DTDGjkk0kiP0Qnb7tt3oNmzqjMDfz1mgbl
+-dxSR651Be5kqhOX//CHBXfDkH1e3damhXwIm/9fH907eT/j3HEbAek9ALCI18Bmx
+-0GtnLLCo4MBANzX2hFxc469CeP6nyQ1Q6g2EdvZR74NTxnr/DlZJLo961gzmJ1Tj
+-TQpgcmLNkQfWpb/ImWvtxBnmq0wROMVvMeJuScg/doAmAyYp4Db29iBT4xdwNBed
+-Y2gea+zDTYa4EzAvXUYNR0PVG6pZDrlcjQZIrXSHX8f8MVRBE+LHIQ6e4B4N4cB7
+-Q4WQxYpYxmUKeFfyxiMPAdkgS94P+5KFdSpcc41teyWRyu5FrgZLAMzTsVlQ2jqI
+-OylDRl6XK1TOU2+NSueW+r9xDkKLfP0ooNBIytrEgUy7onOTJsjrDNYmiLbAJM+7
+-vVvrdX3pCI6GMyx5dwlppYn8s3CQh3aP0yK7Qs69cwsgJirQmz1wHiRszYd2qReW
+-t88NkvuOGKmYSdGe/mBEciG5Ge3C9THxOUiIkCR1VBatzvT4aRRkOfujuLpwQMcn
+-HL/EVlP6Y2XQ8xwOFvVrhlhNGNTkDY6lnVuR3HYkUD/GKvvZt5y11ubQ2egZixVx
+-SK236thZiNSQvxaz2emsWWFUyBy6ysHK4bkgTI86k4mloMy/0/Z1pHWWbVY=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+ -----END CERTIFICATE-----
+
+-# Issuer: CN=E-Tugra Certification Authority O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş. OU=E-Tugra Sertifikasyon Merkezi
+-# Subject: CN=E-Tugra Certification Authority O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş. OU=E-Tugra Sertifikasyon Merkezi
+-# Label: "E-Tugra Certification Authority"
+-# Serial: 7667447206703254355
+-# MD5 Fingerprint: b8:a1:03:63:b0:bd:21:71:70:8a:6f:13:3a:bb:79:49
+-# SHA1 Fingerprint: 51:c6:e7:08:49:06:6e:f3:92:d4:5c:a0:0d:6d:a3:62:8f:c3:52:39
+-# SHA256 Fingerprint: b0:bf:d5:2b:b0:d7:d9:bd:92:bf:5d:4d:c1:3d:a2:55:c0:2c:54:2f:37:83:65:ea:89:39:11:f5:5e:55:f2:3c
++# 5d56499be4d2e08bcfcad08a3e38723d50503bde706948e42f55603019e528ae
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 0a:01:42:80:00:00:01:45:23:c8:44:b5:00:00:00:02
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = US, O = IdenTrust, CN = IdenTrust Commercial Root CA 1
++ Validity
++ Not Before: Jan 16 18:12:23 2014 GMT
++ Not After : Jan 16 18:12:23 2034 GMT
++ Subject: C = US, O = IdenTrust, CN = IdenTrust Commercial Root CA 1
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:a7:50:19:de:3f:99:3d:d4:33:46:f1:6f:51:61:
++ 82:b2:a9:4f:8f:67:89:5d:84:d9:53:dd:0c:28:d9:
++ d7:f0:ff:ae:95:43:72:99:f9:b5:5d:7c:8a:c1:42:
++ e1:31:50:74:d1:81:0d:7c:cd:9b:21:ab:43:e2:ac:
++ ad:5e:86:6e:f3:09:8a:1f:5a:32:bd:a2:eb:94:f9:
++ e8:5c:0a:ec:ff:98:d2:af:71:b3:b4:53:9f:4e:87:
++ ef:92:bc:bd:ec:4f:32:30:88:4b:17:5e:57:c4:53:
++ c2:f6:02:97:8d:d9:62:2b:bf:24:1f:62:8d:df:c3:
++ b8:29:4b:49:78:3c:93:60:88:22:fc:99:da:36:c8:
++ c2:a2:d4:2c:54:00:67:35:6e:73:bf:02:58:f0:a4:
++ dd:e5:b0:a2:26:7a:ca:e0:36:a5:19:16:f5:fd:b7:
++ ef:ae:3f:40:f5:6d:5a:04:fd:ce:34:ca:24:dc:74:
++ 23:1b:5d:33:13:12:5d:c4:01:25:f6:30:dd:02:5d:
++ 9f:e0:d5:47:bd:b4:eb:1b:a1:bb:49:49:d8:9f:5b:
++ 02:f3:8a:e4:24:90:e4:62:4f:4f:c1:af:8b:0e:74:
++ 17:a8:d1:72:88:6a:7a:01:49:cc:b4:46:79:c6:17:
++ b1:da:98:1e:07:59:fa:75:21:85:65:dd:90:56:ce:
++ fb:ab:a5:60:9d:c4:9d:f9:52:b0:8b:bd:87:f9:8f:
++ 2b:23:0a:23:76:3b:f7:33:e1:c9:00:f3:69:f9:4b:
++ a2:e0:4e:bc:7e:93:39:84:07:f7:44:70:7e:fe:07:
++ 5a:e5:b1:ac:d1:18:cc:f2:35:e5:49:49:08:ca:56:
++ c9:3d:fb:0f:18:7d:8b:3b:c1:13:c2:4d:8f:c9:4f:
++ 0e:37:e9:1f:a1:0e:6a:df:62:2e:cb:35:06:51:79:
++ 2c:c8:25:38:f4:fa:4b:a7:89:5c:9c:d2:e3:0d:39:
++ 86:4a:74:7c:d5:59:87:c2:3f:4e:0c:5c:52:f4:3d:
++ f7:52:82:f1:ea:a3:ac:fd:49:34:1a:28:f3:41:88:
++ 3a:13:ee:e8:de:ff:99:1d:5f:ba:cb:e8:1e:f2:b9:
++ 50:60:c0:31:d3:73:e5:ef:be:a0:ed:33:0b:74:be:
++ 20:20:c4:67:6c:f0:08:03:7a:55:80:7f:46:4e:96:
++ a7:f4:1e:3e:e1:f6:d8:09:e1:33:64:2b:63:d7:32:
++ 5e:9f:f9:c0:7b:0f:78:6f:97:bc:93:9a:f9:9c:12:
++ 90:78:7a:80:87:15:d7:72:74:9c:55:74:78:b1:ba:
++ e1:6e:70:04:ba:4f:a0:ba:68:c3:7b:ff:31:f0:73:
++ 3d:3d:94:2a:b1:0b:41:0e:a0:fe:4d:88:65:6b:79:
++ 33:b4:d7
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ ED:44:19:C0:D3:F0:06:8B:EE:A4:7B:BE:42:E7:26:54:C8:8E:36:76
++ Signature Algorithm: sha256WithRSAEncryption
++ 0d:ae:90:32:f6:a6:4b:7c:44:76:19:61:1e:27:28:cd:5e:54:
++ ef:25:bc:e3:08:90:f9:29:d7:ae:68:08:e1:94:00:58:ef:2e:
++ 2e:7e:53:52:8c:b6:5c:07:ea:88:ba:99:8b:50:94:d7:82:80:
++ df:61:09:00:93:ad:0d:14:e6:ce:c1:f2:37:94:78:b0:5f:9c:
++ b3:a2:73:b8:8f:05:93:38:cd:8d:3e:b0:b8:fb:c0:cf:b1:f2:
++ ec:2d:2d:1b:cc:ec:aa:9a:b3:aa:60:82:1b:2d:3b:c3:84:3d:
++ 57:8a:96:1e:9c:75:b8:d3:30:cd:60:08:83:90:d3:8e:54:f1:
++ 4d:66:c0:5d:74:03:40:a3:ee:85:7e:c2:1f:77:9c:06:e8:c1:
++ a7:18:5d:52:95:ed:c9:dd:25:9e:6d:fa:a9:ed:a3:3a:34:d0:
++ 59:7b:da:ed:50:f3:35:bf:ed:eb:14:4d:31:c7:60:f4:da:f1:
++ 87:9c:e2:48:e2:c6:c5:37:fb:06:10:fa:75:59:66:31:47:29:
++ da:76:9a:1c:e9:82:ae:ef:9a:b9:51:f7:88:23:9a:69:95:62:
++ 3c:e5:55:80:36:d7:54:02:ff:f1:b9:5d:ce:d4:23:6f:d8:45:
++ 84:4a:5b:65:ef:89:0c:dd:14:a7:20:cb:18:a5:25:b4:0d:f9:
++ 01:f0:a2:d2:f4:00:c8:74:8e:a1:2a:48:8e:65:db:13:c4:e2:
++ 25:17:7d:eb:be:87:5b:17:20:54:51:93:4a:53:03:0b:ec:5d:
++ ca:33:ed:62:fd:45:c7:2f:5b:dc:58:a0:80:39:e6:fa:d7:fe:
++ 13:14:a6:ed:3d:94:4a:42:74:d4:c3:77:59:73:cd:8f:46:be:
++ 55:38:ef:fa:e8:91:32:ea:97:58:04:22:de:38:c3:cc:bc:6d:
++ c9:33:3a:6a:0a:69:3f:a0:c8:ea:72:8f:8c:63:86:23:bd:6d:
++ 3c:96:9e:95:e0:49:4c:aa:a2:b9:2a:1b:9c:36:81:78:ed:c3:
++ e8:46:e2:26:59:44:75:1e:d9:75:89:51:cd:10:84:9d:61:60:
++ cb:5d:f9:97:22:4d:8e:98:e6:e3:7f:f6:5b:bb:ae:cd:ca:4a:
++ 81:6b:5e:0b:f3:51:e1:74:2b:e9:7e:27:a7:d9:99:49:4e:f8:
++ a5:80:db:25:0f:1c:63:62:8a:c9:33:67:6b:3c:10:83:c6:ad:
++ de:a8:cd:16:8e:8d:f0:07:37:71:9f:f2:ab:fc:41:f5:c1:8b:
++ ec:00:37:5d:09:e5:4e:80:ef:fa:b1:5c:38:06:a5:1b:4a:e1:
++ dc:38:2d:3c:dc:ab:1f:90:1a:d5:4a:9c:ee:d1:70:6c:cc:ee:
++ f4:57:f8:18:ba:84:6e:87
+ -----BEGIN CERTIFICATE-----
+-MIIGSzCCBDOgAwIBAgIIamg+nFGby1MwDQYJKoZIhvcNAQELBQAwgbIxCzAJBgNV
+-BAYTAlRSMQ8wDQYDVQQHDAZBbmthcmExQDA+BgNVBAoMN0UtVHXEn3JhIEVCRyBC
+-aWxpxZ9pbSBUZWtub2xvamlsZXJpIHZlIEhpem1ldGxlcmkgQS7Fni4xJjAkBgNV
+-BAsMHUUtVHVncmEgU2VydGlmaWthc3lvbiBNZXJrZXppMSgwJgYDVQQDDB9FLVR1
+-Z3JhIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTEzMDMwNTEyMDk0OFoXDTIz
+-MDMwMzEyMDk0OFowgbIxCzAJBgNVBAYTAlRSMQ8wDQYDVQQHDAZBbmthcmExQDA+
+-BgNVBAoMN0UtVHXEn3JhIEVCRyBCaWxpxZ9pbSBUZWtub2xvamlsZXJpIHZlIEhp
+-em1ldGxlcmkgQS7Fni4xJjAkBgNVBAsMHUUtVHVncmEgU2VydGlmaWthc3lvbiBN
+-ZXJrZXppMSgwJgYDVQQDDB9FLVR1Z3JhIENlcnRpZmljYXRpb24gQXV0aG9yaXR5
+-MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4vU/kwVRHoViVF56C/UY
+-B4Oufq9899SKa6VjQzm5S/fDxmSJPZQuVIBSOTkHS0vdhQd2h8y/L5VMzH2nPbxH
+-D5hw+IyFHnSOkm0bQNGZDbt1bsipa5rAhDGvykPL6ys06I+XawGb1Q5KCKpbknSF
+-Q9OArqGIW66z6l7LFpp3RMih9lRozt6Plyu6W0ACDGQXwLWTzeHxE2bODHnv0ZEo
+-q1+gElIwcxmOj+GMB6LDu0rw6h8VqO4lzKRG+Bsi77MOQ7osJLjFLFzUHPhdZL3D
+-k14opz8n8Y4e0ypQBaNV2cvnOVPAmJ6MVGKLJrD3fY185MaeZkJVgkfnsliNZvcH
+-fC425lAcP9tDJMW/hkd5s3kc91r0E+xs+D/iWR+V7kI+ua2oMoVJl0b+SzGPWsut
+-dEcf6ZG33ygEIqDUD13ieU/qbIWGvaimzuT6w+Gzrt48Ue7LE3wBf4QOXVGUnhMM
+-ti6lTPk5cDZvlsouDERVxcr6XQKj39ZkjFqzAQqptQpHF//vkUAqjqFGOjGY5RH8
+-zLtJVor8udBhmm9lbObDyz51Sf6Pp+KJxWfXnUYTTjF2OySznhFlhqt/7x3U+Lzn
+-rFpct1pHXFXOVbQicVtbC/DP3KBhZOqp12gKY6fgDT+gr9Oq0n7vUaDmUStVkhUX
+-U8u3Zg5mTPj5dUyQ5xJwx0UCAwEAAaNjMGEwHQYDVR0OBBYEFC7j27JJ0JxUeVz6
+-Jyr+zE7S6E5UMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAULuPbsknQnFR5
+-XPonKv7MTtLoTlQwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4ICAQAF
+-Nzr0TbdF4kV1JI+2d1LoHNgQk2Xz8lkGpD4eKexd0dCrfOAKkEh47U6YA5n+KGCR
+-HTAduGN8qOY1tfrTYXbm1gdLymmasoR6d5NFFxWfJNCYExL/u6Au/U5Mh/jOXKqY
+-GwXgAEZKgoClM4so3O0409/lPun++1ndYYRP0lSWE2ETPo+Aab6TR7U1Q9Jauz1c
+-77NCR807VRMGsAnb/WP2OogKmW9+4c4bU2pEZiNRCHu8W1Ki/QY3OEBhj0qWuJA3
+-+GbHeJAAFS6LrVE1Uweoa2iu+U48BybNCAVwzDk/dr2l02cmAYamU9JgO3xDf1WK
+-vJUawSg5TB9D0pH0clmKuVb8P7Sd2nCcdlqMQ1DujjByTd//SffGqWfZbawCEeI6
+-FiWnWAjLb1NBnEg4R2gz0dfHj9R0IdTDBZB6/86WiLEVKV0jq9BgoRJP3vQXzTLl
+-yb/IQ639Lo7xr+L0mPoSHyDYwKcMhcWQ9DstliaxLL5Mq+ux0orJ23gTDx4JnW2P
+-AJ8C2sH6H3p6CcRK5ogql5+Ji/03X186zjhZhkuvcQu02PJwT58yE+Owp1fl2tpD
+-y4Q08ijE6m30Ku/Ba3ba+367hTzSU8JNvnHhRdH9I2cNE3X7z2VnIp2usAnRCf8d
+-NL/+I5c30jn6PQ0GC7TbO6Orb1wdtn7os4I07QZcJA==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+ -----END CERTIFICATE-----
+
+-# Issuer: CN=T-TeleSec GlobalRoot Class 2 O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center
+-# Subject: CN=T-TeleSec GlobalRoot Class 2 O=T-Systems Enterprise Services GmbH OU=T-Systems Trust Center
+-# Label: "T-TeleSec GlobalRoot Class 2"
+-# Serial: 1
+-# MD5 Fingerprint: 2b:9b:9e:e4:7b:6c:1f:00:72:1a:cc:c1:77:79:df:6a
+-# SHA1 Fingerprint: 59:0d:2d:7d:88:4f:40:2e:61:7e:a5:62:32:17:65:cf:17:d8:94:e9
+-# SHA256 Fingerprint: 91:e2:f5:78:8d:58:10:eb:a7:ba:58:73:7d:e1:54:8a:8e:ca:cd:01:45:98:bc:0b:14:3e:04:1b:17:05:25:52
++# 96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 82:10:cf:b0:d2:40:e3:59:44:63:e0:bb:63:82:8b:00
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = US, O = Internet Security Research Group, CN = ISRG Root X1
++ Validity
++ Not Before: Jun 4 11:04:38 2015 GMT
++ Not After : Jun 4 11:04:38 2035 GMT
++ Subject: C = US, O = Internet Security Research Group, CN = ISRG Root X1
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:ad:e8:24:73:f4:14:37:f3:9b:9e:2b:57:28:1c:
++ 87:be:dc:b7:df:38:90:8c:6e:3c:e6:57:a0:78:f7:
++ 75:c2:a2:fe:f5:6a:6e:f6:00:4f:28:db:de:68:86:
++ 6c:44:93:b6:b1:63:fd:14:12:6b:bf:1f:d2:ea:31:
++ 9b:21:7e:d1:33:3c:ba:48:f5:dd:79:df:b3:b8:ff:
++ 12:f1:21:9a:4b:c1:8a:86:71:69:4a:66:66:6c:8f:
++ 7e:3c:70:bf:ad:29:22:06:f3:e4:c0:e6:80:ae:e2:
++ 4b:8f:b7:99:7e:94:03:9f:d3:47:97:7c:99:48:23:
++ 53:e8:38:ae:4f:0a:6f:83:2e:d1:49:57:8c:80:74:
++ b6:da:2f:d0:38:8d:7b:03:70:21:1b:75:f2:30:3c:
++ fa:8f:ae:dd:da:63:ab:eb:16:4f:c2:8e:11:4b:7e:
++ cf:0b:e8:ff:b5:77:2e:f4:b2:7b:4a:e0:4c:12:25:
++ 0c:70:8d:03:29:a0:e1:53:24:ec:13:d9:ee:19:bf:
++ 10:b3:4a:8c:3f:89:a3:61:51:de:ac:87:07:94:f4:
++ 63:71:ec:2e:e2:6f:5b:98:81:e1:89:5c:34:79:6c:
++ 76:ef:3b:90:62:79:e6:db:a4:9a:2f:26:c5:d0:10:
++ e1:0e:de:d9:10:8e:16:fb:b7:f7:a8:f7:c7:e5:02:
++ 07:98:8f:36:08:95:e7:e2:37:96:0d:36:75:9e:fb:
++ 0e:72:b1:1d:9b:bc:03:f9:49:05:d8:81:dd:05:b4:
++ 2a:d6:41:e9:ac:01:76:95:0a:0f:d8:df:d5:bd:12:
++ 1f:35:2f:28:17:6c:d2:98:c1:a8:09:64:77:6e:47:
++ 37:ba:ce:ac:59:5e:68:9d:7f:72:d6:89:c5:06:41:
++ 29:3e:59:3e:dd:26:f5:24:c9:11:a7:5a:a3:4c:40:
++ 1f:46:a1:99:b5:a7:3a:51:6e:86:3b:9e:7d:72:a7:
++ 12:05:78:59:ed:3e:51:78:15:0b:03:8f:8d:d0:2f:
++ 05:b2:3e:7b:4a:1c:4b:73:05:12:fc:c6:ea:e0:50:
++ 13:7c:43:93:74:b3:ca:74:e7:8e:1f:01:08:d0:30:
++ d4:5b:71:36:b4:07:ba:c1:30:30:5c:48:b7:82:3b:
++ 98:a6:7d:60:8a:a2:a3:29:82:cc:ba:bd:83:04:1b:
++ a2:83:03:41:a1:d6:05:f1:1b:c2:b6:f0:a8:7c:86:
++ 3b:46:a8:48:2a:88:dc:76:9a:76:bf:1f:6a:a5:3d:
++ 19:8f:eb:38:f3:64:de:c8:2b:0d:0a:28:ff:f7:db:
++ e2:15:42:d4:22:d0:27:5d:e1:79:fe:18:e7:70:88:
++ ad:4e:e6:d9:8b:3a:c6:dd:27:51:6e:ff:bc:64:f5:
++ 33:43:4f
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
++ Signature Algorithm: sha256WithRSAEncryption
++ 55:1f:58:a9:bc:b2:a8:50:d0:0c:b1:d8:1a:69:20:27:29:08:
++ ac:61:75:5c:8a:6e:f8:82:e5:69:2f:d5:f6:56:4b:b9:b8:73:
++ 10:59:d3:21:97:7e:e7:4c:71:fb:b2:d2:60:ad:39:a8:0b:ea:
++ 17:21:56:85:f1:50:0e:59:eb:ce:e0:59:e9:ba:c9:15:ef:86:
++ 9d:8f:84:80:f6:e4:e9:91:90:dc:17:9b:62:1b:45:f0:66:95:
++ d2:7c:6f:c2:ea:3b:ef:1f:cf:cb:d6:ae:27:f1:a9:b0:c8:ae:
++ fd:7d:7e:9a:fa:22:04:eb:ff:d9:7f:ea:91:2b:22:b1:17:0e:
++ 8f:f2:8a:34:5b:58:d8:fc:01:c9:54:b9:b8:26:cc:8a:88:33:
++ 89:4c:2d:84:3c:82:df:ee:96:57:05:ba:2c:bb:f7:c4:b7:c7:
++ 4e:3b:82:be:31:c8:22:73:73:92:d1:c2:80:a4:39:39:10:33:
++ 23:82:4c:3c:9f:86:b2:55:98:1d:be:29:86:8c:22:9b:9e:e2:
++ 6b:3b:57:3a:82:70:4d:dc:09:c7:89:cb:0a:07:4d:6c:e8:5d:
++ 8e:c9:ef:ce:ab:c7:bb:b5:2b:4e:45:d6:4a:d0:26:cc:e5:72:
++ ca:08:6a:a5:95:e3:15:a1:f7:a4:ed:c9:2c:5f:a5:fb:ff:ac:
++ 28:02:2e:be:d7:7b:bb:e3:71:7b:90:16:d3:07:5e:46:53:7c:
++ 37:07:42:8c:d3:c4:96:9c:d5:99:b5:2a:e0:95:1a:80:48:ae:
++ 4c:39:07:ce:cc:47:a4:52:95:2b:ba:b8:fb:ad:d2:33:53:7d:
++ e5:1d:4d:6d:d5:a1:b1:c7:42:6f:e6:40:27:35:5c:a3:28:b7:
++ 07:8d:e7:8d:33:90:e7:23:9f:fb:50:9c:79:6c:46:d5:b4:15:
++ b3:96:6e:7e:9b:0c:96:3a:b8:52:2d:3f:d6:5b:e1:fb:08:c2:
++ 84:fe:24:a8:a3:89:da:ac:6a:e1:18:2a:b1:a8:43:61:5b:d3:
++ 1f:dc:3b:8d:76:f2:2d:e8:8d:75:df:17:33:6c:3d:53:fb:7b:
++ cb:41:5f:ff:dc:a2:d0:61:38:e1:96:b8:ac:5d:8b:37:d7:75:
++ d5:33:c0:99:11:ae:9d:41:c1:72:75:84:be:02:41:42:5f:67:
++ 24:48:94:d1:9b:27:be:07:3f:b9:b8:4f:81:74:51:e1:7a:b7:
++ ed:9d:23:e2:be:e0:d5:28:04:13:3c:31:03:9e:dd:7a:6c:8f:
++ c6:07:18:c6:7f:de:47:8e:3f:28:9e:04:06:cf:a5:54:34:77:
++ bd:ec:89:9b:e9:17:43:df:5b:db:5f:fe:8e:1e:57:a2:cd:40:
++ 9d:7e:62:22:da:de:18:27
+ -----BEGIN CERTIFICATE-----
+-MIIDwzCCAqugAwIBAgIBATANBgkqhkiG9w0BAQsFADCBgjELMAkGA1UEBhMCREUx
+-KzApBgNVBAoMIlQtU3lzdGVtcyBFbnRlcnByaXNlIFNlcnZpY2VzIEdtYkgxHzAd
+-BgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBDZW50ZXIxJTAjBgNVBAMMHFQtVGVsZVNl
+-YyBHbG9iYWxSb290IENsYXNzIDIwHhcNMDgxMDAxMTA0MDE0WhcNMzMxMDAxMjM1
+-OTU5WjCBgjELMAkGA1UEBhMCREUxKzApBgNVBAoMIlQtU3lzdGVtcyBFbnRlcnBy
+-aXNlIFNlcnZpY2VzIEdtYkgxHzAdBgNVBAsMFlQtU3lzdGVtcyBUcnVzdCBDZW50
+-ZXIxJTAjBgNVBAMMHFQtVGVsZVNlYyBHbG9iYWxSb290IENsYXNzIDIwggEiMA0G
+-CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqX9obX+hzkeXaXPSi5kfl82hVYAUd
+-AqSzm1nzHoqvNK38DcLZSBnuaY/JIPwhqgcZ7bBcrGXHX+0CfHt8LRvWurmAwhiC
+-FoT6ZrAIxlQjgeTNuUk/9k9uN0goOA/FvudocP05l03Sx5iRUKrERLMjfTlH6VJi
+-1hKTXrcxlkIF+3anHqP1wvzpesVsqXFP6st4vGCvx9702cu+fjOlbpSD8DT6Iavq
+-jnKgP6TeMFvvhk1qlVtDRKgQFRzlAVfFmPHmBiiRqiDFt1MmUUOyCxGVWOHAD3bZ
+-wI18gfNycJ5v/hqO2V81xrJvNHy+SE/iWjnX2J14np+GPgNeGYtEotXHAgMBAAGj
+-QjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBS/
+-WSA2AHmgoCJrjNXyYdK4LMuCSjANBgkqhkiG9w0BAQsFAAOCAQEAMQOiYQsfdOhy
+-NsZt+U2e+iKo4YFWz827n+qrkRk4r6p8FU3ztqONpfSO9kSpp+ghla0+AGIWiPAC
+-uvxhI+YzmzB6azZie60EI4RYZeLbK4rnJVM3YlNfvNoBYimipidx5joifsFvHZVw
+-IEoHNN/q/xWA5brXethbdXwFeilHfkCoMRN3zUA7tFFHei4R40cR3p1m0IvVVGb6
+-g1XqfMIpiRvpb7PO4gWEyS8+eIVibslfwXhjdFjASBgMmTnrpMwatXlajRWc2BQN
+-9noHV8cigwUtPJslJj0Ys6lDfMjIq2SPDqO/nBudMNva0Bkuqjzx+zOAduTNrRlP
+-BSeOE6Fuwg==
++MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw
++TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
++cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4
++WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJu
++ZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBY
++MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54rVygc
++h77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+
++0TM8ukj13Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6U
++A5/TR5d8mUgjU+g4rk8Kb4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sW
++T8KOEUt+zwvo/7V3LvSye0rgTBIlDHCNAymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyH
++B5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ4Q7e2RCOFvu396j3x+UC
++B5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf1b0SHzUv
++KBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWn
++OlFuhjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTn
++jh8BCNAw1FtxNrQHusEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbw
++qHyGO0aoSCqI3Haadr8faqU9GY/rOPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CI
++rU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV
++HRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY9umbbjANBgkq
++hkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL
++ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ
++3BebYhtF8GaV0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KK
++NFtY2PwByVS5uCbMiogziUwthDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5
++ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJwTdwJx4nLCgdNbOhdjsnvzqvHu7Ur
++TkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nxe5AW0wdeRlN8NwdC
++jNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZAJzVc
++oyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq
++4RgqsahDYVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPA
++mRGunUHBcnWEvgJBQl9nJEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57d
++emyPxgcYxn/eR44/KJ4EBs+lVDR3veyJm+kXQ99b21/+jh5Xos1AnX5iItreGCc=
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=Atos TrustedRoot 2011 O=Atos
+-# Subject: CN=Atos TrustedRoot 2011 O=Atos
+-# Label: "Atos TrustedRoot 2011"
+-# Serial: 6643877497813316402
+-# MD5 Fingerprint: ae:b9:c4:32:4b:ac:7f:5d:66:cc:77:94:bb:2a:77:56
+-# SHA1 Fingerprint: 2b:b1:f5:3e:55:0c:1d:c5:f1:d4:e6:b7:6a:46:4b:55:06:02:ac:21
+-# SHA256 Fingerprint: f3:56:be:a2:44:b7:a9:1e:b3:5d:53:ca:9a:d7:86:4a:ce:01:8e:2d:35:d5:f8:f9:6d:df:68:a6:f4:1a:a4:74
++# 2530cc8e98321502bad96f9b1fba1b099e2d299e0f4548bb914f363bc0d4531f
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ b0:b7:5a:16:48:5f:bf:e1:cb:f5:8b:d7:19:e6:7d
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = ES, O = IZENPE S.A., CN = Izenpe.com
++ Validity
++ Not Before: Dec 13 13:08:28 2007 GMT
++ Not After : Dec 13 08:27:25 2037 GMT
++ Subject: C = ES, O = IZENPE S.A., CN = Izenpe.com
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:c9:d3:7a:ca:0f:1e:ac:a7:86:e8:16:65:6a:b1:
++ c2:1b:45:32:71:95:d9:fe:10:5b:cc:af:e7:a5:79:
++ 01:8f:89:c3:ca:f2:55:71:f7:77:be:77:94:f3:72:
++ a4:2c:44:d8:9e:92:9b:14:3a:a1:e7:24:90:0a:0a:
++ 56:8e:c5:d8:26:94:e1:d9:48:e1:2d:3e:da:0a:72:
++ dd:a3:99:15:da:81:a2:87:f4:7b:6e:26:77:89:58:
++ ad:d6:eb:0c:b2:41:7a:73:6e:6d:db:7a:78:41:e9:
++ 08:88:12:7e:87:2e:66:11:63:6c:54:fb:3c:9d:72:
++ c0:bc:2e:ff:c2:b7:dd:0d:76:e3:3a:d7:f7:b4:68:
++ be:a2:f5:e3:81:6e:c1:46:6f:5d:8d:e0:4d:c6:54:
++ 55:89:1a:33:31:0a:b1:57:b9:a3:8a:98:c3:ec:3b:
++ 34:c5:95:41:69:7e:75:c2:3c:20:c5:61:ba:51:47:
++ a0:20:90:93:a1:90:4b:f3:4e:7c:85:45:54:9a:d1:
++ 05:26:41:b0:b5:4d:1d:33:be:c4:03:c8:25:7c:c1:
++ 70:db:3b:f4:09:2d:54:27:48:ac:2f:e1:c4:ac:3e:
++ c8:cb:92:4c:53:39:37:23:ec:d3:01:f9:e0:09:44:
++ 4d:4d:64:c0:e1:0d:5a:87:22:bc:ad:1b:a3:fe:26:
++ b5:15:f3:a7:fc:84:19:e9:ec:a1:88:b4:44:69:84:
++ 83:f3:89:d1:74:06:a9:cc:0b:d6:c2:de:27:85:50:
++ 26:ca:17:b8:c9:7a:87:56:2c:1a:01:1e:6c:be:13:
++ ad:10:ac:b5:24:f5:38:91:a1:d6:4b:da:f1:bb:d2:
++ de:47:b5:f1:bc:81:f6:59:6b:cf:19:53:e9:8d:15:
++ cb:4a:cb:a9:6f:44:e5:1b:41:cf:e1:86:a7:ca:d0:
++ 6a:9f:bc:4c:8d:06:33:5a:a2:85:e5:90:35:a0:62:
++ 5c:16:4e:f0:e3:a2:fa:03:1a:b4:2c:71:b3:58:2c:
++ de:7b:0b:db:1a:0f:eb:de:21:1f:06:77:06:03:b0:
++ c9:ef:99:fc:c0:b9:4f:0b:86:28:fe:d2:b9:ea:e3:
++ da:a5:c3:47:69:12:e0:db:f0:f6:19:8b:ed:7b:70:
++ d7:02:d6:ed:87:18:28:2c:04:24:4c:77:e4:48:8a:
++ 1a:c6:3b:9a:d4:0f:ca:fa:75:d2:01:40:5a:8d:79:
++ bf:8b:cf:4b:cf:aa:16:c1:95:e4:ad:4c:8a:3e:17:
++ 91:d4:b1:62:e5:82:e5:80:04:a4:03:7e:8d:bf:da:
++ 7f:a2:0f:97:4f:0c:d3:0d:fb:d7:d1:e5:72:7e:1c:
++ c8:77:ff:5b:9a:0f:b7:ae:05:46:e5:f1:a8:16:ec:
++ 47:a4:17
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Alternative Name:
++ email:info@izenpe.com, DirName:/O=IZENPE S.A. - CIF A01337260-RMerc.Vitoria-Gasteiz T1055 F62 S8/street=Avda del Mediterraneo Etorbidea 14 - 01010 Vitoria-Gasteiz
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ 1D:1C:65:0E:A8:F2:25:7B:B4:91:CF:E4:B1:B1:E6:BD:55:74:6C:05
++ Signature Algorithm: sha256WithRSAEncryption
++ 78:a6:0c:16:4a:9f:4c:88:3a:c0:cb:0e:a5:16:7d:9f:b9:48:
++ 5f:18:8f:0d:62:36:f6:cd:19:6b:ac:ab:d5:f6:91:7d:ae:71:
++ f3:3f:b3:0e:78:85:9b:95:a4:27:21:47:42:4a:7c:48:3a:f5:
++ 45:7c:b3:0c:8e:51:78:ac:95:13:de:c6:fd:7d:b8:1a:90:4c:
++ ab:92:03:c7:ed:42:01:ce:0f:d8:b1:fa:a2:92:e1:60:6d:ae:
++ 7a:6b:09:aa:c6:29:ee:68:49:67:30:80:24:7a:31:16:39:5b:
++ 7e:f1:1c:2e:dd:6c:09:ad:f2:31:c1:82:4e:b9:bb:f9:be:bf:
++ 2a:85:3f:c0:40:a3:3a:59:fc:59:4b:3c:28:24:db:b4:15:75:
++ ae:0d:88:ba:2e:73:c0:bd:58:87:e5:42:f2:eb:5e:ee:1e:30:
++ 22:99:cb:37:d1:c4:21:6c:81:ec:be:6d:26:e6:1c:e4:42:20:
++ 9e:47:b0:ac:83:59:70:2c:35:d6:af:36:34:b4:cd:3b:f8:32:
++ a8:ef:e3:78:89:fb:8d:45:2c:da:9c:b8:7e:40:1c:61:e7:3e:
++ a2:92:2c:4b:f2:cd:fa:98:b6:29:ff:f3:f2:7b:a9:1f:2e:a0:
++ 93:57:2b:de:85:03:f9:69:37:cb:9e:78:6a:05:b4:c5:31:78:
++ 89:ec:7a:a7:85:e1:b9:7b:3c:de:be:1e:79:84:ce:9f:70:0e:
++ 59:c2:35:2e:90:2a:31:d9:e4:45:7a:41:a4:2e:13:9b:34:0e:
++ 66:7b:49:ab:64:97:d0:46:c3:79:9d:72:50:63:a6:98:5b:06:
++ bd:48:6d:d8:39:83:70:e8:35:f0:05:d1:aa:bc:e3:db:c8:02:
++ ea:7c:fd:82:da:c2:5b:52:35:ae:98:3a:ad:ba:35:93:23:a7:
++ 1f:48:dd:35:46:98:b2:10:68:e4:a5:31:c2:0a:58:2e:19:81:
++ 10:c9:50:75:fc:ea:5a:16:ce:11:d7:ee:ef:50:88:2d:61:ff:
++ 3f:42:73:05:94:43:d5:8e:3c:4e:01:3a:19:a5:1f:46:4e:77:
++ d0:5d:e5:81:22:21:87:fe:94:7d:84:d8:93:ad:d6:68:43:48:
++ b2:db:eb:73:24:e7:91:7f:54:a4:b6:80:3e:9d:a3:3c:4c:72:
++ c2:57:c4:a0:d4:cc:38:27:ce:d5:06:9e:a2:48:d9:e9:9f:ce:
++ 82:70:36:93:9a:3b:df:96:21:e3:59:b7:0c:da:91:37:f0:fd:
++ 59:5a:b3:99:c8:69:6c:43:26:01:35:63:60:55:89:03:3a:75:
++ d8:ba:4a:d9:54:ff:ee:de:80:d8:2d:d1:38:d5:5e:2d:0b:98:
++ 7d:3e:6c:db:fc:26:88:c7
+ -----BEGIN CERTIFICATE-----
+-MIIDdzCCAl+gAwIBAgIIXDPLYixfszIwDQYJKoZIhvcNAQELBQAwPDEeMBwGA1UE
+-AwwVQXRvcyBUcnVzdGVkUm9vdCAyMDExMQ0wCwYDVQQKDARBdG9zMQswCQYDVQQG
+-EwJERTAeFw0xMTA3MDcxNDU4MzBaFw0zMDEyMzEyMzU5NTlaMDwxHjAcBgNVBAMM
+-FUF0b3MgVHJ1c3RlZFJvb3QgMjAxMTENMAsGA1UECgwEQXRvczELMAkGA1UEBhMC
+-REUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVhTuXbyo7LjvPpvMp
+-Nb7PGKw+qtn4TaA+Gke5vJrf8v7MPkfoepbCJI419KkM/IL9bcFyYie96mvr54rM
+-VD6QUM+A1JX76LWC1BTFtqlVJVfbsVD2sGBkWXppzwO3bw2+yj5vdHLqqjAqc2K+
+-SZFhyBH+DgMq92og3AIVDV4VavzjgsG1xZ1kCWyjWZgHJ8cblithdHFsQ/H3NYkQ
+-4J7sVaE3IqKHBAUsR320HLliKWYoyrfhk/WklAOZuXCFteZI6o1Q/NnezG8HDt0L
+-cp2AMBYHlT8oDv3FdU9T1nSatCQujgKRz3bFmx5VdJx4IbHwLfELn8LVlhgf8FQi
+-eowHAgMBAAGjfTB7MB0GA1UdDgQWBBSnpQaxLKYJYO7Rl+lwrrw7GWzbITAPBgNV
+-HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFKelBrEspglg7tGX6XCuvDsZbNshMBgG
+-A1UdIAQRMA8wDQYLKwYBBAGwLQMEAQEwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3
+-DQEBCwUAA4IBAQAmdzTblEiGKkGdLD4GkGDEjKwLVLgfuXvTBznk+j57sj1O7Z8j
+-vZfza1zv7v1Apt+hk6EKhqzvINB5Ab149xnYJDE0BAGmuhWawyfc2E8PzBhj/5kP
+-DpFrdRbhIfzYJsdHt6bPWHJxfrrhTZVHO8mvbaG0weyJ9rQPOLXiZNwlz6bb65pc
+-maHFCN795trV1lpFDMS3wrUU77QR/w4VtfX128a961qn8FYiqTxlVMYVqL2Gns2D
+-lmh6cYGJ4Qvh6hEbaAjMaZ7snkGeRDImeuKHCnE96+RapNLbxc3G3mB/ufNPRJLv
+-KrcYPqcZ2Qt9sTdBQrC6YB3y/gkRsPCHe6ed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+ -----END CERTIFICATE-----
+
+-# Issuer: CN=QuoVadis Root CA 1 G3 O=QuoVadis Limited
+-# Subject: CN=QuoVadis Root CA 1 G3 O=QuoVadis Limited
+-# Label: "QuoVadis Root CA 1 G3"
+-# Serial: 687049649626669250736271037606554624078720034195
+-# MD5 Fingerprint: a4:bc:5b:3f:fe:37:9a:fa:64:f0:e2:fa:05:3d:0b:ab
+-# SHA1 Fingerprint: 1b:8e:ea:57:96:29:1a:c9:39:ea:b8:0a:81:1a:73:73:c0:93:79:67
+-# SHA256 Fingerprint: 8a:86:6f:d1:b2:76:b5:7e:57:8e:92:1c:65:82:8a:2b:ed:58:e9:f2:f2:88:05:41:34:b7:f1:f4:bf:c9:cc:74
++# a1339d33281a0b56e557d3d32b1ce7f9367eb094bd5fa72a7e5004c8ded7cafe
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 3e:8a:5d:07:ec:55:d2:32:d5:b7:e3:b6:5f:01:eb:2d:dc:e4:d6:e4
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = PL, O = Krajowa Izba Rozliczeniowa S.A., CN = SZAFIR ROOT CA2
++ Validity
++ Not Before: Oct 19 07:43:30 2015 GMT
++ Not After : Oct 19 07:43:30 2035 GMT
++ Subject: C = PL, O = Krajowa Izba Rozliczeniowa S.A., CN = SZAFIR ROOT CA2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:b7:bc:3e:50:a8:4b:cd:40:b5:ce:61:e7:96:ca:
++ b4:a1:da:0c:22:b0:fa:b5:7b:76:00:77:8c:0b:cf:
++ 7d:a8:86:cc:26:51:e4:20:3d:85:0c:d6:58:e3:e7:
++ f4:2a:18:9d:da:d1:ae:26:ee:eb:53:dc:f4:90:d6:
++ 13:4a:0c:90:3c:c3:f4:da:d2:8e:0d:92:3a:dc:b1:
++ b1:ff:38:de:c3:ba:2d:5f:80:b9:02:bd:4a:9d:1b:
++ 0f:b4:c3:c2:c1:67:03:dd:dc:1b:9c:3d:b3:b0:de:
++ 00:1e:a8:34:47:bb:9a:eb:fe:0b:14:bd:36:84:da:
++ 0d:20:bf:fa:5b:cb:a9:16:20:ad:39:60:ee:2f:75:
++ b6:e7:97:9c:f9:3e:fd:7e:4d:6f:4d:2f:ef:88:0d:
++ 6a:fa:dd:f1:3d:6e:20:a5:a0:12:b4:4d:70:b9:ce:
++ d7:72:3b:89:93:a7:80:84:1c:27:49:72:49:b5:ff:
++ 3b:95:9e:c1:cc:c8:01:ec:e8:0e:8a:0a:96:e7:b3:
++ a6:87:e5:d6:f9:05:2b:0d:97:40:70:3c:ba:ac:75:
++ 5a:9c:d5:4d:9d:02:0a:d2:4b:9b:66:4b:46:07:17:
++ 65:ad:9f:6c:88:00:dc:22:89:e0:e1:64:d4:67:bc:
++ 31:79:61:3c:bb:ca:41:cd:5c:6a:00:c8:3c:38:8e:
++ 58:af
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ 2E:16:A9:4A:18:B5:CB:CC:F5:6F:50:F3:23:5F:F8:5D:E7:AC:F0:C8
++ Signature Algorithm: sha256WithRSAEncryption
++ b5:73:f8:03:dc:59:5b:1d:76:e9:a3:2a:7b:90:28:b2:4d:c0:
++ 33:4f:aa:9a:b1:d4:b8:e4:27:ff:a9:96:99:ce:46:e0:6d:7c:
++ 4c:a2:38:a4:06:70:f0:f4:41:11:ec:3f:47:8d:3f:72:87:f9:
++ 3b:fd:a4:6f:2b:53:00:e0:ff:39:b9:6a:07:0e:eb:1d:1c:f6:
++ a2:72:90:cb:82:3d:11:82:8b:d2:bb:9f:2a:af:21:e6:63:86:
++ 9d:79:19:ef:f7:bb:0c:35:90:c3:8a:ed:4f:0f:f5:cc:12:d9:
++ a4:3e:bb:a0:fc:20:95:5f:4f:26:2f:11:23:83:4e:75:07:0f:
++ bf:9b:d1:b4:1d:e9:10:04:fe:ca:60:8f:a2:4c:b8:ad:cf:e1:
++ 90:0f:cd:ae:0a:c7:5d:7b:b7:50:d2:d4:61:fa:d5:15:db:d7:
++ 9f:87:51:54:eb:a5:e3:eb:c9:85:a0:25:20:37:fb:8e:ce:0c:
++ 34:84:e1:3c:81:b2:77:4e:43:a5:88:5f:86:67:a1:3d:e6:b4:
++ 5c:61:b6:3e:db:fe:b7:28:c5:a2:07:ae:b5:ca:ca:8d:2a:12:
++ ef:97:ed:c2:30:a4:c9:2a:7a:fb:f3:4d:23:1b:99:33:34:a0:
++ 2e:f5:a9:0b:3f:d4:5d:e1:cf:84:9f:e2:19:c2:5f:8a:d6:20:
++ 1e:e3:73:b7
+ -----BEGIN CERTIFICATE-----
+-MIIFYDCCA0igAwIBAgIUeFhfLq0sGUvjNwc1NBMotZbUZZMwDQYJKoZIhvcNAQEL
+-BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc
+-BgNVBAMTFVF1b1ZhZGlzIFJvb3QgQ0EgMSBHMzAeFw0xMjAxMTIxNzI3NDRaFw00
+-MjAxMTIxNzI3NDRaMEgxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBM
+-aW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDEgRzMwggIiMA0GCSqG
+-SIb3DQEBAQUAA4ICDwAwggIKAoICAQCgvlAQjunybEC0BJyFuTHK3C3kEakEPBtV
+-wedYMB0ktMPvhd6MLOHBPd+C5k+tR4ds7FtJwUrVu4/sh6x/gpqG7D0DmVIB0jWe
+-rNrwU8lmPNSsAgHaJNM7qAJGr6Qc4/hzWHa39g6QDbXwz8z6+cZM5cOGMAqNF341
+-68Xfuw6cwI2H44g4hWf6Pser4BOcBRiYz5P1sZK0/CPTz9XEJ0ngnjybCKOLXSoh
+-4Pw5qlPafX7PGglTvF0FBM+hSo+LdoINofjSxxR3W5A2B4GbPgb6Ul5jxaYA/qXp
+-UhtStZI5cgMJYr2wYBZupt0lwgNm3fME0UDiTouG9G/lg6AnhF4EwfWQvTA9xO+o
+-abw4m6SkltFi2mnAAZauy8RRNOoMqv8hjlmPSlzkYZqn0ukqeI1RPToV7qJZjqlc
+-3sX5kCLliEVx3ZGZbHqfPT2YfF72vhZooF6uCyP8Wg+qInYtyaEQHeTTRCOQiJ/G
+-KubX9ZqzWB4vMIkIG1SitZgj7Ah3HJVdYdHLiZxfokqRmu8hqkkWCKi9YSgxyXSt
+-hfbZxbGL0eUQMk1fiyA6PEkfM4VZDdvLCXVDaXP7a3F98N/ETH3Goy7IlXnLc6KO
+-Tk0k+17kBL5yG6YnLUlamXrXXAkgt3+UuU/xDRxeiEIbEbfnkduebPRq34wGmAOt
+-zCjvpUfzUwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB
+-BjAdBgNVHQ4EFgQUo5fW816iEOGrRZ88F2Q87gFwnMwwDQYJKoZIhvcNAQELBQAD
+-ggIBABj6W3X8PnrHX3fHyt/PX8MSxEBd1DKquGrX1RUVRpgjpeaQWxiZTOOtQqOC
+-MTaIzen7xASWSIsBx40Bz1szBpZGZnQdT+3Btrm0DWHMY37XLneMlhwqI2hrhVd2
+-cDMT/uFPpiN3GPoajOi9ZcnPP/TJF9zrx7zABC4tRi9pZsMbj/7sPtPKlL92CiUN
+-qXsCHKnQO18LwIE6PWThv6ctTr1NxNgpxiIY0MWscgKCP6o6ojoilzHdCGPDdRS5
+-YCgtW2jgFqlmgiNR9etT2DGbe+m3nUvriBbP+V04ikkwj+3x6xn0dxoxGE1nVGwv
+-b2X52z3sIexe9PSLymBlVNFxZPT5pqOBMzYzcfCkeF9OrYMh3jRJjehZrJ3ydlo2
+-8hP0r+AJx2EqbPfgna67hkooby7utHnNkDPDs3b69fBsnQGQ+p6Q9pxyz0fawx/k
+-NSBT8lTR32GDpgLiJTjehTItXnOQUl1CxM49S+H5GYQd1aJQzEH7QRTDvdbJWqNj
+-ZgKAvQU6O0ec7AAmTPWIUb+oI38YB7AL7YsmoWTTYUrrXJ/es69nA7Mf3W1daWhp
+-q1467HxpvMc7hU6eFbm0FU/DlXpY18ls6Wy58yljXrQs8C097Vpl4KlbQMJImYFt
+-nh8GKjwStIsPm6Ik8KaN1nrgS7ZklmOVhMJKzRwuJIczYOXD
++MIIDcjCCAlqgAwIBAgIUPopdB+xV0jLVt+O2XwHrLdzk1uQwDQYJKoZIhvcNAQEL
++BQAwUTELMAkGA1UEBhMCUEwxKDAmBgNVBAoMH0tyYWpvd2EgSXpiYSBSb3psaWN6
++ZW5pb3dhIFMuQS4xGDAWBgNVBAMMD1NaQUZJUiBST09UIENBMjAeFw0xNTEwMTkw
++NzQzMzBaFw0zNTEwMTkwNzQzMzBaMFExCzAJBgNVBAYTAlBMMSgwJgYDVQQKDB9L
++cmFqb3dhIEl6YmEgUm96bGljemVuaW93YSBTLkEuMRgwFgYDVQQDDA9TWkFGSVIg
++Uk9PVCBDQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vD5QqEvN
++QLXOYeeWyrSh2gwisPq1e3YAd4wLz32ohswmUeQgPYUM1ljj5/QqGJ3a0a4m7utT
++3PSQ1hNKDJA8w/Ta0o4NkjrcsbH/ON7Dui1fgLkCvUqdGw+0w8LBZwPd3BucPbOw
++3gAeqDRHu5rr/gsUvTaE2g0gv/pby6kWIK05YO4vdbbnl5z5Pv1+TW9NL++IDWr6
++3fE9biCloBK0TXC5ztdyO4mTp4CEHCdJckm1/zuVnsHMyAHs6A6KCpbns6aH5db5
++BSsNl0BwPLqsdVqc1U2dAgrSS5tmS0YHF2Wtn2yIANwiieDhZNRnvDF5YTy7ykHN
++XGoAyDw4jlivAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD
++AgEGMB0GA1UdDgQWBBQuFqlKGLXLzPVvUPMjX/hd56zwyDANBgkqhkiG9w0BAQsF
++AAOCAQEAtXP4A9xZWx126aMqe5Aosk3AM0+qmrHUuOQn/6mWmc5G4G18TKI4pAZw
++8PRBEew/R40/cof5O/2kbytTAOD/OblqBw7rHRz2onKQy4I9EYKL0rufKq8h5mOG
++nXkZ7/e7DDWQw4rtTw/1zBLZpD67oPwglV9PJi8RI4NOdQcPv5vRtB3pEAT+ymCP
++oky4rc/hkA/NrgrHXXu3UNLUYfrVFdvXn4dRVOul4+vJhaAlIDf7js4MNIThPIGy
++d05DpYhfhmehPea0XGG2Ptv+tyjFogeutcrKjSoS75ftwjCkySp6+/NNIxuZMzSg
++LvWpCz/UXeHPhJ/iGcJfitYgHuNztw==
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=QuoVadis Root CA 2 G3 O=QuoVadis Limited
+-# Subject: CN=QuoVadis Root CA 2 G3 O=QuoVadis Limited
+-# Label: "QuoVadis Root CA 2 G3"
+-# Serial: 390156079458959257446133169266079962026824725800
+-# MD5 Fingerprint: af:0c:86:6e:bf:40:2d:7f:0b:3e:12:50:ba:12:3d:06
+-# SHA1 Fingerprint: 09:3c:61:f3:8b:8b:dc:7d:55:df:75:38:02:05:00:e1:25:f5:c8:36
+-# SHA256 Fingerprint: 8f:e4:fb:0a:f9:3a:4d:0d:67:db:0b:eb:b2:3e:37:c7:1b:f3:25:dc:bc:dd:24:0e:a0:4d:af:58:b4:7e:18:40
++# 3c5f81fea5fab82c64bfa2eaecafcde8e077fc8620a7cae537163df36edbf378
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ c2:7e:43:04:4e:47:3f:19
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
++ Validity
++ Not Before: Jun 16 11:30:18 2009 GMT
++ Not After : Dec 30 11:30:18 2029 GMT
++ Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:e9:f8:8f:f3:63:ad:da:86:d8:a7:e0:42:fb:cf:
++ 91:de:a6:26:f8:99:a5:63:70:ad:9b:ae:ca:33:40:
++ 7d:6d:96:6e:a1:0e:44:ee:e1:13:9d:94:42:52:9a:
++ bd:75:85:74:2c:a8:0e:1d:93:b6:18:b7:8c:2c:a8:
++ cf:fb:5c:71:b9:da:ec:fe:e8:7e:8f:e4:2f:1d:b2:
++ a8:75:87:d8:b7:a1:e5:3b:cf:99:4a:46:d0:83:19:
++ 7d:c0:a1:12:1c:95:6d:4a:f4:d8:c7:a5:4d:33:2e:
++ 85:39:40:75:7e:14:7c:80:12:98:50:c7:41:67:b8:
++ a0:80:61:54:a6:6c:4e:1f:e0:9d:0e:07:e9:c9:ba:
++ 33:e7:fe:c0:55:28:2c:02:80:a7:19:f5:9e:dc:55:
++ 53:03:97:7b:07:48:ff:99:fb:37:8a:24:c4:59:cc:
++ 50:10:63:8e:aa:a9:1a:b0:84:1a:86:f9:5f:bb:b1:
++ 50:6e:a4:d1:0a:cc:d5:71:7e:1f:a7:1b:7c:f5:53:
++ 6e:22:5f:cb:2b:e6:d4:7c:5d:ae:d6:c2:c6:4c:e5:
++ 05:01:d9:ed:57:fc:c1:23:79:fc:fa:c8:24:83:95:
++ f3:b5:6a:51:01:d0:77:d6:e9:12:a1:f9:1a:83:fb:
++ 82:1b:b9:b0:97:f4:76:06:33:43:49:a0:ff:0b:b5:
++ fa:b5
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
++ X509v3 Authority Key Identifier:
++ keyid:CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
++
++ X509v3 Subject Alternative Name:
++ email:info@e-szigno.hu
++ Signature Algorithm: sha256WithRSAEncryption
++ c9:d1:0e:5e:2e:d5:cc:b3:7c:3e:cb:fc:3d:ff:0d:28:95:93:
++ 04:c8:bf:da:cd:79:b8:43:90:f0:a4:be:ef:f2:ef:21:98:bc:
++ d4:d4:5d:06:f6:ee:42:ec:30:6c:a0:aa:a9:ca:f1:af:8a:fa:
++ 3f:0b:73:6a:3e:ea:2e:40:7e:1f:ae:54:61:79:eb:2e:08:37:
++ d7:23:f3:8c:9f:be:1d:b1:e1:a4:75:db:a0:e2:54:14:b1:ba:
++ 1c:29:a4:18:f6:12:ba:a2:14:14:e3:31:35:c8:40:ff:b7:e0:
++ 05:76:57:c1:1c:59:f2:f8:bf:e4:ed:25:62:5c:84:f0:7e:7e:
++ 1f:b3:be:f9:b7:21:11:cc:03:01:56:70:a7:10:92:1e:1b:34:
++ 81:1e:ad:9c:1a:c3:04:3c:ed:02:61:d6:1e:06:f3:5f:3a:87:
++ f2:2b:f1:45:87:e5:3d:ac:d1:c7:57:84:bd:6b:ae:dc:d8:f9:
++ b6:1b:62:70:0b:3d:36:c9:42:f2:32:d7:7a:61:e6:d2:db:3d:
++ cf:c8:a9:c9:9b:dc:db:58:44:d7:6f:38:af:7f:78:d3:a3:ad:
++ 1a:75:ba:1c:c1:36:7c:8f:1e:6d:1c:c3:75:46:ae:35:05:a6:
++ f6:5c:3d:21:ee:56:f0:c9:82:22:2d:7a:54:ab:70:c3:7d:22:
++ 65:82:70:96
+ -----BEGIN CERTIFICATE-----
+-MIIFYDCCA0igAwIBAgIURFc0JFuBiZs18s64KztbpybwdSgwDQYJKoZIhvcNAQEL
+-BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc
+-BgNVBAMTFVF1b1ZhZGlzIFJvb3QgQ0EgMiBHMzAeFw0xMjAxMTIxODU5MzJaFw00
+-MjAxMTIxODU5MzJaMEgxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBM
+-aW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDIgRzMwggIiMA0GCSqG
+-SIb3DQEBAQUAA4ICDwAwggIKAoICAQChriWyARjcV4g/Ruv5r+LrI3HimtFhZiFf
+-qq8nUeVuGxbULX1QsFN3vXg6YOJkApt8hpvWGo6t/x8Vf9WVHhLL5hSEBMHfNrMW
+-n4rjyduYNM7YMxcoRvynyfDStNVNCXJJ+fKH46nafaF9a7I6JaltUkSs+L5u+9ym
+-c5GQYaYDFCDy54ejiK2toIz/pgslUiXnFgHVy7g1gQyjO/Dh4fxaXc6AcW34Sas+
+-O7q414AB+6XrW7PFXmAqMaCvN+ggOp+oMiwMzAkd056OXbxMmO7FGmh77FOm6RQ1
+-o9/NgJ8MSPsc9PG/Srj61YxxSscfrf5BmrODXfKEVu+lV0POKa2Mq1W/xPtbAd0j
+-IaFYAI7D0GoT7RPjEiuA3GfmlbLNHiJuKvhB1PLKFAeNilUSxmn1uIZoL1NesNKq
+-IcGY5jDjZ1XHm26sGahVpkUG0CM62+tlXSoREfA7T8pt9DTEceT/AFr2XK4jYIVz
+-8eQQsSWu1ZK7E8EM4DnatDlXtas1qnIhO4M15zHfeiFuuDIIfR0ykRVKYnLP43eh
+-vNURG3YBZwjgQQvD6xVu+KQZ2aKrr+InUlYrAoosFCT5v0ICvybIxo/gbjh9Uy3l
+-7ZizlWNof/k19N+IxWA1ksB8aRxhlRbQ694Lrz4EEEVlWFA4r0jyWbYW8jwNkALG
+-cC4BrTwV1wIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB
+-BjAdBgNVHQ4EFgQU7edvdlq/YOxJW8ald7tyFnGbxD0wDQYJKoZIhvcNAQELBQAD
+-ggIBAJHfgD9DCX5xwvfrs4iP4VGyvD11+ShdyLyZm3tdquXK4Qr36LLTn91nMX66
+-AarHakE7kNQIXLJgapDwyM4DYvmL7ftuKtwGTTwpD4kWilhMSA/ohGHqPHKmd+RC
+-roijQ1h5fq7KpVMNqT1wvSAZYaRsOPxDMuHBR//47PERIjKWnML2W2mWeyAMQ0Ga
+-W/ZZGYjeVYg3UQt4XAoeo0L9x52ID8DyeAIkVJOviYeIyUqAHerQbj5hLja7NQ4n
+-lv1mNDthcnPxFlxHBlRJAHpYErAK74X9sbgzdWqTHBLmYF5vHX/JHyPLhGGfHoJE
+-+V+tYlUkmlKY7VHnoX6XOuYvHxHaU4AshZ6rNRDbIl9qxV6XU/IyAgkwo1jwDQHV
+-csaxfGl7w/U2Rcxhbl5MlMVerugOXou/983g7aEOGzPuVBj+D77vfoRrQ+NwmNtd
+-dbINWQeFFSM51vHfqSYP1kjHs6Yi9TM3WpVHn3u6GBVv/9YUZINJ0gpnIdsPNWNg
+-KCLjsZWDzYWm3S8P52dSbrsvhXz1SnPnxT7AvSESBT/8twNJAlvIJebiVDj1eYeM
+-HVOyToV7BjjHLPj4sHKNJeV3UvQDHEimUF+IIDBu8oJDqz2XhOdT+yHBTw8imoa4
+-WSr2Rz0ZiC3oheGe7IUIarFsNMkd7EgrO3jtZsSOeWmD3n+M
++MIIECjCCAvKgAwIBAgIJAMJ+QwRORz8ZMA0GCSqGSIb3DQEBCwUAMIGCMQswCQYD
++VQQGEwJIVTERMA8GA1UEBwwIQnVkYXBlc3QxFjAUBgNVBAoMDU1pY3Jvc2VjIEx0
++ZC4xJzAlBgNVBAMMHk1pY3Jvc2VjIGUtU3ppZ25vIFJvb3QgQ0EgMjAwOTEfMB0G
++CSqGSIb3DQEJARYQaW5mb0BlLXN6aWduby5odTAeFw0wOTA2MTYxMTMwMThaFw0y
++OTEyMzAxMTMwMThaMIGCMQswCQYDVQQGEwJIVTERMA8GA1UEBwwIQnVkYXBlc3Qx
++FjAUBgNVBAoMDU1pY3Jvc2VjIEx0ZC4xJzAlBgNVBAMMHk1pY3Jvc2VjIGUtU3pp
++Z25vIFJvb3QgQ0EgMjAwOTEfMB0GCSqGSIb3DQEJARYQaW5mb0BlLXN6aWduby5o
++dTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOn4j/NjrdqG2KfgQvvP
++kd6mJviZpWNwrZuuyjNAfW2WbqEORO7hE52UQlKavXWFdCyoDh2Tthi3jCyoz/tc
++cbna7P7ofo/kLx2yqHWH2Leh5TvPmUpG0IMZfcChEhyVbUr02MelTTMuhTlAdX4U
++fIASmFDHQWe4oIBhVKZsTh/gnQ4H6cm6M+f+wFUoLAKApxn1ntxVUwOXewdI/5n7
++N4okxFnMUBBjjqqpGrCEGob5X7uxUG6k0QrM1XF+H6cbfPVTbiJfyyvm1HxdrtbC
++xkzlBQHZ7Vf8wSN5/PrIJIOV87VqUQHQd9bpEqH5GoP7ghu5sJf0dgYzQ0mg/wu1
+++rUCAwEAAaOBgDB+MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0G
++A1UdDgQWBBTLD8bfQkPMPcu1SCOhGnqmKrs0aDAfBgNVHSMEGDAWgBTLD8bfQkPM
++Pcu1SCOhGnqmKrs0aDAbBgNVHREEFDASgRBpbmZvQGUtc3ppZ25vLmh1MA0GCSqG
++SIb3DQEBCwUAA4IBAQDJ0Q5eLtXMs3w+y/w9/w0olZMEyL/azXm4Q5DwpL7v8u8h
++mLzU1F0G9u5C7DBsoKqpyvGvivo/C3NqPuouQH4frlRheesuCDfXI/OMn74dseGk
++ddug4lQUsbocKaQY9hK6ohQU4zE1yED/t+AFdlfBHFny+L/k7SViXITwfn4fs775
++tyERzAMBVnCnEJIeGzSBHq2cGsMEPO0CYdYeBvNfOofyK/FFh+U9rNHHV4S9a67c
++2Pm2G2JwCz02yULyMtd6YebS2z3PyKnJm9zbWETXbzivf3jTo60adbocwTZ8jx5t
++HMN1Rq41Bab2XD0h7lbwyYIiLXpUq3DDfSJlgnCW
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=QuoVadis Root CA 3 G3 O=QuoVadis Limited
+-# Subject: CN=QuoVadis Root CA 3 G3 O=QuoVadis Limited
+-# Label: "QuoVadis Root CA 3 G3"
+-# Serial: 268090761170461462463995952157327242137089239581
+-# MD5 Fingerprint: df:7d:b9:ad:54:6f:68:a1:df:89:57:03:97:43:b0:d7
+-# SHA1 Fingerprint: 48:12:bd:92:3c:a8:c4:39:06:e7:30:6d:27:96:e6:a4:cf:22:2e:7d
+-# SHA256 Fingerprint: 88:ef:81:de:20:2e:b0:18:45:2e:43:f8:64:72:5c:ea:5f:bd:1f:c2:d9:d2:05:73:07:09:c5:d8:b8:69:0f:46
++# beb00b30839b9bc32c32e4447905950641f26421b15ed089198b518ae2ea1b99
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 01:54:48:ef:21:fd:97:59:0d:f5:04:0a
++ Signature Algorithm: ecdsa-with-SHA256
++ Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
++ Validity
++ Not Before: Aug 22 12:07:06 2017 GMT
++ Not After : Aug 22 12:07:06 2042 GMT
++ Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (256 bit)
++ pub:
++ 04:96:dc:3d:8a:d8:b0:7b:6f:c6:27:be:44:90:b1:
++ b3:56:15:7b:8e:43:24:7d:1a:84:59:ee:63:68:b2:
++ c6:5e:87:d0:15:48:1e:a8:90:ad:bd:53:a2:da:de:
++ 3a:90:a6:60:5f:68:32:b5:86:41:df:87:5b:2c:7b:
++ c5:fe:7c:7a:da
++ ASN1 OID: prime256v1
++ NIST CURVE: P-256
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ 87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
++ X509v3 Authority Key Identifier:
++ keyid:87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
++
++ Signature Algorithm: ecdsa-with-SHA256
++ 30:46:02:21:00:b5:57:dd:d7:8a:55:0b:36:e1:86:44:fa:d4:
++ d9:68:8d:b8:dc:23:8a:8a:0d:d4:2f:7d:ea:73:ec:bf:4d:6c:
++ a8:02:21:00:cb:a5:b4:12:fa:e7:b5:e8:cf:7e:93:fc:f3:35:
++ 8f:6f:4e:5a:7c:b4:bc:4e:b2:fc:72:aa:5b:59:f9:e7:dc:31
++-----BEGIN CERTIFICATE-----
++MIICQDCCAeWgAwIBAgIMAVRI7yH9l1kN9QQKMAoGCCqGSM49BAMCMHExCzAJBgNV
++BAYTAkhVMREwDwYDVQQHDAhCdWRhcGVzdDEWMBQGA1UECgwNTWljcm9zZWMgTHRk
++LjEXMBUGA1UEYQwOVkFUSFUtMjM1ODQ0OTcxHjAcBgNVBAMMFWUtU3ppZ25vIFJv
++b3QgQ0EgMjAxNzAeFw0xNzA4MjIxMjA3MDZaFw00MjA4MjIxMjA3MDZaMHExCzAJ
++BgNVBAYTAkhVMREwDwYDVQQHDAhCdWRhcGVzdDEWMBQGA1UECgwNTWljcm9zZWMg
++THRkLjEXMBUGA1UEYQwOVkFUSFUtMjM1ODQ0OTcxHjAcBgNVBAMMFWUtU3ppZ25v
++IFJvb3QgQ0EgMjAxNzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABJbcPYrYsHtv
++xie+RJCxs1YVe45DJH0ahFnuY2iyxl6H0BVIHqiQrb1TotreOpCmYF9oMrWGQd+H
++Wyx7xf58etqjYzBhMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0G
++A1UdDgQWBBSHERUI0arBeAyxr87GyZDvvzAEwDAfBgNVHSMEGDAWgBSHERUI0arB
++eAyxr87GyZDvvzAEwDAKBggqhkjOPQQDAgNJADBGAiEAtVfd14pVCzbhhkT61Nlo
++jbjcI4qKDdQvfepz7L9NbKgCIQDLpbQS+ue16M9+k/zzNY9vTlp8tLxOsvxyqltZ
+++efcMQ==
++-----END CERTIFICATE-----
++
++# 358df39d764af9e1b766e9c972df352ee15cfac227af6ad1d70e8e4a6edcba02
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 66:f2:3d:af:87:de:8b:b1:4a:ea:0c:57:31:01:c2:ec
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = US, O = Microsoft Corporation, CN = Microsoft ECC Root Certificate Authority 2017
++ Validity
++ Not Before: Dec 18 23:06:45 2019 GMT
++ Not After : Jul 18 23:16:04 2042 GMT
++ Subject: C = US, O = Microsoft Corporation, CN = Microsoft ECC Root Certificate Authority 2017
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:d4:bc:3d:02:42:75:41:13:23:cd:80:04:86:02:
++ 51:2f:6a:a8:81:62:0b:65:cc:f6:ca:9d:1e:6f:4a:
++ 66:51:a2:03:d9:9d:91:fa:b6:16:b1:8c:6e:de:7c:
++ cd:db:79:a6:2f:ce:bb:ce:71:2f:e5:a5:ab:28:ec:
++ 63:04:66:99:f8:fa:f2:93:10:05:e1:81:28:42:e3:
++ c6:68:f4:e6:1b:84:60:4a:89:af:ed:79:0f:3b:ce:
++ f1:f6:44:f5:01:78:c0
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ C8:CB:99:72:70:52:0C:F8:E6:BE:B2:04:57:29:2A:CF:42:10:ED:35
++ 1.3.6.1.4.1.311.21.1:
++ ...
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:65:02:30:58:f2:4d:ea:0c:f9:5f:5e:ee:60:29:cb:3a:f2:
++ db:d6:32:84:19:3f:7c:d5:2f:c2:b1:cc:93:ae:50:bb:09:32:
++ c6:c6:ed:7e:c9:36:94:12:e4:68:85:06:a2:1b:d0:2f:02:31:
++ 00:99:e9:16:b4:0e:fa:56:48:d4:a4:30:16:91:78:db:54:8c:
++ 65:01:8a:e7:50:66:c2:31:b7:39:ba:b8:1a:22:07:4e:fc:6b:
++ 54:16:20:ff:2b:b5:e7:4c:0c:4d:a6:4f:73
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# c741f70f4b2a8d88bf2e71c14122ef53ef10eba0cfa5e64cfa20f418853073e0
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 1e:d3:97:09:5f:d8:b4:b3:47:70:1e:aa:be:7f:45:b3
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C = US, O = Microsoft Corporation, CN = Microsoft RSA Root Certificate Authority 2017
++ Validity
++ Not Before: Dec 18 22:51:22 2019 GMT
++ Not After : Jul 18 23:00:23 2042 GMT
++ Subject: C = US, O = Microsoft Corporation, CN = Microsoft RSA Root Certificate Authority 2017
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:ca:5b:be:94:33:8c:29:95:91:16:0a:95:bd:47:
++ 62:c1:89:f3:99:36:df:46:90:c9:a5:ed:78:6a:6f:
++ 47:91:68:f8:27:67:50:33:1d:a1:a6:fb:e0:e5:43:
++ a3:84:02:57:01:5d:9c:48:40:82:53:10:bc:bf:c7:
++ 3b:68:90:b6:82:2d:e5:f4:65:d0:cc:6d:19:cc:95:
++ f9:7b:ac:4a:94:ad:0e:de:4b:43:1d:87:07:92:13:
++ 90:80:83:64:35:39:04:fc:e5:e9:6c:b3:b6:1f:50:
++ 94:38:65:50:5c:17:46:b9:b6:85:b5:1c:b5:17:e8:
++ d6:45:9d:d8:b2:26:b0:ca:c4:70:4a:ae:60:a4:dd:
++ b3:d9:ec:fc:3b:d5:57:72:bc:3f:c8:c9:b2:de:4b:
++ 6b:f8:23:6c:03:c0:05:bd:95:c7:cd:73:3b:66:80:
++ 64:e3:1a:ac:2e:f9:47:05:f2:06:b6:9b:73:f5:78:
++ 33:5b:c7:a1:fb:27:2a:a1:b4:9a:91:8c:91:d3:3a:
++ 82:3e:76:40:b4:cd:52:61:51:70:28:3f:c5:c5:5a:
++ f2:c9:8c:49:bb:14:5b:4d:c8:ff:67:4d:4c:12:96:
++ ad:f5:fe:78:a8:97:87:d7:fd:5e:20:80:dc:a1:4b:
++ 22:fb:d4:89:ad:ba:ce:47:97:47:55:7b:8f:45:c8:
++ 67:28:84:95:1c:68:30:ef:ef:49:e0:35:7b:64:e7:
++ 98:b0:94:da:4d:85:3b:3e:55:c4:28:af:57:f3:9e:
++ 13:db:46:27:9f:1e:a2:5e:44:83:a4:a5:ca:d5:13:
++ b3:4b:3f:c4:e3:c2:e6:86:61:a4:52:30:b9:7a:20:
++ 4f:6f:0f:38:53:cb:33:0c:13:2b:8f:d6:9a:bd:2a:
++ c8:2d:b1:1c:7d:4b:51:ca:47:d1:48:27:72:5d:87:
++ eb:d5:45:e6:48:65:9d:af:52:90:ba:5b:a2:18:65:
++ 57:12:9f:68:b9:d4:15:6b:94:c4:69:22:98:f4:33:
++ e0:ed:f9:51:8e:41:50:c9:34:4f:76:90:ac:fc:38:
++ c1:d8:e1:7b:b9:e3:e3:94:e1:46:69:cb:0e:0a:50:
++ 6b:13:ba:ac:0f:37:5a:b7:12:b5:90:81:1e:56:ae:
++ 57:22:86:d9:c9:d2:d1:d7:51:e3:ab:3b:c6:55:fd:
++ 1e:0e:d3:74:0a:d1:da:aa:ea:69:b8:97:28:8f:48:
++ c4:07:f8:52:43:3a:f4:ca:55:35:2c:b0:a6:6a:c0:
++ 9c:f9:f2:81:e1:12:6a:c0:45:d9:67:b3:ce:ff:23:
++ a2:89:0a:54:d4:14:b9:2a:a8:d7:ec:f9:ab:cd:25:
++ 58:32:79:8f:90:5b:98:39:c4:08:06:c1:ac:7f:0e:
++ 3d:00:a5
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 09:CB:59:7F:86:B2:70:8F:1A:C3:39:E3:C0:D9:E9:BF:BB:4D:B2:23
++ 1.3.6.1.4.1.311.21.1:
++ ...
++ Signature Algorithm: sha384WithRSAEncryption
++ ac:af:3e:5d:c2:11:96:89:8e:a3:e7:92:d6:97:15:b8:13:a2:
++ a6:42:2e:02:cd:16:05:59:27:ca:20:e8:ba:b8:e8:1a:ec:4d:
++ a8:97:56:ae:65:43:b1:8f:00:9b:52:cd:55:cd:53:39:6d:62:
++ 4c:8b:0d:5b:7c:2e:44:bf:83:10:8f:f3:53:82:80:c3:4f:3a:
++ c7:6e:11:3f:e6:e3:16:91:84:fb:6d:84:7f:34:74:ad:89:a7:
++ ce:b9:d7:d7:9f:84:64:92:be:95:a1:ad:09:53:33:dd:ee:0a:
++ ea:4a:51:8e:6f:55:ab:ba:b5:94:46:ae:8c:7f:d8:a2:50:25:
++ 65:60:80:46:db:33:04:ae:6c:b5:98:74:54:25:dc:93:e4:f8:
++ e3:55:15:3d:b8:6d:c3:0a:a4:12:c1:69:85:6e:df:64:f1:53:
++ 99:e1:4a:75:20:9d:95:0f:e4:d6:dc:03:f1:59:18:e8:47:89:
++ b2:57:5a:94:b6:a9:d8:17:2b:17:49:e5:76:cb:c1:56:99:3a:
++ 37:b1:ff:69:2c:91:91:93:e1:df:4c:a3:37:76:4d:a1:9f:f8:
++ 6d:1e:1d:d3:fa:ec:fb:f4:45:1d:13:6d:cf:f7:59:e5:22:27:
++ 72:2b:86:f3:57:bb:30:ed:24:4d:dc:7d:56:bb:a3:b3:f8:34:
++ 79:89:c1:e0:f2:02:61:f7:a6:fc:0f:bb:1c:17:0b:ae:41:d9:
++ 7c:bd:27:a3:fd:2e:3a:d1:93:94:b1:73:1d:24:8b:af:5b:20:
++ 89:ad:b7:67:66:79:f5:3a:c6:a6:96:33:fe:53:92:c8:46:b1:
++ 11:91:c6:99:7f:8f:c9:d6:66:31:20:41:10:87:2d:0c:d6:c1:
++ af:34:98:ca:64:83:fb:13:57:d1:c1:f0:3c:7a:8c:a5:c1:fd:
++ 95:21:a0:71:c1:93:67:71:12:ea:8f:88:0a:69:19:64:99:23:
++ 56:fb:ac:2a:2e:70:be:66:c4:0c:84:ef:e5:8b:f3:93:01:f8:
++ 6a:90:93:67:4b:b2:68:a3:b5:62:8f:e9:3f:8c:7a:3b:5e:0f:
++ e7:8c:b8:c6:7c:ef:37:fd:74:e2:c8:4f:33:72:e1:94:39:6d:
++ bd:12:af:be:0c:4e:70:7c:1b:6f:8d:b3:32:93:73:44:16:6d:
++ e8:f4:f7:e0:95:80:8f:96:5d:38:a4:f4:ab:de:0a:30:87:93:
++ d8:4d:00:71:62:45:27:4b:3a:42:84:5b:7f:65:b7:67:34:52:
++ 2d:9c:16:6b:aa:a8:d8:7b:a3:42:4c:71:c7:0c:ca:3e:83:e4:
++ a6:ef:b7:01:30:5e:51:a3:79:f5:70:69:a6:41:44:0f:86:b0:
++ 2c:91:c6:3d:ea:ae:0f:84
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 6c61dac3a2def031506be036d2a6fe401994fbd13df9c8d466599274c446ec98
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 80544274841616 (0x49412ce40010)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = HU, L = Budapest, O = NetLock Kft., OU = Tan\C3\BAs\C3\ADtv\C3\A1nykiad\C3\B3k (Certification Services), CN = NetLock Arany (Class Gold) F\C5\91tan\C3\BAs\C3\ADtv\C3\A1ny
++ Validity
++ Not Before: Dec 11 15:08:21 2008 GMT
++ Not After : Dec 6 15:08:21 2028 GMT
++ Subject: C = HU, L = Budapest, O = NetLock Kft., OU = Tan\C3\BAs\C3\ADtv\C3\A1nykiad\C3\B3k (Certification Services), CN = NetLock Arany (Class Gold) F\C5\91tan\C3\BAs\C3\ADtv\C3\A1ny
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:c4:24:5e:73:be:4b:6d:14:c3:a1:f4:e3:97:90:
++ 6e:d2:30:45:1e:3c:ee:67:d9:64:e0:1a:8a:7f:ca:
++ 30:ca:83:e3:20:c1:e3:f4:3a:d3:94:5f:1a:7c:5b:
++ 6d:bf:30:4f:84:27:f6:9f:1f:49:bc:c6:99:0a:90:
++ f2:0f:f5:7f:43:84:37:63:51:8b:7a:a5:70:fc:7a:
++ 58:cd:8e:9b:ed:c3:46:6c:84:70:5d:da:f3:01:90:
++ 23:fc:4e:30:a9:7e:e1:27:63:e7:ed:64:3c:a0:b8:
++ c9:33:63:fe:16:90:ff:b0:b8:fd:d7:a8:c0:c0:94:
++ 43:0b:b6:d5:59:a6:9e:56:d0:24:1f:70:79:af:db:
++ 39:54:0d:65:75:d9:15:41:94:01:af:5e:ec:f6:8d:
++ f1:ff:ad:64:fe:20:9a:d7:5c:eb:fe:a6:1f:08:64:
++ a3:8b:76:55:ad:1e:3b:28:60:2e:87:25:e8:aa:af:
++ 1f:c6:64:46:20:b7:70:7f:3c:de:48:db:96:53:b7:
++ 39:77:e4:1a:e2:c7:16:84:76:97:5b:2f:bb:19:15:
++ 85:f8:69:85:f5:99:a7:a9:f2:34:a7:a9:b6:a6:03:
++ fc:6f:86:3d:54:7c:76:04:9b:6b:f9:40:5d:00:34:
++ c7:2e:99:75:9d:e5:88:03:aa:4d:f8:03:d2:42:76:
++ c0:1b
++ Exponent: 43147 (0xa88b)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE, pathlen:4
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ CC:FA:67:93:F0:B6:B8:D0:A5:C0:1E:F3:53:FD:8C:53:DF:83:D7:96
++ Signature Algorithm: sha256WithRSAEncryption
++ ab:7f:ee:1c:16:a9:9c:3c:51:00:a0:c0:11:08:05:a7:99:e6:
++ 6f:01:88:54:61:6e:f1:b9:18:ad:4a:ad:fe:81:40:23:94:2f:
++ fb:75:7c:2f:28:4b:62:24:81:82:0b:f5:61:f1:1c:6e:b8:61:
++ 38:eb:81:fa:62:a1:3b:5a:62:d3:94:65:c4:e1:e6:6d:82:f8:
++ 2f:25:70:b2:21:26:c1:72:51:1f:8c:2c:c3:84:90:c3:5a:8f:
++ ba:cf:f4:a7:65:a5:eb:98:d1:fb:05:b2:46:75:15:23:6a:6f:
++ 85:63:30:80:f0:d5:9e:1f:29:1c:c2:6c:b0:50:59:5d:90:5b:
++ 3b:a8:0d:30:cf:bf:7d:7f:ce:f1:9d:83:bd:c9:46:6e:20:a6:
++ f9:61:51:ba:21:2f:7b:be:a5:15:63:a1:d4:95:87:f1:9e:b9:
++ f3:89:f3:3d:85:b8:b8:db:be:b5:b9:29:f9:da:37:05:00:49:
++ 94:03:84:44:e7:bf:43:31:cf:75:8b:25:d1:f4:a6:64:f5:92:
++ f6:ab:05:eb:3d:e9:a5:0b:36:62:da:cc:06:5f:36:8b:b6:5e:
++ 31:b8:2a:fb:5e:f6:71:df:44:26:9e:c4:e6:0d:91:b4:2e:75:
++ 95:80:51:6a:4b:30:a6:b0:62:a1:93:f1:9b:d8:ce:c4:63:75:
++ 3f:59:47:b1
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 6b9c08e86eb0f767cfad65cd98b62149e5494a67f5845e7bd1ed019f27b86bd6
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 76:b1:20:52:74:f0:85:87:46:b3:f8:23:1a:f6:c2:c0
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = CH, O = WISeKey, OU = OISTE Foundation Endorsed, CN = OISTE WISeKey Global Root GB CA
++ Validity
++ Not Before: Dec 1 15:00:32 2014 GMT
++ Not After : Dec 1 15:10:31 2039 GMT
++ Subject: C = CH, O = WISeKey, OU = OISTE Foundation Endorsed, CN = OISTE WISeKey Global Root GB CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:d8:17:b7:1c:4a:24:2a:d6:97:b1:ca:e2:1e:fb:
++ 7d:38:ef:98:f5:b2:39:98:4e:27:b8:11:5d:7b:d2:
++ 25:94:88:82:15:26:6a:1b:31:bb:a8:5b:21:21:2b:
++ d8:0f:4e:9f:5a:f1:b1:5a:e4:79:d6:32:23:2b:e1:
++ 53:cc:99:45:5c:7b:4f:ad:bc:bf:87:4a:0b:4b:97:
++ 5a:a8:f6:48:ec:7d:7b:0d:cd:21:06:df:9e:15:fd:
++ 41:8a:48:b7:20:f4:a1:7a:1b:57:d4:5d:50:ff:ba:
++ 67:d8:23:99:1f:c8:3f:e3:de:ff:6f:5b:77:b1:6b:
++ 6e:b8:c9:64:f7:e1:ca:41:46:0e:29:71:d0:b9:23:
++ fc:c9:81:5f:4e:f7:6f:df:bf:84:ad:73:64:bb:b7:
++ 42:8e:69:f6:d4:76:1d:7e:9d:a7:b8:57:8a:51:67:
++ 72:d7:d4:a8:b8:95:54:40:73:03:f6:ea:f4:eb:fe:
++ 28:42:77:3f:9d:23:1b:b2:b6:3d:80:14:07:4c:2e:
++ 4f:f7:d5:0a:16:0d:bd:66:43:37:7e:23:43:79:c3:
++ 40:86:f5:4c:29:da:8e:9a:ad:0d:a5:04:87:88:1e:
++ 85:e3:e9:53:d5:9b:c8:8b:03:63:78:eb:e0:19:4a:
++ 6e:bb:2f:6b:33:64:58:93:ad:69:bf:8f:1b:ef:82:
++ 48:c7
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage:
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 35:0F:C8:36:63:5E:E2:A3:EC:F9:3B:66:15:CE:51:52:E3:91:9A:3D
++ 1.3.6.1.4.1.311.21.1:
++ ...
++ Signature Algorithm: sha256WithRSAEncryption
++ 40:4c:fb:87:b2:99:81:90:7e:9d:c5:b0:b0:26:cd:88:7b:2b:
++ 32:8d:6e:b8:21:71:58:97:7d:ae:37:14:af:3e:e7:f7:9a:e2:
++ 7d:f6:71:98:99:04:aa:43:74:78:a3:e3:49:61:3e:73:8c:4d:
++ 94:e0:f9:71:c4:b6:16:0e:53:78:1f:d6:a2:87:2f:02:39:81:
++ 29:3c:af:15:98:21:30:fe:28:90:00:8c:d1:e1:cb:fa:5e:c8:
++ fd:f8:10:46:3b:a2:78:42:91:17:74:55:0a:de:50:67:4d:66:
++ d1:a7:ff:fd:d9:c0:b5:a8:a3:8a:ce:66:f5:0f:43:cd:a7:2b:
++ 57:7b:63:46:6a:aa:2e:52:d8:f4:ed:e1:6d:ad:29:90:78:48:
++ ba:e1:23:aa:a3:89:ec:b5:ab:96:c0:b4:4b:a2:1d:97:9e:7a:
++ f2:6e:40:71:df:68:f1:65:4d:ce:7c:05:df:53:65:a9:a5:f0:
++ b1:97:04:70:15:46:03:98:d4:d2:bf:54:b4:a0:58:7d:52:6f:
++ da:56:26:62:d4:d8:db:89:31:6f:1c:f0:22:c2:d3:62:1c:35:
++ cd:4c:69:15:54:1a:90:98:de:eb:1e:5f:ca:77:c7:cb:8e:3d:
++ 43:69:9c:9a:58:d0:24:3b:df:1b:40:96:7e:35:ad:81:c7:4e:
++ 71:ba:88:13
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 8560f91c3624daba9570b5fea0dbe36ff11a8323be9486854fb3f34a5571198d
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 21:2a:56:0c:ae:da:0c:ab:40:45:bf:2b:a2:2d:3a:ea
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = CH, O = WISeKey, OU = OISTE Foundation Endorsed, CN = OISTE WISeKey Global Root GC CA
++ Validity
++ Not Before: May 9 09:48:34 2017 GMT
++ Not After : May 9 09:58:33 2042 GMT
++ Subject: C = CH, O = WISeKey, OU = OISTE Foundation Endorsed, CN = OISTE WISeKey Global Root GC CA
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:4c:e9:50:c0:c6:0f:72:18:bc:d8:f1:ba:b3:89:
++ e2:79:4a:a3:16:a7:6b:54:24:db:51:ff:ea:f4:09:
++ 24:c3:0b:22:9f:cb:6a:27:82:81:0d:d2:c0:af:31:
++ e4:74:82:6e:ca:25:d9:8c:75:9d:f1:db:d0:9a:a2:
++ 4b:21:7e:16:a7:63:90:d2:39:d4:b1:87:78:5f:18:
++ 96:0f:50:1b:35:37:0f:6a:c6:dc:d9:13:4d:a4:8e:
++ 90:37:e6:bd:5b:31:91
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 48:87:14:AC:E3:C3:9E:90:60:3A:D7:CA:89:EE:D3:AD:8C:B4:50:66
++ 1.3.6.1.4.1.311.21.1:
++ ...
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:65:02:30:26:c7:69:5b:dc:d5:e7:b2:e7:c8:0c:8c:8c:c3:
++ dd:79:8c:1b:63:d5:c9:52:94:4e:4d:82:4a:73:1e:b2:80:84:
++ a9:25:c0:4c:5a:6d:49:29:60:78:13:e2:7e:48:eb:64:02:31:
++ 00:db:34:20:32:08:ff:9a:49:02:b6:88:de:14:af:5d:6c:99:
++ 71:8d:1a:3f:8b:d7:e0:a2:36:86:1c:07:82:3a:76:53:fd:c2:
++ a2:ed:ef:7b:b0:80:4f:58:0f:4b:53:39:bd
++-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
++
++# 85a0dd7dd720adb7ff05f83d542b209dc7ff4528f7d677b18389fea5e5c49e86
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 1289 (0x509)
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2
++ Validity
++ Not Before: Nov 24 18:27:00 2006 GMT
++ Not After : Nov 24 18:23:33 2031 GMT
++ Subject: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:9a:18:ca:4b:94:0d:00:2d:af:03:29:8a:f0:0f:
++ 81:c8:ae:4c:19:85:1d:08:9f:ab:29:44:85:f3:2f:
++ 81:ad:32:1e:90:46:bf:a3:86:26:1a:1e:fe:7e:1c:
++ 18:3a:5c:9c:60:17:2a:3a:74:83:33:30:7d:61:54:
++ 11:cb:ed:ab:e0:e6:d2:a2:7e:f5:6b:6f:18:b7:0a:
++ 0b:2d:fd:e9:3e:ef:0a:c6:b3:10:e9:dc:c2:46:17:
++ f8:5d:fd:a4:da:ff:9e:49:5a:9c:e6:33:e6:24:96:
++ f7:3f:ba:5b:2b:1c:7a:35:c2:d6:67:fe:ab:66:50:
++ 8b:6d:28:60:2b:ef:d7:60:c3:c7:93:bc:8d:36:91:
++ f3:7f:f8:db:11:13:c4:9c:77:76:c1:ae:b7:02:6a:
++ 81:7a:a9:45:83:e2:05:e6:b9:56:c1:94:37:8f:48:
++ 71:63:22:ec:17:65:07:95:8a:4b:df:8f:c6:5a:0a:
++ e5:b0:e3:5f:5e:6b:11:ab:0c:f9:85:eb:44:e9:f8:
++ 04:73:f2:e9:fe:5c:98:8c:f5:73:af:6b:b4:7e:cd:
++ d4:5c:02:2b:4c:39:e1:b2:95:95:2d:42:87:d7:d5:
++ b3:90:43:b7:6c:13:f1:de:dd:f6:c4:f8:89:3f:d1:
++ 75:f5:92:c3:91:d5:8a:88:d0:90:ec:dc:6d:de:89:
++ c2:65:71:96:8b:0d:03:fd:9c:bf:5b:16:ac:92:db:
++ ea:fe:79:7c:ad:eb:af:f7:16:cb:db:cd:25:2b:e5:
++ 1f:fb:9a:9f:e2:51:cc:3a:53:0c:48:e6:0e:bd:c9:
++ b4:76:06:52:e6:11:13:85:72:63:03:04:e0:04:36:
++ 2b:20:19:02:e8:74:a7:1f:b6:c9:56:66:f0:75:25:
++ dc:67:c1:0e:61:60:88:b3:3e:d1:a8:fc:a3:da:1d:
++ b0:d1:b1:23:54:df:44:76:6d:ed:41:d8:c1:b2:22:
++ b6:53:1c:df:35:1d:dc:a1:77:2a:31:e4:2d:f5:e5:
++ e5:db:c8:e0:ff:e5:80:d7:0b:63:a0:ff:33:a1:0f:
++ ba:2c:15:15:ea:97:b3:d2:a2:b5:be:f2:8c:96:1e:
++ 1a:8f:1d:6c:a4:61:37:b9:86:73:33:d7:97:96:9e:
++ 23:7d:82:a4:4c:81:e2:a1:d1:ba:67:5f:95:07:a3:
++ 27:11:ee:16:10:7b:bc:45:4a:4c:b2:04:d2:ab:ef:
++ d5:fd:0c:51:ce:50:6a:08:31:f9:91:da:0c:8f:64:
++ 5c:03:c3:3a:8b:20:3f:6e:8d:67:3d:3a:d6:fe:7d:
++ 5b:88:c9:5e:fb:cc:61:dc:8b:33:77:d3:44:32:35:
++ 09:62:04:92:16:10:d8:9e:27:47:fb:3b:21:e3:f8:
++ eb:1d:5b
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage:
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ 1A:84:62:BC:48:4C:33:25:04:D4:EE:D0:F6:03:C4:19:46:D1:94:6B
++ X509v3 Authority Key Identifier:
++ keyid:1A:84:62:BC:48:4C:33:25:04:D4:EE:D0:F6:03:C4:19:46:D1:94:6B
++ DirName:/C=BM/O=QuoVadis Limited/CN=QuoVadis Root CA 2
++ serial:05:09
++
++ Signature Algorithm: sha1WithRSAEncryption
++ 3e:0a:16:4d:9f:06:5b:a8:ae:71:5d:2f:05:2f:67:e6:13:45:
++ 83:c4:36:f6:f3:c0:26:0c:0d:b5:47:64:5d:f8:b4:72:c9:46:
++ a5:03:18:27:55:89:78:7d:76:ea:96:34:80:17:20:dc:e7:83:
++ f8:8d:fc:07:b8:da:5f:4d:2e:67:b2:84:fd:d9:44:fc:77:50:
++ 81:e6:7c:b4:c9:0d:0b:72:53:f8:76:07:07:41:47:96:0c:fb:
++ e0:82:26:93:55:8c:fe:22:1f:60:65:7c:5f:e7:26:b3:f7:32:
++ 90:98:50:d4:37:71:55:f6:92:21:78:f7:95:79:fa:f8:2d:26:
++ 87:66:56:30:77:a6:37:78:33:52:10:58:ae:3f:61:8e:f2:6a:
++ b1:ef:18:7e:4a:59:63:ca:8d:a2:56:d5:a7:2f:bc:56:1f:cf:
++ 39:c1:e2:fb:0a:a8:15:2c:7d:4d:7a:63:c6:6c:97:44:3c:d2:
++ 6f:c3:4a:17:0a:f8:90:d2:57:a2:19:51:a5:2d:97:41:da:07:
++ 4f:a9:50:da:90:8d:94:46:e1:3e:f0:94:fd:10:00:38:f5:3b:
++ e8:40:e1:b4:6e:56:1a:20:cc:6f:58:8d:ed:2e:45:8f:d6:e9:
++ 93:3f:e7:b1:2c:df:3a:d6:22:8c:dc:84:bb:22:6f:d0:f8:e4:
++ c6:39:e9:04:88:3c:c3:ba:eb:55:7a:6d:80:99:24:f5:6c:01:
++ fb:f8:97:b0:94:5b:eb:fd:d2:6f:f1:77:68:0d:35:64:23:ac:
++ b8:55:a1:03:d1:4d:42:19:dc:f8:75:59:56:a3:f9:a8:49:79:
++ f8:af:0e:b9:11:a0:7c:b7:6a:ed:34:d0:b6:26:62:38:1a:87:
++ 0c:f8:e8:fd:2e:d3:90:7f:07:91:2a:1d:d6:7e:5c:85:83:99:
++ b0:38:08:3f:e9:5e:f9:35:07:e4:c9:62:6e:57:7f:a7:50:95:
++ f7:ba:c8:9b:e6:8e:a2:01:c5:d6:66:bf:79:61:f3:3c:1c:e1:
++ b9:82:5c:5d:a0:c3:e9:d8:48:bd:19:a2:11:14:19:6e:b2:86:
++ 1b:68:3e:48:37:1a:88:b7:5d:96:5e:9c:c7:ef:27:62:08:e2:
++ 91:19:5c:d2:f1:21:dd:ba:17:42:82:97:71:81:53:31:a9:9f:
++ f6:7d:62:bf:72:e1:a3:93:1d:cc:8a:26:5a:09:38:d0:ce:d7:
++ 0d:80:16:b4:78:a5:3a:87:4c:8d:8a:a5:d5:46:97:f2:2c:10:
++ b9:bc:54:22:c0:01:50:69:43:9e:f4:b2:ef:6d:f8:ec:da:f1:
++ e3:b1:ef:df:91:8f:54:2a:0b:25:c1:26:19:c4:52:10:05:65:
++ d5:82:10:ea:c2:31:cd:2e
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 88ef81de202eb018452e43f864725cea5fbd1fc2d9d205730709c5d8b8690f46
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 2e:f5:9b:02:28:a7:db:7a:ff:d5:a3:a9:ee:bd:03:a0:cf:12:6a:1d
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 3 G3
++ Validity
++ Not Before: Jan 12 20:26:32 2012 GMT
++ Not After : Jan 12 20:26:32 2042 GMT
++ Subject: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 3 G3
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:b3:cb:0e:10:67:8e:ea:14:97:a7:32:2a:0a:56:
++ 36:7f:68:4c:c7:b3:6f:3a:23:14:91:ff:19:7f:a5:
++ ca:ac:ee:b3:76:9d:7a:e9:8b:1b:ab:6b:31:db:fa:
++ 0b:53:4c:af:c5:a5:1a:79:3c:8a:4c:ff:ac:df:25:
++ de:4e:d9:82:32:0b:44:de:ca:db:8c:ac:a3:6e:16:
++ 83:3b:a6:64:4b:32:89:fb:16:16:38:7e:eb:43:e2:
++ d3:74:4a:c2:62:0a:73:0a:dd:49:b3:57:d2:b0:0a:
++ 85:9d:71:3c:de:a3:cb:c0:32:f3:01:39:20:43:1b:
++ 35:d1:53:b3:b1:ee:c5:93:69:82:3e:16:b5:28:46:
++ a1:de:ea:89:09:ed:43:b8:05:46:8a:86:f5:59:47:
++ be:1b:6f:01:21:10:b9:fd:a9:d2:28:ca:10:39:09:
++ ca:13:36:cf:9c:ad:ad:40:74:79:2b:02:3f:34:ff:
++ fa:20:69:7d:d3:ee:61:f5:ba:b3:e7:30:d0:37:23:
++ 86:72:61:45:29:48:59:68:6f:77:a6:2e:81:be:07:
++ 4d:6f:af:ce:c4:45:13:91:14:70:06:8f:1f:9f:f8:
++ 87:69:b1:0e:ef:c3:89:19:eb:ea:1c:61:fc:7a:6c:
++ 8a:dc:d6:03:0b:9e:26:ba:12:dd:d4:54:39:ab:26:
++ a3:33:ea:75:81:da:2d:cd:0f:4f:e4:03:d1:ef:15:
++ 97:1b:6b:90:c5:02:90:93:66:02:21:b1:47:de:8b:
++ 9a:4a:80:b9:55:8f:b5:a2:2f:c0:d6:33:67:da:7e:
++ c4:a7:b4:04:44:eb:47:fb:e6:58:b9:f7:0c:f0:7b:
++ 2b:b1:c0:70:29:c3:40:62:2d:3b:48:69:dc:23:3c:
++ 48:eb:7b:09:79:a9:6d:da:a8:30:98:cf:80:72:03:
++ 88:a6:5b:46:ae:72:79:7c:08:03:21:65:ae:b7:e1:
++ 1c:a5:b1:2a:a2:31:de:66:04:f7:c0:74:e8:71:de:
++ ff:3d:59:cc:96:26:12:8b:85:95:57:1a:ab:6b:75:
++ 0b:44:3d:11:28:3c:7b:61:b7:e2:8f:67:4f:e5:ec:
++ 3c:4c:60:80:69:57:38:1e:01:5b:8d:55:e8:c7:df:
++ c0:cc:77:23:34:49:75:7c:f6:98:11:eb:2d:de:ed:
++ 41:2e:14:05:02:7f:e0:fe:20:eb:35:e7:11:ac:22:
++ ce:57:3d:de:c9:30:6d:10:03:85:cd:f1:ff:8c:16:
++ b5:c1:b2:3e:88:6c:60:7f:90:4f:95:f7:f6:2d:ad:
++ 01:39:07:04:fa:75:80:7d:bf:49:50:ed:ef:c9:c4:
++ 7c:1c:eb:80:7e:db:b6:d0:dd:13:fe:c9:d3:9c:d7:
++ b2:97:a9
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ C6:17:D0:BC:A8:EA:02:43:F2:1B:06:99:5D:2B:90:20:B9:D7:9C:E4
++ Signature Algorithm: sha256WithRSAEncryption
++ 34:61:d9:56:b5:12:87:55:4d:dd:a3:35:31:46:bb:a4:07:72:
++ bc:5f:61:62:e8:a5:fb:0b:37:b1:3c:b6:b3:fa:29:9d:7f:02:
++ f5:a4:c9:a8:93:b7:7a:71:28:69:8f:73:e1:52:90:da:d5:be:
++ 3a:e5:b7:76:6a:56:80:21:df:5d:e6:e9:3a:9e:e5:3e:f6:a2:
++ 69:c7:2a:0a:b0:18:47:dc:20:70:7d:52:a3:3e:59:7c:c1:ba:
++ c9:c8:15:40:61:ca:72:d6:70:ac:d2:b7:f0:1c:e4:86:29:f0:
++ ce:ef:68:63:d0:b5:20:8a:15:61:9a:7e:86:98:b4:c9:c2:76:
++ fb:cc:ba:30:16:cc:a3:61:c6:74:13:e5:6b:ef:a3:15:ea:03:
++ fe:13:8b:64:e4:d3:c1:d2:e8:84:fb:49:d1:10:4d:79:66:eb:
++ aa:fd:f4:8d:31:1e:70:14:ad:dc:de:67:13:4c:81:15:61:bc:
++ b7:d9:91:77:71:19:81:60:bb:f0:58:a5:b5:9c:0b:f7:8f:22:
++ 55:27:c0:4b:01:6d:3b:99:0d:d4:1d:9b:63:67:2f:d0:ee:0d:
++ ca:66:bc:94:4f:a6:ad:ed:fc:ee:63:ac:57:3f:65:25:cf:b2:
++ 86:8f:d0:08:ff:b8:76:14:6e:de:e5:27:ec:ab:78:b5:53:b9:
++ b6:3f:e8:20:f9:d2:a8:be:61:46:ca:87:8c:84:f3:f9:f1:a0:
++ 68:9b:22:1e:81:26:9b:10:04:91:71:c0:06:1f:dc:a0:d3:b9:
++ 56:a7:e3:98:2d:7f:83:9d:df:8c:2b:9c:32:8e:32:94:f0:01:
++ 3c:22:2a:9f:43:c2:2e:c3:98:39:07:38:7b:fc:5e:00:42:1f:
++ f3:32:26:79:83:84:f6:e5:f0:c1:51:12:c0:0b:1e:04:23:0c:
++ 54:a5:4c:2f:49:c5:4a:d1:b6:6e:60:0d:6b:fc:6b:8b:85:24:
++ 64:b7:89:0e:ab:25:47:5b:3c:cf:7e:49:bd:c7:e9:0a:c6:da:
++ f7:7e:0e:17:08:d3:48:97:d0:71:92:f0:0f:39:3e:34:6a:1c:
++ 7d:d8:f2:22:ae:bb:69:f4:33:b4:a6:48:55:d1:0f:0e:26:e8:
++ ec:b6:0b:2d:a7:85:35:cd:fd:59:c8:9f:d1:cd:3e:5a:29:34:
++ b9:3d:84:ce:b1:65:d4:59:91:91:56:75:21:c1:77:9e:f9:7a:
++ e1:60:9d:d3:ad:04:18:f4:7c:eb:5e:93:8f:53:4a:22:29:f8:
++ 48:2b:3e:4d:86:ac:5b:7f:cb:06:99:59:60:d8:58:65:95:8d:
++ 44:d1:f7:7f:7e:27:7f:7d:ae:80:f5:07:4c:b6:3e:9c:71:54:
++ 99:04:4b:fd:58:f9:98:f4
+ -----BEGIN CERTIFICATE-----
+ MIIFYDCCA0igAwIBAgIULvWbAiin23r/1aOp7r0DoM8Sah0wDQYJKoZIhvcNAQEL
+ BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc
+@@ -2063,159 +5559,489 @@ PlopNLk9hM6xZdRZkZFWdSHBd575euFgndOtBBj0fOtek49TSiIp+EgrPk2GrFt/
+ ywaZWWDYWGWVjUTR939+J399roD1B0y2PpxxVJkES/1Y+Zj0
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=DigiCert Assured ID Root G2 O=DigiCert Inc OU=www.digicert.com
+-# Subject: CN=DigiCert Assured ID Root G2 O=DigiCert Inc OU=www.digicert.com
+-# Label: "DigiCert Assured ID Root G2"
+-# Serial: 15385348160840213938643033620894905419
+-# MD5 Fingerprint: 92:38:b9:f8:63:24:82:65:2c:57:33:e6:fe:81:8f:9d
+-# SHA1 Fingerprint: a1:4b:48:d9:43:ee:0a:0e:40:90:4f:3c:e0:a4:c0:91:93:51:5d:3f
+-# SHA256 Fingerprint: 7d:05:eb:b6:82:33:9f:8c:94:51:ee:09:4e:eb:fe:fa:79:53:a1:14:ed:b2:f4:49:49:45:2f:ab:7d:2f:c1:85
++# 8fe4fb0af93a4d0d67db0bebb23e37c71bf325dcbcdd240ea04daf58b47e1840
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 44:57:34:24:5b:81:89:9b:35:f2:ce:b8:2b:3b:5b:a7:26:f0:75:28
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2 G3
++ Validity
++ Not Before: Jan 12 18:59:32 2012 GMT
++ Not After : Jan 12 18:59:32 2042 GMT
++ Subject: C = BM, O = QuoVadis Limited, CN = QuoVadis Root CA 2 G3
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:a1:ae:25:b2:01:18:dc:57:88:3f:46:eb:f9:af:
++ e2:eb:23:71:e2:9a:d1:61:66:21:5f:aa:af:27:51:
++ e5:6e:1b:16:d4:2d:7d:50:b0:53:77:bd:78:3a:60:
++ e2:64:02:9b:7c:86:9b:d6:1a:8e:ad:ff:1f:15:7f:
++ d5:95:1e:12:cb:e6:14:84:04:c1:df:36:b3:16:9f:
++ 8a:e3:c9:db:98:34:ce:d8:33:17:28:46:fc:a7:c9:
++ f0:d2:b4:d5:4d:09:72:49:f9:f2:87:e3:a9:da:7d:
++ a1:7d:6b:b2:3a:25:a9:6d:52:44:ac:f8:be:6e:fb:
++ dc:a6:73:91:90:61:a6:03:14:20:f2:e7:87:a3:88:
++ ad:ad:a0:8c:ff:a6:0b:25:52:25:e7:16:01:d5:cb:
++ b8:35:81:0c:a3:3b:f0:e1:e1:fc:5a:5d:ce:80:71:
++ 6d:f8:49:ab:3e:3b:ba:b8:d7:80:01:fb:a5:eb:5b:
++ b3:c5:5e:60:2a:31:a0:af:37:e8:20:3a:9f:a8:32:
++ 2c:0c:cc:09:1d:d3:9e:8e:5d:bc:4c:98:ee:c5:1a:
++ 68:7b:ec:53:a6:e9:14:35:a3:df:cd:80:9f:0c:48:
++ fb:1c:f4:f1:bf:4a:b8:fa:d5:8c:71:4a:c7:1f:ad:
++ fe:41:9a:b3:83:5d:f2:84:56:ef:a5:57:43:ce:29:
++ ad:8c:ab:55:bf:c4:fb:5b:01:dd:23:21:a1:58:00:
++ 8e:c3:d0:6a:13:ed:13:e3:12:2b:80:dc:67:e6:95:
++ b2:cd:1e:22:6e:2a:f8:41:d4:f2:ca:14:07:8d:8a:
++ 55:12:c6:69:f5:b8:86:68:2f:53:5e:b0:d2:aa:21:
++ c1:98:e6:30:e3:67:55:c7:9b:6e:ac:19:a8:55:a6:
++ 45:06:d0:23:3a:db:eb:65:5d:2a:11:11:f0:3b:4f:
++ ca:6d:f4:34:c4:71:e4:ff:00:5a:f6:5c:ae:23:60:
++ 85:73:f1:e4:10:b1:25:ae:d5:92:bb:13:c1:0c:e0:
++ 39:da:b4:39:57:b5:ab:35:aa:72:21:3b:83:35:e7:
++ 31:df:7a:21:6e:b8:32:08:7d:1d:32:91:15:4a:62:
++ 72:cf:e3:77:a1:bc:d5:11:1b:76:01:67:08:e0:41:
++ 0b:c3:eb:15:6e:f8:a4:19:d9:a2:ab:af:e2:27:52:
++ 56:2b:02:8a:2c:14:24:f9:bf:42:02:bf:26:c8:c6:
++ 8f:e0:6e:38:7d:53:2d:e5:ed:98:b3:95:63:68:7f:
++ f9:35:f4:df:88:c5:60:35:92:c0:7c:69:1c:61:95:
++ 16:d0:eb:de:0b:af:3e:04:10:45:65:58:50:38:af:
++ 48:f2:59:b6:16:f2:3c:0d:90:02:c6:70:2e:01:ad:
++ 3c:15:d7
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ ED:E7:6F:76:5A:BF:60:EC:49:5B:C6:A5:77:BB:72:16:71:9B:C4:3D
++ Signature Algorithm: sha256WithRSAEncryption
++ 91:df:80:3f:43:09:7e:71:c2:f7:eb:b3:88:8f:e1:51:b2:bc:
++ 3d:75:f9:28:5d:c8:bc:99:9b:7b:5d:aa:e5:ca:e1:0a:f7:e8:
++ b2:d3:9f:dd:67:31:7e:ba:01:aa:c7:6a:41:3b:90:d4:08:5c:
++ b2:60:6a:90:f0:c8:ce:03:62:f9:8b:ed:fb:6e:2a:dc:06:4d:
++ 3c:29:0f:89:16:8a:58:4c:48:0f:e8:84:61:ea:3c:72:a6:77:
++ e4:42:ae:88:a3:43:58:79:7e:ae:ca:a5:53:0d:a9:3d:70:bd:
++ 20:19:61:a4:6c:38:fc:43:32:e1:c1:47:ff:f8:ec:f1:11:22:
++ 32:96:9c:c2:f6:5b:69:96:7b:20:0c:43:41:9a:5b:f6:59:19:
++ 88:de:55:88:37:51:0b:78:5c:0a:1e:a3:42:fd:c7:9d:88:0f:
++ c0:f2:78:02:24:54:93:af:89:87:88:c9:4a:80:1d:ea:d0:6e:
++ 3e:61:2e:36:bb:35:0e:27:96:fd:66:34:3b:61:72:73:f1:16:
++ 5c:47:06:54:49:00:7a:58:12:b0:0a:ef:85:fd:b1:b8:33:75:
++ 6a:93:1c:12:e6:60:5e:6f:1d:7f:c9:1f:23:cb:84:61:9f:1e:
++ 82:44:f9:5f:ad:62:55:24:9a:52:98:ed:51:e7:a1:7e:97:3a:
++ e6:2f:1f:11:da:53:80:2c:85:9e:ab:35:10:db:22:5f:6a:c5:
++ 5e:97:53:f2:32:02:09:30:a3:58:f0:0d:01:d5:72:c6:b1:7c:
++ 69:7b:c3:f5:36:45:cc:61:6e:5e:4c:94:c5:5e:ae:e8:0e:5e:
++ 8b:bf:f7:cd:e0:ed:a1:0e:1b:33:ee:54:18:fe:0f:be:ef:7e:
++ 84:6b:43:e3:70:98:db:5d:75:b2:0d:59:07:85:15:23:39:d6:
++ f1:df:a9:26:0f:d6:48:c7:b3:a6:22:f5:33:37:5a:95:47:9f:
++ 7b:ba:18:15:6f:ff:d6:14:64:83:49:d2:0a:67:21:db:0f:35:
++ 63:60:28:22:e3:b1:95:83:cd:85:a6:dd:2f:0f:e7:67:52:6e:
++ bb:2f:85:7c:f5:4a:73:e7:c5:3e:c0:bd:21:12:05:3f:fc:b7:
++ 03:49:02:5b:c8:25:e6:e2:54:38:f5:79:87:8c:1d:53:b2:4e:
++ 85:7b:06:38:c7:2c:f8:f8:b0:72:8d:25:e5:77:52:f4:03:1c:
++ 48:a6:50:5f:88:20:30:6e:f2:82:43:ab:3d:97:84:e7:53:fb:
++ 21:c1:4f:0f:22:9a:86:b8:59:2a:f6:47:3d:19:88:2d:e8:85:
++ e1:9e:ec:85:08:6a:b1:6c:34:c9:1d:ec:48:2b:3b:78:ed:66:
++ c4:8e:79:69:83:de:7f:8c
+ -----BEGIN CERTIFICATE-----
+-MIIDljCCAn6gAwIBAgIQC5McOtY5Z+pnI7/Dr5r0SzANBgkqhkiG9w0BAQsFADBl
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv
+-b3QgRzIwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQG
+-EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNl
+-cnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzIwggEi
+-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5ygvUj82ckmIkzTz+GoeMVSA
+-n61UQbVH35ao1K+ALbkKz3X9iaV9JPrjIgwrvJUXCzO/GU1BBpAAvQxNEP4Htecc
+-biJVMWWXvdMX0h5i89vqbFCMP4QMls+3ywPgym2hFEwbid3tALBSfK+RbLE4E9Hp
+-EgjAALAcKxHad3A2m67OeYfcgnDmCXRwVWmvo2ifv922ebPynXApVfSr/5Vh88lA
+-bx3RvpO704gqu52/clpWcTs/1PPRCv4o76Pu2ZmvA9OPYLfykqGxvYmJHzDNw6Yu
+-YjOuFgJ3RFrngQo8p0Quebg/BLxcoIfhG69Rjs3sLPr4/m3wOnyqi+RnlTGNAgMB
+-AAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQW
+-BBTOw0q5mVXyuNtgv6l+vVa1lzan1jANBgkqhkiG9w0BAQsFAAOCAQEAyqVVjOPI
+-QW5pJ6d1Ee88hjZv0p3GeDgdaZaikmkuOGybfQTUiaWxMTeKySHMq2zNixya1r9I
+-0jJmwYrA8y8678Dj1JGG0VDjA9tzd29KOVPt3ibHtX2vK0LRdWLjSisCx1BL4Gni
+-lmwORGYQRI+tBev4eaymG+g3NJ1TyWGqolKvSnAWhsI6yLETcDbYz+70CjTVW0z9
+-B5yiutkBclzzTcHdDrEcDcRjvq30FPuJ7KJBDkzMyFdA0G4Dqs0MjomZmWzwPDCv
+-ON9vvKO+KSAnq3T/EyJ43pdSVR6DtVQgA+6uwE9W3jfMw3+qBCe703e4YtsXfJwo
+-IhNzbM8m9Yop5w==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+ -----END CERTIFICATE-----
+
+-# Issuer: CN=DigiCert Assured ID Root G3 O=DigiCert Inc OU=www.digicert.com
+-# Subject: CN=DigiCert Assured ID Root G3 O=DigiCert Inc OU=www.digicert.com
+-# Label: "DigiCert Assured ID Root G3"
+-# Serial: 15459312981008553731928384953135426796
+-# MD5 Fingerprint: 7c:7f:65:31:0c:81:df:8d:ba:3e:99:e2:5c:ad:6e:fb
+-# SHA1 Fingerprint: f5:17:a2:4f:9a:48:c6:c9:f8:a2:00:26:9f:dc:0f:48:2c:ab:30:89
+-# SHA256 Fingerprint: 7e:37:cb:8b:4c:47:09:0c:ab:36:55:1b:a6:f4:5d:b8:40:68:0f:ba:16:6a:95:2d:b1:00:71:7f:43:05:3f:c2
++# 513b2cecb810d4cde5dd85391adfc6c2dd60d87bb736d2b521484aa47a0ebef6
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 0 (0x0)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = JP, O = "SECOM Trust Systems CO.,LTD.", OU = Security Communication RootCA2
++ Validity
++ Not Before: May 29 05:00:39 2009 GMT
++ Not After : May 29 05:00:39 2029 GMT
++ Subject: C = JP, O = "SECOM Trust Systems CO.,LTD.", OU = Security Communication RootCA2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:d0:15:39:52:b1:52:b3:ba:c5:59:82:c4:5d:52:
++ ae:3a:43:65:80:4b:c7:f2:96:bc:db:36:97:d6:a6:
++ 64:8c:a8:5e:f0:e3:0a:1c:f7:df:97:3d:4b:ae:f6:
++ 5d:ec:21:b5:41:ab:cd:b9:7e:76:9f:be:f9:3e:36:
++ 34:a0:3b:c1:f6:31:11:45:74:93:3d:57:80:c5:f9:
++ 89:99:ca:e5:ab:6a:d4:b5:da:41:90:10:c1:d6:d6:
++ 42:89:c2:bf:f4:38:12:95:4c:54:05:f7:36:e4:45:
++ 83:7b:14:65:d6:dc:0c:4d:d1:de:7e:0c:ab:3b:c4:
++ 15:be:3a:56:a6:5a:6f:76:69:52:a9:7a:b9:c8:eb:
++ 6a:9a:5d:52:d0:2d:0a:6b:35:16:09:10:84:d0:6a:
++ ca:3a:06:00:37:47:e4:7e:57:4f:3f:8b:eb:67:b8:
++ 88:aa:c5:be:53:55:b2:91:c4:7d:b9:b0:85:19:06:
++ 78:2e:db:61:1a:fa:85:f5:4a:91:a1:e7:16:d5:8e:
++ a2:39:df:94:b8:70:1f:28:3f:8b:fc:40:5e:63:83:
++ 3c:83:2a:1a:99:6b:cf:de:59:6a:3b:fc:6f:16:d7:
++ 1f:fd:4a:10:eb:4e:82:16:3a:ac:27:0c:53:f1:ad:
++ d5:24:b0:6b:03:50:c1:2d:3c:16:dd:44:34:27:1a:
++ 75:fb
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 0A:85:A9:77:65:05:98:7C:40:81:F8:0F:97:2C:38:F1:0A:EC:3C:CF
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: sha256WithRSAEncryption
++ 4c:3a:a3:44:ac:b9:45:b1:c7:93:7e:c8:0b:0a:42:df:64:ea:
++ 1c:ee:59:6c:08:ba:89:5f:6a:ca:4a:95:9e:7a:8f:07:c5:da:
++ 45:72:82:71:0e:3a:d2:cc:6f:a7:b4:a1:23:bb:f6:24:9f:cb:
++ 17:fe:8c:a6:ce:c2:d2:db:cc:8d:fc:71:fc:03:29:c1:6c:5d:
++ 33:5f:64:b6:65:3b:89:6f:18:76:78:f5:dc:a2:48:1f:19:3f:
++ 8e:93:eb:f1:fa:17:ee:cd:4e:e3:04:12:55:d6:e5:e4:dd:fb:
++ 3e:05:7c:e2:1d:5e:c6:a7:bc:97:4f:68:3a:f5:e9:2e:0a:43:
++ b6:af:57:5c:62:68:7c:b7:fd:a3:8a:84:a0:ac:62:be:2b:09:
++ 87:34:f0:6a:01:bb:9b:29:56:3c:fe:00:37:cf:23:6c:f1:4e:
++ aa:b6:74:46:12:6c:91:ee:34:d5:ec:9a:91:e7:44:be:90:31:
++ 72:d5:49:02:f6:02:e5:f4:1f:eb:7c:d9:96:55:a9:ff:ec:8a:
++ f9:99:47:ff:35:5a:02:aa:04:cb:8a:5b:87:71:29:91:bd:a4:
++ b4:7a:0d:bd:9a:f5:57:23:00:07:21:17:3f:4a:39:d1:05:49:
++ 0b:a7:b6:37:81:a5:5d:8c:aa:33:5e:81:28:7c:a7:7d:27:eb:
++ 00:ae:8d:37
+ -----BEGIN CERTIFICATE-----
+-MIICRjCCAc2gAwIBAgIQC6Fa+h3foLVJRK/NJKBs7DAKBggqhkjOPQQDAzBlMQsw
+-CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu
+-ZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3Qg
+-RzMwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBlMQswCQYDVQQGEwJV
+-UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu
+-Y29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJvb3QgRzMwdjAQBgcq
+-hkjOPQIBBgUrgQQAIgNiAAQZ57ysRGXtzbg/WPuNsVepRC0FFfLvC/8QdJ+1YlJf
+-Zn4f5dwbRXkLzMZTCp2NXQLZqVneAlr2lSoOjThKiknGvMYDOAdfVdp+CW7if17Q
+-RSAPWXYQ1qAk8C3eNvJsKTmjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/
+-BAQDAgGGMB0GA1UdDgQWBBTL0L2p4ZgFUaFNN6KDec6NHSrkhDAKBggqhkjOPQQD
+-AwNnADBkAjAlpIFFAmsSS3V0T8gj43DydXLefInwz5FyYZ5eEJJZVrmDxxDnOOlY
+-JjZ91eQ0hjkCMHw2U/Aw5WJjOpnitqM7mzT6HtoQknFekROn3aRukswy1vUhZscv
+-6pZjamVFkpUBtA==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+ -----END CERTIFICATE-----
+
+-# Issuer: CN=DigiCert Global Root G2 O=DigiCert Inc OU=www.digicert.com
+-# Subject: CN=DigiCert Global Root G2 O=DigiCert Inc OU=www.digicert.com
+-# Label: "DigiCert Global Root G2"
+-# Serial: 4293743540046975378534879503202253541
+-# MD5 Fingerprint: e4:a6:8a:c8:54:ac:52:42:46:0a:fd:72:48:1b:2a:44
+-# SHA1 Fingerprint: df:3c:24:f9:bf:d6:66:76:1b:26:80:73:fe:06:d1:cc:8d:4f:82:a4
+-# SHA256 Fingerprint: cb:3c:cb:b7:60:31:e5:e0:13:8f:8d:d3:9a:23:f9:de:47:ff:c3:5e:43:c1:14:4c:ea:27:d4:6a:5a:b1:cb:5f
++# 1a0d20445de5ba1862d19ef880858cbce50102b36e8f0a040c3c69e74522fe6e
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 20:a4:c4:7f:dd:df:e1:c7:53:63:07:13:88:77:60:12
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO Certification Authority
++ Validity
++ Not Before: Jan 1 00:00:00 2011 GMT
++ Not After : Dec 31 23:59:59 2030 GMT
++ Subject: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO Certification Authority
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:d0:40:8b:8b:72:e3:91:1b:f7:51:c1:1b:54:04:
++ 98:d3:a9:bf:c1:e6:8a:5d:3b:87:fb:bb:88:ce:0d:
++ e3:2f:3f:06:96:f0:a2:29:50:99:ae:db:3b:a1:57:
++ b0:74:51:71:cd:ed:42:91:4d:41:fe:a9:c8:d8:6a:
++ 86:77:44:bb:59:66:97:50:5e:b4:d4:2c:70:44:cf:
++ da:37:95:42:69:3c:30:c4:71:b3:52:f0:21:4d:a1:
++ d8:ba:39:7c:1c:9e:a3:24:9d:f2:83:16:98:aa:16:
++ 7c:43:9b:15:5b:b7:ae:34:91:fe:d4:62:26:18:46:
++ 9a:3f:eb:c1:f9:f1:90:57:eb:ac:7a:0d:8b:db:72:
++ 30:6a:66:d5:e0:46:a3:70:dc:68:d9:ff:04:48:89:
++ 77:de:b5:e9:fb:67:6d:41:e9:bc:39:bd:32:d9:62:
++ 02:f1:b1:a8:3d:6e:37:9c:e2:2f:e2:d3:a2:26:8b:
++ c6:b8:55:43:88:e1:23:3e:a5:d2:24:39:6a:47:ab:
++ 00:d4:a1:b3:a9:25:fe:0d:3f:a7:1d:ba:d3:51:c1:
++ 0b:a4:da:ac:38:ef:55:50:24:05:65:46:93:34:4f:
++ 2d:8d:ad:c6:d4:21:19:d2:8e:ca:05:61:71:07:73:
++ 47:e5:8a:19:12:bd:04:4d:ce:4e:9c:a5:48:ac:bb:
++ 26:f7
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 0B:58:E5:8B:C6:4C:15:37:A4:40:A9:30:A9:21:BE:47:36:5A:56:FF
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: sha1WithRSAEncryption
++ 2f:c9:c4:1c:07:3b:cf:61:02:00:b1:d9:21:51:75:72:03:30:
++ b0:c4:16:1f:6c:00:8b:10:ac:af:f1:47:d4:ae:10:3c:0c:1a:
++ f8:d4:93:6c:ac:10:37:7c:b7:a6:83:64:ad:cd:df:0e:87:33:
++ 9d:37:b0:c6:7b:38:72:b1:f3:1a:0e:a3:f9:55:7a:6d:03:66:
++ 03:17:95:4a:f1:b1:7a:df:56:21:06:42:8f:b1:d3:a8:85:de:
++ ee:97:1d:62:eb:a7:e7:31:12:66:c3:0f:a6:4b:2e:41:82:f7:
++ fd:c9:1b:a8:1b:af:ee:3c:ce:e3:9c:ae:28:07:a1:2c:9b:24:
++ c2:0f:23:26:83:32:8b:86:0f:1f:2b:12:46:25:16:8f:76:90:
++ 03:6b:de:bc:aa:22:68:6b:8c:a1:ac:2b:11:39:a6:db:70:c2:
++ 7d:72:e9:33:e7:fc:26:f1:74:5a:91:e6:9d:84:ac:f8:a8:06:
++ 19:46:e6:a7:e9:aa:34:22:a4:a1:9f:7a:ad:b7:b2:a4:9a:33:
++ 88:71:02:3c:2e:d6:7a:b2:1f:a2:ca:c0:dd:2f:10:94:fd:b3:
++ 8c:84:20:79:46:d5:05:d4:10:e4:d2:db:64:4f:b8:5b:ee:1b:
++ c5:20:47:5b:94:ab:6e:d4:95:33:1d:a6:15:71:f1:f8:94:ca:
++ 54:39:3e:c1
+ -----BEGIN CERTIFICATE-----
+-MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
+-MjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVT
+-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
+-b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG
+-9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI
+-2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx
+-1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ
+-q2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz
+-tCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ
+-vIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo0IwQDAP
+-BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV
+-5uNu5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY
+-1Yl9PMWLSn/pvtsrF9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4
+-NeF22d+mQrvHRAiGfzZ0JFrabA0UWTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NG
+-Fdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBHQRFXGU7Aj64GxJUTFy8bJZ91
+-8rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/iyK5S9kJRaTe
+-pLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl
+-MrY=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+ -----END CERTIFICATE-----
+
+-# Issuer: CN=DigiCert Global Root G3 O=DigiCert Inc OU=www.digicert.com
+-# Subject: CN=DigiCert Global Root G3 O=DigiCert Inc OU=www.digicert.com
+-# Label: "DigiCert Global Root G3"
+-# Serial: 7089244469030293291760083333884364146
+-# MD5 Fingerprint: f5:5d:a4:50:a5:fb:28:7e:1e:0f:0d:cc:96:57:56:ca
+-# SHA1 Fingerprint: 7e:04:de:89:6a:3e:66:6d:00:e6:87:d3:3f:fa:d9:3b:e8:3d:34:9e
+-# SHA256 Fingerprint: 31:ad:66:48:f8:10:41:38:c7:38:f3:9e:a4:32:01:33:39:3e:3a:18:cc:02:29:6e:f9:7c:2a:c9:ef:67:31:d0
++# 1793927a0614549789adce2f8f34f7f0b66d0f3ae3a3b84d21ec15dbba4fadc7
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 1f:47:af:aa:62:00:70:50:54:4c:01:9e:9b:63:99:2a
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO ECC Certification Authority
++ Validity
++ Not Before: Mar 6 00:00:00 2008 GMT
++ Not After : Jan 18 23:59:59 2038 GMT
++ Subject: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO ECC Certification Authority
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:03:47:7b:2f:75:c9:82:15:85:fb:75:e4:91:16:
++ d4:ab:62:99:f5:3e:52:0b:06:ce:41:00:7f:97:e1:
++ 0a:24:3c:1d:01:04:ee:3d:d2:8d:09:97:0c:e0:75:
++ e4:fa:fb:77:8a:2a:f5:03:60:4b:36:8b:16:23:16:
++ ad:09:71:f4:4a:f4:28:50:b4:fe:88:1c:6e:3f:6c:
++ 2f:2f:09:59:5b:a5:5b:0b:33:99:e2:c3:3d:89:f9:
++ 6a:2c:ef:b2:d3:06:e9
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 75:71:A7:19:48:19:BC:9D:9D:EA:41:47:DF:94:C4:48:77:99:D3:79
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:65:02:31:00:ef:03:5b:7a:ac:b7:78:0a:72:b7:88:df:ff:
++ b5:46:14:09:0a:fa:a0:e6:7d:08:c6:1a:87:bd:18:a8:73:bd:
++ 26:ca:60:0c:9d:ce:99:9f:cf:5c:0f:30:e1:be:14:31:ea:02:
++ 30:14:f4:93:3c:49:a7:33:7a:90:46:47:b3:63:7d:13:9b:4e:
++ b7:6f:18:37:80:53:fe:dd:20:e0:35:9a:36:d1:c7:01:b9:e6:
++ dc:dd:f3:ff:1d:2c:3a:16:57:d9:92:39:d6
+ -----BEGIN CERTIFICATE-----
+-MIICPzCCAcWgAwIBAgIQBVVWvPJepDU1w6QP1atFcjAKBggqhkjOPQQDAzBhMQsw
+-CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu
+-ZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMzAe
+-Fw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVTMRUw
+-EwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20x
+-IDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEczMHYwEAYHKoZIzj0CAQYF
+-K4EEACIDYgAE3afZu4q4C/sLfyHS8L6+c/MzXRq8NOrexpu80JX28MzQC7phW1FG
+-fp4tn+6OYwwX7Adw9c+ELkCDnOg/QW07rdOkFFk2eJ0DQ+4QE2xy3q6Ip6FrtUPO
+-Z9wj/wMco+I+o0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAd
+-BgNVHQ4EFgQUs9tIpPmhxdiuNkHMEWNpYim8S8YwCgYIKoZIzj0EAwMDaAAwZQIx
+-AK288mw/EkrRLTnDCgmXc/SINoyIJ7vmiI1Qhadj+Z4y3maTD/HMsQmP3Wyr+mt/
+-oAIwOWZbwmSNuJ5Q3KjVSaLtx9zRSX8XAbjIho9OjIgrqJqpisXRAL34VOKa5Vt8
+-sycX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+ -----END CERTIFICATE-----
+
+-# Issuer: CN=DigiCert Trusted Root G4 O=DigiCert Inc OU=www.digicert.com
+-# Subject: CN=DigiCert Trusted Root G4 O=DigiCert Inc OU=www.digicert.com
+-# Label: "DigiCert Trusted Root G4"
+-# Serial: 7451500558977370777930084869016614236
+-# MD5 Fingerprint: 78:f2:fc:aa:60:1f:2f:b4:eb:c9:37:ba:53:2e:75:49
+-# SHA1 Fingerprint: dd:fb:16:cd:49:31:c9:73:a2:03:7d:3f:c8:3a:4d:7d:77:5d:05:e4
+-# SHA256 Fingerprint: 55:2f:7b:dc:f1:a7:af:9e:6c:e6:72:01:7f:4f:12:ab:f7:72:40:c7:8e:76:1a:c2:03:d1:d9:d2:0a:c8:99:88
++# 4ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 5c:8b:99:c5:5a:94:c5:d2:71:56:de:cd:89:80:cc:26
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust ECC Certification Authority
++ Validity
++ Not Before: Feb 1 00:00:00 2010 GMT
++ Not After : Jan 18 23:59:59 2038 GMT
++ Subject: C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust ECC Certification Authority
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:1a:ac:54:5a:a9:f9:68:23:e7:7a:d5:24:6f:53:
++ c6:5a:d8:4b:ab:c6:d5:b6:d1:e6:73:71:ae:dd:9c:
++ d6:0c:61:fd:db:a0:89:03:b8:05:14:ec:57:ce:ee:
++ 5d:3f:e2:21:b3:ce:f7:d4:8a:79:e0:a3:83:7e:2d:
++ 97:d0:61:c4:f1:99:dc:25:91:63:ab:7f:30:a3:b4:
++ 70:e2:c7:a1:33:9c:f3:bf:2e:5c:53:b1:5f:b3:7d:
++ 32:7f:8a:34:e3:79:79
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 3A:E1:09:86:D4:CF:19:C2:96:76:74:49:76:DC:E0:35:C6:63:63:9A
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:65:02:30:36:67:a1:16:08:dc:e4:97:00:41:1d:4e:be:e1:
++ 63:01:cf:3b:aa:42:11:64:a0:9d:94:39:02:11:79:5c:7b:1d:
++ fa:64:b9:ee:16:42:b3:bf:8a:c2:09:c4:ec:e4:b1:4d:02:31:
++ 00:e9:2a:61:47:8c:52:4a:4b:4e:18:70:f6:d6:44:d6:6e:f5:
++ 83:ba:6d:58:bd:24:d9:56:48:ea:ef:c4:a2:46:81:88:6a:3a:
++ 46:d1:a9:9b:4d:c9:61:da:d1:5d:57:6a:18
+ -----BEGIN CERTIFICATE-----
+-MIIFkDCCA3igAwIBAgIQBZsbV56OITLiOQe9p3d1XDANBgkqhkiG9w0BAQwFADBi
+-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+-d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3Qg
+-RzQwHhcNMTMwODAxMTIwMDAwWhcNMzgwMTE1MTIwMDAwWjBiMQswCQYDVQQGEwJV
+-UzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQu
+-Y29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVzdGVkIFJvb3QgRzQwggIiMA0GCSqG
+-SIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBzaN675F1KPDAiMGkz7MKnJS7JIT3y
+-ithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbrVsaXbR2rsnnyyhHS5F/WBTxSD1If
+-xp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTREEQQLt+C8weE5nQ7bXHiLQwb7iDV
+-ySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJz82sNEBfsXpm7nfISKhmV1efVFiO
+-DCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyOj4DatpGYQJB5w3jHtrHEtWoYOAMQ
+-jdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6RAXwhTNS8rhsDdV14Ztk6MUSaM0C/
+-CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k98FpiHaYdj1ZXUJ2h4mXaXpI8OCi
+-EhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJtppEGSt+wJS00mFt6zPZxd9LBADM
+-fRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUadmJ+9oCw++hkpjPRiQfhvbfmQ6QY
+-uKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZBdd56rF+NP8m800ERElvlEFDrMcXK
+-chYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVfnSD8oR7FwI+isX4KJpn15GkvmB0t
+-9dmpsh3lGwIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB
+-hjAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wDQYJKoZIhvcNAQEMBQAD
+-ggIBALth2X2pbL4XxJEbw6GiAI3jZGgPVs93rnD5/ZpKmbnJeFwMDF/k5hQpVgs2
+-SV1EY+CtnJYYZhsjDT156W1r1lT40jzBQ0CuHVD1UvyQO7uYmWlrx8GnqGikJ9yd
+-+SeuMIW59mdNOj6PWTkiU0TryF0Dyu1Qen1iIQqAyHNm0aAFYF/opbSnr6j3bTWc
+-fFqK1qI4mfN4i/RN0iAL3gTujJtHgXINwBQy7zBZLq7gcfJW5GqXb5JQbZaNaHqa
+-sjYUegbyJLkJEVDXCLG4iXqEI2FCKeWjzaIgQdfRnGTZ6iahixTXTBmyUEFxPT9N
+-cCOGDErcgdLMMpSEDQgJlxxPwO5rIHQw0uA5NBCFIRUBCOhVMt5xSdkoF1BN5r5N
+-0XWs0Mr7QbhDparTwwVETyw2m+L64kW4I1NsBm9nVX9GtUw/bihaeSbSpKhil9Ie
+-4u1Ki7wb/UdKDd9nZn6yW0HQO+T0O/QEY+nvwlQAUaCKKsnOeMzV6ocEGLPOr0mI
+-r/OSmbaz5mEP0oUA51Aa5BuVnRmhuZyxm7EAHu/QD09CbMkKvO5D+jpxpchNJqU1
+-/YldvIViHTLSoCtU7ZpXwdv6EM8Zt4tKG48BtieVU+i2iW1bvGjUI+iLUaJW+fCm
+-gKDWHrO8Dw9TdSmq6hN35N6MgSGtBxBHEa2HPQfRdbzP82Z+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+ -----END CERTIFICATE-----
+
+-# Issuer: CN=COMODO RSA Certification Authority O=COMODO CA Limited
+-# Subject: CN=COMODO RSA Certification Authority O=COMODO CA Limited
+-# Label: "COMODO RSA Certification Authority"
+-# Serial: 101909084537582093308941363524873193117
+-# MD5 Fingerprint: 1b:31:b0:71:40:36:cc:14:36:91:ad:c4:3e:fd:ec:18
+-# SHA1 Fingerprint: af:e5:d2:44:a8:d1:19:42:30:ff:47:9f:e2:f8:97:bb:cd:7a:8c:b4
+-# SHA256 Fingerprint: 52:f0:e1:c4:e5:8e:c6:29:29:1b:60:31:7f:07:46:71:b8:5d:7e:a8:0d:5b:07:27:34:63:53:4b:32:b4:02:34
++# 52f0e1c4e58ec629291b60317f074671b85d7ea80d5b07273463534b32b40234
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority
++ Validity
++ Not Before: Jan 19 00:00:00 2010 GMT
++ Not After : Jan 18 23:59:59 2038 GMT
++ Subject: C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:91:e8:54:92:d2:0a:56:b1:ac:0d:24:dd:c5:cf:
++ 44:67:74:99:2b:37:a3:7d:23:70:00:71:bc:53:df:
++ c4:fa:2a:12:8f:4b:7f:10:56:bd:9f:70:72:b7:61:
++ 7f:c9:4b:0f:17:a7:3d:e3:b0:04:61:ee:ff:11:97:
++ c7:f4:86:3e:0a:fa:3e:5c:f9:93:e6:34:7a:d9:14:
++ 6b:e7:9c:b3:85:a0:82:7a:76:af:71:90:d7:ec:fd:
++ 0d:fa:9c:6c:fa:df:b0:82:f4:14:7e:f9:be:c4:a6:
++ 2f:4f:7f:99:7f:b5:fc:67:43:72:bd:0c:00:d6:89:
++ eb:6b:2c:d3:ed:8f:98:1c:14:ab:7e:e5:e3:6e:fc:
++ d8:a8:e4:92:24:da:43:6b:62:b8:55:fd:ea:c1:bc:
++ 6c:b6:8b:f3:0e:8d:9a:e4:9b:6c:69:99:f8:78:48:
++ 30:45:d5:ad:e1:0d:3c:45:60:fc:32:96:51:27:bc:
++ 67:c3:ca:2e:b6:6b:ea:46:c7:c7:20:a0:b1:1f:65:
++ de:48:08:ba:a4:4e:a9:f2:83:46:37:84:eb:e8:cc:
++ 81:48:43:67:4e:72:2a:9b:5c:bd:4c:1b:28:8a:5c:
++ 22:7b:b4:ab:98:d9:ee:e0:51:83:c3:09:46:4e:6d:
++ 3e:99:fa:95:17:da:7c:33:57:41:3c:8d:51:ed:0b:
++ b6:5c:af:2c:63:1a:df:57:c8:3f:bc:e9:5d:c4:9b:
++ af:45:99:e2:a3:5a:24:b4:ba:a9:56:3d:cf:6f:aa:
++ ff:49:58:be:f0:a8:ff:f4:b8:ad:e9:37:fb:ba:b8:
++ f4:0b:3a:f9:e8:43:42:1e:89:d8:84:cb:13:f1:d9:
++ bb:e1:89:60:b8:8c:28:56:ac:14:1d:9c:0a:e7:71:
++ eb:cf:0e:dd:3d:a9:96:a1:48:bd:3c:f7:af:b5:0d:
++ 22:4c:c0:11:81:ec:56:3b:f6:d3:a2:e2:5b:b7:b2:
++ 04:22:52:95:80:93:69:e8:8e:4c:65:f1:91:03:2d:
++ 70:74:02:ea:8b:67:15:29:69:52:02:bb:d7:df:50:
++ 6a:55:46:bf:a0:a3:28:61:7f:70:d0:c3:a2:aa:2c:
++ 21:aa:47:ce:28:9c:06:45:76:bf:82:18:27:b4:d5:
++ ae:b4:cb:50:e6:6b:f4:4c:86:71:30:e9:a6:df:16:
++ 86:e0:d8:ff:40:dd:fb:d0:42:88:7f:a3:33:3a:2e:
++ 5c:1e:41:11:81:63:ce:18:71:6b:2b:ec:a6:8a:b7:
++ 31:5c:3a:6a:47:e0:c3:79:59:d6:20:1a:af:f2:6a:
++ 98:aa:72:bc:57:4a:d2:4b:9d:bb:10:fc:b0:4c:41:
++ e5:ed:1d:3d:5e:28:9d:9c:cc:bf:b3:51:da:a7:47:
++ e5:84:53
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ BB:AF:7E:02:3D:FA:A6:F1:3C:84:8E:AD:EE:38:98:EC:D9:32:32:D4
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: sha384WithRSAEncryption
++ 0a:f1:d5:46:84:b7:ae:51:bb:6c:b2:4d:41:14:00:93:4c:9c:
++ cb:e5:c0:54:cf:a0:25:8e:02:f9:fd:b0:a2:0d:f5:20:98:3c:
++ 13:2d:ac:56:a2:b0:d6:7e:11:92:e9:2e:ba:9e:2e:9a:72:b1:
++ bd:19:44:6c:61:35:a2:9a:b4:16:12:69:5a:8c:e1:d7:3e:a4:
++ 1a:e8:2f:03:f4:ae:61:1d:10:1b:2a:a4:8b:7a:c5:fe:05:a6:
++ e1:c0:d6:c8:fe:9e:ae:8f:2b:ba:3d:99:f8:d8:73:09:58:46:
++ 6e:a6:9c:f4:d7:27:d3:95:da:37:83:72:1c:d3:73:e0:a2:47:
++ 99:03:38:5d:d5:49:79:00:29:1c:c7:ec:9b:20:1c:07:24:69:
++ 57:78:b2:39:fc:3a:84:a0:b5:9c:7c:8d:bf:2e:93:62:27:b7:
++ 39:da:17:18:ae:bd:3c:09:68:ff:84:9b:3c:d5:d6:0b:03:e3:
++ 57:9e:14:f7:d1:eb:4f:c8:bd:87:23:b7:b6:49:43:79:85:5c:
++ ba:eb:92:0b:a1:c6:e8:68:a8:4c:16:b1:1a:99:0a:e8:53:2c:
++ 92:bb:a1:09:18:75:0c:65:a8:7b:cb:23:b7:1a:c2:28:85:c3:
++ 1b:ff:d0:2b:62:ef:a4:7b:09:91:98:67:8c:14:01:cd:68:06:
++ 6a:63:21:75:03:80:88:8a:6e:81:c6:85:f2:a9:a4:2d:e7:f4:
++ a5:24:10:47:83:ca:cd:f4:8d:79:58:b1:06:9b:e7:1a:2a:d9:
++ 9d:01:d7:94:7d:ed:03:4a:ca:f0:db:e8:a9:01:3e:f5:56:99:
++ c9:1e:8e:49:3d:bb:e5:09:b9:e0:4f:49:92:3d:16:82:40:cc:
++ cc:59:c6:e6:3a:ed:12:2e:69:3c:6c:95:b1:fd:aa:1d:7b:7f:
++ 86:be:1e:0e:32:46:fb:fb:13:8f:75:7f:4c:8b:4b:46:63:fe:
++ 00:34:40:70:c1:c3:b9:a1:dd:a6:70:e2:04:b3:41:bc:e9:80:
++ 91:ea:64:9c:7a:e1:22:03:a9:9c:6e:6f:0e:65:4f:6c:87:87:
++ 5e:f3:6e:a0:f9:75:a5:9b:40:e8:53:b2:27:9d:4a:b9:c0:77:
++ 21:8d:ff:87:f2:de:bc:8c:ef:17:df:b7:49:0b:d1:f2:6e:30:
++ 0b:1a:0e:4e:76:ed:11:fc:f5:e9:56:b2:7d:bf:c7:6d:0a:93:
++ 8c:a5:d0:c0:b6:1d:be:3a:4e:94:a2:d7:6e:6c:0b:c2:8a:7c:
++ fa:20:f3:c4:e4:e5:cd:0d:a8:cb:91:92:b1:7c:85:ec:b5:14:
++ 69:66:0e:82:e7:cd:ce:c8:2d:a6:51:7f:21:c1:35:53:85:06:
++ 4a:5d:9f:ad:bb:1b:5f:74
+ -----BEGIN CERTIFICATE-----
+ MIIF2DCCA8CgAwIBAgIQTKr5yttjb+Af907YWwOGnTANBgkqhkiG9w0BAQwFADCB
+ hTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
+@@ -2251,13 +6077,95 @@ QOhTsiedSrnAdyGN/4fy3ryM7xfft0kL0fJuMAsaDk527RH89elWsn2/x20Kk4yl
+ NVOFBkpdn627G190
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=USERTrust RSA Certification Authority O=The USERTRUST Network
+-# Subject: CN=USERTrust RSA Certification Authority O=The USERTRUST Network
+-# Label: "USERTrust RSA Certification Authority"
+-# Serial: 2645093764781058787591871645665788717
+-# MD5 Fingerprint: 1b:fe:69:d1:91:b7:19:33:a3:72:a8:0f:e1:55:e5:b5
+-# SHA1 Fingerprint: 2b:8f:1b:57:33:0d:bb:a2:d0:7a:6c:51:f7:0e:e9:0d:da:b9:ad:8e
+-# SHA256 Fingerprint: e7:93:c9:b0:2f:d8:aa:13:e2:1c:31:22:8a:cc:b0:81:19:64:3b:74:9c:89:89:64:b1:74:6d:46:c3:d4:cb:d2
++# e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2d
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
++ Validity
++ Not Before: Feb 1 00:00:00 2010 GMT
++ Not After : Jan 18 23:59:59 2038 GMT
++ Subject: C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:80:12:65:17:36:0e:c3:db:08:b3:d0:ac:57:0d:
++ 76:ed:cd:27:d3:4c:ad:50:83:61:e2:aa:20:4d:09:
++ 2d:64:09:dc:ce:89:9f:cc:3d:a9:ec:f6:cf:c1:dc:
++ f1:d3:b1:d6:7b:37:28:11:2b:47:da:39:c6:bc:3a:
++ 19:b4:5f:a6:bd:7d:9d:a3:63:42:b6:76:f2:a9:3b:
++ 2b:91:f8:e2:6f:d0:ec:16:20:90:09:3e:e2:e8:74:
++ c9:18:b4:91:d4:62:64:db:7f:a3:06:f1:88:18:6a:
++ 90:22:3c:bc:fe:13:f0:87:14:7b:f6:e4:1f:8e:d4:
++ e4:51:c6:11:67:46:08:51:cb:86:14:54:3f:bc:33:
++ fe:7e:6c:9c:ff:16:9d:18:bd:51:8e:35:a6:a7:66:
++ c8:72:67:db:21:66:b1:d4:9b:78:03:c0:50:3a:e8:
++ cc:f0:dc:bc:9e:4c:fe:af:05:96:35:1f:57:5a:b7:
++ ff:ce:f9:3d:b7:2c:b6:f6:54:dd:c8:e7:12:3a:4d:
++ ae:4c:8a:b7:5c:9a:b4:b7:20:3d:ca:7f:22:34:ae:
++ 7e:3b:68:66:01:44:e7:01:4e:46:53:9b:33:60:f7:
++ 94:be:53:37:90:73:43:f3:32:c3:53:ef:db:aa:fe:
++ 74:4e:69:c7:6b:8c:60:93:de:c4:c7:0c:df:e1:32:
++ ae:cc:93:3b:51:78:95:67:8b:ee:3d:56:fe:0c:d0:
++ 69:0f:1b:0f:f3:25:26:6b:33:6d:f7:6e:47:fa:73:
++ 43:e5:7e:0e:a5:66:b1:29:7c:32:84:63:55:89:c4:
++ 0d:c1:93:54:30:19:13:ac:d3:7d:37:a7:eb:5d:3a:
++ 6c:35:5c:db:41:d7:12:da:a9:49:0b:df:d8:80:8a:
++ 09:93:62:8e:b5:66:cf:25:88:cd:84:b8:b1:3f:a4:
++ 39:0f:d9:02:9e:eb:12:4c:95:7c:f3:6b:05:a9:5e:
++ 16:83:cc:b8:67:e2:e8:13:9d:cc:5b:82:d3:4c:b3:
++ ed:5b:ff:de:e5:73:ac:23:3b:2d:00:bf:35:55:74:
++ 09:49:d8:49:58:1a:7f:92:36:e6:51:92:0e:f3:26:
++ 7d:1c:4d:17:bc:c9:ec:43:26:d0:bf:41:5f:40:a9:
++ 44:44:f4:99:e7:57:87:9e:50:1f:57:54:a8:3e:fd:
++ 74:63:2f:b1:50:65:09:e6:58:42:2e:43:1a:4c:b4:
++ f0:25:47:59:fa:04:1e:93:d4:26:46:4a:50:81:b2:
++ de:be:78:b7:fc:67:15:e1:c9:57:84:1e:0f:63:d6:
++ e9:62:ba:d6:5f:55:2e:ea:5c:c6:28:08:04:25:39:
++ b8:0e:2b:a9:f2:4c:97:1c:07:3f:0d:52:f5:ed:ef:
++ 2f:82:0f
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: sha384WithRSAEncryption
++ 5c:d4:7c:0d:cf:f7:01:7d:41:99:65:0c:73:c5:52:9f:cb:f8:
++ cf:99:06:7f:1b:da:43:15:9f:9e:02:55:57:96:14:f1:52:3c:
++ 27:87:94:28:ed:1f:3a:01:37:a2:76:fc:53:50:c0:84:9b:c6:
++ 6b:4e:ba:8c:21:4f:a2:8e:55:62:91:f3:69:15:d8:bc:88:e3:
++ c4:aa:0b:fd:ef:a8:e9:4b:55:2a:06:20:6d:55:78:29:19:ee:
++ 5f:30:5c:4b:24:11:55:ff:24:9a:6e:5e:2a:2b:ee:0b:4d:9f:
++ 7f:f7:01:38:94:14:95:43:07:09:fb:60:a9:ee:1c:ab:12:8c:
++ a0:9a:5e:a7:98:6a:59:6d:8b:3f:08:fb:c8:d1:45:af:18:15:
++ 64:90:12:0f:73:28:2e:c5:e2:24:4e:fc:58:ec:f0:f4:45:fe:
++ 22:b3:eb:2f:8e:d2:d9:45:61:05:c1:97:6f:a8:76:72:8f:8b:
++ 8c:36:af:bf:0d:05:ce:71:8d:e6:a6:6f:1f:6c:a6:71:62:c5:
++ d8:d0:83:72:0c:f1:67:11:89:0c:9c:13:4c:72:34:df:bc:d5:
++ 71:df:aa:71:dd:e1:b9:6c:8c:3c:12:5d:65:da:bd:57:12:b6:
++ 43:6b:ff:e5:de:4d:66:11:51:cf:99:ae:ec:17:b6:e8:71:91:
++ 8c:de:49:fe:dd:35:71:a2:15:27:94:1c:cf:61:e3:26:bb:6f:
++ a3:67:25:21:5d:e6:dd:1d:0b:2e:68:1b:3b:82:af:ec:83:67:
++ 85:d4:98:51:74:b1:b9:99:80:89:ff:7f:78:19:5c:79:4a:60:
++ 2e:92:40:ae:4c:37:2a:2c:c9:c7:62:c8:0e:5d:f7:36:5b:ca:
++ e0:25:25:01:b4:dd:1a:07:9c:77:00:3f:d0:dc:d5:ec:3d:d4:
++ fa:bb:3f:cc:85:d6:6f:7f:a9:2d:df:b9:02:f7:f5:97:9a:b5:
++ 35:da:c3:67:b0:87:4a:a9:28:9e:23:8e:ff:5c:27:6b:e1:b0:
++ 4f:f3:07:ee:00:2e:d4:59:87:cb:52:41:95:ea:f4:47:d7:ee:
++ 64:41:55:7c:8d:59:02:95:dd:62:9d:c2:b9:ee:5a:28:74:84:
++ a5:9b:b7:90:c7:0c:07:df:f5:89:36:74:32:d6:28:c1:b0:b0:
++ 0b:e0:9c:4c:c3:1c:d6:fc:e3:69:b5:47:46:81:2f:a2:82:ab:
++ d3:63:44:70:c4:8d:ff:2d:33:ba:ad:8f:7b:b5:70:88:ae:3e:
++ 19:cf:40:28:d8:fc:c8:90:bb:5d:99:22:f5:52:e6:58:c5:1f:
++ 88:31:43:ee:88:1d:d7:c6:8e:3c:43:6a:1d:a7:18:de:7d:3d:
++ 16:f1:62:f9:ca:90:a8:fd
+ -----BEGIN CERTIFICATE-----
+ MIIF3jCCA8agAwIBAgIQAf1tMPyjylGoG7xkDjUDLTANBgkqhkiG9w0BAQwFADCB
+ iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl
+@@ -2293,1590 +6201,203 @@ L6KCq9NjRHDEjf8tM7qtj3u1cIiuPhnPQCjY/MiQu12ZIvVS5ljFH4gxQ+6IHdfG
+ jjxDah2nGN59PRbxYvnKkKj9
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=USERTrust ECC Certification Authority O=The USERTRUST Network
+-# Subject: CN=USERTrust ECC Certification Authority O=The USERTRUST Network
+-# Label: "USERTrust ECC Certification Authority"
+-# Serial: 123013823720199481456569720443997572134
+-# MD5 Fingerprint: fa:68:bc:d9:b5:7f:ad:fd:c9:1d:06:83:28:cc:24:c1
+-# SHA1 Fingerprint: d1:cb:ca:5d:b2:d5:2a:7f:69:3b:67:4d:e5:f0:5a:1d:0c:95:7d:f0
+-# SHA256 Fingerprint: 4f:f4:60:d5:4b:9c:86:da:bf:bc:fc:57:12:e0:40:0d:2b:ed:3f:bc:4d:4f:bd:aa:86:e0:6a:dc:d2:a9:ad:7a
++# 55903859c8c0c3ebb8759ece4e2557225ff5758bbd38ebd48276601e1bd58097
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 08:bd:85:97:6c:99:27:a4:80:68:47:3b
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P384 Certification Authority
++ Validity
++ Not Before: Aug 23 19:36:43 2017 GMT
++ Not After : Aug 23 19:36:43 2042 GMT
++ Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P384 Certification Authority
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:6b:da:0d:75:35:08:31:47:05:ae:45:99:55:f1:
++ 11:13:2e:4a:f8:10:31:23:a3:7e:83:d3:7f:28:08:
++ 3a:26:1a:3a:cf:97:82:1f:80:b7:27:09:8f:d1:8e:
++ 30:c4:0a:9b:0e:ac:58:04:ab:f7:36:7d:94:23:a4:
++ 9b:0a:8a:8b:ab:eb:fd:39:25:66:f1:5e:fe:8c:ae:
++ 8d:41:79:9d:09:60:ce:28:a9:d3:8a:6d:f3:d6:45:
++ d4:f2:98:84:38:65:a0
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ 55:A9:84:89:D2:C1:32:BD:18:CB:6C:A6:07:4E:C8:E7:9D:BE:82:90
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:64:02:30:37:01:92:97:45:12:7e:a0:f3:3e:ad:19:3a:72:
++ dd:f4:50:93:03:12:be:44:d2:4f:41:a4:8c:9c:9d:1f:a3:f6:
++ c2:92:e7:48:14:fe:4e:9b:a5:91:57:ae:c6:37:72:bb:02:30:
++ 67:25:0a:b1:0c:5e:ee:a9:63:92:6f:e5:90:0b:fe:66:22:ca:
++ 47:fd:8a:31:f7:83:fe:7a:bf:10:be:18:2b:1e:8f:f6:29:1e:
++ 94:59:ef:8e:21:37:cb:51:98:a5:6e:4b
+ -----BEGIN CERTIFICATE-----
+-MIICjzCCAhWgAwIBAgIQXIuZxVqUxdJxVt7NiYDMJjAKBggqhkjOPQQDAzCBiDEL
+-MAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNl
+-eSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMT
+-JVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTAwMjAx
+-MDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgT
+-Ck5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVUaGUg
+-VVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBFQ0MgQ2VydGlm
+-aWNhdGlvbiBBdXRob3JpdHkwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQarFRaqflo
+-I+d61SRvU8Za2EurxtW20eZzca7dnNYMYf3boIkDuAUU7FfO7l0/4iGzzvfUinng
+-o4N+LZfQYcTxmdwlkWOrfzCjtHDix6EznPO/LlxTsV+zfTJ/ijTjeXmjQjBAMB0G
+-A1UdDgQWBBQ64QmG1M8ZwpZ2dEl23OA1xmNjmjAOBgNVHQ8BAf8EBAMCAQYwDwYD
+-VR0TAQH/BAUwAwEB/zAKBggqhkjOPQQDAwNoADBlAjA2Z6EWCNzklwBBHU6+4WMB
+-zzuqQhFkoJ2UOQIReVx7Hfpkue4WQrO/isIJxOzksU0CMQDpKmFHjFJKS04YcPbW
+-RNZu9YO6bVi9JNlWSOrvxKJGgYhqOkbRqZtNyWHa0V1Xahg=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+ -----END CERTIFICATE-----
+
+-# Issuer: CN=GlobalSign O=GlobalSign OU=GlobalSign ECC Root CA - R4
+-# Subject: CN=GlobalSign O=GlobalSign OU=GlobalSign ECC Root CA - R4
+-# Label: "GlobalSign ECC Root CA - R4"
+-# Serial: 14367148294922964480859022125800977897474
+-# MD5 Fingerprint: 20:f0:27:68:d1:7e:a0:9d:0e:e6:2a:ca:df:5c:89:8e
+-# SHA1 Fingerprint: 69:69:56:2e:40:80:f4:24:a1:e7:19:9f:14:ba:f3:ee:58:ab:6a:bb
+-# SHA256 Fingerprint: be:c9:49:11:c2:95:56:76:db:6c:0a:55:09:86:d7:6e:3b:a0:05:66:7c:44:2c:97:62:b4:fb:b7:73:de:22:8c
++# 945bbc825ea554f489d1fd51a73ddf2ea624ac7019a05205225c22a78ccfa8b4
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 0d:6a:5f:08:3f:28:5c:3e:51:95:df:5d
++ Signature Algorithm: ecdsa-with-SHA256
++ Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P256 Certification Authority
++ Validity
++ Not Before: Aug 23 19:35:10 2017 GMT
++ Not After : Aug 23 19:35:10 2042 GMT
++ Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global ECC P256 Certification Authority
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (256 bit)
++ pub:
++ 04:7e:fb:6c:e6:23:e3:73:32:08:ca:60:e6:53:9c:
++ ba:74:8d:18:b0:78:90:52:80:dd:38:c0:4a:1d:d1:
++ a8:cc:93:a4:97:06:38:ca:0d:15:62:c6:8e:01:2a:
++ 65:9d:aa:df:34:91:2e:81:c1:e4:33:92:31:c4:fd:
++ 09:3a:a6:3f:ad
++ ASN1 OID: prime256v1
++ NIST CURVE: P-256
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ A3:41:06:AC:90:6D:D1:4A:EB:75:A5:4A:10:99:B3:B1:A1:8B:4A:F7
++ Signature Algorithm: ecdsa-with-SHA256
++ 30:44:02:20:07:e6:54:da:0e:a0:5a:b2:ae:11:9f:87:c5:b6:
++ ff:69:de:25:be:f8:a0:b7:08:f3:44:ce:2a:df:08:21:0c:37:
++ 02:20:2d:26:03:a0:05:bd:6b:d1:f6:5c:f8:65:cc:86:6d:b3:
++ 9c:34:48:63:84:09:c5:8d:77:1a:e2:cc:9c:e1:74:7b
+ -----BEGIN CERTIFICATE-----
+-MIIB4TCCAYegAwIBAgIRKjikHJYKBN5CsiilC+g0mAIwCgYIKoZIzj0EAwIwUDEk
+-MCIGA1UECxMbR2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI0MRMwEQYDVQQKEwpH
+-bG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWduMB4XDTEyMTExMzAwMDAwMFoX
+-DTM4MDExOTAzMTQwN1owUDEkMCIGA1UECxMbR2xvYmFsU2lnbiBFQ0MgUm9vdCBD
+-QSAtIFI0MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWdu
+-MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEuMZ5049sJQ6fLjkZHAOkrprlOQcJ
+-FspjsbmG+IpXwVfOQvpzofdlQv8ewQCybnMO/8ch5RikqtlxP6jUuc6MHaNCMEAw
+-DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFFSwe61F
+-uOJAf/sKbvu+M8k8o4TVMAoGCCqGSM49BAMCA0gAMEUCIQDckqGgE6bPA7DmxCGX
+-kPoUVy0D7O48027KqGx2vKLeuwIgJ6iFJzWbVsaj8kfSt24bAgAXqmemFZHe+pTs
+-ewv4n4Q=
++MIICYDCCAgegAwIBAgIMDWpfCD8oXD5Rld9dMAoGCCqGSM49BAMCMIGRMQswCQYD
++VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf
++BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3
++YXZlIEdsb2JhbCBFQ0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x
++NzA4MjMxOTM1MTBaFw00MjA4MjMxOTM1MTBaMIGRMQswCQYDVQQGEwJVUzERMA8G
++A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0
++d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF
++Q0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTBZMBMGByqGSM49AgEGCCqG
++SM49AwEHA0IABH77bOYj43MyCMpg5lOcunSNGLB4kFKA3TjASh3RqMyTpJcGOMoN
++FWLGjgEqZZ2q3zSRLoHB5DOSMcT9CTqmP62jQzBBMA8GA1UdEwEB/wQFMAMBAf8w
++DwYDVR0PAQH/BAUDAwcGADAdBgNVHQ4EFgQUo0EGrJBt0UrrdaVKEJmzsaGLSvcw
++CgYIKoZIzj0EAwIDRwAwRAIgB+ZU2g6gWrKuEZ+Hxbb/ad4lvvigtwjzRM4q3wgh
++DDcCIC0mA6AFvWvR9lz4ZcyGbbOcNEhjhAnFjXca4syc4XR7
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=GlobalSign O=GlobalSign OU=GlobalSign ECC Root CA - R5
+-# Subject: CN=GlobalSign O=GlobalSign OU=GlobalSign ECC Root CA - R5
+-# Label: "GlobalSign ECC Root CA - R5"
+-# Serial: 32785792099990507226680698011560947931244
+-# MD5 Fingerprint: 9f:ad:3b:1c:02:1e:8a:ba:17:74:38:81:0c:a2:bc:08
+-# SHA1 Fingerprint: 1f:24:c6:30:cd:a4:18:ef:20:69:ff:ad:4f:dd:5f:46:3a:1b:69:aa
+-# SHA256 Fingerprint: 17:9f:bc:14:8a:3d:d0:0f:d2:4e:a1:34:58:cc:43:bf:a7:f5:9c:81:82:d7:83:a5:13:f6:eb:ec:10:0c:89:24
+------BEGIN CERTIFICATE-----
+-MIICHjCCAaSgAwIBAgIRYFlJ4CYuu1X5CneKcflK2GwwCgYIKoZIzj0EAwMwUDEk
+-MCIGA1UECxMbR2xvYmFsU2lnbiBFQ0MgUm9vdCBDQSAtIFI1MRMwEQYDVQQKEwpH
+-bG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWduMB4XDTEyMTExMzAwMDAwMFoX
+-DTM4MDExOTAzMTQwN1owUDEkMCIGA1UECxMbR2xvYmFsU2lnbiBFQ0MgUm9vdCBD
+-QSAtIFI1MRMwEQYDVQQKEwpHbG9iYWxTaWduMRMwEQYDVQQDEwpHbG9iYWxTaWdu
+-MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAER0UOlvt9Xb/pOdEh+J8LttV7HpI6SFkc
+-8GIxLcB6KP4ap1yztsyX50XUWPrRd21DosCHZTQKH3rd6zwzocWdTaRvQZU4f8ke
+-hOvRnkmSh5SHDDqFSmafnVmTTZdhBoZKo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYD
+-VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUPeYpSJvqB8ohREom3m7e0oPQn1kwCgYI
+-KoZIzj0EAwMDaAAwZQIxAOVpEslu28YxuglB4Zf4+/2a4n0Sye18ZNPLBSWLVtmg
+-515dTguDnFt2KaAJJiFqYgIwcdK1j1zqO+F4CYWodZI7yFz9SO8NdCKoCOJuxUnO
+-xwy8p2Fp8fc74SrL+SvzZpA3
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Staat der Nederlanden EV Root CA O=Staat der Nederlanden
+-# Subject: CN=Staat der Nederlanden EV Root CA O=Staat der Nederlanden
+-# Label: "Staat der Nederlanden EV Root CA"
+-# Serial: 10000013
+-# MD5 Fingerprint: fc:06:af:7b:e8:1a:f1:9a:b4:e8:d2:70:1f:c0:f5:ba
+-# SHA1 Fingerprint: 76:e2:7e:c1:4f:db:82:c1:c0:a6:75:b5:05:be:3d:29:b4:ed:db:bb
+-# SHA256 Fingerprint: 4d:24:91:41:4c:fe:95:67:46:ec:4c:ef:a6:cf:6f:72:e2:8a:13:29:43:2f:9d:8a:90:7a:c4:cb:5d:ad:c1:5a
+------BEGIN CERTIFICATE-----
+-MIIFcDCCA1igAwIBAgIEAJiWjTANBgkqhkiG9w0BAQsFADBYMQswCQYDVQQGEwJO
+-TDEeMBwGA1UECgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSkwJwYDVQQDDCBTdGFh
+-dCBkZXIgTmVkZXJsYW5kZW4gRVYgUm9vdCBDQTAeFw0xMDEyMDgxMTE5MjlaFw0y
+-MjEyMDgxMTEwMjhaMFgxCzAJBgNVBAYTAk5MMR4wHAYDVQQKDBVTdGFhdCBkZXIg
+-TmVkZXJsYW5kZW4xKTAnBgNVBAMMIFN0YWF0IGRlciBOZWRlcmxhbmRlbiBFViBS
+-b290IENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA48d+ifkkSzrS
+-M4M1LGns3Amk41GoJSt5uAg94JG6hIXGhaTK5skuU6TJJB79VWZxXSzFYGgEt9nC
+-UiY4iKTWO0Cmws0/zZiTs1QUWJZV1VD+hq2kY39ch/aO5ieSZxeSAgMs3NZmdO3d
+-Z//BYY1jTw+bbRcwJu+r0h8QoPnFfxZpgQNH7R5ojXKhTbImxrpsX23Wr9GxE46p
+-rfNeaXUmGD5BKyF/7otdBwadQ8QpCiv8Kj6GyzyDOvnJDdrFmeK8eEEzduG/L13l
+-pJhQDBXd4Pqcfzho0LKmeqfRMb1+ilgnQ7O6M5HTp5gVXJrm0w912fxBmJc+qiXb
+-j5IusHsMX/FjqTf5m3VpTCgmJdrV8hJwRVXj33NeN/UhbJCONVrJ0yPr08C+eKxC
+-KFhmpUZtcALXEPlLVPxdhkqHz3/KRawRWrUgUY0viEeXOcDPusBCAUCZSCELa6fS
+-/ZbV0b5GnUngC6agIk440ME8MLxwjyx1zNDFjFE7PZQIZCZhfbnDZY8UnCHQqv0X
+-cgOPvZuM5l5Tnrmd74K74bzickFbIZTTRTeU0d8JOV3nI6qaHcptqAqGhYqCvkIH
+-1vI4gnPah1vlPNOePqc7nvQDs/nxfRN0Av+7oeX6AHkcpmZBiFxgV6YuCcS6/ZrP
+-px9Aw7vMWgpVSzs4dlG4Y4uElBbmVvMCAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB
+-/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFP6rAJCYniT8qcwaivsnuL8wbqg7
+-MA0GCSqGSIb3DQEBCwUAA4ICAQDPdyxuVr5Os7aEAJSrR8kN0nbHhp8dB9O2tLsI
+-eK9p0gtJ3jPFrK3CiAJ9Brc1AsFgyb/E6JTe1NOpEyVa/m6irn0F3H3zbPB+po3u
+-2dfOWBfoqSmuc0iH55vKbimhZF8ZE/euBhD/UcabTVUlT5OZEAFTdfETzsemQUHS
+-v4ilf0X8rLiltTMMgsT7B/Zq5SWEXwbKwYY5EdtYzXc7LMJMD16a4/CrPmEbUCTC
+-wPTxGfARKbalGAKb12NMcIxHowNDXLldRqANb/9Zjr7dn3LDWyvfjFvO5QxGbJKy
+-CqNMVEIYFRIYvdr8unRu/8G2oGTYqV9Vrp9canaW2HNnh/tNf1zuacpzEPuKqf2e
+-vTY4SUmH9A4U8OmHuD+nT3pajnnUk+S7aFKErGzp85hwVXIy+TSrK0m1zSBi5Dp6
+-Z2Orltxtrpfs/J92VoguZs9btsmksNcFuuEnL5O7Jiqik7Ab846+HUCjuTaPPoIa
+-Gl6I6lD4WeKDRikL40Rc4ZW2aZCaFG+XroHPaO+Zmr615+F/+PoTRxZMzG0IQOeL
+-eG9QgkRQP2YGiqtDhFZKDyAthg710tvSeopLzaXoTvFeJiUBWSOgftL2fiFX1ye8
+-FVdMpEbB4IMeDExNH08GGeL5qPQ6gqGyeUN51q1veieQA6TqJIc/2b3Z6fJfUEkc
+-7uzXLg==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=IdenTrust Commercial Root CA 1 O=IdenTrust
+-# Subject: CN=IdenTrust Commercial Root CA 1 O=IdenTrust
+-# Label: "IdenTrust Commercial Root CA 1"
+-# Serial: 13298821034946342390520003877796839426
+-# MD5 Fingerprint: b3:3e:77:73:75:ee:a0:d3:e3:7e:49:63:49:59:bb:c7
+-# SHA1 Fingerprint: df:71:7e:aa:4a:d9:4e:c9:55:84:99:60:2d:48:de:5f:bc:f0:3a:25
+-# SHA256 Fingerprint: 5d:56:49:9b:e4:d2:e0:8b:cf:ca:d0:8a:3e:38:72:3d:50:50:3b:de:70:69:48:e4:2f:55:60:30:19:e5:28:ae
+------BEGIN CERTIFICATE-----
+-MIIFYDCCA0igAwIBAgIQCgFCgAAAAUUjyES1AAAAAjANBgkqhkiG9w0BAQsFADBK
+-MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MScwJQYDVQQDEx5JZGVu
+-VHJ1c3QgQ29tbWVyY2lhbCBSb290IENBIDEwHhcNMTQwMTE2MTgxMjIzWhcNMzQw
+-MTE2MTgxMjIzWjBKMQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MScw
+-JQYDVQQDEx5JZGVuVHJ1c3QgQ29tbWVyY2lhbCBSb290IENBIDEwggIiMA0GCSqG
+-SIb3DQEBAQUAA4ICDwAwggIKAoICAQCnUBneP5k91DNG8W9RYYKyqU+PZ4ldhNlT
+-3Qwo2dfw/66VQ3KZ+bVdfIrBQuExUHTRgQ18zZshq0PirK1ehm7zCYofWjK9ouuU
+-+ehcCuz/mNKvcbO0U59Oh++SvL3sTzIwiEsXXlfEU8L2ApeN2WIrvyQfYo3fw7gp
+-S0l4PJNgiCL8mdo2yMKi1CxUAGc1bnO/AljwpN3lsKImesrgNqUZFvX9t++uP0D1
+-bVoE/c40yiTcdCMbXTMTEl3EASX2MN0CXZ/g1Ue9tOsbobtJSdifWwLziuQkkORi
+-T0/Br4sOdBeo0XKIanoBScy0RnnGF7HamB4HWfp1IYVl3ZBWzvurpWCdxJ35UrCL
+-vYf5jysjCiN2O/cz4ckA82n5S6LgTrx+kzmEB/dEcH7+B1rlsazRGMzyNeVJSQjK
+-Vsk9+w8YfYs7wRPCTY/JTw436R+hDmrfYi7LNQZReSzIJTj0+kuniVyc0uMNOYZK
+-dHzVWYfCP04MXFL0PfdSgvHqo6z9STQaKPNBiDoT7uje/5kdX7rL6B7yuVBgwDHT
+-c+XvvqDtMwt0viAgxGds8AgDelWAf0ZOlqf0Hj7h9tgJ4TNkK2PXMl6f+cB7D3hv
+-l7yTmvmcEpB4eoCHFddydJxVdHixuuFucAS6T6C6aMN7/zHwcz09lCqxC0EOoP5N
+-iGVreTO01wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB
+-/zAdBgNVHQ4EFgQU7UQZwNPwBovupHu+QucmVMiONnYwDQYJKoZIhvcNAQELBQAD
+-ggIBAA2ukDL2pkt8RHYZYR4nKM1eVO8lvOMIkPkp165oCOGUAFjvLi5+U1KMtlwH
+-6oi6mYtQlNeCgN9hCQCTrQ0U5s7B8jeUeLBfnLOic7iPBZM4zY0+sLj7wM+x8uwt
+-LRvM7Kqas6pgghstO8OEPVeKlh6cdbjTMM1gCIOQ045U8U1mwF10A0Cj7oV+wh93
+-nAbowacYXVKV7cndJZ5t+qntozo00Fl72u1Q8zW/7esUTTHHYPTa8Yec4kjixsU3
+-+wYQ+nVZZjFHKdp2mhzpgq7vmrlR94gjmmmVYjzlVYA211QC//G5Xc7UI2/YRYRK
+-W2XviQzdFKcgyxilJbQN+QHwotL0AMh0jqEqSI5l2xPE4iUXfeu+h1sXIFRRk0pT
+-AwvsXcoz7WL9RccvW9xYoIA55vrX/hMUpu09lEpCdNTDd1lzzY9GvlU47/rokTLq
+-l1gEIt44w8y8bckzOmoKaT+gyOpyj4xjhiO9bTyWnpXgSUyqorkqG5w2gXjtw+hG
+-4iZZRHUe2XWJUc0QhJ1hYMtd+ZciTY6Y5uN/9lu7rs3KSoFrXgvzUeF0K+l+J6fZ
+-mUlO+KWA2yUPHGNiiskzZ2s8EIPGrd6ozRaOjfAHN3Gf8qv8QfXBi+wAN10J5U6A
+-7/qxXDgGpRtK4dw4LTzcqx+QGtVKnO7RcGzM7vRX+Bi6hG6H
+------END CERTIFICATE-----
+-
+-# Issuer: CN=IdenTrust Public Sector Root CA 1 O=IdenTrust
+-# Subject: CN=IdenTrust Public Sector Root CA 1 O=IdenTrust
+-# Label: "IdenTrust Public Sector Root CA 1"
+-# Serial: 13298821034946342390521976156843933698
+-# MD5 Fingerprint: 37:06:a5:b0:fc:89:9d:ba:f4:6b:8c:1a:64:cd:d5:ba
+-# SHA1 Fingerprint: ba:29:41:60:77:98:3f:f4:f3:ef:f2:31:05:3b:2e:ea:6d:4d:45:fd
+-# SHA256 Fingerprint: 30:d0:89:5a:9a:44:8a:26:20:91:63:55:22:d1:f5:20:10:b5:86:7a:ca:e1:2c:78:ef:95:8f:d4:f4:38:9f:2f
+------BEGIN CERTIFICATE-----
+-MIIFZjCCA06gAwIBAgIQCgFCgAAAAUUjz0Z8AAAAAjANBgkqhkiG9w0BAQsFADBN
+-MQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0MSowKAYDVQQDEyFJZGVu
+-VHJ1c3QgUHVibGljIFNlY3RvciBSb290IENBIDEwHhcNMTQwMTE2MTc1MzMyWhcN
+-MzQwMTE2MTc1MzMyWjBNMQswCQYDVQQGEwJVUzESMBAGA1UEChMJSWRlblRydXN0
+-MSowKAYDVQQDEyFJZGVuVHJ1c3QgUHVibGljIFNlY3RvciBSb290IENBIDEwggIi
+-MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2IpT8pEiv6EdrCvsnduTyP4o7
+-ekosMSqMjbCpwzFrqHd2hCa2rIFCDQjrVVi7evi8ZX3yoG2LqEfpYnYeEe4IFNGy
+-RBb06tD6Hi9e28tzQa68ALBKK0CyrOE7S8ItneShm+waOh7wCLPQ5CQ1B5+ctMlS
+-bdsHyo+1W/CD80/HLaXIrcuVIKQxKFdYWuSNG5qrng0M8gozOSI5Cpcu81N3uURF
+-/YTLNiCBWS2ab21ISGHKTN9T0a9SvESfqy9rg3LvdYDaBjMbXcjaY8ZNzaxmMc3R
+-3j6HEDbhuaR672BQssvKplbgN6+rNBM5Jeg5ZuSYeqoSmJxZZoY+rfGwyj4GD3vw
+-EUs3oERte8uojHH01bWRNszwFcYr3lEXsZdMUD2xlVl8BX0tIdUAvwFnol57plzy
+-9yLxkA2T26pEUWbMfXYD62qoKjgZl3YNa4ph+bz27nb9cCvdKTz4Ch5bQhyLVi9V
+-GxyhLrXHFub4qjySjmm2AcG1hp2JDws4lFTo6tyePSW8Uybt1as5qsVATFSrsrTZ
+-2fjXctscvG29ZV/viDUqZi/u9rNl8DONfJhBaUYPQxxp+pu10GFqzcpL2UyQRqsV
+-WaFHVCkugyhfHMKiq3IXAAaOReyL4jM9f9oZRORicsPfIsbyVtTdX5Vy7W1f90gD
+-W/3FKqD2cyOEEBsB5wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/
+-BAUwAwEB/zAdBgNVHQ4EFgQU43HgntinQtnbcZFrlJPrw6PRFKMwDQYJKoZIhvcN
+-AQELBQADggIBAEf63QqwEZE4rU1d9+UOl1QZgkiHVIyqZJnYWv6IAcVYpZmxI1Qj
+-t2odIFflAWJBF9MJ23XLblSQdf4an4EKwt3X9wnQW3IV5B4Jaj0z8yGa5hV+rVHV
+-DRDtfULAj+7AmgjVQdZcDiFpboBhDhXAuM/FSRJSzL46zNQuOAXeNf0fb7iAaJg9
+-TaDKQGXSc3z1i9kKlT/YPyNtGtEqJBnZhbMX73huqVjRI9PHE+1yJX9dsXNw0H8G
+-lwmEKYBhHfpe/3OsoOOJuBxxFcbeMX8S3OFtm6/n6J91eEyrRjuazr8FGF1NFTwW
+-mhlQBJqymm9li1JfPFgEKCXAZmExfrngdbkaqIHWchezxQMxNRF4eKLg6TCMf4Df
+-WN88uieW4oA0beOY02QnrEh+KHdcxiVhJfiFDGX6xDIvpZgF5PgLZxYWxoK4Mhn5
+-+bl53B/N66+rDt0b20XkeucC4pVd/GnwU2lhlXV5C15V5jgclKlZM57IcXR5f1GJ
+-tshquDDIajjDbp7hNxbqBWJMWxJH7ae0s1hWx0nzfxJoCTFx8G34Tkf71oXuxVhA
+-GaQdp/lLQzfcaFpPz+vCZHTetBXZ9FRUGi8c15dxVJCO2SCdUyt/q4/i6jC8UDfv
+-8Ue1fXwsBOxonbRJRBD0ckscZOf85muQ3Wl9af0AVqW3rLatt8o+Ae+c
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Entrust Root Certification Authority - G2 O=Entrust, Inc. OU=See www.entrust.net/legal-terms/(c) 2009 Entrust, Inc. - for authorized use only
+-# Subject: CN=Entrust Root Certification Authority - G2 O=Entrust, Inc. OU=See www.entrust.net/legal-terms/(c) 2009 Entrust, Inc. - for authorized use only
+-# Label: "Entrust Root Certification Authority - G2"
+-# Serial: 1246989352
+-# MD5 Fingerprint: 4b:e2:c9:91:96:65:0c:f4:0e:5a:93:92:a0:0a:fe:b2
+-# SHA1 Fingerprint: 8c:f4:27:fd:79:0c:3a:d1:66:06:8d:e8:1e:57:ef:bb:93:22:72:d4
+-# SHA256 Fingerprint: 43:df:57:74:b0:3e:7f:ef:5f:e4:0d:93:1a:7b:ed:f1:bb:2e:6b:42:73:8c:4e:6d:38:41:10:3d:3a:a7:f3:39
+------BEGIN CERTIFICATE-----
+-MIIEPjCCAyagAwIBAgIESlOMKDANBgkqhkiG9w0BAQsFADCBvjELMAkGA1UEBhMC
+-VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50
+-cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDA5IEVudHJ1c3Qs
+-IEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEyMDAGA1UEAxMpRW50cnVz
+-dCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIwHhcNMDkwNzA3MTcy
+-NTU0WhcNMzAxMjA3MTc1NTU0WjCBvjELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVu
+-dHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwt
+-dGVybXMxOTA3BgNVBAsTMChjKSAyMDA5IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0
+-aG9yaXplZCB1c2Ugb25seTEyMDAGA1UEAxMpRW50cnVzdCBSb290IENlcnRpZmlj
+-YXRpb24gQXV0aG9yaXR5IC0gRzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
+-AoIBAQC6hLZy254Ma+KZ6TABp3bqMriVQRrJ2mFOWHLP/vaCeb9zYQYKpSfYs1/T
+-RU4cctZOMvJyig/3gxnQaoCAAEUesMfnmr8SVycco2gvCoe9amsOXmXzHHfV1IWN
+-cCG0szLni6LVhjkCsbjSR87kyUnEO6fe+1R9V77w6G7CebI6C1XiUJgWMhNcL3hW
+-wcKUs/Ja5CeanyTXxuzQmyWC48zCxEXFjJd6BmsqEZ+pCm5IO2/b1BEZQvePB7/1
+-U1+cPvQXLOZprE4yTGJ36rfo5bs0vBmLrpxR57d+tVOxMyLlbc9wPBr64ptntoP0
+-jaWvYkxN4FisZDQSA/i2jZRjJKRxAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAP
+-BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqciZ60B7vfec7aVHUbI2fkBJmqzAN
+-BgkqhkiG9w0BAQsFAAOCAQEAeZ8dlsa2eT8ijYfThwMEYGprmi5ZiXMRrEPR9RP/
+-jTkrwPK9T3CMqS/qF8QLVJ7UG5aYMzyorWKiAHarWWluBh1+xLlEjZivEtRh2woZ
+-Rkfz6/djwUAFQKXSt/S1mja/qYh2iARVBCuch38aNzx+LaUa2NSJXsq9rD1s2G2v
+-1fN2D807iDginWyTmsQ9v4IbZT+mD12q/OWyFcq1rca8PdCE6OoGcrBNOTJ4vz4R
+-nAuknZoh8/CbCzB428Hch0P+vGOaysXCHMnHjf87ElgI5rY97HosTvuDls4MPGmH
+-VHOkc8KT/1EQrBVUAdj8BbGJoX90g5pJ19xOe4pIb4tF9g==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Entrust Root Certification Authority - EC1 O=Entrust, Inc. OU=See www.entrust.net/legal-terms/(c) 2012 Entrust, Inc. - for authorized use only
+-# Subject: CN=Entrust Root Certification Authority - EC1 O=Entrust, Inc. OU=See www.entrust.net/legal-terms/(c) 2012 Entrust, Inc. - for authorized use only
+-# Label: "Entrust Root Certification Authority - EC1"
+-# Serial: 51543124481930649114116133369
+-# MD5 Fingerprint: b6:7e:1d:f0:58:c5:49:6c:24:3b:3d:ed:98:18:ed:bc
+-# SHA1 Fingerprint: 20:d8:06:40:df:9b:25:f5:12:25:3a:11:ea:f7:59:8a:eb:14:b5:47
+-# SHA256 Fingerprint: 02:ed:0e:b2:8c:14:da:45:16:5c:56:67:91:70:0d:64:51:d7:fb:56:f0:b2:ab:1d:3b:8e:b0:70:e5:6e:df:f5
+------BEGIN CERTIFICATE-----
+-MIIC+TCCAoCgAwIBAgINAKaLeSkAAAAAUNCR+TAKBggqhkjOPQQDAzCBvzELMAkG
+-A1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3
+-d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVu
+-dHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEzMDEGA1UEAxMq
+-RW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRUMxMB4XDTEy
+-MTIxODE1MjUzNloXDTM3MTIxODE1NTUzNlowgb8xCzAJBgNVBAYTAlVTMRYwFAYD
+-VQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQLEx9TZWUgd3d3LmVudHJ1c3QubmV0
+-L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykgMjAxMiBFbnRydXN0LCBJbmMuIC0g
+-Zm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxMzAxBgNVBAMTKkVudHJ1c3QgUm9vdCBD
+-ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEVDMTB2MBAGByqGSM49AgEGBSuBBAAi
+-A2IABIQTydC6bUF74mzQ61VfZgIaJPRbiWlH47jCffHyAsWfoPZb1YsGGYZPUxBt
+-ByQnoaD41UcZYUx9ypMn6nQM72+WCf5j7HBdNq1nd67JnXxVRDqiY1Ef9eNi1KlH
+-Bz7MIKNCMEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0O
+-BBYEFLdj5xrdjekIplWDpOBqUEFlEUJJMAoGCCqGSM49BAMDA2cAMGQCMGF52OVC
+-R98crlOZF7ZvHH3hvxGU0QOIdeSNiaSKd0bebWHvAvX7td/M/k7//qnmpwIwW5nX
+-hTcGtXsI/esni0qU+eH6p44mCOh8kmhtc9hvJqwhAriZtyZBWyVgrtBIGu4G
+------END CERTIFICATE-----
+-
+-# Issuer: CN=CFCA EV ROOT O=China Financial Certification Authority
+-# Subject: CN=CFCA EV ROOT O=China Financial Certification Authority
+-# Label: "CFCA EV ROOT"
+-# Serial: 407555286
+-# MD5 Fingerprint: 74:e1:b6:ed:26:7a:7a:44:30:33:94:ab:7b:27:81:30
+-# SHA1 Fingerprint: e2:b8:29:4b:55:84:ab:6b:58:c2:90:46:6c:ac:3f:b8:39:8f:84:83
+-# SHA256 Fingerprint: 5c:c3:d7:8e:4e:1d:5e:45:54:7a:04:e6:87:3e:64:f9:0c:f9:53:6d:1c:cc:2e:f8:00:f3:55:c4:c5:fd:70:fd
+------BEGIN CERTIFICATE-----
+-MIIFjTCCA3WgAwIBAgIEGErM1jANBgkqhkiG9w0BAQsFADBWMQswCQYDVQQGEwJD
+-TjEwMC4GA1UECgwnQ2hpbmEgRmluYW5jaWFsIENlcnRpZmljYXRpb24gQXV0aG9y
+-aXR5MRUwEwYDVQQDDAxDRkNBIEVWIFJPT1QwHhcNMTIwODA4MDMwNzAxWhcNMjkx
+-MjMxMDMwNzAxWjBWMQswCQYDVQQGEwJDTjEwMC4GA1UECgwnQ2hpbmEgRmluYW5j
+-aWFsIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRUwEwYDVQQDDAxDRkNBIEVWIFJP
+-T1QwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDXXWvNED8fBVnVBU03
+-sQ7smCuOFR36k0sXgiFxEFLXUWRwFsJVaU2OFW2fvwwbwuCjZ9YMrM8irq93VCpL
+-TIpTUnrD7i7es3ElweldPe6hL6P3KjzJIx1qqx2hp/Hz7KDVRM8Vz3IvHWOX6Jn5
+-/ZOkVIBMUtRSqy5J35DNuF++P96hyk0g1CXohClTt7GIH//62pCfCqktQT+x8Rgp
+-7hZZLDRJGqgG16iI0gNyejLi6mhNbiyWZXvKWfry4t3uMCz7zEasxGPrb382KzRz
+-EpR/38wmnvFyXVBlWY9ps4deMm/DGIq1lY+wejfeWkU7xzbh72fROdOXW3NiGUgt
+-hxwG+3SYIElz8AXSG7Ggo7cbcNOIabla1jj0Ytwli3i/+Oh+uFzJlU9fpy25IGvP
+-a931DfSCt/SyZi4QKPaXWnuWFo8BGS1sbn85WAZkgwGDg8NNkt0yxoekN+kWzqot
+-aK8KgWU6cMGbrU1tVMoqLUuFG7OA5nBFDWteNfB/O7ic5ARwiRIlk9oKmSJgamNg
+-TnYGmE69g60dWIolhdLHZR4tjsbftsbhf4oEIRUpdPA+nJCdDC7xij5aqgwJHsfV
+-PKPtl8MeNPo4+QgO48BdK4PRVmrJtqhUUy54Mmc9gn900PvhtgVguXDbjgv5E1hv
+-cWAQUhC5wUEJ73IfZzF4/5YFjQIDAQABo2MwYTAfBgNVHSMEGDAWgBTj/i39KNAL
+-tbq2osS/BqoFjJP7LzAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAd
+-BgNVHQ4EFgQU4/4t/SjQC7W6tqLEvwaqBYyT+y8wDQYJKoZIhvcNAQELBQADggIB
+-ACXGumvrh8vegjmWPfBEp2uEcwPenStPuiB/vHiyz5ewG5zz13ku9Ui20vsXiObT
+-ej/tUxPQ4i9qecsAIyjmHjdXNYmEwnZPNDatZ8POQQaIxffu2Bq41gt/UP+TqhdL
+-jOztUmCypAbqTuv0axn96/Ua4CUqmtzHQTb3yHQFhDmVOdYLO6Qn+gjYXB74BGBS
+-ESgoA//vU2YApUo0FmZ8/Qmkrp5nGm9BC2sGE5uPhnEFtC+NiWYzKXZUmhH4J/qy
+-P5Hgzg0b8zAarb8iXRvTvyUFTeGSGn+ZnzxEk8rUQElsgIfXBDrDMlI1Dlb4pd19
+-xIsNER9Tyx6yF7Zod1rg1MvIB671Oi6ON7fQAUtDKXeMOZePglr4UeWJoBjnaH9d
+-Ci77o0cOPaYjesYBx4/IXr9tgFa+iiS6M+qf4TIRnvHST4D2G0CvOJ4RUHlzEhLN
+-5mydLIhyPDCBBpEi6lmt2hkuIsKNuYyH4Ga8cyNfIWRjgEj1oDwYPZTISEEdQLpe
+-/v5WOaHIz16eGWRGENoXkbcFgKyLmZJ956LYBws2J+dIeWCKw9cTXPhyQN9Ky8+Z
+-AAoACxGV2lZFA4gKn2fQ1XmxqI1AbQ3CekD6819kR5LLU7m7Wc5P/dAVUwHY3+vZ
+-5nbv0CO7O6l5s9UCKc2Jo5YPSjXnTkLAdc0Hz+Ys63su
+------END CERTIFICATE-----
+-
+-# Issuer: CN=OISTE WISeKey Global Root GB CA O=WISeKey OU=OISTE Foundation Endorsed
+-# Subject: CN=OISTE WISeKey Global Root GB CA O=WISeKey OU=OISTE Foundation Endorsed
+-# Label: "OISTE WISeKey Global Root GB CA"
+-# Serial: 157768595616588414422159278966750757568
+-# MD5 Fingerprint: a4:eb:b9:61:28:2e:b7:2f:98:b0:35:26:90:99:51:1d
+-# SHA1 Fingerprint: 0f:f9:40:76:18:d3:d7:6a:4b:98:f0:a8:35:9e:0c:fd:27:ac:cc:ed
+-# SHA256 Fingerprint: 6b:9c:08:e8:6e:b0:f7:67:cf:ad:65:cd:98:b6:21:49:e5:49:4a:67:f5:84:5e:7b:d1:ed:01:9f:27:b8:6b:d6
+------BEGIN CERTIFICATE-----
+-MIIDtTCCAp2gAwIBAgIQdrEgUnTwhYdGs/gjGvbCwDANBgkqhkiG9w0BAQsFADBt
+-MQswCQYDVQQGEwJDSDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUg
+-Rm91bmRhdGlvbiBFbmRvcnNlZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9i
+-YWwgUm9vdCBHQiBDQTAeFw0xNDEyMDExNTAwMzJaFw0zOTEyMDExNTEwMzFaMG0x
+-CzAJBgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYDVQQLExlPSVNURSBG
+-b3VuZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEdsb2Jh
+-bCBSb290IEdCIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Be3
+-HEokKtaXscriHvt9OO+Y9bI5mE4nuBFde9IllIiCFSZqGzG7qFshISvYD06fWvGx
+-WuR51jIjK+FTzJlFXHtPrby/h0oLS5daqPZI7H17Dc0hBt+eFf1Biki3IPShehtX
+-1F1Q/7pn2COZH8g/497/b1t3sWtuuMlk9+HKQUYOKXHQuSP8yYFfTvdv37+ErXNk
+-u7dCjmn21HYdfp2nuFeKUWdy19SouJVUQHMD9ur06/4oQnc/nSMbsrY9gBQHTC5P
+-99UKFg29ZkM3fiNDecNAhvVMKdqOmq0NpQSHiB6F4+lT1ZvIiwNjeOvgGUpuuy9r
+-M2RYk61pv48b74JIxwIDAQABo1EwTzALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUw
+-AwEB/zAdBgNVHQ4EFgQUNQ/INmNe4qPs+TtmFc5RUuORmj0wEAYJKwYBBAGCNxUB
+-BAMCAQAwDQYJKoZIhvcNAQELBQADggEBAEBM+4eymYGQfp3FsLAmzYh7KzKNbrgh
+-cViXfa43FK8+5/ea4n32cZiZBKpDdHij40lhPnOMTZTg+XHEthYOU3gf1qKHLwI5
+-gSk8rxWYITD+KJAAjNHhy/peyP34EEY7onhCkRd0VQreUGdNZtGn//3ZwLWoo4rO
+-ZvUPQ82nK1d7Y0Zqqi5S2PTt4W2tKZB4SLrhI6qjiey1q5bAtEuiHZeeevJuQHHf
+-aPFlTc58Bd9TZaml8LGXBHAVRgOY1NK/VLSgWH1Sb9pWJmLU2NuJMW8c8CLC02Ic
+-Nc1MaRVUGpCY3useX8p3x8uOPUNpnJpY0CQ73xtAln41rYHHTnG6iBM=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=SZAFIR ROOT CA2 O=Krajowa Izba Rozliczeniowa S.A.
+-# Subject: CN=SZAFIR ROOT CA2 O=Krajowa Izba Rozliczeniowa S.A.
+-# Label: "SZAFIR ROOT CA2"
+-# Serial: 357043034767186914217277344587386743377558296292
+-# MD5 Fingerprint: 11:64:c1:89:b0:24:b1:8c:b1:07:7e:89:9e:51:9e:99
+-# SHA1 Fingerprint: e2:52:fa:95:3f:ed:db:24:60:bd:6e:28:f3:9c:cc:cf:5e:b3:3f:de
+-# SHA256 Fingerprint: a1:33:9d:33:28:1a:0b:56:e5:57:d3:d3:2b:1c:e7:f9:36:7e:b0:94:bd:5f:a7:2a:7e:50:04:c8:de:d7:ca:fe
+------BEGIN CERTIFICATE-----
+-MIIDcjCCAlqgAwIBAgIUPopdB+xV0jLVt+O2XwHrLdzk1uQwDQYJKoZIhvcNAQEL
+-BQAwUTELMAkGA1UEBhMCUEwxKDAmBgNVBAoMH0tyYWpvd2EgSXpiYSBSb3psaWN6
+-ZW5pb3dhIFMuQS4xGDAWBgNVBAMMD1NaQUZJUiBST09UIENBMjAeFw0xNTEwMTkw
+-NzQzMzBaFw0zNTEwMTkwNzQzMzBaMFExCzAJBgNVBAYTAlBMMSgwJgYDVQQKDB9L
+-cmFqb3dhIEl6YmEgUm96bGljemVuaW93YSBTLkEuMRgwFgYDVQQDDA9TWkFGSVIg
+-Uk9PVCBDQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vD5QqEvN
+-QLXOYeeWyrSh2gwisPq1e3YAd4wLz32ohswmUeQgPYUM1ljj5/QqGJ3a0a4m7utT
+-3PSQ1hNKDJA8w/Ta0o4NkjrcsbH/ON7Dui1fgLkCvUqdGw+0w8LBZwPd3BucPbOw
+-3gAeqDRHu5rr/gsUvTaE2g0gv/pby6kWIK05YO4vdbbnl5z5Pv1+TW9NL++IDWr6
+-3fE9biCloBK0TXC5ztdyO4mTp4CEHCdJckm1/zuVnsHMyAHs6A6KCpbns6aH5db5
+-BSsNl0BwPLqsdVqc1U2dAgrSS5tmS0YHF2Wtn2yIANwiieDhZNRnvDF5YTy7ykHN
+-XGoAyDw4jlivAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD
+-AgEGMB0GA1UdDgQWBBQuFqlKGLXLzPVvUPMjX/hd56zwyDANBgkqhkiG9w0BAQsF
+-AAOCAQEAtXP4A9xZWx126aMqe5Aosk3AM0+qmrHUuOQn/6mWmc5G4G18TKI4pAZw
+-8PRBEew/R40/cof5O/2kbytTAOD/OblqBw7rHRz2onKQy4I9EYKL0rufKq8h5mOG
+-nXkZ7/e7DDWQw4rtTw/1zBLZpD67oPwglV9PJi8RI4NOdQcPv5vRtB3pEAT+ymCP
+-oky4rc/hkA/NrgrHXXu3UNLUYfrVFdvXn4dRVOul4+vJhaAlIDf7js4MNIThPIGy
+-d05DpYhfhmehPea0XGG2Ptv+tyjFogeutcrKjSoS75ftwjCkySp6+/NNIxuZMzSg
+-LvWpCz/UXeHPhJ/iGcJfitYgHuNztw==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Certum Trusted Network CA 2 O=Unizeto Technologies S.A. OU=Certum Certification Authority
+-# Subject: CN=Certum Trusted Network CA 2 O=Unizeto Technologies S.A. OU=Certum Certification Authority
+-# Label: "Certum Trusted Network CA 2"
+-# Serial: 44979900017204383099463764357512596969
+-# MD5 Fingerprint: 6d:46:9e:d9:25:6d:08:23:5b:5e:74:7d:1e:27:db:f2
+-# SHA1 Fingerprint: d3:dd:48:3e:2b:bf:4c:05:e8:af:10:f5:fa:76:26:cf:d3:dc:30:92
+-# SHA256 Fingerprint: b6:76:f2:ed:da:e8:77:5c:d3:6c:b0:f6:3c:d1:d4:60:39:61:f4:9e:62:65:ba:01:3a:2f:03:07:b6:d0:b8:04
+------BEGIN CERTIFICATE-----
+-MIIF0jCCA7qgAwIBAgIQIdbQSk8lD8kyN/yqXhKN6TANBgkqhkiG9w0BAQ0FADCB
+-gDELMAkGA1UEBhMCUEwxIjAgBgNVBAoTGVVuaXpldG8gVGVjaG5vbG9naWVzIFMu
+-QS4xJzAlBgNVBAsTHkNlcnR1bSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEkMCIG
+-A1UEAxMbQ2VydHVtIFRydXN0ZWQgTmV0d29yayBDQSAyMCIYDzIwMTExMDA2MDgz
+-OTU2WhgPMjA0NjEwMDYwODM5NTZaMIGAMQswCQYDVQQGEwJQTDEiMCAGA1UEChMZ
+-VW5pemV0byBUZWNobm9sb2dpZXMgUy5BLjEnMCUGA1UECxMeQ2VydHVtIENlcnRp
+-ZmljYXRpb24gQXV0aG9yaXR5MSQwIgYDVQQDExtDZXJ0dW0gVHJ1c3RlZCBOZXR3
+-b3JrIENBIDIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC9+Xj45tWA
+-DGSdhhuWZGc/IjoedQF97/tcZ4zJzFxrqZHmuULlIEub2pt7uZld2ZuAS9eEQCsn
+-0+i6MLs+CRqnSZXvK0AkwpfHp+6bJe+oCgCXhVqqndwpyeI1B+twTUrWwbNWuKFB
+-OJvR+zF/j+Bf4bE/D44WSWDXBo0Y+aomEKsq09DRZ40bRr5HMNUuctHFY9rnY3lE
+-fktjJImGLjQ/KUxSiyqnwOKRKIm5wFv5HdnnJ63/mgKXwcZQkpsCLL2puTRZCr+E
+-Sv/f/rOf69me4Jgj7KZrdxYq28ytOxykh9xGc14ZYmhFV+SQgkK7QtbwYeDBoz1m
+-o130GO6IyY0XRSmZMnUCMe4pJshrAua1YkV/NxVaI2iJ1D7eTiew8EAMvE0Xy02i
+-sx7QBlrd9pPPV3WZ9fqGGmd4s7+W/jTcvedSVuWz5XV710GRBdxdaeOVDUO5/IOW
+-OZV7bIBaTxNyxtd9KXpEulKkKtVBRgkg/iKgtlswjbyJDNXXcPiHUv3a76xRLgez
+-Tv7QCdpw75j6VuZt27VXS9zlLCUVyJ4ueE742pyehizKV/Ma5ciSixqClnrDvFAS
+-adgOWkaLOusm+iPJtrCBvkIApPjW/jAux9JG9uWOdf3yzLnQh1vMBhBgu4M1t15n
+-3kfsmUjxpKEV/q2MYo45VU85FrmxY53/twIDAQABo0IwQDAPBgNVHRMBAf8EBTAD
+-AQH/MB0GA1UdDgQWBBS2oVQ5AsOgP46KvPrU+Bym0ToO/TAOBgNVHQ8BAf8EBAMC
+-AQYwDQYJKoZIhvcNAQENBQADggIBAHGlDs7k6b8/ONWJWsQCYftMxRQXLYtPU2sQ
+-F/xlhMcQSZDe28cmk4gmb3DWAl45oPePq5a1pRNcgRRtDoGCERuKTsZPpd1iHkTf
+-CVn0W3cLN+mLIMb4Ck4uWBzrM9DPhmDJ2vuAL55MYIR4PSFk1vtBHxgP58l1cb29
+-XN40hz5BsA72udY/CROWFC/emh1auVbONTqwX3BNXuMp8SMoclm2q8KMZiYcdywm
+-djWLKKdpoPk79SPdhRB0yZADVpHnr7pH1BKXESLjokmUbOe3lEu6LaTaM4tMpkT/
+-WjzGHWTYtTHkpjx6qFcL2+1hGsvxznN3Y6SHb0xRONbkX8eftoEq5IVIeVheO/jb
+-AoJnwTnbw3RLPTYe+SmTiGhbqEQZIfCn6IENLOiTNrQ3ssqwGyZ6miUfmpqAnksq
+-P/ujmv5zMnHCnsZy4YpoJ/HkD7TETKVhk/iXEAcqMCWpuchxuO9ozC1+9eB+D4Ko
+-b7a6bINDd82Kkhehnlt4Fj1F4jNy3eFmypnTycUm/Q1oBEauttmbjL4ZvrHG8hnj
+-XALKLNhvSgfZyTXaQHXyxKcZb55CEJh15pWLYLztxRLXis7VmFxWlgPF7ncGNf/P
+-5O4/E2Hu29othfDNrp2yGAlFw5Khchf8R7agCyzxxN5DaAhqXzvwdmP7zAYspsbi
+-DrW5viSP
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Hellenic Academic and Research Institutions RootCA 2015 O=Hellenic Academic and Research Institutions Cert. Authority
+-# Subject: CN=Hellenic Academic and Research Institutions RootCA 2015 O=Hellenic Academic and Research Institutions Cert. Authority
+-# Label: "Hellenic Academic and Research Institutions RootCA 2015"
+-# Serial: 0
+-# MD5 Fingerprint: ca:ff:e2:db:03:d9:cb:4b:e9:0f:ad:84:fd:7b:18:ce
+-# SHA1 Fingerprint: 01:0c:06:95:a6:98:19:14:ff:bf:5f:c6:b0:b6:95:ea:29:e9:12:a6
+-# SHA256 Fingerprint: a0:40:92:9a:02:ce:53:b4:ac:f4:f2:ff:c6:98:1c:e4:49:6f:75:5e:6d:45:fe:0b:2a:69:2b:cd:52:52:3f:36
+------BEGIN CERTIFICATE-----
+-MIIGCzCCA/OgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBpjELMAkGA1UEBhMCR1Ix
+-DzANBgNVBAcTBkF0aGVuczFEMEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5k
+-IFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0LiBBdXRob3JpdHkxQDA+BgNVBAMT
+-N0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgUm9v
+-dENBIDIwMTUwHhcNMTUwNzA3MTAxMTIxWhcNNDAwNjMwMTAxMTIxWjCBpjELMAkG
+-A1UEBhMCR1IxDzANBgNVBAcTBkF0aGVuczFEMEIGA1UEChM7SGVsbGVuaWMgQWNh
+-ZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0LiBBdXRob3JpdHkx
+-QDA+BgNVBAMTN0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1
+-dGlvbnMgUm9vdENBIDIwMTUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
+-AQDC+Kk/G4n8PDwEXT2QNrCROnk8ZlrvbTkBSRq0t89/TSNTt5AA4xMqKKYx8ZEA
+-4yjsriFBzh/a/X0SWwGDD7mwX5nh8hKDgE0GPt+sr+ehiGsxr/CL0BgzuNtFajT0
+-AoAkKAoCFZVedioNmToUW/bLy1O8E00BiDeUJRtCvCLYjqOWXjrZMts+6PAQZe10
+-4S+nfK8nNLspfZu2zwnI5dMK/IhlZXQK3HMcXM1AsRzUtoSMTFDPaI6oWa7CJ06C
+-ojXdFPQf/7J31Ycvqm59JCfnxssm5uX+Zwdj2EUN3TpZZTlYepKZcj2chF6IIbjV
+-9Cz82XBST3i4vTwri5WY9bPRaM8gFH5MXF/ni+X1NYEZN9cRCLdmvtNKzoNXADrD
+-gfgXy5I2XdGj2HUb4Ysn6npIQf1FGQatJ5lOwXBH3bWfgVMS5bGMSF0xQxfjjMZ6
+-Y5ZLKTBOhE5iGV48zpeQpX8B653g+IuJ3SWYPZK2fu/Z8VFRfS0myGlZYeCsargq
+-NhEEelC9MoS+L9xy1dcdFkfkR2YgP/SWxa+OAXqlD3pk9Q0Yh9muiNX6hME6wGko
+-LfINaFGq46V3xqSQDqE3izEjR8EJCOtu93ib14L8hCCZSRm2Ekax+0VVFqmjZayc
+-Bw/qa9wfLgZy7IaIEuQt218FL+TwA9MmM+eAws1CoRc0CwIDAQABo0IwQDAPBgNV
+-HRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUcRVnyMjJvXVd
+-ctA4GGqd83EkVAswDQYJKoZIhvcNAQELBQADggIBAHW7bVRLqhBYRjTyYtcWNl0I
+-XtVsyIe9tC5G8jH4fOpCtZMWVdyhDBKg2mF+D1hYc2Ryx+hFjtyp8iY/xnmMsVMI
+-M4GwVhO+5lFc2JsKT0ucVlMC6U/2DWDqTUJV6HwbISHTGzrMd/K4kPFox/la/vot
+-9L/J9UUbzjgQKjeKeaO04wlshYaT/4mWJ3iBj2fjRnRUjtkNaeJK9E10A/+yd+2V
+-Z5fkscWrv2oj6NSU4kQoYsRL4vDY4ilrGnB+JGGTe08DMiUNRSQrlrRGar9KC/ea
+-j8GsGsVn82800vpzY4zvFrCopEYq+OsS7HK07/grfoxSwIuEVPkvPuNVqNxmsdnh
+-X9izjFk0WaSrT2y7HxjbdavYy5LNlDhhDgcGH0tGEPEVvo2FXDtKK4F5D7Rpn0lQ
+-l033DlZdwJVqwjbDG2jJ9SrcR5q+ss7FJej6A7na+RZukYT1HCjI/CbM1xyQVqdf
+-bzoEvM14iQuODy+jqk+iGxI9FghAD/FGTNeqewjBCvVtJ94Cj8rDtSvK6evIIVM4
+-pcw72Hc3MKJP2W/R8kCtQXoXxdZKNYm3QdV8hn9VTYNKpXMgwDqvkPGaJI7ZjnHK
+-e7iG2rKPmT4dEw0SEe7Uq/DpFXYC5ODfqiAeW2GFZECpkJcNrVPSWh2HagCXZWK0
+-vm9qp/UsQu0yrbYhnr68
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Hellenic Academic and Research Institutions ECC RootCA 2015 O=Hellenic Academic and Research Institutions Cert. Authority
+-# Subject: CN=Hellenic Academic and Research Institutions ECC RootCA 2015 O=Hellenic Academic and Research Institutions Cert. Authority
+-# Label: "Hellenic Academic and Research Institutions ECC RootCA 2015"
+-# Serial: 0
+-# MD5 Fingerprint: 81:e5:b4:17:eb:c2:f5:e1:4b:0d:41:7b:49:92:fe:ef
+-# SHA1 Fingerprint: 9f:f1:71:8d:92:d5:9a:f3:7d:74:97:b4:bc:6f:84:68:0b:ba:b6:66
+-# SHA256 Fingerprint: 44:b5:45:aa:8a:25:e6:5a:73:ca:15:dc:27:fc:36:d2:4c:1c:b9:95:3a:06:65:39:b1:15:82:dc:48:7b:48:33
+------BEGIN CERTIFICATE-----
+-MIICwzCCAkqgAwIBAgIBADAKBggqhkjOPQQDAjCBqjELMAkGA1UEBhMCR1IxDzAN
+-BgNVBAcTBkF0aGVuczFEMEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl
+-c2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0LiBBdXRob3JpdHkxRDBCBgNVBAMTO0hl
+-bGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgRUNDIFJv
+-b3RDQSAyMDE1MB4XDTE1MDcwNzEwMzcxMloXDTQwMDYzMDEwMzcxMlowgaoxCzAJ
+-BgNVBAYTAkdSMQ8wDQYDVQQHEwZBdGhlbnMxRDBCBgNVBAoTO0hlbGxlbmljIEFj
+-YWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ2VydC4gQXV0aG9yaXR5
+-MUQwQgYDVQQDEztIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0
+-dXRpb25zIEVDQyBSb290Q0EgMjAxNTB2MBAGByqGSM49AgEGBSuBBAAiA2IABJKg
+-QehLgoRc4vgxEZmGZE4JJS+dQS8KrjVPdJWyUWRrjWvmP3CV8AVER6ZyOFB2lQJa
+-jq4onvktTpnvLEhvTCUp6NFxW98dwXU3tNf6e3pCnGoKVlp8aQuqgAkkbH7BRqNC
+-MEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFLQi
+-C4KZJAEOnLvkDv2/+5cgk5kqMAoGCCqGSM49BAMCA2cAMGQCMGfOFmI4oqxiRaep
+-lSTAGiecMjvAwNW6qef4BENThe5SId6d9SWDPp5YSy/XZxMOIQIwBeF1Ad5o7Sof
+-TUwJCA3sS61kFyjndc5FZXIhF8siQQ6ME5g4mlRtm8rifOoCWCKR
+------END CERTIFICATE-----
+-
+-# Issuer: CN=ISRG Root X1 O=Internet Security Research Group
+-# Subject: CN=ISRG Root X1 O=Internet Security Research Group
+-# Label: "ISRG Root X1"
+-# Serial: 172886928669790476064670243504169061120
+-# MD5 Fingerprint: 0c:d2:f9:e0:da:17:73:e9:ed:86:4d:a5:e3:70:e7:4e
+-# SHA1 Fingerprint: ca:bd:2a:79:a1:07:6a:31:f2:1d:25:36:35:cb:03:9d:43:29:a5:e8
+-# SHA256 Fingerprint: 96:bc:ec:06:26:49:76:f3:74:60:77:9a:cf:28:c5:a7:cf:e8:a3:c0:aa:e1:1a:8f:fc:ee:05:c0:bd:df:08:c6
+------BEGIN CERTIFICATE-----
+-MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw
+-TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
+-cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4
+-WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJu
+-ZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBY
+-MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54rVygc
+-h77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+
+-0TM8ukj13Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6U
+-A5/TR5d8mUgjU+g4rk8Kb4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sW
+-T8KOEUt+zwvo/7V3LvSye0rgTBIlDHCNAymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyH
+-B5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ4Q7e2RCOFvu396j3x+UC
+-B5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf1b0SHzUv
+-KBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWn
+-OlFuhjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTn
+-jh8BCNAw1FtxNrQHusEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbw
+-qHyGO0aoSCqI3Haadr8faqU9GY/rOPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CI
+-rU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV
+-HRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY9umbbjANBgkq
+-hkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL
+-ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ
+-3BebYhtF8GaV0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KK
+-NFtY2PwByVS5uCbMiogziUwthDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5
+-ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJwTdwJx4nLCgdNbOhdjsnvzqvHu7Ur
+-TkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nxe5AW0wdeRlN8NwdC
+-jNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZAJzVc
+-oyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq
+-4RgqsahDYVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPA
+-mRGunUHBcnWEvgJBQl9nJEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57d
+-emyPxgcYxn/eR44/KJ4EBs+lVDR3veyJm+kXQ99b21/+jh5Xos1AnX5iItreGCc=
+------END CERTIFICATE-----
+-
+-# Issuer: O=FNMT-RCM OU=AC RAIZ FNMT-RCM
+-# Subject: O=FNMT-RCM OU=AC RAIZ FNMT-RCM
+-# Label: "AC RAIZ FNMT-RCM"
+-# Serial: 485876308206448804701554682760554759
+-# MD5 Fingerprint: e2:09:04:b4:d3:bd:d1:a0:14:fd:1a:d2:47:c4:57:1d
+-# SHA1 Fingerprint: ec:50:35:07:b2:15:c4:95:62:19:e2:a8:9a:5b:42:99:2c:4c:2c:20
+-# SHA256 Fingerprint: eb:c5:57:0c:29:01:8c:4d:67:b1:aa:12:7b:af:12:f7:03:b4:61:1e:bc:17:b7:da:b5:57:38:94:17:9b:93:fa
+------BEGIN CERTIFICATE-----
+-MIIFgzCCA2ugAwIBAgIPXZONMGc2yAYdGsdUhGkHMA0GCSqGSIb3DQEBCwUAMDsx
+-CzAJBgNVBAYTAkVTMREwDwYDVQQKDAhGTk1ULVJDTTEZMBcGA1UECwwQQUMgUkFJ
+-WiBGTk1ULVJDTTAeFw0wODEwMjkxNTU5NTZaFw0zMDAxMDEwMDAwMDBaMDsxCzAJ
+-BgNVBAYTAkVTMREwDwYDVQQKDAhGTk1ULVJDTTEZMBcGA1UECwwQQUMgUkFJWiBG
+-Tk1ULVJDTTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALpxgHpMhm5/
+-yBNtwMZ9HACXjywMI7sQmkCpGreHiPibVmr75nuOi5KOpyVdWRHbNi63URcfqQgf
+-BBckWKo3Shjf5TnUV/3XwSyRAZHiItQDwFj8d0fsjz50Q7qsNI1NOHZnjrDIbzAz
+-WHFctPVrbtQBULgTfmxKo0nRIBnuvMApGGWn3v7v3QqQIecaZ5JCEJhfTzC8PhxF
+-tBDXaEAUwED653cXeuYLj2VbPNmaUtu1vZ5Gzz3rkQUCwJaydkxNEJY7kvqcfw+Z
+-374jNUUeAlz+taibmSXaXvMiwzn15Cou08YfxGyqxRxqAQVKL9LFwag0Jl1mpdIC
+-IfkYtwb1TplvqKtMUejPUBjFd8g5CSxJkjKZqLsXF3mwWsXmo8RZZUc1g16p6DUL
+-mbvkzSDGm0oGObVo/CK67lWMK07q87Hj/LaZmtVC+nFNCM+HHmpxffnTtOmlcYF7
+-wk5HlqX2doWjKI/pgG6BU6VtX7hI+cL5NqYuSf+4lsKMB7ObiFj86xsc3i1w4peS
+-MKGJ47xVqCfWS+2QrYv6YyVZLag13cqXM7zlzced0ezvXg5KkAYmY6252TUtB7p2
+-ZSysV4999AeU14ECll2jB0nVetBX+RvnU0Z1qrB5QstocQjpYL05ac70r8NWQMet
+-UqIJ5G+GR4of6ygnXYMgrwTJbFaai0b1AgMBAAGjgYMwgYAwDwYDVR0TAQH/BAUw
+-AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFPd9xf3E6Jobd2Sn9R2gzL+H
+-YJptMD4GA1UdIAQ3MDUwMwYEVR0gADArMCkGCCsGAQUFBwIBFh1odHRwOi8vd3d3
+-LmNlcnQuZm5tdC5lcy9kcGNzLzANBgkqhkiG9w0BAQsFAAOCAgEAB5BK3/MjTvDD
+-nFFlm5wioooMhfNzKWtN/gHiqQxjAb8EZ6WdmF/9ARP67Jpi6Yb+tmLSbkyU+8B1
+-RXxlDPiyN8+sD8+Nb/kZ94/sHvJwnvDKuO+3/3Y3dlv2bojzr2IyIpMNOmqOFGYM
+-LVN0V2Ue1bLdI4E7pWYjJ2cJj+F3qkPNZVEI7VFY/uY5+ctHhKQV8Xa7pO6kO8Rf
+-77IzlhEYt8llvhjho6Tc+hj507wTmzl6NLrTQfv6MooqtyuGC2mDOL7Nii4LcK2N
+-JpLuHvUBKwrZ1pebbuCoGRw6IYsMHkCtA+fdZn71uSANA+iW+YJF1DngoABd15jm
+-fZ5nc8OaKveri6E6FO80vFIOiZiaBECEHX5FaZNXzuvO+FB8TxxuBEOb+dY7Ixjp
+-6o7RTUaN8Tvkasq6+yO3m/qZASlaWFot4/nUbQ4mrcFuNLwy+AwF+mWj2zs3gyLp
+-1txyM/1d8iC9djwj2ij3+RvrWWTV3F9yfiD8zYm1kGdNYno/Tq0dwzn+evQoFt9B
+-9kiABdcPUXmsEKvU7ANm5mqwujGSQkBqvjrTcuFqN1W8rB2Vt2lh8kORdOag0wok
+-RqEIr9baRRmW1FMdW4R58MD3R++Lj8UGrp1MYp3/RgT408m2ECVAdf4WqslKYIYv
+-uu8wd+RU4riEmViAqhOLUTpPSPaLtrM=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Amazon Root CA 1 O=Amazon
+-# Subject: CN=Amazon Root CA 1 O=Amazon
+-# Label: "Amazon Root CA 1"
+-# Serial: 143266978916655856878034712317230054538369994
+-# MD5 Fingerprint: 43:c6:bf:ae:ec:fe:ad:2f:18:c6:88:68:30:fc:c8:e6
+-# SHA1 Fingerprint: 8d:a7:f9:65:ec:5e:fc:37:91:0f:1c:6e:59:fd:c1:cc:6a:6e:de:16
+-# SHA256 Fingerprint: 8e:cd:e6:88:4f:3d:87:b1:12:5b:a3:1a:c3:fc:b1:3d:70:16:de:7f:57:cc:90:4f:e1:cb:97:c6:ae:98:19:6e
+------BEGIN CERTIFICATE-----
+-MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF
+-ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6
+-b24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL
+-MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv
+-b3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXj
+-ca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM
+-9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qw
+-IFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6
+-VOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L
+-93FcXmn/6pUCyziKrlA4b9v7LWIbxcceVOF34GfID5yHI9Y/QCB/IIDEgEw+OyQm
+-jgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC
+-AYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3DQEBCwUA
+-A4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDI
+-U5PMCCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUs
+-N+gDS63pYaACbvXy8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vv
+-o/ufQJVtMVT8QtPHRh8jrdkPSHCa2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU
+-5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2xJNDd2ZhwLnoQdeXeGADbkpy
+-rqXRfboQnoZsG4q5WTP468SQvvG5
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Amazon Root CA 2 O=Amazon
+-# Subject: CN=Amazon Root CA 2 O=Amazon
+-# Label: "Amazon Root CA 2"
+-# Serial: 143266982885963551818349160658925006970653239
+-# MD5 Fingerprint: c8:e5:8d:ce:a8:42:e2:7a:c0:2a:5c:7c:9e:26:bf:66
+-# SHA1 Fingerprint: 5a:8c:ef:45:d7:a6:98:59:76:7a:8c:8b:44:96:b5:78:cf:47:4b:1a
+-# SHA256 Fingerprint: 1b:a5:b2:aa:8c:65:40:1a:82:96:01:18:f8:0b:ec:4f:62:30:4d:83:ce:c4:71:3a:19:c3:9c:01:1e:a4:6d:b4
+------BEGIN CERTIFICATE-----
+-MIIFQTCCAymgAwIBAgITBmyf0pY1hp8KD+WGePhbJruKNzANBgkqhkiG9w0BAQwF
+-ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6
+-b24gUm9vdCBDQSAyMB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTEL
+-MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv
+-b3QgQ0EgMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2Wny2cSkxK
+-gXlRmeyKy2tgURO8TW0G/LAIjd0ZEGrHJgw12MBvIITplLGbhQPDW9tK6Mj4kHbZ
+-W0/jTOgGNk3Mmqw9DJArktQGGWCsN0R5hYGCrVo34A3MnaZMUnbqQ523BNFQ9lXg
+-1dKmSYXpN+nKfq5clU1Imj+uIFptiJXZNLhSGkOQsL9sBbm2eLfq0OQ6PBJTYv9K
+-8nu+NQWpEjTj82R0Yiw9AElaKP4yRLuH3WUnAnE72kr3H9rN9yFVkE8P7K6C4Z9r
+-2UXTu/Bfh+08LDmG2j/e7HJV63mjrdvdfLC6HM783k81ds8P+HgfajZRRidhW+me
+-z/CiVX18JYpvL7TFz4QuK/0NURBs+18bvBt+xa47mAExkv8LV/SasrlX6avvDXbR
+-8O70zoan4G7ptGmh32n2M8ZpLpcTnqWHsFcQgTfJU7O7f/aS0ZzQGPSSbtqDT6Zj
+-mUyl+17vIWR6IF9sZIUVyzfpYgwLKhbcAS4y2j5L9Z469hdAlO+ekQiG+r5jqFoz
+-7Mt0Q5X5bGlSNscpb/xVA1wf+5+9R+vnSUeVC06JIglJ4PVhHvG/LopyboBZ/1c6
+-+XUyo05f7O0oYtlNc/LMgRdg7c3r3NunysV+Ar3yVAhU/bQtCSwXVEqY0VThUWcI
+-0u1ufm8/0i2BWSlmy5A5lREedCf+3euvAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMB
+-Af8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSwDPBMMPQFWAJI/TPlUq9LhONm
+-UjANBgkqhkiG9w0BAQwFAAOCAgEAqqiAjw54o+Ci1M3m9Zh6O+oAA7CXDpO8Wqj2
+-LIxyh6mx/H9z/WNxeKWHWc8w4Q0QshNabYL1auaAn6AFC2jkR2vHat+2/XcycuUY
+-+gn0oJMsXdKMdYV2ZZAMA3m3MSNjrXiDCYZohMr/+c8mmpJ5581LxedhpxfL86kS
+-k5Nrp+gvU5LEYFiwzAJRGFuFjWJZY7attN6a+yb3ACfAXVU3dJnJUH/jWS5E4ywl
+-7uxMMne0nxrpS10gxdr9HIcWxkPo1LsmmkVwXqkLN1PiRnsn/eBG8om3zEK2yygm
+-btmlyTrIQRNg91CMFa6ybRoVGld45pIq2WWQgj9sAq+uEjonljYE1x2igGOpm/Hl
+-urR8FLBOybEfdF849lHqm/osohHUqS0nGkWxr7JOcQ3AWEbWaQbLU8uz/mtBzUF+
+-fUwPfHJ5elnNXkoOrJupmHN5fLT0zLm4BwyydFy4x2+IoZCn9Kr5v2c69BoVYh63
+-n749sSmvZ6ES8lgQGVMDMBu4Gon2nL2XA46jCfMdiyHxtN/kHNGfZQIG6lzWE7OE
+-76KlXIx3KadowGuuQNKotOrN8I1LOJwZmhsoVLiJkO/KdYE+HvJkJMcYr07/R54H
+-9jVlpNMKVv/1F2Rs76giJUmTtt8AF9pYfl3uxRuw0dFfIRDH+fO6AgonB8Xx1sfT
+-4PsJYGw=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Amazon Root CA 3 O=Amazon
+-# Subject: CN=Amazon Root CA 3 O=Amazon
+-# Label: "Amazon Root CA 3"
+-# Serial: 143266986699090766294700635381230934788665930
+-# MD5 Fingerprint: a0:d4:ef:0b:f7:b5:d8:49:95:2a:ec:f5:c4:fc:81:87
+-# SHA1 Fingerprint: 0d:44:dd:8c:3c:8c:1a:1a:58:75:64:81:e9:0f:2e:2a:ff:b3:d2:6e
+-# SHA256 Fingerprint: 18:ce:6c:fe:7b:f1:4e:60:b2:e3:47:b8:df:e8:68:cb:31:d0:2e:bb:3a:da:27:15:69:f5:03:43:b4:6d:b3:a4
+------BEGIN CERTIFICATE-----
+-MIIBtjCCAVugAwIBAgITBmyf1XSXNmY/Owua2eiedgPySjAKBggqhkjOPQQDAjA5
+-MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24g
+-Um9vdCBDQSAzMB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkG
+-A1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJvb3Qg
+-Q0EgMzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABCmXp8ZBf8ANm+gBG1bG8lKl
+-ui2yEujSLtf6ycXYqm0fc4E7O5hrOXwzpcVOho6AF2hiRVd9RFgdszflZwjrZt6j
+-QjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSr
+-ttvXBp43rDCGB5Fwx5zEGbF4wDAKBggqhkjOPQQDAgNJADBGAiEA4IWSoxe3jfkr
+-BqWTrBqYaGFy+uGh0PsceGCmQ5nFuMQCIQCcAu/xlJyzlvnrxir4tiz+OpAUFteM
+-YyRIHN8wfdVoOw==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Amazon Root CA 4 O=Amazon
+-# Subject: CN=Amazon Root CA 4 O=Amazon
+-# Label: "Amazon Root CA 4"
+-# Serial: 143266989758080763974105200630763877849284878
+-# MD5 Fingerprint: 89:bc:27:d5:eb:17:8d:06:6a:69:d5:fd:89:47:b4:cd
+-# SHA1 Fingerprint: f6:10:84:07:d6:f8:bb:67:98:0c:c2:e2:44:c2:eb:ae:1c:ef:63:be
+-# SHA256 Fingerprint: e3:5d:28:41:9e:d0:20:25:cf:a6:90:38:cd:62:39:62:45:8d:a5:c6:95:fb:de:a3:c2:2b:0b:fb:25:89:70:92
+------BEGIN CERTIFICATE-----
+-MIIB8jCCAXigAwIBAgITBmyf18G7EEwpQ+Vxe3ssyBrBDjAKBggqhkjOPQQDAzA5
+-MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6b24g
+-Um9vdCBDQSA0MB4XDTE1MDUyNjAwMDAwMFoXDTQwMDUyNjAwMDAwMFowOTELMAkG
+-A1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJvb3Qg
+-Q0EgNDB2MBAGByqGSM49AgEGBSuBBAAiA2IABNKrijdPo1MN/sGKe0uoe0ZLY7Bi
+-9i0b2whxIdIA6GO9mif78DluXeo9pcmBqqNbIJhFXRbb/egQbeOc4OO9X4Ri83Bk
+-M6DLJC9wuoihKqB1+IGuYgbEgds5bimwHvouXKNCMEAwDwYDVR0TAQH/BAUwAwEB
+-/zAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYEFNPsxzplbszh2naaVvuc84ZtV+WB
+-MAoGCCqGSM49BAMDA2gAMGUCMDqLIfG9fhGt0O9Yli/W651+kI0rz2ZVwyzjKKlw
+-CkcO8DdZEv8tmZQoTipPNU0zWgIxAOp1AE47xDqUEpHJWEadIRNyp4iciuRMStuW
+-1KyLa2tJElMzrdfkviT8tQp21KW8EA==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1 O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK OU=Kamu Sertifikasyon Merkezi - Kamu SM
+-# Subject: CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1 O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK OU=Kamu Sertifikasyon Merkezi - Kamu SM
+-# Label: "TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1"
+-# Serial: 1
+-# MD5 Fingerprint: dc:00:81:dc:69:2f:3e:2f:b0:3b:f6:3d:5a:91:8e:49
+-# SHA1 Fingerprint: 31:43:64:9b:ec:ce:27:ec:ed:3a:3f:0b:8f:0d:e4:e8:91:dd:ee:ca
+-# SHA256 Fingerprint: 46:ed:c3:68:90:46:d5:3a:45:3f:b3:10:4a:b8:0d:ca:ec:65:8b:26:60:ea:16:29:dd:7e:86:79:90:64:87:16
+------BEGIN CERTIFICATE-----
+-MIIEYzCCA0ugAwIBAgIBATANBgkqhkiG9w0BAQsFADCB0jELMAkGA1UEBhMCVFIx
+-GDAWBgNVBAcTD0dlYnplIC0gS29jYWVsaTFCMEAGA1UEChM5VHVya2l5ZSBCaWxp
+-bXNlbCB2ZSBUZWtub2xvamlrIEFyYXN0aXJtYSBLdXJ1bXUgLSBUVUJJVEFLMS0w
+-KwYDVQQLEyRLYW11IFNlcnRpZmlrYXN5b24gTWVya2V6aSAtIEthbXUgU00xNjA0
+-BgNVBAMTLVRVQklUQUsgS2FtdSBTTSBTU0wgS29rIFNlcnRpZmlrYXNpIC0gU3Vy
+-dW0gMTAeFw0xMzExMjUwODI1NTVaFw00MzEwMjUwODI1NTVaMIHSMQswCQYDVQQG
+-EwJUUjEYMBYGA1UEBxMPR2ViemUgLSBLb2NhZWxpMUIwQAYDVQQKEzlUdXJraXll
+-IEJpbGltc2VsIHZlIFRla25vbG9qaWsgQXJhc3Rpcm1hIEt1cnVtdSAtIFRVQklU
+-QUsxLTArBgNVBAsTJEthbXUgU2VydGlmaWthc3lvbiBNZXJrZXppIC0gS2FtdSBT
+-TTE2MDQGA1UEAxMtVFVCSVRBSyBLYW11IFNNIFNTTCBLb2sgU2VydGlmaWthc2kg
+-LSBTdXJ1bSAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3UwM6q7
+-a9OZLBI3hNmNe5eA027n/5tQlT6QlVZC1xl8JoSNkvoBHToP4mQ4t4y86Ij5iySr
+-LqP1N+RAjhgleYN1Hzv/bKjFxlb4tO2KRKOrbEz8HdDc72i9z+SqzvBV96I01INr
+-N3wcwv61A+xXzry0tcXtAA9TNypN9E8Mg/uGz8v+jE69h/mniyFXnHrfA2eJLJ2X
+-YacQuFWQfw4tJzh03+f92k4S400VIgLI4OD8D62K18lUUMw7D8oWgITQUVbDjlZ/
+-iSIzL+aFCr2lqBs23tPcLG07xxO9WSMs5uWk99gL7eqQQESolbuT1dCANLZGeA4f
+-AJNG4e7p+exPFwIDAQABo0IwQDAdBgNVHQ4EFgQUZT/HiobGPN08VFw1+DrtUgxH
+-V8gwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL
+-BQADggEBACo/4fEyjq7hmFxLXs9rHmoJ0iKpEsdeV31zVmSAhHqT5Am5EM2fKifh
+-AHe+SMg1qIGf5LgsyX8OsNJLN13qudULXjS99HMpw+0mFZx+CFOKWI3QSyjfwbPf
+-IPP54+M638yclNhOT8NrF7f3cuitZjO1JVOr4PhMqZ398g26rrnZqsZr+ZO7rqu4
+-lzwDGrpDxpa5RXI4s6ehlj2Re37AIVNMh+3yC1SVUZPVIqUNivGTDj5UDrDYyU7c
+-8jEyVupk+eq1nRZmQnLzf9OxMUP8pI4X8W0jq5Rm+K37DwhuJi1/FwcJsoz7UMCf
+-lo3Ptv0AnVoUmr8CRPXBwp8iXqIPoeM=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=GDCA TrustAUTH R5 ROOT O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.
+-# Subject: CN=GDCA TrustAUTH R5 ROOT O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.
+-# Label: "GDCA TrustAUTH R5 ROOT"
+-# Serial: 9009899650740120186
+-# MD5 Fingerprint: 63:cc:d9:3d:34:35:5c:6f:53:a3:e2:08:70:48:1f:b4
+-# SHA1 Fingerprint: 0f:36:38:5b:81:1a:25:c3:9b:31:4e:83:ca:e9:34:66:70:cc:74:b4
+-# SHA256 Fingerprint: bf:ff:8f:d0:44:33:48:7d:6a:8a:a6:0c:1a:29:76:7a:9f:c2:bb:b0:5e:42:0f:71:3a:13:b9:92:89:1d:38:93
+------BEGIN CERTIFICATE-----
+-MIIFiDCCA3CgAwIBAgIIfQmX/vBH6nowDQYJKoZIhvcNAQELBQAwYjELMAkGA1UE
+-BhMCQ04xMjAwBgNVBAoMKUdVQU5HIERPTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZ
+-IENPLixMVEQuMR8wHQYDVQQDDBZHRENBIFRydXN0QVVUSCBSNSBST09UMB4XDTE0
+-MTEyNjA1MTMxNVoXDTQwMTIzMTE1NTk1OVowYjELMAkGA1UEBhMCQ04xMjAwBgNV
+-BAoMKUdVQU5HIERPTkcgQ0VSVElGSUNBVEUgQVVUSE9SSVRZIENPLixMVEQuMR8w
+-HQYDVQQDDBZHRENBIFRydXN0QVVUSCBSNSBST09UMIICIjANBgkqhkiG9w0BAQEF
+-AAOCAg8AMIICCgKCAgEA2aMW8Mh0dHeb7zMNOwZ+Vfy1YI92hhJCfVZmPoiC7XJj
+-Dp6L3TQsAlFRwxn9WVSEyfFrs0yw6ehGXTjGoqcuEVe6ghWinI9tsJlKCvLriXBj
+-TnnEt1u9ol2x8kECK62pOqPseQrsXzrj/e+APK00mxqriCZ7VqKChh/rNYmDf1+u
+-KU49tm7srsHwJ5uu4/Ts765/94Y9cnrrpftZTqfrlYwiOXnhLQiPzLyRuEH3FMEj
+-qcOtmkVEs7LXLM3GKeJQEK5cy4KOFxg2fZfmiJqwTTQJ9Cy5WmYqsBebnh52nUpm
+-MUHfP/vFBu8btn4aRjb3ZGM74zkYI+dndRTVdVeSN72+ahsmUPI2JgaQxXABZG12
+-ZuGR224HwGGALrIuL4xwp9E7PLOR5G62xDtw8mySlwnNR30YwPO7ng/Wi64HtloP
+-zgsMR6flPri9fcebNaBhlzpBdRfMK5Z3KpIhHtmVdiBnaM8Nvd/WHwlqmuLMc3Gk
+-L30SgLdTMEZeS1SZD2fJpcjyIMGC7J0R38IC+xo70e0gmu9lZJIQDSri3nDxGGeC
+-jGHeuLzRL5z7D9Ar7Rt2ueQ5Vfj4oR24qoAATILnsn8JuLwwoC8N9VKejveSswoA
+-HQBUlwbgsQfZxw9cZX08bVlX5O2ljelAU58VS6Bx9hoh49pwBiFYFIeFd3mqgnkC
+-AwEAAaNCMEAwHQYDVR0OBBYEFOLJQJ9NzuiaoXzPDj9lxSmIahlRMA8GA1UdEwEB
+-/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQDRSVfg
+-p8xoWLoBDysZzY2wYUWsEe1jUGn4H3++Fo/9nesLqjJHdtJnJO29fDMylyrHBYZm
+-DRd9FBUb1Ov9H5r2XpdptxolpAqzkT9fNqyL7FeoPueBihhXOYV0GkLH6VsTX4/5
+-COmSdI31R9KrO9b7eGZONn356ZLpBN79SWP8bfsUcZNnL0dKt7n/HipzcEYwv1ry
+-L3ml4Y0M2fmyYzeMN2WFcGpcWwlyua1jPLHd+PwyvzeG5LuOmCd+uh8W4XAR8gPf
+-JWIyJyYYMoSf/wA6E7qaTfRPuBRwIrHKK5DOKcFw9C+df/KQHtZa37dG/OaG+svg
+-IHZ6uqbL9XzeYqWxi+7egmaKTjowHz+Ay60nugxe19CxVsp3cbK1daFQqUBDF8Io
+-2c9Si1vIY9RCPqAzekYu9wogRlR+ak8x8YF+QnQ4ZXMn7sZ8uI7XpTrXmKGcjBBV
+-09tL7ECQ8s1uV9JiDnxXk7Gnbc2dg7sq5+W2O3FYrf3RRbxake5TFW/TRQl1brqQ
+-XR4EzzffHqhmsYzmIGrv/EhOdJhCrylvLmrH+33RZjEizIYAfmaDDEL0vTSSwxrq
+-T8p+ck0LcIymSLumoRT2+1hEmRSuqguTaaApJUqlyyvdimYHFngVV3Eb7PVHhPOe
+-MTd61X8kreS8/f3MboPoDKi3QWwH3b08hpcv0g==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=TrustCor RootCert CA-1 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority
+-# Subject: CN=TrustCor RootCert CA-1 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority
+-# Label: "TrustCor RootCert CA-1"
+-# Serial: 15752444095811006489
+-# MD5 Fingerprint: 6e:85:f1:dc:1a:00:d3:22:d5:b2:b2:ac:6b:37:05:45
+-# SHA1 Fingerprint: ff:bd:cd:e7:82:c8:43:5e:3c:6f:26:86:5c:ca:a8:3a:45:5b:c3:0a
+-# SHA256 Fingerprint: d4:0e:9c:86:cd:8f:e4:68:c1:77:69:59:f4:9e:a7:74:fa:54:86:84:b6:c4:06:f3:90:92:61:f4:dc:e2:57:5c
+------BEGIN CERTIFICATE-----
+-MIIEMDCCAxigAwIBAgIJANqb7HHzA7AZMA0GCSqGSIb3DQEBCwUAMIGkMQswCQYD
+-VQQGEwJQQTEPMA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5hbWEgQ2l0eTEk
+-MCIGA1UECgwbVHJ1c3RDb3IgU3lzdGVtcyBTLiBkZSBSLkwuMScwJQYDVQQLDB5U
+-cnVzdENvciBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxHzAdBgNVBAMMFlRydXN0Q29y
+-IFJvb3RDZXJ0IENBLTEwHhcNMTYwMjA0MTIzMjE2WhcNMjkxMjMxMTcyMzE2WjCB
+-pDELMAkGA1UEBhMCUEExDzANBgNVBAgMBlBhbmFtYTEUMBIGA1UEBwwLUGFuYW1h
+-IENpdHkxJDAiBgNVBAoMG1RydXN0Q29yIFN5c3RlbXMgUy4gZGUgUi5MLjEnMCUG
+-A1UECwweVHJ1c3RDb3IgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MR8wHQYDVQQDDBZU
+-cnVzdENvciBSb290Q2VydCBDQS0xMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
+-CgKCAQEAv463leLCJhJrMxnHQFgKq1mqjQCj/IDHUHuO1CAmujIS2CNUSSUQIpid
+-RtLByZ5OGy4sDjjzGiVoHKZaBeYei0i/mJZ0PmnK6bV4pQa81QBeCQryJ3pS/C3V
+-seq0iWEk8xoT26nPUu0MJLq5nux+AHT6k61sKZKuUbS701e/s/OojZz0JEsq1pme
+-9J7+wH5COucLlVPat2gOkEz7cD+PSiyU8ybdY2mplNgQTsVHCJCZGxdNuWxu72CV
+-EY4hgLW9oHPY0LJ3xEXqWib7ZnZ2+AYfYW0PVcWDtxBWcgYHpfOxGgMFZA6dWorW
+-hnAbJN7+KIor0Gqw/Hqi3LJ5DotlDwIDAQABo2MwYTAdBgNVHQ4EFgQU7mtJPHo/
+-DeOxCbeKyKsZn3MzUOcwHwYDVR0jBBgwFoAU7mtJPHo/DeOxCbeKyKsZn3MzUOcw
+-DwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwDQYJKoZIhvcNAQELBQAD
+-ggEBACUY1JGPE+6PHh0RU9otRCkZoB5rMZ5NDp6tPVxBb5UrJKF5mDo4Nvu7Zp5I
+-/5CQ7z3UuJu0h3U/IJvOcs+hVcFNZKIZBqEHMwwLKeXx6quj7LUKdJDHfXLy11yf
+-ke+Ri7fc7Waiz45mO7yfOgLgJ90WmMCV1Aqk5IGadZQ1nJBfiDcGrVmVCrDRZ9MZ
+-yonnMlo2HD6CqFqTvsbQZJG2z9m2GM/bftJlo6bEjhcxwft+dtvTheNYsnd6djts
+-L1Ac59v2Z3kf9YKVmgenFK+P3CghZwnS1k1aHBkcjndcw5QkPTJrS37UeJSDvjdN
+-zl/HHk484IkzlQsPpTLWPFp5LBk=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=TrustCor RootCert CA-2 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority
+-# Subject: CN=TrustCor RootCert CA-2 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority
+-# Label: "TrustCor RootCert CA-2"
+-# Serial: 2711694510199101698
+-# MD5 Fingerprint: a2:e1:f8:18:0b:ba:45:d5:c7:41:2a:bb:37:52:45:64
+-# SHA1 Fingerprint: b8:be:6d:cb:56:f1:55:b9:63:d4:12:ca:4e:06:34:c7:94:b2:1c:c0
+-# SHA256 Fingerprint: 07:53:e9:40:37:8c:1b:d5:e3:83:6e:39:5d:ae:a5:cb:83:9e:50:46:f1:bd:0e:ae:19:51:cf:10:fe:c7:c9:65
+------BEGIN CERTIFICATE-----
+-MIIGLzCCBBegAwIBAgIIJaHfyjPLWQIwDQYJKoZIhvcNAQELBQAwgaQxCzAJBgNV
+-BAYTAlBBMQ8wDQYDVQQIDAZQYW5hbWExFDASBgNVBAcMC1BhbmFtYSBDaXR5MSQw
+-IgYDVQQKDBtUcnVzdENvciBTeXN0ZW1zIFMuIGRlIFIuTC4xJzAlBgNVBAsMHlRy
+-dXN0Q29yIENlcnRpZmljYXRlIEF1dGhvcml0eTEfMB0GA1UEAwwWVHJ1c3RDb3Ig
+-Um9vdENlcnQgQ0EtMjAeFw0xNjAyMDQxMjMyMjNaFw0zNDEyMzExNzI2MzlaMIGk
+-MQswCQYDVQQGEwJQQTEPMA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5hbWEg
+-Q2l0eTEkMCIGA1UECgwbVHJ1c3RDb3IgU3lzdGVtcyBTLiBkZSBSLkwuMScwJQYD
+-VQQLDB5UcnVzdENvciBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxHzAdBgNVBAMMFlRy
+-dXN0Q29yIFJvb3RDZXJ0IENBLTIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
+-AoICAQCnIG7CKqJiJJWQdsg4foDSq8GbZQWU9MEKENUCrO2fk8eHyLAnK0IMPQo+
+-QVqedd2NyuCb7GgypGmSaIwLgQ5WoD4a3SwlFIIvl9NkRvRUqdw6VC0xK5mC8tkq
+-1+9xALgxpL56JAfDQiDyitSSBBtlVkxs1Pu2YVpHI7TYabS3OtB0PAx1oYxOdqHp
+-2yqlO/rOsP9+aij9JxzIsekp8VduZLTQwRVtDr4uDkbIXvRR/u8OYzo7cbrPb1nK
+-DOObXUm4TOJXsZiKQlecdu/vvdFoqNL0Cbt3Nb4lggjEFixEIFapRBF37120Hape
+-az6LMvYHL1cEksr1/p3C6eizjkxLAjHZ5DxIgif3GIJ2SDpxsROhOdUuxTTCHWKF
+-3wP+TfSvPd9cW436cOGlfifHhi5qjxLGhF5DUVCcGZt45vz27Ud+ez1m7xMTiF88
+-oWP7+ayHNZ/zgp6kPwqcMWmLmaSISo5uZk3vFsQPeSghYA2FFn3XVDjxklb9tTNM
+-g9zXEJ9L/cb4Qr26fHMC4P99zVvh1Kxhe1fVSntb1IVYJ12/+CtgrKAmrhQhJ8Z3
+-mjOAPF5GP/fDsaOGM8boXg25NSyqRsGFAnWAoOsk+xWq5Gd/bnc/9ASKL3x74xdh
+-8N0JqSDIvgmk0H5Ew7IwSjiqqewYmgeCK9u4nBit2uBGF6zPXQIDAQABo2MwYTAd
+-BgNVHQ4EFgQU2f4hQG6UnrybPZx9mCAZ5YwwYrIwHwYDVR0jBBgwFoAU2f4hQG6U
+-nrybPZx9mCAZ5YwwYrIwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYw
+-DQYJKoZIhvcNAQELBQADggIBAJ5Fngw7tu/hOsh80QA9z+LqBrWyOrsGS2h60COX
+-dKcs8AjYeVrXWoSK2BKaG9l9XE1wxaX5q+WjiYndAfrs3fnpkpfbsEZC89NiqpX+
+-MWcUaViQCqoL7jcjx1BRtPV+nuN79+TMQjItSQzL/0kMmx40/W5ulop5A7Zv2wnL
+-/V9lFDfhOPXzYRZY5LVtDQsEGz9QLX+zx3oaFoBg+Iof6Rsqxvm6ARppv9JYx1RX
+-CI/hOWB3S6xZhBqI8d3LT3jX5+EzLfzuQfogsL7L9ziUwOHQhQ+77Sxzq+3+knYa
+-ZH9bDTMJBzN7Bj8RpFxwPIXAz+OQqIN3+tvmxYxoZxBnpVIt8MSZj3+/0WvitUfW
+-2dCFmU2Umw9Lje4AWkcdEQOsQRivh7dvDDqPys/cA8GiCcjl/YBeyGBCARsaU1q7
+-N6a3vLqE6R5sGtRk2tRD/pOLS/IseRYQ1JMLiI+h2IYURpFHmygk71dSTlxCnKr3
+-Sewn6EAes6aJInKc9Q0ztFijMDvd1GpUk74aTfOTlPf8hAs/hCBcNANExdqtvArB
+-As8e5ZTZ845b2EzwnexhF7sUMlQMAimTHpKG9n/v55IFDlndmQguLvqcAFLTxWYp
+-5KeXRKQOKIETNcX2b2TmQcTVL8w0RSXPQQCWPUouwpaYT05KnJe32x+SMsj/D1Fu
+-1uwJ
+------END CERTIFICATE-----
+-
+-# Issuer: CN=TrustCor ECA-1 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority
+-# Subject: CN=TrustCor ECA-1 O=TrustCor Systems S. de R.L. OU=TrustCor Certificate Authority
+-# Label: "TrustCor ECA-1"
+-# Serial: 9548242946988625984
+-# MD5 Fingerprint: 27:92:23:1d:0a:f5:40:7c:e9:e6:6b:9d:d8:f5:e7:6c
+-# SHA1 Fingerprint: 58:d1:df:95:95:67:6b:63:c0:f0:5b:1c:17:4d:8b:84:0b:c8:78:bd
+-# SHA256 Fingerprint: 5a:88:5d:b1:9c:01:d9:12:c5:75:93:88:93:8c:af:bb:df:03:1a:b2:d4:8e:91:ee:15:58:9b:42:97:1d:03:9c
+------BEGIN CERTIFICATE-----
+-MIIEIDCCAwigAwIBAgIJAISCLF8cYtBAMA0GCSqGSIb3DQEBCwUAMIGcMQswCQYD
+-VQQGEwJQQTEPMA0GA1UECAwGUGFuYW1hMRQwEgYDVQQHDAtQYW5hbWEgQ2l0eTEk
+-MCIGA1UECgwbVHJ1c3RDb3IgU3lzdGVtcyBTLiBkZSBSLkwuMScwJQYDVQQLDB5U
+-cnVzdENvciBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxFzAVBgNVBAMMDlRydXN0Q29y
+-IEVDQS0xMB4XDTE2MDIwNDEyMzIzM1oXDTI5MTIzMTE3MjgwN1owgZwxCzAJBgNV
+-BAYTAlBBMQ8wDQYDVQQIDAZQYW5hbWExFDASBgNVBAcMC1BhbmFtYSBDaXR5MSQw
+-IgYDVQQKDBtUcnVzdENvciBTeXN0ZW1zIFMuIGRlIFIuTC4xJzAlBgNVBAsMHlRy
+-dXN0Q29yIENlcnRpZmljYXRlIEF1dGhvcml0eTEXMBUGA1UEAwwOVHJ1c3RDb3Ig
+-RUNBLTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPj+ARtZ+odnbb
+-3w9U73NjKYKtR8aja+3+XzP4Q1HpGjORMRegdMTUpwHmspI+ap3tDvl0mEDTPwOA
+-BoJA6LHip1GnHYMma6ve+heRK9jGrB6xnhkB1Zem6g23xFUfJ3zSCNV2HykVh0A5
+-3ThFEXXQmqc04L/NyFIduUd+Dbi7xgz2c1cWWn5DkR9VOsZtRASqnKmcp0yJF4Ou
+-owReUoCLHhIlERnXDH19MURB6tuvsBzvgdAsxZohmz3tQjtQJvLsznFhBmIhVE5/
+-wZ0+fyCMgMsq2JdiyIMzkX2woloPV+g7zPIlstR8L+xNxqE6FXrntl019fZISjZF
+-ZtS6mFjBAgMBAAGjYzBhMB0GA1UdDgQWBBREnkj1zG1I1KBLf/5ZJC+Dl5mahjAf
+-BgNVHSMEGDAWgBREnkj1zG1I1KBLf/5ZJC+Dl5mahjAPBgNVHRMBAf8EBTADAQH/
+-MA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQsFAAOCAQEABT41XBVwm8nHc2Fv
+-civUwo/yQ10CzsSUuZQRg2dd4mdsdXa/uwyqNsatR5Nj3B5+1t4u/ukZMjgDfxT2
+-AHMsWbEhBuH7rBiVDKP/mZb3Kyeb1STMHd3BOuCYRLDE5D53sXOpZCz2HAF8P11F
+-hcCF5yWPldwX8zyfGm6wyuMdKulMY/okYWLW2n62HGz1Ah3UKt1VkOsqEUc8Ll50
+-soIipX1TH0XsJ5F95yIW6MBoNtjG8U+ARDL54dHRHareqKucBK+tIA5kmE2la8BI
+-WJZpTdwHjFGTot+fDz2LYLSCjaoITmJF4PkL0uDgPFveXHEnJcLmA4GLEFPjx1Wi
+-tJ/X5g==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=SSL.com Root Certification Authority RSA O=SSL Corporation
+-# Subject: CN=SSL.com Root Certification Authority RSA O=SSL Corporation
+-# Label: "SSL.com Root Certification Authority RSA"
+-# Serial: 8875640296558310041
+-# MD5 Fingerprint: 86:69:12:c0:70:f1:ec:ac:ac:c2:d5:bc:a5:5b:a1:29
+-# SHA1 Fingerprint: b7:ab:33:08:d1:ea:44:77:ba:14:80:12:5a:6f:bd:a9:36:49:0c:bb
+-# SHA256 Fingerprint: 85:66:6a:56:2e:e0:be:5c:e9:25:c1:d8:89:0a:6f:76:a8:7e:c1:6d:4d:7d:5f:29:ea:74:19:cf:20:12:3b:69
+------BEGIN CERTIFICATE-----
+-MIIF3TCCA8WgAwIBAgIIeyyb0xaAMpkwDQYJKoZIhvcNAQELBQAwfDELMAkGA1UE
+-BhMCVVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQK
+-DA9TU0wgQ29ycG9yYXRpb24xMTAvBgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZp
+-Y2F0aW9uIEF1dGhvcml0eSBSU0EwHhcNMTYwMjEyMTczOTM5WhcNNDEwMjEyMTcz
+-OTM5WjB8MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hv
+-dXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjExMC8GA1UEAwwoU1NMLmNv
+-bSBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IFJTQTCCAiIwDQYJKoZIhvcN
+-AQEBBQADggIPADCCAgoCggIBAPkP3aMrfcvQKv7sZ4Wm5y4bunfh4/WvpOz6Sl2R
+-xFdHaxh3a3by/ZPkPQ/CFp4LZsNWlJ4Xg4XOVu/yFv0AYvUiCVToZRdOQbngT0aX
+-qhvIuG5iXmmxX9sqAn78bMrzQdjt0Oj8P2FI7bADFB0QDksZ4LtO7IZl/zbzXmcC
+-C52GVWH9ejjt/uIZALdvoVBidXQ8oPrIJZK0bnoix/geoeOy3ZExqysdBP+lSgQ3
+-6YWkMyv94tZVNHwZpEpox7Ko07fKoZOI68GXvIz5HdkihCR0xwQ9aqkpk8zruFvh
+-/l8lqjRYyMEjVJ0bmBHDOJx+PYZspQ9AhnwC9FwCTyjLrnGfDzrIM/4RJTXq/LrF
+-YD3ZfBjVsqnTdXgDciLKOsMf7yzlLqn6niy2UUb9rwPW6mBo6oUWNmuF6R7As93E
+-JNyAKoFBbZQ+yODJgUEAnl6/f8UImKIYLEJAs/lvOCdLToD0PYFH4Ih86hzOtXVc
+-US4cK38acijnALXRdMbX5J+tB5O2UzU1/Dfkw/ZdFr4hc96SCvigY2q8lpJqPvi8
+-ZVWb3vUNiSYE/CUapiVpy8JtynziWV+XrOvvLsi81xtZPCvM8hnIk2snYxnP/Okm
+-+Mpxm3+T/jRnhE6Z6/yzeAkzcLpmpnbtG3PrGqUNxCITIJRWCk4sbE6x/c+cCbqi
+-M+2HAgMBAAGjYzBhMB0GA1UdDgQWBBTdBAkHovV6fVJTEpKV7jiAJQ2mWTAPBgNV
+-HRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFN0ECQei9Xp9UlMSkpXuOIAlDaZZMA4G
+-A1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAIBgRlCn7Jp0cHh5wYfGV
+-cpNxJK1ok1iOMq8bs3AD/CUrdIWQPXhq9LmLpZc7tRiRux6n+UBbkflVma8eEdBc
+-Hadm47GUBwwyOabqG7B52B2ccETjit3E+ZUfijhDPwGFpUenPUayvOUiaPd7nNgs
+-PgohyC0zrL/FgZkxdMF1ccW+sfAjRfSda/wZY52jvATGGAslu1OJD7OAUN5F7kR/
+-q5R4ZJjT9ijdh9hwZXT7DrkT66cPYakylszeu+1jTBi7qUD3oFRuIIhxdRjqerQ0
+-cuAjJ3dctpDqhiVAq+8zD8ufgr6iIPv2tS0a5sKFsXQP+8hlAqRSAUfdSSLBv9jr
+-a6x+3uxjMxW3IwiPxg+NQVrdjsW5j+VFP3jbutIbQLH+cU0/4IGiul607BXgk90I
+-H37hVZkLId6Tngr75qNJvTYw/ud3sqB1l7UtgYgXZSD32pAAn8lSzDLKNXz1PQ/Y
+-K9f1JmzJBjSWFupwWRoyeXkLtoh/D1JIPb9s2KJELtFOt3JY04kTlf5Eq/jXixtu
+-nLwsoFvVagCvXzfh1foQC5ichucmj87w7G6KVwuA406ywKBjYZC6VWg3dGq2ktuf
+-oYYitmUnDuy2n0Jg5GfCtdpBC8TTi2EbvPofkSvXRAdeuims2cXp71NIWuuA8ShY
+-Ic2wBlX7Jz9TkHCpBB5XJ7k=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=SSL.com Root Certification Authority ECC O=SSL Corporation
+-# Subject: CN=SSL.com Root Certification Authority ECC O=SSL Corporation
+-# Label: "SSL.com Root Certification Authority ECC"
+-# Serial: 8495723813297216424
+-# MD5 Fingerprint: 2e:da:e4:39:7f:9c:8f:37:d1:70:9f:26:17:51:3a:8e
+-# SHA1 Fingerprint: c3:19:7c:39:24:e6:54:af:1b:c4:ab:20:95:7a:e2:c3:0e:13:02:6a
+-# SHA256 Fingerprint: 34:17:bb:06:cc:60:07:da:1b:96:1c:92:0b:8a:b4:ce:3f:ad:82:0e:4a:a3:0b:9a:cb:c4:a7:4e:bd:ce:bc:65
+------BEGIN CERTIFICATE-----
+-MIICjTCCAhSgAwIBAgIIdebfy8FoW6gwCgYIKoZIzj0EAwIwfDELMAkGA1UEBhMC
+-VVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9T
+-U0wgQ29ycG9yYXRpb24xMTAvBgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZpY2F0
+-aW9uIEF1dGhvcml0eSBFQ0MwHhcNMTYwMjEyMTgxNDAzWhcNNDEwMjEyMTgxNDAz
+-WjB8MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0
+-b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjExMC8GA1UEAwwoU1NMLmNvbSBS
+-b290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IEVDQzB2MBAGByqGSM49AgEGBSuB
+-BAAiA2IABEVuqVDEpiM2nl8ojRfLliJkP9x6jh3MCLOicSS6jkm5BBtHllirLZXI
+-7Z4INcgn64mMU1jrYor+8FsPazFSY0E7ic3s7LaNGdM0B9y7xgZ/wkWV7Mt/qCPg
+-CemB+vNH06NjMGEwHQYDVR0OBBYEFILRhXMw5zUE044CkvvlpNHEIejNMA8GA1Ud
+-EwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUgtGFczDnNQTTjgKS++Wk0cQh6M0wDgYD
+-VR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA2cAMGQCMG/n61kRpGDPYbCWe+0F+S8T
+-kdzt5fxQaxFGRrMcIQBiu77D5+jNB5n5DQtdcj7EqgIwH7y6C+IwJPt8bYBVCpk+
+-gA0z5Wajs6O7pdWLjwkspl1+4vAHCGht0nxpbl/f5Wpl
+------END CERTIFICATE-----
+-
+-# Issuer: CN=SSL.com EV Root Certification Authority RSA R2 O=SSL Corporation
+-# Subject: CN=SSL.com EV Root Certification Authority RSA R2 O=SSL Corporation
+-# Label: "SSL.com EV Root Certification Authority RSA R2"
+-# Serial: 6248227494352943350
+-# MD5 Fingerprint: e1:1e:31:58:1a:ae:54:53:02:f6:17:6a:11:7b:4d:95
+-# SHA1 Fingerprint: 74:3a:f0:52:9b:d0:32:a0:f4:4a:83:cd:d4:ba:a9:7b:7c:2e:c4:9a
+-# SHA256 Fingerprint: 2e:7b:f1:6c:c2:24:85:a7:bb:e2:aa:86:96:75:07:61:b0:ae:39:be:3b:2f:e9:d0:cc:6d:4e:f7:34:91:42:5c
+------BEGIN CERTIFICATE-----
+-MIIF6zCCA9OgAwIBAgIIVrYpzTS8ePYwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNV
+-BAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjEYMBYGA1UE
+-CgwPU1NMIENvcnBvcmF0aW9uMTcwNQYDVQQDDC5TU0wuY29tIEVWIFJvb3QgQ2Vy
+-dGlmaWNhdGlvbiBBdXRob3JpdHkgUlNBIFIyMB4XDTE3MDUzMTE4MTQzN1oXDTQy
+-MDUzMDE4MTQzN1owgYIxCzAJBgNVBAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4G
+-A1UEBwwHSG91c3RvbjEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMTcwNQYDVQQD
+-DC5TU0wuY29tIEVWIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgUlNBIFIy
+-MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAjzZlQOHWTcDXtOlG2mvq
+-M0fNTPl9fb69LT3w23jhhqXZuglXaO1XPqDQCEGD5yhBJB/jchXQARr7XnAjssuf
+-OePPxU7Gkm0mxnu7s9onnQqG6YE3Bf7wcXHswxzpY6IXFJ3vG2fThVUCAtZJycxa
+-4bH3bzKfydQ7iEGonL3Lq9ttewkfokxykNorCPzPPFTOZw+oz12WGQvE43LrrdF9
+-HSfvkusQv1vrO6/PgN3B0pYEW3p+pKk8OHakYo6gOV7qd89dAFmPZiw+B6KjBSYR
+-aZfqhbcPlgtLyEDhULouisv3D5oi53+aNxPN8k0TayHRwMwi8qFG9kRpnMphNQcA
+-b9ZhCBHqurj26bNg5U257J8UZslXWNvNh2n4ioYSA0e/ZhN2rHd9NCSFg83XqpyQ
+-Gp8hLH94t2S42Oim9HizVcuE0jLEeK6jj2HdzghTreyI/BXkmg3mnxp3zkyPuBQV
+-PWKchjgGAGYS5Fl2WlPAApiiECtoRHuOec4zSnaqW4EWG7WK2NAAe15itAnWhmMO
+-pgWVSbooi4iTsjQc2KRVbrcc0N6ZVTsj9CLg+SlmJuwgUHfbSguPvuUCYHBBXtSu
+-UDkiFCbLsjtzdFVHB3mBOagwE0TlBIqulhMlQg+5U8Sb/M3kHN48+qvWBkofZ6aY
+-MBzdLNvcGJVXZsb/XItW9XcCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAfBgNV
+-HSMEGDAWgBT5YLvU49U09rj1BoAlp3PbRmmonjAdBgNVHQ4EFgQU+WC71OPVNPa4
+-9QaAJadz20ZpqJ4wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQBW
+-s47LCp1Jjr+kxJG7ZhcFUZh1++VQLHqe8RT6q9OKPv+RKY9ji9i0qVQBDb6Thi/5
+-Sm3HXvVX+cpVHBK+Rw82xd9qt9t1wkclf7nxY/hoLVUE0fKNsKTPvDxeH3jnpaAg
+-cLAExbf3cqfeIg29MyVGjGSSJuM+LmOW2puMPfgYCdcDzH2GguDKBAdRUNf/ktUM
+-79qGn5nX67evaOI5JpS6aLe/g9Pqemc9YmeuJeVy6OLk7K4S9ksrPJ/psEDzOFSz
+-/bdoyNrGj1E8svuR3Bznm53htw1yj+KkxKl4+esUrMZDBcJlOSgYAsOCsp0FvmXt
+-ll9ldDz7CTUue5wT/RsPXcdtgTpWD8w74a8CLyKsRspGPKAcTNZEtF4uXBVmCeEm
+-Kf7GUmG6sXP/wwyc5WxqlD8UykAWlYTzWamsX0xhk23RO8yilQwipmdnRC652dKK
+-QbNmC1r7fSOl8hqw/96bg5Qu0T/fkreRrwU7ZcegbLHNYhLDkBvjJc40vG93drEQ
+-w/cFGsDWr3RiSBd3kmmQYRzelYB0VI8YHMPzA9C/pEN1hlMYegouCRw2n5H9gooi
+-S9EOUCXdywMMF8mDAAhONU2Ki+3wApRmLER/y5UnlhetCTCstnEXbosX9hwJ1C07
+-mKVx01QT2WDz9UtmT/rx7iASjbSsV7FFY6GsdqnC+w==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=SSL.com EV Root Certification Authority ECC O=SSL Corporation
+-# Subject: CN=SSL.com EV Root Certification Authority ECC O=SSL Corporation
+-# Label: "SSL.com EV Root Certification Authority ECC"
+-# Serial: 3182246526754555285
+-# MD5 Fingerprint: 59:53:22:65:83:42:01:54:c0:ce:42:b9:5a:7c:f2:90
+-# SHA1 Fingerprint: 4c:dd:51:a3:d1:f5:20:32:14:b0:c6:c5:32:23:03:91:c7:46:42:6d
+-# SHA256 Fingerprint: 22:a2:c1:f7:bd:ed:70:4c:c1:e7:01:b5:f4:08:c3:10:88:0f:e9:56:b5:de:2a:4a:44:f9:9c:87:3a:25:a7:c8
+------BEGIN CERTIFICATE-----
+-MIIClDCCAhqgAwIBAgIILCmcWxbtBZUwCgYIKoZIzj0EAwIwfzELMAkGA1UEBhMC
+-VVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9T
+-U0wgQ29ycG9yYXRpb24xNDAyBgNVBAMMK1NTTC5jb20gRVYgUm9vdCBDZXJ0aWZp
+-Y2F0aW9uIEF1dGhvcml0eSBFQ0MwHhcNMTYwMjEyMTgxNTIzWhcNNDEwMjEyMTgx
+-NTIzWjB/MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hv
+-dXN0b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjE0MDIGA1UEAwwrU1NMLmNv
+-bSBFViBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IEVDQzB2MBAGByqGSM49
+-AgEGBSuBBAAiA2IABKoSR5CYG/vvw0AHgyBO8TCCogbR8pKGYfL2IWjKAMTH6kMA
+-VIbc/R/fALhBYlzccBYy3h+Z1MzFB8gIH2EWB1E9fVwHU+M1OIzfzZ/ZLg1Kthku
+-WnBaBu2+8KGwytAJKaNjMGEwHQYDVR0OBBYEFFvKXuXe0oGqzagtZFG22XKbl+ZP
+-MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUW8pe5d7SgarNqC1kUbbZcpuX
+-5k8wDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA2gAMGUCMQCK5kCJN+vp1RPZ
+-ytRrJPOwPYdGWBrssd9v+1a6cGvHOMzosYxPD/fxZ3YOg9AeUY8CMD32IygmTMZg
+-h5Mmm7I1HrrW9zzRHM76JTymGoEVW/MSD2zuZYrJh6j5B+BimoxcSg==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R6
+-# Subject: CN=GlobalSign O=GlobalSign OU=GlobalSign Root CA - R6
+-# Label: "GlobalSign Root CA - R6"
+-# Serial: 1417766617973444989252670301619537
+-# MD5 Fingerprint: 4f:dd:07:e4:d4:22:64:39:1e:0c:37:42:ea:d1:c6:ae
+-# SHA1 Fingerprint: 80:94:64:0e:b5:a7:a1:ca:11:9c:1f:dd:d5:9f:81:02:63:a7:fb:d1
+-# SHA256 Fingerprint: 2c:ab:ea:fe:37:d0:6c:a2:2a:ba:73:91:c0:03:3d:25:98:29:52:c4:53:64:73:49:76:3a:3a:b5:ad:6c:cf:69
+------BEGIN CERTIFICATE-----
+-MIIFgzCCA2ugAwIBAgIORea7A4Mzw4VlSOb/RVEwDQYJKoZIhvcNAQEMBQAwTDEg
+-MB4GA1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjYxEzARBgNVBAoTCkdsb2Jh
+-bFNpZ24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMTQxMjEwMDAwMDAwWhcNMzQx
+-MjEwMDAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSNjET
+-MBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjCCAiIwDQYJ
+-KoZIhvcNAQEBBQADggIPADCCAgoCggIBAJUH6HPKZvnsFMp7PPcNCPG0RQssgrRI
+-xutbPK6DuEGSMxSkb3/pKszGsIhrxbaJ0cay/xTOURQh7ErdG1rG1ofuTToVBu1k
+-ZguSgMpE3nOUTvOniX9PeGMIyBJQbUJmL025eShNUhqKGoC3GYEOfsSKvGRMIRxD
+-aNc9PIrFsmbVkJq3MQbFvuJtMgamHvm566qjuL++gmNQ0PAYid/kD3n16qIfKtJw
+-LnvnvJO7bVPiSHyMEAc4/2ayd2F+4OqMPKq0pPbzlUoSB239jLKJz9CgYXfIWHSw
+-1CM69106yqLbnQneXUQtkPGBzVeS+n68UARjNN9rkxi+azayOeSsJDa38O+2HBNX
+-k7besvjihbdzorg1qkXy4J02oW9UivFyVm4uiMVRQkQVlO6jxTiWm05OWgtH8wY2
+-SXcwvHE35absIQh1/OZhFj931dmRl4QKbNQCTXTAFO39OfuD8l4UoQSwC+n+7o/h
+-bguyCLNhZglqsQY6ZZZZwPA1/cnaKI0aEYdwgQqomnUdnjqGBQCe24DWJfncBZ4n
+-WUx2OVvq+aWh2IMP0f/fMBH5hc8zSPXKbWQULHpYT9NLCEnFlWQaYw55PfWzjMpY
+-rZxCRXluDocZXFSxZba/jJvcE+kNb7gu3GduyYsRtYQUigAZcIN5kZeR1Bonvzce
+-MgfYFGM8KEyvAgMBAAGjYzBhMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTAD
+-AQH/MB0GA1UdDgQWBBSubAWjkxPioufi1xzWx/B/yGdToDAfBgNVHSMEGDAWgBSu
+-bAWjkxPioufi1xzWx/B/yGdToDANBgkqhkiG9w0BAQwFAAOCAgEAgyXt6NH9lVLN
+-nsAEoJFp5lzQhN7craJP6Ed41mWYqVuoPId8AorRbrcWc+ZfwFSY1XS+wc3iEZGt
+-Ixg93eFyRJa0lV7Ae46ZeBZDE1ZXs6KzO7V33EByrKPrmzU+sQghoefEQzd5Mr61
+-55wsTLxDKZmOMNOsIeDjHfrYBzN2VAAiKrlNIC5waNrlU/yDXNOd8v9EDERm8tLj
+-vUYAGm0CuiVdjaExUd1URhxN25mW7xocBFymFe944Hn+Xds+qkxV/ZoVqW/hpvvf
+-cDDpw+5CRu3CkwWJ+n1jez/QcYF8AOiYrg54NMMl+68KnyBr3TsTjxKM4kEaSHpz
+-oHdpx7Zcf4LIHv5YGygrqGytXm3ABdJ7t+uA/iU3/gKbaKxCXcPu9czc8FB10jZp
+-nOZ7BN9uBmm23goJSFmH63sUYHpkqmlD75HHTOwY3WzvUy2MmeFe8nI+z1TIvWfs
+-pA9MRf/TuTAjB0yPEL+GltmZWrSZVxykzLsViVO6LAUP5MSeGbEYNNVMnbrt9x+v
+-JJUEeKgDu+6B5dpffItKoZB0JaezPkvILFa9x8jvOOJckvB595yEunQtYQEgfn7R
+-8k8HWV+LLUNS60YMlOH1Zkd5d9VUWx+tJDfLRVpOoERIyNiwmcUVhAn21klJwGW4
+-5hpxbqCo8YLoRT5s1gLXCmeDBVrJpBA=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=OISTE WISeKey Global Root GC CA O=WISeKey OU=OISTE Foundation Endorsed
+-# Subject: CN=OISTE WISeKey Global Root GC CA O=WISeKey OU=OISTE Foundation Endorsed
+-# Label: "OISTE WISeKey Global Root GC CA"
+-# Serial: 44084345621038548146064804565436152554
+-# MD5 Fingerprint: a9:d6:b9:2d:2f:93:64:f8:a5:69:ca:91:e9:68:07:23
+-# SHA1 Fingerprint: e0:11:84:5e:34:de:be:88:81:b9:9c:f6:16:26:d1:96:1f:c3:b9:31
+-# SHA256 Fingerprint: 85:60:f9:1c:36:24:da:ba:95:70:b5:fe:a0:db:e3:6f:f1:1a:83:23:be:94:86:85:4f:b3:f3:4a:55:71:19:8d
+------BEGIN CERTIFICATE-----
+-MIICaTCCAe+gAwIBAgIQISpWDK7aDKtARb8roi066jAKBggqhkjOPQQDAzBtMQsw
+-CQYDVQQGEwJDSDEQMA4GA1UEChMHV0lTZUtleTEiMCAGA1UECxMZT0lTVEUgRm91
+-bmRhdGlvbiBFbmRvcnNlZDEoMCYGA1UEAxMfT0lTVEUgV0lTZUtleSBHbG9iYWwg
+-Um9vdCBHQyBDQTAeFw0xNzA1MDkwOTQ4MzRaFw00MjA1MDkwOTU4MzNaMG0xCzAJ
+-BgNVBAYTAkNIMRAwDgYDVQQKEwdXSVNlS2V5MSIwIAYDVQQLExlPSVNURSBGb3Vu
+-ZGF0aW9uIEVuZG9yc2VkMSgwJgYDVQQDEx9PSVNURSBXSVNlS2V5IEdsb2JhbCBS
+-b290IEdDIENBMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAETOlQwMYPchi82PG6s4ni
+-eUqjFqdrVCTbUf/q9Akkwwsin8tqJ4KBDdLArzHkdIJuyiXZjHWd8dvQmqJLIX4W
+-p2OQ0jnUsYd4XxiWD1AbNTcPasbc2RNNpI6QN+a9WzGRo1QwUjAOBgNVHQ8BAf8E
+-BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUSIcUrOPDnpBgOtfKie7T
+-rYy0UGYwEAYJKwYBBAGCNxUBBAMCAQAwCgYIKoZIzj0EAwMDaAAwZQIwJsdpW9zV
+-57LnyAyMjMPdeYwbY9XJUpROTYJKcx6ygISpJcBMWm1JKWB4E+J+SOtkAjEA2zQg
+-Mgj/mkkCtojeFK9dbJlxjRo/i9fgojaGHAeCOnZT/cKi7e97sIBPWA9LUzm9
+------END CERTIFICATE-----
+-
+-# Issuer: CN=GTS Root R1 O=Google Trust Services LLC
+-# Subject: CN=GTS Root R1 O=Google Trust Services LLC
+-# Label: "GTS Root R1"
+-# Serial: 146587175971765017618439757810265552097
+-# MD5 Fingerprint: 82:1a:ef:d4:d2:4a:f2:9f:e2:3d:97:06:14:70:72:85
+-# SHA1 Fingerprint: e1:c9:50:e6:ef:22:f8:4c:56:45:72:8b:92:20:60:d7:d5:a7:a3:e8
+-# SHA256 Fingerprint: 2a:57:54:71:e3:13:40:bc:21:58:1c:bd:2c:f1:3e:15:84:63:20:3e:ce:94:bc:f9:d3:cc:19:6b:f0:9a:54:72
+------BEGIN CERTIFICATE-----
+-MIIFWjCCA0KgAwIBAgIQbkepxUtHDA3sM9CJuRz04TANBgkqhkiG9w0BAQwFADBH
+-MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
+-QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIy
+-MDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNl
+-cnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwggIiMA0GCSqGSIb3DQEB
+-AQUAA4ICDwAwggIKAoICAQC2EQKLHuOhd5s73L+UPreVp0A8of2C+X0yBoJx9vaM
+-f/vo27xqLpeXo4xL+Sv2sfnOhB2x+cWX3u+58qPpvBKJXqeqUqv4IyfLpLGcY9vX
+-mX7wCl7raKb0xlpHDU0QM+NOsROjyBhsS+z8CZDfnWQpJSMHobTSPS5g4M/SCYe7
+-zUjwTcLCeoiKu7rPWRnWr4+wB7CeMfGCwcDfLqZtbBkOtdh+JhpFAz2weaSUKK0P
+-fyblqAj+lug8aJRT7oM6iCsVlgmy4HqMLnXWnOunVmSPlk9orj2XwoSPwLxAwAtc
+-vfaHszVsrBhQf4TgTM2S0yDpM7xSma8ytSmzJSq0SPly4cpk9+aCEI3oncKKiPo4
+-Zor8Y/kB+Xj9e1x3+naH+uzfsQ55lVe0vSbv1gHR6xYKu44LtcXFilWr06zqkUsp
+-zBmkMiVOKvFlRNACzqrOSbTqn3yDsEB750Orp2yjj32JgfpMpf/VjsPOS+C12LOO
+-Rc92wO1AK/1TD7Cn1TsNsYqiA94xrcx36m97PtbfkSIS5r762DL8EGMUUXLeXdYW
+-k70paDPvOmbsB4om3xPXV2V4J95eSRQAogB/mqghtqmxlbCluQ0WEdrHbEg8QOB+
+-DVrNVjzRlwW5y0vtOUucxD/SVRNuJLDWcfr0wbrM7Rv1/oFB2ACYPTrIrnqYNxgF
+-lQIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV
+-HQ4EFgQU5K8rJnEaK0gnhS9SZizv8IkTcT4wDQYJKoZIhvcNAQEMBQADggIBADiW
+-Cu49tJYeX++dnAsznyvgyv3SjgofQXSlfKqE1OXyHuY3UjKcC9FhHb8owbZEKTV1
+-d5iyfNm9dKyKaOOpMQkpAWBz40d8U6iQSifvS9efk+eCNs6aaAyC58/UEBZvXw6Z
+-XPYfcX3v73svfuo21pdwCxXu11xWajOl40k4DLh9+42FpLFZXvRq4d2h9mREruZR
+-gyFmxhE+885H7pwoHyXa/6xmld01D1zvICxi/ZG6qcz8WpyTgYMpl0p8WnK0OdC3
+-d8t5/Wk6kjftbjhlRn7pYL15iJdfOBL07q9bgsiG1eGZbYwE8na6SfZu6W0eX6Dv
+-J4J2QPim01hcDyxC2kLGe4g0x8HYRZvBPsVhHdljUEn2NIVq4BjFbkerQUIpm/Zg
+-DdIx02OYI5NaAIFItO/Nis3Jz5nu2Z6qNuFoS3FJFDYoOj0dzpqPJeaAcWErtXvM
+-+SUWgeExX6GjfhaknBZqlxi9dnKlC54dNuYvoS++cJEPqOba+MSSQGwlfnuzCdyy
+-F62ARPBopY+Udf90WuioAnwMCeKpSwughQtiue+hMZL77/ZRBIls6Kl0obsXs7X9
+-SQ98POyDGCBDTtWTurQ0sR8WNh8M5mQ5Fkzc4P4dyKliPUDqysU0ArSuiYgzNdws
+-E3PYJ/HQcu51OyLemGhmW/HGY0dVHLqlCFF1pkgl
+------END CERTIFICATE-----
+-
+-# Issuer: CN=GTS Root R2 O=Google Trust Services LLC
+-# Subject: CN=GTS Root R2 O=Google Trust Services LLC
+-# Label: "GTS Root R2"
+-# Serial: 146587176055767053814479386953112547951
+-# MD5 Fingerprint: 44:ed:9a:0e:a4:09:3b:00:f2:ae:4c:a3:c6:61:b0:8b
+-# SHA1 Fingerprint: d2:73:96:2a:2a:5e:39:9f:73:3f:e1:c7:1e:64:3f:03:38:34:fc:4d
+-# SHA256 Fingerprint: c4:5d:7b:b0:8e:6d:67:e6:2e:42:35:11:0b:56:4e:5f:78:fd:92:ef:05:8c:84:0a:ea:4e:64:55:d7:58:5c:60
+------BEGIN CERTIFICATE-----
+-MIIFWjCCA0KgAwIBAgIQbkepxlqz5yDFMJo/aFLybzANBgkqhkiG9w0BAQwFADBH
+-MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
+-QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjIwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIy
+-MDAwMDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNl
+-cnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjIwggIiMA0GCSqGSIb3DQEB
+-AQUAA4ICDwAwggIKAoICAQDO3v2m++zsFDQ8BwZabFn3GTXd98GdVarTzTukk3Lv
+-CvptnfbwhYBboUhSnznFt+4orO/LdmgUud+tAWyZH8QiHZ/+cnfgLFuv5AS/T3Kg
+-GjSY6Dlo7JUle3ah5mm5hRm9iYz+re026nO8/4Piy33B0s5Ks40FnotJk9/BW9Bu
+-XvAuMC6C/Pq8tBcKSOWIm8Wba96wyrQD8Nr0kLhlZPdcTK3ofmZemde4wj7I0BOd
+-re7kRXuJVfeKH2JShBKzwkCX44ofR5GmdFrS+LFjKBC4swm4VndAoiaYecb+3yXu
+-PuWgf9RhD1FLPD+M2uFwdNjCaKH5wQzpoeJ/u1U8dgbuak7MkogwTZq9TwtImoS1
+-mKPV+3PBV2HdKFZ1E66HjucMUQkQdYhMvI35ezzUIkgfKtzra7tEscszcTJGr61K
+-8YzodDqs5xoic4DSMPclQsciOzsSrZYuxsN2B6ogtzVJV+mSSeh2FnIxZyuWfoqj
+-x5RWIr9qS34BIbIjMt/kmkRtWVtd9QCgHJvGeJeNkP+byKq0rxFROV7Z+2et1VsR
+-nTKaG73VululycslaVNVJ1zgyjbLiGH7HrfQy+4W+9OmTN6SpdTi3/UGVN4unUu0
+-kzCqgc7dGtxRcw1PcOnlthYhGXmy5okLdWTK1au8CcEYof/UVKGFPP0UJAOyh9Ok
+-twIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV
+-HQ4EFgQUu//KjiOfT5nK2+JopqUVJxce2Q4wDQYJKoZIhvcNAQEMBQADggIBALZp
+-8KZ3/p7uC4Gt4cCpx/k1HUCCq+YEtN/L9x0Pg/B+E02NjO7jMyLDOfxA325BS0JT
+-vhaI8dI4XsRomRyYUpOM52jtG2pzegVATX9lO9ZY8c6DR2Dj/5epnGB3GFW1fgiT
+-z9D2PGcDFWEJ+YF59exTpJ/JjwGLc8R3dtyDovUMSRqodt6Sm2T4syzFJ9MHwAiA
+-pJiS4wGWAqoC7o87xdFtCjMwc3i5T1QWvwsHoaRc5svJXISPD+AVdyx+Jn7axEvb
+-pxZ3B7DNdehyQtaVhJ2Gg/LkkM0JR9SLA3DaWsYDQvTtN6LwG1BUSw7YhN4ZKJmB
+-R64JGz9I0cNv4rBgF/XuIwKl2gBbbZCr7qLpGzvpx0QnRY5rn/WkhLx3+WuXrD5R
+-RaIRpsyF7gpo8j5QOHokYh4XIDdtak23CZvJ/KRY9bb7nE4Yu5UC56GtmwfuNmsk
+-0jmGwZODUNKBRqhfYlcsu2xkiAhu7xNUX90txGdj08+JN7+dIPT7eoOboB6BAFDC
+-5AwiWVIQ7UNWhwD4FFKnHYuTjKJNRn8nxnGbJN7k2oaLDX5rIMHAnuFl2GqjpuiF
+-izoHCBy69Y9Vmhh1fuXsgWbRIXOhNUQLgD1bnF5vKheW0YMjiGZt5obicDIvUiLn
+-yOd/xCxgXS/Dr55FBcOEArf9LAhST4Ldo/DUhgkC
+------END CERTIFICATE-----
+-
+-# Issuer: CN=GTS Root R3 O=Google Trust Services LLC
+-# Subject: CN=GTS Root R3 O=Google Trust Services LLC
+-# Label: "GTS Root R3"
+-# Serial: 146587176140553309517047991083707763997
+-# MD5 Fingerprint: 1a:79:5b:6b:04:52:9c:5d:c7:74:33:1b:25:9a:f9:25
+-# SHA1 Fingerprint: 30:d4:24:6f:07:ff:db:91:89:8a:0b:e9:49:66:11:eb:8c:5e:46:e5
+-# SHA256 Fingerprint: 15:d5:b8:77:46:19:ea:7d:54:ce:1c:a6:d0:b0:c4:03:e0:37:a9:17:f1:31:e8:a0:4e:1e:6b:7a:71:ba:bc:e5
+------BEGIN CERTIFICATE-----
+-MIICDDCCAZGgAwIBAgIQbkepx2ypcyRAiQ8DVd2NHTAKBggqhkjOPQQDAzBHMQsw
+-CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU
+-MBIGA1UEAxMLR1RTIFJvb3QgUjMwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAw
+-MDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp
+-Y2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjMwdjAQBgcqhkjOPQIBBgUrgQQA
+-IgNiAAQfTzOHMymKoYTey8chWEGJ6ladK0uFxh1MJ7x/JlFyb+Kf1qPKzEUURout
+-736GjOyxfi//qXGdGIRFBEFVbivqJn+7kAHjSxm65FSWRQmx1WyRRK2EE46ajA2A
+-DDL24CejQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud
+-DgQWBBTB8Sa6oC2uhYHP0/EqEr24Cmf9vDAKBggqhkjOPQQDAwNpADBmAjEAgFuk
+-fCPAlaUs3L6JbyO5o91lAFJekazInXJ0glMLfalAvWhgxeG4VDvBNhcl2MG9AjEA
+-njWSdIUlUfUk7GRSJFClH9voy8l27OyCbvWFGFPouOOaKaqW04MjyaR7YbPMAuhd
+------END CERTIFICATE-----
+-
+-# Issuer: CN=GTS Root R4 O=Google Trust Services LLC
+-# Subject: CN=GTS Root R4 O=Google Trust Services LLC
+-# Label: "GTS Root R4"
+-# Serial: 146587176229350439916519468929765261721
+-# MD5 Fingerprint: 5d:b6:6a:c4:60:17:24:6a:1a:99:a8:4b:ee:5e:b4:26
+-# SHA1 Fingerprint: 2a:1d:60:27:d9:4a:b1:0a:1c:4d:91:5c:cd:33:a0:cb:3e:2d:54:cb
+-# SHA256 Fingerprint: 71:cc:a5:39:1f:9e:79:4b:04:80:25:30:b3:63:e1:21:da:8a:30:43:bb:26:66:2f:ea:4d:ca:7f:c9:51:a4:bd
+------BEGIN CERTIFICATE-----
+-MIICCjCCAZGgAwIBAgIQbkepyIuUtui7OyrYorLBmTAKBggqhkjOPQQDAzBHMQsw
+-CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU
+-MBIGA1UEAxMLR1RTIFJvb3QgUjQwHhcNMTYwNjIyMDAwMDAwWhcNMzYwNjIyMDAw
+-MDAwWjBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZp
+-Y2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjQwdjAQBgcqhkjOPQIBBgUrgQQA
+-IgNiAATzdHOnaItgrkO4NcWBMHtLSZ37wWHO5t5GvWvVYRg1rkDdc/eJkTBa6zzu
+-hXyiQHY7qca4R9gq55KRanPpsXI5nymfopjTX15YhmUPoYRlBtHci8nHc8iMai/l
+-xKvRHYqjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud
+-DgQWBBSATNbrdP9JNqPV2Py1PsVq8JQdjDAKBggqhkjOPQQDAwNnADBkAjBqUFJ0
+-CMRw3J5QdCHojXohw0+WbhXRIjVhLfoIN+4Zba3bssx9BzT1YBkstTTZbyACMANx
+-sbqjYAuG7ZoIapVon+Kz4ZNkfF6Tpt95LY2F45TPI11xzPKwTdb+mciUqXWi4w==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=UCA Global G2 Root O=UniTrust
+-# Subject: CN=UCA Global G2 Root O=UniTrust
+-# Label: "UCA Global G2 Root"
+-# Serial: 124779693093741543919145257850076631279
+-# MD5 Fingerprint: 80:fe:f0:c4:4a:f0:5c:62:32:9f:1c:ba:78:a9:50:f8
+-# SHA1 Fingerprint: 28:f9:78:16:19:7a:ff:18:25:18:aa:44:fe:c1:a0:ce:5c:b6:4c:8a
+-# SHA256 Fingerprint: 9b:ea:11:c9:76:fe:01:47:64:c1:be:56:a6:f9:14:b5:a5:60:31:7a:bd:99:88:39:33:82:e5:16:1a:a0:49:3c
+------BEGIN CERTIFICATE-----
+-MIIFRjCCAy6gAwIBAgIQXd+x2lqj7V2+WmUgZQOQ7zANBgkqhkiG9w0BAQsFADA9
+-MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxGzAZBgNVBAMMElVDQSBH
+-bG9iYWwgRzIgUm9vdDAeFw0xNjAzMTEwMDAwMDBaFw00MDEyMzEwMDAwMDBaMD0x
+-CzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDEbMBkGA1UEAwwSVUNBIEds
+-b2JhbCBHMiBSb290MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxeYr
+-b3zvJgUno4Ek2m/LAfmZmqkywiKHYUGRO8vDaBsGxUypK8FnFyIdK+35KYmToni9
+-kmugow2ifsqTs6bRjDXVdfkX9s9FxeV67HeToI8jrg4aA3++1NDtLnurRiNb/yzm
+-VHqUwCoV8MmNsHo7JOHXaOIxPAYzRrZUEaalLyJUKlgNAQLx+hVRZ2zA+te2G3/R
+-VogvGjqNO7uCEeBHANBSh6v7hn4PJGtAnTRnvI3HLYZveT6OqTwXS3+wmeOwcWDc
+-C/Vkw85DvG1xudLeJ1uK6NjGruFZfc8oLTW4lVYa8bJYS7cSN8h8s+1LgOGN+jIj
+-tm+3SJUIsUROhYw6AlQgL9+/V087OpAh18EmNVQg7Mc/R+zvWr9LesGtOxdQXGLY
+-D0tK3Cv6brxzks3sx1DoQZbXqX5t2Okdj4q1uViSukqSKwxW/YDrCPBeKW4bHAyv
+-j5OJrdu9o54hyokZ7N+1wxrrFv54NkzWbtA+FxyQF2smuvt6L78RHBgOLXMDj6Dl
+-NaBa4kx1HXHhOThTeEDMg5PXCp6dW4+K5OXgSORIskfNTip1KnvyIvbJvgmRlld6
+-iIis7nCs+dwp4wwcOxJORNanTrAmyPPZGpeRaOrvjUYG0lZFWJo8DA+DuAUlwznP
+-O6Q0ibd5Ei9Hxeepl2n8pndntd978XplFeRhVmUCAwEAAaNCMEAwDgYDVR0PAQH/
+-BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFIHEjMz15DD/pQwIX4wV
+-ZyF0Ad/fMA0GCSqGSIb3DQEBCwUAA4ICAQATZSL1jiutROTL/7lo5sOASD0Ee/oj
+-L3rtNtqyzm325p7lX1iPyzcyochltq44PTUbPrw7tgTQvPlJ9Zv3hcU2tsu8+Mg5
+-1eRfB70VVJd0ysrtT7q6ZHafgbiERUlMjW+i67HM0cOU2kTC5uLqGOiiHycFutfl
+-1qnN3e92mI0ADs0b+gO3joBYDic/UvuUospeZcnWhNq5NXHzJsBPd+aBJ9J3O5oU
+-b3n09tDh05S60FdRvScFDcH9yBIw7m+NESsIndTUv4BFFJqIRNow6rSn4+7vW4LV
+-PtateJLbXDzz2K36uGt/xDYotgIVilQsnLAXc47QN6MUPJiVAAwpBVueSUmxX8fj
+-y88nZY41F7dXyDDZQVu5FLbowg+UMaeUmMxq67XhJ/UQqAHojhJi6IjMtX9Gl8Cb
+-EGY4GjZGXyJoPd/JxhMnq1MGrKI8hgZlb7F+sSlEmqO6SWkoaY/X5V+tBIZkbxqg
+-DMUIYs6Ao9Dz7GjevjPHF1t/gMRMTLGmhIrDO7gJzRSBuhjjVFc2/tsvfEehOjPI
+-+Vg7RE+xygKJBJYoaMVLuCaJu9YzL1DV/pqJuhgyklTGW+Cd+V7lDSKb9triyCGy
+-YiGqhkCyLmTTX8jjfhFnRR8F/uOi77Oos/N9j/gMHyIfLXC0uAE0djAA5SN4p1bX
+-UB+K+wb1whnw0A==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=UCA Extended Validation Root O=UniTrust
+-# Subject: CN=UCA Extended Validation Root O=UniTrust
+-# Label: "UCA Extended Validation Root"
+-# Serial: 106100277556486529736699587978573607008
+-# MD5 Fingerprint: a1:f3:5f:43:c6:34:9b:da:bf:8c:7e:05:53:ad:96:e2
+-# SHA1 Fingerprint: a3:a1:b0:6f:24:61:23:4a:e3:36:a5:c2:37:fc:a6:ff:dd:f0:d7:3a
+-# SHA256 Fingerprint: d4:3a:f9:b3:54:73:75:5c:96:84:fc:06:d7:d8:cb:70:ee:5c:28:e7:73:fb:29:4e:b4:1e:e7:17:22:92:4d:24
+------BEGIN CERTIFICATE-----
+-MIIFWjCCA0KgAwIBAgIQT9Irj/VkyDOeTzRYZiNwYDANBgkqhkiG9w0BAQsFADBH
+-MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxJTAjBgNVBAMMHFVDQSBF
+-eHRlbmRlZCBWYWxpZGF0aW9uIFJvb3QwHhcNMTUwMzEzMDAwMDAwWhcNMzgxMjMx
+-MDAwMDAwWjBHMQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxJTAjBgNV
+-BAMMHFVDQSBFeHRlbmRlZCBWYWxpZGF0aW9uIFJvb3QwggIiMA0GCSqGSIb3DQEB
+-AQUAA4ICDwAwggIKAoICAQCpCQcoEwKwmeBkqh5DFnpzsZGgdT6o+uM4AHrsiWog
+-D4vFsJszA1qGxliG1cGFu0/GnEBNyr7uaZa4rYEwmnySBesFK5pI0Lh2PpbIILvS
+-sPGP2KxFRv+qZ2C0d35qHzwaUnoEPQc8hQ2E0B92CvdqFN9y4zR8V05WAT558aop
+-O2z6+I9tTcg1367r3CTueUWnhbYFiN6IXSV8l2RnCdm/WhUFhvMJHuxYMjMR83dk
+-sHYf5BA1FxvyDrFspCqjc/wJHx4yGVMR59mzLC52LqGj3n5qiAno8geK+LLNEOfi
+-c0CTuwjRP+H8C5SzJe98ptfRr5//lpr1kXuYC3fUfugH0mK1lTnj8/FtDw5lhIpj
+-VMWAtuCeS31HJqcBCF3RiJ7XwzJE+oJKCmhUfzhTA8ykADNkUVkLo4KRel7sFsLz
+-KuZi2irbWWIQJUoqgQtHB0MGcIfS+pMRKXpITeuUx3BNr2fVUbGAIAEBtHoIppB/
+-TuDvB0GHr2qlXov7z1CymlSvw4m6WC31MJixNnI5fkkE/SmnTHnkBVfblLkWU41G
+-sx2VYVdWf6/wFlthWG82UBEL2KwrlRYaDh8IzTY0ZRBiZtWAXxQgXy0MoHgKaNYs
+-1+lvK9JKBZP8nm9rZ/+I8U6laUpSNwXqxhaN0sSZ0YIrO7o1dfdRUVjzyAfd5LQD
+-fwIDAQABo0IwQDAdBgNVHQ4EFgQU2XQ65DA9DfcS3H5aBZ8eNJr34RQwDwYDVR0T
+-AQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwDQYJKoZIhvcNAQELBQADggIBADaN
+-l8xCFWQpN5smLNb7rhVpLGsaGvdftvkHTFnq88nIua7Mui563MD1sC3AO6+fcAUR
+-ap8lTwEpcOPlDOHqWnzcSbvBHiqB9RZLcpHIojG5qtr8nR/zXUACE/xOHAbKsxSQ
+-VBcZEhrxH9cMaVr2cXj0lH2RC47skFSOvG+hTKv8dGT9cZr4QQehzZHkPJrgmzI5
+-c6sq1WnIeJEmMX3ixzDx/BR4dxIOE/TdFpS/S2d7cFOFyrC78zhNLJA5wA3CXWvp
+-4uXViI3WLL+rG761KIcSF3Ru/H38j9CHJrAb+7lsq+KePRXBOy5nAliRn+/4Qh8s
+-t2j1da3Ptfb/EX3C8CSlrdP6oDyp+l3cpaDvRKS+1ujl5BOWF3sGPjLtx7dCvHaj
+-2GU4Kzg1USEODm8uNBNA4StnDG1KQTAYI1oyVZnJF+A83vbsea0rWBmirSwiGpWO
+-vpaQXUJXxPkUAzUrHC1RVwinOt4/5Mi0A3PCwSaAuwtCH60NryZy2sy+s6ODWA2C
+-xR9GUeOcGMyNm43sSet1UNWMKFnKdDTajAshqx7qG+XH/RU+wBeq+yNuJkbL+vmx
+-cmtpzyKEC2IPrNkZAJSidjzULZrtBJ4tBmIQN1IchXIbJ+XMxjHsN+xjWZsLHXbM
+-fjKaiJUINlK73nZfdklJrX+9ZSCyycErdhh2n1ax
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Certigna Root CA O=Dhimyotis OU=0002 48146308100036
+-# Subject: CN=Certigna Root CA O=Dhimyotis OU=0002 48146308100036
+-# Label: "Certigna Root CA"
+-# Serial: 269714418870597844693661054334862075617
+-# MD5 Fingerprint: 0e:5c:30:62:27:eb:5b:bc:d7:ae:62:ba:e9:d5:df:77
+-# SHA1 Fingerprint: 2d:0d:52:14:ff:9e:ad:99:24:01:74:20:47:6e:6c:85:27:27:f5:43
+-# SHA256 Fingerprint: d4:8d:3d:23:ee:db:50:a4:59:e5:51:97:60:1c:27:77:4b:9d:7b:18:c9:4d:5a:05:95:11:a1:02:50:b9:31:68
+------BEGIN CERTIFICATE-----
+-MIIGWzCCBEOgAwIBAgIRAMrpG4nxVQMNo+ZBbcTjpuEwDQYJKoZIhvcNAQELBQAw
+-WjELMAkGA1UEBhMCRlIxEjAQBgNVBAoMCURoaW15b3RpczEcMBoGA1UECwwTMDAw
+-MiA0ODE0NjMwODEwMDAzNjEZMBcGA1UEAwwQQ2VydGlnbmEgUm9vdCBDQTAeFw0x
+-MzEwMDEwODMyMjdaFw0zMzEwMDEwODMyMjdaMFoxCzAJBgNVBAYTAkZSMRIwEAYD
+-VQQKDAlEaGlteW90aXMxHDAaBgNVBAsMEzAwMDIgNDgxNDYzMDgxMDAwMzYxGTAX
+-BgNVBAMMEENlcnRpZ25hIFJvb3QgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
+-ggIKAoICAQDNGDllGlmx6mQWDoyUJJV8g9PFOSbcDO8WV43X2KyjQn+Cyu3NW9sO
+-ty3tRQgXstmzy9YXUnIo245Onoq2C/mehJpNdt4iKVzSs9IGPjA5qXSjklYcoW9M
+-CiBtnyN6tMbaLOQdLNyzKNAT8kxOAkmhVECe5uUFoC2EyP+YbNDrihqECB63aCPu
+-I9Vwzm1RaRDuoXrC0SIxwoKF0vJVdlB8JXrJhFwLrN1CTivngqIkicuQstDuI7pm
+-TLtipPlTWmR7fJj6o0ieD5Wupxj0auwuA0Wv8HT4Ks16XdG+RCYyKfHx9WzMfgIh
+-C59vpD++nVPiz32pLHxYGpfhPTc3GGYo0kDFUYqMwy3OU4gkWGQwFsWq4NYKpkDf
+-ePb1BHxpE4S80dGnBs8B92jAqFe7OmGtBIyT46388NtEbVncSVmurJqZNjBBe3Yz
+-IoejwpKGbvlw7q6Hh5UbxHq9MfPU0uWZ/75I7HX1eBYdpnDBfzwboZL7z8g81sWT
+-Co/1VTp2lc5ZmIoJlXcymoO6LAQ6l73UL77XbJuiyn1tJslV1c/DeVIICZkHJC1k
+-JWumIWmbat10TWuXekG9qxf5kBdIjzb5LdXF2+6qhUVB+s06RbFo5jZMm5BX7CO5
+-hwjCxAnxl4YqKE3idMDaxIzb3+KhF1nOJFl0Mdp//TBt2dzhauH8XwIDAQABo4IB
+-GjCCARYwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYE
+-FBiHVuBud+4kNTxOc5of1uHieX4rMB8GA1UdIwQYMBaAFBiHVuBud+4kNTxOc5of
+-1uHieX4rMEQGA1UdIAQ9MDswOQYEVR0gADAxMC8GCCsGAQUFBwIBFiNodHRwczov
+-L3d3d3cuY2VydGlnbmEuZnIvYXV0b3JpdGVzLzBtBgNVHR8EZjBkMC+gLaArhilo
+-dHRwOi8vY3JsLmNlcnRpZ25hLmZyL2NlcnRpZ25hcm9vdGNhLmNybDAxoC+gLYYr
+-aHR0cDovL2NybC5kaGlteW90aXMuY29tL2NlcnRpZ25hcm9vdGNhLmNybDANBgkq
+-hkiG9w0BAQsFAAOCAgEAlLieT/DjlQgi581oQfccVdV8AOItOoldaDgvUSILSo3L
+-6btdPrtcPbEo/uRTVRPPoZAbAh1fZkYJMyjhDSSXcNMQH+pkV5a7XdrnxIxPTGRG
+-HVyH41neQtGbqH6mid2PHMkwgu07nM3A6RngatgCdTer9zQoKJHyBApPNeNgJgH6
+-0BGM+RFq7q89w1DTj18zeTyGqHNFkIwgtnJzFyO+B2XleJINugHA64wcZr+shncB
+-lA2c5uk5jR+mUYyZDDl34bSb+hxnV29qao6pK0xXeXpXIs/NX2NGjVxZOob4Mkdi
+-o2cNGJHc+6Zr9UhhcyNZjgKnvETq9Emd8VRY+WCv2hikLyhF3HqgiIZd8zvn/yk1
+-gPxkQ5Tm4xxvvq0OKmOZK8l+hfZx6AYDlf7ej0gcWtSS6Cvu5zHbugRqh5jnxV/v
+-faci9wHYTfmJ0A6aBVmknpjZbyvKcL5kwlWj9Omvw5Ip3IgWJJk8jSaYtlu3zM63
+-Nwf9JtmYhST/WSMDmu2dnajkXjjO11INb9I/bbEFa0nOipFGc/T2L/Coc3cOZayh
+-jWZSaX5LaAzHHjcng6WMxwLkFM1JAbBzs/3GkDpv0mztO+7skb6iQ12LAEpmJURw
+-3kAP+HwV96LOPNdeE4yBFxgX0b3xdxA61GU5wSesVywlVP+i2k+KYTlerj1KjL0=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=emSign Root CA - G1 O=eMudhra Technologies Limited OU=emSign PKI
+-# Subject: CN=emSign Root CA - G1 O=eMudhra Technologies Limited OU=emSign PKI
+-# Label: "emSign Root CA - G1"
+-# Serial: 235931866688319308814040
+-# MD5 Fingerprint: 9c:42:84:57:dd:cb:0b:a7:2e:95:ad:b6:f3:da:bc:ac
+-# SHA1 Fingerprint: 8a:c7:ad:8f:73:ac:4e:c1:b5:75:4d:a5:40:f4:fc:cf:7c:b5:8e:8c
+-# SHA256 Fingerprint: 40:f6:af:03:46:a9:9a:a1:cd:1d:55:5a:4e:9c:ce:62:c7:f9:63:46:03:ee:40:66:15:83:3d:c8:c8:d0:03:67
+------BEGIN CERTIFICATE-----
+-MIIDlDCCAnygAwIBAgIKMfXkYgxsWO3W2DANBgkqhkiG9w0BAQsFADBnMQswCQYD
+-VQQGEwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBU
+-ZWNobm9sb2dpZXMgTGltaXRlZDEcMBoGA1UEAxMTZW1TaWduIFJvb3QgQ0EgLSBH
+-MTAeFw0xODAyMTgxODMwMDBaFw00MzAyMTgxODMwMDBaMGcxCzAJBgNVBAYTAklO
+-MRMwEQYDVQQLEwplbVNpZ24gUEtJMSUwIwYDVQQKExxlTXVkaHJhIFRlY2hub2xv
+-Z2llcyBMaW1pdGVkMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEcxMIIBIjAN
+-BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0u76WaK7p1b1TST0Bsew+eeuGQz
+-f2N4aLTNLnF115sgxk0pvLZoYIr3IZpWNVrzdr3YzZr/k1ZLpVkGoZM0Kd0WNHVO
+-8oG0x5ZOrRkVUkr+PHB1cM2vK6sVmjM8qrOLqs1D/fXqcP/tzxE7lM5OMhbTI0Aq
+-d7OvPAEsbO2ZLIvZTmmYsvePQbAyeGHWDV/D+qJAkh1cF+ZwPjXnorfCYuKrpDhM
+-tTk1b+oDafo6VGiFbdbyL0NVHpENDtjVaqSW0RM8LHhQ6DqS0hdW5TUaQBw+jSzt
+-Od9C4INBdN+jzcKGYEho42kLVACL5HZpIQ15TjQIXhTCzLG3rdd8cIrHhQIDAQAB
+-o0IwQDAdBgNVHQ4EFgQU++8Nhp6w492pufEhF38+/PB3KxowDgYDVR0PAQH/BAQD
+-AgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAFn/8oz1h31x
+-PaOfG1vR2vjTnGs2vZupYeveFix0PZ7mddrXuqe8QhfnPZHr5X3dPpzxz5KsbEjM
+-wiI/aTvFthUvozXGaCocV685743QNcMYDHsAVhzNixl03r4PEuDQqqE/AjSxcM6d
+-GNYIAwlG7mDgfrbESQRRfXBgvKqy/3lyeqYdPV8q+Mri/Tm3R7nrft8EI6/6nAYH
+-6ftjk4BAtcZsCjEozgyfz7MjNYBBjWzEN3uBL4ChQEKF6dk4jeihU80Bv2noWgby
+-RQuQ+q7hv53yrlc8pa6yVvSLZUDp/TGBLPQ5Cdjua6e0ph0VpZj3AYHYhX3zUVxx
+-iN66zB+Afko=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=emSign ECC Root CA - G3 O=eMudhra Technologies Limited OU=emSign PKI
+-# Subject: CN=emSign ECC Root CA - G3 O=eMudhra Technologies Limited OU=emSign PKI
+-# Label: "emSign ECC Root CA - G3"
+-# Serial: 287880440101571086945156
+-# MD5 Fingerprint: ce:0b:72:d1:9f:88:8e:d0:50:03:e8:e3:b8:8b:67:40
+-# SHA1 Fingerprint: 30:43:fa:4f:f2:57:dc:a0:c3:80:ee:2e:58:ea:78:b2:3f:e6:bb:c1
+-# SHA256 Fingerprint: 86:a1:ec:ba:08:9c:4a:8d:3b:be:27:34:c6:12:ba:34:1d:81:3e:04:3c:f9:e8:a8:62:cd:5c:57:a3:6b:be:6b
+------BEGIN CERTIFICATE-----
+-MIICTjCCAdOgAwIBAgIKPPYHqWhwDtqLhDAKBggqhkjOPQQDAzBrMQswCQYDVQQG
+-EwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNo
+-bm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g
+-RzMwHhcNMTgwMjE4MTgzMDAwWhcNNDMwMjE4MTgzMDAwWjBrMQswCQYDVQQGEwJJ
+-TjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9s
+-b2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0gRzMw
+-djAQBgcqhkjOPQIBBgUrgQQAIgNiAAQjpQy4LRL1KPOxst3iAhKAnjlfSU2fySU0
+-WXTsuwYc58Byr+iuL+FBVIcUqEqy6HyC5ltqtdyzdc6LBtCGI79G1Y4PPwT01xyS
+-fvalY8L1X44uT6EYGQIrMgqCZH0Wk9GjQjBAMB0GA1UdDgQWBBR8XQKEE9TMipuB
+-zhccLikenEhjQjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggq
+-hkjOPQQDAwNpADBmAjEAvvNhzwIQHWSVB7gYboiFBS+DCBeQyh+KTOgNG3qxrdWB
+-CUfvO6wIBHxcmbHtRwfSAjEAnbpV/KlK6O3t5nYBQnvI+GDZjVGLVTv7jHvrZQnD
+-+JbNR6iC8hZVdyR+EhCVBCyj
+------END CERTIFICATE-----
+-
+-# Issuer: CN=emSign Root CA - C1 O=eMudhra Inc OU=emSign PKI
+-# Subject: CN=emSign Root CA - C1 O=eMudhra Inc OU=emSign PKI
+-# Label: "emSign Root CA - C1"
+-# Serial: 825510296613316004955058
+-# MD5 Fingerprint: d8:e3:5d:01:21:fa:78:5a:b0:df:ba:d2:ee:2a:5f:68
+-# SHA1 Fingerprint: e7:2e:f1:df:fc:b2:09:28:cf:5d:d4:d5:67:37:b1:51:cb:86:4f:01
+-# SHA256 Fingerprint: 12:56:09:aa:30:1d:a0:a2:49:b9:7a:82:39:cb:6a:34:21:6f:44:dc:ac:9f:39:54:b1:42:92:f2:e8:c8:60:8f
+------BEGIN CERTIFICATE-----
+-MIIDczCCAlugAwIBAgILAK7PALrEzzL4Q7IwDQYJKoZIhvcNAQELBQAwVjELMAkG
+-A1UEBhMCVVMxEzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEg
+-SW5jMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEMxMB4XDTE4MDIxODE4MzAw
+-MFoXDTQzMDIxODE4MzAwMFowVjELMAkGA1UEBhMCVVMxEzARBgNVBAsTCmVtU2ln
+-biBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMRwwGgYDVQQDExNlbVNpZ24gUm9v
+-dCBDQSAtIEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+upufGZ
+-BczYKCFK83M0UYRWEPWgTywS4/oTmifQz/l5GnRfHXk5/Fv4cI7gklL35CX5VIPZ
+-HdPIWoU/Xse2B+4+wM6ar6xWQio5JXDWv7V7Nq2s9nPczdcdioOl+yuQFTdrHCZH
+-3DspVpNqs8FqOp099cGXOFgFixwR4+S0uF2FHYP+eF8LRWgYSKVGczQ7/g/IdrvH
+-GPMF0Ybzhe3nudkyrVWIzqa2kbBPrH4VI5b2P/AgNBbeCsbEBEV5f6f9vtKppa+c
+-xSMq9zwhbL2vj07FOrLzNBL834AaSaTUqZX3noleoomslMuoaJuvimUnzYnu3Yy1
+-aylwQ6BpC+S5DwIDAQABo0IwQDAdBgNVHQ4EFgQU/qHgcB4qAzlSWkK+XJGFehiq
+-TbUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL
+-BQADggEBAMJKVvoVIXsoounlHfv4LcQ5lkFMOycsxGwYFYDGrK9HWS8mC+M2sO87
+-/kOXSTKZEhVb3xEp/6tT+LvBeA+snFOvV71ojD1pM/CjoCNjO2RnIkSt1XHLVip4
+-kqNPEjE2NuLe/gDEo2APJ62gsIq1NnpSob0n9CAnYuhNlCQT5AoE6TyrLshDCUrG
+-YQTlSTR+08TI9Q/Aqum6VF7zYytPT1DU/rl7mYw9wC68AivTxEDkigcxHpvOJpkT
+-+xHqmiIMERnHXhuBUDDIlhJu58tBf5E7oke3VIAb3ADMmpDqw8NQBmIMMMAVSKeo
+-WXzhriKi4gp6D/piq1JM4fHfyr6DDUI=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=emSign ECC Root CA - C3 O=eMudhra Inc OU=emSign PKI
+-# Subject: CN=emSign ECC Root CA - C3 O=eMudhra Inc OU=emSign PKI
+-# Label: "emSign ECC Root CA - C3"
+-# Serial: 582948710642506000014504
+-# MD5 Fingerprint: 3e:53:b3:a3:81:ee:d7:10:f8:d3:b0:1d:17:92:f5:d5
+-# SHA1 Fingerprint: b6:af:43:c2:9b:81:53:7d:f6:ef:6b:c3:1f:1f:60:15:0c:ee:48:66
+-# SHA256 Fingerprint: bc:4d:80:9b:15:18:9d:78:db:3e:1d:8c:f4:f9:72:6a:79:5d:a1:64:3c:a5:f1:35:8e:1d:db:0e:dc:0d:7e:b3
+------BEGIN CERTIFICATE-----
+-MIICKzCCAbGgAwIBAgIKe3G2gla4EnycqDAKBggqhkjOPQQDAzBaMQswCQYDVQQG
+-EwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMx
+-IDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAw
+-MFoXDTQzMDIxODE4MzAwMFowWjELMAkGA1UEBhMCVVMxEzARBgNVBAsTCmVtU2ln
+-biBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMSAwHgYDVQQDExdlbVNpZ24gRUND
+-IFJvb3QgQ0EgLSBDMzB2MBAGByqGSM49AgEGBSuBBAAiA2IABP2lYa57JhAd6bci
+-MK4G9IGzsUJxlTm801Ljr6/58pc1kjZGDoeVjbk5Wum739D+yAdBPLtVb4Ojavti
+-sIGJAnB9SMVK4+kiVCJNk7tCDK93nCOmfddhEc5lx/h//vXyqaNCMEAwHQYDVR0O
+-BBYEFPtaSNCAIEDyqOkAB2kZd6fmw/TPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMB
+-Af8EBTADAQH/MAoGCCqGSM49BAMDA2gAMGUCMQC02C8Cif22TGK6Q04ThHK1rt0c
+-3ta13FaPWEBaLd4gTCKDypOofu4SQMfWh0/434UCMBwUZOR8loMRnLDRWmFLpg9J
+-0wD8ofzkpf9/rdcw0Md3f76BB1UwUCAU9Vc4CqgxUQ==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Hongkong Post Root CA 3 O=Hongkong Post
+-# Subject: CN=Hongkong Post Root CA 3 O=Hongkong Post
+-# Label: "Hongkong Post Root CA 3"
+-# Serial: 46170865288971385588281144162979347873371282084
+-# MD5 Fingerprint: 11:fc:9f:bd:73:30:02:8a:fd:3f:f3:58:b9:cb:20:f0
+-# SHA1 Fingerprint: 58:a2:d0:ec:20:52:81:5b:c1:f3:f8:64:02:24:4e:c2:8e:02:4b:02
+-# SHA256 Fingerprint: 5a:2f:c0:3f:0c:83:b0:90:bb:fa:40:60:4b:09:88:44:6c:76:36:18:3d:f9:84:6e:17:10:1a:44:7f:b8:ef:d6
+------BEGIN CERTIFICATE-----
+-MIIFzzCCA7egAwIBAgIUCBZfikyl7ADJk0DfxMauI7gcWqQwDQYJKoZIhvcNAQEL
+-BQAwbzELMAkGA1UEBhMCSEsxEjAQBgNVBAgTCUhvbmcgS29uZzESMBAGA1UEBxMJ
+-SG9uZyBLb25nMRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25n
+-a29uZyBQb3N0IFJvb3QgQ0EgMzAeFw0xNzA2MDMwMjI5NDZaFw00MjA2MDMwMjI5
+-NDZaMG8xCzAJBgNVBAYTAkhLMRIwEAYDVQQIEwlIb25nIEtvbmcxEjAQBgNVBAcT
+-CUhvbmcgS29uZzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEgMB4GA1UEAxMXSG9u
+-Z2tvbmcgUG9zdCBSb290IENBIDMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
+-AoICAQCziNfqzg8gTr7m1gNt7ln8wlffKWihgw4+aMdoWJwcYEuJQwy51BWy7sFO
+-dem1p+/l6TWZ5Mwc50tfjTMwIDNT2aa71T4Tjukfh0mtUC1Qyhi+AViiE3CWu4mI
+-VoBc+L0sPOFMV4i707mV78vH9toxdCim5lSJ9UExyuUmGs2C4HDaOym71QP1mbpV
+-9WTRYA6ziUm4ii8F0oRFKHyPaFASePwLtVPLwpgchKOesL4jpNrcyCse2m5FHomY
+-2vkALgbpDDtw1VAliJnLzXNg99X/NWfFobxeq81KuEXryGgeDQ0URhLj0mRiikKY
+-vLTGCAj4/ahMZJx2Ab0vqWwzD9g/KLg8aQFChn5pwckGyuV6RmXpwtZQQS4/t+Tt
+-bNe/JgERohYpSms0BpDsE9K2+2p20jzt8NYt3eEV7KObLyzJPivkaTv/ciWxNoZb
+-x39ri1UbSsUgYT2uy1DhCDq+sI9jQVMwCFk8mB13umOResoQUGC/8Ne8lYePl8X+
+-l2oBlKN8W4UdKjk60FSh0Tlxnf0h+bV78OLgAo9uliQlLKAeLKjEiafv7ZkGL7YK
+-TE/bosw3Gq9HhS2KX8Q0NEwA/RiTZxPRN+ZItIsGxVd7GYYKecsAyVKvQv83j+Gj
+-Hno9UKtjBucVtT+2RTeUN7F+8kjDf8V1/peNRY8apxpyKBpADwIDAQABo2MwYTAP
+-BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAfBgNVHSMEGDAWgBQXnc0e
+-i9Y5K3DTXNSguB+wAPzFYTAdBgNVHQ4EFgQUF53NHovWOStw01zUoLgfsAD8xWEw
+-DQYJKoZIhvcNAQELBQADggIBAFbVe27mIgHSQpsY1Q7XZiNc4/6gx5LS6ZStS6LG
+-7BJ8dNVI0lkUmcDrudHr9EgwW62nV3OZqdPlt9EuWSRY3GguLmLYauRwCy0gUCCk
+-MpXRAJi70/33MvJJrsZ64Ee+bs7Lo3I6LWldy8joRTnU+kLBEUx3XZL7av9YROXr
+-gZ6voJmtvqkBZss4HTzfQx/0TW60uhdG/H39h4F5ag0zD/ov+BS5gLNdTaqX4fnk
+-GMX41TiMJjz98iji7lpJiCzfeT2OnpA8vUFKOt1b9pq0zj8lMH8yfaIDlNDceqFS
+-3m6TjRgm/VWsvY+b0s+v54Ysyx8Jb6NvqYTUc79NoXQbTiNg8swOqn+knEwlqLJm
+-Ozj/2ZQw9nKEvmhVEA/GcywWaZMH/rFF7buiVWqw2rVKAiUnhde3t4ZEFolsgCs+
+-l6mc1X5VTMbeRRAc6uk7nwNT7u56AQIWeNTowr5GdogTPyK7SBIdUgC0An4hGh6c
+-JfTzPV4e0hz5sy229zdcxsshTrD3mUcYhcErulWuBurQB7Lcq9CClnXO0lD+mefP
+-L5/ndtFhKvshuzHQqp9HpLIiyhY6UFfEW0NnxWViA0kB60PZ2Pierc+xYw5F9KBa
+-LJstxabArahH9CdMOA0uG0k7UvToiIMrVCjU8jVStDKDYmlkDJGcn5fqdBb9HxEG
+-mpv0
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Entrust Root Certification Authority - G4 O=Entrust, Inc. OU=See www.entrust.net/legal-terms/(c) 2015 Entrust, Inc. - for authorized use only
+-# Subject: CN=Entrust Root Certification Authority - G4 O=Entrust, Inc. OU=See www.entrust.net/legal-terms/(c) 2015 Entrust, Inc. - for authorized use only
+-# Label: "Entrust Root Certification Authority - G4"
+-# Serial: 289383649854506086828220374796556676440
+-# MD5 Fingerprint: 89:53:f1:83:23:b7:7c:8e:05:f1:8c:71:38:4e:1f:88
+-# SHA1 Fingerprint: 14:88:4e:86:26:37:b0:26:af:59:62:5c:40:77:ec:35:29:ba:96:01
+-# SHA256 Fingerprint: db:35:17:d1:f6:73:2a:2d:5a:b9:7c:53:3e:c7:07:79:ee:32:70:a6:2f:b4:ac:42:38:37:24:60:e6:f0:1e:88
+------BEGIN CERTIFICATE-----
+-MIIGSzCCBDOgAwIBAgIRANm1Q3+vqTkPAAAAAFVlrVgwDQYJKoZIhvcNAQELBQAw
+-gb4xCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
+-Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
+-MjAxNSBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxMjAw
+-BgNVBAMTKUVudHJ1c3QgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEc0
+-MB4XDTE1MDUyNzExMTExNloXDTM3MTIyNzExNDExNlowgb4xCzAJBgNVBAYTAlVT
+-MRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQLEx9TZWUgd3d3LmVudHJ1
+-c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykgMjAxNSBFbnRydXN0LCBJ
+-bmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxMjAwBgNVBAMTKUVudHJ1c3Qg
+-Um9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEc0MIICIjANBgkqhkiG9w0B
+-AQEFAAOCAg8AMIICCgKCAgEAsewsQu7i0TD/pZJH4i3DumSXbcr3DbVZwbPLqGgZ
+-2K+EbTBwXX7zLtJTmeH+H17ZSK9dE43b/2MzTdMAArzE+NEGCJR5WIoV3imz/f3E
+-T+iq4qA7ec2/a0My3dl0ELn39GjUu9CH1apLiipvKgS1sqbHoHrmSKvS0VnM1n4j
+-5pds8ELl3FFLFUHtSUrJ3hCX1nbB76W1NhSXNdh4IjVS70O92yfbYVaCNNzLiGAM
+-C1rlLAHGVK/XqsEQe9IFWrhAnoanw5CGAlZSCXqc0ieCU0plUmr1POeo8pyvi73T
+-DtTUXm6Hnmo9RR3RXRv06QqsYJn7ibT/mCzPfB3pAqoEmh643IhuJbNsZvc8kPNX
+-wbMv9W3y+8qh+CmdRouzavbmZwe+LGcKKh9asj5XxNMhIWNlUpEbsZmOeX7m640A
+-2Vqq6nPopIICR5b+W45UYaPrL0swsIsjdXJ8ITzI9vF01Bx7owVV7rtNOzK+mndm
+-nqxpkCIHH2E6lr7lmk/MBTwoWdPBDFSoWWG9yHJM6Nyfh3+9nEg2XpWjDrk4JFX8
+-dWbrAuMINClKxuMrLzOg2qOGpRKX/YAr2hRC45K9PvJdXmd0LhyIRyk0X+IyqJwl
+-N4y6mACXi0mWHv0liqzc2thddG5msP9E36EYxr5ILzeUePiVSj9/E15dWf10hkNj
+-c0kCAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYD
+-VR0OBBYEFJ84xFYjwznooHFs6FRM5Og6sb9nMA0GCSqGSIb3DQEBCwUAA4ICAQAS
+-5UKme4sPDORGpbZgQIeMJX6tuGguW8ZAdjwD+MlZ9POrYs4QjbRaZIxowLByQzTS
+-Gwv2LFPSypBLhmb8qoMi9IsabyZIrHZ3CL/FmFz0Jomee8O5ZDIBf9PD3Vht7LGr
+-hFV0d4QEJ1JrhkzO3bll/9bGXp+aEJlLdWr+aumXIOTkdnrG0CSqkM0gkLpHZPt/
+-B7NTeLUKYvJzQ85BK4FqLoUWlFPUa19yIqtRLULVAJyZv967lDtX/Zr1hstWO1uI
+-AeV8KEsD+UmDfLJ/fOPtjqF/YFOOVZ1QNBIPt5d7bIdKROf1beyAN/BYGW5KaHbw
+-H5Lk6rWS02FREAutp9lfx1/cH6NcjKF+m7ee01ZvZl4HliDtC3T7Zk6LERXpgUl+
+-b7DUUH8i119lAg2m9IUe2K4GS0qn0jFmwvjO5QimpAKWRGhXxNUzzxkvFMSUHHuk
+-2fCfDrGA4tGeEWSpiBE6doLlYsKA2KSD7ZPvfC+QsDJMlhVoSFLUmQjAJOgc47Ol
+-IQ6SwJAfzyBfyjs4x7dtOvPmRLgOMWuIjnDrnBdSqEGULoe256YSxXXfW8AKbnuk
+-5F6G+TaU33fD6Q3AOfF5u0aOq0NZJ7cguyPpVkAh7DE9ZapD8j3fcEThuk0mEDuY
+-n/PIjhs4ViFqUZPTkcpG2om3PVODLAgfi49T3f+sHw==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Microsoft ECC Root Certificate Authority 2017 O=Microsoft Corporation
+-# Subject: CN=Microsoft ECC Root Certificate Authority 2017 O=Microsoft Corporation
+-# Label: "Microsoft ECC Root Certificate Authority 2017"
+-# Serial: 136839042543790627607696632466672567020
+-# MD5 Fingerprint: dd:a1:03:e6:4a:93:10:d1:bf:f0:19:42:cb:fe:ed:67
+-# SHA1 Fingerprint: 99:9a:64:c3:7f:f4:7d:9f:ab:95:f1:47:69:89:14:60:ee:c4:c3:c5
+-# SHA256 Fingerprint: 35:8d:f3:9d:76:4a:f9:e1:b7:66:e9:c9:72:df:35:2e:e1:5c:fa:c2:27:af:6a:d1:d7:0e:8e:4a:6e:dc:ba:02
+------BEGIN CERTIFICATE-----
+-MIICWTCCAd+gAwIBAgIQZvI9r4fei7FK6gxXMQHC7DAKBggqhkjOPQQDAzBlMQsw
+-CQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYwNAYD
+-VQQDEy1NaWNyb3NvZnQgRUNDIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIw
+-MTcwHhcNMTkxMjE4MjMwNjQ1WhcNNDIwNzE4MjMxNjA0WjBlMQswCQYDVQQGEwJV
+-UzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYwNAYDVQQDEy1NaWNy
+-b3NvZnQgRUNDIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTcwdjAQBgcq
+-hkjOPQIBBgUrgQQAIgNiAATUvD0CQnVBEyPNgASGAlEvaqiBYgtlzPbKnR5vSmZR
+-ogPZnZH6thaxjG7efM3beaYvzrvOcS/lpaso7GMEZpn4+vKTEAXhgShC48Zo9OYb
+-hGBKia/teQ87zvH2RPUBeMCjVDBSMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8E
+-BTADAQH/MB0GA1UdDgQWBBTIy5lycFIM+Oa+sgRXKSrPQhDtNTAQBgkrBgEEAYI3
+-FQEEAwIBADAKBggqhkjOPQQDAwNoADBlAjBY8k3qDPlfXu5gKcs68tvWMoQZP3zV
+-L8KxzJOuULsJMsbG7X7JNpQS5GiFBqIb0C8CMQCZ6Ra0DvpWSNSkMBaReNtUjGUB
+-iudQZsIxtzm6uBoiB078a1QWIP8rtedMDE2mT3M=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Microsoft RSA Root Certificate Authority 2017 O=Microsoft Corporation
+-# Subject: CN=Microsoft RSA Root Certificate Authority 2017 O=Microsoft Corporation
+-# Label: "Microsoft RSA Root Certificate Authority 2017"
+-# Serial: 40975477897264996090493496164228220339
+-# MD5 Fingerprint: 10:ff:00:ff:cf:c9:f8:c7:7a:c0:ee:35:8e:c9:0f:47
+-# SHA1 Fingerprint: 73:a5:e6:4a:3b:ff:83:16:ff:0e:dc:cc:61:8a:90:6e:4e:ae:4d:74
+-# SHA256 Fingerprint: c7:41:f7:0f:4b:2a:8d:88:bf:2e:71:c1:41:22:ef:53:ef:10:eb:a0:cf:a5:e6:4c:fa:20:f4:18:85:30:73:e0
+------BEGIN CERTIFICATE-----
+-MIIFqDCCA5CgAwIBAgIQHtOXCV/YtLNHcB6qvn9FszANBgkqhkiG9w0BAQwFADBl
+-MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYw
+-NAYDVQQDEy1NaWNyb3NvZnQgUlNBIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5
+-IDIwMTcwHhcNMTkxMjE4MjI1MTIyWhcNNDIwNzE4MjMwMDIzWjBlMQswCQYDVQQG
+-EwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTYwNAYDVQQDEy1N
+-aWNyb3NvZnQgUlNBIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTcwggIi
+-MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKW76UM4wplZEWCpW9R2LBifOZ
+-Nt9GkMml7Xhqb0eRaPgnZ1AzHaGm++DlQ6OEAlcBXZxIQIJTELy/xztokLaCLeX0
+-ZdDMbRnMlfl7rEqUrQ7eS0MdhweSE5CAg2Q1OQT85elss7YfUJQ4ZVBcF0a5toW1
+-HLUX6NZFndiyJrDKxHBKrmCk3bPZ7Pw71VdyvD/IybLeS2v4I2wDwAW9lcfNcztm
+-gGTjGqwu+UcF8ga2m3P1eDNbx6H7JyqhtJqRjJHTOoI+dkC0zVJhUXAoP8XFWvLJ
+-jEm7FFtNyP9nTUwSlq31/niol4fX/V4ggNyhSyL71Imtus5Hl0dVe49FyGcohJUc
+-aDDv70ngNXtk55iwlNpNhTs+VcQor1fznhPbRiefHqJeRIOkpcrVE7NLP8TjwuaG
+-YaRSMLl6IE9vDzhTyzMMEyuP1pq9KsgtsRx9S1HKR9FIJ3Jdh+vVReZIZZ2vUpC6
+-W6IYZVcSn2i51BVrlMRpIpj0M+Dt+VGOQVDJNE92kKz8OMHY4Xu54+OU4UZpyw4K
+-UGsTuqwPN1q3ErWQgR5WrlcihtnJ0tHXUeOrO8ZV/R4O03QK0dqq6mm4lyiPSMQH
+-+FJDOvTKVTUssKZqwJz58oHhEmrARdlns87/I6KJClTUFLkqqNfs+avNJVgyeY+Q
+-W5g5xAgGwax/Dj0ApQIDAQABo1QwUjAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/
+-BAUwAwEB/zAdBgNVHQ4EFgQUCctZf4aycI8awznjwNnpv7tNsiMwEAYJKwYBBAGC
+-NxUBBAMCAQAwDQYJKoZIhvcNAQEMBQADggIBAKyvPl3CEZaJjqPnktaXFbgToqZC
+-LgLNFgVZJ8og6Lq46BrsTaiXVq5lQ7GPAJtSzVXNUzltYkyLDVt8LkS/gxCP81OC
+-gMNPOsduET/m4xaRhPtthH80dK2Jp86519efhGSSvpWhrQlTM93uCupKUY5vVau6
+-tZRGrox/2KJQJWVggEbbMwSubLWYdFQl3JPk+ONVFT24bcMKpBLBaYVu32TxU5nh
+-SnUgnZUP5NbcA/FZGOhHibJXWpS2qdgXKxdJ5XbLwVaZOjex/2kskZGT4d9Mozd2
+-TaGf+G0eHdP67Pv0RR0Tbc/3WeUiJ3IrhvNXuzDtJE3cfVa7o7P4NHmJweDyAmH3
+-pvwPuxwXC65B2Xy9J6P9LjrRk5Sxcx0ki69bIImtt2dmefU6xqaWM/5TkshGsRGR
+-xpl/j8nWZjEgQRCHLQzWwa80mMpkg/sTV9HB8Dx6jKXB/ZUhoHHBk2dxEuqPiApp
+-GWSZI1b7rCoucL5mxAyE7+WL85MB+GqQk2dLsmijtWKP6T+MejteD+eMuMZ87zf9
+-dOLITzNy4ZQ5bb0Sr74MTnB8G2+NszKTc0QWbej09+CVgI+WXTik9KveCjCHk9hN
+-AHFiRSdLOkKEW39lt2c0Ui2cFmuqqNh7o0JMcccMyj6D5KbvtwEwXlGjefVwaaZB
+-RA+GsCyRxj3qrg+E
+------END CERTIFICATE-----
+-
+-# Issuer: CN=e-Szigno Root CA 2017 O=Microsec Ltd.
+-# Subject: CN=e-Szigno Root CA 2017 O=Microsec Ltd.
+-# Label: "e-Szigno Root CA 2017"
+-# Serial: 411379200276854331539784714
+-# MD5 Fingerprint: de:1f:f6:9e:84:ae:a7:b4:21:ce:1e:58:7d:d1:84:98
+-# SHA1 Fingerprint: 89:d4:83:03:4f:9e:9a:48:80:5f:72:37:d4:a9:a6:ef:cb:7c:1f:d1
+-# SHA256 Fingerprint: be:b0:0b:30:83:9b:9b:c3:2c:32:e4:44:79:05:95:06:41:f2:64:21:b1:5e:d0:89:19:8b:51:8a:e2:ea:1b:99
+------BEGIN CERTIFICATE-----
+-MIICQDCCAeWgAwIBAgIMAVRI7yH9l1kN9QQKMAoGCCqGSM49BAMCMHExCzAJBgNV
+-BAYTAkhVMREwDwYDVQQHDAhCdWRhcGVzdDEWMBQGA1UECgwNTWljcm9zZWMgTHRk
+-LjEXMBUGA1UEYQwOVkFUSFUtMjM1ODQ0OTcxHjAcBgNVBAMMFWUtU3ppZ25vIFJv
+-b3QgQ0EgMjAxNzAeFw0xNzA4MjIxMjA3MDZaFw00MjA4MjIxMjA3MDZaMHExCzAJ
+-BgNVBAYTAkhVMREwDwYDVQQHDAhCdWRhcGVzdDEWMBQGA1UECgwNTWljcm9zZWMg
+-THRkLjEXMBUGA1UEYQwOVkFUSFUtMjM1ODQ0OTcxHjAcBgNVBAMMFWUtU3ppZ25v
+-IFJvb3QgQ0EgMjAxNzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABJbcPYrYsHtv
+-xie+RJCxs1YVe45DJH0ahFnuY2iyxl6H0BVIHqiQrb1TotreOpCmYF9oMrWGQd+H
+-Wyx7xf58etqjYzBhMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0G
+-A1UdDgQWBBSHERUI0arBeAyxr87GyZDvvzAEwDAfBgNVHSMEGDAWgBSHERUI0arB
+-eAyxr87GyZDvvzAEwDAKBggqhkjOPQQDAgNJADBGAiEAtVfd14pVCzbhhkT61Nlo
+-jbjcI4qKDdQvfepz7L9NbKgCIQDLpbQS+ue16M9+k/zzNY9vTlp8tLxOsvxyqltZ
+-+efcMQ==
+------END CERTIFICATE-----
+-
+-# Issuer: O=CERTSIGN SA OU=certSIGN ROOT CA G2
+-# Subject: O=CERTSIGN SA OU=certSIGN ROOT CA G2
+-# Label: "certSIGN Root CA G2"
+-# Serial: 313609486401300475190
+-# MD5 Fingerprint: 8c:f1:75:8a:c6:19:cf:94:b7:f7:65:20:87:c3:97:c7
+-# SHA1 Fingerprint: 26:f9:93:b4:ed:3d:28:27:b0:b9:4b:a7:e9:15:1d:a3:8d:92:e5:32
+-# SHA256 Fingerprint: 65:7c:fe:2f:a7:3f:aa:38:46:25:71:f3:32:a2:36:3a:46:fc:e7:02:09:51:71:07:02:cd:fb:b6:ee:da:33:05
+------BEGIN CERTIFICATE-----
+-MIIFRzCCAy+gAwIBAgIJEQA0tk7GNi02MA0GCSqGSIb3DQEBCwUAMEExCzAJBgNV
+-BAYTAlJPMRQwEgYDVQQKEwtDRVJUU0lHTiBTQTEcMBoGA1UECxMTY2VydFNJR04g
+-Uk9PVCBDQSBHMjAeFw0xNzAyMDYwOTI3MzVaFw00MjAyMDYwOTI3MzVaMEExCzAJ
+-BgNVBAYTAlJPMRQwEgYDVQQKEwtDRVJUU0lHTiBTQTEcMBoGA1UECxMTY2VydFNJ
+-R04gUk9PVCBDQSBHMjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMDF
+-dRmRfUR0dIf+DjuW3NgBFszuY5HnC2/OOwppGnzC46+CjobXXo9X69MhWf05N0Iw
+-vlDqtg+piNguLWkh59E3GE59kdUWX2tbAMI5Qw02hVK5U2UPHULlj88F0+7cDBrZ
+-uIt4ImfkabBoxTzkbFpG583H+u/E7Eu9aqSs/cwoUe+StCmrqzWaTOTECMYmzPhp
+-n+Sc8CnTXPnGFiWeI8MgwT0PPzhAsP6CRDiqWhqKa2NYOLQV07YRaXseVO6MGiKs
+-cpc/I1mbySKEwQdPzH/iV8oScLumZfNpdWO9lfsbl83kqK/20U6o2YpxJM02PbyW
+-xPFsqa7lzw1uKA2wDrXKUXt4FMMgL3/7FFXhEZn91QqhngLjYl/rNUssuHLoPj1P
+-rCy7Lobio3aP5ZMqz6WryFyNSwb/EkaseMsUBzXgqd+L6a8VTxaJW732jcZZroiF
+-DsGJ6x9nxUWO/203Nit4ZoORUSs9/1F3dmKh7Gc+PoGD4FapUB8fepmrY7+EF3fx
+-DTvf95xhszWYijqy7DwaNz9+j5LP2RIUZNoQAhVB/0/E6xyjyfqZ90bp4RjZsbgy
+-LcsUDFDYg2WD7rlcz8sFWkz6GZdr1l0T08JcVLwyc6B49fFtHsufpaafItzRUZ6C
+-eWRgKRM+o/1Pcmqr4tTluCRVLERLiohEnMqE0yo7AgMBAAGjQjBAMA8GA1UdEwEB
+-/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBSCIS1mxteg4BXrzkwJ
+-d8RgnlRuAzANBgkqhkiG9w0BAQsFAAOCAgEAYN4auOfyYILVAzOBywaK8SJJ6ejq
+-kX/GM15oGQOGO0MBzwdw5AgeZYWR5hEit/UCI46uuR59H35s5r0l1ZUa8gWmr4UC
+-b6741jH/JclKyMeKqdmfS0mbEVeZkkMR3rYzpMzXjWR91M08KCy0mpbqTfXERMQl
+-qiCA2ClV9+BB/AYm/7k29UMUA2Z44RGx2iBfRgB4ACGlHgAoYXhvqAEBj500mv/0
+-OJD7uNGzcgbJceaBxXntC6Z58hMLnPddDnskk7RI24Zf3lCGeOdA5jGokHZwYa+c
+-NywRtYK3qq4kNFtyDGkNzVmf9nGvnAvRCjj5BiKDUyUM/FHE5r7iOZULJK2v0ZXk
+-ltd0ZGtxTgI8qoXzIKNDOXZbbFD+mpwUHmUUihW9o4JFWklWatKcsWMy5WHgUyIO
+-pwpJ6st+H6jiYoD2EEVSmAYY3qXNL3+q1Ok+CHLsIwMCPKaq2LxndD0UF/tUSxfj
+-03k9bWtJySgOLnRQvwzZRjoQhsmnP+mg7H/rpXdYaXHmgwo38oZJar55CJD2AhZk
+-PuXaTH4MNMn5X7azKFGnpyuqSfqNZSlO42sTp5SjLVFteAxEy9/eCG/Oo2Sr05WE
+-1LlSVHJ7liXMvGnjSG4N0MedJ5qq+BOS3R7fY581qRY27Iy4g/Q9iY/NtBde17MX
+-QRBdJ3NghVdJIgc=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=Trustwave Global Certification Authority O=Trustwave Holdings, Inc.
+-# Subject: CN=Trustwave Global Certification Authority O=Trustwave Holdings, Inc.
+-# Label: "Trustwave Global Certification Authority"
+-# Serial: 1846098327275375458322922162
+-# MD5 Fingerprint: f8:1c:18:2d:2f:ba:5f:6d:a1:6c:bc:c7:ab:91:c7:0e
+-# SHA1 Fingerprint: 2f:8f:36:4f:e1:58:97:44:21:59:87:a5:2a:9a:d0:69:95:26:7f:b5
+-# SHA256 Fingerprint: 97:55:20:15:f5:dd:fc:3c:87:88:c0:06:94:45:55:40:88:94:45:00:84:f1:00:86:70:86:bc:1a:2b:b5:8d:c8
++# 97552015f5ddfc3c8788c006944555408894450084f100867086bc1a2bb58dc8
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 05:f7:0e:86:da:49:f3:46:35:2e:ba:b2
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global Certification Authority
++ Validity
++ Not Before: Aug 23 19:34:12 2017 GMT
++ Not After : Aug 23 19:34:12 2042 GMT
++ Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = Trustwave Global Certification Authority
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:b9:5d:51:28:4b:3c:37:92:d1:82:ce:bd:1d:bd:
++ cd:dd:b8:ab:cf:0a:3e:e1:5d:e5:dc:aa:09:b9:57:
++ 02:3e:e6:63:61:df:f2:0f:82:63:ae:a3:f7:ac:73:
++ d1:7c:e7:b3:0b:af:08:00:09:59:7f:cd:29:2a:88:
++ 93:87:17:18:80:ed:88:b2:b4:b6:10:1f:2d:d6:5f:
++ 55:a2:13:5d:d1:c6:eb:06:56:89:88:fe:ac:32:9d:
++ fd:5c:c3:05:c7:6e:ee:86:89:ba:88:03:9d:72:21:
++ 86:90:ae:8f:03:a5:dc:9f:88:28:cb:a3:92:49:0f:
++ ec:d0:0f:e2:6d:44:4f:80:6a:b2:d4:e7:a0:0a:53:
++ 01:ba:8e:97:91:76:6e:bc:fc:d5:6b:36:e6:40:88:
++ d6:7b:2f:5f:05:e8:2c:6d:11:f3:e7:b2:be:92:44:
++ 4c:d2:97:a4:fe:d2:72:81:43:07:9c:e9:11:3e:f5:
++ 8b:1a:59:7d:1f:68:58:dd:04:00:2c:96:f3:43:b3:
++ 7e:98:19:74:d9:9c:73:d9:18:be:41:c7:34:79:d9:
++ f4:62:c2:43:b9:b3:27:b0:22:cb:f9:3d:52:c7:30:
++ 47:b3:c9:3e:b8:6a:e2:e7:e8:81:70:5e:42:8b:4f:
++ 26:a5:fe:3a:c2:20:6e:bb:f8:16:8e:cd:0c:a9:b4:
++ 1b:6c:76:10:e1:58:79:46:3e:54:ce:80:a8:57:09:
++ 37:29:1b:99:13:8f:0c:c8:d6:2c:1c:fb:05:e8:08:
++ 95:3d:65:46:dc:ee:cd:69:e2:4d:8f:87:28:4e:34:
++ 0b:3e:cf:14:d9:bb:dd:b6:50:9a:ad:77:d4:19:d6:
++ da:1a:88:c8:4e:1b:27:75:d8:b2:08:f1:ae:83:30:
++ b9:11:0e:cd:87:f0:84:8d:15:72:7c:a1:ef:cc:f2:
++ 88:61:ba:f4:69:bb:0c:8c:0b:75:57:04:b8:4e:2a:
++ 14:2e:3d:0f:1c:1e:32:a6:62:36:ee:66:e2:22:b8:
++ 05:40:63:10:22:f3:33:1d:74:72:8a:2c:f5:39:29:
++ a0:d3:e7:1b:80:84:2d:c5:3d:e3:4d:b1:fd:1a:6f:
++ ba:65:07:3b:58:ec:42:45:26:fb:d8:da:25:72:c4:
++ f6:00:b1:22:79:bd:e3:7c:59:62:4a:9c:05:6f:3d:
++ ce:e6:d6:47:63:99:c6:24:6f:72:12:c8:ac:7f:90:
++ b4:0b:91:70:e8:b7:e6:16:10:71:17:ce:de:06:4f:
++ 48:41:7d:35:4a:a3:89:f2:c9:4b:7b:41:11:6d:67:
++ b7:08:98:4c:e5:11:19:ae:42:80:dc:fb:90:05:d4:
++ f8:50:ca:be:e4:ad:c7:c2:94:d7:16:9d:e6:17:8f:
++ af:36:fb
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 99:E0:19:67:0D:62:DB:76:B3:DA:3D:B8:5B:E8:FD:42:D2:31:0E:87
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ 98:73:70:e2:b0:d3:ed:39:ec:4c:60:d9:a9:12:86:17:1e:96:
++ d0:e8:54:28:3b:64:2d:21:a6:f8:9d:56:13:6a:48:3d:4f:c7:
++ 3e:29:db:6d:58:83:54:3d:87:7d:23:05:d4:e4:1c:dc:e8:38:
++ 65:86:c5:75:a7:5a:db:35:05:bd:77:de:bb:29:37:40:05:07:
++ c3:94:52:9f:ca:64:dd:f1:1b:2b:dc:46:0a:10:02:31:fd:4a:
++ 68:0d:07:64:90:e6:1e:f5:2a:a1:a8:bb:3c:5d:f9:a3:08:0b:
++ 11:0c:f1:3f:2d:10:94:6f:fe:e2:34:87:83:d6:cf:e5:1b:35:
++ 6d:d2:03:e1:b0:0d:a8:a0:aa:46:27:82:36:a7:15:b6:08:a6:
++ 42:54:57:b6:99:5a:e2:0b:79:90:d7:57:12:51:35:19:88:41:
++ 68:25:d4:37:17:84:15:fb:01:72:dc:95:de:52:26:20:98:26:
++ e2:76:f5:27:6f:fa:00:3b:4a:61:d9:0d:cb:51:93:2a:fd:16:
++ 06:96:a7:23:9a:23:48:fe:51:bd:b6:c4:b0:b1:54:ce:de:6c:
++ 41:ad:16:67:7e:db:fd:38:cd:b9:38:4e:b2:c1:60:cb:9d:17:
++ df:58:9e:7a:62:b2:26:8f:74:95:9b:e4:5b:1d:d2:0f:dd:98:
++ 1c:9b:59:b9:23:d3:31:a0:a6:ff:38:dd:cf:20:4f:e9:58:56:
++ 3a:67:c3:d1:f6:99:99:9d:ba:36:b6:80:2f:88:47:4f:86:bf:
++ 44:3a:80:e4:37:1c:a6:ba:ea:97:98:11:d0:84:62:47:64:1e:
++ aa:ee:40:bf:34:b1:9c:8f:4e:e1:f2:92:4f:1f:8e:f3:9e:97:
++ de:f3:a6:79:6a:89:71:4f:4b:27:17:48:fe:ec:f4:50:0f:4f:
++ 49:7d:cc:45:e3:bd:7a:40:c5:41:dc:61:56:27:06:69:e5:72:
++ 41:81:d3:b6:01:89:a0:2f:3a:72:79:fe:3a:30:bf:41:ec:c7:
++ 62:3e:91:4b:c7:d9:31:76:42:f9:f7:3c:63:ec:26:8c:73:0c:
++ 7d:1a:1d:ea:a8:7c:87:a8:c2:27:7c:e1:33:41:0f:cf:cf:fc:
++ 00:a0:22:80:9e:4a:a7:6f:00:b0:41:45:b7:22:ca:68:48:c5:
++ 42:a2:ae:dd:1d:f2:e0:6e:4e:05:58:b1:c0:90:16:2a:a4:3d:
++ 10:40:be:8f:62:63:83:a9:9c:82:7d:2d:02:e9:83:30:7c:cb:
++ 27:c9:fd:1e:66:00:b0:2e:d3:21:2f:8e:33:16:6c:98:ed:10:
++ a8:07:d6:cc:93:cf:db:d1:69:1c:e4:ca:c9:e0:b6:9c:e9:ce:
++ 71:71:de:6c:3f:16:a4:79
+ -----BEGIN CERTIFICATE-----
+ MIIF2jCCA8KgAwIBAgIMBfcOhtpJ80Y1LrqyMA0GCSqGSIb3DQEBCwUAMIGIMQsw
+ CQYDVQQGEwJVUzERMA8GA1UECAwISWxsaW5vaXMxEDAOBgNVBAcMB0NoaWNhZ28x
+@@ -3912,61 +6433,2000 @@ EEC+j2Jjg6mcgn0tAumDMHzLJ8n9HmYAsC7TIS+OMxZsmO0QqAfWzJPP29FpHOTK
+ yeC2nOnOcXHebD8WpHk=
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=Trustwave Global ECC P256 Certification Authority O=Trustwave Holdings, Inc.
+-# Subject: CN=Trustwave Global ECC P256 Certification Authority O=Trustwave Holdings, Inc.
+-# Label: "Trustwave Global ECC P256 Certification Authority"
+-# Serial: 4151900041497450638097112925
+-# MD5 Fingerprint: 5b:44:e3:8d:5d:36:86:26:e8:0d:05:d2:59:a7:83:54
+-# SHA1 Fingerprint: b4:90:82:dd:45:0c:be:8b:5b:b1:66:d3:e2:a4:08:26:cd:ed:42:cf
+-# SHA256 Fingerprint: 94:5b:bc:82:5e:a5:54:f4:89:d1:fd:51:a7:3d:df:2e:a6:24:ac:70:19:a0:52:05:22:5c:22:a7:8c:cf:a8:b4
++# f1c1b50ae5a20dd8030ec9f6bc24823dd367b5255759b4e71b61fce9f7375d73
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 0c:f0:8e:5c:08:16:a5:ad:42:7f:f0:eb:27:18:59:d0
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C = US, O = SecureTrust Corporation, CN = SecureTrust CA
++ Validity
++ Not Before: Nov 7 19:31:18 2006 GMT
++ Not After : Dec 31 19:40:55 2029 GMT
++ Subject: C = US, O = SecureTrust Corporation, CN = SecureTrust CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:ab:a4:81:e5:95:cd:f5:f6:14:8e:c2:4f:ca:d4:
++ e2:78:95:58:9c:41:e1:0d:99:40:24:17:39:91:33:
++ 66:e9:be:e1:83:af:62:5c:89:d1:fc:24:5b:61:b3:
++ e0:11:11:41:1c:1d:6e:f0:b8:bb:f8:de:a7:81:ba:
++ a6:48:c6:9f:1d:bd:be:8e:a9:41:3e:b8:94:ed:29:
++ 1a:d4:8e:d2:03:1d:03:ef:6d:0d:67:1c:57:d7:06:
++ ad:ca:c8:f5:fe:0e:af:66:25:48:04:96:0b:5d:a3:
++ ba:16:c3:08:4f:d1:46:f8:14:5c:f2:c8:5e:01:99:
++ 6d:fd:88:cc:86:a8:c1:6f:31:42:6c:52:3e:68:cb:
++ f3:19:34:df:bb:87:18:56:80:26:c4:d0:dc:c0:6f:
++ df:de:a0:c2:91:16:a0:64:11:4b:44:bc:1e:f6:e7:
++ fa:63:de:66:ac:76:a4:71:a3:ec:36:94:68:7a:77:
++ a4:b1:e7:0e:2f:81:7a:e2:b5:72:86:ef:a2:6b:8b:
++ f0:0f:db:d3:59:3f:ba:72:bc:44:24:9c:e3:73:b3:
++ f7:af:57:2f:42:26:9d:a9:74:ba:00:52:f2:4b:cd:
++ 53:7c:47:0b:36:85:0e:66:a9:08:97:16:34:57:c1:
++ 66:f7:80:e3:ed:70:54:c7:93:e0:2e:28:15:59:87:
++ ba:bb
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ 1.3.6.1.4.1.311.20.2:
++ ...C.A
++ X509v3 Key Usage:
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 42:32:B6:16:FA:04:FD:FE:5D:4B:7A:C3:FD:F7:4C:40:1D:5A:43:AF
++ X509v3 CRL Distribution Points:
++
++ Full Name:
++ URI:http://crl.securetrust.com/STCA.crl
++
++ 1.3.6.1.4.1.311.21.1:
++ ...
++ Signature Algorithm: sha1WithRSAEncryption
++ 30:ed:4f:4a:e1:58:3a:52:72:5b:b5:a6:a3:65:18:a6:bb:51:
++ 3b:77:e9:9d:ea:d3:9f:5c:e0:45:65:7b:0d:ca:5b:e2:70:50:
++ b2:94:05:14:ae:49:c7:8d:41:07:12:73:94:7e:0c:23:21:fd:
++ bc:10:7f:60:10:5a:72:f5:98:0e:ac:ec:b9:7f:dd:7a:6f:5d:
++ d3:1c:f4:ff:88:05:69:42:a9:05:71:c8:b7:ac:26:e8:2e:b4:
++ 8c:6a:ff:71:dc:b8:b1:df:99:bc:7c:21:54:2b:e4:58:a2:bb:
++ 57:29:ae:9e:a9:a3:19:26:0f:99:2e:08:b0:ef:fd:69:cf:99:
++ 1a:09:8d:e3:a7:9f:2b:c9:36:34:7b:24:b3:78:4c:95:17:a4:
++ 06:26:1e:b6:64:52:36:5f:60:67:d9:9c:c5:05:74:0b:e7:67:
++ 23:d2:08:fc:88:e9:ae:8b:7f:e1:30:f4:37:7e:fd:c6:32:da:
++ 2d:9e:44:30:30:6c:ee:07:de:d2:34:fc:d2:ff:40:f6:4b:f4:
++ 66:46:06:54:a6:f2:32:0a:63:26:30:6b:9b:d1:dc:8b:47:ba:
++ e1:b9:d5:62:d0:a2:a0:f4:67:05:78:29:63:1a:6f:04:d6:f8:
++ c6:4c:a3:9a:b1:37:b4:8d:e5:28:4b:1d:9e:2c:c2:b8:68:bc:
++ ed:02:ee:31
+ -----BEGIN CERTIFICATE-----
+-MIICYDCCAgegAwIBAgIMDWpfCD8oXD5Rld9dMAoGCCqGSM49BAMCMIGRMQswCQYD
+-VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf
+-BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3
+-YXZlIEdsb2JhbCBFQ0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x
+-NzA4MjMxOTM1MTBaFw00MjA4MjMxOTM1MTBaMIGRMQswCQYDVQQGEwJVUzERMA8G
+-A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0
+-d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF
+-Q0MgUDI1NiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTBZMBMGByqGSM49AgEGCCqG
+-SM49AwEHA0IABH77bOYj43MyCMpg5lOcunSNGLB4kFKA3TjASh3RqMyTpJcGOMoN
+-FWLGjgEqZZ2q3zSRLoHB5DOSMcT9CTqmP62jQzBBMA8GA1UdEwEB/wQFMAMBAf8w
+-DwYDVR0PAQH/BAUDAwcGADAdBgNVHQ4EFgQUo0EGrJBt0UrrdaVKEJmzsaGLSvcw
+-CgYIKoZIzj0EAwIDRwAwRAIgB+ZU2g6gWrKuEZ+Hxbb/ad4lvvigtwjzRM4q3wgh
+-DDcCIC0mA6AFvWvR9lz4ZcyGbbOcNEhjhAnFjXca4syc4XR7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=
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=Trustwave Global ECC P384 Certification Authority O=Trustwave Holdings, Inc.
+-# Subject: CN=Trustwave Global ECC P384 Certification Authority O=Trustwave Holdings, Inc.
+-# Label: "Trustwave Global ECC P384 Certification Authority"
+-# Serial: 2704997926503831671788816187
+-# MD5 Fingerprint: ea:cf:60:c4:3b:b9:15:29:40:a1:97:ed:78:27:93:d6
+-# SHA1 Fingerprint: e7:f3:a3:c8:cf:6f:c3:04:2e:6d:0e:67:32:c5:9e:68:95:0d:5e:d2
+-# SHA256 Fingerprint: 55:90:38:59:c8:c0:c3:eb:b8:75:9e:ce:4e:25:57:22:5f:f5:75:8b:bd:38:eb:d4:82:76:60:1e:1b:d5:80:97
++# 9bea11c976fe014764c1be56a6f914b5a560317abd9988393382e5161aa0493c
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 5d:df:b1:da:5a:a3:ed:5d:be:5a:65:20:65:03:90:ef
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = CN, O = UniTrust, CN = UCA Global G2 Root
++ Validity
++ Not Before: Mar 11 00:00:00 2016 GMT
++ Not After : Dec 31 00:00:00 2040 GMT
++ Subject: C = CN, O = UniTrust, CN = UCA Global G2 Root
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:c5:e6:2b:6f:7c:ef:26:05:27:a3:81:24:da:6f:
++ cb:01:f9:99:9a:a9:32:c2:22:87:61:41:91:3b:cb:
++ c3:68:1b:06:c5:4c:a9:2b:c1:67:17:22:1d:2b:ed:
++ f9:29:89:93:a2:78:bd:92:6b:a0:a3:0d:a2:7e:ca:
++ 93:b3:a6:d1:8c:35:d5:75:f9:17:f6:cf:45:c5:e5:
++ 7a:ec:77:93:a0:8f:23:ae:0e:1a:03:7f:be:d4:d0:
++ ed:2e:7b:ab:46:23:5b:ff:2c:e6:54:7a:94:c0:2a:
++ 15:f0:c9:8d:b0:7a:3b:24:e1:d7:68:e2:31:3c:06:
++ 33:46:b6:54:11:a6:a5:2f:22:54:2a:58:0d:01:02:
++ f1:fa:15:51:67:6c:c0:fa:d7:b6:1b:7f:d1:56:88:
++ 2f:1a:3a:8d:3b:bb:82:11:e0:47:00:d0:52:87:ab:
++ fb:86:7e:0f:24:6b:40:9d:34:67:bc:8d:c7:2d:86:
++ 6f:79:3e:8e:a9:3c:17:4b:7f:b0:99:e3:b0:71:60:
++ dc:0b:f5:64:c3:ce:43:bc:6d:71:b9:d2:de:27:5b:
++ 8a:e8:d8:c6:ae:e1:59:7d:cf:28:2d:35:b8:95:56:
++ 1a:f1:b2:58:4b:b7:12:37:c8:7c:b3:ed:4b:80:e1:
++ 8d:fa:32:23:b6:6f:b7:48:95:08:b1:44:4e:85:8c:
++ 3a:02:54:20:2f:df:bf:57:4f:3b:3a:90:21:d7:c1:
++ 26:35:54:20:ec:c7:3f:47:ec:ef:5a:bf:4b:7a:c1:
++ ad:3b:17:50:5c:62:d8:0f:4b:4a:dc:2b:fa:6e:bc:
++ 73:92:cd:ec:c7:50:e8:41:96:d7:a9:7e:6d:d8:e9:
++ 1d:8f:8a:b5:b9:58:92:ba:4a:92:2b:0c:56:fd:80:
++ eb:08:f0:5e:29:6e:1b:1c:0c:af:8f:93:89:ad:db:
++ bd:a3:9e:21:ca:89:19:ec:df:b5:c3:1a:eb:16:fe:
++ 78:36:4c:d6:6e:d0:3e:17:1c:90:17:6b:26:ba:fb:
++ 7a:2f:bf:11:1c:18:0e:2d:73:03:8f:a0:e5:35:a0:
++ 5a:e2:4c:75:1d:71:e1:39:38:53:78:40:cc:83:93:
++ d7:0a:9e:9d:5b:8f:8a:e4:e5:e0:48:e4:48:b2:47:
++ cd:4e:2a:75:2a:7b:f2:22:f6:c9:be:09:91:96:57:
++ 7a:88:88:ac:ee:70:ac:f9:dc:29:e3:0c:1c:3b:12:
++ 4e:44:d6:a7:4e:b0:26:c8:f3:d9:1a:97:91:68:ea:
++ ef:8d:46:06:d2:56:45:58:9a:3c:0c:0f:83:b8:05:
++ 25:c3:39:cf:3b:a4:34:89:b7:79:12:2f:47:c5:e7:
++ a9:97:69:fc:a6:77:67:b5:df:7b:f1:7a:65:15:e4:
++ 61:56:65
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 81:C4:8C:CC:F5:E4:30:FF:A5:0C:08:5F:8C:15:67:21:74:01:DF:DF
++ Signature Algorithm: sha256WithRSAEncryption
++ 13:65:22:f5:8e:2b:ad:44:e4:cb:ff:b9:68:e6:c3:80:48:3d:
++ 04:7b:fa:23:2f:7a:ed:36:da:b2:ce:6d:f6:e6:9e:e5:5f:58:
++ 8f:cb:37:32:a1:c8:65:b6:ae:38:3d:35:1b:3e:bc:3b:b6:04:
++ d0:bc:f9:49:f5:9b:f7:85:c5:36:b6:cb:bc:f8:c8:39:d5:e4:
++ 5f:07:bd:15:54:97:74:ca:ca:ed:4f:ba:ba:64:76:9f:81:b8:
++ 84:45:49:4c:8d:6f:a2:eb:b1:cc:d1:c3:94:da:44:c2:e6:e2:
++ ea:18:e8:a2:1f:27:05:ba:d7:e5:d6:a9:cd:dd:ef:76:98:8d:
++ 00:0e:cd:1b:fa:03:b7:8e:80:58:0e:27:3f:52:fb:94:a2:ca:
++ 5e:65:c9:d6:84:da:b9:35:71:f3:26:c0:4f:77:e6:81:27:d2:
++ 77:3b:9a:14:6f:79:f4:f6:d0:e1:d3:94:ba:d0:57:51:bd:27:
++ 05:0d:c1:fd:c8:12:30:ee:6f:8d:11:2b:08:9d:d4:d4:bf:80:
++ 45:14:9a:88:44:da:30:ea:b4:a7:e3:ee:ef:5b:82:d5:3e:d6:
++ ad:78:92:db:5c:3c:f3:d8:ad:fa:b8:6b:7f:c4:36:28:b6:02:
++ 15:8a:54:2c:9c:b0:17:73:8e:d0:37:a3:14:3c:98:95:00:0c:
++ 29:05:5b:9e:49:49:b1:5f:c7:e3:cb:cf:27:65:8e:35:17:b7:
++ 57:c8:30:d9:41:5b:b9:14:b6:e8:c2:0f:94:31:a7:94:98:cc:
++ 6a:eb:b5:e1:27:f5:10:a8:01:e8:8e:12:62:e8:88:cc:b5:7f:
++ 46:97:c0:9b:10:66:38:1a:36:46:5f:22:68:3d:df:c9:c6:13:
++ 27:ab:53:06:ac:a2:3c:86:06:65:6f:b1:7e:b1:29:44:9a:a3:
++ ba:49:69:28:69:8f:d7:e5:5f:ad:04:86:64:6f:1a:a0:0c:c5:
++ 08:62:ce:80:a3:d0:f3:ec:68:de:be:33:c7:17:5b:7f:80:c4:
++ 4c:4c:b1:a6:84:8a:c3:3b:b8:09:cd:14:81:ba:18:e3:54:57:
++ 36:fe:db:2f:7c:47:a1:3a:33:c8:f9:58:3b:44:4f:b1:ca:02:
++ 89:04:96:28:68:c5:4b:b8:26:89:bb:d6:33:2f:50:d5:fe:9a:
++ 89:ba:18:32:92:54:c6:5b:e0:9d:f9:5e:e5:0d:22:9b:f6:da:
++ e2:c8:21:b2:62:21:aa:86:40:b2:2e:64:d3:5f:c8:e3:7e:11:
++ 67:45:1f:05:fe:e3:a2:ef:b3:a8:b3:f3:7d:8f:f8:0c:1f:22:
++ 1f:2d:70:b4:b8:01:34:76:30:00:e5:23:78:a7:56:d7:50:1f:
++ 8a:fb:06:f5:c2:19:f0:d0
+ -----BEGIN CERTIFICATE-----
+-MIICnTCCAiSgAwIBAgIMCL2Fl2yZJ6SAaEc7MAoGCCqGSM49BAMDMIGRMQswCQYD
+-VQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAf
+-BgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3
+-YXZlIEdsb2JhbCBFQ0MgUDM4NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0x
+-NzA4MjMxOTM2NDNaFw00MjA4MjMxOTM2NDNaMIGRMQswCQYDVQQGEwJVUzERMA8G
+-A1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xITAfBgNVBAoTGFRydXN0
+-d2F2ZSBIb2xkaW5ncywgSW5jLjE6MDgGA1UEAxMxVHJ1c3R3YXZlIEdsb2JhbCBF
+-Q0MgUDM4NCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTB2MBAGByqGSM49AgEGBSuB
+-BAAiA2IABGvaDXU1CDFHBa5FmVXxERMuSvgQMSOjfoPTfygIOiYaOs+Xgh+AtycJ
+-j9GOMMQKmw6sWASr9zZ9lCOkmwqKi6vr/TklZvFe/oyujUF5nQlgziip04pt89ZF
+-1PKYhDhloKNDMEEwDwYDVR0TAQH/BAUwAwEB/zAPBgNVHQ8BAf8EBQMDBwYAMB0G
+-A1UdDgQWBBRVqYSJ0sEyvRjLbKYHTsjnnb6CkDAKBggqhkjOPQQDAwNnADBkAjA3
+-AZKXRRJ+oPM+rRk6ct30UJMDEr5E0k9BpIycnR+j9sKS50gU/k6bpZFXrsY3crsC
+-MGclCrEMXu6pY5Jv5ZAL/mYiykf9ijH3g/56vxC+GCsej/YpHpRZ744hN8tRmKVu
+-Sw==
++MIIFRjCCAy6gAwIBAgIQXd+x2lqj7V2+WmUgZQOQ7zANBgkqhkiG9w0BAQsFADA9
++MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxGzAZBgNVBAMMElVDQSBH
++bG9iYWwgRzIgUm9vdDAeFw0xNjAzMTEwMDAwMDBaFw00MDEyMzEwMDAwMDBaMD0x
++CzAJBgNVBAYTAkNOMREwDwYDVQQKDAhVbmlUcnVzdDEbMBkGA1UEAwwSVUNBIEds
++b2JhbCBHMiBSb290MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxeYr
++b3zvJgUno4Ek2m/LAfmZmqkywiKHYUGRO8vDaBsGxUypK8FnFyIdK+35KYmToni9
++kmugow2ifsqTs6bRjDXVdfkX9s9FxeV67HeToI8jrg4aA3++1NDtLnurRiNb/yzm
++VHqUwCoV8MmNsHo7JOHXaOIxPAYzRrZUEaalLyJUKlgNAQLx+hVRZ2zA+te2G3/R
++VogvGjqNO7uCEeBHANBSh6v7hn4PJGtAnTRnvI3HLYZveT6OqTwXS3+wmeOwcWDc
++C/Vkw85DvG1xudLeJ1uK6NjGruFZfc8oLTW4lVYa8bJYS7cSN8h8s+1LgOGN+jIj
++tm+3SJUIsUROhYw6AlQgL9+/V087OpAh18EmNVQg7Mc/R+zvWr9LesGtOxdQXGLY
++D0tK3Cv6brxzks3sx1DoQZbXqX5t2Okdj4q1uViSukqSKwxW/YDrCPBeKW4bHAyv
++j5OJrdu9o54hyokZ7N+1wxrrFv54NkzWbtA+FxyQF2smuvt6L78RHBgOLXMDj6Dl
++NaBa4kx1HXHhOThTeEDMg5PXCp6dW4+K5OXgSORIskfNTip1KnvyIvbJvgmRlld6
++iIis7nCs+dwp4wwcOxJORNanTrAmyPPZGpeRaOrvjUYG0lZFWJo8DA+DuAUlwznP
++O6Q0ibd5Ei9Hxeepl2n8pndntd978XplFeRhVmUCAwEAAaNCMEAwDgYDVR0PAQH/
++BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFIHEjMz15DD/pQwIX4wV
++ZyF0Ad/fMA0GCSqGSIb3DQEBCwUAA4ICAQATZSL1jiutROTL/7lo5sOASD0Ee/oj
++L3rtNtqyzm325p7lX1iPyzcyochltq44PTUbPrw7tgTQvPlJ9Zv3hcU2tsu8+Mg5
++1eRfB70VVJd0ysrtT7q6ZHafgbiERUlMjW+i67HM0cOU2kTC5uLqGOiiHycFutfl
++1qnN3e92mI0ADs0b+gO3joBYDic/UvuUospeZcnWhNq5NXHzJsBPd+aBJ9J3O5oU
++b3n09tDh05S60FdRvScFDcH9yBIw7m+NESsIndTUv4BFFJqIRNow6rSn4+7vW4LV
++PtateJLbXDzz2K36uGt/xDYotgIVilQsnLAXc47QN6MUPJiVAAwpBVueSUmxX8fj
++y88nZY41F7dXyDDZQVu5FLbowg+UMaeUmMxq67XhJ/UQqAHojhJi6IjMtX9Gl8Cb
++EGY4GjZGXyJoPd/JxhMnq1MGrKI8hgZlb7F+sSlEmqO6SWkoaY/X5V+tBIZkbxqg
++DMUIYs6Ao9Dz7GjevjPHF1t/gMRMTLGmhIrDO7gJzRSBuhjjVFc2/tsvfEehOjPI
+++Vg7RE+xygKJBJYoaMVLuCaJu9YzL1DV/pqJuhgyklTGW+Cd+V7lDSKb9triyCGy
++YiGqhkCyLmTTX8jjfhFnRR8F/uOi77Oos/N9j/gMHyIfLXC0uAE0djAA5SN4p1bX
++UB+K+wb1whnw0A==
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=NAVER Global Root Certification Authority O=NAVER BUSINESS PLATFORM Corp.
+-# Subject: CN=NAVER Global Root Certification Authority O=NAVER BUSINESS PLATFORM Corp.
+-# Label: "NAVER Global Root Certification Authority"
+-# Serial: 9013692873798656336226253319739695165984492813
+-# MD5 Fingerprint: c8:7e:41:f6:25:3b:f5:09:b3:17:e8:46:3d:bf:d0:9b
+-# SHA1 Fingerprint: 8f:6b:f2:a9:27:4a:da:14:a0:c4:f4:8e:61:27:f9:c0:1e:78:5d:d1
+-# SHA256 Fingerprint: 88:f4:38:dc:f8:ff:d1:fa:8f:42:91:15:ff:e5:f8:2a:e1:e0:6e:0c:70:c3:75:fa:ad:71:7b:34:a4:9e:72:65
++# d43af9b35473755c9684fc06d7d8cb70ee5c28e773fb294eb41ee71722924d24
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 4f:d2:2b:8f:f5:64:c8:33:9e:4f:34:58:66:23:70:60
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = CN, O = UniTrust, CN = UCA Extended Validation Root
++ Validity
++ Not Before: Mar 13 00:00:00 2015 GMT
++ Not After : Dec 31 00:00:00 2038 GMT
++ Subject: C = CN, O = UniTrust, CN = UCA Extended Validation Root
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:a9:09:07:28:13:02:b0:99:e0:64:aa:1e:43:16:
++ 7a:73:b1:91:a0:75:3e:a8:fa:e3:38:00:7a:ec:89:
++ 6a:20:0f:8b:c5:b0:9b:33:03:5a:86:c6:58:86:d5:
++ c1:85:bb:4f:c6:9c:40:4d:ca:be:ee:69:96:b8:ad:
++ 81:30:9a:7c:92:05:eb:05:2b:9a:48:d0:b8:76:3e:
++ 96:c8:20:bb:d2:b0:f1:8f:d8:ac:45:46:ff:aa:67:
++ 60:b4:77:7e:6a:1f:3c:1a:52:7a:04:3d:07:3c:85:
++ 0d:84:d0:1f:76:0a:f7:6a:14:df:72:e3:34:7c:57:
++ 4e:56:01:3e:79:f1:aa:29:3b:6c:fa:f8:8f:6d:4d:
++ c8:35:df:ae:eb:dc:24:ee:79:45:a7:85:b6:05:88:
++ de:88:5d:25:7c:97:64:67:09:d9:bf:5a:15:05:86:
++ f3:09:1e:ec:58:32:33:11:f3:77:64:b0:76:1f:e4:
++ 10:35:17:1b:f2:0e:b1:6c:a4:2a:a3:73:fc:09:1f:
++ 1e:32:19:53:11:e7:d9:b3:2c:2e:76:2e:a1:a3:de:
++ 7e:6a:88:09:e8:f2:07:8a:f8:b2:cd:10:e7:e2:73:
++ 40:93:bb:08:d1:3f:e1:fc:0b:94:b3:25:ef:7c:a6:
++ d7:d1:af:9f:ff:96:9a:f5:91:7b:98:0b:77:d4:7e:
++ e8:07:d2:62:b5:95:39:e3:f3:f1:6d:0f:0e:65:84:
++ 8a:63:54:c5:80:b6:e0:9e:4b:7d:47:26:a7:01:08:
++ 5d:d1:88:9e:d7:c3:32:44:fa:82:4a:0a:68:54:7f:
++ 38:53:03:cc:a4:00:33:64:51:59:0b:a3:82:91:7a:
++ 5e:ec:16:c2:f3:2a:e6:62:da:2a:db:59:62:10:25:
++ 4a:2a:81:0b:47:07:43:06:70:87:d2:fa:93:11:29:
++ 7a:48:4d:eb:94:c7:70:4d:af:67:d5:51:b1:80:20:
++ 01:01:b4:7a:08:a6:90:7f:4e:e0:ef:07:41:87:af:
++ 6a:a5:5e:8b:fb:cf:50:b2:9a:54:af:c3:89:ba:58:
++ 2d:f5:30:98:b1:36:72:39:7e:49:04:fd:29:a7:4c:
++ 79:e4:05:57:db:94:b9:16:53:8d:46:b3:1d:95:61:
++ 57:56:7f:af:f0:16:5b:61:58:6f:36:50:11:0b:d8:
++ ac:2b:95:16:1a:0e:1f:08:cd:36:34:65:10:62:66:
++ d5:80:5f:14:20:5f:2d:0c:a0:78:0a:68:d6:2c:d7:
++ e9:6f:2b:d2:4a:05:93:fc:9e:6f:6b:67:ff:88:f1:
++ 4e:a5:69:4a:52:37:05:ea:c6:16:8d:d2:c4:99:d1:
++ 82:2b:3b:ba:35:75:f7:51:51:58:f3:c8:07:dd:e4:
++ b4:03:7f
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ D9:74:3A:E4:30:3D:0D:F7:12:DC:7E:5A:05:9F:1E:34:9A:F7:E1:14
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ 36:8d:97:cc:42:15:64:29:37:9b:26:2c:d6:fb:ae:15:69:2c:
++ 6b:1a:1a:f7:5f:b6:f9:07:4c:59:ea:f3:c9:c8:b9:ae:cc:ba:
++ 2e:7a:dc:c0:f5:b0:2d:c0:3b:af:9f:70:05:11:6a:9f:25:4f:
++ 01:29:70:e3:e5:0c:e1:ea:5a:7c:dc:49:bb:c1:1e:2a:81:f5:
++ 16:4b:72:91:c8:a2:31:b9:aa:da:fc:9d:1f:f3:5d:40:02:13:
++ fc:4e:1c:06:ca:b3:14:90:54:17:19:12:1a:f1:1f:d7:0c:69:
++ 5a:f6:71:78:f4:94:7d:91:0b:8e:ec:90:54:8e:bc:6f:a1:4c:
++ ab:fc:74:64:fd:71:9a:f8:41:07:a1:cd:91:e4:3c:9a:e0:9b:
++ 32:39:73:ab:2a:d5:69:c8:78:91:26:31:7d:e2:c7:30:f1:fc:
++ 14:78:77:12:0e:13:f4:dd:16:94:bf:4b:67:7b:70:53:85:ca:
++ b0:bb:f3:38:4d:2c:90:39:c0:0d:c2:5d:6b:e9:e2:e5:d5:88:
++ 8d:d6:2c:bf:ab:1b:be:b5:28:87:12:17:74:6e:fc:7d:fc:8f:
++ d0:87:26:b0:1b:fb:b9:6c:ab:e2:9e:3d:15:c1:3b:2e:67:02:
++ 58:91:9f:ef:f8:42:1f:2c:b7:68:f5:75:ad:cf:b5:f6:ff:11:
++ 7d:c2:f0:24:a5:ad:d3:fa:a0:3c:a9:fa:5d:dc:a5:a0:ef:44:
++ a4:be:d6:e8:e5:e4:13:96:17:7b:06:3e:32:ed:c7:b7:42:bc:
++ 76:a3:d8:65:38:2b:38:35:51:21:0e:0e:6f:2e:34:13:40:e1:
++ 2b:67:0c:6d:4a:41:30:18:23:5a:32:55:99:c9:17:e0:3c:de:
++ f6:ec:79:ad:2b:58:19:a2:ad:2c:22:1a:95:8e:be:96:90:5d:
++ 42:57:c4:f9:14:03:35:2b:1c:2d:51:57:08:a7:3a:de:3f:e4:
++ c8:b4:03:73:c2:c1:26:80:bb:0b:42:1f:ad:0d:af:26:72:da:
++ cc:be:b3:a3:83:58:0d:82:c5:1f:46:51:e3:9c:18:cc:8d:9b:
++ 8d:ec:49:eb:75:50:d5:8c:28:59:ca:74:34:da:8c:0b:21:ab:
++ 1e:ea:1b:e5:c7:fd:15:3e:c0:17:aa:fb:23:6e:26:46:cb:fa:
++ f9:b1:72:6b:69:cf:22:84:0b:62:0f:ac:d9:19:00:94:a2:76:
++ 3c:d4:2d:9a:ed:04:9e:2d:06:62:10:37:52:1c:85:72:1b:27:
++ e5:cc:c6:31:ec:37:ec:63:59:9b:0b:1d:76:cc:7e:32:9a:88:
++ 95:08:36:52:bb:de:76:5f:76:49:49:ad:7f:bd:65:20:b2:c9:
++ c1:2b:76:18:76:9f:56:b1
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 22a2c1f7bded704cc1e701b5f408c310880fe956b5de2a4a44f99c873a25a7c8
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 3182246526754555285 (0x2c299c5b16ed0595)
++ Signature Algorithm: ecdsa-with-SHA256
++ Issuer: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com EV Root Certification Authority ECC
++ Validity
++ Not Before: Feb 12 18:15:23 2016 GMT
++ Not After : Feb 12 18:15:23 2041 GMT
++ Subject: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com EV Root Certification Authority ECC
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:aa:12:47:90:98:1b:fb:ef:c3:40:07:83:20:4e:
++ f1:30:82:a2:06:d1:f2:92:86:61:f2:f6:21:68:ca:
++ 00:c4:c7:ea:43:00:54:86:dc:fd:1f:df:00:b8:41:
++ 62:5c:dc:70:16:32:de:1f:99:d4:cc:c5:07:c8:08:
++ 1f:61:16:07:51:3d:7d:5c:07:53:e3:35:38:8c:df:
++ cd:9f:d9:2e:0d:4a:b6:19:2e:5a:70:5a:06:ed:be:
++ f0:a1:b0:ca:d0:09:29
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 5B:CA:5E:E5:DE:D2:81:AA:CD:A8:2D:64:51:B6:D9:72:9B:97:E6:4F
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ keyid:5B:CA:5E:E5:DE:D2:81:AA:CD:A8:2D:64:51:B6:D9:72:9B:97:E6:4F
++
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: ecdsa-with-SHA256
++ 30:65:02:31:00:8a:e6:40:89:37:eb:e9:d5:13:d9:ca:d4:6b:
++ 24:f3:b0:3d:87:46:58:1a:ec:b1:df:6f:fb:56:ba:70:6b:c7:
++ 38:cc:e8:b1:8c:4f:0f:f7:f1:67:76:0e:83:d0:1e:51:8f:02:
++ 30:3d:f6:23:28:26:4c:c6:60:87:93:26:9b:b2:35:1e:ba:d6:
++ f7:3c:d1:1c:ce:fa:25:3c:a6:1a:81:15:5b:f3:12:0f:6c:ee:
++ 65:8a:c9:87:a8:f9:07:e0:62:9a:8c:5c:4a
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 2e7bf16cc22485a7bbe2aa8696750761b0ae39be3b2fe9d0cc6d4ef73491425c
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 6248227494352943350 (0x56b629cd34bc78f6)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com EV Root Certification Authority RSA R2
++ Validity
++ Not Before: May 31 18:14:37 2017 GMT
++ Not After : May 30 18:14:37 2042 GMT
++ Subject: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com EV Root Certification Authority RSA R2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:8f:36:65:40:e1:d6:4d:c0:d7:b4:e9:46:da:6b:
++ ea:33:47:cd:4c:f9:7d:7d:be:bd:2d:3d:f0:db:78:
++ e1:86:a5:d9:ba:09:57:68:ed:57:3e:a0:d0:08:41:
++ 83:e7:28:41:24:1f:e3:72:15:d0:01:1a:fb:5e:70:
++ 23:b2:cb:9f:39:e3:cf:c5:4e:c6:92:6d:26:c6:7b:
++ bb:b3:da:27:9d:0a:86:e9:81:37:05:fe:f0:71:71:
++ ec:c3:1c:e9:63:a2:17:14:9d:ef:1b:67:d3:85:55:
++ 02:02:d6:49:c9:cc:5a:e1:b1:f7:6f:32:9f:c9:d4:
++ 3b:88:41:a8:9c:bd:cb:ab:db:6d:7b:09:1f:a2:4c:
++ 72:90:da:2b:08:fc:cf:3c:54:ce:67:0f:a8:cf:5d:
++ 96:19:0b:c4:e3:72:eb:ad:d1:7d:1d:27:ef:92:eb:
++ 10:bf:5b:eb:3b:af:cf:80:dd:c1:d2:96:04:5b:7a:
++ 7e:a4:a9:3c:38:76:a4:62:8e:a0:39:5e:ea:77:cf:
++ 5d:00:59:8f:66:2c:3e:07:a2:a3:05:26:11:69:97:
++ ea:85:b7:0f:96:0b:4b:c8:40:e1:50:ba:2e:8a:cb:
++ f7:0f:9a:22:e7:7f:9a:37:13:cd:f2:4d:13:6b:21:
++ d1:c0:cc:22:f2:a1:46:f6:44:69:9c:ca:61:35:07:
++ 00:6f:d6:61:08:11:ea:ba:b8:f6:e9:b3:60:e5:4d:
++ b9:ec:9f:14:66:c9:57:58:db:cd:87:69:f8:8a:86:
++ 12:03:47:bf:66:13:76:ac:77:7d:34:24:85:83:cd:
++ d7:aa:9c:90:1a:9f:21:2c:7f:78:b7:64:b8:d8:e8:
++ a6:f4:78:b3:55:cb:84:d2:32:c4:78:ae:a3:8f:61:
++ dd:ce:08:53:ad:ec:88:fc:15:e4:9a:0d:e6:9f:1a:
++ 77:ce:4c:8f:b8:14:15:3d:62:9c:86:38:06:00:66:
++ 12:e4:59:76:5a:53:c0:02:98:a2:10:2b:68:44:7b:
++ 8e:79:ce:33:4a:76:aa:5b:81:16:1b:b5:8a:d8:d0:
++ 00:7b:5e:62:b4:09:d6:86:63:0e:a6:05:95:49:ba:
++ 28:8b:88:93:b2:34:1c:d8:a4:55:6e:b7:1c:d0:de:
++ 99:55:3b:23:f4:22:e0:f9:29:66:26:ec:20:50:77:
++ db:4a:0b:8f:be:e5:02:60:70:41:5e:d4:ae:50:39:
++ 22:14:26:cb:b2:3b:73:74:55:47:07:79:81:39:a8:
++ 30:13:44:e5:04:8a:ae:96:13:25:42:0f:b9:53:c4:
++ 9b:fc:cd:e4:1c:de:3c:fa:ab:d6:06:4a:1f:67:a6:
++ 98:30:1c:dd:2c:db:dc:18:95:57:66:c6:ff:5c:8b:
++ 56:f5:77
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ keyid:F9:60:BB:D4:E3:D5:34:F6:B8:F5:06:80:25:A7:73:DB:46:69:A8:9E
++
++ X509v3 Subject Key Identifier:
++ F9:60:BB:D4:E3:D5:34:F6:B8:F5:06:80:25:A7:73:DB:46:69:A8:9E
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ 56:b3:8e:cb:0a:9d:49:8e:bf:a4:c4:91:bb:66:17:05:51:98:
++ 75:fb:e5:50:2c:7a:9e:f1:14:fa:ab:d3:8a:3e:ff:91:29:8f:
++ 63:8b:d8:b4:a9:54:01:0d:be:93:86:2f:f9:4a:6d:c7:5e:f5:
++ 57:f9:ca:55:1c:12:be:47:0f:36:c5:df:6a:b7:db:75:c2:47:
++ 25:7f:b9:f1:63:f8:68:2d:55:04:d1:f2:8d:b0:a4:cf:bc:3c:
++ 5e:1f:78:e7:a5:a0:20:70:b0:04:c5:b7:f7:72:a7:de:22:0d:
++ bd:33:25:46:8c:64:92:26:e3:3e:2e:63:96:da:9b:8c:3d:f8:
++ 18:09:d7:03:cc:7d:86:82:e0:ca:04:07:51:50:d7:ff:92:d5:
++ 0c:ef:da:86:9f:99:d7:eb:b7:af:68:e2:39:26:94:ba:68:b7:
++ bf:83:d3:ea:7a:67:3d:62:67:ae:25:e5:72:e8:e2:e4:ec:ae:
++ 12:f6:4b:2b:3c:9f:e9:b0:40:f3:38:54:b3:fd:b7:68:c8:da:
++ c6:8f:51:3c:b2:fb:91:dc:1c:e7:9b:9d:e1:b7:0d:72:8f:e2:
++ a4:c4:a9:78:f9:eb:14:ac:c6:43:05:c2:65:39:28:18:02:c3:
++ 82:b2:9d:05:be:65:ed:96:5f:65:74:3c:fb:09:35:2e:7b:9c:
++ 13:fd:1b:0f:5d:c7:6d:81:3a:56:0f:cc:3b:e1:af:02:2f:22:
++ ac:46:ca:46:3c:a0:1c:4c:d6:44:b4:5e:2e:5c:15:66:09:e1:
++ 26:29:fe:c6:52:61:ba:b1:73:ff:c3:0c:9c:e5:6c:6a:94:3f:
++ 14:ca:40:16:95:84:f3:59:a9:ac:5f:4c:61:93:6d:d1:3b:cc:
++ a2:95:0c:22:a6:67:67:44:2e:b9:d9:d2:8a:41:b3:66:0b:5a:
++ fb:7d:23:a5:f2:1a:b0:ff:de:9b:83:94:2e:d1:3f:df:92:b7:
++ 91:af:05:3b:65:c7:a0:6c:b1:cd:62:12:c3:90:1b:e3:25:ce:
++ 34:bc:6f:77:76:b1:10:c3:f7:05:1a:c0:d6:af:74:62:48:17:
++ 77:92:69:90:61:1c:de:95:80:74:54:8f:18:1c:c3:f3:03:d0:
++ bf:a4:43:75:86:53:18:7a:0a:2e:09:1c:36:9f:91:fd:82:8a:
++ 22:4b:d1:0e:50:25:dd:cb:03:0c:17:c9:83:00:08:4e:35:4d:
++ 8a:8b:ed:f0:02:94:66:2c:44:7f:cb:95:27:96:17:ad:09:30:
++ ac:b6:71:17:6e:8b:17:f6:1c:09:d4:2d:3b:98:a5:71:d3:54:
++ 13:d9:60:f3:f5:4b:66:4f:fa:f1:ee:20:12:8d:b4:ac:57:b1:
++ 45:63:a1:ac:76:a9:c2:fb
++-----BEGIN CERTIFICATE-----
++MIIF6zCCA9OgAwIBAgIIVrYpzTS8ePYwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNV
++BAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4GA1UEBwwHSG91c3RvbjEYMBYGA1UE
++CgwPU1NMIENvcnBvcmF0aW9uMTcwNQYDVQQDDC5TU0wuY29tIEVWIFJvb3QgQ2Vy
++dGlmaWNhdGlvbiBBdXRob3JpdHkgUlNBIFIyMB4XDTE3MDUzMTE4MTQzN1oXDTQy
++MDUzMDE4MTQzN1owgYIxCzAJBgNVBAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEQMA4G
++A1UEBwwHSG91c3RvbjEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMTcwNQYDVQQD
++DC5TU0wuY29tIEVWIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgUlNBIFIy
++MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAjzZlQOHWTcDXtOlG2mvq
++M0fNTPl9fb69LT3w23jhhqXZuglXaO1XPqDQCEGD5yhBJB/jchXQARr7XnAjssuf
++OePPxU7Gkm0mxnu7s9onnQqG6YE3Bf7wcXHswxzpY6IXFJ3vG2fThVUCAtZJycxa
++4bH3bzKfydQ7iEGonL3Lq9ttewkfokxykNorCPzPPFTOZw+oz12WGQvE43LrrdF9
++HSfvkusQv1vrO6/PgN3B0pYEW3p+pKk8OHakYo6gOV7qd89dAFmPZiw+B6KjBSYR
++aZfqhbcPlgtLyEDhULouisv3D5oi53+aNxPN8k0TayHRwMwi8qFG9kRpnMphNQcA
++b9ZhCBHqurj26bNg5U257J8UZslXWNvNh2n4ioYSA0e/ZhN2rHd9NCSFg83XqpyQ
++Gp8hLH94t2S42Oim9HizVcuE0jLEeK6jj2HdzghTreyI/BXkmg3mnxp3zkyPuBQV
++PWKchjgGAGYS5Fl2WlPAApiiECtoRHuOec4zSnaqW4EWG7WK2NAAe15itAnWhmMO
++pgWVSbooi4iTsjQc2KRVbrcc0N6ZVTsj9CLg+SlmJuwgUHfbSguPvuUCYHBBXtSu
++UDkiFCbLsjtzdFVHB3mBOagwE0TlBIqulhMlQg+5U8Sb/M3kHN48+qvWBkofZ6aY
++MBzdLNvcGJVXZsb/XItW9XcCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAfBgNV
++HSMEGDAWgBT5YLvU49U09rj1BoAlp3PbRmmonjAdBgNVHQ4EFgQU+WC71OPVNPa4
++9QaAJadz20ZpqJ4wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQBW
++s47LCp1Jjr+kxJG7ZhcFUZh1++VQLHqe8RT6q9OKPv+RKY9ji9i0qVQBDb6Thi/5
++Sm3HXvVX+cpVHBK+Rw82xd9qt9t1wkclf7nxY/hoLVUE0fKNsKTPvDxeH3jnpaAg
++cLAExbf3cqfeIg29MyVGjGSSJuM+LmOW2puMPfgYCdcDzH2GguDKBAdRUNf/ktUM
++79qGn5nX67evaOI5JpS6aLe/g9Pqemc9YmeuJeVy6OLk7K4S9ksrPJ/psEDzOFSz
++/bdoyNrGj1E8svuR3Bznm53htw1yj+KkxKl4+esUrMZDBcJlOSgYAsOCsp0FvmXt
++ll9ldDz7CTUue5wT/RsPXcdtgTpWD8w74a8CLyKsRspGPKAcTNZEtF4uXBVmCeEm
++Kf7GUmG6sXP/wwyc5WxqlD8UykAWlYTzWamsX0xhk23RO8yilQwipmdnRC652dKK
++QbNmC1r7fSOl8hqw/96bg5Qu0T/fkreRrwU7ZcegbLHNYhLDkBvjJc40vG93drEQ
++w/cFGsDWr3RiSBd3kmmQYRzelYB0VI8YHMPzA9C/pEN1hlMYegouCRw2n5H9gooi
++S9EOUCXdywMMF8mDAAhONU2Ki+3wApRmLER/y5UnlhetCTCstnEXbosX9hwJ1C07
++mKVx01QT2WDz9UtmT/rx7iASjbSsV7FFY6GsdqnC+w==
++-----END CERTIFICATE-----
++
++# 3417bb06cc6007da1b961c920b8ab4ce3fad820e4aa30b9acbc4a74ebdcebc65
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 8495723813297216424 (0x75e6dfcbc1685ba8)
++ Signature Algorithm: ecdsa-with-SHA256
++ Issuer: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com Root Certification Authority ECC
++ Validity
++ Not Before: Feb 12 18:14:03 2016 GMT
++ Not After : Feb 12 18:14:03 2041 GMT
++ Subject: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com Root Certification Authority ECC
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:45:6e:a9:50:c4:a6:23:36:9e:5f:28:8d:17:cb:
++ 96:22:64:3f:dc:7a:8e:1d:cc:08:b3:a2:71:24:ba:
++ 8e:49:b9:04:1b:47:96:58:ab:2d:95:c8:ed:9e:08:
++ 35:c8:27:eb:89:8c:53:58:eb:62:8a:fe:f0:5b:0f:
++ 6b:31:52:63:41:3b:89:cd:ec:ec:b6:8d:19:d3:34:
++ 07:dc:bb:c6:06:7f:c2:45:95:ec:cb:7f:a8:23:e0:
++ 09:e9:81:fa:f3:47:d3
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 82:D1:85:73:30:E7:35:04:D3:8E:02:92:FB:E5:A4:D1:C4:21:E8:CD
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ keyid:82:D1:85:73:30:E7:35:04:D3:8E:02:92:FB:E5:A4:D1:C4:21:E8:CD
++
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: ecdsa-with-SHA256
++ 30:64:02:30:6f:e7:eb:59:11:a4:60:cf:61:b0:96:7b:ed:05:
++ f9:2f:13:91:dc:ed:e5:fc:50:6b:11:46:46:b3:1c:21:00:62:
++ bb:be:c3:e7:e8:cd:07:99:f9:0d:0b:5d:72:3e:c4:aa:02:30:
++ 1f:bc:ba:0b:e2:30:24:fb:7c:6d:80:55:0a:99:3e:80:0d:33:
++ e5:66:a3:b3:a3:bb:a5:d5:8b:8f:09:2c:a6:5d:7e:e2:f0:07:
++ 08:68:6d:d2:7c:69:6e:5f:df:e5:6a:65
++-----BEGIN CERTIFICATE-----
++MIICjTCCAhSgAwIBAgIIdebfy8FoW6gwCgYIKoZIzj0EAwIwfDELMAkGA1UEBhMC
++VVMxDjAMBgNVBAgMBVRleGFzMRAwDgYDVQQHDAdIb3VzdG9uMRgwFgYDVQQKDA9T
++U0wgQ29ycG9yYXRpb24xMTAvBgNVBAMMKFNTTC5jb20gUm9vdCBDZXJ0aWZpY2F0
++aW9uIEF1dGhvcml0eSBFQ0MwHhcNMTYwMjEyMTgxNDAzWhcNNDEwMjEyMTgxNDAz
++WjB8MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0
++b24xGDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjExMC8GA1UEAwwoU1NMLmNvbSBS
++b290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IEVDQzB2MBAGByqGSM49AgEGBSuB
++BAAiA2IABEVuqVDEpiM2nl8ojRfLliJkP9x6jh3MCLOicSS6jkm5BBtHllirLZXI
++7Z4INcgn64mMU1jrYor+8FsPazFSY0E7ic3s7LaNGdM0B9y7xgZ/wkWV7Mt/qCPg
++CemB+vNH06NjMGEwHQYDVR0OBBYEFILRhXMw5zUE044CkvvlpNHEIejNMA8GA1Ud
++EwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUgtGFczDnNQTTjgKS++Wk0cQh6M0wDgYD
++VR0PAQH/BAQDAgGGMAoGCCqGSM49BAMCA2cAMGQCMG/n61kRpGDPYbCWe+0F+S8T
++kdzt5fxQaxFGRrMcIQBiu77D5+jNB5n5DQtdcj7EqgIwH7y6C+IwJPt8bYBVCpk+
++gA0z5Wajs6O7pdWLjwkspl1+4vAHCGht0nxpbl/f5Wpl
++-----END CERTIFICATE-----
++
++# 85666a562ee0be5ce925c1d8890a6f76a87ec16d4d7d5f29ea7419cf20123b69
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 8875640296558310041 (0x7b2c9bd316803299)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com Root Certification Authority RSA
++ Validity
++ Not Before: Feb 12 17:39:39 2016 GMT
++ Not After : Feb 12 17:39:39 2041 GMT
++ Subject: C = US, ST = Texas, L = Houston, O = SSL Corporation, CN = SSL.com Root Certification Authority RSA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:f9:0f:dd:a3:2b:7d:cb:d0:2a:fe:ec:67:85:a6:
++ e7:2e:1b:ba:77:e1:e3:f5:af:a4:ec:fa:4a:5d:91:
++ c4:57:47:6b:18:77:6b:76:f2:fd:93:e4:3d:0f:c2:
++ 16:9e:0b:66:c3:56:94:9e:17:83:85:ce:56:ef:f2:
++ 16:fd:00:62:f5:22:09:54:e8:65:17:4e:41:b9:e0:
++ 4f:46:97:aa:1b:c8:b8:6e:62:5e:69:b1:5f:db:2a:
++ 02:7e:fc:6c:ca:f3:41:d8:ed:d0:e8:fc:3f:61:48:
++ ed:b0:03:14:1d:10:0e:4b:19:e0:bb:4e:ec:86:65:
++ ff:36:f3:5e:67:02:0b:9d:86:55:61:fd:7a:38:ed:
++ fe:e2:19:00:b7:6f:a1:50:62:75:74:3c:a0:fa:c8:
++ 25:92:b4:6e:7a:22:c7:f8:1e:a1:e3:b2:dd:91:31:
++ ab:2b:1d:04:ff:a5:4a:04:37:e9:85:a4:33:2b:fd:
++ e2:d6:55:34:7c:19:a4:4a:68:c7:b2:a8:d3:b7:ca:
++ a1:93:88:eb:c1:97:bc:8c:f9:1d:d9:22:84:24:74:
++ c7:04:3d:6a:a9:29:93:cc:eb:b8:5b:e1:fe:5f:25:
++ aa:34:58:c8:c1:23:54:9d:1b:98:11:c3:38:9c:7e:
++ 3d:86:6c:a5:0f:40:86:7c:02:f4:5c:02:4f:28:cb:
++ ae:71:9f:0f:3a:c8:33:fe:11:25:35:ea:fc:ba:c5:
++ 60:3d:d9:7c:18:d5:b2:a9:d3:75:78:03:72:22:ca:
++ 3a:c3:1f:ef:2c:e5:2e:a9:fa:9e:2c:b6:51:46:fd:
++ af:03:d6:ea:60:68:ea:85:16:36:6b:85:e9:1e:c0:
++ b3:dd:c4:24:dc:80:2a:81:41:6d:94:3e:c8:e0:c9:
++ 81:41:00:9e:5e:bf:7f:c5:08:98:a2:18:2c:42:40:
++ b3:f9:6f:38:27:4b:4e:80:f4:3d:81:47:e0:88:7c:
++ ea:1c:ce:b5:75:5c:51:2e:1c:2b:7f:1a:72:28:e7:
++ 00:b5:d1:74:c6:d7:e4:9f:ad:07:93:b6:53:35:35:
++ fc:37:e4:c3:f6:5d:16:be:21:73:de:92:0a:f8:a0:
++ 63:6a:bc:96:92:6a:3e:f8:bc:65:55:9b:de:f5:0d:
++ 89:26:04:fc:25:1a:a6:25:69:cb:c2:6d:ca:7c:e2:
++ 59:5f:97:ac:eb:ef:2e:c8:bc:d7:1b:59:3c:2b:cc:
++ f2:19:c8:93:6b:27:63:19:cf:fc:e9:26:f8:ca:71:
++ 9b:7f:93:fe:34:67:84:4e:99:eb:fc:b3:78:09:33:
++ 70:ba:66:a6:76:ed:1b:73:eb:1a:a5:0d:c4:22:13:
++ 20:94:56:0a:4e:2c:6c:4e:b1:fd:cf:9c:09:ba:a2:
++ 33:ed:87
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ DD:04:09:07:A2:F5:7A:7D:52:53:12:92:95:EE:38:80:25:0D:A6:59
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ keyid:DD:04:09:07:A2:F5:7A:7D:52:53:12:92:95:EE:38:80:25:0D:A6:59
++
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ 20:18:11:94:29:fb:26:9d:1c:1e:1e:70:61:f1:95:72:93:71:
++ 24:ad:68:93:58:8e:32:af:1b:b3:70:03:fc:25:2b:74:85:90:
++ 3d:78:6a:f4:b9:8b:a5:97:3b:b5:18:91:bb:1e:a7:f9:40:5b:
++ 91:f9:55:99:af:1e:11:d0:5c:1d:a7:66:e3:b1:94:07:0c:32:
++ 39:a6:ea:1b:b0:79:d8:1d:9c:70:44:e3:8a:dd:c4:f9:95:1f:
++ 8a:38:43:3f:01:85:a5:47:a7:3d:46:b2:bc:e5:22:68:f7:7b:
++ 9c:d8:2c:3e:0a:21:c8:2d:33:ac:bf:c5:81:99:31:74:c1:75:
++ 71:c5:be:b1:f0:23:45:f4:9d:6b:fc:19:63:9d:a3:bc:04:c6:
++ 18:0b:25:bb:53:89:0f:b3:80:50:de:45:ee:44:7f:ab:94:78:
++ 64:98:d3:f6:28:dd:87:d8:70:65:74:fb:0e:b9:13:eb:a7:0f:
++ 61:a9:32:96:cc:de:bb:ed:63:4c:18:bb:a9:40:f7:a0:54:6e:
++ 20:88:71:75:18:ea:7a:b4:34:72:e0:23:27:77:5c:b6:90:ea:
++ 86:25:40:ab:ef:33:0f:cb:9f:82:be:a2:20:fb:f6:b5:2d:1a:
++ e6:c2:85:b1:74:0f:fb:c8:65:02:a4:52:01:47:dd:49:22:c1:
++ bf:d8:eb:6b:ac:7e:de:ec:63:33:15:b7:23:08:8f:c6:0f:8d:
++ 41:5a:dd:8e:c5:b9:8f:e5:45:3f:78:db:ba:d2:1b:40:b1:fe:
++ 71:4d:3f:e0:81:a2:ba:5e:b4:ec:15:e0:93:dd:08:1f:7e:e1:
++ 55:99:0b:21:de:93:9e:0a:fb:e6:a3:49:bd:36:30:fe:e7:77:
++ b2:a0:75:97:b5:2d:81:88:17:65:20:f7:da:90:00:9f:c9:52:
++ cc:32:ca:35:7c:f5:3d:0f:d8:2b:d7:f5:26:6c:c9:06:34:96:
++ 16:ea:70:59:1a:32:79:79:0b:b6:88:7f:0f:52:48:3d:bf:6c:
++ d8:a2:44:2e:d1:4e:b7:72:58:d3:89:13:95:fe:44:ab:f8:d7:
++ 8b:1b:6e:9c:bc:2c:a0:5b:d5:6a:00:af:5f:37:e1:d5:fa:10:
++ 0b:98:9c:86:e7:26:8f:ce:f0:ec:6e:8a:57:0b:80:e3:4e:b2:
++ c0:a0:63:61:90:ba:55:68:37:74:6a:b6:92:db:9f:a1:86:22:
++ b6:65:27:0e:ec:b6:9f:42:60:e4:67:c2:b5:da:41:0b:c4:d3:
++ 8b:61:1b:bc:fa:1f:91:2b:d7:44:07:5e:ba:29:ac:d9:c5:e9:
++ ef:53:48:5a:eb:80:f1:28:58:21:cd:b0:06:55:fb:27:3f:53:
++ 90:70:a9:04:1e:57:27:b9
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 62dd0be9b9f50a163ea0f8e75c053b1eca57ea55c8688f647c6881f2c8357b95
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ bb:40:1c:43:f5:5e:4f:b0
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C = CH, O = SwissSign AG, CN = SwissSign Gold CA - G2
++ Validity
++ Not Before: Oct 25 08:30:35 2006 GMT
++ Not After : Oct 25 08:30:35 2036 GMT
++ Subject: C = CH, O = SwissSign AG, CN = SwissSign Gold CA - G2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:af:e4:ee:7e:8b:24:0e:12:6e:a9:50:2d:16:44:
++ 3b:92:92:5c:ca:b8:5d:84:92:42:13:2a:bc:65:57:
++ 82:40:3e:57:24:cd:50:8b:25:2a:b7:6f:fc:ef:a2:
++ d0:c0:1f:02:24:4a:13:96:8f:23:13:e6:28:58:00:
++ a3:47:c7:06:a7:84:23:2b:bb:bd:96:2b:7f:55:cc:
++ 8b:c1:57:1f:0e:62:65:0f:dd:3d:56:8a:73:da:ae:
++ 7e:6d:ba:81:1c:7e:42:8c:20:35:d9:43:4d:84:fa:
++ 84:db:52:2c:f3:0e:27:77:0b:6b:bf:11:2f:72:78:
++ 9f:2e:d8:3e:e6:18:37:5a:2a:72:f9:da:62:90:92:
++ 95:ca:1f:9c:e9:b3:3c:2b:cb:f3:01:13:bf:5a:cf:
++ c1:b5:0a:60:bd:dd:b5:99:64:53:b8:a0:96:b3:6f:
++ e2:26:77:91:8c:e0:62:10:02:9f:34:0f:a4:d5:92:
++ 33:51:de:be:8d:ba:84:7a:60:3c:6a:db:9f:2b:ec:
++ de:de:01:3f:6e:4d:e5:50:86:cb:b4:af:ed:44:40:
++ c5:ca:5a:8c:da:d2:2b:7c:a8:ee:be:a6:e5:0a:aa:
++ 0e:a5:df:05:52:b7:55:c7:22:5d:32:6a:97:97:63:
++ 13:db:c9:db:79:36:7b:85:3a:4a:c5:52:89:f9:24:
++ e7:9d:77:a9:82:ff:55:1c:a5:71:69:2b:d1:02:24:
++ f2:b3:26:d4:6b:da:04:55:e5:c1:0a:c7:6d:30:37:
++ 90:2a:e4:9e:14:33:5e:16:17:55:c5:5b:b5:cb:34:
++ 89:92:f1:9d:26:8f:a1:07:d4:c6:b2:78:50:db:0c:
++ 0c:0b:7c:0b:8c:41:d7:b9:e9:dd:8c:88:f7:a3:4d:
++ b2:32:cc:d8:17:da:cd:b7:ce:66:9d:d4:fd:5e:ff:
++ bd:97:3e:29:75:e7:7e:a7:62:58:af:25:34:a5:41:
++ c7:3d:bc:0d:50:ca:03:03:0f:08:5a:1f:95:73:78:
++ 62:bf:af:72:14:69:0e:a5:e5:03:0e:78:8e:26:28:
++ 42:f0:07:0b:62:20:10:67:39:46:fa:a9:03:cc:04:
++ 38:7a:66:ef:20:83:b5:8c:4a:56:8e:91:00:fc:8e:
++ 5c:82:de:88:a0:c3:e2:68:6e:7d:8d:ef:3c:dd:65:
++ f4:5d:ac:51:ef:24:80:ae:aa:56:97:6f:f9:ad:7d:
++ da:61:3f:98:77:3c:a5:91:b6:1c:8c:26:da:65:a2:
++ 09:6d:c1:e2:54:e3:b9:ca:4c:4c:80:8f:77:7b:60:
++ 9a:1e:df:b6:f2:48:1e:0e:ba:4e:54:6d:98:e0:e1:
++ a2:1a:a2:77:50:cf:c4:63:92:ec:47:19:9d:eb:e6:
++ 6b:ce:c1
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 5B:25:7B:96:A4:65:51:7E:B8:39:F3:C0:78:66:5E:E8:3A:E7:F0:EE
++ X509v3 Authority Key Identifier:
++ keyid:5B:25:7B:96:A4:65:51:7E:B8:39:F3:C0:78:66:5E:E8:3A:E7:F0:EE
++
++ X509v3 Certificate Policies:
++ Policy: 2.16.756.1.89.1.2.1.1
++ CPS: http://repository.swisssign.com/
++
++ Signature Algorithm: sha1WithRSAEncryption
++ 27:ba:e3:94:7c:f1:ae:c0:de:17:e6:e5:d8:d5:f5:54:b0:83:
++ f4:bb:cd:5e:05:7b:4f:9f:75:66:af:3c:e8:56:7e:fc:72:78:
++ 38:03:d9:2b:62:1b:00:b9:f8:e9:60:cd:cc:ce:51:8a:c7:50:
++ 31:6e:e1:4a:7e:18:2f:69:59:b6:3d:64:81:2b:e3:83:84:e6:
++ 22:87:8e:7d:e0:ee:02:99:61:b8:1e:f4:b8:2b:88:12:16:84:
++ c2:31:93:38:96:31:a6:b9:3b:53:3f:c3:24:93:56:5b:69:92:
++ ec:c5:c1:bb:38:00:e3:ec:17:a9:b8:dc:c7:7c:01:83:9f:32:
++ 47:ba:52:22:34:1d:32:7a:09:56:a7:7c:25:36:a9:3d:4b:da:
++ c0:82:6f:0a:bb:12:c8:87:4b:27:11:f9:1e:2d:c7:93:3f:9e:
++ db:5f:26:6b:52:d9:2e:8a:f1:14:c6:44:8d:15:a9:b7:bf:bd:
++ de:a6:1a:ee:ae:2d:fb:48:77:17:fe:bb:ec:af:18:f5:2a:51:
++ f0:39:84:97:95:6c:6e:1b:c3:2b:c4:74:60:79:25:b0:0a:27:
++ df:df:5e:d2:39:cf:45:7d:42:4b:df:b3:2c:1e:c5:c6:5d:ca:
++ 55:3a:a0:9c:69:9a:8f:da:ef:b2:b0:3c:9f:87:6c:12:2b:65:
++ 70:15:52:31:1a:24:cf:6f:31:23:50:1f:8c:4f:8f:23:c3:74:
++ 41:63:1c:55:a8:14:dd:3e:e0:51:50:cf:f1:1b:30:56:0e:92:
++ b0:82:85:d8:83:cb:22:64:bc:2d:b8:25:d5:54:a2:b8:06:ea:
++ ad:92:a4:24:a0:c1:86:b5:4a:13:6a:47:cf:2e:0b:56:95:54:
++ cb:ce:9a:db:6a:b4:a6:b2:db:41:08:86:27:77:f7:6a:a0:42:
++ 6c:0b:38:ce:d7:75:50:32:92:c2:df:2b:30:22:48:d0:d5:41:
++ 38:25:5d:a4:e9:5d:9f:c6:94:75:d0:45:fd:30:97:43:8f:90:
++ ab:0a:c7:86:73:60:4a:69:2d:de:a5:78:d7:06:da:6a:9e:4b:
++ 3e:77:3a:20:13:22:01:d0:bf:68:9e:63:60:6b:35:4d:0b:6d:
++ ba:a1:3d:c0:93:e0:7f:23:b3:55:ad:72:25:4e:46:f9:d2:16:
++ ef:b0:64:c1:01:9e:e9:ca:a0:6a:98:0e:cf:d8:60:f2:2f:49:
++ b8:e4:42:e1:38:35:16:f4:c8:6e:4f:f7:81:56:e8:ba:a3:be:
++ 23:af:ae:fd:6f:03:e0:02:3b:30:76:fa:1b:6d:41:cf:01:b1:
++ e9:b8:c9:66:f4:db:26:f3:3a:a4:74:f2:49:24:5b:c9:b0:d0:
++ 57:c1:fa:3e:7a:e1:97:c9
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 59769007f7685d0fcd50872f9f95d5755a5b2b457d81f3692b610a98672f0e1b
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 3262 (0xcbe)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = TW, O = TAIWAN-CA, OU = Root CA, CN = TWCA Global Root CA
++ Validity
++ Not Before: Jun 27 06:28:33 2012 GMT
++ Not After : Dec 31 15:59:59 2030 GMT
++ Subject: C = TW, O = TAIWAN-CA, OU = Root CA, CN = TWCA Global Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:b0:05:db:c8:eb:8c:c4:6e:8a:21:ef:8e:4d:9c:
++ 71:0a:1f:52:70:ed:6d:82:9c:97:c5:d7:4c:4e:45:
++ 49:cb:40:42:b5:12:34:6c:19:c2:74:a4:31:5f:85:
++ 02:97:ec:43:33:0a:53:d2:9c:8c:8e:b7:b8:79:db:
++ 2b:d5:6a:f2:8e:66:c4:ee:2b:01:07:92:d4:b3:d0:
++ 02:df:50:f6:55:af:66:0e:cb:e0:47:60:2f:2b:32:
++ 39:35:52:3a:28:83:f8:7b:16:c6:18:b8:62:d6:47:
++ 25:91:ce:f0:19:12:4d:ad:63:f5:d3:3f:75:5f:29:
++ f0:a1:30:1c:2a:a0:98:a6:15:bd:ee:fd:19:36:f0:
++ e2:91:43:8f:fa:ca:d6:10:27:49:4c:ef:dd:c1:f1:
++ 85:70:9b:ca:ea:a8:5a:43:fc:6d:86:6f:73:e9:37:
++ 45:a9:f0:36:c7:cc:88:75:1e:bb:6c:06:ff:9b:6b:
++ 3e:17:ec:61:aa:71:7c:c6:1d:a2:f7:49:e9:15:b5:
++ 3c:d6:a1:61:f5:11:f7:05:6f:1d:fd:11:be:d0:30:
++ 07:c2:29:b0:09:4e:26:dc:e3:a2:a8:91:6a:1f:c2:
++ 91:45:88:5c:e5:98:b8:71:a5:15:19:c9:7c:75:11:
++ cc:70:74:4f:2d:9b:1d:91:44:fd:56:28:a0:fe:bb:
++ 86:6a:c8:fa:5c:0b:58:dc:c6:4b:76:c8:ab:22:d9:
++ 73:0f:a5:f4:5a:02:89:3f:4f:9e:22:82:ee:a2:74:
++ 53:2a:3d:53:27:69:1d:6c:8e:32:2c:64:00:26:63:
++ 61:36:4e:a3:46:b7:3f:7d:b3:2d:ac:6d:90:a2:95:
++ a2:ce:cf:da:82:e7:07:34:19:96:e9:b8:21:aa:29:
++ 7e:a6:38:be:8e:29:4a:21:66:79:1f:b3:c3:b5:09:
++ 67:de:d6:d4:07:46:f3:2a:da:e6:22:37:60:cb:81:
++ b6:0f:a0:0f:e9:c8:95:7f:bf:55:91:05:7a:cf:3d:
++ 15:c0:6f:de:09:94:01:83:d7:34:1b:cc:40:a5:f0:
++ b8:9b:67:d5:98:91:3b:a7:84:78:95:26:a4:5a:08:
++ f8:2b:74:b4:00:04:3c:df:b8:14:8e:e8:df:a9:8d:
++ 6c:67:92:33:1d:c0:b7:d2:ec:92:c8:be:09:bf:2c:
++ 29:05:6f:02:6b:9e:ef:bc:bf:2a:bc:5b:c0:50:8f:
++ 41:70:71:87:b2:4d:b7:04:a9:84:a3:32:af:ae:ee:
++ 6b:17:8b:b2:b1:fe:6c:e1:90:8c:88:a8:97:48:ce:
++ c8:4d:cb:f3:06:cf:5f:6a:0a:42:b1:1e:1e:77:2f:
++ 8e:a0:e6:92:0e:06:fc:05:22:d2:26:e1:31:51:7d:
++ 32:dc:0f
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: sha256WithRSAEncryption
++ 5f:34:81:76:ef:96:1d:d5:e5:b5:d9:02:63:84:16:c1:ae:a0:
++ 70:51:a7:f7:4c:47:35:c8:0b:d7:28:3d:89:71:d9:aa:33:41:
++ ea:14:1b:6c:21:00:c0:6c:42:19:7e:9f:69:5b:20:42:df:a2:
++ d2:da:c4:7c:97:4b:8d:b0:e8:ac:c8:ee:a5:69:04:99:0a:92:
++ a6:ab:27:2e:1a:4d:81:bf:84:d4:70:1e:ad:47:fe:fd:4a:9d:
++ 33:e0:f2:b9:c4:45:08:21:0a:da:69:69:73:72:0d:be:34:fe:
++ 94:8b:ad:c3:1e:35:d7:a2:83:ef:e5:38:c7:a5:85:1f:ab:cf:
++ 34:ec:3f:28:fe:0c:f1:57:86:4e:c9:55:f7:1c:d4:d8:a5:7d:
++ 06:7a:6f:d5:df:10:df:81:4e:21:65:b1:b6:e1:17:79:95:45:
++ 06:ce:5f:cc:dc:46:89:63:68:44:8d:93:f4:64:70:a0:3d:9d:
++ 28:05:c3:39:70:b8:62:7b:20:fd:e4:db:e9:08:a1:b8:9e:3d:
++ 09:c7:4f:fb:2c:f8:93:76:41:de:52:e0:e1:57:d2:9d:03:bc:
++ 77:9e:fe:9e:29:5e:f7:c1:51:60:1f:de:da:0b:b2:2d:75:b7:
++ 43:48:93:e7:f6:79:c6:84:5d:80:59:60:94:fc:78:98:8f:3c:
++ 93:51:ed:40:90:07:df:64:63:24:cb:4e:71:05:a1:d7:94:1a:
++ 88:32:f1:22:74:22:ae:a5:a6:d8:12:69:4c:60:a3:02:ee:2b:
++ ec:d4:63:92:0b:5e:be:2f:76:6b:a3:b6:26:bc:8f:03:d8:0a:
++ f2:4c:64:46:bd:39:62:e5:96:eb:34:63:11:28:cc:95:f1:ad:
++ ef:ef:dc:80:58:48:e9:4b:b8:ea:65:ac:e9:fc:80:b5:b5:c8:
++ 45:f9:ac:c1:9f:d9:b9:ea:62:88:8e:c4:f1:4b:83:12:ad:e6:
++ 8b:84:d6:9e:c2:eb:83:18:9f:6a:bb:1b:24:60:33:70:cc:ec:
++ f7:32:f3:5c:d9:79:7d:ef:9e:a4:fe:c9:23:c3:24:ee:15:92:
++ b1:3d:91:4f:26:86:bd:66:73:24:13:ea:a4:ae:63:c1:ad:7d:
++ 84:03:3c:10:78:86:1b:79:e3:c4:f3:f2:04:95:20:ae:23:82:
++ c4:b3:3a:00:62:bf:e6:36:24:e1:57:ba:c7:1e:90:75:d5:5f:
++ 3f:95:61:2b:c1:3b:cd:e5:b3:68:61:d0:46:26:a9:21:52:69:
++ 2d:eb:2e:c7:eb:77:ce:a6:3a:b5:03:33:4f:76:d1:e7:5c:54:
++ 01:5d:cb:78:f4:c9:0c:bf:cf:12:8e:17:2d:23:68:94:e7:ab:
++ fe:a9:b2:2b:06:d0:04:cd
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# dd6936fe21f8f077c123a1a521c12224f72255b73e03a7260693e8a24b0fa389
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 95:be:16:a0:f7:2e:46:f1:7b:39:82:72:fa:8b:cd:96
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: O = TeliaSonera, CN = TeliaSonera Root CA v1
++ Validity
++ Not Before: Oct 18 12:00:50 2007 GMT
++ Not After : Oct 18 12:00:50 2032 GMT
++ Subject: O = TeliaSonera, CN = TeliaSonera Root CA v1
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:c2:be:eb:27:f0:21:a3:f3:69:26:55:7e:9d:c5:
++ 55:16:91:5c:fd:ef:21:bf:53:80:7a:2d:d2:91:8c:
++ 63:31:f0:ec:24:f0:c3:a5:d2:72:7c:10:6d:f4:37:
++ b7:e5:e6:7c:79:ea:8c:b5:82:8b:ae:48:b6:ac:00:
++ dc:65:75:ec:2a:4d:5f:c1:87:f5:20:65:2b:81:a8:
++ 47:3e:89:23:95:30:16:90:7f:e8:57:07:48:e7:19:
++ ae:bf:45:67:b1:37:1b:06:2a:fe:de:f9:ac:7d:83:
++ fb:5e:ba:e4:8f:97:67:be:4b:8e:8d:64:07:57:38:
++ 55:69:34:36:3d:13:48:ef:4f:e2:d3:66:1e:a4:cf:
++ 1a:b7:5e:36:33:d4:b4:06:bd:18:01:fd:77:84:50:
++ 00:45:f5:8c:5d:e8:23:bc:7e:fe:35:e1:ed:50:7b:
++ a9:30:8d:19:d3:09:8e:68:67:5d:bf:3c:97:18:53:
++ bb:29:62:c5:ca:5e:72:c1:c7:96:d4:db:2d:a0:b4:
++ 1f:69:03:ec:ea:e2:50:f1:0c:3c:f0:ac:f3:53:2d:
++ f0:1c:f5:ed:6c:39:39:73:80:16:c8:52:b0:23:cd:
++ e0:3e:dc:dd:3c:47:a0:bb:35:8a:e2:98:68:8b:be:
++ e5:bf:72:ee:d2:fa:a5:ed:12:ed:fc:98:18:a9:26:
++ 76:dc:28:4b:10:20:1c:d3:7f:16:77:2d:ed:6f:80:
++ f7:49:bb:53:05:bb:5d:68:c7:d4:c8:75:16:3f:89:
++ 5a:8b:f7:17:47:d4:4c:f1:d2:89:79:3e:4d:3d:98:
++ a8:61:de:3a:1e:d2:f8:5e:03:e0:c1:c9:1c:8c:d3:
++ 8d:4d:d3:95:36:b3:37:5f:63:63:9b:33:14:f0:2d:
++ 26:6b:53:7c:89:8c:32:c2:6e:ec:3d:21:00:39:c9:
++ a1:68:e2:50:83:2e:b0:3a:2b:f3:36:a0:ac:2f:e4:
++ 6f:61:c2:51:09:39:3e:8b:53:b9:bb:67:da:dc:53:
++ b9:76:59:36:9d:43:e5:20:e0:3d:32:60:85:22:51:
++ b7:c7:33:bb:dd:15:2f:a4:78:a6:07:7b:81:46:36:
++ 04:86:dd:79:35:c7:95:2c:3b:b0:a3:17:35:e5:73:
++ 1f:b4:5c:59:ef:da:ea:10:65:7b:7a:d0:7f:9f:b3:
++ b4:2a:37:3b:70:8b:9b:5b:b9:2b:b7:ec:b2:51:12:
++ 97:53:29:5a:d4:f0:12:10:dc:4f:02:bb:12:92:2f:
++ 62:d4:3f:69:43:7c:0d:d6:fc:58:75:01:88:9d:58:
++ 16:4b:de:ba:90:ff:47:01:89:06:6a:f6:5f:b2:90:
++ 6a:b3:02:a6:02:88:bf:b3:47:7e:2a:d9:d5:fa:68:
++ 78:35:4d
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage:
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ F0:8F:59:38:00:B3:F5:8F:9A:96:0C:D5:EB:FA:7B:AA:17:E8:13:12
++ Signature Algorithm: sha1WithRSAEncryption
++ be:e4:5c:62:4e:24:f4:0c:08:ff:f0:d3:0c:68:e4:93:49:22:
++ 3f:44:27:6f:bb:6d:de:83:66:ce:a8:cc:0d:fc:f5:9a:06:e5:
++ 77:14:91:eb:9d:41:7b:99:2a:84:e5:ff:fc:21:c1:5d:f0:e4:
++ 1f:57:b7:75:a9:a1:5f:02:26:ff:d7:c7:f7:4e:de:4f:f8:f7:
++ 1c:46:c0:7a:4f:40:2c:22:35:f0:19:b1:d0:6b:67:2c:b0:a8:
++ e0:c0:40:37:35:f6:84:5c:5c:e3:af:42:78:fe:a7:c9:0d:50:
++ ea:0d:84:76:f6:51:ef:83:53:c6:7a:ff:0e:56:49:2e:8f:7a:
++ d6:0c:e6:27:54:e3:4d:0a:60:72:62:cd:91:07:d6:a5:bf:c8:
++ 99:6b:ed:c4:19:e6:ab:4c:11:38:c5:6f:31:e2:6e:49:c8:3f:
++ 76:80:26:03:26:29:e0:36:f6:f6:20:53:e3:17:70:34:17:9d:
++ 63:68:1e:6b:ec:c3:4d:86:b8:13:30:2f:5d:46:0d:47:43:d5:
++ 1b:aa:59:0e:b9:5c:8d:06:48:ad:74:87:5f:c7:fc:31:54:41:
++ 13:e2:c7:21:0e:9e:e0:1e:0d:e1:c0:7b:43:85:90:c5:8a:58:
++ c6:65:0a:78:57:f2:c6:23:0f:01:d9:20:4b:de:0f:fb:92:85:
++ 75:2a:5c:73:8d:6d:7b:25:91:ca:ee:45:ae:06:4b:00:cc:d3:
++ b1:59:50:da:3a:88:3b:29:43:46:5e:97:2b:54:ce:53:6f:8d:
++ 4a:e7:96:fa:bf:71:0e:42:8b:7c:fd:28:a0:d0:48:ca:da:c4:
++ 81:4c:bb:a2:73:93:26:c8:eb:0c:d6:26:88:b6:c0:24:cf:bb:
++ bd:5b:eb:75:7d:e9:08:8e:86:33:2c:79:77:09:69:a5:89:fc:
++ b3:70:90:87:76:8f:d3:22:bb:42:ce:bd:73:0b:20:26:2a:d0:
++ 9b:3d:70:1e:24:6c:cd:87:76:a9:17:96:b7:cf:0d:92:fb:8e:
++ 18:a9:98:49:d1:9e:fe:60:44:72:21:b9:19:ed:c2:f5:31:f1:
++ 39:48:88:90:24:75:54:16:ad:ce:f4:f8:69:14:64:39:fb:a3:
++ b8:ba:70:40:c7:27:1c:bf:c4:56:53:fa:63:65:d0:f3:1c:0e:
++ 16:f5:6b:86:58:4d:18:d4:e4:0d:8e:a5:9d:5b:91:dc:76:24:
++ 50:3f:c6:2a:fb:d9:b7:9c:b5:d6:e6:d0:d9:e8:19:8b:15:71:
++ 48:ad:b7:ea:d8:59:88:d4:90:bf:16:b3:d9:e9:ac:59:61:54:
++ c8:1c:ba:ca:c1:ca:e1:b9:20:4c:8f:3a:93:89:a5:a0:cc:bf:
++ d3:f6:75:a4:75:96:6d:56
++-----BEGIN CERTIFICATE-----
++MIIFODCCAyCgAwIBAgIRAJW+FqD3LkbxezmCcvqLzZYwDQYJKoZIhvcNAQEFBQAw
++NzEUMBIGA1UECgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJv
++b3QgQ0EgdjEwHhcNMDcxMDE4MTIwMDUwWhcNMzIxMDE4MTIwMDUwWjA3MRQwEgYD
++VQQKDAtUZWxpYVNvbmVyYTEfMB0GA1UEAwwWVGVsaWFTb25lcmEgUm9vdCBDQSB2
++MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMK+6yfwIaPzaSZVfp3F
++VRaRXP3vIb9TgHot0pGMYzHw7CTww6XScnwQbfQ3t+XmfHnqjLWCi65ItqwA3GV1
++7CpNX8GH9SBlK4GoRz6JI5UwFpB/6FcHSOcZrr9FZ7E3GwYq/t75rH2D+1665I+X
++Z75Ljo1kB1c4VWk0Nj0TSO9P4tNmHqTPGrdeNjPUtAa9GAH9d4RQAEX1jF3oI7x+
++/jXh7VB7qTCNGdMJjmhnXb88lxhTuylixcpecsHHltTbLaC0H2kD7OriUPEMPPCs
++81Mt8Bz17Ww5OXOAFshSsCPN4D7c3TxHoLs1iuKYaIu+5b9y7tL6pe0S7fyYGKkm
++dtwoSxAgHNN/Fnct7W+A90m7UwW7XWjH1Mh1Fj+JWov3F0fUTPHSiXk+TT2YqGHe
++Oh7S+F4D4MHJHIzTjU3TlTazN19jY5szFPAtJmtTfImMMsJu7D0hADnJoWjiUIMu
++sDor8zagrC/kb2HCUQk5PotTubtn2txTuXZZNp1D5SDgPTJghSJRt8czu90VL6R4
++pgd7gUY2BIbdeTXHlSw7sKMXNeVzH7RcWe/a6hBle3rQf5+ztCo3O3CLm1u5K7fs
++slESl1MpWtTwEhDcTwK7EpIvYtQ/aUN8Ddb8WHUBiJ1YFkveupD/RwGJBmr2X7KQ
++arMCpgKIv7NHfirZ1fpoeDVNAgMBAAGjPzA9MA8GA1UdEwEB/wQFMAMBAf8wCwYD
++VR0PBAQDAgEGMB0GA1UdDgQWBBTwj1k4ALP1j5qWDNXr+nuqF+gTEjANBgkqhkiG
++9w0BAQUFAAOCAgEAvuRcYk4k9AwI//DTDGjkk0kiP0Qnb7tt3oNmzqjMDfz1mgbl
++dxSR651Be5kqhOX//CHBXfDkH1e3damhXwIm/9fH907eT/j3HEbAek9ALCI18Bmx
++0GtnLLCo4MBANzX2hFxc469CeP6nyQ1Q6g2EdvZR74NTxnr/DlZJLo961gzmJ1Tj
++TQpgcmLNkQfWpb/ImWvtxBnmq0wROMVvMeJuScg/doAmAyYp4Db29iBT4xdwNBed
++Y2gea+zDTYa4EzAvXUYNR0PVG6pZDrlcjQZIrXSHX8f8MVRBE+LHIQ6e4B4N4cB7
++Q4WQxYpYxmUKeFfyxiMPAdkgS94P+5KFdSpcc41teyWRyu5FrgZLAMzTsVlQ2jqI
++OylDRl6XK1TOU2+NSueW+r9xDkKLfP0ooNBIytrEgUy7onOTJsjrDNYmiLbAJM+7
++vVvrdX3pCI6GMyx5dwlppYn8s3CQh3aP0yK7Qs69cwsgJirQmz1wHiRszYd2qReW
++t88NkvuOGKmYSdGe/mBEciG5Ge3C9THxOUiIkCR1VBatzvT4aRRkOfujuLpwQMcn
++HL/EVlP6Y2XQ8xwOFvVrhlhNGNTkDY6lnVuR3HYkUD/GKvvZt5y11ubQ2egZixVx
++SK236thZiNSQvxaz2emsWWFUyBy6ysHK4bkgTI86k4mloMy/0/Z1pHWWbVY=
++-----END CERTIFICATE-----
++
++# 6b328085625318aa50d173c98d8bda09d57e27413d114cf787a0f5d06c030cf6
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 78:8f:27:5c:81:12:52:20:a5:04:d0:2d:dd:ba:73:f4
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = PL, O = Asseco Data Systems S.A., OU = Certum Certification Authority, CN = Certum EC-384 CA
++ Validity
++ Not Before: Mar 26 07:24:54 2018 GMT
++ Not After : Mar 26 07:24:54 2043 GMT
++ Subject: C = PL, O = Asseco Data Systems S.A., OU = Certum Certification Authority, CN = Certum EC-384 CA
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:c4:28:8e:ab:18:5b:6a:be:6e:64:37:63:e4:cd:
++ ec:ab:3a:f7:cc:a1:b8:0e:82:49:d7:86:29:9f:a1:
++ 94:f2:e3:60:78:98:81:78:06:4d:f2:ec:9a:0e:57:
++ 60:83:9f:b4:e6:17:2f:1a:b3:5d:02:5b:89:23:3c:
++ c2:11:05:2a:a7:88:13:18:f3:50:84:d7:bd:34:2c:
++ 27:89:55:ff:ce:4c:e7:df:a6:1f:28:c4:f0:54:c3:
++ b9:7c:b7:53:ad:eb:c2
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 8D:06:66:74:24:76:3A:F3:89:F7:BC:D6:BD:47:7D:2F:BC:10:5F:4B
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:65:02:30:03:55:2d:a6:e6:18:c4:7c:ef:c9:50:6e:c1:27:
++ 0f:9c:87:af:6e:d5:1b:08:18:bd:92:29:c1:ef:94:91:78:d2:
++ 3a:1c:55:89:62:e5:1b:09:1e:ba:64:6b:f1:76:b4:d4:02:31:
++ 00:b4:42:84:99:ff:ab:e7:9e:fb:91:97:27:5d:dc:b0:5b:30:
++ 71:ce:5e:38:1a:6a:d9:25:e7:ea:f7:61:92:56:f8:ea:da:36:
++ c2:87:65:96:2e:72:25:2f:7f:df:c3:13:c9
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# fe7696573855773e37a95e7ad4d9cc96c30157c15d31765ba9b15704e1ae78fd
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 1e:bf:59:50:b8:c9:80:37:4c:06:f7:eb:55:4f:b5:ed
++ Signature Algorithm: sha512WithRSAEncryption
++ Issuer: C = PL, O = Asseco Data Systems S.A., OU = Certum Certification Authority, CN = Certum Trusted Root CA
++ Validity
++ Not Before: Mar 16 12:10:13 2018 GMT
++ Not After : Mar 16 12:10:13 2043 GMT
++ Subject: C = PL, O = Asseco Data Systems S.A., OU = Certum Certification Authority, CN = Certum Trusted Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:d1:2d:8e:bb:b7:36:ea:6d:37:91:9f:4e:93:a7:
++ 05:e4:29:03:25:ce:1c:82:f7:7c:99:9f:41:06:cd:
++ ed:a3:ba:c0:db:09:2c:c1:7c:df:29:7e:4b:65:2f:
++ 93:a7:d4:01:6b:03:28:18:a3:d8:9d:05:c1:2a:d8:
++ 45:f1:91:de:df:3b:d0:80:02:8c:cf:38:0f:ea:a7:
++ 5c:78:11:a4:c1:c8:85:5c:25:d3:d3:b2:e7:25:cf:
++ 11:54:97:ab:35:c0:1e:76:1c:ef:00:53:9f:39:dc:
++ 14:a5:2c:22:25:b3:72:72:fc:8d:b3:e5:3e:08:1e:
++ 14:2a:37:0b:88:3c:ca:b0:f4:c8:c2:a1:ae:bc:c1:
++ be:29:67:55:e2:fc:ad:59:5c:fe:bd:57:2c:b0:90:
++ 8d:c2:ed:37:b6:7c:99:88:b5:d5:03:9a:3d:15:0d:
++ 3d:3a:a8:a8:45:f0:95:4e:25:59:1d:cd:98:69:bb:
++ d3:cc:32:c9:8d:ef:81:fe:ad:7d:89:bb:ba:60:13:
++ ca:65:95:67:a0:f3:19:f6:03:56:d4:6a:d3:27:e2:
++ a1:ad:83:f0:4a:12:22:77:1c:05:73:e2:19:71:42:
++ c0:ec:75:46:9a:90:58:e0:6a:8e:2b:a5:46:30:04:
++ 8e:19:b2:17:e3:be:a9:ba:7f:56:f1:24:03:d7:b2:
++ 21:28:76:0e:36:30:4c:79:d5:41:9a:9a:a8:b8:35:
++ ba:0c:3a:f2:44:1b:20:88:f7:c5:25:d7:3d:c6:e3:
++ 3e:43:dd:87:fe:c4:ea:f5:53:3e:4c:65:ff:3b:4a:
++ cb:78:5a:6b:17:5f:0d:c7:c3:4f:4e:9a:2a:a2:ed:
++ 57:4d:22:e2:46:9a:3f:0f:91:34:24:7d:55:e3:8c:
++ 95:37:d3:1a:f0:09:2b:2c:d2:c9:8d:b4:0d:00:ab:
++ 67:29:28:d8:01:f5:19:04:b6:1d:be:76:fe:72:5c:
++ c4:85:ca:d2:80:41:df:05:a8:a3:d5:84:90:4f:0b:
++ f3:e0:3f:9b:19:d2:37:89:3f:f2:7b:52:1c:8c:f6:
++ e1:f7:3c:07:97:8c:0e:a2:59:81:0c:b2:90:3d:d3:
++ e3:59:46:ed:0f:a9:a7:de:80:6b:5a:aa:07:b6:19:
++ cb:bc:57:f3:97:21:7a:0c:b1:2b:74:3e:eb:da:a7:
++ 67:2d:4c:c4:98:9e:36:09:76:66:66:fc:1a:3f:ea:
++ 48:54:1c:be:30:bd:80:50:bf:7c:b5:ce:00:f6:0c:
++ 61:d9:e7:24:03:e0:e3:01:81:0e:bd:d8:85:34:88:
++ bd:b2:36:a8:7b:5c:08:e5:44:80:8c:6f:f8:2f:d5:
++ 21:ca:1d:1c:d0:fb:c4:b5:87:d1:3a:4e:c7:76:b5:
++ 35:48:b5
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 8C:FB:1C:75:BC:02:D3:9F:4E:2E:48:D9:F9:60:54:AA:C4:B3:4F:FA
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Signature Algorithm: sha512WithRSAEncryption
++ 48:a2:d5:00:0b:2e:d0:3f:bc:1c:d5:b5:54:49:1e:5a:6b:f4:
++ e4:f2:e0:40:37:e0:cc:14:7b:b9:c9:fa:35:b5:75:17:93:6a:
++ 05:69:85:9c:cd:4f:19:78:5b:19:81:f3:63:3e:c3:ce:5b:8f:
++ f5:2f:5e:01:76:13:3f:2c:00:b9:cd:96:52:39:49:6d:04:4e:
++ c5:e9:0f:86:0d:e1:fa:b3:5f:82:12:f1:3a:ce:66:06:24:34:
++ 2b:e8:cc:ca:e7:69:dc:87:9d:c2:34:d7:79:d1:d3:77:b8:aa:
++ 59:58:fe:9d:26:fa:38:86:3e:9d:8a:87:64:57:e5:17:3a:e2:
++ f9:8d:b9:e3:33:78:c1:90:d8:b8:dd:b7:83:51:e4:c4:cc:23:
++ d5:06:7c:e6:51:d3:cd:34:31:c0:f6:46:bb:0b:ad:fc:3d:10:
++ 05:2a:3b:4a:91:25:ee:8c:d4:84:87:80:2a:bc:09:8c:aa:3a:
++ 13:5f:e8:34:79:50:c1:10:19:f9:d3:28:1e:d4:d1:51:30:29:
++ b3:ae:90:67:d6:1f:0a:63:b1:c5:a9:c6:42:31:63:17:94:ef:
++ 69:cb:2f:fa:8c:14:7d:c4:43:18:89:d9:f0:32:40:e6:80:e2:
++ 46:5f:e5:e3:c1:00:59:a8:f9:e8:20:bc:89:2c:0e:47:34:0b:
++ ea:57:c2:53:36:fc:a7:d4:af:31:cd:fe:02:e5:75:fa:b9:27:
++ 09:f9:f3:f5:3b:ca:7d:9f:a9:22:cb:88:c9:aa:d1:47:3d:36:
++ 77:a8:59:64:6b:27:cf:ef:27:c1:e3:24:b5:86:f7:ae:7e:32:
++ 4d:b0:79:68:d1:39:e8:90:58:c3:83:bc:0f:2c:d6:97:eb:ce:
++ 0c:e1:20:c7:da:b7:3e:c3:3f:bf:2f:dc:34:a4:fb:2b:21:cd:
++ 67:8f:4b:f4:e3:ea:d4:3f:e7:4f:ba:b9:a5:93:45:1c:66:1f:
++ 21:fa:64:5e:6f:e0:76:94:32:cb:75:f5:6e:e5:f6:8f:c7:b8:
++ a4:cc:a8:96:7d:64:fb:24:5a:4a:03:6c:6b:38:c6:e8:03:43:
++ 9a:f7:57:b9:b3:29:69:93:38:f4:03:f2:bb:fb:82:6b:07:20:
++ d1:52:1f:9a:64:02:7b:98:66:db:5c:4d:5a:0f:d0:84:95:a0:
++ 3c:14:43:06:ca:ca:db:b8:41:36:da:6a:44:67:87:af:af:e3:
++ 45:11:15:69:08:b2:be:16:39:97:24:6f:12:45:d1:67:5d:09:
++ a8:c9:15:da:fa:d2:a6:5f:13:61:1f:bf:85:ac:b4:ad:ad:05:
++ 94:08:83:1e:75:17:d3:71:3b:93:50:23:59:a0:ed:3c:91:54:
++ 9d:76:00:c5:c3:b8:38:db
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# e59aaa816009c22bff5b25bad37df306f049797c1f81d85ab089e657bd8f0044
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 7c:c9:8f:2b:84:d7:df:ea:0f:c9:65:9a:d3:4b:4d:96
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = DE, O = D-Trust GmbH, CN = D-TRUST BR Root CA 1 2020
++ Validity
++ Not Before: Feb 11 09:45:00 2020 GMT
++ Not After : Feb 11 09:44:59 2035 GMT
++ Subject: C = DE, O = D-Trust GmbH, CN = D-TRUST BR Root CA 1 2020
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:c6:cb:c7:28:d1:fb:84:f5:9a:ef:42:14:20:e1:
++ 43:6b:6e:75:ad:fc:2b:03:84:d4:76:93:25:d7:59:
++ 3b:41:65:6b:1e:e6:34:2a:bb:74:f6:12:ce:e8:6d:
++ e7:ab:e4:3c:4e:3f:44:08:8b:cd:16:71:cb:bf:92:
++ 99:f4:a4:d7:3c:50:54:52:90:85:83:78:94:67:67:
++ a3:1c:09:19:3d:75:34:85:de:ed:60:7d:c7:0c:b4:
++ 41:52:b9:6e:e5:ee:42
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 73:91:10:AB:FF:55:B3:5A:7C:09:25:D5:B2:BA:08:A0:6B:AB:1F:6D
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 CRL Distribution Points:
++
++ Full Name:
++ URI:http://crl.d-trust.net/crl/d-trust_br_root_ca_1_2020.crl
++
++ Full Name:
++ URI:ldap://directory.d-trust.net/CN=D-TRUST%20BR%20Root%20CA%201%202020,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
++
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:66:02:31:00:94:90:2d:13:fa:e1:63:f8:61:63:e8:ad:85:
++ 78:54:91:9c:b8:93:38:3e:1a:41:da:40:16:53:42:08:ca:2f:
++ 8e:f1:3e:81:56:c0:aa:d8:ed:18:c4:b0:ae:f4:3e:fa:26:02:
++ 31:00:f3:28:e2:c6:db:2b:99:fb:b7:51:b8:24:a3:a4:94:7a:
++ 1a:3f:e6:36:e2:03:57:33:8a:30:cb:82:c7:d6:14:11:d5:75:
++ 63:5b:14:95:9c:1f:01:cf:d8:d5:72:a7:0f:3b
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 08170d1aa36453901a2f959245e347db0c8d37abaabc56b81aa100dc958970db
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 5f:02:41:d7:7a:87:7c:4c:03:a3:ac:96:8d:fb:ff:d0
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = DE, O = D-Trust GmbH, CN = D-TRUST EV Root CA 1 2020
++ Validity
++ Not Before: Feb 11 10:00:00 2020 GMT
++ Not After : Feb 11 09:59:59 2035 GMT
++ Subject: C = DE, O = D-Trust GmbH, CN = D-TRUST EV Root CA 1 2020
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:f1:0b:dd:86:43:20:19:df:97:85:e8:22:4a:9b:
++ cf:9d:98:bf:b4:05:26:c9:cb:e3:a6:d2:8f:c5:9e:
++ 78:7b:31:89:a9:89:ad:27:3c:65:10:82:fc:df:c3:
++ 9d:4e:f0:33:23:c4:d2:32:f5:1c:b0:df:33:17:5d:
++ c5:f0:b1:8a:f9:ef:b9:b7:14:ca:29:4a:c2:0f:a9:
++ 7f:75:65:49:2a:30:67:f4:64:f7:d6:1a:77:da:c3:
++ c2:97:61:42:7b:49:ad
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 7F:10:01:16:37:3A:A4:28:E4:50:F8:A4:F7:EC:6B:32:B6:FE:E9:8B
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 CRL Distribution Points:
++
++ Full Name:
++ URI:http://crl.d-trust.net/crl/d-trust_ev_root_ca_1_2020.crl
++
++ Full Name:
++ URI:ldap://directory.d-trust.net/CN=D-TRUST%20EV%20Root%20CA%201%202020,O=D-Trust%20GmbH,C=DE?certificaterevocationlist
++
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:66:02:31:00:ca:3c:c6:2a:75:c2:5e:75:62:39:36:00:60:
++ 5a:8b:c1:93:99:cc:d9:db:41:3b:3b:87:99:17:3b:d5:cc:4f:
++ ca:22:f7:a0:80:cb:f9:b4:b1:1b:56:f5:72:d2:fc:19:d1:02:
++ 31:00:91:f7:30:93:3f:10:46:2b:71:a4:d0:3b:44:9b:c0:29:
++ 02:05:b2:41:77:51:f3:79:5a:9e:8e:14:a0:4e:42:d2:5b:81:
++ f3:34:6a:03:e7:22:38:50:5b:ed:19:4f:43:16
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# cbb9c44d84b8043e1050ea31a69f514955d7bfd2e2c6b49301019ad61d9f5058
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 11:d2:bb:ba:33:6e:d4:bc:e6:24:68:c5:0d:84:1d:98:e8:43
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = BE, O = GlobalSign nv-sa, CN = GlobalSign Root E46
++ Validity
++ Not Before: Mar 20 00:00:00 2019 GMT
++ Not After : Mar 20 00:00:00 2046 GMT
++ Subject: C = BE, O = GlobalSign nv-sa, CN = GlobalSign Root E46
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:9c:0e:b1:cf:b7:e8:9e:52:77:75:34:fa:a5:46:
++ a7:ad:32:19:32:b4:07:a9:27:ca:94:bb:0c:d2:0a:
++ 10:c7:da:89:b0:97:0c:70:13:09:01:8e:d8:ea:47:
++ ea:be:b2:80:2b:cd:fc:28:0d:db:ac:bc:a4:86:37:
++ ed:70:08:00:75:ea:93:0b:7b:2e:52:9c:23:68:23:
++ 06:43:ec:92:2f:53:84:db:fb:47:14:07:e8:5f:94:
++ 67:5d:c9:7a:81:3c:20
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 31:0A:90:8F:B6:C6:9D:D2:44:4B:80:B5:A2:E6:1F:B1:12:4F:1B:95
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:65:02:31:00:df:54:90:ed:9b:ef:8b:94:02:93:17:82:99:
++ be:b3:9e:2c:f6:0b:91:8c:9f:4a:14:b1:f6:64:bc:bb:68:51:
++ 13:0c:03:f7:15:8b:84:60:b9:8b:ff:52:8e:e7:8c:bc:1c:02:
++ 30:3c:f9:11:d4:8c:4e:c0:c1:61:c2:15:4c:aa:ab:1d:0b:31:
++ 5f:3b:1c:e2:00:97:44:31:e6:fe:73:96:2f:da:96:d3:fe:08:
++ 07:b3:34:89:bc:05:9f:f7:1e:86:ee:8b:70
++-----BEGIN CERTIFICATE-----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=
++-----END CERTIFICATE-----
++
++# 4fa3126d8d3a11d1c4855a4f807cbad6cf919d3a5a88b03bea2c6372d93c40c9
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 11:d2:bb:b9:d7:23:18:9e:40:5f:0a:9d:2d:d0:df:25:67:d1
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C = BE, O = GlobalSign nv-sa, CN = GlobalSign Root R46
++ Validity
++ Not Before: Mar 20 00:00:00 2019 GMT
++ Not After : Mar 20 00:00:00 2046 GMT
++ Subject: C = BE, O = GlobalSign nv-sa, CN = GlobalSign Root R46
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:ac:ac:74:32:e8:b3:65:e5:ba:ed:43:26:1d:a6:
++ 89:0d:45:ba:29:88:b2:a4:1d:63:dd:d3:c1:2c:09:
++ 57:89:39:a1:55:e9:67:34:77:0c:6e:e4:55:1d:52:
++ 25:d2:13:6b:5e:e1:1d:a9:b7:7d:89:32:5f:0d:9e:
++ 9f:2c:7a:63:60:40:1f:a6:b0:b6:78:8f:99:54:96:
++ 08:58:ae:e4:06:bc:62:05:02:16:bf:af:a8:23:03:
++ b6:94:0f:bc:6e:6c:c2:cb:d5:a6:bb:0c:e9:f6:c1:
++ 02:fb:21:de:66:dd:17:ab:74:42:ef:f0:74:2f:25:
++ f4:ea:6b:55:5b:90:db:9d:df:5e:87:0a:40:fb:ad:
++ 19:6b:fb:f7:ca:60:88:de:da:c1:8f:d6:ae:d5:7f:
++ d4:3c:83:ee:d7:16:4c:83:45:33:6b:27:d0:86:d0:
++ 1c:2d:6b:f3:ab:7d:f1:85:a9:f5:28:d2:ad:ef:f3:
++ 84:4b:1c:87:fc:13:a3:3a:72:a2:5a:11:2b:d6:27:
++ 71:27:ed:81:2d:6d:66:81:92:87:b4:1b:58:7a:cc:
++ 3f:0a:fa:46:4f:4d:78:5c:f8:2b:48:e3:04:84:cb:
++ 5d:f6:b4:6a:b3:65:fc:42:9e:51:26:23:20:cb:3d:
++ 14:f9:81:ed:65:16:00:4f:1a:64:97:66:08:cf:8c:
++ 7b:e3:2b:c0:9d:f9:14:f2:1b:f1:56:6a:16:bf:2c:
++ 85:85:cd:78:38:9a:eb:42:6a:02:34:18:83:17:4e:
++ 94:56:f8:b6:82:b5:f3:96:dd:3d:f3:be:7f:20:77:
++ 3e:7b:19:23:6b:2c:d4:72:73:43:57:7d:e0:f8:d7:
++ 69:4f:17:36:04:f9:c0:90:60:37:45:de:e6:0c:d8:
++ 74:8d:ae:9c:a2:6d:74:5d:42:be:06:f5:d9:64:6e:
++ 02:10:ac:89:b0:4c:3b:07:4d:40:7e:24:c5:8a:98:
++ 82:79:8e:a4:a7:82:20:8d:23:fa:27:71:c9:df:c6:
++ 41:74:a0:4d:f6:91:16:dc:46:8c:5f:29:63:31:59:
++ 71:0c:d8:6f:c2:b6:32:7d:fb:e6:5d:53:a6:7e:15:
++ fc:bb:75:7c:5d:ec:f8:f6:17:1c:ec:c7:6b:19:cb:
++ f3:7b:f0:2b:07:a5:d9:6c:79:54:76:6c:9d:1c:a6:
++ 6e:0e:e9:79:0c:a8:23:6a:a3:df:1b:30:31:9f:b1:
++ 54:7b:fe:6a:cb:66:aa:dc:65:d0:a2:9e:4a:9a:07:
++ 21:6b:81:8f:db:c4:59:fa:de:22:c0:04:9c:e3:aa:
++ 5b:36:93:e8:3d:bd:7a:a1:9d:0b:76:b1:0b:c7:9d:
++ fd:cf:98:a8:06:c2:f8:2a:a3:a1:83:a0:b7:25:72:
++ a5:02:e3
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 03:5C:AB:73:81:87:A8:CC:B0:A6:D5:94:E2:36:96:49:FF:05:99:2C
++ Signature Algorithm: sha384WithRSAEncryption
++ 7c:78:ec:f6:02:2c:bb:5b:7e:92:2b:5d:39:dc:be:d8:1d:a2:
++ 42:33:4d:f9:ef:a4:2a:3b:44:69:1e:ac:d9:45:a3:4e:3c:a7:
++ d8:24:51:b2:54:1c:93:4e:c4:ef:7b:93:85:60:26:ea:09:48:
++ e0:f5:bb:c7:e9:68:d2:bb:6a:31:71:cc:79:ae:11:a8:f0:99:
++ fd:e5:1f:bc:2f:a8:cc:57:eb:76:c4:21:a6:47:53:55:4d:68:
++ bf:05:a4:ee:d7:26:ab:62:da:43:37:4b:e2:c6:b5:e5:b2:83:
++ 19:3a:c7:d3:db:4d:9e:08:7a:f3:ee:cf:3e:62:fb:ac:e8:60:
++ cc:d1:c7:a1:5c:83:45:c4:45:cc:f3:17:6b:14:c9:04:02:3e:
++ d2:24:a6:79:e9:1e:ce:a2:e7:c1:59:15:9f:1d:e2:4b:9a:3e:
++ 9f:76:08:2d:6b:d8:ba:57:14:da:83:ea:fe:8c:55:e9:d0:4e:
++ a9:cc:77:31:b1:44:11:7a:5c:b1:3e:d3:14:45:15:18:62:24:
++ 13:d2:cb:4d:ce:5c:83:c1:36:f2:10:b5:0e:88:6d:b8:e1:56:
++ 9f:89:de:96:66:39:47:64:2c:6e:4d:ae:62:7b:bf:60:74:19:
++ b8:56:ac:92:ac:16:32:ed:ad:68:55:fe:98:ba:d3:34:de:f4:
++ c9:61:c3:0e:86:f6:4b:84:60:ee:0d:7b:b5:32:58:79:91:55:
++ 2c:81:43:b3:74:1f:7a:aa:25:9e:1d:d7:a1:8b:b9:cd:42:2e:
++ 04:a4:66:83:4d:89:35:b6:6c:a8:36:4a:79:21:78:22:d0:42:
++ bc:d1:40:31:90:a1:be:04:cf:ca:67:ed:f5:f0:80:d3:60:c9:
++ 83:2a:22:05:d0:07:3b:52:bf:0c:9e:aa:2b:f9:bb:e6:1f:8f:
++ 25:ba:85:8d:17:1e:02:fe:5d:50:04:57:cf:fe:2d:bc:ef:5c:
++ c0:1a:ab:b6:9f:24:c6:df:73:68:48:90:2c:14:f4:3f:52:1a:
++ e4:d2:cb:14:c3:61:69:cf:e2:f9:18:c5:ba:33:9f:14:a3:04:
++ 5d:b9:71:f7:b5:94:d8:f6:33:c1:5a:c1:34:8b:7c:9b:dd:93:
++ 3a:e7:13:a2:70:61:9f:af:8f:eb:d8:c5:75:f8:33:66:d4:74:
++ 67:3a:37:77:9c:e7:dd:a4:0f:76:43:66:8a:43:f2:9f:fb:0c:
++ 42:78:63:d1:e2:0f:6f:7b:d4:a1:3d:74:97:85:b7:48:39:41:
++ d6:20:fc:d0:3a:b3:fa:e8:6f:c4:8a:ba:71:37:be:8b:97:b1:
++ 78:31:4f:b3:e7:b6:03:13:ce:54:9d:ae:25:59:cc:7f:35:5f:
++ 08:f7:40:45:31:78:2a:7a
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 3f99cc474acfce4dfed58794665e478d1547739f2e780f1bb4ca9b133097d401
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 67:74:9d:8d:77:d8:3b:6a:db:22:f4:ff:59:e2:bf:ce
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = GR, O = Hellenic Academic and Research Institutions CA, CN = HARICA TLS ECC Root CA 2021
++ Validity
++ Not Before: Feb 19 11:01:10 2021 GMT
++ Not After : Feb 13 11:01:09 2045 GMT
++ Subject: C = GR, O = Hellenic Academic and Research Institutions CA, CN = HARICA TLS ECC Root CA 2021
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:38:08:fe:b1:a0:96:d2:7a:ac:af:49:3a:d0:c0:
++ e0:c3:3b:28:aa:f1:72:6d:65:00:47:88:84:fc:9a:
++ 26:6b:aa:4b:ba:6c:04:0a:88:5e:17:f2:55:87:fc:
++ 30:b0:34:e2:34:58:57:1a:84:53:e9:30:d9:a9:f2:
++ 96:74:c3:51:1f:58:49:31:cc:98:4e:60:11:87:75:
++ d3:72:94:90:4f:9b:10:25:2a:a8:78:2d:be:90:41:
++ 58:90:15:72:a7:a1:b7
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ C9:1B:53:81:12:FE:04:D5:16:D1:AA:BC:9A:6F:B7:A0:95:19:6E:CA
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:64:02:30:11:de:ae:f8:dc:4e:88:b0:a9:f0:22:ad:c2:51:
++ 40:ef:60:71:2d:ee:8f:02:c4:5d:03:70:49:a4:92:ea:c5:14:
++ 88:70:a6:d3:0d:b0:aa:ca:2c:40:9c:fb:e9:82:6e:9a:02:30:
++ 2b:47:9a:07:c6:d1:c2:81:7c:ca:0b:96:18:41:1b:a3:f4:30:
++ 09:9e:b5:23:28:0d:9f:14:b6:3c:53:a2:4c:06:69:7d:fa:6c:
++ 91:c6:2a:49:45:e6:ec:b7:13:e1:3a:6c
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# d95d0e8eda79525bf9beb11b14d2100d3294985f0c62d9fabd9cd999eccb7b1d
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 39:ca:93:1c:ef:43:f3:c6:8e:93:c7:f4:64:89:38:7e
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = GR, O = Hellenic Academic and Research Institutions CA, CN = HARICA TLS RSA Root CA 2021
++ Validity
++ Not Before: Feb 19 10:55:38 2021 GMT
++ Not After : Feb 13 10:55:37 2045 GMT
++ Subject: C = GR, O = Hellenic Academic and Research Institutions CA, CN = HARICA TLS RSA Root CA 2021
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:8b:c2:e7:af:65:9b:05:67:96:c9:0d:24:b9:d0:
++ 0e:64:fc:ce:e2:24:18:2c:84:7f:77:51:cb:04:11:
++ 36:b8:5e:ed:69:71:a7:9e:e4:25:09:97:67:c1:47:
++ c2:cf:91:16:36:62:3d:38:04:e1:51:82:ff:ac:d2:
++ b4:69:dd:2e:ec:11:a3:45:ee:6b:6b:3b:4c:bf:8c:
++ 8d:a4:1e:9d:11:b9:e9:38:f9:7a:0e:0c:98:e2:23:
++ 1d:d1:4e:63:d4:e7:b8:41:44:fb:6b:af:6b:da:1f:
++ d3:c5:91:88:5b:a4:89:92:d1:81:e6:8c:39:58:a0:
++ d6:69:43:a9:ad:98:52:58:6e:db:0a:fb:6b:cf:68:
++ fa:e3:a4:5e:3a:45:73:98:07:ea:5f:02:72:de:0c:
++ a5:b3:9f:ae:a9:1d:b7:1d:b3:fc:8a:59:e7:6e:72:
++ 65:ad:f5:30:94:23:07:f3:82:16:4b:35:98:9c:53:
++ bb:2f:ca:e4:5a:d9:c7:8d:1d:fc:98:99:fb:2c:a4:
++ 82:6b:f0:2a:1f:8e:0b:5f:71:5c:5c:ae:42:7b:29:
++ 89:81:cb:03:a3:99:ca:88:9e:0b:40:09:41:33:db:
++ e6:58:7a:fd:ae:99:70:c0:5a:0f:d6:13:86:71:2f:
++ 76:69:fc:90:dd:db:2d:6e:d1:f2:9b:f5:1a:6b:9e:
++ 6f:15:8c:7a:f0:4b:28:a0:22:38:80:24:6c:36:a4:
++ 3b:f2:30:91:f3:78:13:cf:c1:3f:35:ab:f1:1d:11:
++ 23:b5:43:22:9e:01:92:b7:18:02:e5:11:d1:82:db:
++ 15:00:cc:61:37:c1:2a:7c:9a:e1:d0:ba:b3:50:46:
++ ee:82:ac:9d:31:f8:fb:23:e2:03:00:48:70:a3:09:
++ 26:79:15:53:60:f3:38:5c:ad:38:ea:81:00:63:14:
++ b9:33:5e:dd:0b:db:a0:45:07:1a:33:09:f8:4d:b4:
++ a7:02:a6:69:f4:c2:59:05:88:65:85:56:ae:4b:cb:
++ e0:de:3c:7d:2d:1a:c8:e9:fb:1f:a3:61:4a:d6:2a:
++ 13:ad:77:4c:1a:18:9b:91:0f:58:d8:06:54:c5:97:
++ f8:aa:3f:20:8a:a6:85:a6:77:f6:a6:fc:1c:e2:ee:
++ 6e:94:33:2a:83:50:84:0a:e5:4f:86:f8:50:45:78:
++ 00:81:eb:5b:68:e3:26:8d:cc:7b:5c:51:f4:14:2c:
++ 40:be:1a:60:1d:7a:72:61:1d:1f:63:2d:88:aa:ce:
++ a2:45:90:08:fc:6b:be:b3:50:2a:5a:fd:a8:48:18:
++ 46:d6:90:40:92:90:0a:84:5e:68:31:f8:eb:ed:0d:
++ d3:1d:c6:7d:99:18:55:56:27:65:2e:8d:45:c5:24:
++ ec:ce:e3
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 0A:48:23:A6:60:A4:92:0A:33:EA:93:5B:C5:57:EA:25:4D:BD:12:EE
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ 3e:90:48:aa:6e:62:15:25:66:7b:0c:d5:8c:8b:89:9d:d7:ed:
++ 4e:07:ef:9c:d0:14:5f:5e:50:bd:68:96:90:a4:14:11:aa:68:
++ 6d:09:35:39:40:09:da:f4:09:2c:34:a5:7b:59:84:49:29:97:
++ 74:c8:07:1e:47:6d:f2:ce:1c:50:26:e3:9e:3d:40:53:3f:f7:
++ 7f:96:76:10:c5:46:a5:d0:20:4b:50:f4:35:3b:18:f4:55:6a:
++ 41:1b:47:06:68:3c:bb:09:08:62:d9:5f:55:42:aa:ac:53:85:
++ ac:95:56:36:56:ab:e4:05:8c:c5:a8:da:1f:a3:69:bd:53:0f:
++ c4:ff:dc:ca:e3:7e:f2:4c:88:86:47:46:1a:f3:00:f5:80:91:
++ a2:dc:43:42:94:9b:20:f0:d1:cd:b2:eb:2c:53:c2:53:78:4a:
++ 4f:04:94:41:9a:8f:27:32:c1:e5:49:19:bf:f1:f2:c2:8b:a8:
++ 0a:39:31:28:b4:7d:62:36:2c:4d:ec:1f:33:b6:7e:77:6d:7e:
++ 50:f0:9f:0e:d7:11:8f:cf:18:c5:e3:27:fe:26:ef:05:9d:cf:
++ cf:37:c5:d0:7b:da:3b:b0:16:84:0c:3a:93:d6:be:17:db:0f:
++ 3e:0e:19:78:09:c7:a9:02:72:22:4b:f7:37:76:ba:75:c4:85:
++ 03:5a:63:d5:b1:75:05:c2:b9:bd:94:ad:8c:15:99:a7:93:7d:
++ f6:c5:f3:aa:74:cf:04:85:94:98:00:f4:e2:f9:ca:24:65:bf:
++ e0:62:af:c8:c5:fa:b2:c9:9e:56:48:da:79:fd:96:76:15:be:
++ a3:8e:56:c4:b3:34:fc:be:47:f4:c1:b4:a8:fc:d5:30:88:68:
++ ee:cb:ae:c9:63:c4:76:be:ac:38:18:e1:5e:5c:cf:ae:3a:22:
++ 51:eb:d1:8b:b3:f3:2b:33:07:54:87:fa:b4:b2:13:7b:ba:53:
++ 04:62:01:9d:f1:c0:4f:ee:e1:3a:d4:8b:20:10:fa:02:57:e6:
++ ef:c1:0b:b7:90:46:9c:19:29:8c:dc:6f:a0:4a:69:69:94:b7:
++ 24:65:a0:ff:ac:3f:ce:01:fb:21:2e:fd:68:f8:9b:f2:a5:cf:
++ 31:38:5c:15:aa:e6:97:00:c1:df:5a:a5:a7:39:aa:e9:84:7f:
++ 3c:51:a8:3a:d9:94:5b:8c:bf:4f:08:71:e5:db:a8:5c:d4:d2:
++ a6:fe:00:a3:c6:16:c7:0f:e8:80:ce:1c:28:64:74:19:08:d3:
++ 42:e3:ce:00:5d:7f:b1:dc:13:b0:e1:05:cb:d1:20:aa:86:74:
++ 9e:39:e7:91:fd:ff:5b:d6:f7:ad:a6:2f:03:0b:6d:e3:57:54:
++ eb:76:53:18:8d:11:98:ba
++-----BEGIN CERTIFICATE-----
++MIIFpDCCA4ygAwIBAgIQOcqTHO9D88aOk8f0ZIk4fjANBgkqhkiG9w0BAQsFADBs
++MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl
++c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBSU0Eg
++Um9vdCBDQSAyMDIxMB4XDTIxMDIxOTEwNTUzOFoXDTQ1MDIxMzEwNTUzN1owbDEL
++MAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNl
++YXJjaCBJbnN0aXR1dGlvbnMgQ0ExJDAiBgNVBAMMG0hBUklDQSBUTFMgUlNBIFJv
++b3QgQ0EgMjAyMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAIvC569l
++mwVnlskNJLnQDmT8zuIkGCyEf3dRywQRNrhe7Wlxp57kJQmXZ8FHws+RFjZiPTgE
++4VGC/6zStGndLuwRo0Xua2s7TL+MjaQenRG56Tj5eg4MmOIjHdFOY9TnuEFE+2uv
++a9of08WRiFukiZLRgeaMOVig1mlDqa2YUlhu2wr7a89o+uOkXjpFc5gH6l8Cct4M
++pbOfrqkdtx2z/IpZ525yZa31MJQjB/OCFks1mJxTuy/K5FrZx40d/JiZ+yykgmvw
++Kh+OC19xXFyuQnspiYHLA6OZyoieC0AJQTPb5lh6/a6ZcMBaD9YThnEvdmn8kN3b
++LW7R8pv1GmuebxWMevBLKKAiOIAkbDakO/IwkfN4E8/BPzWr8R0RI7VDIp4BkrcY
++AuUR0YLbFQDMYTfBKnya4dC6s1BG7oKsnTH4+yPiAwBIcKMJJnkVU2DzOFytOOqB
++AGMUuTNe3QvboEUHGjMJ+E20pwKmafTCWQWIZYVWrkvL4N48fS0ayOn7H6NhStYq
++E613TBoYm5EPWNgGVMWX+Ko/IIqmhaZ39qb8HOLubpQzKoNQhArlT4b4UEV4AIHr
++W2jjJo3Me1xR9BQsQL4aYB16cmEdH2MtiKrOokWQCPxrvrNQKlr9qEgYRtaQQJKQ
++CoReaDH46+0N0x3GfZkYVVYnZS6NRcUk7M7jAgMBAAGjQjBAMA8GA1UdEwEB/wQF
++MAMBAf8wHQYDVR0OBBYEFApII6ZgpJIKM+qTW8VX6iVNvRLuMA4GA1UdDwEB/wQE
++AwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAPpBIqm5iFSVmewzVjIuJndftTgfvnNAU
++X15QvWiWkKQUEapobQk1OUAJ2vQJLDSle1mESSmXdMgHHkdt8s4cUCbjnj1AUz/3
++f5Z2EMVGpdAgS1D0NTsY9FVqQRtHBmg8uwkIYtlfVUKqrFOFrJVWNlar5AWMxaja
++H6NpvVMPxP/cyuN+8kyIhkdGGvMA9YCRotxDQpSbIPDRzbLrLFPCU3hKTwSUQZqP
++JzLB5UkZv/HywouoCjkxKLR9YjYsTewfM7Z+d21+UPCfDtcRj88YxeMn/ibvBZ3P
++zzfF0HvaO7AWhAw6k9a+F9sPPg4ZeAnHqQJyIkv3N3a6dcSFA1pj1bF1BcK5vZSt
++jBWZp5N99sXzqnTPBIWUmAD04vnKJGW/4GKvyMX6ssmeVkjaef2WdhW+o45WxLM0
++/L5H9MG0qPzVMIho7suuyWPEdr6sOBjhXlzPrjoiUevRi7PzKzMHVIf6tLITe7pT
++BGIBnfHAT+7hOtSLIBD6Alfm78ELt5BGnBkpjNxvoEppaZS3JGWg/6w/zgH7IS79
++aPib8qXPMThcFarmlwDB31qlpzmq6YR/PFGoOtmUW4y/Twhx5duoXNTSpv4Ao8YW
++xw/ogM4cKGR0GQjTQuPOAF1/sdwTsOEFy9EgqoZ0njnnkf3/W9b3raYvAwtt41dU
++63ZTGI0RmLo=
++-----END CERTIFICATE-----
++
++# f015ce3cc239bfef064be9f1d2c417e1a0264a0a94be1f0c8d121864eb6949cc
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 2d:dd:ac:ce:62:97:94:a1:43:e8:b0:cd:76:6a:5e:60
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = TW, O = "Chunghwa Telecom Co., Ltd.", CN = HiPKI Root CA - G1
++ Validity
++ Not Before: Feb 22 09:46:04 2019 GMT
++ Not After : Dec 31 15:59:59 2037 GMT
++ Subject: C = TW, O = "Chunghwa Telecom Co., Ltd.", CN = HiPKI Root CA - G1
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:f4:1e:7f:52:73:32:0c:73:e4:bd:13:74:a3:d4:
++ 30:a8:d0:ae:4b:d8:b6:df:75:47:66:f4:7c:e7:39:
++ 04:1e:6a:70:20:d2:5a:47:72:67:55:f4:a5:e8:9d:
++ d5:1e:21:a1:f0:67:ba:cc:21:68:be:44:53:bf:8d:
++ f9:e2:dc:2f:55:c8:37:3f:1f:a4:c0:9c:b3:e4:77:
++ 5c:a0:46:fe:77:fa:1a:a0:38:ea:ed:9a:72:de:2b:
++ bd:94:57:3a:ba:ec:79:e7:5f:7d:42:64:39:7a:26:
++ 36:f7:24:f0:d5:2f:ba:95:98:11:66:ad:97:35:d6:
++ 75:01:80:e0:af:f4:84:61:8c:0d:1e:5f:7c:87:96:
++ 5e:41:af:eb:87:ea:f8:5d:f1:2e:88:05:3e:4c:22:
++ bb:da:1f:2a:dd:52:46:64:39:f3:42:ce:d9:9e:0c:
++ b3:b0:77:97:64:9c:c0:f4:a3:2e:1f:95:07:b0:17:
++ df:30:db:00:18:96:4c:a1:81:4b:dd:04:6d:53:a3:
++ 3d:fc:07:ac:d4:c5:37:82:eb:e4:95:08:19:28:82:
++ d2:42:3a:a3:d8:53:ec:79:89:60:48:60:c8:72:92:
++ 50:dc:03:8f:83:3f:b2:42:57:5a:db:6a:e9:11:97:
++ dd:85:28:bc:30:4c:ab:e3:c2:b1:45:44:47:1f:e0:
++ 8a:16:07:96:d2:21:0f:53:c0:ed:a9:7e:d4:4e:ec:
++ 9b:09:ec:af:42:ac:30:d6:bf:d1:10:45:e0:a6:16:
++ b2:a5:c5:d3:4f:73:94:33:71:02:a1:6a:a3:d6:33:
++ 97:4f:21:63:1e:5b:8f:d9:c1:5e:45:71:77:0f:81:
++ 5d:5f:21:9a:ad:83:cc:fa:5e:d6:8d:23:5f:1b:3d:
++ 41:af:20:75:66:5a:4a:f6:9f:fb:ab:18:f7:71:c0:
++ b6:1d:31:ec:3b:20:eb:cb:e2:b8:f5:ae:92:b2:f7:
++ e1:84:4b:f2:a2:f2:93:9a:22:9e:d3:14:6f:36:54:
++ bd:1f:5e:59:15:b9:73:a8:c1:7c:6f:7b:62:e9:16:
++ 6c:47:5a:65:f3:0e:11:9b:46:d9:fd:6d:dc:d6:9c:
++ c0:b4:7d:a5:b0:dd:3f:56:6f:a1:f9:f6:e4:12:48:
++ fd:06:7f:12:57:b6:a9:23:4f:5b:03:c3:e0:71:2a:
++ 23:b7:f7:b0:b1:3b:bc:98:bd:d6:98:a8:0c:6b:f6:
++ 8e:12:67:a6:f2:b2:58:e4:02:09:13:3c:a9:bb:10:
++ b4:d2:30:45:f1:ec:f7:00:11:df:65:f8:dc:2b:43:
++ 55:bf:16:97:c4:0f:d5:2c:61:84:aa:72:86:fe:e6:
++ 3a:7e:c2:3f:7d:ee:fc:2f:14:3e:e6:85:dd:50:6f:
++ b7:49:ed
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ F2:77:17:FA:5E:A8:FE:F6:3D:71:D5:68:BA:C9:46:0C:38:D8:AF:B0
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ 50:51:f0:75:dc:70:04:e3:ff:aa:75:d4:71:a2:cb:9e:8f:a8:
++ a9:d3:af:75:c7:54:cf:3a:1c:04:99:22:ac:c4:11:e2:ef:33:
++ 4a:a6:23:1d:0e:0d:47:d8:37:c7:6f:af:34:7f:4f:81:6b:35:
++ 4f:e9:72:a5:31:e2:78:e7:f7:4e:94:18:5b:40:7d:cf:6b:21:
++ 54:86:e6:95:7a:fb:c6:ca:ea:9c:48:4e:57:09:5d:2f:ac:f4:
++ a5:b4:97:33:58:d5:ac:79:a9:cc:5f:f9:85:fa:52:c5:8d:f8:
++ 91:14:eb:3a:0d:17:d0:52:c2:7b:e3:c2:73:8e:46:78:06:38:
++ 2c:e8:5c:da:66:c4:f4:a4:f0:56:19:33:29:5a:65:92:05:47:
++ 46:4a:ab:84:c3:1e:27:a1:1f:11:92:99:27:75:93:0f:bc:36:
++ 3b:97:57:8f:26:5b:0c:bb:9c:0f:d4:6e:30:07:d4:dc:5f:36:
++ 68:66:39:83:96:27:26:8a:c8:c4:39:fe:9a:21:6f:d5:72:86:
++ e9:7f:62:e5:97:4e:d0:24:d0:40:b0:d0:75:08:8e:bd:68:ee:
++ 08:d7:6e:7c:10:70:46:1b:7c:e0:88:b2:9e:72:86:99:01:e3:
++ bf:9f:49:19:b4:25:be:56:65:ae:17:63:e5:1e:df:e8:ff:47:
++ a5:bf:e1:26:05:84:e4:b0:c0:af:e7:08:99:a8:0c:5e:26:80:
++ 45:d4:f8:68:2f:96:8f:ae:e2:4a:1c:9c:16:0c:13:6f:38:87:
++ f6:bb:c8:34:5f:92:03:51:79:70:a6:df:cb:f5:99:4d:79:cd:
++ 4e:bc:57:9f:43:4e:6b:2e:2b:18:f8:6a:73:8c:ba:c5:35:ef:
++ 39:6a:41:1e:cf:71:a8:a2:b2:86:07:5b:3a:c9:e1:ef:3f:65:
++ 04:80:47:32:44:70:95:4e:31:67:6a:74:5b:10:45:75:ea:b0:
++ 9f:d0:e6:35:fe:4e:9f:8b:cc:2b:92:45:5b:6e:25:60:85:46:
++ cd:d1:aa:b0:76:66:93:77:96:be:83:be:38:b6:24:4e:26:0b:
++ cc:ed:7a:56:1a:e0:e9:5a:c6:64:ad:4c:7a:00:48:44:2f:b9:
++ 40:bb:13:3e:be:15:78:9d:85:81:4a:2a:57:de:d5:19:43:da:
++ db:ca:5b:47:86:83:0b:3f:b6:0d:76:78:73:79:22:5e:b1:80:
++ 1f:cf:be:d1:3f:56:10:98:2b:95:87:a1:1f:9d:64:14:60:39:
++ 2c:b3:00:55:2e:e4:f5:b3:0e:57:c4:91:41:00:9c:3f:e8:a5:
++ df:ea:f6:ff:c8:f0:ad:6d:52:a8:17:ab:9b:61:fc:12:51:35:
++ e4:25:fd:af:aa:6a:86:39
++-----BEGIN CERTIFICATE-----
++MIIFajCCA1KgAwIBAgIQLd2szmKXlKFD6LDNdmpeYDANBgkqhkiG9w0BAQsFADBP
++MQswCQYDVQQGEwJUVzEjMCEGA1UECgwaQ2h1bmdod2EgVGVsZWNvbSBDby4sIEx0
++ZC4xGzAZBgNVBAMMEkhpUEtJIFJvb3QgQ0EgLSBHMTAeFw0xOTAyMjIwOTQ2MDRa
++Fw0zNzEyMzExNTU5NTlaME8xCzAJBgNVBAYTAlRXMSMwIQYDVQQKDBpDaHVuZ2h3
++YSBUZWxlY29tIENvLiwgTHRkLjEbMBkGA1UEAwwSSGlQS0kgUm9vdCBDQSAtIEcx
++MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9B5/UnMyDHPkvRN0o9Qw
++qNCuS9i233VHZvR85zkEHmpwINJaR3JnVfSl6J3VHiGh8Ge6zCFovkRTv4354twv
++Vcg3Px+kwJyz5HdcoEb+d/oaoDjq7Zpy3iu9lFc6uux55199QmQ5eiY29yTw1S+6
++lZgRZq2XNdZ1AYDgr/SEYYwNHl98h5ZeQa/rh+r4XfEuiAU+TCK72h8q3VJGZDnz
++Qs7ZngyzsHeXZJzA9KMuH5UHsBffMNsAGJZMoYFL3QRtU6M9/Aes1MU3guvklQgZ
++KILSQjqj2FPseYlgSGDIcpJQ3AOPgz+yQlda22rpEZfdhSi8MEyr48KxRURHH+CK
++FgeW0iEPU8DtqX7UTuybCeyvQqww1r/REEXgphaypcXTT3OUM3ECoWqj1jOXTyFj
++HluP2cFeRXF3D4FdXyGarYPM+l7WjSNfGz1BryB1ZlpK9p/7qxj3ccC2HTHsOyDr
++y+K49a6SsvfhhEvyovKTmiKe0xRvNlS9H15ZFblzqMF8b3ti6RZsR1pl8w4Rm0bZ
++/W3c1pzAtH2lsN0/Vm+h+fbkEkj9Bn8SV7apI09bA8PgcSojt/ewsTu8mL3WmKgM
++a/aOEmem8rJY5AIJEzypuxC00jBF8ez3ABHfZfjcK0NVvxaXxA/VLGGEqnKG/uY6
++fsI/fe78LxQ+5oXdUG+3Se0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNV
++HQ4EFgQU8ncX+l6o/vY9cdVouslGDDjYr7AwDgYDVR0PAQH/BAQDAgGGMA0GCSqG
++SIb3DQEBCwUAA4ICAQBQUfB13HAE4/+qddRxosuej6ip0691x1TPOhwEmSKsxBHi
++7zNKpiMdDg1H2DfHb680f0+BazVP6XKlMeJ45/dOlBhbQH3PayFUhuaVevvGyuqc
++SE5XCV0vrPSltJczWNWseanMX/mF+lLFjfiRFOs6DRfQUsJ748JzjkZ4Bjgs6Fza
++ZsT0pPBWGTMpWmWSBUdGSquEwx4noR8RkpkndZMPvDY7l1ePJlsMu5wP1G4wB9Tc
++XzZoZjmDlicmisjEOf6aIW/Vcobpf2Lll07QJNBAsNB1CI69aO4I1258EHBGG3zg
++iLKecoaZAeO/n0kZtCW+VmWuF2PlHt/o/0elv+EmBYTksMCv5wiZqAxeJoBF1Pho
++L5aPruJKHJwWDBNvOIf2u8g0X5IDUXlwpt/L9ZlNec1OvFefQ05rLisY+GpzjLrF
++Ne85akEez3GoorKGB1s6yeHvP2UEgEcyRHCVTjFnanRbEEV16rCf0OY1/k6fi8wr
++kkVbbiVghUbN0aqwdmaTd5a+g744tiROJgvM7XpWGuDpWsZkrUx6AEhEL7lAuxM+
++vhV4nYWBSipX3tUZQ9rbyltHhoMLP7YNdnhzeSJesYAfz77RP1YQmCuVh6EfnWQU
++YDksswBVLuT1sw5XxJFBAJw/6KXf6vb/yPCtbVKoF6ubYfwSUTXkJf2vqmqGOQ==
++-----END CERTIFICATE-----
++
++# 69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 41:d2:9d:d1:72:ea:ee:a7:80:c1:2c:6c:e9:2f:87:52
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = US, O = Internet Security Research Group, CN = ISRG Root X2
++ Validity
++ Not Before: Sep 4 00:00:00 2020 GMT
++ Not After : Sep 17 16:00:00 2040 GMT
++ Subject: C = US, O = Internet Security Research Group, CN = ISRG Root X2
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:cd:9b:d5:9f:80:83:0a:ec:09:4a:f3:16:4a:3e:
++ 5c:cf:77:ac:de:67:05:0d:1d:07:b6:dc:16:fb:5a:
++ 8b:14:db:e2:71:60:c4:ba:45:95:11:89:8e:ea:06:
++ df:f7:2a:16:1c:a4:b9:c5:c5:32:e0:03:e0:1e:82:
++ 18:38:8b:d7:45:d8:0a:6a:6e:e6:00:77:fb:02:51:
++ 7d:22:d8:0a:6e:9a:5b:77:df:f0:fa:41:ec:39:dc:
++ 75:ca:68:07:0c:1f:ea
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 7C:42:96:AE:DE:4B:48:3B:FA:92:F8:9E:8C:CF:6D:8B:A9:72:37:95
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:65:02:30:7b:79:4e:46:50:84:c2:44:87:46:1b:45:70:ff:
++ 58:99:de:f4:fd:a4:d2:55:a6:20:2d:74:d6:34:bc:41:a3:50:
++ 5f:01:27:56:b4:be:27:75:06:af:12:2e:75:98:8d:fc:02:31:
++ 00:8b:f5:77:6c:d4:c8:65:aa:e0:0b:2c:ee:14:9d:27:37:a4:
++ f9:53:a5:51:e4:29:83:d7:f8:90:31:5b:42:9f:0a:f5:fe:ae:
++ 00:68:e7:8c:49:0f:b6:6f:5b:5b:15:f2:e7
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 88f438dcf8ffd1fa8f429115ffe5f82ae1e06e0c70c375faad717b34a49e7265
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 01:94:30:1e:a2:0b:dd:f5:c5:33:2a:b1:43:44:71:f8:d6:50:4d:0d
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C = KR, O = NAVER BUSINESS PLATFORM Corp., CN = NAVER Global Root Certification Authority
++ Validity
++ Not Before: Aug 18 08:58:42 2017 GMT
++ Not After : Aug 18 23:59:59 2037 GMT
++ Subject: C = KR, O = NAVER BUSINESS PLATFORM Corp., CN = NAVER Global Root Certification Authority
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:b6:d4:f1:93:5c:b5:40:89:0a:ab:0d:90:5b:50:
++ 63:ae:90:94:74:17:45:72:d6:7b:65:5a:29:4b:a7:
++ 56:a0:4b:b8:2f:42:75:e9:d9:7b:24:5a:31:65:ab:
++ 17:17:d1:33:3a:d9:11:dc:40:36:87:df:c7:6a:e9:
++ 26:5e:59:8a:77:e3:e8:48:9c:31:16:fa:3e:91:b1:
++ ca:c9:a3:e2:9f:ce:21:53:a3:02:36:30:cb:52:02:
++ e5:da:32:5d:c3:c5:e6:f9:ee:11:c7:8b:c9:44:1e:
++ 84:93:18:4a:b4:9f:e5:12:64:69:d0:26:85:62:01:
++ b6:c9:02:1d:be:83:51:bb:5c:da:f8:ad:15:6a:99:
++ f7:92:54:f7:34:5b:e9:bf:ea:29:81:12:d4:53:91:
++ 96:b3:91:5a:dd:fe:90:73:28:fb:30:46:b5:ca:08:
++ 07:c7:71:72:c9:66:d3:34:97:f6:8c:f4:18:4a:e1:
++ d0:3d:5a:45:b6:69:a7:29:fb:23:ce:88:d8:12:9c:
++ 00:48:a8:a6:0f:b3:3b:92:8d:71:0e:74:c5:8b:c8:
++ 4c:f9:f4:9b:8e:b8:3c:69:ed:6f:3b:50:2f:58:ed:
++ c4:b0:d0:1c:1b:6a:0c:e2:bc:44:aa:d8:cd:14:5d:
++ 94:78:61:bf:0e:6e:da:2a:bc:2f:0c:0b:71:a6:b3:
++ 16:3f:9c:e6:f9:cc:9f:53:35:e2:03:a0:a0:18:bf:
++ bb:f1:be:f4:d6:8c:87:0d:42:f7:06:b9:f1:6d:ed:
++ 04:94:a8:fe:b6:d3:06:c6:40:61:df:9d:9d:f3:54:
++ 76:ce:53:3a:01:a6:92:41:ec:04:a3:8f:0d:a2:d5:
++ 09:ca:d6:cb:9a:f1:ef:43:5d:c0:ab:a5:41:cf:5c:
++ 53:70:70:c9:88:a6:2d:d4:6b:61:73:50:26:86:61:
++ 0e:5f:1b:c2:2b:e2:8c:d5:bb:9d:c1:03:42:ba:94:
++ da:5f:a9:b0:ca:cc:4d:0a:ef:47:69:03:2f:22:fb:
++ f1:28:ce:bf:5d:50:65:a8:90:6d:b3:74:b0:08:c7:
++ ac:a8:d1:eb:3e:9c:fc:5d:1a:83:2e:2b:cb:b5:f3:
++ 44:9d:3a:a7:17:61:96:a2:71:d3:70:96:15:4d:b7:
++ 4c:73:ee:19:5c:c5:5b:3e:41:fe:ac:75:60:3b:1b:
++ 63:ce:00:dd:da:08:90:62:b4:e5:2d:ee:48:a7:6b:
++ 17:99:54:be:87:4a:e3:a9:5e:04:4c:eb:10:6d:54:
++ d6:ef:f1:e8:f2:62:16:cb:80:6b:ed:3d:ed:f5:1f:
++ 30:a5:ae:4b:c9:13:ed:8a:01:01:c9:b8:51:58:c0:
++ 66:3a:b1:66:4b:c4:d5:31:02:62:e9:74:84:0c:db:
++ 4d:46:2d
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ D2:9F:88:DF:A1:CD:2C:BD:EC:F5:3B:01:01:93:33:27:B2:EB:60:4B
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: sha384WithRSAEncryption
++ 32:ca:80:b3:9d:3d:54:06:dd:d2:d2:2e:f0:a4:01:21:0b:67:
++ 48:ca:6d:8e:e0:c8:aa:0d:aa:8d:21:57:8f:c6:3e:7a:ca:db:
++ 51:d4:52:b3:d4:96:84:a5:58:60:7f:e5:0b:8e:1f:f5:dc:0a:
++ 15:81:e5:3b:b6:b7:22:2f:09:9c:13:16:b1:6c:0c:35:08:6d:
++ ab:63:72:ed:dc:be:ec:c7:57:e6:30:20:71:d6:d7:10:c1:13:
++ 55:01:8c:2a:43:e4:41:f1:cf:3a:7a:53:92:ce:a2:03:05:0d:
++ 38:df:02:bb:10:2e:d9:3b:d2:9b:7a:c0:a1:a6:f8:b5:31:e6:
++ f4:75:c9:b9:53:99:75:47:22:5a:14:15:c7:78:1b:b6:9d:e9:
++ 0c:f8:1b:76:f1:85:84:de:a1:da:12:ef:a4:e2:10:97:7a:78:
++ de:0c:51:97:a8:21:40:8b:86:bd:0d:f0:5e:4e:4b:36:bb:3b:
++ 20:1f:8a:42:56:e1:0b:1a:bf:7b:d0:22:43:2c:44:8c:fb:e5:
++ 2a:b4:6c:1c:1c:ba:94:e0:13:7e:21:e6:9a:c2:cb:c5:42:64:
++ b4:1e:94:7b:08:25:c8:71:cc:87:45:57:85:d3:9f:29:62:22:
++ 83:51:97:00:18:97:77:6a:98:92:c9:7c:60:6c:df:6c:7d:4a:
++ e4:70:4c:c2:9e:b8:1d:f7:d0:34:c7:0f:cc:fb:a7:ff:03:be:
++ ad:70:90:da:0b:dd:c8:6d:97:5f:9a:7f:09:32:41:fd:cd:a2:
++ cc:5a:6d:4c:f2:aa:49:fe:66:f8:e9:d8:35:eb:0e:28:1e:ee:
++ 48:2f:3a:d0:79:09:38:7c:a6:22:82:93:95:d0:03:be:be:02:
++ a0:05:dd:20:22:e3:6f:1d:88:34:60:c6:e6:0a:b9:09:75:0b:
++ f0:07:e8:69:96:35:c7:fb:23:81:8e:38:39:b8:45:2b:43:78:
++ a2:d1:2c:14:ff:0d:28:72:72:95:9b:5e:09:db:89:44:98:aa:
++ a1:49:bb:71:52:f2:bf:f6:ff:27:a1:36:af:b8:b6:77:88:dd:
++ 3a:a4:6d:9b:34:90:dc:14:5d:30:bf:b7:eb:17:e4:87:b7:71:
++ d0:a1:d7:77:15:d4:42:d7:f2:f3:31:99:5d:9b:dd:16:6d:3f:
++ ea:06:23:f8:46:a2:22:ed:93:f6:dd:9a:e6:2a:87:b1:98:54:
++ f1:22:f7:6b:45:e3:e2:8e:76:1d:9a:8d:c4:06:8d:36:b7:14:
++ f3:9d:54:69:b7:8e:3c:d5:a4:6d:93:81:b7:ad:f6:bd:64:7b:
++ c2:c9:68:39:a0:92:9c:cd:34:86:91:90:fa:64:51:9d:fe:fe:
++ eb:a5:f5:75:de:89:f7:72
+ -----BEGIN CERTIFICATE-----
+ MIIFojCCA4qgAwIBAgIUAZQwHqIL3fXFMyqxQ0Rx+NZQTQ0wDQYJKoZIhvcNAQEM
+ BQAwaTELMAkGA1UEBhMCS1IxJjAkBgNVBAoMHU5BVkVSIEJVU0lORVNTIFBMQVRG
+@@ -4001,13 +8461,522 @@ dh2ajcQGjTa3FPOdVGm3jjzVpG2Tgbet9r1ke8LJaDmgkpzNNIaRkPpkUZ3+/uul
+ 9XXeifdy
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=AC RAIZ FNMT-RCM SERVIDORES SEGUROS O=FNMT-RCM OU=Ceres
+-# Subject: CN=AC RAIZ FNMT-RCM SERVIDORES SEGUROS O=FNMT-RCM OU=Ceres
+-# Label: "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
+-# Serial: 131542671362353147877283741781055151509
+-# MD5 Fingerprint: 19:36:9c:52:03:2f:d2:d1:bb:23:cc:dd:1e:12:55:bb
+-# SHA1 Fingerprint: 62:ff:d9:9e:c0:65:0d:03:ce:75:93:d2:ed:3f:2d:32:c9:e3:e5:4a
+-# SHA256 Fingerprint: 55:41:53:b1:3d:2c:f9:dd:b7:53:bf:be:1a:4e:0a:e0:8d:0a:a4:18:70:58:fe:60:a2:b8:62:b2:e4:b8:7b:cb
++# 242b69742fcb1e5b2abf98898b94572187544e5b4d9911786573621f6a74b82c
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 01:67:5f:27:d6:fe:7a:e3:e4:ac:be:09:5b:05:9e
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = FI, O = Telia Finland Oyj, CN = Telia Root CA v2
++ Validity
++ Not Before: Nov 29 11:55:54 2018 GMT
++ Not After : Nov 29 11:55:54 2043 GMT
++ Subject: C = FI, O = Telia Finland Oyj, CN = Telia Root CA v2
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:b2:d0:3f:07:bc:e2:7b:d0:6b:99:f8:e2:77:69:
++ e7:ce:9d:a4:03:bc:82:6d:a1:fe:81:65:1f:4c:27:
++ ac:8e:00:ba:16:7b:eb:30:6a:00:c0:b3:74:68:7e:
++ b2:af:c7:d5:62:b3:7a:3f:50:ca:8c:36:44:24:63:
++ d2:36:e9:0c:85:f6:43:76:d5:4c:a1:60:72:67:e2:
++ 28:33:a5:cb:31:b8:3a:22:23:34:b8:7d:bd:56:22:
++ 40:9d:ea:f4:7b:03:ad:68:fc:b2:81:4f:98:d0:74:
++ ea:8d:e5:7d:cd:63:c3:a3:f6:de:92:c2:58:19:e0:
++ 96:bb:c5:c4:a9:3d:a5:74:96:fe:af:f9:89:aa:bd:
++ 95:17:54:d8:78:44:f1:0c:77:15:92:e0:98:42:a7:
++ a4:d6:aa:20:92:cd:c1:a0:b3:96:b2:3a:84:42:8d:
++ 7d:d5:95:e4:d6:db:e9:62:c4:58:b3:79:c5:8c:d3:
++ 35:33:83:9f:75:a1:52:27:61:38:f1:59:3d:8e:50:
++ e0:bd:79:3c:e7:6c:96:fe:5e:d9:02:65:b4:8e:5c:
++ d0:11:34:df:5d:bf:52:a7:81:00:c3:7f:99:45:99:
++ 15:d5:17:c8:0a:53:ec:63:f3:99:7d:cc:69:12:86:
++ c2:17:f0:01:9e:bf:84:bc:d1:52:cb:1b:92:66:ce:
++ a4:53:e5:a1:bf:c4:db:09:d6:e6:89:56:2b:c8:e3:
++ 7c:de:e3:ff:89:e5:35:6e:28:e8:6c:0b:23:51:a9:
++ 25:05:eb:48:f8:dd:b1:ca:fa:6c:08:51:ef:b7:18:
++ 6c:44:ca:26:e1:73:c6:89:06:81:e5:8a:ac:b0:e2:
++ 29:c6:b9:24:b3:6b:44:11:f4:a5:43:c2:4c:43:e5:
++ 70:36:8c:b6:33:57:7a:95:2e:82:a0:f4:5c:10:b3:
++ 61:83:f6:02:05:86:2e:7c:2d:6c:dc:03:46:6e:35:
++ 93:d5:7a:95:2f:de:20:d8:5b:7e:94:90:04:6a:ba:
++ 59:3d:04:05:75:9d:37:a2:0e:2e:3d:eb:c1:a4:52:
++ 83:fe:d0:6b:d4:66:8e:dc:c6:e9:12:4e:1d:2a:57:
++ aa:10:bc:7c:5e:82:7d:a6:a6:c9:f2:2d:b9:f5:17:
++ 27:ad:d1:0e:89:54:2b:95:fa:c0:ad:1d:98:14:78:
++ 33:42:86:0a:a9:73:b5:fb:74:0d:b7:1b:30:19:c4:
++ 5a:0e:1c:27:b7:da:18:d0:ff:8a:c8:05:ba:f1:aa:
++ 1c:a2:37:b7:e6:48:a4:46:2c:94:ea:a8:76:62:47:
++ 8b:10:53:07:48:57:6c:e2:92:4d:b6:ae:05:cb:dc:
++ c1:4a:5e:8f:ac:3d:19:4e:c2:ed:60:75:2b:db:c1:
++ ca:42:d5
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Authority Key Identifier:
++ keyid:72:AC:E4:33:79:AA:45:87:F6:FD:AC:1D:9E:D6:C7:2F:86:D8:24:39
++
++ X509v3 Subject Key Identifier:
++ 72:AC:E4:33:79:AA:45:87:F6:FD:AC:1D:9E:D6:C7:2F:86:D8:24:39
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: sha256WithRSAEncryption
++ a0:3b:59:a7:09:94:3e:36:84:d2:7e:2f:39:a5:96:97:fa:11:
++ ad:fc:67:f3:71:09:f2:b2:89:84:67:44:af:b9:ef:ed:96:ec:
++ 9c:64:db:32:30:6f:67:9a:ac:7e:5f:b2:ab:01:36:7e:81:fa:
++ e4:84:5e:d2:ac:36:e0:6b:62:c5:7d:4b:0e:82:6d:d2:76:62:
++ d1:fe:97:f8:9f:30:7c:18:f9:b4:52:77:82:1d:76:db:d3:1d:
++ a9:f0:c1:9a:00:bd:6d:75:d8:7d:e7:fa:c7:38:a3:9c:70:e8:
++ 46:79:03:af:2e:74:db:75:f8:6e:53:0c:03:c8:99:1a:89:35:
++ 19:3c:d3:c9:54:7c:a8:f0:2c:e6:6e:07:79:6f:6a:e1:e6:ea:
++ 91:82:69:0a:1d:c3:7e:59:a2:9e:6b:46:15:98:5b:d3:af:46:
++ 1d:62:c8:ce:80:52:49:11:3f:c9:04:12:c3:13:7c:3f:3b:8a:
++ 96:db:3c:a0:1e:0a:b4:8b:54:b2:24:67:0d:ef:82:cb:be:3c:
++ 7d:d1:e2:7f:ae:16:d6:56:58:b9:da:20:b1:83:15:a1:ef:8a:
++ 4d:32:6f:41:2f:13:52:82:94:d7:1a:c1:78:a2:51:dd:2b:70:
++ 6d:b7:1a:f9:f7:b0:e0:67:97:56:db:7c:61:53:09:03:28:02:
++ 40:c7:b3:d8:fd:9c:70:6a:c6:28:c3:85:e9:e2:ed:1a:93:a0:
++ de:4b:98:a2:84:3e:05:77:01:96:3d:fb:b4:20:0f:9c:72:02:
++ 7a:12:2f:d5:a3:ba:51:78:af:2a:2b:44:65:4e:b5:fd:0a:e8:
++ c1:cd:79:87:61:2b:de:80:57:45:bf:67:f1:9b:91:5e:a5:a4:
++ ec:59:48:10:0d:38:c7:b0:fa:c3:44:6d:04:f5:78:50:1c:92:
++ 96:5b:da:f5:b8:2e:ba:5b:cf:e5:f0:6a:9d:4b:2f:58:73:2d:
++ 4f:2d:c4:1c:3e:f4:b3:3f:ab:15:0e:3b:19:41:8a:a4:c1:57:
++ 12:66:71:4c:fa:53:e3:57:eb:62:95:09:9e:54:dd:d1:c2:3c:
++ 57:3c:bd:38:ad:98:64:b7:b8:03:9a:53:56:60:5d:b3:d8:42:
++ 1b:5c:4b:12:8a:1c:eb:eb:7d:c6:7a:69:c7:27:7f:a4:f8:8b:
++ f2:e4:94:66:87:4b:e9:94:07:09:12:79:8a:b2:eb:74:04:dc:
++ ce:f4:44:59:e0:16:ca:c5:2c:58:d7:3c:7b:cf:62:86:6a:50:
++ 7d:35:36:66:a7:fb:37:e7:28:c7:d8:d0:ad:a5:69:94:8f:e8:
++ c1:df:24:f8:1b:07:31:87:81:d8:5d:f6:e8:28:d8:4a:52:80:
++ ac:13:ee:50:14:1e:98:c7
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 018e13f0772532cf809bd1b17281867283fc48c6e13be9c69812854a490c1b05
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 09:e0:93:65:ac:f7:d9:c8:b9:3e:1c:0b:04:2a:2e:f3
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = US, O = "DigiCert, Inc.", CN = DigiCert TLS ECC P384 Root G5
++ Validity
++ Not Before: Jan 15 00:00:00 2021 GMT
++ Not After : Jan 14 23:59:59 2046 GMT
++ Subject: C = US, O = "DigiCert, Inc.", CN = DigiCert TLS ECC P384 Root G5
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:c1:44:a1:cf:11:97:50:9a:de:23:82:35:07:cd:
++ d0:cb:18:9d:d2:f1:7f:77:35:4f:3b:dd:94:72:52:
++ ed:c2:3b:f8:ec:fa:7b:6b:58:20:ec:99:ae:c9:fc:
++ 68:b3:75:b9:db:09:ec:c8:13:f5:4e:c6:0a:1d:66:
++ 30:4c:bb:1f:47:0a:3c:61:10:42:29:7c:a5:08:0e:
++ e0:22:e9:d3:35:68:ce:9b:63:9f:84:b5:99:4d:58:
++ a0:8e:f5:54:e7:95:c9
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ C1:51:45:50:59:AB:3E:E7:2C:5A:FA:20:22:12:07:80:88:7C:11:6A
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:65:02:31:00:89:6a:8d:47:e7:ec:fc:6e:55:03:d9:67:6c:
++ 26:4e:83:c6:fd:c9:fb:2b:13:bc:b7:7a:8c:b4:65:d2:69:69:
++ 63:13:63:3b:26:50:2e:01:a1:79:06:91:9d:48:bf:c2:be:02:
++ 30:47:c3:15:7b:b1:a0:91:99:49:93:a8:3c:7c:e8:46:06:8b:
++ 2c:f2:31:00:94:9d:62:c8:89:bd:19:84:14:e9:a5:fb:01:b8:
++ 0d:76:43:8c:2e:53:cb:7c:df:0c:17:96:50
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 371a00dc0533b3721a7eeb40e8419e70799d2b0a0f2c1d80693165f7cec4ad75
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 08:f9:b4:78:a8:fa:7e:da:6a:33:37:89:de:7c:cf:8a
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C = US, O = "DigiCert, Inc.", CN = DigiCert TLS RSA4096 Root G5
++ Validity
++ Not Before: Jan 15 00:00:00 2021 GMT
++ Not After : Jan 14 23:59:59 2046 GMT
++ Subject: C = US, O = "DigiCert, Inc.", CN = DigiCert TLS RSA4096 Root G5
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:b3:d0:f4:c9:79:11:9d:fd:fc:66:81:e7:cc:d5:
++ e4:bc:ec:81:3e:6a:35:8e:2e:b7:e7:de:af:f9:07:
++ 4d:cf:30:9d:ea:09:0b:99:bd:6c:57:da:18:4a:b8:
++ 78:ac:3a:39:a8:a6:48:ac:2e:72:e5:bd:eb:f1:1a:
++ cd:e7:a4:03:a9:3f:11:b4:d8:2f:89:16:fb:94:01:
++ 3d:bb:2f:f8:13:05:a1:78:1c:8e:28:e0:45:e0:83:
++ f4:59:1b:95:b3:ae:7e:03:45:e5:be:c2:42:fe:ee:
++ f2:3c:b6:85:13:98:32:9d:16:a8:29:c2:0b:1c:38:
++ dc:9f:31:77:5c:bf:27:a3:fc:27:ac:b7:2b:bd:74:
++ 9b:17:2d:f2:81:da:5d:b0:e1:23:17:3e:88:4a:12:
++ 23:d0:ea:cf:9d:de:03:17:b1:42:4a:a0:16:4c:a4:
++ 6d:93:e9:3f:3a:ee:3a:7c:9d:58:9d:f4:4e:8f:fc:
++ 3b:23:c8:6d:b8:e2:05:da:cc:eb:ec:c3:31:f4:d7:
++ a7:29:54:80:cf:44:5b:4c:6f:30:9e:f3:cc:dd:1f:
++ 94:43:9d:4d:7f:70:70:0d:d4:3a:d1:37:f0:6c:9d:
++ 9b:c0:14:93:58:ef:cd:41:38:75:bc:13:03:95:7c:
++ 7f:e3:5c:e9:d5:0d:d5:e2:7c:10:62:aa:6b:f0:3d:
++ 76:f3:3f:a3:e8:b0:c1:fd:ef:aa:57:4d:ac:86:a7:
++ 18:b4:29:c1:2c:0e:bf:64:be:29:8c:d8:02:2d:cd:
++ 5c:2f:f2:7f:ef:15:f4:0c:15:ac:0a:b0:f1:d3:0d:
++ 4f:6a:4d:77:97:01:a0:f1:66:b7:b7:ce:ef:ce:ec:
++ ec:a5:75:ca:ac:e3:e1:63:f7:b8:a1:04:c8:bc:7b:
++ 3f:5d:2d:16:22:56:ed:48:49:fe:a7:2f:79:30:25:
++ 9b:ba:6b:2d:3f:9d:3b:c4:17:e7:1d:2e:fb:f2:cf:
++ a6:fc:e3:14:2c:96:98:21:8c:b4:91:e9:19:60:83:
++ f2:30:2b:06:73:50:d5:98:3b:06:e9:c7:8a:0c:60:
++ 8c:28:f8:52:9b:6e:e1:f6:4d:bb:06:24:9b:d7:2b:
++ 26:3f:fd:2a:2f:71:f5:d6:24:be:7f:31:9e:0f:6d:
++ e8:8f:4f:4d:a3:3f:ff:35:ea:df:49:5e:41:8f:86:
++ f9:f1:77:79:4b:1b:b4:a3:5e:2f:fb:46:02:d0:66:
++ 13:5e:5e:85:4f:ce:d8:70:88:7b:ce:01:b5:96:97:
++ d7:cd:7d:fd:82:f8:c2:24:c1:ca:01:39:4f:8d:a2:
++ c1:14:40:1f:9c:66:d5:0c:09:46:d6:f2:d0:d1:48:
++ 76:56:3a:43:cb:b6:0a:11:39:ba:8c:13:6c:06:b5:
++ 9e:cf:eb
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 51:33:1C:ED:36:40:AF:17:D3:25:CD:69:68:F2:AF:4E:23:3E:B3:41
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: sha384WithRSAEncryption
++ 60:a6:af:5b:5f:57:da:89:db:4b:50:a9:c4:23:35:21:ff:d0:
++ 61:30:84:91:b7:3f:10:cf:25:8e:c9:bf:46:34:d9:c1:21:26:
++ 1c:70:19:72:1e:a3:c9:87:fe:a9:43:64:96:3a:c8:53:04:0a:
++ b6:41:bb:c4:47:00:d9:9f:18:18:3b:b2:0e:f3:34:ea:24:f7:
++ dd:af:20:60:ae:92:28:5f:36:e7:5d:e4:de:c7:3c:db:50:39:
++ ad:bb:3d:28:4d:96:7c:76:c6:5b:f4:c1:db:14:a5:ab:19:62:
++ 07:18:40:5f:97:91:dc:9c:c7:ab:b5:51:0d:e6:69:53:55:cc:
++ 39:7d:da:c5:11:55:72:c5:3b:8b:89:f8:34:2d:a4:17:e5:17:
++ e6:99:7d:30:88:21:37:cd:30:17:3d:b8:f2:bc:a8:75:a0:43:
++ dc:3e:89:4b:90:ae:6d:03:e0:1c:a3:a0:96:09:bb:7d:a3:b7:
++ 2a:10:44:4b:46:07:34:63:ed:31:b9:04:ee:a3:9b:9a:ae:e6:
++ 31:78:f4:ea:24:61:3b:ab:58:64:ff:bb:87:27:62:25:81:df:
++ dc:a1:2f:f6:ed:a7:ff:7a:8f:51:2e:30:f8:a4:01:d2:85:39:
++ 5f:01:99:96:6f:5a:5b:70:19:46:fe:86:60:3e:ad:80:10:09:
++ dd:39:25:2f:58:7f:bb:d2:74:f0:f7:46:1f:46:39:4a:d8:53:
++ d0:f3:2e:3b:71:a5:d4:6f:fc:f3:67:e4:07:8f:dd:26:19:e1:
++ 8d:5b:fa:a3:93:11:9b:e9:c8:3a:c3:55:68:9a:92:e1:52:76:
++ 38:e8:e1:ba:bd:fb:4f:d5:ef:b3:e7:48:83:31:f0:82:21:e3:
++ b6:be:a7:ab:6f:ef:9f:df:4c:cf:01:b8:62:6a:23:3d:e7:09:
++ 4d:80:1b:7b:30:a4:c3:dd:07:7f:34:be:a4:26:b2:f6:41:e8:
++ 09:1d:e3:20:98:aa:37:4f:ff:f7:f1:e2:29:70:31:47:3f:74:
++ d0:14:16:fa:21:8a:02:d5:8a:09:94:77:2e:f2:59:28:8b:7c:
++ 50:92:0a:66:78:38:83:75:c4:b5:5a:a8:11:c6:e5:c1:9d:66:
++ 55:cf:53:c4:af:d7:75:85:a9:42:13:56:ec:21:77:81:93:5a:
++ 0c:ea:96:d9:49:ca:a1:08:f2:97:3b:6d:9b:04:18:24:44:8e:
++ 7c:01:f2:dc:25:d8:5e:86:9a:b1:39:db:f5:91:32:6a:d1:a6:
++ 70:8a:a2:f7:de:a4:45:85:26:a8:1e:8c:5d:29:5b:c8:4b:d8:
++ 9a:6a:03:5e:70:f2:85:4f:6c:4b:68:2f:ca:54:f6:8c:da:32:
++ fe:c3:6b:83:3f:38:c6:7e
++-----BEGIN CERTIFICATE-----
++MIIFZjCCA06gAwIBAgIQCPm0eKj6ftpqMzeJ3nzPijANBgkqhkiG9w0BAQwFADBN
++MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xJTAjBgNVBAMT
++HERpZ2lDZXJ0IFRMUyBSU0E0MDk2IFJvb3QgRzUwHhcNMjEwMTE1MDAwMDAwWhcN
++NDYwMTE0MjM1OTU5WjBNMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQs
++IEluYy4xJTAjBgNVBAMTHERpZ2lDZXJ0IFRMUyBSU0E0MDk2IFJvb3QgRzUwggIi
++MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCz0PTJeRGd/fxmgefM1eS87IE+
++ajWOLrfn3q/5B03PMJ3qCQuZvWxX2hhKuHisOjmopkisLnLlvevxGs3npAOpPxG0
++2C+JFvuUAT27L/gTBaF4HI4o4EXgg/RZG5Wzrn4DReW+wkL+7vI8toUTmDKdFqgp
++wgscONyfMXdcvyej/Cestyu9dJsXLfKB2l2w4SMXPohKEiPQ6s+d3gMXsUJKoBZM
++pG2T6T867jp8nVid9E6P/DsjyG244gXazOvswzH016cpVIDPRFtMbzCe88zdH5RD
++nU1/cHAN1DrRN/BsnZvAFJNY781BOHW8EwOVfH/jXOnVDdXifBBiqmvwPXbzP6Po
++sMH976pXTayGpxi0KcEsDr9kvimM2AItzVwv8n/vFfQMFawKsPHTDU9qTXeXAaDx
++Zre3zu/O7Oyldcqs4+Fj97ihBMi8ez9dLRYiVu1ISf6nL3kwJZu6ay0/nTvEF+cd
++Lvvyz6b84xQslpghjLSR6Rlgg/IwKwZzUNWYOwbpx4oMYIwo+FKbbuH2TbsGJJvX
++KyY//SovcfXWJL5/MZ4PbeiPT02jP/816t9JXkGPhvnxd3lLG7SjXi/7RgLQZhNe
++XoVPzthwiHvOAbWWl9fNff2C+MIkwcoBOU+NosEUQB+cZtUMCUbW8tDRSHZWOkPL
++tgoRObqME2wGtZ7P6wIDAQABo0IwQDAdBgNVHQ4EFgQUUTMc7TZArxfTJc1paPKv
++TiM+s0EwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcN
++AQEMBQADggIBAGCmr1tfV9qJ20tQqcQjNSH/0GEwhJG3PxDPJY7Jv0Y02cEhJhxw
++GXIeo8mH/qlDZJY6yFMECrZBu8RHANmfGBg7sg7zNOok992vIGCukihfNudd5N7H
++PNtQOa27PShNlnx2xlv0wdsUpasZYgcYQF+Xkdycx6u1UQ3maVNVzDl92sURVXLF
++O4uJ+DQtpBflF+aZfTCIITfNMBc9uPK8qHWgQ9w+iUuQrm0D4ByjoJYJu32jtyoQ
++REtGBzRj7TG5BO6jm5qu5jF49OokYTurWGT/u4cnYiWB39yhL/btp/96j1EuMPik
++AdKFOV8BmZZvWltwGUb+hmA+rYAQCd05JS9Yf7vSdPD3Rh9GOUrYU9DzLjtxpdRv
++/PNn5AeP3SYZ4Y1b+qOTEZvpyDrDVWiakuFSdjjo4bq9+0/V77PnSIMx8IIh47a+
++p6tv75/fTM8BuGJqIz3nCU2AG3swpMPdB380vqQmsvZB6Akd4yCYqjdP//fx4ilw
++MUc/dNAUFvohigLVigmUdy7yWSiLfFCSCmZ4OIN1xLVaqBHG5cGdZlXPU8Sv13WF
++qUITVuwhd4GTWgzqltlJyqEI8pc7bZsEGCREjnwB8twl2F6GmrE52/WRMmrRpnCK
++ovfepEWFJqgejF0pW8hL2JpqA15w8oVPbEtoL8pU9ozaMv7Da4M/OMZ+
++-----END CERTIFICATE-----
++
++# b4585f22e4ac756a4e8612a1361c5d9d031a93fd84febb778fa3068b0fc42dc2
++
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 06:25:33:b1:47:03:33:27:5c:f9:8d:9a:b9:bf:cc:f8
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = US, O = Certainly, CN = Certainly Root E1
++ Validity
++ Not Before: Apr 1 00:00:00 2021 GMT
++ Not After : Apr 1 00:00:00 2046 GMT
++ Subject: C = US, O = Certainly, CN = Certainly Root E1
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:de:6f:f8:7f:1c:df:ed:f9:47:87:86:b1:a4:c0:
++ 8a:f8:82:97:80:ea:8f:c8:4a:5e:2a:7d:88:68:a7:
++ 01:62:14:91:24:7a:5c:9e:a3:17:7d:8a:86:21:34:
++ 18:50:1b:10:de:d0:37:4b:26:c7:19:60:80:e9:34:
++ bd:60:19:36:40:d6:29:87:09:3c:91:7a:f6:bc:13:
++ 23:dd:59:4e:04:5e:cf:c8:02:1c:18:53:c1:31:d8:
++ da:20:e9:44:8d:e4:76
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ F3:28:18:CB:64:75:EE:29:2A:EB:ED:AE:23:58:38:85:EB:C8:22:07
++ Signature Algorithm: ecdsa-with-SHA384
++ 30:65:02:31:00:b1:8e:5a:20:c3:b2:19:62:4d:de:b0:4f:df:
++ 6e:d2:70:8a:f1:9f:7e:6a:8c:e6:ba:de:83:69:ca:69:b3:a9:
++ 05:b5:96:92:17:87:c2:d2:ea:d0:7b:ce:d8:41:5b:7c:ae:02:
++ 30:46:de:ea:cb:5d:9a:ec:32:c2:65:16:b0:4c:30:5c:30:f3:
++ da:4e:73:86:06:d8:ce:89:04:48:37:37:f8:dd:33:51:9d:70:
++ af:7b:55:d8:01:2e:7d:05:64:0e:86:b8:91
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 77b82cd8644c4305f7acc5cb156b45675004033d51c60c6202a8e0c33467d3a0
++
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 8e:0f:f9:4b:90:71:68:65:33:54:f4:d4:44:39:b7:e0
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = US, O = Certainly, CN = Certainly Root R1
++ Validity
++ Not Before: Apr 1 00:00:00 2021 GMT
++ Not After : Apr 1 00:00:00 2046 GMT
++ Subject: C = US, O = Certainly, CN = Certainly Root R1
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (4096 bit)
++ Modulus:
++ 00:d0:36:d4:1f:ea:dd:ab:e4:d1:b6:e6:fb:22:c0:
++ dd:13:0d:6a:7b:22:13:1c:97:3c:68:63:66:32:9c:
++ 03:b5:8d:a4:81:83:da:78:30:11:cf:dc:b2:2b:be:
++ 92:bf:8e:e4:c4:13:be:a4:68:4c:da:02:68:16:74:
++ be:b2:dd:04:e4:6b:2a:dd:37:1f:60:2c:db:f5:f7:
++ a1:7c:95:b7:0c:70:86:2e:f1:3a:ef:52:f7:cc:d3:
++ 9b:f9:8b:be:0e:df:31:b7:9d:68:5c:92:a6:f5:e5:
++ f3:0a:34:b5:ff:7b:a2:e4:87:a1:c6:af:17:00:ef:
++ 03:91:ed:a9:1c:4e:71:3d:d2:8b:6c:89:f4:78:86:
++ e6:6a:49:a0:ce:b5:d2:b0:ab:9b:f6:f4:d4:2e:e3:
++ 72:f9:36:c6:eb:15:b7:25:8c:3a:fc:25:0d:b3:22:
++ 73:21:74:c8:4a:96:61:92:f5:2f:0b:18:a5:f4:ad:
++ e2:ee:41:bd:01:79:fa:96:8c:8d:17:02:30:b4:f9:
++ af:78:1a:8c:b4:36:10:10:07:05:70:d0:f4:31:90:
++ 8a:51:c5:86:26:79:b2:11:88:5e:c5:f0:0a:54:cd:
++ 49:a6:bf:02:9c:d2:44:a7:ed:e3:78:ef:46:5e:6d:
++ 71:d1:79:70:1c:46:5f:51:e9:c9:37:dc:5f:7e:69:
++ 7b:41:df:34:45:e0:3b:84:f4:a1:8a:0a:36:9e:37:
++ cc:62:52:e1:89:0d:28:f9:7a:23:b1:0d:3d:3d:9a:
++ fd:9d:81:ef:2c:90:c0:7b:44:4e:bb:49:e0:0e:4a:
++ 56:92:bc:cb:b5:dd:79:17:89:91:de:61:89:74:92:
++ a8:e3:32:85:be:4e:85:a4:4b:59:cb:2b:c5:78:8e:
++ 71:54:d0:02:37:99:8c:e5:49:ea:e0:54:72:a4:11:
++ 06:2f:0b:8c:c1:5b:be:b5:a1:b0:53:6e:9c:b8:60:
++ 91:1f:59:6b:f9:2d:f4:94:0a:97:b5:ec:c5:76:03:
++ 54:1b:65:52:ba:4c:92:56:51:35:a0:40:d8:29:db:
++ ae:52:76:3b:2d:30:40:9b:8a:d0:42:56:b4:b7:88:
++ 01:a4:87:3b:53:96:cd:a3:16:8f:f3:66:aa:17:b1:
++ c7:60:e0:c1:43:05:0c:ee:9b:5b:60:6f:06:5c:87:
++ 5b:27:f9:40:11:9e:9c:33:c1:b7:e5:35:57:05:7f:
++ 27:ce:17:20:8c:1c:fc:f1:fb:da:31:29:49:ed:f5:
++ 0b:84:a7:4f:c1:f6:4e:c2:28:9c:fa:ee:e0:af:07:
++ fb:33:11:7a:21:4f:0b:21:10:b6:40:3a:ab:22:3a:
++ 04:9c:8b:9b:84:86:72:9a:d2:a7:a5:c4:b4:75:91:
++ a9:2b:23
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ E0:AA:3F:25:8D:9F:44:5C:C1:3A:E8:2E:AE:77:4C:84:3E:67:0C:F4
++ Signature Algorithm: sha256WithRSAEncryption
++ b9:57:af:b8:12:da:57:83:8f:68:0b:33:1d:03:53:55:f4:95:
++ 70:e4:2b:3d:b0:39:eb:fa:89:62:fd:f7:d6:18:04:2f:21:34:
++ dd:f1:68:f0:d5:96:5a:de:c2:80:a3:c1:8d:c6:6a:f7:59:77:
++ ae:15:64:cf:5b:79:05:77:66:ea:8c:d3:6b:0d:dd:f1:59:2c:
++ c1:33:a5:30:80:15:45:07:45:1a:31:22:b6:92:00:ab:99:4d:
++ 3a:8f:77:af:a9:22:ca:2f:63:ca:15:d6:c7:c6:f0:3d:6c:fc:
++ 1c:0d:98:10:61:9e:11:a2:22:d7:0a:f2:91:7a:6b:39:0e:2f:
++ 30:c3:36:49:9f:e0:e9:0f:02:44:50:37:94:55:7d:ea:9f:f6:
++ 3b:ba:94:a5:4c:e9:bc:3e:51:b4:e8:ca:92:36:54:6d:5c:25:
++ 28:da:dd:ad:14:fd:d3:ee:e2:22:05:eb:d0:f2:b7:68:12:d7:
++ 5a:8a:41:1a:c6:92:a5:5a:3b:63:45:4f:bf:e1:3a:77:22:2f:
++ 5c:bf:46:f9:5a:03:85:13:42:5f:ca:de:53:d7:62:b5:a6:35:
++ 04:c2:47:ff:99:fd:84:df:5c:ce:e9:5e:80:28:41:f2:7d:e7:
++ 1e:90:d8:4f:76:3e:82:3c:0d:fc:a5:03:fa:7b:1a:d9:45:1e:
++ 60:da:c4:8e:f9:fc:2b:c9:7b:95:c5:2a:ff:aa:89:df:82:31:
++ 0f:72:ff:0c:27:d7:0a:1e:56:00:50:1e:0c:90:c1:96:b5:d8:
++ 14:85:bb:a7:0d:16:c1:f8:07:24:1b:ba:85:a1:1a:05:09:80:
++ ba:95:63:c9:3a:ec:25:9f:7f:9d:ba:a4:47:15:9b:44:70:f1:
++ 6a:4b:d6:38:5e:43:f3:18:7e:50:6e:e9:5a:28:e6:65:e6:77:
++ 1b:3a:fd:1d:be:03:26:a3:db:d4:e1:bb:7e:96:27:2b:1d:ee:
++ a4:fb:da:25:54:13:03:de:39:c6:c3:1f:4d:90:ec:8f:1b:4a:
++ d2:1c:ed:85:95:38:50:79:46:d6:c1:90:50:31:a9:5c:9a:6e:
++ 1d:f5:33:56:8b:a7:99:d2:f2:c8:2c:33:93:92:30:c7:4e:8c:
++ 65:33:10:64:17:fd:24:17:96:d1:8d:c2:3a:6a:2b:eb:13:8b:
++ 44:f2:21:f3:4a:1a:b7:77:5f:d7:ed:88:a4:72:e5:39:1f:95:
++ 9d:be:67:c1:70:11:3d:bb:f4:f8:49:b7:e3:26:97:3a:9f:d2:
++ 5f:7c:fb:c0:99:7c:39:29:e0:7b:1d:bf:0d:a7:8f:d2:29:34:
++ 6e:24:15:cb:de:90:5e:bf:1a:c4:66:ea:c2:e6:ba:39:5f:8a:
++ 99:a9:41:59:07:b0:2c:af
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 554153b13d2cf9ddb753bfbe1a4e0ae08d0aa4187058fe60a2b862b2e4b87bcb
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 62:f6:32:6c:e5:c4:e3:68:5c:1b:62:dd:9c:2e:9d:95
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = ES, O = FNMT-RCM, OU = Ceres, organizationIdentifier = VATES-Q2826004J, CN = AC RAIZ FNMT-RCM SERVIDORES SEGUROS
++ Validity
++ Not Before: Dec 20 09:37:33 2018 GMT
++ Not After : Dec 20 09:37:33 2043 GMT
++ Subject: C = ES, O = FNMT-RCM, OU = Ceres, organizationIdentifier = VATES-Q2826004J, CN = AC RAIZ FNMT-RCM SERVIDORES SEGUROS
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:f6:ba:57:53:c8:ca:ab:df:36:4a:52:21:e4:97:
++ d2:83:67:9e:f0:65:51:d0:5e:87:c7:47:b1:59:f2:
++ 57:47:9b:00:02:93:44:17:69:db:42:c7:b1:b2:3a:
++ 18:0e:b4:5d:8c:b3:66:5d:a1:34:f9:36:2c:49:db:
++ f3:46:fc:b3:44:69:44:13:66:fd:d7:c5:fd:af:36:
++ 4d:ce:03:4d:07:71:cf:af:6a:05:d2:a2:43:5a:0a:
++ 52:6f:01:03:4e:8e:8b
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ 01:B9:2F:EF:BF:11:86:60:F2:4F:D0:41:6E:AB:73:1F:E7:D2:6E:49
++ Signature Algorithm: ecdsa-with-SHA384
++ Signature Value:
++ 30:66:02:31:00:ae:4a:e3:2b:40:c3:74:11:f2:95:ad:16:23:
++ de:4e:0c:1a:e6:5d:a5:24:5e:6b:44:7b:fc:38:e2:4f:cb:9c:
++ 45:17:11:4c:14:27:26:55:39:75:4a:03:cc:13:90:9f:92:02:
++ 31:00:fa:4a:6c:60:88:73:f3:ee:b8:98:62:a9:ce:2b:c2:d9:
++ 8a:a6:70:31:1d:af:b0:94:4c:eb:4f:c6:e3:d1:f3:62:a7:3c:
++ ff:93:2e:07:5c:49:01:67:69:12:02:72:bf:e7
+ -----BEGIN CERTIFICATE-----
+ MIICbjCCAfOgAwIBAgIQYvYybOXE42hcG2LdnC6dlTAKBggqhkjOPQQDAzB4MQsw
+ CQYDVQQGEwJFUzERMA8GA1UECgwIRk5NVC1SQ00xDjAMBgNVBAsMBUNlcmVzMRgw
+@@ -4025,113 +8994,97 @@ MQD6SmxgiHPz7riYYqnOK8LZiqZwMR2vsJRM60/G49HzYqc8/5MuB1xJAWdpEgJy
+ v+c=
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=GlobalSign Root R46 O=GlobalSign nv-sa
+-# Subject: CN=GlobalSign Root R46 O=GlobalSign nv-sa
+-# Label: "GlobalSign Root R46"
+-# Serial: 1552617688466950547958867513931858518042577
+-# MD5 Fingerprint: c4:14:30:e4:fa:66:43:94:2a:6a:1b:24:5f:19:d0:ef
+-# SHA1 Fingerprint: 53:a2:b0:4b:ca:6b:d6:45:e6:39:8a:8e:c4:0d:d2:bf:77:c3:a2:90
+-# SHA256 Fingerprint: 4f:a3:12:6d:8d:3a:11:d1:c4:85:5a:4f:80:7c:ba:d6:cf:91:9d:3a:5a:88:b0:3b:ea:2c:63:72:d9:3c:40:c9
+------BEGIN CERTIFICATE-----
+-MIIFWjCCA0KgAwIBAgISEdK7udcjGJ5AXwqdLdDfJWfRMA0GCSqGSIb3DQEBDAUA
+-MEYxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRwwGgYD
+-VQQDExNHbG9iYWxTaWduIFJvb3QgUjQ2MB4XDTE5MDMyMDAwMDAwMFoXDTQ2MDMy
+-MDAwMDAwMFowRjELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYt
+-c2ExHDAaBgNVBAMTE0dsb2JhbFNpZ24gUm9vdCBSNDYwggIiMA0GCSqGSIb3DQEB
+-AQUAA4ICDwAwggIKAoICAQCsrHQy6LNl5brtQyYdpokNRbopiLKkHWPd08EsCVeJ
+-OaFV6Wc0dwxu5FUdUiXSE2te4R2pt32JMl8Nnp8semNgQB+msLZ4j5lUlghYruQG
+-vGIFAha/r6gjA7aUD7xubMLL1aa7DOn2wQL7Id5m3RerdELv8HQvJfTqa1VbkNud
+-316HCkD7rRlr+/fKYIje2sGP1q7Vf9Q8g+7XFkyDRTNrJ9CG0Bwta/OrffGFqfUo
+-0q3v84RLHIf8E6M6cqJaESvWJ3En7YEtbWaBkoe0G1h6zD8K+kZPTXhc+CtI4wSE
+-y132tGqzZfxCnlEmIyDLPRT5ge1lFgBPGmSXZgjPjHvjK8Cd+RTyG/FWaha/LIWF
+-zXg4mutCagI0GIMXTpRW+LaCtfOW3T3zvn8gdz57GSNrLNRyc0NXfeD412lPFzYE
+-+cCQYDdF3uYM2HSNrpyibXRdQr4G9dlkbgIQrImwTDsHTUB+JMWKmIJ5jqSngiCN
+-I/onccnfxkF0oE32kRbcRoxfKWMxWXEM2G/CtjJ9++ZdU6Z+Ffy7dXxd7Pj2Fxzs
+-x2sZy/N78CsHpdlseVR2bJ0cpm4O6XkMqCNqo98bMDGfsVR7/mrLZqrcZdCinkqa
+-ByFrgY/bxFn63iLABJzjqls2k+g9vXqhnQt2sQvHnf3PmKgGwvgqo6GDoLclcqUC
+-4wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV
+-HQ4EFgQUA1yrc4GHqMywptWU4jaWSf8FmSwwDQYJKoZIhvcNAQEMBQADggIBAHx4
+-7PYCLLtbfpIrXTncvtgdokIzTfnvpCo7RGkerNlFo048p9gkUbJUHJNOxO97k4Vg
+-JuoJSOD1u8fpaNK7ajFxzHmuEajwmf3lH7wvqMxX63bEIaZHU1VNaL8FpO7XJqti
+-2kM3S+LGteWygxk6x9PbTZ4IevPuzz5i+6zoYMzRx6Fcg0XERczzF2sUyQQCPtIk
+-pnnpHs6i58FZFZ8d4kuaPp92CC1r2LpXFNqD6v6MVenQTqnMdzGxRBF6XLE+0xRF
+-FRhiJBPSy03OXIPBNvIQtQ6IbbjhVp+J3pZmOUdkLG5NrmJ7v2B0GbhWrJKsFjLt
+-rWhV/pi60zTe9Mlhww6G9kuEYO4Ne7UyWHmRVSyBQ7N0H3qqJZ4d16GLuc1CLgSk
+-ZoNNiTW2bKg2SnkheCLQQrzRQDGQob4Ez8pn7fXwgNNgyYMqIgXQBztSvwyeqiv5
+-u+YfjyW6hY0XHgL+XVAEV8/+LbzvXMAaq7afJMbfc2hIkCwU9D9SGuTSyxTDYWnP
+-4vkYxboznxSjBF25cfe1lNj2M8FawTSLfJvdkzrnE6JwYZ+vj+vYxXX4M2bUdGc6
+-N3ec592kD3ZDZopD8p/7DEJ4Y9HiD2971KE9dJeFt0g5QdYg/NA6s/rob8SKunE3
+-vouXsXgxT7PntgMTzlSdriVZzH81Xwj3QEUxeCp6
+------END CERTIFICATE-----
+-
+-# Issuer: CN=GlobalSign Root E46 O=GlobalSign nv-sa
+-# Subject: CN=GlobalSign Root E46 O=GlobalSign nv-sa
+-# Label: "GlobalSign Root E46"
+-# Serial: 1552617690338932563915843282459653771421763
+-# MD5 Fingerprint: b5:b8:66:ed:de:08:83:e3:c9:e2:01:34:06:ac:51:6f
+-# SHA1 Fingerprint: 39:b4:6c:d5:fe:80:06:eb:e2:2f:4a:bb:08:33:a0:af:db:b9:dd:84
+-# SHA256 Fingerprint: cb:b9:c4:4d:84:b8:04:3e:10:50:ea:31:a6:9f:51:49:55:d7:bf:d2:e2:c6:b4:93:01:01:9a:d6:1d:9f:50:58
+------BEGIN CERTIFICATE-----
+-MIICCzCCAZGgAwIBAgISEdK7ujNu1LzmJGjFDYQdmOhDMAoGCCqGSM49BAMDMEYx
+-CzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRwwGgYDVQQD
+-ExNHbG9iYWxTaWduIFJvb3QgRTQ2MB4XDTE5MDMyMDAwMDAwMFoXDTQ2MDMyMDAw
+-MDAwMFowRjELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2Ex
+-HDAaBgNVBAMTE0dsb2JhbFNpZ24gUm9vdCBFNDYwdjAQBgcqhkjOPQIBBgUrgQQA
+-IgNiAAScDrHPt+ieUnd1NPqlRqetMhkytAepJ8qUuwzSChDH2omwlwxwEwkBjtjq
+-R+q+soArzfwoDdusvKSGN+1wCAB16pMLey5SnCNoIwZD7JIvU4Tb+0cUB+hflGdd
+-yXqBPCCjQjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud
+-DgQWBBQxCpCPtsad0kRLgLWi5h+xEk8blTAKBggqhkjOPQQDAwNoADBlAjEA31SQ
+-7Zvvi5QCkxeCmb6zniz2C5GMn0oUsfZkvLtoURMMA/cVi4RguYv/Uo7njLwcAjA8
+-+RHUjE7AwWHCFUyqqx0LMV87HOIAl0Qx5v5zli/altP+CAezNIm8BZ/3Hobui3A=
+------END CERTIFICATE-----
+-
+-# Issuer: CN=GLOBALTRUST 2020 O=e-commerce monitoring GmbH
+-# Subject: CN=GLOBALTRUST 2020 O=e-commerce monitoring GmbH
+-# Label: "GLOBALTRUST 2020"
+-# Serial: 109160994242082918454945253
+-# MD5 Fingerprint: 8a:c7:6f:cb:6d:e3:cc:a2:f1:7c:83:fa:0e:78:d7:e8
+-# SHA1 Fingerprint: d0:67:c1:13:51:01:0c:aa:d0:c7:6a:65:37:31:16:26:4f:53:71:a2
+-# SHA256 Fingerprint: 9a:29:6a:51:82:d1:d4:51:a2:e3:7f:43:9b:74:da:af:a2:67:52:33:29:f9:0f:9a:0d:20:07:c3:34:e2:3c:9a
+------BEGIN CERTIFICATE-----
+-MIIFgjCCA2qgAwIBAgILWku9WvtPilv6ZeUwDQYJKoZIhvcNAQELBQAwTTELMAkG
+-A1UEBhMCQVQxIzAhBgNVBAoTGmUtY29tbWVyY2UgbW9uaXRvcmluZyBHbWJIMRkw
+-FwYDVQQDExBHTE9CQUxUUlVTVCAyMDIwMB4XDTIwMDIxMDAwMDAwMFoXDTQwMDYx
+-MDAwMDAwMFowTTELMAkGA1UEBhMCQVQxIzAhBgNVBAoTGmUtY29tbWVyY2UgbW9u
+-aXRvcmluZyBHbWJIMRkwFwYDVQQDExBHTE9CQUxUUlVTVCAyMDIwMIICIjANBgkq
+-hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAri5WrRsc7/aVj6B3GyvTY4+ETUWiD59b
+-RatZe1E0+eyLinjF3WuvvcTfk0Uev5E4C64OFudBc/jbu9G4UeDLgztzOG53ig9Z
+-YybNpyrOVPu44sB8R85gfD+yc/LAGbaKkoc1DZAoouQVBGM+uq/ufF7MpotQsjj3
+-QWPKzv9pj2gOlTblzLmMCcpL3TGQlsjMH/1WljTbjhzqLL6FLmPdqqmV0/0plRPw
+-yJiT2S0WR5ARg6I6IqIoV6Lr/sCMKKCmfecqQjuCgGOlYx8ZzHyyZqjC0203b+J+
+-BlHZRYQfEs4kUmSFC0iAToexIiIwquuuvuAC4EDosEKAA1GqtH6qRNdDYfOiaxaJ
+-SaSjpCuKAsR49GiKweR6NrFvG5Ybd0mN1MkGco/PU+PcF4UgStyYJ9ORJitHHmkH
+-r96i5OTUawuzXnzUJIBHKWk7buis/UDr2O1xcSvy6Fgd60GXIsUf1DnQJ4+H4xj0
+-4KlGDfV0OoIu0G4skaMxXDtG6nsEEFZegB31pWXogvziB4xiRfUg3kZwhqG8k9Me
+-dKZssCz3AwyIDMvUclOGvGBG85hqwvG/Q/lwIHfKN0F5VVJjjVsSn8VoxIidrPIw
+-q7ejMZdnrY8XD2zHc+0klGvIg5rQmjdJBKuxFshsSUktq6HQjJLyQUp5ISXbY9e2
+-nKd+Qmn7OmMCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC
+-AQYwHQYDVR0OBBYEFNwuH9FhN3nkq9XVsxJxaD1qaJwiMB8GA1UdIwQYMBaAFNwu
+-H9FhN3nkq9XVsxJxaD1qaJwiMA0GCSqGSIb3DQEBCwUAA4ICAQCR8EICaEDuw2jA
+-VC/f7GLDw56KoDEoqoOOpFaWEhCGVrqXctJUMHytGdUdaG/7FELYjQ7ztdGl4wJC
+-XtzoRlgHNQIw4Lx0SsFDKv/bGtCwr2zD/cuz9X9tAy5ZVp0tLTWMstZDFyySCstd
+-6IwPS3BD0IL/qMy/pJTAvoe9iuOTe8aPmxadJ2W8esVCgmxcB9CpwYhgROmYhRZf
+-+I/KARDOJcP5YBugxZfD0yyIMaK9MOzQ0MAS8cE54+X1+NZK3TTN+2/BT+MAi1bi
+-kvcoskJ3ciNnxz8RFbLEAwW+uxF7Cr+obuf/WEPPm2eggAe2HcqtbepBEX4tdJP7
+-wry+UUTF72glJ4DjyKDUEuzZpTcdN3y0kcra1LGWge9oXHYQSa9+pTeAsRxSvTOB
+-TI/53WXZFM2KJVj04sWDpQmQ1GwUY7VA3+vA/MRYfg0UFodUJ25W5HCEuGwyEn6C
+-MUO+1918oa2u1qsgEu8KwxCMSZY13At1XrFP1U80DhEgB3VDRemjEdqso5nCtnkn
+-4rnvyOL2NSl6dPrFf4IFYqYK6miyeUcGbvJXqBUzxvd4Sj1Ce2t+/vdG6tHrju+I
+-aFvowdlxfv1k7/9nR4hYJS8+hge9+6jlgqispdNpQ80xiEmEU5LAsTkbOYMBMMTy
+-qfrQA71yN2BWHzZ8vTmR9W0Nv3vXkg==
+------END CERTIFICATE-----
+-
+-# Issuer: CN=ANF Secure Server Root CA O=ANF Autoridad de Certificacion OU=ANF CA Raiz
+-# Subject: CN=ANF Secure Server Root CA O=ANF Autoridad de Certificacion OU=ANF CA Raiz
+-# Label: "ANF Secure Server Root CA"
+-# Serial: 996390341000653745
+-# MD5 Fingerprint: 26:a6:44:5a:d9:af:4e:2f:b2:1d:b6:65:b0:4e:e8:96
+-# SHA1 Fingerprint: 5b:6e:68:d0:cc:15:b6:a0:5f:1e:c1:5f:ae:02:fc:6b:2f:5d:6f:74
+-# SHA256 Fingerprint: fb:8f:ec:75:91:69:b9:10:6b:1e:51:16:44:c6:18:c5:13:04:37:3f:6c:06:43:08:8d:8b:ef:fd:1b:99:75:99
++# fb8fec759169b9106b1e511644c618c51304373f6c0643088d8beffd1b997599
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 996390341000653745 (0xdd3e3bc6cf96bb1)
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: serialNumber = G63287510, C = ES, O = ANF Autoridad de Certificacion, OU = ANF CA Raiz, CN = ANF Secure Server Root CA
++ Validity
++ Not Before: Sep 4 10:00:38 2019 GMT
++ Not After : Aug 30 10:00:38 2039 GMT
++ Subject: serialNumber = G63287510, C = ES, O = ANF Autoridad de Certificacion, OU = ANF CA Raiz, CN = ANF Secure Server Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:db:eb:6b:2b:e6:64:54:95:82:90:a3:72:a4:19:
++ 01:9d:9c:0b:81:5f:73:49:ba:a7:ac:f3:04:4e:7b:
++ 96:0b:ec:11:e0:5b:a6:1c:ce:1b:d2:0d:83:1c:2b:
++ b8:9e:1d:7e:45:32:60:0f:07:e9:77:58:7e:9f:6a:
++ c8:61:4e:b6:26:c1:4c:8d:ff:4c:ef:34:b2:1f:65:
++ d8:b9:78:f5:ad:a9:71:b9:ef:4f:58:1d:a5:de:74:
++ 20:97:a1:ed:68:4c:de:92:17:4b:bc:ab:ff:65:9a:
++ 9e:fb:47:d9:57:72:f3:09:a1:ae:76:44:13:6e:9c:
++ 2d:44:39:bc:f9:c7:3b:a4:58:3d:41:bd:b4:c2:49:
++ a3:c8:0d:d2:97:2f:07:65:52:00:a7:6e:c8:af:68:
++ ec:f4:14:96:b6:57:1f:56:c3:39:9f:2b:6d:e4:f3:
++ 3e:f6:35:64:da:0c:1c:a1:84:4b:2f:4b:4b:e2:2c:
++ 24:9d:6d:93:40:eb:b5:23:8e:32:ca:6f:45:d3:a8:
++ 89:7b:1e:cf:1e:fa:5b:43:8b:cd:cd:a8:0f:6a:ca:
++ 0c:5e:b9:9e:47:8f:f0:d9:b6:0a:0b:58:65:17:33:
++ b9:23:e4:77:19:7d:cb:4a:2e:92:7b:4f:2f:10:77:
++ b1:8d:2f:68:9c:62:cc:e0:50:f8:ec:91:a7:54:4c:
++ 57:09:d5:76:63:c5:e8:65:1e:ee:6d:6a:cf:09:9d:
++ fa:7c:4f:ad:60:08:fd:56:99:0f:15:2c:7b:a9:80:
++ ab:8c:61:8f:4a:07:76:42:de:3d:f4:dd:b2:24:33:
++ 5b:b8:b5:a3:44:c9:ac:7f:77:3c:1d:23:ec:82:a9:
++ a6:e2:c8:06:4c:02:fe:ac:5c:99:99:0b:2f:10:8a:
++ a6:f4:7f:d5:87:74:0d:59:49:45:f6:f0:71:5c:39:
++ 29:d6:bf:4a:23:8b:f5:5f:01:63:d2:87:73:28:b5:
++ 4b:0a:f5:f8:ab:82:2c:7e:73:25:32:1d:0b:63:0a:
++ 17:81:00:ff:b6:76:5e:e7:b4:b1:40:ca:21:bb:d5:
++ 80:51:e5:48:52:67:2c:d2:61:89:07:0d:0f:ce:42:
++ 77:c0:44:73:9c:44:50:a0:db:10:0a:2d:95:1c:81:
++ af:e4:1c:e5:14:1e:f1:36:41:01:02:2f:7d:73:a7:
++ de:42:cc:4c:e9:89:0d:56:f7:9f:91:d4:03:c6:6c:
++ c9:8f:db:d8:1c:e0:40:98:5d:66:99:98:80:6e:2d:
++ ff:01:c5:ce:cb:46:1f:ac:02:c6:43:e6:ae:a2:84:
++ 3c:c5:4e:1e:3d:6d:c9:14:4c:e3:2e:41:bb:ca:39:
++ bf:36:3c:2a:19:aa:41:87:4e:a5:ce:4b:32:79:dd:
++ 90:49:7f
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Authority Key Identifier:
++ 9C:5F:D0:6C:63:A3:5F:93:CA:93:98:08:AD:8C:87:A5:2C:5C:C1:37
++ X509v3 Subject Key Identifier:
++ 9C:5F:D0:6C:63:A3:5F:93:CA:93:98:08:AD:8C:87:A5:2C:5C:C1:37
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: sha256WithRSAEncryption
++ Signature Value:
++ 4e:1e:b9:8a:c6:a0:98:3f:6e:c3:69:c0:6a:5c:49:52:ac:cb:
++ 2b:5d:78:38:c1:d5:54:84:9f:93:f0:87:19:3d:2c:66:89:eb:
++ 0d:42:fc:cc:f0:75:85:3f:8b:f4:80:5d:79:e5:17:67:bd:35:
++ 82:e2:f2:3c:8e:7d:5b:36:cb:5a:80:00:29:f2:ce:2b:2c:f1:
++ 8f:aa:6d:05:93:6c:72:c7:56:eb:df:50:23:28:e5:45:10:3d:
++ e8:67:a3:af:0e:55:0f:90:09:62:ef:4b:59:a2:f6:53:f1:c0:
++ 35:e4:2f:c1:24:bd:79:2f:4e:20:22:3b:fd:1a:20:b0:a4:0e:
++ 2c:70:ed:74:3f:b8:13:95:06:51:c8:e8:87:26:ca:a4:5b:6a:
++ 16:21:92:dd:73:60:9e:10:18:de:3c:81:ea:e8:18:c3:7c:89:
++ f2:8b:50:3e:bd:11:e2:15:03:a8:36:7d:33:01:6c:48:15:d7:
++ 88:90:99:04:c5:cc:e6:07:f4:bc:f4:90:ed:13:e2:ea:8b:c3:
++ 8f:a3:33:0f:c1:29:4c:13:4e:da:15:56:71:73:72:82:50:f6:
++ 9a:33:7c:a2:b1:a8:1a:34:74:65:5c:ce:d1:eb:ab:53:e0:1a:
++ 80:d8:ea:3a:49:e4:26:30:9b:e5:1c:8a:a8:a9:15:32:86:99:
++ 92:0a:10:23:56:12:e0:f6:ce:4c:e2:bb:be:db:8d:92:73:01:
++ 66:2f:62:3e:b2:72:27:45:36:ed:4d:56:e3:97:99:ff:3a:35:
++ 3e:a5:54:4a:52:59:4b:60:db:ee:fe:78:11:7f:4a:dc:14:79:
++ 60:b6:6b:64:03:db:15:83:e1:a2:be:f6:23:97:50:f0:09:33:
++ 36:a7:71:96:25:f3:b9:42:7d:db:38:3f:2c:58:ac:e8:42:e1:
++ 0e:d8:d3:3b:4c:2e:82:e9:83:2e:6b:31:d9:dd:47:86:4f:6d:
++ 97:91:2e:4f:e2:28:71:35:16:d1:f2:73:fe:25:2b:07:47:24:
++ 63:27:c8:f8:f6:d9:6b:fc:12:31:56:08:c0:53:42:af:9c:d0:
++ 33:7e:fc:06:f0:31:44:03:14:f1:58:ea:f2:6a:0d:a9:11:b2:
++ 83:be:c5:1a:bf:07:ea:59:dc:a3:88:35:ef:9c:76:32:3c:4d:
++ 06:22:ce:15:e5:dd:9e:d8:8f:da:de:d2:c4:39:e5:17:81:cf:
++ 38:47:eb:7f:88:6d:59:1b:df:9f:42:14:ae:7e:cf:a8:b0:66:
++ 65:da:37:af:9f:aa:3d:ea:28:b6:de:d5:31:58:16:82:5b:ea:
++ bb:19:75:02:73:1a:ca:48:1a:21:93:90:0a:8e:93:84:a7:7d:
++ 3b:23:18:92:89:a0:8d:ac
+ -----BEGIN CERTIFICATE-----
+ MIIF7zCCA9egAwIBAgIIDdPjvGz5a7EwDQYJKoZIhvcNAQELBQAwgYQxEjAQBgNV
+ BAUTCUc2MzI4NzUxMDELMAkGA1UEBhMCRVMxJzAlBgNVBAoTHkFORiBBdXRvcmlk
+@@ -4167,77 +9120,153 @@ MjxNBiLOFeXdntiP2t7SxDnlF4HPOEfrf4htWRvfn0IUrn7PqLBmZdo3r5+qPeoo
+ tt7VMVgWglvquxl1AnMaykgaIZOQCo6ThKd9OyMYkomgjaw=
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=Certum EC-384 CA O=Asseco Data Systems S.A. OU=Certum Certification Authority
+-# Subject: CN=Certum EC-384 CA O=Asseco Data Systems S.A. OU=Certum Certification Authority
+-# Label: "Certum EC-384 CA"
+-# Serial: 160250656287871593594747141429395092468
+-# MD5 Fingerprint: b6:65:b3:96:60:97:12:a1:ec:4e:e1:3d:a3:c6:c9:f1
+-# SHA1 Fingerprint: f3:3e:78:3c:ac:df:f4:a2:cc:ac:67:55:69:56:d7:e5:16:3c:e1:ed
+-# SHA256 Fingerprint: 6b:32:80:85:62:53:18:aa:50:d1:73:c9:8d:8b:da:09:d5:7e:27:41:3d:11:4c:f7:87:a0:f5:d0:6c:03:0c:f6
++# e74fbda55bd564c473a36b441aa799c8a68e077440e8288b9fa1e50e4bbaca11
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ d6:5d:9b:b3:78:81:2e:eb
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = JP, O = "SECOM Trust Systems CO.,LTD.", CN = Security Communication ECC RootCA1
++ Validity
++ Not Before: Jun 16 05:15:28 2016 GMT
++ Not After : Jan 18 05:15:28 2038 GMT
++ Subject: C = JP, O = "SECOM Trust Systems CO.,LTD.", CN = Security Communication ECC RootCA1
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:a4:a5:6f:60:03:03:c3:bd:31:f4:d3:17:9c:2b:
++ 84:75:ac:e5:fd:3d:57:6e:d7:63:bf:e6:04:89:92:
++ 8e:81:9c:e3:e9:47:6e:ca:90:12:c8:13:e0:a7:9d:
++ f7:65:74:1f:6c:10:b2:e8:e4:e9:ef:6d:85:32:99:
++ 44:b1:5e:fd:cc:76:10:d8:5b:bd:a2:c6:f9:d6:42:
++ e4:57:76:dc:90:c2:35:a9:4b:88:3c:12:47:6d:5c:
++ ff:49:4f:1a:4a:50:b1
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 86:1C:E7:FE:2D:A5:4A:8B:08:FE:28:11:FA:BE:A3:66:F8:60:59:2F
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: ecdsa-with-SHA384
++ Signature Value:
++ 30:65:02:30:15:5d:42:3d:fc:b6:ee:f7:3b:b1:36:e8:9e:f6:
++ c4:46:28:49:33:d0:58:43:2a:63:29:cc:4d:b1:b4:7a:a2:b9:
++ 0d:38:a5:5d:48:2a:fd:cb:b2:73:5d:a3:88:08:c7:0c:02:31:
++ 00:c0:ab:2d:0e:6d:ed:18:a2:db:53:e9:25:db:55:08:e0:50:
++ cc:df:44:61:16:82:ab:49:b0:b2:81:ec:73:87:78:b4:4c:b2:
++ 62:1b:12:fa:16:4d:25:4b:63:bd:1e:37:d9
+ -----BEGIN CERTIFICATE-----
+-MIICZTCCAeugAwIBAgIQeI8nXIESUiClBNAt3bpz9DAKBggqhkjOPQQDAzB0MQsw
+-CQYDVQQGEwJQTDEhMB8GA1UEChMYQXNzZWNvIERhdGEgU3lzdGVtcyBTLkEuMScw
+-JQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxGTAXBgNVBAMT
+-EENlcnR1bSBFQy0zODQgQ0EwHhcNMTgwMzI2MDcyNDU0WhcNNDMwMzI2MDcyNDU0
+-WjB0MQswCQYDVQQGEwJQTDEhMB8GA1UEChMYQXNzZWNvIERhdGEgU3lzdGVtcyBT
+-LkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxGTAX
+-BgNVBAMTEENlcnR1bSBFQy0zODQgQ0EwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATE
+-KI6rGFtqvm5kN2PkzeyrOvfMobgOgknXhimfoZTy42B4mIF4Bk3y7JoOV2CDn7Tm
+-Fy8as10CW4kjPMIRBSqniBMY81CE1700LCeJVf/OTOffph8oxPBUw7l8t1Ot68Kj
+-QjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFI0GZnQkdjrzife81r1HfS+8
+-EF9LMA4GA1UdDwEB/wQEAwIBBjAKBggqhkjOPQQDAwNoADBlAjADVS2m5hjEfO/J
+-UG7BJw+ch69u1RsIGL2SKcHvlJF40jocVYli5RsJHrpka/F2tNQCMQC0QoSZ/6vn
+-nvuRlydd3LBbMHHOXjgaatkl5+r3YZJW+OraNsKHZZYuciUvf9/DE8k=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=
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=Certum Trusted Root CA O=Asseco Data Systems S.A. OU=Certum Certification Authority
+-# Subject: CN=Certum Trusted Root CA O=Asseco Data Systems S.A. OU=Certum Certification Authority
+-# Label: "Certum Trusted Root CA"
+-# Serial: 40870380103424195783807378461123655149
+-# MD5 Fingerprint: 51:e1:c2:e7:fe:4c:84:af:59:0e:2f:f4:54:6f:ea:29
+-# SHA1 Fingerprint: c8:83:44:c0:18:ae:9f:cc:f1:87:b7:8f:22:d1:c5:d7:45:84:ba:e5
+-# SHA256 Fingerprint: fe:76:96:57:38:55:77:3e:37:a9:5e:7a:d4:d9:cc:96:c3:01:57:c1:5d:31:76:5b:a9:b1:57:04:e1:ae:78:fd
+------BEGIN CERTIFICATE-----
+-MIIFwDCCA6igAwIBAgIQHr9ZULjJgDdMBvfrVU+17TANBgkqhkiG9w0BAQ0FADB6
+-MQswCQYDVQQGEwJQTDEhMB8GA1UEChMYQXNzZWNvIERhdGEgU3lzdGVtcyBTLkEu
+-MScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxHzAdBgNV
+-BAMTFkNlcnR1bSBUcnVzdGVkIFJvb3QgQ0EwHhcNMTgwMzE2MTIxMDEzWhcNNDMw
+-MzE2MTIxMDEzWjB6MQswCQYDVQQGEwJQTDEhMB8GA1UEChMYQXNzZWNvIERhdGEg
+-U3lzdGVtcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRo
+-b3JpdHkxHzAdBgNVBAMTFkNlcnR1bSBUcnVzdGVkIFJvb3QgQ0EwggIiMA0GCSqG
+-SIb3DQEBAQUAA4ICDwAwggIKAoICAQDRLY67tzbqbTeRn06TpwXkKQMlzhyC93yZ
+-n0EGze2jusDbCSzBfN8pfktlL5On1AFrAygYo9idBcEq2EXxkd7fO9CAAozPOA/q
+-p1x4EaTByIVcJdPTsuclzxFUl6s1wB52HO8AU5853BSlLCIls3Jy/I2z5T4IHhQq
+-NwuIPMqw9MjCoa68wb4pZ1Xi/K1ZXP69VyywkI3C7Te2fJmItdUDmj0VDT06qKhF
+-8JVOJVkdzZhpu9PMMsmN74H+rX2Ju7pgE8pllWeg8xn2A1bUatMn4qGtg/BKEiJ3
+-HAVz4hlxQsDsdUaakFjgao4rpUYwBI4Zshfjvqm6f1bxJAPXsiEodg42MEx51UGa
+-mqi4NboMOvJEGyCI98Ul1z3G4z5D3Yf+xOr1Uz5MZf87Sst4WmsXXw3Hw09Omiqi
+-7VdNIuJGmj8PkTQkfVXjjJU30xrwCSss0smNtA0Aq2cpKNgB9RkEth2+dv5yXMSF
+-ytKAQd8FqKPVhJBPC/PgP5sZ0jeJP/J7UhyM9uH3PAeXjA6iWYEMspA90+NZRu0P
+-qafegGtaqge2Gcu8V/OXIXoMsSt0Puvap2ctTMSYnjYJdmZm/Bo/6khUHL4wvYBQ
+-v3y1zgD2DGHZ5yQD4OMBgQ692IU0iL2yNqh7XAjlRICMb/gv1SHKHRzQ+8S1h9E6
+-Tsd2tTVItQIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSM+xx1
+-vALTn04uSNn5YFSqxLNP+jAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQENBQAD
+-ggIBAEii1QALLtA/vBzVtVRJHlpr9OTy4EA34MwUe7nJ+jW1dReTagVphZzNTxl4
+-WxmB82M+w85bj/UvXgF2Ez8sALnNllI5SW0ETsXpD4YN4fqzX4IS8TrOZgYkNCvo
+-zMrnadyHncI013nR03e4qllY/p0m+jiGPp2Kh2RX5Rc64vmNueMzeMGQ2Ljdt4NR
+-5MTMI9UGfOZR0800McD2RrsLrfw9EAUqO0qRJe6M1ISHgCq8CYyqOhNf6DR5UMEQ
+-GfnTKB7U0VEwKbOukGfWHwpjscWpxkIxYxeU72nLL/qMFH3EQxiJ2fAyQOaA4kZf
+-5ePBAFmo+eggvIksDkc0C+pXwlM2/KfUrzHN/gLldfq5Jwn58/U7yn2fqSLLiMmq
+-0Uc9NneoWWRrJ8/vJ8HjJLWG965+Mk2weWjROeiQWMODvA8s1pfrzgzhIMfatz7D
+-P78v3DSk+yshzWePS/Tj6tQ/50+6uaWTRRxmHyH6ZF5v4HaUMst19W7l9o/HuKTM
+-qJZ9ZPskWkoDbGs4xugDQ5r3V7mzKWmTOPQD8rv7gmsHINFSH5pkAnuYZttcTVoP
+-0ISVoDwUQwbKytu4QTbaakRnh6+v40URFWkIsr4WOZckbxJF0WddCajJFdr60qZf
+-E2Efv4WstK2tBZQIgx51F9NxO5NQI1mg7TyRVJ12AMXDuDjb
+------END CERTIFICATE-----
+-
+-# Issuer: CN=TunTrust Root CA O=Agence Nationale de Certification Electronique
+-# Subject: CN=TunTrust Root CA O=Agence Nationale de Certification Electronique
+-# Label: "TunTrust Root CA"
+-# Serial: 108534058042236574382096126452369648152337120275
+-# MD5 Fingerprint: 85:13:b9:90:5b:36:5c:b6:5e:b8:5a:f8:e0:31:57:b4
+-# SHA1 Fingerprint: cf:e9:70:84:0f:e0:73:0f:9d:f6:0c:7f:2c:4b:ee:20:46:34:9c:bb
+-# SHA256 Fingerprint: 2e:44:10:2a:b5:8c:b8:54:19:45:1c:8e:19:d9:ac:f3:66:2c:af:bc:61:4b:6a:53:96:0a:30:f7:d0:e2:eb:41
++# 2e44102ab58cb85419451c8e19d9acf3662cafbc614b6a53960a30f7d0e2eb41
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 13:02:d5:e2:40:4c:92:46:86:16:67:5d:b4:bb:bb:b2:6b:3e:fc:13
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = TN, O = Agence Nationale de Certification Electronique, CN = TunTrust Root CA
++ Validity
++ Not Before: Apr 26 08:57:56 2019 GMT
++ Not After : Apr 26 08:57:56 2044 GMT
++ Subject: C = TN, O = Agence Nationale de Certification Electronique, CN = TunTrust Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:c3:cd:d3:fc:bd:04:53:dd:0c:20:3a:d5:88:2e:
++ 05:4b:41:f5:83:82:7e:f7:59:9f:9e:9e:63:e8:73:
++ da:f6:06:a9:4f:1f:b4:f9:0b:1f:39:8c:9a:20:d0:
++ 7e:06:d4:ec:34:d9:86:bc:75:5b:87:88:f0:d2:d9:
++ d4:a3:0a:b2:6c:1b:eb:49:2c:3e:ac:5d:d8:94:03:
++ a0:ec:34:e5:30:c4:35:7d:fb:26:4d:1b:6e:30:54:
++ d8:f5:80:45:9c:39:ad:9c:c9:25:04:4d:9a:90:3e:
++ 4e:40:6e:8a:6b:cd:29:67:c6:cc:2d:e0:74:e8:05:
++ 57:0a:48:50:fa:7a:43:da:7e:ec:5b:9a:0e:62:76:
++ fe:ea:9d:1d:85:72:ec:11:bb:35:e8:1f:27:bf:c1:
++ a1:c7:bb:48:16:dd:56:d7:cc:4e:a0:e1:b9:ac:db:
++ d5:83:19:1a:85:d1:94:97:d7:ca:a3:65:0b:f3:38:
++ f9:02:ae:dd:f6:67:cf:c9:3f:f5:8a:2c:47:1a:99:
++ 6f:05:0d:fd:d0:1d:82:31:fc:29:cc:00:58:97:91:
++ 4c:80:00:1c:33:85:96:2f:cb:41:c2:8b:10:84:c3:
++ 09:24:89:1f:b5:0f:d9:d9:77:47:18:92:94:60:5c:
++ c7:99:03:3c:fe:f7:95:a7:7d:50:a1:80:c2:a9:83:
++ ad:58:96:55:21:db:86:59:d4:af:c6:bc:dd:81:6e:
++ 07:db:60:62:fe:ec:10:6e:da:68:01:f4:83:1b:a9:
++ 3e:a2:5b:23:d7:64:c6:df:dc:a2:7d:d8:4b:ba:82:
++ d2:51:f8:66:bf:06:46:e4:79:2a:26:36:79:8f:1f:
++ 4e:99:1d:b2:8f:0c:0e:1c:ff:c9:5d:c0:fd:90:10:
++ a6:b1:37:f3:cd:3a:24:6e:b4:85:90:bf:80:b9:0c:
++ 8c:d5:9b:d6:c8:f1:56:3f:1a:80:89:7a:a9:e2:1b:
++ 32:51:2c:3e:f2:df:7b:f6:5d:7a:29:19:8e:e5:c8:
++ bd:36:71:8b:5d:4c:c2:1d:3f:ad:58:a2:cf:3d:70:
++ 4d:a6:50:98:25:dc:23:f9:b8:58:41:08:71:bf:4f:
++ b8:84:a0:8f:00:54:15:fc:91:6d:58:a7:96:3b:eb:
++ 4b:96:27:cd:6b:a2:a1:86:ac:0d:7c:54:e6:66:4c:
++ 66:5f:90:be:21:9a:02:46:2d:e4:83:c2:80:b9:cf:
++ 4b:3e:e8:7f:3c:01:ec:8f:5e:cd:7f:d2:28:42:01:
++ 95:8a:e2:97:3d:10:21:7d:f6:9d:1c:c5:34:a1:ec:
++ 2c:0e:0a:52:2c:12:55:70:24:3d:cb:c2:14:35:43:
++ 5d:27:4e:be:c0:bd:aa:7c:96:e7:fc:9e:61:ad:44:
++ d3:00:97
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 06:9A:9B:1F:53:7D:F1:F5:A4:C8:D3:86:3E:A1:73:59:B4:F7:44:21
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ 06:9A:9B:1F:53:7D:F1:F5:A4:C8:D3:86:3E:A1:73:59:B4:F7:44:21
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ Signature Value:
++ aa:05:6e:b6:dd:15:c9:bf:b3:c6:20:f6:06:47:b0:86:93:25:
++ d3:8d:b9:c8:00:3f:97:f5:52:27:88:71:c9:74:fd:eb:ca:64:
++ db:5b:ef:1e:5d:ba:bf:d1:eb:ee:5c:69:ba:16:c8:f3:b9:8f:
++ d3:36:2e:40:49:07:0d:59:de:8b:10:b0:49:05:e2:ff:91:3f:
++ 4b:b7:dd:02:8e:f8:81:28:5c:cc:dc:6d:af:5f:14:9c:7d:58:
++ 78:0d:f6:80:09:b9:e9:0e:97:29:19:b8:b7:eb:f8:16:cb:55:
++ 12:e4:c6:7d:bb:c4:ec:f8:b5:1c:4e:3e:67:bf:c5:5f:1b:6d:
++ 6d:47:28:aa:04:58:61:d6:76:bf:22:7f:d0:07:6a:a7:64:53:
++ f0:97:8d:9d:80:3f:bb:c1:07:db:65:af:e6:9b:32:9a:c3:54:
++ 93:c4:1c:08:c3:44:fb:7b:63:11:43:d1:6a:1a:61:6a:79:6d:
++ 90:4f:29:8e:47:05:c1:12:69:69:d6:c6:36:31:e1:fc:fa:80:
++ ba:5c:4f:c4:eb:b7:32:ac:f8:75:61:17:d7:10:19:b9:f1:d2:
++ 09:ef:7a:42:9d:5b:5a:0b:d4:c6:95:4e:2a:ce:ff:07:d7:4f:
++ 7e:18:06:88:f1:19:b5:d9:98:bb:ae:71:c4:1c:e7:74:59:58:
++ ef:0c:89:cf:8b:1f:75:93:1a:04:14:92:48:50:a9:eb:57:29:
++ 00:16:e3:36:1c:c8:f8:bf:f0:33:d5:41:0f:c4:cc:3c:dd:e9:
++ 33:43:01:91:10:2b:1e:d1:b9:5d:cd:32:19:8b:8f:8c:20:77:
++ d7:22:c4:42:dc:84:16:9b:25:6d:e8:b4:55:71:7f:b0:7c:b3:
++ d3:71:49:b9:cf:52:a4:04:3f:dc:3d:a0:bb:af:33:9e:0a:30:
++ 60:8e:db:9d:5d:94:a8:bd:60:e7:62:80:76:81:83:0c:8c:cc:
++ 30:46:49:e2:0c:d2:a8:af:eb:61:71:ef:e7:22:62:a9:f7:5c:
++ 64:6c:9f:16:8c:67:36:27:45:f5:09:7b:bf:f6:10:0a:f1:b0:
++ 8d:54:43:8c:04:ba:a3:3f:ef:e2:35:c7:f9:74:e0:6f:34:41:
++ d0:bf:73:65:57:20:f9:9b:67:7a:66:68:24:4e:80:65:bd:10:
++ 99:06:59:f2:65:af:b8:c6:47:bb:fd:90:78:8b:41:73:2e:af:
++ 55:1f:dc:3b:92:72:6e:84:d3:d0:61:4c:0d:cc:76:57:e2:2d:
++ 85:22:15:36:0d:eb:01:9d:eb:d8:eb:c4:84:99:fb:c0:0c:cc:
++ 32:e8:e3:77:da:83:44:8b:9e:55:28:c0:8b:58:d3:90:3e:4e:
++ 1b:00:f1:15:ad:83:2b:9a
+ -----BEGIN CERTIFICATE-----
+ MIIFszCCA5ugAwIBAgIUEwLV4kBMkkaGFmddtLu7sms+/BMwDQYJKoZIhvcNAQEL
+ BQAwYTELMAkGA1UEBhMCVE4xNzA1BgNVBAoMLkFnZW5jZSBOYXRpb25hbGUgZGUg
+@@ -4272,66 +9301,1582 @@ u/2QeItBcy6vVR/cO5JyboTT0GFMDcx2V+IthSIVNg3rAZ3r2OvEhJn7wAzMMujj
+ d9qDRIueVSjAi1jTkD5OGwDxFa2DK5o=
+ -----END CERTIFICATE-----
+
+-# Issuer: CN=HARICA TLS RSA Root CA 2021 O=Hellenic Academic and Research Institutions CA
+-# Subject: CN=HARICA TLS RSA Root CA 2021 O=Hellenic Academic and Research Institutions CA
+-# Label: "HARICA TLS RSA Root CA 2021"
+-# Serial: 76817823531813593706434026085292783742
+-# MD5 Fingerprint: 65:47:9b:58:86:dd:2c:f0:fc:a2:84:1f:1e:96:c4:91
+-# SHA1 Fingerprint: 02:2d:05:82:fa:88:ce:14:0c:06:79:de:7f:14:10:e9:45:d7:a5:6d
+-# SHA256 Fingerprint: d9:5d:0e:8e:da:79:52:5b:f9:be:b1:1b:14:d2:10:0d:32:94:98:5f:0c:62:d9:fa:bd:9c:d9:99:ec:cb:7b:1d
++# 30fbba2c32238e2a98547af97931e550428b9b3f1c8eeb6633dcfa86c5b27dd3
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 6e:6a:bc:59:aa:53:be:98:39:67:a2:d2:6b:a4:3b:e6:6d:1c:d6:da
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = CN, O = "iTrusChina Co.,Ltd.", CN = vTrus ECC Root CA
++ Validity
++ Not Before: Jul 31 07:26:44 2018 GMT
++ Not After : Jul 31 07:26:44 2043 GMT
++ Subject: C = CN, O = "iTrusChina Co.,Ltd.", CN = vTrus ECC Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:65:50:4a:ae:8c:79:96:4a:aa:1c:08:c3:a3:a2:
++ cd:fe:59:56:41:77:fd:26:94:42:bb:1d:cd:08:db:
++ 73:b2:5b:75:f3:cf:9c:4e:82:f4:bf:f8:61:26:85:
++ 6c:d6:85:5b:72:70:d2:fd:db:62:b4:df:53:8b:bd:
++ b1:44:58:62:42:09:c7:fa:7f:5b:10:e7:fe:40:fd:
++ c0:d8:c3:2b:32:e7:70:a6:b7:a6:20:55:1d:7b:80:
++ 5d:4b:8f:67:4c:f1:10
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 98:39:CD:BE:D8:B2:8C:F7:B2:AB:E1:AD:24:AF:7B:7C:A1:DB:1F:CF
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Signature Algorithm: ecdsa-with-SHA384
++ Signature Value:
++ 30:65:02:30:57:9d:dd:56:f1:c7:e3:e9:b8:49:50:6b:9b:69:
++ c3:6f:ec:c3:7d:25:e4:57:95:13:40:9b:52:d3:3b:f3:40:19:
++ bc:26:c7:2d:06:9e:b5:7b:36:9f:f5:25:d4:63:6b:00:02:31:
++ 00:e9:d3:c6:9e:56:9a:2a:cc:a1:da:3f:c8:66:2b:d3:58:9c:
++ 20:85:fa:ab:91:8a:70:70:11:38:60:64:0b:62:09:91:58:00:
++ f9:4d:fb:34:68:da:09:ad:21:06:18:94:ce
+ -----BEGIN CERTIFICATE-----
+-MIIFpDCCA4ygAwIBAgIQOcqTHO9D88aOk8f0ZIk4fjANBgkqhkiG9w0BAQsFADBs
+-MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl
+-c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBSU0Eg
+-Um9vdCBDQSAyMDIxMB4XDTIxMDIxOTEwNTUzOFoXDTQ1MDIxMzEwNTUzN1owbDEL
+-MAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNl
+-YXJjaCBJbnN0aXR1dGlvbnMgQ0ExJDAiBgNVBAMMG0hBUklDQSBUTFMgUlNBIFJv
+-b3QgQ0EgMjAyMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAIvC569l
+-mwVnlskNJLnQDmT8zuIkGCyEf3dRywQRNrhe7Wlxp57kJQmXZ8FHws+RFjZiPTgE
+-4VGC/6zStGndLuwRo0Xua2s7TL+MjaQenRG56Tj5eg4MmOIjHdFOY9TnuEFE+2uv
+-a9of08WRiFukiZLRgeaMOVig1mlDqa2YUlhu2wr7a89o+uOkXjpFc5gH6l8Cct4M
+-pbOfrqkdtx2z/IpZ525yZa31MJQjB/OCFks1mJxTuy/K5FrZx40d/JiZ+yykgmvw
+-Kh+OC19xXFyuQnspiYHLA6OZyoieC0AJQTPb5lh6/a6ZcMBaD9YThnEvdmn8kN3b
+-LW7R8pv1GmuebxWMevBLKKAiOIAkbDakO/IwkfN4E8/BPzWr8R0RI7VDIp4BkrcY
+-AuUR0YLbFQDMYTfBKnya4dC6s1BG7oKsnTH4+yPiAwBIcKMJJnkVU2DzOFytOOqB
+-AGMUuTNe3QvboEUHGjMJ+E20pwKmafTCWQWIZYVWrkvL4N48fS0ayOn7H6NhStYq
+-E613TBoYm5EPWNgGVMWX+Ko/IIqmhaZ39qb8HOLubpQzKoNQhArlT4b4UEV4AIHr
+-W2jjJo3Me1xR9BQsQL4aYB16cmEdH2MtiKrOokWQCPxrvrNQKlr9qEgYRtaQQJKQ
+-CoReaDH46+0N0x3GfZkYVVYnZS6NRcUk7M7jAgMBAAGjQjBAMA8GA1UdEwEB/wQF
+-MAMBAf8wHQYDVR0OBBYEFApII6ZgpJIKM+qTW8VX6iVNvRLuMA4GA1UdDwEB/wQE
+-AwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAPpBIqm5iFSVmewzVjIuJndftTgfvnNAU
+-X15QvWiWkKQUEapobQk1OUAJ2vQJLDSle1mESSmXdMgHHkdt8s4cUCbjnj1AUz/3
+-f5Z2EMVGpdAgS1D0NTsY9FVqQRtHBmg8uwkIYtlfVUKqrFOFrJVWNlar5AWMxaja
+-H6NpvVMPxP/cyuN+8kyIhkdGGvMA9YCRotxDQpSbIPDRzbLrLFPCU3hKTwSUQZqP
+-JzLB5UkZv/HywouoCjkxKLR9YjYsTewfM7Z+d21+UPCfDtcRj88YxeMn/ibvBZ3P
+-zzfF0HvaO7AWhAw6k9a+F9sPPg4ZeAnHqQJyIkv3N3a6dcSFA1pj1bF1BcK5vZSt
+-jBWZp5N99sXzqnTPBIWUmAD04vnKJGW/4GKvyMX6ssmeVkjaef2WdhW+o45WxLM0
+-/L5H9MG0qPzVMIho7suuyWPEdr6sOBjhXlzPrjoiUevRi7PzKzMHVIf6tLITe7pT
+-BGIBnfHAT+7hOtSLIBD6Alfm78ELt5BGnBkpjNxvoEppaZS3JGWg/6w/zgH7IS79
+-aPib8qXPMThcFarmlwDB31qlpzmq6YR/PFGoOtmUW4y/Twhx5duoXNTSpv4Ao8YW
+-xw/ogM4cKGR0GQjTQuPOAF1/sdwTsOEFy9EgqoZ0njnnkf3/W9b3raYvAwtt41dU
+-63ZTGI0RmLo=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+ -----END CERTIFICATE-----
+
+-# Issuer: CN=HARICA TLS ECC Root CA 2021 O=Hellenic Academic and Research Institutions CA
+-# Subject: CN=HARICA TLS ECC Root CA 2021 O=Hellenic Academic and Research Institutions CA
+-# Label: "HARICA TLS ECC Root CA 2021"
+-# Serial: 137515985548005187474074462014555733966
+-# MD5 Fingerprint: ae:f7:4c:e5:66:35:d1:b7:9b:8c:22:93:74:d3:4b:b0
+-# SHA1 Fingerprint: bc:b0:c1:9d:e9:98:92:70:19:38:57:e9:8d:a7:b4:5d:6e:ee:01:48
+-# SHA256 Fingerprint: 3f:99:cc:47:4a:cf:ce:4d:fe:d5:87:94:66:5e:47:8d:15:47:73:9f:2e:78:0f:1b:b4:ca:9b:13:30:97:d4:01
++# 8a71de6559336f426c26e53880d00d88a18da4c6a91f0dcb6194e206c5c96387
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 43:e3:71:13:d8:b3:59:14:5d:b7:ce:8c:fd:35:fd:6f:bc:05:8d:45
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = CN, O = "iTrusChina Co.,Ltd.", CN = vTrus Root CA
++ Validity
++ Not Before: Jul 31 07:24:05 2018 GMT
++ Not After : Jul 31 07:24:05 2043 GMT
++ Subject: C = CN, O = "iTrusChina Co.,Ltd.", CN = vTrus Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:bd:55:7c:61:d3:b8:1d:04:62:05:a0:ae:6c:b7:
++ 70:b4:41:ea:4b:03:5e:10:3f:90:5a:1c:8b:3b:b0:
++ 66:8b:6c:48:a6:1c:22:ba:d5:40:92:ee:33:b2:23:
++ 59:c9:8e:bc:58:da:8b:9e:d0:19:f2:2f:59:c6:8c:
++ 63:5a:ba:9f:a3:0b:b0:b3:9a:5c:ba:11:b8:12:e9:
++ 0c:bb:cf:6e:6c:80:87:29:14:03:2c:8d:24:9a:c8:
++ 64:83:b5:6a:ac:13:2c:33:f1:9f:dc:2c:61:3c:1a:
++ 3f:70:55:9b:ad:00:52:7f:cf:04:b9:fe:36:fa:9c:
++ c0:16:ae:62:fe:96:4c:43:7e:55:14:be:1a:b3:d2:
++ 6d:c2:af:76:66:95:6b:2a:b0:94:77:85:5e:04:0f:
++ 62:1d:63:75:f7:6b:e7:cb:5b:9a:70:ec:3e:67:05:
++ f0:fe:07:08:80:cf:28:db:05:c6:14:27:2f:86:7d:
++ f0:27:de:ff:e6:7e:33:48:e7:0b:1e:58:d1:27:2b:
++ 53:0e:57:4a:65:d7:fb:a2:80:60:fc:4c:bc:35:53:
++ 01:6a:97:72:82:af:f1:1d:70:e8:9c:f5:ef:5e:c2:
++ 6c:c7:47:7e:5a:94:85:26:4d:3b:ba:eb:4c:e8:b0:
++ 09:c2:65:c2:9d:9d:09:9b:4e:b5:97:05:ac:f5:06:
++ a0:f7:36:05:7e:f4:90:b2:6b:c4:b4:f9:64:ea:e9:
++ 1a:0a:c8:0d:a8:ed:27:c9:d4:e7:b3:b9:ab:82:22:
++ 90:27:3d:2a:e8:7c:90:ef:bc:4f:fd:e2:0a:24:a7:
++ de:65:24:a4:5d:ea:c0:76:30:d3:77:50:f8:0d:04:
++ 9b:94:36:01:73:ca:06:58:a6:d3:3b:dc:fa:04:46:
++ 13:55:8a:c9:44:47:b8:51:39:1a:2e:e8:34:e2:79:
++ cb:59:4a:0a:7f:bc:a6:ef:1f:03:67:6a:59:2b:25:
++ 62:93:d9:53:19:66:3c:27:62:29:86:4d:a4:6b:ee:
++ ff:d4:4e:ba:d5:b4:e2:8e:48:5a:00:19:09:f1:05:
++ d9:ce:91:b1:f7:eb:e9:39:4f:f6:6f:04:43:9a:55:
++ f5:3e:05:14:bd:bf:b3:59:b4:d8:8e:33:84:a3:90:
++ 52:aa:b3:02:95:60:f9:0c:4c:68:f9:ee:d5:17:0d:
++ f8:71:57:b5:25:e4:29:ee:65:5d:af:d1:ee:3c:17:
++ 0b:5a:43:c5:a5:86:ea:24:9e:e2:05:07:dc:34:42:
++ 12:91:d6:39:74:ae:4c:41:82:db:f2:a6:48:d1:b3:
++ 9b:f3:33:aa:f3:a6:c0:c5:4e:f5:f4:9d:76:63:e6:
++ 02:c6:22:4b:c1:95:3f:50:64:2c:54:e5:b6:f0:3c:
++ 29:cf:57
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 54:62:70:63:F1:75:84:43:58:8E:D1:16:20:B1:C6:AC:1A:BC:F6:89
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ Signature Value:
++ 29:ba:92:49:a7:ad:f0:f1:70:c3:e4:97:f0:9f:a9:25:d5:6b:
++ 9e:34:fe:e6:1a:64:f6:3a:6b:52:b2:10:78:1a:9f:4c:da:8a:
++ da:ec:1c:37:52:e0:42:4b:fb:6c:76:ca:24:0b:39:12:15:9d:
++ 9f:11:2d:fc:79:64:dc:e0:e0:f5:dd:e0:57:c9:a5:b2:76:70:
++ 50:a4:fe:b7:0a:70:d5:a0:34:f1:75:d7:4d:49:ba:11:d1:b3:
++ d8:ec:82:ff:eb:0e:c4:bf:64:2d:7d:63:6e:17:78:ec:5d:7c:
++ 88:c8:eb:8e:57:76:d9:59:04:fa:bc:52:1f:45:ac:f0:7a:80:
++ ec:ec:6f:76:ae:91:db:10:8e:04:dc:92:df:a0:f6:e6:ae:49:
++ d3:c1:6c:12:1b:cc:29:aa:f9:08:a5:e2:37:14:ca:b1:b8:66:
++ ef:1a:82:e4:f0:f8:f1:a7:16:69:b7:db:a9:61:3c:9f:f5:31:
++ cb:e4:00:46:c2:2f:74:b1:b1:d7:81:ee:a8:26:95:bc:88:af:
++ 4c:35:07:2a:02:ca:78:14:6d:47:2b:40:56:e9:cb:2a:60:a1:
++ 67:03:a0:ce:8c:bc:b0:72:67:c4:31:ce:db:34:e5:25:03:60:
++ 25:7b:71:98:e4:c0:1b:2b:5f:74:42:d2:4b:c5:59:08:07:87:
++ be:c5:c3:7f:e7:96:d9:e1:dc:28:97:d6:8f:05:e3:f5:9b:4e:
++ ca:1d:50:47:05:53:b0:ca:39:e7:85:a0:89:c1:05:3b:01:37:
++ d3:3f:49:e2:77:eb:23:c8:88:66:3b:3d:39:76:21:46:f1:ec:
++ 5f:23:b8:eb:a2:66:75:74:c1:40:f7:d8:68:9a:93:e2:2d:a9:
++ 2e:bd:1c:a3:1e:c8:74:c6:a4:2d:7a:20:ab:3b:b8:b0:46:fd:
++ 6f:dd:5f:52:55:75:62:f0:97:a0:7c:d7:38:fd:25:df:cd:a0:
++ 9b:10:cf:8b:b8:38:5e:5e:c5:b4:a6:02:36:a1:1e:5f:1c:cf:
++ e2:96:9d:29:aa:fd:98:ae:52:e1:f3:41:52:fb:a9:2e:72:96:
++ 9f:27:e3:aa:73:7d:f8:1a:23:66:7b:3b:ab:65:b0:32:01:4b:
++ 15:3e:3d:a2:4f:0c:2b:35:a2:c6:d9:67:12:35:30:cd:76:2e:
++ 16:b3:99:9e:4d:4f:4e:2d:3b:34:43:e1:9a:0e:0d:a4:66:97:
++ ba:d2:1c:4a:4c:2c:2a:8b:8b:81:4f:71:1a:a9:dd:5c:7b:7b:
++ 08:c5:00:0d:37:40:e3:7c:7b:54:5f:2f:85:5f:76:f6:f7:a7:
++ b0:1c:57:56:c1:72:e8:ad:a2:af:8d:33:49:ba:1f:8a:dc:e6:
++ 74:7c:60:86:6f:87:97:7b
+ -----BEGIN CERTIFICATE-----
+-MIICVDCCAdugAwIBAgIQZ3SdjXfYO2rbIvT/WeK/zjAKBggqhkjOPQQDAzBsMQsw
+-CQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2Vh
+-cmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBFQ0MgUm9v
+-dCBDQSAyMDIxMB4XDTIxMDIxOTExMDExMFoXDTQ1MDIxMzExMDEwOVowbDELMAkG
+-A1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJj
+-aCBJbnN0aXR1dGlvbnMgQ0ExJDAiBgNVBAMMG0hBUklDQSBUTFMgRUNDIFJvb3Qg
+-Q0EgMjAyMTB2MBAGByqGSM49AgEGBSuBBAAiA2IABDgI/rGgltJ6rK9JOtDA4MM7
+-KKrxcm1lAEeIhPyaJmuqS7psBAqIXhfyVYf8MLA04jRYVxqEU+kw2anylnTDUR9Y
+-STHMmE5gEYd103KUkE+bECUqqHgtvpBBWJAVcqeht6NCMEAwDwYDVR0TAQH/BAUw
+-AwEB/zAdBgNVHQ4EFgQUyRtTgRL+BNUW0aq8mm+3oJUZbsowDgYDVR0PAQH/BAQD
+-AgGGMAoGCCqGSM49BAMDA2cAMGQCMBHervjcToiwqfAircJRQO9gcS3ujwLEXQNw
+-SaSS6sUUiHCm0w2wqsosQJz76YJumgIwK0eaB8bRwoF8yguWGEEbo/QwCZ61IygN
+-nxS2PFOiTAZpffpskcYqSUXm7LcT4Tps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+ -----END CERTIFICATE-----
++
++# b2fae53e14ccd7ab9212064701ae279c1d8988facb775fa8a008914e663988a8
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 3d:98:3b:a6:66:3d:90:63:f7:7e:26:57:38:04:ef:00
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: CN = Atos TrustedRoot Root CA ECC TLS 2021, O = Atos, C = DE
++ Validity
++ Not Before: Apr 22 09:26:23 2021 GMT
++ Not After : Apr 17 09:26:22 2041 GMT
++ Subject: CN = Atos TrustedRoot Root CA ECC TLS 2021, O = Atos, C = DE
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:96:86:58:28:37:0a:67:d0:a0:de:24:19:19:e1:
++ e4:05:07:1f:97:ed:e8:64:82:b9:f6:c4:71:50:ce:
++ 8a:0c:ff:d7:b5:76:bb:a1:6c:93:6c:83:a2:68:6e:
++ a5:d9:be:2c:88:95:41:cd:5d:dd:b1:ca:83:63:83:
++ cc:c0:be:74:d9:e0:9d:a4:ee:4a:4e:56:e0:98:29:
++ 41:93:52:10:d5:24:38:02:32:67:f1:94:12:6f:ef:
++ d7:c5:de:2e:fd:19:80
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 76:28:25:D6:7D:E0:66:9A:7A:09:B2:6A:3B:8E:33:D7:36:D3:4F:A2
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: ecdsa-with-SHA384
++ Signature Value:
++ 30:65:02:30:5b:99:29:f3:9c:31:b6:89:6b:6c:d6:bd:77:e1:
++ 7c:e7:51:7e:b8:3a:cd:a3:36:5f:7c:f7:3c:77:3e:e4:50:ad:
++ a8:e7:d2:59:0c:26:8e:30:3b:6e:08:2a:c2:a7:5a:c8:02:31:
++ 00:99:e3:0c:e7:a3:c3:af:d3:49:2e:46:82:23:66:5d:c9:00:
++ 14:12:fd:38:f4:e1:98:6b:77:29:7a:db:24:cf:65:40:bf:d2:
++ dc:8c:11:e8:f4:7d:7f:20:84:a9:42:e4:28
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 81a9088ea59fb364c548a6f85559099b6f0405efbf18e5324ec9f457ba00112f
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 53:d5:cf:e6:19:93:0b:fb:2b:05:12:d8:c2:2a:a2:a4
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: CN = Atos TrustedRoot Root CA RSA TLS 2021, O = Atos, C = DE
++ Validity
++ Not Before: Apr 22 09:21:10 2021 GMT
++ Not After : Apr 17 09:21:09 2041 GMT
++ Subject: CN = Atos TrustedRoot Root CA RSA TLS 2021, O = Atos, C = DE
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:b6:80:0e:c4:79:bd:05:8c:7d:b0:a3:9d:4d:22:
++ 4d:cb:f0:41:97:4d:59:e0:d1:fe:56:8c:97:f2:d7:
++ bd:8f:6c:b7:23:8f:5f:d5:c4:d8:41:cb:f2:02:1e:
++ 71:e5:e9:f6:5e:cb:08:2a:5e:30:f2:2d:66:c7:84:
++ 1b:64:57:38:9d:75:2d:56:c6:2f:61:ef:96:fc:20:
++ 46:bd:eb:d4:7b:3f:3f:7c:47:38:04:a9:1b:aa:52:
++ df:13:37:d3:15:15:4e:bd:5f:7c:af:ad:63:c7:79:
++ dc:08:7b:d5:a0:e5:f7:5b:75:ac:80:55:99:92:61:
++ 9b:cd:2a:17:7d:db:8f:f4:b5:6a:ea:17:4a:64:28:
++ 66:15:29:6c:02:f1:6b:d5:ba:a3:33:dc:5a:67:a7:
++ 05:e2:bf:65:b6:16:b0:10:ed:cd:50:33:c9:70:50:
++ ec:19:8e:b0:c7:f2:74:5b:6b:44:c6:7d:96:b9:98:
++ 08:59:66:de:29:01:9b:f4:2a:6d:d3:15:3a:90:6a:
++ 67:f1:b4:6b:66:d9:21:eb:ca:d9:62:7c:46:10:5c:
++ de:75:49:67:9e:42:f9:fe:75:a9:a3:ad:ff:76:0a:
++ 67:40:e3:c5:f7:8d:c7:85:9a:59:9e:62:9a:6a:ed:
++ 45:87:98:67:b2:d5:4a:3c:d7:b4:3b:00:0d:c0:8f:
++ 1f:e1:40:c4:ae:6c:21:dc:49:7e:7e:ca:b2:8d:6d:
++ b6:bf:93:2f:a1:5c:3e:8f:ca:ed:80:8e:58:e1:db:
++ 57:cf:85:36:38:b2:71:a4:09:8c:92:89:08:88:48:
++ f1:40:63:18:b2:5b:8c:5a:e3:c3:d3:17:aa:ab:19:
++ a3:2c:1b:e4:d5:c6:e2:66:7a:d7:82:19:a6:3b:16:
++ 2c:2f:71:87:5f:45:9e:95:73:93:c2:42:81:21:13:
++ 96:d7:9d:bb:93:68:15:fa:9d:a4:1d:8c:f2:81:e0:
++ 58:06:bd:c9:b6:e3:f6:89:5d:89:f9:ac:44:a1:cb:
++ 6b:fa:16:f1:c7:50:3d:24:da:f7:c3:e4:87:d5:56:
++ f1:4f:90:30:fa:45:09:59:da:34:ce:e0:13:1c:04:
++ 7c:00:d4:9b:86:a4:40:bc:d9:dc:4c:57:7e:ae:b7:
++ 33:b6:5e:76:e1:65:8b:66:df:8d:ca:d7:98:af:ce:
++ 36:98:8c:9c:83:99:03:70:f3:af:74:ed:c6:0e:36:
++ e7:bd:ec:c1:73:a7:94:5a:cb:92:64:82:a6:00:c1:
++ 70:a1:6e:2c:29:e1:58:57:ec:5a:7c:99:6b:25:a4:
++ 90:3a:80:f4:20:9d:9a:ce:c7:2d:f9:b2:4b:29:95:
++ 83:e9:35:8d:a7:49:48:a7:0f:4c:19:91:d0:f5:bf:
++ 10:e0:71
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 74:49:99:D1:FF:B4:7A:68:45:75:C3:7E:B4:DC:CC:CE:39:33:DA:08
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: sha384WithRSAEncryption
++ Signature Value:
++ 23:43:53:24:62:5c:6d:fd:3e:c2:cf:55:00:6c:c5:56:88:b9:
++ 0e:dd:3a:e2:25:0d:95:4a:97:ca:80:89:ee:2a:cd:65:f8:db:
++ 16:e0:09:92:e0:18:c7:78:98:bb:f3:ec:42:52:fb:a9:a4:82:
++ d7:4d:d8:8a:fc:e4:4e:fd:ab:90:c4:38:75:32:84:9f:ff:b3:
++ b0:2b:02:33:36:c0:10:90:6f:1d:9c:af:e1:69:93:ec:a3:45:
++ 2f:14:9f:f5:4c:2a:65:43:72:0c:f7:c3:f8:95:8b:14:f3:85:
++ 20:62:dd:54:53:dd:2c:dc:18:95:69:4f:83:47:70:40:33:58:
++ 77:12:0c:a2:eb:52:31:1e:4c:c9:a8:ce:c5:ef:c3:d1:ad:e0:
++ 6b:03:00:34:26:b4:54:21:35:97:01:dc:5f:1b:f1:7c:e7:55:
++ fa:2d:68:77:7b:d3:69:cc:d3:0e:6b:ba:4d:76:44:d6:c2:15:
++ 9a:26:ec:b0:c5:f5:bb:d1:7a:74:c2:6c:cd:c5:b5:5e:f6:4c:
++ e6:5b:2d:81:db:b3:b7:3a:97:9e:ed:cf:46:b2:50:3d:84:60:
++ 99:71:b5:33:b5:57:45:e6:42:47:75:6a:0e:b0:08:0c:ae:bd:
++ de:f7:bb:0f:58:3d:8f:03:31:e8:3d:82:50:ca:2f:5e:0c:5d:
++ b4:97:be:20:34:07:f4:c4:12:e1:ee:d7:b0:d9:59:2d:69:f7:
++ 31:04:f4:f2:f9:ab:f9:13:31:f8:01:77:0e:3d:42:23:26:cc:
++ 9a:72:67:51:21:7a:cc:3c:85:a8:ea:21:6a:3b:db:5a:3c:a5:
++ 34:9e:9a:c0:2c:df:80:9c:29:e0:df:77:94:d1:a2:80:42:ff:
++ 6a:4c:5b:11:d0:f5:cd:a2:be:ae:cc:51:5c:c3:d5:54:7b:0c:
++ ae:d6:b9:06:77:80:e2:ef:07:1a:68:cc:59:51:ad:7e:5c:67:
++ 6b:b9:db:e2:07:42:5b:b8:01:05:58:39:4d:e4:bb:98:a3:b1:
++ 32:ec:d9:a3:d6:6f:94:23:ff:3b:b7:29:65:e6:07:e9:ef:b6:
++ 19:ea:e7:c2:38:1d:32:88:90:3c:13:2b:6e:cc:ef:ab:77:06:
++ 34:77:84:4f:72:e4:81:84:f9:b9:74:34:de:76:4f:92:2a:53:
++ b1:25:39:db:3c:ff:e5:3e:a6:0e:e5:6b:9e:ff:db:ec:2f:74:
++ 83:df:8e:b4:b3:a9:de:14:4d:ff:31:a3:45:73:24:fa:95:29:
++ cc:12:97:04:a2:38:b6:8d:b0:f0:37:fc:c8:21:7f:3f:b3:24:
++ 1b:3d:8b:6e:cc:4d:b0:16:0d:96:1d:83:1f:46:c0:9b:bd:43:
++ 99:e7:c4:96:2e:ce:5f:c9
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# c90f26f0fb1b4018b22227519b5ca2b53e2ca5b3be5cf18efe1bef47380c5383
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 42:f2:cc:da:1b:69:37:44:5f:15:fe:75:28:10:b8:f4
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root E46
++ Validity
++ Not Before: Mar 22 00:00:00 2021 GMT
++ Not After : Mar 21 23:59:59 2046 GMT
++ Subject: C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root E46
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:76:fa:99:a9:6e:20:ed:f9:d7:77:e3:07:3b:a8:
++ db:3d:5f:38:e8:ab:55:a6:56:4f:d6:48:ea:ec:7f:
++ 2d:aa:c3:b2:c5:79:ec:99:61:7f:10:79:c7:02:5a:
++ f9:04:37:f5:34:35:2b:77:ce:7f:20:8f:52:a3:00:
++ 89:ec:d5:a7:a2:6d:5b:e3:4b:92:93:a0:80:f5:01:
++ 94:dc:f0:68:07:1e:cd:ee:fe:25:52:b5:20:43:1c:
++ 1b:fe:eb:19:ce:43:a3
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ D1:22:DA:4C:59:F1:4B:5F:26:38:AA:9D:D6:EE:EB:0D:C3:FB:A9:61
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: ecdsa-with-SHA384
++ Signature Value:
++ 30:64:02:30:27:ee:a4:5a:a8:21:bb:e9:47:97:94:89:a5:74:
++ 20:6d:79:4f:c8:bd:93:5e:58:18:fb:2d:1a:00:6a:c9:b8:3d:
++ d0:a4:4f:44:47:94:01:56:a2:f8:33:25:0c:42:df:aa:02:30:
++ 1d:ea:e1:2e:88:2e:e1:f9:a7:1d:02:32:4e:f2:9f:6c:55:74:
++ e3:ae:ae:fb:a5:1a:ee:ed:d2:fc:c2:03:11:eb:45:5c:60:10:
++ 3d:5c:7f:99:03:5b:6d:54:48:01:8a:73
++-----BEGIN CERTIFICATE-----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==
++-----END CERTIFICATE-----
++
++# 7bb647a62aeeac88bf257aa522d01ffea395e0ab45c73f93f65654ec38f25a06
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 75:8d:fd:8b:ae:7c:07:00:fa:a9:25:a7:e1:c7:ad:14
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root R46
++ Validity
++ Not Before: Mar 22 00:00:00 2021 GMT
++ Not After : Mar 21 23:59:59 2046 GMT
++ Subject: C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication Root R46
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:93:be:d5:36:52:75:d8:01:23:a0:1c:47:42:49:
++ ee:63:b6:b7:21:fd:c4:95:d5:48:2b:26:7c:14:53:
++ 10:da:79:fd:2b:b7:2d:a4:d4:2c:fa:ea:32:dd:49:
++ c2:b9:bd:0f:48:3d:7b:5a:98:54:af:9e:5d:31:74:
++ 4f:07:fc:50:21:dd:a4:cf:68:4f:1b:12:63:6d:25:
++ 99:4c:2a:99:f3:48:30:61:fa:81:7c:1e:a7:08:4a:
++ dc:3e:2b:1c:1f:18:4c:71:aa:35:8c:ad:f8:6e:e8:
++ 3b:4a:d9:e5:94:02:d6:89:84:13:aa:6d:c8:4f:33:
++ cc:50:96:37:92:33:dc:5f:88:e7:9f:54:d9:48:f0:
++ 98:43:d6:66:fd:9f:17:38:43:c5:01:51:0b:d7:e3:
++ 23:0f:14:5d:5b:14:e7:4b:be:dd:f4:c8:da:03:37:
++ d1:d6:39:a1:21:51:30:83:b0:6d:d7:30:4e:96:5b:
++ 91:f0:70:24:ab:bf:45:81:64:43:0d:bd:21:3a:2f:
++ 3c:e9:9e:0d:cb:20:b5:42:27:cc:da:6f:9b:ee:64:
++ 30:90:39:cd:93:65:81:21:31:b5:23:50:33:37:22:
++ e3:38:ed:f8:31:30:cc:45:fe:62:f9:d1:5d:32:79:
++ 42:87:df:6a:cc:56:19:40:4d:ce:aa:bb:f9:b5:76:
++ 49:94:f1:27:f8:91:a5:83:e5:06:b3:63:0e:80:dc:
++ e0:12:55:80:a6:3b:66:b4:39:87:2d:c8:f0:d0:d1:
++ 14:e9:e4:0d:4d:0e:f6:5d:57:72:c5:3b:1c:47:56:
++ 9d:e2:d5:fb:81:61:8c:cc:4d:80:90:34:5b:b7:d7:
++ 14:75:dc:d8:04:48:9f:c0:c1:28:88:b4:e9:1c:ca:
++ a7:b1:f1:56:b7:7b:49:4c:59:e5:20:15:a8:84:02:
++ 29:fa:38:94:69:9a:49:06:8f:cd:1f:79:14:17:12:
++ 0c:83:7a:de:1f:b1:97:ee:f9:97:78:28:a4:c8:44:
++ 92:e9:7d:26:05:a6:58:72:9b:79:13:d8:11:5f:ae:
++ c5:38:62:34:68:b2:86:30:8e:f8:90:61:9e:32:6c:
++ f5:07:36:cd:a2:4c:6e:ec:8a:36:ed:f2:e6:99:15:
++ 44:70:c3:7c:bc:9c:39:c0:b4:e1:6b:f7:83:25:23:
++ 57:d9:12:80:e5:49:f0:75:0f:ef:8d:eb:1c:9b:54:
++ 28:b4:21:3c:fc:7c:0a:ff:ef:7b:6b:75:ff:8b:1d:
++ a0:19:05:ab:fa:f8:2b:81:42:e8:38:ba:bb:fb:aa:
++ fd:3d:e0:f3:ca:df:4e:97:97:29:ed:f3:18:56:e9:
++ a5:96:ac:bd:c3:90:98:b2:e0:f9:a2:d4:a6:47:43:
++ 7c:6d:cf
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ 56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ Signature Algorithm: sha384WithRSAEncryption
++ Signature Value:
++ 2f:5c:99:3c:fc:06:5e:8c:94:2e:70:ea:d2:32:31:8d:b4:f0:
++ 51:d5:bc:0a:f3:64:9f:07:5e:d5:c1:73:68:64:7a:a2:b9:0e:
++ e8:f9:5d:85:2d:a8:37:45:aa:28:f4:96:05:50:60:a9:49:7e:
++ 9f:e2:99:36:29:13:44:47:6a:9d:55:20:3c:d8:9b:f1:03:32:
++ ba:da:40:a1:73:ea:83:a1:b7:44:a6:0e:99:01:9b:e4:bc:7f:
++ be:13:94:7e:ca:a6:1e:76:80:36:3d:84:06:8b:33:26:65:6d:
++ ca:7e:9e:fe:1f:8c:58:38:7b:1a:83:b1:0f:bc:17:11:bb:e6:
++ 06:cc:63:fa:81:f2:81:4c:da:0b:10:6b:a1:fa:d5:28:a5:cf:
++ 06:40:16:ff:7b:7d:18:5e:39:12:a4:53:9e:7e:32:42:10:a6:
++ 21:91:a9:1c:4e:17:7c:84:bc:9f:8c:d1:e8:df:e6:51:b9:36:
++ 47:3f:90:b9:c7:bc:02:dc:5b:1c:4f:0e:48:c1:25:83:9c:0a:
++ 3f:9e:b1:03:33:12:1a:27:ac:f7:22:6c:24:d1:01:41:f8:58:
++ 03:fe:25:68:22:1f:9a:5a:3c:7c:6c:9e:75:48:f3:81:f1:66:
++ 67:6e:4c:82:c0:ee:ba:57:0e:18:ef:2e:9a:f7:12:d8:a0:6b:
++ e9:05:a5:a1:e9:68:f8:bc:4c:3f:12:1e:45:e8:52:c0:a3:bf:
++ 12:27:79:b9:cc:31:3c:c3:f6:3a:22:16:03:a0:c9:8f:66:a4:
++ 5b:a2:4d:d6:81:25:06:e9:76:a4:00:0a:3e:cb:cd:35:9b:e0:
++ e1:38:cb:60:53:86:28:42:41:1c:44:57:e8:a8:ad:ab:45:e3:
++ 25:10:bc:db:3e:65:41:fb:1b:a6:97:0f:eb:b9:74:79:f9:1e:
++ bc:1d:57:0d:47:af:c3:2f:9f:87:46:a7:eb:26:5a:0f:56:63:
++ b5:62:60:6e:00:fb:e3:27:11:22:e7:fe:99:8f:34:f5:b9:e8:
++ c3:91:72:bd:d8:c3:1e:b9:2e:f2:91:44:51:d0:57:cd:0c:34:
++ d5:48:21:bf:db:13:f1:66:25:43:52:d2:70:22:36:cd:9f:c4:
++ 1c:75:20:ad:63:72:63:06:0f:0e:27:ce:d2:6a:0d:bc:b5:39:
++ 1a:e9:d1:76:7a:d1:5c:e4:e7:49:49:2d:55:37:68:f0:1a:3a:
++ 98:3e:54:17:87:54:e9:a6:27:50:89:7b:20:2f:3f:ff:bf:a1:
++ 8b:4a:47:98:ff:2b:7b:49:3e:c3:29:46:60:18:42:ab:33:29:
++ ba:c0:29:b9:13:89:d3:88:8a:39:41:3b:c9:fd:a6:ed:1f:f4:
++ 60:63:df:d2:2d:55:01:8b
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# c32ffd9f46f936d16c3673990959434b9ad60aafbb9e7cf33654f144cc1ba143
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 14:03:f5:ab:fb:37:8b:17:40:5b:e2:43:b2:a5:d1:c4
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C = US, O = SSL Corporation, CN = SSL.com TLS ECC Root CA 2022
++ Validity
++ Not Before: Aug 25 16:33:48 2022 GMT
++ Not After : Aug 19 16:33:47 2046 GMT
++ Subject: C = US, O = SSL Corporation, CN = SSL.com TLS ECC Root CA 2022
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:45:29:35:73:fa:c2:b8:23:ce:14:7d:a8:b1:4d:
++ a0:5b:36:ee:2a:2c:53:c3:60:09:35:b2:24:66:26:
++ 69:c0:b3:95:d6:5d:92:40:19:0e:c6:a5:13:70:f4:
++ ef:12:51:28:5d:e7:cc:bd:f9:3c:85:c1:cf:94:90:
++ c9:2b:ce:92:42:58:59:67:fd:94:27:10:64:8c:4f:
++ 04:b1:4d:49:e4:7b:4f:9b:f5:e7:08:f8:03:88:f7:
++ a7:c3:92:4b:19:54:81
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ 89:8F:2F:A3:E8:2B:A0:14:54:7B:F3:56:B8:26:5F:67:38:0B:9C:D0
++ X509v3 Subject Key Identifier:
++ 89:8F:2F:A3:E8:2B:A0:14:54:7B:F3:56:B8:26:5F:67:38:0B:9C:D0
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: ecdsa-with-SHA384
++ Signature Value:
++ 30:65:02:30:55:e3:22:56:e9:d7:92:24:58:4f:1e:94:32:0f:
++ 0c:02:36:c2:fd:ac:74:32:4e:e1:fb:1c:80:88:a3:cc:fb:d7:
++ eb:2b:ff:37:7d:f0:ed:d7:9e:75:6a:35:76:52:45:e0:02:31:
++ 00:c7:8d:6f:42:20:8f:be:b6:4d:59:ed:77:4d:29:c4:20:20:
++ 45:64:86:3a:50:c6:c4:ad:2d:93:f5:18:7d:72:ed:a9:cf:c4:
++ ac:57:36:28:08:65:df:3c:79:66:7e:a0:ea
++-----BEGIN CERTIFICATE-----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==
++-----END CERTIFICATE-----
++
++# 8faf7d2e2cb4709bb8e0b33666bf75a5dd45b5de480f8ea8d4bfe6bebc17f2ed
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 6f:be:da:ad:73:bd:08:40:e2:8b:4d:be:d4:f7:5b:91
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C = US, O = SSL Corporation, CN = SSL.com TLS RSA Root CA 2022
++ Validity
++ Not Before: Aug 25 16:34:22 2022 GMT
++ Not After : Aug 19 16:34:21 2046 GMT
++ Subject: C = US, O = SSL Corporation, CN = SSL.com TLS RSA Root CA 2022
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:d0:a4:09:72:4f:40:88:12:61:3e:35:23:9e:ee:
++ f6:74:cf:2f:7b:58:3d:ce:3c:0d:10:28:90:2f:97:
++ f7:8c:48:d8:a0:d8:25:b1:4c:b0:11:4c:17:73:50:
++ d0:22:4a:63:bb:81:d3:29:6e:d5:b5:09:3e:26:18:
++ 7f:b2:12:7f:93:98:b7:af:f0:36:bf:f2:ee:18:9e:
++ 9c:3b:52:c5:47:19:5d:74:f3:64:66:d5:5d:c7:68:
++ b4:bf:1b:1c:06:a3:bc:8f:40:23:b6:1e:c6:84:bd:
++ 51:c4:1b:39:c1:95:d2:29:ec:4b:ae:7b:2d:bf:39:
++ fd:b4:62:de:96:7b:41:c6:9c:a0:e0:06:72:fb:f0:
++ 07:97:09:39:81:74:af:f7:34:59:11:57:0a:c2:5b:
++ c1:24:f4:31:73:30:82:c6:9d:ba:02:f7:3e:7c:44:
++ 5f:83:0d:f3:f1:dd:20:69:16:09:50:e2:d4:55:b6:
++ e0:80:72:76:6e:4c:47:b7:75:55:59:b4:53:74:d9:
++ 94:c6:41:ad:58:8a:31:66:0f:1e:a2:1b:29:40:4e:
++ 2f:df:7b:e6:16:2c:2d:fc:bf:ec:f3:b4:fa:be:18:
++ f6:9b:49:d4:ee:05:6e:d9:34:f3:9c:f1:ec:01:8b:
++ d1:20:c6:0f:a0:b5:bc:17:4e:48:7b:51:c2:fc:e9:
++ 5c:69:37:47:66:b3:68:f8:15:28:f0:b9:d3:a4:15:
++ cc:5a:4f:ba:52:70:a3:12:45:dd:c6:ba:4e:fb:c2:
++ d0:f7:a8:52:27:6d:6e:79:b5:8c:fc:7b:8c:c1:16:
++ 4c:ee:80:7f:be:f0:76:be:41:53:12:33:ae:5a:38:
++ 42:ab:d7:0f:3e:41:8d:76:07:32:d5:ab:89:f6:4e:
++ 67:d9:b1:42:75:23:6e:f3:cd:42:b2:fc:55:f5:53:
++ 87:17:3b:c0:33:58:f1:52:d2:f9:80:a4:f0:e8:f0:
++ 3b:8b:38:cc:a4:c6:90:7f:0f:9c:fd:8b:d1:a3:cf:
++ da:83:a7:69:c9:50:36:d5:5c:05:d2:0a:41:74:db:
++ 63:11:37:c1:a5:a0:96:4b:1e:8c:16:12:77:ae:94:
++ 34:7b:1e:7f:c2:66:00:e4:aa:83:ea:8a:90:ad:ce:
++ 36:44:4d:d1:51:e9:bc:1f:f3:6a:05:fd:c0:74:1f:
++ 25:19:40:51:6e:ea:82:51:40:df:9b:b9:08:2a:06:
++ 02:d5:23:1c:13:d6:e9:db:db:c6:b0:7a:cb:7b:27:
++ 9b:fb:e0:d5:46:24:ed:10:4b:63:4b:a5:05:8f:ba:
++ b8:1d:2b:a6:fa:91:e2:92:52:bd:ec:eb:67:97:6d:
++ 9a:2d:9f:81:32:05:67:32:fb:48:08:3f:d9:25:b8:
++ 04:25:2f
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ FB:2E:37:EE:E3:84:7A:27:2E:CD:19:35:B1:33:7C:FF:D4:44:42:B9
++ X509v3 Subject Key Identifier:
++ FB:2E:37:EE:E3:84:7A:27:2E:CD:19:35:B1:33:7C:FF:D4:44:42:B9
++ X509v3 Key Usage: critical
++ Digital Signature, Certificate Sign, CRL Sign
++ Signature Algorithm: sha256WithRSAEncryption
++ Signature Value:
++ 8d:89:6d:84:45:18:f1:4f:b3:a0:ef:68:a4:c0:1d:ac:30:bc:
++ 67:66:b0:9a:cd:b6:ab:22:19:66:d3:3b:41:b5:10:9d:10:ba:
++ 72:6e:29:24:20:1c:01:99:62:d3:96:e0:e2:fb:0c:42:d7:e1:
++ 5a:c4:96:4d:54:cd:8f:ca:43:53:fd:2a:b8:ea:f8:65:ca:01:
++ c2:ad:60:68:06:9f:39:1a:51:d9:e0:8d:26:f9:0b:4e:a5:53:
++ 25:7a:23:a4:1c:ce:08:1b:df:47:88:b2:ad:3e:e0:27:87:8b:
++ 49:8c:1f:a9:47:58:7b:96:f2:88:1d:18:ae:b3:d1:a6:0a:94:
++ fa:db:d3:e5:38:0a:6b:79:12:33:fb:4a:59:37:16:40:0e:bb:
++ de:f5:89:0c:f1:6c:d3:f7:51:6b:5e:35:f5:db:c0:26:ea:12:
++ 73:4e:a9:91:90:a6:17:c3:6c:2f:38:d4:a3:72:94:43:2c:62:
++ e1:4e:5c:32:3d:bd:4c:7d:19:47:a2:c3:49:e7:96:3f:8f:9a:
++ d3:3b:e4:11:d8:8b:03:dc:f6:b6:60:55:18:a6:81:51:f3:e1:
++ a8:15:6a:eb:e0:0b:f0:14:31:d6:b9:8c:45:3a:a8:10:d8:f0:
++ b9:27:eb:f7:cb:7a:ef:05:72:96:b5:c4:8f:96:73:c4:e8:56:
++ 73:9c:bc:69:51:63:bc:ef:67:1c:43:1a:5f:77:19:1f:18:f8:
++ 1c:25:29:f9:49:99:29:b6:92:3d:a2:83:37:b1:20:91:a8:9b:
++ 30:e9:6a:6c:b4:23:93:65:04:ab:11:f3:0e:1d:53:24:49:53:
++ 1d:a1:3f:9d:48:92:11:e2:7d:0d:4f:f5:d7:bd:a2:58:3e:78:
++ 9d:1e:1f:2b:fe:21:bb:1a:13:b6:b1:28:64:fd:b0:02:00:c7:
++ 6c:80:a2:bd:16:50:20:0f:72:81:5f:cc:94:ff:bb:99:e6:ba:
++ 90:cb:ea:f9:c6:0c:c2:ae:c5:19:ce:33:a1:6b:5c:bb:7e:7c:
++ 34:57:17:ad:f0:3f:ae:cd:ea:af:99:ec:2c:54:7e:8c:ce:2e:
++ 12:56:48:ef:17:3b:3f:4a:5e:60:d2:dc:74:36:bc:a5:43:63:
++ cb:0f:5b:a3:02:56:09:9e:24:2c:e1:86:81:8c:fe:ab:17:2c:
++ fa:c8:e2:32:1a:3a:ff:85:08:c9:83:9f:f2:4a:48:10:54:77:
++ 37:ed:a2:bc:40:be:e4:10:74:f7:e4:5b:bb:b9:f3:89:f9:8f:
++ 41:d8:c7:e4:50:90:35:80:3e:1c:b8:4d:90:d3:d4:f7:c3:b0:
++ a1:7e:84:ca:77:92:31:2c:b8:90:b1:82:7a:74:4e:9b:13:26:
++ b4:d5:50:66:54:78:ae:60
++-----BEGIN CERTIFICATE-----
++MIIFiTCCA3GgAwIBAgIQb77arXO9CEDii02+1PdbkTANBgkqhkiG9w0BAQsFADBO
++MQswCQYDVQQGEwJVUzEYMBYGA1UECgwPU1NMIENvcnBvcmF0aW9uMSUwIwYDVQQD
++DBxTU0wuY29tIFRMUyBSU0EgUm9vdCBDQSAyMDIyMB4XDTIyMDgyNTE2MzQyMloX
++DTQ2MDgxOTE2MzQyMVowTjELMAkGA1UEBhMCVVMxGDAWBgNVBAoMD1NTTCBDb3Jw
++b3JhdGlvbjElMCMGA1UEAwwcU1NMLmNvbSBUTFMgUlNBIFJvb3QgQ0EgMjAyMjCC
++AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANCkCXJPQIgSYT41I57u9nTP
++L3tYPc48DRAokC+X94xI2KDYJbFMsBFMF3NQ0CJKY7uB0ylu1bUJPiYYf7ISf5OY
++t6/wNr/y7hienDtSxUcZXXTzZGbVXcdotL8bHAajvI9AI7YexoS9UcQbOcGV0ins
++S657Lb85/bRi3pZ7QcacoOAGcvvwB5cJOYF0r/c0WRFXCsJbwST0MXMwgsadugL3
++PnxEX4MN8/HdIGkWCVDi1FW24IBydm5MR7d1VVm0U3TZlMZBrViKMWYPHqIbKUBO
++L9975hYsLfy/7PO0+r4Y9ptJ1O4Fbtk085zx7AGL0SDGD6C1vBdOSHtRwvzpXGk3
++R2azaPgVKPC506QVzFpPulJwoxJF3ca6TvvC0PeoUidtbnm1jPx7jMEWTO6Af77w
++dr5BUxIzrlo4QqvXDz5BjXYHMtWrifZOZ9mxQnUjbvPNQrL8VfVThxc7wDNY8VLS
+++YCk8OjwO4s4zKTGkH8PnP2L0aPP2oOnaclQNtVcBdIKQXTbYxE3waWglksejBYS
++d66UNHsef8JmAOSqg+qKkK3ONkRN0VHpvB/zagX9wHQfJRlAUW7qglFA35u5CCoG
++AtUjHBPW6dvbxrB6y3snm/vg1UYk7RBLY0ulBY+6uB0rpvqR4pJSvezrZ5dtmi2f
++gTIFZzL7SAg/2SW4BCUvAgMBAAGjYzBhMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0j
++BBgwFoAU+y437uOEeicuzRk1sTN8/9REQrkwHQYDVR0OBBYEFPsuN+7jhHonLs0Z
++NbEzfP/UREK5MA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQsFAAOCAgEAjYlt
++hEUY8U+zoO9opMAdrDC8Z2awms22qyIZZtM7QbUQnRC6cm4pJCAcAZli05bg4vsM
++QtfhWsSWTVTNj8pDU/0quOr4ZcoBwq1gaAafORpR2eCNJvkLTqVTJXojpBzOCBvf
++R4iyrT7gJ4eLSYwfqUdYe5byiB0YrrPRpgqU+tvT5TgKa3kSM/tKWTcWQA673vWJ
++DPFs0/dRa1419dvAJuoSc06pkZCmF8NsLzjUo3KUQyxi4U5cMj29TH0ZR6LDSeeW
++P4+a0zvkEdiLA9z2tmBVGKaBUfPhqBVq6+AL8BQx1rmMRTqoENjwuSfr98t67wVy
++lrXEj5ZzxOhWc5y8aVFjvO9nHEMaX3cZHxj4HCUp+UmZKbaSPaKDN7EgkaibMOlq
++bLQjk2UEqxHzDh1TJElTHaE/nUiSEeJ9DU/1172iWD54nR4fK/4huxoTtrEoZP2w
++AgDHbICivRZQIA9ygV/MlP+7mea6kMvq+cYMwq7FGc4zoWtcu358NFcXrfA/rs3q
++r5nsLFR+jM4uElZI7xc7P0peYNLcdDa8pUNjyw9bowJWCZ4kLOGGgYz+qxcs+sji
++Mho6/4UIyYOf8kpIEFR3N+2ivEC+5BB09+Rbu7nzifmPQdjH5FCQNYA+HLhNkNPU
++98OwoX6EyneSMSy4kLGCenROmxMmtNVQZlR4rmA=
++-----END CERTIFICATE-----
++
++# 3f63bb2814be174ec8b6439cf08d6d56f0b7c405883a5648a334424d6b3ec558
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 40:01:34:8c:c2:00:00:00:00:00:00:00:01:3c:f2:c6
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA CYBER Root CA
++ Validity
++ Not Before: Nov 22 06:54:29 2022 GMT
++ Not After : Nov 22 15:59:59 2047 GMT
++ Subject: C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA CYBER Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:c6:f8:ca:1e:d9:09:20:7e:1d:6c:4e:ce:8f:e3:
++ 47:33:44:9c:c7:c9:69:aa:3a:5b:78:ee:70:d2:92:
++ f8:04:b3:52:52:1d:67:72:28:a1:df:8b:5d:95:0a:
++ fe:ea:cd:ed:f7:29:ce:f0:6f:7f:ac:cd:3d:ef:b3:
++ 1c:45:6a:f7:28:90:f1:61:57:c5:0c:c4:a3:50:5d:
++ de:d4:b5:cb:19:ca:80:b9:75:ce:29:ce:d2:85:22:
++ ec:02:63:cc:44:30:20:da:ea:91:5b:56:e6:1d:1c:
++ d5:9d:66:c7:3f:df:86:ca:4b:53:c4:d9:8d:b2:1d:
++ ea:f8:dc:27:53:a3:47:e1:61:cc:7d:b5:b0:f8:ee:
++ 73:91:c5:ce:73:6f:ce:ee:10:1f:1a:06:cf:e9:27:
++ 60:c5:4f:19:e4:eb:ce:22:26:45:d7:60:99:dd:ce:
++ 4f:37:e0:7f:e7:63:ad:b0:b8:59:b8:d0:06:68:35:
++ 60:d3:36:ae:71:43:04:f1:69:65:78:7c:f3:1f:f3:
++ ca:28:9f:5a:20:95:66:b4:cd:b7:ee:8f:78:a4:45:
++ 18:e9:26:2f:8d:9b:29:28:b1:a4:b7:3a:6d:b9:d4:
++ 1c:38:72:45:58:b1:5e:eb:f0:28:9b:b7:82:ca:fd:
++ cf:d6:33:0f:9f:fb:97:9e:b1:1c:9c:9e:ea:5f:5e:
++ db:aa:dd:54:e9:30:21:28:6d:8e:79:f3:75:92:8c:
++ 26:fe:dc:c5:f6:c3:b0:df:44:59:43:a3:b6:03:28:
++ f6:08:30:aa:0d:33:e1:ef:9c:a9:07:22:e3:59:5b:
++ 40:8f:da:88:b7:69:08:a8:b7:23:2e:44:09:59:37:
++ 5b:c7:e3:17:f2:22:eb:6e:39:52:c5:de:54:a7:98:
++ c9:4b:20:95:dc:46:89:5f:b4:12:f9:85:29:8e:eb:
++ c8:27:15:20:c0:4b:d4:cc:7c:0c:6c:34:0c:26:9b:
++ 26:31:a6:3c:a7:f6:d9:d0:4b:a2:64:ff:3b:99:41:
++ 72:c1:e0:70:97:f1:24:bb:2b:c4:74:22:b1:ac:6b:
++ 22:32:24:d3:78:2a:c0:c0:a1:2f:f1:52:05:c9:3f:
++ ef:76:66:e2:45:d8:0d:3d:ad:95:c8:c7:89:26:c8:
++ 0f:ae:a7:03:2e:fb:c1:5f:fa:20:e1:70:ad:b0:65:
++ 20:37:33:60:b0:d5:af:d7:0c:1c:c2:90:70:d7:4a:
++ 18:bc:7e:01:b0:b0:eb:15:1e:44:06:cd:a4:4f:e8:
++ 0c:d1:c3:20:10:e1:54:65:9e:b6:51:d0:1a:76:6b:
++ 42:5a:58:76:34:ea:b7:37:19:ae:2e:75:f9:96:e5:
++ c1:59:f7:94:57:29:25:8d:3a:4c:ab:4d:9a:41:d0:
++ 5f:26:03
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ 9D:85:61:14:7C:C1:62:6F:97:68:E4:4F:37:40:E1:AD:E0:0D:56:37
++ X509v3 Subject Key Identifier:
++ 9D:85:61:14:7C:C1:62:6F:97:68:E4:4F:37:40:E1:AD:E0:0D:56:37
++ Signature Algorithm: sha384WithRSAEncryption
++ Signature Value:
++ 64:8f:7a:c4:62:0e:b5:88:cc:b8:c7:86:0e:a1:4a:16:cd:70:
++ 0b:b7:a7:85:0b:b3:76:b6:0f:a7:ff:08:8b:0b:25:cf:a8:d4:
++ 83:75:2a:b8:96:88:b6:fb:df:2d:2d:b4:69:53:21:35:57:d6:
++ 89:4d:73:bf:69:8f:70:a3:61:cc:9a:db:1e:9a:e0:20:f8:6c:
++ bb:9b:22:9d:5d:84:31:9a:2c:8a:dd:6a:a1:d7:28:69:ca:fe:
++ 76:55:7a:46:67:eb:cc:43:88:16:a2:03:d6:b9:17:f8:19:6c:
++ 6d:23:02:7f:f1:5f:d0:0a:29:23:3b:d1:aa:0a:ed:a9:17:26:
++ 54:0a:4d:c2:a5:4d:f8:c5:fd:b8:81:cf:2b:2c:78:a3:67:4c:
++ a9:07:9a:f3:df:5e:fb:7c:f5:89:cd:74:97:61:10:6a:07:2b:
++ 81:5a:d2:8e:b7:e7:20:d1:20:6e:24:a8:84:27:a1:57:ac:aa:
++ 55:58:2f:dc:d9:ca:fa:68:04:9e:ed:44:24:f9:74:40:3b:23:
++ 33:ab:83:5a:18:26:42:b6:6d:54:b5:16:60:30:6c:b1:a0:f8:
++ b8:41:a0:5d:49:49:d2:65:05:3a:ea:fe:9d:61:bc:86:d9:bf:
++ de:d3:ba:3a:b1:7f:7e:92:34:8e:c9:00:6e:dc:98:bd:dc:ec:
++ 80:05:ad:02:3d:df:65:ed:0b:03:f7:f7:16:84:04:31:ba:93:
++ 94:d8:f2:12:f8:8a:e3:bf:42:af:a7:d4:cd:11:17:16:c8:42:
++ 1d:14:a8:42:f6:d2:40:86:a0:4f:23:ca:96:45:56:60:06:cd:
++ b7:55:01:a6:01:94:65:fe:6e:05:09:ba:b4:a4:aa:e2:ef:58:
++ be:bd:27:56:d8:ef:73:71:5b:44:33:f2:9a:72:ea:b0:5e:3e:
++ 6e:a9:52:5b:ec:70:6d:b5:87:8f:37:5e:3c:8c:9c:ce:e4:f0:
++ ce:0c:67:41:cc:ce:f6:80:ab:4e:cc:4c:56:f5:c1:61:59:93:
++ b4:3e:a6:da:b8:37:12:9f:2a:32:e3:8b:b8:21:ec:c3:2b:65:
++ 0c:ef:22:de:88:29:3b:4c:d7:fa:fe:b7:e1:47:be:9c:3e:3e:
++ 83:fb:51:5d:f5:68:f7:2e:21:85:dc:bf:f1:5a:e2:7c:d7:c5:
++ e4:83:c1:6a:eb:ba:80:5a:de:5c:2d:70:76:f8:c8:e5:87:87:
++ ca:a0:9d:a1:e5:22:12:27:0f:44:3d:1d:6c:ea:d4:c2:8b:2f:
++ 6f:79:ab:7f:50:a6:c4:19:a7:a1:7a:b7:96:f9:c1:1f:62:5a:
++ a2:43:07:40:5e:26:c6:ac:ed:ae:70:16:c5:aa:ca:72:8a:4d:
++ b0:cf:01:8b:03:3f:6e:d7
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# c0076b9ef0531fb1a656d67c4ebe97cd5dbaa41ef44598acc2489878c92d8711
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 36:74:e1:4d:7c:65:13:c9:ac:83:55:25:a0:3e:52:7e:2f:50:68:c7
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia TLS ECC Root CA
++ Validity
++ Not Before: May 15 05:41:56 2024 GMT
++ Not After : May 15 05:41:55 2044 GMT
++ Subject: C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia TLS ECC Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:b8:7f:a5:5b:3f:01:3e:7d:f0:88:6d:ae:29:98:
++ e1:9b:5c:53:99:db:f7:08:ff:d5:6a:e0:8e:cb:44:
++ a6:f0:c1:8c:bd:4f:d4:ce:d4:88:53:e8:5e:57:d7:
++ 4e:be:2c:3f:f3:12:a7:00:e9:82:e3:2a:5b:32:7c:
++ 4b:9b:14:29:9e:f8:2d:83:b5:eb:8e:31:49:3d:26:
++ 61:e9:1d:72:8b:89:b6:0a:bb:9c:33:35:0f:da:ec:
++ de:a9:4a:1f:c9:33:b1
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 2C:85:53:BB:B1:43:CD:32:EA:9E:A3:87:FE:A2:98:A8:A6:93:E9:10
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Signature Algorithm: ecdsa-with-SHA384
++ Signature Value:
++ 30:65:02:30:54:47:d7:c3:2d:61:86:48:f4:79:5a:55:0d:35:
++ 2f:5f:0d:f6:67:6c:77:40:1a:46:e7:f8:68:5b:4e:27:1d:b8:
++ 98:7d:7f:93:bf:08:4d:c4:da:45:30:a1:0f:5e:4a:78:02:31:
++ 00:a3:91:87:f2:11:33:83:c3:c1:8a:91:3a:4c:2b:50:b1:bd:
++ 22:94:5d:35:89:73:83:c5:9b:19:fe:b4:a1:e9:d4:a1:66:b6:
++ 01:a5:36:f9:d8:68:61:28:b7:74:e1:a2:31
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 06c08d7dafd876971eb1124fe67f847ec0c7a158d3ea53cbe940e2ea9791f4c3
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 1c:18:d8:cf:e5:53:3f:22:35:46:53:54:24:3c:6c:47:d1:5c:4a:9c
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia TLS RSA Root CA
++ Validity
++ Not Before: May 15 05:41:57 2024 GMT
++ Not After : May 15 05:41:56 2044 GMT
++ Subject: C=CN, O=TrustAsia Technologies, Inc., CN=TrustAsia TLS RSA Root CA
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:c3:16:b8:1b:6a:a4:44:73:e5:d6:4e:f4:b9:cf:
++ 5b:0b:c1:d1:9a:81:f5:63:b0:8f:43:c1:bb:08:5a:
++ 1a:7a:e1:07:76:26:1f:8f:69:56:be:fe:36:60:d0:
++ 0c:83:cd:94:ea:e7:c5:2d:5c:2f:05:16:02:9e:0a:
++ a8:2f:e5:60:26:54:96:f8:98:40:1d:ac:ae:9d:74:
++ 67:2f:54:fb:94:63:98:e3:26:4a:83:c6:95:b6:09:
++ 43:50:cd:0d:7d:de:44:0e:60:12:4f:5b:35:bd:bf:
++ 99:38:6d:7d:6c:da:e2:68:73:1f:f9:31:a5:19:10:
++ 73:05:2a:c3:32:19:85:ea:34:aa:dd:42:1e:30:8d:
++ 3f:9e:b5:1e:61:d5:6f:bd:00:72:72:ad:12:3f:aa:
++ a6:49:73:f2:86:15:95:0c:10:5f:51:64:ce:ff:77:
++ b8:c9:6d:ac:e5:d5:98:f1:99:2e:6c:e3:c9:44:f9:
++ b5:43:27:08:4d:f6:7e:de:44:79:bb:b2:8c:1c:da:
++ d3:4b:6c:2e:d6:c3:78:b7:4c:d5:a4:e4:da:dc:8a:
++ 8e:0e:ff:0f:c3:a6:60:26:28:cf:36:bf:fa:57:0a:
++ ec:5b:3f:e9:30:16:7b:c4:db:c4:d4:64:a0:30:fb:
++ e5:fd:1d:71:92:dd:29:8f:41:58:de:00:ad:3a:fd:
++ 3d:7c:1a:a8:b1:17:f0:4e:34:78:58:25:d6:85:21:
++ eb:79:1d:d0:dc:ab:cf:62:3c:b0:c7:97:8b:d6:d0:
++ 9f:d3:fe:3c:de:c5:e3:fc:3a:83:70:84:21:1d:09:
++ c2:a1:fc:bb:28:21:65:53:60:7a:90:6d:96:38:5b:
++ ff:f1:d7:7a:5b:6d:d3:c9:70:49:4a:ba:1d:3a:d0:
++ 50:da:32:20:19:e4:8b:3f:eb:d5:16:26:37:3c:fb:
++ 75:9e:b0:07:70:b8:14:60:77:dc:f6:0f:5c:52:0a:
++ bc:5d:6d:8d:51:0a:da:c5:18:c8:9b:6d:dc:b0:83:
++ b3:7f:a3:4e:78:4c:98:25:ab:f2:7e:2e:20:5e:82:
++ 15:a6:d6:d8:8f:ac:e5:cd:32:86:c8:f9:e4:da:89:
++ e2:3b:3e:93:c5:13:6a:ff:c7:f7:18:fc:67:b5:ef:
++ 18:2c:54:ab:40:d3:6c:4d:ed:c5:c8:b7:38:4f:64:
++ c4:94:4c:4f:a0:cd:ae:a5:c6:27:25:75:27:6d:c6:
++ da:9c:8e:b0:05:99:d5:28:11:c5:21:d4:b8:fc:c7:
++ 96:ab:4a:64:59:61:6b:13:fc:4b:cc:92:a6:0f:a4:
++ 51:bf:0e:58:90:d9:82:83:39:a6:5f:b3:fa:6e:92:
++ b3:cd:33:0e:85:a8:f1:29:d3:ab:59:ad:d6:db:de:
++ d4:2b:81
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ B8:07:91:79:5C:06:F4:46:FD:7B:59:CA:5A:26:91:A7:45:2B:F8:53
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Signature Algorithm: sha384WithRSAEncryption
++ Signature Value:
++ 21:9b:6a:05:20:5d:18:16:a7:12:a4:f7:47:3f:cd:ca:3b:ae:
++ 8e:c0:82:ce:dc:48:25:78:17:6c:e0:e0:70:c4:d6:96:d9:d9:
++ f6:bf:7a:9c:13:bb:53:95:92:ff:cf:92:e0:f3:c5:27:35:57:
++ a8:3b:a2:19:eb:f8:8a:a3:04:de:69:8b:e4:3c:3c:bd:e5:af:
++ d0:12:1b:e5:89:6b:73:9b:6f:25:02:4b:90:82:af:40:c2:ad:
++ ba:9a:60:24:5a:81:4d:05:18:a3:e2:33:79:7a:0b:1f:93:ed:
++ ec:39:4a:f5:13:04:ec:8d:74:9d:81:0a:a8:6f:e8:76:fe:8b:
++ 4f:2b:69:12:86:0a:34:36:dd:82:9b:6f:4f:e0:73:dd:49:7f:
++ 28:3e:c9:3b:a3:57:04:d8:93:d9:3c:29:db:12:10:68:e1:c4:
++ 89:b8:06:20:e7:1b:7a:bc:b1:93:61:9a:19:40:11:b5:6a:85:
++ 57:01:f1:b6:5a:2d:26:73:27:96:f9:b9:3f:5b:d0:88:9d:e4:
++ a0:fd:ba:4e:95:09:83:7f:77:dc:51:05:94:9d:20:71:76:b1:
++ ec:fa:89:b5:9c:2e:85:f1:b9:5b:24:5a:b1:09:ab:da:ca:1a:
++ 07:cd:86:df:db:69:db:b4:48:18:00:2d:bc:a2:c4:89:45:23:
++ a5:0e:e1:44:65:3e:8a:c1:6a:30:1d:e2:60:f8:3a:aa:87:09:
++ 42:b9:81:92:dc:25:88:98:89:f1:7c:35:f1:62:ca:ee:79:f8:
++ 19:2f:fe:5f:f8:db:87:ce:ea:a8:0f:0c:a6:e8:0b:a0:3c:e0:
++ 6b:94:98:9c:7f:ad:06:e6:1c:ea:42:10:5f:e2:26:15:3c:37:
++ 39:f7:d7:bc:ee:b8:e5:ef:03:ee:bd:22:fb:28:86:34:58:c4:
++ 5a:7f:61:a2:78:0f:5e:f3:ca:9d:bc:1b:3c:a7:c8:2d:f6:a7:
++ 22:11:ca:03:d8:e7:67:0a:8a:0e:cb:35:8e:34:39:d8:c8:ea:
++ 8d:9f:64:e0:37:b0:6c:d7:c5:8f:c1:90:61:26:db:24:8c:1e:
++ 4a:c0:88:df:35:90:ce:3f:02:f4:64:61:de:c7:c8:07:95:de:
++ 32:18:3a:8f:a2:42:40:24:e5:d6:33:5d:7c:ae:ef:b1:4d:4f:
++ d4:57:90:35:6a:dc:ae:04:97:49:89:34:97:2e:30:04:e7:98:
++ f7:db:0b:01:90:c1:1f:0a:3f:f8:c2:fe:4e:fa:db:9a:73:73:
++ 16:bc:05:b8:79:d8:59:af:06:e7:3f:67:38:39:b1:7c:ab:94:
++ e0:29:14:a6:28:f2:df:6d:e2:9a:db:54:43:f8:47:58:a3:5d:
++ 74:15:9c:c1:ab:b0:c7:34
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 193144f431e0fddb740717d4de926a571133884b4360d30e272913cbe660ce41
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 43:fa:0c:5f:4e:1b:80:18:44:ef:d1:b4:4f:35:1f:44:f4:80:ed:cb
++ Signature Algorithm: sha256WithRSAEncryption
++ Issuer: C=CH, O=SwissSign AG, CN=SwissSign RSA TLS Root CA 2022 - 1
++ Validity
++ Not Before: Jun 8 11:08:22 2022 GMT
++ Not After : Jun 8 11:08:22 2047 GMT
++ Subject: C=CH, O=SwissSign AG, CN=SwissSign RSA TLS Root CA 2022 - 1
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:cb:2a:68:e2:0b:c3:57:bc:35:63:bc:70:a5:3b:
++ f3:8c:3c:4e:57:96:6e:c3:4e:36:a4:f6:02:ca:1e:
++ aa:ae:b8:de:a8:af:1d:76:da:ba:35:d0:91:70:07:
++ df:b3:06:f2:8a:f2:2e:55:51:7b:bb:2c:24:cb:7f:
++ 92:26:80:a3:b4:94:f6:82:a1:a4:e8:fa:75:1d:59:
++ f3:07:6a:61:64:e2:c6:8c:95:af:a3:bb:8e:6f:56:
++ cf:71:cc:5e:81:61:0d:6d:f2:ab:02:2e:a4:97:e5:
++ 71:fc:8a:b0:91:20:5b:9c:74:52:6d:ae:15:27:59:
++ 78:f2:09:ca:65:0e:7f:cb:f4:eb:e7:dc:a9:4c:77:
++ f6:2b:16:04:95:ae:9c:71:a5:3f:2a:da:41:42:e7:
++ 3c:84:10:f4:e1:3d:8c:6b:e2:2b:91:47:55:4f:b8:
++ 56:be:45:de:22:51:4d:4e:28:d9:5f:19:41:06:8f:
++ 0e:4d:06:e0:70:40:23:01:6a:e4:cb:13:9b:73:ac:
++ 4d:14:48:92:2d:fe:6d:a7:f8:87:6b:79:75:e1:be:
++ 10:b1:aa:88:40:59:54:d7:cf:c4:d0:9b:44:b3:38:
++ 69:64:8c:81:d1:23:7e:aa:39:3c:3b:0f:9f:4a:7b:
++ 82:ca:6b:6f:ca:22:3e:31:d0:b0:d0:2a:1c:92:8a:
++ 8f:d8:19:9c:47:e4:3e:0c:b9:c2:cd:be:41:0c:f8:
++ a4:47:05:db:c1:17:30:38:3a:69:dc:cd:c3:69:23:
++ fd:9a:0f:02:ce:10:6a:ce:ca:f8:b9:29:a3:36:89:
++ 86:ae:0b:c0:4f:63:b9:06:59:49:5e:0e:c1:69:b3:
++ 0a:f3:77:7e:2e:9d:8c:b3:27:98:d2:99:8d:25:a7:
++ 1f:86:b3:a6:54:70:38:fc:7d:5d:e8:4f:83:0c:d1:
++ 93:e5:12:e4:54:da:3e:f2:ad:3a:de:3e:3c:45:f0:
++ 28:0f:06:b9:e1:db:97:7b:99:45:9e:dd:fe:95:59:
++ 04:2f:75:3f:d3:ae:89:99:86:ac:14:b4:a8:84:fa:
++ c8:5d:3b:1b:58:93:c1:17:94:55:c8:0b:e3:82:79:
++ 84:9f:f3:00:84:34:ee:dc:31:d5:8f:f2:fa:4f:96:
++ 4c:06:aa:78:fb:de:64:a2:23:cd:1f:3e:c5:8c:bc:
++ 37:54:0e:bb:5a:72:55:ef:c8:5b:b5:72:f8:78:df:
++ 37:20:4c:57:91:73:92:73:ac:18:77:43:82:20:69:
++ ec:e9:ac:29:46:e5:0b:4e:f8:37:73:89:96:8a:1c:
++ 6d:bd:ef:be:d8:b6:f4:ca:c0:fd:47:f0:ae:0b:58:
++ 20:c5:c8:1d:36:ae:97:8d:50:83:26:24:29:f7:9d:
++ 3b:0f:05
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Authority Key Identifier:
++ 6F:8E:62:8B:93:43:B0:E1:40:F6:A7:C3:FD:F1:0F:B8:0F:15:38:A5
++ X509v3 Subject Key Identifier:
++ 6F:8E:62:8B:93:43:B0:E1:40:F6:A7:C3:FD:F1:0F:B8:0F:15:38:A5
++ Signature Algorithm: sha256WithRSAEncryption
++ Signature Value:
++ ac:2c:29:41:7d:fa:5c:f5:1a:95:18:bf:2c:a9:8a:a9:24:54:
++ 75:f5:b8:40:ab:cb:a8:24:51:2b:18:3f:63:a9:ae:98:56:2b:
++ 05:43:22:a3:b7:d7:46:9e:c0:2a:12:3d:8e:96:96:40:df:0c:
++ 33:8b:6b:37:91:3a:95:bb:39:29:6d:c0:02:6c:8a:94:0b:07:
++ 02:4d:18:3e:fb:fb:7b:f5:76:3d:9b:f6:5e:30:06:58:33:1e:
++ aa:78:d5:e6:54:04:3a:b2:82:09:8d:ce:16:33:59:45:28:f1:
++ a5:a3:97:0e:43:23:fd:0b:20:80:90:ff:e3:26:cf:b8:64:91:
++ e5:05:8f:13:a0:76:0d:d7:37:0c:10:88:96:f4:3e:be:95:bd:
++ f1:c3:7d:f0:a3:c3:79:47:0b:5c:92:15:63:ed:52:75:8a:e7:
++ 46:69:cb:51:55:0b:2a:4c:f5:f2:64:4f:a9:5c:ff:67:32:8e:
++ 55:2d:32:82:1c:80:2f:6a:91:f8:cb:bc:7e:18:a2:26:a8:2e:
++ a3:53:28:87:ed:57:e5:65:7a:4e:00:4a:5b:4e:53:c9:62:36:
++ bd:c2:8e:5b:eb:cc:6e:27:81:18:59:8b:44:63:9f:d5:0c:65:
++ f4:29:65:7f:91:2c:e5:7f:7e:e8:89:cf:8f:20:cb:6d:07:42:
++ 11:51:26:32:8a:2e:3a:47:13:b8:8d:bd:47:0d:09:f0:16:a4:
++ ed:96:86:2e:19:d8:be:8c:3a:e8:45:2e:11:ba:ae:5a:e7:b9:
++ bf:b1:cc:8f:e0:a0:ff:b8:b3:d1:85:7b:79:66:a3:39:b5:3b:
++ 66:d8:40:be:cf:b7:67:8b:48:c9:19:25:55:fc:bd:8d:cf:5e:
++ da:4e:a6:f2:69:ce:fd:7f:4c:77:d0:c1:46:35:98:5c:23:9b:
++ 02:45:43:94:5a:dd:bc:47:ad:22:fe:ba:5e:2f:91:29:29:86:
++ 7b:21:de:6e:64:b7:cb:0d:8f:37:5b:a3:08:6a:eb:f4:dd:02:
++ 8f:50:03:02:b1:b8:37:68:96:50:eb:b8:5f:d4:28:8a:a5:22:
++ 0c:8a:84:f0:59:2e:d5:37:d1:61:e5:42:73:58:2a:81:f7:76:
++ db:e2:e2:4d:0d:5f:f6:b7:be:05:b4:ae:4e:0d:de:16:3d:03:
++ 81:b3:26:5e:4b:b8:4b:00:cf:ff:8c:17:ba:6c:60:2d:27:87:
++ 37:24:e6:7a:60:2f:b5:d3:83:04:aa:4f:43:75:a2:c1:83:b2:
++ 27:98:2b:b1:0e:80:ba:c0:85:5e:42:b9:df:b1:60:91:d3:eb:
++ 18:7e:70:78:ae:76:83:be:71:5a:d0:90:e3:ca:c1:16:25:67:
++ 4a:f0:b6:7b:ba:e1:9c:d9
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 0552e6f83fdf65e8fa9670e666df28a4e21340b510cbe52566f97c4fb94b2bd1
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 73:3b:30:04:48:5b:d9:4d:78:2e:73:4b:c9:a1:dc:66
++ Signature Algorithm: sha512WithRSAEncryption
++ Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST BR Root CA 2 2023
++ Validity
++ Not Before: May 9 08:56:31 2023 GMT
++ Not After : May 9 08:56:30 2038 GMT
++ Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST BR Root CA 2 2023
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:ae:ff:09:59:91:80:0a:4a:68:e6:24:3f:b8:a7:
++ e4:c8:3a:0a:3a:16:cd:c9:23:61:a0:93:71:f2:ab:
++ 8b:73:8f:a0:67:65:60:d2:54:6b:63:51:6f:49:33:
++ e0:72:07:13:7d:38:cd:06:92:07:29:52:6b:4e:77:
++ 6c:04:d3:95:fa:dd:4c:8c:d9:5d:c1:61:7d:4b:e7:
++ 28:b3:44:81:7b:51:af:dd:33:b1:68:7c:d6:4e:4c:
++ fe:2b:68:b9:ca:66:69:c4:ec:5e:57:7f:f7:0d:c7:
++ 9c:36:36:e5:07:60:ac:c0:4c:ea:08:6c:ef:06:7c:
++ 4f:5b:28:7a:08:fc:93:5d:9b:f6:9c:b4:8b:86:ba:
++ 21:b9:f4:f0:e8:59:5a:28:a1:34:84:1a:25:91:b6:
++ b5:8f:ef:b2:f9:80:fa:f9:3d:3c:11:72:d8:e3:2f:
++ 86:76:c5:79:2c:c1:a9:90:93:46:98:67:cb:83:6a:
++ a0:50:23:a7:3b:f6:81:39:e0:ed:f0:b9:bf:65:f1:
++ d8:cb:7a:fb:ef:73:03:ce:00:f4:7d:d7:e0:5d:3b:
++ 66:b8:dc:8e:ba:83:cb:87:76:03:fc:25:d9:e7:23:
++ 6f:06:fd:67:f3:e0:ff:84:bc:47:bf:b5:16:18:46:
++ 69:14:cc:05:f7:db:d3:49:ac:6b:cc:ab:e4:b5:0b:
++ 43:24:5e:4b:6b:4d:67:df:d6:b5:3e:4f:78:1f:94:
++ 71:24:ea:de:70:fc:f1:93:fe:9e:93:5a:e4:94:5a:
++ 97:54:0c:35:7b:5f:6c:ee:00:1f:24:ec:03:ba:02:
++ f5:76:f4:9f:d4:9a:ed:85:2c:38:22:2f:c7:d8:2f:
++ 76:11:4f:fd:6c:5c:e8:f5:8e:27:87:7f:19:4a:21:
++ 47:90:1d:79:8d:1c:5b:f8:cf:4a:85:e4:ed:b3:5b:
++ 8d:be:c4:64:28:5d:41:c4:6e:ac:38:5a:4f:23:74:
++ 74:a9:12:c3:f6:d2:b9:11:15:33:07:91:d8:3b:37:
++ 3a:63:30:06:d1:c5:22:36:28:62:23:10:e0:46:cc:
++ 97:ac:d6:2b:5d:64:24:d5:ee:1c:0e:de:fb:08:5a:
++ 75:2a:f6:63:6d:ce:0b:42:be:d1:ba:70:1c:9c:21:
++ e5:0f:31:69:17:d7:fc:0a:b4:de:ed:80:9c:cb:92:
++ b4:8b:f5:de:59:a2:58:09:a5:63:47:0b:e1:41:32:
++ 34:41:d9:9a:b1:d9:a8:b0:1b:5a:de:0d:0d:f4:e2:
++ b2:5d:35:80:b9:81:d4:84:69:91:02:cb:75:d0:8d:
++ c5:b5:3d:09:91:09:8f:14:a1:14:74:79:3e:d6:c9:
++ 15:1d:a4:59:59:22:dc:f6:8a:45:3d:3c:12:d6:3e:
++ 5d:32:2f
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ 67:90:F0:D6:DE:B5:18:D5:46:29:7E:5C:AB:F8:9E:08:BC:64:95:10
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 CRL Distribution Points:
++ Full Name:
++ URI:http://crl.d-trust.net/crl/d-trust_br_root_ca_2_2023.crl
++
++ Signature Algorithm: sha512WithRSAEncryption
++ Signature Value:
++ 34:f7:b3:77:53:db:30:16:b9:2d:a5:21:f1:40:21:75:eb:eb:
++ 48:16:81:3d:73:e0:9e:27:2a:eb:77:a9:13:a4:6a:0a:5a:5a:
++ 14:33:3d:68:1f:81:ae:69:fd:8c:9f:65:6c:34:42:d9:2d:d0:
++ 7f:78:16:b1:3a:ac:23:31:ad:5e:7f:ae:e7:ae:2b:fa:ba:fc:
++ 3c:97:95:40:93:5f:c3:2d:03:a3:ed:a4:6f:53:d7:fa:40:0e:
++ 30:f5:00:20:2c:00:4c:8c:3b:b4:a3:1f:b6:bf:91:32:ab:af:
++ 92:98:d3:16:e6:d4:d1:54:5c:43:5b:2e:ae:ef:57:2a:a8:b4:
++ 6f:a4:ef:0d:56:14:da:21:ab:20:76:9e:03:fc:26:b8:9e:3f:
++ 3e:03:26:e6:4c:db:9d:5f:42:84:3d:45:03:03:1c:59:88:ca:
++ dc:2e:61:24:5a:a4:ea:27:0b:73:12:be:52:b3:0a:cf:32:17:
++ e2:1e:87:1a:16:95:48:6d:5a:e0:d0:cf:09:92:26:66:91:d8:
++ a3:61:0e:aa:81:81:7f:e8:52:82:d1:42:e7:e0:1d:18:fa:a4:
++ 85:36:e7:86:e0:0d:eb:bc:d4:c9:d6:3c:43:f1:5d:49:6e:7e:
++ 81:9b:69:b5:89:62:8f:88:52:d8:d7:fe:27:c1:23:c5:cb:2b:
++ 02:bb:b1:5f:fe:fb:43:85:03:46:be:5d:c6:ca:21:26:ff:d7:
++ 02:9e:74:4a:dc:f8:13:15:b1:81:57:36:cb:65:5c:d1:1d:31:
++ 77:e9:25:c3:c3:b2:32:37:d5:f1:98:09:e4:6d:63:80:08:ab:
++ 06:92:81:d4:e9:70:8f:a7:3f:b2:ed:86:8c:82:6a:35:c8:42:
++ 5a:82:d1:52:1a:45:0f:15:a5:00:f0:94:7b:65:27:57:39:43:
++ cf:7c:7f:e6:bd:35:b3:7b:f1:19:4c:de:3a:96:cf:e9:76:ee:
++ 03:e7:c2:43:52:3c:6a:81:e8:c1:5a:80:bd:11:5d:93:6b:fb:
++ c7:e6:64:3f:bb:69:1c:e9:dd:25:8b:af:74:c9:54:40:ca:cb:
++ 93:13:0a:ed:fb:66:92:11:ca:f5:c0:fa:d8:83:55:03:7c:d3:
++ c5:22:46:75:70:6b:79:48:06:2a:82:9a:bf:e6:eb:16:0e:22:
++ 45:01:bc:dd:36:94:34:a9:35:26:8a:d7:97:b9:ee:08:72:bf:
++ 34:92:70:83:80:ab:38:aa:59:68:dd:40:a4:18:90:b2:f3:d5:
++ 03:ca:26:ca:ef:d5:c7:e0:8f:53:8e:f0:00:e3:a8:ed:9f:f9:
++ ad:77:e0:2b:63:4f:9e:c3:ee:37:bb:78:09:84:9e:b9:6e:fb:
++ 29:99:90:e8:80:d3:9f:24
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 8e8221b2e7d4007836a1672f0dcc299c33bc07d316f132fa1a206d587150f1ce
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 69:26:09:7e:80:4b:4c:a0:a7:8c:78:62:53:5f:5a:6f
++ Signature Algorithm: sha512WithRSAEncryption
++ Issuer: C=DE, O=D-Trust GmbH, CN=D-TRUST EV Root CA 2 2023
++ Validity
++ Not Before: May 9 09:10:33 2023 GMT
++ Not After : May 9 09:10:32 2038 GMT
++ Subject: C=DE, O=D-Trust GmbH, CN=D-TRUST EV Root CA 2 2023
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:d8:8e:a3:89:80:0b:b2:57:52:dc:a9:53:4c:37:
++ b9:7f:63:17:13:ef:a7:5b:23:5b:69:75:b0:99:0a:
++ 17:c1:8b:c4:db:a8:e0:cc:31:ba:c2:f2:cd:5d:e9:
++ b7:f8:1d:af:6a:c4:95:87:d7:47:c9:95:d8:82:04:
++ 50:3d:81:08:ff:e4:3d:b3:b1:d6:c5:b2:fd:88:09:
++ db:9c:84:ec:25:17:14:87:7f:30:78:9b:6a:58:c9:
++ b6:73:28:3c:34:f7:99:f7:7f:d3:a6:f8:1c:45:7c:
++ ad:2c:8c:94:3f:d8:67:10:53:7e:22:cd:4e:25:51:
++ f0:25:24:35:11:5e:10:c6:ec:87:66:89:81:68:ba:
++ cc:2b:9d:47:73:1f:bd:cd:91:a4:72:6a:9c:a2:1b:
++ 18:a0:6f:ec:50:f4:7d:40:c2:a8:30:cf:bd:73:c8:
++ 13:2b:10:13:1e:8b:9a:a8:3a:94:73:d3:18:69:0a:
++ 4a:ff:c1:01:03:ff:79:7f:b5:48:7f:7b:ee:e8:29:
++ 6f:36:4c:95:61:86:d8:f9:a2:73:8a:ee:ae:2f:96:
++ ee:68:cd:3d:4d:28:42:f9:45:2b:32:1b:46:55:16:
++ 6a:a6:4b:29:f9:bb:95:56:bf:46:1d:ec:1d:93:1d:
++ c0:65:b2:1f:a1:43:ae:56:9e:a0:b1:8f:6b:12:b7:
++ 60:6d:78:0b:ca:8a:5c:ed:1e:96:0e:83:a6:48:95:
++ 8d:3b:a3:21:c4:ae:58:c6:00:b2:84:b4:23:a4:96:
++ 86:35:b8:d8:9e:d8:ac:34:49:98:63:95:c5:cb:6d:
++ 48:47:e2:f2:2e:18:1e:d0:31:ab:dd:74:ec:f9:dc:
++ 8c:b8:1c:8e:68:23:ba:d0:f3:50:dc:cf:65:8f:73:
++ 3a:32:c7:7c:fe:ca:82:22:4f:be:8e:62:47:66:e5:
++ cd:87:e2:e8:d5:0f:18:9f:e5:04:72:4b:46:3c:10:
++ f2:44:c2:64:56:71:4e:75:e8:9c:c9:26:74:c5:7d:
++ 59:d1:0a:5b:0f:6d:fe:9e:75:1c:18:c6:1a:3a:7c:
++ d8:0d:04:cc:cd:b7:45:65:7a:b1:8f:b8:ae:84:48:
++ 3e:b3:7a:4d:a8:03:e2:e2:7e:01:16:59:68:18:43:
++ 33:b0:d2:dc:b0:1a:43:35:ee:a5:da:a9:46:5c:ae:
++ 86:81:41:01:4a:74:26:ec:9f:06:bf:c2:05:37:64:
++ 75:78:29:68:fd:c5:f5:eb:fe:47:f9:e4:85:b0:e1:
++ 7b:31:9d:a6:7f:72:a3:b9:c4:2c:2e:cc:99:57:0e:
++ 21:0c:45:01:94:65:eb:65:09:c6:63:22:0b:33:49:
++ 92:48:3c:fc:cd:ce:b0:3e:8e:9e:8b:f8:fe:49:c5:
++ 35:72:47
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Subject Key Identifier:
++ AA:FC:91:10:1B:87:91:5F:16:B9:BF:4F:4B:91:5E:00:1C:B1:32:80
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 CRL Distribution Points:
++ Full Name:
++ URI:http://crl.d-trust.net/crl/d-trust_ev_root_ca_2_2023.crl
++
++ Signature Algorithm: sha512WithRSAEncryption
++ Signature Value:
++ 93:cb:a5:1f:99:11:ec:9a:0d:5f:2c:15:93:c6:3f:be:10:8d:
++ 78:42:f0:6e:90:47:47:8e:a3:92:32:8d:70:8f:f6:5b:8d:be:
++ 89:ce:47:01:6a:1b:20:20:89:5b:c8:82:10:6c:e0:e7:99:aa:
++ 6b:c6:2a:a0:63:35:91:6a:85:25:ad:17:38:a5:9b:7e:50:f2:
++ 76:ea:85:05:2a:27:41:2b:b1:81:d1:a2:f6:40:75:a9:0e:cb:
++ f1:55:48:d8:ec:d1:ec:b3:e8:ce:14:a1:35:ec:c2:5e:35:1a:
++ ab:a6:16:01:06:8e:ea:dc:2f:a3:8a:ca:2c:91:eb:52:8e:5f:
++ 0c:9b:17:cf:cb:73:07:19:c4:6a:c2:73:54:ef:7c:43:52:63:
++ c1:11:ca:c2:45:b1:f4:3b:53:f5:69:ae:3c:e3:a5:de:ac:e8:
++ 54:b7:b2:91:fd:ac:a9:1f:f2:87:e4:17:c6:49:a8:7c:d8:0a:
++ 41:f4:f2:3e:e7:77:34:04:52:dd:e8:81:f2:4d:2f:54:45:9d:
++ 15:e1:4f:cc:e5:de:34:57:10:c9:23:72:17:70:8d:50:70:1f:
++ 56:6c:cc:b9:ff:3a:5a:4f:63:7a:c3:6e:65:07:1d:84:a1:ff:
++ a9:0c:63:89:6d:b2:40:88:39:d7:1f:77:68:b5:fc:9c:d5:d6:
++ 67:69:5b:a8:74:db:fc:89:f6:1b:32:f7:a4:24:a6:76:b7:47:
++ 53:ef:8d:49:8f:a9:b6:83:5a:a5:96:90:45:61:f5:de:03:4f:
++ 26:0f:a8:8b:f0:03:96:b0:ac:15:d0:71:5a:6a:7b:94:e6:70:
++ 93:da:f1:69:e0:b2:62:4d:9e:8f:ff:89:9d:9b:5d:cd:45:e9:
++ 94:02:22:8d:e0:35:7f:e8:f1:04:79:71:6c:54:83:f8:33:b9:
++ 05:32:1b:58:55:11:4f:d0:e5:27:47:71:ec:ed:da:67:d6:62:
++ a6:4b:4d:0f:69:a2:c9:bc:ec:22:4b:94:c7:68:94:17:7e:e2:
++ 8e:28:3e:b6:c6:ea:f5:34:6c:9f:37:88:07:38:db:86:71:fa:
++ cd:95:48:43:6e:a3:4f:82:87:d7:34:98:6e:4b:93:79:60:75:
++ 69:0f:f0:1a:d5:53:fa:21:0c:c2:3f:e9:3f:1f:18:8c:92:5d:
++ 78:a7:76:67:19:bb:b2:ea:7f:e9:70:09:56:56:a3:b0:0c:0b:
++ 2d:36:5e:c5:e9:c4:d5:83:cb:86:17:97:2c:6c:13:6f:87:5a:
++ af:49:a6:1d:db:cd:38:04:2e:5f:e2:4a:35:0e:2d:4b:f8:a2:
++ 24:04:8d:d8:e1:63:5e:02:92:34:da:98:61:5c:1c:6f:58:76:
++ 64:b3:fc:02:b8:f5:9d:0a
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# 578af4ded0853f4e5998db4aeaf9cbea8d945f60b620a38d1a3c13b2bc7ba8e1
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 36:3a:96:8c:c9:5c:b2:58:cd:d0:01:5d:c5:e5:57:00
++ Signature Algorithm: ecdsa-with-SHA384
++ Issuer: C=DE, O=Deutsche Telekom Security GmbH, CN=Telekom Security TLS ECC Root 2020
++ Validity
++ Not Before: Aug 25 07:48:20 2020 GMT
++ Not After : Aug 25 23:59:59 2045 GMT
++ Subject: C=DE, O=Deutsche Telekom Security GmbH, CN=Telekom Security TLS ECC Root 2020
++ Subject Public Key Info:
++ Public Key Algorithm: id-ecPublicKey
++ Public-Key: (384 bit)
++ pub:
++ 04:ce:bf:fe:57:a8:bf:d5:aa:f7:10:9a:cd:bc:d1:
++ 11:a2:bd:67:42:cc:90:eb:15:18:90:d9:a2:cd:0c:
++ 2a:25:eb:3e:4f:ce:b5:d2:8f:0f:f3:35:da:43:8b:
++ 02:80:be:6f:51:24:1d:0f:6b:2b:ca:9f:c2:6f:50:
++ 32:e5:37:20:b6:20:ff:88:0d:0f:6d:49:bb:db:06:
++ a4:87:90:92:94:f4:09:d0:cf:7f:c8:80:0b:c1:97:
++ b3:bb:35:27:c9:c2:1b
++ ASN1 OID: secp384r1
++ NIST CURVE: P-384
++ X509v3 extensions:
++ X509v3 Subject Key Identifier:
++ E3:72:CC:6E:95:99:47:B1:E6:B3:61:4C:D1:CB:AB:E3:BA:CD:DE:9F
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ Signature Algorithm: ecdsa-with-SHA384
++ Signature Value:
++ 30:64:02:30:75:52:8b:b7:a4:10:4f:ae:4a:10:8b:b2:84:5b:
++ 42:e1:e6:2a:36:02:da:a0:6e:19:3f:25:bf:da:59:32:8e:e4:
++ fb:90:dc:93:64:ce:ad:b4:41:47:60:e2:cf:a7:cb:1e:02:30:
++ 37:41:8c:66:df:41:6b:d6:83:00:41:fd:2f:5a:f7:50:b4:67:
++ d1:2c:a8:71:d7:43:ca:9c:27:24:91:83:48:0d:cf:cd:f7:54:
++ 81:af:ec:7f:e4:67:db:b8:90:ee:dd:25
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
++
++# efc65cadbb59adb6efe84da22311b35624b71b3b1ea0da8b6655174ec8978646
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number:
++ 21:9c:54:2d:e8:f6:ec:71:77:fa:4e:e8:c3:70:57:97
++ Signature Algorithm: sha384WithRSAEncryption
++ Issuer: C=DE, O=Deutsche Telekom Security GmbH, CN=Telekom Security TLS RSA Root 2023
++ Validity
++ Not Before: Mar 28 12:16:45 2023 GMT
++ Not After : Mar 27 23:59:59 2048 GMT
++ Subject: C=DE, O=Deutsche Telekom Security GmbH, CN=Telekom Security TLS RSA Root 2023
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ Public-Key: (4096 bit)
++ Modulus:
++ 00:ed:35:a1:81:80:f3:cb:4a:69:5b:c2:fb:51:83:
++ ae:26:fd:e1:6e:f3:81:12:7d:71:40:ff:87:75:42:
++ 29:21:ed:81:52:2c:df:12:c1:19:84:89:c1:bd:c5:
++ 28:d5:d5:4b:6c:44:d6:4c:db:07:96:4a:55:7a:ca:
++ 36:82:04:36:a8:a5:fc:27:f6:49:f1:d5:72:9e:91:
++ f9:23:d6:70:7b:bb:f5:9b:c1:ec:93:cf:19:ea:65:
++ 7e:88:70:a0:73:fc:f6:ff:b5:56:62:e1:73:6a:34:
++ 98:3e:82:b8:ac:95:53:f4:01:a0:27:07:72:a3:00:
++ 53:a0:e4:b2:ab:83:38:57:33:25:94:9f:be:48:1d:
++ 98:e1:a3:ba:9e:5c:cd:04:71:51:7d:75:78:ab:f3:
++ 59:aa:c4:e0:60:be:8f:83:52:b8:75:1a:41:35:ed:
++ bc:f3:3a:63:e9:a9:14:45:d7:e6:52:d1:6e:d2:de:
++ bc:e3:f5:0b:3b:e6:e0:c4:bd:43:64:13:a6:ce:f4:
++ 98:37:6c:8a:95:a8:97:c8:47:0f:f0:5e:10:8b:e7:
++ 1d:1c:fe:b1:3b:a0:05:33:68:05:41:82:c1:03:2b:
++ 01:c8:e7:8f:4d:ab:e8:b5:f6:cd:6b:44:b5:e7:dd:
++ 8b:ec:ea:25:b4:00:22:57:4d:b0:b1:b2:31:c1:16:
++ ce:ff:fd:14:84:b7:47:fa:b2:f1:70:de:db:8b:6c:
++ 36:58:a4:7c:b3:11:d1:c3:77:7f:5f:b6:25:e0:0d:
++ c5:d2:b3:f9:b8:b8:77:db:37:71:71:47:e3:60:18:
++ 4f:24:b6:75:37:78:b9:a3:62:af:bd:c9:72:8e:2f:
++ cc:bb:ae:db:e4:15:52:19:07:33:fb:6a:b7:2d:4b:
++ 90:28:82:73:fe:18:8b:35:8d:db:a7:04:6a:be:ea:
++ c1:4d:36:3b:16:36:91:32:ef:b6:40:89:91:43:e0:
++ f2:a2:ab:04:2e:e6:f2:4c:0e:16:34:20:ac:87:c1:
++ 2d:7e:c9:66:47:17:14:11:a4:f3:f7:a1:24:89:ab:
++ d8:1a:c8:a1:5c:b1:a3:f7:8c:6d:c8:01:c9:4f:c9:
++ ec:c4:fc:ac:51:33:d1:c8:83:d1:c9:9f:1d:d4:47:
++ 34:29:3e:cb:b0:0e:fa:83:0b:28:58:e5:29:dc:3f:
++ 7c:a8:9f:c9:b6:0a:bb:a6:e8:46:16:0f:96:e5:7b:
++ e4:6a:7a:48:6d:76:98:05:a5:dc:6d:1e:42:1e:42:
++ da:1a:e0:52:f7:b5:83:c0:1a:7b:78:35:2c:38:f5:
++ 1f:fd:49:a3:2e:d2:59:63:bf:80:b0:8c:93:73:cb:
++ 35:a6:99:95:22:61:65:03:60:fb:2f:93:4b:fa:9a:
++ 9c:80:3b
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Certificate Sign, CRL Sign
++ X509v3 Subject Key Identifier:
++ B6:A7:97:82:3D:74:85:9B:F7:3C:9F:93:9A:95:79:75:52:8C:6D:47
++ X509v3 Basic Constraints: critical
++ CA:TRUE
++ X509v3 Authority Key Identifier:
++ B6:A7:97:82:3D:74:85:9B:F7:3C:9F:93:9A:95:79:75:52:8C:6D:47
++ Signature Algorithm: sha384WithRSAEncryption
++ Signature Value:
++ a8:cc:61:a6:be:75:9e:15:50:a4:6b:fb:a8:70:45:7c:ba:7e:
++ b1:5a:fc:5b:23:fa:0a:77:f8:98:71:82:0c:6d:e0:5e:46:aa:
++ 93:f4:1e:a0:c3:e1:93:db:4b:ad:b2:a6:5d:ab:b0:d4:62:cb:
++ 5e:bb:66:f5:2d:ee:97:40:3c:62:eb:5e:d6:14:d6:8c:e2:96:
++ 8b:41:69:93:35:e6:b9:99:6b:62:b4:a1:17:66:34:a6:6b:63:
++ c6:b9:4e:f2:22:e9:58:0d:56:41:d1:fa:0c:4a:f0:33:cd:3b:
++ bb:6d:21:3a:ae:8e:72:b5:c3:4a:fb:e9:7d:e5:b1:9b:86:ee:
++ e2:e0:7d:b4:f7:32:fd:22:84:f1:85:c9:37:79:e9:b5:3f:bf:
++ 5c:e4:74:b2:8f:11:62:00:dd:18:66:a1:d9:7b:23:5f:f1:8e:
++ d5:67:e8:54:da:5b:3a:6b:36:6f:f9:81:b1:33:47:33:77:40:
++ f9:52:aa:dd:d4:83:cf:85:78:99:9a:93:b9:73:67:42:46:11:
++ 21:ea:fe:0a:a9:1b:1a:65:69:b3:8f:ae:16:b6:f6:4b:56:b2:
++ 2d:f9:a5:c8:ec:3b:62:a3:ed:6b:d0:4e:d5:40:09:a4:1f:98:
++ d7:3a:a5:92:59:20:e4:b0:7d:cd:5b:73:68:bd:6d:c4:a2:13:
++ 0e:67:19:b8:8d:42:7e:6c:0c:9a:6e:a0:24:2d:d5:45:1b:dc:
++ c4:02:14:fe:85:5b:65:97:ca:4e:90:50:08:7a:42:35:f9:ea:
++ c2:66:d4:f8:01:ae:1e:b4:be:c3:a8:ef:fe:76:9a:a2:a6:1f:
++ 46:f6:84:ed:fc:db:ce:c4:02:ce:77:48:2c:8c:b2:ec:c3:00:
++ a3:ec:2c:55:18:c1:7e:19:ee:e1:2f:f2:ad:83:9b:9e:ab:19:
++ df:c6:8a:2f:8c:77:e5:b7:05:ec:3b:c1:ec:be:86:b3:86:bc:
++ c0:f7:dc:e7:ea:5b:ae:b2:cc:b5:35:86:4b:d0:e2:3f:b6:d8:
++ f8:0e:00:ee:5d:e3:f7:8d:58:ff:cf:8b:37:e9:63:5f:6e:f7:
++ 09:71:36:c2:12:5d:57:f2:c8:b4:cd:f3:ee:02:df:11:dc:6a:
++ b9:57:84:1d:59:4d:8c:ce:c8:0e:23:c2:b7:26:9a:10:14:71:
++ fe:93:b2:8a:b8:80:f0:0e:10:9e:d3:a8:50:0c:37:82:2f:ea:
++ e0:8a:9d:e1:2c:39:ff:b5:b4:73:00:e4:f7:48:a6:73:ac:bf:
++ b2:de:77:04:87:b4:a3:cd:9b:35:24:37:fa:90:93:13:81:42:
++ c6:98:26:75:37:66:41:10:ac:bb:f5:94:e3:c2:31:2b:ad:e7:
++ 23:56:cc:35:25:92:b3:50
++-----BEGIN CERTIFICATE-----
++MIIFszCCA5ugAwIBAgIQIZxULej27HF3+k7ow3BXlzANBgkqhkiG9w0BAQwFADBj
++MQswCQYDVQQGEwJERTEnMCUGA1UECgweRGV1dHNjaGUgVGVsZWtvbSBTZWN1cml0
++eSBHbWJIMSswKQYDVQQDDCJUZWxla29tIFNlY3VyaXR5IFRMUyBSU0EgUm9vdCAy
++MDIzMB4XDTIzMDMyODEyMTY0NVoXDTQ4MDMyNzIzNTk1OVowYzELMAkGA1UEBhMC
++REUxJzAlBgNVBAoMHkRldXRzY2hlIFRlbGVrb20gU2VjdXJpdHkgR21iSDErMCkG
++A1UEAwwiVGVsZWtvbSBTZWN1cml0eSBUTFMgUlNBIFJvb3QgMjAyMzCCAiIwDQYJ
++KoZIhvcNAQEBBQADggIPADCCAgoCggIBAO01oYGA88tKaVvC+1GDrib94W7zgRJ9
++cUD/h3VCKSHtgVIs3xLBGYSJwb3FKNXVS2xE1kzbB5ZKVXrKNoIENqil/Cf2SfHV
++cp6R+SPWcHu79ZvB7JPPGeplfohwoHP89v+1VmLhc2o0mD6CuKyVU/QBoCcHcqMA
++U6DksquDOFczJZSfvkgdmOGjup5czQRxUX11eKvzWarE4GC+j4NSuHUaQTXtvPM6
++Y+mpFEXX5lLRbtLevOP1Czvm4MS9Q2QTps70mDdsipWol8hHD/BeEIvnHRz+sTug
++BTNoBUGCwQMrAcjnj02r6LX2zWtEtefdi+zqJbQAIldNsLGyMcEWzv/9FIS3R/qy
++8XDe24tsNlikfLMR0cN3f1+2JeANxdKz+bi4d9s3cXFH42AYTyS2dTd4uaNir73J
++co4vzLuu2+QVUhkHM/tqty1LkCiCc/4YizWN26cEar7qwU02OxY2kTLvtkCJkUPg
++8qKrBC7m8kwOFjQgrIfBLX7JZkcXFBGk8/ehJImr2BrIoVyxo/eMbcgByU/J7MT8
++rFEz0ciD0cmfHdRHNCk+y7AO+oMLKFjlKdw/fKifybYKu6boRhYPluV75Gp6SG12
++mAWl3G0eQh5C2hrgUve1g8Aae3g1LDj1H/1Joy7SWWO/gLCMk3PLNaaZlSJhZQNg
+++y+TS/qanIA7AgMBAAGjYzBhMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUtqeX
++gj10hZv3PJ+TmpV5dVKMbUcwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBS2
++p5eCPXSFm/c8n5OalXl1UoxtRzANBgkqhkiG9w0BAQwFAAOCAgEAqMxhpr51nhVQ
++pGv7qHBFfLp+sVr8WyP6Cnf4mHGCDG3gXkaqk/QeoMPhk9tLrbKmXauw1GLLXrtm
++9S3ul0A8Yute1hTWjOKWi0FpkzXmuZlrYrShF2Y0pmtjxrlO8iLpWA1WQdH6DErw
++M807u20hOq6OcrXDSvvpfeWxm4bu4uB9tPcy/SKE8YXJN3nptT+/XOR0so8RYgDd
++GGah2XsjX/GO1WfoVNpbOms2b/mBsTNHM3dA+VKq3dSDz4V4mZqTuXNnQkYRIer+
++CqkbGmVps4+uFrb2S1ayLfmlyOw7YqPta9BO1UAJpB+Y1zqlklkg5LB9zVtzaL1t
++xKITDmcZuI1CfmwMmm6gJC3VRRvcxAIU/oVbZZfKTpBQCHpCNfnqwmbU+AGuHrS+
++w6jv/naaoqYfRvaE7fzbzsQCzndILIyy7MMAo+wsVRjBfhnu4S/yrYObnqsZ38aK
++L4x35bcF7DvB7L6Gs4a8wPfc5+pbrrLMtTWGS9DiP7bY+A4A7l3j941Y/8+LN+lj
++X273CXE2whJdV/LItM3z7gLfEdxquVeEHVlNjM7IDiPCtyaaEBRx/pOyiriA8A4Q
++ntOoUAw3gi/q4Iqd4Sw5/7W0cwDk90imc6y/st53BIe0o82bNSQ3+pCTE4FCxpgm
++dTdmQRCsu/WU48IxK63nI1bMNSWSs1A=
++-----END CERTIFICATE-----
+\ No newline at end of file
diff --git a/meta-python/recipes-devtools/python/python3-grpcio_1.78.0.bb b/meta-python/recipes-devtools/python/python3-grpcio_1.78.0.bb
index 5cd530f1c4..43618afa97 100644
--- a/meta-python/recipes-devtools/python/python3-grpcio_1.78.0.bb
+++ b/meta-python/recipes-devtools/python/python3-grpcio_1.78.0.bb
@@ -13,6 +13,8 @@ DEPENDS += "c-ares openssl python3-protobuf re2 zlib"
SRC_URI += "file://0001-python-enable-unbundled-cross-compilation.patch \
file://0001-Fix-OpenSSL-4.0-compatibility.patch \
file://abseil-ppc-fixes.patch \
+ file://0001-Update-repo-roots-to-chromium-roots-42094.patch \
+ file://0001-Update-gRPC-repo-roots.-43699.patch \
"
SRC_URI[sha256sum] = "7382b95189546f375c174f53a5fa873cef91c4b8005faa05cc5b3beea9c4f1c5"
@@ -32,6 +34,10 @@ export GRPC_PYTHON_BUILD_SYSTEM_OPENSSL = "1"
export GRPC_PYTHON_BUILD_SYSTEM_RE2 = "1"
export GRPC_PYTHON_BUILD_SYSTEM_ZLIB = "1"
+do_configure:prepend() {
+ cp ${S}/etc/roots.pem ${S}/src/python/grpcio/grpc/_cython/_credentials/roots.pem
+}
+
do_configure:append() {
# Relax strict cython version pin so that the available cython satisfies the requirement.
# The C files are pre-generated so cython is not actually used during compilation.
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 48/60] libmspack: patch CVE-2026-110602
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (46 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 47/60] python3-grpcio: " ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 49/60] unbound: upgrade 1.26.1 -> 1.26.2 ankur.tyagi85
` (12 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-110602
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../libmspack/CVE-2026-110602.patch | 41 +++++++++++++++++++
| 4 +-
2 files changed, 44 insertions(+), 1 deletion(-)
create mode 100644 meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch
diff --git a/meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch b/meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch
new file mode 100644
index 0000000000..15d690945f
--- /dev/null
+++ b/meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch
@@ -0,0 +1,41 @@
+From aca3603bed20772fd86ce5b901005668cee835ad Mon Sep 17 00:00:00 2001
+From: Stuart Caie <kyzer@cabextract.org.uk>
+Date: Mon, 15 Jun 2026 16:33:33 +0000
+Subject: [PATCH] kwajd_read_headers(): initialise pointers before returning
+ any error
+
+CVE: CVE-2026-110602
+Upstream-Status: Backport [https://github.com/kyz/libmspack/commit/4d868504114346aa767d435fbb89a8b76603493f]
+
+Dropped changes for test and ChangeLog file.
+
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ mspack/kwajd.c | 7 +++++--
+ 1 file changed, 5 insertions(+), 2 deletions(-)
+
+diff --git a/mspack/kwajd.c b/mspack/kwajd.c
+index 30caa89..ede91dd 100644
+--- a/mspack/kwajd.c
++++ b/mspack/kwajd.c
+@@ -160,6 +160,11 @@ static int kwajd_read_headers(struct mspack_system *sys,
+ unsigned char buf[16];
+ int i;
+
++
++ /* initialise pointers */
++ hdr->filename = NULL;
++ hdr->extra = NULL;
++
+ /* read in the header */
+ if (sys->read(fh, &buf[0], kwajh_SIZEOF) != kwajh_SIZEOF) {
+ return MSPACK_ERR_READ;
+@@ -177,8 +182,6 @@ static int kwajd_read_headers(struct mspack_system *sys,
+ hdr->data_offset = EndGetI16(&buf[kwajh_DataOffset]);
+ hdr->headers = EndGetI16(&buf[kwajh_Flags]);
+ hdr->length = 0;
+- hdr->filename = NULL;
+- hdr->extra = NULL;
+ hdr->extra_length = 0;
+
+ /* optional headers */
--git a/meta-oe/recipes-support/cabextract/libmspack_0.11alpha.bb b/meta-oe/recipes-support/cabextract/libmspack_0.11alpha.bb
index 169a5f271b..c612e54e17 100644
--- a/meta-oe/recipes-support/cabextract/libmspack_0.11alpha.bb
+++ b/meta-oe/recipes-support/cabextract/libmspack_0.11alpha.bb
@@ -8,7 +8,9 @@ LICENSE = "LGPL-2.1-only"
LIC_FILES_CHKSUM = "file://COPYING.LIB;md5=7fbc338309ac38fefcd64b04bb903e34"
-SRC_URI = "https://www.cabextract.org.uk/libmspack/libmspack-${PV}.tar.gz"
+SRC_URI = "https://www.cabextract.org.uk/libmspack/libmspack-${PV}.tar.gz \
+ file://CVE-2026-110602.patch \
+"
SRC_URI[sha256sum] = "70dd1fb2f0aecc36791b71a1e1840e62173079eadaa081192d1c323a0eeea21b"
inherit autotools
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 49/60] unbound: upgrade 1.26.1 -> 1.26.2
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (47 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 48/60] libmspack: patch CVE-2026-110602 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 50/60] ntpsec: upgrade 1.2.5 -> 1.2.6 ankur.tyagi85
` (11 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.26.2
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../unbound/{unbound_1.26.1.bb => unbound_1.26.2.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-networking/recipes-support/unbound/{unbound_1.26.1.bb => unbound_1.26.2.bb} (98%)
diff --git a/meta-networking/recipes-support/unbound/unbound_1.26.1.bb b/meta-networking/recipes-support/unbound/unbound_1.26.2.bb
similarity index 98%
rename from meta-networking/recipes-support/unbound/unbound_1.26.1.bb
rename to meta-networking/recipes-support/unbound/unbound_1.26.2.bb
index f426ce351e..8894a59d07 100644
--- a/meta-networking/recipes-support/unbound/unbound_1.26.1.bb
+++ b/meta-networking/recipes-support/unbound/unbound_1.26.2.bb
@@ -14,7 +14,7 @@ SRC_URI = "git://github.com/NLnetLabs/unbound.git;protocol=https;branch=master;t
file://run-ptest \
"
-SRCREV = "13b6717f1716810523ffb60f971a6c9c5e8ce127"
+SRCREV = "f0cd7067d950921427c91ade4ecf060e944f88eb"
inherit autotools pkgconfig systemd update-rc.d ptest
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 50/60] ntpsec: upgrade 1.2.5 -> 1.2.6
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (48 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 49/60] unbound: upgrade 1.26.1 -> 1.26.2 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 51/60] brotli: upgrade 1.2.0 -> 1.2.1 ankur.tyagi85
` (10 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi, Khem Raj
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://gitlab.com/NTPsec/ntpsec/-/blob/NTPsec_1_2_6/NEWS.adoc?ref_type=tags
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit b730ef39a1ee020404c54922e1467403c1533a25)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../recipes-support/ntpsec/{ntpsec_1.2.5.bb => ntpsec_1.2.6.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-networking/recipes-support/ntpsec/{ntpsec_1.2.5.bb => ntpsec_1.2.6.bb} (98%)
diff --git a/meta-networking/recipes-support/ntpsec/ntpsec_1.2.5.bb b/meta-networking/recipes-support/ntpsec/ntpsec_1.2.6.bb
similarity index 98%
rename from meta-networking/recipes-support/ntpsec/ntpsec_1.2.5.bb
rename to meta-networking/recipes-support/ntpsec/ntpsec_1.2.6.bb
index 26348f7c4b..832619edc4 100644
--- a/meta-networking/recipes-support/ntpsec/ntpsec_1.2.5.bb
+++ b/meta-networking/recipes-support/ntpsec/ntpsec_1.2.6.bb
@@ -17,7 +17,7 @@ SRC_URI = "https://ftp.ntpsec.org/pub/releases/ntpsec-${PV}.tar.gz \
file://0001-wscript-Add-BISONFLAGS-support.patch \
"
-SRC_URI[sha256sum] = "6fb191cddaf607e7754b1f6915a1a61dc4018b3e4eef3d2ffacec961c9682949"
+SRC_URI[sha256sum] = "8023beb9a0c86a93f0bf94d43fd388c71a6fa54d80bcbd747d899915191bb592"
UPSTREAM_CHECK_URI = "ftp://ftp.ntpsec.org/pub/releases/"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 51/60] brotli: upgrade 1.2.0 -> 1.2.1
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (49 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 50/60] ntpsec: upgrade 1.2.5 -> 1.2.6 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 52/60] php: upgrade 8.5.11 -> 8.5.12 ankur.tyagi85
` (9 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Jason Schonberg, Khem Raj, Ankur Tyagi
From: Jason Schonberg <schonm@gmail.com>
This is a security release
CVE-2026-111497: out-of-bounds write permits remote code execution
Changelog: https://github.com/google/brotli/releases/tag/v1.2.1
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit b5d66bf60d7664e5fa15dfabcfdb7986ea83d386)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../brotli/{brotli_1.2.0.bb => brotli_1.2.1.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta-oe/recipes-extended/brotli/{brotli_1.2.0.bb => brotli_1.2.1.bb} (79%)
diff --git a/meta-oe/recipes-extended/brotli/brotli_1.2.0.bb b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb
similarity index 79%
rename from meta-oe/recipes-extended/brotli/brotli_1.2.0.bb
rename to meta-oe/recipes-extended/brotli/brotli_1.2.1.bb
index 84495a3236..dca16cb79b 100644
--- a/meta-oe/recipes-extended/brotli/brotli_1.2.0.bb
+++ b/meta-oe/recipes-extended/brotli/brotli_1.2.1.bb
@@ -6,8 +6,8 @@ BUGTRACKER = "https://github.com/google/brotli/issues"
LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://${S}/LICENSE;md5=941ee9cd1609382f946352712a319b4b"
-SRC_URI = "git://github.com/google/brotli.git;branch=master;protocol=https"
-SRCREV = "028fb5a23661f123017c060daa546b55cf4bde29"
+SRC_URI = "git://github.com/google/brotli.git;branch=v${@oe.utils.trim_version('${PV}')};protocol=https;tag=v${PV}"
+SRCREV = "db24a98aed38a16de78cc05ca15cdd8dc2a0d92d"
inherit cmake lib_package
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 52/60] php: upgrade 8.5.11 -> 8.5.12
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (50 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 51/60] brotli: upgrade 1.2.0 -> 1.2.1 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 53/60] apache2: upgrade 2.4.68 -> 2.4.69 ankur.tyagi85
` (8 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Jason Schonberg, Khem Raj, Ankur Tyagi
From: Jason Schonberg <schonm@gmail.com>
This is a security update. Fixes unauthenticated remote code execution.
CVE-2026-109618 CVE-2026-109619
Advisory: https://www.php.net/archive/2026.php#2026-10-21-5
Changelog: https://www.php.net/ChangeLog-8.php#8.5.12
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 898ac0ba1caaefb583cb3785c8c466360fc18f63)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb} (99%)
diff --git a/meta-oe/recipes-devtools/php/php_8.5.11.bb b/meta-oe/recipes-devtools/php/php_8.5.12.bb
similarity index 99%
rename from meta-oe/recipes-devtools/php/php_8.5.11.bb
rename to meta-oe/recipes-devtools/php/php_8.5.12.bb
index 831e926880..f9759cf7a5 100644
--- a/meta-oe/recipes-devtools/php/php_8.5.11.bb
+++ b/meta-oe/recipes-devtools/php/php_8.5.12.bb
@@ -32,7 +32,7 @@ UPSTREAM_CHECK_REGEX = "releases/tag/php-(?P<pver>\d+(\.\d+)+)"
S = "${UNPACKDIR}/php-${PV}"
-SRC_URI[sha256sum] = "dc940716a8c73e531c0078eecb955d595d321ec2cc9d47149cf0089ea6e18f64"
+SRC_URI[sha256sum] = "ffb60edc437ced63b5137e4984db379a8111c50049c711510d8b958277efc1a8"
CVE_PRODUCT = "php:php php_group:php"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 53/60] apache2: upgrade 2.4.68 -> 2.4.69
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (51 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 52/60] php: upgrade 8.5.11 -> 8.5.12 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 54/60] 7zip: upgrade 26.03 -> 26.04 ankur.tyagi85
` (7 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi, Khem Raj
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://downloads.apache.org/httpd/CHANGES_2.4.69
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit cf030e73b8e0fa463a81ace8f13c82a9f1281ebe)
Also dropped patch that is part of the upstream version.
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
...mod_md-Add-OpenSSL-4.0-compatibility.patch | 47 -------------------
.../{apache2_2.4.68.bb => apache2_2.4.69.bb} | 3 +-
2 files changed, 1 insertion(+), 49 deletions(-)
delete mode 100644 meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch
rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.68.bb => apache2_2.4.69.bb} (98%)
diff --git a/meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch b/meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch
deleted file mode 100644
index ee127681ec..0000000000
--- a/meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch
+++ /dev/null
@@ -1,47 +0,0 @@
-From 6cd9ea8dcb5bf68a195e90578c7f05e12eba5468 Mon Sep 17 00:00:00 2001
-From: Rainer Jung <rjung@apache.org>
-Date: Wed, 17 Jun 2026 09:48:52 +0000
-Subject: [PATCH] mod_md: Add OpenSSL 4.0 compatibility
-
-* Use getters instead of direct member access.
-
-* Struct was made opaque in OpenSSL 4. Getters exist since OpenSSL 1.1.0.
-
-* Keep OpenSSL 1.0.2 compatibility.
-
-Merge from icing/md:
-https://github.com/icing/mod_md/commit/9fd90380db0722f0ccc14ff1c4da0ca21d4da75c
-
-Backport of r1935161 from trunk, [mod_md CTR]
-
-
-Upstream-Status: Backport [https://github.com/apache/httpd/commit/6cd9ea8dcb5bf68a195e90578c7f05e12eba5468]
----
-diff --git a/modules/md/md_ocsp.c b/modules/md/md_ocsp.c
-index aee799a7b39..2e7f14dff31 100644
---- a/modules/md/md_ocsp.c
-+++ b/modules/md/md_ocsp.c
-@@ -533,13 +533,23 @@ static const char *certid_summary(const OCSP_CERTID *certid, apr_pool_t *p)
- serial = issuer = key = "???";
- OCSP_id_get0_info(&aname_hash, &amd_nid, &akey_hash, &aserial, (OCSP_CERTID*)certid);
- if (aname_hash) {
-+#if OPENSSL_VERSION_NUMBER < 0x10100000L
- data.len = (apr_size_t)aname_hash->length;
- data.data = (const char*)aname_hash->data;
-+#else
-+ data.len = (apr_size_t)ASN1_STRING_length(aname_hash);
-+ data.data = (const char*)ASN1_STRING_get0_data(aname_hash);
-+#endif
- md_data_to_hex(&issuer, 0, p, &data);
- }
- if (akey_hash) {
-+#if OPENSSL_VERSION_NUMBER < 0x10100000L
- data.len = (apr_size_t)akey_hash->length;
- data.data = (const char*)akey_hash->data;
-+#else
-+ data.len = (apr_size_t)ASN1_STRING_length(akey_hash);
-+ data.data = (const char*)ASN1_STRING_get0_data(akey_hash);
-+#endif
- md_data_to_hex(&key, 0, p, &data);
- }
- if (aserial) {
diff --git a/meta-webserver/recipes-httpd/apache2/apache2_2.4.68.bb b/meta-webserver/recipes-httpd/apache2/apache2_2.4.69.bb
similarity index 98%
rename from meta-webserver/recipes-httpd/apache2/apache2_2.4.68.bb
rename to meta-webserver/recipes-httpd/apache2/apache2_2.4.69.bb
index f178007ab7..fba4667bd1 100644
--- a/meta-webserver/recipes-httpd/apache2/apache2_2.4.68.bb
+++ b/meta-webserver/recipes-httpd/apache2/apache2_2.4.69.bb
@@ -16,7 +16,6 @@ SRC_URI = "${APACHE_MIRROR}/httpd/httpd-${PV}.tar.bz2 \
file://0008-Fix-perl-install-directory-to-usr-bin.patch \
file://0009-support-apxs.in-force-destdir-to-be-empty-string.patch \
file://0001-make_exports.awk-not-expose-the-path.patch \
- file://0011-mod_md-Add-OpenSSL-4.0-compatibility.patch \
"
SRC_URI:append:class-target = " \
@@ -28,7 +27,7 @@ SRC_URI:append:class-target = " \
"
LIC_FILES_CHKSUM = "file://LICENSE;md5=bddeddfac80b2c9a882241d008bb41c3"
-SRC_URI[sha256sum] = "68c74d4df38c26bed4dfbdb8f3baf1eb532f3872357becc1bba5d136f6b63c06"
+SRC_URI[sha256sum] = "c5e6ebc66e349b87d7fc6916ae7cc2a808ed348003de134cf9e9d89d3e2cc73d"
S = "${UNPACKDIR}/httpd-${PV}"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 54/60] 7zip: upgrade 26.03 -> 26.04
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (52 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 53/60] apache2: upgrade 2.4.68 -> 2.4.69 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 55/60] 7zip: upgrade 26.04 -> 26.05 ankur.tyagi85
` (6 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi, Khem Raj
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://github.com/ip7z/7zip/releases/tag/26.04
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 1c45c216f647175c121e7b7f5fb19c8a042ed99e)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
meta-oe/recipes-extended/7zip/{7zip_26.03.bb => 7zip_26.04.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-oe/recipes-extended/7zip/{7zip_26.03.bb => 7zip_26.04.bb} (98%)
diff --git a/meta-oe/recipes-extended/7zip/7zip_26.03.bb b/meta-oe/recipes-extended/7zip/7zip_26.04.bb
similarity index 98%
rename from meta-oe/recipes-extended/7zip/7zip_26.03.bb
rename to meta-oe/recipes-extended/7zip/7zip_26.04.bb
index ca50aed8ea..49437b807d 100644
--- a/meta-oe/recipes-extended/7zip/7zip_26.03.bb
+++ b/meta-oe/recipes-extended/7zip/7zip_26.04.bb
@@ -12,7 +12,7 @@ SRC_URI = "git://github.com/ip7z/7zip.git;protocol=https;branch=main;tag=${PV} \
file://0001-Remove-treating-warning-as-errors.patch \
file://7z_wrapper.sh \
"
-SRCREV = "0766b733fe3e06dd2a7f9a3cfbf2108ac73abd17"
+SRCREV = "9128b80e3a471108678e2b3ec3c985861c8d7b0f"
UPSTREAM_CHECK_URI = "https://github.com/ip7z/7zip/releases/latest"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 55/60] 7zip: upgrade 26.04 -> 26.05
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (53 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 54/60] 7zip: upgrade 26.03 -> 26.04 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 56/60] python3-brotli: upgrade 1.2.0 -> 1.2.1 ankur.tyagi85
` (5 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi, Khem Raj
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://github.com/ip7z/7zip/releases/tag/26.05
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 533d0a63ac2a38e77746e32458e09461f12737b6)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
meta-oe/recipes-extended/7zip/{7zip_26.04.bb => 7zip_26.05.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-oe/recipes-extended/7zip/{7zip_26.04.bb => 7zip_26.05.bb} (98%)
diff --git a/meta-oe/recipes-extended/7zip/7zip_26.04.bb b/meta-oe/recipes-extended/7zip/7zip_26.05.bb
similarity index 98%
rename from meta-oe/recipes-extended/7zip/7zip_26.04.bb
rename to meta-oe/recipes-extended/7zip/7zip_26.05.bb
index 49437b807d..050673f678 100644
--- a/meta-oe/recipes-extended/7zip/7zip_26.04.bb
+++ b/meta-oe/recipes-extended/7zip/7zip_26.05.bb
@@ -12,7 +12,7 @@ SRC_URI = "git://github.com/ip7z/7zip.git;protocol=https;branch=main;tag=${PV} \
file://0001-Remove-treating-warning-as-errors.patch \
file://7z_wrapper.sh \
"
-SRCREV = "9128b80e3a471108678e2b3ec3c985861c8d7b0f"
+SRCREV = "b88c6bc09339de32f7d18bbab900686b244f42ba"
UPSTREAM_CHECK_URI = "https://github.com/ip7z/7zip/releases/latest"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 56/60] python3-brotli: upgrade 1.2.0 -> 1.2.1
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (54 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 55/60] 7zip: upgrade 26.04 -> 26.05 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 57/60] python3-oauthlib: patch CVE-2026-49265 ankur.tyagi85
` (4 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://github.com/google/brotli/blob/v1.2.1/CHANGELOG.md#121---2026-10-21
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../python/{python3-brotli_1.2.0.bb => python3-brotli_1.2.1.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta-python/recipes-devtools/python/{python3-brotli_1.2.0.bb => python3-brotli_1.2.1.bb} (81%)
diff --git a/meta-python/recipes-devtools/python/python3-brotli_1.2.0.bb b/meta-python/recipes-devtools/python/python3-brotli_1.2.1.bb
similarity index 81%
rename from meta-python/recipes-devtools/python/python3-brotli_1.2.0.bb
rename to meta-python/recipes-devtools/python/python3-brotli_1.2.1.bb
index 8e493fd0a0..2c1bf23f64 100644
--- a/meta-python/recipes-devtools/python/python3-brotli_1.2.0.bb
+++ b/meta-python/recipes-devtools/python/python3-brotli_1.2.1.bb
@@ -7,7 +7,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=941ee9cd1609382f946352712a319b4b"
CVE_PRODUCT = "brotli"
-SRC_URI[sha256sum] = "e310f77e41941c13340a95976fe66a8a95b01e783d430eeaf7a2f87e0a57dd0a"
+SRC_URI[sha256sum] = "02b2f7b5a83485efe448a44ddf7983def05c3bb1dcf917d4f7154070260e13de"
inherit pypi pkgconfig python_setuptools_build_meta
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 57/60] python3-oauthlib: patch CVE-2026-49265
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (55 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 56/60] python3-brotli: upgrade 1.2.0 -> 1.2.1 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 58/60] c-ares: backport security fixes from 1.34.9 ankur.tyagi85
` (3 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-49265
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../python3-oauthlib/CVE-2026-49265.patch | 51 +++++++++++++++++++
.../python/python3-oauthlib_3.3.1.bb | 2 +
2 files changed, 53 insertions(+)
create mode 100644 meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch
diff --git a/meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch b/meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch
new file mode 100644
index 0000000000..8cbc368b6c
--- /dev/null
+++ b/meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch
@@ -0,0 +1,51 @@
+From f3510969587daff0de06a233cf6be3a6233b3429 Mon Sep 17 00:00:00 2001
+From: Jonathan Huot <jonathan.huot@gmail.com>
+Date: Sat, 11 Jul 2026 13:15:29 +0200
+Subject: [PATCH] Improve PKCE code comparison
+
+(cherry picked from commit 74664d3fe037a354e180e305135c6bab1747a6b0)
+
+CVE: CVE-2026-49265
+Upstream-Status: Backport [https://github.com/oauthlib/oauthlib/commit/74664d3fe037a354e180e305135c6bab1747a6b0]
+
+Dropped changes to the CHANGELOG file.
+
+Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
+---
+ oauthlib/oauth2/rfc6749/grant_types/authorization_code.py | 8 +++++---
+ 1 file changed, 5 insertions(+), 3 deletions(-)
+
+diff --git a/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py b/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py
+index 09dc619..c73314a 100644
+--- a/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py
++++ b/oauthlib/oauth2/rfc6749/grant_types/authorization_code.py
+@@ -4,6 +4,7 @@ oauthlib.oauth2.rfc6749.grant_types
+ """
+ import base64
+ import hashlib
++import hmac
+ import json
+ import logging
+
+@@ -44,9 +45,10 @@ def code_challenge_method_s256(verifier, challenge):
+
+ .. _`Section 4.3`: https://tools.ietf.org/html/rfc7636#section-4.3
+ """
+- return base64.urlsafe_b64encode(
++ expected = base64.urlsafe_b64encode(
+ hashlib.sha256(verifier.encode()).digest()
+- ).decode().rstrip('=') == challenge
++ ).decode().rstrip('=')
++ return hmac.compare_digest(expected, challenge)
+
+
+ def code_challenge_method_plain(verifier, challenge):
+@@ -58,7 +60,7 @@ def code_challenge_method_plain(verifier, challenge):
+
+ .. _`Section 4.3`: https://tools.ietf.org/html/rfc7636#section-4.3
+ """
+- return verifier == challenge
++ return hmac.compare_digest(verifier, challenge)
+
+
+ class AuthorizationCodeGrant(GrantTypeBase):
diff --git a/meta-python/recipes-devtools/python/python3-oauthlib_3.3.1.bb b/meta-python/recipes-devtools/python/python3-oauthlib_3.3.1.bb
index bdc1f0e7b4..c375b172c7 100644
--- a/meta-python/recipes-devtools/python/python3-oauthlib_3.3.1.bb
+++ b/meta-python/recipes-devtools/python/python3-oauthlib_3.3.1.bb
@@ -4,6 +4,8 @@ HOMEPAGE = "https://github.com/idan/oauthlib"
LICENSE = "BSD-3-Clause"
LIC_FILES_CHKSUM = "file://LICENSE;md5=2699a9fb0d71d5eafd75d8d7c302f7df"
+SRC_URI += "file://CVE-2026-49265.patch"
+
SRC_URI[sha256sum] = "0f0f8aa759826a193cf66c12ea1af1637f87b9b4622d46e866952bb022e538c9"
CVE_PRODUCT = "oauthlib"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 58/60] c-ares: backport security fixes from 1.34.9
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (56 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 57/60] python3-oauthlib: patch CVE-2026-49265 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 59/60] mctp: upgrade 2.6 -> 2.6.1 ankur.tyagi85
` (2 subsequent siblings)
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Jason Schonberg
From: Jason Schonberg <schonm@gmail.com>
Add the eight unique upstream commits that fix the security advisories addressed in c-ares 1.34.9.
Several advisories share commits, so patches are ordered by commit rather than duplicated per advisory; each patch lists the GHSA IDs it resolves.
Assisted-by: opencode (big-pickle)
Signed-off-by: Jason Schonberg <schonm@gmail.com>
---
...troy-detach-queries-before-callbacks.patch | 2603 +++++++++++++++++
...ed-socket-server-state-notifications.patch | 393 +++
...qcache-hand-callbacks-their-own-copy.patch | 1054 +++++++
...connections-torn-down-by-application.patch | 1107 +++++++
...pt-an-answer-on-the-right-connection.patch | 575 ++++
...tions-read-channel-config-under-lock.patch | 243 ++
...res_inet_pton-reject-a-prefix-length.patch | 364 +++
...nt-drop-UDP-answers-from-server-port.patch | 178 ++
.../recipes-support/c-ares/c-ares_1.34.8.bb | 8 +
9 files changed, 6525 insertions(+)
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0001-ares_cancel-ares_destroy-detach-queries-before-callbacks.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0002-Deliver-deferred-socket-server-state-notifications.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0003-ares_qcache-hand-callbacks-their-own-copy.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0004-Handle-connections-torn-down-by-application.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0005-ares_process-only-accept-an-answer-on-the-right-connection.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0006-ares_save_options-read-channel-config-under-lock.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0007-ares_inet_pton-reject-a-prefix-length.patch
create mode 100644 meta-oe/recipes-support/c-ares/c-ares/0008-ares_conn_read-dont-drop-UDP-answers-from-server-port.patch
diff --git a/meta-oe/recipes-support/c-ares/c-ares/0001-ares_cancel-ares_destroy-detach-queries-before-callbacks.patch b/meta-oe/recipes-support/c-ares/c-ares/0001-ares_cancel-ares_destroy-detach-queries-before-callbacks.patch
new file mode 100644
index 0000000000..385760f5bc
--- /dev/null
+++ b/meta-oe/recipes-support/c-ares/c-ares/0001-ares_cancel-ares_destroy-detach-queries-before-callbacks.patch
@@ -0,0 +1,2603 @@
+From 7f408deb128fbdcce78122322734ffaa01cad9ae Mon Sep 17 00:00:00 2001
+From: Brad House <brad@brad-house.com>
+Date: Sun, 18 Oct 2026 18:15:41 -0400
+Subject: [PATCH] ares_cancel/ares_destroy: detach queries before running user
+ callbacks
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+Backport of dd62bdfca52ba5c37e88a1469c0a4c5e4a568ccb to v1.34. See that
+commit for the full description; it hardens reentrant teardown from
+callbacks (ares_cancel(), ares_destroy(), server reconfiguration, and
+socket/server state notifications).
+
+Conflicts were whitespace/alignment only (v1.34 predates the clang-format
+reformat in #1238) and were reformatted to v1.34's style.
+
+Also carries the test portion of #1334 that applies to the tests this
+introduces: dead-server tests use 127.0.0.1:53055/53056 instead of
+127.0.0.55/56, which only routes on Linux.
+
+Signed-off-by: Brad House <brad@brad-house.com>
+Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/7f408deb128fbdcce78122322734ffaa01cad9ae]
+GHSA: GHSA-wpr3-8q3r-4q8c, GHSA-97vq-4mxv-7vhm, GHSA-mw23-pfg6-2x9r, GHSA-rf6g-ww74-97qh, GHSA-v33j-65h4-4ch8, GHSA-pj7p-v3cw-hq66
+---
+ docs/ares_cancel.3 | 17 +
+ docs/ares_destroy.3 | 7 +
+ docs/ares_init_options.3 | 15 +
+ docs/ares_set_server_state_callback.3 | 31 +-
+ docs/ares_set_servers_csv.3 | 17 +
+ src/lib/ares_cancel.c | 25 +-
+ src/lib/ares_close_sockets.c | 82 +-
+ src/lib/ares_conn.c | 217 ++++-
+ src/lib/ares_conn.h | 37 +-
+ src/lib/ares_destroy.c | 85 +-
+ src/lib/ares_private.h | 110 ++-
+ src/lib/ares_process.c | 235 +++++-
+ src/lib/ares_send.c | 35 +
+ src/lib/ares_update_servers.c | 42 +-
+ test/ares-test-mock.cc | 1068 +++++++++++++++++++++++++
+ 15 files changed, 1959 insertions(+), 64 deletions(-)
+
+diff --git a/docs/ares_cancel.3 b/docs/ares_cancel.3
+index 967a946b49..069f226c10 100644
+--- a/docs/ares_cancel.3
++++ b/docs/ares_cancel.3
+@@ -21,6 +21,23 @@ These calls give the callbacks a chance to clean up any state which might have
+ been stored in their arguments. If such a callback invocation adds a new
+ request to the channel, that request will \fInot\fP be cancelled by the
+ current invocation of \fBares_cancel(3)\fP.
++.SH REENTRANCY
++A callback invoked by
++.BR ares_cancel (3)
++may call c-ares functions on the same channel. The channel lock is recursive,
++and each query is unlinked from the library's internal structures before its
++callback runs, so a reentrant call cannot encounter a query that is part-way
++through being torn down.
++
++This includes starting new lookups, as described above, and reconfiguring the
++server list with
++.BR ares_set_servers_csv (3)
++and related functions.
++
++.SH AVAILABILITY
++The reentrancy guarantee described above applies as of c-ares version 1.35.0,
++and c-ares version 1.34.9 on the 1.34 branch.
++
+ .SH SEE ALSO
+ .BR ares_init (3)
+ .BR ares_destroy (3)
+diff --git a/docs/ares_destroy.3 b/docs/ares_destroy.3
+index d1984b7cc9..0b6380e609 100644
+--- a/docs/ares_destroy.3
++++ b/docs/ares_destroy.3
+@@ -20,6 +20,13 @@ by the channel.
+ channel, passing a status of \fIARES_EDESTRUCTION\fP. These calls give the
+ callbacks a chance to clean up any state which might have been stored in their
+ arguments. A callback must not add new requests to a channel being destroyed.
++Such a request is refused: the request is not started, and its callback is
++invoked with a status of \fIARES_EDESTRUCTION\fP so that any state attached to
++its argument can be released. A request made from within that notification is
++refused without a further notification, so that a callback which responds to
++failure by retrying cannot recurse without bound; its argument is not handed
++back. This applies as of c-ares version 1.35.0, and c-ares version 1.34.9 on
++the 1.34 branch.
+
+ There is no ability to make this function thread-safe. No additional calls
+ using this channel may be made once this function is called.
+diff --git a/docs/ares_init_options.3 b/docs/ares_init_options.3
+index 9b3b481535..e6f6ee8ba6 100644
+--- a/docs/ares_init_options.3
++++ b/docs/ares_init_options.3
+@@ -231,6 +231,21 @@ will be passed the socket whose state has changed;
+ will be set to true if the socket should listen for read events, and
+ .I writable
+ will be set to true if the socket should listen for write events.
++
++This callback may call c-ares functions on the same channel, including
++.BR ares_cancel (3)
++and the server configuration functions. Notifications are delivered once the
++library has finished the work that produced them rather than part-way through
++it, so a reentrant call cannot close a socket the library is still using. They
++arrive in the order the state changes occurred, and always before the
++outermost c-ares call returns. A call made from within a callback is not the
++outermost one, so notifications it produces arrive after it has returned.
++.BR ares_destroy (3)
++is no exception: the closure of every socket the channel still holds is
++reported before it returns, and the callback is never invoked afterwards.
++This applies as of c-ares version 1.35.0, and c-ares version 1.34.9 on the
++1.34 branch.
++
+ The value of
+ .I sock_state_cb_data
+ will be passed as the
+diff --git a/docs/ares_set_server_state_callback.3 b/docs/ares_set_server_state_callback.3
+index 04fbde4c7a..e95db327ce 100644
+--- a/docs/ares_set_server_state_callback.3
++++ b/docs/ares_set_server_state_callback.3
+@@ -47,6 +47,31 @@ the DNS servers used by an ares channel. For example, it can be used to track
+ metrics about the numbers and types of queries sent to each server or to
+ detect when a server is uncontactable or unhealthy.
+
++.SH REENTRANCY
++The server state callback may call c-ares functions on the same channel,
++including
++.BR ares_cancel (3)
++and the server configuration functions. The channel lock is recursive and the
++library holds no query, connection or server state across the callback.
++
++Notifications are queued and delivered once the library has finished the work
++that produced them, rather than part-way through it. A notification is
++therefore observed after the processing pass that generated it, not during.
++
++The callback and its
++.I user_data
++are read when the notification is delivered, not when it is queued. An
++application that replaces its callback between those two points will see the
++notification delivered to the new one; unregistering by passing a
++.B NULL
++callback discards any notification still queued.
++
++This applies to a replacement made from within a c-ares callback, where the
++channel lock is held.
++.BR ares_set_server_state_callback (3)
++does not take the channel lock, so replacing the callback from another thread
++while the channel is processing is not synchronized against delivery.
++
+ .SH FLAGS
+ .TP 5
+ .B ARES_SERV_STATE_UDP
+@@ -58,5 +83,9 @@ Indicates that the query was tried over TCP.
+ .SH AVAILABILITY
+ This function was first introduced in c-ares version 1.29.0.
+
++The reentrancy guarantee described above applies as of c-ares version 1.35.0,
++and c-ares version 1.34.9 on the 1.34 branch.
++
+ .SH SEE ALSO
+-.BR ares_get_servers_csv (3)
++.BR ares_get_servers_csv (3),
++.BR ares_cancel (3)
+diff --git a/docs/ares_set_servers_csv.3 b/docs/ares_set_servers_csv.3
+index f1435143f5..f9f5b82e28 100644
+--- a/docs/ares_set_servers_csv.3
++++ b/docs/ares_set_servers_csv.3
+@@ -126,6 +126,23 @@ are identical. Prior versions would simply omit ports in \fBares_set_servers_cs
+ but due to the addition of link local interface support, this difference was
+ removed.
+
++.SH REENTRANCY
++These functions may be called from within a c-ares callback. Removing a server
++closes its connections, which ends the lookups that were using it and invokes
++their callbacks, so a reconfiguration can be requested from inside one.
++
++A nested call reconciles the whole server list, and the outer call leaves that
++result in place rather than deleting the servers the nested call installed.
++The consequence is that the outer call's own list does not survive, even
++though it returns
++.B ARES_SUCCESS:
++the last configuration applied is the one the channel keeps. An application
++that reconfigures from a callback should therefore not assume the list it
++passed to the outer call is in effect when that call returns.
++
++This applies as of c-ares version 1.35.0, and c-ares version 1.34.9 on the
++1.34 branch.
++
+ .SH EXAMPLE
+ .nf
+ 192.168.1.100,[fe80::1]:53%eth0,dns://192.168.1.1?tcpport=1153
+diff --git a/src/lib/ares_cancel.c b/src/lib/ares_cancel.c
+index 75600dea6b..aa167e4486 100644
+--- a/src/lib/ares_cancel.c
++++ b/src/lib/ares_cancel.c
+@@ -38,10 +38,10 @@ void ares_cancel(ares_channel_t *channel)
+ }
+
+ ares_channel_lock(channel);
++ ares_deferred_cb_enter(channel);
+
+ if (ares_llist_len(channel->all_queries) > 0) {
+ ares_llist_node_t *node = NULL;
+- ares_llist_node_t *next = NULL;
+
+ /* Swap list heads, so that only those queries which were present on entry
+ * into this function are cancelled. New queries added by callbacks of
+@@ -57,21 +57,29 @@ void ares_cancel(ares_channel_t *channel)
+ goto done; /* LCOV_EXCL_LINE: OutOfMemory */
+ }
+
+- node = ares_llist_node_first(list_copy);
+- while (node != NULL) {
++ /* Re-read the head each iteration rather than caching the next node: a
++ * callback below may cause other queries in this same list to be ended
++ * and their nodes destroyed. */
++ while ((node = ares_llist_node_first(list_copy)) != NULL) {
+ ares_query_t *query;
+
+- /* Cache next since this node is being deleted */
+- next = ares_llist_node_next(node);
++ query = ares_llist_node_claim(node);
+
+- query = ares_llist_node_claim(node);
++ /* Must come first: node_claim() already destroyed this node, so
++ * ares_detach_query() would otherwise destroy it a second time. */
+ query->node_all_queries = NULL;
+
++ /* Detach from queries_by_qid, the connection and the timeout list
++ * before running user code. Otherwise a reentrant teardown from
++ * within the callback -- ares_set_servers_csv(), or a new query
++ * hitting a connection error -- still finds this query, ends it a
++ * second time and frees it, and the ares_free_query() below then
++ * double-frees. */
++ ares_detach_query(query);
++
+ /* NOTE: its possible this may enqueue new queries */
+ query->callback(query->arg, ARES_ECANCELLED, 0, NULL);
+ ares_free_query(query);
+-
+- node = next;
+ }
+
+ ares_llist_destroy(list_copy);
+@@ -83,5 +91,6 @@ void ares_cancel(ares_channel_t *channel)
+ ares_queue_notify_empty(channel);
+
+ done:
++ ares_deferred_cb_leave(channel);
+ ares_channel_unlock(channel);
+ }
+diff --git a/src/lib/ares_close_sockets.c b/src/lib/ares_close_sockets.c
+index 7bb72c31ec..6be662fdd3 100644
+--- a/src/lib/ares_close_sockets.c
++++ b/src/lib/ares_close_sockets.c
+@@ -41,12 +41,47 @@ static void ares_requeue_queries(ares_conn_t *conn,
+ }
+ }
+
++/*! Release a connection's memory. Split from the unlink below so that the
++ * two can happen at different times: a caller further up the stack may still
++ * hold this pointer, and reading a detached connection is safe where reading
++ * a freed one is not. */
++void ares_conn_reap(ares_conn_t *conn)
++{
++ if (conn == NULL) {
++ return; /* LCOV_EXCL_LINE: DefensiveCoding */
++ }
++
++ ares_buf_destroy(conn->in_buf);
++ ares_buf_destroy(conn->out_buf);
++ ares_llist_destroy(conn->queries_to_conn);
++ ares_free(conn);
++}
++
+ void ares_close_connection(ares_conn_t *conn, ares_status_t requeue_status)
+ {
+- ares_server_t *server = conn->server;
+- ares_channel_t *channel = server->channel;
++ ares_server_t *server;
++ ares_channel_t *channel;
++
++ if (conn == NULL) {
++ return; /* LCOV_EXCL_LINE: DefensiveCoding */
++ }
++
++ /* Already torn down and awaiting reclamation. Reaching here twice is
++ * ordinary once a connection can outlive its teardown: a caller holding it
++ * from before -- handle_conn_error() after a failed write, say -- closes it
++ * again without knowing. Doing the work twice would requeue queries that
++ * have already moved and would put this connection on the pending list a
++ * second time, which is a double free. */
++ if (conn->flags & ARES_CONN_FLAG_DEAD) {
++ return;
++ }
+
+- /* Unlink */
++ server = conn->server;
++ channel = server->channel;
++
++ /* Unlink from everything that can find this connection. After this it is
++ * unreachable by lookup, which is what stops anything new from picking it
++ * up; anything that already holds it is handled by the deferral below. */
+ ares_llist_node_claim(
+ ares_htable_asvp_get_direct(channel->connnode_by_socket, conn->fd));
+ ares_htable_asvp_remove(channel->connnode_by_socket, conn->fd);
+@@ -55,19 +90,40 @@ void ares_close_connection(ares_conn_t *conn, ares_status_t requeue_status)
+ server->tcp_conn = NULL;
+ }
+
+- ares_buf_destroy(conn->in_buf);
+- ares_buf_destroy(conn->out_buf);
++ /* Marked dead as soon as it is unlinked, before anything below can run
++ * application code. ares_requeue_queries() ends queries terminally once
++ * their retries are exhausted, which invokes the application's callback; if
++ * the flag were set after that, a second ares_close_connection() reaching
++ * this connection in the meantime would run the body again -- closing the
++ * descriptor twice and listing the connection for reclamation twice, which
++ * is a double free. It also gives ares_close_sockets() its termination
++ * condition: dead implies unlinked, so its re-read-the-head loop cannot see
++ * a dead connection and spin. */
++ conn->flags |= ARES_CONN_FLAG_DEAD;
+
+ /* Requeue queries to other connections */
+ ares_requeue_queries(conn, requeue_status);
+
+- ares_llist_destroy(conn->queries_to_conn);
+-
+- ares_conn_sock_state_cb_update(conn, ARES_CONN_STATE_NONE);
+-
+- ares_socket_close(channel, conn->fd);
++ /* Hands the descriptor to the queued notification when one is due, so the
++ * application is told to stop watching it before it is closed. Otherwise
++ * nothing will carry it and we close it here. */
++ if (!ares_conn_sock_state_cb_close(conn)) {
++ ares_socket_close(channel, conn->fd);
++ }
++ conn->fd = ARES_SOCKET_BAD;
++
++ /* If a library call is in progress it may be holding this connection --
++ * read_answers() and ares_send_query_int() both do, across code that can
++ * reach here. Keep it readable until that call unwinds. The buffers and
++ * the query list are freed by ares_conn_reap(), so a stale holder sees an
++ * emptied connection rather than freed memory. */
++ if (channel->deferred_cb_depth > 0) {
++ conn->next_pending = channel->pending_conns;
++ channel->pending_conns = conn;
++ return;
++ }
+
+- ares_free(conn);
++ ares_conn_reap(conn);
+ }
+
+ void ares_close_sockets(ares_server_t *server)
+@@ -76,6 +132,10 @@ void ares_close_sockets(ares_server_t *server)
+
+ while ((node = ares_llist_node_first(server->connections)) != NULL) {
+ ares_conn_t *conn = ares_llist_node_val(node);
++ /* This loop re-reads the head each time and relies on the close below
++ * unlinking it. A dead connection returns early without unlinking, so
++ * one on this list would spin forever holding the channel lock. */
++ assert(!(conn->flags & ARES_CONN_FLAG_DEAD));
+ ares_close_connection(conn, ARES_SUCCESS);
+ }
+ }
+diff --git a/src/lib/ares_conn.c b/src/lib/ares_conn.c
+index 6b315b0548..78f57e7d10 100644
+--- a/src/lib/ares_conn.c
++++ b/src/lib/ares_conn.c
+@@ -26,19 +26,210 @@
+ */
+ #include "ares_private.h"
+
+-void ares_conn_sock_state_cb_update(ares_conn_t *conn,
+- ares_conn_state_flags_t flags)
++/*! A queued socket-state notification. Holds the descriptor and the state,
++ * never the connection, so a queued entry cannot outlive what it refers to.
++ *
++ * When \c owns_fd is set, this message carries the only remaining reference to
++ * the descriptor: the connection is gone and the descriptor is deliberately
++ * left open until after the application has been told to stop watching it.
++ * Closing first would let the number be reused -- by application code running
++ * from a deferred query callback, for instance -- before the notification
++ * naming it is delivered. */
++typedef struct {
++ ares_socket_t fd;
++ ares_bool_t readable;
++ ares_bool_t writable;
++ ares_bool_t owns_fd;
++} ares_sock_state_msg_t;
++
++static ares_bool_t ares_sock_state_queue(ares_channel_t *channel,
++ const ares_sock_state_msg_t *msg)
+ {
+- ares_channel_t *channel = conn->server->channel;
++ if (channel->sock_state_queue == NULL) {
++ channel->sock_state_queue = ares_array_create(sizeof(*msg), NULL);
++ if (channel->sock_state_queue == NULL) {
++ return ARES_FALSE; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++ }
++
++ if (ares_array_insertdata_last(channel->sock_state_queue, msg) !=
++ ARES_SUCCESS) {
++ return ARES_FALSE; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++
++ return ARES_TRUE;
++}
++
++/*! Deliver every socket-state notification the channel has queued. Loops
++ * rather than snapshotting: a callback is allowed to re-enter the library and
++ * queue more, and those belong to this same delivery point. */
++static void ares_sock_state_dispatch(ares_channel_t *channel)
++{
++ while (ares_array_len(channel->sock_state_queue) > 0) {
++ ares_sock_state_msg_t msg;
++
++ if (ares_array_claim_at(&msg, sizeof(msg), channel->sock_state_queue, 0) !=
++ ARES_SUCCESS) {
++ break; /* LCOV_EXCL_LINE: DefensiveCoding */
++ }
+
+- if ((conn->state_flags & ARES_CONN_STATE_CBFLAGS) != flags &&
+- channel->sock_state_cb) {
+- channel->sock_state_cb(channel->sock_state_cb_data, conn->fd,
+- flags & ARES_CONN_STATE_READ ? 1 : 0,
+- flags & ARES_CONN_STATE_WRITE ? 1 : 0);
++ if (channel->sock_state_cb != NULL) {
++ /* The public callback takes ints. */
++ channel->sock_state_cb(channel->sock_state_cb_data, msg.fd,
++ msg.readable ? 1 : 0, msg.writable ? 1 : 0);
++ }
++
++ /* Told first, closed second -- the ordering the application depends on to
++ * keep its descriptor set honest. */
++ if (msg.owns_fd) {
++ ares_socket_close(channel, msg.fd);
++ }
++ }
++
++ ares_array_destroy(channel->sock_state_queue);
++ channel->sock_state_queue = NULL;
++}
++
++static void ares_deferred_cb_flush(ares_channel_t *channel)
++{
++ /* Only the outermost frame delivers: anything above us on the stack may
++ * still be holding the connection a reentrant call from one of these
++ * callbacks could free.
++ *
++ * The dispatch below counts as a nesting level of its own. Without that, a
++ * callback that calls back into the library re-enters here through the
++ * enter/leave pair on that call, drains the rest of the queue and destroys
++ * it underneath the loop -- and hands the next notification to the
++ * application from inside the current one. With the counter held, the
++ * nested leave returns immediately and whatever it queued is picked up by
++ * the loop that is already running. */
++ if (channel->deferred_cb_depth > 0) {
++ return;
++ }
++ channel->deferred_cb_depth++;
++
++ /* Both kinds of deferred notification share this one delivery point. Loop
++ * rather than calling each once: a socket-state callback may put the library
++ * on a path that queues a server-state notification, and the reverse, and
++ * both belong to this delivery point rather than the next one. */
++ while (ares_array_len(channel->sock_state_queue) > 0 ||
++ ares_array_len(channel->server_state_queue) > 0) {
++ ares_sock_state_dispatch(channel);
++ ares_server_state_dispatch(channel);
++ }
++
++ /* The outermost call is unwinding and the callbacks above have run, so
++ * nothing can still be holding a server or connection that was unlinked
++ * during it. Now they can be freed. */
++ ares_deferred_reclaim(channel);
++
++ channel->deferred_cb_depth--;
++}
++
++void ares_deferred_reclaim(ares_channel_t *channel)
++{
++ /* Connections first: a pending server's connection list is already empty,
++ * but this keeps the ordering obvious rather than incidental. */
++ while (channel->pending_conns != NULL) {
++ ares_conn_t *conn = channel->pending_conns;
++ channel->pending_conns = conn->next_pending;
++ conn->next_pending = NULL;
++ ares_conn_reap(conn);
++ }
++
++ while (channel->pending_servers != NULL) {
++ ares_server_t *server = channel->pending_servers;
++ channel->pending_servers = server->next_pending;
++ server->next_pending = NULL;
++ ares_server_reap(server);
++ }
++}
++
++void ares_deferred_cb_enter(ares_channel_t *channel)
++{
++ channel->deferred_cb_depth++;
++}
++
++void ares_deferred_cb_leave(ares_channel_t *channel)
++{
++ if (channel->deferred_cb_depth > 0) {
++ channel->deferred_cb_depth--;
++ }
++ ares_deferred_cb_flush(channel);
++}
++
++ares_bool_t ares_conn_sock_state_cb_close(ares_conn_t *conn)
++{
++ ares_channel_t *channel = conn->server->channel;
++ ares_sock_state_msg_t msg;
++
++ /* No callback to run, so nothing will ever carry this descriptor: the
++ * caller closes it itself, exactly as before. */
++ if (channel->sock_state_cb == NULL) {
++ return ARES_FALSE;
++ }
++
++ /* Already reported as unwatched, so no notification is due and no message
++ * will be queued to hold the descriptor. */
++ if ((conn->state_flags & ARES_CONN_STATE_CBFLAGS) == ARES_CONN_STATE_NONE) {
++ return ARES_FALSE;
++ }
++
++ msg.fd = conn->fd;
++ msg.readable = ARES_FALSE;
++ msg.writable = ARES_FALSE;
++ msg.owns_fd = ARES_TRUE;
++
++ if (!ares_sock_state_queue(channel, &msg)) {
++ return ARES_FALSE; /* LCOV_EXCL_LINE: OutOfMemory */
+ }
+
+ conn->state_flags &= ~((unsigned int)ARES_CONN_STATE_CBFLAGS);
++
++ return ARES_TRUE;
++}
++
++void ares_conn_sock_state_cb_update(ares_conn_t *conn,
++ ares_conn_state_flags_t flags)
++{
++ ares_channel_t *channel = conn->server->channel;
++ ares_sock_state_msg_t msg;
++ ares_bool_t changed = ARES_FALSE;
++
++ if ((conn->state_flags & ARES_CONN_STATE_CBFLAGS) != flags) {
++ changed = ARES_TRUE;
++ }
++
++ msg.fd = conn->fd;
++ msg.readable = flags & ARES_CONN_STATE_READ ? ARES_TRUE : ARES_FALSE;
++ msg.writable = flags & ARES_CONN_STATE_WRITE ? ARES_TRUE : ARES_FALSE;
++ msg.owns_fd = ARES_FALSE; /* the connection still owns it */
++
++ if (!changed || channel->sock_state_cb == NULL) {
++ conn->state_flags &= ~((unsigned int)ARES_CONN_STATE_CBFLAGS);
++ conn->state_flags |= flags;
++ return;
++ }
++
++ /* Queue rather than dispatch. This runs in the middle of opening, writing
++ * to or closing a connection, and every caller keeps using that connection
++ * afterwards. The callback is application code that may reentrantly call
++ * ares_cancel() or ares_set_servers_csv(), either of which frees the
++ * connection -- the first through the idle-connection sweep, the second by
++ * destroying the server that owns it. Deliver once no frame still holds
++ * it.
++ *
++ * Only the descriptor and the state are captured, never the connection, and
++ * insertion order is preserved so the application observes the same
++ * sequence it would have seen inline. */
++ if (!ares_sock_state_queue(channel, &msg)) {
++ return; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++
++ /* Recorded as reported only now: on either failure above the connection
++ * stays eligible to notify again, rather than remembering a state the
++ * application was never told about. */
++ conn->state_flags &= ~((unsigned int)ARES_CONN_STATE_CBFLAGS);
+ conn->state_flags |= flags;
+ }
+
+@@ -435,6 +626,16 @@ ares_status_t ares_open_connection(ares_conn_t **conn_out,
+ conn->flags |= ARES_CONN_FLAG_TFO_INITIAL;
+ }
+
++ /* The socket-configure and socket-create callbacks above are application
++ * code, and either may reconfigure the servers -- which destroys the ones
++ * the new configuration omits, including possibly this one. Everything
++ * below dereferences it, starting with conn->server in
++ * ares_conn_set_self_ip(). */
++ if (!ares_server_in_channel(channel, server)) {
++ status = ARES_ECONNREFUSED;
++ goto done;
++ }
++
+ /* Need to store our own ip for DNS cookie support */
+ status = ares_conn_set_self_ip(conn, ARES_TRUE);
+ if (status != ARES_SUCCESS) {
+diff --git a/src/lib/ares_conn.h b/src/lib/ares_conn.h
+index c332de14b1..fc177b84f6 100644
+--- a/src/lib/ares_conn.h
++++ b/src/lib/ares_conn.h
+@@ -49,7 +49,14 @@ typedef enum {
+ * it). Its in-flight queries continue to drain and it is cleaned up once
+ * idle. This is a per-connection signal so that a transient failure does
+ * not evict otherwise-healthy connections to the same server. */
+- ARES_CONN_FLAG_NONEW = 1 << 3
++ ARES_CONN_FLAG_NONEW = 1 << 3,
++ /*! Connection has been torn down: unlinked from every lookup structure, its
++ * descriptor closed or handed to a pending notification, and its queries
++ * requeued. It survives only so that a caller further up the stack which
++ * captured it before the teardown can still read it; see
++ * ares_deferred_reclaim(). Teardown is idempotent -- a second
++ * ares_close_connection() on a dead connection does nothing. */
++ ARES_CONN_FLAG_DEAD = 1 << 4
+ } ares_conn_flags_t;
+
+ typedef enum {
+@@ -84,6 +91,10 @@ struct ares_conn {
+
+ /* list of outstanding queries to this connection */
+ ares_llist_t *queries_to_conn;
++
++ /*! Next connection awaiting reclamation. Set only while this connection is
++ * on channel->pending_conns; see ares_deferred_reclaim(). */
++ ares_conn_t *next_pending;
+ };
+
+ /*! Various buckets for grouping history */
+@@ -168,6 +179,10 @@ struct ares_server {
+
+ /* Link back to owning channel */
+ ares_channel_t *channel;
++
++ /*! Next server awaiting reclamation. Set only while this server is on
++ * channel->pending_servers; see ares_deferred_reclaim(). */
++ ares_server_t *next_pending;
+ };
+
+ void ares_close_connection(ares_conn_t *conn, ares_status_t requeue_status);
+@@ -185,8 +200,24 @@ ares_status_t ares_conn_flush(ares_conn_t *conn);
+ ares_conn_err_t ares_conn_read(ares_conn_t *conn, void *data, size_t len,
+ size_t *read_bytes);
+ ares_conn_t *ares_conn_from_fd(const ares_channel_t *channel, ares_socket_t fd);
+-void ares_conn_sock_state_cb_update(ares_conn_t *conn,
+- ares_conn_state_flags_t flags);
++
++/*! Queue the "stop watching this descriptor" notification for a connection
++ * being torn down, handing the descriptor to that queued message.
++ *
++ * The application must be told to stop watching a descriptor while it is
++ * still open -- close first and the number can be handed to something else,
++ * including by application code running from a deferred query callback,
++ * before the notification naming it is delivered.
++ *
++ * \param[in] conn Connection being closed.
++ * \return ARES_TRUE if the queued notification took the descriptor, in which
++ * case the caller must not close it; ARES_FALSE if no notification is
++ * due, and the caller closes the descriptor itself.
++ */
++ares_bool_t ares_conn_sock_state_cb_close(ares_conn_t *conn);
++
++void ares_conn_sock_state_cb_update(ares_conn_t *conn,
++ ares_conn_state_flags_t flags);
+ ares_conn_err_t ares_socket_recv(ares_channel_t *channel, ares_socket_t s,
+ ares_bool_t is_tcp, void *data,
+ size_t data_len, size_t *read_bytes);
+diff --git a/src/lib/ares_destroy.c b/src/lib/ares_destroy.c
+index 1e5706e0e0..e0534c800d 100644
+--- a/src/lib/ares_destroy.c
++++ b/src/lib/ares_destroy.c
+@@ -69,17 +69,31 @@ void ares_destroy(ares_channel_t *channel)
+ * callbacks need to hold a channel lock. */
+ ares_channel_lock(channel);
+
+- /* Destroy all queries */
+- node = ares_llist_node_first(channel->all_queries);
+- while (node != NULL) {
+- ares_llist_node_t *next = ares_llist_node_next(node);
+- ares_query_t *query = ares_llist_node_claim(node);
+-
++ /* Destroy all queries.
++ *
++ * The queries are detached before their callbacks run. Claiming the node
++ * only unlinks a query from all_queries; it stays in queries_by_qid, on
++ * conn->queries_to_conn and in queries_by_timeout. A reentrant teardown
++ * from inside the callback -- ares_set_servers_csv(), or a new query
++ * hitting a connection error -- would otherwise still find the query, end
++ * it a second time (invoking the application callback twice for one
++ * lookup) and free it, and the ares_free_query() below would double-free.
++ *
++ * The loop re-reads the first node each iteration rather than caching the
++ * next one, since a callback can cause other queries in this same list to
++ * be ended and their nodes destroyed. No list swap is needed: sys_up is
++ * already cleared above, so ares_send_nolock() refuses new queries and
++ * nothing can be added while we drain. */
++ while ((node = ares_llist_node_first(channel->all_queries)) != NULL) {
++ ares_query_t *query = ares_llist_node_claim(node);
++
++ /* Must come first: node_claim() already destroyed this node, so
++ * ares_detach_query() would otherwise destroy it a second time. */
+ query->node_all_queries = NULL;
++ ares_detach_query(query);
++
+ query->callback(query->arg, ARES_EDESTRUCTION, 0, NULL);
+ ares_free_query(query);
+-
+- node = next;
+ }
+
+ ares_queue_notify_empty(channel);
+@@ -93,7 +107,28 @@ void ares_destroy(ares_channel_t *channel)
+ assert(ares_slist_len(channel->queries_by_timeout) == 0);
+ #endif
+
++ /* Tearing down the servers closes every remaining connection. Applications
++ * rely on being told about those closures so they can drop the descriptors
++ * from their own event loop, so the notifications are still delivered here
++ * rather than discarded -- just after the teardown instead of during it. */
++ ares_deferred_cb_enter(channel);
+ ares_destroy_servers_state(channel);
++ ares_deferred_cb_leave(channel);
++
++ /* The leave above delivered and destroyed both queues and reclaimed
++ * everything the teardown unlinked, so these are normally no-ops. They are
++ * not redundant: if the first insert into a freshly created queue fails,
++ * the array is left allocated and empty, the flush loop never runs because
++ * both queues are empty, and nothing else would ever free it. */
++ ares_array_destroy(channel->sock_state_queue);
++ channel->sock_state_queue = NULL;
++ ares_array_destroy(channel->server_state_queue);
++ channel->server_state_queue = NULL;
++
++#ifndef NDEBUG
++ assert(channel->pending_servers == NULL);
++ assert(channel->pending_conns == NULL);
++#endif
+
+ #ifndef NDEBUG
+ assert(ares_htable_asvp_num_keys(channel->connnode_by_socket) == 0);
+@@ -134,17 +169,47 @@ void ares_destroy(ares_channel_t *channel)
+ ares_free(channel);
+ }
+
+-void ares_destroy_server(ares_server_t *server)
++/*! Release a server's memory. Split from ares_destroy_server() for the same
++ * reason ares_conn_reap() is split out: a caller further up the stack may
++ * still hold this pointer. */
++void ares_server_reap(ares_server_t *server)
+ {
+ if (server == NULL) {
+ return; /* LCOV_EXCL_LINE: DefensiveCoding */
+ }
+
+- ares_close_sockets(server);
+ ares_llist_destroy(server->connections);
+ ares_free(server);
+ }
+
++void ares_destroy_server(ares_server_t *server)
++{
++ ares_channel_t *channel;
++
++ if (server == NULL) {
++ return; /* LCOV_EXCL_LINE: DefensiveCoding */
++ }
++
++ channel = server->channel;
++
++ /* Closes and unlinks every connection; each is deferred or reaped by
++ * ares_close_connection() on the same rule applied below. */
++ ares_close_sockets(server);
++
++ /* The caller has already unlinked this server from channel->servers, so it
++ * can no longer be found -- ares_server_in_channel() and
++ * ares_slist_node_find() both report it gone, which is what callers check
++ * before acting on one. But a library call in progress may still be
++ * holding the pointer, so keep it readable until that call unwinds. */
++ if (channel != NULL && channel->deferred_cb_depth > 0) {
++ server->next_pending = channel->pending_servers;
++ channel->pending_servers = server;
++ return;
++ }
++
++ ares_server_reap(server);
++}
++
+ void ares_destroy_servers_state(ares_channel_t *channel)
+ {
+ ares_slist_node_t *node;
+diff --git a/src/lib/ares_private.h b/src/lib/ares_private.h
+index 04d4576ed2..0a1029e0f8 100644
+--- a/src/lib/ares_private.h
++++ b/src/lib/ares_private.h
+@@ -147,7 +147,10 @@ typedef struct ares_query ares_query_t;
+ struct ares_query {
+ /* Query ID from qbuf, for faster lookup, and current timeout */
+ unsigned short qid; /* host byte order */
+- ares_timeval_t ts; /*!< Timestamp query was sent */
++ /*! Distinguishes this query from any later one handed the same qid.
++ * Query ids are 16-bit and recycled; this counter is not. */
++ size_t serial;
++ ares_timeval_t ts; /*!< Timestamp query was sent */
+ ares_timeval_t timeout;
+ ares_channel_t *channel;
+
+@@ -227,6 +230,9 @@ struct ares_channeldata {
+ /* Server addresses and communications state. Sorted by least consecutive
+ * failures, followed by the configuration order if failures are equal. */
+ ares_slist_t *servers;
++ /*! Bumped by each ares_servers_update(). Lets the stale-server removal loop
++ * tell that a nested reconfiguration reconciled the list underneath it. */
++ size_t servers_generation;
+
+ /* random state to use when generating new ids and generating retry penalties
+ */
+@@ -237,6 +243,10 @@ struct ares_channeldata {
+ /* Queries bucketed by qid, for quickly dispatching DNS responses: */
+ ares_htable_szvp_t *queries_by_qid;
+
++ /*! Monotonic source for ares_query_t.serial. Never reused for the life of
++ * the channel, so a recycled query id cannot impersonate an older query. */
++ size_t query_serial;
++
+ /* Queries bucketed by timeout, for quickly handling timeouts: */
+ ares_slist_t *queries_by_timeout;
+
+@@ -248,6 +258,29 @@ struct ares_channeldata {
+
+ ares_sock_state_cb sock_state_cb;
+ void *sock_state_cb_data;
++ /*! Socket-state notifications queued during processing, delivered once the
++ * library is no longer holding a connection a reentrant call could free.
++ * Insertion order is preserved, so an application observes the same
++ * sequence of state changes it would have seen inline. */
++ ares_array_t *sock_state_queue;
++ /*! Depth of nested library entry points that may produce a deferred
++ * application notification. Queues are delivered as this returns to
++ * zero. Shared by every deferred callback kind rather than one counter
++ * per kind, so the delivery rule exists in exactly one place. */
++ size_t deferred_cb_depth;
++
++ /*! Servers and connections that have been unlinked from every lookup
++ * structure but not yet freed, because a library call was in progress and
++ * may still hold a pointer to them. Drained by the same flush that
++ * delivers deferred notifications, once no frame can still be holding one.
++ *
++ * This is what makes a stale ares_server_t or ares_conn_t readable rather
++ * than freed for the remainder of the call that captured it. Callers
++ * still revalidate before *acting* on one -- ares_server_in_channel() and
++ * friends -- but a missed check is now "used a server that was removed"
++ * rather than a use-after-free. */
++ ares_server_t *pending_servers;
++ ares_conn_t *pending_conns;
+
+ ares_sock_create_callback sock_create_cb;
+ void *sock_create_cb_data;
+@@ -295,6 +328,10 @@ struct ares_channeldata {
+ /* Callback triggered when a server has a successful or failed response */
+ ares_server_state_callback server_state_cb;
+ void *server_state_cb_data;
++ /*! Server-state notifications queued during processing, dispatched once the
++ * library is no longer holding pointers a reentrant callback could free.
++ * See ares_deferred_cb_leave(). */
++ ares_array_t *server_state_queue;
+
+ /* TRUE if a reinit is pending. Reinit spawns a thread to read the system
+ * configuration and then apply the configuration since configuration
+@@ -308,6 +345,11 @@ struct ares_channeldata {
+ * system config changes might get triggered and we need a flag to make
+ * sure we don't take action. */
+ ares_bool_t sys_up;
++
++ /*! Set while ares_send_nolock() is running the refusal notification for a
++ * channel being destroyed. Bounds the recursion at one frame when the
++ * application's callback responds by starting another lookup. */
++ ares_bool_t in_shutdown_refusal;
+ };
+
+ /* Does the domain end in ".onion" or ".onion."? Case-insensitive. */
+@@ -351,6 +393,16 @@ void *ares_dnsrec_convert_arg(ares_callback callback, void *arg);
+ void ares_dnsrec_convert_cb(void *arg, ares_status_t status, size_t timeouts,
+ const ares_dns_record_t *dnsrec);
+
++/*! Unlink a query from every list and table that tracks it.
++ *
++ * Must be called before running application code that could reach the query
++ * again, so a reentrant teardown cannot find it and end it a second time.
++ *
++ * \param[in] query Query to detach. Safe to call more than once on the
++ * same query.
++ */
++void ares_detach_query(ares_query_t *query);
++
+ void ares_free_query(ares_query_t *query);
+
+ unsigned short ares_generate_new_id(ares_rand_state *state);
+@@ -390,7 +442,6 @@ ares_status_t ares_sysconfig_set_options(ares_sysconfig_t *sysconfig,
+
+ ares_status_t ares_init_by_environment(ares_sysconfig_t *sysconfig);
+
+-
+ typedef ares_status_t (*ares_sysconfig_line_cb_t)(const ares_channel_t *channel,
+ ares_sysconfig_t *sysconfig,
+ ares_buf_t *line);
+@@ -589,6 +640,60 @@ ares_status_t ares_dns_name_write(ares_buf_t *buf, ares_llist_t **list,
+ */
+ void ares_queue_notify_empty(ares_channel_t *channel);
+
++/*! Is this server still installed on the channel?
++ *
++ * Application callbacks may reconfigure the servers, which destroys any that
++ * the new configuration omits. A raw ares_server_t captured before such a
++ * callback must be revalidated before it is used again.
++ *
++ * \param[in] channel Initialized ares channel.
++ * \param[in] server Server pointer captured earlier.
++ * \return ARES_TRUE if still present.
++ */
++ares_bool_t ares_server_in_channel(const ares_channel_t *channel,
++ const ares_server_t *server);
++
++/*! Free everything awaiting reclamation on the channel.
++ *
++ * Called only from the deferred-callback flush, at the point where the
++ * outermost library call is unwinding and no frame can still hold a pointer
++ * to an unlinked server or connection.
++ *
++ * \param[in] channel Initialized ares channel.
++ */
++void ares_deferred_reclaim(ares_channel_t *channel);
++
++/*! Free one connection's memory. Only for the deferred-reclaim path and the
++ * immediate path in ares_close_connection(). */
++void ares_conn_reap(ares_conn_t *conn);
++
++/*! Free one server's memory. Only for the deferred-reclaim path and the
++ * immediate path in ares_destroy_server(). */
++void ares_server_reap(ares_server_t *server);
++
++/*! Enter a region that may produce application notifications the library is
++ * not in a position to deliver yet -- socket-state and server-state changes.
++ * Nesting is counted; queued notifications are delivered by the outermost
++ * leave.
++ *
++ * \param[in] channel Initialized ares channel.
++ */
++void ares_deferred_cb_enter(ares_channel_t *channel);
++
++/*! Leave such a region. The outermost leave delivers the queues, at which
++ * point the library holds no connection a reentrant call could free.
++ *
++ * \param[in] channel Initialized ares channel.
++ */
++void ares_deferred_cb_leave(ares_channel_t *channel);
++
++/*! Deliver every server-state notification the channel has queued. Called
++ * only from the shared deferred-callback flush.
++ *
++ * \param[in] channel Initialized ares channel.
++ */
++void ares_server_state_dispatch(ares_channel_t *channel);
++
+ #define ARES_CONFIG_CHECK(x) \
+ (x && x->lookups && ares_slist_len(x->servers) > 0 && x->timeout > 0 && \
+ x->tries > 0)
+@@ -636,7 +741,6 @@ typedef struct ares_event_thread ares_event_thread_t;
+ void ares_event_thread_destroy(ares_channel_t *channel);
+ ares_status_t ares_event_thread_init(ares_channel_t *channel);
+
+-
+ #ifdef _WIN32
+ # define HOSTENT_ADDRTYPE_TYPE short
+ # define HOSTENT_LENGTH_TYPE short
+diff --git a/src/lib/ares_process.c b/src/lib/ares_process.c
+index b2316c4b33..82f53610fb 100644
+--- a/src/lib/ares_process.c
++++ b/src/lib/ares_process.c
+@@ -69,7 +69,6 @@ static ares_status_t ares_send_query_int(ares_server_t *requested_server,
+ ares_query_t *query,
+ const ares_timeval_t *now,
+ ares_array_t **requeue);
+-static void ares_detach_query(ares_query_t *query);
+
+ static void ares_query_remove_from_conn(ares_query_t *query)
+ {
+@@ -81,14 +80,32 @@ static void ares_query_remove_from_conn(ares_query_t *query)
+ query->conn = NULL;
+ }
+
++/*! A queued server-state notification. Holds the formatted address rather
++ * than the server, so it stays valid however the server list changes. */
++typedef struct {
++ char *server_string;
++ ares_bool_t success;
++ int flags;
++} ares_server_state_msg_t;
++
++static void ares_server_state_msg_free(void *arg)
++{
++ ares_server_state_msg_t *msg = arg;
++ if (msg == NULL) {
++ return; /* LCOV_EXCL_LINE: DefensiveCoding */
++ }
++ ares_free(msg->server_string);
++}
++
+ /* Invoke the server state callback after a success or failure */
+ static void invoke_server_state_cb(const ares_server_t *server,
+ ares_bool_t success, int flags)
+ {
+- const ares_channel_t *channel = server->channel;
+- ares_buf_t *buf;
+- ares_status_t status;
+- char *server_string;
++ ares_channel_t *channel = server->channel;
++ ares_buf_t *buf;
++ ares_status_t status;
++ char *server_string;
++ ares_server_state_msg_t msg;
+
+ if (channel->server_state_cb == NULL) {
+ return;
+@@ -111,9 +128,57 @@ static void invoke_server_state_cb(const ares_server_t *server,
+ return; /* LCOV_EXCL_LINE: OutOfMemory */
+ }
+
+- channel->server_state_cb(server_string, success, flags,
+- channel->server_state_cb_data);
+- ares_free(server_string);
++ /* Queue rather than dispatch. This runs in the middle of processing, and
++ * every caller keeps using its query / connection / server afterwards. The
++ * callback is application code that may reentrantly call ares_cancel(),
++ * which frees those objects -- so dispatch once the library is no longer
++ * holding them. Same philosophy as the deferred query-callback dispatch.
++ *
++ * Only the formatted address is captured, never the ares_server_t, so a
++ * queued entry cannot outlive anything it points at. */
++ if (channel->server_state_queue == NULL) {
++ channel->server_state_queue = ares_array_create(
++ sizeof(ares_server_state_msg_t), ares_server_state_msg_free);
++ if (channel->server_state_queue == NULL) {
++ /* LCOV_EXCL_START: OutOfMemory */
++ ares_free(server_string);
++ return;
++ /* LCOV_EXCL_STOP */
++ }
++ }
++
++ msg.server_string = server_string;
++ msg.success = success;
++ msg.flags = flags;
++
++ if (ares_array_insertdata_last(channel->server_state_queue, &msg) !=
++ ARES_SUCCESS) {
++ ares_free(server_string); /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++}
++
++/*! Deliver every server-state notification the channel has queued. Loops
++ * rather than snapshotting: a callback is allowed to re-enter the library and
++ * queue more, and those belong to this same delivery point. */
++void ares_server_state_dispatch(ares_channel_t *channel)
++{
++ while (ares_array_len(channel->server_state_queue) > 0) {
++ ares_server_state_msg_t msg;
++
++ if (ares_array_claim_at(&msg, sizeof(msg), channel->server_state_queue,
++ 0) != ARES_SUCCESS) {
++ break; /* LCOV_EXCL_LINE: DefensiveCoding */
++ }
++
++ if (channel->server_state_cb != NULL) {
++ channel->server_state_cb(msg.server_string, msg.success, msg.flags,
++ channel->server_state_cb_data);
++ }
++ ares_free(msg.server_string);
++ }
++
++ ares_array_destroy(channel->server_state_queue);
++ channel->server_state_queue = NULL;
+ }
+
+ static void server_increment_failures(ares_server_t *server,
+@@ -204,6 +269,8 @@ static ares_status_t ares_process_fds_nolock(ares_channel_t *channel,
+ return ARES_EFORMERR; /* LCOV_EXCL_LINE: DefensiveCoding */
+ }
+
++ ares_deferred_cb_enter(channel);
++
+ ares_tvnow(&now);
+
+ /* Process write events */
+@@ -244,6 +311,8 @@ static ares_status_t ares_process_fds_nolock(ares_channel_t *channel,
+ }
+
+ done:
++ ares_deferred_cb_leave(channel);
++
+ if (status == ARES_ENOMEM) {
+ return ARES_ENOMEM;
+ }
+@@ -553,6 +622,8 @@ typedef enum {
+ typedef struct {
+ requeue_type_t type; /* type of entry, requeue or endquery */
+ unsigned short qid; /* query id */
++ size_t serial; /* identifies the query the qid meant when
++ * this entry was appended */
+ ares_server_t *server; /* requeue only: optional */
+ ares_status_t status; /* endquery only */
+ ares_dns_record_t *dnsrec; /* endquery only: optional */
+@@ -578,6 +649,7 @@ static ares_status_t ares_append_requeue_int(ares_array_t **requeue,
+
+ entry.type = type;
+ entry.qid = query->qid;
++ entry.serial = query->serial;
+ entry.server = server;
+ entry.status = status;
+ entry.dnsrec = dnsrec;
+@@ -601,6 +673,53 @@ static ares_status_t ares_append_endqueue(ares_array_t **requeue,
+ dnsrec);
+ }
+
++/*! Is the query the caller captured still the one holding \a qid?
++ *
++ * A query id is a 16-bit wire value reissued as soon as the query holding it
++ * is detached, so it names a slot rather than a query, and comparing the
++ * pointer as well does not help: the replacement is often allocated at the
++ * address the freed one had. The serial is a channel-wide counter that is
++ * never reused. */
++static ares_bool_t ares_query_is_live(const ares_channel_t *channel,
++ unsigned short qid, size_t serial)
++{
++ const ares_query_t *query =
++ ares_htable_szvp_get_direct(channel->queries_by_qid, qid);
++
++ if (query == NULL || query->serial != serial) {
++ return ARES_FALSE;
++ }
++
++ return ARES_TRUE;
++}
++
++/*! Is this exact server object still in the channel's server list?
++ *
++ * Compares pointers only and never dereferences \a server. Deferred
++ * reclamation keeps an unlinked server readable for the rest of the call
++ * that captured it, so reading through it is no longer a use-after-free --
++ * but it has been removed from the configuration and must not be acted on,
++ * which is what this reports. A channel has a handful of servers, so the
++ * linear scan does not matter. */
++ares_bool_t ares_server_in_channel(const ares_channel_t *channel,
++ const ares_server_t *server)
++{
++ ares_slist_node_t *node;
++
++ if (server == NULL) {
++ return ARES_FALSE;
++ }
++
++ for (node = ares_slist_node_first(channel->servers); node != NULL;
++ node = ares_slist_node_next(node)) {
++ if (ares_slist_node_val(node) == server) {
++ return ARES_TRUE;
++ }
++ }
++
++ return ARES_FALSE;
++}
++
+ /* Drain the deferred requeue/endqueue list iteratively. All flush sites
+ * (read_answers(), process_timeouts(), and ares_send_query()) funnel through
+ * here so that:
+@@ -636,11 +755,35 @@ static ares_status_t ares_flush_requeue(ares_channel_t *channel,
+
+ query = ares_htable_szvp_get_direct(channel->queries_by_qid, entry.qid);
+
++ /* A query id is a 16-bit wire value and generate_unique_qid() only avoids
++ * ids that are live when it runs. Within a single drain, a callback can
++ * cancel a query whose entry is still in this array -- releasing its id --
++ * and start a new lookup that is handed the same id. The lookup above
++ * would then resolve this entry to a completely different query: an
++ * endquery entry would deliver one lookup's answer to another and free it,
++ * a requeue entry would put an in-flight query on the wire twice. The
++ * serial is a channel-wide counter that is never reused, so it tells the
++ * two apart. */
++ if (query != NULL && query->serial != entry.serial) {
++ query = NULL;
++ }
++
+ if (entry.type == REQUEUE_REQUEUE) {
+ /* Query disappeared (e.g. a prior callback in this drain cancelled it) */
+ if (query == NULL) {
+ continue;
+ }
++ /* entry.server is a raw pointer captured before any callback in this
++ * drain ran. A callback may legally re-enter the public API -- the
++ * channel lock is recursive -- and ares_set_servers*() destroys servers
++ * that are absent from the new configuration, so it may already be
++ * freed. The query above is revalidated by qid for exactly this
++ * reason; do the same for the server, falling back to ordinary
++ * selection when it has gone. */
++ if (!ares_server_in_channel(channel, entry.server)) {
++ entry.server = NULL;
++ }
++
+ /* Re-dispatch via the internal entrypoint so any further requeues are
+ * appended back onto this same list and drained by the loop above,
+ * rather than recursing. */
+@@ -1377,6 +1520,7 @@ ares_status_t ares_send_query(ares_server_t *requested_server,
+ ares_channel_t *channel = query->channel;
+ ares_array_t *requeue = NULL;
+ unsigned short qid = query->qid;
++ size_t serial = query->serial;
+ ares_status_t status;
+
+ status = ares_send_query_int(requested_server, query, now, &requeue);
+@@ -1393,8 +1537,7 @@ ares_status_t ares_send_query(ares_server_t *requested_server,
+ * been freed. Do not dereference 'query' here. If it is no longer tracked
+ * it ended, so don't report success to the caller (which would, e.g., cause
+ * ares_send_nolock() to write to a now-freed *qid). */
+- if (status == ARES_SUCCESS &&
+- ares_htable_szvp_get_direct(channel->queries_by_qid, qid) == NULL) {
++ if (status == ARES_SUCCESS && !ares_query_is_live(channel, qid, serial)) {
+ status = ARES_ETIMEOUT;
+ }
+
+@@ -1412,6 +1555,9 @@ static ares_status_t ares_send_query_int(ares_server_t *requested_server,
+ size_t timeplus;
+ ares_status_t status;
+ ares_bool_t probe_downed_server = ARES_TRUE;
++ /* Captured before any application callback below, which may free the query */
++ unsigned short qid = query->qid;
++ size_t serial = query->serial;
+
+ /* Choose the server to send the query to */
+ if (requested_server != NULL) {
+@@ -1443,6 +1589,32 @@ static ares_status_t ares_send_query_int(ares_server_t *requested_server,
+ conn = ares_fetch_connection(channel, server, query);
+ if (conn == NULL) {
+ status = ares_open_connection(&conn, channel, server, query->using_tcp);
++
++ /* Opening a connection runs application code -- the socket-open function
++ * from ares_set_socket_functions_ex(), and the ares_set_socket_callback()
++ * and ares_set_socket_configure_callback() callbacks -- any of which may
++ * reentrantly call ares_cancel() and free this query. Re-check liveness
++ * by the qid captured at entry rather than dereferencing a possibly-freed
++ * query. */
++ if (!ares_query_is_live(channel, qid, serial)) {
++ return ARES_ECANCELLED;
++ }
++
++ /* Those same callbacks may have reconfigured the servers, which frees the
++ * ones the new configuration omits. 'server' was captured before the
++ * open; everything below reads it, including server_increment_failures()
++ * on the failure paths of the switch.
++ *
++ * Requeue rather than return: every exit from this function must either
++ * enqueue the query or end it, and the query is still live here -- it has
++ * not been written, is not attached to a connection, and on a first send
++ * has no timeout node, so returning would strand it forever.
++ * query->conn is NULL, so this does not read through the freed server. */
++ if (!ares_server_in_channel(channel, server)) {
++ return ares_requeue_query(query, now, ARES_ECONNREFUSED, ARES_TRUE, NULL,
++ requeue);
++ }
++
+ switch (status) {
+ /* Good result, continue on */
+ case ARES_SUCCESS:
+@@ -1464,6 +1636,14 @@ static ares_status_t ares_send_query_int(ares_server_t *requested_server,
+
+ /* Write the query */
+ status = ares_conn_query_write(conn, query, now);
++
++ /* Writing runs application code too: ares_conn_query_write() reaches the
++ * send function installed by ares_set_socket_functions_ex(), which may
++ * reentrantly call ares_cancel() with the same hazard as above. */
++ if (!ares_query_is_live(channel, qid, serial)) {
++ return ARES_ECANCELLED;
++ }
++
+ switch (status) {
+ /* Good result, continue on */
+ case ARES_SUCCESS:
+@@ -1479,6 +1659,17 @@ static ares_status_t ares_send_query_int(ares_server_t *requested_server,
+ case ARES_ECONNREFUSED:
+ case ARES_EBADFAMILY:
+ handle_conn_error(conn, ARES_TRUE, status);
++ /* handle_conn_error() -> ares_close_connection() ->
++ * ares_requeue_queries() walks conn->queries_to_conn and may terminally
++ * end other queries on this connection. If one of their callbacks
++ * reentrantly calls ares_cancel(), this query is freed too -- it is still
++ * linked in all_queries, since it only joins conn->queries_to_conn on the
++ * success path below. Re-check liveness by the qid captured at entry
++ * rather than dereferencing a possibly-freed query. Mirrors the guard in
++ * ares_send_query(). */
++ if (!ares_query_is_live(channel, qid, serial)) {
++ return ARES_ECONNREFUSED;
++ }
+ status = ares_requeue_query(query, now, status, ARES_TRUE, NULL, requeue);
+ if (status == ARES_ETIMEOUT) {
+ status = ARES_ECONNREFUSED;
+@@ -1597,11 +1788,18 @@ static ares_bool_t same_questions(const ares_query_t *query,
+ return rv;
+ }
+
+-static void ares_detach_query(ares_query_t *query)
++void ares_detach_query(ares_query_t *query)
+ {
+ /* Remove the query from all the lists in which it is linked */
+ ares_query_remove_from_conn(query);
+- ares_htable_szvp_remove(query->channel->queries_by_qid, query->qid);
++ /* Only release the qid slot if it is still ours. A query detached before
++ * its callback can have its qid reissued to a lookup started from within
++ * that callback, and the ares_free_query() that follows detaches a second
++ * time -- which would otherwise evict the new lookup instead. */
++ if (ares_htable_szvp_get_direct(query->channel->queries_by_qid, query->qid) ==
++ query) {
++ ares_htable_szvp_remove(query->channel->queries_by_qid, query->qid);
++ }
+ ares_llist_node_destroy(query->node_all_queries);
+ query->node_all_queries = NULL;
+ }
+@@ -1624,6 +1822,16 @@ static void end_query(ares_channel_t *channel, ares_server_t *server,
+ return;
+ }
+
++ /* Detach from all lookup lists before the callback, otherwise a reentrant
++ * ares_cancel() from within it would find this query still linked, free it,
++ * and the ares_free_query() below would double-free. Mirrors
++ * ares_flush_requeue() for every synchronous path that reaches here with a
++ * NULL requeue: connection teardown via handle_conn_error(), and server
++ * removal via ares_servers_update() and ares_destroy_servers_state(), both
++ * of which reach ares_close_sockets().
++ * ares_detach_query() may safely run twice on the same query. */
++ ares_detach_query(query);
++
+ /* Invoke the callback. */
+ query->callback(query->arg, status, query->timeouts, dnsrec);
+ ares_free_query(query);
+@@ -1631,7 +1839,8 @@ static void end_query(ares_channel_t *channel, ares_server_t *server,
+ /* Check and notify if no other queries are enqueued on the channel. This
+ * must come after the callback and freeing the query for 2 reasons.
+ * 1) The callback itself may enqueue a new query
+- * 2) Technically the current query isn't detached until it is free()'d.
++ * 2) The current query is detached above, before the callback, so by this
++ * point it is no longer tracked.
+ */
+ ares_queue_notify_empty(channel);
+ }
+diff --git a/src/lib/ares_send.c b/src/lib/ares_send.c
+index 6efa9580b2..2e0482bf19 100644
+--- a/src/lib/ares_send.c
++++ b/src/lib/ares_send.c
+@@ -117,6 +117,27 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server,
+ unsigned short id = generate_unique_qid(channel);
+ const ares_dns_record_t *dnsrec_resp = NULL;
+
++ /* A channel being destroyed accepts no new queries. ares_destroy(3)
++ * documents that a callback must not add new requests to a channel being
++ * destroyed. Refuse it, but still notify: ARES_EDESTRUCTION is documented
++ * in ares_query(3), ares_send(3), ares_search(3) and ares_getaddrinfo(3) as
++ * a status delivered to the callback, and every caller frees its own
++ * context from there.
++ *
++ * Not notified if we are already inside such a notification: an application
++ * whose callback starts a replacement lookup on every invocation would
++ * otherwise re-enter here from within the callback without bound and
++ * exhaust the stack. At that depth it is already past the contract
++ * ares_destroy(3) documents. */
++ if (!channel->sys_up) {
++ if (!channel->in_shutdown_refusal) {
++ channel->in_shutdown_refusal = ARES_TRUE;
++ callback(arg, ARES_EDESTRUCTION, 0, NULL);
++ channel->in_shutdown_refusal = ARES_FALSE;
++ }
++ return ARES_EDESTRUCTION;
++ }
++
+ ares_tvnow(&now);
+
+ if (ares_slist_len(channel->servers) == 0) {
+@@ -145,6 +166,7 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server,
+
+ query->channel = channel;
+ query->qid = id;
++ query->serial = ++channel->query_serial;
+ query->timeout.sec = 0;
+ query->timeout.usec = 0;
+ query->using_tcp =
+@@ -209,6 +231,12 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server,
+ */
+ if (!ares_htable_szvp_insert(channel->queries_by_qid, query->qid, query)) {
+ /* LCOV_EXCL_START: OutOfMemory */
++ /* The query is already chained into all_queries, so a reentrant
++ * ares_cancel() from the callback below would find it, run the
++ * application callback a second time for one lookup, and free it -- and
++ * the ares_free_query() here would then double-free. Same ordering as
++ * ares_cancel() and ares_destroy(): unlink first, notify second. */
++ ares_detach_query(query);
+ callback(arg, ARES_ENOMEM, 0, NULL);
+ ares_free_query(query);
+ return ARES_ENOMEM;
+@@ -217,10 +245,17 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server,
+
+ /* Perform the first query action. */
+
++ /* Sending opens and writes to connections and can mark a server down, both
++ * of which notify. Deliver those once we are done with the connection and
++ * the server, not part-way through. */
++ ares_deferred_cb_enter(channel);
+ status = ares_send_query(server, query, &now);
++ ares_deferred_cb_leave(channel);
++
+ if (status == ARES_SUCCESS && qid) {
+ *qid = id;
+ }
++
+ return status;
+ }
+
+diff --git a/src/lib/ares_update_servers.c b/src/lib/ares_update_servers.c
+index f8d441accf..50a9c27925 100644
+--- a/src/lib/ares_update_servers.c
++++ b/src/lib/ares_update_servers.c
+@@ -740,17 +740,36 @@ static ares_bool_t ares_servers_remove_stale(ares_channel_t *channel,
+ {
+ ares_bool_t stale_removed = ARES_FALSE;
+ ares_slist_node_t *snode = ares_slist_node_first(channel->servers);
++ size_t generation = channel->servers_generation;
+
++ /* Re-read from the head each pass rather than caching the next node.
++ * ares_slist_node_destroy() below reaches application callbacks, by way of
++ * ares_destroy_server() -> ares_close_sockets() -> ares_requeue_queries(),
++ * and a nested reconfiguration from one of those destroys the remaining
++ * stale servers -- including whichever one a cached pointer referred to. */
+ while (snode != NULL) {
+- ares_slist_node_t *snext = ares_slist_node_next(snode);
+ const ares_server_t *server = ares_slist_node_val(snode);
+- if (!ares_server_in_newconfig(server, srvlist)) {
+- /* This will clean up all server state via the destruction callback and
+- * move any queries to new servers */
+- ares_slist_node_destroy(snode);
+- stale_removed = ARES_TRUE;
++
++ if (ares_server_in_newconfig(server, srvlist)) {
++ snode = ares_slist_node_next(snode);
++ continue;
+ }
+- snode = snext;
++
++ /* This will clean up all server state via the destruction callback and
++ * move any queries to new servers */
++ ares_slist_node_destroy(snode);
++ stale_removed = ARES_TRUE;
++
++ /* A callback reached from the destroy above may have reconfigured the
++ * server list against a newer configuration. That call has already
++ * reconciled the whole list, so whatever remains belongs to it and not to
++ * srvlist -- stop rather than deleting its servers. */
++ if (channel->servers_generation != generation) {
++ break;
++ }
++
++ /* The callbacks above may have removed further servers, so restart. */
++ snode = ares_slist_node_first(channel->servers);
+ }
+ return stale_removed;
+ }
+@@ -775,6 +794,14 @@ ares_status_t ares_servers_update(ares_channel_t *channel,
+ return ARES_EFORMERR; /* LCOV_EXCL_LINE: DefensiveCoding */
+ }
+
++ /* Removing servers closes their connections, which notifies. Deliver
++ * once this call is done rather than from inside the teardown. */
++ ares_deferred_cb_enter(channel);
++
++ /* Bumped before anything below can reach an application callback, so a
++ * nested reconfiguration is distinguishable from our own work. */
++ channel->servers_generation++;
++
+ /* NOTE: a NULL or zero entry server list is considered valid due to
+ * real-world people needing support for this for their test harnesses
+ */
+@@ -843,6 +870,7 @@ ares_status_t ares_servers_update(ares_channel_t *channel,
+ status = ARES_SUCCESS;
+
+ done:
++ ares_deferred_cb_leave(channel);
+ return status;
+ }
+
+diff --git a/test/ares-test-mock.cc b/test/ares-test-mock.cc
+index c0c0279abb..2158c5a913 100644
+--- a/test/ares-test-mock.cc
++++ b/test/ares-test-mock.cc
+@@ -31,6 +31,11 @@
+ #include <sys/stat.h>
+ #endif
+
++#ifndef _WIN32
++# include <errno.h>
++# include <fcntl.h>
++#endif
++
+ #include <sstream>
+ #include <vector>
+
+@@ -1914,6 +1919,7 @@ TEST_P(MockRetryDepthChannelTest, HighRetryNoStackOverflow) {
+ struct CancelInCbData {
+ ares_channel_t *channel;
+ bool done;
++ size_t cbs;
+ };
+
+ static void CancelChannelCallback(void *arg, ares_status_t status,
+@@ -1925,10 +1931,1071 @@ static void CancelChannelCallback(void *arg, ares_status_t status,
+ (void)timeouts;
+ (void)dnsrec;
+ data->done = true;
++ data->cbs++;
+ /* Reentrant cancel from within the callback. Must not double-free. */
+ ares_cancel(data->channel);
+ }
+
++// ares_destroy() notifies each still-running query that the channel is going
++// away, and holds a pointer to the next one in its list while doing so. A
++// reentrant ares_cancel() from one of those callbacks frees every remaining
++// query -- including that cached next, which ares_destroy() then follows.
++//
++// ares_cancel() is immune to the same pattern because it swaps the list head
++// before walking it; ares_destroy() did not. Two queries are required: with
++// only one in flight there is no next to cache and nothing goes wrong.
++// tries=1 so a teardown ends the query outright instead of retrying it, which
++// is the precondition this family of bugs shares.
++class MockUDPSingleTryTest : public MockChannelOptsTest,
++ public ::testing::WithParamInterface<int> {
++public:
++ MockUDPSingleTryTest()
++ : MockChannelOptsTest(1, GetParam(), false, false, FillOptions(&opts_),
++ ARES_OPT_TRIES)
++ {
++ }
++
++ static struct ares_options *FillOptions(struct ares_options *opts)
++ {
++ memset(opts, 0, sizeof(struct ares_options));
++ opts->tries = 1;
++ return opts;
++ }
++
++private:
++ struct ares_options opts_;
++};
++
++// ares_cancel() and ares_destroy() free a query themselves rather than going
++// through end_query(). Both used to invoke the application callback while the
++// query was still in queries_by_qid, on conn->queries_to_conn and in
++// queries_by_timeout -- only all_queries was unlinked first. A reentrant
++// teardown from within that callback therefore still found the query, ended it
++// a second time, and freed it; the ares_free_query() that followed then
++// double-freed. One query in flight is enough.
++static void ReconfigureServersCallback(void *arg, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec) {
++ CancelInCbData *data = static_cast<CancelInCbData *>(arg);
++ (void)status;
++ (void)timeouts;
++ (void)dnsrec;
++ data->done = true;
++ data->cbs++;
++ /* Frees every server absent from the new configuration, closing their
++ * connections -- which still hold the queries being torn down. */
++ ares_set_servers_csv(data->channel, "127.0.0.1:53055");
++}
++
++// Reconfiguring the server list from a cancellation callback.
++TEST_P(MockUDPSingleTryTest, ReconfigureInCancelCallbackNoDoubleFree) {
++ CancelInCbData data;
++ data.channel = channel_;
++ data.done = false;
++ data.cbs = 0;
++
++ QueryResult result;
++ /* Left unanswered, so both stay attached to the connection. */
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, ReconfigureServersCallback,
++ &data, NULL));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_query_dnsrec(channel_, "www.example.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, QueryCallback, &result, NULL));
++
++ ares_cancel(channel_);
++ EXPECT_TRUE(data.done);
++ EXPECT_TRUE(result.done_);
++ /* Each lookup must be notified exactly once, not twice. */
++ EXPECT_EQ((size_t)1, data.cbs);
++}
++
++/* The replacement lookup's result outlives the callback that starts it. */
++static QueryResult g_replacement_result;
++
++static void NewQueryOnFailingWriteCallback(void *arg, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec) {
++ /* ares_set_socket_functions() stores the pointer rather than copying it, so
++ * this must outlive the call. */
++ static ares_socket_functions sock_funcs;
++ CancelInCbData *data = static_cast<CancelInCbData *>(arg);
++ (void)status;
++ (void)timeouts;
++ (void)dnsrec;
++
++ data->cbs++;
++
++ /* Only the first cancellation callback starts a replacement lookup. */
++ if (data->done) {
++ return;
++ }
++ data->done = true;
++
++ memset(&sock_funcs, 0, sizeof(sock_funcs));
++ sock_funcs.asendv = LibraryTest::ares_sendv_fail;
++ ares_set_socket_functions(data->channel, &sock_funcs, NULL);
++ LibraryTest::SetFailSend();
++
++ ares_query_dnsrec(data->channel, "www.probe.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, QueryCallback, &g_replacement_result,
++ NULL);
++}
++
++// No reconfiguration at all: the cancellation callback simply starts a
++// replacement lookup -- an ordinary retry pattern -- and that lookup's write
++// fails. ares_close_connection() then walks conn->queries_to_conn, which
++// still holds the queries ares_cancel() is in the middle of. Wider than the
++// case above: it needs nothing more than a connection error.
++TEST_P(MockUDPSingleTryTest, NewQueryInCancelCallbackConnErrorNoDoubleFree) {
++ CancelInCbData data;
++ data.channel = channel_;
++ data.done = false;
++ data.cbs = 0;
++
++ g_replacement_result.done_ = false;
++
++ QueryResult result;
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, NewQueryOnFailingWriteCallback,
++ &data, NULL));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_query_dnsrec(channel_, "www.example.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, QueryCallback, &result, NULL));
++
++ ares_cancel(channel_);
++ EXPECT_TRUE(data.done);
++ EXPECT_TRUE(result.done_);
++ /* Each lookup must be notified exactly once, not twice. */
++ EXPECT_EQ((size_t)1, data.cbs);
++ /* Pins that the replacement lookup ran and its write failed, which is what
++ * drives the connection teardown this test is about. */
++ EXPECT_TRUE(g_replacement_result.done_);
++}
++
++// The same shape through ares_destroy() rather than ares_cancel(). Swapping
++// the all_queries head does not help here: the reentrant teardown reaches the
++// query through the connection, not through all_queries.
++TEST_P(MockUDPSingleTryTest, ReconfigureInDestroyCallbackNoDoubleFree) {
++ CancelInCbData data;
++ data.channel = channel_;
++ data.done = false;
++ data.cbs = 0;
++
++ QueryResult result;
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, ReconfigureServersCallback,
++ &data, NULL));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_query_dnsrec(channel_, "www.example.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, QueryCallback, &result, NULL));
++
++ ares_destroy(channel_);
++ channel_ = nullptr; /* destroyed here, don't let the fixture repeat it */
++
++ EXPECT_TRUE(data.done);
++ EXPECT_TRUE(result.done_);
++ /* Each lookup must be notified exactly once, not twice. */
++ EXPECT_EQ((size_t)1, data.cbs);
++}
++
++// Once ares_destroy() has begun, a lookup started from a destruction callback
++// is refused rather than allocated into a channel being torn down -- and the
++// refusal still runs the caller's callback with ARES_EDESTRUCTION, so context
++// attached to `arg` can be reclaimed. ares_cancel() leaves sys_up true, so a
++// destruction callback is the only way to reach this.
++struct DestroyReentryData {
++ ares_channel_t *channel;
++ size_t outer_cbs;
++ size_t replacement_cbs;
++ ares_status_t replacement_status;
++};
++
++static void DestroyReplacementCallback(void *arg, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec) {
++ DestroyReentryData *data = static_cast<DestroyReentryData *>(arg);
++ (void)timeouts;
++ (void)dnsrec;
++ data->replacement_cbs++;
++ data->replacement_status = status;
++}
++
++static void DestroyReentryCallback(void *arg, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec) {
++ DestroyReentryData *data = static_cast<DestroyReentryData *>(arg);
++ (void)status;
++ (void)timeouts;
++ (void)dnsrec;
++ data->outer_cbs++;
++ ares_query_dnsrec(data->channel, "www.example.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, DestroyReplacementCallback, data, NULL);
++}
++
++TEST_F(LibraryTest, NewQueryInDestroyCallbackIsRefusedAndNotified) {
++ ares_channel_t *channel = nullptr;
++ struct ares_options opts;
++ int optmask = 0;
++
++ memset(&opts, 0, sizeof(opts));
++ opts.tries = 1;
++ optmask |= ARES_OPT_TRIES;
++ opts.flags = ARES_FLAG_NOSEARCH;
++ optmask |= ARES_OPT_FLAGS;
++
++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&channel, &opts, optmask));
++ // Nothing listens here; no traffic is needed.
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(channel, "127.0.0.1:53055"));
++
++ DestroyReentryData data;
++ data.channel = channel;
++ data.outer_cbs = 0;
++ data.replacement_cbs = 0;
++ data.replacement_status = ARES_SUCCESS;
++
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_query_dnsrec(channel, "www.google.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, DestroyReentryCallback, &data,
++ NULL));
++
++ ares_destroy(channel);
++
++ EXPECT_EQ((size_t)1, data.outer_cbs);
++ // Refused -- but notified, so the caller can release whatever it attached.
++ EXPECT_EQ((size_t)1, data.replacement_cbs);
++ EXPECT_EQ(ARES_EDESTRUCTION, data.replacement_status);
++}
++
++INSTANTIATE_TEST_SUITE_P(AddressFamilies, MockUDPSingleTryTest,
++ ::testing::ValuesIn(ares::test::families),
++ PrintFamily);
++
++TEST_P(MockUDPChannelTest, CancelInDestroyCallbackNoUseAfterFree) {
++ CancelInCbData data;
++ data.channel = channel_;
++ data.done = false;
++ data.cbs = 0;
++
++ /* Left unanswered, so both are still pending when the channel goes down. */
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, CancelChannelCallback, &data,
++ NULL));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_query_dnsrec(channel_, "www.example.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, CancelChannelCallback, &data,
++ NULL));
++ /* Without this the test can pass vacuously if a query failed to start. */
++ EXPECT_EQ(2, ares_queue_active_queries(channel_));
++
++ ares_destroy(channel_);
++ channel_ = nullptr; /* destroyed here, don't let the fixture repeat it */
++
++ EXPECT_TRUE(data.done);
++ /* Every query must be notified exactly once. */
++ EXPECT_EQ((size_t)2, data.cbs);
++}
++
++// Fixture with tries=1 so the first failure ends the query outright instead of
++// retrying it -- that is what drives execution into end_query()'s synchronous
++// (requeue==NULL) branch.
++// The tests below use the MockUDPSingleTryTest fixture defined above: tries=1,
++// so the first failure ends the query outright instead of retrying it, which
++// is what drives execution into end_query()'s synchronous (requeue==NULL)
++// branch.
++//
++
++// Connection-teardown route into the synchronous branch. A malformed reply
++// makes process_answer() return EBADRESP, so handle_conn_error() tears the
++// connection down and ares_close_connection() requeues its queries with a NULL
++// requeue; with tries=1 the query is ended right there. CVE-2026-33630 fixed
++// the deferred flush path only, so this one still double-freed.
++TEST_P(MockUDPSingleTryTest, CancelInCallbackConnTeardownNoDoubleFree) {
++ /* Too short to be a DNS header, so it fails to parse. */
++ std::vector<byte> malformed = {0x00, 0x00, 0x00, 0x00};
++ ON_CALL(server_, OnRequest("www.google.com", T_A))
++ .WillByDefault(SetReplyData(&server_, malformed));
++
++ CancelInCbData data;
++ data.channel = channel_;
++ data.done = false;
++ data.cbs = 0;
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ CancelChannelCallback, &data, NULL);
++ Process();
++ EXPECT_TRUE(data.done);
++}
++
++// Server-removal route into the same synchronous branch, which the
++// connection-teardown test above does not cover. Reconfiguring the server list
++// destroys the servers that are gone, and ares_close_sockets() closes their
++// connections with a NULL requeue -- a second way to reach end_query() with the
++// query still linked. No Process() call is needed: the query is attached to a
++// connection by ares_query_dnsrec() itself, and nothing has replied to it.
++TEST_P(MockUDPSingleTryTest, CancelInCallbackServerRemovalNoDoubleFree) {
++ CancelInCbData data;
++ data.channel = channel_;
++ data.done = false;
++ data.cbs = 0;
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ CancelChannelCallback, &data, NULL);
++
++ /* Drops the server the in-flight query is attached to. */
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(channel_, "127.0.0.1:53055"));
++ EXPECT_TRUE(data.done);
++}
++
++// ares_send_query_int() calls handle_conn_error() on a retryable write failure
++// and then keeps using its own query. That teardown requeues the *other*
++// queries on the connection, and with tries=1 they are ended outright; if one
++// of their callbacks reentrantly cancels the channel, this query is freed too
++// -- it is still linked in all_queries, having only joined
++// conn->queries_to_conn on the success path further down. Using it afterwards
++// is a use-after-free.
++//
++// The first query is left unanswered so it stays on the connection, then the
++// next write is made to fail with ECONNREFUSED so the second query takes the
++// error path while the first is still attached.
++//
++// Note this is masked on code that has not fixed the end_query() double-free:
++// that aborts inside handle_conn_error() before control returns here.
++TEST_P(MockUDPSingleTryTest, CancelInSiblingCallbackConnErrorNoUseAfterFree) {
++ CancelInCbData data;
++ data.channel = channel_;
++ data.done = false;
++ data.cbs = 0;
++
++ /* No reply configured for this one, so it stays attached to the connection. */
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ CancelChannelCallback, &data, NULL);
++
++ ares_socket_functions sock_funcs;
++ memset(&sock_funcs, 0, sizeof(sock_funcs));
++ sock_funcs.asendv = ares_sendv_fail;
++ ares_set_socket_functions(channel_, &sock_funcs, NULL);
++ LibraryTest::SetFailSend();
++
++ QueryResult result;
++ ares_query_dnsrec(channel_, "www.example.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ QueryCallback, &result, NULL);
++
++ /* The write failure above tears the connection down, which ends the first
++ * query, whose callback cancels the channel and frees this one. */
++ EXPECT_TRUE(data.done);
++ /* The sibling is cancelled from the first query's callback rather than
++ * requeued; pin that rather than leaving it unstated. */
++ EXPECT_TRUE(result.done_);
++ EXPECT_EQ(ARES_ECANCELLED, result.status_);
++}
++
++// The socket-state callback -- registered with ARES_OPT_SOCK_STATE_CB, the
++// usual way c-ares is driven from an event loop -- used to be dispatched from
++// the middle of opening a connection, and ares_open_connection() keeps using
++// that connection afterwards. A reentrant ares_cancel() from the callback
++// frees both the connection (through the idle sweep) and the in-flight query,
++// leaving the library using either.
++struct SockStateCancelData {
++ ares_channel_t *channel;
++ size_t calls;
++};
++
++static void SockStateCancelCallback(void *data, ares_socket_t socket_fd,
++ int readable, int writable)
++{
++ SockStateCancelData *d = static_cast<SockStateCancelData *>(data);
++ (void)socket_fd;
++ (void)readable;
++ (void)writable;
++ d->calls++;
++ // Reentrant cancel from the socket-state notification.
++ if (d->channel != nullptr) {
++ ares_cancel(d->channel);
++ }
++}
++
++TEST_F(LibraryTest, CancelInSockStateCallbackNoUseAfterFree) {
++ SockStateCancelData data;
++ ares_channel_t *chan = nullptr;
++ struct ares_options opts;
++ int optmask = 0;
++
++ data.channel = nullptr;
++ data.calls = 0;
++
++ memset(&opts, 0, sizeof(opts));
++ opts.sock_state_cb = SockStateCancelCallback;
++ opts.sock_state_cb_data = &data;
++ optmask = ARES_OPT_SOCK_STATE_CB;
++
++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&chan, &opts, optmask));
++ ASSERT_NE(nullptr, chan);
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055"));
++
++ /* Armed only now, so channel setup itself does not cancel. */
++ data.channel = chan;
++
++ QueryResult result;
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ QueryCallback, &result, NULL);
++
++ /* Opening the connection notifies, the notification cancels, and the
++ * library must still be able to finish -- and the lookup must actually be
++ * cancelled rather than the cancel quietly doing nothing. */
++ EXPECT_GT(data.calls, (size_t)0);
++ EXPECT_TRUE(result.done_);
++ EXPECT_EQ(ARES_ECANCELLED, result.status_);
++
++ data.channel = nullptr; /* don't cancel from teardown notifications */
++ ares_destroy(chan);
++}
++
++// Deferring the notification must not reorder it past the close of the
++// descriptor it names. An event loop is told "stop watching fd N"; if fd N is
++// already closed by then, the number can have been handed to something else --
++// including to application code running from a deferred query callback -- and
++// the application ends up setting and clearing interest in a descriptor it now
++// owns for another purpose.
++//
++// The invariant is checked directly: while the callback naming the descriptor
++// runs, that descriptor must still be open.
++#ifndef _WIN32
++struct SockStateCloseOrderData {
++ size_t closes_seen;
++ size_t closed_while_already_shut;
++};
++
++static void SockStateCloseOrderCallback(void *data, ares_socket_t socket_fd,
++ int readable, int writable)
++{
++ SockStateCloseOrderData *d = static_cast<SockStateCloseOrderData *>(data);
++ if (readable || writable) {
++ return;
++ }
++ d->closes_seen++;
++ // F_GETFD on a closed descriptor fails with EBADF. c-ares must not have
++ // closed it yet at this point.
++ if (fcntl(static_cast<int>(socket_fd), F_GETFD) == -1 && errno == EBADF) {
++ d->closed_while_already_shut++;
++ }
++}
++
++TEST_F(LibraryTest, SockStateCloseIsReportedBeforeDescriptorCloses) {
++ SockStateCloseOrderData data;
++ ares_channel_t *chan = nullptr;
++ struct ares_options opts;
++
++ data.closes_seen = 0;
++ data.closed_while_already_shut = 0;
++
++ memset(&opts, 0, sizeof(opts));
++ opts.sock_state_cb = SockStateCloseOrderCallback;
++ opts.sock_state_cb_data = &data;
++
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_init_options(&chan, &opts, ARES_OPT_SOCK_STATE_CB));
++ ASSERT_NE(nullptr, chan);
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055"));
++
++ QueryResult result;
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ QueryCallback, &result, NULL);
++ ares_destroy(chan);
++
++ EXPECT_GT(data.closes_seen, (size_t)0);
++ EXPECT_EQ((size_t)0, data.closed_while_already_shut)
++ << "the application was told to stop watching a descriptor c-ares had "
++ "already closed";
++}
++#endif
++
++// Reconfiguring the servers from an I/O hook frees the server and its
++// connection while the library is still holding both. Deferred reclamation is
++// what makes these safe: the objects are unlinked from every lookup structure
++// immediately, so nothing can find them, but their memory survives until the
++// outermost call unwinds. Without it these are heap-use-after-free in
++// ares_conn_connect() and handle_conn_error() respectively.
++//
++// This is the class behind CVE-2025-31498 and CVE-2025-62408 -- a connection
++// cleaned up while a caller further up the stack still held it.
++struct ReconfigureFromHookData {
++ ares_channel_t *channel;
++ bool done;
++ int status;
++};
++
++static int ReconfigureConfigureCallback(ares_socket_t fd, int type, void *data)
++{
++ ReconfigureFromHookData *d = static_cast<ReconfigureFromHookData *>(data);
++ (void)fd;
++ (void)type;
++ // Frees the server this connection is being opened for.
++ ares_set_servers_csv(d->channel, "127.0.0.1:53056");
++ return 0;
++}
++
++static void ReconfigureFromHookCallback(void *arg, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec)
++{
++ ReconfigureFromHookData *d = static_cast<ReconfigureFromHookData *>(arg);
++ (void)timeouts;
++ (void)dnsrec;
++ d->done = true;
++ d->status = static_cast<int>(status);
++}
++
++TEST_F(LibraryTest, ReconfigureInConfigureHookNoUseAfterFree) {
++ ares_channel_t *chan = nullptr;
++ struct ares_options opts;
++ int optmask = 0;
++ ReconfigureFromHookData data;
++
++ memset(&opts, 0, sizeof(opts));
++ opts.tries = 1;
++ optmask |= ARES_OPT_TRIES;
++ opts.flags = ARES_FLAG_NOSEARCH;
++ optmask |= ARES_OPT_FLAGS;
++
++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&chan, &opts, optmask));
++ ASSERT_NE(nullptr, chan);
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055"));
++
++ data.channel = chan;
++ data.done = false;
++ data.status = ARES_SUCCESS;
++ ares_set_socket_configure_callback(chan, ReconfigureConfigureCallback, &data);
++
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ ReconfigureFromHookCallback, &data, NULL);
++
++ // Must complete rather than be stranded -- every exit from the send path
++ // either enqueues the query or ends it.
++ EXPECT_TRUE(data.done);
++ EXPECT_EQ((size_t)0, ares_queue_active_queries(chan));
++ ares_destroy(chan);
++}
++
++// The second route to the same freed connection, and the one that drove the
++// change from suppressing the idle sweep to deferring the notification:
++// reconfiguring the servers from the socket-state callback destroys the server
++// and with it the connection ares_open_connection() is still using. Nothing
++// covered this route, so a regression in it would have gone unnoticed.
++struct SockStateReconfigureData {
++ ares_channel_t *channel;
++ size_t calls;
++};
++
++static void SockStateReconfigureCallback(void *data, ares_socket_t socket_fd,
++ int readable, int writable)
++{
++ SockStateReconfigureData *d =
++ static_cast<SockStateReconfigureData *>(data);
++ (void)socket_fd;
++ (void)readable;
++ (void)writable;
++ d->calls++;
++ if (d->channel != nullptr) {
++ // Destroys the server, and with it the connection being opened.
++ ares_set_servers_csv(d->channel, "127.0.0.1:53056");
++ }
++}
++
++TEST_F(LibraryTest, ReconfigureInSockStateCallbackNoUseAfterFree) {
++ SockStateReconfigureData data;
++ ares_channel_t *chan = nullptr;
++ struct ares_options opts;
++
++ data.channel = nullptr;
++ data.calls = 0;
++
++ memset(&opts, 0, sizeof(opts));
++ opts.sock_state_cb = SockStateReconfigureCallback;
++ opts.sock_state_cb_data = &data;
++
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_init_options(&chan, &opts, ARES_OPT_SOCK_STATE_CB));
++ ASSERT_NE(nullptr, chan);
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055"));
++
++ /* Armed only now, so channel setup itself does not reconfigure. */
++ data.channel = chan;
++
++ QueryResult result;
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ QueryCallback, &result, NULL);
++
++ EXPECT_GT(data.calls, (size_t)0);
++
++ data.channel = nullptr; /* don't reconfigure from teardown notifications */
++ ares_destroy(chan);
++}
++
++// Deferring the notifications must not lose them: every public entry point
++// that closes a socket still has to tell the application about it before it
++// returns, or an event loop is left polling a descriptor that c-ares closed.
++struct SockStateRecordData {
++ std::vector<std::pair<ares_socket_t, bool>> events; /* fd, still-armed */
++};
++
++static void SockStateRecordCallback(void *data, ares_socket_t socket_fd,
++ int readable, int writable)
++{
++ SockStateRecordData *d = static_cast<SockStateRecordData *>(data);
++ d->events.push_back(std::make_pair(socket_fd, readable || writable));
++}
++
++static bool SawClose(const SockStateRecordData &d)
++{
++ for (size_t i = 0; i < d.events.size(); i++) {
++ if (!d.events[i].second) {
++ return true;
++ }
++ }
++ return false;
++}
++
++class SockStateDeliveryTest : public LibraryTest {
++protected:
++ void OpenConnection(ares_channel_t **chan, SockStateRecordData *data,
++ QueryResult *result)
++ {
++ struct ares_options opts;
++ memset(&opts, 0, sizeof(opts));
++ opts.sock_state_cb = SockStateRecordCallback;
++ opts.sock_state_cb_data = data;
++
++ ASSERT_EQ(ARES_SUCCESS,
++ ares_init_options(chan, &opts, ARES_OPT_SOCK_STATE_CB));
++ ASSERT_NE(nullptr, *chan);
++ /* TEST-NET-1, guaranteed not to answer, so the socket is still open when
++ * the call under test runs. */
++ ASSERT_EQ(ARES_SUCCESS, ares_set_servers_csv(*chan, "192.0.2.1:53"));
++
++ ares_query_dnsrec(*chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ QueryCallback, result, NULL);
++ ASSERT_FALSE(result->done_);
++ ASSERT_FALSE(data->events.empty());
++ ASSERT_TRUE(data->events.back().second); /* opened, armed for read */
++ data->events.clear();
++ }
++};
++
++TEST_F(SockStateDeliveryTest, CancelReportsSocketClose) {
++ ares_channel_t *chan = nullptr;
++ SockStateRecordData data;
++ QueryResult result;
++
++ OpenConnection(&chan, &data, &result);
++ ares_cancel(chan);
++ EXPECT_TRUE(SawClose(data)) << "ares_cancel() closed the socket without "
++ "telling the application";
++ ares_destroy(chan);
++}
++
++TEST_F(SockStateDeliveryTest, SetServersReportsSocketClose) {
++ ares_channel_t *chan = nullptr;
++ SockStateRecordData data;
++ QueryResult result;
++
++ OpenConnection(&chan, &data, &result);
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "198.51.100.1:53"));
++ EXPECT_TRUE(SawClose(data)) << "ares_set_servers_csv() closed the socket "
++ "without telling the application";
++ ares_destroy(chan);
++}
++
++TEST_F(SockStateDeliveryTest, DestroyReportsSocketClose) {
++ ares_channel_t *chan = nullptr;
++ SockStateRecordData data;
++ QueryResult result;
++
++ OpenConnection(&chan, &data, &result);
++ ares_destroy(chan);
++ EXPECT_TRUE(SawClose(data)) << "ares_destroy() closed the socket without "
++ "telling the application";
++}
++
++// The server-state callback is dispatched from the middle of processing, and
++// every caller keeps using its query afterwards. Nothing documents the
++// callback as non-reentrant, and the channel lock is recursive precisely so
++// API calls from callbacks are allowed -- so an application that cancels from
++// it left the library using a freed query.
++//
++// No hostile input is needed: an ordinary timeout reaches the same place. A
++// SERVFAIL is used here because it is deterministic in the harness.
++struct ServerStateCancelData {
++ ares_channel_t *channel;
++ int server_cb_calls;
++ bool query_done;
++};
++
++static void ServerStateCancelCallback(const char *server_string,
++ ares_bool_t success, int flags,
++ void *data) {
++ ServerStateCancelData *d = static_cast<ServerStateCancelData *>(data);
++ (void)server_string;
++ (void)success;
++ (void)flags;
++ d->server_cb_calls++;
++ // Reentrant cancel from the notification.
++ ares_cancel(d->channel);
++}
++
++static void ServerStateQueryCallback(void *arg, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec) {
++ ServerStateCancelData *d = static_cast<ServerStateCancelData *>(arg);
++ (void)status;
++ (void)timeouts;
++ (void)dnsrec;
++ d->query_done = true;
++}
++
++// The advisory's headline claim is that no hostile input is needed, because an
++// ordinary timeout reaches the same place. The SERVFAIL test below does not
++// show that; this one does.
++class ServerStateTimeoutCancelTest
++ : public MockChannelOptsTest,
++ public ::testing::WithParamInterface<int> {
++ public:
++ ServerStateTimeoutCancelTest()
++ : MockChannelOptsTest(1, GetParam(), false, false, FillOptions(&opts_),
++ ARES_OPT_TIMEOUTMS | ARES_OPT_TRIES) {}
++ static struct ares_options *FillOptions(struct ares_options *opts) {
++ memset(opts, 0, sizeof(struct ares_options));
++ opts->timeout = 100;
++ opts->tries = 3;
++ return opts;
++ }
++
++ private:
++ struct ares_options opts_;
++};
++
++TEST_P(ServerStateTimeoutCancelTest, CancelInServerStateCallbackOnTimeout) {
++ ServerStateCancelData data;
++ data.channel = channel_;
++ data.server_cb_calls = 0;
++ data.query_done = false;
++
++ ares_set_server_state_callback(channel_, ServerStateCancelCallback, &data);
++
++ // No reply configured, so the query times out and the notification comes
++ // from process_timeouts() rather than from a response.
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, ServerStateQueryCallback, &data,
++ NULL));
++ Process();
++
++ EXPECT_GT(data.server_cb_calls, 0);
++ EXPECT_TRUE(data.query_done);
++}
++
++INSTANTIATE_TEST_SUITE_P(AddressFamilies, ServerStateTimeoutCancelTest,
++ ::testing::ValuesIn(ares::test::families),
++ PrintFamily);
++
++// Unregistering with a NULL callback discards whatever is still queued -- the
++// documented behaviour of deferring delivery, and the only way an application
++// can opt back out once notifications are in flight.
++struct ServerStateUnregisterData {
++ ares_channel_t *channel;
++ size_t server_cb_calls;
++ bool query_done;
++};
++
++static void ServerStateUnregisterCallback(const char *server_string,
++ ares_bool_t success,
++ int flags, void *user_data)
++{
++ ServerStateUnregisterData *d =
++ static_cast<ServerStateUnregisterData *>(user_data);
++ (void)server_string;
++ (void)success;
++ (void)flags;
++ d->server_cb_calls++;
++ // Clear ourselves from inside the first notification. Any notification
++ // still queued behind this one must be dropped rather than delivered.
++ ares_set_server_state_callback(d->channel, NULL, NULL);
++}
++
++static void ServerStateUnregisterQueryCallback(void *arg, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec)
++{
++ ServerStateUnregisterData *d =
++ static_cast<ServerStateUnregisterData *>(arg);
++ (void)status;
++ (void)timeouts;
++ (void)dnsrec;
++ d->query_done = true;
++}
++
++TEST_P(ServerStateTimeoutCancelTest, UnregisterInCallbackDiscardsQueued) {
++ ServerStateUnregisterData data;
++ data.channel = channel_;
++ data.server_cb_calls = 0;
++ data.query_done = false;
++
++ ares_set_server_state_callback(channel_, ServerStateUnregisterCallback,
++ &data);
++
++ // No reply configured: the query times out on every try, so more than one
++ // notification is queued before the flush point is reached.
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A,
++ ServerStateUnregisterQueryCallback, &data, NULL));
++ Process();
++
++ EXPECT_EQ((size_t)1, data.server_cb_calls);
++ EXPECT_TRUE(data.query_done);
++}
++
++TEST_P(MockUDPChannelTest, CancelInServerStateCallbackNoUseAfterFree) {
++ DNSPacket servfail;
++ servfail.set_response().set_aa().set_rcode(SERVFAIL)
++ .add_question(new DNSQuestion("www.google.com", T_A));
++ ON_CALL(server_, OnRequest("www.google.com", T_A))
++ .WillByDefault(SetReply(&server_, &servfail));
++
++ ServerStateCancelData data;
++ data.channel = channel_;
++ data.server_cb_calls = 0;
++ data.query_done = false;
++
++ ares_set_server_state_callback(channel_, ServerStateCancelCallback, &data);
++
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ ServerStateQueryCallback, &data, NULL);
++ Process();
++
++ EXPECT_GT(data.server_cb_calls, 0);
++ EXPECT_TRUE(data.query_done);
++}
++
++// The deferred requeue list records the target server as a raw pointer, and
++// the drain never revalidated it -- although it does revalidate the query, by
++// qid, for exactly the same reason. Application callbacks run from inside that
++// drain, and a callback may legally reconfigure the servers, which frees the
++// ones no longer in the list. A later entry in the same drain then dispatches
++// through a freed ares_server_t.
++//
++// Two replies must be read in one batch: an ordinary answer whose callback
++// reconfigures, and a FORMERR carrying no OPT record, which is what makes
++// process_answer() queue a retry *to the same server* (the EDNS fallback --
++// the only site that records a server pointer at all).
++struct ReconfigureInCbData {
++ ares_channel_t *channel;
++ bool done;
++};
++
++static void ReconfigureChannelCallback(void *arg, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec) {
++ ReconfigureInCbData *data = static_cast<ReconfigureInCbData *>(arg);
++ (void)status;
++ (void)timeouts;
++ (void)dnsrec;
++ data->done = true;
++ /* Frees every server absent from the new configuration. */
++ ares_set_servers_csv(data->channel, "127.0.0.1:53055");
++}
++
++TEST_P(MockUDPChannelTest, ReconfigureInCallbackStaleRequeueServer) {
++ DNSPacket okrsp;
++ okrsp.set_response().set_aa()
++ .add_question(new DNSQuestion("www.google.com", T_A))
++ .add_answer(new DNSARR("www.google.com", 100, {1, 2, 3, 4}));
++ ON_CALL(server_, OnRequest("www.google.com", T_A))
++ .WillByDefault(SetReply(&server_, &okrsp));
++
++ /* FORMERR with no OPT record: the server looks like it does not understand
++ * EDNS, so the query is queued for retry to this same server. */
++ DNSPacket formerr;
++ formerr.set_response().set_aa().set_rcode(FORMERR)
++ .add_question(new DNSQuestion("www.example.com", T_A));
++ ON_CALL(server_, OnRequest("www.example.com", T_A))
++ .WillByDefault(SetReply(&server_, &formerr));
++
++ ReconfigureInCbData data;
++ data.channel = channel_;
++ data.done = false;
++
++ QueryResult second;
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ ReconfigureChannelCallback, &data, NULL);
++ ares_query_dnsrec(channel_, "www.example.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ QueryCallback, &second, NULL);
++
++ /* Both replies have to be consumed in a single pass so they share one
++ * deferred-requeue scope -- that is what puts the ENDQUERY entry whose
++ * callback reconfigures ahead of the REQUEUE entry holding a server
++ * pointer. The usual Process() loop lets c-ares read between the two, so
++ * they never share a batch; answer both first, then read once. */
++ for (int i = 0; i < 4; i++) {
++ std::set<ares_socket_t> server_fds = fds();
++ fd_set r;
++ struct timeval tv = {0, 20000};
++ int nfds = 0;
++ FD_ZERO(&r);
++ for (ares_socket_t fd : server_fds) {
++ FD_SET(fd, &r);
++ if ((int)fd >= nfds) {
++ nfds = (int)fd + 1;
++ }
++ }
++ if (select(nfds, &r, nullptr, nullptr, &tv) <= 0) {
++ break;
++ }
++ for (ares_socket_t fd : server_fds) {
++ if (FD_ISSET(fd, &r)) {
++ ProcessFD(fd);
++ }
++ }
++ }
++ {
++ fd_set readers;
++ fd_set writers;
++ struct timeval tv = {0, 0};
++ int nfds;
++ FD_ZERO(&readers);
++ FD_ZERO(&writers);
++ nfds = ares_fds(channel_, &readers, &writers);
++ select(nfds, &readers, &writers, nullptr, &tv);
++ ares_process(channel_, &readers, &writers);
++ }
++
++ EXPECT_TRUE(data.done);
++
++ /* With the fix the FORMERR query is correctly re-dispatched (to the newly
++ * configured, unreachable server) rather than going through a freed one, so
++ * it is still outstanding here. Cancel it so its callback runs while its
++ * result object is still in scope. */
++ ares_cancel(channel_);
++ EXPECT_TRUE(second.done_);
++}
++
++// ares_servers_remove_stale() destroys each stale server in turn, and that
++// reaches application callbacks (ares_destroy_server() -> ares_close_sockets()
++// -> ares_requeue_queries() -> end_query()). A callback that reconfigures the
++// servers again destroys the servers the outer loop has not visited yet, so a
++// cached "next" node points at freed memory.
++struct NestedReconfigureData {
++ ares_channel_t *channel;
++ bool nested;
++};
++
++static void NestedReconfigureCallback(void *arg, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec) {
++ NestedReconfigureData *data = static_cast<NestedReconfigureData *>(arg);
++ (void)status;
++ (void)timeouts;
++ (void)dnsrec;
++ if (data->nested) {
++ return;
++ }
++ data->nested = true;
++ // Destroys the stale servers the outer removal loop has not reached yet.
++ ares_set_servers_csv(data->channel, "");
++}
++
++TEST_F(LibraryTest, NestedReconfigureInCallbackRemoveStale) {
++ ares_channel_t *channel = nullptr;
++ struct ares_options opts;
++ int optmask = 0;
++
++ memset(&opts, 0, sizeof(opts));
++ /* One try per server, so tearing them down exhausts the query's retries and
++ * runs its callback from inside the removal loop. */
++ opts.tries = 1;
++ optmask |= ARES_OPT_TRIES;
++ opts.flags = ARES_FLAG_NOSEARCH;
++ optmask |= ARES_OPT_FLAGS;
++
++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&channel, &opts, optmask));
++ /* Three servers, so the loop still has entries after destroying the first.
++ * Nothing listens on these ports; no traffic is needed. */
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_set_servers_csv(channel, "127.0.0.1:53101,127.0.0.1:53102,"
++ "127.0.0.1:53103"));
++
++ NestedReconfigureData data;
++ data.channel = channel;
++ data.nested = false;
++
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_query_dnsrec(channel, "www.example.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, NestedReconfigureCallback,
++ &data, NULL));
++
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(channel, ""));
++ EXPECT_TRUE(data.nested);
++
++ ares_destroy(channel);
++}
++
++// The same nesting, but the nested reconfiguration *installs* a server rather
++// than clearing the list. Restarting the removal walk from the head then
++// re-judges that server against the outer call's list, decides it is stale and
++// deletes it -- so ares_set_servers_csv() returns success and leaves the
++// channel with no servers at all. Memory-safe and still wrong.
++static void NestedReplaceCallback(void *arg, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec) {
++ NestedReconfigureData *data = static_cast<NestedReconfigureData *>(arg);
++ (void)status;
++ (void)timeouts;
++ (void)dnsrec;
++ if (data->nested) {
++ return;
++ }
++ data->nested = true;
++ // Installs a server the outer loop has never seen.
++ ares_set_servers_csv(data->channel, "127.0.0.1:53201");
++}
++
++TEST_F(LibraryTest, NestedReconfigureInCallbackKeepsNestedServers) {
++ ares_channel_t *channel = nullptr;
++ struct ares_options opts;
++ int optmask = 0;
++
++ memset(&opts, 0, sizeof(opts));
++ opts.tries = 1;
++ optmask |= ARES_OPT_TRIES;
++ opts.flags = ARES_FLAG_NOSEARCH;
++ optmask |= ARES_OPT_FLAGS;
++
++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&channel, &opts, optmask));
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(channel, "127.0.0.1:53101"));
++
++ NestedReconfigureData data;
++ data.channel = channel;
++ data.nested = false;
++
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_query_dnsrec(channel, "www.example.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, NestedReplaceCallback, &data,
++ NULL));
++
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(channel, "127.0.0.1:53301"));
++ EXPECT_TRUE(data.nested);
++
++ // The nested call reconciled the whole list; what it installed must survive.
++ char *csv = ares_get_servers_csv(channel);
++ ASSERT_NE(nullptr, csv);
++ EXPECT_STREQ("127.0.0.1:53201", csv);
++ ares_free_string(csv);
++
++ ares_destroy(channel);
++}
++
+ TEST_P(MockUDPChannelTest, CancelInCallbackNoDoubleFree) {
+ DNSPacket reply;
+ reply.set_response().set_aa()
+@@ -1940,6 +3007,7 @@ TEST_P(MockUDPChannelTest, CancelInCallbackNoDoubleFree) {
+ CancelInCbData data;
+ data.channel = channel_;
+ data.done = false;
++ data.cbs = 0;
+ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
+ CancelChannelCallback, &data, NULL);
+ Process();
diff --git a/meta-oe/recipes-support/c-ares/c-ares/0002-Deliver-deferred-socket-server-state-notifications.patch b/meta-oe/recipes-support/c-ares/c-ares/0002-Deliver-deferred-socket-server-state-notifications.patch
new file mode 100644
index 0000000000..c34d3ab7c7
--- /dev/null
+++ b/meta-oe/recipes-support/c-ares/c-ares/0002-Deliver-deferred-socket-server-state-notifications.patch
@@ -0,0 +1,393 @@
+From f944c4718fd672c9c0befd65a340abb2ccfc1a31 Mon Sep 17 00:00:00 2001
+From: Brad House <brad@brad-house.com>
+Date: Sun, 18 Oct 2026 20:28:11 -0400
+Subject: [PATCH] Deliver deferred socket/server-state notifications only from
+ the outermost public call (#1340)
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+Backport of f023a52a (#1340) to v1.34.
+
+The recent change that queues socket-state and server-state
+notifications delivers them, and runs the deferred cleanup, only from
+the outermost `ares_deferred_cb_leave()`. `ares_send_nolock()` brackets
+`ares_send_query()` itself, but most public lookup functions never
+opened a region of their own. When reached from `ares_getaddrinfo()`,
+`ares_query_dnsrec()` and similar, the bracket inside
+`ares_send_nolock()` was therefore the outermost one. Notifications were
+then delivered from inside an internal call while the library was still
+in the middle of the public call, and its callers were still using their
+lookup state (the host query, the query id out-pointer, ...). A
+server-state callback that reconfigures the servers, which
+`ares_set_server_state_callback(3)` documents as allowed, could end that
+lookup before the caller was done with it.
+
+This is a regression in unreleased code. No released version is
+affected.
+
+The outermost region is now opened by the public entry points
+themselves, under the channel lock:
+
+- `ares_send_dnsrec()` (also used by `ares_send()`)
+- `ares_query_dnsrec()` (also used by `ares_query()`)
+- `ares_search()`, `ares_search_dnsrec()`
+- `ares_getaddrinfo()` (also used by `ares_gethostbyname()`)
+- `ares_gethostbyaddr()`, `ares_getnameinfo()`
+- `ares_process_pending_write()`: a failed flush closes the connection
+and fails its queries over, and this function had no bracket at all.
+
+`ares_process_fds()` (and through it
+`ares_process()`/`ares_process_fd()`), `ares_cancel()`, `ares_destroy()`
+and the server configuration functions already had their own. The nested
+bracket in `ares_send_nolock()` stays, because it keeps connections and
+servers unlinked during the send readable until the send returns.
+Internal sends made from query callbacks (search next domain,
+getaddrinfo next lookup, requeue, server probes) already run inside the
+processing bracket.
+
+The comments on `ares_deferred_cb_enter()` and the flush now state the
+rule: the outermost region belongs to the public entry point, never to
+an internal helper.
+
+The documented behaviour (notifications arrive before the outermost
+c-ares call returns) does not change, so no man page changes.
+
+Two new `LibraryTest` cases in `test/ares-test-mock.cc`. The IPv6 server
+cannot get a socket, so the first send fails over to the IPv4 server,
+and a server-state callback then reconfigures the servers:
+
+- `ServerFailoverDuringGetAddrInfo`: the lookup completes cleanly. It
+fails under ASAN without this change.
+- `ServerFailoverDuringQuery`: the query id from `ares_query_dnsrec()`
+is already reported by the time the query callback runs. It fails
+without this change.
+
+The full non-live suite passes under ASAN/UBSAN and with
+`-DCARES_WERROR=ON`.
+
+Signed-off-by: Brad House <brad@brad-house.com>
+Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/f944c4718fd672c9c0befd65a340abb2ccfc1a31]
+GHSA: GHSA-wpr3-8q3r-4q8c, GHSA-97vq-4mxv-7vhm, GHSA-mw23-pfg6-2x9r, GHSA-rf6g-ww74-97qh, GHSA-v33j-65h4-4ch8, GHSA-pj7p-v3cw-hq66
+---
+ src/lib/ares_conn.c | 4 +-
+ src/lib/ares_getaddrinfo.c | 5 ++
+ src/lib/ares_gethostbyaddr.c | 5 ++
+ src/lib/ares_getnameinfo.c | 5 ++
+ src/lib/ares_private.h | 10 ++++
+ src/lib/ares_process.c | 6 ++
+ src/lib/ares_query.c | 5 ++
+ src/lib/ares_search.c | 10 ++++
+ src/lib/ares_send.c | 13 ++++-
+ test/ares-test-mock.cc | 106 +++++++++++++++++++++++++++++++++++
+ 10 files changed, 166 insertions(+), 3 deletions(-)
+
+diff --git a/src/lib/ares_conn.c b/src/lib/ares_conn.c
+index 78f57e7d10..4cc0d1871d 100644
+--- a/src/lib/ares_conn.c
++++ b/src/lib/ares_conn.c
+@@ -94,7 +94,9 @@ static void ares_deferred_cb_flush(ares_channel_t *channel)
+ {
+ /* Only the outermost frame delivers: anything above us on the stack may
+ * still be holding the connection a reentrant call from one of these
+- * callbacks could free.
++ * callbacks could free, or lookup state of its own that a callback could
++ * end. That is why the outermost frame belongs to the public entry point
++ * and never to an internal helper; see ares_deferred_cb_enter().
+ *
+ * The dispatch below counts as a nesting level of its own. Without that, a
+ * callback that calls back into the library re-enters here through the
+diff --git a/src/lib/ares_getaddrinfo.c b/src/lib/ares_getaddrinfo.c
+index 6d9e21af4b..5d9ddb311e 100644
+--- a/src/lib/ares_getaddrinfo.c
++++ b/src/lib/ares_getaddrinfo.c
+@@ -762,7 +762,12 @@ void ares_getaddrinfo(ares_channel_t *channel, const char *name,
+ return;
+ }
+ ares_channel_lock(channel);
++ /* Notifications raised along the way are delivered once this whole call
++ * has unwound, not from inside the internals it runs. See
++ * ares_deferred_cb_enter(). */
++ ares_deferred_cb_enter(channel);
+ ares_getaddrinfo_int(channel, name, service, hints, callback, arg);
++ ares_deferred_cb_leave(channel);
+ ares_channel_unlock(channel);
+ }
+
+diff --git a/src/lib/ares_gethostbyaddr.c b/src/lib/ares_gethostbyaddr.c
+index 69c509ab11..b314359331 100644
+--- a/src/lib/ares_gethostbyaddr.c
++++ b/src/lib/ares_gethostbyaddr.c
+@@ -112,7 +112,12 @@ void ares_gethostbyaddr(ares_channel_t *channel, const void *addr, int addrlen,
+ return;
+ }
+ ares_channel_lock(channel);
++ /* Notifications raised along the way are delivered once this whole call
++ * has unwound, not from inside the internals it runs. See
++ * ares_deferred_cb_enter(). */
++ ares_deferred_cb_enter(channel);
+ ares_gethostbyaddr_nolock(channel, addr, addrlen, family, callback, arg);
++ ares_deferred_cb_leave(channel);
+ ares_channel_unlock(channel);
+ }
+
+diff --git a/src/lib/ares_getnameinfo.c b/src/lib/ares_getnameinfo.c
+index 0159354530..7365e9ed82 100644
+--- a/src/lib/ares_getnameinfo.c
++++ b/src/lib/ares_getnameinfo.c
+@@ -194,7 +194,12 @@ void ares_getnameinfo(ares_channel_t *channel, const struct sockaddr *sa,
+ }
+
+ ares_channel_lock(channel);
++ /* Notifications raised along the way are delivered once this whole call
++ * has unwound, not from inside the internals it runs. See
++ * ares_deferred_cb_enter(). */
++ ares_deferred_cb_enter(channel);
+ ares_getnameinfo_int(channel, sa, salen, flags_int, callback, arg);
++ ares_deferred_cb_leave(channel);
+ ares_channel_unlock(channel);
+ }
+
+diff --git a/src/lib/ares_private.h b/src/lib/ares_private.h
+index 0a1029e0f8..9610ba7dab 100644
+--- a/src/lib/ares_private.h
++++ b/src/lib/ares_private.h
+@@ -676,6 +676,16 @@ void ares_server_reap(ares_server_t *server);
+ * Nesting is counted; queued notifications are delivered by the outermost
+ * leave.
+ *
++ * The outermost region must be opened by the public entry point itself
++ * (ares_send_dnsrec(), ares_query_dnsrec(), ares_search(), ares_getaddrinfo(),
++ * ares_process_fds(), ares_set_servers_*(), ...), with the channel lock
++ * held, around everything it does. Internal helpers such as
++ * ares_send_nolock() open nested regions of their own, but their callers
++ * often keep using lookup state afterwards -- a host or search query, a
++ * query id out-pointer -- that a callback reentering the library may end
++ * and free. If such a helper were the outermost region, its leave would
++ * run the callbacks while that state is still in use.
++ *
+ * \param[in] channel Initialized ares channel.
+ */
+ void ares_deferred_cb_enter(ares_channel_t *channel);
+diff --git a/src/lib/ares_process.c b/src/lib/ares_process.c
+index 82f53610fb..1569408b1b 100644
+--- a/src/lib/ares_process.c
++++ b/src/lib/ares_process.c
+@@ -490,6 +490,11 @@ void ares_process_pending_write(ares_channel_t *channel)
+ return;
+ }
+
++ /* A failed flush closes the connection and fails its queries over, which
++ * notifies. Deliver once we are done walking the servers, and keep
++ * anything unlinked meanwhile readable until then. */
++ ares_deferred_cb_enter(channel);
++
+ /* Set as untriggerd before calling into ares_conn_flush(), this is
+ * because its possible ares_conn_flush() might cause additional data to
+ * be enqueued if there is some form of exception so it will need to recurse.
+@@ -513,6 +518,7 @@ void ares_process_pending_write(ares_channel_t *channel)
+ }
+ }
+
++ ares_deferred_cb_leave(channel);
+ ares_channel_unlock(channel);
+ }
+
+diff --git a/src/lib/ares_query.c b/src/lib/ares_query.c
+index ca3b6a9b73..0cf7f70760 100644
+--- a/src/lib/ares_query.c
++++ b/src/lib/ares_query.c
+@@ -125,7 +125,12 @@ ares_status_t ares_query_dnsrec(ares_channel_t *channel, const char *name,
+ }
+
+ ares_channel_lock(channel);
++ /* Notifications raised along the way are delivered once this whole call
++ * has unwound, not from inside the internals it runs. See
++ * ares_deferred_cb_enter(). */
++ ares_deferred_cb_enter(channel);
+ status = ares_query_nolock(channel, name, dnsclass, type, callback, arg, qid);
++ ares_deferred_cb_leave(channel);
+ ares_channel_unlock(channel);
+ return status;
+ }
+diff --git a/src/lib/ares_search.c b/src/lib/ares_search.c
+index c605caf42c..ebc3d91e20 100644
+--- a/src/lib/ares_search.c
++++ b/src/lib/ares_search.c
+@@ -463,7 +463,12 @@ void ares_search(ares_channel_t *channel, const char *name, int dnsclass,
+ }
+
+ ares_channel_lock(channel);
++ /* Notifications raised along the way are delivered once this whole call
++ * has unwound, not from inside the internals it runs. See
++ * ares_deferred_cb_enter(). */
++ ares_deferred_cb_enter(channel);
+ ares_search_int(channel, dnsrec, ares_dnsrec_convert_cb, carg);
++ ares_deferred_cb_leave(channel);
+ ares_channel_unlock(channel);
+
+ ares_dns_record_destroy(dnsrec);
+@@ -481,7 +486,12 @@ ares_status_t ares_search_dnsrec(ares_channel_t *channel,
+ }
+
+ ares_channel_lock(channel);
++ /* Notifications raised along the way are delivered once this whole call
++ * has unwound, not from inside the internals it runs. See
++ * ares_deferred_cb_enter(). */
++ ares_deferred_cb_enter(channel);
+ status = ares_search_int(channel, dnsrec, callback, arg);
++ ares_deferred_cb_leave(channel);
+ ares_channel_unlock(channel);
+
+ return status;
+diff --git a/src/lib/ares_send.c b/src/lib/ares_send.c
+index 2e0482bf19..dd4a28544b 100644
+--- a/src/lib/ares_send.c
++++ b/src/lib/ares_send.c
+@@ -246,8 +246,12 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server,
+ /* Perform the first query action. */
+
+ /* Sending opens and writes to connections and can mark a server down, both
+- * of which notify. Deliver those once we are done with the connection and
+- * the server, not part-way through. */
++ * of which notify. This bracket keeps any connection or server unlinked
++ * during the send readable until it returns. It is never the outermost
++ * one: every public entry point that can get here, and query processing,
++ * holds its own, so delivery waits until the caller -- which may still be
++ * holding its own lookup state, as ares_getaddrinfo() does -- has unwound
++ * too. */
+ ares_deferred_cb_enter(channel);
+ status = ares_send_query(server, query, &now);
+ ares_deferred_cb_leave(channel);
+@@ -271,9 +275,14 @@ ares_status_t ares_send_dnsrec(ares_channel_t *channel,
+ }
+
+ ares_channel_lock(channel);
++ /* Notifications raised along the way are delivered once this whole call
++ * has unwound, not from inside the internals it runs. See
++ * ares_deferred_cb_enter(). */
++ ares_deferred_cb_enter(channel);
+
+ status = ares_send_nolock(channel, NULL, 0, dnsrec, callback, arg, qid);
+
++ ares_deferred_cb_leave(channel);
+ ares_channel_unlock(channel);
+
+ return status;
+diff --git a/test/ares-test-mock.cc b/test/ares-test-mock.cc
+index 2158c5a913..b848c02434 100644
+--- a/test/ares-test-mock.cc
++++ b/test/ares-test-mock.cc
+@@ -2533,6 +2533,112 @@ TEST_F(LibraryTest, ReconfigureInSockStateCallbackNoUseAfterFree) {
+ data.channel = nullptr; /* don't reconfigure from teardown notifications */
+ ares_destroy(chan);
+ }
++// Server-state notifications raised while a public call is issuing its first
++// request must not be delivered until that whole call has unwound. A
++// failover handler that reconfigures the servers ends the in-flight request,
++// and with it the state the issuing call still has to finish with. The IPv6
++// server cannot get a socket, so the first send fails over to the IPv4 one
++// and queues a failure notification for the handler below.
++static ares_socket_t FailoverNoIPv6Socket(int af, int type, int protocol,
++ void *user_data)
++{
++ (void)user_data;
++ if (af == AF_INET6) {
++ return ARES_SOCKET_BAD;
++ }
++ return socket(af, type, protocol);
++}
++
++static void FailoverOnServerDown(const char *server_string, ares_bool_t success,
++ int flags, void *data)
++{
++ (void)server_string;
++ (void)flags;
++ if (!success) {
++ ares_set_servers_csv(static_cast<ares_channel_t *>(data),
++ "127.0.0.1:53063");
++ }
++}
++
++static ares_channel_t *FailoverChannel(ares_socket_functions *funcs)
++{
++ ares_channel_t *chan = nullptr;
++ struct ares_options opts;
++
++ memset(&opts, 0, sizeof(opts));
++ opts.tries = 1;
++ opts.flags = ARES_FLAG_NOSEARCH;
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_init_options(&chan, &opts, ARES_OPT_TRIES | ARES_OPT_FLAGS));
++ if (chan == nullptr) {
++ return nullptr;
++ }
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_set_servers_csv(chan, "[::1]:53061,127.0.0.1:53062"));
++ ares_set_server_state_callback(chan, FailoverOnServerDown, chan);
++
++ memset(funcs, 0, sizeof(*funcs));
++ funcs->asocket = FailoverNoIPv6Socket;
++ ares_set_socket_functions(chan, funcs, NULL);
++ return chan;
++}
++
++TEST_F(LibraryTest, ServerFailoverDuringGetAddrInfo) {
++ ares_socket_functions funcs;
++ struct ares_addrinfo_hints hints;
++ AddrInfoResult result;
++ ares_channel_t *chan = FailoverChannel(&funcs);
++ ASSERT_NE(nullptr, chan);
++
++ memset(&hints, 0, sizeof(hints));
++ hints.ai_family = AF_INET;
++ ares_getaddrinfo(chan, "www.google.com", NULL, &hints, AddrInfoCallback,
++ &result);
++
++ ares_cancel(chan);
++ EXPECT_TRUE(result.done_);
++ ares_destroy(chan);
++}
++
++// Same, through ares_query_dnsrec(): the query id must already have been
++// reported to the caller by the time the query can complete.
++struct FailoverQueryData {
++ unsigned short qid;
++ unsigned short qid_at_callback;
++ bool done;
++};
++
++static void FailoverQueryCallback(void *data, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec)
++{
++ FailoverQueryData *d = static_cast<FailoverQueryData *>(data);
++ (void)status;
++ (void)timeouts;
++ (void)dnsrec;
++ d->qid_at_callback = d->qid;
++ d->done = true;
++}
++
++TEST_F(LibraryTest, ServerFailoverDuringQuery) {
++ ares_socket_functions funcs;
++ FailoverQueryData data;
++ ares_channel_t *chan = FailoverChannel(&funcs);
++ ASSERT_NE(nullptr, chan);
++
++ data.qid = 0;
++ data.qid_at_callback = 0;
++ data.done = false;
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, FailoverQueryCallback, &data,
++ &data.qid));
++
++ EXPECT_TRUE(data.done);
++ EXPECT_EQ(data.qid, data.qid_at_callback);
++ ares_destroy(chan);
++}
++
+
+ // Deferring the notifications must not lose them: every public entry point
+ // that closes a socket still has to tell the application about it before it
diff --git a/meta-oe/recipes-support/c-ares/c-ares/0003-ares_qcache-hand-callbacks-their-own-copy.patch b/meta-oe/recipes-support/c-ares/c-ares/0003-ares_qcache-hand-callbacks-their-own-copy.patch
new file mode 100644
index 0000000000..02039e92e0
--- /dev/null
+++ b/meta-oe/recipes-support/c-ares/c-ares/0003-ares_qcache-hand-callbacks-their-own-copy.patch
@@ -0,0 +1,1054 @@
+From a21160045f9d7039225fa285be7cb1b02173a3a5 Mon Sep 17 00:00:00 2001
+From: Brad House <brad@brad-house.com>
+Date: Sun, 18 Oct 2026 22:12:09 -0400
+Subject: [PATCH] [Backport v1.34] ares_qcache: hand callbacks their own copy
+ of a cached answer (#1339)
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+Backport of 31e2f51e8715d418fa8272a6c3a1ee651917fec5 (`ares_qcache: hand
+callbacks their own copy of a cached answer`) to `v1.34`. See that
+commit for the full description.
+
+**Conflicts:**
+- `ares_private.h`: alignment only; formatted with `v1.34`'s
+`.clang-format`.
+- `test/ares-test-internal.cc`: context only — on `main` the new
+`QcacheKeyDistinguishesQuestions` test follows the IDNA/punycode tests
+(#1031), which are not on `v1.34`, so it is placed after the URI test
+instead.
+
+**Test fixes from #1334:** carries the part of #1334 that applies to the
+tests this introduces — `ReentrantFlushInCallbackNoUseAfterFree`
+reconfigures to `127.0.0.1:53055` instead of `127.0.0.55` (only routable
+on Linux), and `UnknownQueryTypesDoNotShareCacheEntries` drops
+`static_cast<ns_type>`, which does not compile on OpenBSD.
+
+Test file contents match `main`. Independent of the dd62bdfc backport
+(#1338); applies cleanly with or without it.
+
+The full non-live suite passes 650/650 under ASAN+UBSAN and with
+`-DCARES_WERROR=ON` on macOS. `ReentrantFlushInCallbackNoUseAfterFree`
+is a heap-use-after-free in `ares_dns_record_rr_cnt()` on `v1.34`
+without this change, and passes with it.
+
+Signed-off-by: Brad House <brad@brad-house.com>
+Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/a21160045f9d7039225fa285be7cb1b02173a3a5]
+GHSA: GHSA-grv7-fq5q-9vfc, GHSA-wrgc-prmw-27xh
+---
+ docs/ares_init_options.3 | 11 +-
+ src/lib/ares_private.h | 44 +++-
+ src/lib/ares_process.c | 1 +
+ src/lib/ares_qcache.c | 212 ++++++++++++++++---
+ src/lib/ares_send.c | 47 ++++-
+ test/ares-test-internal.cc | 54 +++++
+ test/ares-test-mock.cc | 419 +++++++++++++++++++++++++++++++++++++
+ 7 files changed, 743 insertions(+), 45 deletions(-)
+
+diff --git a/docs/ares_init_options.3 b/docs/ares_init_options.3
+index e6f6ee8ba6..1ce7fb8e30 100644
+--- a/docs/ares_init_options.3
++++ b/docs/ares_init_options.3
+@@ -324,7 +324,16 @@ with the maximum number of seconds a query result may be cached which will
+ override a larger TTL in the response message. This must be a non-zero value
+ otherwise the cache will be disabled. Choose a reasonable value for your
+ application such as 300 (5 minutes) or 3600 (1 hour). The query cache is
+-automatically flushed if a server configuration change is made.
++automatically flushed if a server configuration change is made. As of c-ares
++1.35.0, and c-ares 1.34.9 on the 1.34 branch, a cached answer reports its
++remaining time to live rather than the
++original value received from the server, so TTLs returned on a cache hit
++decrease as the entry ages. Two lookups share a cached answer only if their
++EDNS state matches: the version, the flag bits including DNSSEC OK, and every
++EDNS option other than the DNS cookie and the advertised UDP payload size,
++which are both ignored. Options are compared in the order the application
++added them. An application that attaches its own options and varies them
++between otherwise identical lookups gets a separate cache entry for each.
+ .br
+ .TP 18
+ .B ARES_OPT_EVENT_THREAD
+diff --git a/src/lib/ares_private.h b/src/lib/ares_private.h
+index 9610ba7dab..dd06d303b8 100644
+--- a/src/lib/ares_private.h
++++ b/src/lib/ares_private.h
+@@ -153,6 +153,9 @@ struct ares_query {
+ ares_timeval_t ts; /*!< Timestamp query was sent */
+ ares_timeval_t timeout;
+ ares_channel_t *channel;
++ /*! Query cache key, derived from the caller's request before the send path
++ * can mutate query->query. NULL when the cache is disabled. */
++ char *qcache_key;
+
+ /*
+ * Node object for each list entry the query belongs to in order to
+@@ -718,14 +721,47 @@ ares_status_t ares_qcache_create(ares_rand_state *rand_state,
+ unsigned int max_ttl,
+ ares_qcache_t **cache_out);
+ void ares_qcache_flush(ares_qcache_t *cache);
++/*! Derive the query cache key for a request. Caller owns the result.
++ *
++ * \param[in] dnsrec Request to derive the key from.
++ * \return allocated key, or NULL on failure.
++ */
++char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec);
++
++/*! Insert a response into the query cache.
++ *
++ * \param[in] channel Initialized channel object.
++ * \param[in] now Current timestamp.
++ * \param[in] query Query the response answers. Its cache key, derived
++ * when the query was created, becomes the entry key; a
++ * NULL key means caching is switched off.
++ * \param[in] dnsrec Response to cache. Duplicated internally; the caller
++ * retains ownership.
++ * \return ARES_SUCCESS if cached, ARES_ENOTIMP if caching is off or the
++ * response is not cacheable, otherwise another status.
++ */
+ ares_status_t ares_qcache_insert(ares_channel_t *channel,
+ const ares_timeval_t *now,
+ const ares_query_t *query,
+ const ares_dns_record_t *dnsrec);
+-ares_status_t ares_qcache_fetch(ares_channel_t *channel,
+- const ares_timeval_t *now,
+- const ares_dns_record_t *dnsrec,
+- const ares_dns_record_t **dnsrec_resp);
++/*! Fetch a cached answer for a request.
++ *
++ * \param[in] channel Initialized channel object.
++ * \param[in] now Current timestamp.
++ * \param[in] key Cache key for the request, as produced by
++ * ares_qcache_calc_key(). Owned by the caller.
++ * \param[out] dnsrec_resp On ARES_SUCCESS, the cached answer, owned by the
++ * caller and destroyed with
++ * ares_dns_record_destroy(). Set to NULL on any
++ * other status, except ARES_EFORMERR, which is
++ * returned by the argument check before this is
++ * touched.
++ * \return ARES_SUCCESS on a hit, ARES_ENOTFOUND on a miss, ARES_EFORMERR on
++ * invalid arguments.
++ */
++ares_status_t ares_qcache_fetch(ares_channel_t *channel,
++ const ares_timeval_t *now, const char *key,
++ ares_dns_record_t **dnsrec_resp);
+
+ void ares_metrics_record(const ares_query_t *query, ares_server_t *server,
+ ares_status_t status, const ares_dns_record_t *dnsrec);
+diff --git a/src/lib/ares_process.c b/src/lib/ares_process.c
+index 1569408b1b..88536704ad 100644
+--- a/src/lib/ares_process.c
++++ b/src/lib/ares_process.c
+@@ -1859,6 +1859,7 @@ void ares_free_query(ares_query_t *query)
+ query->arg = NULL;
+ /* Deallocate the memory associated with the query */
+ ares_dns_record_destroy(query->query);
++ ares_free(query->qcache_key);
+
+ ares_free(query);
+ }
+diff --git a/src/lib/ares_qcache.c b/src/lib/ares_qcache.c
+index ad3bc83505..f48669b56c 100644
+--- a/src/lib/ares_qcache.c
++++ b/src/lib/ares_qcache.c
+@@ -38,7 +38,7 @@ typedef struct {
+ time_t insert_ts;
+ } ares_qcache_entry_t;
+
+-static char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec)
++char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec)
+ {
+ ares_buf_t *buf = ares_buf_create();
+ size_t i;
+@@ -49,7 +49,22 @@ static char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec)
+ return NULL; /* LCOV_EXCL_LINE: DefensiveCoding */
+ }
+
+- /* Format is OPCODE|FLAGS[|QTYPE1|QCLASS1|QNAME1]... */
++ /* Format is
++ * OPCODE|FLAGS[|EDNS|VER|FLAGS[|ID:HEX]...]|QDCOUNT[|TYPE|CLASS|LEN:QNAME]...
++ *
++ * The EDNS section matters: an answer fetched under one set of EDNS options
++ * is not interchangeable with one fetched under another. A request with no
++ * OPT record appends nothing; note that EDNS is on by default, so ordinary
++ * lookups do carry one and their keys did change with this.
++ *
++ * Everything a caller does not control is emitted before the questions, so
++ * the names are always last. A name reaches the key unescaped, so anything
++ * keyed after it could otherwise be imitated by a name containing that same
++ * text, giving two different requests one key. The question count is part
++ * of that: without it, a request with two questions and a request with one
++ * whose name spells out the second produce identical keys. Each name is
++ * also length-prefixed, so adjacent names cannot be made to run together
++ * even when the question counts match. */
+
+ status = ares_buf_append_str(
+ buf, ares_dns_opcode_tostr(ares_dns_record_get_opcode(dnsrec)));
+@@ -63,7 +78,11 @@ static char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec)
+ }
+
+ flags = ares_dns_record_get_flags(dnsrec);
+- /* Only care about RD and CD */
++ /* RD, CD and AD. AD is here because RFC 6840 section 5.7 defines it in a
++ * request as a signal that the requester wants the AD bit evaluated in the
++ * response, and section 5.8 says a validating resolver should only set AD
++ * in a response when the request carried DO or AD -- so an answer fetched
++ * without it can legitimately differ from one fetched with it. */
+ if (flags & ARES_FLAG_RD) {
+ status = ares_buf_append_str(buf, "rd");
+ if (status != ARES_SUCCESS) {
+@@ -76,6 +95,95 @@ static char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec)
+ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
+ }
+ }
++ if (flags & ARES_FLAG_AD) {
++ status = ares_buf_append_str(buf, "ad");
++ if (status != ARES_SUCCESS) {
++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++ }
++
++ /* EDNS state. Skipped entirely when the request carries no OPT record. */
++ {
++ const ares_dns_rr_t *opt = ares_dns_get_opt_rr_const(dnsrec);
++
++ if (opt != NULL) {
++ size_t opt_cnt = ares_dns_rr_get_opt_cnt(opt, ARES_RR_OPT_OPTIONS);
++ size_t j;
++
++ status = ares_buf_append_str(buf, "|EDNS|");
++ if (status != ARES_SUCCESS) {
++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++ status = ares_buf_append_num_hex(
++ buf, ares_dns_rr_get_u8(opt, ARES_RR_OPT_VERSION), 0);
++ if (status != ARES_SUCCESS) {
++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++ status = ares_buf_append_byte(buf, '|');
++ if (status != ARES_SUCCESS) {
++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++ /* Carries the DO bit, so a DNSSEC-aware request cannot be served an
++ * answer that was fetched without it. */
++ status = ares_buf_append_num_hex(
++ buf, ares_dns_rr_get_u16(opt, ARES_RR_OPT_FLAGS), 0);
++ if (status != ARES_SUCCESS) {
++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++
++ /* The advertised UDP payload size is deliberately excluded: it
++ * constrains how a response is transported, not what it says. A server
++ * that cannot fit the additional section may omit it without setting
++ * the TC bit (RFC 2181 section 9), so two sizes can produce answers
++ * that differ outside the answer section; that is accepted here. */
++ for (j = 0; j < opt_cnt; j++) {
++ const unsigned char *val = NULL;
++ size_t val_len = 0;
++ unsigned short optid =
++ ares_dns_rr_get_opt(opt, ARES_RR_OPT_OPTIONS, j, &val, &val_len);
++
++ /* DNS cookies are per-server transport state and say nothing about
++ * the content of an answer. A cookie c-ares adds never reaches here
++ * -- ares_cookie_apply() writes to query->query, after this key has
++ * been derived -- so this only ever skips one the caller supplied. */
++ if (optid == ARES_OPT_PARAM_COOKIE) {
++ continue;
++ }
++
++ status = ares_buf_append_byte(buf, '|');
++ if (status != ARES_SUCCESS) {
++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++ status = ares_buf_append_num_hex(buf, optid, 0);
++ if (status != ARES_SUCCESS) {
++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++ status = ares_buf_append_byte(buf, ':');
++ if (status != ARES_SUCCESS) {
++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++ if (val != NULL) {
++ size_t k;
++ for (k = 0; k < val_len; k++) {
++ status = ares_buf_append_num_hex(buf, val[k], 2);
++ if (status != ARES_SUCCESS) {
++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++ }
++ }
++ }
++ }
++ }
++
++ status = ares_buf_append_byte(buf, '|');
++ if (status != ARES_SUCCESS) {
++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++
++ status = ares_buf_append_num_dec(buf, ares_dns_record_query_cnt(dnsrec), 0);
++ if (status != ARES_SUCCESS) {
++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
+
+ for (i = 0; i < ares_dns_record_query_cnt(dnsrec); i++) {
+ const char *name;
+@@ -93,7 +201,13 @@ static char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec)
+ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
+ }
+
+- status = ares_buf_append_str(buf, ares_dns_rec_type_tostr(qtype));
++ /* Numeric, not the mnemonic: ares_dns_rec_type_tostr() returns "UNKNOWN"
++ * for every type outside its table, and ares_dns_record_query_add() does
++ * not validate the type, so any 16-bit value reaches here through the
++ * ordinary public API. Two such lookups -- LOC and DNAME, say -- would
++ * otherwise key identically and be answered with each other's records.
++ * The key only has to be injective, not readable. */
++ status = ares_buf_append_num_dec(buf, (size_t)qtype, 0);
+ if (status != ARES_SUCCESS) {
+ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
+ }
+@@ -103,7 +217,10 @@ static char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec)
+ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
+ }
+
+- status = ares_buf_append_str(buf, ares_dns_class_tostr(qclass));
++ /* Numeric for the same reason. ares_dns_record_query_add() does reject
++ * classes outside its list today, so the mnemonic is safe -- but the key
++ * should not depend on that validation staying where it is. */
++ status = ares_buf_append_num_dec(buf, (size_t)qclass, 0);
+ if (status != ARES_SUCCESS) {
+ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
+ }
+@@ -121,6 +238,21 @@ static char *ares_qcache_calc_key(const ares_dns_record_t *dnsrec)
+ name_len--;
+ }
+
++ /* Length-prefix the name so it is self-delimiting. The question count
++ * above stops one question imitating two, but with the counts equal the
++ * boundary between adjacent names is still guessable, since names reach
++ * the key unescaped separated only by '|'. A length makes each name
++ * unambiguous for any question count. */
++ status = ares_buf_append_num_dec(buf, name_len, 0);
++ if (status != ARES_SUCCESS) {
++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++
++ status = ares_buf_append_byte(buf, ':');
++ if (status != ARES_SUCCESS) {
++ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++
+ if (name_len > 0) {
+ status = ares_buf_append(buf, (const unsigned char *)name, name_len);
+ if (status != ARES_SUCCESS) {
+@@ -301,10 +433,10 @@ static unsigned int ares_qcache_soa_minimum(ares_dns_record_t *dnsrec)
+ }
+
+ /* On success, takes ownership of dnsrec */
+-static ares_status_t ares_qcache_insert_int(ares_qcache_t *qcache,
+- ares_dns_record_t *qresp,
+- const ares_dns_record_t *qreq,
+- const ares_timeval_t *now)
++static ares_status_t ares_qcache_insert_int(ares_qcache_t *qcache,
++ ares_dns_record_t *qresp,
++ const char *key,
++ const ares_timeval_t *now)
+ {
+ ares_qcache_entry_t *entry;
+ unsigned int ttl;
+@@ -350,11 +482,11 @@ static ares_status_t ares_qcache_insert_int(ares_qcache_t *qcache,
+ entry->expire_ts = (time_t)now->sec + (time_t)ttl;
+ entry->insert_ts = (time_t)now->sec;
+
+- /* We can't guarantee the server responded with the same flags as the
+- * request had, so we have to re-parse the request in order to generate the
+- * key for caching, but we'll only do this once we know for sure we really
+- * want to cache it */
+- entry->key = ares_qcache_calc_key(qreq);
++ /* The key was derived from the caller's request when the query was created.
++ * It must not be recomputed from query->query here: the EDNS fallback path
++ * strips the OPT record from that record before a successful retry, so a
++ * key derived from it would not match the one a later lookup computes. */
++ entry->key = ares_strdup(key);
+ if (entry->key == NULL) {
+ goto fail; /* LCOV_EXCL_LINE: OutOfMemory */
+ }
+@@ -382,31 +514,25 @@ static ares_status_t ares_qcache_insert_int(ares_qcache_t *qcache,
+ /* LCOV_EXCL_STOP */
+ }
+
+-ares_status_t ares_qcache_fetch(ares_channel_t *channel,
+- const ares_timeval_t *now,
+- const ares_dns_record_t *dnsrec,
+- const ares_dns_record_t **dnsrec_resp)
++ares_status_t ares_qcache_fetch(ares_channel_t *channel,
++ const ares_timeval_t *now, const char *key,
++ ares_dns_record_t **dnsrec_resp)
+ {
+- char *key = NULL;
+ ares_qcache_entry_t *entry;
+ ares_status_t status = ARES_SUCCESS;
+
+- if (channel == NULL || dnsrec == NULL || dnsrec_resp == NULL) {
++ if (channel == NULL || key == NULL || dnsrec_resp == NULL) {
+ return ARES_EFORMERR;
+ }
+
++ *dnsrec_resp = NULL;
++
+ if (channel->qcache == NULL) {
+ return ARES_ENOTFOUND;
+ }
+
+ ares_qcache_expire(channel->qcache, now);
+
+- key = ares_qcache_calc_key(dnsrec);
+- if (key == NULL) {
+- status = ARES_ENOMEM; /* LCOV_EXCL_LINE: OutOfMemory */
+- goto done; /* LCOV_EXCL_LINE: OutOfMemory */
+- }
+-
+ entry = ares_htable_strvp_get_direct(channel->qcache->cache, key);
+ if (entry == NULL) {
+ status = ARES_ENOTFOUND;
+@@ -416,10 +542,24 @@ ares_status_t ares_qcache_fetch(ares_channel_t *channel,
+ ares_dns_record_ttl_decrement(entry->dnsrec,
+ (unsigned int)(now->sec - entry->insert_ts));
+
+- *dnsrec_resp = entry->dnsrec;
++ /* Hand back a copy the caller owns rather than the cache's own record.
++ * This is passed straight into an application callback, and that callback
++ * is allowed to re-enter c-ares. Any lookup it starts runs the expiry
++ * reaper first, and changing the server list flushes the cache outright --
++ * either would destroy this entry while the callback still held a pointer
++ * into it. Mirrors the ownership fix already made on the insert side. */
++ status = ares_dns_record_duplicate_ex(dnsrec_resp, entry->dnsrec);
++ if (status != ARES_SUCCESS) {
++ /* Could not hand back a private copy. Report a miss so the lookup falls
++ * through to a real query rather than failing outright: duplication
++ * writes and re-parses the record, so it can fail for reasons other than
++ * memory exhaustion, and none of them are a reason to fail a lookup that
++ * would have gone to a server a moment earlier. */
++ status = ARES_ENOTFOUND; /* LCOV_EXCL_LINE: UntestablePath */
++ goto done; /* LCOV_EXCL_LINE: UntestablePath */
++ }
+
+ done:
+- ares_free(key);
+ return status;
+ }
+
+@@ -428,13 +568,25 @@ ares_status_t ares_qcache_insert(ares_channel_t *channel,
+ const ares_query_t *query,
+ const ares_dns_record_t *dnsrec)
+ {
+- ares_dns_record_t *dupdns = ares_dns_record_duplicate(dnsrec);
++ ares_dns_record_t *dupdns;
+ ares_status_t status;
+
++ /* Checked before the duplicate below, which is a full write and re-parse:
++ * no key means caching is switched off, so the copy would be thrown away.
++ * ares_init_options() always creates the cache object -- it is disabled by
++ * a zero maximum TTL, not by a NULL pointer -- so this is the only place
++ * the distinction is visible here. */
++ if (query->qcache_key == NULL) {
++ return ARES_ENOTIMP;
++ }
++
++ dupdns = ares_dns_record_duplicate(dnsrec);
+ if (dupdns == NULL) {
+ return ARES_ENOMEM;
+ }
+- status = ares_qcache_insert_int(channel->qcache, dupdns, query->query, now);
++
++ status =
++ ares_qcache_insert_int(channel->qcache, dupdns, query->qcache_key, now);
+ if (status != ARES_SUCCESS) {
+ ares_dns_record_destroy(dupdns);
+ }
+diff --git a/src/lib/ares_send.c b/src/lib/ares_send.c
+index dd4a28544b..117745ce28 100644
+--- a/src/lib/ares_send.c
++++ b/src/lib/ares_send.c
+@@ -111,11 +111,12 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server,
+ ares_callback_dnsrec callback, void *arg,
+ unsigned short *qid)
+ {
+- ares_query_t *query;
+- ares_timeval_t now;
+- ares_status_t status;
+- unsigned short id = generate_unique_qid(channel);
+- const ares_dns_record_t *dnsrec_resp = NULL;
++ ares_query_t *query;
++ ares_timeval_t now;
++ ares_status_t status;
++ unsigned short id = generate_unique_qid(channel);
++ ares_dns_record_t *dnsrec_resp = NULL;
++ char *qcache_key = NULL;
+
+ /* A channel being destroyed accepts no new queries. ares_destroy(3)
+ * documents that a callback must not add new requests to a channel being
+@@ -145,13 +146,28 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server,
+ return ARES_ENOSERVER;
+ }
+
+- if (!(flags & ARES_SEND_FLAG_NOCACHE)) {
++ /* Derive the cache key once, from the caller's request, and only when the
++ * cache is actually on. The send path may mutate query->query afterwards
++ * -- the EDNS fallback strips its OPT record -- and a key derived from it
++ * later would not match. ares_init_options() always creates the cache
++ * object, so a zero maximum TTL is what "off" means. */
++ if (channel->qcache_max_ttl > 0) {
++ qcache_key = ares_qcache_calc_key(dnsrec);
++ if (qcache_key == NULL) {
++ callback(arg, ARES_ENOMEM, 0, NULL); /* LCOV_EXCL_LINE: OutOfMemory */
++ return ARES_ENOMEM; /* LCOV_EXCL_LINE: OutOfMemory */
++ }
++ }
++
++ if (qcache_key != NULL && !(flags & ARES_SEND_FLAG_NOCACHE)) {
+ /* Check query cache */
+- status = ares_qcache_fetch(channel, &now, dnsrec, &dnsrec_resp);
++ status = ares_qcache_fetch(channel, &now, qcache_key, &dnsrec_resp);
+ if (status != ARES_ENOTFOUND) {
+ /* ARES_SUCCESS means we retrieved the cache, anything else is a critical
+ * failure, all result in termination */
++ ares_free(qcache_key);
+ callback(arg, status, 0, dnsrec_resp);
++ ares_dns_record_destroy(dnsrec_resp);
+ return status;
+ }
+ }
+@@ -159,8 +175,11 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server,
+ /* Allocate space for query and allocated fields. */
+ query = ares_malloc(sizeof(ares_query_t));
+ if (!query) {
+- callback(arg, ARES_ENOMEM, 0, NULL); /* LCOV_EXCL_LINE: OutOfMemory */
+- return ARES_ENOMEM; /* LCOV_EXCL_LINE: OutOfMemory */
++ /* LCOV_EXCL_START: OutOfMemory */
++ ares_free(qcache_key);
++ callback(arg, ARES_ENOMEM, 0, NULL);
++ return ARES_ENOMEM;
++ /* LCOV_EXCL_STOP */
+ }
+ memset(query, 0, sizeof(*query));
+
+@@ -173,6 +192,10 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server,
+ (channel->flags & ARES_FLAG_USEVC) ? ARES_TRUE : ARES_FALSE;
+
+ /* Duplicate Query */
++ /* The query adopts the key derived above; ares_free_query() releases it. */
++ query->qcache_key = qcache_key;
++ qcache_key = NULL;
++
+ status = ares_dns_record_duplicate_ex(&query->query, dnsrec);
+ if (status != ARES_SUCCESS) {
+ /* Sometimes we might get a EBADRESP response from duplicate due to
+@@ -180,7 +203,11 @@ ares_status_t ares_send_nolock(ares_channel_t *channel, ares_server_t *server,
+ if (status == ARES_EBADRESP) {
+ status = ARES_EBADQUERY;
+ }
+- ares_free(query);
++ /* ares_free_query() rather than ares_free(): the query was zeroed above,
++ * so detaching finds every node NULL and the qid not yet registered, and
++ * it also releases qcache_key. Reachable without memory pressure -- a
++ * name that is not a valid hostname fails the duplicate. */
++ ares_free_query(query);
+ callback(arg, status, 0, NULL);
+ return status;
+ }
+diff --git a/test/ares-test-internal.cc b/test/ares-test-internal.cc
+index 8881f3b7cc..5ba5d2b39b 100644
+--- a/test/ares-test-internal.cc
++++ b/test/ares-test-internal.cc
+@@ -502,6 +502,60 @@ TEST_F(LibraryTest, URI) {
+ EXPECT_NE(ARES_SUCCESS, ares_uri_parse_buf(NULL, NULL));
+ EXPECT_NE(ARES_SUCCESS, ares_uri_parse_buf(NULL, NULL));
+ }
++
++// The cache key must distinguish requests whose answers are not
++// interchangeable. Two shapes are easy to get wrong because names reach the
++// key unescaped: a request with two questions versus one whose name spells out
++// the second, and two requests with the same question count whose names can be
++// made to run together. Both are narrow to reach -- they need a hand-built
++// record with more than one question, which real servers reject -- but the key
++// asserts they are distinct, so pin it.
++TEST_F(LibraryTest, QcacheKeyDistinguishesQuestions) {
++ struct qcase {
++ const char *n1;
++ const char *n2; /* nullptr for a single-question record */
++ };
++ const qcase cases[] = {
++ { "one.example.net", "two.example.net" },
++ { "one.example.net|A|IN|two.example.net", nullptr },
++ { "one.example.net", "two.example.net|A|IN|three.example.net" },
++ { "one.example.net|A|IN|two.example.net", "three.example.net" },
++ };
++ std::vector<std::string> keys;
++
++ for (size_t i = 0; i < sizeof(cases) / sizeof(cases[0]); i++) {
++ ares_dns_record_t *req = nullptr;
++ char *key = nullptr;
++
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_create(&req, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY,
++ ARES_RCODE_NOERROR));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_query_add(req, cases[i].n1, ARES_REC_TYPE_A,
++ ARES_CLASS_IN));
++ if (cases[i].n2 != nullptr) {
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_query_add(req, cases[i].n2, ARES_REC_TYPE_A,
++ ARES_CLASS_IN));
++ }
++
++ key = ares_qcache_calc_key(req);
++ ASSERT_NE(nullptr, key);
++ keys.push_back(std::string(key));
++ ares_free_string(key);
++ ares_dns_record_destroy(req);
++ }
++
++ /* Every one of these is a different request, so every key must differ. */
++ for (size_t i = 0; i < keys.size(); i++) {
++ for (size_t j = i + 1; j < keys.size(); j++) {
++ EXPECT_NE(keys[i], keys[j])
++ << "cache key collision between case " << i << " and case " << j
++ << ": " << keys[i];
++ }
++ }
++}
++
+ #endif /* !CARES_SYMBOL_HIDING */
+
+ TEST_F(LibraryTest, InetPtoN) {
+diff --git a/test/ares-test-mock.cc b/test/ares-test-mock.cc
+index b848c02434..4b409db7c3 100644
+--- a/test/ares-test-mock.cc
++++ b/test/ares-test-mock.cc
+@@ -611,6 +611,425 @@ class CacheQueriesTest
+ struct ares_options opts_;
+ };
+
++// A cache hit used to hand the callback a pointer to the cache's own record.
++// That is fine only while the callback does nothing else -- but re-entering
++// c-ares from a callback is documented as allowed, and two ordinary things a
++// callback might do destroy the entry underneath it: changing the server list
++// flushes the whole cache, and starting another lookup runs the expiry reaper
++// first. The record must therefore be the caller's own copy.
++//
++// Here the callback changes the server list, which flushes the cache, and then
++// reads the record it was handed.
++struct QcacheReentrantCbData {
++ ares_channel_t *channel;
++ bool done;
++ size_t ancount;
++};
++
++static void QcacheReentrantCallback(void *arg, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec) {
++ QcacheReentrantCbData *data = static_cast<QcacheReentrantCbData *>(arg);
++ (void)timeouts;
++ data->done = true;
++ if (status != ARES_SUCCESS || dnsrec == NULL) {
++ return;
++ }
++ /* Documented re-entry. Reconfiguring servers flushes the query cache. */
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_set_servers_csv(data->channel, "127.0.0.1:53055"));
++ /* Still inside the callback, so this record must still be readable. */
++ data->ancount = ares_dns_record_rr_cnt(dnsrec, ARES_SECTION_ANSWER);
++}
++
++TEST_P(CacheQueriesTest, ReentrantFlushInCallbackNoUseAfterFree) {
++ DNSPacket rsp;
++ rsp.set_response().set_aa()
++ .add_question(new DNSQuestion("www.google.com", T_A))
++ .add_answer(new DNSARR("www.google.com", 100, {2, 3, 4, 5}));
++ ON_CALL(server_, OnRequest("www.google.com", T_A))
++ .WillByDefault(SetReply(&server_, &rsp));
++
++ /* Populate the cache. */
++ QueryResult first;
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ QueryCallback, &first, NULL);
++ Process();
++ EXPECT_TRUE(first.done_);
++
++ /* Served from the cache, so the callback runs synchronously holding the
++ * record the cache handed it. */
++ QcacheReentrantCbData data;
++ data.channel = channel_;
++ data.done = false;
++ data.ancount = 0;
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ QcacheReentrantCallback, &data, NULL);
++
++ EXPECT_TRUE(data.done);
++ EXPECT_EQ((size_t)1, data.ancount);
++}
++
++// The cache key covered the question and a couple of header flags but ignored
++// the request's OPT record entirely, so two requests differing only in their
++// EDNS options collided. An answer obtained under one set of options is not
++// interchangeable with one obtained under another -- most obviously, a request
++// with the DO bit set must not be handed an answer fetched without it.
++//
++// Both requests here ask the identical question; only the EDNS state differs,
++// so the server must see two of them.
++TEST_P(CacheQueriesTest, EdnsOptionsSeparateCacheEntries) {
++ DNSPacket rsp;
++ rsp.set_response().set_aa()
++ .add_question(new DNSQuestion("www.google.com", T_A))
++ .add_answer(new DNSARR("www.google.com", 100, {2, 3, 4, 5}));
++ EXPECT_CALL(server_, OnRequest("www.google.com", T_A))
++ .Times(2)
++ .WillRepeatedly(SetReply(&server_, &rsp));
++
++ /* First: no OPT record at all. */
++ ares_dns_record_t *req1 = nullptr;
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_create(&req1, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY,
++ ARES_RCODE_NOERROR));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_query_add(req1, "www.google.com", ARES_REC_TYPE_A,
++ ARES_CLASS_IN));
++ QueryResult r1;
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_send_dnsrec(channel_, req1, QueryCallback, &r1, nullptr));
++ Process();
++ EXPECT_TRUE(r1.done_);
++ EXPECT_EQ(ARES_SUCCESS, r1.status_);
++
++ /* Second: same question, but carrying EDNS with the DO bit set. */
++ ares_dns_record_t *req2 = nullptr;
++ ares_dns_rr_t *opt = nullptr;
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_create(&req2, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY,
++ ARES_RCODE_NOERROR));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_query_add(req2, "www.google.com", ARES_REC_TYPE_A,
++ ARES_CLASS_IN));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_rr_add(&opt, req2, ARES_SECTION_ADDITIONAL, "",
++ ARES_REC_TYPE_OPT, ARES_CLASS_IN, 0));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_rr_set_u16(opt, ARES_RR_OPT_UDP_SIZE, 1232));
++ EXPECT_EQ(ARES_SUCCESS, ares_dns_rr_set_u8(opt, ARES_RR_OPT_VERSION, 0));
++ /* DO */
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_rr_set_u16(opt, ARES_RR_OPT_FLAGS, 0x8000));
++
++ QueryResult r2;
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_send_dnsrec(channel_, req2, QueryCallback, &r2, nullptr));
++ Process();
++ EXPECT_TRUE(r2.done_);
++ EXPECT_EQ(ARES_SUCCESS, r2.status_);
++
++ ares_dns_record_destroy(req1);
++ ares_dns_record_destroy(req2);
++}
++
++// The test above sets the DO bit, which lives in the OPT flags -- it never
++// reaches the loop that keys the individual EDNS options. That loop is what
++// separates two client subnets, so it needs its own coverage.
++// The mirror image of the tests above: two things are deliberately left out
++// of the cache key, and leaving them out is a security-relevant judgement --
++// it declares that two requests differing only in these still have
++// interchangeable answers. Without a test, keying on either one later would
++// turn every request from an affected application into a permanent cache miss
++// and nothing would fail.
++
++// A DNS cookie is per-server transport state and says nothing about the
++// content of an answer, so two requests differing only in their cookie share
++// an entry. The server must therefore be asked exactly once.
++// Two query types with no mnemonic in ares_dns_rec_type_tostr() both render as
++// "UNKNOWN", so keying the mnemonic made every such type share one entry -- a
++// lookup answered with a record of a type it never asked for. Any 16-bit
++// value reaches here through ares_query_dnsrec(); LOC (29) and DNAME (39) are
++// both real and both outside the table.
++TEST_P(CacheQueriesTest, UnknownQueryTypesDoNotShareCacheEntries) {
++ DNSPacket rsp29;
++ rsp29.set_response().set_aa().add_question(
++ new DNSQuestion("example.net", 29));
++ DNSPacket rsp39;
++ rsp39.set_response().set_aa().add_question(
++ new DNSQuestion("example.net", 39));
++
++ // One call per type: neither may be served the other's answer.
++ EXPECT_CALL(server_, OnRequest("example.net", 29))
++ .Times(1)
++ .WillRepeatedly(SetReply(&server_, &rsp29));
++ EXPECT_CALL(server_, OnRequest("example.net", 39))
++ .Times(1)
++ .WillRepeatedly(SetReply(&server_, &rsp39));
++
++ QueryResult r1;
++ ares_query_dnsrec(channel_, "example.net", ARES_CLASS_IN,
++ static_cast<ares_dns_rec_type_t>(29), QueryCallback, &r1,
++ nullptr);
++ Process();
++ EXPECT_TRUE(r1.done_);
++
++ QueryResult r2;
++ ares_query_dnsrec(channel_, "example.net", ARES_CLASS_IN,
++ static_cast<ares_dns_rec_type_t>(39), QueryCallback, &r2,
++ nullptr);
++ Process();
++ EXPECT_TRUE(r2.done_);
++}
++
++// Handing back a duplicate materialises the pending TTL decrement, so a
++// callback that reads the TTL off the record it is given sees the remaining
++// lifetime rather than the value the server sent. docs/ares_init_options.3
++// states this, so pin it. Only visible to a caller that does not duplicate
++// first -- QueryResult does, which is why the other cache tests cannot see it.
++static unsigned int g_qcache_hit_ttl = 0;
++
++static void QcacheTtlCallback(void *arg, ares_status_t status, size_t timeouts,
++ const ares_dns_record_t *dnsrec) {
++ const ares_dns_rr_t *rr;
++ (void)arg;
++ (void)timeouts;
++ if (status != ARES_SUCCESS || dnsrec == NULL) {
++ return;
++ }
++ rr = ares_dns_record_rr_get_const(dnsrec, ARES_SECTION_ANSWER, 0);
++ g_qcache_hit_ttl = rr ? ares_dns_rr_get_ttl(rr) : 0;
++}
++
++TEST_P(CacheQueriesTest, CacheHitReportsRemainingTtl) {
++ DNSPacket rsp;
++ rsp.set_response().set_aa()
++ .add_question(new DNSQuestion("www.google.com", T_A))
++ .add_answer(new DNSARR("www.google.com", 100, {2, 3, 4, 5}));
++ EXPECT_CALL(server_, OnRequest("www.google.com", T_A))
++ .Times(1)
++ .WillRepeatedly(SetReply(&server_, &rsp));
++
++ g_qcache_hit_ttl = 0;
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ QcacheTtlCallback, nullptr, nullptr);
++ Process();
++ EXPECT_EQ((unsigned int)100, g_qcache_hit_ttl);
++
++ ares_sleep_time(2100);
++
++ g_qcache_hit_ttl = 0;
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ QcacheTtlCallback, nullptr, nullptr);
++ Process();
++ // Served from the cache, and reporting what is left rather than the
++ // original 100.
++ EXPECT_GT(g_qcache_hit_ttl, (unsigned int)0);
++ EXPECT_LT(g_qcache_hit_ttl, (unsigned int)100);
++}
++
++TEST_P(CacheQueriesTest, CookieDoesNotSplitCacheEntries) {
++ DNSPacket rsp;
++ rsp.set_response().set_aa()
++ .add_question(new DNSQuestion("www.google.com", T_A))
++ .add_answer(new DNSARR("www.google.com", 100, {2, 3, 4, 5}));
++ EXPECT_CALL(server_, OnRequest("www.google.com", T_A))
++ .Times(1)
++ .WillRepeatedly(SetReply(&server_, &rsp));
++
++ const unsigned char ck1[] = {1, 2, 3, 4, 5, 6, 7, 8};
++ const unsigned char ck2[] = {8, 7, 6, 5, 4, 3, 2, 1};
++ const unsigned char *ck[2] = {ck1, ck2};
++ QueryResult r[2];
++
++ for (int i = 0; i < 2; i++) {
++ ares_dns_record_t *req = nullptr;
++ ares_dns_rr_t *opt = nullptr;
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_create(&req, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY,
++ ARES_RCODE_NOERROR));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_query_add(req, "www.google.com", ARES_REC_TYPE_A,
++ ARES_CLASS_IN));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_rr_add(&opt, req, ARES_SECTION_ADDITIONAL, "",
++ ARES_REC_TYPE_OPT, ARES_CLASS_IN, 0));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_rr_set_u16(opt, ARES_RR_OPT_UDP_SIZE, 1232));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_rr_set_opt(opt, ARES_RR_OPT_OPTIONS,
++ ARES_OPT_PARAM_COOKIE, ck[i], sizeof(ck1)));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_send_dnsrec(channel_, req, QueryCallback, &r[i], nullptr));
++ Process();
++ EXPECT_TRUE(r[i].done_);
++ EXPECT_EQ(ARES_SUCCESS, r[i].status_);
++ ares_dns_record_destroy(req);
++ }
++}
++
++// The advertised UDP payload size constrains how a response is transported,
++// not what it says, so it is excluded too. Same expectation: one request.
++TEST_P(CacheQueriesTest, UdpPayloadSizeDoesNotSplitCacheEntries) {
++ DNSPacket rsp;
++ rsp.set_response().set_aa()
++ .add_question(new DNSQuestion("www.google.com", T_A))
++ .add_answer(new DNSARR("www.google.com", 100, {2, 3, 4, 5}));
++ EXPECT_CALL(server_, OnRequest("www.google.com", T_A))
++ .Times(1)
++ .WillRepeatedly(SetReply(&server_, &rsp));
++
++ const unsigned short sizes[2] = {512, 1232};
++ QueryResult r[2];
++
++ for (int i = 0; i < 2; i++) {
++ ares_dns_record_t *req = nullptr;
++ ares_dns_rr_t *opt = nullptr;
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_create(&req, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY,
++ ARES_RCODE_NOERROR));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_query_add(req, "www.google.com", ARES_REC_TYPE_A,
++ ARES_CLASS_IN));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_rr_add(&opt, req, ARES_SECTION_ADDITIONAL, "",
++ ARES_REC_TYPE_OPT, ARES_CLASS_IN, 0));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_rr_set_u16(opt, ARES_RR_OPT_UDP_SIZE, sizes[i]));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_send_dnsrec(channel_, req, QueryCallback, &r[i], nullptr));
++ Process();
++ EXPECT_TRUE(r[i].done_);
++ EXPECT_EQ(ARES_SUCCESS, r[i].status_);
++ ares_dns_record_destroy(req);
++ }
++}
++
++TEST_P(CacheQueriesTest, EdnsClientSubnetSeparateCacheEntries) {
++ DNSPacket rsp;
++ rsp.set_response().set_aa()
++ .add_question(new DNSQuestion("www.google.com", T_A))
++ .add_answer(new DNSARR("www.google.com", 100, {2, 3, 4, 5}));
++ EXPECT_CALL(server_, OnRequest("www.google.com", T_A))
++ .Times(2)
++ .WillRepeatedly(SetReply(&server_, &rsp));
++
++ /* 192.0.2.0/24 and 198.51.100.0/24 */
++ const unsigned char ecs1[] = {0x00, 0x01, 0x18, 0x00, 0xc0, 0x00, 0x02};
++ const unsigned char ecs2[] = {0x00, 0x01, 0x18, 0x00, 0xc6, 0x33, 0x64};
++ const unsigned char *ecs[2] = {ecs1, ecs2};
++ QueryResult r[2];
++
++ for (int i = 0; i < 2; i++) {
++ ares_dns_record_t *req = nullptr;
++ ares_dns_rr_t *opt = nullptr;
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_create(&req, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY,
++ ARES_RCODE_NOERROR));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_query_add(req, "www.google.com", ARES_REC_TYPE_A,
++ ARES_CLASS_IN));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_rr_add(&opt, req, ARES_SECTION_ADDITIONAL, "",
++ ARES_REC_TYPE_OPT, ARES_CLASS_IN, 0));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_rr_set_u16(opt, ARES_RR_OPT_UDP_SIZE, 1232));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_rr_set_opt(opt, ARES_RR_OPT_OPTIONS,
++ ARES_OPT_PARAM_EDNS_CLIENT_SUBNET, ecs[i],
++ sizeof(ecs1)));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_send_dnsrec(channel_, req, QueryCallback, &r[i], nullptr));
++ Process();
++ EXPECT_TRUE(r[i].done_);
++ EXPECT_EQ(ARES_SUCCESS, r[i].status_);
++ ares_dns_record_destroy(req);
++ }
++}
++
++// A server answering an EDNS query with FORMERR makes c-ares strip the OPT
++// record from query->query and retry. The cache key must not be derived from
++// that record afterwards, or the entry is stored under a key no later lookup
++// computes and the cache silently stops working for that name.
++TEST_P(CacheQueriesTest, EdnsFallbackStillCaches) {
++ DNSPacket rspfail;
++ rspfail.set_response().set_aa().set_rcode(FORMERR)
++ .add_question(new DNSQuestion("www.google.com", T_A));
++ DNSPacket rspok;
++ rspok.set_response().set_aa()
++ .add_question(new DNSQuestion("www.google.com", T_A))
++ .add_answer(new DNSARR("www.google.com", 100, {1, 2, 3, 4}));
++ /* Two: the FORMERR and the retry. The second lookup must be a cache hit. */
++ EXPECT_CALL(server_, OnRequest("www.google.com", T_A))
++ .Times(2)
++ .WillOnce(SetReply(&server_, &rspfail))
++ .WillRepeatedly(SetReply(&server_, &rspok));
++
++ HostResult r1;
++ ares_gethostbyname(channel_, "www.google.com.", AF_INET, HostCallback, &r1);
++ Process();
++ EXPECT_TRUE(r1.done_);
++ EXPECT_EQ(ARES_SUCCESS, r1.status_);
++
++ HostResult r2;
++ ares_gethostbyname(channel_, "www.google.com.", AF_INET, HostCallback, &r2);
++ Process();
++ EXPECT_TRUE(r2.done_);
++ EXPECT_EQ(ARES_SUCCESS, r2.status_);
++}
++
++// The question name is caller-supplied and unescaped, so anything keyed after
++// it could be imitated by a name containing that same text. A request for
++// "example.net|EDNS|0|8000" with no OPT record must not collide with a request
++// for "example.net" carrying EDNS with the DNSSEC OK bit set.
++TEST_P(CacheQueriesTest, EdnsSectionCannotBeImitatedByName) {
++ DNSPacket rsp;
++ rsp.set_response().set_aa()
++ .add_question(new DNSQuestion("example.net", T_A))
++ .add_answer(new DNSARR("example.net", 100, {5, 6, 7, 8}));
++ ON_CALL(server_, OnRequest("example.net", T_A))
++ .WillByDefault(SetReply(&server_, &rsp));
++
++ /* Cache an answer for the real name, with EDNS and the DO bit set. */
++ ares_dns_record_t *req = nullptr;
++ ares_dns_rr_t *opt = nullptr;
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_create(&req, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY,
++ ARES_RCODE_NOERROR));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_query_add(req, "example.net", ARES_REC_TYPE_A,
++ ARES_CLASS_IN));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_rr_add(&opt, req, ARES_SECTION_ADDITIONAL, "",
++ ARES_REC_TYPE_OPT, ARES_CLASS_IN, 0));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_rr_set_u16(opt, ARES_RR_OPT_UDP_SIZE, 1232));
++ EXPECT_EQ(ARES_SUCCESS, ares_dns_rr_set_u16(opt, ARES_RR_OPT_FLAGS, 0x8000));
++ QueryResult r1;
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_send_dnsrec(channel_, req, QueryCallback, &r1, nullptr));
++ Process();
++ EXPECT_TRUE(r1.done_);
++ EXPECT_EQ(ARES_SUCCESS, r1.status_);
++ ares_dns_record_destroy(req);
++
++ /* A different name that spells out the EDNS suffix, with no OPT record.
++ * It must not be served the entry above; with the cache keyed correctly it
++ * is refused, because '|' is not valid in a hostname. */
++ ares_dns_record_t *req2 = nullptr;
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_create(&req2, 0, ARES_FLAG_RD, ARES_OPCODE_QUERY,
++ ARES_RCODE_NOERROR));
++ EXPECT_EQ(ARES_SUCCESS,
++ ares_dns_record_query_add(req2, "example.net|EDNS|0|8000",
++ ARES_REC_TYPE_A, ARES_CLASS_IN));
++ QueryResult r2;
++ ares_send_dnsrec(channel_, req2, QueryCallback, &r2, nullptr);
++ Process();
++ EXPECT_TRUE(r2.done_);
++ EXPECT_NE(ARES_SUCCESS, r2.status_);
++ ares_dns_record_destroy(req2);
++}
++
+ TEST_P(CacheQueriesTest, GetHostByNameCache) {
+ DNSPacket rsp;
+ rsp.set_response().set_aa()
diff --git a/meta-oe/recipes-support/c-ares/c-ares/0004-Handle-connections-torn-down-by-application.patch b/meta-oe/recipes-support/c-ares/c-ares/0004-Handle-connections-torn-down-by-application.patch
new file mode 100644
index 0000000000..f78e9726b0
--- /dev/null
+++ b/meta-oe/recipes-support/c-ares/c-ares/0004-Handle-connections-torn-down-by-application.patch
@@ -0,0 +1,1107 @@
+From 13a10dddbabc30b6fca8e23f9efff73fedba9401 Mon Sep 17 00:00:00 2001
+From: Brad House <brad@brad-house.com>
+Date: Sun, 18 Oct 2026 22:51:53 -0400
+Subject: [PATCH] [Backport v1.34] Handle connections torn down by application
+ socket functions (#1343)
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+Backport of cb25d8bf297aed0aad8f6e0777ca0635cacc6cb1 to `v1.34`. See
+that commit for the full description.
+
+Application code that c-ares calls while using a connection can
+reconfigure the servers and so tear that connection down. That includes
+the socket functions from `ares_set_socket_functions_ex()` and the older
+`ares_set_socket_functions()`, and the pending-write callback. c-ares
+now notices this while opening, writing to, reading from or closing a
+connection. It requeues the affected queries, or drops the stale data,
+instead of continuing to use the connection.
+
+It applied cleanly on top of the dd62bdfc and #1340 backports (#1338).
+Test file contents match `main`.
+
+Each of the 11 new tests fails on `v1.34` without this change: nine with
+an ASAN heap-use-after-free, and the two receive tests on their
+assertions. All 11 pass with it. The full non-live suite passes 674/674
+under ASAN+UBSAN and with `-DCARES_WERROR=ON` on macOS.
+
+Signed-off-by: Brad House <brad@brad-house.com>
+Co-authored-by: Mar <mardgez13@gmail.com>
+Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/13a10dddbabc30b6fca8e23f9efff73fedba9401]
+GHSA: GHSA-pj7p-v3cw-hq66
+---
+ src/lib/ares_close_sockets.c | 7 +-
+ src/lib/ares_conn.c | 29 ++
+ src/lib/ares_process.c | 65 ++-
+ test/ares-test-mock.cc | 842 +++++++++++++++++++++++++++++++++++
+ 4 files changed, 935 insertions(+), 8 deletions(-)
+
+diff --git a/src/lib/ares_close_sockets.c b/src/lib/ares_close_sockets.c
+index 6be662fdd3..a3af721bc6 100644
+--- a/src/lib/ares_close_sockets.c
++++ b/src/lib/ares_close_sockets.c
+@@ -148,6 +148,7 @@ void ares_check_cleanup_conns(const ares_channel_t *channel)
+ return; /* LCOV_EXCL_LINE: DefensiveCoding */
+ }
+
++restart:
+ /* Iterate across each server */
+ for (snode = ares_slist_node_first(channel->servers); snode != NULL;
+ snode = ares_slist_node_next(snode)) {
+@@ -190,8 +191,12 @@ void ares_check_cleanup_conns(const ares_channel_t *channel)
+ continue;
+ }
+
+- /* Clean it up */
++ /* Clean it up. The close function is application code and may have
++ * reconfigured the servers, freeing the list nodes this walk holds --
++ * the server's, and the next connection's. Start over; connections
++ * already closed are no longer listed, so this ends. */
+ ares_close_connection(conn, ARES_SUCCESS);
++ goto restart;
+ }
+ }
+ }
+diff --git a/src/lib/ares_conn.c b/src/lib/ares_conn.c
+index 4cc0d1871d..5e0827fbdf 100644
+--- a/src/lib/ares_conn.c
++++ b/src/lib/ares_conn.c
+@@ -262,6 +262,15 @@ ares_conn_err_t ares_conn_read(ares_conn_t *conn, void *data, size_t len,
+ err = ares_socket_recv(channel, conn->fd, ARES_TRUE, data, len, read_bytes);
+ }
+
++ /* The receive function is application code and may have reconfigured the
++ * servers, tearing this connection down. Nothing read from it can be
++ * matched any more -- its queries have moved to the new configuration --
++ * and its descriptor is gone, so it must not be read again. */
++ if (conn->flags & ARES_CONN_FLAG_DEAD) {
++ *read_bytes = 0;
++ return ARES_CONN_ERR_CONNCLOSED;
++ }
++
+ /* Toggle connected state if needed */
+ if (err == ARES_CONN_ERR_SUCCESS) {
+ conn->state_flags |= ARES_CONN_STATE_CONNECTED;
+@@ -408,6 +417,19 @@ ares_conn_err_t ares_conn_write(ares_conn_t *conn, const void *data, size_t len,
+ }
+
+ done:
++ /* The send function -- from ares_set_socket_functions_ex() or the legacy
++ * ares_set_socket_functions() -- and on the first TCP Fast Open write the
++ * getsockname function, are application code and may have reconfigured the
++ * servers, tearing this connection down. Whatever the write returned,
++ * nothing written here can be answered any more, and the descriptor has
++ * already been closed or handed to the close notification, so there is no
++ * socket state left to report. Say so, so every caller treats it as the
++ * connection failure it is. */
++ if (conn->flags & ARES_CONN_FLAG_DEAD) {
++ *written = 0;
++ return ARES_CONN_ERR_CONNCLOSED;
++ }
++
+ if (err == ARES_CONN_ERR_SUCCESS && len == *written) {
+ /* Wrote all data, make sure we're not listening for write events unless
+ * using TFO, in which case we'll need a write event to know when
+@@ -644,6 +666,13 @@ ares_status_t ares_open_connection(ares_conn_t **conn_out,
+ goto done; /* LCOV_EXCL_LINE: UntestablePath */
+ }
+
++ /* The getsockname function is application code as well, and may have
++ * reconfigured the servers the same way. */
++ if (!ares_server_in_channel(channel, server)) {
++ status = ARES_ECONNREFUSED;
++ goto done;
++ }
++
+ /* TCP connections are thrown to the end as we don't spawn multiple TCP
+ * connections. UDP connections are put on front where the newest connection
+ * can be quickly pulled */
+diff --git a/src/lib/ares_process.c b/src/lib/ares_process.c
+index 88536704ad..5686b077a6 100644
+--- a/src/lib/ares_process.c
++++ b/src/lib/ares_process.c
+@@ -189,7 +189,9 @@ static void server_increment_failures(ares_server_t *server,
+ ares_timeval_t next_retry_time;
+
+ node = ares_slist_node_find(channel->servers, server);
+- if (node == NULL) {
++ /* Matches by sort key, not identity, so a removed server can match the live
++ * one that replaced it at the same configuration index. */
++ if (node == NULL || ares_slist_node_val(node) != server) {
+ return; /* LCOV_EXCL_LINE: DefensiveCoding */
+ }
+
+@@ -220,7 +222,9 @@ static void server_set_good(ares_server_t *server, ares_bool_t used_tcp)
+ const ares_channel_t *channel = server->channel;
+
+ node = ares_slist_node_find(channel->servers, server);
+- if (node == NULL) {
++ /* Matches by sort key, not identity, so a removed server can match the live
++ * one that replaced it at the same configuration index. */
++ if (node == NULL || ares_slist_node_val(node) != server) {
+ return; /* LCOV_EXCL_LINE: DefensiveCoding */
+ }
+
+@@ -501,21 +505,39 @@ void ares_process_pending_write(ares_channel_t *channel)
+ */
+ channel->notify_pending_write = ARES_FALSE;
+
+- for (node = ares_slist_node_first(channel->servers); node != NULL;
+- node = ares_slist_node_next(node)) {
+- ares_server_t *server = ares_slist_node_val(node);
+- ares_conn_t *conn = server->tcp_conn;
++ node = ares_slist_node_first(channel->servers);
++ while (node != NULL) {
++ ares_server_t *server = ares_slist_node_val(node);
++ ares_conn_t *conn = server->tcp_conn;
++ size_t generation = channel->servers_generation;
+ ares_status_t status;
+
+ if (conn == NULL) {
++ node = ares_slist_node_next(node);
+ continue;
+ }
+
+- /* Enqueue any pending data if there is any */
++ /* Enqueue any pending data if there is any. The flush runs the
++ * application's send function, which may have reconfigured the servers
++ * and removed this one; its connection is then already closed, which
++ * handle_conn_error() ignores. */
+ status = ares_conn_flush(conn);
+ if (status != ARES_SUCCESS) {
+ handle_conn_error(conn, ARES_TRUE, status);
+ }
++
++ /* Tearing down a connection runs the callbacks of the queries it ends,
++ * and those may reconfigure the servers too, destroying the ones the new
++ * configuration omits along with their list nodes. A failure also moves
++ * this server further down the list. So when either may have happened,
++ * start over from the head rather than step from this node; flushing a
++ * connection again is harmless. */
++ if (status != ARES_SUCCESS || channel->servers_generation != generation) {
++ node = ares_slist_node_first(channel->servers);
++ continue;
++ }
++
++ node = ares_slist_node_next(node);
+ }
+
+ ares_deferred_cb_leave(channel);
+@@ -902,6 +924,13 @@ static ares_status_t process_read(ares_channel_t *channel,
+ return status;
+ }
+
++ /* A later call to the receive function may have reconfigured the servers,
++ * tearing this connection down after earlier calls buffered answers on it.
++ * Its queries have moved to the new configuration, so drop the answers. */
++ if (conn->flags & ARES_CONN_FLAG_DEAD) {
++ return ARES_SUCCESS;
++ }
++
+ status = read_answers(conn, now);
+ if (status != ARES_SUCCESS) {
+ return status;
+@@ -1192,6 +1221,15 @@ static void handle_conn_error(ares_conn_t *conn, ares_bool_t critical_failure,
+ {
+ ares_server_t *server = conn->server;
+
++ /* Already torn down, most likely by a reconfiguration from application code
++ * the failing call ran, such as the send function. Its queries have been
++ * requeued, and its server did not fail -- it was removed, or the
++ * connection was closed deliberately -- so there is nothing to record and
++ * nothing left to close. */
++ if (conn->flags & ARES_CONN_FLAG_DEAD) {
++ return;
++ }
++
+ /* Increment failures first before requeue so it is unlikely to requeue
+ * to the same server */
+ if (critical_failure) {
+@@ -1508,6 +1546,14 @@ static ares_status_t ares_conn_query_write(ares_conn_t *conn,
+ conn->flags & ARES_CONN_FLAG_TCP) {
+ channel->notify_pending_write = ARES_TRUE;
+ channel->notify_pending_write_cb(channel->notify_pending_write_cb_data);
++
++ /* The callback is application code and may have reconfigured the
++ * servers, closing this connection with the query already buffered on
++ * it. Report it as a connection failure so the query is requeued rather
++ * than attached to the closed connection. */
++ if (conn->flags & ARES_CONN_FLAG_DEAD) {
++ return ARES_ECONNREFUSED;
++ }
+ return ARES_SUCCESS;
+ }
+
+@@ -1650,6 +1696,11 @@ static ares_status_t ares_send_query_int(ares_server_t *requested_server,
+ return ARES_ECANCELLED;
+ }
+
++ /* Application code that tore this connection down during the write -- the
++ * send function, or the pending-write callback when the write is deferred,
++ * reconfiguring the servers, say -- surfaces here as ARES_ECONNREFUSED,
++ * even if the send itself reported success or never happened, so the query
++ * is requeued below rather than attached to the closed connection. */
+ switch (status) {
+ /* Good result, continue on */
+ case ARES_SUCCESS:
+diff --git a/test/ares-test-mock.cc b/test/ares-test-mock.cc
+index 4b409db7c3..f1d9d360e7 100644
+--- a/test/ares-test-mock.cc
++++ b/test/ares-test-mock.cc
+@@ -2593,6 +2593,86 @@ INSTANTIATE_TEST_SUITE_P(AddressFamilies, MockUDPSingleTryTest,
+ ::testing::ValuesIn(ares::test::families),
+ PrintFamily);
+
++// ares_process_pending_write() flushes each server's TCP connection. A flush
++// that fails tears the connection down, which ends a query that is out of
++// retries and runs its callback right there. A callback that reconfigures the
++// servers removes the one being flushed, and the walk must not go on to use
++// that server, its connection or its place in the list.
++class MockTCPSingleTryStayOpenTest
++ : public MockChannelOptsTest,
++ public ::testing::WithParamInterface<int> {
++public:
++ MockTCPSingleTryStayOpenTest()
++ : MockChannelOptsTest(1, GetParam(), true, false, FillOptions(&opts_),
++ ARES_OPT_TRIES | ARES_OPT_FLAGS)
++ {
++ }
++
++ static struct ares_options *FillOptions(struct ares_options *opts)
++ {
++ memset(opts, 0, sizeof(struct ares_options));
++ opts->tries = 1;
++ /* ARES_OPT_FLAGS replaces the defaults, which include EDNS. */
++ opts->flags = ARES_FLAG_STAYOPEN | ARES_FLAG_EDNS;
++ return opts;
++ }
++
++private:
++ struct ares_options opts_;
++};
++
++static void PendingWriteNotifyCallback(void *data)
++{
++ *static_cast<bool *>(data) = true;
++}
++
++TEST_P(MockTCPSingleTryStayOpenTest, ReconfigureInPendingWriteFailureCallback) {
++ DNSPacket rsp;
++ rsp.set_response().set_aa()
++ .add_question(new DNSQuestion("www.google.com", T_A))
++ .add_answer(new DNSARR("www.google.com", 100, {2, 3, 4, 5}));
++ ON_CALL(server_, OnRequest("www.google.com", T_A))
++ .WillByDefault(SetReply(&server_, &rsp));
++
++ /* Answered, so the TCP connection is connected; STAYOPEN keeps it. */
++ QueryResult first;
++ ares_query_dnsrec(channel_, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ QueryCallback, &first, NULL);
++ Process();
++ EXPECT_TRUE(first.done_);
++
++ /* From here writes on that connection wait for ares_process_pending_write. */
++ bool pending = false;
++ ares_set_pending_write_cb(channel_, PendingWriteNotifyCallback, &pending);
++
++ CancelInCbData data;
++ data.channel = channel_;
++ data.done = false;
++ data.cbs = 0;
++ ares_query_dnsrec(channel_, "www.example.com", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, ReconfigureServersCallback, &data, NULL);
++ EXPECT_TRUE(pending);
++ EXPECT_FALSE(data.done);
++
++ /* ares_set_socket_functions() stores the pointer rather than copying it. */
++ static ares_socket_functions sock_funcs;
++ memset(&sock_funcs, 0, sizeof(sock_funcs));
++ sock_funcs.asendv = ares_sendv_fail;
++ ares_set_socket_functions(channel_, &sock_funcs, NULL);
++ LibraryTest::SetFailSend();
++
++ ares_process_pending_write(channel_);
++
++ EXPECT_TRUE(data.done);
++ EXPECT_EQ((size_t)1, data.cbs);
++
++ ares_set_pending_write_cb(channel_, NULL, NULL);
++}
++
++INSTANTIATE_TEST_SUITE_P(AddressFamilies, MockTCPSingleTryStayOpenTest,
++ ::testing::ValuesIn(ares::test::families),
++ PrintFamily);
++
+ TEST_P(MockUDPChannelTest, CancelInDestroyCallbackNoUseAfterFree) {
+ CancelInCbData data;
+ data.channel = channel_;
+@@ -2898,6 +2978,768 @@ TEST_F(LibraryTest, ReconfigureInConfigureHookNoUseAfterFree) {
+ ares_destroy(chan);
+ }
+
++// Reconfiguring the servers from the application's own send function. The
++// write itself goes through: the send function reports every byte sent. But
++// the reconfiguration has already closed the connection being written to and
++// removed its server, so the query must be moved to the new configuration
++// rather than attached to the closed connection -- where it would sit on a
++// list that is freed once the call unwinds, in flight on no socket.
++struct ReconfigureFromSendData {
++ ares_channel_t *channel;
++ bool done;
++ int status;
++};
++
++static ares_ssize_t ReconfigureSendv(ares_socket_t fd, const struct iovec *iov,
++ int iovcnt, void *user_data)
++{
++ ReconfigureFromSendData *d =
++ static_cast<ReconfigureFromSendData *>(user_data);
++ ares_ssize_t len = 0;
++ (void)fd;
++ for (int i = 0; i < iovcnt; i++) {
++ len += static_cast<ares_ssize_t>(iov[i].iov_len);
++ }
++ // Frees the server this connection belongs to. Reconfiguring to the same
++ // list again is a no-op, so the retry is written normally.
++ ares_set_servers_csv(d->channel, "127.0.0.1:53056");
++ return len;
++}
++
++static void ReconfigureFromSendCallback(void *arg, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec)
++{
++ ReconfigureFromSendData *d = static_cast<ReconfigureFromSendData *>(arg);
++ (void)timeouts;
++ (void)dnsrec;
++ d->done = true;
++ d->status = static_cast<int>(status);
++}
++
++TEST_F(LibraryTest, ReconfigureInSuccessfulSendNoUseAfterFree) {
++ ares_channel_t *chan = nullptr;
++ struct ares_options opts;
++ int optmask = 0;
++ ares_socket_functions funcs;
++ ReconfigureFromSendData data;
++ ares_socket_t socks[ARES_GETSOCK_MAXNUM];
++
++ memset(&opts, 0, sizeof(opts));
++ opts.flags = ARES_FLAG_NOSEARCH;
++ optmask |= ARES_OPT_FLAGS;
++
++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&chan, &opts, optmask));
++ ASSERT_NE(nullptr, chan);
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055"));
++
++ data.channel = chan;
++ data.done = false;
++ data.status = ARES_SUCCESS;
++ memset(&funcs, 0, sizeof(funcs));
++ funcs.asendv = ReconfigureSendv;
++ ares_set_socket_functions(chan, &funcs, &data);
++
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ ReconfigureFromSendCallback, &data, NULL);
++
++ // Moved to the new server and written there, so it is in flight on a
++ // socket the application can watch.
++ EXPECT_FALSE(data.done);
++ EXPECT_EQ((size_t)1, ares_queue_active_queries(chan));
++ EXPECT_NE(0, ares_getsock(chan, socks, ARES_GETSOCK_MAXNUM));
++
++ ares_cancel(chan);
++ EXPECT_TRUE(data.done);
++ EXPECT_EQ(ARES_ECANCELLED, data.status);
++ EXPECT_EQ((size_t)0, ares_queue_active_queries(chan));
++ ares_destroy(chan);
++}
++
++// The connection the send function tore down has already been reported as
++// closed, and its descriptor closed or handed to that notification. Nothing
++// after the send may report socket state for it: doing so names
++// ARES_SOCKET_BAD, a descriptor the application was never given.
++struct BadSocketStateData {
++ size_t calls;
++ size_t bad;
++};
++
++static void BadSocketStateCallback(void *data, ares_socket_t socket_fd,
++ int readable, int writable)
++{
++ BadSocketStateData *d = static_cast<BadSocketStateData *>(data);
++ (void)readable;
++ (void)writable;
++ d->calls++;
++ if (socket_fd == ARES_SOCKET_BAD) {
++ d->bad++;
++ }
++}
++
++TEST_F(LibraryTest, ReconfigureInSendReportsNoBadSocket) {
++ ares_channel_t *chan = nullptr;
++ struct ares_options opts;
++ int optmask = 0;
++ ares_socket_functions funcs;
++ ReconfigureFromSendData data;
++ BadSocketStateData sock;
++
++ memset(&opts, 0, sizeof(opts));
++ memset(&sock, 0, sizeof(sock));
++ opts.flags = ARES_FLAG_NOSEARCH;
++ optmask |= ARES_OPT_FLAGS;
++ opts.sock_state_cb = BadSocketStateCallback;
++ opts.sock_state_cb_data = &sock;
++ optmask |= ARES_OPT_SOCK_STATE_CB;
++
++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&chan, &opts, optmask));
++ ASSERT_NE(nullptr, chan);
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055"));
++
++ data.channel = chan;
++ data.done = false;
++ data.status = ARES_SUCCESS;
++ memset(&funcs, 0, sizeof(funcs));
++ funcs.asendv = ReconfigureSendv;
++ ares_set_socket_functions(chan, &funcs, &data);
++
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ ReconfigureFromSendCallback, &data, NULL);
++ ares_cancel(chan);
++ EXPECT_TRUE(data.done);
++
++ EXPECT_NE((size_t)0, sock.calls);
++ EXPECT_EQ((size_t)0, sock.bad);
++ ares_destroy(chan);
++}
++
++// The same reconfiguration from the send function, reached through the
++// deferred TCP write: ares_set_pending_write_cb() queues the write and the
++// application later flushes it with ares_process_pending_write(). That flush
++// is its own outermost library call, so the connection and server the
++// reconfiguration closes must stay readable until it returns, and its walk of
++// the server list must not step from a list node the reconfiguration freed.
++// Covers both a send that reports success and one that fails. A failure
++// on the removed server must not be charged to the server that replaced it.
++struct PendingWriteReconfigureData {
++ ares_channel_t *channel;
++ bool reconfigure;
++ bool fail;
++ bool pending;
++ size_t done;
++ size_t server_failures;
++};
++
++static int PendingWriteConnect(ares_socket_t fd, const struct sockaddr *addr,
++ ares_socklen_t addrlen, void *user_data)
++{
++ (void)fd;
++ (void)addr;
++ (void)addrlen;
++ (void)user_data;
++ // Pretend the connection is in progress; the test signals it writable.
++ return 0;
++}
++
++static ares_ssize_t PendingWriteSendv(ares_socket_t fd, const struct iovec *iov,
++ int iovcnt, void *user_data)
++{
++ PendingWriteReconfigureData *d =
++ static_cast<PendingWriteReconfigureData *>(user_data);
++ ares_ssize_t len = 0;
++ (void)fd;
++ for (int i = 0; i < iovcnt; i++) {
++ len += static_cast<ares_ssize_t>(iov[i].iov_len);
++ }
++ if (!d->reconfigure) {
++ return len;
++ }
++ d->reconfigure = false;
++ // Closes this connection and frees its server.
++ ares_set_servers_csv(d->channel, "127.0.0.1:53056");
++ if (d->fail) {
++#ifdef USE_WINSOCK
++ WSASetLastError(WSAECONNREFUSED);
++#else
++ errno = ECONNREFUSED;
++#endif
++ return -1;
++ }
++ return len;
++}
++
++static void PendingWriteNotify(void *user_data)
++{
++ PendingWriteReconfigureData *d =
++ static_cast<PendingWriteReconfigureData *>(user_data);
++ d->pending = true;
++}
++
++static void PendingWriteServerState(const char *server_string,
++ ares_bool_t success, int flags,
++ void *user_data)
++{
++ PendingWriteReconfigureData *d =
++ static_cast<PendingWriteReconfigureData *>(user_data);
++ (void)server_string;
++ (void)flags;
++ if (!success) {
++ d->server_failures++;
++ }
++}
++
++static void PendingWriteCallback(void *arg, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec)
++{
++ PendingWriteReconfigureData *d =
++ static_cast<PendingWriteReconfigureData *>(arg);
++ (void)timeouts;
++ (void)dnsrec;
++ EXPECT_EQ(ARES_ECANCELLED, status);
++ d->done++;
++}
++
++static void ReconfigureInPendingWrite(bool fail)
++{
++ ares_channel_t *chan = nullptr;
++ struct ares_options opts;
++ int optmask = 0;
++ ares_socket_functions funcs;
++ PendingWriteReconfigureData data;
++ ares_socket_t socks[ARES_GETSOCK_MAXNUM];
++ int bitmask;
++
++ memset(&opts, 0, sizeof(opts));
++ opts.flags = ARES_FLAG_NOSEARCH | ARES_FLAG_USEVC;
++ optmask |= ARES_OPT_FLAGS;
++
++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&chan, &opts, optmask));
++ ASSERT_NE(nullptr, chan);
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055"));
++
++ data.channel = chan;
++ data.reconfigure = false;
++ data.fail = fail;
++ data.pending = false;
++ data.done = 0;
++ data.server_failures = 0;
++ memset(&funcs, 0, sizeof(funcs));
++ funcs.aconnect = PendingWriteConnect;
++ funcs.asendv = PendingWriteSendv;
++ ares_set_socket_functions(chan, &funcs, &data);
++ ares_set_pending_write_cb(chan, PendingWriteNotify, &data);
++ ares_set_server_state_callback(chan, PendingWriteServerState, &data);
++
++ // The first query opens the connection; its write waits for it to connect.
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ PendingWriteCallback, &data, NULL);
++ bitmask = ares_getsock(chan, socks, ARES_GETSOCK_MAXNUM);
++ ASSERT_NE(0, ARES_GETSOCK_WRITABLE(bitmask, 0));
++
++ // Report it connected, which writes the first query.
++ ares_process_fd(chan, ARES_SOCKET_BAD, socks[0]);
++ EXPECT_FALSE(data.pending);
++
++ // Now connected, so the second query's write is deferred to the
++ // application.
++ ares_query_dnsrec(chan, "www.example.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ PendingWriteCallback, &data, NULL);
++ EXPECT_TRUE(data.pending);
++
++ data.reconfigure = true;
++ ares_process_pending_write(chan);
++ EXPECT_FALSE(data.reconfigure);
++
++ // Both queries were moved to the new server, which has not failed.
++ EXPECT_EQ((size_t)0, data.done);
++ EXPECT_EQ((size_t)0, data.server_failures);
++ EXPECT_EQ((size_t)2, ares_queue_active_queries(chan));
++
++ ares_cancel(chan);
++ EXPECT_EQ((size_t)2, data.done);
++ EXPECT_EQ((size_t)0, ares_queue_active_queries(chan));
++ ares_destroy(chan);
++}
++
++TEST_F(LibraryTest, ReconfigureInSuccessfulPendingWriteNoUseAfterFree) {
++ ReconfigureInPendingWrite(false);
++}
++
++TEST_F(LibraryTest, ReconfigureInFailedPendingWriteNoUseAfterFree) {
++ ReconfigureInPendingWrite(true);
++}
++
++// The pending-write callback is application code too, and runs once the query
++// has been buffered on the connection. Reconfiguring from it closes that
++// connection, so the query must be requeued rather than attached to it.
++static void PendingWriteReconfigureNotify(void *user_data)
++{
++ PendingWriteReconfigureData *d =
++ static_cast<PendingWriteReconfigureData *>(user_data);
++ d->pending = true;
++ if (d->reconfigure) {
++ d->reconfigure = false;
++ // Closes the connection the query was just buffered on.
++ ares_set_servers_csv(d->channel, "127.0.0.1:53056");
++ }
++}
++
++TEST_F(LibraryTest, ReconfigureInPendingWriteCallbackNoUseAfterFree) {
++ ares_channel_t *chan = nullptr;
++ struct ares_options opts;
++ int optmask = 0;
++ ares_socket_functions funcs;
++ PendingWriteReconfigureData data;
++ ares_socket_t socks[ARES_GETSOCK_MAXNUM];
++ int bitmask;
++
++ memset(&opts, 0, sizeof(opts));
++ opts.flags = ARES_FLAG_NOSEARCH | ARES_FLAG_USEVC;
++ optmask |= ARES_OPT_FLAGS;
++
++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&chan, &opts, optmask));
++ ASSERT_NE(nullptr, chan);
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(chan, "127.0.0.1:53055"));
++
++ data.channel = chan;
++ data.reconfigure = false;
++ data.fail = false;
++ data.pending = false;
++ data.done = 0;
++ data.server_failures = 0;
++ memset(&funcs, 0, sizeof(funcs));
++ funcs.aconnect = PendingWriteConnect;
++ funcs.asendv = PendingWriteSendv;
++ ares_set_socket_functions(chan, &funcs, &data);
++ ares_set_pending_write_cb(chan, PendingWriteReconfigureNotify, &data);
++
++ // The first query opens the connection; its write waits for it to connect.
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ PendingWriteCallback, &data, NULL);
++ bitmask = ares_getsock(chan, socks, ARES_GETSOCK_MAXNUM);
++ ASSERT_NE(0, ARES_GETSOCK_WRITABLE(bitmask, 0));
++
++ // Report it connected, which writes the first query.
++ ares_process_fd(chan, ARES_SOCKET_BAD, socks[0]);
++ EXPECT_FALSE(data.pending);
++
++ // Now connected, so the second query is buffered and the pending-write
++ // callback runs, reconfiguring the servers.
++ data.reconfigure = true;
++ ares_query_dnsrec(chan, "www.example.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ PendingWriteCallback, &data, NULL);
++ EXPECT_TRUE(data.pending);
++ EXPECT_FALSE(data.reconfigure);
++
++ // Both queries were moved to the new server.
++ EXPECT_EQ((size_t)0, data.done);
++ EXPECT_EQ((size_t)2, ares_queue_active_queries(chan));
++
++ ares_cancel(chan);
++ EXPECT_EQ((size_t)2, data.done);
++ EXPECT_EQ((size_t)0, ares_queue_active_queries(chan));
++ ares_destroy(chan);
++}
++
++// Fake socket functions, installed with ares_set_socket_functions_ex(), that
++// never touch a real descriptor. Each test arms one of them to reconfigure
++// the servers part-way through c-ares's use of a connection, and they count
++// every call that names ARES_SOCKET_BAD, which a closed connection must never
++// pass to application code.
++struct FakeSockData {
++ ares_channel_t *channel;
++ ares_socket_t next_fd;
++ bool tfo;
++ bool getsockname_fail_first;
++ ares_socket_t getsockname_last_fd;
++ bool getsockname_reconfigure;
++ bool recv_reconfigure;
++ bool recv_answer_then_reconfigure;
++ bool recv_answered;
++ bool recv_answer;
++ bool close_reconfigure;
++ unsigned char query[512];
++ size_t query_len;
++ struct sockaddr_in peer;
++ size_t recv_calls;
++ size_t bad_fd_calls;
++ size_t sock_state_bad;
++ bool done;
++ int status;
++};
++
++static void FakeSockSetErrno(bool wouldblock)
++{
++#ifdef USE_WINSOCK
++ WSASetLastError(wouldblock ? WSAEWOULDBLOCK : WSAENOTCONN);
++#else
++ errno = wouldblock ? EAGAIN : ENOTCONN;
++#endif
++}
++
++static ares_socket_t FakeSockSocket(int domain, int type, int protocol,
++ void *user_data)
++{
++ FakeSockData *d = static_cast<FakeSockData *>(user_data);
++ (void)domain;
++ (void)type;
++ (void)protocol;
++ return d->next_fd++;
++}
++
++static int FakeSockClose(ares_socket_t sock, void *user_data)
++{
++ FakeSockData *d = static_cast<FakeSockData *>(user_data);
++ if (sock == ARES_SOCKET_BAD) {
++ d->bad_fd_calls++;
++ }
++ if (d->close_reconfigure) {
++ d->close_reconfigure = false;
++ // Frees the server this connection belonged to.
++ ares_set_servers_csv(d->channel, "127.0.0.1:53056");
++ }
++ return 0;
++}
++
++static int FakeSockSetsockopt(ares_socket_t sock, ares_socket_opt_t opt,
++ const void *val, ares_socklen_t val_size,
++ void *user_data)
++{
++ FakeSockData *d = static_cast<FakeSockData *>(user_data);
++ (void)sock;
++ (void)val;
++ (void)val_size;
++ if (opt == ARES_SOCKET_OPT_TCP_FASTOPEN && !d->tfo) {
++ return -1;
++ }
++ return 0;
++}
++
++static int FakeSockConnect(ares_socket_t sock, const struct sockaddr *address,
++ ares_socklen_t address_len, unsigned int flags,
++ void *user_data)
++{
++ FakeSockData *d = static_cast<FakeSockData *>(user_data);
++ (void)sock;
++ (void)flags;
++ if (address->sa_family == AF_INET && address_len >= sizeof(d->peer)) {
++ memcpy(&d->peer, address, sizeof(d->peer));
++ }
++ return 0;
++}
++
++static ares_ssize_t FakeSockRecvfrom(ares_socket_t sock, void *buffer,
++ size_t length, int flags,
++ struct sockaddr *address,
++ ares_socklen_t *address_len,
++ void *user_data)
++{
++ FakeSockData *d = static_cast<FakeSockData *>(user_data);
++ (void)flags;
++ d->recv_calls++;
++ if (sock == ARES_SOCKET_BAD) {
++ d->bad_fd_calls++;
++ }
++ if (d->query_len < 12 || length < d->query_len) {
++ FakeSockSetErrno(true);
++ return -1;
++ }
++ if (d->recv_answer_then_reconfigure) {
++ // Answer first; reconfigure on the next call, which has nothing to read.
++ if (d->recv_answered) {
++ d->recv_answer_then_reconfigure = false;
++ ares_set_servers_csv(d->channel, "127.0.0.1:53056");
++ FakeSockSetErrno(true);
++ return -1;
++ }
++ d->recv_answered = true;
++ } else if (d->recv_reconfigure) {
++ d->recv_reconfigure = false;
++ // Frees the server this connection belongs to.
++ ares_set_servers_csv(d->channel, "127.0.0.1:53056");
++ } else if (d->recv_answer) {
++ d->recv_answer = false;
++ } else {
++ FakeSockSetErrno(true);
++ return -1;
++ }
++ // Answer the query: the same message with QR set, no records.
++ memcpy(buffer, d->query, d->query_len);
++ static_cast<unsigned char *>(buffer)[2] |= 0x80;
++ if (address != NULL && address_len != NULL &&
++ *address_len >= (ares_socklen_t)sizeof(d->peer)) {
++ memcpy(address, &d->peer, sizeof(d->peer));
++ *address_len = sizeof(d->peer);
++ }
++ return static_cast<ares_ssize_t>(d->query_len);
++}
++
++static ares_ssize_t FakeSockSendto(ares_socket_t sock, const void *buffer,
++ size_t length, int flags,
++ const struct sockaddr *address,
++ ares_socklen_t address_len, void *user_data)
++{
++ FakeSockData *d = static_cast<FakeSockData *>(user_data);
++ (void)flags;
++ (void)address;
++ (void)address_len;
++ if (sock == ARES_SOCKET_BAD) {
++ d->bad_fd_calls++;
++ }
++ if (length <= sizeof(d->query)) {
++ memcpy(d->query, buffer, length);
++ d->query_len = length;
++ }
++ return static_cast<ares_ssize_t>(length);
++}
++
++static int FakeSockGetsockname(ares_socket_t sock, struct sockaddr *address,
++ ares_socklen_t *address_len, void *user_data)
++{
++ FakeSockData *d = static_cast<FakeSockData *>(user_data);
++ struct sockaddr_in sin;
++ if (sock == ARES_SOCKET_BAD) {
++ d->bad_fd_calls++;
++ }
++ // As during TCP Fast Open, before the first write has connected.
++ if (d->getsockname_fail_first && sock != d->getsockname_last_fd) {
++ d->getsockname_last_fd = sock;
++ FakeSockSetErrno(false);
++ return -1;
++ }
++ if (d->getsockname_reconfigure) {
++ d->getsockname_reconfigure = false;
++ // Frees the server this connection belongs to.
++ ares_set_servers_csv(d->channel, "127.0.0.1:53056");
++ }
++ if (*address_len < (ares_socklen_t)sizeof(sin)) {
++ FakeSockSetErrno(false);
++ return -1;
++ }
++ memset(&sin, 0, sizeof(sin));
++ sin.sin_family = AF_INET;
++ sin.sin_port = htons(40000);
++ sin.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
++ memcpy(address, &sin, sizeof(sin));
++ *address_len = sizeof(sin);
++ return 0;
++}
++
++static void FakeSockStateCallback(void *data, ares_socket_t socket_fd,
++ int readable, int writable)
++{
++ FakeSockData *d = static_cast<FakeSockData *>(data);
++ (void)readable;
++ (void)writable;
++ if (socket_fd == ARES_SOCKET_BAD) {
++ d->sock_state_bad++;
++ }
++}
++
++static void FakeSockQueryCallback(void *arg, ares_status_t status,
++ size_t timeouts,
++ const ares_dns_record_t *dnsrec)
++{
++ FakeSockData *d = static_cast<FakeSockData *>(arg);
++ (void)timeouts;
++ (void)dnsrec;
++ d->done = true;
++ d->status = static_cast<int>(status);
++}
++
++static void FakeSockInit(ares_channel_t **chan, FakeSockData *data,
++ int extra_flags, unsigned int sockfunc_flags,
++ bool sock_state = true)
++{
++ struct ares_options opts;
++ int optmask = 0;
++ struct ares_socket_functions_ex funcs;
++
++ memset(&opts, 0, sizeof(opts));
++ opts.flags = ARES_FLAG_NOSEARCH | extra_flags;
++ optmask |= ARES_OPT_FLAGS;
++ // A socket-state callback defers the close of a connection's descriptor
++ // until the outermost call unwinds; without one it is closed inline.
++ if (sock_state) {
++ opts.sock_state_cb = FakeSockStateCallback;
++ opts.sock_state_cb_data = data;
++ optmask |= ARES_OPT_SOCK_STATE_CB;
++ }
++ ASSERT_EQ(ARES_SUCCESS, ares_init_options(chan, &opts, optmask));
++ ASSERT_NE(nullptr, *chan);
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(*chan, "127.0.0.1:53055"));
++
++ data->channel = *chan;
++ data->next_fd = 100;
++ data->getsockname_last_fd = ARES_SOCKET_BAD;
++
++ memset(&funcs, 0, sizeof(funcs));
++ funcs.version = 1;
++ funcs.flags = sockfunc_flags;
++ funcs.asocket = FakeSockSocket;
++ funcs.aclose = FakeSockClose;
++ funcs.asetsockopt = FakeSockSetsockopt;
++ funcs.aconnect = FakeSockConnect;
++ funcs.arecvfrom = FakeSockRecvfrom;
++ funcs.asendto = FakeSockSendto;
++ funcs.agetsockname = FakeSockGetsockname;
++ EXPECT_EQ(ARES_SUCCESS, ares_set_socket_functions_ex(*chan, &funcs, data));
++}
++
++// The getsockname function runs for every new connection, after the checks
++// that follow the socket-configure and socket-create callbacks. Reconfiguring
++// from it must not leave the connection registered on the removed server.
++TEST_F(LibraryTest, ReconfigureInGetsocknameNoUseAfterFree) {
++ ares_channel_t *chan = nullptr;
++ FakeSockData data;
++
++ memset(&data, 0, sizeof(data));
++ FakeSockInit(&chan, &data, 0, 0);
++ data.getsockname_reconfigure = true;
++
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ FakeSockQueryCallback, &data, NULL);
++ EXPECT_FALSE(data.getsockname_reconfigure);
++
++ // The first connection's descriptor: no longer known to the channel.
++ ares_process_fd(chan, 100, ARES_SOCKET_BAD);
++
++ // Moved to the new server.
++ EXPECT_FALSE(data.done);
++ EXPECT_EQ((size_t)1, ares_queue_active_queries(chan));
++
++ ares_cancel(chan);
++ EXPECT_TRUE(data.done);
++ EXPECT_EQ(ARES_ECANCELLED, data.status);
++ EXPECT_EQ((size_t)0, data.bad_fd_calls);
++ EXPECT_EQ((size_t)0, data.sock_state_bad);
++ ares_destroy(chan);
++}
++
++// With TCP Fast Open the first getsockname may fail, and is retried after the
++// first write -- from inside ares_conn_write(), after the send function has
++// returned. Reconfiguring from that retry closes the connection the query was
++// just written on.
++TEST_F(LibraryTest, ReconfigureInFastOpenGetsocknameNoUseAfterFree) {
++ ares_channel_t *chan = nullptr;
++ FakeSockData data;
++
++ memset(&data, 0, sizeof(data));
++ FakeSockInit(&chan, &data, ARES_FLAG_USEVC, 0);
++ data.tfo = true;
++ data.getsockname_fail_first = true;
++ data.getsockname_reconfigure = true;
++
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ FakeSockQueryCallback, &data, NULL);
++ EXPECT_FALSE(data.getsockname_reconfigure);
++
++ // Moved to the new server.
++ EXPECT_FALSE(data.done);
++ EXPECT_EQ((size_t)1, ares_queue_active_queries(chan));
++ EXPECT_EQ((size_t)0, data.sock_state_bad);
++
++ ares_cancel(chan);
++ EXPECT_TRUE(data.done);
++ EXPECT_EQ(ARES_ECANCELLED, data.status);
++ EXPECT_EQ((size_t)0, data.bad_fd_calls);
++ ares_destroy(chan);
++}
++
++// A non-blocking receive function that reconfigures the servers and returns
++// an answer. The connection it read from is closed, so the answer must be
++// dropped -- the query has already moved to the new server -- and the
++// receive function must not be called again on the closed connection.
++TEST_F(LibraryTest, ReconfigureInRecvDropsStaleAnswer) {
++ ares_channel_t *chan = nullptr;
++ FakeSockData data;
++
++ memset(&data, 0, sizeof(data));
++ FakeSockInit(&chan, &data, 0, ARES_SOCKFUNC_FLAG_NONBLOCKING);
++
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ FakeSockQueryCallback, &data, NULL);
++ ASSERT_NE((size_t)0, data.query_len);
++
++ data.recv_reconfigure = true;
++ ares_process_fd(chan, 100, ARES_SOCKET_BAD);
++ EXPECT_FALSE(data.recv_reconfigure);
++
++ EXPECT_EQ((size_t)1, data.recv_calls);
++ EXPECT_EQ((size_t)0, data.bad_fd_calls);
++ // Still in flight on the new server.
++ EXPECT_FALSE(data.done);
++ EXPECT_EQ((size_t)1, ares_queue_active_queries(chan));
++
++ ares_cancel(chan);
++ EXPECT_TRUE(data.done);
++ EXPECT_EQ(ARES_ECANCELLED, data.status);
++ ares_destroy(chan);
++}
++
++// As above, but the answer comes from an earlier receive call, and a later
++// call -- which has nothing more to read -- reconfigures the servers. The
++// answer is already buffered on the connection that call tore down, and must
++// be dropped with it.
++TEST_F(LibraryTest, ReconfigureInRecvDropsBufferedAnswer) {
++ ares_channel_t *chan = nullptr;
++ FakeSockData data;
++
++ memset(&data, 0, sizeof(data));
++ FakeSockInit(&chan, &data, 0, ARES_SOCKFUNC_FLAG_NONBLOCKING);
++
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ FakeSockQueryCallback, &data, NULL);
++ ASSERT_NE((size_t)0, data.query_len);
++
++ data.recv_answer_then_reconfigure = true;
++ ares_process_fd(chan, 100, ARES_SOCKET_BAD);
++ EXPECT_FALSE(data.recv_answer_then_reconfigure);
++
++ EXPECT_EQ((size_t)2, data.recv_calls);
++ EXPECT_EQ((size_t)0, data.bad_fd_calls);
++ // Still in flight on the new server.
++ EXPECT_FALSE(data.done);
++ EXPECT_EQ((size_t)1, ares_queue_active_queries(chan));
++
++ ares_cancel(chan);
++ EXPECT_TRUE(data.done);
++ EXPECT_EQ(ARES_ECANCELLED, data.status);
++ ares_destroy(chan);
++}
++
++// The close function is application code too. With no socket-state callback
++// to carry the descriptor, it runs inline while ares_check_cleanup_conns()
++// walks the server list and each server's connections, closing idle ones.
++// Reconfiguring from it frees the list nodes that walk holds.
++TEST_F(LibraryTest, ReconfigureInCloseNoUseAfterFree) {
++ ares_channel_t *chan = nullptr;
++ FakeSockData data;
++
++ memset(&data, 0, sizeof(data));
++ FakeSockInit(&chan, &data, 0, 0, false);
++
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ FakeSockQueryCallback, &data, NULL);
++ ASSERT_NE((size_t)0, data.query_len);
++
++ // Answer it; the now idle connection is then closed.
++ data.recv_answer = true;
++ data.close_reconfigure = true;
++ ares_process_fd(chan, 100, ARES_SOCKET_BAD);
++ EXPECT_FALSE(data.recv_answer);
++ EXPECT_FALSE(data.close_reconfigure);
++
++ EXPECT_TRUE(data.done);
++ // The fake answer carries no records.
++ EXPECT_EQ(ARES_ENODATA, data.status);
++ EXPECT_EQ((size_t)0, ares_queue_active_queries(chan));
++ EXPECT_EQ((size_t)0, data.bad_fd_calls);
++ ares_destroy(chan);
++}
++
+ // The second route to the same freed connection, and the one that drove the
+ // change from suppressing the idle sweep to deferring the notification:
+ // reconfiguring the servers from the socket-state callback destroys the server
diff --git a/meta-oe/recipes-support/c-ares/c-ares/0005-ares_process-only-accept-an-answer-on-the-right-connection.patch b/meta-oe/recipes-support/c-ares/c-ares/0005-ares_process-only-accept-an-answer-on-the-right-connection.patch
new file mode 100644
index 0000000000..20fef5d2f0
--- /dev/null
+++ b/meta-oe/recipes-support/c-ares/c-ares/0005-ares_process-only-accept-an-answer-on-the-right-connection.patch
@@ -0,0 +1,575 @@
+From c8bd9ab53329f66ec0c395a11002a5696669b147 Mon Sep 17 00:00:00 2001
+From: Brad House <brad@brad-house.com>
+Date: Mon, 19 Oct 2026 11:53:54 -0400
+Subject: [PATCH] [Backport v1.34] ares_process: only accept an answer on the
+ connection its query was sent on (#1361)
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+Backport of b6f8a9b47e17c681e092a74d05d73bbb35c89a39 to `v1.34`. See
+that commit for the full description.
+
+**Conflicts:** `src/lib/ares_socket.h` only — v1.34 aligns the
+neighbouring prototypes differently. Resolved by taking the new doc
+comments and the `ares_sockaddr_addr_port_eq()` prototype, then
+re-running clang-format for the v1.34 alignment (which also re-wraps the
+new `SendData()` declaration in `test/ares-test.h`). All other files
+applied unchanged; the `test/` diffs match main exactly.
+
+**Tests (local, macOS, Debug, Ninja):**
+- ASAN+UBSAN and `-DCARES_WERROR=ON` builds: `arestest -4
+--gtest_filter='-*Live*'` — 693/693 passed in both.
+- With the `src/` changes reverted, the 4 new test instances fail
+(`UDPAnswerFromWrongPortDropped`, `AnswerOnOtherServerConnectionDropped`
+UDP/TCP, `CookielessAnswerOnOtherServerDropped`); they pass with them.
+- `git clang-format --diff upstream/v1.34` clean. Also tested together
+with the other two v1.34 backports (both orders apply cleanly): 699/699
+passed under ASAN+UBSAN and `-Werror`.
+
+Signed-off-by: Brad House <brad@brad-house.com>
+Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/c8bd9ab53329f66ec0c395a11002a5696669b147]
+GHSA: GHSA-fqh5-3x7m-wp44
+---
+ src/lib/ares_conn.c | 11 ++-
+ src/lib/ares_process.c | 18 ++++
+ src/lib/ares_socket.c | 24 +++++
+ src/lib/ares_socket.h | 21 ++++
+ test/ares-test-mock.cc | 218 +++++++++++++++++++++++++++++++++++++++++
+ test/ares-test.cc | 86 +++++++++-------
+ test/ares-test.h | 12 +++
+ 7 files changed, 355 insertions(+), 35 deletions(-)
+
+diff --git a/src/lib/ares_conn.c b/src/lib/ares_conn.c
+index 5e0827fbdf..b868053e62 100644
+--- a/src/lib/ares_conn.c
++++ b/src/lib/ares_conn.c
+@@ -252,9 +252,16 @@ ares_conn_err_t ares_conn_read(ares_conn_t *conn, void *data, size_t len,
+ (struct sockaddr *)&sa_storage, &salen, read_bytes);
+
+ #ifdef HAVE_RECVFROM
++ /* The socket is connect()ed, so the kernel normally drops datagrams from
++ * any other address or port already. Application-provided socket
++ * functions might not filter on connect, so also check here that the
++ * datagram came from the server's address and UDP port. RFC 5452
++ * section 9.1 only requires the address to match; matching the port too
++ * keeps one server from answering for another on the same address. */
+ if (err == ARES_CONN_ERR_SUCCESS &&
+- !ares_sockaddr_addr_eq((struct sockaddr *)&sa_storage,
+- &conn->server->addr)) {
++ !ares_sockaddr_addr_port_eq((struct sockaddr *)&sa_storage,
++ &conn->server->addr,
++ conn->server->udp_port)) {
+ err = ARES_CONN_ERR_WOULDBLOCK;
+ }
+ #endif
+diff --git a/src/lib/ares_process.c b/src/lib/ares_process.c
+index 5686b077a6..06d0ca507c 100644
+--- a/src/lib/ares_process.c
++++ b/src/lib/ares_process.c
+@@ -1117,6 +1117,24 @@ static ares_status_t process_answer(ares_channel_t *channel,
+ goto cleanup;
+ }
+
++ /* RFC 5452 section 9.1: only accept a response that arrives on the
++ * connection the query was sent on, and so from the server it was sent to.
++ * For UDP, ares_conn_read() also drops a datagram whose source address or
++ * port is not the server's; matching the port is hardening beyond RFC 5452
++ * section 9.1, which only requires the address to match. Otherwise any
++ * server we hold a connection to could answer, and get cached, a query that
++ * was only ever sent to some other server, and the cookie check below would
++ * run against the wrong server's cookie state. Treat it like an unknown
++ * query id, before anything acts on it (cookies, server health, the cache).
++ * Our caller has already consumed the message from the connection's buffer,
++ * so TCP framing stays in sync. A query not attached to any connection
++ * (query->conn == NULL) never matches. This also drops a late answer from
++ * a server tried before a retry. */
++ if (query->conn != conn) {
++ status = ARES_SUCCESS;
++ goto cleanup;
++ }
++
+ /* Validate DNS cookie in response. This function may need to requeue the
+ * query. */
+ if (ares_cookie_validate(query, rdnsrec, conn, now, requeue)
+diff --git a/src/lib/ares_socket.c b/src/lib/ares_socket.c
+index 4ad3034021..0a12935ab7 100644
+--- a/src/lib/ares_socket.c
++++ b/src/lib/ares_socket.c
+@@ -127,6 +127,30 @@ ares_bool_t ares_sockaddr_addr_eq(const struct sockaddr *sa,
+ return ARES_FALSE; /* different */
+ }
+
++ares_bool_t ares_sockaddr_addr_port_eq(const struct sockaddr *sa,
++ const struct ares_addr *aa,
++ unsigned short port)
++{
++ unsigned short sa_port;
++
++ if (!ares_sockaddr_addr_eq(sa, aa)) {
++ return ARES_FALSE;
++ }
++
++ /* ares_sockaddr_addr_eq() only matches AF_INET and AF_INET6 */
++ if (sa->sa_family == AF_INET) {
++ sa_port = (CARES_INADDR_CAST(const struct sockaddr_in *, sa))->sin_port;
++ } else {
++ sa_port = (CARES_INADDR_CAST(const struct sockaddr_in6 *, sa))->sin6_port;
++ }
++
++ if (ntohs(sa_port) != port) {
++ return ARES_FALSE;
++ }
++
++ return ARES_TRUE;
++}
++
+ ares_conn_err_t ares_socket_write(ares_channel_t *channel, ares_socket_t fd,
+ const void *data, size_t len, size_t *written,
+ const struct sockaddr *sa,
+diff --git a/src/lib/ares_socket.h b/src/lib/ares_socket.h
+index 24a99ab331..f7128e3493 100644
+--- a/src/lib/ares_socket.h
++++ b/src/lib/ares_socket.h
+@@ -139,8 +139,29 @@ typedef enum {
+ ARES_CONN_ERR_FAILURE = 99 /*!< Generic failure */
+ } ares_conn_err_t;
+
++/*! Compare the IP address of a socket address with an ares_addr. The port
++ * in the socket address is ignored.
++ *
++ * \param[in] sa Socket address (AF_INET or AF_INET6)
++ * \param[in] aa Address to compare against
++ * \return ARES_TRUE if the address families and IP addresses are equal,
++ * ARES_FALSE otherwise
++ */
+ ares_bool_t ares_sockaddr_addr_eq(const struct sockaddr *sa,
+ const struct ares_addr *aa);
++
++/*! Compare the IP address and port of a socket address with an ares_addr and
++ * port.
++ *
++ * \param[in] sa Socket address (AF_INET or AF_INET6)
++ * \param[in] aa Address to compare against
++ * \param[in] port Port to compare against, in host byte order
++ * \return ARES_TRUE if the address families, IP addresses and ports are
++ * equal, ARES_FALSE otherwise
++ */
++ares_bool_t ares_sockaddr_addr_port_eq(const struct sockaddr *sa,
++ const struct ares_addr *aa,
++ unsigned short port);
+ ares_status_t ares_socket_configure(ares_channel_t *channel, int family,
+ ares_bool_t is_tcp, ares_socket_t fd);
+ ares_conn_err_t ares_socket_enable_tfo(const ares_channel_t *channel,
+diff --git a/test/ares-test-mock.cc b/test/ares-test-mock.cc
+index d233f9070f..058dc93001 100644
+--- a/test/ares-test-mock.cc
++++ b/test/ares-test-mock.cc
+@@ -3363,6 +3363,7 @@ struct FakeSockData {
+ unsigned char query[512];
+ size_t query_len;
+ struct sockaddr_in peer;
++ unsigned short recv_port; /* network order; 0 reports the peer's port */
+ size_t recv_calls;
+ size_t bad_fd_calls;
+ size_t sock_state_bad;
+@@ -3471,6 +3472,9 @@ static ares_ssize_t FakeSockRecvfrom(ares_socket_t sock, void *buffer,
+ if (address != NULL && address_len != NULL &&
+ *address_len >= (ares_socklen_t)sizeof(d->peer)) {
+ memcpy(address, &d->peer, sizeof(d->peer));
++ if (d->recv_port != 0) {
++ reinterpret_cast<struct sockaddr_in *>(address)->sin_port = d->recv_port;
++ }
+ *address_len = sizeof(d->peer);
+ }
+ return static_cast<ares_ssize_t>(d->query_len);
+@@ -3710,6 +3714,42 @@ TEST_F(LibraryTest, ReconfigureInRecvDropsBufferedAnswer) {
+ ares_destroy(chan);
+ }
+
++// Socket functions need not filter on connect(), so ares_conn_read() checks
++// a UDP datagram's source itself. An answer reported from the server's
++// address but another port (here 127.0.0.1:53 for a server at
++// 127.0.0.1:53055) must be dropped, so that one server cannot answer for
++// another on the same address. The same answer from the right port is then
++// accepted.
++TEST_F(LibraryTest, UDPAnswerFromWrongPortDropped) {
++ ares_channel_t *chan = nullptr;
++ FakeSockData data;
++
++ memset(&data, 0, sizeof(data));
++ FakeSockInit(&chan, &data, 0, ARES_SOCKFUNC_FLAG_NONBLOCKING);
++
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ FakeSockQueryCallback, &data, NULL);
++ ASSERT_NE((size_t)0, data.query_len);
++ ASSERT_EQ(htons(53055), data.peer.sin_port);
++
++ data.recv_port = htons(53);
++ data.recv_answer = true;
++ ares_process_fd(chan, 100, ARES_SOCKET_BAD);
++ EXPECT_FALSE(data.recv_answer);
++ EXPECT_FALSE(data.done);
++ EXPECT_EQ((size_t)1, ares_queue_active_queries(chan));
++
++ data.recv_port = 0;
++ data.recv_answer = true;
++ ares_process_fd(chan, 100, ARES_SOCKET_BAD);
++ EXPECT_FALSE(data.recv_answer);
++ EXPECT_TRUE(data.done);
++ // The fake answer carries no records.
++ EXPECT_EQ(ARES_ENODATA, data.status);
++ EXPECT_EQ((size_t)0, ares_queue_active_queries(chan));
++ ares_destroy(chan);
++}
++
+ // The close function is application code too. With no socket-state callback
+ // to carry the descriptor, it runs inline while ares_check_cleanup_conns()
+ // walks the server list and each server's connections, closing idle ones.
+@@ -5530,5 +5570,183 @@ INSTANTIATE_TEST_SUITE_P(TransportModes, ServerRecoveryMultiMockTest, ::testing:
+
+ INSTANTIATE_TEST_SUITE_P(TransportModes, ServerRecoveryNoProbeMultiMockTest, ::testing::ValuesIn(ares::test::families_modes), PrintFamilyMode);
+
++// An answer is only accepted on the connection its query was sent on
++// (RFC 5452 section 9.1). Two servers: #0 is demoted by a SERVFAIL so a later
++// query goes only to #1, while #0's connection stays open (STAYOPEN). Server
++// #0 then answers that query on its own connection. The answer must be
++// dropped without side effects, and the query must then complete normally.
++class ReplyConnMultiMockTest
++ : public MockChannelOptsTest,
++ public ::testing::WithParamInterface< std::pair<int, bool> > {
++ public:
++ ReplyConnMultiMockTest()
++ : MockChannelOptsTest(2, GetParam().first, GetParam().second, false,
++ FillOptions(&opts_),
++ ARES_OPT_FLAGS | ARES_OPT_TRIES |
++ ARES_OPT_SERVER_FAILOVER | ARES_OPT_NOROTATE) {}
++
++ static struct ares_options* FillOptions(struct ares_options *opts) {
++ memset(opts, 0, sizeof(struct ares_options));
++ /* Keep the demoted server's connection open; no DNS 0x20 so the replies
++ * built here match the question exactly */
++ opts->flags = ARES_FLAG_STAYOPEN | ARES_FLAG_EDNS;
++ /* One try per server: the query goes to #1, then on timeout to #0 */
++ opts->tries = 1;
++ /* Never probe the demoted server, so the query is sent only to #1 */
++ opts->server_failover_opts.retry_chance = 0;
++ opts->server_failover_opts.retry_delay = 10000;
++ return opts;
++ }
++ private:
++ struct ares_options opts_;
++};
++
++static std::string ReplyConnFirstA(const QueryResult &result)
++{
++ const ares_dns_rr_t *rr;
++ char addr[64];
++
++ if (result.dnsrec_.dnsrec_ == nullptr ||
++ ares_dns_record_rr_cnt(result.dnsrec_.dnsrec_, ARES_SECTION_ANSWER) == 0) {
++ return "";
++ }
++ rr = ares_dns_record_rr_get_const(result.dnsrec_.dnsrec_,
++ ARES_SECTION_ANSWER, 0);
++ if (ares_dns_rr_get_type(rr) != ARES_REC_TYPE_A ||
++ ares_inet_ntop(AF_INET, ares_dns_rr_get_addr(rr, ARES_RR_A_ADDR), addr,
++ sizeof(addr)) == nullptr) {
++ return "";
++ }
++ return addr;
++}
++
++TEST_P(ReplyConnMultiMockTest, AnswerOnOtherServerConnectionDropped) {
++ DNSPacket warm_servfail;
++ warm_servfail.set_response().set_aa().set_rcode(SERVFAIL)
++ .add_question(new DNSQuestion("warmup.example", T_A));
++ DNSPacket warm_ok;
++ warm_ok.set_response().set_aa()
++ .add_question(new DNSQuestion("warmup.example", T_A))
++ .add_answer(new DNSARR("warmup.example", 100, {1, 1, 1, 1}));
++ DNSPacket forged;
++ forged.set_response().set_aa()
++ .add_question(new DNSQuestion("victim.example", T_A))
++ .add_answer(new DNSARR("victim.example", 100, {6, 6, 6, 6}));
++ DNSPacket genuine;
++ genuine.set_response().set_aa()
++ .add_question(new DNSQuestion("victim.example", T_A))
++ .add_answer(new DNSARR("victim.example", 100, {1, 2, 3, 4}));
++ unsigned short qid = 0;
++
++ /* Demote #0, leaving a connection to it open */
++ EXPECT_CALL(*servers_[0], OnRequest("warmup.example", T_A))
++ .WillOnce(SetReply(servers_[0].get(), &warm_servfail));
++ EXPECT_CALL(*servers_[1], OnRequest("warmup.example", T_A))
++ .WillOnce(SetReply(servers_[1].get(), &warm_ok));
++ QueryResult warm;
++ ares_query_dnsrec(channel_, "warmup.example", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, QueryCallback, &warm, NULL);
++ Process();
++ ASSERT_TRUE(warm.done_);
++ ASSERT_EQ(ARES_SUCCESS, warm.status_);
++
++ /* The query goes only to #1, which does not answer. Meanwhile #0 answers
++ * it on #0's own connection. That answer must be dropped, so the query
++ * times out on #1 and is retried on #0, whose genuine answer is accepted on
++ * the same (still in sync, for TCP) connection. */
++ EXPECT_CALL(*servers_[1], OnRequest("victim.example", T_A))
++ .WillOnce(InvokeWithoutArgs([&]() {
++ servers_[0]->SendUnsolicited(&forged, qid);
++ servers_[1]->SetReplyData(std::vector<byte>());
++ }));
++ EXPECT_CALL(*servers_[0], OnRequest("victim.example", T_A))
++ .WillOnce(SetReply(servers_[0].get(), &genuine));
++ QueryResult result;
++ ares_query_dnsrec(channel_, "victim.example", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, QueryCallback, &result, &qid);
++ Process();
++ ASSERT_TRUE(result.done_);
++ EXPECT_EQ(ARES_SUCCESS, result.status_);
++ EXPECT_EQ("1.2.3.4", ReplyConnFirstA(result));
++ EXPECT_EQ(1, (int)result.timeouts_);
++}
++
++// DNS cookies (RFC 7873) are per-server state, validated against the server
++// the query was sent to. #1 supports cookies, #0 does not. A cookie-less
++// answer arriving on #0's connection for a query sent only to #1 must not be
++// accepted: it would otherwise be checked against #0's cookie state and pass.
++class ReplyConnCookieMultiMockTest
++ : public MockChannelOptsTest,
++ public ::testing::WithParamInterface<int> {
++ public:
++ ReplyConnCookieMultiMockTest()
++ : MockChannelOptsTest(2, GetParam(), false, false,
++ ReplyConnMultiMockTest::FillOptions(&opts_),
++ ARES_OPT_FLAGS | ARES_OPT_TRIES |
++ ARES_OPT_SERVER_FAILOVER | ARES_OPT_NOROTATE) {}
++ private:
++ struct ares_options opts_;
++};
++
++TEST_P(ReplyConnCookieMultiMockTest, CookielessAnswerOnOtherServerDropped) {
++ std::vector<byte> server_cookie = { 1, 2, 3, 4, 5, 6, 7, 8 };
++ DNSPacket warm_servfail;
++ warm_servfail.set_response().set_aa().set_rcode(SERVFAIL)
++ .add_question(new DNSQuestion("warmup.example", T_A));
++ DNSPacket warm_ok;
++ warm_ok.set_response().set_aa()
++ .add_question(new DNSQuestion("warmup.example", T_A))
++ .add_answer(new DNSARR("warmup.example", 100, {1, 1, 1, 1}))
++ .add_additional(new DNSOptRR(0, 0, 0, 1280, { }, server_cookie, false));
++ DNSPacket forged;
++ forged.set_response().set_aa()
++ .add_question(new DNSQuestion("victim.example", T_A))
++ .add_answer(new DNSARR("victim.example", 100, {6, 6, 6, 6}));
++ DNSPacket genuine;
++ genuine.set_response().set_aa()
++ .add_question(new DNSQuestion("victim.example", T_A))
++ .add_answer(new DNSARR("victim.example", 100, {1, 2, 3, 4}));
++ unsigned short qid = 0;
++
++ /* #0 answers without a cookie (and is demoted); #1 answers with one, so
++ * #1's cookie state becomes SUPPORTED */
++ EXPECT_CALL(*servers_[0], OnRequest("warmup.example", T_A))
++ .WillOnce(SetReply(servers_[0].get(), &warm_servfail));
++ EXPECT_CALL(*servers_[1], OnRequest("warmup.example", T_A))
++ .WillOnce(SetReply(servers_[1].get(), &warm_ok));
++ QueryResult warm;
++ ares_query_dnsrec(channel_, "warmup.example", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, QueryCallback, &warm, NULL);
++ Process();
++ ASSERT_TRUE(warm.done_);
++ ASSERT_EQ(ARES_SUCCESS, warm.status_);
++ size_t cookie_len = 0;
++ fetch_server_cookie(warm.dnsrec_.dnsrec_, &cookie_len);
++ ASSERT_EQ(server_cookie.size(), cookie_len);
++
++ /* The cookie-protected query goes only to #1; a cookie-less answer for it
++ * arrives on #0's connection and must be dropped. The retry to #0 is then
++ * legitimately answered by #0, which does not use cookies. */
++ EXPECT_CALL(*servers_[1], OnRequest("victim.example", T_A))
++ .WillOnce(InvokeWithoutArgs([&]() {
++ servers_[0]->SendUnsolicited(&forged, qid);
++ servers_[1]->SetReplyData(std::vector<byte>());
++ }));
++ EXPECT_CALL(*servers_[0], OnRequest("victim.example", T_A))
++ .WillOnce(SetReply(servers_[0].get(), &genuine));
++ QueryResult result;
++ ares_query_dnsrec(channel_, "victim.example", ARES_CLASS_IN,
++ ARES_REC_TYPE_A, QueryCallback, &result, &qid);
++ Process();
++ ASSERT_TRUE(result.done_);
++ EXPECT_EQ(ARES_SUCCESS, result.status_);
++ EXPECT_EQ("1.2.3.4", ReplyConnFirstA(result));
++ EXPECT_EQ(1, (int)result.timeouts_);
++}
++
++INSTANTIATE_TEST_SUITE_P(TransportModes, ReplyConnMultiMockTest, ::testing::ValuesIn(ares::test::families_modes), PrintFamilyMode);
++
++INSTANTIATE_TEST_SUITE_P(AddressFamilies, ReplyConnCookieMultiMockTest, ::testing::ValuesIn(ares::test::families), PrintFamily);
++
+ } // namespace test
+ } // namespace ares
+diff --git a/test/ares-test.cc b/test/ares-test.cc
+index d333ee9419..0b3ac12c09 100644
+--- a/test/ares-test.cc
++++ b/test/ares-test.cc
+@@ -448,6 +448,9 @@ MockServer::MockServer(int family, unsigned short port)
+ // Create a TCP socket to receive data on.
+ tcp_data_ = NULL;
+ tcp_data_len_ = 0;
++ last_fd_ = ARES_SOCKET_BAD;
++ memset(&last_addr_, 0, sizeof(last_addr_));
++ last_addrlen_ = 0;
+ tcpfd_ = socket(family, SOCK_STREAM, 0);
+ EXPECT_NE(ARES_SOCKET_BAD, tcpfd_);
+ int optval = 1;
+@@ -710,6 +713,50 @@ std::set<ares_socket_t> MockServer::fds() const {
+ return result;
+ }
+
++void MockServer::SendData(ares_socket_t fd, struct sockaddr_storage *addr,
++ ares_socklen_t addrlen, int qid,
++ std::vector<byte> reply) {
++ int flags = 0;
++
++ if (reply.size() >= 2) {
++ // Overwrite the query ID if space to do so.
++ reply[0] = (byte)((qid >> 8) & 0xff);
++ reply[1] = (byte)(qid & 0xff);
++ }
++ if (verbose) {
++ std::cerr << "sending reply " << PacketToString(reply)
++ << " on port " << ((fd == udpfd_) ? udpport_ : tcpport_)
++ << ":" << getaddrport(addr) << std::endl;
++ }
++
++ // Prefix with 2-byte length if TCP.
++ if (fd != udpfd_) {
++ int len = (int)reply.size();
++ std::vector<byte> vlen = {(byte)((len & 0xFF00) >> 8), (byte)(len & 0xFF)};
++ reply.insert(reply.begin(), vlen.begin(), vlen.end());
++ // Also, don't bother with the destination address.
++ addr = nullptr;
++ addrlen = 0;
++ }
++
++#ifdef MSG_NOSIGNAL
++ flags |= MSG_NOSIGNAL;
++#endif
++
++ ares_ssize_t rc = (ares_ssize_t)sendto(fd, BYTE_CAST reply.data(), (SEND_TYPE_ARG3)reply.size(), flags,
++ (struct sockaddr *)addr, addrlen);
++ if (rc < static_cast<ares_ssize_t>(reply.size())) {
++ std::cerr << "Failed to send full reply, rc=" << rc << std::endl;
++ }
++}
++
++void MockServer::SendUnsolicited(const DNSPacket *reply, unsigned short qid) {
++ ASSERT_NE(ARES_SOCKET_BAD, last_fd_);
++ ASSERT_TRUE(last_fd_ == udpfd_ || connfds_.count(last_fd_) != 0)
++ << "the most recent requester's connection has closed";
++ SendData(last_fd_, &last_addr_, last_addrlen_, qid, reply->data());
++}
++
+ void MockServer::ProcessRequest(ares_socket_t fd, struct sockaddr_storage* addr,
+ ares_socklen_t addrlen, const std::vector<byte> &req,
+ const std::string &reqstr,
+@@ -717,10 +764,14 @@ void MockServer::ProcessRequest(ares_socket_t fd, struct sockaddr_storage* addr,
+
+ /* DNS 0x20 will mix case, do case-insensitive matching of name in request */
+ char lower_name[256];
+- int flags = 0;
+
+ arestest_strtolower(lower_name, name, sizeof(lower_name));
+
++ // Remember the requester so SendUnsolicited() can reach it.
++ last_fd_ = fd;
++ memcpy(&last_addr_, addr, sizeof(last_addr_));
++ last_addrlen_ = addrlen;
++
+ // Before processing, let gMock know the request is happening.
+ OnRequest(lower_name, rrtype);
+
+@@ -747,43 +798,12 @@ void MockServer::ProcessRequest(ares_socket_t fd, struct sockaddr_storage* addr,
+ return;
+ }
+
+- // Make a local copy of the current pending reply.
+- std::vector<byte> reply = exact_reply_;
+-
+ if (qid_ >= 0) {
+ // Use the explicitly specified query ID.
+ qid = qid_;
+ }
+- if (reply.size() >= 2) {
+- // Overwrite the query ID if space to do so.
+- reply[0] = (byte)((qid >> 8) & 0xff);
+- reply[1] = (byte)(qid & 0xff);
+- }
+- if (verbose) {
+- std::cerr << "sending reply " << PacketToString(reply)
+- << " on port " << ((fd == udpfd_) ? udpport_ : tcpport_)
+- << ":" << getaddrport(addr) << std::endl;
+- }
+-
+- // Prefix with 2-byte length if TCP.
+- if (fd != udpfd_) {
+- int len = (int)reply.size();
+- std::vector<byte> vlen = {(byte)((len & 0xFF00) >> 8), (byte)(len & 0xFF)};
+- reply.insert(reply.begin(), vlen.begin(), vlen.end());
+- // Also, don't bother with the destination address.
+- addr = nullptr;
+- addrlen = 0;
+- }
+
+-#ifdef MSG_NOSIGNAL
+- flags |= MSG_NOSIGNAL;
+-#endif
+-
+- ares_ssize_t rc = (ares_ssize_t)sendto(fd, BYTE_CAST reply.data(), (SEND_TYPE_ARG3)reply.size(), flags,
+- (struct sockaddr *)addr, addrlen);
+- if (rc < static_cast<ares_ssize_t>(reply.size())) {
+- std::cerr << "Failed to send full reply, rc=" << rc << std::endl;
+- }
++ SendData(fd, addr, addrlen, qid, exact_reply_);
+
+ if (disconnect_after_reply_ && fd != udpfd_) {
+ disconnect_after_reply_ = false;
+diff --git a/test/ares-test.h b/test/ares-test.h
+index 2b973c3982..170c284f26 100644
+--- a/test/ares-test.h
++++ b/test/ares-test.h
+@@ -303,6 +303,12 @@ class MockServer {
+ disconnect_after_reply_ = true;
+ }
+
++ // Send reply, with the given query ID, to the client of the most recent
++ // request this server received, on the socket that request arrived on. The
++ // client did not send this server a request with that query ID: this models
++ // a server answering a query that was only sent to some other server.
++ void SendUnsolicited(const DNSPacket *reply, unsigned short qid);
++
+ // The set of file descriptors that the server handles.
+ std::set<ares_socket_t> fds() const;
+
+@@ -327,6 +333,8 @@ class MockServer {
+ int rrtype);
+ void ProcessPacket(ares_socket_t fd, struct sockaddr_storage *addr,
+ ares_socklen_t addrlen, byte *data, int len);
++ void SendData(ares_socket_t fd, struct sockaddr_storage *addr,
++ ares_socklen_t addrlen, int qid, std::vector<byte> reply);
+ unsigned short udpport_;
+ unsigned short tcpport_;
+ ares_socket_t udpfd_;
+@@ -339,6 +347,10 @@ class MockServer {
+ bool disconnect_after_reply_;
+ unsigned char *tcp_data_;
+ size_t tcp_data_len_;
++ // Where the most recent request came from, for SendUnsolicited().
++ ares_socket_t last_fd_;
++ struct sockaddr_storage last_addr_;
++ ares_socklen_t last_addrlen_;
+ };
+
+ // Test fixture that uses a mock DNS server.
diff --git a/meta-oe/recipes-support/c-ares/c-ares/0006-ares_save_options-read-channel-config-under-lock.patch b/meta-oe/recipes-support/c-ares/c-ares/0006-ares_save_options-read-channel-config-under-lock.patch
new file mode 100644
index 0000000000..76c072dd7e
--- /dev/null
+++ b/meta-oe/recipes-support/c-ares/c-ares/0006-ares_save_options-read-channel-config-under-lock.patch
@@ -0,0 +1,243 @@
+From 25a6911370878d4b617b44b142ea0e49d1ccede6 Mon Sep 17 00:00:00 2001
+From: Brad House <brad@brad-house.com>
+Date: Mon, 19 Oct 2026 11:53:59 -0400
+Subject: [PATCH] [Backport v1.34] ares_save_options: read channel
+ configuration under the channel lock (#1362)
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+Backport of 5d878a580a8b57b51d15e2725cf6775c8e7bca0e to `v1.34`. See
+that commit for the full description.
+
+**Conflicts:** none; cherry-picked cleanly.
+
+**Tests (local, macOS, Debug, Ninja):**
+- ASAN+UBSAN and `-DCARES_WERROR=ON` builds: `arestest -4
+--gtest_filter='-*Live*'` — 691/691 passed in both.
+- With the `src/` changes reverted, the new `DupConcurrentSetServers` /
+`SaveOptionsConcurrentSetServers` tests abort with an ASAN
+heap-buffer-overflow; they pass with them.
+- `git clang-format --diff upstream/v1.34` clean. Also tested together
+with the other two v1.34 backports (both orders apply cleanly): 699/699
+passed under ASAN+UBSAN and `-Werror`.
+
+Signed-off-by: Brad House <brad@brad-house.com>
+Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/25a6911370878d4b617b44b142ea0e49d1ccede6]
+GHSA: GHSA-ph6c-3cvx-mq6v
+---
+ src/lib/ares_init.c | 3 +-
+ src/lib/ares_options.c | 45 ++++++++++++++++++----
+ test/ares-test-init.cc | 87 ++++++++++++++++++++++++++++++++++++++++++
+ 3 files changed, 126 insertions(+), 9 deletions(-)
+
+diff --git a/src/lib/ares_init.c b/src/lib/ares_init.c
+index 4758c5de56..85b2e13050 100644
+--- a/src/lib/ares_init.c
++++ b/src/lib/ares_init.c
+@@ -483,7 +483,8 @@ int ares_dup(ares_channel_t **dest, const ares_channel_t *src)
+ *dest = NULL; /* in case of failure return NULL explicitly */
+
+ /* First get the options supported by the old ares_save_options() function,
+- which is most of them */
++ * which is most of them. ares_save_options() takes the src channel lock
++ * itself. No lock is held across ares_init_options(). */
+ rc = (ares_status_t)ares_save_options(src, &opts, &optmask);
+ if (rc != ARES_SUCCESS) {
+ ares_destroy_options(&opts);
+diff --git a/src/lib/ares_options.c b/src/lib/ares_options.c
+index 2b5624bbea..5ea35b732e 100644
+--- a/src/lib/ares_options.c
++++ b/src/lib/ares_options.c
+@@ -55,8 +55,8 @@ static struct in_addr *ares_save_opt_servers(const ares_channel_t *channel,
+ int *nservers)
+ {
+ ares_slist_node_t *snode;
+- struct in_addr *out =
+- ares_malloc_zero(ares_slist_len(channel->servers) * sizeof(*out));
++ size_t cnt = ares_slist_len(channel->servers);
++ struct in_addr *out = ares_malloc_zero_array(cnt, sizeof(*out));
+
+ *nservers = 0;
+
+@@ -64,7 +64,11 @@ static struct in_addr *ares_save_opt_servers(const ares_channel_t *channel,
+ return NULL;
+ }
+
+- for (snode = ares_slist_node_first(channel->servers); snode != NULL;
++ /* Never write more entries than were allocated. The caller holds the
++ * channel lock so the server list cannot change underneath us; this is
++ * purely defensive. */
++ for (snode = ares_slist_node_first(channel->servers);
++ snode != NULL && (size_t)*nservers < cnt;
+ snode = ares_slist_node_next(snode)) {
+ const ares_server_t *server = ares_slist_node_val(snode);
+
+@@ -79,9 +83,11 @@ static struct in_addr *ares_save_opt_servers(const ares_channel_t *channel,
+ return out;
+ }
+
+-/* Save options from initialized channel */
+-int ares_save_options(const ares_channel_t *channel,
+- struct ares_options *options, int *optmask)
++/* Save options from initialized channel. Caller must hold the channel lock
++ * (if channel is not NULL). */
++static ares_status_t ares_save_options_nolock(const ares_channel_t *channel,
++ struct ares_options *options,
++ int *optmask)
+ {
+ size_t i;
+
+@@ -150,7 +156,8 @@ int ares_save_options(const ares_channel_t *channel,
+ if (channel->optmask & ARES_OPT_DOMAINS) {
+ options->domains = NULL;
+ if (channel->ndomains) {
+- options->domains = ares_malloc(channel->ndomains * sizeof(char *));
++ options->domains =
++ ares_malloc_zero_array(channel->ndomains, sizeof(char *));
+ if (!options->domains) {
+ return ARES_ENOMEM;
+ }
+@@ -176,7 +183,8 @@ int ares_save_options(const ares_channel_t *channel,
+ if (channel->optmask & ARES_OPT_SORTLIST) {
+ options->sortlist = NULL;
+ if (channel->nsort) {
+- options->sortlist = ares_malloc(channel->nsort * sizeof(struct apattern));
++ options->sortlist =
++ ares_malloc_zero_array(channel->nsort, sizeof(*options->sortlist));
+ if (!options->sortlist) {
+ return ARES_ENOMEM;
+ }
+@@ -238,6 +246,27 @@ int ares_save_options(const ares_channel_t *channel,
+ return ARES_SUCCESS;
+ }
+
++int ares_save_options(const ares_channel_t *channel,
++ struct ares_options *options, int *optmask)
++{
++ ares_status_t status;
++
++ if (channel == NULL) {
++ /* Preserve historic behavior: initialize the pointers so
++ * ares_destroy_options() is safe, then return ARES_ENODATA */
++ return (int)ares_save_options_nolock(NULL, options, optmask);
++ }
++
++ /* The configuration may be modified concurrently by other threads (e.g.
++ * ares_set_servers_csv()), so it must only be read with the channel lock
++ * held. */
++ ares_channel_lock(channel);
++ status = ares_save_options_nolock(channel, options, optmask);
++ ares_channel_unlock(channel);
++
++ return (int)status;
++}
++
+ static ares_status_t ares_init_options_servers(ares_channel_t *channel,
+ const struct in_addr *servers,
+ size_t nservers)
+diff --git a/test/ares-test-init.cc b/test/ares-test-init.cc
+index b44211a1e4..1c5d0f2171 100644
+--- a/test/ares-test-init.cc
++++ b/test/ares-test-init.cc
+@@ -25,6 +25,8 @@
+ */
+ #include "ares-test.h"
+
++#include <atomic>
++
+ extern "C" {
+ #include "ares_private.h"
+ }
+@@ -295,6 +297,91 @@ TEST_F(LibraryTest, FailChannelInit) {
+ ares_library_cleanup();
+ }
+
++// CARES_THREADS implies ares_threadsafety() is true
++#ifdef CARES_THREADS
++// Build a CSV list of n distinct IPv4 servers.
++static std::string ConfigRaceServerCsv(size_t n)
++{
++ std::string csv;
++ for (size_t i = 0; i < n; i++) {
++ if (i != 0) {
++ csv += ",";
++ }
++ csv += "127.0." + std::to_string((i / 250) + 1) + "." +
++ std::to_string((i % 250) + 1) + ":5353";
++ }
++ return csv;
++}
++
++// Readers snapshot the channel configuration (via ares_dup() or
++// ares_save_options()) while a writer thread keeps swapping the server list
++// between a short and a long one. The configuration must only be read under
++// the channel lock; otherwise the saved server array is sized from one list
++// and filled from another (heap-buffer-overflow under ASAN).
++static void ConfigRaceRun(bool use_dup, size_t reader_loops)
++{
++ const size_t nreaders = 4;
++ const std::string small_csv = ConfigRaceServerCsv(4);
++ const std::string large_csv = ConfigRaceServerCsv(400);
++ ares_channel_t *channel = nullptr;
++ std::atomic<size_t> readers_done(0);
++
++ EXPECT_EQ(ARES_SUCCESS, ares_init_options(&channel, nullptr, 0));
++ ASSERT_NE(nullptr, channel);
++ EXPECT_EQ(ARES_SUCCESS, ares_set_servers_csv(channel, small_csv.c_str()));
++
++ // Writer runs until every reader finished; readers are bounded so the
++ // whole test is bounded.
++ std::thread writer([&]() {
++ size_t i = 0;
++ while (readers_done.load() < nreaders) {
++ ares_set_servers_csv(channel,
++ (i++ & 1) ? large_csv.c_str() : small_csv.c_str());
++ }
++ });
++
++ std::vector<std::thread> readers;
++ for (size_t r = 0; r < nreaders; r++) {
++ readers.emplace_back([&]() {
++ for (size_t i = 0; i < reader_loops; i++) {
++ if (use_dup) {
++ ares_channel_t *dup = nullptr;
++ EXPECT_EQ(ARES_SUCCESS, ares_dup(&dup, channel));
++ if (dup != nullptr) {
++ ares_destroy(dup);
++ }
++ } else {
++ struct ares_options opts;
++ int optmask = 0;
++ memset(&opts, 0, sizeof(opts));
++ EXPECT_EQ(ARES_SUCCESS, ares_save_options(channel, &opts, &optmask));
++ EXPECT_NE(0, optmask & ARES_OPT_SERVERS);
++ EXPECT_TRUE(opts.nservers == 4 || opts.nservers == 400);
++ ares_destroy_options(&opts);
++ }
++ }
++ readers_done++;
++ });
++ }
++
++ for (auto &t : readers) {
++ t.join();
++ }
++ writer.join();
++ ares_destroy(channel);
++}
++
++TEST_F(LibraryTest, DupConcurrentSetServers)
++{
++ ConfigRaceRun(true, 20);
++}
++
++TEST_F(LibraryTest, SaveOptionsConcurrentSetServers)
++{
++ ConfigRaceRun(false, 20000);
++}
++#endif
++
+ #ifndef WIN32
+ TEST_F(LibraryTest, EnvInit) {
+ ares_channel_t *channel = nullptr;
diff --git a/meta-oe/recipes-support/c-ares/c-ares/0007-ares_inet_pton-reject-a-prefix-length.patch b/meta-oe/recipes-support/c-ares/c-ares/0007-ares_inet_pton-reject-a-prefix-length.patch
new file mode 100644
index 0000000000..2cd1ea8c24
--- /dev/null
+++ b/meta-oe/recipes-support/c-ares/c-ares/0007-ares_inet_pton-reject-a-prefix-length.patch
@@ -0,0 +1,364 @@
+From 7e65b381c0b915aa5671ddc713080c87e15fc42f Mon Sep 17 00:00:00 2001
+From: Brad House <brad@brad-house.com>
+Date: Mon, 19 Oct 2026 12:24:52 -0400
+Subject: [PATCH] [Backport v1.34] ares_inet_pton: reject a prefix length,
+ always write the full address (#1363)
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+Backport of 7b4ef8e555b611be6af39d913aa280cd1a348102 to `v1.34`. See
+that commit for the full description.
+
+**Conflicts:** `test/ares-test-mock-ai.cc` only — the neighbouring
+`FamilyV6IgnoresARecords` test (added on main by an unrelated change)
+does not exist on v1.34. Resolved by adding only the new
+`NumericHostRejectsPrefixLength` test at the same position. Other files
+applied unchanged.
+
+**Also includes** the comment spelling fix from #1364
+(ead5557d1301328536c3920bd01759a1bff5ca9a): "unparseable" ->
+"unparsable" in `src/lib/inet_net_pton.c` and
+`test/ares-test-internal.cc`, so Codespell passes and the text matches
+main.
+
+**Tests (local, macOS, Debug, Ninja):**
+- ASAN+UBSAN and `-DCARES_WERROR=ON` builds: `arestest -4
+--gtest_filter='-*Live*'` — 693/693 passed in both.
+- With the `src/` changes reverted, the 4 new test instances fail
+(`InetNetPtoNPrefixZeroFills`, `InetPtoNRejectsPrefixLength`,
+`NumericHostRejectsPrefixLength` UDP/TCP); they pass with them.
+- `git clang-format --diff upstream/v1.34` clean. Also tested together
+with the other two v1.34 backports (both orders apply cleanly): 699/699
+passed under ASAN+UBSAN and `-Werror`.
+
+Signed-off-by: Brad House <brad@brad-house.com>
+Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/7e65b381c0b915aa5671ddc713080c87e15fc42f]
+GHSA: GHSA-cfcv-8v2j-qj6r
+---
+ docs/ares_inet_pton.3 | 18 ++++++++--
+ src/lib/ares_inet_net_pton.h | 28 ++++++++++++++++
+ src/lib/inet_net_pton.c | 65 ++++++++++++++++++++----------------
+ test/ares-test-internal.cc | 54 ++++++++++++++++++++++++++++++
+ test/ares-test-mock-ai.cc | 23 +++++++++++++
+ 5 files changed, 157 insertions(+), 31 deletions(-)
+
+diff --git a/docs/ares_inet_pton.3 b/docs/ares_inet_pton.3
+index 34b2df063c..19c5fdfda3 100644
+--- a/docs/ares_inet_pton.3
++++ b/docs/ares_inet_pton.3
+@@ -12,8 +12,9 @@ ares_inet_pton \- convert an IPv4 or IPv6 address from text to binary form
+ int ares_inet_pton(int \fIaf\fP, const char *\fIsrc\fP, void *\fIdst\fP);
+ .fi
+ .SH DESCRIPTION
+-This is a portable version with the identical functionality of the commonly
+-available \fIinet_pton\fP.
++This is a portable version of the commonly available \fIinet_pton\fP. It
++behaves the same for AF_INET6, and for AF_INET it additionally accepts the
++legacy forms described below.
+
+ The ares_inet_pton() function converts the address in its standard text
+ presentation form into its numeric binary form. The \fBaf\fP argument shall
+@@ -23,9 +24,20 @@ in. The \fBdst\fP argument points to a buffer into which the function stores
+ the numeric address; this shall be large enough to hold the numeric address
+ (32 bits for AF_INET, 128 bits for AF_INET6).
+
++The \fBsrc\fP argument must be an address, not a network: a "/bits" prefix
++length suffix (CIDR notation) is not accepted and the function returns 0 for
++such input. On success, the whole address (4 bytes for AF_INET, 16 bytes for
++AF_INET6) is always written to \fBdst\fP. Versions of c-ares before 1.34.9
++accepted a prefix length here.
++
++Unlike POSIX \fIinet_pton\fP, AF_INET also accepts shortened forms such as
++"10.1" and hexadecimal forms such as "0x0a000001". Octets that are not given
++are set to zero, so "10.1" is 10.1.0.0.
++
+ It returns 1 if the address was valid for the specified address family, or 0
+ if the address was not parseable in the specified address family, or -1 if
+-some system error occurred (in which case errno will have been set).
++the address family is not supported (in which case errno will have been set
++to EAFNOSUPPORT).
+
+ .SH SEE ALSO
+ .BR ares_init (3),
+diff --git a/src/lib/ares_inet_net_pton.h b/src/lib/ares_inet_net_pton.h
+index e3ed83a3cb..e1a6f2d71e 100644
+--- a/src/lib/ares_inet_net_pton.h
++++ b/src/lib/ares_inet_net_pton.h
+@@ -26,6 +26,34 @@
+ #ifndef HEADER_CARES_INET_NET_PTON_H
+ #define HEADER_CARES_INET_NET_PTON_H
+
++/*! Parse a network (an address with an optional "/bits" prefix length) from
++ * its text form. This is not an address parser: for an address use
++ * ares_inet_pton(), which rejects a prefix length and always writes the
++ * whole address.
++ *
++ * How it differs from ares_inet_pton():
++ * - A "/bits" prefix length is accepted (0-32 for IPv4, 0-128 for IPv6).
++ * - The return value is the prefix length, not 1. Without "/bits", IPv6
++ * returns 128 and IPv4 infers it from the address class, widened to
++ * cover every octet given ("10" is 8, "130.155" is 16, "1.2.3.4" is 32,
++ * and a lone "224" is 4). 0 is a valid result ("::1/0").
++ * - What is written to dst differs by family. On success all size bytes
++ * are zeroed first. IPv4 then writes every octet given, including bits
++ * beyond the prefix ("1.2.3.4/8" writes 1.2.3.4). IPv6 writes only the
++ * (bits+7)/8 bytes covering the prefix ("2001:db8::1/64" writes
++ * 2001:db8::).
++ *
++ * \param[in] af AF_INET or AF_INET6.
++ * \param[in] src NUL-terminated network in text form.
++ * \param[out] dst Buffer to receive the network, in network byte order.
++ * \param[in] size Size of dst in bytes.
++ * \return Prefix length in bits on success. -1 on failure, with SOCKERRNO
++ * set to ENOENT if src is not a valid network, or EMSGSIZE if it
++ * does not fit in size bytes or (IPv6) src is too long to be a
++ * network. On Windows these are the WSA equivalents. An
++ * unsupported af returns -1 without setting SOCKERRNO. On failure
++ * dst may be partially written.
++ */
+ int ares_inet_net_pton(int af, const char *src, void *dst, size_t size);
+
+ #endif /* HEADER_CARES_INET_NET_PTON_H */
+diff --git a/src/lib/inet_net_pton.c b/src/lib/inet_net_pton.c
+index e1f76ef834..f60823023b 100644
+--- a/src/lib/inet_net_pton.c
++++ b/src/lib/inet_net_pton.c
+@@ -51,14 +51,15 @@ const struct ares_in6_addr ares_in6addr_any = { { { 0, 0, 0, 0, 0, 0, 0, 0, 0,
+
+ /*
+ * static int
+- * inet_net_pton_ipv4(src, dst, size)
++ * inet_net_pton_ipv4(src, dst, size, allow_cidr)
+ * convert IPv4 network number from presentation to network format.
+- * accepts hex octets, hex strings, decimal octets, and /CIDR.
+- * "size" is in bytes and describes "dst".
++ * accepts hex octets, hex strings, decimal octets, and, if
++ * "allow_cidr" is true, /CIDR. "size" is in bytes and describes "dst".
+ * return:
+ * number of bits, either imputed classfully or specified with /CIDR,
+ * or -1 if some failure occurred (check errno). ENOENT means it was
+- * not an IPv4 network specification.
++ * not an IPv4 network specification (including a /CIDR suffix when
++ * "allow_cidr" is false).
+ * note:
+ * network byte order assumed. this means 192.5.5.240/28 has
+ * 0b11110000 in its fourth octet.
+@@ -71,7 +72,7 @@ const struct ares_in6_addr ares_in6addr_any = { { { 0, 0, 0, 0, 0, 0, 0, 0, 0,
+ * Paul Vixie (ISC), June 1996
+ */
+ static int ares_inet_net_pton_ipv4(const char *src, unsigned char *dst,
+- size_t size)
++ size_t size, ares_bool_t allow_cidr)
+ {
+ static const char xdigits[] = "0123456789abcdef";
+ static const char digits[] = "0123456789";
+@@ -147,7 +148,8 @@ static int ares_inet_net_pton_ipv4(const char *src, unsigned char *dst,
+ }
+
+ bits = -1;
+- if (ch == '/' && ares_isascii(src[0]) && ares_isdigit(src[0]) && dst > odst) {
++ if (allow_cidr && ch == '/' && ares_isascii(src[0]) && ares_isdigit(src[0]) &&
++ dst > odst) {
+ /* CIDR width specifier. Nothing can follow it. */
+ ch = *src++; /* Skip over the /. */
+ bits = 0;
+@@ -317,7 +319,7 @@ static int ares_inet_pton6(const char *src, unsigned char *dst)
+ continue;
+ }
+ if (ch == '.' && ((tp + NS_INADDRSZ) <= endp) &&
+- ares_inet_net_pton_ipv4(curtok, tp, NS_INADDRSZ) > 0) {
++ ares_inet_net_pton_ipv4(curtok, tp, NS_INADDRSZ, ARES_FALSE) > 0) {
+ tp += NS_INADDRSZ;
+ saw_xdigit = 0;
+ break; /* '\0' was seen by inet_pton4(). */
+@@ -400,29 +402,23 @@ static int ares_inet_net_pton_ipv6(const char *src, unsigned char *dst,
+ SET_SOCKERRNO(EMSGSIZE);
+ return -1;
+ }
++ /* Only the first (bits+7)/8 bytes carry the network, zero the remainder of
++ * the caller's buffer so it never holds uninitialized data. */
++ memset(dst, 0, size);
+ memcpy(dst, &in6, bytes);
+ return (int)bits;
+ }
+
+-/*
+- * int
+- * inet_net_pton(af, src, dst, size)
+- * convert network number from presentation to network format.
+- * accepts hex octets, hex strings, decimal octets, and /CIDR.
+- * "size" is in bytes and describes "dst".
+- * return:
+- * number of bits, either imputed classfully or specified with /CIDR,
+- * or -1 if some failure occurred (check errno). ENOENT means it was
+- * not a valid network specification.
++/* Parse a network, not an address. See ares_inet_net_pton.h for the
++ * contract and how it differs from ares_inet_pton().
+ * author:
+ * Paul Vixie (ISC), June 1996
+- *
+ */
+ int ares_inet_net_pton(int af, const char *src, void *dst, size_t size)
+ {
+ switch (af) {
+ case AF_INET:
+- return ares_inet_net_pton_ipv4(src, dst, size);
++ return ares_inet_net_pton_ipv4(src, dst, size, ARES_TRUE);
+ case AF_INET6:
+ return ares_inet_net_pton_ipv6(src, dst, size);
+ default:
+@@ -430,22 +426,35 @@ int ares_inet_net_pton(int af, const char *src, void *dst, size_t size)
+ }
+ }
+
++/*
++ * int
++ * inet_pton(af, src, dst)
++ * convert an address (not a network) from presentation to network
++ * format, like POSIX inet_pton(). A "/bits" prefix length denotes a
++ * prefix, not an address (RFC 4291 Section 2.3 vs. the address text
++ * forms of Section 2.2), and is rejected; dst is always fully written
++ * on success (4 bytes for AF_INET, 16 bytes for AF_INET6).
++ * For a network with a prefix length, use ares_inet_net_pton().
++ * return:
++ * 1 on success, 0 if src is not a valid address for af (as POSIX
++ * inet_pton() does for any unparsable input), or -1 with errno set to
++ * EAFNOSUPPORT if af is not supported.
++ */
+ int ares_inet_pton(int af, const char *src, void *dst)
+ {
+- int result;
+- size_t size;
++ int result;
+
+ if (af == AF_INET) {
+- size = sizeof(struct in_addr);
++ result =
++ ares_inet_net_pton_ipv4(src, dst, sizeof(struct in_addr), ARES_FALSE);
+ } else if (af == AF_INET6) {
+- size = sizeof(struct ares_in6_addr);
++ result = ares_inet_pton6(src, dst);
+ } else {
+ SET_SOCKERRNO(EAFNOSUPPORT);
+ return -1;
+ }
+- result = ares_inet_net_pton(af, src, dst, size);
+- if (result == -1 && SOCKERRNO == ENOENT) {
+- return 0;
+- }
+- return (result > -1) ? 1 : -1;
++ /* Neither parser can fail for a system reason: any failure (ENOENT, or
++ * EMSGSIZE for too many IPv4 octets as in "1.2.3.4.5") means src is not a
++ * valid address. */
++ return (result > -1) ? 1 : 0;
+ }
+diff --git a/test/ares-test-internal.cc b/test/ares-test-internal.cc
+index bf06a74605..294e3f4555 100644
+--- a/test/ares-test-internal.cc
++++ b/test/ares-test-internal.cc
+@@ -274,6 +274,23 @@ TEST_F(LibraryTest, InetNetPtoN) {
+ EXPECT_EQ(-1, ares_inet_net_pton(AF_INET, "253", &a4, sizeof(a4) - 1));
+ }
+
++// An IPv6 network with a prefix length only carries (bits+7)/8 bytes; the
++// rest of the destination must be zeroed rather than left as it was.
++TEST_F(LibraryTest, InetNetPtoNPrefixZeroFills) {
++ unsigned char a6[16];
++
++ memset(a6, 0x41, sizeof(a6));
++ EXPECT_EQ(0, ares_inet_net_pton(AF_INET6, "::1/0", a6, sizeof(a6)));
++ EXPECT_EQ("0000:0000:0000:0000:0000:0000:0000:0000",
++ AddressToString(a6, 16));
++
++ memset(a6, 0x41, sizeof(a6));
++ EXPECT_EQ(64, ares_inet_net_pton(AF_INET6, "2001:db8:1:2:3:4:5:6/64", a6,
++ sizeof(a6)));
++ EXPECT_EQ("2001:0db8:0001:0002:0000:0000:0000:0000",
++ AddressToString(a6, 16));
++}
++
+ TEST_F(LibraryTest, FreeLongChain) {
+ struct ares_addr_node *data = nullptr;
+ for (int ii = 0; ii < 100000; ii++) {
+@@ -600,9 +617,46 @@ TEST_F(LibraryTest, InetPtoN) {
+ EXPECT_EQ(1, ares_inet_pton(AF_INET6, "12:34::ff", &a6));
+ EXPECT_EQ(1, ares_inet_pton(AF_INET6, "12:34::ffff:1.2.3.4", &a6));
+ EXPECT_EQ(0, ares_inet_pton(AF_INET, "xyzzy", &a4));
++ // Too many octets is unparsable input, not a system error.
++ EXPECT_EQ(0, ares_inet_pton(AF_INET, "1.2.3.4.5", &a4));
++ EXPECT_EQ(0, ares_inet_pton(AF_INET, "0x0102030405", &a4));
+ EXPECT_EQ(-1, ares_inet_pton(AF_INET+AF_INET6, "1.2.3.4", &a4));
+ }
+
++// ares_inet_pton() parses addresses, not networks: like inet_pton(3) it must
++// reject a "/bits" prefix length. It used to accept one and, for IPv6, write
++// only (bits+7)/8 bytes of dst while still returning 1.
++TEST_F(LibraryTest, InetPtoNRejectsPrefixLength) {
++ const char *cases6[] = { "::1/0", "ffff::1/16", "2001:db8::1/64",
++ "2001:db8::1/128", "::ffff:1.2.3.4/8",
++ "::ffff:1.2.3.4/32" };
++ const char *cases4[] = { "1.2.3.4/8", "1.2.3.4/0", "1.2.3.4/32", "10/8",
++ "0x0a000000/8" };
++ unsigned char a4[4];
++ unsigned char a6[16];
++ size_t i;
++
++ for (i = 0; i < sizeof(cases6) / sizeof(*cases6); i++) {
++ EXPECT_EQ(0, ares_inet_pton(AF_INET6, cases6[i], a6)) << cases6[i];
++ }
++ for (i = 0; i < sizeof(cases4) / sizeof(*cases4); i++) {
++ EXPECT_EQ(0, ares_inet_pton(AF_INET, cases4[i], a4)) << cases4[i];
++ }
++
++ // Without a prefix length, the whole destination is written.
++ memset(a6, 0x41, sizeof(a6));
++ EXPECT_EQ(1, ares_inet_pton(AF_INET6, "ffff::1", a6));
++ EXPECT_EQ("ffff:0000:0000:0000:0000:0000:0000:0001",
++ AddressToString(a6, 16));
++ memset(a6, 0x41, sizeof(a6));
++ EXPECT_EQ(1, ares_inet_pton(AF_INET6, "::ffff:1.2.3.4", a6));
++ EXPECT_EQ("0000:0000:0000:0000:0000:ffff:0102:0304",
++ AddressToString(a6, 16));
++ memset(a4, 0x41, sizeof(a4));
++ EXPECT_EQ(1, ares_inet_pton(AF_INET, "1.2.3.4", a4));
++ EXPECT_EQ("1.2.3.4", AddressToString(a4, 4));
++}
++
+ TEST_F(LibraryTest, FreeCorruptData) {
+ // ares_free_data(p) expects that there is a type field and a marker
+ // field in the memory before p. Feed it incorrect versions of each.
+diff --git a/test/ares-test-mock-ai.cc b/test/ares-test-mock-ai.cc
+index ae45c45527..43d0b89175 100644
+--- a/test/ares-test-mock-ai.cc
++++ b/test/ares-test-mock-ai.cc
+@@ -617,6 +617,29 @@ TEST_P(MockChannelTestAI, FamilyV6) {
+ EXPECT_THAT(result.ai_, IncludesV6Address("2121:0000:0000:0000:0000:0000:0000:0303"));
+ }
+
++// A numeric host with a "/bits" prefix length is a network, not an address.
++// It used to be accepted, returning uninitialized stack memory as the address.
++TEST_P(MockChannelTestAI, NumericHostRejectsPrefixLength) {
++ struct ares_addrinfo_hints hints = {0, 0, 0, 0};
++ hints.ai_family = AF_INET6;
++ hints.ai_flags = ARES_AI_NUMERICHOST;
++
++ AddrInfoResult result;
++ ares_getaddrinfo(channel_, "::1/0", NULL, &hints, AddrInfoCallback, &result);
++ Process();
++ EXPECT_TRUE(result.done_);
++ EXPECT_NE(ARES_SUCCESS, result.status_);
++
++ AddrInfoResult result2;
++ ares_getaddrinfo(channel_, "::1", NULL, &hints, AddrInfoCallback, &result2);
++ Process();
++ EXPECT_TRUE(result2.done_);
++ EXPECT_EQ(ARES_SUCCESS, result2.status_);
++ EXPECT_THAT(result2.ai_, IncludesNumAddresses(1));
++ EXPECT_THAT(result2.ai_,
++ IncludesV6Address("0000:0000:0000:0000:0000:0000:0000:0001"));
++}
++
+ // Test case for Issue #662
+ TEST_P(MockChannelTestAI, PartialQueryCancel) {
+ std::vector<byte> nothing;
diff --git a/meta-oe/recipes-support/c-ares/c-ares/0008-ares_conn_read-dont-drop-UDP-answers-from-server-port.patch b/meta-oe/recipes-support/c-ares/c-ares/0008-ares_conn_read-dont-drop-UDP-answers-from-server-port.patch
new file mode 100644
index 0000000000..f4f182b995
--- /dev/null
+++ b/meta-oe/recipes-support/c-ares/c-ares/0008-ares_conn_read-dont-drop-UDP-answers-from-server-port.patch
@@ -0,0 +1,178 @@
+From c7fa9ebcb0c0086730c53bf03191c03f03706246 Mon Sep 17 00:00:00 2001
+From: "c-ares-backport-gha[bot]"
+ <299594594+c-ares-backport-gha[bot]@users.noreply.github.com>
+Date: Tue, 20 Oct 2026 02:25:59 +0000
+Subject: [PATCH] [Backport v1.34] ares_conn_read: don't drop UDP answers whose
+ source port isn't reported (#1371)
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+# Description
+Backport of #1370 to `v1.34`.
+
+Signed-off-by: Brad House <brad@brad-house.com>
+Co-authored-by: Brad House <brad@brad-house.com>
+Upstream-Status: Backport [https://github.com/c-ares/c-ares/commit/c7fa9ebcb0c0086730c53bf03191c03f03706246]
+GHSA: GHSA-fqh5-3x7m-wp44
+---
+ docs/ares_set_socket_functions.3 | 20 ++++++++++++++++++++
+ src/lib/ares_conn.c | 9 ++++++++-
+ src/lib/ares_socket.c | 4 +++-
+ src/lib/ares_socket.h | 8 +++++---
+ test/ares-test-mock.cc | 32 +++++++++++++++++++++++++++++++-
+ 5 files changed, 67 insertions(+), 6 deletions(-)
+
+diff --git a/docs/ares_set_socket_functions.3 b/docs/ares_set_socket_functions.3
+index 605beb26ef..75c621cb48 100644
+--- a/docs/ares_set_socket_functions.3
++++ b/docs/ares_set_socket_functions.3
+@@ -149,6 +149,20 @@ a socket. Additional flags controlling behavior are in
+ address, the callback should fill this in. The \fIflags\fP parameter is
+ currently unused. See \fBrecvfrom(2)\fP.
+
++For UDP, the callback must fill in the full source address, including the
++source port, exactly as \fBrecvfrom(2)\fP does. c-ares discards a datagram
++whose source address does not match the server it queried, or whose source
++port does not match that server's port.
++
++\fBSecurity:\fP for compatibility with older callbacks, a reported source port
++of 0 is treated as unknown and only the address is checked. A callback that
++does not fill in the source port is therefore insecure: c-ares will accept
++answers sent from any port on the server's address, for example from another
++DNS server or any other service or user able to send UDP from that host, and
++those answers are cached and returned to the application. Such an
++implementation is non-compliant and should be fixed to report the real source
++port.
++
+ .TP 8
+ .B ares_ssize_t (*\fIasendto\fP)(ares_socket_t \fIfd\fP, const void * \fIbuffer\fP, size_t \fIlength\fP, int \fIflags\fP, const struct sockaddr * \fIaddress\fP, ares_socklen_t \fIaddress_len\fP, void * \fIuser_data\fP)
+ .br
+@@ -305,6 +319,12 @@ Receives data from remote socket endpoint, if available. If the \fIaddr\fP
+ parameter is not NULL and the connection protocol provides the source address,
+ the callback should fill this in. See \fBrecvfrom(2)\fP
+
++For UDP, the callback must fill in the full source address, including the
++source port, as described above for \fIarecvfrom\fP in
++\fBares_set_socket_functions_ex\fP. \fBSecurity:\fP a callback that
++does not fill in the source port is insecure, and c-ares will accept answers
++sent from any port on the server's address.
++
+ .TP 8
+ .B ares_ssize_t (*\fIasendv\fP)(ares_socket_t \fIfd\fP, const struct iovec * \fIdata\fP, int \fIlen\fP, void * \fIuser_data\fP)
+ .br
+diff --git a/src/lib/ares_conn.c b/src/lib/ares_conn.c
+index b868053e62..7711d8649e 100644
+--- a/src/lib/ares_conn.c
++++ b/src/lib/ares_conn.c
+@@ -257,7 +257,14 @@ ares_conn_err_t ares_conn_read(ares_conn_t *conn, void *data, size_t len,
+ * functions might not filter on connect, so also check here that the
+ * datagram came from the server's address and UDP port. RFC 5452
+ * section 9.1 only requires the address to match; matching the port too
+- * keeps one server from answering for another on the same address. */
++ * keeps one server from answering for another on the same address.
++ * Socket functions that fill in the source address but leave the port 0
++ * predate the port check, so for those only the address is checked. A
++ * sender cannot use this to skip the port check: the default socket
++ * functions connect() the socket, so the kernel drops a datagram from
++ * port 0, and an unprivileged process on the server's host cannot send
++ * from port 0, while an off-path attacker able to forge port 0 can forge
++ * the server's real port just as easily. */
+ if (err == ARES_CONN_ERR_SUCCESS &&
+ !ares_sockaddr_addr_port_eq((struct sockaddr *)&sa_storage,
+ &conn->server->addr,
+diff --git a/src/lib/ares_socket.c b/src/lib/ares_socket.c
+index 0a12935ab7..29d595e1a9 100644
+--- a/src/lib/ares_socket.c
++++ b/src/lib/ares_socket.c
+@@ -144,7 +144,9 @@ ares_bool_t ares_sockaddr_addr_port_eq(const struct sockaddr *sa,
+ sa_port = (CARES_INADDR_CAST(const struct sockaddr_in6 *, sa))->sin6_port;
+ }
+
+- if (ntohs(sa_port) != port) {
++ /* A port of 0 means the source port was not reported, so only the address
++ * can be checked. */
++ if (sa_port != 0 && ntohs(sa_port) != port) {
+ return ARES_FALSE;
+ }
+
+diff --git a/src/lib/ares_socket.h b/src/lib/ares_socket.h
+index f7128e3493..1ede6987ee 100644
+--- a/src/lib/ares_socket.h
++++ b/src/lib/ares_socket.h
+@@ -151,13 +151,15 @@ ares_bool_t ares_sockaddr_addr_eq(const struct sockaddr *sa,
+ const struct ares_addr *aa);
+
+ /*! Compare the IP address and port of a socket address with an ares_addr and
+- * port.
++ * port. A port of 0 in the socket address means the port is unknown, so it
++ * matches any port.
+ *
+ * \param[in] sa Socket address (AF_INET or AF_INET6)
+ * \param[in] aa Address to compare against
+ * \param[in] port Port to compare against, in host byte order
+- * \return ARES_TRUE if the address families, IP addresses and ports are
+- * equal, ARES_FALSE otherwise
++ * \return ARES_TRUE if the address families and IP addresses are equal and
++ * the ports are equal or the socket address port is 0, ARES_FALSE
++ * otherwise
+ */
+ ares_bool_t ares_sockaddr_addr_port_eq(const struct sockaddr *sa,
+ const struct ares_addr *aa,
+diff --git a/test/ares-test-mock.cc b/test/ares-test-mock.cc
+index 058dc93001..cc5e6482f2 100644
+--- a/test/ares-test-mock.cc
++++ b/test/ares-test-mock.cc
+@@ -3364,6 +3364,7 @@ struct FakeSockData {
+ size_t query_len;
+ struct sockaddr_in peer;
+ unsigned short recv_port; /* network order; 0 reports the peer's port */
++ bool recv_no_port; /* report the peer's address with port 0 */
+ size_t recv_calls;
+ size_t bad_fd_calls;
+ size_t sock_state_bad;
+@@ -3472,7 +3473,9 @@ static ares_ssize_t FakeSockRecvfrom(ares_socket_t sock, void *buffer,
+ if (address != NULL && address_len != NULL &&
+ *address_len >= (ares_socklen_t)sizeof(d->peer)) {
+ memcpy(address, &d->peer, sizeof(d->peer));
+- if (d->recv_port != 0) {
++ if (d->recv_no_port) {
++ reinterpret_cast<struct sockaddr_in *>(address)->sin_port = 0;
++ } else if (d->recv_port != 0) {
+ reinterpret_cast<struct sockaddr_in *>(address)->sin_port = d->recv_port;
+ }
+ *address_len = sizeof(d->peer);
+@@ -3750,6 +3753,33 @@ TEST_F(LibraryTest, UDPAnswerFromWrongPortDropped) {
+ ares_destroy(chan);
+ }
+
++// Socket functions written before the port check may fill in the source
++// address but leave the port 0. The address is still checked, but the answer
++// must not be dropped for its port.
++TEST_F(LibraryTest, UDPAnswerWithoutPortAccepted)
++{
++ ares_channel_t *chan = nullptr;
++ FakeSockData data;
++
++ memset(&data, 0, sizeof(data));
++ FakeSockInit(&chan, &data, 0, ARES_SOCKFUNC_FLAG_NONBLOCKING);
++
++ ares_query_dnsrec(chan, "www.google.com", ARES_CLASS_IN, ARES_REC_TYPE_A,
++ FakeSockQueryCallback, &data, NULL);
++ ASSERT_NE((size_t)0, data.query_len);
++ ASSERT_EQ(htons(53055), data.peer.sin_port);
++
++ data.recv_no_port = true;
++ data.recv_answer = true;
++ ares_process_fd(chan, 100, ARES_SOCKET_BAD);
++ EXPECT_FALSE(data.recv_answer);
++ EXPECT_TRUE(data.done);
++ // The fake answer carries no records.
++ EXPECT_EQ(ARES_ENODATA, data.status);
++ EXPECT_EQ((size_t)0, ares_queue_active_queries(chan));
++ ares_destroy(chan);
++}
++
+ // The close function is application code too. With no socket-state callback
+ // to carry the descriptor, it runs inline while ares_check_cleanup_conns()
+ // walks the server list and each server's connections, closing idle ones.
diff --git a/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb b/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb
index 058f3666e7..1d0f3eb343 100644
--- a/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb
+++ b/meta-oe/recipes-support/c-ares/c-ares_1.34.8.bb
@@ -6,6 +6,14 @@ LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://LICENSE.md;md5=d3e72a10e08191f2ca1be3f3228d78f3"
SRC_URI = "https://github.com/c-ares/c-ares/releases/download/v${PV}/${BPN}-${PV}.tar.gz \
+ file://0001-ares_cancel-ares_destroy-detach-queries-before-callbacks.patch \
+ file://0002-Deliver-deferred-socket-server-state-notifications.patch \
+ file://0003-ares_qcache-hand-callbacks-their-own-copy.patch \
+ file://0004-Handle-connections-torn-down-by-application.patch \
+ file://0005-ares_process-only-accept-an-answer-on-the-right-connection.patch \
+ file://0006-ares_save_options-read-channel-config-under-lock.patch \
+ file://0007-ares_inet_pton-reject-a-prefix-length.patch \
+ file://0008-ares_conn_read-dont-drop-UDP-answers-from-server-port.patch \
file://run-ptest"
SRC_URI[sha256sum] = "c222b6d681096f9444d2c4863d2c1174019e27cacca0a4a5c114d36dd7d7bf78"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 59/60] mctp: upgrade 2.6 -> 2.6.1
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (57 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 58/60] c-ares: backport security fixes from 1.34.9 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 60/60] redis: upgrade 8.10.2 -> 8.10.3 ankur.tyagi85
2026-10-28 5:09 ` [oe] [blacksail][PATCH 00/60] Blacksail pull request Khem Raj
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: James Lee
From: James Lee <james@codeconstruct.com.au>
mctp 2.6.1 is a bugfix release that corrects mctpd's systemd service
file. mctpd requires CAP_NET_RAW to send MCTP control messages when
running as an unprivileged user. This capability is missing from
version 2.6, breaking mctpd.
Bump mctp and mctpd to version 2.6.1 to correct this.
Changelog:
https://github.com/CodeConstruct/mctp/blob/v2.6.1/CHANGELOG.md
Signed-off-by: James Lee <james@codeconstruct.com.au>
---
meta-networking/recipes-support/mctp/mctp.inc | 4 ++--
.../recipes-support/mctp/{mctp_2.6.bb => mctp_2.6.1.bb} | 0
.../recipes-support/mctp/{mctpd_2.6.bb => mctpd_2.6.1.bb} | 0
3 files changed, 2 insertions(+), 2 deletions(-)
rename meta-networking/recipes-support/mctp/{mctp_2.6.bb => mctp_2.6.1.bb} (100%)
rename meta-networking/recipes-support/mctp/{mctpd_2.6.bb => mctpd_2.6.1.bb} (100%)
diff --git a/meta-networking/recipes-support/mctp/mctp.inc b/meta-networking/recipes-support/mctp/mctp.inc
index c8fc98f63a..cc140f23a1 100644
--- a/meta-networking/recipes-support/mctp/mctp.inc
+++ b/meta-networking/recipes-support/mctp/mctp.inc
@@ -3,8 +3,8 @@ SECTION = "net"
LICENSE = "GPL-2.0-only"
LIC_FILES_CHKSUM = "file://LICENSE;md5=4cc91856b08b094b4f406a29dc61db21"
-SRC_URI = "git://github.com/CodeConstruct/mctp;branch=main;protocol=https;tag=v${PV}"
-SRCREV = "31ac0e86b0e23d32abf34d191653a87a47f3c9a7"
+SRC_URI = "git://github.com/CodeConstruct/mctp;branch=stable/2.6.x;protocol=https;tag=v${PV}"
+SRCREV = "ea1dfa9e59681c42d02ed3bf91cb150161481403"
inherit meson pkgconfig
diff --git a/meta-networking/recipes-support/mctp/mctp_2.6.bb b/meta-networking/recipes-support/mctp/mctp_2.6.1.bb
similarity index 100%
rename from meta-networking/recipes-support/mctp/mctp_2.6.bb
rename to meta-networking/recipes-support/mctp/mctp_2.6.1.bb
diff --git a/meta-networking/recipes-support/mctp/mctpd_2.6.bb b/meta-networking/recipes-support/mctp/mctpd_2.6.1.bb
similarity index 100%
rename from meta-networking/recipes-support/mctp/mctpd_2.6.bb
rename to meta-networking/recipes-support/mctp/mctpd_2.6.1.bb
^ permalink raw reply related [flat|nested] 62+ messages in thread
* [blacksail][PATCH 60/60] redis: upgrade 8.10.2 -> 8.10.3
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (58 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 59/60] mctp: upgrade 2.6 -> 2.6.1 ankur.tyagi85
@ 2026-10-28 4:23 ` ankur.tyagi85
2026-10-28 5:09 ` [oe] [blacksail][PATCH 00/60] Blacksail pull request Khem Raj
60 siblings, 0 replies; 62+ messages in thread
From: ankur.tyagi85 @ 2026-10-28 4:23 UTC (permalink / raw)
To: openembedded-devel; +Cc: Ankur Tyagi, Khem Raj
From: Ankur Tyagi <ankur.tyagi85@gmail.com>
Changelog:
https://github.com/redis/redis/releases/tag/8.10.3
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 53276e6882048b990201b3c230e0b1fd0b8311b6)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
.../0001-hiredis-use-default-CC-if-it-is-set.patch | 0
...2-lua-update-Makefile-to-use-environment-build-setting.patch | 0
.../0003-hack-to-force-use-of-libc-malloc.patch | 0
.../0004-src-Do-not-reset-FINAL_LIBS.patch | 0
...05-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch | 0
...06-src-Makefile-do-not-build-the-test-modules-from-all.patch | 0
.../redis/{redis-8.10.2 => redis-8.10.3}/init-redis-server | 0
.../redis/{redis-8.10.2 => redis-8.10.3}/redis.conf | 0
.../redis/{redis-8.10.2 => redis-8.10.3}/redis.service | 0
.../recipes-extended/redis/{redis_8.10.2.bb => redis_8.10.3.bb} | 2 +-
10 files changed, 1 insertion(+), 1 deletion(-)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0001-hiredis-use-default-CC-if-it-is-set.patch (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0002-lua-update-Makefile-to-use-environment-build-setting.patch (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0003-hack-to-force-use-of-libc-malloc.patch (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0004-src-Do-not-reset-FINAL_LIBS.patch (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/0006-src-Makefile-do-not-build-the-test-modules-from-all.patch (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/init-redis-server (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/redis.conf (100%)
rename meta-oe/recipes-extended/redis/{redis-8.10.2 => redis-8.10.3}/redis.service (100%)
rename meta-oe/recipes-extended/redis/{redis_8.10.2.bb => redis_8.10.3.bb} (98%)
diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/0001-hiredis-use-default-CC-if-it-is-set.patch b/meta-oe/recipes-extended/redis/redis-8.10.3/0001-hiredis-use-default-CC-if-it-is-set.patch
similarity index 100%
rename from meta-oe/recipes-extended/redis/redis-8.10.2/0001-hiredis-use-default-CC-if-it-is-set.patch
rename to meta-oe/recipes-extended/redis/redis-8.10.3/0001-hiredis-use-default-CC-if-it-is-set.patch
diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/0002-lua-update-Makefile-to-use-environment-build-setting.patch b/meta-oe/recipes-extended/redis/redis-8.10.3/0002-lua-update-Makefile-to-use-environment-build-setting.patch
similarity index 100%
rename from meta-oe/recipes-extended/redis/redis-8.10.2/0002-lua-update-Makefile-to-use-environment-build-setting.patch
rename to meta-oe/recipes-extended/redis/redis-8.10.3/0002-lua-update-Makefile-to-use-environment-build-setting.patch
diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/0003-hack-to-force-use-of-libc-malloc.patch b/meta-oe/recipes-extended/redis/redis-8.10.3/0003-hack-to-force-use-of-libc-malloc.patch
similarity index 100%
rename from meta-oe/recipes-extended/redis/redis-8.10.2/0003-hack-to-force-use-of-libc-malloc.patch
rename to meta-oe/recipes-extended/redis/redis-8.10.3/0003-hack-to-force-use-of-libc-malloc.patch
diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/0004-src-Do-not-reset-FINAL_LIBS.patch b/meta-oe/recipes-extended/redis/redis-8.10.3/0004-src-Do-not-reset-FINAL_LIBS.patch
similarity index 100%
rename from meta-oe/recipes-extended/redis/redis-8.10.2/0004-src-Do-not-reset-FINAL_LIBS.patch
rename to meta-oe/recipes-extended/redis/redis-8.10.3/0004-src-Do-not-reset-FINAL_LIBS.patch
diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch b/meta-oe/recipes-extended/redis/redis-8.10.3/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch
similarity index 100%
rename from meta-oe/recipes-extended/redis/redis-8.10.2/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch
rename to meta-oe/recipes-extended/redis/redis-8.10.3/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch
diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/0006-src-Makefile-do-not-build-the-test-modules-from-all.patch b/meta-oe/recipes-extended/redis/redis-8.10.3/0006-src-Makefile-do-not-build-the-test-modules-from-all.patch
similarity index 100%
rename from meta-oe/recipes-extended/redis/redis-8.10.2/0006-src-Makefile-do-not-build-the-test-modules-from-all.patch
rename to meta-oe/recipes-extended/redis/redis-8.10.3/0006-src-Makefile-do-not-build-the-test-modules-from-all.patch
diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/init-redis-server b/meta-oe/recipes-extended/redis/redis-8.10.3/init-redis-server
similarity index 100%
rename from meta-oe/recipes-extended/redis/redis-8.10.2/init-redis-server
rename to meta-oe/recipes-extended/redis/redis-8.10.3/init-redis-server
diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/redis.conf b/meta-oe/recipes-extended/redis/redis-8.10.3/redis.conf
similarity index 100%
rename from meta-oe/recipes-extended/redis/redis-8.10.2/redis.conf
rename to meta-oe/recipes-extended/redis/redis-8.10.3/redis.conf
diff --git a/meta-oe/recipes-extended/redis/redis-8.10.2/redis.service b/meta-oe/recipes-extended/redis/redis-8.10.3/redis.service
similarity index 100%
rename from meta-oe/recipes-extended/redis/redis-8.10.2/redis.service
rename to meta-oe/recipes-extended/redis/redis-8.10.3/redis.service
diff --git a/meta-oe/recipes-extended/redis/redis_8.10.2.bb b/meta-oe/recipes-extended/redis/redis_8.10.3.bb
similarity index 98%
rename from meta-oe/recipes-extended/redis/redis_8.10.2.bb
rename to meta-oe/recipes-extended/redis/redis_8.10.3.bb
index d24f6825d1..240eb4143f 100644
--- a/meta-oe/recipes-extended/redis/redis_8.10.2.bb
+++ b/meta-oe/recipes-extended/redis/redis_8.10.3.bb
@@ -17,7 +17,7 @@ SRC_URI = "http://download.redis.io/releases/${BP}.tar.gz \
file://0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch \
file://0006-src-Makefile-do-not-build-the-test-modules-from-all.patch \
"
-SRC_URI[sha256sum] = "b9ffee226b5eecdba98a679260dad764b2a4ebd90dce4ad5ac9e9f3eef9c02b3"
+SRC_URI[sha256sum] = "edde778f6bdee7581e42fc139ca9e07e2822212092f7501f99989656e3629d02"
RPROVIDES:${PN} = "virtual-redis"
^ permalink raw reply related [flat|nested] 62+ messages in thread
* Re: [oe] [blacksail][PATCH 00/60] Blacksail pull request
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
` (59 preceding siblings ...)
2026-10-28 4:23 ` [blacksail][PATCH 60/60] redis: upgrade 8.10.2 -> 8.10.3 ankur.tyagi85
@ 2026-10-28 5:09 ` Khem Raj
60 siblings, 0 replies; 62+ messages in thread
From: Khem Raj @ 2026-10-28 5:09 UTC (permalink / raw)
To: ankur.tyagi85
Cc: openembedded-devel, Peter Marko, Khem Raj, Jason Schonberg,
James Lee
[-- Attachment #1: Type: text/plain, Size: 17622 bytes --]
merged now, thanks Ankur
On Tue, Oct 27, 2026 at 9:23 PM Ankur Tyagi via lists.openembedded.org
<ankur.tyagi85=gmail.com@lists.openembedded.org> wrote:
> From: Ankur Tyagi <ankur.tyagi85@gmail.com>
>
> Please merge these changes in blacksail. Tested locally and on autobuilder.
>
> https://autobuilder.yoctoproject.org/valkyrie/#/builders/81/builds/1904
>
> The following changes since commit
> a9d69bc066bf9498397db27902c287dd666fdfd4:
>
> lvgl-demo-fb: fix SRCREV (2026-10-14 09:26:03 +1300)
>
> are available in the Git repository at:
>
> https://git.openembedded.org/meta-openembedded-contrib ankurt/blacksail
>
> https://git.openembedded.org/meta-openembedded-contrib/log/?h=ankurt/blacksail
>
> for you to fetch changes up to bb956bf8ff7a32f31deaa83e96880d10ab564d14:
>
> redis: upgrade 8.10.2 -> 8.10.3 (2026-10-28 08:22:29 +1300)
>
> ----------------------------------------------------------------
>
> Ankur Tyagi (51):
> zeroconf: ignore CVEs
> udisks2: patch CVE-2026-7867
> tmate: patch CVE-2026-4751
> tinyproxy: patch CVE-2026-54388
> flatpak: upgrade 1.18.0 -> 1.18.4
> xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9
> swagger-ui: upgrade 5.33.1 -> 5.33.2
> freerdp3: upgrade 3.32.1 -> 3.32.2
> spitools: upgrade 1.1.0 -> 1.1.1
> libspdm: upgrade 3.8.2 -> 3.8.3
> libmikmod: upgrade 3.3.14 -> 3.3.15
> libxmp: upgrade 4.7.3 -> 4.7.4
> python3-pyjwt: upgrade 2.13.0 -> 2.14.0
> python3-cbor2: upgrade 6.1.4 -> 6.1.5
> samba: ignore CVE-2026-2340
> rapidjson: mark CVE-2024-38517 fixed
> psqlodbc: patch CVE-2026-109448
> proftpd: mark CVE-2026-53994 fixed
> postfix: ignore CVE-2023-32182
> poppler: patch CVE-2026-102621
> poppler: patch CVE-2026-102620
> opensc: patch CVE-2026-103531
> pjproject: mark CVE-2026-26967 fixed
> pjproject: patch CVE-2026-57160
> pjproject: patch CVE-2026-57161
> pjproject: patch CVE-2026-57162
> pjproject: patch CVE-2026-57163
> pjproject: patch CVE-2026-57164
> pjproject: patch CVE-2026-57165
> pjproject: patch CVE-2026-57166
> pjproject: patch CVE-2026-77396
> pjproject: patch CVE-2026-84975
> nmap: patch CVE-2026-58058
> nmap: patch CVE-2026-72712
> netdata: mark CVE-2026-83602 fixed
> mtr: patch CVE-2026-14461
> ncp: ignore CVE-2025-14577 and CVE-2026-35087
> libvncserver: patch CVE-2026-44988
> libvncserver: patch CVE-2026-32854
> libvncserver: patch CVE-2026-32853
> libvncserver: patch CVE-2026-50538
> swagger-ui: upgrade 5.33.2 -> 5.33.3
> libmspack: patch CVE-2026-110602
> unbound: upgrade 1.26.1 -> 1.26.2
> ntpsec: upgrade 1.2.5 -> 1.2.6
> apache2: upgrade 2.4.68 -> 2.4.69
> 7zip: upgrade 26.03 -> 26.04
> 7zip: upgrade 26.04 -> 26.05
> python3-brotli: upgrade 1.2.0 -> 1.2.1
> python3-oauthlib: patch CVE-2026-49265
> redis: upgrade 8.10.2 -> 8.10.3
>
> James Lee (1):
> mctp: upgrade 2.6 -> 2.6.1
>
> Jason Schonberg (3):
> brotli: upgrade 1.2.0 -> 1.2.1
> php: upgrade 8.5.11 -> 8.5.12
> c-ares: backport security fixes from 1.34.9
>
> Peter Marko (5):
> nginx: upgrade 1.30.5 -> 1.30.6
> nginx: set CVE_STATUS for CVE-2026-95101 and CVE-2026-97629
> nss: remove compromised eMudhra certificates
> grpc: update gRPC repo roots
> python3-grpcio: update gRPC repo roots
>
> .../pjproject/pjproject/CVE-2026-57160.patch | 42 +
> .../pjproject/pjproject/CVE-2026-57161.patch | 49 +
> .../pjproject/pjproject/CVE-2026-57162.patch | 43 +
> .../pjproject/pjproject/CVE-2026-57163.patch | 52 +
> .../pjproject/pjproject/CVE-2026-57164.patch | 66 +
> .../pjproject/pjproject/CVE-2026-57165.patch | 85 +
> .../pjproject/pjproject/CVE-2026-57166.patch | 228 +
> .../pjproject/pjproject/CVE-2026-77396.patch | 74 +
> .../pjproject/pjproject/CVE-2026-84975.patch | 87 +
> .../pjproject/pjproject_2.17.bb | 11 +
> .../samba/samba_4.23.11.bb | 1 +
> .../recipes-daemons/postfix/postfix_3.11.7.bb | 2 +
> .../recipes-daemons/proftpd/proftpd_1.3.9d.bb | 1 +
> .../zeroconf/zeroconf_0.9.bb | 6 +
> meta-networking/recipes-support/mctp/mctp.inc | 4 +-
> .../mctp/{mctp_2.6.bb => mctp_2.6.1.bb} | 0
> .../mctp/{mctpd_2.6.bb => mctpd_2.6.1.bb} | 0
> .../mtr/mtr/CVE-2026-14461.patch | 32 +
> .../recipes-support/mtr/mtr_0.96.bb | 4 +-
> .../recipes-support/ncp/ncp_1.2.4.bb | 3 +
> .../{ntpsec_1.2.5.bb => ntpsec_1.2.6.bb} | 2 +-
> .../tinyproxy/tinyproxy/CVE-2026-54388.patch | 32 +
> .../tinyproxy/tinyproxy_1.11.3.bb | 1 +
> .../{unbound_1.26.1.bb => unbound_1.26.2.bb} | 2 +-
> .../psqlodbc/files/CVE-2026-109448.patch | 243 +
> .../psqlodbc/psqlodbc_18.00.0002.bb | 1 +
> ...curity-Update-gRPC-repo-roots.-43699.patch | 2617 +++
> meta-oe/recipes-devtools/grpc/grpc_1.84.0.bb | 1 +
> .../php/{php_8.5.11.bb => php_8.5.12.bb} | 2 +-
> .../rapidjson/rapidjson_git.bb | 2 +
> .../7zip/{7zip_26.03.bb => 7zip_26.05.bb} | 2 +-
> .../{brotli_1.2.0.bb => brotli_1.2.1.bb} | 4 +-
> .../{flatpak_1.18.0.bb => flatpak_1.18.4.bb} | 4 +-
> ...-hiredis-use-default-CC-if-it-is-set.patch | 0
> ...ile-to-use-environment-build-setting.patch | 0
> ...003-hack-to-force-use-of-libc-malloc.patch | 0
> .../0004-src-Do-not-reset-FINAL_LIBS.patch | 0
> ...RCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch | 0
> ...-not-build-the-test-modules-from-all.patch | 0
> .../init-redis-server | 0
> .../{redis-8.10.2 => redis-8.10.3}/redis.conf | 0
> .../redis.service | 0
> .../{redis_8.10.2.bb => redis_8.10.3.bb} | 2 +-
> .../tmate/files/CVE-2026-4751.patch | 75 +
> meta-oe/recipes-extended/tmate/tmate_2.4.0.bb | 1 +
> .../libvncserver/CVE-2026-32853.patch | 76 +
> .../libvncserver/CVE-2026-32854.patch | 66 +
> .../libvncserver/CVE-2026-44988.patch | 71 +
> .../libvncserver/CVE-2026-50538.patch | 49 +
> .../libvncserver/libvncserver_0.9.15.bb | 4 +
> .../{libxmp_4.7.3.bb => libxmp_4.7.4.bb} | 2 +-
> ...ibmikmod_3.3.14.bb => libmikmod_3.3.15.bb} | 2 +-
> .../nmap/files/CVE-2026-58058.patch | 34 +
> .../nmap/files/CVE-2026-72712.patch | 46 +
> meta-oe/recipes-security/nmap/nmap_7.99.bb | 2 +
> ...troy-detach-queries-before-callbacks.patch | 2603 +++
> ...ed-socket-server-state-notifications.patch | 393 +
> ...qcache-hand-callbacks-their-own-copy.patch | 1054 ++
> ...connections-torn-down-by-application.patch | 1107 ++
> ...pt-an-answer-on-the-right-connection.patch | 575 +
> ...tions-read-channel-config-under-lock.patch | 243 +
> ...res_inet_pton-reject-a-prefix-length.patch | 364 +
> ...nt-drop-UDP-answers-from-server-port.patch | 178 +
> .../recipes-support/c-ares/c-ares_1.34.8.bb | 8 +
> .../libmspack/CVE-2026-110602.patch | 41 +
> .../cabextract/libmspack_0.11alpha.bb | 4 +-
> ...1-winpr-tools-link-only-winpr-public.patch | 76 -
> ...{freerdp3_3.32.1.bb => freerdp3_3.32.2.bb} | 3 +-
> .../{libspdm_3.8.2.bb => libspdm_3.8.3.bb} | 2 +-
> ...ve-eMudhra-emSign-Root-CA-C1-and-emS.patch | 272 +
> ...ve-eMudhra-emSign-Root-CA-G3-from-NS.patch | 143 +
> meta-oe/recipes-support/nss/nss_3.126.bb | 2 +
> .../opensc/opensc/CVE-2026-103531.patch | 54 +
> .../recipes-support/opensc/opensc_0.27.1.bb | 1 +
> .../poppler/poppler/CVE-2026-102620-1.patch | 145 +
> .../poppler/poppler/CVE-2026-102620-2.patch | 34 +
> .../poppler/poppler/CVE-2026-102621.patch | 40 +
> .../poppler/poppler_26.08.0.bb | 3 +
> .../{spitools_1.1.0.bb => spitools_1.1.1.bb} | 2 +-
> .../udisks/udisks2/CVE-2026-7867-1.patch | 249 +
> .../udisks/udisks2/CVE-2026-7867-2.patch | 208 +
> .../udisks/udisks2/CVE-2026-7867-3.patch | 53 +
> .../udisks/udisks2/CVE-2026-7867-4.patch | 40 +
> .../udisks/udisks2/CVE-2026-7867-5.patch | 348 +
> .../recipes-support/udisks/udisks2_2.10.2.bb | 9 +-
> ...proxy_0.1.7.bb => xdg-dbus-proxy_0.1.9.bb} | 2 +-
> ...rotli_1.2.0.bb => python3-brotli_1.2.1.bb} | 2 +-
> ...-cbor2_6.1.4.bb => python3-cbor2_6.1.5.bb} | 2 +-
> .../0001-Update-gRPC-repo-roots.-43699.patch | 2617 +++
> ...e-repo-roots-to-chromium-roots-42094.patch | 14324 ++++++++++++++++
> .../python/python3-grpcio_1.78.0.bb | 6 +
> .../python3-oauthlib/CVE-2026-49265.patch | 51 +
> .../python/python3-oauthlib_3.3.1.bb | 2 +
> ...yjwt_2.13.0.bb => python3-pyjwt_2.14.0.bb} | 2 +-
> ...gger-ui_5.33.1.bb => swagger-ui_5.33.3.bb} | 2 +-
> ...mod_md-Add-OpenSSL-4.0-compatibility.patch | 47 -
> .../{apache2_2.4.68.bb => apache2_2.4.69.bb} | 3 +-
> .../{nginx_1.30.5.bb => nginx_1.30.6.bb} | 5 +-
> .../netdata/netdata_2.10.4.bb | 2 +
> 99 files changed, 29302 insertions(+), 152 deletions(-)
> create mode 100644
> meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57160.patch
> create mode 100644
> meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57161.patch
> create mode 100644
> meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57162.patch
> create mode 100644
> meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57163.patch
> create mode 100644
> meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57164.patch
> create mode 100644
> meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57165.patch
> create mode 100644
> meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-57166.patch
> create mode 100644
> meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-77396.patch
> create mode 100644
> meta-multimedia/recipes-multimedia/pjproject/pjproject/CVE-2026-84975.patch
> rename meta-networking/recipes-support/mctp/{mctp_2.6.bb => mctp_2.6.1.bb}
> (100%)
> rename meta-networking/recipes-support/mctp/{mctpd_2.6.bb =>
> mctpd_2.6.1.bb} (100%)
> create mode 100644
> meta-networking/recipes-support/mtr/mtr/CVE-2026-14461.patch
> rename meta-networking/recipes-support/ntpsec/{ntpsec_1.2.5.bb =>
> ntpsec_1.2.6.bb} (98%)
> create mode 100644
> meta-networking/recipes-support/tinyproxy/tinyproxy/CVE-2026-54388.patch
> rename meta-networking/recipes-support/unbound/{unbound_1.26.1.bb =>
> unbound_1.26.2.bb} (98%)
> create mode 100644
> meta-oe/recipes-dbs/psqlodbc/files/CVE-2026-109448.patch
> create mode 100644
> meta-oe/recipes-devtools/grpc/grpc/0001-security-Update-gRPC-repo-roots.-43699.patch
> rename meta-oe/recipes-devtools/php/{php_8.5.11.bb => php_8.5.12.bb}
> (99%)
> rename meta-oe/recipes-extended/7zip/{7zip_26.03.bb => 7zip_26.05.bb}
> (98%)
> rename meta-oe/recipes-extended/brotli/{brotli_1.2.0.bb =>
> brotli_1.2.1.bb} (79%)
> rename meta-oe/recipes-extended/flatpak/{flatpak_1.18.0.bb =>
> flatpak_1.18.4.bb} (94%)
> rename meta-oe/recipes-extended/redis/{redis-8.10.2 =>
> redis-8.10.3}/0001-hiredis-use-default-CC-if-it-is-set.patch (100%)
> rename meta-oe/recipes-extended/redis/{redis-8.10.2 =>
> redis-8.10.3}/0002-lua-update-Makefile-to-use-environment-build-setting.patch
> (100%)
> rename meta-oe/recipes-extended/redis/{redis-8.10.2 =>
> redis-8.10.3}/0003-hack-to-force-use-of-libc-malloc.patch (100%)
> rename meta-oe/recipes-extended/redis/{redis-8.10.2 =>
> redis-8.10.3}/0004-src-Do-not-reset-FINAL_LIBS.patch (100%)
> rename meta-oe/recipes-extended/redis/{redis-8.10.2 =>
> redis-8.10.3}/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch
> (100%)
> rename meta-oe/recipes-extended/redis/{redis-8.10.2 =>
> redis-8.10.3}/0006-src-Makefile-do-not-build-the-test-modules-from-all.patch
> (100%)
> rename meta-oe/recipes-extended/redis/{redis-8.10.2 =>
> redis-8.10.3}/init-redis-server (100%)
> rename meta-oe/recipes-extended/redis/{redis-8.10.2 =>
> redis-8.10.3}/redis.conf (100%)
> rename meta-oe/recipes-extended/redis/{redis-8.10.2 =>
> redis-8.10.3}/redis.service (100%)
> rename meta-oe/recipes-extended/redis/{redis_8.10.2.bb => redis_8.10.3.bb}
> (98%)
> create mode 100644
> meta-oe/recipes-extended/tmate/files/CVE-2026-4751.patch
> create mode 100644
> meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32853.patch
> create mode 100644
> meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-32854.patch
> create mode 100644
> meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-44988.patch
> create mode 100644
> meta-oe/recipes-graphics/libvncserver/libvncserver/CVE-2026-50538.patch
> rename meta-oe/recipes-multimedia/libxmp/{libxmp_4.7.3.bb =>
> libxmp_4.7.4.bb} (85%)
> rename meta-oe/recipes-multimedia/mikmod/{libmikmod_3.3.14.bb =>
> libmikmod_3.3.15.bb} (90%)
> create mode 100644
> meta-oe/recipes-security/nmap/files/CVE-2026-58058.patch
> create mode 100644
> meta-oe/recipes-security/nmap/files/CVE-2026-72712.patch
> create mode 100644
> meta-oe/recipes-support/c-ares/c-ares/0001-ares_cancel-ares_destroy-detach-queries-before-callbacks.patch
> create mode 100644
> meta-oe/recipes-support/c-ares/c-ares/0002-Deliver-deferred-socket-server-state-notifications.patch
> create mode 100644
> meta-oe/recipes-support/c-ares/c-ares/0003-ares_qcache-hand-callbacks-their-own-copy.patch
> create mode 100644
> meta-oe/recipes-support/c-ares/c-ares/0004-Handle-connections-torn-down-by-application.patch
> create mode 100644
> meta-oe/recipes-support/c-ares/c-ares/0005-ares_process-only-accept-an-answer-on-the-right-connection.patch
> create mode 100644
> meta-oe/recipes-support/c-ares/c-ares/0006-ares_save_options-read-channel-config-under-lock.patch
> create mode 100644
> meta-oe/recipes-support/c-ares/c-ares/0007-ares_inet_pton-reject-a-prefix-length.patch
> create mode 100644
> meta-oe/recipes-support/c-ares/c-ares/0008-ares_conn_read-dont-drop-UDP-answers-from-server-port.patch
> create mode 100644
> meta-oe/recipes-support/cabextract/libmspack/CVE-2026-110602.patch
> delete mode 100644
> meta-oe/recipes-support/freerdp/freerdp3/0001-winpr-tools-link-only-winpr-public.patch
> rename meta-oe/recipes-support/freerdp/{freerdp3_3.32.1.bb =>
> freerdp3_3.32.2.bb} (98%)
> rename meta-oe/recipes-support/libspdm/{libspdm_3.8.2.bb =>
> libspdm_3.8.3.bb} (98%)
> create mode 100644
> meta-oe/recipes-support/nss/nss/0008-Bug-2083709-Remove-eMudhra-emSign-Root-CA-C1-and-emS.patch
> create mode 100644
> meta-oe/recipes-support/nss/nss/0009-Bug-2084101-Remove-eMudhra-emSign-Root-CA-G3-from-NS.patch
> create mode 100644
> meta-oe/recipes-support/opensc/opensc/CVE-2026-103531.patch
> create mode 100644
> meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-1.patch
> create mode 100644
> meta-oe/recipes-support/poppler/poppler/CVE-2026-102620-2.patch
> create mode 100644
> meta-oe/recipes-support/poppler/poppler/CVE-2026-102621.patch
> rename meta-oe/recipes-support/spitools/{spitools_1.1.0.bb =>
> spitools_1.1.1.bb} (87%)
> create mode 100644
> meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-1.patch
> create mode 100644
> meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-2.patch
> create mode 100644
> meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-3.patch
> create mode 100644
> meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-4.patch
> create mode 100644
> meta-oe/recipes-support/udisks/udisks2/CVE-2026-7867-5.patch
> rename meta-oe/recipes-support/xdg-dbus-proxy/{xdg-dbus-proxy_0.1.7.bb
> => xdg-dbus-proxy_0.1.9.bb} (93%)
> rename meta-python/recipes-devtools/python/{python3-brotli_1.2.0.bb =>
> python3-brotli_1.2.1.bb} (81%)
> rename meta-python/recipes-devtools/python/{python3-cbor2_6.1.4.bb =>
> python3-cbor2_6.1.5.bb} (87%)
> create mode 100644
> meta-python/recipes-devtools/python/python3-grpcio/0001-Update-gRPC-repo-roots.-43699.patch
> create mode 100644
> meta-python/recipes-devtools/python/python3-grpcio/0001-Update-repo-roots-to-chromium-roots-42094.patch
> create mode 100644
> meta-python/recipes-devtools/python/python3-oauthlib/CVE-2026-49265.patch
> rename meta-python/recipes-devtools/python/{python3-pyjwt_2.13.0.bb =>
> python3-pyjwt_2.14.0.bb} (84%)
> rename meta-webserver/recipes-devtools/swagger-ui/{swagger-ui_5.33.1.bb
> => swagger-ui_5.33.3.bb} (94%)
> delete mode 100644
> meta-webserver/recipes-httpd/apache2/apache2/0011-mod_md-Add-OpenSSL-4.0-compatibility.patch
> rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.68.bb =>
> apache2_2.4.69.bb} (98%)
> rename meta-webserver/recipes-httpd/nginx/{nginx_1.30.5.bb =>
> nginx_1.30.6.bb} (63%)
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#131552):
> https://lists.openembedded.org/g/openembedded-devel/message/131552
> Mute This Topic: https://lists.openembedded.org/mt/121972299/1997914
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [
> raj.khem@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>
[-- Attachment #2: Type: text/html, Size: 27810 bytes --]
^ permalink raw reply [flat|nested] 62+ messages in thread
end of thread, other threads:[~2026-10-28 5:10 UTC | newest]
Thread overview: 62+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-28 4:23 [blacksail][PATCH 00/60] Blacksail pull request ankur.tyagi85
2026-10-28 4:22 ` [blacksail][PATCH 01/60] zeroconf: ignore CVEs ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 02/60] udisks2: patch CVE-2026-7867 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 03/60] tmate: patch CVE-2026-4751 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 04/60] tinyproxy: patch CVE-2026-54388 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 05/60] flatpak: upgrade 1.18.0 -> 1.18.4 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 06/60] xdg-dbus-proxy: upgrade 0.1.7 -> 0.1.9 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 07/60] swagger-ui: upgrade 5.33.1 -> 5.33.2 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 08/60] freerdp3: upgrade 3.32.1 -> 3.32.2 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 09/60] spitools: upgrade 1.1.0 -> 1.1.1 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 10/60] libspdm: upgrade 3.8.2 -> 3.8.3 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 11/60] libmikmod: upgrade 3.3.14 -> 3.3.15 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 12/60] libxmp: upgrade 4.7.3 -> 4.7.4 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 13/60] python3-pyjwt: upgrade 2.13.0 -> 2.14.0 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 14/60] python3-cbor2: upgrade 6.1.4 -> 6.1.5 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 15/60] samba: ignore CVE-2026-2340 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 16/60] rapidjson: mark CVE-2024-38517 fixed ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 17/60] psqlodbc: patch CVE-2026-109448 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 18/60] proftpd: mark CVE-2026-53994 fixed ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 19/60] postfix: ignore CVE-2023-32182 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 20/60] poppler: patch CVE-2026-102621 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 21/60] poppler: patch CVE-2026-102620 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 22/60] opensc: patch CVE-2026-103531 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 23/60] pjproject: mark CVE-2026-26967 fixed ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 24/60] pjproject: patch CVE-2026-57160 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 25/60] pjproject: patch CVE-2026-57161 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 26/60] pjproject: patch CVE-2026-57162 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 27/60] pjproject: patch CVE-2026-57163 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 28/60] pjproject: patch CVE-2026-57164 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 29/60] pjproject: patch CVE-2026-57165 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 30/60] pjproject: patch CVE-2026-57166 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 31/60] pjproject: patch CVE-2026-77396 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 32/60] pjproject: patch CVE-2026-84975 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 33/60] nmap: patch CVE-2026-58058 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 34/60] nmap: patch CVE-2026-72712 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 35/60] netdata: mark CVE-2026-83602 fixed ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 36/60] nginx: upgrade 1.30.5 -> 1.30.6 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 37/60] nginx: set CVE_STATUS for CVE-2026-95101 and CVE-2026-97629 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 38/60] mtr: patch CVE-2026-14461 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 39/60] ncp: ignore CVE-2025-14577 and CVE-2026-35087 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 40/60] libvncserver: patch CVE-2026-44988 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 41/60] libvncserver: patch CVE-2026-32854 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 42/60] libvncserver: patch CVE-2026-32853 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 43/60] libvncserver: patch CVE-2026-50538 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 44/60] swagger-ui: upgrade 5.33.2 -> 5.33.3 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 45/60] nss: remove compromised eMudhra certificates ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 46/60] grpc: update gRPC repo roots ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 47/60] python3-grpcio: " ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 48/60] libmspack: patch CVE-2026-110602 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 49/60] unbound: upgrade 1.26.1 -> 1.26.2 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 50/60] ntpsec: upgrade 1.2.5 -> 1.2.6 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 51/60] brotli: upgrade 1.2.0 -> 1.2.1 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 52/60] php: upgrade 8.5.11 -> 8.5.12 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 53/60] apache2: upgrade 2.4.68 -> 2.4.69 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 54/60] 7zip: upgrade 26.03 -> 26.04 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 55/60] 7zip: upgrade 26.04 -> 26.05 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 56/60] python3-brotli: upgrade 1.2.0 -> 1.2.1 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 57/60] python3-oauthlib: patch CVE-2026-49265 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 58/60] c-ares: backport security fixes from 1.34.9 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 59/60] mctp: upgrade 2.6 -> 2.6.1 ankur.tyagi85
2026-10-28 4:23 ` [blacksail][PATCH 60/60] redis: upgrade 8.10.2 -> 8.10.3 ankur.tyagi85
2026-10-28 5:09 ` [oe] [blacksail][PATCH 00/60] Blacksail pull request Khem Raj
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.