Quickly check the contents, and in CAfile_Baltimore_root, the value of Basic Constraints: CA: TRUE, pathlen: 1
That can be one reason. Yuting Chen -----Original Message----- From: [email protected] via RT Sent: Saturday, April 25, 2015 2:13 AM Cc: [email protected] Subject: [openssl-dev] [openssl.org #3821] Possible bug/request for help0.9.8 on windows - OpenSSL verify error. When I try to verify a SHA-2 certificate that chains up to a SHA-1 root I get error 20 at depth 0. If I leave the SHA-1 root off of the CAfile I get past depth 0. Verizon support was able to replicate this issue as well. We are trying to use OpenSSL verify to check our intermediate issuing CA (WellsSecure CA 01 G2) against the chain with the SHA-1 Baltimore Root at the top of the hierarchy. With the Baltimore root our chain looks like this: SHA-1 Baltimore root --> SHA-2 WellsSecure Public Root --> SHA-2 WellsSecure CA 01 G2 --> SHA-2 End-Entities With version 0.9.8 of OpenSSL we are seeing the following error: OpenSSL> version OpenSSL 0.9.8ze 15 Jan 2015 OpenSSL> verify -CAfile C:\test\CAfile_Baltimore_root+WSPRCA01G2cc.cer C:\test\WellsSecure_CA_01_G2.cer C:\test\WellsSecure_CA_01_G2.cer: /C=US/O=Wells Fargo/OU=WellsSecure Certification Authorities/CN=WellsSecure Certification Authority 01 G2 error 20 at 0 depth lookup:unable to get local issuer certificate I believe this error indicates that OpenSSL is unable to determine the issuer of our issuing intermediate CA. We only get this error when we try to verify the chain up to the SHA-1 Baltimore Root. It works in newer versions of OpenSSL and it works with our SHA-2 self-signed root and the cross-certificate from the SHA-2 Verizon Global root as seen below. With version 1.0.1 and 1.0.2 of OpenSSL we do not see the error. OpenSSL> version OpenSSL 1.0.1l 15 Jan 2015 OpenSSL> verify -CAfile C:\test\CAfile_Baltimore_root+WSPRCA01G2cc.cer C:\test\WellsSecure_CA_01_G2.cer C:\test\WellsSecure_CA_01_G2.cer: OK OpenSSL> version OpenSSL 1.0.2 22 Jan 2015 OpenSSL> verify -CAfile C:\test\CAfile_Baltimore_root+WSPRCA01G2cc.cer C:\test\WellsSecure_CA_01_G2.cer C:\test\WellsSecure_CA_01_G2.cer: OK We do not see this issue in OpenSSL 0.9.8 if we validate the intermediate issuing CA against the existing Verizon Global root cross cert chain. OpenSSL> version OpenSSL 0.9.8ze 15 Jan 2015 OpenSSL> verify -CAfile C:\test\CAfile_Verizon_root+WSPRCA01G2cc.cer C:\test\WellsSecure_CA_01_G2.cer C:\test\WellsSecure_CA_01_G2.cer: OK We also do not see the issue when we validate the intermediate issuing CA against our WellsSecure Public Root self-signed certificate. OpenSSL> version OpenSSL 0.9.8ze 15 Jan 2015 OpenSSL> verify -CAfile C:\test\WellsSecure_Public_Root_01_G2.cer C:\test\WellsSecure_CA_01_G2.cer C:\test\WellsSecure_CA_01_G2.cer: OK OpenSSL 0.9.8 does not appear to support the -partial_chain command so we cannot test the intermediate issuing CA against just the cross-certificate as issued by the SHA-1 Baltimore root without error but the error is expected. OpenSSL> version OpenSSL 0.9.8ze 15 Jan 2015 OpenSSL> verify -CAfile "C:\test\WSPRCA CC from Baltimore.cer" C:\test\WellsSecure_CA_01_G2.cer C:\test\WellsSecure_CA_01_G2.cer: /C=US/O=Wells Fargo WellsSecure/OU=Wells Fargo Bank NA/CN=WellsSecure Public Root Certification Authority 01 G2 error 2 at 1 depth lookup:unable to get issuer certificate I believe this error means that OpenSSL was able to find the issuer of our issuing intermediate CA, which it could not do when the Baltimore root is present, and tie it to the cross-certificate issued by the Baltimore root. The reason this error is happening is that my CAfile for this test did not contain the Baltimore self-signed root. There appears to be some sort of issue that is causing OpenSSL 0.9.8 to be unable to validate our chain when the SHA-1 Baltimore self signed root is at the top of the chain. Have you encountered this error before with a mixed hierarchy or are you able to shed any light on what may be causing this issue? I am attaching PEM encoded versions of the files for your own testing and validation. Jason Kubicki, CISSP Information Security Analyst Cryptographic Services - Enterprise Key Management & Public Key Infrastructure | Wells Fargo -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIKYQyP4AAAAAAAAjANBgkqhkiG9w0BAQsFADCBjTELMAkG A1UEBhMCVVMxIDAeBgNVBAoTF1dlbGxzIEZhcmdvIFdlbGxzU2VjdXJlMRwwGgYD VQQLExNXZWxscyBGYXJnbyBCYW5rIE5BMT4wPAYDVQQDEzVXZWxsc1NlY3VyZSBQ dWJsaWMgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAwMSBHMjAeFw0xMjEw MDEyMDQwMDVaFw0yMjEwMDEyMDUwMDVaMIGHMQswCQYDVQQGEwJVUzEUMBIGA1UE ChMLV2VsbHMgRmFyZ28xLjAsBgNVBAsTJVdlbGxzU2VjdXJlIENlcnRpZmljYXRp b24gQXV0aG9yaXRpZXMxMjAwBgNVBAMTKVdlbGxzU2VjdXJlIENlcnRpZmljYXRp b24gQXV0aG9yaXR5IDAxIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1idl7QU1OQVGPn51Pb62YWCvWOVOWPm1zs4OKIMSq+zR5EiVs0ve7lLo5VP+ WV3c/Er6yOxXXV01ocnN9N6hmOWhVn5KyDATGNCM5nHMHHdQQbfCAzFVycW1TO9H rjw74B1P+4jjy+B0nMRie3XSGACXEb11bDuummHCLYEM+6VanCOx41eRSd8VDcEK cP6NUkS4tujEwZojiujP0h7t/Jf3rtey7ORWGkq/rj9AH7Lo23Gr6bxeu3o3Auzv UejLKfUjh4cA2eZWgDMiGIRW4f9V7ZY9P+jwevl2D619qGPlYMsRBfcZ36xJs03C pWRFZxjHWJ9+u/nb4knLxy8jHwIDAQABo4IBbTCCAWkwDgYDVR0PAQH/BAQDAgGG MB0GA1UdDgQWBBRZmgHl58Pm8yV48VrZqOnxcpSOMDBMBgNVHSAERTBDMEEGC2CG SAGG+3uDdAAAMDIwMAYIKwYBBQUHAgEWJGh0dHA6Ly93d3cud2VsbHNmYXJnby5j b20vcmVwb3NpdG9yeTASBgNVHRMBAf8ECDAGAQH/AgEAMB8GA1UdIwQYMBaAFCHJ JdNq/qQS/+bdV1fPjz5yhAjNMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwu cGtpLndlbGxzZmFyZ28uY29tL3dzcHJjYTAxRzIuY3JsMHYGCCsGAQUFBwEBBGow aDA4BggrBgEFBQcwAoYsaHR0cDovL2NybC5wa2kud2VsbHNmYXJnby5jb20vd3Nw cmNhMDFHMi5jcnQwLAYIKwYBBQUHMAGGIGh0dHA6Ly92YWxpZGF0b3Iud2VsbHNm YXJnby5jb20vMA0GCSqGSIb3DQEBCwUAA4IBAQAd4xIa2AexQNSrmBK7RX5cFrh0 tFPydFSlXRo12TOvC0BexgvATrfuN6GPGemgt3nI/iTmNW+N4iw1phVnySyAr23Z nI8Hj73zy8Imyf42dfBIDN7dJFWKAU+sZRpFpuH358v0kBbbeZXQRLt/W4Ax0RJ9 TLbqIa3DiQ7tqo6LUvt7+yXH310YCu3722QGFXFfJmGmjmo5R+dL1vc5OQpNwpWo tfvKwpKHBXOCFqtzXU+X+IMbeSo6fajs5Qaqq1StCmzwCEYHiRQU8hyzUghcaMHF NDfxncSsdp2lgzAioW4ly0Qc8xzQlkUlSSHKv103SDDLJUVFPB4t82yCyDlK -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID6DCCAtCgAwIBAgIQXCwtpvvXVopPgEL9qP3rJjANBgkqhkiG9w0BAQsFADCB jTELMAkGA1UEBhMCVVMxIDAeBgNVBAoTF1dlbGxzIEZhcmdvIFdlbGxzU2VjdXJl MRwwGgYDVQQLExNXZWxscyBGYXJnbyBCYW5rIE5BMT4wPAYDVQQDEzVXZWxsc1Nl Y3VyZSBQdWJsaWMgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAwMSBHMjAe Fw0xMjA4MDkxNjM2NDVaFw0zMDEyMjYxNjQ2MzNaMIGNMQswCQYDVQQGEwJVUzEg MB4GA1UEChMXV2VsbHMgRmFyZ28gV2VsbHNTZWN1cmUxHDAaBgNVBAsTE1dlbGxz IEZhcmdvIEJhbmsgTkExPjA8BgNVBAMTNVdlbGxzU2VjdXJlIFB1YmxpYyBSb290 IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IDAxIEcyMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAwyWEb3XDCHkxFHAv0geLGyu5Ao0guOzJ+S4atX73DJUc x9qNric9AxqppOpwiThrd45xOhlAjKmzFPwB7Fti2IpnvXT2eFdJ53SATQrXDLM3 RntUn1xBYvIuDifZT4hcuBUa2VvZMJ3Aqag2tdeULyptO19o6yN3Vs4IP/6Y3nuX 8diTmRFCCYUGWwdb9Pkkk9Z6vc//AT6P0/8cvVI7MREroqyvwJHslOf0VAmMB2gN icZ1ub42Zm0jmiZDjbX/gikaU/X3IIJQJBX8t1JGdUdpAwtL1QPvsTx+Hjxk0i2B o2j0VFrXtkFn4u6TTgcoAyVfvFhqGhGHg1+EZd3TFQIDAQABo0IwQDAOBgNVHQ8B Af8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUIckl02r+pBL/5t1X V8+PPnKECM0wDQYJKoZIhvcNAQELBQADggEBAArE2ntHUGAvYnFg+yWyyCGyui4a YxW+/SR6HI7lr2AZD29yHWLwh8GuPufUesF30mluNZ46GSWZWMrGtvViK4UJAgnf EwvFUo8rEjug+o9EqIormGCHwgbAzNsaXjGi+L5oKbdB64E96EOY1zOH7zUWidaL mWbECjNWzFmuPMeLwAEVkhy7pNyfmvgEdRnquBkSInGX8OAmrWDERyEsQfwWI+sE HC0F6n7eE4QtaItigOdnwzGafqicKT/xQIFJJ0dP8tb4lqjhlqo3Q+j7oore26FH 4K1RoQNutEB2TJM7IbQRx+lKSWDwXResA3FLrQjVeGjNZxomzljPjzjRG2c= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDdTCCAl2gAwIBAgIBATANBgkqhkiG9w0BAQsFADBcMQswCQYDVQQGEwJVUzEZ MBcGA1UECgwQVmVyaXpvbiBCdXNpbmVzczERMA8GA1UECwwIT21uaVJvb3QxHzAd BgNVBAMMFlZlcml6b24gR2xvYmFsIFJvb3QgQ0EwHhcNMDkwNzMwMTQyNzA0WhcN MzQwNzMwMTQyNzA0WjBcMQswCQYDVQQGEwJVUzEZMBcGA1UECgwQVmVyaXpvbiBC dXNpbmVzczERMA8GA1UECwwIT21uaVJvb3QxHzAdBgNVBAMMFlZlcml6b24gR2xv YmFsIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKAAxw Hb/rNIbDmUU1Hn9D96tvJC3NGcIQu7DKKVupIKurcizE4gI5bYK4xRHq+PuznmL4 Mx6wH8nj9jfbBMg7Y0824oWkJR3HaR8EvWhFE5YHH5RQ9T7FJ1SewElXRI4HY9Sm ru0imcxNlmkEE252iZ90FpT5HVS9ornSgwEiDE1EgKr+NYknJaeGicbVGpLjj8WV oBRymuhWxQJVHJf5IC7Q9TwTGVr24fkLA4Jpp4y31m+cVj6d6CoJYG1L5vuLmRT3 NE9lWYCNuVfIojUh2IhxVl3uglctJpAYn5qcnI/v1MVjp1R9R5GHfRoSqBsYb6lv sSe65AR0zjcef2bFAgMBAAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/ BAQDAgEGMB0GA1UdDgQWBBRMOBG4mABbWitwPqp45NVnZ2enfjANBgkqhkiG9w0B AQsFAAOCAQEAAV+gsQYB9HnXZRhgPs95oLrCI08j34eWX4EOOBUuXMgCaCkg/Ivu pYoYgWRcmDV+OTCCpIKKULW6w+ha1qie4sMX29vE67AKIA3pnuP/YFRH8Tud1Cg8 oq6j+6qLgiIqNYeQuBxZR5DVnS76SeNlqDbrx+QcaNyzMWyrTs4kgBXIEFkQEXJN epyYnMT8YeCzsp1OoMbCWasY1qJVRewpqiU31k5KPQtAweST5PzNkQv45qvMs3bE Yr8Z7Ya2ecMpVFS8mX1GV8+mz/RUKpoDZUcBoUIqyyVHbnxeAEuR2fkbEAZw+UIV pl+q10Ae/clInZeB6lxowqDniaFTTb/H4w== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEaDCCA1CgAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwXDELMAkGA1UEBhMCVVMx GTAXBgNVBAoMEFZlcml6b24gQnVzaW5lc3MxETAPBgNVBAsMCE9tbmlSb290MR8w HQYDVQQDDBZWZXJpem9uIEdsb2JhbCBSb290IENBMB4XDTEzMDEzMDE3MzQwNFoX DTIzMDEzMDE3MzI1OVowgY0xCzAJBgNVBAYTAlVTMSAwHgYDVQQKDBdXZWxscyBG YXJnbyBXZWxsc1NlY3VyZTEcMBoGA1UECwwTV2VsbHMgRmFyZ28gQmFuayBOQTE+ MDwGA1UEAww1V2VsbHNTZWN1cmUgUHVibGljIFJvb3QgQ2VydGlmaWNhdGlvbiBB dXRob3JpdHkgMDEgRzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD JYRvdcMIeTEUcC/SB4sbK7kCjSC47Mn5Lhq1fvcMlRzH2o2uJz0DGqmk6nCJOGt3 jnE6GUCMqbMU/AHsW2LYime9dPZ4V0nndIBNCtcMszdGe1SfXEFi8i4OJ9lPiFy4 FRrZW9kwncCpqDa115QvKm07X2jrI3dWzgg//pjee5fx2JOZEUIJhQZbB1v0+SST 1nq9z/8BPo/T/xy9UjsxESuirK/AkeyU5/RUCYwHaA2JxnW5vjZmbSOaJkONtf+C KRpT9fcgglAkFfy3UkZ1R2kDC0vVA++xPH4ePGTSLYGjaPRUWte2QWfi7pNOBygD JV+8WGoaEYeDX4Rl3dMVAgMBAAGjggEAMIH9MBIGA1UdEwEB/wQIMAYBAf8CAQEw UwYDVR0gBEwwSjBIBgkrBgEEAbE+AQAwOzA5BggrBgEFBQcCARYtaHR0cDovL2N5 YmVydHJ1c3Qub21uaXJvb3QuY29tL3JlcG9zaXRvcnkuY2ZtMA4GA1UdDwEB/wQE AwIB5jAfBgNVHSMEGDAWgBRMOBG4mABbWitwPqp45NVnZ2enfjBCBgNVHR8EOzA5 MDegNaAzhjFodHRwOi8vY2RwMS5wdWJsaWMtdHJ1c3QuY29tL0NSTC9PbW5pcm9v dDIwMzQuY3JsMB0GA1UdDgQWBBQhySXTav6kEv/m3VdXz48+coQIzTANBgkqhkiG 9w0BAQsFAAOCAQEAJMU82S8OjWhmtDAVv4Ii+PpMQibfZtVqZ70kHVf+pYHpJ/YI e6ncRd7uKWYdU+0MaJ8SSZytnFQa2M4T/Dsp5bFpsMyDvp/LpyP9idEtVNwCTzfN uhTTTa7K8RA6oB1s8zG3r37zgSYZ3g+A7iXnUwwGo+NjH3YfggOmv4If668dABlI 2dEQjOkH4hl0a2RU1ytmoCCOj4fvXFa+YEWQG3Liy38b1N+UdqlYC+GFP+rlHGTF /WkJiKReAyq9xy74ipom7jaS73IzS7TEK1n5GGz7Dt+Bz2PGT06M0oGFsG4j1WbA JIKp29kbvaFrVVAhTZaq4+mMkL2gm//boC+qrg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDdzCCAl+gAwIBAgIEAgAAuTANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJJ RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTAwMDUxMjE4NDYwMFoX DTI1MDUxMjIzNTkwMFowWjELMAkGA1UEBhMCSUUxEjAQBgNVBAoTCUJhbHRpbW9y ZTETMBEGA1UECxMKQ3liZXJUcnVzdDEiMCAGA1UEAxMZQmFsdGltb3JlIEN5YmVy VHJ1c3QgUm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKMEuyKr mD1X6CZymrV51Cni4eiVgLGw41uOKymaZN+hXe2wCQVt2yguzmKiYv60iNoS6zjr IZ3AQSsBUnuId9Mcj8e6uYi1agnnc+gRQKfRzMpijS3ljwumUNKoUMMo6vWrJYeK mpYcqWe4PwzV9/lSEy/CG9VwcPCPwBLKBsua4dnKM3p31vjsufFoREJIE9LAwqSu XmD+tqYF/LTdB1kC1FkYmGP1pWPgkAx9XbIGevOF6uvUA65ehD5f/xXtabz5OTZy dc93Uk3zyZAsuT3lySNTPx8kmCFcB5kpvcY67Oduhjprl3RjM71oGDHweI12v/ye jl0qhqdNkNwnGjkCAwEAAaNFMEMwHQYDVR0OBBYEFOWdWTCCR1jMrPoIVDaGezq1 BE3wMBIGA1UdEwEB/wQIMAYBAf8CAQMwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3 DQEBBQUAA4IBAQCFDF2O5G9RaEIFoN27TyclhAO992T9Ldcw46QQF+vaKSm2eT92 9hkTI7gQCvlYpNRhcL0EYWoSihfVCr3FvDB81ukMJY2GQE/szKN+OMY3EU/t3Wgx jkzSswF07r51XgdIGn9w/xZchMB5hbgF/X++ZRGjD8ACtPhSNzkE1akxehi/oCr0 Epn3o0WC4zxe9Z2etciefC7IpJ5OCBRLbf1wbWsaY71k5h+3zvDyny67G7fyUIhz ksLi4xaNmjICq44Y3ekQEe5+NauQrz4wlHrQMz2nZQ/1/I6eYs9HRCwBXbsdtTLS R9I4LtD+gdwyah617jzV/OeBHRnDJELqYzmp -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIEByfDtDANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJJ RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTE1MDIyNjE2NDkwMFoX DTI1MDIyNjE2NDc0MVowgY0xCzAJBgNVBAYTAlVTMSAwHgYDVQQKDBdXZWxscyBG YXJnbyBXZWxsc1NlY3VyZTEcMBoGA1UECwwTV2VsbHMgRmFyZ28gQmFuayBOQTE+ MDwGA1UEAww1V2VsbHNTZWN1cmUgUHVibGljIFJvb3QgQ2VydGlmaWNhdGlvbiBB dXRob3JpdHkgMDEgRzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD JYRvdcMIeTEUcC/SB4sbK7kCjSC47Mn5Lhq1fvcMlRzH2o2uJz0DGqmk6nCJOGt3 jnE6GUCMqbMU/AHsW2LYime9dPZ4V0nndIBNCtcMszdGe1SfXEFi8i4OJ9lPiFy4 FRrZW9kwncCpqDa115QvKm07X2jrI3dWzgg//pjee5fx2JOZEUIJhQZbB1v0+SST 1nq9z/8BPo/T/xy9UjsxESuirK/AkeyU5/RUCYwHaA2JxnW5vjZmbSOaJkONtf+C KRpT9fcgglAkFfy3UkZ1R2kDC0vVA++xPH4ePGTSLYGjaPRUWte2QWfi7pNOBygD JV+8WGoaEYeDX4Rl3dMVAgMBAAGjggFuMIIBajASBgNVHRMBAf8ECDAGAQH/AgEB MEIGCCsGAQUFBwEBBDYwNDAyBggrBgEFBQcwAYYmaHR0cDovL29jc3Aub21uaXJv b3QuY29tL2JhbHRpbW9yZXJvb3QwUwYDVR0gBEwwSjBIBgkrBgEEAbE+AQAwOzA5 BggrBgEFBQcCARYtaHR0cDovL2N5YmVydHJ1c3Qub21uaXJvb3QuY29tL3JlcG9z aXRvcnkuY2ZtMA4GA1UdDwEB/wQEAwIBpjAnBgNVHSUEIDAeBggrBgEFBQcDAQYI KwYBBQUHAwIGCCsGAQUFBwMEMB8GA1UdIwQYMBaAFOWdWTCCR1jMrPoIVDaGezq1 BE3wMEIGA1UdHwQ7MDkwN6A1oDOGMWh0dHA6Ly9jZHAxLnB1YmxpYy10cnVzdC5j b20vQ1JML09tbmlyb290MjAyNS5jcmwwHQYDVR0OBBYEFCHJJdNq/qQS/+bdV1fP jz5yhAjNMA0GCSqGSIb3DQEBCwUAA4IBAQBwHz2aeGaaqE55Akqi2zy2hii8sgwR 3owuF3SeBxpfnwKQqVVZG8vv57ekGdrQ1mlyCSqW330WNFZDMUekOv0VNmcDvxHa trUqzMQsKaS1YACjZg/fyK2KUjpx8Y/t0WnDVAGjpux/mU2xtH2RWGkVGx60DHI7 /VWxYjnDLtQMGVzM9eG6x0C+IMAeOSGmDxS6xdb51xb/fDRZ7WOJkVdIl1qdBqkY ok+37vLK4wupqmR9lpDlsWeZcp/3/gG/hRhw6auwwFpFe4eZB9CmNkT0a6bKhXCd oyCUQybEkik+S33SXxtf6ktzlHXiKormx0d1/6mcp9UzzHbAhNCYhjtZ -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIEByfDtDANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJJ RTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYD VQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTE1MDIyNjE2NDkwMFoX DTI1MDIyNjE2NDc0MVowgY0xCzAJBgNVBAYTAlVTMSAwHgYDVQQKDBdXZWxscyBG YXJnbyBXZWxsc1NlY3VyZTEcMBoGA1UECwwTV2VsbHMgRmFyZ28gQmFuayBOQTE+ MDwGA1UEAww1V2VsbHNTZWN1cmUgUHVibGljIFJvb3QgQ2VydGlmaWNhdGlvbiBB dXRob3JpdHkgMDEgRzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD JYRvdcMIeTEUcC/SB4sbK7kCjSC47Mn5Lhq1fvcMlRzH2o2uJz0DGqmk6nCJOGt3 jnE6GUCMqbMU/AHsW2LYime9dPZ4V0nndIBNCtcMszdGe1SfXEFi8i4OJ9lPiFy4 FRrZW9kwncCpqDa115QvKm07X2jrI3dWzgg//pjee5fx2JOZEUIJhQZbB1v0+SST 1nq9z/8BPo/T/xy9UjsxESuirK/AkeyU5/RUCYwHaA2JxnW5vjZmbSOaJkONtf+C KRpT9fcgglAkFfy3UkZ1R2kDC0vVA++xPH4ePGTSLYGjaPRUWte2QWfi7pNOBygD JV+8WGoaEYeDX4Rl3dMVAgMBAAGjggFuMIIBajASBgNVHRMBAf8ECDAGAQH/AgEB MEIGCCsGAQUFBwEBBDYwNDAyBggrBgEFBQcwAYYmaHR0cDovL29jc3Aub21uaXJv b3QuY29tL2JhbHRpbW9yZXJvb3QwUwYDVR0gBEwwSjBIBgkrBgEEAbE+AQAwOzA5 BggrBgEFBQcCARYtaHR0cDovL2N5YmVydHJ1c3Qub21uaXJvb3QuY29tL3JlcG9z aXRvcnkuY2ZtMA4GA1UdDwEB/wQEAwIBpjAnBgNVHSUEIDAeBggrBgEFBQcDAQYI KwYBBQUHAwIGCCsGAQUFBwMEMB8GA1UdIwQYMBaAFOWdWTCCR1jMrPoIVDaGezq1 BE3wMEIGA1UdHwQ7MDkwN6A1oDOGMWh0dHA6Ly9jZHAxLnB1YmxpYy10cnVzdC5j b20vQ1JML09tbmlyb290MjAyNS5jcmwwHQYDVR0OBBYEFCHJJdNq/qQS/+bdV1fP jz5yhAjNMA0GCSqGSIb3DQEBCwUAA4IBAQBwHz2aeGaaqE55Akqi2zy2hii8sgwR 3owuF3SeBxpfnwKQqVVZG8vv57ekGdrQ1mlyCSqW330WNFZDMUekOv0VNmcDvxHa trUqzMQsKaS1YACjZg/fyK2KUjpx8Y/t0WnDVAGjpux/mU2xtH2RWGkVGx60DHI7 /VWxYjnDLtQMGVzM9eG6x0C+IMAeOSGmDxS6xdb51xb/fDRZ7WOJkVdIl1qdBqkY ok+37vLK4wupqmR9lpDlsWeZcp/3/gG/hRhw6auwwFpFe4eZB9CmNkT0a6bKhXCd oyCUQybEkik+S33SXxtf6ktzlHXiKormx0d1/6mcp9UzzHbAhNCYhjtZ -----END CERTIFICATE----- _______________________________________________ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev _______________________________________________ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
