Hi,
in the last days I have implemented BIO-pairs into the Postfix/TLS code.
Due to this change, I found the following errors with some communication
peers:
May 24 09:42:25 serv01 postfix/smtpd[10264]: verify error:num=19:self signed
certificate in certificate chain
May 24 09:42:25 serv01 postfix/smtpd[10264]: verify error:num=7:certificate signature
failure
May 24 09:42:25 serv01 postfix/smtpd[10264]: SSL_accept error -1
May 24 09:42:25 serv01 postfix/smtpd[10264]: 10264:error:0407006A:rsa
routines:RSA_padding_check_PKCS1_type_1:block type is not 01:rsa_pk1.c:100:
May 24 09:42:25 serv01 postfix/smtpd[10264]: 10264:error:04067072:rsa
routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed:rsa_eay.c:396:
May 24 09:42:25 serv01 postfix/smtpd[10264]: 10264:error:0D079006:asn1 encoding
routines:ASN1_verify:bad get asn1 object call:a_verify.c:109:
Problem 1:
These errors trigger an unwanted error condition when used with BIO-pairs,
non-blocking sockets might be affected, too.
Explanation:
- After reading the peer certificate, the certificate is checked and the
errors as shown above are pushed to the error stack.
- If SSL_VERIFY_NONE is set, the invalid certificate is not flagged as an
error, but the error stack is also not cleared.
- When the handshake is interrupted due to empty buffers, SSL_connect()
(or SSL_accept()) returns -1 and SSL_get_error() queries the stack,
finds the errors and returns SSL_ERROR_SSL instead of WANT_READ/WRITE.
[I am not sure about the correct solution. If the error stack would be
cleared, information might be lost. If the WANT_READ/WRITE-test is done
before the error check in SSL_get_error(), the problem might go away,
I however don't know what side effects this would have.]
Problem 2:
The padding error actually occurs also with blocking sockets, but when
the handshake is completed successfully, the error stack is never checked.
I have problems with two peers, both of which have generated the corresponding
certificates with OpenSSL.
- I don't understand enough of the actual cipher implementation to decide
myself, whether the certificate contains this error (then something is
wrong with the generation) or whether the error message is bogus.
- I have tried myself with Netscape contacting one of the sites and
Netscape did not complain (so maybe the cert is good and the error message
is wrong!?).
- One of the sites is the home of the [EMAIL PROTECTED] mailing
list: mail.mindrot.org.
I have attached the original certs, kindly provided by Damien Miller
<[EMAIL PROTECTED]>
I have also supplied a dump of the actual 1994 bytes returned by the
ssl3_get_message() call at the start of ssl3_get_server_certificate()
which later lead to the error message.
Best regards,
Lutz
--
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus Fax. +49 355 69-4153
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: md5WithRSAEncryption
Issuer: C=AU, ST=Victoria, L=Melbourne, O=Mindrot.org, OU=Certification,
CN=Certification [EMAIL PROTECTED]
Validity
Not Before: Apr 29 07:19:07 2000 GMT
Not After : Apr 29 07:19:07 2001 GMT
Subject: C=AU, ST=Victoria, L=Melbourne, O=Mindrot.org, OU=Security,
[EMAIL PROTECTED]
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1024 bit)
Modulus (1024 bit):
00:9e:bc:1a:77:1d:09:8d:13:c4:33:d9:62:78:39:
a3:a7:e5:2d:8d:c8:5b:88:b5:de:b9:ed:c1:28:db:
d7:c2:f2:1c:24:6a:44:17:ca:49:a9:33:e4:11:fd:
ea:be:fc:f0:d6:01:b0:89:aa:6e:6d:76:16:7e:eb:
48:a9:2f:8a:68:9f:20:6f:30:b3:66:38:e7:40:58:
ea:47:c9:63:d9:dd:b4:2e:93:a0:9b:65:b1:ae:63:
93:40:8a:29:fd:ff:7b:fe:8c:5f:68:a1:ad:ae:0c:
d4:47:5d:c2:71:b7:05:1f:12:0e:22:8b:80:e7:f7:
5a:58:f7:03:48:a1:fa:88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
Netscape Comment:
Beware the X.509 zombies
X509v3 Subject Key Identifier:
70:0B:E7:12:1A:A6:13:4C:B7:5A:A9:B7:BE:D1:4B:E6:5E:1E:E1:FB
X509v3 Authority Key Identifier:
keyid:43:74:9D:31:D3:B2:1F:E0:C9:C7:25:78:35:EF:26:F1:32:8B:C1:EA
DirName:/C=AU/ST=Victoria/L=Melbourne/O=Mindrot.org/OU=Certification/CN=Certification
[EMAIL PROTECTED]
serial:00
Signature Algorithm: md5WithRSAEncryption
2e:61:56:60:74:00:b7:34:1c:cf:ce:c7:29:e9:8b:a4:45:77:
24:39:ac:16:e9:79:1a:70:4e:ae:69:5b:9c:f7:77:ce:a9:ac:
e6:a1:b0:8c:16:c5:30:88:a5:53:6c:ad:dc:40:7f:25:b7:d4:
38:4c:46:94:1a:26:34:fb:67:20:ff:d6:b3:2c:0e:e9:75:62:
7f:01:38:d3:b0:c6:da:c2:d4:84:04:80:29:76:85:97:fc:7a:
ce:50:38:71:35:09:fc:e6:16:8e:32:f9:95:2f:dc:67:cf:74:
e4:a9:1d:fe:b7:39:e6:74:f7:ae:ad:42:c2:b6:4d:99:a6:27:
93:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
(gdb) x /1994xb s->init_buf->data
0x00 0x07 0xc7 0x00 0x03 0xf0 0x30 0x82
0x03 0xec 0x30 0x82 0x03 0x55 0xa0 0x03
0x02 0x01 0x02 0x02 0x01 0x03 0x30 0x0d
0x06 0x09 0x2a 0x86 0x48 0x86 0xf7 0x0d
0x01 0x01 0x04 0x05 0x00 0x30 0x81 0xa6
0x31 0x0b 0x30 0x09 0x06 0x03 0x55 0x04
0x06 0x13 0x02 0x41 0x55 0x31 0x11 0x30
0x0f 0x06 0x03 0x55 0x04 0x08 0x13 0x08
0x56 0x69 0x63 0x74 0x6f 0x72 0x69 0x61
0x31 0x12 0x30 0x10 0x06 0x03 0x55 0x04
0x07 0x13 0x09 0x4d 0x65 0x6c 0x62 0x6f
0x75 0x72 0x6e 0x65 0x31 0x14 0x30 0x12
0x06 0x03 0x55 0x04 0x0a 0x13 0x0b 0x4d
0x69 0x6e 0x64 0x72 0x6f 0x74 0x2e 0x6f
0x72 0x67 0x31 0x16 0x30 0x14 0x06 0x03
0x55 0x04 0x0b 0x13 0x0d 0x43 0x65 0x72
0x74 0x69 0x66 0x69 0x63 0x61 0x74 0x69
0x6f 0x6e 0x31 0x1b 0x30 0x19 0x06 0x03
0x55 0x04 0x03 0x13 0x12 0x43 0x65 0x72
0x74 0x69 0x66 0x69 0x63 0x61 0x74 0x69
0x6f 0x6e 0x20 0x67 0x69 0x6d 0x70 0x31
0x25 0x30 0x23 0x06 0x09 0x2a 0x86 0x48
0x86 0xf7 0x0d 0x01 0x09 0x01 0x16 0x16
0x68 0x6f 0x73 0x74 0x6d 0x61 0x73 0x74
0x65 0x72 0x40 0x6d 0x69 0x6e 0x64 0x72
0x6f 0x74 0x2e 0x6f 0x72 0x67 0x30 0x1e
0x17 0x0d 0x30 0x30 0x30 0x34 0x32 0x39
0x30 0x37 0x31 0x39 0x30 0x37 0x5a 0x17
0x0d 0x30 0x31 0x30 0x34 0x32 0x39 0x30
0x37 0x31 0x39 0x30 0x37 0x5a 0x30 0x81
0x9f 0x31 0x0b 0x30 0x09 0x06 0x03 0x55
0x04 0x06 0x13 0x02 0x41 0x55 0x31 0x11
0x30 0x0f 0x06 0x03 0x55 0x04 0x08 0x13
0x08 0x56 0x69 0x63 0x74 0x6f 0x72 0x69
0x61 0x31 0x12 0x30 0x10 0x06 0x03 0x55
0x04 0x07 0x13 0x09 0x4d 0x65 0x6c 0x62
0x6f 0x75 0x72 0x6e 0x65 0x31 0x14 0x30
0x12 0x06 0x03 0x55 0x04 0x0a 0x13 0x0b
0x4d 0x69 0x6e 0x64 0x72 0x6f 0x74 0x2e
0x6f 0x72 0x67 0x31 0x11 0x30 0x0f 0x06
0x03 0x55 0x04 0x0b 0x13 0x08 0x53 0x65
0x63 0x75 0x72 0x69 0x74 0x79 0x31 0x19
0x30 0x17 0x06 0x03 0x55 0x04 0x03 0x13
0x10 0x74 0x6f 0x61 0x64 0x2e 0x6d 0x69
0x6e 0x64 0x72 0x6f 0x74 0x2e 0x6f 0x72
0x67 0x31 0x25 0x30 0x23 0x06 0x09 0x2a
0x86 0x48 0x86 0xf7 0x0d 0x01 0x09 0x01
0x16 0x16 0x68 0x6f 0x73 0x74 0x6d 0x61
0x73 0x74 0x65 0x72 0x40 0x6d 0x69 0x6e
0x64 0x72 0x6f 0x74 0x2e 0x6f 0x72 0x67
0x30 0x81 0x9f 0x30 0x0d 0x06 0x09 0x2a
0x86 0x48 0x86 0xf7 0x0d 0x01 0x01 0x01
0x05 0x00 0x03 0x81 0x8d 0x00 0x30 0x81
0x89 0x02 0x81 0x81 0x00 0x9e 0xbc 0x1a
0x77 0x1d 0x09 0x8d 0x13 0xc4 0x33 0xd9
0x62 0x78 0x39 0xa3 0xa7 0xe5 0x2d 0x8d
0xc8 0x5b 0x88 0xb5 0xde 0xb9 0xed 0xc1
0x28 0xdb 0xd7 0xc2 0xf2 0x1c 0x24 0x6a
0x44 0x17 0xca 0x49 0xa9 0x33 0xe4 0x11
0xfd 0xea 0xbe 0xfc 0xf0 0xd6 0x01 0xb0
0x89 0xaa 0x6e 0x6d 0x76 0x16 0x7e 0xeb
0x48 0xa9 0x2f 0x8a 0x68 0x9f 0x20 0x6f
0x30 0xb3 0x66 0x38 0xe7 0x40 0x58 0xea
0x47 0xc9 0x63 0xd9 0xdd 0xb4 0x2e 0x93
0xa0 0x9b 0x65 0xb1 0xae 0x63 0x93 0x40
0x8a 0x29 0xfd 0xff 0x7b 0xfe 0x8c 0x5f
0x68 0xa1 0xad 0xae 0x0c 0xd4 0x47 0x5d
0xc2 0x71 0xb7 0x05 0x1f 0x12 0x0e 0x22
0x8b 0x80 0xe7 0xf7 0x5a 0x58 0xf7 0x03
0x48 0xa1 0xfa 0x88 0xd1 0x02 0x03 0x01
0x00 0x01 0xa3 0x82 0x01 0x2d 0x30 0x82
0x01 0x29 0x30 0x09 0x06 0x03 0x55 0x1d
0x13 0x04 0x02 0x30 0x00 0x30 0x27 0x06
0x09 0x60 0x86 0x48 0x01 0x86 0xf8 0x42
0x01 0x0d 0x04 0x1a 0x16 0x18 0x42 0x65
0x77 0x61 0x72 0x65 0x20 0x74 0x68 0x65
0x20 0x58 0x2e 0x35 0x30 0x39 0x20 0x7a
0x6f 0x6d 0x62 0x69 0x65 0x73 0x30 0x1d
0x06 0x03 0x55 0x1d 0x0e 0x04 0x16 0x04
0x14 0x70 0x0b 0xe7 0x12 0x1a 0xa6 0x13
0x4c 0xb7 0x5a 0xa9 0xb7 0xbe 0xd1 0x4b
0xe6 0x5e 0x1e 0xe1 0xfb 0x30 0x81 0xd3
0x06 0x03 0x55 0x1d 0x23 0x04 0x81 0xcb
0x30 0x81 0xc8 0x80 0x14 0x43 0x74 0x9d
0x31 0xd3 0xb2 0x1f 0xe0 0xc9 0xc7 0x25
0x78 0x35 0xef 0x26 0xf1 0x32 0x8b 0xc1
0xea 0xa1 0x81 0xac 0xa4 0x81 0xa9 0x30
0x81 0xa6 0x31 0x0b 0x30 0x09 0x06 0x03
0x55 0x04 0x06 0x13 0x02 0x41 0x55 0x31
0x11 0x30 0x0f 0x06 0x03 0x55 0x04 0x08
0x13 0x08 0x56 0x69 0x63 0x74 0x6f 0x72
0x69 0x61 0x31 0x12 0x30 0x10 0x06 0x03
0x55 0x04 0x07 0x13 0x09 0x4d 0x65 0x6c
0x62 0x6f 0x75 0x72 0x6e 0x65 0x31 0x14
0x30 0x12 0x06 0x03 0x55 0x04 0x0a 0x13
0x0b 0x4d 0x69 0x6e 0x64 0x72 0x6f 0x74
0x2e 0x6f 0x72 0x67 0x31 0x16 0x30 0x14
0x06 0x03 0x55 0x04 0x0b 0x13 0x0d 0x43
0x65 0x72 0x74 0x69 0x66 0x69 0x63 0x61
0x74 0x69 0x6f 0x6e 0x31 0x1b 0x30 0x19
0x06 0x03 0x55 0x04 0x03 0x13 0x12 0x43
0x65 0x72 0x74 0x69 0x66 0x69 0x63 0x61
0x74 0x69 0x6f 0x6e 0x20 0x67 0x69 0x6d
0x70 0x31 0x25 0x30 0x23 0x06 0x09 0x2a
0x86 0x48 0x86 0xf7 0x0d 0x01 0x09 0x01
0x16 0x16 0x68 0x6f 0x73 0x74 0x6d 0x61
0x73 0x74 0x65 0x72 0x40 0x6d 0x69 0x6e
0x64 0x72 0x6f 0x74 0x2e 0x6f 0x72 0x67
0x82 0x01 0x00 0x30 0x0d 0x06 0x09 0x2a
0x86 0x48 0x86 0xf7 0x0d 0x01 0x01 0x04
0x05 0x00 0x03 0x81 0x81 0x00 0x2e 0x61
0x56 0x60 0x74 0x00 0xb7 0x34 0x1c 0xcf
0xce 0xc7 0x29 0xe9 0x8b 0xa4 0x45 0x77
0x24 0x39 0xac 0x16 0xe9 0x79 0x1a 0x70
0x4e 0xae 0x69 0x5b 0x9c 0xf7 0x77 0xce
0xa9 0xac 0xe6 0xa1 0xb0 0x8c 0x16 0xc5
0x30 0x88 0xa5 0x53 0x6c 0xad 0xdc 0x40
0x7f 0x25 0xb7 0xd4 0x38 0x4c 0x46 0x94
0x1a 0x26 0x34 0xfb 0x67 0x20 0xff 0xd6
0xb3 0x2c 0x0e 0xe9 0x75 0x62 0x7f 0x01
0x38 0xd3 0xb0 0xc6 0xda 0xc2 0xd4 0x84
0x04 0x80 0x29 0x76 0x85 0x97 0xfc 0x7a
0xce 0x50 0x38 0x71 0x35 0x09 0xfc 0xe6
0x16 0x8e 0x32 0xf9 0x95 0x2f 0xdc 0x67
0xcf 0x74 0xe4 0xa9 0x1d 0xfe 0xb7 0x39
0xe6 0x74 0xf7 0xae 0xad 0x42 0xc2 0xb6
0x4d 0x99 0xa6 0x27 0x93 0x3a 0x00 0x03
0xd1 0x30 0x82 0x03 0xcd 0x30 0x82 0x03
0x36 0xa0 0x03 0x02 0x01 0x02 0x02 0x01
0x00 0x30 0x0d 0x06 0x09 0x2a 0x86 0x48
0x86 0xf7 0x0d 0x01 0x01 0x04 0x05 0x00
0x30 0x81 0xa6 0x31 0x0b 0x30 0x09 0x06
0x03 0x55 0x04 0x06 0x13 0x02 0x41 0x55
0x31 0x11 0x30 0x0f 0x06 0x03 0x55 0x04
0x08 0x13 0x08 0x56 0x69 0x63 0x74 0x6f
0x72 0x69 0x61 0x31 0x12 0x30 0x10 0x06
0x03 0x55 0x04 0x07 0x13 0x09 0x4d 0x65
0x6c 0x62 0x6f 0x75 0x72 0x6e 0x65 0x31
0x14 0x30 0x12 0x06 0x03 0x55 0x04 0x0a
0x13 0x0b 0x4d 0x69 0x6e 0x64 0x72 0x6f
0x74 0x2e 0x6f 0x72 0x67 0x31 0x16 0x30
0x14 0x06 0x03 0x55 0x04 0x0b 0x13 0x0d
0x43 0x65 0x72 0x74 0x69 0x66 0x69 0x63
0x61 0x74 0x69 0x6f 0x6e 0x31 0x1b 0x30
0x19 0x06 0x03 0x55 0x04 0x03 0x13 0x12
0x43 0x65 0x72 0x74 0x69 0x66 0x69 0x63
0x61 0x74 0x69 0x6f 0x6e 0x20 0x67 0x69
0x6d 0x70 0x31 0x25 0x30 0x23 0x06 0x09
0x2a 0x86 0x48 0x86 0xf7 0x0d 0x01 0x09
0x01 0x16 0x16 0x68 0x6f 0x73 0x74 0x6d
0x61 0x73 0x74 0x65 0x72 0x40 0x6d 0x69
0x6e 0x64 0x72 0x6f 0x74 0x2e 0x6f 0x72
0x67 0x30 0x1e 0x17 0x0d 0x30 0x30 0x30
0x33 0x31 0x35 0x31 0x32 0x30 0x38 0x31
0x31 0x5a 0x17 0x0d 0x30 0x31 0x30 0x33
0x31 0x35 0x31 0x32 0x30 0x38 0x31 0x31
0x5a 0x30 0x81 0xa6 0x31 0x0b 0x30 0x09
0x06 0x03 0x55 0x04 0x06 0x13 0x02 0x41
0x55 0x31 0x11 0x30 0x0f 0x06 0x03 0x55
0x04 0x08 0x13 0x08 0x56 0x69 0x63 0x74
0x6f 0x72 0x69 0x61 0x31 0x12 0x30 0x10
0x06 0x03 0x55 0x04 0x07 0x13 0x09 0x4d
0x65 0x6c 0x62 0x6f 0x75 0x72 0x6e 0x65
0x31 0x14 0x30 0x12 0x06 0x03 0x55 0x04
0x0a 0x13 0x0b 0x4d 0x69 0x6e 0x64 0x72
0x6f 0x74 0x2e 0x6f 0x72 0x67 0x31 0x16
0x30 0x14 0x06 0x03 0x55 0x04 0x0b 0x13
0x0d 0x43 0x65 0x72 0x74 0x69 0x66 0x69
0x63 0x61 0x74 0x69 0x6f 0x6e 0x31 0x1b
0x30 0x19 0x06 0x03 0x55 0x04 0x03 0x13
0x12 0x43 0x65 0x72 0x74 0x69 0x66 0x69
0x63 0x61 0x74 0x69 0x6f 0x6e 0x20 0x67
0x69 0x6d 0x70 0x31 0x25 0x30 0x23 0x06
0x09 0x2a 0x86 0x48 0x86 0xf7 0x0d 0x01
0x09 0x01 0x16 0x16 0x68 0x6f 0x73 0x74
0x6d 0x61 0x73 0x74 0x65 0x72 0x40 0x6d
0x69 0x6e 0x64 0x72 0x6f 0x74 0x2e 0x6f
0x72 0x67 0x30 0x81 0x9f 0x30 0x0d 0x06
0x09 0x2a 0x86 0x48 0x86 0xf7 0x0d 0x01
0x01 0x01 0x05 0x00 0x03 0x81 0x8d 0x00
0x30 0x81 0x89 0x02 0x81 0x81 0x00 0xc6
0x0d 0x1f 0x2f 0x63 0x5b 0x05 0xcb 0xab
0x4a 0x09 0x15 0xbf 0x87 0x3d 0xee 0x10
0xa9 0x54 0x66 0x22 0x45 0x35 0x2c 0x21
0xab 0x03 0x16 0xb5 0x9b 0x21 0xc2 0x68
0x8a 0x0a 0x08 0xc7 0x4b 0x79 0xbb 0xcb
0xb6 0x2b 0x2e 0xd4 0x85 0x54 0x62 0x60
0x9d 0x0d 0xca 0x7f 0x09 0xd5 0x32 0xed
0x89 0xb5 0xd0 0x75 0x89 0xe6 0x95 0xfa
0x62 0x5f 0x2c 0xb0 0xff 0xcc 0x6d 0x70
0x79 0xb4 0x55 0x1d 0xdd 0x4c 0xc2 0x15
0xbc 0x2f 0xfe 0x90 0x28 0x16 0xec 0xa9
0x88 0xfd 0x01 0x28 0x6d 0xc7 0x12 0x78
0xf2 0x34 0xaa 0x47 0x47 0x63 0xce 0xae
0x98 0x45 0xd6 0x9a 0x67 0xec 0x2d 0x5b
0x9c 0x32 0xbd 0x1c 0xeb 0x33 0x18 0xfe
0x81 0x8d 0x92 0xdd 0x5e 0x88 0xa1 0x02
0x03 0x01 0x00 0x01 0xa3 0x82 0x01 0x07
0x30 0x82 0x01 0x03 0x30 0x1d 0x06 0x03
0x55 0x1d 0x0e 0x04 0x16 0x04 0x14 0x3e
0xba 0x83 0x59 0xd1 0xb6 0xfa 0x44 0xe6
0x16 0x04 0x0b 0x4c 0xf4 0x95 0x0c 0x17
0xf8 0x44 0xe3 0x30 0x81 0xd3 0x06 0x03
0x55 0x1d 0x23 0x04 0x81 0xcb 0x30 0x81
0xc8 0x80 0x14 0x3e 0xba 0x83 0x59 0xd1
0xb6 0xfa 0x44 0xe6 0x16 0x04 0x0b 0x4c
0xf4 0x95 0x0c 0x17 0xf8 0x44 0xe3 0xa1
0x81 0xac 0xa4 0x81 0xa9 0x30 0x81 0xa6
0x31 0x0b 0x30 0x09 0x06 0x03 0x55 0x04
0x06 0x13 0x02 0x41 0x55 0x31 0x11 0x30
0x0f 0x06 0x03 0x55 0x04 0x08 0x13 0x08
0x56 0x69 0x63 0x74 0x6f 0x72 0x69 0x61
0x31 0x12 0x30 0x10 0x06 0x03 0x55 0x04
0x07 0x13 0x09 0x4d 0x65 0x6c 0x62 0x6f
0x75 0x72 0x6e 0x65 0x31 0x14 0x30 0x12
0x06 0x03 0x55 0x04 0x0a 0x13 0x0b 0x4d
0x69 0x6e 0x64 0x72 0x6f 0x74 0x2e 0x6f
0x72 0x67 0x31 0x16 0x30 0x14 0x06 0x03
0x55 0x04 0x0b 0x13 0x0d 0x43 0x65 0x72
0x74 0x69 0x66 0x69 0x63 0x61 0x74 0x69
0x6f 0x6e 0x31 0x1b 0x30 0x19 0x06 0x03
0x55 0x04 0x03 0x13 0x12 0x43 0x65 0x72
0x74 0x69 0x66 0x69 0x63 0x61 0x74 0x69
0x6f 0x6e 0x20 0x67 0x69 0x6d 0x70 0x31
0x25 0x30 0x23 0x06 0x09 0x2a 0x86 0x48
0x86 0xf7 0x0d 0x01 0x09 0x01 0x16 0x16
0x68 0x6f 0x73 0x74 0x6d 0x61 0x73 0x74
0x65 0x72 0x40 0x6d 0x69 0x6e 0x64 0x72
0x6f 0x74 0x2e 0x6f 0x72 0x67 0x82 0x01
0x00 0x30 0x0c 0x06 0x03 0x55 0x1d 0x13
0x04 0x05 0x30 0x03 0x01 0x01 0xff 0x30
0x0d 0x06 0x09 0x2a 0x86 0x48 0x86 0xf7
0x0d 0x01 0x01 0x04 0x05 0x00 0x03 0x81
0x81 0x00 0x7d 0x23 0x48 0x20 0x88 0xea
0x20 0xad 0xda 0xfd 0x14 0x71 0x80 0x7d
0x7e 0x2b 0xf8 0xdf 0xdd 0xc6 0x07 0x4a
0xe5 0x0b 0x1f 0x97 0xa7 0x57 0x1d 0x20
0x72 0x0d 0xef 0x06 0x3e 0x1f 0x1d 0x7b
0xeb 0x63 0x40 0x87 0x66 0xe1 0xc8 0x41
0xb4 0x4d 0x1d 0x50 0x11 0xc9 0xac 0xb2
0x3e 0xa6 0x49 0x7f 0xa1 0xff 0x5b 0x2b
0x88 0x4c 0x8f 0x90 0xc7 0x55 0x97 0x60
0x17 0xef 0x7a 0xbe 0x81 0xac 0x5c 0x6a
0xd2 0x5b 0x35 0x33 0xfb 0xd3 0xee 0x3f
0xaa 0x11 0x5d 0xda 0x53 0x57 0x04 0x26
0xc5 0x1a 0x32 0xf5 0xd7 0xd3 0xdd 0x1d
0xa6 0xc7 0x34 0x20 0x6e 0xfa 0x66 0x6f
0x98 0xbc 0x22 0x39 0x31 0xab 0x46 0xe3
0xad 0x0b 0x95 0x3a 0xf8 0xda 0x28 0xb6
0x8f 0x4e
