This is an automated email from the ASF dual-hosted git repository.

eolivelli pushed a commit to branch 2.7.2_ds_rootless
in repository https://gitbox.apache.org/repos/asf/pulsar.git

commit c96e31f85c0bd5c00f5692cbf61bc8ded330eddc
Author: Lari Hotari <l...@hotari.net>
AuthorDate: Fri May 14 12:19:36 2021 +0300

    Regenerate test certificates in 
pulsar-broker/src/test/resources/authentication/tls
---
 build/regenerate_certs_for_tests.sh                |   7 ++
 .../resources/authentication/tls/broker-cert.pem   |  87 ++++++++--------
 .../test/resources/authentication/tls/cacert.pem   | 109 ++++++++++++---------
 .../resources/authentication/tls/client-cert.pem   |  87 ++++++++--------
 4 files changed, 151 insertions(+), 139 deletions(-)

diff --git a/build/regenerate_certs_for_tests.sh 
b/build/regenerate_certs_for_tests.sh
index 7e4cf84..372de32 100755
--- a/build/regenerate_certs_for_tests.sh
+++ b/build/regenerate_certs_for_tests.sh
@@ -45,6 +45,13 @@ reissue_certificate 
$ROOT_DIR/pulsar-proxy/src/test/resources/authentication/tls
   $ROOT_DIR/pulsar-proxy/src/test/resources/authentication/tls/server-cert.pem
 
 generate_ca
+cp ca-cert.pem 
$ROOT_DIR/pulsar-broker/src/test/resources/authentication/tls/cacert.pem
+reissue_certificate 
$ROOT_DIR/pulsar-broker/src/test/resources/authentication/tls/broker-key.pem \
+  $ROOT_DIR/pulsar-broker/src/test/resources/authentication/tls/broker-cert.pem
+reissue_certificate 
$ROOT_DIR/pulsar-broker/src/test/resources/authentication/tls/client-key.pem \
+  $ROOT_DIR/pulsar-broker/src/test/resources/authentication/tls/client-cert.pem
+
+generate_ca
 cp ca-cert.pem 
$ROOT_DIR/bouncy-castle/bcfips-include-test/src/test/resources/authentication/tls/cacert.pem
 reissue_certificate 
$ROOT_DIR/bouncy-castle/bcfips-include-test/src/test/resources/authentication/tls/broker-key.pem
 \
   
$ROOT_DIR/bouncy-castle/bcfips-include-test/src/test/resources/authentication/tls/broker-cert.pem
diff --git 
a/pulsar-broker/src/test/resources/authentication/tls/broker-cert.pem 
b/pulsar-broker/src/test/resources/authentication/tls/broker-cert.pem
index 69ad71c..66a0fb1 100644
--- a/pulsar-broker/src/test/resources/authentication/tls/broker-cert.pem
+++ b/pulsar-broker/src/test/resources/authentication/tls/broker-cert.pem
@@ -1,18 +1,18 @@
 Certificate:
     Data:
-        Version: 3 (0x2)
+        Version: 1 (0x0)
         Serial Number:
-            88:08:98:b3:13:d8:00:97
-        Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C=US, ST=CA, O=Apache, OU=Pulsar Incubator, CN=localhost
+            03:c7:fe:e2:a7:5d:92:28:ef:5b:4f:41:1a:52:c9:12:32:75:29:a4
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN = CARoot
         Validity
-            Not Before: Feb 17 02:06:21 2018 GMT
-            Not After : Nov 16 00:00:00 2030 GMT
-        Subject: C=US, ST=CA, O=Apache, OU=Apache Pulsar, CN=localhost
+            Not Before: May 14 09:17:36 2021 GMT
+            Not After : May 12 09:17:36 2031 GMT
+        Subject: C = US, ST = CA, O = Apache, OU = Apache Pulsar, CN = 
localhost
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
+                RSA Public-Key: (2048 bit)
+                Modulus:
                     00:af:bf:b7:2d:98:ad:9d:f6:da:a3:13:d4:62:0f:
                     98:be:1c:a2:89:22:ba:6f:d5:fd:1f:67:e3:91:03:
                     98:80:81:0e:ed:d8:f6:70:7f:2c:36:68:3d:53:ea:
@@ -32,42 +32,37 @@ Certificate:
                     a0:1a:81:9d:d2:e1:66:dd:c4:cc:fc:63:04:ac:ec:
                     a7:35
                 Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: 
-                CA:FALSE
-            Netscape Comment: 
-                OpenSSL Generated Certificate
-            X509v3 Subject Key Identifier: 
-                D3:F3:19:AE:74:B1:AF:E7:AF:08:7B:16:72:78:29:87:79:ED:30:8C
-            X509v3 Authority Key Identifier: 
-                
keyid:D4:7A:CD:0F:44:1B:16:29:25:14:ED:A2:EF:13:0F:A7:46:09:78:F6
-
-    Signature Algorithm: sha1WithRSAEncryption
-        0f:04:f3:91:f2:87:19:fe:9d:f8:34:5a:24:4a:00:d1:58:bf:
-        1e:b2:77:67:07:bc:78:b5:4b:9a:4b:fd:a1:e5:dc:0e:09:84:
-        9e:59:c4:dd:cf:f7:2e:bf:da:f3:31:36:6b:81:6e:a2:88:76:
-        e4:2e:0b:36:44:82:36:8f:80:93:f4:9e:fc:ed:85:d0:97:da:
-        0f:fb:c9:b9:8b:da:ae:07:3d:4f:82:b7:0c:25:22:63:12:6b:
-        0a:e9:c4:12:a4:5c:ed:11:12:cc:fe:b0:2e:d4:c1:ec:79:01:
-        60:ea:cc:cc:e5:66:cc:57:f6:55:a9:09:4c:63:01:e9:b4:2e:
-        73:a5
+    Signature Algorithm: sha256WithRSAEncryption
+         aa:27:c7:ef:a4:d0:60:25:8c:bd:a1:27:58:fe:22:73:36:6b:
+         98:50:d8:11:8c:0d:be:28:08:4c:ba:5c:c6:40:65:af:33:1b:
+         d2:a2:eb:23:02:a9:1a:f0:02:55:82:57:a2:c0:3b:1d:00:21:
+         f6:31:0d:8c:61:f3:72:c4:ba:87:46:db:7c:7f:62:7a:30:1b:
+         bf:de:d3:c5:b3:74:21:f4:30:29:d8:ba:74:d8:4a:4c:12:d4:
+         b9:ea:62:d1:7b:0f:e4:da:7e:76:02:5c:05:1c:a1:bf:69:7b:
+         0a:67:46:a0:1e:ba:d8:3d:d6:d4:52:7c:02:87:08:7b:1d:65:
+         54:03:c1:df:40:52:04:8e:58:b1:0a:6f:4c:2d:12:61:cb:34:
+         e2:d7:70:65:08:cb:4c:f4:ed:20:ef:e6:b4:76:16:06:f8:01:
+         45:b0:10:ee:db:a1:bd:4d:57:17:f9:bd:85:ff:80:15:02:03:
+         2b:ec:1d:9f:b6:2c:d7:e2:99:09:cd:09:c3:08:86:6e:ba:f8:
+         2d:48:59:cf:69:f9:2c:a0:e4:81:d3:32:48:15:7a:a2:58:b3:
+         f7:8f:c8:7f:74:29:e0:7c:c5:ae:bf:c5:80:b4:e2:3e:d2:ec:
+         07:ce:08:79:32:0b:86:6f:4f:2f:37:8d:75:d4:fc:40:38:31:
+         32:88:09:36
 -----BEGIN CERTIFICATE-----
-MIIDLjCCApegAwIBAgIJAIgImLMT2ACXMA0GCSqGSIb3DQEBBQUAMFoxCzAJBgNV
-BAYTAlVTMQswCQYDVQQIEwJDQTEPMA0GA1UEChMGQXBhY2hlMRkwFwYDVQQLExBQ
-dWxzYXIgSW5jdWJhdG9yMRIwEAYDVQQDEwlsb2NhbGhvc3QwHhcNMTgwMjE3MDIw
-NjIxWhcNMzAxMTE2MDAwMDAwWjBXMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0Ex
-DzANBgNVBAoTBkFwYWNoZTEWMBQGA1UECxMNQXBhY2hlIFB1bHNhcjESMBAGA1UE
-AxMJbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7+3
-LZitnfbaoxPUYg+YvhyiiSK6b9X9H2fjkQOYgIEO7dj2cH8sNmg9U+pYOqbViWZL
-vR5XcRNtSxHlQKV2hCSSQFiAlskfLMRV66N5c3BcN5qJ7S+6a+OCfGlKAlSLgV48
-v0yKy+osXoPntxAIX4JYo4nR2pK6KijuMCg/W64QcZbH4RLFsBqtRG9EOhFKmjwP
-jQaAezTvP2z0XsVEVB7I3ceAhYDZaObGUwN34f4YYQd3BUztWbxdQThq712hsmCY
-1EgolQKKDv3PexvSEcwQDFBz18w4bIPdeSaqkMibhIa8WeliafSYG8SAeH6gGoGd
-0uFm3cTM/GMErOynNQIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQf
-Fh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQU0/MZrnSx
-r+evCHsWcngph3ntMIwwHwYDVR0jBBgwFoAU1HrND0QbFiklFO2i7xMPp0YJePYw
-DQYJKoZIhvcNAQEFBQADgYEADwTzkfKHGf6d+DRaJEoA0Vi/HrJ3Zwe8eLVLmkv9
-oeXcDgmEnlnE3c/3Lr/a8zE2a4Fuooh25C4LNkSCNo+Ak/Se/O2F0JfaD/vJuYva
-rgc9T4K3DCUiYxJrCunEEqRc7RESzP6wLtTB7HkBYOrMzOVmzFf2VakJTGMB6bQu
-c6U=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 -----END CERTIFICATE-----
diff --git a/pulsar-broker/src/test/resources/authentication/tls/cacert.pem 
b/pulsar-broker/src/test/resources/authentication/tls/cacert.pem
index 55e9067..a03f152 100644
--- a/pulsar-broker/src/test/resources/authentication/tls/cacert.pem
+++ b/pulsar-broker/src/test/resources/authentication/tls/cacert.pem
@@ -2,61 +2,76 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            88:08:98:b3:13:d8:00:94
-        Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C=US, ST=CA, O=Apache, OU=Pulsar Incubator, CN=localhost
+            32:df:3f:f3:a6:02:71:fe:15:ea:70:fb:07:06:1b:65:6e:71:55:b8
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN = CARoot
         Validity
-            Not Before: Feb 17 01:37:33 2018 GMT
-            Not After : Feb 16 01:37:33 2021 GMT
-        Subject: C=US, ST=CA, O=Apache, OU=Pulsar Incubator, CN=localhost
+            Not Before: May 14 09:17:36 2021 GMT
+            Not After : May 12 09:17:36 2031 GMT
+        Subject: CN = CARoot
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (1024 bit)
-                Modulus (1024 bit):
-                    00:ea:16:8d:a5:b1:19:61:34:54:07:02:60:4e:6d:
-                    54:92:08:fd:fb:23:79:9c:05:bf:14:f7:bc:aa:db:
-                    2b:42:a4:35:74:86:e3:00:ad:8b:18:79:73:7d:f2:
-                    d1:74:dd:74:bc:b8:a2:4c:80:c9:f3:80:ce:bf:f8:
-                    6d:97:f5:05:4f:f4:b2:99:50:e8:d8:b0:c4:57:a0:
-                    e7:dc:82:57:75:2a:a2:02:21:76:f7:37:c2:dc:7c:
-                    4c:36:a6:73:6f:dc:75:48:72:ad:fa:98:02:70:b2:
-                    5e:a2:83:cc:c3:8d:20:a7:1e:bc:d7:1e:c1:d1:7e:
-                    39:35:4b:f5:be:6b:c1:0f:f9
+                RSA Public-Key: (2048 bit)
+                Modulus:
+                    00:ca:76:51:b8:8e:4f:45:5f:cf:1c:da:d6:4f:7f:
+                    f0:6f:69:b1:bf:ff:93:a7:1d:57:6d:8f:4a:bc:76:
+                    e3:1c:1d:fd:7f:d3:19:26:ca:6d:6c:a7:d9:02:82:
+                    b1:e5:ad:02:e5:31:6c:f3:3b:86:fb:d2:0d:cd:b5:
+                    9c:dc:9e:a3:ec:99:e6:6a:71:38:cb:87:a7:5a:77:
+                    cf:b3:17:77:a3:e0:8a:6e:77:e8:1f:6c:8c:e4:5a:
+                    90:35:17:d4:91:c6:e7:9d:e4:e4:b3:cd:83:e2:0f:
+                    82:8b:1c:60:40:0d:15:fa:ed:47:92:ef:30:b3:67:
+                    0d:16:a7:a1:9f:93:7d:a7:18:03:de:27:1d:ba:e0:
+                    e8:74:4b:1e:e1:30:25:02:e4:aa:86:4e:57:73:a9:
+                    4c:ec:6e:89:ef:4c:b6:2f:19:20:aa:8d:2a:bc:77:
+                    25:ec:81:da:16:37:32:2a:16:62:52:18:c4:66:3b:
+                    25:2a:61:cb:c5:d0:35:d5:12:aa:33:b5:ae:95:9d:
+                    01:d4:53:8e:a0:73:86:e5:6b:20:45:5c:58:5a:80:
+                    cb:34:66:e5:1d:e8:bd:75:c6:23:09:bd:f9:c6:59:
+                    a2:6a:0d:73:19:76:8f:ce:0f:04:dd:90:73:48:2e:
+                    cc:7b:28:28:5c:bd:2d:97:97:50:f8:10:0a:c4:4b:
+                    5a:49
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                D4:7A:CD:0F:44:1B:16:29:25:14:ED:A2:EF:13:0F:A7:46:09:78:F6
+                AE:38:E0:BE:6E:FF:01:DA:E7:E1:13:0A:76:3F:3A:CF:E8:F1:BE:6A
             X509v3 Authority Key Identifier: 
-                
keyid:D4:7A:CD:0F:44:1B:16:29:25:14:ED:A2:EF:13:0F:A7:46:09:78:F6
-                DirName:/C=US/ST=CA/O=Apache/OU=Pulsar Incubator/CN=localhost
-                serial:88:08:98:B3:13:D8:00:94
+                
keyid:AE:38:E0:BE:6E:FF:01:DA:E7:E1:13:0A:76:3F:3A:CF:E8:F1:BE:6A
 
-            X509v3 Basic Constraints: 
+            X509v3 Basic Constraints: critical
                 CA:TRUE
-    Signature Algorithm: sha1WithRSAEncryption
-        5e:30:c5:7b:30:3e:1e:16:cd:ba:66:f1:2a:19:13:8a:1a:00:
-        08:f4:1e:8c:e4:3d:57:13:65:96:bf:07:58:55:52:37:3e:aa:
-        2c:19:de:ee:c3:92:6e:79:f3:06:0e:9a:7b:e0:02:50:c3:ef:
-        3b:84:ea:8f:e0:f0:16:a6:a6:67:8b:be:73:0e:5d:f7:88:39:
-        d3:d4:df:85:ad:7c:c1:4f:fa:55:55:6f:c2:48:4e:8e:82:fa:
-        72:3b:8e:9d:dc:f7:2e:9d:47:8e:e5:c9:a2:ee:b1:76:94:15:
-        7c:7a:62:bc:06:45:fa:61:2e:33:8c:18:3e:e9:d5:90:a5:a6:
-        80:5a
+    Signature Algorithm: sha256WithRSAEncryption
+         65:f0:ae:7a:bf:7a:47:44:2b:75:fb:80:5b:86:21:25:7a:26:
+         7f:6f:01:b6:fa:4f:25:93:17:7f:21:fd:63:8f:1b:c6:cb:2e:
+         24:08:88:7e:70:99:ce:e9:e7:5c:00:ce:5b:31:18:ea:8c:a8:
+         4e:5e:27:5f:20:8c:e9:ed:35:17:67:ae:99:23:47:74:ad:a3:
+         c0:a2:d1:cd:3e:c1:6d:1d:a8:8f:c8:c1:04:6d:3f:de:65:23:
+         dc:bd:55:e5:6b:79:d0:c2:a0:c3:23:3d:8f:95:7f:d9:44:4d:
+         a9:74:9e:ae:90:6c:d4:36:54:17:21:bf:a5:42:42:a6:63:f6:
+         9a:5e:b5:34:ce:dd:b9:da:3a:12:f9:88:a0:e2:b2:44:da:32:
+         85:cc:c0:26:0a:52:91:e5:88:93:c3:35:83:b4:19:38:35:71:
+         2b:c4:ca:5c:76:ee:30:45:25:ba:48:98:e2:95:a6:e9:85:a7:
+         d5:ea:0e:4f:46:1b:a3:8e:a2:9e:c7:c2:28:12:34:52:02:2b:
+         76:cf:fc:bf:16:aa:13:15:a7:dd:e8:3a:bc:0b:7e:4b:e8:f1:
+         77:69:38:bd:e0:b7:8b:19:d4:13:b4:8a:2a:7d:cb:52:27:a3:
+         b4:07:90:d4:cf:38:c7:cb:1b:95:a5:38:77:19:73:d9:c6:54:
+         a1:58:c8:40
 -----BEGIN CERTIFICATE-----
-MIIC8jCCAlugAwIBAgIJAIgImLMT2ACUMA0GCSqGSIb3DQEBBQUAMFoxCzAJBgNV
-BAYTAlVTMQswCQYDVQQIEwJDQTEPMA0GA1UEChMGQXBhY2hlMRkwFwYDVQQLExBQ
-dWxzYXIgSW5jdWJhdG9yMRIwEAYDVQQDEwlsb2NhbGhvc3QwHhcNMTgwMjE3MDEz
-NzMzWhcNMjEwMjE2MDEzNzMzWjBaMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0Ex
-DzANBgNVBAoTBkFwYWNoZTEZMBcGA1UECxMQUHVsc2FyIEluY3ViYXRvcjESMBAG
-A1UEAxMJbG9jYWxob3N0MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqFo2l
-sRlhNFQHAmBObVSSCP37I3mcBb8U97yq2ytCpDV0huMArYsYeXN98tF03XS8uKJM
-gMnzgM6/+G2X9QVP9LKZUOjYsMRXoOfcgld1KqICIXb3N8LcfEw2pnNv3HVIcq36
-mAJwsl6ig8zDjSCnHrzXHsHRfjk1S/W+a8EP+QIDAQABo4G/MIG8MB0GA1UdDgQW
-BBTUes0PRBsWKSUU7aLvEw+nRgl49jCBjAYDVR0jBIGEMIGBgBTUes0PRBsWKSUU
-7aLvEw+nRgl49qFepFwwWjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMQ8wDQYD
-VQQKEwZBcGFjaGUxGTAXBgNVBAsTEFB1bHNhciBJbmN1YmF0b3IxEjAQBgNVBAMT
-CWxvY2FsaG9zdIIJAIgImLMT2ACUMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEF
-BQADgYEAXjDFezA+HhbNumbxKhkTihoACPQejOQ9VxNllr8HWFVSNz6qLBne7sOS
-bnnzBg6ae+ACUMPvO4Tqj+DwFqamZ4u+cw5d94g509Tfha18wU/6VVVvwkhOjoL6
-cjuOndz3Lp1HjuXJou6xdpQVfHpivAZF+mEuM4wYPunVkKWmgFo=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 -----END CERTIFICATE-----
diff --git 
a/pulsar-broker/src/test/resources/authentication/tls/client-cert.pem 
b/pulsar-broker/src/test/resources/authentication/tls/client-cert.pem
index 61847f2..463b3f8 100644
--- a/pulsar-broker/src/test/resources/authentication/tls/client-cert.pem
+++ b/pulsar-broker/src/test/resources/authentication/tls/client-cert.pem
@@ -1,18 +1,18 @@
 Certificate:
     Data:
-        Version: 3 (0x2)
+        Version: 1 (0x0)
         Serial Number:
-            88:08:98:b3:13:d8:00:99
-        Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C=US, ST=CA, O=Apache, OU=Pulsar Incubator, CN=localhost
+            03:c7:fe:e2:a7:5d:92:28:ef:5b:4f:41:1a:52:c9:12:32:75:29:a5
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN = CARoot
         Validity
-            Not Before: Feb 17 02:50:05 2018 GMT
-            Not After : Nov 16 00:00:00 2030 GMT
-        Subject: C=US, ST=CA, O=Apache, OU=Apache Pulsar, CN=superUser
+            Not Before: May 14 09:17:36 2021 GMT
+            Not After : May 12 09:17:36 2031 GMT
+        Subject: C = US, ST = CA, O = Apache, OU = Apache Pulsar, CN = 
superUser
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
+                RSA Public-Key: (2048 bit)
+                Modulus:
                     00:cd:43:7d:98:40:f9:b0:5b:bc:ae:db:c0:0b:ad:
                     26:90:96:e0:62:38:ed:68:b1:70:46:3b:de:44:f9:
                     14:51:86:10:eb:ca:90:e7:88:e8:f9:91:85:e0:dd:
@@ -32,42 +32,37 @@ Certificate:
                     b6:98:ef:dd:03:82:58:a3:32:dc:90:a1:b6:a6:1e:
                     e1:0b
                 Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: 
-                CA:FALSE
-            Netscape Comment: 
-                OpenSSL Generated Certificate
-            X509v3 Subject Key Identifier: 
-                53:7C:D5:D1:52:97:9A:D6:D5:EA:EC:B6:0C:9B:43:39:19:73:F6:2C
-            X509v3 Authority Key Identifier: 
-                
keyid:D4:7A:CD:0F:44:1B:16:29:25:14:ED:A2:EF:13:0F:A7:46:09:78:F6
-
-    Signature Algorithm: sha1WithRSAEncryption
-        e4:03:82:ff:be:df:7c:73:2a:c5:8f:7d:87:ab:95:b1:2b:e5:
-        f7:41:22:4f:28:54:84:7a:cc:fe:70:89:0f:48:e5:8a:17:e1:
-        44:ad:12:e9:a1:3a:c7:84:55:f0:7c:29:52:0a:a1:ab:cc:5b:
-        31:e5:b2:37:73:3a:8d:f2:f1:fb:e8:f6:a2:b9:ef:11:10:f8:
-        31:43:8f:af:ce:09:f4:cb:96:0e:d4:58:42:6e:86:ab:b9:03:
-        19:8b:4a:6e:ef:50:c0:7e:c9:0b:1d:2b:42:bf:eb:d0:06:05:
-        84:ea:5a:8a:22:5c:56:fa:da:2a:9f:8a:b2:90:66:8c:5e:01:
-        87:45
+    Signature Algorithm: sha256WithRSAEncryption
+         00:cf:82:26:02:a0:b5:d9:fc:e7:5b:c9:40:c8:04:13:2a:1a:
+         59:e6:1e:bf:cf:42:4c:3f:19:f5:55:59:74:dc:45:59:a8:48:
+         57:bc:4d:f7:ed:b6:38:5c:93:d5:17:e1:53:cd:e0:4d:77:8a:
+         8d:3a:8a:88:3f:c9:38:24:25:36:b9:76:0f:c6:94:80:eb:bc:
+         cc:a7:c0:4a:eb:17:54:ab:56:a8:11:53:1e:66:82:9d:a4:9a:
+         15:55:22:d1:25:fb:37:d8:29:c6:8c:3a:85:af:c7:2a:ca:fc:
+         9c:55:b8:38:90:cf:5c:7f:e4:c1:a8:a3:45:49:6d:12:a3:d7:
+         83:e9:a5:07:f0:4c:d7:54:47:5c:32:5c:b2:0a:b8:a1:0d:69:
+         b5:5f:3c:d7:b0:62:0e:f1:d6:0b:c7:85:b2:41:15:56:18:6b:
+         5c:4c:40:6d:29:8b:be:fe:cb:a7:44:18:57:87:a6:75:82:ed:
+         70:af:8d:b4:f3:5f:48:39:e9:0b:3f:d8:73:7e:8d:3b:1f:84:
+         9f:b0:19:1a:21:54:91:f3:a8:c7:a8:18:6b:fa:a9:65:ee:d4:
+         dd:74:82:b3:71:45:5b:28:32:54:69:ab:f1:c5:33:ad:23:f2:
+         d8:47:b3:98:9a:1c:a6:0e:44:ab:36:ad:46:8a:f3:70:bd:8c:
+         b1:21:c3:41
 -----BEGIN CERTIFICATE-----
-MIIDLjCCApegAwIBAgIJAIgImLMT2ACZMA0GCSqGSIb3DQEBBQUAMFoxCzAJBgNV
-BAYTAlVTMQswCQYDVQQIEwJDQTEPMA0GA1UEChMGQXBhY2hlMRkwFwYDVQQLExBQ
-dWxzYXIgSW5jdWJhdG9yMRIwEAYDVQQDEwlsb2NhbGhvc3QwHhcNMTgwMjE3MDI1
-MDA1WhcNMzAxMTE2MDAwMDAwWjBXMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0Ex
-DzANBgNVBAoTBkFwYWNoZTEWMBQGA1UECxMNQXBhY2hlIFB1bHNhcjESMBAGA1UE
-AxMJc3VwZXJVc2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUN9
-mED5sFu8rtvAC60mkJbgYjjtaLFwRjveRPkUUYYQ68qQ54jo+ZGF4N21tBS5eOOG
-1VRtaOwUkrT4IlsFPe0xJWUIBYTK5gwhElgyxxpgo0/SSp4oGXxFhACMidzeiuVP
-iJHMpPGBRUx9wv/iwYnGEnOV4ja9266LWmhqkFHeK4hfqmf0qONj3L4Zgsydf+aN
-+4K+IgE9VhM7WwS06MUY5i4N+rpKjejGWqFRmkpi16/dtPzi1c2umWxcYVYL1wwa
-d1z1OmpUtZ4zrKl1KJp2r9B6VwAbkRMx/UKIIUcFEAEvWbvHOtnhWEwbbHG2mO/d
-A4JYozLckKG2ph7hCwIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQf
-Fh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUU3zV0VKX
-mtbV6uy2DJtDORlz9iwwHwYDVR0jBBgwFoAU1HrND0QbFiklFO2i7xMPp0YJePYw
-DQYJKoZIhvcNAQEFBQADgYEA5AOC/77ffHMqxY99h6uVsSvl90EiTyhUhHrM/nCJ
-D0jlihfhRK0S6aE6x4RV8HwpUgqhq8xbMeWyN3M6jfLx++j2ornvERD4MUOPr84J
-9MuWDtRYQm6Gq7kDGYtKbu9QwH7JCx0rQr/r0AYFhOpaiiJcVvraKp+KspBmjF4B
-h0U=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 -----END CERTIFICATE-----

Reply via email to