diff --git a/content/en/certificates.md b/content/en/certificates.md index 046f63f7d..347a2b714 100644 --- a/content/en/certificates.md +++ b/content/en/certificates.md @@ -2,7 +2,7 @@ title: Chains of Trust linkTitle: Chains of Trust (Root and Intermediate Certificates) slug: certificates -lastmod: 2026-03-27 +lastmod: 2026-05-15 show_lastmod: 1 --- @@ -31,8 +31,7 @@ Note that Root CAs don't have expiration dates in quite the same way that other * Trusted until: 2035-09-04 (generated 2020-09-04) * CA details: [crt.sh](https://crt.sh/?caid=183269), [issued certs](https://crt.sh/?Identity=%25&iCAID=183269) * Certificate details (self-signed): [crt.sh](https://crt.sh/?id=3335562555), [der](/certs/isrg-root-x2.der), [pem](/certs/isrg-root-x2.pem), [txt](/certs/isrg-root-x2.txt) - * Certificate details (cross-signed by ISRG Root X1): [crt.sh](https://crt.sh/?id=3334561878), [der](/certs/isrg-root-x2-cross-signed.der), [pem](/certs/isrg-root-x2-cross-signed.pem), [txt](/certs/isrg-root-x2-cross-signed.txt) - * Certificate details (second cross-sign by ISRG Root X1): [crt.sh](https://crt.sh/?id=20878422868), [der](/certs/gen-y/root-x2-by-x1.der), [pem](/certs/gen-y/root-x2-by-x1.pem), [txt](/certs/gen-y/root-x2-by-x1.txt) + * Certificate details (cross-sign by ISRG Root X1): [der](/certs/gen-y/root-x2-by-x1.der), [pem](/certs/gen-y/root-x2-by-x1.pem), [txt](/certs/gen-y/root-x2-by-x1.txt) * CRL hostname: `x2.c.lencr.org` * Test websites: [valid](https://valid.x2.test-certs.letsencrypt.org/), [revoked](https://revoked.x2.test-certs.letsencrypt.org/), [expired](https://expired.x2.test-certs.letsencrypt.org/) diff --git a/static/certs/gen-y/root-x2-by-x1.der b/static/certs/gen-y/root-x2-by-x1.der index 1d93ea95b..6e0688042 100644 Binary files a/static/certs/gen-y/root-x2-by-x1.der and b/static/certs/gen-y/root-x2-by-x1.der differ diff --git a/static/certs/gen-y/root-x2-by-x1.pem b/static/certs/gen-y/root-x2-by-x1.pem index c4092cafb..711e302be 100644 --- a/static/certs/gen-y/root-x2-by-x1.pem +++ b/static/certs/gen-y/root-x2-by-x1.pem @@ -1,26 +1,26 @@ -----BEGIN CERTIFICATE----- -MIIEUTCCAjmgAwIBAgIQfyq3B7W92Tyf1It8YCnbMzANBgkqhkiG9w0BAQsFADBP +MIIEcDCCAligAwIBAgIQbI8dxyfHEX97r4U6yYD5zTANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFy -Y2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMTAeFw0yNTA5MDMwMDAwMDBa +Y2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMTAeFw0yNjA1MTMwMDAwMDBa Fw0zMjA5MDIyMzU5NTlaME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5l dCBTZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgy MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0H ttwW+1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7 -AlF9ItgKbppbd9/w+kHsOdx1ymgHDB/qo4HWMIHTMA4GA1UdDwEB/wQEAwIBBjAP -BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8Qpau3ktIO/qS+J6Mz22LqXI3lTAf -BgNVHSMEGDAWgBR5tFnme7bl5AFzgAiIyBpY9umbbjAyBggrBgEFBQcBAQQmMCQw -IgYIKwYBBQUHMAKGFmh0dHA6Ly94MS5pLmxlbmNyLm9yZy8wEwYDVR0gBAwwCjAI -BgZngQwBAgEwJwYDVR0fBCAwHjAcoBqgGIYWaHR0cDovL3gxLmMubGVuY3Iub3Jn -LzANBgkqhkiG9w0BAQsFAAOCAgEABM/grwj+5UXC3ZsXNh34qWole7iF6bZGIYgx -+2X+/SMafX2KABSvN5qV2rnaIMibfwg3lw8ACwc3hkV6ijxOParcvIQb/R4Fd2tB -/6U67M+jEDaU8XBzA0GIY2VyA0gQIvckMU8nAoiub7aUicvYOkxl3QL2773OqSA2 -iD9Ey9IiWp2yqUd3ajb6SLx1DNlfgDOSjZh5gbvyiqpFB6KOFc2+OAEwX1COlhMB -Uw0HOybjBvp4LSzJrmyOKgUTTfh57TG6fqpLOJcmtM8kAMnN2MsMgNj1S/Je2Wxi -9tnZnhoxj23MBaJxcpOdliaDUQR+OkmisyYCKrczGo2qpinsNtkEK3Q59b7sgImE -MvP9NMptAt2A8ovq6kfuiZxL8wXJwtTptXm7Bt69zTcSnE9CJIf5SeaSWWD0nf1v -/2JZf8rX6vnSmcO2Rg44OGSXQGNOwgw2/DjOR6TyAE2OqdZr8EfYznzYmfXQsvLC -ocVslA4tXs/wPbRRpbKxu+azzxt9kEWIYQeHMJVVNgLXc8zHIxzaU4d5kuaNun8B -prRRTs6BopkOQN4dCvFfg+qx6hXt5iemw+rKAWgStCaLoLxErwRjMbvgTeJ5qanN -K4d+03nI08rtOXx4e8M3MgkrcMOGWzScJLycOJUAlXTYqSV4dUuZ0qzez774rqcx -KC6Lmtk= +AlF9ItgKbppbd9/w+kHsOdx1ymgHDB/qo4H1MIHyMA4GA1UdDwEB/wQEAwIBBjAd +BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDwYDVR0TAQH/BAUwAwEB/zAd +BgNVHQ4EFgQUfEKWrt5LSDv6kviejM9ti6lyN5UwHwYDVR0jBBgwFoAUebRZ5nu2 +5eQBc4AIiMgaWPbpm24wMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAChhZodHRw +Oi8veDEuaS5sZW5jci5vcmcvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMCcGA1UdHwQg +MB4wHKAaoBiGFmh0dHA6Ly94MS5jLmxlbmNyLm9yZy8wDQYJKoZIhvcNAQELBQAD +ggIBAD2/e9frmMxNpCV03qUHegg+MV2wz9644YoXdqtH8RyWYcBO7xfjjGEXdU1e +/o0OkEFiynUCOSIk/vLLo7ttz6CPAeNlWfC0XNkoGeWgK6jjXvozBaGuGH5n0Ufo +shMeWTuURqNN5G00sSXDTBrpp2+mgvdZQjb8K11TYMA25QA+YHNfbIEL0BniAhKS +2gsnJjSzrdZLI+EZ7SEyqdR2rkjd1KutLDU+n3TFyxjniZVGur4YlhMP3mY/dV95 +IruAkkjOZier6hGBdEgZXXvaCz9u9iVEadsIE75pAGL8oHV5vxdARDiotRpul1IN +/UZwzAbrfUFcw1HkAcYD/mlZfnQ2ieCF2MS7j3Vhv7JPDKp45fmykmzYNSrumRW0 +upFFKDBOoF7hsOb7oLyHS+Uft6jOUfOrogj8YUx38hKb2K20r42OgsSdDdxdeYWc +MS3Sb6mwJeSZEYxJ2gaXnDSPaKhhrNkYwljyVQyr4Nq+MEJytXNTnHqaAcrNwZlV +pcJL1KBnMrMjP7eanvUwL3FYj3cF17jtboLt7gLoi4+2rWZFvn+w54jmd/FIuhhZ +cEaU/wvU6BUNMtcVquVGHp7itQeDth5j+XL3j4WJ2SABwzUl6OeYdgpIt/ITZa+p +TT0mQ/r5XyA4MEAiabn7XJjvCERlF2dcn2wqJw+CreTkkQ2R -----END CERTIFICATE----- diff --git a/static/certs/gen-y/root-x2-by-x1.txt b/static/certs/gen-y/root-x2-by-x1.txt index d27b834ba..5fa0e768b 100644 --- a/static/certs/gen-y/root-x2-by-x1.txt +++ b/static/certs/gen-y/root-x2-by-x1.txt @@ -2,11 +2,11 @@ Certificate: Data: Version: 3 (0x2) Serial Number: - 7f:2a:b7:07:b5:bd:d9:3c:9f:d4:8b:7c:60:29:db:33 + 6c:8f:1d:c7:27:c7:11:7f:7b:af:85:3a:c9:80:f9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Internet Security Research Group, CN=ISRG Root X1 Validity - Not Before: Sep 3 00:00:00 2025 GMT + Not Before: May 13 00:00:00 2026 GMT Not After : Sep 2 23:59:59 2032 GMT Subject: C=US, O=Internet Security Research Group, CN=ISRG Root X2 Subject Public Key Info: @@ -25,6 +25,8 @@ Certificate: X509v3 extensions: X509v3 Key Usage: critical Certificate Sign, CRL Sign + X509v3 Extended Key Usage: + TLS Web Server Authentication, TLS Web Client Authentication X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: @@ -41,32 +43,32 @@ Certificate: Signature Algorithm: sha256WithRSAEncryption Signature Value: - 04:cf:e0:af:08:fe:e5:45:c2:dd:9b:17:36:1d:f8:a9:6a:25: - 7b:b8:85:e9:b6:46:21:88:31:fb:65:fe:fd:23:1a:7d:7d:8a: - 00:14:af:37:9a:95:da:b9:da:20:c8:9b:7f:08:37:97:0f:00: - 0b:07:37:86:45:7a:8a:3c:4e:3d:aa:dc:bc:84:1b:fd:1e:05: - 77:6b:41:ff:a5:3a:ec:cf:a3:10:36:94:f1:70:73:03:41:88: - 63:65:72:03:48:10:22:f7:24:31:4f:27:02:88:ae:6f:b6:94: - 89:cb:d8:3a:4c:65:dd:02:f6:ef:bd:ce:a9:20:36:88:3f:44: - cb:d2:22:5a:9d:b2:a9:47:77:6a:36:fa:48:bc:75:0c:d9:5f: - 80:33:92:8d:98:79:81:bb:f2:8a:aa:45:07:a2:8e:15:cd:be: - 38:01:30:5f:50:8e:96:13:01:53:0d:07:3b:26:e3:06:fa:78: - 2d:2c:c9:ae:6c:8e:2a:05:13:4d:f8:79:ed:31:ba:7e:aa:4b: - 38:97:26:b4:cf:24:00:c9:cd:d8:cb:0c:80:d8:f5:4b:f2:5e: - d9:6c:62:f6:d9:d9:9e:1a:31:8f:6d:cc:05:a2:71:72:93:9d: - 96:26:83:51:04:7e:3a:49:a2:b3:26:02:2a:b7:33:1a:8d:aa: - a6:29:ec:36:d9:04:2b:74:39:f5:be:ec:80:89:84:32:f3:fd: - 34:ca:6d:02:dd:80:f2:8b:ea:ea:47:ee:89:9c:4b:f3:05:c9: - c2:d4:e9:b5:79:bb:06:de:bd:cd:37:12:9c:4f:42:24:87:f9: - 49:e6:92:59:60:f4:9d:fd:6f:ff:62:59:7f:ca:d7:ea:f9:d2: - 99:c3:b6:46:0e:38:38:64:97:40:63:4e:c2:0c:36:fc:38:ce: - 47:a4:f2:00:4d:8e:a9:d6:6b:f0:47:d8:ce:7c:d8:99:f5:d0: - b2:f2:c2:a1:c5:6c:94:0e:2d:5e:cf:f0:3d:b4:51:a5:b2:b1: - bb:e6:b3:cf:1b:7d:90:45:88:61:07:87:30:95:55:36:02:d7: - 73:cc:c7:23:1c:da:53:87:79:92:e6:8d:ba:7f:01:a6:b4:51: - 4e:ce:81:a2:99:0e:40:de:1d:0a:f1:5f:83:ea:b1:ea:15:ed: - e6:27:a6:c3:ea:ca:01:68:12:b4:26:8b:a0:bc:44:af:04:63: - 31:bb:e0:4d:e2:79:a9:a9:cd:2b:87:7e:d3:79:c8:d3:ca:ed: - 39:7c:78:7b:c3:37:32:09:2b:70:c3:86:5b:34:9c:24:bc:9c: - 38:95:00:95:74:d8:a9:25:78:75:4b:99:d2:ac:de:cf:be:f8: - ae:a7:31:28:2e:8b:9a:d9 + 3d:bf:7b:d7:eb:98:cc:4d:a4:25:74:de:a5:07:7a:08:3e:31: + 5d:b0:cf:de:b8:e1:8a:17:76:ab:47:f1:1c:96:61:c0:4e:ef: + 17:e3:8c:61:17:75:4d:5e:fe:8d:0e:90:41:62:ca:75:02:39: + 22:24:fe:f2:cb:a3:bb:6d:cf:a0:8f:01:e3:65:59:f0:b4:5c: + d9:28:19:e5:a0:2b:a8:e3:5e:fa:33:05:a1:ae:18:7e:67:d1: + 47:e8:b2:13:1e:59:3b:94:46:a3:4d:e4:6d:34:b1:25:c3:4c: + 1a:e9:a7:6f:a6:82:f7:59:42:36:fc:2b:5d:53:60:c0:36:e5: + 00:3e:60:73:5f:6c:81:0b:d0:19:e2:02:12:92:da:0b:27:26: + 34:b3:ad:d6:4b:23:e1:19:ed:21:32:a9:d4:76:ae:48:dd:d4: + ab:ad:2c:35:3e:9f:74:c5:cb:18:e7:89:95:46:ba:be:18:96: + 13:0f:de:66:3f:75:5f:79:22:bb:80:92:48:ce:66:27:ab:ea: + 11:81:74:48:19:5d:7b:da:0b:3f:6e:f6:25:44:69:db:08:13: + be:69:00:62:fc:a0:75:79:bf:17:40:44:38:a8:b5:1a:6e:97: + 52:0d:fd:46:70:cc:06:eb:7d:41:5c:c3:51:e4:01:c6:03:fe: + 69:59:7e:74:36:89:e0:85:d8:c4:bb:8f:75:61:bf:b2:4f:0c: + aa:78:e5:f9:b2:92:6c:d8:35:2a:ee:99:15:b4:ba:91:45:28: + 30:4e:a0:5e:e1:b0:e6:fb:a0:bc:87:4b:e5:1f:b7:a8:ce:51: + f3:ab:a2:08:fc:61:4c:77:f2:12:9b:d8:ad:b4:af:8d:8e:82: + c4:9d:0d:dc:5d:79:85:9c:31:2d:d2:6f:a9:b0:25:e4:99:11: + 8c:49:da:06:97:9c:34:8f:68:a8:61:ac:d9:18:c2:58:f2:55: + 0c:ab:e0:da:be:30:42:72:b5:73:53:9c:7a:9a:01:ca:cd:c1: + 99:55:a5:c2:4b:d4:a0:67:32:b3:23:3f:b7:9a:9e:f5:30:2f: + 71:58:8f:77:05:d7:b8:ed:6e:82:ed:ee:02:e8:8b:8f:b6:ad: + 66:45:be:7f:b0:e7:88:e6:77:f1:48:ba:18:59:70:46:94:ff: + 0b:d4:e8:15:0d:32:d7:15:aa:e5:46:1e:9e:e2:b5:07:83:b6: + 1e:63:f9:72:f7:8f:85:89:d9:20:01:c3:35:25:e8:e7:98:76: + 0a:48:b7:f2:13:65:af:a9:4d:3d:26:43:fa:f9:5f:20:38:30: + 40:22:69:b9:fb:5c:98:ef:08:44:65:17:67:5c:9f:6c:2a:27: + 0f:82:ad:e4:e4:91:0d:91 diff --git a/static/certs/gen-y/root-ye-by-x2.der b/static/certs/gen-y/root-ye-by-x2.der index aa8e21f00..7354d4281 100644 Binary files a/static/certs/gen-y/root-ye-by-x2.der and b/static/certs/gen-y/root-ye-by-x2.der differ diff --git a/static/certs/gen-y/root-ye-by-x2.pem b/static/certs/gen-y/root-ye-by-x2.pem index fca19b48c..f3cf21958 100644 --- a/static/certs/gen-y/root-ye-by-x2.pem +++ b/static/certs/gen-y/root-ye-by-x2.pem @@ -1,16 +1,17 @@ -----BEGIN CERTIFICATE----- -MIICkDCCAhWgAwIBAgIQb15g5pw6dGmQZhnVbk9JmjAKBggqhkjOPQQDAzBPMQsw -CQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2gg -R3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMjAeFw0yNTA5MDMwMDAwMDBaFw0z -MjA5MDIyMzU5NTlaMC4xCzAJBgNVBAYTAlVTMQ0wCwYDVQQKEwRJU1JHMRAwDgYD -VQQDEwdSb290IFlFMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEPBL/q+GtxWpxsGj7 -CB0jd/Cf3HsM0kk5j+VM62LS+TC5E3ztGESFMfXsTtfIWNaw9iEg+3/DM6rFN3Zv -7hkk3L0gPThjLAX1TnNqwNXIZI0StU23Py5IaHmLNbzuPvsZo4HWMIHTMA4GA1Ud -DwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSjyCZajqFM0DVj -/JsjyDquVvNPVjAfBgNVHSMEGDAWgBR8Qpau3ktIO/qS+J6Mz22LqXI3lTAyBggr -BgEFBQcBAQQmMCQwIgYIKwYBBQUHMAKGFmh0dHA6Ly94Mi5pLmxlbmNyLm9yZy8w -EwYDVR0gBAwwCjAIBgZngQwBAgEwJwYDVR0fBCAwHjAcoBqgGIYWaHR0cDovL3gy -LmMubGVuY3Iub3JnLzAKBggqhkjOPQQDAwNpADBmAjEAtJNzUQ7gxxDju/hamZnO -I89wPz0uiJO/LWUtP8/rDYlMR2Ow5U1hp5wLS1D+gs9yAjEAuqoD9ExL50yg1Wz2 -HJfxqFCSyj39rUtm+bGw8GwaxAHVgdin+SAlO91BUhfFblsx +MIICpjCCAiugAwIBAgIRAIchZfw0tuX7qK3Vs3BftTowCgYIKoZIzj0EAwMwTzEL +MAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2VhcmNo +IEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDIwHhcNMjYwNTEzMDAwMDAwWhcN +MzIwOTAyMjM1OTU5WjAuMQswCQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQMA4G +A1UEAxMHUm9vdCBZRTB2MBAGByqGSM49AgEGBSuBBAAiA2IABDwS/6vhrcVqcbBo ++wgdI3fwn9x7DNJJOY/lTOti0vkwuRN87RhEhTH17E7XyFjWsPYhIPt/wzOqxTd2 +b+4ZJNy9ID04YywF9U5zasDVyGSNErVNtz8uSGh5izW87j77GaOB6zCB6DAOBgNV +HQ8BAf8EBAMCAQYwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDwYDVR0TAQH/BAUwAwEB +/zAdBgNVHQ4EFgQUo8gmWo6hTNA1Y/ybI8g6rlbzT1YwHwYDVR0jBBgwFoAUfEKW +rt5LSDv6kviejM9ti6lyN5UwMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAChhZo +dHRwOi8veDIuaS5sZW5jci5vcmcvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMCcGA1Ud +HwQgMB4wHKAaoBiGFmh0dHA6Ly94Mi5jLmxlbmNyLm9yZy8wCgYIKoZIzj0EAwMD +aQAwZgIxAMU19WCtmxVND8UHBZRoma49Z7jPs64Dma0eTu1OChVbB/2J7GV3nvYK +Ax54uk1G9QIxAO0miLVJu8PLNiXXXkiE/gsK3CTRTF/aeo4bMX42Zw40csRU6AC2 +6hSW1/IWaas6dg== -----END CERTIFICATE----- diff --git a/static/certs/gen-y/root-ye-by-x2.txt b/static/certs/gen-y/root-ye-by-x2.txt index ad40eaee7..8ac685ff1 100644 --- a/static/certs/gen-y/root-ye-by-x2.txt +++ b/static/certs/gen-y/root-ye-by-x2.txt @@ -2,11 +2,11 @@ Certificate: Data: Version: 3 (0x2) Serial Number: - 6f:5e:60:e6:9c:3a:74:69:90:66:19:d5:6e:4f:49:9a + 87:21:65:fc:34:b6:e5:fb:a8:ad:d5:b3:70:5f:b5:3a Signature Algorithm: ecdsa-with-SHA384 Issuer: C=US, O=Internet Security Research Group, CN=ISRG Root X2 Validity - Not Before: Sep 3 00:00:00 2025 GMT + Not Before: May 13 00:00:00 2026 GMT Not After : Sep 2 23:59:59 2032 GMT Subject: C=US, O=ISRG, CN=Root YE Subject Public Key Info: @@ -25,6 +25,8 @@ Certificate: X509v3 extensions: X509v3 Key Usage: critical Certificate Sign, CRL Sign + X509v3 Extended Key Usage: + TLS Web Server Authentication X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: @@ -41,9 +43,9 @@ Certificate: Signature Algorithm: ecdsa-with-SHA384 Signature Value: - 30:66:02:31:00:b4:93:73:51:0e:e0:c7:10:e3:bb:f8:5a:99: - 99:ce:23:cf:70:3f:3d:2e:88:93:bf:2d:65:2d:3f:cf:eb:0d: - 89:4c:47:63:b0:e5:4d:61:a7:9c:0b:4b:50:fe:82:cf:72:02: - 31:00:ba:aa:03:f4:4c:4b:e7:4c:a0:d5:6c:f6:1c:97:f1:a8: - 50:92:ca:3d:fd:ad:4b:66:f9:b1:b0:f0:6c:1a:c4:01:d5:81: - d8:a7:f9:20:25:3b:dd:41:52:17:c5:6e:5b:31 + 30:66:02:31:00:c5:35:f5:60:ad:9b:15:4d:0f:c5:07:05:94: + 68:99:ae:3d:67:b8:cf:b3:ae:03:99:ad:1e:4e:ed:4e:0a:15: + 5b:07:fd:89:ec:65:77:9e:f6:0a:03:1e:78:ba:4d:46:f5:02: + 31:00:ed:26:88:b5:49:bb:c3:cb:36:25:d7:5e:48:84:fe:0b: + 0a:dc:24:d1:4c:5f:da:7a:8e:1b:31:7e:36:67:0e:34:72:c4: + 54:e8:00:b6:ea:14:96:d7:f2:16:69:ab:3a:76 diff --git a/static/certs/gen-y/root-yr-by-x1.der b/static/certs/gen-y/root-yr-by-x1.der index 27565a1be..a88d36130 100644 Binary files a/static/certs/gen-y/root-yr-by-x1.der and b/static/certs/gen-y/root-yr-by-x1.der differ diff --git a/static/certs/gen-y/root-yr-by-x1.pem b/static/certs/gen-y/root-yr-by-x1.pem index a40b332e8..dd1437799 100644 --- a/static/certs/gen-y/root-yr-by-x1.pem +++ b/static/certs/gen-y/root-yr-by-x1.pem @@ -1,7 +1,7 @@ -----BEGIN CERTIFICATE----- -MIIF3zCCA8egAwIBAgIRAPqmJ13CWEMdl2bsMEXvJKwwDQYJKoZIhvcNAQELBQAw +MIIF9DCCA9ygAwIBAgIRAPJLbRf52a18scn+p4eCaZ8wDQYJKoZIhvcNAQELBQAw TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh -cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjUwOTAzMDAwMDAw +cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjYwNTEzMDAwMDAw WhcNMzIwOTAyMjM1OTU5WjAuMQswCQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQ MA4GA1UEAxMHUm9vdCBZUjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB ANvGJnN78CTJdWL3+eGfsLN5TrNBJs+VH9hRXqRbwxu9sGNiB0BD1fcOxbSUQCJI @@ -14,21 +14,21 @@ BjneXCjYQ8+3BCCjssbSNpZU3hTcBDdhfAlEDlYr6pEatnMdmDT5BqnKC92bd0Eh M1fbLHioLccLCuievT8ZkPhZrq7Mii7gNXAcUEAR8+lzYal+9zTg7C5DALyVOeG/ CqfRAMn1KSHCR0NSA6P8tn/mGRlnCct5rtVCLnVySVpU6H1qGg3DgTOuskf8eahT MiYbI5ezPJmO5ertalskQ1utp74+eDy92PI4ftHKTbq9IWhH4YZKh3WnJEIt+oQv -lYZbY8tpEroKrFB6PFGzrJIDRyts4HqvuH52RFj2zv/BAgMBAAGjgdYwgdMwDgYD -VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFN7nW2DQIm1A -KH0/DQH+pLVStFGUMB8GA1UdIwQYMBaAFHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIG -CCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAoYWaHR0cDovL3gxLmkubGVuY3Iub3Jn -LzATBgNVHSAEDDAKMAgGBmeBDAECATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8v -eDEuYy5sZW5jci5vcmcvMA0GCSqGSIb3DQEBCwUAA4ICAQADxFag4TBZat3WEijJ -Zx9Cf3DOmW9dmJy1yxwRLQLRWA0UO/r55ijR7rsGZ8lawi1lZfeSDtZ93Jn2H7mO -1vJeNoyzOxyaa5uFxvBiOrYfzq++06cpEVplwAf7iyepnXh/3hphsHVkbUF1E0VF -2qNU3rV2kWftE4+wNtw3MOgqPm6wF8oV3RdOFON7P/7g1JGtCe8xd+pGZ3d2s+lb -UuRW3xbac3LBDYQRamF5WOJY0iMRrN9F3A5Nks+iNt1X6r+m3p6CaUAPwvPEVhdb -zB1PxTwl4avmO2Zz3jVqkYXLEX+kvAZCvmedia90+7+DGvFDXbEH6M3Mu6H3suln -2ROyTTuKxGuTAaA4Oik4T054gIu24sHrGODq8jBmrWutKchNgaEg443KrPXjwe2w -BtH7gEYypt5YCMa0Cfk+iigVGD3zpUsbPIybnKTm1EnknY8taT8XL3nL1v6Drp9y -OBaycj9gNlb1QdpyC4EZsV95wZxs9xJbN0U8jXMlSwN9l3MB+HIbctyU5nKSwSBl -BbTp3kJyY2n/9ObNc6hpF9/bdmz2yPPXCQfXPDjnRocI5J8Y8GMkvH8l9O9A+b9S -4fpYDbPd0kmghSGt5NuMVZRIxG5WzVuEgJPhqZ6msoNI6Ir8JvvnhCrEIQ9QBJiK -pL4XOFXIcqLhYJd3hsc0Ek3sjg== +lYZbY8tpEroKrFB6PFGzrJIDRyts4HqvuH52RFj2zv/BAgMBAAGjgeswgegwDgYD +VR0PAQH/BAQDAgEGMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA8GA1UdEwEB/wQFMAMB +Af8wHQYDVR0OBBYEFN7nW2DQIm1AKH0/DQH+pLVStFGUMB8GA1UdIwQYMBaAFHm0 +WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAoYW +aHR0cDovL3gxLmkubGVuY3Iub3JnLzATBgNVHSAEDDAKMAgGBmeBDAECATAnBgNV +HR8EIDAeMBygGqAYhhZodHRwOi8veDEuYy5sZW5jci5vcmcvMA0GCSqGSIb3DQEB +CwUAA4ICAQA8spSI95KKfn2W6GMmDpHBJSPaLbsS3W93cijJCRCYAc1fsJgL1FIL +7C0C9ecPOdcwB2fi0Dk2p94j9iTJCxmt5CFSKLRWwnXT2MMSXexVxqoVB79BdWPx +VXETkVme/qYSAuKVHh5Ps+5BixgmwS1JkjSAc+MfrUbNssVEEnH0aEiAh+rotXAV +JSP/Ye7LJPEwD9DWG72vVWbhAcuOf5OLjz57Ctk7MgQHynZ7+PlHJtajroCaIbtC +r6tcZZaAwUQm+jQyeWdV+2hv9deOYFmKeQyjjcSrN5Nadrw+L9DZJLbA1HqeNvLh +BgqpP0fvJq2N6EtD574N6eMI7uMsJTnji2UDz9el5XLSv9fqJMuDQtYVb2oTNoKp +oUqhxPVC0aq4eG5MESaIdn8b5ZGSSeAJLMHXljEdlNza+ncfkviXk1POLnnFdvx8 +/gk6M374WbLWFXw8N141B/Rl/tINGfl1TxOIiqtiMYkL02RSGb1kq34BL9NPP27z +RGMuHGnzS3hFIrRTfKxrzUZ9RzQWzEG3K6fJ3r2nqSltkeytis9DIBoFY9VmVyjL +M71DMi+y1+TRSJVClEMwvA4yL++7q9XZx5r5wBRWB4kQTKH5qyoZnDw7iiuh1lID +yDFx8r7i9vIJU5HS3moZLkYWAOilMaV9N56A9Bgb6dNcHkvg3NoaYA== -----END CERTIFICATE----- diff --git a/static/certs/gen-y/root-yr-by-x1.txt b/static/certs/gen-y/root-yr-by-x1.txt index 2a658be8f..013c0c2a2 100644 --- a/static/certs/gen-y/root-yr-by-x1.txt +++ b/static/certs/gen-y/root-yr-by-x1.txt @@ -2,11 +2,11 @@ Certificate: Data: Version: 3 (0x2) Serial Number: - fa:a6:27:5d:c2:58:43:1d:97:66:ec:30:45:ef:24:ac + f2:4b:6d:17:f9:d9:ad:7c:b1:c9:fe:a7:87:82:69:9f Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Internet Security Research Group, CN=ISRG Root X1 Validity - Not Before: Sep 3 00:00:00 2025 GMT + Not Before: May 13 00:00:00 2026 GMT Not After : Sep 2 23:59:59 2032 GMT Subject: C=US, O=ISRG, CN=Root YR Subject Public Key Info: @@ -52,6 +52,8 @@ Certificate: X509v3 extensions: X509v3 Key Usage: critical Certificate Sign, CRL Sign + X509v3 Extended Key Usage: + TLS Web Server Authentication X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: @@ -68,32 +70,32 @@ Certificate: Signature Algorithm: sha256WithRSAEncryption Signature Value: - 03:c4:56:a0:e1:30:59:6a:dd:d6:12:28:c9:67:1f:42:7f:70: - ce:99:6f:5d:98:9c:b5:cb:1c:11:2d:02:d1:58:0d:14:3b:fa: - f9:e6:28:d1:ee:bb:06:67:c9:5a:c2:2d:65:65:f7:92:0e:d6: - 7d:dc:99:f6:1f:b9:8e:d6:f2:5e:36:8c:b3:3b:1c:9a:6b:9b: - 85:c6:f0:62:3a:b6:1f:ce:af:be:d3:a7:29:11:5a:65:c0:07: - fb:8b:27:a9:9d:78:7f:de:1a:61:b0:75:64:6d:41:75:13:45: - 45:da:a3:54:de:b5:76:91:67:ed:13:8f:b0:36:dc:37:30:e8: - 2a:3e:6e:b0:17:ca:15:dd:17:4e:14:e3:7b:3f:fe:e0:d4:91: - ad:09:ef:31:77:ea:46:67:77:76:b3:e9:5b:52:e4:56:df:16: - da:73:72:c1:0d:84:11:6a:61:79:58:e2:58:d2:23:11:ac:df: - 45:dc:0e:4d:92:cf:a2:36:dd:57:ea:bf:a6:de:9e:82:69:40: - 0f:c2:f3:c4:56:17:5b:cc:1d:4f:c5:3c:25:e1:ab:e6:3b:66: - 73:de:35:6a:91:85:cb:11:7f:a4:bc:06:42:be:67:9d:89:af: - 74:fb:bf:83:1a:f1:43:5d:b1:07:e8:cd:cc:bb:a1:f7:b2:e9: - 67:d9:13:b2:4d:3b:8a:c4:6b:93:01:a0:38:3a:29:38:4f:4e: - 78:80:8b:b6:e2:c1:eb:18:e0:ea:f2:30:66:ad:6b:ad:29:c8: - 4d:81:a1:20:e3:8d:ca:ac:f5:e3:c1:ed:b0:06:d1:fb:80:46: - 32:a6:de:58:08:c6:b4:09:f9:3e:8a:28:15:18:3d:f3:a5:4b: - 1b:3c:8c:9b:9c:a4:e6:d4:49:e4:9d:8f:2d:69:3f:17:2f:79: - cb:d6:fe:83:ae:9f:72:38:16:b2:72:3f:60:36:56:f5:41:da: - 72:0b:81:19:b1:5f:79:c1:9c:6c:f7:12:5b:37:45:3c:8d:73: - 25:4b:03:7d:97:73:01:f8:72:1b:72:dc:94:e6:72:92:c1:20: - 65:05:b4:e9:de:42:72:63:69:ff:f4:e6:cd:73:a8:69:17:df: - db:76:6c:f6:c8:f3:d7:09:07:d7:3c:38:e7:46:87:08:e4:9f: - 18:f0:63:24:bc:7f:25:f4:ef:40:f9:bf:52:e1:fa:58:0d:b3: - dd:d2:49:a0:85:21:ad:e4:db:8c:55:94:48:c4:6e:56:cd:5b: - 84:80:93:e1:a9:9e:a6:b2:83:48:e8:8a:fc:26:fb:e7:84:2a: - c4:21:0f:50:04:98:8a:a4:be:17:38:55:c8:72:a2:e1:60:97: - 77:86:c7:34:12:4d:ec:8e + 3c:b2:94:88:f7:92:8a:7e:7d:96:e8:63:26:0e:91:c1:25:23: + da:2d:bb:12:dd:6f:77:72:28:c9:09:10:98:01:cd:5f:b0:98: + 0b:d4:52:0b:ec:2d:02:f5:e7:0f:39:d7:30:07:67:e2:d0:39: + 36:a7:de:23:f6:24:c9:0b:19:ad:e4:21:52:28:b4:56:c2:75: + d3:d8:c3:12:5d:ec:55:c6:aa:15:07:bf:41:75:63:f1:55:71: + 13:91:59:9e:fe:a6:12:02:e2:95:1e:1e:4f:b3:ee:41:8b:18: + 26:c1:2d:49:92:34:80:73:e3:1f:ad:46:cd:b2:c5:44:12:71: + f4:68:48:80:87:ea:e8:b5:70:15:25:23:ff:61:ee:cb:24:f1: + 30:0f:d0:d6:1b:bd:af:55:66:e1:01:cb:8e:7f:93:8b:8f:3e: + 7b:0a:d9:3b:32:04:07:ca:76:7b:f8:f9:47:26:d6:a3:ae:80: + 9a:21:bb:42:af:ab:5c:65:96:80:c1:44:26:fa:34:32:79:67: + 55:fb:68:6f:f5:d7:8e:60:59:8a:79:0c:a3:8d:c4:ab:37:93: + 5a:76:bc:3e:2f:d0:d9:24:b6:c0:d4:7a:9e:36:f2:e1:06:0a: + a9:3f:47:ef:26:ad:8d:e8:4b:43:e7:be:0d:e9:e3:08:ee:e3: + 2c:25:39:e3:8b:65:03:cf:d7:a5:e5:72:d2:bf:d7:ea:24:cb: + 83:42:d6:15:6f:6a:13:36:82:a9:a1:4a:a1:c4:f5:42:d1:aa: + b8:78:6e:4c:11:26:88:76:7f:1b:e5:91:92:49:e0:09:2c:c1: + d7:96:31:1d:94:dc:da:fa:77:1f:92:f8:97:93:53:ce:2e:79: + c5:76:fc:7c:fe:09:3a:33:7e:f8:59:b2:d6:15:7c:3c:37:5e: + 35:07:f4:65:fe:d2:0d:19:f9:75:4f:13:88:8a:ab:62:31:89: + 0b:d3:64:52:19:bd:64:ab:7e:01:2f:d3:4f:3f:6e:f3:44:63: + 2e:1c:69:f3:4b:78:45:22:b4:53:7c:ac:6b:cd:46:7d:47:34: + 16:cc:41:b7:2b:a7:c9:de:bd:a7:a9:29:6d:91:ec:ad:8a:cf: + 43:20:1a:05:63:d5:66:57:28:cb:33:bd:43:32:2f:b2:d7:e4: + d1:48:95:42:94:43:30:bc:0e:32:2f:ef:bb:ab:d5:d9:c7:9a: + f9:c0:14:56:07:89:10:4c:a1:f9:ab:2a:19:9c:3c:3b:8a:2b: + a1:d6:52:03:c8:31:71:f2:be:e2:f6:f2:09:53:91:d2:de:6a: + 19:2e:46:16:00:e8:a5:31:a5:7d:37:9e:80:f4:18:1b:e9:d3: + 5c:1e:4b:e0:dc:da:1a:60 diff --git a/static/certs/revoked/root-x2-by-x1.pem b/static/certs/revoked/root-x2-by-x1.pem new file mode 100644 index 000000000..c4092cafb --- /dev/null +++ b/static/certs/revoked/root-x2-by-x1.pem @@ -0,0 +1,26 @@ +-----BEGIN CERTIFICATE----- +MIIEUTCCAjmgAwIBAgIQfyq3B7W92Tyf1It8YCnbMzANBgkqhkiG9w0BAQsFADBP +MQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFy +Y2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMTAeFw0yNTA5MDMwMDAwMDBa +Fw0zMjA5MDIyMzU5NTlaME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5l +dCBTZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgy +MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0H +ttwW+1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7 +AlF9ItgKbppbd9/w+kHsOdx1ymgHDB/qo4HWMIHTMA4GA1UdDwEB/wQEAwIBBjAP +BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8Qpau3ktIO/qS+J6Mz22LqXI3lTAf +BgNVHSMEGDAWgBR5tFnme7bl5AFzgAiIyBpY9umbbjAyBggrBgEFBQcBAQQmMCQw +IgYIKwYBBQUHMAKGFmh0dHA6Ly94MS5pLmxlbmNyLm9yZy8wEwYDVR0gBAwwCjAI +BgZngQwBAgEwJwYDVR0fBCAwHjAcoBqgGIYWaHR0cDovL3gxLmMubGVuY3Iub3Jn +LzANBgkqhkiG9w0BAQsFAAOCAgEABM/grwj+5UXC3ZsXNh34qWole7iF6bZGIYgx ++2X+/SMafX2KABSvN5qV2rnaIMibfwg3lw8ACwc3hkV6ijxOParcvIQb/R4Fd2tB +/6U67M+jEDaU8XBzA0GIY2VyA0gQIvckMU8nAoiub7aUicvYOkxl3QL2773OqSA2 +iD9Ey9IiWp2yqUd3ajb6SLx1DNlfgDOSjZh5gbvyiqpFB6KOFc2+OAEwX1COlhMB +Uw0HOybjBvp4LSzJrmyOKgUTTfh57TG6fqpLOJcmtM8kAMnN2MsMgNj1S/Je2Wxi +9tnZnhoxj23MBaJxcpOdliaDUQR+OkmisyYCKrczGo2qpinsNtkEK3Q59b7sgImE +MvP9NMptAt2A8ovq6kfuiZxL8wXJwtTptXm7Bt69zTcSnE9CJIf5SeaSWWD0nf1v +/2JZf8rX6vnSmcO2Rg44OGSXQGNOwgw2/DjOR6TyAE2OqdZr8EfYznzYmfXQsvLC +ocVslA4tXs/wPbRRpbKxu+azzxt9kEWIYQeHMJVVNgLXc8zHIxzaU4d5kuaNun8B +prRRTs6BopkOQN4dCvFfg+qx6hXt5iemw+rKAWgStCaLoLxErwRjMbvgTeJ5qanN +K4d+03nI08rtOXx4e8M3MgkrcMOGWzScJLycOJUAlXTYqSV4dUuZ0qzez774rqcx +KC6Lmtk= +-----END CERTIFICATE----- diff --git a/static/certs/revoked/root-ye-by-x2.pem b/static/certs/revoked/root-ye-by-x2.pem new file mode 100644 index 000000000..fca19b48c --- /dev/null +++ b/static/certs/revoked/root-ye-by-x2.pem @@ -0,0 +1,16 @@ +-----BEGIN CERTIFICATE----- +MIICkDCCAhWgAwIBAgIQb15g5pw6dGmQZhnVbk9JmjAKBggqhkjOPQQDAzBPMQsw +CQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2gg +R3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMjAeFw0yNTA5MDMwMDAwMDBaFw0z +MjA5MDIyMzU5NTlaMC4xCzAJBgNVBAYTAlVTMQ0wCwYDVQQKEwRJU1JHMRAwDgYD +VQQDEwdSb290IFlFMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEPBL/q+GtxWpxsGj7 +CB0jd/Cf3HsM0kk5j+VM62LS+TC5E3ztGESFMfXsTtfIWNaw9iEg+3/DM6rFN3Zv +7hkk3L0gPThjLAX1TnNqwNXIZI0StU23Py5IaHmLNbzuPvsZo4HWMIHTMA4GA1Ud +DwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSjyCZajqFM0DVj +/JsjyDquVvNPVjAfBgNVHSMEGDAWgBR8Qpau3ktIO/qS+J6Mz22LqXI3lTAyBggr +BgEFBQcBAQQmMCQwIgYIKwYBBQUHMAKGFmh0dHA6Ly94Mi5pLmxlbmNyLm9yZy8w +EwYDVR0gBAwwCjAIBgZngQwBAgEwJwYDVR0fBCAwHjAcoBqgGIYWaHR0cDovL3gy +LmMubGVuY3Iub3JnLzAKBggqhkjOPQQDAwNpADBmAjEAtJNzUQ7gxxDju/hamZnO +I89wPz0uiJO/LWUtP8/rDYlMR2Ow5U1hp5wLS1D+gs9yAjEAuqoD9ExL50yg1Wz2 +HJfxqFCSyj39rUtm+bGw8GwaxAHVgdin+SAlO91BUhfFblsx +-----END CERTIFICATE----- diff --git a/static/certs/revoked/root-yr-by-x1.pem b/static/certs/revoked/root-yr-by-x1.pem new file mode 100644 index 000000000..a40b332e8 --- /dev/null +++ b/static/certs/revoked/root-yr-by-x1.pem @@ -0,0 +1,34 @@ +-----BEGIN CERTIFICATE----- +MIIF3zCCA8egAwIBAgIRAPqmJ13CWEMdl2bsMEXvJKwwDQYJKoZIhvcNAQELBQAw +TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh +cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjUwOTAzMDAwMDAw +WhcNMzIwOTAyMjM1OTU5WjAuMQswCQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQ +MA4GA1UEAxMHUm9vdCBZUjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB +ANvGJnN78CTJdWL3+eGfsLN5TrNBJs+VH9hRXqRbwxu9sGNiB0BD1fcOxbSUQCJI +M1xE13Db+5Cw1w0s0EBYsvuIP/6joF0w8cuImbgR1OGgYbSQ4OpzI+DG8SGuTlcE +873OCS+kh3srlo6vl43M5OJg4Aeo1sfHp6kTJDoIiFBNJAY+OKfX/FUvYKuhjT+n +o49lmqmupSBI5PkBQiqrEGtWU5uxU/cQWHGu8jSjFBznZqvbNPLMXMLFxCb3WTfr +JBXXjqvWG+v4bjzxjjeAtOlU7qarRDvNOyAuQYLln904M+faKx8hnLCpJ15ZqaEg +cNlY+9MMWcC5yvL2A2j3l9+2buggZX+dOE91zYmIdawTvSZuVvlbRrAlLxIB6pwM +BjneXCjYQ8+3BCCjssbSNpZU3hTcBDdhfAlEDlYr6pEatnMdmDT5BqnKC92bd0Eh +M1fbLHioLccLCuievT8ZkPhZrq7Mii7gNXAcUEAR8+lzYal+9zTg7C5DALyVOeG/ +CqfRAMn1KSHCR0NSA6P8tn/mGRlnCct5rtVCLnVySVpU6H1qGg3DgTOuskf8eahT +MiYbI5ezPJmO5ertalskQ1utp74+eDy92PI4ftHKTbq9IWhH4YZKh3WnJEIt+oQv +lYZbY8tpEroKrFB6PFGzrJIDRyts4HqvuH52RFj2zv/BAgMBAAGjgdYwgdMwDgYD +VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFN7nW2DQIm1A +KH0/DQH+pLVStFGUMB8GA1UdIwQYMBaAFHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIG +CCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAoYWaHR0cDovL3gxLmkubGVuY3Iub3Jn +LzATBgNVHSAEDDAKMAgGBmeBDAECATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8v +eDEuYy5sZW5jci5vcmcvMA0GCSqGSIb3DQEBCwUAA4ICAQADxFag4TBZat3WEijJ +Zx9Cf3DOmW9dmJy1yxwRLQLRWA0UO/r55ijR7rsGZ8lawi1lZfeSDtZ93Jn2H7mO +1vJeNoyzOxyaa5uFxvBiOrYfzq++06cpEVplwAf7iyepnXh/3hphsHVkbUF1E0VF +2qNU3rV2kWftE4+wNtw3MOgqPm6wF8oV3RdOFON7P/7g1JGtCe8xd+pGZ3d2s+lb +UuRW3xbac3LBDYQRamF5WOJY0iMRrN9F3A5Nks+iNt1X6r+m3p6CaUAPwvPEVhdb +zB1PxTwl4avmO2Zz3jVqkYXLEX+kvAZCvmedia90+7+DGvFDXbEH6M3Mu6H3suln +2ROyTTuKxGuTAaA4Oik4T054gIu24sHrGODq8jBmrWutKchNgaEg443KrPXjwe2w +BtH7gEYypt5YCMa0Cfk+iigVGD3zpUsbPIybnKTm1EnknY8taT8XL3nL1v6Drp9y +OBaycj9gNlb1QdpyC4EZsV95wZxs9xJbN0U8jXMlSwN9l3MB+HIbctyU5nKSwSBl +BbTp3kJyY2n/9ObNc6hpF9/bdmz2yPPXCQfXPDjnRocI5J8Y8GMkvH8l9O9A+b9S +4fpYDbPd0kmghSGt5NuMVZRIxG5WzVuEgJPhqZ6msoNI6Ir8JvvnhCrEIQ9QBJiK +pL4XOFXIcqLhYJd3hsc0Ek3sjg== +-----END CERTIFICATE-----