Replace certificate for multiple OID EV test

CertVerifyProcInternalTest.EVVerificationMultipleOID uses a certificate
from trustcenter.websecurity.symantec.com, but the test fails with the
upcoming Symantec Legacy PKI distrust. This replaces the test
certificate with another that has the 2.23.140.1.1 OID before
2.16.840.1.113733.1.7.23.6 in X509v3 Certificate Policies extension.

Bug: 705285, 796230
Change-Id: I0ed5d50d727a712d7c38babdb9ecfdfd30d50cc5
Reviewed-on: https://chromium-review.googlesource.com/1147665
Commit-Queue: Ryan Sleevi <rsleevi@chromium.org>
Reviewed-by: Ryan Sleevi <rsleevi@chromium.org>
Cr-Commit-Position: refs/heads/master@{#577471}

net/BUILD.gn

@@ -2424,6 +2424,7 @@ bundle_data("test_support_bundle_data") {
     "data/ssl/certificates/key_usage_rsa_no_extension.pem",
     "data/ssl/certificates/large_key.pem",
     "data/ssl/certificates/localhost_cert.pem",
+    "data/ssl/certificates/login.trustwave.com.pem",
     "data/ssl/certificates/mit.davidben.der",
     "data/ssl/certificates/multi-root-A-by-B.pem",
     "data/ssl/certificates/multi-root-B-by-C.pem",
@@ -2486,7 +2487,6 @@ bundle_data("test_support_bundle_data") {
     "data/ssl/certificates/subjectAltName_www_example_com.pem",
     "data/ssl/certificates/thawte.single.pem",
     "data/ssl/certificates/tls_feature_extension.pem",
-    "data/ssl/certificates/trustcenter.websecurity.symantec.com.pem",
     "data/ssl/certificates/unescaped.pem",
     "data/ssl/certificates/unittest.key.bin",
     "data/ssl/certificates/unittest.originbound.der",

net/cert/cert_verify_proc_unittest.cc

@@ -341,16 +341,16 @@ TEST_P(CertVerifyProcInternalTest, EVVerificationMultipleOID) {
 
   // TODO(eroman): Update this test to use a synthetic certificate, so the test
   // does not break in the future. The certificate chain in question expires on
-  // Dec 22 23:59:59 2018 GMT 2018, at which point this test will start failing.
+  // Jun 12 14:33:43 2020 GMT, at which point this test will start failing.
   if (base::Time::Now() >
-      base::Time::UnixEpoch() + base::TimeDelta::FromSeconds(1545523199)) {
+      base::Time::UnixEpoch() + base::TimeDelta::FromSeconds(1591972423)) {
     FAIL() << "This test uses a certificate chain which is now expired. Please "
               "disable and file a bug.";
     return;
   }
 
   scoped_refptr<X509Certificate> chain = CreateCertificateChainFromFile(
-      GetTestCertsDirectory(), "trustcenter.websecurity.symantec.com.pem",
+      GetTestCertsDirectory(), "login.trustwave.com.pem",
       X509Certificate::FORMAT_PEM_CERT_SEQUENCE);
   ASSERT_TRUE(chain);
 
@@ -358,7 +358,7 @@ TEST_P(CertVerifyProcInternalTest, EVVerificationMultipleOID) {
   //
   // This way CRLSet coverage will be sufficient for EV revocation checking,
   // so this test does not depend on online revocation checking.
-  ASSERT_EQ(1u, chain->intermediate_buffers().size());
+  ASSERT_GE(chain->intermediate_buffers().size(), 1u);
   base::StringPiece spki;
   ASSERT_TRUE(
       asn1::ExtractSPKIFromDERCert(x509_util::CryptoBufferAsStringPiece(
@@ -371,7 +371,7 @@ TEST_P(CertVerifyProcInternalTest, EVVerificationMultipleOID) {
 
   CertVerifyResult verify_result;
   int flags = 0;
-  int error = Verify(chain.get(), "trustcenter.websecurity.symantec.com", flags,
+  int error = Verify(chain.get(), "login.trustwave.com", flags,
                      crl_set.get(), CertificateList(), &verify_result);
   EXPECT_THAT(error, IsOk());
   EXPECT_TRUE(verify_result.cert_status & CERT_STATUS_IS_EV);

net/data/ssl/certificates/README

@@ -10,7 +10,7 @@ unit tests.
 - google.single.der
 - google.single.pem
 - thawte.single.pem : Certificates for testing parsing of different formats.
-- trustcenter.websecurity.symantec.com.pem :
+- login.trustwave.com.pem :
      Certificate for testing EV with multiple OIDs. Regression test for crbug.com/705285
 
 - googlenew.chain.pem : The refreshed Google certificate

net/data/ssl/certificates/login.trustwave.com.pem

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            06:db:17:73:de:b5:08:bf:b6:86:a8:c5:ad:ce:d9:2b:0f:dc:9d
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = "Trustwave Extended Validation SHA256 CA, Level 1", emailAddress = ca@trustwave.com
+        Validity
+            Not Before: Jun 13 08:33:43 2018 GMT
+            Not After : Jun 12 14:33:43 2020 GMT
+        Subject: CN = login.trustwave.com, O = "Trustwave Holdings, Inc.", L = Chicago, ST = Illinois, C = US, serialNumber = 3939737, businessCategory = Private Organization, jurisdictionC = US, jurisdictionST = Delaware
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:dd:80:8b:d6:ac:0e:14:cd:fc:39:eb:17:8f:f5:
+                    9b:c8:0f:0f:03:dd:46:d8:72:a7:2f:bb:61:e4:0a:
+                    9f:db:1a:7f:94:7a:b5:5b:04:ac:92:5f:37:e8:58:
+                    54:08:5c:39:19:85:54:a9:d1:96:d2:f6:c9:67:e1:
+                    6d:c2:fb:40:c9:86:3c:b8:97:fe:83:8d:c4:35:2e:
+                    59:a8:22:d3:6e:01:a2:f5:26:17:4a:d4:4c:7a:61:
+                    5a:5e:8e:4d:db:bf:2d:4c:e8:98:8f:60:69:a4:e7:
+                    2d:fb:b1:83:b6:3d:a1:97:2f:c5:ce:f1:47:7f:7b:
+                    68:72:6e:1e:95:e1:2c:cd:9b:25:31:fa:9f:9a:0e:
+                    ba:f6:a8:d4:8c:40:9b:20:1b:ef:0e:f6:32:b1:c1:
+                    ef:15:ec:5a:42:c3:6a:2d:4e:30:e7:44:61:22:41:
+                    f9:77:5a:42:25:10:ed:36:60:c2:d5:67:f7:7f:c4:
+                    d7:54:5e:49:99:5d:45:a7:4c:c9:5d:a4:5d:75:70:
+                    b6:9e:a3:8a:d9:6a:4c:d5:dd:c6:dd:12:9b:a1:90:
+                    85:08:92:93:87:f9:e7:69:96:82:c6:e9:5c:06:15:
+                    42:48:54:6e:15:5c:5b:bc:30:d9:3f:7c:8e:52:30:
+                    76:5d:3b:1a:ba:39:a3:eb:8e:83:ab:43:e4:90:a7:
+                    6e:af
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication, TLS Web Server Authentication
+            X509v3 Subject Key Identifier: 
+                75:E8:CF:E7:D7:4B:78:94:85:CD:C8:DF:52:03:2E:CD:FB:F9:FF:87
+            X509v3 Authority Key Identifier: 
+                keyid:E5:E4:24:59:15:32:27:C9:20:B3:42:02:6C:B0:EF:32:DE:9B:20:5A
+
+            X509v3 Certificate Policies: 
+                Policy: 2.23.140.1.1
+                Policy: 2.16.840.1.114404.1.1.2.4.1
+                  CPS: https://ssl.trustwave.com/CA
+
+            X509v3 Subject Alternative Name: 
+                DNS:login.trustwave.com, DNS:cdn-login.trustwave.com, DNS:ssl.trustwave.com, DNS:sitedata.securetrust.com, DNS:sealserver.trustwave.com, DNS:sitedata.xramp.com, DNS:seal.securetrust.com, DNS:sealserver.trustkeeper.net, DNS:seal.xramp.com, DNS:rogers.trustwave.com, DNS:optus.trustwave.com, DNS:tis.trustwave.com, DNS:globe.trustwave.com, DNS:inmarsat.trustwave.com
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://crl.trustwave.com/EVCA2_L1.crl
+
+            Authority Information Access: 
+                OCSP - URI:http://ocsp.trustwave.com/
+                CA Issuers - URI:http://ssl.trustwave.com/issuers/EVCA2_L1.crt
+
+            CT Precertificate SCTs: 
+                Signed Certificate Timestamp:
+                    Version   : v1 (0x0)
+                    Log ID    : A4:B9:09:90:B4:18:58:14:87:BB:13:A2:CC:67:70:0A:
+                                3C:35:98:04:F9:1B:DF:B8:E3:77:CD:0E:C8:0D:DC:10
+                    Timestamp : Jun 13 14:33:44.010 2018 GMT
+                    Extensions: none
+                    Signature : ecdsa-with-SHA256
+                                30:46:02:21:00:97:A4:CA:04:0F:F8:5D:DB:8D:94:65:
+                                24:B6:4B:C4:14:31:0C:36:B3:E4:8D:3B:0A:C2:8E:C6:
+                                F4:B6:B8:80:08:02:21:00:D3:2F:6E:7A:35:1E:BB:7C:
+                                3B:CB:02:79:BE:BD:4B:3F:DD:58:6A:31:A7:35:52:19:
+                                3E:88:EE:15:80:5D:65:68
+                Signed Certificate Timestamp:
+                    Version   : v1 (0x0)
+                    Log ID    : EE:4B:BD:B7:75:CE:60:BA:E1:42:69:1F:AB:E1:9E:66:
+                                A3:0F:7E:5F:B0:72:D8:83:00:C4:7B:89:7A:A8:FD:CB
+                    Timestamp : Jun 13 14:33:44.829 2018 GMT
+                    Extensions: none
+                    Signature : ecdsa-with-SHA256
+                                30:44:02:20:3B:3F:8E:F8:1D:73:88:3E:DF:34:35:D6:
+                                DE:FF:9B:F0:BA:61:84:9A:CF:0C:6F:60:07:FD:4B:12:
+                                DD:26:2F:FD:02:20:5C:EA:8D:59:CE:65:9F:7E:5D:A2:
+                                AE:C5:2F:E2:36:7A:19:E4:9E:48:45:73:C5:A6:CA:49:
+                                FD:A4:BF:94:0F:45
+                Signed Certificate Timestamp:
+                    Version   : v1 (0x0)
+                    Log ID    : 56:14:06:9A:2F:D7:C2:EC:D3:F5:E1:BD:44:B2:3E:C7:
+                                46:76:B9:BC:99:11:5C:C0:EF:94:98:55:D6:89:D0:DD
+                    Timestamp : Jun 13 14:33:43.623 2018 GMT
+                    Extensions: none
+                    Signature : ecdsa-with-SHA256
+                                30:45:02:20:40:A4:5B:11:00:BC:B3:4B:DA:48:00:FF:
+                                49:1D:1A:9E:1D:54:9D:42:36:66:99:8C:BD:27:75:48:
+                                AF:B1:13:B9:02:21:00:F5:EE:79:36:96:16:59:55:4F:
+                                73:B1:C8:6E:B0:C6:29:E1:EB:03:7E:86:37:83:C5:68:
+                                42:C3:83:BA:30:DE:D0
+    Signature Algorithm: sha256WithRSAEncryption
+         4b:a9:32:a2:94:ef:5a:a7:67:44:03:53:32:56:36:0f:12:0b:
+         3b:7a:6d:66:2b:ee:47:a9:35:26:30:62:86:9b:7d:aa:38:83:
+         13:ff:d0:56:ce:84:71:f8:16:49:ef:cc:70:da:34:ee:79:0e:
+         2a:82:05:82:e8:f7:e7:d6:b4:ed:85:ac:e7:d2:c3:f8:8a:8f:
+         ee:af:e2:d0:ba:3a:a9:a3:f8:70:ba:46:f0:16:05:60:d1:26:
+         6a:e4:05:00:86:fe:44:8c:68:44:6b:ec:d4:5a:41:00:3a:b1:
+         66:42:29:b8:47:1f:84:1e:94:5e:a4:f9:16:52:af:9f:3a:77:
+         d9:20:7c:01:82:9d:d9:9c:6f:9c:db:9f:90:21:1b:0b:05:7e:
+         e0:1d:d0:2f:e1:18:5c:c3:7f:f8:84:f7:f5:90:ac:09:9b:06:
+         90:48:b9:a9:b0:bd:2e:63:67:bc:8f:62:2f:c7:e2:18:ba:c9:
+         8c:96:dc:98:8e:5c:60:66:5a:aa:ee:54:bd:ce:49:08:ca:09:
+         92:bb:0f:26:07:ba:8c:df:88:4f:28:ef:eb:32:99:d3:2d:a7:
+         e0:c4:d4:51:d5:c9:a9:db:bf:c3:f7:14:4b:62:13:69:09:e9:
+         13:49:82:20:b3:31:ae:83:a7:0d:2c:de:69:3b:e2:3b:f0:9d:
+         67:61:98:3f
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            35:96:2f:30:5c:5a:0b:ec:40:0d:4e:98:77:52:8c:65
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C = US, O = SecureTrust Corporation, CN = SecureTrust CA
+        Validity
+            Not Before: Sep  1 14:35:34 2016 GMT
+            Not After : Sep 29 14:35:34 2024 GMT
+        Subject: C = US, ST = Illinois, L = Chicago, O = "Trustwave Holdings, Inc.", CN = "Trustwave Extended Validation SHA256 CA, Level 1", emailAddress = ca@trustwave.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ad:ef:66:1c:ba:a2:bf:af:3d:15:62:24:ec:f6:
+                    9e:40:bb:96:a2:cf:25:75:15:f8:ac:d2:c7:78:3e:
+                    ff:5f:b2:6b:4d:f6:97:b8:84:1a:2d:fa:d4:38:3b:
+                    72:45:a6:6c:d0:bb:49:b0:41:e0:a6:be:dd:52:89:
+                    c3:20:7e:bd:3e:30:4f:ac:78:3e:84:12:ee:ee:86:
+                    f8:b9:d1:31:dc:9d:37:35:04:9d:9d:1f:df:a8:f6:
+                    34:64:c1:f6:34:fe:de:f5:31:52:28:a7:2d:67:f4:
+                    a6:cc:0f:23:19:c9:55:99:d8:93:1a:0d:5b:4f:1e:
+                    b1:81:6b:8f:5a:af:4e:a6:b2:10:4a:09:0f:e4:d4:
+                    5e:d4:67:93:43:b5:3f:13:5c:f1:2e:a6:b0:e8:f7:
+                    90:5a:31:12:1c:f1:9e:8a:5c:b0:d2:3a:fa:a9:5c:
+                    87:33:96:9c:93:da:6c:eb:4b:0d:dc:22:8d:1a:eb:
+                    21:c9:a4:1e:df:0d:9b:63:14:49:f5:14:47:fe:c2:
+                    0b:08:09:a6:4d:b8:dc:fd:c5:eb:19:03:06:75:a6:
+                    2d:6a:21:a7:5d:b7:38:e6:bd:fd:72:a7:db:ca:76:
+                    7b:d6:13:cf:34:4b:45:6c:e7:6a:93:70:bb:23:cb:
+                    eb:84:81:e2:29:a0:2d:16:44:cc:45:25:a6:1c:79:
+                    38:1f
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:TRUE, pathlen:0
+            X509v3 Subject Key Identifier: 
+                E5:E4:24:59:15:32:27:C9:20:B3:42:02:6C:B0:EF:32:DE:9B:20:5A
+            X509v3 Key Usage: critical
+                Digital Signature, Certificate Sign, CRL Sign
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://crl.trustwave.com/STCA.crl
+
+            X509v3 Certificate Policies: 
+                Policy: X509v3 Any Policy
+                  CPS: https://ssl.trustwave.com/CA
+
+            Authority Information Access: 
+                OCSP - URI:http://ocsp.trustwave.com
+                CA Issuers - URI:http://ssl.trustwave.com/issuers/STCA.crt
+
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication, TLS Web Server Authentication
+            X509v3 Authority Key Identifier: 
+                keyid:42:32:B6:16:FA:04:FD:FE:5D:4B:7A:C3:FD:F7:4C:40:1D:5A:43:AF
+
+            X509v3 Subject Alternative Name: 
+                email:ca@trustwave.com
+    Signature Algorithm: sha256WithRSAEncryption
+         65:0c:20:39:2b:be:53:09:d3:01:cb:b8:fd:e5:92:77:82:c0:
+         65:3a:99:9d:e0:d7:b8:f2:53:64:49:c2:14:62:9d:87:2d:ad:
+         aa:f2:1b:b2:61:db:40:d0:f7:fa:69:4c:7a:31:4c:80:03:c3:
+         62:43:b0:2e:41:ca:99:5a:6e:d7:90:9c:b8:21:ae:5d:7b:2b:
+         56:fa:3c:ef:ab:cd:60:3f:34:52:95:c2:8e:ae:f0:68:7b:2f:
+         3d:22:52:e8:ad:ed:90:43:e1:e2:9c:45:e7:71:45:97:0f:42:
+         59:c3:f4:a4:d1:22:cf:78:49:1a:68:a2:db:2e:0a:ff:d8:e5:
+         bf:b5:14:c3:d5:d4:aa:d8:b5:b7:28:f7:21:15:95:a3:44:58:
+         ba:66:88:4b:2a:bc:b8:f1:89:61:26:b7:bd:6b:cf:3f:b4:4b:
+         9f:4e:b4:0f:e2:86:76:c6:3f:d5:eb:9e:17:bb:c1:fd:72:6c:
+         23:4e:3b:98:19:40:c2:ab:fc:eb:33:7c:b6:7b:a1:52:80:08:
+         63:8f:2e:57:12:65:14:56:f7:c8:00:b3:31:3e:d5:9b:e5:1e:
+         47:63:6a:67:d3:4a:ce:32:32:f5:28:ad:89:fd:36:15:e7:8c:
+         05:a5:db:c3:6e:0f:d9:b7:14:f8:84:d8:ee:74:7b:31:03:9c:
+         74:e2:68:e4
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            0c:f0:8e:5c:08:16:a5:ad:42:7f:f0:eb:27:18:59:d0
+    Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C = US, O = SecureTrust Corporation, CN = SecureTrust CA
+        Validity
+            Not Before: Nov  7 19:31:18 2006 GMT
+            Not After : Dec 31 19:40:55 2029 GMT
+        Subject: C = US, O = SecureTrust Corporation, CN = SecureTrust CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ab:a4:81:e5:95:cd:f5:f6:14:8e:c2:4f:ca:d4:
+                    e2:78:95:58:9c:41:e1:0d:99:40:24:17:39:91:33:
+                    66:e9:be:e1:83:af:62:5c:89:d1:fc:24:5b:61:b3:
+                    e0:11:11:41:1c:1d:6e:f0:b8:bb:f8:de:a7:81:ba:
+                    a6:48:c6:9f:1d:bd:be:8e:a9:41:3e:b8:94:ed:29:
+                    1a:d4:8e:d2:03:1d:03:ef:6d:0d:67:1c:57:d7:06:
+                    ad:ca:c8:f5:fe:0e:af:66:25:48:04:96:0b:5d:a3:
+                    ba:16:c3:08:4f:d1:46:f8:14:5c:f2:c8:5e:01:99:
+                    6d:fd:88:cc:86:a8:c1:6f:31:42:6c:52:3e:68:cb:
+                    f3:19:34:df:bb:87:18:56:80:26:c4:d0:dc:c0:6f:
+                    df:de:a0:c2:91:16:a0:64:11:4b:44:bc:1e:f6:e7:
+                    fa:63:de:66:ac:76:a4:71:a3:ec:36:94:68:7a:77:
+                    a4:b1:e7:0e:2f:81:7a:e2:b5:72:86:ef:a2:6b:8b:
+                    f0:0f:db:d3:59:3f:ba:72:bc:44:24:9c:e3:73:b3:
+                    f7:af:57:2f:42:26:9d:a9:74:ba:00:52:f2:4b:cd:
+                    53:7c:47:0b:36:85:0e:66:a9:08:97:16:34:57:c1:
+                    66:f7:80:e3:ed:70:54:c7:93:e0:2e:28:15:59:87:
+                    ba:bb
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            1.3.6.1.4.1.311.20.2: 
+                ...C.A
+            X509v3 Key Usage: 
+                Digital Signature, Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Subject Key Identifier: 
+                42:32:B6:16:FA:04:FD:FE:5D:4B:7A:C3:FD:F7:4C:40:1D:5A:43:AF
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://crl.securetrust.com/STCA.crl
+
+            1.3.6.1.4.1.311.21.1: 
+                ...
+    Signature Algorithm: sha1WithRSAEncryption
+         30:ed:4f:4a:e1:58:3a:52:72:5b:b5:a6:a3:65:18:a6:bb:51:
+         3b:77:e9:9d:ea:d3:9f:5c:e0:45:65:7b:0d:ca:5b:e2:70:50:
+         b2:94:05:14:ae:49:c7:8d:41:07:12:73:94:7e:0c:23:21:fd:
+         bc:10:7f:60:10:5a:72:f5:98:0e:ac:ec:b9:7f:dd:7a:6f:5d:
+         d3:1c:f4:ff:88:05:69:42:a9:05:71:c8:b7:ac:26:e8:2e:b4:
+         8c:6a:ff:71:dc:b8:b1:df:99:bc:7c:21:54:2b:e4:58:a2:bb:
+         57:29:ae:9e:a9:a3:19:26:0f:99:2e:08:b0:ef:fd:69:cf:99:
+         1a:09:8d:e3:a7:9f:2b:c9:36:34:7b:24:b3:78:4c:95:17:a4:
+         06:26:1e:b6:64:52:36:5f:60:67:d9:9c:c5:05:74:0b:e7:67:
+         23:d2:08:fc:88:e9:ae:8b:7f:e1:30:f4:37:7e:fd:c6:32:da:
+         2d:9e:44:30:30:6c:ee:07:de:d2:34:fc:d2:ff:40:f6:4b:f4:
+         66:46:06:54:a6:f2:32:0a:63:26:30:6b:9b:d1:dc:8b:47:ba:
+         e1:b9:d5:62:d0:a2:a0:f4:67:05:78:29:63:1a:6f:04:d6:f8:
+         c6:4c:a3:9a:b1:37:b4:8d:e5:28:4b:1d:9e:2c:c2:b8:68:bc:
+         ed:02:ee:31
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

net/data/ssl/certificates/trustcenter.websecurity.symantec.com.pem

-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            63:2e:d9:c0:ee:ab:b8:f6:1b:1e:57:cb:6c:95:f5:2e
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 EV SSL CA - G3
-        Validity
-            Not Before: Dec 22 00:00:00 2016 GMT
-            Not After : Dec 22 23:59:59 2018 GMT
-        Subject: 1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=Delaware/businessCategory=Private Organization/serialNumber=2158113, C=US/postalCode=94043, ST=California, L=Mountain View/street=350 Ellis Street, O=Symantec Corporation, OU=Infrastructure Operations, CN=trustcenter.websecurity.symantec.com
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
-                Modulus:
-                    00:aa:a4:a8:81:35:74:69:14:e1:2c:cb:cd:16:91:
-                    35:ea:76:ac:81:7b:15:41:46:92:f2:21:87:86:23:
-                    9c:66:42:ee:67:4a:df:23:97:42:f1:d7:54:27:dd:
-                    7a:78:2f:58:6f:50:fb:d2:7e:14:42:98:a3:fd:8e:
-                    cb:d7:48:51:dd:51:27:8b:49:08:80:98:3e:a7:f7:
-                    92:b2:06:d3:5e:26:71:3e:65:2d:b2:6a:af:6c:21:
-                    80:37:6e:aa:22:ae:d2:74:3a:2b:34:ea:4d:5f:dc:
-                    bf:95:f4:86:ea:41:f3:11:c8:c2:3a:33:1e:4e:d2:
-                    8f:0b:1c:69:fa:18:7f:1f:b1:56:6f:6d:8b:c3:c8:
-                    31:30:8e:09:fd:f7:82:c8:d9:03:83:2f:51:69:3c:
-                    8f:ee:f2:a9:5e:b2:ac:10:26:f0:cb:ae:72:44:7d:
-                    11:65:b4:49:3f:4e:41:2d:33:ed:a4:19:b1:ad:14:
-                    63:34:01:f4:1d:11:83:9e:ef:e8:30:4b:f1:55:a2:
-                    a0:80:3d:ca:59:ca:7b:8f:75:85:a2:9d:01:56:0c:
-                    96:77:e2:12:ff:d9:b3:e5:48:d4:b0:a5:63:50:51:
-                    c3:8d:35:cb:87:16:09:5c:6e:0a:e3:82:da:b0:cd:
-                    a4:60:c0:af:69:13:a3:7d:d1:04:c3:8f:c5:30:b8:
-                    cc:ff
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Subject Alternative Name: 
-                DNS:trustcenter.websecurity.symantec.com
-            X509v3 Basic Constraints: 
-                CA:FALSE
-            X509v3 Key Usage: critical
-                Digital Signature, Key Encipherment
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication, TLS Web Client Authentication
-            X509v3 Certificate Policies: 
-                Policy: 2.23.140.1.1
-                Policy: 2.16.840.1.113733.1.7.23.6
-                  CPS: https://d.symcb.com/cps
-                  User Notice:
-                    Explicit Text: https://d.symcb.com/rpa
-
-            X509v3 Authority Key Identifier: 
-                keyid:01:59:AB:E7:DD:3A:0B:59:A6:64:63:D6:CF:20:07:57:D5:91:E7:6A
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://sr.symcb.com/sr.crl
-
-            Authority Information Access: 
-                OCSP - URI:http://sr.symcd.com
-                CA Issuers - URI:http://sr.symcb.com/sr.crt
-
-            1.3.6.1.4.1.11129.2.4.2: 
-    Signature Algorithm: sha256WithRSAEncryption
-         0c:e4:4b:4c:57:2e:a7:df:f2:7e:9e:8b:d9:c1:25:99:a8:12:
-         8e:cd:fe:2d:9d:1a:4c:00:00:bb:50:2c:8f:cd:87:8c:13:4b:
-         07:e2:5e:79:0d:b8:c1:eb:c0:ed:4d:6a:93:a5:db:c8:f3:4c:
-         52:12:e0:41:31:c7:1f:6f:aa:8b:94:55:62:46:4c:18:60:b5:
-         ec:bd:e3:87:80:60:dc:40:59:d2:1f:5b:b9:83:00:4a:70:9f:
-         0a:95:8c:8c:f2:2d:18:98:d3:15:cd:db:81:c0:dd:85:34:d5:
-         ce:1b:c1:14:0b:29:ca:2a:cb:81:7e:18:e9:da:8b:ae:1b:3b:
-         d9:db:60:40:52:7f:0b:e5:2b:e2:57:ce:cd:0e:28:96:de:5a:
-         48:a7:75:5a:20:6e:92:73:c9:d0:2a:84:db:24:dd:64:a5:90:
-         1c:3c:e8:68:3c:87:fc:1e:5d:7f:0b:97:1a:c6:52:79:82:8e:
-         f9:ce:02:d6:e1:50:b4:53:a0:33:f3:01:a0:3a:f4:06:5a:38:
-         b0:ad:19:f5:9a:32:0b:82:44:23:60:02:38:79:d1:fc:c6:e0:
-         77:8d:12:80:00:f9:78:4a:c3:7f:72:7a:ad:7c:05:7f:c8:e0:
-         13:3b:44:47:6d:f7:ee:58:0d:c6:ed:73:93:5e:99:28:9e:3e:
-         1f:60:b4:54
------BEGIN CERTIFICATE-----
-MIIHRTCCBi2gAwIBAgIQYy7ZwO6ruPYbHlfLbJX1LjANBgkqhkiG9w0BAQsFADB3
-MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
-BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxKDAmBgNVBAMTH1N5bWFudGVj
-IENsYXNzIDMgRVYgU1NMIENBIC0gRzMwHhcNMTYxMjIyMDAwMDAwWhcNMTgxMjIy
-MjM1OTU5WjCCATgxEzARBgsrBgEEAYI3PAIBAxMCVVMxGTAXBgsrBgEEAYI3PAIB
-AgwIRGVsYXdhcmUxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRAwDgYD
-VQQFEwcyMTU4MTEzMQswCQYDVQQGEwJVUzEOMAwGA1UEEQwFOTQwNDMxEzARBgNV
-BAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDU1vdW50YWluIFZpZXcxGTAXBgNVBAkM
-EDM1MCBFbGxpcyBTdHJlZXQxHTAbBgNVBAoMFFN5bWFudGVjIENvcnBvcmF0aW9u
-MSIwIAYDVQQLDBlJbmZyYXN0cnVjdHVyZSBPcGVyYXRpb25zMS0wKwYDVQQDDCR0
-cnVzdGNlbnRlci53ZWJzZWN1cml0eS5zeW1hbnRlYy5jb20wggEiMA0GCSqGSIb3
-DQEBAQUAA4IBDwAwggEKAoIBAQCqpKiBNXRpFOEsy80WkTXqdqyBexVBRpLyIYeG
-I5xmQu5nSt8jl0Lx11Qn3Xp4L1hvUPvSfhRCmKP9jsvXSFHdUSeLSQiAmD6n95Ky
-BtNeJnE+ZS2yaq9sIYA3bqoirtJ0Ois06k1f3L+V9IbqQfMRyMI6Mx5O0o8LHGn6
-GH8fsVZvbYvDyDEwjgn994LI2QODL1FpPI/u8qlesqwQJvDLrnJEfRFltEk/TkEt
-M+2kGbGtFGM0AfQdEYOe7+gwS/FVoqCAPcpZynuPdYWinQFWDJZ34hL/2bPlSNSw
-pWNQUcONNcuHFglcbgrjgtqwzaRgwK9pE6N90QTDj8UwuMz/AgMBAAGjggMIMIID
-BDAvBgNVHREEKDAmgiR0cnVzdGNlbnRlci53ZWJzZWN1cml0eS5zeW1hbnRlYy5j
-b20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
-AwEGCCsGAQUFBwMCMG8GA1UdIARoMGYwBwYFZ4EMAQEwWwYLYIZIAYb4RQEHFwYw
-TDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUH
-AgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUAVmr5906
-C1mmZGPWzyAHV9WR52owKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3NyLnN5bWNi
-LmNvbS9zci5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8v
-c3Iuc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Iuc3ltY2IuY29tL3Ny
-LmNydDCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYA3esdK3oNT6Ygi4GtgWhw
-fi6OnQHVXIiNPRHEzbbsvswAAAFZI/WvZwAABAMARzBFAiB2aElKdjf+/hhIZ5UU
-jLXLhb8t4O4SroL85Xy0e0L+tQIhAP81wCJr4JonZ+Vn0UPOEj+EqmmUFtYzI+hV
-cU6XVEjOAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFZI/Wv
-uAAABAMARzBFAiA3camsaIGN2AHELeYmjcLeds/4N3/GV/VOvx78gLmqBgIhAO7e
-gwMKhlU2UOVZUH2ZEdH3BECDr+/PY1buXFzm9DJuAHUAvHjh38X2PGhGSTNNoQ+h
-Xwl5aSAJwIG08/aRfz7ZuKUAAAFZI/WwZQAABAMARjBEAiArg7uTYAvh3IBU4Qlz
-zOZxjY8JzjoxEUk20hkzsy54mAIgc2uRlElRnMfFeUoMSBGLKk9VPC0LZUpmSs4O
-xEiL22AwDQYJKoZIhvcNAQELBQADggEBAAzkS0xXLqff8n6ei9nBJZmoEo7N/i2d
-GkwAALtQLI/Nh4wTSwfiXnkNuMHrwO1NapOl28jzTFIS4EExxx9vqouUVWJGTBhg
-tey944eAYNxAWdIfW7mDAEpwnwqVjIzyLRiY0xXN24HA3YU01c4bwRQLKcoqy4F+
-GOnai64bO9nbYEBSfwvlK+JXzs0OKJbeWkindVogbpJzydAqhNsk3WSlkBw86Gg8
-h/weXX8LlxrGUnmCjvnOAtbhULRToDPzAaA69AZaOLCtGfWaMguCRCNgAjh50fzG
-4HeNEoAA+XhKw39yeq18BX/I4BM7REdt9+5YDcbtc5NemSiePh9gtFQ=
------END CERTIFICATE-----
-
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            7e:e1:4a:6f:6f:ef:f2:d3:7f:3f:ad:65:4d:3a:da:b4
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
-        Validity
-            Not Before: Oct 31 00:00:00 2013 GMT
-            Not After : Oct 30 23:59:59 2023 GMT
-        Subject: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 EV SSL CA - G3
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:d8:a1:65:74:23:e8:2b:64:e2:32:d7:33:37:3d:
-                    8e:f5:34:16:48:dd:4f:7f:87:1c:f8:44:23:13:8e:
-                    fb:11:d8:44:5a:18:71:8e:60:16:26:92:9b:fd:17:
-                    0b:e1:71:70:42:fe:bf:fa:1c:c0:aa:a3:a7:b5:71:
-                    e8:ff:18:83:f6:df:10:0a:13:62:c8:3d:9c:a7:de:
-                    2e:3f:0c:d9:1d:e7:2e:fb:2a:ce:c8:9a:7f:87:bf:
-                    d8:4c:04:15:32:c9:d1:cc:95:71:a0:4e:28:4f:84:
-                    d9:35:fb:e3:86:6f:94:53:e6:72:8a:63:67:2e:be:
-                    69:f6:f7:6e:8e:9c:60:04:eb:29:fa:c4:47:42:d2:
-                    78:98:e3:ec:0b:a5:92:dc:b7:9a:bd:80:64:2b:38:
-                    7c:38:09:5b:66:f6:2d:95:7a:86:b2:34:2e:85:9e:
-                    90:0e:5f:b7:5d:a4:51:72:46:70:13:bf:67:f2:b6:
-                    a7:4d:14:1e:6c:b9:53:ee:23:1a:4e:8d:48:55:43:
-                    41:b1:89:75:6a:40:28:c5:7d:dd:d2:6e:d2:02:19:
-                    2f:7b:24:94:4b:eb:f1:1a:a9:9b:e3:23:9a:ea:fa:
-                    33:ab:0a:2c:b7:f4:60:08:dd:9f:1c:cd:dd:2d:01:
-                    66:80:af:b3:2f:29:1d:23:b8:8a:e1:a1:70:07:0c:
-                    34:0f
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            Authority Information Access: 
-                OCSP - URI:http://s2.symcb.com
-
-            X509v3 Basic Constraints: critical
-                CA:TRUE, pathlen:0
-            X509v3 Certificate Policies: 
-                Policy: X509v3 Any Policy
-                  CPS: http://www.symauth.com/cps
-                  User Notice:
-                    Explicit Text: http://www.symauth.com/rpa
-
-            X509v3 CRL Distribution Points: 
-                URI:http://s1.symcb.com/pca3-g5.crl
-
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
-            X509v3 Subject Alternative Name: 
-                DirName:/CN=SymantecPKI-1-533
-            X509v3 Subject Key Identifier: 
-                01:59:AB:E7:DD:3A:0B:59:A6:64:63:D6:CF:20:07:57:D5:91:E7:6A
-            X509v3 Authority Key Identifier: 
-                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
-
-    Signature Algorithm: sha256WithRSAEncryption
-        42:01:55:7b:d0:16:1a:5d:58:e8:bb:9b:a8:4d:d7:f3:d7:eb:
-        13:94:86:d6:7f:21:0b:47:bc:57:9b:92:5d:4f:05:9f:38:a4:
-        10:7c:cf:83:be:06:43:46:8d:08:bc:6a:d7:10:a6:fa:ab:af:
-        2f:61:a8:63:f2:65:df:7f:4c:88:12:88:4f:b3:69:d9:ff:27:
-        c0:0a:97:91:8f:56:fb:89:c4:a8:bb:92:2d:1b:73:b0:c6:ab:
-        36:f4:96:6c:20:08:ef:0a:1e:66:24:45:4f:67:00:40:c8:07:
-        54:74:33:3b:a6:ad:bb:23:9f:66:ed:a2:44:70:34:fb:0e:ea:
-        01:fd:cf:78:74:df:a7:ad:55:b7:5f:4d:f6:d6:3f:e0:86:ce:
-        24:c7:42:a9:13:14:44:35:4b:b6:df:c9:60:ac:0c:7f:d9:93:
-        21:4b:ee:9c:e4:49:02:98:d3:60:7b:5c:bc:d5:30:2f:07:ce:
-        44:42:c4:0b:99:fe:e6:9f:fc:b0:78:86:51:6d:d1:2c:9d:c6:
-        96:fb:85:82:bb:04:2f:f7:62:80:ef:62:da:7f:f6:0e:ac:90:
-        b8:56:bd:79:3f:f2:80:6e:a3:d9:b9:0f:5d:3a:07:1d:91:93:
-        86:4b:29:4c:e1:dc:b5:e1:e0:33:9d:b3:cb:36:91:4b:fe:a1:
-        b4:ee:f0:f9
------BEGIN CERTIFICATE-----
-MIIFKzCCBBOgAwIBAgIQfuFKb2/v8tN/P61lTTratDANBgkqhkiG9w0BAQsFADCB
-yjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
-ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJp
-U2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxW
-ZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0
-aG9yaXR5IC0gRzUwHhcNMTMxMDMxMDAwMDAwWhcNMjMxMDMwMjM1OTU5WjB3MQsw
-CQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNV
-BAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxKDAmBgNVBAMTH1N5bWFudGVjIENs
-YXNzIDMgRVYgU1NMIENBIC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
-AoIBAQDYoWV0I+grZOIy1zM3PY71NBZI3U9/hxz4RCMTjvsR2ERaGHGOYBYmkpv9
-FwvhcXBC/r/6HMCqo6e1cej/GIP23xAKE2LIPZyn3i4/DNkd5y77Ks7Imn+Hv9hM
-BBUyydHMlXGgTihPhNk1++OGb5RT5nKKY2cuvmn2926OnGAE6yn6xEdC0niY4+wL
-pZLct5q9gGQrOHw4CVtm9i2VeoayNC6FnpAOX7ddpFFyRnATv2fytqdNFB5suVPu
-IxpOjUhVQ0GxiXVqQCjFfd3SbtICGS97JJRL6/EaqZvjI5rq+jOrCiy39GAI3Z8c
-zd0tAWaAr7MvKR0juIrhoXAHDDQPAgMBAAGjggFdMIIBWTAvBggrBgEFBQcBAQQj
-MCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zMi5zeW1jYi5jb20wEgYDVR0TAQH/BAgw
-BgEB/wIBADBlBgNVHSAEXjBcMFoGBFUdIAAwUjAmBggrBgEFBQcCARYaaHR0cDov
-L3d3dy5zeW1hdXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5z
-eW1hdXRoLmNvbS9ycGEwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3MxLnN5bWNi
-LmNvbS9wY2EzLWc1LmNybDAOBgNVHQ8BAf8EBAMCAQYwKQYDVR0RBCIwIKQeMBwx
-GjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTMzMB0GA1UdDgQWBBQBWavn3ToLWaZk
-Y9bPIAdX1ZHnajAfBgNVHSMEGDAWgBR/02Wnwt3su/AwCfNDOfoCrzMxMzANBgkq
-hkiG9w0BAQsFAAOCAQEAQgFVe9AWGl1Y6LubqE3X89frE5SG1n8hC0e8V5uSXU8F
-nzikEHzPg74GQ0aNCLxq1xCm+quvL2GoY/Jl339MiBKIT7Np2f8nwAqXkY9W+4nE
-qLuSLRtzsMarNvSWbCAI7woeZiRFT2cAQMgHVHQzO6atuyOfZu2iRHA0+w7qAf3P
-eHTfp61Vt19N9tY/4IbOJMdCqRMURDVLtt/JYKwMf9mTIUvunORJApjTYHtcvNUw
-LwfORELEC5n+5p/8sHiGUW3RLJ3GlvuFgrsEL/digO9i2n/2DqyQuFa9eT/ygG6j
-2bkPXToHHZGThkspTOHcteHgM52zyzaRS/6htO7w+Q==
------END CERTIFICATE-----