Switch DownloadProtectionServiceTest to use pre-generated certs instead of creating them each time.

BUG=none
TEST=DownloadProtectionServiceTest


Review URL: http://codereview.chromium.org/8803023

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@113297 0039d316-1c4b-4281-b951-d872f2087c98

chrome/browser/safe_browsing/download_protection_service_unittest.cc

@@ -24,7 +24,6 @@
 #include "content/public/common/url_fetcher_delegate.h"
 #include "content/test/test_browser_thread.h"
 #include "content/test/test_url_fetcher_factory.h"
-#include "crypto/rsa_private_key.h"
 #include "googleurl/src/gurl.h"
 #include "net/base/x509_certificate.h"
 #include "testing/gmock/include/gmock/gmock.h"
@@ -204,6 +203,23 @@ class DownloadProtectionServiceTest : public testing::Test {
         certificate, issuer, whitelist_strings);
   }
 
+  // Reads a single PEM-encoded certificate from the testdata directory.
+  // Returns NULL on failure.
+  scoped_refptr<net::X509Certificate> ReadTestCertificate(
+      const std::string& filename) {
+    std::string cert_data;
+    if (!file_util::ReadFileToString(testdata_path_.AppendASCII(filename),
+                                     &cert_data)) {
+      return NULL;
+    }
+    net::CertificateList certs =
+        net::X509Certificate::CreateCertificateListFromBytes(
+            cert_data.data(),
+            cert_data.size(),
+            net::X509Certificate::FORMAT_PEM_CERT_SEQUENCE);
+    return certs.empty() ? NULL : certs[0];
+  }
+
  private:
   // Helper functions for FlushThreadMessageLoops.
   void RunAllPendingAndQuitUI() {
@@ -760,45 +776,18 @@ TEST_F(DownloadProtectionServiceTest, TestDownloadRequestTimeout) {
   ExpectResult(DownloadProtectionService::SAFE);
 }
 
-TEST_F(DownloadProtectionServiceTest,
-       GetCertificateWhitelistStrings_TestCert) {
-  std::string cert_data;
-  ASSERT_TRUE(file_util::ReadFileToString(testdata_path_.AppendASCII(
-      "signature_util_test.cer"), &cert_data));
-
-  scoped_refptr<net::X509Certificate> cert(
-      net::X509Certificate::CreateFromBytes(cert_data.data(),
-                                            cert_data.size()));
-  ASSERT_TRUE(cert.get());
-
-  std::vector<std::string> whitelist_strings;
-  GetCertificateWhitelistStrings(*cert, *cert, &whitelist_strings);
-
-  EXPECT_THAT(whitelist_strings, ElementsAre(
-      "cert/58AFF702772EB67BDD412571BA40AAC07F0D936C"
-      "/CN=Joe's-Software-Emporium"));
-}
-
-// Only some implementations have the ability to generate self-signed certs.
-#if defined(USE_NSS) || defined(OS_WIN) || defined(OS_MACOSX)
-TEST_F(DownloadProtectionServiceTest,
-       GetCertificateWhitelistStrings_SelfSigned) {
-  scoped_ptr<crypto::RSAPrivateKey> private_key(
-      crypto::RSAPrivateKey::Create(1024));
+TEST_F(DownloadProtectionServiceTest, GetCertificateWhitelistStrings) {
   // We'll pass this cert in as the "issuer", even though it isn't really
   // used to sign the certs below.  GetCertificateWhitelistStirngs doesn't care
   // about this.
-  scoped_refptr<net::X509Certificate> issuer_cert =
-      net::X509Certificate::CreateSelfSigned(
-          private_key.get(), "CN=issuer", 1, base::TimeDelta::FromDays(1));
+  scoped_refptr<net::X509Certificate> issuer_cert(
+      ReadTestCertificate("issuer.pem"));
   ASSERT_TRUE(issuer_cert.get());
   std::string cert_base = "cert/" + base::HexEncode(
       issuer_cert->fingerprint().data,
       sizeof(issuer_cert->fingerprint().data));
 
-  scoped_refptr<net::X509Certificate> cert =
-      net::X509Certificate::CreateSelfSigned(
-          private_key.get(), "CN=subject/%1", 1, base::TimeDelta::FromDays(1));
+  scoped_refptr<net::X509Certificate> cert(ReadTestCertificate("test_cn.pem"));
   ASSERT_TRUE(cert.get());
   std::vector<std::string> whitelist_strings;
   GetCertificateWhitelistStrings(*cert, *issuer_cert, &whitelist_strings);
@@ -806,8 +795,7 @@ TEST_F(DownloadProtectionServiceTest,
   EXPECT_THAT(whitelist_strings, ElementsAre(
       cert_base + "/CN=subject%2F%251"));
 
-  cert = net::X509Certificate::CreateSelfSigned(
-      private_key.get(), "CN=subject,O=org", 1, base::TimeDelta::FromDays(1));
+  cert = ReadTestCertificate("test_cn_o.pem");
   ASSERT_TRUE(cert.get());
   whitelist_strings.clear();
   GetCertificateWhitelistStrings(*cert, *issuer_cert, &whitelist_strings);
@@ -816,9 +804,7 @@ TEST_F(DownloadProtectionServiceTest,
       cert_base + "/CN=subject/O=org",
       cert_base + "/O=org"));
 
-  cert = net::X509Certificate::CreateSelfSigned(
-      private_key.get(), "CN=subject,O=org,OU=unit", 1,
-      base::TimeDelta::FromDays(1));
+  cert = ReadTestCertificate("test_cn_o_ou.pem");
   ASSERT_TRUE(cert.get());
   whitelist_strings.clear();
   GetCertificateWhitelistStrings(*cert, *issuer_cert, &whitelist_strings);
@@ -831,9 +817,7 @@ TEST_F(DownloadProtectionServiceTest,
       cert_base + "/O=org/OU=unit",
       cert_base + "/OU=unit"));
 
-  cert = net::X509Certificate::CreateSelfSigned(
-      private_key.get(), "CN=subject,OU=unit", 1,
-      base::TimeDelta::FromDays(1));
+  cert = ReadTestCertificate("test_cn_ou.pem");
   ASSERT_TRUE(cert.get());
   whitelist_strings.clear();
   GetCertificateWhitelistStrings(*cert, *issuer_cert, &whitelist_strings);
@@ -842,15 +826,13 @@ TEST_F(DownloadProtectionServiceTest,
       cert_base + "/CN=subject/OU=unit",
       cert_base + "/OU=unit"));
 
-  cert = net::X509Certificate::CreateSelfSigned(
-      private_key.get(), "O=org,", 1, base::TimeDelta::FromDays(1));
+  cert = ReadTestCertificate("test_o.pem");
   ASSERT_TRUE(cert.get());
   whitelist_strings.clear();
   GetCertificateWhitelistStrings(*cert, *issuer_cert, &whitelist_strings);
   EXPECT_THAT(whitelist_strings, ElementsAre(cert_base + "/O=org"));
 
-  cert = net::X509Certificate::CreateSelfSigned(
-      private_key.get(), "O=org,OU=unit", 1, base::TimeDelta::FromDays(1));
+  cert = ReadTestCertificate("test_o_ou.pem");
   ASSERT_TRUE(cert.get());
   whitelist_strings.clear();
   GetCertificateWhitelistStrings(*cert, *issuer_cert, &whitelist_strings);
@@ -859,19 +841,16 @@ TEST_F(DownloadProtectionServiceTest,
       cert_base + "/O=org/OU=unit",
       cert_base + "/OU=unit"));
 
-  cert = net::X509Certificate::CreateSelfSigned(
-      private_key.get(), "OU=unit", 1, base::TimeDelta::FromDays(1));
+  cert = ReadTestCertificate("test_ou.pem");
   ASSERT_TRUE(cert.get());
   whitelist_strings.clear();
   GetCertificateWhitelistStrings(*cert, *issuer_cert, &whitelist_strings);
   EXPECT_THAT(whitelist_strings, ElementsAre(cert_base + "/OU=unit"));
 
-  cert = net::X509Certificate::CreateSelfSigned(
-      private_key.get(), "C=US", 1, base::TimeDelta::FromDays(1));
+  cert = ReadTestCertificate("test_c.pem");
   ASSERT_TRUE(cert.get());
   whitelist_strings.clear();
   GetCertificateWhitelistStrings(*cert, *issuer_cert, &whitelist_strings);
   EXPECT_THAT(whitelist_strings, ElementsAre());
 }
-#endif
 }  // namespace safe_browsing

chrome/test/data/safe_browsing/download_protection/issuer.pem

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            37:61:4c:77:87:45:bb:aa:4a:73:5f:a4:1b:09:cd:b3
+        Signature Algorithm: sha1WithRSA
+        Issuer: CN=Root Agency
+        Validity
+            Not Before: Dec  2 04:23:09 2011 GMT
+            Not After : Dec 31 23:59:59 2039 GMT
+        Subject: CN=issuer
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:d6:6e:ed:69:7d:89:b1:cb:74:66:1a:66:69:77:
+                    85:0e:f1:67:2e:4c:21:fa:40:57:44:24:c2:e2:25:
+                    9f:3f:a8:26:73:54:8d:86:40:6e:f7:e1:04:7d:ff:
+                    a3:fc:47:b0:23:03:98:7f:c2:b6:bc:43:ef:46:26:
+                    bf:2b:e8:7c:e4:a0:de:34:68:da:fa:9f:cb:9e:92:
+                    21:fb:a6:77:0e:b7:6f:15:9f:60:2d:0d:8c:a0:81:
+                    88:42:eb:b1:36:92:59:af:dc:0a:f7:8d:8f:dc:55:
+                    b5:90:d1:03:37:d2:1c:14:cc:5b:21:ac:0d:08:7d:
+                    95:f3:1f:b2:d5:3d:9b:a7:2d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            2.5.29.1: 
+                0>.....-...O..a!..dc..0.1.0...U....Root Agency...7l...d......\5.
+    Signature Algorithm: sha1WithRSA
+        7a:d4:36:5c:32:93:5a:aa:e9:ad:41:06:ff:55:ab:49:c4:5d:
+        d1:3b:b1:b9:5d:78:ed:fc:85:9f:d8:3e:da:e1:9a:72:a2:ff:
+        19:b7:b2:41:9f:08:aa:17:40:d5:a1:fc:64:f0:41:6c:8d:a9:
+        98:7a:b0:70:1a:9b:12:c4:67:83
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

chrome/test/data/safe_browsing/download_protection/test_c.pem

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+             (Negative)63:42:94:68:c6:36:b0:45:bd:d1:84:ce:8b:2c:23:f6
+        Signature Algorithm: sha1WithRSA
+        Issuer: CN=Root Agency
+        Validity
+            Not Before: Dec  2 04:32:32 2011 GMT
+            Not After : Dec 31 23:59:59 2039 GMT
+        Subject: C=US
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:d6:6e:ed:69:7d:89:b1:cb:74:66:1a:66:69:77:
+                    85:0e:f1:67:2e:4c:21:fa:40:57:44:24:c2:e2:25:
+                    9f:3f:a8:26:73:54:8d:86:40:6e:f7:e1:04:7d:ff:
+                    a3:fc:47:b0:23:03:98:7f:c2:b6:bc:43:ef:46:26:
+                    bf:2b:e8:7c:e4:a0:de:34:68:da:fa:9f:cb:9e:92:
+                    21:fb:a6:77:0e:b7:6f:15:9f:60:2d:0d:8c:a0:81:
+                    88:42:eb:b1:36:92:59:af:dc:0a:f7:8d:8f:dc:55:
+                    b5:90:d1:03:37:d2:1c:14:cc:5b:21:ac:0d:08:7d:
+                    95:f3:1f:b2:d5:3d:9b:a7:2d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            2.5.29.1: 
+                0>.....-...O..a!..dc..0.1.0...U....Root Agency...7l...d......\5.
+    Signature Algorithm: sha1WithRSA
+        3e:89:9b:b4:d4:ea:1d:c2:89:de:fc:a6:70:58:ce:46:b5:f8:
+        dc:b9:f6:c1:1f:88:91:28:59:ac:61:b2:66:1d:06:05:5d:82:
+        cb:81:34:8b:6c:65:bf:48:dc:3f:a1:c3:0d:83:8a:a6:3a:b7:
+        fa:1b:1b:f7:76:0d:da:9a:fe:10
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----

chrome/test/data/safe_browsing/download_protection/test_cn.pem

+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number:
+            f7:ae:7f:ae:e8:73:8b:59
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=subject/%1
+        Validity
+            Not Before: Dec  6 00:02:05 2011 GMT
+            Not After : Dec  3 00:02:05 2021 GMT
+        Subject: CN=subject/%1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (1024 bit)
+                Modulus (1024 bit):
+                    00:ef:df:c1:77:5b:b9:30:5f:fd:90:76:d5:a0:94:
+                    77:87:40:ec:9b:16:32:c7:b4:10:58:0e:a5:93:02:
+                    67:86:50:68:8d:82:fd:fc:53:d9:67:92:4b:03:a8:
+                    93:06:4f:eb:1f:bb:39:19:c4:9c:0e:cc:b1:5d:f8:
+                    13:2f:34:96:62:d1:32:79:84:22:30:0d:a9:70:3b:
+                    15:1e:d2:fa:73:24:d9:c5:c0:9a:75:45:1e:de:d0:
+                    4a:01:48:83:b3:f7:0d:15:2d:65:da:a9:c6:99:a3:
+                    97:7f:db:22:9e:8f:cb:ac:60:55:15:72:c0:23:73:
+                    33:53:bb:6c:ff:67:e9:ee:97
+                Exponent: 65537 (0x10001)
+    Signature Algorithm: sha1WithRSAEncryption
+        67:66:46:55:60:d6:e5:4e:45:b8:d0:64:86:11:88:3a:c8:6b:
+        5e:06:a3:bd:0a:eb:31:ac:a6:d6:e9:a9:a6:0b:04:dd:df:c4:
+        1f:99:50:83:5f:8b:34:21:be:9a:cd:ff:f9:5e:03:02:d7:8e:
+        c0:d3:94:9b:43:59:90:e3:d4:e3:fe:71:16:bb:33:ab:65:c3:
+        4f:36:3f:9c:cb:79:8c:77:27:e4:2e:8b:be:e6:06:2f:14:18:
+        e0:09:69:10:27:8d:34:ec:7e:1a:b5:a7:7b:de:cf:1e:1c:4d:
+        bb:7e:98:7f:8a:01:3f:0d:02:1d:68:9a:13:b4:6f:4a:d8:fd:
+        44:0a
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

chrome/test/data/safe_browsing/download_protection/test_cn_o.pem

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            04:45:22:ac:ff:83:1f:ac:44:b9:0e:a3:86:ff:62:fa
+        Signature Algorithm: sha1WithRSA
+        Issuer: CN=Root Agency
+        Validity
+            Not Before: Dec  2 04:30:49 2011 GMT
+            Not After : Dec 31 23:59:59 2039 GMT
+        Subject: O=org, CN=subject
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:d6:6e:ed:69:7d:89:b1:cb:74:66:1a:66:69:77:
+                    85:0e:f1:67:2e:4c:21:fa:40:57:44:24:c2:e2:25:
+                    9f:3f:a8:26:73:54:8d:86:40:6e:f7:e1:04:7d:ff:
+                    a3:fc:47:b0:23:03:98:7f:c2:b6:bc:43:ef:46:26:
+                    bf:2b:e8:7c:e4:a0:de:34:68:da:fa:9f:cb:9e:92:
+                    21:fb:a6:77:0e:b7:6f:15:9f:60:2d:0d:8c:a0:81:
+                    88:42:eb:b1:36:92:59:af:dc:0a:f7:8d:8f:dc:55:
+                    b5:90:d1:03:37:d2:1c:14:cc:5b:21:ac:0d:08:7d:
+                    95:f3:1f:b2:d5:3d:9b:a7:2d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            2.5.29.1: 
+                0>.....-...O..a!..dc..0.1.0...U....Root Agency...7l...d......\5.
+    Signature Algorithm: sha1WithRSA
+        22:0b:9f:93:d2:e1:57:ba:1a:d0:c5:16:1e:87:24:d8:0f:45:
+        2a:84:85:56:33:b1:3e:ed:bf:f2:f9:d5:99:1f:d0:37:9c:57:
+        88:a8:ba:6c:1e:55:29:b0:04:64:b8:60:5f:69:7a:14:b8:8a:
+        69:10:9e:4e:9d:94:14:0c:cd:b9
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

chrome/test/data/safe_browsing/download_protection/test_cn_o_ou.pem

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+             (Negative)73:8f:32:df:9c:9e:16:44:b1:49:d5:71:28:f9:06:5c
+        Signature Algorithm: sha1WithRSA
+        Issuer: CN=Root Agency
+        Validity
+            Not Before: Dec  2 04:31:11 2011 GMT
+            Not After : Dec 31 23:59:59 2039 GMT
+        Subject: OU=unit, O=org, CN=subject
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:d6:6e:ed:69:7d:89:b1:cb:74:66:1a:66:69:77:
+                    85:0e:f1:67:2e:4c:21:fa:40:57:44:24:c2:e2:25:
+                    9f:3f:a8:26:73:54:8d:86:40:6e:f7:e1:04:7d:ff:
+                    a3:fc:47:b0:23:03:98:7f:c2:b6:bc:43:ef:46:26:
+                    bf:2b:e8:7c:e4:a0:de:34:68:da:fa:9f:cb:9e:92:
+                    21:fb:a6:77:0e:b7:6f:15:9f:60:2d:0d:8c:a0:81:
+                    88:42:eb:b1:36:92:59:af:dc:0a:f7:8d:8f:dc:55:
+                    b5:90:d1:03:37:d2:1c:14:cc:5b:21:ac:0d:08:7d:
+                    95:f3:1f:b2:d5:3d:9b:a7:2d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            2.5.29.1: 
+                0>.....-...O..a!..dc..0.1.0...U....Root Agency...7l...d......\5.
+    Signature Algorithm: sha1WithRSA
+        05:c7:2e:30:d4:08:5d:55:2c:ad:b7:13:74:bd:46:23:f3:93:
+        20:a7:ee:24:78:1a:f2:2a:39:89:af:74:1a:25:1a:6a:45:d6:
+        b8:b8:1b:a3:30:5e:5d:b5:7c:5a:d9:ec:86:1d:a3:a3:59:7f:
+        38:3b:64:be:d2:70:e2:ed:e1:1a
+-----BEGIN CERTIFICATE-----
+MIIBzDCCAXqgAwIBAgIQjHDNIGNh6btOtiqO1wb5pDAJBgUrDgMCHQUAMBYxFDAS
+BgNVBAMTC1Jvb3QgQWdlbmN5MB4XDTExMTIwMjA0MzExMVoXDTM5MTIzMTIzNTk1
+OVowLzENMAsGA1UECxMEdW5pdDEMMAoGA1UEChMDb3JnMRAwDgYDVQQDEwdzdWJq
+ZWN0MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDWbu1pfYmxy3RmGmZpd4UO
+8WcuTCH6QFdEJMLiJZ8/qCZzVI2GQG734QR9/6P8R7AjA5h/wra8Q+9GJr8r6Hzk
+oN40aNr6n8uekiH7pncOt28Vn2AtDYyggYhC67E2klmv3Ar3jY/cVbWQ0QM30hwU
+zFshrA0IfZXzH7LVPZunLQIDAQABo0swSTBHBgNVHQEEQDA+gBAS5AktBh0dTwCN
+YSHcFmRjoRgwFjEUMBIGA1UEAxMLUm9vdCBBZ2VuY3mCEAY3bACqAGSKEc+41Kpc
+NfQwCQYFKw4DAh0FAANBAAXHLjDUCF1VLK23E3S9RiPzkyCn7iR4GvIqOYmvdBol
+GmpF1ri4G6MwXl21fFrZ7IYdo6NZfzg7ZL7ScOLt4Ro=
+-----END CERTIFICATE-----

chrome/test/data/safe_browsing/download_protection/test_cn_ou.pem

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            7f:12:98:df:40:0c:80:93:44:f3:9e:95:97:bc:74:b1
+        Signature Algorithm: sha1WithRSA
+        Issuer: CN=Root Agency
+        Validity
+            Not Before: Dec  2 04:31:22 2011 GMT
+            Not After : Dec 31 23:59:59 2039 GMT
+        Subject: OU=unit, CN=subject
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:d6:6e:ed:69:7d:89:b1:cb:74:66:1a:66:69:77:
+                    85:0e:f1:67:2e:4c:21:fa:40:57:44:24:c2:e2:25:
+                    9f:3f:a8:26:73:54:8d:86:40:6e:f7:e1:04:7d:ff:
+                    a3:fc:47:b0:23:03:98:7f:c2:b6:bc:43:ef:46:26:
+                    bf:2b:e8:7c:e4:a0:de:34:68:da:fa:9f:cb:9e:92:
+                    21:fb:a6:77:0e:b7:6f:15:9f:60:2d:0d:8c:a0:81:
+                    88:42:eb:b1:36:92:59:af:dc:0a:f7:8d:8f:dc:55:
+                    b5:90:d1:03:37:d2:1c:14:cc:5b:21:ac:0d:08:7d:
+                    95:f3:1f:b2:d5:3d:9b:a7:2d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            2.5.29.1: 
+                0>.....-...O..a!..dc..0.1.0...U....Root Agency...7l...d......\5.
+    Signature Algorithm: sha1WithRSA
+        56:56:ce:1e:f4:db:42:65:e5:e3:16:f6:2c:a0:23:19:3e:f5:
+        ce:58:58:72:e7:0d:56:11:e0:4b:ce:fe:f1:51:26:b7:cf:6d:
+        4f:fb:01:72:b1:74:6c:0f:3e:e7:65:8b:8e:78:34:18:80:a1:
+        5f:a6:33:a6:6e:41:14:a4:a9:db
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

chrome/test/data/safe_browsing/download_protection/test_o.pem

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            0e:3a:04:07:5a:97:c9:b0:4e:4f:6d:b7:1e:65:4c:cb
+        Signature Algorithm: sha1WithRSA
+        Issuer: CN=Root Agency
+        Validity
+            Not Before: Dec  2 04:31:40 2011 GMT
+            Not After : Dec 31 23:59:59 2039 GMT
+        Subject: O=org
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:d6:6e:ed:69:7d:89:b1:cb:74:66:1a:66:69:77:
+                    85:0e:f1:67:2e:4c:21:fa:40:57:44:24:c2:e2:25:
+                    9f:3f:a8:26:73:54:8d:86:40:6e:f7:e1:04:7d:ff:
+                    a3:fc:47:b0:23:03:98:7f:c2:b6:bc:43:ef:46:26:
+                    bf:2b:e8:7c:e4:a0:de:34:68:da:fa:9f:cb:9e:92:
+                    21:fb:a6:77:0e:b7:6f:15:9f:60:2d:0d:8c:a0:81:
+                    88:42:eb:b1:36:92:59:af:dc:0a:f7:8d:8f:dc:55:
+                    b5:90:d1:03:37:d2:1c:14:cc:5b:21:ac:0d:08:7d:
+                    95:f3:1f:b2:d5:3d:9b:a7:2d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            2.5.29.1: 
+                0>.....-...O..a!..dc..0.1.0...U....Root Agency...7l...d......\5.
+    Signature Algorithm: sha1WithRSA
+        20:a4:6f:00:6e:2a:01:26:83:aa:dc:12:4a:e7:90:db:28:cc:
+        fa:a2:0f:05:e8:43:01:8a:76:59:4e:5a:76:fc:56:0c:05:86:
+        07:40:91:28:f8:29:a2:51:9c:75:cf:d3:95:c2:17:da:69:0e:
+        36:71:14:85:b3:6d:ec:cd:7c:bb
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

chrome/test/data/safe_browsing/download_protection/test_o_ou.pem

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+             (Negative)52:2f:d2:aa:16:73:47:40:b2:f5:e0:a2:e2:1a:9a:1e
+        Signature Algorithm: sha1WithRSA
+        Issuer: CN=Root Agency
+        Validity
+            Not Before: Dec  2 04:31:52 2011 GMT
+            Not After : Dec 31 23:59:59 2039 GMT
+        Subject: OU=unit, O=org
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:d6:6e:ed:69:7d:89:b1:cb:74:66:1a:66:69:77:
+                    85:0e:f1:67:2e:4c:21:fa:40:57:44:24:c2:e2:25:
+                    9f:3f:a8:26:73:54:8d:86:40:6e:f7:e1:04:7d:ff:
+                    a3:fc:47:b0:23:03:98:7f:c2:b6:bc:43:ef:46:26:
+                    bf:2b:e8:7c:e4:a0:de:34:68:da:fa:9f:cb:9e:92:
+                    21:fb:a6:77:0e:b7:6f:15:9f:60:2d:0d:8c:a0:81:
+                    88:42:eb:b1:36:92:59:af:dc:0a:f7:8d:8f:dc:55:
+                    b5:90:d1:03:37:d2:1c:14:cc:5b:21:ac:0d:08:7d:
+                    95:f3:1f:b2:d5:3d:9b:a7:2d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            2.5.29.1: 
+                0>.....-...O..a!..dc..0.1.0...U....Root Agency...7l...d......\5.
+    Signature Algorithm: sha1WithRSA
+        58:8d:20:c5:df:6f:d8:b5:cc:d8:e7:0d:48:0d:7c:a9:ba:28:
+        22:f7:16:10:cc:04:36:1d:65:de:e3:b8:f9:c1:41:2c:06:63:
+        84:dc:30:78:37:5d:c3:3a:0e:3e:41:f3:1b:66:2b:eb:cd:1f:
+        ac:bf:15:b5:e4:a6:ac:30:d0:84
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

chrome/test/data/safe_browsing/download_protection/test_ou.pem

+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            72:15:57:d2:b6:d2:36:b6:47:33:5b:1b:40:99:ce:3b
+        Signature Algorithm: sha1WithRSA
+        Issuer: CN=Root Agency
+        Validity
+            Not Before: Dec  2 04:32:19 2011 GMT
+            Not After : Dec 31 23:59:59 2039 GMT
+        Subject: OU=unit
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:d6:6e:ed:69:7d:89:b1:cb:74:66:1a:66:69:77:
+                    85:0e:f1:67:2e:4c:21:fa:40:57:44:24:c2:e2:25:
+                    9f:3f:a8:26:73:54:8d:86:40:6e:f7:e1:04:7d:ff:
+                    a3:fc:47:b0:23:03:98:7f:c2:b6:bc:43:ef:46:26:
+                    bf:2b:e8:7c:e4:a0:de:34:68:da:fa:9f:cb:9e:92:
+                    21:fb:a6:77:0e:b7:6f:15:9f:60:2d:0d:8c:a0:81:
+                    88:42:eb:b1:36:92:59:af:dc:0a:f7:8d:8f:dc:55:
+                    b5:90:d1:03:37:d2:1c:14:cc:5b:21:ac:0d:08:7d:
+                    95:f3:1f:b2:d5:3d:9b:a7:2d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            2.5.29.1: 
+                0>.....-...O..a!..dc..0.1.0...U....Root Agency...7l...d......\5.
+    Signature Algorithm: sha1WithRSA
+        65:86:ee:e5:09:4c:f0:89:dd:fa:ed:43:8b:ba:03:79:2d:c2:
+        12:c8:72:35:f1:62:ef:43:3c:4a:8e:69:e1:69:df:d9:0d:f8:
+        99:60:3d:a7:f1:ed:0a:37:bb:4b:a8:b8:2d:e6:e6:27:0a:d8:
+        da:dd:b1:b3:18:1f:7b:c6:93:8b
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----