github.com/zmap/zcrypto@v0.0.0-20240512203510-0fef58d9a9db/data/test/certificates/certs.go (about)

     1  /*
     2   * ZCrypto Copyright 2017 Regents of the University of Michigan
     3   *
     4   * Licensed under the Apache License, Version 2.0 (the "License"); you may not
     5   * use this file except in compliance with the License. You may obtain a copy
     6   * of the License at http://www.apache.org/licenses/LICENSE-2.0
     7   *
     8   * Unless required by applicable law or agreed to in writing, software
     9   * distributed under the License is distributed on an "AS IS" BASIS,
    10   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
    11   * implied. See the License for the specific language governing
    12   * permissions and limitations under the License.
    13   */
    14  
    15  package certificates
    16  
    17  // HexSPKISubjectFingerprintUNIWUCAG01 is the hex of the SPKI Subject Fingerprint for the niversitaet
    18  // Wuerzburg CA G01.
    19  const HexSPKISubjectFingerprintUNIWUCAG01 = "815350018d31c56513467a4f6e2ab242a8ed10000d7cd36827f4ad54ce6ffb7a"
    20  
    21  // HexSPKISubjectFingerprintSBHome6Wuerzburg is the hex of the SPKI Subject
    22  // Fingerprint for www-sbhome6.zv.uni-wuerzburg.de.
    23  const HexSPKISubjectFingerprintSBHome6Wuerzburg = "476793e425b89c1df0ab9e0bb4535e53b7132febb8f97476dff74edf982d2b91"
    24  
    25  // PEMDAdrianIOSignedByLEX3 is a PEM of a leaf certificate for dadrian.io signed
    26  // by Let's Encrypt Authority X3.
    27  const PEMDAdrianIOSignedByLEX3 = `
    28  Certificate:
    29      Data:
    30          Version: 3 (0x2)
    31          Serial Number:
    32              03:8c:86:7c:86:51:8d:07:93:4d:e6:06:fa:9b:bb:df:d9:12
    33          Signature Algorithm: sha256WithRSAEncryption
    34          Issuer: C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3
    35          Validity
    36              Not Before: Jun 12 19:31:00 2017 GMT
    37              Not After : Sep 10 19:31:00 2017 GMT
    38          Subject: CN=dadrian.io
    39          Subject Public Key Info:
    40              Public Key Algorithm: rsaEncryption
    41              RSA Public Key: (2048 bit)
    42                  Modulus (2048 bit):
    43                      00:f2:a2:65:2f:6c:f9:3b:b4:b2:11:33:15:2e:95:
    44                      99:b2:2f:d1:3a:df:d0:03:0e:58:a3:29:14:fc:b0:
    45                      94:4f:53:be:69:e4:2c:b1:b8:d2:3c:b3:31:90:6e:
    46                      dd:d4:60:f8:c0:84:4f:f6:cb:17:34:87:91:cc:04:
    47                      4a:04:5b:63:ce:79:fe:a4:19:9c:30:28:11:2f:db:
    48                      cd:db:cc:d9:0e:72:e1:75:b2:b4:98:06:59:88:ef:
    49                      9c:9a:df:db:f2:28:ee:fa:26:9c:65:d6:42:00:ed:
    50                      01:e0:1a:e6:3f:f1:a8:4b:b5:3f:06:b4:c3:e7:60:
    51                      13:47:fb:8b:a8:28:ec:11:0c:fa:51:db:bc:d8:ec:
    52                      47:19:96:e1:53:3c:b3:69:7f:6a:29:f1:db:e4:c1:
    53                      98:f0:c0:f0:bd:78:d4:12:8f:f7:07:d0:58:f3:a8:
    54                      b3:ea:16:6a:44:cc:18:24:99:f5:73:2d:ab:6f:71:
    55                      51:d5:d8:d4:34:40:7a:5b:f9:d4:cb:d6:d7:fc:52:
    56                      61:29:28:1d:de:5c:40:83:69:d8:4c:08:78:bb:65:
    57                      98:43:5c:f0:24:1a:c1:54:6e:6a:b1:7c:18:7c:3f:
    58                      e9:ec:6c:41:7a:78:79:b9:28:f6:9d:e7:ee:35:2b:
    59                      6e:e7:db:b6:56:04:88:d7:99:d5:91:c9:4c:69:67:
    60                      32:65
    61                  Exponent: 65537 (0x10001)
    62          X509v3 extensions:
    63              X509v3 Key Usage: critical
    64                  Digital Signature, Key Encipherment
    65              X509v3 Extended Key Usage:
    66                  TLS Web Server Authentication, TLS Web Client Authentication
    67              X509v3 Basic Constraints: critical
    68                  CA:FALSE
    69              X509v3 Subject Key Identifier:
    70                  84:37:E8:FB:ED:4C:19:B3:D4:91:42:E1:F4:3F:69:82:97:D7:27:80
    71              X509v3 Authority Key Identifier:
    72                  keyid:A8:4A:6A:63:04:7D:DD:BA:E6:D1:39:B7:A6:45:65:EF:F3:A8:EC:A1
    73  
    74              Authority Information Access:
    75                  OCSP - URI:http://ocsp.int-x3.letsencrypt.org
    76                  CA Issuers - URI:http://cert.int-x3.letsencrypt.org/
    77  
    78              X509v3 Subject Alternative Name:
    79                  DNS:dadrian.io
    80              X509v3 Certificate Policies:
    81                  Policy: 2.23.140.1.2.1
    82                  Policy: 1.3.6.1.4.1.44947.1.1.1
    83                    CPS: http://cps.letsencrypt.org
    84                    User Notice:
    85                      Explicit Text: This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/
    86  
    87      Signature Algorithm: sha256WithRSAEncryption
    88          59:d0:2f:62:cf:bb:a5:7b:bd:32:1e:12:3b:1d:1a:84:e9:82:
    89          b6:f1:7a:df:7a:8b:d0:6b:da:8a:ca:ff:37:04:3a:f9:2d:76:
    90          8f:8f:18:77:f3:ef:fe:ad:04:32:64:8c:cb:e1:d1:49:a8:17:
    91          f0:6b:61:26:3e:59:d3:e7:14:59:4d:ee:55:51:51:00:83:aa:
    92          9f:ca:c4:16:f4:99:f2:40:81:a5:12:b3:42:b0:f7:ed:c2:1b:
    93          3f:d6:0b:81:8d:42:05:61:9b:ff:f6:d9:4b:a7:1a:9f:e3:cc:
    94          f8:c1:4e:a6:dd:1e:ec:6b:72:55:ee:aa:9d:d5:5b:02:7e:d1:
    95          8c:e7:a5:15:b1:86:d4:82:a1:b7:1b:6a:8e:03:54:6a:c1:7b:
    96          d9:b2:8d:1c:2d:06:0e:18:b6:94:af:4e:56:bb:b3:1d:3e:b0:
    97          f8:19:6b:b4:22:81:3c:1c:1b:fb:04:35:6e:e0:4e:0d:48:52:
    98          3b:bf:bc:d8:35:3c:a6:86:61:c5:17:5d:57:f8:7f:8a:9e:36:
    99          ed:f4:e9:42:20:36:83:fa:3e:69:a1:ba:3a:d9:20:86:d5:f4:
   100          3b:68:ef:33:c0:d6:63:02:28:cf:3d:6c:01:cf:43:7f:9f:74:
   101          c4:4a:d9:23:15:73:cf:b8:80:de:c3:02:c0:ab:e5:3c:38:40:
   102          67:9a:c6:1d
   103  -----BEGIN CERTIFICATE-----
   104  MIIE9zCCA9+gAwIBAgISA4yGfIZRjQeTTeYG+pu739kSMA0GCSqGSIb3DQEBCwUA
   105  MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
   106  ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA2MTIxOTMxMDBaFw0x
   107  NzA5MTAxOTMxMDBaMBUxEzARBgNVBAMTCmRhZHJpYW4uaW8wggEiMA0GCSqGSIb3
   108  DQEBAQUAA4IBDwAwggEKAoIBAQDyomUvbPk7tLIRMxUulZmyL9E639ADDlijKRT8
   109  sJRPU75p5CyxuNI8szGQbt3UYPjAhE/2yxc0h5HMBEoEW2POef6kGZwwKBEv283b
   110  zNkOcuF1srSYBlmI75ya39vyKO76Jpxl1kIA7QHgGuY/8ahLtT8GtMPnYBNH+4uo
   111  KOwRDPpR27zY7EcZluFTPLNpf2op8dvkwZjwwPC9eNQSj/cH0FjzqLPqFmpEzBgk
   112  mfVzLatvcVHV2NQ0QHpb+dTL1tf8UmEpKB3eXECDadhMCHi7ZZhDXPAkGsFUbmqx
   113  fBh8P+nsbEF6eHm5KPad5+41K27n27ZWBIjXmdWRyUxpZzJlAgMBAAGjggIKMIIC
   114  BjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
   115  MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIQ36PvtTBmz1JFC4fQ/aYKX1yeAMB8G
   116  A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu
   117  BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv
   118  BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w
   119  FQYDVR0RBA4wDIIKZGFkcmlhbi5pbzCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB
   120  5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu
   121  Y3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5
   122  IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5
   123  IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5k
   124  IGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3
   125  DQEBCwUAA4IBAQBZ0C9iz7ule70yHhI7HRqE6YK28XrfeovQa9qKyv83BDr5LXaP
   126  jxh38+/+rQQyZIzL4dFJqBfwa2EmPlnT5xRZTe5VUVEAg6qfysQW9JnyQIGlErNC
   127  sPftwhs/1guBjUIFYZv/9tlLpxqf48z4wU6m3R7sa3JV7qqd1VsCftGM56UVsYbU
   128  gqG3G2qOA1RqwXvZso0cLQYOGLaUr05Wu7MdPrD4GWu0IoE8HBv7BDVu4E4NSFI7
   129  v7zYNTymhmHFF11X+H+Knjbt9OlCIDaD+j5pobo62SCG1fQ7aO8zwNZjAijPPWwB
   130  z0N/n3TEStkjFXPPuIDewwLAq+U8OEBnmsYd
   131  -----END CERTIFICATE-----
   132  `
   133  
   134  // HexSPKISubjectFingerprintDAdrianIO is the hex of the SPKI Subject Fingerprint
   135  // of the certificate in DAdrianIOSignedByLEX3.
   136  const HexSPKISubjectFingerprintDAdrianIO = "8a5d4cbab48316c11c5b2fa053ad119f807bf41a29cc97f713edd3e46c3f53a2"
   137  
   138  // PEMUNIWUCAG01SignedByDFNVerin is the certificate for the Universitaet
   139  // Wuerzburg CA G01 signed by DFN Verein.
   140  const PEMUNIWUCAG01SignedByDFNVerin = `
   141  Certificate:
   142      Data:
   143          Version: 3 (0x2)
   144          Serial Number: 168689512 (0xa0dff68)
   145          Signature Algorithm: sha1WithRSAEncryption
   146          Issuer: C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01
   147          Validity
   148              Not Before: Mar  7 09:11:54 2007 GMT
   149              Not After : Mar  6 00:00:00 2019 GMT
   150          Subject: C=DE, O=Universitaet Wuerzburg, CN=UNIWUE-CA - G01/emailAddress=ca@uni-wuerzburg.de
   151          Subject Public Key Info:
   152              Public Key Algorithm: rsaEncryption
   153              RSA Public Key: (2048 bit)
   154                  Modulus (2048 bit):
   155                      00:b8:63:35:6b:24:0d:7c:ac:ff:53:f8:3d:7f:e9:
   156                      76:c1:00:ef:70:aa:b0:71:ec:08:2e:c2:39:44:a6:
   157                      30:26:ed:53:29:34:0c:c5:5a:ed:d4:2f:95:a2:f5:
   158                      5a:93:f3:f4:c8:fb:bb:09:fd:92:2b:b2:c9:84:68:
   159                      b9:45:70:96:42:38:30:cd:75:58:fc:e3:f9:e9:8d:
   160                      af:ae:c3:1a:f2:b0:74:28:ae:35:39:6e:7b:f8:ca:
   161                      c0:18:22:84:9f:d6:ac:36:75:d7:d7:26:77:73:ea:
   162                      a5:81:df:ae:11:25:7b:2f:7d:89:3b:ad:0d:e3:cc:
   163                      bf:e5:88:0c:ed:2c:39:03:ec:3f:8c:31:c2:5a:4c:
   164                      26:e2:c2:63:25:1f:96:37:f3:d4:33:27:4e:f5:0f:
   165                      8d:0c:ee:ab:64:74:a3:b0:5d:96:2e:d6:c5:d6:48:
   166                      28:ba:2f:1a:c7:8d:94:99:36:f7:7e:d8:6e:d4:b0:
   167                      d1:a4:37:58:9a:98:71:f4:73:21:72:7b:e9:16:5f:
   168                      7a:86:52:db:44:8e:23:83:b4:9a:77:42:5a:8c:b1:
   169                      e8:b2:64:00:86:8d:f6:7a:88:1c:3b:e2:86:14:53:
   170                      85:9e:70:e5:9b:d7:04:37:d0:34:ac:f7:89:0c:a4:
   171                      7f:d3:2e:7b:c8:8a:4e:99:9f:be:d9:72:b0:a2:85:
   172                      92:93
   173                  Exponent: 65537 (0x10001)
   174          X509v3 extensions:
   175              X509v3 Basic Constraints: critical
   176                  CA:TRUE
   177              X509v3 Key Usage:
   178                  Certificate Sign, CRL Sign
   179              X509v3 Subject Key Identifier:
   180                  7D:1F:A8:40:F6:A6:F6:32:4E:81:E5:F8:32:0B:C3:6D:2B:C4:33:6E
   181              X509v3 Authority Key Identifier:
   182                  keyid:49:B7:C6:CF:E8:3D:1F:7F:EA:44:7B:13:29:F7:F1:0A:70:3E:DE:64
   183  
   184              X509v3 Subject Alternative Name:
   185                  email:ca@uni-wuerzburg.de
   186              X509v3 CRL Distribution Points:
   187                  URI:http://cdp1.pca.dfn.de/global-root-ca/pub/crl/cacrl.crl
   188                  URI:http://cdp2.pca.dfn.de/global-root-ca/pub/crl/cacrl.crl
   189  
   190              Authority Information Access:
   191                  CA Issuers - URI:http://cdp1.pca.dfn.de/global-root-ca/pub/cacert/cacert.crt
   192                  CA Issuers - URI:http://cdp2.pca.dfn.de/global-root-ca/pub/cacert/cacert.crt
   193  
   194      Signature Algorithm: sha1WithRSAEncryption
   195          d7:de:af:09:80:1a:82:e1:b6:71:96:a4:4b:56:70:71:d0:ce:
   196          99:a2:6f:38:cc:7b:99:5e:32:de:e8:5d:d5:03:26:ec:89:8b:
   197          8b:69:a9:e5:4c:78:c3:a3:1a:7a:40:93:b3:e6:ce:11:38:02:
   198          1d:b9:4d:21:35:c4:f0:d0:3c:b1:19:14:60:c2:55:c9:6f:cf:
   199          ed:21:3d:66:4f:94:9b:ad:4a:22:b0:45:55:65:17:f9:7c:e9:
   200          f0:db:a6:52:c7:97:98:c9:9c:be:ee:8b:ce:41:d5:68:19:43:
   201          7e:d3:1a:eb:4b:86:99:2f:f6:73:61:6c:6a:88:d7:f3:5f:f5:
   202          20:b2:ef:69:77:86:de:31:ff:8e:44:ca:5e:67:00:55:bd:4a:
   203          45:8e:2f:51:95:1b:9a:48:94:c5:da:26:02:2d:48:c2:13:d9:
   204          6e:38:e8:cc:2d:01:b6:d4:4d:fa:9a:09:77:dd:b0:02:27:fa:
   205          6d:34:91:1d:9a:4c:c1:6c:92:36:c0:0a:7e:6d:b7:1c:2d:05:
   206          7f:20:65:57:b5:27:2d:9e:c2:6f:5c:8b:95:35:6b:e3:df:26:
   207          ac:43:ad:be:49:8c:00:3c:83:bc:4f:f9:1d:1a:3e:3a:b8:a1:
   208          b5:e3:cb:b1:c0:48:07:ef:27:de:a6:a4:f3:1b:99:f7:30:5a:
   209          7f:b3:e2:f5
   210  -----BEGIN CERTIFICATE-----
   211  MIIE+DCCA+CgAwIBAgIECg3/aDANBgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJE
   212  RTETMBEGA1UEChMKREZOLVZlcmVpbjEQMA4GA1UECxMHREZOLVBLSTEkMCIGA1UE
   213  AxMbREZOLVZlcmVpbiBQQ0EgR2xvYmFsIC0gRzAxMB4XDTA3MDMwNzA5MTE1NFoX
   214  DTE5MDMwNjAwMDAwMFowbDELMAkGA1UEBhMCREUxHzAdBgNVBAoTFlVuaXZlcnNp
   215  dGFldCBXdWVyemJ1cmcxGDAWBgNVBAMTD1VOSVdVRS1DQSAtIEcwMTEiMCAGCSqG
   216  SIb3DQEJARYTY2FAdW5pLXd1ZXJ6YnVyZy5kZTCCASIwDQYJKoZIhvcNAQEBBQAD
   217  ggEPADCCAQoCggEBALhjNWskDXys/1P4PX/pdsEA73CqsHHsCC7COUSmMCbtUyk0
   218  DMVa7dQvlaL1WpPz9Mj7uwn9kiuyyYRouUVwlkI4MM11WPzj+emNr67DGvKwdCiu
   219  NTlue/jKwBgihJ/WrDZ119cmd3PqpYHfrhEley99iTutDePMv+WIDO0sOQPsP4wx
   220  wlpMJuLCYyUfljfz1DMnTvUPjQzuq2R0o7Bdli7WxdZIKLovGseNlJk2937YbtSw
   221  0aQ3WJqYcfRzIXJ76RZfeoZS20SOI4O0mndCWoyx6LJkAIaN9nqIHDvihhRThZ5w
   222  5ZvXBDfQNKz3iQykf9Mue8iKTpmfvtlysKKFkpMCAwEAAaOCAbIwggGuMA8GA1Ud
   223  EwEB/wQFMAMBAf8wCwYDVR0PBAQDAgEGMB0GA1UdDgQWBBR9H6hA9qb2Mk6B5fgy
   224  C8NtK8QzbjAfBgNVHSMEGDAWgBRJt8bP6D0ff+pEexMp9/EKcD7eZDAeBgNVHREE
   225  FzAVgRNjYUB1bmktd3VlcnpidXJnLmRlMIGIBgNVHR8EgYAwfjA9oDugOYY3aHR0
   226  cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1jYS9wdWIvY3JsL2NhY3Js
   227  LmNybDA9oDugOYY3aHR0cDovL2NkcDIucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1j
   228  YS9wdWIvY3JsL2NhY3JsLmNybDCBogYIKwYBBQUHAQEEgZUwgZIwRwYIKwYBBQUH
   229  MAKGO2h0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZ2xvYmFsLXJvb3QtY2EvcHViL2Nh
   230  Y2VydC9jYWNlcnQuY3J0MEcGCCsGAQUFBzAChjtodHRwOi8vY2RwMi5wY2EuZGZu
   231  LmRlL2dsb2JhbC1yb290LWNhL3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDANBgkqhkiG
   232  9w0BAQUFAAOCAQEA196vCYAaguG2cZakS1ZwcdDOmaJvOMx7mV4y3uhd1QMm7ImL
   233  i2mp5Ux4w6MaekCTs+bOETgCHblNITXE8NA8sRkUYMJVyW/P7SE9Zk+Um61KIrBF
   234  VWUX+Xzp8NumUseXmMmcvu6LzkHVaBlDftMa60uGmS/2c2FsaojX81/1ILLvaXeG
   235  3jH/jkTKXmcAVb1KRY4vUZUbmkiUxdomAi1IwhPZbjjozC0BttRN+poJd92wAif6
   236  bTSRHZpMwWySNsAKfm23HC0FfyBlV7UnLZ7Cb1yLlTVr498mrEOtvkmMADyDvE/5
   237  HRo+OrihtePLscBIB+8n3qak8xuZ9zBaf7Pi9Q==
   238  -----END CERTIFICATE-----
   239  `
   240  
   241  // HexHashPEMUNIWUCAG01SignedByDFNVerin is the hex SHA256 fingerprint of
   242  // UNIWUCAG01SignedByDFNVerin.
   243  const HexHashPEMUNIWUCAG01SignedByDFNVerin = "e06c3af4ea837d9e6346ecfff832bf7b6fcbfc5a5ef3cd37b04496f87b9bedf8"
   244  
   245  // PEMSBHome6WuerzburgSignedByUNIWUCAG01 is the certificate for
   246  // www-sbhome6.zv.uni-wuerzburg.de signed by Universitaet Wuerzburg CA G01.
   247  const PEMSBHome6WuerzburgSignedByUNIWUCAG01 = `
   248  Certificate:
   249      Data:
   250          Version: 3 (0x2)
   251          Serial Number: 171129086 (0xa3338fe)
   252          Signature Algorithm: sha1WithRSAEncryption
   253          Issuer: C=DE, O=Universitaet Wuerzburg, CN=UNIWUE-CA - G01/emailAddress=ca@uni-wuerzburg.de
   254          Validity
   255              Not Before: Apr  4 14:51:28 2007 GMT
   256              Not After : Apr  2 14:51:28 2012 GMT
   257          Subject: C=DE, O=Universitaet Wuerzburg, OU=Zentralverwaltung, CN=www-sbhome6.zv.uni-wuerzburg.de
   258          Subject Public Key Info:
   259              Public Key Algorithm: rsaEncryption
   260              RSA Public Key: (2048 bit)
   261                  Modulus (2048 bit):
   262                      00:cc:96:f9:d3:ef:80:ba:c8:34:f6:37:14:ed:bc:
   263                      ac:fa:6c:43:f5:1e:fb:29:10:4d:78:9f:16:6e:b5:
   264                      54:2d:a1:bc:19:6a:bb:27:0e:f4:6a:e2:f4:bb:56:
   265                      80:2b:6b:7b:2f:22:84:11:e7:fc:43:e8:1b:0c:1f:
   266                      8f:68:1a:09:1b:42:8c:38:0c:05:78:93:f3:0b:63:
   267                      a9:27:35:0b:ab:5a:41:e5:b6:9b:2b:35:a1:05:9c:
   268                      b6:c7:dc:80:03:7d:ac:9d:be:9d:ab:09:88:f7:18:
   269                      1a:ec:28:d8:1f:af:35:28:6e:c1:21:f6:a0:2c:21:
   270                      d0:1b:ea:c0:8f:00:29:f2:4a:8e:4d:14:7e:c1:06:
   271                      9c:30:b3:4a:c0:ef:b4:fd:a5:ec:ad:9d:cb:af:8b:
   272                      49:6f:c1:b6:44:f8:a6:89:0b:9b:33:ff:9b:93:1a:
   273                      a6:ca:aa:30:7c:ec:b2:ab:42:a8:8e:10:5f:5e:4b:
   274                      4a:b1:f6:ee:db:87:59:56:4a:c6:cf:15:7f:87:8f:
   275                      7e:7d:2d:a5:29:b3:bc:8e:33:2e:1b:14:49:cd:f0:
   276                      9b:ef:ec:ca:1f:66:f9:cf:29:83:c9:4c:ad:40:8a:
   277                      23:55:51:07:a9:3d:0b:a8:dd:0c:dd:55:0a:b3:cb:
   278                      d7:1a:a8:71:29:7b:95:eb:39:c9:58:92:d8:ee:92:
   279                      a8:f1
   280                  Exponent: 65537 (0x10001)
   281          X509v3 extensions:
   282              X509v3 Basic Constraints:
   283                  CA:FALSE
   284              X509v3 Key Usage:
   285                  Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment
   286              X509v3 Extended Key Usage:
   287                  TLS Web Server Authentication
   288              X509v3 Subject Key Identifier:
   289                  68:C3:EC:FC:67:CD:08:0B:06:A3:B7:21:C6:0D:FB:06:D3:88:D6:0E
   290              X509v3 Authority Key Identifier:
   291                  keyid:7D:1F:A8:40:F6:A6:F6:32:4E:81:E5:F8:32:0B:C3:6D:2B:C4:33:6E
   292  
   293              X509v3 Subject Alternative Name:
   294                  email:infoman@zv.uni-wuerzburg.de
   295              X509v3 CRL Distribution Points:
   296                  URI:http://cdp1.pca.dfn.de/uniwue-ca/pub/crl/cacrl.crl
   297                  URI:http://cdp2.pca.dfn.de/uniwue-ca/pub/crl/cacrl.crl
   298  
   299              Authority Information Access:
   300                  CA Issuers - URI:http://cdp1.pca.dfn.de/uniwue-ca/pub/cacert/cacert.crt
   301                  CA Issuers - URI:http://cdp2.pca.dfn.de/uniwue-ca/pub/cacert/cacert.crt
   302  
   303      Signature Algorithm: sha1WithRSAEncryption
   304          8d:b8:b4:24:e6:83:74:1c:e9:6b:ad:09:75:9f:29:80:05:8a:
   305          9a:00:70:b3:06:6c:70:1e:85:17:c0:72:1e:7c:77:32:f4:41:
   306          33:b4:d6:1f:c9:21:3e:19:1b:e9:03:11:c1:b2:28:ef:03:b8:
   307          88:a7:8c:45:29:79:ff:47:b3:79:50:ab:b0:0e:19:25:d6:2d:
   308          57:1b:6c:d2:aa:48:72:d1:cc:4e:89:ac:d2:64:07:ca:a7:16:
   309          1f:4d:4c:11:d4:5c:f4:2e:97:1e:7b:06:3d:32:b7:0e:c1:af:
   310          26:df:47:23:bd:77:47:df:be:67:4c:8c:95:fd:de:97:ef:fd:
   311          71:5a:cd:a6:5d:d7:cb:d6:5d:7b:40:90:ee:87:7e:96:59:29:
   312          19:31:7f:47:d5:ce:4b:36:82:8a:6e:06:cd:9e:d3:9b:97:7b:
   313          78:6e:a9:d9:8a:5d:6a:41:77:07:28:c9:2f:ab:0e:a7:2c:6f:
   314          59:c2:9b:cc:52:eb:44:fd:38:1f:7d:31:05:55:b8:1e:3a:63:
   315          a9:36:37:bb:88:55:4e:0d:46:81:7d:00:26:26:2d:1f:be:cf:
   316          9c:7f:5f:04:98:6d:45:bb:84:76:39:2c:d9:be:a1:71:44:ba:
   317          36:c2:b2:b7:12:e8:af:01:df:72:e5:fa:da:3c:71:13:fd:9c:
   318          2a:85:0e:f6
   319  -----BEGIN CERTIFICATE-----
   320  MIIFEzCCA/ugAwIBAgIECjM4/jANBgkqhkiG9w0BAQUFADBsMQswCQYDVQQGEwJE
   321  RTEfMB0GA1UEChMWVW5pdmVyc2l0YWV0IFd1ZXJ6YnVyZzEYMBYGA1UEAxMPVU5J
   322  V1VFLUNBIC0gRzAxMSIwIAYJKoZIhvcNAQkBFhNjYUB1bmktd3VlcnpidXJnLmRl
   323  MB4XDTA3MDQwNDE0NTEyOFoXDTEyMDQwMjE0NTEyOFowdDELMAkGA1UEBhMCREUx
   324  HzAdBgNVBAoTFlVuaXZlcnNpdGFldCBXdWVyemJ1cmcxGjAYBgNVBAsTEVplbnRy
   325  YWx2ZXJ3YWx0dW5nMSgwJgYDVQQDEx93d3ctc2Job21lNi56di51bmktd3Vlcnpi
   326  dXJnLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJb50++Ausg0
   327  9jcU7bys+mxD9R77KRBNeJ8WbrVULaG8GWq7Jw70auL0u1aAK2t7LyKEEef8Q+gb
   328  DB+PaBoJG0KMOAwFeJPzC2OpJzULq1pB5babKzWhBZy2x9yAA32snb6dqwmI9xga
   329  7CjYH681KG7BIfagLCHQG+rAjwAp8kqOTRR+wQacMLNKwO+0/aXsrZ3Lr4tJb8G2
   330  RPimiQubM/+bkxqmyqowfOyyq0KojhBfXktKsfbu24dZVkrGzxV/h49+fS2lKbO8
   331  jjMuGxRJzfCb7+zKH2b5zymDyUytQIojVVEHqT0LqN0M3VUKs8vXGqhxKXuV6znJ
   332  WJLY7pKo8QIDAQABo4IBszCCAa8wCQYDVR0TBAIwADALBgNVHQ8EBAMCBPAwEwYD
   333  VR0lBAwwCgYIKwYBBQUHAwEwHQYDVR0OBBYEFGjD7PxnzQgLBqO3IcYN+wbTiNYO
   334  MB8GA1UdIwQYMBaAFH0fqED2pvYyToHl+DILw20rxDNuMCYGA1UdEQQfMB2BG2lu
   335  Zm9tYW5AenYudW5pLXd1ZXJ6YnVyZy5kZTB9BgNVHR8EdjB0MDigNqA0hjJodHRw
   336  Oi8vY2RwMS5wY2EuZGZuLmRlL3VuaXd1ZS1jYS9wdWIvY3JsL2NhY3JsLmNybDA4
   337  oDagNIYyaHR0cDovL2NkcDIucGNhLmRmbi5kZS91bml3dWUtY2EvcHViL2NybC9j
   338  YWNybC5jcmwwgZgGCCsGAQUFBwEBBIGLMIGIMEIGCCsGAQUFBzAChjZodHRwOi8v
   339  Y2RwMS5wY2EuZGZuLmRlL3VuaXd1ZS1jYS9wdWIvY2FjZXJ0L2NhY2VydC5jcnQw
   340  QgYIKwYBBQUHMAKGNmh0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvdW5pd3VlLWNhL3B1
   341  Yi9jYWNlcnQvY2FjZXJ0LmNydDANBgkqhkiG9w0BAQUFAAOCAQEAjbi0JOaDdBzp
   342  a60JdZ8pgAWKmgBwswZscB6FF8ByHnx3MvRBM7TWH8khPhkb6QMRwbIo7wO4iKeM
   343  RSl5/0ezeVCrsA4ZJdYtVxts0qpIctHMToms0mQHyqcWH01MEdRc9C6XHnsGPTK3
   344  DsGvJt9HI713R9++Z0yMlf3el+/9cVrNpl3Xy9Zde0CQ7od+llkpGTF/R9XOSzaC
   345  im4GzZ7Tm5d7eG6p2YpdakF3ByjJL6sOpyxvWcKbzFLrRP04H30xBVW4HjpjqTY3
   346  u4hVTg1GgX0AJiYtH77PnH9fBJhtRbuEdjks2b6hcUS6NsKytxLorwHfcuX62jxx
   347  E/2cKoUO9g==
   348  -----END CERTIFICATE-----
   349  `
   350  
   351  // HexHashPEMSBHome6WuerzburgSignedByUNIWUCAG01 is the hex SHA256 fingerprint of SBHome6WuerzburgSignedByUNIWUCAG01.
   352  const HexHashPEMSBHome6WuerzburgSignedByUNIWUCAG01 = "956ba7bcb13113915f2501501bf7ea5104c9969ac301475385130f8f5e4df56b"