X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fssl%2Ffiles%2Fservicecerts%2Fsecurity-tracker.debian.org.crt;h=9d9be610e1f29e6c9f0a43b95a03955093ba96e4;hb=5349bb8f514fec7f5567a8b95f65352653ba59c8;hp=f5245e5a689d8c327a2c5377012d073669560548;hpb=67b962b1158fb77c22dc8b11426e1666aee3d32b;p=mirror%2Fdsa-puppet.git

diff --git a/modules/ssl/files/servicecerts/security-tracker.debian.org.crt b/modules/ssl/files/servicecerts/security-tracker.debian.org.crt
index f5245e5a6..9d9be610e 100644
--- a/modules/ssl/files/servicecerts/security-tracker.debian.org.crt
+++ b/modules/ssl/files/servicecerts/security-tracker.debian.org.crt
@@ -1,17 +1,18 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 90 (0x5a)
-        Signature Algorithm: sha1WithRSAEncryption
-        Issuer: O=Debian, CN=ca.debian.org/emailAddress=debian-admin@debian.org
+        Serial Number:
+            43:dd:94:f9:f1:b8:6f:75:07:aa:75:b1:12:27:18:da
+    Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=FR, O=GANDI SAS, CN=Gandi Standard SSL CA
         Validity
-            Not Before: Dec  7 17:00:20 2012 GMT
-            Not After : Dec  7 17:00:20 2013 GMT
-        Subject: O=Debian, CN=security-tracker.debian.org/emailAddress=debian-admin@debian.org
+            Not Before: Dec 31 00:00:00 2013 GMT
+            Not After : Dec 31 23:59:59 2014 GMT
+        Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=security-tracker.debian.org
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
+                Public-Key: (2048 bit)
+                Modulus:
                     00:d4:79:fb:ed:e0:09:6f:fa:06:eb:b0:24:ba:6f:
                     69:5a:ae:aa:cc:9b:34:dd:fa:ad:55:d0:e1:cf:87:
                     f6:24:1f:1a:5d:3b:fe:9f:82:75:e5:3d:e0:96:fc:
@@ -32,356 +33,75 @@ Certificate:
                     83:45
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
-            X509v3 Basic Constraints: 
-                CA:FALSE
-            X509v3 Subject Key Identifier: 
-                43:CA:23:9F:AB:09:F4:1E:11:EB:EC:DC:F3:2B:2B:55:42:1B:90:18
             X509v3 Authority Key Identifier: 
-                keyid:A7:CF:4B:FA:5F:12:C6:23:74:2E:9E:A3:95:90:75:8C:CC:26:76:96
-                DirName:/C=US/ST=Indiana/L=Indianapolis/O=Software in the Public Interest/OU=hostmaster/CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
-                serial:03
+                keyid:B6:A8:FF:A2:A8:2F:D0:A6:CD:4B:B1:68:F3:E7:50:10:31:A7:79:21
 
-    Signature Algorithm: sha1WithRSAEncryption
-        70:d6:2d:cd:82:d8:fa:2d:c0:a4:e7:1f:db:c9:68:a7:64:29:
-        95:5f:5a:b1:ab:0b:ea:06:60:37:e8:d6:71:3a:20:5c:80:24:
-        36:47:f9:3c:c1:bf:26:53:8e:e0:cd:4d:55:3e:34:fd:29:38:
-        d6:94:25:59:50:b1:c0:6a:5e:ef:45:f8:fd:f9:20:c9:df:db:
-        45:30:16:92:ae:a7:04:77:bb:b6:36:8e:98:1f:2a:9d:40:7d:
-        25:7a:b5:52:fd:9b:f6:1d:c3:46:d7:12:e4:38:19:cb:ef:65:
-        ca:b6:86:14:a6:f6:4a:a7:73:6c:66:33:69:ac:9c:2b:93:56:
-        37:f9:c2:86:ac:6d:3c:82:64:05:fa:d0:ad:cb:45:d3:e1:b7:
-        af:e3:60:81:49:7a:ac:14:14:ed:78:de:74:ec:fa:d0:07:05:
-        56:23:e5:08:77:fc:ec:59:fb:8e:3d:54:37:ab:37:f9:8e:7f:
-        93:21:ba:a1:f9:b7:a6:38:f6:6f:7f:62:83:aa:30:65:68:fb:
-        2f:b8:d5:06:70:4d:ca:ec:7d:56:8d:2f:8f:50:b2:1c:a1:43:
-        6c:c1:c2:6b:c7:ea:08:b3:46:e4:3a:22:21:02:23:93:13:1b:
-        55:e3:4c:93:31:c4:44:2a:83:3b:f9:9e:13:1f:52:73:4f:a5:
-        c6:36:e5:1f:43:c7:24:3f:4e:3c:5c:8e:c6:a4:46:58:fb:4f:
-        db:6d:29:c0:9c:10:b2:84:e7:32:aa:a9:ce:f3:00:48:0b:a0:
-        62:95:bf:03:67:2b:95:06:75:c4:59:6d:fa:c8:e4:18:0b:ad:
-        9c:d9:a5:42:1e:97:c4:4b:f8:b0:1c:fa:bc:ba:b9:03:a7:b1:
-        c6:53:3c:94:83:e7:58:d1:47:b8:aa:3e:4f:a5:7a:0f:fc:cc:
-        4b:5e:1b:48:2b:37:29:36:dd:23:69:62:05:77:58:e9:07:8d:
-        44:5a:d1:82:40:12:c1:fd:38:4b:1f:b8:41:d5:c2:e3:37:38:
-        7f:5a:04:bf:1c:d5:2a:80:61:a4:e3:8a:a5:ce:75:56:87:3b:
-        32:aa:4c:d8:0f:46:9d:d7:57:ed:02:af:cc:1e:02:b6:f4:16:
-        ef:8a:fb:ad:d2:2a:4d:f3:ee:7f:21:2b:f1:e8:40:a0:e7:af:
-        1e:bd:e2:55:25:68:7c:88:8f:74:28:6c:57:e5:1e:aa:ae:00:
-        6d:7f:77:99:3e:6e:9c:11:ea:cf:db:1c:3b:07:fe:2c:d8:0f:
-        9d:dc:fb:e8:8e:ce:67:ac:59:8e:af:42:ab:f8:8e:d1:13:64:
-        5f:7e:70:d1:2c:6e:9c:1b:30:12:f7:6e:38:53:de:52:c0:61:
-        57:aa:80:dd:a5:a1:cf:c9
------BEGIN CERTIFICATE-----
-MIIFRzCCAy+gAwIBAgIBWjANBgkqhkiG9w0BAQUFADBRMQ8wDQYDVQQKEwZEZWJp
-YW4xFjAUBgNVBAMTDWNhLmRlYmlhbi5vcmcxJjAkBgkqhkiG9w0BCQEWF2RlYmlh
-bi1hZG1pbkBkZWJpYW4ub3JnMB4XDTEyMTIwNzE3MDAyMFoXDTEzMTIwNzE3MDAy
-MFowXzEPMA0GA1UEChMGRGViaWFuMSQwIgYDVQQDExtzZWN1cml0eS10cmFja2Vy
-LmRlYmlhbi5vcmcxJjAkBgkqhkiG9w0BCQEWF2RlYmlhbi1hZG1pbkBkZWJpYW4u
-b3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hn77eAJb/oG67Ak
-um9pWq6qzJs03fqtVdDhz4f2JB8aXTv+n4J15T3glvy7hYvGClGIeJc5atLtPjyO
-Fced+APR25PthmrlRgXPhS5DXe+W7MJDtGvNbqlFJai6RSzCSF/CrkDO0Wb/bUtA
-J5s9uVzxRuyiR8hZm4CWj3b0LKsOFKOUL/jWVyGVWkqNnWk+B0BLFap45FSsxwmS
-m4vOlVDpQIBQNiRfGiVvi3dXPzornnH6Ys/5A+BHiIzvENNsWrITOf40jasdpvCK
-aUiKtkrzyf3SZzYjV8bZ2scvg54JmlOQ6Qn5ZukLFuS8K71rUneiJ1u6x3N2SUA9
-mgaDRQIDAQABo4IBGjCCARYwCQYDVR0TBAIwADAdBgNVHQ4EFgQUQ8ojn6sJ9B4R
-6+zc8ysrVUIbkBgwgekGA1UdIwSB4TCB3oAUp89L+l8SxiN0Lp6jlZB1jMwmdpah
-gcKkgb8wgbwxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdJbmRpYW5hMRUwEwYDVQQH
-EwxJbmRpYW5hcG9saXMxKDAmBgNVBAoTH1NvZnR3YXJlIGluIHRoZSBQdWJsaWMg
-SW50ZXJlc3QxEzARBgNVBAsTCmhvc3RtYXN0ZXIxHjAcBgNVBAMTFUNlcnRpZmlj
-YXRlIEF1dGhvcml0eTElMCMGCSqGSIb3DQEJARYWaG9zdG1hc3RlckBzcGktaW5j
-Lm9yZ4IBAzANBgkqhkiG9w0BAQUFAAOCAgEAcNYtzYLY+i3ApOcf28lop2QplV9a
-sasL6gZgN+jWcTogXIAkNkf5PMG/JlOO4M1NVT40/Sk41pQlWVCxwGpe70X4/fkg
-yd/bRTAWkq6nBHe7tjaOmB8qnUB9JXq1Uv2b9h3DRtcS5DgZy+9lyraGFKb2Sqdz
-bGYzaaycK5NWN/nChqxtPIJkBfrQrctF0+G3r+NggUl6rBQU7XjedOz60AcFViPl
-CHf87Fn7jj1UN6s3+Y5/kyG6ofm3pjj2b39ig6owZWj7L7jVBnBNyux9Vo0vj1Cy
-HKFDbMHCa8fqCLNG5DoiIQIjkxMbVeNMkzHERCqDO/meEx9Sc0+lxjblH0PHJD9O
-PFyOxqRGWPtP220pwJwQsoTnMqqpzvMASAugYpW/A2crlQZ1xFlt+sjkGAutnNml
-Qh6XxEv4sBz6vLq5A6exxlM8lIPnWNFHuKo+T6V6D/zMS14bSCs3KTbdI2liBXdY
-6QeNRFrRgkASwf04Sx+4QdXC4zc4f1oEvxzVKoBhpOOKpc51Voc7MqpM2A9GnddX
-7QKvzB4CtvQW74r7rdIqTfPufyEr8ehAoOevHr3iVSVofIiPdChsV+Ueqq4AbX93
-mT5unBHqz9scOwf+LNgPndz76I7OZ6xZjq9Cq/iO0RNkX35w0SxunBswEvduOFPe
-UsBhV6qA3aWhz8k=
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 3 (0x3)
-        Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C=US, ST=Indiana, L=Indianapolis, O=Software in the Public Interest, OU=hostmaster, CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
-        Validity
-            Not Before: May 13 09:13:20 2008 GMT
-            Not After : May 10 09:13:20 2018 GMT
-        Subject: O=Debian, CN=ca.debian.org/emailAddress=debian-admin@debian.org
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-            RSA Public Key: (4096 bit)
-                Modulus (4096 bit):
-                    00:aa:3b:3e:a5:9f:47:1a:da:5f:b0:18:b0:11:62:
-                    3b:84:d6:01:22:8b:4d:31:fb:d7:5b:11:96:21:d5:
-                    d7:aa:11:88:a2:29:b6:d4:b0:ab:f1:8c:40:86:1a:
-                    82:d3:38:71:c6:32:25:8a:26:3d:24:92:db:fd:95:
-                    8d:92:1f:87:fc:00:87:14:52:4e:69:80:e5:e0:3c:
-                    90:86:fe:64:3d:35:dc:f8:e9:29:25:64:c4:08:50:
-                    3e:be:38:83:65:06:a4:e6:30:9c:06:a5:08:18:73:
-                    1c:1a:62:e3:c6:be:17:20:0b:eb:38:cf:04:53:95:
-                    25:35:44:9e:b2:f1:64:a6:a7:d1:93:6a:b1:c4:bd:
-                    f5:28:ac:93:e0:fc:71:2f:f5:b7:02:c1:ca:40:27:
-                    4c:da:3c:81:2c:23:8e:58:3c:15:dc:e5:9f:5e:13:
-                    82:04:cc:5c:19:53:25:4e:76:bc:74:9e:4a:5d:26:
-                    b7:85:e3:0c:4f:60:fa:11:b7:3b:1c:fd:a8:cb:a7:
-                    cf:dc:26:0d:7d:08:a1:ea:6c:74:db:8e:1b:10:ca:
-                    6a:89:98:22:db:a0:ba:80:01:ad:a6:95:c8:db:bb:
-                    ec:9e:01:cd:23:81:9a:d3:60:28:4d:cd:39:d8:04:
-                    b2:ca:89:70:87:e9:f0:01:8e:2d:c8:73:75:a5:5b:
-                    5b:5c:62:9d:9a:97:df:3a:07:a4:e7:20:b8:9c:ac:
-                    77:39:2b:0a:9b:f7:08:29:80:19:bf:c2:38:dd:67:
-                    c3:f8:90:31:68:76:f6:e1:7b:4b:3b:07:e1:dc:92:
-                    77:fe:07:fd:d0:cc:fb:4c:27:ea:ae:ef:53:c5:94:
-                    6a:aa:e6:50:0f:71:aa:ba:48:dc:83:92:c4:bc:b3:
-                    96:4b:0d:25:e4:9b:1e:c2:a2:e7:92:29:1a:51:95:
-                    60:e3:de:c2:03:01:2f:20:2c:5d:b5:de:1f:25:b8:
-                    e8:96:b6:10:24:96:f8:c3:84:53:79:62:de:05:6d:
-                    21:01:db:08:46:e4:f3:c7:c3:34:4c:2e:78:7f:be:
-                    1d:36:7c:b1:7d:8e:d2:b1:c9:6b:19:30:83:83:ff:
-                    fe:8d:02:29:35:a4:62:75:49:19:b5:36:ce:40:4f:
-                    13:86:21:f9:28:0f:21:3c:78:17:e3:af:10:0d:89:
-                    27:52:6d:ac:93:cb:5f:c3:ec:6d:7d:dd:d1:af:dd:
-                    4f:68:94:ca:82:2d:57:0e:76:54:ec:10:09:aa:98:
-                    f4:14:ad:12:2d:2d:f0:55:a7:70:13:95:87:fe:24:
-                    1c:1d:12:6f:74:c2:5b:61:de:00:15:99:05:03:c8:
-                    6e:66:aa:54:83:74:1b:49:fc:e6:56:15:7a:3a:ed:
-                    32:89:f1
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: 
-                CA:TRUE
             X509v3 Subject Key Identifier: 
-                A7:CF:4B:FA:5F:12:C6:23:74:2E:9E:A3:95:90:75:8C:CC:26:76:96
-            X509v3 Authority Key Identifier: 
-                keyid:34:71:D1:38:D7:15:36:83:47:6B:D7:37:64:42:3B:8E:8D:52:9D:AB
-                DirName:/C=US/ST=Indiana/L=Indianapolis/O=Software in the Public Interest/OU=hostmaster/CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
-                serial:E8:8E:B6:C9:F8:2A:14:28
+                43:CA:23:9F:AB:09:F4:1E:11:EB:EC:DC:F3:2B:2B:55:42:1B:90:18
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.6449.1.2.2.26
+                  CPS: http://www.gandi.net/contracts/fr/ssl/cps/pdf/
+                Policy: 2.23.140.1.2.1
 
-            Netscape CA Revocation Url: 
-                http://ca.debian.org/ca-crl.pem
-    Signature Algorithm: sha1WithRSAEncryption
-        2c:ac:39:e7:26:5f:c8:94:d9:42:35:6d:8d:7e:d6:a1:90:90:
-        eb:bf:fb:75:f2:21:56:90:00:35:f2:00:64:e8:1e:7f:32:55:
-        15:03:9a:3e:d1:a3:70:36:8a:76:bb:3c:f0:19:73:a1:84:ce:
-        e4:ac:15:d7:64:eb:eb:6d:83:3d:fa:3a:8f:e2:d7:3b:c2:ec:
-        03:70:0e:66:e0:27:df:88:12:7c:8e:8b:8d:9f:69:6c:fa:3c:
-        86:a8:85:24:ac:ae:5f:68:c6:84:7a:35:4c:67:85:8f:dd:b0:
-        02:73:4e:d6:a4:5c:b3:b2:cf:a1:e4:41:5d:74:03:b3:25:23:
-        b2:46:68:15:ae:ab:70:43:fb:66:08:e5:fd:86:4d:69:02:7d:
-        3a:a6:6e:e2:aa:9b:9d:27:ae:1b:d3:9f:01:c1:44:d5:0e:db:
-        fd:ef:20:01:88:51:06:89:00:c4:e1:16:5a:f2:c8:2d:4e:bb:
-        2d:a8:ff:85:25:4d:a4:bd:a7:47:bd:da:dc:d8:69:0f:d1:87:
-        cd:c7:0b:7a:e0:4b:48:57:8f:20:84:8b:c3:60:ee:c4:05:6f:
-        7b:34:e8:cb:11:4a:23:c6:ba:80:64:8b:49:01:25:f1:6a:04:
-        39:78:e5:bd:8e:7b:69:93:5b:91:02:07:bd:db:0e:8a:ec:22:
-        07:a2:1d:4b:a9:1d:fa:c3:16:fe:81:13:d4:b2:b5:2f:eb:3a:
-        68:d0:5a:02:e1:be:d6:e8:df:dd:3c:ac:e3:9a:f8:70:7f:8c:
-        e3:6d:61:d3:70:a0:a7:5b:e0:a3:f1:8d:cd:08:f9:a0:51:74:
-        81:9e:a7:ec:25:7b:18:2c:02:8c:65:53:fa:75:5f:dd:8d:58:
-        11:4e:ff:6b:08:cf:19:a5:eb:29:cd:39:ef:7a:6a:a2:c6:23:
-        eb:ac:71:d3:c8:ed:f2:b6:a5:de:0e:14:90:fa:74:e1:ec:e6:
-        0d:70:bc:86:11:80:ca:bf:c3:67:2f:c9:9d:38:3c:d0:4c:24:
-        49:51:a5:49:8e:1d:85:38:c2:f6:ca:0f:b9:f7:15:f8:04:bb:
-        90:11:e9:f0:ff:37:bb:0b:0f:b9:e6:f6:a6:31:6e:ed:c2:f1:
-        2c:bb:2b:1e:e6:cb:4a:31:5d:96:cb:4c:b2:d7:d4:0b:2d:be:
-        b2:3d:9f:86:85:4e:58:dd:c9:b4:ab:cc:f5:54:c2:02:38:01:
-        cf:74:a9:71:3f:93:e8:ca:c4:77:d0:6c:e2:18:65:2c:b8:60:
-        ec:a8:6b:e8:8a:e8:2b:6d:40:1e:cd:9f:f4:8a:ad:28:83:d1:
-        35:62:05:39:01:db:ec:90:b0:db:fd:bc:72:c1:a6:11:c3:b0:
-        e2:0d:0e:3f:ca:73:04:42
------BEGIN CERTIFICATE-----
-MIIG4DCCBMigAwIBAgIBAzANBgkqhkiG9w0BAQUFADCBvDELMAkGA1UEBhMCVVMx
-EDAOBgNVBAgTB0luZGlhbmExFTATBgNVBAcTDEluZGlhbmFwb2xpczEoMCYGA1UE
-ChMfU29mdHdhcmUgaW4gdGhlIFB1YmxpYyBJbnRlcmVzdDETMBEGA1UECxMKaG9z
-dG1hc3RlcjEeMBwGA1UEAxMVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MSUwIwYJKoZI
-hvcNAQkBFhZob3N0bWFzdGVyQHNwaS1pbmMub3JnMB4XDTA4MDUxMzA5MTMyMFoX
-DTE4MDUxMDA5MTMyMFowUTEPMA0GA1UEChMGRGViaWFuMRYwFAYDVQQDEw1jYS5k
-ZWJpYW4ub3JnMSYwJAYJKoZIhvcNAQkBFhdkZWJpYW4tYWRtaW5AZGViaWFuLm9y
-ZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKo7PqWfRxraX7AYsBFi
-O4TWASKLTTH711sRliHV16oRiKIpttSwq/GMQIYagtM4ccYyJYomPSSS2/2VjZIf
-h/wAhxRSTmmA5eA8kIb+ZD013PjpKSVkxAhQPr44g2UGpOYwnAalCBhzHBpi48a+
-FyAL6zjPBFOVJTVEnrLxZKan0ZNqscS99Sisk+D8cS/1twLBykAnTNo8gSwjjlg8
-Fdzln14TggTMXBlTJU52vHSeSl0mt4XjDE9g+hG3Oxz9qMunz9wmDX0IoepsdNuO
-GxDKaomYItuguoABraaVyNu77J4BzSOBmtNgKE3NOdgEssqJcIfp8AGOLchzdaVb
-W1xinZqX3zoHpOcguJysdzkrCpv3CCmAGb/CON1nw/iQMWh29uF7SzsH4dySd/4H
-/dDM+0wn6q7vU8WUaqrmUA9xqrpI3IOSxLyzlksNJeSbHsKi55IpGlGVYOPewgMB
-LyAsXbXeHyW46Ja2ECSW+MOEU3li3gVtIQHbCEbk88fDNEwueH++HTZ8sX2O0rHJ
-axkwg4P//o0CKTWkYnVJGbU2zkBPE4Yh+SgPITx4F+OvEA2JJ1JtrJPLX8PsbX3d
-0a/dT2iUyoItVw52VOwQCaqY9BStEi0t8FWncBOVh/4kHB0Sb3TCW2HeABWZBQPI
-bmaqVIN0G0n85lYVejrtMonxAgMBAAGjggFVMIIBUTAMBgNVHRMEBTADAQH/MB0G
-A1UdDgQWBBSnz0v6XxLGI3QunqOVkHWMzCZ2ljCB8QYDVR0jBIHpMIHmgBQ0cdE4
-1xU2g0dr1zdkQjuOjVKdq6GBwqSBvzCBvDELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
-B0luZGlhbmExFTATBgNVBAcTDEluZGlhbmFwb2xpczEoMCYGA1UEChMfU29mdHdh
-cmUgaW4gdGhlIFB1YmxpYyBJbnRlcmVzdDETMBEGA1UECxMKaG9zdG1hc3RlcjEe
-MBwGA1UEAxMVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MSUwIwYJKoZIhvcNAQkBFhZo
-b3N0bWFzdGVyQHNwaS1pbmMub3JnggkA6I62yfgqFCgwLgYJYIZIAYb4QgEEBCEW
-H2h0dHA6Ly9jYS5kZWJpYW4ub3JnL2NhLWNybC5wZW0wDQYJKoZIhvcNAQEFBQAD
-ggIBACysOecmX8iU2UI1bY1+1qGQkOu/+3XyIVaQADXyAGToHn8yVRUDmj7Ro3A2
-ina7PPAZc6GEzuSsFddk6+ttgz36Oo/i1zvC7ANwDmbgJ9+IEnyOi42faWz6PIao
-hSSsrl9oxoR6NUxnhY/dsAJzTtakXLOyz6HkQV10A7MlI7JGaBWuq3BD+2YI5f2G
-TWkCfTqmbuKqm50nrhvTnwHBRNUO2/3vIAGIUQaJAMThFlryyC1Ouy2o/4UlTaS9
-p0e92tzYaQ/Rh83HC3rgS0hXjyCEi8Ng7sQFb3s06MsRSiPGuoBki0kBJfFqBDl4
-5b2Oe2mTW5ECB73bDorsIgeiHUupHfrDFv6BE9SytS/rOmjQWgLhvtbo3908rOOa
-+HB/jONtYdNwoKdb4KPxjc0I+aBRdIGep+wlexgsAoxlU/p1X92NWBFO/2sIzxml
-6ynNOe96aqLGI+uscdPI7fK2pd4OFJD6dOHs5g1wvIYRgMq/w2cvyZ04PNBMJElR
-pUmOHYU4wvbKD7n3FfgEu5AR6fD/N7sLD7nm9qYxbu3C8Sy7Kx7my0oxXZbLTLLX
-1AstvrI9n4aFTljdybSrzPVUwgI4Ac90qXE/k+jKxHfQbOIYZSy4YOyoa+iK6Ctt
-QB7Nn/SKrSiD0TViBTkB2+yQsNv9vHLBphHDsOINDj/KcwRC
------END CERTIFICATE-----
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            e8:8e:b6:c9:f8:2a:14:28
-        Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C=US, ST=Indiana, L=Indianapolis, O=Software in the Public Interest, OU=hostmaster, CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
-        Validity
-            Not Before: May 13 08:07:56 2008 GMT
-            Not After : May 11 08:07:56 2018 GMT
-        Subject: C=US, ST=Indiana, L=Indianapolis, O=Software in the Public Interest, OU=hostmaster, CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-            RSA Public Key: (4096 bit)
-                Modulus (4096 bit):
-                    00:dc:36:e6:47:42:c2:c4:51:75:29:87:40:c3:d8:
-                    8e:21:06:d2:18:4e:eb:ef:20:bd:90:3c:85:10:13:
-                    8c:29:5b:94:63:f6:f4:2d:f1:06:42:91:b9:19:c4:
-                    42:69:08:bf:8b:36:45:ea:28:05:33:49:48:a0:27:
-                    43:93:35:8a:41:d8:78:b3:f0:ef:b3:6e:2d:dd:d1:
-                    cb:7d:ea:f4:75:26:d3:3e:90:3a:ee:d7:e7:2c:04:
-                    b5:7c:e1:f5:7c:c5:4e:ef:77:bd:5c:a2:93:33:92:
-                    ce:7d:81:48:cf:6b:b5:22:2c:08:83:fd:d3:d5:cf:
-                    3b:2d:fd:b5:49:90:5b:f6:ad:4d:13:ca:de:d3:a6:
-                    9d:53:51:71:63:46:f8:4a:16:5c:98:ee:2d:6d:9a:
-                    16:a1:76:90:e2:60:43:99:d6:89:d6:6c:2e:7a:98:
-                    b2:0b:03:2c:e3:7a:4f:c7:dd:e3:cc:e3:4a:6a:8d:
-                    79:52:fa:f4:c1:af:2e:8f:2a:08:cb:1b:29:82:92:
-                    72:43:bc:ce:88:a9:aa:a7:8a:51:43:55:85:9a:37:
-                    03:78:93:c8:f0:bd:b4:41:c8:07:42:9a:cb:35:97:
-                    7a:8a:81:65:de:1d:54:08:01:f1:64:5c:b7:17:1a:
-                    51:bc:1e:c3:59:87:76:18:16:98:ee:bf:f6:67:81:
-                    8b:06:35:c5:4b:6d:59:19:c7:d2:c6:48:be:6e:14:
-                    28:83:4a:10:9c:1b:f5:6f:bc:a9:8e:f5:69:fe:b2:
-                    c1:55:cc:e7:14:c9:f9:5b:14:53:51:07:ea:ce:3d:
-                    e4:4f:28:1f:3c:61:09:d7:33:d2:6e:a7:6e:d4:c7:
-                    13:09:6f:6b:5d:14:ee:9d:89:1b:a5:6a:f2:f6:f8:
-                    d0:72:8e:ea:72:1f:2f:34:6a:29:0a:c5:0a:ec:1c:
-                    40:85:12:f7:a6:a5:d3:4f:ad:c0:85:8c:4c:7c:73:
-                    20:cc:53:18:f1:b2:58:4c:01:f5:bf:ea:64:d5:5c:
-                    39:c5:ce:6c:cc:53:5a:56:ba:41:0f:25:df:6b:50:
-                    b6:c7:8a:a0:bd:02:c2:c5:3b:55:a5:b2:64:22:84:
-                    51:28:56:ae:31:ee:5e:fb:0b:16:4d:46:05:91:80:
-                    44:ed:ac:6d:f0:57:a8:fa:eb:61:48:a0:cb:1b:b3:
-                    1f:8e:cd:c5:21:77:03:84:1e:fc:ac:a3:43:08:63:
-                    8c:ed:f9:27:ef:b4:b0:5d:67:d6:4f:ed:d0:8b:3e:
-                    5d:5b:c9:91:bd:96:02:84:3d:c5:4d:bc:42:3f:74:
-                    fd:3c:5d:ac:5c:48:36:5e:87:31:2f:18:6c:c4:68:
-                    ee:a1:8b:c9:59:d0:18:e3:00:80:b3:54:27:2e:99:
-                    f0:15:53
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Subject Key Identifier: 
-                34:71:D1:38:D7:15:36:83:47:6B:D7:37:64:42:3B:8E:8D:52:9D:AB
-            X509v3 Authority Key Identifier: 
-                keyid:34:71:D1:38:D7:15:36:83:47:6B:D7:37:64:42:3B:8E:8D:52:9D:AB
-                DirName:/C=US/ST=Indiana/L=Indianapolis/O=Software in the Public Interest/OU=hostmaster/CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
-                serial:E8:8E:B6:C9:F8:2A:14:28
+            X509v3 CRL Distribution Points: 
 
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            Netscape Cert Type: 
-                SSL CA, S/MIME CA, Object Signing CA
-            X509v3 Issuer Alternative Name: 
-                <EMPTY>
+                Full Name:
+                  URI:http://crl.gandi.net/GandiStandardSSLCA.crl
+
+            Authority Information Access: 
+                CA Issuers - URI:http://crt.gandi.net/GandiStandardSSLCA.crt
+                OCSP - URI:http://ocsp.gandi.net
 
-            Netscape Comment: 
-                Software in the Public Interest
-            Netscape CA Revocation Url: 
-                https://ca.spi-inc.org/ca-crl.pem
-            Netscape Revocation Url: 
-                https://ca.spi-inc.org/cert-crl.pem
             X509v3 Subject Alternative Name: 
-                email:hostmaster@spi-inc.org
-            X509v3 Key Usage: critical
-                Certificate Sign, CRL Sign
+                DNS:security-tracker.debian.org, DNS:www.security-tracker.debian.org
     Signature Algorithm: sha1WithRSAEncryption
-        b4:cd:bd:e0:b9:ea:b2:03:2b:7e:32:e9:de:72:3f:c9:4b:82:
-        5e:9d:e2:af:55:09:a2:0c:54:e8:cf:18:3c:28:20:1d:a9:bb:
-        03:02:2f:52:39:22:f9:17:cf:ad:67:90:b3:03:7f:d8:15:e3:
-        6b:7e:bb:9b:56:01:af:35:d4:da:b9:c7:67:17:9b:d4:d5:0e:
-        37:b3:20:41:2e:0c:01:c4:5b:f9:65:3e:c2:61:e8:d2:f0:6a:
-        95:70:c3:c6:6f:d5:35:a4:ac:59:72:e1:89:df:a1:a0:9d:24:
-        bd:29:79:e9:61:2a:d9:d3:1e:c9:46:a4:08:78:41:92:72:0f:
-        ab:14:75:ed:09:f0:a2:f0:5c:ef:c3:0a:62:20:b7:c2:28:66:
-        ae:4c:2f:2e:8f:45:63:26:96:f0:ee:31:e6:8b:55:9b:aa:3a:
-        f9:82:39:1d:88:3c:e2:07:75:1a:e1:0f:b1:30:bc:71:32:d2:
-        3a:fe:fa:a1:89:f3:43:2c:d6:72:c4:79:a7:15:48:05:c0:d8:
-        2d:72:02:e3:cb:3d:16:6a:ba:c9:b8:11:10:e2:49:85:cc:96:
-        47:60:05:25:2e:ef:75:59:33:f5:47:19:16:ef:da:6c:5f:07:
-        c8:a6:50:b6:1d:cb:66:34:25:fc:66:83:eb:c5:b6:30:41:f8:
-        46:44:62:a8:c1:0c:54:e6:ea:4c:5a:28:e6:ae:c6:b7:fe:7f:
-        3b:96:a8:2e:ee:c7:68:3e:dd:00:3d:29:af:2a:63:ab:5f:ee:
-        49:2a:2d:c5:dc:fb:d1:c6:d3:d1:97:56:52:86:b6:94:eb:d4:
-        60:51:b7:fc:1e:9b:cc:02:9b:d4:1f:8f:f9:4a:8f:b6:2e:28:
-        3b:17:cc:c5:a6:05:e3:d2:d3:b5:c6:03:c9:e1:48:42:9b:cb:
-        3f:e4:17:e0:fe:0d:01:95:09:ba:b8:0d:71:e4:09:70:77:42:
-        d8:4d:e1:42:a9:60:83:d7:17:89:43:d2:d4:dd:a7:18:b6:ab:
-        d4:24:25:87:b5:d4:e2:fc:2e:22:69:bd:ad:68:2c:ff:72:b5:
-        98:aa:06:9c:e7:2a:6a:b8:a1:93:76:ce:b0:f3:7f:9c:e1:e0:
-        4f:b8:d8:86:46:a5:33:02:2c:25:61:37:2a:92:c8:ac:81:74:
-        68:63:87:33:76:bd:05:7f:5e:d5:d5:02:6d:bd:af:ff:2a:5a:
-        aa:49:ec:98:79:47:53:91:f6:0e:34:5a:c9:a5:c6:eb:b2:e3:
-        c5:ac:b6:a0:70:35:bb:c8:51:69:d0:f2:b5:a2:32:6e:bc:3f:
-        a0:37:39:7c:71:36:a6:05:df:0c:12:e4:16:a7:c5:d6:cb:63:
-        a3:95:70:3f:e6:04:a3:60
+         10:b2:4a:08:8e:d3:49:f4:d6:65:9a:fa:d3:22:03:fd:bc:18:
+         d1:db:fd:cb:91:58:c8:d9:83:10:f8:55:e0:41:c4:9a:87:d0:
+         e6:70:06:da:fc:ab:5a:6f:a9:ca:bf:62:80:b4:88:72:69:62:
+         b8:4c:6c:fe:62:3c:06:62:2f:1d:44:95:6c:7c:2c:d2:aa:ab:
+         2c:df:4e:72:eb:4a:c4:9e:fa:e1:ed:6a:29:43:60:0a:a5:23:
+         e1:d7:ec:b1:2c:b0:41:c3:98:0d:1a:3d:c2:49:4b:f6:8a:8d:
+         11:20:f9:d5:1c:cf:6b:98:7c:2b:08:6c:37:96:04:35:5c:ed:
+         92:17:6b:2e:bf:3d:9b:45:5b:1c:1e:f2:2a:37:c5:75:1c:f9:
+         fb:d1:ad:be:52:1d:4a:e8:35:45:f9:e4:b9:b6:10:dd:92:42:
+         f1:aa:c4:a5:04:49:db:94:5a:02:02:90:aa:54:49:a6:e4:39:
+         32:53:bc:a4:67:99:f6:7f:94:cc:0c:66:5b:d7:b4:70:37:07:
+         0c:22:7d:d8:b0:1c:84:cb:f9:a5:4e:19:16:8b:7d:c1:3c:7e:
+         dc:01:5c:02:51:4a:ea:a7:10:d8:2f:b0:87:4d:48:d1:07:42:
+         c0:a0:0d:cd:ca:29:31:0c:0a:5d:92:13:46:a7:6e:26:cc:a4:
+         7e:2f:e7:dc
 -----BEGIN CERTIFICATE-----
-MIIIDjCCBfagAwIBAgIJAOiOtsn4KhQoMA0GCSqGSIb3DQEBBQUAMIG8MQswCQYD
-VQQGEwJVUzEQMA4GA1UECBMHSW5kaWFuYTEVMBMGA1UEBxMMSW5kaWFuYXBvbGlz
-MSgwJgYDVQQKEx9Tb2Z0d2FyZSBpbiB0aGUgUHVibGljIEludGVyZXN0MRMwEQYD
-VQQLEwpob3N0bWFzdGVyMR4wHAYDVQQDExVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkx
-JTAjBgkqhkiG9w0BCQEWFmhvc3RtYXN0ZXJAc3BpLWluYy5vcmcwHhcNMDgwNTEz
-MDgwNzU2WhcNMTgwNTExMDgwNzU2WjCBvDELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
-B0luZGlhbmExFTATBgNVBAcTDEluZGlhbmFwb2xpczEoMCYGA1UEChMfU29mdHdh
-cmUgaW4gdGhlIFB1YmxpYyBJbnRlcmVzdDETMBEGA1UECxMKaG9zdG1hc3RlcjEe
-MBwGA1UEAxMVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MSUwIwYJKoZIhvcNAQkBFhZo
-b3N0bWFzdGVyQHNwaS1pbmMub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
-CgKCAgEA3DbmR0LCxFF1KYdAw9iOIQbSGE7r7yC9kDyFEBOMKVuUY/b0LfEGQpG5
-GcRCaQi/izZF6igFM0lIoCdDkzWKQdh4s/Dvs24t3dHLfer0dSbTPpA67tfnLAS1
-fOH1fMVO73e9XKKTM5LOfYFIz2u1IiwIg/3T1c87Lf21SZBb9q1NE8re06adU1Fx
-Y0b4ShZcmO4tbZoWoXaQ4mBDmdaJ1mwuepiyCwMs43pPx93jzONKao15Uvr0wa8u
-jyoIyxspgpJyQ7zOiKmqp4pRQ1WFmjcDeJPI8L20QcgHQprLNZd6ioFl3h1UCAHx
-ZFy3FxpRvB7DWYd2GBaY7r/2Z4GLBjXFS21ZGcfSxki+bhQog0oQnBv1b7ypjvVp
-/rLBVcznFMn5WxRTUQfqzj3kTygfPGEJ1zPSbqdu1McTCW9rXRTunYkbpWry9vjQ
-co7qch8vNGopCsUK7BxAhRL3pqXTT63AhYxMfHMgzFMY8bJYTAH1v+pk1Vw5xc5s
-zFNaVrpBDyXfa1C2x4qgvQLCxTtVpbJkIoRRKFauMe5e+wsWTUYFkYBE7axt8Feo
-+uthSKDLG7Mfjs3FIXcDhB78rKNDCGOM7fkn77SwXWfWT+3Qiz5dW8mRvZYChD3F
-TbxCP3T9PF2sXEg2XocxLxhsxGjuoYvJWdAY4wCAs1QnLpnwFVMCAwEAAaOCAg8w
-ggILMB0GA1UdDgQWBBQ0cdE41xU2g0dr1zdkQjuOjVKdqzCB8QYDVR0jBIHpMIHm
-gBQ0cdE41xU2g0dr1zdkQjuOjVKdq6GBwqSBvzCBvDELMAkGA1UEBhMCVVMxEDAO
-BgNVBAgTB0luZGlhbmExFTATBgNVBAcTDEluZGlhbmFwb2xpczEoMCYGA1UEChMf
-U29mdHdhcmUgaW4gdGhlIFB1YmxpYyBJbnRlcmVzdDETMBEGA1UECxMKaG9zdG1h
-c3RlcjEeMBwGA1UEAxMVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MSUwIwYJKoZIhvcN
-AQkBFhZob3N0bWFzdGVyQHNwaS1pbmMub3JnggkA6I62yfgqFCgwDwYDVR0TAQH/
-BAUwAwEB/zARBglghkgBhvhCAQEEBAMCAAcwCQYDVR0SBAIwADAuBglghkgBhvhC
-AQ0EIRYfU29mdHdhcmUgaW4gdGhlIFB1YmxpYyBJbnRlcmVzdDAwBglghkgBhvhC
-AQQEIxYhaHR0cHM6Ly9jYS5zcGktaW5jLm9yZy9jYS1jcmwucGVtMDIGCWCGSAGG
-+EIBAwQlFiNodHRwczovL2NhLnNwaS1pbmMub3JnL2NlcnQtY3JsLnBlbTAhBgNV
-HREEGjAYgRZob3N0bWFzdGVyQHNwaS1pbmMub3JnMA4GA1UdDwEB/wQEAwIBBjAN
-BgkqhkiG9w0BAQUFAAOCAgEAtM294LnqsgMrfjLp3nI/yUuCXp3ir1UJogxU6M8Y
-PCggHam7AwIvUjki+RfPrWeQswN/2BXja367m1YBrzXU2rnHZxeb1NUON7MgQS4M
-AcRb+WU+wmHo0vBqlXDDxm/VNaSsWXLhid+hoJ0kvSl56WEq2dMeyUakCHhBknIP
-qxR17QnwovBc78MKYiC3wihmrkwvLo9FYyaW8O4x5otVm6o6+YI5HYg84gd1GuEP
-sTC8cTLSOv76oYnzQyzWcsR5pxVIBcDYLXIC48s9Fmq6ybgREOJJhcyWR2AFJS7v
-dVkz9UcZFu/abF8HyKZQth3LZjQl/GaD68W2MEH4RkRiqMEMVObqTFoo5q7Gt/5/
-O5aoLu7HaD7dAD0prypjq1/uSSotxdz70cbT0ZdWUoa2lOvUYFG3/B6bzAKb1B+P
-+UqPti4oOxfMxaYF49LTtcYDyeFIQpvLP+QX4P4NAZUJurgNceQJcHdC2E3hQqlg
-g9cXiUPS1N2nGLar1CQlh7XU4vwuImm9rWgs/3K1mKoGnOcqarihk3bOsPN/nOHg
-T7jYhkalMwIsJWE3KpLIrIF0aGOHM3a9BX9e1dUCbb2v/ypaqknsmHlHU5H2DjRa
-yaXG67Ljxay2oHA1u8hRadDytaIybrw/oDc5fHE2pgXfDBLkFqfF1stjo5VwP+YE
-o2A=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 -----END CERTIFICATE-----