X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fssl%2Ffiles%2Fservicecerts%2Fsecurity-tracker.debian.org.crt;h=f2a98149bad6f745035b18090fa75c832add5507;hb=9a5d4883f655c1aad8514f18bf37e03f649f26ee;hp=dcacffe8c8bd7ada9077a9f1f680723e58601207;hpb=c31b298ec26b71b73954f46161fa57b949b46639;p=mirror%2Fdsa-puppet.git

diff --git a/modules/ssl/files/servicecerts/security-tracker.debian.org.crt b/modules/ssl/files/servicecerts/security-tracker.debian.org.crt
index dcacffe8c..f2a98149b 100644
--- a/modules/ssl/files/servicecerts/security-tracker.debian.org.crt
+++ b/modules/ssl/files/servicecerts/security-tracker.debian.org.crt
@@ -1,104 +1,119 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 90 (0x5a)
-        Signature Algorithm: sha1WithRSAEncryption
-        Issuer: O=Debian, CN=ca.debian.org/emailAddress=debian-admin@debian.org
+        Serial Number:
+            15:7e:17:02:3c:7f:e0:48:09:cb:d7:96:ec:08:96:b5
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=FR, ST=Paris, L=Paris, O=Gandi, CN=Gandi Standard SSL CA 2
         Validity
-            Not Before: Dec  7 17:00:20 2012 GMT
-            Not After : Dec  7 17:00:20 2013 GMT
-        Subject: O=Debian, CN=security-tracker.debian.org/emailAddress=debian-admin@debian.org
+            Not Before: Dec 11 00:00:00 2015 GMT
+            Not After : Jan 20 23:59:59 2017 GMT
+        Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=security-tracker.debian.org
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:d4:79:fb:ed:e0:09:6f:fa:06:eb:b0:24:ba:6f:
-                    69:5a:ae:aa:cc:9b:34:dd:fa:ad:55:d0:e1:cf:87:
-                    f6:24:1f:1a:5d:3b:fe:9f:82:75:e5:3d:e0:96:fc:
-                    bb:85:8b:c6:0a:51:88:78:97:39:6a:d2:ed:3e:3c:
-                    8e:15:c7:9d:f8:03:d1:db:93:ed:86:6a:e5:46:05:
-                    cf:85:2e:43:5d:ef:96:ec:c2:43:b4:6b:cd:6e:a9:
-                    45:25:a8:ba:45:2c:c2:48:5f:c2:ae:40:ce:d1:66:
-                    ff:6d:4b:40:27:9b:3d:b9:5c:f1:46:ec:a2:47:c8:
-                    59:9b:80:96:8f:76:f4:2c:ab:0e:14:a3:94:2f:f8:
-                    d6:57:21:95:5a:4a:8d:9d:69:3e:07:40:4b:15:aa:
-                    78:e4:54:ac:c7:09:92:9b:8b:ce:95:50:e9:40:80:
-                    50:36:24:5f:1a:25:6f:8b:77:57:3f:3a:2b:9e:71:
-                    fa:62:cf:f9:03:e0:47:88:8c:ef:10:d3:6c:5a:b2:
-                    13:39:fe:34:8d:ab:1d:a6:f0:8a:69:48:8a:b6:4a:
-                    f3:c9:fd:d2:67:36:23:57:c6:d9:da:c7:2f:83:9e:
-                    09:9a:53:90:e9:09:f9:66:e9:0b:16:e4:bc:2b:bd:
-                    6b:52:77:a2:27:5b:ba:c7:73:76:49:40:3d:9a:06:
-                    83:45
+                Public-Key: (3072 bit)
+                Modulus:
+                    00:cf:fd:ef:f2:c5:2a:7a:da:d2:07:2c:21:c9:89:
+                    e4:21:0e:f6:c8:72:b2:15:90:fe:5c:d9:b7:1a:5b:
+                    83:f4:84:e7:a3:d6:95:cf:c5:d1:57:dd:a9:ac:67:
+                    23:27:c8:a6:1a:73:20:f4:c9:a2:23:67:50:e7:df:
+                    49:20:3f:01:3d:2c:3a:95:50:a3:98:80:e8:c5:81:
+                    54:de:74:e9:99:24:0a:33:63:e2:5f:13:16:63:27:
+                    45:bc:e8:2a:5a:2e:40:d2:85:99:dd:54:ff:07:53:
+                    90:f6:02:83:e1:5d:23:79:14:1c:14:7f:64:09:be:
+                    92:66:8c:7f:4c:3d:a9:c6:57:b9:70:a0:83:b3:e8:
+                    f3:ec:cc:2a:e3:7b:4d:7c:fd:c5:c5:ca:7b:c5:99:
+                    0d:39:b2:a1:05:49:6e:38:57:4c:4b:9b:e0:36:a4:
+                    bf:cb:2e:b5:76:bd:c5:c3:11:48:a0:06:38:e2:a4:
+                    ed:47:92:2c:72:4c:ce:c9:12:39:94:c7:bc:7e:7f:
+                    82:bb:72:e8:f4:50:57:8f:a7:5a:ab:40:b0:7b:79:
+                    b9:50:28:7a:ce:be:96:38:79:e3:ce:25:6e:c9:dd:
+                    c4:15:22:cd:9b:77:97:cb:54:9d:46:9c:50:a8:c2:
+                    4b:c9:62:c1:42:d4:b2:7f:0d:54:31:85:51:e3:ca:
+                    5d:f1:9a:1f:68:ef:12:08:94:40:40:b0:1b:05:35:
+                    75:f3:e2:d5:ff:c3:46:3c:54:4e:2b:c3:2c:8e:e6:
+                    5b:78:de:36:ee:4c:83:c1:75:5d:06:0b:ff:8c:80:
+                    ac:a7:fe:f6:21:9c:94:ca:f9:13:02:cb:31:4a:2b:
+                    49:26:fd:f1:3c:ad:bd:c6:b6:93:c5:6a:e6:6f:bb:
+                    e4:88:5e:8c:0d:bf:4f:2a:12:59:9b:ae:2d:36:f1:
+                    31:db:e5:0f:25:05:99:2e:ad:ba:76:19:2b:49:e3:
+                    76:81:b8:91:f8:89:b8:92:db:7c:8f:3f:15:d3:eb:
+                    b8:e3:19:58:6b:c5:8f:a8:51:d1
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
-            X509v3 Basic Constraints: 
-                CA:FALSE
-            X509v3 Subject Key Identifier: 
-                43:CA:23:9F:AB:09:F4:1E:11:EB:EC:DC:F3:2B:2B:55:42:1B:90:18
             X509v3 Authority Key Identifier: 
-                keyid:A7:CF:4B:FA:5F:12:C6:23:74:2E:9E:A3:95:90:75:8C:CC:26:76:96
-                DirName:/C=US/ST=Indiana/L=Indianapolis/O=Software in the Public Interest/OU=hostmaster/CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
-                serial:03
+                keyid:B3:90:A7:D8:C9:AF:4E:CD:61:3C:9F:7C:AD:5D:7F:41:FD:69:30:EA
+
+            X509v3 Subject Key Identifier: 
+                EE:8D:2D:52:28:5E:D4:85:53:F2:6C:13:2A:72:6D:21:07:4D:B7:F5
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.6449.1.2.2.26
+                  CPS: https://cps.usertrust.com
+                Policy: 2.23.140.1.2.1
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://crl.usertrust.com/GandiStandardSSLCA2.crl
+
+            Authority Information Access: 
+                CA Issuers - URI:http://crt.usertrust.com/GandiStandardSSLCA2.crt
+                OCSP - URI:http://ocsp.usertrust.com
 
-    Signature Algorithm: sha1WithRSAEncryption
-        70:d6:2d:cd:82:d8:fa:2d:c0:a4:e7:1f:db:c9:68:a7:64:29:
-        95:5f:5a:b1:ab:0b:ea:06:60:37:e8:d6:71:3a:20:5c:80:24:
-        36:47:f9:3c:c1:bf:26:53:8e:e0:cd:4d:55:3e:34:fd:29:38:
-        d6:94:25:59:50:b1:c0:6a:5e:ef:45:f8:fd:f9:20:c9:df:db:
-        45:30:16:92:ae:a7:04:77:bb:b6:36:8e:98:1f:2a:9d:40:7d:
-        25:7a:b5:52:fd:9b:f6:1d:c3:46:d7:12:e4:38:19:cb:ef:65:
-        ca:b6:86:14:a6:f6:4a:a7:73:6c:66:33:69:ac:9c:2b:93:56:
-        37:f9:c2:86:ac:6d:3c:82:64:05:fa:d0:ad:cb:45:d3:e1:b7:
-        af:e3:60:81:49:7a:ac:14:14:ed:78:de:74:ec:fa:d0:07:05:
-        56:23:e5:08:77:fc:ec:59:fb:8e:3d:54:37:ab:37:f9:8e:7f:
-        93:21:ba:a1:f9:b7:a6:38:f6:6f:7f:62:83:aa:30:65:68:fb:
-        2f:b8:d5:06:70:4d:ca:ec:7d:56:8d:2f:8f:50:b2:1c:a1:43:
-        6c:c1:c2:6b:c7:ea:08:b3:46:e4:3a:22:21:02:23:93:13:1b:
-        55:e3:4c:93:31:c4:44:2a:83:3b:f9:9e:13:1f:52:73:4f:a5:
-        c6:36:e5:1f:43:c7:24:3f:4e:3c:5c:8e:c6:a4:46:58:fb:4f:
-        db:6d:29:c0:9c:10:b2:84:e7:32:aa:a9:ce:f3:00:48:0b:a0:
-        62:95:bf:03:67:2b:95:06:75:c4:59:6d:fa:c8:e4:18:0b:ad:
-        9c:d9:a5:42:1e:97:c4:4b:f8:b0:1c:fa:bc:ba:b9:03:a7:b1:
-        c6:53:3c:94:83:e7:58:d1:47:b8:aa:3e:4f:a5:7a:0f:fc:cc:
-        4b:5e:1b:48:2b:37:29:36:dd:23:69:62:05:77:58:e9:07:8d:
-        44:5a:d1:82:40:12:c1:fd:38:4b:1f:b8:41:d5:c2:e3:37:38:
-        7f:5a:04:bf:1c:d5:2a:80:61:a4:e3:8a:a5:ce:75:56:87:3b:
-        32:aa:4c:d8:0f:46:9d:d7:57:ed:02:af:cc:1e:02:b6:f4:16:
-        ef:8a:fb:ad:d2:2a:4d:f3:ee:7f:21:2b:f1:e8:40:a0:e7:af:
-        1e:bd:e2:55:25:68:7c:88:8f:74:28:6c:57:e5:1e:aa:ae:00:
-        6d:7f:77:99:3e:6e:9c:11:ea:cf:db:1c:3b:07:fe:2c:d8:0f:
-        9d:dc:fb:e8:8e:ce:67:ac:59:8e:af:42:ab:f8:8e:d1:13:64:
-        5f:7e:70:d1:2c:6e:9c:1b:30:12:f7:6e:38:53:de:52:c0:61:
-        57:aa:80:dd:a5:a1:cf:c9
+            X509v3 Subject Alternative Name: 
+                DNS:security-tracker.debian.org, DNS:www.security-tracker.debian.org
+    Signature Algorithm: sha256WithRSAEncryption
+         58:63:6e:65:2e:4a:81:f4:43:1f:5b:a2:69:6a:cb:25:e5:00:
+         6d:82:e8:08:0d:bc:a6:eb:46:a9:26:f3:b5:6f:d2:e3:29:0d:
+         68:1b:07:80:8e:56:d3:fb:1d:16:68:4e:a8:4e:a5:ba:7f:6a:
+         6b:1f:b7:de:25:5d:1d:6d:5d:6f:81:0d:ce:24:35:1e:17:90:
+         bb:28:40:5c:f7:21:07:5a:77:07:07:cb:7e:bf:6f:05:f5:0d:
+         11:b7:02:79:1f:ed:d4:40:f1:1b:c5:4c:ef:fc:4e:d9:be:31:
+         f1:bc:ce:7c:07:38:d6:83:6d:1d:2b:43:a7:ce:a5:4b:3a:ba:
+         35:84:af:62:7a:90:fa:e7:ec:1c:92:ba:38:b1:f4:ec:75:26:
+         a4:39:9d:bd:c6:36:ce:62:e3:47:49:de:b5:60:79:2e:f4:bb:
+         b7:ff:19:98:e4:14:4b:cd:8c:73:40:67:b0:3b:b6:7f:37:ec:
+         bb:10:cb:20:b1:49:65:f5:db:74:c8:c6:19:d0:88:07:75:05:
+         75:d9:1d:23:7e:e1:9d:b1:ea:7c:47:b4:0d:f2:03:66:45:85:
+         11:b4:19:c6:96:e2:72:dc:59:17:67:98:d1:35:5a:41:78:cf:
+         6d:c1:db:68:b0:0a:f6:56:b3:88:74:dd:1b:2b:a0:de:c6:0b:
+         3e:7d:58:c5
 -----BEGIN CERTIFICATE-----
-MIIFRzCCAy+gAwIBAgIBWjANBgkqhkiG9w0BAQUFADBRMQ8wDQYDVQQKEwZEZWJp
-YW4xFjAUBgNVBAMTDWNhLmRlYmlhbi5vcmcxJjAkBgkqhkiG9w0BCQEWF2RlYmlh
-bi1hZG1pbkBkZWJpYW4ub3JnMB4XDTEyMTIwNzE3MDAyMFoXDTEzMTIwNzE3MDAy
-MFowXzEPMA0GA1UEChMGRGViaWFuMSQwIgYDVQQDExtzZWN1cml0eS10cmFja2Vy
-LmRlYmlhbi5vcmcxJjAkBgkqhkiG9w0BCQEWF2RlYmlhbi1hZG1pbkBkZWJpYW4u
-b3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hn77eAJb/oG67Ak
-um9pWq6qzJs03fqtVdDhz4f2JB8aXTv+n4J15T3glvy7hYvGClGIeJc5atLtPjyO
-Fced+APR25PthmrlRgXPhS5DXe+W7MJDtGvNbqlFJai6RSzCSF/CrkDO0Wb/bUtA
-J5s9uVzxRuyiR8hZm4CWj3b0LKsOFKOUL/jWVyGVWkqNnWk+B0BLFap45FSsxwmS
-m4vOlVDpQIBQNiRfGiVvi3dXPzornnH6Ys/5A+BHiIzvENNsWrITOf40jasdpvCK
-aUiKtkrzyf3SZzYjV8bZ2scvg54JmlOQ6Qn5ZukLFuS8K71rUneiJ1u6x3N2SUA9
-mgaDRQIDAQABo4IBGjCCARYwCQYDVR0TBAIwADAdBgNVHQ4EFgQUQ8ojn6sJ9B4R
-6+zc8ysrVUIbkBgwgekGA1UdIwSB4TCB3oAUp89L+l8SxiN0Lp6jlZB1jMwmdpah
-gcKkgb8wgbwxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdJbmRpYW5hMRUwEwYDVQQH
-EwxJbmRpYW5hcG9saXMxKDAmBgNVBAoTH1NvZnR3YXJlIGluIHRoZSBQdWJsaWMg
-SW50ZXJlc3QxEzARBgNVBAsTCmhvc3RtYXN0ZXIxHjAcBgNVBAMTFUNlcnRpZmlj
-YXRlIEF1dGhvcml0eTElMCMGCSqGSIb3DQEJARYWaG9zdG1hc3RlckBzcGktaW5j
-Lm9yZ4IBAzANBgkqhkiG9w0BAQUFAAOCAgEAcNYtzYLY+i3ApOcf28lop2QplV9a
-sasL6gZgN+jWcTogXIAkNkf5PMG/JlOO4M1NVT40/Sk41pQlWVCxwGpe70X4/fkg
-yd/bRTAWkq6nBHe7tjaOmB8qnUB9JXq1Uv2b9h3DRtcS5DgZy+9lyraGFKb2Sqdz
-bGYzaaycK5NWN/nChqxtPIJkBfrQrctF0+G3r+NggUl6rBQU7XjedOz60AcFViPl
-CHf87Fn7jj1UN6s3+Y5/kyG6ofm3pjj2b39ig6owZWj7L7jVBnBNyux9Vo0vj1Cy
-HKFDbMHCa8fqCLNG5DoiIQIjkxMbVeNMkzHERCqDO/meEx9Sc0+lxjblH0PHJD9O
-PFyOxqRGWPtP220pwJwQsoTnMqqpzvMASAugYpW/A2crlQZ1xFlt+sjkGAutnNml
-Qh6XxEv4sBz6vLq5A6exxlM8lIPnWNFHuKo+T6V6D/zMS14bSCs3KTbdI2liBXdY
-6QeNRFrRgkASwf04Sx+4QdXC4zc4f1oEvxzVKoBhpOOKpc51Voc7MqpM2A9GnddX
-7QKvzB4CtvQW74r7rdIqTfPufyEr8ehAoOevHr3iVSVofIiPdChsV+Ueqq4AbX93
-mT5unBHqz9scOwf+LNgPndz76I7OZ6xZjq9Cq/iO0RNkX35w0SxunBswEvduOFPe
-UsBhV6qA3aWhz8k=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 -----END CERTIFICATE-----