X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fssl%2Ffiles%2Fservicecerts%2Fnm.debian.org.crt;h=af2994e7c15dec6c9e35a536e75a63d1fcc6b2d6;hb=ea0b23f4b3f02bf154c4aa8de6e21a601c1fd882;hp=74e9c9729ed950369a7593d4a37d84e1b315c511;hpb=e0b1a0b3ceb9347132b1eebf89ecd37998fe6c13;p=mirror%2Fdsa-puppet.git

diff --git a/modules/ssl/files/servicecerts/nm.debian.org.crt b/modules/ssl/files/servicecerts/nm.debian.org.crt
index 74e9c9729..af2994e7c 100644
--- a/modules/ssl/files/servicecerts/nm.debian.org.crt
+++ b/modules/ssl/files/servicecerts/nm.debian.org.crt
@@ -1,103 +1,118 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 100 (0x64)
-        Signature Algorithm: sha1WithRSAEncryption
-        Issuer: O=Debian, CN=ca.debian.org/emailAddress=debian-admin@debian.org
+        Serial Number:
+            6e:66:f3:bf:fa:81:51:fa:2d:d7:19:93:b5:98:6e:b0
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=FR, ST=Paris, L=Paris, O=Gandi, CN=Gandi Standard SSL CA 2
         Validity
-            Not Before: Mar 20 18:56:55 2013 GMT
-            Not After : Mar 20 18:56:55 2014 GMT
-        Subject: O=Debian, CN=nm.debian.org/emailAddress=debian-admin@debian.org
+            Not Before: Dec 11 00:00:00 2015 GMT
+            Not After : Jan 20 23:59:59 2017 GMT
+        Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=nm.debian.org
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:f2:3d:69:93:be:91:6b:60:1d:d4:96:73:f0:0f:
-                    7a:13:c6:94:25:9d:4c:ac:68:5f:ea:2a:22:24:90:
-                    84:c4:78:9b:5e:7c:4f:c9:20:84:48:80:dc:7f:ba:
-                    9e:9e:b5:38:17:89:2b:53:d2:b4:9d:05:2a:fc:47:
-                    18:62:7b:83:00:e5:57:fe:13:f4:8a:38:a6:07:c7:
-                    4e:5c:e0:76:7d:a3:45:a8:e3:ee:57:9b:52:6b:7f:
-                    80:02:f3:2f:4f:65:96:d4:89:be:5f:4b:0d:4c:8a:
-                    81:dc:33:85:8a:72:39:87:9a:5d:24:c6:cd:61:bf:
-                    95:ab:fd:32:ed:e2:4e:f8:79:88:db:cc:df:8a:5b:
-                    44:28:9d:94:57:f6:a1:45:f1:a8:ee:80:9a:e1:99:
-                    1d:28:45:95:61:69:9f:5f:ac:8d:87:a0:20:9b:5a:
-                    c5:1e:dc:79:17:71:52:eb:24:4c:ac:49:6f:e8:0c:
-                    20:96:1e:3f:a7:46:fe:d0:84:e9:1f:fb:b5:63:cf:
-                    5e:be:4f:08:74:bb:33:f8:6a:d2:1e:af:ad:f2:e2:
-                    46:71:69:34:2a:db:04:f9:c8:53:67:09:16:18:a5:
-                    b1:90:5f:a2:69:0d:fb:83:ee:4f:0a:81:f6:fe:73:
-                    38:e6:da:27:86:92:d3:1c:e0:05:98:31:93:56:39:
-                    cc:61
+                Public-Key: (3072 bit)
+                Modulus:
+                    00:ac:af:9a:d3:85:e3:d3:d6:9e:d4:41:d3:ee:46:
+                    d8:0b:94:73:41:7a:43:82:0d:7b:ed:f1:d9:51:42:
+                    dd:e3:91:c2:28:25:d0:e1:6c:ed:91:95:0a:36:a4:
+                    09:f2:9b:c6:0d:14:c3:c5:f7:72:30:1e:4f:4c:97:
+                    7b:31:81:a1:5d:80:24:76:20:2b:81:79:d4:d0:51:
+                    95:10:f4:24:a8:1c:d9:08:76:1e:9e:a6:db:51:c2:
+                    c4:66:27:45:64:7e:28:e0:8b:d2:e0:96:7c:08:da:
+                    47:c2:7f:d9:49:7f:33:39:80:c8:0c:c0:4e:d3:68:
+                    ec:7f:44:0a:a2:15:92:80:6b:3c:da:38:c0:e0:1a:
+                    86:b8:7b:7a:86:84:43:55:68:fa:32:af:60:0a:01:
+                    09:d4:07:47:f3:0c:90:85:f4:95:72:42:5c:7d:a7:
+                    c4:3f:06:a2:44:80:d0:d1:24:0a:b8:c3:81:5a:1b:
+                    25:fb:e1:55:6b:43:c6:3e:16:b5:de:dc:4e:98:f2:
+                    1c:a4:0c:7a:51:6d:7f:76:99:c6:70:90:53:33:6e:
+                    09:80:bd:f3:0d:e4:ce:2c:25:e5:5f:34:48:ed:64:
+                    e6:fd:25:f2:ba:15:1c:f0:e6:12:b2:ef:31:fd:0d:
+                    bd:ee:d8:1b:ef:d4:8f:1d:c6:2a:73:0d:77:30:8f:
+                    9e:dc:52:6d:85:c0:c9:6f:ec:ef:d1:fe:54:54:1d:
+                    69:3b:51:95:2c:d3:f2:db:66:80:73:7d:0d:b9:ec:
+                    4b:45:db:41:d3:d2:a1:90:35:e9:50:20:40:84:b2:
+                    a8:6b:94:1a:9e:70:8f:14:2c:96:32:c4:d3:07:61:
+                    10:89:82:b1:34:00:0d:33:ae:d3:a3:74:10:86:87:
+                    4b:ab:bc:a3:16:46:3d:64:83:38:aa:66:02:07:a6:
+                    87:1b:f0:28:7b:aa:79:a0:14:3f:5a:90:91:54:ed:
+                    f5:48:07:bb:3e:38:36:31:59:17:d7:25:dd:67:b1:
+                    a1:97:d3:33:41:c1:c0:40:c5:71
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
-            X509v3 Basic Constraints: 
-                CA:FALSE
-            X509v3 Subject Key Identifier: 
-                60:17:AC:0E:7A:FC:4A:92:0A:B8:C9:AA:C0:94:DD:6A:2B:40:F8:5B
             X509v3 Authority Key Identifier: 
-                keyid:A7:CF:4B:FA:5F:12:C6:23:74:2E:9E:A3:95:90:75:8C:CC:26:76:96
-                DirName:/C=US/ST=Indiana/L=Indianapolis/O=Software in the Public Interest/OU=hostmaster/CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
-                serial:03
+                keyid:B3:90:A7:D8:C9:AF:4E:CD:61:3C:9F:7C:AD:5D:7F:41:FD:69:30:EA
+
+            X509v3 Subject Key Identifier: 
+                A3:2A:D5:D0:07:FA:55:4D:59:5B:DB:95:C5:42:B2:44:FC:20:2C:A5
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.6449.1.2.2.26
+                  CPS: https://cps.usertrust.com
+                Policy: 2.23.140.1.2.1
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://crl.usertrust.com/GandiStandardSSLCA2.crl
+
+            Authority Information Access: 
+                CA Issuers - URI:http://crt.usertrust.com/GandiStandardSSLCA2.crt
+                OCSP - URI:http://ocsp.usertrust.com
 
-    Signature Algorithm: sha1WithRSAEncryption
-        73:0c:2a:a9:75:b9:19:40:f9:07:dc:99:c4:aa:ec:04:0d:a5:
-        bf:23:08:db:1a:82:72:e0:af:fe:15:9c:88:d9:78:56:a8:3d:
-        a5:5a:ce:ff:48:60:d1:0b:78:bc:9a:cf:0c:90:75:4a:d0:e9:
-        5c:1e:6d:f3:6f:45:2b:bd:d3:7c:a9:e3:2c:24:e9:4b:ab:d0:
-        7c:f9:c0:9d:46:71:8f:a7:8b:84:d9:94:25:d1:dd:e4:ee:0a:
-        a3:f0:70:67:c8:32:a1:c9:90:b0:07:0b:e1:95:44:f9:a7:34:
-        bf:cf:e6:10:16:2e:19:de:d3:84:18:70:fb:77:b1:de:b2:b3:
-        e7:50:03:80:54:88:63:42:7d:97:a0:3b:3f:80:c2:92:b7:65:
-        39:7c:82:55:b4:c9:a7:27:0a:46:ac:33:b6:d7:d2:ea:c3:f2:
-        00:a2:cc:39:18:cc:5b:b7:d2:32:82:ea:2f:85:95:42:61:37:
-        b9:84:f0:15:1a:c0:a1:55:46:52:5d:74:3f:82:53:cc:49:fd:
-        f8:50:1b:49:c7:2f:4f:29:a7:db:7a:f6:3e:cd:27:38:58:47:
-        67:93:07:b5:30:b9:18:00:84:99:d6:05:1f:25:e7:d7:a7:84:
-        fc:c6:02:25:03:36:f4:11:af:39:c8:82:9a:a5:a3:85:a1:4a:
-        2c:74:4a:25:e7:e1:98:6a:39:9e:f7:36:5f:f8:c4:71:d2:d2:
-        2b:2a:58:0b:b6:50:6f:1f:aa:ae:33:d1:d2:68:96:f9:8e:d9:
-        7c:47:0e:ba:44:36:13:c7:ec:9f:8b:1b:d7:9d:33:38:7d:f1:
-        be:94:cf:d9:8d:e0:59:ba:7b:30:9a:6b:7b:54:88:6f:27:92:
-        af:67:eb:22:ee:90:fa:84:d3:7e:bc:69:51:b0:15:6f:e9:7b:
-        e2:65:89:16:1d:56:02:f7:9f:4d:e3:2f:79:d6:7d:07:73:2b:
-        ec:4a:39:7c:10:96:74:20:70:3c:b3:f8:aa:41:c7:ea:86:a7:
-        1d:fa:5b:2b:a2:f2:52:a4:e6:b5:a1:8e:08:54:45:5c:73:02:
-        31:f6:1a:cf:a0:b9:21:97:83:0c:ab:4a:8f:46:65:61:cc:53:
-        b9:c6:a7:c7:80:10:59:87:34:2a:55:ed:00:80:e7:2a:f4:2b:
-        78:65:a0:37:aa:95:80:d1:c0:d9:85:8e:c9:0f:02:99:f0:52:
-        8c:91:af:ad:00:c3:77:f6:e0:ea:ee:47:54:bd:2c:40:70:99:
-        67:79:9e:72:5e:c1:91:90:99:52:9b:27:9b:77:43:d6:84:25:
-        09:1a:a8:51:1a:cb:9b:1b:65:1d:c2:40:d4:f6:e2:68:45:e6:
-        5b:1c:17:c1:95:cb:19:b0
+            X509v3 Subject Alternative Name: 
+                DNS:nm.debian.org, DNS:www.nm.debian.org
+    Signature Algorithm: sha256WithRSAEncryption
+         7d:0f:b6:24:01:f5:c1:89:76:68:2d:f0:e2:94:5c:6b:4e:00:
+         8c:c7:66:69:9f:34:c0:5a:15:e7:91:ca:dc:d2:2b:cd:ea:0d:
+         49:20:35:3b:62:73:7f:73:68:ec:39:36:ae:9c:a7:28:a0:23:
+         42:6b:65:69:8f:d7:e8:f6:fa:f2:d5:f6:4e:d0:20:6f:87:b1:
+         6a:15:b9:95:e9:c9:14:bb:e2:0b:3c:24:76:84:6f:a2:ee:83:
+         47:a6:a4:94:4c:75:fc:fd:cf:f6:23:8f:a3:f0:3f:4d:9d:ae:
+         c7:69:fe:44:10:b5:bf:60:ff:10:34:20:68:44:7c:d0:70:8d:
+         e1:99:9a:f1:99:47:5f:60:b6:50:b9:15:92:3b:f8:ed:a9:15:
+         53:58:cb:02:83:b7:99:08:e3:9b:7e:53:e2:7b:86:79:c3:68:
+         58:38:61:3f:61:f0:51:29:23:09:cb:b3:3e:d7:c0:1e:04:33:
+         38:03:e0:79:54:26:f2:3e:fa:a1:f3:01:15:55:75:4d:9a:8f:
+         c2:76:42:6d:db:46:b3:1c:df:ee:12:26:8c:ff:23:a0:aa:66:
+         85:20:05:51:29:e3:6d:b5:53:3a:3a:c3:21:da:6a:a4:4c:c9:
+         09:e6:8c:38:98:2f:ee:f5:89:04:21:ee:c4:82:02:a4:d5:18:
+         bb:ac:de:58
 -----BEGIN CERTIFICATE-----
-MIIFOTCCAyGgAwIBAgIBZDANBgkqhkiG9w0BAQUFADBRMQ8wDQYDVQQKEwZEZWJp
-YW4xFjAUBgNVBAMTDWNhLmRlYmlhbi5vcmcxJjAkBgkqhkiG9w0BCQEWF2RlYmlh
-bi1hZG1pbkBkZWJpYW4ub3JnMB4XDTEzMDMyMDE4NTY1NVoXDTE0MDMyMDE4NTY1
-NVowUTEPMA0GA1UEChMGRGViaWFuMRYwFAYDVQQDEw1ubS5kZWJpYW4ub3JnMSYw
-JAYJKoZIhvcNAQkBFhdkZWJpYW4tYWRtaW5AZGViaWFuLm9yZzCCASIwDQYJKoZI
-hvcNAQEBBQADggEPADCCAQoCggEBAPI9aZO+kWtgHdSWc/APehPGlCWdTKxoX+oq
-IiSQhMR4m158T8kghEiA3H+6np61OBeJK1PStJ0FKvxHGGJ7gwDlV/4T9Io4pgfH
-Tlzgdn2jRajj7lebUmt/gALzL09lltSJvl9LDUyKgdwzhYpyOYeaXSTGzWG/lav9
-Mu3iTvh5iNvM34pbRCidlFf2oUXxqO6AmuGZHShFlWFpn1+sjYegIJtaxR7ceRdx
-UuskTKxJb+gMIJYeP6dG/tCE6R/7tWPPXr5PCHS7M/hq0h6vrfLiRnFpNCrbBPnI
-U2cJFhilsZBfomkN+4PuTwqB9v5zOObaJ4aS0xzgBZgxk1Y5zGECAwEAAaOCARow
-ggEWMAkGA1UdEwQCMAAwHQYDVR0OBBYEFGAXrA56/EqSCrjJqsCU3WorQPhbMIHp
-BgNVHSMEgeEwgd6AFKfPS/pfEsYjdC6eo5WQdYzMJnaWoYHCpIG/MIG8MQswCQYD
-VQQGEwJVUzEQMA4GA1UECBMHSW5kaWFuYTEVMBMGA1UEBxMMSW5kaWFuYXBvbGlz
-MSgwJgYDVQQKEx9Tb2Z0d2FyZSBpbiB0aGUgUHVibGljIEludGVyZXN0MRMwEQYD
-VQQLEwpob3N0bWFzdGVyMR4wHAYDVQQDExVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkx
-JTAjBgkqhkiG9w0BCQEWFmhvc3RtYXN0ZXJAc3BpLWluYy5vcmeCAQMwDQYJKoZI
-hvcNAQEFBQADggIBAHMMKql1uRlA+QfcmcSq7AQNpb8jCNsagnLgr/4VnIjZeFao
-PaVazv9IYNELeLyazwyQdUrQ6VwebfNvRSu903yp4ywk6Uur0Hz5wJ1GcY+ni4TZ
-lCXR3eTuCqPwcGfIMqHJkLAHC+GVRPmnNL/P5hAWLhne04QYcPt3sd6ys+dQA4BU
-iGNCfZegOz+AwpK3ZTl8glW0yacnCkasM7bX0urD8gCizDkYzFu30jKC6i+FlUJh
-N7mE8BUawKFVRlJddD+CU8xJ/fhQG0nHL08pp9t69j7NJzhYR2eTB7UwuRgAhJnW
-BR8l59enhPzGAiUDNvQRrznIgpqlo4WhSix0SiXn4ZhqOZ73Nl/4xHHS0isqWAu2
-UG8fqq4z0dJolvmO2XxHDrpENhPH7J+LG9edMzh98b6Uz9mN4Fm6ezCaa3tUiG8n
-kq9n6yLukPqE0368aVGwFW/pe+JliRYdVgL3n03jL3nWfQdzK+xKOXwQlnQgcDyz
-+KpBx+qGpx36Wyui8lKk5rWhjghURVxzAjH2Gs+guSGXgwyrSo9GZWHMU7nGp8eA
-EFmHNCpV7QCA5yr0K3hloDeqlYDRwNmFjskPApnwUoyRr60Aw3f24OruR1S9LEBw
-mWd5nnJewZGQmVKbJ5t3Q9aEJQkaqFEay5sbZR3CQNT24mhF5lscF8GVyxmw
+MIIFdjCCBF6gAwIBAgIQbmbzv/qBUfot1xmTtZhusDANBgkqhkiG9w0BAQsFADBf
+MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w
+DAYDVQQKEwVHYW5kaTEgMB4GA1UEAxMXR2FuZGkgU3RhbmRhcmQgU1NMIENBIDIw
+HhcNMTUxMjExMDAwMDAwWhcNMTcwMTIwMjM1OTU5WjBYMSEwHwYDVQQLExhEb21h
+aW4gQ29udHJvbCBWYWxpZGF0ZWQxGzAZBgNVBAsTEkdhbmRpIFN0YW5kYXJkIFNT
+TDEWMBQGA1UEAxMNbm0uZGViaWFuLm9yZzCCAaIwDQYJKoZIhvcNAQEBBQADggGP
+ADCCAYoCggGBAKyvmtOF49PWntRB0+5G2AuUc0F6Q4INe+3x2VFC3eORwigl0OFs
+7ZGVCjakCfKbxg0Uw8X3cjAeT0yXezGBoV2AJHYgK4F51NBRlRD0JKgc2Qh2Hp6m
+21HCxGYnRWR+KOCL0uCWfAjaR8J/2Ul/MzmAyAzATtNo7H9ECqIVkoBrPNo4wOAa
+hrh7eoaEQ1Vo+jKvYAoBCdQHR/MMkIX0lXJCXH2nxD8GokSA0NEkCrjDgVobJfvh
+VWtDxj4Wtd7cTpjyHKQMelFtf3aZxnCQUzNuCYC98w3kziwl5V80SO1k5v0l8roV
+HPDmErLvMf0Nve7YG+/Ujx3GKnMNdzCPntxSbYXAyW/s79H+VFQdaTtRlSzT8ttm
+gHN9DbnsS0XbQdPSoZA16VAgQISyqGuUGp5wjxQsljLE0wdhEImCsTQADTOu06N0
+EIaHS6u8oxZGPWSDOKpmAgemhxvwKHuqeaAUP1qQkVTt9UgHuz44NjFZF9cl3Wex
+oZfTM0HBwEDFcQIDAQABo4IBszCCAa8wHwYDVR0jBBgwFoAUs5Cn2MmvTs1hPJ98
+rV1/Qf1pMOowHQYDVR0OBBYEFKMq1dAH+lVNWVvblcVCskT8ICylMA4GA1UdDwEB
+/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
+BQcDAjBLBgNVHSAERDBCMDYGCysGAQQBsjEBAgIaMCcwJQYIKwYBBQUHAgEWGWh0
+dHBzOi8vY3BzLnVzZXJ0cnVzdC5jb20wCAYGZ4EMAQIBMEEGA1UdHwQ6MDgwNqA0
+oDKGMGh0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9HYW5kaVN0YW5kYXJkU1NMQ0Ey
+LmNybDBzBggrBgEFBQcBAQRnMGUwPAYIKwYBBQUHMAKGMGh0dHA6Ly9jcnQudXNl
+cnRydXN0LmNvbS9HYW5kaVN0YW5kYXJkU1NMQ0EyLmNydDAlBggrBgEFBQcwAYYZ
+aHR0cDovL29jc3AudXNlcnRydXN0LmNvbTArBgNVHREEJDAigg1ubS5kZWJpYW4u
+b3JnghF3d3cubm0uZGViaWFuLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAfQ+2JAH1
+wYl2aC3w4pRca04AjMdmaZ80wFoV55HK3NIrzeoNSSA1O2Jzf3No7Dk2rpynKKAj
+QmtlaY/X6Pb68tX2TtAgb4exahW5lenJFLviCzwkdoRvou6DR6aklEx1/P3P9iOP
+o/A/TZ2ux2n+RBC1v2D/EDQgaER80HCN4Zma8ZlHX2C2ULkVkjv47akVU1jLAoO3
+mQjjm35T4nuGecNoWDhhP2HwUSkjCcuzPtfAHgQzOAPgeVQm8j76ofMBFVV1TZqP
+wnZCbdtGsxzf7hImjP8joKpmhSAFUSnjbbVTOjrDIdpqpEzJCeaMOJgv7vWJBCHu
+xIICpNUYu6zeWA==
 -----END CERTIFICATE-----