add dsa.debian.org

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>

diff --git a/modules/ssl/files/chains/dsa.debian.org.crt b/modules/ssl/files/chains/dsa.debian.org.crt
new file mode 120000 (symlink)
index 0000000..6aaa914
--- /dev/null
+++ b/modules/ssl/files/chains/dsa.debian.org.crt
@@ -0,0 +1 @@
+GANDI-CA
\ No newline at end of file

diff --git a/modules/ssl/files/servicecerts/dsa.debian.org.crt b/modules/ssl/files/servicecerts/dsa.debian.org.crt
new file mode 100644 (file)
index 0000000..6d85167
--- /dev/null
+++ b/modules/ssl/files/servicecerts/dsa.debian.org.crt
@@ -0,0 +1,107 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            68:39:49:0c:b9:98:5c:c3:ef:6b:99:2c:4e:bb:f1:ff
+    Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=FR, O=GANDI SAS, CN=Gandi Standard SSL CA
+        Validity
+            Not Before: Jan  1 00:00:00 2014 GMT
+            Not After : Jan  1 23:59:59 2015 GMT
+        Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=dsa.debian.org
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b2:81:e3:1f:82:4c:0e:c9:20:44:29:f7:9c:e9:
+                    bb:2e:b4:2b:05:2d:60:b1:f7:b7:70:22:7b:47:8e:
+                    99:17:fe:2a:38:99:3b:9f:4e:ac:d1:fd:79:a7:45:
+                    e7:5f:7e:e8:1f:b8:01:3c:9d:e3:00:09:2c:88:9f:
+                    9f:2c:8f:3b:22:ff:6d:3a:b6:a4:ae:32:f6:83:13:
+                    b9:bb:eb:47:91:82:9f:f7:8d:8f:13:fa:74:d2:d5:
+                    49:82:f0:2d:f1:45:41:5d:ed:c1:a7:d1:6e:42:b7:
+                    b0:f5:46:9d:3c:cd:00:26:5a:50:b2:94:16:43:58:
+                    c1:59:7e:18:7e:2b:c9:6c:99:a3:3c:9d:b2:5b:ae:
+                    0d:f6:c9:2a:a9:7c:7f:17:86:53:33:98:b4:0b:e7:
+                    41:be:a8:40:26:f6:de:b2:68:b7:1f:c9:b0:63:44:
+                    e7:94:cf:1a:fc:b6:15:da:0b:6a:68:3c:09:48:5b:
+                    60:a4:3f:c8:60:36:03:0a:22:31:0b:31:d8:09:04:
+                    ef:08:41:c7:35:71:5e:55:29:07:17:cd:0a:72:3b:
+                    2d:73:2f:18:89:42:63:8e:d8:f2:01:1c:2e:35:0f:
+                    04:37:69:2d:8d:b2:32:d9:ab:d9:98:4e:34:a6:f1:
+                    91:a8:e2:72:17:ec:cd:cb:ad:44:28:5b:3a:d6:f8:
+                    10:01
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Authority Key Identifier: 
+                keyid:B6:A8:FF:A2:A8:2F:D0:A6:CD:4B:B1:68:F3:E7:50:10:31:A7:79:21
+
+            X509v3 Subject Key Identifier: 
+                D0:F1:99:DC:C5:0B:F4:CC:62:DB:EF:CF:03:4B:C2:C1:1A:28:0A:45
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.6449.1.2.2.26
+                  CPS: http://www.gandi.net/contracts/fr/ssl/cps/pdf/
+                Policy: 2.23.140.1.2.1
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://crl.gandi.net/GandiStandardSSLCA.crl
+
+            Authority Information Access: 
+                CA Issuers - URI:http://crt.gandi.net/GandiStandardSSLCA.crt
+                OCSP - URI:http://ocsp.gandi.net
+
+            X509v3 Subject Alternative Name: 
+                DNS:dsa.debian.org, DNS:www.dsa.debian.org
+    Signature Algorithm: sha1WithRSAEncryption
+         03:fe:ca:4a:3f:e2:e7:c4:f9:19:a2:98:c2:5d:48:96:d4:3a:
+         e9:a9:4e:02:78:0e:b6:93:a1:91:89:a1:f0:50:90:60:4c:58:
+         a0:9f:95:11:48:43:3a:cf:85:99:39:7f:79:dd:3a:96:06:26:
+         07:c3:e2:6a:31:73:9f:4c:b1:28:0e:73:74:7f:b1:f9:43:c5:
+         32:45:a8:41:49:d7:b5:06:8c:da:56:6d:60:c0:03:51:09:9a:
+         89:51:01:0e:bd:64:2a:05:ce:fc:2f:2e:83:3e:18:9b:77:97:
+         8d:94:c2:e5:76:61:2c:28:af:50:53:03:05:73:ad:70:77:11:
+         79:55:b1:b4:c0:63:a4:9b:ce:f3:be:10:76:5f:84:c2:37:21:
+         ef:8a:6d:38:7b:6f:6d:29:19:9a:f2:d1:2b:f2:98:cb:26:3b:
+         19:42:f5:c1:e6:e0:e9:3e:0b:06:8f:1b:9f:a4:cc:cf:df:4f:
+         52:68:72:de:16:ef:1c:0b:6a:2a:9c:41:d9:33:e2:70:49:1b:
+         97:43:c1:84:f6:8b:65:ef:27:39:77:81:a0:08:fe:a0:dd:38:
+         4e:50:23:fe:be:77:18:64:01:9a:72:6f:48:8e:ec:23:d8:63:
+         b4:6a:3f:af:17:89:cf:54:e2:ef:3f:e8:f1:33:fd:e7:f2:91:
+         59:1b:6c:95
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----