replace certs for d-i, dsa, and rtc with LE

diff --git a/modules/ssl/files/chains/d-i.debian.org.crt b/modules/ssl/files/chains/d-i.debian.org.crt
deleted file mode 120000 (symlink)
index 50d224a..0000000
--- a/modules/ssl/files/chains/d-i.debian.org.crt
+++ /dev/null
@@ -1 +0,0 @@
-GANDI-2-CA
\ No newline at end of file

diff --git a/modules/ssl/files/chains/dsa.debian.org.crt b/modules/ssl/files/chains/dsa.debian.org.crt
deleted file mode 120000 (symlink)
index 50d224a..0000000
--- a/modules/ssl/files/chains/dsa.debian.org.crt
+++ /dev/null
@@ -1 +0,0 @@
-GANDI-2-CA
\ No newline at end of file

diff --git a/modules/ssl/files/chains/rtc.debian.org.crt b/modules/ssl/files/chains/rtc.debian.org.crt
deleted file mode 120000 (symlink)
index 50d224a..0000000
--- a/modules/ssl/files/chains/rtc.debian.org.crt
+++ /dev/null
@@ -1 +0,0 @@
-GANDI-2-CA
\ No newline at end of file

diff --git a/modules/ssl/files/servicecerts/d-i.debian.org.crt b/modules/ssl/files/servicecerts/d-i.debian.org.crt
deleted file mode 100644 (file)
index 063940c..0000000
--- a/modules/ssl/files/servicecerts/d-i.debian.org.crt
+++ /dev/null
@@ -1,118 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            bc:88:f9:80:12:cd:d0:5b:ad:be:64:3c:1a:db:f3:12
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=FR, ST=Paris, L=Paris, O=Gandi, CN=Gandi Standard SSL CA 2
-        Validity
-            Not Before: Jan  2 00:00:00 2016 GMT
-            Not After : Jan  2 23:59:59 2017 GMT
-        Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=d-i.debian.org
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (3072 bit)
-                Modulus:
-                    00:af:a2:e3:c8:4a:41:df:48:66:b6:98:4f:4f:29:
-                    01:4f:1f:b3:18:8f:66:aa:3c:4c:6f:91:1a:9f:20:
-                    1d:d0:c0:67:33:e7:a4:5a:61:eb:bb:fd:2b:05:9f:
-                    16:1f:03:d1:45:f4:1c:a6:7e:7f:06:f2:3d:e4:29:
-                    e5:9a:be:4d:86:9a:65:5c:39:5b:71:04:01:2d:47:
-                    6e:c2:5d:e6:e5:e9:1c:16:a4:0b:d0:fc:70:dc:90:
-                    11:6f:6b:33:b7:0a:af:f1:84:a6:96:33:4b:ee:93:
-                    3d:c3:6a:5b:77:2b:c7:eb:25:e3:02:d3:8f:34:71:
-                    33:99:07:4a:16:44:0a:44:0c:63:ee:22:58:02:44:
-                    cd:c7:eb:18:04:a6:e4:c4:c9:ee:54:80:4a:ab:1d:
-                    2c:8c:d2:f7:4e:f5:30:b6:ee:03:e0:a4:27:cd:17:
-                    ad:6b:c2:f9:47:ac:ef:2d:17:66:37:99:d9:97:16:
-                    df:6c:93:3a:6f:50:23:77:97:b9:7a:b7:1b:d7:96:
-                    47:29:4d:fe:8e:cf:b0:56:94:c1:08:55:61:b2:bd:
-                    9b:0d:84:d2:3a:19:9c:fe:79:b7:64:61:f7:64:3b:
-                    32:d5:11:b0:45:11:1f:2e:b0:8b:d8:8c:32:4c:fb:
-                    d9:1e:ee:1e:72:b7:81:46:9d:db:de:5e:79:5f:75:
-                    4c:85:50:b6:e6:d8:0a:26:9b:41:f5:fc:30:34:14:
-                    ec:a3:0b:26:f0:d5:d2:f1:e7:b8:08:93:e9:e8:09:
-                    70:f8:68:7e:9d:3d:bf:42:7d:d6:ea:39:9f:49:aa:
-                    2e:4e:75:f1:cd:10:82:de:5d:0c:cf:86:35:60:97:
-                    39:d0:b5:59:26:c3:89:a3:d3:b2:fb:5b:d4:d3:d1:
-                    41:ea:93:19:40:c0:98:ba:b2:b6:24:c9:f3:6b:ce:
-                    57:43:46:7a:e9:1f:42:85:3e:f0:11:10:2f:1d:0e:
-                    80:11:e3:25:f3:c1:eb:75:d4:26:23:3e:88:d4:68:
-                    b4:8d:cf:9f:03:f7:ba:47:93:49
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Authority Key Identifier: 
-                keyid:B3:90:A7:D8:C9:AF:4E:CD:61:3C:9F:7C:AD:5D:7F:41:FD:69:30:EA
-
-            X509v3 Subject Key Identifier: 
-                DD:D2:BF:A1:7A:9C:B3:DA:DE:FC:DE:C4:F5:18:44:76:EF:B2:1C:61
-            X509v3 Key Usage: critical
-                Digital Signature, Key Encipherment
-            X509v3 Basic Constraints: critical
-                CA:FALSE
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication, TLS Web Client Authentication
-            X509v3 Certificate Policies: 
-                Policy: 1.3.6.1.4.1.6449.1.2.2.26
-                  CPS: https://cps.usertrust.com
-                Policy: 2.23.140.1.2.1
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://crl.usertrust.com/GandiStandardSSLCA2.crl
-
-            Authority Information Access: 
-                CA Issuers - URI:http://crt.usertrust.com/GandiStandardSSLCA2.crt
-                OCSP - URI:http://ocsp.usertrust.com
-
-            X509v3 Subject Alternative Name: 
-                DNS:d-i.debian.org, DNS:www.d-i.debian.org
-    Signature Algorithm: sha256WithRSAEncryption
-         36:91:a5:ea:5b:97:38:44:06:8d:d4:98:12:f7:74:c4:95:c1:
-         fe:1d:ea:10:48:ba:76:29:63:1b:8b:24:70:e1:cf:a1:ac:d5:
-         81:f4:43:89:f6:93:8a:74:b0:65:63:90:a8:44:43:7e:5e:15:
-         ca:0f:e8:75:ec:02:38:d3:7f:31:b2:cc:16:12:e0:d9:de:9a:
-         ae:67:fb:1f:83:12:38:89:ab:b2:cd:67:d4:e5:70:5f:7c:08:
-         50:be:fb:1f:62:ab:5c:00:20:0d:fa:a5:8b:a8:36:2d:9e:b6:
-         24:6d:e4:f5:be:d2:30:92:9e:14:f2:cd:d3:22:12:4a:bf:e0:
-         c3:be:1a:2b:fb:cd:5c:87:95:b3:c7:b7:d6:5c:ed:c4:22:37:
-         04:6a:4f:38:1d:9d:6d:ae:16:cd:68:80:42:0d:79:9c:2e:a2:
-         67:9c:3f:6d:0c:bb:e1:ee:b2:18:a4:c0:e4:8c:55:b5:91:d7:
-         d2:cd:e5:b4:a1:f0:bc:dc:54:46:cf:db:2b:e4:b3:fd:4a:c5:
-         14:70:88:b9:44:c1:ac:dc:fa:98:01:13:78:0e:1c:40:fd:9d:
-         ec:06:7c:04:3e:5d:7d:26:2e:d4:f6:11:e6:bb:13:77:fb:ba:
-         33:b1:2d:22:f6:36:7a:32:b5:d0:70:e2:6c:aa:56:9c:dc:d0:
-         2c:86:b4:93
------BEGIN CERTIFICATE-----
-MIIFejCCBGKgAwIBAgIRALyI+YASzdBbrb5kPBrb8xIwDQYJKoZIhvcNAQELBQAw
-XzELMAkGA1UEBhMCRlIxDjAMBgNVBAgTBVBhcmlzMQ4wDAYDVQQHEwVQYXJpczEO
-MAwGA1UEChMFR2FuZGkxIDAeBgNVBAMTF0dhbmRpIFN0YW5kYXJkIFNTTCBDQSAy
-MB4XDTE2MDEwMjAwMDAwMFoXDTE3MDEwMjIzNTk1OVowWTEhMB8GA1UECxMYRG9t
-YWluIENvbnRyb2wgVmFsaWRhdGVkMRswGQYDVQQLExJHYW5kaSBTdGFuZGFyZCBT
-U0wxFzAVBgNVBAMTDmQtaS5kZWJpYW4ub3JnMIIBojANBgkqhkiG9w0BAQEFAAOC
-AY8AMIIBigKCAYEAr6LjyEpB30hmtphPTykBTx+zGI9mqjxMb5EanyAd0MBnM+ek
-WmHru/0rBZ8WHwPRRfQcpn5/BvI95Cnlmr5NhpplXDlbcQQBLUduwl3m5ekcFqQL
-0Pxw3JARb2sztwqv8YSmljNL7pM9w2pbdyvH6yXjAtOPNHEzmQdKFkQKRAxj7iJY
-AkTNx+sYBKbkxMnuVIBKqx0sjNL3TvUwtu4D4KQnzReta8L5R6zvLRdmN5nZlxbf
-bJM6b1Ajd5e5ercb15ZHKU3+js+wVpTBCFVhsr2bDYTSOhmc/nm3ZGH3ZDsy1RGw
-RREfLrCL2IwyTPvZHu4ecreBRp3b3l55X3VMhVC25tgKJptB9fwwNBTsowsm8NXS
-8ee4CJPp6Alw+Gh+nT2/Qn3W6jmfSaouTnXxzRCC3l0Mz4Y1YJc50LVZJsOJo9Oy
-+1vU09FB6pMZQMCYurK2JMnza85XQ0Z66R9ChT7wERAvHQ6AEeMl88HrddQmIz6I
-1Gi0jc+fA/e6R5NJAgMBAAGjggG1MIIBsTAfBgNVHSMEGDAWgBSzkKfYya9OzWE8
-n3ytXX9B/Wkw6jAdBgNVHQ4EFgQU3dK/oXqcs9re/N7E9RhEdu+yHGEwDgYDVR0P
-AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
-AQUFBwMCMEsGA1UdIAREMEIwNgYLKwYBBAGyMQECAhowJzAlBggrBgEFBQcCARYZ
-aHR0cHM6Ly9jcHMudXNlcnRydXN0LmNvbTAIBgZngQwBAgEwQQYDVR0fBDowODA2
-oDSgMoYwaHR0cDovL2NybC51c2VydHJ1c3QuY29tL0dhbmRpU3RhbmRhcmRTU0xD
-QTIuY3JsMHMGCCsGAQUFBwEBBGcwZTA8BggrBgEFBQcwAoYwaHR0cDovL2NydC51
-c2VydHJ1c3QuY29tL0dhbmRpU3RhbmRhcmRTU0xDQTIuY3J0MCUGCCsGAQUFBzAB
-hhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMC0GA1UdEQQmMCSCDmQtaS5kZWJp
-YW4ub3JnghJ3d3cuZC1pLmRlYmlhbi5vcmcwDQYJKoZIhvcNAQELBQADggEBADaR
-pepblzhEBo3UmBL3dMSVwf4d6hBIunYpYxuLJHDhz6Gs1YH0Q4n2k4p0sGVjkKhE
-Q35eFcoP6HXsAjjTfzGyzBYS4Nnemq5n+x+DEjiJq7LNZ9TlcF98CFC++x9iq1wA
-IA36pYuoNi2etiRt5PW+0jCSnhTyzdMiEkq/4MO+Giv7zVyHlbPHt9Zc7cQiNwRq
-TzgdnW2uFs1ogEINeZwuomecP20Mu+HushikwOSMVbWR19LN5bSh8LzcVEbP2yvk
-s/1KxRRwiLlEwazc+pgBE3gOHED9newGfAQ+XX0mLtT2Eea7E3f7ujOxLSL2Nnoy
-tdBw4myqVpzc0CyGtJM=
------END CERTIFICATE-----

diff --git a/modules/ssl/files/servicecerts/dsa.debian.org.crt b/modules/ssl/files/servicecerts/dsa.debian.org.crt
deleted file mode 100644 (file)
index 4a9e686..0000000
--- a/modules/ssl/files/servicecerts/dsa.debian.org.crt
+++ /dev/null
@@ -1,118 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            60:f4:cb:5d:1f:c9:f9:dd:23:66:3c:1b:f6:f5:ed:34
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=FR, ST=Paris, L=Paris, O=Gandi, CN=Gandi Standard SSL CA 2
-        Validity
-            Not Before: Dec 11 00:00:00 2015 GMT
-            Not After : Jan 22 23:59:59 2017 GMT
-        Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=dsa.debian.org
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (3072 bit)
-                Modulus:
-                    00:dd:23:62:3b:ff:51:5a:be:e6:16:a5:ea:21:f7:
-                    0d:d2:bb:9a:7a:53:f1:07:f1:45:37:4a:75:d3:72:
-                    07:d4:97:72:d1:fa:8d:17:db:d1:76:c1:68:bc:cd:
-                    be:b6:d8:80:84:6e:8e:0e:51:7a:3c:6f:20:0b:d5:
-                    b6:f6:f6:fd:f8:11:cd:af:38:5e:65:3c:94:f0:7f:
-                    26:62:aa:3d:84:84:70:2f:b6:7c:f1:ed:bd:c5:ff:
-                    03:51:ed:60:47:2f:4a:14:de:ef:22:c5:cc:a7:17:
-                    7e:39:80:4a:11:2d:61:3c:1b:d0:5e:c2:28:89:3a:
-                    a5:17:fd:21:a8:20:42:15:6e:78:72:27:b4:4f:0e:
-                    62:5c:0d:63:68:65:55:f2:fd:1a:dc:8d:56:3c:3d:
-                    00:6c:d3:fa:d3:b7:95:fe:cd:7d:48:1b:98:07:e6:
-                    0b:a8:7b:94:ea:67:47:51:cc:fa:cc:44:80:d3:12:
-                    58:ac:29:86:55:bf:35:30:6f:41:59:4f:3d:ee:b8:
-                    86:de:59:28:5b:81:79:f1:da:e4:75:f0:47:dd:e5:
-                    f0:fb:9c:03:11:85:88:ca:d0:5a:2f:68:5e:de:c3:
-                    f2:82:14:5e:f3:1f:83:a9:0e:c9:c6:10:54:94:21:
-                    8d:10:e5:58:51:e6:fd:61:08:e7:76:24:29:39:0f:
-                    7e:80:b7:69:3b:ed:62:39:5d:6b:91:e9:e4:7b:cb:
-                    f3:22:df:4f:3b:bc:26:4d:0f:bd:bd:77:c5:d2:55:
-                    62:4f:cb:4c:6b:70:d6:76:b9:f6:fd:be:2c:b3:31:
-                    fc:d9:39:58:36:1a:2d:e3:dc:04:5b:d8:b4:8c:ad:
-                    8d:03:16:08:a6:7c:7a:6c:04:a4:52:47:c7:c5:c0:
-                    b3:c2:d7:46:f6:57:61:bc:73:cd:90:bb:ee:1d:f2:
-                    8c:a5:25:cc:0d:91:bb:26:a0:46:f4:ca:6e:3b:0f:
-                    7e:af:7b:20:cf:78:bb:f4:10:6c:bb:0d:bb:8e:86:
-                    f9:cb:cd:b8:94:9f:f3:af:8a:85
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Authority Key Identifier: 
-                keyid:B3:90:A7:D8:C9:AF:4E:CD:61:3C:9F:7C:AD:5D:7F:41:FD:69:30:EA
-
-            X509v3 Subject Key Identifier: 
-                1B:D8:A4:5A:A9:00:E8:FF:79:88:1D:38:C8:71:9D:35:D3:BB:98:E7
-            X509v3 Key Usage: critical
-                Digital Signature, Key Encipherment
-            X509v3 Basic Constraints: critical
-                CA:FALSE
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication, TLS Web Client Authentication
-            X509v3 Certificate Policies: 
-                Policy: 1.3.6.1.4.1.6449.1.2.2.26
-                  CPS: https://cps.usertrust.com
-                Policy: 2.23.140.1.2.1
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://crl.usertrust.com/GandiStandardSSLCA2.crl
-
-            Authority Information Access: 
-                CA Issuers - URI:http://crt.usertrust.com/GandiStandardSSLCA2.crt
-                OCSP - URI:http://ocsp.usertrust.com
-
-            X509v3 Subject Alternative Name: 
-                DNS:dsa.debian.org, DNS:www.dsa.debian.org
-    Signature Algorithm: sha256WithRSAEncryption
-         24:04:ec:db:51:1b:72:b2:d5:0a:c0:e6:28:68:8d:74:7e:e0:
-         8a:69:bc:81:a8:c2:f1:21:cd:99:43:87:92:d5:1d:f2:f5:0b:
-         3f:36:e7:fc:1d:60:4f:be:59:3d:b1:09:38:5e:0e:f1:7d:8c:
-         ed:23:c6:4f:09:76:72:cc:db:ce:51:19:c3:dd:9f:03:49:21:
-         8b:59:17:88:20:a4:6a:99:fa:27:b8:75:02:6c:29:31:48:f0:
-         7b:67:ae:b2:ec:21:4e:64:24:88:4d:e3:4b:24:4c:6f:33:2b:
-         f5:73:29:87:61:c2:0e:b6:fa:79:2b:00:fd:f3:86:bc:5f:97:
-         3c:90:65:bf:7f:3e:8a:28:d5:b9:85:7a:3d:2f:c2:d1:7d:2b:
-         f7:14:77:1b:dc:3d:76:2b:3c:3b:32:ab:35:65:bf:72:cb:f2:
-         f4:c0:97:93:5d:86:28:9a:36:9f:8e:33:44:36:fb:01:d9:c1:
-         20:d3:f1:b4:0f:c3:58:e5:75:51:7d:da:c0:28:8f:ef:ce:dc:
-         3d:4a:91:d1:8f:da:eb:f9:a9:2b:67:0d:3a:c2:86:dd:23:bb:
-         8f:d0:36:aa:33:23:da:da:ca:42:4e:82:6d:2e:f5:1c:db:3a:
-         d3:32:e4:90:a9:1f:94:d5:ba:67:ef:0d:d9:3c:a7:2d:2f:b1:
-         90:bf:54:cb
------BEGIN CERTIFICATE-----
-MIIFeTCCBGGgAwIBAgIQYPTLXR/J+d0jZjwb9vXtNDANBgkqhkiG9w0BAQsFADBf
-MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w
-DAYDVQQKEwVHYW5kaTEgMB4GA1UEAxMXR2FuZGkgU3RhbmRhcmQgU1NMIENBIDIw
-HhcNMTUxMjExMDAwMDAwWhcNMTcwMTIyMjM1OTU5WjBZMSEwHwYDVQQLExhEb21h
-aW4gQ29udHJvbCBWYWxpZGF0ZWQxGzAZBgNVBAsTEkdhbmRpIFN0YW5kYXJkIFNT
-TDEXMBUGA1UEAxMOZHNhLmRlYmlhbi5vcmcwggGiMA0GCSqGSIb3DQEBAQUAA4IB
-jwAwggGKAoIBgQDdI2I7/1FavuYWpeoh9w3Su5p6U/EH8UU3SnXTcgfUl3LR+o0X
-29F2wWi8zb622ICEbo4OUXo8byAL1bb29v34Ec2vOF5lPJTwfyZiqj2EhHAvtnzx
-7b3F/wNR7WBHL0oU3u8ixcynF345gEoRLWE8G9BewiiJOqUX/SGoIEIVbnhyJ7RP
-DmJcDWNoZVXy/RrcjVY8PQBs0/rTt5X+zX1IG5gH5guoe5TqZ0dRzPrMRIDTElis
-KYZVvzUwb0FZTz3uuIbeWShbgXnx2uR18Efd5fD7nAMRhYjK0FovaF7ew/KCFF7z
-H4OpDsnGEFSUIY0Q5VhR5v1hCOd2JCk5D36At2k77WI5XWuR6eR7y/Mi3087vCZN
-D729d8XSVWJPy0xrcNZ2ufb9viyzMfzZOVg2Gi3j3ARb2LSMrY0DFgimfHpsBKRS
-R8fFwLPC10b2V2G8c82Qu+4d8oylJcwNkbsmoEb0ym47D36veyDPeLv0EGy7DbuO
-hvnLzbiUn/OvioUCAwEAAaOCAbUwggGxMB8GA1UdIwQYMBaAFLOQp9jJr07NYTyf
-fK1df0H9aTDqMB0GA1UdDgQWBBQb2KRaqQDo/3mIHTjIcZ0107uY5zAOBgNVHQ8B
-Af8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
-BQUHAwIwSwYDVR0gBEQwQjA2BgsrBgEEAbIxAQICGjAnMCUGCCsGAQUFBwIBFhlo
-dHRwczovL2Nwcy51c2VydHJ1c3QuY29tMAgGBmeBDAECATBBBgNVHR8EOjA4MDag
-NKAyhjBodHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vR2FuZGlTdGFuZGFyZFNTTENB
-Mi5jcmwwcwYIKwYBBQUHAQEEZzBlMDwGCCsGAQUFBzAChjBodHRwOi8vY3J0LnVz
-ZXJ0cnVzdC5jb20vR2FuZGlTdGFuZGFyZFNTTENBMi5jcnQwJQYIKwYBBQUHMAGG
-GWh0dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wLQYDVR0RBCYwJIIOZHNhLmRlYmlh
-bi5vcmeCEnd3dy5kc2EuZGViaWFuLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAJATs
-21EbcrLVCsDmKGiNdH7gimm8gajC8SHNmUOHktUd8vULPzbn/B1gT75ZPbEJOF4O
-8X2M7SPGTwl2cszbzlEZw92fA0khi1kXiCCkapn6J7h1AmwpMUjwe2eusuwhTmQk
-iE3jSyRMbzMr9XMph2HCDrb6eSsA/fOGvF+XPJBlv38+iijVuYV6PS/C0X0r9xR3
-G9w9dis8OzKrNWW/csvy9MCXk12GKJo2n44zRDb7AdnBINPxtA/DWOV1UX3awCiP
-787cPUqR0Y/a6/mpK2cNOsKG3SO7j9A2qjMj2trKQk6CbS71HNs60zLkkKkflNW6
-Z+8N2TynLS+xkL9Uyw==
------END CERTIFICATE-----

diff --git a/modules/ssl/files/servicecerts/rtc.debian.org.crt b/modules/ssl/files/servicecerts/rtc.debian.org.crt
deleted file mode 100644 (file)
index 182f7b4..0000000
--- a/modules/ssl/files/servicecerts/rtc.debian.org.crt
+++ /dev/null
@@ -1,118 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            73:93:e4:98:41:f8:ad:f6:c7:e6:80:78:3d:28:fc:86
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=FR, ST=Paris, L=Paris, O=Gandi, CN=Gandi Standard SSL CA 2
-        Validity
-            Not Before: Dec 11 00:00:00 2015 GMT
-            Not After : Feb 23 23:59:59 2017 GMT
-        Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=rtc.debian.org
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (3072 bit)
-                Modulus:
-                    00:d7:a6:30:7f:fe:e4:65:ed:51:78:e2:2a:0c:a2:
-                    ce:ea:b0:76:68:1b:88:17:b4:6b:50:91:9b:2a:21:
-                    e3:40:9c:1b:de:60:27:ff:29:80:d2:47:fb:d7:ae:
-                    6b:1f:0a:88:1f:62:bb:d9:9a:d6:97:05:f5:42:d1:
-                    19:e7:7d:2c:2c:e2:e2:d5:da:c3:a1:81:49:bc:a4:
-                    41:e5:24:03:1b:ff:93:66:26:97:77:b9:36:fd:27:
-                    a0:e2:52:f6:a6:64:fb:95:9a:a8:63:a6:6b:45:b6:
-                    64:9c:04:e6:64:71:8f:b2:ae:bb:72:a1:92:70:7d:
-                    b3:78:25:05:67:52:9c:a9:93:53:40:e9:6b:ef:63:
-                    49:df:e2:18:7b:64:a3:c8:f7:a7:10:cb:c6:30:2e:
-                    aa:68:3a:ec:94:61:ba:09:3b:1b:6f:a7:8e:f9:6b:
-                    4a:b6:99:53:f3:9d:92:54:4d:f9:2b:df:47:43:f7:
-                    c6:54:3a:39:b2:b9:7f:2e:3d:cf:49:c9:90:0a:38:
-                    09:23:14:a4:4c:03:06:c0:cc:9a:58:6e:eb:50:c3:
-                    b1:c0:99:8c:69:fd:34:37:34:fa:fd:e0:87:6e:9b:
-                    1f:38:54:49:af:0b:59:33:e8:23:13:2a:c8:b1:d9:
-                    5a:a6:78:9d:80:0e:49:2a:9b:d3:59:7e:30:9a:6b:
-                    69:41:81:34:3b:0c:c4:0b:f2:77:66:fb:89:d8:41:
-                    99:bc:67:88:67:64:1b:2d:79:e0:d3:3d:d3:e0:0c:
-                    7e:4b:b0:81:77:5d:46:47:f7:52:17:ea:30:47:bc:
-                    59:e8:f0:73:98:aa:d5:60:42:c6:11:cc:4d:6b:a9:
-                    94:bf:0c:47:c8:61:9c:d2:36:0c:a2:0d:0e:9d:58:
-                    8c:89:c5:b2:fc:cc:64:fc:fb:10:26:04:87:ee:80:
-                    57:bb:94:2e:01:37:56:27:48:4e:e0:23:15:20:7f:
-                    8c:06:06:f6:ea:e8:94:a8:66:de:25:6c:9a:08:7f:
-                    7b:7c:eb:d5:bd:dc:b4:79:3a:89
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Authority Key Identifier: 
-                keyid:B3:90:A7:D8:C9:AF:4E:CD:61:3C:9F:7C:AD:5D:7F:41:FD:69:30:EA
-
-            X509v3 Subject Key Identifier: 
-                9C:DA:DE:21:0D:57:97:60:40:42:7A:9A:25:12:29:F7:D5:16:DC:54
-            X509v3 Key Usage: critical
-                Digital Signature, Key Encipherment
-            X509v3 Basic Constraints: critical
-                CA:FALSE
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication, TLS Web Client Authentication
-            X509v3 Certificate Policies: 
-                Policy: 1.3.6.1.4.1.6449.1.2.2.26
-                  CPS: https://cps.usertrust.com
-                Policy: 2.23.140.1.2.1
-
-            X509v3 CRL Distribution Points: 
-
-                Full Name:
-                  URI:http://crl.usertrust.com/GandiStandardSSLCA2.crl
-
-            Authority Information Access: 
-                CA Issuers - URI:http://crt.usertrust.com/GandiStandardSSLCA2.crt
-                OCSP - URI:http://ocsp.usertrust.com
-
-            X509v3 Subject Alternative Name: 
-                DNS:rtc.debian.org, DNS:www.rtc.debian.org
-    Signature Algorithm: sha256WithRSAEncryption
-         77:93:2a:bc:65:99:e7:e6:40:b0:52:c3:13:ca:65:e1:c9:f4:
-         3d:c1:dd:d5:c5:52:18:b4:9a:51:eb:92:a2:20:81:5b:88:a6:
-         94:df:9a:a3:29:0c:92:f9:32:f4:fb:e7:e9:db:db:53:0e:c4:
-         be:a1:e7:d9:1b:f2:78:80:bd:bc:62:39:9e:f1:e6:f9:89:b9:
-         05:b6:0d:ab:00:3e:bb:26:88:c6:99:5f:84:b4:ae:19:4c:b2:
-         13:92:28:4f:c4:ed:12:b9:5a:81:19:c3:50:e7:a0:ec:34:ca:
-         78:17:38:f5:84:c9:d5:60:1f:f9:e3:2a:48:22:45:84:36:4a:
-         6e:f1:48:92:db:48:e8:b4:49:5e:c6:10:fb:57:9d:56:39:9e:
-         ea:73:05:08:b9:98:9e:74:08:e4:5c:d8:33:ec:06:5e:01:fc:
-         5b:62:44:3f:12:53:da:2e:e4:61:57:23:a2:54:68:17:98:0e:
-         2f:f5:33:2d:23:e4:3d:1e:6f:c4:46:10:36:c6:68:d6:8c:d3:
-         f9:40:91:d0:05:52:74:2a:af:ba:ac:69:c9:c7:8f:1d:ca:47:
-         86:ad:54:7c:bf:d8:1f:e4:b8:32:c4:75:7d:3b:53:e2:d6:10:
-         3f:3a:5a:14:24:55:44:1b:1c:5d:d4:a9:0d:96:e2:14:12:94:
-         48:9b:9c:48
------BEGIN CERTIFICATE-----
-MIIFeTCCBGGgAwIBAgIQc5PkmEH4rfbH5oB4PSj8hjANBgkqhkiG9w0BAQsFADBf
-MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w
-DAYDVQQKEwVHYW5kaTEgMB4GA1UEAxMXR2FuZGkgU3RhbmRhcmQgU1NMIENBIDIw
-HhcNMTUxMjExMDAwMDAwWhcNMTcwMjIzMjM1OTU5WjBZMSEwHwYDVQQLExhEb21h
-aW4gQ29udHJvbCBWYWxpZGF0ZWQxGzAZBgNVBAsTEkdhbmRpIFN0YW5kYXJkIFNT
-TDEXMBUGA1UEAxMOcnRjLmRlYmlhbi5vcmcwggGiMA0GCSqGSIb3DQEBAQUAA4IB
-jwAwggGKAoIBgQDXpjB//uRl7VF44ioMos7qsHZoG4gXtGtQkZsqIeNAnBveYCf/
-KYDSR/vXrmsfCogfYrvZmtaXBfVC0RnnfSws4uLV2sOhgUm8pEHlJAMb/5NmJpd3
-uTb9J6DiUvamZPuVmqhjpmtFtmScBOZkcY+yrrtyoZJwfbN4JQVnUpypk1NA6Wvv
-Y0nf4hh7ZKPI96cQy8YwLqpoOuyUYboJOxtvp475a0q2mVPznZJUTfkr30dD98ZU
-OjmyuX8uPc9JyZAKOAkjFKRMAwbAzJpYbutQw7HAmYxp/TQ3NPr94Idumx84VEmv
-C1kz6CMTKsix2VqmeJ2ADkkqm9NZfjCaa2lBgTQ7DMQL8ndm+4nYQZm8Z4hnZBst
-eeDTPdPgDH5LsIF3XUZH91IX6jBHvFno8HOYqtVgQsYRzE1rqZS/DEfIYZzSNgyi
-DQ6dWIyJxbL8zGT8+xAmBIfugFe7lC4BN1YnSE7gIxUgf4wGBvbq6JSoZt4lbJoI
-f3t869W93LR5OokCAwEAAaOCAbUwggGxMB8GA1UdIwQYMBaAFLOQp9jJr07NYTyf
-fK1df0H9aTDqMB0GA1UdDgQWBBSc2t4hDVeXYEBCepolEin31RbcVDAOBgNVHQ8B
-Af8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
-BQUHAwIwSwYDVR0gBEQwQjA2BgsrBgEEAbIxAQICGjAnMCUGCCsGAQUFBwIBFhlo
-dHRwczovL2Nwcy51c2VydHJ1c3QuY29tMAgGBmeBDAECATBBBgNVHR8EOjA4MDag
-NKAyhjBodHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vR2FuZGlTdGFuZGFyZFNTTENB
-Mi5jcmwwcwYIKwYBBQUHAQEEZzBlMDwGCCsGAQUFBzAChjBodHRwOi8vY3J0LnVz
-ZXJ0cnVzdC5jb20vR2FuZGlTdGFuZGFyZFNTTENBMi5jcnQwJQYIKwYBBQUHMAGG
-GWh0dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wLQYDVR0RBCYwJIIOcnRjLmRlYmlh
-bi5vcmeCEnd3dy5ydGMuZGViaWFuLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAd5Mq
-vGWZ5+ZAsFLDE8pl4cn0PcHd1cVSGLSaUeuSoiCBW4imlN+aoykMkvky9Pvn6dvb
-Uw7EvqHn2RvyeIC9vGI5nvHm+Ym5BbYNqwA+uyaIxplfhLSuGUyyE5IoT8TtErla
-gRnDUOeg7DTKeBc49YTJ1WAf+eMqSCJFhDZKbvFIkttI6LRJXsYQ+1edVjme6nMF
-CLmYnnQI5FzYM+wGXgH8W2JEPxJT2i7kYVcjolRoF5gOL/UzLSPkPR5vxEYQNsZo
-1ozT+UCR0AVSdCqvuqxpycePHcpHhq1UfL/YH+S4MsR1fTtT4tYQPzpaFCRVRBsc
-XdSpDZbiFBKUSJucSA==
------END CERTIFICATE-----