From d34dce7c0f7b41f1264d5ffd69e987262dbee180 Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Mon, 13 Jul 2015 17:14:53 +0200 Subject: [PATCH] ssl for dgit --- .../roles/files/dgit/browse.dgit.debian.org | 8 +- modules/roles/files/dgit/git.dgit.debian.org | 9 +- .../files/chains/browse.dgit.debian.org.crt | 1 + .../ssl/files/chains/git.dgit.debian.org.crt | 1 + .../servicecerts/browse.dgit.debian.org.crt | 118 ++++++++++++++++++ .../servicecerts/git.dgit.debian.org.crt | 118 ++++++++++++++++++ 6 files changed, 247 insertions(+), 8 deletions(-) create mode 120000 modules/ssl/files/chains/browse.dgit.debian.org.crt create mode 120000 modules/ssl/files/chains/git.dgit.debian.org.crt create mode 100644 modules/ssl/files/servicecerts/browse.dgit.debian.org.crt create mode 100644 modules/ssl/files/servicecerts/git.dgit.debian.org.crt diff --git a/modules/roles/files/dgit/browse.dgit.debian.org b/modules/roles/files/dgit/browse.dgit.debian.org index 3b81f73fc..e3d7df30f 100644 --- a/modules/roles/files/dgit/browse.dgit.debian.org +++ b/modules/roles/files/dgit/browse.dgit.debian.org @@ -1,14 +1,14 @@ -#Use common-dsa-vhost-https-redirect browse.dgit.debian.org +Use common-dsa-vhost-https-redirect browse.dgit.debian.org - + ServerName browse.dgit.debian.org ServerAdmin dgit-owner@debian.org ErrorLog /var/log/apache2/browse.dgit.debian.org-ssl-error.log CustomLog /var/log/apache2/browse.dgit.debian.org-ssl-access.log privacy - #Use common-debian-service-ssl browse.dgit.debian.org - #Use common-ssl-HSTS + Use common-debian-service-ssl browse.dgit.debian.org + Use common-ssl-HSTS UserDir disabled diff --git a/modules/roles/files/dgit/git.dgit.debian.org b/modules/roles/files/dgit/git.dgit.debian.org index 80fcd067f..1adac0de0 100644 --- a/modules/roles/files/dgit/git.dgit.debian.org +++ b/modules/roles/files/dgit/git.dgit.debian.org @@ -1,14 +1,14 @@ -#Use common-dsa-vhost-https-redirect git.dgit.debian.org +Use common-dsa-vhost-https-redirect git.dgit.debian.org - + ServerName git.dgit.debian.org ServerAdmin dgit-owner@debian.org ErrorLog /var/log/apache2/git.dgit.debian.org-ssl-error.log CustomLog /var/log/apache2/git.dgit.debian.org-ssl-access.log privacy - #Use common-debian-service-ssl git.dgit.debian.org - #Use common-ssl-HSTS + Use common-debian-service-ssl git.dgit.debian.org + Use common-ssl-HSTS UserDir disabled @@ -22,6 +22,7 @@ SetEnv GIT_PROJECT_ROOT /srv/dgit.debian.org/unpriv/repos + SetEnv GIT_HTTP_EXPORT_ALL AliasMatch ^/git/(.*/objects/[0-9a-f]{2}/[0-9a-f]{38})$ /srv/dgit.debian.org/unpriv/repos/$1 AliasMatch ^/git/(.*/objects/pack/pack-[0-9a-f]{40}.(pack|idx))$ /srv/dgit.debian.org/unpriv/repos/$1 ScriptAlias /git/ /usr/lib/git-core/git-http-backend/ diff --git a/modules/ssl/files/chains/browse.dgit.debian.org.crt b/modules/ssl/files/chains/browse.dgit.debian.org.crt new file mode 120000 index 000000000..50d224a83 --- /dev/null +++ b/modules/ssl/files/chains/browse.dgit.debian.org.crt @@ -0,0 +1 @@ +GANDI-2-CA \ No newline at end of file diff --git a/modules/ssl/files/chains/git.dgit.debian.org.crt b/modules/ssl/files/chains/git.dgit.debian.org.crt new file mode 120000 index 000000000..50d224a83 --- /dev/null +++ b/modules/ssl/files/chains/git.dgit.debian.org.crt @@ -0,0 +1 @@ +GANDI-2-CA \ No newline at end of file diff --git a/modules/ssl/files/servicecerts/browse.dgit.debian.org.crt b/modules/ssl/files/servicecerts/browse.dgit.debian.org.crt new file mode 100644 index 000000000..b79a7eaff --- /dev/null +++ b/modules/ssl/files/servicecerts/browse.dgit.debian.org.crt @@ -0,0 +1,118 @@ +Certificate: + Data: + Version: 3 (0x2) + Serial Number: + 07:2c:b4:25:cd:c7:2f:70:73:45:69:65:94:3a:f4:df + Signature Algorithm: sha256WithRSAEncryption + Issuer: C=FR, ST=Paris, L=Paris, O=Gandi, CN=Gandi Standard SSL CA 2 + Validity + Not Before: Jul 13 00:00:00 2015 GMT + Not After : Jul 13 23:59:59 2016 GMT + Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=browse.dgit.debian.org + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + Public-Key: (3072 bit) + Modulus: + 00:e0:68:01:e6:70:86:bf:6d:3e:19:28:3e:a9:24: + 08:8e:00:20:2c:ca:d5:e8:04:42:e4:ca:15:34:6a: + 8f:d7:15:9c:b3:f3:16:bb:c0:d9:79:77:21:3f:0e: + f6:3b:69:0b:7f:d9:d1:a5:75:b0:da:38:32:3f:e5: + 98:3e:cb:ac:e7:b6:95:08:a5:39:9c:0f:a5:69:ae: + 59:ad:93:77:10:a5:11:83:a8:68:ca:e5:60:4f:39: + 13:9f:f7:e4:68:95:8d:e4:32:0f:bc:8e:68:2d:85: + 9f:af:d1:65:23:05:71:6f:a5:96:9e:09:2b:e9:4c: + 63:73:17:c5:5f:82:59:2c:2e:70:a2:17:0e:9d:ef: + 5f:01:bf:0f:f5:8f:52:a5:57:12:d9:cb:6d:37:d8: + 22:ca:4e:48:d2:f6:63:92:53:5d:1b:90:89:25:c6: + e5:f0:b0:2d:25:7c:d6:94:68:de:14:eb:76:ec:13: + 6e:11:4a:a2:6e:a9:fb:ab:40:e7:4d:eb:cd:e7:56: + 87:50:c2:bf:33:e3:d3:97:50:51:f9:2b:f6:2c:ae: + 27:79:94:9e:4e:63:5e:43:4a:68:f2:23:e8:05:79: + 48:c4:af:eb:ed:f3:ac:e3:3c:42:d6:ee:35:25:cd: + aa:d8:ff:af:7d:c7:76:48:c0:7e:a1:91:e1:b5:6b: + ed:ae:74:b0:6d:b4:0e:78:fd:08:85:5f:2a:58:ae: + 12:20:23:f7:44:0f:e5:fc:17:4a:0f:b1:38:f7:7a: + 0e:b5:84:18:46:b7:79:98:8d:58:fb:cf:97:0f:03: + fa:aa:f5:1b:ad:c8:b7:7f:1d:0d:c9:29:19:ad:8f: + e6:64:3e:80:b2:e4:c0:51:33:b5:c7:9b:ca:1b:7d: + a1:f7:b2:55:d4:39:8e:d6:77:15:4d:e6:1c:72:f2: + 00:56:f1:96:75:d4:cd:8b:67:77:a0:29:5e:92:ff: + b4:be:65:fd:60:4d:a3:be:08:99:46:6b:ac:01:49: + 67:ed:9e:22:79:fa:a2:f0:dd:79 + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Authority Key Identifier: + keyid:B3:90:A7:D8:C9:AF:4E:CD:61:3C:9F:7C:AD:5D:7F:41:FD:69:30:EA + + X509v3 Subject Key Identifier: + 28:27:17:64:5D:D2:5B:4F:F1:A3:94:D2:C1:D7:6A:94:4A:34:C3:42 + X509v3 Key Usage: critical + Digital Signature, Key Encipherment + X509v3 Basic Constraints: critical + CA:FALSE + X509v3 Extended Key Usage: + TLS Web Server Authentication, TLS Web Client Authentication + X509v3 Certificate Policies: + Policy: 1.3.6.1.4.1.6449.1.2.2.26 + CPS: https://cps.usertrust.com + Policy: 2.23.140.1.2.1 + + X509v3 CRL Distribution Points: + + Full Name: + URI:http://crl.usertrust.com/GandiStandardSSLCA2.crl + + Authority Information Access: + CA Issuers - URI:http://crt.usertrust.com/GandiStandardSSLCA2.crt + OCSP - URI:http://ocsp.usertrust.com + + X509v3 Subject Alternative Name: + DNS:browse.dgit.debian.org, DNS:www.browse.dgit.debian.org + Signature Algorithm: sha256WithRSAEncryption + 20:a7:df:a3:d4:d6:23:83:55:1b:d0:7c:d0:32:7e:d3:34:18: + 03:85:25:dc:24:4c:9f:4c:38:4a:61:d6:90:53:91:bf:6f:bf: + 68:07:77:f0:1f:b6:a1:69:70:81:93:f8:8c:58:72:f3:18:6a: + e3:cd:f4:cf:d5:d6:fc:05:39:4f:9e:be:49:0b:e0:d7:5a:bd: + 3f:95:a3:b9:71:ff:c3:1a:df:49:8a:cb:70:c5:fe:94:c2:61: + 15:f7:b1:fc:6c:42:de:d5:25:6c:25:d4:fa:98:a9:51:6c:fb: + ea:b9:73:a5:9b:4e:e7:a6:f1:0c:d0:c3:e3:e0:bd:10:6c:e2: + 22:30:d4:9d:17:84:8b:2f:11:cc:f0:50:4e:58:ad:f1:a9:05: + 7d:5c:0e:63:92:0d:8d:be:d8:54:e3:79:ec:ef:c4:02:d9:e3: + ce:df:16:eb:35:8e:50:11:a8:20:ee:4d:86:d3:1d:a2:db:2e: + 96:85:6a:5e:3a:07:44:77:65:4c:de:56:35:34:6b:44:db:df: + 75:a6:8e:d1:a0:94:9a:75:b5:dc:5c:42:9c:42:61:f0:e7:8b: + 75:4b:e4:4e:9c:90:5b:93:2e:c4:9d:db:47:03:2a:81:7d:83: + d6:eb:8e:d5:c9:22:5d:17:b6:1b:ca:2e:94:1c:c3:df:94:f8: + 66:74:76:ed +-----BEGIN CERTIFICATE----- +MIIFkTCCBHmgAwIBAgIQByy0Jc3HL3BzRWlllDr03zANBgkqhkiG9w0BAQsFADBf +MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w +DAYDVQQKEwVHYW5kaTEgMB4GA1UEAxMXR2FuZGkgU3RhbmRhcmQgU1NMIENBIDIw +HhcNMTUwNzEzMDAwMDAwWhcNMTYwNzEzMjM1OTU5WjBhMSEwHwYDVQQLExhEb21h +aW4gQ29udHJvbCBWYWxpZGF0ZWQxGzAZBgNVBAsTEkdhbmRpIFN0YW5kYXJkIFNT +TDEfMB0GA1UEAxMWYnJvd3NlLmRnaXQuZGViaWFuLm9yZzCCAaIwDQYJKoZIhvcN +AQEBBQADggGPADCCAYoCggGBAOBoAeZwhr9tPhkoPqkkCI4AICzK1egEQuTKFTRq +j9cVnLPzFrvA2Xl3IT8O9jtpC3/Z0aV1sNo4Mj/lmD7LrOe2lQilOZwPpWmuWa2T +dxClEYOoaMrlYE85E5/35GiVjeQyD7yOaC2Fn6/RZSMFcW+llp4JK+lMY3MXxV+C +WSwucKIXDp3vXwG/D/WPUqVXEtnLbTfYIspOSNL2Y5JTXRuQiSXG5fCwLSV81pRo +3hTrduwTbhFKom6p+6tA503rzedWh1DCvzPj05dQUfkr9iyuJ3mUnk5jXkNKaPIj +6AV5SMSv6+3zrOM8QtbuNSXNqtj/r33HdkjAfqGR4bVr7a50sG20Dnj9CIVfKliu +EiAj90QP5fwXSg+xOPd6DrWEGEa3eZiNWPvPlw8D+qr1G63It38dDckpGa2P5mQ+ +gLLkwFEztcebyht9ofeyVdQ5jtZ3FU3mHHLyAFbxlnXUzYtnd6ApXpL/tL5l/WBN +o74ImUZrrAFJZ+2eInn6ovDdeQIDAQABo4IBxTCCAcEwHwYDVR0jBBgwFoAUs5Cn +2MmvTs1hPJ98rV1/Qf1pMOowHQYDVR0OBBYEFCgnF2Rd0ltP8aOU0sHXapRKNMNC +MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUF +BwMBBggrBgEFBQcDAjBLBgNVHSAERDBCMDYGCysGAQQBsjEBAgIaMCcwJQYIKwYB +BQUHAgEWGWh0dHBzOi8vY3BzLnVzZXJ0cnVzdC5jb20wCAYGZ4EMAQIBMEEGA1Ud +HwQ6MDgwNqA0oDKGMGh0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9HYW5kaVN0YW5k +YXJkU1NMQ0EyLmNybDBzBggrBgEFBQcBAQRnMGUwPAYIKwYBBQUHMAKGMGh0dHA6 +Ly9jcnQudXNlcnRydXN0LmNvbS9HYW5kaVN0YW5kYXJkU1NMQ0EyLmNydDAlBggr +BgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTA9BgNVHREENjA0ghZi +cm93c2UuZGdpdC5kZWJpYW4ub3Jnghp3d3cuYnJvd3NlLmRnaXQuZGViaWFuLm9y +ZzANBgkqhkiG9w0BAQsFAAOCAQEAIKffo9TWI4NVG9B80DJ+0zQYA4Ul3CRMn0w4 +SmHWkFORv2+/aAd38B+2oWlwgZP4jFhy8xhq4830z9XW/AU5T56+SQvg11q9P5Wj +uXH/wxrfSYrLcMX+lMJhFfex/GxC3tUlbCXU+pipUWz76rlzpZtO56bxDNDD4+C9 +EGziIjDUnReEiy8RzPBQTlit8akFfVwOY5INjb7YVON57O/EAtnjzt8W6zWOUBGo +IO5NhtMdotsuloVqXjoHRHdlTN5WNTRrRNvfdaaO0aCUmnW13FxCnEJh8OeLdUvk +TpyQW5MuxJ3bRwMqgX2D1uuO1ckiXRe2G8oulBzD35T4ZnR27Q== +-----END CERTIFICATE----- diff --git a/modules/ssl/files/servicecerts/git.dgit.debian.org.crt b/modules/ssl/files/servicecerts/git.dgit.debian.org.crt new file mode 100644 index 000000000..14dd9bb07 --- /dev/null +++ b/modules/ssl/files/servicecerts/git.dgit.debian.org.crt @@ -0,0 +1,118 @@ +Certificate: + Data: + Version: 3 (0x2) + Serial Number: + ed:8d:5e:ee:dd:94:a8:08:26:5d:b1:14:4c:20:f6:bf + Signature Algorithm: sha256WithRSAEncryption + Issuer: C=FR, ST=Paris, L=Paris, O=Gandi, CN=Gandi Standard SSL CA 2 + Validity + Not Before: Jul 13 00:00:00 2015 GMT + Not After : Jul 13 23:59:59 2016 GMT + Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=git.dgit.debian.org + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + Public-Key: (3072 bit) + Modulus: + 00:bc:d0:db:2b:ea:a2:d3:27:74:e6:6a:14:17:72: + 99:90:2a:15:55:27:dc:25:87:9d:9c:19:f6:59:51: + 80:f4:a0:2f:36:81:bc:b7:b6:3a:95:5d:bf:3f:4b: + b8:cb:53:8b:7f:83:81:92:23:a1:16:69:4b:3e:d7: + 07:01:2f:44:fb:5f:52:74:47:f6:48:14:b5:1f:71: + b5:4c:a2:69:31:1f:a3:52:ad:bd:f8:c3:62:9d:dc: + 2d:9a:cb:2a:30:e6:6f:b0:83:03:f0:99:32:af:8c: + 06:33:4c:e1:ac:a0:8d:1c:e8:70:3a:35:56:a5:be: + a5:b4:e8:08:37:c6:77:1d:81:f9:18:ea:21:31:30: + f3:78:c9:70:ca:9e:05:e3:4f:74:8f:b3:3c:90:9b: + 46:40:2d:fc:52:ec:8a:58:e1:ea:d5:37:6b:a9:24: + 94:74:ab:c4:6e:7c:4d:cd:49:25:a1:1f:7d:7b:5d: + f4:73:98:c4:0b:30:3b:56:3e:b6:2c:9e:9a:85:3a: + 50:85:69:13:f4:fe:4b:6a:4a:61:ca:e5:c3:af:2e: + d5:24:88:cf:2b:a3:41:19:42:d2:65:3e:b1:e5:da: + 88:f8:32:97:17:9f:d5:0d:91:e9:49:b3:23:cc:23: + 16:b7:42:d2:cc:37:77:d2:43:7f:54:ee:03:ad:da: + a9:31:27:06:82:72:29:b1:f6:74:c4:94:91:2c:74: + a3:b6:d6:19:67:e3:ce:07:86:35:7e:97:37:45:40: + 69:aa:5f:81:53:2b:11:32:39:37:64:fb:30:d0:a3: + c0:ce:e3:5c:8d:af:de:79:6d:23:ec:be:f2:1a:e9: + 99:be:2e:f6:17:92:67:ea:90:68:69:43:42:c0:ac: + a5:b0:10:21:bc:32:07:1c:b4:79:ea:b7:3d:8b:71: + 6a:64:81:d2:6f:95:23:b6:32:0c:b8:1e:cc:dd:5d: + 37:3c:fa:13:17:74:87:bc:8e:20:9b:1b:87:88:ac: + 8e:02:01:b3:1b:74:d8:c6:c4:bd + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Authority Key Identifier: + keyid:B3:90:A7:D8:C9:AF:4E:CD:61:3C:9F:7C:AD:5D:7F:41:FD:69:30:EA + + X509v3 Subject Key Identifier: + 85:BD:B3:23:61:CE:04:DC:A1:CD:A1:C7:11:40:51:40:F2:AB:BA:62 + X509v3 Key Usage: critical + Digital Signature, Key Encipherment + X509v3 Basic Constraints: critical + CA:FALSE + X509v3 Extended Key Usage: + TLS Web Server Authentication, TLS Web Client Authentication + X509v3 Certificate Policies: + Policy: 1.3.6.1.4.1.6449.1.2.2.26 + CPS: https://cps.usertrust.com + Policy: 2.23.140.1.2.1 + + X509v3 CRL Distribution Points: + + Full Name: + URI:http://crl.usertrust.com/GandiStandardSSLCA2.crl + + Authority Information Access: + CA Issuers - URI:http://crt.usertrust.com/GandiStandardSSLCA2.crt + OCSP - URI:http://ocsp.usertrust.com + + X509v3 Subject Alternative Name: + DNS:git.dgit.debian.org, DNS:www.git.dgit.debian.org + Signature Algorithm: sha256WithRSAEncryption + 73:10:70:2b:e8:45:5e:33:1b:60:49:74:5e:2e:dd:44:79:e9: + 43:c6:21:ef:37:39:07:8d:4e:28:98:a8:be:17:f9:45:9e:4e: + 6f:ae:be:9d:35:b8:9f:79:95:b5:30:6a:70:17:98:76:86:fb: + 34:fa:e7:36:52:18:bd:93:07:f7:1a:db:25:67:92:06:93:9d: + cd:ad:e7:d7:4d:a5:a8:00:57:57:2c:a5:47:fc:be:0f:03:36: + 6e:34:bd:a9:c7:0f:84:2f:e1:7e:78:e2:0f:94:6d:97:5b:19: + 04:3b:cb:25:5e:ff:c1:f4:38:ee:a8:07:e3:2a:49:6f:37:d1: + c8:84:9c:af:30:ef:d6:af:35:31:19:ac:ef:f1:a0:d9:bb:6e: + 66:68:62:99:d9:4c:1c:d1:67:d2:53:8e:32:a9:06:8d:24:81: + 0e:85:40:e7:c1:0e:44:70:40:85:42:5d:e8:f9:dc:f9:b9:81: + 90:02:9b:76:7c:48:61:30:6b:5b:bd:8a:13:66:c2:88:fd:4c: + 6d:c7:d5:d8:64:3a:99:f5:0b:3d:ff:39:e7:32:14:06:83:b5: + c9:8b:51:05:46:ad:9a:27:3b:f0:0f:15:a2:9b:e2:ce:14:04: + 18:df:43:58:1b:53:b5:08:75:02:7c:7b:36:7c:d2:cd:9f:6f: + 2f:ae:e9:72 +-----BEGIN CERTIFICATE----- +MIIFiTCCBHGgAwIBAgIRAO2NXu7dlKgIJl2xFEwg9r8wDQYJKoZIhvcNAQELBQAw +XzELMAkGA1UEBhMCRlIxDjAMBgNVBAgTBVBhcmlzMQ4wDAYDVQQHEwVQYXJpczEO +MAwGA1UEChMFR2FuZGkxIDAeBgNVBAMTF0dhbmRpIFN0YW5kYXJkIFNTTCBDQSAy +MB4XDTE1MDcxMzAwMDAwMFoXDTE2MDcxMzIzNTk1OVowXjEhMB8GA1UECxMYRG9t +YWluIENvbnRyb2wgVmFsaWRhdGVkMRswGQYDVQQLExJHYW5kaSBTdGFuZGFyZCBT +U0wxHDAaBgNVBAMTE2dpdC5kZ2l0LmRlYmlhbi5vcmcwggGiMA0GCSqGSIb3DQEB +AQUAA4IBjwAwggGKAoIBgQC80Nsr6qLTJ3TmahQXcpmQKhVVJ9wlh52cGfZZUYD0 +oC82gby3tjqVXb8/S7jLU4t/g4GSI6EWaUs+1wcBL0T7X1J0R/ZIFLUfcbVMomkx +H6NSrb34w2Kd3C2ayyow5m+wgwPwmTKvjAYzTOGsoI0c6HA6NValvqW06Ag3xncd +gfkY6iExMPN4yXDKngXjT3SPszyQm0ZALfxS7IpY4erVN2upJJR0q8RufE3NSSWh +H317XfRzmMQLMDtWPrYsnpqFOlCFaRP0/ktqSmHK5cOvLtUkiM8ro0EZQtJlPrHl +2oj4MpcXn9UNkelJsyPMIxa3QtLMN3fSQ39U7gOt2qkxJwaCcimx9nTElJEsdKO2 +1hln484HhjV+lzdFQGmqX4FTKxEyOTdk+zDQo8DO41yNr955bSPsvvIa6Zm+LvYX +kmfqkGhpQ0LArKWwECG8MgcctHnqtz2LcWpkgdJvlSO2Mgy4HszdXTc8+hMXdIe8 +jiCbG4eIrI4CAbMbdNjGxL0CAwEAAaOCAb8wggG7MB8GA1UdIwQYMBaAFLOQp9jJ +r07NYTyffK1df0H9aTDqMB0GA1UdDgQWBBSFvbMjYc4E3KHNoccRQFFA8qu6YjAO +BgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwSwYDVR0gBEQwQjA2BgsrBgEEAbIxAQICGjAnMCUGCCsGAQUF +BwIBFhlodHRwczovL2Nwcy51c2VydHJ1c3QuY29tMAgGBmeBDAECATBBBgNVHR8E +OjA4MDagNKAyhjBodHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vR2FuZGlTdGFuZGFy +ZFNTTENBMi5jcmwwcwYIKwYBBQUHAQEEZzBlMDwGCCsGAQUFBzAChjBodHRwOi8v +Y3J0LnVzZXJ0cnVzdC5jb20vR2FuZGlTdGFuZGFyZFNTTENBMi5jcnQwJQYIKwYB +BQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wNwYDVR0RBDAwLoITZ2l0 +LmRnaXQuZGViaWFuLm9yZ4IXd3d3LmdpdC5kZ2l0LmRlYmlhbi5vcmcwDQYJKoZI +hvcNAQELBQADggEBAHMQcCvoRV4zG2BJdF4u3UR56UPGIe83OQeNTiiYqL4X+UWe +Tm+uvp01uJ95lbUwanAXmHaG+zT65zZSGL2TB/ca2yVnkgaTnc2t59dNpagAV1cs +pUf8vg8DNm40vanHD4Qv4X544g+UbZdbGQQ7yyVe/8H0OO6oB+MqSW830ciEnK8w +79avNTEZrO/xoNm7bmZoYpnZTBzRZ9JTjjKpBo0kgQ6FQOfBDkRwQIVCXej53Pm5 +gZACm3Z8SGEwa1u9ihNmwoj9TG3H1dhkOpn1Cz3/OecyFAaDtcmLUQVGrZonO/AP +FaKb4s4UBBjfQ1gbU7UIdQJ8ezZ80s2fby+u6XI= +-----END CERTIFICATE----- -- 2.20.1