add d-i.debian.org ssl cert

Signed-off-by: Julien Cristau <jcristau@debian.org>

diff --git a/modules/ssl/files/chains/d-i.debian.org.crt b/modules/ssl/files/chains/d-i.debian.org.crt
new file mode 120000 (symlink)
index 0000000..50d224a
--- /dev/null
+++ b/modules/ssl/files/chains/d-i.debian.org.crt
@@ -0,0 +1 @@
+GANDI-2-CA
\ No newline at end of file

diff --git a/modules/ssl/files/servicecerts/d-i.debian.org.crt b/modules/ssl/files/servicecerts/d-i.debian.org.crt
new file mode 100644 (file)
index 0000000..063940c
--- /dev/null
+++ b/modules/ssl/files/servicecerts/d-i.debian.org.crt
@@ -0,0 +1,118 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            bc:88:f9:80:12:cd:d0:5b:ad:be:64:3c:1a:db:f3:12
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=FR, ST=Paris, L=Paris, O=Gandi, CN=Gandi Standard SSL CA 2
+        Validity
+            Not Before: Jan  2 00:00:00 2016 GMT
+            Not After : Jan  2 23:59:59 2017 GMT
+        Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=d-i.debian.org
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (3072 bit)
+                Modulus:
+                    00:af:a2:e3:c8:4a:41:df:48:66:b6:98:4f:4f:29:
+                    01:4f:1f:b3:18:8f:66:aa:3c:4c:6f:91:1a:9f:20:
+                    1d:d0:c0:67:33:e7:a4:5a:61:eb:bb:fd:2b:05:9f:
+                    16:1f:03:d1:45:f4:1c:a6:7e:7f:06:f2:3d:e4:29:
+                    e5:9a:be:4d:86:9a:65:5c:39:5b:71:04:01:2d:47:
+                    6e:c2:5d:e6:e5:e9:1c:16:a4:0b:d0:fc:70:dc:90:
+                    11:6f:6b:33:b7:0a:af:f1:84:a6:96:33:4b:ee:93:
+                    3d:c3:6a:5b:77:2b:c7:eb:25:e3:02:d3:8f:34:71:
+                    33:99:07:4a:16:44:0a:44:0c:63:ee:22:58:02:44:
+                    cd:c7:eb:18:04:a6:e4:c4:c9:ee:54:80:4a:ab:1d:
+                    2c:8c:d2:f7:4e:f5:30:b6:ee:03:e0:a4:27:cd:17:
+                    ad:6b:c2:f9:47:ac:ef:2d:17:66:37:99:d9:97:16:
+                    df:6c:93:3a:6f:50:23:77:97:b9:7a:b7:1b:d7:96:
+                    47:29:4d:fe:8e:cf:b0:56:94:c1:08:55:61:b2:bd:
+                    9b:0d:84:d2:3a:19:9c:fe:79:b7:64:61:f7:64:3b:
+                    32:d5:11:b0:45:11:1f:2e:b0:8b:d8:8c:32:4c:fb:
+                    d9:1e:ee:1e:72:b7:81:46:9d:db:de:5e:79:5f:75:
+                    4c:85:50:b6:e6:d8:0a:26:9b:41:f5:fc:30:34:14:
+                    ec:a3:0b:26:f0:d5:d2:f1:e7:b8:08:93:e9:e8:09:
+                    70:f8:68:7e:9d:3d:bf:42:7d:d6:ea:39:9f:49:aa:
+                    2e:4e:75:f1:cd:10:82:de:5d:0c:cf:86:35:60:97:
+                    39:d0:b5:59:26:c3:89:a3:d3:b2:fb:5b:d4:d3:d1:
+                    41:ea:93:19:40:c0:98:ba:b2:b6:24:c9:f3:6b:ce:
+                    57:43:46:7a:e9:1f:42:85:3e:f0:11:10:2f:1d:0e:
+                    80:11:e3:25:f3:c1:eb:75:d4:26:23:3e:88:d4:68:
+                    b4:8d:cf:9f:03:f7:ba:47:93:49
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Authority Key Identifier: 
+                keyid:B3:90:A7:D8:C9:AF:4E:CD:61:3C:9F:7C:AD:5D:7F:41:FD:69:30:EA
+
+            X509v3 Subject Key Identifier: 
+                DD:D2:BF:A1:7A:9C:B3:DA:DE:FC:DE:C4:F5:18:44:76:EF:B2:1C:61
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.6449.1.2.2.26
+                  CPS: https://cps.usertrust.com
+                Policy: 2.23.140.1.2.1
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://crl.usertrust.com/GandiStandardSSLCA2.crl
+
+            Authority Information Access: 
+                CA Issuers - URI:http://crt.usertrust.com/GandiStandardSSLCA2.crt
+                OCSP - URI:http://ocsp.usertrust.com
+
+            X509v3 Subject Alternative Name: 
+                DNS:d-i.debian.org, DNS:www.d-i.debian.org
+    Signature Algorithm: sha256WithRSAEncryption
+         36:91:a5:ea:5b:97:38:44:06:8d:d4:98:12:f7:74:c4:95:c1:
+         fe:1d:ea:10:48:ba:76:29:63:1b:8b:24:70:e1:cf:a1:ac:d5:
+         81:f4:43:89:f6:93:8a:74:b0:65:63:90:a8:44:43:7e:5e:15:
+         ca:0f:e8:75:ec:02:38:d3:7f:31:b2:cc:16:12:e0:d9:de:9a:
+         ae:67:fb:1f:83:12:38:89:ab:b2:cd:67:d4:e5:70:5f:7c:08:
+         50:be:fb:1f:62:ab:5c:00:20:0d:fa:a5:8b:a8:36:2d:9e:b6:
+         24:6d:e4:f5:be:d2:30:92:9e:14:f2:cd:d3:22:12:4a:bf:e0:
+         c3:be:1a:2b:fb:cd:5c:87:95:b3:c7:b7:d6:5c:ed:c4:22:37:
+         04:6a:4f:38:1d:9d:6d:ae:16:cd:68:80:42:0d:79:9c:2e:a2:
+         67:9c:3f:6d:0c:bb:e1:ee:b2:18:a4:c0:e4:8c:55:b5:91:d7:
+         d2:cd:e5:b4:a1:f0:bc:dc:54:46:cf:db:2b:e4:b3:fd:4a:c5:
+         14:70:88:b9:44:c1:ac:dc:fa:98:01:13:78:0e:1c:40:fd:9d:
+         ec:06:7c:04:3e:5d:7d:26:2e:d4:f6:11:e6:bb:13:77:fb:ba:
+         33:b1:2d:22:f6:36:7a:32:b5:d0:70:e2:6c:aa:56:9c:dc:d0:
+         2c:86:b4:93
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----