Add packages.debian.org cert

diff --git a/modules/ssl/files/chains/packages.debian.org.crt b/modules/ssl/files/chains/packages.debian.org.crt
new file mode 120000 (symlink)
index 0000000..6aaa914
--- /dev/null
+++ b/modules/ssl/files/chains/packages.debian.org.crt
@@ -0,0 +1 @@
+GANDI-CA
\ No newline at end of file

diff --git a/modules/ssl/files/servicecerts/packages.debian.org.crt b/modules/ssl/files/servicecerts/packages.debian.org.crt
new file mode 100644 (file)
index 0000000..0cf8445
--- /dev/null
+++ b/modules/ssl/files/servicecerts/packages.debian.org.crt
@@ -0,0 +1,107 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            29:54:5c:13:c1:b5:c7:34:d3:b0:54:b7:d0:c3:2e:34
+    Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=FR, O=GANDI SAS, CN=Gandi Standard SSL CA
+        Validity
+            Not Before: Feb 10 00:00:00 2014 GMT
+            Not After : Feb 10 23:59:59 2015 GMT
+        Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=packages.debian.org
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:aa:cc:d7:38:b4:66:95:83:69:5c:0d:66:dc:44:
+                    26:34:4c:ee:90:11:f7:84:ee:23:eb:3a:58:63:ef:
+                    36:34:d7:fc:15:46:12:36:f9:ef:8f:8d:fe:a7:f0:
+                    4a:fc:39:db:b1:c3:fd:6a:a4:21:dd:17:8c:34:3d:
+                    6f:80:a2:e0:28:22:89:d3:2b:30:ae:76:90:2d:1d:
+                    c9:16:a4:f1:8e:8c:3e:01:3f:b0:47:4e:9c:3b:1c:
+                    d1:b4:75:21:26:ee:81:60:c1:f5:88:0a:1a:a5:10:
+                    32:93:41:9e:68:a3:61:16:45:a8:64:17:28:d6:73:
+                    c2:22:14:c3:c9:ff:84:75:54:d2:b9:67:4e:24:7b:
+                    e7:df:95:d7:5f:fc:0e:49:24:50:92:6c:b4:a3:8f:
+                    a4:fb:f2:f4:8e:a5:87:0a:09:c4:dc:42:05:f1:11:
+                    08:23:3c:d6:5d:89:88:fa:af:33:7c:9d:49:80:80:
+                    89:8d:f1:68:93:16:fb:5e:cd:3c:2b:46:a1:b1:45:
+                    b7:6d:f7:34:77:fd:3a:14:72:9c:23:c4:d5:1d:00:
+                    96:62:39:fe:e0:cd:09:21:89:27:bf:cc:dc:99:e5:
+                    bd:15:20:c4:0c:8b:4c:a2:19:49:95:e4:55:dd:d9:
+                    a5:61:c5:47:36:c6:3d:53:f1:ac:28:48:f3:7c:63:
+                    07:eb
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Authority Key Identifier: 
+                keyid:B6:A8:FF:A2:A8:2F:D0:A6:CD:4B:B1:68:F3:E7:50:10:31:A7:79:21
+
+            X509v3 Subject Key Identifier: 
+                5C:ED:36:A4:D7:F9:A8:09:64:95:F7:4D:4B:F2:AC:CE:D7:8A:3C:BC
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.6449.1.2.2.26
+                  CPS: http://www.gandi.net/contracts/fr/ssl/cps/pdf/
+                Policy: 2.23.140.1.2.1
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://crl.gandi.net/GandiStandardSSLCA.crl
+
+            Authority Information Access: 
+                CA Issuers - URI:http://crt.gandi.net/GandiStandardSSLCA.crt
+                OCSP - URI:http://ocsp.gandi.net
+
+            X509v3 Subject Alternative Name: 
+                DNS:packages.debian.org, DNS:www.packages.debian.org
+    Signature Algorithm: sha1WithRSAEncryption
+         a7:04:68:f0:ba:ef:69:f2:99:33:cf:96:60:88:5e:e2:92:a2:
+         ca:9e:94:9a:d8:2b:67:eb:c4:db:a3:60:7c:00:e4:20:2b:f1:
+         97:3f:b8:b1:9c:c0:77:62:0b:06:07:13:8f:80:9e:3d:32:70:
+         56:49:9e:cc:d5:5d:43:9b:5a:0e:78:ad:0d:f7:d8:ef:d2:8d:
+         f1:f1:e6:ea:af:ec:7b:8c:22:83:e9:b8:5c:be:4b:cd:d4:1e:
+         8d:0f:36:24:5b:6d:5f:38:51:a0:38:38:f2:74:9d:2f:5e:e6:
+         d4:28:d6:cf:57:4d:88:6a:f0:22:f2:aa:5d:63:d5:21:80:ba:
+         e9:75:0e:fa:01:41:42:c2:7a:68:05:e4:58:d6:db:91:3b:23:
+         6f:c6:e2:74:19:cd:10:15:d6:48:fa:53:78:48:f6:47:aa:17:
+         90:a8:bb:d3:99:86:78:3d:10:df:b0:6e:af:8b:77:22:e3:cf:
+         be:26:3d:36:55:0f:37:2f:dc:4a:d5:94:4e:46:67:65:68:66:
+         f7:23:82:f9:50:6b:69:2c:ef:a6:c4:99:b2:8b:cc:e1:4c:f3:
+         f9:9b:be:23:c9:b0:19:12:38:ea:7f:29:e2:32:29:c5:4c:95:
+         52:95:c1:58:26:bf:80:1c:c0:93:fe:94:ca:c2:32:9e:32:74:
+         5f:cf:18:6d
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----