nats-server/test/configs/certs/ocsp_peer/mini-ca/server2/TestServer4_bundle.pem at main

mirror of https://github.com/hanzomsg/nats-server.git synced 2026-10-30 20:27:34 +00:00

Files

T

Todd Beets f2da90c6e8 Enhance OCSP peer validation for GATEWAY and ROUTE connections. Nodes no longer required to have same CA issuer. OCSP response effectivity now checked using default clock skew and default validity period if not asserted by responder.

2023-08-02 16:09:21 -07:00

187 lines

10 KiB

Plaintext

Raw Permalink Blame History

 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
 :5e:ab:1c:8b:dc:fc:97:d9:34:9d:fd:cd:7d:b3:3c:51:83:ce:d2
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=US, ST=WA, L=Tacoma, O=Testnats, CN=Intermediate CA 2
         Validity
             Not Before: Aug  2 22:15:38 2023 GMT
             Not After : Jul 30 22:15:38 2033 GMT
         Subject: C=US, ST=WA, L=Tacoma, O=Testnats, CN=TestServer4
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
 :d5:fd:fb:3f:42:c7:ca:02:37:72:6e:78:d5:af:
 d:b4:4d:f4:4c:0c:8f:8f:67:da:62:c0:2a:0f:f3:
 :3b:83:c1:3a:df:9e:df:1d:26:12:95:41:ca:52:
 :4d:8b:38:7f:78:ce:ed:aa:48:b0:dc:57:62:80:
 a:fc:1f:43:c8:d8:2d:4f:38:c3:22:fc:bb:16:53:
 :9e:44:0c:f9:51:00:a0:57:97:3f:df:57:08:48:
 b:2b:55:b3:90:98:98:e6:a6:eb:ca:8f:ec:f8:4f:
                     dc:4d:7e:71:2e:03:ff:cd:fa:ef:65:7e:6d:8c:35:
                     be:df:fb:c1:0b:e9:f0:3b:89:24:4d:b4:02:7f:82:
 e:0a:34:ea:a8:68:9e:f8:4b:39:9a:8f:d5:eb:bc:
 :68:c9:f0:a5:eb:e9:be:7c:03:49:bd:b5:d9:54:
                     cf:88:29:b0:2c:a3:e9:08:b6:66:37:57:ef:66:5f:
 b:0f:34:6d:02:bf:92:2b:cc:e9:9d:c0:a8:92:0d:
 :8f:ae:f6:3f:24:38:e9:5b:fc:12:a2:ab:fa:42:
 f:5a:05:e3:5e:bb:08:43:5d:55:18:17:13:0a:27:
 :5f:05:69:18:a9:45:68:37:a7:35:f9:8c:ef:c5:
 f:b1:8d:aa:3c:b7:cc:47:b6:e5:85:e2:73:f5:8a:
 a:71
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier:
                 C4:BB:A1:42:EA:15:3E:0E:D1:48:5F:B5:E2:01:42:D0:72:BE:B0:CE
             X509v3 Authority Key Identifier:
 :55:E2:8E:E7:AD:A5:DD:80:3D:C9:33:0B:2C:A2:57:77:ED:15:AC
             X509v3 Basic Constraints: critical
                 CA:FALSE
             Netscape Cert Type:
                 SSL Client, SSL Server
             X509v3 Key Usage: critical
                 Digital Signature, Non Repudiation, Key Encipherment
             X509v3 Extended Key Usage:
                 TLS Web Server Authentication, TLS Web Client Authentication
             X509v3 CRL Distribution Points:
                 Full Name:
                   URI:http://127.0.0.1:28888/intermediate2_crl.der
             Authority Information Access:
                 OCSP - URI:http://127.0.0.1:28888/
             X509v3 Subject Alternative Name:
                 DNS:localhost, IP Address:127.0.0.1
     Signature Algorithm: sha256WithRSAEncryption
     Signature Value:
 :c2:1a:b0:94:8b:a0:f8:2c:85:1e:17:88:4e:ca:2c:d1:f6:
 :26:e3:a6:94:9f:62:eb:68:54:da:2b:f2:67:23:be:4b:95:
 :28:08:7a:52:8e:b3:b2:70:2f:c9:db:06:74:b4:8b:8e:84:
 :0a:74:f7:c1:67:81:69:11:36:2b:0e:4c:0f:2c:76:e6:2d:
 :f3:e8:59:0d:3a:6c:30:eb:31:16:74:c8:34:d1:62:97:6b:
 e:2f:5c:56:b0:6e:bc:5e:08:8f:d4:ce:4a:d3:8e:91:70:7d:
 :d4:3f:40:39:39:67:95:68:f7:16:c6:19:69:41:c2:20:2e:
 :e3:9d:31:c2:da:67:8d:2c:1f:a2:3f:1e:46:23:19:fd:25:
 :69:5c:80:09:1b:f7:7f:50:47:1d:d9:6b:aa:7b:0f:20:8d:
 a:f4:37:f0:c3:a7:31:5f:4d:41:70:c8:c4:aa:2a:69:d0:a8:
 b:3c:cc:b4:a4:12:54:a3:bf:ce:ea:22:20:58:ae:eb:29:f3:
 :da:22:05:46:cd:26:ef:63:84:4a:5b:86:47:fe:cb:fa:4a:
 c:fe:82:e0:db:81:dc:3e:87:8f:93:23:32:de:37:3d:d7:0f:
 c:f1:74:63:8b:11:b7:f3:69:b7:d6:e0:72:b2:1d:e1:15:10:
 d:2e:97:de
 -----BEGIN CERTIFICATE-----
 MIIEYjCCA0qgAwIBAgIUFl6rHIvc/JfZNJ39zX2zPFGDztIwDQYJKoZIhvcNAQEL
 BQAwWjELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAldBMQ8wDQYDVQQHDAZUYWNvbWEx
 ETAPBgNVBAoMCFRlc3RuYXRzMRowGAYDVQQDDBFJbnRlcm1lZGlhdGUgQ0EgMjAe
 Fw0yMzA4MDIyMjE1MzhaFw0zMzA3MzAyMjE1MzhaMFQxCzAJBgNVBAYTAlVTMQsw
 CQYDVQQIDAJXQTEPMA0GA1UEBwwGVGFjb21hMREwDwYDVQQKDAhUZXN0bmF0czEU
 MBIGA1UEAwwLVGVzdFNlcnZlcjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
 AoIBAQDV/fs/QsfKAjdybnjVr420TfRMDI+PZ9piwCoP83M7g8E6357fHSYSlUHK
 UohNizh/eM7tqkiw3FdigHr8H0PI2C1POMMi/LsWU4SeRAz5UQCgV5c/31cISDsr
 VbOQmJjmpuvKj+z4T9xNfnEuA//N+u9lfm2MNb7f+8EL6fA7iSRNtAJ/go4KNOqo
 aJ74Szmaj9XrvFloyfCl6+m+fANJvbXZVM+IKbAso+kItmY3V+9mX2sPNG0Cv5Ir
 zOmdwKiSDXaPrvY/JDjpW/wSoqv6Qj9aBeNeuwhDXVUYFxMKJ4RfBWkYqUVoN6c1
 +YzvxZ+xjao8t8xHtuWF4nP1ilpxAgMBAAGjggEkMIIBIDAdBgNVHQ4EFgQUxLuh
 QuoVPg7RSF+14gFC0HK+sM4wHwYDVR0jBBgwFoAUdVXijuetpd2APckzCyyiV3ft
 FawwDAYDVR0TAQH/BAIwADARBglghkgBhvhCAQEEBAMCBsAwDgYDVR0PAQH/BAQD
 AgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA9BgNVHR8ENjA0MDKg
 MKAuhixodHRwOi8vMTI3LjAuMC4xOjI4ODg4L2ludGVybWVkaWF0ZTJfY3JsLmRl
 cjAzBggrBgEFBQcBAQQnMCUwIwYIKwYBBQUHMAGGF2h0dHA6Ly8xMjcuMC4wLjE6
 Mjg4ODgvMBoGA1UdEQQTMBGCCWxvY2FsaG9zdIcEfwAAATANBgkqhkiG9w0BAQsF
 AAOCAQEAhcIasJSLoPgshR4XiE7KLNH2aSbjppSfYutoVNor8mcjvkuVVigIelKO
 s7JwL8nbBnS0i46EIwp098FngWkRNisOTA8sduYtUPPoWQ06bDDrMRZ0yDTRYpdr
 Hi9cVrBuvF4Ij9TOStOOkXB9GNQ/QDk5Z5Vo9xbGGWlBwiAuReOdMcLaZ40sH6I/
 HkYjGf0lFmlcgAkb939QRx3Za6p7DyCNWvQ38MOnMV9NQXDIxKoqadCoezzMtKQS
 VKO/zuoiIFiu6ynzFdoiBUbNJu9jhEpbhkf+y/pKDP6C4NuB3D6Hj5MjMt43PdcP
 bPF0Y4sRt/Npt9bgcrId4RUQfS6X3g==
 -----END CERTIFICATE-----
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
 c:d7:16:fb:15:99:81:4e:53:f8:80:7c:b6:7c:77:a6:06:a4:3e:ea
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=US, ST=WA, L=Tacoma, O=Testnats, CN=Root CA
         Validity
             Not Before: May  1 19:01:43 2023 GMT
             Not After : Apr 28 19:01:43 2033 GMT
         Subject: C=US, ST=WA, L=Tacoma, O=Testnats, CN=Intermediate CA 2
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
 :da:5f:ff:1d:f7:8d:1a:9e:9a:f3:2b:68:8f:c1:
 c:33:06:41:00:c9:3e:e4:1a:e1:e0:70:6a:f5:2f:
                     ad:df:f3:e9:99:ed:c5:d7:aa:93:13:37:ff:47:aa:
                     f3:c5:89:f7:b7:ad:3a:47:e5:9c:4e:9f:8c:e2:41:
                     ed:a4:7c:9d:88:32:ae:f5:8a:84:9f:0c:18:a0:b3:
                     fe:8e:dc:2a:88:6a:f5:2f:9c:86:92:fa:7b:6e:b3:
 a:78:67:53:0b:21:6c:0d:6c:80:1a:0e:1e:ee:06:
                     c4:d2:e7:24:c6:e5:74:be:1e:2e:17:55:2b:e5:9f:
 b:a0:58:cc:fe:bf:53:37:f7:dc:95:88:f4:77:a6:
 :b4:b8:7c:a2:4b:b7:6a:67:aa:84:dc:29:f1:f9:
                     d7:89:05:4d:0b:f3:8b:2d:52:99:57:ed:6f:11:9e:
                     af:28:a3:61:44:c2:ec:6e:7f:9f:3d:0b:dc:f7:19:
 d:14:8a:a5:b8:b6:29:02:34:90:b4:96:c1:cb:a7:
 :46:97:cf:8d:59:fd:17:b1:a6:27:a7:7b:8a:47:
 f:fa:03:24:1c:12:25:ee:34:d6:5c:da:45:98:23:
 :e1:48:c9:9a:df:37:aa:1b:70:6c:b2:0f:95:39:
                     d6:6d:3e:25:20:a8:07:2c:48:57:0c:99:52:cb:89:
 :41
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier:
 :55:E2:8E:E7:AD:A5:DD:80:3D:C9:33:0B:2C:A2:57:77:ED:15:AC
             X509v3 Authority Key Identifier:
                 C3:12:42:BA:A9:D8:4D:E0:C3:3E:BA:D7:47:41:A6:09:2F:6D:B4:E1
             X509v3 Basic Constraints: critical
                 CA:TRUE, pathlen:0
             X509v3 Key Usage: critical
                 Digital Signature, Certificate Sign, CRL Sign
             X509v3 CRL Distribution Points:
                 Full Name:
                   URI:http://127.0.0.1:8888/root_crl.der
             Authority Information Access:
                 OCSP - URI:http://127.0.0.1:8888/
     Signature Algorithm: sha256WithRSAEncryption
     Signature Value:
 f:c6:fc:1c:a1:a5:6d:76:f0:7d:28:1f:e1:15:ab:86:e0:c3:
         dd:a0:17:96:0a:c0:16:32:52:37:a4:b6:ad:24:d7:fd:3c:01:
 :3b:a9:a2:ea:81:05:e7:06:5f:a3:af:7b:fa:b2:a9:c3:63:
 :bb:0c:70:48:e9:73:cc:33:64:cd:b3:71:88:d1:d1:a1:5a:
 :a6:ed:03:46:8e:9a:c0:92:37:46:9b:e5:37:78:a5:43:d5:
 :99:1b:34:40:27:8f:95:dd:c6:9a:55:d9:60:25:8d:b8:e9:
 e:c9:b3:ee:e8:f0:d9:11:ef:4e:ae:1e:03:70:03:60:66:fd:
         ab:b0:f4:74:b6:27:7c:7a:96:9d:86:58:5f:5c:d3:04:ab:16:
 :12:53:51:c7:93:ca:0b:4e:67:27:2d:b7:20:79:b6:b7:8c:
         e7:c3:d9:25:5e:25:63:cf:93:f0:6e:31:c0:d5:4f:05:1c:8d:
 :1b:6a:d5:01:b6:7a:09:6f:38:f3:e5:e2:5a:e4:e2:42:d5:
 a:8d:de:ef:73:25:85:3c:e3:a9:ef:f7:f7:23:4f:d3:27:c2:
 a:c6:c0:6f:2a:9b:1e:fe:fc:31:73:10:e1:08:62:98:2b:6d:
 f:cc:ab:dd:3a:65:c2:00:7f:29:18:32:cd:8f:56:a9:1d:86:
         f1:5e:60:55
 -----BEGIN CERTIFICATE-----
 MIIECTCCAvGgAwIBAgIUPNcW+xWZgU5T+IB8tnx3pgakPuowDQYJKoZIhvcNAQEL
 BQAwUDELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAldBMQ8wDQYDVQQHDAZUYWNvbWEx
 ETAPBgNVBAoMCFRlc3RuYXRzMRAwDgYDVQQDDAdSb290IENBMB4XDTIzMDUwMTE5
 MDE0M1oXDTMzMDQyODE5MDE0M1owWjELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAldB
 MQ8wDQYDVQQHDAZUYWNvbWExETAPBgNVBAoMCFRlc3RuYXRzMRowGAYDVQQDDBFJ
 bnRlcm1lZGlhdGUgQ0EgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
 ANpf/x33jRqemvMraI/BDDMGQQDJPuQa4eBwavUvrd/z6ZntxdeqkxM3/0eq88WJ
 etOkflnE6fjOJB7aR8nYgyrvWKhJ8MGKCz/o7cKohq9S+chpL6e26zWnhnUwsh
 bA1sgBoOHu4GxNLnJMbldL4eLhdVK+WfC6BYzP6/Uzf33JWI9HemWbS4fKJLt2pn
 qoTcKfH514kFTQvziy1SmVftbxGeryijYUTC7G5/nz0L3PcZbRSKpbi2KQI0kLSW
 wcunQkaXz41Z/Rexpiene4pHb/oDJBwSJe401lzaRZgjMOFIyZrfN6obcGyyD5U5
 m0+JSCoByxIVwyZUsuJCEECAwEAAaOB0DCBzTAdBgNVHQ4EFgQUdVXijuetpd2A
 PckzCyyiV3ftFawwHwYDVR0jBBgwFoAUwxJCuqnYTeDDPrrXR0GmCS9ttOEwEgYD
 VR0TAQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAYYwMwYDVR0fBCwwKjAooCag
 JIYiaHR0cDovLzEyNy4wLjAuMTo4ODg4L3Jvb3RfY3JsLmRlcjAyBggrBgEFBQcB
 AQQmMCQwIgYIKwYBBQUHMAGGFmh0dHA6Ly8xMjcuMC4wLjE6ODg4OC8wDQYJKoZI
 hvcNAQELBQADggEBAB/G/ByhpW128H0oH+EVq4bgw92gF5YKwBYyUjektq0k1/08
 ATQ7qaLqgQXnBl+jr3v6sqnDY4m7DHBI6XPMM2TNs3GI0dGhWiKm7QNGjprAkjdG
 m+U3eKVD1UaZGzRAJ4+V3caaVdlgJY246W7Js+7o8NkR706uHgNwA2Bm/auw9HS2
 J3x6lp2GWF9c0wSrFlcSU1HHk8oLTmcnLbcgeba3jOfD2SVeJWPPk/BuMcDVTwUc
 jRQbatUBtnoJbzjz5eJa5OJC1YqN3u9zJYU846nv9/cjT9MnwjrGwG8qmx7+/DFz
 EOEIYpgrbS/Mq906ZcIAfykYMs2PVqkdhvFeYFU=
 -----END CERTIFICATE-----

187 lines 10 KiB Plaintext Raw Permalink Blame History

187 lines

10 KiB

Plaintext

Raw Permalink Blame History