Generate empty-subject test certs in-process
Signed-off-by: Maurice van Veen <github@mauricevanveen.com>
This commit is contained in:
Maurice van Veen
+20
-20
@@ -1,27 +1,27 @@
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIEkDCCA3igAwIBAgIUSnwl6/vWR5lnnI00gGcmVU724G0wDQYJKoZIhvcNAQEL
|
||||
MIIEkDCCA3igAwIBAgIUSZwW7btc9EUbrMWtjHpbM0C2bSEwDQYJKoZIhvcNAQEL
|
||||
BQAwcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNVBAoM
|
||||
B1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xKTAnBgNVBAMMIENlcnRpZmljYXRl
|
||||
IEF1dGhvcml0eSAyMDI2LTA1LTAzMB4XDTI2MDUwMzEyNDAwMVoXDTM2MDQzMDEy
|
||||
NDAwMVowcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
IEF1dGhvcml0eSAyMDIyLTA4LTI3MB4XDTIyMDgyNzIwMjMwMloXDTMyMDgyNDIw
|
||||
MjMwMlowcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
BAoMB1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xKTAnBgNVBAMMIENlcnRpZmlj
|
||||
YXRlIEF1dGhvcml0eSAyMDI2LTA1LTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
|
||||
MIIBCgKCAQEAxqSh673TcLaU2yGPa05rOrz2bWkxBoxOaOudoJGmT9geMBi7gXJs
|
||||
DWJlfJafuyaaWwe/oTjHHnHPvge3ILSlybIvEkAxAFXhIHQ3YnwzNR0Z7qEIxC+M
|
||||
yYu7pgbBtYaEbY016f2VkxIDAdWlB6DeP6B1WmG8OOLPF1TdlQ1u20/KyWXfW8r2
|
||||
DArFc0/2Mwk2nULbNE7FpnyYmeILQ+ljQEbEHP3W9Au0snD+3xh5IpfQCXU2Lmqn
|
||||
g5iJRNSgyGz/lWkhrKCZGGFcdV2rFdpCbw+Tpm7JP4hCBUIIM67gzZA6/0c8YdOI
|
||||
aNASf3x4W9s41SXyVNqPU28/21O/k5olSwIDAQABo4IBHjCCARowHQYDVR0OBBYE
|
||||
FNTH29t3z7iBYS4Y50azJAwmYPjOMIGuBgNVHSMEgaYwgaOAFNTH29t3z7iBYS4Y
|
||||
50azJAwmYPjOoXWkczBxMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5p
|
||||
YXRlIEF1dGhvcml0eSAyMDIyLTA4LTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
|
||||
MIIBCgKCAQEAqilVqyY8rmCpTwAsLF7DEtWEq37KbljBWVjmlp2Wo6TgMd3b537t
|
||||
6iO8+SbI8KH75i63RcxV3Uzt1/L9Yb6enDXF52A/U5ugmDhaa+Vsoo2HBTbCczmp
|
||||
qndp7znllQqn7wNLv6aGSvaeIUeYS5Dmlh3kt7Vqbn4YRANkOUTDYGSpMv7jYKSu
|
||||
1ee05Rco3H674zdwToYto8L8V7nVMrky42qZnGrJTaze+Cm9tmaIyHCwUq362CxS
|
||||
dkmaEuWx11MOIFZvL80n7ci6pveDxe5MIfwMC3/oGn7mbsSqidPMcTtjw6ey5NEu
|
||||
Z0UrC/2lL1FtF4gnVMKUSaEhU2oKjj0ZAQIDAQABo4IBHjCCARowHQYDVR0OBBYE
|
||||
FP7Pfz4u7sSt6ltviEVsx4hIFIs6MIGuBgNVHSMEgaYwgaOAFP7Pfz4u7sSt6ltv
|
||||
iEVsx4hIFIs6oXWkczBxMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5p
|
||||
YTEQMA4GA1UECgwHU3luYWRpYTEQMA4GA1UECwwHbmF0cy5pbzEpMCcGA1UEAwwg
|
||||
Q2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMjYtMDUtMDOCFEp8Jev71keZZ5yNNIBn
|
||||
JlVO9uBtMAwGA1UdEwQFMAMBAf8wOgYJYIZIAYb4QgENBC0WK25hdHMuaW8gbmF0
|
||||
Q2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMjItMDgtMjeCFEmcFu27XPRFG6zFrYx6
|
||||
WzNAtm0hMAwGA1UdEwQFMAMBAf8wOgYJYIZIAYb4QgENBC0WK25hdHMuaW8gbmF0
|
||||
cy1zZXJ2ZXIgdGVzdC1zdWl0ZSB0cmFuc2llbnQgQ0EwDQYJKoZIhvcNAQELBQAD
|
||||
ggEBABdbQ1LNTGFxb0Z3eHxFCkgFz8Up0s44tfhrQDZ65EtGOXlzo6HCavsXM47A
|
||||
6/wsopJDLlqwO0IgWEMSn9CyY0eJ91+l+NYkd5SFrVq4zPVeTeOX9U2xTJLulHqE
|
||||
IEUBFsN9dUH1A/Bdz0YIwrEGGyNpwggpwXbRObNCNE6DrVM5968sF3xex0mX+cKx
|
||||
0Hn+2jbU6uZNCgDvQP44zxwW26PQYxfedrCE6+a6f+jm+YyahDtkS9BTw62f1/09
|
||||
pn+qhzvpPbezP1NUJ0yY+A7x6kYPJFoHDVL3wzu8dpHLI70X29mVptdwKWu7gv3z
|
||||
FXvXNDWt/2xcBf/ZqJqpX2dQlF4=
|
||||
ggEBAHDCHLQklYZlnzHDaSwxgGSiPUrCf2zhk2DNIYSDyBgdzrIapmaVYQRrCBtA
|
||||
j/4jVFesgw5WDoe4TKsyha0QeVwJDIN8qg2pvpbmD8nOtLApfl0P966vcucxDwqO
|
||||
dQWrIgNsaUdHdwdo0OfvAlTfG0v/y2X0kbL7h/el5W9kWpxM/rfbX4IHseZL2sLq
|
||||
FH69SN3FhMbdIm1ldrcLBQVz8vJAGI+6B9hSSFQWljssE0JfAX+8VW/foJgMSx7A
|
||||
vBTq58rLkAko56Jlzqh/4QT+ckayg9I73v1Q5/44jP1mHw35s5ZrzpDQt2sVv4l5
|
||||
lwRPJFXMwe64flUs9sM+/vqJaIY=
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
@@ -2,16 +2,16 @@ Certificate:
|
||||
Data:
|
||||
Version: 3 (0x2)
|
||||
Serial Number:
|
||||
23:07:2c:c4:1d:f0:4a:16:93:34:72:ed:03:58:14:30:64:f4:24:42
|
||||
38:4c:16:24:9b:04:1c:b3:db:e0:4c:3c:ed:b7:40:7d:68:b5:fa:1f
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2026-05-03
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2022-08-27
|
||||
Validity
|
||||
Not Before: May 3 12:40:01 2026 GMT
|
||||
Not After : Apr 30 12:40:01 2036 GMT
|
||||
Not Before: Aug 27 20:23:02 2022 GMT
|
||||
Not After : Aug 24 20:23:02 2032 GMT
|
||||
Subject: C=US, ST=California, O=Synadia, OU=nats.io, CN=localhost
|
||||
Subject Public Key Info:
|
||||
Public Key Algorithm: rsaEncryption
|
||||
Public-Key: (2048 bit)
|
||||
RSA Public-Key: (2048 bit)
|
||||
Modulus:
|
||||
00:ac:9c:3e:9d:3b:7a:12:56:85:78:ca:df:9c:fc:
|
||||
0c:7e:5e:f2:4f:22:33:46:81:38:53:d7:a7:25:8f:
|
||||
@@ -40,9 +40,10 @@ Certificate:
|
||||
X509v3 Subject Key Identifier:
|
||||
1F:14:EF:2B:53:AB:28:4A:93:42:98:AE:85:06:0F:B4:7D:DC:36:AE
|
||||
X509v3 Authority Key Identifier:
|
||||
keyid:D4:C7:DB:DB:77:CF:B8:81:61:2E:18:E7:46:B3:24:0C:26:60:F8:CE
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2026-05-03
|
||||
serial:4A:7C:25:EB:FB:D6:47:99:67:9C:8D:34:80:67:26:55:4E:F6:E0:6D
|
||||
keyid:FE:CF:7F:3E:2E:EE:C4:AD:EA:5B:6F:88:45:6C:C7:88:48:14:8B:3A
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2022-08-27
|
||||
serial:49:9C:16:ED:BB:5C:F4:45:1B:AC:C5:AD:8C:7A:5B:33:40:B6:6D:21
|
||||
|
||||
X509v3 Subject Alternative Name:
|
||||
DNS:localhost, IP Address:127.0.0.1, IP Address:0:0:0:0:0:0:0:1, email:derek@nats.io
|
||||
Netscape Cert Type:
|
||||
@@ -52,28 +53,27 @@ Certificate:
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Client Authentication
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Signature Value:
|
||||
3f:83:8a:c2:fc:86:ac:c4:12:c4:fa:a8:6a:b6:a7:87:76:bc:
|
||||
16:3a:fb:11:37:14:05:04:4e:57:67:1a:29:ec:95:93:c7:fb:
|
||||
a5:f0:b1:ff:04:8d:c6:a8:d2:01:6c:0e:1d:04:15:d5:96:a0:
|
||||
14:ba:5e:80:28:cc:d5:77:40:7a:9c:47:c1:e8:a2:f1:2a:8d:
|
||||
83:e9:e4:ea:c2:18:5e:38:12:8b:40:f7:76:b5:44:0c:d3:80:
|
||||
f1:dc:08:a5:aa:e4:5a:d6:89:fe:0a:3f:c6:ab:bf:64:b8:6c:
|
||||
20:47:0b:67:5b:6a:d8:f2:10:76:ee:b5:61:03:3e:42:e0:ee:
|
||||
e1:bd:de:9b:52:b2:7a:ad:6d:4d:2a:9f:9e:22:c2:76:bb:9b:
|
||||
a7:9a:6d:a7:b2:3e:97:4d:69:6a:46:ff:02:c8:9a:66:6d:2c:
|
||||
d4:5d:67:2a:64:57:8f:fb:92:40:d0:05:80:fc:3e:d6:3d:ef:
|
||||
84:79:fe:b6:50:b7:39:5a:8b:06:0c:4b:24:d4:78:a1:89:9a:
|
||||
15:16:09:f5:5b:7b:7a:6a:a8:45:28:c6:57:d5:08:e0:73:8b:
|
||||
4e:5c:29:08:bb:82:8b:0d:a3:e4:34:94:cd:fc:f0:6d:40:53:
|
||||
3c:39:2a:80:ce:a3:b6:2e:5f:09:28:97:c5:6f:b1:9c:e9:37:
|
||||
11:76:e5:b9
|
||||
60:43:0b:c6:11:0b:96:ae:03:dc:77:26:9a:4a:bd:6a:d7:03:
|
||||
ec:43:16:2d:ba:8c:e5:50:fa:57:a9:1f:2f:a4:15:c3:a8:13:
|
||||
b9:d3:59:2a:97:7c:ae:ce:a9:f8:44:e4:97:ee:7d:09:dc:74:
|
||||
38:80:94:cf:47:e0:84:52:2a:91:44:8a:85:55:da:42:6a:f1:
|
||||
91:1a:6e:5a:63:e6:0b:61:3c:0d:b0:aa:17:b8:77:94:32:20:
|
||||
4d:20:8f:84:56:64:ae:ef:d8:8d:42:b5:52:4d:b0:1c:46:97:
|
||||
bc:4c:77:8c:3f:a3:73:43:87:27:71:62:e7:fe:02:de:a1:27:
|
||||
77:be:86:29:8f:62:a1:d9:e7:ea:61:33:73:f4:1f:0a:12:14:
|
||||
68:eb:7d:8c:71:5b:42:e7:48:10:c9:df:30:3b:5b:eb:69:29:
|
||||
b6:95:bc:09:fc:01:b0:be:fc:9f:ee:c4:f3:df:a0:01:c5:68:
|
||||
20:f5:2f:f8:e7:1c:a5:4c:a8:a8:a2:20:a1:d2:0f:f6:f6:c4:
|
||||
0d:f5:26:fd:ea:8b:b5:06:a9:9e:17:35:47:f7:fd:6e:78:3d:
|
||||
5f:7a:87:ed:21:b2:4e:e9:6a:d1:d9:ed:0e:cf:43:61:83:7c:
|
||||
fe:0d:b1:ad:ff:fa:2d:2b:36:9d:99:9c:20:48:21:0d:36:c8:
|
||||
dd:b6:0a:d8
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIE5zCCA8+gAwIBAgIUIwcsxB3wShaTNHLtA1gUMGT0JEIwDQYJKoZIhvcNAQEL
|
||||
MIIE5zCCA8+gAwIBAgIUOEwWJJsEHLPb4Ew87bdAfWi1+h8wDQYJKoZIhvcNAQEL
|
||||
BQAwcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNVBAoM
|
||||
B1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xKTAnBgNVBAMMIENlcnRpZmljYXRl
|
||||
IEF1dGhvcml0eSAyMDI2LTA1LTAzMB4XDTI2MDUwMzEyNDAwMVoXDTM2MDQzMDEy
|
||||
NDAwMVowWjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
IEF1dGhvcml0eSAyMDIyLTA4LTI3MB4XDTIyMDgyNzIwMjMwMloXDTMyMDgyNDIw
|
||||
MjMwMlowWjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
BAoMB1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xEjAQBgNVBAMMCWxvY2FsaG9z
|
||||
dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKycPp07ehJWhXjK35z8
|
||||
DH5e8k8iM0aBOFPXpyWP1+4WE+JnSYj2lJnwqabb/noXyePfMXNxOHA6lh6Ze10H
|
||||
@@ -83,17 +83,17 @@ VW4uZZOakFQDbQ3mRNb3wNfY4ccewpujbojxfFgIop8TzFu5ESwdI286rkeaD2rO
|
||||
h8si/3AcSO264L7wvJ7g3FnbpXQlWLNhBPYzKGsHJWAPcpMWbJ+wrUoY954pHrdh
|
||||
NBcCAwEAAaOCAYwwggGIMAkGA1UdEwQCMAAwOQYJYIZIAYb4QgENBCwWKm5hdHMu
|
||||
aW8gbmF0cy1zZXJ2ZXIgdGVzdC1zdWl0ZSBjZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQU
|
||||
HxTvK1OrKEqTQpiuhQYPtH3cNq4wga4GA1UdIwSBpjCBo4AU1Mfb23fPuIFhLhjn
|
||||
RrMkDCZg+M6hdaRzMHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh
|
||||
HxTvK1OrKEqTQpiuhQYPtH3cNq4wga4GA1UdIwSBpjCBo4AU/s9/Pi7uxK3qW2+I
|
||||
RWzHiEgUizqhdaRzMHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh
|
||||
MRAwDgYDVQQKDAdTeW5hZGlhMRAwDgYDVQQLDAduYXRzLmlvMSkwJwYDVQQDDCBD
|
||||
ZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAyNi0wNS0wM4IUSnwl6/vWR5lnnI00gGcm
|
||||
VU724G0wOwYDVR0RBDQwMoIJbG9jYWxob3N0hwR/AAABhxAAAAAAAAAAAAAAAAAA
|
||||
ZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAyMi0wOC0yN4IUSZwW7btc9EUbrMWtjHpb
|
||||
M0C2bSEwOwYDVR0RBDQwMoIJbG9jYWxob3N0hwR/AAABhxAAAAAAAAAAAAAAAAAA
|
||||
AAABgQ1kZXJla0BuYXRzLmlvMBEGCWCGSAGG+EIBAQQEAwIHgDALBgNVHQ8EBAMC
|
||||
BaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAD+DisL8
|
||||
hqzEEsT6qGq2p4d2vBY6+xE3FAUETldnGinslZPH+6Xwsf8Ejcao0gFsDh0EFdWW
|
||||
oBS6XoAozNV3QHqcR8HoovEqjYPp5OrCGF44EotA93a1RAzTgPHcCKWq5FrWif4K
|
||||
P8arv2S4bCBHC2dbatjyEHbutWEDPkLg7uG93ptSsnqtbU0qn54iwna7m6eabaey
|
||||
PpdNaWpG/wLImmZtLNRdZypkV4/7kkDQBYD8PtY974R5/rZQtzlaiwYMSyTUeKGJ
|
||||
mhUWCfVbe3pqqEUoxlfVCOBzi05cKQi7gosNo+Q0lM388G1AUzw5KoDOo7YuXwko
|
||||
l8VvsZzpNxF25bk=
|
||||
BaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAGBDC8YR
|
||||
C5auA9x3JppKvWrXA+xDFi26jOVQ+lepHy+kFcOoE7nTWSqXfK7OqfhE5JfufQnc
|
||||
dDiAlM9H4IRSKpFEioVV2kJq8ZEablpj5gthPA2wqhe4d5QyIE0gj4RWZK7v2I1C
|
||||
tVJNsBxGl7xMd4w/o3NDhydxYuf+At6hJ3e+himPYqHZ5+phM3P0HwoSFGjrfYxx
|
||||
W0LnSBDJ3zA7W+tpKbaVvAn8AbC+/J/uxPPfoAHFaCD1L/jnHKVMqKiiIKHSD/b2
|
||||
xA31Jv3qi7UGqZ4XNUf3/W54PV96h+0hsk7patHZ7Q7PQ2GDfP4Nsa3/+i0rNp2Z
|
||||
nCBIIQ02yN22Ctg=
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
@@ -2,16 +2,16 @@ Certificate:
|
||||
Data:
|
||||
Version: 3 (0x2)
|
||||
Serial Number:
|
||||
33:12:6e:b2:1a:5c:22:31:e3:9e:80:4b:65:d8:ab:c1:e8:ed:89:8d
|
||||
74:4b:fa:47:3b:79:81:c8:07:a4:c8:d9:70:df:d2:98:bc:a1:27:76
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2026-05-03
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2022-08-27
|
||||
Validity
|
||||
Not Before: May 3 12:40:01 2026 GMT
|
||||
Not After : Apr 30 12:40:01 2036 GMT
|
||||
Not Before: Aug 27 20:23:02 2022 GMT
|
||||
Not After : Aug 24 20:23:02 2032 GMT
|
||||
Subject: C=US, ST=California, O=Synadia, OU=nats.io, CN=localhost
|
||||
Subject Public Key Info:
|
||||
Public Key Algorithm: rsaEncryption
|
||||
Public-Key: (2048 bit)
|
||||
RSA Public-Key: (2048 bit)
|
||||
Modulus:
|
||||
00:e4:2f:ec:ba:66:87:36:a8:09:ab:66:9b:cc:77:
|
||||
24:50:e0:29:4d:c9:98:c8:9f:08:1c:a5:66:0a:b6:
|
||||
@@ -40,9 +40,10 @@ Certificate:
|
||||
X509v3 Subject Key Identifier:
|
||||
86:48:10:75:95:44:01:FC:76:A0:96:E9:35:52:55:A6:38:8C:5F:37
|
||||
X509v3 Authority Key Identifier:
|
||||
keyid:D4:C7:DB:DB:77:CF:B8:81:61:2E:18:E7:46:B3:24:0C:26:60:F8:CE
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2026-05-03
|
||||
serial:4A:7C:25:EB:FB:D6:47:99:67:9C:8D:34:80:67:26:55:4E:F6:E0:6D
|
||||
keyid:FE:CF:7F:3E:2E:EE:C4:AD:EA:5B:6F:88:45:6C:C7:88:48:14:8B:3A
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2022-08-27
|
||||
serial:49:9C:16:ED:BB:5C:F4:45:1B:AC:C5:AD:8C:7A:5B:33:40:B6:6D:21
|
||||
|
||||
X509v3 Subject Alternative Name:
|
||||
DNS:localhost, IP Address:127.0.0.1, IP Address:0:0:0:0:0:0:0:1, email:derek@nats.io
|
||||
Netscape Cert Type:
|
||||
@@ -52,28 +53,27 @@ Certificate:
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Client Authentication
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Signature Value:
|
||||
7c:ca:28:dd:3b:0e:5d:a6:c5:42:75:e4:93:6e:0a:35:07:c9:
|
||||
52:f9:f8:e2:c5:51:88:9f:bc:ec:74:7b:17:4e:e6:76:f7:52:
|
||||
f6:11:f4:07:60:e7:49:9e:41:45:ef:d5:99:42:cc:85:18:92:
|
||||
57:ab:fc:82:af:6e:0d:c0:1b:bb:10:db:fb:03:b1:d9:e6:4a:
|
||||
07:ff:ea:27:d0:2e:60:93:6c:09:bf:db:50:08:2f:5e:65:ce:
|
||||
2d:54:32:97:ba:20:a0:5f:f4:30:ae:78:ed:55:20:37:74:08:
|
||||
94:30:e5:fe:5d:52:54:cf:1b:67:a0:93:0b:85:4b:17:25:37:
|
||||
7f:ca:fc:e8:6f:73:2e:70:c0:02:8e:06:f3:1f:71:3a:57:49:
|
||||
24:d2:d6:d5:c7:19:67:24:2e:f9:c6:9f:b2:e8:cc:cb:14:d1:
|
||||
a1:2c:fe:fc:ab:3a:ec:eb:71:07:41:29:f0:1f:ee:5f:db:dd:
|
||||
42:d4:99:07:f7:df:66:3a:b7:cd:b8:ba:88:da:8e:70:b9:19:
|
||||
f9:6c:65:ff:64:2f:04:40:0d:2f:c6:88:da:17:de:21:36:5e:
|
||||
69:06:92:9b:82:7c:34:53:7d:51:b2:9b:7e:e1:36:bb:aa:5d:
|
||||
03:0b:cd:bb:60:fb:7d:65:b9:6c:61:5a:6f:53:e6:64:ee:7b:
|
||||
2a:a9:d2:b2
|
||||
0e:37:24:36:db:25:73:c2:8d:71:e0:44:05:c1:2f:ac:e7:a4:
|
||||
20:26:2a:15:69:20:2f:ea:4c:fb:0c:74:4b:29:e0:92:0f:12:
|
||||
8a:a0:4a:73:78:ba:81:eb:4d:91:1c:3f:8e:58:cb:3f:30:77:
|
||||
6e:95:5d:a6:a6:22:b3:f9:20:0a:75:93:bc:95:6c:b3:1c:c2:
|
||||
6a:72:9a:a6:62:1f:ed:a1:df:9c:2f:d7:28:02:08:49:07:c5:
|
||||
3b:5b:58:0f:f6:7b:b5:39:de:05:c7:be:c7:89:bf:62:77:56:
|
||||
eb:96:b9:74:d6:bf:ce:20:8d:ef:0c:08:bb:ec:0d:b2:55:6d:
|
||||
cb:94:83:88:89:a5:47:c4:95:91:72:10:c5:3c:6a:be:e5:86:
|
||||
bb:be:96:74:fd:67:d2:08:55:4e:df:e9:96:c4:62:58:93:6a:
|
||||
0c:2c:68:a1:93:b9:61:38:98:eb:c4:4a:1c:3f:9f:9d:c2:3c:
|
||||
b0:eb:62:7f:a0:aa:e9:53:a3:f7:55:5d:43:1d:5a:63:8b:97:
|
||||
32:4c:dc:b8:11:0b:65:35:de:2b:f9:af:8e:28:8c:6f:dd:4d:
|
||||
13:3e:b9:f8:7b:7f:27:0d:43:a9:da:b6:59:10:d5:9c:a6:97:
|
||||
79:97:19:94:f0:8d:0e:13:f7:c1:ee:50:f2:4c:81:6a:e6:0f:
|
||||
d7:42:c3:67
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIE5zCCA8+gAwIBAgIUMxJushpcIjHjnoBLZdirwejtiY0wDQYJKoZIhvcNAQEL
|
||||
MIIE5zCCA8+gAwIBAgIUdEv6Rzt5gcgHpMjZcN/SmLyhJ3YwDQYJKoZIhvcNAQEL
|
||||
BQAwcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNVBAoM
|
||||
B1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xKTAnBgNVBAMMIENlcnRpZmljYXRl
|
||||
IEF1dGhvcml0eSAyMDI2LTA1LTAzMB4XDTI2MDUwMzEyNDAwMVoXDTM2MDQzMDEy
|
||||
NDAwMVowWjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
IEF1dGhvcml0eSAyMDIyLTA4LTI3MB4XDTIyMDgyNzIwMjMwMloXDTMyMDgyNDIw
|
||||
MjMwMlowWjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
BAoMB1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xEjAQBgNVBAMMCWxvY2FsaG9z
|
||||
dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOQv7LpmhzaoCatmm8x3
|
||||
JFDgKU3JmMifCBylZgq2gziKOvM8FmT+E7YCvVBkfbsZpezhHC8cML7NB8QzH67i
|
||||
@@ -83,17 +83,17 @@ M48o31CYZZIKNczFBOOGrGnMaoQwka+vREronyYK9ht49pCBsesR5oUeQg4JFeXj
|
||||
NoayRji3gcLEFnK5p1WJA3go4C4pF85YLxaANLJeAgARASw1rLsOLUEAbQyFlBr2
|
||||
eosCAwEAAaOCAYwwggGIMAkGA1UdEwQCMAAwOQYJYIZIAYb4QgENBCwWKm5hdHMu
|
||||
aW8gbmF0cy1zZXJ2ZXIgdGVzdC1zdWl0ZSBjZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQU
|
||||
hkgQdZVEAfx2oJbpNVJVpjiMXzcwga4GA1UdIwSBpjCBo4AU1Mfb23fPuIFhLhjn
|
||||
RrMkDCZg+M6hdaRzMHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh
|
||||
hkgQdZVEAfx2oJbpNVJVpjiMXzcwga4GA1UdIwSBpjCBo4AU/s9/Pi7uxK3qW2+I
|
||||
RWzHiEgUizqhdaRzMHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh
|
||||
MRAwDgYDVQQKDAdTeW5hZGlhMRAwDgYDVQQLDAduYXRzLmlvMSkwJwYDVQQDDCBD
|
||||
ZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAyNi0wNS0wM4IUSnwl6/vWR5lnnI00gGcm
|
||||
VU724G0wOwYDVR0RBDQwMoIJbG9jYWxob3N0hwR/AAABhxAAAAAAAAAAAAAAAAAA
|
||||
ZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAyMi0wOC0yN4IUSZwW7btc9EUbrMWtjHpb
|
||||
M0C2bSEwOwYDVR0RBDQwMoIJbG9jYWxob3N0hwR/AAABhxAAAAAAAAAAAAAAAAAA
|
||||
AAABgQ1kZXJla0BuYXRzLmlvMBEGCWCGSAGG+EIBAQQEAwIHgDALBgNVHQ8EBAMC
|
||||
BaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAHzKKN07
|
||||
Dl2mxUJ15JNuCjUHyVL5+OLFUYifvOx0exdO5nb3UvYR9Adg50meQUXv1ZlCzIUY
|
||||
kler/IKvbg3AG7sQ2/sDsdnmSgf/6ifQLmCTbAm/21AIL15lzi1UMpe6IKBf9DCu
|
||||
eO1VIDd0CJQw5f5dUlTPG2egkwuFSxclN3/K/Ohvcy5wwAKOBvMfcTpXSSTS1tXH
|
||||
GWckLvnGn7LozMsU0aEs/vyrOuzrcQdBKfAf7l/b3ULUmQf332Y6t824uojajnC5
|
||||
GflsZf9kLwRADS/GiNoX3iE2XmkGkpuCfDRTfVGym37hNruqXQMLzbtg+31luWxh
|
||||
Wm9T5mTueyqp0rI=
|
||||
BaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAA43JDbb
|
||||
JXPCjXHgRAXBL6znpCAmKhVpIC/qTPsMdEsp4JIPEoqgSnN4uoHrTZEcP45Yyz8w
|
||||
d26VXaamIrP5IAp1k7yVbLMcwmpymqZiH+2h35wv1ygCCEkHxTtbWA/2e7U53gXH
|
||||
vseJv2J3VuuWuXTWv84gje8MCLvsDbJVbcuUg4iJpUfElZFyEMU8ar7lhru+lnT9
|
||||
Z9IIVU7f6ZbEYliTagwsaKGTuWE4mOvEShw/n53CPLDrYn+gqulTo/dVXUMdWmOL
|
||||
lzJM3LgRC2U13iv5r44ojG/dTRM+ufh7fycNQ6natlkQ1Zyml3mXGZTwjQ4T98Hu
|
||||
UPJMgWrmD9dCw2c=
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
@@ -216,14 +216,6 @@ o_req -new -key "$SK_NOIP" -out "$BASE.csr" -subj "$COMMON_SUBJECT/CN=localhost"
|
||||
add_delete "$BASE.csr"
|
||||
sign_csr "DNS:localhost" -in "$BASE.csr" -out "$BASE.pem" -extensions nats_server
|
||||
|
||||
echo
|
||||
readonly SK_NOSUBJ=server-key-nosubj.pem
|
||||
BASE=server-nosubj
|
||||
ensure_keyfile "$SK_NOSUBJ" "server key, no subject"
|
||||
o_req -new -key "$SK_NOSUBJ" -out "$BASE.csr" -subj "/"
|
||||
add_delete "$BASE.csr"
|
||||
sign_csr "DNS:localhost" -in "$BASE.csr" -out "$BASE.pem" -extensions nats_server
|
||||
|
||||
for SRV in srva srvb; do
|
||||
echo
|
||||
KEY="${SRV}-key.pem"
|
||||
|
||||
@@ -2,16 +2,16 @@ Certificate:
|
||||
Data:
|
||||
Version: 3 (0x2)
|
||||
Serial Number:
|
||||
24:c2:9c:5f:e8:ff:5b:36:43:7b:b3:60:c5:90:4b:61:2a:2f:0a:13
|
||||
1d:d9:1f:06:dd:fd:90:26:4e:27:ea:2e:01:4b:31:e6:d2:49:31:1f
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2026-05-03
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2022-08-27
|
||||
Validity
|
||||
Not Before: May 3 12:40:01 2026 GMT
|
||||
Not After : Apr 30 12:40:01 2036 GMT
|
||||
Not Before: Aug 27 20:23:02 2022 GMT
|
||||
Not After : Aug 24 20:23:02 2032 GMT
|
||||
Subject: C=US, ST=California, O=Synadia, OU=nats.io, CN=localhost
|
||||
Subject Public Key Info:
|
||||
Public Key Algorithm: rsaEncryption
|
||||
Public-Key: (2048 bit)
|
||||
RSA Public-Key: (2048 bit)
|
||||
Modulus:
|
||||
00:e6:fb:47:65:cd:c9:a2:2d:af:8b:cd:d5:6a:79:
|
||||
54:3c:07:5f:eb:5a:71:2b:2b:e5:6f:be:31:fb:16:
|
||||
@@ -40,9 +40,10 @@ Certificate:
|
||||
X509v3 Subject Key Identifier:
|
||||
2B:8C:A3:8B:DB:DB:5C:CE:18:DB:F6:A8:31:4E:C2:3E:EE:D3:40:7E
|
||||
X509v3 Authority Key Identifier:
|
||||
keyid:D4:C7:DB:DB:77:CF:B8:81:61:2E:18:E7:46:B3:24:0C:26:60:F8:CE
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2026-05-03
|
||||
serial:4A:7C:25:EB:FB:D6:47:99:67:9C:8D:34:80:67:26:55:4E:F6:E0:6D
|
||||
keyid:FE:CF:7F:3E:2E:EE:C4:AD:EA:5B:6F:88:45:6C:C7:88:48:14:8B:3A
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2022-08-27
|
||||
serial:49:9C:16:ED:BB:5C:F4:45:1B:AC:C5:AD:8C:7A:5B:33:40:B6:6D:21
|
||||
|
||||
X509v3 Subject Alternative Name:
|
||||
DNS:localhost, IP Address:127.0.0.1, IP Address:0:0:0:0:0:0:0:1
|
||||
Netscape Cert Type:
|
||||
@@ -52,28 +53,27 @@ Certificate:
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Server Authentication, Netscape Server Gated Crypto, Microsoft Server Gated Crypto, TLS Web Client Authentication
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Signature Value:
|
||||
6f:1e:b4:ac:2c:1a:22:6d:35:ac:8c:75:16:f5:dd:8d:09:d8:
|
||||
42:96:bf:00:ef:bb:67:30:73:6a:25:da:98:b9:27:e3:17:f6:
|
||||
7d:25:db:b6:8f:d5:b5:32:2c:d5:fb:fc:df:c7:25:ad:04:26:
|
||||
ee:bd:4b:e0:01:ff:7e:02:2a:c6:a5:26:3b:b9:2e:d8:35:2d:
|
||||
31:b8:b1:d0:10:ce:3c:57:40:27:43:89:23:bc:e9:de:3c:ae:
|
||||
2f:ff:96:e8:67:7e:f8:d6:65:f1:d6:6b:e4:c2:ae:72:5c:b5:
|
||||
9b:10:74:d4:91:1d:07:a6:1f:c9:9c:d8:32:28:6f:bb:24:c6:
|
||||
20:d5:73:d2:ae:2c:f7:40:d3:66:a3:01:d0:32:30:f0:d7:9c:
|
||||
e2:08:9e:2f:c8:95:7c:78:a4:49:24:1e:88:d1:eb:19:f5:bd:
|
||||
fa:ee:ec:a6:d3:e7:59:5e:c0:69:df:9e:45:00:da:32:64:08:
|
||||
a0:c1:43:c4:45:05:ff:b6:c5:a2:cb:d7:58:c0:b3:61:b9:c7:
|
||||
c4:2a:78:ab:26:f4:17:f8:d9:1c:71:df:6d:f8:b1:70:2f:39:
|
||||
c9:42:b2:82:b3:f8:00:d6:a3:90:91:58:06:8f:ba:52:2f:a6:
|
||||
36:43:53:48:21:4e:12:00:32:1a:73:33:65:7e:b2:03:34:bf:
|
||||
d1:dd:d7:1e
|
||||
54:49:34:2b:38:d1:aa:3b:43:60:4c:3f:6a:f8:74:ca:49:53:
|
||||
a1:af:12:d3:a8:17:90:7b:9d:a3:69:13:6e:da:2c:b7:61:31:
|
||||
ac:eb:00:93:92:fc:0c:10:d4:18:a0:16:61:94:4b:42:cb:eb:
|
||||
7a:f6:80:c6:45:c0:9c:09:aa:a9:48:e8:36:e3:c5:be:36:e0:
|
||||
e9:78:2a:bb:ab:64:9b:20:eb:e6:0f:63:2b:59:c3:58:0b:3a:
|
||||
84:15:04:c1:7e:12:03:1b:09:25:8d:4c:03:e8:18:26:c0:6c:
|
||||
b7:90:b1:fd:bc:f1:cf:d0:d5:4a:03:15:71:0c:7d:c1:76:87:
|
||||
92:f1:3e:bc:75:51:5a:c4:36:a4:ff:91:98:df:33:5d:a7:38:
|
||||
de:50:29:fd:0f:c8:55:e6:8f:24:c2:2e:98:ab:d9:5d:65:2f:
|
||||
50:cc:25:f6:84:f2:21:2e:5e:76:d0:86:1e:69:8b:cb:8a:3a:
|
||||
2d:79:21:5e:e7:f7:2d:06:18:a1:13:cb:01:c3:46:91:2a:de:
|
||||
b4:82:d7:c3:62:6f:08:a1:d5:90:19:30:9d:64:8e:e4:f8:ba:
|
||||
4f:2f:ba:13:b4:a3:9f:d1:d5:77:64:8a:3e:eb:53:c5:47:ac:
|
||||
ab:3e:0e:7a:9b:a6:f4:48:25:66:eb:c7:4c:f9:50:24:eb:71:
|
||||
e0:75:ae:e6
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIE+TCCA+GgAwIBAgIUJMKcX+j/WzZDe7NgxZBLYSovChMwDQYJKoZIhvcNAQEL
|
||||
MIIE+TCCA+GgAwIBAgIUHdkfBt39kCZOJ+ouAUsx5tJJMR8wDQYJKoZIhvcNAQEL
|
||||
BQAwcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNVBAoM
|
||||
B1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xKTAnBgNVBAMMIENlcnRpZmljYXRl
|
||||
IEF1dGhvcml0eSAyMDI2LTA1LTAzMB4XDTI2MDUwMzEyNDAwMVoXDTM2MDQzMDEy
|
||||
NDAwMVowWjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
IEF1dGhvcml0eSAyMDIyLTA4LTI3MB4XDTIyMDgyNzIwMjMwMloXDTMyMDgyNDIw
|
||||
MjMwMlowWjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
BAoMB1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xEjAQBgNVBAMMCWxvY2FsaG9z
|
||||
dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOb7R2XNyaItr4vN1Wp5
|
||||
VDwHX+tacSsr5W++MfsWZWh2Dlnn5FfKiOl31kGtV3pCstJUxA98W8G8YZfjIjo+
|
||||
@@ -83,17 +83,17 @@ v+QeUi2kSS7VIe38APeiC7wSCpBkUHzFFHD1+5tiCHhDSTHzR7iT1C1MqdwXcHY0
|
||||
Zv9lwTln6aYcgGrwnbMoyKM6t13eblNtCbMNsRMQ6OzgvV6hlEtwv9y9i7mCZd2v
|
||||
gXsCAwEAAaOCAZ4wggGaMAkGA1UdEwQCMAAwOQYJYIZIAYb4QgENBCwWKm5hdHMu
|
||||
aW8gbmF0cy1zZXJ2ZXIgdGVzdC1zdWl0ZSBjZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQU
|
||||
K4yji9vbXM4Y2/aoMU7CPu7TQH4wga4GA1UdIwSBpjCBo4AU1Mfb23fPuIFhLhjn
|
||||
RrMkDCZg+M6hdaRzMHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh
|
||||
K4yji9vbXM4Y2/aoMU7CPu7TQH4wga4GA1UdIwSBpjCBo4AU/s9/Pi7uxK3qW2+I
|
||||
RWzHiEgUizqhdaRzMHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh
|
||||
MRAwDgYDVQQKDAdTeW5hZGlhMRAwDgYDVQQLDAduYXRzLmlvMSkwJwYDVQQDDCBD
|
||||
ZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAyNi0wNS0wM4IUSnwl6/vWR5lnnI00gGcm
|
||||
VU724G0wLAYDVR0RBCUwI4IJbG9jYWxob3N0hwR/AAABhxAAAAAAAAAAAAAAAAAA
|
||||
ZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAyMi0wOC0yN4IUSZwW7btc9EUbrMWtjHpb
|
||||
M0C2bSEwLAYDVR0RBCUwI4IJbG9jYWxob3N0hwR/AAABhxAAAAAAAAAAAAAAAAAA
|
||||
AAABMBEGCWCGSAGG+EIBAQQEAwIGwDALBgNVHQ8EBAMCBaAwNAYDVR0lBC0wKwYI
|
||||
KwYBBQUHAwEGCWCGSAGG+EIEAQYKKwYBBAGCNwoDAwYIKwYBBQUHAwIwDQYJKoZI
|
||||
hvcNAQELBQADggEBAG8etKwsGiJtNayMdRb13Y0J2EKWvwDvu2cwc2ol2pi5J+MX
|
||||
9n0l27aP1bUyLNX7/N/HJa0EJu69S+AB/34CKsalJju5Ltg1LTG4sdAQzjxXQCdD
|
||||
iSO86d48ri//luhnfvjWZfHWa+TCrnJctZsQdNSRHQemH8mc2DIob7skxiDVc9Ku
|
||||
LPdA02ajAdAyMPDXnOIIni/IlXx4pEkkHojR6xn1vfru7KbT51lewGnfnkUA2jJk
|
||||
CKDBQ8RFBf+2xaLL11jAs2G5x8QqeKsm9Bf42Rxx3234sXAvOclCsoKz+ADWo5CR
|
||||
WAaPulIvpjZDU0ghThIAMhpzM2V+sgM0v9Hd1x4=
|
||||
hvcNAQELBQADggEBAFRJNCs40ao7Q2BMP2r4dMpJU6GvEtOoF5B7naNpE27aLLdh
|
||||
MazrAJOS/AwQ1BigFmGUS0LL63r2gMZFwJwJqqlI6Dbjxb424Ol4KrurZJsg6+YP
|
||||
YytZw1gLOoQVBMF+EgMbCSWNTAPoGCbAbLeQsf288c/Q1UoDFXEMfcF2h5LxPrx1
|
||||
UVrENqT/kZjfM12nON5QKf0PyFXmjyTCLpir2V1lL1DMJfaE8iEuXnbQhh5pi8uK
|
||||
Oi15IV7n9y0GGKETywHDRpEq3rSC18Nibwih1ZAZMJ1kjuT4uk8vuhO0o5/R1Xdk
|
||||
ij7rU8VHrKs+DnqbpvRIJWbrx0z5UCTrceB1ruY=
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
@@ -2,16 +2,16 @@ Certificate:
|
||||
Data:
|
||||
Version: 3 (0x2)
|
||||
Serial Number:
|
||||
08:e4:66:14:34:68:84:bf:67:22:f8:cc:58:bd:c5:ce:f4:3c:04:0a
|
||||
21:8e:d4:f9:10:fc:32:5f:46:45:23:53:14:03:f0:b2:dc:a1:d7:e5
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2026-05-03
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2022-08-27
|
||||
Validity
|
||||
Not Before: May 3 12:40:01 2026 GMT
|
||||
Not After : Apr 30 12:40:01 2036 GMT
|
||||
Not Before: Aug 27 20:23:02 2022 GMT
|
||||
Not After : Aug 24 20:23:02 2032 GMT
|
||||
Subject: C=US, ST=California, O=Synadia, OU=nats.io, CN=ip-only-localhost
|
||||
Subject Public Key Info:
|
||||
Public Key Algorithm: rsaEncryption
|
||||
Public-Key: (2048 bit)
|
||||
RSA Public-Key: (2048 bit)
|
||||
Modulus:
|
||||
00:bd:98:dc:14:49:92:43:1a:73:36:75:6d:c1:33:
|
||||
73:b3:e7:f6:8a:e2:03:f7:24:93:eb:36:da:8f:64:
|
||||
@@ -40,9 +40,10 @@ Certificate:
|
||||
X509v3 Subject Key Identifier:
|
||||
0A:AC:82:F2:35:73:89:FB:49:07:EB:9C:87:72:D9:91:26:DF:84:8A
|
||||
X509v3 Authority Key Identifier:
|
||||
keyid:D4:C7:DB:DB:77:CF:B8:81:61:2E:18:E7:46:B3:24:0C:26:60:F8:CE
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2026-05-03
|
||||
serial:4A:7C:25:EB:FB:D6:47:99:67:9C:8D:34:80:67:26:55:4E:F6:E0:6D
|
||||
keyid:FE:CF:7F:3E:2E:EE:C4:AD:EA:5B:6F:88:45:6C:C7:88:48:14:8B:3A
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2022-08-27
|
||||
serial:49:9C:16:ED:BB:5C:F4:45:1B:AC:C5:AD:8C:7A:5B:33:40:B6:6D:21
|
||||
|
||||
X509v3 Subject Alternative Name:
|
||||
IP Address:127.0.0.1, IP Address:0:0:0:0:0:0:0:1
|
||||
Netscape Cert Type:
|
||||
@@ -52,28 +53,27 @@ Certificate:
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Server Authentication, Netscape Server Gated Crypto, Microsoft Server Gated Crypto, TLS Web Client Authentication
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Signature Value:
|
||||
a6:95:32:78:12:71:52:6f:7e:3e:cd:53:3a:30:66:32:2d:56:
|
||||
b7:c7:d4:6e:0a:d0:4f:da:9c:74:6a:02:06:0a:10:aa:22:fb:
|
||||
92:18:ab:57:6b:fe:41:21:e0:06:7e:ef:9c:84:8e:71:80:4f:
|
||||
fc:36:6f:11:82:13:35:23:8e:62:07:77:0f:a2:ca:be:15:c1:
|
||||
6f:e7:aa:3f:90:9f:28:be:c3:fa:46:8d:c1:e2:c5:44:60:14:
|
||||
70:6f:4a:da:3a:05:e7:b5:7e:ff:c8:5a:de:94:f3:7d:f4:bd:
|
||||
14:d9:24:cc:ad:82:9a:1d:97:f8:16:bd:e2:4f:42:3d:dd:41:
|
||||
d1:91:b6:a1:d5:51:87:f7:fd:09:3b:84:42:99:0f:10:00:a1:
|
||||
6f:2b:5a:da:63:4a:c3:80:6b:a9:53:a1:d9:17:9d:f1:41:d3:
|
||||
63:c8:e0:0b:d2:79:49:a9:71:30:46:a2:d0:af:66:5e:65:b5:
|
||||
99:db:bb:6d:9c:f6:4d:d8:3d:02:08:7f:61:ab:6b:29:55:62:
|
||||
3a:7b:ec:b1:32:ec:ee:5b:c9:4b:68:1c:69:16:a4:8d:a0:45:
|
||||
af:ac:0d:51:c7:df:0f:12:e0:3a:0e:8d:85:ae:a6:c3:7c:7a:
|
||||
5a:68:73:3d:24:c8:23:72:87:5f:cd:9d:f8:52:ce:76:04:0d:
|
||||
83:c7:54:1b
|
||||
87:00:2d:ec:ea:ab:13:3e:21:6c:4a:3e:f1:9b:c3:ab:c5:81:
|
||||
d3:34:2d:cb:f1:e7:98:96:13:a3:7f:29:00:83:70:20:81:56:
|
||||
a1:31:b7:d9:fa:35:02:f4:6f:32:8a:58:cf:68:39:e1:f9:fb:
|
||||
50:20:60:85:f1:bd:22:73:e6:ac:b6:36:38:75:86:de:8a:cf:
|
||||
e5:41:df:0f:bd:61:94:3d:3a:59:81:50:c5:44:39:47:d9:e8:
|
||||
56:2a:b4:2c:59:b7:89:f5:5d:a7:28:15:6e:98:1e:47:47:7d:
|
||||
a6:35:65:de:b7:06:9e:04:67:98:04:f9:57:54:82:2a:dc:e2:
|
||||
6a:76:df:06:05:b4:61:84:ec:7d:5e:46:34:ea:14:b7:14:16:
|
||||
fe:51:0e:65:52:c6:74:96:8e:30:3a:b9:c2:d5:05:2d:a8:08:
|
||||
11:ba:7e:65:c1:89:c3:61:ec:d6:06:e0:7e:ac:11:ee:18:89:
|
||||
67:59:1d:6b:dc:cc:1e:48:c5:79:5b:8f:18:7e:e4:c4:9f:4f:
|
||||
3d:a9:11:60:28:77:49:e7:23:4d:fa:49:8d:6b:5a:52:57:9b:
|
||||
bf:a7:d7:da:13:45:64:dd:d3:2f:4c:14:eb:79:46:8f:fd:41:
|
||||
ab:88:17:d4:8e:77:45:8c:7f:cb:e5:d8:19:7c:1b:1e:cd:21:
|
||||
32:43:a3:c9
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIE9jCCA96gAwIBAgIUCORmFDRohL9nIvjMWL3FzvQ8BAowDQYJKoZIhvcNAQEL
|
||||
MIIE9jCCA96gAwIBAgIUIY7U+RD8Ml9GRSNTFAPwstyh1+UwDQYJKoZIhvcNAQEL
|
||||
BQAwcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNVBAoM
|
||||
B1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xKTAnBgNVBAMMIENlcnRpZmljYXRl
|
||||
IEF1dGhvcml0eSAyMDI2LTA1LTAzMB4XDTI2MDUwMzEyNDAwMVoXDTM2MDQzMDEy
|
||||
NDAwMVowYjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
IEF1dGhvcml0eSAyMDIyLTA4LTI3MB4XDTIyMDgyNzIwMjMwMloXDTMyMDgyNDIw
|
||||
MjMwMlowYjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
BAoMB1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xGjAYBgNVBAMMEWlwLW9ubHkt
|
||||
bG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZjcFEmS
|
||||
QxpzNnVtwTNzs+f2iuID9yST6zbaj2TGVhm3ktLx39NPfnjO29xu1FxYpKd5a0n/
|
||||
@@ -83,17 +83,17 @@ kjoh0STtgeiFl4xBRpbaAte39auSTKsK4hmfuCEHXPfRfm5JcKnERcOyEKvKUOPJ
|
||||
6m+1GWQSMg6TWfiO/KK8M/Ml5FmYbQ6XdrbanlDPTaFrYs5HhB33gora0JDnph9D
|
||||
JWFXwxV+4LhcFwIDAQABo4IBkzCCAY8wCQYDVR0TBAIwADA5BglghkgBhvhCAQ0E
|
||||
LBYqbmF0cy5pbyBuYXRzLXNlcnZlciB0ZXN0LXN1aXRlIGNlcnRpZmljYXRlMB0G
|
||||
A1UdDgQWBBQKrILyNXOJ+0kH65yHctmRJt+EijCBrgYDVR0jBIGmMIGjgBTUx9vb
|
||||
d8+4gWEuGOdGsyQMJmD4zqF1pHMwcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNh
|
||||
A1UdDgQWBBQKrILyNXOJ+0kH65yHctmRJt+EijCBrgYDVR0jBIGmMIGjgBT+z38+
|
||||
Lu7Erepbb4hFbMeISBSLOqF1pHMwcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNh
|
||||
bGlmb3JuaWExEDAOBgNVBAoMB1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xKTAn
|
||||
BgNVBAMMIENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDI2LTA1LTAzghRKfCXr+9ZH
|
||||
mWecjTSAZyZVTvbgbTAhBgNVHREEGjAYhwR/AAABhxAAAAAAAAAAAAAAAAAAAAAB
|
||||
BgNVBAMMIENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDIyLTA4LTI3ghRJnBbtu1z0
|
||||
RRusxa2MelszQLZtITAhBgNVHREEGjAYhwR/AAABhxAAAAAAAAAAAAAAAAAAAAAB
|
||||
MBEGCWCGSAGG+EIBAQQEAwIGwDALBgNVHQ8EBAMCBaAwNAYDVR0lBC0wKwYIKwYB
|
||||
BQUHAwEGCWCGSAGG+EIEAQYKKwYBBAGCNwoDAwYIKwYBBQUHAwIwDQYJKoZIhvcN
|
||||
AQELBQADggEBAKaVMngScVJvfj7NUzowZjItVrfH1G4K0E/anHRqAgYKEKoi+5IY
|
||||
q1dr/kEh4AZ+75yEjnGAT/w2bxGCEzUjjmIHdw+iyr4VwW/nqj+Qnyi+w/pGjcHi
|
||||
xURgFHBvSto6Bee1fv/IWt6U8330vRTZJMytgpodl/gWveJPQj3dQdGRtqHVUYf3
|
||||
/Qk7hEKZDxAAoW8rWtpjSsOAa6lTodkXnfFB02PI4AvSeUmpcTBGotCvZl5ltZnb
|
||||
u22c9k3YPQIIf2GraylVYjp77LEy7O5byUtoHGkWpI2gRa+sDVHH3w8S4DoOjYWu
|
||||
psN8elpocz0kyCNyh1/NnfhSznYEDYPHVBs=
|
||||
AQELBQADggEBAIcALezqqxM+IWxKPvGbw6vFgdM0Lcvx55iWE6N/KQCDcCCBVqEx
|
||||
t9n6NQL0bzKKWM9oOeH5+1AgYIXxvSJz5qy2Njh1ht6Kz+VB3w+9YZQ9OlmBUMVE
|
||||
OUfZ6FYqtCxZt4n1XacoFW6YHkdHfaY1Zd63Bp4EZ5gE+VdUgirc4mp23wYFtGGE
|
||||
7H1eRjTqFLcUFv5RDmVSxnSWjjA6ucLVBS2oCBG6fmXBicNh7NYG4H6sEe4YiWdZ
|
||||
HWvczB5IxXlbjxh+5MSfTz2pEWAod0nnI036SY1rWlJXm7+n19oTRWTd0y9MFOt5
|
||||
Ro/9QauIF9SOd0WMf8vl2Bl8Gx7NITJDo8k=
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
@@ -1,28 +0,0 @@
|
||||
-----BEGIN PRIVATE KEY-----
|
||||
MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDFutybfOpW8Sfw
|
||||
I3ySlbtPgn2sDjmm4+nYQzoyigVFrKlY02uO+zxhUZ6DMws9QkvfCJ0tlkBqs9SR
|
||||
ZoWPgDNBYIF4pDHDwGZP/p7gdjQsEB1WqOhetdb+Hh8iGl9+E/dh36k02eAYM6lA
|
||||
hh59B7+zrsUr6XbQPA0vitcWxud3DrP8V7Ci1FG9ffjkpAPvsMKDI1yp5NtB5WK9
|
||||
4nWgQZQHIqPadt8egEx3rxITKtlBMpsu7t3QejLASN3wCY6FkU6c1VxALtAuBfXU
|
||||
LsLtOcrquFKfT7ZoU2GcI/6zhOYYa21q5BV9e0Hs1YE8eOB3YubrI04q9nn5yQad
|
||||
c+qju+JRAgMBAAECggEAFPQdZrjRGI+LvO31yI7nf6CDctU7FM14PXu6UhrAPkby
|
||||
1z/oWQmUt3dvxdWF7mL1KVh/V5Jhly0hbJshsjhSti3k6oTz5Ruhe/6ulXjRRI4c
|
||||
nc9eeJLqiplkkTecQP8aqxuJkdk43zeySu0rk/JbRU5TBLlD5wNGHnCnJHnFk58i
|
||||
haT36btKhmHInktaYGTA8dxpKe9D5T+HL3ItThukGokpEeflAr6Ap3E6iTLEo0Jf
|
||||
DKHdvyEOybYFMW5fFFG1xgE+Jhoae0v3T0d+i3cuqicFTNw3/96GM3wnKo02OilG
|
||||
zf4aLJoLPTxYwlXxdEL5gJMScNB24InoH9yeQswMtQKBgQDrg8qaEkaEOM2adbmG
|
||||
pnnMgeRFuxJniRxPYJ9gM1T5qhXyZ6UO0+ZB95aNRCslLqWQ7faFEaBW6AnUlEOh
|
||||
4eB1aobDS6QeMG80ZeaL1SfQhHHLZXGMTo6bRC2zEXUeVX0qND7mEE/5fiIn9qhy
|
||||
VQR4H7DhCVMzQHHdNiO0DetBwwKBgQDW7bbeNxWpxnAL3JQi1pvfwUeHpCmiesUB
|
||||
RDhUVjhFWvnC2DBUFT6vRXRESTgIe7cWTqYPD3ks37MBRO9yrXd9PRtRbp3EjcXX
|
||||
dvOgJkWUK+YxkLruMr27UmINm1bIaUQc+oc/eM8i3FcyP6HrV/xkHyMjOquB9acz
|
||||
EdeP/qxWWwKBgQCqGLxqPIrLkk8EoMQG+RN83c9lgXAQcRmORuW00D4uN2a0daDj
|
||||
ra1etZf5nWNf7mnL2+IxR4K7Yck/zHlwYLgBdZexU19MIoUenf49vgyMcCvT0AeL
|
||||
Y21hvIMZEqG479t/cM6A0QVB15SJsn8EXFzm+VSBo3+Aw6m5MBHnSCpCiwKBgFQx
|
||||
0QYh3Ami47ex1BIFshAoPeYj5+9vWodReyOGlwqMRfUPDXeSzviII7CwYhPoquNB
|
||||
MgoKTLTIeO4RXB+3VmyoKHBw/brGsu7h+TQOaglOXSGjiabQF8Uu05xy8r8VhYo4
|
||||
lgzGPZZxbHMRvFNeJ0/tZq1hSVhiq/n0jlYpNMerAoGAf8lY4FVuV6Tf7JNrvPZs
|
||||
0kNOEuus3NpKJfcNuEGhgLR8w+KG+JB32pJepQWgeCYwBoqaCRN0FPGUEmdQUEcs
|
||||
pFxGQsuUGczuy58+fykrVtJXwIPxMGJXgY7tmNRTXan+sYWKliMvD4pEkwQLcixv
|
||||
gsuu2xH3+LMlzpXwqUjKosA=
|
||||
-----END PRIVATE KEY-----
|
||||
@@ -2,16 +2,16 @@ Certificate:
|
||||
Data:
|
||||
Version: 3 (0x2)
|
||||
Serial Number:
|
||||
5f:5a:31:67:ea:3d:7b:4c:0e:7b:ce:96:e6:82:13:eb:7b:3c:56:b9
|
||||
1d:5c:7c:59:0c:cd:27:83:dd:97:64:53:b0:44:3c:b4:5b:d4:fc:d1
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2026-05-03
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2022-08-27
|
||||
Validity
|
||||
Not Before: May 3 12:40:01 2026 GMT
|
||||
Not After : Apr 30 12:40:01 2036 GMT
|
||||
Not Before: Aug 27 20:23:02 2022 GMT
|
||||
Not After : Aug 24 20:23:02 2032 GMT
|
||||
Subject: C=US, ST=California, O=Synadia, OU=nats.io, CN=localhost
|
||||
Subject Public Key Info:
|
||||
Public Key Algorithm: rsaEncryption
|
||||
Public-Key: (2048 bit)
|
||||
RSA Public-Key: (2048 bit)
|
||||
Modulus:
|
||||
00:ad:f0:87:3f:32:66:87:7a:31:9b:ca:54:0a:ae:
|
||||
a6:1a:ca:25:d5:c5:fc:49:6b:21:0b:de:a7:15:c8:
|
||||
@@ -40,9 +40,10 @@ Certificate:
|
||||
X509v3 Subject Key Identifier:
|
||||
C9:AA:3C:08:39:7E:C1:42:C0:3D:B7:2F:84:21:E7:8A:30:E7:C7:B1
|
||||
X509v3 Authority Key Identifier:
|
||||
keyid:D4:C7:DB:DB:77:CF:B8:81:61:2E:18:E7:46:B3:24:0C:26:60:F8:CE
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2026-05-03
|
||||
serial:4A:7C:25:EB:FB:D6:47:99:67:9C:8D:34:80:67:26:55:4E:F6:E0:6D
|
||||
keyid:FE:CF:7F:3E:2E:EE:C4:AD:EA:5B:6F:88:45:6C:C7:88:48:14:8B:3A
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2022-08-27
|
||||
serial:49:9C:16:ED:BB:5C:F4:45:1B:AC:C5:AD:8C:7A:5B:33:40:B6:6D:21
|
||||
|
||||
X509v3 Subject Alternative Name:
|
||||
DNS:localhost
|
||||
Netscape Cert Type:
|
||||
@@ -52,28 +53,27 @@ Certificate:
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Server Authentication, Netscape Server Gated Crypto, Microsoft Server Gated Crypto, TLS Web Client Authentication
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Signature Value:
|
||||
af:d7:4b:55:a3:30:bf:23:cb:21:7d:e4:5e:c8:09:b6:79:26:
|
||||
f7:25:eb:c1:e8:be:52:f4:6a:47:93:9d:98:98:07:33:81:3d:
|
||||
45:1b:b0:3e:31:50:22:89:c2:2b:92:82:7d:53:33:87:64:e7:
|
||||
a0:2d:c6:95:38:98:fb:bd:33:98:b1:c1:0e:81:1b:cf:3c:74:
|
||||
ef:b8:76:d1:d5:b3:f9:ac:56:c8:00:e6:6c:9a:3e:1d:f3:a2:
|
||||
b5:18:41:c2:e3:e9:8c:56:40:d7:7d:e5:8f:f3:e3:2b:b9:87:
|
||||
b3:e7:3a:21:8d:46:95:6d:f4:3d:cc:02:87:4f:a3:0c:b7:6f:
|
||||
20:76:cf:2f:c0:28:d0:c6:68:20:64:60:67:a9:ff:11:78:1e:
|
||||
7a:2e:18:55:11:9f:f5:1d:3d:d5:ed:01:80:90:0c:1d:6e:15:
|
||||
fc:fc:a8:e4:b6:88:82:8c:e7:16:fb:14:b4:69:f7:af:55:46:
|
||||
66:07:6d:68:b2:61:8d:e7:bc:4e:ce:8f:e0:f7:f5:d6:92:97:
|
||||
d7:df:3c:ad:ee:97:d6:c2:cf:02:b6:f2:66:df:25:1f:68:f0:
|
||||
57:e2:bc:f6:2a:61:9f:fa:60:a1:ee:25:0f:cc:9b:96:42:b2:
|
||||
d7:d2:70:c0:59:de:a9:ee:f6:bd:ec:45:6e:a5:28:0f:03:6f:
|
||||
8f:c8:e7:71
|
||||
9b:63:ae:ec:56:ec:0c:7a:d5:88:d1:0a:0a:81:29:37:4f:a6:
|
||||
08:b8:78:78:23:af:5b:b7:65:61:d7:64:2a:c9:e7:a6:d2:b1:
|
||||
cb:36:bf:23:2e:2d:48:85:7f:16:0f:64:af:03:db:5d:0e:a7:
|
||||
14:c5:f6:04:b2:6b:92:27:ba:cb:d2:13:25:a2:15:b0:8e:4a:
|
||||
2d:eb:41:18:09:b1:68:d5:0f:6b:56:da:86:ed:4a:7a:29:30:
|
||||
09:77:63:a4:64:3d:e3:2e:d7:6f:1a:8c:96:c9:cb:81:fe:a3:
|
||||
6d:35:e3:09:ea:9b:2e:da:8c:8e:c8:c9:69:b1:83:e7:6f:2d:
|
||||
5f:a1:ac:32:ae:29:57:a9:5c:9b:7d:f0:fd:47:3c:f3:6a:d0:
|
||||
eb:77:8d:70:06:a2:74:3d:d6:37:1e:7b:e7:d9:e4:33:c9:9d:
|
||||
ad:fa:24:c6:4d:e2:2c:c9:25:cb:75:be:8d:e9:83:7e:ad:db:
|
||||
53:9e:97:be:d5:7f:83:90:fc:75:1d:02:29:b7:99:18:a3:39:
|
||||
25:a2:54:b7:21:7d:be:0b:4c:ea:ff:80:b9:4b:5e:21:ed:25:
|
||||
ad:d4:62:52:59:79:83:32:df:30:a1:64:68:05:cc:35:ad:8b:
|
||||
d3:66:6b:b1:31:b7:b3:b2:d8:0f:5b:96:40:ef:57:1d:7f:b0:
|
||||
b0:f4:e9:db
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIE4TCCA8mgAwIBAgIUX1oxZ+o9e0wOe86W5oIT63s8VrkwDQYJKoZIhvcNAQEL
|
||||
MIIE4TCCA8mgAwIBAgIUHVx8WQzNJ4Pdl2RTsEQ8tFvU/NEwDQYJKoZIhvcNAQEL
|
||||
BQAwcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNVBAoM
|
||||
B1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xKTAnBgNVBAMMIENlcnRpZmljYXRl
|
||||
IEF1dGhvcml0eSAyMDI2LTA1LTAzMB4XDTI2MDUwMzEyNDAwMVoXDTM2MDQzMDEy
|
||||
NDAwMVowWjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
IEF1dGhvcml0eSAyMDIyLTA4LTI3MB4XDTIyMDgyNzIwMjMwMloXDTMyMDgyNDIw
|
||||
MjMwMlowWjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
BAoMB1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xEjAQBgNVBAMMCWxvY2FsaG9z
|
||||
dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK3whz8yZod6MZvKVAqu
|
||||
phrKJdXF/ElrIQvepxXInDzNQR0yJXdoe4PoXRR6LgvqQZGkIOwgFw/LjUwbiKDS
|
||||
@@ -83,17 +83,17 @@ W/+6v96LvKHGA6Iviuuet3k6Z2qwcNPoCKcSJNW7V4hyN8jmLtuH4CpxGiyQnIgp
|
||||
DHUohNZ/dS1QCDYrz/O6M3IeegfbINqYOzmGlkziSkJhGpsLZ01tE9GfQN8Sx42d
|
||||
UGkCAwEAAaOCAYYwggGCMAkGA1UdEwQCMAAwOQYJYIZIAYb4QgENBCwWKm5hdHMu
|
||||
aW8gbmF0cy1zZXJ2ZXIgdGVzdC1zdWl0ZSBjZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQU
|
||||
yao8CDl+wULAPbcvhCHnijDnx7Ewga4GA1UdIwSBpjCBo4AU1Mfb23fPuIFhLhjn
|
||||
RrMkDCZg+M6hdaRzMHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh
|
||||
yao8CDl+wULAPbcvhCHnijDnx7Ewga4GA1UdIwSBpjCBo4AU/s9/Pi7uxK3qW2+I
|
||||
RWzHiEgUizqhdaRzMHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh
|
||||
MRAwDgYDVQQKDAdTeW5hZGlhMRAwDgYDVQQLDAduYXRzLmlvMSkwJwYDVQQDDCBD
|
||||
ZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAyNi0wNS0wM4IUSnwl6/vWR5lnnI00gGcm
|
||||
VU724G0wFAYDVR0RBA0wC4IJbG9jYWxob3N0MBEGCWCGSAGG+EIBAQQEAwIGwDAL
|
||||
ZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAyMi0wOC0yN4IUSZwW7btc9EUbrMWtjHpb
|
||||
M0C2bSEwFAYDVR0RBA0wC4IJbG9jYWxob3N0MBEGCWCGSAGG+EIBAQQEAwIGwDAL
|
||||
BgNVHQ8EBAMCBaAwNAYDVR0lBC0wKwYIKwYBBQUHAwEGCWCGSAGG+EIEAQYKKwYB
|
||||
BAGCNwoDAwYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAK/XS1WjML8jyyF9
|
||||
5F7ICbZ5Jvcl68HovlL0akeTnZiYBzOBPUUbsD4xUCKJwiuSgn1TM4dk56AtxpU4
|
||||
mPu9M5ixwQ6BG888dO+4dtHVs/msVsgA5myaPh3zorUYQcLj6YxWQNd95Y/z4yu5
|
||||
h7PnOiGNRpVt9D3MAodPowy3byB2zy/AKNDGaCBkYGep/xF4HnouGFURn/UdPdXt
|
||||
AYCQDB1uFfz8qOS2iIKM5xb7FLRp969VRmYHbWiyYY3nvE7Oj+D39daSl9ffPK3u
|
||||
l9bCzwK28mbfJR9o8FfivPYqYZ/6YKHuJQ/Mm5ZCstfScMBZ3qnu9r3sRW6lKA8D
|
||||
b4/I53E=
|
||||
BAGCNwoDAwYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAJtjruxW7Ax61YjR
|
||||
CgqBKTdPpgi4eHgjr1u3ZWHXZCrJ56bSscs2vyMuLUiFfxYPZK8D210OpxTF9gSy
|
||||
a5InusvSEyWiFbCOSi3rQRgJsWjVD2tW2obtSnopMAl3Y6RkPeMu128ajJbJy4H+
|
||||
o2014wnqmy7ajI7IyWmxg+dvLV+hrDKuKVepXJt98P1HPPNq0Ot3jXAGonQ91jce
|
||||
e+fZ5DPJna36JMZN4izJJct1vo3pg36t21Oel77Vf4OQ/HUdAim3mRijOSWiVLch
|
||||
fb4LTOr/gLlLXiHtJa3UYlJZeYMy3zChZGgFzDWti9Nma7Ext7Oy2A9blkDvVx1/
|
||||
sLD06ds=
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
@@ -1,97 +0,0 @@
|
||||
Certificate:
|
||||
Data:
|
||||
Version: 3 (0x2)
|
||||
Serial Number:
|
||||
28:8f:14:43:33:ab:60:53:77:82:d6:e2:3f:cf:64:4b:21:e8:c2:fd
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2026-05-03
|
||||
Validity
|
||||
Not Before: May 3 12:40:01 2026 GMT
|
||||
Not After : Apr 30 12:40:01 2036 GMT
|
||||
Subject:
|
||||
Subject Public Key Info:
|
||||
Public Key Algorithm: rsaEncryption
|
||||
Public-Key: (2048 bit)
|
||||
Modulus:
|
||||
00:c5:ba:dc:9b:7c:ea:56:f1:27:f0:23:7c:92:95:
|
||||
bb:4f:82:7d:ac:0e:39:a6:e3:e9:d8:43:3a:32:8a:
|
||||
05:45:ac:a9:58:d3:6b:8e:fb:3c:61:51:9e:83:33:
|
||||
0b:3d:42:4b:df:08:9d:2d:96:40:6a:b3:d4:91:66:
|
||||
85:8f:80:33:41:60:81:78:a4:31:c3:c0:66:4f:fe:
|
||||
9e:e0:76:34:2c:10:1d:56:a8:e8:5e:b5:d6:fe:1e:
|
||||
1f:22:1a:5f:7e:13:f7:61:df:a9:34:d9:e0:18:33:
|
||||
a9:40:86:1e:7d:07:bf:b3:ae:c5:2b:e9:76:d0:3c:
|
||||
0d:2f:8a:d7:16:c6:e7:77:0e:b3:fc:57:b0:a2:d4:
|
||||
51:bd:7d:f8:e4:a4:03:ef:b0:c2:83:23:5c:a9:e4:
|
||||
db:41:e5:62:bd:e2:75:a0:41:94:07:22:a3:da:76:
|
||||
df:1e:80:4c:77:af:12:13:2a:d9:41:32:9b:2e:ee:
|
||||
dd:d0:7a:32:c0:48:dd:f0:09:8e:85:91:4e:9c:d5:
|
||||
5c:40:2e:d0:2e:05:f5:d4:2e:c2:ed:39:ca:ea:b8:
|
||||
52:9f:4f:b6:68:53:61:9c:23:fe:b3:84:e6:18:6b:
|
||||
6d:6a:e4:15:7d:7b:41:ec:d5:81:3c:78:e0:77:62:
|
||||
e6:eb:23:4e:2a:f6:79:f9:c9:06:9d:73:ea:a3:bb:
|
||||
e2:51
|
||||
Exponent: 65537 (0x10001)
|
||||
X509v3 extensions:
|
||||
X509v3 Basic Constraints:
|
||||
CA:FALSE
|
||||
Netscape Comment:
|
||||
nats.io nats-server test-suite certificate
|
||||
X509v3 Subject Key Identifier:
|
||||
C7:83:60:0F:26:15:D9:B4:0E:81:B6:B2:26:84:A2:5E:5A:F3:D3:1A
|
||||
X509v3 Authority Key Identifier:
|
||||
keyid:D4:C7:DB:DB:77:CF:B8:81:61:2E:18:E7:46:B3:24:0C:26:60:F8:CE
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2026-05-03
|
||||
serial:4A:7C:25:EB:FB:D6:47:99:67:9C:8D:34:80:67:26:55:4E:F6:E0:6D
|
||||
X509v3 Subject Alternative Name:
|
||||
DNS:localhost
|
||||
Netscape Cert Type:
|
||||
SSL Client, SSL Server
|
||||
X509v3 Key Usage:
|
||||
Digital Signature, Key Encipherment
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Server Authentication, Netscape Server Gated Crypto, Microsoft Server Gated Crypto, TLS Web Client Authentication
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Signature Value:
|
||||
8a:19:c4:1b:18:3c:29:11:09:f0:40:67:9e:bd:41:c1:f2:5a:
|
||||
d3:c8:c6:b5:71:3a:93:c1:f1:03:6d:a7:f3:90:e2:48:0a:ba:
|
||||
87:f3:54:7e:67:88:2c:26:95:43:0c:65:c3:62:fa:13:8e:6b:
|
||||
5e:65:05:67:16:55:38:38:d6:0d:95:96:dd:6b:93:7c:b2:99:
|
||||
6f:c0:ee:20:eb:9e:ed:09:f8:8c:1f:31:7a:00:bd:08:ed:54:
|
||||
64:c0:cc:36:35:98:6b:10:07:43:f8:dd:43:8d:fb:a2:f5:6b:
|
||||
93:be:97:e1:d1:c2:9d:10:80:24:71:ad:2c:3d:c8:fe:50:fd:
|
||||
87:ba:f2:83:8a:17:3a:32:0b:9c:16:cf:5f:c6:40:e5:95:b4:
|
||||
68:53:e3:35:d1:e4:8f:a7:80:df:b9:07:2e:56:d8:7e:0e:c7:
|
||||
c8:b6:27:94:c0:b2:6e:0d:35:dd:cf:90:c5:fe:1d:55:ec:14:
|
||||
bf:9a:75:ba:31:42:1b:e7:3e:84:9e:8a:cd:79:d4:f1:97:91:
|
||||
f2:5b:2f:b6:bb:a7:18:80:cd:10:c5:47:23:ee:c3:50:5e:b6:
|
||||
b9:fe:81:a1:30:5f:d5:63:66:2e:17:05:3b:fe:a6:ed:52:a9:
|
||||
9e:ea:a7:f4:4f:ef:a4:3d:41:0b:b8:56:1d:c6:8e:03:3f:ec:
|
||||
0e:db:93:6d
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIEhzCCA2+gAwIBAgIUKI8UQzOrYFN3gtbiP89kSyHowv0wDQYJKoZIhvcNAQEL
|
||||
BQAwcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNVBAoM
|
||||
B1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xKTAnBgNVBAMMIENlcnRpZmljYXRl
|
||||
IEF1dGhvcml0eSAyMDI2LTA1LTAzMB4XDTI2MDUwMzEyNDAwMVoXDTM2MDQzMDEy
|
||||
NDAwMVowADCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMW63Jt86lbx
|
||||
J/AjfJKVu0+CfawOOabj6dhDOjKKBUWsqVjTa477PGFRnoMzCz1CS98InS2WQGqz
|
||||
1JFmhY+AM0FggXikMcPAZk/+nuB2NCwQHVao6F611v4eHyIaX34T92HfqTTZ4Bgz
|
||||
qUCGHn0Hv7OuxSvpdtA8DS+K1xbG53cOs/xXsKLUUb19+OSkA++wwoMjXKnk20Hl
|
||||
Yr3idaBBlAcio9p23x6ATHevEhMq2UEymy7u3dB6MsBI3fAJjoWRTpzVXEAu0C4F
|
||||
9dQuwu05yuq4Up9PtmhTYZwj/rOE5hhrbWrkFX17QezVgTx44Hdi5usjTir2efnJ
|
||||
Bp1z6qO74lECAwEAAaOCAYYwggGCMAkGA1UdEwQCMAAwOQYJYIZIAYb4QgENBCwW
|
||||
Km5hdHMuaW8gbmF0cy1zZXJ2ZXIgdGVzdC1zdWl0ZSBjZXJ0aWZpY2F0ZTAdBgNV
|
||||
HQ4EFgQUx4NgDyYV2bQOgbayJoSiXlrz0xowga4GA1UdIwSBpjCBo4AU1Mfb23fP
|
||||
uIFhLhjnRrMkDCZg+M6hdaRzMHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxp
|
||||
Zm9ybmlhMRAwDgYDVQQKDAdTeW5hZGlhMRAwDgYDVQQLDAduYXRzLmlvMSkwJwYD
|
||||
VQQDDCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAyNi0wNS0wM4IUSnwl6/vWR5ln
|
||||
nI00gGcmVU724G0wFAYDVR0RBA0wC4IJbG9jYWxob3N0MBEGCWCGSAGG+EIBAQQE
|
||||
AwIGwDALBgNVHQ8EBAMCBaAwNAYDVR0lBC0wKwYIKwYBBQUHAwEGCWCGSAGG+EIE
|
||||
AQYKKwYBBAGCNwoDAwYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAIoZxBsY
|
||||
PCkRCfBAZ569QcHyWtPIxrVxOpPB8QNtp/OQ4kgKuofzVH5niCwmlUMMZcNi+hOO
|
||||
a15lBWcWVTg41g2Vlt1rk3yymW/A7iDrnu0J+IwfMXoAvQjtVGTAzDY1mGsQB0P4
|
||||
3UON+6L1a5O+l+HRwp0QgCRxrSw9yP5Q/Ye68oOKFzoyC5wWz1/GQOWVtGhT4zXR
|
||||
5I+ngN+5By5W2H4Ox8i2J5TAsm4NNd3PkMX+HVXsFL+adboxQhvnPoSeis151PGX
|
||||
kfJbL7a7pxiAzRDFRyPuw1Betrn+gaEwX9VjZi4XBTv+pu1SqZ7qp/RP76Q9QQu4
|
||||
Vh3GjgM/7A7bk20=
|
||||
-----END CERTIFICATE-----
|
||||
@@ -2,16 +2,16 @@ Certificate:
|
||||
Data:
|
||||
Version: 3 (0x2)
|
||||
Serial Number:
|
||||
1d:3c:06:18:47:84:21:7d:e6:db:5f:dc:40:e5:11:99:92:98:af:aa
|
||||
0a:7d:45:32:e2:24:e3:81:f9:5a:64:e1:f2:50:92:d8:e2:3e:14:8e
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2026-05-03
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2022-08-27
|
||||
Validity
|
||||
Not Before: May 3 12:40:01 2026 GMT
|
||||
Not After : Apr 30 12:40:01 2036 GMT
|
||||
Not Before: Aug 27 20:23:02 2022 GMT
|
||||
Not After : Aug 24 20:23:02 2032 GMT
|
||||
Subject: C=US, ST=California, O=Synadia, OU=nats.io, CN=localhost
|
||||
Subject Public Key Info:
|
||||
Public Key Algorithm: rsaEncryption
|
||||
Public-Key: (2048 bit)
|
||||
RSA Public-Key: (2048 bit)
|
||||
Modulus:
|
||||
00:9f:b5:d0:95:c7:8c:ee:16:13:fc:d6:90:8c:75:
|
||||
a9:3b:2c:ab:ff:b6:b6:ae:39:8f:c3:d4:75:7d:01:
|
||||
@@ -40,9 +40,10 @@ Certificate:
|
||||
X509v3 Subject Key Identifier:
|
||||
C7:6D:8A:C9:67:13:C9:63:AB:01:87:58:33:DC:FB:24:AC:61:65:4E
|
||||
X509v3 Authority Key Identifier:
|
||||
keyid:D4:C7:DB:DB:77:CF:B8:81:61:2E:18:E7:46:B3:24:0C:26:60:F8:CE
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2026-05-03
|
||||
serial:4A:7C:25:EB:FB:D6:47:99:67:9C:8D:34:80:67:26:55:4E:F6:E0:6D
|
||||
keyid:FE:CF:7F:3E:2E:EE:C4:AD:EA:5B:6F:88:45:6C:C7:88:48:14:8B:3A
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2022-08-27
|
||||
serial:49:9C:16:ED:BB:5C:F4:45:1B:AC:C5:AD:8C:7A:5B:33:40:B6:6D:21
|
||||
|
||||
X509v3 Subject Alternative Name:
|
||||
DNS:localhost, IP Address:127.0.0.1, IP Address:0:0:0:0:0:0:0:1
|
||||
Netscape Cert Type:
|
||||
@@ -52,28 +53,27 @@ Certificate:
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Server Authentication, Netscape Server Gated Crypto, Microsoft Server Gated Crypto, TLS Web Client Authentication
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Signature Value:
|
||||
44:93:d1:17:bd:75:16:8d:c2:54:dd:87:99:68:65:26:68:a4:
|
||||
a0:0b:6d:3c:63:52:2a:03:5d:c0:26:36:09:f9:b0:83:d2:60:
|
||||
f0:a1:a6:18:81:ec:58:f7:d5:5f:d8:36:54:f3:7f:dd:51:ff:
|
||||
3d:36:fd:2e:80:33:48:d3:15:8d:ae:f4:13:5a:70:7f:8a:06:
|
||||
d2:ff:b3:3e:cd:5a:5e:b9:d8:78:be:0d:c0:b1:19:fd:43:b0:
|
||||
a6:40:bb:d0:03:06:7c:de:66:7b:89:75:65:92:9b:43:c9:6f:
|
||||
87:da:c2:a9:fb:95:ba:f9:07:d7:88:be:fc:25:ca:bb:61:58:
|
||||
9d:9d:2a:f8:4c:21:e8:44:df:18:e7:ec:9f:89:c1:87:5c:ee:
|
||||
91:66:29:ad:b1:26:11:ee:49:2c:a5:65:23:3f:71:5b:62:71:
|
||||
ec:63:b9:e7:cb:87:3a:43:4a:7a:31:a7:1d:69:88:d2:34:ca:
|
||||
40:d0:55:02:c8:b6:34:fb:52:0c:91:7f:85:09:c9:dd:e3:98:
|
||||
cf:4d:c3:f6:1d:8c:4f:00:ab:c0:c9:8c:3c:10:ff:b0:0d:e9:
|
||||
28:80:61:7b:44:1c:39:7c:bb:4f:6d:63:2f:fe:04:88:6b:81:
|
||||
f2:73:ec:a4:c9:bd:c8:6e:95:c1:ad:67:92:9b:19:dc:99:6f:
|
||||
ea:23:57:78
|
||||
a1:3f:db:97:03:ca:e3:34:36:01:8a:d9:34:1e:1e:9e:d5:bf:
|
||||
7b:9f:37:cf:61:2a:8e:fa:c3:cb:68:ca:f3:4e:04:78:8d:5a:
|
||||
0c:c0:5b:24:fe:56:a5:c0:7a:b1:bd:63:1e:ff:bf:72:9a:fa:
|
||||
08:33:4b:e0:2b:35:8b:03:c4:23:7f:54:3a:8a:f2:a9:28:d7:
|
||||
a8:7f:10:96:93:a3:b5:82:59:f1:b6:05:3b:58:cd:a1:8d:a9:
|
||||
77:fa:71:36:f7:68:c9:50:46:4c:0f:c3:f8:f8:90:0c:69:eb:
|
||||
53:e6:d0:5d:32:2f:d3:f7:b0:8d:75:68:59:37:d7:de:ee:da:
|
||||
42:99:1c:24:03:28:c4:42:8c:17:e4:ed:5a:d8:70:32:01:fb:
|
||||
f8:57:f8:1a:2d:bd:f6:e1:35:12:28:65:ef:00:05:1b:e2:50:
|
||||
d3:1e:3c:25:34:56:5a:86:8c:30:9d:e0:f4:79:d8:09:7d:74:
|
||||
0d:70:3a:2c:67:2a:d6:d2:6b:ed:d4:bd:1d:f2:d6:02:74:2a:
|
||||
75:b9:8b:6b:a4:c1:c7:d8:42:58:ad:85:d1:0c:0f:14:88:12:
|
||||
57:34:60:9f:18:32:f2:75:77:69:30:42:65:3a:f7:c1:16:49:
|
||||
76:21:ea:cd:95:b1:29:d1:66:e2:90:e9:86:c4:7b:2d:aa:2b:
|
||||
00:6e:59:f6
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIE+TCCA+GgAwIBAgIUHTwGGEeEIX3m21/cQOURmZKYr6owDQYJKoZIhvcNAQEL
|
||||
MIIE+TCCA+GgAwIBAgIUCn1FMuIk44H5WmTh8lCS2OI+FI4wDQYJKoZIhvcNAQEL
|
||||
BQAwcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNVBAoM
|
||||
B1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xKTAnBgNVBAMMIENlcnRpZmljYXRl
|
||||
IEF1dGhvcml0eSAyMDI2LTA1LTAzMB4XDTI2MDUwMzEyNDAwMVoXDTM2MDQzMDEy
|
||||
NDAwMVowWjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
IEF1dGhvcml0eSAyMDIyLTA4LTI3MB4XDTIyMDgyNzIwMjMwMloXDTMyMDgyNDIw
|
||||
MjMwMlowWjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
BAoMB1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xEjAQBgNVBAMMCWxvY2FsaG9z
|
||||
dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ+10JXHjO4WE/zWkIx1
|
||||
qTssq/+2tq45j8PUdX0Bugvw24pyLUFJ4fG19lwyr7BGie4zXYRHaaZL3j+LpClM
|
||||
@@ -83,17 +83,17 @@ tgTQCsUZbe2qRX0yw1O6XdZc5TDgxzwviJ4NM4rIMECvSKaqTWiBVU9DzPJ5OsIj
|
||||
Df4J3MCFlM/A9OJ+wmR6VUHxPz3jRkrvVTPS6nJWJRVsRxtNxdrTasti29R8hmSB
|
||||
hmECAwEAAaOCAZ4wggGaMAkGA1UdEwQCMAAwOQYJYIZIAYb4QgENBCwWKm5hdHMu
|
||||
aW8gbmF0cy1zZXJ2ZXIgdGVzdC1zdWl0ZSBjZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQU
|
||||
x22KyWcTyWOrAYdYM9z7JKxhZU4wga4GA1UdIwSBpjCBo4AU1Mfb23fPuIFhLhjn
|
||||
RrMkDCZg+M6hdaRzMHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh
|
||||
x22KyWcTyWOrAYdYM9z7JKxhZU4wga4GA1UdIwSBpjCBo4AU/s9/Pi7uxK3qW2+I
|
||||
RWzHiEgUizqhdaRzMHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh
|
||||
MRAwDgYDVQQKDAdTeW5hZGlhMRAwDgYDVQQLDAduYXRzLmlvMSkwJwYDVQQDDCBD
|
||||
ZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAyNi0wNS0wM4IUSnwl6/vWR5lnnI00gGcm
|
||||
VU724G0wLAYDVR0RBCUwI4IJbG9jYWxob3N0hwR/AAABhxAAAAAAAAAAAAAAAAAA
|
||||
ZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAyMi0wOC0yN4IUSZwW7btc9EUbrMWtjHpb
|
||||
M0C2bSEwLAYDVR0RBCUwI4IJbG9jYWxob3N0hwR/AAABhxAAAAAAAAAAAAAAAAAA
|
||||
AAABMBEGCWCGSAGG+EIBAQQEAwIGwDALBgNVHQ8EBAMCBaAwNAYDVR0lBC0wKwYI
|
||||
KwYBBQUHAwEGCWCGSAGG+EIEAQYKKwYBBAGCNwoDAwYIKwYBBQUHAwIwDQYJKoZI
|
||||
hvcNAQELBQADggEBAEST0Re9dRaNwlTdh5loZSZopKALbTxjUioDXcAmNgn5sIPS
|
||||
YPChphiB7Fj31V/YNlTzf91R/z02/S6AM0jTFY2u9BNacH+KBtL/sz7NWl652Hi+
|
||||
DcCxGf1DsKZAu9ADBnzeZnuJdWWSm0PJb4fawqn7lbr5B9eIvvwlyrthWJ2dKvhM
|
||||
IehE3xjn7J+JwYdc7pFmKa2xJhHuSSylZSM/cVticexjuefLhzpDSnoxpx1piNI0
|
||||
ykDQVQLItjT7UgyRf4UJyd3jmM9Nw/YdjE8Aq8DJjDwQ/7AN6SiAYXtEHDl8u09t
|
||||
Yy/+BIhrgfJz7KTJvchulcGtZ5KbGdyZb+ojV3g=
|
||||
hvcNAQELBQADggEBAKE/25cDyuM0NgGK2TQeHp7Vv3ufN89hKo76w8toyvNOBHiN
|
||||
WgzAWyT+VqXAerG9Yx7/v3Ka+ggzS+ArNYsDxCN/VDqK8qko16h/EJaTo7WCWfG2
|
||||
BTtYzaGNqXf6cTb3aMlQRkwPw/j4kAxp61Pm0F0yL9P3sI11aFk3197u2kKZHCQD
|
||||
KMRCjBfk7VrYcDIB+/hX+BotvfbhNRIoZe8ABRviUNMePCU0VlqGjDCd4PR52Al9
|
||||
dA1wOixnKtbSa+3UvR3y1gJ0KnW5i2ukwcfYQlithdEMDxSIElc0YJ8YMvJ1d2kw
|
||||
QmU698EWSXYh6s2VsSnRZuKQ6YbEey2qKwBuWfY=
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
@@ -2,16 +2,16 @@ Certificate:
|
||||
Data:
|
||||
Version: 3 (0x2)
|
||||
Serial Number:
|
||||
3b:46:0b:48:88:81:11:bc:98:bf:45:0e:a8:d6:7e:28:1f:74:38:23
|
||||
20:98:70:f3:55:1c:7e:a3:15:0c:64:c1:a2:8e:56:4d:4a:77:70:e8
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2026-05-03
|
||||
Issuer: C=US, ST=California, O=Synadia, OU=nats.io, CN=Certificate Authority 2022-08-27
|
||||
Validity
|
||||
Not Before: May 3 12:40:01 2026 GMT
|
||||
Not After : Apr 30 12:40:01 2036 GMT
|
||||
Not Before: Aug 27 20:23:02 2022 GMT
|
||||
Not After : Aug 24 20:23:02 2032 GMT
|
||||
Subject: C=US, ST=California, O=Synadia, OU=nats.io, CN=localhost
|
||||
Subject Public Key Info:
|
||||
Public Key Algorithm: rsaEncryption
|
||||
Public-Key: (2048 bit)
|
||||
RSA Public-Key: (2048 bit)
|
||||
Modulus:
|
||||
00:bc:15:41:85:42:e2:da:58:c4:d4:2b:8a:92:88:
|
||||
cf:a8:81:5b:03:5d:8b:d5:44:32:07:ae:ef:a2:ff:
|
||||
@@ -40,9 +40,10 @@ Certificate:
|
||||
X509v3 Subject Key Identifier:
|
||||
5F:CD:62:19:69:22:48:0B:79:B2:8F:53:D7:EA:C6:9B:C2:5E:58:94
|
||||
X509v3 Authority Key Identifier:
|
||||
keyid:D4:C7:DB:DB:77:CF:B8:81:61:2E:18:E7:46:B3:24:0C:26:60:F8:CE
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2026-05-03
|
||||
serial:4A:7C:25:EB:FB:D6:47:99:67:9C:8D:34:80:67:26:55:4E:F6:E0:6D
|
||||
keyid:FE:CF:7F:3E:2E:EE:C4:AD:EA:5B:6F:88:45:6C:C7:88:48:14:8B:3A
|
||||
DirName:/C=US/ST=California/O=Synadia/OU=nats.io/CN=Certificate Authority 2022-08-27
|
||||
serial:49:9C:16:ED:BB:5C:F4:45:1B:AC:C5:AD:8C:7A:5B:33:40:B6:6D:21
|
||||
|
||||
X509v3 Subject Alternative Name:
|
||||
DNS:localhost, IP Address:127.0.0.1, IP Address:0:0:0:0:0:0:0:1
|
||||
Netscape Cert Type:
|
||||
@@ -52,28 +53,27 @@ Certificate:
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Server Authentication, Netscape Server Gated Crypto, Microsoft Server Gated Crypto, TLS Web Client Authentication
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Signature Value:
|
||||
bd:6f:ad:3c:5e:54:45:65:ba:bb:35:7a:41:d4:a4:5f:23:3b:
|
||||
51:48:92:bf:12:f7:9d:1e:29:76:d9:f0:5c:35:59:50:0c:68:
|
||||
36:19:4c:39:fb:e2:10:06:a6:e3:1e:08:1c:bd:5e:53:7e:86:
|
||||
c7:df:11:c0:c3:e0:14:78:01:ae:84:f4:83:9f:9d:55:bf:62:
|
||||
5b:72:da:81:ed:ba:d0:7c:2a:39:09:ac:d5:32:c8:85:41:ab:
|
||||
d9:c5:8b:c3:72:ac:0d:c2:27:f4:db:3b:a1:c5:ae:95:d2:8a:
|
||||
a3:7d:4d:c4:17:04:75:d1:33:56:91:03:d7:5b:a1:3d:63:0c:
|
||||
16:73:43:56:33:aa:48:c6:63:11:9b:ac:ce:13:f1:dc:d8:7a:
|
||||
50:0b:8d:07:43:5a:90:ba:c7:03:49:df:f6:25:d9:13:bf:d4:
|
||||
30:33:b3:2e:74:18:06:bd:3a:b0:25:d7:0f:29:c6:d0:51:b2:
|
||||
32:b7:94:a3:de:2f:62:f5:f5:98:49:1d:54:54:e5:4f:30:51:
|
||||
2f:68:46:5a:22:b3:93:91:3e:59:7d:30:46:9e:f4:95:d6:1a:
|
||||
12:37:9e:2c:5e:c4:33:cb:94:5f:11:d6:72:a8:8b:bb:8a:81:
|
||||
59:17:e7:31:97:75:2b:e5:7f:37:45:e8:73:67:84:0d:92:9b:
|
||||
e7:e7:bb:0e
|
||||
08:6c:2f:cd:9d:b4:44:42:51:29:c2:55:92:e9:52:69:af:ae:
|
||||
c6:c4:4b:81:7a:a9:7c:81:f9:dd:27:fe:c1:e2:9b:59:92:38:
|
||||
1f:f4:d3:04:b7:ed:59:78:da:09:33:c0:c0:1d:60:79:07:78:
|
||||
15:aa:50:c4:f8:7c:47:96:a7:76:3f:ac:5f:eb:7d:8b:05:81:
|
||||
83:f7:be:7d:1e:6f:05:d4:bb:7b:ee:14:a8:af:e2:22:82:bf:
|
||||
25:7c:f2:30:38:98:68:43:c0:4a:08:80:11:81:be:c1:7e:43:
|
||||
22:cb:85:c3:b6:da:37:86:c5:7f:5b:8c:d9:b4:61:3a:08:c0:
|
||||
12:a0:a1:ea:2f:cd:58:da:41:8c:1e:10:1f:54:19:c2:6a:2e:
|
||||
3a:d9:0e:f6:7c:34:95:72:9a:41:ed:1e:79:84:1f:8e:89:8c:
|
||||
43:84:9d:32:42:e9:b5:db:1a:ab:2e:1a:f3:d1:b0:2b:38:fc:
|
||||
e3:c7:4f:1b:6f:9c:2e:3f:83:7a:fc:22:23:aa:64:6c:6f:c9:
|
||||
26:81:81:5b:f1:8c:ca:0a:ba:2d:91:f7:2f:ba:d4:7f:dc:53:
|
||||
e2:f6:1f:38:50:6e:6b:87:10:b6:02:af:56:f3:83:9f:3e:3d:
|
||||
83:e6:59:cf:3b:f8:bd:21:0a:8c:90:d4:26:74:70:1c:b1:cc:
|
||||
a6:3a:27:e1
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIE+TCCA+GgAwIBAgIUO0YLSIiBEbyYv0UOqNZ+KB90OCMwDQYJKoZIhvcNAQEL
|
||||
MIIE+TCCA+GgAwIBAgIUIJhw81UcfqMVDGTBoo5WTUp3cOgwDQYJKoZIhvcNAQEL
|
||||
BQAwcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNVBAoM
|
||||
B1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xKTAnBgNVBAMMIENlcnRpZmljYXRl
|
||||
IEF1dGhvcml0eSAyMDI2LTA1LTAzMB4XDTI2MDUwMzEyNDAwMVoXDTM2MDQzMDEy
|
||||
NDAwMVowWjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
IEF1dGhvcml0eSAyMDIyLTA4LTI3MB4XDTIyMDgyNzIwMjMwMloXDTMyMDgyNDIw
|
||||
MjMwMlowWjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEDAOBgNV
|
||||
BAoMB1N5bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xEjAQBgNVBAMMCWxvY2FsaG9z
|
||||
dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALwVQYVC4tpYxNQripKI
|
||||
z6iBWwNdi9VEMgeu76L/DykU3b9+azfkMeGUfl6+dEBozjvVvACmQvwP4cWNTwky
|
||||
@@ -83,17 +83,17 @@ RtBOPQCT+OdITG/7E8D7bIqeU2YkP8OTZldq9maIlLdG4ejWigQCkuHFybFx8NIe
|
||||
SmmLDKyhAYlfH6x52o2tvwOBtoxwXB509aTY0YpB178nUdH8dbk0cwOuEC6reKKv
|
||||
55kCAwEAAaOCAZ4wggGaMAkGA1UdEwQCMAAwOQYJYIZIAYb4QgENBCwWKm5hdHMu
|
||||
aW8gbmF0cy1zZXJ2ZXIgdGVzdC1zdWl0ZSBjZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQU
|
||||
X81iGWkiSAt5so9T1+rGm8JeWJQwga4GA1UdIwSBpjCBo4AU1Mfb23fPuIFhLhjn
|
||||
RrMkDCZg+M6hdaRzMHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh
|
||||
X81iGWkiSAt5so9T1+rGm8JeWJQwga4GA1UdIwSBpjCBo4AU/s9/Pi7uxK3qW2+I
|
||||
RWzHiEgUizqhdaRzMHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh
|
||||
MRAwDgYDVQQKDAdTeW5hZGlhMRAwDgYDVQQLDAduYXRzLmlvMSkwJwYDVQQDDCBD
|
||||
ZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAyNi0wNS0wM4IUSnwl6/vWR5lnnI00gGcm
|
||||
VU724G0wLAYDVR0RBCUwI4IJbG9jYWxob3N0hwR/AAABhxAAAAAAAAAAAAAAAAAA
|
||||
ZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAyMi0wOC0yN4IUSZwW7btc9EUbrMWtjHpb
|
||||
M0C2bSEwLAYDVR0RBCUwI4IJbG9jYWxob3N0hwR/AAABhxAAAAAAAAAAAAAAAAAA
|
||||
AAABMBEGCWCGSAGG+EIBAQQEAwIGwDALBgNVHQ8EBAMCBaAwNAYDVR0lBC0wKwYI
|
||||
KwYBBQUHAwEGCWCGSAGG+EIEAQYKKwYBBAGCNwoDAwYIKwYBBQUHAwIwDQYJKoZI
|
||||
hvcNAQELBQADggEBAL1vrTxeVEVlurs1ekHUpF8jO1FIkr8S950eKXbZ8Fw1WVAM
|
||||
aDYZTDn74hAGpuMeCBy9XlN+hsffEcDD4BR4Aa6E9IOfnVW/Ylty2oHtutB8KjkJ
|
||||
rNUyyIVBq9nFi8NyrA3CJ/TbO6HFrpXSiqN9TcQXBHXRM1aRA9dboT1jDBZzQ1Yz
|
||||
qkjGYxGbrM4T8dzYelALjQdDWpC6xwNJ3/Yl2RO/1DAzsy50GAa9OrAl1w8pxtBR
|
||||
sjK3lKPeL2L19ZhJHVRU5U8wUS9oRlois5ORPll9MEae9JXWGhI3nixexDPLlF8R
|
||||
1nKoi7uKgVkX5zGXdSvlfzdF6HNnhA2Sm+fnuw4=
|
||||
hvcNAQELBQADggEBAAhsL82dtERCUSnCVZLpUmmvrsbES4F6qXyB+d0n/sHim1mS
|
||||
OB/00wS37Vl42gkzwMAdYHkHeBWqUMT4fEeWp3Y/rF/rfYsFgYP3vn0ebwXUu3vu
|
||||
FKiv4iKCvyV88jA4mGhDwEoIgBGBvsF+QyLLhcO22jeGxX9bjNm0YToIwBKgoeov
|
||||
zVjaQYweEB9UGcJqLjrZDvZ8NJVymkHtHnmEH46JjEOEnTJC6bXbGqsuGvPRsCs4
|
||||
/OPHTxtvnC4/g3r8IiOqZGxvySaBgVvxjMoKui2R9y+61H/cU+L2HzhQbmuHELYC
|
||||
r1bzg58+PYPmWc87+L0hCoyQ1CZ0cByxzKY6J+E=
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
+94
-20
@@ -15,13 +15,19 @@ package test
|
||||
|
||||
import (
|
||||
"bufio"
|
||||
"crypto/ed25519"
|
||||
"crypto/rand"
|
||||
"crypto/tls"
|
||||
"crypto/x509"
|
||||
"crypto/x509/pkix"
|
||||
"encoding/pem"
|
||||
"errors"
|
||||
"fmt"
|
||||
"math/big"
|
||||
"net"
|
||||
"net/url"
|
||||
"os"
|
||||
"path/filepath"
|
||||
"strings"
|
||||
"sync"
|
||||
"testing"
|
||||
@@ -432,14 +438,19 @@ Loop:
|
||||
|
||||
func TestTLSClientCertificateNoSubjectWithSANAuth(t *testing.T) {
|
||||
// A certificate with an empty Subject DN but a DNS SAN should be accepted
|
||||
// and mapped to the SAN value, exercising the hasSANs branch added to
|
||||
// and mapped to the SAN value, exercising the hasSANs branch in
|
||||
// checkClientTLSCertSubject.
|
||||
conf := createConfFile(t, []byte(`
|
||||
dir := t.TempDir()
|
||||
ca := issueCert(t, dir, "ca", nil, pkix.Name{CommonName: "test-ca"}, nil, nil)
|
||||
server := issueCert(t, dir, "server", ca, pkix.Name{CommonName: "localhost"}, []string{"localhost"}, []net.IP{net.ParseIP("127.0.0.1")})
|
||||
client := issueCert(t, dir, "client-nosubj", ca, pkix.Name{}, []string{"localhost"}, nil)
|
||||
|
||||
conf := createConfFile(t, []byte(fmt.Sprintf(`
|
||||
listen: "127.0.0.1:-1"
|
||||
tls {
|
||||
cert_file: "./configs/certs/server-cert.pem"
|
||||
key_file: "./configs/certs/server-key.pem"
|
||||
ca_file: "./configs/certs/ca.pem"
|
||||
cert_file: %q
|
||||
key_file: %q
|
||||
ca_file: %q
|
||||
verify_and_map: true
|
||||
}
|
||||
authorization {
|
||||
@@ -447,27 +458,90 @@ func TestTLSClientCertificateNoSubjectWithSANAuth(t *testing.T) {
|
||||
{ user: "localhost" }
|
||||
]
|
||||
}
|
||||
`))
|
||||
`, server.certPath, server.keyPath, ca.certPath)))
|
||||
srv, opts := RunServerWithConfig(conf)
|
||||
defer srv.Shutdown()
|
||||
nurl := fmt.Sprintf("tls://%s:%d", opts.Host, opts.Port)
|
||||
|
||||
// Client with a no-subject cert (SAN only) should connect and be mapped to "localhost".
|
||||
nc, err := nats.Connect(nurl,
|
||||
nats.ClientCert("./configs/certs/server-nosubj.pem", "./configs/certs/server-key-nosubj.pem"),
|
||||
nats.RootCAs("./configs/certs/ca.pem"),
|
||||
)
|
||||
if err != nil {
|
||||
t.Fatalf("Expected to connect with no-subject cert, got %v", err)
|
||||
}
|
||||
nc.Close()
|
||||
t.Run("no-subject cert with SAN connects", func(t *testing.T) {
|
||||
nc, err := nats.Connect(nurl,
|
||||
nats.ClientCert(client.certPath, client.keyPath),
|
||||
nats.RootCAs(ca.certPath),
|
||||
)
|
||||
if err != nil {
|
||||
t.Fatalf("Expected to connect with no-subject cert, got %v", err)
|
||||
}
|
||||
defer nc.Close()
|
||||
})
|
||||
|
||||
// Client without a cert should be rejected.
|
||||
nc, err = nats.Connect(nurl, nats.RootCAs("./configs/certs/ca.pem"))
|
||||
if err == nil {
|
||||
nc.Close()
|
||||
t.Fatal("Expected connection without client cert to fail, but it succeeded")
|
||||
t.Run("no client cert is rejected", func(t *testing.T) {
|
||||
nc, err := nats.Connect(nurl, nats.RootCAs(ca.certPath))
|
||||
if err == nil {
|
||||
nc.Close()
|
||||
t.Fatal("Expected connection without client cert to fail, but it succeeded")
|
||||
}
|
||||
})
|
||||
}
|
||||
|
||||
type issuedCert struct {
|
||||
cert *x509.Certificate
|
||||
key ed25519.PrivateKey
|
||||
certPath string
|
||||
keyPath string
|
||||
}
|
||||
|
||||
// issueCert generates an Ed25519 keypair and an X.509 certificate written under
|
||||
// dir as <name>-cert.pem and <name>-key.pem. parent==nil produces a self-signed
|
||||
// CA; otherwise the cert is signed by parent and gets server+client EKU.
|
||||
func issueCert(t *testing.T, dir, name string, parent *issuedCert, subject pkix.Name, dnsNames []string, ips []net.IP) *issuedCert {
|
||||
t.Helper()
|
||||
_, key, err := ed25519.GenerateKey(rand.Reader)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
tmpl := &x509.Certificate{
|
||||
SerialNumber: big.NewInt(time.Now().UnixNano()),
|
||||
Subject: subject,
|
||||
NotBefore: time.Now().Add(-time.Hour),
|
||||
NotAfter: time.Now().Add(24 * time.Hour),
|
||||
KeyUsage: x509.KeyUsageDigitalSignature,
|
||||
DNSNames: dnsNames,
|
||||
IPAddresses: ips,
|
||||
}
|
||||
parentCert, parentKey := tmpl, key
|
||||
if parent == nil {
|
||||
tmpl.IsCA = true
|
||||
tmpl.BasicConstraintsValid = true
|
||||
tmpl.KeyUsage |= x509.KeyUsageCertSign
|
||||
} else {
|
||||
tmpl.ExtKeyUsage = []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth, x509.ExtKeyUsageClientAuth}
|
||||
parentCert, parentKey = parent.cert, parent.key
|
||||
}
|
||||
der, err := x509.CreateCertificate(rand.Reader, tmpl, parentCert, key.Public(), parentKey)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
cert, err := x509.ParseCertificate(der)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
keyDER, err := x509.MarshalPKCS8PrivateKey(key)
|
||||
if err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
out := &issuedCert{
|
||||
cert: cert,
|
||||
key: key,
|
||||
certPath: filepath.Join(dir, name+"-cert.pem"),
|
||||
keyPath: filepath.Join(dir, name+"-key.pem"),
|
||||
}
|
||||
if err := os.WriteFile(out.certPath, pem.EncodeToMemory(&pem.Block{Type: "CERTIFICATE", Bytes: der}), 0644); err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
if err := os.WriteFile(out.keyPath, pem.EncodeToMemory(&pem.Block{Type: "PRIVATE KEY", Bytes: keyDER}), 0600); err != nil {
|
||||
t.Fatal(err)
|
||||
}
|
||||
return out
|
||||
}
|
||||
|
||||
func TestTLSClientCertificateTLSAuthMultipleOptions(t *testing.T) {
|
||||
|
||||
Reference in New Issue
Block a user