updates 2024-07-31

VPN/Nico Client/TestOpenVPN.OVPN

@@ -0,0 +1,119 @@
+##############################################
+# Sample client-side OpenVPN 2.6 config file #
+# for connecting to multi-client server.     #
+#                                            #
+# This configuration can be used by multiple #
+# clients, however each client should have   #
+# its own cert and key files.                #
+#                                            #
+# On Windows, you might want to rename this  #
+# file so it has a .ovpn extension           #
+##############################################
+
+# Specify that we are a client and that we
+# will be pulling certain config file directives
+# from the server.
+client
+
+# Use the same setting as you are using on
+# the server.
+# On most systems, the VPN will not function
+# unless you partially or fully disable
+# the firewall for the TUN/TAP interface.
+;dev tap
+dev tun
+
+# Windows needs the TAP-Win32 adapter name
+# from the Network Connections panel
+# if you have more than one.  On XP SP2,
+# you may need to disable the firewall
+# for the TAP adapter.
+;dev-node MyTap
+
+# Are we connecting to a TCP or
+# UDP server?  Use the same setting as
+# on the server.
+;proto tcp
+proto udp
+
+# The hostname/IP and port of the server.
+# You can have multiple remote entries
+# to load balance between the servers.
+remote 166.252.175.224 1194
+remote 172.85.171.82 1194
+
+# Choose a random host from the remote
+# list for load-balancing.  Otherwise
+# try hosts in the order specified.
+;remote-random
+
+# Keep trying indefinitely to resolve the
+# host name of the OpenVPN server.  Very useful
+# on machines which are not permanently connected
+# to the internet such as laptops.
+resolv-retry infinite
+
+# Most clients don't need to bind to
+# a specific local port number.
+nobind
+
+# Downgrade privileges after initialization (non-Windows only)
+;user openvpn
+;group openvpn
+
+# Try to preserve some state across restarts.
+persist-tun
+
+# If you are connecting through an
+# HTTP proxy to reach the actual OpenVPN
+# server, put the proxy server/IP and
+# port number here.  See the man page
+# if your proxy server requires
+# authentication.
+;http-proxy-retry # retry on connection failures
+;http-proxy [proxy server] [proxy port #]
+
+# Wireless networks often produce a lot
+# of duplicate packets.  Set this flag
+# to silence duplicate packet warnings.
+;mute-replay-warnings
+
+# SSL/TLS parms.
+# See the server config file for more
+# description.  It's best to use
+# a separate .crt/.key file pair
+# for each client.  A single ca
+# file can be used for all clients.
+ca ca.crt
+cert nico.crt
+key nico.key
+
+# Verify server certificate by checking that the
+# certificate has the correct key usage set.
+# This is an important precaution to protect against
+# a potential attack discussed here:
+#  http://openvpn.net/howto.html#mitm
+#
+# To use this feature, you will need to generate
+# your server certificates with the keyUsage set to
+#   digitalSignature, keyEncipherment
+# and the extendedKeyUsage to
+#   serverAuth
+# EasyRSA can do this for you.
+remote-cert-tls server
+
+# Allow to connect to really old OpenVPN versions
+# without AEAD support (OpenVPN 2.3.x or older)
+# This adds AES-256-CBC as fallback cipher and
+# keeps the modern ciphers as well.
+;data-ciphers AES-256-GCM:AES-128-GCM:?CHACHA20-POLY1305:AES-256-CBC
+
+# If a tls-auth key is used on the server
+# then every client must also have the key.
+;tls-auth ta.key 1
+
+# Set log file verbosity.
+verb 3
+
+# Silence repeating messages
+;mute 20

VPN/Nico Client/TestOpenVPN_HP.OVPN

@@ -0,0 +1,118 @@
+##############################################
+# Sample client-side OpenVPN 2.6 config file #
+# for connecting to multi-client server.     #
+#                                            #
+# This configuration can be used by multiple #
+# clients, however each client should have   #
+# its own cert and key files.                #
+#                                            #
+# On Windows, you might want to rename this  #
+# file so it has a .ovpn extension           #
+##############################################
+
+# Specify that we are a client and that we
+# will be pulling certain config file directives
+# from the server.
+client
+
+# Use the same setting as you are using on
+# the server.
+# On most systems, the VPN will not function
+# unless you partially or fully disable
+# the firewall for the TUN/TAP interface.
+;dev tap
+dev tun
+
+# Windows needs the TAP-Win32 adapter name
+# from the Network Connections panel
+# if you have more than one.  On XP SP2,
+# you may need to disable the firewall
+# for the TAP adapter.
+;dev-node MyTap
+
+# Are we connecting to a TCP or
+# UDP server?  Use the same setting as
+# on the server.
+;proto tcp
+proto udp
+
+# The hostname/IP and port of the server.
+# You can have multiple remote entries
+# to load balance between the servers.
+remote 172.85.171.82 1194
+
+# Choose a random host from the remote
+# list for load-balancing.  Otherwise
+# try hosts in the order specified.
+;remote-random
+
+# Keep trying indefinitely to resolve the
+# host name of the OpenVPN server.  Very useful
+# on machines which are not permanently connected
+# to the internet such as laptops.
+resolv-retry infinite
+
+# Most clients don't need to bind to
+# a specific local port number.
+nobind
+
+# Downgrade privileges after initialization (non-Windows only)
+;user openvpn
+;group openvpn
+
+# Try to preserve some state across restarts.
+persist-tun
+
+# If you are connecting through an
+# HTTP proxy to reach the actual OpenVPN
+# server, put the proxy server/IP and
+# port number here.  See the man page
+# if your proxy server requires
+# authentication.
+;http-proxy-retry # retry on connection failures
+;http-proxy [proxy server] [proxy port #]
+
+# Wireless networks often produce a lot
+# of duplicate packets.  Set this flag
+# to silence duplicate packet warnings.
+;mute-replay-warnings
+
+# SSL/TLS parms.
+# See the server config file for more
+# description.  It's best to use
+# a separate .crt/.key file pair
+# for each client.  A single ca
+# file can be used for all clients.
+ca ca.crt
+cert nico.crt
+key nico.key
+
+# Verify server certificate by checking that the
+# certificate has the correct key usage set.
+# This is an important precaution to protect against
+# a potential attack discussed here:
+#  http://openvpn.net/howto.html#mitm
+#
+# To use this feature, you will need to generate
+# your server certificates with the keyUsage set to
+#   digitalSignature, keyEncipherment
+# and the extendedKeyUsage to
+#   serverAuth
+# EasyRSA can do this for you.
+remote-cert-tls server
+
+# Allow to connect to really old OpenVPN versions
+# without AEAD support (OpenVPN 2.3.x or older)
+# This adds AES-256-CBC as fallback cipher and
+# keeps the modern ciphers as well.
+;data-ciphers AES-256-GCM:AES-128-GCM:?CHACHA20-POLY1305:AES-256-CBC
+
+# If a tls-auth key is used on the server
+# then every client must also have the key.
+;tls-auth ta.key 1
+
+# Set log file verbosity.
+verb 3
+
+# Silence repeating messages
+;mute 20

VPN/Nico Client/ca.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

VPN/Nico Client/nico.crt

@@ -0,0 +1,84 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            c5:3c:3d:ea:3c:70:00:7e:f9:71:0f:79:94:e0:f8:b0
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=HenryPump
+        Validity
+            Not Before: May  1 21:26:14 2024 GMT
+            Not After : Aug  4 21:26:14 2026 GMT
+        Subject: CN=nico
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bc:4b:fb:42:17:cb:e1:d8:bc:21:75:51:59:53:
+                    b9:e9:41:cc:0b:dd:a0:5a:5c:f9:be:8d:37:4c:84:
+                    11:6e:7d:e2:37:01:67:ef:96:e5:d4:e6:3f:cf:70:
+                    23:d3:1e:cb:34:97:cb:02:07:5d:66:02:d4:0d:56:
+                    e0:10:54:07:2c:cf:80:c7:62:18:30:a3:4e:0a:12:
+                    54:95:a4:35:db:8c:fa:1f:65:c5:f5:0b:6d:63:1e:
+                    f3:ac:3e:86:16:1f:98:e0:e6:be:1c:c2:12:10:08:
+                    0a:c6:ac:55:0e:b9:ad:b7:33:31:f0:83:32:80:0e:
+                    8d:42:e3:7e:00:b6:46:71:85:2b:75:d6:42:8d:b9:
+                    e0:7c:cc:ac:b2:dc:94:81:f9:6d:3d:94:9a:1c:ca:
+                    ea:e0:bb:b8:46:d9:0b:f4:39:46:2a:ac:83:8b:3b:
+                    ec:bf:1b:9d:6c:7c:3f:3f:7a:dc:0d:4a:82:ce:87:
+                    51:7d:74:f2:d5:80:38:0a:8c:ad:2f:4b:e3:0f:25:
+                    16:82:b4:be:fa:77:82:2d:3e:0d:0c:67:a2:4b:14:
+                    71:01:52:0d:31:4b:0c:84:71:b0:5a:12:4c:c9:20:
+                    f6:b9:cc:14:5d:47:ec:c0:e0:18:23:f8:7e:d5:b3:
+                    b9:1f:fa:34:dd:1e:11:63:f8:f5:40:91:92:aa:82:
+                    7c:5f
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                A6:CB:3C:07:1E:C3:F1:1F:3B:B4:49:96:08:45:3D:BE:7C:C5:F6:6C
+            X509v3 Authority Key Identifier: 
+                keyid:00:FC:46:F0:0B:A5:21:CD:56:2A:E6:A7:A5:25:D3:DF:32:16:C0:26
+                DirName:/CN=HenryPump
+                serial:03:96:48:02:9A:1E:96:D0:B3:B5:A0:60:FC:97:87:F9:28:0C:B7:72
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        97:2b:c7:0a:1b:29:39:a0:e6:96:82:b8:55:12:d2:11:7a:7a:
+        bc:0f:60:c8:d8:ce:d0:63:f2:93:46:77:1d:cd:04:55:4f:26:
+        a3:1a:70:65:c5:4b:ca:32:4f:2e:ea:df:de:d4:0f:4b:a5:04:
+        9e:a0:1a:ab:ca:bf:30:34:ae:1c:32:1c:74:f3:f2:c0:4c:62:
+        4f:62:2d:fe:0f:7c:ea:da:59:65:61:5e:f5:36:0b:b3:70:07:
+        f2:df:1e:07:98:d8:87:7a:d5:82:4b:d3:ad:f3:5d:e5:93:91:
+        3e:07:e3:82:72:4a:4e:2d:6b:b8:9f:75:b1:c1:ae:6d:7a:ab:
+        4b:6c:26:d5:e9:c5:59:36:d2:e9:60:18:6e:8c:2b:fd:e7:d5:
+        9e:46:fe:44:0b:b2:f5:3d:d3:50:f4:59:e6:b8:d1:84:5e:a3:
+        98:e3:ca:ee:07:ec:c1:02:16:49:6b:11:13:98:b9:0a:f2:d1:
+        6a:5f:ff:56:9d:be:6a:22:ad:9b:e3:34:56:81:43:56:a2:79:
+        66:86:57:3c:1c:b7:c4:33:df:34:01:08:d5:dd:fd:f6:38:02:
+        3f:72:1d:f8:fa:44:1b:e8:85:0c:20:af:4a:0a:b3:a5:2e:d3:
+        d0:a0:58:01:14:91:04:15:f3:7d:44:49:eb:df:b4:50:aa:fa:
+        0b:73:91:10
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

VPN/Nico Client/nico.key

@@ -0,0 +1,30 @@
+-----BEGIN ENCRYPTED PRIVATE KEY-----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+-----END ENCRYPTED PRIVATE KEY-----

VPN/ca.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----
+MIIDRTCCAi2gAwIBAgIUA5ZIApoeltCztaBg/JeH+SgMt3IwDQYJKoZIhvcNAQEL
+BQAwFDESMBAGA1UEAwwJSGVucnlQdW1wMB4XDTI0MDUwMTIxMTQyN1oXDTM0MDQy
+OTIxMTQyN1owFDESMBAGA1UEAwwJSGVucnlQdW1wMIIBIjANBgkqhkiG9w0BAQEF
+AAOCAQ8AMIIBCgKCAQEApICJTFUY1xF+0nHwU0CKSiobSSqHkp5grGRY+FU5l2Np
+Qvg++6aeHomBCfwe/4/EBVX0aGXjwuwYLWSij+1uHDINnCmXhd5hX01weFYhDJS2
+UR0Xlccg7OTp2o4ljd/d0ozellf7tDP8qoKfFVLEHSvGghnSmj0O6fM6El3OiU51
+pOxOruekvExavt8Mj+XbxAxq5R21qClJo50+gXLyHHFeVMqcqJLnz01wqNO0rXDe
+5h5Xlk9mQAKfW1Rg9RAFDIgydFf2EwfmtYJV59gSeOJwEgg5Wx5vrXf/xHxZZsnp
+jY8YPnII3PsYFjRww6uYhwKBeYI8tnpwisY2BfFpHQIDAQABo4GOMIGLMAwGA1Ud
+EwQFMAMBAf8wHQYDVR0OBBYEFAD8RvALpSHNVirmp6Ul098yFsAmME8GA1UdIwRI
+MEaAFAD8RvALpSHNVirmp6Ul098yFsAmoRikFjAUMRIwEAYDVQQDDAlIZW5yeVB1
+bXCCFAOWSAKaHpbQs7WgYPyXh/koDLdyMAsGA1UdDwQEAwIBBjANBgkqhkiG9w0B
+AQsFAAOCAQEACo0KLqvUjTNNj+76Jr092BAFlfkPnFRPis46s1fenyAMNSevOPvl
+3yukYfI2FNpVErLFHRbo24Z0kmciHIuGprTC21HjxjMjRbDji818Vt62OR+wg9kg
+uQ2U0E7yxNW9tPtMf+wGdc9eBakVqganMYlcRK9AgfTLMV+QHQZDzD+3COLcfz8q
+AxigwJfChgVGQUkrOPlYtRrdfjz8oZB9DHaIfbsfsXV1kGc4CBcyvcWUYgPBAH9V
+qNKcsepsNFARX8P3NCgsBID2bwc9kc/ArfeF+UZbTTVbwRVvZTa/WAQzY9Y9xrhY
+HQw9r6oDUXeEIPyTwtYjfby2T5kPHevetg==
+-----END CERTIFICATE-----

VPN/crl.pem

@@ -0,0 +1,12 @@
+-----BEGIN X509 CRL-----
+MIIBsjCBmwIBATANBgkqhkiG9w0BAQsFADAUMRIwEAYDVQQDDAlIZW5yeVB1bXAX
+DTI0MDUwMTIxMzExNVoXDTI0MTAyODIxMzExNVqgUzBRME8GA1UdIwRIMEaAFAD8
+RvALpSHNVirmp6Ul098yFsAmoRikFjAUMRIwEAYDVQQDDAlIZW5yeVB1bXCCFAOW
+SAKaHpbQs7WgYPyXh/koDLdyMA0GCSqGSIb3DQEBCwUAA4IBAQBEbpx0hCQl0T+C
+OnmaZK7hNJpWma9gtBUpNTxiIppc2bc5iFP0kU+hJGHoFZUz2hGOmyXu2vxfFVau
+QbaxRlioC5FElRxWy4bjRPbEuzyCOi+YsdJF5QW0nWx8K0GBX6DNnU0Dj/RTD50R
+cxrdW4zT4UriL5v+pFw0OvtnhGGjkl1/VbEhrFCM6bsqm6zGpCLW4wK+3hxVZ31t
+MdF4t8KgkiPjLqMDF/N8CKvvx+WmKH7ouH5q26wRJqXPZM3/qDpOR0PZy22LIL/5
+5/RJjhoOm+hSw0adWGqPbd+LRR6VUWmmb1UOKItB5MIvqWCqgdoKLFpotU+XR9H+
+4AsiBi0x
+-----END X509 CRL-----

VPN/ig502ovpnserver.crt

@@ -0,0 +1,87 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            59:6d:e6:6b:2b:ea:d1:ae:0d:33:25:cc:85:d4:33:1a
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=HenryPump
+        Validity
+            Not Before: May  1 21:20:27 2024 GMT
+            Not After : Aug  4 21:20:27 2026 GMT
+        Subject: CN=ig502ovpnserver
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:9d:60:e1:0c:8f:cf:12:c9:9d:61:cd:2f:c4:68:
+                    4a:71:03:23:8b:f8:d7:7f:53:fb:d3:e2:7d:bd:07:
+                    ed:45:3e:1c:14:fd:40:35:72:0d:b2:c6:43:32:57:
+                    f9:cb:99:bb:7f:16:95:56:dd:c9:7a:3c:6b:c2:7a:
+                    24:c1:ad:0b:b0:05:ed:ca:06:56:76:8a:5c:cc:cd:
+                    f5:13:f7:e1:c4:ab:e7:87:6e:b3:86:7d:78:cb:da:
+                    3a:fc:64:bb:74:9d:12:f9:88:c1:d0:63:16:32:d1:
+                    97:4a:af:7c:15:e7:3b:5e:ec:97:16:f3:dd:a1:9c:
+                    74:5d:44:69:09:ec:8e:86:77:45:f9:4e:2b:60:de:
+                    c5:cb:e3:d4:81:10:39:84:74:84:8e:bc:a9:dc:dc:
+                    20:20:08:5f:c6:5e:97:b9:10:f5:cd:51:b8:12:83:
+                    63:19:f4:d1:b5:60:ee:63:6c:04:e8:e3:a1:1b:77:
+                    25:16:e9:ab:68:eb:d0:ab:ef:d6:af:b4:b0:be:e6:
+                    5f:68:a4:5c:00:72:63:1a:b5:17:e2:76:72:b6:ba:
+                    cd:c3:ad:69:16:c7:44:3d:54:f8:19:c4:a8:35:a3:
+                    e4:47:eb:c0:56:06:33:8b:b9:41:11:87:1b:2c:35:
+                    b3:8b:fe:63:bc:f2:06:2b:41:eb:53:93:fc:81:8d:
+                    6f:1d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                58:DC:7D:51:44:B8:5D:0C:E2:4B:02:C2:D2:8A:49:88:70:FF:7D:65
+            X509v3 Authority Key Identifier: 
+                keyid:00:FC:46:F0:0B:A5:21:CD:56:2A:E6:A7:A5:25:D3:DF:32:16:C0:26
+                DirName:/CN=HenryPump
+                serial:03:96:48:02:9A:1E:96:D0:B3:B5:A0:60:FC:97:87:F9:28:0C:B7:72
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication
+            X509v3 Key Usage: 
+                Digital Signature, Key Encipherment
+            X509v3 Subject Alternative Name: 
+                DNS:ig502ovpnserver
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        59:17:3a:5b:ff:f1:4b:b6:9a:d2:a0:87:00:f4:8e:cf:b2:99:
+        30:a5:51:0d:12:27:87:77:e3:59:8b:e3:4b:c7:a6:eb:ef:2f:
+        84:30:04:c2:f0:ff:14:d0:f5:a8:0e:85:7f:58:e3:e6:e5:87:
+        94:6d:0a:19:98:5c:d7:ee:4c:38:94:8d:c4:2f:d9:09:36:fb:
+        25:3e:1a:62:de:40:ba:c4:6c:cd:3f:13:97:1f:cd:34:6c:d6:
+        a0:3d:09:72:5a:c7:68:eb:6b:85:4d:30:6a:17:d5:24:3c:43:
+        7a:3a:c2:f6:63:e0:c6:70:17:ec:8c:80:1f:c3:7c:e6:b6:26:
+        dc:53:7f:26:f9:b6:7a:6e:51:ad:f6:b1:03:29:18:c1:7d:fc:
+        2b:18:8e:b4:7c:81:8b:ba:9f:89:54:05:3f:02:45:3f:98:31:
+        95:8c:cb:78:e6:35:f0:7b:db:02:4b:fa:50:bf:0c:70:23:e9:
+        19:f9:70:10:70:79:2c:5a:09:6c:5c:9b:10:cf:63:80:5d:04:
+        8a:8a:41:4d:f4:47:e6:dd:4c:68:3c:0e:5e:25:1a:c1:20:6a:
+        6a:41:e7:e1:f1:90:a2:0c:9c:52:92:49:e3:bd:ee:b9:11:c8:
+        ba:19:13:e5:bc:9c:4a:2b:8f:7d:db:93:28:7d:7b:72:d8:aa:
+        5c:53:b4:a1
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

VPN/ig502ovpnserver.key

@@ -0,0 +1,30 @@
+-----BEGIN ENCRYPTED PRIVATE KEY-----
+MIIFJDBWBgkqhkiG9w0BBQ0wSTAxBgkqhkiG9w0BBQwwJAQQCC4EKtiuElrV2YIM
+D0B13QICCAAwDAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIERj5nZ3J7YgEggTI
+F7e5yoHh9BQxXVUmkLT+XqoDc+gu32MlQizfV2Ct+VJw37cdAIUfEa4aDmds+z51
+knJ1dJV4nxttL6DTLq4tPMbi/lwrLZh/uc2NkXc92LUf7X85GfGTZsNr7hBl+3V6
+JeMXK0DhDEpmmUEfHVw8rydYeCqc4/+WGm1ztRoZLD8Zkh6Xk/82k7B4Hza7a6RF
+aCgHADtkjAtwKC41eBQXhZG/8zwo7KcN1tYjgJNJEevFD/H4rbociiffL1t5DrcY
++f7ZdBYj/kk5d2xA04ouOE1ND6DnGC7SWHI/NnMk76KF3RVNBL7wyjW02AjjkIrB
+t0K0kkeLOA5Kagka0oO0F3z7MSxkOGYOSuV4lRrsyQKTimeJCPlMId5fOfXJv0tx
+JSeCUlSoE8YTtM8u/xE69Axv61hSi30KRZ3qUJDy0ITFJ/CkkGMRaS2OmYHKhMQl
+XKcadqRT4Yg95aoOFA53Y6QcQOwJMVqWUIAjLyk6HAE81ee6Cr0n1k6aLXDOrWkP
+n2FstZZ06wi933klcY/9w45YXCs07hUtbZRXZGjUFR/vQuM82LmpyVwTS/cpLkw+
+Fjev9ZbItCZYzyDjlv3/B9yq3L8lw4PVU+Dsq1e+BTZ4fTnTIEi+Tj138wWmT0xj
+kp6oxilK+bSXwFEFqFnDdnpvJclV4hc6wHZd9JVb8Te2ozWtRHJwQ+Ss4HhcvTFu
+ac7r1M7lnjGjQU1Rs8zCbdxFcKQU9RGRNy4sHnWcsECFlGzwkB3S1CRGpPNc01Cd
+ASkS1hoB9htKBfw/gu34JlIL+B8/6tgqSFPGIWcR4JVReJEdmg3DRI9UkBwdGTKC
+LI+E9s4fUdary+dSFZh+lNpp716tJFp2VL2/WlQEffea907UiEGlH1AAlSYf1UjP
+03oWCRDWQBtUdMBv+WdELmM/ZZ+Pg42cnJ+h3XJaoz04cQcagTz82qIRGtlLVKZU
+8eR7TM5pbA/WGtdl6z5NvgzBGGg4+onUHXVGjL+0XsH0t+3vm+7CMzHkoVNJQS6e
+xoQh2MUOEJmA1wKkeaGb8E1ciILcRZ6PQVoon4LrCWk1kuxdhxoy6b1ktFPAzGhR
+yEczeNUt/7TjCDuLaL34ldBTTpFLRcYvIlP4G41iVZL4joWxfVilzcrdZiCfPCx9
+jno8EffbDh1n7LD3ZYpSF3VIFwJY6wwNw+/Hyp0ZETiJ8UtGSlWFfHSRblwmIlbL
+XYtUwfBEFFNkzqRWDFLaIpqKq2Xc042aavWDoVFAJ+/h8QI+sPVTwXyvIIwWzP1k
+hIR0NDafFUA+HE/V5dr9yUkTz4D+QbX2Jh4WVbWFXgSG5gxW6yg7SHaOwWq0ZEAh
+RrhTV7xMBr/JAeRdUB76v2rd7HN2leljXbkAWmlXpvc4zezpaCxoNr6a8B55cBEo
+3CPjzObjn3T7Yx/XvlNpewy8ZDQ6Xwl7G8hKiO+IAJvrrngOBTY0rAgXgojuXpR6
+R1xW1OjFqL+e5xxAgaQrMElr6LhN4OWoFwsgyMfcpX0vKqSA0ofyU304Zg+7ETwH
+/DhIiAC3+kwCpHvnfuJ4TpYC8ga8dXhI4Hne+ZpxLsSEHyYoC4N2BHYt8++IPPHf
+wJcKq8CBAitftLhjCMkyL5vtEx3m79T/
+-----END ENCRYPTED PRIVATE KEY-----