From d78eb48cdaabff7035e88e6c22ba6848329c0787 Mon Sep 17 00:00:00 2001 From: Patrick McDonagh Date: Wed, 22 Jun 2016 11:57:10 -0500 Subject: [PATCH] POCONSOLE-51 forces HTTPS/SSL using CACert --- sails/config/local.js | 10 +-- sails/config/ssl/hplumberjack.crt | 35 ++++++++ sails/config/ssl/hplumberjack.csr | 29 +++++++ sails/config/ssl/hplumberjack.key | 51 +++++++++++ sails/config/ssl/root.txt | 140 ++++++++++++++++++++++++++++++ 5 files changed, 260 insertions(+), 5 deletions(-) create mode 100644 sails/config/ssl/hplumberjack.crt create mode 100644 sails/config/ssl/hplumberjack.csr create mode 100644 sails/config/ssl/hplumberjack.key create mode 100644 sails/config/ssl/root.txt diff --git a/sails/config/local.js b/sails/config/local.js index d64c3b1..3f81afa 100644 --- a/sails/config/local.js +++ b/sails/config/local.js @@ -38,11 +38,11 @@ module.exports = { * `config/ssl` and dumped your certificate/key files there: * ***************************************************************************/ - // ssl: { - // ca: require('fs').readFileSync(__dirname + './ssl/my_apps_ssl_gd_bundle.crt'), - // key: require('fs').readFileSync(__dirname + './ssl/my_apps_ssl.key'), - // cert: require('fs').readFileSync(__dirname + './ssl/my_apps_ssl.crt') - // }, + ssl: { + ca: require('fs').readFileSync(__dirname + '/ssl/hplumberjack.crt'), + key: require('fs').readFileSync(__dirname + '/ssl/hplumberjack.key'), + cert: require('fs').readFileSync(__dirname + '/ssl/hplumberjack.crt') + }, /*************************************************************************** * The `port` setting determines which TCP port your app will be * diff --git a/sails/config/ssl/hplumberjack.crt b/sails/config/ssl/hplumberjack.crt new file mode 100644 index 0000000..dab823d --- /dev/null +++ b/sails/config/ssl/hplumberjack.crt @@ -0,0 +1,35 @@ +-----BEGIN CERTIFICATE----- +MIIGCzCCA/OgAwIBAgIDEiQRMA0GCSqGSIb3DQEBCwUAMHkxEDAOBgNVBAoTB1Jv +b3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEiMCAGA1UEAxMZ +Q0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJARYSc3VwcG9y +dEBjYWNlcnQub3JnMB4XDTE2MDYyMjE1MTIzN1oXDTE2MTIxOTE1MTIzN1owGjEY +MBYGA1UEAxQPKi5wb2NvbnNvbGUubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A +MIICCgKCAgEAzvH39fVCMHrUXZbZi+DsWW9ZiRT11OuZt2meH8FvErdTZ9yXGj2Z +orCbx9IaoqZMd+azeHV79QW4Wm1X7UMmAcELQZrWL6W+VjuJJuCh8J7UOJ/qqMcb +HsbplFkJX2oEkbSXnZueycp2c5Najl8LcxtnFtUF1D9g+PrQu0fAiA96Kv3KHRyJ +ELmtO9C5MWSdMiCwePVz3vRMEjitV5B8R7lFLn4LdvNfBO6NxZhQ0/0ttKDAg2Rf +83a8TGWJUJyVrfwYoBNnIx8XIcLCjZ8UGjUiABo3pXTkTo6RssHOKtQWuUfbiyQD +w8ZOw+zztnvgsNQnUZC4NNm/JL4SjZXlayC+O5GIauCt+n8nC5UtPvJEMev/hpoX +xismFlUzSfn5lshzoMUIhA6uxRvAxPItDvGKxRTpOoAGTHsw8RCzsWCL31utj6IC +sOcybEGf3lYOfs8/XfRK0rOTay5TVTz9ACc2ly7VbJmusrWKnZzWfbotQJ5PSpjC +AQl0pbg7tPXHDzDwUl1cqxeXYKYSLLErqRx1yLuDUvbey8q9A4Y4iGZ/zkofIuX1 +9zhDY+DbZURXD6IXzL5ezHroQnnpO8EF0+BOeqNpdyaoiFNgr/xUfldK87sCiNs3 +gYf9F+2iKEt1T5GmeAL6tTb+zeqhQPDbTSqSdTum8+4ZF7Ct78azpdcCAwEAAaOB ++jCB9zAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIDqDA0BgNVHSUELTArBggr +BgEFBQcDAgYIKwYBBQUHAwEGCWCGSAGG+EIEAQYKKwYBBAGCNwoDAzAzBggrBgEF +BQcBAQQnMCUwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmNhY2VydC5vcmcvMDEG +A1UdHwQqMCgwJqAkoCKGIGh0dHA6Ly9jcmwuY2FjZXJ0Lm9yZy9yZXZva2UuY3Js +MDkGA1UdEQQyMDCCDyoucG9jb25zb2xlLm5ldKAdBggrBgEFBQcIBaARDA8qLnBv +Y29uc29sZS5uZXQwDQYJKoZIhvcNAQELBQADggIBAG0LIzoRZJzYou0Jdh7Wp50r +lv7iUKYdgFFZjx9UOAEPuc2G4fMvz0t0jOs6WNsTrU9bdRn6cNo+guPxHVguX9db +Tck7oihUnIbxsudXPyIZOjXwaEx14DEhNgEQzlpnBnfiDlI3duFOJxdhU2kTMqVn +0jkzcU8lgsnjhO+rBuXF5KNDpnPT4VWrH9DkGCRETJrz/wpo/Fqa+OKg2IcAqd94 +lci3P0P02Qcy2Yfei6Wd+Z8gZ0+10Ebg8JkmPq7wag/CIry6FOiDcWLDZuqBQaFv +DjJJyHwMsMOBUEe9CZkrNBwroozweu4a+P5WXhooIvxsX56xxb9mgsrKQ4jsa51E +UvFWbFjrDEulNkTlbJJp5rOM8iTqVjFojy4HhQWJLr9ktYHC/PUgwJTq2CrxaYJn +I69WUhKzqOfRmUVXeS8vBBrRIm/JccGThtwFqnZVljS/HdPO5w6uVXFJjoQUe2L6 +R5O+t50WGMjBWa/UOjOgE1BMoTulCKbz91QtWmXJEyKWc0eRcan9W557WcAwQRVW +iHLsP+faO5D9vVBlDslhZcBkJAA/gE/cz//uDRHi1G/OcdaiYw4sIRa0uW/L4bY/ +CglMtYfamYbtaG+7dRzw5PB4JeS8ZAGLRIQYGM0yDhwsA58SjzulpQFPrt8r+URF +BW67nK0NQS6BaT45qVap +-----END CERTIFICATE----- diff --git a/sails/config/ssl/hplumberjack.csr b/sails/config/ssl/hplumberjack.csr new file mode 100644 index 0000000..120a976 --- /dev/null +++ b/sails/config/ssl/hplumberjack.csr @@ -0,0 +1,29 @@ +-----BEGIN CERTIFICATE REQUEST----- +MIIE/zCCAucCAQAwgZ4xCzAJBgNVBAYTAlVTMQ4wDAYDVQQIDAVUZXhhczEPMA0G +A1UEBwwGRGFsbGFzMRMwEQYDVQQKDApIZW5yeSBQdW1wMRYwFAYDVQQLDA1IUCBM +dW1iZXJKYWNrMRgwFgYDVQQDDA8qLnBvY29uc29sZS5uZXQxJzAlBgkqhkiG9w0B +CQEWGHBtY2RvbmFnaEBoZW5yeS1wdW1wLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD +ggIPADCCAgoCggIBAM7x9/X1QjB61F2W2Yvg7FlvWYkU9dTrmbdpnh/BbxK3U2fc +lxo9maKwm8fSGqKmTHfms3h1e/UFuFptV+1DJgHBC0Ga1i+lvlY7iSbgofCe1Dif +6qjHGx7G6ZRZCV9qBJG0l52bnsnKdnOTWo5fC3MbZxbVBdQ/YPj60LtHwIgPeir9 +yh0ciRC5rTvQuTFknTIgsHj1c970TBI4rVeQfEe5RS5+C3bzXwTujcWYUNP9LbSg +wINkX/N2vExliVCcla38GKATZyMfFyHCwo2fFBo1IgAaN6V05E6OkbLBzirUFrlH +24skA8PGTsPs87Z74LDUJ1GQuDTZvyS+Eo2V5WsgvjuRiGrgrfp/JwuVLT7yRDHr +/4aaF8YrJhZVM0n5+ZbIc6DFCIQOrsUbwMTyLQ7xisUU6TqABkx7MPEQs7Fgi99b +rY+iArDnMmxBn95WDn7PP130StKzk2suU1U8/QAnNpcu1WyZrrK1ip2c1n26LUCe +T0qYwgEJdKW4O7T1xw8w8FJdXKsXl2CmEiyxK6kcdci7g1L23svKvQOGOIhmf85K +HyLl9fc4Q2Pg22VEVw+iF8y+Xsx66EJ56TvBBdPgTnqjaXcmqIhTYK/8VH5XSvO7 +AojbN4GH/RftoihLdU+RpngC+rU2/s3qoUDw200qknU7pvPuGRewre/Gs6XXAgMB +AAGgGzAZBgkqhkiG9w0BCQIxDAwKSGVucnkgUHVtcDANBgkqhkiG9w0BAQsFAAOC +AgEArKzCTHfz23psFBQ/BexPuFHySZBKFelJIEdlTUc4v4QQ/6wrcCB355k2DxcZ +kt8YMq6RC16guoaoerjoJBYN+gwT1xDFZuyLaKVVbhJGrfY475BWOgPV6Ac1tTca +RcubWC4f+fGVuIkPGYhtlOqqEcMi+99tgoHvJpJnlIF6Vpk+fjj6xLzPn1VgmEi5 +J161MpJbzHqldjhpgUsLoylxlTMLBWF72nULt+3GkMQqaM+Yh0pezdJcIJPB14pz +rpcpLodlwRAUfxFEP5iY3Pdrac1UzESj0O3mXlr9JkuhN0KoTBliSgNypdJ9jjE7 +inV7fZtYgLZP/LBTbuNi457f73b1Lr5u0WXxpdrim1MStRY60qhJ33fiaOQ3jyte +H605T6Gxc2pr3QtGcDqMPXL2NQ2mVHDTVO20JBP+r0HJk/6JDb5O2lW5c3yyy5fE +nrbXMVaBSWrpIxVauLccgu94mE0wcsU8FNpK3kJ7wDVpqIFDOHYfrkRjSzl36jF7 +wW586Mjsn0BDb2yFHxNuTWNxcb2VkwpsSWt5CWegk+/UNaggw5FXtyGa+6YM9um4 +dG7+2zGtjSsAM8XGco2Z1jMEl4wJjMmU/VFVtVhP9VTc+HjLnXV1OAZemSItI0Pn +QXIMvVmXykEfnIuSiZ7zmjO8wV0nNTEdFVmPrvKTZVgensA= +-----END CERTIFICATE REQUEST----- diff --git a/sails/config/ssl/hplumberjack.key b/sails/config/ssl/hplumberjack.key new file mode 100644 index 0000000..95bb851 --- /dev/null +++ b/sails/config/ssl/hplumberjack.key @@ -0,0 +1,51 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIJKAIBAAKCAgEAzvH39fVCMHrUXZbZi+DsWW9ZiRT11OuZt2meH8FvErdTZ9yX +Gj2ZorCbx9IaoqZMd+azeHV79QW4Wm1X7UMmAcELQZrWL6W+VjuJJuCh8J7UOJ/q +qMcbHsbplFkJX2oEkbSXnZueycp2c5Najl8LcxtnFtUF1D9g+PrQu0fAiA96Kv3K +HRyJELmtO9C5MWSdMiCwePVz3vRMEjitV5B8R7lFLn4LdvNfBO6NxZhQ0/0ttKDA +g2Rf83a8TGWJUJyVrfwYoBNnIx8XIcLCjZ8UGjUiABo3pXTkTo6RssHOKtQWuUfb +iyQDw8ZOw+zztnvgsNQnUZC4NNm/JL4SjZXlayC+O5GIauCt+n8nC5UtPvJEMev/ +hpoXxismFlUzSfn5lshzoMUIhA6uxRvAxPItDvGKxRTpOoAGTHsw8RCzsWCL31ut +j6ICsOcybEGf3lYOfs8/XfRK0rOTay5TVTz9ACc2ly7VbJmusrWKnZzWfbotQJ5P +SpjCAQl0pbg7tPXHDzDwUl1cqxeXYKYSLLErqRx1yLuDUvbey8q9A4Y4iGZ/zkof +IuX19zhDY+DbZURXD6IXzL5ezHroQnnpO8EF0+BOeqNpdyaoiFNgr/xUfldK87sC +iNs3gYf9F+2iKEt1T5GmeAL6tTb+zeqhQPDbTSqSdTum8+4ZF7Ct78azpdcCAwEA +AQKCAgB3DRB++JcZWLAvHwcLx1twn/Q8PkimMtt9fk8vKZKCi+B5kZeDywhFZaBY +tfAIve6j055PoBatgJrrupeosMZ+n9Wf6jlps8npxdpC+VtwF48y/Bx89/4MGJZr +d0VDFLSINgI68znIEKdQGecwnFDz6UHHCsmNruBUm8XU15RVMcIwVUwerznS215j +WNIRLjaYjeG31EzSaGwS13QxObelc1nvQyfJSHzTU4FPuS5WpgHTNd9KN0ZTw2zT +7l2ueEZLjwmDnWXp+IrQK0DNRETGRubGdE6q6rIk1zPOSFwYm2ZvNH2CcDeSOtU5 +NWmHA4DheUsdS0oNbW7e7lGyDheqHoo3yMChPBNtpBNHbJW/Pu5IQ05caxe2GB2Q +IXUEAxjtNWmf9Rcp4Bo4bR9Iz5eKGnfxANBAurzubEEWZqGVtY/H19V2IcpEYgBM +Hdqef6XtSEnV++yOdkz1E/6TK3ZMcolMnWLqOIul1LmSwSEwbTt0JER8PZS1h2A2 +pvAJe2GbVa/WiKjFcawyk48Nmj0aMuMtJYQ7txKUGMOky6zKYM7xGY3CCC7KgjHX +P0yvvFbVKF+b8bH9YfzBvCb+ErN7LJ2S8c07OXyvweQy9yDQAA4ITgQjrWMf/CmE +iTk+ZZ3u+7MMy+K6m7EC8Nsc/75G/gGaMWZ0I/K0sklUjAS4oQKCAQEA60AtJkhi +lJ7riwAaB+p2ZhD+q3BZNrOZbDOrmwUU6Ga+2kgb3sYxFCgEYoV6HH4I+q53zsA+ +TIP64joXl08vcUAAkGCngojph0JLu/Vy74FWwkaGU7IFlUg6v2zuLnBZdfteQgAN +S7bAWM56rnDwiLrahcCKppATkBE4iydfMDx/Y3uizbDCDuZgEDXCZFIhA/8IOBlC +VgF442mtym5rSmtPURWhdVNbDlMLc8R2VAKEN2flRJS1oCuCi7kHEQmIaD5t/Sat +/2x3wloxm1S8wudvZ+c2ErGsUHK2wCj+GnBSm4dsSiwK3Io6EmMNxgbGT5KQEOKF +KgJr517qoJUuyQKCAQEA4TKrqENYl4hwo6ty4+9qciuE8JTUGi3+0aK2kM63DrAw +LAyZ8aG0a+EnCoZIVHq93ffAQJjnDNXC1ahMGz3GSiM+D823CSIy9IOe3wE1RKcB +vVESJV3cUoNxSSLJJW+Fs0wYPx52pw4wQhg6KYL4HuIx8y5CV6/V5f2oCdITEdq/ +clahn+QXPooNeYISbXpmRHROrfcZsOoRVFJjJE4uPK1XcAHc4DDYGZz0DBmyWcNO +10haaNd/yeWdR/018FvOGJo+jBqwqc8FX1zpgQJQroRMCNHzpM0sgGpI7pXA8HGH +y0oGEPIlqJWx/ly3LKejqDghHeOPw1l3sxraXLdfnwKCAQEAwLtnQgHzocdBOjPv +H6UbMyuhOVtl+8bQXzFF2k8jffMPUU3aZ30AIH9YeE7aaBVpzda6GQyu/YjzNfxZ +74DUYXgJ/j7xfaQljsblvSut6kKQjcGxs0gaAt+WIdZgnHM3F83Ev1XDjtA+bYNc +RyYIKjzLYuEHtsY7AMDbDkZHWgF2bE6SZun1Urey5BTnGcGfguKiHTO0gTnbjJS7 +6Sjlhaa86LVL/g84flfS/hlqyBD3uVzJHJKo6nw7C7We8Hpa4uyit8/EpYp74yJ5 +mcSmkReC0iE+z7n4bkBNMMlkxMxZIUqlkW7bxysHwKCeXCqYtgBhPzQV3QD23iuJ +Fd6i4QKCAQBTvXXbgf+FibTpB64XWEXq4ofytkUQ3x2scqcUvemQSq//EUiFc64V +l4ne/gQTdfj4e1JAMxtnyG1E6eozDwuXMfe4BLUVbmQoTHFdV6OpPbkF3wmyX264 +OCx+F7NYelnrTFaP0hIpGLuVOFEYcp01TsNoPEFrPfV6KpK75CQ3NXKPX+uF+1kx +ZkCQeG/FyggRWHaRdhtVkBSVmHVJYNEMuyCSg/7QVxlknNqbTUrm2huNLliAN/JK +71lHFb9i+6BtwZ2Ul7At1M+YoIIr+OJrosJrXTcOh0UPE3a/UWyHfJAUZhhPYNvk +DpY7kdqDfmr6+LRH2wDwkWpTbZ7Zb07dAoIBADNq4zjlVnGMLQzJ8w2J5n9dp4vA +p0wEdfkXEvRVNuDFcB9T58lwZNm1bDopnzO3Q4+Sa2/VKCnc/JzAqUy+QozTCS+h +25US/tTtaeRaINupjHMIf4g4HkCt5NjRf/9+XIJYNpeZfd+QORtdR1Zb0v3vdpbz +UDoAzmcJt2kUleGFYnrLgD9a7YujNWunzHa8Dk0MdhsQ+l2KtmfBoZtx+7kX+tR1 +W5Guhd8GhHBsO2gwMeB7h4GMvGMEO5MdN1QTIEKt3mSR3Wuxy/fY7oAAH/YApmmF +7lrgZihLf4KU9Fcd088iJ5fCwD6ENXjM9Q1xf4xRSwZjYhEyfBpD0bidrh4= +-----END RSA PRIVATE KEY----- diff --git a/sails/config/ssl/root.txt b/sails/config/ssl/root.txt new file mode 100644 index 0000000..96bb2cd --- /dev/null +++ b/sails/config/ssl/root.txt @@ -0,0 +1,140 @@ +Certificate: + Data: + Version: 3 (0x2) + Serial Number: 0 (0x0) + Signature Algorithm: md5WithRSAEncryption + Issuer: O=Root CA, OU=http://www.cacert.org, CN=CA Cert Signing Authority/emailAddress=support@cacert.org + Validity + Not Before: Mar 30 12:29:49 2003 GMT + Not After : Mar 29 12:29:49 2033 GMT + Subject: O=Root CA, OU=http://www.cacert.org, CN=CA Cert Signing Authority/emailAddress=support@cacert.org + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public Key: (4096 bit) + Modulus (4096 bit): + 00:ce:22:c0:e2:46:7d:ec:36:28:07:50:96:f2:a0: + 33:40:8c:4b:f1:3b:66:3f:31:e5:6b:02:36:db:d6: + 7c:f6:f1:88:8f:4e:77:36:05:41:95:f9:09:f0:12: + cf:46:86:73:60:b7:6e:7e:e8:c0:58:64:ae:cd:b0: + ad:45:17:0c:63:fa:67:0a:e8:d6:d2:bf:3e:e7:98: + c4:f0:4c:fa:e0:03:bb:35:5d:6c:21:de:9e:20:d9: + ba:cd:66:32:37:72:fa:f7:08:f5:c7:cd:58:c9:8e: + e7:0e:5e:ea:3e:fe:1c:a1:14:0a:15:6c:86:84:5b: + 64:66:2a:7a:a9:4b:53:79:f5:88:a2:7b:ee:2f:0a: + 61:2b:8d:b2:7e:4d:56:a5:13:ec:ea:da:92:9e:ac: + 44:41:1e:58:60:65:05:66:f8:c0:44:bd:cb:94:f7: + 42:7e:0b:f7:65:68:98:51:05:f0:f3:05:91:04:1d: + 1b:17:82:ec:c8:57:bb:c3:6b:7a:88:f1:b0:72:cc: + 25:5b:20:91:ec:16:02:12:8f:32:e9:17:18:48:d0: + c7:05:2e:02:30:42:b8:25:9c:05:6b:3f:aa:3a:a7: + eb:53:48:f7:e8:d2:b6:07:98:dc:1b:c6:34:7f:7f: + c9:1c:82:7a:05:58:2b:08:5b:f3:38:a2:ab:17:5d: + 66:c9:98:d7:9e:10:8b:a2:d2:dd:74:9a:f7:71:0c: + 72:60:df:cd:6f:98:33:9d:96:34:76:3e:24:7a:92: + b0:0e:95:1e:6f:e6:a0:45:38:47:aa:d7:41:ed:4a: + b7:12:f6:d7:1b:83:8a:0f:2e:d8:09:b6:59:d7:aa: + 04:ff:d2:93:7d:68:2e:dd:8b:4b:ab:58:ba:2f:8d: + ea:95:a7:a0:c3:54:89:a5:fb:db:8b:51:22:9d:b2: + c3:be:11:be:2c:91:86:8b:96:78:ad:20:d3:8a:2f: + 1a:3f:c6:d0:51:65:87:21:b1:19:01:65:7f:45:1c: + 87:f5:7c:d0:41:4c:4f:29:98:21:fd:33:1f:75:0c: + 04:51:fa:19:77:db:d4:14:1c:ee:81:c3:1d:f5:98: + b7:69:06:91:22:dd:00:50:cc:81:31:ac:12:07:7b: + 38:da:68:5b:e6:2b:d4:7e:c9:5f:ad:e8:eb:72:4c: + f3:01:e5:4b:20:bf:9a:a6:57:ca:91:00:01:8b:a1: + 75:21:37:b5:63:0d:67:3e:46:4f:70:20:67:ce:c5: + d6:59:db:02:e0:f0:d2:cb:cd:ba:62:b7:90:41:e8: + dd:20:e4:29:bc:64:29:42:c8:22:dc:78:9a:ff:43: + ec:98:1b:09:51:4b:5a:5a:c2:71:f1:c4:cb:73:a9: + e5:a1:0b + Exponent: 65537 (0x10001) + X509v3 extensions: + X509v3 Subject Key Identifier: + 16:B5:32:1B:D4:C7:F3:E0:E6:8E:F3:BD:D2:B0:3A:EE:B2:39:18:D1 + X509v3 Authority Key Identifier: + keyid:16:B5:32:1B:D4:C7:F3:E0:E6:8E:F3:BD:D2:B0:3A:EE:B2:39:18:D1 + DirName:/O=Root CA/OU=http://www.cacert.org/CN=CA Cert Signing Authority/emailAddress=support@cacert.org + serial:00 + + X509v3 Basic Constraints: critical + CA:TRUE + X509v3 CRL Distribution Points: + URI:https://www.cacert.org/revoke.crl + + Netscape CA Revocation Url: + https://www.cacert.org/revoke.crl + Netscape CA Policy Url: + http://www.cacert.org/index.php?id=10 + Netscape Comment: + To get your own certificate for FREE head over to http://www.cacert.org + Signature Algorithm: md5WithRSAEncryption + 28:c7:ee:9c:82:02:ba:5c:80:12:ca:35:0a:1d:81:6f:89:6a: + 99:cc:f2:68:0f:7f:a7:e1:8d:58:95:3e:bd:f2:06:c3:90:5a: + ac:b5:60:f6:99:43:01:a3:88:70:9c:9d:62:9d:a4:87:af:67: + 58:0d:30:36:3b:e6:ad:48:d3:cb:74:02:86:71:3e:e2:2b:03: + 68:f1:34:62:40:46:3b:53:ea:28:f4:ac:fb:66:95:53:8a:4d: + 5d:fd:3b:d9:60:d7:ca:79:69:3b:b1:65:92:a6:c6:81:82:5c: + 9c:cd:eb:4d:01:8a:a5:df:11:55:aa:15:ca:1f:37:c0:82:98: + 70:61:db:6a:7c:96:a3:8e:2e:54:3e:4f:21:a9:90:ef:dc:82: + bf:dc:e8:45:ad:4d:90:73:08:3c:94:65:b0:04:99:76:7f:e2: + bc:c2:6a:15:aa:97:04:37:24:d8:1e:94:4e:6d:0e:51:be:d6: + c4:8f:ca:96:6d:f7:43:df:e8:30:65:27:3b:7b:bb:43:43:63: + c4:43:f7:b2:ec:68:cc:e1:19:8e:22:fb:98:e1:7b:5a:3e:01: + 37:3b:8b:08:b0:a2:f3:95:4e:1a:cb:9b:cd:9a:b1:db:b2:70: + f0:2d:4a:db:d8:b0:e3:6f:45:48:33:12:ff:fe:3c:32:2a:54: + f7:c4:f7:8a:f0:88:23:c2:47:fe:64:7a:71:c0:d1:1e:a6:63: + b0:07:7e:a4:2f:d3:01:8f:dc:9f:2b:b6:c6:08:a9:0f:93:48: + 25:fc:12:fd:9f:42:dc:f3:c4:3e:f6:57:b0:d7:dd:69:d1:06: + 77:34:0a:4b:d2:ca:a0:ff:1c:c6:8c:c9:16:be:c4:cc:32:37: + 68:73:5f:08:fb:51:f7:49:53:36:05:0a:95:02:4c:f2:79:1a: + 10:f6:d8:3a:75:9c:f3:1d:f1:a2:0d:70:67:86:1b:b3:16:f5: + 2f:e5:a4:eb:79:86:f9:3d:0b:c2:73:0b:a5:99:ac:6f:fc:67: + b8:e5:2f:0b:a6:18:24:8d:7b:d1:48:35:29:18:40:ac:93:60: + e1:96:86:50:b4:7a:59:d8:8f:21:0b:9f:cf:82:91:c6:3b:bf: + 6b:dc:07:91:b9:97:56:23:aa:b6:6c:94:c6:48:06:3c:e4:ce: + 4e:aa:e4:f6:2f:09:dc:53:6f:2e:fc:74:eb:3a:63:99:c2:a6: + ac:89:bc:a7:b2:44:a0:0d:8a:10:e3:6c:f2:24:cb:fa:9b:9f: + 70:47:2e:de:14:8b:d4:b2:20:09:96:a2:64:f1:24:1c:dc:a1: + 35:9c:15:b2:d4:bc:55:2e:7d:06:f5:9c:0e:55:f4:5a:d6:93: + da:76:ad:25:73:4c:c5:43 +-----BEGIN CERTIFICATE----- +MIIHPTCCBSWgAwIBAgIBADANBgkqhkiG9w0BAQQFADB5MRAwDgYDVQQKEwdSb290 +IENBMR4wHAYDVQQLExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNB +IENlcnQgU2lnbmluZyBBdXRob3JpdHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRA +Y2FjZXJ0Lm9yZzAeFw0wMzAzMzAxMjI5NDlaFw0zMzAzMjkxMjI5NDlaMHkxEDAO +BgNVBAoTB1Jvb3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEi +MCAGA1UEAxMZQ0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJ +ARYSc3VwcG9ydEBjYWNlcnQub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC +CgKCAgEAziLA4kZ97DYoB1CW8qAzQIxL8TtmPzHlawI229Z89vGIj053NgVBlfkJ +8BLPRoZzYLdufujAWGSuzbCtRRcMY/pnCujW0r8+55jE8Ez64AO7NV1sId6eINm6 +zWYyN3L69wj1x81YyY7nDl7qPv4coRQKFWyGhFtkZip6qUtTefWIonvuLwphK42y +fk1WpRPs6tqSnqxEQR5YYGUFZvjARL3LlPdCfgv3ZWiYUQXw8wWRBB0bF4LsyFe7 +w2t6iPGwcswlWyCR7BYCEo8y6RcYSNDHBS4CMEK4JZwFaz+qOqfrU0j36NK2B5jc +G8Y0f3/JHIJ6BVgrCFvzOKKrF11myZjXnhCLotLddJr3cQxyYN/Nb5gznZY0dj4k +epKwDpUeb+agRThHqtdB7Uq3EvbXG4OKDy7YCbZZ16oE/9KTfWgu3YtLq1i6L43q +laegw1SJpfvbi1EinbLDvhG+LJGGi5Z4rSDTii8aP8bQUWWHIbEZAWV/RRyH9XzQ +QUxPKZgh/TMfdQwEUfoZd9vUFBzugcMd9Zi3aQaRIt0AUMyBMawSB3s42mhb5ivU +fslfrejrckzzAeVLIL+aplfKkQABi6F1ITe1Yw1nPkZPcCBnzsXWWdsC4PDSy826 +YreQQejdIOQpvGQpQsgi3Hia/0PsmBsJUUtaWsJx8cTLc6nloQsCAwEAAaOCAc4w +ggHKMB0GA1UdDgQWBBQWtTIb1Mfz4OaO873SsDrusjkY0TCBowYDVR0jBIGbMIGY +gBQWtTIb1Mfz4OaO873SsDrusjkY0aF9pHsweTEQMA4GA1UEChMHUm9vdCBDQTEe +MBwGA1UECxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0 +IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2Vy +dC5vcmeCAQAwDwYDVR0TAQH/BAUwAwEB/zAyBgNVHR8EKzApMCegJaAjhiFodHRw +czovL3d3dy5jYWNlcnQub3JnL3Jldm9rZS5jcmwwMAYJYIZIAYb4QgEEBCMWIWh0 +dHBzOi8vd3d3LmNhY2VydC5vcmcvcmV2b2tlLmNybDA0BglghkgBhvhCAQgEJxYl +aHR0cDovL3d3dy5jYWNlcnQub3JnL2luZGV4LnBocD9pZD0xMDBWBglghkgBhvhC +AQ0ESRZHVG8gZ2V0IHlvdXIgb3duIGNlcnRpZmljYXRlIGZvciBGUkVFIGhlYWQg +b3ZlciB0byBodHRwOi8vd3d3LmNhY2VydC5vcmcwDQYJKoZIhvcNAQEEBQADggIB +ACjH7pyCArpcgBLKNQodgW+JapnM8mgPf6fhjViVPr3yBsOQWqy1YPaZQwGjiHCc +nWKdpIevZ1gNMDY75q1I08t0AoZxPuIrA2jxNGJARjtT6ij0rPtmlVOKTV39O9lg +18p5aTuxZZKmxoGCXJzN600BiqXfEVWqFcofN8CCmHBh22p8lqOOLlQ+TyGpkO/c +gr/c6EWtTZBzCDyUZbAEmXZ/4rzCahWqlwQ3JNgelE5tDlG+1sSPypZt90Pf6DBl +Jzt7u0NDY8RD97LsaMzhGY4i+5jhe1o+ATc7iwiwovOVThrLm82asduycPAtStvY +sONvRUgzEv/+PDIqVPfE94rwiCPCR/5kenHA0R6mY7AHfqQv0wGP3J8rtsYIqQ+T +SCX8Ev2fQtzzxD72V7DX3WnRBnc0CkvSyqD/HMaMyRa+xMwyN2hzXwj7UfdJUzYF +CpUCTPJ5GhD22Dp1nPMd8aINcGeGG7MW9S/lpOt5hvk9C8JzC6WZrG/8Z7jlLwum +GCSNe9FINSkYQKyTYOGWhlC0elnYjyELn8+CkcY7v2vcB5G5l1YjqrZslMZIBjzk +zk6q5PYvCdxTby78dOs6Y5nCpqyJvKeyRKANihDjbPIky/qbn3BHLt4Ui9SyIAmW +omTxJBzcoTWcFbLUvFUufQb1nA5V9FrWk9p2rSVzTMVD +-----END CERTIFICATE-----