Index: trunk/server/fedora/config/etc/httpd/vhosts.d/ailg-bdf.conf
===================================================================
--- trunk/server/fedora/config/etc/httpd/vhosts.d/ailg-bdf.conf (revision 2257)
+++ (revision )
@@ -1,34 +1,0 @@
-# do not trailing-slash DocumentRoot
-
-
- ServerName ailg-bdf.mit.edu
- ServerAlias ailg-bdf
- DocumentRoot /afs/athena.mit.edu/org/a/ailg/web_scripts/bdf
- Alias /~ailg /afs/athena.mit.edu/org/a/ailg/web_scripts
- SuExecUserGroup ailg ailg
- Include conf.d/vhosts-common.conf
-
-
-
-
- ServerName ailg-bdf.mit.edu
- ServerAlias ailg-bdf
- DocumentRoot /afs/athena.mit.edu/org/a/ailg/web_scripts/bdf
- Alias /~ailg /afs/athena.mit.edu/org/a/ailg/web_scripts
- SuExecUserGroup ailg ailg
- Include conf.d/vhosts-common-ssl.conf
- SSLCertificateFile /etc/pki/tls/certs/ailg-bdf.pem
- SSLCertificateKeyFile /etc/pki/tls/private/scripts.key
-
-
- ServerName ailg-bdf.mit.edu
- ServerAlias ailg-bdf
- DocumentRoot /afs/athena.mit.edu/org/a/ailg/web_scripts/bdf
- Alias /~ailg /afs/athena.mit.edu/org/a/ailg/web_scripts
- SuExecUserGroup ailg ailg
- Include conf.d/vhosts-common-ssl.conf
- Include conf.d/vhosts-common-ssl-cert.conf
- SSLCertificateFile /etc/pki/tls/certs/ailg-bdf.pem
- SSLCertificateKeyFile /etc/pki/tls/private/scripts.key
-
-
Index: trunk/server/fedora/config/etc/httpd/vhosts.d/nudelta.conf
===================================================================
--- trunk/server/fedora/config/etc/httpd/vhosts.d/nudelta.conf (revision 2257)
+++ trunk/server/fedora/config/etc/httpd/vhosts.d/nudelta.conf (revision 2258)
@@ -19,4 +19,5 @@
Include conf.d/vhosts-common-ssl.conf
SSLCertificateFile /etc/pki/tls/certs/nudelta.pem
+ SSLCertificateChainFile /etc/pki/tls/certs/nudelta.pem
SSLCertificateKeyFile /etc/pki/tls/private/scripts.key
@@ -30,4 +31,5 @@
Include conf.d/vhosts-common-ssl-cert.conf
SSLCertificateFile /etc/pki/tls/certs/nudelta.pem
+ SSLCertificateChainFile /etc/pki/tls/certs/nudelta.pem
SSLCertificateKeyFile /etc/pki/tls/private/scripts.key
Index: trunk/server/fedora/config/etc/pki/tls/certs/ailg-bdf.pem
===================================================================
--- trunk/server/fedora/config/etc/pki/tls/certs/ailg-bdf.pem (revision 2257)
+++ (revision )
@@ -1,110 +1,0 @@
-From mitcert@MIT.EDU Tue Jul 5 15:06:58 2011
-Date: Tue, 5 Jul 2011 15:06:56 -0400
-From: "mitcert@MIT.EDU"
-To: Alexander Chernyakhovsky
-Subject: [help.mit.edu #1657448] certificate signing request for ailg-bdf.mit.edu
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number:
- 38:1f:e2:c8:5f:e3:26:1b:3f:fc:95:4a:c6:24:51:4d
- Signature Algorithm: sha1WithRSAEncryption
- Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority
- Validity
- Not Before: Jul 4 16:00:00 2011 GMT
- Not After : Jul 4 16:00:00 2012 GMT
- Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=ailg-bdf.mit.edu/emailAddress=scripts@mit.edu
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- RSA Public Key: (4096 bit)
- Modulus (4096 bit):
- 00:bf:a3:f2:7b:98:cc:16:a7:57:e6:92:85:34:56:
- f1:e3:62:83:9e:6a:4f:35:9d:f0:cf:89:87:73:e3:
- 93:f7:b7:01:57:38:6e:e9:fc:59:4d:24:eb:a7:17:
- 47:ca:2c:51:0e:45:c8:b7:68:c9:0e:32:26:e0:91:
- d3:06:5c:8c:7c:0e:6c:99:0c:b2:46:05:0f:4d:f1:
- b0:c7:5e:35:06:62:fe:2a:d6:0f:1b:2c:b5:02:24:
- 4c:c3:06:71:ec:94:ca:1d:aa:af:7e:b9:2d:c0:55:
- 4b:cc:bc:51:3d:76:68:5b:d3:ed:35:d0:03:ba:1b:
- 6c:f3:a0:d8:d3:dc:6b:44:b0:5e:01:51:d3:02:cc:
- 4a:da:52:12:de:35:31:69:16:5a:48:8b:0f:ce:ad:
- 4d:e4:d5:8b:11:36:7f:87:1c:fd:84:da:43:2e:87:
- 2f:41:70:ac:ad:df:54:c0:ed:f6:21:51:fa:c5:06:
- f0:1b:eb:a1:b0:bf:4d:1c:42:34:8a:d5:6f:f7:25:
- 66:73:8f:60:c4:d7:8d:33:91:f4:46:3a:97:09:59:
- 01:ff:c3:64:94:40:48:30:68:f0:6e:03:26:74:c2:
- a1:b3:d7:cb:94:fc:6e:53:8a:2a:9e:fd:b1:4f:c4:
- 74:56:25:63:1f:aa:bd:95:25:78:9c:45:46:1b:0c:
- 21:71:eb:84:94:d0:b2:f1:da:52:f6:d1:7f:63:1d:
- 08:23:52:5f:c2:f9:4d:ac:a4:44:e5:9a:54:70:fc:
- c9:fc:d4:d4:b7:1d:75:95:00:e3:bf:3e:4c:f3:43:
- c3:96:c7:09:2a:29:45:12:d2:31:d6:79:4c:8a:e7:
- 54:27:22:c6:80:ae:87:23:56:f1:8d:49:9b:c8:fa:
- ed:33:5b:5f:56:76:c8:0f:7e:85:14:69:c4:48:31:
- 07:39:a5:34:81:f2:6b:15:50:22:fb:bb:2c:ad:4b:
- 84:ea:55:64:f7:de:56:9d:d0:b6:d0:7d:1e:1b:51:
- 50:37:44:94:e6:c4:15:eb:45:31:f1:b3:ec:0f:b3:
- a9:0c:f8:1c:47:c7:51:00:05:ef:ee:b0:3d:9f:7e:
- 07:a7:38:e8:83:4c:3d:db:34:b6:24:0c:90:57:c0:
- f9:d0:64:14:8a:93:47:9b:41:f5:a3:14:1d:9e:18:
- 5d:d5:d8:66:af:f5:f3:c8:2f:bc:a7:02:a7:ef:dc:
- f0:0e:c7:47:8d:2e:d6:a8:62:42:93:5b:7c:f5:35:
- f8:31:10:7b:38:d4:40:24:68:81:13:27:cb:fb:76:
- 0e:d1:99:14:d8:d5:eb:f7:69:64:8f:af:8f:82:bb:
- 24:29:f9:d4:29:1d:ce:e6:14:ba:4c:8b:09:ff:46:
- ce:8b:6d
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Basic Constraints:
- CA:FALSE
- Netscape Cert Type:
- SSL Client, SSL Server, S/MIME
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, E-mail Protection, TLS Web Client Authentication
- X509v3 Key Usage:
- Digital Signature, Non Repudiation, Key Encipherment
- X509v3 Subject Key Identifier:
- CB:11:B7:01:5F:86:55:4F:45:5E:AB:27:69:BE:E1:3C:89:7A:55:62
- X509v3 CRL Distribution Points:
- URI:http://ca.mit.edu/ca/mitserver.crl
-
- Signature Algorithm: sha1WithRSAEncryption
- 66:12:b1:ad:fd:d3:45:d4:46:83:38:1e:4c:6c:32:23:29:f9:
- a5:19:1d:07:e2:2a:b3:a3:3e:14:4e:cc:db:21:2c:b6:c6:36:
- d9:a8:a5:3a:da:3a:99:f4:f9:f8:ce:f6:93:e1:af:d9:dd:8d:
- ef:dc:db:48:37:2c:75:97:b9:20:16:80:2b:7f:3a:73:95:b4:
- d2:c7:34:05:83:91:73:70:47:4a:59:99:bc:54:b5:e4:ec:08:
- a7:cf:35:cf:18:eb:16:ad:9d:39:d4:9c:6a:24:87:16:af:e3:
- 10:65:e4:0e:94:91:2e:d8:50:ed:b6:ce:9e:d1:9a:5d:e9:a1:
- d0:d9
------BEGIN CERTIFICATE-----
-MIIFAzCCBGygAwIBAgIQOB/iyF/jJhs//JVKxiRRTTANBgkqhkiG9w0BAQUFADB7
-MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEuMCwGA1UEChMl
-TWFzc2FjaHVzZXR0cyBJbnN0aXR1dGUgb2YgVGVjaG5vbG9neTEkMCIGA1UECxMb
-TUlUIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTExMDcwNDE2MDAwMFoXDTEy
-MDcwNDE2MDAwMFowgdIxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNl
-dHRzMRIwEAYDVQQHEwlDYW1icmlkZ2UxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg
-SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxLDAqBgNVBAsTI3NjcmlwdHMubWl0LmVk
-dSB3ZWIgaG9zdGluZyBzZXJ2aWNlMRkwFwYDVQQDExBhaWxnLWJkZi5taXQuZWR1
-MR4wHAYJKoZIhvcNAQkBFg9zY3JpcHRzQG1pdC5lZHUwggIiMA0GCSqGSIb3DQEB
-AQUAA4ICDwAwggIKAoICAQC/o/J7mMwWp1fmkoU0VvHjYoOeak81nfDPiYdz45P3
-twFXOG7p/FlNJOunF0fKLFEORci3aMkOMibgkdMGXIx8DmyZDLJGBQ9N8bDHXjUG
-Yv4q1g8bLLUCJEzDBnHslModqq9+uS3AVUvMvFE9dmhb0+010AO6G2zzoNjT3GtE
-sF4BUdMCzEraUhLeNTFpFlpIiw/OrU3k1YsRNn+HHP2E2kMuhy9BcKyt31TA7fYh
-UfrFBvAb66Gwv00cQjSK1W/3JWZzj2DE140zkfRGOpcJWQH/w2SUQEgwaPBuAyZ0
-wqGz18uU/G5Tiiqe/bFPxHRWJWMfqr2VJXicRUYbDCFx64SU0LLx2lL20X9jHQgj
-Ul/C+U2spETlmlRw/Mn81NS3HXWVAOO/PkzzQ8OWxwkqKUUS0jHWeUyK51QnIsaA
-rocjVvGNSZvI+u0zW19WdsgPfoUUacRIMQc5pTSB8msVUCL7uyytS4TqVWT33lad
-0LbQfR4bUVA3RJTmxBXrRTHxs+wPs6kM+BxHx1EABe/usD2ffgenOOiDTD3bNLYk
-DJBXwPnQZBSKk0ebQfWjFB2eGF3V2Gav9fPIL7ynAqfv3PAOx0eNLtaoYkKTW3z1
-NfgxEHs41EAkaIETJ8v7dg7RmRTY1ev3aWSPr4+CuyQp+dQpHc7mFLpMiwn/Rs6L
-bQIDAQABo4GrMIGoMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgXgMCcGA1Ud
-JQQgMB4GCCsGAQUFBwMBBggrBgEFBQcDBAYIKwYBBQUHAwIwCwYDVR0PBAQDAgXg
-MB0GA1UdDgQWBBTLEbcBX4ZVT0VeqydpvuE8iXpVYjAzBgNVHR8ELDAqMCigJqAk
-hiJodHRwOi8vY2EubWl0LmVkdS9jYS9taXRzZXJ2ZXIuY3JsMA0GCSqGSIb3DQEB
-BQUAA4GBAGYSsa3900XURoM4HkxsMiMp+aUZHQfiKrOjPhROzNshLLbGNtmopTra
-Opn0+fjO9pPhr9ndje/c20g3LHWXuSAWgCt/OnOVtNLHNAWDkXNwR0pZmbxUteTs
-CKfPNc8Y6xatnTnUnGokhxav4xBl5A6UkS7YUO22zp7Rml3podDZ
------END CERTIFICATE-----
-
Index: trunk/server/fedora/config/etc/pki/tls/certs/nudelta.pem
===================================================================
--- trunk/server/fedora/config/etc/pki/tls/certs/nudelta.pem (revision 2257)
+++ trunk/server/fedora/config/etc/pki/tls/certs/nudelta.pem (revision 2258)
@@ -1,110 +1,90 @@
-From mitcert@MIT.EDU Tue Jul 5 15:03:20 2011
-Date: Tue, 5 Jul 2011 15:03:18 -0400
-From: "mitcert@MIT.EDU"
-To: Alexander Chernyakhovsky
-Subject: [help.mit.edu #1657447] certificate signing request for nudelta.mit.edu
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number:
- c1:d4:4f:e5:ff:e6:a4:6c:a6:0b:24:d7:88:0c:cc:75
- Signature Algorithm: sha1WithRSAEncryption
- Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority
- Validity
- Not Before: Jul 4 16:00:00 2011 GMT
- Not After : Jul 4 16:00:00 2012 GMT
- Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=scripts.mit.edu web hosting service, CN=nudelta.mit.edu/emailAddress=scripts@mit.edu
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- RSA Public Key: (4096 bit)
- Modulus (4096 bit):
- 00:bf:a3:f2:7b:98:cc:16:a7:57:e6:92:85:34:56:
- f1:e3:62:83:9e:6a:4f:35:9d:f0:cf:89:87:73:e3:
- 93:f7:b7:01:57:38:6e:e9:fc:59:4d:24:eb:a7:17:
- 47:ca:2c:51:0e:45:c8:b7:68:c9:0e:32:26:e0:91:
- d3:06:5c:8c:7c:0e:6c:99:0c:b2:46:05:0f:4d:f1:
- b0:c7:5e:35:06:62:fe:2a:d6:0f:1b:2c:b5:02:24:
- 4c:c3:06:71:ec:94:ca:1d:aa:af:7e:b9:2d:c0:55:
- 4b:cc:bc:51:3d:76:68:5b:d3:ed:35:d0:03:ba:1b:
- 6c:f3:a0:d8:d3:dc:6b:44:b0:5e:01:51:d3:02:cc:
- 4a:da:52:12:de:35:31:69:16:5a:48:8b:0f:ce:ad:
- 4d:e4:d5:8b:11:36:7f:87:1c:fd:84:da:43:2e:87:
- 2f:41:70:ac:ad:df:54:c0:ed:f6:21:51:fa:c5:06:
- f0:1b:eb:a1:b0:bf:4d:1c:42:34:8a:d5:6f:f7:25:
- 66:73:8f:60:c4:d7:8d:33:91:f4:46:3a:97:09:59:
- 01:ff:c3:64:94:40:48:30:68:f0:6e:03:26:74:c2:
- a1:b3:d7:cb:94:fc:6e:53:8a:2a:9e:fd:b1:4f:c4:
- 74:56:25:63:1f:aa:bd:95:25:78:9c:45:46:1b:0c:
- 21:71:eb:84:94:d0:b2:f1:da:52:f6:d1:7f:63:1d:
- 08:23:52:5f:c2:f9:4d:ac:a4:44:e5:9a:54:70:fc:
- c9:fc:d4:d4:b7:1d:75:95:00:e3:bf:3e:4c:f3:43:
- c3:96:c7:09:2a:29:45:12:d2:31:d6:79:4c:8a:e7:
- 54:27:22:c6:80:ae:87:23:56:f1:8d:49:9b:c8:fa:
- ed:33:5b:5f:56:76:c8:0f:7e:85:14:69:c4:48:31:
- 07:39:a5:34:81:f2:6b:15:50:22:fb:bb:2c:ad:4b:
- 84:ea:55:64:f7:de:56:9d:d0:b6:d0:7d:1e:1b:51:
- 50:37:44:94:e6:c4:15:eb:45:31:f1:b3:ec:0f:b3:
- a9:0c:f8:1c:47:c7:51:00:05:ef:ee:b0:3d:9f:7e:
- 07:a7:38:e8:83:4c:3d:db:34:b6:24:0c:90:57:c0:
- f9:d0:64:14:8a:93:47:9b:41:f5:a3:14:1d:9e:18:
- 5d:d5:d8:66:af:f5:f3:c8:2f:bc:a7:02:a7:ef:dc:
- f0:0e:c7:47:8d:2e:d6:a8:62:42:93:5b:7c:f5:35:
- f8:31:10:7b:38:d4:40:24:68:81:13:27:cb:fb:76:
- 0e:d1:99:14:d8:d5:eb:f7:69:64:8f:af:8f:82:bb:
- 24:29:f9:d4:29:1d:ce:e6:14:ba:4c:8b:09:ff:46:
- ce:8b:6d
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Basic Constraints:
- CA:FALSE
- Netscape Cert Type:
- SSL Client, SSL Server, S/MIME
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, E-mail Protection, TLS Web Client Authentication
- X509v3 Key Usage:
- Digital Signature, Non Repudiation, Key Encipherment
- X509v3 Subject Key Identifier:
- CB:11:B7:01:5F:86:55:4F:45:5E:AB:27:69:BE:E1:3C:89:7A:55:62
- X509v3 CRL Distribution Points:
- URI:http://ca.mit.edu/ca/mitserver.crl
-
- Signature Algorithm: sha1WithRSAEncryption
- 75:39:e0:d6:c2:fa:64:75:b2:e2:51:05:d5:3a:f0:2b:30:65:
- 24:53:03:4f:eb:e5:be:e4:73:43:7e:d7:5a:37:92:32:25:ad:
- 66:7b:8a:c7:b3:89:24:f5:98:e8:0a:b2:69:cf:8f:d4:29:37:
- 1c:55:93:90:5f:b8:d7:9f:69:99:cf:7a:43:45:e1:14:de:f9:
- 23:40:6b:99:82:fc:1c:cd:46:a8:8c:e8:85:33:d5:f5:5b:79:
- 79:d8:7d:ca:e9:d6:18:de:a6:2c:8a:00:6c:92:f7:6c:0a:67:
- 09:a7:d8:ef:26:62:5d:09:78:dc:05:6e:53:c2:f8:70:cc:08:
- 0e:39
-----BEGIN CERTIFICATE-----
-MIIFAzCCBGygAwIBAgIRAMHUT+X/5qRspgsk14gMzHUwDQYJKoZIhvcNAQEFBQAw
-ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT
-JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT
-G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xMTA3MDQxNjAwMDBaFw0x
-MjA3MDQxNjAwMDBaMIHRMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz
-ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz
-IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MSwwKgYDVQQLEyNzY3JpcHRzLm1pdC5l
-ZHUgd2ViIGhvc3Rpbmcgc2VydmljZTEYMBYGA1UEAxMPbnVkZWx0YS5taXQuZWR1
-MR4wHAYJKoZIhvcNAQkBFg9zY3JpcHRzQG1pdC5lZHUwggIiMA0GCSqGSIb3DQEB
-AQUAA4ICDwAwggIKAoICAQC/o/J7mMwWp1fmkoU0VvHjYoOeak81nfDPiYdz45P3
-twFXOG7p/FlNJOunF0fKLFEORci3aMkOMibgkdMGXIx8DmyZDLJGBQ9N8bDHXjUG
-Yv4q1g8bLLUCJEzDBnHslModqq9+uS3AVUvMvFE9dmhb0+010AO6G2zzoNjT3GtE
-sF4BUdMCzEraUhLeNTFpFlpIiw/OrU3k1YsRNn+HHP2E2kMuhy9BcKyt31TA7fYh
-UfrFBvAb66Gwv00cQjSK1W/3JWZzj2DE140zkfRGOpcJWQH/w2SUQEgwaPBuAyZ0
-wqGz18uU/G5Tiiqe/bFPxHRWJWMfqr2VJXicRUYbDCFx64SU0LLx2lL20X9jHQgj
-Ul/C+U2spETlmlRw/Mn81NS3HXWVAOO/PkzzQ8OWxwkqKUUS0jHWeUyK51QnIsaA
-rocjVvGNSZvI+u0zW19WdsgPfoUUacRIMQc5pTSB8msVUCL7uyytS4TqVWT33lad
-0LbQfR4bUVA3RJTmxBXrRTHxs+wPs6kM+BxHx1EABe/usD2ffgenOOiDTD3bNLYk
-DJBXwPnQZBSKk0ebQfWjFB2eGF3V2Gav9fPIL7ynAqfv3PAOx0eNLtaoYkKTW3z1
-NfgxEHs41EAkaIETJ8v7dg7RmRTY1ev3aWSPr4+CuyQp+dQpHc7mFLpMiwn/Rs6L
-bQIDAQABo4GrMIGoMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgXgMCcGA1Ud
-JQQgMB4GCCsGAQUFBwMBBggrBgEFBQcDBAYIKwYBBQUHAwIwCwYDVR0PBAQDAgXg
-MB0GA1UdDgQWBBTLEbcBX4ZVT0VeqydpvuE8iXpVYjAzBgNVHR8ELDAqMCigJqAk
-hiJodHRwOi8vY2EubWl0LmVkdS9jYS9taXRzZXJ2ZXIuY3JsMA0GCSqGSIb3DQEB
-BQUAA4GBAHU54NbC+mR1suJRBdU68CswZSRTA0/r5b7kc0N+11o3kjIlrWZ7isez
-iST1mOgKsmnPj9QpNxxVk5BfuNefaZnPekNF4RTe+SNAa5mC/BzNRqiM6IUz1fVb
-eXnYfcrp1hjepiyKAGyS92wKZwmn2O8mYl0JeNwFblPC+HDMCA45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-----END CERTIFICATE-----
-
+-----BEGIN CERTIFICATE-----
+MIIENjCCAx6gAwIBAgIBATANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJTRTEU
+MBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4dGVybmFs
+IFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290
+MB4XDTAwMDUzMDEwNDgzOFoXDTIwMDUzMDEwNDgzOFowbzELMAkGA1UEBhMCU0Ux
+FDASBgNVBAoTC0FkZFRydXN0IEFCMSYwJAYDVQQLEx1BZGRUcnVzdCBFeHRlcm5h
+bCBUVFAgTmV0d29yazEiMCAGA1UEAxMZQWRkVHJ1c3QgRXh0ZXJuYWwgQ0EgUm9v
+dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALf3GjPm8gAELTngTlvt
+H7xsD821+iO2zt6bETOXpClMfZOfvUq8k+0DGuOPz+VtUFrWlymUWoCwSXrbLpX9
+uMq/NzgtHj6RQa1wVsfwTz/oMp50ysiQVOnGXw94nZpAPA6sYapeFI+eh6FqUNzX
+mk6vBbOmcZSccbNQYArHE504B4YCqOmoaSYYkKtMsE8jqzpPhNjfzp/haW+710LX
+a0Tkx63ubUFfclpxCDezeWWkWaCUN/cALw3CknLa0Dhy2xSoRcRdKn23tNbE7qzN
+E0S3ySvdQwAl+mG5aWpYIxG3pzOPVnVZ9c0p10a3CitlttNCbxWyuHv77+ldU9U0
+WicCAwEAAaOB3DCB2TAdBgNVHQ4EFgQUrb2YejS0Jvf6xCZU7wO94CTLVBowCwYD
+VR0PBAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wgZkGA1UdIwSBkTCBjoAUrb2YejS0
+Jvf6xCZU7wO94CTLVBqhc6RxMG8xCzAJBgNVBAYTAlNFMRQwEgYDVQQKEwtBZGRU
+cnVzdCBBQjEmMCQGA1UECxMdQWRkVHJ1c3QgRXh0ZXJuYWwgVFRQIE5ldHdvcmsx
+IjAgBgNVBAMTGUFkZFRydXN0IEV4dGVybmFsIENBIFJvb3SCAQEwDQYJKoZIhvcN
+AQEFBQADggEBALCb4IUlwtYj4g+WBpKdQZic2YR5gdkeWxQHIzZlj7DYd7usQWxH
+YINRsPkyPef89iYTx4AWpb9a/IfPeHmJIZriTAcKhjW88t5RxNKWt9x+Tu5w/Rw5
+6wwCURQtjr0W4MHfRnXnJK3s9EK0hZNwEGe6nQY1ShjTK3rMUUKhemPR5ruhxSvC
+Nr4TDea9Y355e6cJDUCrat2PisP29owaQgVR1EX1n6diIWgVIEM8med8vSTYqZEX
+c4g/VhsxOBi0cQ+azcgOno4uG+GMmIPLHzHxREzGBHNJdmAPx/i9F4BrLunMTA5a
+mnkPIAou1Z5jJh5VkpTYghdae9C8x49OhgQ=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----