1[Created by: ./generate-chains.py] 2 3Certificate chain with inhibitPolicyMapping:1 on the root, and an intermediate 4that uses policy mappings. Should pass, since policy mapping will be allowed on 5the intermediate. 6 7Certificate: 8 Data: 9 Version: 3 (0x2) 10 Serial Number: 11 71:75:aa:66:71:9f:a2:e4:f4:08:1c:39:12:b5:7f:3f:26:78:b9:b5 12 Signature Algorithm: sha256WithRSAEncryption 13 Issuer: CN=Intermediate 14 Validity 15 Not Before: Oct 5 12:00:00 2021 GMT 16 Not After : Oct 5 12:00:00 2022 GMT 17 Subject: CN=Target 18 Subject Public Key Info: 19 Public Key Algorithm: rsaEncryption 20 Public-Key: (2048 bit) 21 Modulus: 22 00:f3:c0:35:f0:bc:ce:63:f2:31:e5:ab:19:0b:db: 23 9b:39:de:84:ac:f6:91:cd:04:b2:7f:77:c3:66:af: 24 79:d4:63:5e:79:c6:12:9b:38:6c:9b:00:94:b3:c2: 25 f0:3e:21:d8:41:ba:3c:27:46:b3:35:0f:79:cc:ea: 26 7d:5e:01:da:55:4a:8d:19:09:fd:70:51:1a:68:f8: 27 64:ad:a5:a7:f9:bc:49:7f:49:55:17:c5:5b:7a:f8: 28 bb:78:56:66:16:86:6f:ec:aa:0f:d2:4d:60:57:22: 29 45:45:d0:3e:03:f3:29:a1:33:5f:b8:bf:0f:d8:ce: 30 ab:39:37:dc:73:a1:f4:4d:b9:77:71:8d:70:29:69: 31 56:07:8e:b1:c4:9f:a8:8f:8c:53:c6:18:4c:7d:91: 32 b6:9d:13:c6:29:db:27:ec:b9:3e:94:ba:5b:78:c4: 33 d3:e3:0f:a6:b1:f8:8b:db:09:e9:9d:fa:f1:90:23: 34 75:fa:f5:76:26:f0:18:c2:a3:12:de:57:e3:72:2e: 35 5e:2d:e3:55:2e:34:b6:5c:3f:fd:27:ac:48:61:44: 36 0e:50:27:85:7e:28:fb:74:a8:72:1a:d2:e2:bc:bc: 37 89:c3:6f:17:43:b4:1c:68:2f:41:12:37:51:5c:bc: 38 65:36:97:dc:6f:3e:23:14:07:e1:b4:be:e0:df:d9: 39 49:81 40 Exponent: 65537 (0x10001) 41 X509v3 extensions: 42 X509v3 Subject Key Identifier: 43 9E:36:84:92:68:F5:BC:1A:E1:90:AE:C5:29:A6:8E:0E:B7:BC:23:23 44 X509v3 Authority Key Identifier: 45 6E:12:E7:F3:47:71:41:A0:FC:BD:3C:54:9B:CF:55:B3:41:4E:D0:9F 46 Authority Information Access: 47 CA Issuers - URI:http://url-for-aia/Intermediate.cer 48 X509v3 CRL Distribution Points: 49 Full Name: 50 URI:http://url-for-crl/Intermediate.crl 51 X509v3 Key Usage: critical 52 Digital Signature, Key Encipherment 53 X509v3 Extended Key Usage: 54 TLS Web Server Authentication, TLS Web Client Authentication 55 X509v3 Certificate Policies: critical 56 Policy: 1.2.3.5 57 Signature Algorithm: sha256WithRSAEncryption 58 Signature Value: 59 97:1b:a5:b9:8b:bd:71:67:64:1c:50:59:2e:b3:ae:d6:1c:2a: 60 b4:0c:f2:c2:65:41:90:f7:34:f0:d3:5a:f0:a7:21:f7:9a:5e: 61 51:e2:ae:78:5c:ec:99:51:9c:72:47:9f:03:f4:59:ad:a2:86: 62 98:8a:4f:15:c8:27:f7:81:3a:e8:1f:ff:d6:f3:7e:84:20:27: 63 ac:54:48:4d:f6:ff:d9:3e:b0:6e:bf:bf:d1:5f:fe:7b:94:c9: 64 e6:3e:36:7a:91:97:02:dc:f1:d0:92:05:29:64:ec:eb:f2:9d: 65 69:33:41:b5:c2:01:cb:0a:7e:44:92:58:c4:d2:b8:96:8c:47: 66 96:e1:b3:d3:ac:94:66:0e:2e:ff:86:ef:1b:a7:05:5e:27:4e: 67 31:99:d5:65:48:79:c0:fb:22:64:63:c0:cc:11:e0:6c:c2:ba: 68 1b:58:b5:b1:c3:f8:f4:b8:8b:c6:a1:17:9e:57:cd:d4:ff:f8: 69 d4:30:5a:ce:df:d1:07:43:99:40:1d:c4:6f:78:d1:46:74:12: 70 f3:d9:32:f0:94:2d:f4:ab:34:1b:1d:7f:20:d1:85:f9:bd:cd: 71 0f:4c:31:58:25:63:24:33:28:dd:dc:81:94:5d:bc:99:b1:81: 72 8c:26:15:ae:b6:2c:cc:31:b2:b4:68:e7:73:1d:d1:07:cd:c0: 73 18:bc:65:c8 74-----BEGIN CERTIFICATE----- 75MIIDtTCCAp2gAwIBAgIUcXWqZnGfouT0CBw5ErV/PyZ4ubUwDQYJKoZIhvcNAQEL 76BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTIxMTAwNTEyMDAwMFoXDTIy 77MTAwNTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF 78AAOCAQ8AMIIBCgKCAQEA88A18LzOY/Ix5asZC9ubOd6ErPaRzQSyf3fDZq951GNe 79ecYSmzhsmwCUs8LwPiHYQbo8J0azNQ95zOp9XgHaVUqNGQn9cFEaaPhkraWn+bxJ 80f0lVF8Vbevi7eFZmFoZv7KoP0k1gVyJFRdA+A/MpoTNfuL8P2M6rOTfcc6H0Tbl3 81cY1wKWlWB46xxJ+oj4xTxhhMfZG2nRPGKdsn7Lk+lLpbeMTT4w+msfiL2wnpnfrx 82kCN1+vV2JvAYwqMS3lfjci5eLeNVLjS2XD/9J6xIYUQOUCeFfij7dKhyGtLivLyJ 83w28XQ7QcaC9BEjdRXLxlNpfcbz4jFAfhtL7g39lJgQIDAQABo4H+MIH7MB0GA1Ud 84DgQWBBSeNoSSaPW8GuGQrsUppo4Ot7wjIzAfBgNVHSMEGDAWgBRuEufzR3FBoPy9 85PFSbz1WzQU7QnzA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91 86cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0 87dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF 88oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEwYDVR0gAQH/BAkwBzAF 89BgMqAwUwDQYJKoZIhvcNAQELBQADggEBAJcbpbmLvXFnZBxQWS6zrtYcKrQM8sJl 90QZD3NPDTWvCnIfeaXlHirnhc7JlRnHJHnwP0Wa2ihpiKTxXIJ/eBOugf/9bzfoQg 91J6xUSE32/9k+sG6/v9Ff/nuUyeY+NnqRlwLc8dCSBSlk7OvynWkzQbXCAcsKfkSS 92WMTSuJaMR5bhs9OslGYOLv+G7xunBV4nTjGZ1WVIecD7ImRjwMwR4GzCuhtYtbHD 93+PS4i8ahF55XzdT/+NQwWs7f0QdDmUAdxG940UZ0EvPZMvCULfSrNBsdfyDRhfm9 94zQ9MMVglYyQzKN3cgZRdvJmxgYwmFa62LMwxsrRo53Md0QfNwBi8Zcg= 95-----END CERTIFICATE----- 96 97Certificate: 98 Data: 99 Version: 3 (0x2) 100 Serial Number: 101 1a:3b:ce:d1:26:69:e6:02:a2:2d:6a:b7:12:bc:51:e8:a3:d6:ee:5f 102 Signature Algorithm: sha256WithRSAEncryption 103 Issuer: CN=Root 104 Validity 105 Not Before: Oct 5 12:00:00 2021 GMT 106 Not After : Oct 5 12:00:00 2022 GMT 107 Subject: CN=Intermediate 108 Subject Public Key Info: 109 Public Key Algorithm: rsaEncryption 110 Public-Key: (2048 bit) 111 Modulus: 112 00:99:47:50:56:9f:bd:ac:ff:54:c8:d8:92:80:a1: 113 82:ff:be:01:07:69:e9:a2:e0:25:84:4c:c5:04:6b: 114 d3:82:c0:1b:d0:70:26:79:34:c5:07:4f:25:00:29: 115 62:d1:41:3c:ed:49:3b:11:d9:20:4d:f3:3c:0b:21: 116 be:46:4d:06:02:ab:fb:b1:89:cd:aa:f3:f3:2e:92: 117 51:d5:13:1d:2c:78:dd:81:db:d0:60:5b:e9:09:03: 118 f4:f4:33:e2:f8:16:3d:bf:53:8b:5b:57:02:8c:4b: 119 1c:2b:51:76:df:a5:7b:e2:47:07:ed:70:df:c3:02: 120 61:9b:46:e1:1b:3d:d1:de:e2:9b:e4:77:5b:fc:8a: 121 73:94:48:89:82:2b:4f:b1:3b:90:de:42:6c:b1:d7: 122 ee:bc:df:74:e4:a5:99:8c:81:7a:e9:ee:5d:60:53: 123 68:77:e5:b8:27:a8:18:7b:f6:9b:93:39:3f:8f:d9: 124 bf:50:65:65:5c:e8:52:fe:c3:63:34:b5:4b:ee:c7: 125 6a:5b:aa:36:4c:8d:05:e0:50:5d:af:e1:63:42:7b: 126 f7:82:24:f6:57:b6:5e:65:54:ed:02:0f:46:a3:08: 127 3b:28:fa:ca:69:c3:f4:7e:9d:25:3a:12:4e:65:6b: 128 a7:04:43:7b:a6:d2:5f:e2:7f:bb:d4:70:ba:c8:a9: 129 b4:97 130 Exponent: 65537 (0x10001) 131 X509v3 extensions: 132 X509v3 Subject Key Identifier: 133 6E:12:E7:F3:47:71:41:A0:FC:BD:3C:54:9B:CF:55:B3:41:4E:D0:9F 134 X509v3 Authority Key Identifier: 135 D7:A0:BF:D3:FD:2D:4F:A8:47:79:67:9F:0C:35:2D:C3:BE:49:E2:FD 136 Authority Information Access: 137 CA Issuers - URI:http://url-for-aia/Root.cer 138 X509v3 CRL Distribution Points: 139 Full Name: 140 URI:http://url-for-crl/Root.crl 141 X509v3 Key Usage: critical 142 Certificate Sign, CRL Sign 143 X509v3 Basic Constraints: critical 144 CA:TRUE 145 X509v3 Policy Constraints: critical 146 Require Explicit Policy:0 147 X509v3 Certificate Policies: critical 148 Policy: 1.2.3.4 149 X509v3 Policy Mappings: critical 150 1.2.3.4:1.2.3.5 151 Signature Algorithm: sha256WithRSAEncryption 152 Signature Value: 153 07:9b:f8:51:e0:5e:9c:5b:f7:64:f4:cd:c2:aa:8d:d0:83:fc: 154 ab:6a:8b:8f:8b:31:8c:79:05:ab:18:0c:31:5a:c4:22:31:3f: 155 07:54:16:ad:2f:d8:12:5a:24:25:1f:88:8f:f0:2c:4e:2b:6d: 156 d4:60:4f:95:15:fb:6a:6c:1e:40:40:4f:b1:59:bf:2c:2f:97: 157 c7:89:33:52:68:d0:93:7d:06:a2:9a:d7:1e:44:ab:19:44:29: 158 6d:02:63:a8:c2:0e:29:35:eb:11:04:57:cd:06:e9:0a:00:c2: 159 f1:a9:9d:4a:f8:09:d4:44:a7:32:89:5f:42:8c:cf:bc:5f:52: 160 c7:af:a6:92:8f:9c:c6:af:42:29:c7:de:db:e6:b5:40:ca:44: 161 9d:7b:43:32:f2:e4:3f:e3:33:a0:c0:13:cb:15:bc:84:27:9a: 162 ef:92:b7:7d:e5:c9:5a:39:c9:b1:58:90:4e:da:1f:3b:98:7a: 163 de:d5:c6:3d:60:73:9f:1e:9a:4d:3d:d6:7c:8a:b9:4e:2e:17: 164 e6:69:9e:a1:80:a0:b9:b9:97:cd:0f:d4:78:88:28:f6:09:a9: 165 45:b5:11:af:53:6d:84:4b:9c:09:42:eb:aa:7e:65:2a:be:8b: 166 31:66:f3:68:10:fc:e4:71:84:3d:09:c7:f3:7b:61:fb:8d:f7: 167 b3:70:99:97 168-----BEGIN CERTIFICATE----- 169MIIDwjCCAqqgAwIBAgIUGjvO0SZp5gKiLWq3ErxR6KPW7l8wDQYJKoZIhvcNAQEL 170BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw 171MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD 172ggEPADCCAQoCggEBAJlHUFafvaz/VMjYkoChgv++AQdp6aLgJYRMxQRr04LAG9Bw 173Jnk0xQdPJQApYtFBPO1JOxHZIE3zPAshvkZNBgKr+7GJzarz8y6SUdUTHSx43YHb 1740GBb6QkD9PQz4vgWPb9Ti1tXAoxLHCtRdt+le+JHB+1w38MCYZtG4Rs90d7im+R3 175W/yKc5RIiYIrT7E7kN5CbLHX7rzfdOSlmYyBeunuXWBTaHfluCeoGHv2m5M5P4/Z 176v1BlZVzoUv7DYzS1S+7HaluqNkyNBeBQXa/hY0J794Ik9le2XmVU7QIPRqMIOyj6 177ymnD9H6dJToSTmVrpwRDe6bSX+J/u9RwusiptJcCAwEAAaOCAQwwggEIMB0GA1Ud 178DgQWBBRuEufzR3FBoPy9PFSbz1WzQU7QnzAfBgNVHSMEGDAWgBTXoL/T/S1PqEd5 179Z58MNS3Dvkni/TA3BggrBgEFBQcBAQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91 180cmwtZm9yLWFpYS9Sb290LmNlcjAsBgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJs 181LWZvci1jcmwvUm9vdC5jcmwwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMB 182Af8wDwYDVR0kAQH/BAUwA4ABADATBgNVHSABAf8ECTAHMAUGAyoDBDAYBgNVHSEB 183Af8EDjAMMAoGAyoDBAYDKgMFMA0GCSqGSIb3DQEBCwUAA4IBAQAHm/hR4F6cW/dk 1849M3Cqo3Qg/yraouPizGMeQWrGAwxWsQiMT8HVBatL9gSWiQlH4iP8CxOK23UYE+V 185FftqbB5AQE+xWb8sL5fHiTNSaNCTfQaimtceRKsZRCltAmOowg4pNesRBFfNBukK 186AMLxqZ1K+AnURKcyiV9CjM+8X1LHr6aSj5zGr0Ipx97b5rVAykSde0My8uQ/4zOg 187wBPLFbyEJ5rvkrd95claOcmxWJBO2h87mHre1cY9YHOfHppNPdZ8irlOLhfmaZ6h 188gKC5uZfND9R4iCj2CalFtRGvU22ES5wJQuuqfmUqvosxZvNoEPzkcYQ9Ccfze2H7 189jfezcJmX 190-----END CERTIFICATE----- 191 192Certificate: 193 Data: 194 Version: 3 (0x2) 195 Serial Number: 196 1a:3b:ce:d1:26:69:e6:02:a2:2d:6a:b7:12:bc:51:e8:a3:d6:ee:5e 197 Signature Algorithm: sha256WithRSAEncryption 198 Issuer: CN=Root 199 Validity 200 Not Before: Oct 5 12:00:00 2021 GMT 201 Not After : Oct 5 12:00:00 2022 GMT 202 Subject: CN=Root 203 Subject Public Key Info: 204 Public Key Algorithm: rsaEncryption 205 Public-Key: (2048 bit) 206 Modulus: 207 00:a0:cd:53:80:33:bf:64:5d:06:66:6f:65:b5:97: 208 de:4e:5c:0d:48:e1:63:b4:dc:72:9f:5a:70:43:ab: 209 75:e0:74:03:06:c8:bf:87:6b:cf:a0:29:8d:45:c3: 210 5a:eb:a0:57:63:0f:d2:4f:18:5c:cc:c0:41:17:37: 211 31:7a:0c:0b:dd:f5:fa:c2:88:16:42:25:73:d5:fb: 212 09:5f:43:f7:46:1c:2c:68:0a:b1:2b:1b:f6:71:f6: 213 bf:d3:c7:ff:66:f7:9d:be:a7:d8:ef:bb:ad:32:89: 214 4e:5d:8d:9e:1d:cc:6b:a6:93:a4:3f:4f:e4:bd:a3: 215 c0:55:20:91:56:2f:a6:0b:2b:13:ce:fb:f4:24:86: 216 5b:82:5a:35:9a:d5:98:10:d1:66:cc:88:dc:c4:6d: 217 1d:d4:35:55:5b:00:5c:6a:10:07:77:59:b4:7a:9b: 218 a2:7a:c8:16:1c:b2:c4:bb:56:1c:cc:6a:01:28:4d: 219 0a:fc:fa:dc:5d:a4:c0:c3:7d:d0:c5:8f:16:13:8b: 220 59:dd:fb:c8:b3:11:8f:9f:9b:44:c7:48:8d:14:67: 221 f3:8a:68:a9:8e:aa:bf:c6:51:e9:dc:28:c4:d3:dd: 222 9f:b1:e7:ab:d6:fe:f3:bb:6b:53:76:d1:ba:66:64: 223 62:6a:6e:cf:2b:2b:cf:d6:c5:30:78:a0:ac:d1:4e: 224 84:a5 225 Exponent: 65537 (0x10001) 226 X509v3 extensions: 227 X509v3 Subject Key Identifier: 228 D7:A0:BF:D3:FD:2D:4F:A8:47:79:67:9F:0C:35:2D:C3:BE:49:E2:FD 229 X509v3 Authority Key Identifier: 230 D7:A0:BF:D3:FD:2D:4F:A8:47:79:67:9F:0C:35:2D:C3:BE:49:E2:FD 231 Authority Information Access: 232 CA Issuers - URI:http://url-for-aia/Root.cer 233 X509v3 CRL Distribution Points: 234 Full Name: 235 URI:http://url-for-crl/Root.crl 236 X509v3 Key Usage: critical 237 Certificate Sign, CRL Sign 238 X509v3 Basic Constraints: critical 239 CA:TRUE 240 X509v3 Policy Constraints: critical 241 Inhibit Policy Mapping:1 242 Signature Algorithm: sha256WithRSAEncryption 243 Signature Value: 244 0f:1a:40:a5:f3:25:67:a6:7a:05:2e:d4:96:d4:45:51:62:db: 245 39:77:4c:76:90:c7:e5:73:14:00:ab:3d:00:d9:ad:e8:da:80: 246 94:7f:81:e6:aa:86:3c:6d:84:fc:19:de:1c:0e:4f:93:c3:88: 247 0b:7f:f9:56:81:ac:c8:92:2e:5c:48:a2:bf:69:a0:d0:f4:42: 248 f6:54:5f:f5:c5:4f:dd:52:84:f9:a2:df:d7:dc:4d:78:7e:3b: 249 2d:be:e6:f2:b4:53:ca:b3:28:69:a4:ab:57:e9:2f:47:19:27: 250 a7:8e:17:ef:90:f1:e0:42:74:0b:16:37:d6:47:5e:d5:9c:a1: 251 a5:d7:63:6b:9b:2f:e1:e1:34:41:c3:19:71:ef:08:61:6c:a7: 252 29:0a:cb:c6:0f:72:f4:c9:31:59:52:b6:cd:0c:c4:8d:5f:e4: 253 3f:0a:89:47:5a:fd:11:89:34:8d:b0:67:d8:07:d9:a6:d3:be: 254 db:c4:ed:96:6f:25:35:bb:42:45:1c:70:65:82:f9:bd:88:6b: 255 8d:de:1b:84:e7:d6:80:aa:92:af:88:f0:f2:42:e7:20:5f:46: 256 b6:80:c8:49:49:ee:cc:a6:13:c3:86:26:7b:50:c5:f4:7b:41: 257 d3:ea:37:f4:11:46:66:09:d0:57:4e:33:e4:44:e0:f6:58:5d: 258 f7:5c:6c:d1 259-----BEGIN CERTIFICATE----- 260MIIDiTCCAnGgAwIBAgIUGjvO0SZp5gKiLWq3ErxR6KPW7l4wDQYJKoZIhvcNAQEL 261BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw 262MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK 263AoIBAQCgzVOAM79kXQZmb2W1l95OXA1I4WO03HKfWnBDq3XgdAMGyL+Ha8+gKY1F 264w1rroFdjD9JPGFzMwEEXNzF6DAvd9frCiBZCJXPV+wlfQ/dGHCxoCrErG/Zx9r/T 265x/9m952+p9jvu60yiU5djZ4dzGumk6Q/T+S9o8BVIJFWL6YLKxPO+/QkhluCWjWa 2661ZgQ0WbMiNzEbR3UNVVbAFxqEAd3WbR6m6J6yBYcssS7VhzMagEoTQr8+txdpMDD 267fdDFjxYTi1nd+8izEY+fm0THSI0UZ/OKaKmOqr/GUencKMTT3Z+x56vW/vO7a1N2 2680bpmZGJqbs8rK8/WxTB4oKzRToSlAgMBAAGjgdwwgdkwHQYDVR0OBBYEFNegv9P9 269LU+oR3lnnww1LcO+SeL9MB8GA1UdIwQYMBaAFNegv9P9LU+oR3lnnww1LcO+SeL9 270MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh 271L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S 272b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAPBgNVHSQB 273Af8EBTADgQEBMA0GCSqGSIb3DQEBCwUAA4IBAQAPGkCl8yVnpnoFLtSW1EVRYts5 274d0x2kMflcxQAqz0A2a3o2oCUf4HmqoY8bYT8Gd4cDk+Tw4gLf/lWgazIki5cSKK/ 275aaDQ9EL2VF/1xU/dUoT5ot/X3E14fjstvubytFPKsyhppKtX6S9HGSenjhfvkPHg 276QnQLFjfWR17VnKGl12Nrmy/h4TRBwxlx7whhbKcpCsvGD3L0yTFZUrbNDMSNX+Q/ 277ColHWv0RiTSNsGfYB9mm077bxO2WbyU1u0JFHHBlgvm9iGuN3huE59aAqpKviPDy 278QucgX0a2gMhJSe7MphPDhiZ7UMX0e0HT6jf0EUZmCdBXTjPkROD2WF33XGzR 279-----END CERTIFICATE----- 280