integration-cli: fix test rogue certs

Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>

hack/generate-test-rogue-certs.sh

@@ -0,0 +1,86 @@
+#!/bin/bash
+set -eu
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
+
+OUT_DIR="${SCRIPT_DIR}/../integration-cli/fixtures/https"
+
+# generate CA
+echo 01 > "${OUT_DIR}/ca-rogue.srl"
+openssl genrsa -out "${OUT_DIR}/ca-rogue-key.pem"
+
+openssl req \
+	-new \
+	-x509 \
+	-days 3652 \
+	-subj "/C=US/ST=CA/L=SanFrancisco/O=Evil Inc/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain" \
+	-nameopt compat \
+	-text \
+	-key "${OUT_DIR}/ca-rogue-key.pem" \
+	-out "${OUT_DIR}/ca-rogue.pem"
+
+# Now that we have a CA, create a server key and certificate signing request.
+# Make sure that `"Common Name (e.g. server FQDN or YOUR name)"` matches the hostname you will use
+# to connect or just use '*' for a certificate valid for any hostname:
+
+openssl genrsa -out "${OUT_DIR}/server-rogue-key.pem"
+openssl req -new \
+	-subj "/C=US/ST=CA/L=SanFrancisco/O=Evil Inc/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain" \
+	-text \
+	-key "${OUT_DIR}/server-rogue-key.pem" \
+	-out "${OUT_DIR}/server-rogue.csr"
+
+# Options for server certificate
+cat > "${OUT_DIR}/server-rogue-options.cfg" << 'EOF'
+basicConstraints=CA:FALSE
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+extendedKeyUsage=serverAuth
+subjectAltName=DNS:*,DNS:localhost,IP:127.0.0.1,IP:::1
+EOF
+
+# Generate the certificate and sign with our CA
+openssl x509 \
+	-req \
+	-days 3652 \
+	-extfile "${OUT_DIR}/server-rogue-options.cfg" \
+	-CA "${OUT_DIR}/ca-rogue.pem" \
+	-CAkey "${OUT_DIR}/ca-rogue-key.pem" \
+	-nameopt compat \
+	-text \
+	-in "${OUT_DIR}/server-rogue.csr" \
+	-out "${OUT_DIR}/server-rogue-cert.pem"
+
+# For client authentication, create a client key and certificate signing request
+openssl genrsa -out "${OUT_DIR}/client-rogue-key.pem"
+openssl req -new \
+	-subj "/C=US/ST=CA/L=SanFrancisco/O=Evil Inc/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain" \
+	-text \
+	-key "${OUT_DIR}/client-rogue-key.pem" \
+	-out "${OUT_DIR}/client-rogue.csr"
+
+# Options for client certificate
+cat > "${OUT_DIR}/client-rogue-options.cfg" << 'EOF'
+basicConstraints=CA:FALSE
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+extendedKeyUsage=clientAuth
+subjectAltName=DNS:*,DNS:localhost,IP:127.0.0.1,IP:::1
+EOF
+
+# Generate the certificate and sign with our CA:
+openssl x509 \
+	-req \
+	-days 3652 \
+	-extfile "${OUT_DIR}/client-rogue-options.cfg" \
+	-CA "${OUT_DIR}/ca-rogue.pem" \
+	-CAkey "${OUT_DIR}/ca-rogue-key.pem" \
+	-nameopt compat \
+	-text \
+	-in "${OUT_DIR}/client-rogue.csr" \
+	-out "${OUT_DIR}/client-rogue-cert.pem"
+
+rm "${OUT_DIR}/ca-rogue.srl"
+rm "${OUT_DIR}/ca-rogue-key.pem"
+rm "${OUT_DIR}"/*.cfg
+rm "${OUT_DIR}"/*.csr

integration-cli/fixtures/https/ca-rogue.pem

@@ -0,0 +1,83 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            35:19:be:ba:10:ce:03:ea:4d:f7:c9:e5:48:c6:bc:79:a7:49:0f:ac
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=US, ST=CA, L=SanFrancisco, O=Evil Inc, OU=changeme, CN=changeme/name=changeme/emailAddress=mail@host.domain
+        Validity
+            Not Before: May 12 02:04:15 2022 GMT
+            Not After : May 11 02:04:15 2032 GMT
+        Subject: C=US, ST=CA, L=SanFrancisco, O=Evil Inc, OU=changeme, CN=changeme/name=changeme/emailAddress=mail@host.domain
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bf:af:80:18:34:78:00:01:a5:2c:16:86:d5:99:
+                    b7:db:15:d8:8b:94:83:d1:57:8c:eb:a4:68:72:42:
+                    c9:e6:5b:13:83:c6:00:11:dc:96:05:4e:3e:ea:91:
+                    29:ec:2f:50:44:da:f8:2b:2e:90:c4:a4:aa:42:dd:
+                    af:16:73:d4:58:c3:0f:d9:68:84:7d:fc:00:cd:5a:
+                    b3:9d:ef:0b:8e:2f:e0:ef:44:03:d0:13:07:e4:a7:
+                    2f:38:a7:6b:b2:1b:98:c2:19:2c:cc:4d:ff:9c:66:
+                    41:34:d4:eb:bb:ae:c4:82:2b:0b:22:73:b0:eb:11:
+                    30:87:1a:96:2b:df:ba:df:4e:b4:06:a4:e3:c7:c2:
+                    3c:54:6e:07:5f:0a:9b:15:f5:6d:ab:3c:4f:2b:24:
+                    42:ac:bb:06:88:f3:5e:bd:5e:4e:ca:8e:46:37:51:
+                    dc:2e:81:a3:7b:fd:98:98:5f:29:43:0a:1a:a3:83:
+                    41:8b:df:d5:b2:ec:6e:6d:04:01:7b:67:b7:04:4d:
+                    55:8b:b8:4c:2a:27:57:ff:f1:ee:88:13:4e:3f:31:
+                    2c:ba:95:82:3a:b6:d3:06:ac:ab:de:5a:86:4f:2a:
+                    ad:f9:96:36:9c:1f:fd:8b:60:2f:c0:51:cc:61:79:
+                    ff:3d:f7:bb:ec:f4:57:95:95:a1:38:1f:07:22:4c:
+                    73:39
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                51:EF:0E:E9:2C:C8:FE:F0:22:D9:C0:D9:5E:86:11:FD:44:A1:41:2E
+            X509v3 Authority Key Identifier: 
+                51:EF:0E:E9:2C:C8:FE:F0:22:D9:C0:D9:5E:86:11:FD:44:A1:41:2E
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        86:68:ad:2f:73:50:db:76:2a:38:01:23:7d:e3:94:44:7b:82:
+        ff:32:cc:6f:fd:c8:92:7e:4d:d9:e5:a6:e5:d4:e8:3f:5f:de:
+        fa:e1:3d:c7:a0:d7:e8:28:65:ef:0a:85:9b:b9:95:05:0e:90:
+        4d:6c:73:44:e4:1c:f5:36:6f:bc:02:65:cc:a8:a1:b0:c7:96:
+        8e:38:6a:c9:c4:9b:85:1a:44:5b:b1:6d:fc:d9:58:ab:5d:96:
+        20:56:e7:6b:bc:47:7f:04:47:fa:83:8a:87:5a:c7:3c:21:6e:
+        a1:84:ac:14:41:93:c4:52:3f:32:24:35:42:bb:97:21:db:6d:
+        35:3b:9f:6f:2a:7b:f4:70:80:9c:1a:7f:4d:11:36:29:54:35:
+        0f:19:6d:78:04:d7:8c:f6:0f:88:f5:35:f3:79:e2:7e:e9:21:
+        09:76:47:9f:ae:65:8f:8f:f6:60:e4:cf:37:da:18:c1:19:c5:
+        5b:19:1e:80:c5:aa:b0:d9:d6:6c:5c:1d:02:e1:7a:6d:11:ad:
+        da:4d:37:f3:78:90:21:db:2e:cd:21:fc:33:cf:d0:90:d3:28:
+        1e:9e:c0:0c:a5:17:97:c4:1d:ca:c7:10:1b:72:f4:7c:2a:0c:
+        0e:71:4f:cd:b0:31:e7:50:fd:35:07:03:de:1f:8d:c4:71:0b:
+        b4:17:6e:69
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

integration-cli/fixtures/https/client-rogue-cert.pem

@@ -1,73 +1,88 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 2 (0x2)
+        Serial Number:
-    Signature Algorithm: sha1WithRSAEncryption
+            52:93:3b:eb:8a:c5:e9:eb:36:99:4c:62:5f:9a:13:4d:7f:fc:e9:39
+        Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=US, ST=CA, L=SanFrancisco, O=Evil Inc, OU=changeme, CN=changeme/name=changeme/emailAddress=mail@host.domain
         Validity
-            Not Before: Feb 24 17:54:59 2014 GMT
+            Not Before: May 12 02:04:15 2022 GMT
-            Not After : Feb 22 17:54:59 2024 GMT
+            Not After : May 11 02:04:15 2032 GMT
-        Subject: C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=client/name=changeme/emailAddress=mail@host.domain
+        Subject: C=US, ST=CA, L=SanFrancisco, O=Evil Inc, OU=changeme, CN=changeme/name=changeme/emailAddress=mail@host.domain
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                Public-Key: (2048 bit)
                 Modulus:
-                    00:e8:e2:2c:b8:d4:db:89:50:4f:47:1e:68:db:f7:
+                    00:ae:8c:19:24:29:d3:ff:b1:55:1c:02:92:87:8d:
-                    e4:cc:47:41:63:75:03:37:50:7a:a8:4d:27:36:d5:
+                    fc:cf:db:5a:60:45:f0:df:eb:eb:b7:69:b5:6a:87:
-                    15:01:08:b6:cf:56:f7:56:6d:3d:f9:e2:8d:1a:5d:
+                    19:fa:96:a4:9d:2d:8c:71:cd:a1:33:39:22:bc:63:
-                    bf:a0:24:5e:07:55:8e:d0:dc:f1:fa:19:87:1d:d6:
+                    36:36:cb:e4:06:88:cd:0a:a4:a0:a9:5d:57:13:7f:
-                    b6:58:82:2e:ba:69:6d:e9:d9:c8:16:0d:1d:59:7f:
+                    15:9d:9b:d8:66:f1:f8:f5:71:db:a9:c8:a5:1e:f4:
-                    f4:8e:58:10:01:3d:21:14:16:3c:ec:cd:8c:b7:0e:
+                    57:2c:24:b0:e3:67:02:24:d8:c1:8e:38:73:64:16:
-                    e6:7b:77:b4:f9:90:a5:17:01:bb:84:c6:b2:12:87:
+                    c3:82:87:63:d5:7e:43:a6:75:4e:74:08:93:82:3f:
-                    70:eb:9f:6d:4f:d0:68:8b:96:c0:e7:0b:51:b4:9d:
+                    2e:96:2c:06:a4:65:6e:f4:33:3d:3d:ff:c3:66:38:
-                    1d:7b:6c:7b:be:89:6b:88:8b
+                    17:54:65:29:ae:7f:30:91:29:0a:6b:03:d5:9d:89:
+                    21:3e:ff:ee:41:e5:fd:3f:1b:c9:5d:06:92:49:2c:
+                    34:e9:51:c5:6e:89:e9:1f:33:26:ca:98:24:8e:04:
+                    39:ef:3c:a5:97:90:8a:c9:2b:8e:05:e4:56:82:3a:
+                    e6:2d:51:c2:72:45:3b:2e:7c:9f:02:3c:66:96:5f:
+                    a9:21:4d:61:3a:37:6e:56:10:f8:40:fa:1b:b5:4d:
+                    bc:99:d5:81:04:ed:75:2e:52:ab:4b:de:f6:c3:41:
+                    27:8e:37:42:3b:34:68:6a:2d:d2:8f:42:07:58:9a:
+                    bc:6b:6a:7b:08:72:ba:ac:de:a3:44:5a:d8:8d:fa:
+                    ec:1b
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
                 CA:FALSE
-            Netscape Comment: 
-                Easy-RSA Generated Certificate
             X509v3 Subject Key Identifier: 
-                9E:F8:49:D0:A2:76:30:5C:AB:2B:8A:B5:8D:C6:45:1F:A7:F8:CF:85
+                E4:08:A1:99:EE:3C:80:4E:E8:8C:FF:43:E1:4F:2A:49:3D:4E:49:A7
             X509v3 Authority Key Identifier: 
-                keyid:DC:A5:F1:76:DB:4E:CD:8E:EF:B1:23:56:1D:92:80:99:74:3B:EA:6F
+                51:EF:0E:E9:2C:C8:FE:F0:22:D9:C0:D9:5E:86:11:FD:44:A1:41:2E
-                DirName:/C=US/ST=CA/L=SanFrancisco/O=Evil Inc/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
-                serial:E7:21:1E:18:41:1B:96:83
-
             X509v3 Extended Key Usage: 
                 TLS Web Client Authentication
-            X509v3 Key Usage: 
+            X509v3 Subject Alternative Name: 
-                Digital Signature
+                DNS:*, DNS:localhost, IP Address:127.0.0.1, IP Address:0:0:0:0:0:0:0:1
-    Signature Algorithm: sha1WithRSAEncryption
+    Signature Algorithm: sha256WithRSAEncryption
-         48:76:c0:18:fa:0a:ee:4e:1a:ec:02:9d:d4:83:ca:94:54:a1:
+    Signature Value:
-         3f:51:2f:3e:4b:95:c3:42:9b:71:a0:4b:d9:af:47:23:b9:1c:
+        5c:6b:b8:68:d0:5a:4b:fc:9f:6d:09:16:f7:4c:61:50:2a:d7:
-         fb:85:ba:76:e2:09:cb:65:bb:d2:7d:44:3d:4b:67:ba:80:83:
+        1c:8e:56:93:0f:b2:95:3f:6c:18:5d:fc:7e:d3:8a:72:45:63:
-         be:a8:ed:c4:b9:ea:1a:1b:c7:59:3b:d9:5c:0d:46:d8:c9:92:
+        8a:c0:a7:ce:76:f9:63:bf:31:98:fa:1d:b4:b9:be:b7:f2:61:
-         cb:10:c5:f2:1a:38:a4:aa:07:2c:e3:84:16:79:c7:95:09:e3:
+        ee:76:be:4e:ab:71:9e:a1:62:fc:cf:f7:91:59:f0:76:58:f4:
-         01:d2:15:a2:77:0b:8b:bf:94:04:e9:7f:c0:cd:e6:2e:64:cd:
+        a3:4e:0b:59:ee:17:b6:bf:ce:55:55:70:a5:6e:cd:30:03:c3:
-         1e:a3:32:ec:11:cc:62:ce:c7:4e:cd:ad:48:5c:b1:b8:e9:76:
+        ac:d4:7a:38:84:39:de:8a:6b:26:14:dc:04:98:ca:96:eb:b6:
-         b3:f9
+        d1:6e:c9:6f:61:c6:80:a5:4e:29:c5:98:d2:a1:43:84:c1:83:
+        83:f7:6f:a9:7b:3a:87:69:71:cd:f1:2c:7b:cf:65:17:62:be:
+        46:fa:95:f8:62:05:04:ac:b4:1b:58:02:01:77:f6:ed:72:17:
+        c4:9d:df:0d:ab:12:14:87:de:20:21:28:2c:3b:2f:93:3b:a6:
+        f2:79:d0:80:c0:94:4d:2b:61:0e:25:ae:a8:0e:d7:00:e5:55:
+        6a:31:be:bc:a5:69:ed:2e:f9:b1:eb:d0:d1:eb:a8:60:ad:81:
+        60:a9:d8:ca:a3:3b:18:41:13:b0:9e:78:99:bd:52:5f:17:0f:
+        f9:d1:60:6b:81:3a:06:af:6f:f2:b8:fd:f9:09:35:10:2b:f2:
+        57:0e:ac:8c
 -----BEGIN CERTIFICATE-----
-MIIEDTCCA3agAwIBAgIBAjANBgkqhkiG9w0BAQUFADCBnjELMAkGA1UEBhMCVVMx
+MIIEYTCCA0mgAwIBAgIUUpM764rF6es2mUxiX5oTTX/86TkwDQYJKoZIhvcNAQEL
-CzAJBgNVBAgTAkNBMRUwEwYDVQQHEwxTYW5GcmFuY2lzY28xETAPBgNVBAoTCEV2
+BQAwgZ4xCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJDQTEVMBMGA1UEBwwMU2FuRnJh
-aWwgSW5jMREwDwYDVQQLEwhjaGFuZ2VtZTERMA8GA1UEAxMIY2hhbmdlbWUxETAP
+bmNpc2NvMREwDwYDVQQKDAhFdmlsIEluYzERMA8GA1UECwwIY2hhbmdlbWUxETAP
-BgNVBCkTCGNoYW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQGhvc3QuZG9tYWlu
+BgNVBAMMCGNoYW5nZW1lMREwDwYDVQQpDAhjaGFuZ2VtZTEfMB0GCSqGSIb3DQEJ
-MB4XDTE0MDIyNDE3NTQ1OVoXDTI0MDIyMjE3NTQ1OVowgaAxCzAJBgNVBAYTAlVT
+ARYQbWFpbEBob3N0LmRvbWFpbjAeFw0yMjA1MTIwMjA0MTVaFw0zMjA1MTEwMjA0
-MQswCQYDVQQIEwJDQTEVMBMGA1UEBxMMU2FuRnJhbmNpc2NvMRUwEwYDVQQKEwxG
+MTVaMIGeMQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFTATBgNVBAcMDFNhbkZy
-b3J0LUZ1bnN0b24xETAPBgNVBAsTCGNoYW5nZW1lMQ8wDQYDVQQDEwZjbGllbnQx
+YW5jaXNjbzERMA8GA1UECgwIRXZpbCBJbmMxETAPBgNVBAsMCGNoYW5nZW1lMREw
-ETAPBgNVBCkTCGNoYW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQGhvc3QuZG9t
+DwYDVQQDDAhjaGFuZ2VtZTERMA8GA1UEKQwIY2hhbmdlbWUxHzAdBgkqhkiG9w0B
-YWluMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDo4iy41NuJUE9HHmjb9+TM
+CQEWEG1haWxAaG9zdC5kb21haW4wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
-R0FjdQM3UHqoTSc21RUBCLbPVvdWbT354o0aXb+gJF4HVY7Q3PH6GYcd1rZYgi66
+AoIBAQCujBkkKdP/sVUcApKHjfzP21pgRfDf6+u3abVqhxn6lqSdLYxxzaEzOSK8
-aW3p2cgWDR1Zf/SOWBABPSEUFjzszYy3DuZ7d7T5kKUXAbuExrISh3Drn21P0GiL
+YzY2y+QGiM0KpKCpXVcTfxWdm9hm8fj1cdupyKUe9FcsJLDjZwIk2MGOOHNkFsOC
-lsDnC1G0nR17bHu+iWuIiwIDAQABo4IBVTCCAVEwCQYDVR0TBAIwADAtBglghkgB
+h2PVfkOmdU50CJOCPy6WLAakZW70Mz09/8NmOBdUZSmufzCRKQprA9WdiSE+/+5B
-hvhCAQ0EIBYeRWFzeS1SU0EgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQW
+5f0/G8ldBpJJLDTpUcVuiekfMybKmCSOBDnvPKWXkIrJK44F5FaCOuYtUcJyRTsu
-BBSe+EnQonYwXKsrirWNxkUfp/jPhTCB0wYDVR0jBIHLMIHIgBTcpfF2207Nju+x
+fJ8CPGaWX6khTWE6N25WEPhA+hu1TbyZ1YEE7XUuUqtL3vbDQSeON0I7NGhqLdKP
-I1YdkoCZdDvqb6GBpKSBoTCBnjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRUw
+QgdYmrxransIcrqs3qNEWtiN+uwbAgMBAAGjgZQwgZEwCQYDVR0TBAIwADAdBgNV
-EwYDVQQHEwxTYW5GcmFuY2lzY28xETAPBgNVBAoTCEV2aWwgSW5jMREwDwYDVQQL
+HQ4EFgQU5Aihme48gE7ojP9D4U8qST1OSacwHwYDVR0jBBgwFoAUUe8O6SzI/vAi
-EwhjaGFuZ2VtZTERMA8GA1UEAxMIY2hhbmdlbWUxETAPBgNVBCkTCGNoYW5nZW1l
+2cDZXoYR/UShQS4wEwYDVR0lBAwwCgYIKwYBBQUHAwIwLwYDVR0RBCgwJoIBKoIJ
-MR8wHQYJKoZIhvcNAQkBFhBtYWlsQGhvc3QuZG9tYWluggkA5yEeGEEbloMwEwYD
+bG9jYWxob3N0hwR/AAABhxAAAAAAAAAAAAAAAAAAAAABMA0GCSqGSIb3DQEBCwUA
-VR0lBAwwCgYIKwYBBQUHAwIwCwYDVR0PBAQDAgeAMA0GCSqGSIb3DQEBBQUAA4GB
+A4IBAQBca7ho0FpL/J9tCRb3TGFQKtccjlaTD7KVP2wYXfx+04pyRWOKwKfOdvlj
-AEh2wBj6Cu5OGuwCndSDypRUoT9RLz5LlcNCm3GgS9mvRyO5HPuFunbiCctlu9J9
+vzGY+h20ub638mHudr5Oq3GeoWL8z/eRWfB2WPSjTgtZ7he2v85VVXClbs0wA8Os
-RD1LZ7qAg76o7cS56hobx1k72VwNRtjJkssQxfIaOKSqByzjhBZ5x5UJ4wHSFaJ3
+1Ho4hDneimsmFNwEmMqW67bRbslvYcaApU4pxZjSoUOEwYOD92+pezqHaXHN8Sx7
-C4u/lATpf8DN5i5kzR6jMuwRzGLOx07NrUhcsbjpdrP5
+z2UXYr5G+pX4YgUErLQbWAIBd/btchfEnd8NqxIUh94gISgsOy+TO6byedCAwJRN
+K2EOJa6oDtcA5VVqMb68pWntLvmx69DR66hgrYFgqdjKozsYQROwnniZvVJfFw/5
+0WBrgToGr2/yuP35CTUQK/JXDqyM
 -----END CERTIFICATE-----

integration-cli/fixtures/https/client-rogue-key.pem

@@ -1,16 +1,28 @@
 -----BEGIN PRIVATE KEY-----
-MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBAOjiLLjU24lQT0ce
+MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCujBkkKdP/sVUc
-aNv35MxHQWN1AzdQeqhNJzbVFQEIts9W91ZtPfnijRpdv6AkXgdVjtDc8foZhx3W
+ApKHjfzP21pgRfDf6+u3abVqhxn6lqSdLYxxzaEzOSK8YzY2y+QGiM0KpKCpXVcT
-tliCLrppbenZyBYNHVl/9I5YEAE9IRQWPOzNjLcO5nt3tPmQpRcBu4TGshKHcOuf
+fxWdm9hm8fj1cdupyKUe9FcsJLDjZwIk2MGOOHNkFsOCh2PVfkOmdU50CJOCPy6W
-bU/QaIuWwOcLUbSdHXtse76Ja4iLAgMBAAECgYADs+TmI2xCKKa6CL++D5jxrohZ
+LAakZW70Mz09/8NmOBdUZSmufzCRKQprA9WdiSE+/+5B5f0/G8ldBpJJLDTpUcVu
-nnionnz0xBVFh+nHlG3jqgxQsXf0yydXLfpn/2wHTdLxezHVuiYt0UYg7iD0CglW
+iekfMybKmCSOBDnvPKWXkIrJK44F5FaCOuYtUcJyRTsufJ8CPGaWX6khTWE6N25W
-+IjcgMebzyjLeYqYOE5llPlMvhp2HoEMYJNb+7bRrZ1WCITbu+Su0w1cgA7Cs+Ej
+EPhA+hu1TbyZ1YEE7XUuUqtL3vbDQSeON0I7NGhqLdKPQgdYmrxransIcrqs3qNE
-VlfvGzN+qqnDThRUYQJBAPY0sMWZJKly8QhUmUvmcXdPczzSOf6Mm7gc5LR6wzxd
+WtiN+uwbAgMBAAECggEASZeQ/BHUq+ApGaut+xAu8LYzxxaGBesS0Zx0nEsE9YXx
-vW7syuqk50qjqVqFpN81vCV7GoDxRUWbTM9ftf7JGFkCQQDyJc/1RMygE2o+enU1
+NsHfDpZbqlyjHBmaYIUbiXPBO4UIpg/QKEyzIOX12gWYaWfNbSrHD6OGY3q+x8oE
-6UBxJyclXITEYtDn8aoEpLNc7RakP1WoPUKjZOnjkcoKcIkFNkSPeCfQujrb5f3F
++eMXzG5ZnHAKk2yg94EKZdLctohtJQOdkTxTupl3q+c0oYDF8kGg+HjEl6lRoUmh
-MkuDAkByAI/hzzmkpK5rFxEsjfX4Mve/L/DepyjrpaVY1IdWimlO1aJX6CeY7hNa
+sVkNeBN7UyEc/WfLm0fLWMDWdue3J0U1tl91NYa3PcYe2v7wIJfCvSrh6wM1P2p+
-8QsYt/74s/nfvtg+lNyKIV1aLq9xAkB+WSSNgfyTeg3x08vc+Xxajmdqoz/TiQwg
+Eax0WR4xxcdljWZSCJCSHbGSBAQE1DlxC2HTns98Yk1MY8JCuQJESVmt64VQ9Gpz
-OoTQL3A3iK5LvZBgXLasszcnOycFE3srcQmNItEDpGiZ3QPxJTEpAkEA45EE9NMJ
+rQ8ol1kTbwJ42mhEbNNQqnkl4p2GgJuUErSS7gPwEQKBgQDQVGvL021HdSpVLqdq
-SA7EGWSFlbz4f4u4oBeiDiJRJbGGfAyVxZlpCWUjPpg9+swsWoFEOjnGYaChAMk5
+aES0QCkuREuOvQSY3pPo7jiwYe+UDb3loj6XPeUL9t4D7fXINyLWk6Gbvenu6Cr6
-nrOdMf15T6QF7Q==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 -----END PRIVATE KEY-----

integration-cli/fixtures/https/server-rogue-cert.pem

@@ -1,76 +1,88 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 3 (0x3)
+        Serial Number:
-    Signature Algorithm: sha1WithRSAEncryption
+            1d:a9:ba:72:c5:13:0a:5a:64:34:7d:9a:9c:06:0f:31:74:d8:1f:44
+        Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=US, ST=CA, L=SanFrancisco, O=Evil Inc, OU=changeme, CN=changeme/name=changeme/emailAddress=mail@host.domain
         Validity
-            Not Before: Feb 28 18:49:31 2014 GMT
+            Not Before: May 12 02:04:15 2022 GMT
-            Not After : Feb 26 18:49:31 2024 GMT
+            Not After : May 11 02:04:15 2032 GMT
-        Subject: C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=changeme, CN=localhost/name=changeme/emailAddress=mail@host.domain
+        Subject: C=US, ST=CA, L=SanFrancisco, O=Evil Inc, OU=changeme, CN=changeme/name=changeme/emailAddress=mail@host.domain
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                Public-Key: (2048 bit)
                 Modulus:
-                    00:d1:08:58:24:60:a1:69:65:4b:76:46:8f:88:75:
+                    00:88:50:d5:b7:a7:2f:24:35:a2:1b:5a:68:ad:b5:
-                    7c:49:3a:d8:03:cc:5b:58:c5:d1:bb:e5:f9:54:b9:
+                    ab:a9:dd:72:1b:15:87:68:36:b2:f5:dd:04:f1:74:
-                    75:65:df:7e:bb:fb:54:d4:b2:e9:6f:58:a2:a4:84:
+                    bf:4b:7a:fc:f1:82:a1:f0:64:ef:fc:ab:b2:3e:93:
-                    43:94:77:24:81:38:36:36:f0:66:65:26:e5:5b:2a:
+                    23:24:54:c5:5b:39:43:7b:c4:2d:4c:dc:90:d5:0d:
-                    14:1c:a9:ae:57:7f:75:00:23:14:4b:61:58:e4:82:
+                    2e:7f:81:7d:50:36:34:42:c6:6d:95:13:58:82:a6:
-                    aa:15:97:94:bd:50:35:0d:5d:18:18:ed:10:6a:bb:
+                    a9:49:b4:0c:0d:4f:c5:05:e4:67:25:54:16:bd:05:
-                    d3:64:5a:eb:36:98:5b:58:a7:fe:67:48:c1:6c:3f:
+                    c2:59:79:4c:c2:fe:49:5e:ed:19:40:e8:28:e4:47:
-                    51:2f:02:65:96:54:77:9b:34:f9:a7:d2:63:54:6a:
+                    76:6f:6b:94:1a:40:e4:01:99:ca:9c:26:1b:2c:e6:
-                    9e:02:5c:be:65:98:a4:b4:b5
+                    a7:0b:5a:57:ea:f1:11:60:fb:c0:e5:a0:25:a0:1c:
+                    c0:ca:54:59:fe:be:7d:da:72:19:58:19:e2:5f:e3:
+                    d0:f6:f1:f2:97:2f:6e:52:9a:bf:17:c2:af:21:01:
+                    1e:d1:d2:2f:26:09:0c:68:2f:27:43:52:0b:69:2e:
+                    85:8f:a5:30:35:e5:3d:e5:93:01:9c:5d:14:b2:0a:
+                    08:03:35:69:6a:71:e2:e1:be:e2:55:75:28:bd:cf:
+                    7e:2b:90:1f:bd:64:56:9e:62:c6:48:2b:40:41:63:
+                    52:52:d8:ff:65:02:b7:af:58:17:e6:f6:bc:1f:6d:
+                    e5:8b:eb:5f:b6:61:4e:d5:fe:3e:e2:dd:dc:92:d5:
+                    29:fb
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
                 CA:FALSE
-            Netscape Cert Type: 
-                SSL Server
-            Netscape Comment: 
-                Easy-RSA Generated Server Certificate
             X509v3 Subject Key Identifier: 
-                1F:E0:57:CA:CB:76:C9:C4:86:B9:EA:69:17:C0:F3:51:CE:95:40:EC
+                C7:67:8E:34:B7:19:C7:7A:66:A9:B5:94:13:04:16:2A:06:BE:DE:59
             X509v3 Authority Key Identifier: 
-                keyid:DC:A5:F1:76:DB:4E:CD:8E:EF:B1:23:56:1D:92:80:99:74:3B:EA:6F
+                51:EF:0E:E9:2C:C8:FE:F0:22:D9:C0:D9:5E:86:11:FD:44:A1:41:2E
-                DirName:/C=US/ST=CA/L=SanFrancisco/O=Evil Inc/OU=changeme/CN=changeme/name=changeme/emailAddress=mail@host.domain
-                serial:E7:21:1E:18:41:1B:96:83
-
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication
-            X509v3 Key Usage: 
+            X509v3 Subject Alternative Name: 
-                Digital Signature, Key Encipherment
+                DNS:*, DNS:localhost, IP Address:127.0.0.1, IP Address:0:0:0:0:0:0:0:1
-    Signature Algorithm: sha1WithRSAEncryption
+    Signature Algorithm: sha256WithRSAEncryption
-         04:93:0e:28:01:94:18:f0:8c:7c:d3:0c:ad:e9:b7:46:b1:30:
+    Signature Value:
-         65:ed:68:7c:8c:91:cd:1a:86:66:87:4a:4f:c0:97:bc:f7:85:
+        7f:7b:46:ad:12:8d:7b:aa:7b:19:44:38:18:97:06:60:8c:0e:
-         4b:38:79:31:b2:65:88:b1:76:16:9e:80:93:38:f4:b9:eb:65:
+        13:12:bc:dc:3f:84:21:eb:21:2e:84:1a:84:0f:88:fd:3c:60:
-         00:6d:bb:89:e0:a1:bf:95:5e:80:13:8e:01:73:d3:f1:08:73:
+        ef:71:9d:ec:29:2e:7a:c1:c2:89:d4:20:85:4a:d1:7c:94:41:
-         85:a5:33:75:0b:42:8a:a3:07:09:35:ef:d7:c6:58:eb:60:a3:
+        d1:ab:86:37:b7:5d:ad:1a:c8:a3:e1:76:3b:bd:08:2c:e9:d2:
-         06:89:a0:53:99:e2:aa:41:90:e0:1a:d2:12:4b:48:7d:c3:9c:
+        d9:4c:95:aa:e4:96:9e:e3:7a:7f:6f:7b:a7:c5:31:c8:7e:59:
-         ad:bd:0e:5e:5f:f7:09:0c:5d:7c:86:24:dd:92:d5:b3:14:06:
+        82:85:20:33:1f:ef:13:c1:cb:ca:1f:b9:18:8e:30:af:a8:c6:
-         c7:9f
+        6b:c0:bf:04:33:16:e9:de:09:d8:76:6e:a0:4c:fb:8a:a0:53:
+        99:46:84:c2:59:94:3f:d6:e7:32:bb:b1:37:00:73:ce:9f:e8:
+        0e:94:2a:44:11:3e:da:88:c7:65:6f:f0:b4:55:d7:e0:cf:38:
+        de:9b:f4:ca:d4:ad:a3:2f:b2:7f:f8:9b:5c:cd:98:59:20:19:
+        3e:d2:1f:a1:95:99:a9:70:e8:52:a7:d1:f2:47:fd:ed:80:ab:
+        9c:d3:9f:b2:54:24:d5:96:05:df:64:54:b5:f0:26:56:ce:6b:
+        07:b2:93:05:9f:b5:43:9c:71:c3:d4:59:e3:b5:c2:67:3d:45:
+        a4:55:5f:c9:94:93:a6:24:96:c0:7a:33:bc:11:e9:0b:bf:0d:
+        4d:25:9e:c6
 -----BEGIN CERTIFICATE-----
-MIIEKjCCA5OgAwIBAgIBAzANBgkqhkiG9w0BAQUFADCBnjELMAkGA1UEBhMCVVMx
+MIIEYTCCA0mgAwIBAgIUHam6csUTClpkNH2anAYPMXTYH0QwDQYJKoZIhvcNAQEL
-CzAJBgNVBAgTAkNBMRUwEwYDVQQHEwxTYW5GcmFuY2lzY28xETAPBgNVBAoTCEV2
+BQAwgZ4xCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJDQTEVMBMGA1UEBwwMU2FuRnJh
-aWwgSW5jMREwDwYDVQQLEwhjaGFuZ2VtZTERMA8GA1UEAxMIY2hhbmdlbWUxETAP
+bmNpc2NvMREwDwYDVQQKDAhFdmlsIEluYzERMA8GA1UECwwIY2hhbmdlbWUxETAP
-BgNVBCkTCGNoYW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQGhvc3QuZG9tYWlu
+BgNVBAMMCGNoYW5nZW1lMREwDwYDVQQpDAhjaGFuZ2VtZTEfMB0GCSqGSIb3DQEJ
-MB4XDTE0MDIyODE4NDkzMVoXDTI0MDIyNjE4NDkzMVowgaMxCzAJBgNVBAYTAlVT
+ARYQbWFpbEBob3N0LmRvbWFpbjAeFw0yMjA1MTIwMjA0MTVaFw0zMjA1MTEwMjA0
-MQswCQYDVQQIEwJDQTEVMBMGA1UEBxMMU2FuRnJhbmNpc2NvMRUwEwYDVQQKEwxG
+MTVaMIGeMQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFTATBgNVBAcMDFNhbkZy
-b3J0LUZ1bnN0b24xETAPBgNVBAsTCGNoYW5nZW1lMRIwEAYDVQQDEwlsb2NhbGhv
+YW5jaXNjbzERMA8GA1UECgwIRXZpbCBJbmMxETAPBgNVBAsMCGNoYW5nZW1lMREw
-c3QxETAPBgNVBCkTCGNoYW5nZW1lMR8wHQYJKoZIhvcNAQkBFhBtYWlsQGhvc3Qu
+DwYDVQQDDAhjaGFuZ2VtZTERMA8GA1UEKQwIY2hhbmdlbWUxHzAdBgkqhkiG9w0B
-ZG9tYWluMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDRCFgkYKFpZUt2Ro+I
+CQEWEG1haWxAaG9zdC5kb21haW4wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
-dXxJOtgDzFtYxdG75flUuXVl3367+1TUsulvWKKkhEOUdySBODY28GZlJuVbKhQc
+AoIBAQCIUNW3py8kNaIbWmittaup3XIbFYdoNrL13QTxdL9LevzxgqHwZO/8q7I+
-qa5Xf3UAIxRLYVjkgqoVl5S9UDUNXRgY7RBqu9NkWus2mFtYp/5nSMFsP1EvAmWW
+kyMkVMVbOUN7xC1M3JDVDS5/gX1QNjRCxm2VE1iCpqlJtAwNT8UF5GclVBa9BcJZ
-VHebNPmn0mNUap4CXL5lmKS0tQIDAQABo4IBbzCCAWswCQYDVR0TBAIwADARBglg
+eUzC/kle7RlA6CjkR3Zva5QaQOQBmcqcJhss5qcLWlfq8RFg+8DloCWgHMDKVFn+
-hkgBhvhCAQEEBAMCBkAwNAYJYIZIAYb4QgENBCcWJUVhc3ktUlNBIEdlbmVyYXRl
+vn3achlYGeJf49D28fKXL25Smr8Xwq8hAR7R0i8mCQxoLydDUgtpLoWPpTA15T3l
-ZCBTZXJ2ZXIgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFB/gV8rLdsnEhrnqaRfA81HO
+kwGcXRSyCggDNWlqceLhvuJVdSi9z34rkB+9ZFaeYsZIK0BBY1JS2P9lArevWBfm
-lUDsMIHTBgNVHSMEgcswgciAFNyl8XbbTs2O77EjVh2SgJl0O+pvoYGkpIGhMIGe
+9rwfbeWL61+2YU7V/j7i3dyS1Sn7AgMBAAGjgZQwgZEwCQYDVR0TBAIwADAdBgNV
-MQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFTATBgNVBAcTDFNhbkZyYW5jaXNj
+HQ4EFgQUx2eONLcZx3pmqbWUEwQWKga+3lkwHwYDVR0jBBgwFoAUUe8O6SzI/vAi
-bzERMA8GA1UEChMIRXZpbCBJbmMxETAPBgNVBAsTCGNoYW5nZW1lMREwDwYDVQQD
+2cDZXoYR/UShQS4wEwYDVR0lBAwwCgYIKwYBBQUHAwEwLwYDVR0RBCgwJoIBKoIJ
-EwhjaGFuZ2VtZTERMA8GA1UEKRMIY2hhbmdlbWUxHzAdBgkqhkiG9w0BCQEWEG1h
+bG9jYWxob3N0hwR/AAABhxAAAAAAAAAAAAAAAAAAAAABMA0GCSqGSIb3DQEBCwUA
-aWxAaG9zdC5kb21haW6CCQDnIR4YQRuWgzATBgNVHSUEDDAKBggrBgEFBQcDATAL
+A4IBAQB/e0atEo17qnsZRDgYlwZgjA4TErzcP4Qh6yEuhBqED4j9PGDvcZ3sKS56
-BgNVHQ8EBAMCBaAwDQYJKoZIhvcNAQEFBQADgYEABJMOKAGUGPCMfNMMrem3RrEw
+wcKJ1CCFStF8lEHRq4Y3t12tGsij4XY7vQgs6dLZTJWq5Jae43p/b3unxTHIflmC
-Ze1ofIyRzRqGZodKT8CXvPeFSzh5MbJliLF2Fp6Akzj0uetlAG27ieChv5VegBOO
+hSAzH+8TwcvKH7kYjjCvqMZrwL8EMxbp3gnYdm6gTPuKoFOZRoTCWZQ/1ucyu7E3
-AXPT8QhzhaUzdQtCiqMHCTXv18ZY62CjBomgU5niqkGQ4BrSEktIfcOcrb0OXl/3
+AHPOn+gOlCpEET7aiMdlb/C0Vdfgzzjem/TK1K2jL7J/+JtczZhZIBk+0h+hlZmp
-CQxdfIYk3ZLVsxQGx58=
+cOhSp9HyR/3tgKuc05+yVCTVlgXfZFS18CZWzmsHspMFn7VDnHHD1FnjtcJnPUWk
+VV/JlJOmJJbAejO8EekLvw1NJZ7G
 -----END CERTIFICATE-----

integration-cli/fixtures/https/server-rogue-key.pem

@@ -1,16 +1,28 @@
 -----BEGIN PRIVATE KEY-----
-MIICdgIBADANBgkqhkiG9w0BAQEFAASCAmAwggJcAgEAAoGBANEIWCRgoWllS3ZG
+MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCIUNW3py8kNaIb
-j4h1fEk62APMW1jF0bvl+VS5dWXffrv7VNSy6W9YoqSEQ5R3JIE4NjbwZmUm5Vsq
+Wmittaup3XIbFYdoNrL13QTxdL9LevzxgqHwZO/8q7I+kyMkVMVbOUN7xC1M3JDV
-FByprld/dQAjFEthWOSCqhWXlL1QNQ1dGBjtEGq702Ra6zaYW1in/mdIwWw/US8C
+DS5/gX1QNjRCxm2VE1iCpqlJtAwNT8UF5GclVBa9BcJZeUzC/kle7RlA6CjkR3Zv
-ZZZUd5s0+afSY1RqngJcvmWYpLS1AgMBAAECgYAJXh9dGfuB1qlIFqduDR3RxlJR
+a5QaQOQBmcqcJhss5qcLWlfq8RFg+8DloCWgHMDKVFn+vn3achlYGeJf49D28fKX
-8UGSu+LHUeoXkuwg8aAjWoMVuSLe+5DmYIsKx0AajmNXmPRtyg1zRXJ7SltmubJ8
+L25Smr8Xwq8hAR7R0i8mCQxoLydDUgtpLoWPpTA15T3lkwGcXRSyCggDNWlqceLh
-6qQVDsRk6biMdkpkl6a9Gk2av40psD9/VPGxagEoop7IKYhf3AeKPvPiwVB2qFrl
+vuJVdSi9z34rkB+9ZFaeYsZIK0BBY1JS2P9lArevWBfm9rwfbeWL61+2YU7V/j7i
-1aYMZm0aMR55pgRajQJBAOk8IsJDf0beooDZXVdv/oe4hcbM9fxO8Cn3qzoGImqD
+3dyS1Sn7AgMBAAECggEAPsFQEnNyHW5fic4uYMJBHDtpW5SmuNBtxQiSTQKdSod9
-37LL+PCzDP7AEV3fk43SsZDeSk+LDX+h0o9nPyhzHasCQQDlb3aDgcQY9NaGLUWO
+SUYFfWFKpnz42xvr0r7/+IY9Tg47eKYWOy8NV//qC/JYTuGA819roQJO7zJnVf2C
-moOCB3148eBVcAwCocu+OSkf7sbQdvXxgThBOrZl11wwRIMQqh99c2yeUwj+tELl
+S7shzSqQKUcsePqB30cnyf7HYH1Azg8kNBlHnmp/TUla4FYerqYlAvH9hZijkozH
-3VcfAkBZTiNpCvtDIaBLge9RuZpWUXs3wec2cutWxnSTxSGMc25GQf/R+l0xdk2w
+6/Mt7GIEa1MpAdGlh5N7zsfqPysmYUOjf6ze7rTWqUEPPwvlbYYSJNIvTsL1XfqN
-ChmvpktDUzpU9sN2aXn8WuY+EMX9AkEApbLpUbKPUELLB958RLA819TW/lkZXjrs
+ZH2o0mk7tVCIaz2VQBf9pxtJUs5KxOT+yr7BVKKFMxW7jt82xOrX1QzW4q/DMt6x
-wZ3eSoR3ufM1rOqtVvyvBxUDE+wETWu9iHSFB5Ir2PA5J9JCGkbPmwJAFI1ndfBj
+zU2khf9ummth1PDkhKmD5qnfJVklHN6aCUKz/NqEYQKBgQC2MICcyfJKLB7d0Faa
-iuyU93nFX0p+JE2wVHKx4dMzKCearNKiJh/lGDtUq3REGgamTNUnG8RAITUbxFs+
+HE4p2AG4arHvgmzWi2+nXkRq3OXk4CS0mq85tXS7Ks+98Eeh/DYckBsV+b3ql0vF
-Z1hrIq8xYl2LOQ==
+cBbpvttPVyaQyu7uqG6zfl7HkbmDHxm5MFsRsLZuhKfXJUy85DbDx1wB280Npk7Z
+l6F1Prz9IfmHEeeS+QUVR9gQUQKBgQC/ipzVSAjff3AAywQNcci13Bc9IhO0F0ui
+ZxhdEvhLpHF8IaBp5drUsnq1Z76PjuTykV7UXcxrhC4zU+3iWGcBuqf59pFZPsJq
+biCkG43MZm3YdXUa/byimEqwmvmh9CImycaGSV7SDHGGC6cMqYAnblnSPXLvJQPI
+6GO8FonuiwKBgGZ+cMxD2/eYTKES5LV8OQjXSVh7RbDtWdd0yBKLOMg5j2esJVop
+L2yyxYHKOuaq91GMttBozaQWRJ5mES14upszUOOYrsyELdi7jtORwzZYp9m5NFp3
+drRECs2v+VBS3pHhfWG0lPFCu1/zcKZ+5Ek2S1HIvD0deH65cv+e1FGRAoGBAICB
+fcE2KAXSmRFfI2Plv/QLKmgwcam0q2DU7CqdrIoLVLwkT1xdAxkKeXs1lEr6Yq4/
+S7ENETXdI6X6HDJsfwdQ9JumilOm4IbJRgr0FYlZ+z5rZ1rpe2JW7F1aTDsU8Mi3
+PQMhPIWOJaf6L2Q2YC2UQpzj7zV0zvo+t5McSAQLAoGBAKzxLJHw11sPxmdtAADL
+7JqW9Q7642QKncND6TU2oH94ZpTT7YsPIBFw7/dIZ+JqUjLIyivAgNI16s3WsTmr
+8zFBNac8pPMfLnsRSx5xS93jMtlWfJOuXXbe5E30iSs5TpEEufVr04bHlqIUnqoD
+cmVXHAMW9cUCqID9YV9Tn2AE
 -----END PRIVATE KEY-----