tests: added CRL decoding unit tests using certtool

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

5 files changed, 753 insertions, 2 deletions

diff --git a/tests/cert-tests/Makefile.am b/tests/cert-tests/Makefile.am
index 0bea3b89bf..a77787ea15 100644
--- a/tests/cert-tests/Makefile.am
+++ b/tests/cert-tests/Makefile.am
@@ -40,7 +40,7 @@ EXTRA_DIST = data/ca-no-pathlen.pem data/no-ca-or-pathlen.pem data/aki-cert.pem
 	templates/template-unique.tmpl data/template-unique.pem \
 	templates/template-othername.tmpl data/template-othername.pem \
 	templates/template-othername-xmpp.tmpl data/template-othername-xmpp.pem \
-	templates/template-krb5name.tmpl \
+	templates/template-krb5name.tmpl data/crl-demo1.pem data/crl-demo2.pem data/crl-demo3.pem \
 	data/template-krb5name.pem data/template-krb5name-full.pem data/template-test-ecc.key \
 	data/template-rsa-sha3-256.pem data/template-rsa-sha3-512.pem data/template-rsa-sha3-224.pem \
 	data/template-rsa-sha3-384.pem data/long-oids.pem \
@@ -75,7 +75,7 @@ dist_check_SCRIPTS = pathlen aki certtool invalid-sig email \
 	provable-dh userid sha2-test sha2-dsa-test provable-privkey-dsa2048 \
 	provable-privkey-rsa2048 provable-privkey-gen-default pkcs7-constraints \
 	pkcs7-constraints2 certtool-long-oids pkcs7-cat cert-sanity cert-critical \
-	pkcs12
+	pkcs12 certtool-crl-decoding
 
 if WANT_TEST_SUITE
 dist_check_SCRIPTS += provable-dh-default
diff --git a/tests/cert-tests/certtool-crl-decoding b/tests/cert-tests/certtool-crl-decoding
new file mode 100755
index 0000000000..a5fc2a3be1
--- /dev/null
+++ b/tests/cert-tests/certtool-crl-decoding
@@ -0,0 +1,61 @@
+#!/bin/sh
+
+# Copyright (C) 2016 Red Hat, Inc.
+#
+# This file is part of GnuTLS.
+#
+# GnuTLS is free software; you can redistribute it and/or modify it
+# under the terms of the GNU General Public License as published by the
+# Free Software Foundation; either version 3 of the License, or (at
+# your option) any later version.
+#
+# GnuTLS is distributed in the hope that it will be useful, but
+# WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with GnuTLS; if not, write to the Free Software Foundation,
+# Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+#set -e
+
+# This checks whether OIDs > 2^32 are correctly decoded.
+
+srcdir="${srcdir:-.}"
+CERTTOOL="${CERTTOOL:-../../src/certtool${EXEEXT}}"
+DIFF="${DIFF:-diff -b -B}"
+OUTFILE="crl.$$.pem"
+
+if ! test -x "${CERTTOOL}"; then
+	exit 77
+fi
+
+if ! test -z "${VALGRIND}"; then
+	VALGRIND="${LIBTOOL:-libtool} --mode=execute ${VALGRIND} --error-exitcode=3"
+fi
+
+# crl-demo1.pem: version 2 CRL with a single extension
+# crl-demo2.pem: version 2 CRL with two extensions (one critical)
+# crl-demo3.pem: version 1 CRL with many revoked certificates
+
+for i in "crl-demo1.pem" "crl-demo2.pem" "crl-demo3.pem";do
+${VALGRIND} "${CERTTOOL}" --crl-info --infile "${srcdir}/data/$i" >$OUTFILE
+rc=$?
+
+if test "${rc}" != 0;then
+	echo "Could not read CRL $i"
+	exit 1
+fi
+
+$DIFF ${OUTFILE} "${srcdir}/data/$i"
+if test $? != 0;then
+	echo "Error in parsing cert with long OIDs"
+	exit 1
+fi
+
+done
+
+rm -f "$OUTFILE"
+
+exit 0
diff --git a/tests/cert-tests/data/crl-demo1.pem b/tests/cert-tests/data/crl-demo1.pem
new file mode 100644
index 0000000000..c4fb6f6591
--- /dev/null
+++ b/tests/cert-tests/data/crl-demo1.pem
@@ -0,0 +1,45 @@
+X.509 Certificate Revocation List Information:
+	Version: 2
+	Issuer: CN=Trust Anchor,O=Test Certificates 2011,C=US
+	Update dates:
+		Issued: Fri Jan 01 08:30:00 UTC 2010
+		Next at: Tue Dec 31 08:30:00 UTC 2030
+	Extensions:
+		Authority Key Identifier (not critical):
+			e47d5fd15c9586082c05aebe75b665a7d95da866
+		CRL Number (not critical): 01
+	Revoked certificates (1):
+		Serial Number (hex): 68
+		Revoked at: Fri Jan 01 08:30:00 UTC 2010
+	Signature Algorithm: RSA-SHA256
+	Signature:
+		ab:19:1d:b5:bb:21:6b:b6:e1:4c:cd:f0:b7:37:9e:95
+		38:d1:d4:81:90:80:ae:11:f0:fb:1c:d9:fc:36:34:ec
+		9d:96:af:0f:79:27:37:aa:2b:47:57:a9:b8:76:a1:f3
+		72:14:25:ca:d6:29:ac:e2:b8:75:18:ad:12:1f:91:61
+		8e:14:29:43:6e:f8:e4:10:e5:51:4b:4a:fb:82:d1:6b
+		f7:c6:7d:b0:db:d5:6a:a5:0b:5a:bc:11:5f:27:c2:ec
+		b7:de:76:d2:97:9c:7b:ac:7c:e9:f0:7d:2f:a5:4f:e1
+		83:46:22:b2:dc:fb:b8:44:8c:40:c0:2c:9b:3e:b6:d3
+		e8:c4:d3:57:18:c0:29:41:08:b9:c7:26:44:92:c5:d0
+		02:8e:b4:65:d1:ff:af:de:65:75:50:9a:ed:4d:8e:55
+		73:b5:30:2b:99:95:64:11:96:a9:74:06:2d:c2:cc:4d
+		ba:71:6d:63:71:c1:1d:53:ac:90:d0:e3:4a:36:e4:4e
+		47:ee:8d:b1:76:76:42:6d:82:94:71:06:58:52:40:67
+		f0:96:07:b3:63:43:d9:9a:36:4a:22:a1:96:f8:20:1d
+		80:28:f2:81:71:bd:26:4f:74:d8:b2:98:13:f3:37:19
+		48:fe:43:2c:2f:22:54:ea:dc:c7:64:8b:4a:f7:77:e6
+
+-----BEGIN X509 CRL-----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+-----END X509 CRL-----
diff --git a/tests/cert-tests/data/crl-demo2.pem b/tests/cert-tests/data/crl-demo2.pem
new file mode 100644
index 0000000000..9e69263acf
--- /dev/null
+++ b/tests/cert-tests/data/crl-demo2.pem
@@ -0,0 +1,45 @@
+X.509 Certificate Revocation List Information:
+	Version: 2
+	Issuer: CN=deltaCRL CA3,O=Test Certificates 2011,C=US
+	Update dates:
+		Issued: Tue Jun 01 08:30:00 UTC 2010
+		Next at: Tue Dec 31 08:30:00 UTC 2030
+	Extensions:
+		Authority Key Identifier (not critical):
+			ef63d3a84eb1f9df61e20dc305a39818d29399e7
+		Unknown extension 2.5.29.27 (critical):
+			ASCII: ...
+			Hexdump: 020102
+		CRL Number (not critical): 03
+	No revoked certificates.
+	Signature Algorithm: RSA-SHA256
+	Signature:
+		cb:bc:a5:6a:ce:79:92:aa:33:9e:5a:96:4b:d7:0e:e9
+		0f:c4:0b:b7:4f:89:92:85:e1:2c:e9:df:6e:8b:a8:2b
+		38:91:dd:7a:55:b8:b7:9a:1c:fb:04:fd:a2:1d:28:ce
+		d0:09:5a:32:79:86:49:83:a5:9f:34:04:b6:e0:fa:36
+		54:01:d5:18:6e:58:7d:64:09:60:1a:40:f5:d4:e0:ae
+		27:30:97:6e:1e:e1:a3:a2:99:08:c6:73:7c:04:63:df
+		5c:66:de:38:97:e5:d0:50:d0:33:ce:2f:91:10:89:e0
+		ec:2a:db:7d:c9:bc:42:03:08:48:5d:91:8b:0e:c1:0a
+		fe:75:4a:8f:36:44:75:97:3e:df:1a:db:24:aa:97:b7
+		6a:8b:64:43:70:eb:4b:fd:70:b8:14:6e:4e:65:cb:28
+		36:72:eb:72:1d:01:ef:93:4e:9f:32:ba:09:e5:f5:01
+		1d:60:45:ef:32:02:c2:84:b7:b9:ed:96:8e:15:50:84
+		f3:7e:3d:ae:48:62:92:f9:c5:58:87:dc:d6:cb:76:12
+		c0:6b:39:a3:b0:a8:55:2b:65:17:95:83:aa:b1:c3:10
+		d2:7f:61:68:20:d6:8b:21:7e:c4:0a:41:01:06:64:21
+		f5:2c:84:cf:c0:57:c1:a6:e8:23:cc:f4:f2:8b:d1:ce
+
+-----BEGIN X509 CRL-----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+-----END X509 CRL-----
diff --git a/tests/cert-tests/data/crl-demo3.pem b/tests/cert-tests/data/crl-demo3.pem
new file mode 100644
index 0000000000..1e04338c67
--- /dev/null
+++ b/tests/cert-tests/data/crl-demo3.pem
@@ -0,0 +1,600 @@
+X.509 Certificate Revocation List Information:
+	Version: 1 (default)
+	Issuer: OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet
+	Update dates:
+		Issued: Wed Mar 08 09:00:11 UTC 2017
+		Next at: Fri Apr 07 09:00:11 UTC 2017
+	Revoked certificates (210):
+		Serial Number (hex): 0122b8b2f37642cc4871b611bfd1cfda
+		Revoked at: Mon Apr 15 15:40:24 UTC 2002
+		Serial Number (hex): 018393fb96de1d894ec3479ce1601363
+		Revoked at: Thu May 09 13:57:58 UTC 2002
+		Serial Number (hex): 01dcdb63d4c99f31b816f92cf5b1088e
+		Revoked at: Thu Apr 18 17:46:14 UTC 2002
+		Serial Number (hex): 021aa6af9471f0076ef117e4d41782db
+		Revoked at: Fri Jul 19 21:28:31 UTC 2002
+		Serial Number (hex): 024ce89dfd5f774d4bf5798bb10867ac
+		Revoked at: Tue Feb 12 06:16:50 UTC 2002
+		Serial Number (hex): 0259ae6c4c21f1594987b095f965f320
+		Revoked at: Thu Jun 19 08:04:47 UTC 2003
+		Serial Number (hex): 033c410e2f425c322cb135fee76197a5
+		Revoked at: Wed Apr 24 19:47:02 UTC 2002
+		Serial Number (hex): 034e68fa8bb28eb972ea72e53b15ac8b
+		Revoked at: Thu Sep 26 21:51:51 UTC 2002
+		Serial Number (hex): 03c9a8e348b05fcf08eeb993f9e9af0c
+		Revoked at: Thu Apr 18 13:49:22 UTC 2002
+		Serial Number (hex): 049b236a375c06980a31c886dc3a95cc
+		Revoked at: Tue Oct 01 22:10:56 UTC 2002
+		Serial Number (hex): 0608bac7acf85a7ca1f42585bb4e8c4f
+		Revoked at: Fri Jan 03 07:57:14 UTC 2003
+		Serial Number (hex): 0766224a4a9dff6eb5110ba994fc6820
+		Revoked at: Thu Aug 22 01:40:12 UTC 2002
+		Serial Number (hex): 078fa14db5fc0cc64272883776294431
+		Revoked at: Fri Mar 15 20:19:49 UTC 2002
+		Serial Number (hex): 07b9d9421981c4fd494f72cef2f86d76
+		Revoked at: Fri Feb 15 15:37:19 UTC 2002
+		Serial Number (hex): 086ef96c7fbfbcc88670623fe9c42f2b
+		Revoked at: Thu Nov 28 00:28:14 UTC 2002
+		Serial Number (hex): 0908e4aaf52d2bc0159e008b3f9793f9
+		Revoked at: Wed Feb 12 22:00:23 UTC 2003
+		Serial Number (hex): 09130a4f0f88e55005c35ff4ff1539dd
+		Revoked at: Wed Mar 06 08:11:30 UTC 2002
+		Serial Number (hex): 098ddd37dae784039d9896f8883a55ca
+		Revoked at: Thu Feb 21 23:35:26 UTC 2002
+		Serial Number (hex): 0a350cd7f453e6c14ef22ad3cef87ce7
+		Revoked at: Fri Aug 02 22:24:28 UTC 2002
+		Serial Number (hex): 0b9cb8f8fb3538f291fda1e9694ab124
+		Revoked at: Tue Apr 08 01:02:22 UTC 2003
+		Serial Number (hex): 0c2f7f3215e02f74fa052267bc8a2dd0
+		Revoked at: Tue Feb 26 19:07:54 UTC 2002
+		Serial Number (hex): 0c325b7832c67cd8dd2591224d840a94
+		Revoked at: Mon Mar 18 12:39:03 UTC 2002
+		Serial Number (hex): 0d7636b91c72b79ddfa53582c5a8f7bb
+		Revoked at: Tue Aug 27 21:42:11 UTC 2002
+		Serial Number (hex): 0f28799856b8a55eeb795f1bed0b8676
+		Revoked at: Wed Mar 13 01:10:47 UTC 2002
+		Serial Number (hex): 0f803c24f4622724be6a749c188e4b3b
+		Revoked at: Wed Nov 20 17:11:35 UTC 2002
+		Serial Number (hex): 0ff2a78c809cbe2fc8a9ebfe94865a5c
+		Revoked at: Thu Jun 20 19:58:45 UTC 2002
+		Serial Number (hex): 1045133545f3c6028d8d18b1c40a7a18
+		Revoked at: Fri Apr 26 17:32:59 UTC 2002
+		Serial Number (hex): 1079b1711b269892081e3ce48b2937f9
+		Revoked at: Thu Mar 28 16:32:55 UTC 2002
+		Serial Number (hex): 11388077cb6be5d6a7f299a1c8e94025
+		Revoked at: Fri Apr 19 12:24:17 UTC 2002
+		Serial Number (hex): 117ac382fe74361121d6928609dfe6f3
+		Revoked at: Tue Feb 19 15:11:36 UTC 2002
+		Serial Number (hex): 11ab8e21287f6df2c1c8403ea5de98d3
+		Revoked at: Thu May 02 18:44:31 UTC 2002
+		Serial Number (hex): 123c38ae3f64533af7bc6c27e29c6575
+		Revoked at: Wed Feb 13 23:08:59 UTC 2002
+		Serial Number (hex): 1288b66c9bcfe75092d287638fb7a6e3
+		Revoked at: Tue Jul 02 20:55:03 UTC 2002
+		Serial Number (hex): 12954eb68f3a196a16734f6e15baa5e7
+		Revoked at: Mon Jun 17 18:56:01 UTC 2002
+		Serial Number (hex): 13370b418c31431c27aae1830f9921cd
+		Revoked at: Mon Jul 22 12:17:16 UTC 2002
+		Serial Number (hex): 147a290a0938f45328336f3707231210
+		Revoked at: Fri Feb 22 02:00:14 UTC 2002
+		Serial Number (hex): 1504811ee26ff0d8dd12550566516e1a
+		Revoked at: Wed Mar 13 10:53:08 UTC 2002
+		Serial Number (hex): 15300d8abd0e890e664f4993a28fbc2e
+		Revoked at: Thu Apr 04 06:42:23 UTC 2002
+		Serial Number (hex): 16be64d64f90f4f72bc8ca675c8213e8
+		Revoked at: Thu Jun 06 19:09:07 UTC 2002
+		Serial Number (hex): 18519ce4486206feb82d93b7c9c91b4e
+		Revoked at: Wed Apr 17 05:00:44 UTC 2002
+		Serial Number (hex): 1982db397400383659f6ccc1238d40e9
+		Revoked at: Wed Mar 06 07:54:54 UTC 2002
+		Serial Number (hex): 1b5190f73724399c9254cd424637996a
+		Revoked at: Tue Jan 30 00:00:00 UTC 2001
+		Serial Number (hex): 1be4b2bbb6745d6b8b04b6a01b35eb29
+		Revoked at: Wed Sep 25 20:14:56 UTC 2002
+		Serial Number (hex): 1c1dd52af6aafdbb47c27336cf53bd81
+		Revoked at: Wed Feb 13 19:03:42 UTC 2002
+		Serial Number (hex): 1cb05a1ffda698f646f932109eef528e
+		Revoked at: Thu Jun 27 13:03:22 UTC 2002
+		Serial Number (hex): 1d01fca7ddb40c64bd6545e6bf1c7e90
+		Revoked at: Thu Feb 21 04:20:06 UTC 2002
+		Serial Number (hex): 1e4dc9c66e57da8a079770faee9cc558
+		Revoked at: Tue Feb 19 22:34:21 UTC 2002
+		Serial Number (hex): 1ebb9b2861507f1230fb02b5e1b07e9d
+		Revoked at: Wed Mar 06 00:04:20 UTC 2002
+		Serial Number (hex): 1f5a64c9a5518ce22d5083c24c7ce785
+		Revoked at: Sat Aug 24 06:31:28 UTC 2002
+		Serial Number (hex): 1fc24ed0ac52d339186dd00f23d74572
+		Revoked at: Thu Feb 28 19:15:42 UTC 2002
+		Serial Number (hex): 24607a8e0e86a48868afd90c6bbaff
+		Revoked at: Thu Feb 28 05:18:24 UTC 2002
+		Serial Number (hex): 204173bb72886e4b1cb6700267aa3b3d
+		Revoked at: Tue Sep 03 17:06:21 UTC 2002
+		Serial Number (hex): 206e0ddc8ca4acf708775c80f9a36892
+		Revoked at: Wed Apr 10 20:57:16 UTC 2002
+		Serial Number (hex): 21e46b984791e602dfb245bc3137a07c
+		Revoked at: Fri Mar 08 23:23:13 UTC 2002
+		Serial Number (hex): 2200957079f99c3491bb84b991de2255
+		Revoked at: Wed Feb 13 06:59:39 UTC 2002
+		Serial Number (hex): 22f9674fcd29c6dcc8226ee90aa1485a
+		Revoked at: Wed Apr 03 00:43:26 UTC 2002
+		Serial Number (hex): 24a3a7d0b81d1cf7e61f6ebac99859ed
+		Revoked at: Thu Jul 24 20:58:02 UTC 2003
+		Serial Number (hex): 24ef89a1304f5163fedbdb646e4c5a81
+		Revoked at: Wed Jul 03 09:21:17 UTC 2002
+		Serial Number (hex): 2508e5acdd6f7444511af5dbf8ba25e0
+		Revoked at: Tue Apr 09 04:16:22 UTC 2002
+		Serial Number (hex): 2581e8186088bc1ae91484edd462f547
+		Revoked at: Fri Aug 23 01:57:19 UTC 2002
+		Serial Number (hex): 26e55cab16ec6138492cd2b14889d547
+		Revoked at: Wed Mar 13 18:00:38 UTC 2002
+		Serial Number (hex): 27beda7f4f1f6c7609c09aafd468e216
+		Revoked at: Fri May 10 18:32:30 UTC 2002
+		Serial Number (hex): 2889d0b3b5c456369b3e811a2156aa42
+		Revoked at: Mon Nov 04 11:03:08 UTC 2002
+		Serial Number (hex): 28ab9306b11e05e0e12575c774cb55a6
+		Revoked at: Fri Jan 24 19:48:23 UTC 2003
+		Serial Number (hex): 29e93b448dc34b8017dae41c43968359
+		Revoked at: Fri Jun 07 21:43:39 UTC 2002
+		Serial Number (hex): 2a08642b48e217896a0cf97e10668fe7
+		Revoked at: Mon Aug 19 18:35:29 UTC 2002
+		Serial Number (hex): 2a44ee915de3a52b09f35659e08f2522
+		Revoked at: Thu Feb 21 19:31:24 UTC 2002
+		Serial Number (hex): 2a8b4ea5b606c8483b0e711e6bf416c1
+		Revoked at: Tue Apr 30 09:21:18 UTC 2002
+		Serial Number (hex): 2b03fc2fc28e38296fa10fe9471b35d7
+		Revoked at: Thu Nov 14 20:18:33 UTC 2002
+		Serial Number (hex): 2c48f7d6d571c0d1bd6a00651d2da9dd
+		Revoked at: Wed Mar 06 17:20:43 UTC 2002
+		Serial Number (hex): 2cbf841de4583279321037ded794ff85
+		Revoked at: Fri Feb 22 19:02:25 UTC 2002
+		Serial Number (hex): 2d03543554452c6d39f01b7468decf93
+		Revoked at: Mon Sep 23 13:23:37 UTC 2002
+		Serial Number (hex): 2d2494341992b1f2379d6ec53593ddf0
+		Revoked at: Fri Mar 15 17:17:27 UTC 2002
+		Serial Number (hex): 2d4724618791ba2ef2f79221f31b8b1e
+		Revoked at: Tue May 14 23:08:22 UTC 2002
+		Serial Number (hex): 2d84c2b101a13a6fb03013765a69ec41
+		Revoked at: Mon Jul 15 17:29:23 UTC 2002
+		Serial Number (hex): 2dd526c3cd01cefd67b808ac5a70c434
+		Revoked at: Wed Feb 27 04:46:14 UTC 2002
+		Serial Number (hex): 2e2b0a944df1a437b7a39b4b9626a8e3
+		Revoked at: Thu Jan 09 06:28:28 UTC 2003
+		Serial Number (hex): 2e3130c12e1631d92b0a70ca3f317362
+		Revoked at: Wed Jan 29 01:49:27 UTC 2003
+		Serial Number (hex): 2ebd6ddfce206fe7a8f4f3259cc3c112
+		Revoked at: Fri Sep 20 13:54:42 UTC 2002
+		Serial Number (hex): 2f561622ba87d5fdffe6b0dd3c08262c
+		Revoked at: Wed Mar 13 17:53:11 UTC 2002
+		Serial Number (hex): 303e777beccb892c15557f20f233c11e
+		Revoked at: Thu Feb 21 23:50:49 UTC 2002
+		Serial Number (hex): 30596caa5fd3ac50862cc4fa3c4850d1
+		Revoked at: Thu Feb 21 04:19:35 UTC 2002
+		Serial Number (hex): 30ce9af1fa17faf54cbc528af4262b7b
+		Revoked at: Fri Mar 01 19:12:39 UTC 2002
+		Serial Number (hex): 31164a6a2e6d344dd240f05f47e65b47
+		Revoked at: Tue Feb 12 17:38:52 UTC 2002
+		Serial Number (hex): 31db975b06630bd8fe06b3f5f9640a59
+		Revoked at: Tue Feb 12 15:59:23 UTC 2002
+		Serial Number (hex): 32bceb0cca65063fa4d54a56467c2209
+		Revoked at: Fri Aug 16 07:33:55 UTC 2002
+		Serial Number (hex): 3317efe189ec1125158f3b677a640b50
+		Revoked at: Wed Sep 18 17:03:46 UTC 2002
+		Serial Number (hex): 3424a0d20061ebd39aa72a66b4822377
+		Revoked at: Fri Mar 15 22:43:39 UTC 2002
+		Serial Number (hex): 34a81667a51ba331115e26c83f2138be
+		Revoked at: Thu Mar 21 21:16:21 UTC 2002
+		Serial Number (hex): 363abe055552934f325f3063c0d450df
+		Revoked at: Fri Mar 08 11:46:14 UTC 2002
+		Serial Number (hex): 3719cca59d850556e163424b0d3cbfd6
+		Revoked at: Wed Jan 08 18:58:24 UTC 2003
+		Serial Number (hex): 372ffd2bec4d943551f4072af50b97c4
+		Revoked at: Wed Feb 13 19:18:01 UTC 2002
+		Serial Number (hex): 3783f51e7ef45fad1f0c5586300254c1
+		Revoked at: Wed Jan 08 20:03:44 UTC 2003
+		Serial Number (hex): 38323e502b369301320a598cceada0eb
+		Revoked at: Tue Apr 30 21:24:08 UTC 2002
+		Serial Number (hex): 3a62d864d385d5611d9d3f6125e93a1d
+		Revoked at: Mon Jun 17 15:19:16 UTC 2002
+		Serial Number (hex): 3a9736b126147350a3cc3fd03b8399c9
+		Revoked at: Wed Sep 11 03:29:30 UTC 2002
+		Serial Number (hex): 3b873e20be97ffa76b2b5fff9a7f4c95
+		Revoked at: Wed Jul 03 00:31:47 UTC 2002
+		Serial Number (hex): 3bbae5f22399c6d7aee2980da4135cd4
+		Revoked at: Fri May 24 19:28:45 UTC 2002
+		Serial Number (hex): 3bc27cf0bdd29a6f97dd76bca96c450d
+		Revoked at: Fri Mar 08 10:42:03 UTC 2002
+		Serial Number (hex): 3bc5da41647a378e9f7f1f9b250ab4da
+		Revoked at: Wed Mar 06 13:24:48 UTC 2002
+		Serial Number (hex): 3c1bf19a48b0b8a045d58f0f5790c2cd
+		Revoked at: Mon Mar 18 06:43:23 UTC 2002
+		Serial Number (hex): 3d154880b4fe517eed46ae51fd4773de
+		Revoked at: Tue Aug 27 09:20:08 UTC 2002
+		Serial Number (hex): 3d614e87ea3902f31e3e565c0e3ba7e3
+		Revoked at: Tue Oct 29 19:54:12 UTC 2002
+		Serial Number (hex): 3ddd619282696b01790eef9612a37680
+		Revoked at: Wed May 01 22:24:16 UTC 2002
+		Serial Number (hex): 3e0e147155f348091b563b917a7decc9
+		Revoked at: Mon Mar 11 21:45:51 UTC 2002
+		Serial Number (hex): 3e23001f9bbde8b1f00667a670422ec3
+		Revoked at: Thu Aug 08 12:21:32 UTC 2002
+		Serial Number (hex): 41911a8cde2db3eb791dc79999be0c0e
+		Revoked at: Mon Feb 25 19:18:54 UTC 2002
+		Serial Number (hex): 41a8d79c105e5aac167f93aad1833455
+		Revoked at: Wed Apr 10 12:53:40 UTC 2002
+		Serial Number (hex): 428896b07b28a2fa2f917358a71e537c
+		Revoked at: Sat Mar 01 09:43:31 UTC 2003
+		Serial Number (hex): 42932fd254d394d0416a2e338b81b43c
+		Revoked at: Thu Aug 08 00:48:46 UTC 2002
+		Serial Number (hex): 4424ddba85fd3eb2b81774fd9d5c0cbd
+		Revoked at: Sat Sep 21 16:09:12 UTC 2002
+		Serial Number (hex): 4502187d399cb914fb103796f4c1dd2f
+		Revoked at: Mon Feb 11 11:11:06 UTC 2002
+		Serial Number (hex): 4516bc310b4e870acce3d51416331183
+		Revoked at: Tue Apr 02 02:20:17 UTC 2002
+		Serial Number (hex): 461636de3fef8cfa675312cc7663d6dd
+		Revoked at: Thu Feb 14 16:59:43 UTC 2002
+		Serial Number (hex): 465f85a3a4983c4063f61cf7c2befd0e
+		Revoked at: Tue Apr 09 15:30:05 UTC 2002
+		Serial Number (hex): 4720c2d885855439cdf210f0a7885275
+		Revoked at: Tue Sep 10 22:25:27 UTC 2002
+		Serial Number (hex): 47426ea2abc5335d50440b889784594c
+		Revoked at: Tue Mar 05 14:05:19 UTC 2002
+		Serial Number (hex): 49203fa86e81c83b2605f4a79b5a8160
+		Revoked at: Thu Jul 11 17:50:48 UTC 2002
+		Serial Number (hex): 498b6f05fbcbf45aaf0947b104c5e351
+		Revoked at: Fri Apr 12 17:48:08 UTC 2002
+		Serial Number (hex): 49b2c37abf752ab313ae53c6cb455a3e
+		Revoked at: Fri Nov 15 21:35:37 UTC 2002
+		Serial Number (hex): 4b232c0ade7a36ebfe893ac7fd274600
+		Revoked at: Thu Mar 01 18:04:00 UTC 2001
+		Serial Number (hex): 4bcac3ab0ac5cd90a2be43fedd06e145
+		Revoked at: Sat Jul 20 17:32:12 UTC 2002
+		Serial Number (hex): 4c00cc73d57461629252ffde5bc155bd
+		Revoked at: Mon Aug 26 14:01:51 UTC 2002
+		Serial Number (hex): 4c59c1c3564027d4220e37f65f2650c5
+		Revoked at: Tue Feb 26 09:57:44 UTC 2002
+		Serial Number (hex): 4cca125946f92bc67d3378402c3b7a0c
+		Revoked at: Thu May 30 20:24:58 UTC 2002
+		Serial Number (hex): 4d5751359be5412c6966c721ecc62932
+		Revoked at: Thu Sep 26 04:35:56 UTC 2002
+		Serial Number (hex): 4e85ab9e1754e7420f8ca16596885354
+		Revoked at: Thu Mar 28 00:18:53 UTC 2002
+		Serial Number (hex): 503dedac2186665da51a13eefca70bc6
+		Revoked at: Mon Feb 18 13:55:49 UTC 2002
+		Serial Number (hex): 50a3819ccb22e40f80cb7aec35f87382
+		Revoked at: Sat Oct 05 16:59:59 UTC 2002
+		Serial Number (hex): 5128732617cf106eeb4a0374a335e560
+		Revoked at: Fri Jun 13 10:09:29 UTC 2003
+		Serial Number (hex): 5152ffdc696b1f1fff7cb17f0390a96b
+		Revoked at: Fri Jun 14 16:04:02 UTC 2002
+		Serial Number (hex): 52d953699fecabdd5d2a2faa5786b91f
+		Revoked at: Fri Aug 30 23:46:43 UTC 2002
+		Serial Number (hex): 5446a88f692e02f4b4b269dabd4002e0
+		Revoked at: Tue Mar 26 01:56:58 UTC 2002
+		Serial Number (hex): 54b58173b57c6dba5c990dff0a4deeef
+		Revoked at: Wed Jul 24 16:39:51 UTC 2002
+		Serial Number (hex): 579141209f576f42534e19cce4c8524a
+		Revoked at: Tue May 28 23:24:00 UTC 2002
+		Serial Number (hex): 57c6dca0edbf77dd7e186883570c2a4f
+		Revoked at: Tue May 21 14:06:11 UTC 2002
+		Serial Number (hex): 57ede25be2623f98e1f54d30a40edfdf
+		Revoked at: Sun Jun 09 01:47:18 UTC 2002
+		Serial Number (hex): 5847d9bd831a636fb7637f4a565e8e4d
+		Revoked at: Mon Apr 15 17:23:03 UTC 2002
+		Serial Number (hex): 58c6629980e60c4f008b253893e61810
+		Revoked at: Thu Jun 06 07:09:47 UTC 2002
+		Serial Number (hex): 5952090e99f3a9e52feda9b2d861e7ea
+		Revoked at: Wed Jun 26 14:18:36 UTC 2002
+		Serial Number (hex): 595caafbbefb73d1f4abc8e33d0104dd
+		Revoked at: Fri Sep 27 22:20:10 UTC 2002
+		Serial Number (hex): 599759a73db0d97eff2acb31cc66f385
+		Revoked at: Thu Aug 22 00:55:58 UTC 2002
+		Serial Number (hex): 59dd453661d93ee9ffbdad2ebf9a5d98
+		Revoked at: Tue Jul 02 20:40:03 UTC 2002
+		Serial Number (hex): 5a4b4818a92a9cd5912f4fa4f8b31b4d
+		Revoked at: Thu Apr 04 23:33:12 UTC 2002
+		Serial Number (hex): 5adf320d64eb9bd211e25850be930c65
+		Revoked at: Fri Apr 05 17:07:21 UTC 2002
+		Serial Number (hex): 5b23bfbbc4b3f402e9cb109eeea53fcd
+		Revoked at: Fri Mar 29 16:26:59 UTC 2002
+		Serial Number (hex): 5b51bc38bfaf9f27a9c7ed25d08dec2e
+		Revoked at: Fri Mar 08 10:25:20 UTC 2002
+		Serial Number (hex): 5c297f4661dd47908291bd79226a9838
+		Revoked at: Fri Nov 08 15:54:26 UTC 2002
+		Serial Number (hex): 5e38f75b00f1ef1cb6ffd55c74fb955d
+		Revoked at: Sat Nov 23 01:49:29 UTC 2002
+		Serial Number (hex): 5e88beb6b4b2aab092f3f6c2bc7221ca
+		Revoked at: Thu Feb 14 07:12:10 UTC 2002
+		Serial Number (hex): 5f59a0bbaf26c8c1b4043abbfc4c75a5
+		Revoked at: Tue Apr 16 15:51:23 UTC 2002
+		Serial Number (hex): 5f81080fa0cd447323588e499fb50835
+		Revoked at: Wed Jun 19 14:17:43 UTC 2002
+		Serial Number (hex): 5fba1f8fb22356ddbca672b09913b5b2
+		Revoked at: Mon May 06 08:47:10 UTC 2002
+		Serial Number (hex): 6009d5b76bf1164afad0a54c8edd02cb
+		Revoked at: Mon Jun 17 16:12:29 UTC 2002
+		Serial Number (hex): 601d19d855d514d5ff030dad5c074ce7
+		Revoked at: Mon Jul 15 23:01:11 UTC 2002
+		Serial Number (hex): 602467c30bad538fce8905b587af7ce4
+		Revoked at: Tue Oct 08 20:38:52 UTC 2002
+		Serial Number (hex): 605cf33d2223393fe62109fddd77c28f
+		Revoked at: Tue Jul 02 17:27:58 UTC 2002
+		Serial Number (hex): 60a25ebf0783a31856184863a7fdc763
+		Revoked at: Thu May 09 19:52:27 UTC 2002
+		Serial Number (hex): 60c2ada80ef99a665da275045e5c71c2
+		Revoked at: Tue Nov 12 13:36:17 UTC 2002
+		Serial Number (hex): 60db1d3734f6029d681b70f113002f80
+		Revoked at: Thu Feb 28 09:55:33 UTC 2002
+		Serial Number (hex): 61f038eabc170d11d289ee875057a0ed
+		Revoked at: Wed Jan 29 17:41:44 UTC 2003
+		Serial Number (hex): 61fa9beb58f9e5a59e79a83d79ac3597
+		Revoked at: Thu Oct 10 20:16:37 UTC 2002
+		Serial Number (hex): 6244572441c0893f5bd2bde72f7541fa
+		Revoked at: Thu Aug 08 18:30:15 UTC 2002
+		Serial Number (hex): 62513a2d8d823965fef68ac84e2991fd
+		Revoked at: Thu Sep 26 00:54:34 UTC 2002
+		Serial Number (hex): 62524949f251677ae2eec90c23113db2
+		Revoked at: Wed Apr 17 18:06:55 UTC 2002
+		Serial Number (hex): 6352bddcb7bfbb906c82eeb5a39fd8c9
+		Revoked at: Thu Feb 21 16:30:58 UTC 2002
+		Serial Number (hex): 635e6be9ea3dd63bc34d09c313dbddbc
+		Revoked at: Mon Jun 02 14:47:36 UTC 2003
+		Serial Number (hex): 63da0bd5131e988332a23a4bdf8c8986
+		Revoked at: Wed Sep 25 08:08:13 UTC 2002
+		Serial Number (hex): 64fef01a3aed89f8b534d31e0fce0dce
+		Revoked at: Mon Apr 08 21:06:24 UTC 2002
+		Serial Number (hex): 65a749d837224b4ae5cfa3fed63bc067
+		Revoked at: Wed Dec 04 17:14:16 UTC 2002
+		Serial Number (hex): 65c99e4776980d9e57e4aec51c3ef2e7
+		Revoked at: Mon Sep 23 14:08:18 UTC 2002
+		Serial Number (hex): 65e07bc574e4ab014fa35ed6ebcdd569
+		Revoked at: Wed Apr 03 17:24:06 UTC 2002
+		Serial Number (hex): 6651b7e562b7e331c0eef2e8fe846a4e
+		Revoked at: Fri Sep 06 13:23:33 UTC 2002
+		Serial Number (hex): 677c76ac665a6b415c078302d6d963c0
+		Revoked at: Mon Feb 18 13:55:10 UTC 2002
+		Serial Number (hex): 6867deb3aa20cf4b34a5e0c8c0c5c9a4
+		Revoked at: Tue Mar 12 01:09:26 UTC 2002
+		Serial Number (hex): 6923345d7504dc99bdce8d21b46b10fc
+		Revoked at: Tue Sep 03 13:19:20 UTC 2002
+		Serial Number (hex): 699f2031d13ffa1e702e37d59a8c0a16
+		Revoked at: Wed Feb 20 09:01:35 UTC 2002
+		Serial Number (hex): 6a94d625d067e44d792bc6d5c94a7fc6
+		Revoked at: Mon Feb 11 19:15:40 UTC 2002
+		Serial Number (hex): 6b5ca4455be9cfe73b29b132d7a1043d
+		Revoked at: Fri Oct 18 15:43:48 UTC 2002
+		Serial Number (hex): 6bc07d4f18feb707e8569a6c400f3653
+		Revoked at: Thu Sep 26 21:01:26 UTC 2002
+		Serial Number (hex): 6be1dd363bece0a9f5927e33bfed4846
+		Revoked at: Wed Apr 17 14:42:31 UTC 2002
+		Serial Number (hex): 6caceb372b6a42e2cac8d2dab8b9826a
+		Revoked at: Fri Mar 01 14:28:34 UTC 2002
+		Serial Number (hex): 6d981bb476d16259a13ceed221d8df4c
+		Revoked at: Tue May 14 17:56:12 UTC 2002
+		Serial Number (hex): 6ddd0b5a3c9cabd33bd916ec6974fb9a
+		Revoked at: Fri Feb 22 12:26:38 UTC 2002
+		Serial Number (hex): 6edefd8936aea0418d5cec2e9031f89a
+		Revoked at: Mon Apr 08 22:36:12 UTC 2002
+		Serial Number (hex): 6fb26b4c48cafee6699a0663c43296c1
+		Revoked at: Fri Jan 17 17:27:25 UTC 2003
+		Serial Number (hex): 700be1ee4489515265272c2d347ce08d
+		Revoked at: Wed Sep 18 00:36:00 UTC 2002
+		Serial Number (hex): 702dc0a6b8a5a0da4859b3963480c825
+		Revoked at: Fri Aug 30 14:01:01 UTC 2002
+		Serial Number (hex): 70e1d992cd764263516ecd8c09291748
+		Revoked at: Fri May 17 11:10:41 UTC 2002
+		Serial Number (hex): 7238e4916a7a8af3bff0d8e0a4708da8
+		Revoked at: Mon Mar 04 19:06:40 UTC 2002
+		Serial Number (hex): 7297a1d89c3b00c2c4262d062b29764e
+		Revoked at: Tue Jun 18 15:09:47 UTC 2002
+		Serial Number (hex): 72d2239bf233e97ccfb6a941d50e5c39
+		Revoked at: Wed Apr 09 17:02:29 UTC 2003
+		Serial Number (hex): 745c9cf9aac3fa943c253965449513f1
+		Revoked at: Tue Jul 09 23:53:20 UTC 2002
+		Serial Number (hex): 74987f68ad179293f265940c33e6bd49
+		Revoked at: Tue Apr 23 07:44:18 UTC 2002
+		Serial Number (hex): 750e40ff97f047edf556c7084eb1abfd
+		Revoked at: Wed Jan 31 00:00:00 UTC 2001
+		Serial Number (hex): 7526515965b733325fe6cdaa306578e0
+		Revoked at: Thu May 16 18:24:56 UTC 2002
+		Serial Number (hex): 76136fbfc8ded9363039cc858f002f19
+		Revoked at: Thu Mar 14 09:48:24 UTC 2002
+		Serial Number (hex): 7652788944fac1b3d7c94cb33295af03
+		Revoked at: Thu Nov 14 19:15:43 UTC 2002
+		Serial Number (hex): 775d4c40d98dfac89a248d4710904a0a
+		Revoked at: Thu May 09 01:13:02 UTC 2002
+		Serial Number (hex): 77e65a4359935d5f7a75801acdadc222
+		Revoked at: Thu Aug 31 18:22:50 UTC 2000
+		Serial Number (hex): 7819f1b68783afdf608d9a640dece051
+		Revoked at: Mon May 20 17:28:16 UTC 2002
+		Serial Number (hex): 7864658f8279dba51c47101d72236652
+		Revoked at: Fri Jan 24 18:45:47 UTC 2003
+		Serial Number (hex): 7864e1c0698f3ac78b23e329b1eea941
+		Revoked at: Wed May 08 17:46:26 UTC 2002
+		Serial Number (hex): 7879896112676414fd08ccb30555c067
+		Revoked at: Tue Apr 02 13:18:53 UTC 2002
+		Serial Number (hex): 788a562208ce42eed1a3791014fd3a36
+		Revoked at: Wed Feb 05 16:53:29 UTC 2003
+		Serial Number (hex): 7aa06cba3302ac5ff50bb67761ef7709
+		Revoked at: Thu Feb 28 17:55:11 UTC 2002
+		Serial Number (hex): 7b9133666cf0d4e39df688299bf7d0ea
+		Revoked at: Wed Nov 20 22:16:49 UTC 2002
+		Serial Number (hex): 7ceff20a08ae10571ededcd66376b05d
+		Revoked at: Tue Feb 26 10:22:30 UTC 2002
+		Serial Number (hex): 7f76ef69ebf53f532eaaa5eddec0b406
+		Revoked at: Wed May 01 03:33:07 UTC 2002
+		Serial Number (hex): 7fcb6b9991d076e13c0e6715c4d44d7b
+		Revoked at: Wed Apr 10 21:18:40 UTC 2002
+	Signature Algorithm: RSA-SHA1
+	Signature:
+		99:30:0e:fe:e6:33:43:cd:43:56:a9:ee:a6:a4:6e:f2
+		1e:48:31:73:70:8d:08:dd:d9:44:33:76:3b:d3:06:6f
+		ed:34:36:35:3a:b0:ea:c2:31:f3:0b:34:b2:02:ed:be
+		e2:76:60:33:91:51:e7:fe:fa:70:04:69:1f:43:ca:70
+		dd:65:e0:ee:03:c7:96:2b:fc:d6:7e:e2:e3:70:7a:15
+		66:e8:9a:8b:d2:19:b3:e5:45:54:e9:7f:98:04:d6:b2
+		3c:21:66:d8:aa:95:d3:ae:72:ea:d6:b6:72:f0:41:08
+		6d:5c:cb:8c:90:90:ba:54:42:39:b0:6c:f5:06:e7:d0
+
+-----BEGIN X509 CRL-----
+MIId4DCCHUkwDQYJKoZIhvcNAQEFBQAwYTERMA8GA1UEBxMISW50ZXJuZXQxFzAV
+BgNVBAoTDlZlcmlTaWduLCBJbmMuMTMwMQYDVQQLEypWZXJpU2lnbiBDb21tZXJj
+aWFsIFNvZnR3YXJlIFB1Ymxpc2hlcnMgQ0EXDTE3MDMwODA5MDAxMVoXDTE3MDQw
+NzA5MDAxMVowghy1MCECEAEiuLLzdkLMSHG2Eb/Rz9oXDTAyMDQxNTE1NDAyNFow
+IQIQAYOT+5beHYlOw0ec4WATYxcNMDIwNTA5MTM1NzU4WjAhAhAB3Ntj1MmfMbgW
++Sz1sQiOFw0wMjA0MTgxNzQ2MTRaMCECEAIapq+UcfAHbvEX5NQXgtsXDTAyMDcx
+OTIxMjgzMVowIQIQAkzonf1fd01L9XmLsQhnrBcNMDIwMjEyMDYxNjUwWjAhAhAC
+Wa5sTCHxWUmHsJX5ZfMgFw0wMzA2MTkwODA0NDdaMCECEAM8QQ4vQlwyLLE1/udh
+l6UXDTAyMDQyNDE5NDcwMlowIQIQA05o+ouyjrly6nLlOxWsixcNMDIwOTI2MjE1
+MTUxWjAhAhADyajjSLBfzwjuuZP56a8MFw0wMjA0MTgxMzQ5MjJaMCECEASbI2o3
+XAaYCjHIhtw6lcwXDTAyMTAwMTIyMTA1NlowIQIQBgi6x6z4Wnyh9CWFu06MTxcN
+MDMwMTAzMDc1NzE0WjAhAhAHZiJKSp3/brURC6mU/GggFw0wMjA4MjIwMTQwMTJa
+MCECEAePoU21/AzGQnKIN3YpRDEXDTAyMDMxNTIwMTk0OVowIQIQB7nZQhmBxP1J
+T3LO8vhtdhcNMDIwMjE1MTUzNzE5WjAhAhAIbvlsf7+8yIZwYj/pxC8rFw0wMjEx
+MjgwMDI4MTRaMCECEAkI5Kr1LSvAFZ4Aiz+Xk/kXDTAzMDIxMjIyMDAyM1owIQIQ
+CRMKTw+I5VAFw1/0/xU53RcNMDIwMzA2MDgxMTMwWjAhAhAJjd032ueEA52YlviI
+OlXKFw0wMjAyMjEyMzM1MjZaMCECEAo1DNf0U+bBTvIq0874fOcXDTAyMDgwMjIy
+MjQyOFowIQIQC5y4+Ps1OPKR/aHpaUqxJBcNMDMwNDA4MDEwMjIyWjAhAhAML38y
+FeAvdPoFIme8ii3QFw0wMjAyMjYxOTA3NTRaMCECEAwyW3gyxnzY3SWRIk2ECpQX
+DTAyMDMxODEyMzkwM1owIQIQDXY2uRxyt53fpTWCxaj3uxcNMDIwODI3MjE0MjEx
+WjAhAhAPKHmYVrilXut5XxvtC4Z2Fw0wMjAzMTMwMTEwNDdaMCECEA+APCT0Yick
+vmp0nBiOSzsXDTAyMTEyMDE3MTEzNVowIQIQD/KnjICcvi/Iqev+lIZaXBcNMDIw
+NjIwMTk1ODQ1WjAhAhAQRRM1RfPGAo2NGLHECnoYFw0wMjA0MjYxNzMyNTlaMCEC
+EBB5sXEbJpiSCB485IspN/kXDTAyMDMyODE2MzI1NVowIQIQETiAd8tr5dan8pmh
+yOlAJRcNMDIwNDE5MTIyNDE3WjAhAhAResOC/nQ2ESHWkoYJ3+bzFw0wMjAyMTkx
+NTExMzZaMCECEBGrjiEof23ywchAPqXemNMXDTAyMDUwMjE4NDQzMVowIQIQEjw4
+rj9kUzr3vGwn4pxldRcNMDIwMjEzMjMwODU5WjAhAhASiLZsm8/nUJLSh2OPt6bj
+Fw0wMjA3MDIyMDU1MDNaMCECEBKVTraPOhlqFnNPbhW6pecXDTAyMDYxNzE4NTYw
+MVowIQIQEzcLQYwxQxwnquGDD5khzRcNMDIwNzIyMTIxNzE2WjAhAhAUeikKCTj0
+UygzbzcHIxIQFw0wMjAyMjIwMjAwMTRaMCECEBUEgR7ib/DY3RJVBWZRbhoXDTAy
+MDMxMzEwNTMwOFowIQIQFTANir0OiQ5mT0mToo+8LhcNMDIwNDA0MDY0MjIzWjAh
+AhAWvmTWT5D09yvIymdcghPoFw0wMjA2MDYxOTA5MDdaMCECEBhRnORIYgb+uC2T
+t8nJG04XDTAyMDQxNzA1MDA0NFowIQIQGYLbOXQAODZZ9szBI41A6RcNMDIwMzA2
+MDc1NDU0WjAhAhAbUZD3NyQ5nJJUzUJGN5lqFw0wMTAxMzAwMDAwMDBaMCECEBvk
+sru2dF1riwS2oBs16ykXDTAyMDkyNTIwMTQ1NlowIQIQHB3VKvaq/btHwnM2z1O9
+gRcNMDIwMjEzMTkwMzQyWjAhAhAcsFof/aaY9kb5MhCe71KOFw0wMjA2MjcxMzAz
+MjJaMCECEB0B/KfdtAxkvWVF5r8cfpAXDTAyMDIyMTA0MjAwNlowIQIQHk3Jxm5X
+2ooHl3D67pzFWBcNMDIwMjE5MjIzNDIxWjAhAhAeu5soYVB/EjD7ArXhsH6dFw0w
+MjAzMDYwMDA0MjBaMCECEB9aZMmlUYziLVCDwkx854UXDTAyMDgyNDA2MzEyOFow
+IQIQH8JO0KxS0zkYbdAPI9dFchcNMDIwMjI4MTkxNTQyWjAgAg8kYHqODoakiGiv
+2Qxruv8XDTAyMDIyODA1MTgyNFowIQIQIEFzu3KIbksctnACZ6o7PRcNMDIwOTAz
+MTcwNjIxWjAhAhAgbg3cjKSs9wh3XID5o2iSFw0wMjA0MTAyMDU3MTZaMCECECHk
+a5hHkeYC37JFvDE3oHwXDTAyMDMwODIzMjMxM1owIQIQIgCVcHn5nDSRu4S5kd4i
+VRcNMDIwMjEzMDY1OTM5WjAhAhAi+WdPzSnG3MgibukKoUhaFw0wMjA0MDMwMDQz
+MjZaMCECECSjp9C4HRz35h9uusmYWe0XDTAzMDcyNDIwNTgwMlowIQIQJO+JoTBP
+UWP+29tkbkxagRcNMDIwNzAzMDkyMTE3WjAhAhAlCOWs3W90RFEa9dv4uiXgFw0w
+MjA0MDkwNDE2MjJaMCECECWB6BhgiLwa6RSE7dRi9UcXDTAyMDgyMzAxNTcxOVow
+IQIQJuVcqxbsYThJLNKxSInVRxcNMDIwMzEzMTgwMDM4WjAhAhAnvtp/Tx9sdgnA
+mq/UaOIWFw0wMjA1MTAxODMyMzBaMCECECiJ0LO1xFY2mz6BGiFWqkIXDTAyMTEw
+NDExMDMwOFowIQIQKKuTBrEeBeDhJXXHdMtVphcNMDMwMTI0MTk0ODIzWjAhAhAp
+6TtEjcNLgBfa5BxDloNZFw0wMjA2MDcyMTQzMzlaMCECECoIZCtI4heJagz5fhBm
+j+cXDTAyMDgxOTE4MzUyOVowIQIQKkTukV3jpSsJ81ZZ4I8lIhcNMDIwMjIxMTkz
+MTI0WjAhAhAqi06ltgbISDsOcR5r9BbBFw0wMjA0MzAwOTIxMThaMCECECsD/C/C
+jjgpb6EP6UcbNdcXDTAyMTExNDIwMTgzM1owIQIQLEj31tVxwNG9agBlHS2p3RcN
+MDIwMzA2MTcyMDQzWjAhAhAsv4Qd5FgyeTIQN97XlP+FFw0wMjAyMjIxOTAyMjVa
+MCECEC0DVDVURSxtOfAbdGjez5MXDTAyMDkyMzEzMjMzN1owIQIQLSSUNBmSsfI3
+nW7FNZPd8BcNMDIwMzE1MTcxNzI3WjAhAhAtRyRhh5G6LvL3kiHzG4seFw0wMjA1
+MTQyMzA4MjJaMCECEC2EwrEBoTpvsDATdlpp7EEXDTAyMDcxNTE3MjkyM1owIQIQ
+LdUmw80Bzv1nuAisWnDENBcNMDIwMjI3MDQ0NjE0WjAhAhAuKwqUTfGkN7ejm0uW
+JqjjFw0wMzAxMDkwNjI4MjhaMCECEC4xMMEuFjHZKwpwyj8xc2IXDTAzMDEyOTAx
+NDkyN1owIQIQLr1t384gb+eo9PMlnMPBEhcNMDIwOTIwMTM1NDQyWjAhAhAvVhYi
+uofV/f/msN08CCYsFw0wMjAzMTMxNzUzMTFaMCECEDA+d3vsy4ksFVV/IPIzwR4X
+DTAyMDIyMTIzNTA0OVowIQIQMFlsql/TrFCGLMT6PEhQ0RcNMDIwMjIxMDQxOTM1
+WjAhAhAwzprx+hf69Uy8Uor0Jit7Fw0wMjAzMDExOTEyMzlaMCECEDEWSmoubTRN
+0kDwX0fmW0cXDTAyMDIxMjE3Mzg1MlowIQIQMduXWwZjC9j+BrP1+WQKWRcNMDIw
+MjEyMTU1OTIzWjAhAhAyvOsMymUGP6TVSlZGfCIJFw0wMjA4MTYwNzMzNTVaMCEC
+EDMX7+GJ7BElFY87Z3pkC1AXDTAyMDkxODE3MDM0NlowIQIQNCSg0gBh69Oapypm
+tIIjdxcNMDIwMzE1MjI0MzM5WjAhAhA0qBZnpRujMRFeJsg/ITi+Fw0wMjAzMjEy
+MTE2MjFaMCECEDY6vgVVUpNPMl8wY8DUUN8XDTAyMDMwODExNDYxNFowIQIQNxnM
+pZ2FBVbhY0JLDTy/1hcNMDMwMTA4MTg1ODI0WjAhAhA3L/0r7E2UNVH0Byr1C5fE
+Fw0wMjAyMTMxOTE4MDFaMCECEDeD9R5+9F+tHwxVhjACVMEXDTAzMDEwODIwMDM0
+NFowIQIQODI+UCs2kwEyClmMzq2g6xcNMDIwNDMwMjEyNDA4WjAhAhA6Ythk04XV
+YR2dP2El6TodFw0wMjA2MTcxNTE5MTZaMCECEDqXNrEmFHNQo8w/0DuDmckXDTAy
+MDkxMTAzMjkzMFowIQIQO4c+IL6X/6drK1//mn9MlRcNMDIwNzAzMDAzMTQ3WjAh
+AhA7uuXyI5nG167imA2kE1zUFw0wMjA1MjQxOTI4NDVaMCECEDvCfPC90ppvl912
+vKlsRQ0XDTAyMDMwODEwNDIwM1owIQIQO8XaQWR6N46ffx+bJQq02hcNMDIwMzA2
+MTMyNDQ4WjAhAhA8G/GaSLC4oEXVjw9XkMLNFw0wMjAzMTgwNjQzMjNaMCECED0V
+SIC0/lF+7UauUf1Hc94XDTAyMDgyNzA5MjAwOFowIQIQPWFOh+o5AvMePlZcDjun
+4xcNMDIxMDI5MTk1NDEyWjAhAhA93WGSgmlrAXkO75YSo3aAFw0wMjA1MDEyMjI0
+MTZaMCECED4OFHFV80gJG1Y7kXp97MkXDTAyMDMxMTIxNDU1MVowIQIQPiMAH5u9
+6LHwBmemcEIuwxcNMDIwODA4MTIyMTMyWjAhAhBBkRqM3i2z63kdx5mZvgwOFw0w
+MjAyMjUxOTE4NTRaMCECEEGo15wQXlqsFn+TqtGDNFUXDTAyMDQxMDEyNTM0MFow
+IQIQQoiWsHsoovovkXNYpx5TfBcNMDMwMzAxMDk0MzMxWjAhAhBCky/SVNOU0EFq
+LjOLgbQ8Fw0wMjA4MDgwMDQ4NDZaMCECEEQk3bqF/T6yuBd0/Z1cDL0XDTAyMDky
+MTE2MDkxMlowIQIQRQIYfTmcuRT7EDeW9MHdLxcNMDIwMjExMTExMTA2WjAhAhBF
+FrwxC06HCszj1RQWMxGDFw0wMjA0MDIwMjIwMTdaMCECEEYWNt4/74z6Z1MSzHZj
+1t0XDTAyMDIxNDE2NTk0M1owIQIQRl+Fo6SYPEBj9hz3wr79DhcNMDIwNDA5MTUz
+MDA1WjAhAhBHIMLYhYVUOc3yEPCniFJ1Fw0wMjA5MTAyMjI1MjdaMCECEEdCbqKr
+xTNdUEQLiJeEWUwXDTAyMDMwNTE0MDUxOVowIQIQSSA/qG6ByDsmBfSnm1qBYBcN
+MDIwNzExMTc1MDQ4WjAhAhBJi28F+8v0Wq8JR7EExeNRFw0wMjA0MTIxNzQ4MDha
+MCECEEmyw3q/dSqzE65TxstFWj4XDTAyMTExNTIxMzUzN1owIQIQSyMsCt56Nuv+
+iTrH/SdGABcNMDEwMzAxMTgwNDAwWjAhAhBLysOrCsXNkKK+Q/7dBuFFFw0wMjA3
+MjAxNzMyMTJaMCECEEwAzHPVdGFiklL/3lvBVb0XDTAyMDgyNjE0MDE1MVowIQIQ
+TFnBw1ZAJ9QiDjf2XyZQxRcNMDIwMjI2MDk1NzQ0WjAhAhBMyhJZRvkrxn0zeEAs
+O3oMFw0wMjA1MzAyMDI0NThaMCECEE1XUTWb5UEsaWbHIezGKTIXDTAyMDkyNjA0
+MzU1NlowIQIQToWrnhdU50IPjKFllohTVBcNMDIwMzI4MDAxODUzWjAhAhBQPe2s
+IYZmXaUaE+78pwvGFw0wMjAyMTgxMzU1NDlaMCECEFCjgZzLIuQPgMt67DX4c4IX
+DTAyMTAwNTE2NTk1OVowIQIQUShzJhfPEG7rSgN0ozXlYBcNMDMwNjEzMTAwOTI5
+WjAhAhBRUv/caWsfH/98sX8DkKlrFw0wMjA2MTQxNjA0MDJaMCECEFLZU2mf7Kvd
+XSovqleGuR8XDTAyMDgzMDIzNDY0M1owIQIQVEaoj2kuAvS0smnavUAC4BcNMDIw
+MzI2MDE1NjU4WjAhAhBUtYFztXxtulyZDf8KTe7vFw0wMjA3MjQxNjM5NTFaMCEC
+EFeRQSCfV29CU04ZzOTIUkoXDTAyMDUyODIzMjQwMFowIQIQV8bcoO2/d91+GGiD
+VwwqTxcNMDIwNTIxMTQwNjExWjAhAhBX7eJb4mI/mOH1TTCkDt/fFw0wMjA2MDkw
+MTQ3MThaMCECEFhH2b2DGmNvt2N/SlZejk0XDTAyMDQxNTE3MjMwM1owIQIQWMZi
+mYDmDE8AiyU4k+YYEBcNMDIwNjA2MDcwOTQ3WjAhAhBZUgkOmfOp5S/tqbLYYefq
+Fw0wMjA2MjYxNDE4MzZaMCECEFlcqvu++3PR9KvI4z0BBN0XDTAyMDkyNzIyMjAx
+MFowIQIQWZdZpz2w2X7/KssxzGbzhRcNMDIwODIyMDA1NTU4WjAhAhBZ3UU2Ydk+
+6f+9rS6/ml2YFw0wMjA3MDIyMDQwMDNaMCECEFpLSBipKpzVkS9PpPizG00XDTAy
+MDQwNDIzMzMxMlowIQIQWt8yDWTrm9IR4lhQvpMMZRcNMDIwNDA1MTcwNzIxWjAh
+AhBbI7+7xLP0AunLEJ7upT/NFw0wMjAzMjkxNjI2NTlaMCECEFtRvDi/r58nqcft
+JdCN7C4XDTAyMDMwODEwMjUyMFowIQIQXCl/RmHdR5CCkb15ImqYOBcNMDIxMTA4
+MTU1NDI2WjAhAhBeOPdbAPHvHLb/1Vx0+5VdFw0wMjExMjMwMTQ5MjlaMCECEF6I
+vra0sqqwkvP2wrxyIcoXDTAyMDIxNDA3MTIxMFowIQIQX1mgu68myMG0BDq7/Ex1
+pRcNMDIwNDE2MTU1MTIzWjAhAhBfgQgPoM1EcyNYjkmftQg1Fw0wMjA2MTkxNDE3
+NDNaMCECEF+6H4+yI1bdvKZysJkTtbIXDTAyMDUwNjA4NDcxMFowIQIQYAnVt2vx
+Fkr60KVMjt0CyxcNMDIwNjE3MTYxMjI5WjAhAhBgHRnYVdUU1f8DDa1cB0znFw0w
+MjA3MTUyMzAxMTFaMCECEGAkZ8MLrVOPzokFtYevfOQXDTAyMTAwODIwMzg1Mlow
+IQIQYFzzPSIjOT/mIQn93XfCjxcNMDIwNzAyMTcyNzU4WjAhAhBgol6/B4OjGFYY
+SGOn/cdjFw0wMjA1MDkxOTUyMjdaMCECEGDCragO+ZpmXaJ1BF5cccIXDTAyMTEx
+MjEzMzYxN1owIQIQYNsdNzT2Ap1oG3DxEwAvgBcNMDIwMjI4MDk1NTMzWjAhAhBh
+8DjqvBcNEdKJ7odQV6DtFw0wMzAxMjkxNzQxNDRaMCECEGH6m+tY+eWlnnmoPXms
+NZcXDTAyMTAxMDIwMTYzN1owIQIQYkRXJEHAiT9b0r3nL3VB+hcNMDIwODA4MTgz
+MDE1WjAhAhBiUTotjYI5Zf72ishOKZH9Fw0wMjA5MjYwMDU0MzRaMCECEGJSSUny
+UWd64u7JDCMRPbIXDTAyMDQxNzE4MDY1NVowIQIQY1K93Le/u5Bsgu61o5/YyRcN
+MDIwMjIxMTYzMDU4WjAhAhBjXmvp6j3WO8NNCcMT2928Fw0wMzA2MDIxNDQ3MzZa
+MCECEGPaC9UTHpiDMqI6S9+MiYYXDTAyMDkyNTA4MDgxM1owIQIQZP7wGjrtifi1
+NNMeD84NzhcNMDIwNDA4MjEwNjI0WjAhAhBlp0nYNyJLSuXPo/7WO8BnFw0wMjEy
+MDQxNzE0MTZaMCECEGXJnkd2mA2eV+SuxRw+8ucXDTAyMDkyMzE0MDgxOFowIQIQ
+ZeB7xXTkqwFPo17W683VaRcNMDIwNDAzMTcyNDA2WjAhAhBmUbflYrfjMcDu8uj+
+hGpOFw0wMjA5MDYxMzIzMzNaMCECEGd8dqxmWmtBXAeDAtbZY8AXDTAyMDIxODEz
+NTUxMFowIQIQaGfes6ogz0s0peDIwMXJpBcNMDIwMzEyMDEwOTI2WjAhAhBpIzRd
+dQTcmb3OjSG0axD8Fw0wMjA5MDMxMzE5MjBaMCECEGmfIDHRP/oecC431ZqMChYX
+DTAyMDIyMDA5MDEzNVowIQIQapTWJdBn5E15K8bVyUp/xhcNMDIwMjExMTkxNTQw
+WjAhAhBrXKRFW+nP5zspsTLXoQQ9Fw0wMjEwMTgxNTQzNDhaMCECEGvAfU8Y/rcH
+6FaabEAPNlMXDTAyMDkyNjIxMDEyNlowIQIQa+HdNjvs4Kn1kn4zv+1IRhcNMDIw
+NDE3MTQ0MjMxWjAhAhBsrOs3K2pC4srI0tq4uYJqFw0wMjAzMDExNDI4MzRaMCEC
+EG2YG7R20WJZoTzu0iHY30wXDTAyMDUxNDE3NTYxMlowIQIQbd0LWjycq9M72Rbs
+aXT7mhcNMDIwMjIyMTIyNjM4WjAhAhBu3v2JNq6gQY1c7C6QMfiaFw0wMjA0MDgy
+MjM2MTJaMCECEG+ya0xIyv7maZoGY8QylsEXDTAzMDExNzE3MjcyNVowIQIQcAvh
+7kSJUVJlJywtNHzgjRcNMDIwOTE4MDAzNjAwWjAhAhBwLcCmuKWg2khZs5Y0gMgl
+Fw0wMjA4MzAxNDAxMDFaMCECEHDh2ZLNdkJjUW7NjAkpF0gXDTAyMDUxNzExMTA0
+MVowIQIQcjjkkWp6ivO/8NjgpHCNqBcNMDIwMzA0MTkwNjQwWjAhAhByl6HYnDsA
+wsQmLQYrKXZOFw0wMjA2MTgxNTA5NDdaMCECEHLSI5vyM+l8z7apQdUOXDkXDTAz
+MDQwOTE3MDIyOVowIQIQdFyc+arD+pQ8JTllRJUT8RcNMDIwNzA5MjM1MzIwWjAh
+AhB0mH9orReSk/JllAwz5r1JFw0wMjA0MjMwNzQ0MThaMCECEHUOQP+X8Eft9VbH
+CE6xq/0XDTAxMDEzMTAwMDAwMFowIQIQdSZRWWW3MzJf5s2qMGV44BcNMDIwNTE2
+MTgyNDU2WjAhAhB2E2+/yN7ZNjA5zIWPAC8ZFw0wMjAzMTQwOTQ4MjRaMCECEHZS
+eIlE+sGz18lMszKVrwMXDTAyMTExNDE5MTU0M1owIQIQd11MQNmN+siaJI1HEJBK
+ChcNMDIwNTA5MDExMzAyWjAhAhB35lpDWZNdX3p1gBrNrcIiFw0wMDA4MzExODIy
+NTBaMCECEHgZ8baHg6/fYI2aZA3s4FEXDTAyMDUyMDE3MjgxNlowIQIQeGRlj4J5
+26UcRxAdciNmUhcNMDMwMTI0MTg0NTQ3WjAhAhB4ZOHAaY86x4sj4ymx7qlBFw0w
+MjA1MDgxNzQ2MjZaMCECEHh5iWESZ2QU/QjMswVVwGcXDTAyMDQwMjEzMTg1M1ow
+IQIQeIpWIgjOQu7Ro3kQFP06NhcNMDMwMjA1MTY1MzI5WjAhAhB6oGy6MwKsX/UL
+tndh73cJFw0wMjAyMjgxNzU1MTFaMCECEHuRM2Zs8NTjnfaIKZv30OoXDTAyMTEy
+MDIyMTY0OVowIQIQfO/yCgiuEFce3tzWY3awXRcNMDIwMjI2MTAyMjMwWjAhAhB/
+du9p6/U/Uy6qpe3ewLQGFw0wMjA1MDEwMzMzMDdaMCECEH/La5mR0HbhPA5nFcTU
+TXsXDTAyMDQxMDIxMTg0MFowDQYJKoZIhvcNAQEFBQADgYEAmTAO/uYzQ81DVqnu
+pqRu8h5IMXNwjQjd2UQzdjvTBm/tNDY1OrDqwjHzCzSyAu2+4nZgM5FR5/76cARp
+H0PKcN1l4O4Dx5Yr/NZ+4uNwehVm6JqL0hmz5UVU6X+YBNayPCFm2KqV065y6ta2
+cvBBCG1cy4yQkLpUQjmwbPUG59A=
+-----END X509 CRL-----