Snap for 4598635 from e666d121b84f5131f2095830838bc4f108ae874f to pi-release
Change-Id: Ib47cffb5c731c354b6981834e3eeb70de5b4cfc3
diff --git a/wfa_certs/Android.mk b/wfa_certs/Android.mk
new file mode 100644
index 0000000..2014c4e
--- /dev/null
+++ b/wfa_certs/Android.mk
@@ -0,0 +1,35 @@
+# -*- mode: makefile -*-
+# Copyright (C) 2018 The Android Open Source Project
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+LOCAL_PATH := $(call my-dir)
+
+cacerts_wfa := $(call all-files-under,files)
+
+#This target is reference by frameworks/opt/net/wifi/service/Android.mk and used by WfaKeyStore
+cacerts_wfa_target_directory := $(TARGET_OUT)/etc/security/cacerts_wfa
+$(foreach cacert, $(cacerts_wfa), $(eval $(call include-prebuilt-with-destination-directory,target-cacert-wifi-$(notdir $(cacert)),$(cacert),$(cacerts_wfa_target_directory))))
+cacerts_wfa_target := $(addprefix $(cacerts_wfa_target_directory)/,$(foreach cacert,$(cacerts_wfa),$(notdir $(cacert))))
+.PHONY: cacerts_wfa_target
+cacerts_wfa: $(cacerts_wfa_target)
+
+# This is so that build/target/product/core.mk can use cacerts_wfa in PRODUCT_PACKAGES
+ALL_MODULES.cacerts_wfa.INSTALLED := $(cacerts_wfa_target)
+
+cacerts_wfa_host_directory := $(HOST_OUT)/etc/security/cacerts_wfa
+$(foreach cacert, $(cacerts_wfa), $(eval $(call include-prebuilt-with-destination-directory,host-cacert-wifi-$(notdir $(cacert)),$(cacert),$(cacerts_wfa_host_directory))))
+
+cacerts_wfa_host := $(addprefix $(cacerts_wfa_host_directory)/,$(foreach cacert,$(cacerts_wfa),$(notdir $(cacert))))
+.PHONY: cacerts_wfa-host
+cacerts_wfa-host: $(cacerts_wfa_host)
diff --git a/wfa_certs/README b/wfa_certs/README
new file mode 100644
index 0000000..5921e4b
--- /dev/null
+++ b/wfa_certs/README
@@ -0,0 +1,4 @@
+These CA certs are Wi-Fi Alliance Root certificates. They are
+used to validate the certificates of Online Sign-up Servers.
+For details refer to Hotspot 2.0 Technical Specifications.
+
diff --git a/wfa_certs/TIMESTAMP b/wfa_certs/TIMESTAMP
new file mode 100644
index 0000000..2cc6282
--- /dev/null
+++ b/wfa_certs/TIMESTAMP
@@ -0,0 +1 @@
+Last Update (YYYY-MM-DD): 2018-01-09
diff --git a/wfa_certs/files/21125ccd.0 b/wfa_certs/files/21125ccd.0
new file mode 100644
index 0000000..7b56d33
--- /dev/null
+++ b/wfa_certs/files/21125ccd.0
@@ -0,0 +1,120 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number:
+ 68:05:7c:35:0b:ff:5d:db:ac:8b:82:14:fa:da:54:7e
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 01
+ Validity
+ Not Before: Nov 20 00:00:00 2013 GMT
+ Not After : Nov 19 23:59:59 2043 GMT
+ Subject: C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 01
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (4096 bit)
+ Modulus:
+ 00:bf:81:fe:02:1f:15:a3:af:61:1c:92:d0:19:a4:
+ 74:f8:cf:5c:85:61:92:0b:0f:76:55:aa:fc:f3:5c:
+ 12:be:60:a8:d6:86:3b:20:67:6f:19:d5:5c:17:aa:
+ ee:75:26:f5:73:c1:31:83:6a:53:df:e6:6e:f3:31:
+ c2:56:0a:93:ed:3c:17:71:c7:04:3f:70:10:cf:2b:
+ 8c:3e:fe:c0:ae:61:84:9d:76:53:0b:cf:06:7f:22:
+ 0c:05:8a:47:b5:da:d2:93:47:b2:a4:ec:d9:3a:82:
+ 1a:d8:6b:10:86:47:e4:04:64:35:6b:c4:84:e3:ef:
+ db:c6:a6:09:36:a2:d5:67:30:8e:1d:dc:7f:66:5a:
+ dd:68:e8:bc:7e:85:58:a8:c8:18:0e:be:6a:36:39:
+ 61:d1:da:e2:a4:6e:0e:61:b6:4b:57:aa:60:44:b7:
+ 32:be:a8:3a:88:21:46:38:59:14:59:1f:19:4e:68:
+ 5d:bf:11:d2:08:1a:15:e5:7f:e5:65:af:5d:da:3e:
+ a3:8f:88:38:84:d3:ca:3e:18:04:73:4c:8a:7c:06:
+ b5:b6:6e:8a:34:fb:69:29:10:55:0a:8a:a7:38:db:
+ bb:ce:60:49:14:75:23:1f:c2:ee:1a:18:e7:2e:39:
+ ec:1c:f2:c9:3a:ce:da:ae:2f:f2:5c:3d:13:8b:55:
+ 21:52:48:54:77:1c:a8:54:b6:8f:04:25:c1:c4:10:
+ 6f:70:cd:c3:a2:d4:e3:bf:38:e4:95:c6:33:70:89:
+ a5:7f:84:1f:44:77:5c:2f:a0:18:62:27:e0:be:43:
+ cf:ca:1d:79:a8:1f:f6:a7:91:70:da:07:4e:b2:8e:
+ dd:8e:8d:e9:ad:d2:73:b8:e6:a9:5a:ad:18:fc:b4:
+ ee:f3:6e:98:21:26:e2:71:ce:db:ab:e3:b5:3b:3c:
+ 9b:5a:ed:97:20:cf:b9:0e:3c:93:d3:01:bc:e6:39:
+ 4d:93:5e:dd:69:5c:ed:61:56:74:a5:57:e3:35:ad:
+ 1c:1e:ee:a8:af:9d:23:0c:ad:39:e4:5f:5e:58:5a:
+ 6c:8a:db:bf:ed:80:97:ae:9a:e4:76:63:3b:cf:c0:
+ fb:45:fe:6d:4d:d1:b4:4a:23:b1:56:d3:93:58:83:
+ 7b:26:22:d1:6a:d0:4f:de:c9:ff:e8:ae:0a:25:71:
+ 74:d9:ef:33:51:c9:11:a7:8d:63:6c:ff:0f:52:0d:
+ b7:5b:cb:4b:95:51:f7:4d:e1:5f:f9:b8:2e:07:06:
+ 60:35:ae:29:28:05:b1:99:fa:7c:c2:b5:eb:18:e3:
+ 25:bc:78:4c:0c:7e:0b:95:a4:d4:f7:b9:e6:94:ab:
+ 7d:27:b9:f7:98:d9:59:c0:dd:1b:f5:58:7f:13:69:
+ e6:54:fb
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ X509v3 Subject Key Identifier:
+ F9:18:C6:55:96:DE:6E:3A:73:10:F7:ED:85:A4:CB:A9:BB:D7:32:21
+ Signature Algorithm: sha256WithRSAEncryption
+ 18:f7:2c:fd:54:5d:56:b5:e8:76:1e:5c:2d:7e:19:4d:5d:5f:
+ f7:25:6b:59:f5:6f:0a:48:97:14:67:09:9e:7f:dc:8d:f3:1b:
+ 0f:e7:46:7b:0b:51:39:06:7f:ca:b7:5c:28:22:9f:e8:d7:db:
+ 69:32:cf:34:0d:ae:07:a9:9f:4c:ea:06:c9:80:8f:ea:63:51:
+ 4c:16:cd:84:14:ce:98:5c:53:39:a0:e0:f2:51:59:a1:1a:18:
+ 6d:e4:bc:3f:b0:24:40:b4:a5:6b:c8:85:ee:3c:a9:ca:bc:15:
+ 90:82:9a:36:ef:79:c1:15:9f:99:8c:d2:c9:8f:cc:fc:94:8d:
+ ff:e8:7e:35:0c:42:f5:56:aa:e8:3f:15:fe:47:4f:a9:1b:c8:
+ 35:a1:0b:79:c3:fb:c2:19:e4:f8:f2:3b:ce:4e:9e:80:67:42:
+ 4a:fc:59:8c:2b:db:85:c9:80:ed:87:4b:6a:ec:5b:8d:02:cd:
+ 07:b7:29:d8:3b:1c:7c:9e:7f:ef:e2:c8:b6:13:04:91:fb:11:
+ 42:4f:08:71:95:42:d6:77:ab:46:8d:a9:44:64:ba:d5:c9:fc:
+ 2c:4a:25:83:1c:35:31:01:c7:e6:b4:f4:48:59:e8:33:87:40:
+ 3a:ac:75:3b:80:a8:68:77:57:2a:f1:84:59:3e:de:cb:8d:b3:
+ 1a:21:e9:76:91:2b:5d:15:b2:5b:dd:34:1f:f5:60:a7:d4:f0:
+ 35:9e:57:a5:df:0c:7f:d3:47:43:48:2f:4e:1e:c5:4a:77:ac:
+ 44:7c:b0:44:6e:96:92:46:04:e9:da:1b:a3:90:2a:1e:1b:15:
+ 80:c1:e3:4e:be:41:fb:ac:42:7b:ce:d1:a6:11:51:72:73:7f:
+ 4d:41:d7:91:d1:26:0a:59:b2:08:29:22:e7:b1:d1:40:dc:26:
+ 14:d3:a6:44:5f:4e:3f:0b:e1:ac:94:71:ed:99:46:c1:a7:dd:
+ d0:5a:4f:d6:4c:c7:8a:3d:13:f6:2c:43:23:a9:7f:0d:bc:80:
+ ce:6e:fb:36:6d:e0:12:73:e2:00:1a:44:66:e9:e2:be:2c:93:
+ 95:66:fc:fd:7f:d0:45:c9:ef:40:ee:e8:af:5d:d0:70:07:b6:
+ 91:2f:63:de:16:c3:95:ba:7e:93:03:77:20:0a:61:35:d9:06:
+ 04:d7:dd:ca:ad:8a:43:64:2d:7f:e4:1c:7f:25:e2:8f:d7:5b:
+ 6b:17:a9:4d:d7:ee:f3:98:aa:07:95:62:80:fd:36:78:59:5d:
+ 80:9e:ac:7e:12:7b:92:e0:8f:cf:ca:85:7c:51:5a:d7:27:dd:
+ 77:6e:31:d9:02:e9:44:c0:a4:ca:28:03:ae:15:b3:9d:3c:d7:
+ bd:d9:de:52:67:d9:27:90
+SHA1 Fingerprint=BB:49:24:83:18:47:95:2B:DB:1A:12:B0:38:EC:51:54:AD:CB:DE:43
diff --git a/wfa_certs/files/674b5f5b.0 b/wfa_certs/files/674b5f5b.0
new file mode 100644
index 0000000..2939e0d
--- /dev/null
+++ b/wfa_certs/files/674b5f5b.0
@@ -0,0 +1,119 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 02
+ Validity
+ Not Before: Dec 2 20:57:57 2013 GMT
+ Not After : Dec 2 20:55:03 2043 GMT
+ Subject: C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 02
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (4096 bit)
+ Modulus:
+ 00:c2:4a:83:2a:36:1b:53:c1:b9:c8:b0:83:69:ea:
+ 75:21:c7:95:05:ba:af:59:42:84:ef:f8:a0:e4:bc:
+ 06:a3:4f:47:62:eb:e7:10:1b:7b:00:56:f6:4b:c9:
+ 29:89:a2:20:40:bf:73:e2:cd:86:0b:38:3e:1e:18:
+ ca:c5:41:1a:a2:ec:f9:92:27:cd:d6:a8:db:f6:dd:
+ 96:05:af:21:45:26:2c:bf:51:15:dc:fc:02:c3:b8:
+ 1d:dd:80:49:4f:b7:6e:0c:c7:b9:f6:c4:33:c0:87:
+ db:7c:d8:74:e6:ba:c9:29:41:1a:ec:ca:0f:50:3e:
+ 88:b9:ad:14:52:0e:39:b9:9a:31:49:8c:a0:a1:ab:
+ df:51:59:cc:1e:35:5f:ca:18:7d:6c:4f:07:26:94:
+ 39:8d:31:27:0a:d7:a0:3e:04:13:62:4a:f9:99:96:
+ c1:89:80:09:4f:df:af:64:96:73:6a:b7:a5:22:0e:
+ 17:a9:72:4b:6e:2a:91:e6:4a:f3:5e:97:e7:3f:c6:
+ ac:d1:d2:05:11:7d:49:d7:71:98:73:8f:34:bd:e1:
+ 1c:79:3b:e0:8d:58:be:04:1a:22:6a:a8:a0:1f:93:
+ df:63:fe:56:c3:d0:c5:98:a3:b4:61:d1:42:90:95:
+ 74:9d:a2:15:83:89:5f:77:87:1b:ef:7e:e8:1e:8f:
+ c2:94:38:86:fe:d7:09:9d:d4:58:be:97:00:d9:6d:
+ 1d:b2:83:67:f4:ab:2c:5b:0b:fb:40:57:82:49:36:
+ 7b:83:2c:56:f5:f6:57:83:ef:cc:7e:eb:c7:80:9e:
+ 56:cc:8b:ec:4c:1f:99:48:36:cd:79:fb:6e:ac:d8:
+ 7e:5d:97:1f:64:c1:10:c1:26:ad:36:2e:e1:e7:7a:
+ 7e:85:2d:a7:d6:8d:e8:e7:9c:14:3f:3e:e1:83:d0:
+ 00:af:05:e8:12:b0:32:83:68:2b:93:02:74:cd:4b:
+ a3:03:99:0a:f8:c3:36:b4:f2:25:f7:eb:46:4d:f8:
+ 16:d2:02:70:8a:d5:81:9a:ff:b2:7b:7e:1c:b2:77:
+ 0c:4b:27:bb:39:12:8d:1b:e9:25:0c:63:ce:c5:31:
+ ce:57:9a:40:24:e3:1c:4b:30:ba:92:d8:73:2d:aa:
+ c1:81:23:92:50:4f:44:a0:1f:48:21:13:a0:e3:31:
+ 60:2b:05:36:5c:0f:eb:30:bb:34:e2:d7:f0:b3:e7:
+ e6:7d:12:cf:31:27:73:0f:bd:26:56:a4:98:ba:55:
+ 50:76:79:53:00:a9:f1:ce:8f:8a:33:1e:85:69:bc:
+ 9c:a9:21:51:91:c1:60:73:55:15:a8:9b:be:91:e3:
+ bb:ad:b9:12:ba:b8:ac:e8:2e:20:75:8f:01:39:bf:
+ 01:e9:51
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Key Usage: critical
+ Digital Signature, Non Repudiation, Certificate Sign, CRL Sign
+ X509v3 Subject Key Identifier:
+ E4:2F:5C:D4:E3:2C:07:EF:CC:3B:09:7D:38:A1:B6:0F:F5:D2:C2:B5
+ Signature Algorithm: sha256WithRSAEncryption
+ 65:0b:60:4f:d5:ae:70:37:2b:4a:6d:80:7a:d6:95:0a:0f:7e:
+ 9e:70:1a:f4:9c:82:c9:b2:d3:0a:7d:a8:4d:db:ea:7f:f8:6c:
+ b7:a1:04:a6:f9:c3:86:37:25:50:3d:82:3c:68:43:9c:44:da:
+ cb:03:b5:42:d9:de:72:a7:19:69:8c:37:7a:8e:06:84:59:08:
+ 0e:8a:8c:ab:35:f3:ad:29:d3:db:66:d5:27:14:b1:a8:c3:27:
+ 5e:53:a7:59:c8:cd:f4:74:a0:fe:b7:fb:66:c9:c7:e2:57:33:
+ c7:cf:28:e2:5e:db:8e:61:8f:6a:ec:d5:cd:c9:5e:c1:82:7b:
+ e5:15:ae:51:ac:a2:d1:be:c1:1d:0f:76:b7:a3:69:72:7c:1d:
+ b8:41:40:77:1b:86:08:ec:0f:51:9b:e8:48:26:e1:8c:51:28:
+ 0b:5c:55:8d:ea:f4:42:8a:58:01:a1:6c:2d:6a:bc:28:75:88:
+ b3:4a:a3:71:5e:1a:09:b6:af:71:06:2f:87:18:24:16:f6:7e:
+ 14:8a:96:d8:c8:4a:a0:83:85:8a:b8:b6:99:4e:21:e4:12:24:
+ 9c:89:0b:c8:1f:5b:f0:67:31:4d:fd:95:38:cd:82:74:a3:8c:
+ 63:cb:41:71:95:f9:49:5b:fc:28:0d:30:9d:d1:85:12:5d:06:
+ 82:dc:a4:89:bf:11:e2:f1:e8:92:ea:ff:61:2b:c7:2e:c2:c6:
+ 36:92:39:c0:f4:50:a6:b5:e3:e7:73:2d:21:d5:b1:77:ed:1d:
+ 9b:8e:cb:9e:3c:5f:c9:b5:f0:aa:ee:49:9b:1f:e6:e0:13:dd:
+ ce:cd:aa:55:ed:af:d6:20:39:55:2a:48:9c:a4:34:01:d3:1a:
+ 2f:c1:1c:1d:5d:0b:67:25:2a:fc:4d:12:57:cb:59:6a:c6:f7:
+ 26:80:77:94:c5:5b:4f:b7:c2:c6:83:23:04:59:2f:9f:38:02:
+ c1:70:c0:00:f7:28:ca:35:a1:4f:f6:cd:1b:ed:9b:41:3e:56:
+ 08:6c:b8:3f:d9:20:4d:71:69:51:93:3d:a2:fb:a6:1f:d8:80:
+ 2f:7e:d2:b1:87:89:e6:ae:4f:c4:97:cf:a4:72:a7:78:74:46:
+ d6:0c:2c:56:4e:31:32:8c:ef:18:e6:71:b3:19:0f:0a:ce:73:
+ e2:7f:5e:32:bd:75:b8:82:aa:5c:79:fc:1f:0f:d3:15:9a:61:
+ 81:f3:bc:4e:7f:7d:a7:e2:3d:8c:e8:1b:21:55:51:7a:ae:bb:
+ 47:45:08:24:2b:be:31:7f:cb:4b:42:4c:f9:b8:85:08:a6:de:
+ 4d:45:fb:93:42:85:c6:de:36:08:0d:fa:4a:be:55:d9:52:a8:
+ f8:50:12:e3:98:fa:43:6f
+SHA1 Fingerprint=38:D6:63:9F:51:D7:24:21:AD:75:3C:C6:07:54:99:B7:1F:EC:F7:FC
diff --git a/wfa_certs/files/ea93cb5b.0 b/wfa_certs/files/ea93cb5b.0
new file mode 100644
index 0000000..14c237b
--- /dev/null
+++ b/wfa_certs/files/ea93cb5b.0
@@ -0,0 +1,120 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number:
+ 0c:b3:0f:70:f2:86:a4:33:e0:b9:09:89:de:01:ed:b7
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
+ Validity
+ Not Before: Dec 8 12:00:00 2013 GMT
+ Not After : Dec 8 12:00:00 2043 GMT
+ Subject: C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (4096 bit)
+ Modulus:
+ 00:ac:74:4b:51:78:85:1b:32:53:be:85:1e:9b:c9:
+ 09:38:9c:65:48:4e:fd:e6:79:84:da:0d:e5:70:66:
+ 74:15:6a:5f:04:8c:7b:ae:e0:a7:7c:f6:0f:32:45:
+ 85:53:bf:72:75:92:af:6e:90:4e:c2:0e:b0:de:86:
+ b5:ca:ca:6f:bc:56:54:7b:ae:8d:25:07:f9:70:47:
+ 23:64:dd:6e:f2:35:c7:20:dc:09:27:43:4c:79:7c:
+ a5:70:70:5c:e7:c0:3f:c5:62:0d:fb:a3:01:a6:84:
+ 61:6d:a4:c4:c1:73:1c:eb:79:06:8b:5e:f2:ed:6b:
+ c6:0d:94:95:35:d1:99:1f:a6:eb:41:a7:38:bd:6c:
+ b3:d6:b0:b3:a4:22:b4:30:ec:a1:f5:59:cf:8e:8b:
+ 2e:21:50:c5:1b:4e:54:a2:72:3a:9a:70:a3:d1:d7:
+ cf:26:54:8a:31:c5:4a:08:08:7c:95:57:52:af:32:
+ 66:19:ad:57:5c:fd:be:5d:6e:67:74:85:a3:07:c4:
+ 2d:15:4a:a6:f2:75:7c:71:4b:bb:ef:fe:50:ab:0b:
+ 67:79:a9:b2:84:eb:a3:e2:b8:13:e4:87:3c:94:ed:
+ 22:3d:0b:c1:94:fd:2e:da:91:89:b5:30:c4:93:9f:
+ 95:bb:95:2a:76:01:64:43:9d:ff:4b:42:0e:75:74:
+ bb:c3:c4:9e:ed:d9:fa:ee:5e:d4:a4:92:a1:bf:73:
+ 06:35:c9:02:3c:3b:e5:99:60:f0:d3:84:a3:dc:0e:
+ 63:5b:6b:15:44:f6:53:a2:cc:01:d7:15:5b:1f:62:
+ b5:c0:3d:b6:cc:3a:4c:ca:7a:16:30:68:88:a4:98:
+ d8:1c:a7:1b:50:37:0f:b0:8a:42:62:65:bf:4d:f1:
+ 5c:30:b7:01:ca:ef:55:c4:16:2f:a7:e4:31:a5:3d:
+ af:55:0d:88:01:62:40:5c:c6:f5:68:da:b6:c4:de:
+ 2d:ed:79:08:07:9b:ea:56:64:d3:f4:f1:a1:4d:5b:
+ 03:24:f7:24:24:9b:f4:8e:19:d2:ea:d6:32:db:40:
+ 0f:72:77:b7:f2:47:50:ad:5b:51:8b:cc:a8:b5:3a:
+ 3a:ff:e9:78:81:f7:f9:e8:2f:7a:31:3f:ff:a0:6f:
+ c3:92:81:ca:95:7e:46:69:e1:02:ef:ac:67:65:2a:
+ 23:88:d9:f1:3b:06:c9:66:ce:7e:a5:07:75:13:a4:
+ 0a:63:69:be:c1:43:df:6b:09:7c:c3:c2:dd:d7:77:
+ b2:2b:0a:d0:09:36:4c:62:df:4d:89:ee:4e:a1:9c:
+ 69:56:f1:2e:28:3d:00:44:96:43:ad:a0:7f:72:5c:
+ 48:69:f6:b3:52:d2:56:62:bb:0b:45:99:65:b6:ab:
+ 9d:1f:91
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Key Usage: critical
+ Digital Signature, Certificate Sign, CRL Sign
+ X509v3 Subject Key Identifier:
+ 67:0E:49:2C:61:17:9E:EB:ED:E0:54:E7:84:D9:9B:AD:64:60:73:65
+ Signature Algorithm: sha256WithRSAEncryption
+ 53:e8:18:50:f2:cc:58:3d:07:df:a3:25:43:c6:5b:7d:a8:99:
+ fb:41:84:28:55:72:08:e5:94:8d:3b:44:28:9e:29:33:01:8b:
+ 8e:fe:6a:eb:8b:82:23:28:c7:7c:51:c8:fe:ff:75:7e:d8:69:
+ 47:8c:5c:44:35:04:cb:fa:9e:5a:ec:5d:6b:f5:94:7e:32:bb:
+ e4:4d:b9:e8:4f:96:a4:6c:7d:8d:f9:d6:60:1f:3e:d4:3a:e7:
+ 84:81:52:2d:16:83:ef:bd:8b:24:ce:7e:01:79:6b:d2:16:10:
+ 3b:78:96:74:99:32:f0:38:be:5c:3c:a5:40:b3:eb:3a:4a:5c:
+ 79:c0:45:72:ab:a5:8d:db:53:ed:9d:9e:b1:43:29:1d:17:42:
+ 19:80:41:da:3b:52:f7:6c:4f:57:a5:56:81:48:c4:78:4b:a7:
+ 07:f3:c7:e9:29:12:1b:6b:5f:0d:e7:1a:0b:7e:33:88:cd:a7:
+ af:38:5e:85:a9:c5:51:9a:43:85:6f:bf:4d:12:9b:60:d0:f2:
+ 3a:b6:b1:ff:45:fa:44:56:b3:36:69:40:e4:e2:30:62:99:af:
+ 49:57:d8:22:39:73:0c:35:75:f9:9d:d4:19:00:8c:8f:5c:21:
+ 62:e4:0f:c6:12:79:a8:20:67:3b:d8:7b:5a:3d:77:b7:bb:94:
+ a7:dd:26:68:c3:95:24:34:b8:18:86:ef:b9:1e:50:ae:2d:17:
+ 67:e2:c4:54:f1:89:bb:4f:bb:1e:7a:a7:71:98:43:61:9d:46:
+ c0:5a:2a:31:f7:03:71:cc:25:22:97:c0:81:91:fb:06:f5:b2:
+ 0c:ff:6c:17:65:c8:94:b2:94:6f:21:60:3f:ff:d0:7c:a8:f9:
+ 4a:cc:52:cc:c0:76:cc:e8:3e:13:18:fb:83:a5:dd:01:37:41:
+ 15:b3:5e:2f:96:fc:db:4a:79:80:f6:2b:cc:54:ce:36:4c:d7:
+ 4c:0c:77:10:9f:a0:53:9a:f1:bc:f3:5a:7c:59:42:59:ee:f3:
+ cd:14:2d:44:87:23:10:cf:78:4f:83:0d:96:18:39:a3:75:85:
+ 5d:91:87:f8:6b:14:ab:ef:57:e8:09:8f:67:97:1c:5e:46:ef:
+ 2f:6e:62:0e:e7:1d:80:82:7f:b1:f2:f1:44:c8:5c:3b:40:01:
+ e0:c2:40:da:27:d5:17:8d:f0:6f:97:3a:a8:4b:43:d4:da:96:
+ 69:c9:e5:4e:40:46:d0:b4:31:d4:03:86:de:d3:0d:9a:56:78:
+ 45:6f:fa:94:07:01:15:fd:18:35:7f:4f:ce:4c:57:64:4f:25:
+ 62:aa:7d:9e:a4:2b:48:2f:40:39:2e:9c:00:dd:83:c2:21:64:
+ 08:f0:30:cc:77:93:a0:7f
+SHA1 Fingerprint=51:50:1F:BF:CE:69:18:9D:60:9C:FA:F1:40:C5:76:75:5D:CC:1F:DF
