update to 2.6

5 files changed, 102 insertions, 1601 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 24b3eb643ce0..07d4fe1d6f3d 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,7 +1,7 @@
 pkgbase = osslsigncode
 	pkgdesc = OpenSSL based Authenticode signing for PE/MSI/Java CAB files
-	pkgver = 2.5
-	pkgrel = 2
+	pkgver = 2.6
+	pkgrel = 1
 	url = https://github.com/mtrojnar/osslsigncode
 	arch = i686
 	arch = x86_64
@@ -9,11 +9,9 @@ pkgbase = osslsigncode
 	makedepends = cmake
 	depends = curl
 	depends = openssl
-	source = https://github.com/mtrojnar/osslsigncode/archive/2.5.tar.gz
-	source = legacy_pkcs12_ciphers_support_01_119b88bb3d572b2c5deacf466b5c1dce6acc13eb.patch
-	source = legacy_pkcs12_ciphers_support_02_2dcbc99f79ba9e2c1b88fac15f0017d4e859ccde.patch
-	sha512sums = b50a7c8a8fb6668e999d9e63a931e5888c31f202ca539b62a385be6bacb03c2d25ac5fabd660c779817f0ebea14e9dfe05cdcb180c1cd25f818c07c28ebd88ce
-	sha512sums = a3a27c5adc2fc5c04a109f6b8a7fd5e12128e786d82f782fcd529cabc88d709c19363c1d38cc3de7680557bd84a93371b85033c6c46f4e4ee82f0bfd61a33a7e
-	sha512sums = 62553cef66fe8ae31ba7252e23aed51b0ff6f562bc204f2039410e63285690676a96cf4a4ad5b6c12eacd68adef811bbfe1022c72a092ac7dc4b7427de7bef43
+	source = https://github.com/mtrojnar/osslsigncode/archive/2.6.tar.gz
+	source = issue-276-8854cada70456102df32a1c5d51b46809e66d63f.diff
+	sha512sums = f2ad32d13bd355b196484af47e66e972a4f27e54c7a9188d754a83e9f751363dcc4d6b93f1aed1fef16b5eadead43f08b831dbe9fdfde11d159880450e3e819d
+	sha512sums = 7ca0deff8913623cbb2525eeae92b2369f35a68b46a4ec0fde4588113a2858df07e144c9a30d95487973d8fa9bc223bd6a655c6208a1000a0ef48a3aa08ff1b5
 
 pkgname = osslsigncode
diff --git a/PKGBUILD b/PKGBUILD
index dbd7eb0453e2..874534bebf38 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,8 +1,8 @@
 # Maintainer: Moritz Bunkus <moritz@bunkus.org>
 
 pkgname="osslsigncode"
-pkgver="2.5"
-pkgrel="2"
+pkgver="2.6"
+pkgrel="1"
 pkgdesc="OpenSSL based Authenticode signing for PE/MSI/Java CAB files"
 arch=('i686' 'x86_64')
 url="https://github.com/mtrojnar/osslsigncode"
@@ -10,21 +10,18 @@ license=('GPL')
 depends=('curl' 'openssl')
 makedepends=('cmake')
 source=("https://github.com/mtrojnar/${pkgname}/archive/${pkgver}.tar.gz"
-        "legacy_pkcs12_ciphers_support_01_119b88bb3d572b2c5deacf466b5c1dce6acc13eb.patch"
-        "legacy_pkcs12_ciphers_support_02_2dcbc99f79ba9e2c1b88fac15f0017d4e859ccde.patch"
-       )
-sha512sums=('b50a7c8a8fb6668e999d9e63a931e5888c31f202ca539b62a385be6bacb03c2d25ac5fabd660c779817f0ebea14e9dfe05cdcb180c1cd25f818c07c28ebd88ce'
-            'a3a27c5adc2fc5c04a109f6b8a7fd5e12128e786d82f782fcd529cabc88d709c19363c1d38cc3de7680557bd84a93371b85033c6c46f4e4ee82f0bfd61a33a7e'
-            '62553cef66fe8ae31ba7252e23aed51b0ff6f562bc204f2039410e63285690676a96cf4a4ad5b6c12eacd68adef811bbfe1022c72a092ac7dc4b7427de7bef43')
+        "issue-276-8854cada70456102df32a1c5d51b46809e66d63f.diff")
+sha512sums=('f2ad32d13bd355b196484af47e66e972a4f27e54c7a9188d754a83e9f751363dcc4d6b93f1aed1fef16b5eadead43f08b831dbe9fdfde11d159880450e3e819d'
+            '7ca0deff8913623cbb2525eeae92b2369f35a68b46a4ec0fde4588113a2858df07e144c9a30d95487973d8fa9bc223bd6a655c6208a1000a0ef48a3aa08ff1b5')
 
 prepare() {
-  patch -d "osslsigncode-${pkgver}" -p1 < "${srcdir}/legacy_pkcs12_ciphers_support_01_119b88bb3d572b2c5deacf466b5c1dce6acc13eb.patch"
-  # patch -d "osslsigncode-${pkgver}" -p1 < "${srcdir}/legacy_pkcs12_ciphers_support_02_2dcbc99f79ba9e2c1b88fac15f0017d4e859ccde.patch"
+  patch -d "osslsigncode-${pkgver}" -p1 < "${srcdir}/issue-276-8854cada70456102df32a1c5d51b46809e66d63f.diff"
 
   cmake \
     -B build -S "$srcdir/osslsigncode-${pkgver}" \
     -DCMAKE_BUILD_TYPE=Release \
-    -DCMAKE_INSTALL_PREFIX=/usr
+    -DCMAKE_INSTALL_PREFIX=/usr \
+    -DSTOP_SERVER=OFF
 }
 
 build() {
diff --git a/issue-276-8854cada70456102df32a1c5d51b46809e66d63f.diff b/issue-276-8854cada70456102df32a1c5d51b46809e66d63f.diff
new file mode 100644
index 000000000000..22a1340982c3
--- /dev/null
+++ b/issue-276-8854cada70456102df32a1c5d51b46809e66d63f.diff
@@ -0,0 +1,88 @@
+diff --git a/msi.c b/msi.c
+index 2ebad3b..2347e74 100644
+--- a/msi.c
++++ b/msi.c
+@@ -186,13 +186,16 @@ typedef struct {
+     char *ministream;
+     char *minifat;
+     char *fat;
++    char *difat;
+     uint32_t dirtreeLen;
+     uint32_t miniStreamLen;
+     uint32_t minifatLen;
+     uint32_t fatLen;
++    uint32_t difatLen;
+     uint32_t ministreamsMemallocCount;
+     uint32_t minifatMemallocCount;
+     uint32_t fatMemallocCount;
++    uint32_t difatMemallocCount;
+     uint32_t dirtreeSectorsCount;
+     uint32_t minifatSectorsCount;
+     uint32_t fatSectorsCount;
+@@ -1542,6 +1545,16 @@ static void fat_append(MSI_OUT *out, char *buf, uint32_t len)
+     out->fatLen += len;
+ }
+ 
++static void difat_append(MSI_OUT *out, char *buf, uint32_t len)
++{
++    if (out->difatLen == (uint64_t)out->difatMemallocCount * out->sectorSize) {
++        out->difatMemallocCount += 1;
++        out->difat = OPENSSL_realloc(out->difat, (size_t)(out->difatMemallocCount * out->sectorSize));
++    }
++    memcpy(out->difat + out->difatLen, buf, (size_t)len);
++    out->difatLen += len;
++}
++
+ static int msi_dirent_delete(MSI_DIRENT *dirent, const u_char *name, uint16_t nameLen)
+ {
+     int i;
+@@ -1938,15 +1951,6 @@ static void dirtree_save(MSI_DIRENT *dirent, BIO *outdata, MSI_OUT *out)
+     out->sectorNum += out->dirtreeSectorsCount;
+ }
+ 
+-static void fat_pad_last_sector(MSI_OUT *out, int padValue, char *buf)
+-{
+-    if (out->fatLen % out->sectorSize > 0) {
+-        uint32_t remain = out->sectorSize - out->fatLen % out->sectorSize;
+-        memset(buf, padValue, (size_t)remain);
+-        fat_append(out, buf, remain);
+-    }
+-}
+-
+ static int fat_save(BIO *outdata, MSI_OUT *out)
+ {
+     char buf[MAX_SECTOR_SIZE];
+@@ -1955,8 +1959,6 @@ static int fat_save(BIO *outdata, MSI_OUT *out)
+     remain = (out->fatLen + out->sectorSize - 1) / out->sectorSize;
+     out->fatSectorsCount = (out->fatLen + remain * 4 + out->sectorSize - 1) / out->sectorSize;
+ 
+-    fat_pad_last_sector(out, 0, buf);
+-
+     if (out->fatSectorsCount > DIFAT_IN_HEADER) {
+         difatEntriesPerSector = (out->sectorSize / 4) - 1;
+         difatSectors = (out->fatSectorsCount - DIFAT_IN_HEADER + difatEntriesPerSector - 1) / difatEntriesPerSector;
+@@ -2001,7 +2003,7 @@ static int fat_save(BIO *outdata, MSI_OUT *out)
+                 PUT_UINT32_LE(out->sectorNum + 1, buf + out->sectorSize - 4);
+             }
+ 
+-            fat_append(out, buf, out->sectorSize);
++            difat_append(out, buf, out->sectorSize);
+             out->sectorNum++;
+         }
+     }
+@@ -2019,9 +2021,14 @@ static int fat_save(BIO *outdata, MSI_OUT *out)
+     }
+ 
+     /* empty unallocated free sectors in the last FAT sector */
+-    fat_pad_last_sector(out, (int)FREESECT, buf);
++    if (out->fatLen % out->sectorSize > 0) {
++        remain = out->sectorSize - out->fatLen % out->sectorSize;
++        memset(buf, (int)FREESECT, (size_t)remain);
++        fat_append(out, buf, remain);
++    }
+ 
+     BIO_write(outdata, out->fat, (int)out->fatLen);
++    BIO_write(outdata, out->difat, (int)out->difatLen);
+     return 1; /* OK */
+ }
+ 
diff --git a/legacy_pkcs12_ciphers_support_01_119b88bb3d572b2c5deacf466b5c1dce6acc13eb.patch b/legacy_pkcs12_ciphers_support_01_119b88bb3d572b2c5deacf466b5c1dce6acc13eb.patch
deleted file mode 100644
index a1df2afddcfb..000000000000
--- a/legacy_pkcs12_ciphers_support_01_119b88bb3d572b2c5deacf466b5c1dce6acc13eb.patch
+++ /dev/null
@@ -1,161 +0,0 @@
-From 119b88bb3d572b2c5deacf466b5c1dce6acc13eb Mon Sep 17 00:00:00 2001
-From: olszomal <Malgorzata.Olszowka@stunnel.org>
-Date: Tue, 29 Nov 2022 10:01:39 +0100
-Subject: [PATCH] Legacy pkcs12 ciphers support
-
----
- osslsigncode.c | 78 ++++++++++++++++++++++++++++++++++++++++++++++++++
- 1 file changed, 78 insertions(+)
-
-diff --git a/osslsigncode.c b/osslsigncode.c
-index e4cbd52..d520ce7 100644
---- a/osslsigncode.c
-+++ b/osslsigncode.c
-@@ -113,6 +113,9 @@
- #ifndef OPENSSL_NO_ENGINE
- #include <openssl/engine.h>
- #endif /* OPENSSL_NO_ENGINE */
-+#if OPENSSL_VERSION_NUMBER>=0x30000000L
-+#include <openssl/provider.h>
-+#endif /* OPENSSL_VERSION_NUMBER>=0x30000000L */
- 
- #include "msi.h"
- 
-@@ -248,6 +251,9 @@ typedef struct {
- 	char *tsa_crlfile;
- 	char *leafhash;
- 	int jp;
-+#if OPENSSL_VERSION_NUMBER>=0x30000000L
-+	int legacy;
-+#endif /* OPENSSL_VERSION_NUMBER>=0x30000000L */
- } GLOBAL_OPTIONS;
- 
- typedef struct {
-@@ -1198,6 +1204,9 @@ static void usage(const char *argv0, const char *cmd)
- 		printf("%1s[ sign ] ( -certs | -spc <certfile> -key <keyfile> | -pkcs12 <pkcs12file> |\n", "");
- 		printf("%12s  [ -pkcs11engine <engine> ] -pkcs11module <module> -pkcs11cert <pkcs11 cert id> |\n", "");
- 		printf("%12s  -certs <certfile> -key <pkcs11 key id>)\n", "");
-+#if OPENSSL_VERSION_NUMBER>=0x30000000L
-+		printf("%12s[ -nolegacy ]\n", "");
-+#endif /* OPENSSL_VERSION_NUMBER>=0x30000000L */
- 		printf("%12s[ -pass <password>", "");
- #ifdef PROVIDE_ASKPASS
- 		printf("%1s [ -askpass ]", "");
-@@ -1288,6 +1297,9 @@ static void help_for(const char *argv0, const char *cmd)
- 	const char *cmds_in[] = {"add", "attach-signature", "extract-signature", "remove-signature", "sign", "verify", NULL};
- 	const char *cmds_jp[] = {"sign", NULL};
- 	const char *cmds_key[] = {"sign", NULL};
-+#if OPENSSL_VERSION_NUMBER>=0x30000000L
-+	const char *cmds_nolegacy[] = {"sign", NULL};
-+#endif /* OPENSSL_VERSION_NUMBER>=0x30000000L */
- 	const char *cmds_n[] = {"sign", NULL};
- 	const char *cmds_nest[] = {"attach-signature", "sign", NULL};
- #ifdef ENABLE_CURL
-@@ -1400,6 +1412,10 @@ static void help_for(const char *argv0, const char *cmd)
- 		printf("%26slevels of permissions in Microsoft Internet Explorer 4.x for CAB files\n", "");
- 		printf("%26sonly \"low\" level is now supported\n", "");
- 	}
-+#if OPENSSL_VERSION_NUMBER>=0x30000000L
-+	if (on_list(cmd, cmds_nolegacy))
-+		printf("%-24s= disable legacy mode and don't automatically load the legacy provider\n", "-nolegacy");
-+#endif /* OPENSSL_VERSION_NUMBER>=0x30000000L */
- 	if (on_list(cmd, cmds_key))
- 		printf("%-24s= the private key to use or PKCS#11 URI identifies a key in the token\n", "-key");
- 	if (on_list(cmd, cmds_n))
-@@ -5736,6 +5752,52 @@ static cmd_type_t get_command(char **argv)
- 	return CMD_SIGN;
- }
- 
-+#if OPENSSL_VERSION_NUMBER>=0x30000000L
-+DEFINE_STACK_OF(OSSL_PROVIDER)
-+static STACK_OF(OSSL_PROVIDER) *providers = NULL;
-+
-+static void provider_free(OSSL_PROVIDER *prov)
-+{
-+	OSSL_PROVIDER_unload(prov);
-+}
-+
-+static void providers_cleanup(void)
-+{
-+	sk_OSSL_PROVIDER_pop_free(providers, provider_free);
-+	providers = NULL;
-+}
-+
-+static int provider_load(OSSL_LIB_CTX *libctx, const char *pname)
-+{
-+	OSSL_PROVIDER *prov= OSSL_PROVIDER_load(libctx, pname);
-+	if (prov == NULL) {
-+		printf("Unable to load provider: %s\n", pname);
-+		return 0; /* FAILED */
-+	}
-+	if (providers == NULL) {
-+		providers = sk_OSSL_PROVIDER_new_null();
-+	}
-+	if (providers == NULL || !sk_OSSL_PROVIDER_push(providers, prov)) {
-+		providers_cleanup();
-+		return 0; /* FAILED */
-+	}
-+	return 1; /* OK */
-+}
-+
-+static int use_legacy(void)
-+{
-+	/* load the legacy provider if not loaded already */
-+	if (!OSSL_PROVIDER_available(NULL, "legacy")) {
-+		if (!provider_load(NULL, "legacy"))
-+			return 0; /* FAILED */
-+		/* load the default provider explicitly */
-+		if (!provider_load(NULL, "default"))
-+			return 0; /* FAILED */
-+	}
-+	return 1; /* OK */
-+}
-+#endif /* OPENSSL_VERSION_NUMBER>=0x30000000L */
-+
- static int main_configure(int argc, char **argv, cmd_type_t *cmd, GLOBAL_OPTIONS *options)
- {
- 	int i;
-@@ -5751,6 +5813,10 @@ static int main_configure(int argc, char **argv, cmd_type_t *cmd, GLOBAL_OPTIONS
- 	options->md = EVP_sha256();
- 	options->time = INVALID_TIME;
- 	options->jp = -1;
-+#if OPENSSL_VERSION_NUMBER>=0x30000000L
-+/* Use legacy PKCS#12 container with RC2-40-CBC private key and certificate encryption algorithm */
-+	options->legacy = 1;
-+#endif /* OPENSSL_VERSION_NUMBER>=0x30000000L */
- 
- 	if (*cmd == CMD_HELP) {
- 		return 0; /* FAILED */
-@@ -5824,6 +5890,10 @@ static int main_configure(int argc, char **argv, cmd_type_t *cmd, GLOBAL_OPTIONS
- 			}
- 			options->p11module = *(++argv);
- #endif /* OPENSSL_NO_ENGINE */
-+#if OPENSSL_VERSION_NUMBER>=0x30000000L
-+		} else if ((*cmd == CMD_SIGN) && !strcmp(*argv, "-nolegacy")) {
-+			options->legacy = 0;
-+#endif /* OPENSSL_VERSION_NUMBER>=0x30000000L */
- 		} else if ((*cmd == CMD_SIGN) && !strcmp(*argv, "-pass")) {
- 			if (options->askpass || options->readpass) {
- 				usage(argv0, "all");
-@@ -6051,6 +6121,11 @@ static int main_configure(int argc, char **argv, cmd_type_t *cmd, GLOBAL_OPTIONS
- 		return 0; /* FAILED */
- 	}
- #endif /* WIN32 */
-+#if OPENSSL_VERSION_NUMBER>=0x30000000L
-+	if (*cmd == CMD_SIGN && options->legacy && !use_legacy()) {
-+		printf("Warning: Legacy mode disabled\n");
-+	}
-+#endif /* OPENSSL_VERSION_NUMBER>=0x30000000L */
- 	return 1; /* OK */
- }
- 
-@@ -6313,6 +6388,9 @@ int main(int argc, char **argv)
- 	free_msi_params(&msiparams);
- 	free_crypto_params(&cparams);
- 	free_options(&options);
-+#if OPENSSL_VERSION_NUMBER>=0x30000000L
-+	providers_cleanup();
-+#endif /* OPENSSL_VERSION_NUMBER>=0x30000000L */
- 	if (ret)
- 		ERR_print_errors_fp(stdout);
- 	if (cmd == CMD_HELP)
diff --git a/legacy_pkcs12_ciphers_support_02_2dcbc99f79ba9e2c1b88fac15f0017d4e859ccde.patch b/legacy_pkcs12_ciphers_support_02_2dcbc99f79ba9e2c1b88fac15f0017d4e859ccde.patch
deleted file mode 100644
index adb167bb9837..000000000000
--- a/legacy_pkcs12_ciphers_support_02_2dcbc99f79ba9e2c1b88fac15f0017d4e859ccde.patch
+++ /dev/null
@@ -1,1421 +0,0 @@
-From 2dcbc99f79ba9e2c1b88fac15f0017d4e859ccde Mon Sep 17 00:00:00 2001
-From: olszomal <Malgorzata.Olszowka@stunnel.org>
-Date: Tue, 29 Nov 2022 10:03:19 +0100
-Subject: [PATCH] Legacy pkcs12 ciphers tests Use legacy PKCS#12 container with
- RC2-40-CBC private key and certificate encryption algorithm
-
----
- cmake/CMakeTest.cmake            |  15 +++++++-
- tests/certs/CACert.pem           |  30 +++++++--------
- tests/certs/CACertCRL.pem        |  16 ++++----
- tests/certs/TSA.key              |  52 +++++++++++++-------------
- tests/certs/TSA.pem              |  30 +++++++--------
- tests/certs/TSACA.pem            |  30 +++++++--------
- tests/certs/cert.der             | Bin 1010 -> 1010 bytes
- tests/certs/cert.p12             | Bin 3731 -> 3747 bytes
- tests/certs/cert.pem             |  62 +++++++++++++++----------------
- tests/certs/cert.spc             | Bin 2001 -> 2001 bytes
- tests/certs/crosscert.pem        |  32 ++++++++--------
- tests/certs/expired.pem          |  60 +++++++++++++++---------------
- tests/certs/intermediate.pem     |  30 +++++++--------
- tests/certs/key.der              | Bin 1190 -> 1216 bytes
- tests/certs/key.pem              |  55 +++++++++++++--------------
- tests/certs/key.pvk              | Bin 1196 -> 1196 bytes
- tests/certs/keyp.pem             |  60 +++++++++++++++---------------
- tests/certs/legacy.p12           | Bin 0 -> 3715 bytes
- tests/certs/revoked.pem          |  62 +++++++++++++++----------------
- tests/certs/revoked.spc          | Bin 2463 -> 2463 bytes
- tests/certs/tsa-chain.pem        |  60 +++++++++++++++---------------
- tests/certs/tsa-serial           |   1 +
- tests/{certs => conf}/.gitignore |   0
- tests/conf/makecerts.sh          |  29 ++++++++++++---
- tests/conf/openssl_tsa_root.cnf  |   1 +
- 25 files changed, 329 insertions(+), 296 deletions(-)
- create mode 100644 tests/certs/legacy.p12
- create mode 100644 tests/certs/tsa-serial
- rename tests/{certs => conf}/.gitignore (100%)
-
-diff --git a/cmake/CMakeTest.cmake b/cmake/CMakeTest.cmake
-index 140e247..44f1d30 100644
---- a/cmake/CMakeTest.cmake
-+++ b/cmake/CMakeTest.cmake
-@@ -20,6 +20,7 @@ file(COPY
-   DESTINATION "${CONF}"
- )
- 
-+set(legacy_p12 "-pkcs12" "${CERTS}/legacy.p12" "-readpass" "${CERTS}/password.txt")
- set(priv_p12 "-pkcs12" "${CERTS}/cert.p12" "-readpass" "${CERTS}/password.txt")
- set(priv_spc "-certs" "${CERTS}/cert.spc" "-key" "${CERTS}/key.pvk" "-pass" "passme")
- set(priv_der "-certs" "${CERTS}/cert.pem" "-key" "${CERTS}/key.der" "-pass" "passme")
-@@ -61,7 +62,7 @@ set(verify_opt "-CAfile" "${CERTS}/CACert.pem"
- )
- set(extensions_4 "exe" "ex_" "msi" "cat")
- set(extensions_3 "exe" "ex_" "msi")
--set(files_4 "signed" "nested" "added")
-+set(files_4 "legacy" "signed" "nested" "added")
- set(files_3 "removed" "attached_pem" "attached_der")
- set(sign_formats "pem" "der")
- set(pem_certs "cert" "expired" "revoked")
-@@ -74,7 +75,16 @@ add_test(
- 
- foreach(ext ${extensions_4})
-   # Signing time: May  1 00:00:00 2019 GMT
--  set(sign_${ext} )
-+  add_test(
-+    NAME legacy_${ext}
-+    COMMAND osslsigncode "sign" ${sign_opt} ${legacy_p12}
-+      "-in" "${FILES}/unsigned.${ext}" "-out" "${FILES}/legacy.${ext}"
-+  )
-+endforeach()
-+
-+foreach(ext ${extensions_4})
-+  # Signing time: May  1 00:00:00 2019 GMT
-+  set(sign_${ext})
-   add_test(
-     NAME signed_${ext}
-     COMMAND osslsigncode "sign" ${sign_opt} ${priv_p12}
-@@ -280,6 +290,7 @@ else()
- endif()
- 
- foreach(ext ${extensions_4})
-+  set(OUTPUT_FILES ${OUTPUT_FILES} "${FILES}/legacy.${ext}")
-   set(OUTPUT_FILES ${OUTPUT_FILES} "${FILES}/signed.${ext}")
-   set(OUTPUT_FILES ${OUTPUT_FILES} "${FILES}/nested.${ext}")
-   set(OUTPUT_FILES ${OUTPUT_FILES} "${FILES}/removed.${ext}")
-diff --git a/tests/certs/CACert.pem b/tests/certs/CACert.pem
-index e77f7fe..bfffc5d 100644
---- a/tests/certs/CACert.pem
-+++ b/tests/certs/CACert.pem
-@@ -1,22 +1,22 @@
- -----BEGIN CERTIFICATE-----
--MIIDoTCCAomgAwIBAgIUOK8lwJ8A1Oqw8jDAb3TF06ve+PcwDQYJKoZIhvcNAQEL
-+MIIDoTCCAomgAwIBAgIUD5zM9oBx4OIRM05wnRjq2Ap2dlowDQYJKoZIhvcNAQEL
- BQAwWDELMAkGA1UEBhMCUEwxFTATBgNVBAoMDG9zc2xzaWduY29kZTEgMB4GA1UE
- CwwXQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxEDAOBgNVBAMMB1Jvb3QgQ0EwHhcN
- MTcwMTAxMDAwMDAwWhcNMjYxMTEwMDAwMDAwWjBYMQswCQYDVQQGEwJQTDEVMBMG
- A1UECgwMb3NzbHNpZ25jb2RlMSAwHgYDVQQLDBdDZXJ0aWZpY2F0aW9uIEF1dGhv
- cml0eTEQMA4GA1UEAwwHUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
--AQoCggEBAKzObJwYq4t9Y/OOQLqUNLU8RDXq284L8zQgRLkvApF87FNN7kozIgC9
--/HAgJSho/Lup5lzkCWa3fjkYm1EBrL+JihesSaCxxe7LOg6tRaY+WxikwMUnlkNE
--s3R+DogeGVsla4q0FEcICiz3FHTfSAUVmrN3Nj1ll7npJXrqmXxfCuO3slgjUkHq
--tdZ5t1rSWwbiUhGIQKLzo3/uw2XoOI28qpoOw+0/y8AyjWs8My3u8GrYFr+qh5fx
--Y0Zp0EhhAJo23Xd43XmeVKjuKIOaHu3JiM8sp9K1WFsTvFNAO27TBRn/X0mJCeDX
--T117dQxhWOCcQ/uRGuXICT4ign8MLtUCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB
--/zAdBgNVHQ4EFgQU6ewx3DIpbR8OptEmDFlYNELRqP4wHwYDVR0jBBgwFoAU6ewx
--3DIpbR8OptEmDFlYNELRqP4wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUA
--A4IBAQAhRMun0IzPmHVFM+SOfSCPVAgogWpqR5XlBAFlS+Aen6v3ukQAQjEhfBbE
--dZG6ye9i0ebf9qXYTvSq5wfaqP7FGb2/Z96uPXNMXPi796KjLW2CG578DitORPb7
--x1eV3UGrQX2bMQ0JbGkBU+DIdIRBqDfad/kjLtm5eHyCbaodSWdaZO4LSUIy3MBx
--2UeBj2qD4RTA0Dt7hG7RA5QdTxHlZyLIk8HX3krZ+il5RmSbOnQs/XqK5DJp4J5p
--122sIO4Y9ki+Wewzx8f3/7mcVbcMo67GwRHo8bk3GjWE74pczyrzfP68vDQ4tn85
--NcLPeLClfSziJD09z+Iyp94EQeKX
-+AQoCggEBAKap6aiOWSWzu26AxjlHa4L8sTzYGxQZysvbys3FIxqsztIsWRB0jKq7
-+V4x2why9Sgi6tGKWatk0xOckTDiyFFD7BRYf3qDxFivzTkKCvhbvbbxX/6VwcOfR
-+XQ0JTQeWFD2o26WWO2MbM0ZXyfZBbiRgIqVi+fbmoEASfYz7eGYET/w7807ERDch
-+E3o1XbCgc4mFO/pS3sMykW+2zCz09SGLGKmdkReWXhpiTZ1ZEk9GrqVqKKZ14UIA
-+h6nCwoNQpjmQx8KDfjnTYRPYg0N03MjL9i3F11qpYgu6VdZ2l/xaun3NYFBrJ+44
-+Pdc+QOqVZZB1YqWqQYPm/OoSlY5p2xECAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB
-+/zAdBgNVHQ4EFgQUc2QE5V0j8b3ef6gx5kBosb0lE1IwHwYDVR0jBBgwFoAUc2QE
-+5V0j8b3ef6gx5kBosb0lE1IwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUA
-+A4IBAQA1jjltAjaXdGmNTLmbD/EvsqCtmX0gS0tXsncbxHEmBNq/gStZg4IhqApw
-+LE8uVkjGVxRd3JPsqNL2furjzK1axMZsaNkJD1dWxcT8kfC3+cngTPiWOlCmbjJW
-+CjuUWlAUnlFU9VfW0xKMToEC3yU16MSM6L3dIgkp7TC1AfhQLj5Iokn5Cc4r5kzT
-+i/sQPlzPYVE+3Onq5VGMMkzK8gmS81Zqndfd0KQvKVdHZrsM88U3+1nKEsQ4dd/3
-+8HV+C7LE+ydPV3ywJa6KTtmCMhUlLb2IpNbBgRkro69rkJWtSVDIHjoqwKokGDzx
-+kolS+GurfGkHKTbY8HwyfBTQjZR1
- -----END CERTIFICATE-----
-diff --git a/tests/certs/CACertCRL.pem b/tests/certs/CACertCRL.pem
-index 30e30fa..305530a 100644
---- a/tests/certs/CACertCRL.pem
-+++ b/tests/certs/CACertCRL.pem
-@@ -2,12 +2,12 @@
- MIIB9zCB4AIBATANBgkqhkiG9w0BAQsFADBgMQswCQYDVQQGEwJQTDEVMBMGA1UE
- CgwMb3NzbHNpZ25jb2RlMSAwHgYDVQQLDBdDZXJ0aWZpY2F0aW9uIEF1dGhvcml0
- eTEYMBYGA1UEAwwPSW50ZXJtZWRpYXRlIENBFw0xOTAxMDEwMDAwMDBaFw00MzAx
--MDEwMDAwMDBaMCcwJQIUOpY5wp7DtqsdxII7sxculedk0PYXDTIyMDcyNjEzMDk1
--NlqgIzAhMB8GA1UdIwQYMBaAFJ4FrAtb4UB/ag702URPiid97ziLMA0GCSqGSIb3
--DQEBCwUAA4IBAQA4Kw0vEJrtjjMam16iN/stOMxJDgkp1IQzA3narxr9fEjX5Ynk
--JztuEExtowPIDOLGWCySXNEMmxCzXNAMvlUq+UQvnWrwgHQ9R7TBYIcAY+VRmzKz
--T4PXvDSL2WMuJ1dLWoIcL2D0wEdti7YMvAnCrOC8HAPGgke5QcOgSfMSAYSAtpiw
--PZAFgcuo53AodlCw9J+CPcHPYw+C2QExOy8s8q6d8Xgjg+Ge7v3RxLWy74sNPl0u
--uZ79vcLNEeqEXxKaw5abqDqIDcUKIT3b62KsSxkak9IGNMLcTASw1V+YaKVLSYNW
--NTuc5WJblfZi/q7WUMKkmRERzvdg2rf0CSH1
-+MDEwMDAwMDBaMCcwJQIUDNLHzkIApmatwuk4ju+Cl74nPlsXDTIyMTEyODE0MjIy
-+NVqgIzAhMB8GA1UdIwQYMBaAFDOp0wp8AlPBt9gaqapVpq6gXOmcMA0GCSqGSIb3
-+DQEBCwUAA4IBAQC2ThTTU7HzwKakJGaeAXsv57I9gQwZJh1sM0CW1bYhQCFQXx9n
-+hNnpKu3CezoldjTYgZHphAwrZfLz/u8bKuxuOn/gBT6tRNU7YhFd605Qp6AzCQus
-+bENda7LYc+cWbrxtndc54zmEMZ1LkpYE62APN/aCC29BlWQQw+/IvprI10MROlB2
-+z3tUjiBNmabHyD2tVLPfuoK3Wdm0upWSYhDJNuFwdIhyZgkYo04YxHrmnfkIp6fD
-+HuD341PRMTAItN4334HaJwgu2Oa8MdiiG+ZPlIUSFePgFLgFeNE3EgwTxIu8SQNo
-+k5EM7M5+03i7C8p9bBS88n2LzHhoHDI8gfvQ
- -----END X509 CRL-----
-diff --git a/tests/certs/TSA.key b/tests/certs/TSA.key
-index 5175610..1d46366 100644
---- a/tests/certs/TSA.key
-+++ b/tests/certs/TSA.key
-@@ -1,28 +1,28 @@
- -----BEGIN PRIVATE KEY-----
--MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCivbbTCnbOqPoV
--7VVP/KJzgslx8yfX9laGwTsvzqStQtG8j40ljR85WD/bgy3I5duebudg7JhOVH2f
--aSqbh8SCzP4YNDFcseDIuHdoXi54POgW3S/wbe8l8P7g3btcBgnlXh/izhUlEMib
--Q/8G8UZj0n/MgKMLzcXc4t2eQ4Pzw7xAPqoXBZ20Fg2rFBfUsDDLc5F7lpO5t1WQ
--dXTYmF0oAL/HLmd+HKe5Xgp9jJ6XacesjWLnhRdZ06uUP9cgo+Jem4QZxeFhOtMe
--KAf7JH3Juz2Gi0a+4dMSNzES4m8RAlf6pXh4kAh7EhMNb/Ir6ZpY8uKM7dtn38mh
--1f59EKc9AgMBAAECggEAK5zB0P695hYcpyGqOjxO4LvM9m+eXt7SQ1ynWuF6+j+s
--62ZhAg42rux6eH5IF82ZtHSuJyhgjKVR4RWS6IlS3WbINX5PODMnNUNSJLMQqwJP
--hEkUXs9nRni2JVbmrfukTUaTLvnhasR7rjhjsN2Z6ohv3UMf7rrfapmVoKMhSoLd
--jqvZ2ZoaT5mfTiK/5PDyWqrt/vmvE4VlipAsvudwozG5vQDEsCNDNUTg5OTGnPUU
--i0xeQTioqzCcweIlEaWhj/eMHx/eAeZ6V0Evid/YwTDlbTqVDWZGLJ/phOnKJs3V
--j+eOv7E2d1ga7149SPDIv5Y0YZ91v3M06ICk5o66gQKBgQDSM+YyR5YOJTSAuAcI
--uKTc33wwCbPiJF/F1zLJDdPp2IamZQbuNIX/8fOG3Gho+OnfNAykMcr3rFrug2vi
--9GhWDQqguYGh16xos+2zNan6P/s0/rQ4OfPIsTEGC8X3fJeMzZUNMvnyN/FXzzus
--020o29gu59esEfGHEsvAupC3IQKBgQDGMqGLgrU4oW/5mmm4BZlwwkZJNMmFH49u
--Qe4Ylj87SQduExJMmTfrmANqQXu7RXG0IxLcvhwMLVCCYAkvuBv1awsbg2yfP1Pn
--Wb/K+5CaHaxnpwSpRiGaN6fnAPDl8PnALMVXtQGru2MMcISxOIFQ9slHth0lmaMo
--odIPIL1YnQKBgAOSskUEhn5zD3NorWXujY7blabTY2VirOYWBFz6iTGeZpuJeBaw
--ed6h5DvUn0m5gXAz2EsqNYMEQP9w6HKRKPzdd+LHhHaVze5xsIatUNhaIhECi1mx
--Un2E1Yp+xLyyN3lDPVdeGHWPkeCmOyNy7JYXNpOFiVr5axuarC/4e+FBAoGAeuRR
--/mshaufOwnnYK15tcdlEM4gjnAOhr7/5ng0rT9tMXBg/NHeckNxE4dGQouHASu2k
--eHL4eSRv0ycxCwGhdF7XGEw5QdTGdaDUp0ussaLMj8ijv0HY/AKefUG8HRd6BIq+
--Ik/9pTofhEsQO8LJjCY5T9m/4NyOqlcMJI0sWpECgYBvPLnutbBXYONVAE3jL05K
--hWwenKpv5Aaa11ahqzhil2Tj+VOMtmvhsSc5loSG83qp5LtN4LxyR0Vn9AGN7Z+d
--Ut6LHeZ/DMW3/RPT+1MIKm6WLNxgk5YvuCxprdpfE5tTmV9/t+t3Uao7TRsLPl2o
--qAKz8Fvq0el5RW3EtAgd4A==
-+MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDngzpJn/umy8rb
-+AySHhXZ4jxljzZ/xDW/8txby3fg1LLP1zeP9g5Vwq70B5Z2V1QWevuiCzzEhMKxU
-+6JvFUgJnCAqKLxcPxmplgLHIOftq6ly3XicmvwXzD8uE0mDNP50v4hABl66OlRF+
-+3cGlwEHlr/A4VYcyEc70xBI2cUjmutr2O2+Ncpamw/iAl60zuKD9CGP7AMfcfUC1
-+CdlomyMAk3ROvWoJXxV5jCg7LoTQWSzdzQLi2/mBjG0y9Hl4dlR27jsoeUNlkluS
-+C8Dh3mPGQ/rfIEc/en1UO+sVZRo9iBJCw88zjv6uCf2nlevaAUptRuvQqEv4WMNa
-+MDe0LqKFAgMBAAECggEADGeQHnTHf5Lozh5XfTlt9Ry5wAq6+Kf/KZvHy4CQNY0t
-+IU0EW8eKoMxa5rieXnJZCD3zaFrgp4YbnbsO6Z4wycN5CRln020Os1yXagKNUZe4
-+Gw0c7OsMTw84GOhKzoSLkA69S9CMRlB/bPxFzXNFNKDeLq6KfWjN3XiJ/0fHn7Em
-+RnHB3C7/z+u70YbkN1T7edzn70NRhBNCVIXuXxrQ946BRJOGyHlarDHQPffGfYzs
-+r4Ym7DRd2RyIH3xWdJfEdcQOgioYpQqMiXk+afMNRNbkSpi2ImPACIpX54Zxkjni
-+/zjST+CBC/8PZfdmVCW/mRNs2IOmZWCK3yka7JKRgQKBgQD1S9VJbBLHpKAtnahr
-+yqwAD82dnaw21BKJaPqeOq4it+EF8p2xmjDCuOXl8qw5t0+SgIalQwWzWVCLoav9
-+58ajCJwuTcqnrrmhx0oX3eAYt6z/hnInWdLpDppg8BOxMmFzgPI2+6g3SyXDex29
-+RslygQ8/xReUV//LOYayK4GPQQKBgQDxnWt8MnGiQGVaA1x7wM96C0Y8RfuaqfNX
-+/eyuw9Z4AB+wg4G2d0NhsbSNdmZ72KuKXaa2Gl3MJ7ImUGbskgTNybQfIwftwcSZ
-+Road4j3ZVfNN6QdOEu+c/8xyf4wEf1ygD7qp/geXRSOf1eAC3bg+qAPFRi4Ml9vZ
-+WPtQHoeGRQKBgQC1ZeQPzPVCYHL36NxRAmsaDJXA1oYxcblXlqOnebum/xZQgK+v
-+VFh016lj2IcWk4Ir1BI+iobfr9AJwoBfXxSdIlPlRi/0uxiaE7euWK1Neh9cQ7+N
-+bDa1lNADmebmJly8vwHgOVCXu2Hs4tIGVB/LJrfxL76VPFJ0plD+13+TQQKBgQCu
-+tXLMerlaZpAi930/axtbl51w5fXaT3vLq6wiby+80/IWM/FunGyXzuTMycmvUeww
-+gCmVUhlzD10tgUP7Wlao62oYfb8098EOSEX9EmRArHrjYlZK6TxkXT9bp8j6U5IJ
-+l3YVh7+7bV4mLIPv7p1UiS84zddseb6aOlJ3C6xZtQKBgQCSBAvt4wrMU62+0Zu/
-+RAPl0QOR+4WtbVIuoROeYk3Vm5CFooZmE2PcCmatXw2LL9VPQ+wIsc8Ov/c6SNjW
-+8FUj2ihdLEhA4pLl7hADAnNBwSnK2nODP1TDoIKG1Hw5yZoYIS4xFz/F96brkaLE
-+IiONCCr/bs9tYZNfl92oXvIc/A==
- -----END PRIVATE KEY-----
-diff --git a/tests/certs/TSA.pem b/tests/certs/TSA.pem
-index 8382d10..0425894 100644
---- a/tests/certs/TSA.pem
-+++ b/tests/certs/TSA.pem
-@@ -1,28 +1,28 @@
- -----BEGIN CERTIFICATE-----
--MIIEzTCCA7WgAwIBAgIUfRjXKciCGA4XbhbhxbAwfpcLGmowDQYJKoZIhvcNAQEL
-+MIIEzTCCA7WgAwIBAgIUaDV4MOupysdYAfwy1BiaGDN6KWwwDQYJKoZIhvcNAQEL
- BQAwYDELMAkGA1UEBhMCUEwxFTATBgNVBAoMDG9zc2xzaWduY29kZTEkMCIGA1UE
- CwwbVGltZXN0YW1wIEF1dGhvcml0eSBSb290IENBMRQwEgYDVQQDDAtUU0EgUm9v
- dCBDQTAeFw0xODAxMDEwMDAwMDBaFw0yODAxMDEwMDAwMDBaMFUxCzAJBgNVBAYT
- AlBMMRUwEwYDVQQKDAxvc3Nsc2lnbmNvZGUxHDAaBgNVBAsME1RpbWVzdGFtcCBB
- dXRob3JpdHkxETAPBgNVBAMMCFRlc3QgVFNBMIIBIjANBgkqhkiG9w0BAQEFAAOC
--AQ8AMIIBCgKCAQEAor220wp2zqj6Fe1VT/yic4LJcfMn1/ZWhsE7L86krULRvI+N
--JY0fOVg/24MtyOXbnm7nYOyYTlR9n2kqm4fEgsz+GDQxXLHgyLh3aF4ueDzoFt0v
--8G3vJfD+4N27XAYJ5V4f4s4VJRDIm0P/BvFGY9J/zICjC83F3OLdnkOD88O8QD6q
--FwWdtBYNqxQX1LAwy3ORe5aTubdVkHV02JhdKAC/xy5nfhynuV4KfYyel2nHrI1i
--54UXWdOrlD/XIKPiXpuEGcXhYTrTHigH+yR9ybs9hotGvuHTEjcxEuJvEQJX+qV4
--eJAIexITDW/yK+maWPLijO3bZ9/JodX+fRCnPQIDAQABo4IBiDCCAYQwDAYDVR0T
--AQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAdBgNVHQ4EFgQUKWCqogni
--6SseJ/P6LXo0M2cK++QwHwYDVR0jBBgwFoAU/5nNuG4Tm4v2y9uKf428/4fVQesw
-+AQ8AMIIBCgKCAQEA54M6SZ/7psvK2wMkh4V2eI8ZY82f8Q1v/LcW8t34NSyz9c3j
-+/YOVcKu9AeWdldUFnr7ogs8xITCsVOibxVICZwgKii8XD8ZqZYCxyDn7aupct14n
-+Jr8F8w/LhNJgzT+dL+IQAZeujpURft3BpcBB5a/wOFWHMhHO9MQSNnFI5rra9jtv
-+jXKWpsP4gJetM7ig/Qhj+wDH3H1AtQnZaJsjAJN0Tr1qCV8VeYwoOy6E0Fks3c0C
-+4tv5gYxtMvR5eHZUdu47KHlDZZJbkgvA4d5jxkP63yBHP3p9VDvrFWUaPYgSQsPP
-+M47+rgn9p5Xr2gFKbUbr0KhL+FjDWjA3tC6ihQIDAQABo4IBiDCCAYQwDAYDVR0T
-+AQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAdBgNVHQ4EFgQUVzwbd6xW
-+ZJQxaV7Vq7t+rbzjtJQwHwYDVR0jBBgwFoAUZiXazafm/zg+I4wbylR/skX0dWow
- gYQGCCsGAQUFBwEBBHgwdjA5BggrBgEFBQcwAoYtaHR0cDovL1RTQUNBLnRpbWVz
- dGFtcGF1dGhvcml0eS5jb20vVFNBQ0EuY3J0MDkGCCsGAQUFBzABhi1odHRwOi8v
- b2NzcC5UU0FDQS50aW1lc3RhbXBhdXRob3JpdHkuY29tOjkwODAwPgYDVR0fBDcw
- NTAzoDGgL4YtaHR0cDovL1RTQUNBLnRpbWVzdGFtcGF1dGhvcml0eS5jb20vVFNB
- Q0EuY3JsMFUGA1UdHgROMEygGDAKggh0ZXN0LmNvbTAKggh0ZXN0Lm9yZ6EwMAqH
- CAAAAAAAAAAAMCKHIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA0G
--CSqGSIb3DQEBCwUAA4IBAQB4YXa5nVWUzWSsUDMfYFTEETOe8boUErwfrDNBuj6z
--B5en20FhI49i6PCYEfNq3vrAtPOEFJj+KPomN3C46VLxbUEvqWLdq6EyzWvVVmXK
--VLeC0qV0m6CFM8GplaWzZdfFTQaaLUhgY08ZU2gp4QsoS2YjAosxlZrNSm6pBbv3
--q+Og1KeSK8gKS0V89k+6e3LOEF6KaNWKSkoz5xDniQY//mTjiDcNmYUh0KhHfhdU
--eO92M82uJSaDqnRs5HsWPs6z6qdfpuvj++OtQ1VCM2p5SEH2sEomdeN3YYChuG4h
--yzn0mYAdbTyGJHlFm17AH+SQRbVqCKYdHDaqsMb+fWzi
-+CSqGSIb3DQEBCwUAA4IBAQBdZ/Zgc0e6F4H7J/rdAegE3MhZPLLAPGq/H5IPC4ij
-+ksW6ujTejCJgtSWAfkUXjaCDQvT7bkq4AMo18ELc3I2kpTp1dvftc3aMoDBuGz/7
-+K0sxlA1DFncmY6hhh3cg2Gjb1vlnuWnwwSrfy46UuNvsJi4DjBZXHt+gY8KM4Gas
-+i3MIqlM/ZIlljc2LRGUKxftkM3odP1kA65yNlcMV9BESRGsAOH8nb6f7Qb4I6vjk
-+Oijzs75JPWy9C+vMutH5LSfMAjrdRmNKnDoWVCe22QT1jReIRMNsRjdX0j+SkyyL
-+HpqLVmczWLFHPspm8tRyAI7Vc0CpY9ixJyeidD4mg7iv
- -----END CERTIFICATE-----
-diff --git a/tests/certs/TSACA.pem b/tests/certs/TSACA.pem
-index 3f50672..22481a4 100644
---- a/tests/certs/TSACA.pem
-+++ b/tests/certs/TSACA.pem
-@@ -1,22 +1,22 @@
- -----BEGIN CERTIFICATE-----
--MIIDkDCCAnigAwIBAgIUJ0nfE+EVsIThltlY2LHVWMJVIq4wDQYJKoZIhvcNAQEL
-+MIIDkDCCAnigAwIBAgIUWSzkBFwFSMGVBrF88OJwBUP9eNkwDQYJKoZIhvcNAQEL
- BQAwYDELMAkGA1UEBhMCUEwxFTATBgNVBAoMDG9zc2xzaWduY29kZTEkMCIGA1UE
- CwwbVGltZXN0YW1wIEF1dGhvcml0eSBSb290IENBMRQwEgYDVQQDDAtUU0EgUm9v
- dCBDQTAeFw0xNzAxMDEwMDAwMDBaFw0yNjExMTAwMDAwMDBaMGAxCzAJBgNVBAYT
- AlBMMRUwEwYDVQQKDAxvc3Nsc2lnbmNvZGUxJDAiBgNVBAsMG1RpbWVzdGFtcCBB
- dXRob3JpdHkgUm9vdCBDQTEUMBIGA1UEAwwLVFNBIFJvb3QgQ0EwggEiMA0GCSqG
--SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOTX1f9dmtUiyzlsUInRIGfRMya338SVx
--vYGeOwdpTSSGlYUVwR9AuFewQF5+klelstCJe+SoUG0AdzS30mRWlQrhip4UdvdW
--T2gkNKbSn6DQzlWoQej9izqRLxAsbuszgkvnLOBEmPaLimDsCgu0bAN95Hp0Hls9
--O/fVmzh8VuV4iscxc7q13ZB7CylWgwd55CFEGd/jpJ6kMwSHbOLoBWp4GQ3KxR+c
--ASAo0FapU2WSZB2EYWszRiyq91X+AvIYN4ypTv7RccgfUvnZ2qFykJAkf/wgkynu
--Qg7rCUNfUEpDc7jlqtDWR7iLrtHBkA17C3IU8ymmKQYWfw3ZyBwvAgMBAAGjQjBA
--MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFP+ZzbhuE5uL9svbin+NvP+H1UHr
--MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEAbj3aFwIUxvzwgywO
--gj01JM8GNbw1E4MGdkaNI8rgeY8ay15ZXhR9NpRWWb6Y7IXPq5XhuEktVte5Z4Kf
--XLBrr7Xe9VVqJL9zd1tMzOEM/zG77rZf/iXBTZLkCtQc/GOEY4TTWKNEl5hiWVE0
--po97GX5XHoeyHlWQ75sd9z6MxFxmvdp9/uyYD700e9sd5gcD8LGvHw2DNy8vntYV
--ia9h95N9i1umffxU460o8W5GoIcsD13B3YftvnWhGSXqovBRFgcPAQZ4eW9Qh/zA
--4zQBQrRvmREPihXVdgtWVpbRchP99oSZBrYr7Hh/P69rycklquqxJl1ol1wbT6dK
--S5Gmng==
-+SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1iXUDwCHsyISjyimEvnvIPer4aqdpZ26y
-+uKI2oURQQpAlL+PlbP5/wm63tyxCY/Oo6cadcXEk9TGEi/SpGMKJtfaZAFzygEQC
-+dU995pfpLsQ9Aaf53ErE4L7RsB+noDnYd0UWklBHBmKmWSszfaS/qcsqexP+BBzy
-+GgUK1/bVg2SjYESoQ7lWA0o/s9VTYBQ0k36EqykBjWhy87goKBvvDkafqbWRcG+8
-+RMgbzvD4vBjOyZWhXH6cKj6Hg7QfDjuTQWV7tQ+zCq0pGMsftcH+N7z5oXyNUiwj
-+ALPWxOvrViNRDG2I3GUXU3yWQIHNhmNkIrNE5GJRmx1dkYX0oEW3AgMBAAGjQjBA
-+MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFGYl2s2n5v84PiOMG8pUf7JF9HVq
-+MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEAmCnnUVQoKhbKLqyp
-+qNdyT5FFEKyoCd9defa5bKzPhzdkkuxPjidsLsxvP58n6EB8i2inddBfdUxv/0lG
-+kGHO+7Lz8qjMlJ9+VlLTmA96Q4SHBP9XKUmyYPx3PpEZcxiJZNXoUO1ZokTps0/Q
-+BSoQ+9SPIIzxEzr0BNijtY/x6TJV5M9J1ePWuK1Vu0mhTs3FPE+/wXzxZG94ZQLg
-+pX9hkkXmvRIe7dg3XZDUtKglH2p4c22vX7UP4qyqpPWFWKw1lCYt9K7QOVAdEfCI
-+TlpZh6MQPZIk0FUAWOxDeRTAJk/Pe0I7wf+L1hwxi1y4JfgebNXynp46T6v/I5Wm
-+UApdTw==
- -----END CERTIFICATE-----
-diff --git a/tests/certs/cert.der b/tests/certs/cert.der
-index 94bd47bedbe9c0d1c98b56c56de853a9cfa623ff..5a7b0f86e36411ff1435ea00bdb7cb0d3aa9cdc9 100644
-GIT binary patch
-delta 624
-zcmV-$0+0Rj2l59aFoFZ_FoFWspaTK{0s<6k)KQ^cz=!QH5eUwdtmQQ3nfM~HBT@l>
-zx0Tpk+(m_^8);$&9cnTLiEOU6fKLL(@5>vdk{1K6wqlZlkV!x}>5zB4cSf|DnzflV
-zrA@t<_|;*&att~@*U(2)gUEX|%T5fJTjsIcRRI9Am%Kud*yYMa+($l;F*upw#=YxG
-z%o^`Je<d-m$nbF#olWXl)WWRFh`h;vqoPR~00GI{XneUvr=fUDMje39S?WOg=809b
-zPsJ7$7?xq0`Dj+(uA<tR(s41wv{H7(>hg1jYFcGcKJ7xdy#@{QvmiCHWC8L}=59k}
-zXsE#fs)=<sJD~3LNCHF^ujZ*!vq6$|lA+@`g8GZaPqolcZ(=rxnE8a&Z*~R(qw$k<
-z0v|O4j{W7%#FR0$U<Zs6F7w8BdES;V9|i+e9U}x7FcyFmGpW-Gd;(L!x7Zq~s#T`0
-zpj_#klgR=pe=fBc5n}bKHCRg`Miw|Q4g-gi!14Q_!m(y^HiL*Q_^!2Mgdh_u!SZal
-zuaLK<%-+q#c#SED%L})mVsR~YPOmK`A%9R$#U}H&mX0}xECDgll%-f~`#pzm(IEo@
-zQ%p5rLYA;918XP!+Gj>;r!{XT18jY%u6zV0!?A**e+TwJULfc|_f)QefrjMzZuFj`
-z2zRc!GS?uuH%)*%#|d+QgPKG7WUsD9|F+LkcK#M-TUDQ5y<E(Cqu&@acOre2G~0E$
-zK{~S|qpbx{wW;aKYB|+`!meRxgI@R6?Yh<Ib(6ZKbNC%H+putplI8dda}P<n*O1sf
-KvN*(C0v?;gw=YWo
-
-delta 624
-zcmV-$0+0Rj2l59aFoFZ_FoFWspaTK{0s<6tvL_xn9=#Ppud+MxzJB|slC7PwBT@l>
-zvP&m*ZOdt3Cl9%z;1%JTq$3O8SoZ|)F!c%a2rq9m+BI$oB;+^O9~D*%C{Yh56c!``
-zs0%v(Qy(*8-$7jNXy4zn?&*svXF8?&*(a$6;%h51HgDge><J8?jYl;*(e-L0kP`Gz
-zV`@d({#|~gOsoor)I^XRC?HT6#Fc1&{h+~G$H?+KvT;v4t+eL)nh@rzJ}TPo3&D|x
-zlo}s^-~s1@CBKbv?a<-#n7@szm$`-}vNUiC;6R^VJ`Zfjn<K-=l^RfzOwQ=&Lb#4+
-zf|S|O(St2Mz24bwvh|S`HESG=L+HViwFjP7S=b<?gc=zj&YsVCV?PKha+ov%M%R;d
-z0v|O86U4JmR$M$rslS6+F<@~-9nb+V9|i+e9U}x7FcyFmo&~H6Tj4-|Y7X?-L{Ew*
-zeeXDnlgR=pf1<W~TQ#QT1#H;hmWpDSrg%O}HqE|^RY8X74i`gLR(oz}zTUizYx(GL
-zatOjTH{$%OPl~%|j(oG5OR*yqR8&|(7Y+!iuOQPKIu=CD{L%ZEq`%|s8+HE~h#h3b
-ziMRji0>7Q4SFlm{bVl3kFxEqwKzC<)(a?TQ6$Bxae-lC9{oA6hlbQrd^Yroc%wapC
-zU<7icZD5)!uf-2dm@-f3A@RtRe=Hs?Z$v<<a^zOU)dV@wVP{0XOQE8q?QRuwRkHV(
-z_k@{NGN&9}HQL9ePIH?PQi^?(++7o$<6KYU16Suzacq+q)-3(`=A+I_vL>V^EJnXt
-KvGDZl0`eg~P9~24
-
-diff --git a/tests/certs/cert.p12 b/tests/certs/cert.p12
-index 51ae5bf2c039c2152ef37f8c6977fcc48a571f78..9966a41bfa08c58031f43dadf2c295e605fc7f45 100644
-GIT binary patch
-delta 3544
-zcmV;}4JY!G9itrtFoF)BkpyQ5a(59#M=rDVlQan-f5lh6n(7m_p_0V66&4CyyMTfS
-zFm*tFKFl$LjybiA=wh8tIRD{gP0?CMPW|j?D~!DGs99sFZ2A(ZMYP?oh=PMyF!i)R
-zk2xZQ(6Q{rwE%2mpi<R$R60KjT$kzoXY!m~yzl{h_FS@s94&8RIyJXqU>@Ymup4s~
-zYbsfSf2ikfI<)k&Z3XJHDg<%hjjGZgGbu7jCJkvLbW};g&geqrI*IwWmWl)i44nNO
-zU4;sWc|1R!)cHhU-8-|zjZic2GOyN5=oV}qb+;o2MpTrD4t`2pYv|f%(U4M=)LX&6
-zFrA!{?%(;(?v{bhQ~g5H?Zf3or~lsgftYJxf43lQy3m{lu6jittNkX*QD!BJ{T8h?
-zpnR31_AFl1XkB9Rl{NZXgv^?e6%G!v20k;MX#(=69?^PWn>hrS$WiwLX0ixm7Twlq
-z?o-!}0;Fb7;r~G>U=j-5M%8OD?}l9)zUUUo9W9H+Pu^Xr?yUErh+v13Uq08Ua=$V(
-ze{np9hWECq%_TH#Ur!1$aU9lvoSp(D9+FE0yV(te%$Fu}0u*vR<KQ?0qFyQx2>=8}
-zK@i#CQoIHM$;u>J=xT+V8s_3f9Gqo_GWtKDs}F&H);~AOAH9Y*!EPZJI1}dTOM34+
-zOlq6<#pIJF9H6SmG(ESfnnb~CFp6IQe-Ipb8*9hYs|>vxZ`k&o)pq%Xuj97nTvHWn
-zP^FNoKt~}@Qnc*WO3QR<$$qN_X%yITY?m!cz#G=TC17=>^Hi6cp-CWh%wASvcXT0u
-z$qECq7?pzlqYensnMd6eR7x%efepjAl8A{!2p^1mJ51>~H<4?~>r2Ima~e++fA~kB
-zJVUot?>G#;H*f~W@ZQgk(&oynRBn5{)6-#Izglsoo2qTT%wHn7?b@Y~uK|?Ux`Wl6
-z=`HCC%bm)B4>*7r8$?$BEV>QGb6C>gx+E`yxqJHU7S-wAX0@2e-oWRP0=#wGvu}uc
-zgE!@ep~rP7kpOpI{cXd{8HIY$e_AI=0HnNr{N8PY#)Z!!VvJTtxML8;32W!(7r)=I
-zetT|nVDW9azHcyFS*@rKRssTC=9&1Sbdtltv4QS9>^-;FvYmcf*^VNN#|Y7*%u|cx
-z4iK9geZrx{GHYcMY>o?F;24qGHcR8koKp=`7KJU}$hC{xnknyPViW+9e>N6QC}qiZ
-zL0QS?n*>Dwe;44;_+-*B#bEVmovUbthFKG1uao~<m~<h*nUS#WHNf3IadxJK-@2(;
-z*_E9Q)oEs74pO2X)UQ^f+PT?26h_Kt!XXC;gDrF@6+U|0OVZW^jBKgB*J0IvGX?w&
-zlDeq8yz&?hYVpF9&;X5ye=p631%6{o)FP-;TrL}(U*t19?g?M=k!JfQa1IMm5Mj%T
-z!n0plA=Upt#cwwBM!W*byJB(2w7F~Thd_21oKqRBdXmAOJ>Nc;WG5F0Idz_A!=;v*
-z(-!PchgkQa20@ukg?kda&Q3&Z?|~-G3MT;q`{4&@LHeR$M-Tu(f2+nGvcj7iV+e<n
-zHqax!b#))=_VZ`ysnb^3kxpvj*`7|neZ(<<BPm~D76B6Wn_eqMXpk7C_)7=LGuhLb
-z2OYA$upSb!4G$9ZY7h*HVoe?o?`Y7OxZLcpWtPLV5gs5rV@)yg_^*>ogMh{R;Frzp
-zoZAHfh~^=<+M}cRf6Ti$ibNo`+0Udzr18%U$hBK@HYLx44Xi@jH36m^PYIJBQCleu
-zsBAWR_zO?sg`be>)@4Z^d#Xn22J<fRLy-!VqVlFTH6z!gbv1uz5RfXZF{%O`KN8}|
-zzhBG%I)0=1RbK;?l?dVPh94(D5#M1%XCYtMMA#rv%&@$we}vi=U`yF@OISl?Dg~<?
-zDOsBUYASgU|B_1^cV}0Fa9MHct41AeNOf%>B1LHGf;@8IWurow!7o<rg*O&Kqk9Hd
-zsg1zW=Z&bhvbR+_)P7A%<D|+z4#1p|oo$NRfq;l1pV1pqPC0;}GF_230$Tb>`eu6p
-z<x+LYX&qmJf6tCvrt(lAE31sv%`kkRMGfEinQPsT9EZ(mwZKa>!?878W7&eH3w}iz
-zs06R_ZQK|~No+L3;sq)xHgt+3cKw;+%5CXJ`om#^#)#e{1^}<)Q7Sk^%OYK5NgziZ
-zmhE>Xkw}D)uy?}b&5(9}>soHd^fkEIZ~+gUN$aqre;q3ZIcmMvKj}sfSwoCVhUP?m
-zGjDHO1TsHqZUGp-q+ay?5I5#TH(^Wx@20Z>sq!$I`6#oZ(%<qPWfIMUujbjq*^Nx=
-zU3$?`&D_%{wH{i_ajAXdB*ngh$(4vGQq@W$_hpxAlHT4kMs~;jP)!rYB&Dcy*!d_X
-zN4zSUe{4<Jg^->5%mIdI;WVEFXfS-2rVO3;CFqWy8O&&&3;p2h(#P0+0{<5eES9?f
-zh^Syn#=t-E4NP+Ns)1_(AkPW;YOj_S4!j>xi+$=WE}@+xF_9>Y<ya~Enx}*iM(nA9
-z-0I}f;lAKV<lX6U0z$VDZ#&)9iVYmV^l&=Ee?+jUO%(i?I#?l0QgT)yqbSZOqf;B>
-z<38=odt@<T=^?E4XfyAXx7p|i0J_A$HNE->X3(J8VSCt3IOpIhSu-U+<w&+%6-?g#
-zIeYvkO>v-;ZCnxMg4#i`iJarymr78WF0{1KKnba75&T6k{-?NK5R@2S!U&5dQ~Fl#
-zRBTR_IaWEMgX}J|1dODSe6rk1jE!T2{H{C3peJxH4yZxpCt9@k*Y-Y93k4yeMpWAX
-z!Y+&cbYa%x8yU^Zg;%|Y00oFdjwX7~F{LVP>)zMwj+593R0#Vz1j^DYhpv+}2_b(`
-zx~sOq?r4Zm6<_ZWf~H9Xf&|cw9&P1=%*x(@f3}}Vv$!8%Ccjl2ZnfI4m@@Qv>g1l#
-zWIWcGRO(~WAm2AX(V5kFluQ$?bS_`w-3L-i1)$li<^{yy@BgPT%+Ox6XveX+3%z?Z
-zbV$2Hzx4%{zJmAP_2M#U4u6o%dwGA7E|<reY#F~b?XOLgVc-i~+dXEaPLJe+<KWjI
-z)5>eLzaQSze?GP^Y(8vkGC&-K#KprQ(36J1vn800_6RDNcq?VLx1T2ypc;kZ1@1ua
-z=l0LXCC0snuI-QIDC(YI3H2;l9?rYyuEI^%9TH_&La@{4bIpS`e(!=q^<sa`w+<>`
-zLEZyEMQ6KWTo3>Mg~cZMtVyjKKa-2ZtB+rmV#Y;`s(ix=>R|P3u#YqjTW6PZQ*a_h
-zJWDCo88&E|6Nnse_mu@g0G<BF=M?trI63~W!~Bec$lseEd!gdj!t#(+D6}iEb3x<t
-zwF%a%?!{?+yFZoe$e^^ur;vY4uc!fI8CA-jSIkfMhHlsMzyF*ThdI-9vul8EsjJPE
-ziN~Qrw!tx#|5+acnHIlUw^us)ovBT_OYT6jZGQB4pNb;7lsM$&DrxswR>=Y=oA|n~
-zuTxes*r%~`x)=cZR`qXDFpOcP3bPzXK9kgKH!%!(evOr@=?oHVBm#e4?1&TqA^@j%
-z-tCWp0szEvOp1U!^8V%yIEqundK~G(a46_Uh*B(8>vyW}gs)X`U1`FJd;9<^(vI5O
-zOIc6#pcAY^h+NOz%eC@_3zPN|^}O11a58G~;E&b5F*LQ7*tpBgHuZg(w0O=_Y}PN<
-z*gZj~x(6IbZbt!}{C<CH$B{FUe~#<iuoeSW*7|H$y1S)kujqNuV=*`YG7`cSU66)r
-zm&)@9n_TcO65k)Daz4`(5X2{^|IDPUgJ4$WwtC*=TuQ>WK4r$tu)xkbZ>LlAZ?u0&
-z|M4!e>8i^b;dpyCC4n+dc~RvBp`ECeXk)&wz;FeOVV~KrBQ1YtPK#dKg2UBcvkYos
-zl5?7drb-A1_%6T(_@=Unt}lvX$O+(-;t;p+c+&6A*hj@#8J+-bD1QB2(;PXyCCc%n
-zic-csS>7~OHFv<YPk=VPXMY?nN#KeHNRVdsvynuu?FdpBJtliy?<o;0Ja#!wReg)B
-zVmL;enxXytN?LzjBJf4OL}v5#7AL!5{T{wxH)vhMw>}Fe_cZWpaOurCP+M->i~BkW
-z83&PzJ)3(Mt;U^A9w{y1r-uS1P=ujR;{ggbuFK{yG{y$wX}mUFf;nvM<ZDK9Y1B^Y
-z82iv;gP?{GYocnnCKcBJPa#@|CmE41ud31Re%9z`+Yo<3=Kzhrk5nKrr(by<LQQqg
-zc<cT4F%^U8<x&P{_;{%v;kMWo{xec14!=~^o{7rgrynK?zY<Bapr%pAZUkQhU>(Co
-z-iCk!?XUH~hS=io7kS_i?p8L}$}Om7pXr-Q$|H&SuGJ_!Ew$UmMgJ3!(g(^Q6inV=
-zMM{QXPGNtPjVygywU6;Km!N`1bne^yBmYp@e3l*Ff<E+vw0QhjP=gz;K>L~FJC8>O
-zu24vy>ZLu?<;Shkoy*!&+Hb3=%{GP#Xc)_;P^|TAsBQVpp5dKwmX6s2NbDDbA(?>s
-z9+<L#kUUA<DmL2~F(oh~1_>&LNQU<f0SOf`76e!n;Oc{Gj0|SX_AeMC4RGH&W97z5
-zFhMXeFbxI?V1`HmWdj5P0R;dAAaSC5=y;~jb7=OH#7gHiE`xa6<U7T>folR;`Ju8E
-S1q29x{~tno-%FVS0tf)1WYe|)
-
-delta 3528
-zcmV;(4L9<m9g`gdFoF(`kpyQ5_Wg9ji<?>}lQan-e~Iy#9PTpVKFr7%<*B*>Xn=wU
-zFrpQ^<ql82j$vQ_dd_Gf2W0!1a~+!A3ld9@D(lR`vV8(XB)X3G99+iHav*<@REK`0
-zJA9FMMJUk@6baOx(PK<DK&qzG3Px$rSpuuf1r*Cf)mW4ZrlVB1aP<5g$xFabske<`
-zJT(>Ae^3ak9F^1o*?rfbQxbJp%iX^OAPYew*lS*5;XHE{doJ3Xk46$WCvG)hN|prr
-zg^zBfj}{kM<8$W->uQpxrztY{Xt58l^R6H)Wk_Qh0|EI~5)gs1gnI_i+@FiIY?*yN
-zmOP@OZjfHabM$x1{3Uy^oDp@!*6{pKRQjb<e`c#hH@wntyDI>r{Zh1L^>edj5i2K6
-z#wMl+09CpaC~~j$&cH@}WNgWphN3xg)`|UY70p55!j10G!7<wyB&u;%ORBz1w|5pg
-zpp&H#qFrINDE2+<`LLZ#o7erIZ=-t!tt(5EWSG6Tk-VGDsP7!I1n?a&UXn3-;hZ6d
-zf0TfLj27wK$Gwg$XL}{5yI-{tW&P$`ZWJ2|hy+p9=+CpX^_=)bh{MrP8=vCm^9j>*
-zo1`X0q<WxM6Opm;rM=*oLy^(^it#*yy?@66=HPk7$RF|dPuCtRj3vEG8=R5B?D~A7
-zCo5y>$mv^|-GkWZpW+=VECU--B?^u=e}Z2Cms^;-A=5@Ai>0O40<6AR(5;0@w(Nb4
-zwS9tQ>E@6U0h}aryNIjQV`+Kz_yW6y2T)k|c+cFjr1g^0w9!IM>LE4$roJy7C&&vi
-z==aRd(2768l<n6s+!A$AjB6Mn6f;*7PKGIAswHE$F9`RUuOzg4b~6gSe*i0Cf7j}5
-zwzZsMepYm<E1xpeVTc%{$HAI?u3O}1N3EqTrYcFBF{-3}JT2AXdM-7O`g0jFG*Lnu
-znm&i{nQk-=UCIzqw?j+WSm#f|hD__>pbXO()H~pVA`#DgG=0j0%I=3y5E;aX>gO;b
-zUJ;m{Dbu_9Co87IW=e{_odXqse_VY{)+>gV5k1B4sc?F4Z(Jz46{k0J32)Q<or`Fv
-zz?&(N#!5|CB1wXyoPdSj?UbC538sYpBU#>Bz|vMD{yQqi_S)SC$-)6g7_NTT;!qxg
-zoqT=?H(s9$@xar59k+^k_ZE07zE8#5y~N`_)hw8SfmtY8CF(R6#JIh+e<oI4gGu1i
-zVu<{mLX&r$@bs|$djCx8H|b%9o|w9JrK=!Jx1u7KxX?!&@tldtHNv;#*7Zj!IewaQ
-zxhDT652(ye#C1ME1`Pbv1oZ-EE7jWg^(|l=YMo_^hW)eve-Lv22ra4Ndkpt`7FUh-
-zLdt4Yetd_m$)WjF4_!=3e+@Y^JHJP-L^>}IG9rB;zJxs6yu^^kp;+OgY*2glfy`>|
-zTkB_|F0ut~D%TkgujIl}M*0YOK}k*jf7k?|VjuJUhHdB+>o}xj+Q<^~pb>4rC;+dd
-zzX;Rb!pEou9~9!sE}lkTKWVVIu1#TlW7lY-SzMe5-r1maz3{yWf4GQzG~JI%Z@c$v
-zJq(JgjN<bTgCOr>40ZjK(%$Bh8@L&pg0A%f_d8|)h9yh<(<f(Xg%)^yfqQU-dc+l2
-z;Q7&f1whvkODKkJ53+i9^129{9cT%V&8r}Z2lw^_TAUKt1|pNXQzYP64lRxx#|d}<
-z&%a^q?WbW_GCP%+e}xBO8>S^F42#QI90A%S|6EB7@qb<Sfj8dSCpc&a#=!Cqpqzst
-zG#WpCQqw@O_37B0B*8CL>9bUTnl46Y0>TC;#`lejDa0nqYR6N}-uJEwlCFT=%9MXy
-z2$j^jEBT+-yk&hy!H4s7i9_gOS-gDB<#v}A-!TPpO?t8ae^pQCs}?iXx4vBoC-Wt9
-zmN&B3kS<X3OD>Uw1@GA#`R&ZGh)Gelx{vWo2p1<*u>?q5QOpHFZLj_o-%~Si5$EVH
-z0czysR4I}^*tqnY&N_AzxS-sLJ9Kc*s8}?Y2g9r6s?6%c?g}l%qS<=%Q^v@rYYfsJ
-z!2+NLf4Z8kf8Bt=<6IHLRcAlr(Lc?|Xq&SX<sa`I+lC5Q+S~*@reb(Y-)PzC!#?8I
-z4-Q1EN5EIr+w8w8hGI*v6^QzCFyxgzdC%?;ih~b=+xRCO1sb{HDp5HL><&XFrz@y|
-zS@TOJV&o$!q#qlbfKh~@oW7W;<4{PiMD%022OJXVf5v~$TFLiDaGmqFf(@k}Z534Z
-z&kq+<^-4CJ^m-T&qmWX+t>mw{-UUCjiqMa8cMhoEOR@sXs#*|w(Mp1-qHouM-~W_f
-zX|WG<ml{OGZmbYN`jiOR=gCH(yk6eaCLY4g-s=*F{dpS;037|3$P3Ku?rOl22kwEf
-zD@jLve+VUb>ov}}z4^{W_S){IRWuGn-~o^at*kZ~Uqlsn39SXAF=@(j3*SF%Zn@#t
-zk^?3beYtw>KpPh`1A}1R&@yS(Gk$51vA_fsIg(KrV#HVH^smEB$8b-d;C0vmt36_S
-z9_06<e38#`lrcSwHuqx-v5$0TIsP)!Eks0@fBQ^}rh)&ldI<&i$hzmDM6t)cbwHFs
-z<=)YDgbE||)1fJmJRFGE*$jyJ4E0-U!am=?-DbRYQU`K#3(Q1c7Ybfx`2pb=r^o%f
-zlYw;<Jy6D>J54A_o>sxlGhwE=^QU!`=s=yaY9q=_`Rzj#pZiGyq-IYwWaqayNI4yj
-zR2L0@g1e(17W$nN7b?0>LItm8FPQm?I$x-asQ>MetRU-Vrts?;2@WlBXieOnb0vTS
-z1J~gSxF;O1EJu~HS*t6(44OB7)bi~^@HJY-Q{6f%P?OjQR0s=U-U*0eyDpP72_b(G
-zpd~+NTK<Y?F&;kzy;Jc7f&|dlo3*9>yHF1VE?>o4bpSocX3IsnO#fL^y5G@|<mF5`
-z5LzD+vLWVvQNLIP_lgVcM_TsRjUnv@+p7*HP6)CodaFP66&oUT@<BFUfdyo(eSU1=
-ziz-Gc?!j@67<QDRV9TM~bFmeh%6NZyB`~+Sz#fu9S(<uHC0DpS;~*|X8vohp!&|)H
-z8}qjC>8E}ZPrEzc)$}o9*rvu(OMP$m0wc1fpAS7yR|4X`3``+;0Q=)DV1pPIEUKHW
-zy-8OrjBe_v+03X!NyD*3CAOeR?yRmii5@AyD|bVXtCxlg`VAO)95hIl``dq4{#wxw
-z?vIQl!JoOV@2Km>lX;~1|IQ|)FG$1+w(9VhY_z~>w4%g06UaVB!5vIX1=;Kvq`B5h
-zy`g;gzWB!bATn~mr^FI*cV~^k5R);kQ#HzYOsf2{@08B70gk5`;@cI0Y3tWkUuevM
-zy~`)0-3MxNiIj|bB}{VUD3pH`5X6+ed7_rImHwb(FaUpCyqp-=9p?<OL>X{V{TP>i
-zsd`P~7+sqhEtWK3+jf*1mrkk5BMSS8j8fTkd8_+3`=|i#-T70CDlgu}6z!FWd-j`n
-zgP#NCEgzO4v8J%!RN36^Nu^6HZzY<<lw(i96$4**#Jo=r2sLBJ_>X_?!L2Z6$;Ln1
-z8DR&%>U`Dnv7s&OKQ%dxup<#snXwalQ0arS-T($t)NokjCsgG0vx}I->HrIOi+r9z
-zBg#+D_`2m6<W*HS$_UsFk_87=6XvNc@CFl9Az8R3z~a+|?7=^gF|O4XLpx7<@#~jK
-zU%u%&FnX^^(V_(E5SxFl0$X_E&xN0*z8orV2@0x38~z}N)m5=m!Fy+!hMw)PlKJ>U
-z)_i5rooMnbU=;t9wE>ipmCkX!f5B2YVmw@1(QNvRFfN9IW`hUi*C{DIsq)?GXt66%
-z_aM3mE}#@!1OS=ki=&FF=4PVtX-<nO5stZ8iN({<LanfG^$dTN&>-?+l-EHHpQ7e<
-zsHN#7hw4cwJOON#k@P9mH>nk;_5|XY_+>wS@x*7V2DhbQ+Nd&0+g$(?sJ3Cr#s?Ct
-z^u>L#d-8Ck(dv{f5QEE0wTEvd?jk>DhfUdjU@mBy?ygSIAF4Us`5u({TV_-0s+a($
-z2~u&$X1!|~Cy0L!t1&mH9aH9ThyNygxx&W1p{xg?WGzzecWFT<BNSj!B(1SDPCx72
-z>d)~vkT#E>asph$!*VwgppSt&*65nFC&yRfSDh;rj7I+K^p6yiduqoVyYky!><&?b
-zHchfgvl|oM$Wx>|j*nq9Pvw)1M5U8hp@zN_f4gGT97BKnLD(s})tv`$3ep9PD0Z}%
-z5c0!C7lG(%{!lIy{)r2Q2c2Kv_-$f<`op&%BZCPg$BrVdpEIZ>OhpTCqp3F{cF;=J
-zo&ax***u91<~9~YnSI=7oQX2-sx?bLsYum%+1%Fh;Fv!bc-7C@FBcgSn4#LW*Jg}$
-zwB!Z0Kkt7*H-12(H-tTUGZjsE&(VsR1YBH5lOc>X1v62Dz-C@o!`_w2Nnh09t_z%F
-zm$52E*ERBfEiqt8tTNS`-<r`U*rFGG;K1dW|HExoktJ`loLafiqvU{Xx*_16?Mod;
-z4*c?XVdBw$MT_!$F(oh~1_>&LNQU<f0SOf`76eEX!1@^MU=l=OdhsUAP^LaB?^c^i
-zFflM8FbM_)D-Ht!8U+9Z6tp!mbQ;%?kOeOpv03q*nY|KnY6J+}L!qt?ll+VV0tf&L
-Cf5$uk
-
-diff --git a/tests/certs/cert.pem b/tests/certs/cert.pem
-index 455188c..0627b67 100644
---- a/tests/certs/cert.pem
-+++ b/tests/certs/cert.pem
-@@ -1,46 +1,46 @@
- -----BEGIN CERTIFICATE-----
--MIID7jCCAtagAwIBAgIUdLInHjkevRVCr7I78r5++6eSrZ0wDQYJKoZIhvcNAQEL
-+MIID7jCCAtagAwIBAgIUa9RRoV7Ah+0wEQjOlKzlNOaZ+CIwDQYJKoZIhvcNAQEL
- BQAwYDELMAkGA1UEBhMCUEwxFTATBgNVBAoMDG9zc2xzaWduY29kZTEgMB4GA1UE
- CwwXQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxGDAWBgNVBAMMD0ludGVybWVkaWF0
- ZSBDQTAeFw0xODAxMDEwMDAwMDBaFw0yNDEyMzEwMDAwMDBaMIGdMQswCQYDVQQG
- EwJQTDEZMBcGA1UECAwQTWF6b3ZpYSBQcm92aW5jZTEPMA0GA1UEBwwGV2Fyc2F3
- MRUwEwYDVQQKDAxvc3Nsc2lnbmNvZGUxDDAKBgNVBAsMA0NTUDEUMBIGA1UEAwwL
- Q2VydGlmaWNhdGUxJzAlBgkqhkiG9w0BCQEWGG9zc2xzaWduY29kZUBleGFtcGxl
--LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJLJ3Vty2lgJw+5
--ouAV4ZqkIwvfWPcE7zD1CfQIL2802jVuCSTkN9cfFVYMKFEPJxQWJAKoCzr/Ux8z
--Yt9BXO5o39+z7umLKmc6pfrZJ6kG4msrMjZv36LsCQyfjUc1O9H1aiOQEvRQY2pF
--2v5dfqRMrAqH1ESQHCggUBjElWj9oMFax8jyO7JxTzuttOb6mhDmqz4q2u4LwZGH
--lBofgOAB54Mlv41x7dDh85i/jayXuYYmsjRwCuBAn14+D2zImyPDx5UaUJJMzujo
--QriOZ4KU2dHRgy0+vd7ZbrL1kRY1axyNQ+jBk7UHnlZZ2CCkhBoZIM6ez3ljPwgr
--cpg0RtcCAwEAAaNiMGAwCQYDVR0TBAIwADAdBgNVHQ4EFgQUBxPEs09WXDxGqb+D
--WTFgcUQd0AEwHwYDVR0jBBgwFoAUngWsC1vhQH9qDvTZRE+KJ33vOIswEwYDVR0l
--BAwwCgYIKwYBBQUHAwMwDQYJKoZIhvcNAQELBQADggEBAKK2e1s1puUFbNjglopi
--mKZ4Pks2zb6LVUGG6Q4XQ1dWe25ovt68jWv56HFyCMI1N+L8q0+Ku2eOfLObS7Ej
--FFRUWEIXDgipryDTGzoWRM380fuYpL/j7Rt1/xmIHWTFibf/6gK/naRXsFH3dEbb
--7DDWQ5pAd2d60dB+ThUEIZQTQd/926Kuk5oESvP08fXMYTuiYARypG1gmiuvxQ9N
--mDJP6CHxyJR/LB4tb0RAqnLkVsXVBDnRYWdEvkuhoqTtbhVzVbL3mPeEmVYypxxd
--NdrHpU5zmxFSin2T3F0TneNcT+MDV+dQcWyTGNYs/fnmo85LsiakJixGv1qx8PTs
--8iE=
-+LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALeV2F3cRYWmG2li
-+Bh1qMgaJbK62gE8Cxu/LG6WSFwOutmKSg5BJQDnpkHe8d0a0mpq1mTWlTb2Y+NVh
-+vHIMOj/X0EdUg8h7NctODJdb5rHcVQEAs5e8QpDY5cpF3Ec+kDE4meHGvetKzBrv
-+PH8lMa/I8HEUnU3qWdTCrMqIvMmjokkaAAHJ22h8uUWnoXhLRh2Az1nqQPrmiVW0
-+T8UWFRiWYZr5aFbfrqLamdJxMcS0UnbF6vJzhmpaZVE+7UK4vQYN87MgNbJkAfJQ
-+5m5DZWiowQGqiXU3O6Du9EgCRBWv5qlTs0GSdZKh4ziC+ovFT7XQUG9iNoiY+YTV
-+b3YGo/ECAwEAAaNiMGAwCQYDVR0TBAIwADAdBgNVHQ4EFgQUA4795c7ElDG1YAeM
-+Ei7zxnd53pYwHwYDVR0jBBgwFoAUM6nTCnwCU8G32BqpqlWmrqBc6ZwwEwYDVR0l
-+BAwwCgYIKwYBBQUHAwMwDQYJKoZIhvcNAQELBQADggEBAC61GBFi9ao1WEsiRhY4
-+MA4Dh5PA8fugwrFmczaDiC34rrVjhCATK8HybLivkLemzN7NxXiNKYjLC7ehYnEt
-+dk6vLSUhf1BPxSbzt5aOOYcsATHQlKVYbPs9h2/RIQMCU0w1YEKWsCoDayf92mdG
-+aqc1byYDbH2prnwEJsOxgqIH9kBeIOhA91SugoGG5Ppu9J6jCHeuujLXILg3TYA8
-+xwlzgIOaQ/pkr65G/7bPUnb+FmZbVZ9fvVzMeqPfGDN3In2VNNt1ukE6syOjrQVQ
-+tanpymo51YHCrmFog1731u261eh1k7qlc/gdMtuwcIuS5fgLcw9JuteQ2D2yOMRc
-+Hps=
- -----END CERTIFICATE-----
- -----BEGIN CERTIFICATE-----
--MIIDrDCCApSgAwIBAgIUUPCDF21g2spK7557HZUhqSxBltMwDQYJKoZIhvcNAQEL
-+MIIDrDCCApSgAwIBAgIUFXuEwy7PJbkt3nd3ZfAc5VsLJKcwDQYJKoZIhvcNAQEL
- BQAwWDELMAkGA1UEBhMCUEwxFTATBgNVBAoMDG9zc2xzaWduY29kZTEgMB4GA1UE
- CwwXQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxEDAOBgNVBAMMB1Jvb3QgQ0EwHhcN
- MTgwMTAxMDAwMDAwWhcNMjYwMTAxMDAwMDAwWjBgMQswCQYDVQQGEwJQTDEVMBMG
- A1UECgwMb3NzbHNpZ25jb2RlMSAwHgYDVQQLDBdDZXJ0aWZpY2F0aW9uIEF1dGhv
- cml0eTEYMBYGA1UEAwwPSW50ZXJtZWRpYXRlIENBMIIBIjANBgkqhkiG9w0BAQEF
--AAOCAQ8AMIIBCgKCAQEAyMs1XoC0NUT5YgydibOrE5SWBKk5C47B6tv6gA4t3zZJ
--wejaiPkj+aTIU3Ww5DO/Gpz0GuqCHNBczIw92Cfvv8kyWzUy46bRkpBJLFav0JXS
--B3xQaPlHWeXqMfVAGuM5ExT4CjjYKFsrgV1Q300thCHBhvr8TPekDIf+6J7NSz1P
--062pYgypfqsA8OwKaQbgOL9v4QRmHoolnEDc1dK/FS4f3p9dlifl7kcSVGQK0yit
--7Uncn250icCxMxS3MOE2NfuplUOSN6h6poWNGUsx00O7Dy9nUndUwJRpFfKXTV3v
--GtlmFLNoho+ss/usnxjxggWBcRtKhqd8nGSJUlzs0wIDAQABo2YwZDASBgNVHRMB
--Af8ECDAGAQH/AgEAMB0GA1UdDgQWBBSeBawLW+FAf2oO9NlET4onfe84izAfBgNV
--HSMEGDAWgBTp7DHcMiltHw6m0SYMWVg0QtGo/jAOBgNVHQ8BAf8EBAMCAYYwDQYJ
--KoZIhvcNAQELBQADggEBAD/FBa4stJGd/Acg2E2soI071B/l9B7FiqIRpCFuLVC4
--1m7TIcjioIpZrxXwE1Egf8A9/6D/kKZtWnOljcxtPBEb+1/gB61M381RIgoMQ/Pf
--7XX2yakk6mscUjbSTR//Mj1sYOs2r6ueZBp0whzF9nVvA43G6WMpf6XZqmhlg/oV
--ynytW1Iu1SPoru3y8dX/lsukvKCak7MAp1eBcuUJxS56DnKcV9xgC30m3g+CErI3
--qsOJ7lcfDP6fDjy7MfBsZBiY64MqwlDjjn7+Pleo69JedMwurHLhKnfm07DBPy8X
--+EnQk61xHEjQtTsddXyQGQV3yjqylOF2AgsAf256uuA=
-+AAOCAQ8AMIIBCgKCAQEA1Jo5DoM/cVNHQ66L+8o4yO20tG3cz5yIJmf157HxpgFA
-+UsXOTslEGSt0zM9CbRRuJpV4e6xRQeXJNmoAwT4HyU0vDRE17zPpAkX4bJSM9koj
-+dYYjj8ktvu0D9Lou7l3RL4wybqhYO4eFNvDm0CXlAf0GYmuQ+q3o+ykGNMA3P3es
-+JpmuMj5fKazV9LUCDjgG9lJxwSb2i/iT3hNTaa/aEvBXoeBqcmRZmjZDD3sUHqEr
-+iZFR1v1ezoQKafjKi7eXHoB02Hpy2MnCM6TU8krdpjQhkBC978bZUs6WNkfpfTiT
-+6835UsvRWcL0Ea/rGje4Y0FlU0AmAvO5/7j+IqD+NQIDAQABo2YwZDASBgNVHRMB
-+Af8ECDAGAQH/AgEAMB0GA1UdDgQWBBQzqdMKfAJTwbfYGqmqVaauoFzpnDAfBgNV
-+HSMEGDAWgBRzZATlXSPxvd5/qDHmQGixvSUTUjAOBgNVHQ8BAf8EBAMCAYYwDQYJ
-+KoZIhvcNAQELBQADggEBAF4qZoBV9bhp/f86BwaGcuVcY66muoTnFLTgW7TsGDnx
-+MKsW5/2CeY4+Yev9LngraEt3DadZJFq+Fl2RzKhRi7KyUmYAzGq3dtGWmYiNgHVH
-+gyT1Hl4Kjq9EEsrB8ra+s5/j+zWCkutLn593ROxbj637d7/8BCq73SMBPzQqJVqn
-+uluFKOWbDigCGpuEdb8NKDimVQXhg/9ee1tn77btLYkA9+M9fmjoOE0/XVxClYB0
-+WulU76/9MdPbgkUnD49AalyBBojQdyj+LqDG3LnYjBBVevuqoF2op8Vna1D5+nVZ
-+3+wTPzAR97/mzTDVi1C/R6Dh9gAcKFwhHPrK+R+lWeg=
- -----END CERTIFICATE-----
-diff --git a/tests/certs/cert.spc b/tests/certs/cert.spc
-index b5e464a07a00cfa4e7c14cf15f71c3301d1b510e..bfd237138f1c1269dffed132468efcf99f9df601 100644
-GIT binary patch
-delta 1259
-zcmV<H1Qh$x577^hJQQoxQK4SIhwU&C2+owO<uvA*_#&}TQUQOrmDpX}MTMptX<`N)
-zYBC0iY_7I|PXfm8%NwPV7Xz-gVv>W9NkBR2kaxUyMzormwV5@gO}&`-)nUAH3_3s8
-z&_`5*$a^)*P7Ie@=CRyW0RXd?yh4!J<;q3eM?R1-IGN$bz3WQM8t*)RB{8qa@NpEK
-zP3l?H!mP@Oyvcu~qDdM60m<8Fe7QxZp?FJ19e~eS>OlJDiB+^u#TFG9mSLLtXjb2@
-zqS~3#aWTZSQg+4a@^gl2T4hl_?LxS{1`YGGAT_dN0rF7hZbM~gsKEiMiFG$SpzicY
-z0z?(B=BZP&L6UWnq2oA$`isR+wa`#+Vm64F`GnPPb_Q0X@d5(@00E<7FkmnV1_M<c
-z69fV<05BZ}163Uk1QrAo1CIUW&cu{4wO|K~5-#(`cX{5HFdqg3RUIP)7%&!q6f>#Q
-z3VZ@n!ME5Nsj5|`uAp4$oRjtfDSs}t7!hLisx??kB1RTCFb)HUlfd!&pu(|cb2fvB
-zE%>grV}u|RE5Y(?xUZ16rp(^W#dwV=h|3GNp<;0@c22J?B_V%MPsJwlx0a4Mhb#dx
-z(3GWEZ2LWjZ_yzG0#i&iU_zF#Dg$dL{n}?nYNs`CCIf7JsjhqkCd09UqJIbWKwco|
-zK=)Lxf`NwQ`fl`|qX>7dx-!=wxHnCJJjV%hfP<Pt`ed)JM*p_YQg;3pW?NOCU%gz+
-zdZXVMGj}3=l{DLRx<NX#BcrVaP_?P)%4#{)fx@m~XoFt&*6q60=yj92rE~ZlGTX3l
-zi<0H|3v&-iy4R4{J+e5&TqPcxFoFZDFoFV<paTK{0s<5jdxXO-&n3An-gkFp@Eqk^
-z3nZtrLIex}f7F^e4ud~&Q%6Iti~Gtr$nCVWZQReCh$d(C=dtmo0YFm4&Q8fh87p+m
-z&q8e!ZYGs@d#q7G<;gZ`0Kq;7$xSZ}5jF2K=>kRgY?O@lN+WfKBag`~zU>3_x-RZr
-z(JzcLZm3v0hlMuq=FlbO0sRJIYmoY_==&)KG{84Me|M}VnXWQEUn#8B^tA#GI0p7o
-zalt0`i};h?6H{rg+7j?rq2OwAWLcUvLl1it9-%9Vkx|zDUe1IHY52;Ex0fD(bl7@w
-z*vY~(q}1|C-KI1lkPyA^#@SNNmNrM}eK?cr&G}Nx(OJUu5wGhSH@IU#Wm7;V0`s~5
-zxc(xb0{%6VP6jA7GpW-Gd;(L!x7Zq~s#T`0pj_#kFdqg3RUIP)7%&!q6mw(*<y|B3
-zz21MQG3G#MvArb|Qj@C&B!6BiW`I@oxM}_WItK=Za^+lOuBN(#=M=QyTeR#LIq@*7
-z7U%tfd5%6|>-{cxD`-o14X0ToTD}%tk<6%3i?Xs(W&q4;w|3E%nTU;mbw`6F^&Vad
-zj;}-#%E9uszO$d>`!#}+>r0=XcSP)4kFEQ6zx)I$yWJxJKQt;OT7RdyTZJg)n+_-f
-z8k>Z5zYQojrd0*uga2N8TW9aK?JbD__v1Z&Xy`aiKV4ixm4I|w=~VBp{V~(qf<-3}
-zk3ec%fd+`scPRcYpvK&}*o+WWdi$!NU8twUXKPUT`gK{~>=QpQ5%<65%`nxAP`^i@
-V;r0L=C|n^N`pWqqr36{%F#z%+TV((M
-
-delta 1259
-zcmV<H1Qh$x577^hJQQ@YCmuN-y%j>QvODs=e*34At(~z@QUQOmODA=0%V}UI54ob?
-z72%qsBMaYH_XO`S^$GL{FK;y3HEszc<TuwJ6;=!=Q4c2+79;|w3p)Q(A2VX#L0s-=
-z-`}(D>5D37I;HyAC#eSFYb!D~Z{MQq2@Ic&M>RXq^=c!K67*1GYDL=qU4EoYtO|$J
-zM35XPAW#^@m1uwcput+l$nra~aZfv~wC4Jn5az2sD%$P~!I6iQ8Xth*0q27yzm0M2
-z(Bbo#zm2SyxrQdPG;j*wK%ZVd4{XSrBg4m)8c>o<&gkeuxQ=Inl-beIgDpP2-q~)l
-z^^q1eYaES3=)se<2cA}0*dU~Y8W|wYp3iw>KL{&wm^4;K*8&3p00E<7FkmnV1_M<c
-z69fV<05BZ}163Uk1QrAo2NT4zPgYz!MybDpSutR7L><rpFdqg3RUIP)7%&!q6rKgF
-z3tQnpe`*f&*+fr@Cw=cYi<9;ODSx82ds{W8<ppfm;FgMFn5K9>OE%5Ei&a5}=?)h|
-zS5|v&XujUOjcfVnadHU4H8<k?t51r%XO4Wcn@h1H6jW4LLKhAQsjnc@8#)$5&HT~(
-zn54hs?HhIf8HgQZ#fi87>H@!=q*t&}_jE?v>@e0tnm~7FdeP8+P89?plz$UJ-~HR7
-zu9KPsO7ryb^~_;AqF@Aaq-|iDE3d^5O_(xI=ppgQlz%K9EpJ3Xs&eF3#nl8k(P3vq
-zzDuE^r0s4Mb5*kUnD>O4Rx+m?T{YUrrA~935mJhMliXbso#R|j;{#XcP;qRN7}hNP
-z`R1d}OR^@UCM-t3TCwo->?QIcFoFZDFoFV<paTK{0s<6J@Pij^VA{$`@1A=dl_9At
-zL6+0ALIex}f5^)<UVyYUMEPP2or$xn6O@(&sW}Ud!Rp)kfDSF+Hc7$g+KBlh`J~8G
-zb+F_!zZ#tM8tQ@^&|J)nJ=iDjzsWLNH8SI-(UOo!ELN}3mC^@%P-yu_S>@_6^*|cq
-zITIB43OLv(TPuNGP~S~0gdxF(`ut4yqzs4t=$_3>e?3prt*K%RseY>f@azg{2H-fq
-zZ{Y-H9*QNLK-|^RzZEVY-k)8TC*|%(5>#Xg(<rU&N!*`qbcw*RGZeQl;Wjn<sg*;L
-zH>i51g^d|YG1Ei44=-m@cT~WXX%+I9O<nIA*=7{8Xoiohv-_-{81aGyfpHs3hNpa-
-zWQkH-0_@Y1P6jA7o&~H6Tj4-|Y7X?-L{Ew*eeXDnFdqg3RUIP)7%&!q6zS|S+%hR`
-z9}cF`CJb3vG(yp+{*$W)B!54}1+FZ#k)8YpAlOZ;pp84!ALaBO#fqX4q#<rCP`K7^
-z(;>*>po&?q74Q>LAb-F;|DgYnrfphtrH#yOJP{lFU*HF=OyA8>A_@#c^WW`t_Q|Ov
-z>T4WQHquQW|1v#nVCy!otDa;Ubiy3P_H}OqjmGI?DSxHes%T|{`hOM5e63qjF4ZIG
-zuI=*i)&G{uq`aV-ld}M)SAlZn3B@jY4sx7V++YiRCf*N%60$d{!-?)!9}NDV4m`Ut
-z@N8rlnCpWo!cgOme*QjJsO!>Rbj&WSa^Wg>=F_mjKQ9;fNzjw6aU4j{wL2Yke2^Ih
-Vcgi}ll;L&)3jlv^dIY-QF#xhCP)q;-
-
-diff --git a/tests/certs/crosscert.pem b/tests/certs/crosscert.pem
-index 61b4565..0da5dad 100644
---- a/tests/certs/crosscert.pem
-+++ b/tests/certs/crosscert.pem
-@@ -1,23 +1,25 @@
- -----BEGIN CERTIFICATE-----
--MIIDzjCCAragAwIBAgIUGjZdQYlcAtlqZOsQ7eWRimQ9PIcwDQYJKoZIhvcNAQEL
-+MIIESDCCAzCgAwIBAgIUFE1jkC6SiKP7a9zwHpiGCY4HBwMwDQYJKoZIhvcNAQEL
- BQAwbzELMAkGA1UEBhMCUEwxFTATBgNVBAoMDG9zc2xzaWduY29kZTEMMAoGA1UE
- CwwDQ1NQMRIwEAYDVQQDDAljcm9zc2NlcnQxJzAlBgkqhkiG9w0BCQEWGG9zc2xz
- aWduY29kZUBleGFtcGxlLmNvbTAeFw0xODAxMDEwMDAwMDBaFw0yMDA2MTkwMDAw
- MDBaMG8xCzAJBgNVBAYTAlBMMRUwEwYDVQQKDAxvc3Nsc2lnbmNvZGUxDDAKBgNV
- BAsMA0NTUDESMBAGA1UEAwwJY3Jvc3NjZXJ0MScwJQYJKoZIhvcNAQkBFhhvc3Ns
- c2lnbmNvZGVAZXhhbXBsZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
--AoIBAQDJU6WNMOEoErLYb5Qc7jsvVgruPM7DJTZ4vUpJNYAyprSDHciaKSa4SiYS
--84Mxc6tzBoJvKOAwpxzzONOqPVWUd5J244urgvfHgSGWsbA8bakiIYlETopnecFk
--B3ZELR33CPqIbpYYMYujhPGFa1xxZxFykJ1iBhZ8Gh3W4wHi/2kW6hTQkihMtUPP
--Xxc2XWACj/tz22OSdgNZcIfhXiy2HOuPch+0UlDR4UmlJIR5aet1y832hHoeeevo
--qfhfGOm9rRf9nyxKDwTyaN7JVOb7A1k6KJEJoe1zfIwT56mgoA433iUWFMLB6hKU
--be3zV1vGjk77Kk7atcvEMTRq+rwHAgMBAAGjYjBgMAkGA1UdEwQCMAAwHQYDVR0O
--BBYEFEXgglEcDh+8oCCvjlxrN/Y7C4YwMB8GA1UdIwQYMBaAFEXgglEcDh+8oCCv
--jlxrN/Y7C4YwMBMGA1UdJQQMMAoGCCsGAQUFBwMDMA0GCSqGSIb3DQEBCwUAA4IB
--AQBo8UqUEjxGQCVU/IgphwKA8Rb/uAyBYm+AjqFDs82lA6ze0n08Bj+eciVkxscA
--0deivOC1sDD88QkLzSQ9CPk4e7+m7nx5SFUnUWY+o3ln+cTbGSM0jW9hme0LtHXX
--QxDSKDBhQonRQk7lQ+TwFR7ol+y5SdZy7YQ+v/25qO6MMQgSPykJIa4vF7lwrYhu
--qL+1MJx/ryTbCUExcKNNkWHZJRc9ZvtdWEHYpBSZl5xmJdKMLnHAu5uv8N2pezzp
--PfujldZky7bnERaTM+bf/LvKXS8RfQGrCLu9QjgPVa6ysZV6gXTsEtwYh64vucjS
--s7IhdLxfiT0xYkK4JWrRLc38
-+AoIBAQCr6fvjRqB3eVHQ9YO3r0rgjWCt9pFHpQyXzTgJxIr07aZtOLfJd8hwUHsn
-+u8bq5YoSMHElNz7e8aJI2nadgH2JPeOEt+uuEgnBTP4S1Fmbj+ARs8tzpPI8Wjld
-+Vp6qU8KXASyjwhWXRUf338xH4aBaxfWqxlKVYuOJX1R9o6KE8AkIhn3UzCf8tkwN
-+2r3RqESiawT0XhcKItrXW0ql/Aae8y3N4KSfh0z3pabGz6amSWQIoN/MXM6GElEl
-+eQf2PWco2Ik3vCUq8a4JHMpETayjb297AXjX23yMU5wnAunU9obV96st3TwE7Ja6
-+GdEbd+ZbtI0uYHIaw9noptyecKd9AgMBAAGjgdswgdgwCQYDVR0TBAIwADAdBgNV
-+HQ4EFgQU1wzCqEdaRKbmhVDVvm6N93L+aTEwgZYGA1UdIwSBjjCBi6FzpHEwbzEL
-+MAkGA1UEBhMCUEwxFTATBgNVBAoMDG9zc2xzaWduY29kZTEMMAoGA1UECwwDQ1NQ
-+MRIwEAYDVQQDDAljcm9zc2NlcnQxJzAlBgkqhkiG9w0BCQEWGG9zc2xzaWduY29k
-+ZUBleGFtcGxlLmNvbYIUFE1jkC6SiKP7a9zwHpiGCY4HBwMwEwYDVR0lBAwwCgYI
-+KwYBBQUHAwMwDQYJKoZIhvcNAQELBQADggEBAC7N6qRKLabyA4xrC/fp6AQOe+zr
-+lFORWevFhSNmmM02wtl4XK22jx4nxFp136ZMw1z2Hm5ljJd6vjr5QMeT7tPvs8Zi
-+ivWC6zl2z1oqbNiU+mGO366ZDJUL9dhZqPTFydocL1cj0IBlOQemQwQpnaeTBp8Y
-+d8AJqlgZ0d0Eocnv2C4MFoig8Y8/nDIROQ7nhL6gPxTApYoRcZw//XbKnoGZGPsU
-+V9MJjfL1QW28KCpZyIxdc5f985kHuxZ6EHSXI3hSHArILRCFLIgOcoOA/kh1u4sI
-+QyFpcqOHwj+3pAwcdyZsfxGKGC1M5qyX3o3nb2VoeEF13MPGf5t6nX0iTJc=
- -----END CERTIFICATE-----
-diff --git a/tests/certs/expired.pem b/tests/certs/expired.pem
-index 630f099..3ebee92 100644
---- a/tests/certs/expired.pem
-+++ b/tests/certs/expired.pem
-@@ -1,45 +1,45 @@
- -----BEGIN CERTIFICATE-----
--MIID6jCCAtKgAwIBAgIUdtBZJAw8/6JVNMiQpN3PEROI8rowDQYJKoZIhvcNAQEL
-+MIID6jCCAtKgAwIBAgIUC/qlHkKhzuSWn/K7W/WNcYKde1UwDQYJKoZIhvcNAQEL
- BQAwYDELMAkGA1UEBhMCUEwxFTATBgNVBAoMDG9zc2xzaWduY29kZTEgMB4GA1UE
- CwwXQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxGDAWBgNVBAMMD0ludGVybWVkaWF0
- ZSBDQTAeFw0xODAxMDEwMDAwMDBaFw0xOTAxMDEwMDAwMDBaMIGZMQswCQYDVQQG
- EwJQTDEZMBcGA1UECAwQTWF6b3ZpYSBQcm92aW5jZTEPMA0GA1UEBwwGV2Fyc2F3
- MRUwEwYDVQQKDAxvc3Nsc2lnbmNvZGUxDDAKBgNVBAsMA0NTUDEQMA4GA1UEAwwH
- RXhwaXJlZDEnMCUGCSqGSIb3DQEJARYYb3NzbHNpZ25jb2RlQGV4YW1wbGUuY29t
--MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsksndW3LaWAnD7mi4BXh
--mqQjC99Y9wTvMPUJ9AgvbzTaNW4JJOQ31x8VVgwoUQ8nFBYkAqgLOv9THzNi30Fc
--7mjf37Pu6YsqZzql+tknqQbiaysyNm/fouwJDJ+NRzU70fVqI5AS9FBjakXa/l1+
--pEysCofURJAcKCBQGMSVaP2gwVrHyPI7snFPO6205vqaEOarPira7gvBkYeUGh+A
--4AHngyW/jXHt0OHzmL+NrJe5hiayNHAK4ECfXj4PbMibI8PHlRpQkkzO6OhCuI5n
--gpTZ0dGDLT693tlusvWRFjVrHI1D6MGTtQeeVlnYIKSEGhkgzp7PeWM/CCtymDRG
--1wIDAQABo2IwYDAJBgNVHRMEAjAAMB0GA1UdDgQWBBQHE8SzT1ZcPEapv4NZMWBx
--RB3QATAfBgNVHSMEGDAWgBSeBawLW+FAf2oO9NlET4onfe84izATBgNVHSUEDDAK
--BggrBgEFBQcDAzANBgkqhkiG9w0BAQsFAAOCAQEAX1Ar7jRAXdcA0Wu37yRi58QN
--hpa1VLXadqfB+i5Y4e3DzqnMbpkLWsFzreC1AG0RjLe52s4PRUE6boGlpUeAyfFC
--Qu2Gl/REVWwMCYV8bq3vQZkYQjklAXCQLWFk5TrzuDmBcV8+fY518nWw+xmcYwW5
--5oehLsvB4nxoBzlHgcdDwS5b2dmpCKCbZFLU9aA9DjAVvY/9B8emyj7Sh2sEK0Yf
--xwHlATTVq5O0/9tvVZQmYsbpS0iCRGBM+spTEhDT4WGsaRO6wP+Ucgp6Ym3ahMvz
--tHME3uUanKWVoDb69sguGZ6KlnZZZdIX1AJ3dlTXCrzEO9xsoAzqzsxVJGrraQ==
-+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5XYXdxFhaYbaWIGHWoy
-+BolsrraATwLG78sbpZIXA662YpKDkElAOemQd7x3RrSamrWZNaVNvZj41WG8cgw6
-+P9fQR1SDyHs1y04Ml1vmsdxVAQCzl7xCkNjlykXcRz6QMTiZ4ca960rMGu88fyUx
-+r8jwcRSdTepZ1MKsyoi8yaOiSRoAAcnbaHy5RaeheEtGHYDPWepA+uaJVbRPxRYV
-+GJZhmvloVt+uotqZ0nExxLRSdsXq8nOGalplUT7tQri9Bg3zsyA1smQB8lDmbkNl
-+aKjBAaqJdTc7oO70SAJEFa/mqVOzQZJ1kqHjOIL6i8VPtdBQb2I2iJj5hNVvdgaj
-+8QIDAQABo2IwYDAJBgNVHRMEAjAAMB0GA1UdDgQWBBQDjv3lzsSUMbVgB4wSLvPG
-+d3neljAfBgNVHSMEGDAWgBQzqdMKfAJTwbfYGqmqVaauoFzpnDATBgNVHSUEDDAK
-+BggrBgEFBQcDAzANBgkqhkiG9w0BAQsFAAOCAQEAxFOT4ZK5vzlGSUAd+KNsYbsf
-+ws5xIroPVIkxSkF5Z99IMOVxlg0Q87u2WWXqdNfXeb973PJL+iWVtIooKUOCLJSY
-+r1cVkJ7rV+Y0LROkpIRpFa4x3oNTkO4g26rsn6u9iJmMUXrgbvNbuuwIwH1pZWnV
-+7wYLmKBk/gmhJAi1S0wZVfGs/BcPylUt9z1OUBd32HGzXKUSEkd/YAlJr2PdVSI0
-+7HZ30qjzxoiPlR4mAr4skr2aI8cioRnXAuppa147U+yVTTxKa4AJkhj2ujbQovo/
-+ERyf8dTrWbYZ4GywB1A/I08Lf24w+COWabCTsCioDBFCO1YLKS5QuETtqKxf/Q==
- -----END CERTIFICATE-----
- -----BEGIN CERTIFICATE-----
--MIIDrDCCApSgAwIBAgIUUPCDF21g2spK7557HZUhqSxBltMwDQYJKoZIhvcNAQEL
-+MIIDrDCCApSgAwIBAgIUFXuEwy7PJbkt3nd3ZfAc5VsLJKcwDQYJKoZIhvcNAQEL
- BQAwWDELMAkGA1UEBhMCUEwxFTATBgNVBAoMDG9zc2xzaWduY29kZTEgMB4GA1UE
- CwwXQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxEDAOBgNVBAMMB1Jvb3QgQ0EwHhcN
- MTgwMTAxMDAwMDAwWhcNMjYwMTAxMDAwMDAwWjBgMQswCQYDVQQGEwJQTDEVMBMG
- A1UECgwMb3NzbHNpZ25jb2RlMSAwHgYDVQQLDBdDZXJ0aWZpY2F0aW9uIEF1dGhv
- cml0eTEYMBYGA1UEAwwPSW50ZXJtZWRpYXRlIENBMIIBIjANBgkqhkiG9w0BAQEF
--AAOCAQ8AMIIBCgKCAQEAyMs1XoC0NUT5YgydibOrE5SWBKk5C47B6tv6gA4t3zZJ
--wejaiPkj+aTIU3Ww5DO/Gpz0GuqCHNBczIw92Cfvv8kyWzUy46bRkpBJLFav0JXS
--B3xQaPlHWeXqMfVAGuM5ExT4CjjYKFsrgV1Q300thCHBhvr8TPekDIf+6J7NSz1P
--062pYgypfqsA8OwKaQbgOL9v4QRmHoolnEDc1dK/FS4f3p9dlifl7kcSVGQK0yit
--7Uncn250icCxMxS3MOE2NfuplUOSN6h6poWNGUsx00O7Dy9nUndUwJRpFfKXTV3v
--GtlmFLNoho+ss/usnxjxggWBcRtKhqd8nGSJUlzs0wIDAQABo2YwZDASBgNVHRMB
--Af8ECDAGAQH/AgEAMB0GA1UdDgQWBBSeBawLW+FAf2oO9NlET4onfe84izAfBgNV
--HSMEGDAWgBTp7DHcMiltHw6m0SYMWVg0QtGo/jAOBgNVHQ8BAf8EBAMCAYYwDQYJ
--KoZIhvcNAQELBQADggEBAD/FBa4stJGd/Acg2E2soI071B/l9B7FiqIRpCFuLVC4
--1m7TIcjioIpZrxXwE1Egf8A9/6D/kKZtWnOljcxtPBEb+1/gB61M381RIgoMQ/Pf
--7XX2yakk6mscUjbSTR//Mj1sYOs2r6ueZBp0whzF9nVvA43G6WMpf6XZqmhlg/oV
--ynytW1Iu1SPoru3y8dX/lsukvKCak7MAp1eBcuUJxS56DnKcV9xgC30m3g+CErI3
--qsOJ7lcfDP6fDjy7MfBsZBiY64MqwlDjjn7+Pleo69JedMwurHLhKnfm07DBPy8X
--+EnQk61xHEjQtTsddXyQGQV3yjqylOF2AgsAf256uuA=
-+AAOCAQ8AMIIBCgKCAQEA1Jo5DoM/cVNHQ66L+8o4yO20tG3cz5yIJmf157HxpgFA
-+UsXOTslEGSt0zM9CbRRuJpV4e6xRQeXJNmoAwT4HyU0vDRE17zPpAkX4bJSM9koj
-+dYYjj8ktvu0D9Lou7l3RL4wybqhYO4eFNvDm0CXlAf0GYmuQ+q3o+ykGNMA3P3es
-+JpmuMj5fKazV9LUCDjgG9lJxwSb2i/iT3hNTaa/aEvBXoeBqcmRZmjZDD3sUHqEr
-+iZFR1v1ezoQKafjKi7eXHoB02Hpy2MnCM6TU8krdpjQhkBC978bZUs6WNkfpfTiT
-+6835UsvRWcL0Ea/rGje4Y0FlU0AmAvO5/7j+IqD+NQIDAQABo2YwZDASBgNVHRMB
-+Af8ECDAGAQH/AgEAMB0GA1UdDgQWBBQzqdMKfAJTwbfYGqmqVaauoFzpnDAfBgNV
-+HSMEGDAWgBRzZATlXSPxvd5/qDHmQGixvSUTUjAOBgNVHQ8BAf8EBAMCAYYwDQYJ
-+KoZIhvcNAQELBQADggEBAF4qZoBV9bhp/f86BwaGcuVcY66muoTnFLTgW7TsGDnx
-+MKsW5/2CeY4+Yev9LngraEt3DadZJFq+Fl2RzKhRi7KyUmYAzGq3dtGWmYiNgHVH
-+gyT1Hl4Kjq9EEsrB8ra+s5/j+zWCkutLn593ROxbj637d7/8BCq73SMBPzQqJVqn
-+uluFKOWbDigCGpuEdb8NKDimVQXhg/9ee1tn77btLYkA9+M9fmjoOE0/XVxClYB0
-+WulU76/9MdPbgkUnD49AalyBBojQdyj+LqDG3LnYjBBVevuqoF2op8Vna1D5+nVZ
-+3+wTPzAR97/mzTDVi1C/R6Dh9gAcKFwhHPrK+R+lWeg=
- -----END CERTIFICATE-----
-diff --git a/tests/certs/intermediate.pem b/tests/certs/intermediate.pem
-index f2a77cd..6326abc 100644
---- a/tests/certs/intermediate.pem
-+++ b/tests/certs/intermediate.pem
-@@ -1,22 +1,22 @@
- -----BEGIN CERTIFICATE-----
--MIIDrDCCApSgAwIBAgIUUPCDF21g2spK7557HZUhqSxBltMwDQYJKoZIhvcNAQEL
-+MIIDrDCCApSgAwIBAgIUFXuEwy7PJbkt3nd3ZfAc5VsLJKcwDQYJKoZIhvcNAQEL
- BQAwWDELMAkGA1UEBhMCUEwxFTATBgNVBAoMDG9zc2xzaWduY29kZTEgMB4GA1UE
- CwwXQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxEDAOBgNVBAMMB1Jvb3QgQ0EwHhcN
- MTgwMTAxMDAwMDAwWhcNMjYwMTAxMDAwMDAwWjBgMQswCQYDVQQGEwJQTDEVMBMG
- A1UECgwMb3NzbHNpZ25jb2RlMSAwHgYDVQQLDBdDZXJ0aWZpY2F0aW9uIEF1dGhv
- cml0eTEYMBYGA1UEAwwPSW50ZXJtZWRpYXRlIENBMIIBIjANBgkqhkiG9w0BAQEF
--AAOCAQ8AMIIBCgKCAQEAyMs1XoC0NUT5YgydibOrE5SWBKk5C47B6tv6gA4t3zZJ
--wejaiPkj+aTIU3Ww5DO/Gpz0GuqCHNBczIw92Cfvv8kyWzUy46bRkpBJLFav0JXS
--B3xQaPlHWeXqMfVAGuM5ExT4CjjYKFsrgV1Q300thCHBhvr8TPekDIf+6J7NSz1P
--062pYgypfqsA8OwKaQbgOL9v4QRmHoolnEDc1dK/FS4f3p9dlifl7kcSVGQK0yit
--7Uncn250icCxMxS3MOE2NfuplUOSN6h6poWNGUsx00O7Dy9nUndUwJRpFfKXTV3v
--GtlmFLNoho+ss/usnxjxggWBcRtKhqd8nGSJUlzs0wIDAQABo2YwZDASBgNVHRMB
--Af8ECDAGAQH/AgEAMB0GA1UdDgQWBBSeBawLW+FAf2oO9NlET4onfe84izAfBgNV
--HSMEGDAWgBTp7DHcMiltHw6m0SYMWVg0QtGo/jAOBgNVHQ8BAf8EBAMCAYYwDQYJ
--KoZIhvcNAQELBQADggEBAD/FBa4stJGd/Acg2E2soI071B/l9B7FiqIRpCFuLVC4
--1m7TIcjioIpZrxXwE1Egf8A9/6D/kKZtWnOljcxtPBEb+1/gB61M381RIgoMQ/Pf
--7XX2yakk6mscUjbSTR//Mj1sYOs2r6ueZBp0whzF9nVvA43G6WMpf6XZqmhlg/oV
--ynytW1Iu1SPoru3y8dX/lsukvKCak7MAp1eBcuUJxS56DnKcV9xgC30m3g+CErI3
--qsOJ7lcfDP6fDjy7MfBsZBiY64MqwlDjjn7+Pleo69JedMwurHLhKnfm07DBPy8X
--+EnQk61xHEjQtTsddXyQGQV3yjqylOF2AgsAf256uuA=
-+AAOCAQ8AMIIBCgKCAQEA1Jo5DoM/cVNHQ66L+8o4yO20tG3cz5yIJmf157HxpgFA
-+UsXOTslEGSt0zM9CbRRuJpV4e6xRQeXJNmoAwT4HyU0vDRE17zPpAkX4bJSM9koj
-+dYYjj8ktvu0D9Lou7l3RL4wybqhYO4eFNvDm0CXlAf0GYmuQ+q3o+ykGNMA3P3es
-+JpmuMj5fKazV9LUCDjgG9lJxwSb2i/iT3hNTaa/aEvBXoeBqcmRZmjZDD3sUHqEr
-+iZFR1v1ezoQKafjKi7eXHoB02Hpy2MnCM6TU8krdpjQhkBC978bZUs6WNkfpfTiT
-+6835UsvRWcL0Ea/rGje4Y0FlU0AmAvO5/7j+IqD+NQIDAQABo2YwZDASBgNVHRMB
-+Af8ECDAGAQH/AgEAMB0GA1UdDgQWBBQzqdMKfAJTwbfYGqmqVaauoFzpnDAfBgNV
-+HSMEGDAWgBRzZATlXSPxvd5/qDHmQGixvSUTUjAOBgNVHQ8BAf8EBAMCAYYwDQYJ
-+KoZIhvcNAQELBQADggEBAF4qZoBV9bhp/f86BwaGcuVcY66muoTnFLTgW7TsGDnx
-+MKsW5/2CeY4+Yev9LngraEt3DadZJFq+Fl2RzKhRi7KyUmYAzGq3dtGWmYiNgHVH
-+gyT1Hl4Kjq9EEsrB8ra+s5/j+zWCkutLn593ROxbj637d7/8BCq73SMBPzQqJVqn
-+uluFKOWbDigCGpuEdb8NKDimVQXhg/9ee1tn77btLYkA9+M9fmjoOE0/XVxClYB0
-+WulU76/9MdPbgkUnD49AalyBBojQdyj+LqDG3LnYjBBVevuqoF2op8Vna1D5+nVZ
-+3+wTPzAR97/mzTDVi1C/R6Dh9gAcKFwhHPrK+R+lWeg=
- -----END CERTIFICATE-----
-diff --git a/tests/certs/key.der b/tests/certs/key.der
-index 57b743625d1081c7b8a0b649f2047c06c827174f..8a674c921cebc59e4da2738d3b3ce5a8b278575e 100644
-GIT binary patch
-literal 1216
-zcmV;x1V8&Qf&{z*0RS)!1_>&LNQU<f0RaI800e>rrZ9p8q5=T`0)hbn0JoLcUED>5
-zrW<Ku1|4cL28nF0wt!Cp#_!7;rIHr|uC`*5gOEu;Iq8shymv;lnwqtlHKk3xnE2IU
-zymAaWKiAMlRD;NSHOo#6ms{qs+*JVpvzNR=kl5wQMchX|kTE!!;l{n|O3WJXJbxuI
-zugLIm6rD}#S=7R;%80zlqoPR~00GI{XneUvr=fUDMje39S?WOg=809bPsJ7$7?xq0
-z`Dj+(uA<tR(s41wv{H7(>hg1jYFcGcKJ7xdy#@{QvmiCHWC8L}=59k}XsE#fs)=<s
-zJD~3LNCHF^ujZ*!vq6$|lA+@`g8GZaPqolcZ(=rxnE8a&Z*~Tw@d5(@009Dm0RRRC
-z&T&=NnhDncU<}_*Dv|h9E^i`Abw=HL22UzE!w)Jzm6_*L-`$3S49koLFUp#vwtxZ(
-zNZbkC#x)Lb#6WNE4@m%l#W?_waP3Y&g*iJot1~$n9sTZqt6>{f;{c2N)nACqmO6j)
-zszHm=MvVi+kC7vf_|7$=rBsKb+2M>5p!vRJ&*40RS0=&9dDy+~&BmxfzPJW~`Z5`k
-z+>(e?JRnVTwd?ECK3`79n;USuEPFnri4YmK*|2j0I+<Vy3sb7dXYtK;87_PJ^)gh@
-zy`}|b!6Gq8CgY*G%N5_;vVbyO3ndshl<u3BH_Cs{H?ZJ%x<SUg?43C+$k_scfdIji
-z(B<!Bl(LtINi!n9w;nc-%A~2t$_Ljm;JE~p#6Ir>u?VsO32l}4fQyWc0I~8~QLLjt
-ztMW$e<JFv|;gj+CoF|4fER^eph9PG6X({_*xw6x4_H+etB=yv9J8my_Ct@pkvtkR#
-zP!MuWZEg3sAl6Z{x(FdB6_xc^MK1z@fdKN!Dj9CNLTeJa^zkbjHcgG~Zu@`4M}<FI
-zI<c^Ca2{S~pOdCw-L575zcI|Xi*gkPDW~YuC<fjFl4uHp)yG}C)S6mp`nBp{h2X%V
-z#31O3kvUKTBo`RAI)ZYz<i<Z72gYLFJQ>XDZK?G6m{kn6*s5*lq}0`^%LYs<px*+4
-zfK0eP)WVuXY`d-E1qec)TC^FGmds17_KA&E89x1w0lG})KOy~7H9>fUQ_6Cm(dN-{
-z2~hHKvt;!rl_Rd`JaBB2JpS!+wc6Uq5;*eNl`rx=T<CjK<_o$S0qh;&nfvL27GO}V
-zjj&0@p`Qz!(Kec$ITOr%aCc)oB;dvgH3ETvR=x(im2()q*01-{o|_j~xF@HoRjAYe
-z$aNUdS%60;qJ<S-lxHz)!U!4SdI?EU7BAp@EL0s0?+z|5+v?<7S)%<vw4?sMHX;mD
-z6QEPTiZsvE5kTUS8S^QQXWXS|D=s0O0KfC=C+cnq_6wsRXYGI$%ryOnNn2yRIYY5C
-z0)c=HbE<w8;|vbP-*H`ihy(#v*r;>7V%T|astV35iivCE`w0lxY+d}?UuSZWyDn)D
-zRsBQIBEPzDv)6O@WgQE?h6g&?77e}k_`bEjLKeeOLiQ0gtXIGMv`Q2yBXEN00n}l-
-eV`)5gq|^KjPN=~!r3hmDe#74SivPgow1iwHuT9ke
-
-literal 1190
-zcmV;X1X=qqf&`)h0RRGm0RaHAODA=0%V}UI54ob?72%qsBMaYH_XO`S^$GL{FK;y3
-zHEszc<TuwJ6;=!=Q4c2+79;|w3p)Q(A2VX#L0s-=-`}(D>5D37I;HyAC#eSFYb!D~
-zZ{MQq2@Ic&M>RXq^=c!K67*1GYDL=qU4EoYtO|$JM35XPAW#^@m1zB-!CJ@2@;kC|
-zPdlx&=K7it=Bqv`+U^U%k%yETAAsNi=Yu7`jdAVJ;q#ckjjWfsh9<H!a0=i+pI$x>
-zY{;7<!^f2xP?Ai}=;%VYj%R|D+0oI1Ek3>8*>1A+krp*;9F0Th!IQNIo>p1dAf$vE
-z86eJ{&v|1%2rF`!G)C6~0|5X50)hbmB!7+!Q}vh>zUomfE`dxn!}JKUC>$w1ZQnbx
-zVH%XdRSGKvWH9sHZP$oR<kIsmB*lY?r>x}O@4YKu$|NsI{@xXZSQ{q^|0mjFhoQdE
-zQTc9GQ67cCY+y~@JEou)CfojISx^WAjMi+1a2w;8?zt&WwEc7<&vXs(gbcCyA?7v4
-zJlyRI{|H<{eewVc#3n(76N(aco0f#^d+hJp1aT|dM3C5TDKo5{9(aa?z4Nh=VrQI@
-z>xLtZ&A%#wJ;N?0U0+(BqfjW7({T`QXWR^3=*=gEsPodM!&hBW@ra6i{d8RvA?F+W
-zm6*FSJL^XgQx%F*t$ZS3jD<FV0)c@5>50f<4QC<k>S&G3dsI+CF_D+UKXnH-ci#`s
-znV!$v&D}B<>TxVVj6d|^hSloaY(JQu=9T+cv$zKU-eYA*G+s{J$eao-CN#&@UDjf&
-z!A(^eNxqZjq=9`9!rTQ57V+L+mpQ_y9|v_kD6rpD7up_k9<C0Z0Baaz_)jvq0)c@5
-z!*L+w6jRN*hS6ok+nVxmH-`z#r7@IaBjnX^hP(i3jYuN69sm}n&sRK!cUi}ksqK+3
-zDfN!fHZlQ*aKJ+rQ<fL#eUESB+qQnEA{zu>O9HluxD$ry*Ryw>GUZD89IxMdnP-mi
-zB_W4%`4#@IY&<kq2vM|vd`{~cDZ{=G0)c=-$Ig|`$O#MaMae1n{eF>sUV%!K$5nxp
-zhV&xOwoN0!dm4w9A*8dNjt+Pfq)(R%|K&dMGsKX25XVoHJPPni>bO4ACZD-{=0d%N
-zkF0U07uUoPC^YKx0rnSwMzvf6o6T#t3wM~U@Xs+J_dCizW%>ejd=(e6Kw|?VB5_#)
-zfq*`zyVat$qZ5-j`WcQVgk{TFT}a>rp8t_}K>W-U<wZkz#<!!^e{9&vth-d<(Of5&
-z<DG3JE#8hHMc?JIolrpsvo3RDQi_M$UyBhT{3_UwOc|z&j0)F%&v5hV5;;(f31&oX
-zu%ntazliK-qPQeBz{t)2^N;09ACSqW*!=>5fKrfpobeLe+2im#8>DcjN)`;4`o+gQ
-zVA_&NqQ&#MFYUJAQ`k9E<>;7cmkZP}lBZyU;RV}P;Kx2h3_mqrXEK1eCS{`03`f@T
-zD~_6Ai4eK$rsJ2iJZ4XJGMSs_F&E{z<}hRg7**>8jx5wx2}U9yinm5=7LH0OHuR;z
-Ej(R9PM*si-
-
-diff --git a/tests/certs/key.pem b/tests/certs/key.pem
-index 0306c69..f204f7e 100644
---- a/tests/certs/key.pem
-+++ b/tests/certs/key.pem
-@@ -1,27 +1,28 @@
-------BEGIN RSA PRIVATE KEY-----
--MIIEogIBAAKCAQEAsksndW3LaWAnD7mi4BXhmqQjC99Y9wTvMPUJ9AgvbzTaNW4J
--JOQ31x8VVgwoUQ8nFBYkAqgLOv9THzNi30Fc7mjf37Pu6YsqZzql+tknqQbiaysy
--Nm/fouwJDJ+NRzU70fVqI5AS9FBjakXa/l1+pEysCofURJAcKCBQGMSVaP2gwVrH
--yPI7snFPO6205vqaEOarPira7gvBkYeUGh+A4AHngyW/jXHt0OHzmL+NrJe5hiay
--NHAK4ECfXj4PbMibI8PHlRpQkkzO6OhCuI5ngpTZ0dGDLT693tlusvWRFjVrHI1D
--6MGTtQeeVlnYIKSEGhkgzp7PeWM/CCtymDRG1wIDAQABAoIBACR/jgxT9ZgUvupR
--Li6BTDXD9AiyKBwpPm3fO7JhGpTBVQorBGQw891t14hN5NLzLyTFg4mnrOTe770r
--X8okL0n+3hWFWBsnCf8n2mKHob7QUfluVlEehcFsYE3dO6agFybb/mZZUAgDjNZs
--hnAb45juuSlOtP10Is90DfGEDLH5IeY1xjzc7Qv/CFxCffIAC8QmQYUTihJ2m5aE
--7Hvs79oEcSvbRJDYbykzrJ0eeIaEvfOxkWJnnJHrhiONzb8qgj3DLiZdX1qeo1Ao
--ldNxEG9n3Axd6M0nhajz0qbDV11S8YiKfP10XRQh5xv7lZi7MjvrRxFTFYpSrXwi
--YYyFNoECgYEA6YnIYg1nIe3qaI3Me1RQQTGRl8M/dQc2d98Pz5mez9vN3TIW6nEs
--QYw/9OKG1ercbD+YnuaV+1izuAcA3mNlSDReTtzInAotJjTH1V3WYqvBTVUZSb6T
--5qSBfRDC3AULFvHeX5c5wqgfB3U9KLDfVBfaHnMerg6dAGsYZPhPMrkCgYEAw3Eg
--5BRTzbqG0WXF25rycTeHCcylMZRjI+TVcIa8AGqNSCK4HgAWp89XPIV3WceVqe2R
--Lyn1jtA2MgGGcMBDFlOWF+h9j2/j27Z+pyIbBF9LAraJuBOG6dezd50y5Ur6HK/f
--e5lnjvElIYdz+RX+rmw8NFcIUbSAfE7rGinDvg8CgYBDx86VzsgJC/FFySn4/X6R
--fV6BSpTHVYGUhvQiz7ZNI8F7GoeWIaSznY4OeBSkT5cL/+U+8TPEkHkQx0+UPArw
--Suq4PtImn7l85kK9hY+scacX18QQKDTq8wH2F4BGtVwDm81rtwt3mK3wzzEh9zvK
--P2X6AnV8FReyQGMDIyJxWQKBgD6nu9WitqMTkzj6GY4nhGXLWV1I4ASe/5F4QPzM
--FOVFQ3nGt6PWf2zYyay7VOHRXCeX451tJC3ejiFF3+WxnVBBB7Muc2JSiofbX4sR
--Ifwq2I9MGaaLjArXfc9w8+oSOVCNCWZEbbCjmjW/iOxnorgkNsDIzf/zj+VKH5DJ
--ptj9AoGAUpB6nPES3Nnj8DsbpHCnShYMl/rFxzxg2pJJosXzuS/ttuBT2DlT5eiY
--aZcL1DGSp2CD4QXbVuDHPkQMPzVfZzKAuCZlotEMR9byK46aYIkQueym45e0PGZP
--djKZm+cxF+W55jBkBBhV6wSOLNRWCUYiIIq3RmwWjkopNvSlwY4=
-------END RSA PRIVATE KEY-----
-+-----BEGIN PRIVATE KEY-----
-+MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQC3ldhd3EWFphtp
-+YgYdajIGiWyutoBPAsbvyxulkhcDrrZikoOQSUA56ZB3vHdGtJqatZk1pU29mPjV
-+YbxyDDo/19BHVIPIezXLTgyXW+ax3FUBALOXvEKQ2OXKRdxHPpAxOJnhxr3rSswa
-+7zx/JTGvyPBxFJ1N6lnUwqzKiLzJo6JJGgABydtofLlFp6F4S0YdgM9Z6kD65olV
-+tE/FFhUYlmGa+WhW366i2pnScTHEtFJ2xeryc4ZqWmVRPu1CuL0GDfOzIDWyZAHy
-+UOZuQ2VoqMEBqol1Nzug7vRIAkQVr+apU7NBknWSoeM4gvqLxU+10FBvYjaImPmE
-+1W92BqPxAgMBAAECggEABgXOcVXWmgnXAGAM304qkfhULm8iSnVG3XsGTyo5ww8q
-+QJWZ51Pf3YaCDMuMBi/KmqS2gAIKSNwJ3cY1DnDEQG/uD0kAgcU5AJBw7U5AhTk7
-+OKszORkd/e5/q2EbVuMAi/zVX4jLljp/86pBi9JGjQPEj5Ejj/jONaKlVIej2eGM
-+EqD5vmTP4TyCVybByXnYve7NxqhBvrgGgfoyGZLckohUPCBNc7Xr69M+X07Hmxtw
-+uyx7PqSJEBm22bBzAjqZYAgLU6rIZ/HNdhkue/r1MlTQvaYFZsEiMUgm46G5yxXf
-+3LKAMl0LJRg4lO6bljfKf883sOB4ukHGvOydOS3I2QKBgQDBk9Dl72SUspeISTMi
-+v7ceNpDKpKnIygfXMeC5BJTEPu8DsQiyAQltlfeAi4yNALHyWlGso0Cr8kbt49Wc
-+puGT8fmcJ4Y0LJTrhoYhZvdpKfthubLTbvZ0BXEk9dRvO24vdidiK3mzYgvIUBBy
-+TW1t97gg1lGzugghJxWV9VhFLwKBgQDyySoZbrpCaxK59PErGzZNje1u+3/ER4U/
-+WzqxsG9wHl5nn5OmYN2uJf2/Mcy4i3IVBimn6NMoBt4CkmgKg9XHXbvUmlpp+rXq
-+YIXgwKLEIOiKkTlQAiQXGLY6gnK45MY/HAfGYt48Gczqban0+ZhVDLbYqm3opNTV
-+qcsGTCug3wKBgEy4PtTCmkRsu63iBQhCn1q0GZKWzEut9omNVRk+/Y8BukzmPyH9
-+UzVBeIRTynKf0ebRcQlQ8nKzZPUnlSOu6DxwbJM8/u1ytdrayBI48tmVL/I9XOh7
-+U+YLuhoB7B3hmfvpghZgUK2NsEnFoZ8LnNE2mp05E8x9cHdjPCTgxgk1AoGAVr4G
-+u5VzGL3Wr/fSnpsXWLgnp6pVqNQAyHUY0FmARyeihRVflGcxbMIIGeJ6CUlRFi/g
-+fCxUHQ3vDi4u2+rkW1mi/T+0o/6+NiIMUxOgU8CKNM/UEUDikhnzKY5n3KVoKy4h
-+nQC/8+sn6m4J9gujIGftgBXMNP2HSVtjvTlDsTMCgYANc6p+FuMMDsXfcV19iAQB
-+Vtioc7xi2HlvqgrOLIqJa+P7CQjYbF382l9ncpG7LmkPVf1D0CK/unCz13P4ZR0L
-+voYHOtkWDb33+L61v0IWw1FC9hE1rFe//LRKFCkjcILpAdRhumNpPHak0/wNTqjB
-+MKUIYvx+w976iv/A5rSEXA==
-+-----END PRIVATE KEY-----
-diff --git a/tests/certs/key.pvk b/tests/certs/key.pvk
-index c39b68982c6a83d021a71ce2cb64089309188aaf..d931068eef98cab19404a4b5840bc8037b47d520 100644
-GIT binary patch
-delta 1168
-zcmV;B1aJGS39Jc_EPwH%26k`Ng!!0=Hezp3(6vv+i~52%<Drsul0mamsphX0L;^_k
-z?w~t2b&0A0!Ki3uLvH3!@&RPBH6XL|4F<iqLhU|LWm;;6bMorNc2cy&F>%tF+M=%C
-zR%rQ}VU`#b7R67rRf*>MK<Zh~fE`9lc%i37xqN8b$pHWwNq?fF$-Icltise;>P?*#
-zaq!5mF(rRI?;6ZX>%GR|nK&_!K1bX|%H`OQLcEu=00C9pvF2Ns3{J~6d&q-SN6^<l
-zIt+5WVb%DUy-lSxnYEglv_^NlcaZ5hKuM5;l47>50~eB|8_Vy;0#AUpu55`0GHM+L
-zVrd(ug+<(5*ngF`FGX1Ol@%u;2)eUT)*!g|ZEa0*5KzbqVzYTGVkdSlZaZ((^(1ix
-zboOr3vbkaVDQWj+A%=$Qlq@ucC!G25li{YE)#L3(@~c3jtWjF>u>g&Xi-7l)Z3zLg
-z2(bh2KE#v+x!^I^2g=B)q{@&s9=E?DGf9Y-vXo@+<$utV!QY@OOa{xT)zqZuZK~L|
-z3{{x<^r>y?%o#l1V#Ws?KgQ&^a)LUx7#Ac0P&tu`=pe+Rz~F^o>b3f5TAI|mUB}gf
-z3TTo7-UcYs=%*<L6>^KX%rU?HC9d6Irjws%ULJ67u(3K@KZQrcfBSCjjZHQiEAjNX
-z5^F-bZhsjn$?`P`#^5A8V|Q?U%o91Cnl{m#3!kCINwAHrP+%5<>HC@C9qa)bx(nu0
-zd+1y}@-LOy@;DO6+S;{p?fyKIY;Zj2t|OHv^<=Yh@=ytJ(dN;ga>`SLctJH&{UJZ*
-zOu7M&{XQ90jfwWHOU#y%8MIoTLI?%ot-EYQnt#I7KDbOXu|qk%V_Qjw{WQ!KfbC}>
-zqYL&4Zt5rN^S=O{AucOurQBzZDf1bU;y@A9&oqj_Q=k)53?eqZ{-d-%{i0c0<m%fl
-zE)MSv9aJoQ;4c<YNeO!583@8`F=v!t6@{WFM}S$-7<I@1)TmXerzf~r7n`2a_pjEy
-z7=Lq>y9T~iT!ggd!2gQ+-ot+UVhE)$!Kh9R{L`d%JZWRPVblTXf^Z`#6iT%GzgMg^
-z5%xk+!xlonwZ8cGy$u%GItPZn3ms+nbJw$Qy1ydOL;Y0`X)e2wa%W%K{9SC=2nqY+
-zYl(_1&I+n;dDvpSbEw!>0R)JBU2)&V4u1^e7JjO84cW*oIi2jh#zDGx;IKE(f66zO
-zo9>i27$pl`GJvw&-xbTbq2ne<F(Scc1*W~wR5JDYdoCGv&GBc*s#6OHV3|4sbFkUA
-z84!u2K6@;?a2uP)PG3IL>+7|1O&~l}h?3lr88Z5T2DrXKsK(9iz1Vrl!6sLNJb&TO
-zWWM>J5{%*5qlZ+bqBYL=k0X(f!~=~+(u+Z=^M5*)%ZOjq{EGnNRvTfffA0Mq896hn
-zI6FCoKu+y&kN`QwfdEMl?r%WEa1J%b-3i=C3Ic$(q?*bv28_!Lf`;ASQ|FnLKq?Qz
-iIVw*Ed)-ELN+NGARQQo9PTve*014L#n$}fu&IJaF=|_S9
-
-delta 1168
-zcmV;B1aJGS39Jc_EPvNVG?;QL2tQ+a&z{a885)G7AlO+}o(Hv)!RSMc9BVZek@d1}
-z+1|ZAErZd~*_483j<`bT=*~=%P#TrT!y}u>Y!5zOpFrRWa5S<ehPjuljlY=l;n3}I
-zjlU&>=K<h=9~zX0k--b@+A2P)<`A0t=CrLlPjRw4^2o<p!GECrXqChmP#`EAkVMpn
-z3am_|eqH|BMQUSE^b(LGYW2}OHAjt~3<>O_-)}ZDD{JBgsVCX`r8;LSi|OvO-`{BN
-zTtVMrGapm`It!=*Bo-7W4^b!#Ruv!DH{>J<ZZ+C8Z!ZY+3H31V1ov3q3nQeO;T7Pb
-zxeq5`Y0GVOCx1(_xiU}qWEg7zoer)Za~|3kRNt^DJ#_~ksKPmyU*7Q+3kBT55PgB9
-z=99ij8C6Zet76t&)yFg@Eef2-+)iFJNM&Q*00+3USo@Xco|r#u-0Iba;`Bd^K`e3V
-z7Bbz<+s~ev&kx^sHV1V-!<UgUK~PkC%#CR3?IC9kVt>eq=?}icDH`iee1No32v;;b
-zY_9$l`E!RMCGn1DnS0-_9QsP-GM#s`*Xf26xQVs`OJ4*VBBy?~+v9JKedrgKQx-$O
-zaE1XgHqegsDKC-jsg=iBcZEDx&!-ju9=IY%jcNeAhH%y7BV&{?rOXM3H*xZs+r?$k
-zhPusD6o2F(al=`0A|nH1K(ZGVe02i)Wk1S0_aQOQ@U5743%6^{n*&_6Mt~Rg0rToK
-zC=kTg7pHNokA=NL=6t!ICel8*>PqkmJd{tz5P6WqGx0v<{|lE-q!f4#j-9ilA(n?4
-zd%+`3w$CE;hLnL-$COHeUVV{%{rD-#Mez#>$bZh2&c{Rj*rv&lA4=tq^Z(7rz&0ef
-zqG#-gzcrepux&(U35`%W66*7C&wbYljEkljOpn+q{2>vGU)zU@Qety1vj;&?ow4QL
-zMInyfEhKH7<CiB~(cx6PtjXAHf7YY7#(6_U<rK{PKzNb=o&?}XU0KUzgeQ&}`Z$vl
-zqkp!d)w`!Yj=`n$HYrMu7HmehiXb9J30BlBjs)vf7zAW6=DFn;G3T3^GImd9JhYeN
-zrtG;8iC~(JEArMy4AG)xCb)nyXJ0ix3`9Q1;8xoO;e%kOk}=c^muZ;j<x@G>Q{cAk
-zFS+x@qDhk4U_8gg`j-qAN~dt78$0mh*?-&;@tk^)Qh_#wjA0^ttx}2=QxQk&J2JbN
-zmHQj#ArxJ7{d|gu@lst^!=}>nsD&rZ=v@rlXKxU3)0HStqn=t{T_!HWJ%TE~&5a|5
-z>yeyiVv(`)y@ZB%9-XW+DR0=2MB6KI1lsTHd+dakn|2b46NN!0#0voOeL`Fa|9=bZ
-z+&soL<{|m9421Cwbk8Dm{j^Rgx$c<b8*qkf){FxPP+4aF+a?#FraRqDU~IvK9#K|q
-z`BBimp@(AHC;tg28(4)E-u_81B+6eaz3<-Stfz^C#UwBD(&SBu*KOVNFk}QP3RS_B
-i8ey_K-)%lA94N8~^uskwfi5ml>IuFSnDtW(j(;SbWjt>H
-
-diff --git a/tests/certs/keyp.pem b/tests/certs/keyp.pem
-index d24650a..c1a36cf 100644
---- a/tests/certs/keyp.pem
-+++ b/tests/certs/keyp.pem
-@@ -1,30 +1,30 @@
-------BEGIN RSA PRIVATE KEY-----
--Proc-Type: 4,ENCRYPTED
--DEK-Info: DES-EDE3-CBC,6DB255395263EDD5
--
--A83CH4mv7u89RbT8Tpz4gxImKGBw69Zr3LstRXlliGYobby5YBx/YimkA9wFCZK/
--B1eitWwy0F6axDZQYHKi+yvUJDPB9arXtClvYknMhwrHV1GHLSYeqb9oZJeqNyDZ
--Qd3lxTbUtkMVJgJNrl2kOezm6/srnAw4uA7NyAvrs2vEzB48q4VlysrJq+f9mLXj
--vCmrfUwY999lSifRmoxqeWlqNUQ2tgHHXYMNagpvxYXsfe1UvEH9aa6+UsO9S0py
--7dyfSu95QpWyVNqkWi1VAtNbo2VpjJ6NJLAk+dy/rNqN3a4KnWeIzkYssWTsKB08
--VyHrRLePPx5qdarsczZtf+M2PxhHHnl/09+Nrp5BUcMV31j3v3VSM0K+CHEucAk7
--95rUtSUNywKUQeSgXrG1eLX7kXwRQ7PPCz3sPtvmJRIvQlGgLiTbKPsG52m3kAIw
--zgXPcH2lYb3855occznl72jMUucxXq8gq0bC4xbEg/yJV8p1IuUEFhLGI9s9T4JV
--cO9NKwmSjpHFo1ULhB7o6uMmV2rYDK+5GbQHxZgHj3ES+i53eFMWGubPEEOmqSh3
--9K7gtW9y971tNfhp9ba8RnYXT6xW2nMTM4koO9b4ptdwRo5bMKFvWY8eecXfsDAG
--OJ+aXkDr8jsn1Xauq1m4TM71wn2wUx95KaCpL55UNBEn7aH9qlNFfxdyzXMPYS36
--zgWK44BV3PTSIGgW61NVwHwzi3bFfymortVxGpelzy2dggWVvI3uzKocLFQ8f4oe
--Y0HWSmGVPF3uFHNCZtCB/Tpbz6YwP/YYStqAcryeS5Yo9Hdkh8pBVnYiKdTFEUW2
--RbClgeB2MV+zttsqvmodfkviS4BjWgoIV5szxWOePnO8kQAHA/Ml3CyDPOX6rqI5
--lDKiUojEMLgir/3YWWcmigEIgRsyF3CL1s+kTR3S8e9QRe8RiliRUKW5gXrLEa6j
--eUjs4kgCrvmQvwyZYJjWl+r7ycmk+yB/EZs8P39KRR/pfeZDUCZIOx8vkJBt57hC
--oTNJ5llFzRcmEraElXmDOAuvmj3Lx/4qzY545rtzll3mFHJEX4qITslIX1ksZz1p
--DncuqgIECzmZIeHPbnw7Nkv6EkoPzTOlccqnCH/SumFr2fhctv9x13gGcO4kSsqO
--63yZCFHjMz/mos3l51aIAizj5wQO3BOo+RyKoSQohvPzVtSgjhYMZsAPzXKxF0/H
--9VH0DekEb1WwPSbGZw8kpx9ePlglGqOBinTL6QW8YmFPbjy9RDd1di+fxh4Qe024
--8gERZpdSsMoZ+NP0nr/TSbDISFPqcLzzMpC+V8Fc/QkNvSkR1GLlNQrxLoyfK0VX
--0evysXDxqIWK9+TH7hIS1lf3i2gMkLMppMso1v2Cqf0zRj1oM3MI743QE9XTXKRz
--iAwaEDDPZWS/00T9fqNrHgtSPNpsbeYZQPYaC2lq1kTIEOlUfZZvMy5lxVPVZ8y2
--foit+0DewZsqLDJwbjZ3wYMERVEY7KagoInQa3A1ZC9SkFiCb4fNEbRF13gfjrSz
--muRbKAhEhkzJDFRocIaTKZPIWdvC73tAW66v1Zha74mxuckgnQPPqQ==
-------END RSA PRIVATE KEY-----
-+-----BEGIN ENCRYPTED PRIVATE KEY-----
-+MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIOTZv8WJMOWACAggA
-+MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECJGTN+jUwUhuBIIEyJghDPvGvTtV
-+0zIVbjh6xm5Uwp9KuhnKq87SW1C8cvL3sQFxcYalUkR5etejHDsrgw6r/jpijh+T
-+mRW2GncLHUJjzS/nM3j8UbbY5ELAhcJSQSw5UdtUVJ3kQxL/f4GIlbhx711s4ARV
-+YH4BZuOxC0eaobMSOzsYOAY2JPHdRWqhr63acsnn+1nJAhlH7Sz8B7Y5tVNl99O+
-+QIsKi6K4s0ySZlU34DMTI78oM49fsi1sAGIR+klbyNvkyqsVmy8YlKLZPpCUzaJd
-+a4KZl4rDJtLv4AMXJYJpxOAnP/WDWrnyfguJB9uHie6bgwp/cHUqNGeFBHNgxv5a
-+e1/Hk7iNPS9CW23MrFWLOEwB6yv4QuQQg1MlbVsmAT+cc7dEI1h7g6aWzGrZoW+l
-+xaElJ9j/0+/8BzXUYy1Uq5Gs2ZwpY6nRHBI4gPOLN8J1piIhPzURIQoPlmsr/47v
-+O+duE9zqPZjqEEZMrE00XpJvPmnAOc5eSHCGkf7xiCaqxsVKgCHNGMF+EtYNbOh4
-+e/riE7mhhV7SCmJNcnTFTjP6pWskb/HEOyAVbxuN4BQ6GIQTUcbOT9Yy/Azzzs03
-+4s1+qYqlzM2RV9WbLd0U21K6emE5JvR80Gis6xol+BiTyjchhGjhuPjyDDPIqQKm
-+JCh44UdI7dm4xGd473SbVDxkRRf5WB0VC2BsZMb+RLAaZWsxF1WbGAUsF3coo8Q1
-+dnjCjerK6CD7SDSMRyQLvd0SyyDY13GKQkSjGsghl3rEB4FhuyhNPxGxSxrVSkCX
-+FvsIiJhc80VBdkJmSg+l1UTisrrBgpGQ+pA8cOtSAwtm+notUvj84iRpAVxN/cuv
-+jCL5BrCNuCtrhJEjs24gnMJHEk7FYCp4iPXKh1dveL+NyEDVVR8gJiKddWmdcJ/G
-+Cez40UIxuTgHyCDRa2oN8JxSzVt5/QU34WIP+HnZ61rqmZ7nm8CJxp5Hp6Z4bX1J
-+QujW3E3FHJ7BtM4wZR7MumKfZsxswvdXU6X1owXiZ4wiL7dqt5jA82LrL7cTq25l
-+vg17mZf4Gtwhrbl+/RnTpzPg/qUI1bw2S+Cbtd39Gy6KH/CvVov+E1dQdsFXBATz
-+9Cb8JtulYSz6mcfEQUGcz82lP9m6pd2bEYvnljkzd4D6AqtI9bqjuKnOfTlR+E8r
-+5trNm3i/sexs3YNWcNJY7IbJ8Lg3LS3ByJG3g9nxueU0tAzzxcRC2VwcjIci1cyY
-+lY71JWiEoBsjNR8AlbVvWDtRCo2bu8q3wFLKZMlMZlZG95CqcqXy3QWby1AN4sVv
-+tfFldCNVCFLXBVo2lMvw2+J8D129t5bUchd96dGHkQ0aPSnVdMg1AK3g1XxLWc17
-+yafjWcR/Pua8zMosN1YqZSDgav7lzEuFDs94cukduop+98T/TjlxejoOimppCtXs
-+bKQ+tDUbCg6HRn6vMyWMonrVTaT+RFXtoTfwFEONfjaJ7Wgh2yG/xB6ZjOpMF5Mq
-+SbbmF1fh+xJfb6J68RT9mhY9PwOZXKzfcQ4FWonvo14JbQIve8xlJ+gHBUEwBZli
-+hkBmZAd0ZGoszPbArcgn3EoIoogG1LcHjWaq+Dw2HYBCtvxZf4e4npg59IG12WOP
-+cpkk1XK/52QEeuTSf9x4OA==
-+-----END ENCRYPTED PRIVATE KEY-----
-diff --git a/tests/certs/legacy.p12 b/tests/certs/legacy.p12
-new file mode 100644
-index 0000000000000000000000000000000000000000..df2f4aea06bffee7ede3e2c78d0db41b9968a918
-GIT binary patch
-literal 3715
-zcma);Wmpr8yN6+HFlw~a2$32JjF3h~43KW=juBD=0Tl)VRC0(&Nr#dGA|g|yVRT4I
-zDBU3;9moH5&UxRD=X`js=lb2h56`#fy5U#|20%;#$3l>#<U-FhpB+;ZlM&}(AyPmr
-zMEoxnfn&jC|5l`VSn!*_C=EbN^mirw+YrMa{1ZUba4q<qe<Kx~3kZ%Wzj}uMl~Mx$
-zfQbOaAUG8%_`eSV$U#JKw*O5e05}8yAj$)Rfx$+Xx#ycJ;aIR>g^PJp@$V=Bs1R)|
-zQv<ZV46vzQnnhymCCD+^VVYvvVFmy0F-%*#<JcgbH4Hn$zzWSetWOkVrN!fb?fv97
-zQ<rO!9e*MpY4QSu6wNLymzYnC40F1%yiP`ZcODnS>PyzE=tSLoWd(Y^)&Q0*@esKz
-z-Vfdxp2PmUu{0GJ<hyD+;7u;yIPo*6+M<9|xigH^6Cz~)Ecdr9lgU_k8dJK`Ovfjz
-zbn_Xssk*;IceicGt^V#n_?yhlJyVC-Kh($JW7%b(z-~>nALdka!KIU9rJDkjKHXja
-z#n}MyhUNYKm%tD!<~@c_?g5!a7utKs9YYBX6AzJeft-Y15i1O9yr#o;_R69r(L`JH
-zXO9L6iy^xNaL;Aq@8zUz<8$(N!5Il9)A_2k_}!JuYSa{xme$SBwZFM_`VcGQ97r#R
-z;G(pste_56%L&994h#P=uKH*nmJ5y_nKH_c@0?;{WG>l$N^>oB!T-)AXJW0@KEZJ1
-z%F?*y98upX7eN=+<tI*fH`TjlzKSljEo<@v&ndir9PpGXQ((3&dv44}(&aU{43y3n
-zaiI0kAG^$tJQF8NIBk>SJUAfA7w#2((4`U16?@KkR?LeW6Y$&v8`0<Y=fdyD5KgPA
-zBAj$YU|H2yNi2FPnr&g}{?dor3<p!#^^6;yx!7a#Cc6kG7x!AFW$o;s=dahcm*)(f
-z66rY7g10ko)x6HCDX7j0ZHcylFM3;V)r_}SO0MIIn0;R+2@mwoM_M;V_8Ly&4Rgc3
-z;yfEhPR?Js@^sBJu3Zpk?={^<4QgySY!+NQ6yK!Plvj<HdKJO+C?Zra(FLqDUirtb
-zN`E1<2M+9GO423>y33b$!9F>U`V1Y$_t2vCZ^X*3Vl&vMwpQUd3KFUKT`b|nrq2-T
-z7??tI^#}30Vkj%mORNQBB)@CN<C<I>1zxceSQzs$<~+T4eYTJr%QrsD`e(c{!%_o7
-zXL^-<O-y9}aYaPl50-m4z1|9{3id_?FENuTo}FqM^7>cVj;p(#qMLd*dC^{o1=6c=
-zn)^hEG~K?uFfVQ+GJoOVLK2r5)SGpKjj*MV0&Y53mhOhh$UF0?5;TEg1<gbjKixCr
-z6&nBY8W!f#3E`SiO@<0o>%IBdusng6KIv?eg5nuNBHZs1zBd+8>PtQR<tGu1s0nEa
-z3FF`z+NJ!?;Uf?-1zMO9Kx=D67c%5>jREwq0$4haWJ>-$WW>=LB?lCVTDLRzK7KND
-zJ$+6NgNj6ObU~XvpOzH=CRUrvBjEjIA>YNegUy)ni^2hd7J%BW=W2EZ1GwoG>tW7S
-zxT#Rj0`7piH)-FHBmos-Y}IbqsE%U^U+9$^(+Rzz(zHK3hY!9PL`i%dQS$c<X2JI>
-zoV<+;y)S?qImpK5PRaUpO~!T=LYb7aPRU>$mL~mAKw=beCWx1QHIs4yqKqtFTA^*3
-zSq|%2FsdbS-|gHHw@9v)!f?I*xF<+_dk62pDuODsi90o3sGChU-TD30hv3vYm&@_h
-zuNM90_5P3SO*bzgpS<9Rg(C9>?4toxp9HO|OifMdwY$6W@;8_h&ma+ilCrxuubfUI
-zijl!;S3G4eVBJg8{e_f^)o7Y%=|?}2C_7BrO0BHV!&!32QBxwV9)|@rUbd7{(GUBv
-z&?A#8cBvew<GR|7;lxDyVR@zy;FVy`OhLGZqu~#&;}(AXNR~E&%2nmF3NszOC4aY_
-zJIMwO$o?a4N?Q}Qx{{}qT-rvYBNnj7fckIm9eJa<)~X(EYFOIQpKAQh8y_CO7jZAU
-zEL&z5pUP(B(skZFcQ=Q%j>PP2CWDbeg3<Wd_OO;+gs<Y8!}f*N!oki_!GWbTjBOmx
-zRe71)aNjXx%?B9I*Lq?Qm{8h+eYwAJeg`^%u^{cKq+MV2BXEDkjj6?(w*P3FEOigm
-zz%(XmD}hRO_v2BDiHj3a$q}Jh?ZsYoKI<8Y0v~jCkJuA-*iwVME$w_RwugU(GE(*Y
-z{2a|DWm$QKtJqjFYdI87PVfj*au!_{w<U+|_P_>i5xBG-6;yBaNEia4B{Vd?W3cF$
-zc8Fi&K<Qx&C_7Ux&i|d|s^9NZk=VrmGk-L_e0LRf+q|-^wy2!8l*`6oN-A;a&?Ro*
-zuAHwbz(^)6WjFc>b%qstF}<G;V{%YOlvuwC<jdOGEFh(HltxY^0nlK}Jl1+bt#e)>
-z3T@0+<cX5Vk4-Rt8Nt!?Lr8<^Fzs+4f`%?lMk1;+m6D>j<W!E_>2u1irFo*Mngw?q
-zI$fcchAy1jx+GVePNCdsUVO?(QdA;qAZ5!kg)`jA6KCzPKkwO+-Ko$TL{Tn`(BGyX
-zyLc@k$y98-|Dlq_w<sf)=-xv83mGq;@H<3r)vpwmA6zG|bPclTwf0S*H$>t{NxGh(
-zTLW&kY@38rBe(?;OO9hN#RL5BFP!tFg+*&9kJc^~2G@5m2wDNIq;+wTJ?XoVttI@-
-zQI9JZw;h|N4BY{Nr+~v~ej1I8WP^$-UbJgVPL=8gLZ~@<v%p@+r#^v!GjbMm0#HW0
-zsxt4TGVs#aC<qZf+CdgSr1H8DY%gtVT4oo<Bs3IVlTe4D`*;tl(`n-1c49^dMg(O4
-zRbTC(NccBJ_uwbE=g9mU_IS2is*|aOl%bx!txImo?`3SimOHG<)3H*6+68#t2JeV5
-zHmNnBa?nx~+K3qMn44qAy8b1`>-JlQV5DD9fXNRVC0AL8p3RuRAOIW-disxd{6}O!
-z4}n;a`(NzxcN|D5|HpBtD2M@nOW0q?_kW2?dO=3#^M{ys|8H?IR6d6G5NL{lSRjE-
-zLxM7j+VZPtpnBEt>xMW1H|N(U)vn;Z1w)5w?3E<a;Aaw=@wI=22)BK)b2ro0#HH-p
-zj|e({e$aE^Q@TW0yc*jv^9T0DfqUyu^gO5?&1X2bIXqeL!AGqY`o#wh41I<)r>OpK
-zM{{?aC+{hZ6_FF$lV>~)#N0HF;2!trDNW;rAGEXG5smSHL~N&d3~QWrV#P)eD0@qz
-zD11DPVvBC0BY)@T-K#XxM{<|Qsl`g4=Bio@KhgBhn*Wlb3{8G<!d)@Xh*HG92R2kw
-zHc@-3pq%E9{_w4nY?mSCMa-+2D#DXFNyMa*T6F&e^ZLKAh&|xY2Iw3dpsXO<8^W_T
-z)r|(3&VdVDl1C0*&<C|t93Jo39SM!gdvg8sHQac(t();`bHA$W{bVcX3;5v1g38uG
-znV`?bg{HS>$|kFN4n@Zr-hq`D^@c58mZ-LQ$Cfl-<78+g8i=4=x9IB12}Gm9mj!?F
-z`ZIm_HlIsM=Cj{mL~Q&dXDw4>V}GdMR%W5YGe!k6j%`8m%WtL5CjzLZ<mNhTyERV|
-zZm1^)q?0_lx2>FK^ua(_`<+NTC_6xGq0X|XK@!KzFb)%25Qj+Is)4?${XB2<KrviN
-z(YER;_Gbv~k5;bNx@|GWpRmcE-nXF<xphJVJu8Qg<_D`*6(Ds|IlWmSj<=9>oiw^r
-zxX!GCeoNaO1%A7*h!VJht_=a@C{4|-QZl1I@4b!0C=WU3CDeqLeplygF)L<gdmN=m
-zKSP`2PBgj^w6e}xG`=Y{RgP3!lh!Kubi`8iTxaxdLbX0Kx5(KjJ7eXCE}NCo{R*9v
-zt9!3|(jl@$m#${9Zc=|Z=gwq<o`ZqK@d<dyiI=Q&>;W57+^Z_x)*;;2n*$?Ni7bnp
-zqP_vP$pZmuqAxI@y6K|cp>G$h8)5j!U)|x}nmw$)@~bdLCd=l-%ADSl#yynqx-Xk@
-zCh{6XkP@14n`WWJCep8qrY;R+B8JP-(SxG0w_Dqgq<c}l=uelGEG{NH&EY6Q0!7vh
-zSvqNXuNMtA6T3!4v(8sC1Nt9?E@K#Me1vPIa|a_I@RJ*R2H0@#qKh?0$Vt66H$4ZR
-z2C7(G)JYQW6DSr(YPj~QwQ<wIHclwA{@BA>iOJ`>fFzGTtv7N*I4}Wt9r|$awh$(Z
-z-nLVKfi>BE9H)NXM5208_zWtyl`br%=E#LsItTE@9Jc7{)#jX83d|s2xk~iJb0R`H
-zIa?&gs^wUo901ly`GoszI^vm2_yYsI+gz5Z_*BV=;iTr)`108qn*Hx3837Bv8kxj+
-z)^_<p59;MzdJ)ldl`x*IU9X^`u3%WVM;@yL4#}lRMw|7W!xz|OOV9~@fVZQfar2Me
-zod`J|$FqtEp2>e2aoz%SbNcuW9=#{kXaD>p0dm#ut7lI}v}9m4JH&Qg&=LYENG_G^
-z0@FKld;RY4AeFsoKdTm6)<qfzUMNcCN%^??_?7Fpk-iMkR_SkRD+ZY|9lnIS_@<{F
-zk17n!s&8-jVwm<if3d%9VYB44?#O$2or#&;JKL$a<Ely)9V)HZCK@53i`$gH@_WG}
-z)Y@N8MQ}VmdOKo3ZLZdb!wk6hwl{MpvMY=6!EgQZSjm~hZU7nQHX=Rasa*SxL|JZ8
-z`~H%1TJF?>i@|Tg$w@)CAtV4c5D}2k)Slw;G9T?OA(Sp@TEYx9yZP-E5L|3MamK9<
-JW%<ub{Vy9B+6w>x
-
-literal 0
-HcmV?d00001
-
-diff --git a/tests/certs/revoked.pem b/tests/certs/revoked.pem
-index 5707ecd..30be7c7 100644
---- a/tests/certs/revoked.pem
-+++ b/tests/certs/revoked.pem
-@@ -1,45 +1,45 @@
- -----BEGIN CERTIFICATE-----
--MIIDvTCCAqWgAwIBAgIUOpY5wp7DtqsdxII7sxculedk0PYwDQYJKoZIhvcNAQEL
-+MIIDvTCCAqWgAwIBAgIUDNLHzkIApmatwuk4ju+Cl74nPlswDQYJKoZIhvcNAQEL
- BQAwYDELMAkGA1UEBhMCUEwxFTATBgNVBAoMDG9zc2xzaWduY29kZTEgMB4GA1UE
- CwwXQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxGDAWBgNVBAMMD0ludGVybWVkaWF0
- ZSBDQTAeFw0xODAxMDEwMDAwMDBaFw0yNDEyMzEwMDAwMDBaMG0xCzAJBgNVBAYT
- AlBMMRUwEwYDVQQKDAxvc3Nsc2lnbmNvZGUxDDAKBgNVBAsMA0NTUDEQMA4GA1UE
- AwwHUmV2b2tlZDEnMCUGCSqGSIb3DQEJARYYb3NzbHNpZ25jb2RlQGV4YW1wbGUu
--Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsksndW3LaWAnD7mi
--4BXhmqQjC99Y9wTvMPUJ9AgvbzTaNW4JJOQ31x8VVgwoUQ8nFBYkAqgLOv9THzNi
--30Fc7mjf37Pu6YsqZzql+tknqQbiaysyNm/fouwJDJ+NRzU70fVqI5AS9FBjakXa
--/l1+pEysCofURJAcKCBQGMSVaP2gwVrHyPI7snFPO6205vqaEOarPira7gvBkYeU
--Gh+A4AHngyW/jXHt0OHzmL+NrJe5hiayNHAK4ECfXj4PbMibI8PHlRpQkkzO6OhC
--uI5ngpTZ0dGDLT693tlusvWRFjVrHI1D6MGTtQeeVlnYIKSEGhkgzp7PeWM/CCty
--mDRG1wIDAQABo2IwYDAJBgNVHRMEAjAAMB0GA1UdDgQWBBQHE8SzT1ZcPEapv4NZ
--MWBxRB3QATAfBgNVHSMEGDAWgBSeBawLW+FAf2oO9NlET4onfe84izATBgNVHSUE
--DDAKBggrBgEFBQcDAzANBgkqhkiG9w0BAQsFAAOCAQEAYVJiPrkACW/tK487fYS/
--gYzU3fYVCTfHpAv3njarNzy8UBNqBYr0kDg0DLoOWqGV7ogTtlbQP4IIjAQI/kW6
--cEreW8yU5VxO+kxDo+7oG9VEbR85i6kQW2ubJsXV6yBtf5aAbXEqImYrtjh7UObb
--BbQiUI1ll2dXWqvZGxr3Fz1uz8nPMYlBpVjpCh6JF8otdWwABmxRnqUvoLO6BZbH
--/gdUkouXfio9BlWkWaJXJGXMW8B7ozpjuCHSHyfvGKDA3YIfa7++A1BIKxW72jIF
--jRJDw/rwnV59tiEcBWmp2T6vV+rD8yaS+LotRPYD/ck/jEj/mV+N077KLmuZpdJF
--ag==
-+Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5XYXdxFhaYbaWIG
-+HWoyBolsrraATwLG78sbpZIXA662YpKDkElAOemQd7x3RrSamrWZNaVNvZj41WG8
-+cgw6P9fQR1SDyHs1y04Ml1vmsdxVAQCzl7xCkNjlykXcRz6QMTiZ4ca960rMGu88
-+fyUxr8jwcRSdTepZ1MKsyoi8yaOiSRoAAcnbaHy5RaeheEtGHYDPWepA+uaJVbRP
-+xRYVGJZhmvloVt+uotqZ0nExxLRSdsXq8nOGalplUT7tQri9Bg3zsyA1smQB8lDm
-+bkNlaKjBAaqJdTc7oO70SAJEFa/mqVOzQZJ1kqHjOIL6i8VPtdBQb2I2iJj5hNVv
-+dgaj8QIDAQABo2IwYDAJBgNVHRMEAjAAMB0GA1UdDgQWBBQDjv3lzsSUMbVgB4wS
-+LvPGd3neljAfBgNVHSMEGDAWgBQzqdMKfAJTwbfYGqmqVaauoFzpnDATBgNVHSUE
-+DDAKBggrBgEFBQcDAzANBgkqhkiG9w0BAQsFAAOCAQEAcB1h5O55YyIuLSPwBKy3
-+L36Msm0EutKj07soEVzWyq1/2elOvIksS/O/25zzenR/0Sf1/CBBU1kSQlb0PnkR
-+f0cgWKW3I9eqJevkyABE7CS5V8y9YYkrWl+XedRmPBuMYElTs79LQllFPhbga4lQ
-+bPtyCM+BpnsK5dkVf0AOoXkMOg7Ib3yg5LAvU2caZ3l7MnX/aXJEeVnJ4tGF6nzI
-+1e9X+ypOJ1GOpA/hXEHiDri5FVEMZamVFDRprdB2vA1Go7utNHZ/lvcoHRsU3rR9
-+K/uN2Hw4XhFZoN+9F8N0wD8CXk/hjJwPTAcUfzgSjhymgHzZEJa4G40O4fN4jWTr
-+Cg==
- -----END CERTIFICATE-----
- -----BEGIN CERTIFICATE-----
--MIIDrDCCApSgAwIBAgIUUPCDF21g2spK7557HZUhqSxBltMwDQYJKoZIhvcNAQEL
-+MIIDrDCCApSgAwIBAgIUFXuEwy7PJbkt3nd3ZfAc5VsLJKcwDQYJKoZIhvcNAQEL
- BQAwWDELMAkGA1UEBhMCUEwxFTATBgNVBAoMDG9zc2xzaWduY29kZTEgMB4GA1UE
- CwwXQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxEDAOBgNVBAMMB1Jvb3QgQ0EwHhcN
- MTgwMTAxMDAwMDAwWhcNMjYwMTAxMDAwMDAwWjBgMQswCQYDVQQGEwJQTDEVMBMG
- A1UECgwMb3NzbHNpZ25jb2RlMSAwHgYDVQQLDBdDZXJ0aWZpY2F0aW9uIEF1dGhv
- cml0eTEYMBYGA1UEAwwPSW50ZXJtZWRpYXRlIENBMIIBIjANBgkqhkiG9w0BAQEF
--AAOCAQ8AMIIBCgKCAQEAyMs1XoC0NUT5YgydibOrE5SWBKk5C47B6tv6gA4t3zZJ
--wejaiPkj+aTIU3Ww5DO/Gpz0GuqCHNBczIw92Cfvv8kyWzUy46bRkpBJLFav0JXS
--B3xQaPlHWeXqMfVAGuM5ExT4CjjYKFsrgV1Q300thCHBhvr8TPekDIf+6J7NSz1P
--062pYgypfqsA8OwKaQbgOL9v4QRmHoolnEDc1dK/FS4f3p9dlifl7kcSVGQK0yit
--7Uncn250icCxMxS3MOE2NfuplUOSN6h6poWNGUsx00O7Dy9nUndUwJRpFfKXTV3v
--GtlmFLNoho+ss/usnxjxggWBcRtKhqd8nGSJUlzs0wIDAQABo2YwZDASBgNVHRMB
--Af8ECDAGAQH/AgEAMB0GA1UdDgQWBBSeBawLW+FAf2oO9NlET4onfe84izAfBgNV
--HSMEGDAWgBTp7DHcMiltHw6m0SYMWVg0QtGo/jAOBgNVHQ8BAf8EBAMCAYYwDQYJ
--KoZIhvcNAQELBQADggEBAD/FBa4stJGd/Acg2E2soI071B/l9B7FiqIRpCFuLVC4
--1m7TIcjioIpZrxXwE1Egf8A9/6D/kKZtWnOljcxtPBEb+1/gB61M381RIgoMQ/Pf
--7XX2yakk6mscUjbSTR//Mj1sYOs2r6ueZBp0whzF9nVvA43G6WMpf6XZqmhlg/oV
--ynytW1Iu1SPoru3y8dX/lsukvKCak7MAp1eBcuUJxS56DnKcV9xgC30m3g+CErI3
--qsOJ7lcfDP6fDjy7MfBsZBiY64MqwlDjjn7+Pleo69JedMwurHLhKnfm07DBPy8X
--+EnQk61xHEjQtTsddXyQGQV3yjqylOF2AgsAf256uuA=
-+AAOCAQ8AMIIBCgKCAQEA1Jo5DoM/cVNHQ66L+8o4yO20tG3cz5yIJmf157HxpgFA
-+UsXOTslEGSt0zM9CbRRuJpV4e6xRQeXJNmoAwT4HyU0vDRE17zPpAkX4bJSM9koj
-+dYYjj8ktvu0D9Lou7l3RL4wybqhYO4eFNvDm0CXlAf0GYmuQ+q3o+ykGNMA3P3es
-+JpmuMj5fKazV9LUCDjgG9lJxwSb2i/iT3hNTaa/aEvBXoeBqcmRZmjZDD3sUHqEr
-+iZFR1v1ezoQKafjKi7eXHoB02Hpy2MnCM6TU8krdpjQhkBC978bZUs6WNkfpfTiT
-+6835UsvRWcL0Ea/rGje4Y0FlU0AmAvO5/7j+IqD+NQIDAQABo2YwZDASBgNVHRMB
-+Af8ECDAGAQH/AgEAMB0GA1UdDgQWBBQzqdMKfAJTwbfYGqmqVaauoFzpnDAfBgNV
-+HSMEGDAWgBRzZATlXSPxvd5/qDHmQGixvSUTUjAOBgNVHQ8BAf8EBAMCAYYwDQYJ
-+KoZIhvcNAQELBQADggEBAF4qZoBV9bhp/f86BwaGcuVcY66muoTnFLTgW7TsGDnx
-+MKsW5/2CeY4+Yev9LngraEt3DadZJFq+Fl2RzKhRi7KyUmYAzGq3dtGWmYiNgHVH
-+gyT1Hl4Kjq9EEsrB8ra+s5/j+zWCkutLn593ROxbj637d7/8BCq73SMBPzQqJVqn
-+uluFKOWbDigCGpuEdb8NKDimVQXhg/9ee1tn77btLYkA9+M9fmjoOE0/XVxClYB0
-+WulU76/9MdPbgkUnD49AalyBBojQdyj+LqDG3LnYjBBVevuqoF2op8Vna1D5+nVZ
-+3+wTPzAR97/mzTDVi1C/R6Dh9gAcKFwhHPrK+R+lWeg=
- -----END CERTIFICATE-----
-diff --git a/tests/certs/revoked.spc b/tests/certs/revoked.spc
-index 91857561c39b205b3de6b37454d42d3a5b171348..6123d8158ce8c3213129c9c1670a8b8d28c34c53 100644
-GIT binary patch
-delta 1588
-zcmZwH`#X~h0KoC>r77kzMsi7VjT74#qnf!TIT%Ydw<7nX2*cFNTn-OOgh-jxsN-_5
-z+!~^2lU$OTl1tjOMiU~IIzRV3{R`jc^L#6mDwOgMBH=He4cS2$A$7e1T%L$l(q(}6
-zX(Vbx!PX+K-=t#(Lp?kYrWt{OWk=Sxq__k9qUY-O3U*4=w*(fX<vSCs1o;#e<uJ3X
-z>|rVPo@?ig@8bci7`U~~n-QmDX>2O?xf{I1hu=8q1%))1u<Y`=yaC5aCwx8{S329@
-zDLgu;COQb}p&Qss(a2k_pUJO!YX`De9I)z+vl;}-c^8)4?pR%!;Br_qWtjY#u*uK%
-zV!HRKD619+lx>6^pRT|2w)AB*`YF>hzVGw$#morrU=RGFU0WwicBOd_wkZg@Oyoz|
-z2Zz=4Kp$ksSstK&Sv>+cC^zu$lbUS{;tDF~aJ0>wKKF+s#Pfj`SvNM)$Ir*ZfU2*B
-z(SR0KB5#W~^z=IV;c2N{MU$0&O5#*8N((08rKuySic(2In%y6hP6kLltz5PH54;%l
-zbYDSvVIQy$yr3EI@k`>Fy(as0mLzLiO)uv*os;Z%SvB^^5aIiJpbnf6xUsVTa#`tq
-zSH6-I3yvCm`?1HCL{_vrzKTyofKGc(-fPu)^FUAdkqvQJ&}~04*cp&*?0u>v@m0t{
-z_1x3Wq~>lHJF+8QW#())F;X0}eK?gtmF7(-g9N!sFcEGo$3CA-|M;INDO4>qk&21?
-z6&~Y|NalPP&G?+m9v7Vu8@U;H<lU8@^|k#V*VeA=0S~@kgftJY8;NJh9<F*+XC4n0
-zuN!KrBd3^`jKx>D$vA%mnLgdQ^GWPu8^GUvHn&{<Zz&{*Q_Ry~q$E!$6t}5gk(*sf
-zxDuo%lt$4cYEd-cI$Z*Q0svB(n*PLOSg(Em6onGJq`~u%(XDPqNW!7ut1>IOG@EFW
-zlYM=TcmT&<WHQf94wq-?hkl!H{K|k5Jo|>+I1amvV+V)r&LN}pixQ}{9=1G=MFgY=
-zFU4^+l|^7hW&*(Rd*t=pwWB(5nL1ZF`@0q;Ry$0-_>G$8VxnqJ9{4B2Vu?SZ$AfOc
-z0?+1e)_oH1gPA|Jv;ir#`la<4{HcAl<Esw=IUH=wGrC8AE$4gTloBbt;jQA*iOQLX
-zm>_bQg}po#xx3Oh`<ln=E&ri(>G1CZIjtqTQ)0PEF<efs+1*#mN8dBdweuA^Mg0?=
-zL&X+Of=jqU;foE==cDA_RYZeO&9d!`Z7_+T53IERYWumD4*bLxYQhY$f1>o8wTnTL
-zJU^YUol{^9nokI8?9@~8EKGvwg8oJ!DPG^&!nb}|OTjW@c)n-q86D~KNal<Wb3xVW
-zE9zgB`7K&v9zH<0Ws+bV=0cIJChK~4srX$RtntWcYVr($3`VrZj~16^T}g>^O4I$e
-z+h01b!9j7LXSt=TxnfR?r4<NWDk>-r3qDut#FXwIl17i->p*SHjr6?1>JFa_L*7j}
-zLqP3jdR(`xA&%j-Z8q(fKh-Bx)Uvog8?ruk=yKR6oU4tWuU%0}theBps9_5|_KxOg
-zAb*t*;hPG}8lf2eG@<uTwsUh8ypqHZ=zcZTeW7QG8=G<D=>;Vl6k@%b{{l6hL+o~<
-z&#pl<41KjVHU~De?g8Xag}0@uz(37wrz{48Mq_Yja|{N9^``5fw0~>*$LO-K9Y&c)
-zGS_9HP?>EI2^tg%X>mi2ks4PXGw$k!+=fz3=bH|t!guLwMw$_d$6K@s+Qd_!R%rT!
-zz-Y0TYONP<&P}~0NQWB-FR%O*sT(asS%Wj%@O2L32Lcg(LN{VH-E4<UZKS>5*(UDA
-zd6g*Exm$0n=B(1uw_FN}C55NuE!Su==WUCE6rPCKU1jVy_6TcY{4n)c-X7Od#xwSz
-zx?|1L9kf>R1hb>4AW(s0F?;$#Y*tLj4%I3*)u&1PTN~S}tDo$iS)U_~qEXwKQ<l@I
-zZw<DaaQQ4W_l`Q>{d$I?^4tuvZCk>qr6OGEX%5R-BCPNld|~MFSi&QjflHA{*7BvC
-P!Gtgk%)wOg2paM~gw^lW
-
-delta 1588
-zcmZwH`8yK~0KoAbHfD1Zt!WmSoZFadhN2L?M&&;Cq7p`WQ*Wil=2d7VbLH6fYRWQ4
-zCPivSN>UA}CN(N0a#TZj@&4TN^e=p$&-3N#aCP!sbe)TxIyqe}wT2HEB$2*#(dRhn
-z!c7VWNN@7RrqP}preZZ(t48(4%J{}`dB~#DEN&jAP_ap|8zv^hOg=iiLhA(~%mOs9
-zx*JSDHE`$ky=dDQ`SysJc)46O^Ci#xkaP923@d=XPqZM|r^u_m!Vp}R7m?IIpJ1G?
-zt)Rpv>>OT;Jj?eJs-An{nU69vq8L0Vil?vgBw>$wzLT0#{YiDrpO(usKh?UL56{3Q
-zm(LX<(HWz_&&;i2R_e5L>_@4XB`j&pHf^#yqB`o%jdImU>M1wwdQ^m@6!<-xnAmaW
-z;vq(%tiPXW<$CX(EV*g^@&;leisdmOVc$~b1ckmf;%6Z@8a?AYKN;($VsW(84z%kP
-zI~9Z`D(gHD`3FU~>=KBXp?GSlr=b*xLqoy)4ULrya2qmoIS?T{e9WDmpstX4`sZTL
-z%sS?=yFuINe+I_5wgO-&(-xOVXR^eZ7hb$w(1STV;=>m?_O%W!?G&8^NUkE^(GJn3
-z9`<k1%z2%bAgLQe<${vR+RnBkyWfTP6^=*zvFzt@b!KAIkS7i8lqb*(Pb@d>9-1<u
-z(Tg)^speY_TC_NxrhIw>Y2HF%9Vj^z99Apagk038larr6evZ%CULEp9b#sn>uT@$S
-z0GbrQskY&X+91V`)|B@Z<dvK?Cqwu1L#u*K4)le0oWANDdj~Us#?Bh>I^HtSiQ@ZU
-zinoQ{-C+WRrR~wRJXaZYrUiq792Ur28-gdhewY^gY_sxQ0IxoFyWqWkC7LyOzt=kP
-zO7+0joe4MwScqeQ3VC1<5Cqbt%rW(8)ZyOUvz*h0MHqqQ_ToX2mJ$L;?|DLu%4jBf
-zF2x`!b40Z|g~dt&C-_Cl<eTLTbt}2Ok7Q!_{F3n!zh`e+<40RDvO<BJWT2!GeHX~D
-zv9sdGgm5C^!?pf`d>_l825HfNaylh`$t!ex5<l;b{NSXc`%~5NwOP1DW+X+v$0`dW
-z$zJ}?Z;_8Uw>H6f>Psj457r4{5Q4L{fVr=#hoPg6;*>F^gPU`=R=AH04T$xu(eJpC
-z#n|x~FYSGCs)J^A(>^2I<YPG<H*Ixq<HqcXD}o}A0*9JY*ZyH`^u-T)+|{r-6nJ7^
-zN8w?;?<IR8XOXglx}x~(OG43#kZbUb0m)3=v^)EHdPQ7LU<ByvAlndXM*JP6U#xxk
-ziXS0tqoLKW^_wC>L+p0+*Q~KmK~3mx-H>|A=F64;DI2}sBjmA2FVN$P&E2_GT6|2h
-z73I#$<Uvf&dtPp6gWjA@fDyfeyv|$CzeWrDtD4nEbJ5zg5<RM1=O=#}utgQ&@k2hH
-zw(wYBGMR`9v>(`mUMG-~s8jY0wVXKQu})O?LRt!#_3%sVHhQ(}M*IQhGF`7Xy)Hb^
-zddPU9e){{jq4nY?{B~X$TLicsoOyH{)@^-C{b)t-2o-+D^qmGnyUF23SI$f@8nMPz
-zce#t7ONuinono4IQa)TfyXG2PGc^!(tj}6_bj<w3r@=;vn~nZYA1S*o73D3xMKVlF
-z&)*0+(d*n)ICdNa2hfvGf!apd9ObL@-_1;4jX=OT5bW``I47cg7|$4o`K9S^qpLw-
-z=Gorai)uh190C9{fIxtwg_@0K+4MzQWO-DT!-|z-pN~3h+lwq)@X6r@<Z8P2t8seH
-zM=U8>(~ou)+=F=kFvPMTq90MNDT<IH?(a8W^0cW;n9Ddu_G*?;&jDh`1Ih^^f99)p
-zyF6K}H8$8cjDfPDDmuJqc`b-`Sf_Bb9R+^K@M_)O#q;^04a~}DDQzU@Lo%P#d_H1!
-zoYJV^GRTtWu^J2+5KpqP{9aG3{PwpobBr^y+W+8I(`=raYov86XZ2p^Q?1FYXzjAD
-z;_@2j^J?9y81kE`7@_Y*BzpjA*E!;+)HoDf8ei?}!we#lD#l~Nixy(m>R(bi`B${G
-Po-I;`Z!2J!c|72MBzxYT
-
-diff --git a/tests/certs/tsa-chain.pem b/tests/certs/tsa-chain.pem
-index c8c6ef2..cd3d99f 100644
---- a/tests/certs/tsa-chain.pem
-+++ b/tests/certs/tsa-chain.pem
-@@ -1,50 +1,50 @@
- -----BEGIN CERTIFICATE-----
--MIIEzTCCA7WgAwIBAgIUfRjXKciCGA4XbhbhxbAwfpcLGmowDQYJKoZIhvcNAQEL
-+MIIEzTCCA7WgAwIBAgIUaDV4MOupysdYAfwy1BiaGDN6KWwwDQYJKoZIhvcNAQEL
- BQAwYDELMAkGA1UEBhMCUEwxFTATBgNVBAoMDG9zc2xzaWduY29kZTEkMCIGA1UE
- CwwbVGltZXN0YW1wIEF1dGhvcml0eSBSb290IENBMRQwEgYDVQQDDAtUU0EgUm9v
- dCBDQTAeFw0xODAxMDEwMDAwMDBaFw0yODAxMDEwMDAwMDBaMFUxCzAJBgNVBAYT
- AlBMMRUwEwYDVQQKDAxvc3Nsc2lnbmNvZGUxHDAaBgNVBAsME1RpbWVzdGFtcCBB
- dXRob3JpdHkxETAPBgNVBAMMCFRlc3QgVFNBMIIBIjANBgkqhkiG9w0BAQEFAAOC
--AQ8AMIIBCgKCAQEAor220wp2zqj6Fe1VT/yic4LJcfMn1/ZWhsE7L86krULRvI+N
--JY0fOVg/24MtyOXbnm7nYOyYTlR9n2kqm4fEgsz+GDQxXLHgyLh3aF4ueDzoFt0v
--8G3vJfD+4N27XAYJ5V4f4s4VJRDIm0P/BvFGY9J/zICjC83F3OLdnkOD88O8QD6q
--FwWdtBYNqxQX1LAwy3ORe5aTubdVkHV02JhdKAC/xy5nfhynuV4KfYyel2nHrI1i
--54UXWdOrlD/XIKPiXpuEGcXhYTrTHigH+yR9ybs9hotGvuHTEjcxEuJvEQJX+qV4
--eJAIexITDW/yK+maWPLijO3bZ9/JodX+fRCnPQIDAQABo4IBiDCCAYQwDAYDVR0T
--AQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAdBgNVHQ4EFgQUKWCqogni
--6SseJ/P6LXo0M2cK++QwHwYDVR0jBBgwFoAU/5nNuG4Tm4v2y9uKf428/4fVQesw
-+AQ8AMIIBCgKCAQEA54M6SZ/7psvK2wMkh4V2eI8ZY82f8Q1v/LcW8t34NSyz9c3j
-+/YOVcKu9AeWdldUFnr7ogs8xITCsVOibxVICZwgKii8XD8ZqZYCxyDn7aupct14n
-+Jr8F8w/LhNJgzT+dL+IQAZeujpURft3BpcBB5a/wOFWHMhHO9MQSNnFI5rra9jtv
-+jXKWpsP4gJetM7ig/Qhj+wDH3H1AtQnZaJsjAJN0Tr1qCV8VeYwoOy6E0Fks3c0C
-+4tv5gYxtMvR5eHZUdu47KHlDZZJbkgvA4d5jxkP63yBHP3p9VDvrFWUaPYgSQsPP
-+M47+rgn9p5Xr2gFKbUbr0KhL+FjDWjA3tC6ihQIDAQABo4IBiDCCAYQwDAYDVR0T
-+AQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAdBgNVHQ4EFgQUVzwbd6xW
-+ZJQxaV7Vq7t+rbzjtJQwHwYDVR0jBBgwFoAUZiXazafm/zg+I4wbylR/skX0dWow
- gYQGCCsGAQUFBwEBBHgwdjA5BggrBgEFBQcwAoYtaHR0cDovL1RTQUNBLnRpbWVz
- dGFtcGF1dGhvcml0eS5jb20vVFNBQ0EuY3J0MDkGCCsGAQUFBzABhi1odHRwOi8v
- b2NzcC5UU0FDQS50aW1lc3RhbXBhdXRob3JpdHkuY29tOjkwODAwPgYDVR0fBDcw
- NTAzoDGgL4YtaHR0cDovL1RTQUNBLnRpbWVzdGFtcGF1dGhvcml0eS5jb20vVFNB
- Q0EuY3JsMFUGA1UdHgROMEygGDAKggh0ZXN0LmNvbTAKggh0ZXN0Lm9yZ6EwMAqH
- CAAAAAAAAAAAMCKHIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA0G
--CSqGSIb3DQEBCwUAA4IBAQB4YXa5nVWUzWSsUDMfYFTEETOe8boUErwfrDNBuj6z
--B5en20FhI49i6PCYEfNq3vrAtPOEFJj+KPomN3C46VLxbUEvqWLdq6EyzWvVVmXK
--VLeC0qV0m6CFM8GplaWzZdfFTQaaLUhgY08ZU2gp4QsoS2YjAosxlZrNSm6pBbv3
--q+Og1KeSK8gKS0V89k+6e3LOEF6KaNWKSkoz5xDniQY//mTjiDcNmYUh0KhHfhdU
--eO92M82uJSaDqnRs5HsWPs6z6qdfpuvj++OtQ1VCM2p5SEH2sEomdeN3YYChuG4h
--yzn0mYAdbTyGJHlFm17AH+SQRbVqCKYdHDaqsMb+fWzi
-+CSqGSIb3DQEBCwUAA4IBAQBdZ/Zgc0e6F4H7J/rdAegE3MhZPLLAPGq/H5IPC4ij
-+ksW6ujTejCJgtSWAfkUXjaCDQvT7bkq4AMo18ELc3I2kpTp1dvftc3aMoDBuGz/7
-+K0sxlA1DFncmY6hhh3cg2Gjb1vlnuWnwwSrfy46UuNvsJi4DjBZXHt+gY8KM4Gas
-+i3MIqlM/ZIlljc2LRGUKxftkM3odP1kA65yNlcMV9BESRGsAOH8nb6f7Qb4I6vjk
-+Oijzs75JPWy9C+vMutH5LSfMAjrdRmNKnDoWVCe22QT1jReIRMNsRjdX0j+SkyyL
-+HpqLVmczWLFHPspm8tRyAI7Vc0CpY9ixJyeidD4mg7iv
- -----END CERTIFICATE-----
- -----BEGIN CERTIFICATE-----
--MIIDkDCCAnigAwIBAgIUJ0nfE+EVsIThltlY2LHVWMJVIq4wDQYJKoZIhvcNAQEL
-+MIIDkDCCAnigAwIBAgIUWSzkBFwFSMGVBrF88OJwBUP9eNkwDQYJKoZIhvcNAQEL
- BQAwYDELMAkGA1UEBhMCUEwxFTATBgNVBAoMDG9zc2xzaWduY29kZTEkMCIGA1UE
- CwwbVGltZXN0YW1wIEF1dGhvcml0eSBSb290IENBMRQwEgYDVQQDDAtUU0EgUm9v
- dCBDQTAeFw0xNzAxMDEwMDAwMDBaFw0yNjExMTAwMDAwMDBaMGAxCzAJBgNVBAYT
- AlBMMRUwEwYDVQQKDAxvc3Nsc2lnbmNvZGUxJDAiBgNVBAsMG1RpbWVzdGFtcCBB
- dXRob3JpdHkgUm9vdCBDQTEUMBIGA1UEAwwLVFNBIFJvb3QgQ0EwggEiMA0GCSqG
--SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOTX1f9dmtUiyzlsUInRIGfRMya338SVx
--vYGeOwdpTSSGlYUVwR9AuFewQF5+klelstCJe+SoUG0AdzS30mRWlQrhip4UdvdW
--T2gkNKbSn6DQzlWoQej9izqRLxAsbuszgkvnLOBEmPaLimDsCgu0bAN95Hp0Hls9
--O/fVmzh8VuV4iscxc7q13ZB7CylWgwd55CFEGd/jpJ6kMwSHbOLoBWp4GQ3KxR+c
--ASAo0FapU2WSZB2EYWszRiyq91X+AvIYN4ypTv7RccgfUvnZ2qFykJAkf/wgkynu
--Qg7rCUNfUEpDc7jlqtDWR7iLrtHBkA17C3IU8ymmKQYWfw3ZyBwvAgMBAAGjQjBA
--MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFP+ZzbhuE5uL9svbin+NvP+H1UHr
--MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEAbj3aFwIUxvzwgywO
--gj01JM8GNbw1E4MGdkaNI8rgeY8ay15ZXhR9NpRWWb6Y7IXPq5XhuEktVte5Z4Kf
--XLBrr7Xe9VVqJL9zd1tMzOEM/zG77rZf/iXBTZLkCtQc/GOEY4TTWKNEl5hiWVE0
--po97GX5XHoeyHlWQ75sd9z6MxFxmvdp9/uyYD700e9sd5gcD8LGvHw2DNy8vntYV
--ia9h95N9i1umffxU460o8W5GoIcsD13B3YftvnWhGSXqovBRFgcPAQZ4eW9Qh/zA
--4zQBQrRvmREPihXVdgtWVpbRchP99oSZBrYr7Hh/P69rycklquqxJl1ol1wbT6dK
--S5Gmng==
-+SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1iXUDwCHsyISjyimEvnvIPer4aqdpZ26y
-+uKI2oURQQpAlL+PlbP5/wm63tyxCY/Oo6cadcXEk9TGEi/SpGMKJtfaZAFzygEQC
-+dU995pfpLsQ9Aaf53ErE4L7RsB+noDnYd0UWklBHBmKmWSszfaS/qcsqexP+BBzy
-+GgUK1/bVg2SjYESoQ7lWA0o/s9VTYBQ0k36EqykBjWhy87goKBvvDkafqbWRcG+8
-+RMgbzvD4vBjOyZWhXH6cKj6Hg7QfDjuTQWV7tQ+zCq0pGMsftcH+N7z5oXyNUiwj
-+ALPWxOvrViNRDG2I3GUXU3yWQIHNhmNkIrNE5GJRmx1dkYX0oEW3AgMBAAGjQjBA
-+MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFGYl2s2n5v84PiOMG8pUf7JF9HVq
-+MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEAmCnnUVQoKhbKLqyp
-+qNdyT5FFEKyoCd9defa5bKzPhzdkkuxPjidsLsxvP58n6EB8i2inddBfdUxv/0lG
-+kGHO+7Lz8qjMlJ9+VlLTmA96Q4SHBP9XKUmyYPx3PpEZcxiJZNXoUO1ZokTps0/Q
-+BSoQ+9SPIIzxEzr0BNijtY/x6TJV5M9J1ePWuK1Vu0mhTs3FPE+/wXzxZG94ZQLg
-+pX9hkkXmvRIe7dg3XZDUtKglH2p4c22vX7UP4qyqpPWFWKw1lCYt9K7QOVAdEfCI
-+TlpZh6MQPZIk0FUAWOxDeRTAJk/Pe0I7wf+L1hwxi1y4JfgebNXynp46T6v/I5Wm
-+UApdTw==
- -----END CERTIFICATE-----
-diff --git a/tests/certs/tsa-serial b/tests/certs/tsa-serial
-new file mode 100644
-index 0000000..15afeb2
---- /dev/null
-+++ b/tests/certs/tsa-serial
-@@ -0,0 +1 @@
-+ba458168626824fa059d68686df0f1eb
-diff --git a/tests/certs/.gitignore b/tests/conf/.gitignore
-similarity index 100%
-rename from tests/certs/.gitignore
-rename to tests/conf/.gitignore
-diff --git a/tests/conf/makecerts.sh b/tests/conf/makecerts.sh
-index abf51c2..b27ee83 100755
---- a/tests/conf/makecerts.sh
-+++ b/tests/conf/makecerts.sh
-@@ -1,4 +1,4 @@
--#!/bin/sh
-+#!/bin/bash
- 
- result=0
- 
-@@ -18,7 +18,6 @@ make_certs() {
-   script_path=$(pwd)
-   cd "${result_path}"
-   mkdir "tmp/"
--  rm -rf "../certs"
- 
- # OpenSSL settings
-   CONF="${script_path}/openssl_intermediate.cnf"
-@@ -34,7 +33,7 @@ make_certs() {
-   touch "CA/index.txt"
-   echo -n "unique_subject = no" > "CA/index.txt.attr"
-   $OPENSSL rand -hex 16 > "CA/serial"
--  $OPENSSL rand -hex 16 > "tsa-serial"
-+  $OPENSSL rand -hex 16 > "tmp/tsa-serial"
-   echo 1001 > "CA/crlnumber"
-   date > "makecerts.log"
-   "$OPENSSL" version 2>> "makecerts.log" 1>&2
-@@ -175,7 +174,25 @@ make_certs() {
-       2>> "makecerts.log" 1>&2
-   test_result $?
- 
--  printf "\nConvert the certificate and the key into a PKCS#12 container\n" >> "makecerts.log"
-+  ssl_version=$("$OPENSSL" version)
-+  if test "${ssl_version:8:1}" -eq 3
-+  then
-+    printf "\nConvert the certificate and the key into legacy PKCS#12 container with\
-+ RC2-40-CBC private key and certificate encryption algorithm\n" >> "makecerts.log"
-+    "$OPENSSL" pkcs12 -export -in tmp/cert.pem -inkey tmp/key.pem -out tmp/legacy.p12 -passout pass:"$password" \
-+        -keypbe rc2-40-cbc -certpbe rc2-40-cbc -legacy \
-+        2>> "makecerts.log" 1>&2
-+  else
-+    printf "\nConvert the certificate and the key into legacy PKCS#12 container with\
-+ RC2-40-CBC private key and certificate encryption algorithm\n" >> "makecerts.log"
-+    "$OPENSSL" pkcs12 -export -in tmp/cert.pem -inkey tmp/key.pem -out tmp/legacy.p12 -passout pass:"$password" \
-+        -keypbe rc2-40-cbc -certpbe rc2-40-cbc \
-+        2>> "makecerts.log" 1>&2
-+  fi
-+  test_result $?
-+
-+  printf "\nConvert the certificate and the key into a PKCS#12 container with\
-+  AES-256-CBC private key and certificate encryption algorithm\n" >> "makecerts.log"
-   "$OPENSSL" pkcs12 -export -in tmp/cert.pem -inkey tmp/key.pem -out tmp/cert.p12 -passout pass:"$password" \
-       -keypbe aes-256-cbc -certpbe aes-256-cbc \
-       2>> "makecerts.log" 1>&2
-@@ -230,9 +247,9 @@ make_certs() {
-       -a -s tmp/key.pem -a -s tmp/keyp.pem -a -s tmp/key.der -a -s tmp/key.pvk \
-       -a -s tmp/cert.pem -a -s tmp/cert.p12 -a -s tmp/cert.der -a -s tmp/cert.spc \
-       -a -s tmp/crosscert.pem -a -s tmp/expired.pem -a -s tmp/revoked.pem -a -s tmp/revoked.spc \
--      -a -s tmp/TSA.pem -a -s tmp/TSA.key -a -s tmp/tsa-chain.pem
-+      -a -s tmp/TSA.pem -a -s tmp/TSA.key -a -s tmp/tsa-chain.pem -a -s tmp/legacy.p12
-   then
--    mkdir "../certs"
-+    mkdir -p "../certs"
-     cp tmp/* ../certs
-     printf "%s" "keys & certificates successfully generated"
-   else
-diff --git a/tests/conf/openssl_tsa_root.cnf b/tests/conf/openssl_tsa_root.cnf
-index e94c2ba..5c60373 100644
---- a/tests/conf/openssl_tsa_root.cnf
-+++ b/tests/conf/openssl_tsa_root.cnf
-@@ -27,6 +27,7 @@ policy                          = policy_match
- default_startdate               = 20180101000000Z
- default_enddate                 = 20280101000000Z
- unique_subject                  = no
-+email_in_dn                     = no
- x509_extensions                 = tsa_extensions
- 
- [ policy_match ]