Trust store release 2024.12.2 (#305)

Rolling trust store release at 2024-12-29T03:23:33+0000.
$ cfssl-trust -d ./cert.db  -b int release 504h
skipping expired certificate (SKI=54753e33d17d142e4b7009c4ac5d4ad1833978b5, serial=525178518808907770785895529438769300599943579850, subject='/HydrantID EV SSL ICA G1/C=US/O=HydrantID (Avalanche Cloud Corporation)')
skipping expired certificate (SKI=555886ceba7c764e9913a90fd36c9fc2f5d33ce3, serial=661403426321997810628405445095903074735765126237, subject='/QuoVadis EV SSL ICA G1/C=BM/O=QuoVadis Limited')
skipping expired certificate (SKI=900c7888bc92dd78a530146e0bf8b0718ad2dfb2, serial=18905430912667307197126229126126852399, subject='/Plex Devices High Assurance CA/C=US/O=Plex, Inc.')
skipping expired certificate (SKI=05a93fa6de09c5deb45de9f2d0f94efd3ee4b4dd, serial=9516147696426691250716881646298184375, subject='/iShare Medical Direct Intermediate CA/C=US/O=iShare Medical')
skipping expired certificate (SKI=32688eef55c5851961d2db09d07eae98912632bc, serial=7591409548479680349944926885979416803, subject='/Corepoint Direct Intermediate CA/C=US/O=Corepoint Health')
skipping expired certificate (SKI=375ce319e0b28ea1a84ed2cfabd0dce30b5c354d, serial=303091394957572412804966569547042708808, subject='/Yandex CA/C=RU/O=Yandex LLC/OU=Yandex Certification Authority')
1387 certificates rolled
6 certificates skipped
Successfully rolled new int release 2024.12.2
$ cfssl-trust -d ./cert.db  -b ca release 504h
351 certificates rolled
0 certificates skipped
Successfully rolled new ca release 2024.12.2
$ cfssl-trust -d ./cert.db  -r 2024.12.2 -b int bundle int-bundle.crt
selected release 2024.12.2
Selected 1387 certificates for this release.
$ cfssl-trust -d ./cert.db  -r 2024.12.2 -b ca bundle ca-bundle.crt
selected release 2024.12.2
Selected 351 certificates for this release.
$ certdump ca-bundle.crt  > certdata/ca-bundle.txt
$ certdump int-bundle.crt > certdata/int-bundle.txt
$ git status --porcelain -uno
M  cert.db
M  certdata/int-bundle.txt
M  int-bundle.crt

Co-authored-by: bowon <[email protected]>

certdata/int-bundle.txt

@@ -3555,99 +3555,6 @@ Details:
 	OCSP server:
 		- http://ocsp.camerfirma.com
 CERTIFICATE
-Subject: /HydrantID EV SSL ICA G1/C=US/O=HydrantID (Avalanche Cloud
-    Corporation)
-Issuer: /QuoVadis Root CA 2/C=BM/O=QuoVadis Limited
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-4096
-	Serial number: 525178518808907770785895529438769300599943579850
-	AKI: 1A:84:62:BC:48:4C:33:25:04:D4:EE:D0:F6:03:C4:19:46:D1:94:6B
-	SKI: 54:75:3E:33:D1:7D:14:2E:4B:70:09:C4:AC:5D:4A:D1:83:39:78:B5
-	Valid from: 2015-01-13T15:59:08+0000
-	     until: 2025-01-13T15:59:08+0000
-	Key usages: cert sign, crl sign
-	Extended usages: client auth, ocsp signing, server auth
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://trust.quovadisglobal.com/qvrca2.crt
-	OCSP server:
-		- http://ocsp.quovadisglobal.com
-CERTIFICATE
-Subject: /QuoVadis EV SSL ICA G1/C=BM/O=QuoVadis Limited
-Issuer: /QuoVadis Root CA 2/C=BM/O=QuoVadis Limited
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 661403426321997810628405445095903074735765126237
-	AKI: 1A:84:62:BC:48:4C:33:25:04:D4:EE:D0:F6:03:C4:19:46:D1:94:6B
-	SKI: 55:58:86:CE:BA:7C:76:4E:99:13:A9:0F:D3:6C:9F:C2:F5:D3:3C:E3
-	Valid from: 2015-01-13T16:42:15+0000
-	     until: 2025-01-13T16:42:15+0000
-	Key usages: cert sign, crl sign
-	Extended usages: client auth, ocsp signing, server auth
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://trust.quovadisglobal.com/qvrca2.crt
-	OCSP server:
-		- http://ocsp.quovadisglobal.com
-CERTIFICATE
-Subject: /Plex Devices High Assurance CA/C=US/O=Plex, Inc.
-Issuer: /DigiCert Assured ID Root CA/C=US/O=DigiCert Inc/OU=www.digicert.com
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 18905430912667307197126229126126852399
-	AKI: 45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F
-	SKI: 90:0C:78:88:BC:92:DD:78:A5:30:14:6E:0B:F8:B0:71:8A:D2:DF:B2
-	Valid from: 2015-01-14T12:00:00+0000
-	     until: 2025-01-14T12:00:00+0000
-	Key usages: cert sign, crl sign, digital signature
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
-	OCSP server:
-		- http://ocsp.digicert.com
-CERTIFICATE
-Subject: /iShare Medical Direct Intermediate CA/C=US/O=iShare Medical
-Issuer: /DigiCert Federated Trust CA/C=US/O=DigiCert Inc/OU=www.digicert.com
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 9516147696426691250716881646298184375
-	AKI: 46:08:38:5A:A9:8E:20:BB:0C:AF:5E:31:BA:89:B3:28:BF:AC:8C:36
-	SKI: 05:A9:3F:A6:DE:09:C5:DE:B4:5D:E9:F2:D0:F9:4E:FD:3E:E4:B4:DD
-	Valid from: 2015-01-14T12:00:00+0000
-	     until: 2025-01-14T12:00:00+0000
-	Key usages: cert sign, crl sign, digital signature
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://cacerts.digicert.com/aiaiShareMedicalDirectIntermediateCA.p7c
-	OCSP server:
-		- http://ocsp.digicert.com
-CERTIFICATE
-Subject: /Corepoint Direct Intermediate CA/C=US/O=Corepoint Health
-Issuer: /DigiCert Federated Trust CA/C=US/O=DigiCert Inc/OU=www.digicert.com
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 7591409548479680349944926885979416803
-	AKI: 46:08:38:5A:A9:8E:20:BB:0C:AF:5E:31:BA:89:B3:28:BF:AC:8C:36
-	SKI: 32:68:8E:EF:55:C5:85:19:61:D2:DB:09:D0:7E:AE:98:91:26:32:BC
-	Valid from: 2015-01-14T12:00:00+0000
-	     until: 2025-01-14T12:00:00+0000
-	Key usages: cert sign, crl sign, digital signature
-	Basic constraints: valid, is a CA certificate, max path length 0
-	SANs (0):
-	1 AIA:
-		http://cacerts.digicert.com/aiaCorepointDirectIntermediateCA.p7c
-	OCSP server:
-		- http://ocsp.digicert.com
-CERTIFICATE
 Subject: /Camerfirma Corporate Server II - 2015/C=ES/O=AC
     Camerfirma S.A./OU=AC CAMERFIRMA/L=Madrid (see current address at
     https://www.camerfirma.com/address)
@@ -3708,25 +3615,6 @@ Details:
 	OCSP server:
 		- http://ocsp.usertrust.com
 CERTIFICATE
-Subject: /Yandex CA/C=RU/O=Yandex LLC/OU=Yandex Certification Authority
-Issuer: /Certum Trusted Network CA/C=PL/O=Unizeto Technologies S.A./OU=Certum
-    Certification Authority
-	Signature algorithm: RSA / SHA256
-Details:
-	Public key: RSA-2048
-	Serial number: 303091394957572412804966569547042708808
-	AKI: 08:76:CD:CB:07:FF:24:F6:C5:CD:ED:BB:90:BC:E2:84:37:46:75:F7
-	SKI: 37:5C:E3:19:E0:B2:8E:A1:A8:4E:D2:CF:AB:D0:DC:E3:0B:5C:35:4D
-	Valid from: 2015-01-21T12:00:00+0000
-	     until: 2025-01-18T12:00:00+0000
-	Key usages: cert sign, crl sign
-	Basic constraints: valid, is a CA certificate
-	SANs (0):
-	1 AIA:
-		http://repository.certum.pl/ctnca.cer
-	OCSP server:
-		- http://subca.ocsp-certum.com
-CERTIFICATE
 Subject: /ACCVCA-120/C=ES/O=ACCV/OU=PKIACCV
 Issuer: /ACCVRAIZ1/C=ES/O=ACCV/OU=PKIACCV
 	Signature algorithm: RSA / SHA256

int-bundle.crt

@@ -6597,174 +6597,6 @@ GkRJwV+lyt3mSOkE1pRDqCyx14PnZdsBtHlw/KmqqRdONOjmkaxgcp+uvs/z4SJP
 n6GrY21iwU5qXxCaqaE4ysZEp8L0t9xGbbIB
 -----END CERTIFICATE-----
 -----BEGIN CERTIFICATE-----
-MIIG3DCCBMSgAwIBAgIUW/3RuxUtEGuqbW0X5zxWHw3ZyMowDQYJKoZIhvcNAQEL
-BQAwRTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZ
-BgNVBAMTElF1b1ZhZGlzIFJvb3QgQ0EgMjAeFw0xNTAxMTMxNTU5MDhaFw0yNTAx
-MTMxNTU5MDhaMGExCzAJBgNVBAYTAlVTMTAwLgYDVQQKEydIeWRyYW50SUQgKEF2
-YWxhbmNoZSBDbG91ZCBDb3Jwb3JhdGlvbikxIDAeBgNVBAMTF0h5ZHJhbnRJRCBF
-ViBTU0wgSUNBIEcxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApL5K
-RkgMCrBv8z4N///kNqqIN5GUBRzlh9w0KLy+FNmucRQWbXkEeIBXA3kvwY7fcCxr
-fM+ShAH6dmFermC3a9plJbHvbWV+yYVtbPDOUz5Wy1d7x4F46tYpUavTy0FknqV/
-pS3AopIGQjV8iBTms2kKeyhLeXbSOOapEbrnqPurUkP0tHPf9M/2WTpoV0dxcm/i
-m1dYxabkRGJLua5p2oDxNpWJS1vMQw94xAjBi2/z+znYZHpO7Ar2Gx31w1+ligGh
-cPnWr0a47mjbGhR5Y9acGkZ5FUnyjEK9IzTO1pFh9MwN4pnwLcpMDfjE8BW8M9XM
-807U/XA0HWMjG+2MxogRgmZWn2ikKfnZp2YPgZhdC07tc22LpT8Dr7Y4+9gZ8AoT
-Sjh0SO3QjVsvbo+2/ctKxdWvNfEOBPYUYfm7qo85foFGD3FQUGalLxeBeh/BTE70
-m0SDgHPkhfBrh8piD6Vc9WRLGxWmuxvJViWSPL6Nq9M2QYl6TvbP2DFga/j2ufyU
-R/wKfYFt3ZNJwwgYwNHhUK3fFEE7yQ+r14P83puIT9PmucapRo4QMasRDj8jORoy
-MR5C6y7b8lBjQ60FzoUVx6C0ysaJoWwRJhgE8LT+Uj9ALxpoZlLc8LvROjrtlKx/
-GjarbmaU3WOBt3JAP4Bt6Nv2DosvBNbPk66cFPcCAwEAAaOCAaYwggGiMBIGA1Ud
-EwEB/wQIMAYBAf8CAQAwZAYDVR0gBF0wWzAOBgwrBgEEAb5YAAJkAQIwSQYMKwYB
-BAG+WAADhwQAMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly93d3cuaHlkcmFudGlkLmNv
-bS9zdXBwb3J0L3JlcG9zaXRvcnkwcgYIKwYBBQUHAQEEZjBkMCoGCCsGAQUFBzAB
-hh5odHRwOi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20wNgYIKwYBBQUHMAKGKmh0
-dHA6Ly90cnVzdC5xdW92YWRpc2dsb2JhbC5jb20vcXZyY2EyLmNydDAOBgNVHQ8B
-Af8EBAMCAQYwJwYDVR0lBCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcD
-CTAfBgNVHSMEGDAWgBQahGK8SEwzJQTU7tD2A8QZRtGUazA5BgNVHR8EMjAwMC6g
-LKAqhihodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnJjYTIuY3JsMB0G
-A1UdDgQWBBRUdT4z0X0ULktwCcSsXUrRgzl4tTANBgkqhkiG9w0BAQsFAAOCAgEA
-PSf0qJCZCmDLnDoYXdEZTl7z3RPK6CP9xCoohkk8Shv/CW9LEXt5YOH4ql2M2nu1
-wx7zkVPjM5dl1Y0ilmjzA7lwKjHSVh5W8ACGBheI2wGkwLcnxJ9I/sRzD6o8v7qi
-MhDYWjNPkDnyy3ZMwrNvMy33HnkARpeRzzXzHkRTJAmKGM82M1k4FOjpGb7v8vV4
-mCxeZcu3Bb8frPTueUHYa6CYLhyAbSCIjm2YSKEM1rJUrzQdjiYd3aOK7qd31Z8E
-s3GX9LnId0VbHu//QFGdt9Y4hvsZzaYMM3n82iVZ7GeXDe9ppAxAMHyvlHkmFpNM
-MUcyuDWV10JZpME6xgiz1D23USrHCYG+s7wyPYrpYtTZ3evF4dpeMnfA2Wgv21DN
-0xbePknVTp+9mhWAcxeRCphXgxnovpES/UdBfRqXbtBIVmvQRGgSEUseQvtu+kel
-FQA5XQehsCvzHGizmcsbQzct0t26cBxATfnF1jYBNOFQUQZBNurTBAOhvgmaPjdv
-qM9MaEGXmfu3MGMFrPUiOAvQ2GWGnJCIl1vmotQbAKRa2hG8GMrzLArfpErY4m+2
-UkYD7pwq2VSRRNlLijtNPBLt+cUmIi/z27AOSmAibAL7g2xOKa6/36QLWgGYYDPq
-1hzkH+EQznExD490UvdMnQqyccFG9tssS7N4aA5ckX8=
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
-MIIFeTCCA2GgAwIBAgIUc9pa+iPZP7qELgog9AHJ2G4k/F0wDQYJKoZIhvcNAQEL
-BQAwRTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxGzAZ
-BgNVBAMTElF1b1ZhZGlzIFJvb3QgQ0EgMjAeFw0xNTAxMTMxNjQyMTVaFw0yNTAx
-MTMxNjQyMTVaMEkxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBMaW1p
-dGVkMR8wHQYDVQQDExZRdW9WYWRpcyBFViBTU0wgSUNBIEcxMIIBIjANBgkqhkiG
-9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws73Q2pp5IiTIXZiGAXAtvH/EEkhGTK3NytG
-LsznSUkfe3GYyQ1TFuYmrw/ZWcDRzjp/b5PrSLMG0noHgPWw71BifhOjaFraoEVr
-pIC5lzYi0epvBBXL3HW/SERp99HvCDH/3m686anfUxAxBsqIgHAd0cLkkb3MKd0/
-CnYt8+AKd/mhO2ru0u4gzZf3i/71LHzSAeZZl6cuhWJ0qzuUaXhChTB0zzyTe6n6
-ml5zcGi+y6U7euToSCku+ymDBEMOzdxPeUmPaBDD2O2KrqvGTg8jHllSjIhmfOmY
-RpfXlZ7dzfqvkB6qvZfVFb/H2k/PdsnNMAYd0AQCAItAAPy3YwIDAQABo4IBWzCC
-AVcwEgYDVR0TAQH/BAgwBgEB/wIBADAZBgNVHSAEEjAQMA4GDCsGAQQBvlgAAmQB
-AjByBggrBgEFBQcBAQRmMGQwKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3NwLnF1b3Zh
-ZGlzZ2xvYmFsLmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL3RydXN0LnF1b3ZhZGlz
-Z2xvYmFsLmNvbS9xdnJjYTIuY3J0MA4GA1UdDwEB/wQEAwIBBjAnBgNVHSUEIDAe
-BggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwMJMB8GA1UdIwQYMBaAFBqEYrxI
-TDMlBNTu0PYDxBlG0ZRrMDkGA1UdHwQyMDAwLqAsoCqGKGh0dHA6Ly9jcmwucXVv
-dmFkaXNnbG9iYWwuY29tL3F2cmNhMi5jcmwwHQYDVR0OBBYEFFVYhs66fHZOmROp
-D9Nsn8L10zzjMA0GCSqGSIb3DQEBCwUAA4ICAQBLAcQz+wCq4P4IFsY11E+i0wAW
-ljwqQX84wCqx24XJtH2E5iY40glnkTltno77/+FKk64/8FSGh+HOHZ8/QW7z+3Gz
-s2RNCLHJ/f7oUk7eUrSzYK/4rLU/1vyBnujT2JQAhts+pkUghQYFjSNY7CoYIp+i
-zGGPJfKRgZJVe9c0Fx9Eb0tH6vOWbrcpIoEop4A2R8h8KeehLOdipQCZ67/Olgsa
-uvwgDas9hSICnlIKmCpbzFn6duAduLnd9nQ0SGVbI0Iil59Cs58H8BXPvvd6VcmA
-Fywmsi+0EtPPEWqFztl4yiRlQwaRPUu2L/d8QGSqrrvB8+9Y8KoMVS7ky2wp7i5V
-VjNfRmdy7cRri8PpEigHnzEy0EqrXd77QTio7QjvMW8FBNXVZ0bVq4YJFIkK7HT4
-Aq6rkin7oRMQWXNS+wHV15P+MKl0x2b5LMY1wASSkklaQKSkrp1sR/l0tnFWtxHZ
-OUKBHeWRPmCuv59UkTZXA/LT/tHt2JC6htu2pYislARuJGsnq4Bgrw76c0AS3UF8
-80dYnDtu1CObhU3bjALGJ9Z/V17sj6ZCKNVe8/iZScP8zCNsj27woqVnogLDT5o0
-0f6O8NHSMl1HIys7SH5oieJj1dfoUbCXFQPqKYQMugUU3aokoEpqaxFUd7moXFeY
-wxZChJIYvI+fVDAKwQ==
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
-MIIEpTCCA42gAwIBAgIQDjkNtX5nFpWSZN5Q8+1ZLzANBgkqhkiG9w0BAQsFADBl
-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv
-b3QgQ0EwHhcNMTUwMTE0MTIwMDAwWhcNMjUwMTE0MTIwMDAwWjBLMQswCQYDVQQG
-EwJVUzETMBEGA1UEChMKUGxleCwgSW5jLjEnMCUGA1UEAxMeUGxleCBEZXZpY2Vz
-IEhpZ2ggQXNzdXJhbmNlIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
-AQEA7NMwVj+h8TNM+8WjM3Jl/afAo3M4eUEU0L07WmaRv/blwhk74Zb5yNFmAydm
-gli/PflW/9XBkv4lomRoqSxKdcHik8ouL6EufKQHNR4/X+u7xGAZMXopk6mNrBY4
-sIv0Vl6IzZpgsit1bjgsA+MwnOFIfubIdmIk1XsKzMIUsPmHp8RZ+viLcv35xHlL
-QtW7KdCSTgp01tBKVQ6kWTl52IkUMPpqMkVzJwz0Wv2KbWXZA48zvx7NInDryfhq
-GjsLTrrVzUWVKTcGUQ8rCSY4xOQZf0A16Ud9XV7fZuIAWOKOVjf2b1pI/2E3GLoB
-+Xp5Plwt5/A39qu1TA0eTE6VWwIDAQABo4IBaTCCAWUwEgYDVR0TAQH/BAgwBgEB
-/wIBADAOBgNVHQ8BAf8EBAMCAYYweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUFBzAB
-hhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6Ly9j
-YWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcnQw
-RQYDVR0fBD4wPDA6oDigNoY0aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lD
-ZXJ0QXNzdXJlZElEUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggr
-BgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQU
-kAx4iLyS3XilMBRuC/iwcYrS37IwHwYDVR0jBBgwFoAUReuir/SSy4IxLVGLp6ch
-nfNtyA8wDQYJKoZIhvcNAQELBQADggEBADV+vBbYWYpsPuuUahgimDejeQR1xg/J
-bcL4lplAk0qaE+Wx4arizJ7VPUIxXGL67N8/WJAjnNQq8dt6uyJ/AVBtzkenX9IQ
-yUdZsDe6yawNHMyBL8e6FVM6vh48iOQ+4HDz+S7z/tGS8Q8qiurn4beccta5ZNfZ
-KzsDNYCz+TanY98mr+gg2J0asCrNB9TOTLkUD+w99+YhS7xRaIRQpewQuvv8LFGd
-VtzF3K53v3lzlU14BIafcslJCbyjupEKMeBBG3aPX9bTrKB3vn7KNsnFXwWD5Piq
-t+aM4WaqGT7xkTLgbAcMun/wgTGR3mmna80xw00XHlmUIIR7pGowjCY=
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
-MIIGFDCCBPygAwIBAgIQByi+Ti0jUE+0S7bX7SG6tzANBgkqhkiG9w0BAQsFADBl
-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBGZWRlcmF0ZWQgVHJ1
-c3QgQ0EwHhcNMTUwMTE0MTIwMDAwWhcNMjUwMTE0MTIwMDAwWjBWMQswCQYDVQQG
-EwJVUzEXMBUGA1UEChMOaVNoYXJlIE1lZGljYWwxLjAsBgNVBAMTJWlTaGFyZSBN
-ZWRpY2FsIERpcmVjdCBJbnRlcm1lZGlhdGUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA
-A4IBDwAwggEKAoIBAQDGvBXvfgn/DclcZ/om8G+i1EHtngg3phC+HGWRVuwEXHFL
-iKjY500mMplZ28coyRgaY1xmpmHs3UVCB+C2UyD35GSbz7Nwia5yd0xTLSQssGid
-EPoSXChSCiQsRsrf+IqHDFB1TOmAoPS90Si/PNwIUCgFcql1kmKJflLYg7h0pYKR
-c56aVp79vJUvD0QJJa/LpIY3fN3iOdPPFKStr8Y6qPS0Qp4egRXHJUtWp3NdEQhR
-7ubPybP8QoBxNKlvZKTeFo3spPgricHpCRwuU2SlIfc2NE+eLh2iZ0A3JA56UI84
-QcGLbznaT9ebPNQcK+xORI8oH4zkiIMHK4Mf3cadAgMBAAGjggLNMIICyTASBgNV
-HRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBhjCBhgYIKwYBBQUHAQEEejB4
-MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUAYIKwYBBQUH
-MAKGRGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9haWFpU2hhcmVNZWRpY2Fs
-RGlyZWN0SW50ZXJtZWRpYXRlQ0EucDdjMIGDBgNVHR8EfDB6MDugOaA3hjVodHRw
-Oi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRGZWRlcmF0ZWRUcnVzdENBLmNy
-bDA7oDmgN4Y1aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0RmVkZXJh
-dGVkVHJ1c3RDQS5jcmwwggFSBgNVHSAEggFJMIIBRTA4BgpghkgBhv1sAAIEMCow
-KAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDAYKYIZI
-AYb9bAQBATAMBgpghkgBhv1sBAECMAsGCWCGSAGG/WwEAjAMBgpghkgBhv1sBAMC
-MAwGCmCGSAGG/WwEBAIwDgYMYIZIAYb5WwOKIQABMAwGCisGAQQBgsFbAAEwDAYK
-KwYBBAGCwVsBATAMBgorBgEEAYLBWwECMAwGCisGAQQBgsFbAQMwDAYKKwYBBAGC
-wVsBBDAMBgorBgEEAYLBWwIBMAwGCisGAQQBgsFbAgIwDAYKKwYBBAGCwVsCAzAM
-BgorBgEEAYLBWwIEMAwGCisGAQQBgsFbAwEwDAYKKwYBBAGCwVsDAjAMBgorBgEE
-AYLBWwMDMAwGCisGAQQBgsFbAwQwHQYDVR0OBBYEFAWpP6beCcXetF3p8tD5Tv0+
-5LTdMB8GA1UdIwQYMBaAFEYIOFqpjiC7DK9eMbqJsyi/rIw2MA0GCSqGSIb3DQEB
-CwUAA4IBAQCq0FSvD1dPaM2XphtBEPXh0j8Rln0lxhq1OnO4SdRlux00/9D7Utt4
-KPH1MgtbcwCMcnCVtGMa6SqkF9jJhOCPl+4saJV0Ls62qxktPHum2hRQEi981VvK
-PR5T8pxY0FTQw20kwOd6usdmsuyWQjNfVaxbyoGWg/6/qcx0doXIiSzF0xRpvkDU
-x6CqNImGOpFqo7hNy2c5Z1Z4R09bkC4HOKAUkwU86dE+RWkKZOFOOZTNfpzTLDop
-QMuIxdoyn8FNmWjH474hJYu2nseSKVb+c8hqolws6XbsXh2bDJ6suegSniByWcKe
-4mYN2rbMRIWhXSZu0KSiChd1b8COlU0u
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
-MIIGDTCCBPWgAwIBAgIQBbYNY1VEU0J4skpIvNjo4zANBgkqhkiG9w0BAQsFADBl
-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
-d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBGZWRlcmF0ZWQgVHJ1
-c3QgQ0EwHhcNMTUwMTE0MTIwMDAwWhcNMjUwMTE0MTIwMDAwWjBTMQswCQYDVQQG
-EwJVUzEZMBcGA1UEChMQQ29yZXBvaW50IEhlYWx0aDEpMCcGA1UEAxMgQ29yZXBv
-aW50IERpcmVjdCBJbnRlcm1lZGlhdGUgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
-DwAwggEKAoIBAQDvY3ORvGtqvsBexikUiSbx/Pm3GCZso9wAmOhhdqBuzLQM+dgc
-/jA7Ddc0Ml7hoSk3kLW2HHX7e2YmIcGJibc9JVowFgpAD51qpx9R2sTrn1nup8lB
-Y357UYwj6IfJ8Cl/FDQgIUnCGNo3Avs+3UIPlLatRNoO6t4iZ+30vlGBJDEXHMZD
-ngPPhdbxb1TQY2VwkFQfkq9H1s0qYb5kDMAgZqovMS3UuDkpxEgj4YHnIwLE1Rhq
-Gb2+4gStFhtML7sxB/hmQsYPrTzYMdKDWi+PuiE0P8v4Z2lpXGzI3ozVG2sdC5jj
-n1fY6YsGAJ7j3tEvafH9YeXsFI/1VpVDqAyrAgMBAAGjggLJMIICxTASBgNVHRMB
-Af8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBhjCBggYIKwYBBQUHAQEEdjB0MCQG
-CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTAYIKwYBBQUHMAKG
-QGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9haWFDb3JlcG9pbnREaXJlY3RJ
-bnRlcm1lZGlhdGVDQS5wN2MwgYMGA1UdHwR8MHowO6A5oDeGNWh0dHA6Ly9jcmw0
-LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEZlZGVyYXRlZFRydXN0Q0EuY3JsMDugOaA3
-hjVodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRGZWRlcmF0ZWRUcnVz
-dENBLmNybDCCAVIGA1UdIASCAUkwggFFMDgGCmCGSAGG/WwAAgQwKjAoBggrBgEF
-BQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAMBgpghkgBhv1sBAEB
-MAwGCmCGSAGG/WwEAQIwCwYJYIZIAYb9bAQCMAwGCmCGSAGG/WwEAwIwDAYKYIZI
-AYb9bAQEAjAOBgxghkgBhvlbA4ohAAEwDAYKKwYBBAGCwVsAATAMBgorBgEEAYLB
-WwEBMAwGCisGAQQBgsFbAQIwDAYKKwYBBAGCwVsBAzAMBgorBgEEAYLBWwEEMAwG
-CisGAQQBgsFbAgEwDAYKKwYBBAGCwVsCAjAMBgorBgEEAYLBWwIDMAwGCisGAQQB
-gsFbAgQwDAYKKwYBBAGCwVsDATAMBgorBgEEAYLBWwMCMAwGCisGAQQBgsFbAwMw
-DAYKKwYBBAGCwVsDBDAdBgNVHQ4EFgQUMmiO71XFhRlh0tsJ0H6umJEmMrwwHwYD
-VR0jBBgwFoAURgg4WqmOILsMr14xuomzKL+sjDYwDQYJKoZIhvcNAQELBQADggEB
-AJ/ud/LEpk0RxSObjaSR2y/m9GV6hMuHifre0BnhaPM3M+b6ZidGBhfclvy2NVU4
-j0eIm+tkPVCoXw1W/EROT7zNYoWpSQzXd2RBFtemLttfIH9gOHutTSb1IvHXN45l
-7nT5mFcUybq+I9vQQc63EM53ys6HmDgGDWfJMUY9xEw2bVGSsiGtiUAU1031jTov
-ciYfu95PlK1RmsKZuH6SKD58ddzIXlT/5BTEbvJ1wmdTlT6kebIMj55m3a6V5RnH
-fJAL16Y6kjbmBJvjAgnmMsDuFUqHtrJd8feMt/wqMl4uo8AkK7JFsIjnlFAxXokN
-pXd2aM1F6viEVAV9C9tHg8Q=
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
 MIIIkzCCBnugAwIBAgIIYh/zHEiboTYwDQYJKoZIhvcNAQELBQAwga4xCzAJBgNV
 BAYTAkVVMUMwQQYDVQQHEzpNYWRyaWQgKHNlZSBjdXJyZW50IGFkZHJlc3MgYXQg
 d3d3LmNhbWVyZmlybWEuY29tL2FkZHJlc3MpMRIwEAYDVQQFEwlBODI3NDMyODcx
@@ -6892,33 +6724,6 @@ M1sCcZrbFuoTxwy1tn1EpM9l7YjMCVQAP6NE79vC+nLURZbbIYSbosmdvAd/+PUz
 p2wmoFf+gA5JQwKaRcbkEMlsxXaxqwLOyv7YhHbEAW0DscFfuFTsb02wGps=
 -----END CERTIFICATE-----
 -----BEGIN CERTIFICATE-----
-MIIEqDCCA5CgAwIBAgIRAOQFR4MODGRSl296NUnA3UgwDQYJKoZIhvcNAQELBQAw
-fjELMAkGA1UEBhMCUEwxIjAgBgNVBAoTGVVuaXpldG8gVGVjaG5vbG9naWVzIFMu
-QS4xJzAlBgNVBAsTHkNlcnR1bSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEiMCAG
-A1UEAxMZQ2VydHVtIFRydXN0ZWQgTmV0d29yayBDQTAeFw0xNTAxMjExMjAwMDBa
-Fw0yNTAxMTgxMjAwMDBaMF8xCzAJBgNVBAYTAlJVMRMwEQYDVQQKEwpZYW5kZXgg
-TExDMScwJQYDVQQLEx5ZYW5kZXggQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxEjAQ
-BgNVBAMTCVlhbmRleCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
-AKYFJHZhuZ5CYCJjhVnlnYgN3+8hZFomlHE6pH8rU8Ose7qVQm1qW9Z+eAxnQJgv
-ai3Qtxg6fplgAeUnv/9J9c3EWMNM4XDV/QioeZV2HA4FQfq9gDgqh0/BZ0KqF6bu
-p4yO7y1/eh0FF49+O5I19WjtkwNVI09LogCGZZEP6/Y81dttDu3ofDrIurdTwaTY
-QALltaLKv9qclA38xRwqWYhiV5MuEfA4LHqBKvIlFRc1cCxL9yNMgu8zn8KaC6Pi
-XWs4d/lgM88ue1a3E5MfNJdxmXYCRjUUfNzKSIoKckt4bYI0lhNFzwIvUBM5Q4nA
-4XTXKHEh5aqXDu5G7JP3I30CAwEAAaOCAT4wggE6MA8GA1UdEwEB/wQFMAMBAf8w
-HQYDVR0OBBYEFDdc4xngso6hqE7Sz6vQ3OMLXDVNMB8GA1UdIwQYMBaAFAh2zcsH
-/yT2xc3tu5C84oQ3RnX3MA4GA1UdDwEB/wQEAwIBBjAvBgNVHR8EKDAmMCSgIqAg
-hh5odHRwOi8vY3JsLmNlcnR1bS5wbC9jdG5jYS5jcmwwawYIKwYBBQUHAQEEXzBd
-MCgGCCsGAQUFBzABhhxodHRwOi8vc3ViY2Eub2NzcC1jZXJ0dW0uY29tMDEGCCsG
-AQUFBzAChiVodHRwOi8vcmVwb3NpdG9yeS5jZXJ0dW0ucGwvY3RuY2EuY2VyMDkG
-A1UdIAQyMDAwLgYEVR0gADAmMCQGCCsGAQUFBwIBFhhodHRwOi8vd3d3LmNlcnR1
-bS5wbC9DUFMwDQYJKoZIhvcNAQELBQADggEBAAJejnvgZqHGq4sYHw65xM1x20Rc
-A31l6rhHtR7OJHCgf9PfZkuMkOKl7ZuUNrSovvB0jCaSdZ1WUJ6t0Bqg36QUVhB1
-k3rB9FOgdnQscrq10cni3EaGPx32M4dZ7JzcLR5NQxrOutmHfuJHRXI9KAPJCk3g
-V6Nebn7MWsjEeAFXaHo4O1M255Jtiiwv14u2NKjRtvheO6vtpY85b0Wty2PtamTJ
-EKcDCBJTsRyvyvdT/NgpSxv7OM3AY/9f5LmNXqor0sMiNTH2MA5TMvSTxUPLyPAV
-Vo8AGYfKeCKNoC7bL6DDfildkSWEHR05qxvF1pH+aQ5GgLxFezVTKt8Atnc=
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
 MIIHkjCCBXqgAwIBAgIIQfac0r2AwLcwDQYJKoZIhvcNAQELBQAwQjESMBAGA1UE
 AwwJQUNDVlJBSVoxMRAwDgYDVQQLDAdQS0lBQ0NWMQ0wCwYDVQQKDARBQ0NWMQsw
 CQYDVQQGEwJFUzAeFw0xNTAxMjcxNDA2NDJaFw0yNjEyMzEyMzU5MDBaMEMxEzAR