dn: O=Test Certificates 2011,C=US objectClass: organization o: Test Certificates 2011 dn: CN=Trust Anchor,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Trust Anchor objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/TrustAnchorRootCertificate.crt certificateRevocationList;binary:< file:///tmp/crls/TrustAnchorRootCRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/GoodCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/BadSignedCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/BadnotBeforeDateCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/BadnotAfterDateCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/NameOrderingCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/UIDCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/RFC3280MandatoryAttributeTypesCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/RFC3280OptionalAttributeTypesCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/UTF8StringEncodedNamesCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/RolloverfromPrintableStringtoUTF8StringCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/UTF8StringCaseInsensitiveMatchCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/NoCRLCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/BadCRLSignatureCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/BadCRLIssuerNameCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/WrongCRLCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/TwoCRLsCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/UnknownCRLEntryExtensionCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/UnknownCRLExtensionCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/OldCRLnextUpdateCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pre2000CRLnextUpdateCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/GeneralizedTimeCRLnextUpdateCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/NegativeSerialNumberCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/LongSerialNumberCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/SeparateCertificateandCRLKeysCertificateSigningCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/SeparateCertificateandCRLKeysCA2CertificateSigningCACertreversecrossCerificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/BasicSelfIssuedNewKeyCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/BasicSelfIssuedOldKeyCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/BasicSelfIssuedCRLSigningKeyCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/MissingbasicConstraintsCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/basicConstraintsCriticalcAFalseCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/basicConstraintsNotCriticalcAFalseCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/basicConstraintsNotCriticalCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint0CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint1CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/keyUsageCriticalkeyCertSignFalseCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/keyUsageNotCriticalkeyCertSignFalseCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/keyUsageNotCriticalCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/keyUsageCriticalcRLSignFalseCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/keyUsageNotCriticalcRLSignFalseCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/NoPoliciesCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP1234CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP123CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP12CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/anyPolicyCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP3CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy10CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy5CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy4CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy0CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy7CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy2CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/Mapping1to2CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/P12Mapping1to3CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/P1Mapping1to234CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/MappingFromanyPolicyCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/MappingToanyPolicyCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PanyPolicyMapping1to2CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/P1anyPolicyMapping1to2CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping0CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P12CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping5CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P1CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy0CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy1CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy5CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN1CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN2CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN3CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN4CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN5CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsRFC822CA1CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsRFC822CA2CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsRFC822CA3CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDNS1CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDNS2CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsURI1CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsURI2CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/distributionPoint1CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/distributionPoint2CACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/NoissuingDistributionPointCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/onlyContainsUserCertsCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/onlyContainsCACertsCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/onlyContainsAttributeCertsCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/onlySomeReasonsCA1CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/onlySomeReasonsCA2CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/onlySomeReasonsCA3CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/onlySomeReasonsCA4CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/indirectCRLCA1CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/indirectCRLCA2CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/indirectCRLCA3CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/indirectCRLCA4CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/indirectCRLCA5CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/indirectCRLCA6CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/deltaCRLIndicatorNoBaseCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/deltaCRLCA1CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/deltaCRLCA2CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/deltaCRLCA3CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/DSACACertreversecrossCertificatePair.cp dn: CN=Good CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Good CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/GoodCACert.crt certificateRevocationList;binary:< file:///tmp/crls/GoodCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/GoodCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/RevokedsubCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP2subCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/GoodsubCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP2subCA2CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/GoodsubCAPanyPolicyMapping1to2CACertreversecrossCertificatePair.cp dn: CN=Valid EE Certificate Test1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid EE Certificate Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidCertificatePathTest1EE.crt dn: CN=Bad Signed CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Bad Signed CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/BadSignedCACert.crt certificateRevocationList;binary:< file:///tmp/crls/BadSignedCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/BadSignedCACertforwardcrossCertificatePair.cp dn: CN=Invalid CA Signature Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid CA Signature Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidCASignatureTest2EE.crt dn: CN=Invalid EE Signature Test3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid EE Signature Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidEESignatureTest3EE.crt dn: CN=Bad notBefore Date CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Bad notBefore Date CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/BadnotBeforeDateCACert.crt certificateRevocationList;binary:< file:///tmp/crls/BadnotBeforeDateCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/BadnotBeforeDateCACertforwardcrossCertificatePair.cp dn: CN=Invalid CA notBefore Date EE Certificate Test1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid CA notBefore Date EE Certificate Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidCAnotBeforeDateTest1EE.crt dn: CN=Invalid EE notBefore Date EE Certificate Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid EE notBefore Date EE Certificate Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidEEnotBeforeDateTest2EE.crt dn: CN=Valid pre2000 UTC notBefore Date EE Certificate Test3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid pre2000 UTC notBefore Date EE Certificate Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/Validpre2000UTCnotBeforeDateTest3EE.crt dn: CN=Valid GeneralizedTime notBefore Date EE Certificate Test4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid GeneralizedTime notBefore Date EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidGeneralizedTimenotBeforeDateTest4EE.crt dn: CN=Bad notAfter Date CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Bad notAfter Date CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/BadnotAfterDateCACert.crt certificateRevocationList;binary:< file:///tmp/crls/BadnotAfterDateCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/BadnotAfterDateCACertforwardcrossCertificatePair.cp dn: CN=Invalid CA notAfter Date EE Certificate Test5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid CA notAfter Date EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidCAnotAfterDateTest5EE.crt dn: CN=Invalid EE notAfter Date EE Certificate Test6,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid EE notAfter Date EE Certificate Test6 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidEEnotAfterDateTest6EE.crt dn: CN=Invalid pre2000 UTC EE notAfter Date EE Certificate Test7,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid pre2000 UTC EE notAfter Date EE Certificate Test7 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/Invalidpre2000UTCEEnotAfterDateTest7EE.crt dn: CN=Valid GeneralizedTime notAfter Date EE Certificate Test8,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid GeneralizedTime notAfter Date EE Certificate Test8 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidGeneralizedTimenotAfterDateTest8EE.crt dn: CN=Good CA Root,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Good CA Root objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/GoodCACert.crt certificateRevocationList;binary:< file:///tmp/crls/GoodCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/GoodCACertforwardcrossCertificatePair.cp dn: CN=Invalid Name Chaining EE Certificate Test1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Name Chaining EE Certificate Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidNameChainingTest1EE.crt dn: OU=Organizational Unit Name 1,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: Organizational Unit Name 1 dn: OU=Organizational Unit Name 2,OU=Organizational Unit Name 1,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: Organizational Unit Name 2 dn: CN=Name Ordering CA,OU=Organizational Unit Name 2,OU=Organizational Unit Name 1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Name Ordering CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/NameOrderingCACert.crt certificateRevocationList;binary:< file:///tmp/crls/NameOrderCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/NameOrderingCACertforwardcrossCertificatePair.cp dn: OU=Organizational Unit Name 2,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: Organizational Unit Name 2 dn: OU=Organizational Unit Name 1,OU=Organizational Unit Name 2,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: Organizational Unit Name 1 dn: CN=Name Ordering CA,OU=Organizational Unit Name 1,OU=Organizational Unit Name 2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Name Ordering CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/NameOrderingCACert.crt certificateRevocationList;binary:< file:///tmp/crls/NameOrderCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/NameOrderingCACertforwardcrossCertificatePair.cp dn: CN=Invalid Name Chaining Order EE Certificate Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Name Chaining Order EE Certificate Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidNameChainingOrderTest2EE.crt dn: CN=Valid Name Chaining Whitespace EE Certificate Test3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Name Chaining Whitespace EE Certificate Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidNameChainingWhitespaceTest3EE.crt dn: CN=Valid Name Chaining Whitespace EE Certificate Test4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Name Chaining Whitespace EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidNameChainingWhitespaceTest4EE.crt dn: CN=Valid Name Chaining Capitalization EE Certificate Test5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Name Chaining Capitalization EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidNameChainingCapitalizationTest5EE.crt dn: CN=UID CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: UID CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/UIDCACert.crt certificateRevocationList;binary:< file:///tmp/crls/UIDCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/UIDCACertforwardcrossCertificatePair.cp dn: CN=Valid UIDs EE Certificate Test6,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid UIDs EE Certificate Test6 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidNameUIDsTest6EE.crt # gov, Test Certificates 2011, US dn: dc=gov,O=Test Certificates 2011,c=US objectClass: domain dc: gov # testcertificates, gov, Test Certificates 2011, US dn: dc=testcertificates,dc=gov,O=Test Certificates 2011,c=US objectClass: domain dc: testcertificates # Maryland, testcertificates, gov, Test Certificates 2011, US dn: st=Maryland,dc=testcertificates,dc=gov,O=Test Certificates 2011,c=US objectClass: locality st: Maryland # 345, Maryland, testcertificates, gov, Test Certificates 2011, US dn: serialNumber=345,st=Maryland,dc=testcertificates,dc=gov,o=Test Certificates 2011,c=US objectClass: device cn: CA 345 serialNumber: 345 dn: dnQualifier=CA,serialNumber=345,st=Maryland,dc=testcertificates,dc=gov,O=Test Certificates 2011,c=US objectClass: domain objectClass: entrustDNQualifierUser objectClass: pkiCA dnQualifier: CA dc: testcertificates cACertificate;binary:< file:///tmp/certs/RFC3280MandatoryAttributeTypesCACert.crt certificateRevocationList;binary:< file:///tmp/crls/RFC3280MandatoryAttributeTypesCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/RFC3280MandatoryAttributeTypesCACertforwardcrossCertificatePair.cp dn: cn=Valid RFC3280 Mandatory Attribute Types EE Certificate Test7,O=Test Certificates 2011,c=US objectClass: organizationalRole cn: Valid RFC3280 Mandatory Attribute Types EE Certificate Test7 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidRFC3280MandatoryAttributeTypesTest7EE.crt # Gaithersburg, Test Certificates 2011, US dn: localityName=Gaithersburg,O=Test Certificates 2011,c=US objectClass: domain dc: testcertificates localityName: Gaithersburg # John, Gaithersburg, Test Certificates 2011, US dn: givenName=John,localityName=Gaithersburg,O=Test Certificates 2011,c=US objectClass: inetOrgPerson cn: John sn: CA givenName: John # Q, John, Gaithersburg, Test Certificates 2011, US dn: initials=Q,givenName=John,localityName=Gaithersburg,O=Test Certificates 2011,c=US objectClass: inetOrgPerson cn: John sn: CA initials: Q # Fictitious, Q, John, Gaithersburg, Test Certificates 2011, US dn: pseudonym=Fictitious,initials=Q,givenName=John,localityName=Gaithersburg,O=Test Certificates 2011,c=US objectClass: person objectClass: naturalPerson cn: John sn: CA pseudonym: Fictitious # CA, Fictitious, Q, John, Gaithersburg, Test Certificates 2011, US dn: sn=CA,pseudonym=Fictitious,initials=Q,givenName=John,localityName=Gaithersburg,O=Test Certificates 2011,c=US objectClass: person cn: John sn: CA # III, CA, Fictitious, Q, John, Gaithersburg, Test Certificates 2011, US dn: generationQualifier=III,sn=CA,pseudonym=Fictitious,initials=Q,givenName=John,localityName=Gaithersburg,O=Test Certificates 2011,c=US objectClass: person objectClass: entrustNamedObject cn: John sn: CA generationQualifier: III dn: title=M.D.,generationQualifier=III,sn=CA,2.5.4.65=Fictitious,initials=Q,givenName=John,l=Gaithersburg,O=Test Certificates 2011,c=US objectClass: organizationalPerson objectClass: pkiCA title: M.D. cn: John Q. CA sn: CA cACertificate;binary:< file:///tmp/certs/RFC3280OptionalAttributeTypesCACert.crt certificateRevocationList;binary:< file:///tmp/crls/RFC3280OptionalAttributeTypesCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/RFC3280OptionalAttributeTypesCACertforwardcrossCertificatePair.cp dn: cn=Valid RFC3280 Optional Attribute Types EE Certificate Test8,O=Test Certificates 2011,c=US objectClass: organizationalRole cn: Valid RFC3280 Optional Attribute Types EE Certificate Test8 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidRFC3280OptionalAttributeTypesTest8EE.crt dn: cn=UTF8String CA,O=Test Certificates 2011,c=US objectClass: organizationalRole cn: UTF8String CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/UTF8StringEncodedNamesCACert.crt certificateRevocationList;binary:< file:///tmp/crls/UTF8StringEncodedNamesCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/UTF8StringEncodedNamesCACertforwardcrossCertificatePair.cp dn: cn=Valid UTF8String Encoded Names EE Certificate Test9,O=Test Certificates 2011,c=US objectClass: organizationalRole cn: Valid UTF8String Encoded Names EE Certificate Test9 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidUTF8StringEncodedNamesTest9EE.crt dn: cn=Rollover from PrintableString to UTF8String CA,O=Test Certificates 2011,c=US objectClass: organizationalRole cn: Rollover from PrintableString to UTF8String CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/RolloverfromPrintableStringtoUTF8StringCACert.crt certificateRevocationList;binary:< file:///tmp/crls/RolloverfromPrintableStringtoUTF8StringCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/RolloverfromPrintableStringtoUTF8StringCACertforwardcrossCertificatePair.cp dn: cn=Valid Rollover PrintableString to UTF8String EE Cert Test10,O=Test Certificates 2011,c=US objectClass: organizationalRole cn: Valid Rollover PrintableString to UTF8String EE Cert Test10 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidRolloverfromPrintableStringtoUTF8StringTest10EE.crt dn: cn=UTF8String Case Insensitive Match CA,O=Test Certificates 2011,c=US objectClass: organizationalRole cn: UTF8String Case Insensitive Match CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/UTF8StringCaseInsensitiveMatchCACert.crt certificateRevocationList;binary:< file:///tmp/crls/UTF8StringCaseInsensitiveMatchCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/UTF8StringCaseInsensitiveMatchCACertforwardcrossCertificatePair.cp dn: cn=Valid UTF8String Case Insensitive Match EE Certificate Test11,O=Test Certificates 2011,c=US objectClass: organizationalRole cn: Valid UTF8String Case Insensitive Match EE Certificate Test11 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidUTF8StringCaseInsensitiveMatchTest11EE.crt dn: CN=No CRL CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: No CRL CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/NoCRLCACert.crt crossCertificatePair;binary:< file:///tmp/certpairs/NoCRLCACertforwardcrossCertificatePair.cp dn: CN=Invalid Missing CRL EE Certificate Test1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Missing CRL EE Certificate Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidMissingCRLTest1EE.crt dn: CN=Revoked subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Revoked subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/RevokedsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/RevokedsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/RevokedsubCACertforwardcrossCertificatePair.cp dn: CN=Invalid Revoked CA Certificate Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Revoked CA Certificate Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidRevokedCATest2EE.crt dn: CN=Invalid Revoked EE Certificate Test3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Revoked EE Certificate Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidRevokedEETest3EE.crt dn: CN=Bad CRL Signature CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Bad CRL Signature CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/BadCRLSignatureCACert.crt certificateRevocationList;binary:< file:///tmp/crls/BadCRLSignatureCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/BadCRLSignatureCACertforwardcrossCertificatePair.cp dn: CN=Invalid Bad CRL Signature EE Certificate Test4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Bad CRL Signature EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidBadCRLSignatureTest4EE.crt dn: CN=Bad CRL Issuer Name CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Bad CRL Issuer Name CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/BadCRLIssuerNameCACert.crt certificateRevocationList;binary:< file:///tmp/crls/BadCRLIssuerNameCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/BadCRLIssuerNameCACertforwardcrossCertificatePair.cp dn: CN=Invalid Bad CRL Issuer Name EE Certificate Test5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Bad CRL Issuer Name EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidBadCRLIssuerNameTest5EE.crt dn: CN=Wrong CRL CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Wrong CRL CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/WrongCRLCACert.crt certificateRevocationList;binary:< file:///tmp/crls/WrongCRLCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/WrongCRLCACertforwardcrossCertificatePair.cp dn: CN=Invalid Wrong CRL EE Certificate Test6,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Wrong CRL EE Certificate Test6 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidWrongCRLTest6EE.crt dn: CN=Two CRLs CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Two CRLs CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/TwoCRLsCACert.crt certificateRevocationList;binary:< file:///tmp/crls/TwoCRLsCAGoodCRL.crl certificateRevocationList;binary:< file:///tmp/crls/TwoCRLsCABadCRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/TwoCRLsCACertforwardcrossCertificatePair.cp dn: CN=Valid Two CRLs EE Certificate Test7,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Two CRLs EE Certificate Test7 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidTwoCRLsTest7EE.crt dn: CN=Unknown CRL Entry Extension CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Unknown CRL Entry Extension CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/UnknownCRLEntryExtensionCACert.crt certificateRevocationList;binary:< file:///tmp/crls/UnknownCRLEntryExtensionCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/UnknownCRLEntryExtensionCACertforwardcrossCertificatePair.cp dn: CN=Invalid Unknown CRL Entry Extension EE Certificate Test8,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Unknown CRL Entry Extension EE Certificate Test8 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidUnknownCRLEntryExtensionTest8EE.crt dn: CN=Unknown CRL Extension CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Unknown CRL Extension CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/UnknownCRLExtensionCACert.crt certificateRevocationList;binary:< file:///tmp/crls/UnknownCRLExtensionCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/UnknownCRLExtensionCACertforwardcrossCertificatePair.cp dn: CN=Invalid Unknown CRL Extension EE Certificate Test9,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Unknown CRL Extension EE Certificate Test9 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidUnknownCRLExtensionTest9EE.crt dn: CN=Invalid Unknown CRL Extension EE Certificate Test10,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Unknown CRL Extension EE Certificate Test10 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidUnknownCRLExtensionTest10EE.crt dn: CN=Old CRL nextUpdate CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Old CRL nextUpdate CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/OldCRLnextUpdateCACert.crt certificateRevocationList;binary:< file:///tmp/crls/OldCRLnextUpdateCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/OldCRLnextUpdateCACertforwardcrossCertificatePair.cp dn: CN=Invalid Old CRL nextUpdate EE Certificate Test11,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Old CRL nextUpdate EE Certificate Test11 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidOldCRLnextUpdateTest11EE.crt dn: CN=pre2000 CRL nextUpdate CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pre2000 CRL nextUpdate CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pre2000CRLnextUpdateCACert.crt certificateRevocationList;binary:< file:///tmp/crls/pre2000CRLnextUpdateCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/pre2000CRLnextUpdateCACertforwardcrossCertificatePair.cp dn: CN=Invalid pre2000 CRL nextUpdate EE Certificate Test12,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid pre2000 CRL nextUpdate EE Certificate Test12 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/Invalidpre2000CRLnextUpdateTest12EE.crt dn: CN=GenerizedTime CRL nextUpdate CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: GenerizedTime CRL nextUpdate CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/GeneralizedTimeCRLnextUpdateCACert.crt certificateRevocationList;binary:< file:///tmp/crls/GeneralizedTimeCRLnextUpdateCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/GeneralizedTimeCRLnextUpdateCACertforwardcrossCertificatePair.cp dn: CN=Valid GeneralizedTime CRL nextUpdate EE Certificate Test13,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid GeneralizedTime CRL nextUpdate EE Certificate Test13 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidGeneralizedTimeCRLnextUpdateTest13EE.crt dn: CN=Negative Serial Number CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Negative Serial Number CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/NegativeSerialNumberCACert.crt certificateRevocationList;binary:< file:///tmp/crls/NegativeSerialNumberCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/NegativeSerialNumberCACertforwardcrossCertificatePair.cp dn: CN=Valid Negative Serial Number EE Certificate Test14,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Negative Serial Number EE Certificate Test14 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidNegativeSerialNumberTest14EE.crt dn: CN=Invalid Negative Serial Number EE Certificate Test15,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Negative Serial Number EE Certificate Test15 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidNegativeSerialNumberTest15EE.crt dn: CN=Long Serial Number CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Long Serial Number CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/LongSerialNumberCACert.crt certificateRevocationList;binary:< file:///tmp/crls/LongSerialNumberCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/LongSerialNumberCACertforwardcrossCertificatePair.cp dn: CN=Valid Long Serial Number EE Certificate Test16,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Long Serial Number EE Certificate Test16 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidLongSerialNumberTest16EE.crt dn: CN=Valid Long Serial Number EE Certificate Test17,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Long Serial Number EE Certificate Test17 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidLongSerialNumberTest17EE.crt dn: CN=Invalid Long Serial Number EE Certificate Test18,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Long Serial Number EE Certificate Test18 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidLongSerialNumberTest18EE.crt dn: CN=Separate Certificate and CRL Keys CA1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Separate Certificate and CRL Keys CA1 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/SeparateCertificateandCRLKeysCertificateSigningCACert.crt certificateRevocationList;binary:< file:///tmp/crls/SeparateCertificateandCRLKeysCRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/SeparateCertificateandCRLKeysCertificateSigningCACertforwardcrossCertificatePair.cp objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/SeparateCertificateandCRLKeysCRLSigningCert.crt dn: CN=Valid Separate Certificate and CRL Keys EE Certificate Test19,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Separate Certificate and CRL Keys EE Certificate Test19 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidSeparateCertificateandCRLKeysTest19EE.crt dn: CN=Invalid Separate Certificate and CRL Keys EE Certificate Test20,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Separate Certificate and CRL Keys EE Certificate Test20 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidSeparateCertificateandCRLKeysTest20EE.crt dn: CN=Separate Certificate and CRL Keys CA2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Separate Certificate and CRL Keys CA2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/SeparateCertificateandCRLKeysCA2CertificateSigningCACert.crt certificateRevocationList;binary:< file:///tmp/crls/SeparateCertificateandCRLKeysCA2CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/SeparateCertificateandCRLKeysCA2CertificateSigningCACertforwardcrossCerificatePair.cp objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/SeparateCertificateandCRLKeysCA2CRLSigningCert.crt dn: CN=Invalid Separate Certificate and CRL Keys EE Certificate Test21,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Separate Certificate and CRL Keys EE Certificate Test21 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidSeparateCertificateandCRLKeysTest21EE.crt dn: CN=Basic Self-Issued New Key CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Basic Self-Issued New Key CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/BasicSelfIssuedNewKeyCACert.crt certificateRevocationList;binary:< file:///tmp/crls/BasicSelfIssuedNewKeyCACRL.crl cACertificate;binary:< file:///tmp/certs/BasicSelfIssuedNewKeyOldWithNewCACert.crt crossCertificatePair;binary:< file:///tmp/certpairs/BasicSelfIssuedNewKeyCACertforwardcrossCertificatePair.cp dn: CN=Valid Basic Self-Issued Old With New EE Certificate Test1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Basic Self-Issued Old With New EE Certificate Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidBasicSelfIssuedOldWithNewTest1EE.crt dn: CN=Invalid Basic Self-Issued Old With New EE Certificate Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Basic Self-Issued Old With New EE Certificate Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidBasicSelfIssuedOldWithNewTest2EE.crt dn: CN=Basic Self-Issued Old Key CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Basic Self-Issued Old Key CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/BasicSelfIssuedOldKeyCACert.crt certificateRevocationList;binary:< file:///tmp/crls/BasicSelfIssuedOldKeyCACRL.crl cACertificate;binary:< file:///tmp/certs/BasicSelfIssuedOldKeyNewWithOldCACert.crt crossCertificatePair;binary:< file:///tmp/certpairs/BasicSelfIssuedOldKeyCACertforwardcrossCertificatePair.cp dn: CN=Self-Issued Cert DP for Basic Self-Issued Old Key CA,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: Self-Issued Cert DP for Basic Self-Issued Old Key CA certificateRevocationList;binary:< file:///tmp/crls/BasicSelfIssuedOldKeySelfIssuedCertCRL.crl dn: CN=Valid Basic Self-Issued New With Old EE Certificate Test3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Basic Self-Issued New With Old EE Certificate Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidBasicSelfIssuedNewWithOldTest3EE.crt dn: CN=Valid Basic Self-Issued New With Old EE Certificate Test4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Basic Self-Issued New With Old EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidBasicSelfIssuedNewWithOldTest4EE.crt dn: CN=Invalid Basic Self-Issued New With Old EE Certificate Test5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Basic Self-Issued New With Old EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidBasicSelfIssuedNewWithOldTest5EE.crt dn: CN=Basic Self-Issued CRL Signing Key CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Basic Self-Issued CRL Signing Key CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/BasicSelfIssuedCRLSigningKeyCACert.crt certificateRevocationList;binary:< file:///tmp/crls/BasicSelfIssuedCRLSigningKeyCACRL.crl objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/BasicSelfIssuedCRLSigningKeyCRLCert.crt crossCertificatePair;binary:< file:///tmp/certpairs/BasicSelfIssuedCRLSigningKeyCACertforwardcrossCertificatePair.cp dn: CN=Self-Issued Cert DP for Basic Self-Issued CRL Signing Key CA,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: Self-Issued Cert DP for Basic Self-Issued CRL Signing Key CA certificateRevocationList;binary:< file:///tmp/crls/BasicSelfIssuedCRLSigningKeyCRLCertCRL.crl dn: CN=Valid Basic Self-Issued CRL Signing Key EE Certificate Test6,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Basic Self-Issued CRL Signing Key EE Certificate Test6 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidBasicSelfIssuedCRLSigningKeyTest6EE.crt dn: CN=Invalid Basic Self-Issued CRL Signing Key EE Certificate Test7,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Basic Self-Issued CRL Signing Key EE Certificate Test7 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidBasicSelfIssuedCRLSigningKeyTest7EE.crt dn: CN=Invalid Basic Self-Issued CRL Signing Key EE Certificate Test8,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Basic Self-Issued CRL Signing Key EE Certificate Test8 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidBasicSelfIssuedCRLSigningKeyTest8EE.crt dn: CN=Missing basicConstraints CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Missing basicConstraints CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/MissingbasicConstraintsCACert.crt certificateRevocationList;binary:< file:///tmp/crls/MissingbasicConstraintsCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/MissingbasicConstraintsCACertforwardcrossCertificatePair.cp dn: CN=Invalid Missing basicConstraints EE Certificate Test1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Missing basicConstraints EE Certificate Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidMissingbasicConstraintsTest1EE.crt dn: CN=basicConstraints Critical cA False CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: basicConstraints Critical cA False CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/basicConstraintsCriticalcAFalseCACert.crt certificateRevocationList;binary:< file:///tmp/crls/basicConstraintsCriticalcAFalseCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/basicConstraintsCriticalcAFalseCACertforwardcrossCertificatePair.cp dn: CN=Invalid cA False EE Certificate Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid cA False EE Certificate Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidcAFalseTest2EE.crt dn: CN=basicConstraints Not Critical cA False CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: basicConstraints Not Critical cA False CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/basicConstraintsNotCriticalcAFalseCACert.crt certificateRevocationList;binary:< file:///tmp/crls/basicConstraintsNotCriticalcAFalseCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/basicConstraintsNotCriticalcAFalseCACertforwardcrossCertificatePair.cp dn: CN=Invalid cA False EE Certificate Test3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid cA False EE Certificate Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidcAFalseTest3EE.crt dn: CN=basicConstraints Not Critical CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: basicConstraints Not Critical CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/basicConstraintsNotCriticalCACert.crt certificateRevocationList;binary:< file:///tmp/crls/basicConstraintsNotCriticalCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/basicConstraintsNotCriticalCACertforwardcrossCertificatePair.cp dn: CN=Valid basicConstraints Not Critical EE Certificate Test4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid basicConstraints Not Critical EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidbasicConstraintsNotCriticalTest4EE.crt dn: CN=pathLenConstraint0 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pathLenConstraint0 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pathLenConstraint0CACert.crt certificateRevocationList;binary:< file:///tmp/crls/pathLenConstraint0CACRL.crl cACertificate;binary:< file:///tmp/certs/pathLenConstraint0SelfIssuedCACert.crt crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint0CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint0subCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/ValidpathLenConstraintTest8EEreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint0subCA2CertreversecrossCertificatePair.cp dn: CN=pathLenConstraint0 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pathLenConstraint0 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pathLenConstraint0subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/pathLenConstraint0subCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint0subCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/InvalidpathLenConstraintTest6EEreversecrossCertificatePair.cp dn: CN=Invalid pathLenConstraint EE Certificate Test5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid pathLenConstraint EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidpathLenConstraintTest5EE.crt dn: CN=Invalid pathLenConstraint EE Certificate Test6,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid pathLenConstraint EE Certificate Test6 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/InvalidpathLenConstraintTest6EE.crt crossCertificatePair;binary:< file:///tmp/certpairs/InvalidpathLenConstraintTest6EEforwardcrossCertificatePair.cp dn: CN=Valid pathLenConstraint EE Certificate Test7,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid pathLenConstraint EE Certificate Test7 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidpathLenConstraintTest7EE.crt dn: CN=Valid pathLenConstraint EE Certificate Test8,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid pathLenConstraint EE Certificate Test8 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/ValidpathLenConstraintTest8EE.crt crossCertificatePair;binary:< file:///tmp/certpairs/ValidpathLenConstraintTest8EEforwardcrossCertificatePair.cp dn: CN=pathLenConstraint6 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pathLenConstraint6 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pathLenConstraint6CACert.crt certificateRevocationList;binary:< file:///tmp/crls/pathLenConstraint6CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subCA0CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subCA1CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subCA4CertreversecrossCertificatePair.cp dn: CN=pathLenConstraint6 subCA0,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pathLenConstraint6 subCA0 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pathLenConstraint6subCA0Cert.crt certificateRevocationList;binary:< file:///tmp/crls/pathLenConstraint6subCA0CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subCA0CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subsubCA00CertreversecrossCertificatePair.cp dn: CN=pathLenConstraint6 subsubCA00,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pathLenConstraint6 subsubCA00 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pathLenConstraint6subsubCA00Cert.crt certificateRevocationList;binary:< file:///tmp/crls/pathLenConstraint6subsubCA00CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subsubCA00CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/InvalidpathLenConstraintTest10EEreversecrossCertificatePair.cp dn: CN=Invalid pathLenConstraint EE Certificate Test9,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid pathLenConstraint EE Certificate Test9 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidpathLenConstraintTest9EE.crt dn: CN=Invalid pathLenConstraint EE Certificate Test10,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid pathLenConstraint EE Certificate Test10 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/InvalidpathLenConstraintTest10EE.crt crossCertificatePair;binary:< file:///tmp/certpairs/InvalidpathLenConstraintTest10EEforwardcrossCertificatePair.cp dn: CN=pathLenConstraint6 subCA1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pathLenConstraint6 subCA1 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pathLenConstraint6subCA1Cert.crt certificateRevocationList;binary:< file:///tmp/crls/pathLenConstraint6subCA1CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subCA1CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subsubCA11CertreversecrossCertificatePair.cp dn: CN=pathLenConstraint6 subsubCA11,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pathLenConstraint6 subsubCA11 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pathLenConstraint6subsubCA11Cert.crt certificateRevocationList;binary:< file:///tmp/crls/pathLenConstraint6subsubCA11CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subsubCA11CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subsubsubCA11XCertreversecrossCertificatePair.cp dn: CN=pathLenConstraint6 subsubsubCA11X,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pathLenConstraint6 subsubsubCA11X objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pathLenConstraint6subsubsubCA11XCert.crt certificateRevocationList;binary:< file:///tmp/crls/pathLenConstraint6subsubsubCA11XCRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subsubsubCA11XCertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/InvalidpathLenConstraintTest12EEreversecrossCertificatePair.cp dn: CN=Invalid pathLenConstraint EE Certificate Test11,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid pathLenConstraint EE Certificate Test11 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidpathLenConstraintTest11EE.crt dn: CN=Invalid pathLenConstraint EE Certificate Test12,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid pathLenConstraint EE Certificate Test12 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/InvalidpathLenConstraintTest12EE.crt crossCertificatePair;binary:< file:///tmp/certpairs/InvalidpathLenConstraintTest12EEforwardcrossCertificatePair.cp dn: CN=pathLenConstraint6 subCA4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pathLenConstraint6 subCA4 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pathLenConstraint6subCA4Cert.crt certificateRevocationList;binary:< file:///tmp/crls/pathLenConstraint6subCA4CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subCA4CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subsubCA41CertreversecrossCertificatePair.cp dn: CN=pathLenConstraint6 subsubCA41,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pathLenConstraint6 subsubCA41 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pathLenConstraint6subsubCA41Cert.crt certificateRevocationList;binary:< file:///tmp/crls/pathLenConstraint6subsubCA41CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subsubCA41CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subsubsubCA41XCertreversecrossCertificatePair.cp dn: CN=pathLenConstraint6 subsubsubCA41X,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pathLenConstraint6 subsubsubCA41X objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pathLenConstraint6subsubsubCA41XCert.crt certificateRevocationList;binary:< file:///tmp/crls/pathLenConstraint6subsubsubCA41XCRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint6subsubsubCA41XCertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/ValidpathLenConstraintTest14EEreversecrossCertificatePair.cp dn: CN=Valid pathLenConstraint EE Certificate Test13,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid pathLenConstraint EE Certificate Test13 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidpathLenConstraintTest13EE.crt dn: CN=Valid pathLenConstraint EE Certificate Test14,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid pathLenConstraint EE Certificate Test14 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/ValidpathLenConstraintTest14EE.crt crossCertificatePair;binary:< file:///tmp/certpairs/ValidpathLenConstraintTest14EEforwardcrossCertificatePair.cp dn: CN=Valid Self-Issued pathLenConstraint EE Certificate Test15,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Self-Issued pathLenConstraint EE Certificate Test15 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidSelfIssuedpathLenConstraintTest15EE.crt dn: CN=pathLenConstraint0 subCA2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pathLenConstraint0 subCA2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pathLenConstraint0subCA2Cert.crt certificateRevocationList;binary:< file:///tmp/crls/pathLenConstraint0subCA2CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint0subCA2CertforwardcrossCertificatePair.cp dn: CN=Invalid Self-Issued pathLenConstraint EE Certificate Test16,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Self-Issued pathLenConstraint EE Certificate Test16 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidSelfIssuedpathLenConstraintTest16EE.crt dn: CN=pathLenConstraint1 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pathLenConstraint1 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pathLenConstraint1CACert.crt certificateRevocationList;binary:< file:///tmp/crls/pathLenConstraint1CACRL.crl cACertificate;binary:< file:///tmp/certs/pathLenConstraint1SelfIssuedCACert.crt crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint1CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint1subCACertreversecrossCertificatePair.cp dn: CN=pathLenConstraint1 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: pathLenConstraint1 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/pathLenConstraint1subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/pathLenConstraint1subCACRL.crl cACertificate;binary:< file:///tmp/certs/pathLenConstraint1SelfIssuedsubCACert.crt crossCertificatePair;binary:< file:///tmp/certpairs/pathLenConstraint1subCACertforwardcrossCertificatePair.cp dn: CN=Valid Self-Issued pathLenConstraint EE Certificate Test17,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Self-Issued pathLenConstraint EE Certificate Test17 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidSelfIssuedpathLenConstraintTest17EE.crt dn: CN=keyUsage Critical keyCertSign False CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: keyUsage Critical keyCertSign False CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/keyUsageCriticalkeyCertSignFalseCACert.crt certificateRevocationList;binary:< file:///tmp/crls/keyUsageCriticalkeyCertSignFalseCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/keyUsageCriticalkeyCertSignFalseCACertforwardcrossCertificatePair.cp dn: CN=Invalid keyUsage Critical keyCertSign False EE Certificate Test1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid keyUsage Critical keyCertSign False EE Certificate Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidkeyUsageCriticalkeyCertSignFalseTest1EE.crt dn: CN=keyUsage Not Critical keyCertSign False CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: keyUsage Not Critical keyCertSign False CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/keyUsageNotCriticalkeyCertSignFalseCACert.crt certificateRevocationList;binary:< file:///tmp/crls/keyUsageNotCriticalkeyCertSignFalseCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/keyUsageNotCriticalkeyCertSignFalseCACertforwardcrossCertificatePair.cp dn: CN=Invalid keyUsage Not Critical keyCertSign False EE Cert Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid keyUsage Not Critical keyCertSign False EE Cert Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidkeyUsageNotCriticalkeyCertSignFalseTest2EE.crt dn: CN=keyUsage Not Critical CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: keyUsage Not Critical CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/keyUsageNotCriticalCACert.crt certificateRevocationList;binary:< file:///tmp/crls/keyUsageNotCriticalCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/keyUsageNotCriticalCACertforwardcrossCertificatePair.cp dn: CN=Valid keyUsage Not Critical EE Certificate Test3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid keyUsage Not Critical EE Certificate Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidkeyUsageNotCriticalTest3EE.crt dn: CN=keyUsage Critical cRLSign False CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: keyUsage Critical cRLSign False CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/keyUsageCriticalcRLSignFalseCACert.crt certificateRevocationList;binary:< file:///tmp/crls/keyUsageCriticalcRLSignFalseCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/keyUsageCriticalcRLSignFalseCACertforwardcrossCertificatePair.cp dn: CN=Invalid keyUsage Critical cRLSign False EE Certificate Test4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid keyUsage Critical cRLSign False EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidkeyUsageCriticalcRLSignFalseTest4EE.crt dn: CN=keyUsage Not Critical cRLSign False CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: keyUsage Not Critical cRLSign False CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/keyUsageNotCriticalcRLSignFalseCACert.crt certificateRevocationList;binary:< file:///tmp/crls/keyUsageNotCriticalcRLSignFalseCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/keyUsageNotCriticalcRLSignFalseCACertforwardcrossCertificatePair.cp dn: CN=Invalid keyUsage Not Critical cRLSign False EE Certificate Test5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid keyUsage Not Critical cRLSign False EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidkeyUsageNotCriticalcRLSignFalseTest5EE.crt dn: CN=No Policies CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: No Policies CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/NoPoliciesCACert.crt certificateRevocationList;binary:< file:///tmp/crls/NoPoliciesCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/NoPoliciesCACertforwardcrossCertificatePair.cp dn: CN=All Certificates No Policies EE Certificate Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: All Certificates No Policies EE Certificate Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/AllCertificatesNoPoliciesTest2EE.crt dn: CN=Policies P2 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Policies P2 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PoliciesP2subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/PoliciesP2subCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP2subCACertforwardcrossCertificatePair.cp dn: CN=Different Policies EE Certificate Test3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Different Policies EE Certificate Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/DifferentPoliciesTest3EE.crt dn: CN=Good subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Good subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/GoodsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/GoodsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/GoodsubCACertforwardcrossCertificatePair.cp dn: CN=Different Policies EE Certificate Test4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Different Policies EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/DifferentPoliciesTest4EE.crt dn: CN=Policies P2 subCA2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Policies P2 subCA2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PoliciesP2subCA2Cert.crt certificateRevocationList;binary:< file:///tmp/crls/PoliciesP2subCA2CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP2subCA2CertforwardcrossCertificatePair.cp dn: CN=Different Policies EE Certificate Test5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Different Policies EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/DifferentPoliciesTest5EE.crt dn: CN=Policies P1234 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Policies P1234 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PoliciesP1234CACert.crt certificateRevocationList;binary:< file:///tmp/crls/PoliciesP1234CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP1234CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP1234subCAP123CertreversecrossCertificatePair.cp dn: CN=Policies P1234 subCAP123,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Policies P1234 subCAP123 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PoliciesP1234subCAP123Cert.crt certificateRevocationList;binary:< file:///tmp/crls/PoliciesP1234subCAP123CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP1234subCAP123CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP1234subsubCAP123P12CertreversecrossCertificatePair.cp dn: CN=Policies P1234 subsubCAP123P12,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Policies P1234 subsubCAP123P12 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PoliciesP1234subsubCAP123P12Cert.crt certificateRevocationList;binary:< file:///tmp/crls/PoliciesP1234subsubCAP123P12CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP1234subsubCAP123P12CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/OverlappingPoliciesTest6EEreversecrossCertificatePair.cp dn: CN=Overlapping Policies EE Certificate Test6,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Overlapping Policies EE Certificate Test6 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/OverlappingPoliciesTest6EE.crt crossCertificatePair;binary:< file:///tmp/certpairs/OverlappingPoliciesTest6EEforwardcrossCertificatePair.cp dn: CN=Policies P123 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Policies P123 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PoliciesP123CACert.crt certificateRevocationList;binary:< file:///tmp/crls/PoliciesP123CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP123CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP123subCAP12CertreversecrossCertificatePair.cp dn: CN=Policies P123 subCAP12,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Policies P123 subCAP12 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PoliciesP123subCAP12Cert.crt certificateRevocationList;binary:< file:///tmp/crls/PoliciesP123subCAP12CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP123subCAP12CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP123subsubCAP12P1CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP123subsubCAP12P2CertreversecrossCertificatePair.cp dn: CN=Policies P123 subsubCAP12P1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Policies P123 subsubCAP12P1 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PoliciesP123subsubCAP12P1Cert.crt certificateRevocationList;binary:< file:///tmp/crls/PoliciesP123subsubCAP12P1CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP123subsubCAP12P1CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/DifferentPoliciesTest7EEreversecrossCertificatePair.cp dn: CN=Different Policies EE Certificate Test7,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Different Policies EE Certificate Test7 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/DifferentPoliciesTest7EE.crt crossCertificatePair;binary:< file:///tmp/certpairs/DifferentPoliciesTest7EEforwardcrossCertificatePair.cp dn: CN=Policies P12 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Policies P12 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PoliciesP12CACert.crt certificateRevocationList;binary:< file:///tmp/crls/PoliciesP12CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP12CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP12subCAP1CertreversecrossCertificatePair.cp dn: CN=Policies P12 subCAP1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Policies P12 subCAP1 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PoliciesP12subCAP1Cert.crt certificateRevocationList;binary:< file:///tmp/crls/PoliciesP12subCAP1CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP12subCAP1CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP12subsubCAP1P2CertreversecrossCertificatePair.cp dn: CN=Policies P12 subsubCAP1P2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Policies P12 subsubCAP1P2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PoliciesP12subsubCAP1P2Cert.crt certificateRevocationList;binary:< file:///tmp/crls/PoliciesP12subsubCAP1P2CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP12subsubCAP1P2CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/DifferentPoliciesTest8EEreversecrossCertificatePair.cp dn: CN=Different Policies EE Certificate Test8,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Different Policies EE Certificate Test8 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/DifferentPoliciesTest8EE.crt crossCertificatePair;binary:< file:///tmp/certpairs/DifferentPoliciesTest8EEforwardcrossCertificatePair.cp dn: CN=Policies P123 subsubCAP12P2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Policies P123 subsubCAP12P2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PoliciesP123subsubCAP12P2Cert.crt certificateRevocationList;binary:< file:///tmp/crls/PoliciesP123subsubCAP2P2CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP123subsubCAP12P2CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP123subsubsubCAP12P2P1CertreversecrossCertificatePair.cp dn: CN=Policies P123 subsubsubCAP12P2P1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Policies P123 subsubsubCAP12P2P1 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PoliciesP123subsubsubCAP12P2P1Cert.crt certificateRevocationList;binary:< file:///tmp/crls/PoliciesP123subsubsubCAP12P2P1CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP123subsubsubCAP12P2P1CertforwardcrossCertificatePair.cp dn: CN=Different Policies EE Certificate Test9,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Different Policies EE Certificate Test9 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/DifferentPoliciesTest9EE.crt dn: CN=All Certificates Same Policies EE Certificate Test10,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: All Certificates Same Policies EE Certificate Test10 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/AllCertificatesSamePoliciesTest10EE.crt dn: CN=anyPolicy CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: anyPolicy CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/anyPolicyCACert.crt certificateRevocationList;binary:< file:///tmp/crls/anyPolicyCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/anyPolicyCACertforwardcrossCertificatePair.cp dn: CN=All Certificates anyPolicy EE Certificate Test11,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: All Certificates anyPolicy EE Certificate Test11 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/AllCertificatesanyPolicyTest11EE.crt dn: CN=Policies P3 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Policies P3 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PoliciesP3CACert.crt certificateRevocationList;binary:< file:///tmp/crls/PoliciesP3CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PoliciesP3CACertforwardcrossCertificatePair.cp dn: CN=Different Policies EE Certificate Test12,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Different Policies EE Certificate Test12 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/DifferentPoliciesTest12EE.crt dn: CN=All Certificates Same Policies EE Certificate Test13,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: All Certificates Same Policies EE Certificate Test13 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/AllCertificatesSamePoliciesTest13EE.crt dn: CN=anyPolicy EE Certificate Test14,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: anyPolicy EE Certificate Test14 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/AnyPolicyTest14EE.crt dn: CN=User Notice Qualifier EE Certificate Test15,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: User Notice Qualifier EE Certificate Test15 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/UserNoticeQualifierTest15EE.crt dn: CN=User Notice Qualifier EE Certificate Test16,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: User Notice Qualifier EE Certificate Test16 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/UserNoticeQualifierTest16EE.crt dn: CN=User Notice Qualifier EE Certificate Test17,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: User Notice Qualifier EE Certificate Test17 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/UserNoticeQualifierTest17EE.crt dn: CN=User Notice Qualifier EE Certificate Test18,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: User Notice Qualifier EE Certificate Test18 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/UserNoticeQualifierTest18EE.crt dn: CN=User Notice Qualifier EE Certificate Test19,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: User Notice Qualifier EE Certificate Test19 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/UserNoticeQualifierTest19EE.crt dn: CN=CPS Pointer Qualifier EE Certificate Test20,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: CPS Pointer Qualifier EE Certificate Test20 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/CPSPointerQualifierTest20EE.crt dn: CN=requireExplicitPolicy10 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy10 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy10CACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy10CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy10CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy10subCACertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy10 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy10 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy10subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy10subCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy10subCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy10subsubCACertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy10 subsubCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy10 subsubCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy10subsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy10subsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy10subsubCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy10subsubsubCACertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy10 subsubsubCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy10 subsubsubCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy10subsubsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy10subsubsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy10subsubsubCACertforwardcrossCertificatePair.cp dn: CN=Valid requireExplicitPolicy EE Certificate Test1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid requireExplicitPolicy EE Certificate Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidrequireExplicitPolicyTest1EE.crt dn: CN=requireExplicitPolicy5 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy5 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy5CACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy5CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy5CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy5subCACertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy5 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy5 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy5subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy5subCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy5subCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy5subsubCACertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy5 subsubCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy5 subsubCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy5subsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy5subsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy5subsubCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy5subsubsubCACertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy5 subsubsubCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy5 subsubsubCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy5subsubsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy5subsubsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy5subsubsubCACertforwardcrossCertificatePair.cp dn: CN=Valid requireExplicitPolicy EE Certificate Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid requireExplicitPolicy EE Certificate Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidrequireExplicitPolicyTest2EE.crt dn: CN=requireExplicitPolicy4 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy4 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy4CACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy4CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy4CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy4subCACertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy4 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy4 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy4subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy4subCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy4subCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy4subsubCACertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy4 subsubCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy4 subsubCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy4subsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy4subsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy4subsubCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy4subsubsubCACertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy4 subsubsubCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy4 subsubsubCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy4subsubsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy4subsubsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy4subsubsubCACertforwardcrossCertificatePair.cp dn: CN=Invalid requireExplicitPolicy EE Certificate Test3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid requireExplicitPolicy EE Certificate Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidrequireExplicitPolicyTest3EE.crt dn: CN=requireExplicitPolicy0 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy0 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy0CACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy0CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy0CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy0subCACertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy0 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy0 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy0subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy0subCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy0subCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy0subsubCACertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy0 subsubCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy0 subsubCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy0subsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy0subsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy0subsubCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy0subsubsubCACertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy0 subsubsubCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy0 subsubsubCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy0subsubsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy0subsubsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy0subsubsubCACertforwardcrossCertificatePair.cp dn: CN=Valid requireExplicitPolicy EE Certificate Test4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid requireExplicitPolicy EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidrequireExplicitPolicyTest4EE.crt dn: CN=requireExplicitPolicy7 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy7 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy7CACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy7CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy7CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy7subCARE2CertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy7 subCARE2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy7 subCARE2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy7subCARE2Cert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy7subCARE2CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy7subCARE2CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy7subsubCARE2RE4CertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy7 subsubCARE2RE4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy7 subsubCARE2RE4 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy7subsubCARE2RE4Cert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy7subsubCARE2RE4CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy7subsubCARE2RE4CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy7subsubsubCARE2RE4CertreversecrossCertificatePair.cp dn: CN=requireExplicitPolicy7 subsubsubCARE2RE4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy7 subsubsubCARE2RE4 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy7subsubsubCARE2RE4Cert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy7subsubsubCARE2RE4CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy7subsubsubCARE2RE4CertforwardcrossCertificatePair.cp dn: CN=Invalid requireExplicitPolicy EE Certificate Test5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid requireExplicitPolicy EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidrequireExplicitPolicyTest5EE.crt dn: CN=requireExplicitPolicy2 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy2 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy2CACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy2CACRL.crl cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy2SelfIssuedCACert.crt crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy2CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy2subCACertreversecrossCertificatePair.cp dn: CN=Valid Self-Issued requireExplicitPolicy EE Certificate Test6,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Self-Issued requireExplicitPolicy EE Certificate Test6 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidSelfIssuedrequireExplicitPolicyTest6EE.crt dn: CN=requireExplicitPolicy2 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: requireExplicitPolicy2 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy2subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/requireExplicitPolicy2subCACRL.crl cACertificate;binary:< file:///tmp/certs/requireExplicitPolicy2SelfIssuedsubCACert.crt crossCertificatePair;binary:< file:///tmp/certpairs/requireExplicitPolicy2subCACertforwardcrossCertificatePair.cp dn: CN=Invalid Self-Issued requireExplicitPolicy EE Certificate Test7,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Self-Issued requireExplicitPolicy EE Certificate Test7 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidSelfIssuedrequireExplicitPolicyTest7EE.crt dn: CN=Invalid Self-Issued requireExplicitPolicy EE Certificate Test8,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Self-Issued requireExplicitPolicy EE Certificate Test8 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidSelfIssuedrequireExplicitPolicyTest8EE.crt dn: CN=Mapping 1to2 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Mapping 1to2 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/Mapping1to2CACert.crt certificateRevocationList;binary:< file:///tmp/crls/Mapping1to2CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/Mapping1to2CACertforwardcrossCertificatePair.cp dn: CN=Valid Policy Mapping EE Certificate Test1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Policy Mapping EE Certificate Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidPolicyMappingTest1EE.crt dn: CN=Invalid Policy Mapping EE Certificate Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Policy Mapping EE Certificate Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidPolicyMappingTest2EE.crt dn: CN=P12 Mapping 1to3 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: P12 Mapping 1to3 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/P12Mapping1to3CACert.crt certificateRevocationList;binary:< file:///tmp/crls/P12Mapping1to3CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/P12Mapping1to3CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/P12Mapping1to3subCACertreversecrossCertificatePair.cp dn: CN=P12 Mapping 1to3 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: P12 Mapping 1to3 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/P12Mapping1to3subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/P12Mapping1to3subCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/P12Mapping1to3subCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/P12Mapping1to3subsubCACertreversecrossCertificatePair.cp dn: CN=P12 Mapping 1to3 subsubCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: P12 Mapping 1to3 subsubCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/P12Mapping1to3subsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/P12Mapping1to3subsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/P12Mapping1to3subsubCACertforwardcrossCertificatePair.cp dn: CN=Valid Policy Mapping EE Certificate Test3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Policy Mapping EE Certificate Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidPolicyMappingTest3EE.crt dn: CN=Invalid Policy Mapping EE Certificate Test4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Policy Mapping EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidPolicyMappingTest4EE.crt dn: CN=P1 Mapping 1to234 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: P1 Mapping 1to234 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/P1Mapping1to234CACert.crt certificateRevocationList;binary:< file:///tmp/crls/P1Mapping1to234CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/P1Mapping1to234CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/P1Mapping1to234subCACertreversecrossCertificatePair.cp dn: CN=P1 Mapping 1to234 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: P1 Mapping 1to234 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/P1Mapping1to234subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/P1Mapping1to234subCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/P1Mapping1to234subCACertforwardcrossCertificatePair.cp dn: CN=Valid Policy Mapping EE Certificate Test5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Policy Mapping EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidPolicyMappingTest5EE.crt dn: CN=Valid Policy Mapping EE Certificate Test6,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Policy Mapping EE Certificate Test6 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidPolicyMappingTest6EE.crt dn: CN=Mapping From anyPolicy CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Mapping From anyPolicy CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/MappingFromanyPolicyCACert.crt certificateRevocationList;binary:< file:///tmp/crls/MappingFromanyPolicyCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/MappingFromanyPolicyCACertforwardcrossCertificatePair.cp dn: CN=Invalid Mapping From anyPolicy EE Certificate Test7,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Mapping From anyPolicy EE Certificate Test7 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidMappingFromanyPolicyTest7EE.crt dn: CN=Mapping To anyPolicy CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Mapping To anyPolicy CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/MappingToanyPolicyCACert.crt certificateRevocationList;binary:< file:///tmp/crls/MappingToanyPolicyCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/MappingToanyPolicyCACertforwardcrossCertificatePair.cp dn: CN=Invalid Mapping To anyPolicy EE Certificate Test8,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Mapping To anyPolicy EE Certificate Test8 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidMappingToanyPolicyTest8EE.crt dn: CN=PanyPolicy Mapping 1to2 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: PanyPolicy Mapping 1to2 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/PanyPolicyMapping1to2CACert.crt certificateRevocationList;binary:< file:///tmp/crls/PanyPolicyMapping1to2CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/PanyPolicyMapping1to2CACertforwardcrossCertificatePair.cp dn: CN=Valid Policy Mapping EE Certificate Test9,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Policy Mapping EE Certificate Test9 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidPolicyMappingTest9EE.crt dn: CN=Good subCA PanyPolicy Mapping 1to2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Good subCA PanyPolicy Mapping 1to2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/GoodsubCAPanyPolicyMapping1to2CACert.crt certificateRevocationList;binary:< file:///tmp/crls/GoodsubCAPanyPolicyMapping1to2CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/GoodsubCAPanyPolicyMapping1to2CACertforwardcrossCertificatePair.cp dn: CN=Invalid Policy Mapping EE Certificate Test10,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Policy Mapping EE Certificate Test10 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidPolicyMappingTest10EE.crt dn: CN=Valid Policy Mapping EE Certificate Test11,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Policy Mapping EE Certificate Test11 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidPolicyMappingTest11EE.crt dn: CN=Valid Policy Mapping EE Certificate Test12,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Policy Mapping EE Certificate Test12 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidPolicyMappingTest12EE.crt dn: CN=P1anyPolicy Mapping 1to2 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: P1anyPolicy Mapping 1to2 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/P1anyPolicyMapping1to2CACert.crt certificateRevocationList;binary:< file:///tmp/crls/P1anyPolicyMapping1to2CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/P1anyPolicyMapping1to2CACertforwardcrossCertificatePair.cp dn: CN=Valid Policy Mapping EE Certificate Test13,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Policy Mapping EE Certificate Test13 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidPolicyMappingTest13EE.crt dn: CN=Valid Policy Mapping EE Certificate Test14,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Policy Mapping EE Certificate Test14 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidPolicyMappingTest14EE.crt dn: CN=inhibitPolicyMapping0 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitPolicyMapping0 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping0CACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitPolicyMapping0CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping0CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping0subCACertreversecrossCertificatePair.cp dn: CN=inhibitPolicyMapping0 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitPolicyMapping0 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping0subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitPolicyMapping0subCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping0subCACertforwardcrossCertificatePair.cp dn: CN=Invalid inhibitPolicyMapping EE Certificate Test1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid inhibitPolicyMapping EE Certificate Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidinhibitPolicyMappingTest1EE.crt dn: CN=inhibitPolicyMapping1 P12 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitPolicyMapping1 P12 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping1P12CACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitPolicyMapping1P12CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P12CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P12subCACertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P12subCAIPM5CertreversecrossCertificatePair.cp dn: CN=inhibitPolicyMapping1 P12 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitPolicyMapping1 P12 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping1P12subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitPolicyMapping1P12subCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P12subCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P12subsubCACertreversecrossCertificatePair.cp dn: CN=Valid inhibitPolicyMapping EE Certificate Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid inhibitPolicyMapping EE Certificate Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidinhibitPolicyMappingTest2EE.crt dn: CN=inhibitPolicyMapping1 P12 subsubCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitPolicyMapping1 P12 subsubCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping1P12subsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitPolicyMapping1P12subsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P12subsubCACertforwardcrossCertificatePair.cp dn: CN=Invalid inhibitPolicyMapping EE Certificate Test3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid inhibitPolicyMapping EE Certificate Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidinhibitPolicyMappingTest3EE.crt dn: CN=Valid inhibitPolicyMapping EE Certificate Test4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid inhibitPolicyMapping EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidinhibitPolicyMappingTest4EE.crt dn: CN=inhibitPolicyMapping5 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitPolicyMapping5 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping5CACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitPolicyMapping5CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping5CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping5subCACertreversecrossCertificatePair.cp dn: CN=inhibitPolicyMapping5 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitPolicyMapping5 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping5subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitPolicyMapping5subCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping5subCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping5subsubCACertreversecrossCertificatePair.cp dn: CN=inhibitPolicyMapping5 subsubCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitPolicyMapping5 subsubCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping5subsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitPolicyMapping5subsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping5subsubCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping5subsubsubCACertreversecrossCertificatePair.cp dn: CN=inhibitPolicyMapping5 subsubsubCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitPolicyMapping5 subsubsubCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping5subsubsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitPolicyMapping5subsubsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping5subsubsubCACertforwardcrossCertificatePair.cp dn: CN=Invalid inhibitPolicyMapping EE Certificate Test5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid inhibitPolicyMapping EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidinhibitPolicyMappingTest5EE.crt dn: CN=inhibitPolicyMapping1 P12 subCAIPM5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitPolicyMapping1 P12 subCAIPM5 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping1P12subCAIPM5Cert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitPolicyMapping1P12subCAIPM5CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P12subCAIPM5CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P12subsubCAIPM5CertreversecrossCertificatePair.cp dn: CN=inhibitPolicyMapping1 P12 subsubCAIPM5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitPolicyMapping1 P12 subsubCAIPM5 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping1P12subsubCAIPM5Cert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitPolicyMapping1P12subsubCAIPM5CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P12subsubCAIPM5CertforwardcrossCertificatePair.cp dn: CN=Invalid inhibitPolicyMapping EE Certificate Test6,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid inhibitPolicyMapping EE Certificate Test6 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidinhibitPolicyMappingTest6EE.crt dn: CN=inhibitPolicyMapping1 P1 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitPolicyMapping1 P1 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping1P1CACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitPolicyMapping1P1CACRL.crl cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping1P1SelfIssuedCACert.crt crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P1CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P1subCACertreversecrossCertificatePair.cp dn: CN=inhibitPolicyMapping1 P1 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitPolicyMapping1 P1 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping1P1subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitPolicyMapping1P1subCACRL.crl cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping1P1SelfIssuedsubCACert.crt crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P1subCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P1subsubCACertreversecrossCertificatePair.cp dn: CN=Valid Self-Issued inhibitPolicyMapping EE Certificate Test7,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Self-Issued inhibitPolicyMapping EE Certificate Test7 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidSelfIssuedinhibitPolicyMappingTest7EE.crt dn: CN=inhibitPolicyMapping1 P1 subsubCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitPolicyMapping1 P1 subsubCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitPolicyMapping1P1subsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitPolicyMapping1P1subsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitPolicyMapping1P1subsubCACertforwardcrossCertificatePair.cp dn: CN=Invalid Self-Issued inhibitPolicyMapping EE Certificate Test8,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Self-Issued inhibitPolicyMapping EE Certificate Test8 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidSelfIssuedinhibitPolicyMappingTest8EE.crt dn: CN=Invalid Self-Issued inhibitPolicyMapping EE Certificate Test9,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Self-Issued inhibitPolicyMapping EE Certificate Test9 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidSelfIssuedinhibitPolicyMappingTest9EE.crt dn: CN=Invalid Self-Issued inhibitPolicyMapping EE Certificate Test10,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Self-Issued inhibitPolicyMapping EE Certificate Test10 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidSelfIssuedinhibitPolicyMappingTest10EE.crt dn: CN=Invalid Self-Issued inhibitPolicyMapping EE Certificate Test11,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Self-Issued inhibitPolicyMapping EE Certificate Test11 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidSelfIssuedinhibitPolicyMappingTest11EE.crt dn: CN=inhibitAnyPolicy0 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitAnyPolicy0 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitAnyPolicy0CACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitAnyPolicy0CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy0CACertforwardcrossCertificatePair.cp dn: CN=Invalid inhibitAnyPolicy EE Certificate Test1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid inhibitAnyPolicy EE Certificate Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidinhibitAnyPolicyTest1EE.crt dn: CN=Valid inhibitAnyPolicy EE Certificate Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid inhibitAnyPolicy EE Certificate Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidinhibitAnyPolicyTest2EE.crt dn: CN=inhibitAnyPolicy1 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitAnyPolicy1 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitAnyPolicy1CACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitAnyPolicy1CACRL.crl cACertificate;binary:< file:///tmp/certs/inhibitAnyPolicy1SelfIssuedCACert.crt crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy1CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy1subCA1CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy1subCAIAP5CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy1subCA2CertreversecrossCertificatePair.cp dn: CN=inhibitAnyPolicy1 subCA1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitAnyPolicy1 subCA1 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitAnyPolicy1subCA1Cert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitAnyPolicy1subCA1CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy1subCA1CertforwardcrossCertificatePair.cp dn: CN=inhibitAnyPolicy EE Certificate Test3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitAnyPolicy EE Certificate Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/inhibitAnyPolicyTest3EE.crt dn: CN=Invalid inhibitAnyPolicy EE Certificate Test4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid inhibitAnyPolicy EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidinhibitAnyPolicyTest4EE.crt dn: CN=inhibitAnyPolicy5 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitAnyPolicy5 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitAnyPolicy5CACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitAnyPolicy5CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy5CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy5subCACertreversecrossCertificatePair.cp dn: CN=inhibitAnyPolicy5 subCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitAnyPolicy5 subCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitAnyPolicy5subCACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitAnyPolicy5subCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy5subCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy5subsubCACertreversecrossCertificatePair.cp dn: CN=inhibitAnyPolicy5 subsubCA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitAnyPolicy5 subsubCA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitAnyPolicy5subsubCACert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitAnyPolicy5subsubCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy5subsubCACertforwardcrossCertificatePair.cp dn: CN=Invalid inhibitAnyPolicy EE Certificate Test5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid inhibitAnyPolicy EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidinhibitAnyPolicyTest5EE.crt dn: CN=inhibitAnyPolicy1 subCAIAP5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitAnyPolicy1 subCAIAP5 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitAnyPolicy1subCAIAP5Cert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitAnyPolicy1subCAIAP5CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy1subCAIAP5CertforwardcrossCertificatePair.cp dn: CN=Invalid inhibitAnyPolicy EE Certificate Test6,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid inhibitAnyPolicy EE Certificate Test6 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidinhibitAnyPolicyTest6EE.crt dn: CN=inhibitAnyPolicy1 subCA2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitAnyPolicy1 subCA2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitAnyPolicy1subCA2Cert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitAnyPolicy1subCA2CRL.crl cACertificate;binary:< file:///tmp/certs/inhibitAnyPolicy1SelfIssuedsubCA2Cert.crt crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy1subCA2CertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy1subsubCA2CertreversecrossCertificatePair.cp cACertificate;binary:< file:///tmp/certs/InvalidSelfIssuedinhibitAnyPolicyTest10EE.crt dn: CN=Valid Self-Issued inhibitAnyPolicy EE Certificate Test7,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Self-Issued inhibitAnyPolicy EE Certificate Test7 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidSelfIssuedinhibitAnyPolicyTest7EE.crt dn: CN=inhibitAnyPolicy1 subsubCA2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: inhibitAnyPolicy1 subsubCA2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/inhibitAnyPolicy1subsubCA2Cert.crt certificateRevocationList;binary:< file:///tmp/crls/inhibitAnyPolicy1subsubCA2CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/inhibitAnyPolicy1subsubCA2CertforwardcrossCertificatePair.cp dn: CN=Invalid Self-Issued inhibitAnyPolicy EE Certificate Test8,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Self-Issued inhibitAnyPolicy EE Certificate Test8 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidSelfIssuedinhibitAnyPolicyTest8EE.crt dn: CN=Valid Self-Issued inhibitAnyPolicy EE Certificate Test9,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Self-Issued inhibitAnyPolicy EE Certificate Test9 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidSelfIssuedinhibitAnyPolicyTest9EE.crt dn: CN=nameConstraints DN1 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints DN1 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsDN1CACert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsDN1CACRL.crl cACertificate;binary:< file:///tmp/certs/nameConstraintsDN1SelfIssuedCACert.crt crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN1CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN1subCA1CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN1subCA2CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN1subCA3CertreversecrossCertificatePair.cp objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNnameConstraintsTest20EE.crt dn: OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: permittedSubtree1 dn: CN=Valid DN nameConstraints EE Certificate Test1,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid DN nameConstraints EE Certificate Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidDNnameConstraintsTest1EE.crt dn: OU=excludedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: excludedSubtree1 dn: CN=Invalid DN nameConstraints EE Certificate Test2,OU=excludedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DN nameConstraints EE Certificate Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNnameConstraintsTest2EE.crt dn: CN=Invalid DN nameConstraints EE Certificate Test3,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DN nameConstraints EE Certificate Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNnameConstraintsTest3EE.crt dn: CN=Valid DN nameConstraints EE Certificate Test4,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid DN nameConstraints EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidDNnameConstraintsTest4EE.crt dn: CN=nameConstraints DN2 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints DN2 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsDN2CACert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsDN2CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN2CACertforwardcrossCertificatePair.cp dn: CN=Valid DN nameConstraints EE Certificate Test5,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid DN nameConstraints EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidDNnameConstraintsTest5EE.crt dn: CN=nameConstraints DN3 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints DN3 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsDN3CACert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsDN3CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN3CACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN3subCA1CertreversecrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN3subCA2CertreversecrossCertificatePair.cp dn: CN=Valid DN nameConstraints EE Certificate Test6,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid DN nameConstraints EE Certificate Test6 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidDNnameConstraintsTest6EE.crt dn: CN=Invalid DN nameConstraints EE Certificate Test7,OU=excludedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DN nameConstraints EE Certificate Test7 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNnameConstraintsTest7EE.crt dn: CN=nameConstraints DN4 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints DN4 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsDN4CACert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsDN4CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN4CACertforwardcrossCertificatePair.cp dn: CN=Invalid DN nameConstraints EE Certificate Test8,OU=excludedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DN nameConstraints EE Certificate Test8 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNnameConstraintsTest8EE.crt dn: OU=excludedSubtree2,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: excludedSubtree2 dn: CN=Invalid DN nameConstraints EE Certificate Test9,OU=excludedSubtree2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DN nameConstraints EE Certificate Test9 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNnameConstraintsTest9EE.crt dn: CN=nameConstraints DN5 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints DN5 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsDN5CACert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsDN5CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN5CACertforwardcrossCertificatePair.cp dn: OU=excludedSubtree1,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: excludedSubtree1 dn: CN=Invalid DN nameConstraints EE Certificate Test10,OU=excludedSubtree1,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DN nameConstraints EE Certificate Test10 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNnameConstraintsTest10EE.crt dn: OU=permittedSubtree2,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: permittedSubtree2 dn: CN=Valid DN nameConstraints EE Certificate Test11,OU=permittedSubtree2,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid DN nameConstraints EE Certificate Test11 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidDNnameConstraintsTest11EE.crt dn: CN=nameConstraints DN1 subCA1,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints DN1 subCA1 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsDN1subCA1Cert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsDN1subCA1CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN1subCA1CertforwardcrossCertificatePair.cp dn: CN=Invalid DN nameConstraints EE Certificate Test12,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DN nameConstraints EE Certificate Test12 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNnameConstraintsTest12EE.crt dn: CN=nameConstraints DN1 subCA2,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints DN1 subCA2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsDN1subCA2Cert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsDN1subCA2CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN1subCA2CertforwardcrossCertificatePair.cp dn: CN=Invalid DN nameConstraints EE Certificate Test13,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DN nameConstraints EE Certificate Test13 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNnameConstraintsTest13EE.crt dn: CN=nameConstraints DN3 subCA1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints DN3 subCA1 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsDN3subCA1Cert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsDN3subCA1CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN3subCA1CertforwardcrossCertificatePair.cp dn: CN=Invalid DN nameConstraints EE Certificate Test15,OU=excludedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DN nameConstraints EE Certificate Test15 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNnameConstraintsTest15EE.crt dn: CN=Invalid DN nameConstraints EE Certificate Test16,OU=excludedSubtree2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DN nameConstraints EE Certificate Test16 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNnameConstraintsTest16EE.crt dn: CN=nameConstraints DN3 subCA2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints DN3 subCA2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsDN3subCA2Cert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsDN3subCA2CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN3subCA2CertforwardcrossCertificatePair.cp dn: CN=Invalid DN nameConstraints EE Certificate Test17,OU=excludedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DN nameConstraints EE Certificate Test17 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNnameConstraintsTest17EE.crt dn: CN=Valid DN nameConstraints EE Certificate Test18,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid DN nameConstraints EE Certificate Test18 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidDNnameConstraintsTest18EE.crt dn: CN=Valid DN nameConstraints EE Certificate Test19,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid DN nameConstraints EE Certificate Test19 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidDNnameConstraintsTest19EE.crt dn: CN=nameConstraints RFC822 CA1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints RFC822 CA1 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsRFC822CA1Cert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsRFC822CA1CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsRFC822CA1CertforwardcrossCertificatePair.cp dn: CN=Valid RFC822 nameConstraints EE Certificate Test21,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid RFC822 nameConstraints EE Certificate Test21 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidRFC822nameConstraintsTest21EE.crt dn: CN=Invalid RFC822 nameConstraints EE Certificate Test22,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid RFC822 nameConstraints EE Certificate Test22 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidRFC822nameConstraintsTest22EE.crt dn: CN=nameConstraints RFC822 CA2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints RFC822 CA2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsRFC822CA2Cert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsRFC822CA2CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsRFC822CA2CertforwardcrossCertificatePair.cp dn: CN=Valid RFC822 nameConstraints EE Certificate Test23,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid RFC822 nameConstraints EE Certificate Test23 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidRFC822nameConstraintsTest23EE.crt dn: CN=Invalid RFC822 nameConstraints EE Certificate Test24,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid RFC822 nameConstraints EE Certificate Test24 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidRFC822nameConstraintsTest24EE.crt dn: CN=nameConstraints RFC822 CA3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints RFC822 CA3 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsRFC822CA3Cert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsRFC822CA3CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsRFC822CA3CertforwardcrossCertificatePair.cp dn: CN=Valid RFC822 nameConstraints EE Certificate Test25,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid RFC822 nameConstraints EE Certificate Test25 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidRFC822nameConstraintsTest25EE.crt dn: CN=Invalid RFC822 nameConstraints EE Certificate Test26,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid RFC822 nameConstraints EE Certificate Test26 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidRFC822nameConstraintsTest26EE.crt dn: CN=nameConstraints DN1 subCA3,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints DN1 subCA3 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsDN1subCA3Cert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsDN1subCA3CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDN1subCA3CertforwardcrossCertificatePair.cp dn: CN=Valid DN and RFC822 nameConstraints EE Certificate Test27,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid DN and RFC822 nameConstraints EE Certificate Test27 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidDNandRFC822nameConstraintsTest27EE.crt dn: CN=Invalid DN and RFC822 nameConstraints EE Certificate Test28,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DN and RFC822 nameConstraints EE Certificate Test28 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNandRFC822nameConstraintsTest28EE.crt dn: CN=Invalid DN and RFC822 nameConstraints EE Certificate Test29,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DN and RFC822 nameConstraints EE Certificate Test29 dn: email=Test29EE@invalidcertificates.gov,CN=Invalid DN and RFC822 nameConstraints EE Certificate Test29,OU=permittedSubtree1,O=Test Certificates 2011,C=US objectClass: organizationalRole objectClass: opencaEmailAddress objectClass: pkiUser email: Test29EE@invalidcertificates.gov cn: Invalid DN and RFC822 nameConstraints EE Certificate Test29 userCertificate;binary:< file:///tmp/certs/InvalidDNandRFC822nameConstraintsTest29EE.crt dn: CN=nameConstraints DNS1 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints DNS1 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsDNS1CACert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsDNS1CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDNS1CACertforwardcrossCertificatePair.cp dn: CN=Valid DNS nameConstraints EE Certificate Test30,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid DNS nameConstraints EE Certificate Test30 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidDNSnameConstraintsTest30EE.crt dn: CN=Invalid DNS nameConstraints EE Certificate Test31,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DNS nameConstraints EE Certificate Test31 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNSnameConstraintsTest31EE.crt dn: CN=nameConstraints DNS2 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints DNS2 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsDNS2CACert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsDNS2CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsDNS2CACertforwardcrossCertificatePair.cp dn: CN=Valid DNS nameConstraints EE Certificate Test32,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid DNS nameConstraints EE Certificate Test32 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidDNSnameConstraintsTest32EE.crt dn: CN=Invalid DNS nameConstraints EE Certificate Test33,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DNS nameConstraints EE Certificate Test33 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNSnameConstraintsTest33EE.crt dn: CN=nameConstraints URI1 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints URI1 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsURI1CACert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsURI1CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsURI1CACertforwardcrossCertificatePair.cp dn: CN=Valid URI nameConstraints EE Certificate Test34,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid URI nameConstraints EE Certificate Test34 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidURInameConstraintsTest34EE.crt dn: CN=Invalid URI nameConstraints EE Certificate Test35,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid URI nameConstraints EE Certificate Test35 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidURInameConstraintsTest35EE.crt dn: CN=nameConstraints URI2 CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: nameConstraints URI2 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/nameConstraintsURI2CACert.crt certificateRevocationList;binary:< file:///tmp/crls/nameConstraintsURI2CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/nameConstraintsURI2CACertforwardcrossCertificatePair.cp dn: CN=Valid URI nameConstraints EE Certificate Test36,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid URI nameConstraints EE Certificate Test36 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidURInameConstraintsTest36EE.crt dn: CN=Invalid URI nameConstraints EE Certificate Test37,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid URI nameConstraints EE Certificate Test37 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidURInameConstraintsTest37EE.crt dn: CN=Invalid DNS nameConstraints EE Certificate Test38,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DNS nameConstraints EE Certificate Test38 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDNSnameConstraintsTest38EE.crt dn: OU=distributionPoint1 CA,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: distributionPoint1 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/distributionPoint1CACert.crt crossCertificatePair;binary:< file:///tmp/certpairs/distributionPoint1CACertforwardcrossCertificatePair.cp dn: CN=Valid distributionPoint EE Certificate Test1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid distributionPoint EE Certificate Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValiddistributionPointTest1EE.crt dn: CN=CRL1 of distributionPoint1 CA,OU=distributionPoint1 CA,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: CRL1 of distributionPoint1 CA certificateRevocationList;binary:< file:///tmp/crls/distributionPoint1CACRL.crl dn: CN=Invalid distributionPoint EE Certificate Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid distributionPoint EE Certificate Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvaliddistributionPointTest2EE.crt dn: CN=Invalid distributionPoint EE Certificate Test3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid distributionPoint EE Certificate Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvaliddistributionPointTest3EE.crt dn: CN=CRLx of distributionPoint1 CA,OU=distributionPoint1 CA,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: CRLx of distributionPoint1 CA certificateRevocationList;binary:< file:///tmp/crls/distributionPoint1CACRL.crl dn: CN=Valid distributionPoint EE Certificate Test4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid distributionPoint EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValiddistributionPointTest4EE.crt dn: OU=distributionPoint2 CA,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: distributionPoint2 CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/distributionPoint2CACert.crt certificateRevocationList;binary:< file:///tmp/crls/distributionPoint2CACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/distributionPoint2CACertforwardcrossCertificatePair.cp dn: CN=Valid distributionPoint EE Certificate Test5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid distributionPoint EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValiddistributionPointTest5EE.crt dn: CN=CRL1 of distributionPoint2 CA,OU=distributionPoint2 CA,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: CRL1 of distributionPoint2 CA certificateRevocationList;binary:< file:///tmp/crls/distributionPoint2CACRL.crl dn: CN=Invalid distributionPoint EE Certificate Test6,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid distributionPoint EE Certificate Test6 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvaliddistributionPointTest6EE.crt dn: CN=Valid distributionPoint EE Certificate Test7,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid distributionPoint EE Certificate Test7 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValiddistributionPointTest7EE.crt dn: CN=Invalid distributionPoint EE Certificate Test8,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid distributionPoint EE Certificate Test8 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvaliddistributionPointTest8EE.crt dn: CN=Invalid distributionPoint EE Certificate Test9,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid distributionPoint EE Certificate Test9 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvaliddistributionPointTest9EE.crt dn: OU=No issuingDistributionPoint CA,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: No issuingDistributionPoint CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/NoissuingDistributionPointCACert.crt crossCertificatePair;binary:< file:///tmp/certpairs/NoissuingDistributionPointCACertforwardcrossCertificatePair.cp dn: CN=Valid No issuingDistributionPoint EE Certificate Test10,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid No issuingDistributionPoint EE Certificate Test10 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidNoissuingDistributionPointTest10EE.crt dn: CN=CRL,OU=No issuingDistributionPoint CA,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: CRL certificateRevocationList;binary:< file:///tmp/crls/NoissuingDistributionPointCACRL.crl dn: CN=onlyContainsUserCerts CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: onlyContainsUserCerts CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/onlyContainsUserCertsCACert.crt certificateRevocationList;binary:< file:///tmp/crls/onlyContainsUserCertsCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/onlyContainsUserCertsCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/InvalidonlyContainsUserCertsTest11EEreversecrossCertificatePair.cp dn: CN=Invalid onlyContainsUserCerts EE Certificate Test11,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid onlyContainsUserCerts EE Certificate Test11 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/InvalidonlyContainsUserCertsTest11EE.crt crossCertificatePair;binary:< file:///tmp/certpairs/InvalidonlyContainsUserCertsTest11EEforwardcrossCertificatePair.cp dn: CN=onlyContainsCACerts CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: onlyContainsCACerts CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/onlyContainsCACertsCACert.crt authorityRevocationList;binary:< file:///tmp/crls/onlyContainsCACertsCACRL.crl certificateRevocationList;binary:< file:///tmp/crls/onlyContainsCACertsCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/onlyContainsCACertsCACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/ValidonlyContainsCACertsTest13EEreversecrossCertificatePair.cp dn: CN=Invalid onlyContainsCACerts EE Certificate Test12,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid onlyContainsCACerts EE Certificate Test12 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidonlyContainsCACertsTest12EE.crt dn: CN=Valid onlyContainsCACerts EE Certificate Test13,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid onlyContainsCACerts EE Certificate Test13 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/ValidonlyContainsCACertsTest13EE.crt crossCertificatePair;binary:< file:///tmp/certpairs/ValidonlyContainsCACertsTest13EEforwardcrossCertificatePair.cp dn: CN=onlyContainsAttributeCerts CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: onlyContainsAttributeCerts CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/onlyContainsAttributeCertsCACert.crt certificateRevocationList;binary:< file:///tmp/crls/onlyContainsAttributeCertsCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/onlyContainsAttributeCertsCACertforwardcrossCertificatePair.cp dn: CN=Invalid onlyContainsAttirubteCerts EE Certificate Test14,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid onlyContainsAttirubteCerts EE Certificate Test14 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidonlyContainsAttributeCertsTest14EE.crt dn: CN=onlySomeReasons CA1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: onlySomeReasons CA1 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/onlySomeReasonsCA1Cert.crt certificateRevocationList;binary:< file:///tmp/crls/onlySomeReasonsCA1compromiseCRL.crl certificateRevocationList;binary:< file:///tmp/crls/onlySomeReasonsCA1otherreasonsCRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/onlySomeReasonsCA1CertforwardcrossCertificatePair.cp dn: CN=Invalid onlySomeReasons EE Certificate Test15,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid onlySomeReasons EE Certificate Test15 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidonlySomeReasonsTest15EE.crt dn: CN=Invalid onlySomeReasons EE Certificate Test16,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid onlySomeReasons EE Certificate Test16 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidonlySomeReasonsTest16EE.crt dn: CN=onlySomeReasons CA2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: onlySomeReasons CA2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/onlySomeReasonsCA2Cert.crt certificateRevocationList;binary:< file:///tmp/crls/onlySomeReasonsCA2CRL1.crl certificateRevocationList;binary:< file:///tmp/crls/onlySomeReasonsCA2CRL2.crl crossCertificatePair;binary:< file:///tmp/certpairs/onlySomeReasonsCA2CertforwardcrossCertificatePair.cp dn: CN=Invalid onlySomeReasons EE Certificate Test17,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid onlySomeReasons EE Certificate Test17 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidonlySomeReasonsTest17EE.crt dn: OU=onlySomeReasons CA3,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: onlySomeReasons CA3 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/onlySomeReasonsCA3Cert.crt crossCertificatePair;binary:< file:///tmp/certpairs/onlySomeReasonsCA3CertforwardcrossCertificatePair.cp dn: CN=Valid onlySomeReasons EE Certificate Test18,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid onlySomeReasons EE Certificate Test18 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidonlySomeReasonsTest18EE.crt dn: CN=CRL,OU=onlySomeReasons CA3,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: CRL certificateRevocationList;binary:< file:///tmp/crls/onlySomeReasonsCA3compromiseCRL.crl certificateRevocationList;binary:< file:///tmp/crls/onlySomeReasonsCA3otherreasonsCRL.crl dn: OU=onlySomeReasons CA4,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: onlySomeReasons CA4 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/onlySomeReasonsCA4Cert.crt crossCertificatePair;binary:< file:///tmp/certpairs/onlySomeReasonsCA4CertforwardcrossCertificatePair.cp dn: CN=Valid onlySomeReasons EE Certificate Test19,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid onlySomeReasons EE Certificate Test19 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidonlySomeReasonsTest19EE.crt dn: CN=CRL1,OU=onlySomeReasons CA4,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: CRL1 certificateRevocationList;binary:< file:///tmp/crls/onlySomeReasonsCA4compromiseCRL.crl dn: CN=CRL2,OU=onlySomeReasons CA4,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: CRL2 certificateRevocationList;binary:< file:///tmp/crls/onlySomeReasonsCA4otherreasonsCRL.crl dn: CN=Invalid onlySomeReasons EE Certificate Test20,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid onlySomeReasons EE Certificate Test20 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidonlySomeReasonsTest20EE.crt dn: CN=Invalid onlySomeReasons EE Certificate Test21,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid onlySomeReasons EE Certificate Test21 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidonlySomeReasonsTest21EE.crt dn: CN=indirectCRL CA1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: indirectCRL CA1 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/indirectCRLCA1Cert.crt certificateRevocationList;binary:< file:///tmp/crls/indirectCRLCA1CRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/indirectCRLCA1CertforwardcrossCertificatePair.cp dn: CN=Valid IDP with indirectCRL EE Certificate Test22,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid IDP with indirectCRL EE Certificate Test22 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidIDPwithindirectCRLTest22EE.crt dn: CN=Invalid IDP with indirectCRL EE Certificate Test23,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid IDP with indirectCRL EE Certificate Test23 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidIDPwithindirectCRLTest23EE.crt dn: CN=indirectCRL CA2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: indirectCRL CA2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/indirectCRLCA2Cert.crt crossCertificatePair;binary:< file:///tmp/certpairs/indirectCRLCA2CertforwardcrossCertificatePair.cp dn: CN=Valid IDP with indirectCRL EE Certificate Test24,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid IDP with indirectCRL EE Certificate Test24 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidIDPwithindirectCRLTest24EE.crt dn: CN=Valid IDP with indirectCRL EE Certificate Test25,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid IDP with indirectCRL EE Certificate Test25 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidIDPwithindirectCRLTest25EE.crt dn: CN=Invalid IDP with indirectCRL EE Certificate Test26,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid IDP with indirectCRL EE Certificate Test26 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidIDPwithindirectCRLTest26EE.crt dn: CN=indirectCRL CA1x,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: indirectCRL CA1x certificateRevocationList;binary:< file:///tmp/crls/indirectCRLCA1CRL.crl dn: CN=Invalid cRLIssuer EE Certificate Test27,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid cRLIssuer EE Certificate Test27 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidcRLIssuerTest27EE.crt dn: OU=indirectCRL CA3,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: indirectCRL CA3 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/indirectCRLCA3Cert.crt crossCertificatePair;binary:< file:///tmp/certpairs/indirectCRLCA3CertforwardcrossCertificatePair.cp dn: OU=indirectCRL CA3 cRLIssuer,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: indirectCRL CA3 cRLIssuer objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/indirectCRLCA3cRLIssuerCert.crt dn: CN=CRL1,OU=indirectCRL CA3,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: CRL1 certificateRevocationList;binary:< file:///tmp/crls/indirectCRLCA3CRL.crl dn: CN=Valid cRLIssuer EE Certificate Test28,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid cRLIssuer EE Certificate Test28 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidcRLIssuerTest28EE.crt dn: CN=indirect CRL for indirectCRL CA3,OU=indirectCRL CA3 cRLIssuer,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: indirect CRL for indirectCRL CA3 certificateRevocationList;binary:< file:///tmp/crls/indirectCRLCA3cRLIssuerCRL.crl dn: CN=Valid cRLIssuer EE Certificate Test29,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid cRLIssuer EE Certificate Test29 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidcRLIssuerTest29EE.crt dn: OU=indirectCRL CA4,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: indirectCRL CA4 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/indirectCRLCA4Cert.crt crossCertificatePair;binary:< file:///tmp/certpairs/indirectCRLCA4CertforwardcrossCertificatePair.cp dn: OU=indirectCRL CA4 cRLIssuer,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: indirectCRL CA4 cRLIssuer objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/indirectCRLCA4cRLIssuerCert.crt dn: CN=indirect CRL for indirectCRL CA4,OU=indirectCRL CA4 cRLIssuer,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: indirect CRL for indirectCRL CA4 certificateRevocationList;binary:< file:///tmp/crls/indirectCRLCA4cRLIssuerCRL.crl dn: CN=Valid cRLIssuer EE Certificate Test30,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid cRLIssuer EE Certificate Test30 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidcRLIssuerTest30EE.crt dn: OU=indirectCRL CA5,O=Test Certificates 2011,C=US objectClass: organizationalUnit ou: indirectCRL CA5 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/indirectCRLCA5Cert.crt crossCertificatePair;binary:< file:///tmp/certpairs/indirectCRLCA5CertforwardcrossCertificatePair.cp dn: CN=indirectCRL CA6,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: indirectCRL CA6 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/indirectCRLCA6Cert.crt crossCertificatePair;binary:< file:///tmp/certpairs/indirectCRLCA6CertforwardcrossCertificatePair.cp dn: CN=Invalid cRLIssuer EE Certificate Test31,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid cRLIssuer EE Certificate Test31 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidcRLIssuerTest31EE.crt dn: CN=indirect CRL for indirectCRL CA6,OU=indirectCRL CA5,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: indirect CRL for indirectCRL CA6 certificateRevocationList;binary:< file:///tmp/crls/indirectCRLCA5CRL.crl dn: CN=Invalid cRLIssuer EE Certificate Test32,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid cRLIssuer EE Certificate Test32 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidcRLIssuerTest32EE.crt dn: CN=Valid cRLIssuer EE Certificate Test33,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid cRLIssuer EE Certificate Test33 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidcRLIssuerTest33EE.crt dn: CN=Invalid cRLIssuer EE Certificate Test34,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid cRLIssuer EE Certificate Test34 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidcRLIssuerTest34EE.crt dn: CN=CRL1 for indirectCRL CA5,OU=indirectCRL CA5,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: CRL1 for indirectCRL CA5 certificateRevocationList;binary:< file:///tmp/crls/indirectCRLCA5CRL.crl dn: CN=Invalid cRLIssuer EE Certificate Test35,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid cRLIssuer EE Certificate Test35 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidcRLIssuerTest35EE.crt dn: CN=deltaCRLIndicator No Base CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: deltaCRLIndicator No Base CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/deltaCRLIndicatorNoBaseCACert.crt certificateRevocationList;binary:< file:///tmp/crls/deltaCRLIndicatorNoBaseCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/deltaCRLIndicatorNoBaseCACertforwardcrossCertificatePair.cp dn: CN=Invalid deltaCRLIndicator No Base EE Certificate Test1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid deltaCRLIndicator No Base EE Certificate Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvaliddeltaCRLIndicatorNoBaseTest1EE.crt dn: CN=deltaCRL CA1,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: deltaCRL CA1 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/deltaCRLCA1Cert.crt certificateRevocationList;binary:< file:///tmp/crls/deltaCRLCA1CRL.crl deltaRevocationList;binary:< file:///tmp/crls/deltaCRLCA1deltaCRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/deltaCRLCA1CertforwardcrossCertificatePair.cp dn: CN=Valid deltaCRL EE Certificate Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid deltaCRL EE Certificate Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValiddeltaCRLTest2EE.crt dn: CN=Invalid deltaCRL EE Certificate Test3,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid deltaCRL EE Certificate Test3 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvaliddeltaCRLTest3EE.crt dn: CN=Invalid deltaCRL EE Certificate Test4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid deltaCRL EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvaliddeltaCRLTest4EE.crt dn: CN=Valid deltaCRL EE Certificate Test5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid deltaCRL EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValiddeltaCRLTest5EE.crt dn: CN=Invalid deltaCRL EE Certificate Test6,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid deltaCRL EE Certificate Test6 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvaliddeltaCRLTest6EE.crt dn: CN=Valid deltaCRL EE Certificate Test7,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid deltaCRL EE Certificate Test7 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValiddeltaCRLTest7EE.crt dn: CN=deltaCRL CA2,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: deltaCRL CA2 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/deltaCRLCA2Cert.crt certificateRevocationList;binary:< file:///tmp/crls/deltaCRLCA2CRL.crl deltaRevocationList;binary:< file:///tmp/crls/deltaCRLCA2deltaCRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/deltaCRLCA2CertforwardcrossCertificatePair.cp dn: CN=Valid deltaCRL EE Certificate Test8,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid deltaCRL EE Certificate Test8 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValiddeltaCRLTest8EE.crt dn: CN=Invalid deltaCRL EE Certificate Test9,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid deltaCRL EE Certificate Test9 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvaliddeltaCRLTest9EE.crt dn: CN=deltaCRL CA3,O=Test Certificates 2011,C=US objectClass: cRLDistributionPoint cn: deltaCRL CA3 objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/deltaCRLCA3Cert.crt certificateRevocationList;binary:< file:///tmp/crls/deltaCRLCA3CRL.crl deltaRevocationList;binary:< file:///tmp/crls/deltaCRLCA3deltaCRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/deltaCRLCA3CertforwardcrossCertificatePair.cp dn: CN=Invalid deltaCRL EE Certificate Test10,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid deltaCRL EE Certificate Test10 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvaliddeltaCRLTest10EE.crt dn: CN=Valid Unknown Not Critical Certificate Extension EE Cert Test1,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid Unknown Not Critical Certificate Extension EE Cert Test1 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidUnknownNotCriticalCertificateExtensionTest1EE.crt dn: CN=Invalid Unknown Critical Certificate Extension EE Cert Test2,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid Unknown Critical Certificate Extension EE Cert Test2 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidUnknownCriticalCertificateExtensionTest2EE.crt dn: CN=DSA CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: DSA CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/DSACACert.crt certificateRevocationList;binary:< file:///tmp/crls/DSACACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/DSACACertforwardcrossCertificatePair.cp crossCertificatePair;binary:< file:///tmp/certpairs/DSAParametersInheritedCACertreversecrossCertificatePair.cp dn: CN=Valid DSA Signatures EE Certificate Test4,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid DSA Signatures EE Certificate Test4 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidDSASignaturesTest4EE.crt dn: CN=DSA Parameters Inherited CA,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: DSA Parameters Inherited CA objectClass: pkiCA cACertificate;binary:< file:///tmp/certs/DSAParametersInheritedCACert.crt certificateRevocationList;binary:< file:///tmp/crls/DSAParametersInheritedCACRL.crl crossCertificatePair;binary:< file:///tmp/certpairs/DSAParametersInheritedCACertforwardcrossCertificatePair.cp dn: CN=Valid DSA Parameter Inheritance EE Certificate Test5,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Valid DSA Parameter Inheritance EE Certificate Test5 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/ValidDSAParameterInheritanceTest5EE.crt dn: CN=Invalid DSA Signature EE Certificate Test6,O=Test Certificates 2011,C=US objectClass: organizationalRole cn: Invalid DSA Signature EE Certificate Test6 objectClass: pkiUser userCertificate;binary:< file:///tmp/certs/InvalidDSASignatureTest6EE.crt