Fix test now emailAddress is in the dictionary

diff --git a/src/tests/unit/protocols/der/x509certs.txt b/src/tests/unit/protocols/der/x509certs.txt
index 7386952ae7ceaf41af05480c98e4a48fb94f6ccd..a866bfadf4a8378678b3ebd9f58d8c44d569d5f9 100644 (file)
--- a/src/tests/unit/protocols/der/x509certs.txt
+++ b/src/tests/unit/protocols/der/x509certs.txt
@@ -15,7 +15,7 @@ decode-pair 30 82 06 17 30 82 05 9d a0 03 02 01 02 02 13 33 00 00 4a 3e 86 50 65
 match Certificate = { tbsCertificate = { version = { number = 2 }, serialNumber = 0x3300004a3e865065e681d8c87b000000004a3e, signature = { iso = { member-body = { us = { ansi-x962 = { signatures = { ecdsa-with-SHA2 = { ecdsa-with-SHA384 = no } } } } } } }, issuer = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Microsoft Corporation" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { commonName = "Microsoft Azure ECC TLS Issuing CA 07" } } } } } }, validity = { notBefore = "2024-10-28T20:33:13Z", notAfter = "2025-10-23T20:33:13Z" }, subject = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "WA" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "Redmond" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Microsoft Corporation" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { commonName = "learn.microsoft.com" } } } } } }, subjectPublicKeyInfo = { algorithm = { iso = { member-body = { us = { ansi-x962 = { keyType = { ecPublicKey = "1.2.840.10045.3.1.7" } } } } } }, subjectPublicKey = 0x0004bc91b52505f2a21efe022322ca0253341ee996073dfd10f9f7d30ebdafe3c3fba79f3ef7e8ccbe9cf299a515d279e3a0439c03c9c190eb2aa63ef8ac457c2607 }, extensions = { Critical = { joint-iso-itu-t = { ds = { certificateExtension = { keyUsage = { digitalSignature = yes, nonRepudation = no, keyEncipherment = no, dataEncipherment = no, keyAgreement = no, keyCertSign = no, cRLSign = no, encipherOnly = no } } } }, joint-iso-itu-t = { ds = { certificateExtension = { basicConstraints = { cA = no } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.11129 = { raw.2 = { raw.4 = { raw.2 = 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 } } } } } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.311 = { raw.21 = { raw.10 = 0x3018300a06082b06010505070302300a06082b06010505070301 } } } } } } } }, iso = { identified-organization = { dod = { internet = { raw.4 = { raw.1 = { raw.311 = { raw.21 = { raw.7 = 0x302d06252b060104018237150887bdd71b81e7eb4682819d2e8ed00c87f0da1d5d8284e56982f3a73e020164020126 } } } } } } } }, iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { pe = { authorityInfoAccess = { accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.2", accessLocation = { uniformResourceIdentifier = "http://www.microsoft.com/pkiops/certs/Microsoft\%20Azure\%20ECC\%20TLS\%20Issuing\%20CA\%2007\%20-\%20xsign.crt" } }, accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.1", accessLocation = { uniformResourceIdentifier = "http://oneocsp.microsoft.com/ocsp" } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectKeyIdentifier = 0x66049738476c00117e167457b78b2eae04332c56 } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectAltName = { dNSName = "www.learn.microsoft.com", dNSName = "learn.microsoft.com" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { CRLDIstributionPoints = { distributionPoint = { distributionPointName = { fullName = { uniformResourceIdentifier = "http://www.microsoft.com/pkiops/crl/Microsoft\%20Azure\%20ECC\%20TLS\%20Issuing\%20CA\%2007.crl" } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { certificatePolicies = { policyInformation = { policyIdentifier = "1.3.6.1.4.1.311.76.509.1.1", policyQualifiers = { policyQualifierInfo = { iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { qualifier = { cpsuri = "http://www.microsoft.com/pkiops/Docs/Repository.htm" } } } } } } } } } } }, policyInformation = { policyIdentifier = "2.23.140.1.2.2" } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { authorityKeyIdentifier = { keyIdentifier = 0xc35eac4076c0064de32b9499306073349829c651 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { extKeyUsage = { keyPurposeId = "1.3.6.1.5.5.7.3.2", keyPurposeId = "1.3.6.1.5.5.7.3.1" } } } } } }, signatureAlgorithm = { iso = { member-body = { us = { ansi-x962 = { signatures = { ecdsa-with-SHA2 = { ecdsa-with-SHA384 = no } } } } } } }, signature = 0x003065023046da82e0401eeda271cc45245c26fa8091a8cf4932a71c81f279247adedd19bc628d8abfe19acdd6f416b1e1562d239d0231009718e1459ef93bcb67c06e388670ab384993ade226b0d07336ba5346d08f3fca553e9cdff5f40ea367e1ccfea9a35089 }
 
 decode-pair 30 82 06 22 30 82 05 0a a0 03 02 01 02 02 14 04 63 6f 8c 80 f7 fc f6 c2 53 c3 b1 e5 1a 9f 83 90 21 63 b6 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 75 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 0c 0a 43 61 6c 69 66 6f 72 6e 69 61 31 16 30 14 06 03 55 04 07 0c 0d 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 31 15 30 13 06 03 55 04 0a 0c 0c 45 78 61 6d 70 6c 65 20 43 6f 72 70 31 22 30 20 06 09 2a 86 48 86 f7 0d 01 09 01 16 13 65 78 61 6d 70 6c 65 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 1e 17 0d 32 35 30 31 31 37 31 35 31 30 34 31 5a 17 0d 32 35 30 32 31 36 31 35 31 30 34 31 5a 30 75 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 0c 0a 43 61 6c 69 66 6f 72 6e 69 61 31 16 30 14 06 03 55 04 07 0c 0d 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 31 15 30 13 06 03 55 04 0a 0c 0c 45 78 61 6d 70 6c 65 20 43 6f 72 70 31 22 30 20 06 09 2a 86 48 86 f7 0d 01 09 01 16 13 65 78 61 6d 70 6c 65 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 c8 fe a4 8b f8 64 a8 ff 53 1d a1 9e bf b9 0f bd 64 b3 51 f0 bb ed bb b2 a6 0e 8d 64 9f 0c 88 e5 20 11 8a a2 57 af bc d0 ae 33 90 ad 55 e3 b7 f3 56 e6 ba 53 4c 59 a9 40 ce 49 bf de 50 61 95 e1 a5 29 c7 c6 55 3b 90 70 37 e7 7a 40 8d 4b 41 5c 56 0f 26 20 c7 53 8b d5 f8 3d 29 6a 45 7c ff d6 da d4 9d 97 b7 12 9e 55 48 4d 6a 96 c4 fe 13 8a 55 0a 5c 23 13 32 e1 84 99 37 08 c3 e0 1d 0d fc be 37 0b e1 1c be 42 bc 99 2f 33 c6 4c c0 0e 04 77 61 9f 22 91 9f 1c ba c5 23 30 e5 73 c0 8b c1 77 d4 c1 1a b7 24 1e 7d c2 81 41 20 62 89 41 05 2f d3 4e a8 c8 92 1f dd d1 03 31 05 0f a0 ce 6d 28 a4 e9 ff cb d1 7d 27 c9 08 aa 2c 87 04 ea b5 f3 1d 6e 98 ad 80 aa a6 49 ca e8 83 08 58 63 f5 8c 02 42 ba 66 26 bb 6a 44 29 eb 88 ab 13 04 7c 58 ed 07 56 54 2b d6 f8 28 73 3a ad 33 ae 37 8b 02 03 01 00 01 a3 82 02 a8 30 82 02 a4 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 03 a8 30 1d 06 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 03 01 06 08 2b 06 01 05 05 07 03 02 30 0f 06 03 55 1d 13 01 01 ff 04 05 30 03 01 01 ff 30 27 06 03 55 1d 11 04 20 30 1e 82 0b 65 78 61 6d 70 6c 65 2e 63 6f 6d 82 0f 77 77 77 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 27 06 03 55 1d 1f 04 20 30 1e 30 1c a0 1a a0 18 86 16 68 74 74 70 3a 2f 2f 65 78 61 6d 70 6c 65 2e 63 6f 6d 2f 63 72 6c 30 33 06 08 2b 06 01 05 05 07 01 01 04 27 30 25 30 23 06 08 2b 06 01 05 05 07 30 01 86 17 68 74 74 70 3a 2f 2f 65 78 61 6d 70 6c 65 2e 63 6f 6d 2f 6f 63 73 70 30 1d 06 03 55 1d 0e 04 16 04 14 d1 ae 81 f4 07 4f ed 5a be 29 c7 1a 17 91 54 cd d3 9e 1a 1a 30 81 9c 06 03 55 1d 23 04 81 94 30 81 91 a1 79 a4 77 30 75 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 0c 0a 43 61 6c 69 66 6f 72 6e 69 61 31 16 30 14 06 03 55 04 07 0c 0d 53 61 6e 20 46 72 61 6e 63 69 73 63 6f 31 15 30 13 06 03 55 04 0a 0c 0c 45 78 61 6d 70 6c 65 20 43 6f 72 70 31 22 30 20 06 09 2a 86 48 86 f7 0d 01 09 01 16 13 65 78 61 6d 70 6c 65 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 82 14 04 63 6f 8c 80 f7 fc f6 c2 53 c3 b1 e5 1a 9f 83 90 21 63 b6 30 7c 06 03 55 1d 20 04 75 30 73 30 71 06 04 2a 03 04 05 30 69 30 22 06 08 2b 06 01 05 05 07 02 01 16 16 68 74 74 70 3a 2f 2f 65 78 61 6d 70 6c 65 2e 63 6f 6d 2f 63 70 73 30 43 06 08 2b 06 01 05 05 07 02 02 30 37 30 21 1a 11 4f 72 67 61 6e 69 73 61 74 69 6f 6e 20 4e 61 6d 65 30 0c 02 01 01 02 01 02 02 01 03 02 01 04 1a 12 45 78 70 6c 69 63 69 74 20 54 65 78 74 20 48 65 72 65 30 27 06 03 55 1d 12 04 20 30 1e 82 0b 65 78 61 6d 70 6c 65 2e 63 6f 6d 82 0f 77 77 77 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 33 06 03 55 1d 1c 01 01 ff 04 29 30 27 a0 1e a0 1c 86 1a 68 74 74 70 3a 2f 2f 6d 79 68 6f 73 74 2e 63 6f 6d 2f 6d 79 63 61 2e 63 72 6c 83 02 05 60 84 01 ff 30 0c 06 03 55 1d 24 04 05 30 03 80 01 01 30 0a 06 03 55 1d 36 04 03 02 01 02 30 27 06 08 2b 06 01 05 05 07 01 0b 04 1b 30 19 30 17 06 08 2b 06 01 05 05 07 30 02 86 0b 65 78 61 6d 70 6c 65 2e 63 6f 6d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 6a 02 d2 76 67 ba 04 a4 c5 fd ea d5 4f 42 ff 2e 63 b9 89 0a 28 a3 6f 51 3a 2f 48 df a3 30 58 ab 82 6a d3 be 45 2f c9 db 50 d0 f5 b7 d7 e9 77 85 23 e4 44 65 63 1d 1f 31 61 8b 69 85 e2 3c c5 15 a9 23 dd d4 b5 2a bc 7a ea 77 e7 22 eb e0 20 a1 30 0b 11 dc 98 d4 d7 1a 03 98 10 25 66 7d af 2d 9e 89 01 db 35 0e 86 f9 b6 d9 f5 ee 1e 20 b3 8c 4c 05 bf eb 04 2b 2c da a3 b5 58 2d 26 8a 97 43 df 2d 4e 56 e8 c5 d7 86 f3 08 71 e8 ca 17 6f 66 fc 96 8e c6 b8 c8 13 0d 42 a4 18 6e a6 2a 06 73 4a 50 21 fa 7a 3f d3 35 25 bc 45 87 bf e9 27 10 2b 99 55 9f b6 01 c5 e0 8a 4f 8b 49 00 32 ed 4c fa 50 b0 53 8f a3 79 c4 66 d5 5b 54 c3 ee 93 77 24 db 4c 8d e8 58 ec a8 64 f5 91 9c d5 94 29 11 fc 8e 3c 32 fc a5 d2 4d 4d 17 85 e8 3c a4 dd ff 64 94 0d 0d 6f 1f f8 64 87 2a 8b 15 8d 04 e6 62
-match Certificate = { tbsCertificate = { version = { number = 2 }, serialNumber = 0x04636f8c80f7fcf6c253c3b1e51a9f83902163b6, signature = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { sha256WithRSAEncryption = no } } } } } } }, issuer = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "California" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "San Francisco" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Example Corp" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { iso = { member-body = { us = { rsadsi = { pkcs = { raw.9 = { raw.1 = 0x16136578616d706c65406578616d706c652e636f6d } } } } } } } } }, validity = { notBefore = "2025-01-17T15:10:41Z", notAfter = "2025-02-16T15:10:41Z" }, subject = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "California" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "San Francisco" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Example Corp" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { iso = { member-body = { us = { rsadsi = { pkcs = { raw.9 = { raw.1 = 0x16136578616d706c65406578616d706c652e636f6d } } } } } } } } }, subjectPublicKeyInfo = { algorithm = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { rsaEncryption = no } } } } } } }, subjectPublicKey = 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 }, extensions = { Critical = { joint-iso-itu-t = { ds = { certificateExtension = { keyUsage = { digitalSignature = yes, nonRepudation = no, keyEncipherment = yes, dataEncipherment = no, keyAgreement = yes, keyCertSign = no, cRLSign = no, encipherOnly = no } } } }, joint-iso-itu-t = { ds = { certificateExtension = { basicConstraints = { cA = yes } } } }, joint-iso-itu-t = { ds = { certificateExtension = { raw.28 = 0x3027a01ea01c861a687474703a2f2f6d79686f73742e636f6d2f6d7963612e63726c830205608401ff } } } }, joint-iso-itu-t = { ds = { certificateExtension = { extKeyUsage = { keyPurposeId = "1.3.6.1.5.5.7.3.1", keyPurposeId = "1.3.6.1.5.5.7.3.2" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectAltName = { dNSName = "example.com", dNSName = "www.example.com" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { CRLDIstributionPoints = { distributionPoint = { distributionPointName = { fullName = { uniformResourceIdentifier = "http://example.com/crl" } } } } } } }, iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { pe = { authorityInfoAccess = { accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.1", accessLocation = { uniformResourceIdentifier = "http://example.com/ocsp" } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectKeyIdentifier = 0xd1ae81f4074fed5abe29c71a179154cdd39e1a1a } } }, joint-iso-itu-t = { ds = { certificateExtension = { authorityKeyIdentifier = { authorityCertIssuer = { directoryName = { RDNSequence = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "California" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "San Francisco" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Example Corp" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { iso = { member-body = { us = { rsadsi = { pkcs = { raw.9 = { raw.1 = 0x16136578616d706c65406578616d706c652e636f6d } } } } } } } } } } }, authorityCertSerialNumber = 0x04636f8c80f7fcf6c253c3b1e51a9f83902163b6 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { certificatePolicies = { policyInformation = { policyIdentifier = "1.2.3.4.5", policyQualifiers = { policyQualifierInfo = { iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { qualifier = { cpsuri = "http://example.com/cps" } } } } } } } } }, policyQualifierInfo = { iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { qualifier = { userNotice = { noticeRef = { explicitText = "Organisation Name", noticeNumbers = { number = 1, number = 2, number = 3, number = 4 } } } } } } } } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { issuerAltName = { dNSName = "example.com", dNSName = "www.example.com" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { policyConstraints = { requireExplicitPolicy = 0x01 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { inhibitAnyPolicy = 2 } } }, iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { pe = { subjectInfoAccess = { accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.2", accessLocation = { uniformResourceIdentifier = "example.com" } } } } } } } } } } } } }, signatureAlgorithm = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { sha256WithRSAEncryption = no } } } } } } }, signature = 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 }
+match Certificate = { tbsCertificate = { version = { number = 2 }, serialNumber = 0x04636f8c80f7fcf6c253c3b1e51a9f83902163b6, signature = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { sha256WithRSAEncryption = no } } } } } } }, issuer = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "California" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "San Francisco" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Example Corp" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-9 = { emailAddress = "example@example.com" } } } } } } } } }, validity = { notBefore = "2025-01-17T15:10:41Z", notAfter = "2025-02-16T15:10:41Z" }, subject = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "California" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "San Francisco" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Example Corp" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-9 = { emailAddress = "example@example.com" } } } } } } } } }, subjectPublicKeyInfo = { algorithm = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { rsaEncryption = no } } } } } } }, subjectPublicKey = 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 }, extensions = { Critical = { joint-iso-itu-t = { ds = { certificateExtension = { keyUsage = { digitalSignature = yes, nonRepudation = no, keyEncipherment = yes, dataEncipherment = no, keyAgreement = yes, keyCertSign = no, cRLSign = no, encipherOnly = no } } } }, joint-iso-itu-t = { ds = { certificateExtension = { basicConstraints = { cA = yes } } } }, joint-iso-itu-t = { ds = { certificateExtension = { raw.28 = 0x3027a01ea01c861a687474703a2f2f6d79686f73742e636f6d2f6d7963612e63726c830205608401ff } } } }, joint-iso-itu-t = { ds = { certificateExtension = { extKeyUsage = { keyPurposeId = "1.3.6.1.5.5.7.3.1", keyPurposeId = "1.3.6.1.5.5.7.3.2" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectAltName = { dNSName = "example.com", dNSName = "www.example.com" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { CRLDIstributionPoints = { distributionPoint = { distributionPointName = { fullName = { uniformResourceIdentifier = "http://example.com/crl" } } } } } } }, iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { pe = { authorityInfoAccess = { accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.1", accessLocation = { uniformResourceIdentifier = "http://example.com/ocsp" } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { subjectKeyIdentifier = 0xd1ae81f4074fed5abe29c71a179154cdd39e1a1a } } }, joint-iso-itu-t = { ds = { certificateExtension = { authorityKeyIdentifier = { authorityCertIssuer = { directoryName = { RDNSequence = { RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { countryName = "US" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { stateOrProvinceName = "California" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { localityName = "San Francisco" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { joint-iso-itu-t = { ds = { attributeType = { organizationName = "Example Corp" } } } } }, RelativeDistinguishedName = { AttributeTypeAndValue = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-9 = { emailAddress = "example@example.com" } } } } } } } } } } }, authorityCertSerialNumber = 0x04636f8c80f7fcf6c253c3b1e51a9f83902163b6 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { certificatePolicies = { policyInformation = { policyIdentifier = "1.2.3.4.5", policyQualifiers = { policyQualifierInfo = { iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { qualifier = { cpsuri = "http://example.com/cps" } } } } } } } } }, policyQualifierInfo = { iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { qualifier = { userNotice = { noticeRef = { explicitText = "Organisation Name", noticeNumbers = { number = 1, number = 2, number = 3, number = 4 } } } } } } } } } } } } } } } } } }, joint-iso-itu-t = { ds = { certificateExtension = { issuerAltName = { dNSName = "example.com", dNSName = "www.example.com" } } } }, joint-iso-itu-t = { ds = { certificateExtension = { policyConstraints = { requireExplicitPolicy = 0x01 } } } }, joint-iso-itu-t = { ds = { certificateExtension = { inhibitAnyPolicy = 2 } } }, iso = { identified-organization = { dod = { internet = { security = { mechanisms = { pkix = { pe = { subjectInfoAccess = { accessDescription = { accessMethod = "1.3.6.1.5.5.7.48.2", accessLocation = { uniformResourceIdentifier = "example.com" } } } } } } } } } } } } }, signatureAlgorithm = { iso = { member-body = { us = { rsadsi = { pkcs = { pkcs-1 = { sha256WithRSAEncryption = no } } } } } } }, signature = 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 }
 
 proto-dictionary der