json_p3 1.0.0 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1c8afa8205821093144f9c2ccbe427e7d726251e48e8cc1480152d0efc8ade7c
-  data.tar.gz: 77639923975a6f89d10cbad38891c59015f06797f084ccaacc78073a5e4161ed
+  metadata.gz: 506b34d62097639d18aae756967a490cacd9d810ffa49361d9556149d83c8802
+  data.tar.gz: 4a5565093f304714305a7664a6f7a868aa70c0a9aa8c99a67c9ff067166edfcf
 SHA512:
-  metadata.gz: 178a01fe4d486b0d2787d46edbe93dce36a6fe6b2b30410daaa57f44da385649aad995c1187ac55253d8cdbe2448f86c73bdd56f1142ba066364c24cd9a2dfe9
-  data.tar.gz: 82d38fc46b9d1049135e79d1b3b2aae814ef65285153f5b57242021b7b9b5da5f55f2b5c092cd0e301b6f5ef0b047d59d354bb998c92fe522ecdb2804bc688e9
+  metadata.gz: a21a879a120bd3209e2066ad26d1cceac3e44686bf5fd4f5ecb939f4094156a9ee25c17d099113911dadba34dc0a9c2ff44d28c7d8680f29682ef9993f30b874
+  data.tar.gz: 49668d5a557ec389d644e5a6965f3433ac20165d724868551fb1fbda5b1c99dcab92b7bbf296ecabc2694c50ff76166d76a5e562b60c54afe0770458b5d2ff87

data/CHANGELOG.md

@@ -1,51 +1,65 @@
+## [1.0.1] - 2026-10-18
+
+- Fixed the JSON Patch `move` operation overwriting the item at its target array index instead of inserting before it, which corrupted arrays when reordering their items. [RFC 6902 section 4.4](https://datatracker.ietf.org/doc/html/rfc6902#section-4.4) defines `move` as a `remove` followed by an `add`, and [section 4.1](https://datatracker.ietf.org/doc/html/rfc6902#section-4.1) says that when an `add` targets an array index "a new value is inserted into the array at the specified index".
+- Fixed the JSON Patch `add` operation rejecting an array index equal to the length of the array. [RFC 6902 section 4.1](https://datatracker.ietf.org/doc/html/rfc6902#section-4.1) only requires that the specified index "MUST NOT be greater than the number of elements in the array", so an index equal to the length is valid and appends to the array.
+- Fixed the JSON Patch `move` and `copy` operations padding an array with `nil` when their target index was past the end of the array. Both are defined in terms of `add` (RFC 6902 [section 4.4](https://datatracker.ietf.org/doc/html/rfc6902#section-4.4) and [section 4.5](https://datatracker.ietf.org/doc/html/rfc6902#section-4.5)), whose index "MUST NOT be greater than the number of elements in the array" ([section 4.1](https://datatracker.ietf.org/doc/html/rfc6902#section-4.1)). Under [section 5](https://datatracker.ietf.org/doc/html/rfc6902#section-5), violating a normative requirement means the patch "SHALL NOT be deemed successful", so they now raise a `JSONP3::Patch::Error`, as `add` does.
+- Fixed the JSON Patch `move` and `copy` operations replacing the whole document with the moved or copied value when the parent of the target does not exist. [RFC 6902 section 4.1](https://datatracker.ietf.org/doc/html/rfc6902#section-4.1) says the object or array being added to "does need to exist, and it remains an error for that not to be the case", and `move` and `copy` inherit that from `add` ([section 4.4](https://datatracker.ietf.org/doc/html/rfc6902#section-4.4) and [section 4.5](https://datatracker.ietf.org/doc/html/rfc6902#section-4.5)). They now raise a `JSONP3::Patch::Error`.
+- Fixed the JSON Patch `move` operation silently discarding the moved value when the parent of the target is neither an array nor an object. [RFC 6902 section 4.1](https://datatracker.ietf.org/doc/html/rfc6902#section-4.1) says the target location "MUST reference one of" the document root, a member of an existing object or an element of an existing array, and [section 5](https://datatracker.ietf.org/doc/html/rfc6902#section-5) requires an operation that cannot succeed to fail the patch. It now raises a `JSONP3::Patch::Error`, as `add` and `copy` already did.
+- Fixed the JSON Patch `copy` operation not copying the value when appending it to an array with `-`, so the copy and its source shared nested arrays and objects. [RFC 6902 section 4.5](https://datatracker.ietf.org/doc/html/rfc6902#section-4.5) defines `copy` as an `add` of the value at `from`, which leaves the document with two independent values. With the shared objects, a later operation on one changed the other, and copying an array to its own end made the array contain itself.
+- Fixed JSON Patch operations targeting an object member whose name is a non-negative integer, like `/foo/1`. `add`, `copy` and `move` wrote the value under an integer key instead of the member name, duplicating the member when it already existed, `replace` added an integer key alongside the existing member, `remove` did nothing, and `move` left its source member in place. Under [RFC 6901 section 4](https://datatracker.ietf.org/doc/html/rfc6901#section-4), when a reference token is applied to an object, "the new referenced value is the object member with the name identified by the reference token". A token is only read as an array index when it is applied to an array. [RFC 8259 section 4](https://datatracker.ietf.org/doc/html/rfc8259#section-4) says "A name is a string" and "The names within an object SHOULD be unique", so a second key for the same name produced JSON with duplicate member names.
+- Fixed trailing comma detection in JSONPath bracketed segments. Previously we failed to consume whitespace after a comma and before checking for `]`.
+- Fixed JSONPath `\u` escape sequence rejection of code points less than or equal to 0x1F. The spec requires us to reject literals of 0x1F or lower, not escape sequences.
+- Fixed the JSONPath shorthand name selector to accept the full range of allow Unicode code points.
+- Fixed the JSONPath slice selector when a start index equal to the target array's length and default end and step values would result in selecting the last value in the array.
+
 ## [1.0.0] - 2026-04-21
 
 This major release includes breaking changes. No new features have been added.
 
 - Changed the JSONPath tokenizer and parser. The new parser is faster and more JIT friendly.
 - Changed our module and class layout to better separate JSONPath, JSON Pointer and JSON Patch, and to remove "stuttering". For example, previously we had `JSONP3::JSONPathEnvironment` and `JSONP3::JSONPathNode`. Now we have `JSONP3::Path::Environment` and `JSONP3::Path:Node`. This ASCII tree view show our new module and class hierarchy.
-    
-    ```
-    module JSONP3
-    ├── class Error < StandardError
-    │
-    ├── module Path                              # JSONPath (RFC 9535)
-    │   ├── class Environment                    
-    │   ├── class Query    
-    │   ├── class Node
-    │   ├── class NodeList
-    │   ├── class Error < JSONP3::Error
-    │   │    ├── class SyntaxError
-    │   │    ├── class TypeError
-    │   │    ├── class NameError
-    │   │    └── class RecursionError
-    │   ├── def self.find
-    │   ├── def self.find_enum
-    │   ├── def self.compile
-    │   ├── def self.match
-    │   ├── def self.match?
-    │   └── def self.first
-    │
-    ├── class Pointer                            # JSON Pointer (RFC 6901)
-    │   ├── class Error < JSONP3::Error
-    │   │   ├── class IndexError
-    │   │   ├── class SyntaxError
-    │   │   └── class TypeError
-    │   └── def self.resolve
-    │
-    └── class Patch                              # JSON Patch (RFC 6902)
-        ├── class OpAdd                          
-        ├── class OpCopy                          
-        ├── class OpMove                          
-        ├── class OpRemove                       
-        ├── class OpReplace                       
-        ├── class OpTest                       
-        ├── class Error < JSONP3::Error
-        │   └── class TestFailure
-        └── def !self.apply
-    ```
-
-    Note that top-level convenience methods - like `JSONP3.find` and `JSONP3.compile` - are unchanged. Most dependent projects should only need to change error class names.
+
+  ```
+  module JSONP3
+  ├── class Error < StandardError
+  │
+  ├── module Path                              # JSONPath (RFC 9535)
+  │   ├── class Environment
+  │   ├── class Query
+  │   ├── class Node
+  │   ├── class NodeList
+  │   ├── class Error < JSONP3::Error
+  │   │    ├── class SyntaxError
+  │   │    ├── class TypeError
+  │   │    ├── class NameError
+  │   │    └── class RecursionError
+  │   ├── def self.find
+  │   ├── def self.find_enum
+  │   ├── def self.compile
+  │   ├── def self.match
+  │   ├── def self.match?
+  │   └── def self.first
+  │
+  ├── class Pointer                            # JSON Pointer (RFC 6901)
+  │   ├── class Error < JSONP3::Error
+  │   │   ├── class IndexError
+  │   │   ├── class SyntaxError
+  │   │   └── class TypeError
+  │   └── def self.resolve
+  │
+  └── class Patch                              # JSON Patch (RFC 6902)
+      ├── class OpAdd
+      ├── class OpCopy
+      ├── class OpMove
+      ├── class OpRemove
+      ├── class OpReplace
+      ├── class OpTest
+      ├── class Error < JSONP3::Error
+      │   └── class TestFailure
+      └── def !self.apply
+  ```
+
+  Note that top-level convenience methods - like `JSONP3.find` and `JSONP3.compile` - are unchanged. Most dependent projects should only need to change error class names.
 
 - Renamed `JSONP3::JSONPath` to `JSONP3::Path::Query`.
 - Renamed `JSONP3::RecursiveDescentSegment` to `JSONP3::Path::DescendantSegment` to better match the spec.

data/certs/jgrp.pem

@@ -1,27 +1,27 @@
 -----BEGIN CERTIFICATE-----
 MIIEhTCCAu2gAwIBAgIBATANBgkqhkiG9w0BAQsFADBEMRYwFAYDVQQDDA1qYW1l
 c2dyLnByaW9yMRUwEwYKCZImiZPyLGQBGRYFZ21haWwxEzARBgoJkiaJk/IsZAEZ
-FgNjb20wHhcNMjUxMDI1MDc0ODI4WhcNMjYxMDI1MDc0ODI4WjBEMRYwFAYDVQQD
+FgNjb20wHhcNMjYxMDE4MTMzMTExWhcNMjcxMDE4MTMzMTExWjBEMRYwFAYDVQQD
 DA1qYW1lc2dyLnByaW9yMRUwEwYKCZImiZPyLGQBGRYFZ21haWwxEzARBgoJkiaJ
-k/IsZAEZFgNjb20wggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDYTvQW
-0JzsHenYu4w0iHgJRtU9uK8vkDx1wlMioKlPFkaiMfxqUcTTfg80U/n8n/KKmpdq
-y2rpUqv+VPE2nrfCUncf7ukqs+gF8uehbciMXV4iOzsZmqmtlPUJiGuSyO8REe/O
-ERAyxYV8y5psF+WnW4uQzsWCKTnKbexIc6rf237veuYvYoBpnodJu0mJ0m9tBCFU
-qH3Nk1sHBRIEEwn+nTiIiOMb+QMU5p0NIQkIhJO3el5nEQgIGxMPnie7PnwxPquQ
-1rouuISbLmQy5oKYc9kScwnHdAu2PtnnJFNNuQ37vED375iQgMem/tK8EgMm9/Qr
-Qxd2DQqqehgtEySWntGHTxNLXQouqHIRyqzkbcCatJqC+PBBql1x2N1KqgyvbLM3
-B0dZCdJECr5J8zrluMxYsy7uGMmLz3LZ7PskGaJg4XxXP3j/B/e03/AxDj0neZZu
-xuDLIfMDSNILO1pskMc+Xp0xdnkbS4IjiMDTrhqABuEcdNYH/GpyTiA/I0cCAwEA
-AaOBgTB/MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSwMB0GA1UdDgQWBBR4j7UhnpT9
-mLcAkshwkFtwVpMdejAiBgNVHREEGzAZgRdqYW1lc2dyLnByaW9yQGdtYWlsLmNv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 bTAiBgNVHRIEGzAZgRdqYW1lc2dyLnByaW9yQGdtYWlsLmNvbTANBgkqhkiG9w0B
-AQsFAAOCAYEAbTkg946BsGPQFX3jskBjwINeFnMP0IppuStonPQv3SNQu1SWP0xS
-o1Qji1dxkWDfOcp1ffrRMUo7ecrJbTqQ5Sdx+7zw0OLodSVqSu1LMIVDw/T73smg
-ADO2r3eZ8vxCKh7z4wUeKXvmBXi5NvpmvhH7D+qeG4OMLI8jnfmfbSHZQZbe2tpd
-tJC+MYVok/m91fBrfv5wqLsR5QiJl3vcVhG+xACd46gr3JZFOxBqpSJrCYL8Gwqx
-BaKEySCLGqkb0d1Rnt2/zTR2KtW2QJVH9rBMnJ+LsPEFKs1UHH4qHzxmwmmaQLon
-MoE4UJ51GHGrjJ4WsHOUSOy5UbjaQec3kuIDwTXKbHws0J0Ut9S4S38opZKdQHDD
-PUBpY0QA1CgE/VjKAYEDHOJyfUCNOl+sEESM+WxEXZAUVZLrFF7MljJqyQq+JyTD
-vFKHe1ZAA76NFrPscB/ODPTBK8i+u4gwrD1UAsVAHuIbOpQu4LYAujluCu5cl2A8
-HhmlCT7sTkqG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 -----END CERTIFICATE-----

data/lib/json_p3/patch/op.rb

@@ -18,6 +18,33 @@ module JSONP3
       def to_h
         raise "JSON Patch operations must implement #to_h"
       end
+
+      private
+
+      # Add _obj_ to _parent_ at _target_ following the semantics of the JSON
+      # Patch _add_ operation: insert into arrays, set object members.
+      def add_member(parent, target, obj, index)
+        if parent.is_a?(Array)
+          if target == "-"
+            parent << obj
+          elsif target.is_a?(Integer) && target <= parent.length
+            parent.insert(target, obj)
+          else
+            raise JSONP3::Patch::Error, "index out of range (#{name}:#{index})"
+          end
+        elsif parent.is_a?(Hash)
+          parent[member_key(parent, target)] = obj
+        else
+          raise JSONP3::Patch::Error, "unexpected operation on #{parent.class} (#{name}:#{index})"
+        end
+      end
+
+      # Return the key of _parent_ identified by pointer token _target_.
+      # Pointer tokens that look like array indices are integers, but object
+      # member names are strings.
+      def member_key(parent, target)
+        parent.key?(target) ? target : target.to_s
+      end
     end
   end
 end

data/lib/json_p3/patch/op_add.rb

@@ -17,7 +17,7 @@ module JSONP3
       end
 
       def apply!(value, index)
-        parent, obj = @pointer.resolve_with_parent(value)
+        parent, _obj = @pointer.resolve_with_parent(value)
         return @value if parent == JSONP3::Pointer::UNDEFINED && @pointer.tokens.empty?
 
         if parent == JSONP3::Pointer::UNDEFINED
@@ -25,21 +25,7 @@ module JSONP3
                 "no such property or item '#{@pointer.parent}' (#{name}:#{index})"
         end
 
-        target = @pointer.tokens.last
-        if parent.is_a?(Array)
-          if obj == JSONP3::Pointer::UNDEFINED
-            raise JSONP3::Patch::Error, "index out of range (#{name}:#{index})" unless target == "-"
-
-            parent << @value
-          else
-            parent.insert(target.to_i, @value)
-          end
-        elsif parent.is_a?(Hash)
-          parent[target] = @value
-        else
-          raise JSONP3::Patch::Error, "unexpected operation on #{parent.class} (#{name}:#{index})"
-        end
-
+        add_member(parent, @pointer.tokens.last, @value, index)
         value
       end
 

data/lib/json_p3/patch/op_copy.rb

@@ -26,27 +26,15 @@ module JSONP3
 
         # Find the parent of the destination pointer.
         dest_parent, _dest_obj = @pointer.resolve_with_parent(value)
-        return deep_copy(source_obj) if dest_parent == JSONP3::Pointer::UNDEFINED
+        return deep_copy(source_obj) if @pointer.tokens.empty?
 
-        dest_target = @pointer.tokens.last
-        if dest_target == JSONP3::Pointer::UNDEFINED
+        if dest_parent == JSONP3::Pointer::UNDEFINED
           raise JSONP3::Patch::Error,
-                "unexpected operation (#{name}:#{index})"
+                "no such property or item '#{@pointer.parent}' (#{name}:#{index})"
         end
 
         # Write the source value to the destination.
-        if dest_parent.is_a?(Array)
-          if dest_target == "-"
-            dest_parent << source_obj
-          else
-            dest_parent.insert(dest_target.to_i, deep_copy(source_obj))
-          end
-        elsif dest_parent.is_a?(Hash)
-          dest_parent[dest_target] = deep_copy(source_obj)
-        else
-          raise JSONP3::Patch::Error, "unexpected operation on #{dest_parent.class} (#{name}:#{index})"
-        end
-
+        add_member(dest_parent, @pointer.tokens.last, deep_copy(source_obj), index)
         value
       end
 

data/lib/json_p3/patch/op_move.rb

@@ -39,30 +39,20 @@ module JSONP3
         if source_parent.is_a?(Array)
           source_parent.delete_at(source_target.to_i)
         elsif source_parent.is_a?(Hash)
-          source_parent.delete(source_target)
+          source_parent.delete(member_key(source_parent, source_target))
         end
 
         # Find the parent of the destination pointer.
         dest_parent, _dest_obj = @pointer.resolve_with_parent(value)
-        return source_obj if dest_parent == JSONP3::Pointer::UNDEFINED
+        return source_obj if @pointer.tokens.empty?
 
-        dest_target = @pointer.tokens.last
-        if dest_target == JSONP3::Pointer::UNDEFINED
+        if dest_parent == JSONP3::Pointer::UNDEFINED
           raise JSONP3::Patch::Error,
-                "unexpected operation (#{name}:#{index})"
+                "no such property or item '#{@pointer.parent}' (#{name}:#{index})"
         end
 
         # Write the source value to the destination.
-        if dest_parent.is_a?(Array)
-          if dest_target == "-"
-            dest_parent << source_obj
-          else
-            dest_parent[dest_target.to_i] = source_obj
-          end
-        elsif dest_parent.is_a?(Hash)
-          dest_parent[dest_target] = source_obj
-        end
-
+        add_member(dest_parent, @pointer.tokens.last, source_obj, index)
         value
       end
 

data/lib/json_p3/patch/op_remove.rb

@@ -40,7 +40,7 @@ module JSONP3
         elsif parent.is_a?(Hash)
           raise JSONP3::Patch::Error, "no property to remove (#{name}:#{index})" if obj == JSONP3::Pointer::UNDEFINED
 
-          parent.delete(target)
+          parent.delete(member_key(parent, target))
         else
           raise JSONP3::Patch::Error, "unexpected operation on #{parent.class} (#{name}:#{index})"
         end

data/lib/json_p3/patch/op_replace.rb

@@ -38,7 +38,7 @@ module JSONP3
         elsif parent.is_a?(Hash)
           raise JSONP3::Patch::Error, "no property to replace (#{name}:#{index})" if obj == JSONP3::Pointer::UNDEFINED
 
-          parent[target] = @value
+          parent[member_key(parent, target)] = @value
         else
           raise JSONP3::Patch::Error, "unexpected operation on #{parent.class} (#{name}:#{index})"
         end

data/lib/json_p3/path/lexer.rb

@@ -194,7 +194,11 @@ module JSONP3
     end
 
     def self.name_first?(ch)
-      (ch >= 65 && ch <= 90) || (ch >= 97 && ch <= 122) || ch == 95 || (ch >= 0x80 && ch <= 0xffff)
+      (ch >= 65 && ch <= 90) ||
+        (ch >= 97 && ch <= 122) ||
+        ch == 95 ||
+        (ch >= 0x80 && ch <= 0xD7FF) ||
+        (ch >= 0xE000 && ch <= 0x10FFFF)
     end
 
     def self.name_ch?(ch)
@@ -202,7 +206,7 @@ module JSONP3
         (ch >= 65 && ch <= 90) ||
         (ch >= 97 && ch <= 122) ||
         ch == 95 ||
-        (ch >= 0x80 && ch <= 0xffff)
+        (ch >= 0x80 && ch <= 0x10FFFF)
     end
 
     def self.number_ch?(ch)

data/lib/json_p3/path/parser.rb

@@ -237,11 +237,12 @@ module JSONP3
           when :token_rbracket
             break
           else
-            eat(:token_comma)
+            comma_token = eat(:token_comma)
+            skip(:token_trivia)
             if peek.first == :token_rbracket
               raise SyntaxError.new(
                 "unexpected trailing comma",
-                peek,
+                comma_token,
                 @query
               )
             end
@@ -364,7 +365,7 @@ module JSONP3
         func = @env.function_extensions[name]
 
         unless func
-          raise JSONPathNameError.new(
+          raise NameError.new(
             "unknown function extension #{name}",
             token,
             @query

data/lib/json_p3/path/selector.rb

@@ -199,23 +199,15 @@ module JSONP3
         length = node.value.length
         return [] if length.zero? || @step.zero?
 
-        normalized_start = if @start.nil?
-                             @step.negative? ? length - 1 : 0
-                           elsif @start&.negative?
-                             [length + (@start || raise), 0].max
-                           else
-                             [@start || raise, length - 1].min
-                           end
-
-        normalized_stop = if @stop.nil?
-                            @step.negative? ? -1 : length
-                          elsif @stop&.negative?
-                            [length + (@stop || raise), -1].max
-                          else
-                            [@stop || raise, length].min
-                          end
+        if step.positive?
+          norm_start = normalized_index(@start, 0, length, @step)
+          norm_end = normalized_index(@stop, length, length, @step)
+        else
+          norm_start = normalized_index(@start, length - 1, length, @step)
+          norm_end = normalized_index(@stop, -1, length, @step)
+        end
 
-        (normalized_start...normalized_stop).step(@step).map { |i| node.new_child(node.value[i], i) }
+        (norm_start...norm_end).step(@step).map { |i| node.new_child(node.value[i], i) }
       end
 
       def to_s
@@ -238,6 +230,19 @@ module JSONP3
       def hash
         [@start, @stop, @step, @token].hash
       end
+
+      private
+
+      #: (Integer?, Integer, Integer, Integer) -> Integer
+      def normalized_index(num, default, length, step)
+        return default if num.nil?
+
+        if num.negative?
+          return step.negative? ? [num + length, -1].max : [num + length, 0].max
+        end
+
+        step.negative? ? [num, length - 1].min : [num, length].min
+      end
     end
 
     # Select array elements or hash values according to a filter expression.

data/lib/json_p3/path/unescape.rb

@@ -48,14 +48,6 @@ module JSONP3
             )
           end
 
-          if code_point <= 0x1f
-            raise JSONP3::Path::SyntaxError.new(
-              "invalid character #{code_point}",
-              token,
-              query
-            )
-          end
-
           unescaped << code_point.chr(Encoding::UTF_8)
           next
         end

data/lib/json_p3/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module JSONP3
-  VERSION = "1.0.0"
+  VERSION = "1.0.1"
 end

data/sig/json_p3/patch.rbs

@@ -15,6 +15,13 @@ module JSONP3
 
       # Return a JSON-like representation of this patch operation.
       def to_h: () -> untyped
+
+      # Add _obj_ to _parent_ at _target_ following the semantics of the JSON
+      # Patch _add_ operation: insert into arrays, set object members.
+      private def add_member: (untyped parent, String | Integer target, untyped obj, Integer index) -> void
+
+      # Return the key of _parent_ identified by pointer token _target_.
+      private def member_key: (Hash[untyped, untyped] parent, String | Integer target) -> (String | Integer)
     end
 
     # The JSON Patch _add_ operation.

data/sig/json_p3/path/selector.rbs

@@ -29,6 +29,9 @@ module JSONP3
       alias eql? ==
 
       def hash: () -> Integer
+              
+      #: (Integer?, Integer, Integer, Integer) -> Integer
+      def normalized_index: (Integer? num, Integer default, Integer length, Integer step) -> Integer
     end
 
     # The name selector select values from hashes given a key.

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: json_p3
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.1
 platform: ruby
 authors:
 - James Prior
@@ -11,29 +11,29 @@ cert_chain:
   -----BEGIN CERTIFICATE-----
   MIIEhTCCAu2gAwIBAgIBATANBgkqhkiG9w0BAQsFADBEMRYwFAYDVQQDDA1qYW1l
   c2dyLnByaW9yMRUwEwYKCZImiZPyLGQBGRYFZ21haWwxEzARBgoJkiaJk/IsZAEZ
-  FgNjb20wHhcNMjUxMDI1MDc0ODI4WhcNMjYxMDI1MDc0ODI4WjBEMRYwFAYDVQQD
+  FgNjb20wHhcNMjYxMDE4MTMzMTExWhcNMjcxMDE4MTMzMTExWjBEMRYwFAYDVQQD
   DA1qYW1lc2dyLnByaW9yMRUwEwYKCZImiZPyLGQBGRYFZ21haWwxEzARBgoJkiaJ
-  k/IsZAEZFgNjb20wggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDYTvQW
-  0JzsHenYu4w0iHgJRtU9uK8vkDx1wlMioKlPFkaiMfxqUcTTfg80U/n8n/KKmpdq
-  y2rpUqv+VPE2nrfCUncf7ukqs+gF8uehbciMXV4iOzsZmqmtlPUJiGuSyO8REe/O
-  ERAyxYV8y5psF+WnW4uQzsWCKTnKbexIc6rf237veuYvYoBpnodJu0mJ0m9tBCFU
-  qH3Nk1sHBRIEEwn+nTiIiOMb+QMU5p0NIQkIhJO3el5nEQgIGxMPnie7PnwxPquQ
-  1rouuISbLmQy5oKYc9kScwnHdAu2PtnnJFNNuQ37vED375iQgMem/tK8EgMm9/Qr
-  Qxd2DQqqehgtEySWntGHTxNLXQouqHIRyqzkbcCatJqC+PBBql1x2N1KqgyvbLM3
-  B0dZCdJECr5J8zrluMxYsy7uGMmLz3LZ7PskGaJg4XxXP3j/B/e03/AxDj0neZZu
-  xuDLIfMDSNILO1pskMc+Xp0xdnkbS4IjiMDTrhqABuEcdNYH/GpyTiA/I0cCAwEA
-  AaOBgTB/MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSwMB0GA1UdDgQWBBR4j7UhnpT9
-  mLcAkshwkFtwVpMdejAiBgNVHREEGzAZgRdqYW1lc2dyLnByaW9yQGdtYWlsLmNv
+  k/IsZAEZFgNjb20wggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDAXkrS
+  W5E5Ts892bcQSSt/+RoE6T7yf6rWBxWs6PSNksUM05toEX7Mmsq+u5hJ2oVit9Tp
+  /Gvpq4eANMv95vQnLmiT+1J3YauckaTB0TaArf77ytdiOxlfgYRt0Di6QmZVkinR
+  BDA9qTcsuwmia5IBG6mcjpmAoiNeBtz6jv/PqCYBitnJEW0dpaqd7r3Lmzh9B562
+  Z/kGD8nmVpA6Wj/i5PjBlhMfQ7TRdAZi4xji96gAoFo4v3JY8r8baH6ww/uT4cFC
+  O0vIh2FpSyrWT/nAqEqfjHl5XShLTUdDbcTyl5rnU1lZr66A0gl4x/gKYglYsRfO
+  xo9TPH2P0G3U+iTI/a0jeNlXi9cxZMw1LaUChB+rI9qa/xpvOYUb76pu7BJmtpp/
+  QyBHujNa0VCtCmfWJnVaR6JNPKza5VP38BPvS1YriXDnkLAxZ4ruAXrTtneQyemP
+  4umgDSJ9ESXdNfgZkGcXsNmXSU7vLYZAp4OajBhUp5hnRSw4y6HWKt8oG2kCAwEA
+  AaOBgTB/MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSwMB0GA1UdDgQWBBROcgTGvg8n
+  3d5QbkQz4JzlE7Jk0TAiBgNVHREEGzAZgRdqYW1lc2dyLnByaW9yQGdtYWlsLmNv
   bTAiBgNVHRIEGzAZgRdqYW1lc2dyLnByaW9yQGdtYWlsLmNvbTANBgkqhkiG9w0B
-  AQsFAAOCAYEAbTkg946BsGPQFX3jskBjwINeFnMP0IppuStonPQv3SNQu1SWP0xS
-  o1Qji1dxkWDfOcp1ffrRMUo7ecrJbTqQ5Sdx+7zw0OLodSVqSu1LMIVDw/T73smg
-  ADO2r3eZ8vxCKh7z4wUeKXvmBXi5NvpmvhH7D+qeG4OMLI8jnfmfbSHZQZbe2tpd
-  tJC+MYVok/m91fBrfv5wqLsR5QiJl3vcVhG+xACd46gr3JZFOxBqpSJrCYL8Gwqx
-  BaKEySCLGqkb0d1Rnt2/zTR2KtW2QJVH9rBMnJ+LsPEFKs1UHH4qHzxmwmmaQLon
-  MoE4UJ51GHGrjJ4WsHOUSOy5UbjaQec3kuIDwTXKbHws0J0Ut9S4S38opZKdQHDD
-  PUBpY0QA1CgE/VjKAYEDHOJyfUCNOl+sEESM+WxEXZAUVZLrFF7MljJqyQq+JyTD
-  vFKHe1ZAA76NFrPscB/ODPTBK8i+u4gwrD1UAsVAHuIbOpQu4LYAujluCu5cl2A8
-  HhmlCT7sTkqG
+  AQsFAAOCAYEAZLTr3Z6ZNmlI+AT9ci2wCC7A74OVNME8eZaqcBxGuXE/9jWycIQX
+  RTggqZcofJpgKNMFIrelQDCa/Jf3fbCtdVfbcEb6vITlr7Zt/M/mHzu/QjjIFpmT
+  gTXlP8APjoQxWaRrhOAm5nbgwYKrOPdLtBu3uzN3PAhbZQlLHyM49bWSux75Ibxy
+  nL0cYGR05H3ym7U9XRRuEExHJ0gCW67CwchWNav0yEgeko5Sn3BSjMISBdy9jF5c
+  bJgFKiVQFTN+5+uHtBUu5YrtCgsMTgr09g6DgpUUlALHOyg7+XEp/MeqZqE3g5Qu
+  JubJmxfW7PrLuyBLkHeIxpvVdpORTaH3/U5qb45XPJ1z2IHC91IlBIoFSOsDrCrL
+  kPjfyWVsL/uWyRIDnXRoTTepSBND6NmHrGWuTiYDB7r/Yeqj714R6GF1qe2jZlDW
+  yE12qcU40zRwg3LPrEwjuaF4Lo29G666PBWxGcLbakvRUDuO5GG5rqJydmX2KV/J
+  NlOr4XEE+abN
   -----END CERTIFICATE-----
 date: 1980-01-02 00:00:00.000000000 Z
 dependencies: []