letscert 0.4.0 → 0.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 2aaf92c6fdc9f696efb73eae2d3a86577b2dd37e
-  data.tar.gz: ec9885ad548b9ff43a645a2990eff2969326d646
+  metadata.gz: bf207714b90b6a7da996b80ce11c034408eedb01
+  data.tar.gz: 037d0a835588236f7046b6ca09a0936fe34473ef
 SHA512:
-  metadata.gz: 298d19dda74b12aa3b44d67d80ecbf74f26ed9d68609eb8efe6b82caa5fa7f34e3a48460949350b80c0d4abee890d6b13f0fdf32a89445d4cd25cdbe55c79379
-  data.tar.gz: f2e907cb8c7da052030e5b743419839f45623a2c612e45f0d2e5e042e5ffd2f32480711d15de6bcce09a1717aae1026b30ea1a96ca431b3da307b35621c24e31
+  metadata.gz: b2adc8ccf14ab988d0c4debd191b664a6793670b4f3218e477285e8907466c93f8689f514da0025c4d0113a0fcf00fea78a59dc4ba0345dc22fd60a1e5e62bed
+  data.tar.gz: 4e84d8553a12638d26a7444cb9760a440ae468ffa870ba3078d1678f7de39f7828224a5ad8694b4226500d292e79b3beb390a1ac90e2e13ea3f977d197d0ba94

data/.gitignore

@@ -0,0 +1,22 @@
+*~
+*.gem
+*.rbc
+/.config
+/coverage/
+/InstalledFiles
+/pkg/
+/spec/reports/
+/spec/examples.txt
+/tmp/
+Gemfile.lock
+
+## Documentation cache and generated files:
+/.yardoc/
+/_yardoc/
+/doc/
+/rdoc/
+
+## Environment normalization:
+/.bundle/
+/vendor/bundle
+/lib/bundler/man/

data/Gemfile

@@ -0,0 +1,3 @@
+source 'https://rubygems.org'
+
+gemspec

data/README.md

@@ -13,14 +13,16 @@ in Ruby.
 With full chain support (`fullchain.pem` file will contain all certificates):
 
 ```bash
-letscert -d example.com:/var/www/example.com/html --email my.name@domain.tld -f account_key.json -f key.pem -f fullchain.pem
+letscert -d example.com:/var/www/example.com/html --email my.name@domain.tld \
+  -f account_key.json -f key.pem -f fullchain.pem
 ```
 
 else (certificate for example.com is in `cert.pem` file, rest of certification chain
 is in `chain.pem`):
 
 ```bash
-letscert -d example.com:/var/www/example.com/html --email my.name@domain.tld -f account_key.json -f key.pem -f cert.pem -f chain.pem
+letscert -d example.com:/var/www/example.com/html --email my.name@domain.tld \
+  -f account_key.json -f key.pem -f cert.pem -f chain.pem
 ```
 
 Commands are the sames for certificate renewal.
@@ -30,7 +32,8 @@ Commands are the sames for certificate renewal.
 Generate a single certificate for `example.com` and `www.example.com`:
 
 ```bash
-letscert -d example.com -d www.example.com --default-root /var/www/html --email my.name@domain.tld -f account_key.json -f key.pem -f fullchain.pem
+letscert -d example.com -d www.example.com --default-root /var/www/html \
+  --email my.name@domain.tld -f account_key.json -f key.pem -f fullchain.pem
 ```
 
 Command is the same for certificate renewal.
@@ -40,7 +43,8 @@ Command is the same for certificate renewal.
 In this example, `xx` is 10:
 
 ```bash
-letscert -d example.com:/var/www/example.com/html --email my.name@domain.tld -f account_key.json -f key.pem -f cert.pem -f chain.pem --valid-min 10d
+letscert -d example.com:/var/www/example.com/html --email my.name@domain.tld \
+  -f account_key.json -f key.pem -f cert.pem -f chain.pem --valid-min 10d
 ```
 
 Valid time may also be set as number of hours (`h` suffix), minutes (`m` suffix) or
@@ -69,3 +73,16 @@ letscert -d example.com:/var/www/example.com/html --email my.name@domain.tld --r
   * 0 if certificate data was created or updated;
   * 1 if renewal not necessary;
   * 2 in case of errors.
+
+# Installation
+`letscert` is cryptographically signed. To be sure the gem you install hasn’t been tampered:
+* add my public key as a trusted certificate:
+```
+gem cert --add <(curl -Ls https://raw.github.com/metricfu/metric_fu/master/certs/gem-public_cert.pem)
+```
+* install letscert gem with a policy:
+```
+gem install letscert -P MediumSecurity
+```
+
+The MediumSecurity trust profile will verify signed gems, but allow the installation of unsigned dependencies. This is necessary because not all of letcert’s dependencies are signed, so we cannot use HighSecurity.

data/Rakefile

@@ -1,3 +1,12 @@
-Dir.glob('tasks/*.rake').each do |file|
-  load file
+require 'bundler/gem_tasks'
+require 'rspec/core/rake_task'
+require 'yard'
+
+RSpec::Core::RakeTask.new
+
+YARD::Rake::YardocTask.new do |t|
+  t.options = ['--no-private']
+  t.files = ['lib/**/*.rb', '-', 'LICENSE']
 end
+
+task :default => :spec

data/certs/gem-public_cert.pem

@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/{tasks/gem.rake → letscert.gemspec}

@@ -1,7 +1,8 @@
-require 'rubygems/package_task'
-require_relative '../lib/letscert.rb'
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'letscert/version'
 
-spec = Gem::Specification.new do |s|
+Gem::Specification.new do |s|
   s.name = 'letscert'
   s.version = LetsCert::VERSION
   s.license = 'MIT'
@@ -15,25 +16,22 @@ EOF
   s.email = 'sylvain.daubert@laposte.net'
   s.homepage = 'https://github.com/sdaubert/letscert'
 
-  files = Dir['{spec,lib,bin,tasks}/**/*']
-  files += ['README.md', 'LICENSE', 'Rakefile']
-  # For now, device is not in gem.
-  s.files = files
+  s.files = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
   s.executables = ['letscert']
+  s.require_paths = ["lib"]
 
   s.required_ruby_version = '>= 2.1.0'
 
   s.add_dependency 'acme-client', '~>0.4.0'
   s.add_dependency 'json', '~>1.8.3'
 
+  s.add_development_dependency "bundler", "~> 1.12"
+  s.add_development_dependency "rake", "~> 10.0"
   s.add_development_dependency 'rspec', '~>3.4'
   s.add_development_dependency 'vcr', '~>3.0'
-  s.add_development_dependency 'faraday', '~>0.9'
   s.add_development_dependency 'yard', '~>0.8'
-end
-
+  s.add_development_dependency 'simplecov', '~>0.12'
 
-Gem::PackageTask.new(spec) do |pkg|
-  pkg.need_zip = true
-  pkg.need_tar = true
+  s.cert_chain = [File.join(__dir__, 'certs/gem-public_cert.pem')]
+  s.signing_key = File.expand_path('~/.ssh/gem-private_key.pem')
 end

data/lib/letscert/certificate.rb

@@ -31,6 +31,9 @@ module LetsCert
 
     # @return [OpenSSL::X509::Certificate,nil]
     attr_reader :cert
+    # Certification chain. Only set by {#get}.
+    # @return [Array<OpenSSL::X509::Certificate>]
+    attr_reader :chain
     # @return [Acme::Client,nil]
     attr_reader :client
 
@@ -38,6 +41,7 @@ module LetsCert
     # @param [OpenSSL::X509::Certificate,nil] cert
     def initialize(cert)
       @cert = cert
+      @chain = []
     end
 
     # Get a new certificate, or renew an existing one
@@ -57,6 +61,8 @@ module LetsCert
     #    values
     # @option options [String] :server ACME servel URL
     # @return [void]
+    # @raise [Acme::Client::Error] error in protocol ACME with server
+    # @raise [Error] issue with domain name, challenge fails,...
     def get(account_key, key, options)
       logger.info {"create key/cert/chain..." }
       check_roots(options[:roots])
@@ -75,12 +81,15 @@ module LetsCert
 
       csr = Acme::Client::CertificateRequest.new(names: options[:roots].keys,
                                                  private_key: key)
-      cert = client.new_certificate(csr)
+      acme_cert = client.new_certificate(csr)
+      @cert = acme_cert.x509
+      @chain = acme_cert.x509_chain
 
+      options[:files] ||= []
       options[:files].each do |plugname|
         IOPlugin.registered[plugname].save(account_key: client.private_key,
-                                           key: key, cert: cert.x509,
-                                           chain: cert.x509_chain)
+                                           key: key, cert: @cert,
+                                           chain: @chain)
       end
     end
 
@@ -91,6 +100,7 @@ module LetsCert
     # @option options [String] :email e-mail used as ACME account
     # @option options [String] :server ACME servel URL
     # @return [Boolean]
+    # @raise [Error] no certificate to revole.
     def revoke(account_key, options={})
       if @cert.nil?
         raise Error, 'no certification data to revoke'
@@ -115,7 +125,8 @@ module LetsCert
     # Check if certificate is still valid for at least +valid_min+ seconds.
     # Also checks that +domains+ are certified by certificate.
     # @param [Array<String>] domains list of certificate domains
-    # @param [Integer] valid_min
+    # @param [Integer] valid_min minimum number of seconds of validity under which
+    #  a renewal is necessary.
     # @return [Boolean]
     def valid?(domains, valid_min=0)
       if @cert.nil?

data/lib/letscert/io_plugin.rb

@@ -105,6 +105,7 @@ module LetsCert
     end
 
     # @abstract
+    # @param [String] content
     # @return [Hash]
     def load_from_content(content)
       raise NotImplementedError

data/lib/letscert/loggable.rb

@@ -40,8 +40,9 @@ module LetsCert
     # @author Sylvain Daubert
     module ClassMethods
 
-      # @private hook called a subclass is created.
-      #  Take care of all subclasses to later properly set @logger class instance variable.
+      # @private hook called when a subclass is created.
+      #  Take care of all subclasses to later properly set @logger class instance
+      #  variable.
       # @param [Class] subclass
       # @return [void]
       def inherited(subclass)

data/lib/letscert/runner.rb

@@ -34,6 +34,8 @@ module LetsCert
     # Get options
     # @return [Hash]
     attr_reader :options
+    # @return [Logger]
+    attr_accessor :logger
 
     # Custom logger formatter
     class LoggerFormatter < Logger::Formatter
@@ -137,7 +139,7 @@ module LetsCert
         server: 'https://acme-v01.api.letsencrypt.org/directory',
       }
 
-      @logger = Logger.new(STDOUT)
+      @logger = Logger.new($stdout)
       @logger.formatter = LoggerFormatter.new
     end
 
@@ -206,7 +208,7 @@ module LetsCert
         msg = ex.message
         msg = "[Acme] #{msg}" if ex.is_a?(Acme::Client::Error)
         @logger.error msg
-        puts "Error: #{msg}"
+        $stderr.puts "Error: #{msg}"
         RETURN_ERROR
       end
     end

data/lib/letscert/version.rb

@@ -0,0 +1,6 @@
+module LetsCert
+
+  # Letscert version number
+  VERSION = '0.4.1'
+
+end

data/lib/letscert.rb

@@ -23,13 +23,10 @@
 # Namespace for all letcert's classes.
 module LetsCert
 
-  # Letscert version number
-  VERSION = '0.4.0'
-
-
   # Base error class
   class Error < StandardError; end
 
 end
 
+require_relative 'letscert/version'
 require_relative 'letscert/runner'

data.tar.gz.sig

@@ -0,0 +1 @@
+��6�N���cuK{���d�}]~�ۼ���:#�W�4Y�TP�_���:��̬4���V{�	5�'�Ug�u��W��������b[h7�u#[l,�qybaXԵ�S�VI1�³F�a�Y�C	

metadata

@@ -1,14 +1,37 @@
 --- !ruby/object:Gem::Specification
 name: letscert
 version: !ruby/object:Gem::Version
-  version: 0.4.0
+  version: 0.4.1
 platform: ruby
 authors:
 - Sylvain Daubert
 autorequire: 
 bindir: bin
-cert_chain: []
-date: 2016-08-14 00:00:00.000000000 Z
+cert_chain:
+- |
+  -----BEGIN CERTIFICATE-----
+  MIIDljCCAn6gAwIBAgIBATANBgkqhkiG9w0BAQUFADBIMRgwFgYDVQQDDA9zeWx2
+  YWluLmRhdWJlcnQxFzAVBgoJkiaJk/IsZAEZFgdsYXBvc3RlMRMwEQYKCZImiZPy
+  LGQBGRYDbmV0MB4XDTE2MDgxNzE1NTgzMloXDTE3MDgxNzE1NTgzMlowSDEYMBYG
+  A1UEAwwPc3lsdmFpbi5kYXViZXJ0MRcwFQYKCZImiZPyLGQBGRYHbGFwb3N0ZTET
+  MBEGCgmSJomT8ixkARkWA25ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
+  ggEBAKedOs/t5dByFo40hIuWo+NeWYZ5RBmLXladkBAZixVYKFFN1GFTTHoipXYM
+  rGY+bJvE8uEmGeLO+GUrPTWMuT1j5xH89KwJZR9u4OUhPkbGi59nIxu+ORsIuLOl
+  E0Su+CF+R4I1nRNBGyyikXs4nZ/jC1xdeSZSWctbeZzpy+XXdDns2CzSABG0LjHb
+  puipKI1CJKX05A0VPstWyzKeeDMyo2DYA1DaZ4gdhps4qHK6lD1NYDgL9aCYGFt6
+  4vQdjgYYd3kvdxaB3GBQtr3CWWnMXRVTA5B2UgE6xQOgAoIAuv9UiNk6q8vv2Nb5
+  E6dI9qaDeXFeRQ+/woBzUi53ZXsCAwEAAaOBijCBhzAJBgNVHRMEAjAAMAsGA1Ud
+  DwQEAwIEsDAdBgNVHQ4EFgQUCGw0Gvfeq8gaQ3ZGv1tVqaI/8TYwJgYDVR0RBB8w
+  HYEbc3lsdmFpbi5kYXViZXJ0QGxhcG9zdGUubmV0MCYGA1UdEgQfMB2BG3N5bHZh
+  aW4uZGF1YmVydEBsYXBvc3RlLm5ldDANBgkqhkiG9w0BAQUFAAOCAQEAAJWbF5KM
+  qV+dlc5/9Rb3ZkcvoCbt++gTxn4kOYM2/d77gRK5XoxJCHss6yGiafiYJ7qvahOi
+  VCpBS+6kfYI61OVqeqhZOSu9C+IK/ENgth6fwA5BI32rRo2HqBNz1EVNMbbvoXBH
+  wRB1VGo9x/s/gtmSyW5h+WmiwkLHYf0CGYCvncGYRH31JVWLVzJrx37P+o6jAVwI
+  5+I+dhzJKDQfMyC6ijPieuqBUgUPafTNEaWzU04UBSlCgGO8a4EBLLjvA61gtE4X
+  dMi8WSKt03lfzyxIqZseBwVYYn+XMlzCcJLXCUgZXHcBRRRDH5wGDqOqXjL25b2O
+  6m3JJngqkCFrOw==
+  -----END CERTIFICATE-----
+date: 2016-08-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: acme-client
@@ -38,6 +61,34 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 1.8.3
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.12'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.12'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -67,33 +118,33 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '3.0'
 - !ruby/object:Gem::Dependency
-  name: faraday
+  name: yard
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.9'
+        version: '0.8'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.9'
+        version: '0.8'
 - !ruby/object:Gem::Dependency
-  name: yard
+  name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.12'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.12'
 description: |
   letscert is a simple Let's Encrypt client written in Ruby. It aims at be as clean as
   simp_le.
@@ -103,31 +154,20 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
+- ".gitignore"
+- Gemfile
 - LICENSE
 - README.md
 - Rakefile
 - bin/letscert
+- certs/gem-public_cert.pem
+- letscert.gemspec
 - lib/letscert.rb
 - lib/letscert/certificate.rb
 - lib/letscert/io_plugin.rb
 - lib/letscert/loggable.rb
 - lib/letscert/runner.rb
-- spec/account_key.json
-- spec/cert.der
-- spec/cert.pem
-- spec/certificate_spec.rb
-- spec/chain.pem
-- spec/fullchain.pem
-- spec/io_plugin_spec.rb
-- spec/key.der
-- spec/key.pem
-- spec/loggable_spec.rb
-- spec/runner_spec.rb
-- spec/spec_helper.rb
-- spec/test.json
-- tasks/gem.rake
-- tasks/spec.rake
-- tasks/yard.rake
+- lib/letscert/version.rb
 homepage: https://github.com/sdaubert/letscert
 licenses:
 - MIT

metadata.gz.sig

@@ -0,0 +1,2 @@
+��QM���D:��g��#!7�j�][�v>[�sVg$�=�0r�M�������̍�2vvO�51$��4B�iCw���G�V-�0���oE#^>�٧ϰ%�>7�O�=�oM��%ؒ��
+�;�,ۼ���@E#�������ֵ��1�"Y(j֠��8�6��	���PN�|_v�jAԼ��e�Ҿ2T]�p�JJӲd0^��H>Ͼ���L�'�th>M��m濨�ġL���
T�������w+�:ٷU����

data/spec/account_key.json

@@ -1 +0,0 @@
-{"kty":"RSA","e":"AQAB","n":"ugv1o2Fg5N-RBScXrLpRRoPgDjFgHcM_BD2fHZYzXJ4k1AnspAgS-soaWuoN0WK4mwRsSGwF7cemLEA1zZiCpc6Q3WUxLDsM8oF8P_S0euAEhe8FQPON3vtNqYth2yPqAQ4-me43mZyXS94yzTrCVjowlnZsdaA54uUW0AxOD_0","d":"Qo-6zzwspVXTFYvZ7YMvRtIxnAJQR_Wtmv_M6JHvSEiQFoiCcGEvISijazlnvizarSNU9kgnit2t9xD17tuMidbqdPC0x0mkJ6BszB7lau6Nzfz6ACSqtH8eKmkGDBJTnRqzg45Z6-3-gQ9vlmvc3T029Gv7xfA-XOt_cNgFnGE","p":"7nhrSRbf6FZ6LA2FKzcdFOTSI7UlgEwWsrSC_7pyzYyXJC44crlWUDxxJJXNeC9OyOEJOXlgn-0hShAWkl9-CQ","q":"x7kFmj6GYbh0SaLeg9CFhnY-y_UMO9wFxu0NLi2JgL31gvIDrKGJYiSZ3xESi6FwpmHX_vbtFXpZXBbvMy0_VQ"}

data/spec/cert.pem

@@ -1,32 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIFmzCCBIOgAwIBAgISAVjEgN3oIZzLvwTkSOVu08NlMA0GCSqGSIb3DQEBCwUA
-MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
-ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAyMTExNzQyMDBaFw0x
-NjA1MTExNzQyMDBaMBIxEDAOBgNVBAMTB2xkNzcuZXUwggGiMA0GCSqGSIb3DQEB
-AQUAA4IBjwAwggGKAoIBgQDPpsQCigwsWHwBhKGiXb8IDDVdV2q36tIsyP2WQmZy
-G4JpasPpmVxuK2qPsYjEQRt+9VsKwOvuq1hNpQCJLtHXEweg8d4Px83WVQbcrdP5
-U3hJgPbFFI6UXyx5BtsctDdYLxxi91tKn8g7nZgEGw1/NcSXkXQ6Q1/O5zwt2CME
-/xGTASI74kR2nXhIU8ZPth52R99UpIYquy2n0cNyadgFuhNq+jWZ8ks+ZYY/b1s4
-YL6cCx9SIAvDonrZGGG01ilZJWCxjgXxwXN5o78/22vyHcoBuwiK+6vPTKZ/+zvK
-MjDXES7sM791mjgh7c+NL57SCw4D4zYq7ABmx7tCip5BGTT9n/BdoKxBK8vaU9tA
-Qe3OYYXcdXN3g9up249U/+H9Hy/fu2/BYe7CDIkEU/1kQosYYKpSJv1WAU12gb77
-k7u1DnR+5vP/EwA+/rLb9MvEuj8mA9oKnLVq6zOaY/LXxcVVXEJEktoDV+Y27VuU
-yB5J1n7OL2SXzycj693Sk/sCAwEAAaOCAjEwggItMA4GA1UdDwEB/wQEAwIFoDAd
-BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
-HQ4EFgQUtxSm/clLMtOKm+p5seP4OsvYSFEwHwYDVR0jBBgwFoAUqEpqYwR93brm
-0Tm3pkVl7/Oo7KEwcAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8v
-b2NzcC5pbnQteDEubGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDov
-L2NlcnQuaW50LXgxLmxldHNlbmNyeXB0Lm9yZy8wOwYDVR0RBDQwMoIHbGQ3Ny5l
-dYIMaW1hcC5sZDc3LmV1ggxzbXRwLmxkNzcuZXWCC3d3dy5sZDc3LmV1MIH+BgNV
-HSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcC
-ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGb
-VGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5
-aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0
-aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcv
-cmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAEUjrcJKy04CiIGMuJwdHUQ7
-25YywkoVxo7K8GnLs1uf5XREJgil2GPD6uL//U2V8FzreP/eDQFluNJSYE3F9F1b
-f2X3TOSnJnRllFputgWMiIL8BzAbrR5UgEhrsSWS0AxK5Zh3GNTFa3pjQWu6swIl
-eDAj2iJHCOuL2t33vk8G2bYdFOih0EL6WwWjrwsu4lNmjxDqKe3VOM0HJE/DBbWw
-sqhZv1UOZZl8hJ6iID/hL7Tco6r1LcH5Fsyq8Yd/qbd4+kErWEvz/CeGsMDHFgYn
-oefVSYJ7mA/lJTWdydeUTkdQ04H8s/pjtI8SKpMmVTQa+xdqsH2YMBEv8dspMzk=
------END CERTIFICATE-----