money-tree 0.11.1 → 0.11.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a817c56d0f39bc09f84b1dd02d9e828a9b3fd4d93500d7f6e9cd4ead322c7355
-  data.tar.gz: 1e8de14764b5ddf911769e537b99eb4b9f3ce2e91e6dff9ffc2cef923214d156
+  metadata.gz: 53b2d866f0baa17b011631e360bda7c118100ce772cb2ce7b681ac03381b5f3e
+  data.tar.gz: dc39341115ffc116c132e1f030084eafced123506af17943f19e4c1bd0847841
 SHA512:
-  metadata.gz: d2d89e5ffa65f7781a7ff35c830da95614b22e743a24ce5662f4f952dd18685ba9b5a18078fb5bc0a45c1527bb66e32473a5d8453a0a87026e7d5625dbd940d0
-  data.tar.gz: 1355fe75f77593dec9c191e9c1d91f4a1f5205fe8e6f01600298311a17c070f25002c8ed0889166125b5879ce9b03675e476f2cf64b5a6f03e19b01886a4506f
+  metadata.gz: 3d4c68b7ef831c84b48c68e715007dbb16002c7a148c681d5db192216fd4be33f1767dd2a93cab0c09d87722fb7af475aa766e2bf4a561c76302ccf36747c7ca
+  data.tar.gz: 3019c78a855717e4d98b2f7f4d7a0458aac6c880fed23e6f81ae74587b9f0c4d2e122357ee95a481bb253b45e71b8f9e9c339cd367c2ccf1fd128131c326a2d7

data/.github/workflows/code.yml

@@ -0,0 +1,44 @@
+---
+name: CodeQL
+
+on:
+  pull_request:
+    branches:
+      - master
+  push:
+    branches:
+      - master
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    strategy:
+      fail-fast: false
+      matrix:
+        language:
+          - ruby
+    steps:
+      - name: "Checkout repository"
+        uses: actions/checkout@v3
+      - name: "Initialize CodeQL"
+        uses: github/codeql-action/init@v2
+        with:
+          languages: "${{ matrix.language }}"
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v2
+      - name: "Perform CodeQL Analysis"
+        uses: github/codeql-action/analyze@v2
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: '3.0'
+          bundler-cache: true
+      - name: "Run rufo code formatting checks"
+        run: |
+          gem install rufo
+          rufo --check ./lib
+          rufo --check ./spec

data/.github/workflows/docs.yml

@@ -0,0 +1,26 @@
+---
+name: Docs
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  docs:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2
+    - uses: ruby/setup-ruby@v1
+      with:
+        ruby-version: '3.0'
+        bundler-cache: true
+    - name: Run Yard Doc
+      run: |
+        gem install yard
+        yard doc
+    - name: Deploy GH Pages
+      uses: JamesIves/github-pages-deploy-action@4.4.1
+      with:
+          branch: gh-pages
+          folder: doc/

data/.github/workflows/spec.yml

@@ -15,8 +15,8 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest, macos-latest]
-        ruby: ['2.7', '3.0']
+        os: [ubuntu-22.04, macos-12]
+        ruby: ['3.0', '3.1', '3.2']
     steps:
     - uses: actions/checkout@v2
     - uses: ruby/setup-ruby@v1

data/Gemfile

@@ -1,16 +1,15 @@
 source "https://rubygems.org"
 
-gem "openssl", "~> 3.0"
-gem "bech32", "~> 1.2"
-
 group :test, :development do
   gem "bundler", "~> 2.2"
   gem "codecov", "~> 0.6"
   gem "pry", "~> 0.14"
   gem "rake", "~> 13.0"
-  gem "rdoc", "~> 6.3"
-  gem "rspec", "~> 3.10"
+  gem "rdoc", "~> 6.5"
+  gem "rspec", "~> 3.12"
   gem "rufo", "~> 0.13"
   gem "simplecov", "~> 0.21"
   gem "yard", "~> 0.9"
 end
+
+gemspec

data/LICENSE.txt

@@ -1,4 +1,4 @@
-Copyright (c) 2013 Micah Winkelspecht
+Copyright (c) 2013-23 Micah Winkelspecht
 
 MIT License
 

data/checksum/money-tree-0.11.0.gem.sha512

@@ -1 +1 @@
-cc59abeb70c300eb32c0562dea582de4d26da71cb3fac9937fb3b88fd7092177c98ccbdf6eba7517c3dbc14b33f15e95bf799a02adfec5c12583cb9179c68bb7
+fdc5329fa932c085d66ae40a7a9d730876b9a68a17932f0cd824c74a0562fafbfdc8fb2a3f92011138854ffbf7422bb8919e042dba46bcb55e11755bcf2bb5fb

data/checksum/money-tree-0.11.1.gem.sha512

@@ -0,0 +1 @@
+eb2346654c00b8506127ac5a2e87a04ebdc2bcde9221fe1f9707c4d1522cc9280206aeca41a3a2a9430db4d8bcef0f7c27e95ef23755b54bcdda991e6886f067

data/config/openssl.conf

@@ -0,0 +1,14 @@
+openssl_conf = openssl_init
+
+[openssl_init]
+providers = provider_sect
+
+[provider_sect]
+default = default_sect
+legacy = legacy_sect
+
+[default_sect]
+activate = 1
+
+[legacy_sect]
+activate = 1

data/lib/money-tree/key.rb

@@ -39,31 +39,38 @@ module MoneyTree
   class PrivateKey < Key
     def initialize(opts = {})
       @options = opts
-      @ec_key = PKey::EC.new GROUP_NAME
+      generate
       if @options[:key]
         @raw_key = @options[:key]
         @key = parse_raw_key
         import
       else
-        generate
         @key = to_hex
       end
     end
 
     def generate
-      ec_key.generate_key
+      @ec_key = PKey::EC.generate GROUP_NAME
     end
 
     def import
-      ec_key.private_key = BN.new(key, 16)
-      set_public_key
+      @ec_key = OpenSSL::PKey::EC.new(data_sequence.to_der)
+    end
+
+    def data_sequence
+      OpenSSL::ASN1::Sequence([
+        OpenSSL::ASN1::Integer(1),
+        OpenSSL::ASN1::OctetString(OpenSSL::BN.new(key, 16).to_s(2)),
+        OpenSSL::ASN1::ObjectId(GROUP_NAME, 0, :EXPLICIT),
+        OpenSSL::ASN1::BitString(calculate_public_key.to_octet_string(:uncompressed), 1, :EXPLICIT),
+      ])
     end
 
     def calculate_public_key(opts = {})
       opts[:compressed] = true unless opts[:compressed] == false
       group = ec_key.group
       group.point_conversion_form = opts[:compressed] ? :compressed : :uncompressed
-      point = group.generator.mul ec_key.private_key
+      point = group.generator.mul OpenSSL::BN.new(key, 16)
     end
 
     def set_public_key(opts = {})

data/lib/money-tree/node.rb

@@ -11,6 +11,8 @@ module MoneyTree
     attr_reader :index
     attr_reader :parent
 
+    PRIVATE_RANGE_LIMIT = 0x80000000
+
     class PublicDerivationFailure < StandardError; end
     class InvalidKeyForIndex < StandardError; end
     class ImportError < StandardError; end
@@ -46,7 +48,7 @@ module MoneyTree
     end
 
     def is_private?
-      index >= 0x80000000 || index < 0
+      index >= PRIVATE_RANGE_LIMIT || index < 0
     end
 
     def index_hex(i = index)
@@ -74,7 +76,7 @@ module MoneyTree
     end
 
     def derive_private_key(i = 0)
-      message = i >= 0x80000000 || i < 0 ? private_derivation_message(i) : public_derivation_message(i)
+      message = i >= PRIVATE_RANGE_LIMIT || i < 0 ? private_derivation_message(i) : public_derivation_message(i)
       hash = hmac_sha512 hex_to_bytes(chain_code_hex), message
       left_int = left_from_hash(hash)
       raise InvalidKeyForIndex, "greater than or equal to order" if left_int >= MoneyTree::Key::ORDER # very low probability
@@ -84,8 +86,19 @@ module MoneyTree
       return child_private_key, child_chain_code
     end
 
+    def derive_parent_node(parent_key)
+      message = parent_key.public_key.to_bytes << i_as_bytes(index)
+      hash = hmac_sha512 hex_to_bytes(parent_key.chain_code_hex), message
+      priv = (private_key.to_i - left_from_hash(hash)) % MoneyTree::Key::ORDER
+      MoneyTree::Node.new(depth: parent_key.depth,
+                          index: parent_key.index,
+                          private_key: MoneyTree::PrivateKey.new(key: priv),
+                          public_key: parent_key.public_key,
+                          chain_code: parent_key.chain_code)
+    end
+
     def derive_public_key(i = 0)
-      raise PrivatePublicMismatch if i >= 0x80000000
+      raise PrivatePublicMismatch if i >= PRIVATE_RANGE_LIMIT
       message = public_derivation_message(i)
       hash = hmac_sha512 hex_to_bytes(chain_code_hex), message
       left_int = left_from_hash(hash)
@@ -210,17 +223,19 @@ module MoneyTree
       end
     end
 
-    def parse_index(path_part)
-      is_prime = %w(p ').include? path_part[-1]
-      i = path_part.to_i
+    def negative?(path_part)
+      relative_index = path_part.to_i
+      prime_symbol_present = %w(p ').include?(path_part[-1])
+      minus_present = path_part[0] == "-"
+      private_range = relative_index >= PRIVATE_RANGE_LIMIT
+      negative_value = relative_index < 0
+      prime_symbol_present || minus_present || private_range || negative_value
+    end
 
-      i = if i < 0
-          i
-        elsif is_prime
-          i | 0x80000000
-        else
-          i & 0x7fffffff
-        end
+    def parse_index(path_part)
+      index = path_part.to_i
+      return index | PRIVATE_RANGE_LIMIT if negative?(path_part)
+      index
     end
 
     def strip_private_info!

data/lib/money-tree/version.rb

@@ -1,3 +1,3 @@
 module MoneyTree
-  VERSION = "0.11.1"
+  VERSION = "0.11.2"
 end

data/money-tree.gemspec

@@ -26,5 +26,8 @@ Gem::Specification.new do |spec|
   }.freeze
 
   spec.platform = Gem::Platform::RUBY
-  spec.required_ruby_version = ">= 2.6", "< 4.0"
+  spec.required_ruby_version = ">= 2.7", "< 4.0"
+
+  spec.add_dependency "openssl", "~> 3.1"
+  spec.add_dependency "bech32", "~> 1.3"
 end

data/spec/money-tree/money_tree_spec.rb

@@ -1,9 +1,9 @@
 require "spec_helper"
 
 describe MoneyTree do
-  it "0.11.1 works" do
+  it "0.11.2 works" do
 
     # placeholder to set up spec in future
-    expect(MoneyTree::VERSION).to eq "0.11.1"
+    expect(MoneyTree::VERSION).to eq "0.11.2"
   end
 end

data/spec/money-tree/node_spec.rb

@@ -121,6 +121,104 @@ describe MoneyTree::Master do
           end
         end
 
+        describe "m/2147483648" do
+          before do
+            @node = @master.node_for_path "m/2147483648"
+          end
+
+          it "has an index of 2147483648" do
+            expect(@node.index).to eql(2147483648)
+          end
+
+          it "is private" do
+            expect(@node.is_private?).to eql(true)
+          end
+
+          it "has a depth of 1" do
+            expect(@node.depth).to eql(1)
+          end
+
+          it "generates subnode" do
+            expect(@node.to_identifier).to eql("5c1bd648ed23aa5fd50ba52b2457c11e9e80a6a7")
+            expect(@node.to_fingerprint).to eql("5c1bd648")
+            expect(@node.to_address).to eql("19Q2WoS5hSS6T8GjhK8KZLMgmWaq4neXrh")
+            expect(@node.to_p2wpkh_p2sh).to eql("3AbBmNbPDSzeZKHywDrH3h5v2rL8xGfT7e")
+            expect(@node.to_bech32_address).to eql("bc1qtsdavj8dyw49l4gt554jg47pr60gpf48ww2ens")
+          end
+
+          it "generates a private key" do
+            expect(@node.private_key.to_hex).to eql("edb2e14f9ee77d26dd93b4ecede8d16ed408ce149b6cd80b0715a2d911a0afea")
+            expect(@node.private_key.to_wif).to eql("L5BmPijJjrKbiUfG4zbiFKNqkvuJ8usooJmzuD7Z8dkRoTThYnAT")
+          end
+
+          it "generates a public key" do
+            expect(@node.public_key.to_hex).to eql("035a784662a4a20a65bf6aab9ae98a6c068a81c52e4b032c0fb5400c706cfccc56")
+          end
+
+          it "generates a chain code" do
+            expect(@node.chain_code_hex).to eql("47fdacbd0f1097043b78c63c20c34ef4ed9a111d980047ad16282c7ae6236141")
+          end
+
+          it "generates a serialized private key" do
+            expect(@node.to_serialized_hex(:private)).to eql("0488ade4013442193e8000000047fdacbd0f1097043b78c63c20c34ef4ed9a111d980047ad16282c7ae623614100edb2e14f9ee77d26dd93b4ecede8d16ed408ce149b6cd80b0715a2d911a0afea")
+            expect(@node.to_bip32(:private)).to eql("xprv9uHRZZhk6KAJC1avXpDAp4MDc3sQKNxDiPvvkX8Br5ngLNv1TxvUxt4cV1rGL5hj6KCesnDYUhd7oWgT11eZG7XnxHrnYeSvkzY7d2bhkJ7")
+          end
+
+          it "generates a serialized public_key" do
+            expect(@node.to_serialized_hex).to eql("0488b21e013442193e8000000047fdacbd0f1097043b78c63c20c34ef4ed9a111d980047ad16282c7ae6236141035a784662a4a20a65bf6aab9ae98a6c068a81c52e4b032c0fb5400c706cfccc56")
+            expect(@node.to_bip32).to eql("xpub68Gmy5EdvgibQVfPdqkBBCHxA5htiqg55crXYuXoQRKfDBFA1WEjWgP6LHhwBZeNK1VTsfTFUHCdrfp1bgwQ9xv5ski8PX9rL2dZXvgGDnw")
+          end
+        end
+
+        describe "m/-0" do
+          before do
+            @node = @master.node_for_path "m/-0"
+          end
+
+          it "has an index of 2147483648" do
+            expect(@node.index).to eql(2147483648)
+          end
+
+          it "is private" do
+            expect(@node.is_private?).to eql(true)
+          end
+
+          it "has a depth of 1" do
+            expect(@node.depth).to eql(1)
+          end
+
+          it "generates subnode" do
+            expect(@node.to_identifier).to eql("5c1bd648ed23aa5fd50ba52b2457c11e9e80a6a7")
+            expect(@node.to_fingerprint).to eql("5c1bd648")
+            expect(@node.to_address).to eql("19Q2WoS5hSS6T8GjhK8KZLMgmWaq4neXrh")
+            expect(@node.to_p2wpkh_p2sh).to eql("3AbBmNbPDSzeZKHywDrH3h5v2rL8xGfT7e")
+            expect(@node.to_bech32_address).to eql("bc1qtsdavj8dyw49l4gt554jg47pr60gpf48ww2ens")
+          end
+
+          it "generates a private key" do
+            expect(@node.private_key.to_hex).to eql("edb2e14f9ee77d26dd93b4ecede8d16ed408ce149b6cd80b0715a2d911a0afea")
+            expect(@node.private_key.to_wif).to eql("L5BmPijJjrKbiUfG4zbiFKNqkvuJ8usooJmzuD7Z8dkRoTThYnAT")
+          end
+
+          it "generates a public key" do
+            expect(@node.public_key.to_hex).to eql("035a784662a4a20a65bf6aab9ae98a6c068a81c52e4b032c0fb5400c706cfccc56")
+          end
+
+          it "generates a chain code" do
+            expect(@node.chain_code_hex).to eql("47fdacbd0f1097043b78c63c20c34ef4ed9a111d980047ad16282c7ae6236141")
+          end
+
+          it "generates a serialized private key" do
+            expect(@node.to_serialized_hex(:private)).to eql("0488ade4013442193e8000000047fdacbd0f1097043b78c63c20c34ef4ed9a111d980047ad16282c7ae623614100edb2e14f9ee77d26dd93b4ecede8d16ed408ce149b6cd80b0715a2d911a0afea")
+            expect(@node.to_bip32(:private)).to eql("xprv9uHRZZhk6KAJC1avXpDAp4MDc3sQKNxDiPvvkX8Br5ngLNv1TxvUxt4cV1rGL5hj6KCesnDYUhd7oWgT11eZG7XnxHrnYeSvkzY7d2bhkJ7")
+          end
+
+          it "generates a serialized public_key" do
+            expect(@node.to_serialized_hex).to eql("0488b21e013442193e8000000047fdacbd0f1097043b78c63c20c34ef4ed9a111d980047ad16282c7ae6236141035a784662a4a20a65bf6aab9ae98a6c068a81c52e4b032c0fb5400c706cfccc56")
+            expect(@node.to_bip32).to eql("xpub68Gmy5EdvgibQVfPdqkBBCHxA5htiqg55crXYuXoQRKfDBFA1WEjWgP6LHhwBZeNK1VTsfTFUHCdrfp1bgwQ9xv5ski8PX9rL2dZXvgGDnw")
+          end
+        end
+
         describe "m/0p" do
           before do
             @node = @master.node_for_path "m/0p"
@@ -1213,5 +1311,34 @@ describe MoneyTree::Master do
         end
       end
     end
+
+    describe "deriving a parent node" do
+      before do
+        @master = MoneyTree::Master.new seed_hex: "000102030405060708090a0b0c0d0e0f"
+        @node = @master.node_for_path("m/101p")
+        @subnode = @node.node_for_path("1")
+      end
+      context "m/101'/1 -> m/101'" do
+        it "correctly derives from a subnode with priv key to a node knowing it's public key" do
+          node_priv_hex = @node.private_key.to_hex
+          @node.strip_private_info!
+          expect(@subnode.derive_parent_node(@node).private_key.to_hex).to eq(node_priv_hex)
+        end
+      end
+      context "m/101' -> master" do
+        it "unable to derive from a hardened node with priv key to a master node knowing it's public key" do
+          master_priv_hex = @master.private_key.to_hex
+          @master.strip_private_info!
+          expect(@node.derive_parent_node(@master).private_key.to_hex).to_not eq(master_priv_hex)
+        end
+      end
+      context "m/101 -> master" do
+        it "correctly derives from a non-hardened node with priv key to a master node knowing it's public key" do
+          @node = @master.node_for_path("m/101")
+          master_priv_hex = @master.private_key.to_hex
+          expect(@node.derive_parent_node(@master).private_key.to_hex).to eq(master_priv_hex)
+        end
+      end
+    end
   end
 end

data/spec/money-tree/openssl_extensions_spec.rb

@@ -22,8 +22,8 @@ describe MoneyTree::OpenSSLExtensions do
   include MoneyTree::OpenSSLExtensions
 
   context "with inputs" do
-    let(:key1) { OpenSSL::PKey::EC.new("secp256k1").generate_key }
-    let(:key2) { OpenSSL::PKey::EC.new("secp256k1").generate_key }
+    let(:key1) { OpenSSL::PKey::EC.generate("secp256k1") }
+    let(:key2) { OpenSSL::PKey::EC.generate("secp256k1") }
     let(:point_1) { key1.public_key }
     let(:point_2) { key2.public_key }
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: money-tree
 version: !ruby/object:Gem::Version
-  version: 0.11.1
+  version: 0.11.2
 platform: ruby
 authors:
 - Micah Winkelspecht
@@ -9,8 +9,36 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-11-03 00:00:00.000000000 Z
-dependencies: []
+date: 2023-01-05 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: openssl
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.1'
+- !ruby/object:Gem::Dependency
+  name: bech32
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
 description: A Ruby Gem implementation of Bitcoin HD Wallets
 email:
 - winkelspecht@gmail.com
@@ -20,6 +48,8 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".github/donation_btc_qr_code.gif"
+- ".github/workflows/code.yml"
+- ".github/workflows/docs.yml"
 - ".github/workflows/spec.yml"
 - ".gitignore"
 - ".rspec"
@@ -27,9 +57,10 @@ files:
 - LICENSE.txt
 - README.md
 - Rakefile
-- certs/mattatgemco.pem
 - checksum/money-tree-0.11.0.gem.sha512
+- checksum/money-tree-0.11.1.gem.sha512
 - checksum/money-tree-0.9.0.gem.sha512
+- config/openssl.conf
 - lib/money-tree.rb
 - lib/money-tree/address.rb
 - lib/money-tree/key.rb
@@ -63,7 +94,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '2.6'
+      version: '2.7'
   - - "<"
     - !ruby/object:Gem::Version
       version: '4.0'
@@ -73,7 +104,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.23
+rubygems_version: 3.2.32
 signing_key:
 specification_version: 4
 summary: Bitcoin Hierarchical Deterministic Wallets in Ruby! (Bitcoin standard BIP0032)

data/certs/mattatgemco.pem

@@ -1,24 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIEHDCCAoSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAcMRowGAYDVQQDDBFtYXR0
-L0RDPWdlbS9EQz1jbzAeFw0xODA1MzAyMTQwNDZaFw0xOTA1MzAyMTQwNDZaMBwx
-GjAYBgNVBAMMEW1hdHQvREM9Z2VtL0RDPWNvMIIBojANBgkqhkiG9w0BAQEFAAOC
-AY8AMIIBigKCAYEAxfbjMHFlxA2P+4YWPagKoGAMi4078imgXdFbD3Rloe6cGfYp
-IMUQitiHrKi6fhSE0UjXmoP3qnYFddm1enN9zUAFRhHWv7xpINqSqss4PYAb5Anl
-RYZu3jromop5aVodi15HUfu5z27MvBm4rAaN/dDRfh/rT2hDbTTh0HmvEaPUDfX6
-TyflAttfabFvtY4qsD+ao8tks0DytqyuEWZ0tvQ6upOgHRNNuYDwDZB1T9v2dq2w
-3goJFmOKBMMn7UH8WMjD3HiOuRD4tWhq5xWLjBqjzFlVPlZPgdCNyXeMMnLXER98
-NY35cVWFFuqG+kZwy4MFKdE9WFTocLZxLFo0VVTNSpPara9HirbHtIo9jZNuop4S
-g4JTf1F8dIWYii3sXoAYZfkl6rHVRP0G/OV5LcTfSS3QkmI5hNltz5FZzc+qI6S1
-rTR1ZwTy1rRI3coFY7vDRaFWBoMbbo/DytgCE3+rfbVDxQrJa4aZ0iYDhu8LXEA1
-VTtpf1EWYCOsYE1TAgMBAAGjaTBnMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSwMB0G
-A1UdDgQWBBQ6QoDNre7LFgOukH2Cv+RqZyfUzjAWBgNVHREEDzANgQttYXR0QGdl
-bS5jbzAWBgNVHRIEDzANgQttYXR0QGdlbS5jbzANBgkqhkiG9w0BAQsFAAOCAYEA
-kOxYnOsB+NwHwLc2lHEZ8ubxanq2qIZDhvVQ4M31gwmba43xO7vq0ktFxYRvozs4
-74dQ6bmY2e7njoFgeutyJwxulA+BC71mDQA1s4WsZo7Z2TRgB0GViVqHrzq+jY+M
-p9mTHQqKH+2j0P9T4DXSzq4qOaBA3YROAwAzYI9N8MObeWkRt2pZ4zYQrAniP2nd
-wzXs/G5lWbbntVcvQOfAAXBipSJ3X5P2EGpUytP9ZpGdezY5HZzuiJFcmCf1CM3t
-VX4NZjbJak9gOY0AFD0Aw497sYenm0VBExclOmeRuZLffpWteTTL//utpG3bbFPl
-jQ78uzsrexYTYW5IshjfSIf3TZxm50Z45pyOTow5EOP1Nd7OmKOcI8hrLGv5+AlD
-hCnomUTUNsM4Rjwl5rzQiIn3ezv6+0tlg4rWJmVTuOGwcHk/oj1In2sPjCqm0pgx
-TLnMa8gr6aUpuHR5s2N4ZH0Q2YIsaD6cv7DYXt+G4MRut3njOYHfkqsSVykO6hvr
------END CERTIFICATE-----