mote_sms 1.3.11 → 1.3.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: 4309faa6975f0dcc0e9b5625331c9852d0881300
4
- data.tar.gz: '06782524e9e152b9fb4f722eface7f5e7260c4da'
3
+ metadata.gz: 88d73a3e71e05050c3a7dfe8d05735f9352c9404
4
+ data.tar.gz: 21d71c6d363b7eb6f9e70eea3fa684b66929faf9
5
5
  SHA512:
6
- metadata.gz: b974f8bbec70b60a6a78ef5bf0fe4c393360bfda53c5d290c2b0d8a6af88c44aed0dc68ce98a8d08944c42c78c503b227b157afaee4aa8a7e87c9f200fa19a14
7
- data.tar.gz: eb536ea9488a4f9fc81d065e75109f1f442a7246a30afe43324208d90d258e2a4f76182251071212e1605007fc97c3e108099c28178ba4a32eb8368677cbb5a6
6
+ metadata.gz: d31b82c3433dd4569ea965586ff720f3b1e71c8ee7c21235667e91252c28657aa9c083ac4373eb280d4cd6345a8796007e92bb00ff7fb769346a79a418ed78bb
7
+ data.tar.gz: 3dc3171ed9148be8af2c16d88c653f41330a873047de7ee7dfe260aea406c542267c42ed33d7053e0009835ee9574c3788591c7d7f791a7f63627b62aa08abde
@@ -9,48 +9,28 @@ module Transports
9
9
  # Small abstraction on top of Net::HTTP to handle things like public key pinning
10
10
  # et all.
11
11
  class HttpClient
12
- CERTS_PATH = File.expand_path File.join(File.dirname(__FILE__), '..', 'ssl_certs')
13
-
14
12
  def self.ssl_options
15
13
  @ssl_options ||= lambda do |http|
16
14
  http.verify_mode = OpenSSL::SSL::VERIFY_PEER
17
15
  http.verify_depth = 9
18
- http.cert_store = default_cert_store
19
- end
20
- end
21
-
22
- def self.default_cert_store
23
- @default_cert_store ||= OpenSSL::X509::Store.new.tap do |store|
24
- Dir["#{CERTS_PATH}/*CA.pem"].each { |c| store.add_file c }
16
+ http.cert_store = OpenSSL::X509::Store.new
17
+ http.cert_store.set_default_paths
25
18
  end
26
19
  end
27
20
 
28
- def self.fingerprint_host(host)
29
- pem = File.join(CERTS_PATH, "#{host}.pem")
30
- return unless File.exist?(pem)
31
- cert = OpenSSL::X509::Certificate.new(File.read(pem))
32
- Digest::SHA1.hexdigest(cert.to_der)
33
- end
34
-
35
21
  def self.default_user_agent
36
22
  "Ruby/mote_sms #{MoteSMS::VERSION}"
37
23
  end
38
24
 
39
- attr_reader :endpoint, :proxy_address, :proxy_port, :user_agent, :ssl, :fingerprint
25
+ attr_reader :endpoint, :proxy_address, :proxy_port, :user_agent, :ssl
40
26
 
41
- def initialize(endpoint, enable_fingerprint: true, ssl: self.class.ssl_options,
27
+ def initialize(endpoint, ssl: self.class.ssl_options,
42
28
  proxy_address: nil, proxy_port: nil, user_agent: self.class.default_user_agent)
43
29
  @endpoint = URI.parse(endpoint)
44
30
  @proxy_address = proxy_address
45
31
  @proxy_port = proxy_port
46
32
  @user_agent = user_agent
47
33
  @ssl = ssl || self.class.ssl_options
48
- if enable_fingerprint
49
- @fingerprint = ENV.fetch(
50
- "MOTE_SMS_#{@endpoint.host.to_s.upcase.gsub(/[\.-]/, '_')}_FINGERPRINT",
51
- self.class.fingerprint_host(@endpoint.host)
52
- )
53
- end
54
34
  end
55
35
 
56
36
  def https?
@@ -68,26 +48,9 @@ module Transports
68
48
  Net::HTTP.new(endpoint.host, endpoint.port, proxy_address, proxy_port).tap do |http|
69
49
  if https?
70
50
  http.use_ssl = true
71
- http.verify_callback = ->(ok, store) { verify_fingerprint(ok, store) }
72
51
  ssl.call(http) if ssl.respond_to?(:call)
73
52
  end
74
53
  end
75
54
  end
76
-
77
- def verify_fingerprint(ok, store)
78
- cert_digest = Digest::SHA1.hexdigest(store.chain.first.to_der)
79
- return ok if verify_fingerprint?(cert_digest)
80
-
81
- logger.error(
82
- format('[Transports::HttpClient] failed to verify %s fingerprint (ACTUAL: %s, EXPECTED: %s)',
83
- endpoint, digest, fingerprint)
84
- )
85
- false
86
- end
87
-
88
- def verify_fingerprint?(digest)
89
- return true unless fingerprint
90
- ActiveSupport::SecurityUtils.secure_compare(digest, fingerprint)
91
- end
92
55
  end
93
56
  end
@@ -1,3 +1,3 @@
1
1
  module MoteSMS
2
- VERSION = '1.3.11'.freeze
2
+ VERSION = '1.3.12'.freeze
3
3
  end
@@ -1,13 +1,14 @@
1
1
  require 'spec_helper'
2
2
  require 'mote_sms/version'
3
3
  require 'mote_sms/transports/http_client'
4
+ require 'webmock'
4
5
 
5
6
  describe Transports::HttpClient do
6
7
  subject { described_class.new('https://example.org/') }
7
8
 
8
9
  context 'Certificate checks', http: true do
9
10
  context 'api.swisscom.com' do
10
- subject { described_class.new('https://api.swisscom.com/', enable_fingerprint: true) }
11
+ subject { described_class.new('https://api.swisscom.com/') }
11
12
 
12
13
  it 'makes a "successful" request, i.e. no HTTPS issues' do
13
14
  request = Net::HTTP::Get.new('/')
@@ -16,10 +17,13 @@ describe Transports::HttpClient do
16
17
  end
17
18
  end
18
19
 
19
- context 'https://bulk.mobile-gw.com:9012' do
20
- subject { described_class.new('https://bulk.mobile-gw.com:9012', enable_fingerprint: true) }
20
+ context 'https://bulk.mobile-gw.com:9012', http: false do
21
+ subject { described_class.new('https://bulk.mobile-gw.com:9012') }
21
22
 
22
23
  it 'makes a "successful" request, i.e. no HTTPS issues' do
24
+ stub_request(:get, "https://bulk.mobile-gw.com:9012/").
25
+ with(:headers => {'Accept'=>'*/*', 'Accept-Encoding'=>'gzip;q=1.0,deflate;q=0.6,identity;q=0.3', 'User-Agent'=>'Ruby/mote_sms 1.3.11'}).
26
+ to_return(:status => 200, :body => '', :headers => {})
23
27
  request = Net::HTTP::Get.new('/')
24
28
  response = subject.request(request)
25
29
  expect(response).to be_a Net::HTTPOK
@@ -28,8 +32,6 @@ describe Transports::HttpClient do
28
32
  end
29
33
 
30
34
  context '#initialize' do
31
- before { ENV.delete('MOTE_SMS_EXAMPLE_ORG_FINGERPRINT') }
32
-
33
35
  it 'has a default user agent' do
34
36
  expect(subject.user_agent).to eq "Ruby/mote_sms #{MoteSMS::VERSION}"
35
37
  end
@@ -38,27 +40,6 @@ describe Transports::HttpClient do
38
40
  expect(subject.proxy_address).to be_nil
39
41
  expect(subject.proxy_port).to be_nil
40
42
  end
41
-
42
- it 'tries to load a fingerprint via hostname, when ENV is not set' do
43
- expect(described_class).to receive(:fingerprint_host).with('example.org') { 'pem-fingerprint' }
44
- expect(subject.fingerprint).to eq 'pem-fingerprint'
45
- end
46
-
47
- it 'tries to use the ENV for a fingerprint lookup' do
48
- ENV['MOTE_SMS_EXAMPLE_ORG_FINGERPRINT'] = 'env-fingerprint'
49
- allow(described_class).to receive(:fingerprint_host) { 'pem-fingerprint' }
50
- expect(subject.fingerprint).to eq 'env-fingerprint'
51
- end
52
-
53
- context 'with enable_fingerprint: false' do
54
- subject { described_class.new('https://example.org', enable_fingerprint: false) }
55
-
56
- it 'can skip fingerprinting by setting enable_fingerprint: false' do
57
- ENV['MOTE_SMS_EXAMPLE_ORG_FINGERPRINT'] = 'env-fingerprint'
58
- allow(described_class).to receive(:fingerprint_host) { 'pem-fingerprint' }
59
- expect(subject.fingerprint).to be_nil
60
- end
61
- end
62
43
  end
63
44
 
64
45
  context '#https?' do
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: mote_sms
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.3.11
4
+ version: 1.3.12
5
5
  platform: ruby
6
6
  authors:
7
7
  - Lukas Westermann
@@ -9,7 +9,7 @@ authors:
9
9
  autorequire:
10
10
  bindir: exe
11
11
  cert_chain: []
12
- date: 2018-05-08 00:00:00.000000000 Z
12
+ date: 2018-09-25 00:00:00.000000000 Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: phony
@@ -173,13 +173,6 @@ files:
173
173
  - lib/mote_sms/message.rb
174
174
  - lib/mote_sms/number.rb
175
175
  - lib/mote_sms/number_list.rb
176
- - lib/mote_sms/ssl_certs/DigiCertGlobalRootCA.pem
177
- - lib/mote_sms/ssl_certs/ThawtePrimaryRootCA.pem
178
- - lib/mote_sms/ssl_certs/ThawtePrimaryRootG3CA.pem
179
- - lib/mote_sms/ssl_certs/ThawteRSA2018CA.pem
180
- - lib/mote_sms/ssl_certs/ThawteSSLGA2CA.pem
181
- - lib/mote_sms/ssl_certs/api.swisscom.com.pem
182
- - lib/mote_sms/ssl_certs/bulk.mobile-gw.com.pem
183
176
  - lib/mote_sms/transports.rb
184
177
  - lib/mote_sms/transports/action_mailer_transport.rb
185
178
  - lib/mote_sms/transports/http_client.rb
@@ -1,82 +0,0 @@
1
- Certificate:
2
- Data:
3
- Version: 3 (0x2)
4
- Serial Number:
5
- 08:3b:e0:56:90:42:46:b1:a1:75:6a:c9:59:91:c7:4a
6
- Signature Algorithm: sha1WithRSAEncryption
7
- Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
8
- Validity
9
- Not Before: Nov 10 00:00:00 2006 GMT
10
- Not After : Nov 10 00:00:00 2031 GMT
11
- Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
12
- Subject Public Key Info:
13
- Public Key Algorithm: rsaEncryption
14
- Public-Key: (2048 bit)
15
- Modulus:
16
- 00:e2:3b:e1:11:72:de:a8:a4:d3:a3:57:aa:50:a2:
17
- 8f:0b:77:90:c9:a2:a5:ee:12:ce:96:5b:01:09:20:
18
- cc:01:93:a7:4e:30:b7:53:f7:43:c4:69:00:57:9d:
19
- e2:8d:22:dd:87:06:40:00:81:09:ce:ce:1b:83:bf:
20
- df:cd:3b:71:46:e2:d6:66:c7:05:b3:76:27:16:8f:
21
- 7b:9e:1e:95:7d:ee:b7:48:a3:08:da:d6:af:7a:0c:
22
- 39:06:65:7f:4a:5d:1f:bc:17:f8:ab:be:ee:28:d7:
23
- 74:7f:7a:78:99:59:85:68:6e:5c:23:32:4b:bf:4e:
24
- c0:e8:5a:6d:e3:70:bf:77:10:bf:fc:01:f6:85:d9:
25
- a8:44:10:58:32:a9:75:18:d5:d1:a2:be:47:e2:27:
26
- 6a:f4:9a:33:f8:49:08:60:8b:d4:5f:b4:3a:84:bf:
27
- a1:aa:4a:4c:7d:3e:cf:4f:5f:6c:76:5e:a0:4b:37:
28
- 91:9e:dc:22:e6:6d:ce:14:1a:8e:6a:cb:fe:cd:b3:
29
- 14:64:17:c7:5b:29:9e:32:bf:f2:ee:fa:d3:0b:42:
30
- d4:ab:b7:41:32:da:0c:d4:ef:f8:81:d5:bb:8d:58:
31
- 3f:b5:1b:e8:49:28:a2:70:da:31:04:dd:f7:b2:16:
32
- f2:4c:0a:4e:07:a8:ed:4a:3d:5e:b5:7f:a3:90:c3:
33
- af:27
34
- Exponent: 65537 (0x10001)
35
- X509v3 extensions:
36
- X509v3 Key Usage: critical
37
- Digital Signature, Certificate Sign, CRL Sign
38
- X509v3 Basic Constraints: critical
39
- CA:TRUE
40
- X509v3 Subject Key Identifier:
41
- 03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
42
- X509v3 Authority Key Identifier:
43
- keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
44
-
45
- Signature Algorithm: sha1WithRSAEncryption
46
- cb:9c:37:aa:48:13:12:0a:fa:dd:44:9c:4f:52:b0:f4:df:ae:
47
- 04:f5:79:79:08:a3:24:18:fc:4b:2b:84:c0:2d:b9:d5:c7:fe:
48
- f4:c1:1f:58:cb:b8:6d:9c:7a:74:e7:98:29:ab:11:b5:e3:70:
49
- a0:a1:cd:4c:88:99:93:8c:91:70:e2:ab:0f:1c:be:93:a9:ff:
50
- 63:d5:e4:07:60:d3:a3:bf:9d:5b:09:f1:d5:8e:e3:53:f4:8e:
51
- 63:fa:3f:a7:db:b4:66:df:62:66:d6:d1:6e:41:8d:f2:2d:b5:
52
- ea:77:4a:9f:9d:58:e2:2b:59:c0:40:23:ed:2d:28:82:45:3e:
53
- 79:54:92:26:98:e0:80:48:a8:37:ef:f0:d6:79:60:16:de:ac:
54
- e8:0e:cd:6e:ac:44:17:38:2f:49:da:e1:45:3e:2a:b9:36:53:
55
- cf:3a:50:06:f7:2e:e8:c4:57:49:6c:61:21:18:d5:04:ad:78:
56
- 3c:2c:3a:80:6b:a7:eb:af:15:14:e9:d8:89:c1:b9:38:6c:e2:
57
- 91:6c:8a:ff:64:b9:77:25:57:30:c0:1b:24:a3:e1:dc:e9:df:
58
- 47:7c:b5:b4:24:08:05:30:ec:2d:bd:0b:bf:45:bf:50:b9:a9:
59
- f3:eb:98:01:12:ad:c8:88:c6:98:34:5f:8d:0a:3c:c6:e9:d5:
60
- 95:95:6d:de
61
- -----BEGIN CERTIFICATE-----
62
- MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
63
- MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
64
- d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
65
- QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
66
- MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
67
- b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
68
- 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
69
- CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
70
- nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
71
- 43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
72
- T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
73
- gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
74
- BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
75
- TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
76
- DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
77
- hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
78
- 06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
79
- PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
80
- YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
81
- CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
82
- -----END CERTIFICATE-----
@@ -1,85 +0,0 @@
1
- This CA certificate is for verifying HTTPS connection to;
2
- - https://bulk.mobile-gw.com:9012/
3
-
4
- Certificate:
5
- Data:
6
- Version: 3 (0x2)
7
- Serial Number:
8
- 34:4e:d5:57:20:d5:ed:ec:49:f4:2f:ce:37:db:2b:6d
9
- Signature Algorithm: sha1WithRSAEncryption
10
- Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
11
- Validity
12
- Not Before: Nov 17 00:00:00 2006 GMT
13
- Not After : Jul 16 23:59:59 2036 GMT
14
- Subject: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
15
- Subject Public Key Info:
16
- Public Key Algorithm: rsaEncryption
17
- RSA Public Key: (2048 bit)
18
- Modulus (2048 bit):
19
- 00:ac:a0:f0:fb:80:59:d4:9c:c7:a4:cf:9d:a1:59:
20
- 73:09:10:45:0c:0d:2c:6e:68:f1:6c:5b:48:68:49:
21
- 59:37:fc:0b:33:19:c2:77:7f:cc:10:2d:95:34:1c:
22
- e6:eb:4d:09:a7:1c:d2:b8:c9:97:36:02:b7:89:d4:
23
- 24:5f:06:c0:cc:44:94:94:8d:02:62:6f:eb:5a:dd:
24
- 11:8d:28:9a:5c:84:90:10:7a:0d:bd:74:66:2f:6a:
25
- 38:a0:e2:d5:54:44:eb:1d:07:9f:07:ba:6f:ee:e9:
26
- fd:4e:0b:29:f5:3e:84:a0:01:f1:9c:ab:f8:1c:7e:
27
- 89:a4:e8:a1:d8:71:65:0d:a3:51:7b:ee:bc:d2:22:
28
- 60:0d:b9:5b:9d:df:ba:fc:51:5b:0b:af:98:b2:e9:
29
- 2e:e9:04:e8:62:87:de:2b:c8:d7:4e:c1:4c:64:1e:
30
- dd:cf:87:58:ba:4a:4f:ca:68:07:1d:1c:9d:4a:c6:
31
- d5:2f:91:cc:7c:71:72:1c:c5:c0:67:eb:32:fd:c9:
32
- 92:5c:94:da:85:c0:9b:bf:53:7d:2b:09:f4:8c:9d:
33
- 91:1f:97:6a:52:cb:de:09:36:a4:77:d8:7b:87:50:
34
- 44:d5:3e:6e:29:69:fb:39:49:26:1e:09:a5:80:7b:
35
- 40:2d:eb:e8:27:85:c9:fe:61:fd:7e:e6:7c:97:1d:
36
- d5:9d
37
- Exponent: 65537 (0x10001)
38
- X509v3 extensions:
39
- X509v3 Basic Constraints: critical
40
- CA:TRUE
41
- X509v3 Key Usage: critical
42
- Certificate Sign, CRL Sign
43
- X509v3 Subject Key Identifier:
44
- 7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50
45
- Signature Algorithm: sha1WithRSAEncryption
46
- 79:11:c0:4b:b3:91:b6:fc:f0:e9:67:d4:0d:6e:45:be:55:e8:
47
- 93:d2:ce:03:3f:ed:da:25:b0:1d:57:cb:1e:3a:76:a0:4c:ec:
48
- 50:76:e8:64:72:0c:a4:a9:f1:b8:8b:d6:d6:87:84:bb:32:e5:
49
- 41:11:c0:77:d9:b3:60:9d:eb:1b:d5:d1:6e:44:44:a9:a6:01:
50
- ec:55:62:1d:77:b8:5c:8e:48:49:7c:9c:3b:57:11:ac:ad:73:
51
- 37:8e:2f:78:5c:90:68:47:d9:60:60:e6:fc:07:3d:22:20:17:
52
- c4:f7:16:e9:c4:d8:72:f9:c8:73:7c:df:16:2f:15:a9:3e:fd:
53
- 6a:27:b6:a1:eb:5a:ba:98:1f:d5:e3:4d:64:0a:9d:13:c8:61:
54
- ba:f5:39:1c:87:ba:b8:bd:7b:22:7f:f6:fe:ac:40:79:e5:ac:
55
- 10:6f:3d:8f:1b:79:76:8b:c4:37:b3:21:18:84:e5:36:00:eb:
56
- 63:20:99:b9:e9:fe:33:04:bb:41:c8:c1:02:f9:44:63:20:9e:
57
- 81:ce:42:d3:d6:3f:2c:76:d3:63:9c:59:dd:8f:a6:e1:0e:a0:
58
- 2e:41:f7:2e:95:47:cf:bc:fd:33:f3:f6:0b:61:7e:7e:91:2b:
59
- 81:47:c2:27:30:ee:a7:10:5d:37:8f:5c:39:2b:e4:04:f0:7b:
60
- 8d:56:8c:68
61
- -----BEGIN CERTIFICATE-----
62
- MIIEIDCCAwigAwIBAgIQNE7VVyDV7exJ9C/ON9srbTANBgkqhkiG9w0BAQUFADCB
63
- qTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjEoMCYGA1UECxMf
64
- Q2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMvKGMpIDIw
65
- MDYgdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNV
66
- BAMTFnRoYXd0ZSBQcmltYXJ5IFJvb3QgQ0EwHhcNMDYxMTE3MDAwMDAwWhcNMzYw
67
- NzE2MjM1OTU5WjCBqTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5j
68
- LjEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjE4MDYG
69
- A1UECxMvKGMpIDIwMDYgdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNl
70
- IG9ubHkxHzAdBgNVBAMTFnRoYXd0ZSBQcmltYXJ5IFJvb3QgQ0EwggEiMA0GCSqG
71
- SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsoPD7gFnUnMekz52hWXMJEEUMDSxuaPFs
72
- W0hoSVk3/AszGcJ3f8wQLZU0HObrTQmnHNK4yZc2AreJ1CRfBsDMRJSUjQJib+ta
73
- 3RGNKJpchJAQeg29dGYvajig4tVUROsdB58Hum/u6f1OCyn1PoSgAfGcq/gcfomk
74
- 6KHYcWUNo1F77rzSImANuVud37r8UVsLr5iy6S7pBOhih94ryNdOwUxkHt3Ph1i6
75
- Sk/KaAcdHJ1KxtUvkcx8cXIcxcBn6zL9yZJclNqFwJu/U30rCfSMnZEfl2pSy94J
76
- NqR32HuHUETVPm4pafs5SSYeCaWAe0At6+gnhcn+Yf1+5nyXHdWdAgMBAAGjQjBA
77
- MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBR7W0XP
78
- r87Lev0xkhpqtvNG61dIUDANBgkqhkiG9w0BAQUFAAOCAQEAeRHAS7ORtvzw6WfU
79
- DW5FvlXok9LOAz/t2iWwHVfLHjp2oEzsUHboZHIMpKnxuIvW1oeEuzLlQRHAd9mz
80
- YJ3rG9XRbkREqaYB7FViHXe4XI5ISXycO1cRrK1zN44veFyQaEfZYGDm/Ac9IiAX
81
- xPcW6cTYcvnIc3zfFi8VqT79aie2oetaupgf1eNNZAqdE8hhuvU5HIe6uL17In/2
82
- /qxAeeWsEG89jxt5dovEN7MhGITlNgDrYyCZuen+MwS7QcjBAvlEYyCegc5C09Y/
83
- LHbTY5xZ3Y+m4Q6gLkH3LpVHz7z9M/P2C2F+fpErgUfCJzDupxBdN49cOSvkBPB7
84
- jVaMaA==
85
- -----END CERTIFICATE-----
@@ -1,25 +0,0 @@
1
- -----BEGIN CERTIFICATE-----
2
- MIIEKjCCAxKgAwIBAgIQYAGXt0an6rS0mtZLL/eQ+zANBgkqhkiG9w0BAQsFADCB
3
- rjELMAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjEoMCYGA1UECxMf
4
- Q2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMvKGMpIDIw
5
- MDggdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxJDAiBgNV
6
- BAMTG3RoYXd0ZSBQcmltYXJ5IFJvb3QgQ0EgLSBHMzAeFw0wODA0MDIwMDAwMDBa
7
- Fw0zNzEyMDEyMzU5NTlaMIGuMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3Rl
8
- LCBJbmMuMSgwJgYDVQQLEx9DZXJ0aWZpY2F0aW9uIFNlcnZpY2VzIERpdmlzaW9u
9
- MTgwNgYDVQQLEy8oYykgMjAwOCB0aGF3dGUsIEluYy4gLSBGb3IgYXV0aG9yaXpl
10
- ZCB1c2Ugb25seTEkMCIGA1UEAxMbdGhhd3RlIFByaW1hcnkgUm9vdCBDQSAtIEcz
11
- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr8nLPvb2FvdeHsbnndm
12
- gcs+vHyu86YnmjSjaDFxODNi5PNxZnmxqWWjpYvVj2AtP0LMqmsywCPLLEHd5N/8
13
- YZzic7IilRFDGF/Eth9XbAoFWCLINkw6fKXRz4aviKdEAhN0cXMKQlkC+BsUa0Lf
14
- b1+6a4KinVvnSr0eAXLbS3ToO39/fR8EtCab4LRarEc9VbjXsCZSKAExQGbY2SS9
15
- 9irY7CFJXJv2eul/VTV+lmuNk5Mny5K76qxAwJ/C+IDPXfRa3M50hqY+bAtTyr2S
16
- zhkGcuYMXDhpxwTWvGzOW/b3aJzcJRVIiKHpqfiYnODz1TEoYRFsZ5aNOZnLwkUk
17
- OQIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNV
18
- HQ4EFgQUrWyqlGCc7eT/+j4KdCtjA/e2Wb8wDQYJKoZIhvcNAQELBQADggEBABpA
19
- 2JVlrAmSicY59BDlqQ5mU1143vokkbvnRFHfxhY0Cu9qRFHqKweKA3rD6z8KLFIW
20
- oCtDuSWQP3CpMyVtRRooOyfPqsMpQhvfO0zAMzRbQYi/aytlryjvsvXDqmbOe1bu
21
- t8jLZ8HJnBoYuMTDSQPxYA5QzUbF83d597YV4Djbxy8ooAw/dyZ02SUS2jHaGh7c
22
- KUGRIjxpp7sC8rZcJwOJ9Abqm+RyguOhCcHpABnTPtRwa7pxpqpYrvS76Wy274fM
23
- m7v/OeZWYdMKp8RcTGB7BXcmer/YB1IsYvdwY9k5vG8cwnncdimvzsUsZAReiDZu
24
- MdRAGmI0Nj81Aa6sY6A=
25
- -----END CERTIFICATE-----
@@ -1,101 +0,0 @@
1
- Certificate:
2
- Data:
3
- Version: 3 (0x2)
4
- Serial Number:
5
- 02:5a:8a:ef:19:6f:7e:0d:6c:21:04:b2:1a:e6:70:2b
6
- Signature Algorithm: sha256WithRSAEncryption
7
- Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
8
- Validity
9
- Not Before: Nov 6 12:23:52 2017 GMT
10
- Not After : Nov 6 12:23:52 2027 GMT
11
- Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Thawte RSA CA 2018
12
- Subject Public Key Info:
13
- Public Key Algorithm: rsaEncryption
14
- Public-Key: (2048 bit)
15
- Modulus:
16
- 00:ca:08:5e:e5:53:8a:97:1c:1e:43:2f:b6:8a:a7:
17
- 56:e9:8b:84:43:a8:ac:9d:7a:55:82:7a:14:4b:86:
18
- b7:2f:8f:52:9f:1c:ca:b1:20:5b:6f:ba:22:dd:a6:
19
- 9c:2d:78:da:e9:06:08:4e:be:13:a6:eb:cb:bb:3e:
20
- b9:05:0c:3e:4a:e1:f0:32:1f:13:4e:f5:06:c5:47:
21
- 73:89:3e:80:a3:8b:f1:01:24:9b:a3:99:66:92:6b:
22
- 68:ad:0d:2d:b4:cd:72:a2:f4:f9:38:5a:65:a6:b4:
23
- 8c:53:c1:08:1a:84:f8:fd:2e:f3:11:75:6e:dc:6a:
24
- 31:29:ac:0d:87:cc:93:60:78:df:25:ba:26:59:91:
25
- c6:83:52:35:a6:ca:9c:b8:28:1a:ce:d7:1c:ee:14:
26
- bf:76:5c:65:ab:38:1e:79:e9:7c:cc:49:23:26:a2:
27
- 52:50:66:d0:59:61:ff:a0:fe:9a:4c:0c:9f:f9:e8:
28
- 8e:de:09:8b:b8:15:c1:a4:08:4c:26:9c:7b:06:db:
29
- fd:8a:74:5b:58:7e:cd:63:a4:91:2f:45:f0:7a:3c:
30
- 94:0b:8a:7c:b2:05:a9:67:93:9f:68:e5:95:63:60:
31
- d8:58:95:5f:e0:55:ef:93:a7:11:3b:7c:e6:92:d8:
32
- 66:44:e0:ab:bd:a7:8f:cd:a4:85:78:41:24:54:e7:
33
- d8:03
34
- Exponent: 65537 (0x10001)
35
- X509v3 extensions:
36
- X509v3 Subject Key Identifier:
37
- A3:C8:5E:65:54:E5:30:78:C1:05:EA:07:0A:6A:59:CC:B9:FE:DE:5A
38
- X509v3 Authority Key Identifier:
39
- keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
40
-
41
- X509v3 Key Usage: critical
42
- Digital Signature, Certificate Sign, CRL Sign
43
- X509v3 Extended Key Usage:
44
- TLS Web Server Authentication, TLS Web Client Authentication
45
- X509v3 Basic Constraints: critical
46
- CA:TRUE, pathlen:0
47
- Authority Information Access:
48
- OCSP - URI:http://ocsp.digicert.com
49
-
50
- X509v3 CRL Distribution Points:
51
-
52
- Full Name:
53
- URI:http://crl3.digicert.com/DigiCertGlobalRootCA.crl
54
-
55
- X509v3 Certificate Policies:
56
- Policy: X509v3 Any Policy
57
- CPS: https://www.digicert.com/CPS
58
-
59
- Signature Algorithm: sha256WithRSAEncryption
60
- 44:4d:85:e5:dd:1c:82:8c:e1:64:d5:a8:90:22:df:76:18:65:
61
- ea:65:d2:3b:25:37:4a:83:da:99:87:16:7c:b1:f5:0b:33:30:
62
- 0f:c6:b5:fa:91:6f:c0:72:10:7e:f9:70:5c:51:fc:32:b8:c1:
63
- dc:2f:a3:56:86:cd:6d:55:91:ae:0a:92:dc:9b:1a:d2:5b:51:
64
- 1f:f1:5f:b3:a6:53:80:fe:16:25:89:b5:48:da:54:6e:04:7b:
65
- 2d:65:03:d8:5f:8f:4e:f2:81:33:f8:1f:f5:e4:b2:a8:fe:0e:
66
- 88:9b:25:61:a6:b7:f0:d5:35:69:50:31:64:8d:79:a3:ee:31:
67
- 5f:84:59:32:a2:97:20:80:53:1b:65:7e:a0:f0:63:43:5a:0f:
68
- 98:71:80:0b:fc:96:b7:67:93:86:f6:fc:fe:b7:bb:3a:94:a9:
69
- 51:d2:72:7c:67:fd:ed:77:8c:e0:f8:89:02:5e:be:e0:74:17:
70
- 86:3c:0d:ed:93:d9:2a:b4:2f:f4:0c:b7:dc:c8:26:60:b5:50:
71
- 03:ec:7d:1c:e3:59:5f:1f:6f:bf:2f:29:97:d6:ee:f8:d5:58:
72
- 58:a1:b1:cc:6c:41:2b:40:81:a3:39:95:50:27:97:40:f2:4a:
73
- 3d:36:65:79:8b:8d:33:5f:29:53:53:fc:5e:1d:42:0e:0b:8c:
74
- f9:91:28:7b
75
- -----BEGIN CERTIFICATE-----
76
- MIIEiTCCA3GgAwIBAgIQAlqK7xlvfg1sIQSyGuZwKzANBgkqhkiG9w0BAQsFADBh
77
- MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
78
- d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
79
- QTAeFw0xNzExMDYxMjIzNTJaFw0yNzExMDYxMjIzNTJaMFwxCzAJBgNVBAYTAlVT
80
- MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
81
- b20xGzAZBgNVBAMTElRoYXd0ZSBSU0EgQ0EgMjAxODCCASIwDQYJKoZIhvcNAQEB
82
- BQADggEPADCCAQoCggEBAMoIXuVTipccHkMvtoqnVumLhEOorJ16VYJ6FEuGty+P
83
- Up8cyrEgW2+6It2mnC142ukGCE6+E6bry7s+uQUMPkrh8DIfE071BsVHc4k+gKOL
84
- 8QEkm6OZZpJraK0NLbTNcqL0+ThaZaa0jFPBCBqE+P0u8xF1btxqMSmsDYfMk2B4
85
- 3yW6JlmRxoNSNabKnLgoGs7XHO4Uv3ZcZas4HnnpfMxJIyaiUlBm0Flh/6D+mkwM
86
- n/nojt4Ji7gVwaQITCacewbb/Yp0W1h+zWOkkS9F8Ho8lAuKfLIFqWeTn2jllWNg
87
- 2FiVX+BV75OnETt85pLYZkTgq72nj82khXhBJFTn2AMCAwEAAaOCAUAwggE8MB0G
88
- A1UdDgQWBBSjyF5lVOUweMEF6gcKalnMuf7eWjAfBgNVHSMEGDAWgBQD3lA1VtFM
89
- u2bwo+IbG8OXsj3RVTAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUH
90
- AwEGCCsGAQUFBwMCMBIGA1UdEwEB/wQIMAYBAf8CAQAwNAYIKwYBBQUHAQEEKDAm
91
- MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQgYDVR0fBDsw
92
- OTA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFs
93
- Um9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0
94
- cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzANBgkqhkiG9w0BAQsFAAOCAQEARE2F
95
- 5d0cgozhZNWokCLfdhhl6mXSOyU3SoPamYcWfLH1CzMwD8a1+pFvwHIQfvlwXFH8
96
- MrjB3C+jVobNbVWRrgqS3Jsa0ltRH/Ffs6ZTgP4WJYm1SNpUbgR7LWUD2F+PTvKB
97
- M/gf9eSyqP4OiJslYaa38NU1aVAxZI15o+4xX4RZMqKXIIBTG2V+oPBjQ1oPmHGA
98
- C/yWt2eThvb8/re7OpSpUdJyfGf97XeM4PiJAl6+4HQXhjwN7ZPZKrQv9Ay33Mgm
99
- YLVQA+x9HONZXx9vvy8pl9bu+NVYWKGxzGxBK0CBozmVUCeXQPJKPTZleYuNM18p
100
- U1P8Xh1CDguM+ZEoew==
101
- -----END CERTIFICATE-----
@@ -1,101 +0,0 @@
1
- Certificate:
2
- Data:
3
- Version: 3 (0x2)
4
- Serial Number:
5
- 16:87:d6:88:6d:e2:30:06:85:23:3d:bf:11:bf:65:97
6
- Signature Algorithm: sha256WithRSAEncryption
7
- Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
8
- Validity
9
- Not Before: Oct 31 00:00:00 2013 GMT
10
- Not After : Oct 30 23:59:59 2023 GMT
11
- Subject: C=US, O=thawte, Inc., CN=thawte SSL CA - G2
12
- Subject Public Key Info:
13
- Public Key Algorithm: rsaEncryption
14
- RSA Public Key: (2048 bit)
15
- Modulus (2048 bit):
16
- 00:b2:fc:06:fb:04:93:d2:ea:59:20:3b:44:85:97:
17
- 52:39:e7:10:f0:7a:e0:b0:94:40:da:46:f8:0c:28:
18
- bb:b9:ce:60:38:3f:d2:d8:11:42:1b:91:ad:49:ee:
19
- 8f:c7:de:6c:de:37:6f:fd:8b:20:3c:6d:e7:74:d3:
20
- dc:d5:24:88:41:80:89:ee:36:be:c4:d5:be:8d:53:
21
- 13:aa:e4:a5:b8:93:0a:be:ec:da:cd:3c:d4:32:56:
22
- ef:d0:4e:a0:b8:97:bb:39:50:1e:6e:65:c3:fd:b2:
23
- ce:e0:59:a9:48:09:c6:fe:be:ae:fc:3e:3b:81:20:
24
- 97:8b:8f:46:df:60:64:07:75:bb:1b:86:38:9f:47:
25
- 7b:34:ce:a1:d1:97:ad:76:d8:9f:b7:26:db:79:80:
26
- 36:48:f2:c5:37:f8:d9:32:ae:7c:a4:53:81:c7:99:
27
- a1:54:38:2f:4f:75:a0:bb:5a:a5:bb:cd:ac:02:5b:
28
- 19:02:d5:13:18:a7:ce:ac:74:55:12:05:8b:9b:a2:
29
- 95:46:64:72:38:cd:5a:1b:3a:16:a7:be:71:99:8c:
30
- 54:03:b8:96:6c:01:d3:3e:06:98:3f:21:81:3b:02:
31
- 7e:00:47:53:01:1e:0e:46:43:fb:4b:2d:dc:0b:1a:
32
- e8:2f:98:f8:7e:d1:99:ab:13:6c:a4:17:de:6f:f6:
33
- 15:f5
34
- Exponent: 65537 (0x10001)
35
- X509v3 extensions:
36
- X509v3 Basic Constraints: critical
37
- CA:TRUE, pathlen:0
38
- X509v3 Key Usage: critical
39
- Certificate Sign, CRL Sign
40
- X509v3 CRL Distribution Points:
41
- URI:http://t1.symcb.com/ThawtePCA.crl
42
-
43
- Authority Information Access:
44
- OCSP - URI:http://t2.symcb.com
45
-
46
- X509v3 Certificate Policies:
47
- Policy: 2.16.840.1.113733.1.7.54
48
- CPS: https://www.thawte.com/cps
49
-
50
- X509v3 Subject Alternative Name:
51
- DirName:/CN=SymantecPKI-1-537
52
- X509v3 Subject Key Identifier:
53
- C2:4F:48:57:FC:D1:4F:9A:C0:5D:38:7D:0E:05:DB:D9:2E:B5:52:60
54
- X509v3 Authority Key Identifier:
55
- keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50
56
-
57
- Signature Algorithm: sha256WithRSAEncryption
58
- 8d:06:de:43:c9:76:02:ca:d9:23:97:5e:f3:63:d7:7d:44:c2:
59
- 0f:6b:0a:f5:07:e5:8b:b8:fa:e0:a3:fa:6b:80:92:b5:03:2c:
60
- c5:37:e0:c2:e5:95:b5:92:70:18:28:42:94:ee:4b:77:6a:01:
61
- 0f:8b:23:ec:56:4d:f4:00:69:e5:84:c8:e2:ea:de:5b:3e:f6:
62
- 3c:07:3a:94:ca:6c:27:b1:cc:83:1a:60:71:27:d2:bf:02:f5:
63
- 1e:44:d3:48:d5:a6:d3:76:21:00:9c:fa:98:64:eb:17:36:3f:
64
- eb:1b:3c:3e:a6:b1:d9:58:06:0e:72:d9:68:be:f1:a7:20:d7:
65
- 52:e4:a4:77:1f:71:70:9d:55:35:85:37:e1:1d:4d:94:c2:70:
66
- 7f:95:40:6e:4b:7d:b2:b4:29:2a:03:79:c8:b9:4c:67:61:04:
67
- a0:8b:27:ff:59:00:eb:55:7f:c6:b7:33:35:2d:5e:4e:ac:b8:
68
- ea:12:c5:e8:f7:b9:ab:be:74:92:2c:b7:d9:4d:ca:84:2f:1c:
69
- c2:f0:72:7c:b2:31:6e:cf:80:e5:88:07:36:51:7b:ba:61:af:
70
- 6d:8d:23:5b:34:a3:95:bc:a2:31:7f:f2:f5:e7:b7:e8:ef:c4:
71
- b5:27:32:e9:f7:9e:69:c7:2b:e8:be:bb:0c:aa:e7:ea:60:12:
72
- ea:26:8a:78
73
-
74
- -----BEGIN CERTIFICATE-----
75
- MIIEsjCCA5qgAwIBAgIQFofWiG3iMAaFIz2/Eb9llzANBgkqhkiG9w0BAQsFADCB
76
- qTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjEoMCYGA1UECxMf
77
- Q2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMvKGMpIDIw
78
- MDYgdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNV
79
- BAMTFnRoYXd0ZSBQcmltYXJ5IFJvb3QgQ0EwHhcNMTMxMDMxMDAwMDAwWhcNMjMx
80
- MDMwMjM1OTU5WjBBMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMu
81
- MRswGQYDVQQDExJ0aGF3dGUgU1NMIENBIC0gRzIwggEiMA0GCSqGSIb3DQEBAQUA
82
- A4IBDwAwggEKAoIBAQCy/Ab7BJPS6lkgO0SFl1I55xDweuCwlEDaRvgMKLu5zmA4
83
- P9LYEUIbka1J7o/H3mzeN2/9iyA8bed009zVJIhBgInuNr7E1b6NUxOq5KW4kwq+
84
- 7NrNPNQyVu/QTqC4l7s5UB5uZcP9ss7gWalICcb+vq78PjuBIJeLj0bfYGQHdbsb
85
- hjifR3s0zqHRl6122J+3Jtt5gDZI8sU3+NkyrnykU4HHmaFUOC9PdaC7WqW7zawC
86
- WxkC1RMYp86sdFUSBYubopVGZHI4zVobOhanvnGZjFQDuJZsAdM+Bpg/IYE7An4A
87
- R1MBHg5GQ/tLLdwLGugvmPh+0ZmrE2ykF95v9hX1AgMBAAGjggE7MIIBNzASBgNV
88
- HRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAyBgNVHR8EKzApMCegJaAj
89
- hiFodHRwOi8vdDEuc3ltY2IuY29tL1RoYXd0ZVBDQS5jcmwwLwYIKwYBBQUHAQEE
90
- IzAhMB8GCCsGAQUFBzABhhNodHRwOi8vdDIuc3ltY2IuY29tMEEGA1UdIAQ6MDgw
91
- NgYKYIZIAYb4RQEHNjAoMCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy50aGF3dGUu
92
- Y29tL2NwczApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRU3ltYW50ZWNQS0ktMS01
93
- MzcwHQYDVR0OBBYEFMJPSFf80U+awF04fQ4F29kutVJgMB8GA1UdIwQYMBaAFHtb
94
- Rc+vzst6/TGSGmq280brV0hQMA0GCSqGSIb3DQEBCwUAA4IBAQCNBt5DyXYCytkj
95
- l17zY9d9RMIPawr1B+WLuPrgo/prgJK1AyzFN+DC5ZW1knAYKEKU7kt3agEPiyPs
96
- Vk30AGnlhMji6t5bPvY8BzqUymwnscyDGmBxJ9K/AvUeRNNI1abTdiEAnPqYZOsX
97
- Nj/rGzw+prHZWAYOctlovvGnINdS5KR3H3FwnVU1hTfhHU2UwnB/lUBuS32ytCkq
98
- A3nIuUxnYQSgiyf/WQDrVX/GtzM1LV5OrLjqEsXo97mrvnSSLLfZTcqELxzC8HJ8
99
- sjFuz4DliAc2UXu6Ya9tjSNbNKOVvKIxf/L157fo78S1JzLp955pxyvovrsMqufq
100
- YBLqJop4
101
- -----END CERTIFICATE-----
@@ -1,122 +0,0 @@
1
- Certificate:
2
- Data:
3
- Version: 3 (0x2)
4
- Serial Number:
5
- 39:2d:6f:3b:e4:74:2d:f8:fb:f6:13:4d:1b:80:47:2d
6
- Signature Algorithm: sha256WithRSAEncryption
7
- Issuer: C=US, O=thawte, Inc., CN=thawte SSL CA - G2
8
- Validity
9
- Not Before: Aug 7 00:00:00 2017 GMT
10
- Not After : Aug 6 23:59:59 2020 GMT
11
- Subject: C=CH, ST=Bern, L=Worblaufen, O=Swisscom (Schweiz) AG, OU=Wireless Data Access, CN=api.swisscom.com
12
- Subject Public Key Info:
13
- Public Key Algorithm: rsaEncryption
14
- RSA Public Key: (2048 bit)
15
- Modulus (2048 bit):
16
- 00:e3:7a:53:d1:68:ae:0d:3c:b3:45:05:9e:cc:cc:
17
- 22:a1:70:51:b2:6d:7e:db:8a:89:6e:64:fe:96:bd:
18
- fc:90:8d:4e:fb:c0:1d:bf:b2:89:8e:7c:7f:b0:4c:
19
- 93:a2:21:84:db:48:bf:14:17:1b:7a:ce:e6:bc:8e:
20
- 06:6d:f1:78:cc:ae:5b:e1:31:c9:83:05:d4:94:f9:
21
- 67:8d:c8:c8:75:32:9a:09:13:ed:cd:4c:34:81:af:
22
- 31:62:a8:10:36:ae:86:38:8c:fb:66:9f:65:81:f6:
23
- 62:0d:83:0d:d3:74:22:a6:55:3d:64:f6:de:34:30:
24
- 0e:d8:3e:be:16:75:af:67:df:66:27:97:42:52:29:
25
- 76:ef:b8:f1:f4:c0:fe:c2:39:cb:3b:33:6a:a2:58:
26
- c5:c2:ad:43:3d:9f:13:3f:69:51:40:ba:f7:e0:06:
27
- cf:22:82:27:17:e9:69:63:fc:18:b2:f6:3f:a2:2b:
28
- 55:1d:c1:7c:76:54:31:06:b1:da:c3:e9:da:82:b7:
29
- a6:d2:b9:e9:7f:17:82:95:50:1a:55:1f:ce:76:f6:
30
- 22:f2:b5:01:48:1f:2a:83:91:a6:c9:48:62:ae:cb:
31
- 21:ba:e9:00:11:bf:fc:e5:64:de:11:08:88:a7:61:
32
- d5:d2:3c:c1:f7:00:0b:b8:41:0a:84:e3:04:0b:40:
33
- 7d:0d
34
- Exponent: 65537 (0x10001)
35
- X509v3 extensions:
36
- X509v3 Subject Alternative Name:
37
- DNS:*.api.swisscom.com, DNS:*.api.swisscom.ch, DNS:api.swisscom.ch, DNS:api.swisscom.com
38
- X509v3 Basic Constraints:
39
- CA:FALSE
40
- X509v3 Certificate Policies:
41
- Policy: 2.23.140.1.2.2
42
- CPS: https://www.thawte.com/cps
43
- User Notice:
44
- Explicit Text: https://www.thawte.com/repository
45
-
46
- X509v3 Key Usage: critical
47
- Digital Signature, Key Encipherment
48
- X509v3 Authority Key Identifier:
49
- keyid:C2:4F:48:57:FC:D1:4F:9A:C0:5D:38:7D:0E:05:DB:D9:2E:B5:52:60
50
-
51
- X509v3 CRL Distribution Points:
52
- URI:http://tj.symcb.com/tj.crl
53
-
54
- X509v3 Extended Key Usage:
55
- TLS Web Server Authentication, TLS Web Client Authentication
56
- Authority Information Access:
57
- OCSP - URI:http://tj.symcd.com
58
- CA Issuers - URI:http://tj.symcb.com/tj.crt
59
-
60
- 1.3.6.1.4.1.11129.2.4.2:
61
- .......v....+z
62
- O. ....hp~.....\..=..........]..lW.....G0E. .4.6f..%%..A..,5...$.5...8.....1.!..3..tPYqc5s.....qDR...9....R.p...v.......X......gp
63
- <5.......w...
64
- .....]..l......G0E. ...8.i.K...Z\..b....B`.KX.V..*.0.!.........F.#..7q....A.,........H..v..K..u.`..Bi....f..~_.r....{.z......]..nX.....G0E. uBG.?..ig5......~.oy.."H..Q..@...!..
65
- .a..%..~\._k.E'.)./..#..3....D.v..x....<hFI3M..._.yi ........>......]..m......G0E. .V.Xdb.G.W;.4...Ea..2.p..........!...[
66
- .....}....`.R.B.......oZ.w.{
67
- Signature Algorithm: sha256WithRSAEncryption
68
- 06:8b:05:a6:41:18:b8:50:89:a2:05:2e:88:10:77:0a:ce:4c:
69
- 6c:70:9e:da:26:b9:cb:92:94:b3:44:c4:96:5d:0f:8d:34:b5:
70
- 94:c3:5c:80:68:d1:15:da:5e:49:4d:05:3d:64:7e:03:30:0f:
71
- 43:e4:50:e2:3e:9a:8a:52:04:8a:bb:85:41:d0:8c:b0:06:60:
72
- 21:d1:20:8e:15:eb:38:36:81:ff:15:7b:74:bf:81:1c:37:7d:
73
- 30:12:6b:c2:ca:d5:ed:77:ea:f1:be:2f:a0:d7:3f:0f:ef:11:
74
- 4d:c0:17:96:69:a8:10:d4:24:ea:74:b1:19:7e:32:c8:fd:67:
75
- 09:6f:c2:b4:de:90:ce:9f:8b:0f:9b:05:97:1d:10:6f:ea:46:
76
- be:8a:cb:b9:2f:bb:cf:53:7c:66:ca:36:e9:25:86:3b:b5:97:
77
- 98:f0:bc:4c:10:b0:91:9d:f0:6b:ea:2c:3a:40:ae:82:31:8f:
78
- 2b:43:09:ce:04:4f:d3:72:eb:bd:79:d4:03:ec:4f:67:5f:99:
79
- ad:a9:b9:66:f3:4e:92:b0:ab:f7:cc:ea:54:c7:6b:76:db:69:
80
- b2:e7:f5:9e:12:fb:e5:8f:1e:ec:0b:65:5b:41:ce:2c:43:52:
81
- c4:4c:0f:b1:7b:9c:87:92:25:ad:e9:9c:69:33:78:24:c2:3c:
82
- 46:08:f6:72
83
- -----BEGIN CERTIFICATE-----
84
- MIIG/TCCBeWgAwIBAgIQOS1vO+R0Lfj79hNNG4BHLTANBgkqhkiG9w0BAQsFADBB
85
- MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0
86
- aGF3dGUgU1NMIENBIC0gRzIwHhcNMTcwODA3MDAwMDAwWhcNMjAwODA2MjM1OTU5
87
- WjCBizELMAkGA1UEBhMCQ0gxDTALBgNVBAgMBEJlcm4xEzARBgNVBAcMCldvcmJs
88
- YXVmZW4xHjAcBgNVBAoMFVN3aXNzY29tIChTY2h3ZWl6KSBBRzEdMBsGA1UECwwU
89
- V2lyZWxlc3MgRGF0YSBBY2Nlc3MxGTAXBgNVBAMMEGFwaS5zd2lzc2NvbS5jb20w
90
- ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjelPRaK4NPLNFBZ7MzCKh
91
- cFGybX7bioluZP6WvfyQjU77wB2/somOfH+wTJOiIYTbSL8UFxt6zua8jgZt8XjM
92
- rlvhMcmDBdSU+WeNyMh1MpoJE+3NTDSBrzFiqBA2roY4jPtmn2WB9mINgw3TdCKm
93
- VT1k9t40MA7YPr4Wda9n32Ynl0JSKXbvuPH0wP7COcs7M2qiWMXCrUM9nxM/aVFA
94
- uvfgBs8igicX6Wlj/Biy9j+iK1UdwXx2VDEGsdrD6dqCt6bSuel/F4KVUBpVH852
95
- 9iLytQFIHyqDkabJSGKuyyG66QARv/zlZN4RCIinYdXSPMH3AAu4QQqE4wQLQH0N
96
- AgMBAAGjggOkMIIDoDBTBgNVHREETDBKghIqLmFwaS5zd2lzc2NvbS5jb22CESou
97
- YXBpLnN3aXNzY29tLmNogg9hcGkuc3dpc3Njb20uY2iCEGFwaS5zd2lzc2NvbS5j
98
- b20wCQYDVR0TBAIwADBuBgNVHSAEZzBlMGMGBmeBDAECAjBZMCYGCCsGAQUFBwIB
99
- FhpodHRwczovL3d3dy50aGF3dGUuY29tL2NwczAvBggrBgEFBQcCAjAjDCFodHRw
100
- czovL3d3dy50aGF3dGUuY29tL3JlcG9zaXRvcnkwDgYDVR0PAQH/BAQDAgWgMB8G
101
- A1UdIwQYMBaAFMJPSFf80U+awF04fQ4F29kutVJgMCsGA1UdHwQkMCIwIKAeoByG
102
- Gmh0dHA6Ly90ai5zeW1jYi5jb20vdGouY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMB
103
- BggrBgEFBQcDAjBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly90
104
- ai5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly90ai5zeW1jYi5jb20vdGou
105
- Y3J0MIIB9gYKKwYBBAHWeQIEAgSCAeYEggHiAeAAdgDd6x0reg1PpiCLga2BaHB+
106
- Lo6dAdVciI09EcTNtuy+zAAAAV28rGxXAAAEAwBHMEUCIBE08zZmqdYlJceGQR6U
107
- LDWruZYk6jXdw5Y4qqSr+I8xAiEA9jMG7HRQWXFjNXPWzwcL/XFEUi6GHTkXHqLw
108
- Uo9wls4AdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAV28rGyR
109
- AAAEAwBHMEUCIBYGlTgCaf5Lz/CjWlzd6mLEksjHQmDKS1idVoC2KqQwAiEAu5CZ
110
- 7xus1NpGoiMZgTdxl5f52UHcLIzgFZ7AFqqjSPUAdgDuS723dc5guuFCaR+r4Z5m
111
- ow9+X7By2IMAxHuJeqj9ywAAAV28rG5YAAAEAwBHMEUCIHVCR+w/kpxpZzX0s9+f
112
- C9N+oW95BY8iSMiNUdniQByYAiEA1Q2JYbwQJZujflyUX2vXRScIKc8v4IcjFAUz
113
- ne7EzEQAdgC8eOHfxfY8aEZJM02hD6FfCXlpIAnAgbTz9pF/Ptm4pQAAAV28rG0C
114
- AAAEAwBHMEUCIAZWCFhkYs1H8Vc7ozTW3ZlFYbXiMp1wAKy9f7IaEvrbAiEA2Jdb
115
- DdWmw9eQfdAfFAZgrFKuQgLr9I2R4sRvWvJ323swDQYJKoZIhvcNAQELBQADggEB
116
- AAaLBaZBGLhQiaIFLogQdwrOTGxwntomucuSlLNExJZdD400tZTDXIBo0RXaXklN
117
- BT1kfgMwD0PkUOI+mopSBIq7hUHQjLAGYCHRII4V6zg2gf8Ve3S/gRw3fTASa8LK
118
- 1e136vG+L6DXPw/vEU3AF5ZpqBDUJOp0sRl+Msj9ZwlvwrTekM6fiw+bBZcdEG/q
119
- Rr6Ky7kvu89TfGbKNuklhju1l5jwvEwQsJGd8GvqLDpAroIxjytDCc4ET9Ny6715
120
- 1APsT2dfma2puWbzTpKwq/fM6lTHa3bbabLn9Z4S++WPHuwLZVtBzixDUsRMD7F7
121
- nIeSJa3pnGkzeCTCPEYI9nI=
122
- -----END CERTIFICATE-----
@@ -1,112 +0,0 @@
1
- Certificate:
2
- Data:
3
- Version: 3 (0x2)
4
- Serial Number:
5
- 0b:84:0a:9e:d3:19:c3:53:e0:75:39:f7:fc:bd:d4:d9
6
- Signature Algorithm: sha256WithRSAEncryption
7
- Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Thawte RSA CA 2018
8
- Validity
9
- Not Before: Mar 16 00:00:00 2018 GMT
10
- Not After : Feb 2 12:00:00 2019 GMT
11
- Subject: C=CH, ST=Bern, L=Bern, O=NTH AG, CN=*.mobile-gw.com
12
- Subject Public Key Info:
13
- Public Key Algorithm: rsaEncryption
14
- Public-Key: (2048 bit)
15
- Modulus:
16
- 00:b1:2f:46:f2:92:e9:d3:a6:de:0f:b1:07:bb:6d:
17
- ad:4d:e3:d5:d6:06:3b:f9:91:fb:86:a3:aa:80:d4:
18
- ad:12:d1:04:70:0a:24:ec:1f:b8:70:a5:a5:13:fc:
19
- 5e:74:13:4f:f6:cf:0d:5f:8c:2b:72:26:bc:34:6e:
20
- 9e:77:d6:6b:39:c6:e7:42:f2:5d:b3:3e:79:06:47:
21
- 72:07:a5:56:d7:fe:cf:a9:97:a8:de:19:80:e2:83:
22
- fb:9c:2d:31:ee:84:f8:71:f3:5a:c1:75:74:4c:70:
23
- aa:09:00:77:85:07:aa:5b:9c:a7:aa:06:62:10:82:
24
- fb:f7:2f:93:63:1a:53:cd:f3:90:b0:43:20:ee:ce:
25
- 71:24:35:c6:f1:28:a7:7f:7c:a3:5c:c8:34:ff:c7:
26
- 79:de:fe:e6:96:3e:a0:00:bd:17:fc:8e:a0:d3:3b:
27
- 30:58:12:05:50:6d:ca:19:22:c3:6c:11:e7:1a:6a:
28
- 34:a3:e8:e0:87:58:44:f3:bb:e3:ba:cf:27:c0:2a:
29
- d8:e6:dd:29:e1:88:3d:be:23:7c:00:8f:6a:93:e1:
30
- bb:69:b7:ce:be:fa:46:51:2d:22:dd:ce:ff:25:8b:
31
- ae:e7:66:9e:6c:87:30:ed:2e:0e:fe:8d:24:8a:55:
32
- 19:ca:54:d5:b7:0e:02:3b:eb:91:e4:24:d4:b6:a9:
33
- e8:5f
34
- Exponent: 65537 (0x10001)
35
- X509v3 extensions:
36
- X509v3 Authority Key Identifier:
37
- keyid:A3:C8:5E:65:54:E5:30:78:C1:05:EA:07:0A:6A:59:CC:B9:FE:DE:5A
38
-
39
- X509v3 Subject Key Identifier:
40
- 37:3A:E2:D1:2B:AE:F1:7C:ED:22:91:0B:92:71:BD:BD:CA:D1:77:61
41
- X509v3 Subject Alternative Name:
42
- DNS:*.mobile-gw.com, DNS:mobile-gw.com
43
- X509v3 Key Usage: critical
44
- Digital Signature, Key Encipherment
45
- X509v3 Extended Key Usage:
46
- TLS Web Server Authentication, TLS Web Client Authentication
47
- X509v3 CRL Distribution Points:
48
-
49
- Full Name:
50
- URI:http://cdp.thawte.com/ThawteRSACA2018.crl
51
-
52
- X509v3 Certificate Policies:
53
- Policy: 2.16.840.1.114412.1.1
54
- CPS: https://www.digicert.com/CPS
55
- Policy: 2.23.140.1.2.2
56
-
57
- Authority Information Access:
58
- OCSP - URI:http://status.thawte.com
59
- CA Issuers - URI:http://cacerts.thawte.com/ThawteRSACA2018.crt
60
-
61
- X509v3 Basic Constraints:
62
- CA:FALSE
63
- Signature Algorithm: sha256WithRSAEncryption
64
- 81:2c:4c:77:51:54:9e:15:0e:30:2c:a1:dd:38:61:9d:b1:f2:
65
- 62:74:ca:28:4d:3f:3c:04:c8:7f:69:9a:b6:c8:b6:31:0e:42:
66
- 6a:c4:f1:2a:e7:7c:ba:93:30:38:b6:54:6b:f2:07:fa:c1:52:
67
- 57:9f:25:28:b4:e2:02:ac:cc:08:b6:fb:56:99:5f:10:76:35:
68
- db:09:31:ff:12:f3:b5:41:73:a6:33:fa:80:43:76:7f:80:68:
69
- 61:5e:34:25:50:d7:e3:81:34:9b:50:5a:58:0a:fd:b7:d0:9d:
70
- 1d:57:eb:2e:84:a4:ee:88:56:f4:d4:f6:ea:2d:5c:30:b3:a8:
71
- 6d:95:f6:8c:d5:fb:d9:e6:d8:4e:60:a4:ad:0c:38:1b:7e:1d:
72
- da:78:03:c0:3e:37:5a:f2:b0:48:a3:ba:d9:68:6a:6c:b1:31:
73
- b9:ff:06:62:2e:cd:d3:e8:fa:36:d7:db:fc:cd:3c:33:7a:87:
74
- c0:d9:9d:16:f0:71:3a:5b:e2:39:8b:41:80:6d:da:19:68:ab:
75
- 3f:30:88:83:e4:1b:05:52:20:d2:4b:cd:41:51:73:72:85:80:
76
- df:59:a2:9e:12:8b:b1:f6:4a:9a:41:e3:c9:b7:28:3f:79:19:
77
- 14:e7:8f:aa:04:4c:f5:34:ba:47:41:61:4c:f3:08:57:93:24:
78
- d9:8e:eb:d9
79
- -----BEGIN CERTIFICATE-----
80
- MIIF6jCCBNKgAwIBAgIQC4QKntMZw1PgdTn3/L3U2TANBgkqhkiG9w0BAQsFADBc
81
- MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
82
- d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
83
- MTgwMzE2MDAwMDAwWhcNMTkwMjAyMTIwMDAwWjBWMQswCQYDVQQGEwJDSDENMAsG
84
- A1UECBMEQmVybjENMAsGA1UEBxMEQmVybjEPMA0GA1UEChMGTlRIIEFHMRgwFgYD
85
- VQQDDA8qLm1vYmlsZS1ndy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
86
- AoIBAQCxL0bykunTpt4PsQe7ba1N49XWBjv5kfuGo6qA1K0S0QRwCiTsH7hwpaUT
87
- /F50E0/2zw1fjCtyJrw0bp531ms5xudC8l2zPnkGR3IHpVbX/s+pl6jeGYDig/uc
88
- LTHuhPhx81rBdXRMcKoJAHeFB6pbnKeqBmIQgvv3L5NjGlPN85CwQyDuznEkNcbx
89
- KKd/fKNcyDT/x3ne/uaWPqAAvRf8jqDTOzBYEgVQbcoZIsNsEecaajSj6OCHWETz
90
- u+O6zyfAKtjm3SnhiD2+I3wAj2qT4btpt86++kZRLSLdzv8li67nZp5shzDtLg7+
91
- jSSKVRnKVNW3DgI765HkJNS2qehfAgMBAAGjggKsMIICqDAfBgNVHSMEGDAWgBSj
92
- yF5lVOUweMEF6gcKalnMuf7eWjAdBgNVHQ4EFgQUNzri0Suu8XztIpELknG9vcrR
93
- d2EwKQYDVR0RBCIwIIIPKi5tb2JpbGUtZ3cuY29tgg1tb2JpbGUtZ3cuY29tMA4G
94
- A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOgYD
95
- VR0fBDMwMTAvoC2gK4YpaHR0cDovL2NkcC50aGF3dGUuY29tL1RoYXd0ZVJTQUNB
96
- MjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYc
97
- aHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwbwYIKwYBBQUH
98
- AQEEYzBhMCQGCCsGAQUFBzABhhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOQYI
99
- KwYBBQUHMAKGLWh0dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0Ey
100
- MDE4LmNydDAJBgNVHRMEAjAAMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYApLkJ
101
- kLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFiLwMsHgAABAMARzBFAiEA
102
- wr1I3GqvQpI+rjM+hA6EhUzJQm4ARwixUf/2CtqHD48CIBV2uO/KhLX9RYGzfh/s
103
- pcUWx5PcT6i5XpgH6QliYZwOAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y
104
- CJo32RMAAAFiLwMtlAAABAMARzBFAiEA987nF1ehANN+U3UO+x5ffzxpIF5LIeXG
105
- D42wj3tKVwcCIBJJ0EqclIi4nkuW/5GjMThxIxGP47ACNRaTNmQvOpZwMA0GCSqG
106
- SIb3DQEBCwUAA4IBAQCBLEx3UVSeFQ4wLKHdOGGdsfJidMooTT88BMh/aZq2yLYx
107
- DkJqxPEq53y6kzA4tlRr8gf6wVJXnyUotOICrMwItvtWmV8QdjXbCTH/EvO1QXOm
108
- M/qAQ3Z/gGhhXjQlUNfjgTSbUFpYCv230J0dV+suhKTuiFb01PbqLVwws6htlfaM
109
- 1fvZ5thOYKStDDgbfh3aeAPAPjda8rBIo7rZaGpssTG5/wZiLs3T6Po219v8zTwz
110
- eofA2Z0W8HE6W+I5i0GAbdoZaKs/MIiD5BsFUiDSS81BUXNyhYDfWaKeEoux9kqa
111
- QePJtyg/eRkU54+qBEz1NLpHQWFM8whXkyTZjuvZ
112
- -----END CERTIFICATE-----