sslcheck 0.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (42) hide show
  1. checksums.yaml +7 -0
  2. data/.gitignore +14 -0
  3. data/.rspec +3 -0
  4. data/.travis.yml +6 -0
  5. data/Gemfile +4 -0
  6. data/LICENSE.txt +22 -0
  7. data/README.md +177 -0
  8. data/Rakefile +14 -0
  9. data/acceptance/acceptance_helper.rb +1 -0
  10. data/acceptance/checking_certificates_spec.rb +23 -0
  11. data/acceptance/client_spec.rb +67 -0
  12. data/blinky_tests +3 -0
  13. data/lib/sslcheck.rb +20 -0
  14. data/lib/sslcheck/certificate.rb +121 -0
  15. data/lib/sslcheck/certificate_client.rb +10 -0
  16. data/lib/sslcheck/check.rb +65 -0
  17. data/lib/sslcheck/client.rb +68 -0
  18. data/lib/sslcheck/generic_error.rb +15 -0
  19. data/lib/sslcheck/parser.rb +96 -0
  20. data/lib/sslcheck/validator.rb +111 -0
  21. data/lib/sslcheck/validators/ca_bundle.rb +23 -0
  22. data/lib/sslcheck/validators/common_name.rb +27 -0
  23. data/lib/sslcheck/validators/errors.rb +15 -0
  24. data/lib/sslcheck/validators/expiration_date.rb +10 -0
  25. data/lib/sslcheck/validators/generic_validator.rb +15 -0
  26. data/lib/sslcheck/validators/issue_date.rb +10 -0
  27. data/lib/sslcheck/version.rb +3 -0
  28. data/run_acceptance_on_ci +7 -0
  29. data/sentinal +10 -0
  30. data/spec/ca_bundle_validator_spec.rb +24 -0
  31. data/spec/cert_fixtures.rb +814 -0
  32. data/spec/certificate_spec.rb +134 -0
  33. data/spec/check_spec.rb +172 -0
  34. data/spec/common_name_validator_spec.rb +40 -0
  35. data/spec/expiration_date_validator_spec.rb +36 -0
  36. data/spec/issue_date_validator_spec.rb +36 -0
  37. data/spec/parser_spec.rb +0 -0
  38. data/spec/response_spec.rb +13 -0
  39. data/spec/spec_helper.rb +100 -0
  40. data/spec/validator_spec.rb +84 -0
  41. data/sslcheck.gemspec +26 -0
  42. metadata +165 -0
@@ -0,0 +1,15 @@
1
+ module SSLCheck
2
+ module Validators
3
+ class GenericValidator
4
+ def initialize(common_name, peer_cert, ca_bundle)
5
+ @common_name = common_name
6
+ @peer_cert = peer_cert
7
+ @ca_bundle = ca_bundle
8
+ end
9
+
10
+ def validate
11
+ nil
12
+ end
13
+ end
14
+ end
15
+ end
@@ -0,0 +1,10 @@
1
+ module SSLCheck
2
+ module Validators
3
+ class IssueDate < GenericValidator
4
+ def validate(clock=DateTime)
5
+ return nil if clock.now > @peer_cert.not_before
6
+ SSLCheck::Errors::Validation::NotYetIssued.new({:name => "Not Yet Issues", :message => "This certificate is not valid until #{@peer_cert.not_before}."})
7
+ end
8
+ end
9
+ end
10
+ end
@@ -0,0 +1,3 @@
1
+ module SSLCheck
2
+ VERSION = "0.9.0"
3
+ end
@@ -0,0 +1,7 @@
1
+ #!/bin/bash
2
+
3
+ third_build=`expr $TRAVIS_JOB_ID % 3`
4
+
5
+ if [ $third_build -eq 0 ]; then
6
+ bundle exec rspec acceptance
7
+ fi
@@ -0,0 +1,10 @@
1
+ #!/bin/bash
2
+
3
+ blinky-tape-test-tool xs
4
+ ./blinky_tests
5
+ /usr/local/bin/fswatch -o spec lib | xargs -n1 ./blinky_tests
6
+
7
+
8
+ #bundle exec rspec spec
9
+ #/usr/local/bin/fswatch -o spec lib | xargs -n1 bundle exec rspec spec
10
+
@@ -0,0 +1,24 @@
1
+ require 'spec_helper'
2
+
3
+ module SSLCheck
4
+ describe 'CABundleValidatorSpec' do
5
+ before do
6
+ @cert = Certificate.new(VALID_CERT)
7
+ @ca_bundle = [Certificate.new(CA_PARENT), Certificate.new(CA_GRAND_PARENT), Certificate.new(CA_GREAT_GRAND_PARENT)]
8
+ end
9
+ context "when the CA Bundle verifies the certificate" do
10
+ it 'should return nothing' do
11
+ sut = Validators::CABundle.new("npboards.com", @cert, @ca_bundle)
12
+ result = sut.validate
13
+ expect(result).to_not be
14
+ end
15
+ end
16
+ context "when the certificate cannot be verified by the CA Bundle" do
17
+ it 'should return errors' do
18
+ sut = Validators::CABundle.new("npboards.com", @cert, [Certificate.new(CA_PARENT)])
19
+ result = sut.validate
20
+ expect(result).to be_a SSLCheck::Errors::Validation::CABundleVerification
21
+ end
22
+ end
23
+ end
24
+ end
@@ -0,0 +1,814 @@
1
+ VALID_CERT = "CONNECTED(00000003)
2
+ depth=3 /C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
3
+ verify error:num=19:self signed certificate in certificate chain
4
+ verify return:0
5
+ ---
6
+ Certificate chain
7
+ 0 s:/OU=Domain Control Validated/CN=www.npboards.com
8
+ i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
9
+ -----BEGIN CERTIFICATE-----
10
+ MIIFJzCCBA+gAwIBAgIHBJJ3xc1KuTANBgkqhkiG9w0BAQsFADCBtDELMAkGA1UE
11
+ BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAY
12
+ BgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMS0wKwYDVQQLEyRodHRwOi8vY2VydHMu
13
+ Z29kYWRkeS5jb20vcmVwb3NpdG9yeS8xMzAxBgNVBAMTKkdvIERhZGR5IFNlY3Vy
14
+ ZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjAeFw0xNDA2MTcxODE2MDFaFw0x
15
+ NTA2MTcxODE2MDFaMD4xITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRl
16
+ ZDEZMBcGA1UEAxMQd3d3Lm5wYm9hcmRzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
17
+ ggEPADCCAQoCggEBAKJqQ6IHqhZrA6GPR/aDDJVVxAgpDakjFOk5HR1b5RsTHxCL
18
+ n7aE00ApmYJZfI62RWdDek9Hkk5ZgLcJ5ztXh+ITpwG/bSPSQtMFtky4YQspzgsT
19
+ xwHOb0zU4BaaVVhQqyVLQUgd/KvHF/1vP0TAJ/be/VoWn5oVYyM948c2Z/kGqUPe
20
+ tvgiZLlL082yrML0cSEoRLgYrZ50wVKNFPcKbXZN0Vnk05sHJTc9q2NYpSFagqv0
21
+ u13wh4reABiO/Mpl71uarY6thBv9IpR4GK50d+Pl1TYMLDFghYN0nzuUTj+t9BaT
22
+ OXWYZCOteUAmh3BPq3rD8iYrdQInwIzrMAAVgKMCAwEAAaOCAbEwggGtMAwGA1Ud
23
+ EwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB
24
+ /wQEAwIFoDA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY3JsLmdvZGFkZHkuY29t
25
+ L2dkaWcyczEtNzcuY3JsMFMGA1UdIARMMEowSAYLYIZIAYb9bQEHFwEwOTA3Bggr
26
+ BgEFBQcCARYraHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0
27
+ b3J5LzB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdv
28
+ ZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2Rh
29
+ ZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0
30
+ gzCiM9f7bLPwtCyAzjApBgNVHREEIjAgghB3d3cubnBib2FyZHMuY29tggxucGJv
31
+ YXJkcy5jb20wHQYDVR0OBBYEFOpHY93l1TgIyu9SVsa5m7M86GPMMA0GCSqGSIb3
32
+ DQEBCwUAA4IBAQAuC0ydTRqRcIC8kyYCVNaTRxacyU9zmTKmPR0nS1Ikrmt6JtVM
33
+ fJwaLGQji86jd3Z7b4jzYcEKWIaDRdZmfQ2LG3Q5xetLhOHFxMl6O1NJfk7VhVTN
34
+ FNisL3DnVM9G6b6wl/JzAevQ8javEoSoAcffTXiLLJWPn+1AtYRvs2GkAIrGNGgK
35
+ A6ZCYtfGvM0uy4oDIdwWueon8YnSpxqR8XfsfvR8kcR93c30AMVbk4OAu6OAp5kO
36
+ qDmgKhvyXhJ5/8cHH5WqMpor0Fwjxsrvq/BhJ1FXYlc6/GtiAR48E28SjP6YvfHQ
37
+ TXenj1uVKzuCU7eCmR5kr3tQp+ScIQPt1Ifh
38
+ -----END CERTIFICATE-----
39
+ 1 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
40
+ i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
41
+ -----BEGIN CERTIFICATE-----
42
+ MIIE0DCCA7igAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
43
+ EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
44
+ EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
45
+ ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTExMDUwMzA3MDAwMFoXDTMxMDUwMzA3
46
+ MDAwMFowgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH
47
+ EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UE
48
+ CxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQD
49
+ EypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwggEi
50
+ MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54MsQ1K92vdSTYuswZLiBCGzD
51
+ BNliF44v/z5lz4/OYuY8UhzaFkVLVat4a2ODYpDOD2lsmcgaFItMzEUz6ojcnqOv
52
+ K/6AYZ15V8TPLvQ/MDxdR/yaFrzDN5ZBUY4RS1T4KL7QjL7wMDge87Am+GZHY23e
53
+ cSZHjzhHU9FGHbTj3ADqRay9vHHZqm8A29vNMDp5T19MR/gd71vCxJ1gO7GyQ5HY
54
+ pDNO6rPWJ0+tJYqlxvTV0KaudAVkV4i1RFXULSo6Pvi4vekyCgKUZMQWOlDxSq7n
55
+ eTOvDCAHf+jfBDnCaQJsY1L6d8EbyHSHyLmTGFBUNUtpTrw700kuH9zB0lL7AgMB
56
+ AAGjggEaMIIBFjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNV
57
+ HQ4EFgQUQMK9J47MNIMwojPX+2yz8LQsgM4wHwYDVR0jBBgwFoAUOpqFBxBnKLbv
58
+ 9r0FQW4gwZTaD94wNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8v
59
+ b2NzcC5nb2RhZGR5LmNvbS8wNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2NybC5n
60
+ b2RhZGR5LmNvbS9nZHJvb3QtZzIuY3JsMEYGA1UdIAQ/MD0wOwYEVR0gADAzMDEG
61
+ CCsGAQUFBwIBFiVodHRwczovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkv
62
+ MA0GCSqGSIb3DQEBCwUAA4IBAQAIfmyTEMg4uJapkEv/oV9PBO9sPpyIBslQj6Zz
63
+ 91cxG7685C/b+LrTW+C05+Z5Yg4MotdqY3MxtfWoSKQ7CC2iXZDXtHwlTxFWMMS2
64
+ RJ17LJ3lXubvDGGqv+QqG+6EnriDfcFDzkSnE3ANkR/0yBOtg2DZ2HKocyQetawi
65
+ DsoXiWJYRBuriSUBAA/NxBti21G00w9RKpv0vHP8ds42pM3Z2Czqrpv1KrKQ0U11
66
+ GIo/ikGQI31bS/6kA1ibRrLDYGCD+H1QQc7CoZDDu+8CL9IVVO5EFdkKrqeKM+2x
67
+ LXY2JtwE65/3YR8V3Idv7kaWKK2hJn0KCacuBKONvPi8BDAB
68
+ -----END CERTIFICATE-----
69
+ 2 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
70
+ i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
71
+ -----BEGIN CERTIFICATE-----
72
+ MIIEfTCCA2WgAwIBAgIDG+cVMA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVT
73
+ MSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIEluYy4xMTAvBgNVBAsTKEdv
74
+ IERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMTAx
75
+ MDcwMDAwWhcNMzEwNTMwMDcwMDAwWjCBgzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
76
+ B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHku
77
+ Y29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmljYXRlIEF1
78
+ dGhvcml0eSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Fi
79
+ CPH6WTT3G8kYo/eASVjpIoMTpsUgQwE7hPHmhUmfJ+r2hBtOoLTbcJjHMgGxBT4H
80
+ Tu70+k8vWTAi56sZVmvigAf88xZ1gDlRe+X5NbZ0TqmNghPktj+pA4P6or6KFWp/
81
+ 3gvDthkUBcrqw6gElDtGfDIN8wBmIsiNaW02jBEYt9OyHGC0OPoCjM7T3UYH3go+
82
+ 6118yHz7sCtTpJJiaVElBWEaRIGMLKlDliPfrDqBmg4pxRyp6V0etp6eMAo5zvGI
83
+ gPtLXcwy7IViQyU0AlYnAZG0O3AqP26x6JyIAX2f1PnbU21gnb8s51iruF9G/M7E
84
+ GwM8CetJMVxpRrPgRwIDAQABo4IBFzCCARMwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
85
+ HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9BUFuIMGU2g/eMB8GA1Ud
86
+ IwQYMBaAFNLEsNKR1EwRcbNhyz2h/t2oatTjMDQGCCsGAQUFBwEBBCgwJjAkBggr
87
+ BgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMDIGA1UdHwQrMCkwJ6Al
88
+ oCOGIWh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2Ryb290LmNybDBGBgNVHSAEPzA9
89
+ MDsGBFUdIAAwMzAxBggrBgEFBQcCARYlaHR0cHM6Ly9jZXJ0cy5nb2RhZGR5LmNv
90
+ bS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAWQtTvZKGEacke+1bMc8d
91
+ H2xwxbhuvk679r6XUOEwf7ooXGKUwuN+M/f7QnaF25UcjCJYdQkMiGVnOQoWCcWg
92
+ OJekxSOTP7QYpgEGRJHjp2kntFolfzq3Ms3dhP8qOCkzpN1nsoX+oYggHFCJyNwq
93
+ 9kIDN0zmiN/VryTyscPfzLXs4Jlet0lUIDyUGAzHHFIYSaRt4bNYC8nY7NmuHDKO
94
+ KHAN4v6mF56ED71XcLNa6R+ghlO773z/aQvgSMO3kwvIClTErF0UZzdsyqUvMQg3
95
+ qm5vjLyb4lddJIGvl5echK1srDdMZvNhkREg5L4wn3qkKQmw4TRfZHcYQFHfjDCm
96
+ rw==
97
+ -----END CERTIFICATE-----
98
+ 3 s:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
99
+ i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
100
+ -----BEGIN CERTIFICATE-----
101
+ MIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEh
102
+ MB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBE
103
+ YWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3
104
+ MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkGA1UEBhMCVVMxITAfBgNVBAoTGFRo
105
+ ZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28gRGFkZHkgQ2xhc3Mg
106
+ MiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQADggEN
107
+ ADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d/+TvZxz0ZWizV3GgXne77ZtJ6XCA
108
+ PVYYYwhv2vLM0D9/AlQiVBDYsoHUwHU9S3/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6w
109
+ wdhFJ2+qN1j3hybX2C32qRe3H3I2TqYXP2WYktsqbl2i/ojgC95/5Y0V4evLOtXi
110
+ EqITLdiOr18SPaAIBQi2XKVlOARFmR6jYGB0xUGlcmIbYsUfb18aQr4CUWWoriMY
111
+ avx4A6lNf4DD+qta/KFApMoZFv6yyO9ecw3ud72a9nmYvLEHZ6IVDd2gWMZEewo+
112
+ YihfukEHU1jPEX44dMX4/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0OBBYEFNLE
113
+ sNKR1EwRcbNhyz2h/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h
114
+ /t2oatTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5
115
+ IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmlj
116
+ YXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD
117
+ ggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wimPQoZ+YeAEW5p5JYXMP80kWNy
118
+ OO7MHAGjHZQopDH2esRU1/blMVgDoszOYtuURXO1v0XJJLXVggKtI3lpjbi2Tc7P
119
+ TMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQ
120
+ HmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0/ZM/iZx4mER
121
+ dEr/VxqHD3VILs9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5Cuf
122
+ ReYNnyicsbkqWletNw+vHX/bvZ8=
123
+ -----END CERTIFICATE-----
124
+ ---
125
+ Server certificate
126
+ subject=/OU=Domain Control Validated/CN=www.npboards.com
127
+ issuer=/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
128
+ ---
129
+ No client certificate CA names sent
130
+ ---
131
+ SSL handshake has read 5704 bytes and written 456 bytes
132
+ ---
133
+ New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
134
+ Server public key is 2048 bit
135
+ Secure Renegotiation IS supported
136
+ Compression: NONE
137
+ Expansion: NONE
138
+ SSL-Session:
139
+ Protocol : TLSv1
140
+ Cipher : DHE-RSA-AES256-SHA
141
+ Session-ID: 2A2AFDE8AC762192EBEBAA5CC83B2A4896C2E3BC22DDFBFCC5CD8A034032994A
142
+ Session-ID-ctx:
143
+ Master-Key: 15A811591A7C0FD8F433263839A71DE6299316891E073589A5CD255BDE916D42A89B609797DC407FA8027657FA954F10
144
+ Key-Arg : None
145
+ Start Time: 1407263216
146
+ Timeout : 300 (sec)
147
+ Verify return code: 0 (ok)
148
+ ---
149
+ DONE"
150
+
151
+ INVALID_CERT = "CONNECTED(00000003)
152
+ depth=3 /C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
153
+ verify error:num=19:self signed certificate in certificate chain
154
+ verify return:0
155
+ ---
156
+ Certificate chain
157
+ 0 s:/OU=Domain Control Validated/CN=www.npboards.com
158
+ i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
159
+ -----BEGIN CERTIFICATE-----
160
+ MIIFJzCCBA+gAwIBAgIHBJJ3xc1KuTANBgkqhkiG9w0BAQsFADCBtDELMAkGA1UE
161
+ BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAY
162
+ BgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMS0wKwYDVQQLEyRodHRwOi8vY2VydHMu
163
+ Z29kYWRkeS5jb20vcmVwb3NpdG9yeS8xMzAxBgNVBAMTKkdvIERhZGR5IFNlY3Vy
164
+ ZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjAeFw0xNDA2MTcxODE2MDFaFw0x
165
+ NTA2MTcxODE2MDFaMD4xITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRl
166
+ ZDEZMBcGA1UEAxMQd3d3Lm5wYm9hcmRzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
167
+ ggEPADCCAQoCggEBAKJqQ6IHqhZrA6GPR/aDDJVVxAgpDakjFOk5HR1b5RsTHxCL
168
+ n7aE00ApmYJZfI62RWdDek9Hkk5ZgLcJ5ztXh+ITpwG/bSPSQtMFtky4YQspzgsT
169
+ xwHOb0zU4BaaVVhQqyVLQUgd/KvHF/1vP0TAJ/be/VoWn5oVYyM948c2Z/kGqUPe
170
+ tvgiZLlL082yrML0cSEoRLgYrZ50wVKNFPcKbXZN0Vnk05sHJTc9q2NYpSFagqv0
171
+ u13wh4reABiO/Mpl71uarY6thBv9IpR4GK50d+Pl1TYMLDFghYN0nzuUTj+t9BaT
172
+ OXWYZCOteUAmh3BPq3rD8iYrdQInwIzrMAAVgKMCAwEAAaOCAbEwggGtMAwGA1Ud
173
+ EwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB
174
+ /wQEAwIFoDA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY3JsLmdvZGFkZHkuY29t
175
+ L2dkaWcyczEtNzcuY3JsMFMGA1UdIARMMEowSAYLYIZIAYb9bQEHFwEwOTA3Bggr
176
+ BgEFBQcCARYraHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0
177
+ b3J5LzB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdv
178
+ ZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2Rh
179
+ ZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0
180
+ gzCiM9f7bLPwtCyAzjApBgNVHREEIjAgghB3d3cubnBib2FyZHMuY29tggxucGJv
181
+ YXJkcy5jb20wHQYDVR0OBBYEFOpHY93l1TgIyu9SVsa5m7M86GPMMA0GCSqGSIb3
182
+ DQEBCwUAA4IBAQAuC0ydTRqRcIC8kyYCVNaTRxacyU9zmTKmPR0nS1Ikrmt6JtVM
183
+ fJwaLGQji86jd3Z7b4jzYcEKWIaDRdZmfQ2LG3Q5xetLhOHFxMl6O1NJfk7VhVTN
184
+ FNisL3DnVM9G6b6wl/JzAevQ8javEoSoAcffTXiLLJWPn+1AtYRvs2GkAIrGNGgK
185
+ A6ZCYtfGvM0uy4oDIdwWueon8YnSpxqR8XfsfvR8kcR93c30AMVbk4OAu6OAp5kO
186
+ qDmgKhvyXhJ5/8cHH5WqMpor0Fwjxsrvq/BhJ1FXYlc6/GtiAR48E28SjP6YvfHQ
187
+ TXenj1uVKzuCU7eCmR5kr3tQp+ScIQPt1Ifh
188
+ -----END CERTIFICATE-----
189
+ 1 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
190
+ i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
191
+ -----BEGIN CERTIFICATE-----
192
+ MIIEfTCCA2WgAwIBAgIDG+cVMA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVT
193
+ MSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIEluYy4xMTAvBgNVBAsTKEdv
194
+ IERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMTAx
195
+ MDcwMDAwWhcNMzEwNTMwMDcwMDAwWjCBgzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
196
+ B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHku
197
+ Y29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmljYXRlIEF1
198
+ dGhvcml0eSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Fi
199
+ CPH6WTT3G8kYo/eASVjpIoMTpsUgQwE7hPHmhUmfJ+r2hBtOoLTbcJjHMgGxBT4H
200
+ Tu70+k8vWTAi56sZVmvigAf88xZ1gDlRe+X5NbZ0TqmNghPktj+pA4P6or6KFWp/
201
+ 3gvDthkUBcrqw6gElDtGfDIN8wBmIsiNaW02jBEYt9OyHGC0OPoCjM7T3UYH3go+
202
+ 6118yHz7sCtTpJJiaVElBWEaRIGMLKlDliPfrDqBmg4pxRyp6V0etp6eMAo5zvGI
203
+ gPtLXcwy7IViQyU0AlYnAZG0O3AqP26x6JyIAX2f1PnbU21gnb8s51iruF9G/M7E
204
+ GwM8CetJMVxpRrPgRwIDAQABo4IBFzCCARMwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
205
+ HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9BUFuIMGU2g/eMB8GA1Ud
206
+ IwQYMBaAFNLEsNKR1EwRcbNhyz2h/t2oatTjMDQGCCsGAQUFBwEBBCgwJjAkBggr
207
+ BgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMDIGA1UdHwQrMCkwJ6Al
208
+ oCOGIWh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2Ryb290LmNybDBGBgNVHSAEPzA9
209
+ MDsGBFUdIAAwMzAxBggrBgEFBQcCARYlaHR0cHM6Ly9jZXJ0cy5nb2RhZGR5LmNv
210
+ bS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAWQtTvZKGEacke+1bMc8d
211
+ H2xwxbhuvk679r6XUOEwf7ooXGKUwuN+M/f7QnaF25UcjCJYdQkMiGVnOQoWCcWg
212
+ OJekxSOTP7QYpgEGRJHjp2kntFolfzq3Ms3dhP8qOCkzpN1nsoX+oYggHFCJyNwq
213
+ 9kIDN0zmiN/VryTyscPfzLXs4Jlet0lUIDyUGAzHHFIYSaRt4bNYC8nY7NmuHDKO
214
+ KHAN4v6mF56ED71XcLNa6R+ghlO773z/aQvgSMO3kwvIClTErF0UZzdsyqUvMQg3
215
+ qm5vjLyb4lddJIGvl5echK1srDdMZvNhkREg5L4wn3qkKQmw4TRfZHcYQFHfjDCm
216
+ rw==
217
+ -----END CERTIFICATE-----
218
+ 2 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
219
+ i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
220
+ -----BEGIN CERTIFICATE-----
221
+ MIIEfTCCA2WgAwIBAgIDG+cVMA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVT
222
+ MSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIEluYy4xMTAvBgNVBAsTKEdv
223
+ IERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMTAx
224
+ MDcwMDAwWhcNMzEwNTMwMDcwMDAwWjCBgzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
225
+ B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHku
226
+ Y29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmljYXRlIEF1
227
+ dGhvcml0eSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Fi
228
+ CPH6WTT3G8kYo/eASVjpIoMTpsUgQwE7hPHmhUmfJ+r2hBtOoLTbcJjHMgGxBT4H
229
+ Tu70+k8vWTAi56sZVmvigAf88xZ1gDlRe+X5NbZ0TqmNghPktj+pA4P6or6KFWp/
230
+ 3gvDthkUBcrqw6gElDtGfDIN8wBmIsiNaW02jBEYt9OyHGC0OPoCjM7T3UYH3go+
231
+ 6118yHz7sCtTpJJiaVElBWEaRIGMLKlDliPfrDqBmg4pxRyp6V0etp6eMAo5zvGI
232
+ gPtLXcwy7IViQyU0AlYnAZG0O3AqP26x6JyIAX2f1PnbU21gnb8s51iruF9G/M7E
233
+ GwM8CetJMVxpRrPgRwIDAQABo4IBFzCCARMwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
234
+ HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9BUFuIMGU2g/eMB8GA1Ud
235
+ IwQYMBaAFNLEsNKR1EwRcbNhyz2h/t2oatTjMDQGCCsGAQUFBwEBBCgwJjAkBggr
236
+ BgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMDIGA1UdHwQrMCkwJ6Al
237
+ oCOGIWh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2Ryb290LmNybDBGBgNVHSAEPzA9
238
+ MDsGBFUdIAAwMzAxBggrBgEFBQcCARYlaHR0cHM6Ly9jZXJ0cy5nb2RhZGR5LmNv
239
+ bS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAWQtTvZKGEacke+1bMc8d
240
+ H2xwxbhuvk679r6XUOEwf7ooXGKUwuN+M/f7QnaF25UcjCJYdQkMiGVnOQoWCcWg
241
+ OJekxSOTP7QYpgEGRJHjp2kntFolfzq3Ms3dhP8qOCkzpN1nsoX+oYggHFCJyNwq
242
+ 9kIDN0zmiN/VryTyscPfzLXs4Jlet0lUIDyUGAzHHFIYSaRt4bNYC8nY7NmuHDKO
243
+ KHAN4v6mF56ED71XcLNa6R+ghlO773z/aQvgSMO3kwvIClTErF0UZzdsyqUvMQg3
244
+ qm5vjLyb4lddJIGvl5echK1srDdMZvNhkREg5L4wn3qkKQmw4TRfZHcYQFHfjDCm
245
+ rw==
246
+ -----END CERTIFICATE-----
247
+ 3 s:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
248
+ i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
249
+ -----BEGIN CERTIFICATE-----
250
+ MIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEh
251
+ MB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBE
252
+ YWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3
253
+ MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkGA1UEBhMCVVMxITAfBgNVBAoTGFRo
254
+ ZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28gRGFkZHkgQ2xhc3Mg
255
+ MiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQADggEN
256
+ ADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d/+TvZxz0ZWizV3GgXne77ZtJ6XCA
257
+ PVYYYwhv2vLM0D9/AlQiVBDYsoHUwHU9S3/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6w
258
+ wdhFJ2+qN1j3hybX2C32qRe3H3I2TqYXP2WYktsqbl2i/ojgC95/5Y0V4evLOtXi
259
+ EqITLdiOr18SPaAIBQi2XKVlOARFmR6jYGB0xUGlcmIbYsUfb18aQr4CUWWoriMY
260
+ avx4A6lNf4DD+qta/KFApMoZFv6yyO9ecw3ud72a9nmYvLEHZ6IVDd2gWMZEewo+
261
+ YihfukEHU1jPEX44dMX4/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0OBBYEFNLE
262
+ sNKR1EwRcbNhyz2h/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h
263
+ /t2oatTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5
264
+ IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmlj
265
+ YXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD
266
+ ggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wimPQoZ+YeAEW5p5JYXMP80kWNy
267
+ OO7MHAGjHZQopDH2esRU1/blMVgDoszOYtuURXO1v0XJJLXVggKtI3lpjbi2Tc7P
268
+ TMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQ
269
+ HmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0/ZM/iZx4mER
270
+ dEr/VxqHD3VILs9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5Cuf
271
+ ReYNnyicsbkqWletNw+vHX/bvZ8=
272
+ -----END CERTIFICATE-----
273
+ ---
274
+ Server certificate
275
+ subject=/OU=Domain Control Validated/CN=www.npboards.com
276
+ issuer=/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
277
+ ---
278
+ No client certificate CA names sent
279
+ ---
280
+ SSL handshake has read 5704 bytes and written 456 bytes
281
+ ---
282
+ New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
283
+ Server public key is 2048 bit
284
+ Secure Renegotiation IS supported
285
+ Compression: NONE
286
+ Expansion: NONE
287
+ SSL-Session:
288
+ Protocol : TLSv1
289
+ Cipher : DHE-RSA-AES256-SHA
290
+ Session-ID: 2A2AFDE8AC762192EBEBAA5CC83B2A4896C2E3BC22DDFBFCC5CD8A034032994A
291
+ Session-ID-ctx:
292
+ Master-Key: 15A811591A7C0FD8F433263839A71DE6299316891E073589A5CD255BDE916D42A89B609797DC407FA8027657FA954F10
293
+ Key-Arg : None
294
+ Start Time: 1407263216
295
+ Timeout : 300 (sec)
296
+ Verify return code: 0 (ok)
297
+ ---
298
+ DONE"
299
+
300
+ CA_BUNDLE = "-----BEGIN CERTIFICATE-----
301
+ MIIE0DCCA7igAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
302
+ EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
303
+ EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
304
+ ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTExMDUwMzA3MDAwMFoXDTMxMDUwMzA3
305
+ MDAwMFowgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH
306
+ EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UE
307
+ CxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQD
308
+ EypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwggEi
309
+ MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54MsQ1K92vdSTYuswZLiBCGzD
310
+ BNliF44v/z5lz4/OYuY8UhzaFkVLVat4a2ODYpDOD2lsmcgaFItMzEUz6ojcnqOv
311
+ K/6AYZ15V8TPLvQ/MDxdR/yaFrzDN5ZBUY4RS1T4KL7QjL7wMDge87Am+GZHY23e
312
+ cSZHjzhHU9FGHbTj3ADqRay9vHHZqm8A29vNMDp5T19MR/gd71vCxJ1gO7GyQ5HY
313
+ pDNO6rPWJ0+tJYqlxvTV0KaudAVkV4i1RFXULSo6Pvi4vekyCgKUZMQWOlDxSq7n
314
+ eTOvDCAHf+jfBDnCaQJsY1L6d8EbyHSHyLmTGFBUNUtpTrw700kuH9zB0lL7AgMB
315
+ AAGjggEaMIIBFjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNV
316
+ HQ4EFgQUQMK9J47MNIMwojPX+2yz8LQsgM4wHwYDVR0jBBgwFoAUOpqFBxBnKLbv
317
+ 9r0FQW4gwZTaD94wNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8v
318
+ b2NzcC5nb2RhZGR5LmNvbS8wNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2NybC5n
319
+ b2RhZGR5LmNvbS9nZHJvb3QtZzIuY3JsMEYGA1UdIAQ/MD0wOwYEVR0gADAzMDEG
320
+ CCsGAQUFBwIBFiVodHRwczovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkv
321
+ MA0GCSqGSIb3DQEBCwUAA4IBAQAIfmyTEMg4uJapkEv/oV9PBO9sPpyIBslQj6Zz
322
+ 91cxG7685C/b+LrTW+C05+Z5Yg4MotdqY3MxtfWoSKQ7CC2iXZDXtHwlTxFWMMS2
323
+ RJ17LJ3lXubvDGGqv+QqG+6EnriDfcFDzkSnE3ANkR/0yBOtg2DZ2HKocyQetawi
324
+ DsoXiWJYRBuriSUBAA/NxBti21G00w9RKpv0vHP8ds42pM3Z2Czqrpv1KrKQ0U11
325
+ GIo/ikGQI31bS/6kA1ibRrLDYGCD+H1QQc7CoZDDu+8CL9IVVO5EFdkKrqeKM+2x
326
+ LXY2JtwE65/3YR8V3Idv7kaWKK2hJn0KCacuBKONvPi8BDAB
327
+ -----END CERTIFICATE-----"
328
+
329
+ CONNECTION_REFUSED = "connect: Connection refused
330
+ connect:errno=61"
331
+
332
+ TUMBLER_CERT = "CONNECTED(00000003)
333
+ depth=0 /C=US/ST=Florida/L=North Venice/O=Tervis Tumbler/OU=Tervis Tumbler/OU=Terms of use at www.verisign.com/rpa (c)05/CN=www.tervis.com
334
+ verify error:num=20:unable to get local issuer certificate
335
+ verify return:1
336
+ depth=0 /C=US/ST=Florida/L=North Venice/O=Tervis Tumbler/OU=Tervis Tumbler/OU=Terms of use at www.verisign.com/rpa (c)05/CN=www.tervis.com
337
+ verify error:num=27:certificate not trusted
338
+ verify return:1
339
+ depth=0 /C=US/ST=Florida/L=North Venice/O=Tervis Tumbler/OU=Tervis Tumbler/OU=Terms of use at www.verisign.com/rpa (c)05/CN=www.tervis.com
340
+ verify error:num=21:unable to verify the first certificate
341
+ verify return:1
342
+ ---
343
+ Certificate chain
344
+ 0 s:/C=US/ST=Florida/L=North Venice/O=Tervis Tumbler/OU=Tervis Tumbler/OU=Terms of use at www.verisign.com/rpa (c)05/CN=www.tervis.com
345
+ i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3
346
+ -----BEGIN CERTIFICATE-----
347
+ MIIFyjCCBLKgAwIBAgIQEZuks1SoqHIX+Fp+Y4/0GjANBgkqhkiG9w0BAQUFADCB
348
+ tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
349
+ ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
350
+ YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm
351
+ VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTIwNTI5
352
+ MDAwMDAwWhcNMTgwNTMwMjM1OTU5WjCBtjELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
353
+ B0Zsb3JpZGExFTATBgNVBAcUDE5vcnRoIFZlbmljZTEXMBUGA1UEChQOVGVydmlz
354
+ IFR1bWJsZXIxFzAVBgNVBAsUDlRlcnZpcyBUdW1ibGVyMTMwMQYDVQQLFCpUZXJt
355
+ cyBvZiB1c2UgYXQgd3d3LnZlcmlzaWduLmNvbS9ycGEgKGMpMDUxFzAVBgNVBAMU
356
+ Dnd3dy50ZXJ2aXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
357
+ uOwjf8vHWecTTjMQydGM2G45kjb3qWp7/EefKiw0pcC4him6Seqy2Vn/XaWfiouD
358
+ qi1YwydfJzGXoFLCRvDP94MSkPlhV3eO7UuplWAnslmlZX6MPt8N1F5scEqWcJWS
359
+ l7SgNj3WF5jd+qYuJobXKsD58qOdtNdL4LDKlhSoN4s77WkI4K42r/3aHj7+sngX
360
+ e1NXqjNcAn5G6PyfU9TNW6E5RKVcqclrAQ0x6Rze8bMNOlX11OBFRWsggkT7LjnW
361
+ eoN4PSFV7GncAr0crgjcbVVP4VaFQFHwVI3mtge2qiCtqiBW+vmDfHeUUuMctgPm
362
+ +Ikxzo5+hKCQLfyi4m+qGwIDAQABo4IB0TCCAc0wCQYDVR0TBAIwADALBgNVHQ8E
363
+ BAMCBaAwRQYDVR0fBD4wPDA6oDigNoY0aHR0cDovL1NWUlNlY3VyZS1HMy1jcmwu
364
+ dmVyaXNpZ24uY29tL1NWUlNlY3VyZUczLmNybDBEBgNVHSAEPTA7MDkGC2CGSAGG
365
+ +EUBBxcDMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9y
366
+ cGEwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFA1E
367
+ XBZTRMGCfh0gqyX0AWPYvnmlMHYGCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYY
368
+ aHR0cDovL29jc3AudmVyaXNpZ24uY29tMEAGCCsGAQUFBzAChjRodHRwOi8vU1ZS
369
+ U2VjdXJlLUczLWFpYS52ZXJpc2lnbi5jb20vU1ZSU2VjdXJlRzMuY2VyMG4GCCsG
370
+ AQUFBwEMBGIwYKFeoFwwWjBYMFYWCWltYWdlL2dpZjAhMB8wBwYFKw4DAhoEFEtr
371
+ uSiWBgy70FI4mymsSweLIQUYMCYWJGh0dHA6Ly9sb2dvLnZlcmlzaWduLmNvbS92
372
+ c2xvZ28xLmdpZjANBgkqhkiG9w0BAQUFAAOCAQEAn3hXVrPK3z6wf6Jkr4mecMcQ
373
+ 95hFWon06O/UyKui+kGbNaTCK6+U/DYwogBwIJuEiEeBaOhq5CzNGYDwrmNcXJet
374
+ KVW77IirNxbHEGF1hIe5d2YAPhgyuPhwiLUtS9OjM51XLoYsoVQssRDkWcV2uCgx
375
+ /QQ1VM4EJGhjt0o/4Br75EKeVD+QhD+upvekXwJyZMgkAfss0Vy6zXCWO6ZAzpSG
376
+ 9t+nglGLqDurBzb/XtbITYpKwLPxYL1XZYnjV2yiXgK1+7CAIYfX3wez8WsCG10E
377
+ nqg/vMw60AzZb/MvJOuRzi0lduklwSufYQhvGTjG3BCy8DVsK3HaGM/TQHQnLQ==
378
+ -----END CERTIFICATE-----
379
+ ---
380
+ Server certificate
381
+ subject=/C=US/ST=Florida/L=North Venice/O=Tervis Tumbler/OU=Tervis Tumbler/OU=Terms of use at www.verisign.com/rpa (c)05/CN=www.tervis.com
382
+ issuer=/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3
383
+ ---
384
+ No client certificate CA names sent
385
+ ---
386
+ SSL handshake has read 1643 bytes and written 444 bytes
387
+ ---
388
+ New, TLSv1/SSLv3, Cipher is RC4-SHA
389
+ Server public key is 2048 bit
390
+ Secure Renegotiation IS supported
391
+ Compression: NONE
392
+ Expansion: NONE
393
+ SSL-Session:
394
+ Protocol : TLSv1
395
+ Cipher : RC4-SHA
396
+ Session-ID: 515ADB862B6F5DEF48D7E0CCDB30F989C2714CA25FA365F3704C92E55D4D1B43
397
+ Session-ID-ctx:
398
+ Master-Key: D581D6A64F0EF29AE86CCBC136DC467F2D743241608CD507966760BC19C7A1B5045C33E47D145F364C544E04D502A282
399
+ Key-Arg : None
400
+ Start Time: 1407860745
401
+ Timeout : 300 (sec)
402
+ Verify return code: 21 (unable to verify the first certificate)
403
+ ---
404
+ DONE"
405
+
406
+
407
+ MISSING_CA_CERT = "CONNECTED(00000003)
408
+ depth=0 /OU=Domain Control Validated/OU=PositiveSSL/CN=www.clzmarketing.com
409
+ verify error:num=20:unable to get local issuer certificate
410
+ verify return:1
411
+ depth=0 /OU=Domain Control Validated/OU=PositiveSSL/CN=www.clzmarketing.com
412
+ verify error:num=27:certificate not trusted
413
+ verify return:1
414
+ depth=0 /OU=Domain Control Validated/OU=PositiveSSL/CN=www.clzmarketing.com
415
+ verify error:num=21:unable to verify the first certificate
416
+ verify return:1
417
+ ---
418
+ Certificate chain
419
+ 0 s:/OU=Domain Control Validated/OU=PositiveSSL/CN=www.clzmarketing.com
420
+ i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
421
+ -----BEGIN CERTIFICATE-----
422
+ MIIFWjCCBEKgAwIBAgIRAMz5TmvHUcBHmXOKY3IcIvMwDQYJKoZIhvcNAQELBQAw
423
+ gZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
424
+ BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYD
425
+ VQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIg
426
+ Q0EwHhcNMTQwODIyMDAwMDAwWhcNMTUwODIyMjM1OTU5WjBYMSEwHwYDVQQLExhE
427
+ b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFDASBgNVBAsTC1Bvc2l0aXZlU1NMMR0w
428
+ GwYDVQQDExR3d3cuY2x6bWFya2V0aW5nLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
429
+ ggEPADCCAQoCggEBAPu5zajlQUQF3Si/NHFJEiV0qoBZkv4Zb1aGvJJHSaw2x0sx
430
+ iieJfjQrErzd8d1yQ/K09fw13MEYCuWFLwmMEE5f/6F03r7DWPfmPcSkWKbKPPA/
431
+ CjYLMP0fVsPkxqagTTyK6XCZPpMvZ90bXuX5bvENXemYyL0Lo/jtF2vTmsvIkOl+
432
+ S9tHP6omXc9javhhATbu0o68o7n6kBYPVURKSQxChda3XHdOiuvKECnMfD7JfnYa
433
+ uy0112icujQ04V1HjSEIaf+RC6A4sbfg8uWENr/8DJ4nTkmjv7jCi8OPn0OFPMFa
434
+ lBBNFrGY+0CtdMoF1AhJXx5hf9CDwb1EKQwJpAMCAwEAAaOCAeQwggHgMB8GA1Ud
435
+ IwQYMBaAFJCvajqUWgvYkOoSVnPfQ7Q6KNrnMB0GA1UdDgQWBBTX4kqS+6BB6n+a
436
+ bKNO2ujHvbxsAzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUE
437
+ FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwUAYDVR0gBEkwRzA7BgwrBgEEAbIxAQIB
438
+ AwQwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLm5ldC9DUFMw
439
+ CAYGZ4EMAQIBMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly9jcmwuY29tb2RvY2Eu
440
+ Y29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcmww
441
+ gYUGCCsGAQUFBwEBBHkwdzBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5jb21vZG9j
442
+ YS5jb20vQ09NT0RPUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNy
443
+ dDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMDEGA1UdEQQq
444
+ MCiCFHd3dy5jbHptYXJrZXRpbmcuY29tghBjbHptYXJrZXRpbmcuY29tMA0GCSqG
445
+ SIb3DQEBCwUAA4IBAQCB+C7VH/PuQD7hBUdNgMGCZaYCJKYu2eA8LkgjSRCOwNXM
446
+ Kwm837DN1KB3j71K8+GqbX5JqT3UL6m4zYpjw4YYHjkVTkGlOu0vXvaobXiOSN6i
447
+ 6YYf6rwY027wCBLd6G3VW6h41fDgLI7tGuJ93hmu0TDitz2m7k+0mV6xUDEOTGf8
448
+ VeNZFYqfZgLrolQxK/xywkZtNygI5lFxvWVYLTpstOHrVIoQKCYv+PTHWE0el/J8
449
+ BM5jdL/Z72XZkY0ScniqXlXgeniBrgyP/JcunwcziRPBvX3KUuc4hcXpOodkoEqN
450
+ AHo0jeiwhl25REt+KPmNBKFzBBHymszM6kDpsOZv
451
+ -----END CERTIFICATE-----
452
+ ---
453
+ Server certificate
454
+ subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=www.clzmarketing.com
455
+ issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
456
+ ---
457
+ No client certificate CA names sent
458
+ ---
459
+ SSL handshake has read 2073 bytes and written 328 bytes
460
+ ---
461
+ New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
462
+ Server public key is 2048 bit
463
+ Secure Renegotiation IS supported
464
+ Compression: NONE
465
+ Expansion: NONE
466
+ SSL-Session:
467
+ Protocol : TLSv1
468
+ Cipher : DHE-RSA-AES256-SHA
469
+ Session-ID: 11A1D588CAC88F4BF3EA1CAD2305B1564512A07267AEC61344900D51A95C8624
470
+ Session-ID-ctx:
471
+ Master-Key: 0D6CF3589A8D6F9B74E0EA7BA43E7B7B716F62A62D825C4A31D2B5E2A3A5B8BA1C533FF6133F3613040758A69A5815CF
472
+ Key-Arg : None
473
+ Start Time: 1408723412
474
+ Timeout : 300 (sec)
475
+ Verify return code: 21 (unable to verify the first certificate)
476
+ ---
477
+ DONE"
478
+
479
+ WILDCARD_CERT = "CONNECTED(00000003)
480
+ depth=1 /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 High Assurance Server CA
481
+ verify error:num=20:unable to get local issuer certificate
482
+ verify return:0
483
+ ---
484
+ Certificate chain
485
+ 0 s:/C=US/ST=New York/L=New York/O=Squarespace, Inc./OU=Web Services/CN=*.squarespace.com
486
+ i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 High Assurance Server CA
487
+ -----BEGIN CERTIFICATE-----
488
+ MIIFcDCCBFigAwIBAgIQBBS8ZZBhio4Z8BnMlHMIjzANBgkqhkiG9w0BAQsFADBw
489
+ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
490
+ d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
491
+ dXJhbmNlIFNlcnZlciBDQTAeFw0xNDA0MDkwMDAwMDBaFw0xNzA2MTIxMjAwMDBa
492
+ MIGCMQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsxETAPBgNVBAcTCE5l
493
+ dyBZb3JrMRowGAYDVQQKExFTcXVhcmVzcGFjZSwgSW5jLjEVMBMGA1UECxMMV2Vi
494
+ IFNlcnZpY2VzMRowGAYDVQQDDBEqLnNxdWFyZXNwYWNlLmNvbTCCASIwDQYJKoZI
495
+ hvcNAQEBBQADggEPADCCAQoCggEBALtMtUSk+rPA3WD34CC5kr7VbR49UqvMIIgK
496
+ kdQv1+QjqdUZqNpDJ/+YLLtlSum70G/frs622HQRMPGn/y/IRC3ddDMFqhr+FcVH
497
+ 9IsH+8mngJ3VNCylafrpQnNfBha4fGVeb7GddaZh2rD5qv4gCFHz1d9CboFCDU3e
498
+ x496FxWfZKdjID4U+Bw/opozTC7Tjw1CyadST0tnKHv/zWxoFDlQkHy8y2mOApry
499
+ zWA3yhWlMQCY+a5yfawZbtF0AQ5D5PJ5yQH3wZOHZfvMOM9ksVE5bpbcBc7tV6Hy
500
+ LHmOztCpFp2IzaaDl/R/2q1/b2coQfMk2+pWmQnRckWcrCGilhsCAwEAAaOCAfEw
501
+ ggHtMB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZZWRiohK4WXI7MB0GA1UdDgQWBBRm
502
+ APzcXakFaMT3ekVb8LByufbh5jAtBgNVHREEJjAkghEqLnNxdWFyZXNwYWNlLmNv
503
+ bYIPc3F1YXJlc3BhY2UuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
504
+ BgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMu
505
+ ZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWcxLmNybDA0oDKgMIYuaHR0cDov
506
+ L2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWcxLmNybDBCBgNVHSAE
507
+ OzA5MDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdp
508
+ Y2VydC5jb20vQ1BTMIGDBggrBgEFBQcBAQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6
509
+ Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBNBggrBgEFBQcwAoZBaHR0cDovL2NhY2VydHMu
510
+ ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5j
511
+ cnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAmMGtUj5w0/+078Sj
512
+ AUfK4elCCvO5otjml/uGUZPuzFQejEvbhY0oSEBvXbUSDT10pcYWV8Hse6RTSJNV
513
+ 6rRN/+Ya4sy1Gc5ZbDaubtxWnECcNoQmgX+I9Vc3ledWzcc2vMt7gxOaxD1iAMJe
514
+ wQ7whrxwF6TDx+7CXCuoW/xdMD+0tKLTo1WJzy9dZh8b4jSFzYw0XCuWAafdmwdK
515
+ j8mY3JPYQyyzVW7KRLlralmcKOjbQHqiC7V88s5oYBN37nsttu3P6CMCcPB4RhuT
516
+ qINtppn0oLmIT7exWFXD+FF8VRosMv5wTZRF8W1PJe5I/1j1INnAEQW943yKQc6/
517
+ F+O+yA==
518
+ -----END CERTIFICATE-----
519
+ 1 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 High Assurance Server CA
520
+ i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance EV Root CA
521
+ -----BEGIN CERTIFICATE-----
522
+ MIIEsTCCA5mgAwIBAgIQBOHnpNxc8vNtwCtCuF0VnzANBgkqhkiG9w0BAQsFADBs
523
+ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
524
+ d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
525
+ ZSBFViBSb290IENBMB4XDTEzMTAyMjEyMDAwMFoXDTI4MTAyMjEyMDAwMFowcDEL
526
+ MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3
527
+ LmRpZ2ljZXJ0LmNvbTEvMC0GA1UEAxMmRGlnaUNlcnQgU0hBMiBIaWdoIEFzc3Vy
528
+ YW5jZSBTZXJ2ZXIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2
529
+ 4C/CJAbIbQRf1+8KZAayfSImZRauQkCbztyfn3YHPsMwVYcZuU+UDlqUH1VWtMIC
530
+ Kq/QmO4LQNfE0DtyyBSe75CxEamu0si4QzrZCwvV1ZX1QK/IHe1NnF9Xt4ZQaJn1
531
+ itrSxwUfqJfJ3KSxgoQtxq2lnMcZgqaFD15EWCo3j/018QsIJzJa9buLnqS9UdAn
532
+ 4t07QjOjBSjEuyjMmqwrIw14xnvmXnG3Sj4I+4G3FhahnSMSTeXXkgisdaScus0X
533
+ sh5ENWV/UyU50RwKmmMbGZJ0aAo3wsJSSMs5WqK24V3B3aAguCGikyZvFEohQcft
534
+ bZvySC/zA/WiaJJTL17jAgMBAAGjggFJMIIBRTASBgNVHRMBAf8ECDAGAQH/AgEA
535
+ MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
536
+ NAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy
537
+ dC5jb20wSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29t
538
+ L0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUVWUm9vdENBLmNybDA9BgNVHSAENjA0MDIG
539
+ BFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ
540
+ UzAdBgNVHQ4EFgQUUWj/kK8CB3U8zNllZGKiErhZcjswHwYDVR0jBBgwFoAUsT7D
541
+ aQP4v0cB1JgmGggC72NkK8MwDQYJKoZIhvcNAQELBQADggEBABiKlYkD5m3fXPwd
542
+ aOpKj4PWUS+Na0QWnqxj9dJubISZi6qBcYRb7TROsLd5kinMLYBq8I4g4Xmk/gNH
543
+ E+r1hspZcX30BJZr01lYPf7TMSVcGDiEo+afgv2MW5gxTs14nhr9hctJqvIni5ly
544
+ /D6q1UEL2tU2ob8cbkdJf17ZSHwD2f2LSaCYJkJA69aSEaRkCldUxPUd1gJea6zu
545
+ xICaEnL6VpPX/78whQYwvwt/Tv9XBZ0k7YXDK/umdaisLRbvfXknsuvCnQsH6qqF
546
+ 0wGjIChBWUMo0oHjqvbsezt3tkBigAVBRQHvFwY+3sAzm2fTYS5yh+Rp/BIAV0Ae
547
+ cPUeybQ=
548
+ -----END CERTIFICATE-----
549
+ ---
550
+ Server certificate
551
+ subject=/C=US/ST=New York/L=New York/O=Squarespace, Inc./OU=Web Services/CN=*.squarespace.com
552
+ issuer=/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 High Assurance Server CA
553
+ ---
554
+ No client certificate CA names sent
555
+ ---
556
+ SSL handshake has read 2761 bytes and written 444 bytes
557
+ ---
558
+ New, TLSv1/SSLv3, Cipher is RC4-SHA
559
+ Server public key is 2048 bit
560
+ Secure Renegotiation IS supported
561
+ Compression: NONE
562
+ Expansion: NONE
563
+ SSL-Session:
564
+ Protocol : TLSv1
565
+ Cipher : RC4-SHA
566
+ Session-ID: C533048F3FE371C0FCF3CA00F8219FFD802771630C55FF1C23055748C264F87C
567
+ Session-ID-ctx:
568
+ Master-Key: 59288CD04FDCCE7C710660F5E7CB86B7426E011D76A27B09DC7628D41C097BD58390522DB973F5AFDE507C58139B079D
569
+ Key-Arg : None
570
+ Start Time: 1408732240
571
+ Timeout : 300 (sec)
572
+ Verify return code: 0 (ok)
573
+ ---
574
+ DONE"
575
+
576
+ UPPERCASE_CERT = "CONNECTED(00000003)
577
+ depth=3 /C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
578
+ verify error:num=19:self signed certificate in certificate chain
579
+ verify return:0
580
+ ---
581
+ Certificate chain
582
+ 0 s:/OU=Domain Control Validated/CN=www.NpBoArds.com
583
+ i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
584
+ -----BEGIN CERTIFICATE-----
585
+ MIIFJzCCBA+gAwIBAgIHBJJ3xc1KuTANBgkqhkiG9w0BAQsFADCBtDELMAkGA1UE
586
+ BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAY
587
+ BgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMS0wKwYDVQQLEyRodHRwOi8vY2VydHMu
588
+ Z29kYWRkeS5jb20vcmVwb3NpdG9yeS8xMzAxBgNVBAMTKkdvIERhZGR5IFNlY3Vy
589
+ ZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjAeFw0xNDA2MTcxODE2MDFaFw0x
590
+ NTA2MTcxODE2MDFaMD4xITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRl
591
+ ZDEZMBcGA1UEAxMQd3d3Lm5wYm9hcmRzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
592
+ ggEPADCCAQoCggEBAKJqQ6IHqhZrA6GPR/aDDJVVxAgpDakjFOk5HR1b5RsTHxCL
593
+ n7aE00ApmYJZfI62RWdDek9Hkk5ZgLcJ5ztXh+ITpwG/bSPSQtMFtky4YQspzgsT
594
+ xwHOb0zU4BaaVVhQqyVLQUgd/KvHF/1vP0TAJ/be/VoWn5oVYyM948c2Z/kGqUPe
595
+ tvgiZLlL082yrML0cSEoRLgYrZ50wVKNFPcKbXZN0Vnk05sHJTc9q2NYpSFagqv0
596
+ u13wh4reABiO/Mpl71uarY6thBv9IpR4GK50d+Pl1TYMLDFghYN0nzuUTj+t9BaT
597
+ OXWYZCOteUAmh3BPq3rD8iYrdQInwIzrMAAVgKMCAwEAAaOCAbEwggGtMAwGA1Ud
598
+ EwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB
599
+ /wQEAwIFoDA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY3JsLmdvZGFkZHkuY29t
600
+ L2dkaWcyczEtNzcuY3JsMFMGA1UdIARMMEowSAYLYIZIAYb9bQEHFwEwOTA3Bggr
601
+ BgEFBQcCARYraHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0
602
+ b3J5LzB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdv
603
+ ZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2Rh
604
+ ZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0
605
+ gzCiM9f7bLPwtCyAzjApBgNVHREEIjAgghB3d3cubnBib2FyZHMuY29tggxucGJv
606
+ YXJkcy5jb20wHQYDVR0OBBYEFOpHY93l1TgIyu9SVsa5m7M86GPMMA0GCSqGSIb3
607
+ DQEBCwUAA4IBAQAuC0ydTRqRcIC8kyYCVNaTRxacyU9zmTKmPR0nS1Ikrmt6JtVM
608
+ fJwaLGQji86jd3Z7b4jzYcEKWIaDRdZmfQ2LG3Q5xetLhOHFxMl6O1NJfk7VhVTN
609
+ FNisL3DnVM9G6b6wl/JzAevQ8javEoSoAcffTXiLLJWPn+1AtYRvs2GkAIrGNGgK
610
+ A6ZCYtfGvM0uy4oDIdwWueon8YnSpxqR8XfsfvR8kcR93c30AMVbk4OAu6OAp5kO
611
+ qDmgKhvyXhJ5/8cHH5WqMpor0Fwjxsrvq/BhJ1FXYlc6/GtiAR48E28SjP6YvfHQ
612
+ TXenj1uVKzuCU7eCmR5kr3tQp+ScIQPt1Ifh
613
+ -----END CERTIFICATE-----
614
+ 1 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
615
+ i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
616
+ -----BEGIN CERTIFICATE-----
617
+ MIIE0DCCA7igAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
618
+ EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
619
+ EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
620
+ ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTExMDUwMzA3MDAwMFoXDTMxMDUwMzA3
621
+ MDAwMFowgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH
622
+ EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UE
623
+ CxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQD
624
+ EypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwggEi
625
+ MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54MsQ1K92vdSTYuswZLiBCGzD
626
+ BNliF44v/z5lz4/OYuY8UhzaFkVLVat4a2ODYpDOD2lsmcgaFItMzEUz6ojcnqOv
627
+ K/6AYZ15V8TPLvQ/MDxdR/yaFrzDN5ZBUY4RS1T4KL7QjL7wMDge87Am+GZHY23e
628
+ cSZHjzhHU9FGHbTj3ADqRay9vHHZqm8A29vNMDp5T19MR/gd71vCxJ1gO7GyQ5HY
629
+ pDNO6rPWJ0+tJYqlxvTV0KaudAVkV4i1RFXULSo6Pvi4vekyCgKUZMQWOlDxSq7n
630
+ eTOvDCAHf+jfBDnCaQJsY1L6d8EbyHSHyLmTGFBUNUtpTrw700kuH9zB0lL7AgMB
631
+ AAGjggEaMIIBFjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNV
632
+ HQ4EFgQUQMK9J47MNIMwojPX+2yz8LQsgM4wHwYDVR0jBBgwFoAUOpqFBxBnKLbv
633
+ 9r0FQW4gwZTaD94wNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8v
634
+ b2NzcC5nb2RhZGR5LmNvbS8wNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2NybC5n
635
+ b2RhZGR5LmNvbS9nZHJvb3QtZzIuY3JsMEYGA1UdIAQ/MD0wOwYEVR0gADAzMDEG
636
+ CCsGAQUFBwIBFiVodHRwczovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkv
637
+ MA0GCSqGSIb3DQEBCwUAA4IBAQAIfmyTEMg4uJapkEv/oV9PBO9sPpyIBslQj6Zz
638
+ 91cxG7685C/b+LrTW+C05+Z5Yg4MotdqY3MxtfWoSKQ7CC2iXZDXtHwlTxFWMMS2
639
+ RJ17LJ3lXubvDGGqv+QqG+6EnriDfcFDzkSnE3ANkR/0yBOtg2DZ2HKocyQetawi
640
+ DsoXiWJYRBuriSUBAA/NxBti21G00w9RKpv0vHP8ds42pM3Z2Czqrpv1KrKQ0U11
641
+ GIo/ikGQI31bS/6kA1ibRrLDYGCD+H1QQc7CoZDDu+8CL9IVVO5EFdkKrqeKM+2x
642
+ LXY2JtwE65/3YR8V3Idv7kaWKK2hJn0KCacuBKONvPi8BDAB
643
+ -----END CERTIFICATE-----
644
+ 2 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
645
+ i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
646
+ -----BEGIN CERTIFICATE-----
647
+ MIIEfTCCA2WgAwIBAgIDG+cVMA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVT
648
+ MSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIEluYy4xMTAvBgNVBAsTKEdv
649
+ IERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMTAx
650
+ MDcwMDAwWhcNMzEwNTMwMDcwMDAwWjCBgzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
651
+ B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHku
652
+ Y29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmljYXRlIEF1
653
+ dGhvcml0eSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Fi
654
+ CPH6WTT3G8kYo/eASVjpIoMTpsUgQwE7hPHmhUmfJ+r2hBtOoLTbcJjHMgGxBT4H
655
+ Tu70+k8vWTAi56sZVmvigAf88xZ1gDlRe+X5NbZ0TqmNghPktj+pA4P6or6KFWp/
656
+ 3gvDthkUBcrqw6gElDtGfDIN8wBmIsiNaW02jBEYt9OyHGC0OPoCjM7T3UYH3go+
657
+ 6118yHz7sCtTpJJiaVElBWEaRIGMLKlDliPfrDqBmg4pxRyp6V0etp6eMAo5zvGI
658
+ gPtLXcwy7IViQyU0AlYnAZG0O3AqP26x6JyIAX2f1PnbU21gnb8s51iruF9G/M7E
659
+ GwM8CetJMVxpRrPgRwIDAQABo4IBFzCCARMwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
660
+ HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9BUFuIMGU2g/eMB8GA1Ud
661
+ IwQYMBaAFNLEsNKR1EwRcbNhyz2h/t2oatTjMDQGCCsGAQUFBwEBBCgwJjAkBggr
662
+ BgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMDIGA1UdHwQrMCkwJ6Al
663
+ oCOGIWh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2Ryb290LmNybDBGBgNVHSAEPzA9
664
+ MDsGBFUdIAAwMzAxBggrBgEFBQcCARYlaHR0cHM6Ly9jZXJ0cy5nb2RhZGR5LmNv
665
+ bS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAWQtTvZKGEacke+1bMc8d
666
+ H2xwxbhuvk679r6XUOEwf7ooXGKUwuN+M/f7QnaF25UcjCJYdQkMiGVnOQoWCcWg
667
+ OJekxSOTP7QYpgEGRJHjp2kntFolfzq3Ms3dhP8qOCkzpN1nsoX+oYggHFCJyNwq
668
+ 9kIDN0zmiN/VryTyscPfzLXs4Jlet0lUIDyUGAzHHFIYSaRt4bNYC8nY7NmuHDKO
669
+ KHAN4v6mF56ED71XcLNa6R+ghlO773z/aQvgSMO3kwvIClTErF0UZzdsyqUvMQg3
670
+ qm5vjLyb4lddJIGvl5echK1srDdMZvNhkREg5L4wn3qkKQmw4TRfZHcYQFHfjDCm
671
+ rw==
672
+ -----END CERTIFICATE-----
673
+ 3 s:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
674
+ i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
675
+ -----BEGIN CERTIFICATE-----
676
+ MIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEh
677
+ MB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBE
678
+ YWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3
679
+ MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkGA1UEBhMCVVMxITAfBgNVBAoTGFRo
680
+ ZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28gRGFkZHkgQ2xhc3Mg
681
+ MiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQADggEN
682
+ ADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d/+TvZxz0ZWizV3GgXne77ZtJ6XCA
683
+ PVYYYwhv2vLM0D9/AlQiVBDYsoHUwHU9S3/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6w
684
+ wdhFJ2+qN1j3hybX2C32qRe3H3I2TqYXP2WYktsqbl2i/ojgC95/5Y0V4evLOtXi
685
+ EqITLdiOr18SPaAIBQi2XKVlOARFmR6jYGB0xUGlcmIbYsUfb18aQr4CUWWoriMY
686
+ avx4A6lNf4DD+qta/KFApMoZFv6yyO9ecw3ud72a9nmYvLEHZ6IVDd2gWMZEewo+
687
+ YihfukEHU1jPEX44dMX4/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0OBBYEFNLE
688
+ sNKR1EwRcbNhyz2h/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h
689
+ /t2oatTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5
690
+ IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmlj
691
+ YXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD
692
+ ggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wimPQoZ+YeAEW5p5JYXMP80kWNy
693
+ OO7MHAGjHZQopDH2esRU1/blMVgDoszOYtuURXO1v0XJJLXVggKtI3lpjbi2Tc7P
694
+ TMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQ
695
+ HmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0/ZM/iZx4mER
696
+ dEr/VxqHD3VILs9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5Cuf
697
+ ReYNnyicsbkqWletNw+vHX/bvZ8=
698
+ -----END CERTIFICATE-----
699
+ ---
700
+ Server certificate
701
+ subject=/OU=Domain Control Validated/CN=www.NpBoArds.com
702
+ issuer=/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
703
+ ---
704
+ No client certificate CA names sent
705
+ ---
706
+ SSL handshake has read 5704 bytes and written 456 bytes
707
+ ---
708
+ New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
709
+ Server public key is 2048 bit
710
+ Secure Renegotiation IS supported
711
+ Compression: NONE
712
+ Expansion: NONE
713
+ SSL-Session:
714
+ Protocol : TLSv1
715
+ Cipher : DHE-RSA-AES256-SHA
716
+ Session-ID: 2A2AFDE8AC762192EBEBAA5CC83B2A4896C2E3BC22DDFBFCC5CD8A034032994A
717
+ Session-ID-ctx:
718
+ Master-Key: 15A811591A7C0FD8F433263839A71DE6299316891E073589A5CD255BDE916D42A89B609797DC407FA8027657FA954F10
719
+ Key-Arg : None
720
+ Start Time: 1407263216
721
+ Timeout : 300 (sec)
722
+ Verify return code: 0 (ok)
723
+ ---
724
+ DONE"
725
+
726
+ CA_PARENT = """
727
+ -----BEGIN CERTIFICATE-----
728
+ MIIE0DCCA7igAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
729
+ EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
730
+ EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
731
+ ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTExMDUwMzA3MDAwMFoXDTMxMDUwMzA3
732
+ MDAwMFowgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH
733
+ EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UE
734
+ CxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQD
735
+ EypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwggEi
736
+ MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54MsQ1K92vdSTYuswZLiBCGzD
737
+ BNliF44v/z5lz4/OYuY8UhzaFkVLVat4a2ODYpDOD2lsmcgaFItMzEUz6ojcnqOv
738
+ K/6AYZ15V8TPLvQ/MDxdR/yaFrzDN5ZBUY4RS1T4KL7QjL7wMDge87Am+GZHY23e
739
+ cSZHjzhHU9FGHbTj3ADqRay9vHHZqm8A29vNMDp5T19MR/gd71vCxJ1gO7GyQ5HY
740
+ pDNO6rPWJ0+tJYqlxvTV0KaudAVkV4i1RFXULSo6Pvi4vekyCgKUZMQWOlDxSq7n
741
+ eTOvDCAHf+jfBDnCaQJsY1L6d8EbyHSHyLmTGFBUNUtpTrw700kuH9zB0lL7AgMB
742
+ AAGjggEaMIIBFjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNV
743
+ HQ4EFgQUQMK9J47MNIMwojPX+2yz8LQsgM4wHwYDVR0jBBgwFoAUOpqFBxBnKLbv
744
+ 9r0FQW4gwZTaD94wNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8v
745
+ b2NzcC5nb2RhZGR5LmNvbS8wNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2NybC5n
746
+ b2RhZGR5LmNvbS9nZHJvb3QtZzIuY3JsMEYGA1UdIAQ/MD0wOwYEVR0gADAzMDEG
747
+ CCsGAQUFBwIBFiVodHRwczovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkv
748
+ MA0GCSqGSIb3DQEBCwUAA4IBAQAIfmyTEMg4uJapkEv/oV9PBO9sPpyIBslQj6Zz
749
+ 91cxG7685C/b+LrTW+C05+Z5Yg4MotdqY3MxtfWoSKQ7CC2iXZDXtHwlTxFWMMS2
750
+ RJ17LJ3lXubvDGGqv+QqG+6EnriDfcFDzkSnE3ANkR/0yBOtg2DZ2HKocyQetawi
751
+ DsoXiWJYRBuriSUBAA/NxBti21G00w9RKpv0vHP8ds42pM3Z2Czqrpv1KrKQ0U11
752
+ GIo/ikGQI31bS/6kA1ibRrLDYGCD+H1QQc7CoZDDu+8CL9IVVO5EFdkKrqeKM+2x
753
+ LXY2JtwE65/3YR8V3Idv7kaWKK2hJn0KCacuBKONvPi8BDAB
754
+ -----END CERTIFICATE-----
755
+ """
756
+
757
+ CA_GRAND_PARENT = """
758
+ -----BEGIN CERTIFICATE-----
759
+ MIIEfTCCA2WgAwIBAgIDG+cVMA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVT
760
+ MSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIEluYy4xMTAvBgNVBAsTKEdv
761
+ IERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMTAx
762
+ MDcwMDAwWhcNMzEwNTMwMDcwMDAwWjCBgzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
763
+ B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHku
764
+ Y29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmljYXRlIEF1
765
+ dGhvcml0eSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Fi
766
+ CPH6WTT3G8kYo/eASVjpIoMTpsUgQwE7hPHmhUmfJ+r2hBtOoLTbcJjHMgGxBT4H
767
+ Tu70+k8vWTAi56sZVmvigAf88xZ1gDlRe+X5NbZ0TqmNghPktj+pA4P6or6KFWp/
768
+ 3gvDthkUBcrqw6gElDtGfDIN8wBmIsiNaW02jBEYt9OyHGC0OPoCjM7T3UYH3go+
769
+ 6118yHz7sCtTpJJiaVElBWEaRIGMLKlDliPfrDqBmg4pxRyp6V0etp6eMAo5zvGI
770
+ gPtLXcwy7IViQyU0AlYnAZG0O3AqP26x6JyIAX2f1PnbU21gnb8s51iruF9G/M7E
771
+ GwM8CetJMVxpRrPgRwIDAQABo4IBFzCCARMwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
772
+ HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9BUFuIMGU2g/eMB8GA1Ud
773
+ IwQYMBaAFNLEsNKR1EwRcbNhyz2h/t2oatTjMDQGCCsGAQUFBwEBBCgwJjAkBggr
774
+ BgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMDIGA1UdHwQrMCkwJ6Al
775
+ oCOGIWh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2Ryb290LmNybDBGBgNVHSAEPzA9
776
+ MDsGBFUdIAAwMzAxBggrBgEFBQcCARYlaHR0cHM6Ly9jZXJ0cy5nb2RhZGR5LmNv
777
+ bS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAWQtTvZKGEacke+1bMc8d
778
+ H2xwxbhuvk679r6XUOEwf7ooXGKUwuN+M/f7QnaF25UcjCJYdQkMiGVnOQoWCcWg
779
+ OJekxSOTP7QYpgEGRJHjp2kntFolfzq3Ms3dhP8qOCkzpN1nsoX+oYggHFCJyNwq
780
+ 9kIDN0zmiN/VryTyscPfzLXs4Jlet0lUIDyUGAzHHFIYSaRt4bNYC8nY7NmuHDKO
781
+ KHAN4v6mF56ED71XcLNa6R+ghlO773z/aQvgSMO3kwvIClTErF0UZzdsyqUvMQg3
782
+ qm5vjLyb4lddJIGvl5echK1srDdMZvNhkREg5L4wn3qkKQmw4TRfZHcYQFHfjDCm
783
+ rw==
784
+ -----END CERTIFICATE-----
785
+ """
786
+
787
+ CA_GREAT_GRAND_PARENT = """
788
+ -----BEGIN CERTIFICATE-----
789
+ MIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEh
790
+ MB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBE
791
+ YWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3
792
+ MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkGA1UEBhMCVVMxITAfBgNVBAoTGFRo
793
+ ZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28gRGFkZHkgQ2xhc3Mg
794
+ MiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQADggEN
795
+ ADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d/+TvZxz0ZWizV3GgXne77ZtJ6XCA
796
+ PVYYYwhv2vLM0D9/AlQiVBDYsoHUwHU9S3/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6w
797
+ wdhFJ2+qN1j3hybX2C32qRe3H3I2TqYXP2WYktsqbl2i/ojgC95/5Y0V4evLOtXi
798
+ EqITLdiOr18SPaAIBQi2XKVlOARFmR6jYGB0xUGlcmIbYsUfb18aQr4CUWWoriMY
799
+ avx4A6lNf4DD+qta/KFApMoZFv6yyO9ecw3ud72a9nmYvLEHZ6IVDd2gWMZEewo+
800
+ YihfukEHU1jPEX44dMX4/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0OBBYEFNLE
801
+ sNKR1EwRcbNhyz2h/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h
802
+ /t2oatTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5
803
+ IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmlj
804
+ YXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD
805
+ ggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wimPQoZ+YeAEW5p5JYXMP80kWNy
806
+ OO7MHAGjHZQopDH2esRU1/blMVgDoszOYtuURXO1v0XJJLXVggKtI3lpjbi2Tc7P
807
+ TMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQ
808
+ HmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0/ZM/iZx4mER
809
+ dEr/VxqHD3VILs9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5Cuf
810
+ ReYNnyicsbkqWletNw+vHX/bvZ8=
811
+ -----END CERTIFICATE-----
812
+ """
813
+
814
+ VALID_CA_BUNDLE = [CA_PARENT, CA_GRAND_PARENT, CA_GREAT_GRAND_PARENT]