sslcheck 0.9.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (42) hide show
  1. checksums.yaml +7 -0
  2. data/.gitignore +14 -0
  3. data/.rspec +3 -0
  4. data/.travis.yml +6 -0
  5. data/Gemfile +4 -0
  6. data/LICENSE.txt +22 -0
  7. data/README.md +177 -0
  8. data/Rakefile +14 -0
  9. data/acceptance/acceptance_helper.rb +1 -0
  10. data/acceptance/checking_certificates_spec.rb +23 -0
  11. data/acceptance/client_spec.rb +67 -0
  12. data/blinky_tests +3 -0
  13. data/lib/sslcheck.rb +20 -0
  14. data/lib/sslcheck/certificate.rb +121 -0
  15. data/lib/sslcheck/certificate_client.rb +10 -0
  16. data/lib/sslcheck/check.rb +65 -0
  17. data/lib/sslcheck/client.rb +68 -0
  18. data/lib/sslcheck/generic_error.rb +15 -0
  19. data/lib/sslcheck/parser.rb +96 -0
  20. data/lib/sslcheck/validator.rb +111 -0
  21. data/lib/sslcheck/validators/ca_bundle.rb +23 -0
  22. data/lib/sslcheck/validators/common_name.rb +27 -0
  23. data/lib/sslcheck/validators/errors.rb +15 -0
  24. data/lib/sslcheck/validators/expiration_date.rb +10 -0
  25. data/lib/sslcheck/validators/generic_validator.rb +15 -0
  26. data/lib/sslcheck/validators/issue_date.rb +10 -0
  27. data/lib/sslcheck/version.rb +3 -0
  28. data/run_acceptance_on_ci +7 -0
  29. data/sentinal +10 -0
  30. data/spec/ca_bundle_validator_spec.rb +24 -0
  31. data/spec/cert_fixtures.rb +814 -0
  32. data/spec/certificate_spec.rb +134 -0
  33. data/spec/check_spec.rb +172 -0
  34. data/spec/common_name_validator_spec.rb +40 -0
  35. data/spec/expiration_date_validator_spec.rb +36 -0
  36. data/spec/issue_date_validator_spec.rb +36 -0
  37. data/spec/parser_spec.rb +0 -0
  38. data/spec/response_spec.rb +13 -0
  39. data/spec/spec_helper.rb +100 -0
  40. data/spec/validator_spec.rb +84 -0
  41. data/sslcheck.gemspec +26 -0
  42. metadata +165 -0
data/lib/sslcheck/validators/generic_validator.rb ADDED
@@ -0,0 +1,15 @@
1
+ module SSLCheck
2
+ module Validators
3
+ class GenericValidator
4
+ def initialize(common_name, peer_cert, ca_bundle)
5
+ @common_name = common_name
6
+ @peer_cert = peer_cert
7
+ @ca_bundle = ca_bundle
8
+ end
9
+
10
+ def validate
11
+ nil
12
+ end
13
+ end
14
+ end
15
+ end
data/lib/sslcheck/validators/issue_date.rb ADDED
@@ -0,0 +1,10 @@
1
+ module SSLCheck
2
+ module Validators
3
+ class IssueDate < GenericValidator
4
+ def validate(clock=DateTime)
5
+ return nil if clock.now > @peer_cert.not_before
6
+ SSLCheck::Errors::Validation::NotYetIssued.new({:name => "Not Yet Issues", :message => "This certificate is not valid until #{@peer_cert.not_before}."})
7
+ end
8
+ end
9
+ end
10
+ end
data/lib/sslcheck/version.rb ADDED
@@ -0,0 +1,3 @@
1
+ module SSLCheck
2
+ VERSION = "0.9.0"
3
+ end
data/run_acceptance_on_ci ADDED
@@ -0,0 +1,7 @@
1
+ #!/bin/bash
2
+
3
+ third_build=`expr $TRAVIS_JOB_ID % 3`
4
+
5
+ if [ $third_build -eq 0 ]; then
6
+ bundle exec rspec acceptance
7
+ fi
data/sentinal ADDED
@@ -0,0 +1,10 @@
1
+ #!/bin/bash
2
+
3
+ blinky-tape-test-tool xs
4
+ ./blinky_tests
5
+ /usr/local/bin/fswatch -o spec lib | xargs -n1 ./blinky_tests
6
+
7
+
8
+ #bundle exec rspec spec
9
+ #/usr/local/bin/fswatch -o spec lib | xargs -n1 bundle exec rspec spec
10
+
data/spec/ca_bundle_validator_spec.rb ADDED
@@ -0,0 +1,24 @@
1
+ require 'spec_helper'
2
+
3
+ module SSLCheck
4
+ describe 'CABundleValidatorSpec' do
5
+ before do
6
+ @cert = Certificate.new(VALID_CERT)
7
+ @ca_bundle = [Certificate.new(CA_PARENT), Certificate.new(CA_GRAND_PARENT), Certificate.new(CA_GREAT_GRAND_PARENT)]
8
+ end
9
+ context "when the CA Bundle verifies the certificate" do
10
+ it 'should return nothing' do
11
+ sut = Validators::CABundle.new("npboards.com", @cert, @ca_bundle)
12
+ result = sut.validate
13
+ expect(result).to_not be
14
+ end
15
+ end
16
+ context "when the certificate cannot be verified by the CA Bundle" do
17
+ it 'should return errors' do
18
+ sut = Validators::CABundle.new("npboards.com", @cert, [Certificate.new(CA_PARENT)])
19
+ result = sut.validate
20
+ expect(result).to be_a SSLCheck::Errors::Validation::CABundleVerification
21
+ end
22
+ end
23
+ end
24
+ end
data/spec/cert_fixtures.rb ADDED
@@ -0,0 +1,814 @@
1
+ VALID_CERT = "CONNECTED(00000003)
2
+ depth=3 /C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
3
+ verify error:num=19:self signed certificate in certificate chain
4
+ verify return:0
5
+ ---
6
+ Certificate chain
7
+ 0 s:/OU=Domain Control Validated/CN=www.npboards.com
8
+ i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
9
+ -----BEGIN CERTIFICATE-----
10
+ MIIFJzCCBA+gAwIBAgIHBJJ3xc1KuTANBgkqhkiG9w0BAQsFADCBtDELMAkGA1UE
11
+ BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAY
12
+ BgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMS0wKwYDVQQLEyRodHRwOi8vY2VydHMu
13
+ Z29kYWRkeS5jb20vcmVwb3NpdG9yeS8xMzAxBgNVBAMTKkdvIERhZGR5IFNlY3Vy
14
+ ZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjAeFw0xNDA2MTcxODE2MDFaFw0x
15
+ NTA2MTcxODE2MDFaMD4xITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRl
16
+ ZDEZMBcGA1UEAxMQd3d3Lm5wYm9hcmRzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
17
+ ggEPADCCAQoCggEBAKJqQ6IHqhZrA6GPR/aDDJVVxAgpDakjFOk5HR1b5RsTHxCL
18
+ n7aE00ApmYJZfI62RWdDek9Hkk5ZgLcJ5ztXh+ITpwG/bSPSQtMFtky4YQspzgsT
19
+ xwHOb0zU4BaaVVhQqyVLQUgd/KvHF/1vP0TAJ/be/VoWn5oVYyM948c2Z/kGqUPe
20
+ tvgiZLlL082yrML0cSEoRLgYrZ50wVKNFPcKbXZN0Vnk05sHJTc9q2NYpSFagqv0
21
+ u13wh4reABiO/Mpl71uarY6thBv9IpR4GK50d+Pl1TYMLDFghYN0nzuUTj+t9BaT
22
+ OXWYZCOteUAmh3BPq3rD8iYrdQInwIzrMAAVgKMCAwEAAaOCAbEwggGtMAwGA1Ud
23
+ EwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB
24
+ /wQEAwIFoDA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY3JsLmdvZGFkZHkuY29t
25
+ L2dkaWcyczEtNzcuY3JsMFMGA1UdIARMMEowSAYLYIZIAYb9bQEHFwEwOTA3Bggr
26
+ BgEFBQcCARYraHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0
27
+ b3J5LzB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdv
28
+ ZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2Rh
29
+ ZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0
30
+ gzCiM9f7bLPwtCyAzjApBgNVHREEIjAgghB3d3cubnBib2FyZHMuY29tggxucGJv
31
+ YXJkcy5jb20wHQYDVR0OBBYEFOpHY93l1TgIyu9SVsa5m7M86GPMMA0GCSqGSIb3
32
+ DQEBCwUAA4IBAQAuC0ydTRqRcIC8kyYCVNaTRxacyU9zmTKmPR0nS1Ikrmt6JtVM
33
+ fJwaLGQji86jd3Z7b4jzYcEKWIaDRdZmfQ2LG3Q5xetLhOHFxMl6O1NJfk7VhVTN
34
+ FNisL3DnVM9G6b6wl/JzAevQ8javEoSoAcffTXiLLJWPn+1AtYRvs2GkAIrGNGgK
35
+ A6ZCYtfGvM0uy4oDIdwWueon8YnSpxqR8XfsfvR8kcR93c30AMVbk4OAu6OAp5kO
36
+ qDmgKhvyXhJ5/8cHH5WqMpor0Fwjxsrvq/BhJ1FXYlc6/GtiAR48E28SjP6YvfHQ
37
+ TXenj1uVKzuCU7eCmR5kr3tQp+ScIQPt1Ifh
38
+ -----END CERTIFICATE-----
39
+ 1 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
40
+ i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
41
+ -----BEGIN CERTIFICATE-----
42
+ MIIE0DCCA7igAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
43
+ EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
44
+ EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
45
+ ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTExMDUwMzA3MDAwMFoXDTMxMDUwMzA3
46
+ MDAwMFowgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH
47
+ EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UE
48
+ CxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQD
49
+ EypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwggEi
50
+ MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54MsQ1K92vdSTYuswZLiBCGzD
51
+ BNliF44v/z5lz4/OYuY8UhzaFkVLVat4a2ODYpDOD2lsmcgaFItMzEUz6ojcnqOv
52
+ K/6AYZ15V8TPLvQ/MDxdR/yaFrzDN5ZBUY4RS1T4KL7QjL7wMDge87Am+GZHY23e
53
+ cSZHjzhHU9FGHbTj3ADqRay9vHHZqm8A29vNMDp5T19MR/gd71vCxJ1gO7GyQ5HY
54
+ pDNO6rPWJ0+tJYqlxvTV0KaudAVkV4i1RFXULSo6Pvi4vekyCgKUZMQWOlDxSq7n
55
+ eTOvDCAHf+jfBDnCaQJsY1L6d8EbyHSHyLmTGFBUNUtpTrw700kuH9zB0lL7AgMB
56
+ AAGjggEaMIIBFjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNV
57
+ HQ4EFgQUQMK9J47MNIMwojPX+2yz8LQsgM4wHwYDVR0jBBgwFoAUOpqFBxBnKLbv
58
+ 9r0FQW4gwZTaD94wNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8v
59
+ b2NzcC5nb2RhZGR5LmNvbS8wNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2NybC5n
60
+ b2RhZGR5LmNvbS9nZHJvb3QtZzIuY3JsMEYGA1UdIAQ/MD0wOwYEVR0gADAzMDEG
61
+ CCsGAQUFBwIBFiVodHRwczovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkv
62
+ MA0GCSqGSIb3DQEBCwUAA4IBAQAIfmyTEMg4uJapkEv/oV9PBO9sPpyIBslQj6Zz
63
+ 91cxG7685C/b+LrTW+C05+Z5Yg4MotdqY3MxtfWoSKQ7CC2iXZDXtHwlTxFWMMS2
64
+ RJ17LJ3lXubvDGGqv+QqG+6EnriDfcFDzkSnE3ANkR/0yBOtg2DZ2HKocyQetawi
65
+ DsoXiWJYRBuriSUBAA/NxBti21G00w9RKpv0vHP8ds42pM3Z2Czqrpv1KrKQ0U11
66
+ GIo/ikGQI31bS/6kA1ibRrLDYGCD+H1QQc7CoZDDu+8CL9IVVO5EFdkKrqeKM+2x
67
+ LXY2JtwE65/3YR8V3Idv7kaWKK2hJn0KCacuBKONvPi8BDAB
68
+ -----END CERTIFICATE-----
69
+ 2 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
70
+ i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
71
+ -----BEGIN CERTIFICATE-----
72
+ MIIEfTCCA2WgAwIBAgIDG+cVMA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVT
73
+ MSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIEluYy4xMTAvBgNVBAsTKEdv
74
+ IERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMTAx
75
+ MDcwMDAwWhcNMzEwNTMwMDcwMDAwWjCBgzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
76
+ B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHku
77
+ Y29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmljYXRlIEF1
78
+ dGhvcml0eSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Fi
79
+ CPH6WTT3G8kYo/eASVjpIoMTpsUgQwE7hPHmhUmfJ+r2hBtOoLTbcJjHMgGxBT4H
80
+ Tu70+k8vWTAi56sZVmvigAf88xZ1gDlRe+X5NbZ0TqmNghPktj+pA4P6or6KFWp/
81
+ 3gvDthkUBcrqw6gElDtGfDIN8wBmIsiNaW02jBEYt9OyHGC0OPoCjM7T3UYH3go+
82
+ 6118yHz7sCtTpJJiaVElBWEaRIGMLKlDliPfrDqBmg4pxRyp6V0etp6eMAo5zvGI
83
+ gPtLXcwy7IViQyU0AlYnAZG0O3AqP26x6JyIAX2f1PnbU21gnb8s51iruF9G/M7E
84
+ GwM8CetJMVxpRrPgRwIDAQABo4IBFzCCARMwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
85
+ HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9BUFuIMGU2g/eMB8GA1Ud
86
+ IwQYMBaAFNLEsNKR1EwRcbNhyz2h/t2oatTjMDQGCCsGAQUFBwEBBCgwJjAkBggr
87
+ BgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMDIGA1UdHwQrMCkwJ6Al
88
+ oCOGIWh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2Ryb290LmNybDBGBgNVHSAEPzA9
89
+ MDsGBFUdIAAwMzAxBggrBgEFBQcCARYlaHR0cHM6Ly9jZXJ0cy5nb2RhZGR5LmNv
90
+ bS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAWQtTvZKGEacke+1bMc8d
91
+ H2xwxbhuvk679r6XUOEwf7ooXGKUwuN+M/f7QnaF25UcjCJYdQkMiGVnOQoWCcWg
92
+ OJekxSOTP7QYpgEGRJHjp2kntFolfzq3Ms3dhP8qOCkzpN1nsoX+oYggHFCJyNwq
93
+ 9kIDN0zmiN/VryTyscPfzLXs4Jlet0lUIDyUGAzHHFIYSaRt4bNYC8nY7NmuHDKO
94
+ KHAN4v6mF56ED71XcLNa6R+ghlO773z/aQvgSMO3kwvIClTErF0UZzdsyqUvMQg3
95
+ qm5vjLyb4lddJIGvl5echK1srDdMZvNhkREg5L4wn3qkKQmw4TRfZHcYQFHfjDCm
96
+ rw==
97
+ -----END CERTIFICATE-----
98
+ 3 s:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
99
+ i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
100
+ -----BEGIN CERTIFICATE-----
101
+ MIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEh
102
+ MB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBE
103
+ YWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3
104
+ MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkGA1UEBhMCVVMxITAfBgNVBAoTGFRo
105
+ ZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28gRGFkZHkgQ2xhc3Mg
106
+ MiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQADggEN
107
+ ADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d/+TvZxz0ZWizV3GgXne77ZtJ6XCA
108
+ PVYYYwhv2vLM0D9/AlQiVBDYsoHUwHU9S3/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6w
109
+ wdhFJ2+qN1j3hybX2C32qRe3H3I2TqYXP2WYktsqbl2i/ojgC95/5Y0V4evLOtXi
110
+ EqITLdiOr18SPaAIBQi2XKVlOARFmR6jYGB0xUGlcmIbYsUfb18aQr4CUWWoriMY
111
+ avx4A6lNf4DD+qta/KFApMoZFv6yyO9ecw3ud72a9nmYvLEHZ6IVDd2gWMZEewo+
112
+ YihfukEHU1jPEX44dMX4/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0OBBYEFNLE
113
+ sNKR1EwRcbNhyz2h/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h
114
+ /t2oatTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5
115
+ IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmlj
116
+ YXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD
117
+ ggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wimPQoZ+YeAEW5p5JYXMP80kWNy
118
+ OO7MHAGjHZQopDH2esRU1/blMVgDoszOYtuURXO1v0XJJLXVggKtI3lpjbi2Tc7P
119
+ TMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQ
120
+ HmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0/ZM/iZx4mER
121
+ dEr/VxqHD3VILs9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5Cuf
122
+ ReYNnyicsbkqWletNw+vHX/bvZ8=
123
+ -----END CERTIFICATE-----
124
+ ---
125
+ Server certificate
126
+ subject=/OU=Domain Control Validated/CN=www.npboards.com
127
+ issuer=/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
128
+ ---
129
+ No client certificate CA names sent
130
+ ---
131
+ SSL handshake has read 5704 bytes and written 456 bytes
132
+ ---
133
+ New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
134
+ Server public key is 2048 bit
135
+ Secure Renegotiation IS supported
136
+ Compression: NONE
137
+ Expansion: NONE
138
+ SSL-Session:
139
+ Protocol : TLSv1
140
+ Cipher : DHE-RSA-AES256-SHA
141
+ Session-ID: 2A2AFDE8AC762192EBEBAA5CC83B2A4896C2E3BC22DDFBFCC5CD8A034032994A
142
+ Session-ID-ctx:
143
+ Master-Key: 15A811591A7C0FD8F433263839A71DE6299316891E073589A5CD255BDE916D42A89B609797DC407FA8027657FA954F10
144
+ Key-Arg : None
145
+ Start Time: 1407263216
146
+ Timeout : 300 (sec)
147
+ Verify return code: 0 (ok)
148
+ ---
149
+ DONE"
150
+
151
+ INVALID_CERT = "CONNECTED(00000003)
152
+ depth=3 /C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
153
+ verify error:num=19:self signed certificate in certificate chain
154
+ verify return:0
155
+ ---
156
+ Certificate chain
157
+ 0 s:/OU=Domain Control Validated/CN=www.npboards.com
158
+ i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
159
+ -----BEGIN CERTIFICATE-----
160
+ MIIFJzCCBA+gAwIBAgIHBJJ3xc1KuTANBgkqhkiG9w0BAQsFADCBtDELMAkGA1UE
161
+ BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAY
162
+ BgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMS0wKwYDVQQLEyRodHRwOi8vY2VydHMu
163
+ Z29kYWRkeS5jb20vcmVwb3NpdG9yeS8xMzAxBgNVBAMTKkdvIERhZGR5IFNlY3Vy
164
+ ZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjAeFw0xNDA2MTcxODE2MDFaFw0x
165
+ NTA2MTcxODE2MDFaMD4xITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRl
166
+ ZDEZMBcGA1UEAxMQd3d3Lm5wYm9hcmRzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
167
+ ggEPADCCAQoCggEBAKJqQ6IHqhZrA6GPR/aDDJVVxAgpDakjFOk5HR1b5RsTHxCL
168
+ n7aE00ApmYJZfI62RWdDek9Hkk5ZgLcJ5ztXh+ITpwG/bSPSQtMFtky4YQspzgsT
169
+ xwHOb0zU4BaaVVhQqyVLQUgd/KvHF/1vP0TAJ/be/VoWn5oVYyM948c2Z/kGqUPe
170
+ tvgiZLlL082yrML0cSEoRLgYrZ50wVKNFPcKbXZN0Vnk05sHJTc9q2NYpSFagqv0
171
+ u13wh4reABiO/Mpl71uarY6thBv9IpR4GK50d+Pl1TYMLDFghYN0nzuUTj+t9BaT
172
+ OXWYZCOteUAmh3BPq3rD8iYrdQInwIzrMAAVgKMCAwEAAaOCAbEwggGtMAwGA1Ud
173
+ EwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB
174
+ /wQEAwIFoDA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY3JsLmdvZGFkZHkuY29t
175
+ L2dkaWcyczEtNzcuY3JsMFMGA1UdIARMMEowSAYLYIZIAYb9bQEHFwEwOTA3Bggr
176
+ BgEFBQcCARYraHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0
177
+ b3J5LzB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdv
178
+ ZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2Rh
179
+ ZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0
180
+ gzCiM9f7bLPwtCyAzjApBgNVHREEIjAgghB3d3cubnBib2FyZHMuY29tggxucGJv
181
+ YXJkcy5jb20wHQYDVR0OBBYEFOpHY93l1TgIyu9SVsa5m7M86GPMMA0GCSqGSIb3
182
+ DQEBCwUAA4IBAQAuC0ydTRqRcIC8kyYCVNaTRxacyU9zmTKmPR0nS1Ikrmt6JtVM
183
+ fJwaLGQji86jd3Z7b4jzYcEKWIaDRdZmfQ2LG3Q5xetLhOHFxMl6O1NJfk7VhVTN
184
+ FNisL3DnVM9G6b6wl/JzAevQ8javEoSoAcffTXiLLJWPn+1AtYRvs2GkAIrGNGgK
185
+ A6ZCYtfGvM0uy4oDIdwWueon8YnSpxqR8XfsfvR8kcR93c30AMVbk4OAu6OAp5kO
186
+ qDmgKhvyXhJ5/8cHH5WqMpor0Fwjxsrvq/BhJ1FXYlc6/GtiAR48E28SjP6YvfHQ
187
+ TXenj1uVKzuCU7eCmR5kr3tQp+ScIQPt1Ifh
188
+ -----END CERTIFICATE-----
189
+ 1 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
190
+ i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
191
+ -----BEGIN CERTIFICATE-----
192
+ MIIEfTCCA2WgAwIBAgIDG+cVMA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVT
193
+ MSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIEluYy4xMTAvBgNVBAsTKEdv
194
+ IERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMTAx
195
+ MDcwMDAwWhcNMzEwNTMwMDcwMDAwWjCBgzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
196
+ B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHku
197
+ Y29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmljYXRlIEF1
198
+ dGhvcml0eSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Fi
199
+ CPH6WTT3G8kYo/eASVjpIoMTpsUgQwE7hPHmhUmfJ+r2hBtOoLTbcJjHMgGxBT4H
200
+ Tu70+k8vWTAi56sZVmvigAf88xZ1gDlRe+X5NbZ0TqmNghPktj+pA4P6or6KFWp/
201
+ 3gvDthkUBcrqw6gElDtGfDIN8wBmIsiNaW02jBEYt9OyHGC0OPoCjM7T3UYH3go+
202
+ 6118yHz7sCtTpJJiaVElBWEaRIGMLKlDliPfrDqBmg4pxRyp6V0etp6eMAo5zvGI
203
+ gPtLXcwy7IViQyU0AlYnAZG0O3AqP26x6JyIAX2f1PnbU21gnb8s51iruF9G/M7E
204
+ GwM8CetJMVxpRrPgRwIDAQABo4IBFzCCARMwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
205
+ HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9BUFuIMGU2g/eMB8GA1Ud
206
+ IwQYMBaAFNLEsNKR1EwRcbNhyz2h/t2oatTjMDQGCCsGAQUFBwEBBCgwJjAkBggr
207
+ BgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMDIGA1UdHwQrMCkwJ6Al
208
+ oCOGIWh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2Ryb290LmNybDBGBgNVHSAEPzA9
209
+ MDsGBFUdIAAwMzAxBggrBgEFBQcCARYlaHR0cHM6Ly9jZXJ0cy5nb2RhZGR5LmNv
210
+ bS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAWQtTvZKGEacke+1bMc8d
211
+ H2xwxbhuvk679r6XUOEwf7ooXGKUwuN+M/f7QnaF25UcjCJYdQkMiGVnOQoWCcWg
212
+ OJekxSOTP7QYpgEGRJHjp2kntFolfzq3Ms3dhP8qOCkzpN1nsoX+oYggHFCJyNwq
213
+ 9kIDN0zmiN/VryTyscPfzLXs4Jlet0lUIDyUGAzHHFIYSaRt4bNYC8nY7NmuHDKO
214
+ KHAN4v6mF56ED71XcLNa6R+ghlO773z/aQvgSMO3kwvIClTErF0UZzdsyqUvMQg3
215
+ qm5vjLyb4lddJIGvl5echK1srDdMZvNhkREg5L4wn3qkKQmw4TRfZHcYQFHfjDCm
216
+ rw==
217
+ -----END CERTIFICATE-----
218
+ 2 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
219
+ i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
220
+ -----BEGIN CERTIFICATE-----
221
+ MIIEfTCCA2WgAwIBAgIDG+cVMA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVT
222
+ MSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIEluYy4xMTAvBgNVBAsTKEdv
223
+ IERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMTAx
224
+ MDcwMDAwWhcNMzEwNTMwMDcwMDAwWjCBgzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
225
+ B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHku
226
+ Y29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmljYXRlIEF1
227
+ dGhvcml0eSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Fi
228
+ CPH6WTT3G8kYo/eASVjpIoMTpsUgQwE7hPHmhUmfJ+r2hBtOoLTbcJjHMgGxBT4H
229
+ Tu70+k8vWTAi56sZVmvigAf88xZ1gDlRe+X5NbZ0TqmNghPktj+pA4P6or6KFWp/
230
+ 3gvDthkUBcrqw6gElDtGfDIN8wBmIsiNaW02jBEYt9OyHGC0OPoCjM7T3UYH3go+
231
+ 6118yHz7sCtTpJJiaVElBWEaRIGMLKlDliPfrDqBmg4pxRyp6V0etp6eMAo5zvGI
232
+ gPtLXcwy7IViQyU0AlYnAZG0O3AqP26x6JyIAX2f1PnbU21gnb8s51iruF9G/M7E
233
+ GwM8CetJMVxpRrPgRwIDAQABo4IBFzCCARMwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
234
+ HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9BUFuIMGU2g/eMB8GA1Ud
235
+ IwQYMBaAFNLEsNKR1EwRcbNhyz2h/t2oatTjMDQGCCsGAQUFBwEBBCgwJjAkBggr
236
+ BgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMDIGA1UdHwQrMCkwJ6Al
237
+ oCOGIWh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2Ryb290LmNybDBGBgNVHSAEPzA9
238
+ MDsGBFUdIAAwMzAxBggrBgEFBQcCARYlaHR0cHM6Ly9jZXJ0cy5nb2RhZGR5LmNv
239
+ bS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAWQtTvZKGEacke+1bMc8d
240
+ H2xwxbhuvk679r6XUOEwf7ooXGKUwuN+M/f7QnaF25UcjCJYdQkMiGVnOQoWCcWg
241
+ OJekxSOTP7QYpgEGRJHjp2kntFolfzq3Ms3dhP8qOCkzpN1nsoX+oYggHFCJyNwq
242
+ 9kIDN0zmiN/VryTyscPfzLXs4Jlet0lUIDyUGAzHHFIYSaRt4bNYC8nY7NmuHDKO
243
+ KHAN4v6mF56ED71XcLNa6R+ghlO773z/aQvgSMO3kwvIClTErF0UZzdsyqUvMQg3
244
+ qm5vjLyb4lddJIGvl5echK1srDdMZvNhkREg5L4wn3qkKQmw4TRfZHcYQFHfjDCm
245
+ rw==
246
+ -----END CERTIFICATE-----
247
+ 3 s:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
248
+ i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
249
+ -----BEGIN CERTIFICATE-----
250
+ MIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEh
251
+ MB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBE
252
+ YWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3
253
+ MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkGA1UEBhMCVVMxITAfBgNVBAoTGFRo
254
+ ZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28gRGFkZHkgQ2xhc3Mg
255
+ MiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQADggEN
256
+ ADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d/+TvZxz0ZWizV3GgXne77ZtJ6XCA
257
+ PVYYYwhv2vLM0D9/AlQiVBDYsoHUwHU9S3/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6w
258
+ wdhFJ2+qN1j3hybX2C32qRe3H3I2TqYXP2WYktsqbl2i/ojgC95/5Y0V4evLOtXi
259
+ EqITLdiOr18SPaAIBQi2XKVlOARFmR6jYGB0xUGlcmIbYsUfb18aQr4CUWWoriMY
260
+ avx4A6lNf4DD+qta/KFApMoZFv6yyO9ecw3ud72a9nmYvLEHZ6IVDd2gWMZEewo+
261
+ YihfukEHU1jPEX44dMX4/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0OBBYEFNLE
262
+ sNKR1EwRcbNhyz2h/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h
263
+ /t2oatTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5
264
+ IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmlj
265
+ YXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD
266
+ ggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wimPQoZ+YeAEW5p5JYXMP80kWNy
267
+ OO7MHAGjHZQopDH2esRU1/blMVgDoszOYtuURXO1v0XJJLXVggKtI3lpjbi2Tc7P
268
+ TMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQ
269
+ HmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0/ZM/iZx4mER
270
+ dEr/VxqHD3VILs9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5Cuf
271
+ ReYNnyicsbkqWletNw+vHX/bvZ8=
272
+ -----END CERTIFICATE-----
273
+ ---
274
+ Server certificate
275
+ subject=/OU=Domain Control Validated/CN=www.npboards.com
276
+ issuer=/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
277
+ ---
278
+ No client certificate CA names sent
279
+ ---
280
+ SSL handshake has read 5704 bytes and written 456 bytes
281
+ ---
282
+ New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
283
+ Server public key is 2048 bit
284
+ Secure Renegotiation IS supported
285
+ Compression: NONE
286
+ Expansion: NONE
287
+ SSL-Session:
288
+ Protocol : TLSv1
289
+ Cipher : DHE-RSA-AES256-SHA
290
+ Session-ID: 2A2AFDE8AC762192EBEBAA5CC83B2A4896C2E3BC22DDFBFCC5CD8A034032994A
291
+ Session-ID-ctx:
292
+ Master-Key: 15A811591A7C0FD8F433263839A71DE6299316891E073589A5CD255BDE916D42A89B609797DC407FA8027657FA954F10
293
+ Key-Arg : None
294
+ Start Time: 1407263216
295
+ Timeout : 300 (sec)
296
+ Verify return code: 0 (ok)
297
+ ---
298
+ DONE"
299
+
300
+ CA_BUNDLE = "-----BEGIN CERTIFICATE-----
301
+ MIIE0DCCA7igAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
302
+ EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
303
+ EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
304
+ ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTExMDUwMzA3MDAwMFoXDTMxMDUwMzA3
305
+ MDAwMFowgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH
306
+ EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UE
307
+ CxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQD
308
+ EypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwggEi
309
+ MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54MsQ1K92vdSTYuswZLiBCGzD
310
+ BNliF44v/z5lz4/OYuY8UhzaFkVLVat4a2ODYpDOD2lsmcgaFItMzEUz6ojcnqOv
311
+ K/6AYZ15V8TPLvQ/MDxdR/yaFrzDN5ZBUY4RS1T4KL7QjL7wMDge87Am+GZHY23e
312
+ cSZHjzhHU9FGHbTj3ADqRay9vHHZqm8A29vNMDp5T19MR/gd71vCxJ1gO7GyQ5HY
313
+ pDNO6rPWJ0+tJYqlxvTV0KaudAVkV4i1RFXULSo6Pvi4vekyCgKUZMQWOlDxSq7n
314
+ eTOvDCAHf+jfBDnCaQJsY1L6d8EbyHSHyLmTGFBUNUtpTrw700kuH9zB0lL7AgMB
315
+ AAGjggEaMIIBFjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNV
316
+ HQ4EFgQUQMK9J47MNIMwojPX+2yz8LQsgM4wHwYDVR0jBBgwFoAUOpqFBxBnKLbv
317
+ 9r0FQW4gwZTaD94wNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8v
318
+ b2NzcC5nb2RhZGR5LmNvbS8wNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2NybC5n
319
+ b2RhZGR5LmNvbS9nZHJvb3QtZzIuY3JsMEYGA1UdIAQ/MD0wOwYEVR0gADAzMDEG
320
+ CCsGAQUFBwIBFiVodHRwczovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkv
321
+ MA0GCSqGSIb3DQEBCwUAA4IBAQAIfmyTEMg4uJapkEv/oV9PBO9sPpyIBslQj6Zz
322
+ 91cxG7685C/b+LrTW+C05+Z5Yg4MotdqY3MxtfWoSKQ7CC2iXZDXtHwlTxFWMMS2
323
+ RJ17LJ3lXubvDGGqv+QqG+6EnriDfcFDzkSnE3ANkR/0yBOtg2DZ2HKocyQetawi
324
+ DsoXiWJYRBuriSUBAA/NxBti21G00w9RKpv0vHP8ds42pM3Z2Czqrpv1KrKQ0U11
325
+ GIo/ikGQI31bS/6kA1ibRrLDYGCD+H1QQc7CoZDDu+8CL9IVVO5EFdkKrqeKM+2x
326
+ LXY2JtwE65/3YR8V3Idv7kaWKK2hJn0KCacuBKONvPi8BDAB
327
+ -----END CERTIFICATE-----"
328
+
329
+ CONNECTION_REFUSED = "connect: Connection refused
330
+ connect:errno=61"
331
+
332
+ TUMBLER_CERT = "CONNECTED(00000003)
333
+ depth=0 /C=US/ST=Florida/L=North Venice/O=Tervis Tumbler/OU=Tervis Tumbler/OU=Terms of use at www.verisign.com/rpa (c)05/CN=www.tervis.com
334
+ verify error:num=20:unable to get local issuer certificate
335
+ verify return:1
336
+ depth=0 /C=US/ST=Florida/L=North Venice/O=Tervis Tumbler/OU=Tervis Tumbler/OU=Terms of use at www.verisign.com/rpa (c)05/CN=www.tervis.com
337
+ verify error:num=27:certificate not trusted
338
+ verify return:1
339
+ depth=0 /C=US/ST=Florida/L=North Venice/O=Tervis Tumbler/OU=Tervis Tumbler/OU=Terms of use at www.verisign.com/rpa (c)05/CN=www.tervis.com
340
+ verify error:num=21:unable to verify the first certificate
341
+ verify return:1
342
+ ---
343
+ Certificate chain
344
+ 0 s:/C=US/ST=Florida/L=North Venice/O=Tervis Tumbler/OU=Tervis Tumbler/OU=Terms of use at www.verisign.com/rpa (c)05/CN=www.tervis.com
345
+ i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3
346
+ -----BEGIN CERTIFICATE-----
347
+ MIIFyjCCBLKgAwIBAgIQEZuks1SoqHIX+Fp+Y4/0GjANBgkqhkiG9w0BAQUFADCB
348
+ tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
349
+ ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
350
+ YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm
351
+ VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTIwNTI5
352
+ MDAwMDAwWhcNMTgwNTMwMjM1OTU5WjCBtjELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
353
+ B0Zsb3JpZGExFTATBgNVBAcUDE5vcnRoIFZlbmljZTEXMBUGA1UEChQOVGVydmlz
354
+ IFR1bWJsZXIxFzAVBgNVBAsUDlRlcnZpcyBUdW1ibGVyMTMwMQYDVQQLFCpUZXJt
355
+ cyBvZiB1c2UgYXQgd3d3LnZlcmlzaWduLmNvbS9ycGEgKGMpMDUxFzAVBgNVBAMU
356
+ Dnd3dy50ZXJ2aXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
357
+ uOwjf8vHWecTTjMQydGM2G45kjb3qWp7/EefKiw0pcC4him6Seqy2Vn/XaWfiouD
358
+ qi1YwydfJzGXoFLCRvDP94MSkPlhV3eO7UuplWAnslmlZX6MPt8N1F5scEqWcJWS
359
+ l7SgNj3WF5jd+qYuJobXKsD58qOdtNdL4LDKlhSoN4s77WkI4K42r/3aHj7+sngX
360
+ e1NXqjNcAn5G6PyfU9TNW6E5RKVcqclrAQ0x6Rze8bMNOlX11OBFRWsggkT7LjnW
361
+ eoN4PSFV7GncAr0crgjcbVVP4VaFQFHwVI3mtge2qiCtqiBW+vmDfHeUUuMctgPm
362
+ +Ikxzo5+hKCQLfyi4m+qGwIDAQABo4IB0TCCAc0wCQYDVR0TBAIwADALBgNVHQ8E
363
+ BAMCBaAwRQYDVR0fBD4wPDA6oDigNoY0aHR0cDovL1NWUlNlY3VyZS1HMy1jcmwu
364
+ dmVyaXNpZ24uY29tL1NWUlNlY3VyZUczLmNybDBEBgNVHSAEPTA7MDkGC2CGSAGG
365
+ +EUBBxcDMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9y
366
+ cGEwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFA1E
367
+ XBZTRMGCfh0gqyX0AWPYvnmlMHYGCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYY
368
+ aHR0cDovL29jc3AudmVyaXNpZ24uY29tMEAGCCsGAQUFBzAChjRodHRwOi8vU1ZS
369
+ U2VjdXJlLUczLWFpYS52ZXJpc2lnbi5jb20vU1ZSU2VjdXJlRzMuY2VyMG4GCCsG
370
+ AQUFBwEMBGIwYKFeoFwwWjBYMFYWCWltYWdlL2dpZjAhMB8wBwYFKw4DAhoEFEtr
371
+ uSiWBgy70FI4mymsSweLIQUYMCYWJGh0dHA6Ly9sb2dvLnZlcmlzaWduLmNvbS92
372
+ c2xvZ28xLmdpZjANBgkqhkiG9w0BAQUFAAOCAQEAn3hXVrPK3z6wf6Jkr4mecMcQ
373
+ 95hFWon06O/UyKui+kGbNaTCK6+U/DYwogBwIJuEiEeBaOhq5CzNGYDwrmNcXJet
374
+ KVW77IirNxbHEGF1hIe5d2YAPhgyuPhwiLUtS9OjM51XLoYsoVQssRDkWcV2uCgx
375
+ /QQ1VM4EJGhjt0o/4Br75EKeVD+QhD+upvekXwJyZMgkAfss0Vy6zXCWO6ZAzpSG
376
+ 9t+nglGLqDurBzb/XtbITYpKwLPxYL1XZYnjV2yiXgK1+7CAIYfX3wez8WsCG10E
377
+ nqg/vMw60AzZb/MvJOuRzi0lduklwSufYQhvGTjG3BCy8DVsK3HaGM/TQHQnLQ==
378
+ -----END CERTIFICATE-----
379
+ ---
380
+ Server certificate
381
+ subject=/C=US/ST=Florida/L=North Venice/O=Tervis Tumbler/OU=Tervis Tumbler/OU=Terms of use at www.verisign.com/rpa (c)05/CN=www.tervis.com
382
+ issuer=/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3
383
+ ---
384
+ No client certificate CA names sent
385
+ ---
386
+ SSL handshake has read 1643 bytes and written 444 bytes
387
+ ---
388
+ New, TLSv1/SSLv3, Cipher is RC4-SHA
389
+ Server public key is 2048 bit
390
+ Secure Renegotiation IS supported
391
+ Compression: NONE
392
+ Expansion: NONE
393
+ SSL-Session:
394
+ Protocol : TLSv1
395
+ Cipher : RC4-SHA
396
+ Session-ID: 515ADB862B6F5DEF48D7E0CCDB30F989C2714CA25FA365F3704C92E55D4D1B43
397
+ Session-ID-ctx:
398
+ Master-Key: D581D6A64F0EF29AE86CCBC136DC467F2D743241608CD507966760BC19C7A1B5045C33E47D145F364C544E04D502A282
399
+ Key-Arg : None
400
+ Start Time: 1407860745
401
+ Timeout : 300 (sec)
402
+ Verify return code: 21 (unable to verify the first certificate)
403
+ ---
404
+ DONE"
405
+
406
+
407
+ MISSING_CA_CERT = "CONNECTED(00000003)
408
+ depth=0 /OU=Domain Control Validated/OU=PositiveSSL/CN=www.clzmarketing.com
409
+ verify error:num=20:unable to get local issuer certificate
410
+ verify return:1
411
+ depth=0 /OU=Domain Control Validated/OU=PositiveSSL/CN=www.clzmarketing.com
412
+ verify error:num=27:certificate not trusted
413
+ verify return:1
414
+ depth=0 /OU=Domain Control Validated/OU=PositiveSSL/CN=www.clzmarketing.com
415
+ verify error:num=21:unable to verify the first certificate
416
+ verify return:1
417
+ ---
418
+ Certificate chain
419
+ 0 s:/OU=Domain Control Validated/OU=PositiveSSL/CN=www.clzmarketing.com
420
+ i:/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
421
+ -----BEGIN CERTIFICATE-----
422
+ MIIFWjCCBEKgAwIBAgIRAMz5TmvHUcBHmXOKY3IcIvMwDQYJKoZIhvcNAQELBQAw
423
+ gZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
424
+ BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYD
425
+ VQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIg
426
+ Q0EwHhcNMTQwODIyMDAwMDAwWhcNMTUwODIyMjM1OTU5WjBYMSEwHwYDVQQLExhE
427
+ b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFDASBgNVBAsTC1Bvc2l0aXZlU1NMMR0w
428
+ GwYDVQQDExR3d3cuY2x6bWFya2V0aW5nLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
429
+ ggEPADCCAQoCggEBAPu5zajlQUQF3Si/NHFJEiV0qoBZkv4Zb1aGvJJHSaw2x0sx
430
+ iieJfjQrErzd8d1yQ/K09fw13MEYCuWFLwmMEE5f/6F03r7DWPfmPcSkWKbKPPA/
431
+ CjYLMP0fVsPkxqagTTyK6XCZPpMvZ90bXuX5bvENXemYyL0Lo/jtF2vTmsvIkOl+
432
+ S9tHP6omXc9javhhATbu0o68o7n6kBYPVURKSQxChda3XHdOiuvKECnMfD7JfnYa
433
+ uy0112icujQ04V1HjSEIaf+RC6A4sbfg8uWENr/8DJ4nTkmjv7jCi8OPn0OFPMFa
434
+ lBBNFrGY+0CtdMoF1AhJXx5hf9CDwb1EKQwJpAMCAwEAAaOCAeQwggHgMB8GA1Ud
435
+ IwQYMBaAFJCvajqUWgvYkOoSVnPfQ7Q6KNrnMB0GA1UdDgQWBBTX4kqS+6BB6n+a
436
+ bKNO2ujHvbxsAzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUE
437
+ FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwUAYDVR0gBEkwRzA7BgwrBgEEAbIxAQIB
438
+ AwQwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLm5ldC9DUFMw
439
+ CAYGZ4EMAQIBMFQGA1UdHwRNMEswSaBHoEWGQ2h0dHA6Ly9jcmwuY29tb2RvY2Eu
440
+ Y29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcmww
441
+ gYUGCCsGAQUFBwEBBHkwdzBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5jb21vZG9j
442
+ YS5jb20vQ09NT0RPUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNy
443
+ dDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMDEGA1UdEQQq
444
+ MCiCFHd3dy5jbHptYXJrZXRpbmcuY29tghBjbHptYXJrZXRpbmcuY29tMA0GCSqG
445
+ SIb3DQEBCwUAA4IBAQCB+C7VH/PuQD7hBUdNgMGCZaYCJKYu2eA8LkgjSRCOwNXM
446
+ Kwm837DN1KB3j71K8+GqbX5JqT3UL6m4zYpjw4YYHjkVTkGlOu0vXvaobXiOSN6i
447
+ 6YYf6rwY027wCBLd6G3VW6h41fDgLI7tGuJ93hmu0TDitz2m7k+0mV6xUDEOTGf8
448
+ VeNZFYqfZgLrolQxK/xywkZtNygI5lFxvWVYLTpstOHrVIoQKCYv+PTHWE0el/J8
449
+ BM5jdL/Z72XZkY0ScniqXlXgeniBrgyP/JcunwcziRPBvX3KUuc4hcXpOodkoEqN
450
+ AHo0jeiwhl25REt+KPmNBKFzBBHymszM6kDpsOZv
451
+ -----END CERTIFICATE-----
452
+ ---
453
+ Server certificate
454
+ subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=www.clzmarketing.com
455
+ issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
456
+ ---
457
+ No client certificate CA names sent
458
+ ---
459
+ SSL handshake has read 2073 bytes and written 328 bytes
460
+ ---
461
+ New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
462
+ Server public key is 2048 bit
463
+ Secure Renegotiation IS supported
464
+ Compression: NONE
465
+ Expansion: NONE
466
+ SSL-Session:
467
+ Protocol : TLSv1
468
+ Cipher : DHE-RSA-AES256-SHA
469
+ Session-ID: 11A1D588CAC88F4BF3EA1CAD2305B1564512A07267AEC61344900D51A95C8624
470
+ Session-ID-ctx:
471
+ Master-Key: 0D6CF3589A8D6F9B74E0EA7BA43E7B7B716F62A62D825C4A31D2B5E2A3A5B8BA1C533FF6133F3613040758A69A5815CF
472
+ Key-Arg : None
473
+ Start Time: 1408723412
474
+ Timeout : 300 (sec)
475
+ Verify return code: 21 (unable to verify the first certificate)
476
+ ---
477
+ DONE"
478
+
479
+ WILDCARD_CERT = "CONNECTED(00000003)
480
+ depth=1 /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 High Assurance Server CA
481
+ verify error:num=20:unable to get local issuer certificate
482
+ verify return:0
483
+ ---
484
+ Certificate chain
485
+ 0 s:/C=US/ST=New York/L=New York/O=Squarespace, Inc./OU=Web Services/CN=*.squarespace.com
486
+ i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 High Assurance Server CA
487
+ -----BEGIN CERTIFICATE-----
488
+ MIIFcDCCBFigAwIBAgIQBBS8ZZBhio4Z8BnMlHMIjzANBgkqhkiG9w0BAQsFADBw
489
+ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
490
+ d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
491
+ dXJhbmNlIFNlcnZlciBDQTAeFw0xNDA0MDkwMDAwMDBaFw0xNzA2MTIxMjAwMDBa
492
+ MIGCMQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsxETAPBgNVBAcTCE5l
493
+ dyBZb3JrMRowGAYDVQQKExFTcXVhcmVzcGFjZSwgSW5jLjEVMBMGA1UECxMMV2Vi
494
+ IFNlcnZpY2VzMRowGAYDVQQDDBEqLnNxdWFyZXNwYWNlLmNvbTCCASIwDQYJKoZI
495
+ hvcNAQEBBQADggEPADCCAQoCggEBALtMtUSk+rPA3WD34CC5kr7VbR49UqvMIIgK
496
+ kdQv1+QjqdUZqNpDJ/+YLLtlSum70G/frs622HQRMPGn/y/IRC3ddDMFqhr+FcVH
497
+ 9IsH+8mngJ3VNCylafrpQnNfBha4fGVeb7GddaZh2rD5qv4gCFHz1d9CboFCDU3e
498
+ x496FxWfZKdjID4U+Bw/opozTC7Tjw1CyadST0tnKHv/zWxoFDlQkHy8y2mOApry
499
+ zWA3yhWlMQCY+a5yfawZbtF0AQ5D5PJ5yQH3wZOHZfvMOM9ksVE5bpbcBc7tV6Hy
500
+ LHmOztCpFp2IzaaDl/R/2q1/b2coQfMk2+pWmQnRckWcrCGilhsCAwEAAaOCAfEw
501
+ ggHtMB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZZWRiohK4WXI7MB0GA1UdDgQWBBRm
502
+ APzcXakFaMT3ekVb8LByufbh5jAtBgNVHREEJjAkghEqLnNxdWFyZXNwYWNlLmNv
503
+ bYIPc3F1YXJlc3BhY2UuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
504
+ BgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMu
505
+ ZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWcxLmNybDA0oDKgMIYuaHR0cDov
506
+ L2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWcxLmNybDBCBgNVHSAE
507
+ OzA5MDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdp
508
+ Y2VydC5jb20vQ1BTMIGDBggrBgEFBQcBAQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6
509
+ Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBNBggrBgEFBQcwAoZBaHR0cDovL2NhY2VydHMu
510
+ ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5j
511
+ cnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAmMGtUj5w0/+078Sj
512
+ AUfK4elCCvO5otjml/uGUZPuzFQejEvbhY0oSEBvXbUSDT10pcYWV8Hse6RTSJNV
513
+ 6rRN/+Ya4sy1Gc5ZbDaubtxWnECcNoQmgX+I9Vc3ledWzcc2vMt7gxOaxD1iAMJe
514
+ wQ7whrxwF6TDx+7CXCuoW/xdMD+0tKLTo1WJzy9dZh8b4jSFzYw0XCuWAafdmwdK
515
+ j8mY3JPYQyyzVW7KRLlralmcKOjbQHqiC7V88s5oYBN37nsttu3P6CMCcPB4RhuT
516
+ qINtppn0oLmIT7exWFXD+FF8VRosMv5wTZRF8W1PJe5I/1j1INnAEQW943yKQc6/
517
+ F+O+yA==
518
+ -----END CERTIFICATE-----
519
+ 1 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 High Assurance Server CA
520
+ i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance EV Root CA
521
+ -----BEGIN CERTIFICATE-----
522
+ MIIEsTCCA5mgAwIBAgIQBOHnpNxc8vNtwCtCuF0VnzANBgkqhkiG9w0BAQsFADBs
523
+ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
524
+ d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
525
+ ZSBFViBSb290IENBMB4XDTEzMTAyMjEyMDAwMFoXDTI4MTAyMjEyMDAwMFowcDEL
526
+ MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3
527
+ LmRpZ2ljZXJ0LmNvbTEvMC0GA1UEAxMmRGlnaUNlcnQgU0hBMiBIaWdoIEFzc3Vy
528
+ YW5jZSBTZXJ2ZXIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2
529
+ 4C/CJAbIbQRf1+8KZAayfSImZRauQkCbztyfn3YHPsMwVYcZuU+UDlqUH1VWtMIC
530
+ Kq/QmO4LQNfE0DtyyBSe75CxEamu0si4QzrZCwvV1ZX1QK/IHe1NnF9Xt4ZQaJn1
531
+ itrSxwUfqJfJ3KSxgoQtxq2lnMcZgqaFD15EWCo3j/018QsIJzJa9buLnqS9UdAn
532
+ 4t07QjOjBSjEuyjMmqwrIw14xnvmXnG3Sj4I+4G3FhahnSMSTeXXkgisdaScus0X
533
+ sh5ENWV/UyU50RwKmmMbGZJ0aAo3wsJSSMs5WqK24V3B3aAguCGikyZvFEohQcft
534
+ bZvySC/zA/WiaJJTL17jAgMBAAGjggFJMIIBRTASBgNVHRMBAf8ECDAGAQH/AgEA
535
+ MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
536
+ NAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy
537
+ dC5jb20wSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29t
538
+ L0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUVWUm9vdENBLmNybDA9BgNVHSAENjA0MDIG
539
+ BFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ
540
+ UzAdBgNVHQ4EFgQUUWj/kK8CB3U8zNllZGKiErhZcjswHwYDVR0jBBgwFoAUsT7D
541
+ aQP4v0cB1JgmGggC72NkK8MwDQYJKoZIhvcNAQELBQADggEBABiKlYkD5m3fXPwd
542
+ aOpKj4PWUS+Na0QWnqxj9dJubISZi6qBcYRb7TROsLd5kinMLYBq8I4g4Xmk/gNH
543
+ E+r1hspZcX30BJZr01lYPf7TMSVcGDiEo+afgv2MW5gxTs14nhr9hctJqvIni5ly
544
+ /D6q1UEL2tU2ob8cbkdJf17ZSHwD2f2LSaCYJkJA69aSEaRkCldUxPUd1gJea6zu
545
+ xICaEnL6VpPX/78whQYwvwt/Tv9XBZ0k7YXDK/umdaisLRbvfXknsuvCnQsH6qqF
546
+ 0wGjIChBWUMo0oHjqvbsezt3tkBigAVBRQHvFwY+3sAzm2fTYS5yh+Rp/BIAV0Ae
547
+ cPUeybQ=
548
+ -----END CERTIFICATE-----
549
+ ---
550
+ Server certificate
551
+ subject=/C=US/ST=New York/L=New York/O=Squarespace, Inc./OU=Web Services/CN=*.squarespace.com
552
+ issuer=/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 High Assurance Server CA
553
+ ---
554
+ No client certificate CA names sent
555
+ ---
556
+ SSL handshake has read 2761 bytes and written 444 bytes
557
+ ---
558
+ New, TLSv1/SSLv3, Cipher is RC4-SHA
559
+ Server public key is 2048 bit
560
+ Secure Renegotiation IS supported
561
+ Compression: NONE
562
+ Expansion: NONE
563
+ SSL-Session:
564
+ Protocol : TLSv1
565
+ Cipher : RC4-SHA
566
+ Session-ID: C533048F3FE371C0FCF3CA00F8219FFD802771630C55FF1C23055748C264F87C
567
+ Session-ID-ctx:
568
+ Master-Key: 59288CD04FDCCE7C710660F5E7CB86B7426E011D76A27B09DC7628D41C097BD58390522DB973F5AFDE507C58139B079D
569
+ Key-Arg : None
570
+ Start Time: 1408732240
571
+ Timeout : 300 (sec)
572
+ Verify return code: 0 (ok)
573
+ ---
574
+ DONE"
575
+
576
+ UPPERCASE_CERT = "CONNECTED(00000003)
577
+ depth=3 /C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
578
+ verify error:num=19:self signed certificate in certificate chain
579
+ verify return:0
580
+ ---
581
+ Certificate chain
582
+ 0 s:/OU=Domain Control Validated/CN=www.NpBoArds.com
583
+ i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
584
+ -----BEGIN CERTIFICATE-----
585
+ MIIFJzCCBA+gAwIBAgIHBJJ3xc1KuTANBgkqhkiG9w0BAQsFADCBtDELMAkGA1UE
586
+ BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAY
587
+ BgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMS0wKwYDVQQLEyRodHRwOi8vY2VydHMu
588
+ Z29kYWRkeS5jb20vcmVwb3NpdG9yeS8xMzAxBgNVBAMTKkdvIERhZGR5IFNlY3Vy
589
+ ZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjAeFw0xNDA2MTcxODE2MDFaFw0x
590
+ NTA2MTcxODE2MDFaMD4xITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRl
591
+ ZDEZMBcGA1UEAxMQd3d3Lm5wYm9hcmRzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
592
+ ggEPADCCAQoCggEBAKJqQ6IHqhZrA6GPR/aDDJVVxAgpDakjFOk5HR1b5RsTHxCL
593
+ n7aE00ApmYJZfI62RWdDek9Hkk5ZgLcJ5ztXh+ITpwG/bSPSQtMFtky4YQspzgsT
594
+ xwHOb0zU4BaaVVhQqyVLQUgd/KvHF/1vP0TAJ/be/VoWn5oVYyM948c2Z/kGqUPe
595
+ tvgiZLlL082yrML0cSEoRLgYrZ50wVKNFPcKbXZN0Vnk05sHJTc9q2NYpSFagqv0
596
+ u13wh4reABiO/Mpl71uarY6thBv9IpR4GK50d+Pl1TYMLDFghYN0nzuUTj+t9BaT
597
+ OXWYZCOteUAmh3BPq3rD8iYrdQInwIzrMAAVgKMCAwEAAaOCAbEwggGtMAwGA1Ud
598
+ EwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB
599
+ /wQEAwIFoDA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY3JsLmdvZGFkZHkuY29t
600
+ L2dkaWcyczEtNzcuY3JsMFMGA1UdIARMMEowSAYLYIZIAYb9bQEHFwEwOTA3Bggr
601
+ BgEFBQcCARYraHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0
602
+ b3J5LzB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdv
603
+ ZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2Rh
604
+ ZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0
605
+ gzCiM9f7bLPwtCyAzjApBgNVHREEIjAgghB3d3cubnBib2FyZHMuY29tggxucGJv
606
+ YXJkcy5jb20wHQYDVR0OBBYEFOpHY93l1TgIyu9SVsa5m7M86GPMMA0GCSqGSIb3
607
+ DQEBCwUAA4IBAQAuC0ydTRqRcIC8kyYCVNaTRxacyU9zmTKmPR0nS1Ikrmt6JtVM
608
+ fJwaLGQji86jd3Z7b4jzYcEKWIaDRdZmfQ2LG3Q5xetLhOHFxMl6O1NJfk7VhVTN
609
+ FNisL3DnVM9G6b6wl/JzAevQ8javEoSoAcffTXiLLJWPn+1AtYRvs2GkAIrGNGgK
610
+ A6ZCYtfGvM0uy4oDIdwWueon8YnSpxqR8XfsfvR8kcR93c30AMVbk4OAu6OAp5kO
611
+ qDmgKhvyXhJ5/8cHH5WqMpor0Fwjxsrvq/BhJ1FXYlc6/GtiAR48E28SjP6YvfHQ
612
+ TXenj1uVKzuCU7eCmR5kr3tQp+ScIQPt1Ifh
613
+ -----END CERTIFICATE-----
614
+ 1 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
615
+ i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
616
+ -----BEGIN CERTIFICATE-----
617
+ MIIE0DCCA7igAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
618
+ EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
619
+ EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
620
+ ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTExMDUwMzA3MDAwMFoXDTMxMDUwMzA3
621
+ MDAwMFowgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH
622
+ EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UE
623
+ CxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQD
624
+ EypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwggEi
625
+ MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54MsQ1K92vdSTYuswZLiBCGzD
626
+ BNliF44v/z5lz4/OYuY8UhzaFkVLVat4a2ODYpDOD2lsmcgaFItMzEUz6ojcnqOv
627
+ K/6AYZ15V8TPLvQ/MDxdR/yaFrzDN5ZBUY4RS1T4KL7QjL7wMDge87Am+GZHY23e
628
+ cSZHjzhHU9FGHbTj3ADqRay9vHHZqm8A29vNMDp5T19MR/gd71vCxJ1gO7GyQ5HY
629
+ pDNO6rPWJ0+tJYqlxvTV0KaudAVkV4i1RFXULSo6Pvi4vekyCgKUZMQWOlDxSq7n
630
+ eTOvDCAHf+jfBDnCaQJsY1L6d8EbyHSHyLmTGFBUNUtpTrw700kuH9zB0lL7AgMB
631
+ AAGjggEaMIIBFjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNV
632
+ HQ4EFgQUQMK9J47MNIMwojPX+2yz8LQsgM4wHwYDVR0jBBgwFoAUOpqFBxBnKLbv
633
+ 9r0FQW4gwZTaD94wNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8v
634
+ b2NzcC5nb2RhZGR5LmNvbS8wNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2NybC5n
635
+ b2RhZGR5LmNvbS9nZHJvb3QtZzIuY3JsMEYGA1UdIAQ/MD0wOwYEVR0gADAzMDEG
636
+ CCsGAQUFBwIBFiVodHRwczovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkv
637
+ MA0GCSqGSIb3DQEBCwUAA4IBAQAIfmyTEMg4uJapkEv/oV9PBO9sPpyIBslQj6Zz
638
+ 91cxG7685C/b+LrTW+C05+Z5Yg4MotdqY3MxtfWoSKQ7CC2iXZDXtHwlTxFWMMS2
639
+ RJ17LJ3lXubvDGGqv+QqG+6EnriDfcFDzkSnE3ANkR/0yBOtg2DZ2HKocyQetawi
640
+ DsoXiWJYRBuriSUBAA/NxBti21G00w9RKpv0vHP8ds42pM3Z2Czqrpv1KrKQ0U11
641
+ GIo/ikGQI31bS/6kA1ibRrLDYGCD+H1QQc7CoZDDu+8CL9IVVO5EFdkKrqeKM+2x
642
+ LXY2JtwE65/3YR8V3Idv7kaWKK2hJn0KCacuBKONvPi8BDAB
643
+ -----END CERTIFICATE-----
644
+ 2 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2
645
+ i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
646
+ -----BEGIN CERTIFICATE-----
647
+ MIIEfTCCA2WgAwIBAgIDG+cVMA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVT
648
+ MSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIEluYy4xMTAvBgNVBAsTKEdv
649
+ IERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMTAx
650
+ MDcwMDAwWhcNMzEwNTMwMDcwMDAwWjCBgzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
651
+ B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHku
652
+ Y29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmljYXRlIEF1
653
+ dGhvcml0eSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Fi
654
+ CPH6WTT3G8kYo/eASVjpIoMTpsUgQwE7hPHmhUmfJ+r2hBtOoLTbcJjHMgGxBT4H
655
+ Tu70+k8vWTAi56sZVmvigAf88xZ1gDlRe+X5NbZ0TqmNghPktj+pA4P6or6KFWp/
656
+ 3gvDthkUBcrqw6gElDtGfDIN8wBmIsiNaW02jBEYt9OyHGC0OPoCjM7T3UYH3go+
657
+ 6118yHz7sCtTpJJiaVElBWEaRIGMLKlDliPfrDqBmg4pxRyp6V0etp6eMAo5zvGI
658
+ gPtLXcwy7IViQyU0AlYnAZG0O3AqP26x6JyIAX2f1PnbU21gnb8s51iruF9G/M7E
659
+ GwM8CetJMVxpRrPgRwIDAQABo4IBFzCCARMwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
660
+ HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9BUFuIMGU2g/eMB8GA1Ud
661
+ IwQYMBaAFNLEsNKR1EwRcbNhyz2h/t2oatTjMDQGCCsGAQUFBwEBBCgwJjAkBggr
662
+ BgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMDIGA1UdHwQrMCkwJ6Al
663
+ oCOGIWh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2Ryb290LmNybDBGBgNVHSAEPzA9
664
+ MDsGBFUdIAAwMzAxBggrBgEFBQcCARYlaHR0cHM6Ly9jZXJ0cy5nb2RhZGR5LmNv
665
+ bS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAWQtTvZKGEacke+1bMc8d
666
+ H2xwxbhuvk679r6XUOEwf7ooXGKUwuN+M/f7QnaF25UcjCJYdQkMiGVnOQoWCcWg
667
+ OJekxSOTP7QYpgEGRJHjp2kntFolfzq3Ms3dhP8qOCkzpN1nsoX+oYggHFCJyNwq
668
+ 9kIDN0zmiN/VryTyscPfzLXs4Jlet0lUIDyUGAzHHFIYSaRt4bNYC8nY7NmuHDKO
669
+ KHAN4v6mF56ED71XcLNa6R+ghlO773z/aQvgSMO3kwvIClTErF0UZzdsyqUvMQg3
670
+ qm5vjLyb4lddJIGvl5echK1srDdMZvNhkREg5L4wn3qkKQmw4TRfZHcYQFHfjDCm
671
+ rw==
672
+ -----END CERTIFICATE-----
673
+ 3 s:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
674
+ i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
675
+ -----BEGIN CERTIFICATE-----
676
+ MIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEh
677
+ MB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBE
678
+ YWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3
679
+ MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkGA1UEBhMCVVMxITAfBgNVBAoTGFRo
680
+ ZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28gRGFkZHkgQ2xhc3Mg
681
+ MiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQADggEN
682
+ ADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d/+TvZxz0ZWizV3GgXne77ZtJ6XCA
683
+ PVYYYwhv2vLM0D9/AlQiVBDYsoHUwHU9S3/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6w
684
+ wdhFJ2+qN1j3hybX2C32qRe3H3I2TqYXP2WYktsqbl2i/ojgC95/5Y0V4evLOtXi
685
+ EqITLdiOr18SPaAIBQi2XKVlOARFmR6jYGB0xUGlcmIbYsUfb18aQr4CUWWoriMY
686
+ avx4A6lNf4DD+qta/KFApMoZFv6yyO9ecw3ud72a9nmYvLEHZ6IVDd2gWMZEewo+
687
+ YihfukEHU1jPEX44dMX4/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0OBBYEFNLE
688
+ sNKR1EwRcbNhyz2h/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h
689
+ /t2oatTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5
690
+ IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmlj
691
+ YXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD
692
+ ggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wimPQoZ+YeAEW5p5JYXMP80kWNy
693
+ OO7MHAGjHZQopDH2esRU1/blMVgDoszOYtuURXO1v0XJJLXVggKtI3lpjbi2Tc7P
694
+ TMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQ
695
+ HmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0/ZM/iZx4mER
696
+ dEr/VxqHD3VILs9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5Cuf
697
+ ReYNnyicsbkqWletNw+vHX/bvZ8=
698
+ -----END CERTIFICATE-----
699
+ ---
700
+ Server certificate
701
+ subject=/OU=Domain Control Validated/CN=www.NpBoArds.com
702
+ issuer=/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
703
+ ---
704
+ No client certificate CA names sent
705
+ ---
706
+ SSL handshake has read 5704 bytes and written 456 bytes
707
+ ---
708
+ New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
709
+ Server public key is 2048 bit
710
+ Secure Renegotiation IS supported
711
+ Compression: NONE
712
+ Expansion: NONE
713
+ SSL-Session:
714
+ Protocol : TLSv1
715
+ Cipher : DHE-RSA-AES256-SHA
716
+ Session-ID: 2A2AFDE8AC762192EBEBAA5CC83B2A4896C2E3BC22DDFBFCC5CD8A034032994A
717
+ Session-ID-ctx:
718
+ Master-Key: 15A811591A7C0FD8F433263839A71DE6299316891E073589A5CD255BDE916D42A89B609797DC407FA8027657FA954F10
719
+ Key-Arg : None
720
+ Start Time: 1407263216
721
+ Timeout : 300 (sec)
722
+ Verify return code: 0 (ok)
723
+ ---
724
+ DONE"
725
+
726
+ CA_PARENT = """
727
+ -----BEGIN CERTIFICATE-----
728
+ MIIE0DCCA7igAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
729
+ EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
730
+ EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
731
+ ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTExMDUwMzA3MDAwMFoXDTMxMDUwMzA3
732
+ MDAwMFowgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH
733
+ EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UE
734
+ CxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQD
735
+ EypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwggEi
736
+ MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54MsQ1K92vdSTYuswZLiBCGzD
737
+ BNliF44v/z5lz4/OYuY8UhzaFkVLVat4a2ODYpDOD2lsmcgaFItMzEUz6ojcnqOv
738
+ K/6AYZ15V8TPLvQ/MDxdR/yaFrzDN5ZBUY4RS1T4KL7QjL7wMDge87Am+GZHY23e
739
+ cSZHjzhHU9FGHbTj3ADqRay9vHHZqm8A29vNMDp5T19MR/gd71vCxJ1gO7GyQ5HY
740
+ pDNO6rPWJ0+tJYqlxvTV0KaudAVkV4i1RFXULSo6Pvi4vekyCgKUZMQWOlDxSq7n
741
+ eTOvDCAHf+jfBDnCaQJsY1L6d8EbyHSHyLmTGFBUNUtpTrw700kuH9zB0lL7AgMB
742
+ AAGjggEaMIIBFjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNV
743
+ HQ4EFgQUQMK9J47MNIMwojPX+2yz8LQsgM4wHwYDVR0jBBgwFoAUOpqFBxBnKLbv
744
+ 9r0FQW4gwZTaD94wNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8v
745
+ b2NzcC5nb2RhZGR5LmNvbS8wNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2NybC5n
746
+ b2RhZGR5LmNvbS9nZHJvb3QtZzIuY3JsMEYGA1UdIAQ/MD0wOwYEVR0gADAzMDEG
747
+ CCsGAQUFBwIBFiVodHRwczovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkv
748
+ MA0GCSqGSIb3DQEBCwUAA4IBAQAIfmyTEMg4uJapkEv/oV9PBO9sPpyIBslQj6Zz
749
+ 91cxG7685C/b+LrTW+C05+Z5Yg4MotdqY3MxtfWoSKQ7CC2iXZDXtHwlTxFWMMS2
750
+ RJ17LJ3lXubvDGGqv+QqG+6EnriDfcFDzkSnE3ANkR/0yBOtg2DZ2HKocyQetawi
751
+ DsoXiWJYRBuriSUBAA/NxBti21G00w9RKpv0vHP8ds42pM3Z2Czqrpv1KrKQ0U11
752
+ GIo/ikGQI31bS/6kA1ibRrLDYGCD+H1QQc7CoZDDu+8CL9IVVO5EFdkKrqeKM+2x
753
+ LXY2JtwE65/3YR8V3Idv7kaWKK2hJn0KCacuBKONvPi8BDAB
754
+ -----END CERTIFICATE-----
755
+ """
756
+
757
+ CA_GRAND_PARENT = """
758
+ -----BEGIN CERTIFICATE-----
759
+ MIIEfTCCA2WgAwIBAgIDG+cVMA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVT
760
+ MSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIEluYy4xMTAvBgNVBAsTKEdv
761
+ IERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMTAx
762
+ MDcwMDAwWhcNMzEwNTMwMDcwMDAwWjCBgzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
763
+ B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHku
764
+ Y29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmljYXRlIEF1
765
+ dGhvcml0eSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Fi
766
+ CPH6WTT3G8kYo/eASVjpIoMTpsUgQwE7hPHmhUmfJ+r2hBtOoLTbcJjHMgGxBT4H
767
+ Tu70+k8vWTAi56sZVmvigAf88xZ1gDlRe+X5NbZ0TqmNghPktj+pA4P6or6KFWp/
768
+ 3gvDthkUBcrqw6gElDtGfDIN8wBmIsiNaW02jBEYt9OyHGC0OPoCjM7T3UYH3go+
769
+ 6118yHz7sCtTpJJiaVElBWEaRIGMLKlDliPfrDqBmg4pxRyp6V0etp6eMAo5zvGI
770
+ gPtLXcwy7IViQyU0AlYnAZG0O3AqP26x6JyIAX2f1PnbU21gnb8s51iruF9G/M7E
771
+ GwM8CetJMVxpRrPgRwIDAQABo4IBFzCCARMwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
772
+ HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9BUFuIMGU2g/eMB8GA1Ud
773
+ IwQYMBaAFNLEsNKR1EwRcbNhyz2h/t2oatTjMDQGCCsGAQUFBwEBBCgwJjAkBggr
774
+ BgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMDIGA1UdHwQrMCkwJ6Al
775
+ oCOGIWh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2Ryb290LmNybDBGBgNVHSAEPzA9
776
+ MDsGBFUdIAAwMzAxBggrBgEFBQcCARYlaHR0cHM6Ly9jZXJ0cy5nb2RhZGR5LmNv
777
+ bS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAWQtTvZKGEacke+1bMc8d
778
+ H2xwxbhuvk679r6XUOEwf7ooXGKUwuN+M/f7QnaF25UcjCJYdQkMiGVnOQoWCcWg
779
+ OJekxSOTP7QYpgEGRJHjp2kntFolfzq3Ms3dhP8qOCkzpN1nsoX+oYggHFCJyNwq
780
+ 9kIDN0zmiN/VryTyscPfzLXs4Jlet0lUIDyUGAzHHFIYSaRt4bNYC8nY7NmuHDKO
781
+ KHAN4v6mF56ED71XcLNa6R+ghlO773z/aQvgSMO3kwvIClTErF0UZzdsyqUvMQg3
782
+ qm5vjLyb4lddJIGvl5echK1srDdMZvNhkREg5L4wn3qkKQmw4TRfZHcYQFHfjDCm
783
+ rw==
784
+ -----END CERTIFICATE-----
785
+ """
786
+
787
+ CA_GREAT_GRAND_PARENT = """
788
+ -----BEGIN CERTIFICATE-----
789
+ MIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEh
790
+ MB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBE
791
+ YWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3
792
+ MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkGA1UEBhMCVVMxITAfBgNVBAoTGFRo
793
+ ZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28gRGFkZHkgQ2xhc3Mg
794
+ MiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQADggEN
795
+ ADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d/+TvZxz0ZWizV3GgXne77ZtJ6XCA
796
+ PVYYYwhv2vLM0D9/AlQiVBDYsoHUwHU9S3/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6w
797
+ wdhFJ2+qN1j3hybX2C32qRe3H3I2TqYXP2WYktsqbl2i/ojgC95/5Y0V4evLOtXi
798
+ EqITLdiOr18SPaAIBQi2XKVlOARFmR6jYGB0xUGlcmIbYsUfb18aQr4CUWWoriMY
799
+ avx4A6lNf4DD+qta/KFApMoZFv6yyO9ecw3ud72a9nmYvLEHZ6IVDd2gWMZEewo+
800
+ YihfukEHU1jPEX44dMX4/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0OBBYEFNLE
801
+ sNKR1EwRcbNhyz2h/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h
802
+ /t2oatTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5
803
+ IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmlj
804
+ YXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD
805
+ ggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wimPQoZ+YeAEW5p5JYXMP80kWNy
806
+ OO7MHAGjHZQopDH2esRU1/blMVgDoszOYtuURXO1v0XJJLXVggKtI3lpjbi2Tc7P
807
+ TMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQ
808
+ HmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0/ZM/iZx4mER
809
+ dEr/VxqHD3VILs9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5Cuf
810
+ ReYNnyicsbkqWletNw+vHX/bvZ8=
811
+ -----END CERTIFICATE-----
812
+ """
813
+
814
+ VALID_CA_BUNDLE = [CA_PARENT, CA_GRAND_PARENT, CA_GREAT_GRAND_PARENT]