@kya-brasil/mcp 0.1.0 → 0.1.1

package/dist/index.js

@@ -59,7 +59,7 @@ var require_code = __commonJS({
     };
     exports._CodeOrName = _CodeOrName;
     exports.IDENTIFIER = /^[a-z$_][a-z$_0-9]*$/i;
-    var Name = class extends _CodeOrName {
+    var Name2 = class extends _CodeOrName {
       constructor(s) {
         super();
         if (!exports.IDENTIFIER.test(s))
@@ -76,7 +76,7 @@ var require_code = __commonJS({
         return { [this.str]: 1 };
       }
     };
-    exports.Name = Name;
+    exports.Name = Name2;
     var _Code = class extends _CodeOrName {
       constructor(code) {
         super();
@@ -98,7 +98,7 @@ var require_code = __commonJS({
       get names() {
         var _a3;
         return (_a3 = this._names) !== null && _a3 !== void 0 ? _a3 : this._names = this._items.reduce((names, c) => {
-          if (c instanceof Name)
+          if (c instanceof Name2)
             names[c.str] = (names[c.str] || 0) + 1;
           return names;
         }, {});
@@ -132,7 +132,7 @@ var require_code = __commonJS({
     function addCodeArg(code, arg) {
       if (arg instanceof _Code)
         code.push(...arg._items);
-      else if (arg instanceof Name)
+      else if (arg instanceof Name2)
         code.push(arg);
       else
         code.push(interpolate(arg));
@@ -158,7 +158,7 @@ var require_code = __commonJS({
       if (a === '""')
         return b;
       if (typeof a == "string") {
-        if (b instanceof Name || a[a.length - 1] !== '"')
+        if (b instanceof Name2 || a[a.length - 1] !== '"')
           return;
         if (typeof b != "string")
           return `${a.slice(0, -1)}${b}"`;
@@ -166,7 +166,7 @@ var require_code = __commonJS({
           return a.slice(0, -1) + b.slice(1);
         return;
       }
-      if (typeof b == "string" && b[0] === '"' && !(a instanceof Name))
+      if (typeof b == "string" && b[0] === '"' && !(a instanceof Name2))
         return `"${a}${b.slice(1)}`;
       return;
     }
@@ -3119,9 +3119,9 @@ var require_data = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/utils.js
+// ../../node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/lib/utils.js
 var require_utils = __commonJS({
-  "../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/utils.js"(exports, module) {
+  "../../node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/lib/utils.js"(exports, module) {
     "use strict";
     var isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
     var isIPv4 = RegExp.prototype.test.bind(/^(?:(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/u);
@@ -3353,6 +3353,37 @@ var require_utils = __commonJS({
       }
       return output2.join("");
     }
+    function removeDotSegmentsRelative(path) {
+      if (path === "" || path[0] === "/") {
+        return removeDotSegments(path);
+      }
+      const segments = path.split("/");
+      const last = segments.length - 1;
+      const output2 = [];
+      let trailingDirectory = false;
+      for (let i = 0; i <= last; i++) {
+        const segment = segments[i];
+        if (segment === "." || segment === "..") {
+          if (segment === "..") {
+            if (output2.length !== 0 && output2[output2.length - 1] !== "..") {
+              output2.pop();
+            } else {
+              output2.push("..");
+            }
+          }
+          trailingDirectory = i === last;
+        } else {
+          output2.push(segment);
+        }
+      }
+      if (trailingDirectory && output2[output2.length - 1] !== "..") {
+        output2.push("");
+      }
+      if (output2.length === 0 || output2[0] === "" || output2[0].includes(":")) {
+        output2.unshift(".");
+      }
+      return output2.join("/");
+    }
     var HOST_DELIMS = { "@": "%40", "/": "%2F", "?": "%3F", "#": "%23", ":": "%3A" };
     var HOST_DELIM_RE = /[@/?#:]/g;
     var HOST_DELIM_NO_COLON_RE = /[@/?#]/g;
@@ -3613,6 +3644,7 @@ var require_utils = __commonJS({
       encodeFragment,
       escapePreservingEscapes,
       removeDotSegments,
+      removeDotSegmentsRelative,
       isIPv4,
       isUUID,
       normalizeIPv6,
@@ -3621,9 +3653,9 @@ var require_utils = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/schemes.js
+// ../../node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/lib/schemes.js
 var require_schemes = __commonJS({
-  "../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/schemes.js"(exports, module) {
+  "../../node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/lib/schemes.js"(exports, module) {
     "use strict";
     var { isUUID } = require_utils();
     var URN_REG = /^([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-./:;=@]|%[\da-f]{2})+)$/iu;
@@ -3832,20 +3864,22 @@ var require_schemes = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/index.js
+// ../../node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/index.js
 var require_fast_uri = __commonJS({
-  "../../node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/index.js"(exports, module) {
+  "../../node_modules/.pnpm/fast-uri@3.1.9/node_modules/fast-uri/index.js"(exports, module) {
     "use strict";
-    var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
+    var { normalizeIPv6, removeDotSegments, removeDotSegmentsRelative, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
     var { SCHEMES, getSchemeHandler } = require_schemes();
     var VALID_SCHEME = /^[A-Za-z][A-Za-z0-9+.-]*$/u;
     var MALFORMED_SCHEME_ERROR = "URI scheme is malformed.";
-    function decodeValidScheme(scheme) {
-      const decodedScheme = unescape(String(scheme));
-      if (!VALID_SCHEME.test(decodedScheme)) {
+    var MALFORMED_HOST_ERROR = "URI host is malformed.";
+    var FORBIDDEN_DOMAIN_HOST_CHARACTER = /[\0-\x20"#/:<>?@[\\\]^`{|}\x7F]/u;
+    function validateScheme(scheme) {
+      const stringScheme = String(scheme);
+      if (!VALID_SCHEME.test(stringScheme)) {
         throw new TypeError(MALFORMED_SCHEME_ERROR);
       }
-      return decodedScheme;
+      return stringScheme;
     }
     function normalize(uri, options) {
       if (typeof uri === "string") {
@@ -3882,6 +3916,9 @@ var require_fast_uri = __commonJS({
       const resolvedSchemeHandler = getSchemeHandler(options && options.scheme || resolved.scheme);
       const resolvedHost = resolved.host;
       const resolvedHostIsIP = resolvedHost !== void 0 && resolvedHost !== "" && (isIPv4(resolvedHost) || normalizeIPv6(resolvedHost).isIPV6);
+      if (hasForbiddenDomainHost(resolved, options || {}, resolvedSchemeHandler, resolvedHostIsIP)) {
+        throw new Error(MALFORMED_HOST_ERROR);
+      }
       canonicalizeHost(resolved, options || {}, resolvedSchemeHandler, resolvedHostIsIP);
       const encodedASCIIHost = resolvedHost && resolvedHost.indexOf("%") !== -1 && !new RegExp("\\P{ASCII}", "u").test(resolvedHost);
       if (resolved.error && !encodedASCIIHost) {
@@ -3923,14 +3960,15 @@ var require_fast_uri = __commonJS({
             if (relative.path[0] === "/") {
               target.path = removeDotSegments(relative.path);
             } else {
-              if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) {
+              const baseHasAuthority = base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0;
+              if (baseHasAuthority && !base.path) {
                 target.path = "/" + relative.path;
               } else if (!base.path) {
                 target.path = relative.path;
               } else {
                 target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative.path;
               }
-              target.path = removeDotSegments(target.path);
+              target.path = base.scheme === void 0 && !baseHasAuthority && target.path[0] !== "/" ? removeDotSegmentsRelative(target.path) : removeDotSegments(target.path);
             }
             target.query = relative.query;
           }
@@ -3968,12 +4006,13 @@ var require_fast_uri = __commonJS({
       const options = Object.assign({}, opts);
       const uriTokens = [];
       if (component.scheme) {
-        component.scheme = decodeValidScheme(component.scheme);
+        component.scheme = validateScheme(component.scheme);
       }
       const schemeHandler = getSchemeHandler(options.scheme || component.scheme);
       if (schemeHandler && schemeHandler.serialize) schemeHandler.serialize(component, options);
       const hasAuthority = component.userinfo !== void 0 || component.host !== void 0 || component.port !== void 0;
-      const pathNoScheme = !options.skipEscape && component.scheme === void 0 && !hasAuthority;
+      const schemelessReference = (component.scheme === void 0 || options.reference === "suffix") && !hasAuthority;
+      const pathNoScheme = !options.skipEscape && schemelessReference;
       if (component.path !== void 0) {
         if (!options.skipEscape) {
           component.path = serializePathEncoding(component.path, pathNoScheme);
@@ -3982,7 +4021,7 @@ var require_fast_uri = __commonJS({
         }
       }
       if (options.reference !== "suffix" && component.scheme) {
-        component.scheme = decodeValidScheme(component.scheme);
+        component.scheme = validateScheme(component.scheme);
         uriTokens.push(component.scheme, ":");
       }
       const authority = recomposeAuthority(component);
@@ -3998,9 +4037,9 @@ var require_fast_uri = __commonJS({
       if (component.path !== void 0) {
         let s = component.path;
         if (!options.absolutePath && (!schemeHandler || !schemeHandler.absolutePath)) {
-          s = removeDotSegments(s);
+          s = schemelessReference && s[0] !== "/" ? removeDotSegmentsRelative(s) : removeDotSegments(s);
         }
-        if (pathNoScheme) {
+        if (schemelessReference) {
           s = serializePathEncoding(s, true);
         }
         if (authority === void 0 && s[0] === "/" && s[1] === "/") {
@@ -4047,16 +4086,34 @@ var require_fast_uri = __commonJS({
       return hasMalformedPercentEncoding(matches[3]) || host !== void 0 && !isIPLiteral(host) && hasMalformedPercentEncoding(host) || hasMalformedPercentEncoding(matches[6]) || hasMalformedPercentEncoding(matches[7]) || hasMalformedPercentEncoding(matches[8]);
     }
     function canonicalizeHost(parsed, options, schemeHandler, isIP) {
+      if (hasForbiddenDomainHost(parsed, options, schemeHandler, isIP)) {
+        parsed.error = parsed.error || MALFORMED_HOST_ERROR;
+        return true;
+      }
       if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed.host)) {
+        let url2;
         try {
-          parsed.host = new URL("http://" + parsed.host).hostname;
+          url2 = new URL("http://" + parsed.host);
         } catch (e) {
           parsed.error = parsed.error || "Host's domain name can not be converted to ASCII: " + e;
           return true;
         }
+        if (!isHostOnlyURL(url2)) {
+          parsed.error = parsed.error || MALFORMED_HOST_ERROR;
+          return true;
+        }
+        parsed.host = url2.hostname;
       }
       return false;
     }
+    function hasForbiddenDomainHost(parsed, options, schemeHandler, isIP) {
+      return Boolean(
+        parsed.host && isIP === false && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && FORBIDDEN_DOMAIN_HOST_CHARACTER.test(parsed.host)
+      );
+    }
+    function isHostOnlyURL(url2) {
+      return url2.username === "" && url2.password === "" && url2.port === "" && url2.pathname === "/" && url2.search === "" && url2.hash === "" && url2.hostname !== "";
+    }
     function parseWithStatus(uri, opts) {
       const options = Object.assign({}, opts);
       const parsed = {
@@ -4111,9 +4168,8 @@ var require_fast_uri = __commonJS({
         parsed.query = matches[7];
         parsed.fragment = matches[8];
         if (parsed.scheme !== void 0) {
-          const decodedScheme = unescape(parsed.scheme);
-          if (VALID_SCHEME.test(decodedScheme)) {
-            parsed.scheme = decodedScheme.toLowerCase();
+          if (VALID_SCHEME.test(parsed.scheme)) {
+            parsed.scheme = parsed.scheme.toLowerCase();
           } else {
             parsed.error = parsed.error || MALFORMED_SCHEME_ERROR;
             malformedScheme = true;
@@ -4141,7 +4197,7 @@ var require_fast_uri = __commonJS({
             malformedIPLiteral = hasIPLiteralBracket && (!bracketedIPLiteral || ipv6result.error === true);
             parsed.host = isIP ? ipv6result.host : ipv6result.host.toLowerCase();
             if (malformedIPLiteral) {
-              parsed.error = parsed.error || "URI host is malformed.";
+              parsed.error = parsed.error || MALFORMED_HOST_ERROR;
               malformedAuthorityOrPort = true;
             }
           } else {
@@ -4169,7 +4225,7 @@ var require_fast_uri = __commonJS({
           if (!isIP) {
             host = normalizePercentEncoding(host.toLowerCase());
           }
-          parsed.host = reescapeHostDelimiters(host, isIP);
+          parsed.host = isIP || options.scheme !== "null" ? reescapeHostDelimiters(host, isIP) : host;
         }
         if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
           if (parsed.path) {
@@ -12948,8 +13004,8 @@ var require_build = __commonJS({
           return new Uint8Array(Buffer.from(formatted, "base64")).buffer;
         }
       }
-      static FromBase64Url(base64url3) {
-        const formatted = this.formatString(base64url3);
+      static FromBase64Url(base64url4) {
+        const formatted = this.formatString(base64url4);
         if (!formatted) {
           return new ArrayBuffer(0);
         }
@@ -14613,7 +14669,7 @@ ${values.join("\n")}` : `${blockName} :`;
     };
     LocalOctetStringValueBlock.NAME = "OctetStringValueBlock";
     var _a$r;
-    var OctetString2 = class extends BaseBlock {
+    var OctetString3 = class extends BaseBlock {
       constructor({ idBlock = {}, lenBlock = {}, ...parameters } = {}) {
         var _b, _c;
         (_b = parameters.isConstructed) !== null && _b !== void 0 ? _b : parameters.isConstructed = !!((_c = parameters.value) === null || _c === void 0 ? void 0 : _c.length);
@@ -14678,11 +14734,11 @@ ${values.join("\n")}` : `${blockName} :`;
         return pvtsutils__namespace.BufferSourceConverter.concat(array2);
       }
     };
-    _a$r = OctetString2;
+    _a$r = OctetString3;
     (() => {
       typeStore.OctetString = _a$r;
     })();
-    OctetString2.NAME = OCTET_STRING_NAME;
+    OctetString3.NAME = OCTET_STRING_NAME;
     var LocalBitStringValueBlock = class extends HexBlock(LocalConstructedValueBlock) {
       constructor({ unusedBits = 0, isConstructed = false, ...parameters } = {}) {
         super(parameters);
@@ -14776,7 +14832,7 @@ ${values.join("\n")}` : `${blockName} :`;
     };
     LocalBitStringValueBlock.NAME = "BitStringValueBlock";
     var _a$q;
-    var BitString = class extends BaseBlock {
+    var BitString2 = class extends BaseBlock {
       constructor({ idBlock = {}, lenBlock = {}, ...parameters } = {}) {
         var _b, _c;
         (_b = parameters.isConstructed) !== null && _b !== void 0 ? _b : parameters.isConstructed = !!((_c = parameters.value) === null || _c === void 0 ? void 0 : _c.length);
@@ -14815,11 +14871,11 @@ ${values.join("\n")}` : `${blockName} :`;
         }
       }
     };
-    _a$q = BitString;
+    _a$q = BitString2;
     (() => {
       typeStore.BitString = _a$q;
     })();
-    BitString.NAME = BIT_STRING_NAME;
+    BitString2.NAME = BIT_STRING_NAME;
     var _a$p;
     function viewAdd(first, second) {
       const c = new Uint8Array([0]);
@@ -16526,7 +16582,7 @@ ${values.join("\n")}` : `${blockName} :`;
     exports.Any = Any2;
     exports.BaseBlock = BaseBlock;
     exports.BaseStringBlock = BaseStringBlock;
-    exports.BitString = BitString;
+    exports.BitString = BitString2;
     exports.BmpString = BmpString;
     exports.Boolean = Boolean2;
     exports.CharacterString = CharacterString;
@@ -16549,7 +16605,7 @@ ${values.join("\n")}` : `${blockName} :`;
     exports.Null = Null;
     exports.NumericString = NumericString;
     exports.ObjectIdentifier = ObjectIdentifier2;
-    exports.OctetString = OctetString2;
+    exports.OctetString = OctetString3;
     exports.Primitive = Primitive;
     exports.PrintableString = PrintableString;
     exports.RawData = RawData;
@@ -19800,7 +19856,7 @@ var require_sha2 = __commonJS({
 var require_build3 = __commonJS({
   "../../node_modules/.pnpm/pkijs@3.4.1/node_modules/pkijs/build/index.js"(exports) {
     "use strict";
-    var asn1js3 = require_build2();
+    var asn1js4 = require_build2();
     var pvtsutils = require_build();
     var pvutils = require_utils2();
     var bs = require_cjs();
@@ -19824,7 +19880,7 @@ var require_build3 = __commonJS({
       n.default = e;
       return Object.freeze(n);
     }
-    var asn1js__namespace = /* @__PURE__ */ _interopNamespaceDefault(asn1js3);
+    var asn1js__namespace = /* @__PURE__ */ _interopNamespaceDefault(asn1js4);
     var pvtsutils__namespace = /* @__PURE__ */ _interopNamespaceDefault(pvtsutils);
     var pvutils__namespace = /* @__PURE__ */ _interopNamespaceDefault(pvutils);
     var bs__namespace = /* @__PURE__ */ _interopNamespaceDefault(bs);
@@ -20840,7 +20896,7 @@ var require_build3 = __commonJS({
     var ALGORITHM$2 = "algorithm";
     var PARAMS = "params";
     var CLEAR_PROPS$1u = [ALGORITHM$2, PARAMS];
-    var AlgorithmIdentifier2 = class _AlgorithmIdentifier extends PkiObject {
+    var AlgorithmIdentifier3 = class _AlgorithmIdentifier extends PkiObject {
       constructor(parameters = {}) {
         super();
         this.algorithmId = pvutils__namespace.getParametersValue(parameters, ALGORITHM_ID, _AlgorithmIdentifier.defaultValues(ALGORITHM_ID));
@@ -20934,7 +20990,7 @@ var require_build3 = __commonJS({
         return true;
       }
     };
-    AlgorithmIdentifier2.CLASS_NAME = "AlgorithmIdentifier";
+    AlgorithmIdentifier3.CLASS_NAME = "AlgorithmIdentifier";
     var ALT_NAMES = "altNames";
     var CLEAR_PROPS$1t = [ALT_NAMES];
     var AltName = class _AltName extends PkiObject {
@@ -23440,7 +23496,7 @@ var require_build3 = __commonJS({
       static defaultValues(memberName) {
         switch (memberName) {
           case ALGORITHM$1:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case SUBJECT_PUBLIC_KEY:
             return new asn1js__namespace.BitString();
           default:
@@ -23452,7 +23508,7 @@ var require_build3 = __commonJS({
         return new asn1js__namespace.Sequence({
           name: names.blockName || EMPTY_STRING,
           value: [
-            AlgorithmIdentifier2.schema(names.algorithm || {}),
+            AlgorithmIdentifier3.schema(names.algorithm || {}),
             new asn1js__namespace.BitString({ name: names.subjectPublicKey || EMPTY_STRING })
           ]
         });
@@ -23470,7 +23526,7 @@ var require_build3 = __commonJS({
           }
         }));
         AsnError.assertSchema(asn1, this.className);
-        this.algorithm = new AlgorithmIdentifier2({ schema: asn1.result.algorithm });
+        this.algorithm = new AlgorithmIdentifier3({ schema: asn1.result.algorithm });
         this.subjectPublicKey = asn1.result.subjectPublicKey;
       }
       toSchema() {
@@ -23504,14 +23560,14 @@ var require_build3 = __commonJS({
           switch (json2.kty.toUpperCase()) {
             case "EC":
               this.parsedKey = new ECPublicKey({ json: json2 });
-              this.algorithm = new AlgorithmIdentifier2({
+              this.algorithm = new AlgorithmIdentifier3({
                 algorithmId: "1.2.840.10045.2.1",
                 algorithmParams: new asn1js__namespace.ObjectIdentifier({ value: this.parsedKey.namedCurve })
               });
               break;
             case "RSA":
               this.parsedKey = new RSAPublicKey({ json: json2 });
-              this.algorithm = new AlgorithmIdentifier2({
+              this.algorithm = new AlgorithmIdentifier3({
                 algorithmId: "1.2.840.113549.1.1.1",
                 algorithmParams: new asn1js__namespace.Null()
               });
@@ -23524,7 +23580,7 @@ var require_build3 = __commonJS({
           });
         }
       }
-      async importKey(publicKey, crypto3 = getCrypto2(true)) {
+      async importKey(publicKey, crypto3 = getCrypto3(true)) {
         try {
           if (!publicKey) {
             throw new Error("Need to provide publicKey input parameter");
@@ -24003,7 +24059,7 @@ var require_build3 = __commonJS({
           case VERSION$j:
             return 0;
           case PRIVATE_KEY_ALGORITHM:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case PRIVATE_KEY:
             return new asn1js__namespace.OctetString();
           case ATTRIBUTES$5:
@@ -24020,7 +24076,7 @@ var require_build3 = __commonJS({
           name: names.blockName || EMPTY_STRING,
           value: [
             new asn1js__namespace.Integer({ name: names.version || EMPTY_STRING }),
-            AlgorithmIdentifier2.schema(names.privateKeyAlgorithm || {}),
+            AlgorithmIdentifier3.schema(names.privateKeyAlgorithm || {}),
             new asn1js__namespace.OctetString({ name: names.privateKey || EMPTY_STRING }),
             new asn1js__namespace.Constructed({
               optional: true,
@@ -24054,7 +24110,7 @@ var require_build3 = __commonJS({
         }));
         AsnError.assertSchema(asn1, this.className);
         this.version = asn1.result.version.valueBlock.valueDec;
-        this.privateKeyAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.privateKeyAlgorithm });
+        this.privateKeyAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.privateKeyAlgorithm });
         this.privateKey = asn1.result.privateKey;
         if (ATTRIBUTES$5 in asn1.result)
           this.attributes = Array.from(asn1.result.attributes, (element) => new Attribute2({ schema: element }));
@@ -24131,14 +24187,14 @@ var require_build3 = __commonJS({
           switch (json2.kty.toUpperCase()) {
             case "EC":
               this.parsedKey = new ECPrivateKey({ json: json2 });
-              this.privateKeyAlgorithm = new AlgorithmIdentifier2({
+              this.privateKeyAlgorithm = new AlgorithmIdentifier3({
                 algorithmId: "1.2.840.10045.2.1",
                 algorithmParams: new asn1js__namespace.ObjectIdentifier({ value: this.parsedKey.namedCurve })
               });
               break;
             case "RSA":
               this.parsedKey = new RSAPrivateKey({ json: json2 });
-              this.privateKeyAlgorithm = new AlgorithmIdentifier2({
+              this.privateKeyAlgorithm = new AlgorithmIdentifier3({
                 algorithmId: "1.2.840.113549.1.1.1",
                 algorithmParams: new asn1js__namespace.Null()
               });
@@ -24197,7 +24253,7 @@ var require_build3 = __commonJS({
           case CONTENT_TYPE$1:
             return EMPTY_STRING;
           case CONTENT_ENCRYPTION_ALGORITHM:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case ENCRYPTED_CONTENT:
             return new asn1js__namespace.OctetString();
           default:
@@ -24222,7 +24278,7 @@ var require_build3 = __commonJS({
           name: names.blockName || EMPTY_STRING,
           value: [
             new asn1js__namespace.ObjectIdentifier({ name: names.contentType || EMPTY_STRING }),
-            AlgorithmIdentifier2.schema(names.contentEncryptionAlgorithm || {}),
+            AlgorithmIdentifier3.schema(names.contentEncryptionAlgorithm || {}),
             new asn1js__namespace.Choice({
               value: [
                 new asn1js__namespace.Constructed({
@@ -24264,7 +24320,7 @@ var require_build3 = __commonJS({
         }));
         AsnError.assertSchema(asn1, this.className);
         this.contentType = asn1.result.contentType.valueBlock.toString();
-        this.contentEncryptionAlgorithm = new AlgorithmIdentifier2({
+        this.contentEncryptionAlgorithm = new AlgorithmIdentifier3({
           schema: asn1.result.contentEncryptionAlgorithm
         });
         if (ENCRYPTED_CONTENT in asn1.result) {
@@ -24330,14 +24386,14 @@ var require_build3 = __commonJS({
       static defaultValues(memberName) {
         switch (memberName) {
           case HASH_ALGORITHM$4:
-            return new AlgorithmIdentifier2({
+            return new AlgorithmIdentifier3({
               algorithmId: "1.3.14.3.2.26",
               algorithmParams: new asn1js__namespace.Null()
             });
           case MASK_GEN_ALGORITHM$1:
-            return new AlgorithmIdentifier2({
+            return new AlgorithmIdentifier3({
               algorithmId: "1.2.840.113549.1.1.8",
-              algorithmParams: new AlgorithmIdentifier2({
+              algorithmParams: new AlgorithmIdentifier3({
                 algorithmId: "1.3.14.3.2.26",
                 algorithmParams: new asn1js__namespace.Null()
               }).toSchema()
@@ -24361,7 +24417,7 @@ var require_build3 = __commonJS({
                 tagNumber: 0
               },
               optional: true,
-              value: [AlgorithmIdentifier2.schema(names.hashAlgorithm || {})]
+              value: [AlgorithmIdentifier3.schema(names.hashAlgorithm || {})]
             }),
             new asn1js__namespace.Constructed({
               idBlock: {
@@ -24369,7 +24425,7 @@ var require_build3 = __commonJS({
                 tagNumber: 1
               },
               optional: true,
-              value: [AlgorithmIdentifier2.schema(names.maskGenAlgorithm || {})]
+              value: [AlgorithmIdentifier3.schema(names.maskGenAlgorithm || {})]
             }),
             new asn1js__namespace.Constructed({
               idBlock: {
@@ -24410,9 +24466,9 @@ var require_build3 = __commonJS({
         }));
         AsnError.assertSchema(asn1, this.className);
         if (HASH_ALGORITHM$4 in asn1.result)
-          this.hashAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.hashAlgorithm });
+          this.hashAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.hashAlgorithm });
         if (MASK_GEN_ALGORITHM$1 in asn1.result)
-          this.maskGenAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.maskGenAlgorithm });
+          this.maskGenAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.maskGenAlgorithm });
         if (SALT_LENGTH in asn1.result)
           this.saltLength = asn1.result.saltLength.valueBlock.valueDec;
         if (TRAILER_FIELD in asn1.result)
@@ -24507,7 +24563,7 @@ var require_build3 = __commonJS({
           case KEY_LENGTH:
             return 0;
           case PRF:
-            return new AlgorithmIdentifier2({
+            return new AlgorithmIdentifier3({
               algorithmId: "1.3.14.3.2.26",
               algorithmParams: new asn1js__namespace.Null()
             });
@@ -24523,7 +24579,7 @@ var require_build3 = __commonJS({
             new asn1js__namespace.Choice({
               value: [
                 new asn1js__namespace.OctetString({ name: names.saltPrimitive || EMPTY_STRING }),
-                AlgorithmIdentifier2.schema(names.saltConstructed || {})
+                AlgorithmIdentifier3.schema(names.saltConstructed || {})
               ]
             }),
             new asn1js__namespace.Integer({ name: names.iterationCount || EMPTY_STRING }),
@@ -24531,7 +24587,7 @@ var require_build3 = __commonJS({
               name: names.keyLength || EMPTY_STRING,
               optional: true
             }),
-            AlgorithmIdentifier2.schema(names.prf || {
+            AlgorithmIdentifier3.schema(names.prf || {
               names: {
                 optional: true
               }
@@ -24565,7 +24621,7 @@ var require_build3 = __commonJS({
         if (KEY_LENGTH in asn1.result)
           this.keyLength = asn1.result.keyLength.valueBlock.valueDec;
         if (PRF in asn1.result)
-          this.prf = new AlgorithmIdentifier2({ schema: asn1.result.prf });
+          this.prf = new AlgorithmIdentifier3({ schema: asn1.result.prf });
       }
       toSchema() {
         const outputArray = [];
@@ -24615,9 +24671,9 @@ var require_build3 = __commonJS({
       static defaultValues(memberName) {
         switch (memberName) {
           case KEY_DERIVATION_FUNC:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case ENCRYPTION_SCHEME:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           default:
             return super.defaultValues(memberName);
         }
@@ -24627,8 +24683,8 @@ var require_build3 = __commonJS({
         return new asn1js__namespace.Sequence({
           name: names.blockName || EMPTY_STRING,
           value: [
-            AlgorithmIdentifier2.schema(names.keyDerivationFunc || {}),
-            AlgorithmIdentifier2.schema(names.encryptionScheme || {})
+            AlgorithmIdentifier3.schema(names.keyDerivationFunc || {}),
+            AlgorithmIdentifier3.schema(names.encryptionScheme || {})
           ]
         });
       }
@@ -24649,8 +24705,8 @@ var require_build3 = __commonJS({
           }
         }));
         AsnError.assertSchema(asn1, this.className);
-        this.keyDerivationFunc = new AlgorithmIdentifier2({ schema: asn1.result.keyDerivationFunc });
-        this.encryptionScheme = new AlgorithmIdentifier2({ schema: asn1.result.encryptionScheme });
+        this.keyDerivationFunc = new AlgorithmIdentifier3({ schema: asn1.result.keyDerivationFunc });
+        this.encryptionScheme = new AlgorithmIdentifier3({ schema: asn1.result.encryptionScheme });
       }
       toSchema() {
         return new asn1js__namespace.Sequence({
@@ -24798,7 +24854,7 @@ var require_build3 = __commonJS({
       }
       return res;
     }
-    var CryptoEngine4 = class extends AbstractCryptoEngine {
+    var CryptoEngine5 = class extends AbstractCryptoEngine {
       async importKey(format3, keyData, algorithm, extractable, keyUsages) {
         var _a4, _b, _c, _d, _e, _f;
         let jwk = {};
@@ -25985,7 +26041,7 @@ var require_build3 = __commonJS({
         const pbkdf2Params = new PBKDF2Params({
           salt: new asn1js__namespace.OctetString({ valueHex: saltBuffer }),
           iterationCount: parameters.iterationCount,
-          prf: new AlgorithmIdentifier2({
+          prf: new AlgorithmIdentifier3({
             algorithmId: hmacOID,
             algorithmParams: new asn1js__namespace.Null()
           })
@@ -26005,18 +26061,18 @@ var require_build3 = __commonJS({
           iv: ivView
         }, derivedKey, contentView);
         const pbes2Parameters = new PBES2Params({
-          keyDerivationFunc: new AlgorithmIdentifier2({
+          keyDerivationFunc: new AlgorithmIdentifier3({
             algorithmId: pbkdf2OID,
             algorithmParams: pbkdf2Params.toSchema()
           }),
-          encryptionScheme: new AlgorithmIdentifier2({
+          encryptionScheme: new AlgorithmIdentifier3({
             algorithmId: contentEncryptionOID,
             algorithmParams: new asn1js__namespace.OctetString({ valueHex: ivBuffer })
           })
         });
         return new EncryptedContentInfo({
           contentType: parameters.contentType,
-          contentEncryptionAlgorithm: new AlgorithmIdentifier2({
+          contentEncryptionAlgorithm: new AlgorithmIdentifier3({
             algorithmId: "1.2.840.113549.1.5.13",
             algorithmParams: pbes2Parameters.toSchema()
           }),
@@ -26139,7 +26195,7 @@ var require_build3 = __commonJS({
       }
       async getSignatureParameters(privateKey, hashAlgorithm = "SHA-1") {
         this.getOIDByAlgorithm({ name: hashAlgorithm }, true, "hashAlgorithm");
-        const signatureAlgorithm = new AlgorithmIdentifier2();
+        const signatureAlgorithm = new AlgorithmIdentifier3();
         const parameters = this.getAlgorithmParameters(privateKey.algorithm.name, "sign");
         if (!Object.keys(parameters.algorithm).length) {
           throw new Error("Parameter 'algorithm' is empty");
@@ -26171,11 +26227,11 @@ var require_build3 = __commonJS({
               const paramsObject = {};
               if (algorithm.hash.name.toUpperCase() !== "SHA-1") {
                 const hashAlgorithmOID = this.getOIDByAlgorithm({ name: algorithm.hash.name }, true, "hashAlgorithm");
-                paramsObject.hashAlgorithm = new AlgorithmIdentifier2({
+                paramsObject.hashAlgorithm = new AlgorithmIdentifier3({
                   algorithmId: hashAlgorithmOID,
                   algorithmParams: new asn1js__namespace.Null()
                 });
-                paramsObject.maskGenAlgorithm = new AlgorithmIdentifier2({
+                paramsObject.maskGenAlgorithm = new AlgorithmIdentifier3({
                   algorithmId: "1.2.840.113549.1.1.8",
                   algorithmParams: paramsObject.hashAlgorithm.toSchema()
                 });
@@ -26312,13 +26368,13 @@ var require_build3 = __commonJS({
     function getEngineGlobalKey() {
       return typeof process !== "undefined" && Number.isInteger(process.pid) ? process.pid : /* @__PURE__ */ Symbol.for("pkijs.engine");
     }
-    function setEngine4(name, ...args) {
+    function setEngine5(name, ...args) {
       let crypto3 = null;
       if (args.length < 2) {
         if (args.length) {
           crypto3 = args[0];
         } else {
-          crypto3 = typeof self !== "undefined" && self.crypto ? new CryptoEngine4({ name: "browser", crypto: self.crypto }) : null;
+          crypto3 = typeof self !== "undefined" && self.crypto ? new CryptoEngine5({ name: "browser", crypto: self.crypto }) : null;
         }
       } else {
         const cryptoArg = args[0];
@@ -26328,7 +26384,7 @@ var require_build3 = __commonJS({
         } else if (isCryptoEngine(cryptoArg)) {
           crypto3 = cryptoArg;
         } else if ("subtle" in cryptoArg && "getRandomValues" in cryptoArg) {
-          crypto3 = new CryptoEngine4({
+          crypto3 = new CryptoEngine5({
             crypto: cryptoArg
           });
         }
@@ -26372,7 +26428,7 @@ var require_build3 = __commonJS({
       }
       return exports.engine;
     }
-    function getCrypto2(safety = false) {
+    function getCrypto3(safety = false) {
       const _engine = getEngine();
       if (!_engine.crypto && safety) {
         throw new Error("Unable to create WebCrypto object");
@@ -26380,13 +26436,13 @@ var require_build3 = __commonJS({
       return _engine.crypto;
     }
     function getRandomValues(view) {
-      return getCrypto2(true).getRandomValues(view);
+      return getCrypto3(true).getRandomValues(view);
     }
     function getOIDByAlgorithm(algorithm, safety, target) {
-      return getCrypto2(true).getOIDByAlgorithm(algorithm, safety, target);
+      return getCrypto3(true).getOIDByAlgorithm(algorithm, safety, target);
     }
     function getAlgorithmParameters(algorithmName, operation) {
-      return getCrypto2(true).getAlgorithmParameters(algorithmName, operation);
+      return getCrypto3(true).getAlgorithmParameters(algorithmName, operation);
     }
     function createCMSECDSASignature(signatureBuffer) {
       if (signatureBuffer.byteLength % 2 !== 0)
@@ -26415,10 +26471,10 @@ var require_build3 = __commonJS({
       return res.buffer;
     }
     function getAlgorithmByOID(oid, safety = false, target) {
-      return getCrypto2(true).getAlgorithmByOID(oid, safety, target);
+      return getCrypto3(true).getAlgorithmByOID(oid, safety, target);
     }
     function getHashAlgorithm(signatureAlgorithm) {
-      return getCrypto2(true).getHashAlgorithm(signatureAlgorithm);
+      return getCrypto3(true).getHashAlgorithm(signatureAlgorithm);
     }
     async function kdfWithCounter(hashFunction, zBuffer, Counter, SharedInfo, crypto3) {
       switch (hashFunction.toUpperCase()) {
@@ -26452,7 +26508,7 @@ var require_build3 = __commonJS({
         result
       };
     }
-    async function kdf(hashFunction, Zbuffer, keydatalen, SharedInfo, crypto3 = getCrypto2(true)) {
+    async function kdf(hashFunction, Zbuffer, keydatalen, SharedInfo, crypto3 = getCrypto3(true)) {
       let hashLength;
       let maxCounter = 1;
       switch (hashFunction.toUpperCase()) {
@@ -26705,7 +26761,7 @@ var require_build3 = __commonJS({
           signature: pvutils__namespace.bufferToHexCodes(this.signature)
         };
       }
-      async verify(logs, data, dataType = 0, crypto3 = getCrypto2(true)) {
+      async verify(logs, data, dataType = 0, crypto3 = getCrypto3(true)) {
         const logId = pvutils__namespace.toBase64(pvutils__namespace.arrayBufferToString(this.logID));
         let publicKeyBase64 = null;
         const stream = new bs__namespace.SeqStream();
@@ -26738,7 +26794,7 @@ var require_build3 = __commonJS({
       }
     };
     SignedCertificateTimestamp.CLASS_NAME = "SignedCertificateTimestamp";
-    async function verifySCTsForCertificate(certificate, issuerCertificate, logs, index2 = -1, crypto3 = getCrypto2(true)) {
+    async function verifySCTsForCertificate(certificate, issuerCertificate, logs, index2 = -1, crypto3 = getCrypto3(true)) {
       let parsedValue = null;
       const stream = new bs__namespace.SeqStream();
       if (certificate.extensions) {
@@ -27248,7 +27304,7 @@ var require_build3 = __commonJS({
           case ISSUER$4:
             return new GeneralNames();
           case SIGNATURE$6:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case SERIAL_NUMBER$5:
             return new asn1js__namespace.Integer();
           case ATTR_CERT_VALIDITY_PERIOD$1:
@@ -27294,7 +27350,7 @@ var require_build3 = __commonJS({
                 blockName: names.issuer || EMPTY_STRING
               }
             }),
-            AlgorithmIdentifier2.schema(names.signature || {}),
+            AlgorithmIdentifier3.schema(names.signature || {}),
             new asn1js__namespace.Integer({ name: names.serialNumber || EMPTY_STRING }),
             AttCertValidityPeriod.schema(names.attrCertValidityPeriod || {}),
             new asn1js__namespace.Sequence({
@@ -27358,7 +27414,7 @@ var require_build3 = __commonJS({
           });
         }
         this.issuer = asn1.result.issuer;
-        this.signature = new AlgorithmIdentifier2({ schema: asn1.result.signature });
+        this.signature = new AlgorithmIdentifier3({ schema: asn1.result.signature });
         this.serialNumber = asn1.result.serialNumber;
         this.attrCertValidityPeriod = new AttCertValidityPeriod({
           schema: asn1.result.attrCertValidityPeriod
@@ -27452,7 +27508,7 @@ var require_build3 = __commonJS({
           case ACINFO$1:
             return new AttributeCertificateInfoV1();
           case SIGNATURE_ALGORITHM$7:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case SIGNATURE_VALUE$4:
             return new asn1js__namespace.BitString();
           default:
@@ -27465,7 +27521,7 @@ var require_build3 = __commonJS({
           name: names.blockName || EMPTY_STRING,
           value: [
             AttributeCertificateInfoV1.schema(names.acinfo || {}),
-            AlgorithmIdentifier2.schema(names.signatureAlgorithm || {}),
+            AlgorithmIdentifier3.schema(names.signatureAlgorithm || {}),
             new asn1js__namespace.BitString({ name: names.signatureValue || EMPTY_STRING })
           ]
         });
@@ -27489,7 +27545,7 @@ var require_build3 = __commonJS({
         }));
         AsnError.assertSchema(asn1, this.className);
         this.acinfo = new AttributeCertificateInfoV1({ schema: asn1.result.acinfo });
-        this.signatureAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.signatureAlgorithm });
+        this.signatureAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.signatureAlgorithm });
         this.signatureValue = asn1.result.signatureValue;
       }
       toSchema() {
@@ -27531,7 +27587,7 @@ var require_build3 = __commonJS({
           case OTHER_OBJECT_TYPE_ID:
             return new asn1js__namespace.ObjectIdentifier();
           case DIGEST_ALGORITHM$2:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case OBJECT_DIGEST:
             return new asn1js__namespace.BitString();
           default:
@@ -27548,7 +27604,7 @@ var require_build3 = __commonJS({
               optional: true,
               name: names.otherObjectTypeID || EMPTY_STRING
             }),
-            AlgorithmIdentifier2.schema(names.digestAlgorithm || {}),
+            AlgorithmIdentifier3.schema(names.digestAlgorithm || {}),
             new asn1js__namespace.BitString({ name: names.objectDigest || EMPTY_STRING })
           ]
         });
@@ -27572,7 +27628,7 @@ var require_build3 = __commonJS({
         if (OTHER_OBJECT_TYPE_ID in asn1.result) {
           this.otherObjectTypeID = asn1.result.otherObjectTypeID;
         }
-        this.digestAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.digestAlgorithm });
+        this.digestAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.digestAlgorithm });
         this.objectDigest = asn1.result.objectDigest;
       }
       toSchema() {
@@ -27922,7 +27978,7 @@ var require_build3 = __commonJS({
           case ISSUER$3:
             return {};
           case SIGNATURE$5:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case SERIAL_NUMBER$4:
             return new asn1js__namespace.Integer();
           case ATTR_CERT_VALIDITY_PERIOD:
@@ -27961,7 +28017,7 @@ var require_build3 = __commonJS({
                 })
               ]
             }),
-            AlgorithmIdentifier2.schema(names.signature || {}),
+            AlgorithmIdentifier3.schema(names.signature || {}),
             new asn1js__namespace.Integer({ name: names.serialNumber || EMPTY_STRING }),
             AttCertValidityPeriod.schema(names.attrCertValidityPeriod || {}),
             new asn1js__namespace.Sequence({
@@ -28026,7 +28082,7 @@ var require_build3 = __commonJS({
           default:
             throw new Error("Incorrect value for 'issuer' in AttributeCertificateInfoV2");
         }
-        this.signature = new AlgorithmIdentifier2({ schema: asn1.result.signature });
+        this.signature = new AlgorithmIdentifier3({ schema: asn1.result.signature });
         this.serialNumber = asn1.result.serialNumber;
         this.attrCertValidityPeriod = new AttCertValidityPeriod({
           schema: asn1.result.attrCertValidityPeriod
@@ -28106,7 +28162,7 @@ var require_build3 = __commonJS({
           case ACINFO:
             return new AttributeCertificateInfoV2();
           case SIGNATURE_ALGORITHM$6:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case SIGNATURE_VALUE$3:
             return new asn1js__namespace.BitString();
           default:
@@ -28119,7 +28175,7 @@ var require_build3 = __commonJS({
           name: names.blockName || EMPTY_STRING,
           value: [
             AttributeCertificateInfoV2.schema(names.acinfo || {}),
-            AlgorithmIdentifier2.schema(names.signatureAlgorithm || {}),
+            AlgorithmIdentifier3.schema(names.signatureAlgorithm || {}),
             new asn1js__namespace.BitString({ name: names.signatureValue || EMPTY_STRING })
           ]
         });
@@ -28143,7 +28199,7 @@ var require_build3 = __commonJS({
         }));
         AsnError.assertSchema(asn1, this.className);
         this.acinfo = new AttributeCertificateInfoV2({ schema: asn1.result.acinfo });
-        this.signatureAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.signatureAlgorithm });
+        this.signatureAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.signatureAlgorithm });
         this.signatureValue = asn1.result.signatureValue;
       }
       toSchema() {
@@ -28163,7 +28219,7 @@ var require_build3 = __commonJS({
     var CONTENT_TYPE = "contentType";
     var CONTENT = "content";
     var CLEAR_PROPS$S = [CONTENT_TYPE, CONTENT];
-    var ContentInfo4 = class _ContentInfo extends PkiObject {
+    var ContentInfo6 = class _ContentInfo extends PkiObject {
       constructor(parameters = {}) {
         super();
         this.contentType = pvutils__namespace.getParametersValue(parameters, CONTENT_TYPE, _ContentInfo.defaultValues(CONTENT_TYPE));
@@ -28243,11 +28299,11 @@ var require_build3 = __commonJS({
         return object3;
       }
     };
-    ContentInfo4.CLASS_NAME = "ContentInfo";
-    ContentInfo4.DATA = id_ContentType_Data;
-    ContentInfo4.SIGNED_DATA = id_ContentType_SignedData;
-    ContentInfo4.ENVELOPED_DATA = id_ContentType_EnvelopedData;
-    ContentInfo4.ENCRYPTED_DATA = id_ContentType_EncryptedData;
+    ContentInfo6.CLASS_NAME = "ContentInfo";
+    ContentInfo6.DATA = id_ContentType_Data;
+    ContentInfo6.SIGNED_DATA = id_ContentType_SignedData;
+    ContentInfo6.ENVELOPED_DATA = id_ContentType_EnvelopedData;
+    ContentInfo6.ENCRYPTED_DATA = id_ContentType_EncryptedData;
     var TYPE$1 = "type";
     var VALUE$4 = "value";
     var UTC_TIME_NAME = "utcTimeName";
@@ -28382,7 +28438,7 @@ var require_build3 = __commonJS({
           new asn1js__namespace.Integer({
             name: names.tbsCertificateSerialNumber || TBS_CERTIFICATE_SERIAL_NUMBER
           }),
-          AlgorithmIdentifier2.schema(names.signature || {
+          AlgorithmIdentifier3.schema(names.signature || {
             names: {
               blockName: TBS_CERTIFICATE_SIGNATURE
             }
@@ -28452,7 +28508,7 @@ var require_build3 = __commonJS({
         ]
       });
     }
-    var Certificate4 = class _Certificate extends PkiObject {
+    var Certificate6 = class _Certificate extends PkiObject {
       get tbs() {
         return pvtsutils__namespace.BufferSourceConverter.toArrayBuffer(this.tbsView);
       }
@@ -28494,7 +28550,7 @@ var require_build3 = __commonJS({
           case SERIAL_NUMBER$3:
             return new asn1js__namespace.Integer();
           case SIGNATURE$4:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case ISSUER$2:
             return new RelativeDistinguishedNames();
           case NOT_BEFORE:
@@ -28512,7 +28568,7 @@ var require_build3 = __commonJS({
           case EXTENSIONS$2:
             return [];
           case SIGNATURE_ALGORITHM$5:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case SIGNATURE_VALUE$2:
             return new asn1js__namespace.BitString();
           default:
@@ -28525,7 +28581,7 @@ var require_build3 = __commonJS({
           name: names.blockName || EMPTY_STRING,
           value: [
             tbsCertificate(names.tbsCertificate),
-            AlgorithmIdentifier2.schema(names.signatureAlgorithm || {
+            AlgorithmIdentifier3.schema(names.signatureAlgorithm || {
               names: {
                 blockName: SIGNATURE_ALGORITHM$5
               }
@@ -28554,7 +28610,7 @@ var require_build3 = __commonJS({
         if (TBS_CERTIFICATE_VERSION in asn1.result)
           this.version = asn1.result[TBS_CERTIFICATE_VERSION].valueBlock.valueDec;
         this.serialNumber = asn1.result[TBS_CERTIFICATE_SERIAL_NUMBER];
-        this.signature = new AlgorithmIdentifier2({ schema: asn1.result[TBS_CERTIFICATE_SIGNATURE] });
+        this.signature = new AlgorithmIdentifier3({ schema: asn1.result[TBS_CERTIFICATE_SIGNATURE] });
         this.issuer = new RelativeDistinguishedNames({ schema: asn1.result[TBS_CERTIFICATE_ISSUER] });
         this.notBefore = new Time({ schema: asn1.result[TBS_CERTIFICATE_NOT_BEFORE] });
         this.notAfter = new Time({ schema: asn1.result[TBS_CERTIFICATE_NOT_AFTER] });
@@ -28568,7 +28624,7 @@ var require_build3 = __commonJS({
           this.subjectUniqueID = asn1.result[TBS_CERTIFICATE_SUBJECT_UNIQUE_ID].valueBlock.valueHex;
         if (TBS_CERTIFICATE_EXTENSIONS in asn1.result)
           this.extensions = Array.from(asn1.result[TBS_CERTIFICATE_EXTENSIONS], (element) => new Extension({ schema: element }));
-        this.signatureAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.signatureAlgorithm });
+        this.signatureAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.signatureAlgorithm });
         this.signatureValue = asn1.result.signatureValue;
       }
       encodeTBS() {
@@ -28675,13 +28731,13 @@ var require_build3 = __commonJS({
         }
         return res;
       }
-      async getPublicKey(parameters, crypto3 = getCrypto2(true)) {
+      async getPublicKey(parameters, crypto3 = getCrypto3(true)) {
         return crypto3.getPublicKey(this.subjectPublicKeyInfo, this.signatureAlgorithm, parameters);
       }
-      async getKeyHash(hashAlgorithm = "SHA-1", crypto3 = getCrypto2(true)) {
+      async getKeyHash(hashAlgorithm = "SHA-1", crypto3 = getCrypto3(true)) {
         return crypto3.digest({ name: hashAlgorithm }, this.subjectPublicKeyInfo.subjectPublicKey.valueBlock.valueHexView);
       }
-      async sign(privateKey, hashAlgorithm = "SHA-1", crypto3 = getCrypto2(true)) {
+      async sign(privateKey, hashAlgorithm = "SHA-1", crypto3 = getCrypto3(true)) {
         if (!privateKey) {
           throw new Error("Need to provide a private key for signing");
         }
@@ -28693,7 +28749,7 @@ var require_build3 = __commonJS({
         const signature = await crypto3.signWithPrivateKey(this.tbsView, privateKey, parameters);
         this.signatureValue = new asn1js__namespace.BitString({ valueHex: signature });
       }
-      async verify(issuerCertificate, crypto3 = getCrypto2(true)) {
+      async verify(issuerCertificate, crypto3 = getCrypto3(true)) {
         let subjectPublicKeyInfo;
         if (issuerCertificate) {
           subjectPublicKeyInfo = issuerCertificate.subjectPublicKeyInfo;
@@ -28706,7 +28762,7 @@ var require_build3 = __commonJS({
         return crypto3.verifyWithPublicKey(this.tbsView, this.signatureValue, subjectPublicKeyInfo, this.signatureAlgorithm);
       }
     };
-    Certificate4.CLASS_NAME = "Certificate";
+    Certificate6.CLASS_NAME = "Certificate";
     function checkCA(cert, signerCert = null) {
       if (signerCert && cert.issuer.isEqual(signerCert.issuer) && cert.serialNumber.isEqual(signerCert.serialNumber)) {
         return null;
@@ -28799,7 +28855,7 @@ var require_build3 = __commonJS({
           case id_CertBag_X509Certificate:
             {
               try {
-                this.parsedValue = Certificate4.fromBER(certValueHex);
+                this.parsedValue = Certificate6.fromBER(certValueHex);
               } catch {
                 AttributeCertificateV2.fromBER(certValueHex);
               }
@@ -28966,7 +29022,7 @@ var require_build3 = __commonJS({
             name: names.tbsCertListVersion || TBS_CERT_LIST_VERSION,
             value: 2
           }),
-          AlgorithmIdentifier2.schema(names.signature || {
+          AlgorithmIdentifier3.schema(names.signature || {
             names: {
               blockName: TBS_CERT_LIST_SIGNATURE
             }
@@ -29064,7 +29120,7 @@ var require_build3 = __commonJS({
           case VERSION$e:
             return 0;
           case SIGNATURE$3:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case ISSUER$1:
             return new RelativeDistinguishedNames();
           case THIS_UPDATE$1:
@@ -29076,7 +29132,7 @@ var require_build3 = __commonJS({
           case CRL_EXTENSIONS:
             return new Extensions();
           case SIGNATURE_ALGORITHM$4:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case SIGNATURE_VALUE$1:
             return new asn1js__namespace.BitString();
           default:
@@ -29089,7 +29145,7 @@ var require_build3 = __commonJS({
           name: names.blockName || "CertificateList",
           value: [
             tbsCertList(parameters),
-            AlgorithmIdentifier2.schema(names.signatureAlgorithm || {
+            AlgorithmIdentifier3.schema(names.signatureAlgorithm || {
               names: {
                 blockName: SIGNATURE_ALGORITHM$4
               }
@@ -29106,7 +29162,7 @@ var require_build3 = __commonJS({
         if (TBS_CERT_LIST_VERSION in asn1.result) {
           this.version = asn1.result[TBS_CERT_LIST_VERSION].valueBlock.valueDec;
         }
-        this.signature = new AlgorithmIdentifier2({ schema: asn1.result[TBS_CERT_LIST_SIGNATURE] });
+        this.signature = new AlgorithmIdentifier3({ schema: asn1.result[TBS_CERT_LIST_SIGNATURE] });
         this.issuer = new RelativeDistinguishedNames({ schema: asn1.result[TBS_CERT_LIST_ISSUER] });
         this.thisUpdate = new Time({ schema: asn1.result[TBS_CERT_LIST_THIS_UPDATE] });
         if (TBS_CERT_LIST_NEXT_UPDATE in asn1.result) {
@@ -29118,7 +29174,7 @@ var require_build3 = __commonJS({
         if (TBS_CERT_LIST_EXTENSIONS in asn1.result) {
           this.crlExtensions = new Extensions({ schema: asn1.result[TBS_CERT_LIST_EXTENSIONS] });
         }
-        this.signatureAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.signatureAlgorithm });
+        this.signatureAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.signatureAlgorithm });
         this.signatureValue = asn1.result.signatureValue;
       }
       encodeTBS() {
@@ -29204,7 +29260,7 @@ var require_build3 = __commonJS({
         }
         return false;
       }
-      async sign(privateKey, hashAlgorithm = "SHA-1", crypto3 = getCrypto2(true)) {
+      async sign(privateKey, hashAlgorithm = "SHA-1", crypto3 = getCrypto3(true)) {
         if (!privateKey) {
           throw new Error("Need to provide a private key for signing");
         }
@@ -29216,7 +29272,7 @@ var require_build3 = __commonJS({
         const signature = await crypto3.signWithPrivateKey(this.tbsView, privateKey, parameters);
         this.signatureValue = new asn1js__namespace.BitString({ valueHex: signature });
       }
-      async verify(parameters = {}, crypto3 = getCrypto2(true)) {
+      async verify(parameters = {}, crypto3 = getCrypto3(true)) {
         let subjectPublicKeyInfo;
         if (parameters.issuerCertificate) {
           subjectPublicKeyInfo = parameters.issuerCertificate.subjectPublicKeyInfo;
@@ -29458,7 +29514,7 @@ var require_build3 = __commonJS({
           res.unprotectedAttrs = Array.from(this.unprotectedAttrs, (o) => o.toJSON());
         return res;
       }
-      async encrypt(parameters, crypto3 = getCrypto2(true)) {
+      async encrypt(parameters, crypto3 = getCrypto3(true)) {
         ArgumentError.assert(parameters, "parameters", "object");
         const encryptParams = {
           ...parameters,
@@ -29466,7 +29522,7 @@ var require_build3 = __commonJS({
         };
         this.encryptedContentInfo = await crypto3.encryptEncryptedContentInfo(encryptParams);
       }
-      async decrypt(parameters, crypto3 = getCrypto2(true)) {
+      async decrypt(parameters, crypto3 = getCrypto3(true)) {
         ArgumentError.assert(parameters, "parameters", "object");
         const decryptParams = {
           ...parameters,
@@ -29495,7 +29551,7 @@ var require_build3 = __commonJS({
       static defaultValues(memberName) {
         switch (memberName) {
           case ENCRYPTION_ALGORITHM:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case ENCRYPTED_DATA:
             return new asn1js__namespace.OctetString();
           case PARSED_VALUE$2:
@@ -29507,7 +29563,7 @@ var require_build3 = __commonJS({
       static compareWithDefault(memberName, memberValue) {
         switch (memberName) {
           case ENCRYPTION_ALGORITHM:
-            return AlgorithmIdentifier2.compareWithDefault("algorithmId", memberValue.algorithmId) && "algorithmParams" in memberValue === false;
+            return AlgorithmIdentifier3.compareWithDefault("algorithmId", memberValue.algorithmId) && "algorithmParams" in memberValue === false;
           case ENCRYPTED_DATA:
             return memberValue.isEqual(_PKCS8ShroudedKeyBag.defaultValues(memberName));
           case PARSED_VALUE$2:
@@ -29521,7 +29577,7 @@ var require_build3 = __commonJS({
         return new asn1js__namespace.Sequence({
           name: names.blockName || EMPTY_STRING,
           value: [
-            AlgorithmIdentifier2.schema(names.encryptionAlgorithm || {
+            AlgorithmIdentifier3.schema(names.encryptionAlgorithm || {
               names: {
                 blockName: ENCRYPTION_ALGORITHM
               }
@@ -29553,7 +29609,7 @@ var require_build3 = __commonJS({
           }
         }));
         AsnError.assertSchema(asn1, this.className);
-        this.encryptionAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.encryptionAlgorithm });
+        this.encryptionAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.encryptionAlgorithm });
         this.encryptedData = asn1.result.encryptedData;
       }
       toSchema() {
@@ -29567,7 +29623,7 @@ var require_build3 = __commonJS({
           encryptedData: this.encryptedData.toJSON()
         };
       }
-      async parseInternalValues(parameters, crypto3 = getCrypto2(true)) {
+      async parseInternalValues(parameters, crypto3 = getCrypto3(true)) {
         const cmsEncrypted = new EncryptedData({
           encryptedContentInfo: new EncryptedContentInfo({
             contentEncryptionAlgorithm: this.encryptionAlgorithm,
@@ -29577,7 +29633,7 @@ var require_build3 = __commonJS({
         const decryptedData = await cmsEncrypted.decrypt(parameters, crypto3);
         this.parsedValue = PrivateKeyInfo.fromBER(decryptedData);
       }
-      async makeInternalValues(parameters, crypto3 = getCrypto2(true)) {
+      async makeInternalValues(parameters, crypto3 = getCrypto3(true)) {
         if (!this.parsedValue) {
           throw new Error('Please initialize "parsedValue" first');
         }
@@ -29954,7 +30010,7 @@ var require_build3 = __commonJS({
               name: names.certificates || CERTIFICATES$1,
               value: new asn1js__namespace.Choice({
                 value: [
-                  Certificate4.schema(),
+                  Certificate6.schema(),
                   new asn1js__namespace.Constructed({
                     idBlock: {
                       tagClass: 3,
@@ -29996,7 +30052,7 @@ var require_build3 = __commonJS({
         this.certificates = Array.from(asn1.result.certificates || [], (element) => {
           const initialTagNumber = element.idBlock.tagNumber;
           if (element.idBlock.tagClass === 1)
-            return new Certificate4({ schema: element });
+            return new Certificate6({ schema: element });
           const elementSequence = new asn1js__namespace.Sequence({
             value: element.valueBlock.value
           });
@@ -30019,7 +30075,7 @@ var require_build3 = __commonJS({
         return new asn1js__namespace.Set({
           value: Array.from(this.certificates, (element) => {
             switch (true) {
-              case element instanceof Certificate4:
+              case element instanceof Certificate6:
                 return element.toSchema();
               case element instanceof AttributeCertificateV1:
                 return new asn1js__namespace.Constructed({
@@ -30315,7 +30371,7 @@ var require_build3 = __commonJS({
     var ISSUER = "issuer";
     var SERIAL_NUMBER$2 = "serialNumber";
     var CLEAR_PROPS$C = [ISSUER, SERIAL_NUMBER$2];
-    var IssuerAndSerialNumber3 = class _IssuerAndSerialNumber extends PkiObject {
+    var IssuerAndSerialNumber4 = class _IssuerAndSerialNumber extends PkiObject {
       constructor(parameters = {}) {
         super();
         this.issuer = pvutils__namespace.getParametersValue(parameters, ISSUER, _IssuerAndSerialNumber.defaultValues(ISSUER));
@@ -30372,7 +30428,7 @@ var require_build3 = __commonJS({
         };
       }
     };
-    IssuerAndSerialNumber3.CLASS_NAME = "IssuerAndSerialNumber";
+    IssuerAndSerialNumber4.CLASS_NAME = "IssuerAndSerialNumber";
     var VARIANT$3 = "variant";
     var VALUE$3 = "value";
     var CLEAR_PROPS$B = ["blockName"];
@@ -30411,7 +30467,7 @@ var require_build3 = __commonJS({
         const names = pvutils__namespace.getParametersValue(parameters, "names", {});
         return new asn1js__namespace.Choice({
           value: [
-            IssuerAndSerialNumber3.schema({
+            IssuerAndSerialNumber4.schema({
               names: {
                 blockName: names.blockName || EMPTY_STRING
               }
@@ -30436,7 +30492,7 @@ var require_build3 = __commonJS({
         AsnError.assertSchema(asn1, this.className);
         if (asn1.result.blockName.idBlock.tagClass === 1) {
           this.variant = 1;
-          this.value = new IssuerAndSerialNumber3({ schema: asn1.result.blockName });
+          this.value = new IssuerAndSerialNumber4({ schema: asn1.result.blockName });
         } else {
           this.variant = 2;
           this.value = new asn1js__namespace.OctetString({ valueHex: asn1.result.blockName.valueBlock.valueHex });
@@ -30445,7 +30501,7 @@ var require_build3 = __commonJS({
       toSchema() {
         switch (this.variant) {
           case 1:
-            if (!(this.value instanceof IssuerAndSerialNumber3)) {
+            if (!(this.value instanceof IssuerAndSerialNumber4)) {
               throw new Error("Incorrect type of RecipientIdentifier.value. It should be IssuerAndSerialNumber.");
             }
             return this.value.toSchema();
@@ -30500,11 +30556,11 @@ var require_build3 = __commonJS({
           case RID$1:
             return {};
           case KEY_ENCRYPTION_ALGORITHM$3:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case ENCRYPTED_KEY$3:
             return new asn1js__namespace.OctetString();
           case RECIPIENT_CERTIFICATE$1:
-            return new Certificate4();
+            return new Certificate6();
           default:
             return super.defaultValues(memberName);
         }
@@ -30531,7 +30587,7 @@ var require_build3 = __commonJS({
           value: [
             new asn1js__namespace.Integer({ name: names.version || EMPTY_STRING }),
             RecipientIdentifier.schema(names.rid || {}),
-            AlgorithmIdentifier2.schema(names.keyEncryptionAlgorithm || {}),
+            AlgorithmIdentifier3.schema(names.keyEncryptionAlgorithm || {}),
             new asn1js__namespace.OctetString({ name: names.encryptedKey || EMPTY_STRING })
           ]
         });
@@ -30559,16 +30615,16 @@ var require_build3 = __commonJS({
         if (asn1.result.rid.idBlock.tagClass === 3) {
           this.rid = new asn1js__namespace.OctetString({ valueHex: asn1.result.rid.valueBlock.valueHex });
         } else {
-          this.rid = new IssuerAndSerialNumber3({ schema: asn1.result.rid });
+          this.rid = new IssuerAndSerialNumber4({ schema: asn1.result.rid });
         }
-        this.keyEncryptionAlgorithm = new AlgorithmIdentifier2({
+        this.keyEncryptionAlgorithm = new AlgorithmIdentifier3({
           schema: asn1.result.keyEncryptionAlgorithm
         });
         this.encryptedKey = asn1.result.encryptedKey;
       }
       toSchema() {
         const outputArray = [];
-        if (this.rid instanceof IssuerAndSerialNumber3) {
+        if (this.rid instanceof IssuerAndSerialNumber4) {
           this.version = 0;
           outputArray.push(new asn1js__namespace.Integer({ value: this.version }));
           outputArray.push(this.rid.toSchema());
@@ -30614,7 +30670,7 @@ var require_build3 = __commonJS({
       static defaultValues(memberName) {
         switch (memberName) {
           case ALGORITHM:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case PUBLIC_KEY:
             return new asn1js__namespace.BitString();
           default:
@@ -30635,7 +30691,7 @@ var require_build3 = __commonJS({
         return new asn1js__namespace.Sequence({
           name: names.blockName || EMPTY_STRING,
           value: [
-            AlgorithmIdentifier2.schema(names.algorithm || {}),
+            AlgorithmIdentifier3.schema(names.algorithm || {}),
             new asn1js__namespace.BitString({ name: names.publicKey || EMPTY_STRING })
           ]
         });
@@ -30653,7 +30709,7 @@ var require_build3 = __commonJS({
           }
         }));
         AsnError.assertSchema(asn1, this.className);
-        this.algorithm = new AlgorithmIdentifier2({ schema: asn1.result.algorithm });
+        this.algorithm = new AlgorithmIdentifier3({ schema: asn1.result.algorithm });
         this.publicKey = asn1.result.publicKey;
       }
       toSchema() {
@@ -30707,7 +30763,7 @@ var require_build3 = __commonJS({
         const names = pvutils__namespace.getParametersValue(parameters, "names", {});
         return new asn1js__namespace.Choice({
           value: [
-            IssuerAndSerialNumber3.schema({
+            IssuerAndSerialNumber4.schema({
               names: {
                 blockName: names.blockName || EMPTY_STRING
               }
@@ -30740,7 +30796,7 @@ var require_build3 = __commonJS({
         AsnError.assertSchema(asn1, this.className);
         if (asn1.result.blockName.idBlock.tagClass === 1) {
           this.variant = 1;
-          this.value = new IssuerAndSerialNumber3({ schema: asn1.result.blockName });
+          this.value = new IssuerAndSerialNumber4({ schema: asn1.result.blockName });
         } else {
           if (asn1.result.blockName.idBlock.tagNumber === 0) {
             asn1.result.blockName.idBlock.tagClass = 1;
@@ -31008,7 +31064,7 @@ var require_build3 = __commonJS({
         const names = pvutils__namespace.getParametersValue(parameters, "names", {});
         return new asn1js__namespace.Choice({
           value: [
-            IssuerAndSerialNumber3.schema(names.issuerAndSerialNumber || {
+            IssuerAndSerialNumber4.schema(names.issuerAndSerialNumber || {
               names: {
                 blockName: names.blockName || EMPTY_STRING
               }
@@ -31038,7 +31094,7 @@ var require_build3 = __commonJS({
         AsnError.assertSchema(asn1, this.className);
         if (asn1.result.blockName.idBlock.tagClass === 1) {
           this.variant = 1;
-          this.value = new IssuerAndSerialNumber3({ schema: asn1.result.blockName });
+          this.value = new IssuerAndSerialNumber4({ schema: asn1.result.blockName });
         } else {
           this.variant = 2;
           this.value = new RecipientKeyIdentifier({
@@ -31240,11 +31296,11 @@ var require_build3 = __commonJS({
           case UKM:
             return new asn1js__namespace.OctetString();
           case KEY_ENCRYPTION_ALGORITHM$2:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case RECIPIENT_ENCRYPTED_KEY:
             return new RecipientEncryptedKeys();
           case RECIPIENT_CERTIFICATE:
-            return new Certificate4();
+            return new Certificate6();
           case RECIPIENT_PUBLIC_KEY:
             return null;
           default:
@@ -31292,7 +31348,7 @@ var require_build3 = __commonJS({
               },
               value: [new asn1js__namespace.OctetString({ name: names.ukm || EMPTY_STRING })]
             }),
-            AlgorithmIdentifier2.schema(names.keyEncryptionAlgorithm || {}),
+            AlgorithmIdentifier3.schema(names.keyEncryptionAlgorithm || {}),
             RecipientEncryptedKeys.schema(names.recipientEncryptedKeys || {})
           ]
         });
@@ -31325,7 +31381,7 @@ var require_build3 = __commonJS({
         this.originator = new OriginatorIdentifierOrKey({ schema: asn1.result.originator });
         if (UKM in asn1.result)
           this.ukm = asn1.result.ukm;
-        this.keyEncryptionAlgorithm = new AlgorithmIdentifier2({
+        this.keyEncryptionAlgorithm = new AlgorithmIdentifier3({
           schema: asn1.result.keyEncryptionAlgorithm
         });
         this.recipientEncryptedKeys = new RecipientEncryptedKeys({
@@ -31500,7 +31556,7 @@ var require_build3 = __commonJS({
           case KEK_ID:
             return new KEKIdentifier();
           case KEY_ENCRYPTION_ALGORITHM$1:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case ENCRYPTED_KEY$1:
             return new asn1js__namespace.OctetString();
           case PER_DEFINED_KEK:
@@ -31532,7 +31588,7 @@ var require_build3 = __commonJS({
           value: [
             new asn1js__namespace.Integer({ name: names.version || EMPTY_STRING }),
             KEKIdentifier.schema(names.kekid || {}),
-            AlgorithmIdentifier2.schema(names.keyEncryptionAlgorithm || {}),
+            AlgorithmIdentifier3.schema(names.keyEncryptionAlgorithm || {}),
             new asn1js__namespace.OctetString({ name: names.encryptedKey || EMPTY_STRING })
           ]
         });
@@ -31558,7 +31614,7 @@ var require_build3 = __commonJS({
         AsnError.assertSchema(asn1, this.className);
         this.version = asn1.result.version.valueBlock.valueDec;
         this.kekid = new KEKIdentifier({ schema: asn1.result.kekid });
-        this.keyEncryptionAlgorithm = new AlgorithmIdentifier2({
+        this.keyEncryptionAlgorithm = new AlgorithmIdentifier3({
           schema: asn1.result.keyEncryptionAlgorithm
         });
         this.encryptedKey = asn1.result.encryptedKey;
@@ -31608,9 +31664,9 @@ var require_build3 = __commonJS({
           case VERSION$9:
             return -1;
           case KEY_DERIVATION_ALGORITHM:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case KEY_ENCRYPTION_ALGORITHM:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case ENCRYPTED_KEY:
             return new asn1js__namespace.OctetString();
           case PASSWORD:
@@ -31647,9 +31703,9 @@ var require_build3 = __commonJS({
                 tagClass: 3,
                 tagNumber: 0
               },
-              value: AlgorithmIdentifier2.schema().valueBlock.value
+              value: AlgorithmIdentifier3.schema().valueBlock.value
             }),
-            AlgorithmIdentifier2.schema(names.keyEncryptionAlgorithm || {}),
+            AlgorithmIdentifier3.schema(names.keyEncryptionAlgorithm || {}),
             new asn1js__namespace.OctetString({ name: names.encryptedKey || EMPTY_STRING })
           ]
         });
@@ -31671,13 +31727,13 @@ var require_build3 = __commonJS({
         AsnError.assertSchema(asn1, this.className);
         this.version = asn1.result.version.valueBlock.valueDec;
         if (KEY_DERIVATION_ALGORITHM in asn1.result) {
-          this.keyDerivationAlgorithm = new AlgorithmIdentifier2({
+          this.keyDerivationAlgorithm = new AlgorithmIdentifier3({
             schema: new asn1js__namespace.Sequence({
               value: asn1.result.keyDerivationAlgorithm.valueBlock.value
             })
           });
         }
-        this.keyEncryptionAlgorithm = new AlgorithmIdentifier2({
+        this.keyEncryptionAlgorithm = new AlgorithmIdentifier3({
           schema: asn1.result.keyEncryptionAlgorithm
         });
         this.encryptedKey = asn1.result.encryptedKey;
@@ -31942,20 +31998,20 @@ var require_build3 = __commonJS({
       static defaultValues(memberName) {
         switch (memberName) {
           case HASH_ALGORITHM$2:
-            return new AlgorithmIdentifier2({
+            return new AlgorithmIdentifier3({
               algorithmId: "1.3.14.3.2.26",
               algorithmParams: new asn1js__namespace.Null()
             });
           case MASK_GEN_ALGORITHM:
-            return new AlgorithmIdentifier2({
+            return new AlgorithmIdentifier3({
               algorithmId: "1.2.840.113549.1.1.8",
-              algorithmParams: new AlgorithmIdentifier2({
+              algorithmParams: new AlgorithmIdentifier3({
                 algorithmId: "1.3.14.3.2.26",
                 algorithmParams: new asn1js__namespace.Null()
               }).toSchema()
             });
           case P_SOURCE_ALGORITHM:
-            return new AlgorithmIdentifier2({
+            return new AlgorithmIdentifier3({
               algorithmId: "1.2.840.113549.1.1.9",
               algorithmParams: new asn1js__namespace.OctetString({
                 valueHex: new Uint8Array([
@@ -31997,7 +32053,7 @@ var require_build3 = __commonJS({
                 tagNumber: 0
               },
               optional: true,
-              value: [AlgorithmIdentifier2.schema(names.hashAlgorithm || {})]
+              value: [AlgorithmIdentifier3.schema(names.hashAlgorithm || {})]
             }),
             new asn1js__namespace.Constructed({
               idBlock: {
@@ -32005,7 +32061,7 @@ var require_build3 = __commonJS({
                 tagNumber: 1
               },
               optional: true,
-              value: [AlgorithmIdentifier2.schema(names.maskGenAlgorithm || {})]
+              value: [AlgorithmIdentifier3.schema(names.maskGenAlgorithm || {})]
             }),
             new asn1js__namespace.Constructed({
               idBlock: {
@@ -32013,7 +32069,7 @@ var require_build3 = __commonJS({
                 tagNumber: 2
               },
               optional: true,
-              value: [AlgorithmIdentifier2.schema(names.pSourceAlgorithm || {})]
+              value: [AlgorithmIdentifier3.schema(names.pSourceAlgorithm || {})]
             })
           ]
         });
@@ -32041,11 +32097,11 @@ var require_build3 = __commonJS({
         }));
         AsnError.assertSchema(asn1, this.className);
         if (HASH_ALGORITHM$2 in asn1.result)
-          this.hashAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.hashAlgorithm });
+          this.hashAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.hashAlgorithm });
         if (MASK_GEN_ALGORITHM in asn1.result)
-          this.maskGenAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.maskGenAlgorithm });
+          this.maskGenAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.maskGenAlgorithm });
         if (P_SOURCE_ALGORITHM in asn1.result)
-          this.pSourceAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.pSourceAlgorithm });
+          this.pSourceAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.pSourceAlgorithm });
       }
       toSchema() {
         const outputArray = [];
@@ -32114,7 +32170,7 @@ var require_build3 = __commonJS({
       static defaultValues(memberName) {
         switch (memberName) {
           case KEY_INFO:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case ENTITY_U_INFO:
             return new asn1js__namespace.OctetString();
           case SUPP_PUB_INFO:
@@ -32138,7 +32194,7 @@ var require_build3 = __commonJS({
         return new asn1js__namespace.Sequence({
           name: names.blockName || EMPTY_STRING,
           value: [
-            AlgorithmIdentifier2.schema(names.keyInfo || {}),
+            AlgorithmIdentifier3.schema(names.keyInfo || {}),
             new asn1js__namespace.Constructed({
               name: names.entityUInfo || EMPTY_STRING,
               idBlock: {
@@ -32173,7 +32229,7 @@ var require_build3 = __commonJS({
           }
         }));
         AsnError.assertSchema(asn1, this.className);
-        this.keyInfo = new AlgorithmIdentifier2({ schema: asn1.result.keyInfo });
+        this.keyInfo = new AlgorithmIdentifier3({ schema: asn1.result.keyInfo });
         if (ENTITY_U_INFO in asn1.result)
           this.entityUInfo = asn1.result.entityUInfo.valueBlock.value[0];
         this.suppPubInfo = asn1.result.suppPubInfo.valueBlock.value[0];
@@ -32398,7 +32454,7 @@ var require_build3 = __commonJS({
           res.unprotectedAttrs = Array.from(this.unprotectedAttrs, (o) => o.toJSON());
         return res;
       }
-      addRecipientByCertificate(certificate, parameters, variant, crypto3 = getCrypto2(true)) {
+      addRecipientByCertificate(certificate, parameters, variant, crypto3 = getCrypto3(true)) {
         const encryptionParameters = Object.assign({ useOAEP: true, oaepHashAlgorithm: "SHA-512" }, defaultEncryptionParams, parameters || {});
         if (certificate.subjectPublicKeyInfo.algorithm.algorithmId.indexOf("1.2.840.113549") !== -1)
           variant = 1;
@@ -32420,13 +32476,13 @@ var require_build3 = __commonJS({
                 const hashOID = crypto3.getOIDByAlgorithm({
                   name: encryptionParameters.oaepHashAlgorithm
                 }, true, "RSAES-OAEP-params");
-                const hashAlgorithm = new AlgorithmIdentifier2({
+                const hashAlgorithm = new AlgorithmIdentifier3({
                   algorithmId: hashOID,
                   algorithmParams: new asn1js__namespace.Null()
                 });
                 const rsaOAEPParams = new RSAESOAEPParams({
                   hashAlgorithm,
-                  maskGenAlgorithm: new AlgorithmIdentifier2({
+                  maskGenAlgorithm: new AlgorithmIdentifier3({
                     algorithmId: "1.2.840.113549.1.1.8",
                     algorithmParams: hashAlgorithm.toSchema()
                   })
@@ -32442,11 +32498,11 @@ var require_build3 = __commonJS({
               }
               const keyInfo = new KeyTransRecipientInfo({
                 version: 0,
-                rid: new IssuerAndSerialNumber3({
+                rid: new IssuerAndSerialNumber4({
                   issuer: certificate.issuer,
                   serialNumber: certificate.serialNumber
                 }),
-                keyEncryptionAlgorithm: new AlgorithmIdentifier2({
+                keyEncryptionAlgorithm: new AlgorithmIdentifier3({
                   algorithmId,
                   algorithmParams
                 }),
@@ -32462,7 +32518,7 @@ var require_build3 = __commonJS({
             {
               const recipientIdentifier = new KeyAgreeRecipientIdentifier({
                 variant: 1,
-                value: new IssuerAndSerialNumber3({
+                value: new IssuerAndSerialNumber4({
                   issuer: certificate.issuer,
                   serialNumber: certificate.serialNumber
                 })
@@ -32475,7 +32531,7 @@ var require_build3 = __commonJS({
         }
         return true;
       }
-      addRecipientByPreDefinedData(preDefinedData, parameters = {}, variant, crypto3 = getCrypto2(true)) {
+      addRecipientByPreDefinedData(preDefinedData, parameters = {}, variant, crypto3 = getCrypto3(true)) {
         ArgumentError.assert(preDefinedData, "preDefinedData", "ArrayBuffer");
         if (!preDefinedData.byteLength) {
           throw new Error("Pre-defined data could have zero length");
@@ -32508,7 +32564,7 @@ var require_build3 = __commonJS({
                 kekid: new KEKIdentifier({
                   keyIdentifier: new asn1js__namespace.OctetString({ valueHex: parameters.keyIdentifier })
                 }),
-                keyEncryptionAlgorithm: new AlgorithmIdentifier2({
+                keyEncryptionAlgorithm: new AlgorithmIdentifier3({
                   algorithmId: kekOID,
                   algorithmParams: parameters.keyEncryptionAlgorithmParams
                 }),
@@ -32535,7 +32591,7 @@ var require_build3 = __commonJS({
               const pbkdf2Params = new PBKDF2Params({
                 salt: new asn1js__namespace.OctetString({ valueHex: saltBuffer }),
                 iterationCount: parameters.iterationCount,
-                prf: new AlgorithmIdentifier2({
+                prf: new AlgorithmIdentifier3({
                   algorithmId: hmacOID,
                   algorithmParams: new asn1js__namespace.Null()
                 })
@@ -32543,11 +32599,11 @@ var require_build3 = __commonJS({
               const kekOID = crypto3.getOIDByAlgorithm(parameters.keyEncryptionAlgorithm, true, "keyEncryptionAlgorithm");
               const keyInfo = new PasswordRecipientinfo({
                 version: 0,
-                keyDerivationAlgorithm: new AlgorithmIdentifier2({
+                keyDerivationAlgorithm: new AlgorithmIdentifier3({
                   algorithmId: pbkdf2OID,
                   algorithmParams: pbkdf2Params.toSchema()
                 }),
-                keyEncryptionAlgorithm: new AlgorithmIdentifier2({
+                keyEncryptionAlgorithm: new AlgorithmIdentifier3({
                   algorithmId: kekOID,
                   algorithmParams: parameters.keyEncryptionAlgorithmParams
                 }),
@@ -32563,7 +32619,7 @@ var require_build3 = __commonJS({
             throw new Error(`Unknown value for "variant": ${variant}`);
         }
       }
-      addRecipientByKeyIdentifier(key2, keyId, parameters, crypto3 = getCrypto2(true)) {
+      addRecipientByKeyIdentifier(key2, keyId, parameters, crypto3 = getCrypto3(true)) {
         const encryptionParameters = Object.assign({}, defaultEncryptionParams, parameters || {});
         const recipientIdentifier = new KeyAgreeRecipientIdentifier({
           variant: 2,
@@ -32573,7 +32629,7 @@ var require_build3 = __commonJS({
         });
         this._addKeyAgreeRecipientInfo(recipientIdentifier, encryptionParameters, { recipientPublicKey: key2 }, crypto3);
       }
-      _addKeyAgreeRecipientInfo(recipientIdentifier, encryptionParameters, extraRecipientInfoParams, crypto3 = getCrypto2(true)) {
+      _addKeyAgreeRecipientInfo(recipientIdentifier, encryptionParameters, extraRecipientInfoParams, crypto3 = getCrypto3(true)) {
         const encryptedKey = new RecipientEncryptedKey({
           rid: recipientIdentifier
         });
@@ -32581,7 +32637,7 @@ var require_build3 = __commonJS({
           name: "AES-KW",
           length: encryptionParameters.kekEncryptionLength
         }, true, "keyEncryptionAlgorithm");
-        const aesKW = new AlgorithmIdentifier2({
+        const aesKW = new AlgorithmIdentifier3({
           algorithmId: aesKWoid
         });
         const ecdhOID = crypto3.getOIDByAlgorithm({
@@ -32594,7 +32650,7 @@ var require_build3 = __commonJS({
         const recipientInfoParams = {
           version: 3,
           ukm: new asn1js__namespace.OctetString({ valueHex: ukmBuffer }),
-          keyEncryptionAlgorithm: new AlgorithmIdentifier2({
+          keyEncryptionAlgorithm: new AlgorithmIdentifier3({
             algorithmId: ecdhOID,
             algorithmParams: aesKW.toSchema()
           }),
@@ -32608,7 +32664,7 @@ var require_build3 = __commonJS({
           value: keyInfo
         }));
       }
-      async encrypt(contentEncryptionAlgorithm, contentToEncrypt, crypto3 = getCrypto2(true)) {
+      async encrypt(contentEncryptionAlgorithm, contentToEncrypt, crypto3 = getCrypto3(true)) {
         const ivBuffer = new ArrayBuffer(16);
         const ivView = new Uint8Array(ivBuffer);
         crypto3.getRandomValues(ivView);
@@ -32624,7 +32680,7 @@ var require_build3 = __commonJS({
         this.encryptedContentInfo = new EncryptedContentInfo({
           disableSplit: this.policy.disableSplit,
           contentType: "1.2.840.113549.1.7.1",
-          contentEncryptionAlgorithm: new AlgorithmIdentifier2({
+          contentEncryptionAlgorithm: new AlgorithmIdentifier3({
             algorithmId: contentEncryptionOID,
             algorithmParams: new asn1js__namespace.OctetString({ valueHex: ivBuffer })
           }),
@@ -32674,7 +32730,7 @@ var require_build3 = __commonJS({
             name: "ECDH",
             public: recipientPublicKey
           }, ecdhKeys.privateKey, recipientCurveLength);
-          const aesKWAlgorithm = new AlgorithmIdentifier2({
+          const aesKWAlgorithm = new AlgorithmIdentifier3({
             schema: recipientInfo.keyEncryptionAlgorithm.algorithmParams
           });
           const kwAlgorithm = crypto3.getAlgorithmByOID(aesKWAlgorithm.algorithmId, true, "aesKWAlgorithm");
@@ -32686,7 +32742,7 @@ var require_build3 = __commonJS({
             kwLength >>= 8;
           }
           const eccInfo = new ECCCMSSharedInfo({
-            keyInfo: new AlgorithmIdentifier2({
+            keyInfo: new AlgorithmIdentifier3({
               algorithmId: aesKWAlgorithm.algorithmId
             }),
             entityUInfo: recipientInfo.ukm,
@@ -32795,7 +32851,7 @@ var require_build3 = __commonJS({
         }
         return res;
       }
-      async decrypt(recipientIndex, parameters, crypto3 = getCrypto2(true)) {
+      async decrypt(recipientIndex, parameters, crypto3 = getCrypto3(true)) {
         const decryptionParameters = parameters || {};
         if (recipientIndex + 1 > this.recipientInfos.length) {
           throw new Error(`Maximum value for "index" is: ${this.recipientInfos.length - 1}`);
@@ -32867,7 +32923,7 @@ var require_build3 = __commonJS({
           }, ecdhPrivateKey, recipientCurveLength);
           async function applyKDF(includeAlgorithmParams) {
             includeAlgorithmParams = includeAlgorithmParams || false;
-            const aesKWAlgorithm = new AlgorithmIdentifier2({
+            const aesKWAlgorithm = new AlgorithmIdentifier3({
               schema: recipientInfo.keyEncryptionAlgorithm.algorithmParams
             });
             const kwAlgorithm = crypto3.getAlgorithmByOID(aesKWAlgorithm.algorithmId, true, "kwAlgorithm");
@@ -32885,7 +32941,7 @@ var require_build3 = __commonJS({
               keyInfoAlgorithm.algorithmParams = new asn1js__namespace.Null();
             }
             const eccInfo = new ECCCMSSharedInfo({
-              keyInfo: new AlgorithmIdentifier2(keyInfoAlgorithm),
+              keyInfo: new AlgorithmIdentifier3(keyInfoAlgorithm),
               entityUInfo: recipientInfo.ukm,
               suppPubInfo: new asn1js__namespace.OctetString({ valueHex: kwLengthBuffer })
             });
@@ -33066,7 +33122,7 @@ var require_build3 = __commonJS({
           value: [
             new asn1js__namespace.Repeated({
               name: names.contentInfos || EMPTY_STRING,
-              value: ContentInfo4.schema()
+              value: ContentInfo6.schema()
             })
           ]
         });
@@ -33079,7 +33135,7 @@ var require_build3 = __commonJS({
           }
         }));
         AsnError.assertSchema(asn1, this.className);
-        this.safeContents = Array.from(asn1.result.contentInfos, (element) => new ContentInfo4({ schema: element }));
+        this.safeContents = Array.from(asn1.result.contentInfos, (element) => new ContentInfo6({ schema: element }));
       }
       toSchema() {
         return new asn1js__namespace.Sequence({
@@ -33091,7 +33147,7 @@ var require_build3 = __commonJS({
           safeContents: Array.from(this.safeContents, (o) => o.toJSON())
         };
       }
-      async parseInternalValues(parameters, crypto3 = getCrypto2(true)) {
+      async parseInternalValues(parameters, crypto3 = getCrypto3(true)) {
         ParameterError.assert(parameters, SAFE_CONTENTS);
         ArgumentError.assert(parameters.safeContents, SAFE_CONTENTS, "Array");
         if (parameters.safeContents.length !== this.safeContents.length) {
@@ -33150,7 +33206,7 @@ var require_build3 = __commonJS({
           }
         }
       }
-      async makeInternalValues(parameters, crypto3 = getCrypto2(true)) {
+      async makeInternalValues(parameters, crypto3 = getCrypto3(true)) {
         if (!this.parsedValue) {
           throw new Error('Please run "parseValues" first or add "parsedValue" manually');
         }
@@ -33170,7 +33226,7 @@ var require_build3 = __commonJS({
             case 0:
               {
                 const contentBuffer = content.value.toSchema().toBER(false);
-                this.safeContents.push(new ContentInfo4({
+                this.safeContents.push(new ContentInfo6({
                   contentType: "1.2.840.113549.1.7.1",
                   content: new asn1js__namespace.OctetString({ valueHex: contentBuffer })
                 }));
@@ -33182,7 +33238,7 @@ var require_build3 = __commonJS({
                 const currentParameters = parameters.safeContents[index2];
                 currentParameters.contentToEncrypt = content.value.toSchema().toBER(false);
                 await cmsEncrypted.encrypt(currentParameters, crypto3);
-                this.safeContents.push(new ContentInfo4({
+                this.safeContents.push(new ContentInfo6({
                   contentType: "1.2.840.113549.1.7.6",
                   content: cmsEncrypted.toSchema()
                 }));
@@ -33212,7 +33268,7 @@ var require_build3 = __commonJS({
                 const encryptionAlgorithm = safeContent.encryptionAlgorithm;
                 cmsEnveloped.addRecipientByCertificate(safeContent.encryptingCertificate, {}, void 0, crypto3);
                 await cmsEnveloped.encrypt(encryptionAlgorithm, contentToEncrypt, crypto3);
-                this.safeContents.push(new ContentInfo4({
+                this.safeContents.push(new ContentInfo6({
                   contentType: "1.2.840.113549.1.7.3",
                   content: cmsEnveloped.toSchema()
                 }));
@@ -33232,7 +33288,7 @@ var require_build3 = __commonJS({
     var SERIAL_NUMBER$1 = "serialNumber";
     var CLEAR_PROPS$j = [HASH_ALGORITHM$1, ISSUER_NAME_HASH, ISSUER_KEY_HASH, SERIAL_NUMBER$1];
     var CertID = class _CertID extends PkiObject {
-      static async create(certificate, parameters, crypto3 = getCrypto2(true)) {
+      static async create(certificate, parameters, crypto3 = getCrypto3(true)) {
         const certID = new _CertID();
         await certID.createForCertificate(certificate, parameters, crypto3);
         return certID;
@@ -33250,7 +33306,7 @@ var require_build3 = __commonJS({
       static defaultValues(memberName) {
         switch (memberName) {
           case HASH_ALGORITHM$1:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case ISSUER_NAME_HASH:
           case ISSUER_KEY_HASH:
             return new asn1js__namespace.OctetString();
@@ -33277,7 +33333,7 @@ var require_build3 = __commonJS({
         return new asn1js__namespace.Sequence({
           name: names.blockName || EMPTY_STRING,
           value: [
-            AlgorithmIdentifier2.schema(names.hashAlgorithmObject || {
+            AlgorithmIdentifier3.schema(names.hashAlgorithmObject || {
               names: {
                 blockName: names.hashAlgorithm || EMPTY_STRING
               }
@@ -33299,7 +33355,7 @@ var require_build3 = __commonJS({
           }
         }));
         AsnError.assertSchema(asn1, this.className);
-        this.hashAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.hashAlgorithm });
+        this.hashAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.hashAlgorithm });
         this.issuerNameHash = asn1.result.issuerNameHash;
         this.issuerKeyHash = asn1.result.issuerKeyHash;
         this.serialNumber = asn1.result.serialNumber;
@@ -33337,10 +33393,10 @@ var require_build3 = __commonJS({
         }
         return true;
       }
-      async createForCertificate(certificate, parameters, crypto3 = getCrypto2(true)) {
+      async createForCertificate(certificate, parameters, crypto3 = getCrypto3(true)) {
         ParameterError.assert(parameters, HASH_ALGORITHM$1, "issuerCertificate");
         const hashOID = crypto3.getOIDByAlgorithm({ name: parameters.hashAlgorithm }, true, "hashAlgorithm");
-        this.hashAlgorithm = new AlgorithmIdentifier2({
+        this.hashAlgorithm = new AlgorithmIdentifier3({
           algorithmId: hashOID,
           algorithmParams: new asn1js__namespace.Null()
         });
@@ -33813,7 +33869,7 @@ var require_build3 = __commonJS({
       }
       return false;
     }
-    var CertificateChainValidationEngine2 = class _CertificateChainValidationEngine {
+    var CertificateChainValidationEngine3 = class _CertificateChainValidationEngine {
       constructor(parameters = {}) {
         this.trustedCerts = pvutils__namespace.getParametersValue(parameters, TRUSTED_CERTS, this.defaultValues(TRUSTED_CERTS));
         this.certs = pvutils__namespace.getParametersValue(parameters, CERTS$2, this.defaultValues(CERTS$2));
@@ -33842,7 +33898,7 @@ var require_build3 = __commonJS({
         }
         return "Unknown";
       }
-      async defaultFindIssuer(certificate, validationEngine, crypto3 = getCrypto2(true)) {
+      async defaultFindIssuer(certificate, validationEngine, crypto3 = getCrypto3(true)) {
         const result = [];
         let keyIdentifier = null;
         let authorityCertIssuer = null;
@@ -33941,7 +33997,7 @@ var require_build3 = __commonJS({
             throw new Error(`Invalid member name for CertificateChainValidationEngine class: ${memberName}`);
         }
       }
-      async sort(passedWhenNotRevValues = false, crypto3 = getCrypto2(true)) {
+      async sort(passedWhenNotRevValues = false, crypto3 = getCrypto3(true)) {
         const localCerts = [];
         const buildPath = async (certificate, crypto4) => {
           const result2 = [];
@@ -34293,7 +34349,7 @@ var require_build3 = __commonJS({
           throw result;
         return certificatePath;
       }
-      async verify(parameters = {}, crypto3 = getCrypto2(true)) {
+      async verify(parameters = {}, crypto3 = getCrypto3(true)) {
         function compareDNSName(name, constraint) {
           const namePrepared = stringPrep(name);
           const constraintPrepared = stringPrep(constraint);
@@ -34941,7 +34997,7 @@ var require_build3 = __commonJS({
           case TBS_RESPONSE_DATA:
             return new ResponseData();
           case SIGNATURE_ALGORITHM$3:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case SIGNATURE$2:
             return new asn1js__namespace.BitString();
           case CERTS$1:
@@ -34978,7 +35034,7 @@ var require_build3 = __commonJS({
                 blockName: BASIC_OCSP_RESPONSE_TBS_RESPONSE_DATA
               }
             }),
-            AlgorithmIdentifier2.schema(names.signatureAlgorithm || {
+            AlgorithmIdentifier3.schema(names.signatureAlgorithm || {
               names: {
                 blockName: BASIC_OCSP_RESPONSE_SIGNATURE_ALGORITHM
               }
@@ -34995,7 +35051,7 @@ var require_build3 = __commonJS({
                   value: [
                     new asn1js__namespace.Repeated({
                       name: BASIC_OCSP_RESPONSE_CERTS,
-                      value: Certificate4.schema(names.certs || {})
+                      value: Certificate6.schema(names.certs || {})
                     })
                   ]
                 })
@@ -35011,12 +35067,12 @@ var require_build3 = __commonJS({
         this.tbsResponseData = new ResponseData({
           schema: asn1.result[BASIC_OCSP_RESPONSE_TBS_RESPONSE_DATA]
         });
-        this.signatureAlgorithm = new AlgorithmIdentifier2({
+        this.signatureAlgorithm = new AlgorithmIdentifier3({
           schema: asn1.result[BASIC_OCSP_RESPONSE_SIGNATURE_ALGORITHM]
         });
         this.signature = asn1.result[BASIC_OCSP_RESPONSE_SIGNATURE];
         if (BASIC_OCSP_RESPONSE_CERTS in asn1.result) {
-          this.certs = Array.from(asn1.result[BASIC_OCSP_RESPONSE_CERTS], (element) => new Certificate4({ schema: element }));
+          this.certs = Array.from(asn1.result[BASIC_OCSP_RESPONSE_CERTS], (element) => new Certificate6({ schema: element }));
         }
       }
       toSchema() {
@@ -35052,7 +35108,7 @@ var require_build3 = __commonJS({
         }
         return res;
       }
-      async getCertificateStatus(certificate, issuerCertificate, crypto3 = getCrypto2(true)) {
+      async getCertificateStatus(certificate, issuerCertificate, crypto3 = getCrypto3(true)) {
         const result = {
           isForCertificate: false,
           status: 2
@@ -35102,7 +35158,7 @@ var require_build3 = __commonJS({
         }
         return result;
       }
-      async sign(privateKey, hashAlgorithm = "SHA-1", crypto3 = getCrypto2(true)) {
+      async sign(privateKey, hashAlgorithm = "SHA-1", crypto3 = getCrypto3(true)) {
         if (!privateKey) {
           throw new Error("Need to provide a private key for signing");
         }
@@ -35116,7 +35172,7 @@ var require_build3 = __commonJS({
         const signature = await crypto3.signWithPrivateKey(this.tbsResponseData.tbsView, privateKey, { algorithm });
         this.signature = new asn1js__namespace.BitString({ valueHex: signature });
       }
-      async verify(params = {}, crypto3 = getCrypto2(true)) {
+      async verify(params = {}, crypto3 = getCrypto3(true)) {
         if (!this.certs || this.certs.length === 0) {
           throw new Error("No certificates attached to the BasicOCSPResponse");
         }
@@ -35198,7 +35254,7 @@ var require_build3 = __commonJS({
         const certDer = cert.toSchema(true).toBER(false);
         return certs.some((c) => pvtsutils__namespace.BufferSourceConverter.isEqual(c.toSchema(true).toBER(false), certDer));
       }
-      static async collectResponderCandidates(certs, responderID, crypto3 = getCrypto2(true)) {
+      static async collectResponderCandidates(certs, responderID, crypto3 = getCrypto3(true)) {
         var _a4;
         const indices = [];
         if (responderID instanceof RelativeDistinguishedNames) {
@@ -35223,10 +35279,10 @@ var require_build3 = __commonJS({
         }
         return indices;
       }
-      async verifyResponseSignature(candidateCert, crypto3 = getCrypto2(true)) {
+      async verifyResponseSignature(candidateCert, crypto3 = getCrypto3(true)) {
         return crypto3.verifyWithPublicKey(this.tbsResponseData.tbsView, this.signature, candidateCert.subjectPublicKeyInfo, this.signatureAlgorithm);
       }
-      static async validateSignerChain(signerCert, embeddedCerts, issuerCerts, trustedCerts, crypto3 = getCrypto2(true)) {
+      static async validateSignerChain(signerCert, embeddedCerts, issuerCerts, trustedCerts, crypto3 = getCrypto3(true)) {
         const additionalCerts = [];
         const addIfCa = (cert) => {
           const caCert = checkCA(cert, signerCert);
@@ -35241,7 +35297,7 @@ var require_build3 = __commonJS({
           addIfCa(cert);
         }
         additionalCerts.push(signerCert);
-        const engine = new CertificateChainValidationEngine2({
+        const engine = new CertificateChainValidationEngine3({
           certs: additionalCerts,
           trustedCerts
         });
@@ -35251,7 +35307,7 @@ var require_build3 = __commonJS({
         }
         return result.certificatePath.slice(1);
       }
-      static async findIssuersForCertID(certID, issuerCandidates, crypto3 = getCrypto2(true)) {
+      static async findIssuersForCertID(certID, issuerCandidates, crypto3 = getCrypto3(true)) {
         const responseHashAlg = crypto3.getAlgorithmByOID(certID.hashAlgorithm.algorithmId, false);
         if (!responseHashAlg || !("name" in responseHashAlg)) {
           return [];
@@ -35287,7 +35343,7 @@ var require_build3 = __commonJS({
         }
         return matched;
       }
-      static async certificateMatchesIssuerID(certificate, certID, crypto3 = getCrypto2(true)) {
+      static async certificateMatchesIssuerID(certificate, certID, crypto3 = getCrypto3(true)) {
         const responseHashAlg = crypto3.getAlgorithmByOID(certID.hashAlgorithm.algorithmId, false);
         if (!responseHashAlg || !("name" in responseHashAlg)) {
           return false;
@@ -35305,7 +35361,7 @@ var require_build3 = __commonJS({
           return false;
         }
       }
-      static async isAuthorizedResponderForCertID(signerCert, certID, issuerCandidates, trustedResponders, crypto3 = getCrypto2(true)) {
+      static async isAuthorizedResponderForCertID(signerCert, certID, issuerCandidates, trustedResponders, crypto3 = getCrypto3(true)) {
         if (trustedResponders.length > 0 && _BasicOCSPResponse.containsCertificateByDer(trustedResponders, signerCert)) {
           return true;
         }
@@ -35466,7 +35522,7 @@ var require_build3 = __commonJS({
           case ATTRIBUTES$1:
             return [];
           case SIGNATURE_ALGORITHM$2:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case SIGNATURE_VALUE:
             return new asn1js__namespace.BitString();
           default:
@@ -35497,7 +35553,7 @@ var require_build3 = __commonJS({
         if (CSR_INFO_ATTRS in asn1.result) {
           this.attributes = Array.from(asn1.result[CSR_INFO_ATTRS], (element) => new Attribute2({ schema: element }));
         }
-        this.signatureAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.signatureAlgorithm });
+        this.signatureAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.signatureAlgorithm });
         this.signatureValue = asn1.result.signatureValue;
       }
       encodeTBS() {
@@ -35549,7 +35605,7 @@ var require_build3 = __commonJS({
         }
         return object3;
       }
-      async sign(privateKey, hashAlgorithm = "SHA-1", crypto3 = getCrypto2(true)) {
+      async sign(privateKey, hashAlgorithm = "SHA-1", crypto3 = getCrypto3(true)) {
         if (!privateKey) {
           throw new Error("Need to provide a private key for signing");
         }
@@ -35560,10 +35616,10 @@ var require_build3 = __commonJS({
         const signature = await crypto3.signWithPrivateKey(this.tbsView, privateKey, parameters);
         this.signatureValue = new asn1js__namespace.BitString({ valueHex: signature });
       }
-      async verify(crypto3 = getCrypto2(true)) {
+      async verify(crypto3 = getCrypto3(true)) {
         return crypto3.verifyWithPublicKey(this.tbsView, this.signatureValue, this.subjectPublicKeyInfo, this.signatureAlgorithm);
       }
-      async getPublicKey(parameters, crypto3 = getCrypto2(true)) {
+      async getPublicKey(parameters, crypto3 = getCrypto3(true)) {
         return crypto3.getPublicKey(this.subjectPublicKeyInfo, this.signatureAlgorithm, parameters);
       }
     };
@@ -35583,7 +35639,7 @@ var require_build3 = __commonJS({
       static defaultValues(memberName) {
         switch (memberName) {
           case DIGEST_ALGORITHM$1:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case DIGEST:
             return new asn1js__namespace.OctetString();
           default:
@@ -35593,7 +35649,7 @@ var require_build3 = __commonJS({
       static compareWithDefault(memberName, memberValue) {
         switch (memberName) {
           case DIGEST_ALGORITHM$1:
-            return AlgorithmIdentifier2.compareWithDefault("algorithmId", memberValue.algorithmId) && "algorithmParams" in memberValue === false;
+            return AlgorithmIdentifier3.compareWithDefault("algorithmId", memberValue.algorithmId) && "algorithmParams" in memberValue === false;
           case DIGEST:
             return memberValue.isEqual(_DigestInfo.defaultValues(memberName));
           default:
@@ -35605,7 +35661,7 @@ var require_build3 = __commonJS({
         return new asn1js__namespace.Sequence({
           name: names.blockName || EMPTY_STRING,
           value: [
-            AlgorithmIdentifier2.schema(names.digestAlgorithm || {
+            AlgorithmIdentifier3.schema(names.digestAlgorithm || {
               names: {
                 blockName: DIGEST_ALGORITHM$1
               }
@@ -35627,7 +35683,7 @@ var require_build3 = __commonJS({
           }
         }));
         AsnError.assertSchema(asn1, this.className);
-        this.digestAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.digestAlgorithm });
+        this.digestAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.digestAlgorithm });
         this.digest = asn1.result.digest;
       }
       toSchema() {
@@ -35872,12 +35928,12 @@ var require_build3 = __commonJS({
     var HASH_ALGORITHM = "hashAlgorithm";
     var HASHED_MESSAGE = "hashedMessage";
     var CLEAR_PROPS$b = [HASH_ALGORITHM, HASHED_MESSAGE];
-    var MessageImprint = class _MessageImprint extends PkiObject {
-      static async create(hashAlgorithm, message, crypto3 = getCrypto2(true)) {
+    var MessageImprint2 = class _MessageImprint extends PkiObject {
+      static async create(hashAlgorithm, message, crypto3 = getCrypto3(true)) {
         const hashAlgorithmOID = crypto3.getOIDByAlgorithm({ name: hashAlgorithm }, true, "hashAlgorithm");
         const hashedMessage = await crypto3.digest(hashAlgorithm, message);
         const res = new _MessageImprint({
-          hashAlgorithm: new AlgorithmIdentifier2({
+          hashAlgorithm: new AlgorithmIdentifier3({
             algorithmId: hashAlgorithmOID,
             algorithmParams: new asn1js__namespace.Null()
           }),
@@ -35896,7 +35952,7 @@ var require_build3 = __commonJS({
       static defaultValues(memberName) {
         switch (memberName) {
           case HASH_ALGORITHM:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case HASHED_MESSAGE:
             return new asn1js__namespace.OctetString();
           default:
@@ -35918,7 +35974,7 @@ var require_build3 = __commonJS({
         return new asn1js__namespace.Sequence({
           name: names.blockName || EMPTY_STRING,
           value: [
-            AlgorithmIdentifier2.schema(names.hashAlgorithm || {}),
+            AlgorithmIdentifier3.schema(names.hashAlgorithm || {}),
             new asn1js__namespace.OctetString({ name: names.hashedMessage || EMPTY_STRING })
           ]
         });
@@ -35936,7 +35992,7 @@ var require_build3 = __commonJS({
           }
         }));
         AsnError.assertSchema(asn1, this.className);
-        this.hashAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.hashAlgorithm });
+        this.hashAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.hashAlgorithm });
         this.hashedMessage = asn1.result.hashedMessage;
       }
       toSchema() {
@@ -35951,7 +36007,7 @@ var require_build3 = __commonJS({
         };
       }
     };
-    MessageImprint.CLASS_NAME = "MessageImprint";
+    MessageImprint2.CLASS_NAME = "MessageImprint";
     var REQ_CERT = "reqCert";
     var SINGLE_REQUEST_EXTENSIONS = "singleRequestExtensions";
     var CLEAR_PROPS$a = [REQ_CERT, SINGLE_REQUEST_EXTENSIONS];
@@ -36286,7 +36342,7 @@ var require_build3 = __commonJS({
       static defaultValues(memberName) {
         switch (memberName) {
           case SIGNATURE_ALGORITHM$1:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case SIGNATURE$1:
             return new asn1js__namespace.BitString();
           case CERTS:
@@ -36312,7 +36368,7 @@ var require_build3 = __commonJS({
         return new asn1js__namespace.Sequence({
           name: names.blockName || EMPTY_STRING,
           value: [
-            AlgorithmIdentifier2.schema(names.signatureAlgorithm || {}),
+            AlgorithmIdentifier3.schema(names.signatureAlgorithm || {}),
             new asn1js__namespace.BitString({ name: names.signature || EMPTY_STRING }),
             new asn1js__namespace.Constructed({
               optional: true,
@@ -36325,7 +36381,7 @@ var require_build3 = __commonJS({
                   value: [
                     new asn1js__namespace.Repeated({
                       name: names.certs || EMPTY_STRING,
-                      value: Certificate4.schema({})
+                      value: Certificate6.schema({})
                     })
                   ]
                 })
@@ -36348,10 +36404,10 @@ var require_build3 = __commonJS({
           }
         }));
         AsnError.assertSchema(asn1, this.className);
-        this.signatureAlgorithm = new AlgorithmIdentifier2({ schema: asn1.result.signatureAlgorithm });
+        this.signatureAlgorithm = new AlgorithmIdentifier3({ schema: asn1.result.signatureAlgorithm });
         this.signature = asn1.result.signature;
         if (CERTS in asn1.result)
-          this.certs = Array.from(asn1.result.certs, (element) => new Certificate4({ schema: element }));
+          this.certs = Array.from(asn1.result.certs, (element) => new Certificate6({ schema: element }));
       }
       toSchema() {
         const outputArray = [];
@@ -36481,14 +36537,14 @@ var require_build3 = __commonJS({
         }
         return res;
       }
-      async createForCertificate(certificate, parameters, crypto3 = getCrypto2(true)) {
+      async createForCertificate(certificate, parameters, crypto3 = getCrypto3(true)) {
         const certID = new CertID();
         await certID.createForCertificate(certificate, parameters, crypto3);
         this.tbsRequest.requestList.push(new Request2({
           reqCert: certID
         }));
       }
-      async sign(privateKey, hashAlgorithm = "SHA-1", crypto3 = getCrypto2(true)) {
+      async sign(privateKey, hashAlgorithm = "SHA-1", crypto3 = getCrypto3(true)) {
         ParameterError.assertEmpty(privateKey, "privateKey", "OCSPRequest.sign method");
         if (!this.optionalSignature) {
           throw new Error('Need to create "optionalSignature" field before signing');
@@ -36660,7 +36716,7 @@ var require_build3 = __commonJS({
         }
         return res;
       }
-      async getCertificateStatus(certificate, issuerCertificate, crypto3 = getCrypto2(true)) {
+      async getCertificateStatus(certificate, issuerCertificate, crypto3 = getCrypto3(true)) {
         let basicResponse;
         const result = {
           isForCertificate: false,
@@ -36679,7 +36735,7 @@ var require_build3 = __commonJS({
         }
         return basicResponse.getCertificateStatus(certificate, issuerCertificate, crypto3);
       }
-      async sign(privateKey, hashAlgorithm, crypto3 = getCrypto2(true)) {
+      async sign(privateKey, hashAlgorithm, crypto3 = getCrypto3(true)) {
         var _a4;
         if (this.responseBytes && this.responseBytes.responseType === id_PKIX_OCSP_Basic) {
           const basicResponse = BasicOCSPResponse.fromBER(this.responseBytes.response.valueBlock.valueHexView);
@@ -36687,7 +36743,7 @@ var require_build3 = __commonJS({
         }
         throw new Error(`Unknown ResponseBytes type: ${((_a4 = this.responseBytes) === null || _a4 === void 0 ? void 0 : _a4.responseType) || "Unknown"}`);
       }
-      async verify(issuerCertificate = null, crypto3 = getCrypto2(true)) {
+      async verify(issuerCertificate = null, crypto3 = getCrypto3(true)) {
         var _a4;
         if (RESPONSE_BYTES in this === false)
           throw new Error("Empty ResponseBytes field");
@@ -36852,11 +36908,11 @@ var require_build3 = __commonJS({
           case SID:
             return new asn1js__namespace.Any();
           case DIGEST_ALGORITHM:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case SIGNED_ATTRS:
             return new SignedAndUnsignedAttributes2({ type: 0 });
           case SIGNATURE_ALGORITHM:
-            return new AlgorithmIdentifier2();
+            return new AlgorithmIdentifier3();
           case SIGNATURE:
             return new asn1js__namespace.OctetString();
           case UNSIGNED_ATTRS:
@@ -36872,13 +36928,13 @@ var require_build3 = __commonJS({
           case SID:
             return memberValue instanceof asn1js__namespace.Any;
           case DIGEST_ALGORITHM:
-            if (memberValue instanceof AlgorithmIdentifier2 === false)
+            if (memberValue instanceof AlgorithmIdentifier3 === false)
               return false;
             return memberValue.isEqual(_SignerInfo.defaultValues(DIGEST_ALGORITHM));
           case SIGNED_ATTRS:
             return SignedAndUnsignedAttributes2.compareWithDefault("type", memberValue.type) && SignedAndUnsignedAttributes2.compareWithDefault("attributes", memberValue.attributes) && SignedAndUnsignedAttributes2.compareWithDefault("encodedValue", memberValue.encodedValue);
           case SIGNATURE_ALGORITHM:
-            if (memberValue instanceof AlgorithmIdentifier2 === false)
+            if (memberValue instanceof AlgorithmIdentifier3 === false)
               return false;
             return memberValue.isEqual(_SignerInfo.defaultValues(SIGNATURE_ALGORITHM));
           case SIGNATURE:
@@ -36896,7 +36952,7 @@ var require_build3 = __commonJS({
             new asn1js__namespace.Integer({ name: names.version || SIGNER_INFO_VERSION }),
             new asn1js__namespace.Choice({
               value: [
-                IssuerAndSerialNumber3.schema(names.sidSchema || {
+                IssuerAndSerialNumber4.schema(names.sidSchema || {
                   names: {
                     blockName: SIGNER_INFO_SID
                   }
@@ -36924,7 +36980,7 @@ var require_build3 = __commonJS({
                 })
               ]
             }),
-            AlgorithmIdentifier2.schema(names.digestAlgorithm || {
+            AlgorithmIdentifier3.schema(names.digestAlgorithm || {
               names: {
                 blockName: SIGNER_INFO_DIGEST_ALGORITHM
               }
@@ -36935,7 +36991,7 @@ var require_build3 = __commonJS({
                 tagNumber: 0
               }
             }),
-            AlgorithmIdentifier2.schema(names.signatureAlgorithm || {
+            AlgorithmIdentifier3.schema(names.signatureAlgorithm || {
               names: {
                 blockName: SIGNER_INFO_SIGNATURE_ALGORITHM
               }
@@ -36957,10 +37013,10 @@ var require_build3 = __commonJS({
         this.version = asn1.result[SIGNER_INFO_VERSION].valueBlock.valueDec;
         const currentSid = asn1.result[SIGNER_INFO_SID];
         if (currentSid.idBlock.tagClass === 1)
-          this.sid = new IssuerAndSerialNumber3({ schema: currentSid });
+          this.sid = new IssuerAndSerialNumber4({ schema: currentSid });
         else
           this.sid = currentSid;
-        this.digestAlgorithm = new AlgorithmIdentifier2({
+        this.digestAlgorithm = new AlgorithmIdentifier3({
           schema: asn1.result[SIGNER_INFO_DIGEST_ALGORITHM]
         });
         if (SIGNER_INFO_SIGNED_ATTRS in asn1.result)
@@ -36968,7 +37024,7 @@ var require_build3 = __commonJS({
             type: 0,
             schema: asn1.result[SIGNER_INFO_SIGNED_ATTRS]
           });
-        this.signatureAlgorithm = new AlgorithmIdentifier2({
+        this.signatureAlgorithm = new AlgorithmIdentifier3({
           schema: asn1.result[SIGNER_INFO_SIGNATURE_ALGORITHM]
         });
         this.signature = asn1.result[SIGNER_INFO_SIGNATURE];
@@ -36983,7 +37039,7 @@ var require_build3 = __commonJS({
           throw new Error('Incorrectly initialized "SignerInfo" class');
         const outputArray = [];
         outputArray.push(new asn1js__namespace.Integer({ value: this.version }));
-        if (this.sid instanceof IssuerAndSerialNumber3)
+        if (this.sid instanceof IssuerAndSerialNumber4)
           outputArray.push(this.sid.toSchema());
         else
           outputArray.push(this.sid);
@@ -37057,7 +37113,7 @@ var require_build3 = __commonJS({
       TST_INFO_TSA,
       TST_INFO_EXTENSIONS
     ];
-    var TSTInfo = class _TSTInfo extends PkiObject {
+    var TSTInfo2 = class _TSTInfo extends PkiObject {
       constructor(parameters = {}) {
         super();
         this.version = pvutils__namespace.getParametersValue(parameters, VERSION$3, _TSTInfo.defaultValues(VERSION$3));
@@ -37091,7 +37147,7 @@ var require_build3 = __commonJS({
           case POLICY:
             return EMPTY_STRING;
           case MESSAGE_IMPRINT$1:
-            return new MessageImprint();
+            return new MessageImprint2();
           case SERIAL_NUMBER:
             return new asn1js__namespace.Integer();
           case GEN_TIME:
@@ -37118,7 +37174,7 @@ var require_build3 = __commonJS({
           case ORDERING:
             return memberValue === _TSTInfo.defaultValues(ORDERING);
           case MESSAGE_IMPRINT$1:
-            return MessageImprint.compareWithDefault(HASH_ALGORITHM, memberValue.hashAlgorithm) && MessageImprint.compareWithDefault(HASHED_MESSAGE, memberValue.hashedMessage);
+            return MessageImprint2.compareWithDefault(HASH_ALGORITHM, memberValue.hashAlgorithm) && MessageImprint2.compareWithDefault(HASHED_MESSAGE, memberValue.hashedMessage);
           case SERIAL_NUMBER:
           case NONCE$1:
             return memberValue.isEqual(_TSTInfo.defaultValues(NONCE$1));
@@ -37139,7 +37195,7 @@ var require_build3 = __commonJS({
           value: [
             new asn1js__namespace.Integer({ name: names.version || TST_INFO_VERSION }),
             new asn1js__namespace.ObjectIdentifier({ name: names.policy || TST_INFO_POLICY }),
-            MessageImprint.schema(names.messageImprint || {
+            MessageImprint2.schema(names.messageImprint || {
               names: {
                 blockName: TST_INFO_MESSAGE_IMPRINT
               }
@@ -37195,7 +37251,7 @@ var require_build3 = __commonJS({
         AsnError.assertSchema(asn1, this.className);
         this.version = asn1.result[TST_INFO_VERSION].valueBlock.valueDec;
         this.policy = asn1.result[TST_INFO_POLICY].valueBlock.toString();
-        this.messageImprint = new MessageImprint({ schema: asn1.result[TST_INFO_MESSAGE_IMPRINT] });
+        this.messageImprint = new MessageImprint2({ schema: asn1.result[TST_INFO_MESSAGE_IMPRINT] });
         this.serialNumber = asn1.result[TST_INFO_SERIAL_NUMBER];
         this.genTime = asn1.result[TST_INFO_GEN_TIME].toDate();
         if (TST_INFO_ACCURACY in asn1.result)
@@ -37266,7 +37322,7 @@ var require_build3 = __commonJS({
           res.extensions = Array.from(this.extensions, (o) => o.toJSON());
         return res;
       }
-      async verify(params, crypto3 = getCrypto2(true)) {
+      async verify(params, crypto3 = getCrypto3(true)) {
         if (!params.data) {
           throw new Error('"data" is a mandatory attribute for TST_INFO verification');
         }
@@ -37284,7 +37340,7 @@ var require_build3 = __commonJS({
         return pvtsutils__namespace.BufferSourceConverter.isEqual(hash4, this.messageImprint.hashedMessage.valueBlock.valueHexView);
       }
     };
-    TSTInfo.CLASS_NAME = "TSTInfo";
+    TSTInfo2.CLASS_NAME = "TSTInfo";
     var VERSION$2 = "version";
     var DIGEST_ALGORITHMS = "digestAlgorithms";
     var ENCAP_CONTENT_INFO = "encapContentInfo";
@@ -37320,7 +37376,7 @@ var require_build3 = __commonJS({
         this.certificatePath = certificatePath;
       }
     };
-    var SignedData4 = class _SignedData extends PkiObject {
+    var SignedData6 = class _SignedData extends PkiObject {
       constructor(parameters = {}) {
         super();
         this.version = pvutils__namespace.getParametersValue(parameters, VERSION$2, _SignedData.defaultValues(VERSION$2));
@@ -37390,7 +37446,7 @@ var require_build3 = __commonJS({
               value: [
                 new asn1js__namespace.Repeated({
                   name: names.digestAlgorithms || SIGNED_DATA_DIGEST_ALGORITHMS,
-                  value: AlgorithmIdentifier2.schema()
+                  value: AlgorithmIdentifier3.schema()
                 })
               ]
             }),
@@ -37437,7 +37493,7 @@ var require_build3 = __commonJS({
         AsnError.assertSchema(asn1, this.className);
         this.version = asn1.result[SIGNED_DATA_VERSION].valueBlock.valueDec;
         if (SIGNED_DATA_DIGEST_ALGORITHMS in asn1.result)
-          this.digestAlgorithms = Array.from(asn1.result[SIGNED_DATA_DIGEST_ALGORITHMS], (algorithm) => new AlgorithmIdentifier2({ schema: algorithm }));
+          this.digestAlgorithms = Array.from(asn1.result[SIGNED_DATA_DIGEST_ALGORITHMS], (algorithm) => new AlgorithmIdentifier3({ schema: algorithm }));
         this.encapContentInfo = new EncapsulatedContentInfo3({
           schema: asn1.result[SIGNED_DATA_ENCAP_CONTENT_INFO]
         });
@@ -37527,7 +37583,7 @@ var require_build3 = __commonJS({
         }
         return res;
       }
-      async verify({ signer = -1, data = EMPTY_BUFFER, trustedCerts = [], checkDate = /* @__PURE__ */ new Date(), checkChain = false, passedWhenNotRevValues = false, extendedMode = false, findOrigin = null, findIssuer = null } = {}, crypto3 = getCrypto2(true)) {
+      async verify({ signer = -1, data = EMPTY_BUFFER, trustedCerts = [], checkDate = /* @__PURE__ */ new Date(), checkChain = false, passedWhenNotRevValues = false, extendedMode = false, findOrigin = null, findIssuer = null } = {}, crypto3 = getCrypto3(true)) {
         let signerCert = null;
         let timestampSerial = null;
         try {
@@ -37549,9 +37605,9 @@ var require_build3 = __commonJS({
               message: "No certificates attached to this signed data"
             });
           }
-          if (signerInfo.sid instanceof IssuerAndSerialNumber3) {
+          if (signerInfo.sid instanceof IssuerAndSerialNumber4) {
             for (const certificate of this.certificates) {
-              if (!(certificate instanceof Certificate4))
+              if (!(certificate instanceof Certificate6))
                 continue;
               if (certificate.issuer.isEqual(signerInfo.sid.issuer) && certificate.serialNumber.isEqual(signerInfo.sid.serialNumber)) {
                 signerCert = certificate;
@@ -37562,7 +37618,7 @@ var require_build3 = __commonJS({
             const sid = signerInfo.sid;
             const keyId = sid.idBlock.isConstructed ? sid.valueBlock.value[0].valueBlock.valueHex : sid.valueBlock.valueHex;
             for (const certificate of this.certificates) {
-              if (!(certificate instanceof Certificate4)) {
+              if (!(certificate instanceof Certificate6)) {
                 continue;
               }
               const digest = await crypto3.digest({ name: "sha-1" }, certificate.subjectPublicKeyInfo.subjectPublicKey.valueBlock.valueHexView);
@@ -37593,7 +37649,7 @@ var require_build3 = __commonJS({
             }
             let tstInfo;
             try {
-              tstInfo = TSTInfo.fromBER(this.encapContentInfo.eContent.valueBlock.valueHexView);
+              tstInfo = TSTInfo2.fromBER(this.encapContentInfo.eContent.valueBlock.valueHexView);
             } catch {
               throw new SignedDataVerifyError({
                 date: checkDate,
@@ -37627,7 +37683,7 @@ var require_build3 = __commonJS({
             }
           }
           if (checkChain) {
-            const certs = this.certificates.filter((certificate) => certificate instanceof Certificate4 && !!checkCA(certificate, signerCert));
+            const certs = this.certificates.filter((certificate) => certificate instanceof Certificate6 && !!checkCA(certificate, signerCert));
             const chainParams = {
               checkDate,
               certs,
@@ -37639,7 +37695,7 @@ var require_build3 = __commonJS({
             if (findOrigin) {
               chainParams.findOrigin = findOrigin;
             }
-            const chainEngine = new CertificateChainValidationEngine2(chainParams);
+            const chainEngine = new CertificateChainValidationEngine3(chainParams);
             chainEngine.certs.push(signerCert);
             if (this.crls) {
               for (const crl of this.crls) {
@@ -37781,7 +37837,7 @@ var require_build3 = __commonJS({
           });
         }
       }
-      async sign(privateKey, signerIndex, hashAlgorithm = "SHA-1", data = EMPTY_BUFFER, crypto3 = getCrypto2(true)) {
+      async sign(privateKey, signerIndex, hashAlgorithm = "SHA-1", data = EMPTY_BUFFER, crypto3 = getCrypto3(true)) {
         var _a4;
         if (!privateKey)
           throw new Error("Need to provide a private key for signing");
@@ -37794,12 +37850,12 @@ var require_build3 = __commonJS({
         }
         const hashAlgorithmOID = crypto3.getOIDByAlgorithm({ name: hashAlgorithm }, true, "hashAlgorithm");
         if (this.digestAlgorithms.filter((algorithm) => algorithm.algorithmId === hashAlgorithmOID).length === 0) {
-          this.digestAlgorithms.push(new AlgorithmIdentifier2({
+          this.digestAlgorithms.push(new AlgorithmIdentifier3({
             algorithmId: hashAlgorithmOID,
             algorithmParams: new asn1js__namespace.Null()
           }));
         }
-        signerInfo.digestAlgorithm = new AlgorithmIdentifier2({
+        signerInfo.digestAlgorithm = new AlgorithmIdentifier3({
           algorithmId: hashAlgorithmOID,
           algorithmParams: new asn1js__namespace.Null()
         });
@@ -37830,8 +37886,8 @@ var require_build3 = __commonJS({
         signerInfo.signature = new asn1js__namespace.OctetString({ valueHex: signature });
       }
     };
-    SignedData4.CLASS_NAME = "SignedData";
-    SignedData4.ID_DATA = id_ContentType_Data;
+    SignedData6.CLASS_NAME = "SignedData";
+    SignedData6.ID_DATA = id_ContentType_Data;
     var VERSION$1 = "version";
     var AUTH_SAFE = "authSafe";
     var MAC_DATA = "macData";
@@ -37857,7 +37913,7 @@ var require_build3 = __commonJS({
           case VERSION$1:
             return 3;
           case AUTH_SAFE:
-            return new ContentInfo4();
+            return new ContentInfo6();
           case MAC_DATA:
             return new MacData();
           case PARSED_VALUE:
@@ -37871,7 +37927,7 @@ var require_build3 = __commonJS({
           case VERSION$1:
             return memberValue === _PFX.defaultValues(memberName);
           case AUTH_SAFE:
-            return ContentInfo4.compareWithDefault("contentType", memberValue.contentType) && ContentInfo4.compareWithDefault("content", memberValue.content);
+            return ContentInfo6.compareWithDefault("contentType", memberValue.contentType) && ContentInfo6.compareWithDefault("content", memberValue.content);
           case MAC_DATA:
             return MacData.compareWithDefault("mac", memberValue.mac) && MacData.compareWithDefault("macSalt", memberValue.macSalt) && MacData.compareWithDefault("iterations", memberValue.iterations);
           case PARSED_VALUE:
@@ -37886,7 +37942,7 @@ var require_build3 = __commonJS({
           name: names.blockName || EMPTY_STRING,
           value: [
             new asn1js__namespace.Integer({ name: names.version || VERSION$1 }),
-            ContentInfo4.schema(names.authSafe || {
+            ContentInfo6.schema(names.authSafe || {
               names: {
                 blockName: AUTH_SAFE
               }
@@ -37919,7 +37975,7 @@ var require_build3 = __commonJS({
         }));
         AsnError.assertSchema(asn1, this.className);
         this.version = asn1.result.version.valueBlock.valueDec;
-        this.authSafe = new ContentInfo4({ schema: asn1.result.authSafe });
+        this.authSafe = new ContentInfo6({ schema: asn1.result.authSafe });
         if (MAC_DATA in asn1.result)
           this.macData = new MacData({ schema: asn1.result.macData });
       }
@@ -37942,7 +37998,7 @@ var require_build3 = __commonJS({
         }
         return output2;
       }
-      async makeInternalValues(parameters = {}, crypto3 = getCrypto2(true)) {
+      async makeInternalValues(parameters = {}, crypto3 = getCrypto3(true)) {
         ArgumentError.assert(parameters, "parameters", "object");
         if (!this.parsedValue) {
           throw new Error('Please call "parseValues" function first in order to make "parsedValue" data');
@@ -37961,8 +38017,8 @@ var require_build3 = __commonJS({
               const saltView = new Uint8Array(saltBuffer);
               crypto3.getRandomValues(saltView);
               const data = this.parsedValue.authenticatedSafe.toSchema().toBER(false);
-              this.authSafe = new ContentInfo4({
-                contentType: ContentInfo4.DATA,
+              this.authSafe = new ContentInfo6({
+                contentType: ContentInfo6.DATA,
                 content: new asn1js__namespace.OctetString({ valueHex: data })
               });
               const result = await crypto3.stampDataWithPassword({
@@ -37974,7 +38030,7 @@ var require_build3 = __commonJS({
               });
               this.macData = new MacData({
                 mac: new DigestInfo({
-                  digestAlgorithm: new AlgorithmIdentifier2({
+                  digestAlgorithm: new AlgorithmIdentifier3({
                     algorithmId: crypto3.getOIDByAlgorithm({ name: parameters.hmacHashAlgorithm }, true, "hmacHashAlgorithm")
                   }),
                   digest: new asn1js__namespace.OctetString({ valueHex: result })
@@ -37992,7 +38048,7 @@ var require_build3 = __commonJS({
               ParameterError.assertEmpty(parameters.privateKey, "privateKey");
               ParameterError.assertEmpty(parameters.hashAlgorithm, "hashAlgorithm");
               const toBeSigned = this.parsedValue.authenticatedSafe.toSchema().toBER(false);
-              const cmsSigned = new SignedData4({
+              const cmsSigned = new SignedData6({
                 version: 1,
                 encapContentInfo: new EncapsulatedContentInfo3({
                   eContentType: "1.2.840.113549.1.7.1",
@@ -38016,7 +38072,7 @@ var require_build3 = __commonJS({
               }));
               cmsSigned.signerInfos.push(new SignerInfo3({
                 version: 1,
-                sid: new IssuerAndSerialNumber3({
+                sid: new IssuerAndSerialNumber4({
                   issuer: parameters.signingCertificate.issuer,
                   serialNumber: parameters.signingCertificate.serialNumber
                 }),
@@ -38026,7 +38082,7 @@ var require_build3 = __commonJS({
                 })
               }));
               await cmsSigned.sign(parameters.privateKey, 0, parameters.hashAlgorithm, void 0, crypto3);
-              this.authSafe = new ContentInfo4({
+              this.authSafe = new ContentInfo6({
                 contentType: "1.2.840.113549.1.7.2",
                 content: cmsSigned.toSchema(true)
               });
@@ -38036,14 +38092,14 @@ var require_build3 = __commonJS({
             throw new Error(`Parameter "integrityMode" has unknown value: ${this.parsedValue.integrityMode}`);
         }
       }
-      async parseInternalValues(parameters, crypto3 = getCrypto2(true)) {
+      async parseInternalValues(parameters, crypto3 = getCrypto3(true)) {
         ArgumentError.assert(parameters, "parameters", "object");
         if (parameters.checkIntegrity === void 0) {
           parameters.checkIntegrity = true;
         }
         this.parsedValue = {};
         switch (this.authSafe.contentType) {
-          case ContentInfo4.DATA:
+          case ContentInfo6.DATA:
             {
               ParameterError.assertEmpty(parameters.password, "password");
               this.parsedValue.integrityMode = 0;
@@ -38069,10 +38125,10 @@ var require_build3 = __commonJS({
               }
             }
             break;
-          case ContentInfo4.SIGNED_DATA:
+          case ContentInfo6.SIGNED_DATA:
             {
               this.parsedValue.integrityMode = 1;
-              const cmsSigned = new SignedData4({ schema: this.authSafe.content });
+              const cmsSigned = new SignedData6({ schema: this.authSafe.content });
               const eContent = cmsSigned.encapContentInfo.eContent;
               ParameterError.assert(eContent, "eContent", "cmsSigned.encapContentInfo");
               ArgumentError.assert(eContent, "eContent", asn1js__namespace.OctetString);
@@ -38233,7 +38289,7 @@ var require_build3 = __commonJS({
       TIME_STAMP_REQ_CERT_REQ,
       TIME_STAMP_REQ_EXTENSIONS
     ];
-    var TimeStampReq = class _TimeStampReq extends PkiObject {
+    var TimeStampReq2 = class _TimeStampReq extends PkiObject {
       constructor(parameters = {}) {
         super();
         this.version = pvutils__namespace.getParametersValue(parameters, VERSION, _TimeStampReq.defaultValues(VERSION));
@@ -38259,7 +38315,7 @@ var require_build3 = __commonJS({
           case VERSION:
             return 0;
           case MESSAGE_IMPRINT:
-            return new MessageImprint();
+            return new MessageImprint2();
           case REQ_POLICY:
             return EMPTY_STRING;
           case NONCE:
@@ -38279,7 +38335,7 @@ var require_build3 = __commonJS({
           case CERT_REQ:
             return memberValue === _TimeStampReq.defaultValues(memberName);
           case MESSAGE_IMPRINT:
-            return MessageImprint.compareWithDefault("hashAlgorithm", memberValue.hashAlgorithm) && MessageImprint.compareWithDefault("hashedMessage", memberValue.hashedMessage);
+            return MessageImprint2.compareWithDefault("hashAlgorithm", memberValue.hashAlgorithm) && MessageImprint2.compareWithDefault("hashedMessage", memberValue.hashedMessage);
           case NONCE:
             return memberValue.isEqual(_TimeStampReq.defaultValues(memberName));
           case EXTENSIONS:
@@ -38294,7 +38350,7 @@ var require_build3 = __commonJS({
           name: names.blockName || TIME_STAMP_REQ,
           value: [
             new asn1js__namespace.Integer({ name: names.version || TIME_STAMP_REQ_VERSION }),
-            MessageImprint.schema(names.messageImprint || {
+            MessageImprint2.schema(names.messageImprint || {
               names: {
                 blockName: TIME_STAMP_REQ_MESSAGE_IMPRINT
               }
@@ -38332,7 +38388,7 @@ var require_build3 = __commonJS({
         const asn1 = asn1js__namespace.compareSchema(schema, schema, _TimeStampReq.schema());
         AsnError.assertSchema(asn1, this.className);
         this.version = asn1.result[TIME_STAMP_REQ_VERSION].valueBlock.valueDec;
-        this.messageImprint = new MessageImprint({
+        this.messageImprint = new MessageImprint2({
           schema: asn1.result[TIME_STAMP_REQ_MESSAGE_IMPRINT]
         });
         if (TIME_STAMP_REQ_POLICY in asn1.result)
@@ -38384,7 +38440,7 @@ var require_build3 = __commonJS({
         return res;
       }
     };
-    TimeStampReq.CLASS_NAME = "TimeStampReq";
+    TimeStampReq2.CLASS_NAME = "TimeStampReq";
     var STATUS = "status";
     var TIME_STAMP_TOKEN = "timeStampToken";
     var TIME_STAMP_RESP = "TimeStampResp";
@@ -38407,7 +38463,7 @@ var require_build3 = __commonJS({
           case STATUS:
             return new PKIStatusInfo();
           case TIME_STAMP_TOKEN:
-            return new ContentInfo4();
+            return new ContentInfo6();
           default:
             return super.defaultValues(memberName);
         }
@@ -38432,7 +38488,7 @@ var require_build3 = __commonJS({
                 blockName: TIME_STAMP_RESP_STATUS
               }
             }),
-            ContentInfo4.schema(names.timeStampToken || {
+            ContentInfo6.schema(names.timeStampToken || {
               names: {
                 blockName: TIME_STAMP_RESP_TOKEN,
                 optional: true
@@ -38447,7 +38503,7 @@ var require_build3 = __commonJS({
         AsnError.assertSchema(asn1, this.className);
         this.status = new PKIStatusInfo({ schema: asn1.result[TIME_STAMP_RESP_STATUS] });
         if (TIME_STAMP_RESP_TOKEN in asn1.result)
-          this.timeStampToken = new ContentInfo4({ schema: asn1.result[TIME_STAMP_RESP_TOKEN] });
+          this.timeStampToken = new ContentInfo6({ schema: asn1.result[TIME_STAMP_RESP_TOKEN] });
       }
       toSchema() {
         const outputArray = [];
@@ -38468,18 +38524,18 @@ var require_build3 = __commonJS({
         }
         return res;
       }
-      async sign(privateKey, hashAlgorithm, crypto3 = getCrypto2(true)) {
+      async sign(privateKey, hashAlgorithm, crypto3 = getCrypto3(true)) {
         this.assertContentType();
-        const signed = new SignedData4({ schema: this.timeStampToken.content });
+        const signed = new SignedData6({ schema: this.timeStampToken.content });
         return signed.sign(privateKey, 0, hashAlgorithm, void 0, crypto3);
       }
       async verify(verificationParameters = {
         signer: 0,
         trustedCerts: [],
         data: EMPTY_BUFFER
-      }, crypto3 = getCrypto2(true)) {
+      }, crypto3 = getCrypto3(true)) {
         this.assertContentType();
-        const signed = new SignedData4({ schema: this.timeStampToken.content });
+        const signed = new SignedData6({ schema: this.timeStampToken.content });
         return signed.verify(verificationParameters, crypto3);
       }
       assertContentType() {
@@ -38498,18 +38554,18 @@ var require_build3 = __commonJS({
         if ("webkitSubtle" in globalThis.crypto) {
           engineName = "safari";
         }
-        setEngine4(engineName, new CryptoEngine4({ name: engineName, crypto: globalThis.crypto }));
+        setEngine5(engineName, new CryptoEngine5({ name: engineName, crypto: globalThis.crypto }));
       } else if (typeof crypto !== "undefined" && "webcrypto" in crypto) {
         const name = "NodeJS ^15";
         const nodeCrypto = crypto.webcrypto;
-        setEngine4(name, new CryptoEngine4({ name, crypto: nodeCrypto }));
+        setEngine5(name, new CryptoEngine5({ name, crypto: nodeCrypto }));
       }
     }
     initCryptoEngine();
     exports.AbstractCryptoEngine = AbstractCryptoEngine;
     exports.AccessDescription = AccessDescription;
     exports.Accuracy = Accuracy;
-    exports.AlgorithmIdentifier = AlgorithmIdentifier2;
+    exports.AlgorithmIdentifier = AlgorithmIdentifier3;
     exports.AltName = AltName;
     exports.ArgumentError = ArgumentError;
     exports.AsnError = AsnError;
@@ -38529,16 +38585,16 @@ var require_build3 = __commonJS({
     exports.CRLDistributionPoints = CRLDistributionPoints;
     exports.CertBag = CertBag;
     exports.CertID = CertID;
-    exports.Certificate = Certificate4;
-    exports.CertificateChainValidationEngine = CertificateChainValidationEngine2;
+    exports.Certificate = Certificate6;
+    exports.CertificateChainValidationEngine = CertificateChainValidationEngine3;
     exports.CertificatePolicies = CertificatePolicies;
     exports.CertificateRevocationList = CertificateRevocationList;
     exports.CertificateSet = CertificateSet;
     exports.CertificateTemplate = CertificateTemplate;
     exports.CertificationRequest = CertificationRequest;
     exports.ChainValidationError = ChainValidationError;
-    exports.ContentInfo = ContentInfo4;
-    exports.CryptoEngine = CryptoEngine4;
+    exports.ContentInfo = ContentInfo6;
+    exports.CryptoEngine = CryptoEngine5;
     exports.DigestInfo = DigestInfo;
     exports.DistributionPoint = DistributionPoint;
     exports.ECCCMSSharedInfo = ECCCMSSharedInfo;
@@ -38560,7 +38616,7 @@ var require_build3 = __commonJS({
     exports.HASH_ALGORITHM = HASH_ALGORITHM;
     exports.Holder = Holder;
     exports.InfoAccess = InfoAccess;
-    exports.IssuerAndSerialNumber = IssuerAndSerialNumber3;
+    exports.IssuerAndSerialNumber = IssuerAndSerialNumber4;
     exports.IssuerSerial = IssuerSerial;
     exports.IssuingDistributionPoint = IssuingDistributionPoint;
     exports.KEKIdentifier = KEKIdentifier;
@@ -38572,7 +38628,7 @@ var require_build3 = __commonJS({
     exports.MICROS = MICROS;
     exports.MILLIS = MILLIS;
     exports.MacData = MacData;
-    exports.MessageImprint = MessageImprint;
+    exports.MessageImprint = MessageImprint2;
     exports.NameConstraints = NameConstraints;
     exports.OCSPRequest = OCSPRequest;
     exports.OCSPResponse = OCSPResponse;
@@ -38630,17 +38686,17 @@ var require_build3 = __commonJS({
     exports.SignedAndUnsignedAttributes = SignedAndUnsignedAttributes2;
     exports.SignedCertificateTimestamp = SignedCertificateTimestamp;
     exports.SignedCertificateTimestampList = SignedCertificateTimestampList;
-    exports.SignedData = SignedData4;
+    exports.SignedData = SignedData6;
     exports.SignedDataVerifyError = SignedDataVerifyError;
     exports.SignerInfo = SignerInfo3;
     exports.SingleResponse = SingleResponse;
     exports.SubjectDirectoryAttributes = SubjectDirectoryAttributes;
     exports.TBSRequest = TBSRequest;
-    exports.TSTInfo = TSTInfo;
+    exports.TSTInfo = TSTInfo2;
     exports.TYPE = TYPE$4;
     exports.TYPE_AND_VALUES = TYPE_AND_VALUES;
     exports.Time = Time;
-    exports.TimeStampReq = TimeStampReq;
+    exports.TimeStampReq = TimeStampReq2;
     exports.TimeStampResp = TimeStampResp;
     exports.V2Form = V2Form;
     exports.VALUE = VALUE$5;
@@ -38650,7 +38706,7 @@ var require_build3 = __commonJS({
     exports.createECDSASignatureFromCMS = createECDSASignatureFromCMS;
     exports.getAlgorithmByOID = getAlgorithmByOID;
     exports.getAlgorithmParameters = getAlgorithmParameters;
-    exports.getCrypto = getCrypto2;
+    exports.getCrypto = getCrypto3;
     exports.getEngine = getEngine;
     exports.getHashAlgorithm = getHashAlgorithm;
     exports.getOIDByAlgorithm = getOIDByAlgorithm;
@@ -38706,7 +38762,7 @@ var require_build3 = __commonJS({
     exports.id_sha384 = id_sha384;
     exports.id_sha512 = id_sha512;
     exports.kdf = kdf;
-    exports.setEngine = setEngine4;
+    exports.setEngine = setEngine5;
     exports.stringPrep = stringPrep;
     exports.verifySCTsForCertificate = verifySCTsForCertificate;
   }
@@ -40750,8 +40806,8 @@ var require_convert2 = __commonJS({
       static FromBase64(base643) {
         return index_js_1.convert.fromBase64(base643);
       }
-      static FromBase64Url(base64url3) {
-        return index_js_1.convert.fromBase64Url(base64url3);
+      static FromBase64Url(base64url4) {
+        return index_js_1.convert.fromBase64Url(base64url4);
       }
       static ToBase64Url(data) {
         return index_js_1.convert.toBase64Url(data);
@@ -40917,9 +40973,9 @@ var require_bit_string = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.BitString = void 0;
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
-    var asn1js3 = tslib_1.__importStar(require_build2());
+    var asn1js4 = tslib_1.__importStar(require_build2());
     var utils_1 = require_cjs2();
-    var BitString = class {
+    var BitString2 = class {
       unusedBits = 0;
       value = new ArrayBuffer(0);
       constructor(params, unusedBits = 0) {
@@ -40935,7 +40991,7 @@ var require_bit_string = __commonJS({
         }
       }
       fromASN(asn) {
-        if (!(asn instanceof asn1js3.BitString)) {
+        if (!(asn instanceof asn1js4.BitString)) {
           throw new TypeError("Argument 'asn' is not instance of ASN.1 BitString");
         }
         this.unusedBits = asn.valueBlock.unusedBits;
@@ -40943,13 +40999,13 @@ var require_bit_string = __commonJS({
         return this;
       }
       toASN() {
-        return new asn1js3.BitString({
+        return new asn1js4.BitString({
           unusedBits: this.unusedBits,
           valueHex: this.value
         });
       }
       toSchema(name) {
-        return new asn1js3.BitString({ name });
+        return new asn1js4.BitString({ name });
       }
       toNumber() {
         let res = "";
@@ -40977,7 +41033,7 @@ var require_bit_string = __commonJS({
         this.value = octets.buffer;
       }
     };
-    exports.BitString = BitString;
+    exports.BitString = BitString2;
   }
 });
 
@@ -40988,9 +41044,9 @@ var require_octet_string = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.OctetString = void 0;
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
-    var asn1js3 = tslib_1.__importStar(require_build2());
+    var asn1js4 = tslib_1.__importStar(require_build2());
     var utils_1 = require_cjs2();
-    var OctetString2 = class {
+    var OctetString3 = class {
       buffer;
       get byteLength() {
         return this.buffer.byteLength;
@@ -41012,20 +41068,20 @@ var require_octet_string = __commonJS({
         }
       }
       fromASN(asn) {
-        if (!(asn instanceof asn1js3.OctetString)) {
+        if (!(asn instanceof asn1js4.OctetString)) {
           throw new TypeError("Argument 'asn' is not instance of ASN.1 OctetString");
         }
         this.buffer = (0, utils_1.toArrayBuffer)(asn.valueBlock.valueHex);
         return this;
       }
       toASN() {
-        return new asn1js3.OctetString({ valueHex: this.buffer });
+        return new asn1js4.OctetString({ valueHex: this.buffer });
       }
       toSchema(name) {
-        return new asn1js3.OctetString({ name });
+        return new asn1js4.OctetString({ name });
       }
     };
-    exports.OctetString = OctetString2;
+    exports.OctetString = OctetString3;
   }
 });
 
@@ -41048,17 +41104,17 @@ var require_converters2 = __commonJS({
     exports.AsnNullConverter = exports.AsnGeneralizedTimeConverter = exports.AsnUTCTimeConverter = exports.AsnCharacterStringConverter = exports.AsnGeneralStringConverter = exports.AsnVisibleStringConverter = exports.AsnGraphicStringConverter = exports.AsnIA5StringConverter = exports.AsnVideotexStringConverter = exports.AsnTeletexStringConverter = exports.AsnPrintableStringConverter = exports.AsnNumericStringConverter = exports.AsnUniversalStringConverter = exports.AsnBmpStringConverter = exports.AsnUtf8StringConverter = exports.AsnConstructedOctetStringConverter = exports.AsnOctetStringConverter = exports.AsnBooleanConverter = exports.AsnRelativeObjectIdentifierConverter = exports.AsnObjectIdentifierConverter = exports.AsnBitStringConverter = exports.AsnIntegerBigIntConverter = exports.AsnIntegerArrayBufferConverter = exports.AsnEnumeratedConverter = exports.AsnIntegerConverter = exports.AsnAnyConverter = void 0;
     exports.defaultConverter = defaultConverter;
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
-    var asn1js3 = tslib_1.__importStar(require_build2());
+    var asn1js4 = tslib_1.__importStar(require_build2());
     var utils_1 = require_cjs2();
     var enums_1 = require_enums();
     var index_1 = require_types2();
     exports.AsnAnyConverter = {
-      fromASN: (value) => value instanceof asn1js3.Null ? null : (0, utils_1.toArrayBuffer)(value.valueBeforeDecodeView),
+      fromASN: (value) => value instanceof asn1js4.Null ? null : (0, utils_1.toArrayBuffer)(value.valueBeforeDecodeView),
       toASN: (value) => {
         if (value === null) {
-          return new asn1js3.Null();
+          return new asn1js4.Null();
         }
-        const schema = asn1js3.fromBER(value, { maxDepth: Infinity, maxNodes: Infinity, maxContentLength: Infinity });
+        const schema = asn1js4.fromBER(value, { maxDepth: Infinity, maxNodes: Infinity, maxContentLength: Infinity });
         if (schema.result.error) {
           throw new Error(schema.result.error);
         }
@@ -41067,39 +41123,39 @@ var require_converters2 = __commonJS({
     };
     exports.AsnIntegerConverter = {
       fromASN: (value) => value.valueBlock.valueHexView.byteLength >= 4 ? value.valueBlock.toString() : value.valueBlock.valueDec,
-      toASN: (value) => new asn1js3.Integer({ value: +value })
+      toASN: (value) => new asn1js4.Integer({ value: +value })
     };
     exports.AsnEnumeratedConverter = {
       fromASN: (value) => value.valueBlock.valueDec,
-      toASN: (value) => new asn1js3.Enumerated({ value })
+      toASN: (value) => new asn1js4.Enumerated({ value })
     };
     exports.AsnIntegerArrayBufferConverter = {
       fromASN: (value) => (0, utils_1.toArrayBuffer)(value.valueBlock.valueHexView),
-      toASN: (value) => new asn1js3.Integer({ valueHex: value })
+      toASN: (value) => new asn1js4.Integer({ valueHex: value })
     };
     exports.AsnIntegerBigIntConverter = {
       fromASN: (value) => value.toBigInt(),
-      toASN: (value) => asn1js3.Integer.fromBigInt(value)
+      toASN: (value) => asn1js4.Integer.fromBigInt(value)
     };
     exports.AsnBitStringConverter = {
       fromASN: (value) => (0, utils_1.toArrayBuffer)(value.valueBlock.valueHexView),
-      toASN: (value) => new asn1js3.BitString({ valueHex: value })
+      toASN: (value) => new asn1js4.BitString({ valueHex: value })
     };
     exports.AsnObjectIdentifierConverter = {
       fromASN: (value) => value.valueBlock.toString(),
-      toASN: (value) => new asn1js3.ObjectIdentifier({ value })
+      toASN: (value) => new asn1js4.ObjectIdentifier({ value })
     };
     exports.AsnRelativeObjectIdentifierConverter = {
       fromASN: (value) => value.valueBlock.toString(),
-      toASN: (value) => new asn1js3.RelativeObjectIdentifier({ value })
+      toASN: (value) => new asn1js4.RelativeObjectIdentifier({ value })
     };
     exports.AsnBooleanConverter = {
       fromASN: (value) => value.valueBlock.value,
-      toASN: (value) => new asn1js3.Boolean({ value })
+      toASN: (value) => new asn1js4.Boolean({ value })
     };
     exports.AsnOctetStringConverter = {
       fromASN: (value) => (0, utils_1.toArrayBuffer)(value.valueBlock.valueHexView),
-      toASN: (value) => new asn1js3.OctetString({ valueHex: value })
+      toASN: (value) => new asn1js4.OctetString({ valueHex: value })
     };
     exports.AsnConstructedOctetStringConverter = {
       fromASN: (value) => new index_1.OctetString(value.getValue()),
@@ -41111,30 +41167,30 @@ var require_converters2 = __commonJS({
         toASN: (value) => new Asn1Type({ value })
       };
     }
-    exports.AsnUtf8StringConverter = createStringConverter(asn1js3.Utf8String);
-    exports.AsnBmpStringConverter = createStringConverter(asn1js3.BmpString);
-    exports.AsnUniversalStringConverter = createStringConverter(asn1js3.UniversalString);
-    exports.AsnNumericStringConverter = createStringConverter(asn1js3.NumericString);
-    exports.AsnPrintableStringConverter = createStringConverter(asn1js3.PrintableString);
-    exports.AsnTeletexStringConverter = createStringConverter(asn1js3.TeletexString);
-    exports.AsnVideotexStringConverter = createStringConverter(asn1js3.VideotexString);
-    exports.AsnIA5StringConverter = createStringConverter(asn1js3.IA5String);
-    exports.AsnGraphicStringConverter = createStringConverter(asn1js3.GraphicString);
-    exports.AsnVisibleStringConverter = createStringConverter(asn1js3.VisibleString);
-    exports.AsnGeneralStringConverter = createStringConverter(asn1js3.GeneralString);
-    exports.AsnCharacterStringConverter = createStringConverter(asn1js3.CharacterString);
+    exports.AsnUtf8StringConverter = createStringConverter(asn1js4.Utf8String);
+    exports.AsnBmpStringConverter = createStringConverter(asn1js4.BmpString);
+    exports.AsnUniversalStringConverter = createStringConverter(asn1js4.UniversalString);
+    exports.AsnNumericStringConverter = createStringConverter(asn1js4.NumericString);
+    exports.AsnPrintableStringConverter = createStringConverter(asn1js4.PrintableString);
+    exports.AsnTeletexStringConverter = createStringConverter(asn1js4.TeletexString);
+    exports.AsnVideotexStringConverter = createStringConverter(asn1js4.VideotexString);
+    exports.AsnIA5StringConverter = createStringConverter(asn1js4.IA5String);
+    exports.AsnGraphicStringConverter = createStringConverter(asn1js4.GraphicString);
+    exports.AsnVisibleStringConverter = createStringConverter(asn1js4.VisibleString);
+    exports.AsnGeneralStringConverter = createStringConverter(asn1js4.GeneralString);
+    exports.AsnCharacterStringConverter = createStringConverter(asn1js4.CharacterString);
     exports.AsnUTCTimeConverter = {
       fromASN: (value) => value.toDate(),
-      toASN: (value) => new asn1js3.UTCTime({ valueDate: value })
+      toASN: (value) => new asn1js4.UTCTime({ valueDate: value })
     };
     exports.AsnGeneralizedTimeConverter = {
       fromASN: (value) => value.toDate(),
-      toASN: (value) => new asn1js3.GeneralizedTime({ valueDate: value })
+      toASN: (value) => new asn1js4.GeneralizedTime({ valueDate: value })
     };
     exports.AsnNullConverter = {
       fromASN: () => null,
       toASN: () => {
-        return new asn1js3.Null();
+        return new asn1js4.Null();
       }
     };
     function defaultConverter(type) {
@@ -41247,7 +41303,7 @@ var require_schema = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.AsnSchemaStorage = void 0;
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
-    var asn1js3 = tslib_1.__importStar(require_build2());
+    var asn1js4 = tslib_1.__importStar(require_build2());
     var enums_1 = require_enums();
     var helper_1 = require_helper();
     var AsnSchemaStorage = class {
@@ -41292,7 +41348,7 @@ var require_schema = __commonJS({
           let asn1Item;
           if (typeof item.type === "number") {
             const Asn1TypeName = enums_1.AsnPropTypes[item.type];
-            const Asn1Type = asn1js3[Asn1TypeName];
+            const Asn1Type = asn1js4[Asn1TypeName];
             if (!Asn1Type) {
               throw new Error(`Cannot get ASN1 class by name '${Asn1TypeName}'`);
             }
@@ -41303,22 +41359,22 @@ var require_schema = __commonJS({
           } else if (item.optional) {
             const itemSchema = this.get(item.type);
             if (itemSchema.type === enums_1.AsnTypeTypes.Choice) {
-              asn1Item = new asn1js3.Any({ name });
+              asn1Item = new asn1js4.Any({ name });
             } else {
               asn1Item = this.create(item.type, false);
               asn1Item.name = name;
             }
           } else {
-            asn1Item = new asn1js3.Any({ name });
+            asn1Item = new asn1js4.Any({ name });
           }
           const optional2 = !!item.optional || item.defaultValue !== void 0;
           if (item.repeated) {
             asn1Item.name = "";
-            const Container = item.repeated === "set" ? asn1js3.Set : asn1js3.Sequence;
+            const Container = item.repeated === "set" ? asn1js4.Set : asn1js4.Sequence;
             asn1Item = new Container({
               name: "",
               value: [
-                new asn1js3.Repeated({
+                new asn1js4.Repeated({
                   name,
                   value: asn1Item
                 })
@@ -41328,7 +41384,7 @@ var require_schema = __commonJS({
           if (item.context !== null && item.context !== void 0) {
             if (item.implicit) {
               if (typeof item.type === "number" || (0, helper_1.isConvertible)(item.type)) {
-                const Container = item.repeated ? asn1js3.Constructed : asn1js3.Primitive;
+                const Container = item.repeated ? asn1js4.Constructed : asn1js4.Primitive;
                 asn1Value.push(new Container({
                   name,
                   optional: optional2,
@@ -41342,7 +41398,7 @@ var require_schema = __commonJS({
                 const isRepeated = !!item.repeated;
                 let value = !isRepeated ? this.get(item.type, true).schema : asn1Item;
                 value = "valueBlock" in value ? value.valueBlock.value : value.value;
-                asn1Value.push(new asn1js3.Constructed({
+                asn1Value.push(new asn1js4.Constructed({
                   name: !isRepeated ? name : "",
                   optional: optional2,
                   idBlock: {
@@ -41353,7 +41409,7 @@ var require_schema = __commonJS({
                 }));
               }
             } else {
-              asn1Value.push(new asn1js3.Constructed({
+              asn1Value.push(new asn1js4.Constructed({
                 optional: optional2,
                 idBlock: {
                   tagClass: 3,
@@ -41369,17 +41425,17 @@ var require_schema = __commonJS({
         }
         switch (schema.type) {
           case enums_1.AsnTypeTypes.Sequence:
-            return new asn1js3.Sequence({
+            return new asn1js4.Sequence({
               value: asn1Value,
               name: ""
             });
           case enums_1.AsnTypeTypes.Set:
-            return new asn1js3.Set({
+            return new asn1js4.Set({
               value: asn1Value,
               name: ""
             });
           case enums_1.AsnTypeTypes.Choice:
-            return new asn1js3.Choice({
+            return new asn1js4.Choice({
               value: asn1Value,
               name: ""
             });
@@ -41501,7 +41557,7 @@ var require_parser = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.AsnParser = void 0;
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
-    var asn1js3 = tslib_1.__importStar(require_build2());
+    var asn1js4 = tslib_1.__importStar(require_build2());
     var utils_1 = require_cjs2();
     var enums_1 = require_enums();
     var converters = tslib_1.__importStar(require_converters2());
@@ -41510,7 +41566,7 @@ var require_parser = __commonJS({
     var storage_1 = require_storage();
     var AsnParser = class {
       static parse(data, target, options) {
-        const asn1Parsed = asn1js3.fromBER((0, utils_1.toArrayBuffer)(data), options?.berOptions);
+        const asn1Parsed = asn1js4.fromBER((0, utils_1.toArrayBuffer)(data), options?.berOptions);
         if (asn1Parsed.result.error) {
           throw new Error(asn1Parsed.result.error);
         }
@@ -41548,14 +41604,14 @@ var require_parser = __commonJS({
         }
       }
       static handleChoiceTypes(asn1Schema, schema, target, targetSchema, options) {
-        if (asn1Schema.constructor === asn1js3.Constructed && schema.type === enums_1.AsnTypeTypes.Choice && asn1Schema.idBlock.tagClass === 3) {
+        if (asn1Schema.constructor === asn1js4.Constructed && schema.type === enums_1.AsnTypeTypes.Choice && asn1Schema.idBlock.tagClass === 3) {
           for (const key2 in schema.items) {
             const schemaItem = schema.items[key2];
             if (schemaItem.context === asn1Schema.idBlock.tagNumber && schemaItem.implicit) {
               if (typeof schemaItem.type === "function" && storage_1.schemaStorage.has(schemaItem.type)) {
                 const fieldSchema = storage_1.schemaStorage.get(schemaItem.type);
                 if (fieldSchema && fieldSchema.type === enums_1.AsnTypeTypes.Sequence) {
-                  const newSeq = new asn1js3.Sequence();
+                  const newSeq = new asn1js4.Sequence();
                   if ("value" in asn1Schema.valueBlock && Array.isArray(asn1Schema.valueBlock.value) && "value" in newSeq.valueBlock) {
                     newSeq.valueBlock.value = asn1Schema.valueBlock.value;
                     const fieldValue = this.fromASN(newSeq, schemaItem.type, options);
@@ -41567,8 +41623,8 @@ var require_parser = __commonJS({
               }
             }
           }
-        } else if (asn1Schema.constructor === asn1js3.Constructed && schema.type !== enums_1.AsnTypeTypes.Choice) {
-          const newTargetSchema = new asn1js3.Constructed({
+        } else if (asn1Schema.constructor === asn1js4.Constructed && schema.type !== enums_1.AsnTypeTypes.Choice) {
+          const newTargetSchema = new asn1js4.Constructed({
             idBlock: {
               tagClass: 3,
               tagNumber: asn1Schema.idBlock.tagNumber
@@ -41584,13 +41640,13 @@ var require_parser = __commonJS({
       }
       static handleSequenceTypes(asn1Schema, schema, target, targetSchema) {
         if (schema.type === enums_1.AsnTypeTypes.Sequence) {
-          const asn1ComparedSchema = asn1js3.compareSchema({}, asn1Schema, targetSchema);
+          const asn1ComparedSchema = asn1js4.compareSchema({}, asn1Schema, targetSchema);
           if (!asn1ComparedSchema.verified) {
             throw new errors_1.AsnSchemaValidationError(`Data does not match to ${target.name} ASN1 schema.${asn1ComparedSchema.result.error ? ` ${asn1ComparedSchema.result.error}` : ""}`);
           }
           return asn1ComparedSchema;
         } else {
-          const asn1ComparedSchema = asn1js3.compareSchema({}, asn1Schema, targetSchema);
+          const asn1ComparedSchema = asn1js4.compareSchema({}, asn1Schema, targetSchema);
           if (!asn1ComparedSchema.verified) {
             throw new errors_1.AsnSchemaValidationError(`Data does not match to ${target.name} ASN1 schema.${asn1ComparedSchema.result.error ? ` ${asn1ComparedSchema.result.error}` : ""}`);
           }
@@ -41699,10 +41755,10 @@ var require_parser = __commonJS({
       }
       static processRepeatedPrimitiveItem(asn1SchemaValue, schemaItem, converter, options) {
         if (schemaItem.implicit) {
-          const Container = schemaItem.repeated === "sequence" ? asn1js3.Sequence : asn1js3.Set;
+          const Container = schemaItem.repeated === "sequence" ? asn1js4.Sequence : asn1js4.Set;
           const newItem = new Container();
           newItem.valueBlock = asn1SchemaValue.valueBlock;
-          const newItemAsn = asn1js3.fromBER(newItem.toBER(false), options?.berOptions);
+          const newItemAsn = asn1js4.fromBER(newItem.toBER(false), options?.berOptions);
           if (newItemAsn.offset === -1) {
             throw new Error(`Cannot parse the child item. ${newItemAsn.result.error}`);
           }
@@ -41723,14 +41779,14 @@ var require_parser = __commonJS({
             newItem = new schemaItemType().toSchema("");
           } else {
             const Asn1TypeName = enums_1.AsnPropTypes[schemaItemType];
-            const Asn1Type = asn1js3[Asn1TypeName];
+            const Asn1Type = asn1js4[Asn1TypeName];
             if (!Asn1Type) {
               throw new Error(`Cannot get '${Asn1TypeName}' class from asn1js module`);
             }
             newItem = new Asn1Type();
           }
           newItem.valueBlock = value.valueBlock;
-          value = asn1js3.fromBER(newItem.toBER(false), options?.berOptions).result;
+          value = asn1js4.fromBER(newItem.toBER(false), options?.berOptions).result;
         }
         return converter.fromASN(value);
       }
@@ -41767,13 +41823,13 @@ var require_parser = __commonJS({
         if (schemaItem.implicit && typeof schemaItem.context === "number") {
           const schema = storage_1.schemaStorage.get(schemaItemType);
           if (schema.type === enums_1.AsnTypeTypes.Sequence) {
-            const newSeq = new asn1js3.Sequence();
+            const newSeq = new asn1js4.Sequence();
             if ("value" in asn1SchemaValue.valueBlock && Array.isArray(asn1SchemaValue.valueBlock.value) && "value" in newSeq.valueBlock) {
               newSeq.valueBlock.value = asn1SchemaValue.valueBlock.value;
               return newSeq;
             }
           } else if (schema.type === enums_1.AsnTypeTypes.Set) {
-            const newSet = new asn1js3.Set();
+            const newSet = new asn1js4.Set();
             if ("value" in asn1SchemaValue.valueBlock && Array.isArray(asn1SchemaValue.valueBlock.value) && "value" in newSet.valueBlock) {
               newSet.valueBlock.value = asn1SchemaValue.valueBlock.value;
               return newSet;
@@ -41794,7 +41850,7 @@ var require_serializer = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.AsnSerializer = void 0;
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
-    var asn1js3 = tslib_1.__importStar(require_build2());
+    var asn1js4 = tslib_1.__importStar(require_build2());
     var utils_1 = require_cjs2();
     var converters = tslib_1.__importStar(require_converters2());
     var enums_1 = require_enums();
@@ -41802,7 +41858,7 @@ var require_serializer = __commonJS({
     var storage_1 = require_storage();
     var AsnSerializer = class _AsnSerializer {
       static serialize(obj) {
-        if (obj instanceof asn1js3.BaseBlock) {
+        if (obj instanceof asn1js4.BaseBlock) {
           return obj.toBER(false);
         }
         return this.toASN(obj).toBER(false);
@@ -41843,8 +41899,8 @@ var require_serializer = __commonJS({
               if (schemaItem.implicit) {
                 if (!schemaItem.repeated && (typeof schemaItem.type === "number" || (0, helper_1.isConvertible)(schemaItem.type))) {
                   const value = {};
-                  value.valueHex = asn1Item instanceof asn1js3.Null ? (0, utils_1.toArrayBuffer)(asn1Item.valueBeforeDecodeView) : asn1Item.valueBlock.toBER();
-                  asn1Value.push(new asn1js3.Primitive({
+                  value.valueHex = asn1Item instanceof asn1js4.Null ? (0, utils_1.toArrayBuffer)(asn1Item.valueBeforeDecodeView) : asn1Item.valueBlock.toBER();
+                  asn1Value.push(new asn1js4.Primitive({
                     optional: schemaItem.optional,
                     idBlock: {
                       tagClass: 3,
@@ -41853,7 +41909,7 @@ var require_serializer = __commonJS({
                     ...value
                   }));
                 } else {
-                  asn1Value.push(new asn1js3.Constructed({
+                  asn1Value.push(new asn1js4.Constructed({
                     optional: schemaItem.optional,
                     idBlock: {
                       tagClass: 3,
@@ -41863,7 +41919,7 @@ var require_serializer = __commonJS({
                   }));
                 }
               } else {
-                asn1Value.push(new asn1js3.Constructed({
+                asn1Value.push(new asn1js4.Constructed({
                   optional: schemaItem.optional,
                   idBlock: {
                     tagClass: 3,
@@ -41882,10 +41938,10 @@ var require_serializer = __commonJS({
         let asnSchema;
         switch (schema.type) {
           case enums_1.AsnTypeTypes.Sequence:
-            asnSchema = new asn1js3.Sequence({ value: asn1Value });
+            asnSchema = new asn1js4.Sequence({ value: asn1Value });
             break;
           case enums_1.AsnTypeTypes.Set:
-            asnSchema = new asn1js3.Set({ value: asn1Value });
+            asnSchema = new asn1js4.Set({ value: asn1Value });
             break;
           case enums_1.AsnTypeTypes.Choice:
             if (!asn1Value[0]) {
@@ -41908,7 +41964,7 @@ var require_serializer = __commonJS({
               throw new TypeError("Parameter 'objProp' should be type of Array.");
             }
             const items = Array.from(objProp, (element) => converter.toASN(element));
-            const Container = schemaItem.repeated === "sequence" ? asn1js3.Sequence : asn1js3.Set;
+            const Container = schemaItem.repeated === "sequence" ? asn1js4.Sequence : asn1js4.Set;
             asn1Item = new Container({ value: items });
           } else {
             asn1Item = converter.toASN(objProp);
@@ -41919,7 +41975,7 @@ var require_serializer = __commonJS({
               throw new TypeError("Parameter 'objProp' should be type of Array.");
             }
             const items = Array.from(objProp, (element) => this.toASN(element));
-            const Container = schemaItem.repeated === "sequence" ? asn1js3.Sequence : asn1js3.Set;
+            const Container = schemaItem.repeated === "sequence" ? asn1js4.Sequence : asn1js4.Set;
             asn1Item = new Container({ value: items });
           } else {
             asn1Item = this.toASN(objProp);
@@ -41961,7 +42017,7 @@ var require_convert3 = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.AsnConvert = void 0;
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
-    var asn1js3 = tslib_1.__importStar(require_build2());
+    var asn1js4 = tslib_1.__importStar(require_build2());
     var utils_1 = require_cjs2();
     var parser_1 = require_parser();
     var serializer_1 = require_serializer();
@@ -41974,7 +42030,7 @@ var require_convert3 = __commonJS({
       }
       static toString(data, options) {
         const buf = (0, utils_1.isBufferSource)(data) ? (0, utils_1.toArrayBuffer)(data) : _AsnConvert.serialize(data);
-        const asn = asn1js3.fromBER(buf, options?.berOptions);
+        const asn = asn1js4.fromBER(buf, options?.berOptions);
         if (asn.offset === -1) {
           throw new Error(`Cannot decode ASN.1 data. ${asn.result.error}`);
         }
@@ -42312,16 +42368,16 @@ var require_name = __commonJS({
         itemType: RelativeDistinguishedName
       })
     ], RDNSequence);
-    var Name = Name_1 = class Name extends RDNSequence {
+    var Name2 = Name_1 = class Name extends RDNSequence {
       constructor(items) {
         super(items);
         Object.setPrototypeOf(this, Name_1.prototype);
       }
     };
-    exports.Name = Name;
-    exports.Name = Name = Name_1 = tslib_1.__decorate([
+    exports.Name = Name2;
+    exports.Name = Name2 = Name_1 = tslib_1.__decorate([
       (0, asn1_schema_1.AsnType)({ type: asn1_schema_1.AsnTypeTypes.Sequence })
-    ], Name);
+    ], Name2);
   }
 });
 
@@ -43732,7 +43788,7 @@ var require_algorithm_identifier = __commonJS({
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
     var asn1_schema_1 = require_cjs3();
     var bytes_1 = require_bytes();
-    var AlgorithmIdentifier2 = class _AlgorithmIdentifier {
+    var AlgorithmIdentifier3 = class _AlgorithmIdentifier {
       algorithm = "";
       parameters;
       constructor(params = {}) {
@@ -43742,16 +43798,16 @@ var require_algorithm_identifier = __commonJS({
         return data instanceof _AlgorithmIdentifier && data.algorithm == this.algorithm && (data.parameters && this.parameters && (0, bytes_1.equal)(data.parameters, this.parameters) || data.parameters === this.parameters);
       }
     };
-    exports.AlgorithmIdentifier = AlgorithmIdentifier2;
+    exports.AlgorithmIdentifier = AlgorithmIdentifier3;
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({ type: asn1_schema_1.AsnPropTypes.ObjectIdentifier })
-    ], AlgorithmIdentifier2.prototype, "algorithm", void 0);
+    ], AlgorithmIdentifier3.prototype, "algorithm", void 0);
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({
         type: asn1_schema_1.AsnPropTypes.Any,
         optional: true
       })
-    ], AlgorithmIdentifier2.prototype, "parameters", void 0);
+    ], AlgorithmIdentifier3.prototype, "parameters", void 0);
   }
 });
 
@@ -44013,7 +44069,7 @@ var require_certificate = __commonJS({
     var asn1_schema_1 = require_cjs3();
     var algorithm_identifier_1 = require_algorithm_identifier();
     var tbs_certificate_1 = require_tbs_certificate();
-    var Certificate4 = class {
+    var Certificate6 = class {
       tbsCertificate = new tbs_certificate_1.TBSCertificate();
       tbsCertificateRaw;
       signatureAlgorithm = new algorithm_identifier_1.AlgorithmIdentifier();
@@ -44022,19 +44078,19 @@ var require_certificate = __commonJS({
         Object.assign(this, params);
       }
     };
-    exports.Certificate = Certificate4;
+    exports.Certificate = Certificate6;
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({
         type: tbs_certificate_1.TBSCertificate,
         raw: true
       })
-    ], Certificate4.prototype, "tbsCertificate", void 0);
+    ], Certificate6.prototype, "tbsCertificate", void 0);
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({ type: algorithm_identifier_1.AlgorithmIdentifier })
-    ], Certificate4.prototype, "signatureAlgorithm", void 0);
+    ], Certificate6.prototype, "signatureAlgorithm", void 0);
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({ type: asn1_schema_1.AsnPropTypes.BitString })
-    ], Certificate4.prototype, "signatureValue", void 0);
+    ], Certificate6.prototype, "signatureValue", void 0);
   }
 });
 
@@ -44196,23 +44252,23 @@ var require_issuer_and_serial_number = __commonJS({
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
     var asn1_schema_1 = require_cjs3();
     var asn1_x509_1 = require_cjs4();
-    var IssuerAndSerialNumber3 = class {
+    var IssuerAndSerialNumber4 = class {
       issuer = new asn1_x509_1.Name();
       serialNumber = new ArrayBuffer(0);
       constructor(params = {}) {
         Object.assign(this, params);
       }
     };
-    exports.IssuerAndSerialNumber = IssuerAndSerialNumber3;
+    exports.IssuerAndSerialNumber = IssuerAndSerialNumber4;
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({ type: asn1_x509_1.Name })
-    ], IssuerAndSerialNumber3.prototype, "issuer", void 0);
+    ], IssuerAndSerialNumber4.prototype, "issuer", void 0);
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({
         type: asn1_schema_1.AsnPropTypes.Integer,
         converter: asn1_schema_1.AsnIntegerArrayBufferConverter
       })
-    ], IssuerAndSerialNumber3.prototype, "serialNumber", void 0);
+    ], IssuerAndSerialNumber4.prototype, "serialNumber", void 0);
   }
 });
 
@@ -45375,23 +45431,23 @@ var require_content_info = __commonJS({
     exports.ContentInfo = void 0;
     var tslib_1 = (init_tslib_es6(), __toCommonJS(tslib_es6_exports));
     var asn1_schema_1 = require_cjs3();
-    var ContentInfo4 = class {
+    var ContentInfo6 = class {
       contentType = "";
       content = new ArrayBuffer(0);
       constructor(params = {}) {
         Object.assign(this, params);
       }
     };
-    exports.ContentInfo = ContentInfo4;
+    exports.ContentInfo = ContentInfo6;
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({ type: asn1_schema_1.AsnPropTypes.ObjectIdentifier })
-    ], ContentInfo4.prototype, "contentType", void 0);
+    ], ContentInfo6.prototype, "contentType", void 0);
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({
         type: asn1_schema_1.AsnPropTypes.Any,
         context: 0
       })
-    ], ContentInfo4.prototype, "content", void 0);
+    ], ContentInfo6.prototype, "content", void 0);
   }
 });
 
@@ -46171,7 +46227,7 @@ var require_signed_data = __commonJS({
         itemType: types_1.DigestAlgorithmIdentifier
       })
     ], DigestAlgorithmIdentifiers);
-    var SignedData4 = class {
+    var SignedData6 = class {
       version = types_1.CMSVersion.v0;
       digestAlgorithms = new DigestAlgorithmIdentifiers();
       encapContentInfo = new encapsulated_content_info_1.EncapsulatedContentInfo();
@@ -46182,16 +46238,16 @@ var require_signed_data = __commonJS({
         Object.assign(this, params);
       }
     };
-    exports.SignedData = SignedData4;
+    exports.SignedData = SignedData6;
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({ type: asn1_schema_1.AsnPropTypes.Integer })
-    ], SignedData4.prototype, "version", void 0);
+    ], SignedData6.prototype, "version", void 0);
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({ type: DigestAlgorithmIdentifiers })
-    ], SignedData4.prototype, "digestAlgorithms", void 0);
+    ], SignedData6.prototype, "digestAlgorithms", void 0);
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({ type: encapsulated_content_info_1.EncapsulatedContentInfo })
-    ], SignedData4.prototype, "encapContentInfo", void 0);
+    ], SignedData6.prototype, "encapContentInfo", void 0);
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({
         type: certificate_choices_1.CertificateSet,
@@ -46199,7 +46255,7 @@ var require_signed_data = __commonJS({
         implicit: true,
         optional: true
       })
-    ], SignedData4.prototype, "certificates", void 0);
+    ], SignedData6.prototype, "certificates", void 0);
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({
         type: revocation_info_choice_1.RevocationInfoChoices,
@@ -46207,10 +46263,10 @@ var require_signed_data = __commonJS({
         implicit: true,
         optional: true
       })
-    ], SignedData4.prototype, "crls", void 0);
+    ], SignedData6.prototype, "crls", void 0);
     tslib_1.__decorate([
       (0, asn1_schema_1.AsnProp)({ type: signer_info_1.SignerInfos })
-    ], SignedData4.prototype, "signerInfos", void 0);
+    ], SignedData6.prototype, "signerInfos", void 0);
   }
 });
 
@@ -50106,7 +50162,7 @@ var require_x509_cjs = __commonJS({
     function escape2(data) {
       return data.replace(/([,+"\\<>;])/g, "\\$1").replace(/^([ #])/, "\\$1").replace(/([ ]$)/, "\\$1").replace(/([\r\n\t])/, replaceUnknownCharacter);
     }
-    var Name = class _Name {
+    var Name2 = class _Name {
       static isASCII(text) {
         for (let i = 0; i < text.length; i++) {
           const code = text.charCodeAt(i);
@@ -50306,7 +50362,7 @@ var require_x509_cjs = __commonJS({
         if (args.length === 2) {
           switch (args[0]) {
             case DN: {
-              const derName = new Name(args[1]).toArrayBuffer();
+              const derName = new Name2(args[1]).toArrayBuffer();
               const asnName = asn1Schema.AsnConvert.parse(derName, asn1X509__namespace.Name);
               name = new asn1X509__namespace.GeneralName({ directoryName: asnName });
               break;
@@ -50382,7 +50438,7 @@ var require_x509_cjs = __commonJS({
           this.value = asn.registeredID;
         } else if (asn.directoryName != void 0) {
           this.type = DN;
-          this.value = new Name(asn.directoryName).toString();
+          this.value = new Name2(asn.directoryName).toString();
         } else if (asn.otherName != void 0) {
           if (asn.otherName.typeId === id_GUID) {
             this.type = GUID;
@@ -50874,7 +50930,7 @@ var require_x509_cjs = __commonJS({
       ExtendedKeyUsage["timeStamping"] = "1.3.6.1.5.5.7.3.8";
       ExtendedKeyUsage["ocspSigning"] = "1.3.6.1.5.5.7.3.9";
     })(exports.ExtendedKeyUsage || (exports.ExtendedKeyUsage = {}));
-    var ExtendedKeyUsageExtension = class extends Extension {
+    var ExtendedKeyUsageExtension2 = class extends Extension {
       constructor(...args) {
         if (pvtsutils.BufferSourceConverter.isBufferSource(args[0])) {
           super(args[0], args[1]);
@@ -50892,7 +50948,7 @@ var require_x509_cjs = __commonJS({
         return obj;
       }
     };
-    ExtendedKeyUsageExtension.NAME = "Extended Key Usages";
+    ExtendedKeyUsageExtension2.NAME = "Extended Key Usages";
     exports.KeyUsageFlags = void 0;
     (function(KeyUsageFlags) {
       KeyUsageFlags[KeyUsageFlags["digitalSignature"] = 1] = "digitalSignature";
@@ -51697,7 +51753,7 @@ var require_x509_cjs = __commonJS({
     var Pkcs10CertificateRequest = class extends PemData {
       get subjectName() {
         if (!tslib.__classPrivateFieldGet(this, _Pkcs10CertificateRequest_subjectName, "f")) {
-          tslib.__classPrivateFieldSet(this, _Pkcs10CertificateRequest_subjectName, new Name(this.asn.certificationRequestInfo.subject), "f");
+          tslib.__classPrivateFieldSet(this, _Pkcs10CertificateRequest_subjectName, new Name2(this.asn.certificationRequestInfo.subject), "f");
         }
         return tslib.__classPrivateFieldGet(this, _Pkcs10CertificateRequest_subjectName, "f");
       }
@@ -51847,7 +51903,7 @@ var require_x509_cjs = __commonJS({
           })
         });
         if (params.name) {
-          const name = params.name instanceof Name ? params.name : new Name(params.name);
+          const name = params.name instanceof Name2 ? params.name : new Name2(params.name);
           asnReq.certificationRequestInfo.subject = asn1Schema.AsnConvert.parse(name.toArrayBuffer(), asn1X509.Name);
         }
         if (params.attributes) {
@@ -51931,7 +51987,7 @@ var require_x509_cjs = __commonJS({
     var _X509Certificate_signature;
     var _X509Certificate_extensions;
     var _X509Certificate_publicKey;
-    var X509Certificate3 = class extends PemData {
+    var X509Certificate4 = class extends PemData {
       get publicKey() {
         if (!tslib.__classPrivateFieldGet(this, _X509Certificate_publicKey, "f")) {
           tslib.__classPrivateFieldSet(this, _X509Certificate_publicKey, new PublicKey(this.asn.tbsCertificate.subjectPublicKeyInfo, this.parseOptions), "f");
@@ -51946,7 +52002,7 @@ var require_x509_cjs = __commonJS({
       }
       get subjectName() {
         if (!tslib.__classPrivateFieldGet(this, _X509Certificate_subjectName, "f")) {
-          tslib.__classPrivateFieldSet(this, _X509Certificate_subjectName, new Name(this.asn.tbsCertificate.subject), "f");
+          tslib.__classPrivateFieldSet(this, _X509Certificate_subjectName, new Name2(this.asn.tbsCertificate.subject), "f");
         }
         return tslib.__classPrivateFieldGet(this, _X509Certificate_subjectName, "f");
       }
@@ -51958,7 +52014,7 @@ var require_x509_cjs = __commonJS({
       }
       get issuerName() {
         if (!tslib.__classPrivateFieldGet(this, _X509Certificate_issuerName, "f")) {
-          tslib.__classPrivateFieldSet(this, _X509Certificate_issuerName, new Name(this.asn.tbsCertificate.issuer), "f");
+          tslib.__classPrivateFieldSet(this, _X509Certificate_issuerName, new Name2(this.asn.tbsCertificate.issuer), "f");
         }
         return tslib.__classPrivateFieldGet(this, _X509Certificate_issuerName, "f");
       }
@@ -52174,7 +52230,7 @@ var require_x509_cjs = __commonJS({
       }
     };
     _X509Certificate_tbs = /* @__PURE__ */ new WeakMap(), _X509Certificate_serialNumber = /* @__PURE__ */ new WeakMap(), _X509Certificate_subjectName = /* @__PURE__ */ new WeakMap(), _X509Certificate_subject = /* @__PURE__ */ new WeakMap(), _X509Certificate_issuerName = /* @__PURE__ */ new WeakMap(), _X509Certificate_issuer = /* @__PURE__ */ new WeakMap(), _X509Certificate_notBefore = /* @__PURE__ */ new WeakMap(), _X509Certificate_notAfter = /* @__PURE__ */ new WeakMap(), _X509Certificate_signatureAlgorithm = /* @__PURE__ */ new WeakMap(), _X509Certificate_signature = /* @__PURE__ */ new WeakMap(), _X509Certificate_extensions = /* @__PURE__ */ new WeakMap(), _X509Certificate_publicKey = /* @__PURE__ */ new WeakMap();
-    X509Certificate3.NAME = "Certificate";
+    X509Certificate4.NAME = "Certificate";
     var _X509Certificates_options;
     var X509Certificates = class extends Array {
       constructor(param, options) {
@@ -52182,7 +52238,7 @@ var require_x509_cjs = __commonJS({
         _X509Certificates_options.set(this, void 0);
         if (PemData.isAsnEncoded(param)) {
           this.import(param, options);
-        } else if (param instanceof X509Certificate3) {
+        } else if (param instanceof X509Certificate4) {
           this.push(param);
         } else if (Array.isArray(param)) {
           for (const item of param) {
@@ -52220,7 +52276,7 @@ var require_x509_cjs = __commonJS({
         const certificates = [];
         for (const item of signedData.certificates || []) {
           if (item.certificate) {
-            certificates.push(new X509Certificate3(item.certificate, options));
+            certificates.push(new X509Certificate4(item.certificate, options));
           }
         }
         this.clear();
@@ -52380,11 +52436,11 @@ var require_x509_cjs = __commonJS({
           })
         });
         if (params.subject) {
-          const name = params.subject instanceof Name ? params.subject : new Name(params.subject);
+          const name = params.subject instanceof Name2 ? params.subject : new Name2(params.subject);
           asnX509.tbsCertificate.subject = asn1Schema.AsnConvert.parse(name.toArrayBuffer(), asn1X509__namespace.Name);
         }
         if (params.issuer) {
-          const name = params.issuer instanceof Name ? params.issuer : new Name(params.issuer);
+          const name = params.issuer instanceof Name2 ? params.issuer : new Name2(params.issuer);
           asnX509.tbsCertificate.issuer = asn1Schema.AsnConvert.parse(name.toArrayBuffer(), asn1X509__namespace.Name);
         }
         const defaultSigningAlgorithm = { hash: "SHA-256" };
@@ -52412,7 +52468,7 @@ var require_x509_cjs = __commonJS({
           throw Error("Cannot convert ASN.1 signature value to WebCrypto format");
         }
         asnX509.signatureValue = asnSignature;
-        return new X509Certificate3(asn1Schema.AsnConvert.serialize(asnX509));
+        return new X509Certificate4(asn1Schema.AsnConvert.serialize(asnX509));
       }
     };
     var _X509CrlEntry_serialNumber;
@@ -52520,7 +52576,7 @@ var require_x509_cjs = __commonJS({
     var _X509Crl_nextUpdate;
     var _X509Crl_entries;
     var _X509Crl_extensions;
-    var X509Crl2 = class extends PemData {
+    var X509Crl = class extends PemData {
       get version() {
         return this.asn.tbsCertList.version;
       }
@@ -52539,7 +52595,7 @@ var require_x509_cjs = __commonJS({
       }
       get issuerName() {
         if (!tslib.__classPrivateFieldGet(this, _X509Crl_issuerName, "f")) {
-          tslib.__classPrivateFieldSet(this, _X509Crl_issuerName, new Name(this.asn.tbsCertList.issuer), "f");
+          tslib.__classPrivateFieldSet(this, _X509Crl_issuerName, new Name2(this.asn.tbsCertList.issuer), "f");
         }
         return tslib.__classPrivateFieldGet(this, _X509Crl_issuerName, "f");
       }
@@ -52633,7 +52689,7 @@ var require_x509_cjs = __commonJS({
         let publicKey;
         const paramsKey = params.publicKey;
         try {
-          if (paramsKey instanceof X509Certificate3) {
+          if (paramsKey instanceof X509Certificate4) {
             keyAlgorithm = {
               ...paramsKey.publicKey.algorithm,
               ...paramsKey.signatureAlgorithm
@@ -52697,7 +52753,7 @@ var require_x509_cjs = __commonJS({
     var X509CrlGenerator = class {
       static async create(params, crypto3 = cryptoProvider.get()) {
         var _a4;
-        const name = params.issuer instanceof Name ? params.issuer : new Name(params.issuer);
+        const name = params.issuer instanceof Name2 ? params.issuer : new Name2(params.issuer);
         const asnX509Crl = new asn1X509__namespace.CertificateList({
           tbsCertList: new asn1X509__namespace.TBSCertList({
             version: asn1X509__namespace.Version.v2,
@@ -52744,7 +52800,7 @@ var require_x509_cjs = __commonJS({
                 }));
               }
               if (entry.issuer) {
-                const name2 = params.issuer instanceof Name ? params.issuer : new Name(params.issuer);
+                const name2 = params.issuer instanceof Name2 ? params.issuer : new Name2(params.issuer);
                 revokedCert.crlEntryExtensions.push(new asn1X509__namespace.Extension({
                   extnID: asn1X509__namespace.id_ce_certificateIssuer,
                   critical: false,
@@ -52775,11 +52831,11 @@ var require_x509_cjs = __commonJS({
           throw Error("Cannot convert ASN.1 signature value to WebCrypto format");
         }
         asnX509Crl.signature = asnSignature;
-        return new X509Crl2(asn1Schema.AsnConvert.serialize(asnX509Crl));
+        return new X509Crl(asn1Schema.AsnConvert.serialize(asnX509Crl));
       }
     };
     ExtensionFactory.register(asn1X509__namespace.id_ce_basicConstraints, BasicConstraintsExtension);
-    ExtensionFactory.register(asn1X509__namespace.id_ce_extKeyUsage, ExtendedKeyUsageExtension);
+    ExtensionFactory.register(asn1X509__namespace.id_ce_extKeyUsage, ExtendedKeyUsageExtension2);
     ExtensionFactory.register(asn1X509__namespace.id_ce_keyUsage, KeyUsagesExtension);
     ExtensionFactory.register(asn1X509__namespace.id_ce_subjectKeyIdentifier, SubjectKeyIdentifierExtension);
     ExtensionFactory.register(asn1X509__namespace.id_ce_authorityKeyIdentifier, AuthorityKeyIdentifierExtension);
@@ -52812,7 +52868,7 @@ var require_x509_cjs = __commonJS({
     exports.DNS = DNS;
     exports.DefaultAlgorithmSerializer = DefaultAlgorithmSerializer;
     exports.EMAIL = EMAIL;
-    exports.ExtendedKeyUsageExtension = ExtendedKeyUsageExtension;
+    exports.ExtendedKeyUsageExtension = ExtendedKeyUsageExtension2;
     exports.Extension = Extension;
     exports.ExtensionFactory = ExtensionFactory;
     exports.ExtensionsAttribute = ExtensionsAttribute;
@@ -52822,7 +52878,7 @@ var require_x509_cjs = __commonJS({
     exports.IP = IP;
     exports.IssuerAlternativeNameExtension = IssuerAlternativeNameExtension;
     exports.KeyUsagesExtension = KeyUsagesExtension;
-    exports.Name = Name;
+    exports.Name = Name2;
     exports.NameIdentifier = NameIdentifier;
     exports.OidSerializer = OidSerializer;
     exports.PemConverter = PemConverter;
@@ -52837,11 +52893,11 @@ var require_x509_cjs = __commonJS({
     exports.TextObject = TextObject;
     exports.UPN = UPN;
     exports.URL = URL2;
-    exports.X509Certificate = X509Certificate3;
+    exports.X509Certificate = X509Certificate4;
     exports.X509CertificateGenerator = X509CertificateGenerator;
     exports.X509Certificates = X509Certificates;
     exports.X509ChainBuilder = X509ChainBuilder;
-    exports.X509Crl = X509Crl2;
+    exports.X509Crl = X509Crl;
     exports.X509CrlEntry = X509CrlEntry;
     exports.X509CrlGenerator = X509CrlGenerator;
     exports.cryptoProvider = cryptoProvider;
@@ -52855,9 +52911,9 @@ var require_x509_cjs = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/forge.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/forge.js
 var require_forge = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/forge.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/forge.js"(exports, module) {
     "use strict";
     module.exports = {
       // default options
@@ -52868,9 +52924,9 @@ var require_forge = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/baseN.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/baseN.js
 var require_baseN = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/baseN.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/baseN.js"(exports, module) {
     "use strict";
     var api = {};
     module.exports = api;
@@ -52983,9 +53039,9 @@ var require_baseN = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/util.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/util.js
 var require_util2 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/util.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/util.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     var baseN = require_baseN();
@@ -54365,9 +54421,9 @@ var require_util2 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/cipher.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/cipher.js
 var require_cipher = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/cipher.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/cipher.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_util2();
@@ -54483,9 +54539,9 @@ var require_cipher = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/cipherModes.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/cipherModes.js
 var require_cipherModes = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/cipherModes.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/cipherModes.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_util2();
@@ -54536,10 +54592,18 @@ var require_cipherModes = __commonJS({
         return false;
       }
       var len = output2.length();
+      if (len === 0) {
+        return true;
+      }
       var count = output2.at(len - 1);
-      if (count > this.blockSize << 2) {
+      if (count === 0 || count > this.blockSize || count > len) {
         return false;
       }
+      for (var i = 2; i <= count; ++i) {
+        if (output2.at(len - i) !== count) {
+          return false;
+        }
+      }
       output2.truncate(count);
       return true;
     };
@@ -54601,10 +54665,18 @@ var require_cipherModes = __commonJS({
         return false;
       }
       var len = output2.length();
+      if (len === 0) {
+        return true;
+      }
       var count = output2.at(len - 1);
-      if (count > this.blockSize << 2) {
+      if (count === 0 || count > this.blockSize || count > len) {
         return false;
       }
+      for (var i = 2; i <= count; ++i) {
+        if (output2.at(len - i) !== count) {
+          return false;
+        }
+      }
       output2.truncate(count);
       return true;
     };
@@ -54862,11 +54934,14 @@ var require_cipherModes = __commonJS({
       } else {
         additionalData = forge2.util.createBuffer();
       }
-      if ("tagLength" in options) {
-        this._tagLength = options.tagLength;
+      if (options.tagLength !== void 0 && options.tagLength !== null) {
+        this._tagLength = Number(options.tagLength);
       } else {
         this._tagLength = 128;
       }
+      if ([128, 120, 112, 104, 96, 64, 32].indexOf(this._tagLength) === -1) {
+        throw new Error("Invalid tag length.");
+      }
       this._tag = null;
       if (options.decrypt) {
         this._tag = forge2.util.createBuffer(options.tag).getBytes();
@@ -55134,9 +55209,9 @@ var require_cipherModes = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/aes.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/aes.js
 var require_aes = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/aes.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/aes.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_cipher();
@@ -55410,9 +55485,9 @@ var require_aes = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/oids.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/oids.js
 var require_oids = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/oids.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/oids.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     forge2.pki = forge2.pki || {};
@@ -55556,9 +55631,9 @@ var require_oids = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/asn1.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/asn1.js
 var require_asn1 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/asn1.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/asn1.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_util2();
@@ -55820,7 +55895,10 @@ var require_asn1 = __commonJS({
             var subOptions = {
               // enforce strict mode to avoid parsing ASN.1 from plain data
               strict: true,
-              decodeBitStrings: true
+              // only decode one level of BIT STRINGs, nested decoding has
+              // quadratic cost due to copies for change detection
+              decodeBitStrings: false,
+              maxDepth: options.maxDepth
             };
             var composed = _fromDer(bytes, remaining, depth + 1, subOptions);
             var used = start - bytes.length();
@@ -55924,12 +56002,16 @@ var require_asn1 = __commonJS({
     asn1.oidToDer = function(oid) {
       var values = oid.split(".");
       var bytes = forge2.util.createBuffer();
-      bytes.putByte(40 * parseInt(values[0], 10) + parseInt(values[1], 10));
+      var first = parseInt(values[0], 10);
+      var second = parseInt(values[1], 10);
+      if (!(first >= 0 && first <= 2 && second >= 0) || first < 2 && second > 39) {
+        throw new Error("Invalid OID; the first two arcs are out of range.");
+      }
       var last, valueBytes, value, b;
-      for (var i = 2; i < values.length; ++i) {
+      for (var i = 1; i < values.length; ++i) {
         last = true;
         valueBytes = [];
-        value = parseInt(values[i], 10);
+        value = i === 1 ? 40 * first + second : parseInt(values[i], 10);
         if (value > 4294967295) {
           throw new Error("OID value too large; max is 32-bits.");
         }
@@ -55953,9 +56035,9 @@ var require_asn1 = __commonJS({
       if (typeof bytes === "string") {
         bytes = forge2.util.createBuffer(bytes);
       }
-      var b = bytes.getByte();
-      oid = Math.floor(b / 40) + "." + b % 40;
+      var b;
       var value = 0;
+      var first = true;
       while (bytes.length() > 0) {
         if (value > 70368744177663) {
           throw new Error("OID value too large; max is 53-bits.");
@@ -55965,7 +56047,13 @@ var require_asn1 = __commonJS({
         if (b & 128) {
           value += b & 127;
         } else {
-          oid += "." + (value + b);
+          value += b;
+          if (first) {
+            oid = value < 80 ? Math.floor(value / 40) + "." + value % 40 : "2." + (value - 80);
+            first = false;
+          } else {
+            oid += "." + value;
+          }
           value = 0;
         }
       }
@@ -56376,9 +56464,9 @@ var require_asn1 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/md.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/md.js
 var require_md2 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/md.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/md.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     module.exports = forge2.md = forge2.md || {};
@@ -56386,9 +56474,9 @@ var require_md2 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/hmac.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/hmac.js
 var require_hmac = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/hmac.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/hmac.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_md2();
@@ -56469,9 +56557,9 @@ var require_hmac = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/md5.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/md5.js
 var require_md5 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/md5.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/md5.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_md2();
@@ -56762,9 +56850,9 @@ var require_md5 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pem.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pem.js
 var require_pem3 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pem.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pem.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_util2();
@@ -56805,12 +56893,12 @@ var require_pem3 = __commonJS({
     };
     pem.decode = function(str) {
       var rval = [];
-      var rMessage = /\s*-----BEGIN ([A-Z0-9- ]+)-----\r?\n?([\x21-\x7e\s]+?(?:\r?\n\r?\n))?([:A-Za-z0-9+\/=\s]+?)-----END \1-----/g;
-      var rHeader = /([\x21-\x7e]+):\s*([\x21-\x7e\s^:]+)/;
+      var messages = _pemMessageScanner(str);
+      var rHeader = /(?:^|[^\x21-\x7e])([\x21-\x7e]+):\s*([\x21-\x7e\s^:]+)/;
       var rCRLF = /\r?\n/;
       var match;
       while (true) {
-        match = rMessage.exec(str);
+        match = messages.next();
         if (!match) {
           break;
         }
@@ -56833,7 +56921,7 @@ var require_pem3 = __commonJS({
         var lines = match[2].split(rCRLF);
         var li = 0;
         while (match && li < lines.length) {
-          var line = lines[li].replace(/\s+$/, "");
+          var line = rtrim(lines[li]);
           for (var nl = li + 1; nl < lines.length; ++nl) {
             var next = lines[nl];
             if (!/\s/.test(next[0])) {
@@ -56911,12 +56999,146 @@ var require_pem3 = __commonJS({
     function ltrim(str) {
       return str.replace(/^\s+/, "");
     }
+    function rtrim(str) {
+      var end = str.length;
+      while (end > 0 && /\s/.test(str.charAt(end - 1))) {
+        --end;
+      }
+      return str.substring(0, end);
+    }
+    function _pemMessageScanner(str) {
+      var rBody = /[:A-Za-z0-9+\/=\s]/;
+      var rNotBody = /[^:A-Za-z0-9+\/=\s]/g;
+      var rNotHeader = /[^\x21-\x7e\s]/g;
+      var rLabel = /[A-Z0-9- ]/;
+      function indexOfRegex(regex, i) {
+        regex.lastIndex = i;
+        var match = regex.exec(str);
+        return match ? match.index : str.length;
+      }
+      function labelAt(i) {
+        for (var j = i; j < str.length && rLabel.test(str.charAt(j)); ++j) {
+          if (j > i && str.substr(j, 5) === "-----") {
+            return str.substring(i, j);
+          }
+        }
+        return null;
+      }
+      function blankLineEnd(i) {
+        if (str.charAt(i) === "\r") {
+          ++i;
+        }
+        if (str.charAt(i) !== "\n") {
+          return -1;
+        }
+        if (str.charAt(++i) === "\r") {
+          ++i;
+        }
+        return str.charAt(i) === "\n" ? i + 1 : -1;
+      }
+      function firstBlankLine(start2, end2) {
+        for (var i = start2; i < end2; ++i) {
+          var v = blankLineEnd(i);
+          if (v !== -1 && v < end2) {
+            return i;
+          }
+        }
+        return -1;
+      }
+      var ends = {};
+      for (var end = str.indexOf("-----END "); end !== -1; end = str.indexOf("-----END ", end + 1)) {
+        var endLabel = labelAt(end + 9);
+        var start = end;
+        while (start > 0 && rBody.test(str.charAt(start - 1))) {
+          --start;
+        }
+        var blank = firstBlankLine(start, end);
+        if (endLabel !== null && blank !== -1) {
+          var key2 = "$" + endLabel;
+          (ends[key2] = ends[key2] || []).push({ end, blank });
+        }
+      }
+      var pos = 0;
+      var headerEnd = -1;
+      return {
+        next: function() {
+          var begin;
+          while ((begin = str.indexOf("-----BEGIN ", pos)) !== -1) {
+            pos = begin + 1;
+            var label = labelAt(begin + 11);
+            if (label === null) {
+              continue;
+            }
+            var q = begin + 16 + label.length;
+            var bodyEnd = indexOfRegex(rNotBody, q);
+            var bodyEndOk = str.substr(bodyEnd, 9) === "-----END " && labelAt(bodyEnd + 9) === label;
+            if (q > headerEnd) {
+              headerEnd = indexOfRegex(rNotHeader, q);
+            }
+            var later = null;
+            var list = ends["$" + label];
+            if (list) {
+              var lo = 0;
+              var hi = list.length;
+              while (lo < hi) {
+                var mid = lo + hi >> 1;
+                if (list[mid].end > bodyEnd) {
+                  hi = mid;
+                } else {
+                  lo = mid + 1;
+                }
+              }
+              later = list[lo] || null;
+            }
+            var starts = [];
+            if (str.charAt(q) === "\r") {
+              if (str.charAt(q + 1) === "\n") {
+                starts.push(q + 2);
+              }
+              starts.push(q + 1);
+            } else if (str.charAt(q) === "\n") {
+              starts.push(q + 1);
+            }
+            starts.push(q);
+            for (var i = 0; i < starts.length; ++i) {
+              var t = starts[i];
+              var blank2 = bodyEndOk ? firstBlankLine(t + 1, bodyEnd) : -1;
+              var end2 = bodyEnd;
+              if (blank2 === -1 && later) {
+                blank2 = later.blank;
+                end2 = later.end;
+              }
+              if (blank2 !== -1 && blank2 <= headerEnd) {
+                var v = blankLineEnd(blank2);
+                pos = end2 + 14 + label.length;
+                return [
+                  str.substring(begin, pos),
+                  label,
+                  str.substring(t, v),
+                  str.substring(v, end2)
+                ];
+              }
+              if (bodyEndOk && t < bodyEnd) {
+                pos = bodyEnd + 14 + label.length;
+                return [
+                  str.substring(begin, pos),
+                  label,
+                  void 0,
+                  str.substring(t, bodyEnd)
+                ];
+              }
+            }
+          }
+          return null;
+        }
+      };
+    }
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/des.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/des.js
 var require_des = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/des.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/des.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_cipher();
@@ -57153,9 +57375,9 @@ var require_des = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pbkdf2.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pbkdf2.js
 var require_pbkdf2 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pbkdf2.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pbkdf2.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_hmac();
@@ -57269,9 +57491,9 @@ var require_pbkdf2 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/sha256.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/sha256.js
 var require_sha256 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/sha256.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/sha256.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_md2();
@@ -57503,9 +57725,9 @@ var require_sha256 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/prng.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/prng.js
 var require_prng = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/prng.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/prng.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_util2();
@@ -57744,9 +57966,9 @@ var require_prng = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/random.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/random.js
 var require_random = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/random.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/random.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_aes();
@@ -57853,9 +58075,9 @@ var require_random = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/rc2.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/rc2.js
 var require_rc2 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/rc2.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/rc2.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_util2();
@@ -58315,9 +58537,9 @@ var require_rc2 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/jsbn.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/jsbn.js
 var require_jsbn = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/jsbn.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/jsbn.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     module.exports = forge2.jsbn = forge2.jsbn || {};
@@ -59355,7 +59577,7 @@ var require_jsbn = __commonJS({
       return r;
     }
     function bnModInverse(m) {
-      if (this.signum() == 0) {
+      if (this.signum() <= 0 || m.signum() <= 0) {
         return BigInteger.ZERO;
       }
       var ac = m.isEven();
@@ -59504,9 +59726,9 @@ var require_jsbn = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/sha1.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/sha1.js
 var require_sha12 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/sha1.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/sha1.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_md2();
@@ -59701,9 +59923,9 @@ var require_sha12 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pkcs1.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pkcs1.js
 var require_pkcs1 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pkcs1.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pkcs1.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_util2();
@@ -59854,9 +60076,9 @@ var require_pkcs1 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/prime.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/prime.js
 var require_prime = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/prime.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/prime.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_util2();
@@ -60017,9 +60239,9 @@ var require_prime = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/rsa.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/rsa.js
 var require_rsa = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/rsa.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/rsa.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_asn1();
@@ -60238,6 +60460,41 @@ var require_rsa = __commonJS({
         capture: "digest"
       }]
     };
+    var _encodeDigestInfo = function(oid, digest, withParameters) {
+      var digestAlgorithm = [asn1.create(
+        asn1.Class.UNIVERSAL,
+        asn1.Type.OID,
+        false,
+        asn1.oidToDer(oid).getBytes()
+      )];
+      if (withParameters) {
+        digestAlgorithm.push(asn1.create(
+          asn1.Class.UNIVERSAL,
+          asn1.Type.NULL,
+          false,
+          ""
+        ));
+      }
+      return asn1.toDer(asn1.create(
+        asn1.Class.UNIVERSAL,
+        asn1.Type.SEQUENCE,
+        true,
+        [
+          asn1.create(
+            asn1.Class.UNIVERSAL,
+            asn1.Type.SEQUENCE,
+            true,
+            digestAlgorithm
+          ),
+          asn1.create(
+            asn1.Class.UNIVERSAL,
+            asn1.Type.OCTETSTRING,
+            false,
+            digest
+          )
+        ]
+      )).getBytes();
+    };
     var emsaPkcs1v15encode = function(md) {
       var oid;
       if (md.algorithm in pki.oids) {
@@ -60741,6 +60998,13 @@ var require_rsa = __commonJS({
                   );
                 }
               }
+              var withParameters = _encodeDigestInfo(oid, capture.digest, true);
+              var withoutParameters = _encodeDigestInfo(oid, capture.digest, false);
+              if (d2.substring(0, withParameters.length) !== withParameters && d2.substring(0, withoutParameters.length) !== withoutParameters) {
+                throw new Error(
+                  "ASN.1 object does not contain a valid RSASSA-PKCS1-v1_5 DigestInfo value."
+                );
+              }
               return digest2 === capture.digest;
             }
           };
@@ -61219,9 +61483,9 @@ var require_rsa = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pbe.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pbe.js
 var require_pbe = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pbe.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pbe.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_aes();
@@ -61702,6 +61966,9 @@ var require_pbe = __commonJS({
     };
     pki.pbe.generatePkcs12Key = function(password, salt, id, iter, n, md) {
       var j, l;
+      if (!(iter >= 1)) {
+        throw new Error("PKCS#12 key derivation iteration count must be >= 1.");
+      }
       if (typeof md === "undefined" || md === null) {
         if (!("sha1" in forge2.md)) {
           throw new Error('"sha1" hash algorithm unavailable.');
@@ -61997,9 +62264,9 @@ var require_pbe = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pkcs7asn1.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pkcs7asn1.js
 var require_pkcs7asn1 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pkcs7asn1.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pkcs7asn1.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_asn1();
@@ -62299,9 +62566,9 @@ var require_pkcs7asn1 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/mgf1.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/mgf1.js
 var require_mgf1 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/mgf1.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/mgf1.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_util2();
@@ -62335,9 +62602,9 @@ var require_mgf1 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/mgf.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/mgf.js
 var require_mgf = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/mgf.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/mgf.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_mgf1();
@@ -62346,9 +62613,9 @@ var require_mgf = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pss.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pss.js
 var require_pss = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pss.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pss.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_random();
@@ -62466,9 +62733,9 @@ var require_pss = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/x509.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/x509.js
 var require_x509 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/x509.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/x509.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_aes();
@@ -62992,6 +63259,7 @@ var require_x509 = __commonJS({
     };
     var _verifySignature = function(options) {
       var cert = options.certificate;
+      var publicKey = options.publicKey || cert.publicKey;
       var scheme;
       switch (cert.signatureOid) {
         case oids.sha1WithRSAEncryption:
@@ -63029,7 +63297,7 @@ var require_x509 = __commonJS({
           );
           break;
       }
-      return cert.publicKey.verify(
+      return publicKey.verify(
         options.md.digest().getBytes(),
         options.signature,
         scheme
@@ -63249,7 +63517,8 @@ var require_x509 = __commonJS({
         }
         if (md !== null) {
           rval = _verifySignature({
-            certificate: cert,
+            certificate: child,
+            publicKey: cert.publicKey,
             md,
             signature: child.signature
           });
@@ -64484,10 +64753,7 @@ var require_x509 = __commonJS({
             }
           }
           if (parent) {
-            var parents = parent;
-            if (!forge2.util.isArray(parents)) {
-              parents = [parents];
-            }
+            var parents = forge2.util.isArray(parent) ? parent.slice() : [parent];
             var verified = false;
             while (!verified && parents.length > 0) {
               parent = parents.shift();
@@ -64532,7 +64798,7 @@ var require_x509 = __commonJS({
           }
         }
         if (error62 === null && (!first || chain.length === 0 && (!parent || selfSigned))) {
-          var bcExt = cert.getExtension("basicConstraints");
+          var bcExt = cert.getExtension({ id: "2.5.29.19" });
           var keyUsageExt = cert.getExtension("keyUsage");
           if (keyUsageExt !== null) {
             if (!keyUsageExt.keyCertSign || bcExt === null) {
@@ -64554,7 +64820,7 @@ var require_x509 = __commonJS({
               error: pki.certificateError.bad_certificate
             };
           }
-          if (error62 === null && keyUsageExt !== null && "pathLenConstraint" in bcExt) {
+          if (error62 === null && bcExt !== null && "pathLenConstraint" in bcExt) {
             var pathLen = depth - 1;
             if (pathLen > bcExt.pathLenConstraint) {
               error62 = {
@@ -64597,9 +64863,9 @@ var require_x509 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pkcs12.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pkcs12.js
 var require_pkcs12 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pkcs12.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pkcs12.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_asn1();
@@ -64939,6 +65205,9 @@ var require_pkcs12 = __commonJS({
         }
         var macSalt = new forge2.util.ByteBuffer(capture.macSalt);
         var macIterations = "macIterations" in capture ? parseInt(forge2.util.bytesToHex(capture.macIterations), 16) : 1;
+        if (!(macIterations >= 1)) {
+          throw new Error("PKCS#12 MAC iteration count must be >= 1.");
+        }
         var macKey = p12.generateKey(
           password,
           macSalt,
@@ -65461,9 +65730,9 @@ var require_pkcs12 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pki.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pki.js
 var require_pki = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pki.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pki.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_asn1();
@@ -65515,9 +65784,9 @@ var require_pki = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/tls.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/tls.js
 var require_tls = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/tls.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/tls.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_asn1();
@@ -66202,7 +66471,7 @@ var require_tls = __commonJS({
           }
         });
       }
-      if (c.serverCertificate === null) {
+      if (c.session.serverCertificate === null) {
         var error62 = {
           message: "No server certificate provided. Not enough security.",
           send: true,
@@ -66226,8 +66495,8 @@ var require_tls = __commonJS({
               error62.alert.description = ret;
             }
           }
-          return c.error(c, error62);
         }
+        return c.error(c, error62);
       }
       if (c.session.certificateRequest !== null) {
         record2 = tls.createRecord(c, {
@@ -66483,7 +66752,7 @@ var require_tls = __commonJS({
       var length = b.getInt16();
       var payload = b.getBytes(length);
       if (type === tls.HeartbeatMessageType.heartbeat_request) {
-        if (c.handshaking || length > payload.length) {
+        if (c.handshakes === 0 || c.handshaking || length > payload.length) {
           return c.process();
         }
         tls.queue(c, tls.createRecord(c, {
@@ -67398,6 +67667,7 @@ var require_tls = __commonJS({
                     description: tls.Alert.Description.unexpected_message
                   }
                 });
+                return rval;
               }
             }
             c2.record.ready = true;
@@ -67462,24 +67732,48 @@ var require_tls = __commonJS({
           tls.flush(c);
         }
       };
+      var _processing = false;
+      var _processNext = false;
+      var _processRecord = function(c2) {
+        var rval = 0;
+        if (!c2.fail) {
+          if (c2.record !== null && c2.record.ready && c2.record.fragment.isEmpty()) {
+            c2.record = null;
+          }
+          if (c2.record === null) {
+            rval = _readRecordHeader(c2);
+          }
+          if (!c2.fail && c2.record !== null && !c2.record.ready) {
+            rval = _readRecord(c2);
+          }
+          if (!c2.fail && c2.record !== null && c2.record.ready) {
+            _update(c2, c2.record);
+          }
+        }
+        return rval;
+      };
       c.process = function(data) {
         var rval = 0;
         if (data) {
           c.input.putBytes(data);
         }
-        if (!c.fail) {
-          if (c.record !== null && c.record.ready && c.record.fragment.isEmpty()) {
-            c.record = null;
-          }
-          if (c.record === null) {
-            rval = _readRecordHeader(c);
-          }
-          if (!c.fail && c.record !== null && !c.record.ready) {
-            rval = _readRecord(c);
-          }
-          if (!c.fail && c.record !== null && c.record.ready) {
-            _update(c, c.record);
+        if (_processing && typeof data === "undefined") {
+          _processNext = true;
+          return rval;
+        }
+        var processing = _processing;
+        var processNext = _processNext;
+        _processing = true;
+        _processNext = false;
+        try {
+          rval = _processRecord(c);
+          while (_processNext) {
+            _processNext = false;
+            _processRecord(c);
           }
+        } finally {
+          _processing = processing;
+          _processNext = processNext;
         }
         return rval;
       };
@@ -67549,9 +67843,9 @@ var require_tls = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/aesCipherSuites.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/aesCipherSuites.js
 var require_aesCipherSuites = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/aesCipherSuites.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/aesCipherSuites.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_aes();
@@ -67694,9 +67988,9 @@ var require_aesCipherSuites = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/sha512.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/sha512.js
 var require_sha512 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/sha512.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/sha512.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_md2();
@@ -68103,9 +68397,9 @@ var require_sha512 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/asn1-validator.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/asn1-validator.js
 var require_asn1_validator = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/asn1-validator.js"(exports) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/asn1-validator.js"(exports) {
     "use strict";
     var forge2 = require_forge();
     require_asn1();
@@ -68196,9 +68490,9 @@ var require_asn1_validator = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/ed25519.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/ed25519.js
 var require_ed25519 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/ed25519.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/ed25519.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_jsbn();
@@ -69310,9 +69604,9 @@ var require_ed25519 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/kem.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/kem.js
 var require_kem = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/kem.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/kem.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_util2();
@@ -69374,9 +69668,9 @@ var require_kem = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/log.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/log.js
 var require_log = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/log.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/log.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_util2();
@@ -69550,9 +69844,9 @@ var require_log = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/md.all.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/md.all.js
 var require_md_all = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/md.all.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/md.all.js"(exports, module) {
     "use strict";
     module.exports = require_md2();
     require_md5();
@@ -69562,9 +69856,9 @@ var require_md_all = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pkcs7.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pkcs7.js
 var require_pkcs7 = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/pkcs7.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/pkcs7.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_aes();
@@ -70552,9 +70846,9 @@ var require_pkcs7 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/ssh.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/ssh.js
 var require_ssh = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/ssh.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/ssh.js"(exports, module) {
     "use strict";
     var forge2 = require_forge();
     require_aes();
@@ -70689,9 +70983,9 @@ var require_ssh = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/index.js
+// ../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/index.js
 var require_lib = __commonJS({
-  "../../node_modules/.pnpm/node-forge@1.4.0/node_modules/node-forge/lib/index.js"(exports, module) {
+  "../../node_modules/.pnpm/node-forge@1.4.1/node_modules/node-forge/lib/index.js"(exports, module) {
     "use strict";
     module.exports = require_forge();
     require_aes();
@@ -78933,8 +79227,8 @@ function uint8ArrayToBase64(bytes) {
   }
   return btoa(binaryString);
 }
-function base64urlToUint8Array(base64url3) {
-  const base643 = base64url3.replace(/-/g, "+").replace(/_/g, "/");
+function base64urlToUint8Array(base64url4) {
+  const base643 = base64url4.replace(/-/g, "+").replace(/_/g, "/");
   const padding = "=".repeat((4 - base643.length % 4) % 4);
   return base64ToUint8Array(base643 + padding);
 }
@@ -107040,13 +107334,45 @@ function byCodeUnit(a, b) {
   if (a > b) return 1;
   return 0;
 }
+var notCanonical = (what) => new KyaError("INVALID_INPUT", `canonical JSON (RFC 8785): ${what}`);
+function assertUnicode(s) {
+  for (let i = 0; i < s.length; i++) {
+    const c = s.charCodeAt(i);
+    if (c >= 55296 && c <= 56319) {
+      const next = s.charCodeAt(i + 1);
+      if (!(next >= 56320 && next <= 57343)) throw notCanonical("a string has a lone surrogate");
+      i++;
+    } else if (c >= 56320 && c <= 57343) {
+      throw notCanonical("a string has a lone surrogate");
+    }
+  }
+}
 function canonicalize(v) {
-  if (v === null || typeof v !== "object") return JSON.stringify(v);
-  if (Array.isArray(v)) return `[${v.map(canonicalize).join(",")}]`;
+  if (v === null || typeof v === "boolean") return JSON.stringify(v);
+  if (typeof v === "number") {
+    if (!Number.isFinite(v)) throw notCanonical("a number is not finite");
+    return JSON.stringify(v);
+  }
+  if (typeof v === "string") {
+    assertUnicode(v);
+    return JSON.stringify(v);
+  }
+  if (typeof v !== "object") throw notCanonical(`a value of type ${typeof v} is not JSON`);
+  if (Array.isArray(v)) return `[${Array.from(v, canonicalize).join(",")}]`;
   const o = v;
-  const members2 = Object.keys(o).filter((k) => o[k] !== void 0).sort(byCodeUnit).map((k) => JSON.stringify(k) + ":" + canonicalize(o[k]));
+  const members2 = Object.keys(o).filter((k) => o[k] !== void 0).sort(byCodeUnit).map((k) => {
+    assertUnicode(k);
+    return JSON.stringify(k) + ":" + canonicalize(o[k]);
+  });
   return "{" + members2.join(",") + "}";
 }
+function canonicalEquals(a, b) {
+  try {
+    return canonicalize(a) === canonicalize(b);
+  } catch {
+    return false;
+  }
+}
 
 // ../core/src/mandate.ts
 var DELEGATION_MAX_DEPTH = 3;
@@ -108205,6 +108531,9 @@ var import_x5092 = __toESM(require_x509_cjs(), 1);
 var import_reflect_metadata = __toESM(require_Reflect(), 1);
 var import_x509 = __toESM(require_x509_cjs(), 1);
 
+// ../core/src/crl-der.ts
+var MAX_CRL_BYTES = 64 * 1024 * 1024;
+
 // ../core/src/ecnpj-sign.ts
 var asn1js2 = __toESM(require_build2(), 1);
 var pkijs2 = __toESM(require_build3(), 1);
@@ -108299,7 +108628,7 @@ async function verifyDelegationChain(p) {
     } catch (e) {
       return fail2("KYA_DELEGATION_MALFORMED", `${at}: ${e.message}`);
     }
-    if (delegate.id !== raw.delegate?.id || canonicalize(mandate) !== canonicalize(raw.mandate)) return fail2("KYA_DELEGATION_MALFORMED", `${at}: delegate or mandate not in normalized form`);
+    if (delegate.id !== raw.delegate?.id || !canonicalEquals(mandate, raw.mandate)) return fail2("KYA_DELEGATION_MALFORMED", `${at}: delegate or mandate not in normalized form`);
     const policy = parentMandate.delegation;
     if (!policy) return fail2("KYA_DELEGATION_NOT_ALLOWED", i === 0 ? "the credential's mandate does not allow delegation" : `${at}: the delegator's mandate does not allow further delegation`);
     const issued = Date.parse(raw.issued_at);
@@ -108335,8 +108664,16 @@ function decodeDelegationHeader(value) {
   }
 }
 
-// ../core/src/freshness.ts
-var FRESHNESS_LIMIT_MAX_AGE_SECONDS = 90 * 86400;
+// ../core/src/timestamp.ts
+var import_reflect_metadata3 = __toESM(require_Reflect(), 1);
+var asn1js3 = __toESM(require_build2(), 1);
+var pkijs3 = __toESM(require_build3(), 1);
+var import_x5093 = __toESM(require_x509_cjs(), 1);
+var OID_SHA256 = "2.16.840.1.101.3.4.2.1";
+var IMPRINT_HASHES = { [OID_SHA256]: "SHA-256", "2.16.840.1.101.3.4.2.2": "SHA-384", "2.16.840.1.101.3.4.2.3": "SHA-512" };
+
+// ../core/src/issuance.ts
+var pkijs4 = __toESM(require_build3(), 1);
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports2 = {};
@@ -121694,7 +122031,7 @@ function getEvmChainId(network) {
   }
   return chainId;
 }
-function getCrypto() {
+function getCrypto2() {
   const cryptoObj = globalThis.crypto;
   if (!cryptoObj) {
     throw new Error("Crypto API not available");
@@ -121702,10 +122039,10 @@ function getCrypto() {
   return cryptoObj;
 }
 function createNonce() {
-  return toHex2(getCrypto().getRandomValues(new Uint8Array(32)));
+  return toHex2(getCrypto2().getRandomValues(new Uint8Array(32)));
 }
 function createPermit2Nonce() {
-  const randomBytes2 = getCrypto().getRandomValues(new Uint8Array(32));
+  const randomBytes2 = getCrypto2().getRandomValues(new Uint8Array(32));
   return BigInt(toHex2(randomBytes2)).toString();
 }
 
@@ -122941,7 +123278,7 @@ function privateKeyToAccount(privateKey, options = {}) {
 }
 
 // ../agent-tools/src/index.ts
-var pkijs3 = __toESM(require_build3(), 1);
+var pkijs5 = __toESM(require_build3(), 1);
 
 // ../agent-tools/src/auth.ts
 var enc = new TextEncoder();
@@ -123040,18 +123377,6 @@ function createKyaClient(opts = {}) {
   ];
   return client;
 }
-function byCodeUnit2(a, b) {
-  if (a < b) return -1;
-  if (a > b) return 1;
-  return 0;
-}
-function canonicalize2(v) {
-  if (v === null || typeof v !== "object") return JSON.stringify(v);
-  if (Array.isArray(v)) return `[${v.map(canonicalize2).join(",")}]`;
-  const o = v;
-  const members2 = Object.keys(o).filter((k) => o[k] !== void 0).sort(byCodeUnit2).map((k) => JSON.stringify(k) + ":" + canonicalize2(o[k]));
-  return "{" + members2.join(",") + "}";
-}
 async function verifyAttestation2(doc, opts = {}) {
   const att = doc.attestation;
   if (!att || att.algorithm !== "ed25519" || !att.sha256 || !att.signed_at || !att.signature || !att.key_id) return { valid: false, reason: "no ed25519 attestation in the document" };
@@ -123063,7 +123388,13 @@ async function verifyAttestation2(doc, opts = {}) {
     if (!jwk) return { valid: false, reason: `key ${att.key_id} not published by ${base}`, key_id: att.key_id, signed_at: att.signed_at };
   }
   const { attestation: _a3, receipt: _r, ...payload } = doc;
-  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(canonicalize2(payload)));
+  let canonical;
+  try {
+    canonical = canonicalize(payload);
+  } catch (e) {
+    return { valid: false, reason: e.message, key_id: att.key_id, signed_at: att.signed_at };
+  }
+  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(canonical));
   const hex4 = [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("");
   if (hex4 !== att.sha256) return { valid: false, reason: "content hash mismatch: the document was modified", key_id: att.key_id, signed_at: att.signed_at };
   const key2 = await crypto.subtle.importKey("jwk", jwk, { name: "Ed25519" }, true, ["verify"]);
@@ -123080,7 +123411,7 @@ async function verifyCredentialOffline(credential, opts = {}) {
 
 // src/server.ts
 var SERVER_NAME = "KYA Brasil";
-var SERVER_VERSION = "0.1.0";
+var SERVER_VERSION = "0.1.1";
 var DEFAULT_ISSUER = "https://kya-br-agents.marcelfons.workers.dev";
 var ID = external_exports.string().uuid().describe("The agent's credential_id (the agent sends it with its request, e.g. in the KYA-Credential header).");
 var AGENT = external_exports.object({