From 5050e37dbf723e3689721519eddb704dfdd7148e Mon Sep 17 00:00:00 2001 From: Roland Shoemaker Date: Mon, 7 Oct 2024 15:53:59 -0700 Subject: [PATCH] crypto/x509: run a subset of the NIST PKI test suite This vendors the vectors (generated using [0], derived from the BoringSSL script which generates their test headers) and all of the certs, but only runs the subset of the suite that is focused on policy validation. In the future we may want to run more of the suite, since it is focused on path validation, not path building, the way it interacts with our hybrid path builder/validator is kind of complicated. Updates #68484 Updates #45857 [0] https://gist.github.com/rolandshoemaker/a4efa9d65c2cef74a46ea40f47f0729e Change-Id: Ic04323dcd76aa5cbd6372c8cb1c44ccb91ccbca4 Reviewed-on: https://go-review.googlesource.com/c/go/+/618415 Reviewed-by: Russ Cox Reviewed-by: Filippo Valsorda LUCI-TryBot-Result: Go LUCI --- src/crypto/x509/pkits_test.go | 186 + src/crypto/x509/testdata/nist-pkits/README.md | 6 + .../AllCertificatesNoPoliciesTest2EE.crt | Bin 0 -> 898 bytes .../AllCertificatesSamePoliciesTest10EE.crt | Bin 0 -> 941 bytes .../AllCertificatesSamePoliciesTest13EE.crt | Bin 0 -> 958 bytes .../AllCertificatesanyPolicyTest11EE.crt | Bin 0 -> 914 bytes .../nist-pkits/certs/AnyPolicyTest14EE.crt | Bin 0 -> 903 bytes .../certs/BadCRLIssuerNameCACert.crt | Bin 0 -> 911 bytes .../certs/BadCRLSignatureCACert.crt | Bin 0 -> 909 bytes .../nist-pkits/certs/BadSignedCACert.crt | Bin 0 -> 902 bytes .../certs/BadnotAfterDateCACert.crt | Bin 0 -> 909 bytes .../certs/BadnotBeforeDateCACert.crt | Bin 0 -> 910 bytes .../BasicSelfIssuedCRLSigningKeyCACert.crt | Bin 0 -> 925 bytes .../BasicSelfIssuedCRLSigningKeyCRLCert.crt | Bin 0 -> 1074 bytes .../certs/BasicSelfIssuedNewKeyCACert.crt | Bin 0 -> 917 bytes .../BasicSelfIssuedNewKeyOldWithNewCACert.crt | Bin 0 -> 933 bytes .../certs/BasicSelfIssuedOldKeyCACert.crt | Bin 0 -> 917 bytes .../BasicSelfIssuedOldKeyNewWithOldCACert.crt | Bin 0 -> 1067 bytes .../certs/CPSPointerQualifierTest20EE.crt | Bin 0 -> 1011 bytes .../testdata/nist-pkits/certs/DSACACert.crt | Bin 0 -> 1045 bytes .../certs/DSAParametersInheritedCACert.crt | Bin 0 -> 546 bytes .../certs/DifferentPoliciesTest12EE.crt | Bin 0 -> 914 bytes .../certs/DifferentPoliciesTest3EE.crt | Bin 0 -> 916 bytes .../certs/DifferentPoliciesTest4EE.crt | Bin 0 -> 909 bytes .../certs/DifferentPoliciesTest5EE.crt | Bin 0 -> 917 bytes .../certs/DifferentPoliciesTest7EE.crt | Bin 0 -> 943 bytes .../certs/DifferentPoliciesTest8EE.crt | Bin 0 -> 941 bytes .../certs/DifferentPoliciesTest9EE.crt | Bin 0 -> 931 bytes .../GeneralizedTimeCRLnextUpdateCACert.crt | Bin 0 -> 920 bytes .../testdata/nist-pkits/certs/GoodCACert.crt | Bin 0 -> 896 bytes .../nist-pkits/certs/GoodsubCACert.crt | Bin 0 -> 910 bytes .../GoodsubCAPanyPolicyMapping1to2CACert.crt | Bin 0 -> 968 bytes .../certs/InvalidBadCRLIssuerNameTest5EE.crt | Bin 0 -> 930 bytes .../certs/InvalidBadCRLSignatureTest4EE.crt | Bin 0 -> 926 bytes ...lidBasicSelfIssuedCRLSigningKeyTest7EE.crt | Bin 0 -> 958 bytes ...lidBasicSelfIssuedCRLSigningKeyTest8EE.crt | Bin 0 -> 958 bytes ...nvalidBasicSelfIssuedNewWithOldTest5EE.crt | Bin 0 -> 947 bytes ...nvalidBasicSelfIssuedOldWithNewTest2EE.crt | Bin 0 -> 947 bytes .../certs/InvalidCASignatureTest2EE.crt | Bin 0 -> 899 bytes .../certs/InvalidCAnotAfterDateTest5EE.crt | Bin 0 -> 925 bytes .../certs/InvalidCAnotBeforeDateTest1EE.crt | Bin 0 -> 927 bytes .../InvalidDNSnameConstraintsTest31EE.crt | Bin 0 -> 981 bytes .../InvalidDNSnameConstraintsTest33EE.crt | Bin 0 -> 970 bytes .../InvalidDNSnameConstraintsTest38EE.crt | Bin 0 -> 969 bytes ...alidDNandRFC822nameConstraintsTest28EE.crt | Bin 0 -> 1049 bytes ...alidDNandRFC822nameConstraintsTest29EE.crt | Bin 0 -> 1051 bytes .../InvalidDNnameConstraintsTest10EE.crt | Bin 0 -> 986 bytes .../InvalidDNnameConstraintsTest12EE.crt | Bin 0 -> 991 bytes .../InvalidDNnameConstraintsTest13EE.crt | Bin 0 -> 991 bytes .../InvalidDNnameConstraintsTest15EE.crt | Bin 0 -> 962 bytes .../InvalidDNnameConstraintsTest16EE.crt | Bin 0 -> 962 bytes .../InvalidDNnameConstraintsTest17EE.crt | Bin 0 -> 962 bytes .../InvalidDNnameConstraintsTest20EE.crt | Bin 0 -> 904 bytes .../certs/InvalidDNnameConstraintsTest2EE.crt | Bin 0 -> 957 bytes .../certs/InvalidDNnameConstraintsTest3EE.crt | Bin 0 -> 1113 bytes .../certs/InvalidDNnameConstraintsTest7EE.crt | Bin 0 -> 957 bytes .../certs/InvalidDNnameConstraintsTest8EE.crt | Bin 0 -> 957 bytes .../certs/InvalidDNnameConstraintsTest9EE.crt | Bin 0 -> 957 bytes .../certs/InvalidDSASignatureTest6EE.crt | Bin 0 -> 851 bytes .../certs/InvalidEESignatureTest3EE.crt | Bin 0 -> 893 bytes .../certs/InvalidEEnotAfterDateTest6EE.crt | Bin 0 -> 912 bytes .../certs/InvalidEEnotBeforeDateTest2EE.crt | Bin 0 -> 913 bytes .../InvalidIDPwithindirectCRLTest23EE.crt | Bin 0 -> 925 bytes .../InvalidIDPwithindirectCRLTest26EE.crt | Bin 0 -> 1019 bytes .../certs/InvalidLongSerialNumberTest18EE.crt | Bin 0 -> 948 bytes .../InvalidMappingFromanyPolicyTest7EE.crt | Bin 0 -> 936 bytes .../InvalidMappingToanyPolicyTest8EE.crt | Bin 0 -> 926 bytes .../certs/InvalidMissingCRLTest1EE.crt | Bin 0 -> 909 bytes .../InvalidMissingbasicConstraintsTest1EE.crt | Bin 0 -> 940 bytes .../certs/InvalidNameChainingOrderTest2EE.crt | Bin 0 -> 999 bytes .../certs/InvalidNameChainingTest1EE.crt | Bin 0 -> 914 bytes .../InvalidNegativeSerialNumberTest15EE.crt | Bin 0 -> 937 bytes .../certs/InvalidOldCRLnextUpdateTest11EE.crt | Bin 0 -> 929 bytes .../certs/InvalidPolicyMappingTest10EE.crt | Bin 0 -> 938 bytes .../certs/InvalidPolicyMappingTest2EE.crt | Bin 0 -> 918 bytes .../certs/InvalidPolicyMappingTest4EE.crt | Bin 0 -> 928 bytes .../InvalidRFC822nameConstraintsTest22EE.crt | Bin 0 -> 982 bytes .../InvalidRFC822nameConstraintsTest24EE.crt | Bin 0 -> 993 bytes .../InvalidRFC822nameConstraintsTest26EE.crt | Bin 0 -> 982 bytes .../certs/InvalidRevokedCATest2EE.crt | Bin 0 -> 909 bytes .../certs/InvalidRevokedEETest3EE.crt | Bin 0 -> 903 bytes ...alidSelfIssuedinhibitAnyPolicyTest10EE.crt | Bin 0 -> 919 bytes ...validSelfIssuedinhibitAnyPolicyTest8EE.crt | Bin 0 -> 944 bytes ...SelfIssuedinhibitPolicyMappingTest10EE.crt | Bin 0 -> 952 bytes ...SelfIssuedinhibitPolicyMappingTest11EE.crt | Bin 0 -> 952 bytes ...dSelfIssuedinhibitPolicyMappingTest8EE.crt | Bin 0 -> 954 bytes ...dSelfIssuedinhibitPolicyMappingTest9EE.crt | Bin 0 -> 954 bytes ...lidSelfIssuedpathLenConstraintTest16EE.crt | Bin 0 -> 944 bytes ...SelfIssuedrequireExplicitPolicyTest7EE.crt | Bin 0 -> 925 bytes ...SelfIssuedrequireExplicitPolicyTest8EE.crt | Bin 0 -> 925 bytes ...dSeparateCertificateandCRLKeysTest20EE.crt | Bin 0 -> 960 bytes ...dSeparateCertificateandCRLKeysTest21EE.crt | Bin 0 -> 960 bytes .../InvalidURInameConstraintsTest35EE.crt | Bin 0 -> 987 bytes .../InvalidURInameConstraintsTest37EE.crt | Bin 0 -> 987 bytes ...InvalidUnknownCRLEntryExtensionTest8EE.crt | Bin 0 -> 946 bytes .../InvalidUnknownCRLExtensionTest10EE.crt | Bin 0 -> 935 bytes .../InvalidUnknownCRLExtensionTest9EE.crt | Bin 0 -> 934 bytes ...ownCriticalCertificateExtensionTest2EE.crt | Bin 0 -> 954 bytes .../certs/InvalidWrongCRLTest6EE.crt | Bin 0 -> 910 bytes .../certs/InvalidcAFalseTest2EE.crt | Bin 0 -> 934 bytes .../certs/InvalidcAFalseTest3EE.crt | Bin 0 -> 938 bytes .../certs/InvalidcRLIssuerTest27EE.crt | Bin 0 -> 999 bytes .../certs/InvalidcRLIssuerTest31EE.crt | Bin 0 -> 1136 bytes .../certs/InvalidcRLIssuerTest32EE.crt | Bin 0 -> 1136 bytes .../certs/InvalidcRLIssuerTest34EE.crt | Bin 0 -> 1044 bytes .../certs/InvalidcRLIssuerTest35EE.crt | Bin 0 -> 1128 bytes .../InvaliddeltaCRLIndicatorNoBaseTest1EE.crt | Bin 0 -> 942 bytes .../certs/InvaliddeltaCRLTest10EE.crt | Bin 0 -> 1094 bytes .../certs/InvaliddeltaCRLTest3EE.crt | Bin 0 -> 1093 bytes .../certs/InvaliddeltaCRLTest4EE.crt | Bin 0 -> 1093 bytes .../certs/InvaliddeltaCRLTest6EE.crt | Bin 0 -> 1093 bytes .../certs/InvaliddeltaCRLTest9EE.crt | Bin 0 -> 1093 bytes .../certs/InvaliddistributionPointTest2EE.crt | Bin 0 -> 1071 bytes .../certs/InvaliddistributionPointTest3EE.crt | Bin 0 -> 1071 bytes .../certs/InvaliddistributionPointTest6EE.crt | Bin 0 -> 984 bytes .../certs/InvaliddistributionPointTest8EE.crt | Bin 0 -> 1028 bytes .../certs/InvaliddistributionPointTest9EE.crt | Bin 0 -> 927 bytes .../certs/InvalidinhibitAnyPolicyTest1EE.crt | Bin 0 -> 919 bytes .../certs/InvalidinhibitAnyPolicyTest4EE.crt | Bin 0 -> 923 bytes .../certs/InvalidinhibitAnyPolicyTest5EE.crt | Bin 0 -> 925 bytes .../certs/InvalidinhibitAnyPolicyTest6EE.crt | Bin 0 -> 926 bytes .../InvalidinhibitPolicyMappingTest1EE.crt | Bin 0 -> 950 bytes .../InvalidinhibitPolicyMappingTest3EE.crt | Bin 0 -> 943 bytes .../InvalidinhibitPolicyMappingTest5EE.crt | Bin 0 -> 942 bytes .../InvalidinhibitPolicyMappingTest6EE.crt | Bin 0 -> 947 bytes ...lidkeyUsageCriticalcRLSignFalseTest4EE.crt | Bin 0 -> 954 bytes ...eyUsageCriticalkeyCertSignFalseTest1EE.crt | Bin 0 -> 962 bytes ...keyUsageNotCriticalcRLSignFalseTest5EE.crt | Bin 0 -> 962 bytes ...sageNotCriticalkeyCertSignFalseTest2EE.crt | Bin 0 -> 963 bytes ...alidonlyContainsAttributeCertsTest14EE.crt | Bin 0 -> 945 bytes .../InvalidonlyContainsCACertsTest12EE.crt | Bin 0 -> 931 bytes .../InvalidonlyContainsUserCertsTest11EE.crt | Bin 0 -> 952 bytes .../certs/InvalidonlySomeReasonsTest15EE.crt | Bin 0 -> 924 bytes .../certs/InvalidonlySomeReasonsTest16EE.crt | Bin 0 -> 924 bytes .../certs/InvalidonlySomeReasonsTest17EE.crt | Bin 0 -> 924 bytes .../certs/InvalidonlySomeReasonsTest20EE.crt | Bin 0 -> 1153 bytes .../certs/InvalidonlySomeReasonsTest21EE.crt | Bin 0 -> 1153 bytes .../InvalidpathLenConstraintTest10EE.crt | Bin 0 -> 953 bytes .../InvalidpathLenConstraintTest11EE.crt | Bin 0 -> 940 bytes .../InvalidpathLenConstraintTest12EE.crt | Bin 0 -> 957 bytes .../certs/InvalidpathLenConstraintTest5EE.crt | Bin 0 -> 930 bytes .../certs/InvalidpathLenConstraintTest6EE.crt | Bin 0 -> 947 bytes .../certs/InvalidpathLenConstraintTest9EE.crt | Bin 0 -> 935 bytes .../Invalidpre2000CRLnextUpdateTest12EE.crt | Bin 0 -> 937 bytes ...Invalidpre2000UTCEEnotAfterDateTest7EE.crt | Bin 0 -> 926 bytes .../InvalidrequireExplicitPolicyTest3EE.crt | Bin 0 -> 919 bytes .../InvalidrequireExplicitPolicyTest5EE.crt | Bin 0 -> 925 bytes .../certs/LongSerialNumberCACert.crt | Bin 0 -> 910 bytes .../nist-pkits/certs/Mapping1to2CACert.crt | Bin 0 -> 960 bytes .../certs/MappingFromanyPolicyCACert.crt | Bin 0 -> 961 bytes .../certs/MappingToanyPolicyCACert.crt | Bin 0 -> 965 bytes .../certs/MissingbasicConstraintsCACert.crt | Bin 0 -> 899 bytes .../nist-pkits/certs/NameOrderingCACert.crt | Bin 0 -> 980 bytes .../certs/NegativeSerialNumberCACert.crt | Bin 0 -> 914 bytes .../testdata/nist-pkits/certs/NoCRLCACert.crt | Bin 0 -> 898 bytes .../nist-pkits/certs/NoPoliciesCACert.crt | Bin 0 -> 878 bytes .../NoissuingDistributionPointCACert.crt | Bin 0 -> 919 bytes .../certs/OldCRLnextUpdateCACert.crt | Bin 0 -> 910 bytes .../certs/OverlappingPoliciesTest6EE.crt | Bin 0 -> 948 bytes .../nist-pkits/certs/P12Mapping1to3CACert.crt | Bin 0 -> 978 bytes .../certs/P12Mapping1to3subCACert.crt | Bin 0 -> 1000 bytes .../certs/P12Mapping1to3subsubCACert.crt | Bin 0 -> 980 bytes .../certs/P1Mapping1to234CACert.crt | Bin 0 -> 1017 bytes .../certs/P1Mapping1to234subCACert.crt | Bin 0 -> 1002 bytes .../certs/P1anyPolicyMapping1to2CACert.crt | Bin 0 -> 1329 bytes .../certs/PanyPolicyMapping1to2CACert.crt | Bin 0 -> 965 bytes .../nist-pkits/certs/PoliciesP1234CACert.crt | Bin 0 -> 964 bytes .../certs/PoliciesP1234subCAP123Cert.crt | Bin 0 -> 948 bytes .../PoliciesP1234subsubCAP123P12Cert.crt | Bin 0 -> 947 bytes .../nist-pkits/certs/PoliciesP123CACert.crt | Bin 0 -> 949 bytes .../certs/PoliciesP123subCAP12Cert.crt | Bin 0 -> 931 bytes .../certs/PoliciesP123subsubCAP12P1Cert.crt | Bin 0 -> 926 bytes .../certs/PoliciesP123subsubCAP12P2Cert.crt | Bin 0 -> 926 bytes .../PoliciesP123subsubsubCAP12P2P1Cert.crt | Bin 0 -> 936 bytes .../nist-pkits/certs/PoliciesP12CACert.crt | Bin 0 -> 934 bytes .../certs/PoliciesP12subCAP1Cert.crt | Bin 0 -> 912 bytes .../certs/PoliciesP12subsubCAP1P2Cert.crt | Bin 0 -> 922 bytes .../nist-pkits/certs/PoliciesP2subCA2Cert.crt | Bin 0 -> 918 bytes .../nist-pkits/certs/PoliciesP2subCACert.crt | Bin 0 -> 901 bytes .../nist-pkits/certs/PoliciesP3CACert.crt | Bin 0 -> 919 bytes .../RFC3280MandatoryAttributeTypesCACert.crt | Bin 0 -> 980 bytes .../RFC3280OptionalAttributeTypesCACert.crt | Bin 0 -> 992 bytes .../nist-pkits/certs/RevokedsubCACert.crt | Bin 0 -> 897 bytes ...rfromPrintableStringtoUTF8StringCACert.crt | Bin 0 -> 935 bytes ...CertificateandCRLKeysCA2CRLSigningCert.crt | Bin 0 -> 909 bytes ...eandCRLKeysCA2CertificateSigningCACert.crt | Bin 0 -> 926 bytes ...ateCertificateandCRLKeysCRLSigningCert.crt | Bin 0 -> 909 bytes ...cateandCRLKeysCertificateSigningCACert.crt | Bin 0 -> 926 bytes .../certs/TrustAnchorRootCertificate.crt | Bin 0 -> 843 bytes .../nist-pkits/certs/TwoCRLsCACert.crt | Bin 0 -> 900 bytes .../testdata/nist-pkits/certs/UIDCACert.crt | Bin 0 -> 900 bytes .../UTF8StringCaseInsensitiveMatchCACert.crt | Bin 0 -> 925 bytes .../certs/UTF8StringEncodedNamesCACert.crt | Bin 0 -> 902 bytes .../certs/UnknownCRLEntryExtensionCACert.crt | Bin 0 -> 919 bytes .../certs/UnknownCRLExtensionCACert.crt | Bin 0 -> 913 bytes .../certs/UserNoticeQualifierTest15EE.crt | Bin 0 -> 1026 bytes .../certs/UserNoticeQualifierTest16EE.crt | Bin 0 -> 1145 bytes .../certs/UserNoticeQualifierTest17EE.crt | Bin 0 -> 1014 bytes .../certs/UserNoticeQualifierTest18EE.crt | Bin 0 -> 1240 bytes .../certs/UserNoticeQualifierTest19EE.crt | Bin 0 -> 1263 bytes ...lidBasicSelfIssuedCRLSigningKeyTest6EE.crt | Bin 0 -> 956 bytes .../ValidBasicSelfIssuedNewWithOldTest3EE.crt | Bin 0 -> 945 bytes .../ValidBasicSelfIssuedNewWithOldTest4EE.crt | Bin 0 -> 945 bytes .../ValidBasicSelfIssuedOldWithNewTest1EE.crt | Bin 0 -> 945 bytes .../certs/ValidCertificatePathTest1EE.crt | Bin 0 -> 893 bytes .../certs/ValidDNSnameConstraintsTest30EE.crt | Bin 0 -> 976 bytes .../certs/ValidDNSnameConstraintsTest32EE.crt | Bin 0 -> 976 bytes ...alidDNandRFC822nameConstraintsTest27EE.crt | Bin 0 -> 1044 bytes .../certs/ValidDNnameConstraintsTest11EE.crt | Bin 0 -> 985 bytes .../certs/ValidDNnameConstraintsTest14EE.crt | Bin 0 -> 926 bytes .../certs/ValidDNnameConstraintsTest18EE.crt | Bin 0 -> 932 bytes .../certs/ValidDNnameConstraintsTest19EE.crt | Bin 0 -> 957 bytes .../certs/ValidDNnameConstraintsTest1EE.crt | Bin 0 -> 956 bytes .../certs/ValidDNnameConstraintsTest4EE.crt | Bin 0 -> 1016 bytes .../certs/ValidDNnameConstraintsTest5EE.crt | Bin 0 -> 1109 bytes .../certs/ValidDNnameConstraintsTest6EE.crt | Bin 0 -> 956 bytes .../ValidDSAParameterInheritanceTest5EE.crt | Bin 0 -> 574 bytes .../certs/ValidDSASignaturesTest4EE.crt | Bin 0 -> 835 bytes ...idGeneralizedTimeCRLnextUpdateTest13EE.crt | Bin 0 -> 949 bytes ...alidGeneralizedTimenotAfterDateTest8EE.crt | Bin 0 -> 925 bytes ...lidGeneralizedTimenotBeforeDateTest4EE.crt | Bin 0 -> 926 bytes .../certs/ValidIDPwithindirectCRLTest22EE.crt | Bin 0 -> 923 bytes .../certs/ValidIDPwithindirectCRLTest24EE.crt | Bin 0 -> 1016 bytes .../certs/ValidIDPwithindirectCRLTest25EE.crt | Bin 0 -> 1016 bytes .../certs/ValidLongSerialNumberTest16EE.crt | Bin 0 -> 946 bytes .../certs/ValidLongSerialNumberTest17EE.crt | Bin 0 -> 946 bytes ...ValidNameChainingCapitalizationTest5EE.crt | Bin 0 -> 922 bytes .../ValidNameChainingWhitespaceTest3EE.crt | Bin 0 -> 923 bytes .../ValidNameChainingWhitespaceTest4EE.crt | Bin 0 -> 924 bytes .../nist-pkits/certs/ValidNameUIDsTest6EE.crt | Bin 0 -> 901 bytes .../ValidNegativeSerialNumberTest14EE.crt | Bin 0 -> 936 bytes ...alidNoissuingDistributionPointTest10EE.crt | Bin 0 -> 1069 bytes .../certs/ValidPolicyMappingTest11EE.crt | Bin 0 -> 936 bytes .../certs/ValidPolicyMappingTest12EE.crt | Bin 0 -> 1339 bytes .../certs/ValidPolicyMappingTest13EE.crt | Bin 0 -> 929 bytes .../certs/ValidPolicyMappingTest14EE.crt | Bin 0 -> 929 bytes .../certs/ValidPolicyMappingTest1EE.crt | Bin 0 -> 916 bytes .../certs/ValidPolicyMappingTest3EE.crt | Bin 0 -> 926 bytes .../certs/ValidPolicyMappingTest5EE.crt | Bin 0 -> 924 bytes .../certs/ValidPolicyMappingTest6EE.crt | Bin 0 -> 924 bytes .../certs/ValidPolicyMappingTest9EE.crt | Bin 0 -> 927 bytes ...dRFC3280MandatoryAttributeTypesTest7EE.crt | Bin 0 -> 1011 bytes ...idRFC3280OptionalAttributeTypesTest8EE.crt | Bin 0 -> 1022 bytes .../ValidRFC822nameConstraintsTest21EE.crt | Bin 0 -> 991 bytes .../ValidRFC822nameConstraintsTest23EE.crt | Bin 0 -> 980 bytes .../ValidRFC822nameConstraintsTest25EE.crt | Bin 0 -> 991 bytes ...romPrintableStringtoUTF8StringTest10EE.crt | Bin 0 -> 965 bytes ...ValidSelfIssuedinhibitAnyPolicyTest7EE.crt | Bin 0 -> 939 bytes ...ValidSelfIssuedinhibitAnyPolicyTest9EE.crt | Bin 0 -> 939 bytes ...dSelfIssuedinhibitPolicyMappingTest7EE.crt | Bin 0 -> 949 bytes ...lidSelfIssuedpathLenConstraintTest15EE.crt | Bin 0 -> 938 bytes ...lidSelfIssuedpathLenConstraintTest17EE.crt | Bin 0 -> 941 bytes ...SelfIssuedrequireExplicitPolicyTest6EE.crt | Bin 0 -> 920 bytes ...dSeparateCertificateandCRLKeysTest19EE.crt | Bin 0 -> 958 bytes .../nist-pkits/certs/ValidTwoCRLsTest7EE.crt | Bin 0 -> 906 bytes .../certs/ValidURInameConstraintsTest34EE.crt | Bin 0 -> 994 bytes .../certs/ValidURInameConstraintsTest36EE.crt | Bin 0 -> 997 bytes ...UTF8StringCaseInsensitiveMatchTest11EE.crt | Bin 0 -> 962 bytes .../ValidUTF8StringEncodedNamesTest9EE.crt | Bin 0 -> 924 bytes ...NotCriticalCertificateExtensionTest1EE.crt | Bin 0 -> 952 bytes ...alidbasicConstraintsNotCriticalTest4EE.crt | Bin 0 -> 948 bytes .../certs/ValidcRLIssuerTest28EE.crt | Bin 0 -> 1156 bytes .../certs/ValidcRLIssuerTest29EE.crt | Bin 0 -> 1065 bytes .../certs/ValidcRLIssuerTest30EE.crt | Bin 0 -> 1156 bytes .../certs/ValidcRLIssuerTest33EE.crt | Bin 0 -> 1134 bytes .../nist-pkits/certs/ValiddeltaCRLTest2EE.crt | Bin 0 -> 1091 bytes .../nist-pkits/certs/ValiddeltaCRLTest5EE.crt | Bin 0 -> 1091 bytes .../nist-pkits/certs/ValiddeltaCRLTest7EE.crt | Bin 0 -> 1091 bytes .../nist-pkits/certs/ValiddeltaCRLTest8EE.crt | Bin 0 -> 1091 bytes .../certs/ValiddistributionPointTest1EE.crt | Bin 0 -> 1069 bytes .../certs/ValiddistributionPointTest4EE.crt | Bin 0 -> 982 bytes .../certs/ValiddistributionPointTest5EE.crt | Bin 0 -> 982 bytes .../certs/ValiddistributionPointTest7EE.crt | Bin 0 -> 1069 bytes .../certs/ValidinhibitAnyPolicyTest2EE.crt | Bin 0 -> 931 bytes .../ValidinhibitPolicyMappingTest2EE.crt | Bin 0 -> 938 bytes .../ValidinhibitPolicyMappingTest4EE.crt | Bin 0 -> 941 bytes .../certs/ValidkeyUsageNotCriticalTest3EE.crt | Bin 0 -> 932 bytes .../ValidonlyContainsCACertsTest13EE.crt | Bin 0 -> 946 bytes .../certs/ValidonlySomeReasonsTest18EE.crt | Bin 0 -> 1035 bytes .../certs/ValidonlySomeReasonsTest19EE.crt | Bin 0 -> 1151 bytes .../certs/ValidpathLenConstraintTest13EE.crt | Bin 0 -> 938 bytes .../certs/ValidpathLenConstraintTest14EE.crt | Bin 0 -> 955 bytes .../certs/ValidpathLenConstraintTest7EE.crt | Bin 0 -> 925 bytes .../certs/ValidpathLenConstraintTest8EE.crt | Bin 0 -> 942 bytes .../Validpre2000UTCnotBeforeDateTest3EE.crt | Bin 0 -> 920 bytes .../ValidrequireExplicitPolicyTest1EE.crt | Bin 0 -> 918 bytes .../ValidrequireExplicitPolicyTest2EE.crt | Bin 0 -> 917 bytes .../ValidrequireExplicitPolicyTest4EE.crt | Bin 0 -> 942 bytes .../nist-pkits/certs/WrongCRLCACert.crt | Bin 0 -> 901 bytes .../nist-pkits/certs/anyPolicyCACert.crt | Bin 0 -> 911 bytes .../basicConstraintsCriticalcAFalseCACert.crt | Bin 0 -> 923 bytes .../basicConstraintsNotCriticalCACert.crt | Bin 0 -> 918 bytes ...sicConstraintsNotCriticalcAFalseCACert.crt | Bin 0 -> 924 bytes .../nist-pkits/certs/deltaCRLCA1Cert.crt | Bin 0 -> 901 bytes .../nist-pkits/certs/deltaCRLCA2Cert.crt | Bin 0 -> 901 bytes .../nist-pkits/certs/deltaCRLCA3Cert.crt | Bin 0 -> 901 bytes .../certs/deltaCRLIndicatorNoBaseCACert.crt | Bin 0 -> 917 bytes .../certs/distributionPoint1CACert.crt | Bin 0 -> 910 bytes .../certs/distributionPoint2CACert.crt | Bin 0 -> 910 bytes .../nist-pkits/certs/indirectCRLCA1Cert.crt | Bin 0 -> 904 bytes .../nist-pkits/certs/indirectCRLCA2Cert.crt | Bin 0 -> 904 bytes .../nist-pkits/certs/indirectCRLCA3Cert.crt | Bin 0 -> 904 bytes .../certs/indirectCRLCA3cRLIssuerCert.crt | Bin 0 -> 1010 bytes .../nist-pkits/certs/indirectCRLCA4Cert.crt | Bin 0 -> 904 bytes .../certs/indirectCRLCA4cRLIssuerCert.crt | Bin 0 -> 1144 bytes .../nist-pkits/certs/indirectCRLCA5Cert.crt | Bin 0 -> 904 bytes .../nist-pkits/certs/indirectCRLCA6Cert.crt | Bin 0 -> 904 bytes .../certs/inhibitAnyPolicy0CACert.crt | Bin 0 -> 940 bytes .../certs/inhibitAnyPolicy1CACert.crt | Bin 0 -> 940 bytes .../inhibitAnyPolicy1SelfIssuedCACert.crt | Bin 0 -> 917 bytes .../inhibitAnyPolicy1SelfIssuedsubCA2Cert.crt | Bin 0 -> 919 bytes .../certs/inhibitAnyPolicy1subCA1Cert.crt | Bin 0 -> 915 bytes .../certs/inhibitAnyPolicy1subCA2Cert.crt | Bin 0 -> 915 bytes .../certs/inhibitAnyPolicy1subCAIAP5Cert.crt | Bin 0 -> 941 bytes .../certs/inhibitAnyPolicy1subsubCA2Cert.crt | Bin 0 -> 922 bytes .../certs/inhibitAnyPolicy5CACert.crt | Bin 0 -> 940 bytes .../certs/inhibitAnyPolicy5subCACert.crt | Bin 0 -> 937 bytes .../certs/inhibitAnyPolicy5subsubCACert.crt | Bin 0 -> 926 bytes .../certs/inhibitAnyPolicyTest3EE.crt | Bin 0 -> 921 bytes .../certs/inhibitPolicyMapping0CACert.crt | Bin 0 -> 935 bytes .../certs/inhibitPolicyMapping0subCACert.crt | Bin 0 -> 970 bytes .../certs/inhibitPolicyMapping1P12CACert.crt | Bin 0 -> 953 bytes .../inhibitPolicyMapping1P12subCACert.crt | Bin 0 -> 1018 bytes .../inhibitPolicyMapping1P12subCAIPM5Cert.crt | Bin 0 -> 973 bytes .../inhibitPolicyMapping1P12subsubCACert.crt | Bin 0 -> 998 bytes ...hibitPolicyMapping1P12subsubCAIPM5Cert.crt | Bin 0 -> 1006 bytes .../certs/inhibitPolicyMapping1P1CACert.crt | Bin 0 -> 938 bytes ...nhibitPolicyMapping1P1SelfIssuedCACert.crt | Bin 0 -> 931 bytes ...bitPolicyMapping1P1SelfIssuedsubCACert.crt | Bin 0 -> 979 bytes .../inhibitPolicyMapping1P1subCACert.crt | Bin 0 -> 976 bytes .../inhibitPolicyMapping1P1subsubCACert.crt | Bin 0 -> 982 bytes .../certs/inhibitPolicyMapping5CACert.crt | Bin 0 -> 935 bytes .../certs/inhibitPolicyMapping5subCACert.crt | Bin 0 -> 947 bytes .../inhibitPolicyMapping5subsubCACert.crt | Bin 0 -> 934 bytes .../inhibitPolicyMapping5subsubsubCACert.crt | Bin 0 -> 982 bytes .../keyUsageCriticalcRLSignFalseCACert.crt | Bin 0 -> 923 bytes ...keyUsageCriticalkeyCertSignFalseCACert.crt | Bin 0 -> 927 bytes .../certs/keyUsageNotCriticalCACert.crt | Bin 0 -> 910 bytes .../keyUsageNotCriticalcRLSignFalseCACert.crt | Bin 0 -> 924 bytes ...UsageNotCriticalkeyCertSignFalseCACert.crt | Bin 0 -> 928 bytes .../certs/nameConstraintsDN1CACert.crt | Bin 0 -> 1009 bytes .../nameConstraintsDN1SelfIssuedCACert.crt | Bin 0 -> 921 bytes .../certs/nameConstraintsDN1subCA1Cert.crt | Bin 0 -> 1079 bytes .../certs/nameConstraintsDN1subCA2Cert.crt | Bin 0 -> 1051 bytes .../certs/nameConstraintsDN1subCA3Cert.crt | Bin 0 -> 995 bytes .../certs/nameConstraintsDN2CACert.crt | Bin 0 -> 1095 bytes .../certs/nameConstraintsDN3CACert.crt | Bin 0 -> 1008 bytes .../certs/nameConstraintsDN3subCA1Cert.crt | Bin 0 -> 1022 bytes .../certs/nameConstraintsDN3subCA2Cert.crt | Bin 0 -> 995 bytes .../certs/nameConstraintsDN4CACert.crt | Bin 0 -> 1093 bytes .../certs/nameConstraintsDN5CACert.crt | Bin 0 -> 1123 bytes .../certs/nameConstraintsDNS1CACert.crt | Bin 0 -> 954 bytes .../certs/nameConstraintsDNS2CACert.crt | Bin 0 -> 957 bytes .../certs/nameConstraintsRFC822CA1Cert.crt | Bin 0 -> 958 bytes .../certs/nameConstraintsRFC822CA2Cert.crt | Bin 0 -> 957 bytes .../certs/nameConstraintsRFC822CA3Cert.crt | Bin 0 -> 957 bytes .../certs/nameConstraintsURI1CACert.crt | Bin 0 -> 955 bytes .../certs/nameConstraintsURI2CACert.crt | Bin 0 -> 957 bytes .../onlyContainsAttributeCertsCACert.crt | Bin 0 -> 918 bytes .../certs/onlyContainsCACertsCACert.crt | Bin 0 -> 911 bytes .../certs/onlyContainsUserCertsCACert.crt | Bin 0 -> 913 bytes .../certs/onlySomeReasonsCA1Cert.crt | Bin 0 -> 908 bytes .../certs/onlySomeReasonsCA2Cert.crt | Bin 0 -> 908 bytes .../certs/onlySomeReasonsCA3Cert.crt | Bin 0 -> 908 bytes .../certs/onlySomeReasonsCA4Cert.crt | Bin 0 -> 908 bytes .../certs/pathLenConstraint0CACert.crt | Bin 0 -> 913 bytes .../pathLenConstraint0SelfIssuedCACert.crt | Bin 0 -> 919 bytes .../certs/pathLenConstraint0subCA2Cert.crt | Bin 0 -> 923 bytes .../certs/pathLenConstraint0subCACert.crt | Bin 0 -> 922 bytes .../certs/pathLenConstraint1CACert.crt | Bin 0 -> 913 bytes .../pathLenConstraint1SelfIssuedCACert.crt | Bin 0 -> 919 bytes .../pathLenConstraint1SelfIssuedsubCACert.crt | Bin 0 -> 925 bytes .../certs/pathLenConstraint1subCACert.crt | Bin 0 -> 922 bytes .../certs/pathLenConstraint6CACert.crt | Bin 0 -> 913 bytes .../certs/pathLenConstraint6subCA0Cert.crt | Bin 0 -> 926 bytes .../certs/pathLenConstraint6subCA1Cert.crt | Bin 0 -> 926 bytes .../certs/pathLenConstraint6subCA4Cert.crt | Bin 0 -> 926 bytes .../pathLenConstraint6subsubCA00Cert.crt | Bin 0 -> 934 bytes .../pathLenConstraint6subsubCA11Cert.crt | Bin 0 -> 934 bytes .../pathLenConstraint6subsubCA41Cert.crt | Bin 0 -> 934 bytes .../pathLenConstraint6subsubsubCA11XCert.crt | Bin 0 -> 939 bytes .../pathLenConstraint6subsubsubCA41XCert.crt | Bin 0 -> 939 bytes .../certs/pre2000CRLnextUpdateCACert.crt | Bin 0 -> 914 bytes .../certs/requireExplicitPolicy0CACert.crt | Bin 0 -> 933 bytes .../certs/requireExplicitPolicy0subCACert.crt | Bin 0 -> 930 bytes .../requireExplicitPolicy0subsubCACert.crt | Bin 0 -> 936 bytes .../requireExplicitPolicy0subsubsubCACert.crt | Bin 0 -> 942 bytes .../certs/requireExplicitPolicy10CACert.crt | Bin 0 -> 934 bytes .../requireExplicitPolicy10subCACert.crt | Bin 0 -> 932 bytes .../requireExplicitPolicy10subsubCACert.crt | Bin 0 -> 938 bytes ...requireExplicitPolicy10subsubsubCACert.crt | Bin 0 -> 944 bytes .../certs/requireExplicitPolicy2CACert.crt | Bin 0 -> 933 bytes ...requireExplicitPolicy2SelfIssuedCACert.crt | Bin 0 -> 927 bytes ...uireExplicitPolicy2SelfIssuedsubCACert.crt | Bin 0 -> 933 bytes .../certs/requireExplicitPolicy2subCACert.crt | Bin 0 -> 930 bytes .../certs/requireExplicitPolicy4CACert.crt | Bin 0 -> 933 bytes .../certs/requireExplicitPolicy4subCACert.crt | Bin 0 -> 930 bytes .../requireExplicitPolicy4subsubCACert.crt | Bin 0 -> 936 bytes .../requireExplicitPolicy4subsubsubCACert.crt | Bin 0 -> 942 bytes .../certs/requireExplicitPolicy5CACert.crt | Bin 0 -> 933 bytes .../certs/requireExplicitPolicy5subCACert.crt | Bin 0 -> 930 bytes .../requireExplicitPolicy5subsubCACert.crt | Bin 0 -> 936 bytes .../requireExplicitPolicy5subsubsubCACert.crt | Bin 0 -> 942 bytes .../certs/requireExplicitPolicy7CACert.crt | Bin 0 -> 933 bytes .../requireExplicitPolicy7subCARE2Cert.crt | Bin 0 -> 952 bytes ...quireExplicitPolicy7subsubCARE2RE4Cert.crt | Bin 0 -> 964 bytes ...reExplicitPolicy7subsubsubCARE2RE4Cert.crt | Bin 0 -> 954 bytes .../x509/testdata/nist-pkits/vectors.json | 5010 +++++++++++++++++ 408 files changed, 5202 insertions(+) create mode 100644 src/crypto/x509/pkits_test.go create mode 100644 src/crypto/x509/testdata/nist-pkits/README.md create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/AllCertificatesNoPoliciesTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/AllCertificatesSamePoliciesTest10EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/AllCertificatesSamePoliciesTest13EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/AllCertificatesanyPolicyTest11EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/AnyPolicyTest14EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/BadCRLIssuerNameCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/BadCRLSignatureCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/BadSignedCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/BadnotAfterDateCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/BadnotBeforeDateCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedCRLSigningKeyCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedCRLSigningKeyCRLCert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedNewKeyCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedNewKeyOldWithNewCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedOldKeyCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedOldKeyNewWithOldCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/CPSPointerQualifierTest20EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/DSACACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/DSAParametersInheritedCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest12EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest7EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest8EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest9EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/GeneralizedTimeCRLnextUpdateCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/GoodCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/GoodsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/GoodsubCAPanyPolicyMapping1to2CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidBadCRLIssuerNameTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidBadCRLSignatureTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidBasicSelfIssuedCRLSigningKeyTest7EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidBasicSelfIssuedCRLSigningKeyTest8EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidBasicSelfIssuedNewWithOldTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidBasicSelfIssuedOldWithNewTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidCASignatureTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidCAnotAfterDateTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidCAnotBeforeDateTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNSnameConstraintsTest31EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNSnameConstraintsTest33EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNSnameConstraintsTest38EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNandRFC822nameConstraintsTest28EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNandRFC822nameConstraintsTest29EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest10EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest12EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest13EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest15EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest16EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest17EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest20EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest7EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest8EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest9EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidDSASignatureTest6EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidEESignatureTest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidEEnotAfterDateTest6EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidEEnotBeforeDateTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidIDPwithindirectCRLTest23EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidIDPwithindirectCRLTest26EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidLongSerialNumberTest18EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidMappingFromanyPolicyTest7EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidMappingToanyPolicyTest8EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidMissingCRLTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidMissingbasicConstraintsTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidNameChainingOrderTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidNameChainingTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidNegativeSerialNumberTest15EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidOldCRLnextUpdateTest11EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidPolicyMappingTest10EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidPolicyMappingTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidPolicyMappingTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidRFC822nameConstraintsTest22EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidRFC822nameConstraintsTest24EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidRFC822nameConstraintsTest26EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidRevokedCATest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidRevokedEETest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitAnyPolicyTest10EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitAnyPolicyTest8EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest10EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest11EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest8EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest9EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedpathLenConstraintTest16EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedrequireExplicitPolicyTest7EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedrequireExplicitPolicyTest8EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidSeparateCertificateandCRLKeysTest20EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidSeparateCertificateandCRLKeysTest21EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidURInameConstraintsTest35EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidURInameConstraintsTest37EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidUnknownCRLEntryExtensionTest8EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidUnknownCRLExtensionTest10EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidUnknownCRLExtensionTest9EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidUnknownCriticalCertificateExtensionTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidWrongCRLTest6EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidcAFalseTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidcAFalseTest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidcRLIssuerTest27EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidcRLIssuerTest31EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidcRLIssuerTest32EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidcRLIssuerTest34EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidcRLIssuerTest35EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvaliddeltaCRLIndicatorNoBaseTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvaliddeltaCRLTest10EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvaliddeltaCRLTest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvaliddeltaCRLTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvaliddeltaCRLTest6EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvaliddeltaCRLTest9EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvaliddistributionPointTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvaliddistributionPointTest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvaliddistributionPointTest6EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvaliddistributionPointTest8EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvaliddistributionPointTest9EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest6EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest6EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidkeyUsageCriticalcRLSignFalseTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidkeyUsageCriticalkeyCertSignFalseTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidkeyUsageNotCriticalcRLSignFalseTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidkeyUsageNotCriticalkeyCertSignFalseTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidonlyContainsAttributeCertsTest14EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidonlyContainsCACertsTest12EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidonlyContainsUserCertsTest11EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest15EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest16EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest17EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest20EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest21EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidpathLenConstraintTest10EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidpathLenConstraintTest11EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidpathLenConstraintTest12EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidpathLenConstraintTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidpathLenConstraintTest6EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidpathLenConstraintTest9EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/Invalidpre2000CRLnextUpdateTest12EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/Invalidpre2000UTCEEnotAfterDateTest7EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidrequireExplicitPolicyTest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/InvalidrequireExplicitPolicyTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/LongSerialNumberCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/Mapping1to2CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/MappingFromanyPolicyCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/MappingToanyPolicyCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/MissingbasicConstraintsCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/NameOrderingCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/NegativeSerialNumberCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/NoCRLCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/NoPoliciesCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/NoissuingDistributionPointCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/OldCRLnextUpdateCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/OverlappingPoliciesTest6EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/P12Mapping1to3CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/P12Mapping1to3subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/P12Mapping1to3subsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/P1Mapping1to234CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/P1Mapping1to234subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/P1anyPolicyMapping1to2CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PanyPolicyMapping1to2CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PoliciesP1234CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PoliciesP1234subCAP123Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PoliciesP1234subsubCAP123P12Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PoliciesP123CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PoliciesP123subCAP12Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PoliciesP123subsubCAP12P1Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PoliciesP123subsubCAP12P2Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PoliciesP123subsubsubCAP12P2P1Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PoliciesP12CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PoliciesP12subCAP1Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PoliciesP12subsubCAP1P2Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PoliciesP2subCA2Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PoliciesP2subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/PoliciesP3CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/RFC3280MandatoryAttributeTypesCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/RFC3280OptionalAttributeTypesCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/RevokedsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/RolloverfromPrintableStringtoUTF8StringCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCA2CRLSigningCert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCA2CertificateSigningCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCRLSigningCert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCertificateSigningCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/TrustAnchorRootCertificate.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/TwoCRLsCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/UIDCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/UTF8StringCaseInsensitiveMatchCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/UTF8StringEncodedNamesCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/UnknownCRLEntryExtensionCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/UnknownCRLExtensionCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/UserNoticeQualifierTest15EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/UserNoticeQualifierTest16EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/UserNoticeQualifierTest17EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/UserNoticeQualifierTest18EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/UserNoticeQualifierTest19EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidBasicSelfIssuedCRLSigningKeyTest6EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidBasicSelfIssuedNewWithOldTest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidBasicSelfIssuedNewWithOldTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidBasicSelfIssuedOldWithNewTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidCertificatePathTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidDNSnameConstraintsTest30EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidDNSnameConstraintsTest32EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidDNandRFC822nameConstraintsTest27EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest11EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest14EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest18EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest19EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest6EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidDSAParameterInheritanceTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidDSASignaturesTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidGeneralizedTimeCRLnextUpdateTest13EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidGeneralizedTimenotAfterDateTest8EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidGeneralizedTimenotBeforeDateTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest22EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest24EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest25EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidLongSerialNumberTest16EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidLongSerialNumberTest17EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidNameChainingCapitalizationTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidNameChainingWhitespaceTest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidNameChainingWhitespaceTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidNameUIDsTest6EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidNegativeSerialNumberTest14EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidNoissuingDistributionPointTest10EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest11EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest12EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest13EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest14EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest6EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest9EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidRFC3280MandatoryAttributeTypesTest7EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidRFC3280OptionalAttributeTypesTest8EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidRFC822nameConstraintsTest21EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidRFC822nameConstraintsTest23EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidRFC822nameConstraintsTest25EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidRolloverfromPrintableStringtoUTF8StringTest10EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedinhibitAnyPolicyTest7EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedinhibitAnyPolicyTest9EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedinhibitPolicyMappingTest7EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedpathLenConstraintTest15EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedpathLenConstraintTest17EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedrequireExplicitPolicyTest6EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidSeparateCertificateandCRLKeysTest19EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidTwoCRLsTest7EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidURInameConstraintsTest34EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidURInameConstraintsTest36EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidUTF8StringCaseInsensitiveMatchTest11EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidUTF8StringEncodedNamesTest9EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidUnknownNotCriticalCertificateExtensionTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidbasicConstraintsNotCriticalTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidcRLIssuerTest28EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidcRLIssuerTest29EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidcRLIssuerTest30EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidcRLIssuerTest33EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValiddeltaCRLTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValiddeltaCRLTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValiddeltaCRLTest7EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValiddeltaCRLTest8EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValiddistributionPointTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValiddistributionPointTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValiddistributionPointTest5EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValiddistributionPointTest7EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidinhibitAnyPolicyTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidinhibitPolicyMappingTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidinhibitPolicyMappingTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidkeyUsageNotCriticalTest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidonlyContainsCACertsTest13EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidonlySomeReasonsTest18EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidonlySomeReasonsTest19EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidpathLenConstraintTest13EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidpathLenConstraintTest14EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidpathLenConstraintTest7EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidpathLenConstraintTest8EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/Validpre2000UTCnotBeforeDateTest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest1EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest2EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest4EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/WrongCRLCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/anyPolicyCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/basicConstraintsCriticalcAFalseCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/basicConstraintsNotCriticalCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/basicConstraintsNotCriticalcAFalseCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/deltaCRLCA1Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/deltaCRLCA2Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/deltaCRLCA3Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/deltaCRLIndicatorNoBaseCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/distributionPoint1CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/distributionPoint2CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA1Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA2Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA3Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA3cRLIssuerCert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA4Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA4cRLIssuerCert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA5Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA6Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy0CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy1CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy1SelfIssuedCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy1SelfIssuedsubCA2Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy1subCA1Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy1subCA2Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy1subCAIAP5Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy1subsubCA2Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy5CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy5subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy5subsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicyTest3EE.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping0CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping0subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P12CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subCAIPM5Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subsubCAIPM5Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P1CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P1SelfIssuedCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P1SelfIssuedsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P1subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P1subsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping5CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping5subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping5subsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping5subsubsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/keyUsageCriticalcRLSignFalseCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/keyUsageCriticalkeyCertSignFalseCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/keyUsageNotCriticalCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/keyUsageNotCriticalcRLSignFalseCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/keyUsageNotCriticalkeyCertSignFalseCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN1CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN1SelfIssuedCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN1subCA1Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN1subCA2Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN1subCA3Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN2CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN3CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN3subCA1Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN3subCA2Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN4CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN5CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDNS1CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDNS2CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsRFC822CA1Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsRFC822CA2Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsRFC822CA3Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsURI1CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsURI2CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/onlyContainsAttributeCertsCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/onlyContainsCACertsCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/onlyContainsUserCertsCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/onlySomeReasonsCA1Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/onlySomeReasonsCA2Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/onlySomeReasonsCA3Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/onlySomeReasonsCA4Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint0CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint0SelfIssuedCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint0subCA2Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint0subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint1CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint1SelfIssuedCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint1SelfIssuedsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint1subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subCA0Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subCA1Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subCA4Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubCA00Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubCA11Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubCA41Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubsubCA11XCert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubsubCA41XCert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/pre2000CRLnextUpdateCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy0CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy0subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy0subsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy0subsubsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy10CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy10subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy10subsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy10subsubsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy2CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy2SelfIssuedCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy2SelfIssuedsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy2subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy4CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy4subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy4subsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy4subsubsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy5CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy5subCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy5subsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy5subsubsubCACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy7CACert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy7subCARE2Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy7subsubCARE2RE4Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy7subsubsubCARE2RE4Cert.crt create mode 100644 src/crypto/x509/testdata/nist-pkits/vectors.json diff --git a/src/crypto/x509/pkits_test.go b/src/crypto/x509/pkits_test.go new file mode 100644 index 0000000000..b1139bbf9c --- /dev/null +++ b/src/crypto/x509/pkits_test.go @@ -0,0 +1,186 @@ +// Copyright 2024 The Go Authors. All rights reserved. +// Use of this source code is governed by a BSD-style +// license that can be found in the LICENSE file. + +package x509 + +import ( + "encoding/json" + "os" + "path/filepath" + "slices" + "testing" +) + +var nistTestPolicies = map[string]OID{ + "anyPolicy": anyPolicyOID, + "NIST-test-policy-1": mustNewOIDFromInts([]uint64{2, 16, 840, 1, 101, 3, 2, 1, 48, 1}), + "NIST-test-policy-2": mustNewOIDFromInts([]uint64{2, 16, 840, 1, 101, 3, 2, 1, 48, 2}), + "NIST-test-policy-3": mustNewOIDFromInts([]uint64{2, 16, 840, 1, 101, 3, 2, 1, 48, 3}), + "NIST-test-policy-6": mustNewOIDFromInts([]uint64{2, 16, 840, 1, 101, 3, 2, 1, 48, 6}), +} + +func TestNISTPKITSPolicy(t *testing.T) { + // This test runs a subset of the NIST PKI path validation test suite that + // focuses of policy validation, rather than the entire suite. Since the + // suite assumes you are only validating the path, rather than building + // _and_ validating the path, we take the path as given and run + // policiesValid on it. + + certDir := "testdata/nist-pkits/certs" + + var testcases []struct { + Name string + CertPath []string + InitialPolicySet []string + InitialPolicyMappingInhibit bool + InitialExplicitPolicy bool + InitialAnyPolicyInhibit bool + ShouldValidate bool + Skipped bool + } + b, err := os.ReadFile("testdata/nist-pkits/vectors.json") + if err != nil { + t.Fatal(err) + } + if err := json.Unmarshal(b, &testcases); err != nil { + t.Fatal(err) + } + + policyTests := map[string]bool{ + "4.8.1 All Certificates Same Policy Test1 (Subpart 1)": true, + "4.8.1 All Certificates Same Policy Test1 (Subpart 2)": true, + "4.8.1 All Certificates Same Policy Test1 (Subpart 3)": true, + "4.8.1 All Certificates Same Policy Test1 (Subpart 4)": true, + "4.8.2 All Certificates No Policies Test2 (Subpart 1)": true, + "4.8.2 All Certificates No Policies Test2 (Subpart 2)": true, + "4.8.3 Different Policies Test3 (Subpart 1)": true, + "4.8.3 Different Policies Test3 (Subpart 2)": true, + "4.8.3 Different Policies Test3 (Subpart 3)": true, + "4.8.4 Different Policies Test4": true, + "4.8.5 Different Policies Test5": true, + "4.8.6 Overlapping Policies Test6 (Subpart 1)": true, + "4.8.6 Overlapping Policies Test6 (Subpart 2)": true, + "4.8.6 Overlapping Policies Test6 (Subpart 3)": true, + "4.8.7 Different Policies Test7": true, + "4.8.8 Different Policies Test8": true, + "4.8.9 Different Policies Test9": true, + "4.8.10 All Certificates Same Policies Test10 (Subpart 1)": true, + "4.8.10 All Certificates Same Policies Test10 (Subpart 2)": true, + "4.8.10 All Certificates Same Policies Test10 (Subpart 3)": true, + "4.8.11 All Certificates AnyPolicy Test11 (Subpart 1)": true, + "4.8.11 All Certificates AnyPolicy Test11 (Subpart 2)": true, + "4.8.12 Different Policies Test12": true, + "4.8.13 All Certificates Same Policies Test13 (Subpart 1)": true, + "4.8.13 All Certificates Same Policies Test13 (Subpart 2)": true, + "4.8.13 All Certificates Same Policies Test13 (Subpart 3)": true, + "4.8.14 AnyPolicy Test14 (Subpart 1)": true, + "4.8.14 AnyPolicy Test14 (Subpart 2)": true, + "4.8.15 User Notice Qualifier Test15": true, + "4.8.16 User Notice Qualifier Test16": true, + "4.8.17 User Notice Qualifier Test17": true, + "4.8.18 User Notice Qualifier Test18 (Subpart 1)": true, + "4.8.18 User Notice Qualifier Test18 (Subpart 2)": true, + "4.8.19 User Notice Qualifier Test19": true, + "4.8.20 CPS Pointer Qualifier Test20": true, + "4.9.1 Valid RequireExplicitPolicy Test1": true, + "4.9.2 Valid RequireExplicitPolicy Test2": true, + "4.9.3 Invalid RequireExplicitPolicy Test3": true, + "4.9.4 Valid RequireExplicitPolicy Test4": true, + "4.9.5 Invalid RequireExplicitPolicy Test5": true, + "4.9.6 Valid Self-Issued requireExplicitPolicy Test6": true, + "4.9.7 Invalid Self-Issued requireExplicitPolicy Test7": true, + "4.9.8 Invalid Self-Issued requireExplicitPolicy Test8": true, + "4.10.1.1 Valid Policy Mapping Test1 (Subpart 1)": true, + "4.10.1.2 Valid Policy Mapping Test1 (Subpart 2)": true, + "4.10.1.3 Valid Policy Mapping Test1 (Subpart 3)": true, + "4.10.2 Invalid Policy Mapping Test2 (Subpart 1)": true, + "4.10.2 Invalid Policy Mapping Test2 (Subpart 2)": true, + "4.10.3 Valid Policy Mapping Test3 (Subpart 1)": true, + "4.10.3 Valid Policy Mapping Test3 (Subpart 2)": true, + "4.10.4 Invalid Policy Mapping Test4": true, + "4.10.5 Valid Policy Mapping Test5 (Subpart 1)": true, + "4.10.5 Valid Policy Mapping Test5 (Subpart 2)": true, + "4.10.6 Valid Policy Mapping Test6 (Subpart 1)": true, + "4.10.6 Valid Policy Mapping Test6 (Subpart 2)": true, + "4.10.7 Invalid Mapping From anyPolicy Test7": true, + "4.10.8 Invalid Mapping To anyPolicy Test8": true, + "4.10.9 Valid Policy Mapping Test9": true, + "4.10.10 Invalid Policy Mapping Test10": true, + "4.10.11 Valid Policy Mapping Test11": true, + "4.10.12 Valid Policy Mapping Test12 (Subpart 1)": true, + "4.10.12 Valid Policy Mapping Test12 (Subpart 2)": true, + "4.10.13 Valid Policy Mapping Test13 (Subpart 1)": true, + "4.10.13 Valid Policy Mapping Test13 (Subpart 2)": true, + "4.10.13 Valid Policy Mapping Test13 (Subpart 3)": true, + "4.10.14 Valid Policy Mapping Test14": true, + "4.11.1 Invalid inhibitPolicyMapping Test1": true, + "4.11.2 Valid inhibitPolicyMapping Test2": true, + "4.11.3 Invalid inhibitPolicyMapping Test3": true, + "4.11.4 Valid inhibitPolicyMapping Test4": true, + "4.11.5 Invalid inhibitPolicyMapping Test5": true, + "4.11.6 Invalid inhibitPolicyMapping Test6": true, + "4.11.7 Valid Self-Issued inhibitPolicyMapping Test7": true, + "4.11.8 Invalid Self-Issued inhibitPolicyMapping Test8": true, + "4.11.9 Invalid Self-Issued inhibitPolicyMapping Test9": true, + "4.11.10 Invalid Self-Issued inhibitPolicyMapping Test10": true, + "4.11.11 Invalid Self-Issued inhibitPolicyMapping Test11": true, + "4.12.1 Invalid inhibitAnyPolicy Test1": true, + "4.12.2 Valid inhibitAnyPolicy Test2": true, + "4.12.3 inhibitAnyPolicy Test3 (Subpart 1)": true, + "4.12.3 inhibitAnyPolicy Test3 (Subpart 2)": true, + "4.12.4 Invalid inhibitAnyPolicy Test4": true, + "4.12.5 Invalid inhibitAnyPolicy Test5": true, + "4.12.6 Invalid inhibitAnyPolicy Test6": true, + "4.12.7 Valid Self-Issued inhibitAnyPolicy Test7": true, + "4.12.8 Invalid Self-Issued inhibitAnyPolicy Test8": true, + "4.12.9 Valid Self-Issued inhibitAnyPolicy Test9": true, + "4.12.10 Invalid Self-Issued inhibitAnyPolicy Test10": true, + } + + for _, tc := range testcases { + if !policyTests[tc.Name] { + continue + } + t.Run(tc.Name, func(t *testing.T) { + var chain []*Certificate + for _, c := range tc.CertPath { + certDER, err := os.ReadFile(filepath.Join(certDir, c)) + if err != nil { + t.Fatal(err) + } + cert, err := ParseCertificate(certDER) + if err != nil { + t.Fatal(err) + } + chain = append(chain, cert) + } + slices.Reverse(chain) + + var initialPolicies []OID + for _, pstr := range tc.InitialPolicySet { + policy, ok := nistTestPolicies[pstr] + if !ok { + t.Fatalf("unknown test policy: %s", pstr) + } + initialPolicies = append(initialPolicies, policy) + } + + valid := policiesValid(chain, VerifyOptions{ + CertificatePolicies: initialPolicies, + inhibitPolicyMapping: tc.InitialPolicyMappingInhibit, + requireExplicitPolicy: tc.InitialExplicitPolicy, + inhibitAnyPolicy: tc.InitialAnyPolicyInhibit, + }) + if !valid { + if !tc.ShouldValidate { + return + } + t.Fatalf("Failed to validate: %s", err) + } + if !tc.ShouldValidate { + t.Fatal("Expected path validation to fail") + } + }) + } +} diff --git a/src/crypto/x509/testdata/nist-pkits/README.md b/src/crypto/x509/testdata/nist-pkits/README.md new file mode 100644 index 0000000000..7b761260d6 --- /dev/null +++ b/src/crypto/x509/testdata/nist-pkits/README.md @@ -0,0 +1,6 @@ +Test vectors and certificates for the "Path Validation Testing Program" + portion of the NIST Public Key Infrastructure Testing suite: https://csrc.nist.gov/projects/pki-testing. + +Vectors are extracted from the provided PDF: https://csrc.nist.gov/CSRC/media/Projects/PKI-Testing/documents/PKITS.pdf. + +Vectors and test material are public domain (United States Government Work under 17 U.S.C. 105). \ No newline at end of file diff --git a/src/crypto/x509/testdata/nist-pkits/certs/AllCertificatesNoPoliciesTest2EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/AllCertificatesNoPoliciesTest2EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..ae6be6c4c8f63f4853d671e0b30d3e09d0cd5113 GIT binary patch literal 898 zcmXqLVy-i2VoF=U%*4pV#K>sC%f_kI=F#?@mywa1mBGN>klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6gLnBDPR`n^UGHV$j`}4&IC$1I~vG| z^BNi$7y_Y%v4Md>lsK=kfuWHxjBAiZqD58)77&XJ9dmL}9fEALt1Ggc0?5@y22G4g z$o^zxWngY%6){F1jHDtM+5kAwW{-fc@l7RVI&QD4_O)Whd53>9$pDoB0ydrn6=#O`@ zihF%7Myx!0EBeA|gC9~p0xc7E`~98Fvtjkt$eqHqJC1y1m?6eJcN4dI&xD?>*A&;U z+YqaLZRZyKeRuj?i{F%JeiQj0!rZd(zusTdb+T5!xSEfsGQByuW!JyUe$S zKa1g-nIlfOs)L1r?Sh?wnrh4cb#vih1`|P;_cG=PJMYKoZRkpaQ4QM_zkJ2zO(vl z2zwK#@^k@L-(|PL^(pFnx9s|V?p^T2&hqs^848%YRn1%TR@^dniGlAj(hDHj`js|k# zyoLq_hCpaxY+zszCC+PXU}$6v;~M0WXp^mhHN++p$DABgmjox~rYgYgcXdUURRB30 z=#VBxC1k%cvNA9?G4eA2#krW87#SHZDE;Q^skl*epm}NLUXRIMH})8R{wKZcXH4nB zo!>(IR%=>W?BDWNyzF}8?uWX&W-rKYoV|I$w&O+tQe5V)yjz9(WNlsT0 zo+)A-J@bwt^F=v})L4ZqldYC3YFGU_-us|cA|-8+ZggkN*_H2ozuj4NxcOT8ljmoc zb29&T%;~kAIdPL+$AlQUWx1bR=RIgn7!W(&9&6dHJ>TwD-hMPdSnPr60&?OVk{zD)9$e(#JSEo>MmxywNcXI%RjE| z27Dm>{EUqMSy-5vSUwo2g7^w7at1O6JZxMEZ61uNz{F?3h{8iph``8UWYFF-NkQ|o z_u>M<_N*V*o94GK4VmD#q}XTE?0QF5F|}Ws&s{d!?JoNCc&C|9!Osl|l~;Ns?KRSi z=3g?Xy7tu2;(OckE_2x;&GH)wSJQ-JPucwPH9dUqf!oq=d>pr`_`~kAG?y$e=}@$Z z`5rTcSIW4u<#^)EBl49CIje(J5B;4}#%<2;yJVRW&`hcC97TK+P5Nf literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/AllCertificatesSamePoliciesTest13EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/AllCertificatesSamePoliciesTest13EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..c296e5a4308848dcc1efa76852ff0515898982c4 GIT binary patch literal 958 zcmXqLV%}xY#I$GuGZP~d5E<~YacZ@Bw0-AgWaMULFz__wHsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;14a7kTn1uxb@^dniGlAj(hDOE;&W;9h z;=G0i28KXrVQgSv5GBrQYygykaSd`ww93}N8e)}+V@?jLQ-Tw7Qx)J2aCJqNRRFo% z(Ac1fQ3=_zjI0dIO^o~uKyfanCPqevU7gQs?&m(d?w|f**6k&sGhE*2tWa#%Zfch} zZ*9KmBFp8V&(^CZ9!znQRigf0!QS zgt-3VPWXMl-^HQPLgdKfkLh==T&>cTUjO=rLe=)ax)C#`-_ErAsc`6{%J%g=VjV)f zkqr8Bj}wZ@1b&@(eP^n`TE`{NrUvsf#BR90CcNw5L#rU!Nm;^sLwPrG@VqrF$ayn3m=D74tejoEEkjU5J!tp@VIfRkJLlirRmfl=EMIrYr6-6YEe zZm!5O-~;LBXJq`(!otkN^1;9u#8+U^G0-yLVdF|@^I%K`rauEl6dn@_j~O|#fGHCg zS&R&oTNVDN{qsDtZ}y=V;#Q$jlTLpQ*5Rpd-TuC0=U%lt!q4<%b{W6&e$o5k(Jm#c z<>`5yGNu_*G`7}VTsZNf{d|4COZ%SK2sv}5{M`7L zdA+d0*SES$rgZHt6uwhg0 SJf}MKsGRZMK#4W)761VDRb+?& literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/AllCertificatesanyPolicyTest11EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/AllCertificatesanyPolicyTest11EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..7439f85152a7850feb29f4d19081a61e9efd2993 GIT binary patch literal 914 zcmXqLV(v3&Vk%p}%*4pV#K>sC%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`nNzAJZ$j`}4u2gV#G>{YL zH8e0V1VRgA0|SF7ab9BsLnC7t*C3NbYb*`SA=Vf;=H#F{17WYLE3%9N$i;?+22G4g z$ev_mWngY%8NY1fA#TZ`?X%tcFN4I)eB>H-Ql@EZ%u`E z(8hKZKG$WIjW51L=x@JxEh+W4;zSOsS39n?Pw-Oebah+yVCOf35GC%;^?ft#HYhwS zGmd0Q*CT2zk#>J@y$p-SkAeL2TkuVTz5ZQh5 z-U*qh&z&AkSk$+UIcBv=LR~93Ey(h*h_Q(LHGH=s|C5D>eGjwCXZwPDM~gDak>sZKv4l`6_J`>y4O!{#Xq zXDRR9I3skG^UWWh_3oTaG(GvQUD@w#<*3|tMl4LI4DLs{5_nL>jNFo+W8H8wCbGKO&tB1p7G!$1vUjXc5{S65{BD1aPjXkyUBsD$h%Mpg#q zCPsb+pg0#(6C)$TsqmiKM4hBX+WnP$&l~UZlye3I6&Wn8KkWO|F3qMOuw;j^;l=r9 z-ksgp|Hk~%tH_OCg*8QdMZ({FTD<;I?DDooHI4;V{J&EFElw=DdfIEljKj0mnT2Xw zSUg&jkhx=G^yyY1^CRDr|GYVP|Jb@oN(pRp8nc(zpT3ges~*_7(e#uB$D8z-tApo# z*f-_D9CjbW9kOL{R}bEBdHi<0`>j2%`8Eo->{aKm$XkBqc1($e(TQ?F3j?1OeGhj_ zPbgy#;q%QX-n~+M;eVH+6H!GHwkE&N%6dM3*DZ99Px{6w_WbL{2cvyu`4Uf9HcenR zxPEQ18Mj_%k?AdaTc1CR&ij6~cVuE_WMEvJZIEdo4-8RRWflnou?CUdC-0q*nfl!6 z(S${P>zHF!t0dI5f}>uRk420{WaIh7lNAdWHr<>*&x6(A+E>f-yV4E#K>GO^8UM4e zFf*}yFc1gv6<7oe_zZa1xDwht7*m0X%zzO&I)F(G7#)lZ{%lkGbAN41kh^qRJWy0x zV!E5nhuNoHR?h27SgjVyUva%Y`mUQ=N>J3 zt|hjpFsp3OgY(yS7jL}r)9NB?Q<4sT-*;U!xx>!x?4j+q7P0Tr`|&Bz z{-J+}R(ja<8^&$c+;g}WzOWA2zQaT>!gy!e*KD25e;2D~mRH`FyO4KP*J4F(e7b|> z$2RU(+ms(2Gvn(DTW4@z6vD%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz@J2GpzdH67IR8WQE(3OQSdA-E=?^`@Jq~1Rd9AR zXkt`C_6j2_19KB2KLb#li>Zl`k>Ti@d~PZ8#6QPmx33J?w{=4Nwh1f`+eOtAD_5z1 z{I^ofeZnh8i;SjK%KZD@Jh4jr^Ca|Jpv%-lUv;v2uhg|^9XurcJ_w*nS7^%Udj`V+Mxd4K=zDqXW) zW<`3~{28HtR&(#reY^eDyBTL=weEW#tO{VY+%F8h4Z(ZyL| z-zOy=eJXlk#?H|AB^P(R47zfPZ`X5HL8q78JA4Zi-ZC*WGB7T#F{m<-2gaAIGK++P zScAxu+W3nxQ`?2K*oiVUR*r17;wF96!LM z28T-|W}$Gw))shggz{akAjx_ImDZ$+1P+obM(Ja2)Hg5m#v zE!wU}W-;t!owiTZmP5P&Hs7==L_DmohN2wt+O{`e^mVD UoVJ}0-@1JfO`jKL-uS)<0CARHv;Y7A literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/BadCRLSignatureCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/BadCRLSignatureCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..6dfa00d6b8ebf7170e60e14481856e20b0685a29 GIT binary patch literal 909 zcmXqLV(v6(Vk%s~%*4pV#K>X5%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz?Vd8WDTSt)`&PIrYJZE`6vWurspM=loq8bI6E3N zF)AT@gprkjxrvdV0VvMJ)WpchuxQ4i_3SAX0pA-|J8z8qqvLn4D^=U&7~gHN6HdQ0 z_U?PJMM|T>zm8F!kkw%?<}eO_}MQ)bI!`u(-mGb*}03@-deeNu7&vKRvY8zyAJI9 z(U~{-Wi#4pYNec~2$w0+#*v_Na~+LZ+-U7{qy)qH}d zEIh*cI4l3r&(80!-b%#FC-hXNoe|BqeHq&%FL@)@ip$Yz-|2ZJE1rIty>;1_*GDTi zOnV^P$FX!~>HE0NlEP^}eK|DM4hA~z-TQCe&ak_mj&9(b-z^ir#eQXygY6aRxfjkC zt9S`i!*O!eVsX_U4`g2U+-M3` zdf=zAMrDU%o@0xH)2Z|29lxgUm_1KwsgMKfEp90}7e)PfssE2x%m2U7=NIhhJ;P6G S;mT(&vfpNxhH^4G>H`2RKv;kP literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/BadSignedCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/BadSignedCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..0a598fcb8eb03f9d1169377e3e311ca826bf3569 GIT binary patch literal 902 zcmXqLVs0{MV#->;%*4pV#K>&G%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz>P#}#0*3r*6=zdrYHnwrst)mC^$PBG%+e6`+$*^ zfw_s1p8+V&#ni;e$Z-Gtp4Y3tm+!0E+kNVf-_Cz*Ij0{)s`!g+^}@;{ledcSIo`grp~ z{T61WgoBFvTz@BV&h$TP!&KmNK~cN1k%^g+fpKw-L6w0#F#KedStJa^8bqGd#$Sw? z+Qy;7x^7?Tw$$Y}V^^esBU+Y^MT|wH`mTVr*Mk#xU0VG*Y@)i)&QzMb-hdCJpP!NO zKMM;m>984ygZK(80tS2rJZxMEZ61uNKyd>`1AdT%Fi0V*0W*+7jvrtO1I7;{W6FO2 z|181ITej?Y?{_XS>Um`NbB))ZeU=KOGSZjf%j&sb z?|kj@ylktKqI%IT?%Hf$1;4bIuSYZ)zlF?SI_a`h1^=6XYqF^yL`~+Fl;3*Xd|2e+ zgO3kiow(WBrx~?J+KnMu%jZPbLgura#VdPs?Tpm7g&mm8utVc)rs!gWRR3w}`?J@4 Lax+M66)yt-48>Xm literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/BadnotAfterDateCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/BadnotAfterDateCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..7a7dcec665123a801a7cc3254a86e46da9c7c235 GIT binary patch literal 909 zcmXqLV(v6(Vk%s~%*4pV#K>yE%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{0a7sP>a4SY$oM%F+YVvUGXVv0gueu-mRNotXT3(z47&W;96j7rEJ zVPs`sZerwT0E%-lH8Cu;wR zBs^Xjrs}0-vQxM6_v(y$S3~av-w_bHwdCrhd&<3qADTJSf1bRMFWS!^qpaI+eM+l# zpND_Q$%{EV?%H(fM^D)MWyYNqI?eO*gD<6B+u0p5>zH(6y9eVQ23h~oXO{xh<2+YX z&oTYIC(dv8+?5=<#=G{L+x?21;pOTn}?aF&3YRf(O-$;nL2j0}v6YYeIk?-bJqDCn;)Goal2u_2hz{a z$oQXy1(<@^48%cv1r`AVJ_8;$u7oxZ##ErV0iyvwNJ1E-kkx=0NFm1$FrfkChmm1f z$I-~cO5UB8&kjtwFF7x{_QsAm*VVmq%>-AOsy?dzaW{R*-BTwxeod*CJAL@A+i%s5 z0$raM9Qp=arF}1JtF&^R7HG(-9xP#4^@!oJ>buY>sg*ZwdHq^(a(U5gg}a;IWr)2r zjgQz7%3ydVu79TWuGbeWBT}?aB>q__x9`XX#$PVxM>tvj*7|N_S$$}}wZy_khTN&K z)&~UxrZ4*97~zrSu&v9oWPieeO`iH~UlXr8UfrSawG`sYa6%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zF*h&-ssO4oFo*(jEs?keek58WXCMQyM${=WMIkT0#3?l`zbI9~1?Un5XGeo3MkQpQ zFtRc*H!<=v0L8hOniv@wmIqIdT6lbh8~=m#HYFneCR|ccP1jAIKJ(gBxu)vJ%l_x) z{+Dt+>goLSy2|(0npK>WiUVf#B^#!A_}((lK3ufpeaGYmr9$ERm;8=wc~ZQohF@Ui z`PlQbB6_u^s6Lx}Ke_1X^rLz+@_){pExSxaXn6*Q`5LQFMPA;E(=zW_E!zKcdej=G z>n%Nv8?*D8xL1chSJWz!G?lw8`$(wxy{OW=AB$Pe*Swp&sMO<7!p+>J(*%;fM@w`( zy|MGU!dCCo3DsUFrG9P}ofg9L@_zYkAj`)oMy0x{$1-J=dC3PZt2e^)Ob)mgv)5=W z{+ANkEYip)Yx>TvvNWLdwXRV2^{1RanV1-LpyOI?05c10RE!e#kb#8^a20po{}VVj4P z4%@jyujewYRQx~3^YH1_ZU@Y(BVJf74L@Dc|J38p;&t1b%`@2I*C;C-n|HnNlAK$w zoPhC{X?8I`PYY%Xi|=P#Wf)WS`|UT$IuAA$rQ6e`%n$BWGMlvd$)jcYU26|Guawu| zTdJ}seEPP76CStR%{nRj{#Hn(e)>lKmlo4g?*8|&*rAm%d+m~6M`zq$|M0)jqKMFi zb6Qs|DKkoVxG>q|jL;?DD7*Fxt}P2>Bg_s*CfeS=&8KV;wtKPoqZJ{0C!3z=eR=1{ zA>D6Jt$sBf?Y;B1H(+CSyy;AV?>}BlIDDmft68`(^MzS+mHRhT=4_m#vCjJK0gm|S NRY&|DpLnl(3jo+{UD5ym literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedCRLSigningKeyCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedCRLSigningKeyCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..4e1245299d42e8d9400af61a3106e82c8fedc856 GIT binary patch literal 925 zcmXqLVxDQx#MHQenTe5!iBZ&mmyJ`a&7Z=o)B4tWj}FEY3_;2u{sO)AcMaE=^5Qa1QcO z2+mB;%gjqx@J_8%aCS6kVpKx*7$YkKa}y&!15licsfm%1VfN|vi7%p0wz-?mQ(ZAd z@Ag4+_QjH_UM$jYCNVF)cg=r-)n)m|dm4E&Hb)CjVO%M=VP4EU1D0Ux-%rX|?edOo z;Q3?n(D2Bt3ErC(*1i0EulI+}q0?`crrp>2U%Ax8uK3Z@_OJhQ0=55l@VhOWGw<%I z36bnai`bjQo3Fo$Vl-0JtUb=?us1qVC1O&fq-e~ULrWuf?a8uQ=^f_!JxO()=H(yd zfq!q@Im4-Dm3vPs;d$@zDi_(O`~Oz{QjHI>UE90vKmtQdPK=_~9S@GlUyELAoxH|u zQM@7`<(B1)gU4I{u&Q6(J*Q9qMeZLZdBH0Z%l0rU$Bs8Au_=4=~{Y5$yp!P$aXZGDKbMItdG*G-_6u&}Qep|Oh zP?-3Veb*zim9P1wG@s%4a5-neizQ8Roi6%bUYqYv+Vy>DD7W9g{q}E|zV8h`c~bw< z$Bo;aPo0+z+^yTU>3gR1rgciY1+TfE**mdMUByED+;#t%%+8;$%B{*sY*JZ#>m$dz zl2)E8Sz80sbY{=)6F0v!gk@aL`M=W!d#xg1Ix)eesC%f_kI=F#?@mywa1mBAp^klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW)HTosDPR^>aY`)COjZa^%}LYsEG{lh zO;K{YLH8e0V1VRgA0|SF7ab9BsLnC7tm)6!dF)AT@ zn30u%xrvdV!Jvtei>Zl`k>NnK$~P+xZK?YG8{Z30PkO#2fp5~MlXqORv_G(&karZ{ zn8tqa7t70|Q)gY%-up&+-wTV5w|`ZiGk^S7A6)(8ve(`%=L_a++8W8;X5=06T|Z_2 ztT{OwURpofq|~>=K;@r#%z1~y%9$pYFU`BHEpRYqeqk;DH5c=W7{!Ey=&QJ-7;H<<)v`j_sRaVE`4py*-#-F z!F0dW(YAHlDfun+*M2@MRXLv%Jo(g)&w?Kv6}~vevEJZm*R!77{ARi59PY3d`}CFT z&R9I-onJP!HY#dpz*7LJTP8mm02VV#2Q32 zXSwQ`O`ZGZQ(VX#;j1^lxlGg%2B!>JJ{B<+5tW0Xg}>%KRBYAyur_hI=+3LY&f*5* zApHs~0tS2rJZxMEZ61uNz%*yTXut=O;Adp~&%y#qga(bBAOU%n#zupBgW3hv3o4hC z8&cx`SB9V(yciiafX?|a{z3#Mp(UquGFADoJZvVcM*7s|p=EsF? z_ii+G{bffr)7p`)%jc<7TNS2+qb?=H7_Rqck z{$I(&t|~Uu*g-6}T8XRiz@c6957%0sYOt%w7M>TT_f*6$vcTb>Dceiob+-=ah8~>~ xr6_D*`I*~y;S@8QkNx&8=l)Hx4!hXYeJadnPD)wSMmEX%-O6oAU9Mg>W&o^dhmQaN literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedNewKeyCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedNewKeyCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..1f83cb863f1d83b827ff5329985150d63d0f8578 GIT binary patch literal 917 zcmXqLVxDNw#8kO}nTe5!iBZ^qmyJ`a&7Qz5CqsoEUtjS9+Zay6npfvGTZH?h;`8vNXE0atn+%SljmT5T4bTac{&2^7` zG57aHX~;0P_qnWEEdS)rc6m8%{w05MGW0gGpI+urWSjdw?o;fZqkc!kXKSC^&=*p? z>L%w*d7Xf;=qtOg--_xFf5{+l#KnK3=H50Pp{rfD{&5~>HfOB-!SZhZ>V}zfUdnDf zVzSw@>VUtgZ~DsafD5-+FO+BtCLHi>2j_y_pXMusR!)$-WuubF0WeU^Qa`snu(c_fpKw-L6w0#FgRtE zStJa^8bqGd#$Sw?+Qy;7x^7?Tw$$Y}V^^es<6V}IMT|vc!Jh*A8^WPUqNOyi@r)cZco$;#{l!>t?BkYwr$A-MWX9SB-!7^_9UD zwV~TyP2RQi*S&-kMa7HBTW(u_TB*NXHT$6ag8CDml!UuV1Ye$AoVPlp?L~{-34Pt7 zgeyn#bo=CcrmZiit$Y#Y;$E(+U?+Cid)~(BS2xD3QIItFsDC6!v+dYfDX$q7D?S-} zuD^Bq;WhIY;_k)o3Zl5Rj}#sMca%NJozZ*eEp<=v%p@hLBNe3cDQ4>ORc?B9 XeL}12w&kp9UyHBzUNK(2RQ?zM#jH|> literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedNewKeyOldWithNewCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedNewKeyOldWithNewCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..8773e48464cb139645d7079868597feba315fc6a GIT binary patch literal 933 zcmXqLVqR#_#MHTfnTe5!iILHOmyJ`a&7VpKx*AR{XSa}y&! zgFzD`7gG}>Bg3g@a#3EZ7Kkh{n|q^_#X|boCY>->uKL+?TT{mzh%O=jPt zX&3$DPEB3Id47R=!|D}l-u2&OIJ{k^letN%yU|=FCU<{-RqArCN%ksR&ao|3K6Urq zv98uxlJ}klE!k_?z@aYnvYqkB%?Oj%xBdy`2=PvIn||-rk=ZO0SH=Dbe?7OcX@+{o z(HR?`y>$QlTp&kAQoWj+Gf(JGnc~cLyYFh8N zynOOtEvL;S{SBTS>;ArrlyXED{D{4I&Hv9ME|k`fd_i z&PutL@$rl1Cn-+_rvq6&7BLo)vYHzyEGC@(_X`zE_<6);o2_WNZomi9&(FyCpM?dO zve*p7L3{-k0Ruh*9yYFoHV?*Bptu2}0Y6AW7^INZfEh?3#}6<80^^5~f%gz2`|5{l z7Z;u`yPo9N8qh1hc<&*z1ftC4si?> zg_B**r_ka1U;5A&DdEfiQW47$bg(VRg%1n~$ z=PgaY5fpfr`-X)0dRZb!~g z_kY)XOFr93pg^t9>c!SA%B8g)4mwvjrNkKf)^Cnjuq1kQMy|ycg}{GW8?J;YF{_0yFm+*-k-N(LHR!X?+2^Tod8@fK{%#%z@=C7}+ GrvLyPpI3bV literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedOldKeyCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedOldKeyCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..b00748cc262b20871e9c0a460dc865bea275c649 GIT binary patch literal 917 zcmXqLVxDNw#8kO}nTe5!iBZIWmyJ`a&7+Fs6nudiy;GIQ_DWzS45eVMiTM*P1}vu}sK3+I%a`%_*c;dHevB2Mf2Ep6#J zx1$_{k`f+wGfwO(iiwbp{LRkT!L-;wNVn~G*R*{$4mygZ>plva-6>zJb6xnV%4OCs z7mtJBET((~jzWn>G1&*S+sN56m_mlC&w_Y?o(Is`}3{ajDv*95=PqjLQvb zB`)T_m>3rR@934xh4W5$a96ebzyEcy)Aeof0fu?H-*qCNy?nvX#LURRxVXlk%0M0% zoU+O+5(Z)oB2Q}LFUCx5hhbhE7HL6F3ZOv#v*c;x3o7nL+Hq9QHKK} zZ6aa@3-_%z-~;LBXJq`(!U9Z5YzE>Wz5kHdX-z{p5?-n}xT-;)w$L0+M z8=w9%N{h0cesf8+LYgkO&-@d;LB&f_UZmJdi>+hs7M@stUw;bY-}OoF9rD7(&->U0 zJfFkooPF;8FBZ89ek1n8gqiz4G<`k8zns;t;ekQ=Es@&2Cu}To7KM0=g`V=f=Axa< zcSrt!->Ua~x#=Y?&+X3n+Q@c2Grja(-Tla=#Mwut_{S<7d0HQFNsH0&CPR%&#Qxt0 YGPZA=nx%VHu35l2JVEnAN|nV40HqyRP5=M^ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedOldKeyNewWithOldCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/BasicSelfIssuedOldKeyNewWithOldCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..963f57a485d4a986c4078da47c3ea70c3a4979a7 GIT binary patch literal 1067 zcmXqLVo^6}V&-4K%*4pV#K>sC%f_kI=F#?@mywa1mBAp?klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWR5efrDPR_saY`)COjZa^%}LYsEG{lh zO;PaANm1}ltyFM!G>{YLH8e0V1VRgA0|SF7ab9BsLnC7tmsZv`F)AT@kdc*vxrvdV z!Jvtei>Zl`k>OB*zrp9TtB-cLthebrwM9Lv&BD>}vs|)ia{g*~6s=R*5&@esR+wy4iPWE{&Y+njE`<#rDF1;~O-D+}t_kYjI!=XZN zYE@m0Sy)U}U+`i`*wOn_G0Up6X82#DQX z6){`d#gOg)uKO1YOpj~c`+a`{+mr{o`A7e3Jj1)Lw{Q!G)zb-*++R3@uFU>(UT`;S z>q0pnmB}X+y4F;BUK9N8IdQ|E$J;w4Z%tqGaO*6-H+fsDQ~p+FWHH+^6lNTjSDb#l zppG59+~qCp4bBic za$3~kfJmE&n8Ct*>%mDumXAe@MWiEspS`JN+N{^Uht#CiHfpJF<-Bq0n^$ZEh0qzoDxKqB%il?LSor3;D| z6fVg($R#l$+8S5`4FM)Z6XYZaO0Wtp0SamPMGANmC~7tUrV>VmY~4d4z5-ua?*A8; z(pa%?!bjyKR$lH!4?ChK_2eZxEdPGn?PYnxoVOFr5(TS$7x^u?Z2UYRRKRyq!X)$d z489Y4{>N#GzG6P#H0dDw)DN}MqBH-oe0+1qH=9e%@5q(@P0Vj9#V3n@ObJ(d!zI+B zHu=!6gjV(iR|42p?5aIt5Y(D(^o4B!yHyE)lwDfw-*BxPCEUt~A1r$MuYUQT)=viC z-_B6DB{uueU3Lk+$g;kY>FirWi?mz{m7>pXn5gM1Cg7&}_IOB(+$<$iUFhP{4o>q<~qN-90})MZww8Ku(<3(7?bD z2rY~a3=E>gd5sMWjf`PjgA@{NFflNK*r4qk5Udc8pP5&ZTBHzInwSH036SOLitH=} zkUNbG44N2~kiEvp%D~*j$j<;2=VEGNWMnudy0w^lnyJ#^qjy$Y>13*$Gl^%-+%&s& zN#LyaC65krTYixL-n}}$AZNh|2DOwjwuM29mDYLh`Sxhdk>{K(7EG5f9J1KL^n_O{ zVS@*Qa`MrB|Gm$=KCmqN>-6eJ*y_(W3a%Yr9ejM#ZRVe`cVo}L(fbh2SbS7)!@v0& zj!RnN*q_f&e||^DB;kH{;*Ippc5AJjH?MJdc=~spC*NuxpC7ZA9S-t1D4czu{yFQG z{>vYia;>YE)d~3(6nE>6_U`nHHxt`gcLf#Px8(d9&zLo{aepA+eNF#&3bj$8EC-l3 zF0V?fh;}`i&LvaucoFX^-&w)(2Hh5Fk||5wOLtl<=SkRX&&15gz__^ayg}m`19@Qh z$||!+7>G59L@>6fNbk`On&M@&C@auZ3li)NU%f}+dBJ$4Z0)JH5%CxYKgY7fc z9`W^!1aAi<0&7GK)*}((}vo(~I&;3ySrFL-do2Dho>T;}Z)CisLi$ z(uxv+D)Wo<3$iogi&E2p>WdOfGV}BFGD>oDlmomyK{1aU=fLC)jB`eYEPHw1Win6Z zKhQd`g=xF(7uAKr?V0>-i)QrdJr8C(ezxZSdGX0>w^-N8>$>`Lkqf^-7Dw8ax=(s+;^L3RO%DIsIHhCZ?LV9M&Hvw~F(c-VN0HLQcT+_x HDrDOLCmMok literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/DSACACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/DSACACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..14787b05801bd1609875ca9bd1035f5301e776b2 GIT binary patch literal 1045 zcmXqLVi7cGV*0s&nTe5!iHZH90WTY;R+~rLcV0$DZdL{ZS3_6FF7N>$Ush< z*U-Sg5C|=d4GavT#CeSk42_IoTmyR&t>Fi{6KoBeOR%GYv!g*1<8~m{VPgk6{+tC1 zBakD{)Y!;y|EZwet(V*K1g^cB`)ID!2KT)#49CMxoXNXj+!E$)YWpqZ#N$J2cke3w ztZ&S-?5E+I^v6$U=Kj&lTNU0>Wb&wwVZwvOYf}0Se6x}5-*Ups!yvAH)toXl?%Tq} z#?8|Y9NqlP{Hxu6QQj*H^>!KlSlxbu`%L)^r@S?jXB^tAS8c-0B+77}jpfGw?$-=2 zzs0amEB-qz)k>cofvx_j}(Gd_Vo~neUNF{d4A=73hyy!arv_`Nt<+?&>ank_qHwai%Oyo_t~J=n2mzRZ;KE^&`?PI(B+?s~m$@$XarPjH#f zyu6*s;z*&GX7ahMoR%MA!anSCtJ5)9wlFoYztQ@HXYLodsZ;is` zFf}%m==+ymXbe}**G)^FaM4NOwDWwwM_;W(F5Ni(>h9-Fa*eYR1spgxRRw-d`)Q_J z5c1+>TGf=L8^1^!N`%Gk?~)XApO~=fXRm7vlXrdkW~OibxgtByrcAiY({cQWx6s8M z`-~RM-|5w2e0cRXCvR_~x0<%>KiKOQeZR3NEVxiBxO#DoL6w0#(DAa$ED{D{4I=#$ zj`fthsOC8ldA!ypIwUedm3t#Nd}aAq#8^a98|N2T^{oBoEPLX4e`wze@7wK<4ER9$ z`577iv#sC%f_kI=F#?@mywa1mBGN>klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6gLnBDPR`n3&_vOOwI&~2N)|jI~vG| z^BNi$7y_Y%v4Md>lsK=kfuWHxjBAicqD6)V`VfmWTr$(rQj1daN)+H$y1F7eO#$Rq zLnDJGMkQqLF|sl+H!<=v0L8hOniv@wK9~6KQFf4U3*xT4_lw16>W3v^>~FSgaKE=} zdB79i{x`mjEpO~U9+$~Jf6)Je@Rhv>)C)g&9gt*E_gEo#?phzu-+g7Bi(eP3OElf_ z`I;$uq`;Mzvu8Hb)S^eC4GR`ziOqfEIVpMV{OWcyl`er!A(wjx4m_CScX9X8$=idH zJy)e_&hyJMlWo0pY>!Ka)kHS~w*wC)Gq+8=7i3)H>lbyyw`NcI`4g`#x6V0yr#^CC zy4RwUzueBK7`&bKj+yUQ<@&`9@qATjaXdU{WDbY5>|2|6Mly!K;;?VH-NUbLs;nJ> zyy|jHhBdqvar@?+VQhc>_=V}T^un1TUl>hqUU{baB9Muhk%4h>wn3(WJTPcwm02VV z#2Q3yu&&lw(0zE)onvdW?Du~@Hsk4?zu;6L%f}+dB62vtF?5ZY-;sy~2?zEoO*;|$ zd-7ESK9GKXM#ldvEX+(S9}L7nd<7N(13m*DHm-y=55`nrdNW`_jt*dI14aiU!(z5a z%3(>njJE5`+*`K!{>HfxX^(gr6&3k5s;w!S)Ev1;@9;03l$<)gqqZ+4O?2CeucZN{cz5P7_vAdj>^uB^ zyqDIQCwz_jUvYeomhx{X*QJ(M@$zNUg5WvkmR>8{8U||$z5o>#A!<4*MrrMtF~}X LmYCk;5NibhwM$t; literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest3EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest3EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..57f1df4334e9675b3a2c6ffe09b867899deeb0ac GIT binary patch literal 916 zcmXqLVxC~o#8k0>nTe5!iILHOmyJ`a&7{YLH8e0V1VRgA0|SF7ab9BsLnC7t*C2sJy9^BUAa<#{WTvI17NzEuD8OxXbwzfa z0?4_>22G4g$R1>5WngY%V}Dq@B~R_1oUz9#eIf;o}enb6u{r&wYM*>Be}Le|&Jr);wtE>m5vL zf8tqRncTCM_qd*4IK6Vi=Tdb~*IiHazE-qcldAuGHCo!MWdF5?ayQNLqNnFjK}kd;+t zkuVTz5Q(#CDV}FgP*gZ$U89-gZ6&^%^~~UOAj`)h#v&4-@NK>UUmA<;^5YjX-Yi(p z74q(z0Ut;|KO^IR78YhEmJbHvAie^NfB~NY4;xoPn+IbmFvS@#Ax8%=y#b?xks)QJ zqSVf~j+wj%cm4c#ILfA6yeE!v5-Pap_X55mTt{;#txx3A++WN{|?yOkhn!U$WxE>xk zk@-=sWYfdjulf`s96zL`20zc^w|?}A$j3s@x$cNM)~{)Fe9-bP7n;rcnM zd!HQt6&oFps(!DobZOLm$E$Jc7xRY}h--;|=Th&ol<(tQ@~^bsC%f_kI=F#?@mywa1mBGN-klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6gCh9DPR`na?j6CQ7A4=a&|P36X!KF zFfar{3u6NVgD7!cV*^7YV;I*UfkaCT4D=wDsJmpQrKJ|7=9MS}Wb_v z1&}*U44N2~kbTC;%D~*j$j<;2=VEGNWMtU5UEj3-&i&kzbxD`w+%~5!QE}&Zo2$NA z@`A^a-6wuM%#_}@=Z@_k_sRyN^Xz#soBQ0}9#viS^}zg@KJ%nbH}|gk^2n<4!@o-( zHG<4DS=K#NZJz$I^yQ{sh2NJZKd9S!w(~6)kHHo0Jr^gnmCdVtwbnbw*YQE)#~Dvn zJ+qy5M0Mu!t2K{5YF%>p;_-Zu^OWx|=g*UzYHc{}>&#bHqREPF4)By~%yUe%jfdcX5qI z4*OsHPw9E6YI^7U!)+T&ye_J{?tW?#=U(|IvHVE4O-OS6?deR+j0}v6vkfv0=HCBI(m&=$ z8{EBfy3BwNq@SOW@jnX-GZV`P191>vfknW8&wz)GE1}JUF%_89449Ck1DMc&(ZR@& z*ZCo5Rb$1D$6BsfDvVRCfBfxq_s8yTPPl??1Qe6al{hf3eRM^Rl2 zD>vNk)xNe{wDJry>-`(QAD-9Ak{8T=z`U-xucS}8&*|MGr_15*zE;FMWGWZQU^c0| zvuUA++WCWBR;u5dpWAla^!>LnuxG~-R(p=4>xy4%9Iq2j@%QSj5Lmt`y0`J-n$TW< zg%=_sT&vpWwA_6gk@zpCrSOZUjjP?VHdl?EvR(GiYi`GGuyC}0c{)=>TUD~AXZwzu zy{9KlZQv^u4v3QEX;aDIIH|wlZIJ}y`xq^|3F+0DEj-w*UYD literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest5EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest5EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..b6d31236e2c5ebcb34005b52422d00e7c7997f32 GIT binary patch literal 917 zcmXqLVxDNw#8kO}nTe5!iILHOmyJ`a&7+&C~;n614AQY7}p?yM9T~e^dOe0yJV)Nr52^;l_GITXFD{JGE4-B#&e7rq`@ji7mXAe@MP$a5)0?cs)_!z564h;_ zZMao8i0`KXA4oqxBjbM-7G@@v4+i2Oz5_4}8ZC_1F+?`SuQE}S9|HGMiu`V)qq)(@JvkS$nd7bs?k!6s-NaNcFYo|#R z?d11s`MqXCs2`)=+tfY#l{e1OnR)fmCh?3Z$(b`J%39Qme>>3^^t*5dS6o<)&WQyr z8_$_0x2*2E^KFyDp1}=JZ?HJnu=GzbYWJ24#R@`}3;PzG^_{gNc#Yvgz zkDh;ep857TU%kj`@lOxJ-2G2f{ClB&?yX#PWX2tqmT!RuOw%t4O5`LmG|FAHe^Dkj z<@e>kzg9{=oKut_pqI7P=HC*xbG}QND&AjWf4*zOY8Q>uhvdz7#K($%U-4D3#Qgp* N^{~qp&m1p!0sy_vX!-yE literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest7EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest7EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..4c9c82bbcdae6263292a16a09aef51954e971e21 GIT binary patch literal 943 zcmXqLVqR^~#58#UGZP~d6CB(+$<$iUFhP{lwAq<~piIv_tMGdU9|9$;u>tWaE< z1Vqk`Ku&<6ft)z6p@D%R5Ly@;7#Ku}^BNlfRl&Fh2_)KTV4w%FRox{sEiJVuHLpYg zZojK5vO5((4mUSwVpKx*DkCcca}y&!15licsfm%1Ve8KoEn4MY4c;6{xW%F@*K+TD zUA?hnadys3iG~F#-H&g^-P*}`OtR#`h6vNOX`O*ZJ`!0=Z`)cQowhq-*E>Z6yKAnd ztn;nU_DOYqbo-nAK%!=Rk`vQYq;-atlHPhYI-l-?#|KL$y z8C}umZ0@H~e@pquvUjT&73(ZIePoMT>)LScG59Jdw6@+y3mt${TMl8rQQv{1_{watNFvWcgUcSVU(2s5B6| zrm*z)>8nlI!P6|xp6a^rc4gvgP2SIeDi1vk12n8{#MVjdsK1$#($SLX)3I#o`59Io zH(lh`y??gn)tP;-?|%Onr={DqZOulLg3cz}o8P8K*m{3oy1csZ5{GVRd9T>#gfBay zxHmWnvwf}v}{jDQhn#CHLBow*QE5kL`XQ|URc1= eR8{j0)2A>ctx~br^5N~`t2YaoD!em~s{#Oo%V=}} literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest8EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest8EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..6c01f377f46c86824d67ef2e6c5565499bcf6255 GIT binary patch literal 941 zcmXqLVqR&`#58dMGZP~d6CB(+$<$iUFhP{}|6q<~piG9W)EGdU9|9$;vsP+Xb> zM9z)@h5<$fa^k#(1_p*eXklz%U=StFYiwX>WDMgPB#>yQfq@>xPIZ^ew6xTs)VvY} zxb3d4$gWfXIoraZiBSpJql~N!%uS5^3_x)%rY1&4hJ!N?uuO{JPmImid9q#R<~4y< zi(@*zHM2UHS!?DkeeEoF>*AYbu}`eKY?>w{U$)4f{#5blnV>IaneslE*;caK{F=skt%Q`nH;*k+Q=6x7W$BF7T=N>{ z?mF~-kJ`*uF^S(_j^T@r;_cTFaXTb519%jR6lW3b!0d46-Q z{L9Nr7k+%Z>>JCPRhmtkjyZbI+HaA#;ji4Xy?@V~R!J=J{l8ApM{b_rr>VQe+yWo1 z6)+K7c&pJ!^~(FYWtVdjkFafRYI&5^vsFs5ys)QXRp;?dT&E28?o@4OVrFDuTwG&N zWgrg>Sy^Qk2?MbPk>g9vmtXj$^0emu?N70px8I%mHuD`gJ;?I0h_Q%>FU(&ho)g^2 zDW#eImub(x81RGi3o|nQXJIv922uv%AOQsy0Ruh*9yYFoHV?*BVA3;SGT;MA z@Pkyc00q7w#}6(e?+Ewk%=~_ci*`c5%YY8m6-`oHfsC zb~Hy;?fP?U=DsC&-nG6u>uYh!bElX4G`3nP_A1kfyRQ9;;8kWn=Xt;E_2-<5qV*Fj z-yZL_{glmZ?iO>ytL>8Z>b0NioLD*Zc}_8i6{}1)FMNCS;JddhpC6ok9n$b?YpBAH fUz2}z$L+}awQYIl(m6bj#Ztb8&6Zu7{YV!8vnXZL literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest9EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/DifferentPoliciesTest9EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..b2e30bd69217cc0f76f7c27140960f113b33ab44 GIT binary patch literal 931 zcmXqLVxDi%#MHiknTe5!iILHOmyJ`a&7tu`>wgIKNZl9`s4T9les zf^dYZE3#u1K(4nmXkt`C_AetV19KB2KLb#li>Zl`kzwEWHI)~=oBr!hd#iIq<>hqN z+IO|mW;M0T`jcAf93z@6%w9NNRowY{jor#ucKVVbJX*g!VxJ!3@z~ejpRt_ReoIG3 zpziONLZ>8c_)LGUSRC2&wb?Y`F#j@7R-*&cudz*akC;>xYasr3)`1BZgnzx#D!W{K zX)ep5T|#$V?!P%%a{fueZo?M`W;7k;R+23jNczqrJIB~Z<7UMw8JWbZHVq1l&l3e@ z=3f(;AMcSV8ui-dYDCAAuxWXLP4^2Gg7TGDg#KuY{?yFy!}))7Z>VSGhwHILRXer4 z*Y-XZ~=4E`d43Kx|04EDsJ{B<+k;iP|<)1@@_VJnO z%7o20cz)&5;1>pbApQJ|jQ?3!n3-5U7>I-T3M>K!dylfYHIo zV14vh@$-GnBKduZ9beZyJE2)VOX|{B?;Ae~Db=12A5Ank+286G zla-Uv5^TrI_w#yu73;yD*#aLWa~|GG4z|0f`&m*n`t`f7jRpdj(oFc1)LU4)KWn?a zaFn`S!LDfUx8LJstxEaPot^s=UafCxzpT1&tCymPj=Ix5uZ6)&E7$fGESUVhDZ%eF zFVoH&Kjd@n>V=D~h&7mg<<1X5rqxPuKlsF=BX6(Kob>%z`X{` z!`^jAc1-tOnHo3G_5ZAsa<7$D)-+>}4H;^-4mor~!ivldNvx>Oz@%VSx~^2}BsKy1pN%7o9K z0uJx~D%{6VaWP;H+XTg$6U!#?Prq=zI#jZ9rAz-2K z=`Sl-F8!W->u>q&yW9?XSNDqjez-8}7w10a!&x0OOed5X0|DwnAz1)JgNsHKc&$i4w)tA6@|=h5uc-E1mhefwJ1O2$e3M*(^ZK&Bi6Z}h&oyUaW@KPoTw_pW zAP)>tS!EUp1F;5?C$;exW2Uxo=&-KaSGp~A`OVlBY2c`r-L7%eO%TPGda0!h4+VAn;0c6hTH8fqR#i3pMCs)%~9uk zpYtKJjy#F}SoVsg>p%VK+|~azx#ZUEW1_+u*{XjEFPM9Z@T^z7QFd0?LdsQRmcZ2* z&gXy34}M-0@kacyDHmtVcD4Tgwr>l> cZ>pDWuRXj`x7XlVpujA@IjhcT*3|tMl4LI4DLs{5_nL>jN{2~K6ab80M z14AIRFg7qSh!W>DHZU|YhH(uXNVG=4fDd8~yL*0qih{GFK@+1AvfCM18JL?G`5A!X zTue=jj0_VZX1OQz{*L|jd%=|c>Zj{#EsGU$w?^`vIdSaRmi5m*r7z|-sVaW{f5{9N z`OkBBm389QD?W3*#ga8m`}L&*_UF&d^GnFejZ5q=y5YQqM|JJ;ClXI~NG;<0{L(fi zY0a-MA~BQJSovAIy*d2iTi&vDI@i}k=|;`Sb=daOUE=b=mGhd;%1jIT<2n6sSmfP% z5^2V%OS-~DEcvAFSYVvMhuxe%5xH=m+>_1N?mZKhkt2(%aq_L>uY|q zwWf=#@Q63x7nZ{2nG<>JYjeQ;lAu^!9WU=D-*e%jj1NQEcK)rjn7p#7x3F^)uU+ce z>#ecb$+f38drfO{OS#p}#LURRxVXlk%0M0%ahhbhE7HJGEX&6t#v&5I*rFo6M>}YWm+ex4B9Xwa>#a_LLtd7jk?}tZ3oy~J8Hj_- zQ(yr`i2)BAS3;WyV=7SGfYE>-Bq0n^$ZEh0q>$qWn6`lN!^mLTK3(itsp;7RLjR}5 zC_1fC&o|0ug>+rHRkY~1sIu0V0hy7{}z!fIH**wzHP?~$^7XY0oP ztEJ=Ghr1`1E6+G~%GFPMvipj=j%Rsmv=qZ_Ia&5@%9;9G)}5Q_hp*MEA6rjr%fAZK z_>#2JE@1kBZ9B~R%DCbVtP?p9;8fZqwMXh2Z}2ja%)gQ|T!HIvW@rt%NuL5#QUn!Eh@=O%S=uzNi9||GB7kW6foceDPR_6chApHQE+xNkQ3)MG%zp( zLJMO91A{1WUSk78BV!oXz?noFgbf5CHgJJ$C@xI`TGGU*gzR!gRtDxKMt%mMI2ThB zBO}8mz8TX_h$ufQtaQ5Y^AY3kc_07Y{kz_-c<~IVHxmzHe?Chz-` zo>`uMQl7?tBF19RTs_g7f1d@l>^Rq+{Q2#K$=UbUzdA5i=~#8Rjm`{xg-c?~CS||( zmfX&{Zr&!hhUQ1&lGaSjj0}v68@mk}I}GH3!6&QCB4HrbAQHjYq9VOVJ7|iR?NWgv zk-)F(txkfYSeB1Pj77wVU1wfNtZuC4?u}Kw)}ldMYMm;;5iHBk$oQXy1(;~q48%d^ zDX;)z-hhXVE1}JUF%>9oz-Yh^k`M+dWHn$0Qb1{-fC`A$z{r3cU%-?Gj4wup!rJw2 z2ftbeUf3Z2TP^(GqJNq-J@WpO5A6HD^5HJKgXwxRJ~3UfxH9=nx+SaeT}ee}t;sq5 zTP?C1uKqZ8F(~qF`+BY5T?UmriFUltGURT~-e{P={aHuk?SkV1g-fpQ6G&cKGrfr^ z>+PEBUnXW5X4Oj0xOZM5CCVf~^ovHjTCDb#gz{Umsn1t$d-KVmk2hD#kn`!Xqq_O* zsdjbA+asloN>bLWdA#oV!kEn6jRo7B0w2hKmRIA7I#j-YzQYF_QJ>A9rtXwK?z%j0 zu6A4f)S`bocTJqnJ@38UCf}E}sdo=JZQGilT^Oo=pQEZ*xG(FV0C#}mom!>1|3`eZ Kzq1v%ivj?k>`=7; literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/GoodsubCAPanyPolicyMapping1to2CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/GoodsubCAPanyPolicyMapping1to2CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..9f4d95f39533c50f3df78b40c031dc7c1f53809c GIT binary patch literal 968 zcmXqLVm@Nf#I$AsGZP~d6Qh^`FB_*;n@8JsUPeZ4Rt5tHLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP{4o>q<~qN-90})MZww8Ku(<3(7?bD z2rY~a3=E>gd5sMWjf`PjgJ=?M&^FM7*q{Wqp|~{3*-;@NF|RTpKPNM}Qo%Q|pdd3Z zUBR#<-^ieeQ3=^cjI0dIO^o~uKyfanCPqev6Geu49%qBMh~Ht;p6GP!px36$)!jwk zt_YNH%)9Tn{PTm@(0^P@fAiL$FP>SHF*9%RGoD`FUFOHHSGGjlH ziYE(XH$FKDj(AyqM#ldvEWpIXX21_JPZ-2!HDCr(20S1E6%en1k-SS+lcrR7loX0ig!bj`n|8~9Rv-R6l^|ElC(ps6{_Sd(?tCghKPq&@GIjhaI zRy%)kY|qhBgG;%BD;8DWx2@>U(UFnf_f|%P^wBGjnNm*O>Oh$vHvrY*iw07+mpB-F6Z{SEE4x>i?27Ew1`n= z#iQ3EN8c2?JMC}!ym)h|uVU@DL-q9v+lxK~cK$JVG*_v*G{Cd#K)%>DulaZTPh?~y z)(E?ppXtq*=)3+wa=+VCFYi^`?v?ioK91W~Yw|Tsc!9M7li|nJ|95W)DL(j{VIu&I Cj9|I| literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidBadCRLIssuerNameTest5EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidBadCRLIssuerNameTest5EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..e24d88d444d0dbdeb51a3b503936f02d1d1d186b GIT binary patch literal 930 zcmXqLVxDKv#MHKcnTe5!iILHOmyJ`a&7QxhX2!|gzJ`wa8Xi>=wZKc8WHy#CLdIMT$bnPtv}X&XOf!$qh$QT@5%M-J^u4F-Bf0mdAf32&iVBu zw=@6Dl(fy;T$QdDq-++JoS;9Sjr+uf>s9CXK6t)Gqv%t|#P$$7r!z)ZFY*7=nf38U zOoheUmmU81C%pTkb2#G@OSz;^;?Fl7=ls)NswSTQ@^gp1|NO#zHY+DbF<6VnN>xb3 zc%>|7_@vcxH|Buw+SCrE20Js(HL71OPG?^;{j>4uEYG7NS<`Qaeb$bP-Y;8n!NZ_@ zQq4@QVy4>DRd=HoG(B2q)+N8wI<{8i$d$H8+5K*(Ha<35yWg0JnUR5UakfFGfjlsX zWtCYZ48$5l1dBeI#GO^8UM4eFf*}yFc1gv6<7oe_zZa1xDwht7*m1i&j3C30i%PFp*KkS z-n*lJjTmm8@#S`Lee`*X;g5m?OXj?NBUUnh$7A!CU957S?r2EY)=VJJa_Ej zL>=37txr4F`n?xQwKrnSFcRwjeBzb;d`?@ NUT<%Wp3Tf&o&cW=X)XW& literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidBadCRLSignatureTest4EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidBadCRLSignatureTest4EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..4b35bd248ed3f535219be01431313bdc5d000de4 GIT binary patch literal 926 zcmXqLVxDEt#MHEanTe5!iILHOmyJ`a&7Y)QWT$#2uaz(;txe zjZ-1HHgD^ifR)*|XcX z?&^oynOR4~H|_k*x{h0AY20rOS=oceC)pgGdH;ERoIiJ>^sj^ex$l|=OiY+LYqg`a znr8lUrBzl-E$;m_emVWw#!bKP`9Hq#>fG8ZweSAdZ86`@y18c0djGh6@#U-IG_S97 zX0({qwWmJ)0_VK&jo%(Os$}^;Ioa|2<6$n2s@z#~`eF;p$^>3}YO->Ly1e9B@?Y~P z%P+HUQCm}lEg~Ovd|zAd<-MI}zl`vu2WEdR9`Ca`a9&^h{p2sMOw5c7jEl1kG7aQ` z0W7P`B4HrbAY#~U+B?rB(Lm(hb8bBmNe`9VKlg%Dge)J67>kHut{|hpBgHzAkOfyK z>fCs%wvqd&0Ut;|KO^IR78YhEmJbHvAie^NfB~NY4;xoPn+IbmFzp$jr#xVEFfyoq zylS#c;#*F^%7~lqBX_N;)cG&hYB62!YM;<9J;8^yTYpI#$uG3Xdgqm%tM>2htTn$Y zzAL(y+qt|Jeje4bI;!}898OeY0OozqRj`@t@zo(0RRi0JV(KzQV+boATm&s?t zZ@u=p6|?#{^Fof2&tkI{Eb-scS?C@oZl4!q`ZKw7!_-vP6AKm|*~nTK7`xjwsL5;1 zO{V{0*GliD*1eX0uOhJeg8P}BHOG|RRO~(H`*uZLIrD!3iBGG!mUw3K{|jJYxUB(+$<$iUFhP}e{kq<~pi#VN5kGg%=xH78Biv$(i4 zHATTW$VVYKGd(XeFI~YqwNk;^(Lhd|*U-Sg5C|=d4GavT#CeSk42_IoT!V5Ft#>zY zg;;OrnOByWlbNDG*cq;_$o^0OdCc6PiBSnTC>U88n41{+8GzzkOihf83o{F#Qce5VXbic7o_@;QoonlAn_w4d7H#`2a_TGA?y&!9@ReOHx)+uk+s;Ylp zp7dx(?cHZry}ryn_2Z)Ne5S8CFK=%8*XG_OvxhnAy^CQf8`tx=UdD-MkIZ#1Wn@16 z$?;6FwENkWORw%x9O)Py9}qs7mv>foHb`t_vMAZF7!U{>D=&mL+`vYn{CH^yMFys3Dm6A*sz~bSI_Z>oY;hx z@QO%-Y3n|y3dV~mS#MXbZJ&L7@^%BZ*qNOZ)*t0RJN3uj!=^_>erH_RcKGV|NekyX zPE2^Vnu(c_fpKxRL8gH`Fu-M%StJa^8bmZ_x$2oso%`lfT*w^Zt2e*7OwFl7RxgOR~!xn*N#7~h>g=NBb2ygPS;dxnmDs>SwQdu1Z!410uc z+fLiPa(UI6Yr!mg3}vj`U;M9YaCZxvd3AQQ=iY~=M!V0*8YPxzmKYv$a+6^%Xt3uy zH|MHj8qfE2>-gI?oGs?wZ&R+cW|=-mw|4hEp0?hKry)PK+_e6%!1~0?Z(*NWZkyX| zweNl25UW*qGoj-^sn5CRYnQ1TM6k_%zR_XPzn4!AzYscIYv*@&@{Q@$Q{T@kF0x$x zf>Z6B{nWdqp@R4KDzqwx&uh$Swy3zUwYhrXrFE?5($yN)$RFW!V6Ni+`-OKepVCHN h&7RA~mgXj}XKrCx!t{CjyhC->?At@WaZgvd2>^2^aHs$P literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidBasicSelfIssuedCRLSigningKeyTest8EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidBasicSelfIssuedCRLSigningKeyTest8EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..3ca799546005f83e5a6f0594f8f19539bcb8d985 GIT binary patch literal 958 zcmXqLV%}xY#I$GuGZP~d6C;ZOFB_*;n@8JsUPeZ4RtAGuLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}e{kq<~pi#VN5kGg%=xH78Biv$(i4 zHATTW$VVYKGd(XeFI~YqwNk;^(Lhd|*U-Sg5C|=d4GavT#CeSk42_IoT!V5Ft#>zY zg;;OrnOByWlbNDG*cq;_$o^0OdCbC~iBSnTC>U88n41{+8GzzkOihf842$A4{(M^z zQ2wlTb*IOLys}wyWhblZU)jW%@?g=iujbLr3fu-8IageAJl!w4b$QI4u!xsVr|hnm ztM^Fz|MKgX(46nQyJ4r`?DaiQd+&-ryS7yQ#VyVw+OrxC7scN?S2fjHrSqE6r5#4y zD;1UZJiE1R)B96Ww+ZEo!vC(rQ7KN>|ud5?!L_}+PFq1%zY2`lee6;GMJ zA%Cag(EyJ%=lw3cXUe>DZSAI)OdEy8F7usIley7;gk@T8&8Isj7pe=me-u{avG{i3 zpnS0DY9?kz2FAtN2AKx(zyOz3W|1%uYYgy~HPBF54 zEMhDo85~#ro`&?Paj0ZViN`IRbF6RPTLV6jett&A|12!bOe`M^#6f%o76Ai310FW6 zgf4CB-Xj z=Xh|S?9gFu~U847EPAtk2Q*P%%Wozd*`Lp`B$IGU(Tq&TYdNK^6YI zmDu?GsHnzfgW^?BpU+Kq^X6rkv%PMC&Br_9&8#I32PaKiTcl-ZzuDmjbJ#IYfxA0* zyuPu1T4(Od!{)0*3o_ZmoBpQQI_ES^-@10jj`>}lQ?JKPmR_{mWd>VKF4O6?Z1K6w h?(#vKCl=WBSQ>de4^h1mwCd4Pe;I*A{~kR50|0DKZD9Za literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidBasicSelfIssuedNewWithOldTest5EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidBasicSelfIssuedNewWithOldTest5EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..6cc192b8ba2195fc21f44401cd123ce34743fbf9 GIT binary patch literal 947 zcmXqLVqS01#58>YGZP~d6C;ZOFB_*;n@8JsUPeZ4RtAGmLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}M*gq<~pi#woElGg%=xH78Biv$(i4 zHATTcCq=>+qnOByW zlbND`X}w=+xk7kmNe0**uCBImA{PLZTqLK`f+CQyG5xy0r}az z3+!z3Emv-6Y%j7lis+lUP+n=<<24f3_s{X$zxlMnlqrl2^SMr+-j+MJ?=s)fFN-V! zR&gHwazK>hUC>0PkNFEP))m~gYCmd}zs2l}g;4Yr<5vyhibaPeY@Ds&8)dgfIeXjZ zc}9Na+hms1J=_oZH(*gH0=1AwynBKO;j;m?S8K#h@FJ{@|PV3g5WquypnPQ4~U+qkIf8&k;A4oqxBjbM-7G@@v4+i2Oz5`*kEh{e6Hn|$zWRF=pVq8A zap}bFDP8tmJoAJy4Ec1VvpzCiU|f7vS?d2Liw$g+Q&jCwel7WKKHop-DP#5m&I>bR zCmpD~H7#qKLQmqR-=@BY4(l_C-rc-t;;bFPr;e7z?01q+z8lWDFDaHy_}`^nVlg(| zioYh5uutADZLE3WlJDx+TaPwL$zQ7cJM#ta?Ke6WzI^*8Exz06*4k9RL6T literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidBasicSelfIssuedOldWithNewTest2EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidBasicSelfIssuedOldWithNewTest2EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..18033bc34b08de2db08663c7a201b74f547db21c GIT binary patch literal 947 zcmXqLVqS01#58>YGZP~d6C<+$FB_*;n@8JsUPeZ4RtAGmLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}M*gq<~pi#woElGg%=xH78Biv$(i4 zHATTMwOqkFwNk;^(Lhd|*U-Sg5C|=d4GavT#CeSk42_IoT!Ru4t#vVQf>>+qnOByW zlbND`X}y0=ib8m1Ne0**uCB4Fs+(Csx0ZX^)0(HBe}vsXn83NzxF(YQ+I4$d_6Jd)C-49NQ}oSKDOh zl1j}#{xgorJjS-{=z{YTW|-|xogY`fVD9O?u@BSdzWHr`qPrOIm4>q-+hUAcL~I>o)A-81)-Q?_Dc`!Ur6>>Z0^D&7c7N?UDxd+xeas=TfC zca_DFOw5c7jEl1kG7aQ`p)IS-B4HrbAW~LyBZb9;)Bk>EP1nK6M3#?5 zj7212&fT(O3+nB^Z#I&h6ekki{Aqou0Ut;|KO^IR78YhEmJbHvAie^NfB~NY4;xoP zn+IbmFhLqHB1Z=>IRc}Dk->)Hmw83=>{AQn_i%@b&)F}>QMSms?Wo-GaknP!#Mh!E$ctT@ z&&pmXPc}E;zIFXSPdU%p3X@AbHivEYGu>L(*qihyY+myD7J2iU?f17Z|Y3AgvOPg1jO#iDi!Rn2phrY`3uRNlmh0FI`=Qi56 zX2GwtXTJi%=lC<<3xDTOmb6*E_=vLFsC%f_kI=F#?@mywa1mBGNxklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6f+P3DPR`nbxKT82+mB;OHEO5b~KO^ z=QT7iFa$yiV*>+&C~;n614AQY7}p?}M0=DC6e0FVdFGWR=465_0b7??Qd*R%0CJs? zK@+1AvVRy^8JL?G`5A!XTue=jj104K7cZ^^^6|i8s8->G-FaaV2e! zPnGX7v27l^dfB7SM8#hI`XzYNTXu;h?rCig&t&XAGnwn3(WJTNe2m02VV z#2Q4Z?+RFZJvedKrPZ&)CaU}FOr^=|!OS2o>WM%gk3f&X_T& zkJW$=q@SOW@jnX-GZV`P191>vfknW8&wz)GE1}JUF%_7=4A7GoFgh3+Ce6t(J6sZ`{uur^&id5V z{K3Qrf-W+9O@-sEzQxT=dX^>n`q&mOs~HU9k+&wilwn;VZhdv_>EDa*-uV6Dw)?x- zu-U!0<1JQi=PYX9{P)}~ulZukTdJfu_Dz|nRGgAB=}KU##luU@JeSIopPrA%-q2R# IT;AXY00T&1bN~PV literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidCAnotAfterDateTest5EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidCAnotAfterDateTest5EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..a9938aa80e9552c031ea4591a53172ea7abbaac8 GIT binary patch literal 925 zcmXqLVxDQx#MHQenTe5!iILHOmyJ`a&7PiL8@{^fGalN_T64%IiAFGLnhUwHlZdWroTL=+6ZPU`$O%iP?$ z+iSgx`-_|FJT6q7RNNeLO*DY}>0I|^0)gvZuU&GW{8~k!{bDBju%PQa(a~&yemBfc zG<&VA-QX%XS>Z!jY1&S{=q~~L4%ch>*K&(4WUPvv|2uxow3D3^H!1zKn38yTqv6H? z0THH~|5tm&ZC%-{BIYtl{S+7Pp-drPbK9o$wd?2Jefn1HkMlvV{W_dGXDl(YGEB-j zIs4)Dl@7&a@vqL5+7#tx&d=Sx{+fE6O~%%e+OI-Q)yLOfNbYB1W@KPooNbV4AP)>* zS!EUp1F;4X9lpQc-`RX#lJ@2~>->(*kIt94-2f*DSw0pq7Lj6qE8lIxT8l2vxaBD9 zwRB0usR@e>_(1yk85#exurM>Rd@v9P@fBDE4EPLq*tinfJQ!1fNzVX1;Q^zAk-_X3 zcjio;NpkB0!c5Nh&b(7K_3ay#=XI%nr)!S*MGs3s-gQS7`ae@wBCR2h0D(^%F(4 MRXewGke6TLl$w@bl&atY zRHESQXdoxfYiM9#2!s~K1_lOE;=INNhDOFPu0cA9_L&=)LhRG?%qvUG$xH!Sf^My= zE3!isKrS~lXkt`C_A4VR19KB2KLb#li>Zl`kztR(ZO226l3WL#ewexJXpn;N=8fBv z3$^UL)>f-_wXQg`sJK_COFOu%r?B3oQ0+{Z#-iZmCWky58eJ3B8!BciCTYEt%1=|C z6ZtLfTk5xsTlg+9pWGHCX#FvVQ~j0H=Y(b@trZrEYPZ+4ga_MLal4AWe{grte%q7k zhNY*=3wEDv{xs+Pkz<8d>Xh&MozhNFIbyf!|MCrQPGnqmXZOvCkL~z8d(k|`+gEO8 zm6bO(Pi1-X{L5XHYdza4HkRJZ4|}2`@gu_MK%ZdBF#(xN+heZBJy_ki&?h1G0$YI0 z=|8_W-`HjzdVd>}anL`>^6q_;G}dr^jk+D=`gFgeXw-L;ixW;VF*7nSF3vW{G>``d zu&gqRgn?LtNV44?sd>K_eu`YE?>+V3vwLAX+8n@1LY9w3j74PSj~&%v`Gs?T{#U$t z-d5E^_4~4313r*`en!UsEG*1SEFTQSL3{-k0Ruh*9yYFoHV?*BVB#}CPkO-UU}W&J zn3g;vt72p3LFaj<0jqh=2=9nLKSN^ifln7#a(_$K`M6(t&xh5QL^75y$zL?{E^oEw z(?7|~6VJX~?seFh$&vZjCa>%R3CH*MiHMqB+?VBhHRb}lt&PINw)IYu>)-VMS>MDc zuCr=;eL~%%hqD}P@ItEnQI>S@0@#F@xAW$54L?z?|RXnFtu literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNSnameConstraintsTest31EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNSnameConstraintsTest31EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..5f7ad1535aa50a917f722f52058d22c7e60d76c0 GIT binary patch literal 981 zcmXqLV!mk5#I$n(GZP~d5E<~YacZ@Bw0-AgWaMULFbFW@HsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1 zZFhA=cB}%(^*}3|7?qGc%*e{X+{DPw02Jq9YGPz$IJ()+C#Lt;<>M0%@4I_FH8|nD zpl0l`;O|MoSNe3Iar_^Xbk z=XtA!igfHwHz(r>vpv}3RGL?I=rFF_D$jfVuk81i%0cVSI!zJ!H9MVKxNhEa1Ku;& zpMHJ)CF}Q`n=CtC7Ux#@H!q5t`$AS|o59o@DvOk6mTX)7Zms|QgikpMp`mtn=adwx zb@BdW?Y;Pezgu5T*Z;)N*Rx8tonqZKJ<+Ar96Sc%tJVhD3NQJ|#LURRxVUk) zLE{Vqd0;5ZDziu!h&708TqXYD@%b~CmUk{|X21JC?-u)GPjJeRI-T3M>K!d zZFhA=cB}%(^~S~qO^iy&9%f`^U~XdMX8?+GF*PwVG8~g;kNzt)#p7?*%c2?m&J5~~ zTa$vF8GKF8KD*CzYLfNsw=74Zp3l&IU^gvADM#EYNL^^6!yi|(Be(86f17qje|61Q zG|R_FKF zc+1RB5zGH>`B^SF>J)bu6Hnc{zaDIxFD2W~by$`5xK+MlRjkYQgGuQhwnYA^>pS*~ zWwY+e7@k~gRCL^UYz4ZJt{w+D(Dc`-~W$9MQ+;&*xtP-y1s7eS*fad4MvBKmUPapcseU%aowKG`u_H{ zlUEij_#Z!2Q0mx+M{)OGhB+;7tXXC9Y>s4`+~F|Y&^Za+ZnN`)bU1e@H%>a;q`XwA qOg~@XZgWP@Pwn?=60FO==m+%8w%1%;TTB(+$<$iUFhP{BYBq<~piJTEaf)j2<}xTGjCGq0pr z!No7wP{G;JKu(<3(7?bD2rY~a3=E>gd5sMWjf`PjgDetlv@)=O*l6gPSC*KQnF6v& z0o`_2S7gU3fLw2EVbH{=gzRBPRtDxKMt%mMI2ThBBO}9#s*>Z2yT4j$e_z7#%ZBs0 zbG1T&&EbA??%7Ag|@} zCNb}xkZ+XZ!?V{w+(^*qHVjjP%fr(j7v|(22fz7N{=E?ngy9K42o0Pod^&C6B-dgSZ zkt&jL>cI2(1$zq^ezDAWvhHK{NzSHC74y69ncl4nj+A}w*=F~>{?Q_}no0XN@@N;n zcyM&{ffub-dDTyP=bG+0yv1N!OGUHf>1f`jJHdfbZ&QE2ziRQ!rQDT?nUR5Uabv$h zV~>G6FqCDLStJa^8bmg(694e{{FzJ3JC`-H-~FF=i~X@DIAzH4v52vVoO4iDT5(NE z&6<7UzmJk{1KiGemmBbb^z$<^{%2ufW@7nZAP(Xyum~9N8St=iCA4`krUKKT0i%H; zNJ5ZB%0Qw?EVmMvvPzPXl9^t5ei?F{0TU@O&KMb7(}T}epL=**kSo!*m`8lM&pg?M z2_I{2=KNLIS{GmR=xAkQd+6R`d83cM%l_Wk@jkF5BIe(|D_Ql%-p3fOZvMCJoC{yt z_7mL`Cp=K9ac{Y%eZJqaMc!?W)$yaVELfjB$nri{q7gMo>Q2N$;BC#v6leXrNfs2rEQfLmAi uxlQ!z4O7DyU(`;EUnZII{f5ZdSF11WarnK1e^YDj_p4Jc@XyY;*z4o%)F9f1s6XFo+W8 zH8wCbGKO&t8YfWEMJ@(T5Eof{=9MMpWTpUJqL7%Eq7dZfY++=ifbLFLS7a|MfWpAY z!k~#!2|3spSs9p{82K51;#^EkjEoFB_U;O3_c*z_IJvv><3shk57)a)Zaem%Zm~XB z^13toH%W25*7-B9^xl7dNsl)6e-nk*+kI26WH~?os`9Fjvi}1Xzs%Bg@tEb3c${U< zsVHaLWA9#U(BxdMVvwM=`IL;@`vos2a-ZYN%iAvByh%pR@}}Wc<+z1n%Wg{6?-MUD zTs&cRCUeBerjJSob#^i*tFTJSKac<6k&|ie9X)5yv6(lAgO|H6 z6Awu;-~;LBXJq`(!otkN^1(nH#8+SuFyJ%bVdF|@^I%K`rep&~18tCmAd8BDQX@2; zTwNV9A+el{lx+3V^UIK9518nIvB${JmhvoDNbw8n(}|T|K3(zK!%ZLHjoqNH8e0V1VRgA0|SF7 zab9BsLnC7t*P!tr6prK6?S!X$b=Z0j1)?G>G@>_O^iy&;mpX&z}&>h&j1wXVrpV!WSG}@ zKH%=`<~7|s1ra`}t}RC!-x=mNdM~`j-qT%q>Vcogsxyy;E1$h=@#OJ|sS$Cqd-%hw zqxJ0)UCXKl`@4#-#Oz*a3S2)rlV8^QN=y*1)dnwym!`T`PKmehefh+Hy;5qrXx8a> zdMOr)7PEbAkI62a6TalZI~%3?%7_;^zSH;KSn%deF?Ymnlir!(tEX*cSggO{$qw(n zH)2Qr+*`PmJzH&=ZpBJ=j#(O8yC0@$|J8eKQuFub!J}syAB&e=*b(&7{?;#{*fYG} zqT{l6Y0rNAXTveg!;7ymwC6PJl$<1X>Du{YkLC5`m~5xNSvPUR8y&m4k{5-}m-ola z+EiziY~gU7iJ6gsadEamrhz;#dSsPZBn-qFMASW>u-tV0l`~^X&Y!ouhgE`dLtVhh zQI?NIj73Cim4@4rt}62-%UtH)NqC{m68m9>0Ut;|KO^IR78YhEmJbHvAie^NfB~NY z4;xoPn+IbmFyR|8B1Z=>*#o14kwIb3;c4l!(}b1JdHDZIURQQ)65sTVl1r3%!q*;o zV)H;*}DD9 z^P896XpFUKI2a$hch0JpS^y*D9{iCVe^M)id8`+xg@8lwzw7)kY~^S3UDY!|44b zN7r`;e}?dw9hR%kE1i(J{>tTTxja9AHzXd)-&mgQ?|gqD%VM^vl@r>lRD9p|Nplpt k@00txTW-hv)j0tSUFthtXiYIXzbfQ-RfEF9-#_jF01B(+$<$iUDLrhr*kEH5!P)j2<}xTGjCGq0pr!Nt#1 z!P(J3PMp`!z`zg)EsPBe45Gw&jSUQqjA2}Z#swtWC}ki4auT<&U_ok8Ze~eIYD#cv zQb|#2s-dBzfjC4?AhjYnr!)mg%F@6bB*iRj;F(vJn3I_Tbf5ydn_XRzy{G{4Gtlu( zj7rGC#K_9P+{DPw02Jq9YGPz$I2~g#(cZ0Ws!Y@2+S%??J$$Y|J&?H1JT)ZKoV8L^ zNpSTQJx{sRPW~&KriOd|w|i?H<8ycMhUtH1O?hJwlJIu3b?{}0vP(+@4y^N>V|H)e z)ed%_7=EU!Q(im#zg4w#;wqb%`8pEJ8WQbN+t1AJwDmcqs=Q(o``xE|9?rWyHD;;G zR`$L$FV0hXX4n5lS61>!tZS(_S$&YrM6dlrW@&6+uXWe|;HT%9Dk_3~PrI!a)L-_~ z@Y(hM75_d6-oE<>g+n>fqEQ%f}+dBJ!i=J6DBKaMSgtGnnqTuloHt_0k0c zK9GKXM#ldvEX+(SAHcCGtH2^)z-Pe2#+A_K!I%n6w+85`78o6j4C1R67C(|QmE|^^ zHt*Qirkx_4n?HWKe*1pdeUIoBmsD41@J|eV&T(}4%9%6ncnZcQ+HjJ8^+yor>L(#OiqsZ&(}RzHIxjf7=z|8Oqv-o&$OZk^V-y=unWnJH%uy<)s?!@X$p#jyQ{D}|2!TqquXWnG$BLnY_? FIRNT~dXoSE literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest12EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest12EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..5f3a49f93e402b60be1e8060b555f961df1fa7a4 GIT binary patch literal 991 zcmXqLV!mzA#B_K8GZP~d6CB(+$<$iUFhP|838q<~vkupqT4H?yQ9H6^$-siY`1 z)zDDcKoKOzEG(6mn49XHpI2N`l$e=UQmo+OXQ)tIn&j+gXdoxfYiM9#2!s~K1_lOE z;=INNhDOFPu0dlf6VoqiX&?O4!j&pTI_NM~Kh&j1wXVrpV!WZ1aOJn37&CB8cbo_o0T4jM0?{Nlzry`Gc51ApHrxyW`pOPVo$ zA(z2Do3-EmxnxJpS$E*}*#&FElRSBRD*Lj_|9@85G3o5mqQK6x4e3TZ&q#(o`DJ*{ zNY+oG>=X0JFB60;-mT@1GZV9kPq+N~r@i9nLHUR2GNPZ795?#}zE9cF#8~6%T^p{^ z_>u8ylx5`3B7<*NqPgqx&qTaubiHv!({w*m^YYm~S^cLkPqJKf%XEs}j4gbj0hi5| ze_&iFahFTWa?Ad6O?DZE_LV!9z4hzan{zWbICA3F8P_V9FTe6mtxx^bRbgfnn%>g4 z(EDLoov-V4mX+aJp?7x&st(p77WZoy)*f)1F{7?Qkw*KiNDXx_-yG-r2*H=yWm}7mHW%+C0 zSR>v^_9xUNx6Yd;d*1W-mxqZqW$`MfN@rV1?cg)|G5zNZ&G54o?`phW7|q;2J(cQ*3yBhA9MdZKF(0#PRwt>y1aSOAz(u((4 vvkTm+1&%sCDhzRW&Tq8TBx_xJj5v?}<~a>%0kb_;@yt53G)8sRv1wBP^XhH3 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest13EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest13EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..d64ddf53c7a101cd47bb9b2212613f8881004dfe GIT binary patch literal 991 zcmXqLV!mzA#B_K8GZP~d6CB(+$<$iUFhP|838q<~vkupqT4H?yQ9H6^$-siY`1 z)zDDcKoKOzEG(6mn49XHpI2N`l$e=UQmo+OXQ)tIn&j+gWFRNbYiM9#2!s~K1_lOE z;=INNhDOFPu0dlf6VoqiX&?O4!j&pTI_NM~Kh&j1wXVrpV!WY}SUUhG?ilg93y-JBC7%1=kx1Ss*fMZWm!6!rCMaG&hM0~(3@ zJ12(cZ$0^WQT`q;^L=|C6gQoUe|Nnsd&9=vYw~}K9#KzAlzm*kwQ0t3@i1G5Yx*xb z6aQ%*KaswpV@rP3W2bZFQ{*Sb@ZD6+d)CtGmLDRn_(im(!v5s)--)-@YV>X_o_3kz z?!|4{dB*w;ZaEhZme})8+MVboITw#XUQabFsLj$xnfUx_6nF85tNCXB%W1$OD5|R+&Y@K&(Mzk$yyTw9nM( z+uwa_-!h%=LH&d2qTnPY%f}+dB647Q$q8AbW%_Ljv(`0KJX?3yNk-m)52T-;k?}tZ z3o{eT2Lo{sUx7uyfX{%3jVqzegE1ADcn#2#E-*S68PxtiJm#Wn@g$~w+5Mzv2L<2e ztd%4{y``cYvr0aQE)Q&W6S!jEt(cE20 zB9{Mc!Bexu$BHkkUDTdlZ9TVU#$Q+F@B`lx7u@(_=rY;srP}d}J{neazxLVvXk+Ye ve)V8S!tw1h1B!o?aVRl2U3oljd%M%ZY6T^o{g-MsJ_`xCvSpfuDw8(=p(J%F literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest15EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest15EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..fd864ced34c1763f00e5ec21c5cdda4dad0293a6 GIT binary patch literal 962 zcmXqLV%}%a#I$SyGZP~d6CB(+$<$iUFhP}x8cq<~piDlaiN)j2<}xTGjCGq0pr z!Nt#5p|~{3+0oEIPMp`!z`zg)EsPBe45Gw&jSUQqjA2}Z#ugH7l{63s*~%>}kXn(P zQ<{>R5?q>8Qk0r%XlQ9*4snoyXI@!iPG$f=Hx!sHD}oDX59MR6t;TCp*`o0Y`i%wwIXm|!|RpaQOlpL z*p~iq*}2^c7mn_0`f+d(*SRg%Z*eZRo+}70EfJ zDXA&JrAZ}4si{VWmIme!2N`(gl_ln6rT`tHfbKR|S7fg!fc$1?X3)f_gd7}KTh=T9wYWSxDFB`$JDLG?9 zeen#t+J<{s@1AzuwAvBeXus6uO=O5rvB($aw3Y(Dncel<3HYR-q_6E~Wi%E5ka|FZk|{)t%3KOW{$c zGsnC5^toOpT`ERdb+7hSo_u}%XiiAx+r=qDM^AqE-Ku-mC*fd=qRV>Sxw&G||BjxU z@@0d@{f$3)m?A_nUY9bgl~TIj&&15gz_>WuAk#n|7{s#5ED{D{4I&MDj_ZBzldAt{ zQT@gA_1%{d$7}+?sYaHMMT|uxVf&YtSL-evDAM`*Wq(h?r#1bm#|-#D`uQ0d|Ff_# zGqHRC$EK_Ti+};20S_BjLYoI;DlmN-Fd|0>Fm(c>gOS1S#?nI$Yg0D*=zsQ{QGYva zxB350OP)0hlj;tvURPQwXa4_Qw>k&su9RT?g(2~tTjvX&*0q*a6rcT}r}?Y2ZLN#Y zCl&e1PYivl563<{oc!s4&c)0P*AK2(nJa3;+@9zsdxG)wgazvA)*TWdl9o5;PMbda zYi~8vIY#Agta_<;xGS?dZ(I`Cx4C2Q>WMsmOD&J;yuRu5-r}Tg29xuh?Kd6v%!yPn zKj;7ExCQfF_JZV-JI^}L`7n8(n5F8~d$aGqnP(cablrL1-D^%xd)@B(rK_NLEq9e-UtIi3Ur?8ae>9bBexMzB?ugjF|wz)r)T9B(+$<$iUFhP}x8cq<~piDlaiN)j2<}xTGjCGq0pr z!Nt#5p|~{3+0n>APMp`!z`zg)EsPBe45Gw&jSUQqjA2}Z#ugH7l{63s*~%>}kXn(P zQ<{>R5?q>8Qk0r%XlQ9*4snoyXI@!iPG$%JwKB@)>U3ZhwK-iG{XfwN^i_Ani` ze1Eu4>#Zx9`Mh3>k*#?;g^1vXLRc4Ve5Ni-Q!}2yuL$>Z- z$}5Hrtv98D`UgW zF37|ybTccEYZiz9hG}Qc2vD%f_kI=F#?@mywa1mBGN@klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7lRDPR^B%S+5nb|A$y9Em4Ug5k)Oe!iIIz`iII`v zickK^{x;?>DaU62)jH2raBFRu=k?h$=34QGulpodex~T#Pa~!CN~s$X7Cf?5>0Q>k z>_m~|hc8U`eir6x?AsCGI_c(>;~%^h>Tzl)esE+z$(|-0)#(%e%HzGY{C@eCYn3)S z-_$k~T~~@uESQ!2L%Qwe6ydLzuDLRu^6dZqE-vD=%}?)GHOm2Pm~e(s;1rfKcOw3)0sW(54uzIU?peZOZ0 z<8~t+)<2fVp35>ZGcqtP&Nj$2kOxMstTKy)fmnlxV}+C3S-%xc&mUUe|GrY}0N0=Q zZQ!_<Rx%0p_AN?ZoIBq?CdZwEE>jSY8lZar3-^S&iVQ8G6@Xbsb+V5QfpZi`k%rvJ-N*uwjE&ZesWH-mPROMZIB z-aBE-Qx(1jtul$eO^bhCy6|%c|FtSTi>mj_GK!zRsy;c};;Ssj_2>Kl1idoiFyHvr z<4-h#O=en(e)uWM)G n3VBgqxAMiMdrMEvNtrcGrX?kg@okf`G5>^yQ(L=rkMaTl=n!C5 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest2EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest2EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..3fd895c9242de0c4314cb2dd88e8b73f762d8f1e GIT binary patch literal 957 zcmXqLV%}-c#I$e$GZP~d5E<~YacZ@Bw0-AgWaMULFz`3zHsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1 z-}OtcdY;<_NH5%y%C6-nDSG)v&uaTnj#-^1w7wW|ff3fA{GPLZWY{-g$m|(p7`2N;$Jr*YhUt zcbfL8L{GA6)^GoLt@>8XGuxj`*zNhy;`OFaGSAu;d#^N8@v(WlHRhabo`L4vta{eu zqSRLxKTLf0roHS{H4`%<1LNXsgG>W?UMWE5#0Q z{dwO8PB5~3EMhDoe~SMvc@)+7UG4NHC+ly#GFzA5ylTJ)($CMx_@9M^nTh2CI5K4w zSOg6C40zbM652c%Q-Mj-fDt)5fC&>A9gGZNuOdF?#zbYWt8fZ*T(fo7-3@m{KWv>= z_DtAK>e`$q1#NHmpKVHaiqSmXZR>GudEK%%Qh7={Tb7ll6$fuAa4}l-z1{uxeGi-1 z`(LVhg9UQJZ(Vo1YGS!mYsZZfUHe2iqb{xfzN+@xEp^UF@tn)Gx!?15HSV9UBVL|x z^vD*+-#-H;n5$n+>)$J$lM!g+6{+>}mbKxAV;!ZUk5io_S^70odbc_r6Dqm<DY0sx--a2o&s literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest3EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest3EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..decbf34aaceec2999b83492e201c5c6d755f3d6e GIT binary patch literal 1113 zcmXqLVhJ^9Vzynt%*4pV#K>&G%f_kI=F#?@mywa1mBGN@klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7lRDPR^B%S+5nbO92AVK49rc8{0u;G zE~X|%MuwyOjhq*cI&RLoB2^;cy~*m^4DSq?+cKI7c3+G5l{!Uk1L`ZaiUhs!l|3 z#eur1X40E1UX_b3J)!LEt?Qc1cH-E>S!EUp1F;4X#|kI6vwka@oCA_vaV-fr0OU@5{?wtMW{m0p&FVB!GMnR@qinhQ2$RKSP^)<%%r-+2{OPpzOADtJK9)MY#pTYkl&RbzIk8r4JM#7^Buuui`Or~c8~T>vQlHZH e9Kop{Z+fv?BysaiE6je{Cf5D`N@Yp^`dR?T^q67* literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest7EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest7EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..6ac76654e5e7e347f48d2584258beb9bf9605205 GIT binary patch literal 957 zcmXqLV%}-c#I$e$GZP~d5E<~YacZ@Bw0-AgWaMULFz`3zHsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1{jqiTEZAQC*12J1Su1tuk1U5`x4z3O z4MCnq+Izn-E6kZ2k<4)7@HQsXEe1*M=RT&2{}jD@KKdJ%=**P$M|6(w`a8>Ct>51C zg3~n1l$%;ReantYtm~O`s7&?B+tbP?l^m`F9#^jXv%vpfo&IT~;=3&GS1(<3fBh$h zr$tjLrn2Xkw#3YRbVz@hQCs%>>lvNix0_0*Y*^Xv)nfBh=!Q1BOncb{~-McOqF zt&UNdHD}*}MKT38z;@ojw1)<&9QXol=BR`J3m> zCv$TgGfL{7CN#+3;ro&>hm9{4)VG4Zu4&q{u8%c?-t$v``aN|RbOmv-sKbb zUmoAM)PFS#XYKP%4xHy=avE>lE!DBDzPe=Fu9g(3`Fqn@zfKc9A{pDf;N}PC%f;3~ zo`Gq)b1X}o??gwNd}Ey38q4)#XF&SI+rbvUU&^0XFq@M5Suae<3OB>oQmS}@-_cbr33@g*FI7d3TX_j^8Wd+({t_jZU7zfZ!iD= literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest8EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest8EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..48adc0a6d55c90ce0dd9c1a8f5ce152392a68367 GIT binary patch literal 957 zcmXqLV%}-c#I$e$GZP~d6CB(+$<$iUDLrhr*kEH5!P)j2<}xTGjCGq0pr!Nt!+ z!P(J3PMp`!z`zg)EsPBe45Gw&jSUQqjA2}Z#%2<2lr#_rIf+|XAhjYnr!*xsCAc)H zq$oAj(9pub3?#)YtnZmumY9>70(67|y1QImk-eb+@|T4{6QdGxNHDT8FgG#sGXTZ8 zn3@#VNC|GqipFPC;Ft<+g4{Mt6Yec85H^ZdslN4B12Rp-za^eH~` z^>5>zdeh*LOMx%L&KEA6`@i|5#RlE~TNNq;?`xFY*?G!%^E!uBM(N+nc>z)=;&b*$agQQY`ZwCA2S&X=B$TmCFKLZ;(naR~x$aWOcd4vh z-s<1nCy42<Jh0FpStwVy; zR2VLwDg`GPSw0pq77^LgYtB}dUw-xK`MT}}CrsDd7p2%3@PYL6Gcx{XVPR%s`2dbg zSp^mW13m*DHm-y=55`nr(lkI%n84^@WKi3)S!&YV(xbJ#?QV0eWDc!bP$sxOAwB58 zu2UaAZ;GDs=F*x{w)HIK1^Ykwuosz0uPa*=;QLN$;a0mhR@&1Zx`^lJxBbyoa6Hh? zKg})m|B`F9+r^d@w%nI*e)OmCmbc)RIl;dEP1pSPGH|@xddP|WLqufqqg@>})j!|n z?@50b5V1^K@z>Pcj_mo~T)jswCr=Uj_xkUB<45gg8|pqJ&W#rfZgr`-BmC>kjQ88O z_qz0R*hChrUSuAZG<9Q~f&GMicP+UjHaD8oet)#+HS3m>4BhjtmM;I#CbY)x)UQ2C odWCACMUCMrL$0@qd%0hGRe0ufPrlx4*Kq!aa~LF<{!hsP0JE}hwg3PC literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest9EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidDNnameConstraintsTest9EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..ed753d42e6664959fc6db584c1b4db1984164246 GIT binary patch literal 957 zcmXqLV%}-c#I$e$GZP~d5E<~YacZ@Bw0-AgWaMULFz`3zHsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1+@!Kye$~#2cRn1_e5xia9C&O`X~4S9`Qe8+>denA zc;1|^F!i&Og52p(omutUcuQi8-nmFTN@kF>*}me=zn1r3x`QvI*q9~S$=Q7Sxg zi<4Qt&wlyvU(}!exS79}T6akCUtLyvS7Xl0>9@-xPMMr!YdzbU9V8qf@yI7O?L~av zTiMsCGj9aEbF33S+Rwzy$iTQb+aS|G9vH&1$}AEFVhtiWo@Q(HB07c40v)YGg49$P zE}tp|Cm2~i7BLo)fF*`zY|?$#4_-LC@E~x;{LjL|%*65m9GS8T zECL3620UzB32h#XslcRZz=#|jz=R2m4n~F*v!^VxKefhD)A0;HyRqjvX`^Ec?5+yN z+fSDM6C(6E-h$)pj>R0Un?1!R2L!DA#86yvjCnE1kHXC-WdvDJ1 zOyq&t#_9~oW6z)L;cIbUS?@KsJI!*zn=D7E$KMaeO`W$b@91L-r@8JkY}McH3q5LX z@5sA`MQLNq?%Dijw!WSsu(kEqv?6Tx5@x{&G$;PhL=5fw~h1tN~kQ>Nl4rO5zW(o~9lsAwCakzxV zLQ;!M6r59wN;1 zMlki9`e%MN_IGv)hOchy7pa!trtv@3?djRMOErJ!ALM8#EhunQXE2MlT3GG9X<^vk zRUghdJvDo85>l=?YhCgx&+m5Y9v=Gnt<&iL%#7-v=S*Th)@Y_wo20B|5@nd4%)#q) zYQFdm-Z}=Wr>w?H^r8cq&4vI z!T@xJK;+IP2gQFG{A2v;drvL+`MjvHZ^{A<=lkDTMqnXjxW5+=6F8; z*O`SUH`Tc`K@w@)U(wI*Hb6Hz_FC2eUzxBa`b1^@rEzUN`G>`{IxU4dZgn?Lt zNdJUmJtZ%yc}_$gueFH|iA+%C-Uv>UvV1IJEFx_ge803jvpqk!#_dm98g#c+A;Hx^ z9Hd`?MZkd1fQOAMq0NIa6`0Zu7!CM968wye|5;d=nb-~>rF&*OMgv_Y5&I=i7+%lV uQ`{zUvUK;x+4jM&*1`Yk+iD593AG`dCsw>VSbS*yj71E{fC&Jnb3-}+ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidEESignatureTest3EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidEESignatureTest3EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..9238109b646e7d9fae59ea170a079560c45d80b7 GIT binary patch literal 893 zcmXqLVy-l3VoF@V%*4n9L*3>*x(4LI4DLs{5_nL>jNs{QMLJXGa4$ab80M14AIR zFg7qSh!W>DHZU|YhH(voNwh)PKoMetlxJR9Voqj?f~%`SaAta5Vo7OHsshMe#s*D{ zO2|H8WMyD(V&rE4igPhFF)}jjRn%rQXSFoi7-6|1?`ik$?D<9tcW(V`x^K1h>NS?r zSB~A1PHTCzwk!SU(;4MEZ%zIXv$3~+bMmo^kJ`0&mHhP=KB&>Bwc}QDv$SBr-+85T zH@wbu+?-ca{kSOL-#R<3BM~nHemI-FQ=Fn-ef)vBt&h~&zAH7~p2;e2JS2KILx0{u zK7V_smA&nuO6h?eru$z;v@SfhLP+oWtDdO$T>ENkIes`vh+n_|j72QY@b~MyLy~$v z`Ca}7UF&vS&?{Ilr7bTm=T_Z=#$^|m>@n>>yX>69`n1RIE@jPqF@;b6?3N?0R}6R7 zM`W8C%LIx#PkzY8=lM$KJ!{Rw|NiOyZQEEE7c((4GB7UAHpn!P2L`6BGK++PSc6Ce zV~dLP9_^qhUbagGibMjxuD3b~j&NB%7BLo)gU#nBIoi$t5cK2Wo4nw2DZ3x-aRNuT zEI%XTe-;*ICYBEd;vn-BSb*ukfQOAMq0NIa6_~UP7?Gm`n6QA+!N|b8`9tc#gKITD z*|h$BcCZD=(`5yq~8TB5nM3*~BkAxBkqMt~fd2lj_V1wJ+Q^Xov4U zopVN;=a+-QIeGuika^mnTemATsoBauI@a{?TlwMJTfDz<&Stq+@qMD|KHpvDh2iCF zDLyBqAFPuxpTD`Q3Gai`pli>|fHqTb9djpWlP;vuvhjPYHbV G)*1jikY9=b literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidEEnotAfterDateTest6EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidEEnotAfterDateTest6EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..af6fdf8c5a91ced4ca4bddab927d445c35997464 GIT binary patch literal 912 zcmXqLV(u|$Vk%j{%*4pV#K>mA%f_kI=F#?@mywa1mBGNlklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6foceDPR_6chApHQE+xNkQ3)MG%zp( zLJMO91A{0a7sP>a4bn)o!OXw}VuP+{URh#JW{QHVt3qCWiDOzxYLS8q&?z7RB$p|G zoN8v!#HfVqIYw3n<|amd2B0_>QxhX2!_^6`hYGDaxV@|vMJfN<{pUcK=!mAP&lEd7?ZENPn`WIadtGT(^03)+-}WVooF-Q;QP%zD&mU8<+T`pjb(2~Y z&b=3YxAg6bXHz<>rw1>pX}YoTG=sRUERWj}?bELW#LvHfZg`@B@0&J9W%m3tZ$p)) zE3df4I!F4#nmZd4-}c0WMsB`&V`=7XMb${B!oaJ4*Lt2y3=pnZ>Lu3^>JY~8nnCWb zqwqY3x#xqzR-IojUBc7PSARIPblQ#hpNi3HD&K8GYeICgZkL@s-NR};acYH8#O6wm z*}G0G_P_h)_vzM9CdbS*4vUTSS+*Zz$hLeWW_HxU=A1VZGb01z;%tLV19@Qh$||!+ z7>G59L@>6fNbk`On&M@&C@auZ3li)NU%f}+dBBJ`@both++tw?`3-X64?_yiO zcF96;3XtVzWc<&THuU2L+olR*r&~vq{T#AgqZ_Ti=Wq3@XjeFNl&9jxJJorK!2%p!`F6*- zB%Z$AE%5MTME)ken`YeR?;kIm_2%2UC;tkvcqdHwX%-bZbV=BBw6lPIy%SQ zH@W7C-^D`CZ5%qzf>u|OdCne@a(yE_93^e3?PthFyRZg#0DQAy^N z6hHmGlEYu?)wPC0H6G3jv!o>sHvYF*SQ_>@YL4Q6-h28p&t2xax%SNghZ|RP=6O~8 zjbQyT>28fv_x^;x3s(jeGEH_BJrKWI?NY#-?%gM6Cj~e#Haos|k!jbE5nQvLvA83) J{_L&-O90!nRGk0- literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidEEnotBeforeDateTest2EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidEEnotBeforeDateTest2EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..3ddef09cabffac1e6772570205da804a79d05b72 GIT binary patch literal 913 zcmXqLV(v9)Vk%w0%*4pV#K>&G%f_kI=F#?@mywa1mBGNlklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6foceDPR_6chApHQE+xNkQ3)MF*h&- zN&*!a7(@ZNmPlNKbP{baH!y|Rpy!!amY9>7qTuSPke6TLl$w@bl&atYbPGrX$!Q88 zw;CBVF)AVZj**ptxrvdV0VvMJ)Wpchu=VVgg!zweZRwqoRIh&P)n+lTgWQLI{$0xX zzbJg=ivy=QCBTMAFa1Re|~zsOp)eVy5&|#_lb(LfT3$nvp>v53qpS#Il;qn~FeSTQxGu+($hdC!gYM+v<01mF?OujS9TaVjX{GCw^<1ed_#*>x&L;k-l)o^5)gk z#EtTCkmJYR)CvV&NY-aR%#*6tXgB5epD!le=3KX~rPvru K)_W&kw+aB~7FwtP literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidIDPwithindirectCRLTest23EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidIDPwithindirectCRLTest23EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..5cf92f7ce456958b42e455aeebedce6480f4f10b GIT binary patch literal 925 zcmXqLVxDQx#MHQenTe4JhzxkyIJMe5+P?ELGIFyr7yFJG@^ zE^smVc--^ti|tPBzWa`tUx|6xmHK7bT&}2CujJT9@6#7qR?WQTFnNC2)YglvdP}^b zmql`U98YPub97B{=rzWteZt>1T*{l@YGQL@{}1nbZ?>7AY_d`PzH!UOavt%9!7y>Mi}Nd}~u%meY?zk)K-BU%xx^*Eo7n;EO*e%Oq2O#++lmU3jE#>b7+Yb{&7Q zI(@t3|GkNpC3o`QX1i?nI{sfeFf!-L-r$HJweb7j*Vo>j$zrcNr!i_v_x&`9l=)xp zc=zWfH%|OL)w(~yV*2@&6JIS)(0=ElG3$l$^Yzyj{`#I981uk*ldi#eCT2zk#>LqN znFjK}K$cZz0mf^Ci0Y5^f7WkXDJ5O$efxBZPPg|)(X-$LAjI4@PYL6Gcx{XVPR%s`CuRp;w!KS81NbJuyG}{c`&8|lb!)1a&!O_ z9xyr>8A?-kH$R$NbGXZKWko>Yk#BQ~-2Z&%*m3;6wZC9bZpHkzTSpUtOH*aSP->&Cvf-heSA710h=6Q1e UWJi0YqU8a6n-9&N;_dJr0PU!84*&oF literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidIDPwithindirectCRLTest26EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidIDPwithindirectCRLTest26EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..c4b45f87831eb714fd1134886e0a66573bcebf82 GIT binary patch literal 1019 zcmXqLV*YN>#B_fFGZP~d6C<+$FB_*;n@8JsUPeZ4Rt5tPLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP{KeAq<~qNKQk{SvnVyW#5u@E!P(Ks zKu(<3(7?bD2rY~a3=E>gd5sMWjf`PjgKQFQvNo`U*kt6HSC*KQnWEt75};6?S(2fE zY_+Q^vMUup&NebLXkt`C_9-JP19KB2KLb#li>Zl`k>Sj&YNLFH3C>#4?OX15UY*34 zHZ_~o@Pc7W&z*+qL`J?hiY$-b9j>-_l$$%b$5Xxk!rGGKdMxoe*BDuk24DVBcQn(% zLh+{Ge3`dzFE%GlkiKvAZBhF52@jJWD*UN%c`I|cqjA}~qK#krBcJ=OG~B=RoR)m~ z@7kJgv(Kd%E>6BBYEZrZw#r_UYW;q@%OQWIYnOjN{zZPqFXaz)HXM^pc7MwVSlM-E zT9t9`EMAEpEG_Nlw70LXs_Hr~_s%0Oa5710$P}f$854=~LU=vu@ry zbMR^E4%06(o7m>v*y6tIhwvxSxY!bfj|+d+hIbi%2>n{-l>f8E#)`FS;r3r|uFPUN z;K=z}zwc%NXU}Z+XeQfs8-?hCbN#nEv?oMfQ(U^IxkxjJ+jaCA2jq&5Yga=DyDQRf{$B zb4Ba(&-3N$9pc!&o^AIQ|1WP&1m8a{Q!zX2bl>#&Y}*ZX+d|!n%k2U*c7{yP-3I{H CJ$CT` literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidLongSerialNumberTest18EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidLongSerialNumberTest18EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..56b1ab45831fb547129ed606b10b8b9fd90321f3 GIT binary patch literal 948 zcmXqLV%}iT#57|8GZP~dlSn-y6Eh1d8#@Ol7dHd#AN85K^Mn-N{ z1_M7sZUas>=1>+kVW!YvLwN&P5Qj@xEF`tKM8P?=s3bEjGdZy&wOGN(z|hc8&OipF zfLU17CqFM;Avm=tGciZOuQWF)wMfC)(Lhd|*U-Sg5C|=d4GavT#CeSk42_IoT!Ty! z?Xxs6huCM}nOByWlbND`#a>reWS1&{oNj1g(8Q>O>{~`w2IeM4eg>d87gG}>Bf~M{ z1+G4q8dm8ku4}lr)kP{}yO4g2@x6toK5KXF5sCg-{=w4u*5@B79}-MuPIG$hwu_&A zcXj3DDd`KBY;=v%oZfPjKiP415|`~kxjjd+6#H8mpKqVRTQ%ot?Ty`wOXr<(kl$J; z=ia?#X>|Vy1$7(Kd8fo~{tqY*^pgAd=jUxxIjxDJ%Z@cC$emiNy|B!eg=Klnw*|_t z%N*ZcH}IXw=bjswulZnarQ!=EQ{{-cTirVCD>MV&&hcCqm+^bq$+))Scc0HOb~`nm z4GDF6@$&A@b+1BqewiTdmYnFfnf*l7<+9|avvSF0=Pb&v?|qeQ_H>ulJ>Lr-y1ly} z<|x^%{=7(%iJ6gsadEamrhz;#h-H;oBn-qFM7Wc;yRSRMZX{iw|JZ8BEAIc-QmfF1tE3c3%0iH$_*>E+4i3)qO+yMfDfdfpONuD3kx$7%LfB-5MO~sz<|$y zhm9+t&4V!&m?8}rk)s2c_<+&D$Pl@8_Wx&RyJqKdC6{?E4HHiMe)CVuiAC0{3OX;_ zugqEfI{5hmmDzc#ZNFbr-yt%|@YMR*FO8GeJ7Zo* z+l4(Iug-6%`OD@p^I5}JyR-;Y_K)&GR|DS63ffR4dK@j&sI*?!&E2 zm*#Q0o$&ta{%C){W89MG(Fvjx|ICYCAK7xjX8$|R4bnB0&P%thauo3_e7oQ3O5}!j ltDG$lYroy}enMrY!K#}-f6=(kkeQdR;8v8MtB{yi z8IYfonOv#h>}Vh-&TD93UZl`k>TjqcUg<0#I}Zd{CIxUF;|km z@lng_=>^Y<pc)w}2JvvhPevOjKKbl}XwiT%qs1@Ens<(_oQBYyhxnYyfd zZ3_}uT{|3Bi+t#FPv_nAsr$n+zg@RDlPn?8P*Po!#{d;GR;a{^E(l=f$kF{Cfy+r$# z=#xo?PEPk__W5)-+UCQ&lzr1x;>)E-KiJ6gsadEam zrhz;#lx3A!Bn-qFL^6s+9&nqSFLJmwW!g2-)m2OK^?JZ*Lza(4j77w-yJK=*`MEc{ zpSbI+p1M@$*QL#+27Dm>{EUqMSy-5vSUwntgZK(80tS2rJZxMEZ61uNz*J~}o(6%@ z!N_2J-=#Kzwcd8+n}B60r#pO~w6%$D)msHI5YAYq)kk;f0Lr#9zMQ zW+6MP5|bK?E_J3Da9@eaI#6-uf6xEO)eUK@kFx7zwukW>WwF literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidMappingToanyPolicyTest8EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidMappingToanyPolicyTest8EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..ee6914c15aba209a9ba118c78fda02befd710bbe GIT binary patch literal 926 zcmXqLVxDEt#MHEanTe5!iILHOmyJ`a&7F(Js3QelybUc=GGT>E(UBm1)Rm(#guI=wH4qvv?E~~$i>-2_uN5kC>)H1zB-+w8fl%rAo0YaN;pu}(pL3h()wmv`h^zP^0* zaJp!jNZRq2NAonJ3WPSYi?&t2*Hmx#A6jd|S6WfjsPLsX`%t6Rf@h{r3a@`UX0_ZX{Zu}@yczxCUh zW6gzE^cJWs(0*3ct&@`%{y9Ei;WxMHD>oUgn$GpJfnWuW{3h!On^q+kU zfqMI*0@-&g+Zg%x1kW$VxQonjpAXM&+QB8Wx58qM*>%@0*){jCi*N~TTdn5rq5AOu Ne73B|>(92;0ssddXNdp+ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidMissingCRLTest1EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidMissingCRLTest1EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..30b027590338a44d691c4c5c85907e78d44285fe GIT binary patch literal 909 zcmXqLV(v6(Vk%s~%*4pV#K>sC%f_kI=F#?@mywa1mBGNtklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6fzJ1DPR`n^vhRp4)RfOb~KO^=QT7i zFa$yiV*>+&C~;n614AQY7}p??L^})(^dWX=c;=NQ=47TQ_+}OtXXd4YEp&B7c9sIj zorVTYj7rEpV`ODuZerwT0E%-lH8C!3oAJbOyY$u-+nj=Km!AEe zAMIH(Pgv2eRz~8rlc?Oj)t*tGf3t51-TiFx$p!Ow&0f{$&&dx}$u9fvGOOzhA^$F;^h;Nfqjk~j{l{ez;-meZtHtj0QSC+kI z+7`DX!g}#X*_xLd_T}h)wBC`(EAWmz`DxS3W73HX-+Ig4bxM|gu2YgRYHhmP$9?U0 I&bh^x04C02m;e9( literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidMissingbasicConstraintsTest1EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidMissingbasicConstraintsTest1EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..80ba7a03dd1ad0fa897b651c2238e99929b50693 GIT binary patch literal 940 zcmXqLVqRg;#57?6GZP~d6CB(+$<$iUFhP{lwAq<~pi+BdVfI5RI@At|vqGub&m zuehWrF*C2ESi#xRKu(<3(7?bD2rY~a3=E>gd5sMWjf`PjgFF&#wKK4R*lOyTSC*KQ znWBKxc2`$qS1W+LVQA3AsD$isMpg#qCPsb+pg0#(6C)$Tc^B*6(C2>^f7S04n_sMM z=5$8xpNi?xw(ujHZ_b?>v|en=4%gjQuKSfAnwCqY-&YEiYF_naS$ zOYXU9aMURC*PJKDyMCNrKUcQ#c=5MOrW>6e+wUrxy!-GD5#P2`iP2B^->EXM_ibG! zcfvaJWYq`BYxDP9c&BRAbeb`Jsr7bCjWr7;*Y>WQ+_X|#=;u+MZ5|;~f=0YI3%Mg_ zas0~hUUPre)ma;z8s`Uk>!cn&!*qz_Y3E^?w>$Sfzv=3=JME}Y-K>Q5Nuo^5j0}v6 zvkfv01-nWaLyG|)NIyR#<9`+wW+s*o2I3&T0*inFp8*dWS3;WyV=6Eu8la~` zV017tgq0~2h)S)o5?G|&9JBc>+vQV?qJOUlOk$YQ@#w6P{eh_aes^yl`o-!Rc6OWG zeg-e?Sc@B9&fO8){50jxhyFVamqiwZdDW^tUTZM(N$nZkDEF(=lh5tD@o;nIlD)U2 zSw?)mL_xI8VFN zVaP46kbGj{x6&_L?0*R?PI^&to$KzceawPv%(E3)c#dAod|0HbmLbw>f4U1LW8 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidNameChainingOrderTest2EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidNameChainingOrderTest2EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..6b7d7de29c65e338c3f0b3bca395cfb9bed538e7 GIT binary patch literal 999 zcmXqLVt#DU#B_QAGZP~d6COfOYv7rKA>R=A|n*I~vG|^BNi$7y_Y%v4Md> zlsK=kfuWHxjBAidqN6Ph%pq18c;=NQ=47To9O|5rn3)H%5^T4Et1Gg96+i)CWYEN@ zgdAp!tPIRejQk8haW1ANMn;BZ64fc<9cz8Pwli{mPFb-QBR>lu;v#=}_FUh7Fq{Bfj@lzb~7A zmo4;ytcLuV>6g#=h#ziuDec?YC&I{AF#SYAR(!v=tI`3mT4ottyG1U$eB6DWiJ6gsadEamrhz;#h-H;oBn-qFMD}}i zH_rC$5i#tEetG7u{)SU#_tBTwLz< zRjr(r&-Y(Le9^mmQ8pqMFTXRK{L{L=VX{y4wEM0PSqf&JGLkz`%{YV2;P%d=iRNX~ zXRq&Uy?n+0@~bF+&(!XtNl%$YI9JV>xbRF*-j%afli&RLu<&nwrtzyH z4rWP*{k^Q^`xhk4X*WDlaZ$fDsJX4a=0rt1>xC(fkrGu#>^3*d#Q5jU&^+q@>)}!N zoJVK5mwwskn&W>dp6mV-5$1CXGY?v+Upi;LDztKKWwiAFEB%id>+3rhXUup20H)(| ASpWb4 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidNameChainingTest1EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidNameChainingTest1EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..ee18fa08fbb48d233ddb881f4bff98fe9cc8ae50 GIT binary patch literal 914 zcmXqLV(v3&Vk%p}%*4pV#K>vD%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`nanH|BQE+xt2+GedF_07I zH8e0V1VRgA0|SF7ab9BsLnC7t*C3fhYk;~T)@XU=l_ln6rYQI&=B6q*XC!9kW#*+T zxVj>{O#$RsLxUzpC1me0vNA9?G4eA2#krW87#SJ%FBi;9a7tM3-+bZW_9F-POUx+! zmM5Y-B_&wqz3rp3F`uf_KOJuCnmKcqRZ+x3^&Q(J;;KIWKVBuc#ImDw&P|nD&xN=B z36q*MUqXEU28pis42#Sfi=-4{j&d(>+&ZI~b${HZP3M`blXkD(DSowaL+U!_kPAJl zX8A?dc28YDx6DRt9cS*xb5-&|9Fvxx*d6h&Z^Ft?c@MgeDeGPeIm)+O_h+hHpX{9- zss$ci#q%CFJD2C3cewc^e`{*dZ%zGk-w(2^eA?s{Jv)EFXI+l;1wyAK6%u==+>bW3 zxfjDw$NEP%sjL5j$M4s-n_i#W9>h2=+S>c*yNGFjCcRO;Wt1Fys+)wn3(W zJTP!&m02VV#2Q2*7+X}N_h<)A@v>biP$Uxgb-mR|a4L}HV-aH!kvhOJ$%P;Z+AGtlgWw^aE(9YDd zd}C*#&cSbzvjsE{e-e}bb2U(L-IO_7PW|1Pd0*Y6j!ipNG2yJ=@A?%xugL@z^k}Z> ze{HgqtDnulM#L(1mXPkg^fb4l3)TAjx(>hpb(w9h!==w}zcQzPX2@)x@9wc?%ACq= z&zD(F`nOxFQuk?Y>DDzb?-a<~s%E(z%rs?%g?AIXW5fFFRpnZuN%B*dZ+pv-k=Hc6 zd}_{td%yO)yQO!_>+rwXL5kWxB(+$<$iUFhP{}|6q<~pi(l0eVu_UuBRUtUFC^Iof z!LKwoDYZz!+0j5woY&C6zz_&6j13G7qQrTP4GfKpVO)b;6794#u!h)a;+a>Ln3I{J zfWvNAS7a9}fV^O6YS6@}gzRfZRtDxKMt%mMI2ThBBO}A>r2c5BD=xL~7J3#vinlsv z`n7Gw4!$bK?+rK3@_TzEu9UWXDq>yduKmQ!#4)I|@8zuGU|vhzTgS~AxspG<{S>?1 zZj1Y?tpd@{SLSx@5#JM@pUN{WL)o3bBed_|#>mrJe$vr4O%_ir9Lr1%XTHdI1#Bm@^oy7l=+;SCU{3;&DC>j9NP9=^qneOTG{BG zr*iX_#5L7YZLOkXjJqQQ!!H~^J#9f(kN#ezS^Uf^XU(Zwa#uD)^;?NH6Eh zFcAWygOR~AYij81uSU9Ji}vOPXba7;;hi7V*lu{SL8;p9%cUp%?=;`+N?Pr<*!sim z1bLp%vmRIG9(u6O@@e>`ja%6!?0h@txWEj7B5$LOa*NV`&-nMbWQ(0l8{^AU`g=B- zZITo|xN4V!=?-E3?9Zl7uM4W|=T2hmbP(G-$^QO{X$G7Z_q|p*^ao%5*g&39p~ zQ~iP+vV@I=?wvSuDrbskWUlSUWjX~*7fK&Ha{54r+tEim;v0)LX00~4-8;c{ewzAA zeUs|;zxJ9L>zGhfz3$iRVNLT;= V@#bEon@msUO*dX1zxL_>JODztWLW?J literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidOldCRLnextUpdateTest11EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidOldCRLnextUpdateTest11EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..1ec410d7554529c7b71796b8c183986a72671538 GIT binary patch literal 929 zcmXqLVxDWz#MHWgnTe5!iILHOmyJ`a&7YtOM;2h+mke6Cf5?YV~ zRHESQXdoxfYiM9#2!s~K1_lOE;=INNhDOFPu0bY=_E{R3L+mr~%qvUG$xKneVy~+! zvP%^}PB%0(Xkt`C_AMhT19KB2KLb#li>Zl`k>Mzl^NQR#jmNg6UsKj>)T=Z~|Mu^B zAWuTl_650JCqq|ozu(s$usLMp^Mr8ZnVpiX$+SA*sozrH(~@(6qqz17ONhzo z2+z$A7Bw=TnNo5pe^r0d(U~&>4=mKY&^=o`)>h?f%AYG7Ilaeir(P-1dHKv}Yf;Fx z>5tvK@73s4o_l1-^dAxuYwCB(uf5h1r7ZNEJ)d86+4@N$Y>&PM{5Z#(e}s+g z=(E0f@e>b961M+K4Lck=H~y;QcEfJvRRw=^>`GcqtP&Nj$2kOu~_ ztTKy)fmnmcxm)tLqR#Y9|D_Az-Luh!WLVQ`|5RVw=CaIOS*9j4ETL zzI$1<4I2$anLizy$9!^nS-0bSf4h6l!UwEZUIOL4qM zPC7IxeF=Hn(dRNlKrPbW_jKaAD#7Y&r=Gem&Hrg!m{R6sdwwyqLE;?+(Km+=`7~V5 z5qayjqw2EX_W$w~8dI!Xx}UGA6#uPz;4+i6fc2laJNnWGJ3g(uCHlY8l z)NW?%IsOJQWyAPsawe-JJ+v9V2fj{a=91cMQg!6Y9}_)}GNslTKhC{ekhtN%bt+_B%q@z;)bJ0~%zcApN~_wa*jAG?`Y{}k!E+e>wl)0SM_ z?(RRM=9a3R>-MYjg<@(YO!%jt_7T)e$nBlADSNh^-zu@hUDdjY##5d@@P4uAO@fRg zgVypDugpSiwu1gFmY2GEJlZU`lKESv)bw7zBY*b( zJVbqABz}^ z$jANvUfg}rzVMtyd6StUOMqOhtcn32NIyR#<9`+wW+s*o2I3&T0*inFp8*dWS3;Wy zV=6Em8la~_V017ttgo7``Y8Eaai-`0x9#&2_p81AEA*p7QA}gir)!V4YtPk^J~ORs z*9H9-o8OdKPgXpAPGf@X8P*dI+UD1r#ZC*VnQ`KMV~=|C7=5=^R)#t1Wc%*j z`+_XS{CAd_DI;U8Y4q^>6u~&xEB7rQW>eF{@ggXZ&L8BQ-9aYdr=H zJSvNoCB3&@(BhrrKI8mPZ?5ai_us#oa_V4Fv7P+7ZOnc1UhLoL{L6aAnF$WscX|$W ze0Nvnf0z5NZzc1uhx>hmmiGLYU}r1RZeX6+vtyE9n&G9BhdI1$pRWmvo)*3_|eV-S8PC6F=4cljd literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidPolicyMappingTest2EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidPolicyMappingTest2EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..1ed661582c49fe14b9f6848751c0330ac74af35c GIT binary patch literal 918 zcmXqLVxDBs#8kC_nTe4JhzxkyIJMe5+P?ELGIFyr7i3J6jdFcv2#GK3&g@F8=%;ZW1n8mKH z$nH}BIoQaciBSpJi;S!c%uS5^3_x)%rY1&4hVvI^o;(=zH-!DJ<-KsNkWW0~S0{UL z7Ek&gd)ABTyW^wz1_m=fUOr{?w!V0I&dI>bHFFOC`JsPa|I(XHIot{#HXDBPoTad7 z-n8ZO3;O4^KAtKwBkkf*!>7CWPe{#Gy|=}W@7kx;oU&Y&p(aOsG@tx#QTwp1_=>i_ zT0p`I{Wlrk&(577a%0Df(@UqFn7zBuFY;^V+=I?3$7i4UvTsHE`zL)NVdit*vnelB zGkdz|>%R}D5BWUxk<_*`?5s%pwqSYJ)syS^4G%u^TViWf#9F2)p7X2o*W%zm++zI| zEi4U};$)0uJ2qXao76NVrF)u{R6^p8kZfKxyI$`2EKngzuZ0!P6@JnEMhDoGT*Bv&fhT8d|t_M zgVHtL*A(mbZZ+To>E~x;{LjL|%*67+KpezZU=c9jGvHz4N@(+7Oa-Pn14iWN0H!!# zbTBd;JGx-TMfO?e?%1e%$L75I+5J!>F8T3C_3Sg==e^r_=Vu5qEb?S%gMxTcu3 z=L;Wm>@a^_tP;p~E32aQkl(yrRmY4Et@Yk`DUbE`nxsghgYz#uxKdM4J-hV)tMQA5 z+vmgko~xD^oQmu9zF8=^R%^O;NyYN85QTQ>#D_UnVnr-pErUu=7B08o$@8|I`8-{i zA=l}T+xorp<#?A)@6ms~PU-!^s#eQucl*yQc&s|PwXIr{dt1R;%Z9`zL*JdjnNzvN Q@7>(@-O^z}(^b literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidPolicyMappingTest4EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidPolicyMappingTest4EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..a194a040a70a07cede92b377a4890f494bee361d GIT binary patch literal 928 zcmXqLVxD8r#MH8YnTe4JhzxkyIJMe5+P?ELGIFyr7z7z|8*s8QhqAB{11g(@hMT7?qGc%gD;W+{DPw02Jq9YGPz$*ztTp)nAVF{2!-jYRdT^ zHEfuZd~cFcrn9$;Bkz)vlhpTA3GBFfcJBPfhR7!$7exLne(}P2c~)}pi+9%>o?p9R z-zp^6b+^`O;aiWx_ZRy+)!eT2V+-}1I_cP#`pI`0MAY3mXUIPgPhBwIyY8CXD~0O) z(^vZ3y4&<1xpvc)h}w|Pfv4En>b^ZZ+5N*i<=?8^>x=g?J!v{PMR4uU>s{Lxyqd>o z_r}a6<=(>ig@432=Y3${FPF1XxpKO@ZKdLUhb&%3_su-{o`=lt{CHii^!uY?f$j0c z84Gu{1^jY&DxUw@;q{WX^4V-t_3wsd@jX~CF_j_ZOE#}aM#;K>^aVjDKb4+mVrFDu zT%2u?X&?^_U0G!o2?MbP5r$YxJN~DuwBmHXt;^6_YdqU_b}=|j$nvp>v50({7kG*> zde`x7x6W*tl1mx7DewRp`w7Yo&GhsPWA6 zx0bDQd=xsrXZl3hll{VpCp_70inm3U%$jzn_{5K`H;0{I5J_+4C<)%o5Wb`S1&|+%j0~C>m5{y7$jZRn#K_M86z5`UVq|2v^lLW1aqUE}w_WNznJ$<8 zwHQ9iS{+{U!_lzng;qq$6|Vn>SML)F47ThsozHbdx8}S3ES)Jr-&LQ!Dz9nTptoc5 zy^u+cxfkY7DNdN4$vo8}OTt2ARZq{ASKIG@3t`l8Q~tj7wo#&>#FbnD|0{k=?pJc{ zThrmWZDrWD^&S08bLQsDM6A!5_~?1x+ zU8%>tM9N*7V{Xyrif=#6qogOAgeG#_`Mrw$KydbRj_F|={C~K2J#EWOd-wXqI*04G z-_Ka^nCqy%z?)b1^o`j|tQtg4C!ex+GJojeI3Z8FSJkD?Tr_e9y0?{rSDyQ&&F8 ztv@-OXGiVMYq|3H+2-FD9>hOYX1m&N+qh~DvyuE?@h@!8CjGlS`}zW{tA*7ib9!U_ zFIsH>Jn2?oR7aK9$DZ!6lvbN52NE`Jy?V{STxRhGnM-ab_A_6!d?Ef{;6{qWBfB5( z1V5c`d*Us5y8Gh>pKU*;UX;o|_x`-`%5A|ZCl5Z+?_b1l@N0_Tu_u}@LL(Qv0s!hL BeMSHP literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidRFC822nameConstraintsTest24EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidRFC822nameConstraintsTest24EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..28ef8f7491e37dfd0ef06983210027426ba89f50 GIT binary patch literal 993 zcmXqLV!mt8#B_84GZP~d5E<~YacZ@Bw0-AgWaMULFbFo}HsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1Wb`S1&|+%ObnVBm5{y7$jZRn#K_M86z5`UVq|1^dtsfpwpf9n>FM=mO)EO( zV@(`3EYn$R+Qc(y|C`)n0rLuu>ze-4Vv)amS?!6D)yC3g?2M@?N)bGN&F5X1Zaq73 z?*8zbUo9&;bF{RN{9}HTb>MoEfzu?3&0BSj%|HC}a+}}jpYikR7}jgw+Vw%*{BM8H zhZU!eu6!n{=GE=QxhwCTUeAf`$>Fj&Q@%ZjetBY>w4_Aai~lQsR95Z2VBgQ|{&KFK zHP5!mw>i}IzL+lj&i0^zVy1D=Hn6`)8jlc)-AN zgYWh>H_r8k-k6_=5HDm{mZ&WH(p|Yn?9QveYDcg3l_i(970=9BeW-KKyvBTv3xKP2k{kH1Pu5Lc-XiS+B_Ijfho~| z(ZCoaA;_X*pw*}Wi6>WAhup->oZ{4?veY6yV2UeAMoNBq>G@^Iu?S4Oz*uBtF!*t= zx9Qr#r75)%oPJA9tyoM(xlTe#y|-x#w)1hDw6Smg|j0>gQH**_~V{ z^!U6Q{~Nu2;c73|O4TE>iHEvcUZ{KP=bB_C^KVQ)=VrvXeD)>o$i3etU$KnYC^Drr zyh|{Z@8=CJalzD+{kvvNTlDXqxNo_{@#DN9j!eSS4ob}U6f{esUT#CUiQK+tTMAFT z)l2IAboa00Cy%V_K0<3*E0Xi~SujiOOL&2%TWy>8kpufR z{r44xv3c)Xr6qN0;=kVK-NBwuHf@nq`L_SX>uJ9&)+wyY3BG9L_eEK5idFM=yVKux KZGUsrrUU@`j&WN6 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidRFC822nameConstraintsTest26EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidRFC822nameConstraintsTest26EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..0e7f71937a505464f0ac067c9007c259f6f9639f GIT binary patch literal 982 zcmXqLV!mY1#I$PxGZP~d5E<~YacZ@Bw0-AgWaMULFbFo}HsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1Wb`S1&|+%%nX_sm5{y7$jZRn#K_M86z5`UVq|1^d`o85h1s80t^EJvzkv6~ zEBs%-F9~#xyD?*(0`K*5rU#k3cP(9Vv@|X`^hkYI)^f(AnrPV$w(w7{B6dw(r`=L@ z=i*XR|IB4wOYh{wY@By8U+eH?%hw0n-}l#U`grDl?}VQxf5Of)%DEI-}e4Mi^j*_ z`_e+B8M`V{dG40{-*R>~gK2AXz!ia{%{GyCPnRg~UCd?8xus7}dcvD8a;#^QxqDQ6 zyuUYD_kV~lon6WJS?KwPjgt-JfdMV6%pzeR)*v!#m!pF3-|X{%*hr($CMx_@9M^nTh3tfjEe-z#?G4XTZb8mC)wFmOkN^fx8;LAOAOhJu4mWvg@j-WQ4g+*V5>v7J)n3mX#PEvFq7rspKbd@s#TM zXG%Invoas^$_Q~u*@=BS@qWth>u!COr_$E)t0-$W3YOo?`R^8cHrZKX%NC;<%l=92 z;rV*zh35x-mg{Dxu8|JH*d9&aq@!sAz~Y+6i0uPLcaFYCXO^_%?EZ>!4tBXNqH_R`AM+)>eM%bmRpF6XX(xbLOEs!hY1<|bX8hPWj+ zlKvIg2V8!2N1Wx)Vdn|cHD5hfww)jFvY~WRcx0xU%~$vN-tiH?-&_>Ruy8&N0PL-J AO#lD@ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidRevokedCATest2EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidRevokedCATest2EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..80545971141725598750df419c4964478a8f23e0 GIT binary patch literal 909 zcmXqLV(v6(Vk%s~%*4pV#K>sC%f_kI=F#?@mywa1mBGNxklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6f+P3DPR`n4N5J`&rVHIC@xKMb~KO^ z=QT7iFa$yiV*>+&C~;n614AQY7}p?{M0<1%v?2DWc;=NQ=47TQ!0dB&M0S<}$el(8 zO^iy&K4WBMU~XdMX8?+GF*PwVGTi*y7s#1%@0vT)MTfJ7pQ8=rp0&;}Q|y_0Fi7%3 z-RA(sd2Y=AgbIKD3+R3m+sf#;fP2LZ%YNIOxwoEwSd*+QzUG~h+Zvy5uDUfzovsEm zro4C;;mBui&g$16UA8Udn_tFp4u@5~)w7-S?Pl@$FfnT_y0xI^OVgT7=M>d4MG7Tf zgtKf|pw4jMy|w8|F@GziYMp)-#me2&@0nDjN(WEL`B~}kx6NMm;WoujU5hW-*XW4e za}3_wx=7#U&{}CPVU30QJZslY+h=xgo1OnsIqS5zl5`%O%M%Q1nj3d?m&BqM* zK>GO^8UM4eFf*}yFc1gv6<7oe_zZa1xDwht7*l~s%>X^20i%PFq3E|@Is4AO;_s?L zN9&iZ(%17i(ILIlqn&vf+i4y>jr_USFAF-oaDMS4GMgM<3{daX2^p76h#b2kmzf0qNjjtkuwd-HrUI}yMcA2-;X?-sHy+z)7 z&-`C=>kHol>BGOpEK7IKJvvve(SOVCB|9f%ZfH6ETy)Mo(g%bMNy#JLdjp&a<46{qq0- DtJ_%q literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidRevokedEETest3EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidRevokedEETest3EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..455cb0240c4aeaa4776fddc59b4922895df41b03 GIT binary patch literal 903 zcmXqLVs18QV#;2?%*4pV#K>>J%f_kI=F#?@mywa1mBGNlklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6foceDPR_6chApHQE+xNkQ3)MG%zp( zLJMO91A{1WUSk78BV!oXAeKZMbPcp2HmG>!l_ln6rYHoZmgQ%srYN|&B0ER{KQXd0FgG#sGXTZ8n3@i=bpcb;;eSZ!a3~Sj{`Vv-gF^*-o=-j!R8lLK6@5z1Ckh_o}=an{aF` zYf4Fz(PM_Fhf~YKb}k566&7>W`{s^@#-~XyAF{nU=@QcE7(Y+j`1PNbyVh|60$JyH z?!3Ek*GJ%_<9Y6uqi4>VPxEliexMNzob$KA_WhTA&wAb^2T$2^W$FGj#^;xM`!$~3FTa0m z*|pf2cLWad?B2n~kaTao>HYASvu8iO=z7g|O@67MF%vT*1LNXsgG>W?V6e(6vq%_- zHHbtowx~$&(GHs8WxG_MNF?y4~K8_Huax!;Kqf%5N4^th*yJJMC{XTLEi3`?5)f?1opbdHdPLzEk6J&Dv{rYUXjx z1YX8NB1(pl85NN)YiCRmZ+NC6HRX%Gwepc*&O4GiV!q88SC%_f{nxyGRpFHN&3WlA zTMjb@zWB`h)xGx4`o&K7(hJuYMZQ{A_jY$riqSUdkR0ZjhXWZhf|k~tF!K!xFlXQM zIAF5px6RBqH`kx-7pYvxw0+sGmi`aCUHR*J3dBNMJa)<`x<~jqZ`qJL&&eb1b%N}K z)X2;oPqH`MUOlVxl**%*w*s#3IWh6YM87u^j6Pqx;GrpEw#vWfl9c$N312r#bI#Y2 Hzq%a&MBP{F literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitAnyPolicyTest10EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitAnyPolicyTest10EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..2e85ce5c21c86011f2e868184a413e49ec630dc8 GIT binary patch literal 919 zcmXqLVxDZ!#8kb2nTe5!iILTSmyJ`a&7Bg4jugte!mE+w(Csy?;+KKBo|`1+`iGA|Z|d^)-CAA_FTyqUZK273&b@9Bxv zcJX?zVd>mZ*)H03B(AN><-wZOvdb=fm{D+6%JZCu*v!Z`B4u1Hkw5>^p*T6TD z@kNBp8iVC7d%p8GxLtU~f8qWtySm7tIqb?o!7`Z{ zF>O&_svZhQA9uJA=6}t1v(KN%%An(3ld31grwZ%}Zm^bJA+J?c`?f}=j_0)C)Hrvm zJtuF(YO8VoNfLN5hW zjhMxY!SOH4$0Eiea(&g~Hx+%CIkw(ZIpV*v*KMMd#UulMVC>5ZGcx{XVKra|QU-z` z0R+*Z+ zi<W39;MHvtRpte$w&q*N=>_2Gu(FCULu=5%el_{!_p1Lgbe$2uQ9 zmJeEx$GDH3ea|w-9rt)1zT?m;TP`A4A}R8id+MBDOeJ9z`Sxi|Yt^H7#t1!RdAD+5 zVa@!KKij?6JpA9jHF$B!^@(L$wmNvUuPr*4Ra}+On#8tkPKWZ`YV#Q!vk$L&vn@r7 zA;8MhdwE9P_Z2c(KiDQSH*DY99Pb&ycC+o{g};fPeP*4Rd;itCUjcB(+$<$iUFhP{lwAq<~piIx{aLGbyvgF|RTpKPNM} z(omteGzo~D9gPg+#CZ)33=DzL!q~vTAWEFq*uc=p7{)ayBGFbS0|$t$mY#WKi8+}m z3c;y4X}X@p#igk!3g|9TaCJp?xdO;576wg>O30pPWMyD(V&rE4igPhFF)}jTIu<9- z^sBaeO6W`7*?ejY9s+x15+vtXZR^&2cV!>%Le=vQ{HOk(KiWPsMAd5@WVl zZ#5SL)%R89`1W**AK(q=c6;*V|JJTqYUNSyDsId(=59GD_%ZNu=Bw1qvh`vn3{{8N z{!Bf5rYiiQ@6oe|Ufj>Pe%~qe(%k}2)r6g2W}NxCdCxtac^~&_f3-T$BX)JhzkGws z^-o((jlOB-FBaN&{bTvH?j2gDZqv$E>P!?+VL7YLt+CEcQSR%;yeV3;$%35hS)SVL z$uT;ya+iYcL~O8HZ?)j*gS{3Rju#&s-JttsYLnXN8JHiof zckFjrp320`$iTQb+aS|G9vIfL$}AEFVhtjKwFl;OmHqTI{=THqyU(C>s`ZNwa2k>2 zV-aH!ng87A>!h^yt%@4Xrzc9(TVB8M*v^0tq@SOW@jnX-GZV`P191>vfknW8&wz)G zE1}JUF%_5^4bamfFgh3+X1u0<4*3ZKI3#@e9-`vk~{<8GIv2Y&l16A$eD|WU1 z{nqi|uD{;d--YwpqtBHlmC7s%{%Cf+;QZ&4JqxD&v0YmrR{Csm<)kA=#b)i1U!oVp zaPmyJSe$~_Ntcy-(xu{#nm71lZbi|F4gmsxImTxLApQ@zRi{QqlyA30MG z-xGa%!GP7_LvGO5&$B%@OtN_wEFQGRr)-0hRNIzmOSUQ>bLDKkdeOM4^2v#HPiCxP z&inZAqFO||{K``%a>wso`x7t3g_%}gGI?zNq)uI;ZeGXx gJDNYIUw9^cCLrD1!ns6vB(+$<$iUFhP~AWkq<~piE;BD9GbytqAU`KFxzabW zpdd3Z-B2OGP@%Xq$=T6BPMp`!z`zg)EsPBe45Gw&jSUQqjA2}ZauO|eH*kemZ0DI* zmY9>7q7a;#lcwugTwI!(qJYgY3a+lm9#8=J2$m_2e#^aPYwLQ1;iiIp>R=(a_H9;(2+r<-*p3e}6SpehXHa zz#TN%)8xzTYZnrq^2+Vo^en-l@cxX+q91hYqO>!6XWrq|40>g5;#8(7`DU%cH*?jf zoyvEjvJ`SOwlEz1-+Qy9_uTnQ3tgK{KY!XH8B*$>_@T1<_%z2CPityo**=*Z|L0V@ zN_g#=2X4D0m!o7B07H6(5?@8Z@BYno-i2hz{a$oQXyg_()vgMm1RufQT; zz-Pe2#+A_K!I%n6l?Ken(E&`8!02FPm}T?Y{oUy!$}`$l%$j@fXmiJb*fV<+nOzSb zHeY^cno0K>yVxrS4czLZtmf67&zrv{;@7K3=?Df&B6BeCf4*5`IW^iJ)(Z|nMISQQLt_Ai$mZpw5{4rlC=_7_t1h%jEZo$KhV ot#6C2Red^}@h0TW5tp^$S8sB0Ph69f8-9O5U*W8M)0}kL0l&|4761SM literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest11EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest11EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..103e0940fe5c2648487c6b00e493c7c6db0032d9 GIT binary patch literal 952 zcmXqLV%}oV#589CGZP~d6CB(+$<$iUFhP~AWkq<~piE;BD9GbytqAU`KFxzabW zpdd3Z-B2OGP@%Xq$=T6BPMp`!z`zg)EsPBe45Gw&jSUQqjA2}ZauO|eH*kemZ0DI* zmY9>7q7a;#lcwugTwI!(qJYgY3a+lm9#8=J$k5QBiBSnT5Exk*n41{+8GzzkOihf8 z3~$|D_eb{HKaOEJ({}6BZ~5htuXUgHzx^n^NS^EXIo}LbuS)3~8c$7n>dnmAl4>K& zo;~7Y-+pc5ZqCWE)@yyGt|^F1G)ynJu#LCf{k5ELhIRX~SigI-Ib-J(HBQd5b~>{< zUUiR4kN&Lod%Sx(?G(ycc5e!*zhL|D`CV_xWqdzjN&i^|xUM zukzkmAv!}ojdz1EXZs^JzwIvjuU|bhA#HEd%Eskw@_LOk=lzk;;0ns#V`H+m^WHM% zkIAa_F(${W1M4-^RRgrk;`gb4^Wl&@v*h!Qz03TBXYCV5j1^Y6jJDOEc&o{ z3ID$c(RY0pz8q0%o||m+J4MuVrczd)#vUQZ)+yql5h?p4-FC%PO`1L7(Et0=2M=C+ zEnV5XUg}8tmM1*7PrvMH=$fCuyC?6jr%ORh(z$Pb0$Z6{!nU0|$+d5iuHX8$5Cv(j zc}L`~w{)r|*Y8`vSNDtIrMCC0SZ=w-)z6RIEb&>TaD9&5T9Lz#raA2LU9|qcOI~?c zzW;0O#phl&>i%0gWfI3VomY#le|l$e)K*vO+@}!hN3XYBmSlH}|9$@SWsR?G+^?TM nU-q&!KjZ0-3HgSs+>=b3KH0?feO;>YeP>q6ru8Ro?$!nX&B(+$<$iUFhP|H9Aq<~piF*7eCGbytqAU`KFxzabW zpdd3Z-B2OGP@%Xq35c8>4dldm4GjzofzZO(z`!6%oY&aE(8w6ZH7Fy|ZZ`uLh~2iH zd1Z+?nJEgvsX1x7p2fwbsVNHB+@s*?itGmkkf$sRni!RkgMpEifw_s1p8+V&#ni;e z$gu4S>s3ki+42Y2S-Rv7%c!01-6&u1&R5SZK|evXV)62hdsgD!D#~U%c#a#KyU@9R zoo7pl^@q9VFMBzE&iuwbx4l2S>0-~>pE&4cPHr?!V&a#cNMnAD%5_dAvY3`O!W%-M-(~k0czeu`+$+>{-0=z--r^PiNK^ zvU&zDvXj-%ePb?gw(y(!Dz&8rg=&jfy~0yEA+`Mj35_Rl}D0|!Ve1(@SrzaUY*6^JA zEqmcd{y!frbN<&%%!~|-i?aKfziRpAaVElwJqEwXQPEWcb{O=eeB$Jd~4LMUM;)s ze}|?gnyq|&e}>hie^2=jSzL+PyhioKCXwc+{{m`GT-c-K@@0YhR$Hs@kC;AuHF>Ug z_onNG*;*^iB8Bz8_WEy-5c3t65U}5W(O<+_ynlUGk&OA;vPpUVuM!V^iMf&eUOiT% zHz?mlwcvTK|Bf2w6Y-pESvjgK{g&@f|FS$C@q8h(;JJ#vLx!u?l-|lx@!F+3FQevZ zwdz7oV=;m?Tzd nw<%l^^sJf{uwVVu!TV?X`ChcM++aN|zsO>eUhJ&@AI|{*=&)$x literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest9EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedinhibitPolicyMappingTest9EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..1a1da9fe7a00073b510775d7f09abd840bf333c5 GIT binary patch literal 954 zcmXqLV%}!Z#58XKGZP~d5E<~YacZ@Bw0-AgWaMULFo-hbHsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1}` zGV{_66#@(uic6D#$l1|APMp`!z`zg)EsPBe45Gw&jSUQqjA2}ZG7{}}GjM^}ZR?p= zmY9>7q7a;#lcwugTwI!(qJYgk3a+lmeoz2;%F>{TQ3*L17+D#Zn;7{SfZ|+CO^l2T z58s$|1aDE=HbeD5ib04(MYF|%W>MbM?jPnCT6eCGF}5w(vR|peU3)_9ZSReS+^vUK zJ#&BRqUrqWwb9p|hKFr<0)}MK|wyWRt<3!hAdP@~}JuBV|-V;+}ou|L>&V`jn@&Plj z%vkznioew9ogueQ6alKdMlvfknW8 z&wz)GE1}JUF%_6D4bW31Fgh3+Vjup>z7WXBsP{7d+49Ua%iWh2q*Z8!HE!{o%Noo) zd9Q=WXLpVdxdJNc%FY{Ky#BPTV$E~QeV=1yeCc2ItSnUD(&Pe%b*z)@k)vx3A9jD; z{73UnsE^ovmEx)8R~Q2L>})P{9qlRI={vD{+L4yK4__WxsrufFtMlgE+@m2m8!yg| zpY&0TA>h=7`H`HB(+$<$iUFhP{}|6q<~pivLLY}!zVS*IX|zsq$n{n zuf#y1xHQSx(a1nfoY&C6zz_&6j13G7qQrTP4GfKpVO)a}676&`aDv!r?U`4Wn3I{J z5S*Hmrt4W;T$-AqfZ+}WS65_*D}a1rXlBsFsD$i!Mpg#qCPsb+pg0#(6C)$TQ3ll| zjceF4QdX@pS(9==T;%t{PvQroc|E6E-2ClWkX^ORvgQA~jym0|5gdx_H+ER<(0b_h znSb%e$^vu6t$(&8E!lcNBKYz)@%PnjTF1PZjRJLh7V5wLD0}<&ws$INKKI0n!f#d2 z6)x0&YSVYRAj9Fl*q`p0i{UpO9#r03{WD}u-G{d&cfCF9Y^Q$ci7bA!h4oT}>TY?r zNGFauy~W>8dQH^KIMY%{Q|7IeJCEdji^(jTytMe<1IKBPnl3o^EO;sW zv%Vrg$dQSek%4h>wn3(WJTSCnm02VV#2Q47acW8b-tp2dBcbZ}^mCgd0;|jJfzyaA zABz}^$oJ#3`#vra@L~SFsAS{k>d+}KJHHz6f%Nk;GX7^_VP<0aU?2|SE3gO{@EP#1 zaV4~QFs1@iqXBwa1V#rVgWJ?s5$SV;*FDOSN_*^j(=&F(@$N0(V%mB27KU!A=Q#aE z=&EO2!zUlk`9i#QyJ9$=S-xm|T-#DpXd9E0;=tmyPsCc*BqC6^@=8=$|FVtKYG>Jt z?)CCsC@=LYba_U3&%!-*N18te&39eoTm0j;z>F<>RQ(@m9BbGm9OaH#D?`)_n+7lJ@Y4>dNOsmrj+8U`XDeWs_ zk{_KtKJ!ZUnu6d(&ko$M3gbM!yRDsT$DM^AoeSc_4)@!{X{+yI7G1nC@FPdV`IDB0 fS&LYAzpSZL*qd~&Y{t)5uaEy`Yrd0l__rSb4gYk1 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedrequireExplicitPolicyTest7EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedrequireExplicitPolicyTest7EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..d4050e6f4f04742b459745405aa43aaec4be9acf GIT binary patch literal 925 zcmXqLVxDQx#MHQenTe5!iILHOmyJ`a&7$+jq3LKYu5E%zhe6LLBo=Be??0F+P_r1xGg>R+T%D? zt^>CPiZ3}x2dTbZziRij`&J*T?{M#4!F@x%O)-c2C8OAc6#E>-iYqnGOt&|Cy?PRB z@?^y+_m^R7q;6#7C@058^ z>RhPgH7)gf8}a>TA7@OSqew2-WhqYo=w#zIulX_GzCSrPq2Wb>eU@>WTgbtMJlmGt zemvdy`~UI<+baWmSkD>ge3LxRdF0q0iOU-&1W5iWV>aUrmUts@btU7Ty6uOvJ2}!{ z-#laQxLBKsnUR5UagafPfjlt4WtCYZ48$5l6w3ek81z2c94Onr;k!(|Z1W60cW_FP z6(!hK4rC~hpxK)VRp-Hp{txddwCac58kLF=PR$fV4wVT z&ClCQYjzj=KUCjyt16Lqq4UjWQ}_y}6$C7P?Wb8Mnfq%~Zcl7l6l=rjg%|9z=0AV& zkjH=01+G<7-l$HpGYD}_U3lSgz?^x(^Hki^rYIH*Z~okTkk3L-dDD=yVMJX0)yLvdDrg%KH_;5YqS?=+>&lmG7?fB+#UE^wvn)2D0^0qfE M^XylgIk0>R0F6CoApigX literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedrequireExplicitPolicyTest8EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidSelfIssuedrequireExplicitPolicyTest8EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..77b6a3c1472506bd34f9922e5a5bd84720dd3705 GIT binary patch literal 925 zcmXqLVxDQx#MHQenTe5!iILfWmyJ`a&7l5?D=P68$kMLT2uVm&!rL7Es9sGy9p6euTd4DV0 z+4iOxFNc`3>i)jNVGY-gY;EAKedHthD1Iv2%I*`>7w-KWFJE(mC+V=cgTR&FRe7gd zcKdm*S;)l9$iTQb$RNN#9vI-V$}AEFVhtjmT|E^GYBjXSaoL+IHkz) zv52vVoY0$^u;sxc_Jl=0%}&Wy>72>izuJHgq@SOW@jnX-GZV`Pc<+tdD>6@_42;M^zvDD57b*_;Iyxz-r~`tGXOM@&9_r$(U04xyCx@Sdzx| zvs=I4*8H%;;X>2a2`_b*EO$OMHTK}@!*Zzwf)^P**Zfu4_r%rl=DQdB(l5>W$Fc9P zOrzCe`LNv!j^28AK|8S~K{spOxg`uY3%AYL#`Nn?{9+@^}T>j`hO8t4$@UjqNAf#ebzNT6KCBd&TR__=P^J&RtHA-xdC9>UYMK z2{&!7XP^DRv&8Q|kM)YlR&DcJzg*&x*WWGD$h=~y^MP<{3;A~nZh_Cem=s>b{&#B) N)+zgR<#VA%69A=7Yk&X% literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidSeparateCertificateandCRLKeysTest20EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidSeparateCertificateandCRLKeysTest20EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..2cbab480b15658e146597a5ba91db56583ea2942 GIT binary patch literal 960 zcmXqLV%}rW#I$4qGZP~d5E<~YacZ@Bw0-AgWaMULFo-kcHsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1drL-5ghK1Mggt`{Aq$w8IQ^S%dN+{A3U$4umBDbohME&h5(_15iPZ?@F7GGXem zScj|YSoi&DY7a0yx3Bf|4{fPaP67K9^`GqjFR_~YT7LKj&6M9y+Y4tg{=Tp*{MP$O zPEl*)88_-DOh4VUbz$_)%}3bhue@!)p-_zN=TCq49hPA+mwTQsn!U399)H)8FHgTH z3tnY9+U9k#Q;ADO%YJ|KC5yt{>8uHdcyzqa_oyB)-K?Z&=N(ska?!^1-{W&PyjkAy z?|Q32l6>sv3ua=1o9(@VPgZ=W->jG5x&FVLD!b~XV|?ig+a0WKERk|%VrFDuT%2u? zX&?^_aam;+2?MbPkq@c2?4`t`?p@vHG1FRHMBuuQ$P#dxk>z6%V-ZnXX@1e>TGc~u z4GR->r?exLS86U9@PYL6Gcx{XVPR%s`CuRp;w!KS81NbJuyG}{c`&8|Q>OtVa&!RG zCNMe}8Pa5*F1K;?T>tp^Q?A11PaFDz?p%M({hu{?#hDo!_HIlUTiRuKGqda3JNtjNWKluTgjFv%8!g;|6}-`YW7SF;+>pSi7bkov3`;_Rfm8 zC+v85I=?Jvy6Gh@Ef}i%d)C{1O2zKotHSgJgBz}-XnV&BS^2qco5MRtCDOI!^VPNL T=fs4V-f>RkyXP=(>FiAaT;XQ> literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidSeparateCertificateandCRLKeysTest21EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidSeparateCertificateandCRLKeysTest21EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..e703d679051ee41644b792eb30c0422831b403e8 GIT binary patch literal 960 zcmXqLV%}rW#I$4qGZP~d6CB(+$<$iUFhP|rXIq<~piH8`~(u?Q%EtVkg-FGayQ z$Vb6DwX#^j+0n>APMp`!z`zg)EsPBe45Gw&jSUQqjA2}Z3KH%2FmQv|Z||8`mY9>7 zqCnUkuC6F<1o_O!(4dJ?2{|wrSs9p{82K51;#^EkjEoFBs!o}SUd?;3SXxRh($iy# z$?99hOmmO*Z#Lr(TEkwvtbX>(zdq|)8a4=Rjlz#T0y%xI{%xJA_@%q8 zz(Re!rR|XoSrRURm$&5mv@hGfr=m{z+;(7Zua?>L+Wh&Rm!_3D-6m>p z)4#l&{6(YT(GlH;Cp`nRygWbJ-nuMkzFF8wWrhRan%nayH!ybwMr$9a){0r#op4`$ z{T$8{YBTNMs=d0$H?!$Pa;W#6>2sQID>$4oihq*+PxI&LldBV~OvHqjGchwVFfPtE z$TW}#hPbRUi-dt#gNVgqu||tN2|w3*_HTlV9yz4XE_nb>GqQXvVk{yOF*WA`R9MB= zFD-wm9m+a)ujI~J13r*`en!UsEG*1SEFTQSL3{-k0Ruh*9yYFoHV?*BVCpnLPn*E# zU}Ol^J^x59YuY@%ysb-*e3I}FFI(CoBj^A8&$eE_mJRi{-sp(xb_8a}WJRCd_$lDk zo4|7qb|iJqnlACbrXXbftYEL=r{|x%5Po-}c-6_PPT2>a)xElB{+mO8sjGkgOewAk z$@Ep5WwzH%QkyD!w#^~l>Cdwa)?+4&-WU0zPjKEzb$94iEz(!XOIz==a;5&~*{;?X z3a&Ov>fUVqztipft=QG6j%DkrLc$OrBM@06B;*sO8=hw zZFhA=cB}%(^~RTp`&YBis`Kql&st!*W5cQE**|?xW*(es$yvfLd54LAVy(iYb8Z>R+<6n~ zgSj8E@)uRuJb8ER(E-2bK4B-CjXl)PlvF)7x0Mu`aBKP{zH`MgA!{dIzmvLp%W;wU z_1@Qm=Z9>0zx)OFRLkj-b=}&cDIY!mE)>>Td%2liH1Pi(BjHOq%dR;rJj&mjuxrH| z-jat?UaPH>>lgHY6IFF%;;KD{-Ch-IL~cAO44d=xZ)}yMgHryRjWRtl>nFUhDAU?; z-u0%8*E3_Dm_IjXgh{Sq>@QxO*qN-TFmtZG=4QuN%nMv|L?7;b&>F_f#LURRxVUkl zLE}6Fd0;5ZDziu!h&71((pc*#c26rq`~<&@vb`GfJth$*aLSP7V-aH!S>*I!s-)4| zr*GGDGL)sRzocG-Xrq@SOW@jnX-GZV`P191>vfknW8&wz)GE1}JUF%_5w4HylK zK@x&2ItE&88W|-e1y=g{z~ohujFi^&((}voGa=Efmr;_NgB**%WDAT%Muv!AucN*) zFVuQ<+31&Zz)pVs#w(9m+Zpcto3MYvw{N>VES4SE^49$EbL zyy*9lyhnF-=RaF)Qj_x0`qiX+;lA(Rm#Q+&{=W3jncY5f7jYll!oUAd@0_&%o;>#| z^_k7g1wRYTHjxlc=G9stKI4ep;#I0`u6O-B_jKRgF4uRau_14r#I<=!-O9>B!ZQQs zmWE#~f3x}Ndrq;VyQ;I7ZTn^Bv}^h`)eWarDkd6jmzUA15-`BJn K)^49G+W`PX*mcza literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidURInameConstraintsTest37EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidURInameConstraintsTest37EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..e64db473af5f954231c13a9fbd8d72bf11a7ce2f GIT binary patch literal 987 zcmXqLV!m$B#I%0_GZP~d5E<~YacZ@Bw0-AgWaMULFbFW@HsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1 zZFhA=cB}%(^~UA~O^iy&9%f`^U~XdMX8?+GF*PwVGMwEwch}`@Y})C&-!~ae{I%ns zdk8J#Ib+D`M)73(j&DwX4?qPfN{nnY7#;rL^ zS$eY9E5BNP{w>#xAN!wiEi=w#Eqkl{>*1X%f>A4*E`R%U!f4&@XIT^8Fs6SEi+3^F zc#HkFt?8v5(FvXzOMk%4h> z<3fYRc?R;pP?l9@kuVTz5b=H8S$O{g3*)9=WmXXzcO~5IxqKL$GGzH!#8^bO%nvZD zxe*dw`JqpwZ0<_cPfK`B*k;?#DYS4q-8Zo%RpJf-U3bY7=< zOb2U(m?g|@H!Pc;*Sz9Q^uR`)3_>H!K)^|Tc*axzwVH3V}E9-alv)Z3Rf8p J7xAk{Y5~)zfZ6~6 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidUnknownCRLEntryExtensionTest8EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidUnknownCRLEntryExtensionTest8EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..8630e99cb240db1beee14ca11d97b9de02f75624 GIT binary patch literal 946 zcmXqLVqRy^#58RIGZP~d6CB(+$<$iUFhP~AWkq<~piE;KJYFTXrb!8yoB!8Na> zs8YeTq9ir1I5Qt8=4c=%&TD93UO?0rU72IeM4eg>d87gG}>Bg3aDDhz@bdN@qnZW;aT z{<-ZS-x={h1-96_j(KZ-&fXYRJL8#~p5uY4&kN0dFXs%}WBM>@Zp?2Jw~lOS#?lRZ zE06G1+kXGJXP(8P%gi+zo+ih&-HcE8_CMdPE1fU6<=+b42H*ehj?50NmbLvicjo$C z_ZG(gSlrrden30xKacdq?ib6l&1(+zd}b<(QE*qhv`}n|b@{DpmrEm@ehbdoD7E3i z3)9|o@;odTD?B&0n_r4+ z_lg~znW?86`sD>AD%bMGnTAOm_MfW1?~rL)9JfNe6j$;7Hy~W@KPo zoNbV4AP)>`S!EUp1F;4XhGmkc7wYU&r2O;C`8%CQSH9m~EZiL2pU@C;Hm+~yy4NT87&C(dUYszy zHa%iXVBx~>hb8~|{-^wXlRoX^uiBzd-B}DLsyOR4xx_h=ZFjABB=)Lm_ea%f6-{Yp zN(2^#Z?bXtpq1+_cBDybqv$QW?e9(-KjkqJ*E&^f*p+zhtYdfk!QYV@{fiHN`LWoE zS770%_T@vb#0&gIcEOe8Ee*frP?bLyYQ5} TcC$|U*1rAtE#d2_iNZMmqaI~X literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidUnknownCRLExtensionTest10EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidUnknownCRLExtensionTest10EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..42fda8fc122d290ed37e5a8e26a3dca7bddd31a5 GIT binary patch literal 935 zcmXqLVqR>}#MHfjnTe4JhzxkyIJMe5+P?ELGIFyr7z7$}8*s8QhqABU%)%0(dD(gS<#`IuK|Ttu6(y;8 z#hLj)o}+=BIIp3BfguoD7#kQEM2Yhn8yFfH!?*@HBwA@>UqGB7tW@-qO%xtN+585!2(|CPEGyD~uGaBlPO9XziL!u4i8 zPLg}C%KEr4MuX+Smvown$IsFko6I0o&`y$s<@<+SVtfzw2Z*D)i0S;Hhu2G0w5`PTksdORnO6 zLqNnc#?( zRc4Ve5NitsrNhgE_YSko4Ay~JqMd_WECwac-21Ty7Sfl4el(< zek`^0TD;r&V|wecmH*yfPyOe*M6kJF(!nXER?p8m3xp(C%D3j18rW)!GTn`xEUb6? z8vo|{kL_Cd?NzL<3nD);-IF=@V?(N>@}tFX+n$Hs-ekp@6We=j#MHHbnTe5!iILHOmyJ`a&7GZoFdOV4P_z zF;8;EJEy!Sd!|$*+b_&Get6N&n2;}8H#U@S30d{HM07J(V^iv~2PNJbtgD=Nhu%Nb z<*UW}!?;$t+MT=!^IbSkDvRl*cv;_ag|7{ln9sQRPo|)KFg~I z*M5#UzF_*2LsNtTR^F2jJ1TVaT5?#~LA7@u1B0a5W#@fnZ~GCbp8bC1)Bh5AqG|a8 z@=JBU9GbxHrRUt*WGbKT`AW^Jb3*y%s3rcM#bVW)!%gN$xmC1HUp>Fay!)!rPL};k z@-v^F6uM$?Q-8zxHt$BeANdwLZ^mSD=6he$bpNq=mu^(|kF9-P97)!nD|PK&*xK#e z(aOYFmVRZ5!6m!=`!ADicC0&6^ZMf^FQ@l+=dI8=f7RiEexs~3-)h6ukYg=KUDf~q literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidUnknownCriticalCertificateExtensionTest2EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidUnknownCriticalCertificateExtensionTest2EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..9200cccb39a7cbfafb3eb1d101cc859ed36263b4 GIT binary patch literal 954 zcmXqLV%}!Z#58XKGZP~d6JxvqFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`PjgHjT$aW!y;SYzXvSC*KQnW7Mymz|eio~Phklvx6F zP!6)&6kIDxQuB&4^Yav3UBMCxAmYLNot*vfJZ1b$@w#=L?*j(uwZ+K*u>ptuLZ%H1X6TKf_cTE&J?>yB(uJ4od zf_XFJ+?2%St(VR*xWe{(+g#ziEt~zD%dG2HBy~%6i0eW=aoyZ$;brUi^8~<441Wi~^_MN8Xp*bl$N3|BHXV zhn8&7R}=Qn6Ylf7<~O^#{>T2nGp`@{Z)?eYD7jhjyKK$I={jD=lAf~X`1bdui1oj0UTk<|CnU(NH zY<6X0W@KPo+}L1HXCMy@Z&_s)2?MbPktenB7h|TjapZ4|HMm^4bWj34t-!b0o zFObmts;TT%_^)49nyN-mX01Pbda<7V4bMq)6&Wi&^gP%PcR~_uZR! zs_$KgmPyd6!>3wHQ^K}f)=YWep;1-kQ+M>X!%>B^`p+)&`8_H=aI>d~UFhGE3Gxq% v|Jv9JE>5%&SZUgQ)^CUR9If56Vq|u|Z*Y;?9{E1y@?zJMUh^;eH+=;F6$Ea# literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidWrongCRLTest6EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidWrongCRLTest6EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..148f9fb23aba366169f5d012191e13b030930b1c GIT binary patch literal 910 zcmXqLV(v0%Vk%m|%*4pV#K>sC%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`|deOIL6X@={YL zH8e0V1VRgA0|SF7ab9BsLnC7t*C3umYxE6tA=apQ=9MMpWTq$}taEimc9#Okp=Jh6 zj7rE}V`ODuZerwT0E%-lH8C3iJTb0w8bTm9B9{dal$>##bhdqQt{v-*VUzet#6 zcz$?icw1RaMtQ=s+w*PCIi&d+PG7BiM?d?zx%kYd&l7)l+_Zb>e#>)3vc>m192YJ* z{(oDgB>OY++@*vbqm|4@Eb2-ad8e$A?nys)or#%|fpKxRL8gH`FkoesStJa^8bo+h z-5zvS1+sgsH(h^r!jU4r?JL;8DL|HwMT|wHxiM|C$0ohnHOBipzTLF`#8a?mp#dLA zKR+Yme-;*ICYBEd;vl{Pi+};20S_BjLYoI;Dln}XprK7Esy%vc-^F)&Ou;)R?iC41r zoRRKr-M#n3twUixZb$NX-)$^Dsa0^o)9byefx~ybz#nF{nUd-0pPSTeEerK(-IKXW znkwd9ZrPjaRVlvqQqR{wb&lkSm@8Iu(~l|ix|APWaz#MHHbnTe5!iILHOmyJ`a&76^m3?T*{yR=n4L||hDx54 zNa;HAUue3JwjN*8JD#+pS--AkM)j_4`MfbVD_Cv{v%vBy&mbMv53h{wFN*qKFW;=1 zC|Li+nZK{#_<`o;d7niSb(i0dh?iuW@#w#urP+#J^>3a(x;E4v(ENS+VZqs55~4q* zyIXUJ-tSddbmR7wvV)KJr{0^^aFO@=&ANudDd{N{5AGDKR6T0s@;+y2I1@7?1LNXs zgG>W?V7$sIvq%_-HHZ}4chP5_DI;Di@yX0a#N-0!#ZPa+DMOZzMT|wHW=HjmH*88B zr}`%b+&XeduclEV$bb)|pP!NOKMM;p6Uzq!aS&gDMZkd1fQOAMq0NIa6_^GM&{H5V zIv5#}b_85_vG!u{?%QD*Rd4?86`7hp%jIP9lDN}3756k)1R4(B?|xnN*|c%8N6%58 z6V(-;x4!lXjd+yqWp;>9khx^zj?ZcwS2syMk$YD1tZn5lyGgSD7N*`dKG5<@MDN14 zOE>SAU$-jO;#iWk+wQrSdGqOep$mR~&57Us$*oF>Lp$(k`Mvi&SJF4>u6WNiFEQkT z?33U}o;sq&_miEs@v*n@MjtxReExdCTW?7PHZS!fQca#tTJxCZ@_enGW9y%DF)4Fv zf`Y6=#FmHFJ_j1#N%kpTI=jqj>KvwXOLuD~J?J~Gwx{6k&E968mhvP18jqX8HkNfV Ryvs{4_;c7}f^%9_GXQK~WM}{Y literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidcAFalseTest3EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidcAFalseTest3EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..f791140cedab3a687f15ad38f9a2a3f8d71e8c90 GIT binary patch literal 938 zcmXqLVqRv@#MHNdnTe5!iILHOmyJ`a&7OBoQtW6k&)rCR=uU^ z)m?%jVlPd2b5}RcRNZN6+!wv^XT+Zd$BXy50&iq&%@DH6wR)2DeS>U?_@qeX-`rtS z-^p*O^5t_c^a&m4U^Y1R*)&|_(33SOySzFpf__pHK~L-~bx@z&hb z|7(BLw{OheHM48aAw{jZCGxc#cfWqj2xvI9aaQ;8mF`ahY|E-cdG1=Avsu;g_8Ff_ z`}2CXJ}ztyy*O*$d05{!PknP%U(S%ayRN~_f9>Hb?bHpWHGN7 z@KbocbMX0nx`7Itf|$i&)J z^4AX?WMXDyU|gJSkZB+f3|CoY76}8f1`*2(v$y+en(w>3p{wjw*1WUt-S$O*Q->@c zix`VY|BvX5za5&nC--}C_RapZw)Butxd9(YKR+Yme-;*ICYBEd;vl{Pi+};20S_Bj zLYoI;Dli=ypr=A$bTBgHZgb?eRLgANw&<|S2PKvN9eualPANCZZ&EywbnV5VC7+Kg z%ioDJ_SvDsGaf1=|Ln0I4_zIxo?;=|gf`>#CbD2z`% dU%XG+Yu1YPB(+$<$iUFhP{KeAq<~qNKQk{SvnVyW#5u@E!P(Ks zKu(<3(7?bD2rY~a3=E>gd5sMWjf`Pjg9H+7GBD7C*re{6SC*KQnWB&! z;OdI(GzE}bjm!<27?qH{$H>aS+{DPw02Jq9YGPz$*nN^QMD?icT($DHZc?4@-6OvbEAY5KHMch}Sy6Xg$X+}> zy5Pv8D_fbnH_c?9Hn%rUqVnPSX;x;ZW^nG@KV4v^!xq1PUe9Om$@ZzMcF3zRzG!D? ztSO`(e|>Ka_oO|iKd+bEoqv6zY~^>m$?JobMI`x5H~-#zBUrjbr{Dcdx!<&-ZzEU? z+RW0oJBsgG`A>bZ>#lqc|lTUxGykLlS=Re7d=H z{m%5DD|O$e{EUqMSy-5vSUwntgZK(80tS2rJZxMEZ61uNz!Yb|Xb=dJ zkZ18S@Gx*&g@Ip;|y@rOi$ouPa-& zrmdWRv2**o%XjZ`XO^sW{;~6I>mHl07aaTc`}ppW)ZCf9X@T}E>7{kO-RzHN=q_#! z&NDuJV&8IB6}88#Q@9eI+oo*r-6tn5wcqaMG>c1XS#Ab*NWR;(Qz?A<;T1cwTe4i9 z$R0?&RKm<n ztxYc*s=Dx7yM|XrtV(@0XPv~%9OfVUB&>@(u9U6*`Cx0@-f1rOC&C1|8|Hk*3_J|E4LI4DLs{5_nL>jNSW?}x!yp+tM)Z`N9ARh&1M>7LC zab80M14AIRFg7qSh!W>DHZU|YhH(uNNVLhoKo4S*x@TTlVoqj?LUNFgXK`_9YLSAg zE3(rRKyC$E)WoQS>^(+S2IeM4eg>d87gG}>Bg6B^sVzyWZhXt9&Jc}F4$)lUq%9e> zTkpJ^N49a;vC#X$avM30WqXG0*rgNj@s9q!rP9vpkKZx6UM5xRzU=k&z=AL3(!$%B z5|yg{-0r{T#d7h1`=XBOPj$I1pEp~~)VW}OHQ|p&%(?CCZ@wDb-*Cx#Qpq*;rzg!E zAN0KlH8~b(7F4OWGb2OkgIPde;g>B6`#Y~+On)ZF|K#brxt{*#u8AujwSV39Iem|? zx0Xqw-bTLsc}Ms69lEsJY|g89j!Ju<_2jWiuw|+=mu>m$YZ%l}Vs7)4dD+UH`=kz@ z5&pn-N-VXRJ+tS(T!|{1kXVDj`Nvzc-n_bgyk7nJ5|gdRZY3>bVrFDuT-?Oy4h#`z z19@QR$||z}BeX$8{-i=L_u?Gga)04_PG7jU-P0;F1g8X9J{B<+k%_C`vX=5s@|`RY zwt4#PA`7;aiq8!AK>GO^8UM4eFf*}yFc1gv6<7oe_zZa1xDwht7*m01&VbRN@j6IG zo~7};LE{;N#*+&w7nCn4H7F)AJwQ_)H+sr5HPkdv2igEklM1jjsQ^lpY57HP0cav! z(!+$4`_F>+!9<|SZaV`SJAdy-c)>U!|BZOVtGzHa(vB=SyU-O7!dE&pASc$l|l z+c%Sgk={Q!|NlEwk}P&)_k-8nNA;WHTqN|h zzeUqA^3=*ZFIFVgt^B$qTlKMN?vtZS@7%BcdUNi{3eJbmydw8+SjPI+m2Vb9*t>5B z(r%}Byf8f%5bibEpI2FC|1vD%f_kI=F#?@mywa1mBGNnklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWlrRtjDPR`n&&*57EJ{r-aSrlPaCS5^ zkQ3)MG%zp(LJMO91A{1WUSk78BV!oXAb~`i3=H%jHmQ5&l_ln6rYIx_`FIu=m!=je zxVj=cO#$RqV!#>lhCuM8RS3Vxdb9?T!m<8KqUwksn zdQ+h|{VCTxnFp&^axP@LTr}JChSMEEzdwslq}1=K|8M2)_l~RK_nsXu-DO`?EbD5! zQN1j-C^@u3^=`|Rs^?cYx@zv+75Ta6<~5q(s{7iY8t2mZ2+c81z4I?042(_{35sj zG?6ayS>i=*lE<_dIk5rr5-_nbGStmDx$sbGO`UCOajkNIie{$cX0gVbN2}MFU*x)Y zw)9n*sdW22zB!9HH~klQ&~f(W4H>RLwZG0rc8Qj(&53J$bbaP#O}cz|O? zPu-mLqR%t!_gVaU)ACH>SoQa+WWC)nP32d;lke}|TeiS-_uO>zmpP|fc|We_3w_nc z)xO(t#?z3U-$SGReh$-*{`)!4f1+@JKW_`{T#ag#Vk%&}O5IBE0n iw206Il`Cd}lirx5G`(S6X3Q3}pZSsA1k0NYbJPIaAd)Kp literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidcRLIssuerTest34EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidcRLIssuerTest34EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..8b9041f5ba49f59d530a7507b5eef3d75679160f GIT binary patch literal 1044 zcmXqLVi7QCV*0UwnTe5!iILlYmyJ`a&7 zAScdiXkcIngcimI1_n{$yv7EGM#eC%K>~?385rn+Y+@Ex_slCx%*jkqNDlJxEG{lh zEmClGMRuA3$gRdE22G4g$lhaQWngY%_SuD3ob~!@kv`XBrC+#y&)jrHi9o*SatLed59!<YMXaB`~VxCy*(L3k1IZVB?A?XmaMV!dmjphqcDCrb0u7wEQ9k^kj*e-hl~%ks&u^ zPI&R0vh3@}ZwqWvw-?M$u-`KyYAc`T^^(^oKCBZx7@v80twCW!%A_C6ZpV*n^ytrd zm~nmj{M}D(rvw}~y7ez)jf#A%Tg$||^7S!F`|90p<%(^7awb`dZ+e!0_st0st7O`F zAKKZ+9$&pqASK%PGxx&ya<7-)YnC`KxFhW?6Y;>R>PC9i-g|oYU%rUHcT#?W121>f ziOv{3Uv{5eH?KOI7ks+3;oB7UD5jhByZ)TH^)qp5nd{-F+Q*hMerIF2v}mHmuIcZC zmORo7u&J-yyjbuhFLSoTRpkp@zow{Xp8qd7%f_kI=F#?@mywa1mBGNnklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWlrRtjDc~07&&*57EJ{r-aSrlPaCS5` zkQ3)MG%zp(LJMO91A{1WUSk78BV!oXAb~`i3=H%@HZcpUd*+oT=47TQBnSC;78jSM z7Ad&8B0Eh1e|UjE;{Ixc^nO@x$>amuz&Z%*rdxuN-?M12c8r}+Pg9_bNN|D`#x zwXK)F>MUui=sPPv^YHEno9o)y*?Wzge~U}LU^#c~(iR4RV^P{1UQYj|gmYi2t2&qd zt2Gc`W#DP8mcF>YG2n;CCh?1`C6UL9OC8)6-#F%X(b;fEW>Mk7>)&5TGchwVFfMLl zvv51&hF3FmC zxN&OlZ(+q&*_C43WOjcy-~;LBXJq`(!otkN^1(nH#8+SuFyJ%bVdF|@^I%K`ra1#f zgU0h98F`k*;|7gK3>ptEC|r=gB-bFD#PonOAF$l(3-$m1mi(~LRAd|xRf2Hg$qSr>Hp>`9|+shslk8(+@I z{OEAXFqvQWdCnd7^f^6h-#Fl*t&hMSYmKL$8=0-RSJ*LaS;%{` z|KIHA6Q5e@GknoH_)BzdySt zcJG$|-e+79V5=9uc;B3aDQ`E`9`J~GD?4}QX}@l_hc*d(_U$LC^}c_5ar}6tQqnZ> zq}-id+^aUv_z|Qr<@&>g1?_s8|Ml`spG-R)8z*GlqA g!ZqP`=QsBrG4&Ru;!E5N>0!ERTXrl^yc@O*03G6%HUIzs literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvaliddeltaCRLIndicatorNoBaseTest1EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvaliddeltaCRLIndicatorNoBaseTest1EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..10da321247087ff41d7254d275ab8a9182513d62 GIT binary patch literal 942 zcmXqLVqRs?#58FEGZP~d6CB(+$<$iUFhP}M*gq<~piCM7keB+)s@$1^Vlq#(aY z!7pFIDX}7 zqJZ0aS65_rD}X#=Xwbx{gzR-jRtDxKMt%mMI2ThBBO}A?cHRjqUOX!HJhS+f-DUUC zKkBQBW<6qmCS6{4SFQP_$+zVfe*}n)=0Odi=46D`tHE_59(vj+BL`_RfC0 zT6A9IP206UCD)r*_Fh+PF8$kg_S%o{8y21YSjMaKM6a7!RI_x_^uV7lf9()g`M;A# zD0;cihe;b5kcCD*P5dTWN}Z;d<5{K8F)raY~VsO@t==uluu9!}K{5Gb01z z;%tLV19@OT%PO--7>G59e6c7~UA^S7%z+c7J-x!&$;#Wh8o?<Il%&GRP)d?5Y&jEw(TSeThuJ{X9D_zEln27CrQY+MO#9*n8Lv}k~y z5`odd$l&?+X}-1kd)vIpirbt%*UkAV-u0sJn$$_zJ9VzJgfcBsoKG!U9ieBD#vh#F zu5RcSyC>!M1>?(_3$Jc{pJ;8u9u<0?cV?!-7p3aVJpGRSucRf`cd`|%eVp^he(f8t zi}GBr&PobDSZO~sV6NE3Gdi(Os>@GD?zdr>_1z+6O8*C;?$fR7n@Zj=n+Q8Q8<>`z z`J=SN;Y3T4%-pblbzj#x?Y=FrvTbLH;2}vj|5-{7XV<)2EKp|56W!M3`9?>rcHW+l z+&iT&pHI$OxaWYUQp*4Pp9BS0$O*5wW2f$3HoHl*tpDK8X~#VpQaJdegzwJ$@!6tD T?NnC9=_bY*>zvPQlH>#c>UnDx literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvaliddeltaCRLTest10EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvaliddeltaCRLTest10EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..d60812c6a416207a0793a59133ab1231d17142a6 GIT binary patch literal 1094 zcmXqLVsSEPV%A!~%*4pV#K>sC%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`nNlDEqNpueKQE+xNHjoqN zH8e0V1VRgA0|SF7ab9BsLnC7t*C3umYxE6tA=apQ=9MMpWTq&mRR+{DPw02Jq9YGPz$*u(6gCtGo=(s{n9G;0h`>Oc06hErZYS7$HTKY3mF zg3?JGEmATw_k<}QuH5Z(vp4l~^oF(vbMX%}RZ*EUzBu+N^N&++sPm`5munC3`~u{XX-} z_4C$~x1tvCbuH`g`M6E~;P=M9)ne-nmq&%#&pFS;%*epFxQS5_7$UL;^1#5ARc4Ve z5Ni;5pL}_R-^QQ!6Cd#&W?ei(;?m@q&%vocmXAe@MMUUs=l* z{*>JYd?5Y&jEw(TSeThuJ{X9D_zEln27CrQY+MO#9*n8L^k%?l5CM{qX9+a$H}GBH zy})ycJGD|A*knCgn2ef3fXRrFVU_#z&0jgQPV1zy+An^`Y^S*Xnu)c-)EkrDZrZk9 z{8dE-*Rz;!4dG_RuYX2l*_d@d`%xKUIJ;`@=A|o+F>z=rZj$-P7@TSR|L(yF#ed%H zF_=83UwZ4^_;}rmm#P^#qU~fFxLl=|b4#wdt81bvecEMLN2vmbfq(F1v9c#qR&nK~ zXi9ynn0kKs)U9SWp6{>9R(yDWeNRNrixLsW6H~OzUT*)JlUR4{@#W@(LqXpRKg#eG znr~*B=;Eh$^!+ixYqNq5n>baS#c=RT9WPiN5bf5gO51W3TShm6b kbkBT6rCx_iC)jcyTP#+4RkKszj?<-ShPCeJ*X+Fp0H5-RHvj+t literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvaliddeltaCRLTest3EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvaliddeltaCRLTest3EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..6b3c374331d8ded6af9043666fcc7dbbe6c88d87 GIT binary patch literal 1093 zcmXqLVsSKRV%A*1%*4n9L*3|tMl4LI4DLs{5_nL>jNFo+W8H8wCbGKO&t;z+bc&p-!ajjCr}Sz=CRiUQm^S65_bDS+H*Y|zB0 zgzPg$RtDxKMt%mMI2ThBBO}9>Z35qR6is*1ta7YRYPH=GJ}^b?}@Y$_bz5BL{zd3Yvr>V{}%}Z+8Z2h?@_gH>!wn#mj?DUFhdPJ>zozvRI z^-sbgjtK}0q&C*@-}3Wsx;b^#p*cC1CUdX4VjuL=@Wh#$6O*3Fhshm$VDaqShNKx9 z9aH1qy%c0oDYC3*kZY9?kz2FArrjEcYzku{J9hOMkJi-dt# zgGjlA^3$@G6CzXWn=UlID%tp8iM}y75y;!hpAvVkReQse~q4DVp&NpUC zE&6g);YbMEn#(m`jgmM{OkPzgDl=zW-`c98jUA56mnW6iwTH^J^-Q?EtKqcZN$qk^ z?S1Pr6GYxW<_u03V-~Bd6!$<;R^sLc1`aj*`~xBum(+F_I5NaO)~Nc$_3UNWL)MxHBD|ksw~PP2 zrgt|m_<&2i#NtbmrJ{Q+ORx8Zu8C(_!+B%fc8y!H&G%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`nNlDEqNpueKQE+xNG>{YL zH8e0V1VRgA0|SF7ab9BsLnC7t*C38WYxE3sAl9gQ=9MMpWTq&fmV?;~Os(b9Li@QF?yC67Y$_>3>gTG!if0SrI7l=vWCq$;$H(h9aRkHEH5`ANEB9P@{5n~ZKakSOA>(}9keQc_tRsIRH%pS~P zG~fg2=VxU6&%(mY#PY#F9K=^(5isC0;9=uRX!Br91tvEGMuP~Dggi^2fxm(80`CQ$ zOWdiI;J_y9(ZXcZ3<69>j0_QNWpiW`bN;Aj?lHG9i%q&vy@12&+v6XsuT8UpO``Tc zI}kpt{>WAFkL$wj?-cy&p`DSCFE?X3!=cyvwsAFH;m}py^mgjDlopScCtF3%8C-gK zZeCWtgxQs9+tukFss)j!qKmaw)INX7;x=1q-h9Jb@Av(8iadE}^WJIM7xOCLJ?ixQ zrM>IdjhIf`AHN++;*YQJa8f=hw)0bt!S%Mj+6u4A>!&^Dz6`#p3!d8oZ?9gqds@hcl-GT0x!)@MG$?bLC!+h}n9!8q&2Q#!EqJ-r<+34@e7oW2 h72kW@!_TrG_yE%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`nNlDEqNpueKQE+xNG>{YL zH8e0V1VRgA0|SF7ab9BsLnC7t*C38WYxE3sAl9gQ=9MMpWTq&3xZBb}JTG{o2Wpw|Du}H}Y%ji2TpAjA>shGcK@gj{tmUHV$-o;jDzvu8PUwg_x;=z_Lcg~AgElFa1 zc+ROW(KzdH&c*E-dot2oKYe+Bd};g9Z1&muH;Wl6RCyzr|4V8aSzi9*{?PfH`@XFY z17?Uds5$lP1wLg7@llA9e3`iWl|YTO*^0WrnM}-#42+AL7!`pbB5NQI3|m=c76}8f z29a_J<)>vWCq$;$H(h9aRkHEH5`ANEB9P@{5n~bAG)eR8j@LrZIXN#Mdyt*I!J@^& z-hdCJpP!NOKMM;p6Uzq!aS&gDMZkd1fQOAMq0NIa6`0%%7!4vo67np82L1-V3%nP2 zE^((;f&-hZM+=itGYBvlF)~P+8c7wsU-FdY!P(|try{ehFJ8*4V0UmY3Nu}EYyE!b zn>RTu+VoTZ?tH6ItMw$FZ%Hk;=lmaB?3{J!Pu(srIO;3-F7MaLwoLg)+uyAyU^lN- zvU{7F@Rd8f>)@hep0|6#a!qY_JYG?__0TIe<2cLPja`e@|7!NLEnb{f@@lHLVElEb zhsq&qgMa1rmn3@IM#QadmV2x;<9q9o{!ez(Ljx}Fm=LFxw&S-sSE>G-qw})Dmui_g zK4PiOc)6C+>gv`!etJlOGDa0L65F8~^|S literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvaliddeltaCRLTest9EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvaliddeltaCRLTest9EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..de4da9d69b05c15760888de2b9e1d8fe535f0bdb GIT binary patch literal 1093 zcmXqLVsSKRV%A*1%*4n9L*3|tMl4LI4DLs{5_nL>jNFo+W8H8wCbGKO&t;z+bc&p-!ajjCr}Sz=CRiUQm^S65_bDS+H*Y0$)| zgzPg$RtDxKMt%mMI2ThBBO}8d;aK@R?ZY42o(mY*ZRq9uS=JGBdP&gyTPJ_~j}}z_ zc6VNo4)0U9W6$?{sUPny2srB`mhEQq=5)+7lbNacryToC0#9-or|-Huqp~=jdLOxrKm>TX}!b-1a)tIc-)E`#mj$7e)MIT=u6ZxX+1jhfjck(8bz zpN|G<{HWGY6i-i|!E;w_)3uLIi#;rk+Gt%)e(NCRb0SOqrG|0o$~z(McYkGZnIHYo zwae^c%S+|lXASZ)jG-6!Q#sN$Okdn8Sv9dQ<(D6;?ELyNaQ^KZ=%4_@uc#LURRxVVW?5f~z}2J*nLl~rbuFc51H zsk!lOAG6Q7^V{tgO71pZz4dzU?<3$uAj`)h#v(GMe2MeM(Dlr-7xCWA%A2XOQ(8gG zfDfdfpONuD3kx$7%LfB-5MO~sz<|$yhm9+t&4V!&nA{8)4I)4i@+^S{{sz7aycc*b zai>;-1DmWz3zJbZ2rwBjGI&|QHvRFOFSNWdT z!rqxF?ocZ{@3zPHvFl55CND_~mp*M9^|MB;3vLRvcl6b#eBfPiYX*OF7iOQEyQ*MajL3ZdG6{T>@P7$MgN{Sd4eis f2Uk@$*LN4EtF7)1w-)3(*4Ezka4LI4DLs{5_nL>jN2B7{LH)( zLj`9?137VCLjwatAha+xFffP`=QTDkG%|*94bn-p&)mQiWFNDzo@ZWJVoqj?0*1W` zuCB-qRRFo%$e@W)3E8iVtPIRejQk8haW1ANMn;Cq3Gdf+S#nR<5%5x=-~Pwl-f8ov z@i3+T%UAtx{!-R%&ZbkR!*+HHM7m7NWYIGJ*uAApR7m7n6>AQMl-+Vc+}+n=t;8%~Bkn<*oJaG*|s^++^0g z&FzVqoVv_9*KfY>i@!|@zq3`dqlPtL*_O+{AAJe?AaNpi*VdVuuEBC5_s`4{PW-;k z^nuNEk*Ft1xApeqvsH_wSGoqs+6$!27QgW9vs!&_(T#cYzSS}^c16g2eRl7Up`Qq+ zxEA~SE)g}4={LQMzXqh~-_)xu+~s4$JGZsz-`<9IE*+L}=S9t#m>C%u7dQSgX#8#< z4-8^iWflnou?7)AgW|ot1sYA4^3Pu~e|z?|^2FQk!HGhak420{#QFNAgMF)XmMmgW zn*4Ly9*$Ti`4I-T3M>K!dRFxRqRs&sMuH|vPkw_ZH^y=dcW(Slk2Zm#PWl^r{~p{wt;!9LgH zvki71>9=C&+2T>J%bs;&o8H~vABwU8h8A}Pwl3|g+aoi(=A`=8<_b;G6ZsGQT-B84 zd#>SCTT`O*G1lbP&MC7ct_UP3{i@o3`(1%Kua$yOfN^i`DWrLB4N{>ZjFDXE4XR9<}dW@Q>lQ-k%tUs{*C*m)lc{oarj5wkHG8|H?53r&G%f_kI=F#?@mywa1mBGNzklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWlrxY4Dc}|sP01`SDauSLEy>K!3&_vR zD=}1Xb~KO^=QT7iFa$yiV*>+&C~;n614AQY7}p@3MElGQOhNWB3+s92l_ln6rYK<8 ztKjO2>`(=e%Z&}17?qIy%E-#V+{DPw02Jq9YGPz$IK=Pc-v95%@`_9~C-*hy&ihYW z-)8)B!I$snzm~6Zv|7%-^*~@nL{=V$b1B#1r6*h#UD+l4>`yf7W0mLU4YFVUZ`&LE zbdUNC_fKaxomMe>XX3}ZmwUN+*{6L4A%|mR1Wvwrn81IgFCdV=VEY@ZQ}^S~PGqup zaC@nozRuc%TCDk(A00Yyy|K@x{Zv4J~&o0Wo_0M$u>yr*F z5S;UQ(aFEr@0eviZ0{4P;qN})ztTd%%rXJPrCSiw}`~fsJyQg+j8HtrdIy=v@)G2XkYjR}{=By*KHU^{LAT)_#?J^Fe9t(&`JV(qu)>Fe+wkju3j2 zdEA}layQGa8+`%_SF>9EgBr{uE0$;G?VWo5xy~ZfT~k+hN~_v%Eq}as`C@Yc=X^)5 zEsJuVzdrW3l9_Y*#o+s^RhU-r2o^HkTqWj{_O_STaN`p8Ee$ia9;mwT_|kn>k(F`h S5+wrS*>4&PZ_Qh{(ggqxW|DsZ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvaliddistributionPointTest6EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvaliddistributionPointTest6EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..a47f7b208569dc79eef9376e6566d6640d90f3b5 GIT binary patch literal 984 zcmXqLV!mR~#I$DtGZP~d5E<~YacZ@Bw0-AgWaMULFz_?vHsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1F zj1-(54dldm4GjzofzZO(z`!6%oY&aE(8w6ZHApAXK63+8kbTU;dY*Y@i8+}m3K;e( zxVj=cQ~~62GlM2ZC1k%cvNA9?G4eA2#krW87#SI+KIl-Es*7BE^>E)g;mzXH6&cF> zn4em{KVKleiqlEeK8zu1`}z&P>+N+XtWT71UCh>Zv27cd%GQaK)`~bSPM5!a?pm~h z&OMzuMj{>ue^jI}H~n*5sM))GUneDef#=?RzJ4P` z&GY`0t&Izwv=`OVEaHj_dO_(1yk85#exurM>Rd@v9P@fBDE4EPLq*tinfJQ!1f$a>0oTHO&I!k&(gomCG}=3s0o(S|%xW9V&bh zzFqpDsDpvdv!dR0Q?~KMtd@{?a=F$_=J2egaylP_HMmbLoye~8QZ&KFwB*jmzzJ3x zvfHj3Yoxo}y0QA}#-HYM≶syjNF2lIsVP!^-k+jkB+I9ADA(Xw&}s2bIECKI%Co z?c8=dJZ;+fLs#r(T={*uFetCQOVB#zhSk>@E-QWGUx)0Pyd~{%xA>a*$xa`BbTw=f z(?0*9_Uud^U#Cbz;pHp79?QziU*7wAsqV^)d4-cXR(=1>`=;koc0_sN##e`)^>F>V yC2Z&BW7hY|QR>7VSJ%$o!cUK9uK4{|Kd)n2$6=ObvtRx=Z>d%#xJ)W4&Km#{}Vh-&TD93US8-&v`P+9usa+wP}MH*cQbGYPe zKSP$ywR)4iclA1sx}%W>d?5Y&jEw(TSeThuJ{X9D_zEln27CrQY+MO#9*n8LP~GCjI; z*O`fKzvdr_D7op_$sc8XMJKU}uU1N^?5yO8=tEOPD;EhLztE!Kw84wlb4uxITedp~ zIBz_z*z(5aqIaUKW5?>B9ja3rcF&q{FiBuRXWX8Be4J4#UnjV)z5Vxz*xu@C-C~BE z_3zfr%;Wl^J<~)cPfS(byz|$&qj~!~1iIBP?kXyuel*T|!+SU7M`{KWc#oCX)oU4E z%n)6C>G+lNA)X~QH+`S|j^($~(CrjY~eyo=-m-e$FG< pTw%Xn{fP;EUtQE!ug&uIPo41Q>g8W;U8Yx;n8q$x*dZ%+2mrlFh4lac literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvaliddistributionPointTest9EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvaliddistributionPointTest9EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..3456831e0b94209de85a52b6373284fe3293de6e GIT binary patch literal 927 zcmXqLVxDc##MHcinTe5!iILTSmyJ`a&7}Vh-&TD93UZr&??awj1)ZuK&=9<|W@cG@p_FDS^peEN0C+eRj4Mh3>k*#?;g z^1uL=Rc4Ve5Ni-|$$57>zy7tKXMM%Lvri=!yxEtD4LEjdY1QMT=Z^(5hXWT{%iXx}ZT0Dg z)1Jq_)y(`Dw6izswYb>3vn_la^6w;{pWJVyThe(*`KQ<2dF#(jQ1_R7yy4WkjViv2 zB4*2_wkSoET`>7Kb)I*3oKV7>2~%w(Oj3*69Da2&$wr7gwm#j(m;01Y*L#zVf_jbC zZQUIfQ%a|NH;q$-!?Wvptq< zxFPhY^VXTqvg(o-HU#$X+nToeq=D$GOQCw{hb^_97OmiIdiEkXd%p2Mu46lOAM~C0 z76uXFNzxY{uWMhbVsd}~=Tr6K^@96%&5TuD`+eC`mzdjIe{z11*Ge|Kb)bKd zbUeG!hQ1TqZVFhI&Rag!XMvT}$)-Qw`S*X9wt7A9{(PZ3^8$5N{XTi|zv=ZK)6R9@ zV7i$tY4m4e{;t61@4a{bn$TOKS~_jUuUoGLzpCkqs;w85|wRmAN#w^*}w@xmXAe@MTBL^=6Z(obq_T> z>}K?eX?zQ^_&eQz52T-;k?}tZ3o{eT2LnM6Ux9_ofWv@|jRnYLK#mAtk^@ErBZEuA z_ep|pC;Pp)948gJ^1Gkam*URp?=626aqb9XU-|pPxvh>e;eBe?>u;ntEe-dyboq&=M)hSJ9f*Lx6mEC2hN2r${ZFyELb6=G!NB^s=w9Ijrgr3?@7ad(b zPjsqt=iq9vTDDbody4t(}%ns+%oa=r+s;R8^0X>c>QU%)%0xc^R2WnI(>Sl>zxVnaP!g z3dN;K&W?r#a^k#(1_p*eXklz%U=StFYiwX>WDMgPq>*T)nSlw!N?p&qvc#Os6a{pv z6hs2_f~#!S|}8<#xZTOTJ#2ym;vn(;2DvP2FC;NIF{* zaQzbZW7(XIoa+{?iNCz`pTdJX-`eIKJicP`6T6u=8+3fWtPs7c;~&Ri8*Fe-j5+6e zZ*ShlI8KkZ!QEEr6&0MqA=3WLKC)I>>tddKU2Zbrg-q&`O-FzII^Nn<6v-X3V-f!c zmFKGKJ=iG#%xc9yU++-K?_sBE4t2GN&|ieGT$B+A8iW-u$if-?7N& zIoTT$*1l5ZNnf!~fKg+G)`ynMZ2wI{JZz?$SMK;0<`my}vi+)?yf70pBLm~&RD)!2 zl*%fzNEnDUh?Fe28gWxQ_>%U9v$2K87VdXmenJ$SC}jCq#8^axRE}@p_-fHy*W2sg zc$q8CBHd||0Ut1aWce8x|Ff_#GqHRy5CriRShx&04A|IMfJ_GDhyW%#U_>x7R74A? zg@%1AS8l${KS6TmwrI7GA6%Ql_boTM`RV8?#hw4^uW#_-U|~MkQDZkxulIkf!B@>v z&p9a;7kKpL_I#R|mOHa_)B1IhK`-9U{Ig(p+%>nIWqJ`?A9&y8FKiZhC*xxTG z{neGs7hkgPvYN#<$vXzmg#Cg_nWx>8-Y%{@Gb+lq?fWFHxyf9UY!eLd}}m^(8CY#&vtPoH=vr>R%f}j$P5pN*j&d8XWOWPrh|s Ks(p3Uxg`Km&R>%N literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest5EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest5EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..2fc212d33ed9861b28f4d231358c99a4c5fe6897 GIT binary patch literal 925 zcmXqLVxDQx#MHQenTe5!iILHOmyJ`a&7A-4f18*?ZNn=n&ou%Wzx zEQrG;EEbYlT%zEdT2zvmmYJMbl3J`_WMF7$sBEAJQot-Mm6?~3nUq=Lm{%E)pOcwf zX{u0Mngm47js|k#yoLq_hCpaxY+zszCC+PXU}$6v;~J!qXsMZj3B*!e&%Cn4oXivj zbjuZ7U6CED0CK&lK@+1AvVR#_8JL?G`5A!XTue=jj11TBx%S-oCaIP6`g6QGH^;Ts zSvF?>eOjW7ezUZ-|KNM~e_r8DokA{-$~z~u4esg|tYDkpFkzLL^1475-r`MtZnZ1# zJW-y@H}UwhSE44atzMd8J63J!Qq+^J*!8*m5}VUuJLzJ+cZZWKclex-3`-VYp`Kh- zH#6{%t6bf>c@L)f3M(5=;aRV~?|o9B^TE%jE*^^9@jyo)-E) z@2OqR@EYB_O)|XKX7|uGpBO0fXO*Ov6WRvmX|tfs50|Ut#rzL;(v9O z<5_S1ovUvi(_>~zS@T;wq52AUh}qS%|JHG@uMvHCUE`GK=6%Oa76w>NZSaxz{2knV zj%9OdhNMoID74&m8LOCIbtX4YUkRIH-p)zY@U=cyd;Ce>2@e>J&H2d=JcKkCsH zyHh;9EB0>qj9Q8M-w&CzSSRfNcBt=_Y5Eac!JKxhM@8SC>=K=FFlgdC5mvpKcIg7= ze%?2_<@F$A`~Jp1c~@3yosLzyzqrvW;e5a0*%!yAE(w3aUSe>Aw1fs NZH`mB9`hC~1OQKuVaWgh literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest6EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitAnyPolicyTest6EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..9aafebfc25f67c64c9d4b2f12ae6144e23830302 GIT binary patch literal 926 zcmXqLVxDEt#MHEanTe5!iILHOmyJ`a&7arhK&4$Z>ujw%+_K_(tWKZpdW8G=jrBCz9D}MEsyy%F1)un^y%3P zPjdeWhgPp#`>CMl%ySphbUmAP~e|9oX*xF=uY=qj>u-&PVY65RpIA-Ww zt9eu6ROa4$&&k9!TfEKw@srq)l27aIzHxZE#QukfT;(p-4_33Y8MaL{|9$nC#it{C z1T@%kE9XAE>~TY8X3wFko7QU_zE|~fmS@`W%K|(mrF@rz@BgS>E#}F0nkQ(#`L(jP zr9w|1ah84WVNX1)f6HdcEyWG|Iy2g@Utsa#a%ago@>tK1f%TZzmi3#yo{^na`?8gb z;YIQx(cZm#yk@Qb@+anSOyrUmxi5V;7%OPlyQO~H${G3a+8*Y;@8s`%TePNVS^JAV Qe=fb2*KZEp*6zFv0AL$qZvX%Q literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest1EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest1EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..65ca6340ea6e3a706e2f767597c7c92d362a734e GIT binary patch literal 950 zcmXqLV%}uX#58LGGZP~d6CB(+$<$iUFhP{lwAq<~piIx{aLGbytqAU`KFxzabW zpdd3Z-9VwZG|Ab~Ku(<3(7?bD2rY~a3=E>gd5sMWjf`PjgDetlwKA}P*lOsRSC*KQ znWBKrb_G{gWEU%dykKb1#HfVqX+~BC<|amd2B0_>QxhX2!`TaM6E{!YCiTe9m5ae= z=l#{$>$b05)3?EWY308E4o@0x_x!#7Lh2Z^K7&_H=J!=x42xGhdgT$ZMmzBTlP;xK zmp)s!|LDJy_+nyuY)2mdmF)8$HN_tO-+A}{Ss@mShA%qNN|o8|hP@Lew@ zqW*fyw}tORk4~Octs~mCCWCh-7sKt!EnEHueq^0w_50}&*Eol?&Aj)&HF9P@yMJfq z?$44YyK`T(_pM*B+k8cai|4gA)w0=7zKO}-=w|zIY^t)dcmLg=eO=yR4s1_nm!1v3 zQK_N!Q6@UOe$tKSOfxDSEY4nM^>GXg^8K34Wao7K@Pj8871$1+IqXRd@xW2@fBF)3}g&=*tinfJQ!1fsnCEC zg~x;(IlvSNj2uRWHsQQ=yt;SoblRWXo0U`IbME}4b0z^X&wETZ$^Ln*F3LTnv9Ts8 zx8c*J=Cb=I)6yE0_sdO=Vvq|t{M%QC|CF(|Wybo%G_CMpW+CM>`O8!*>doP+j{AcgcbyFkscc4>DPP{Ddky%0; ze;i(rXLn(X&(oI?vL8IA-gHmcqGWr>;(VLflL%d<^J#-X?8Oy2Z=+tn=>9U@L< z+?#yx$jb*$d?x10gnzK)H@|Ui(R>B(H4%-M0)8F-)qe0Lvv1YJs;K{Em-3~ZUdpYv ZFL8^@JQ1ZKsdlX?LuY{?L!@NXMF6(3YF_{V literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest3EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest3EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..c8b06f07e40055a97af55ce08ae5c43faaa1f530 GIT binary patch literal 943 zcmXqLVqR^~#58#UGZP~d6CB(+$<$iUFhP}@Kgq<~piDKjr4GbytqAU`KFxzabW zpdd3Z-B2OG&`6=UGzo~D9S!8fc?}H=41v(X*ucObN}Si&z|hDT#x=+y(Q+#T3y9^0 zo_S@7IhiR6*c_qY>Wb`e1&~jS4VoC0kp0fc%D~*j$j<;2=VEGNWMtSscS0hsW2B?@ zrXAZKFMn6!v9NFnufp{y*O$)U5Pd08{`;cW-*+eJO<3yJQS@w?@ zV;6U&{1?+rxFxs!YwSI_dNs>+@!w@G=9Mx}-u+o_k>N)-z2!0Ii(XYU?X-9x^(0v- zL%7s}Q^wgrcIx4kzTvBM${*{Q>!gTIdTyn@Q}$$eQ0q16&X{Kfz0Z^jkGZW_uxRO= z7ZriBlI0Os+8>D8=R7%QV{Ua(@WUtW>E-Xg3D>VYBlg=Ni1B5c!-T6(u2=I+FD%rVzEO*3ExF<5|QO&5n~al zz0TF~ku%(WJ7>zSkb{h~A6xb)8SsJh^D{F3XJKJxV)2ZpZ(eP@cB`l4P>eEykVa!`uFr?Myowanzn?ap-03 zmOVbp{cUaM@7eoWCPseKkL0Yh9cMSx{yn%uHdfmud8Sfq^ZJGlwU;)AMdmGu*EyLZ zTyN}Wrz6c8I5EU(YSt8!&A%2K`EVtrCSUO1SQwSamT~OqKQ4WP@>+}TM8=md-#_GE z{)%7sM^lm4yic-9lP}#%=)9kCW#3toCJo2Hnzj29YiC%lJ>Kx8Y5xh?T&t7wrDM{f cPS+*=djIc!iqfauR>HGtkIs12=J)9g0HarIKL7v# literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest5EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest5EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..f3526efb69fb232df87f46012b797102811817b5 GIT binary patch literal 942 zcmXqLVqRs?#58FEGZP~d6CB(+$<$iUFhP|H9Aq<~piF*7eCGbytqAU`KFxzabW zpdd3Z-Bh8tGzo&79S!8fc?}H=41v(X*ucObN}Si&z|hDT#x=+y(QYdP3y9r@o_S@7 zIhiR6*xaDt>Wb`c1&~Kf4VoC0kiE{x%D~*j$j<;2=VEGNWMtUVUH#Dl= z|17pkDipWe!uRdYlHdOdj)w?#)a`SzbKv-!yYbp%mqY6S7c_}^srM5hTiM2&?{Bxu&xX*b+-J$v$l*|o#{$2T~%+9URGgX1FG zEmxI&nd`Z1L-XD6lNHu^eDeyd1i6ZzEAijvy1CP}X@kupwx`C7Vl)5m^^OfZvyh3I zk%4h>wn3(WJTQ!9m02VV#2Q4_C7-_j=y2iVFX!_9n0}dk$=B|VI5>sK^0A1qi11AH z)BWtafN}Q0J?~ylnD9D!ZQy(ZK9GKXM#ldvEX+(S9}L7nd<7N(13m*DHm-y=55`nr zS~Ornjt*c-1V#rVgI><{pbdHp9u_z-K3nhnzCw2g%M&Z3Kc})|TiV|-PT_GlnXy%A z74xJ=nyr`E9rtJdu;t3(uW8V+Q))Qwao|1AduAbFHnV7jUfK1P8kw8-ZduBCOnJ$# z>6^Cst(|crBKD-G#t9b3(6bpr#_cn!c#Cv#t^c%HW0mq1wWBMa z$4E$CJj|_9YxG`ly7T5c!Rrs%F<&^4;>BUNU6kGH^Ou7^^3)t{3=*UTRvmio9De1> atXB)Kx@X?MC0iNmWSf53+o<>-(>4HDh-vWv literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest6EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidinhibitPolicyMappingTest6EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..733c152685dd340ff3020482e9fd611ee93edb13 GIT binary patch literal 947 zcmXqLVqS01#58>YGZP~d6CB(+$<$iUFhP~Sioq<~piEi*48GbytqAU`KFxzabW zpdd3Z-B2OG&`6=UGzo~D9X$hlO%3G4c?}H=41v(X*ucObN}Si&z|hDT#x=+y(E(Nl z77zy*dghfS=47TQU~`Cqt1GhO6+pf*GiYK|LiRr+D+6;ABR>OBoQtW6k&)rjml*$F zj+0JHCI5KBvP-PfOl0n>Z8o2NRdR|2RXBc6*ynUW{Ez(K1+zQrUp@|cyUS&^OVYK2 z!S@f`TNgPcKlQ{9k2i^m0t$PRc0}#r-NrTbK(fod=o*GcHFqwCFm2i=!t5-c_4e#G zn=U3l1;+^&YMt!W*o{4`tZzs&C|7kbq#S)E6tsa=fAzj1gQLwG-yOPp=z@jh*=Z^F zEf;-G+TpH#VJ=_#ql4}(6A$tIm~mf3Kl=3k2E7*#_QXYPJ{hT@e#jpuDNjgHZ~`sDThi;B9u^Q;cu*&W{SJFBlc_T7Z=EdPMY zs>3taH)!V+&SYBo*N$QDfq?y{lg@7l;&7aAFopHzU%k`+r+&Pl=(gPD-RFyex{D*~ j9(C8p8C;T%e5GD?nPL9E5V@Buli7AD-s|vLsL2cfx0r8V literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidkeyUsageCriticalcRLSignFalseTest4EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidkeyUsageCriticalcRLSignFalseTest4EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..cfddd3a4359dc1a7353f3f26d3440b14355c9206 GIT binary patch literal 954 zcmXqLV%}!Z#58XKGZP~d6CB(+$<$iUFhP}@Kgq<~piDLb_?v^X(6Rl&I^vjnIl zMn#bf@_X`i>sRZcK+jI>+k&h@peIm z?O%_aR3n*u&udqUzX)G@yYu3gS66)%w!W(^cFI|k@6-0p@vyB5_l`3Y&wu588{)IN z_>)WbL93Y!OSslOX=h_Lb=clBz3+~D-u+I`&oOMfqWHueW$aa6vboIMCOv>+j z7b$%Cbv_|x?fZr$Um{j7J-@(v+9t6i?{(>`6RsSdz?&NSB0S0`vSR(mL$-A`9jO*E zOLG?WuaSKqa&P{sS;2nJ|813Cs2*T=?DqF+zVNj}`75O#9Iws&zjuw_tI9L39C8(^ zOw5c7jEl1kG7aQ`!7Z!IB4HrbAadwb=GQIjg>}Eo`6L*6TFYSbr6^BuYLVq*5n~at zyE5Zp$dVI@$KM>k9P}-qD{8}SB?CT?ett&A|12!bOe`M^#6f%o76Ai310FW6gf5^b|__uTMlvT#ZL@^q6fgB9O19w*Ealh~*iqmfnksfBOQMJ2QO8=n zdkKZ&7g}svUMups)bFx-5!mK4cd~QzjMv)*PkXe=2Wl!w+&wVq8kg>uHEI39HGdXn zX&O(T`oe1Kg>7%5R@}RO-r<={vDgBZ55_a6U96A09=K~!vis8usv)eC)MmPwa>r}z z_eq%RSUG$5ogXHAE#b>dU(W5W;mK*Peq(*>d!F}SS^p}(e%>V)lXff#zH{k^rmPVA Y!8gC_fBY1^9OH03e8X!m>7R^@0702@u>b%7 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidkeyUsageCriticalkeyCertSignFalseTest1EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidkeyUsageCriticalkeyCertSignFalseTest1EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..16c103f7446fea365a2a9b11fd3cff873ff93a1e GIT binary patch literal 962 zcmXqLV%}%a#I$SyGZP~d6CB(+$<$iUFhP~Sioq<~piEjzU`v^X(6Rl&I^vjnIl zM*%1T(h!`Po~PiJm{Satax{<==QT7iFa$yiV*>+&C~;n614AQY7}ubZL0in%==azG&=q1cI;d`_a_<;)n6>~6zr^)zofKg!|R!TOcuLePyZOd zvEsbcjrHYsy`Ptr{5f;bj_d8ZBXZ4loI5T(JhbcoiK-;c`_q(eefq7I9e>B<%88jv z4l%Qx+#S34&7T`z&wqZEDZ6fW>Wx6Zo6HWr;ZN2--EvZK{qz;vmtEo(Zr86=i7a#o zSDoVe>S7+3%Wa{O_c*t+P2IOLTBW~HB{TZ&#)yg%R?|s^(P#7mDp#)G(k&HM zJVz={diC}qTXtUM0N=pxJfAwURv)+}7r*q_Bo+PCIa}{H{k2$sUio(k>(R-pQ+m@m z|7tQZGcqtP&Nj$2kOv02tTKy)fmnlxNho*vADNAJ4i#~Ud`NzIW%h^UpWsv@%f}+d zBGMwQBK)YHW7qZYPwTGE*{Y$HA}4FW2hz{a$oQXyg_()vgMm1RufQT;z-Pe2#+A_K z!I%n6p9biu6Br$g3^Nz6P2M6E!p8Az$zHB!t3-8VzN}h0X@POXHdC!SqoU0FMj5i} zQz(Cvs1rpV>oIS7~JWdY-_S@hmWX-O48L`rCpait&Yz>)S>vp_38n( z$q&>Sz8`%$g>m`AHP+KBAL$oPY%wlb-?r!CoEd!cYc==CjcTTb!q?r literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidkeyUsageNotCriticalcRLSignFalseTest5EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidkeyUsageNotCriticalcRLSignFalseTest5EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..5583f19690c7c83a5403e68ed46b9ee7c0e23c71 GIT binary patch literal 962 zcmXqLV%}%a#I$SyGZP~d6CB(+$<$iUFhP~Sioq<~piEjzU`v^X(6RlzSGsIVxr z1gI=WAvwq=I5Ry@!7VYTI90*f(Lhd|*U-Sg5C|=d4GavT#CeSk42_IoT!Tsy9pGu; z4sn2kXI@!iPG*V%F%EHcMfQsV$aAI!O^iy&!NJJNz}&>h&j1wXVrpV!WZ1WaA(=tq z=D82rCvW^Xka%zXz3JS0ew^yxA>Q5D*YD$59QE?$|3AxR_6M$wveB8?k)?j{yUp5Z z|7TvQlUWt)Gvj8nhS=?8)4x|uTr)|3@BXWuZ;f`ZJ->F*36oZ?b9}6oMhr8ww>Qsc zZ4J-K*uY)FU%W?V35lyvq%_-HHiGI3tCW_#=_ykky^|tbWmdB8^QUXv58m9T`pl|kVVB$g zrQ3FH*x@?+rNqmyjP&-Nj3ni}^BEIfylHu}QP2Hm(jlg3fir8$yXUSh{U=&o%DXuA eo>IE?^^Ee1+Hsq{o==HidA*XwdFPrna+3ie9(4Ht literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidkeyUsageNotCriticalkeyCertSignFalseTest2EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidkeyUsageNotCriticalkeyCertSignFalseTest2EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..f3062e9e4803a52b6171e860e177ba1ea89be7b5 GIT binary patch literal 963 zcmXqLV%~4i#I$??GZP~d6CB(+$<$iUFh(AdBbq<~piD?7C^v^X(6RlzSGsIVxr z1gI=W0VoR66r7o!r{I>DQ=F>c>}Vh-&TD93UI(Lg0?2np22G4g$l<}r%D~*j$j<;2=VEGNWMr80!8kY9 zKO%FFJ5%c_ca=g}tB)c3B@QauK0J1Zbu+`G+bX;6ei2$;-ybj|N9*vHMMm@23(LM) z8Di+Be|AH2{n=Y#KK6amA66f~)!k{fGMP8vVb=t`j~0)1)f)XS`dg-~y6pJt<7q)9 z#`_|-w=eW~vG=|N-{!Z{u2w!3YZ^KJZes2D)TCfHMX;}#BR|Z6`;(5rH&K&G|Fh#{ zr>$6f<2T!qo!49&*)Ff+VZ6T6qg1{zZr5@K!>)s3@^e!E{bS7AQ8sI_j&t0iGn*!D zo9qb?8L@-F*wcEC9zu{v2i>i5w zX@N~1&XL-aYddhHQ@(W+_l>8ALZ6|a8YIQZb4xW(V=@j8XiYGVs# e9Jx6$=5w^*-vv9g9%!>d3`*qR) literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidonlyContainsAttributeCertsTest14EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidonlyContainsAttributeCertsTest14EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..279306ed188999946349868615fc5330f78a79e8 GIT binary patch literal 945 zcmXqLVqR;|#58pQGZP~d6CB(+$<$iUFhP|ZLEq<~piHa{gd5sMWjf`PjgF+JRbu_St*lXdLSC*KQ znWBJZe`Zl>63l*AS7etffV^U8V$j5>gzS4pRtDxKMt%mMI2ThBBO}AQCHXTQ!nXck zEZ?(;_mWybeIvuNJ$Xy()IW46i?U8v?wx6VT3{Vlvhl_#|4gJ?9~a7=p6T&PW%*@> zB)1iUYB{UVMs@pHb}b9k@MfCV^k;2yt;JNYgCa|0i|%QDo7mcA^I~Frzbx0p=jWyQ z*d8<)=H1Mj8ZPs19iQh~8I6mIYfQxWvwKR76J^WA7d^w;JK z8$|2PH2&_ZY*`t`A<32{dZI=-lEh6DRFqb(XUjgD36FPL`0kb^T! z>B0;5|E}T}Bm_$y>DRHB*-Cc5dbn7fz2ej&%Z&8XmWI{&Qjb@Z`&)_osun(--0IK7 z%*epFINKo8Kpq&>vdSzH24W2&zU=?L>F(JoDHY&*exd-X5BRkm@YCnix zu{qAt7wx_vxTEguO{KT<9N2W#16wB;#!44-{M^1i`(v|N@`uBv*WH@#_)R!hpdRxs zBT%2$?nd0^>-#hB+Uq9YoIb}nxc>9jOHZRqPv222{A%Q%Xu4m|jLE0%=i>(^d6NIa zonxNfSfV+9L(8=$t+ZJV3G&uqjo+Qz*8REgw^&m~-Y{n=ci7^#ER&}*x9xbl+Brny Xw6$E=lD*}##J(BwXNs6Re+&TtiM3q~ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidonlyContainsCACertsTest12EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidonlyContainsCACertsTest12EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..f206348963c0c5963b07796860d87586801ed035 GIT binary patch literal 931 zcmXqLVxDi%#MHiknTe5!iILHOmyJ`a&771Wel9-uS?Cc0qS*+mf zXdoxfYiM9#2!s~K1_lOE;=INNhDOFPu0a-w7FrotfLz2ZZ0MO+mY9>7qJYg}S65`W zDu5hsXk^gDsD$iaMpg#qCPsb+pg0#(6C)$T`F~uOjoC5;8PB>!zIyOv-9qd4MN6{| zwY=?I`TJ&piv7FWLHl0sUZav&Ifp&|qfy5FJ9nE+lHz8ZWL_OGqBM~ip=>h=jP+bhfc zWA^T4WiD-kXVzz|Ht?CM9PK9U_49&=YI^<0M{jp*S5ECbvaEA4*Vom@XV|UDo1d(C zA+%pV>mt*xSH08E6l+PmcaQgrpM2TZ|IwA3Ho=;21RUZ^`&%x}-w?Z7*l?@xW5<$r z*R32c_nnJfc<+w`|IfQ7o>7v|dSB%%`F=|E^hU< zS!EUp1F;4XRg1&xPU)6bMf+Ykz&xo#Sm}692sl~D^0A1qh`2xf`;jHE%9&x2v+DUr zmu84QcXT)41L@~yWc<&Y1XBphKEtlcRvw}zb{fA_bY%o zkD0C07kzMa$?h(bn@MlJ zUC8=m@0+$FJodTNTjA8059SSnTU6={1#3;unMgE|3Ll3 ztmZhaaI@Mwg1tv${?u2W`C%2y`_p~u>LW%j7Y^)a-rjz5`cxLRt-M>mdQF~xLZqg% z#QwZL_rbuJ^-Inky!NZBxk{OB#VP%(DpE{kA{_JXdf)i1cWJHiqOwPp&%)Ht%eDj` L@lt3|oF)eVTT5k~ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidonlyContainsUserCertsTest11EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidonlyContainsUserCertsTest11EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..ecf51285fa49fbb3a50db4bffc73271a5d0f4e43 GIT binary patch literal 952 zcmXqLV%}oV#589CGZP~d6CB(+$<$iUFhP|-jhq<~piB0n#u(m6k`Br!9uIJ7vm z2&A@H!P(J3PMp`!z`zg)EsPBe45Gw&jSUQqjA2}Z91^XxF|dMIY3!L-mY9>7qJZ6M zS65{BDu6s-XlT&HsD$iiMpg#qCPsb+pg0#(6C)$Tv&N0#KW8#W3JN9HuG{mxZ%u&l z**YCJ`Cpqg9x=dQkQo!him+tfAe;5ElH`}C(ApMTde%wbjbmwT;GxEm7W3|41X zpWYw5<&#Om$G_id?>KX8V7SGiW68vRot-n&bk_1sZ=UodWd@3E4`*U#WMEueV^9T- zSXpHj2?MbPk-2*qR^DMe`%iXSNA1>m{xk2XTw(<$4Ou=GF&2^bb(->wUco;m?7cC$ z%wm#=SJ8hS194z1$tti281NbJuyG}{c`&8|6P*F00Y6AWn33^63#$P$kTT!{3Gjmi zSb!?NA;%9eO#Vx0x|qG&=cKC#&nK+Mm`p0_@8b)X>j|6bYK1a`^DExuk2zwv^n7{ z|2Y=JlEs=Y70=wgW4-sP=#n4#4?L#sd=)Nl%k`PJ|9Pi%O?=}$Iksed8@*-g1=q#% z9{F4?V)1I}t|ZA#>0izsozs1+Q{nf6F4<24Vmtjb(pY{T^$ z;OuBxB3ACfKW($d?>vTv2&I0Ni(5B{ zc299`&OY|xgQ&s}zH6?P`g(7bW>qix!uXggH21~}{->YLWvJcqiB8r_erZ~|Ofd99 za_IWaw{O2=^?1F0g;wRml2z8f=Ea80xzx)1cUtjWp2N2bC)^9tFIkaX`~2a#pq3+! z9XTI0uCcMCH=KBJ?q7zBezS{x={8s#D=JT0&;r+y<*<1LTm>C%u7iSw}8ps2~ zS5}!t!a%G+Bp~A=r=xoNb1uK_6=A={``)pz7lPA+EFX&)i^#Ht1>zq&j>c?fjF0Ac z=@GlzlgrV752T-;k?}tZ3o{eT2Lo{sUx7uyfX{%3jVqzegE1AD@(j?^9WXi=8B`;g zWPZ-5`Ez3RhGyYOCp~BHc1!=-ofZ*T?_F|ify_7N{5tuyQVw#jjHa>e+^+lfgWeHU z);|n$`W`UP*IHqH?#&Xd%q2oMlia@@pV^c9J?c)u>AOwa->EE;D>iXG7S7qQB}K5s z?&#u;Uxa@MhE~3u^mni2=96sEZS8+<7^phL{%PX%INoDwv}Wspgo=6Q1|ESN3X;;B z*Sy(rE9%^nZ>b;q8yRkS#T$K@m358V?Xlst3B8%S7Vhe|QdzD2{=rTDB{yc=QEuFL z?)5~i4R;>D+Il#p(lUMf$=-Djp9@57?9yLd@AK{jdtr&nHp5kajD;6#U!T7Aw+4%F N@8nNcg?8J!0RSAdWxoIb literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest16EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest16EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..af5aa4b0d4123d842b2bda5d0bfe627c159820a2 GIT binary patch literal 924 zcmXqLVxD2p#MH2WnTe4JhzxkyIJMe5+P?ELGIFyr82A`+8*s8QhqABZwq>W}jE#QNws%dO++|y@zadBF zwgu0%GjicE#mBxBg}>_5v)}Zmz1=nYL_ye$l2|Ub=!xu`URXRim$2k9?`@91?pr*1 zB>TdS?Y~}PkatE$`tz5(q&oW zaga&q!PKtJJJkNH@0|O|?8*FzTQ`Nwb3f}VG$Diii|3^&u2VRJ7wp`*ZtlVBH_s*U zmZAm#^Quac5G;Z2KIq zV{Scnjr1oh>N)hmASOP$a}GyCz4E!e3VVL7b1`ize}DZ;c{UR>BLm~&Y=cY#d0_a; zDziu!h&6}=WL)HQRBwOI<+r^e?6-K|I~MjraC(sCV-aH!SvgZV>C*Gxj0KL<4*2`F zGX=~`PBGvE>E~x;{LjL|%*67+KpezZU=c9jGvHz4N@(+7Oa-Pq14iWN0H!-&bTBd$ zD$Kv=WAjffka5Gx<=JLa8D}kQ(oR+Veo`uQ!N!dLLDM$;FPI~B`+l;gUytoSh49n` zi_@C2l=yz>OT-xdTxa`X^eM6FyQbu%h$gnckpJA1LmDhyTQ+ZSQ{|IT71&AHBVRsA+JbuQ`Hz*jNeO0B6ovi2wiq literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest17EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest17EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..59722f96227983015b5b6e438c9b72a017fc689d GIT binary patch literal 924 zcmXqLVxD2p#MH2WnTe5!iILHOmyJ`a&7$ z;OuB*AScdiXkcIngcimI1_n{$yv7EGM#eC%K^lp+nHiWsY}573D@)ADOi@6$)zuZ* zkqRJJ8=4z5F)AT@l#!KzxrvdV0VvMJ)WpchF!y9m(U$AVcc0qXrrt_c?VIY_-<-F_ z`Q4FIOo|Gpy`$MSi|R(H1%6{}e%LqX+wR`K7QIPbM*AlB z+B999Pj7F6r`xS9SKq9uu)Lklkdid(bc)ow^yH8ok*l3c*?gxODVUwqNw^c!TeIN1 zsOyAHe`?j!_p#ly%)AzQubgw$?{Am>w|oA|*l#zte!-%^8SD0}=C=GlVba>^!Tu79 zU-pT=4^#Hx34T|3Xa8M^_nn&W_NTFES1q?9XLJ6^0A1qh!pp`zZH5d@!S2?6`?;X zOOLbN?n*Y`1L@~yWc<&zC7X_L6M(62`&7bke?MYRq{r7YQwz$b;fq_{C3vLRp+N~N}qUD z@ygbWz&q}X;w~TUeqA_0+KzeF1feO1b$2o>Ft>jqsFWHf@b8h2ObfsMeQ|5EtM?@K zzY_mcEy&q^We(e^8>aJ@PKosF%kus%zRUY%#Sf+Le=Q!hDmP}9K4U!h#K70A(M(c( Kx_$A%zX1U6i(R(> literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest20EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest20EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..4a0f1916509cf731ab5ab50dbe3d559edf41e2c5 GIT binary patch literal 1153 zcmXqLVyQJ~VoqJa%*4n9L*415f^4LI4DLs{5_nL>jNDHZU|YhH(wjNVLt&zyxF)v#_pbURh#JW{Lv3t*)-f zj#L1-+Q`75iBSpJql~N!%uS5^3_x)%rY1&4hDR=^`CV@M?P4}6P>5XTTt9muzp*IS z?Z;=gKM^|KB4(?5ZmQD9vmS~3Yv%kmmNVAOlg!oj`x(^{-u8dZO|8ybYbx6hbIrNl z+aZ!NGx%z&zrRlUAN&5ZY%Z@h@_)*mA0#Lwx6S*|yokvP*KPb8riptuY*v2Ew%MUX z{n{j^3c;zzcFjpH%RZXn@K?W_Z;$EiqNj5E{ysV0+sl>pZ(7-cZQQFlLrvf5|4Z1bg3WkuFSYK=V;$kjx^Ej_wH2qoS7i> zV(n4=?C#>J)dhj7TuqsCOS7il-@Nju(*kLc0-Ji1$!%|!{AFThWMEv}#OMbM5ibLI zU>M6Pvq%_-HHhp>yCcWLX8rAQhsnfXwMO0y@w}7ZG$G5!BE}*j!7%Bv_@uw#cQ*P9 z1eEWeu`=hvL<2sMett&A|12!bOe`M^#6f%o76Ai310FW6gfHNzjnjfE#EDFv+ku2l*H_GO;EYWYFFsqef=-`3=Zv z4w$)sX^xR$TK}TR=1QsGr-PF7|2*#UpLF^mOS{)W9oO4hPbcLV&waVVH0|<-w^HS@ zU7j}{&tKeB0dG#L7O))On&-e=mhCvcZ$r$o$rAC0mgY^8 z-gO}B)f>60X+1~IDaJfBsFT_H?R=Bn{PRk4Zu^@rPYRM($ZkHiZ2{+kQVClbeo>JR zzd3f81zvKTp&+qP)1>f8|DNWS*$MkgBs>k@FABSH{F>&Yw}DGSzpQZDGO39@jPaO2 zjIY6V9?!$CXMQks_jz3?AZ)9>tNz4O|0@nZ=bo7JWkPeK<657$PlV37-K*fxa*uj{ W;)TKe1%j_P?AYWIeWAlSZ3O_a@s$Vw literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest21EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidonlySomeReasonsTest21EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..59a02de9d7807fddb20803b2880dad3e0f826ef3 GIT binary patch literal 1153 zcmXqLVyQJ~VoqJa%*4pV#K>&G%f_kI=F#?@mywa1mBGNrklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWlrfM3Dc}|s&dN9zVCJ?&iKfYVpf?PoLh@ z7O`m4=Z6pTs~;>Zwvw3ia^fQksTnJ!;-#Z@n(vvh;zHVc=NHcY0xQBgy_E~>pK6U3O2a7^R&l5h1_g^gs_bxkik#w9#`0Z)G8 zQqcyE-BuR!3QynAd-cFjU9vt-MzdC6_NQZ_XX-yXC!8rZmt?u@w6ZnxVp74JvnMa+ z&*ZI1_!9b1>LvUChD|G-&l^u&q*;<#D*H4qI%}fNMC;8d^R~EYGBGnUFfMLl^aF;7 zmw`MmjAfNsBn-qFME0fKk>g>r{&u;;WMZ&dBX5Ry-brwpkmX|$V-Zm|PksOL&bNsN zZC}q?S@nk{bC;@=0Ut;|KO^IR78YhEmJbHvAie^NfB~NY4;xoPn+IbmF!dQQ8Z_Pm z$;h)bUNdOCY>>VnaY6i&Sc7O169wKRXvk~84YUN9WLTVod<+|zSQ88~Xm62GBQyK_ z2IMpc%v``U$H<^NZ}a~a#?{a7^l+;@PPeH4x1USfHFBC=>E7hDH;dW z#)_@qcVx3G_G`KEmpXJ5>?z6r+jm?*x8&eSg`lNuHr`k3zW!`?^bGqxH|Fea&mAc> zFA8^l=N79u_jO&JT>Y9q3qIO0I6Kz3oqs)H@{7u{Z_7hVubSBi9B1NUwioiMd66G_ zxpT_Gb&_1=UX813X6*l8^KaG}p1PS2S|>l}{kU}D%URqZrl;dLtJf|t(A^xs(-qkq YzMWmy_k7>{&$bs2Xz+Z=d};I$0FWb`O1&|MbZfIguLiRKxD+6;ABR>OBoQtW6k&$8gs!#D3)!v>CQ<80~wyEKr zaPsMt3*x^ty^dIJzklP1|D1cx%*BUQuD5$WxjgI6feovKy;YCpEs9Kkc<<0|9{m2xo^)hc@MASvj% zSRKfg~zkt_e; zAF-k*Ta;&Lq|R!+rrgo2Cv9V7y!6EaMb7o&_b!*nCtXyTQ+n>nwJ`B0K_+HK2FArT z22}>~zz~*IW|1%uYY^GB^HIn5E0L;Qk2UZ6FJQB{TUgQrP8+g(EMhDoH^h%j77_gI z@a&6Pji|Eth4t&IE*pr0^eeCk81NbJuyG}{c`&8|Q=I{$0Y6AWn33^63#$P$kTT!{ z3GjmiSb!?NA;%9eQ3B(Kk>TrVuB79I?4C8P0ZUY@QdqkzwIlETYLs4)tRs`pJWuof zn{B7oz5MSL=w4%XTk#yLb5@we#FwcPGbcEnW%;<>Bl(VHbpM0))e13Jw;hb~d-m_r z=1%uJM=!ryd|{5X_trUE9w_*JvnW;YHhH!*dC#8-Cpc6rO7E@O#r|<+Qu>ssZmlev z)~c$!oz5hZd;C`8VS{f<`?EEL{w;VF_Iz=hc7p$(eeox9{0vwOl(+i6|6!`HeEVah z+wNuUY$x~5W%0Kbu>T>qa(+<8ufmz16 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidpathLenConstraintTest11EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidpathLenConstraintTest11EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..c28c455abbec7238869de6fe616d60e0ee8fb4f7 GIT binary patch literal 940 zcmXqLVqRg;#57?6GZP~d6CB(+$<$iUFhP|H9Aq<~piu^_P|!zVS*IX|zsq$n{n zuf$BDxHJiZoE;4fBMjukc?}H=41v(X*ucObN}Si&z|hDT#x=+w(QXR^Gl<>#o_S@7 zIhiR67;aE-bwzfx0>~GJh6YWHO2{5(WMyD(V&rE4igPhFF)}h-Jz4Yr#>zkQ4{T3a z<5}OK;wXAbd}7@LVJ5Rur>+aV#ec$SZ@3JelyWDo{{L{CO zpB^~0_IBbc?~DDx+H#Y=9V{pfnPyy_S*u%V`Mpuv-D4N?Ohe6mi;o5bH3m*_+gzB? z7kGQ$mxb&x;&T|EZggw^u5ecHmF^wCS@(OiEl*bHa7F%D14CF=nMJ}ttU;vt){d>m=AP*0sOh$UD^;ZWXub3+aQcwtV-aH!u?+ty zklR1u_x8xf#a8+oODt~hTyDSz($CMx_@9M^nTh3tfjEe-z#?G4XTZb8mC)wFmmtwtRB=bev1Xb>_N+OY{5!9o{eev-laO(KCIa z`){9q$W9bnR20VXDvODGn%%x^`=^~2O?o@MCfD~^J~BT#{nc*whqWoEIZke5k~;QG z;*9$@hN7144QH?J-fj>X`R9z>dFI@fISx5XdJ6hBel1fC^3o|W+B+qr<2B34Zkg^G z`?D=lb@z7s<|@)uidnZ$TJ!Qt?%sNjZ~^(KKefIB(!0JtP>(D2{jlKt>lgm&qFx*u WG^3V1lUn5Rao?Il5rK;mm@)vW0c-&P literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidpathLenConstraintTest12EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidpathLenConstraintTest12EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..dc6d0dda96abdd606821e34a0bb530edfe508d6d GIT binary patch literal 957 zcmXqLV%}-c#I$e$GZP~d5E<~YacZ@Bw0-AgWaMULFo-hbHsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1gd5sMWjf`PjgA5YwwlFY**sbrGSC*KQ znWBK<1_f7FWJfE2d|_y0(8Q>O>~Tg`2IeM4eg>d87gG}>Bg4$d+|9)mJBst)1@`$j zc4x$|-SGSFwbzea&#zLv`10K{UyG|HK3d&tt3Nx=p?Rx-_(UUxabZ zmk?$-yZMOA!m`EsRS^{rnYXS8J^0dD`IOaD{#G}eb;9CFEk`TGmT0U?5o>#`;rC@m zzwV~=b1ZzEDvKF)HS<1cKQPkZx}x$gPw?r^H8;8PYKo02_4!v!_tk$cBBI4Fr&gx- z`+;NKP1XsfwhpEHZzldKe9=(MbNWlG=ymQU$M#dTo~l82?yOW;VWHY9?524qt*5)W*}w2 z2NK{139tZFd_#^OV8R5(45UV#%42H3 zm}sow@LIIiz4xAVjOEPMSBGYJrA)S4w|Z|56Te7T&~d>tj0N*MVy3KUbyBM?+}5R8 z&C+TuCS-7r?e#A!=V`mNG_4K)U+_97>$BP2&Ynv^^5Yw>Lplj!U#;eybb6G%j6b=~$J<<9%_m@?NG^6>3u^DSC7-97u>77NqN3|Gw?X$23I)*aY!==7wg gv5G#=PNd4-y(0Cf>#9wdsMej|PaAk%`>tpK0GFIuEC2ui literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidpathLenConstraintTest5EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidpathLenConstraintTest5EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..b8830a2405533a0bda0b7229832ca714cb379870 GIT binary patch literal 930 zcmXqLVxDKv#MHKcnTe5!iILHOmyJ`a&7@71^x{Ajg{;G%+e6dzX=wfw_s1p8+V&#ni;e$Z)<{s!nc(YQ0r$Y^~Qd&funq zOG|QnzFu6(6q@p8?O%zb1(PxlY*k2f42YFJ*lbqyebRy^^-brkHV5+_37qgw_`SHJ zen{4AKRc9o$fRaLaNi9m4^jHl#ADxr+DtGuRba>r}1OlcJ(*+zZ^*FPI`Zs zB{I@n~{!{u4p zcS@GzBpis*V`ER=*|$JjL0#7?n%mKAmeadkB8rzT$Rxe@R`})fFTUsH+2(0NbDck# zYkmIMqZJh_a@Bdo^bc=V6msUASyiW-_QO;lUAD7vnexuP3fnV;A4smfcj!cvEkn?T Nd-rc&V3E~O1OS=;RgeGx literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidpathLenConstraintTest6EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidpathLenConstraintTest6EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..b96d3c626fdb7b9f6a6d2badd6d1c450dd4a7968 GIT binary patch literal 947 zcmXqLVqS01#58>YGZP~d5E<~YacZ@Bw0-AgWaMULFbFi{HsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;11n>lbjt5Tb)!S$JZ;{oo=;q!Uck}M{!hnOZN45*jPf2;ZmRs)W zE#pYGw|cT~>^|AfarEn7@@~?#OA~EP*~PXL`UT*P`T8tUEq!PoF9D{`1L|H;Oq7F0DAFVC2?e+`-!XbZgAAlCn%y zh50dS{|N*hGv|tVEH7ZfqSDS&#{KGA^RxAHANc+;<~q8-FPA&~(_$uOMh3>kH3n7S zIF(gqkuVTz5D`gA7pT2tezb_~!oB*fVzQ?e7sr89g)AS77>mf?&X|fG& z#p&6a!+X>j4a9*FB&)z8V8CaOm7B^2K*oiVMfOPEUX61K+1p*B)|_6 zU;(Q5h8#b@UCTaqcv$k$qnY_gFaG6)`yN+GWWk|gG*Rf;afe+#zRw!&=$i3_9?gd7PlQQ@2 z4}4rSHKW72Vf*T&LpvhQ*7#b4hd#Yq>QfVTM&R=*G3SNtttNI4I)COdvFZvKCSS!*X}kk|Z_nUC{+Y`P-K`_z4&+N4L{ZcB`4+B<>R!t?#_Q@W!&FU%E-J#pW6fA&3fr<|i~w}#MHfjnTe5!iILHOmyJ`a&7*v##4-yehovUir!O zF$R364H5#?_Z{0GwfFKY$3rdOqPkY=aJp?c`n<_KdY!0#_>bM?oF;xTOH8B-*Y$b% z9yR{AWy|BUN`e8;HWn+_Fli-e?EP>+aM}IE`llx++9dSt-~PPy2OJt~R`!2hYPflq$*v3$wF`H>{E}LYwfMiy{H0-6qI2)VtLI1G z-uGUdJ+Jz7#FEA@%x6C+nXgW`mZe-NcV)`EuC%u z7iSw}8ps0!SXP-u!a%G+WY^9|9pA4+s&+lryzjq&&EjrhNfS6}$nvp>v4~VEA5-G_ z`oG1)V*anB&i>miNRd@v9P@fBDE4EPLq*tinfJQ!1fiO>K& z2?C>oks;v9+B3CG>(*vyZ=0kQ>c?s!$)BM9)8&BbE}efbf7m6tOv{;B6)w|bo;cxP zv*2{q!p{LQ_gME#(tH2Z@!RZqYsCw;CPhgo{eGmfYCn&?lvb|y1^M2xiP!Gsr^J7E ze{$#a_N!4RShgKmzSO?mMJzJ;luEk9&$-Es7fc`J-oCQ=)caqh6Tf^tx%Ypeb=ow= z-G|M^Ha=I=o>P2D>*jhLz4&EMvrx(NNSfFMiaCm1U{5###Dt<{v{!gtqc_Ffa_tNe@Y+%%bH?EL8ZF=P2HRr8b0=c{ye U6Zy8eU6pOH+7TkAo@iSG089^PDF6Tf literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/Invalidpre2000CRLnextUpdateTest12EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/Invalidpre2000CRLnextUpdateTest12EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..3e1ba073e1338a36347ac1bfc007f7d533a06701 GIT binary patch literal 937 zcmXqLVqR*{#MHZhnTe5!iILHOmyJ`a&7@@MrD@)ADOi{pL zx2r3%ixog#Ff=k~VpKx*H6tqna}y&!15licsfm%1;baq6x}UnF`TM^|6jFO^3!db- zXc>Hpu9%+gedVbC^0^Yx$G4qY_0aCbd5@`jZ;vrE{J5_6Amh=JHP7jO-vUo z@?T^e$n-N`-5r(O{^El(Q?+mI=3`6-KNyy8*d3{Jaod?o(i3afU1efsWMEvJZIEdo z4-95mWflnou?7*j74CBq8!|LDI?dATd8WavIf?lUIC04Gv52vVXz26>3jEnVr$a0I zolds>kLsk#76U$zett&A|12!bOe`M^#6f%o76Ai310FW6gfeS3*wwz3Rh++O zrnb_@Qzg-uCwuyxM9CdLd%ngl?mYPZufp>C-Y=aDEK9X4zxFXl1!%{u1( z+_K!oyXJ7?Me$|%ughiK1p=-pzP#AHIK)g~J^P&KV+MAo?wKAr`C@v--^922t?|yh zGt85x_8ZWOXX1dZ#DP N?@$Sq%%qUly8$WnV66ZE literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/Invalidpre2000UTCEEnotAfterDateTest7EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/Invalidpre2000UTCEEnotAfterDateTest7EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..4a7e31caf02fa84e04869fb54f73b5dfb8afbf50 GIT binary patch literal 926 zcmXqLVxDEt#MHEanTe5!iILramyJ`a&7d9><+t{ctCT!3Br3Pg}BQYPJa8f6LIOC}O?M;OHkgtBV#14^o|u<=DFP zH7d-$6{mA++wr$?0is`G>W_bSWp(a3wNSMBgktK>-P)$hntE22I_vX(Y_3_OpD8;1 z&pEfOj(cs-s)VF&<+=ovl=t@UQ|^7ORv5C;`m#yV8sUwn{bq9WFt{I@9r1H^?wk2* z49^w(oBE+bQ$klgZ|a&07o0Zqn5RYRF$(`Zq|-iOqCw*yl_!&qFDNO##UF228NWkk z#{u^A9Ht}#rjjJ(M=y4Lm?b`UWr+CP_~{C-h57w$!)x|jzpKf8PvVCjtL~1;Ow5c7 zjEl1kG7aQ`VJ)l7B4HrbAQHjYq9VOVJ7|iR?NWgvk-)F(txkedge)J67>meNrq+4E z25Rmd)9U<{CyS*_`7E&>oE~KP85#exurM>Rd@v9PnWw-4Oeh9CY+MO#9*n8Lv}eGG z938-v2aFCz28nKsS;v2=@lLQgGMicZOZ)8U9WuAx9J1WgJaOBEzwYafZdhOIx&3(b zjl4VCWiE0pe;uJBdO*OUOmgFutA{?f{9kKoCa`OT*cpGTltAp1u&>P4vE*-G}TuV+u+HQ#h{$>R3f4fdPzFS;gQ z)t;8582d(bs_g1Qhqtn}vhtHp)^A&F*Erd&z275rUh;z93c`7@zZbHXw)8(0IB&&Z z`Z6u+6L&bX%?EGe*_J-;A&%O6e*!s^!W2Z*;Yi94} Yzg-h_`h{k1uY}^7yK!qidtaRk0Ph-BApigX literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidrequireExplicitPolicyTest3EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidrequireExplicitPolicyTest3EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..e9b7cf2510f60e8e77970b35924220ddb67fe9f1 GIT binary patch literal 919 zcmXqLVxDZ!#8kb2nTe5!iILHOmyJ`a&7B=D zBs#%7hG9gNKS94X#>^}sHlqn4b-Qhzp<>^fRMDWsc4%Jo4?+-ITwOX`PH z?p2<@eS5;mlYDwntzXYp@!#|83oUq?p!YkVZe~!h(wVn>9zQpHGd|k=UT3G^4BzJq zW@s*)cYMV$#((KA3V*e~cYd?BOmXTJ-3c0xHeHbxubwyia7%P%Y4~%otoxM@L;3#p zT)ukt(+Yua+YXg|+{~AG?MYyZj*Fo{;@8VdG&eF#+bI$4bt&_|d8H+X#?9MbnV1Ly?nvX4f_8c&0;L7GvEX1=VxU6&%(mY#PR_-)PYG380w4+;kLi_{Qe(!X4}Uaz}te1;-McN6EQMP8q{-R7pIexvc+GY4E0GB-->I`r`#4f^x!IGfW{n-_;SPOM4W^Cr9e`LBobC8w=6DerpMl&aO_oS5A9e1FW5t49-zTGdMx zTG_=5r!FcweAMYkw{FkhtUiW8M>$lLW11$CsU`Sv)P%`kUt@ E0QdNDWB>pF literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/InvalidrequireExplicitPolicyTest5EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/InvalidrequireExplicitPolicyTest5EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..971d0a5de61b21859b64d4de8a9ca424eb48ee11 GIT binary patch literal 925 zcmXqLVxDQx#MHQenTe5!iILHOmyJ`a&7eodXrUn{y6&U<_9+!;Gr-WpE6-D!N&R=j;8 zJZZX#wDY`&zyCgEy(~WALh#*2hD|#(7%USd_?ki<8QML|d2hS%*PEKzXBeNig>EBsEYgveZ3CMB&J%>rhffBfTPBt_eR-YUxOd@$Cobz`ZF!39k3HoW z-Nlc3g*`OG8JDr|*}#4Mp!}o6`hv|z&+eF-B9JDKFo#>y_wAJn3`y0GPnRil?q=NS HEUn!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz>h?0*bJseo`IMbtv3Oe7ukH|`(08lSv$E97O=Y?!t35Hi#!?Y|>Tbq9P6?yR#|NjM zzm#&hJk9vh2GfIig7-M0_q;k+J%#PM_FYS2?MbP zktenB7h|Tjap$Bs8Au_=4=|+x z+}`8%~+u&SO0}{cd-A=q6{an3b2pU702})SkCYT)pL%l%Y?F^v<)( zZ#3*+S$9x&r7EBHjX-7YOKy)ZKWY6ddT5P`y2OMev$%C`moD?BaQnUA_x(vUPiMxi ztV<~iw<(JIdMK-D-2Zvyg%*p|ujk7q2%OsYelMf?mcEGPE^AIcI@I&6Cw>pdPx)=u zH+g4NUeZVuFO%u43Nfg4FP*1%khdY-ihavR)n%H+j%ULwOC{Bh9qF#$*eG&0pz@K$ RzphG&`+pDmng_<#0s!tzQ}X}- literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/Mapping1to2CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/Mapping1to2CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..4b70c9a4fc00fdc74f469f344c92b933a13eecc4 GIT binary patch literal 960 zcmXqLV%}rW#I$4qGZP~d6Qh9vFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pj0}m3dkuVU0Si|p|SWu9em#$z~l5eEo>}b%$sD$hX zMpg#qCPsb+pg0#(6C)$TgY06<`sXF{>={Y}_hp?-%?R1ERY!4yoBQV3@!pHs3q)ob ztHw$+?F?VyUgG<}HLCVpu5eabIzOBD(QjL|T{PDjbWi>rw_~0Bl+Qi~VnaO}elaQL zFvu({+T;;+VPDoAi$gzWbF7>+t7rd1Cp*5Go0jgG-GAYC><5WQr>`A*bAx-4%-c88 zC%#8L)-ufde)`ay=!Q>;M_-kjhhV`HyFqR!%$Y41sIqOB2Q}L zFUCx5hhbhE7HJ`Ez8Fu#v(HFXhr5}TjR1rGuOC0-N5&6=a<{Z4fsI% z`577iv#6gOZr;0H+vgA}qFFas%|G*CbV#A{$= zFi->W6hYE522utR$Xb!uOvv#HOq;-XWn@^qWUsA?#)4=6cYB|0W%;pA)#U3j=KV1u zS}xs(C;m{_Tv#DHq0{~8J15Nyfi!#hbNi<*y=ts~*Uv8Z&x=>Tk2C(XTO4iKt84w( z$-86CPGd#h%G~2yeg{g-StuILzl9}PegpIDxI=C_Hfh2EH(cG4*yS76Pjf#caxrFe z&e_&UzQq?WwcfXj*_pJkU`}Wwlb!aZb*qC8DJ?zOQ62hDqQR$M3u; oyA*tXUfEik=w;oTSU>HWc=WECHnWdO*-NwOd8JZoM4Dx)0X1PB(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`PjgCG*EQ8G|~SR?71SWu9em#*Mel%K1Rm{%E)pOcwf zso?Br(8Q>O>>EZ_2IeM4eg>d87gG}>Bg5+DiG+wGd&}?bFJ{3e`hD(jA7mI=tsp_Ua6T)VN3IW zi0}Qnd}EH^5spcYy+2DhUmdNi)QZ$8^n17Oh+eKin&}eu4OSl)Eoq1=mXtnTv^j9Q zpq5JOhVJc&`?>kjG}cnV zhWC@2->R(C@vLN1{a~}1^{?YI!>J2bMlZN<((_&F(yN}vOw5c7jEfsr88j|8kOzjQ ztTKy)fmnmcliK);F;m+(bXeEzE8Uj5{ATQmG;p-b^0A1qh-4ItJm5AtU*vFW%Cu{u ztE-me>-8A$f%Nk;GX7^_0VX6i1AY)+7{q5aU+cgR+Vs zHDU%L20{=~Hm-y=55`oWAqI>PQ&ga)G%zwCM<+0G0;7|Wfy;Z!R6jqx0{^ci7j&jO zJv>&XA9OoI`@me6=BHClgB1?glqu0y!&)Ro!9_NjZ38qE*<${kC1w&R}F#UWj$;ti7QT2(oPCJat z)NI}=Wxk$tQPV-A#U?wv(2R3$wmh4a{UoO|H4kE3_;Z-teRphlwpgKvKkU!K+~f;} zYd)`dDf-uSzXUs>|Ry;+x7DtCyO8dk1RjCy{6W7dT&$KQFpD`T52*|yhUrbyUv y$*#Aiy%Qp8tX5_yR~TlBbKJiFjZ^2;x#J6@k50*HpIy5@PBA-VnO=>gdB(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pjg8&k(Q818$SR?M6SWu9em#z?!uaKBm8IYfonOv#h z>}b%$sD$hnMpg#qCPsb+pg0#(6C)$TyZHVGZ3{d9D?E6{lr;J3!JVC}Hg2gaxcINx zacbnD>yGt1X3WrDw)NeGsRdsz%RcyS9{P6QkD2H8DcaTS6F=}GglEPE5&rqJ0=~8@ zHtkk7{5^Tryk3dyx<@Y8Zmh3n=3xJMq+oXc&!aPRG^gw+bqzYHo^vy@bju#EH-=y5 z?YOj0z1cd_s(taJnzH)2Up+2powtASVa@lDX;HOPZvRr&`e5C`Aed?#CZo5ikY&w+ z18)LOa~#=kkmqr4Yv=D!9`oA$iZcWIxBY$d?B27V(}S+7hdjQ#Eva98!|I}2dxZ)N zt?h25JiGB~fy9eP`570wnZp$2h4Vcarp{g}8@pKURD0lECT2zk#>I^r3>w!O$OFSt zR+&Y@K&(OJNp1Yan5k_XI;`vVm2OL2elvDO8aUEr`B=nQL_~DnPW~t-RUkU0TX*u7 z8JD)Ra;!1n1L@~yWc<&<0!&712I3&T0*inFp8*dWS3;WyV=7SGfYE>-Bq0n^$ZEh0 zqzn{50*W93F#{0;A!NmDEI>0DAX-$QS{fJ`kRuhCK!K6U$YA*HM&`)|huE{yb++nH zPFo)+x;eG#TFMsJg?Im~VLo)(p;y&LxMJ7Y0Bydli!ZIUeytOB-n_iH^;zuoea<_& z0zd7wYd?SN__L{RCY+qUvU~QLN#;{Io_S>hD!DY3XSj*XrF@WkDHd7EEVCUbE=f1Px2(IMXIad^E z4k5NxH`hDGGxIF5On;@4FyE4Kjz#l7W5pDSqF;Sm_CyuEF#h&KdDUn!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXAcRC~R1B0L)=2wi78hscr7I*Q7H1|q=jRod6eVWn zl@u#DI~p`GDk1xak(GhDiIJZHD9**y#K_37C9Eu}dCJyR8)Y?SzvgU8DHLwuopVz2 zOo;3RzMY)KX7)yVe;-$V=`~C4puUl}GA%6S%Cz?9?o9_Lm00AL*-m3{&MYavU+?u**uyLG)&KJ|3r=*ZY~OdW_s8rJT($SVa=JUoq1D2$ zRL;z-B4F9tvtn~&qjt_nC#Vs-bw>;kbVUg0Ruh*9yYFoHV?*BV1hDWG~feC@G~<0XJG*fupvhWFnIx^gOMRZ zUB>Rr`M}M;OImjP)_(Itx9@|-Gs%l775Y;cSmIx=$vv~g?Q2dmS6z9^Ogo<0g)LUi z0UM+)2YvtUBKM0s_U-R!4%zoSTWG08;Z>82|tP literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/NameOrderingCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/NameOrderingCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..f1c4a55fbf53a95eef94eaf74b8d5ee766f2dfdb GIT binary patch literal 980 zcmXqLV!mL|#I$1pGZP~d6C;}eFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`PjgT~1u+M{fs2(pJ;SjxXBJuxq{DzPLpKQA#yAv7;iq!wl7r7Ji)8ZOBoQtW6 zk&$7CvZdLsZhOBNABUdH`3~zEC9bK?5Ed!-NEYP1v2GsM^ve@{KZ!2l*tB5JgE=y< z4ov>{>cyf5Yv)Ka?`t;r;*(Qb|K)(tqS&^Qs4VB7r+T?kPg?H!xS99W=IytiPpZv- zr=xME(e~MncIFLBwPNS_-~HBR@3bJQ*uVbgt_f*+3La;BO76%lN~x*0s9_IMFz4>e zx%mBp_d2r~j~)NW*8Hx#Q*fLw@IZ)(f`9$DLp%OYOqibdY|$G1*ALoUXDIg9W)+kK z6x~(5dc9|rbk%33;u#CAFRUn1wAT3X+(|vGptHFA+m^qTZzjt1_MSQ}?dreDDL?ny zHqn{q9bN*~z&BV;ez__@^pvpiV7=*IQED{D{4I)o!<1fZcZR5~kUAM1vTk7(g zu`ANR$wrosMT|vczgKtTY~LOc!=C7uXYT61s1yneFyI5}=VxU6&%y#sh-}~}kyT(3 zFyJ%bVdF|@^I%K`iW@K*@PiZzgA}qFFas&%_yML@VEiyL$OhJ262EbQ|3|@|4}G4k zH8uyVY}ar3@;vko`=hC?TjjNPa|vIaZna+V*qI6WOK*8IoKXt<7;!<)EB=r5RyOCl zj>uOYm-}wKX6QD^=2N)s_#|+%-3haI8A6}##C&$MIj!TnChPN-Nq#mSpANf!s?Dnk z*SJ@m^Y`^X7r#rM29erVX5Ln`n!C2>>(4WuKJ{J=Q^Q4WyuS6pn7wW4rNBGoL4ixZ z9Ae*jar*;qw-xtKIu%z>_V{RA&3C-FA?;&;z>gc8AqIN0Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXAc#b3lnfLg)=2uLrYDwUmZd5Lrxs-<<|z1;<|d^U zDL6YCG%+e6`-YK~fw_s1p8+V&#ni;e$T02vw$u(iDVr4z8>EdcTi&eQzNSA_zfzE0 zenXPwe($@y+5r#VhLs4-Om)mJ>_6WrUS;z0>hh8+8$P|C#vT!})H9_)kYV?iW3vux zOzH1nu@^Xf{P_)qOTIIv{chzdu5RD8kw+onvD(GCbFQyp+Q9Sf#^3E42U(-)7KXAe z{&MGR?=_)S4qo~%&&?}jak)Bwqs3X3iYXtBZ#=s2@ibrW=SzpzcQ0k^+GBbw^ZVvQ z+c#}mSs1X+AoAU@>HEWP86Wi7qvp4h!|bP$M3Yp`%Hz!rd;I=q^iE4=@La;m`rBK% zJ#?Ao#O3E|3oo9v;a%};?Jg$K%FcbS`l2gV)Ktpn1bpY(&cw{fz__@^pvpiV7?!fi zED{D{4I)o!<1fZcZR5~kUAM1vTk7(gu`ANRkuJ-}BE}+;^hD3}82`~16EAQd?7g>b z{jH9h_6B?){rrrK|5;do$%xHB9K=^(5isC0;9=uRX!Br91&SLm8t{W8gh2{f4VZxx za{K^O8!&zt8JH4;QXNXXmfdD{S-W?CoP9#ZW2vZ(5BvY=AG@vNRl|2h{_@>dyXIIv z$htCnn~|<{ux-HQ>;G;Dt*tpe(JOaqI22dWb($=*n2V$ikF=2x7JGzQsPgUkRZVMr%6~KkUMTgMxS!Bi0hBo z1@HKKAB4VV?yd9BExjt2zRSts@kgGulZ95!6I+yTljdiU$;I%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz==d_gbV~A)^PgeD>w)FC^$PBG%+e6yPlDifw_s1 zp8+V&#ni;e$na_3C2@J)6#0k!9}7>EY!PHVeR5Xc+>i**JWI}{!l$lo&yic09$CA< z_3Gi0pS!M#-IaXk|0-^I01N;5y|G2C4XK;h9&mi;y!^zb@@b3bqov!wTwmx}{$zS@ zyKPo+n5NTlx%Y>6Ipwmxug*`fTgd;B^$?rZ?&^l=DZ7@a`1)8Xa!6f_J*})c*ZTS| z-=AVDro{_w^-S_oQkegZy`tNm`}+mWa0mHqE~}THuCs5qWqRtWb4}vufz|3#cW!N; z`|n5To-p~iaJPp-2I(9Jm*)w;-4&`9Gc!$7V0qy8#6ID#{~{F^1v@-*zpokBvEj;* zMavJ^J2LEyGBQXp(lVcE)?UrT%*epFxW=H$Kpq%&vdSzH24W2&Pio^Y#!PMF&|zJ- zuXJ1L@|&?M(!h}{%f}+dB9gbx_43cZXVz6^*8knXcFBkR4U?DwA4oqxBjbM-7GSbr zGY|*y6<7oe_zZa1xDwht7*m1b28;&$APHfRLRJH2AcY)1z|;kdA4Z1sn_CZy`bhLD zB<_~JeMCQCPd%T_{&RKio4TU3+MWh{d^W>rx5PMK#C#*UrS2Q%&N6W5MHG<)7WN%i``@KCeE2pgtpRy!&yTzXa7H)g0Hwk`< zFRm$8oz>xZWKEl|_q#*0p8qu2ksA8C&w$F zX5TOInUn!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz@0>E#0^9t*6{h|D+J`{WF}_}nyT9$tk6SARTUy`j-sR2qi|d6_ zV8McOJd%d9T4h#wZmQ4U714a^z2AcLMNE2OGu5uz#v1PU86H|4;c)rJW34oS=U+k= zL}%RO{NMX)Z4c*>rjE{?R&II1yaip$0_5es`fU{V{BvMQ-h#J3Z%$6r@>X>?VXI(r z_=d{8=A(?x6FsJy{(JfOiWZN>_y50FuZZ37c+IZb+CSyiXVM=lzkItQ%00&E=cVH+ zXO{X{`?-EwBicNFM|Roi>m}?WrtGO^8UM4e z0Mibe0Y8W@4C1pIFas&Hlmv_hMh3Z%hSs{@b8fBl7v{bhq_j@Y*UIiCzbTKvZ_#z< zqXfNI#K&m0)rAB+SNI|tCi7$JvejR*lg<|ze)`pBzk+}9thz(9HPvIUil+&ze7802 z@PZ2`N}mJ@ukd(3ed)}~h`UPPFD_q`!~de(|9!*k@EN8H3_2e~hUxQ33b|z*ne>o% zqG`3sev_ZdE$Oz$49;xP5stY0UXo!_vyaTTNd_O3oUY%Ht)0B$03qY&z|==@79L`P1tRGq3%@VW`<9m-{;G* jo7@PM&~swCwKio{!24hkqauaWM{6W>e|!@4S}FtpH7!u7 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/NoissuingDistributionPointCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/NoissuingDistributionPointCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..c4f182ad7f9771eec58373f4320d23f4db7e3ef1 GIT binary patch literal 919 zcmXqLVxDZ!#8kb2nTe5!iP6V^myJ`a&72-Vi+xYiuWk{QW`Cs__HD&x_FJwKcJ_+@+VK7SC)=>v#R|NZvt(ahOFP@VC|b`t zVOK@Q``MW{&T{O1=eg_gE3K)fC*D^b(zKfvY1JOH^UH#@3s}B?-)J&xbC&AvuZ_Ex zWqvt(sCR4V&&Zy4Q8lv@Idv{(D?9WUY?xd5%t$DxtR-rh%d@kqDq^DKWV6VzkC;%nr_C-|Lpej=!f<{T2#W1Z#`XS8JKCpy{F*eGZC>BM;@6@TrJuyY;+>w z+0QxKmME{Z&uD+tKOsDpXU6{Hrt<4P8f5(}{j=-bnXNxBIX=Cwd+8TvWlv(HP|M%O zkH^o}UF|=&EB~k5hBXrHU)~GmF@@gsh;8MmU-Y+GHFdS=)P>#)a-613Kf$v4kb8g0 fQr3T$E-JNfOYUfy;?;jiX|7;ZB=ebFyXOD^C$VM| literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/OldCRLnextUpdateCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/OldCRLnextUpdateCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..2666670afb5e8eaf3032e9ede9a7768e2f17dfa5 GIT binary patch literal 910 zcmXqLV(v0%Vk%m|%*4pV#K>pB%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz>h?0QxhX2!~R$ep~s8m=dG=}eQW*e63+0zto7a96N|!=H96k= zwm;Hz|LXbDOJ`oSs0M~CvRR^c%WP}&7Vb8mAA!r~FZ*%-)S5W=4qN|eQh(#jR_r#) zRqOQsr?T`phcVj^u6>d$UH^kJ9CxqD2`OFsBjo4W)$-vzdF86o4(lcr?d=o2^J_=o zopkx=FsI*MPjxtsUr|2u?~Rd(d~W->H^GgbSAG?1uCrRkP_jiya)piM9%ixm)la8L zpK-f=)j@coH0P3PhGU%{Jg0p!SEyz=Ed62g>&68c&%6K17>C9G*_P5fO*Y4EsqX(- zmmX-Hy|X?{_>g9gw#r}k&$DOyO$?M=arSUs;)|P1%!~|-i)#$34CH~~D67mOVIbBZ z@}xHYV$9Sw4jtBY`%1T^F25POA`KkjvV1IJEF$M_$=`}P(>MK>f~cndnrXdSXDfsa z_(1yk85#exumF<~n}IlpufQT;z-Pe2#+A_K!I%mZH()g22T2Hn6tWsH11aSA0j4xy z{4g@?RM|H5c)@2z(Wt}K9$vkFK1S5Gnf^QEZIgNAev$5~CyM+H(%;`nzw1?8y)zUe z*LS|y!~1tjI9}V7-*oB(+$<$iUFhP~AWkq<~piE+9WAGdU9|9$;u>Y@$$H zngm47jvyWo8_0?C8X6cF0-=Smfq_AkIIpn*PzuI1NFvcdGB;;o;VgH}(& zvxipVo>N&ny_l?orYK($WY{NsMQ_SV?y9U#$%E&T_PmsPe8$t(U-Fn~V-~O8N8`n^ zlkB&wd9-Z4smIBKtZR>O%S)&xWc;ybS+MP+*56Nhm75|pyoCN4tX{9`Hpf-s!PF^c ze9|i(HhYA;yD%a7TS%A1!|zSFR{~Xtpl8%WVR-VYj%*epF zxW=H$Kpq&jvdSzH24W2&eqZ7i{^T&IPF*wUfFQTd>T#_DA0Hh+Iblagcrm76Ai310FW6gf{dSkN^u%#W&>m0j5V_{4g>kO;Ek%@u(wF+wiUlzZTm|V;7#i+rM>n+p;Pb?3n#W zC-n2rJ+70eCe)&X|IeM{Q&%EaUbn8{qp~W8V zlRuoy(qXe&%fc#|`fq<|sAcTE#(C4K?-}?W7gtcrh9&w-U$Wv>SCV~U6<QQkt4o9c?Dk|*qf hK6B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pj10NEtkui{hSR))@Xr$nqSWu9em#$z~l5ecw>}b%$ zsD$hfMpg#qCPsb+pg0#(6C)$TrhL)h z_(1yk85#exumF<~n*l$FFAUZ;(Oa^KoWr`qEfH7?#fvggV&5Rt&z|;ziWk!Yx-EA5#HSTfdru>V$d~D9or5v|r zOl7W-Tu`)c{inK#HOh5YZt=u!y?#wXx7+ue(@{Ga&YMeQ9e*eGR$R|D-?qn7d#%=8 zyG5@J_D=4)&;NamuEUY}XB3Q8o^(HE>wM=UdC8$kU#E3V?CIGr7qUpNbz72mNBiP( z!)F%eqU?8@IBbk^zE!<0D3r3^uk(BT{&mqcKdajx$u9dX{riagZi)L`8cW*mv6bAd z4OqISt((7ejp@%D?^s$t2oy{E*4A2ojegnVEKZrj$r)=jN{^#t>+4U^t uvpJUgUgu_!XE@^QkaPE3*88ew+q-WU-Z%L9>!GZP~d6CB(+$<$iUFhP{u$Cq<~piIKa?I!8fs>ATuvr!LTIX zSi#xRKu(<3(7?bD2rY~a3=E>gd5sMWjf`Pj1Ah{2gF1&iZEPAS&ACRacEXt(UiXQIKO zk2>d`P&9vkVseVJ(zDk^`F3lW+M}<3x%T{{xAX7ZvoTE1CwSJ+ca{^&$mp+U+uqXa zzcBr9O8U*}Wzv5>Z;P+cD9n>7547X{U=+c~#LURRxVZ7GLE|X{d0@oJDziu!h&71(`O=$c zY}8OwYubJ5VPt3+b6pvbTy$*?2GI4}(ZW1Nv8r&jX3dGULrl?)T_UVPmbv7`UuY?IIL>&hRw z{pS{4>m#MonEJ&2DQn(ZgHx*}929i8^ddIb-|(;U0`?V)#a61Y8x@~r`=O}sWTn1+ zU+PzBgP7-iDptRWj27^ID)D+}^Knzz%?7T=e>QZf`NYnDBD&+~nR`<+y@Pr-eqs;$ zzb$QHz=5x|Szq1#ri#VrX2|gfE4aH}lfC5iXURt{ze}2Xj_EgUyuVax-U-F|nihgC z+6{C53twM)t8cxxom2kpFUqo6!HrM6n77A9?QD^E4JgWTPvYV?=oGy7Q2+B!o3pn$ lt~an-*%b%Xr|slm)$Vy7WPNti%vHzxH$K$=E@r5~2mmf+VE_OC literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/P12Mapping1to3subsubCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/P12Mapping1to3subsubCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..91fc36a7273717ff4e09012fc0052f4d0e81351e GIT binary patch literal 980 zcmXqLV!mL|#I$1pGZP~d6CB(+$<$iUDLrhr*kEWpr6!8fs>ATuvr!LTIXSfRKy z$=T6BPMp`!z`zg)EsPBe45Gw&jSUQqjA2}ZAQCN9GEe}yh*?+?n}rZNn;4al{l&=2 zz}&>h&tTBR$i>ve$jGo&u{D@Osx!6q=~rceJ*@7JgdDdwGWBQ zGefWaZ7)zv*hf)TY^r9XDV`v`%79UIB4Z)9Vq*m_}JcQ#)6wA(eAVP zD>sJcC?9XSaOieWqZn@>`^_2qyl_nDcIer$OZB&} z_nq&x{+V^1b;Bv++^nztDpxTT}EH+V<$ zv|W9^BGngCP8}9b6)s=Hv@!H=bwrRh6EhlwW)vQaff`7eB1oT% zfs}y+l1dgNHV1ON0@EunUKttG7r)yuXU)2^TJKrKWGB`aiBx@OQ{46YqPNb>{hRV8 z9`fRRWIgTMiidCA^|%8vgmyPv`_z%Z?pEOx~&Y4+ou?HO(s8T4TYnMu$gN zW=**7ab4`*uiE?W(JRxnyrgz~kyu>e9G#He`K&1KWx4LrOIZ&zeAgX= zZ}t1VenoXAomuuhuy&)c(q;jq?gi}EKdMQyJ6!1 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/P1Mapping1to234CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/P1Mapping1to234CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..3500737ab8e8ede4abbef3afc4fb43cefc3f9d93 GIT binary patch literal 1017 zcmXqLV*YB-#B_H7GZP~d6QhvB(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pj178xYku{KpSR)c(sNkDeP>`9Iu3%V_Z)9wu;OuD7 z#HfVq5k^)9<|amd2B0_>QxhX2!wcur)pf5d4Q2V)gg7{TdYdl%fA3Ba#*5qh&plqK zFkdBFw>Q+E|L5b|0WuD9Y}E%R{y2Q~+)kBZei4_dKU}=DT&1jY*lt!>_TCzphmkBpnNzXL~_P|Js@P#rCXz z8EXoci~GEhZL7@xTNw4zC3uB-^{Q`+I-kkijl1^Fw(wFXhl_JznruSHQWM5w2dczx zG^JkkKm6cN;Eu%-kq^H=o%w?!`=!;E^sib8_ogy2GcqtPZhUUg_{2aS7?85cED{D{ z4I)o!<1fZcZR5~kUAM1vTk7(gu`ANRF)qu;BE}*zm78&;XT_?rTlJj0YdS=Je*Nw~ z$$$@}pP!NOKMM;m4Y3)BgZK(80tS2rJZxMEZ61uNKyd>`1AdT%Fi0V*0W**SN&^K{ zK)eP<27@RNPZ1;?VBlvUfvgpY&4g2i8K(>ja#{c;YG7JmWN_s=<(XHw^ecl&NY(=50$^%eH%aY#-E= z-8tN6tY3DlVMf)AvytC#8eUm&)S0m&VX8NO$6MoLpVQ4B$v<~{`9Stqr4{3jB(+$<$iUFhP}V>iq<~piB*0L?H?g1~GcR4iuq5Be z*hInE(Lhd|*U-Sg5C|=d4GavT#CeSk42_IoT!R1-ty3_NgIFhyXo*g-J zHR#0mS`Nt|_U8ABTb?hfvDh{%JoOh-8JowGdL>J>W0g&94F^ppKB$*myr99+YwN6q zJ?{!Oue6hicC}(OUe6aECiG@@=ZR~+R$gJ80q5qJibySsRAKJ>vS`Z9t-JoE&YF2j zv2u5|BezfhQ&!fc#`1!r%}S}?Zi#-}xlPGMK?oyddM z0f{@R56rat_^qhLKE3u=#nrt^Nj>{QDnD-PuC%_J@JsB_RQ}~GmtUhVdF|@^I%K`Dl}k1;jtJvfRrhM z^qCo$7)T(iL}Ig|$gm*Eup!4dFckx19O%iMc=_~avrb&(*Ip#CnDH)OmXo>0bT3J_ z9mlTasWf&)FPK{;f^ z*T%d|Yx1ew*(X2SS3AFUn$K^&^~d&-ii9P{8^Zb-S6fI|dr#Ug{X3YkMC#|ak~x?E zMPz=z^rg7kuTu5Mq@oTr(<3J@9ph%Rypb={+BfZ!)$zox=Waiu=Sv=9w|_r1{Qv2Q z1vc9g9vJSE>j}^7k_Zbw@~39^`cs}$)dYSx9<4}!a@jY(+{vIJdlqkOM)9e|^B$dJ n(+l3+JI7S#AbXoU&s*M0N*mdD_`g;QuiN%xK>&-*arYJg&KqdS literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/P1anyPolicyMapping1to2CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/P1anyPolicyMapping1to2CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..3818b6a7f5193ef14738d6989e2c355159b95d7d GIT binary patch literal 1329 zcmXqLV%0ThVi8@y%*4pV#As%~%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXAcRC~R1B0L)<_2!CgxQJ78GRWr7IYg zfKE9N{7DL z_wTWaKVQ#$e(AIWs_QRg9cwNg`(wD&d{_Ri#6C-&e#)#T&C zGT#qpmHzjSOPld**`l9UC%hGwJ5;F=zwF~x%LR_bldtbun)CeA4$d3KQBt|Jb)T0W zIlOh(H@&9(^Pm4lGQCs%iHBK+Iv{FzA$;d2L z0HTtNRE5&w)FOqv{F2P%RE4yn{9J{?(!?BKk_3ucDkK&c=OzK!$e9ON7yvU5BLnASYol+AzFv4#^fx5s$_2~AZ`BKIQ!ID=69uZ;IF2ON*%x>mK(zOGc&U)XX>;n^#X`KEF3 zb!E8inY(hnpJQo}V%W`ToEI}*zX~o^one&QvFFui!6mwL(!ZxZe>vsZJ+97$<{@Iw c4c_Y2oNFm%FOIG#ed3^Sx46Y$e`z-x04;>%ivR!s literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/PanyPolicyMapping1to2CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/PanyPolicyMapping1to2CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..db220487cc05a1fb94077b7a3943f3693b342098 GIT binary patch literal 965 zcmXqLVm@fl#I$k&GZP~d6QijCFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`PjgJ2S^Q8rM7SR)mXm{%E)pOcwfso`9Iu3%V_ zZ=~StXwbx{gzOzgRtDxKMt%mMI2ThBBO}8*?Mf}KrB-=Qnq`0AQ_m^goENG5ZIfQ# ztDvq_jn9ANkGQ`%wQ-mExc0MXUcJgDF7*SJO}mzxDTb_i<;QSjtC2M~&ukqd?K7useP-@u zWn21LYe#A)=NEl%pUwpIm^V%$iTR`ajik)Dg$|7 zaLOvPNEnDUh&-u{zZf&MjYEfZ-M-RosmpK1u1EvNyDT4z7>kHIv%0>s?NR-klhz!+ zRCdAm*w6Ca27Dm>{EUqMSy+H6iOql?#1{tfSq+$hlmQP&Kn28WU}P{51o0GDxC}T9 z*w|QrOa=orkdPushm3)gfdm^@LYoI;D$p9a*P5KC@@AD8GN1z*VxClQrPlcYE*{GJ}X!eDrU^_D@@eYX2CKeYazms&RS z6vLsLvJukL-kKlee4x^{JndM#7mv#8GVz`2dqcAog5Bi1Z`3`#bnJ=ssh6`Re%WzT z&*G2Ep6G|^t)_e5DQR7=td5cs_xmB=QZe~)dtq*UUO?e*pIM!&e?98mSby2z$gXn$ DomXZP literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP1234CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP1234CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..36cf4ce24ea9f01fb8f333080559a460cf69a341 GIT binary patch literal 964 zcmXqLVm@Hd#I#}oGZP~d6Qi;LFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pj11}P-kus2gSR)vapOcxK3A8={Xr76Jv!g*1qY|<& z7+D#Zn;7{SfZ|+CO^l2TPiGr+{z$%g<#(jN*=zgYhhbqS&*?N>)D#SQ6TU&(;4!Ov z#`5x(`dXDw>-p|&wo3Hd zuyp&wv-gP1i<1BAKFw4`W)!I_Ac~0Mqo==g6k0MQYa%wzGKJy*S7Uy)loDNA;@N`L_$ zNIyR#<9`+wU;<(@;0N)AL3~yNW*}w20}@aH@fsKz3>-l`1r{p<3!ns7LYoI;Do~pN zBMOfRg~yD-V?mBtVEP2cEF*)B&ZFL?`(GOFIy*DRGqKEN)f-pE-7AjXy0Y#_#Hl5m zA3yxR!dAVf$Fd5^m*-AO+$}R&yzS=QKPRo*>ez(3j&q*85PojW0-c1uZ|#g5Pan7zXPaSV zJfyPkaaJIyw$GOd8eRHkU^72ETP(mj4%&C}eJWkd32UpZVi iL$q!aW2*9dRvBB{G^TA?Z(L`xt4)nu+gWml%?bc&uWg+G literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP1234subCAP123Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP1234subCAP123Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..1ab7ab104f656479536dad0124973f23ede123e1 GIT binary patch literal 948 zcmXqLV%}iT#57|8GZP~d6CB(+$<$iUFhP|838q<~piFd#oCGdU9|9$;u>Y@*=o zXdoxfYiM9#2!s~K1_lOE;=INNKsgxKAdp166bd9`<{= zA|IXRZe6|F_{Mg*C7GA@?)*I2TH#Xp!Ou;0dow#;tv&r(JuuEB_tdPYXDi;M{#i1w z>p$bQ7s8s-`{i#xH)ISDx3;>wT%qj$r<}yYQ}V6gF4n+Wf>?`sxqZ!+#yt~~W;w(7d{Ugnv4J?E+EQE}!4jz2Z;7-=<@FozLx+nV1d%*Mv zj6FsMe);xyH(M3orz@;aJDRAHdscnLqLXiJ?p6K0E+p|K^`q(mwuE*64oQg4neSG# z$=8R==Gpn#o-&IZ)P+2GCa70js#W`DaYChS(oXG1X6?+I+4;)aFC1?_^`HNLXTE6F z$Hje8hjXqYzmMUfAb*r-p5Bf zRO%K@43hdJu_G$y1n(BZo6Ec1IlbO*`5+;AB%Appcfj?|H@{yp9o`e9D&H*kxoh&F S7d;n$Wz~1&Oty@++YJEsNn4u$ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP1234subsubCAP123P12Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP1234subsubCAP123P12Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..df834464bbad670ff2ad805f1f60e742a0388525 GIT binary patch literal 947 zcmXqLVqS01#58>YGZP~d6CB(+$<$iUFhP|-jhq<~piA|O8}GdU9|9$;u>Y@$$H zn&j*VVj9Sa^BNi$7y_Y%v4Md>lsK=k0Z<&qH3%osN_7KOh?R1fR>Exs+HBCosD$i2 zMpg#qCPsb+pg0#(6C)$Tq8E4Fw#EI)-G6juiFxLv$wzJOUrEp2;`g`4R3_8*WV3RX zd*lPtf|?oneZP0C*V8oIVV#nkF-`Q+!aVtKcaD#t0jf^j3x2;*o^3UWF?!;oXia&U zb!y9g+}h(*yWQ)YWyL|ipBYM1{zoqTrM^Vw$61a$X36}ABhT8r4L@__YQXV>2g)8M z2u)z*NZ-FwdCkOipIrY6)g1}k%65PH%q>66PuJMxt1rFA((Ow&53ZeCd4QA4YKF@t9eFkn z_O}^E&op)(-shoyU*r39fzhxe z#mKN{&x&iu`JR8vnt4BXRmoD>_Oz=T_Fq_>d^mNMpk%et`v$op3#0trPA)Ue7;LV?XJ95Hw~6!kdzUk8{~XpiNhP&B=r;1*WgsK` zXQI02r)8Ycm*ySaczW@RQlUQQPO;myt$m$sWojET(@yXI#NM?1()C02TvLue&Ripy z(SGkS*Po-h<%cc^UuC-f^k&cd9~ze#oc_41??1F`NAD7@t*dl(RW5ElZ^xG>@ghuJ zX4AzDAMd|9+}p7?Fs<&xy*!B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pj15XmIku(s8SR)XSpOcxK3A8={Xr6+zqd^m+60#>4 zSs9p{82K51;#^EkjEoHPYaSfylB$pw@2~E+TfgC5#+UsnH@g$lO#j!j7Cg#ddtdX~ zH4mW~`|~*7yqF#~Kjo*$_oKON6Fbg1FaCQ~ewNr#CdnN$wnlTBW;kbhx)q+R26i&W2^$G89hy>;LTh)riyWOw5c7jEftW8#FF4kOu~$tTKy)fmnmcliK); zF;m+(bXeEzE8Uj5{ATQmG;nOo^0A1qi1cW1-QwjGNqT2%J8ehdWTDPiFOm)TK>GO^ z8UM4e0Mief0Y8W@4C1pIFas$A9*}?vh}Xc#U|GR^@fD^FaZ|^M?;wzk4mHS@y;FPu@qnXgSx6`+dhH bx|N^ltoPt&d%{1l%Rs|Z>1)F6xcPmvYv_IUU`-!zvqQ+@bRI_C>-=2TJ z0_rZQ?ltGUpD!VBenINo>kbiYHmU2E?UyaOeCf!weQ6VaR{T7c_-?`^-Iw~6va1i@ zeEy~F#lAv?FO}cwox-1=TW)6b|IYoZ?DzPJ%5S>9JvP6Ued>h5gX<F9JM>?7F}pEMC++od8(;G_(@j&ieJon_GN9pK=+#ts8{V64e1vq%_-HHh?RaNXkN z6iIq#YddX6;bfuCS1*#m@h;29BE}+ej^WndRg)cl99U4f_F%<1+3V`x<{9vT^z$<^ z{%2tUrX)54eh^<6#Ah{N22uv9AOQsyIRhC39yYFoHV?*Bph5#i6dn_Dd;yamFuoWW z!o%mTnyj`wDPDT-8Oy^T?wj9V$j0XR_sY~w@vpW$+j^j&W6k5FkKfo<-{p7yd|1A} zebvRiHtSZzO`pIeYuIZ3xGdd!+ppW)smEO(E|_x6^TqN*hghAC=4oEJU&TOQxhX2!%dDS7WOOEQtzHS)t>&c;Y)zn`$ZT3S{hz|Zg{FVeBMOI9)sFL zt{lpj&G$4vu6Vd`yMKjf@fO~=smo6@aXIglViAuBW;=50oB00f!!~PGCdwYTwy(&B z$M5dyt)7jrDi=9P(U(ML|^h|tX-Ic6*-@#VtWuWYsj&HP7PLw=RmdgX*;*=&rYno@%Ex|J?q1du|g_`4ER9$`577i zv#6gOZr;0H+vgA}qFFas&%_yMLoVEiyLbQaZj z@x@<0acOg{!YlfeNwS<)4U$`%l9H13Uj}QD{a_vzw_NL zHj@w6Yi3;XD5|M!c(PzBTUBBr?}9Dm>{`O1$_!_A_qx^>|% z7n|+4SG!Srjve3Bd2_3utCX5K8gu?mZ09}fx-EhAPgChlNilCB!`Z98dWu%LZ?gJe zdi||^rG-)D@_p<*>Lp+EQdzrM*3SIz$oy;CvYhB?y#d^NPiU&d?|GuFmAmoU{q(K} zNjw2L0@-c3`70#OOnrGFVGa9{{j+|!bj>bSd&QdCaW%FvB>193mdD{sqKhj}C0`1; z`1#_m+z0F-8RsTm-S_aIumY>}y9xT%X_4XDwq?mSy5hgqo-`6Pw=OQ@T0U=uh|`$~ zb8kuWeqMF*+@)l7i^z_1QZX8?Ow5c7jEidwstn|Tp((4(B4HrbAaai3*56f=9ex~G zP`UPC#W~sQ>fh#p6M!rqix`W@%Rk%V!bJSoWG@>1?MTQL_`xcjX}|~4&(FyCpM?dO zq}UAjL408lpVfdFNEwKO1Qb{V4EPLq*tinfJQ!1f3JuUx9x#3w8GPq-cwSw)OH4uN zMhlyrwy}EihK%dI`(!hwdU5`HS9Bz{xOx9si3>0E!)6vv)9AZm|7MSZ`;M?bkFK^o zU8Hg8T0z&oyHY0?#f$3mh!%NlyI*%HGGcx2(o>F|e{(MQ`C2Y1@v}A9bwTy=?4X5{ z*gtUGTqByJr>c9Q{D#&!^)1|YRP+wz8lRD_|6`gtZO?Q0h@Ej8rfSS)K67||?WH_b zn+9Y(!d3-s$KziR3BVUnK z$uDpE|C%#X(e}rNJ5LWgzw+Btcgd5sN#s$g7$ND^(;G*E}ws({T_gv9}d22G4g z$bMvGWngY%#rDziu!h&713 z{Ie}COvH~(_M*|>j)ZK1AFR@u;G`hS$0Eie(y1Wc@_Ws0&g=K$;^t+1vkZ`T=rG^| z>E~x;{LjJyOk8XR;vl{Pi+};20S_BjLYoI;Dp1^j(SRQ$Aq-N;YQPMnkmCoK27&Rz z$WUy*;vHK{1jm~{;?_-z{(N|9v_IzNl&uM(2@k)|TJdVhUq%7#Nuj%EvMyy}Phra)Tp-)rpO7ZaeDSJErpM=*qGu3v@2LtY6Ub=3{Zw7t{Tm z?|hhjr(C*F)Euye&o99?+GOXmwCHh-5KyAR*>#g?D{HRI{zuhaOy-*P^2U3l#x z`8E2v_unbnH-BYMUcZUEdF`X;59DurJ9t5~&0RI?_w&d4MdfAx<`m9ev~)S^3;~O8 S=J(<*@3+3mz3tReJ3jzeB5(Zw literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP12CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP12CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..dc1b60de0e85926c5f12a4279ca12d9841517ac7 GIT binary patch literal 934 zcmXqLVqRp>#MHHbnTe5!iBZ*nmyJ`a&7A1X>?pXr$omXwbx{gzN`K zRtDxKMt%mMI2ThBBO}9=+!J2=*2TBByzi9_@>99n*I{tYJU!#R+jTd#OD^XZp1OT= zmS`?FyYs&7R4vII|+h z0{=yk0gatZDR;uAU(exii`nH?ZZISK;_8W4msdP`enVG(%L3cw3V#3BYFwF@ao3ow z#_sP*|0}IC_XW*Wp4OeYBg+1eZmd$tC*P#g2U*VPRMy@|=rezD;a$$WZ3dg3JigTZ zO>P_W)~=te@~ixXH#SYR5cjOmV6{SoLr3vLte#X-I^@4H~Bz$OFSrR+$ADm<=LNYU3}) zOl{-PVO_VcbX)53o3Sg>z>zJ>$0EieawFdK(X4~!T59K-&lK|&h-z6qGBn@=>E~x; z{LjJyOg?M|{2;zCh|g-k45SQrKmsZtUIQb8fhvfnz#?ZL1C-!OX!Br91!^;3MBy%^Lx5EotuJ%qU+*0SxCKmbNh_Y?#?6+OUS0bz)h|2Bwz3jsx z_8+T^RKhszQY>C%Y2JIaVuQpt?@GzA590iX4+Nir#M?&s>y}mZe=H;)0!79_w zpPit;am$`pOJaOWC8HQ`&VT#lr=iR)^~R=u;r|j=Rk<#{qs#Jmy2)el2F4?1kDqUB z?bQ4^-R9fhr|ZpcY!TwyrzbG$aSmsHl783jg}+$+R*LVa*m2@yIPV=9nF9ec*a9<{ XO0G6LEZ2Qfv6)#})3ZIe^3N*(v2a;C literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP12subCAP1Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP12subCAP1Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..081f951b80d946602710464608e74347c20d5215 GIT binary patch literal 912 zcmXqLV(u|$Vk%j{%*4pV#K>sC%f_kI=F#?@mywa1mBGNnklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWlrRtjDPR`n56I8SOwI&~2N)VDI6E51 ziSrs77#ISfg|UHwL6kVJv4NqHF^p^AOQKD(2GS6lL{MxhE=_WF3@|ikVpKx*3nME7 za}y&!15licsfm%1;c%Z>?Umr>MfpEGofbrOZGEzP;ftG|ybC7Y{@8n3B$H`|EyYHHBgmPH#>1zgjApQJ|jQ?3! zfQg9BKpezZU=c9jGvHz4N@(+7Oa+P?FdFcKB!oclz_H6TFr9V%Yy?f7`nXF4U?#oMR^2*|>*#6SZZsEFfQ`VfGuXoZU J!z5*1EC3t^T8RJv literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP12subsubCAP1P2Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP12subsubCAP1P2Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..e8d0bb8ba8df7afcbc10f400388b5bf1418a2ba0 GIT binary patch literal 922 zcmXqLVxDHu#8kI{nTe5!iILHOmyJ`a&7wY+_{=5IfpU~gOrDqze`m)n*Jql^?|RixqPPUh*W-GbMiLp?2r36r(SIiWb1F5 z>Dm5~bx!5n1KWfv?y6p~JLo*qY^R@q_@R?b%!~|-i)#$34CH}fDXYvPVIbBZqBQS1 z-wuy+oP1WX`>y#$D2Mf)z6OqbSw0pq7Lnsi&6i*JrSi1q{_Rh(nYZ7a`Zn{O0Ut;| zKO^IR78YP~Vl&_e@r6NrRs&`rWgrd`P+$=-;4|Q1<4S1rU`z!nG+;uGA7H8j#t$Qd z_kQnL?97{^oEE!y&$|)v^2$?=w5{huu3ES_?)(=Tp{HiORMv1-X_k;&la&njq|WnN zz9;RLD5UhixZY@f>#%sVTC%Lq?asO3KE+OfY}djiUVdMz^sVWyf6})Cj+J6TTP`y^ zzajQu`0i&=hE2D1S zygW5{Rv9Db$K>O4zSl=<%YEGQ$mT%hwcabM(kr*;+~+_OxR{Q`2L}iKq literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP2subCA2Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP2subCA2Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..c734009d050a16df7d6c8242d37decabbe8cfeb6 GIT binary patch literal 918 zcmXqLVxDBs#8kC_nTe5!iBZUamyJ`a&7A1lk;6q)=R%O>;pzt z2IeM4eg>d87gG}>Bg28KHD3~AIPTV5wCt!!IHbzDMt}bXv!C{#?l5^ie$y_J&5@YA z+<4Pl!Hq_WToc~5gqYoGTcYb=jxX&jI-I#u;#3q)w7U) zlYNV~?lWQ*{i@^r^j3lRIlGeGt7Jpp&Tc&06xX*uX=C64sp9i$+|%7}9-AW(IH~c$ zT))W1t`^@2f>in6Q85tNCH+CB|b{NP5gHcwQMZ!R=K_r5)MMZj# zcF+_r+ob|UB7tAmTb%?)wJaZt7>kIw&MW2}?B$KNsY~}8%b%&bG~>@ca74@UGcx{X zVF4x{HUoZ;dBPw*s{u2RG7tv|D6jyNgaHp5S3;WyV=7Rg0TYl1lu!XFYhYwRjxS(} z1I8C4gH!jcCA*dt|BT)jG(Se zuj(9=tvmkaERoCEpfUBV=!18R_O(|U@)u8!xtSVTw^!QfRqWT)Ej*^uXMQr{W7Arb@8qJa?ZsLEXT=r}h%Z}hl z$G$R|${baj;w{2??03*+rS|o5&O7rJP0K|ke;j{QDYUNg7pGpN*^YH==hs;`EHr4} zZC&b6zwVXGGjU(mpBGDdmhQb+%n`Sq|IKrey*zp*E}j=wel;yvc~ZjHm~}h5X}ACK SiE6w4&h>q7x967?-(~=dM@wq} literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP2subCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/PoliciesP2subCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..0f3fbbb01a192281454dcfd134ec032ea8a04e88 GIT binary patch literal 901 zcmXqLVs12OV#-{=%*4pV#3*3E%f_kI=F#?@mywa1mBGNlklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6foceDPR_6chApHQE+xNkQ3)MG%zp( zLJMO91A{1WUSk78BV!oXz>7p1qzoh=HV6jf=VT^l0&Na3QYbD>0@~HYsD$hRMpg#q zCPsb+pg0#(6C)$T0)wk2Rzy3B>aLrqi%li8A`t+jH-F8=w{SJ0K zd_3_&wpDhg)c(irSCp#X9sPEFdclIZidJ?{=Ttpgb;mt%+Jan_Rb96mJS>YGUFWgl8Kp-fpKw-L6w0#FbrjtStJa^8bl%(TU4a?Xa`O4 zvRx`rBog>_z12x@Jj?R2h_Q&o*|ZeTGbku3oUyLaO!Br8U(I@Ea4gI6Gcx{XVF9Kb zHUoZ;dBPw*s{u2RG7tv|D6jz2g8>g4S3;WyV=7Rg0TXik023H6ei#`_vVB>3H$LT^ zyNUPE-Wu|S*5P0ul-QaK{e&u z!?T+!E_<~IntR`nDq5j+-*Sz658uyOE$=K0+4|A~x8C`qI`wJM^ZQJ@x2blWO`Eqa z=U&5$Gso7wWQ$aaxVwF+i{-25YYOkIZ&VY?F_nAJkvjd)(PN7qNzGYXV<|ED*!nuX z;N|zqe$LXGTYojR-L6r^dO}0T$rYdOf2wTlzEU}LGWU@KMb%$gZ;I*bC@b&(P_V96 zubDqEwA1X>?ptl;cu(8Q>O>;*d87gG}>Bg2D|o43|nSlT-Ie45oC=C*$iUY$JmPVxNhX%`M(lHbx?Zk8O* zb@P+Vfc+#C?YqRY4e?B(j>7Bm@d?5Y& zjEw(TSb(XA&43@o7Y6ZJ4VZzH0S`z(1;lG$WH1m1@f27D4ETT&TnTL+jHy6v2F%Fu z1x#|l_+n&;E!g8c!T7))9d6CH*Q27|+^kTJb3Wr<^*TB%arMpqStb_sb2V@8nUE4C zKmBBPcjC3yx$0BvPH%3F(|&&B-~5zgMHiG3b!TL7<@&wXYus>--{4_jei=32 zd*5TJD*0GB?DX;Cnr2`eAF#ZOVcaD4Ln1~~wa`(W1q literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/RFC3280MandatoryAttributeTypesCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/RFC3280MandatoryAttributeTypesCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..9c648a30be041dfd3e995e0d272db04c3576a297 GIT binary patch literal 980 zcmXqLV!mL|#I$1pGZP~d6Jvq_FB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`PjgT~1u+9PZr$i~GvNv(78C!G{VNipX1{4zrY1345y z0id%=l9AkKC}_YBavp~;hi_t0WlmyViXo2y7f6UznAzCG6y^#&VJ2rsgC<5L3cV`IY8H!3Z1iFUIB&u;fA_}9MZTk{#OEoGOV`TnSyr9Rt& z@9a^tBIQ{#1gAW{w#etz3Z+`9JL^6xb^kq>n5TLvaRIZm{k`(QtSZ%Ydq12yxyFA> z?(M|2oU3Q_>|7qt%KN&UvB+jy&%Jf4%^c3GiFS#SDt~CDadg>Q@xAjMRweFTIcM%) z0W*P>zKoOmrS587>^so^dDH7la+%wdj-P+_YBHbZymHN0Bgt1`otsRoH`cToyPw&{ zyKaB5LW`i^8S_m?7|SN|=RDLmtn*~zWnyMzU|d{dP-P$w3_@9D76}8f29YPV@fTyJ zwsGjNuG?3-Ep_?L*cEBuWFyPRBE}-}Ay6Xe{W-_u+c%__WHaqC;xeB3+JFzFpP!NO zKMM;mA+i~WgZK(80tS2rJZxMEZ61uNKyd>`aP-LvgA}qFFas&%_yML@VEiyLsHaA9 z*q23ZkmEjoD9=llQCd=?CC?|JT;ZQ9Q{=Z6073-_+BE)DBf@Tg|*JY3ZIq33tU z>!75xe@naza+K#Phpp99aFa<8zUn(k|9+j}yk*WO!uBVxiw(RHa+TLWL&nwQX6WK{ zPd-VPo&w#V=*v8*DV&xzo9(nVZBX0YG@UzVrI6n8`-OT(;_CSCFRk=`WGrvP;Qagl zp$)R8x*LjK?YD87Tv^t1Pb2xEUh@8h8tM7_T;uj{dK;f?^wfLWM83uAT9jocX->82 z3%qQZ`t7li*c2!8G!B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`PjgU0#f*~2c(QxhX2!~U9+&gUmN|KH50mRaCG%Q950%iN?k z>*n99=bo(ny)*9W>wkSYNr}o|R(w1Xv1^*Wly<^`zps0L&3qEJej(rF`x092uOlaQ zcufw9AG^}+VUU&%8t$bFKILHr?OU80aGC}yS8x5yIHKv zGsJ#g=u4O+A!K^tWzFfc^H_zXH!tI~bnQKO*mUaV_i?+w9OXDFv*cMIlbz_Le-cNw zmg4ynOqvh`et>Bg7(a{*9KSjY4*e8b%IYmtI(^UoiCVi;jWZ*@*`GfD-;86k=%h7sSSMyw zY`0LB-+M3jZAarg&mX#z_wpv6{J`hFMQ=*Gl~?Ygv*G@FKc+r-#_)+t>FU+4dYKpB%f_kI=F#?@mywa1mBGNlklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6foceDPR_6chApHQE+xNkQ3)MG%zp( zLJMO91A{1WUSk78BV!oXz>P#3#0*3rHt+_emgQ%srYIDbCIRhfVpKwQJR>Uua}y&! z15licsfm%1VX4H@MVvhHYmV&Y4f$GgQ!^iEwWn783i zKta)$vO^c1Jm2)_qE1Cc+=|K#OUes0o;dMO&B$7rKF#${om*VG*W(~XuicqvWzI6B z{Pa1^dG6ZcUvq^|+`076W4(Y&Ve#9Y3jFbt)*H6GJl3#qy6}8o$=gKUrlK2?MbPkqE{X73n?NK~ubJ zmkJb#1b$s_brKxMvV1IJEF#nLC(T^&vaDox{FNWSC2yXWWnJ(d9K*8wjEw(TSb(X9 z%|IMvo&pOn>J50j>tx z2NW!NzVbT9909w!ldg_|?~3VW4X=q?&;M-;w&^|1p7%B&Ec2`+2XjZ%lC39e E04AhSdjJ3c literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/RolloverfromPrintableStringtoUTF8StringCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/RolloverfromPrintableStringtoUTF8StringCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..32ddfe3e3152533d593e864cf9e96bc475a59f0c GIT binary patch literal 935 zcmXqLVqR>}#MHfjnTe5!i80xLmyJ`a&7ZZvtkDa~&&kOzOD$4JE6UGR2q?oO>?UZ4?!avQn-FJSH?l!@FlNh+4NZkq$J#1jGNitdU7aRYwJbiC=Mr$t~ zUHe};%{~uz2TW+IIyu|=u0$Tw#ea79{jc~MT=>G`Ge_Zt<1V)fF^^M`zW+2LF7zDR zJJ+#=t2z9XnYyNdM8DtljqoOQNlggvcD0Qd%MDp!?0o zWMEueV^C!v4-8;gWflnou?CSRwec5YrnYhDu&&!zx-E72&Da%b;FKWC$0EievNhLV z!~Xd0jWd?4TzX+ebevbo=H~`{ApQJ|jQ?3!fN6`(KpezZU=c9jGvHz4N@(+7Oa+P? zFdFcKB!ochj!giKnvjU#~TiKYPzYv2upw{v*HY4qdZ(dgRH|ppCD? z{x`{8;4OGuHtlfM-`TUn!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXAdW<9^bB+$)~E)j791l1802`|1fX%Jt_U}Vg{F-MqANUvozcSJGS)I?zBBneQicSk)V#wn^%{Z42+Aj4KfYnf#E8v z%pzeR)*$kvHvVGF)HV(s)^+8M`74oB(9`Sj1RFgj;M|`sG&DG?vF3-aVV} zdHVF58x6!k`W09N4EPLq*tinfJQ!1fNy~uIfDa_W&&c?ng$0z>kfQ^b(16jw$j~x7 zGxPMunFqg5TeYN=S)yr!Ku{-(^+Xj75wMg&+Xq-o*I8y_+^uEZ;v@g z!N0>w>6co(Bw9}|^XJItS)Arx^66^$litGoGs=6@OV7%zTjBP8Z=n zq&p02&ad%b`(oSAuP2XHo;`E@X~1>i$h0LBcCdaecb+@-lf(pd$wjR(`Kw|KlC2Gm``!E?xU6rqudHp@rJ9^)^U^4&! literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCA2CertificateSigningCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCA2CertificateSigningCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..d747ea1fe5127cd7d6a7095cb11f985e532fc0cc GIT binary patch literal 926 zcmXqLVxDEt#MHEanTe5!i80-PmyJ`a&7(VtL4>>DV~A9@wAHz?;p-~YkwQB%qQim;Tmmpl|!n! zdYf(KHu(?!k3SWd@7=iXziClqL!GF(^%CaK6WS%BE^5oPclV?6b)lSP<>51r|3;b!4hl55(tgVOcD**>!o<_SK8N99ygr;qHG%;A!RQEGco(1DrWc XmOek#xC8&^x9%1#5y`9Z;T8k{J=an+ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCRLSigningCert.crt b/src/crypto/x509/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCRLSigningCert.crt new file mode 100644 index 0000000000000000000000000000000000000000..3c1730f41ab288d013ce177500700713bceb08cf GIT binary patch literal 909 zcmXqLV(v6(Vk%s~%*4pV#F%El%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXAdW<9^bB+$)~E)j79gs*~|^A^ZxHTnD)i~ zfqRJh?#*jF@A&&2m0Eu+T5);DPaT`NW;0JHJxC2K7cIH0^!1YV>>0BgJB#kr+cRdS zEDZTxU=%Rz-;V`zU2lE1`+2AO*z_ZBpMT2zD4JWh|5@CNUCUCWe!Bt>xT z#Mw3>R$M_hGeN_3{~`H1%WIX(dsa1ESNk`QM=r-R<8cg|L+R;_2Q#-TW!!QoxU#zT z1c#$^iJFzu>57HNp0w!)7v#*ach$0-=_1>q6K+KGuHK>-@`}2&NugeR`XIA`>$s1LNXsgG>W?V7SUE zvq%_-HHbW^jlUQ(wT(lEb=|(wZK=y|#;!;MCjePK7BLo)qAq7{mS|hsBcTtQkIlb7 z;nb_|aR%Zb{R%7s27CrQY+MO#9*n8Lq-DTpzz34xXJq`(!U9Tb$k72zXu#-TWKjHa z@KNdG3A%So+^VEJ*baQti`|{HUG%EK+j@)pp9J}=d1T+a1X^P+V0l*y}#UNpUp@(QkgaCNFt|9t(4C(F*7 zyer=J>VLuM?9HmtIj`Q*rj=2*A67ZeZe0_X!F6S&>q)_y&995H LBLCYxHqQY7Aq8Lu literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCertificateSigningCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/SeparateCertificateandCRLKeysCertificateSigningCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..e75eb4cd707fb21af5418a9c50746af77d37cad0 GIT binary patch literal 926 zcmXqLVxDEt#MHEanTe5!i80lHmyJ`a&7`#y#3?cP+* zai=)0WAaB9{}W{oP1B5@oHo8VLF|l`u~2Bnr-|z~@;fuEE}ddl62kmBS@-E@&OBYm z?Qabde&^fY{L;QwO>p;&;)7`-U*|3rTlPgcN~ohuB|B`P(fZEd&vpuD1C(k`Hpmh&48%eD6<7oe_zZa1xDwht7*l~s%Ye~M4ngc W$npNbsaN)V@;3_6FXWmumlXi;D^IBa literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/TrustAnchorRootCertificate.crt b/src/crypto/x509/testdata/nist-pkits/certs/TrustAnchorRootCertificate.crt new file mode 100644 index 0000000000000000000000000000000000000000..04efaa0659ba5a46a9131e8283db71b06ccf8b25 GIT binary patch literal 843 zcmXqLVssC%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!nsTGli%Dj|D-k(GhDiIJbdpox)-sfm%1Vdu=iPC@qv zXI*!;s5c2SiJf(^T(#yl=iz&gbo_2F37#(;syo-e zXN3GyoGP=?{_y9fXa)|&EyuIPvn7tQy|Ls}U(xX{=hf0P{reRd7GK`(QE_tp>kZGo ztd^C!x2?2nSFQ9S>0_IMs~#M)59pXU=VL*62J`!6pZKkKu4x(R3M`%a!SmS>=ks^6 z1B#Ox4MfVqp60JvJ?FNsTBf$kGyO?&Yjj+$v|p5HchLTQPd+vDzGTGCw>s9xBR(-) zdCJ_&#LURRxY)_S0UV98d@N!tB2Q}LFUCx5hhbhE7A=3fRQN6&&c?n zg$0-}*bMkVd|?ou)qojDA%`+BnE*qXkzvNd^?B~|yi_eU4=X=v=@6G&_dor3;k{+4 z98(O0XH8(8dSc_hIPRlSe>tA}6gNG{t}y0GU$t@t-~%3 z&+fna<1XdobF*F^<&0U;7SS_h>eiF&R~oK~Y>eBHy3dOFyg&r+BZ(_d8$CAouD+&c z*DWcxtLx*jLtFWO+{ld)Ff4jCKPp-6wx7)$J?8TZ7l(f$NY9jV?I;vcU&zO otJ5y6(^M<1Jo9;L!CzBPwtyUSeJgLCX`9a%B~G3HcWKR00Js}O*Z=?k literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/TwoCRLsCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/TwoCRLsCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..28eb60a0713091407e817db77094bfc1ca4787fa GIT binary patch literal 900 zcmXqLVs0>KV#-*+%*4pV#K>*H%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz=cF>L=1!=)^LZE=PNh|`4lTSI~p`GDj~a{k(GhD ziIJZHD9**y#K_37H?-hh67QaT5AL%)nNdzXm(ITWa_Pd+@6X(J#L7E&>^M31bUB;J z`9*Oto{}O`_oVpuKRVfGC|@))gEv5F;rVqLQTK(i?kxCV@MuB&xq#)2oX-0b+==L-1jea%G3up&4fsJ4!XSmL2FySTIeviY3m89)3{ByyH?XR_ z_Yl2o)&Fr*Dwm4f(_Na`R*P-D=YC4vAjxy2oXbVHNlV^K*Fh|E){95|p3{Ea4ihS# z-a9c!DtvzMmLu0*?pS?nUVK;jT6M>jg=c=WJ@`ID@#*yoo9a|9o+#6v_m9hGldn$8 z21XN;38{7RrRtVB{D0-m04nAM_mo+|EBq%C;-JJCjc}uzHPCj>g`ec2}oJvupd3z=;P>lWgKeN>Tm;*Dt;JdAN+N&3z^j2E!f2~1rVUB9nVmB0J+ He8)5Z8#zn& literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/UIDCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/UIDCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..ec04d7445577067c6176d2b20e4eca2dd540e380 GIT binary patch literal 900 zcmXqLVs0>KV#-*+%*4pV#Kip4fR~L^tIebBJ1-+6H!FjIt0A`mCmVAp3!5-gXt1HY zfh>r_B`g+_T3n*woLW?pnU%o9>n3RK~kmz{QXnpj#_Z-Gn;!LxH@sWHt)9?|KGX4ZBx9otZc>9)vHPw z^O{qb{#xs;ii$pXEsguFa*@q1@s0kLTJ~iwx3BSRd353h^Af=w3ObW4Q=Go6+ox*r zK~3^d=*i}D&)ip6p0G5X^w-zZo%<5sc@zCl3dfR6);zI)5o+0PFR)%#?eDrzJ6FE% zaf;rS^(rE+kInV=uC$HT-Av4k42(@otO|>345|#|fq^Hh%pzeR)*$kvHvVGF)HV(s z)^+8M`749LutNEMhDo0`^B)3_jj)Hfybn>FMpB`%YhGr2!vEKR+Yme-;*C z!eKKI2k{kH1Pu5Lc-XiS+B_Ijf#L>?2K*oiVUR*r17;wF97n+91&kv`25zed^WN;y zIIrzdv-jG~!;vLhvs*t;U*i8}nRncEj_o14&L@P4|4o)!uz#P3@Heiz?+wKoW(eM6 zROkH>#vk*~x47X-hoy5&!|nw|Q7n;>tLJikJIYaGswAH_XXCB2t2wG1g?IkC9@YMm z*DYoF>X^FxA3|YX@3^(>+nDafy?(40P|H#NTlBy;Ka*b*13&m%M~1vn*PUlm z*E4qZHy+PBGfUF8>kD_q`KPHRb6Cui*DPC}(6y}Sd$vq!V2{j8Lq_|sbsrAy&*VF~ zWv<68+2bdjr9PXy^w`w>tM7s*$KR#9K2GRd|GSy_&-#VAH?8Vb; literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/UTF8StringCaseInsensitiveMatchCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/UTF8StringCaseInsensitiveMatchCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..2d653ef65b16141e574f4d3d97a9f41f935e581d GIT binary patch literal 925 zcmXqLVxDQx#MHQenTe5!i7~~1myJ`a&7%QY?wptG*&GYcR!tG< z`ZULP@%*3j4;VWi{b0H8f8T}+^*U30=FGFIb-yXPx}47L$87Te_I2+Gc02N6 ztH`4J|GZe$)h&1~JDt9EqE+~ULErRTwt2y+X>Dtg+)NXV!+$(-ySa#AmB_Qj+Lt#n zF*7nSF0L`CGLQ!btE@7Mgn?Lt$dlUmi!oE%ICNOo?JM1uy8LGBiZpQi%kr^^v4|wx zm$-OpWxymsaYdI)$Bs8Au_=4=~{YG6ruU{*va7Np` zW`9ikzQ5NmtLGkyEzD&`Ndl*Z4t}@@s&eGdfoWNkmaBNCcKsu|$&u4R=Ox-wd zMQp3u1?RJEO|QH2EH{L&yjGFjd$8_O&X%=rW9Qvnv8Xqps%hKm+$(X(?iTAaWU7=M zo^tumh)UOw`g$Sr$S;BUudjQnWMyvPxg#02VzN-f2eZV+6?SU>Doh?rYSgW`uK~1AA|C4PxB1Ay7JVjjmNW= m$S3A>)(9AsF(-Ghte^U4rJ&8{&%U{Nrss=dOr_7RSqcCJcVS=v literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/UTF8StringEncodedNamesCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/UTF8StringEncodedNamesCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..ae2ce8a7b49e84c1ecdb18c515713d8ee17ef09e GIT binary patch literal 902 zcmXqLVs0{MV#->;%*4pV#F%8j%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXzzw@KJh-e8GY|n=!^0aI;${(CQk0pOuHfuw(8Q>O z>;pzt2IeM4eg>d87gG}>Bg0FP;~51v#AMTs|5uZav%53P<;<)NkH2oc?9LRBa<=2| zcj3z4QQsX}1vbv+t({nQLA@`ebCu6rjuj8voTk?tVU3ya)OfLg?mz89E<=I;BFah2 z=I)diGJkU-p>VDuYvfyl)cM9wpRU$dVomL|IG$EiJU!~&nKxF|yY4M6edfUF`Y%h@ z#E3QQz4R*2HBY2?;yt`}FkIF69hkdv*RqO>->%>G`E)SHN1%QBUFNNFeHwG7e&{}1 zuXEz&9qntYF6v2E+3`=~loMt=p1kD!zIXTA7J454UcaI;L1Lrnzr8LB9qzsElk{(? zA2sOOD=}R@t<+Y$#?MUeq|mGXXEp>K3!1Q&iJ6gsadC}7m4Q4k{A86`Bn-qFM4r^f zUyPaB#-YQyZeQuP)a5s0SEPX>T9%JRj77vcJ=*0H?{bgYV$Gh(^RKEr7D`Yv-~;LB zXJq`(!U9Y>YzE>Wz5+-s};-TOPuzy9g3_$#Waxfho$I;41Tes-sc?xoW_Z6Xq@wd`dsv8sc?^=Zmmf8|}cR3hX$TW{`@+gsVL=Qy9y6Hj%& zvv~TPcwLUVh_8VP=VP5Ye_vmFVv5Gg(|(M9^JDBwtfpN0+Os^Kb4Q5QM3U%^nH>Fj!QI literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/UnknownCRLEntryExtensionCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/UnknownCRLEntryExtensionCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..69128811ba375190c43d5f707d12cc8fbf8186bf GIT binary patch literal 919 zcmXqLVxDZ!#8kb2nTe5!iIK;EmyJ`a&7ifw_s1p8+V&#ni;e$S`Z0Z^SW0X14E5f)^Njr`FGn5jwo$ zSOHH{AtP@{-hwZ(+!khn`%O&mh5N2*?$t98+_Jpw`{o_Xh4s(s-m%+uLwF+J^)&IX zVzQ2F%*EQJkDNC>e>de+L1tpZhBHT! z{5L$<-!1KVSE5dYj1cW=fRbQ|HHb7r9M7koE2UcD~P_pKV_5J7H0$THept zYNw3m4J*$!>PkfIwH8#`@v7#`vyAI4ECIHj(xP%#1glv?mYPahzy909Cd+T&_euNI zCgsK;^G6rT-|2c#F%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXAdp0B6b-56VOyvTc2Tg2^Ys%HJmqs5l!J)3Rfl2!L<_s?Z%Q+Fpz%@q8~&9>-C zyTNStSCuce>MU-)QtvV?>6xh3nLGb4sT3UE8dA`y{dv|^hN34jlVh#*7&@C<46Bk> zM+jw2JlD16#nT*-%NuxJKHRo!DetZw|AjmLIyY^56w1WR$iTR`#-Iuul(Nb!5(Z)o zB2Q}LFUCx5hhbhE7HJmF3ZOv#v=0f|369J+dOlRF1pba_IkrjfyBp# z27JJ%kmYA&{LjJyOhs%4;vl{Pi+};20S_BjLYoI;Dp1^j(SRQ$Aq-N;YQPMnkmCoK z*nsiF$Y62IW#vn+tDA1FGBanI|7hR+&-LDgPN|WLdYXj7IZ_U;54iP`<*7PTumAMx z|CL>4DrFn@yoq?lvO8d&aI$9a{55}HpQ*SZv2u&*&e#5Tdt4k=$8UYYILG&1%d7s` z47us|XHON-Wa)QxTJ)XKWlH??)6V&gKGSao2YXnQvi;ng_4xFWFtu&B>KOgZr z+WR*3J=n%2n7QuJlgnmhx2_7becU+j(~r20t_nN98adBw-8W2Acze5+OrP;Wb9x`^ zl=Nx4Evk=2%D+4s8uYCF`P>UqKOXVkGhZ^P@%W2{8^VvDed$)W<15=1u}sm{g>p~h U1Lrn6yh-}ur`B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`PjgA@|2F)=WLSfd?UoLZ#dmtT^ZoT?C5nwSH04p6|= z71?bHAjcY-8Zi9yQ)24Y?G7jJ-eR2m zY7d)Q_pwaQEj!PDS@1mX&CBBB5~0buN$a#P^nOV-l6U`GGI#k-mYafVM|7tI-^h2f zD(lx=9Jl?((^+pnP4vIDKa_XD<`wGy|Fo7Q-nlkUdAa>P{ob2T4&Po~p)`~A=bPWh z+Wezsyr z?&X$S>Ag!cl3v-Y{$4O?x8{|IWA_tWgTv?D@UVBaae45NVWndQ12+>hBLm~&#+wF> z*9_!=;VY}mB4HrbAo8R({$kA3HVz%ub^A)Ur7pi2yCMyo5M=pS#8^c7*YvL5zF($o z?t%T2T~2x$FOlLuZomi9&(FyCpM`~)iRFVqV>3uVfu+Wv%AkUcE1}JUF%_8R3>Xcv z3^Ld_wAmP0S=pJG3}U3B3Jt9k6hbmGixq&VBqLR!6copKkT^~&%Fk6Ogh#ZY9#m;E zA}NBjrR5hX025`2LP2R!L4GkXdFJQkR3gVdFm(fCpOInVdWDLw`UgWR*FV4V)ZQpF zjAz=L-@1kAw>0Z6|dTUntHHylLXa8>;HLSIwpB=xMIxfc6{atYIa$ zY|2Xo?z@Dq$(9aQoL#eY&Be0R>WfQHPPHqlcTf^L_<5bb>8F=wxfUyXr}IeoB!r({ zmRE6mvh(*q=I5<~%On#2OWawjALDm%*Wa=`S{HUn!Eh@=O%S=uzNi9||GB7kW6foceDPR_6chApHQE+xNkQ3)MG%zp( zLJMO91A{1WUSk78BV!oXAcaI5Obm=5HfV%A&0qw~w=dAnAOkX$Iz`pPB-OCa_{LyD5PW693s}Qoi zVfPQUCGXzP^FA7o+-H^WW_69g(ZgPwW4fmmg(=Rh(=I4~SZ?SmaFzf5+~rA5vlu)Z zLS<}9Hl8Yw)voVK5jgKVv98OqkZ+QAO6cB-$QN=FH7ECeXJTe#U|ih97y=BD00Vho z2+Jz7NEnDUh(s{9s7UY84w~X+yHub^B=GBctCQeVAj`)h#v;PR_fElT|7)?Qy0@}c zslO>Xe(rDsI1R}1Gcx{XVPR%s`C!oa7i6FUOXF9A#!m(nY+MO#9*n8LBxk^AkY$j; z#-Yu|$jZvj#AFa76;)_xrJxX!ky)$&L?s!i3Z>m$t*6&NvupwK~8zVOa)ANj0_$|O(DN+;y12%e1Bs4P5uWpZ@={M-t>D? zd}!sINz-)7m3DH|UT@@$gIkVE zt(d%}SN)ozm@)74Nh=yZyL9&FZnQb`+W2zVQj<B<&5>@+`h~tImf(@m2A7eHrf<#{I>9)vdWP)ex0wr nYDdo9RK&Tu{(xrr+GT8AG4B0_$ydK;9<+8mp4;HQ^RFiWC}*HA literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/UserNoticeQualifierTest17EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/UserNoticeQualifierTest17EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..5fefe19944457f517d6214bd7418958626564d1f GIT binary patch literal 1014 zcmXqLV*X^%#B^%`GZP~d6QhU$FB_*;n@8JsUPeZ4Rt5tHLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP{4o>q<~qN-90})MZww8Ku(<3(7?bD z2rY~a3=E>gd5sMWjf`PjgA@{NFflNK*q|L+oLZ#dmtT^ZoT?C5nwSH02~fb*71>z| zAa@#?8#FO0A$yIHm4Ug5k)Hu5&c)Qk$jGpbr(VLPzgd3%EtMzIW}7;C?l^?|%XP}d z&#|n&Z@K#N3>L--?uWjg53XEp#jCw(?x{!jed>RnO0^aLa-inK=g=2NcXeF8mF^4xjRpJ3U&9oy^WIHPKm{B5^j~ zu~5^gPqB$l*VOuS-g>`nyZo-c`d#Sg-^~}hKKl7u$2lc$nV1* zS!EUp1F;5?2*wr_={?#(Q@m`K3KWS1eqC>M5}XEP`B=nQME>bC8pd2Qp4*%->FSrw zWtu$cYP#SQAj{9l_@9M^nTh3tK`qEU1(q^{5`!W(79f+sAj=?wjYFG_k(HI5iOC>F zDyq=fNPD&eX9RHe6?9I;6l;JyK`#I=# zb9d>rIR{rH2#Q7>sJFS-vCP!@BEwte+e^C-x-bW9RDHs!apaEhd)YhxuTG1zf2n`w z%Isgiu3MeuiQ$W5%K2rrKiYDoUCdMFRDD&hoh`}>CrTe!QGMpq!v<-4y?55zV)x!( z=cvfW7sJG(o#pVC{npcECfd3sZ0-xDJ#u~h(&$HP^=4M9YYIzdxE$i_y3g#*d#u0N j^8K>~>*VYH%wHj{KWY8N7mnqZ?nM0l(K~zAT^3dVu$z9n literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/UserNoticeQualifierTest18EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/UserNoticeQualifierTest18EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..1168b580e8c60c937fce1cf6bfd49fd6eb5cb7ea GIT binary patch literal 1240 zcmXqLV!2|_#Jpz#GZP~d6C<+$FB_*;n@8JsUPeZ4Rt5tPLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP{KeAq<~qNKOjFRGdU9|9$;vs;OuB1 zC(dhVU|^udKdkrlNni!Rky~xPQz}&>h&j1wXVrpV!WZ3h8!)cT7?h77jHFLQaOyJM( znNlDY!~>Q)GI2=;XJ+abozd!N|iJt->{{HMYC&oFC~O|p4r)| z^31FG-}8U^rz^PUJrc6znj*r}bo5wu_t~)N7A5^jYb=8u1Nzh2FBJ)8df1Y$z1d8Qf4H6N=VoGNWMEv}#JCz5 zBFhcrfgvob%mR$m29X=_rjKSFG}lr)*LX9KhHOTU@h_Q$~u;%zABQ<%& zvmQn*&a!N-eAbLY13r*`en!UsEG*1SEFXYo27^QtSeh8UfE+i2#<^@<32h#XsleoC zz-Z9eXVBQq#-Yu|$jZvj#AHw}RaPJP@qyWsh>d3`r+#jXe~cCDMf#`CMLn?Z({9NW*X2XmkH zxm90E3E9qVCw@uxQGVV%wKW!-w$eIwvY({01OekxBvhE literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/UserNoticeQualifierTest19EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/UserNoticeQualifierTest19EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..3cb86cd1ce612a789334692feca12cc08da4ceac GIT binary patch literal 1263 zcmXqLVtH-Q#C&-HGZP~d6Qia9FB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`PjgA@|2F)=WLSfd?UoLZ#dmtT^ZoT?C5nwSH04p6|= z71?bHAjcY78Zl`BidT7qT-*Z8cPXn->$9k-qEW z{cE15r?xLzQTN|zsyM6r*_qD$atmEA90<=5k}sIRyson%a~Jm)tBsHNTg!Ex-01ng zr?mcs6!YRP$BjjHg4%6=bYI$@>6jrqhvoX*C*M9#Yx&|*C@r;X$*FFChW2+qpYq(= z_j$SYyQLr8r54QFvPpC1-OCwfnIX}RY=^54&QSaLTl7)Lx>wup6)sL{)hk-Bo3&Cb zGf;mDyVaVDk7NEvi#lw7V_m=6&yV-qgG(PT?DG)Sa_8RDrTrn%lZly;fpKvY<56IU z95j#zhOn$Mi-dt#gUFNG_=_=9+c%fhc+7{D=Rw_6Od;m)x>C4XlA9L5S*G^l9`{UV4`QFXQ*eYke{XyI;12ilvOR+^JjsgRMFmy(l; z>b~;Kk_?61{GwElWAf143bqkwJ-Uzb%YX?U)msWV`FZKcNgbG#fk~Z_AzO!c-%j?F z-}Nc!sxH!v2fw_s1p8+V&#ni;e$Z+BNiZ}Nc`ftpz zDYQQm%X{%nQy#b~h@7|31ZmvH?kz<0vy$wMOx1N4eJvKo?zVMT5quZ)Okx2_! zx}WgP&8w`u7xMCl%8oR($)br`jx^e8z8YOq1oHKbF7xF9+4BD{1 ze2Q>m>)XFwn$K1XmZjdfz4nZVR%ySEhP~H=zgr%EHGMrvUDIj3=i!2|D7>kI} z-VM14nJH!Rm8R1DZ!L zOqm9Z$k72zm%!*?WKh3)Fpcf~lIt$lm!DhZr!cq6t@G!J)0^dFszcnAR#_|NT~%cH z{?p!dR_BFV+l6;$idKq06}!L8_p!?hE{~*ULBGtBswoY^2Gd`q`!v{ZbUxT~R3&qY z_04@^+noRHkbAnypm%HEZq8GFC!X$J#BzSc|NYNJ9xLxXYR}ftZ6R}Pf%^BoD-Afl zNVqNKT0N0fZI{2Q;GIXc^7G%Bp7!6}Zyw(kv0r^-pIoBJSI;#TvqV|@a~&-HNNn53 zcy?chfCuNjtv08<-(70C^7#3d?)&R5id|s%y84Wo^{bMEoz@&-pFjS&k*#{3eUHTA d>(hCCuc=2J;r7@#apFv|aQ7n*c1JD^1pwUoYZw3k literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidBasicSelfIssuedNewWithOldTest3EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidBasicSelfIssuedNewWithOldTest3EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..34197f036016d13e4aba0e5cee865c8737cb95cd GIT binary patch literal 945 zcmXqLVqR;|#58pQGZP~d5E<~YacZ@Bw0-AgWaMULFbFl|HsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1hIm# zFF7JMUuIKw<&CMA$}3T5bg-D(}DK=l={T{a!T(QY1(k`d2?G3d(ciTr-_Q~nfthVf0ORud|37U6bLE`^9*26oF zD~gKWF~6|qi0ylitP-QT4|gv;=@!kMy!`A;3BA&};SaMN&RmL#bSpSpo57OIvT**( zPjNe@{N5BFGJQMaiCj;HEeqZSzG_~|wu@_b{EGkAYVLL1Dd_N({_tnr-VGV=<75w2 zUyx^FW@KPooNbV4AP)>{S!EUp1F;5?j`)4{rj}{5Ui%(WlUCcPrM{Iz3!F$~`B=nQ zMATj_O5c*SfB%&;e^YLET*_DPel2Ri2hz{a$oQXyg_()vgMm1RufQT;z-Pe2#+A_K z!I%n6js}d#(E&`1!02FPFn;trrtw(V`nOZgXrK9T-a9HNQt?!zufdtdP0U&X3K8Fp z-y7NbXRw8=+5K8^vXr*Cr}R|Y{8zztt2{sdusXDGlIGS>E)Z{p@ESbAPqmF0}+5N!Feh>?`&sYP?nw4_*GYg7w$z``5hB z-YVR==lG2m^ZswX-nnfKCzpBqB7>t>7yi%BpL9R-dT-CRYGVUYt+mE;eyim77DX@n fm%aX?TIk}$mbT^VSl#9F?zKD@NRyw=BNz$*kWp*P literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidBasicSelfIssuedNewWithOldTest4EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidBasicSelfIssuedNewWithOldTest4EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..9a7919b00acb49d393bfbdfbfdb6ca353e2ad9ae GIT binary patch literal 945 zcmXqLVqR;|#58pQGZP~d6C<+$FB_*;n@8JsUPeZ4RtAGmLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}M*gq<~pi#woElGg%=xH78Biv$(i4 zHATTcCq=7 zqJU|+UuwBRcxFik*cGm>$WB)P`NhPbiBSpJ_l&Fz%uS5^3_x)%rY1&4hOKR{Tvb}? zYJ@%>&;75pd+%%i`Ww%`t$i_d)mc4>*PCN}?y&w*_?qrFYvPe>H?*6I?=>Il?`4$j zE;JE2R{HMDtz!?0BNsS-&fk~nxX$X#V(GUb&t_H6E4y|2ZgN72m)~*axgt^3`ubj7 zhpQWZPm{bHWIn0Y^!fQPz7%Eo4~NdiZup&aFFCJ9Xz@kaJ+mL)G~b=to9y>xcW>e{ z(aDofE}!aJ`sBd<q|i^eR4$YpsIw zOB~rUnV1V|b(2>)k4hKZqM8pgh?pqH|B(i)g zVk{yhN9tVF#@B5k)hLTj-=`w?fg|sZ#f=zO3-tc{C+Vxhwe0E5qzGF=BJ=}sS|HDb3fDa345IbzcOS*M4&Imcy1N;YT2>sQCZ-%Bi8mVNcD z_ROhg*ZIV~t=&`Hw(ah}pGE8cEi}-Y{@x=s&{S+`%YVBA)g4_sZ{GBm{17Hz^X+oV h+N8LUE$5D&Ibhl^qWf~~p0~H3$CowPUSoEt0RRxGZhrs( literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidBasicSelfIssuedOldWithNewTest1EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidBasicSelfIssuedOldWithNewTest1EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..038e4d7a80a7434a14deb1eda6bf448908e4c7ff GIT binary patch literal 945 zcmXqLVqR;|#58pQGZP~d5E<~YacZ@Bw0-AgWaMULFbFl|HsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1Z#lbeu})ePbFca$?6hCoXnzjtSn`Um4yNu&UT?e~>J3&YYv4YeL=4 z1+%p;91B#D7B^2mzVwzs?)9}svX;>WUs-P+sBC>I=JusqHcMiA=E0WzV(%vxt4`}; zy7cd{$qeV;lcv4)*cltcR6RRWKBbn)g}K@*i~SqRf1^bX78x(a1zeWTO|58>pSkT9 zKNB+}1LNXsgG>W?U|7p4vq%_-HHehe+(=>s93_!BR1P?MbmX~B9Y}|5n~Zy zzPsXy(s$dYDc*w4<$6cXt3UhiY`_Q7&(FyCpM`~)iRFWVIEb&nB4EI0z{AFs(B{FI z3QUd$jL6XeOpL(jU}R7z{8v_e--3JpyOvay^i{&viaDHf_B@Q)@#^&=PD%Z=f3n>T z3|C79&p5RSv($-i-ymGso45T<-5>qyVNUPnesXn0LtTHuK)l5 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidCertificatePathTest1EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidCertificatePathTest1EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..69ba3019d4b6bfd8b1fd4289b7b21bbd5efd3e8e GIT binary patch literal 893 zcmXqLVy-l3VoF@V%*4pV#K>sC%f_kI=F#?@mywa1mBGNlklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6foceDPR_6chApHQE+xNkQ3)MG%zp( zLJMO91A{1WUSk78BV!oXAeclOlnoRiHb{jf=47TQxVj=cLjmM2LxUzpC1js4vNA9? zG4eA2#krW87#SIE-YJ(55Rgc4{QbN_fd5BJdBJ<#yijYwWix~9bHD6eIQ^HIT%L=Q z;ECXWrERn0%!N7@)!r=RxZ-JAc+Ty7^o7X2RQcCVwx{^+_)NGFl6gMPVv|C`-R3~O z`?s$~TTG17JwMBMOa8P8Ps>D-oHJVl&WAYuG<`MiO4RhZaRQNhA3Ql6*?Ilmr^*fO z*-Qr_7iuvyiRNbu3Ni$nl-PcGcqS}q(Ua5{${U+yBZ4_L8S75l_q5h{o@#x-|&g5*AQXRY4x{q6na zE$60W?2nsv!DZUVA784hxGF`1nV1mdX8_v1u-)^|?T6E!$L{V6WL+;e6;OLg+XJq`(!otkN z^1(nHWS#;GFdZ21uyG}{c`&8|la>K`!U9GIBZFMjP5$*sOLqqC+4F`cu|t?~6&F9R z`{H>kH;GICSbS6GQm@56>rLmc7zyoaU$EI%imi5bUp6(Ix&2OJp zNhV6<^;~?ycWZWTPA}VpcRCjuo$Yv8;?ci}$Kn~(MN+GUe(CRBvEQUm_q@1I zM6?0FUS^uBnwsK_%bzE#(`=9OJGS?QMjiixDbN1LY>n~1+m#r}$9n1i(aZyvJH0L* zdV1o^368^mwUqr^7-Do>bep>l*(x2kN%+)N@mSg|_14V(AIS%=R4pi2R<&GU_S`k~ s`$RstD7Qzf5fFXxdBJ`;)zfCHnKGl+{XdYm!Fe9XJV~4726?@Q0AB}AlmGw# literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidDNSnameConstraintsTest30EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidDNSnameConstraintsTest30EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..e5235c7ff251f29bc6d9ae78703ab5275a7140b1 GIT binary patch literal 976 zcmXqLVm@Qg#I$7rGZP~d6CB(+$<$iUFhP{BYBq<~piJTEaf)j2<}xTGjCGq0pr z!No7wP{G;JKu(<3(7?bD2rY~a3=E>gd5sMWjf`PjgA5XFv@kG(*r*?tn3I_TvPS{k zZdX@irz(Kl4z#<8Q3=_*jI0dIO^o~uKyfanCPqevBX^%45$5;vX)~<$JKyzY@^t|r z<#@Y1{{?n}8IPCkkhK2F+T?v+XlcY1mCC)FWNx@;Wvsb;%WOi$9&PD_JuaFa-EP)Z z+RIwb9{;xBOnU+`j` zrc?XIuvxp_N&e-!&-Y;GMH4q;;iSCJGA};Q!0D=TQ}@leXCc^&aW-sM(D{;%NVKKRXhQIz3$t$@iH+pGB7S~oMF&7 z)j%E?#%bMBm{?EI`{@4?oE@b&w#8^aJC!Nn1p1d{B ztm)`a=XfMv#67tV=eS)+ZwQ*Tq&{FF0BQ+8UXsGa`yl%eLGl;QGURcbY?u5J${n*mPQaHIeL literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidDNSnameConstraintsTest32EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidDNSnameConstraintsTest32EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..8bc3e87b9fc4a186c0856c941e317c78db671ceb GIT binary patch literal 976 zcmXqLVm@Qg#I$7rGZP~d6CB(+$<$iUFhP{BYBq<~piJTEaf)j2<}xTGjCGq0pr z!No7wNWt0BKu(<3(7?bD2rY~a3=E>gd5sMWjf`PjgA5XFv@kG(*r*?tn3I_TvPS{k zZdX@irz(KlZfs=G#HfVqT}D<0<|amd2B0_>QxhX2!(;2(fZY-5$|odth+JOz?%caI zr>=hS<*003FQvatP-c?+v)elVyjglUMa#FgF0gv1@b}*ysl9gh-^#Z$*`(Y|>HBe0 zdRbJ4(S<5&d2bfy5_!G?+0a*WTMTsqSu%d5s~of3we4!b6gAP7w@ZEm*qAiVcRM^; zr`-6jQLf}J!@7B%uZ`tAioAUf+p(>k-ydTr`+q}7T9=N{o$L3@zHIAISbXWc&yv*L z?v@g>x^ws4<+4xT;q}pXN!jr`Zlc#@y&e^|1)nl!Y_g5NSh~S3f6}vd@q-JL1CtIM zFTT>2EmXMM#xqk=?%k{2;)6EF6dCjD)*ZOl_~YNDtYxhRvS!QW!F85kEg&M;`4 zY9J2`V_9Vu2?MbP5jT%HPMm$Q!38(ORd@v9P@fBDE4EPLq*tinfJQ!1fDbRq?Kno-x z$f9hZ*dz~3RVBr#MP;c)dLU*pQfkvn&o4ucJYZS{Mjp_;KmRO=E^eM^GsXXF7X0{(fUNihtvjeadmkjr{#7N=a+W9W^GNms=WjRlB44lcmL*CA&)< zrf0qh`%*5tOHaT?+m)F|{DPDV^YLiM&99Dq=bhTubc>;62EWrw73b{Ipp#X+xA}5h zdQ8qQ75=<^rh0Y#$?2^W7nS^sP2isX>9 z?dNSwie;S@?!-4={%GH$#=Jl}&4WAJ!a#Cal;2;&iQ9|biuGSAxE?F=RBQ5$eKXT$ w9e%ZLHjoqNH8e0V1VRgA0|SF7 zab9BsLnC7t*PyYFiY{_8aDceTGAuDCGX>}lg~YrRg&;R)3nL>1bXU5%B70Z?6aq%( z22G4g$brVl%D~*j$j<;2=VEGNWMp{Q!^ygIUB|U^ai?y|%9V6BXZ%_G{UNK$YL%99 z)qq$r<;J7AI`48^)Z4GGYOLb)yS?BeQ}?86?RU@E*|Zsp>8v?>fO}a~)`d2Y+&~V0 z0p137(TX*p+iF(s>oZ+ub0<+ZT~5W}dyMCe%U$mE`sNM#5`4@Ts+Od`W0ZB=Hh&wd z@bf>L*)(=_UYV`Vy20$S;^OtcvKQRSm5z;z`O)r?@Zdpz@Us4(M=aTI^p;iL%sd-7 z{pqEY{)FuwM~viaBdn6H&$4owq#OOM|Cn0Uu1;CT+a^4YN|Pt$K*cw?fh{KYu1>Mh3>kjnfPoCmYBELt9pvMZ!R= zK}6m23Cm5_UpX_TBTv3xKP2k{kvDVWcIhm9+t&4V!&n2rq?4KzR!f-H&#@{O{Pcye`h z04CCsWTX_Um!4mS9Cg6-4vacRhDz<}PVwyXrTU)URH)f(BDcYdXVEbaFQ=W3LTbka zpV%BX+f@1MnyD+#(|rAt>n!#sdR#u(@$jHo>7j2qD;LMH3Vsn(o|vqc&l9G)vaHRr zu5QZ{gLL)@E9ZO29FRXV<@`kA# zh{x7HI79A4w=OS{*ypk0$m59~3<|o&zn(q*aMn?E@2ZmKCD;CL*{u0z{k63n_y2jw zNFDGBstu{ue%K+h&(O>G(2AP1GnIKb>)0n`Ivt+%RPANnhVHkwuG_x36|+C7)AL!) kHS>is($yPXv%)_-uueU(UYqyXqB;DPH#g7EIzEjH05r;e3IG5A literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest11EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest11EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..f8fe1223249f3321656ed8569cbdb0e13af4aec1 GIT binary patch literal 985 zcmXqLV!mq7#I$z-GZP~d5E<~YacZ@Bw0-AgWaMULFz`3zHsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1GCJO>b)2}}*GzbheBZkDac|qzEPuwC=uleNCO6)$}5JlJv9ZBhI4px6JG@YD)ce>yR=W z90uW+W^^(wWn)f}aOukA-?{Oa$%)LB`n~S1*BA2mOyvEuP|`B?qeb5YgD_=h3w~FH zlGQBRVt2jVkXXt0t%>XRcP3^=2FAtN2AKx(zyOw2W|1%uYY^ErpYzlN%Q=4KQLlds zOkHz%xmT<@I5Elcv52vV2%b)}O=wM_xmCm&{+wER}LiVny=}PDAMuC4!Fs7K&nk?Pt2E{db1@s=PkLeoUOk? z>d?<6j#Ix0-{D&H^Gfv5?d1y&uiO&W$mhK}eY&cB}5 z>SA1k&d>kz%{1E@S`TfH4L+lMJjLUFzL+ahVjjbf^y_sYto=p8zm`9&*^&3L`om}S s*U#$`FLkCGFZaFkY!a`H!G!xCne*gdg literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest14EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest14EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..4364e1bcbf58b2ef518d5e3b9233c05f64e173b9 GIT binary patch literal 926 zcmXqLVxDEt#MHEanTe4JhzxkyIJMe5+P?ELGIFyr7~~sr8*s8QhqAB;*z4o%)F9f1s6XFo+W8 zH8wCbGKO&t7z~;im5^P@$jZRn#K;d4=VEGNWMsJXjT(r=aMQ8VuXtihD?H&If zSuBZ~(6sxK`b*CoyX0*_cML9w)bCd)_xPTtzW2?-d)+ryCN9hMb@=OI+oY);)cMKc zeX8ZD+XDXDFsA(wft^kS&$ z7{~(yTvnMy!a%G+WRZSEbF|OY>D%9ZYu_@R??L^8>7wB1l;vX)V-bnhn<{Sb(MPYL z?z7aZwXv0pK3Hrw-~;LBXJq`(!otkN^1(nH#8+SuFyJ%bVdF|@^I%K`CL9As14odA zAV{IPfoY?0SYl3Qii;mwJcH7Vp^2-j12DOiBqOCAz4ZJt50nYYoD6# zFI7A6VvbW+g3J$nkLME4lDW%k0)Fqg^zV6)L+NQ_sg(B(muH>bE@0omw_^L|61M{{ zHr2N7?%MZ$!`*UO&!qV!u|HI!qr&?mWSjOd7;}B7h`-Mlz+-nV@z%n2?Tz9s^Kv|` zgf}?xhj4LsGn{&@7{igXuKV4S#eya$4;dRtOEdR1T_h5q3In%v7w`YIYYp_{6_vF%(-~0rOm3JI}+$}s?_Ik~;hvtvx J^X>?B1pwJ8Z`c3; literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest18EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest18EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..3b5ac8be530528ff89cf455c7bd7a2f5eba846a4 GIT binary patch literal 932 zcmXqLVqRd-#MH5XnTe4JhzxkyIJMe5+P?ELGIFyr7z7(~8*s8QhqAB=O7>wlWvz3eT%*zHb{Z1`)X|C`OX z|FEc?n;LVsd(Q%{zg^|M)2o;tT`+3nys+;S)3jr!qb}S|x|5a3Z`k_LQ8lZ-_Uy_u zq3dya3|}t&Gq~jHb||yesJ28+XzrnuZ(hIm@?D?t&U)Fyw#MH|dzB6B`W?U;xW1vq%_-HHe&Hd7GsnTX!$z6+?&Cn^M93OZC#h=|Yx|MT|vc3)7^9=cQJa zgnzEFaOZn&s?~bE!hjE?pP!NOKMM;p6Uzq!aS&gDMZkd1fQOAMq0NIa6_^4I7?Gm` znErs#!N?G#)|UG4HQODdXBLx=7$1y}>3;mkD&XJoofk@Pb!>X^jq7H2*$ltS_KVy3 z?=T*^(9y~%;5)_NQR8rognyBaWL#NqeE9x%{EIJ5Rp1T!m~X8Rl*%S4ZufKZO!XPs zj90bR|EP6+dAinU?;kh89Jf2ATylKRKHn>>IlH7|*>|_frppi0QrR{!>HUgaboA5P z>hc?ri@$R(xL)+26M|JWqI%h5Ma;eqsw!5@|OXA6$HK*m@Jb!d@i$|U7Pa|;?ZS_YB V6pT9l)_;FG$4xx<&!ro!F91rqZ2ABI literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest19EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidDNnameConstraintsTest19EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..20fa140e19dd01b73b0fefe1439fe0cb65f48970 GIT binary patch literal 957 zcmXqLV%}-c#I$e$GZP~d6C;NKFB_*;n@8JsUPeZ4Rt5uqLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUDLrhr*kEH5!P)j2<}xTGjCGq0pr!Nt!| z!P(J3PMp`!z`zg)EsPBe45Gw&jSUQqjA2}Z#%2<2lroS2If+|XupqT4H?yQ9H6^$- zsiY`1)zHw~z!W6MEUXunn3I_Tbb|uAvs_(~eW3vImZ7CV6QdGxNHDT8FgG#sGXTZ8 zn3@ND@Ct+wC~3}gDGEc+?mStfV<=EzRLOeGMSU#7yXW! zTT-x)A$kv2{m#7>zS)JJ`u|j2xm2Wbf|YNEx!2lFveTm9yjeDD?FIcgcf!pMOp1|{ z4|O*8S-ekk{?Anb+a}#u+v>b>jqIva-*QHUjR%_d8}_QOU7pA5Ej9JEeZz)3TfKEG z->xr<-Pzy!xMKsahU>z^sUO%ra$h+1b?zovk;MuP#_u_n9a(4cuyKjP)edHprQRFQ zKHM5nb>rBdwz=HOeRk|Cy;gIU@<#04B(LzN(fi-V?zm!Mx997xEatvav0iTDt7Y>S z1na%}BcgYbd(S=ND}EiGtW3;|42+Aj4KfYnfdMS5%pzeR)*#|KSNh%2|BsIxH?Z)D zJ{}t~v*^GMaDtKLV-aH!iF6jc{%Gr@t{q!7*FKB-Y;R)qOVWT3q@SOW@jnX-GZV`P z191>vfknW8&wz)GE1}JUF%_6J4H%K51DG&@(ZR^je4xzo?=$f)UO`7K&dwCQs%CNT zLs8uU`6*vs^LY8ab=>=Yqx{WvtevqJ-+5kZP4o%liKq(v^<_eTgS6-Km+@TPoKo*g z?*z}@Yw41?PHfXH9`pNw2MRA+?4S5_f69ejf;pcrYnPjzd}EZl|NosZ{)s;K|5~k5 z4>0+E-|33o`I6_a)pKZtr`TA$NRsQGxR7w7MUdK}t?_ZWa%=5giV@8qku~MHE z@>|1#9>3qZH;(J$+T#HVg82*w?H78RZPTeOV7qtuwXvM$E#B(+$<$iUDLrhr*kEH5!P)j2<}xTGjCGq0pr!Nt!| z!P(J3PMp`!z`zg)EsPBe45Gw&jSUQqjA2}Z#wHSNlroS2If+|XupqT4H?yQ9H6^$- zsiY`1)zHw)zyu`6EUX)rn3I_Tbb|uAvs_(~eW3vImZ3otqY`pJFtRc*H!<=v0L8hO zniv@wj)cmeJwCgy)7E#-?xp)#Wp90-dCR5mq0deYkB7-|p328hCmXdpT{$OkG%Le! z#y5so*763U$$UR$^~LV*k^bm$)VpMLEZ?q`F%s<#&F4?{TK#tOT={C}Df6w+mxaZ5c*W8aS zn)jXM;j*Tc0xkbLez!%2^MqK>3YRv?tV!C}ek{r2{7Gi1wAO1=t`zJ_{U^bzwKqzg1eC z`#cw|-+tTThCP$-(SuCPj0}v6vkfv0S8#ukl^0A1qh{XQm{K~fCQ?J65Kr2g=ldfDd=T0)<1L@~yWc<&N(ReK-SWXO6jTfvFpeR-J8q{Gv;O>nh;KB4^E zdBEFyduoT!=IT>d`n$Jm-8Mt7>;Eb_ z?ql2=zt)&)zxtpRT6@I$h0Cs9qazb5lpLzB{`CA86MOhz)aT>fF}LG>O#EVb#^Asf9y^sK3F{a?>oVN= ot@^#z_LrAT{4=&|vwRj-SUtF1p2)W(ZH@iq9n2yRj+`$B026aB(+$<$iUDLrhr*kEH5!P)j2<}xTGjCGq0pr!Nt!| z!P(J3PMp`!z`zg)EsPBe45Gw&jSUQqjA2}Z#wHSNlroS2If+|XupqT4H?yQ9H6^$- zsiY`1)zHw)zyu`6EUX)rn3I_Tbb|uAvs_(~eW3vImWe?VqY`pJFtRc*H!<=v0L8hO zniv@w&M;(42b@rPz5knpg!QqX0avxTPfEUi;`3<#oJU?yvc)+!Dll`&`%0XjaP(kV z-3zbh%JG&yT9y5K7cKnx{=UPq-mr){D^>|vbxwM)DyZpkp+L{IV1ai=%MUMkFe$Z3 zwD|H}&O;w^y!K2h)7>)bRxj7hKuc$?77ZEa{ODZIjpbW@emiv8wBW`8cGk#8V$wQx zS8^7|*K*jOe0NugL&$oW%(iXT*SM$42Ri5TJbUeOv3is4G26oPL6hbFWX=(2&lfzv z@}Pb-*Fv#ip(RlK%w9>2xpHDc+uNC#85tNCH!d@1Tx=i@3}IPi76}8f1`)>!C%3bHE1I4^w7ma) zrPu+kKkwVXDMpr$MT|v+x^i8Vzyks%*4pV#K>sC%f_kI=F#?@mywa1mBGN@klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7lRDPR^B%S+5nb1C4VHx9$Z*RKOUe%jtV+4%16q96C?a)hp3^si%8@vZyyfj(2;OM88^T`g!4 zyuy7I@1t4u4BwlovKh2Gmz9UOe_mkL%F}!2bcub(4JI|Mu%Fjmh2?L?J@Av>d1>b= zgX>SXel5RUIJanxg=V(%ic0gvyoTOAf(!wh+ShI@UGrPQOjsqzakqY*;;It&>`j|y z?`7xp;+^=ERb?ty)fZhRW=00a#Z8P%295s>J`*D%woU?($CMx_@9M^nTh3t zfjEe-z#?G4XTZb8mC)wFmL zChQSCS{Sx--tzlfKJrS=w+vNTSSuR2E?O?^=u;IBLHErr4jt1ixgPiL-Rl^%Zr{A7 zDV_bkJByX}9^7%!XuA2U<#(k66fRahO>^q!iRpeMeMm1QB*m~(+oLW#*F)vU!A(Zy znRhdGM5ueezm;mn{VT!i@XQS#PbV|hd$c!%_?$gv^iS*UY~zKs>kPOwx2V0(aa{a( z^0B?&r?762Nbj=Y5Zm!Y#rTo(qtGWllWnC~UT3{&vHf#nJO2z;eYbf6f}0&>oD{!S zP82BbW;UI4Eqklv+ux!~N<&sQzFbh|qUHPWB(+$<$iUDLrhr*kEH5!P)j2<}xTGjCGq0pr!Nt#5 z!P(J3PMp`!z`zg)EsPBe45Gw&jSUQqjA2}Z#wHSNlroS2If+|XupqT4H?yQ9H6^$- zsiY`1)zHw)zyu`6EUX)rn3I_Tbb|uAvs_(~eW3vImYG2lqY`pJFtRc*H!<=v0L8hO zniv@w&j09E{C-a2%aWFDlA#M1n`j<+_wb^)NobGS3X!-w0uwL4;5J`a6eYN1Q$xo* z(Wy-aD?eBJ{b4Ps;@UOq_Kk2o`=pw)dp_m`Hz^C>E&n-FckY>%+C>qQjB4t#ZSFk$ zZ@Z$JZ%S{dWTBJyyVWN%Hd=Xqiwk|*)h!Y~SDo?H$;y6_S$RE-Z|8M2RhR#d=J>=| z-f`iq{mp&l6+Ew0Jr}93*tc3|f!XAje;z39dwKA~&1WI(I&FV0u2EeS6F;3xrsm?u z3q=9*FS0$gaNRw?XSn!@8M*AI;~!SEGK(hu zQ$HMC^u^2lorDj=%Sa|>Mh3>k*#?;g^1$$wRc4Ve5Ni-&yA!?dxR80|k}ijm8qT?{ zHeL&FgVT#FABz}^$kc_~-M;bhmoJof+N1krL;t?=8{!6hApQJ|jQ?3!n3-5U7>I-T z3M>K!dG zKHPcuI)WagJ=>)&Q&vcK}HJ$-M^+4>_2 z=YuyC9SRSzT`;-ywtzHGUuc(RHQ&}!~kwJ$l7C8g6WXH=|eNU&6Uy>ac6@8$r5-)I;B literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidDSAParameterInheritanceTest5EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidDSAParameterInheritanceTest5EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..d8b6ce36d0de3b3e2936a752c5700c036674070e GIT binary patch literal 574 zcmXqLVzM%5V*Is$nTe5!iILHOlZ{=g&EuQ}3$sCpAvciA9LmBb%oG}IC~qJO;&2Iz zg`^gjC^)AUm1L%6CMTAp7AqJT7#bR?7$|`hFbhk&1Uo7OBo-y+rk11@6)Sk=Wuz8m zmZYXAI6E51iSrs77#ISfg|UHwL6kVJv4NqHF^p@FOQNl|2G$T;O~Mj$GE)>#?1ovL zn3tTY;OdI(Xa$fjObr?*A-v4U+}Ogv)Yy>TUmoCmvV5X*%xsGtbIyyexp=&4*4+GK zH*D;z^A3OYZI;`=dU@9M>Ef2<|CEE8`zNjR+bpF;efr~9N_UX@(AJ+yMlIt_=K zWFhsK8;i3IG7aQ`zLHgDkuVTz5J_#EUtra<_M5ZpiRb;HeJ{Lkw?6{MhAbb87>fv7 z{`!K;Z@E2I3(73M>K!d zlsK=kfuWHxjBAiYq6J0<1`rE0!xD2cQxrhf1ZSq_C6<&H0UhD$itH!_kSk3Lni#hM zu{O+Cj6jYYQ)45;lkW8nJ)+lbYu+(W6UsQK!1_Y`)Vz{Z?^z+!wJMBnEj?QF%4GAD z45zEof6G6taGIAgdBV0sOond4Rm_=ZX6S~^jZ==-*uS=(|3c=}q!=l7t+<|I&$_=t zN`0YE!(Of{(wx@Lp?5j;H^bxtD*Yrtn0+8%*o|Wv>qi zTct0zRqMn%C3n?|Y{k1G_UAqbG=85ZJI8T%oXezGy<>7a&SswIx3{*t;J@hHP3FcH z2B0%^M0U)5Bh_S*xIH;f%=WFmnyQTWi9^M9SAR$}eYh}Jza=t(JxIVUSk`n!aEiq> zsSmz}aZ@)Q_u+s1v?ez)Tyev}^I7|9cE%rxPZayYbaK7Ny%l$NJ)S>oPASHWdeFg&^CXvdmmwu-*-oJhI mKxLBtl}#x&Y}Z(rM7-O1O8q5vPigB(+$<$iUFhP{TkCq<~pi-aR!hwJ5VHH6O90H8249rc8{0u;GE~X|%Muwetw=MX5kl$vh zQlZG|3k!BuKi6HmGxOSpFEJS#GcwOr+Eq8$*zDuWn|3O_!1&wZZ6&h~2S)2U{+*>?CX^vF=U zcaZCO@h7L%_t!?LFPOND@$BEIJ^pjT?q5B?q<)1>a6%M;NZf zGchwVFfPtE$TW}#2DYp+i-dt#gGilL>3bftmf` z`_-HG`t!*=+3{;*Z|uFBD>)S}81RAg^D{F3XJKJxV)!!Z*5t7eeY1)L#^qR6oytB(gB$h;U-1A=~Ag^R*w3Hp?xpx8P6^ znkM>V$HMitPj8!*SN@)NnTxSO{7&D#?g_uVb>);-)!wnYBD(!TLd?7QI+1TDXuqFp za9C9Ay6Y~cW!jg1mF!mEr<=LuZSI-SUd!ihK6_=k9xR&kz1@C=q}*$=YQ(9 ztVwGR%QspWlvJ#{Hq&YMlHCESYyKb7>}Wf$!teTvK|UciHI?n?QNx$(#W;PPe#gs4 z_uHGOygXK~VpXU2=^De~UovZNhTgu#7;5{(B<&T`9=o1t8~F6I4$o%SIoqJ^<){;) X=abwkc{^3Ovfq26dF5jD@Kb^S&;?}Z literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidGeneralizedTimenotAfterDateTest8EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidGeneralizedTimenotAfterDateTest8EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..f97ed0a3e958fba32d059c05f1510bc25b706bbf GIT binary patch literal 925 zcmXqLVxDQx#MHQenTe5!iIKyAmyJ`a&7^ zOB~ZmQi~K^fbLRobwzfj0?6GK22G4g$UbFcWngY%SmGw)VToO;oDLi_#Qp%D`nUt6!ipn8jKxzocCuY}+&(?r))O?bUJ zCv4is>Lm|3*KgK8adz#>Wvl{A6F95XT6?pO_P&ku`a3_lL*RAwwZ6L7d;N@-R}@YP z6o}Vf=DyTfkj>!qZeH2CC23FAi@rM9pw?q(S!{mY;nDH6Nu5)x)%Vw(ZdCiyzFh1i z6Eh9 z`|Ko-`|AV2cN-2_>n>X)DeoE&8N85#exurM>Rd@v9PnWw-4OeY3BY+MO#9*n8L zq-Vg0938-f2aFCzh5|!Y(#2U`|zf4$`7t`h#T z`;YRhH!qjk{`_amVivYVCw?dF4Uc=v8aLB8={8rn%wNgl@ofDZQ$$KxD;yqw`MJjG z-^`|3C-)1I|7*^hH2iTluW2bef4%B_r|aLlXM$y;dcP{U{dvl?i-_d3B*PK{z?*8eHb-O*eE^lfJ zf8wU3{(VE0Slr(!Su#Ig_MMU1TmJ0)rH}7Tdic23e$hO)%J=flJ14wdCA=-~rcW-M zvGdGsCT2zk#>LqNnFjK}u$EP3kuVTz5Q$)HQIX!G9W=$ucBw#-NZ{A?RwuzJLY9w3 zj78+^>wASa&Ru=rw#qj9ywSmzQx4m`2d4*Fen!UsEG*1SEFTQSLFOs2027J<4;xoP zn+IbmFzp#IB1Z=>o2d9Yr_?aChvwwQD}FF$l|A3$=C6ONt4+84 z+S-n3jiuVWyP9Nzo*rN={G(#6qG0M(BsM=q)3#6e?J?u^pX-lIJ?(#6WZ%U4e?@EN z?!NQ<%Wut1H`MIAww(Fj`a5FF5|5nz^H%$q(xt|-L$DAV+2l^2~BY(7hG z3xq38H3)wFR*Z|C^Ufa2mFL%7&kW!Rtnt5VUiq)-{dRxLW|?CJ%{Mb0m5L`VTFus0 e&&&I7hGRFgh}u&t+sUt7V&@+d>Ed{{P8a|oPGrIW literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest22EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest22EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..66296ac7e75436772e5b8a4f6f8c39a7c1e10f8b GIT binary patch literal 923 zcmXqLVxDf$#8kh4nTe5!iILHOmyJ`a&77K*e6-aRHN_jg*q-RgL|&}RP-l^<0LjDFu;Tv)?oS@Kcp>*`gP znWil9+U2xSZd%jo#P0Jc)dCmtqSYDhc$B>?TbZ|d?LLX0EZNJ27qIeFuPBxKTUGz+ zRgJZMS$H4a=e(U|Sr&WqPE`}{$Go7@RkMEl3T)rq+QJ^Y%;Z=u6Eh(I}QgM@PYL6Gcx{XVPR%s`CuRp;w!KS81NbJuyG}{c`&8|6P^KjvI9m3BSX;1 zg|DSGDx#j8+cy958R_b&e(MfCJ-hc!>pOWBo1_i3jF(jzGLP=Mc`Pf?@lV{tbV0V_ zYxfVv%RZA!cYJtZ_Eu4G_T6vhT>J2{?cdpgTZcn8GBI3P^x^QYT1THEt9v3Y{+mjBPE9?1>aDp=2U^$gc5kr_Y!T%5Sd)nG=-ir*WAW*s&@TE}!>7J*ymXnZ~MIA N*3>$K+XB)7+X2S@UHAY1 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest24EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest24EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..0a1b85dc68062b841567516aaee37b7deebca480 GIT binary patch literal 1016 zcmXqLV*X;##B^r?GZP~d6CB(+$<$iUFhP{KeAq<~qNKQk{SvnVyW#5u@E!P(Ks zKu(<3(7?bD2rY~a3=E>gd5sMWjf`PjgG>@_vNSM<*kllvn3I{J;OP>eP@Y+mp@3|$ zt1Ge_6+n(QGBIdkR6_PABP#=Q6C*zZP@IdYiII`vT7%E-+~{wv;px*(Mep{l|6UzF zJ>SKkaodSs2Q>Gu4{X^J;O|ku8EV0oJD0&jV)2YU3tsG7YrJ%B>y-!d*Z-LQa=nvr zZQYsqYKo5~pUCd}cXqb_)Xklm@~zij@Vf9!>%M&^=GM=|<2(0np4Rr$vt+Wgq`|)1 zJw*rg`O_VheLB78oiJYEW^sDomRUdNp5-dIo#GxlQ;YxTjeg#1b{Qu%=I>7uR=m?c zHEf@VX5PV@e=jx#Z#q|L5;K+6c=CteOW%oZFneLRpP6$9L*<5A)3opzU!wL3Keoy$ zoZ9p*S#WcQLULp;@0VEl)#v(K7M`5y-%|2bB=yro-Gfr|x4z2Y;r`3S%*epFxbe6_ z;}HXSU?9sXvjF3@L8L?Z;pWYsa{d{v+}EAB%6d{e>ypLb1R=}EBE}+;y!q*~IfDL4 z@-n?|()xK;1>XMWX}|~4&(FyCpM`~)iRFWVIEb&nB4EI0z{AFs(B{FI3QT$ij0TY) z33-+vg8&1+MLtWssFw5$k>eVerh#$I$e=pCL%>tXS17VvigCAb?0OY#M4`N3P?Y+UeI3q7^^WByErQEA=JkzAfoCzoT2{ z#jw&RA--c;v2nwkbCdKUYBKc9%>j%iPi z7EV9Ye6v=pKG7-KP2~I%+u(&vvb(?AWbrA!oaj~gpmwSA>m5qBCfJI3UYH%3e>6W* n)MIPA@s;WlR;R<;Wo9qh?)br2W&P21jvJfX&+8V>vfBy(dct=p literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest25EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidIDPwithindirectCRLTest25EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..6f69c0c8bca864b23b8ec3fac90b7d060b022bef GIT binary patch literal 1016 zcmXqLV*X;##B^r?GZP~d5E<~YacZ@Bw0-AgWaMULFz_(sHsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;148%YRn1%T>^HMU4Qj<%ZgM1X69gPg+ z#CZ)33=DzL!q~vTAWEFq*uc=p7{)coB+({I19ON?24RUgnJEgME&&SVnI#zt$QHZ0 zBD+xmPf`pZI56s~lZ%%PKMCLR<8| zR}ThsQB2sKfem!-1qL!f)xE@MFmIdE-4=i zYkS_uv~zc+%d5b$YpeI&jyq`a{?84zj)IU2+>au+uDN9Jt9p5u-HYalc}vU^%a;ku zMQ&?3bGkh=d}-Z9lk8Bv?ry=LJ7r6BcAMRdR(WQWclDB`y}*XTTjnwAVqYy+syVs% z!?V=eq0fIO{(j1lQefeHI@!@bc#B_6!wT+8WgJnfKDX8knYmam~o!xAt+*JlC^-n|!kSKX)1hD_T!J^W*Y_3gf*7 za>8dfZ<}(<{C;Z7vAWJZp!026Rrr~!pTcG4PoLiP zcz;P$ns@I!4PWgxKhX&y&F@*J+19?_vGvx}Zjo6R{Z9Ben@X+KJlG(}Y~*gh|Shwlsy_3h+9DmgE nd#AN85K^Mn-N{ z1_M7sZUas>=1>+kVW!YvLwN&P5Qj@xEF`tKM8P?=s3bEjGdZy&wOGN(z|hc8&OipF zfLU17CqFM;Avm=tGciZOuQWF)wMfC)(Lhd|*U-Sg5C|=d4GavT#CeSk42_IoT!VBH z?K3wph1jPTmY9>7qJYI#S65_rDu5hrXlBsFsD$iSMpg#qCPsb+pg0#(6C)$TYtOo1 zDSM&g0Gt z_glWXue~VtcIw{4CvqE?^hArZ6eTv5Ke6(fx?FL`^cHEU|EpC?Chp^Vn4&A{^K<9r zh>qhHGWV60CWd~P$vE*)sJ_^Xmc8G+?U!77+N}LJ@2UI}y9HB@UNT+%C$(BkH}{#= z)DN>CNA_P{o#}q$=!-_yC7~``*e&ANf0VP{5IC{+l}*XNA7RDW?Hk{25HxO?^8cVs zrHr$VYd8}#BLm~&Y=cY#d0+s`Dziu!h&70CCvSIOcZl6cx<3E0)s9!(|F5Sk0VfGr zJ{B<+k-FBcZM=~OJj?x5p48ox`?_hr&MpH!kbZtf#{VoV%uFmF48%cv1r`AVJ_8;$ zu7oxZ##CT>G+;!I4q(y)Mh7E<3AeAzSEK!Z6L-u$!XR+^0)VfGIwKZt*$rM_p#@wh|GNZ ijcKLluk-~G&(?XDPRa29lfcWxv&FgUq-2tU&Qbs)wq+s! literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidLongSerialNumberTest17EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidLongSerialNumberTest17EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..96186587225d25f35abd8be7b50210b726c18da2 GIT binary patch literal 946 zcmXqLVqRy^#58RIGZP~dlSmyS6Eh1d8#@Ol7dHd#AN85K^Mn-N{ z1_M7sZUas>=1>+kVW!YvLwN&P5Qj@xEF`tKM8P?=s3bEjGdZy&wOGN(z|hc8&OipF zfLU17CqFM;Avm=tGciZOuQWF)wMfC)(Lhd|*U-Sg5C|=d4GavT#CeSk42_IoT!VBH z?K3wph1jPTmY9>7qJYI#S65_rDu5hrXl~HNsD$iSMpg#qCPsb+pg0#(6C)$To~w-$ z65l+0v%Pzdx}eKO{j!_?*$ul)XY1axTjW~o`$&ygDcl@{k+A38@GD0Jt;ipTKKhc>2YPaVVkPxvxT~+R ztUuwX?yTEg_sb-}aDLb!gH82SPcQSYXUZ{-zp0Q@Agb1AecjYu-mdLf(CHmhvlG{7 z|FdgYd|P>*DsR-0lJ%c*CUnIg;OVpT_FFW2CR4OXJOAY@PI#l1%QiV!n4)VT#w_Nq|*{UCz zf2?id>gC^>_j?*|O$}){%xKMhs(fYboQEg(|77ByvD(om<5cNg=8Ck}Y#T1s>xCWr zv+ud%i$~259Fh%w8MJ5GtTHZKaxoz_vUl#6#10$JK;B1HUp38t2n(-Y!T7JFvf#>+2I2hPLY%mW?%*jkq@Jq~1RdCKo%*@NoOIL7CEXXVY zidQ9;Waj57xVj>{Q32#=Q-dZ(C1h_hvNA9?G4eA2#krW87#SJfJ#fs`)7jEnr8ZAL zBB}D)9sX^)Nh-VQX56{ZuN)=($LYu150C5RoqluKI5{4QPugkiVSQpTLyBjID#N^T z>mT1c-+JF*7c|{^LLs*5$h#>gH}l)x-Dss!v&&oX-+%4;lj0v1Khw&c{g(gTl!qJE z^#3;(<$f5|bhq8Tzt;Cy$6A94XUj9}SF+sMpK;7x;pJ{M<8}MnwzY22O-y{Tuq9%W z=>1a;tM6|uKhH4R?qu7^pb~@K1$yT%+|k;2E~;!tmz*d|MRnpoMfD5Kk6vDVq@|)> zCS28YcVGY;K%Ny;;Cr>b+G+xaj+N`CqznPqrOAARGMNhF4hQITJG@ z1LNXsgG>W?U`WdBTv3xKP2brh90!$MuxnV(VzHv4o|ryfB1Ul=fY!Wm>$QtHj9NF@4oBcv)1%^LrDPRTK3;x z;}0Ec`KR^t_4Pf%n{EZiEo6Oe@g_^^U8Zuc?op#F)7SPohy9&*`}MDi&BgJx9q|{9 zwN`ApwWV)6hmxB70nLxcn?!w|{ruB$(%eI!LT4`PulHu9vu3gOMP1%?Wk#&y+d65k zZ*r%(W<6nfqnu}ccYEgjSH&N%)LJeGS}l^5cZ-2t?)d81)rb6AL^sVk^~uC){eMH5 z&XeBzy0pvB_&4cv@U?VGy^=ItVrNm-dT&}r%>T0zd3yPNywaQR?%@5lUG~^|#V7d0g=^U#Q*>R literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidNameChainingWhitespaceTest3EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidNameChainingWhitespaceTest3EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..fc0f65d0796a9fd82dbcecc735aa9588a3f277ff GIT binary patch literal 923 zcmXqLVxDf$#8kh4nTe5!iILlYmyJ`a&7BVs^i{-nv$(LlfPui$rOfWc2{fhegE8Ux+eIxy?2&tz{4}If3z1b{F|KjDl*TkPIb$M)8*IP208 zAvVino=fwwQ>-dtjho~jaywjCJ<%JTf8$Mbhuyw?{k|P6YVA+9ZehHe!{kzTfTwlW z%U?n3zcMj1GB7UAHpn!P2Zpk&GK++PSc6CeV~dLP9_^qhUbagGibMjxuD3b~jwe|@ z7BLo)^ELpA?wp`x6eJvZD%Cmv6Kb(njx&GBC+ zEG}{U4`F)Wp7<+FN_t}4-821W1<5yCKAi1&|KY)jW4=EEdVZggjPCATb1+@l>EyS# z1dC5iNz5Kb&qUbsX4i>MKHU8;uv=qS`L)f~0%D4jX7Bj$!~gV&DKXp^e=UAmu>7|3 iOMCuPx6c@wZ>>LZ_+NLKsO5d>^1b)g?br5rdJO<0I$an5 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidNameChainingWhitespaceTest4EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidNameChainingWhitespaceTest4EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..a8ffc872cae3fcb86bf3917a93d68206152a7d09 GIT binary patch literal 924 zcmXqLVxD2p#MH2WnTe5!iIK;EmyJ`a&7h&j1wXVrpV!WZ0p* z{`2$18GD5Ld7=-@{jj)A`^J*WXv6G~cc<@sy5QozcCEncs7D3cFX`SbSn+_p;}p+X z)_?E&lHwvCD>~kHQc}zH^Rqi)`}g3fUoOW!zmzL2-e7pIm&YMd(c|3CJC@Uq&I~(q z`nvcVJF%84q7N=;Of>#=s$D(MCi$ec?^^bJvG1{)g4ALvU4w)Udu7{n<}wHFNzrPV z)t3;n)tNW{`O%NApE;IAui5&=^6icM3vc?mI14viv+L$KKK+N??#=Gc`U% zeYwf~@z-M}W=00a#n}d#2J*mAmQ`kvFc51HiC}C|k=~;nG{wtysX&oP;Met5C&BR~ z%f}+dA~IWhjo4pNj!NmZ{}{TTPWL!)Ze^MQA4oqxBjbM-7G@@v4+i2Oz5KXAG&=vldI&4Egl{EPR(Opl*_ zTx`Cz>;1aLQ&soxG%=B6nOatAEq3NtKwW}v?v=}u4+LBMZ{L`18nnKshkN@K<~fCa z-bw;I-#$IQUzhaK#Z@nb;YIT7UAal?ewOU6-*U@k=aU&{`ZEG~J}6|RoLm|@^=IFo zpvW>Q&o2jN_M5HFub6 k`)}mWWBTVZUHin|TZ}sdtTN5-KJr_(=g%2wW@$Yw070B#k^lez literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidNameUIDsTest6EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidNameUIDsTest6EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..7d0b70611374532bab250dea312061181daa4ef0 GIT binary patch literal 901 zcmXqLVs12OV#-{=%*4pV#K>sC%f_kI=F#?@mywa1mBGN?klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWWb_X1(4g!44N2~kbT3* z%D~*j$j<;2=VEGNWMtUKVS3r`s^^5eoV&H9Bu?aNY<~ZB1NU=|^I2Nf4<>h(|C#)v zx+-#|@ix6Rl1X)`WubrfS}}Vi$M^Pj=kvB+5ese4sQ4UPJ#}(kkF0yjx%q+&5;IKB zU0BNC;M~AubyU;hty2jcYSH7DRTW3chgqlF0_4Lq@P z6VI!BTRtsmt`egT+o#8gR;CpvCv96*{4aHfe)q2Xn{Nb4MD4h0E;jRrlHlS8ivr%9 zJlg;L?MHLhxIorP%Fp)A{<+qyID zdqmEpb8IX>YqzJtZTq?F&(r_%NU!~Mi|y)8y-@bXRm(5Fj{U#O=wi33&s;fo=ltVZ zC(oMfTj88yo^W;AR*jWsSpNLq+rcZRUnP|)ysUoCD~ow^4?7%BsAx&4TX%1R?8}c^ z<2?jUoxa7>S!j4*ZTW(z2)1d*>fPM`dmhq%G|OV@A)cGhB~zy-t>cldT=wtS^eXc& zi`dwIaz0$SfQ4`A&NIa?B#*t#sx)J{=rnP;*X+zK4UgvX?7Mh2lbND` z!)8}kWcMn7JYZ;I(8Q>O>}N(+2IeM4eg>d87gG}>Bg0cg)8z-xNj(n`I9?xZtNs0C z<%($Tn(tNT7;Pt?bencz7WczAvu{<~G}g&^@4aDtfp>16!6YTt<;*(o7PhQuFF$_e zrG3+OvGWt`Bb}V?C?|xrslJrH$z;~s5oUYuL(;eCgu`}L^IkfwJbqug`}M8%Pg1El z$;%GBcV6g!$16!utGRw~UrHz9LE zh|@Q#&um+G_~sR!$%<{deC_Jwt*hRBbF(j$ek~E>uFTJJ*K%p~{j;t2bq-E$-?D70 z)k15N&u`Q&RtlO)Zn~H6m1*g@VEfAb(h83Qe=R>dhhuBnlZ{zE-!6KwGBGnUFfPtE z$TW}#2C}R&i-dt#gGka7J=0_SM_)|5z zFbM*qgOR~Xd2`{LLk_#FmlfGLPOp$>Nv~kop49d5&>`imTFrk&%_J&Jqg*O%{ET-c z#Hck01T;UJv@c_udFH;o8}*m?Ow(KGeKNx~(#>h|cB6pqq}$JLuieeyfxaOvt6w}MIlDo9?4 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidNoissuingDistributionPointTest10EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidNoissuingDistributionPointTest10EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..89eac753f30a25f86e1cdaf7205892c355025fb3 GIT binary patch literal 1069 zcmXqLV$n2cVisJ$%*4pV#K>sC%f_kI=F#?@mywa1mBAp~klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWR5wrsDc}~C^UGJrEG{n1%u9F4EG{X^ zOe!tO%+CwR&&&hrb2N|>=QT7iFa$yiV*>+&C~;n614AQY7}ubHM2j5^>_8SX3!8@} z=47TQ;IrP<71`wqAg=)3(!{8Q?0ZI52IeM4eg>d87gG}>Bg2h33G5a-loQi9*f$ik z>noJD`YRU|AG7Q{)7op@-5=JoZ12GZAJk41O~^f@tQ$0O+L^dn+mzE(r#Pxyj6Qo+ zU1^U$&yC(}^(`fxT%TJfyn0q({NZGfw*DQac*AY!U*i3zuFsI;?fGP}sP((lse-iC zxz+BzYp1s#@x0^Z9Go<{`JsK9Q&1x7Oa{O7-*djNKKCMf_G}CJY1&Pn4z7Ol%Wlud zXob`B-h7>6?c&vLvwySO#;d=D56tVCYE!wW$IYZR!`iCrPZEbt!`o*<4>OD>nH^TV z+;GFJ?(_81p@%v)ZP~ZEt$GKfu*hCBvbK-+*xh}k*F2RSJKGXgLvFfwR9 zi{f*ev~A(E`Lh`GHun`~auf2B{z+0eL1bj=3~o(JyitG=Co`|4~;i|^Z3F-_G? zOsgyyg0DGdg>~j@=w2?FRw2rk(#$_0MsVgQ#=JMZS!J_t&CZB2aO1n`?Ifz+7;)qA z8iw!l^A4|bWOyXLb4!)jwaJrvVQpWuKM{>qqvXjKR+%w)pkJ9IzsX1ga>El?@o=gNxzT~ ze%ag2Hf8Dp)`ZpPP1BF8OU!?u_@yoDuhoa&FOJ^JnaomG%@BKO-}h`I$*F4YlN2o% Nty5U`$IQ+>8vrE$k0Jm7 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest11EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest11EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..865c97542eecbae607874bf26cee1212e9e74a2b GIT binary patch literal 936 zcmXqLVqRj<#MHBZnTe4JhzxkyIJMe5+P?ELGIFyr7(^R#8*s8QhqAB5Mh0@?yoLq_hCpaxY+zszCC+PXU}$6v;~FHBXgN?f#B!~$ z#GK3&1vEQdU6CEE0P=yMp+OU)60)ZmSs9p{82K51;#^EkjEoHXuHK*9B64`WM~Xw{ zV)MGRD;}4;<}I0eV#Q^@+d+531q`!ig>$cTn|?^{;faHg^lM{Q zo3h0J6YtX9IX}64K4bept%Qh$TN~>|F zndR4a32GuizwIVY(3|pnO1kfg_N9G-{TUA%e_lT1@yw>RLg!pAo0fj#o(Fd(aNAe; zK98BaPB7@Zo;_dVYOR+>O9M6qtX4_0w|=`geWqAMD z>B~JEM0T!{U`y<@NEgbJk*415f^4LI4DLs{5_nL>jN#Dap%ymSS_l6+$Y zXGa4$ab80M14AIRFg7qSh!W>DHZU|YhH(v&Nwf{98)BPQSYl3Qib6nsPG)i?+*(&x zWEU!coNQ=h(8Q>O>`O*g2IeM4eg>d87gG}>Bf}c^*UN4lD@)|{S1~rU71vqsf9}@Z zA3Rg9@A=)Q&K}Dw{NnWadPW(8L`#M*U*CRN!L{tg{?k22H4aKMzh}>#bb;T-P+91$ z{%J$ORo8WY-{PvA$QNVZn5!{|BewSV$GV+MaNj_xJy@INfrUpS6CKl7>uc zc4?3C={IM(eqEZd)jN0UE3duAwk|@`GG5BeUu|<+sq{iZuKbHHTQ=LJ@_hWr=Iq%X z^i1j5$)|Sq(f0Fr7d{DW&F$~9$)A*;xpzsGuc+y+fd z><03{0G3r|kuVTz5c%_^H__Orp{CZf{a$>~@63;~2Zg{1LY9w3j73ELD)Y9F%RMr) zuV1xXk`I1dx^q6g5{!EH2JZ&IG2(6ovB4k_-hu&)^VUUtEbB?gTr z*jRvGWiV*mZ_v00*;DJK8rKwB5br4q3{NHIRYFobNq)fy3L_%Df?6y9GYlg`9jhAC zcN^W+jPPR|k+?4;ewP+RJ zw!JG1y~Q{ZTBKTAj#XDI<@KD~en;n`WM|X7^S=BK!e>o6_;vpN-#$^oAt(6%=3ZDe z{oJRPD<2oR+?|v$)4VO^V26oWUzwQpyx*D|4}Gk3U;O>$ha>i0iKi^8R{iTumX?iY KuYJRQ=^FrQB=G3~ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest13EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest13EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..2d1b18c33f4194b5cf566fee2876161f2e986639 GIT binary patch literal 929 zcmXqLVxDWz#MHWgnTe5!iILHOmyJ`a&7lbKwp;G0-b zkeQdRU|5oGq~PpmAScdiXkcIngcimI1_n{$yv7EGM#eC%K{AQ90(C=d)e1|@$xKl| zv)0uW*`*2~ryCj@G%+e6`<9WFfw_s1p8+V&#ni;e$guO}=D%ro!}@k6g={un`Ga%X zToaE2)3=`#z3^XK-^}SvURG9HhKy71-7Wm| z{*Ql8PUXFsr%LTE&$)c4=Ir#F>+Yrgx)gqK!uCmlkENE^7P78buOs|PK-Qw%=9uHs zyDh?%wu|Bq-?uxmx*b2pR=-dU%5DQE3RylDF%}UU2O;P4FS*`K zT~sK!h`I3YvYgrg13r*`en!UsEG*1SEFTQSL3{-k0Ruh*9yYFoHV?*BVDd9yLXHk# z;sZtpBZJr5mD}IdM7o^j>-qL|X`QMw$K!;qP>_R5p zkOfhef>}pa)rCr!Pi!x4I4b8dq3m(az49m8CpjaP+PY`W_msH*`h4@(2ALBHHz%L| zRWM=I=7}!SXIhum|7Ez&uu}QbfnzLReT6C;HrA{Uc+Kc@@Iwy!zb~K7yw7*1y3XU@ z(ORDKI6|Yiu;N?Z(|L!Qzit*4Snz@Gg^axH)!HYQ9|bW<>^`A$>B;h$FN{Unx0P0z z|D3t6fL-?QJK@hyVk~Cwn5lMWw@gO9CA0g5Z3?A&dq>| UC+CI4ZXGV}$a&f~?avQx0H(}of&c&j literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest14EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest14EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..2487d626f7f9d9f3fdcf942ec67f36b7c743519e GIT binary patch literal 929 zcmXqLVxDWz#MHWgnTe4JhzxkyIJMe5+P?ELGIFyr7=##d8*s8QhqAB$iVkUgi}?(*rMFLIBk2j0B-+*PCG*Hx}J`?dEDA~cz?;O*wrDguiJ9T6g$s)`Q(i4!wdgEEaxsQyL^MiJ#M;s z_WnX{Med1rUhAvQN&l&KSiVrZfBqG{sA|sb>m`JO+fHBQnz3$vZsQe=+NB4UxXFE( z^3rE|qv7(*eRd@N!tBL8k@oH}HD&sM~U7jBcHm)<^1L@~yWc<&d{ZEkP;+5uK;!b_IxrzO5|1BefYQ`(`CNGSbdT37# z1lPDZx)yu2cPxtZv4gPe0434{UVzMA0~B#S#6%qeA=XL&*$lT|NVEZQTnv= z@;lK7p1xk*Gt~L+X}Rhz{`*9NmoajlnTe5!iILHOmyJ`a&7^cRIa}5oe7?qGc$jHjT+{DPw02Jq9YGPz$xVFY({)+_Zc}LjOmT2U=tMiInXNoz< zG(YNJS*2N*S!Yjkyl<8!ubTZM+rwWEUQ$kB5O&wR%yZXz(v-N4t51ZN#64vX7n{#~ z?(pi0x-T3C?tH;7_sf=KGc92B-C?HkZI4ge?CN{fsdbHO`okOKr@wq_C7%-U;2B3# z5wGB`={LT(yWh~2{m;wt@2~?~e&D^EBHPR(c9pzW^l>;bTdK!qqiMBS+Ul3Do}9im z)j;*&7MD3&AFz9Dm1c|5cZs<2O2Kirp`U=1#IIge(S575*zfR9S;gAY`ea>YmGKR> zoOuFo4tsdNPu4$^yNBgr;;QR$Zj-0oV~?FzRJZhH9_tOBzf8=G42+Aj4KfYnfnh7F z%mR$g29cRZD>6^p8kZfKxyI$`2EKngzuZ0!P6x7lEMhDoQy1CHKX|?`gLhZWDhGS^ z@Q8a|p$2>){rrrK|5;d=nOHs;h=ceFECL3620UzB32h#XslXIxz=Rwf!1M-;4n~I6 zdlzbdSQW_1WjDWEMP()<@W)XM*Q-}>~*+Zv|+87dkITEUNe1W$)n8hl-CX9b@WaU$o8S2q zM}A>a7tx$D^UQ-^UM-TEw&I-s--o&TDL7Xk-lI8YGcur;&jH#7@ny#GK3&g@F8= z%;ZYA<*u&C?o!h-QPv#^ft#x>fUMG>399Y;l%X|4*#uxHFr_C-r1v)H(edtJhncnpB^6ZtVuXZ z>7;98?p@&pMWzOvIee+_AM9o;d{n%CU2W!*iDtF8R%cImP$74Q{rR3x-9KI}7qyuc zV=r3pM`PJdp#`eR(p7!`7w?Im6Qo?qnHJx_-f3PYTc*y`;<@fJB`JO##UaVo^=6!g zEB@qd;w`G#nSb4A^7Io5^$|aJmc6|1=c*gP6%okm?WAs|mfE;w-rO36>#>Z7E(G-W z#&}9LKNo(rF6$8AW5@Hsrq@1{`zQuanRJ8o#N~gUKVQD@w|9SZguUnhBNHW?VA#qkvq%_-HHa|8TH5hHU8NPL`)yr@)>`A)wzG@DDMFTyMT|uxyl8*inq$2c z(i0BMpW?RUpIq>sC<8u_ett&A|12!bOe`M^#6f%o76Ai310FW6gf8U6kk6l|dP~dfojEdbd8B-_UN+Klt5B_wn8@E{cMG4lAZ4ZRFs&dG)%| zD#K;E`)Uebrt5`zjHlVZ?Ro1LxGkjkowR_iBi(PjFvS6fplxp2?&QGOrZ2 z@80ln)7x#Q;`iKRx%ai$v!Gs8EB4lg8(jZSYpq?`SLp6$bx$Bs;Ev3N;8jyuvd)SZ zc0T=LdFx_B!lOuc|D8{ty}W3uV7EF;F=687WL|y#?|hw#2AZL*W>f#So^lrt_!OF3 V-uCc|^2R;cJ&s;qmvWXp1^~x6TiO5s literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest5EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest5EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..d084fc7215863e33f2c18b8ba9da9b9ba8f96030 GIT binary patch literal 924 zcmXqLVxD2p#MH2WnTe5!iILHOmyJ`a&7ALlagybWA6NeTIcv!$rF!VE zxAW<}pPYm|Z3@%>x$TxW*d7$bcUJ7iz0wDtZ)+)S-fHpp*+7>>1XVdk%TRlkm3j^n_Ni3!7%huKE);n{&IMXR8mHdNSa{q^%&(E|iCVnV0 zdp7a2pndm&yc}j5zXBu0(qHZRwSF<1Vimq^Juf?5u0Vaore@93kM zFSizGeyW-C@fG*EY(DklscC;_@&A9OsKshHZ*SfA6O-PbVR+``SF&VtK>tbmj2Y~g zUz?{JDcqm@Q)21_G11kw|7LD|Ip4O@~ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest6EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest6EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..97dd2e72c11b23225a0dd30e764770eeeb2d1b8a GIT binary patch literal 924 zcmXqLVxD2p#MH2WnTe4JhzxkyIJMe5+P?ELGIFyr7z7w{8*s8QhqAB zO1RywuE?%b06E*tpovil*`tiC49rc8{0u;GE~X|%Muzomk2Z!cUe79Vpl#pJPeRkW z^Ezt6%QBJ|lo-yv{5R<_*R}sYFWr?_3)7s_=D2#NOz9L^t`iOsGZ;Rvfu< z^_uIys$PyS=N`Se+fW}GR>D4^|8m66)&8emukO>Ct~@XI!@St(Q>ByM@}8cZ+3q>5 zk5}dMk?V6_$9yQ%@7%H^v|skgl>(pU1GAR~8K%X5_ULu2KCS&+FUp&z(AC?(A~)z< zyVr@EA)9V4H|;j&Jnq3fPqUg^Q*hxAl_T@hXPK+2pK{+~8soDhZQ1#`Ow5c7jEl1k zG7aQ`VJoZ5B4HrbAi^yEbSlGNEz64ar`^6e%t+;8db=B(9%T7g#8^Z&$KQ5jn#XxN zu{EUqMSy-5vSUwntgZK(80tS2rJZxMEZ61uNz?5geiX0ul zbO($MMuyCwN)49+mb3`BT?sD}REiI-vsRfkW1Hm3&SR^UBm?bcS}lK+a&$(iqVjyJ z+xNRKXzJXMw|<&^BX6QX{uLjp0DdM+qmNGt8Njl zYg&nllR1qh*65vI`L+L4da;GvR^5u#H#mELI~!TfUVE3Ot`U=h4P4~B~jP(-ydv9UGu65VUoOpuIFx++BpS~!X)pBEObD^3= U-nqx8WwtM`h*jCq|6++g0H&2+4*&oF literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest9EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidPolicyMappingTest9EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..ef1ac897e08a3bb4831ce3972b28f6a785f8ae75 GIT binary patch literal 927 zcmXqLVxDc##MHcinTe5!iILHOmyJ`a&7A-4f18*?ZNn=n&ou%Wzx zEQrG;EEbYlT%zEdT2zvmmYJMbl3J`_WMF7$sBEAJQot-M6_A)$8IYfonOv#hn^;hg znU}6$Sdwp~;OuB1C(dhVU|ok?-MgJ9cPP%&c9!AtkwAMf4`_?wSdX-iaXZ`8h^9W z7X7D?vFBCY62EC3S0gT0FSaVlRNvCNuYax0GMP6H?^o~1lKF8hxVYFj|E`DpIgNMg z#0kxzFwOZ= zyhrctakWFXwO;16EvL(uw}qsOT)iiGP*(8xde5K_ob$RSKB%j^-^j$w$iTQb+aS|G z9vHT=$}AEFVhtkh%E~x;{LjL|%*67+KpezZU=c9jGvHz4N@(+7Oa&%B1N5W^j1EQy zAI~Lo8CLLg?mIqhmd0ZJ=G_}-R$o#{)~b#1NZQ5LCwIlT#MatYPbJXf@izN^ZU(X{ za^E~B6umV4VmM2z-LB=~%)jxB%Z?@=*qlDAZS&;6vBCP!T{74p52%DHBN zlw9S>kFQdf#Oz-Be)>+;?>{8h2_2{@?4P1?=sU0M%Ub0hPx=*&+xTCubGlPN2^UDks z4CGJ*1%S#+l9BWp3L5Z(%;gZ~@J%eL%t_2kG2}7e0tvASGaH+j!d#&z%;fB7AScdi zXkcIngcimI1_n{$yv7EGM#eC%K`Bf*k&bpXa0Xe$ENl~&n3I{J5ai};Y-C}e;0ts| zVo82crGjHgNl|7}X-TR=NM!-gudc4hepdhmhPgo#qY`rXF|sl+H!<=v0L8hOniv@w z?xq>EtUma6W{h#Px96nad^`M6&{oyXIre#^gXmrdBGGF z{trJYf8W%S(>&++JV!t0bMmzZWv8O=g(^Ldi%nqzu4ImP^4&W;DKRn5+PaoM8d z@A6~zcZw@jj-JxL?~y(^Giz4Xcaf_%6z1*cZ{NzqxFF49i8)iN+=`~B`@ZB(-Q~Dd zxR&qywo_|3_paTr`|#SQm!^o7knR~ycBGGDsnt+h4_nZZv zs*4ZFZPt2Iu>9j$CT2zk#>LqNnFjK};FeWpkuVTz5cv=&k@WtYsIbby^w(Cp;RiHC0;l@s{2>}u5qlZ-9LMZHetKleOY=dPg3b2vCbsHbNZSL1d` zt5s*B4$aB+deO0NX#w}KAQe8tXZ!p%#;Dy9dG}a}jrF<0S?0?NzI>jrtLRt8rfKT3 zuT3?!`IP?sX)B-GyGXBTrTMH&;qzu%LAtwNL{RXkMn-cQ{6plkGp5aaQGVm0MW5_sQ>@~ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidRFC3280OptionalAttributeTypesTest8EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidRFC3280OptionalAttributeTypesTest8EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..60a20316813bbcb0fbcad39e79b5c5538e0dad23 GIT binary patch literal 1022 zcmXqLV*X{&#PnzZGZP~d6CiMYb`dW8OZte{W~0=p^|>$^IX@p z7HfQ%b5C_}=xuuJYBFEpXtAR)>w)&L)j3?XzXbXemsQN}PY67@;l$$P-2CL@uWcD~ zS>oqOS? zHK)|R4|Dh$goA$1YQH7E@!hpvr|EN}j`ke$WnyMzU|gJSkZB+f3~gCu76}8f29eo$ z`SxAQzdYaCV;FsIruRgdnwq`f1SiYKBE}*TWxAz1HUDGZ+Tes$y~^{Jriy4d8}Nbj z^D{F3XJKJxV)ha~XNMBUH~*X Bbx{BS literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidRFC822nameConstraintsTest21EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidRFC822nameConstraintsTest21EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..576a1b81716124a048d3486659d8348acdb18fb9 GIT binary patch literal 991 zcmXqLV!mzA#B_K8GZP~d6CB(+$<$iUFhP}x8cq<~piDlaiN)j2<}xTGjCGq0pr zA;`_y!pKO$+0oEIPMp`!z`zg)EsPBe45Gw&jSUQqjA2}ZY!WTCHn4+uE-8n0Qtbk(4dJ?3E9((tPIRejQk8haW1ANMn;C6r~b}xX;gIlTh!D4?}Omq za~=Ppe6*J}B~4oU@JoZ>UB=SMT+#m~-sl z-}cX*H#F?$Xn0xfiD>(_^4Yt*HH))FcbWUS3btLG3}qk?w|>b z@~o@Wdl;71AD{5UgqN2y?u0t0p8opR9Sv$XX7AhPpm6+S_eTNK#r=PZ{zy25?wfda zpTU`lwmi0WpPyylb@gg%z7Tad`1K)IUH6LZCw=DLd?>X<`EuCW;LhyTAwP19cLeHK zM7r@@@u>f@`f{y|G59oXG0i$nU*sX~&M`{S$A$GWL3L^$|FA$nvp>v52H`F4kw| zesTSjuE3jjOpBaOrYB!9-~;LBXJq`(!otkN^1(nH#8+SuFyJ%bVdF|@^I%K`rb7cp z17nbcAd8NHR-*8&IgDe>v0=a(VJA~5L!W08@;R)1pk z`5D)jyy5nHv)|>k*5%e!veyC^Ex35==)0M#cT6`wmTt?SSeYSxz#_r^;nAp2zEwgO zEN+@>9hLauGG}>yRu!`zGh;}^+%&m_y45|w?b$UhpG^;~b!A&tCSjlVa>``p*2VTa zWzPonU0!}!sxfN)pYDIIt^(Z~AAkC~;K^LACN58=sWy_YHrXAuxl&P)TDZ5VH_74t z1^Hd2JGeB(+$<$iUFhP}x8cq<~piDlaiN)j2<}xTGjCGq0pr zA;`_y!pKO$+0n>APMp`!z`zg)EsPBe45Gw&jSUQqjA2}ZY!WTCHn4+uE-8n0Qtbk*r16~3E9((tPIRejQk8haW1ANMn;C?-#5>0dOJC0j}H4whN+jc z?!6Q^QEq-&_gD1xT)&FGBiSrQZ#5aRnmKkH-^0#hRzBPPr~qf%hv-=v)AZF^6$d^HX?H!xP`&X?I?VNuT>NIdex4i|}T*Q(XI&*BtY1zsfFCvTBl0Kcg9AfWz)j z3)_BPa!Shnw)3Yf|1`_HnRApknJkv`;SpYB^Xo-Ytk2a~5_c?KUCArE<&??9%*epF zxN(|6<75MQU@*%nvq%_-HHZW@oc-ll2J(%vka%)+bpR%^l4PV5rzppUFOvex1z(6wF78gQ zlhaf*7JIQl~|mSX4+Oxe4${NrLppQzWHYDk9|s( zryg5<-F+w2YGGzS$JNI2eCI&@es#}7dt^>AitoNW;|VKMdXinC?Wya|IzM;5Te4&G z{*8wUxhJ@6h`k_Jd495PheSb_^_~@TJ}#^eZT0L6W7(W|=~SxlQR%^&3_z0szC8 BcB(+$<$iUFhP}x8cq<~piDlaiN)j2<}xTGjCGq0pr zA;`_y!pKO$+0ocQPMp`!z`zg)EsPBe45Gw&jSUQqjA2}ZY!WTCHn4+uE-8n0Qtbk)S!t`3E9((tPIRejQk8haW1ANMn;CO4}95sKAiV+bT%+@Ys~80 zddIm@zWDdIXH8u(<~$EtIG*-~YKu74M|5l`T3zJSd3we5u&q~LEB}?;!Kf(Ik-%xB z|5|EkYvk(F@&-TV`reVStF=r#mG-FZ<>l}VZl4qv&wVa!yO{Groy$Istua#XR$t%_ zp31)I#e3T$=~E_OUhsUUc1Tc((Y9?H&esczo?TUJ{>#Hw^Ih7H^Bu9lnL?H|?lmW_ zDW2$JPV}GlaKh{rFM?-?vdvi@clC1EmJ{wZLC2!lZu{M@NLia9!+2nk`854+haRS- zzZaUZ_n+!wjVS@YPk)`~t-qaB_2d7;y!GbWil_KanO1Lf>r+v4?JottR3>Id2FAsW z3k@3Q8OQ^JSyq`v!a%G+WY#WA-&=~M>t8t@w#f;+vBGs_{bF$HkmX|$V-Zp5-uyUf zo~G$b#$4;PSJskSKPOos-H z2F4%>K^7eYtws$@-O%b%Cdx_}16!S^Oq%_@j8xCjFW1 zzGE%wr@ylmR;`+R>iPpV(c_`_r~RC~RMPp$2M*H{S<9z;sA<;B@ieL2!62~ThUNSf zo|}_90=KV6YJPk;(fcOcL}lim=m)``7Ixd-szsM7NUS~D?0T|N>uH|mH}ke{5nB#g K>MCU}y8{5^S9oUt literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidRolloverfromPrintableStringtoUTF8StringTest10EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidRolloverfromPrintableStringtoUTF8StringTest10EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..0a4e150700fa7c754cca75eaf6a32664a1be50f2 GIT binary patch literal 965 zcmXqLVm@fl#I$k&GZP~d6CB(+$<$iUFh(A>Zjq=1=6FDO4JC%-JUNFl8#KUX23 zC^N4lF)1fCxCF>bS18F>2n}(wfbyIj4dldm4GjzofzZO(z`!6%oY&aE(8w6ZH7Fs` zAua|^5QkWYCFW$ND8QYA-zBcDU{5K4ya#ko6QdGxh%mA;FgG#sGXTZ8n3@ zwJ)DdVf(#C*LSDN)^B|so{=l0mD@N=SDCzW5!-H)a$$4k4-bYx2yZ*fnDF# zj@AlF%w9f=J0)4Z?4^bv@0EWQ4^vH3R!doz-Ha{0_5At5_~(aNy)HkF;k8<+hfgl_@TW4A4oqxBjbM-7G@@v4+i2Oz5uD>YI({J5d$%QW_NNnx9RH=6O z;XK6|o41yA#jIQr{=}_j6N8A4o_FmVsjTA*_cr$wcr>u>c0ZN3Pk(jej3nom_UQY&=I#zQaSt-^X+IpXEc3l~9=B@?kAv>zOt)L- fSLpCx=S?`6BqDn2{sb95tN*Dh@5>((EYt-61aE3G literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedinhibitAnyPolicyTest7EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedinhibitAnyPolicyTest7EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..16968ab59b17dcdfcefe4c9fc7bb1f7546f092bc GIT binary patch literal 939 zcmXqLVqR|0#MHllnTe5!iILHOmyJ`a&7eGujZa` z+8lC;Q(gV&wekqdCHsz@J1ir}2P{fSq0{-r-xy4O}bxi+z{XNN{$_@=im6Lqz|DEyoFd!Y&2ElVHaTPK9C7z%{U zlU&xvXE|TMNVX?vv;C>BKN6NU2G%T}nE6BW#r5LPRgxNW>aBJ7!rOPh`S5l6g$3uH zn{J-GDJt#j)_oS2_OJNs9SDtBN>^ir(*1b~^ala5>uv!|CGZCscSD zUeju2VrFDuT%2u?365M@Wflnou?CSI);ss>Qf?>hyX_sA(vy{TBWCepaPpAlV-aH! zxw&+~(U;pVp8Mu3blp#2a?Iz507e5oU`)yKGcx{XVPR%s`CuRp;w!KS81NbJuyG}{ zc`&8|6QTinG6Y5kBZKnv^Aqf+X1ouwb!E8S#ZwsrDfMt+p1oC zC$hTw_@vWc*aH5^Jqt^j`>ELM{G};N)}Am6>k8k=>GAr_WZuJ%5A{y4+kN*_ype0y z+B45*T@}?h`9x~LDH-AWl4{q@Q;&2fywUBo(p~oAT7pZMhOW*TSBd$2EX{gC*S(A) zf)y24%r4D&nQ_nZbn9W;o%{YWL@>FQ{r$Qj^l-6gzV`3;TCPP*K__>~${**edAa&U z;BE)esXLlZ7k6&h{5x&No-6^cc@kN-A0=?zkZm0NDI+1poj5 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedinhibitAnyPolicyTest9EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedinhibitAnyPolicyTest9EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..1516f1ee703deb808b4090602849b568994e0187 GIT binary patch literal 939 zcmXqLVqR|0#MHllnTe5!iIK&CmyJ`a&7TRNw#~7Jv+^IyUER|& zFF2-Z@!@;xo)^BnxhqX>>eI>#3dN7DKEFP7*FXM|>)k_JH3iNVnm!3Ad>QK6m44&l zezwi>pVuf)*tYN8ZW&drh^r}`_fE#1J9g9N_eH(LVwEHf+oe-_LXMiwJI?lR6@PzS z=HKsm8{c=iP3*aG_ekZYWCJ}hjlS>KGUev&}HR?ZZ@`eoI$-*+u4|6iz9%{AZy#*{2SBjbM-7G@@v4+i2Oz5r1}?-p3b0 z5`Xq~GS<&ZUGevW>CHaJ0}o=DxvfhKO5}U@?2^t(5Nta3qL|M~{B-G$bD#a5{0lGJ zykX(X(%5Q6t6ng$v?MkYn{19<5&utlS<3ALpI#KOe?Nmba2ss6mVJK z{%nrTjY{^%PXF_BFJKFeap-z{dBOS>wp0BJl5ZOvpQ=~RZ-3*puIoE}U&ey(7jCUy g^6$alP>v;MCRWWa-YIzR`=*b&#h*`BNxbs`0KN8hng9R* literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedinhibitPolicyMappingTest7EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedinhibitPolicyMappingTest7EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..a4385c1d959fb0db9d56ebcdaf99f6e63bdee257 GIT binary patch literal 949 zcmXqLV%})b#58jOGZP~d6CB(+$<$iUFhP~AWkq<~piE;BD9GbytqAU`KFxzabW zpdd3Z-B2OGP@%Xq$=T6BPMp`!z`zg)EsPBe45Gw&jSUQqjA2}Z5)v(TF>r!dY#o-E zlbNCroSKuS>see}nwp}3%_$15uE@?;0QtwO z794$2J9AnY@9(D@Zu3n2b;>Z z`*JJQgNl)UPycRWFrBk>QNiu|9+&F(z5A!{v?=#a>6)ht4m?u-b9kzb)AwsO`#N$v zf}Wjna^c?QyIz<_mC$>#q%$o-z447SXsF3 zzPI{DldDVPnYEdi85tNCXB%W1$OA)LR+&Y@K&(OJ^I3NLW`oPenUZcjJC(z@bmO*$ z)8K?6%f}+dBBI;U@;@g=n!m}#F1XG8a)8m3zgrCWK>GO^8UM4eFf*}yFc1gv6<7oe z_zZa1xDwht7*l~s(trs$I)Dih7#)lZE=v#ZcgpGEvD@_RsA$m1sM@1h_2G{+^KTYE zF3tfOaQvyY|=wEO-&?YcKM`e4-#ZZog# zH%lKnF>k-VASuwg=SP9+CYQ$(l9P{nZRRrJC_9;$^?cRR{*K<6xBtBUZ1mx9{JC(Y z)e|)J4nOp1OLFIK=-@m&@o7k3uilmKO6s=+0;ik#J=7}np4)e`^tH*6!}9~2{PS-I mUe9Z0^llN!}Vh-&TD93U6<%}LYs zEG{lhO;Nybfr6_mvXd1+elRpOXkt`C_BJCc19KB2KLb#li>Zl`kzvbuwkt2&J@prT znSDPhFzJ3=v+}<3japx%Q#~SPKJ}R)B^Sb-=vH9-W4k5avlF|*>WtEVeOS@Vd(tm@ z;`XOIZ{3Oy`yY5V#d3?E9vou|JFNd+4v+=X*|f?NR=j zOw5c7jEl1kG7aQ`VJ)l7B4HrbAky%Fcku$gOQ~!@fg&@0;c~o)1_nS-+k0 z(K&5*DtZb>wZ-l(o8GO7kER>V)AsIZpXI~k9J*lRzu(78Z9CX5H%c6x>7HsnS5o7f zlSN~3+DYdh!H!zuy_K%oZtKF5`4$OnOwya#n5`?3aCc$<{%gzk>`lm;U%t~+>D{8` z<@yzeU-4%5o~`t7o2&XgzHCAyzqG?8vXV|;1qL)xiS-j*+Y~b c&6SEanw*h;s_^Hh9X_iWCRE%M^Z2m=0B|{EL;wH) literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedpathLenConstraintTest17EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedpathLenConstraintTest17EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..ed346760878c83be35ac86cafdb712f0b6890a87 GIT binary patch literal 941 zcmXqLVqR&`#58dMGZP~d5E<~YacZ@Bw0-AgWaMULFbFi{HsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1At?lbjt5-bIbwzfy0>~SN<_1lSO2|HEWMyD(V&rE4igPhFF)}hNtG^yA?A*Mv zVMop9SldIt>)$2?Tx~qFi$(PN%^!AepOo~5I=qvav^i_`ql1kN3F&QBLT4C#RZA+UprT=2|JM|!r@Y6hI-m1%YF*Do?*>;Zi$IKH^yh)}O zSEeTfynZ)h_Q&s zJ-;u&^Wj42O3qvRbT4l+n{@E!WCK26T*>k?GX7^_VP<0aU?2|SE3gO{@EP#1aV4~Q zFs1^Nq5&gvbN~|~Fgh3+#KO81pQeA?$L^WHHf!Zt_5Y7}TT-4d+a>nR>D(72?tFJe z(fRhNnU7P~ztj=(i4)DAD)Z#cLe>_wT+@gX+V}F9Ro`D#tC?wE|4A!Q@<(g(lcwg@ zKRH>KH$*WCGt|8gi%QnBVt;PyuXgmB#{bTvYyGdxWp)U#e%CD^dvx}zeAhrrErBEJ zUxZ0EnsWPoED>lrWdAdEBlo+P&EgfazPN8;aXw>e`R?&9<5f5Om&iXl@b2DiW=Yrc z*I1A16nvc+yiZ`myA>C^ETm*LCjX7=e)QaQdEw6T)vntY82{Rl!~OT^$?h2rhPC=k dipux?dTrmZusk|`(|JRta2FoO_2q4P^#JtKZJ+=E literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedrequireExplicitPolicyTest6EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidSelfIssuedrequireExplicitPolicyTest6EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..44e5c1e25329a02e2df3503fbcd12389e4f5db1c GIT binary patch literal 920 zcmXqLVxD5q#8k6@nTe4JhzxkyIJMe5+P?ELGIFyr7z7z|8*s8QhqABsee}nwp}3)fEb^uE3aDe zYrV_=z11@Ikj$~C8rv?Ke0=k1yHfaqs7E|@agKoOr5%O@2p!dd2~DqKJENk?*63uQ=QM{1?ES6w6)>-d64~>zit0@ zCT2zk#>GJf0S5BG;FeWpkuVTz5P84)){Tb^hRdDB-W@69UH>NcQ^G=UB9Y}|5n~bA z+f@I1cL7(wq{gWrrYX7y7&KnbG2jE~=VxU6&%(mY#PR_-)PZRZ80w4+w#P#jNFA_V zaESc@muWS#^NU-}Z&RM~bUgfWA=gaw{N*cMO!q3bw43LvF?FnY-x1YfsH?XxXNyf; zdDfvJf_#%$uJ!Jp8(#g^ z&Zv&v<#Fym0SI$#yJXi#QN9uac(c!-*Nk)QC4@IBERBEt&M#j_RnWY;gC71 z;KKGV{APb(gr+!6eaYU)f`<=Gzy%Q;_%MxO73Rx-9-3 F9{`9B(+$<$iUFhP|rXIq<~piH8`~(u?Q%EtVkg-FGayQ z$Vb6DwX#^j+0oEIPMp`!z`zg)EsPBe45Gw&jSUQqjA2}ZG7{}~GjM^}ZyT1FlbNDG z*cGm>C@uu~%h1xGiBSnTC>U88n41{+8GzzkOihf83@`ZKW{7Wpl>cPI;tjJ6U1ArO z);;i8$ZXD#SZkUc`E23W7xVQ08?4e#I(a@as4~61@cSRnW9ON;wbov>ouxLdE#040 zKzLKJO!BJ-k7w-2?pgb5hTE!*+j$=@%@y5x@%5Wk-!y-7Uesg}ZU40)`_P3I^Ru&l zHJ4u7A;_f1ac}FD1DXexU3YN4^4#axqE*4?N>XR;t#ORIH8VzXuJ1E-&zWu(3)1>C zx5%mg%9fRjbQ2A~wJKhFwHD{wBYq}6qUAPgcr%y(D*T#Q`P6ImcD+~uW2X9?%pW4)@p{3&CKp@gQN=cn?2z@_V#fy zeg#+O)^waoWxjfS-z)D4&Nu&QMrRnjH#qfruf;)O!+RGD>Q3c6iu93aoFu_HbB;~u z!pe!AQ^T^ePl=qIBW=7m=4a$V>0FKLm)$B#xr!&WR`x|1Jl#2C$Eo}I!6Bc2H-C`b zU0gWp&&An~*0!!o%-zVb%67l_!jewuw9}ub^tUYj(Z6wn-IgsC%f_kI=F#?@mywa1mBGNpklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6fqD2DPR`n4k^!9a1Qb*R&aJSkQ3)M zG%zp(LJMO91A{1WUSk78BV!oXAcjO+bPTj0wkU@s=47TQ!0mE%MRt<{$dTp-O^iy& z-eP2BU~XdMX8?+GF*PwVGVD})rNw1Ar&iU8XTIk4Raf3Kt_!`pxXIMZZd#!IrbP)a zudWYEDlmMIve^IY(+2{%%~StM^SY4kHYq0&~ z{J%%DCI2jyHe^nU3fcSgNvUU>^od&i90fzKHQ7^BFFxtuVmcZA>D-jh_k1JH{5dp9 z`dr==zfHT9qCP8iI`ki6_j|L9SFTG)rTKpC$-8WiYG*HR*zi`&qO`_KbFWfCPg}Ri zpT7$o9-R1I&C|-Oe5F5ixy|%T6*CWP=J2_AY}uKG%Ppn{^WFTW{dntf*8K^xE3eur z{LT9t5;te-wSs5zHxJe=yVY-VEjGuimf41riJ6gsadEamrhz;#RArS}Bn-qFLkInjqJ|Ic!>jdKY2a)z_3iyd`9km13r*` zen!UsEG*1SEFTQSL3{-k0Ruh*9yYFoHV?*BU^+8EPi4U9U}Tt?{)7KqW!3q#hdkd8 z#BSYQd_w<1{lTMeU1vp#)^1N{eJ=b|ZDn(Koq?F!yWfXeulT8a|NorJdy3eP(2U6f z0e?PhT)E8k%+GCG53dqCaXsu##%adAX`A{y)%0JNYIe$&@dZk@GN?Y>aQx+i5{<`_ z8tay?T^YwBq^Glk&FZE^OHYWay}YGb`msn!-rFZ4ir8#f>Um5ng%<@ohe?|!W;9>f zd#&O6$C>OLQ=d(BOUOKuu4#5c;lSHRjgcF4of$+|_oPnNKE+hnEtNl2WXmI?Fpl^8 zVp-0f*H!l48TWdQ&zd$1)slTDV>gtwsMbWTK5AxK^m$g={6n9546jY=t(!Cp09A-q AqyPW_ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidURInameConstraintsTest34EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidURInameConstraintsTest34EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..be8ef42f19a6dee9e656112ba1eb9aacce842772 GIT binary patch literal 994 zcmXqLV!mh4#B^){GZP~d6CB(+$<$iUFhP{BYBq<~piJTEaf)j2<}xTGjCGq0pr zAvDO-P{G;JKu(<3(7?bD2rY~a3=E>gd5sMWjf`PjgA5XFv@kG(*r*?tn3I_TvPS{k zZdX@irz(KlZfs)E#HfVqT}D<0<|amd2B0_>QxhX2!?`E%-w!4fAAQa6wEyxSp&!e_ zXRYa&6r=I&&%9}j-EpgG)z6a~O#(_es7HQeW%=x5rD@lIk%JaTP5~}9! z=gP@5wrMu{&;DfCG$S@E_~Y(I>GiE2L|^YeyV_EJmP)GG+Eo#E4ZUA|d-zLNf!nc7 z{>fy^iPM<&u9+_9V)~_Vb>LP{$paUfnU8?5!+&YxkxvurS}x_Ub}Okhj)+!^w7hi|o0M9}UiDVrFDuT->b=yQh^Qeu7^{*vfknW8&wz)GE1}JUF%_5s4Hyk< zKoWv1rUu4sh8ZO#1y=g{z{FKjoLW?tTBHYJCL<*}z4ZJt{mi_S)C#?flH45R=me%- zV01Dv1h5~_5w3bLRXXqB=7|%Eo+@zg*t4r>#T*M(P+uzYP*U*u6{Cin533$L@0_CF zVpNy5=D`HPh=2Z9M9VX6Cj81>;$j{6@1V_ppC7qLPJek;7g4zL#kUoyO8Yp)>=Jx^ znG4J%CcZmx?n>WrmGAufZ(KYTVx<+Ft;;xbg6-T3wI?!9C@@_)%a_S_+bivqrEi^Z z{c-c;qm^MRlFYyRIh8)&xbhRLwqRS`;*2jZ4(aE38HX$L9&1uvQJ&Xbetn|O$>a$) z7_P}KSLW1G{IYh>WaG#{*?*U>^v_=^Ui3|9(Vq|g#T_Sh$E1C2o3Q#@gYWMvw|E&V SKZUqB(+$<$iUFhP{BYBq<~piJTEaf)j2<}xTGjCGq0pr zAvDO-NWt0BKu(<3(7?bD2rY~a3=E>gd5sMWjf`PjgA5XFv@kG(*r*?tn3I_TvPS{k zZdX@irz(KlZfs`I#HfVqT}D<0<|amd2B0_>QxhX2!crS1=ueogOXl&Ze@iLdILr=y3velx06OBG>xtVg8{r-pi zF3uktQWw_uB^k&iD27yjKDx?c&A)vm$NMebS0CGcI>GHy+uIz)=F64l*)i|#IR1)X z7Vc17$yk_hkb`eB>->vr?#jCTR(U7y5zKx|*rnl7;VrE?xu-MhO^p@T&)R%vP5b7i zo@quNTvh!t@7FTuxE>X-y(_Nw$SdId+sFdrx)nxlet{dmtLrHg{GBJy9%|fjFVG{W z@z@%r&P`9Bo3}U%9PvxtJu%?y#aNY=uJCsW-|Kd+m;F;Z-)vHFlPnW6BLm~&#wP@e8#NSjuick-2aTOeLv{`G*>eJ%|E-+AYDccErm}7eH$Bu9FtEu zGzZ>)amG$nsej6mHR24O?aynBVs<{?H8YQ^_(s;2Gg_?kodS~oKHep9Q9$p-gUb`S z-p0g>RekOGdL%QzBlCVo)Y7jxq?eA^doF?MK|e&(>(UL$?O z1eLW`hVB_c7c}Kt^wtZnd&II^%Xj(#Us3k|vg$t#6dk6yUNK#M|5yHdp`W|@S5`!Y T>m`>{YLH8e0V1VRgA0|SF7ab9BsLnC7t*Psm5 z4e|!E5I2a0fL!2=?gB$M0~d(>wqc1mnJEgPA#N7I5LY;ZT;Yl22w$)xTwRfkQ2?21 zXlT&HsDvCGjI0dIO^o~uKyfanCPqevyL-<}+SL-|_N+kfRFk;JX6sm$Fzbm<-JDxH z?@fK;baU>C3FedECT}aYykhCDx#G1e)4Y=}Z+0eJd8YU|asHl#yBnu$IV!{OzpQfa zqnjH$@>b=4>K5KU_1iN?v9H+z59*$W9`yWB%9$T$dcM9(j1VohF^% zL+czX`c-$bemhl}QXI0@M}3M>=?(w9={Hh$U&~dTKPAU2hCN%$Otv&cr@L~IP20lN zPJ$}8%{|p@i#i=`ME|U8ala}x{aW+`q4njuTzTg&DJ2)r;Jp>na`JDp&IwRt8KG6jyY)RQ@$TcLlwUxnhUIwy#k~$ahRN15^`iBYo!IYlo*%p;Iul0BIt#NVO zw#Z8Pez)q{BF?o*pPRZDbHp9~(f;uV>x!N47Oj}@QuTfEpIN)y4FV)zh}&kHk&=??L5Cq zq4w%wxAO;YJWzWUG`aqpZ^drc`(8#SAI~p}W!}TWcYBuLwjFww8nM%!+5K`|#akI_ z_}b(29M8u;zb{YS9{yzKD;tAF{=05()!=Q_^6p;hbYtUv&zLCPzMoz*8Y0g|%qhrz IxcJ;$0Gw=jI{*Lx literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidUTF8StringEncodedNamesTest9EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidUTF8StringEncodedNamesTest9EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..b14d789b5dc1666a530f10a0b886505bf1b452b4 GIT binary patch literal 924 zcmXqLVxD2p#MH2WnTe5!iILHOmyJ`a&7}Vh- z&TD93UQxhX2!y{+Kdp|h~4sUW3pVy~XdNq6f z`2(gq=bTy4YMRXcKPYr_>&?S`TSE3P$+30ZZgHD!vFGeAdv6!E86{qBsi&lh!{-5G~^7#4#7bU0HEYdZtV)(tNt;t50MdpkC495?~ zZfpKkUz?lK5Ov~2PTK^|ZEUqmF9+JGif{kye7NIMPE}nEL(Y9!r6po{j0}v6vkfv0 ze)i>cQx;(d_zPl8W=z9M%_#yI;-^NgLm$kuxy%6sRD^E}so_f+(f&+B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`PjgK`qBaW`;D$B{41PpTwu)Ggu#c z5^#8*ZK~b6mK*!E7KSCQPX4E)mGQCW#*DdIE^1Z3X8OC%-O_&W$LR>3)&{m5!@nCc zT6fDQGBGnUFfOh&s5X!X2Dq#;i-dt#gUFNG_=_=9+cTlQ|Y9RlX;aAQs zA6?10QzT1GdG4%VSY2-)cQm&DWRmwA-#xo*3JT5E#U=1+x!AU>(B^u&E?jQKyH#0Q z)Bndu#!kOl5VFH|!`r{VlPa8Ff82C1d76hp;J42&H(Gx%`e4xYj-&g*(cMjJPHlR4 x?B%wFug?8We4=rY#lwxAv455Ity$9;Za>SYwOMt&?98fp0WTM9=K68*6#xnEZ^-}v literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidbasicConstraintsNotCriticalTest4EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidbasicConstraintsNotCriticalTest4EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..4059c017a744057b8083a7834941abc563b98b98 GIT binary patch literal 948 zcmXqLV%}iT#57|8GZP~d6CB(+$<$iUFhP}4viq<~piAt|vqGub&muehWrF*C2E zSivtJsG%sc1gJbm!P(J3PMp`!z`zg)EsPBe45Gw&jSUQqjA2}ZLK3ZZG_Z$QZ4s83 zlbJ%m0j{pdu2%qg$HbtCQ3*K!7+D#Zn;7{SfZ|+CO^l2T`=)$7|6~cvjvb|uFJc%C$Dn_r<2bj!2B?c~lJt8EP5Hy=5Yc4rIc+N-&L zCOU63=vKMCcUeudi^{LNk_))iEZ7oHrIkF|;>XN1Gq5Yy%Xh*bx0Me>PG;Xv-C@Of zz1+c|=qq1Td8nc3{T4o#JGcI@-_V_UYPF7K`t$E4*|%S+I`y*NS=cn~i1Irz4|6vbI-oG(UlmB+bwc^F|6TD2!j0}v6 zvkfv0J@9lVpf%Nk;GX7^_VP<0aU?2|SE3gO{@EP#1aV4~QFs1@iqyc(* z1V#rVgOF@=aYYG3s`{k0lQ=Dv-E-eA>`0Y!ufA5*UYc3;=EIk?l|8+se7{p$=C}KZ z>Nx&ox^ORIYPVR*lDX@#ovxTI&kv3@rQ|R&g$Ie%WtLy z&r5Edbuq!bzD7-JIhTzR>w@lJfOni)TQ zP|Fh7eoZeX$c16jo1*ZD*HMoQnJTY;=(e52_B!Kwc=V&&78`l{1Rnifb@OvcR)}c6 zT*7|^r41{#`MUO3-*5kN*JAe3PpcbUe!Lb=oGsF6f2K2w*3_J|E4LI4DLs{5_nL>jNSZejk+yp+tM)Z`N9ARh&1M`Hsy zab80M14AIRFg7qSh!W>DHZU|YhH(wzNVG}MKnG+Kv#@GdVoqj?LUNFgXK`_9YLSAg zE3(5BKrS`1Flb^_LiQXZD+6;ABR>OBoQtW6k&)p*5$nzAGGF(dn!SE{biMxl#@0Tr z&wgpS+w`sq$*WIyk3O+%kzMrtV@vICbWO59VU%}7Q`NX|!z`w3r^wwp>#BoZOiRwY zx1eaMNupHV#rRVe=d@Xze{1c#xFPhb$dt%sh4Jx7EH=@-3S;7Y3wq z>K1AKUf8sH(RZ%N0>yh69nx8KrmYrZX`!GB7S~VvGfb zNTh*0Fl=R&S%A^mAmTAOr1nUz!GGOw*Fu&1KCJV-7<9quK$ee1j76lmdS-B1%Eq0U zr{2tBoO?sTqCoPr0Ut;|KO^IR78YhEmJbHvAie^NfB~NY4;xoPn+IbmFvS@#8Z^EI z$;h)bJ~e23WYBnjL1W8;#>OS}2DK!n2PFdqph>`#CyAEw5Glh@(?A`hhFMqvrbYpj zJk#=v-~!O(x+rW(h(Qqboq(JKf%yxV1Q{7}S8QnzE?DzrqgP-xPy zFQp3>_fCs+{h{BKALnt}k&E|}TT#=4rh*44eDUv#!v4I-|HQO^+rhNA2iGo5<-IDW zC;siUee-njz|!9p7CB}rYW$0O6dKZh*}L(5d{w$igI6o&d)t4Z-LwTmb1Y+I$YuIbr{WfvXhq)*x1 z+06B)I8u@Gz}mYVi?;BsWoDnPWHwc?yJ*73Wh$ydvsU@!&yLzI|MKU>XUtnn-tKT+ pq39^n**xieRjJj>HBT>HN!icZDL(7VgBuU+cQ!9QbYI0F4giw4m#hE) literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidcRLIssuerTest29EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidcRLIssuerTest29EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..b10632b2093202d3c7f20951127be77e600a6f50 GIT binary patch literal 1065 zcmXqLVo^0{V&+}I%*4pV#K>&G%f_kI=F#?@mywa1mBGNnklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWlrRtjDc~07&&*57EJ{r-aSrlPaCS5{ zkQ3)MG%zp(LJMO91A{1WUSk78BV!oXAdWBFBpdKINFaU^wc1`JkufMR^gu`zKyZ<`ggeDE~J6M#G|MUp8#)-+S=z z#0Tfi_I0q#+P-e)4J!frj%9y;+X$P?+Q^h3Ror{rhvCqdfLX~4EagT0{=AWodsBNe z;laXtor6K^;4Ys z@mp2PYp0&QvdFum>PW0w{UgQ3fE@dnMV(CVlIQrW=KIo}ercI~Ia}_A{}M~Jl>RNe zeTb(yvZM3GM8n>*|8}g#9vHN;$}GUxY!LC798!BE*WkZyxND)xeIM5OUJSb6WFX7OBE}-}f6ts$rJSb*uf{@b*FcSdN2_u8FQHQm-y9&$6bAC#~hrK;s_0HV!g?+D8zrx+$M_Gy& zXFlO!T4P^UlG{}~ebSkB?(6J7A0)*8pT%~6=j=0Y0~gNv+z_)SP*wT=GIk!tGBy4+ zhGu1VKR*eINfy0#%zU+^!oHanmg!3-R^7BR%HQ;nwM#5BbJ4ynzP3Mjje1Nv4xRs# zeQCm{o8E5W53Q;b7rLKHdXtbERq+1A*MmF0w?vk$c8i`I(ZQy#AQSi~OzfqA->r8q zwiX}f<#bCk`2Fl($B~K8kGdSvzq9m@iF1A*OX{i~p7U8ej$B8!oHjVUOWrwa&0;V1 h$8oRQIQ^2Z3D{X4(r}%d$i3m6ZRV$v*L#-j0|0N#gY5tS literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidcRLIssuerTest30EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidcRLIssuerTest30EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..593ef98e3508a0ead415308724ce1d0e45e4f010 GIT binary patch literal 1156 zcmXqLVrejFV$N8=%*4n9L*3_J|E4LI4DLs{5_nL>jNSZejk+yp+tM)Z`N9ARh&1M-u}% zab80M14AIRFg7qSh!W>DHZU|YhH(wzNVG}MKnG+Kv#@GdVoqj?LUNFgXK`_9YLSAg zE3(5BKrRK^*u^VkO2IeM4eg>d87gG}>Bg3V0U7YXoRCm3O-F=1A!BRTeN%d2e zh#%Xj$y2=cC_Q3%wDNHBv{o0UmxBEE0#j^$=DxVTX5GHyY8!ZzmsYRSYs|cO-TLpz zsp6ZmCnPYfF6*+RZ z^!{7D@X5PZzR9XdyQVB%V#>7N((J3{jl$v_dVgJyn)T+T{m+1&V26oXjzP{5?8VNm zTA3S{e?L~k#m~ix`W@l8vt0I9EOFc8d#r zdRew+g-43cX#+lxett&A|12!bOe`M^#6f%o76Ai310FW6gfJ4g1Ob<#13P6*9DNhnDN^2B2?FyMFbOg;*m=)m5&63OlGB9m=brZD7?=IZTYTZ=r5!CI zt4izkO=D20)>V;o{5ff^!HM+?-X!mlsCx1{xy1YCVvj(sd~u)M5*d%9C71g*Tu*a2 zyq^Ei3WbZ+S;@(K9;f-O=5TtgYu*3h(7#8aqGHXrvZS)UF4)Duy*@o!eaDH7GyG@p z?YZuo9;?3Kd{<+oeM6dF+9Qj}?OuZ79#)I{Cl<`@`qw zB_+ni>C4!4x9#=L)&JNoVJ@0&z^$|1ZK;6a|NI4IH}!RI?Nohx{HVBxYTzF~m7B%~ m*~^0J?;dz+?$vA5VQX_Q>-ssv?#$QX*2_h2I6f-Aun+(!=982F literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidcRLIssuerTest33EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidcRLIssuerTest33EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..2ae810abf9d9921c4f6b0766a07288a82dd30912 GIT binary patch literal 1134 zcmXqLV#zXSVh&os%*4pV#K>;I%f_kI=F#?@mywa1mBGNnklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWlrRtjDPR`n&&*57EJ{r-aSrlPaCS5^ zkQ3)MG%zp(LJMO91A{1WUSk78BV!oXAdWC=~IAmmP zU|*co7c=RY*X+`C}CaD~P9f2*w*8=N>J!Rj&d=Hcy^C2GztzN+=F6#P{&bo~(I~PF75LHa#na_t~D$O^$^#Qa)Bb)n;O5WMEv}#OMwT z5oZH=VA#qkvjC&BK}7zfLNE8?9Nlt%;d@SBxVPQYDl-J916e*6F&2?&FN#lJtYrMx z*{`@z=cvRCj?>NR27Dm>{EUqMSy-5vSUwntgZK(80tS2rJZxMEZ61uNz!Yb|XwY~a zBqPt#c;2A#j6vhc1(gfRmy{Y5lb9Ny>5dyc-I*F{8mI$p0H#OBDerF zi7xV4;ze$P$FvwZu>o@uFtIT*)O}meG1;w5^PBrdhNGq1ob?|{1`BJS@%Z`m+|q`0!inYA){fEjtSS%S{#5PiXNIY3FCX zzhbS{g5_V=Gxy14_j^6c;@Nwc|AI?s<)y9f!d>3AsXDsHANYQ5Z@KJ?d5dRuE=}#X z&@S_DI(FyYx9vtoJ7-D#kY2De(sBJQZ{;W7cr7?bApP1__Lj;Uo}4*< zBEES4a+SZhA?y jQOzI`!DPAcaNA$?JN_QO#}Rerr|nP16}Ic;ABY10wd0vL literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValiddeltaCRLTest2EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValiddeltaCRLTest2EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..a2eb9a7dc42e66e2f8a8a9213daff833a2350eb8 GIT binary patch literal 1091 zcmXqLVzD=9VpdsC%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`nNlDEqNpueKQE+xNG>{YL zH8e0V1VRgA0|SF7ab9BsLnC7t*C2*OYjg~>Al4{{CFW$ND8MaqbwzfR0?3s{22G4g z$o^tvWngY%*&1ygO-7F!GGsxcF`Pn_KLmsbn$uarFh9cEUa{A zPr$W=^Bii-x5QW07p&Z(w))dtC)*IyRaRd*%6+VNE$Il`d^=La^n&^X0|${ypZ3Ha zJ@R?)(HZS)6Qt`RyJ4SnADxdXi0!R=zd`xrg6*zOJGATmglc`w6cILUJ(yNI z{f=(JkHymO)%d4)eRNtF+Muqp^>};qjhAZ|y#1VTsnq4RqL0K8rO>2(QXO9w{E>Iu zcCGbJ_W}2el{=Qsxf&bxOWSX$go&A`e)>H}CT2zk#>GvHiog(&HIN5}tgJGNgn?Lt zNV$aa)3TNmB2(;}E;PO>+4x|IzA-on$nvp>v55SVUn<2X>~QnltNSwgPw$>=_fX+B z-~;LBXJq`(!otkN^1(nH#8+SuFyJ%bVdF|@^I%K`CN={`g9wm>JWHT~zk%-p?**Pq z+^Ln^z$WX_!erF!0Zc}W42$0{-klS0#WJT?eBQH=A8vW8bXnq!4*18+7HthEmDl6F zv3L5zyKaXTE%>~`A$G$#6U(UI_d|}DT&|rJx5RA5GXH0_XETmz%%542a?E*KVi4Qm zOs!P!r{)*Tq!;gc(a>D~$nVDnpS5q9X2=E!DlMF)Cib7rKlp!i!*jkFSF|MGyqp$v zRfpxL^UoqDN0EC!)vI!oRkb@;I`(L+UDUm^r0!u*mY4qe$A|WR_Dg-{XusI(aKepe zUDX#NgC3guSD*3zKF8swLeMWA-&a%fcrV=JE7w||zDW5s&%+XzRWDVlBsM0Vy28nG f+RJ=rt5WULSl45QvD~*j4}Cant@(HNFL7Z2BAA2< literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValiddeltaCRLTest5EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValiddeltaCRLTest5EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..1a3f7f51427177e38c7c70f0744a55fc8d0249f2 GIT binary patch literal 1091 zcmXqLVzD=9Vpda6%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`nNlDEqNpueKQE+xNG>{YL zH8e0V1VRgA0|SF7ab9BsLnC7t*C2*OYjg~>Al4{{CFW$ND8MaqbwzfR0?3u722G4g z$o^tvWngY%-RzIF&D<|$^aU-9oT^V7a5Np?W-Y7rn^L(KubBGwGVjv^`VUX*o;$yWF=EF8Cg-WOI~w#@qgB4n zn!LZFFe--UqdUhumD`-xI?tT6we`HDrzFPD#LURRxVVW?5f~z}2J*m=l~rbuFc51H zDVI=wTGnzxWQu*$g~nGU8y_suHwGsGSw0pq77@?XpB?#;?vs0Vzy3Y-#e`0gs6$Z( zd?5Y&jEw(TSeThuJ{X9D_zEln27CrQY+MO#9*n8L#Ad)~5CM{qX9+a$H}GBHy})yc zJGGJ<*knCgn2ee|fXRrFq2}eCEoGV?#9TbieH4v8d-=yb4x^hKyBD^Vn;m)i{n9$; zw#qEdFZ=HuYY0EII>2c5_n1YRg^Bi#5q1|A{uT|qc=Xv*#n5>xqSqdBe|6?%!=A{_ zd)#I*AC9G7zGQMK$*JPhv{tEr!bQilL{3-Cb9{c5(ewU>pOMO43vaI9GR^dN>1&z3 z&HRtg91BSQ_NK>N`p5ZmH*$6y^;&ss{u-5w_bU6&{{9$#=i#38xhD+vp7i|iE%|Xs z`cgilBd;EwyL{xJYoKQ1x*68TJQ^ZqR?76~#81x^S^J$?K>El_@x1gyf;yo_M>lN` ipFaQR-7Fo3)ml3x%kPA%9#WZjXYV!T=_ihfZ3X~NHHRhu literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValiddeltaCRLTest7EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValiddeltaCRLTest7EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..43b44bc5d892f132ce185b259ccdfd123bb40ba4 GIT binary patch literal 1091 zcmXqLVzD=9VpdmA%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`nNlDEqNpueKQE+xNG>{YL zH8e0V1VRgA0|SF7ab9BsLnC7t*C2*OYjg~>Al4{{CFW$ND8MaqbwzfR0?3u-22G4g z$o^tvWngY%z z*8iG~u71juYR-i-&csZyqD5D_K_*lt!}F7w-x5_!_rx?bH?yzvYGI zGw1jf3yI`3eH4(t)BktLe)iNH=bM@TK0TP}`*`**27{U<2m>!uf)I-T3M>K!d2B-&3Ln7RlP-~Ff3E(Dr_{?<^JR}bEBG5% zyS?FYS*FpI(7KAp8^1BfqXFl literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValiddeltaCRLTest8EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValiddeltaCRLTest8EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..8be24581eb99dcf4aee80acc097c2b2ab68964b0 GIT binary patch literal 1091 zcmXqLVzD=9VpdsC%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`nNlDEqNpueKQE+xNGLRGJ zH8e0V1VRgA0|SF7ab9BsLnC7t*C2*OYjg~>Al4{{CFW$ND8MaqbwzfR0?3sX22G4g z$o^tvWngY%o;GXM^j+UYU~VM_G>w=gj`Hmi?>N)Iei~qKbd4 zKmQA}Jp60;%W!U%_S~(Dv)SitR}E)Y+wfi7D*Dnk+lrSwJ94JaIQr}3x-CzEL&Q`odZ{25X+Ko+`G&>b60_%RIKC;iG*1~pT#a0 z2h4U(kh`n-+1@0BkKsgi)vCX@-|SN_eJoo$ea51R)oZ6bx7+jIyxsRpYhuLhgqU!r zmFkQ9rw8tOWoVPP>Z`@9B(B3!ie8gm{WLRXVrFDuT-?N{2n-Qf19@P`$||!+7>G59 z)ZF;CkJ;zk`R(=#C3hRI-g>?F_YrUskmX|$V-YdU?K&oO->vb}tQyYQ=2h`ka(>$l z_(1yk85#exurM>Rd@v9P@fBDE4EPLq*tinfJQ!1fiOqn~AOa*I&k|_hZ{WMYdx7T? zcWNa!u*rI~Fc~#_0Fx0TL+LCH_4`w2DSe+-e`;=#{Td4$C+|CTWnU9c-1I(tC30Jn z$N!(ebP=n|8 z#D5*`3#YGq#E8!H0>3U)eJ9ozXt!t?#gj8?|GzRSAZ3hy(mTi?$a zc#?Zw)lB1QIXlvhsjXF>dzHoR*hK|T5g&U4Tdk)v(zc7vG5>4*fAJDdzS_%fKd$;H zF5+77a9>#CJ@G`V_?Tmh7jR#(QK?wFKJIAX!H~JrBR@zfon*B9!_sBsC%f_kI=F#?@mywa1mBGNzklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWlrxY4Dc}|sP01`SDauSLEy>K!3&_vR zD=}1Xb~KO^=QT7iFa$yiV*>+&C~;n614AQY7}p?`MEgt)j6wD>3+sd>=47TQVA!hQ z>Wb`41(3T94VoC0kbTO?%D~*j$j<;2=VEGNWMsH>`10hC75=*BPuST~Pxil$*~!Z^ z#eKea2-8iCkPMTLhCK`3{f}sPEcVbL?v2Ao!=TA4uSqt|cX}>bFzJWd(qETaE$8m* z*=^>ay5#$E-;%!_f846yZf5oirjcgL3H06gU&xZ zEGxG}z1{cX%+A-#wutXDd!TB~lAGqlUnLMyVY~iaP81L0pBXX!THk-&+ny>c{L$k2 z3eWW2nSTq?*QoJq|Fh7DW#04fxtflwvAMy=>%SOwrNtglSw5{;FE3$B*@BrOQ)E;* zy!_f$3%M7WTr0>tvGdcUlGbPCF*XcRLZ{=l%DgzRseOK!op9zvCT2zk#>I`l3>v>1 z$O8jdR+&Y@K&(MT(4cs4Z-GYBrTp`k%-^1UtvvDedvKDF| zJWFG zygB6whpNJ_C9fKnU5I_+vRZ*<`jbF;rrGz-tg_l1Z0v4+^V(eYic=aXl6OrS7K^T^ z+Q4=G;q0}cQ_A)wudFMq%9eiCWyu+QPV0`9^`FT`fqtBM@6*#gpX$m^G`O+t%M1B0 z4=?YJbdlMwY|Osx0_RiK1pZFRNzqbLySjFJd|mpWX40-bPgJbt@_cm8Xi?*gj6A$% zZhm#8vtZ{wpZ_bYK6cvl?W@?K*SKWD<~?r1S`kj{kQXb4nIFr zH^Zs8sI+zY+Ww=S2Nj+sANzQYdq(^|p|4BMNZ%3)=Jff=6B(+$<$iUFhP|iRGq<~vkG$pgRq$o3~v?Mb>FCafN zuf$Nn+0j5woY&C6zz_&6j13G7qQrTP4GfKpVO)b$674fJFb3JjEUXijn3I{JfMKhG zt1GfI6+rGbF=%2`LiQ;mD+6;ABR>OBoQtW6k&)rle(ltN@2}Qci1^wiNS^Lmd#ik5 z^15i5epG`G}dM+^M-Bv0&~hkG)wx>&N$xIIq_Uw5R z?FB3B(1LNYx#RiQF z4CH|UEUU~SVIbBZB4|*&x3@r}=~DjrOXhFSzE+-i`#m^G$nvp>v52hQv(EZGuadda zOjkiWVXg^Hg;)Cw_(1yk85#exurM>Rd@v9P@fBDE4EPLq*tinfJQ!1fiO+!1z!W4Q z&!T6bW1zJ_W1*UX3QzzTwX)7ZK86bUX_%1w7$Nk31n@TI}-5b{5 zv)Wy{@z!Bs&22RY(!0zp^$gqFlIE-4nVb>6s?2iT<}m%WvVY$exm;d2qiB*!mEM(@ yC5ekH(k?5s%N8Zy%=~{k@Y4dNHT`AB<}G$ixiQo8^|wdv30syn>ze=Yr~?4DJ8o_O literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValiddistributionPointTest5EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValiddistributionPointTest5EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..a93d666384140850ebdc012e838fef322246838c GIT binary patch literal 982 zcmXqLV!mY1#I$PxGZP~d6CB(+$<$iUFhP|iRGq<~vkG$pgRq$o3~v?Mb>FCafN zuf#~f+0j5woY&C6zz_&6j13G7qQrTP4GfKpVO)b$674fJFb3JjEUXijn3I{JfMKhG zt1GfI6+rGbHE3c~LiQ;mD+6;ABR>OBoQtW6k&$8H34O-I^4lgMTnjsXSYKG0{!h{W z%(+RNhn>q#8tk1vC1B+%@0zl6yIJ~95dXne`!n4mN=SYTV&(^mZLP}mUN)XtH-lnJF!W1CJN_F zKGEII>F}%Rhp3_fA4oqxBjbM-7G@@v4+i2Oz5u=BF&ePlD zJkyr*&XU>-YkvxuGRhoX{8~C;;b+l+g{RCB#nyR6!t)i6 z)c73OQoQ+1x5^WTZ+UX5>-alTY~HVuY0Zp&wu7O~QIqT2_DrT9xqhc>O4n8&G%f_kI=F#?@mywa1mBGNzklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWlrxY4Dc}|sP01`SDauSLEy>K!3&_vR zD=|`Vb~KO^=QT7iFa$yiV*>+&C~;n614AQY7}p?`MEgt)j6wD>3+sd>=47TQVA!hQ z>Wb`41(3VV4VoC0kbTO?%D~*j$j<;2=VEGNWMo(+vvuE0AJJXKg-2~gyM5BUq^+9Y z2zSrFbY5h^q5s<$4{xe@a!Fd!-s-^w8`-DpLY{4Xz5VQ^i_;uiziU5SyT0*U`e*47 z_6kSk{(Z*XRne>R9(K2v3r8N=k~3(}0U&;GGi@LgK5%X(j|M0m${*`Oy^+E2}p=b9P z3%;K*bpL!mZprq5YxBhgr*@Ujd~U^`=sqX=>Z}Rjntpuh*2+S!EUp1F;4Xmz;OE^Xp&xdDd6_JNr~(!JFL)+2AB0%f}+dBBD?+A$@n^hAj8( z(i8tK$e(O@;`I6 zqVyG>l(#&ZTybH_r|B{AHxs^x~}*D>uw| z`Ms*T;L@2Ha%T(pMB1Zbu7qv7H`}t+W#N=Rm%r+q`(oJeF6amQHs_`+DHx#9!|+B3>~1{|>bNnh+z*x^87J(~&w= z2j)i#iCcDq-KmfP*`c^R2WnI(>Sl>zxVnaPy~ z3eJuOa^k#(1_p*eXklz%U=StFYiwX>WDMgPq>yNxiGdNsI_?Lech;@Tf*D3rud+ZDL0QGOQM?2mOX3x4?g?0 zI#vIV@yn`^ztT44To3h*ebu+@J7UqwsO^IRMZNuum)ZAPm#bZS&)2g`Us`u76793q9cV+21lcl#mWDB@Ba#@Ssby>Uh z(9YeyT03@075Q$weIw)H76z{T?~kmmU+Ysl(!!h&dq3rv$qePrmwDQ1Yvn)9ETm>C%u7Z)288ps1fS5}!t z!a%G+L}I~$s;vK6b6cBK&K_24{jtBxoDG~DWcgUcSVYbpRO6X{qN{xMYROLZ65*$@ z6Ln4*@PYL6Gcx{XVPR%s`2aCb0c4&58yicgtOA1p4;xoPn+IbmFaa7cB1a1_`2nMa zkzxM1BT-V%Y%a69Z49~@aw*pB|DDIrkB4`&->nJj?@FHjp}?^3WA?%$(K_d>x3Fr& zr&WFE-+z4V`733~we2Vw>A%BU#XlX5vD(od zv0ilha+k>ty)UK9m^?*<-<@9bWbZ8r@8HQR&uh=SJ9U@Jr~A8n^#o-XYTbQp^K$RY z$)ZOtesSQO8OXHdPS<9s{ZqP_9ysv*(LDFcvTJhac~7Y~dKcp7-JVgRfA-o@F|i*K z$09}L^|zVq=2_~!?^|lpSyr(*x3ZphPKq??`Mmya=uhRjF&S8cC literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidinhibitPolicyMappingTest2EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidinhibitPolicyMappingTest2EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..f13524a0dce9bcce2e6535b5b88b107abf5cc16e GIT binary patch literal 938 zcmXqLVqRv@#MHNdnTe5!iILHOmyJ`a&7`9IZm1AoXrxeFn&j+gAScdiXkcIngcimI1_n{$yv7EGM#eC%K?aF7TNs!@Y}OA; z%*jkqz-GUKt1Ggb6+oUaGH7B{LiRQzD+6;ABR>OBoQtW6k&)rUMYDEgqgkEaN3RRj zc2)LYdZ&8&)8(jZNA|==FJoB{wCMV&ofjgfGKPD;W)acVXb#J{bf(4UrU-NBqTlX1 zzt%Qhyd2yH?V3}-e9-GAjZ$`4#VQT zNmn-T=a@eJ`Yp&VMQKfc`j%(&{avzCOal(dDtO7w;#5%lBa!<-LO65k4uku*yT5Dg zpZzDVFfZJ}uR+n=+WocI8>P95Tg%r+S`?mI8CG8_e#$H+eyXZT?6J2ew~02LX;>)q zH)@^QU7OfksGeg93y;CYlU(u@ zop*K}|MuB>OId2A_tSuOo0-LY6P60R{*#hEd)MUhAB@&_bZ#A6lYPv#u;XcJ^NeLv zT6NzwDXXcy)G-Z`-&SUO%r;^De&*G);v-e3ckygddbS{5BPTTT?aJf}H7|EYh1Pg& zS9TB7Njk~(c)?|c6(@Elhd*Om{(5@6m>BDHbIv_3*N%E#;%B}xjk|yPs@)pj&9YJ# zFZo)$V#{qiZoZo}*Iq7gR&T#D`BBftFW(!t-qQ1a?jpDE)`VB;&qOND-|lQr|MrD- Ybpr3Il4ku*%dYeNUYbv;o(FFL0C6c{v;Y7A literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidinhibitPolicyMappingTest4EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidinhibitPolicyMappingTest4EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..75daa870284699a2fe11cf97455de1633fdfd3e2 GIT binary patch literal 941 zcmXqLVqR&`#58dMGZP~d5E<~YacZ@Bw0-AgWaMULFo-tfHsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1}` zGV{_66#@*66pBlefXLa=Ku(<3(7?bD2rY~a3=E>gd5sMWjf`PjgA5Waw=gh+Sgs$I zn3I{JfXxXCuCB<=Rsi|K#Gr{$3EAh2tPIRejQk8haW1ANMn;BZ+^=)iy?=fw*>drv z+7GWDF7CJfb)!Y}kJ4WjhpBy?$|83{eqDcd=cG07zLUoa&j>83>Fwj%E4e1)%9QHA zPqjnc9x(czJu%~OdvnX@X6{S1bt-TJ2mBcvJFfT75(+7}d;WJ_(uaiju3E0gJDHdn z85kF58)O>D14CF=nMJ}ttU=^@LyT~DpJUlBuC2v|FBUsAl<-{yClFaa7BLo)a{Vfv z;x;Cuz`|FV#j7n2U0lw&$bb)|pP!NOKMM;p6Uzq!aS&gDMZkd1fQOAMq0NIa6_^wa zSdgOwm=J-{!N{;v_T}P^C!1UIdvX%~&GneRmFN1S3RkP9jN^SX!nj=e#q%IP=xXV9q>8e*Zd21Y3SNJ^tZycChE_Hdq`gT|Kvxm!f7nEo=3+Z#LTeeB+ z&bN+}7Z(K{`{vSdHtg}25A%=IT{|9jWKEps_u`A1B|U-%L;DY{Oq%nwqN04K_i-j& Z^|dM|!``erIL~F`+vJE(hWx?5Lji*2ZH52< literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidkeyUsageNotCriticalTest3EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidkeyUsageNotCriticalTest3EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..6da79065ea1d448cfce6652d78426a593899969b GIT binary patch literal 932 zcmXqLVqRd-#MH5XnTe5!iILHOmyJ`a&7?gZ-BbL<&)3b?4+`%c%*oP0E}02YsxoKl9T4QEsEe%9*Dh*eAW35*EBvrdK4auJz9u zpUI^f{(3SVLEZ0#S=P?Hd%~0Zfy$yIIZQD>9Qm0e?Q@Tw6#RQNOmgETkF$PDr>p#* z{$u*FN4gHPH40qJu9q`A--0$-!o-1xbhiJ6gsadEamCOB4Q zm02VV#2Q2nP7w6ExkdYELEX6?>!gUMyQgaxgVTj9ABz}^$ULjcBZK+P zCEYA@&m|g9DmYoR=uUZnfeyPX_p!{&ysPBDGcTE>m{brve^2Bq?E|)vUYbV255&2@ z^VKSar#nPy&XI#v9BUGEasRg5-M&*)s)S+sR=)kZOE#)}$`9s%p0Ngd!mo5uFU zRiH-iM_6Fe{@06Z*15W>hAmW4mlw#nP;w#rU$kXj4? literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidonlyContainsCACertsTest13EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidonlyContainsCACertsTest13EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..3eec5cc6fe8aefb9fa4b857c5b709979c0152ad4 GIT binary patch literal 946 zcmXqLVqRy^#58RIGZP~d5E<~YacZ@Bw0-AgWaMULFz`3zHsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1*|W^QU#FH z4UG+&7?qHH%gD;W+{DPw02Jq9YGPz$xcc=;_H>J^iC1`j{x3AjewXqu+c+d8SAdW4 z*eQKkuD1`G_^+IJ;kKb_!``-IRymLU9C*NE>%Hh>z?7)NK|jAO2~$0u?Q`{r?kl)W>hx=9{@4W(Ct>9WYn6?!o<3mUzyAG!&W;(W2MfPES*zn0 zwb{Pjzq5Mf^pfq%mO9v!dMz_EZPU5WAR@4f{mf)<<5hW)E8X6@wdDBpWk!o{z3Fh( z{P>(HrJNx@AKcE>4P>+3yYSv7Bh8|X3d=V&9!q+Y!=An{+Fa!to2`+>A?^bfoUTW@ zf{V{S{b;-Ofxyqh>oOcK+z36Aaex2zyd^~u+})?EW>nTQF*7nSF0L`CGLQ#`u&gqR zgn?Lth^ocmb*FSotD=3c9AKW*A*^&fCj^`*WcgUcSVXLy{kID*bAPg^O!Zu!itgnW zKjnM_agcrm76Ai310FW6gf{dSkN^u%#W&>m z0j5S^{4g@qC5tSOK6!fP&8Lr;roPni->MWaKjD=AyCZDsS1wm9Uh8UPt9o*EZcV|j zW<}SK(p_vDS#Nzi9J6}C7twVp{o9Xh?l|hr?EHxTzsI{{@BO+sq+k9oZVu9#St}u+ zYx%pGUr0SrW4C1c;~CQ?tnE=&{@!{{G`;5&<4Gln!0Wq=-v;jbbZMH=FO84pFCJCT zm}FuxCx)TmP)E_FUyq{=!;M*HSm=M3TcLLT(ORu8k1aEo1Z5|PDOvj4OB#1S+UdvQ z#{G!(+JjFyS4!`1-?ue-L*~KzK_L^Y>N$ z;OuB@AScdiXkcIngcimI1_n{$yv7EGM#eC%K?;esnHU&>Y-1MI4ol3*Oi@6$)72H( zi3%V$8(J7NF)AT@laZByxrvdV0VvMJ)Wpch@L1mX*yLkP1zA&C+c$mNnZ)Pu_O5Ed z(p0s7nm#9<3zoIzHOBZn$oo0TUO+wkn$TtD_ntZ)>(@@T{k~*cW5RD0jaN^d&YiKn z_45ZaS7&7M*{@$+l%fzO?vN+$Yv@4daor(1j53Lo$HlM`;w{@ z>3cP5WCN;J<(zX+h<@lNG;iW9wb`>T8S9RI*%4vc?B1|NQ<`#(Ew9(g~@ ze9MXDd&Op->e@VmrFII-nFW6QQrXLIbj(=xMCDupZH|&j*J<1SMTQvY210mVZjgE>wdKc zjA~blRpxN-?Jq0h-uZ7$!KCf;lpPDE#8l)JGrr(r3O{jHDv%-M$ZP#JF3G^wMD?(3 z;Tk$~R-jH?`&pA@>cJ(GGaXCHT6gy+LpHn~=Fwp-JVE;+NZ(k|op%_1lJwj=;Q CxOrXx literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidonlySomeReasonsTest19EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidonlySomeReasonsTest19EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..912968e9502997f5bede84fb17247000e69e2257 GIT binary patch literal 1151 zcmXqLVyQN0VoqMb%*4pV#K>sC%f_kI=F#?@mywa1mBGNrklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWlrfM3Dc}|s&d>FSE? zL=IghiHRn9L7K9{=?amWcpY*j^ z*6$w6I~#!|4t@ctVcYKgGB2_6zLk4v$)WOzNqKfo49x8-@|9E+yJm77>HDs?S@VaJ z$iw}o%3}j}sLnjGpvdOHqh~b-u3T@7UDFb#dqiF2f649jhlHKK-HyM1&zOJDp4%R& zm#vJ{r+@$cA$#f)hgl0Pd-_%8`_?{6JE-}%d}-6OOond)Q5U7U?|0VBl4x)_pJRQh zde`4Met8cyO-%2XB+gC!d6?~yi|q01r`-N@8vIU-o9?~M?vcgHvU~e-9_#-%-}wLC z+}Sn1AIo*CiY6+>|BW+pdlL4~(ZS-Qp~{@5h0Eg1<|cWh?On>m%*epFxQWpZ7$RN< z^1u+5Rc4Ve5Nivht2xi)-|YgJ;yg7oi^ zZ%-#>-EkGDGJo;;=ld6eIfDI@o;@hua_FLK>uvjGKejh+Rbh0fXEYYf}8#;wYOV}@66L*i2X;u%j;xhrnY@B6#LL1^{E`^jH^W-jgA(-E0>B=))E X%&N@^FDwFTZv4ra{hVFyH>VN+DgC4E literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidpathLenConstraintTest13EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidpathLenConstraintTest13EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..1ad52efdb6ce887c43c590d03c7af0c13dd2e750 GIT binary patch literal 938 zcmXqLVqRv@#MHNdnTe5!iILHOmyJ`a&7Z!@woFgG#sGXTZ8n3@sW z`}dx7D|Z!Hzy5%Q3NKTj_rICtx6AjppV3-%%2vr$>t06mqS(b24varvRo!o{&2mWl z>Y!V(ZKC)TshXt1g*U!L=Uxh^KNNlB@Y2?VTITc3lRXSPqo$;Lp67|#X0gS*z(u&p z@={p{3sm0b+n9Db25w&nIr%!~|- zi?aRVIbBZvheMq&!!=A24?Q2l=2t3iFM zzcVJ3Cms37pVA~LxRKX!@5Sj~A{J+SIFnwRVmH-P@TJ?XJ1M=sTW8yCoLY4I(aIVJ zfo|UUy|)qtKI@<2>8XV+PYwC73+ZrSX3^W&3qUix7>f|@q&UwN8MsdVz5*uc4QCLRB-7Ikyw_$;?S zRjJF&(Rc6e!~gvY55{=37Bn7>PrYOK<;cD{9N)fnzWert#U${=ah9~dCEr_nj&0_7 UJ$*`|yw2hV?#IVjW*z+s0E`Z3SpWb4 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidpathLenConstraintTest14EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidpathLenConstraintTest14EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..76800f5159cec3c9101a09521d7de3507684935e GIT binary patch literal 955 zcmXqLV%~1h#58{aGZP~d5E<~YacZ@Bw0-AgWaMULFo-hbHsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1gd5sMWjf`PjgESKDHZw4R*sU9un3I{J zfZ+lKS65^wD}el9XkyUBsD$ioMpg#qCPsb+pg0#(6C)$T9{v2868Xp6Dt?H5N=^To z6n2VNET3=fZ03VoHay%NY-#EFf6Et_4`!|hpB#Ch zrv2i9abdm7JcEzi`bRE^CdR5=;q2OamLqrW$49O4|Fny|PiXW7FI7txvfc3iz=vAy z>zX|pl2@OuyW1bb74chRuA70tp_?mRKm40J)oWAH#y2bWb2~pfaD7_Wx1;t<%!~|- zi)#$34CH~~E33>RVIbBZvheMq&!!4H3jnn%B--Q|jagcrm76Ai310FW6gf{dSkN^u%#W&>m0VYde{4g?vNwQ}@J7V&=?!J(eNJ8c}b%T4{35R8Wv}bBfJ1cb7 zCiU^LgA!59?$_API(|w2=2ExwjLpJo=Py3N4(frwi|;N_syn&Her3nIX_|Z`vrl(E zc~==F)Df?LYQ?!}uRl(lesA(K_jmtacFwi`5u-bMO=iyX`O-_4Wcf&y#-?0bVaD@x zLe3TY{4F=yniGTSMEANKd$Xc$TV!zE?GK?3X1mQ2_{@1G@vwtd%w+THEdJ zl$@D)`0Vl(3qzi&3)|)NES_|9TkW;hx><%&PN5T(9gnHr(5g=V@7QRW_)6pKkMByl iKbD%+Ips;mC(l^!f9(b{!)%dBr6~iJ5sN z1`5uO26E!Oh6V&TDL7Xk-lI8l;kFpQ(W{#6F#{#GK3&1q@piTwRf! zsQ_}fxj_@760%PjSs9p{82K51;#^EkjEoEqV*b6aJneHu_ zoscQTm^10KiRR;ndMm1}nXY|_TNXQKW$c+}I|AFJW!m%KCrOqoeG82;_gHmac5>PW zl{;47L~1sioTT3RVb=C@(X%zu4;*VvcyTA^WvR|p(?e&|V#`)Ynd#~LxS)B|(Mj;- zItqG!=?^)$#w4Pc{$dZ`Cl-4RL}?ZSEbE*~Dbp8uq28tK{Zk&Am%< zEzCD$n@q7gxX;va^=t7MX=N7)-qqVwmu#E5dy>n(>dBstfr@T9$v?Q9_HQiJec||m zUGMqg*M9w`yTZ#V7-daF-yGAkTK;pVV|VubXQ3BPZmhAG&&15gz_>WuAk#n|7`(E| zED{D{4I;C(H+k7iIGPv0cv5L^@;T0rJ+{BV2||{SMT|wHGCE$}jD7h!cfMB(?`l1t zWTfqCYQP85&(FyCpM`~)iRFWVIEb&nB4EI0z{AFs(B{FI3QT$ijL6XeOnAWPU}VVK zon68rvg@5umaF#TEViu8Q$7`yt?^+EeCh5PdS%Apx^-vx^P5-CkWyav@@U%meMdOe z^{0j|NO*AS`TVTajbdMKu-`4^x8G|0?o7ef2QC`lZhmraa5yv9(JM>##M6y=DV674 z>z7|o)%<_UkfBB(+$<$iUFhP|iRGq<~piv>>r0!zVS*IX|zsq$n{n zuf#yX+0j5woY&C6zz_&6j13G7qQrTP4GfKpVO)b$674fJFoxKt6PB2hnWBJUtAeX5 zvNIJx?zS*!VpKx*DI+Tba}y&!15licsfm%1Vedoxu+=w=MP_tNQ(9s=b=#SJx>^#m zO}AX=sIXh{rHz+#{GjKV}i}6 zWMNIQ-GX{Px~I35l}2{Yg_RiuQhJ+jS|1^^#VXqBgs_>e8EniJ2ca ztU3A1N-wJFQx@N&sUNF#|Grq$c1q=Vsc*xaijNYMc}(-7a90(R{*Fw_H{`#{X670EdHY=D(#i}cb*;}Rko?5)y6(7AVZ^cVy3&rKu8Yp+)yii{F zZ9>_{ypn&9_FD#I1eUpXHhsVCd+coMF1Nk{+eo)#KUC-1GchwVFfOh!s4|cT2Cu9# zi-dt#gUD>{ObbKe2(*DkL@pTf{^875n~bgz4{8HcF(7fwm`Et9D&P@ zW~dhX7>I-PE3gO{@EP#1aV4~QFs1^NngOE$KS)BDk?}tZs{u2RGT;LV@PhIF!+N*dCB=XFrfm?kXZrq}chkkSdYlheb&F=)Nvz^i`z&;>cI!#$ zYgW@Yty?Bz<7?2@7$?20U(VsY?#U^uUj^NKqkF`CQ9(aH+qBKT(-i$r{Mn?CeA)lA z+voFg))%->WHO1|nbRJ^wWfn9)8t8y=Hc`P`Jm)(7CC1d{)?xicZckWKH&dZVbN>X z{j1!14!z2dH2$Ubcz%xK=?9K3nmt;NQyaeDo%BL7B4+cE=!>Sde+2B8?rQ!1S8HQl z(gCgATReAZ+r8f!$vJ0N-}XIE+vC`iukb&-9`6u#^BAwjWX(4r46io4{Ob~vk~-bh XvuJ%{Nc!B%Yt?4D{7ndI?pq1~Q5jvm literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/Validpre2000UTCnotBeforeDateTest3EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/Validpre2000UTCnotBeforeDateTest3EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..15b2928401a98eb97ca5c5df99017b45acabc797 GIT binary patch literal 920 zcmXqLVxD5q#8k6@nTe5!iIK&CmyJ`a&7b^4qJNk-AJ4MHD zesYXl{Pc3xlzAfVmV#!VLRzb3ijO?+IUj#v-s_#5%I-U^$|Y_r;S{vnHFbVs~C-S}WeA@nC*}wblEu+ue#zj>)ONH!rzwn3(WJTRPPm02VV#2Q2*7+X}N_h<)A@v>biP$Uxgb-mR|a9WV%V-aH!amb&r zg1L9ig;#$9ZpQu&D^*Q6G8>!{Wce8x|Ff_#GqHRy5C@s3zyeGn20UzB32h#XslZfc zz=#|jz%&Pp4n_un=UYzQ;*PmA$y8wGwTH?tOZyM$yy5cg-E01*LhI9v!$xIKe&?Ynu8d7BN`Wv;$8SuWCj@t&J<{!Hs6fgVNHCn_^|ZgSuJl*{<^e1uBh zs!10#Z=Lb4H+sj$cYk*CJhmlP^~tF-c4_mi2$wDqQcJz&T5PyYPdnO9P4)M*-NtuQ zTwK0xD!qPUahY!Cd!MTn_*JDboC*=Fze@@x@90^W)~5Z9OwtA-Brk zOnpN@`3vVYBW&UUWk@41ShvS;VD>E*f YW<7FjqGr>sYGJ|jHf^0Zj9#Tz0EtUgk^lez literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest1EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest1EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..7cf888e16ad1989713b2325eea52e7ca3794da5f GIT binary patch literal 918 zcmXqLVxDBs#8kC_nTe5!iILHOmyJ`a&7Yg8LJG>*DrdO8-g{*0xaP%`@(4|S?J!*;@_nh2)Rd_WF$V2T5VIwONSgGAsh!OfRyuiyC> z&70CY<5c`Z`TB>F-#^{RtyHg@@p_5WU!KF?#S0I9-L$$fw(TI_N_V@q+pVI@3;%?6 z9{>8{_SGm`{UZ+YEv7Hir`$jMdVYXP&JTyhODC90waff_Q~ccbk-wp9tfCKx->tV? zd-fRE8I^iAURydhd_h_EuHEecaW{Jl>)uG|A6>QWm}KONY1u1YtUJwRSRuw~qr_4z z{bMdt>opsHw*vq^ CerZ1d literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest2EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest2EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..23889360cc222fee606b87b3972c8d6b0d1f05c5 GIT binary patch literal 917 zcmXqLVxDNw#8kO}nTe5!iILHOmyJ`a&77 zqJY&23a+lm?p6SK#K@qDQ3=`WjI0dIO^o~uKyfanCPqeva|L-)ho3HFbb7v`fL9{Z`Tb9b$#+#k2l0@aXExq!A((|Dk>N|==0n|9 zqJmbQE4MJPUiV^jZz{Ow!fO({sYfnV+oBxsYS#aR*jeI6%Mh3>k zK?VT^^1vXLRc4Ve5NiP zZkf@GS2}L4^UmGh{FB2<@otN(*iZiNcWWKA)YnZHUfQPV{#n_o#3232w5FrsDtSxJ z7;c|-W~#|$BjZOcy~j(}Cvt6CwfX89tM0owzW!o|6isewgx`*n0|4XU BYk&X% literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest4EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/ValidrequireExplicitPolicyTest4EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..e93a0e1fe91fed010b8098517ebb537f53a59cc0 GIT binary patch literal 942 zcmXqLVqRs?#58FEGZP~d6CB(+$<$iUFhP}@Kgq<~pisVKFuG_xqxwW1&=GdZ&) zARkCo8YmQ(CP9$1qk)__uc3i~ArM*^8yFZwiSrs87#bPFxCWUdT5f4z4zb)IEHNiD zMFFc56kJ`A-K_xfh>1ZHqY|>$8Ce;an;7{SfZ|+CO^l2T_xMHcIP2K#ob&kGQ9kFt zI;n!({^c80vg7f{K~m2&(Bo2|Ld5oNdDUBF6Ho&=f@awWPimzE0?bj zu6;E5ZSko;H9F}_?8sc~<=U(;Vpt2!_H84nDMj>YqorHD1mDxTG6RAKc( zTEQYnZ@JG2(So(>ZLE{t^?vG|8n@0ttA2h!{o*Uzj*3rzzH$wVRpZy1xAX1qtd;#& zcVTXamF5ACU;*_*?RqM&>iialM(4ME;kx!|dFFi|C68O_f+}5=SC)GMh3>k z*#?;g^1vXLRc4Ve5Nig`v}9)!;4m5=H@lv1L@~yWc<&-MYctiC>P-&L+n2K{=|&;K!-|GW2;vEYe4TcsDgWBjmm?*BYXhK?0d zOk4Ktby%=hX3v{VNuSnv?%3b|**4P!!wIjV=D(i)z9UaNH!dPZPOoC+-0p_=2`4XDFD)+pvUz2|i!C$$8i<%5 zUhpc(j9%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!ns0&BvH^7GOaoP&H6oE;6C7?qGcz{twL+{DPw02Jq9 zYGPz$*nX*Osa@^2dx}o&pLHv)R5u;ETCybcwqt_L^zNlBi*x_RZ@K@uZ&G8pNPFdW z?Y(~AvKKwk-X+nuHg)UAt$kfnJLg6H_wM|nx=B{CJ+I|J^FO_lO3e$l=6}z*C;a34 zd;QoZ_TBj>QXV~&tUkTy1csJXW%E=gOEKWvl7#3|=K8C*M67X31PqFvXL z2$pH9bQyp4hFp95``Q6!CT2zk#>F)TRR;3FSdvv{kuVTz5P4D?e=%li8;1_-x_zbF zQkUP1U6BTkXIVZLF%}UXRksJ7Re|hY>rL06op7XxZ~F>113r*`en!UsEG)p3!)723 z;w!KS81NbJuyG}{c`&8|#SIt@_(2lFAcd?3%s>h`et-!K7(a{*<{mwh?%Pbzz4rIf z%MC|zd9E4Ex-62?H+f62^MdW+(>eTlCC*ybYJK8cUr~~jY8@NXZ*Jc-A#v}Gr0sV4 z{RfvR_J$uib7#S^hrj%SmOuV%wWnXqH}n1KyclsKZqtHZ=H-I2s@1OhyLLZldLMOv z+VY9tyzV_$`6XTP@~fxe%!TjRC0eX*mb=${m{qWiW95sNDHFasHu%eO25U@ey`_GJ zAyy!(b#340788+x^{3@$SWTOz5u3PQING*+#wJN10wpZxa5;91PS z4t`Sj!*wQOd+r&BvriUjJTG~eaK^Bw)hPaei|vc6r+>`K-PO*2*l3!y(W8oE5{Ci$ C>RY7% literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/anyPolicyCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/anyPolicyCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..df54668adbd2773cf297e6cf6709611da8b9c9c2 GIT binary patch literal 911 zcmXqLV(vC*Vk%z1%*4pV#HeP#%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!ns0&5cUDg*L!GLtJ6oE;6C7?qGcz{twL+{DPw02Jq9 zYGPz$*!M#HuD{9I1A9Kk*=cUp;e5XTLEu4_)hm}Doc;4*W$Ed#%WG?{tngb9wx};p zyzAJ>#-oOU=PiXJd#5-q7JRt)%QWMp>h(MPEcSP*8A}|T;bi9%-otX;r1iw2usQMq zf|>SFapuo$xYL-rJ$~PfG+g+|?N!Zt4R*QP&3CvntDSxGs%AS|u4K-ieQ5O`D=WR< zy-HUuUiD*jo}Af!r$pM`qKvz$jHBzJ-G2_gIgy1oSthXc1gxKPwz}NHS$(znYE9*t zA6*N}%yiY7=kf9OulDL)xkv0?=;_yw&&vO~^1A%>om-oqZl5o&a_Mod-xMdV578l0 zT+GAsPqH%dmPIc(Sk1)D$iTR`vDKil$v_?$PqNA^5(Z)oB2Q}LFUCx5hhbhE7HI*Ez8Fu#v-!&IzQ=dCMny{#E9dpcTm4v!h13r*`en!UsEG)pZ!)Cw_ z;tPZLtOm?L%76zXpaSAGFftejf_MrnTm~ElY-}t*CIfOz0h1aqrWhG)OBFu&HI^;y zIb+H6vmr+4n9iSybE5x)QhvU<8Fsh-agNz9V+qx?{Wmt&Oj&$5@6J!zm7Dj@X8&A! zvU^>1``Rmucivq*RW?*`&cAnW&hz{^|M~X5Lk1>+onBdj?;AocR$i5S65;!@@6m~W z(J#7oNbYOM6Y^d?KlY;N#f`xW8(13``vhChwy56y@XW$P4jZ5NZur{#@pQD?ytfPE zIc>k#P4o{EaIfcNes(?V|EW1uW^XS3ifddkb<3L%!s{;{@?Q9u;l*at3u=9ztPU1Q z-TeKl>#lL}rO)1a;l5d~H>5=;TZyk?2rgTY-=TNrz=r?j)#8sge7$#J^@PQl+os(= IIQ!270JslhApigX literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/basicConstraintsCriticalcAFalseCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/basicConstraintsCriticalcAFalseCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..4b678fee0c56878812687ebca4ca5681126a2901 GIT binary patch literal 923 zcmXqLVxDf$#8kh4nTe5!iBa5umyJ`a&7*-^nQF{e0H!P(KEiBSpJXN;^2%uS5^3_x)%rY1&4hEo@P zSL~mYyjt#apYBb=y{UdT|FNz7>(C|j{^qo(?HA5e&U^apBvZ8fE$-#VW*uqtT;rR1 zbI*roO}>ie-`gjAN%75jWPfLmi7DeF_2&yOZS-#ynLjQ4cIuLcJGqa}&J^Wjv9S6O zD71}h*B$HF_ZIga*(}lLcNJbfXVO8*&s**-cp81|u+=B4FZcg2o}AP?Nr&gb#sxBk zMYSvmvT1iGoC@ZXSv}dIcmKxniM-vG-)`EMzP+*JdQ$Vmgai90s{dR2X%@qibS7p- z2FAse2IU6wz;KmSW|1%uYY=%-8-FooY8!_R>$-iV+ftX`j9rliP5`oeEMhDo1@~R_ znPup& zfjppuFi0Vj0RwX60Fxasau^xBpXYJr6$S)+`}S`Ci7UZ2`A39avF`p*cg)Hu%`J@C z%i)mAzUM@tuV#xbl|^X;Bl#SA}tH8#$Bbj)t$+^?K}GEC>2zEk;FA$suTs$cc1|6OB?&FB9faDDPONsf>m z$4^8be=E92oi8@6jA?4y#Cm0o!p&{5kHuC5SnBM0$(h`nn-wnnc*5TA(^GCqZJrSK i|Hj0Bt8c8G%`McncSR6Gt-}_+@{LRFmd>wG+X?_jZ(@}I literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/basicConstraintsNotCriticalCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/basicConstraintsNotCriticalCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..d6c7fb805fa6a7d9d7a4f057a863df9d2aaaca01 GIT binary patch literal 918 zcmXqLVxDBs#8kC_nTe5!iBZykmyJ`a&7C>@^&XNr+?|Y*v*-P2_|!7tdXPlc!@CzZcZ8Tm|Gwz&md|SN zJ-MaxZM{m&+V(=L=mgI4XG>(}?)q|wHQiV4&5`S+;<@o5nu40ImI(b$dVP7~jPQgl z>HB#0HO@|(`qE`)1&@E~hEL&LQHh=FT~k^c|7}R~PFZ0%BlL&pWAV_V4VQf1$+X^c zv{n4X6cTpo?iqot%%}2mEpnA?XV&sDaYZ(#PTjF@W-#|HPPOp3d2z|g(Pq3ocj9(_ zt7!aPc`>h>aaE;P*#1v_rixeh8-Ci(f2db~yZ+VX_kB10=~yhy#LURRxVX}w+&~@} zq_WB^5(Z)oB2Q}LFUCx5hhbhE7HJmFU!Xw#v;PCWT%1i8s`%xOv2~i zhrZZfFyC#x0Ut;|KO^IR78YP?Vlxm2@fBDE4EPLq*tinfJQ!1f;s%UB9#BGUq!GZ!^+!Q zwf_GbJ+$=K?>#pyZJ}fK>aDupZ!+$TVZISQPfu+cf3nE@Mcwmnc8S*Wv#Sc2ulyph zsIx1QWxi>M?&PeL=|Xa6uDUKWysh~BKjY*!*H(v$UjodsmsVY{tX=ptq1@=>ht-!} Zsvi2H(sgA=_6fz}rLPuu*ms5X0swRhRR910 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/basicConstraintsNotCriticalcAFalseCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/basicConstraintsNotCriticalcAFalseCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..27e670ec162ba97bd78c99b01fe34566db49cd76 GIT binary patch literal 924 zcmXqLVxD2p#MH2WnTe5!iBZCUmyJ`a&7*E(N=|!x7T@WSp5Ua|b)D~4!QyFWBkYd~?t8QQ&!Q8@*zYfU zaay9WfXOnt?q2u60oOF zYyXjcRhJIkZS!1Daxz4dE5W%#fDX}tQTL@y}7$JQb_Hy-ks~b*P4E{ zE|B88vd^$V>Acc&-^~%M`e&oxEmX?s)$M*3+pzG_)~pL(E(^?l_I2MShnn^iQ7_EP z_U@OGzy0jO>P0WRas^mc>{uh>Truf&w1t|j7kufedmk-63w7u|ou|vg@E1!v( zk%4h>nL&wxJTPo!m02VV#2Q4N)W%9*A6H)B_%ffIo&ABz}^h~GO^8UM4e0FxD)fjEe-z#?G4XTZb8mC)wFmzykPUsbSuVPae>xN`E;XWc@Rk0}2X7hJsY zUaaw#6_@viTz<57^IgO9%o`R3B|V5#YImRK_ICNUHB5VUa|k@?G^l&$@knT=#ElgP z)XxR~5DC3evANA*cZgWz|7pjYG(UV<*Atn(b&qCfw}K8EL)3?78`9I>tT1V3QuTKK z_NZbP$J`5&GuAXr(}`gTE}I{{u`?|tzKTor|CE!bfaPl7G6_1{@M;BC2CMa`=J_G<2PF-#Q literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/deltaCRLCA1Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/deltaCRLCA1Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..6815e4f888f14686ac1ae266de7da251a1c53d43 GIT binary patch literal 901 zcmXqLVs12OV#-{=%*4pV#29VB%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!ns0&7xIb4n7OgM1X69Ssed7?qGcz{twL+{DPw02Jq9 zYGPz$IP0wKE-=wKmq$QQIXbscSuA(evWGHtP326gUBSj__Vywz}icjpqhSuRapBK2@+UjPGrx^e&@!l^<^(%aM7ae(45>W6m85zGX5q z?w@&R+qVBw-{FN)9E@F>8J| zeX(Z7EcMr0doC$uDtuYT(J7s25}(|m>JqbJLg{p8)~l~epEO)$ILdKann6oGVy41_ zqPp0(@8dQp9#}q4b53T|$=&PS*u}IbJ`GO^8UM4e082XTQ}xPgVffJdu)@R8u|nr zO_w>*yi(p?`JaKn!H{;LS}w83%<7zlYH#K5Da8cN4lCMM&|LiPLc$qY`MGKz76*x6 z<=ZiNf=rUaidhbgl3TZL;x*dGXYWy18EJfY-}y%(3lHgs^%w7`F!*;_)PKK>94~vu z;x3JQdrEh1ZRGmoAol;nd9Rt7@!MP`yYf$&*Zk+d^c`K6ueYp@-P(1+UGT++Z@UG! ze*Bg=z4^>i_mvsp-1m%2-H%z@{i}M+-Bc7Z^P|M6FA`sFNIu`c+biYK_WK4x0PWFD AjsO4v literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/deltaCRLCA2Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/deltaCRLCA2Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..2f64a74e135563594b0d369d826403970bbcd314 GIT binary patch literal 901 zcmXqLVs12OV#-{=%*4pV#2911%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!ns0&7xIb4n7OgM1X69gPf{7?qGcz{twL+{DPw02Jq9 zYGPz$_}Nyi)irkxr)aSyA4?gl?aNiG?f8TWoHnOjFFVYaWtk|Jd&v3A1Hn3`?zHLXXLo&Fxa*4U`hXcV{pVh-IDNX%)jX$2p50$9q}onVz;tU#Ra^MhhQ-1A z_O00>KK0c0?I+SW&%Liaa8_2}vTEQj)qe~nZD&N*?zzvI^do2cpBMd4Ufysolyb-_ zx^H&=vlUB4nq@-d*DBpuQNf1ZGhfWhBR)5<>dM^q5ni-H_VJgZI+jHZPsQdK^a^x# z8K=#i{>fl(V`}AM%{TLYeGX606mm&xu$+AC+J$FjrbRE_$Q(PcWPcW4JX>`%i-XLI z?o$jFg*D4Q6r5|=&&15gz__@^pvpiV7)!FsED{D{4I)o!<1fZcZR5~kUAM1vTk7(g zu`ANR@hr>7BE}+8bK~1SW}kECx7#n2+--FB>M-2Et`uQ0d|Ff_FQx2PfIEb&n zB4EI0z{AFs(B{FI3KTbBG~fqG2!j-|8ZZMXtW3bRuOg-jOz{Qt~4d>aM8TOC`Rc{xaT&(xlmiw@i0`Lt#2rFJP(o0O$* zKeEaD=&DGsn5fjqa`5s|!HFl@T@rHENLtBtI`kY@Xxp|e{nPUGx&@pEjh#Hztz{l~ zKjIPIzEJ!Ie_SRj_lcL6r@2{vi#xGM{n&~1l|O8qzPnj)?^GUn!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!ns0&7xIb4n7OgM1X69gPi|7?qGcz{twL+{DPw02Jq9 zYGPz$xVj{~`^&s5i@plZS5!RTcx!UTB)_)crhi#~5BGmo_PuuGfFS>JSB@8*JpY@o zyfYW^JQmcx;%Jb;Tr*YksP`&9i(|{2$~K*J$eQ{f)Yti==CtV9Qto$dW#5~*?B%31 z4#B)`vB0v6Ru4O>3~axj>VNm?@6rPXCt7Ojmn;ieqI~k~ZH8ktFK3<;e7U8mX^Kxe z@1^p~wS{wc}1@f96 z-oG1RO@u>RE-w%uEqm>C%u7uOh68OQ@;NmiLf!a%G+h`et-!K7(a{*=|xXpP7d19WRkzu zV`q+!MCVkyg|)`BcdriJT{>%-!I=wOFH@iFTu?RZq6+V0uMdsf^-pGAe8c>xw|&;y zX>~8H+~W>Of4=3@y!vDN$6baV7dg83tg=b`?YcJ38=F!)mfo-uE-U%J z<4rGvwp`3KiHsVXulv65J@oLw#JSaVKTFrghsMTOu1`JhvG0{BkGp{4W|^y}&dj{T zxQzF4SJBrH6O|nd&0?M@V(~L`!_Owm?>hE}U2t~2-ZXLfUEhz^O8=R)xo*n-YX?*T DZ$w~Z literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/deltaCRLIndicatorNoBaseCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/deltaCRLIndicatorNoBaseCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..7cd82a4363c5af9eab44debf5723fdd9f6cb0487 GIT binary patch literal 917 zcmXqLVxDNw#8kO}nTe5!i80E6myJ`a&7QEtA}sfU7}vpV=_hMEIXCuQD2Uz_pDh~wtt2egHJQCU?zlkD`k$4v-v2dt zv)8FAz0;9*@vJG2g&gnIf84kHnQ4ch`mJATovh_icP1`;>l*gBqun6J6m{UB4^ng1Qi@pfCC_fFVwPW00cxvUbNJzx4hyvF)TRR;3F;FMKn zkuVTz5P4D?e=%li8;1_-x_zbFQkUP1U6BTkcUe9bF&2?87G8 zxK_V}@&1O_zUr*@Ps;4}${h(8ey+&PKBu$)$Hw|~`#5fjIqh$={a~;^d*!9tiCQ|h z)Q^}5PLa&{Wwgd{OCZ1WvV>23Z)5#l-d+6az^Ul2<5_X4)8+3}TgJ92?SHACB{2VA zk(IH-B_%dR^nf3BUfed_FM8(5QLWwDrq=OTOA7_Off&rrwoL zGq{55yGo?Z4L+^l*EDxgXqDCDK3a72NgsRC-P6G-)3bJbds&t7e_>+F?#+^mO4qMA WyVG#$OHr1Tl37M^vRNe`8uI~7wOQ!^ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/distributionPoint1CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/distributionPoint1CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..23250812d93bea78c4fb47d628c1e0fb35f43120 GIT binary patch literal 910 zcmXqLV(v0%Vk%m|%*4pV#OP(f%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz>h?0|Sul^7~G zI~p`GDk1xXk(GhDiIJZHD9**y#K_2SkT+TL!s~^0YHX%Q-muKe%#42`>v5A?Q9HZi z^6l@>w><3lwV;WE=M&$*s<*Q@rNn>YmHoLSL5IP&>Do@^i_@&vZo87jx#HIAggeD7 zp|><5CkTf=`JK0Y@dm+j;#Hk0-}hPwXR)4~^ZTu!Tbga-mo|%YOo@C49fO*^qo;p= z^3gS|#@a$muep2wNe9-J3IF_GUVrNJmcwZd&-JBCoVD^}KfJ%1^;#}-nUCI|slgTE zJ}YjX5Esth9{+cn&fFLOZgNVu@~jg3wJP+U)jl(!pt)Z*>OPzGg*9vA0EXq{kN^jB8z{we%j^l@{M1%M{FNg%dJ;c_tr8oGcqtPt}&=GkOzjNtTKy) zfmnmcliK);F;m+(bXeEzE8Uj5{ATQmG;oB=^0A1qhzJ@K@9iznXu6bt{*w9Iv#*sW z-hOYu2hz{a$oQXy1(<}`48%cv1r`AVJ_8;$u7oxZ##ErV0iyvwNJ1E-kkx=0NFm1$ zFr@+Ghmm2`N3(Wrf#WaSR#&PU&0u=F?%m`<`Q25o+AS{MJlb4yZGlLR(DHmofu*UI zYgYbHiwz9RS#`FlOZ)Htx3^4}@$8L~nyC8giBrYTe??1ppY*r}IGJSrPnU}P#jxp3 z-?c}!{?lHyZC@Z0mAdNljh3wzFQ-0Xi=Vb`*OHp4f2I|7-Q9Hddhy Xg@b=H*PSx{82Tb@YrUn!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz>h?0|Sul^7{F zI~p`GDk1xXk(GhDiIJZHD9**y#K_37#Y{);g@V22bGDyv?#R~6{ra@=xm$=BhvEXg zq;?InkLGb{fB$l8cJNNPJ@wx9*y)T<+}TX(4sH0-fzS`RXM(?MgSJ?5QhNJ`!G&dEZt%ZF+OL_3^19+m_#xR?c3ju}I;~ zqh0E`hdv+a;Fq+zB(ZJ#R~G#vu0j>gWvegB20Z(=?97Fx>djn>&%aM}J^W;)XGh{S zxAV)lSqT`vOl$aYDcLLOpym5I4*s@3rygB@IMajqVl@*pBLm~&8iOhWd0;roDziu! zh&6~jsg1uFGqsIFhjrb)(ru~BZ^o`j14pR&slDcH>Qdyu^U+Ftph5c$`J zy%94jGI`m$dIZGoS1ezBezMY(lGNIyvef#^n|OaEZD^mhF(x=6!>i@w_pYr!OrJ{B zUunzE=Ks8zYs&s<7bYo1RZg19tzlDYRABRc{)F$P*MjGsWU;YM+k8zRb-kY8`8cWH zqOM;Wo&;F$Uyw8NSykZ8vT6Tb-z;l+wS7iT{qtGf^ObT=?kxDud&RkW7K^yVKet-V UML7+peA#VyXVe`2(wE=`06ZI9wg3PC literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA1Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA1Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..046deefaec87e8b260943886eaf9a534281e0e1f GIT binary patch literal 904 zcmXqLVs0^LV#-;-%*4pV#28}0%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz=K30Wz>0dO1&`_k+08?O&+nXYssCoE z;3cD=l7`fMf!C%PpO~TbIqGP-;$lakO@3mb#_jo0jt)i^g=|+|%%5n`d8H>LWE00k zxo^+YVrpJ~5ENPeEx7AW;68=yYoDhG-(_NEWMEueV^C!v4-7$BWfoviHi$f_jlUQ( zwT(lEb=|(wZK=y|#;!;MN3|>;ix`WD>W}q*)^A%WC0*%#`*eyu8>Px7MYNl$Klz7!+d@Fsq3*X+4% z6W=a=>ix4!dQ))YnLN(-oL$d46mm;TYJNC>@>$}sY|q34GSzk8dju4HCw${O`nd07 z@JjRDwjM%ZUn_m46eV!6Hf?t>($w^e{kSpZY0M858{WNJey>}(?)QR-KfdkX6nP_^ zRy!-LxEER(SX)|W<#)q#z5lcFj783QuY;bq96jV$`XO{mt=%>Gc}8;nJgWloWIQeQ KyT0qWPy_%haa5lG literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA2Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA2Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..de9a0be510efb643e22d5d712171375f8abc485d GIT binary patch literal 904 zcmXqLVs0^LV#-;-%*4pV#29M8%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz=K3>4BR(?B9Rlf9CNuOkZWzeK-EqI|I(FyLoj+hp5qxh4ueGFWAex_ph?7%M!nW z(~C>rn)81DZxQzA!h?A6#;*-)YEq7`Xgj#5p_=1WZt82LAP4ggEE=t`k^-j^=8N@6 zOZP4Aims4d`Sg$}gZBB9jL`h!HY~OQ((SW99(Xl-4ws0+1@G)unc)W%9*A6H)B_%fumZMk420{q(k}P=FOjS{u!>^*PXb^dQv;bXm>3_Npw*e1B)hJC?>{A%x{Z&en;73_A2Xe}JO21Y7k% z2Dj-7$}A;i-27*^pXy#~Z|ur3r8Q;+x0Z;e;i4pN&zehe?8@u)Li(F_)-3H;?Md#4 zcAT((7TY_n*MIWP1Wz~XRKDY2Tlyl*YU`zUyEYb`pY7wKK8ttngsMZW+m~<&@lCPK zzjYckSmZR%)*b8g8y}-}P+nX_xpXY0Mtq4(x0x zR%SW%($aK+bC}BJ8GP%sdE&1{z4>aA^>yQcKkLrsdy6Ownpi*g*;u2jW0uUZVa|!! NN1kgM-0M`(0|5VmR4xDj literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA3Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA3Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..03bb3eb2da91023c0267415b2c20535445090165 GIT binary patch literal 904 zcmXqLVs0^LV#-;-%*4pV#29A4%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz=K3_fw_s1p8+V&#ni;e$Z(@qyV6hNv~_i%`Wx$c&%#bG_g~h=)w}(}YH{|A;(W*S z;yvc7=PQkCn^Yq8-*{YH{$F%zQ1*54x64#`+OJ&~a1ywn6(zPh=cyH!kV|M}^hu%g zwNh^aKXO@lKX|s`z~_G-zr3;i*L0pOVGWz+GCKK@ z?;w-s-7os)+?bxejL&5H%M0Q%6Pfrrm%O~n#LURRxVXlk%0M0%g0jjiz@Tgpc~TpH zF=lEThYstyeWlw{m*0$Ckp_-xSw0pq77>rhA+<+x4gTwfyB4b4_hFsy#h`1z2hz{a z$oQXy1(>e+Or%UohE?RpLap|{T%XsyiHmNLINHQ~zGlr+ zt&g`Ze=TsB(+$<$iUFhP{KeAq<~wPKQk{SvnVyW#5u@E!P(K+ zKu(<3(7?bD2rY~a3=E>gd5sMWjf`PjgCG)ZQZi70*d&Q&lR|Qkk7sdlX=;%{6QdHc zhZtEIn41{+8GzzkOihf83`d0cpItw^Wa-AV#skl8S-mW&b5LOWaw~G8*Cpx1X?gFQ zsv|zR2^>3CZKnO*!r}tc`J3z6lr>m*Zg050C+*b-?MvE+67Q{G z?wmJ#Yb*=D{bsdUerew)AtlkviRzkPBqFRc+bK!=kfy+5A^D?Txv0 z?h$WZhRk`HQ?u4s*fV5*x^47(r}wW}l1(Avj_-L_U+`J9z-#Tp=4~GelD>BIik~YM z%Q^G=X|YL)+_5Va|1QKCF&wBgJ6Le9{E}(Qlg(GJ+=}JI^{3>vQ*$OA)DR+$ADfej)a zlS68cBgiyC8Z=q(L}| zagQ^V8S)x%1C3{47G?paJ458i2c~9VN$&;+iZLCyV;dxjx>1Hbe?q7nx-bFfAT}~goP@V)tNUv ztXL%HM3t>yl`ik-*y+o0Nb*0ggsuPd{$q-Z?I*IY+;ly1XMxJIqRqmsLOQEY?loCH zagkeko5gFJkcOu-Gg>=m;5%e&@z0RRwDZomKl literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA4Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA4Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..f1cb26b375bc0be054f41653d15200436ccfbee7 GIT binary patch literal 904 zcmXqLVs0^LV#-;-%*4pV#29YC%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz=K3_fw_s1p8+V&#ni;e$Z$xeAas9l#Pph3-gBSTuhiFk=PsCXkdGq6D#rF-GH?R7xT@TqadK!qJn?>>QrxA6w9ZK$@7>MW%rBjAIj7_7 zG->Xl@ZDd-EZUe>S!j1mV~cRPb>*IRhm7kjwF~_djgHFI+fL5r$(d@@=)W&H*Vb6~ zTvx&BS%;P=1)9uLkMby=oWgdzT)AWF`;|=0j0}v6YYeIksC%f_kI=F#?@mywa1mBGNnklTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWlrRtjDc~07&&*57EJ{r-aSrlPaCS5? zkQ3)MG%zp(LJMO91A{1WUSk78BV!oXAc#bplnfLgHc6t{q>vos<5^r>np$Mg#HfVq zAx2gP<|amd2B0_>QxhX2!``Eh*KL_O@Ao-Ri<~R^jDav#oclJ!o-iU z=F$~^4lIn`*FD=)%5{F6{j!xd;i^;I%vbeis(U_@{hQ?R@L$TClo#I`{+>GA!O#1y zNkQU9*91n70)ORSK~e#&#s2dWUwY478jvLS=Gv-fXG3C_-1*l2;NPN&9wp~Q=k*-d?347-zNGPN3S`)%x}^e%H$zH5j!y^kRM%mN%uGyz7x9ccDgV!?Q!n zRL!2hx4vyNFJ|6M&b>AhW@$az{c-s$hO`8~u!izl9X};c^P@X-Bm_MI4bHn#8k(NXM=lwb-l_{n4ieF@z>6-pEH?F(AyEbL+WrG_F-Ii^6 zv6w|S(%RzY-|r?Gdu$_DE-jiMyFtn(vfM|gq|P_?;?3pDma)mqTHvbo_TLJVr5tB KS(;LP@ihQdE|tCj literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA5Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA5Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..c4f9f17874606dc83d1c86f797e561aa76519dd8 GIT binary patch literal 904 zcmXqLVs0^LV#-;-%*4pV#28_~%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz=K3_fw_s1p8+V&#ni;e$Z%n~$ef985BELqiaMvaPxxQ*oBPL%AASlyc+caau6Sp7 z$(w>q-%E3rG0m9lW4u{-8voo$no&D{Z}*KAU%6kovGn|pw96qyPhRf1yx79IP2S?> z!OA(|r_+9AzOHHE35?3&TpGU1^T@ii{qHY16v?!nZeV+vSHhkJY~O0`tmtFQx7|@iJi2~XA#3$KXv8v z2kc5Wp3#vqTv70T-GR-%Dd$6;l$?GbzWZO$#P9a24is-Kpo{+cBsHLetB=7h7dyN-b3ZAqtWnyMzU|d{dP-P$w3_)3C7GO{|h&-u{ zzZf&MjYEfZ-M-RosmpK1u1Et%wJaZt7>h{b_f>m6N+TOKoWHLuG55w~w z{EUqMSy+IHhs{77#8+SuFyJ%bVdF|@^I%K`iW@K*@Pj0TK?+$7n1K{>`~cG!Fn$;r zI?rvF{`T+Wm*Z^LXSW{PRY( zf7iD^F;&=jW7-X)y5PQt7HcNN?E9Rm@S`Cq$Ez{(i3$hMT%TEp49nQ0Gi=o06P5-?jTU{O=HsW?UaL=kvXGi=UgFO#V z?b-F!^~3&&)~CDT9{)J$=EIusE6m_kli#_;%6Il({I=rzj1Aq60ijV0=iUcDT74jk zeO}kzM0j8+~hSkLSz2s+U6ZTaN6y$oezc@$!|n!?qUP PX5I%?Zu%L$`MMqeEe>Kj literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA6Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/indirectCRLCA6Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..46443aab941682033e3bf50d0b6c603aa967d238 GIT binary patch literal 904 zcmXqLVs0^LV#-;-%*4pV#29J7%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz=K3xbus_*q{wsyBvz`=Auexn3zpv}b+er~Br=H}p!a+b)>i zUC8sc>1}_oSIzk{i|r!X?Gh|G>^4!K({;nnyK}9nZxrA6LMKd~@11F}zP_X1&ZQDx z3MN1Ic(O5-bI!?d^AtvRuAh8Qde-sPxv{YIO%84N*krl&!L{qApSuUB+=n;i0T?%w7_n+#4GysbKHEMaGQ{Yc@7m5m3Bm^#lnXCGYnE37?UV)N_O zFT(yjtGv5mSIYCo-rfCQ6Bbm;Je(~0RIfnvWBStRs|+-D-}v?Ukj<($3zo14-RPNk zr_R;UVZ+@UJ8rM~bN+=wt-ZU^*{N@93YnN085kGW7*rX^14B?&nFSb>4I)o!<1fZc zZR5~kUAM1vTk7(gu`ANRQ7y~IBE}*je^Q~BdvT6#xxer|r!U;w?rD`78t{Si^D{F3 zXJG**9ySAU5MO~sz<|$yhm9+t&4V!&C~m-Lzz>oT1}S7UUWA3Ymg3D&iKkxc{)wFiQJWGica;KShzIHXN=Y5sRz9z;bq>G)Wz4cVwoi*B@ zxFdEE3+IL$%)imO#AflXPnG+;UH>1;xU1)y_hI$z!)I=Nei-nki)n*!YE>L> z=->0_csDG4m!`vQ)d}wa>#=X^B?! L@83-BI{OU)@%>mP literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy0CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy0CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..cf3611025edc9692e7b233366569673d91e347c1 GIT binary patch literal 940 zcmXqLVqRg;#57?6GZP~d6Qi{OFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pj178xYku{KpSR;~|mywy2S>l*i8IYfonOte0;OuD7 z#HfVq5k^)9<|amd2B0_>QxhX2!=b#3GZtr^x$1cBRUZG>!xOGZR@Z(Bd*rl-xpvi6 z=^1YrIe9x~>mIwE?YG#&WaC}dDb{O>oUh#6el>c2MD~;kap4zMm*~B{x%#2b^LV8X zJ&q}=Z^{!Q_Ft6fF7r9`Kh5itrodL;&bq>w3!`a`1&^!Gb01z;>KA9jnfU}fdMJ2%pzeR z)*$kvHvVGF)HV(s)^+8M`749OJTlEMhDo5(^eoW&O{Z+uEdZ_OM#(kNsWd zYzBNF{rrrK|5;doX^7209K=^(5isC0;9=uRX!Br91&SLm8t{W8gh2{f4VZxxP#P$p z0^&6=G63TX$TI^;1C@ig$mtLmeT)nV44a&Dl5YQqTGo~O_K@9ykHu;?zg6m-wSSp% zQd09{*jv%OCHE)sGkU)Bes+ibZqt0H4+m9GoHRgyc;|8^AQ-CVI$L_gtTuei>^riCjz8hIO&I1ipPlQn#qk+(hh zcW7}f&z+3&|KBoZnWjeZmf7r*sQg-f?C)g%-(8Q*zAu};d9LD`#iyB)B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pj178xYku{KpSR;~|mywy2S>l*i8IYfonOte8;OuD7 z#HfVq5k^)9<|amd2B0_>QxhX2!)t?l$>}j64)XtJr$~e!og*4F>xJ46eVbze>%Ue1 za?-i)5@@@tP{D{{OS~yxWkdYNfWyDe>-TKkH9bnA{J$*w$;a=NPyd`%v(11v-}%{7 zJ`efbzCYK$_#BkDaqnz3pS`^rT}K!Cwj|!X^k|J_TlzK4ow1gym`;R7#Fl-%b*J0x z_y3PUz7NzVS@}C%`x3N7wO8fd&LUY}&ud;!^;L>DPg%b~MZj^oh(PcK)_CPhRYr$( z3XMWM3@UjS{P}fcvOp$RyalWJ^us&+PQKdoF`t=J(pSFwc6Td_$GP;AH`w!LY>k*< z9lK`YrhnW?S7trV)2rw`e&gZ(so(5g+;min^{-}PW@KPo+&Igiak_y#Fd$`>StJa^ z8bqGd#$Sw?+Qy;7x^7?Tw$$Y}V^^esV_cSxMT|w{#^>`as(275g{WslOv#7g8V)a*{ z%_SFC1w@9Xao=L<6ESFuian!u)78CG!7W*{prmkzUp!B7tcOVb;wwq-|GOx>xWYVD ztVd1d?QxC;CFXl0xi(D;23xi`vOfjB3~CTlwCI=|w8gcwaqstU6;F4Z2m=7b9#(V! literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy1SelfIssuedCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy1SelfIssuedCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..6512e9d2e9c981f0473f264cd2240a2ebe5d41bf GIT binary patch literal 917 zcmXqLVxDNw#8kO}nTe5!iILfWmyJ`a&7 zBf}xFxAN*DFZZ=A{dRv@^w;lJhm2nbO-sG3HzCI;J*#cb(@eEHHy88BEl;Z7^Q`Cu z%k~PTlRpeC*WEf45czas+u@5#e4f1iuFL)FKWiMLQrXgnrjxGnmsYdkqc3vS}vfrzB@{-W2Y-^{**zP&5cIHd# z;VHV}uay#3KfKr{`_5|n4QeJ$ z4{j>o{pVsorKaBMXMV##np#IM(fOB-eiSxsPj#bjZSto}Y^T0@NOl|@(BH;ByM;a_0Y=PaX^<{@{C z>9{(_v4VbE$1%IWM>G98MIdpN}6t}Lb`OVdboAf(p2GuSPuy@|aX%--N|L}#9 zBq_!^J{9{%DbpJM6|hAl223^lgG(iUtzz~`nU>lg$h*AeL90>G8AAZE237R{ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy1SelfIssuedsubCA2Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy1SelfIssuedsubCA2Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..42e00344afc25505e87ba1d008b04711c0356ab3 GIT binary patch literal 919 zcmXqLVxDZ!#8kb2nTe5!iILfWmyJ`a&7Bf}(zu=dxXAKyHlJzd+5zhS1J+zIZh^W<)wiBC>=v9e^Z=Q56$No>=PN(C-m zcO%{9@F@kq-jhL_Jnnuw%qo=gb7AWqkz0O-f1Muv5m4$8_I8znuQqsh8>6AO33nr4B?XPx(oA9$XbVy5>>*w5gX_2F}Kjcy(4n$y)a z;oL8`WyZ6tX{QtLV%rl#m4ttkK%{J3K+v~k5TmHMI=1g$=ba^4;ly5w% zKN~c^+@s8_`cUlgw1cMIOw5c7jEl<*O2DxvtIQ%{Al4w#!+Pg_UCQmGeYd>>Q+l$} zZp18J432+UJ{B<+k&|cae?@;-cRS|UDY$Mukt)Svp+ZPdB5V* z4#E5>7vrwpY2Z=u*-_Q&`0ihxta>5m{~eoEJ}tdawRUsJtfsAnQl(r1pLX&|RB0`~ zKJhC5x8>#|C=a7j;^@b4hYG}a@F>UyUqR;3F6VE$9JDKp~O^zb=avWp*X{}HLz|Cd|r zntY|_=dN#dx3(-_-?X$V+0(7!%bqW{I8HL&Z`*p~_Us??S$sMYYRY3CpNsMfJIOk2 w_fxg^!O^cK*c~uW*)froE%}O~VsPZosC%f_kI=F#?@mywa1mBGN*klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWlr@kBDPR^B$;`{hOv)^A%&QE@&&f=# zG*obQG>{YLH8e0V1VRgA0|SF7ab9BsLnC7t*C3EY>l6*-A=XJ?T31|}O z>?uZ82IeM4eg>d87gG}>Bg4rU2B}o;)WWN2lQ(DFoN<2D^;8ATsciq8ZudTp3R(3h z_O4XYdgYGPVtH@1WhG~I_w|L=Rmjc%q&#n%X5{B%Z1NguS2=Dkxvtw4C26?+>()>Nz1vA(~133D;tArytBB+3;749A9=jIGdFVkp6=Iy^7Tg@C(af+ zlV9k0O3m6pijC1Hdb6S^^Ka$(DOo!VPqV!@Z_#|hSu3_v$LM_2g)2+GOnA0VGUiLV z#J>YEn%;KGzSlOhRxk@07Oa{bxJdi+$(kSioUsND)lX{{D;%vn@$8-6FYW62Y55Fq zR~?yUb>vlV>C=_Dtk*Z3b2&0A(f*LE^a4pHW=00a#bpL1;GmRMW|1%uYY@4yY@Ygb z!NYx5Bo(hK?3wd+VfClW;JBCNV-aH!DOqqe;-+@+CG8DoV+)Th-0!^ngs1@@Fe+sE z85#exumDpNn*l$FFAU z-*riJ{_3x;m$?rquK)3+Xp_L%Q+w_)G)|n!6SS?@>h#@5v+jvsixu0=vuwfJmlK8j z@Ap)dba~zjB`$n*-OGD$HaHeRAA^Z?V9EqdgxjKI%m+)UbDA+;?gB z;-?!X7FKoZe`GniO?NKK2DWv{8mr3xEXx11LeNxM_Un2M$B!97d)uq^oMop>o%Y0g zyVByt7HKE4JJW7={cqkmY0|~uwUed3Jy@I(5o;7*x+?MUj-zS+kHuY7`FQ=vrl8|n zR!H5G(|Ph@!u}ra6%f_kI=F#?@mywa1mBGN*klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kWlr@kBDPR^B$;`{hOv)^A%&QE@&&f=# zG*obQG>{YLH8e0V1VRgA0|SF7ab9BsLnC7t*C3EY>l6*-A=XJ?T31|}O z>?uZ82IeM4eg>d87gG}>Bg1v3nR$x#r;fbHzIY(qFtH;dr2ovvo1ZQ|)TvAI%e-)R zX^mbnUjp7qx-@v^7t|Ll*98~ezVsci@dU7*%1Q=jxDhsE1H)6zw~C}gCC~*0@q(i zwte^Ad1l+H>$L}C6;dus-R4R+&+OcK%d_~RMR8xP*Z1s8&+GN&os4qVKD0jAyWn~2 z%c;(jpZA*TDrSrS+u_=^0A1qi1e`DxnGxZJ89o-@4%Fvth5_3ix(U40i!~e zpONuD3kxtcu^I4#_`)DQs{u2RG7tm_D6nuDa2T+$u>hG2$T0&N{4KMs87e6=pX%ao=%mDc@U`POjLs z`dB#@q1}u(SK7R3m2LhueVwGl*H2vLTZ57>*{)u9U`NE<_%O*#>sGdz)AHMs`93;% z1RoBv()px0d!O4^_x0Y_RVFN%sgaeim>M)O zDk1xek(GhDiIJZHD9**y#K_37J67QT_S7kDcliQdI9A+#vF&c)ti9U7o`F*(wM9ON zKT40pyex3wtp}Q}==I>J4@ciGtB|Fl(lQz|S5i468|Jb=xn|H<}yNh<4%q25VAKRV$ zH?sPBYTw#b{abHO`D$)>p6Ajd*5m2^-%dy8F@0rXW@KPo+}LB#*l8dS3{P2Q76}8f z29X=f=BZB?JluChQt`UNo;hz9R)4w-P5`oeEMhDooh%_GYzdpcGvqBu>=XUHFNldv z&43T2pP!NOKMM;mNwFD-gZK(80tS2rJZxMEZ61uNKyd>`1AdT%Fi0V*0W**S#t=}z z3?u+lz=|AUz=Q~lFh&NY(|R9s9vtBOHbvpRGk>1d>+?S&=alyDUcTYly1w_H^P1oA z2i{>V-L%|;Q~c4^$NJhkw*6{ z^Gc`vUVbN9;>6iQ#kW|x!Vi{gisbIE<@O2Ydi_cs6b6n~Ft zJ-Oj&?q+t%O1@S?dm`6Q?zg?=w^9lNFaESEa=sjVX4>{?O!IkrBUMWdILU%)%0xc^R2WnI(>Sl>zxVnaP!g z3dN;K&W=U~a^k#(1_p*eXklz%U=StFYiwX>WDMgPgpg>Zih&ZuN@=WCLTzngR6_O} zBP#=Q6C*!^K@%evQxhX2!v?9RH}-Du>%GE!SoKt6cigUyheoY8mIXYiiAuWQ5Wkt> zDpNQ61Bu;}dHtLj)z)PnUQsG^yVU7aV`Em$^P{56zuK0oFekTdP%6Bc@7-}?AWSqqw!B%$d(_$CU)P`2FHRJneAYGRkiheok@L+fHMZQCeUwMkSmw_1u0t#Se!V4? zp7w+zPGakgTLp7OKcC<2EZZm(CjMv9GGo_DMq~Y(2EuQu7Tz{6zrJ!xQ8Huf>g~B5 zaj}yP_s&)b?3nW-pw!hvOzHhnSFhH?GfUj6qJusKKE06j{)}#NeWp{1A6Kr{@85iu z3CA`r_;~W2(!7nox+jMJ^Eg?=)V#OWZ9_2=Gb01z;xdC0a0JRKvq%_-HHh@E-nn0w zayx0?ZSTO8o~*PRF^d<2lYlHAix`WDVC{i9U1dK#jlVBx^zJh#oofA}!+;MM8?yY2 zjQ?3!fQgFDfFHyc2Ju-9n1PgmAV@%gh0B1$fQ^j>$Yel{8DOdd#tb9F=C$WHC~!J{ zTvMWAFsfL5W6rsYGZr-!_H0kR`fS6=%iqpMX085kb4JzCl|MEn&UTbGnIZ75;+XEK HDN^?U2A61= literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy5CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy5CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..fc9b42329920c2e51f653146aee2994c1527470a GIT binary patch literal 940 zcmXqLVqRg;#57?6GZP~d6QivGFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pj178xYku{KpSR;~|mywy2S>l*i8IYfonOteA;OuD7 z#HfVq5k^)9<|amd2B0_>QxhX2!(9(v^<~o9?`A|S5Y>C`%iVwA`@B-Nx26iO6awFG z5x;a||F#SEaxeB+%#`6ve!F@5UfHC-fkzw8WbfLLb~5#*!n*iGC#}?bX-_B2o+&Gj()wI<^&H;u)dn_Q>a6g)aA)2yJZ`qb*$ys0tk*KuxsdcDg-c)#Dg`c3Ee zJapB~XMF!s=u4l3)b4vT7&RihxepsC9G+)wETj0vEq+z zn{$@H$F!c92Kg^1oyDa?ALs<___FbDb-Yn_+047zwH{@ACwcCkzUI}boQa>-v9K}i p?42lnI&=Rvsr&pUQuDv;-_rH!%)}Raj+FmleWIM3#Az}?69CYcVkQ6p literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy5subCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicy5subCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..11ceeb78cc9c157ba47f1850ea675598dcb13ca1 GIT binary patch literal 937 zcmXqLVqR*{#MHZhnTe5!iILHOmyJ`a&78 z7+D#Zn;7{SfZ|+CO^l2TJD;x&yQAxLGvnFLzP8P!(f5;nbf^D$!y{iW`TNWUwNL(* zwW7y0Z5OyFoI0p%KjU`A>c87oo;aYv-O~2&SbB!)jMr7Od*Twk_Py+{a?-mHw(ju( znc&|_dW#+Ba-F;sGC%U5o~BsPnTox}hEvo#N+O!`nwG#c%`|#c*)P*QnQ|h@p;c#wNuzFQE7AOs@Uo;YTSyi zJ8C_Y>@M!OcgQke+3e+-Kfdgm=45K-w(x3K{jA;{?wo}o{Hj;J{rmo8_QzSiKU0$T zv`suab-lNPYNe9*8kK8N$21O|ILmV>H|91IGb01z;>I3>#!dryU|7m3vq%_-HHaKg zYkZ!0ZEnqny;tY13g%1wIp;JNIPzurSj1RFa%QgF#`=0+fv1^I#4M#3A|0*zw+;9} z`uQ0d|Ff_FlM|bPIEb&nB4EI0z{AFs(B{FI3KTbBG~fqG2!j-|8ZZMXUJ_ z1?Y(o7-5VIMZ`t-902fDX}{0&#TsbvMcY4TR%gY z{<@>jueouZ3T+XUViV}y;xqTx1?9;Jagz^()U_RdQqabILw&JiO$1HX@v3jRB WB+p-U-t@@aEyo_QItk4Af{Y)935ktceh; z+8?sSb-Ieyi@QBa#}BVsaa8S{#S*9c&+Hf1-kl&{zP|xfsHh<*nWUqAD0AGC)?@oob<%M!T(Q@ zo=7w6vp4rzkFsrUxDv~2aFl(``nL=r>deMdN;&0&?xwY=y7=tSRC3-rt@4Ndzrz=u&_klCPfhjp!d;&-F*7nSF0L`CGLQ!brmQlHgn?LtNY2ca z+gM-kEATY)iI}DILZqWr|28-Q$nvp>v4|KxwEvTo*N}R4Wu*Xvc3x-H3)aI1d?5Y& zjEw(TSb#~2%|IN)S6~q^;4|Q1<4S1rU`z#y8!#I1gCvAO3Rw-9ffRE508<_?ei#{I z{5PiUy7n)@Mtf#&9FzUD74Fx~-8ru}vwdyS(5PG~9pS5}t=C>UBfDru?yo5;DvH-` zT&Awzxoyh1GZuRK=YEG8ns47{f8L*`;;~}aot_}qZu70_Yl>7HRIi_0(@+>RgKzJ$ z%chsi{_jxwuv{fl=+LrWsZOa!!AH0F*zoY*bP+h>dDC%0PPdw{w9zNIO;dAx-v}5P zX7L?AC{VpI@$3G@&+Z=hSXN^B?sTc$Szi4qH9@Vbn!jE9xA2|n=Uu1RnM?H(IgTiE z&wP8$n5XrK@4m-px$kc5U8WFZAa|?(A-P literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicyTest3EE.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitAnyPolicyTest3EE.crt new file mode 100644 index 0000000000000000000000000000000000000000..2c8fd4f6d125298052ef3a02be336a70f2f4deb0 GIT binary patch literal 921 zcmXqLVxDTy#8kV0nTe5!iILHOmyJ`a&7xVs?JC|6?{}-@P*?zxqp?C7C`AG?JC!=24eR*F|?19Cr@w+Iaq{ zj}l|&EoQd%_=UHMSxq>yn>lqn!&L>A9M*0LIlyXGVPoE^{Bq(_Rv*jlKH@iT&vj($ z(97)7T5HNB<$u9oUEgoBy~pM<<-akmTxr#sJ@Z_~ocM~(HjG!f&aT;Y-u&s(%(~rW z@z4If?s_2hzCT>d@=n9H*(xC`D|XH@^6^tR^>~u&#&G$JLsyGsZ)@aMd}>W{d@RVw z;Wwr0^hf_nW~0NmK8y6dz5VjQiodp(CR8LHI&0g(Taeq%#LURRxH#J&6C9PY$}AEF zVhtiC3$8}o)DFI+z2R(Z;jxALotK{w1t$hsJ{B<+kp*^fx!T-sxgYyGGS2;&yp`eZ z!AS;uz<816XJq`(!otkN^1(nH#8+SuFyJ%bVdF|@^I%K`COZT4LrD5-@L~6)5}c~C$FCUU-rh@^XArK(Oc&n zsIO~#@??`%ote%D-AzmP#osqnnNq=EsKYEO+|};kGnen(E>)N4)l;-i_{tv;I-{AB zvu0`8rPL@Vqg8+22uz$ZCuQ19n{YYKs$VZuq;Bt9op$NmwX4!n*~Z1`3g#D+7(APV z7>_>G3rb{udO38e&+@JIA4ROSPsVS}txlQi;E-;rY0}}#MHfjnTe5!iP7AEmyJ`a&7qE^tdYpf%g9X1ED6ZZ$xN>FO)MzL%u6>= zaCS6kVpKx*3?nN8a}y&!15licsfm%1;db?$!z>r>-mm;vJ0Uvp43iCan@LdYy@v~D z&G-{9ZL&f$f=j{m>4{|@Bo|~(J#ov*#BlmzzV}_hXWaP$4Bxc5f8DVu@x!{ZB@^x) zu4}rp>gL_U3>>RI>v4bR;)#(pZQZ{m?zHFcm)0xy@Uu&BR=qA;c#}!@LvJ?M%9a0j z-8#0!Fh|IhJLS=m`Qm9CKP&wFJmLSv-UxR2x9gi_RyxV=SGKVgzRagrDX!_t@?35; zNA>OV3GM1d-yAEmGA9+klj>3k5SqKpT;$UR`{yEmcXlXrPUp1voGh2vX{+5W@ITk> z-_lB%G{?$Fv&aiaEy9&<_%N!ozE~8WZZ7l!-JhA585tNCH%>HY>;ng;tTKy) zfmnmcliK);F;m+(bXeEzE8Uj5{ATQmG;plT^0A1qh(wsHu}^GCSo7|igWXc?KmVu8 z&b@8G2aF6^en!UsEG)ou#AYB4;w!KS81NbJuyG}{c`&8|#SIt@_(2lFAcd?3%s|RO z2qd5a65udkYhYw(WMn{&HDD41#u_6-%#q1PZ7(`(M7LG0Ncw-*ZRaYr!!OqC`DC54 zd$(Ci-g@VcP5-Ab6lRM#-T9qmQ|z~_ruOS4v6GwT?3mJ*?VmUMomPhAGSBet|FTgz z+j!0tvMruH=Ou&3UXg>l@-GPsyIhf+*w*W^yjH?qPW|OyrMt2YJYOy!X}C zot$-K2kX!BWj?pMOnG9$KCoIDmDjzSbuGkyeb~bN$`5S6vh89NHfk35K3&V$LHX${ zlT=ZGjU`)Rv_tu)IX^UfYMUNX=rl__@Y~+#MB(+$<$iUFhP|-jhq<~piA~P=|GbytqAU`KFxzabW zpdd3Z-9W+F(Lhd|*U-Sg5C|=d4GavT#CeSk42_IoT!Ro2tyD2kf>Xw&b*Q=^ ziR&lV+*>#0V}7z+c>Owf3|QN4G)diRZRg>s*T*XHG2 z)vmR+UsC;0`>F1eSB0A+K6)po@7ePy{atMWSFzdQ)o&R&P9=*jHEz$~%$s*TwdxJu z+Ows6U0x@qJZx&7oaD9TTb{n8dtB^cflZqWue|G;xHez(25%^R=u@%!~|-iyN03G%f;1p{z2Cgn?Lt zNQAi>`^1)nHSfMT*e%um^MAVR+}q$pAj`)h#v<~6OL0?2K*oiVUR*r17;v)pav39 z1PRC(NEt{VD@I~7A;%;zl>%dukzrrTahFrBahyNb?Uso$oPDn2(0P5$S7+zT2Yk8d z^h#j1XH3|ezfPj;YEg#%YrgRox!d(_+7OX2eTwE;)d$bwtdgzPlur+_Jry8w`|9nR zxo5W}H+?=UHfR5-s+jo2+f+`xlYFxO-3g|ot*0;XDI9IQlr;I@lY%pmKPB>2l9dE@ zY+UO@Ol;fzh0=xM%3W*! zOCLPzHlsZG&+-ZW6&uw0lcqMeaQ1KEOZwxvCC)vI<;7z2mH+S^WZPaRCY(WmAs+UQj)!(6yZz>% literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P12CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P12CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..5baaf35e0f1f8c36b2d683ea1310e8f67751c60d GIT binary patch literal 953 zcmXqLV%}=d#58vSGZP~d6QhLzFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`PjgHRH!Q8iG8SR<2}mywy2SrU++lbKxUn^;hgnU`*; z5MXGe;OuD7#HfVqAx2gP<|amd2B0_>QxhX2!&l`w9}6E#F50-MkGDXnZBOpUdHzxJ zWxI}qeq&x!qt`ss!aLmHT%etI{?_b{%?ulkt-fI3#<_fV`MwRd%s*_E&C|Uc?iX?i z{@eYDL3y%nKHtN#vzui7ONth|<~gc7nX{htV)veD6|CX*VUMDYUO3TS6T)Ema&nG% z&&N)$&I&K{n5FxkJ^m)e7c0wne)YY5Ay;#LvfS#pzH9IOb*fSj1RFeADZC?^;T(f1!4d zkI|%JW2wNcB?f#T{rrrK|5;doX^G8%AH)|1@mUR+fs}y|NI(T7z+u4Fz{t?Z$Y`Jn z5>sH2GmtUhVdF|@^I%K`YBpd*;V~h{Auv$_5|Phi7rK%xlOLD3{K1XYEJk(Qn=>RU-6=rHR$#>n|HB6HTU1nxN@L)g~_uu zi3#Fs`(0R1O{lAIR{3&S_>1q(9_I~56b0lTm@WI2@@MOtgE=#_zgt}LWly{*%X##X zt$O1EmeUQM#;k8H9Nrf9E%QpocbSvBFS_nL(iL>%Ns{HZSx<$wesjO*baH{A+J%#z z9ByH|Jbrwcym{W&gs7`ha{o&HwK(3;Q2pNQQFK0)>9{WQcY{Z|E1ksWR^Jl}GW1%y uF0zt!!l$jZMpKUp&d+iaU!wk8rEbZ3+fB(+$<$iUFhP}M*gq<~piCNnQ1GbytqAU`KFxzabW zpdd3Z-B2OG&`81A(Lhd|*U-Sg5C|=d4GavT#CeSk42_IoT!RP_t<^A4gIFt%+uGvN zB%sYrj7rFUWMpMvZerwT0E%-lH8COR$}PG5_R({*4;3{OxiLC-RavVVe*U&= zV+HrJ`iPK+l^+bNX0QLY>`$}j+KrR+mbPZIwcczinD=4!<3CHPk~Ss&JLI{<=4rMb z!x@p_R9VlcHPM+r7_DYFW}9j{_ay|2h7?5Z?*8$RkDImArbcY*vzQ%v9i3GxPA$8g z`>CgQ(uJ0G;rjk}#WE{6LYrosy{meD^_H$9*`43#~4o*S}D^$H!<=v9VO())H`HkmX|$V-Z=UHbpjtzm9cJY(g)4_@9EQ zX*tgg_(1yk85#exumF=6n*l$FFAUym zI>S2i7oRUnFwTFkT+whvolW-20*^jn+54Zk=aqyVy02-@dQ|p7&YMIHu~)6L)kVvn z_5Tj)dsU^hoz-m7dBy9B#d|F{6Yif0Tyi65iC{My$LZpwsU?aD1@o`Jd)50n#kpox z@-?RRs*5})lftea;Bu{b+_Bi_&6Jq`7vp|KOz1fi?Qwfew8!FEp05weFPU1w!?%g~ z)-4vEbw^Dc%}P{6&F3xTK?W@-M$&Yb^0$COi`M-vXN{1C7yZP_SYZUr^t{301HTTX8-^I literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subCAIPM5Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subCAIPM5Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..4ad9f1e174dd639b81beacd13ca3ab855cbdc92a GIT binary patch literal 973 zcmXqLVm@im#I$h%GZP~d5E<~YacZ@Bw0-AgWaMULFbFl|HsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1}` zGV{_66#@*66r3Fm+GyLj zg{d1p`?M4)+soVteB1N$#M7s1W(j0E&%Z39-|<$c?p9HBqki(@pz<&Cx~KbzIfhOY z-BGmwG^s6Yi88CeZfK`Injn3@UBwn%<13|cZEZ6P>;BV=4l3JjsFho;`)GDmmdKX{e%nNy zOx1%9P8Qq3`C-M5Jul3^XL|@e-EcZP>A~xc%+(K)SRWj7Snlw^Blxf5!FP%o@s7fr zM=qq9+CLZF;rZ%~XU8syl`B=V-Y&hlyhU-{_VVCMheG2{eB&!IOxh#&=)GUuz2wus z#8$sZ4mdVx>cUs5J+r@i%s6nK_i~N-W}5}vvktzUysP=e+wJT77k^s+r;uwt``P~) hdw1Px>3#6}&z{>)Wn&#Lh(6G9*H-xJ^}` zGV{_66#@*66pBleoE;71#CZ)33=DzL!q~vTAWEFq*uc=p7{)b-CedbX15Jp{N_cIC zSl+~_gzQsBRtDxKMt%l^CPpr%CPqev$03esM}yMtSmwtbpK>DqP>$@2h5Pqd-maYa zQRMLY0Ds~46F&bB{^Fssq+2%lN3Lt>%5%Hs)S3OA{%e)Vk<$9DH|Jf9br9TB?z+38 zCdlW*v$*nanhPb`*TsKYWWL6A_LnwaHtSA5HXipyj}~A0dfTVDwg2x6{-`})QbU%x zEcA62bT<0+;L^fX%I9xM3Ml;LyC**J^UYUH%%=aNjJPlA-POo1^o}*z@YOKf|40kx zeQl@ja*LibdWI{y{;9jMQ;>__eERm5+ZS9`>#h5{#4y-O)#~BuZ67oXHE!^w9C`lh zQ`e5=g_gIL zh7!Ju27Dm>{EUqMSy+IHjLm=_#1{tfSq+$hlz}QpK!HWhK*oTFjVqzegE1AT(100* z#{y1RvWg&mG6qrx638l%*sRF$3QWPkcx7Y=Ry%*F@#(1_7c7=J`&vzYwb-EcNw4sR zkmJWVLaa(eqz>GS$fQ0-`Mv*j=pczL~o;nt7oAx7es)+j%iF>ymxY$aq ziU0p5AyDmtc=Jp7g}eI}^xMoxORal!MW*Gr|55(;+Z@=dG9C(BWGgP8WnHcpB&&Uh zHAgLf>E(jIbqzBV_J#+DO$jQyxAgb^?MdG!SxLkne)CW7)3rlZ4Q&r%_kHgDwrbAK zlqdaLO%I)U`jl(7&2;HKCf-6$GDQW?Lkt3EpStlZxYGOJwmA>3Iu`DGe*VjRZSU6_ qEw|Uiv}LvmrWPx+&gXPHxaF}$Zns;LZQthNJ+1=9X0vVzT?7DYL~(ck literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subsubCAIPM5Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P12subsubCAIPM5Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..b1e9ff8d06883a9c034880c4da3054cbb0fd4d2e GIT binary patch literal 1006 zcmXqLVt!@N#B^x^GZP~d6CB(+$<$iUFhP{%+Eq<~piIWsRKGbytqAU`KFxzabW zpdd3Z-B2OG&`6=UG|Ab~Gr-r>Ku(<3(7?bD2rY~a3=E>gd5sMWjf`PjgLo2c*Ei6G z*sg}xc7y|(7?qHH%*e{X+{DPwV9>shGov-x-EwelnXm!E~NR2pV1RyuyA+V)#f zyAKPpQKW%PdAmM z>bI-Axv$zHA%3#F)|7uP+fk3(&C+=q%sVtLmOb3Me`A50K;ZuM%2U&b(OV|0P20g_;ks+-t(LNu zDL?1TUgNiTTOIrKMn~O!d((`#73DR<(Lk@Z}F*7nSE^gdx(73@s z9vHN;$}AEFVhtj)Ea%JA+545O4}EFUd-v?Fa6@%4IBCf8v52vV2(?R_rhnM8aDmw_ z(G{AKZ>45O7Z~t?^z$<^{%2tUCN?$$eh^<6#Ah{N22uv9AOQsyIRhC39yYFoHV?*B zph5#i6dsd-8c3NUNS};>lz{}YN+dQja=ZdlGB92l8C1OU6@2Ekm@d+o{i4Ti=gVtH z??$TZiCD3>)0W*m@6oPT*PkC>KWW;t7hcvA_g&(=z?AlFbHW9~gcl3+KYVrGymN)Y z1iKkGvJE8ietcza5qKrRdV0zO4mDPem!HgP@~3W|%Xo?}(j@IduJziGb?KE7bKjZ$ z+k07j!*BB$D@($*%AM)kzuwZ-_Ik*JTEnt)t{TZp*$(%<;)-(}EcKPz+5Zl8~BA3S}QE@V2AS!JcOa@7M~ue6*uk3Y>Z+j_|9!Fn~e wKff%ZOnkgn@XL8y&Sd28-XoB4DY!!B#_L_KPCuSkbe%X{sbDMZ+L-FO)MzL%u6>^ z2ryJ|b~I>WR6_O-BP#=Q6C*zZP@IdYiII`va&eKw)R^e)Hut8=R+hin{`7_F+<-C&X?`t4jQxl8N_9+&(7XXO z+9rqhTX1eYl4Yyz&y0`A=q<9XFhowYvV#?1OIUn(EoN&G!b% z_4fsI%`577iv#6gOZr;0H+vgA}qF zFas$AA&`IyNPxqDt$~rDk&zKO)_|!H7;B6SBAwA`wJ`^}7RWVfE9eV*r>u#tiMe?~ zZmJ~DN`TH{@Na1&3dES=! z^#U`D(_X!tF820dT|?>WNvByiOq;Ad`DfLIhTi)s_Z`*NO|yKx(VVOL%B!T=MN%vq zk8R|St-kP&r)I_qkL2PbF4{BmQ)isrCh+l0XZ03y*`}jATo?Ga4!2g~d~=l+c^pj&i*g$xm*dwe5K}Kg6$&E#J25EJIPUV>wgC0pC~c(RvPC pNr|⋙hA6FR<#jv>V*tk&}F5Vzm6sB_ZiA7i^!tSNF%n&j7&ax literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P1SelfIssuedCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P1SelfIssuedCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..65155c7b5a037643975bf327eb5af00cff66486d GIT binary patch literal 931 zcmXqLVxDi%#MHiknTe5!iILHOmyJ`a&7`9IZm1AosNn2qAScdiXkcIngcimI1_n{$yv7EGM#eBMjcjdVR6_P1BP#=Q6C*!^ zK@%evQxhX2!#+h3rd>z7j?M8`Td`+H?`k9dCD&K_aOmEtH5N$|t1t_RVsML>lQW#Q zyV-QV!>Up8aG3AhtudcD%w+S;hnsm)RbD6Q+B*wm{ zUv|-TkKg5tZ3z|CZT}4$c{Q3gyb(`RbleoH@#$TG@2kyAm04`pMQ(QIefaP9ylI*R zuNf9s{fvBb`qlpD$6qPG5Nr6i$lmy_z>%B-7bV%g&3mWnac`DSY4f%Tna=u~N)Mkb zp1a&YXDUO{^}BIC%u7uOh68OQ_UP*#~m!a%G+WZ$;Ado}B&7T)ZB zxTGPYS!1o&2S#uzkmX|$V-cBt#wqUl4^fxy&C>%X-OXXNR+PA5zz5RL&&c?ng$0$Bs8Au_=4>0)wLm5{Gs)wk0Uz;~^yIAg-3xO|mCx$sq zJF4NTap;|E^27xaKcDZsYJ5cb8}qvr@d5{0LQ~F8b;#0m-C}j#-yvx7<*onzIdi37 z-N5OZ%yZq{Jk~AaQOAx--+c{*ch{+LY|S%aN>Ywamvd=6!Q4|l)w0K2b_7mG1e~ksQw|Y*^wfULpl6cmj F2mp+0T(AHD literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P1SelfIssuedsubCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P1SelfIssuedsubCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..ae1891624b9422d3bad407133bba7072186abd67 GIT binary patch literal 979 zcmXqLVm@!s#I$_@GZP~d6C<+$FB_*;n@8JsUPeZ4RtAG`Lv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP~AWkq<~piE;BD9GbytqAU`KFxzabW zpdd3Z-B2OGP@%Xq$=T6BPMp`!z`zg)EsPBe45Gw&jSUQqjA2~bS=_{^gzQO1RtDxK zMt%l^CPpr%CPqev)mzW~fBa39@5^c?qf2}*f6nz++_*30#WjU=-cCLv@8yYBtDebt zzhnu>Vb5$dc256OetTde$n}G@22+#1OL^_S4syP2ERXTdA<6v-QQBfXJ!k!^o)1aWGN&qSu{WK z`-7(r3^Ku9<{6QValdkUFA6-^@J|2qQOW%0O2%RRhg(dRIiI+8Aw@MrRrG3f=o)P+ zpG&$PYn-m%R(W>R(1t4`WSeT&7s<4PY=U1E^<=~3^e0^s(7DXC%u-nI7i-9SFZrup zbLU)p=ykB@*X-y$uO}>jee=POC9+J+j0}v68i-dt#gUIKz?DowD zmya_g-FkK^hjHn~Z4IZvsX>;HMT|uxa%WD;tIzAEz1kKSquOtM{_WSvd5I*PAH)|1@mUR+fs}zbNI-!_z<|$yhm9+t&4V!&sL+7PKn*0J2vR9yAY~wd zEQiEKPp-h2WMuG}Qqxiu;{8$W%cSaO=J6KIOJ@iu^j%S2apL%;ZE64HuV3Z}`d_FT ztDoil_l?yHSIuV(nQHrPRiE0o@aoKm7d@C8G$($3!dAUUWzi)0F89Pjqj_P*>00YK zey@J6RlfXqrqrd}>E|7c_5N*0du6*JVcU1NKks%N%oK82kh^P=NvOljS*L5H`EUDd z`f%y9Yz@b}H6o9K>@TM;*{x$d`&nSwhx3lv)$USi+=r&g%2#aBX5AJYx#8UE-??HM z_7(4+p0r>7^273OQBLNmO6CG?jZ&tb2NJW_%snRWpu(QLx0}~aI>}` zGV{_66#@(uoE;71#CZ)33=DzL!q~vTAWEFq*uc=p7{)aSC(%}Q167EvayV@*E=>Yj z+{CDa>_bLY2IeM4eg>d87gG}>Bg5N`-+%ZVk~_v>ZkR4_bjkjQ-r0b~yuVJf_1I=6 zIiFhksC>%I=}P`n=P&GCcYEiv2?3UJ3eHmZc@5l4OD0GO6sAvm@Osfn|EW9bu3l7} zzR$up>qSPwbV0LLnc#?f#-A6LUJd?Ym!z|;?$VZYlc^as->p{vymeeJE-$em@Y1@w ze^)hyOL#p^zq0T6?y{Q5`;3owt=_&qi78-1+$Ys*XC2hvBo)M;&px`Z_=93$%gp~$ zW}A1fV&`uTs%8qB`TFh41g9T4yEg=77Z%Q$??01ETkNnjhkZwt{+IPX|beDUEQ#8R;cbrCT2zk#>I_G4H_32$OD5^R+&Y@ zK&(Mz`WdIV>pw(Yx;IY`oOCyb(OOaB1~@6m^0A1qhK!d>Sw&n(z}p<1}%qN?qrUEQ@(^IyvbzrT1=-TCh&9vO)(1(P&mZ?m^gSU&Sm z$EmOk*6CTP!e*-?zAfZa>1^P-VV!g7|MtFl5>FR)%X~fP%xsXj#QW8Wv;U{4Ej-7< zDm%gB{HN|I5h72`j%XiXctA4IusRQ*c}k`q_o!xK|g8JTChDm`i@ jdxu8n#xvatvP)C7V!J9rf4R8MQZHHm)9;je_^j0cNWg31 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P1subsubCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping1P1subsubCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..3a72ec12fb8bebaece28b7d617ddb9f715e1744d GIT binary patch literal 982 zcmXqLV!mY1#I$PxGZP~d5E<~YacZ@Bw0-AgWaMULFbFr~HsEAq4rO5zW(o~9lsAwC zakzxVLQ;!M6r59wN;1}` zGV{_66#@(uic6E69S!8fc?}H=41v(X*ucObN}Si&z|hDT#x;l{(PAwF4T!~x_$-Fl z-NdMb>`z8k2IeM4eg=akMlPl%Mn;B7+0Jvmjrm(M4S6-D z*Y?N<`5i8Pa^+O0sL=YQt-m<`$jp*oH(Q`|s^3cHB`*>f9|Udv@AAnkXM<$v62Z-; z5!2`OY98Nl^=pGj@)RxY1CRQjoWJ}m<*VjY{^N~_lh5vo`P6eH`_N;d-nto2XE7d= z-}G{$+Ufo8M193f@r6NrRs&`rWgrd`P+$=-;4|Q1<4S1rU`z!nG+;7N z14$@?RLU4g8Au?@A+ec}V-lERficO*Q2JxN*p9hAzSk8eL{xS5-zZF++K$L zk3Wm$U79+*>>cZK!NRnp^S9-*j22Fvb6ruVZ~4W=ksp6qcKe^2@%6~*S4wug9^U(0 zb7t+Cb0?%NH#B1kONz`{*~iCN-n`JcX1Mie^>_C*Hg{Qfdrw|g^?1XI>lYSW-eh6% zcWWa<^}Np6$D;oWl-*`sadqPT20Ol96N9NgW(WnBUU!;utW&2%eeu8h7qeZyUsgRH pqR@URs3*_IwCJJF}#MHfjnTe5!iP6%4myJ`a&7qE^tdYpf%g9X1ED6ZZ$xN>FO)MzL%u6>_ zaCS6kVpKx*3?nN8a}y&!15licsfm%1;aa+i;rWEj=4q0Tb8DxSpJ=u`!+%f6<5ijF zqNASzujs@TnDO%8X*K%U)0;Ev@PpVZTjgI{-s#vmfAWjWWz*fOCobce|I^-Vfzdb9 zqf3LN&mZ_c@6WSavtI5FeR`wI*JInf6#bu>-NA|LMCqF z!+X~+xj$n$&2!iM!E8;b`BNma7glaaW!aK&)NV@rs@(6QbJy}OxbbKce|M<;JF8!B zCOl2b{kHq@svmOQGw$&};}G=>-Ea4>OS;-DlPKTXlbrlc?#Cj=sVPY- z>wj(8JJ;~&QEgqJ=Jo(Q8ELww9ZM@ zO`FpDb(U{k6Q26&c9|@{+a&!5#@}XePU0~9yHakAdha8-*+;G8m>jNZ)Na3Y)r{lt z>3yb*oA3HC)g@~?aLxF4z3Y>(tl+)FS6K~Q76f&ln6u%F664KK_DxP_6@;=DssB4r zI!8zD-!Ude_oC9DeGEs~PQ)zpTzz5n(e|&Lr|0+AUshVaW==xro2;Abs$vWtIo0@Y ojGmsfUvJ07e)$>y;$qY{=FZ<>C7I3gIBuUar?%s4S>3rz00@p>u>b%7 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping5subCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping5subCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..93857ab656577dab046109c44f79b411adbcfd19 GIT binary patch literal 947 zcmXqLVqS01#58>YGZP~d6CB(+$<$iUFhP|-jhq<~piA~P=|GbytqAU`KFxzabW zpdd3Z-BiKZ(Lhd|*U-Sg5C|=d4GavT#CeSk42_IoT!Ro2tyD2kf>3U`2`$ZSA`V zIOp$_vV;|#f=l;bw$0>z(ZL@2>1lOc*>96K1$vXhyqUhte{sL>Q-q&Y<)5O&mbR51 zHkDN?O2lhjA7&*w^`zwgO516gxMfDfOW9VVBYD5m8tz7Jl)kByBq_jni#h$2!-|5) zXHm!ZWm!I&INxGR%7m^5f*}+8a`!36Ojj<%NvuSPLkLN6py`0pJHZrW^{Bccx zU$mEUQ|lmy-UPiJ6gsadBgxL1Q;K3T2g9Bn-qFL~b{* z?@ZD;did{W=SOLQs=IH0kvR)a1hRZAVk{yz-sJAvo_|U>`IP#ZInj$U&9;5YFyI5m zhb%uM<9`+wV6tK}5C`!USOg6C40zbM652c%Q-R_Jj0XH531N^zRs&`r1rbnz3N&IQ zM_`mOGB{3~DY0x@*Qd3~XJjHz-|{~3?+;I5Ou)Rpkh6&s#Htpol;B#%99MBE?X2~J z)ZlA1Ykw7dUl`bYAZ5neLWi<5Vl6_A32nb48=0@Uf42O)vfrce^Y)k1?j60WI{#^t zd&8^ZsJZ!n8Dnopg)!A;@Rd}wpUQi2t|RtDkIEo&Ixkh*9L-C-D;lnGW#DCKWeDUpTdVLVWp&ZKo5jo_nO$aVJdX53|p@ Tn1*@RJRdgkee>~J{J#VMAOc{< literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping5subsubCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping5subsubCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..134b7f8cb186c381c2bc376d7f5b845b75f83e4f GIT binary patch literal 934 zcmXqLVqRp>#MHHbnTe5!iILHOmyJ`a&7`9IZmLjRn&j+gAScdiXkcIngcimI1_n{$yv7EGM#eC%K{$!FsvD?6Y?Z@lE5za^ zMkQn)GO{u-H!<=v7&I|*F*PwVGCXnMik-})yWS-^^0MttnSxiZ3%B(1h*(JZ1V_82 zoIS$4(28@eU-@Z=jp_HIZ;SLF+BW-j<=m5NT5Jt_-Mgn>3gvRDjyuM2|D1#-^Ih|M z)7qc+PTe|DO8;8^;w4NvE7uM;@GU2ZHs86x;=X2<=h z{2v%b{c6wD!c^SG){E`Oj>9^(G+VyWqVe zf)P?58@6Rntx%5{nCY98}b)5Fjih~|8Q}2%7L)&J(7zJcQq_|X#8~2u3K`7 zNn2)!&x!8XU|XBWn{={vPw~?2OFt$TuB|s@P+4Ub2?MbP zksEJv_ifKVC7gUp{mh)`MVV&XK4pLtf-E147>kJM@+%L$OZ-At6mD^V=Y}3NuY)i(Kz!r-{6K zw#Rgm$z#{-cbfP1-DmD&D5x#e4GNxZpxF1|nQnma^j7|&=t&bNJjh5msbj07+uE3P z`0j#}nZ3BX$Lgk)BZK}U&FxcGUApU1;M(-+PvHTtaP$002M;f{ UaQv;h-f?olDkHW9%YIn{04-!`Q2+n{ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping5subsubsubCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/inhibitPolicyMapping5subsubsubCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..dfb268d1d33d1692801e094b18a4cddbfb4c1c41 GIT binary patch literal 982 zcmXqLV!mY1#I$PxGZP~d6CB(+$<$iUFhP~AWkq<~piE;BD9GbytqAU`KFxzabW zpdd3Z-Bh8tGzo~D9S!8fc?}H=41v(X*ucObN}Si&z|hDT#x;l{(PAwF4T!~x_$-Fl z-NdMb>`z8k2IeM4eg=akMlPl%Mn;CiQ>y0%@EBI;wEQW#WF5TW?;kDOH$1Cvm^R(p z8?I}TC-TMh^to$|m$_3G8#n|O1qB*bR;S5Vnzt#$ALU6ge1CCSva#9;v#oLtexKiG zUH*3BgXXt%AFh=@v{jcFoO}CDXkA{u`rX*p@aHo_l&zfKFs+yPtT(5gt$^Fe)Be}x zgi8sn&qXx+bhj`piws>=VE*HZ@v$TGn-1Gwd(iv)W$NMo>Yv2iz6iM(_`ZL)P1VkM zQ^m>5;^v!cZ#MM*-XxyE@yOFd$aKZ5OLp#3%3Q`=7IC{H=E&{e{`hxyoEz(o2AxYe zTNLJ0pYFZ5Hre6Al#_pxBiLW$&764tzWc;H?&*vhnV1xS!EUp z1F;4X)8$tldYAZxt|;8%RB!Z;Md~Eu4se2ysT(!j4eB#E_V&^wo zUu8aDzb0mTO~Jk!4?kDzkn)Oubm5RlyZj=qu2SwN>-XI)Uc--ry84%s zWurU)^i4dj(!O-Zx5w)@sr_5>=k>JSr~}g^ns<795GlSIR(*VORBB<-`}Z5w+lBrl o?p#U9wfe?8*Vvjw{^h=oh&<(Z`c07j>C^Z)<= literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/keyUsageCriticalcRLSignFalseCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/keyUsageCriticalcRLSignFalseCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..2467c945add087449d1d45dd05e8440fb01b121a GIT binary patch literal 923 zcmXqLVxDf$#8kh4nTe5!iBZ9TmyJ`a&7QxhX2!_}B5&$M0lg-a6Wb*N{!?)<_2 z&!O=q|5Wx37f(KaS5|hCfp_k1%K%|<&%&CCPMdx$_$^q%&8lvbz_3qUc;(KYo0rCS z{Z`r{v_S2e{<{?RSq1i47h^V^E>Jipb-^=o(&g9p9%O`ze^mK>?|Sf)b9EIek9T(_ z^Q`)IXs)x_n*B|@@>^zxtex1fQFkkILWBE0gS_mdZS8CB*ZEK3{Tsuk+}R`4UCLbE zFyYibhGP4UIbnM*S*+R3`7CE+e-_{OH&=tibHd$uZZ$Z}>fqZsHz91A^Tq7uD>F*w zsdL=vefvb`{fW)oCysvcxcKG*hm3vdkMEo3om5mm5ij$^zM*4I;pf*(%!~|-i)#$3 z4CH}s0po{}!E(M!v>UJA^{Y=d?l%_Ho4MGq@AcM=B72oNW8_r)?$fd=NQTndU_dQO9>yin<@MXlsCCh3T$S8W}sjl*gZmVo7}-a{txViPNUt zlCGB6>7QEn{`OVleJNkJhDX3q@7l_ssejC3cU^Mjx%?{9Iqb`7QCqHiOlKKozqeoYz0^Nv z`|JIh7EkvtOrId2{k?6r>yh@BPYjdJA6GHn=b%+U8C$L}`jJIXZMUNv_we6st~ gvlEwJcy6|ch^!ZWGO>H+{+*&4j;~{!^l!TW0K&>*D*ylh literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/keyUsageCriticalkeyCertSignFalseCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/keyUsageCriticalkeyCertSignFalseCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..aa19cec73d2a0d7d5023b1cd681dc0df7835f855 GIT binary patch literal 927 zcmXqLVxDc##MHcinTe5!iBZ;omyJ`a&70fQlkGS>J z9t+>BWXJk$6xo!sKwjVytiYaTi+zkFiGjEegy!T)VOJ>J+RezDiY z_|`iGNxr06r3L~w1&h8%tq;uRIcgs8oTYlUnV>VrXO;Z#4x(I{nw34S|AO}zE9XjE zFrFz>l;2?N6&HP5F*D=n$*D5CuFkhH9I0eY^v52vVn1pht|B=~v=TH%s z$cN;YS7v`m{%If%(yzcGV8CaOj`zw2K*oiVMfOPEUX61K+1p*B)|_6 zU;(8*dhwSsC*$3er!_GGi`P#6ZLsBW+hYE| z>GFX!C+<|`OujuwU9;udyV|^`=6?^q-Ia8{kt@qcWsjs~%75vXE0^%Rlb7T^(zwm7 z<(8R0!+ACNMc=nB=ZR!$cqqJn;pE1zkAH|CU{RX8YgOul`a1!+#@kys9xChX^nT?V c#qR5F7js!`;-Xv2o=P|zIP~YQxIXg}04s)8ApigX literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/keyUsageNotCriticalCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/keyUsageNotCriticalCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..bab8307e33090b6af0528075dc045f51b760290c GIT binary patch literal 910 zcmXqLV(v0%Vk%m|%*4pV#3*mT%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXAdp0B6bCa#4d=qUE;Q88@ zCuc4-FK**g->bV5dDCD2Il%f#BvSRiN{{s^@y3@$f?|b<8`$Z;ZMh3>kl?LVDpp;c+kuVTz z5P4D?e=%li8;1_-x_zbFQkUP1U6BTkb6GwXF&2@769m0(ZqYtkP z=Q$l)H!fSbtI@#VYU{($yAKS`8Gc@P?c%wEd*;uWJwbfe)3+Cwv@(}eFJM>o=IvrK z@9tr*4_seY6~5k7*nGui|!jsO4v literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/keyUsageNotCriticalcRLSignFalseCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/keyUsageNotCriticalcRLSignFalseCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..a6d878c8dff5008c174150662c1ac9d2d647716a GIT binary patch literal 924 zcmXqLVxD2p#MH2WnTe5!iBZvjmyJ`a&7uQ9SRFgG#sGXTZ8n3@@b5bBS_d z>}Th`8GmowV_kE;T;^l8!S)Sl<*%;Z{T%h%-+ZZr$(o6a4RcPN`<9fXbD%8xb9KYC ztG=3(qZV`&erq^gzaX#F-zQn~YEbc-NndBHZhLf7Yq4qGU73Hk7b!e?>a$Pr&LXX! zMn09dq*e;>-JS5v`Qr@(agcrm76Ai310FW6gfpsV_ zUiFL48pgKLKMU&SGL-L2D63p3>3ZUML;CDw{?dzA6I)dj*&}(c&M2O`rRYWRG~PzH znE7}7-YmM-v0KnCulMA=1A=C;{}TlQ58f*jsoGX@DrM5Wbo1CVnYX`Mgzde?_c3h7 zJ1yVk-%tN)k34>#|Fg!1dHV59r{ba?Hg}(Ke(77avT%mZykDmyR6M&a6en!F@@x5@ zL&2Nn%nHh1yKGxAGv=JswprWE7p;na9PsRyV(Onq*Jd}qD_mZAhCe2rBdpDL(HT3{ iwL%iCD<>LTT>j&}z3%!9?X8(xeY>-lRByL=5di??4PXTT literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/keyUsageNotCriticalkeyCertSignFalseCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/keyUsageNotCriticalkeyCertSignFalseCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..ef1056f1c39c7f1e1a3f6067c4d270ccc07cc69d GIT binary patch literal 928 zcmXqLVxD8r#MH8YnTe5!iBZmgmyJ`a&73Irni8;lo3eJuOO^iy&-eY8CU~XdMX8?+GF*PwVGVGpqdrIu|u&vjG1Rc~* zM&u}@-17V&lRWR|+}{(QImoW_W1Va_N$0!xHLl02Rw(@M4VmK9hF%q`ZvC;?w&~e=#l6p`{&T-3;&G;ZvDU&u1&hlMnHT+X zj%C{QzhJWIylpOR#V%`$YF1dqmHu80daa z?se?(#?{3YFIdao9a(DFkaMe~AoES%mvy51ulM%5FkR7bQc3Glz0Fp+f~Tv`cxTGi zrivGwMb8|kuPoV~<|!s9c(H171^cZ7A9QCgn{n(YZ@JIHqbr}tTXE_y$=JO%kcpX* zfpKxALAilEFmPp+StJa^8bqGd#$Sw?+Qy;7x^7?Tw$$Y}V^^esQ-LfWix`W@Ce=$C z1{Xpz@_e=)^7wpew&*7ZR|9d7egzf*13m*DHm-y=55`nr`Z8cN;0H+vGcx{XVKra| zQU=^00e%)1Q1U~L9AMf5Mh+u`PDH^8wXj8rPY$#?q@T3A!`1$AtJ9z9y#J4^z531m zg238WlkSN;?bfY|pYk(*&jm}*X(x5ekK7IJOWLM&V50hL{pv5hmACisOP=^?{o)QE zZ$pHX&-SQ(+vWGSDo!{q_cp+F!^bK58yuwa3s%&3mHsh3q_TMB@t!wvd;VJlq ztzP|m{^Q%fJM5G?u4YSq40vxCz&7EWP5xumct;-ddh^%G%l3YC2(jkwusveOu=>xX zr{-BJboY7jMXk1WzqfE*p;+~;nf)0~%@;Ed+a{jkof9{cv1XswB)#H5v)B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pj1Ah{&fx3fPSS&9wH`O^muehWrF*C2ESi!~5P{G;J zpovil*(;2!49rc8{0u;GE~X|%Muroj6Bc^6ZoT;M!}4l1qphF(q8AxVdA-{GkB(0T z|Jqm6emyp;U^}AtmgS{uPUH6-Yq)Orbjj;zimd&UQ}l`V|2Dn0mZYBYTgN|Dt-P1? z>axTs`mTMSia!z7! z5BI1IZJU_%LxQc~jqiP)^+qc$ZcblvLMb5IO+`MH-QiiwyHdrMQO9&SSndJ z!PMl(rM#v`COf!V{2zfzPHnpAOy72!Ez=QF_6)`Ap1=42+8#?;14TGLQ$xn5;63 zgn?Lt$dlUmi!oE%ICNOo?JM1uy8LGBiZpPX%kr^^v4}WUIJuqmTha9Vq2>MWE5#0Q z{dwPJzz5RL&&c?ng$0<3*bKx$d<7N(13m*DHm-y=55`oWxB;U9KS)9tq>$Bs8Aut# zfdu400wD%L3jz%MmiQQWk(d;u3?zW2uy6|t7Ni#CW|owsrUaKJl@z6>8X~6vU}6TQ z07iyPK_BhCjBnT7UU4F?uYgI7#YSffTvC*nnO9P*;NoYf z;OuB1C(dhVU|`LiQ9RD+6;ABR_*d6C)Q>6C)$T zDWwK+Gu^U}vPCMEpL|w6{AE~DzWG9xNngOC)5oU1arc|>e3$YA2c_>j9+ns#`ca{_ ztn7%VLCcRruPm~1zTDrRi&X5-JUTH$fmKW0 z{Kk?WEJw^ga-NrXlBIfb_rtKr2XeK~R<3`#%KV9v)zlpMEDyI!zy7RFn`b8zG|yk4 z*J#Jqz$Xz(lG`s9v4{rzFFsaZeK6~k3wydkoX{NUr^i-!pI>8p#FppoteS)DwE;70 zYq}r&J=R~$V9LbI$iTR`#-PeT9vHQ<$}AEFVhtjW6;5tv{Z=$Re`tCC`%19`Tz}rT zf#Y75k420{#C5LpyQBXfA31Jd;S+s4He_befgJ{XApQJ|jQ?3!fT@YiKpezZU=c9j zGvHz4N@(+7Oa+P?FdFcKB!ocWzzJQ2xsLmv7OXoAXXg6LRdbPyF9ulk;njcWBF}#oS)qjcUxB z&9dKi&&YmWHlcdA(}LE7)4vWa4qeBuo%R0<$GRz-{)tSxaopwB^u9M8y+z!~KVmEX yf40l`WOZZ3#E6f~4%0WEyY;zv@q$$`u>q$hJA^*Ck)Y0Y>M+kL);IlIF8}}*S6~AG literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN1subCA1Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN1subCA1Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..645f0ae7c4b41d1a613f823715fc47b3b3294b6a GIT binary patch literal 1079 zcmXqLVlg&oVwPUO%*4pV#K>yE%f_kI=F#?@mywa1mBGN@klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7lRDPR^B%S+5nbG*mWF1j#WAOJQ?NacPpXqoF|)qY|>G8Ce;an;7{SfZ|+CO^l2T%O@|mqv#k= z&mP#>e$8EvCGEWQwp-Jj{&qc>UHD5}lu_z(wfgtgg5|CgVx~oh9^Yx^J4MENrQ9TD zog;3ZU9OF{bNU~~H{0F+^Jto9_8mKocD;F1KVLh|P{TNDe`-w}llysz*tgE7yGstV zg#^BG+O`p4Wa@EGkcN@OCpS#hu`*xp&Q741` zyPa!({atnScg6lKB1aSqCIzPad{Xu9UD&%wm!P(!2j>}FgRtEStJa^8bll`oZQa(t!R4w(DMHGm0}0D{=9Dkrw&;@ z7BLo)hZcMy5+cqq=bn2f9hW*d>04UUD+4}|ett&A|12!P^u}f&4&p1Y2pI4g@UU?u zw0SV50>up&4fsJ4!XSmL2FyUppb8`)2NEbS$Xk$OkhLVkAdQMi1$QzsLQWmPECEa% zj0^&4wr?drR2{delzK36=bD5!w^!ZQvR$gU@5kg~&P{LDmbA*P+!)KX@pp;G2d48= z_DV4G3Wi2aT`80MZJM8A=3#DG)6%mis~V5zSUtNM`$MC|=vG?EnXU2VrtxzmW+^V_ zN}0J)P;Sck-(#Df z^d7I%%E@wTkkVd0%l}*tGbih0Ro_>+i>eQrsTC%%e0#+_b5WM>lKmc<{B<(M7Js_T P?wy*mNd50}UYR!lnL&gr literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN1subCA2Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN1subCA2Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..6cfc5926a505818cb241274bb2cd45db5b422524 GIT binary patch literal 1051 zcmXqLVi7lJV*0;;nTe5!iIL5KmyJ`a&7YSffTvC*nnO9P*;NoYf z;OuB1C(dhVU|8 zQk0r%XsB$U2$EwKmcr(k;?g8%MDyLRdz$Ut=^wIz8#hf{A%E+`g;R4i?ta*|>S)hfJGM*T zBI{o7*81D;?5jArYOaCE98T}de+NX~eLj$AafT;;QSu4JAmeMhuGQS1y!GEq!IgzN z^Hv5hPLKO;FMPCKwM9Nr(3d+`v?;;(@-Mt`PBPe^e?(*BY7uD^0b8p`D?OE|qX~T^7DwC?p zK21N$#LURRxVZ7ILE|k0d0=qLDziu!h&6~fRyetx^;^;O{GsLj?<>U)aQ%7T22LHa zd@N!tB8&7RnxlQDPT&6STl<#jd=Kg$Ocyoa1L@~yWc<&<0!(jg2I3&T0*inFp8*dW zS3;WyV=7SGfYE>-Bq0n^$ZEh0qzvLf0&*aM5QCrv0S10cdeXSGsn; z?)!PWWPBC|@9(&j6do$IUyctO<%T_#*LX>g+(5Z)H2q zmrh7qyWPS^e05prtbf(IO)NF{{%zT2*OB(+$<$iUDLrhr*kEH5!P)j2<}xTGjCGq0pr!Nt!| z!P(J3PMp`!z`zg)EsPBe45Gw&jSUQqjA2}Zd=f2`GLQhdh+9~&Ahjqrv!o<7CAc)H zq$oAj&`{Yx5hTYfEQQT6#idEkj>ZN}j7rF!W@KexZerwT0E%-lH8C<{R7WrT0?!B8M68ib(*AveRzt}IY(BQV>)Xh22SH{ABT|Qgku1LDry4jQ2 zbSI>Tum~Ml&~bOi-{o8G+zY6S{FyoHYeieE=1S?-z3aRR6XZ=^$g;mWRC35=Rg^iC zzBGfiqxlib6wgV9dM=YItG{SH{Gg%#XeFoVsU0WQ^IEPFouGPPf@|WZMPGE3I%nK9 zJ+(&XrsU1gv$Y0n+WVJxZ*J-{731^c@XWoWZpFXh&BxokJO#WFGJCwbtSpWvY^nVn zT<7k+>whAP*KVna>$2WISIG-2l#sVw!NNPC+ z=}gRw42+8#ml`xKGLQ!br>ruIgn?Lth+~D5+gZOAP0t@%-v7Q*>;TuF_if#v*{Q*!>i$Bs8AutZfdu400x||t3xE!26al8Wl4PU=sF$8!h8&Z?>n*(Ep~q9 zQsyVym&~>8Tyr92LN@P1!M2JSi@zRh5?mnc`%Pz?@3NfUNj=+Rd9A%@G5`in=*yjjAou|p5Kc7HQ#Ffu9)K=>LM?0zN7m)(JD|RYW6SN zfBKaMI%|&jvnsl?GTUT-4mGw`oqp<2lX=<(XR&J&lb5cuJn;CHaFejEd)eYM`&qy3 zS@PtY0l!puR~6e%<7mbY_NNncFJH6SzwbLYgTd!&u7%U@^_!c_{=fU@=R~z3%*4pV#At88%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz@J2GpzdH67RyV_O?A%CD=sNY%*-n(R&en%QgC)O zXkt`C_6j2_19KB2KLb#li>Zl`kzwDCi%v7=3Bkt!KUSN!xw$Ai<43#(TAYhrQ>AA8YWquHNt{`?0Yf8^6k|!{4eKa-3q< zew)yey>`zBCBuFdi&R6Wr%6j=`xf@{UQ3r7nNjE)uDobZhyyE9O`=`d&U zifRKskbZtf#{VoVz;wiBAP(Xyum~9N8St=iCA4`krUJzc7!CMA62c&btOm?L%Aj#0 zNJI`K(zwi^aq)u21qOagdr&AL8OwMgG<05_Rk}T;?yHh&a4T=+D?fq9d7q}t?q5A+ z-Nm^pJ_o07JP~gua4q@3e%l2S=T9mAUZ!{~{RiJnVMe8|?(R0Rd!-rmABmc?&cEO< zJW=wU=P{;;r`vbis1_;h%QyUY(III1#k_Bx?(+e2Kfb~-FS zAJ4TXa_8YGHXpL~YVJH|l(cKjZ0UnF#&uuke}2bo_Usk+EAbNkQ2Vf6Ym=KsxAY!# zHmweFZWPRa5?b2PaNg?VZ2^YYMjh=dRZX|&2R>^SWt&vHrNaGf{TK1YD_Hq|nM|J^ Y7^}Ve#)_K2n=&fzq^8)HuaLC>0GiZ;Y5)KL literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN3CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN3CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..87ba14d13a64bbe1fa889a798e69d9de51ab6732 GIT binary patch literal 1008 zcmXqLVt!-L#B^l=GZP~d6QhFxFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pj1Ah{&fx3fPSS&9wH`O^muehWrF*C2ESi!~5Si#xR zpovil*(;2!49rc8{0u;GE~X|%Muua>(wh`Mn<>ezxe#{h!`lSDyT%dSEk};*n(24x z^n-)|g}pPj%omtG>Z4QMS1=-G(aliA;YRA|7pP~nMOKU`bEM;?G zTN8eAdGQ0~mNlwfD{N%=rp!JweW`R8+uuyDUpvz|k6dbG59JgJSp7&EnvLx*+UzS3=}%WuZ6NCU^YEFX&)iwN7D=zYh9%p;d{Ih53J&ULl% zT6o)l52T-;k?}tZ3osS28Hj`U3M>K!d_i&x=~TuuI3m_H##ZTKKG6ViO5B)w5mi+2bItmnnSPdR{;N?Xh~@ zhJB%Tzcswqblx1n&Xv|6HL-C+SIfuW!9fan5#P2mN-nnK;db!**mVDFwXt%KVNPX!$OrwY O!mhdEf+@$MmIDA~)pcM1 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN3subCA1Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN3subCA1Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..7eed575fb4806c8efb91446898073a4ab52fd240 GIT binary patch literal 1022 zcmXqLV*X{&#PnzZGZP~d6C<+$FB_*;n@8JsUPeZ4Rt5uqLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUDLrhr*kEH5!P)j2<}xTGjCGq0pr!Nt#5 z!P(J3PMp`!z`zg)EsPBe45Gw&jSUQqjA2}ZU=l4V#+L#TjZ#yi`57Z-4ZvqbECUn|C~kX1}fSL1)Xm;*R^f&Rs8G`hRYECiDE)e=of$ zlVE+>{c4ivsp>toH`30|Pko{I>HWD=Jcrl(Wb!a;+qyFE=R+RG1DiO^ZqGg+!?TXt zo;R!Tfs9b+g@5{C$E;FriEa6HFYxy5$vFqOnV1qS!EUp1F;4X zwmZ@LjtiMbF6nY8so|XKYU8!=HaG>y^0A1qh&1duuJ^r9s{W%z^%v9EcV9*vvk5TZ z1L@~yWc<&<0!&kE2I3&T0*inFp8*dWS3;WyV=7SGfYE>-Bq0n^$ZEh0qzqy~0&*aM zV1vMg{sz8FybU}_Ob(J@`&hVz1yU=Lb4pWEQ-VvAN{UibjgS)nFl7T103$;|hXUv0 zKcXha|2!qNnAd6=cK6x2WFFA?|MioH$Tz{Bro3Zpi)z;HjXJw!&-B&1By;bs__JuU z>ihL+j`~GkK4qxLI3>8rn`-iDN;Ld($xvkfa3k_p(b3mFJ2EcJbNEqF6yUa_LuYZw zl}RFk7wdPjtSf9-?ta_#rqX&hk)FLAD@~TXl>K72>&AljOcHw{)rzmAKk`|@Eb*d$ zkwMvtR<_F;6(4uH-$}VwBDu-r{L{psA8&e#|3v5P0%H8z!^dDKwiu!J^^U)k^8Be&35sI{Q9o9nJr= JD(3IoZ2*)LdBFex literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN3subCA2Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN3subCA2Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..08f2245ef6cde76df2b473062101201986e19d39 GIT binary patch literal 995 zcmXqLV!m(C#B_WCGZP~d6C;ZOFB_*;n@8JsUPeZ4Rt5uqLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUDLrhr*kEH5!P)j2<}xTGjCGq0pr!Nt#5 z!P(J3PMp`!z`zg)EsPBe45Gw&jSUQqjA2}ZU=l4N_snRW}$&%MO`de8k!Ws6>V_~u;_d6M;6UhtlUUF6xY%*)Tbd9Q3YKEW@bBi;5& z+E9>Z!RDEJrUX5xyDTdz%5nK~mt|CmVGI-dqgPQ&x!g{F?_>PQ!_J?sV#)OUSCixK zM{fc&tc85KH(&UYR&n8S#zjN_4cAW{n^pJsde(jWvJZk&Pc2nYj}F?fK>fJP60fC& z*O%5aYHd6B=vr&Dm2K;-<+`_z2`$Um_webm%)?B~j0}v68xI;Z?lX`F2B)kti-dt# zg9zK5=zYh9%p;d{Ih53J&ULl%T6i0r0%ZAE#8^bmu)NLEkgdCy@`|BD>rJWP{-t{9 z27Dm>{EUqMSy+H+ip@YA#8+SuFyJ%bVdF|@^I%K`iW@K*@Pj0TK?+$7n1Pgm6G%V~ zBw%4+w!p-|Xo-P=9%;z|IhKLR7Z}To43myNvdwu_)VMw3)GLNhK`DA`{`7Cv$>6 zLru4hOW1N1WB#NSUmrCp79^M`S1z9J-83WZ%7oL|XUr}iN;z=utdp>F+LDtDdB@}a zFHO;(_DClAi(KT*1M_!(>#Uq+<)pLnqM)hzI{CLRbJQk_t$wgBy2jA$`HZ6<6J4bJ ziY5nCeKS7Y71N&i%02OJ_TlHNgzuEjeB0u2sN&-8Z!_y6j=Ly$F7Mj3H!$zjB6E%$ zU0(LJoC061MQVe7G&e0{yx*RwT0ZSnSp4a~(?mHZu6P^H{=dj1%|W>-|MV3(DfSnu nuPJryHqzNt8u)2~R>hkAylyf~VvWa2l6Xo*6!%v8Y?T85ndWgj literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN4CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDN4CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..3b11463186944707a91f6c695581e17986b2eb74 GIT binary patch literal 1093 zcmXqLVsSKRV%A*1%*4pV#OP?i%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz@J2GpzdH67RyV_O?A%CD=sNY%*-n(R&en%QE&!& ziBSpJD~zlR%uS5^3_x)%rY1&4h9m0&|83If-Kib-yL^JwxjX(z2YY|s&9VOPskA=Z z@UTQ>c_06?4-YF}&s7lRf8X7B)%=inO+$~_)b6)MllRRr5?9Z$({t`zc6;rmpHsQk zH7xiTc2DC1Q;Fh1<37C)m(Da~%wmd5{nJ%!VH(4%^+x4)@eL7~1r|TQbFVMi8hCZ} zGMmcRS{uGCE3ZACax3fhqHZB4);%fwGVfm9GCtPy_4v!$<$dBCv~9L_b)9Uemrvlm z{jxfC#Wq)~(@vA^RsSgmvo8DB%hLF8d%?~HCU@DIGQFxo>G2yQR&<%*epFxQWpK7$Q0b^1wKgRc4Ve z5Ni;5QX79UW@;OU4(qyorQ1@M-;7<6299-EJ{B<+ksMF6wR#bqLS})E)*(S^Dh!uT zl^XDY^z$<^{%2tUrXw~3aS&gDMZkd1fQOAMq0NIa6)0}NXuuDW5C$n^HDCr(294`M zB61*+#w7-g3l}!dGw@yFZQw~_f{+B;$-*rxkXn(PQ<{>R5?q>8Qk0r%NL}NMkW&>f zg8)+%BSY?{mi1iSr!wDc60EJw;(W{dLsBbz;_v4xcJnMyI?0fUXhr&tqWi0o(@-Jn~ShKV~(dWNc?fXBW zwS6l>f?xNneBAP?*IcxI*TL$U4?>$?{fO3)O1P1@JA^%*4pV#OP$e%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz@J2GpzdH67RyV_O?A%CD=sNY%*-n(R&en%Rd9AR zXkt`C_6j2_19KB2KLb#li>Zl`k>MTF?-)5hx0COM_Fh+6uw;G89^syAf1fFwv(yU7 z(ztqjatznAcZ&{*&tG`w=s8y9H{bVJ@i^@jD%EK4`#T{Z`Uao(ftb}ZrM9+w_F{Z} z_rt4*6W3I8{4aP}A9XBMaoy_H{`6Z|;B6bhdu<;LWlru{`6pug<)~w9*M;tA?AV;X zV$tqt+XJOjJwC?C#N`$?zZP$6Qop)2`lheXB$LTL`jU?_hZuzgZUStJtJM)*ThuaWnyMzU|ih9=m!iDF9UgCoXIM) zNEnDUh&-u{zZf&MjYEfZ-M-RosmpK1u1EvNx-1`y7>mfR`JAUFSkCb)k9z%EVCtI7 z%e`XN4fsI%`577iv#6gOZr;0H+vgA}qFFas%r z#A%n*K3jz%MmiQQWk(eH&3?zW&uy6|t7Ni#CW|owsrUaKJl@z6>8ZOK> z$Xt?ckV-uh4JE-I1llH$T9KSnnu4$lIn4pH4=~L!GBA9c_m;m!VVzpkWqICBsfCx$ z?qNRoDf$+_vZe2SnRy2e=&~O^%^H79Fv0Zj-xDA0O+IS8Qs?t)@)Dk-|N6&)yAO4) zD4)7g9#vM%8^UNG`a-IuiXz+dsQT=$t z=3iy(z1i1)|BfnLad6Gj#yz`aLM^X)q;9-wxQ6{w%1-XIo7S%%&)+T1bG7UBo^?%( zTcUi8TDv_=?L6`v*&jq{eEFKg-~0ZyionOE<@dIpo2m8qU3uD3sSN#TVXc>3m(7pU w&e+|~y2wyr+K#N~$tp7!A6}Lan*LJm@O~@H*~gsAdbPheXo^_Z#TmT@0GS4qrT_o{ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDNS1CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsDNS1CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..a7ec3bd1ebb5da702bd6b791dcd4673787bcc93d GIT binary patch literal 954 zcmXqLV%}!Z#58XKGZP~d6Qi2}FB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pjg8&k(Q818$SR}b%$sD$hnMpg#qCPsb+pg0#(6C)$TaWxOCI|tHl{(BKs6~MJTXj;T-?L(T{m$$oa zjpkicy5XegnF~cr|4wE2^zVP~f=o@v9j{Vv9q`LioA=_8euF^R%#y3I;VPd#c|P@9 zX{FV==TTkHJ{K{qjpZA5I2>HA+bVIa^?Z?s_Q~1Wzb04+`bi)EeC~gON#mCrESe?y zoiEJ4`^f5T*XXh{JT4Kss8-uRY(cw3-h;~WmLFbqU5nHn9O~LC#P-Czy=(P?f{H~y zs-j{7gu80nFA;%;zRRUv@k-@B(Y0|zkyDdeFpK#VxwliJr zHx<3c(A98k-u{ih*Pr+`TV;h{#_@LnGWYKk-v4O%Fj+e~fNR|~--Sw|ne!f4&f50S z!RR`(PVV)2{F`drr*GyKzOjGa`&;&0ylz+Qt-_x%tQ85CkUp{8IPX%AX7m9?_3AZW z{(h}q7Fe+N$)PtJ{}uJ|MhWkl>hiOx;LNVI2CH4)IL}{x=YsZ&OSPub>$0|-&d{p+ z7y6tvS-Eua|IMZT)46KCJa<>n@SGAfbIR3Fv4rz`SW?xN8tlyGSp7F>%lXT$({I(E wykFVB(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pjg8&k(Q818$SR}b%$sD$hnMpg#qCPsb+pg0#(6C)$T-XD8RYyIp!?%v#c+pEdQNGJ4#|Ne>nSF&Y8 zU8Hkfx^9~;+mz%Nml0q8&7^#~?2bI`a+hNF$(!zE)`d;l8zDT!Z@G@kAwfRL%u{dD zd9Ivv-8XqJo89vJceL*=s5N+a$x=6|^_%UtH0yxoqKI4K=Ukcp|5#sNxbD#N-&4ci z_tt1^W7oN+VR@TnvbHy?#Wh*3Yd%H0RmB+m+VZo~j~|=zWGYjS*XoIh%VjlY)gDgh zyl!TAUY;rDklo?m2OX35y2=>tUbuWy>r(rP9TR*G7%p_LjC=)Xy1LNYx6$Xt<4dj7gDXYvP zVIbBZ@}xHYV$9Sw4jtBY`%1T^F25POA`KkrvV1IJEFx|mbDTK)VuK5Ah{-)Tcv3>t zl#9)P52T-;k?}tZ3ose68Hj`U3M>K!dMFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`PjgJ2S^Q8rM7SR<8}n49XHpI2N`l$e=UQmhc<=4@eP zq~PpmXwbx{gzOzgRtDxKMt%mMI2ThBBO}A=+qc)>>{*igKaY31L*~Y*Q(9I&%CssG z+2JMh@WdQ(DW{CZTvi*qr_B*wlM(pmV!MUU73*Ey(JHr?b97tZYP3$$Ic9xKW9=uS zpUXvVJu;B4n|WW!hNa}x!9=!XBc(aAYG-|K8Khe<`$s#qTHQL@RL(xfc~)P)>Ln{T z) z^o#rH_fba=7)-34l_@F8rMH;Zuftul$)YQg`Cs$zr)yobnV1q zS!EUp1F;5?C$;exW2Uxo=&-KaSGp~A`OVlBY2bL5!aZkom;7W4?*`(+lAWmvfFD z+;`l9<;Ktc)S46XjVuk6f*w|dzuac~SXFpaR0fl(=W!;X^v2n>_kG@%uity7Xr`(! z!$&^G`d<}q7foIBVxmedf6axE=R2nhziI1w8vk{v_@(z8uP$A5XKAToUi*RP#fpqx z=UVNVRbqdA*TA^qMg>%1-WI;l0CIHV` BWS0N{ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsRFC822CA2Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsRFC822CA2Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..58308f8939d67eabfe05f5b8da73d1802b750587 GIT binary patch literal 957 zcmXqLV%}-c#I$e$GZP~d6Qhd(FB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`PjgJ2S^Q8rM7SR<8}n49XHpI2N`l$e=UQmhc<=4@eP zq~PpmWYEN@gzOzgRtDxKMt%mMI2ThBBO}Apv^&8MeMNhp|9up5&CfDm#haTa6H^%ub&ECT{j5vG)m^#OysyRBm1Da z)l<5GjhMF#S~ z;FMKnkuVTz5P4D?e=%li8;1_-x_zbFQkUP1U6BTkcUe9bF&2@)hO@ssi#%-J^7(O} zJ16guDpat*fDfdfpONuD3kxtMu^EVi_zEln27CrQY+MO#9*n6#aRWvJevpJPNFl2M zGmtV+0}0511Y``P762X4C<07PCCNxhOD{dY3^^u&2@@ETj0`GYlIQ+>!6mO}%2#qO z@8qhDXFq6aKfbD(etqNJ>mZi(~`oEr5}TD#04l%cHiV3^3K69 zWcy8yx$3jGuTJ<~BEfDxxoH13oq$Jnj7N($Y!;sCy{jYh1E;p^mVHrbS5|#u;7ajt zSDmBUDffM%^0DVbl*wcoQruiIA`8cUAtM`Jmbpqn=;dzmpBHs znU|kl_WO*>`*5xji?atWWpDVy+Pdq}a-+HmzuS@V`cL1vT)kY*Y!q@ohVA<6=K!Ou BZj1l` literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsRFC822CA3Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsRFC822CA3Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..ff6ba166ba488ac41f7fb2bd281cc74dbe228ea4 GIT binary patch literal 957 zcmXqLV%}-c#I$e$GZP~d6QipEFB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`PjgJ2S^Q8rM7SR<8}n49XHpI2N`l$e=UQmhc<=4@eP zq~PpmY|zB0gzOzgRtDxKMt%mMI2ThBBO}9_l70VbxF0m~A7;Jx@cG*c*REx2^Ykm4 z_k`&uuy=Q31peenPJW$|MjM@vtv@n~SUH{~FU z#h+rw)^pDp&aN=H(tP&Lg~tnuVv@rrHa|PHoa>@xO_8V73#h-rs3)L?&XVJ=HHUZV7a&WQqlYjFf%Nk;GX7^_0j4B2191>vfknW8&wz)GE1}JUF%>9oz-Yh^k`M+dWHn$0 zQU+=u0XdL>jDgfbpaU93fT^h@87XP$rRSF+$0RUe0%MYqA+h{u|0~V|M$7I>-jw>v zbm80Gjq&ou%U9o($*fo~HI1Kl#nN96@f?B0l@o59mUy$^{tV^(!&RSNIJ(TeIJc|j ze#AxdhpQfIyk8d*F_Xj2@6pMrlcHZL_qYa5?mMCxqY}1%+lo0Qn_XXBuv`21$IBb% z>z*=3UpI>}@a>wK9N%MJAF)Gc$?;#B3unY~-;-jm`(tFBH!=Fh&&!4H1B#!;FP8I= zI4`&OKCg$tv1?tq2ltEUooLX!rO7!bo8v^2>(p?&-&xQ12IiX1n7!=k)qU@N&%DNH z?Oh|afHTC^)b>q>*s0WCV%OB=w*EI#QLL7hS`zp%UfSeU{JZ7+ A+5i9m literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsURI1CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/nameConstraintsURI1CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..5f638c093c03d1ccd3e5692b760e894f969df9b4 GIT binary patch literal 955 zcmXqLV%~1h#58{aGZP~d6QhR#FB_*;n@8JsUPeZ4Rt5uCLv903Hs(+kHesgFU_*HW zSrCUySS%#9xJ1D@wWuUBEi*Z>B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pjg8&k(Q818$SR}b%$sD$hnMpg#qCPsb+pg0#(6C)$T^5;5tS6f-`yv@YtA>=uIgZ*`#Bqpi2RiOvD z*q8S(J8?4|oNG{$b#jNq?TJ&IUs<{SzASs;$Ax=Mt1K<|y{~(_K(udD$Xi;umWv}!?k$L`s4vuZZ~`ms>)rqUE18NT%MkEb?CR;;-ix6({< zPR-BAX;J0O=Rf@3pSNvNZbxUAr19HOMvskBQc5p6`zs7wuDyG;So%GS!zq<{I{p9Z zx_cU$_IH}Ja_`&EoM~I_md+jkS(q_p~y^Pw>kq+p96( zV-jI9-~;LBXJq`(!U9Z2YzE>Wz5~6h0a*j-1(F8hZK8U>v{aIel(6*D^UIK<5|}K3QOU><{c_iq`pWay8dZH_7k|&` z6}cP6-T2PTk9IN{pOas+&U=X-QE&E_w28#>GLN}I<=L%m1TkT(N)v*LISdXoLM+`cgrHn z{HWC#OX@oQW@~&et(wIBs7A|)LH4z6wA$91;?$budY2>o{^zgJOAV>WSnX;wcfP`1 zxy46Kwd*3nZmtXGy{vZRsaXBto$~}AT2@J|lnwNLs#%B(+$<$iUFhP}D#eq<~qNC#0wpsKPNXIU~QwKu(<3 z(7?bD2rY~a3=E>gd5sMWjf`Pjg8&k(Q818$SR}b%$sD$hnMpg#qCPsb+pg0#(6C)$TzW4@p(KT0-`F>?w-1hJ9Tow*3g&(P}E-}|1 z(OvkbC8G7c#Tn-rExMc26gFOypZzMMG_AuV`q(SEr{Be_CzK?}I{dvD@%bd1pFzE^ zhVBmqx01Niv-SIa%;A3GxJdEU;kxVFe!R*FFnxCD%dBUUe|>Y=^GUNh>RC+Aw1fht zvXZ(t56@~iw?r;kmb7)vr>fmErmg4j=G8S;ozlwF!FKayrsNNil*}|4+4;rBOQd;X z9O4D7nloDdtDQe9)1P@kGFC72W3Rc=6XWeF_B$(ljQdjWEol_|FVwr!P(eE_GhmyI zx>BL^LCvWzKY0Ybx}NX+H|%i8jF(S7C|_st(%ILi&&15gz__?^g+b#|19@Or$||!+ z7>G59JgJSp7&EnvLx*+UzS3=}%WuZ6NCQW@EFX&)i-_;*&cgd2SQt0`Dzl2%xGUjq z&*j4gd?5Y&jEw(TSb)ih%|IN)S6~q^;4|Q1<4S1rU`z#y8!#I1gCvAO3Rw-9fs}zJ zNI(uG08Cj6r41z8#542C5_2+Bl97^@UV45Ra%2J%CNMG?8Pe8rr0(9-5vn_XC ze=XP}_x0!edn~2l6ZE`HPIheMebd^&_eivW`8E@W`NQ`C`FSsEgO{f#rP)*(b_T0T zU9h;q7Jk6s_a(NFdukmHOZ{gYJAFdTegARuxXUW(PB~kCXkSgL4~xIPJN=mxlV9;{ zr}NX#+j7SVPnFvIugTiHLH}zY)ACOn-Y2(j`F-@a)y-|Mj-(589p9C+Crhg;_Q}#| zthKQ`$FkWD8h6Smzh*Z+?*6dG`S``)M^hg&n@8D)U*r2Km~pkw?qaLb2fcm(Y|&|` literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/onlyContainsAttributeCertsCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/onlyContainsAttributeCertsCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..e8d2b7224a82bb589492df7708e3daa4ffebcdb7 GIT binary patch literal 918 zcmXqLVxDBs#8kC_nTe5!iP7JHmyJ`a&7zLe(bdjAgB z=5m!Qm)W9%`0n44?~Ug9b@q3^eQ3~c-kVBu&N$rfsylKa&}qH)edRqRfdOpMhnj6% ztwhBH z{9UrTtm?>oQNwtToA+*A@4WHGPUgk8Z5+1mpQc~D;%rn<$i&RZz__@^pvpiV7@o4q zED{D{4I)o!<1fZcZR5~kUAM1vTk7(gu`ANR5iiTfBE}-(%l_}1?w+lZQUSjAXR=h~ z8W&9PGvEX1=VxU6&%y#sN^Az=Aie^NfB~NY4;xoPn+IbmP~3pgfFC3w3{uEyzzn32 z;|G}Hfbqk~Ain2#-_D6n0=G(9?=0h)bS`3@E0cNB6jPh_LwkhYE#c*Vt&u3HdG~Mk z3Fq0i_PeehZG3lCR!8x{*4z+g(=D^^GBUiox}cn z=kLGjNOvutpSB=LE35yG{T{9ZyJ~sV92wVsD%o?RdT&hpyLZ>4Z=d_rEBfQpgD=)$ z9!I`Z?>*eStvp_hzd>J{QDZy1^|WTEHGZ8!CRbcfuHG{v&x(;_!=9^W4(c6TI&YN{ ze?=Sn^j}+jPHc4jDHE7*D}N7nUn!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz@J2GpzdH67R%4esdUcID@n}ED|U7SIjC5{+0meh zQ3=^AjI0dIO^o~uKyfanCPqev6KkgbSDeIdq{zE>hyAfGuipv1jJ>IkQ@62qPdxjn zcyg`Nry~+G19!TFbiVh=edTwd>QU9b0KR8mW4ExSq)*)v`SpUV^IPvHk0ZMhmkQ0^ zr5GZ`yM~YJnUcL^PQwpYUHwJuysswq%-x~(nPpDm;oHlb`8Q8zjz~>r2tU2OH2uEo z{2niPIgg`PZ#VeZKcBX{!TRz_k(m$H@Rt7VT+LK8_j}gjhXsql_2b)KlKb-DhHEWMEueV^C!v4~#EaWflnou?CSR zwec5YrnYhDu&&!zx-E72&Da%b;24+XV-aH!QMEX{?v!q6RkZJw1I&{;gq4oxgc$IF z^z$<^{%2tUrXe;1aS&gDMZkd1fQOAMq0NIa6)0}NXuuDW5C$n^HDCr($ngVAYQXqm zWN=bCeZAq7WX0Dg2TumM_>LXFm(-|&K>c`X z_wkfxhWj2dXm+PO3@@>&41e16>sv3+??A8jJ@MJOdz_BOF(pFC3{tT<98S1!8a z-4*uZ`xLL|vsz3E*Z;A9agDRkUZ$+6S65}d$TobpeADtt=6T9H9%=FzeXu)b^P?k1 zY0`|;1n-qIS2uskIBI(?TRY*c^2`5I`faax$whD9v^vV~+Rt|1IVsjMMn8PFz3llR PB5(7+MRVi6IrTRIeKA>E literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/onlyContainsUserCertsCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/onlyContainsUserCertsCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..0d0b95030b17b3cbf7e8e987f766118d0b5ce2ed GIT binary patch literal 913 zcmXqLV(v9)Vk%w0%*4pV#OQ0l%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXAdp0B6b%CfsnnKkeAk_p29v(zx}r zS0LxmuZQ6pp7;6xhMZ3~xyg4~>)GC9=ASR(Zhv!bNGPa&us*OhE%I^TT~T50wf*b7 zE0)Psa>*_BWxRLw?E?{ZzlCO8&dcsP7%RxDfBCcf)>pTxEv9{Hrv%SM1l22XR%PlO z=Vdn&Jb&9va${U;w=dA!&E_d4+4 z-kkc6RntB0zhZWGowdc|k&gOpZ-u*?8XPx!IqhO^ddkGi$iTR`#-Iuul(Nb!5(Z)o zB2Q}LFUCx5hhbhE7HJmF3ZOv#v(Fz55vkkjA#GJPV1=MI?sRRJ(WwW z27JJ%kmYA&{LjJyOhs%4;vl{Pi+};20S_BjLYoI;Dp1^j(SRQ$Aq-N;YQPMnkmCoK z*nsiF$S~oP32o@8*lay7kthG0U+B!-;p To!gfAnq2DneCEZ3S<2D?A#_}c literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/onlySomeReasonsCA1Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/onlySomeReasonsCA1Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..ca247b06b402a65037fa98a127ed5dc40b2ece86 GIT binary patch literal 908 zcmXqLV(u_#Vk%g`%*4pV#28?}%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz=uR@WDKMr)(Ge4w0aP)51MZB{-8$l(S3AFWGO_1W*u@@+=j zg9lE}^*h`j{oM2Z$qMxi?!^=BURAs8c(ca&-KwCd?;2a>=Q*|;U36RgzUcI_4L!$8 zi>ugKerLNk$t~!4x^`K+bMOnLmRzng2Hwsc%RRQbG20#DFIv4(Y4gurjb*zY3M!YH zE}tqcTxD?dIn$&s#y>B!o!=tBpfvgB;fU55>r$g5YP}BZy<#uC=v-T9d8O1`+iupB zQp+xz-%oeOgf@$?1ixH0FXP+w*n;Gvo2Log>Y2{O%*epFxW=H$Kpq&1vdSzH24W2& zPio^Y#!PMF&|zJ-uXJ1L@|&?M(!kLz%f}+dA`*~sk<(GV{W+K4_KL9I;(hN}*b5E# zK>GO^8UM4e022_KfjEe-z#?G4XTZb8mC)wFm%Zg%B*m|srC1(w*atduqy-fV=9w|J`CvJyG|IW8PS*TIG;e;eIsfZ`aDj_cLzA z*#&ps(-WF_H1~r+hckC!-pBmv=zUexccg{l4-uNy|~q`^&7ukE?xLGm*bdQ z)1Okis{hH;-yVPYD)?XG>y_r*^%Yg+8(rTlVQp`iy6Nq=UX^b~CbJ%yJ!4)m@A$#B R&;0X?W(e(^^SN=x6#&E+UH$+7 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/onlySomeReasonsCA2Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/onlySomeReasonsCA2Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..c1cce6e0cecefd5a5b3bff0ae2332efca4c6066c GIT binary patch literal 908 zcmXqLV(u_#Vk%g`%*4pV#29G6%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz=uR@WDKMr)(Ge4|!sn-}l88ZWqL z{46b7cOhD0F0^eQ^)R9AZP!!VAi6$)miv)ukq3_kw0-M07gnWq0YcPD)b z6k}NDDiP1gzAW2#<|+N68IlQ}I_GwpuI6IBbLyL*QHC#9QDv)h_>AQLljfKQ{5(I~ z_tJz}Ia9Wo)QbH~c=65dUf7Lv{*{v})68obS(%s_85kGW7*rX^14B_(nMJ}ttU=^S zZT!WUscjrOtn2obZcAN$Gj>H9IJ#x|Sj1RF5|ZyE~x;{LjJyOh9Y~;vl{Pi+};20S_BjLYoI;Dp1^j(SRQ$Aq-N;YQPMnkmCoK&Vcd5 z$WYk4ahm$w2^{H(zmLA3Ggo6xk(^6U^or?^vTW_0qQ490=pWZS%4j~RW%Uk@y_Wme z@1Iz_lk4{-({h>kuaiD{NXYNF{^6*{*G;vFw?CflR1IGtXl zoM*76P3uxf+@eh{HqNP8wkR-AvN@Rjhxyf|D&Ir|H!bLYU-D=2_B$dBG9nW`e!FCM zzy9^sx3LG^OFnR&&1G`4`SRH>fnDZ#_!%CDr~hxOEv{!?q_Fg_(zK&(&2bOj`(C)i zcVg{^N2?bF{rh@Jc!BtuXK@Gj#jjatD}MNqz;CHsM)x}{YjSoZedTlQ+Z5eas&H3I SUn!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz=uR@WDKN0)^H08=jY{A2IuFd2Bjtz=jRnGI6E2} zG%+e6`-72{fw_s1p8+V&#ni;e$Z+k=;+oeF3`_KTzMG1+%YI(db0a@a^XV2py;_Zs zUDt1D9XNBAQJrV6u=*P&+^uqM_QC;H}fIk&%Cw~+7Kiwh=BtehhbhE7HKxEz8Fu#v-DtvVD5H&bwPO`|eF|kzT(*RBT_i z0Ut;|KO^IR78YOvVlxm2@fBDE4EPLq*tinfJQ!1f;s%Tc{2&QokU~}iW*~(eKfrVb zj2}jZu#&6GE_TdJk$85KqXy}Q18NIMp&{#6;g>CM;{^iE*$Bs7k_-&XpvwEdM z>-8$LbKiC1tu6f=7TdBexxQMf{;K}=S1i;2@hw&oxaYFt?ee*iXP@bxt4vz3`KjLh TgQA;SmP}UARTEL0cJcuL2&!Cc literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/onlySomeReasonsCA4Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/onlySomeReasonsCA4Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..f205db0a3bef4d2628d7c0e2ac48e6ace3610ff1 GIT binary patch literal 908 zcmXqLV(u_#Vk%g`%*4pV#29SA%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz=uR@WDKN0)^H08=jY{A2IuFd2Bjtz=jRnGI6Imc zG%+e6`-72{fw_s1p8+V&#ni;e$S@~}H(1{O-M6jwpcCh@O1#BJZQzTk4L zakK2Ak_Fpm+)xZ+auYI$KeOS|BRi{#pzvE$9&{C~UAJRV<67N)j}EVyxaH^dd5m`R zSlm7eHoI&*JIBWN?{!s0|0U)V>z|1CoAhcIO%yiNid^$p_tJC)uZdgidBcp7?_bte zxbrABV5y5;eQvk=^9c1T6P=p(9|_zW_EK|kn(7PN@-ltT#!GX}Y`tyIZIbr+F!%9- zaLy#}xs`@4_AHAx%&VyQ?n-1tgrL}4*MbhUPnBNd;(sEnIeC}(W3?N850l<9op%?u`D*cM z&ZINJLb>54c}yz}G|4f6Ym}JyY9Kdoaf6k)~{TpvMtw- zp84UG|Hp>({)befo+&1=~ zVp_D=f7xC8hTD(MGpcR>SG4Km^i|v&i@xZ4=6&Zn`+Tk8?ti}~I@=~_oMAkWezX0A z;K$?pZm}ioX3#(7XeQkDpJDH@XI1x&yLo0sepC#(y<7X-gX3{^AAJ7u6);L~n5g>T Tb^Em1=ePHXC>(b====@Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz>h?02QONY2S;4Nd#gX4OvB-h0j}<4L8x$>%sf_SpV1 z-~;LBXJq`(!U9Y}YzE>Wz5%#1xeXW@mt z@3{W$eYV;Agrfcw|Clu$6NH}kN=vOh!+hdCm*bYD8@==Q-+XasY4NffYuZ$<%T7tx zING!RZo|6(zzr5dEY7|la@W+i`G5J%IJPyRV W7HwM=8=rMX)S`MdV~_lw&piOXmtKAV literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint0SelfIssuedCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint0SelfIssuedCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..6e8f97c2035ca23229aee64f24964c3fb9476954 GIT binary patch literal 919 zcmXqLVxDZ!#8kb2nTe5!iIK&CmyJ`a&7}Vh-&TD93U zBO}AQ{RW5sG5pf|dLvI{@0=sAtH1lQH2Iy9tJZ(E@DZO%>}jEt`!`zeyq%=Iz37UD zSL^Il<=s5zN{;d`&Ymk@e}Fyt)3MoN;nR(`_{1di<}CQT+WqjV+Liu7)eAJOS$5nh z`%+)jx{NU`<5$Bj@$a%}4-f3QWGU11)FS>!4v%TzIh36k8P}!+>U+wEhMehiqF2L zo_+1^g*`bZrmu|VJ6U+rSuxN=cx!!&Tv?bB>z;i^bAtPRJa?TLcl}0O(T}jZa~!o! z1uS@OX7;^{@luP;O(teW2FArT22}>~z<85YW|1%uYY>^Oy~)dF!qL0{#*<2Wlh1K} z?6Lg?j(J%=7BLo)hS$aWd}q#^vRB+Y>ihZd@{+^xgWp+9YhgT`AV=DGuenw+{#z+5}FI!ibij{9Z7PP5( z`Ppnmopb9`UztvvWmt80ll$Rw9Ko@7`0FO-9!unJe!d|qyW_LDpzr6!n?)J_E`PpK zA!LpE_t2_U-sOQ{l}ZxIrqO*WIyzu6X?RGHkD^<#6F`bfh}>a zPdIHG{~wiJy_bJ>)S+qCr%&FS@Nu@h12XfA)3G}Vh-&TD93UP)#=$fzY6lO%X( zUg-`askO%okBA%YzFGQn3wL*$b*7VzL|e~S=ikRmXML8Q|9b20#N4N=LpMe(+u!RQ z(79r2k7)ZLMT5SHnLpSXj2qXzu5i#XNGrBFZtPx?xb>u5BFlX-+pY4i;?AgZUN96& zn-KPqfq$>$-nuntyNraY!BG!e&4yb&W*^C4{%N1Cv2ksrBWxkcu)1}8?VgM%M9*+s`|+6wd#i4&HMzT z*pJQ?>-}@|KI|-9U3GZN0lkpLX5Z>Vv|oMHUpP7c{_|%yWQDJaI?0^Mxc%Nes@NxU z)!esNj}$At-Tpm8|EpxQ$@73SD}L<#b}@wW-LGr=7wl&dYCUi@R`Ar8wbGq;s#%rh zcH}<4y1ykSZo}n2X?Bw|?I(SW339BfikWij=X)znmK$%@&smp#(C7N5-~F1GrhPlP z*fL14Sj1A=J8gg5;~O29zJz>!n04TwrqRJz*?xJyf)wkR`pd!Fk536?eI|cr`jS~) RyH`7{3B3KWZ+gAvLjbcPXQKcB literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint0subCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint0subCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..b156179e3a730a4f5072fe175202723f9b19566b GIT binary patch literal 922 zcmXqLVxDHu#8kI{nTe5!iILHOmyJ`a&7}Vh-&TD93U zUoo;WFgG#sGXTZ8n3@ZZd-XCX)-l~1}uZ$#kZysSZe(}O*$ETU| z=JH9s`#+)iYHOx^j@w@K9f|_rYq881XfG z+?X2YKJdOP(Q1@F=SoFOWMZ1~6n)P7>CTMYx25IlKiQ{RCUcGhM!KP&&l;hUN z9^UgxC%u7uOh6frC<3nMJ}ttU+Y9_9icz z2}kn+7*8tgO+Lr@vB&loIPzurSj1RFM3T}4YA=}|En>THuYRkT?5V}YaRz+AsF3An zWc<&<0!&V92I3&T0*inFp8*dWS3;WyV=7SGfYE>-Bq0n^$ZEh0q>$qWnCgJ>!^ogF zQtx;rOFESKGs6 zz~l02vft~aRZe>9(X20JWYlvXh%S%)t@miRFn+XRJK=d zy0Iy;IqeFcy^KN9jN{)|Pyciz<;l-iK{6>4Ci|z&o-R-mx8cCGnsNu@-j(-OvDsV^ z3Ds(tm3Ko&DP>#r+mQIahc%yXuKcL@{E%L*9cO4tfajz8yKiiN9LH>abKPrht|Qjb Mt^7-rBup5b0gjtf!vFvP literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint1CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint1CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..a424261672868de229f240d691ce44485a41faf3 GIT binary patch literal 913 zcmXqLV(v9)Vk%w0%*4pV#3*CH%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz>h?0u)I(I#gZTb8c!$dAfOX z+OdCaCkq)Bg!ZO7&QUuf%_VTMHIL)bqbQeKsWJ&a%YUbBj|^J9)j-(8Q*YxkBN4zZQyNNzqH6^QuoC3n*{Dm zxcHn=yf8hWcD7&i?9OJT6?51Hy;s|Q51jq?%oSVVt^8f?J7nBFAAMI^JblV`Suxw| z-LWzDXUmVRVz}!zWsTtE*B*M;CT1+i3+(>=FaK^;@=m9pH=m0?e8H&MTQg<G59 zJgJSp7&EnvLx*+UzS3=}%WuZ6NCQW>EFX&)i^%6Eg$e(~Meg;gwHnvS{5j~J{_CIt zA4oqxBjbM-7GM%$GY|*y6<7oe_zZa1xDwht7*m1b28;$mAPHfRLJk8qAjQPUh#W=0 z#0HEaMg}uKtqvs(2d^gU>i;jo`n;~65R6cov0`0F!A8$3v3vc0-g}vv;5u5 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint1SelfIssuedCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint1SelfIssuedCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..87590c3d2620218727dccd8680c9f1c23c3a486b GIT binary patch literal 919 zcmXqLVxDZ!#8kb2nTe5!iILHOmyJ`a&7}Vh-&TD93U zBO}A^`rk)#*e*ZoTK;)or%vhzvu!okqn34iP2aNT|7MO0>dh6a-b=?6PAENi=CRlL z5_`YP5*IWsc^K~%-NCij{q^!a)23H1vlCXkDRwRLmL>x$PxjHfKitIF4+s1Rt|&jU zbb05E=7S&8-|>EH+Uu$2S;@UPUf_bt=jes)>le(qKcoF##VyHGnI|+1UHX`h)pOiE zv0mdwa=4TI@d@^t1&KfB{HidC%w%9pTX@T!%O-h6n^O!L{>6g68HPI~X3JgqT+ zam$_?VJ=%;oxgCsE-%~m^T_l%fd#B_e>Xh+vek?$+H%P^m#|KOzrGWLswQzw=hmFo zv*gx>f8qTSCwVtC2Qo1;GB7T#F{m<-2gaMMGK++PScAytCxr?B#YOJ*sGU`-8>UE z*O+|!p5$N4Xtu%nt$DxNqomc^>vQbZr*)PJ9=drYgK?tfM3$J!B^_6Gg*UiN`EHkD zHZ_7n|B2hJWf7l`mGA$Y_~)YZY(>dv|49oTpAxrLcRpEaHBEE*;YCNY*1Ygl%L-io zd-tIY{}(cTls)k(ZaPBf~PcdsEKOf6{4l;*hSfu5|j1bI$)t48%iNJ*Jm`c+M?Sp~Ks+#+U6aW|394 zdWkk0{Q$l#W7bmXxcZm z(~p`w=I!}@QY&Id;e&-cC*9forusR1_mm2Su5)4?nI@;cNBwsXIwUoH%8PxI**EVv zq(4ddb;@idt<#G|Eb=}Gco=6NV3K(9tH9M&@=#Iy_Tt43o?qrqD^$8CGcx{XVF9KnHUn`G zUx7uyfX{%3jVqzegE18-Zop{350VfDDP%QZ22#lJ159|p_+ez=oWG>!gVWsJ{H=D| zX4lHg?K#I5q$s|jP$I-zC~9A^ZA|8x7xtkBdwQq*xwN_OdU8UG$dg5;()ZnGi?Cez zdpfI^O?yjE_vY8NGv$6dUE^F^Z}wwmlWjpt`yB08w)cHfV_&W~vQ7AzPqQG)EzP1M zvstI6@JXc3nO(HuwPerZ!p?=EAs*$i#tc;}Hb0iV;m;?#Hez+emT6P=-?4ZiC%Vky z_1~}O7&lM(Ff*^i<;IP~o9CD8+Z(Umkr@#eoHSiov~cZ>%$A)$I0Y`eRG&G$=l0#4 z*DQ;!6>Lg-FxlSHaALmGoA4#l*)D6N=GuOr>DK)^>!kLSO(A!<%F{a3B{T2r+7AGx C#9p-k literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint1subCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint1subCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..05a2bac1da8277d987f78747196c54d7b74e3766 GIT binary patch literal 922 zcmXqLVxDHu#8kI{nTe4JhzxkyIJMe5+P?ELGIFyr82A}-8*s8QhqAB)%dBr6~iJ5sN zh6>J(26E!Oh6V&TDL7Xk-lI8U&JPpQ3?0#6Afu_7#^V0j+FeR6_O@ zBP#=Q6C*zZP@IdYiII_EpYR*2`~~kn%{sm4?Yl{;i`E{wDE#x1T2(Ns_67}m!?w(d zW|?K@ZR5=hSzQ#==JC#NihOUkMa50%c4~c%>#~@0%{x?$J=Tg%oYwl@#_Fm;e}}j9 zl7p+>hTXgra!0?-5c3& zxol6C*l3*l`nT4NuX--gryMt42wx$kDBb`4+LfE-E)yqxUB1Yv__SD0vI&dr9^)SN zH!f#3iY88A-&>l$wQ(au&4xAKBy+f5&&r*@UH6U7U4{R@JNIs$dBg4WYu|v~!3@jy zw6++gzHQfW7U6Sq|9Fpi|Gf5fFU!Xw#v<}`=CrNHYeSvZHufD?{U&jC&D;r<27JJ%kmYA& z{LjJyOipYD;vl{Pi+};20S_BjLYoI;Dp1^j(SRQ$Aq-N;YQPMnkmCoK>VWaX$l&c@ zbE{VAfnxE8zh3e>{Tc5Bv`_!J-?D|NmiKt#{xj|Z#wk-1EUs$q%z2mWduL5<#>w?p zzigTK-T!QZ{_bsS1WGPuoZa)hx#PEihvgiT>38iP9@tp=cV2*2;w+|l?fOpX1@1yi zT{=Gb+<$+aSu*5ic3b35-;Ux|nU$4mD^nyDa*E#Zg->?R*8917=Al1ZqYQ5^h*Xd} z^0>WY=hYvzH-GJ^eY$MtzsKrVjsBTGk@)?b>E8?c{gUw(?yW7Vb3R7otv2l45*d~r z7 LnYj8~^{Gz)n8sfJ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..c254a2376d3db5e7a1fb83ca4251b57b9604c625 GIT binary patch literal 913 zcmXqLV(v9)Vk%w0%*4pV#3*gR%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXz>h?0MlMXBe}S7kc`zGFK~ zW?qulPT;s=pV`>T+dkvE=&JMA4+p=V{$!JTy~*cGIqv-hK94TWILEf~RzS$UEqrEA zIi^ioo?8BE-}=V?S0~ojFWCG->%mS{W|J>pv)$G9M^~2xJ;^}FBh zac%XyIU&ok<9$n-^y^o5zm;!d`*Uc1+`aVtyyR1pnV1-LpyOI?05c10RE!e#kb#8^bu?`d84&u87k-s#F6CzftZ;NInT z!+;N@pP!NOKMM;m39%W7gZK(80tS2rJZxMEZ61uNKyd>`10j%vFi0VX0UMA4DMn3f zz$jv5Fqp9Vy)$E#rtJ=|mWO|Lm&*42bB=^HzY?!7Lyx%?1f-T8D<$Ci`hW4D+VjIJI9({-T7uK48TbusvyM9qcSoxJtjIm~G z3pQlUzb4~e^gUCz=yI^r^;`C9+dFRj>tNsCX?$1l^1GK`C*28{oRXLyy~9=^+IgkN zx8@&e}Vh-&TD93U;OkF|^MY>OHxTq}q!Qhkcvb_iMxFxJq6J8vAuX(F6|G&3*z2Ve? znTM9G_Pxmz$g#P7!~f?8ZM%9F%L$3}9f;<+&cw{fz__^Hpw>Vh7?!fiED{D{4I=CJ zw66Q-v+iNJH_b$#&uX!DG;L4S^9tM0M z{rrrK|5;do>50ui9K=^(5isC0;9=uRX!Br91&SLm8VG?Tgh2{94A_7a6C(q16aiBn zFp3x%9O|PEa_wb2;5I$h^6ryIJ)f7c)qGA>Gh_SrrRlZ7j_^5C)n81V?`6B#Q*$9- zM(?V(x2NS?4Kc_M0wtkPRnKiK;F zfX&yu>lZf9oOMHYWs&!TGvbTI*pJTl+L62RLYMr`y9aJHw&q#SX5M2_pth`VKIiEJ zd7qVnt**W4;xlb`G!-cH5%g% zEzS4IJIDLokR?I*vCFK>sSPY|U)h_B&M|()_U4*wv30s{XUt3EwB^e3*KRCJNjx8Y UB`s^S(!*x&{U`N4byoQR03iNmM*si- literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subCA1Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subCA1Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..bd686290efec31105e4734066354faa98f27aa87 GIT binary patch literal 926 zcmXqLVxDEt#MHEanTe4JhzxkyIJMe5+P?ELGIFyr82A}-8*s8QhqAB)%dBr6~iJ5sN zW(v-Z26E!Oh6V&TDL7Xk-lI8U&GOpOS$B#6C$Z_7#^VIXfB}G%+e6 zdyA2kfw_s1p8+V&#ni;e$Z&i5|Bq451<$X{<}2m5@8a&s4!jh6^V=?y~Y*Qa)8{F-uYU&I0=oi}KFp1{ZVx z-*kU884R*9%SN#V)*{-pItv$iTR`-k{b%9vGIg$}AEFVhtke_q4A2 z=dGO^ z8UM4e0MiqjfjEe-z#?G4XTZb8mC)wFm`T-c`yQEpyRk4_ zs#Q?<{F=3qdPchU)<-J7Sa><>S>*Nos}?*^Na19(tX~Sn@2oD}Tm8U4T*Z6xg=)_&Odl^gT{hUi&FPmwXM2qDk3Dsc7i6cMI`BKmZ2gNx zosCJi-o;k_ofC8H>DM=YZYjA}r(Zvj`d6!VN!8p5JTafWEm}Vh-&TD93U!k^U#Usj~<7SGHo+!=f^?EFdN!{P~#?Cv$5NHe%G z-@_*_O$pX-EyoYL03@@?JiRr*toR@H01X!O2WQa_bvUGv=s z7Jt_GNlRRBFjJXwmZ4>dN_4!C;sKVQIYxIb`A=SwZP3}#$(GLdZ%KPypKH&8=ce49 zSA88hRrgE@Z8-I&0=%kKs__GS54#8^Z;TW@>+7EHc5lSyL>chx*$@hH)913r*` zen!UsEG)qE#AYB4;w!KS81NbJuyG}{c`&8|#SIt@gg_F)AcY(TY(R>Mkp(%5fGH0c zMT`s+(mYvP(>SJYYP@>X|8V!w;y)9&Z8SW+e!kMFxqli@)xB%B_u7(Gb}{bGDk;~! z-YgYf+T1$F-{noZDq>=*ymczNd`^}-eN&%E7l;=$B+!Z|c| zk(-!H+0m>CT2F4X%>P!;EO4y-Cg)Bi!_PlAKN6SiSbaa2^ S=lH~VHWE3L<)=u89|HhTAzvH- literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubCA00Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubCA00Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..e2fd7ae3cd6556128bde8234d193165328f07dd7 GIT binary patch literal 934 zcmXqLVqRp>#MHHbnTe5!iILHOmyJ`a&7anD z^Z(mW`)-=_vkwyz9)7QjRjt^+RLCXq$ls}#zJDm+S8KU$N!Z%M+v->CV)MFYaz`R3 z=eA`_@{`Zqxkl{&WZiiqoch=7oOrfZedY)5do8(j#t}c`d7ntcuoQ_eQi;n{ReF7L z$@WeA|HPcIIJQ%~JLlAkMM8l-iO-INPc~hW&cw{fz__^Hpw>Vh7@o4qED{D{4I<~u z%9@KOs2uNIoSRB->*cfc0Ja-@4tY};%;F{lK~${ zKR+Yme-;*Cx?(dB2k{kH1Pu5Lc-XiS+B_Ijf#L>?20|bSVUR)&12!PV#K?dgMZgpY zj3Pz`r!MQRG`&KjaIu#&t}fP+z9`@o#sA;vyzix7F%et0IyzNuvR`t;S)sUZ(^qG& z^5q;(-{V>FzvwW>bjKvJ2uH%AXaLmI)9XW|X?w?^eA}M$RslzvJn@rCxg5L|p`&i^2_4jt4)feh~S# SOX}jI0EX#P4BCrpmjM9HXJj(~ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubCA11Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubCA11Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..44c0162e945b26d1fbb1158b27d624f228c5d7f7 GIT binary patch literal 934 zcmXqLVqRp>#MHHbnTe5!iILHOmyJ`a&72QsKfe5ARf*YO z71bv@RBa!wyMr2%Zzut%nEZno-)bg+8T}Z`8>URrb$WS)Lb|Peb48%cv1r`AVJ_8;$u7oxZ##ErV0i%HsNJ1E-ki&otNMWWxU=%Sj z__sa3vR(VDv&EBF{sNkR-Mc0VJ!5>7AiMapyV=j{j#+a5cyBG9v(?>s=Jsg~ho>an zAJ(7V&GgNGzA5WQ4 z&*?Q~&U!W3Shnc*%^QyU{5vE6sato}x@XT89^SA;$Rlim{ulG9@=E(T9_}{x_)vXc QbnesCKdW_1TVC@508toayZ`_I literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubCA41Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubCA41Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..284f4a9e4830501c6734e7c24756b38343e6a54c GIT binary patch literal 934 zcmXqLVqRp>#MHHbnTe5!iILHOmyJ`a&7m1eILmxuZ`o-t3`hQ17db_s7Zq|SEuPHMzGcqtPt~aPPkOzjRtTKy)fmnlx zXX|b6--5|EXEJGQ;jWq|EFL9V4o(HKd@N!tA}&$O*w26aeB!v<`;>)WqYv6Q?Fl#F z1L@~yWc<&<0!&wI2I3&T0*inFp8*dWS3;WyV=7SGfYCq*Bq0n^$YH<+q%cz;Fp3x% zw%f0sXzaY~=b0Xb&$GU!Zd1B1>k@po{#e(<6%)75O+N2nc4cd+WUsiwCFOvJ*LVMs zJGxC$&O}6s|3T;MW1n9Kuy8OcPYslNq_ak-|9;?s^>)7BYYQC;pB{IZTe(jotMhU< zqn4(N@k+K9{`E(v+E~ncSmgU!G{(21`Mt9z!p!>cnM(*y!ffB4_!! N#xG#~$!(Ui7XUL7RVV-e literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubsubCA11XCert.crt b/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubsubCA11XCert.crt new file mode 100644 index 0000000000000000000000000000000000000000..9766cf01596982582ec6f65d0047d97e1bfead66 GIT binary patch literal 939 zcmXqLVqR|0#MHllnTe5!iILHOmyJ`a&7&TDL7Xk-lI8bpz3uaOBoQtW6k&)qCugHRnZvJ&;rbwnVEUEecptR+G(ny(&jor`Te4%_U-(xE2c3Et0`{!KGm3E*1h=s z>-q1V-nK&Y-4c2BNi2)Eh*UfM%30t%FIG+K+4}>bJ#5B|`#k=H)%URc^3Thz)XoVg zxa_zh{rtsPsB%{|f0QPXYzR;oz#(R%4u z27Dm>{EUqMSy+JSi_JhB#8+SuFyJ%bVdF|@^I%K`iW@K*@Pj0TK?+$7n1K{>`~Z_7 zFn$;re7n~^*?M!8l~K)0iFTFM6|bB>-^*LgxB2MZqap1tBr5Y}CmPMV@$F#l<)hyn zc@<~r1f4K1vGshT-|l{kYgOUaqzc8FHHwBW{+|DQ{P)NCRg?C)Fg(g%yz<4|x-+_- z9Di5nZ00YpKc%%Qcj~(k*L!-GuJ-)8w4yX(v6p+->IL)VE*@DUF1|~a`y)TUd&#t@ z>>De8HLrI%b}rWWlZfUE=PQ})g$XgeO*%5x_L|QoR$qQ-IOj88I^Xjtf@j}ytyO%X zRH0rl{liHI?fCtoH$t+_IP;|HZFwY literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubsubCA41XCert.crt b/src/crypto/x509/testdata/nist-pkits/certs/pathLenConstraint6subsubsubCA41XCert.crt new file mode 100644 index 0000000000000000000000000000000000000000..e14753174b412891f3217bb38d462dded15b81ac GIT binary patch literal 939 zcmXqLVqR|0#MHllnTe5!iILHOmyJ`a&7&TDL7Xk-lI8bpz3uaOBoQtW6k&)q*u=xsI8(&+kE`?IY(m)A$?(CR5HUUCQ+DiPR z0%z{N5V~g1zjy`4qea{Pb%j`H_EubvIq_KKbVDlVuC9=O6}s2fY}w43D!^|b?!!_n zDC%e?%3-Aca-+6sOVI-%XQ(Y4)kU%>SRDgvT= z>z^O-*?i;FyBPPX+f%nk%&SbSui4_Co+4fUYnjpXl^HD8UH|d!d{^DWd-SA(^gh;v zo0Sh;#T|sIdA_>|rW7~-EIasMNAZoHRxKCK9Q|2+Y2!-XBEI&kYKm=ac|C!xh#Q9%!~|-i)#$34CH}fDyz&QVIbBZ z;u5ut{rtDjCyu+lPg(di`k;N&o^Wt#kmX|$V-Z>ScF||kkfrnYBtLV{3RcPS;wjQG z-~;LBXJq`(!U9ZRYzE>Wz5aWVqM#gEykpVd0$}9aUL;nOZT9_YXD6&#ZZyzcIf#Z?}fizhlPsi{CiyGw)Mf zdv@c*Mt&i2=K5czKMXlf3a{Iex!1OhbGu%WN`%_>+rG>5xi7BS%b_4=Jr}@@v8aU)(NT~R!LoJKYFOjcw@tY>934B{x0=%_gTiD zd5?41%9Ql|Ueose_;9Ss{qbIH(H!q<@6x4%dH(jc>FH(sn#KJuY}$jx!6`3T=4pJK R_QA7b`@{U7n`SPS1OWRgSCjw% literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/pre2000CRLnextUpdateCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/pre2000CRLnextUpdateCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..30aff16129db1b6ad06f689ffdb132782a2f0cf6 GIT binary patch literal 914 zcmXqLV(v3&Vk%p}%*4pV#K>>J%f_kI=F#?@mywa1mBGN(klTQhjX9KsO_(V(*iha; z7R2Ea77Ix&E>Un!Eh@=O%S=uzNi9||GB7kW6g3bADPR`n2`MTCs&LFp&d4t^kQ3)M zG%zp(LJMO91A{1WUSk78BV!oXAc#b3lnfLg)<_lrRv-49l~zlN=zjCfOC>^9KjgaC_I*p#J_}nMi?Ip(vba4y zsn0WTL7b<*#Eo}G{>GD#zjRT={!4kcx#l)JO?vsVaZzpR z`_ePX1$RW}mgV>_iBK)bE}BPL~=M`Si@s25&BZ zG);MT;@Hg8XR{B_>df(8$eH@^@m#F~-U^dGRHlc%VJj(`*ksRn-EF;Ed*`gY11!_s z89z^RJ9+Ip|Es;{{+G!#KGK=Fe`cWc{DlJH%m2mZoz(2OtTImu7OCT`*U6~H}dE#nI2L)pmyJ`a&7ba~tdT5AEiBC}N_DL$$jMC3ED6X5Qk4b@ z&W;96j7rG9VPs`sZerwT0E%-lH8CAyDImu1;F9R+PwQeWiYIo?501Pa`r<~<<-^>k zuD;%^%l9eVxoJrb%kru9#b=l3sc!kh_*9PPC%u7dQ49GH9IND|TSj1RFcD}j4D@bX_j(u6*7YSWe zSGbnWVrsw#($CMx_@9LZn2^{E#6f%o76Ai310FW6gf~Vl>Ot~zb8!M&FM8)eOJHB)S2vF z`seJ7S2vDC{z?A2%Yh@eb8QGeL&jbzzs)i%Zct@Zr7bJ4UV_U|>;e)oLV^WESEM{evqy{$C?QXGetsGva8rw^>Rs2=7%SjMdR~+zqH?7wM>#J3jn6`Y*PRL literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy0subCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy0subCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..b7a1518eb86a3f7b9cafebdf5ba73a4d16541b68 GIT binary patch literal 930 zcmXqLVxDKv#MHKcnTe5!iILHOmyJ`a&7npu?UT2YXbnVeY? zkPoCP4HTRm4dldm4GjzofzZO(z`!6%oY&aE(8w6ZH3%iqPE`YCh@CPx>?|%#0$SU| zsD$i0Mpg#qCPsb+pg0#(6C)$THK**CzP9II{mGQy>h{BfslWLGV_8|>1CBEd?Iz#P zKe{Nx?!NNzhGj>ke8dF>L(7Z~tcc(=YdW}Vmh0zrlcq)PVl{qi7@qhn%HUFdAG>Lz zK~c$sPfxd1wAHhxg$Uk!VquW4XvHtM`~J@DG8{7h&c3?1Q^WU!{Igg2$D8GL{+-#a z7jf%#@?87#myh|c`f+>iJP(zK#;8RLtL%k8rI`O*tG7X1?GbyT`4N|^ts)I!k5;Kx zOje5D=u~d?`Qt5dU%vjOs<-}LpRKQ{d%^Df10R-+3Y+?E9;h&J^E+!M8dfH^`8=Gn zv9R@qy5Zu7kCi68-L2o-t<<I23P zBg0nDzCTJo3lIKY{_>sR?q%_*yLMcep8hrAjK|x?rLXex#in~$w(a+H+x6wJ29wu{ zOIOk-&X<_{tE=SWE9H$Iztz8YU-d6jpUUibFSjxJEDyszwyXWy6f)-iuzAEF@pRXV zg&NEEHmbdQx-#+pm5ga0`v3f%GPCsOU8Vf_tL_*lsm=LsBEI)&;i2@!uhjpW{_*Gb-g8gO8N@zeNov^CsN8p}NTSdtQIx>Q22Cw_nx# ToUYIw{BrS*b5maT%rF7~kLznx literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy0subsubCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy0subsubCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..db57e9b337f313eda09e3d954c93feca961de871 GIT binary patch literal 936 zcmXqLVqRj<#MHBZnTe5!iILHOmyJ`a&7lM%Cb9Y)F zMEx?%m~HE8RKoYxD7dw8#g)Lb}8l{jMQ%%#Z$k zvo&oK|B@YLvWX@E3GxYFzr8wEmi~hG0l$~JVo;j=8Nz4n`7@BGQj7k6p!H=h)l&*j2&Vy5ezBZawp_OS^aXpt#By2f#7b-a|5 zf@XeLYglZEmtU>IrZ<1OTTB0X{+shQhu>YoTk5dS>M3{U$E?3;JEMsIL(bEjJv-_x zJ8w6+aZb$sdc8`Rd-LXS8-KDkTII;``DteqI4Q{Tv52vVyuLBLs=i9uRPxFB=_=|;z=~ z302t|-Hkt^)?F$dFY=c63P;AAbz7c0?e_o1zxw9&i|d~CR`taAFH>vrKDhS6h6S9C zViO|QJ04K(U*vP3!s)KbTXWlp{Lk{`vJ)2mOgc4DqU-xx=~X=W&+cWsl74$_qV(b` QJ`oqTsT`N+DNzjs0C107IRF3v literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy0subsubsubCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy0subsubsubCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..4952094eef3e7f9ccccd5ee22c85c7695880aa8e GIT binary patch literal 942 zcmXqLVqRs?#58FEGZP~d6CB(+$<$iUFhP{TkCq<~piz9_Y@G_xqxwW1&=GdZ&) zARkCo8YmQ(CIOMNqk)__uc3i~ArM*^8yFZwiSrs87#bPFxCYTA+N^D$39(rTugwt4 zn;4aleagtnz}&>h&tTBR$i>ve$jI>UzQ~@t7iLI1YBB|hXu4jn6I=Jccf+?!A8(5v zecEBOVl)4HBc6Zd?(7BYPg<{jVpd;qv$S-@zWFy@noj@bV*jcV?QtdZgz?+F-Akrd z_-8ur4baZ4(CQa7`}yDe2@`h ztKi?Ur?x8cZc}8}w(tiUS(CF^PiH1YFLv!&Ch~{nLG}zO#g?w$+OJDKoN0QWeMooe z;fGhAg#Vu}_QJhnasS)GvsFgt%Jl_8H|(DDWU}3Z#md`u3R!1*#%RXmf(+bq{kC~)XUIUcWA?9zGboL=@W z13r*`en!UsEG)nz#%3T6;w!KS81NbJuyG}{c`&8|#SIt@_(2lFAcd?3%s>h`et;7*$#uK%y8pDK3T(*9QAw?Ish$2{4`W{cC_d-xeS3Fg?W3Y}!{I=KcoFr|GNh58YooX^GIaqat#_9y8|O54yZr z?B~XIGo}m47DDT*65P(-T-)>7%HT@)Uh$;=JY4sgDwF^0+V*VYl-a3475c|Fo_3au SwE8p2Y1f`dk7nM9I|Kk^i(_;E literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy10CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy10CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..3a54e7f2b82d31a19135360321e675935ff682f4 GIT binary patch literal 934 zcmXqLVqRp>#MHHbnTe5!iBZddmyJ`a&7tn3tdS~8EiBC}N_DL$$jMC3ED6X5Qk8}V z3eJuOO^iy&-eF{AU~XdMX8?+GF*PwVGJL+}+gkar*T-$?qtbu!iO3bLjjrlfD0K4$Vr>-+x=`-{qU4&9igeW_%2I>(r^^usZDd=9$e3 zoW5I?uYIiw`EW3JUZKd-S<1iSHYsoYwKn{`wB^i6Q&(t&I~+1R<0fq$rCI;ZX4`MB zhll(1TXP5f2QW2jn9U;N7{Z%Z}%+Nb&DbGLdUQD zz15#TZ1Q=LF*`>*cvHh-E|q;>3O~;3xS6t-X~*i@`{m^g)|8pav1oqEnbYF^GFEe5 z?jC0E_G8PqPi6#3XRziU-^1E^=1oh}bFmdC+b>=f>M*)@m5G^=fpKwTpFv}{fjlrc zWtCYZ48$5lp47%)jG5ZTp~JdvU+K2g33E+J&;uuHJL|v98>FyM>A;t6gsC#inj@ zJbcc&=YMIiLgYiXhDSCh+rJw>4mFXK{#x?=i%0z5$kSq)GhgjWyP5vk?d|NX4zrG4 ze>mm(u5%HgMqK5N(c(f3=$Sp@2&;b^U3Em0OP&OH`ySdttfc@Uag8-!{GOSsk;3-}l{fH!-v9 ie}x7s>eud>p|&IRi=RhrL%l=ln))+OXLf!1G8X`5YHU9M literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy10subCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy10subCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..650a53f4c2e4d892d736fce3c4ca82ff0f87fd55 GIT binary patch literal 932 zcmXqLVqRd-#MH5XnTe5!iILHOmyJ`a&7A-4f18*?ZNn=n&ou%Wzx zEQrG;EEbYlT%zEdT2zvmmYJMbl3J`_WMF7$sBEAJQot-MRg_v-npu?UT2YXbnVeY? zkPoCP4Gk2W9S!8fc?}H=41v(X*ucObN}Si&z|hDT#x)2d(NZ-76^Ny>xGXI$O#<56 z#HfVqKSovt<|amd2B0_>QxhX2!_|0)u4#2f=kECT#C{P~`l?y9N&2lCx8nN5MZ(*j zSsmyJ66~vQmP?(kl^k_CMP$;hFUAwHVC!VB3Ag$EpX?IZY`ob$UMK9q z?a=m~`92xBOL}UHb}TZ{Nr(Zep%+lZp(_~_1WMEueV^C!v4-8LPWflnou?7*z z&ps>{jBiQ(4#`)~|;A9}n$0Eiek|(h&QH4L_wjP_{G&S?}Co43=*bMkU z`uQ0d|Ff_F6Be6+IEb&nB4EI0z{AFs(B{FI3KTbBG~fqG2!j-|8ZZMX3?<@H(eM3}pli!ayU-tE~X|%MuzRqif4YLG;X1k{L9e?YY`Tg0kgD3mF_PqYMHGD6} zqS;O-U;h_R|M);U+P3PlZqeB<545-!++VhVY1Tisz3+7vXg_`xcp{3G`PVrMlLuTM z7!L0gTd8HbySMP(t#8}*B*strw2?*c;RLmv9$Xhf_e%zb=8{m&Z(&Z|!O zsyo%<%Re-ydFRxwf9SFBV8qw;%*$MTe$LtxYP>|B%bjt?{{=@&)>=(nng7N!Z$nM* zy6J-RU9P3&&)@T9Yk0lEsj~i$`8M1q;-`0AGPGYCv5|?Hk%4h>jX{-xJTORQm02VV z#2Q5MB$g$r@MqlCV-uXFX1@Mpg=QEVI5Eibv52vVLrpA^z$<^{%2tUCNDMvaS&gDMZkd1fQOAMq0NIa6)0}NXuuDW5C$n^HDCr($ngVA zg~0e>WH=Whe@3vSY4SovC^c2lZtMeF(%GcWEvbSGJyVkg5lJmRQwQ<)!p5Uku zJ&|+tn9Ql*9Oh|GZ=)72c^{T_WI}!GTsH3uQDVMJo^08#dj9pbA1?xgwuU)x397YP VrFuWx$$4X8c9gR2$y1Huh5)AJZ|DF3 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy10subsubsubCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy10subsubsubCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..a7c216c1640d0889a8c3ce4a6c733ce3447a472b GIT binary patch literal 944 zcmXqLVqRm=#583AGZP~d6CB(+$<$iUFhP}4viq<~pip(wSmG_xqxwW1&=GdZ&) zARkCo8X71RmnH#`v!j8WIIp3BfguoD7#kQEM2Yhn8yFfH!?*@9BwDRwparp78NbyK z+nX4bkp0TY%D~*j$j@NV#K^_e#K_37jpw~gYN8pRrft({^0y~#zmEo zmksVq<1#!Z|IaFxOZsJ|;}CpKG5N*c*s#oF4iD#EQ@s51-5IkhYQeU(p0%rt8aQLJ zp0DUm<(E%-y07rql85utX028Jx9Q6AH}AK^ zOse?AS$U@|ev~u&;Dl}3Q<~SSDL-9V`uOzBgd+zwRVx1e!c^=0Rn~A*Ecd~)Gb_Z7 zR(JjSq&|0X=OoJsqWwN0r?x*clJ#8X{QAPrmZ$4j-U>1?GcqtPt}&=GkOzjUtTKy) zfmnk`M1Vivr+-B%OD>e#FPNrNzE$OgA~;FN^0A1qh)nA#{3E);`rOSUKMr4r&n&EY z!QgGc2hz{a$oQXy1(?X#48%cv1r`AVJ_8;$u7oxZ##ErV0iyvwNJ1E-kkx=0NFm1$ zFf9V(hmk?EJ~jWvboa^16T(sV zUUe-0`Qg%5?}n^`C;CZc{CC?Y%@9;tb3(Uaiit={wYy`&!j2-|-nWq}Z68(l{JOoa zFl(*To5t6MeeFlq7Vn-h=~VQs3r#0k?3SLtdQ)#fgRa01Mw8#_?^GO@a%%~GE)ZH@ z)-kJbPU^L)tE;-+?)mb=W1XJHOK3@3GCp%N1Fcb}J5~C$Cri6;khAGBMYA+w)IbD(hZP{_=X! W6%X}8O$}QNIhKa7?NQX#dkO$Rr*NGB literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy2CACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy2CACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..f7ca7ae7e2a271af99274c581a8fd476b092d2bf GIT binary patch literal 933 zcmXqLVqR#_#MHTfnTe5!iBaExmyJ`a&7ba~tdT5AEiBC}N_DL$$jMC3ED6X5Qk6yu z&W;96j7rG9VPs`sZerwT0E%-lH8C!`B0M z7G-aIvG*4D&D)pqH_W!?-6i$UMPu`+8j*t%=l-gCo)O7=5?OSGNpSX}105GPy-9he zaeUX7cHJ{3hnF1t|Kr4~b&vQ|n>%A?{z-l=GW8*shN#wOCT2zk#>I_&294bY^1#rP zRc4Ve5Ni;5QX79UW@;OU4(qyorQ1@M-;7<6299=FJ{B<+5wn#yf3LF8U+~?>`ey6g zS)z+|R~|Ru1L@~yWc<&<0!&D32I3&T0*inFp8*dWS3;WyV=7SGfYE>-Bq0n^$ZEh0 zq#yz+P=N+UCgdmsCO}}6F*3+q_-oLenWyIZ$wDJUyX&2FUkv{uj;i@>2U2frtJb>t zL0mC?Yw^)Tjy8*~T3ujS-_UXXfQ!5P&8b1mPb(f h8$E}7Uh1gJW*t*kyFIh>t#xnP6)x5%=Aut80{|eMXubdd literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy2SelfIssuedCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy2SelfIssuedCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..9d1626909055a69fe657c6b1fa487487c954d4f2 GIT binary patch literal 927 zcmXqLVxDc##MHcinTe5!iILHOmyJ`a&7npu?UT2YXbnVeY? zkPoCPjTD?64dldm4GjzofzZO(z`!6%oY&aE(8w6ZrHP$Qj7rE}V`ODuZerwTFlb`r zVrpV!WOyPop-*}75&sow6-(0+_pMyPw>aNcZ2oljTerBYzC?YV`p2R{;q9^?pH)`x zO^Yol?>+xOVZXqNo=fkiZi%&$DOUBH+qce9(>Lp*%hV5P?ZWB_7xqs){J&`Cy+;a+ z0-Mc?PItKae0fzE?ssH~qvEY^$M4*;SpI&x=&nV1Oj{o7_(c3k~={`uQ0d|Ff_F(-fP5 zIEb&nB4EI0z{AFs(B{FI3KTbBG~fqG2!j-|8ZZMX zchBGE$iMl$Z3)lW=(>e#)}HlgVy=Db*~9HkDv!pU9KD_9~09L-q!yZU0aE-P5$(7CQa-t}itKGyMOEuZlkYHoZCI z#@}>l?#r$Vd8K|Ve7pFgYMR5Tl`&2mO;q11iJTX`cPXCx!tw7S&VdHZ>$s&NjxEk{ zpY`*gL+deX;WoXL^A$V`^U;@t2(ay7iD%)9aJx zqb8oK;|yCc@4^|K%okm469dh+M2RX)+WhhEkDLV=r{n{Vd=HRwd~>(xQ|TI4?vwHW Dyjfrb literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy2SelfIssuedsubCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy2SelfIssuedsubCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..b53bec1560d18fef7ff01047f704ef91cbcefb98 GIT binary patch literal 933 zcmXqLVqR#_#MHTfnTe4JhzxkyIJMe5+P?ELGIFyr7=#*f8*s8QhqAB%)&B7sfDGPMX9b81v#0?nI!@F zK&sM6p|~{3+0j5woY&C6zz_&6j13G7qQrTP4GfKpVO&~S+r+4Z>_J9W2IeM4eg=ak zMlPl%Mn;B1HJ5^B1pk%iHJjeF=G@QNY4^_UIl5l&XyMdpvWh7t%luCpb#~M=JbF6u z)+OTyWh+c&zh>@Pv@L46_NiNuM>6un?DvPsWZf2Hi?`q{pVDPrt=G@Gi7}#Kc6ceX zu<%VPQ;Mw<`VwnaY^#6dWYUF*JpmtWF0oHrvCU$|p1fDrE7IEe z53B6t{U7(OiL253eBVx8CT2zk#>F)TRR;3FSd>*}kuVTz5K$=q=VQ?OXmg-!|Ay}} z^|H+~_}sziK$ee1j77wgD?KsHz4ub&^z}+<27%=PtL`i^-~;LBXJq`(!U9ZLYzE>W zz5+%E z&1UxUY*W_t;H|HU_WtP2zVTBl#`WSO=be5Rd%A++uT8zIbTc&L-x(X<)T7INXKZ-t z*%BxsHak?`^qu-2vn>0^Prth+%BAS_O*rdrEq!KXTdob;mbt;-8aX!n-&ZKQuW0U> z*#7O;*c95iSsI%DzVA-oQ8G#YbFguw%kHJF%>OL?+`Rh3QXRfY&d7CGXzN+QCB87> z$f9MMG1oF27=G4$Z`tV))pN4WB0e6p?0{~TZ BUHt$6 literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy2subCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy2subCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..36fc0d8df48dfedacc6a41638c29145a468b87fa GIT binary patch literal 930 zcmXqLVxDKv#MHKcnTe5!iILfWmyJ`a&7npu?UT2YXbnVeY? zkPoCPjTD?64dldm4GjzofzZO(z`!6%oY&aE(8w6ZH3%iqPE`YCh@CPx>?|%#0$SU| zsD$i0Mpg#qCPsb+pg0#(6C)$TCjB*H_g{u^v+Ky});zzU!ZexpYR05Jfeii;lVr?h z%vrXCBkjK;89^YS+my57_AJ>WQ+^? z#1MS(yz4BDRMkCK6)Pl_93Hs@oL(9eC%WyhYg!aj@$}0Yo4a18a+DRHiTJ1!?0@-X zR>^&pA2SwK%#6Ep^gtj#8(-_b?+0}Fza6xHVyzh5JuBY(b=to(TKk;!y!QDEG_QHM z=ut`RvKUjJR|=08cNA}ZC!Bfr&-2ZXZb%FF=`yIq@4Z&MkmbeEx@Cv`W1qXHD(hWp zei!o5*XOR?kFETrIv@W=x|py0Qhz~kYRut=SSDsh2FArT22}>~z~GcsW|1%uYY=(A z`qqty4Tj5|#oiq$<6ZwI_fx_`a3YZ9V-aH!Q7HfCW6=9(bD(VhhVL@Rab*`*q7WD?Q*_{vRHJ6^yH%PiT!luxY`Xl}an5CT;pM zH!|_4yi0w>HFqDz|HW?WA8&iew0EuK#GS6IYo8r2+xPt6dDGW?!PgX~aJ%Sxdd{rQ zJiB=Nmd`tym76_%=SAK)*tm0fiS>fzKlg8+8&rCvrcPqw#6>3rB|qg>S9pJPf1_T! zX2uJh%&F-X3mn(RR{!f!)?UU~<5@5KY}%TPnfmMa4L5Cm&}JAE|4%4AWuBTtZLrK# z-kOO;$5ZpomT2`adphOa->pYCF!U&$`Ss(~;@xREf{f8-av}ba~tdT5AEiBC}N_DL$$jMC3ED6X5Qk5nO z&W;96j7rG9VPs`sZerwT0E%-lH8CCuI%W(EOkS(`5$k|sY|wXs4(2r z@vvWG;(LDm|ECJ92M*?itgCTp75w&a)|zXIHX+A5SM1vT^i#<-ukRwPWgdR~|Go-M zF?A5#Z_pyx*PY}W&5@*T%@}u;#o^WZXvyF6%~x*7`@@iM=&SOAm0vvT&rJ@qo>(4h z*0E&X!f4eOf5J+>96BQ>bs%NM&N3zSoVt~>58tr6cHjuF+bY8}QBKW&>Ymr5jV~*G zw`O~L=ZaG>_l?*)Z1X0h?5u7M@TpQtocwwL$2XP*VN0J~e-ZQkG|RM|uI`(HO_$Bv z706J~buM^6`GhNi4C zi-dt#gUFNG_=_=9+coT1}S7UU75~ zebbejOMEgobdIy#HCDf`+E*lyzW?~6BNq1m`orR%1g|=<^xPfxHBQU5EyMplYA`Im zwZy3G%2V4L-Up6)?!L0}@bdx{ldqn0^CJh3>WkLFoI|s=#_Tq0zO`JkLEs|Gr@Pw% z7fd`B;JR#ek!rv?);^Z|h8al(Yv#|sc)WP#Qsabsj2j4zkn}sui5lsi7^c fUNAvF=fUBOj!SAynnpu?UT2YXbnVeY? zkPoCPO%$9R4dldm4GjzofzZO(z`!6%oY&aE(8w6ZH3%iqPE`YCh@CPx>?|%#0$SU| zsD$i0Mpg#qCPsb+pg0#(6C)$TCL4#Dft}i4?q6AYr}cnq&BOIR*P3j)E^hh7v-8S@ z(4|uYwq2cI88GFxb+F@!7P*XmwfDj7T}d-n8TbSlhA(>jsq>H;-=yE(dO_XyCmp@~ zGGTx1tGvv_7QbVBeA6Y*#+9Dlr~C8y^TM*fyHZP4HthE^S=adcbF%MqsU@F;zjZ4t z+_*nZBPe5PmFc3H_3C@e?u&~EF;BQ+$n5*pMN@EPF^8U!e}QGr&-n5u>D%vKOqW?@ zwlV(uu365BewB~qG^@@3eiv0iDDYqe^X(6TKQNL}ZYYI=>UP@f@9P3>q!H4`%<1LNWvgDL}gU~tMRvq%_-HHe(O zc<0O&!(?`yShJ1%z4J=a^>W&9L!-GEmHo) zFZEd0WcSUPR$kXrTo*NM0$1n61HqAEHf!@6FBYkqIWg?*JZGo>$4B~JrX{CY3VZR= zb(h2^$A4T>^46j}eTBT&W*zgQiMzH08)g~zY-@{CUcF`^7o%wWAGS~1irPFQ4qjfq z_nDr`;~#S00=pzWehpo5d%0Tes~4Zcd=Ieya7bRY_gal-Zs*%fP@zT`#9 QoUpnw@8yf#d;2Z`02ggz6#xJL literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy4subsubCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy4subsubCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..1a37158581b428fd827767b79c3a13775d87c636 GIT binary patch literal 936 zcmXqLVqRj<#MHBZnTe5!iILHOmyJ`a&7IXYI*kIYZQecZOT{{fR4H%_s^yGs`(UJ*(;JGo=^YQ;ru^Y~1JfcUk4fjdQego0Kv{ zrX*b2uCY+NW@8$&)t_0SW)Xj!6d$r({yk%R9^W5zCT2zk#>F)TRR;3F5S3MCkuVTz z5UG97H${B+x8>8H-B9vy_E@v|-L776Qjq0i5n~Zq`Rdu_c^f#VuYdkePEWvSp+LG% zn*kq4KR+Yme-;*C;$kxp2k{kH1Pu5Lc-XiS+B_Ijf#L>?2K*oiVUR*r17;wF96!J` z2#g;_hE>z{zfD~}%y+ny>HX^p7h;R;nywQ|Pkot4~SHTHra2A;V1H z^L*~FMYopKJB(+$<$iUFhP{TkCq<~piz9_Y@G_xqxwW1&=GdZ&) zARkConkW>PCIOMNqk)__uc3i~ArM*^8yFZwiSrs87#bPFxCYTA+N^D$39(rTugwt4 zn;4aleagtnz}&>h&tTBR$i>ve$jES$_41MZD-JlVvhls1u)SC3--0~zfA4$Ub~SW- zWBdNi<4e#??xhu5r){ckdgapU`dj$=iZ=yK>Zc5ky>ZC?vS6d{VS_z8mUx-UH^18@ zq-(F$cxFyofA;FN4;CAxnnv^<@8CG0m|L*Uw$`q%q|Eg5%g?MW&k`3&B|LFH^|JVn z)`}w&mI(daE^gdk{AYKte3~S^NZ(pO>7A9?h811c*^n+ zbF28;=CYH#&rAJNY*%8$ zMvqOMyDG(IoZSC(Q{3sfY8%ejPoIDBcK?>0-!{gWWHT`{GB7T#F{m<-2L`IFGK++P zScAyQSI;ib+rT+}{quivdIClZ1=4-mzzIT@k420{L}d3xwJ-A;ZMyk{&flyS-K2A8 zv7!MVNIyR#<9`+wU=m|95C`!USOg6C40zbM652c%Q-R_Jj0XH531N^zRs&`rg&aS? zln9I;MurMsne&VPu}7bYDoS0oVVP;$u`MV1YnNZhFesS2DD{|e!2DOCb_YaPy6zFW z85z6IuW3b9P#~|;;i&yT6Dms2zFKPZ<3-KKwrLB~SC>EhIz>co!R7YTx7sEaALi}% zpPP{H8rOUMYeb{X1pX`h88^$`?GbDcGvZL#H#u0U>NWeR{pIHTf>nwZQ5Le|-QU|y za=7NJG3>p?xnK6r%^p6L|6BGjd|n^6ZQ_B>vK5teY0@W_ie=Bcba~tdT5AEiBC}N_DL$$jMC3ED6X5QkA9( z&W;96j7rG9VPs`sZerwT0E%-lH8C`oO(pe?%>aNwZA82!}MfkCOy zpr%2^{y?zwJ%*LO`C=c}PJf)dD870N?}MYuR-e`>IB(do^Ux)(iC>q@(GJyK-+r<1 z=!Zogf;n&ebtz=Lxv=E=&M8di((HFEZq6|-+hOx!;>N8N9c$Sh7+${n>#)$~^UIXW z7fFSc)IMMeY*zZ`U}@%1f(u{5>)A zRM!!~izjxc3%t#ldsMLe9bbQbm3Ug!hfhq2`&TAa-8sq1#LURRxVW*;pt0LP9vGUk z$}AEFVhtisYU3})Ol{-PVO_VcbX)53o3Sg>z|k(t$0EievU_6l>UHbx#oT!CX@X76 zulafpEi(-GK>GO^8UM4e0230MfjEe-z#?G4XTZb8mC)wFmB`P(6CoOP>6mwa$q1oO82UUZY zW~+I9pS$Cke`e~8SU0I#Y1jI^WB2)2+NlO?T#s4EqaCI&O_@eeKk^t@7wx84s<6FPawbVJi6l!TjG| z(@C#hCx-iHmc+dXP))s7*O)$S;m=9eoPNJ|d0!!D{^-*tk-jEn+vVIRq=hopn58c@ gne+SomuLHHPkmx4blju<+auTVRtJZZys_O&07ph^Qvd(} literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy5subCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy5subCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..16958532f00d75e104be1dd1f6992219ddff5f7a GIT binary patch literal 930 zcmXqLVxDKv#MHKcnTe5!iILHOmyJ`a&7npu?UT2YXbnVeY? zkPoCPO%?|%#0$SU| zsD$i0Mpg#qCPsb+pg0#(6C)$TWfj+sKQX-PM2ieLjEp}XPl-y*{3c^OeML_Ai+y!V z?D=(<9@Ftj%rq~ExU=uS!mU8ZNBv!~V)2)pPHxyXQNKpu>)whrH;#F1Xx#L`bjGTR zJ?aa;8Sj!`xct;fJMkz8u~$=3uM2W(|TvpBe``x$(w9S;!WQ^%zOBBk#7Fw4R`Yj_+($Xvo5e> zuvK#vaDP~t!WOminTtpI?ps^VckTP}p?Q_dvK1+xAKvM5SDbXay&{&$^M%A!h5NTn zg$>wVs8o4(ofGZqRFGUbZ~MdxOlof{H+Q_zd&|Vk$iTR`#-PeT9vGam$}AEFVhtj@ zCpNEMx9(odjR&75*u?yrulLY01DptC`B=nQM9eSmzjr6#`1%uFFD7j`;*t2liiOdD z52T-;k?}tZ3ou!+8Hj`U3M>K!dM=u|LxWIR9{s*0)wMbn$7PiMH$*%$UIU*|>ZqrQ{s|GR29efVR;_RW_qeD=uuZQYFe zxP|xbW;EB=$o}1OVqc~qx58F^^Ha~PZJn%)>!zz_rl>vh(6TvH&Rb~9XyTqwdRb+T POXOFTsJ_VM`6}-LwtQnh literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy5subsubCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy5subsubCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..093963aeca5a65ea853aa93e8a6292afb6f2a55a GIT binary patch literal 936 zcmXqLVqRj<#MHBZnTe5!iILHOmyJ`a&7PQz_1(2F-^p=}%1y^}S;<`Q1Vt*?wizsQg)dJGa>;^L)pr$)-K))@{<*CHI9r zVAl@yfM?ePI{e+ex3=tipJsPs$I8$-O0OQ)EPS)KL2tF0-9zW>dHn(BZz`|vj#&RB z{7AX<>6FuP(MPl`*xp}#w(Y~U_ulcH94QWh?B2W<{m;{bBK%#Xi;}j!U~)L(vyAJ9 zlFs7uU+fj0rrcWh@l#U%;;(^`PV>)WW~t`~EVs$85j;&)^afF>L!? z+jMZsmdjR(&TqZsdGb`k8%m$0g#W)*(bE}vEtH9wk%4h>jX{-xJTOFMm02VV#2Q4* zFYmv1C*b({6J0MRZ8+kQ_`!;W5u6lc`B=nQM1C~sSN`8p$H8GO^8UM4e023FRfjEe-z#?G4XTZb8mC)wFm^g8+X#{JpB^;v6YXjQ6AzHfUif-iBZft#w!tmzM0g;uvp{q1q~$-Zm9 zPp;&l+A)qD1qL@>_NHEn;P;<3^TGUgane(nUZ&o4exBOC&!;i|XCOn$DyBP==YQb0 zYY4Ra@0hcAd-tBcLw7s9KL`o*X3B?a#>XE2byu@ZxSJL$EL*LzuBc_* R^i^k_e=Xt@Uia;}JOFRcXNUj* literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy5subsubsubCACert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy5subsubsubCACert.crt new file mode 100644 index 0000000000000000000000000000000000000000..58da176c46551762236de081b98466d220136e2e GIT binary patch literal 942 zcmXqLVqRs?#58FEGZP~d6CB(+$<$iUFhP{TkCq<~piz9_Y@G_xqxwW1&=GdZ&) zARkConkp2RCIOMNqk)__uc3i~ArM*^8yFZwiSrs87#bPFxCYTA+N^D$39(rTugwt4 zn;4aleagtnz}&>h&tTBR$i>ve$jC6&{A)D}XPS`WgP)y01HSvSGi^`bG2>T|eCPLw zgB~rLpFBKtVg0(N4=p~YXe2!AG+ih5$8GcU-hbUWd$$^#shu|~_)G?cwF?&YyeXQuwt`6IL9v=C-gkcz;0HtE8R((85C7Yp=E>PYSu? zXUu)!LXooKOYUPjhoARnq?LT}th*7vZC)0`Y@R7*!H4;CJ#%%{i*|pX-}*bUz~BFn z;NG3P-(8KeQNPJK*|?Nl^x7M@y%xJ~OusPi`n=DE&6gWrhujX{-xJTOpYm02VV z#2Q3?H0f9V-%`iHbUS*z(cCAdiCc4|!3jc^k420{)T%_vLr7?~|`IZ@TkG zSi^u1q@SOW@jnX-Fp04lh=ceFECL3620UzB32h#XsX%c9MgxA3gfK`Us{u2RLXIC` zN(9CaBSZh8k{Uq?uF8osLIh+(70h=Zx|}Ug>TB32a!c4a$ynr&<#EZji6xD5S^4!8 zdl{b0*roHsZ_TCDPJuno1VXe7xS~=mmOpxD7Ox;J^25n5vu@qO?>cKF=O$OAFc)jI zMT+?|MZB2r_uyrQ(*m!97oB}FZ&zsARi5V!n-F-Te6Lx3b*%06bqViXrb@^+COu0w zdsD=*xc7(YiD$PrEfLn&eX!cjv!q8xc&&Fsf|mB(Mgba~tdT5AEiBC}N_DL$$jMC3ED6X5QkCWk z&W;96j7rG9VPs`sZerwT0E%-lH8Cg*`lViViN2g1C za?SA9dGtef;i*dpL-sVz?+9RLSh)Rcuc7CPoeDoJRzG>)yw-De`TAz1JthK^{#(zx z&3#YVr`MD#Zi98S=-mGF?m4Zz6DM@|CmD!!I+rr8Nfz2&75ped^g_&$s(W8n6`J{< zSk0I*_xJv3Uk~kfT^*?rcl0mEgWBe;O=>w8b*07bFMedSJC*r%;?C3VcORx(Y`S=3 z$EvEo!P#%B+*J27$80kCEg!OKid9LeCh?t#nUR5UaburBW4D1kFf?VA zStJa^8bqGd#$Sw?+Qy;7x^7?Tw$$Y}V^^esqg|GdMT|ux$8b8MslvV6rcb#tBO*Ie z&M2PqGT;O0=VxU6&%y#sNNfh;Aie^NfB~NY4;xoPn+IbmP~3pgfFC3w3{uEyzzn1y z0xD2}21a(|C<7)yV3aX3l!$0{PmT#)X?KL9BmKws6R{=c*ORAd3av_eb&%`4yy1G| z)$5Lh2qxVq)c9#5o^e<2PF~jC*UXdOZdp{F`}Rzfzntldop-P4@A`SI>z;Z?-f!{S ziuUzuKF*X;P;aOVG)()h^-!ho`G+Z+OcuLV*WMQ?ofB}DXQ%i@lXZUYu5D;u_*7xn z|JKd#t)1S8ZabN-V9ZgFrSDTKsrT|ku;11!=T`JCHFyUElV_WPcqrQayN2cf!ZZM5v0st^ literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy7subCARE2Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy7subCARE2Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..c57e9e4a5bdd40e5fc9aab879d69e001a40f52b5 GIT binary patch literal 952 zcmXqLV%}oV#589CGZP~d6CB(+$<$iUFhP{}|6q<~pivM9B%G_xqxwW1&=GdZ&) zARkConkzUv8pw(B8X6cF0-=Smfq_AkIIppRp^-6+YY;)Aof-ye5If~@*jZef&Dr?uz4I7+h zb^J2xe0?yp@n%48T#WFd>#pTmk^3U&J&_cezP>D(Tfp<;1L?rkf7`B}FXhUfWO(WI z9$|Xz4)H-9z6TW zyr}=kyL%@d-Y#M1)_$rnRe5q^fxhJ|z8~oy772Zue3hMvnUR5UaburBW4D1kFid5Y zStJa^8bopor!$%=+`Dc1lq)kLvLoe;;yEvHN|5Da5n~Z~9;4b_48r5-#2t zBJ%%eeSo;^g)IVH>(`X9EQw?mF-X#r=A5zA)8Y0G|7+sk-`|e3s12-ePu;ugm(7wj zN@t~h{yltT_2=rX+4)yHlBOQ`Dro=YrWA{!cfy8O_crgCaK-3_b#(de^~p`TA{;); z-1fZwGx^%LqDvF5>92omKCdx;V^5sve$(m6QlD@8mClpx7LM6=jH!|Du>B$y-U};( z#cVq~o~M+tMW0hv`q=CIKxn#r;N9drr+fiFndmYH&K9F%c2W{^CR(367A_`zK}w!0 eTKJIp#FEFFRWlseg#G=3ufM;yc-5Jm2~GedqGoyk literal 0 HcmV?d00001 diff --git a/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy7subsubCARE2RE4Cert.crt b/src/crypto/x509/testdata/nist-pkits/certs/requireExplicitPolicy7subsubCARE2RE4Cert.crt new file mode 100644 index 0000000000000000000000000000000000000000..343efa5ec2d0aa5aa4d9410cd6c1f5467b54a0b6 GIT binary patch literal 964 zcmXqLVm@Hd#I#}oGZP~d6CB(+$<$iUFhP{TkCq<~piz9_Y@G_xqxwW1&=GdZ&) zARkConky8SCOJC>xf&VBiSrs77#ISfg|UHwL6kVJv4NqHF^p>vN21Mo209R%RdL%4 zvpmSv#Gr{$3E8uZtPIRejQk8haW1ANMn;AWi$1Sx#FS1lczVHoFnz)3yb9B#?%Jg;~H}o zrQJ?QslLoqYG#v@9mTHs?t@5rRpMpF>taWHZf!gqz3fDv@t%~LsObkT9Te#bV*Pi_ zsle;1pWl6+8~ZhF59;eQ&*ayUi3nIN^tbz>!UkQKi;A_XjHq-%Zz#Td$FJ=y7h^o`bT!rr&2CSFc>b(~_|K z*Y|(rdsZBtdf-szly$}r^zZF0e7=6_vL`R@Z&(+v8B(bKzM6@dk%4h>W1m4|w}Ct` zWM!3EBn-qFM4rc}_SLQODQ~Vm{3`R>@kJ&NO(MamLY9w3j722xe=kRO+P~RLtAD2$ zr@msI>M>=80Ut;|KO^IR78YPSV>1v3@fBDE4EPLq*tinfJQ!1f;s%Tc{2&QokU~}i zW*`L-P=N|GFtQ*=88CeUql}S(P3VjBU$6T=a>^IaeQCHP>*b8c8zR``tz4=LnHsxd zpX)5T#&^x#GiHm9!%LPWyXu>#JieIpEote`Z7f^YAAeH#f&2PnwRgXE1vtcB)c>G6 z^RB`C>wSM-X2rjFrM-AXqe|qosP`Tbu7~TKKTpWE@ZVt6FuTd(v)Dw9SK6FWTWmNE z9+a5%;q)BKQ%18gCPbhA;Fz+#=1B52j&dFsm*jtwbzjVWHmCi{GI8OpyG!_fXB(+$<$iUFhP|rXIq<~piwJ5c)G_xqxwW1&=GdZ&) zARkConky8SCIOMNW00#+kgJJ-oH(zcfq@|qS{NG`7(|Kl8XFiI8N;{+i6q)@XrK?V zUjwiG$WCZtR6_POBP#=Q6C*!^K@%evQxhX2!|oMP6He$(xzO-yLuUljpFK&nQ{P!f zc-X!Dz_+BphjI34$&PikhTY$7ZEn;pjXB1d7N5WUuZ0|kzu?BW$dC2j#}=MnU_EK} zB=#RWwr&4BSz*R1{hbL`#{9hh)J=o9Z&bgVS6lUv@4?o>DRT^UADoDjT~xYF&FI`h zwlzz(Udey7EP55U!^zb$o5b!+OU_N_<(rpyQ_Eq7$9e5zi>FNU;9R1#^-Hak(ZVy#_tc*Mc*^^1s&m@R z;spNlHv3doJ2;BnXZk1}>p4m1YO`HiMNo;nn(J@-r1+0flMLFKm>C%u7uOh68OQ^J zR#urs!a%G+B=3JOM|ax4*-NW`rx>TcVxHv4~Xb1ST4au3e*(y>g$m zwS?59RrM|gd?5Y&jEw(TSb)im%|IN)S6~q^;4|Q1<4S1rU`z#y8!#I1gCvAO3Rw-9 zffRE508=F}ei#|%%;d>0&i%Y`Uf9NkySlC$hGh%#K5C7!l=ERZbm-ZfH&2chDRJJq zZMNaSbN@N(mNFKa)tZM1#P!P0$>5zhrD;icZLWj$zWbf}(gMF~wktFK&#iU)-22fe z#rZ(p&Y;dxXWigi7X%CbC2wys=rs#^^Z84Ln6zY8u;|>Ms>`;!O(f