Documentation
¶
Overview ¶
Package testonly contains code and data that should only be used by tests. Production code MUST NOT depend on anything in this package. This will be enforced by tools where possible.
As an example PEM encoded test certificates and helper functions to decode them are suitable candidates for being placed in testonly.
This package should only contain CT specific code and certificate data.
Index ¶
Constants ¶
View Source
const CACertPEM = `` /* 1038-byte string literal not displayed */
CACertPEM is a valid test CA certificate.
Data:
Version: 3 (0x2)
Serial Number: 0 (0x0)
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=GB, O=Certificate Transparency CA, ST=Wales, L=Erw Wen
Validity
Not Before: Jun 1 00:00:00 2012 GMT
Not After : Jun 1 00:00:00 2022 GMT
Subject: C=GB, O=Certificate Transparency CA, ST=Wales, L=Erw Wen
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:d5:8a:68:53:62:10:a2:71:19:93:6e:77:83:21:
18:1c:2a:40:13:c6:d0:7b:8c:76:eb:91:57:d3:d0:
fb:4b:3b:51:6e:ce:cb:d1:c9:8d:91:c5:2f:74:3f:
ab:63:5d:55:09:9c:d1:3a:ba:f3:1a:e5:41:44:24:
51:a7:4c:78:16:f2:24:3c:f8:48:cf:28:31:cc:e6:
7b:a0:4a:5a:23:81:9f:3c:ba:37:e6:24:d9:c3:bd:
b2:99:b8:39:dd:fe:26:31:d2:cb:3a:84:fc:7b:b2:
b5:c5:2f:cf:c1:4f:ff:40:6f:5c:d4:46:69:cb:b2:
f7:cf:df:86:fb:6a:b9:d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9D:88:0D:C8:73:E6:54:D4:F8:0D:D8:E6:B0:C1:24:B4:47:C3:55
X509v3 Authority Key Identifier:
keyid:5F:9D:88:0D:C8:73:E6:54:D4:F8:0D:D8:E6:B0:C1:24:B4:47:C3:55
DirName:/C=GB/O=Certificate Transparency CA/ST=Wales/L=Erw Wen
serial:00
X509v3 Basic Constraints:
CA:TRUE
Signature Algorithm: sha1WithRSAEncryption
06:08:cc:4a:6d:64:f2:20:5e:14:6c:04:b2:76:f9:2b:0e:fa:
94:a5:da:f2:3a:fc:38:06:60:6d:39:90:d0:a1:ea:23:3d:40:
29:57:69:46:3b:04:66:61:e7:fa:1d:17:99:15:20:9a:ea:2e:
0a:77:51:76:41:12:27:d7:c0:03:07:c7:47:0e:61:58:4f:d7:
33:42:24:72:7f:51:d6:90:bc:47:a9:df:35:4d:b0:f6:eb:25:
95:5d:e1:89:3c:4d:d5:20:2b:24:a2:f3:e4:40:d2:74:b5:4e:
1b:d3:76:26:9c:a9:62:89:b7:6e:ca:a4:10:90:e1:4f:3b:0a:
94:2e
View Source
const CTLogIDBase64 string = "fMW69rPsQG6J9V1zJeIvei6q+GGYrNxe84y5e0/KaEw="
CTLogIDBase64 is the log ID that corresponds to the test keys
View Source
const CTLogKeyPassword string = "napkin"
CTLogKeyPassword is the password for the test key
View Source
const CTLogPrivateKeyPEM string = `` /* 295-byte string literal not displayed */
CTLogPrivateKeyPEM is an ECDSA private key for log tests
View Source
const CTLogPublicKeyPEM string = `` /* 178-byte string literal not displayed */
CTLogPublicKeyPEM is the corresponding public key
View Source
const FakeCACertPEM = `` /* 1334-byte string literal not displayed */
FakeCACertPEM is a test CA cert for testing.
Data:
Version: 3 (0x2)
Serial Number:
b6:31:d2:ac:21:ab:65:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=London, L=London, O=Google, OU=Eng, CN=FakeCertificateAuthority
Validity
Not Before: Jul 11 12:23:26 2016 GMT
Not After : Jul 11 12:23:26 2017 GMT
Subject: C=GB, ST=London, L=London, O=Google, OU=Eng, CN=FakeCertificateAuthority
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a5:41:9a:7a:2d:98:a3:b5:78:6f:15:21:db:0c:
c1:0e:a1:f8:26:f5:b3:b2:67:85:dc:a1:e6:b7:83:
6d:da:63:da:d0:f6:a3:ff:bc:43:f5:2b:9f:00:19:
6e:6b:60:4b:43:20:6e:e2:cb:2e:b6:65:ed:9b:dc:
80:c3:e1:5a:96:af:60:78:0e:0e:fb:8f:ea:3e:3d:
c9:67:8f:a4:57:1c:ba:e4:f3:37:a9:2f:dd:11:9d:
10:5d:e5:d6:ef:d4:3b:06:d9:34:43:42:bb:bb:be:
43:40:2b:e3:b6:d1:b5:6c:58:12:34:96:14:d4:fc:
49:79:c5:26:8c:24:7d:b3:12:f5:f6:3e:b7:41:46:
6b:6d:3a:41:fd:7c:e3:b5:fc:96:6c:c6:cc:ad:8d:
48:09:73:44:64:ea:4f:17:1d:0a:4b:14:5a:19:07:
4a:32:0f:41:2e:e4:85:bd:a1:e1:9b:de:63:7c:3b:
bc:ec:aa:93:2a:0b:a8:c7:24:34:54:42:38:a5:d1:
0c:c4:f9:9e:7c:69:42:71:77:d7:95:aa:bb:13:3d:
f3:cc:c7:5d:b3:fd:76:25:25:e3:da:14:0e:59:81:
e8:2c:58:e8:09:29:7d:22:02:91:95:81:eb:55:6f:
2f:17:b9:af:4a:f3:84:8b:24:6e:ea:14:6b:bb:90:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:03:04
X509v3 Authority Key Identifier:
keyid:01:02:03:04
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:10
X509v3 Key Usage: critical
Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Certificate Sign, CRL Sign, Encipher Only, Decipher Only
Signature Algorithm: sha256WithRSAEncryption
92:be:33:eb:d5:d4:32:e7:9e:4e:65:2a:e8:3f:67:b8:f4:d7:
34:ab:95:11:6a:5d:ba:fd:57:9b:94:6e:8d:20:be:fb:7a:e1:
49:ca:39:ea:92:d3:81:5a:b1:87:a3:9f:50:a4:e0:1e:11:de:
c4:d1:07:a1:ca:d1:97:1a:92:bd:73:9a:11:ec:6a:9a:52:11:
2d:40:e1:3b:4f:3c:1f:81:3f:4c:ab:6a:02:84:4f:8b:18:36:
7a:cc:5c:a9:0e:25:2b:cd:57:53:88:d9:eb:82:b1:ce:62:76:
56:d4:23:9e:01:b3:6d:2b:49:ea:d4:3a:c2:f5:76:a7:b3:2d:
24:97:6f:b4:1c:74:6b:95:85:f6:b5:41:56:82:3c:ed:be:96:
1e:5e:6a:2d:7b:f7:fd:7d:6e:3f:fb:c2:ec:61:b3:7c:7f:3b:
f5:9c:64:61:5f:02:93:87:cd:81:f9:7e:53:3e:c1:f5:79:85:
f4:41:87:c7:ca:bd:af:ab:2b:a4:aa:a8:1d:2c:50:ad:23:8f:
db:13:1d:71:8a:85:bd:ac:59:6c:c4:53:c5:71:0c:90:91:f3:
0b:41:ef:da:6e:27:bb:09:57:9c:97:b9:d7:fc:20:96:c5:75:
96:ce:2e:6c:a8:b6:6e:b0:4d:0f:3e:01:95:ea:8b:cd:ae:47:
d0:d9:01:b7
View Source
const FakeIntermediateCertPEM = `` /* 1314-byte string literal not displayed */
FakeIntermediateCertPEM is a test intermediate CA cert.
Data:
Version: 3 (0x2)
Serial Number: 4792439526061490155 (0x42822a5b866fbfeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=London, L=London, O=Google, OU=Eng, CN=FakeCertificateAuthority
Validity
Not Before: May 13 14:26:44 2016 GMT
Not After : Jul 12 14:26:44 2019 GMT
Subject: C=GB, ST=London, L=London, O=Google, OU=Eng, CN=FakeIntermediateAuthority
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:ca:a4:0c:7a:6d:e9:26:22:d4:67:19:c8:29:40:
c6:bd:cb:44:39:e7:fa:84:01:1d:b3:04:15:48:37:
fa:55:d5:98:4b:2a:ff:14:0e:d6:ce:27:6b:29:d5:
e8:8d:39:eb:be:97:be:53:21:d2:a3:f2:27:ef:46:
68:1c:6f:84:77:85:b4:68:78:7a:d4:3d:50:49:89:
8f:9e:6b:4a:ce:74:c0:0f:c8:68:38:7e:ae:82:ae:
91:0c:6d:87:24:c4:48:f3:e0:8e:a8:3e:0c:f8:e1:
e8:7f:a1:dd:29:f4:d0:eb:3a:b2:38:77:0f:1a:4e:
a6:14:c4:b1:db:5b:ed:f9:a4:f0:9d:1e:d8:a8:d0:
40:28:d6:fc:69:44:0b:37:37:e7:d6:fd:29:b0:70:
36:47:00:89:81:5a:c9:51:cf:2d:a0:80:76:fc:d8:
57:28:87:81:71:e4:10:4b:39:16:51:f2:85:ed:a0:
34:41:bf:f3:52:28:f1:cd:c4:dc:31:f9:26:14:fd:
b6:65:51:2f:76:e9:82:94:fc:2a:be:1a:a0:58:54:
d8:b5:de:e3:96:08:07:50:3d:0e:35:26:e5:3a:c7:
67:e8:8d:b6:f1:34:61:f6:0c:47:d2:fd:0b:51:cf:
a6:99:97:d4:26:a1:12:14:dd:a2:0e:e5:68:4d:75:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:01:02:03:04
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 Key Usage: critical
Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Certificate Sign, CRL Sign, Encipher Only, Decipher Only
Signature Algorithm: sha256WithRSAEncryption
01:e2:3a:0c:00:bc:4c:e1:ac:d3:10:54:0c:fc:6b:e4:ac:c8:
c2:00:05:74:39:3f:c5:9b:25:e1:e3:90:88:a9:13:8f:b9:66:
99:2b:65:55:ea:f6:9f:30:39:d9:18:9c:e1:f1:e1:63:62:f4:
f5:46:41:b2:c6:f4:8b:9f:87:d7:e9:93:c7:32:c9:15:83:8b:
e5:76:d3:f0:8d:36:d6:b0:32:ad:c2:95:5d:dd:58:2f:7c:4e:
3e:16:5f:f0:57:0c:27:98:da:32:b8:8d:81:95:f9:db:38:dc:
76:15:d1:3a:01:9a:fb:eb:71:ca:bf:53:bc:d8:30:61:5c:42:
22:81:0a:5c:f9:6d:31:3e:18:cb:eb:65:67:0e:e4:0f:cb:87:
7f:22:d9:84:85:d6:2f:12:7c:35:67:00:e0:65:02:06:66:96:
57:21:78:7a:46:b1:67:d2:9d:db:88:96:55:2f:4e:c4:6f:10:
8b:1a:6a:a7:d5:2e:5e:50:a5:15:c1:3a:af:2d:6e:32:bc:e7:
fd:a0:e9:e6:ab:d6:8c:4f:84:9d:70:f6:17:6c:f9:64:c5:5e:
49:87:91:6b:ca:25:e6:d8:d7:7b:77:39:f4:a3:03:28:5a:45:
2b:7c:85:dc:c3:cc:74:c5:c2:33:e3:1d:3f:21:e9:d5:3b:fe:
13:1d:91:48
View Source
const FakeIntermediateWithInvalidNameConstraintsCertPEM = `` /* 830-byte string literal not displayed */
FakeIntermediateWithInvalidNameConstraintsCertPEM is an intermediate CA cert that includes a critical NameConstraints extension that disallows the leaf below; based on ../../testdata/int-ca.cert.
Data:
Version: 3 (0x2)
Serial Number: 1111638594 (0x42424242)
Signature Algorithm: ecdsa-with-SHA256
Issuer: C=GB, ST=London, L=London, O=Google, OU=Eng, CN=FakeCertificateAuthority
Validity
Not Before: Feb 13 11:42:37 2018 GMT
Not After : Dec 23 11:42:37 2027 GMT
Subject: C=GB, ST=London, L=London, O=Google, OU=Eng, CN=FakeIntermediateAuthority
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:f1:bf:2d:e8:8c:66:40:e3:a8:d1:54:e0:42:49:
02:cb:dd:47:08:85:c2:67:41:4c:eb:f7:87:cd:8d:
a3:09:c8:18:cc:2e:30:53:16:32:aa:d5:9c:08:73:
c6:76:fa:fa:3a:38:e9:34:35:9c:51:d1:ee:12:81:
5d:98:5f:5d:5d
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:03:04
X509v3 Authority Key Identifier:
keyid:01:02:03:04
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:10
X509v3 Key Usage: critical
Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Certificate Sign, CRL Sign, Encipher Only, Decipher Only
X509v3 Name Constraints:
Permitted:
DNS:.xyzzy.pem
Signature Algorithm: ecdsa-with-SHA256
30:45:02:20:3f:0a:40:60:b6:9e:ea:a5:cd:eb:e4:0e:7c:bc:
40:22:b2:e2:14:07:e8:ab:fa:4a:85:2a:41:18:20:f0:31:1a:
02:21:00:a4:64:91:6d:79:47:79:0f:16:06:62:a9:88:8b:92:
6d:40:fa:54:cb:c9:4f:bc:3f:53:27:e5:cd:12:16:53:7a
View Source
const FakeIntermediateWithNameConstraintsCertPEM = `` /* 826-byte string literal not displayed */
FakeIntermediateWithNameConstraintsCertPEM is an intermediate CA cert that includes a critical NameConstraints extension that disallows the leaf below; based on ../../testdata/int-ca.cert.
Data:
Version: 3 (0x2)
Serial Number: 1111638594 (0x42424242)
Signature Algorithm: ecdsa-with-SHA256
Issuer: C=GB, ST=London, L=London, O=Google, OU=Eng, CN=FakeCertificateAuthority
Validity
Not Before: Feb 13 11:33:08 2018 GMT
Not After : Dec 23 11:33:08 2027 GMT
Subject: C=GB, ST=London, L=London, O=Google, OU=Eng, CN=FakeIntermediateAuthority
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:f1:bf:2d:e8:8c:66:40:e3:a8:d1:54:e0:42:49:
02:cb:dd:47:08:85:c2:67:41:4c:eb:f7:87:cd:8d:
a3:09:c8:18:cc:2e:30:53:16:32:aa:d5:9c:08:73:
c6:76:fa:fa:3a:38:e9:34:35:9c:51:d1:ee:12:81:
5d:98:5f:5d:5d
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:03:04
X509v3 Authority Key Identifier:
keyid:01:02:03:04
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:10
X509v3 Key Usage: critical
Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Certificate Sign, CRL Sign, Encipher Only, Decipher Only
X509v3 Name Constraints:
Permitted:
DNS:.csr.pem
Signature Algorithm: ecdsa-with-SHA256
30:46:02:21:00:fd:11:41:d8:1f:2b:b5:49:8e:27:6e:70:93:
2c:f1:c2:e7:b0:a2:40:e2:c6:89:45:fc:99:a5:9b:dc:21:fb:
f6:02:21:00:b7:4f:98:bf:1f:dc:92:e7:db:7c:aa:33:7a:40:
36:1d:58:19:aa:96:3d:5e:5b:46:5f:47:f6:e3:7d:75:19:4f
View Source
const FakeIntermediateWithPolicyConstraintsCertPEM = `` /* 814-byte string literal not displayed */
FakeIntermediateWithPolicyConstraintsCertPEM is an intermediate CA cert that includes a critical PolicyConstraints extension; based on ../../testdata/int-ca.cert.
Data:
Version: 3 (0x2)
Serial Number: 1111638594 (0x42424242)
Signature Algorithm: ecdsa-with-SHA256
Issuer: C=GB, ST=London, L=London, O=Google, OU=Eng, CN=FakeCertificateAuthority
Validity
Not Before: Feb 13 09:33:59 2018 GMT
Not After : Dec 23 09:33:59 2027 GMT
Subject: C=GB, ST=London, L=London, O=Google, OU=Eng, CN=FakeIntermediateAuthority
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:f1:bf:2d:e8:8c:66:40:e3:a8:d1:54:e0:42:49:
02:cb:dd:47:08:85:c2:67:41:4c:eb:f7:87:cd:8d:
a3:09:c8:18:cc:2e:30:53:16:32:aa:d5:9c:08:73:
c6:76:fa:fa:3a:38:e9:34:35:9c:51:d1:ee:12:81:
5d:98:5f:5d:5d
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:03:04
X509v3 Authority Key Identifier:
keyid:01:02:03:04
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:10
X509v3 Policy Constraints: critical
Require Explicit Policy:0
X509v3 Key Usage: critical
Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Certificate Sign, CRL Sign, Encipher Only, Decipher Only
Signature Algorithm: ecdsa-with-SHA256
30:44:02:20:4c:aa:27:8f:d9:83:32:76:40:17:a1:a8:00:1d:
bc:d1:45:b2:53:c6:47:77:48:f1:c3:89:68:5d:f4:7f:5c:52:
02:20:39:68:40:5c:fd:f0:2a:e2:3f:34:45:b3:19:2d:e3:4d:
58:cd:76:42:19:09:cf:5c:1c:e5:f1:71:e0:39:62:b9
View Source
const FakeRootCACertPEM = `` /* 794-byte string literal not displayed */
FakeRootCACertPEM is a root CA taken from ../../testdata/fake-ca.cert.
Data:
Version: 3 (0x2)
Serial Number: 67554046 (0x406cafe)
Signature Algorithm: ecdsa-with-SHA256
Issuer: C=GB, ST=London, L=London, O=Google, OU=Eng, CN=FakeCertificateAuthority
Validity
Not Before: Dec 7 15:13:36 2016 GMT
Not After : Dec 5 15:13:36 2026 GMT
Subject: C=GB, ST=London, L=London, O=Google, OU=Eng, CN=FakeCertificateAuthority
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:f2:d3:07:ef:7e:df:cf:ce:f4:f4:0a:5b:bc:9e:
3f:cb:1c:fd:0c:46:dc:85:fb:c1:f6:d3:b2:ba:1d:
51:f1:98:6c:48:a8:15:46:45:63:ca:df:d6:c9:ac:
cf:60:3b:c7:4e:dd:b8:d2:16:ab:a0:09:24:1d:09:
66:1e:4d:eb:a1
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:03:04
X509v3 Authority Key Identifier:
keyid:01:02:03:04
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:10
X509v3 Key Usage: critical
Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Certificate Sign, CRL Sign, Encipher Only, Decipher Only
Signature Algorithm: ecdsa-with-SHA256
30:46:02:21:00:a6:28:49:39:43:6f:80:e4:43:a6:1e:3b:aa:
89:5e:c2:25:60:2a:e1:39:bd:55:43:ae:4d:5c:a9:a6:ef:ac:
65:02:21:00:c9:c5:08:c6:59:93:b4:86:70:a5:6b:54:2b:5b:
fc:0c:88:6b:b0:23:07:2b:c7:0c:27:de:87:2d:96:80:d5:56
View Source
const LeafCertPEM = `` /* 790-byte string literal not displayed */
LeafCertPEM is a leaf cert signed by the key in:
- FakeIntermediateWithPolicyConstraintsCertPEM
- FakeIntermediateWithNameConstraintsCertPEM
- FakeIntermediateWithInvalidNameConstraintsCertPEM
adapted from ../../testdata/leaf01.cert.
Data:
Version: 3 (0x2)
Serial Number: 3735928559 (0xdeadbeef)
Signature Algorithm: ecdsa-with-SHA256
Issuer: C=GB, ST=London, L=London, O=Google, OU=Eng, CN=FakeIntermediateAuthority
Validity
Not Before: Feb 13 11:38:39 2018 GMT
Not After : Mar 28 11:38:39 2025 GMT
Subject: C=GB, ST=London, O=Google, OU=Eng, CN=leaf01.csr.pem
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:eb:37:4e:52:45:9c:46:d5:a8:b8:c5:ed:58:b9:
30:29:a6:70:8a:69:a0:26:5c:9e:2f:6e:b8:6b:23:
6c:84:e1:46:3a:98:36:82:44:a5:8a:17:8b:41:82:
32:f4:2d:e0:08:5b:7e:07:38:52:fc:47:56:28:27:
9b:ed:60:8b:ac
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B2:2F:41:FC:11:9A:D3:8D:A6:85:80:84:86:AE:7E:73:2E:69:5D
X509v3 Authority Key Identifier:
keyid:01:02:03:04
X509v3 Key Usage: critical
Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Encipher Only, Decipher Only
X509v3 Subject Alternative Name:
DNS:leaf01.csr.pem
Signature Algorithm: ecdsa-with-SHA256
30:46:02:21:00:b5:2a:f3:39:1e:06:b7:77:b2:ad:a8:83:1b:
83:38:64:5e:3a:25:51:e9:57:1f:00:53:72:db:08:11:65:3d:
f4:02:21:00:a1:4e:5d:b5:9a:8b:10:6e:15:a3:2a:bd:d9:80:
91:96:7c:1a:4f:8f:91:dc:44:9f:13:ff:57:f0:5e:ce:32:34
View Source
const LeafSignedByFakeIntermediateCertPEM = `` /* 2801-byte string literal not displayed */
LeafSignedByFakeIntermediateCertPEM is a test cert signed by the intermediate CA.
Data:
Version: 3 (0x2)
Serial Number: 4792439526061490155 (0x42822a5b866fbfeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=GB, ST=London, L=London, O=Google, OU=Eng, CN=FakeIntermediateAuthority
Validity
Not Before: May 13 14:26:44 2016 GMT
Not After : Jul 12 14:26:44 2019 GMT
Subject: C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.google.com, SN=RFC5280 s4.2.1.9 'The pathLenConstraint field ... gives the maximum number of non-self-issued intermediate certificates that may follow this certificate in a valid certification path.', GN=Intermediate CA cert used to sign
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
04:c4:09:39:84:f5:15:8d:12:54:b2:02:9c:f9:01:
e2:6d:35:47:d4:0d:d0:11:61:66:09:35:1d:cb:12:
14:95:b2:3f:ff:35:bd:22:8e:4d:fc:38:50:2d:22:
d6:98:1e:ca:a0:23:af:a4:96:7e:32:d1:82:5f:31:
57:fb:28:ff:37
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Subject Alternative Name:
DNS:*.google.com, DNS:*.android.com, DNS:*.appengine.google.com, DNS:*.cloud.google.com,
DNS:*.google-analytics.com, DNS:*.google.ca, DNS:*.google.cl, DNS:*.google.co.in, DNS:*.google.co.jp,
DNS:*.google.co.uk, DNS:*.google.com.ar, DNS:*.google.com.au, DNS:*.google.com.br, DNS:*.google.com.co,
DNS:*.google.com.mx, DNS:*.google.com.tr, DNS:*.google.com.vn, DNS:*.google.de, DNS:*.google.es,
DNS:*.google.fr, DNS:*.google.hu, DNS:*.google.it, DNS:*.google.nl, DNS:*.google.pl, DNS:*.google.pt,
DNS:*.googleadapis.com, DNS:*.googleapis.cn, DNS:*.googlecommerce.com, DNS:*.googlevideo.com,
DNS:*.gstatic.cn, DNS:*.gstatic.com, DNS:*.gvt1.com, DNS:*.gvt2.com, DNS:*.metric.gstatic.com,
DNS:*.urchin.com, DNS:*.url.google.com, DNS:*.youtube-nocookie.com, DNS:*.youtube.com,
DNS:*.youtubeeducation.com, DNS:*.ytimg.com, DNS:android.clients.google.com, DNS:android.com, DNS:g.co,
DNS:goo.gl, DNS:google-analytics.com, DNS:google.com, DNS:googlecommerce.com, DNS:urchin.com,
DNS:youtu.be, DNS:youtube.com, DNS:youtubeeducation.com
X509v3 Key Usage:
Digital Signature
Authority Information Access:
CA Issuers - URI:http://pki.google.com/GIAG2.crt
OCSP - URI:http://clients1.google.com/ocsp
X509v3 Subject Key Identifier:
DB:F4:6E:63:EE:E2:DC:BE:BF:38:60:4F:98:31:D0:64:44:F1:63:D8
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.11129.2.5.1
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://pki.google.com/GIAG2.crl
Signature Algorithm: sha256WithRSAEncryption
0e:a6:6f:79:7d:38:4b:60:f0:c1:76:9c:4e:92:f5:24:ce:12:
34:72:94:95:8d:cf:1c:0c:d6:78:6b:ee:66:2b:50:36:22:7a:
be:ff:22:c7:dd:93:2c:40:83:2f:a0:37:29:8f:bb:98:22:bf:
8e:c6:6c:b4:8b:8f:e9:1e:0f:bd:8a:df:df:f5:c9:aa:79:ac:
00:e6:ca:a6:1a:74:8e:67:f9:5f:09:82:3c:f9:b4:5b:30:85:
0b:ae:28:c2:b8:9c:23:7c:6a:59:66:ca:8e:bd:20:6e:20:e4:
b3:46:f8:06:56:99:5c:b3:47:62:b6:e4:f6:92:10:85:ae:46:
e5:c1:af:c1:a8:8a:b3:b6:f3:fb:2e:e1:26:56:98:e4:aa:de:
29:0b:71:ef:0f:45:d4:c6:ce:4f:21:d6:59:18:89:df:7a:ac:
a6:93:97:de:45:e5:87:06:e3:c7:a4:f2:14:39:b2:b1:99:0b:
7e:85:cc:3a:62:c1:c4:fb:40:7c:e1:7b:71:f4:13:1e:e2:aa:
94:7e:ba:a6:b5:65:e7:f6:e9:c1:c3:1a:92:62:c0:aa:c4:74:
29:43:ee:f4:a6:6b:81:c6:50:7d:b3:a2:d2:b4:8c:c4:f6:cc:
9a:0e:65:32:8f:14:65:8c:a0:30:20:d5:7a:cf:48:fb:84:a4:
3a:30:fa:44
View Source
const PrecertPEMValid = `` /* 1058-byte string literal not displayed */
PrecertPEMValid is a test certificate containing a valid CT precertificate extension.
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=GB, O=Certificate Transparency CA, ST=Wales, L=Erw Wen
Validity
Not Before: Jun 1 00:00:00 2012 GMT
Not After : Jun 1 00:00:00 2022 GMT
Subject: C=GB, O=Certificate Transparency, ST=Wales, L=Erw Wen
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:be:ef:98:e7:c2:68:77:ae:38:5f:75:32:5a:0c:
1d:32:9b:ed:f1:8f:aa:f4:d7:96:bf:04:7e:b7:e1:
ce:15:c9:5b:a2:f8:0e:e4:58:bd:7d:b8:6f:8a:4b:
25:21:91:a7:9b:d7:00:c3:8e:9c:03:89:b4:5c:d4:
dc:9a:12:0a:b2:1e:0c:b4:1c:d0:e7:28:05:a4:10:
cd:9c:5b:db:5d:49:27:72:6d:af:17:10:f6:01:87:
37:7e:a2:5b:1a:1e:39:ee:d0:b8:81:19:dc:15:4d:
c6:8f:7d:a8:e3:0c:af:15:8a:33:e6:c9:50:9f:4a:
05:b0:14:09:ff:5d:d8:7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:31:54:1A:F2:5C:05:FF:D8:65:8B:68:43:79:4F:5E:90:36:F7:B4
X509v3 Authority Key Identifier:
keyid:5F:9D:88:0D:C8:73:E6:54:D4:F8:0D:D8:E6:B0:C1:24:B4:47:C3:55
DirName:/C=GB/O=Certificate Transparency CA/ST=Wales/L=Erw Wen
serial:00
X509v3 Basic Constraints:
CA:FALSE
CT Precertificate Poison: critical
..
Signature Algorithm: sha1WithRSAEncryption
02:a1:c3:9e:01:5a:f5:4d:ff:02:3c:33:60:87:5f:ff:34:37:
55:2f:1f:09:01:bd:c2:54:31:5f:33:72:b7:23:fb:15:fb:ce:
cc:4d:f4:71:a0:ce:4d:8c:54:65:5d:84:87:97:fb:28:1e:3d:
fa:bb:46:2d:2c:68:4b:05:6f:ea:7b:63:b4:70:ff:16:6e:32:
d4:46:06:35:b3:d2:bc:6d:a8:24:9b:26:30:e7:1f:c3:4f:08:
f2:3d:d4:ee:22:8f:8f:74:f6:3d:78:63:11:dd:0a:58:11:40:
5f:90:6c:ca:2c:2d:3e:eb:fc:81:99:64:eb:d8:cf:7c:08:86:
3f:be
View Source
const RealPrecertIntermediatePEM = `` /* 1550-byte string literal not displayed */
RealPrecertIntermediatePEM is the intermediate issuer for RealPrecertWithEKUPEM, below.
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:e3:b4:9d:77:cd:f4:0c:06:19:16:b6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: OU = GlobalSign Root CA - R2, O = GlobalSign, CN = GlobalSign
Validity
Not Before: Jun 15 00:00:42 2017 GMT
Not After : Dec 15 00:00:42 2021 GMT
Subject: C = US, O = Google Trust Services, CN = GTS CA 1D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:7b:e1:e1:d7:3f:1c:91:72:ff:f9:10:cd:
87:15:79:74:b7:3e:47:8b:b2:61:55:fd:0c:36:c6:
7e:77:42:3a:b2:fa:52:5b:0b:71:81:d6:4d:d5:e9:
2b:24:4d:23:5e:8b:2b:72:5f:21:55:b5:29:ef:44:
cb:eb:82:52:ab:3e:27:a4:92:49:41:4a:de:a8:dd:
31:e0:3c:df:6d:7a:4d:2d:d6:6d:09:b0:0e:e3:61:
f2:b2:fe:90:6c:5a:7b:10:64:49:b4:0b:3c:08:f2:
ea:79:0c:6c:a6:1a:89:6a:56:32:a0:29:a2:30:82:
8f:81:51:0c:f3:a2:b9:d9:75:b9:22:9e:27:14:ba:
4a:2f:2c:63:58:87:f1:5d:10:e6:5f:91:bb:b9:5b:
cc:47:e2:1e:75:b6:8c:8f:cc:75:5d:57:05:e7:82:
c6:84:0e:74:72:2a:cb:3b:55:f5:6e:70:eb:66:69:
c3:24:bb:38:93:35:9b:68:61:2f:9b:d6:ae:a6:77:
72:7c:71:48:58:33:10:af:e9:80:82:1d:b5:07:40:
1b:f6:3d:ec:a2:ad:47:9d:b4:94:29:34:b3:8c:2f:
cd:25:03:58:35:c0:25:a4:55:5f:e1:b3:07:56:3d:
c8:d0:63:b8:20:fb:8c:1d:43:2c:f8:f9:a9:d5:ec:
6f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Certificate Sign, CRL Sign
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 Subject Key Identifier:
B1:DD:32:5D:E8:B7:37:72:D2:CE:5C:CE:26:FE:47:79:E2:01:08:E9
X509v3 Authority Key Identifier:
keyid:9B:E2:07:57:67:1C:1E:C0:6A:06:DE:59:B4:9A:2D:DF:DC:19:86:2E
Authority Information Access:
OCSP - URI:http://ocsp.pki.goog/gsr2
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.pki.goog/gsr2/gsr2.crl
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
CPS: https://pki.goog/repository/
Signature Algorithm: sha256WithRSAEncryption
71:4a:c4:c3:23:ae:f7:e3:b2:02:79:8c:13:e8:53:8e:80:c5:
f0:e3:ef:71:60:a9:a9:7b:34:65:85:34:bd:47:3b:03:57:16:
00:99:48:3a:e0:e0:f0:ea:cd:b6:48:3c:d5:ab:72:f0:d0:1b:
cb:64:2d:3b:0d:74:68:d7:74:88:31:7c:6a:ba:0e:f0:8c:4d:
78:ce:da:10:f4:8a:96:45:97:a9:97:ad:c5:35:1a:18:64:e8:
93:b6:0d:9d:1f:b9:5e:1d:80:ea:e7:5b:9c:8e:ae:0e:a6:84:
d2:d1:17:ce:b3:fb:f6:81:4f:3c:e6:68:9f:cf:f1:a6:76:c5:
7d:a7:f3:dd:7d:58:0f:e0:f6:61:01:1c:51:8e:76:33:2b:48:
9d:5c:81:51:72:08:17:ba:fd:01:d3:ee:46:f9:f4:b2:68:40:
99:31:01:6c:4f:1b:c6:56:eb:81:73:d2:79:52:05:92:26:5b:
71:cd:9d:c4:d2:ce:23:77:0f:41:7a:69:5e:21:25:c6:f8:b7:
ff:7a:f7:47:de:c2:00:7b:9c:5a:45:9c:2a:4e:46:90:d9:75:
2c:d8:ff:8c:ee:cc:dc:69:eb:6c:e6:15:d0:a3:ff:48:0b:ac:
55:df:df:25:9d:42:b6:51:a3:66:95:60:c5:d0:22:e7:22:7a:
51:a5:cc:87
View Source
const RealPrecertWithEKUPEM = `` /* 1587-byte string literal not displayed */
RealPrecertWithEKUPEM is an actual precertificate containing a valid EKU.
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
9c:a4:07:e2:25:f9:7c:c2:0a:00:00:00:00:20:6e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: C = US, O = Google Trust Services, CN = GTS CA 1D2
Validity
Not Before: Mar 23 12:23:44 2020 GMT
Not After : Jun 21 12:23:44 2020 GMT
Subject: CN = certificate.transparency.dev
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:59:c0:e5:3b:da:3c:bf:04:51:91:eb:9f:
6c:1b:cf:9f:90:dc:22:89:1c:b5:98:24:69:2e:26:
2d:61:92:04:0f:2e:f1:da:ec:ea:3a:d9:cc:3a:82:
e2:b8:3a:7d:6c:79:79:f7:36:c5:52:a4:bb:46:1d:
2f:0b:6c:5f:00:31:af:24:e9:4a:1b:32:63:1a:b5:
c3:28:9c:a7:0a:b5:73:e2:c1:a7:b5:1e:11:ae:cd:
19:79:0c:62:06:cf:80:f0:ed:e2:72:82:bb:b4:84:
0e:9d:c9:7d:3b:fb:4e:05:49:3a:14:0f:86:92:01:
49:52:2c:cc:a0:e1:ef:86:fe:18:00:83:69:6c:90:
c6:7b:a9:42:df:57:9c:7b:61:06:80:23:b2:5f:95:
95:1e:9b:34:6f:ab:a3:21:1b:2b:8e:9f:34:4f:ec:
e8:9a:48:74:81:2f:9b:12:67:54:a1:46:76:96:9a:
1e:9d:c3:ee:bf:6a:e8:49:72:57:28:b1:12:c4:ca:
41:84:96:f7:32:4a:4a:9e:59:2d:48:3e:ac:29:0c:
f4:f4:03:28:33:1a:73:10:48:29:68:12:e3:f9:7e:
f4:5f:01:54:b0:73:c6:a8:72:b6:84:54:05:23:36:
b6:db:3f:d8:e5:27:89:4c:dc:bb:b1:c9:9e:e7:7e:
b0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
B8:E0:AF:4F:7C:48:F3:FF:EB:FC:5E:A5:34:36:2D:56:54:AC:97:6B
X509v3 Authority Key Identifier:
keyid:B1:DD:32:5D:E8:B7:37:72:D2:CE:5C:CE:26:FE:47:79:E2:01:08:E9
Authority Information Access:
OCSP - URI:http://ocsp.pki.goog/gts1d2
CA Issuers - URI:http://pki.goog/gsr2/GTS1D2.crt
X509v3 Subject Alternative Name:
DNS:certificate.transparency.dev
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
Policy: 1.3.6.1.4.1.11129.2.5.3
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.pki.goog/GTS1D2.crl
CT Precertificate Poison: critical
NULL
Signature Algorithm: sha256WithRSAEncryption
51:fe:93:53:7a:e1:6d:34:ce:a2:1d:4d:32:c5:39:a5:e8:1e:
ee:97:56:33:84:5a:5e:5c:be:13:64:92:66:df:a7:79:82:c8:
35:c6:4d:8f:ff:da:a1:cc:4d:70:b0:a7:1c:73:69:d5:08:ea:
53:f4:8e:73:27:5a:9d:5a:c7:39:0a:19:dd:51:21:94:3c:31:
b5:cd:06:2d:50:bf:90:09:3e:62:ca:a3:bf:f2:74:9d:2b:33:
38:e9:9f:f1:b7:2f:e2:3c:e4:8a:d4:63:57:c7:bd:27:fd:94:
15:c5:03:82:95:35:79:d6:84:0f:90:01:47:53:af:ed:12:d6:
9c:63:04:1b:06:83:87:83:a1:34:f0:05:d8:8b:c6:b9:39:ce:
9c:32:ac:bf:04:d5:8d:b8:2f:ee:61:55:b9:f3:b9:b8:93:c7:
6d:9c:39:68:b4:39:d8:67:5d:cb:5b:bd:d5:a1:b8:d9:18:16:
7c:f3:ff:7a:77:d9:cc:68:f3:c8:ee:b4:52:06:37:6c:8e:23:
69:1c:49:81:1c:08:26:80:a1:05:8b:ed:f5:dc:33:c6:84:7a:
e3:ef:2f:c3:22:02:a0:33:8d:48:61:8a:98:27:34:e8:75:5d:
eb:56:93:a3:be:2e:c5:04:ab:d6:88:cc:53:c6:9c:db:9f:aa:
5d:eb:c6:82
View Source
const TestCertPEM = `` /* 1029-byte string literal not displayed */
TestCertPEM is a certificate issued by CACertPEM, no CT extensions.
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=GB, O=Certificate Transparency CA, ST=Wales, L=Erw Wen
Validity
Not Before: Jun 1 00:00:00 2012 GMT
Not After : Jun 1 00:00:00 2022 GMT
Subject: C=GB, O=Certificate Transparency, ST=Wales, L=Erw Wen
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (1024 bit)
Modulus:
00:b1:fa:37:93:61:11:f8:79:2d:a2:08:1c:3f:e4:
19:25:00:85:31:dc:7f:2c:65:7b:d9:e1:de:47:04:
16:0b:4c:9f:19:d5:4a:da:44:70:40:4c:1c:51:34:
1b:8f:1f:75:38:dd:dd:28:d9:ac:a4:83:69:fc:56:
46:dd:cc:76:17:f8:16:8a:ae:5b:41:d4:33:31:fc:
a2:da:df:c8:04:d5:72:08:94:90:61:f9:ee:f9:02:
ca:47:ce:88:c6:44:e0:00:f0:6e:ee:cc:ab:dc:9d:
d2:f6:8a:22:cc:b0:9d:c7:6e:0d:bc:73:52:77:65:
b1:a3:7a:8c:67:62:53:dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0D:98:2A:3B:62:C4:4B:6D:2E:F4:E9:BB:7A:01:AA:9C:B7:98:E2
X509v3 Authority Key Identifier:
keyid:5F:9D:88:0D:C8:73:E6:54:D4:F8:0D:D8:E6:B0:C1:24:B4:47:C3:55
DirName:/C=GB/O=Certificate Transparency CA/ST=Wales/L=Erw Wen
serial:00
X509v3 Basic Constraints:
CA:FALSE
Signature Algorithm: sha1WithRSAEncryption
17:1c:d8:4a:ac:41:4a:9a:03:0f:22:aa:c8:f6:88:b0:81:b2:
70:9b:84:8b:4e:55:11:40:6c:d7:07:fe:d0:28:59:7a:9f:ae:
fc:2e:ee:29:78:d6:33:aa:ac:14:ed:32:35:19:7d:a8:7e:0f:
71:b8:87:5f:1a:c9:e7:8b:28:17:49:dd:ed:d0:07:e3:ec:f5:
06:45:f8:cb:f6:67:25:6c:d6:a1:64:7b:5e:13:20:3b:b8:58:
2d:e7:d6:69:6f:65:6d:1c:60:b9:5f:45:6b:7f:cf:33:85:71:
90:8f:1c:69:72:7d:24:c4:fc:cd:24:92:95:79:58:14:d1:da:
c0:e6
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.