Add name constraints to CA

tools/certs/.gitignore

@@ -0,0 +1,3 @@
+/0*.pem
+/index.txt*
+/serial*

tools/certs/README.md

@@ -5,3 +5,7 @@ For Firefox, go to about:preferences and search for "certificates".
 For browsers that use the Certificate Authorities of the underlying OS, such as Chrome and Safari,
 you need to adjust the OS. For macOS, go to Keychain Access and add the certificate under
 **login**.
+
+### Updating these certs
+
+From the root, run `./wpt serve --config tools/certs/config.json` and terminate it after it has started up.

tools/certs/cacert.key

@@ -1,30 +1,30 @@
 -----BEGIN ENCRYPTED PRIVATE KEY-----
-MIIFDjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIb9ES7h6YGBcCAggA
-MBQGCCqGSIb3DQMHBAi2ZVLgq1XvagSCBMjAmGEVvjwXvF00veuQmJsmcjVHB/qP
-VqSXjCQ94orZb89UfFnPO9zXdvLWxrwb5WP6bbQv+Sh4htExXCD5XZi1AzWNCybe
-da0vvQGgjdzUh2fCrG4K7J0w20lrYgw3HVSj/WtmdbdZFdoX+BgXrxcqkE3M5opZ
-3UD3yIQeXSxUkh3iv6zzZaWujxjDI2JpwxRmMVbrr8OeBrKJsqB2DnKmq+emmvEF
-iXTN3Ww/Aj6GIqfPZ8jpVdwcVN5QpeHAh7b2lszt7GEOGcBhutPq4Aqy8PIiDR80
-sUYI7V8OXm+Y45DnfkvsogZEifOiUrQ2U+aGDu+Zt88661wVzjq+voJlz8EaIPCE
-B/NS2SgNqI2/DrjEEecn6hjgHWIUBwOfeNoSi1Tri6KZFyxG26LE/V8Cd50yodx9
-pBgFxdCbmYLeRcVeXW2bu0ZMjPddRlR5MHfrkM5ZAze7nRxoiyWnB/U8pPf+bQvx
-K4P9KcwCOeHigkaCYZKq7nmZyEy4km89zIugT/YWhMWyVwylTpagaiiJwYLjug8n
-CbFZWAkORBIl2g/YCuTBUJtC2IWX8kw+nYVwqBszpZyC6nbha2UmhQDfMAowQA5v
-n1LnV8I6f7u6HidbB8WX2UZoh03A4beCBz+dq2VaUquLTL4KQTIz+6rw7nEysrnH
-TIb8SlwsYAlzzwyyM9dSWt7iQeNjmH7zL0MozMs3LKHIrsWi7ZZh8BUYnT2vKdNV
-2ZLOMcR0tYVmVZ8uYkR9kny/fbZcKN54xScohA2UX261W+sWiEgN+RaBsQ79pFgi
-vYldfjaGNSvftXa590xn2tlS6/suB5MxiW5g3PuBg5XtVZ95l0f1n376Xh41sJv8
-YHrCtFHOlSpDJULGiXVh/wXBmS7qJ8DhnUUG699EdlsFf6Qg22WB3AZRvEJdYC4z
-P8W+jZ15NTDbHg3Hv7/CFYVzbXv2w0jkiqQgDF/wc6t/EdLD+2hzcN+nJGjtxZbn
-xjbXcg98CUMU+dc/aD4N45K9e9rPg3+iZLwvsRvwx+MszmgxxPv05pNyRO7RVk8r
-gkyyp9/CJFme+4nFKUc0dUy2yNXZtklTX0XKm/YNKin6uUMlIArIa54Cfvt9QslV
-iD+SxU1ZHmzwKT82+5ZeIRLNWvFV/9E4nD+BTagK2Fdwnsu1S2k7ItD9lK/cBPGS
-0tz1HWv4Auj3wMPZklp3SQluOl6eAIVqqI9GaX/d42DctBQWLTa27YibWyNIcw7o
-3N8GDREMawTBdDRwlZ3oT+yiGLX1c8ds2o0/4IcJlOkDoxXErmdlZo9oVe6z4R7g
-62yR53atVTLoUnAjxHXx0bJiyayv9Y3wjOEvuhuqdd9F+HOhTtAHr/BJQNhEk+z8
-531CZTJjb1p11PbOtHGV2IeB0S82mxkkXRykEXOb89ZpDHNRiMinThRkoCmuRI9r
-dTiES9B02yMPxJ3sLQyDxCoS5mwfcAqKTeK+yCvTvBy+t5tw63DbWlMp/7Ahy65K
-rWMHdwqwfoB+ZYw5sYZdPvuBVAT01I2JbOqX36RacQultFns2OinxOJHa1HjtXyS
-cPVEkMa7ci3Ym9j5RQNLVsgJe7YK9HixX5HjQFAowAH2pXZ5pKJIJYxPIUKtZlsz
-qbM=
+MIIFHzBJBgkqhkiG9w0BBQ0wPDAbBgkqhkiG9w0BBQwwDgQILCSlhTzkRTICAggA
+MB0GCWCGSAFlAwQBKgQQgcOfWGRpzftycTbFVXO4mgSCBNDv5/+mh+AabEQwzjk/
+RIVjff2flwV0TooLISvRZYPEi60EsqsDhBpJ5iC6N8GFYXgoz06BaMQsuMGA8cRe
+qcL6uGNdwexoReO7SGD2p3jBQU+r6SpDdVicMDUzYWt8P+kYemFVoCoFrhCiCx2k
+p9ylcERn4JlUP3fW/FZslN77Nyx/M+hPowGmSBsCyFz9FiENeCRLMlyQpyG8Zp9Q
+hNbWmXp5HL/Yato/wySxtDFwC/93sus1TbgSpmmp3csiDE1TIZ2FtlDCjqd0puY8
+UVhhq+0ce01vZgOT4SWXaiMfXOt9tZ6vqsgTakQzQDXKPbPlM3ppFtTMUyNUPmol
+Fj36DxrVEArb7CT/tgbNfd/cdVonDtJJF7vxrAWWKzbhXpLfKAx4j54gdDz/ng0D
+LDvJwlCtMqS5qz30kOJLvSQu+ifG9ib+GBkiihG5VeYKjfvjxWl/3bHamIrwV8Lp
+ijHF2rsSSdzlKksSga+84jmDgAlqCsFdEAzGL8Dg4zk55Wlkr6+EshOQJN8vQz+f
+7O7fyLCS6hjjskmYTTXlHvtLiro870jd+nRXmwNlZ9DDayJCfUMayoihHqeIX4u6
+ZQhjk+54Ln9vEMUlhkiGL/1rE6APVCBnlPzJfX/K2BXHWdu/NRT4rHG6zGQLViJr
+yaaLV6F2bxCACjyjQmYzdGb238ApG5ubY50Eu4UfuB8N1zGDxqU7KQpRXLECmfKw
+qa7lHHpuakC5gFddKHI62rQc9Tw5jLRohFTFA2e54d+rN5axiSBoeYY0Ky+Y6Id4
+xGLkJoNeleyrXKj09ercxcUhg2EL/B4wHiyBLKikZiA4gUaCnCZ7WRPsGpJ5wo/K
+TXiAj1W0QQELGo+k8xmXP9y6Qb4ZcJsnWJ35Spn5CeuI/y/Bms/o2klqbhn9h+gz
+4w4Zo4PoKEfjnFublCoCa7F9jvxSM7GTeaRPf8E6/wYBV8Xdu/rAd3ypCXBRULR1
+xqXvhp6u/k8XmAyd62mAwHRG1RDHZ2Kg1pspV8YGnYYE0pXRSsVKT1+Yu6pQ65n8
+SG0YmZRN2/In0cyTkNwWwl9Bpdd7mghwiZ8uTed00Q7UvxBZxRe8I1VOwBrvA8Jo
+HZ25f0fuzNYkGmLq80jVE6k4dPowOQVp7dKcH8EvGJunUJKeAZrh0B9At52XzqJX
+9uibQrDyJvFKTepH7Gm/NuUQK1XG0tkJbysnvUk3Ezj6nihxL903IfyLhNI/R22P
+45nQeqRzrxLq4pfjW/KY+7IkX8tdabfPDHmtjLi3DhpYlDQ8JTDMn6dElN6wNIpe
+w8wh6c9srD5zbaguaMRy+5R46zyLkDIY/SOMDgXqg6rTsSSnEXc5RD1F2amBXRJF
+g8evdUJ7klx6pDh91Sspn9B/RJs1se5H37Wq9AFvrSHvktNVS0kqim+dimNKRFQr
+kJ8eqxoqJ268wTlnppn14LSig9iwE8a/+yEhfXfoZ12mYCVjT9Y8+ZtrzI+TqIDh
+ThfExeBYbPe+KTcsmuaYHw4Dbf4j8EMh7TJZlVx0o3Aqiw5MOAti5nIYt4kqJx/T
++pNPJPhMEq0nGyE/iInxrYgH6JdNJqctexhxj5ZdfmrwpFPpDq5ZZ49HT1XFP5jE
+WgiOtgAhQ01A0xiCr0EZbFczHg==
 -----END ENCRYPTED PRIVATE KEY-----

tools/certs/cacert.pem

@@ -1,83 +1,116 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 753560 (0xb7f98)
+        Serial Number: 372738 (0x5b002)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=web-platform-tests
         Validity
-            Not Before: Jul 13 12:59:12 2018 GMT
-            Not After : Jul 10 12:59:12 2028 GMT
+            Not Before: Dec 20 12:20:35 2018 GMT
+            Not After : Dec 17 12:20:35 2028 GMT
         Subject: CN=web-platform-tests
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:d3:94:10:b7:70:cf:1b:2b:1e:7f:6c:22:4f:15:
-                    be:c9:95:03:45:e2:7c:26:78:d2:5b:3c:b5:3c:86:
-                    ac:ab:ba:e9:c1:28:91:83:a7:28:92:26:79:00:c2:
-                    bd:e6:ef:bb:6b:d7:fa:2e:39:fa:16:c8:e5:24:8e:
-                    6e:e9:b1:15:83:ab:98:56:99:42:49:4d:5d:16:3a:
-                    28:fe:4d:2e:29:1a:3c:78:78:09:aa:73:26:62:c2:
-                    a5:2c:48:92:65:12:70:7e:3f:7e:c7:c4:ea:0a:c8:
-                    60:ef:6a:b0:65:dc:da:10:31:c9:88:3a:56:35:fd:
-                    85:bd:11:a4:51:7d:7f:71:5f:16:38:64:06:78:25:
-                    3b:15:e1:a6:19:2f:7b:ff:92:11:ad:0e:60:1a:d4:
-                    61:8e:46:45:00:9b:7b:c6:1f:5b:0e:bb:9d:6c:fd:
-                    7a:29:96:82:25:3d:d5:19:80:b7:30:6e:61:2a:1f:
-                    cb:50:dc:ac:f4:ff:4b:02:67:60:58:04:17:b6:69:
-                    93:93:c8:92:f8:a0:5e:f1:56:fd:e8:24:21:bd:f4:
-                    be:d4:ee:1f:df:6e:d3:4d:55:1b:58:c4:66:9b:93:
-                    b6:b2:10:e8:0e:fb:6b:90:4f:f9:5f:99:58:0a:aa:
-                    8d:5f:39:33:75:83:41:45:71:53:0b:f0:81:75:dc:
-                    73:6d
+                    00:a5:c0:b9:6d:f2:13:01:17:f3:ec:bf:91:db:4f:
+                    cd:4a:73:c7:d1:6a:b8:0d:c0:1e:7a:06:df:f2:f6:
+                    08:c1:36:a2:11:da:fb:0a:7a:2a:4f:a9:c0:6f:19:
+                    0b:e2:6d:26:3a:f9:3e:71:29:45:a4:4f:27:1d:6d:
+                    ef:40:98:dc:01:7f:2c:4f:e2:35:4d:2b:8e:97:c5:
+                    41:9e:cd:f4:0e:60:fc:65:a4:39:5c:88:36:05:60:
+                    e8:7f:b4:b4:32:9c:70:47:08:15:51:c8:cb:d8:21:
+                    ba:54:48:73:72:e3:8a:95:61:e6:00:ef:e3:5f:f6:
+                    18:b6:4e:24:b5:41:7f:ce:b2:d7:28:33:ee:06:21:
+                    4f:cb:d6:4f:55:3a:bb:4f:74:e9:b6:e8:3b:cc:a7:
+                    bb:f3:86:7a:c8:71:e1:f4:f2:2b:fe:1f:71:5e:1f:
+                    49:12:f9:c3:8a:7e:dc:5f:75:38:4d:7b:4a:a2:e5:
+                    6e:bf:ce:d9:9c:99:af:a7:6e:38:97:3c:b5:3f:13:
+                    0c:63:7e:78:ee:e4:ad:d8:18:c7:ec:da:38:44:49:
+                    af:fb:44:8d:79:29:db:cf:4c:0a:6a:fd:5a:54:15:
+                    e0:cd:ac:4d:17:5d:ef:58:c8:3d:84:fd:20:79:55:
+                    9f:14:c7:c8:5f:c8:98:5c:3c:ff:53:89:c5:1f:e7:
+                    83:a3
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
                 CA:TRUE
             X509v3 Subject Key Identifier: 
-                5B:DA:C8:C1:09:F3:4D:92:30:BC:EF:43:FB:26:93:1E:AE:0D:9A:0F
+                7A:EA:6A:75:AA:23:78:B5:5E:06:61:4A:56:CF:56:A9:6D:B0:54:02
             X509v3 Authority Key Identifier: 
-                keyid:5B:DA:C8:C1:09:F3:4D:92:30:BC:EF:43:FB:26:93:1E:AE:0D:9A:0F
+                keyid:7A:EA:6A:75:AA:23:78:B5:5E:06:61:4A:56:CF:56:A9:6D:B0:54:02
                 DirName:/CN=web-platform-tests
-                serial:0B:7F:98
+                serial:05:B0:02
 
             X509v3 Key Usage: 
                 Certificate Sign
+            X509v3 Name Constraints: 
+                Permitted:
+                  DNS:web-platform.test
+                  DNS:not-web-platform.test
+                  DNS:www.web-platform.test
+                  DNS:www1.web-platform.test
+                  DNS:www2.web-platform.test
+                  DNS:www.not-web-platform.test
+                  DNS:www2.not-web-platform.test
+                  DNS:www1.not-web-platform.test
+                  DNS:xn--lve-6lad.web-platform.test
+                  DNS:xn--lve-6lad.not-web-platform.test
+                  DNS:xn--n8j6ds53lwwkrqhv28a.web-platform.test
+                  DNS:xn--n8j6ds53lwwkrqhv28a.not-web-platform.test
+
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication
+            X509v3 Subject Alternative Name: 
+                DNS:web-platform.test, DNS:not-web-platform.test, DNS:www.web-platform.test, DNS:www1.web-platform.test, DNS:www2.web-platform.test, DNS:www.not-web-platform.test, DNS:www2.not-web-platform.test, DNS:www1.not-web-platform.test, DNS:xn--lve-6lad.web-platform.test, DNS:xn--lve-6lad.not-web-platform.test, DNS:xn--n8j6ds53lwwkrqhv28a.web-platform.test, DNS:xn--n8j6ds53lwwkrqhv28a.not-web-platform.test
     Signature Algorithm: sha256WithRSAEncryption
-         97:e3:f0:b9:63:07:e5:de:d9:1f:7f:de:be:f8:e4:98:d6:25:
-         97:e9:d3:ad:7c:6d:30:7d:0d:8e:c5:9b:ef:eb:a8:c5:59:b2:
-         2c:73:08:46:22:ab:f7:61:01:19:9e:00:0c:72:bc:2a:bd:86:
-         11:1f:3d:80:aa:19:58:6f:cd:05:b6:5a:27:ff:2e:39:1a:44:
-         08:a2:e8:a6:e2:2c:03:52:2f:63:6b:3a:3b:93:c6:b8:53:cd:
-         f4:ec:63:5c:24:5a:65:a4:e3:93:9e:96:f0:00:cf:82:fc:dc:
-         28:18:86:f1:a2:7e:78:80:9f:f4:11:b1:8e:c8:10:b5:18:9d:
-         fd:9e:8a:cb:6d:8e:15:22:3b:1f:0d:79:53:bd:2b:f7:d0:09:
-         2a:a6:a9:f1:3e:4c:d0:aa:81:ae:2b:34:b0:52:16:d0:78:e2:
-         25:c1:e2:92:47:1b:2f:a6:a2:29:6f:87:9a:3c:5d:44:b0:8f:
-         95:3c:e7:ad:d1:83:1c:38:b7:3d:85:2b:b8:dc:45:81:ba:71:
-         a7:1c:96:9b:c1:38:3e:a9:a6:c7:38:71:4d:37:6e:ca:b8:e8:
-         ab:cc:07:4e:21:43:88:21:c0:49:11:9e:d6:c4:13:2c:57:75:
-         1d:8e:54:1f:63:9a:46:19:52:40:c5:1e:2c:38:d2:b8:62:43:
-         a5:84:c8:e4
+         57:8e:97:2b:a5:3f:82:be:c9:80:b3:ef:0f:c8:b9:4c:f2:a6:
+         91:40:ab:1f:70:0e:31:fb:74:ae:17:23:ea:b1:c8:19:f7:29:
+         13:da:59:aa:61:7f:24:17:24:84:22:81:4c:23:b1:e6:a8:d8:
+         65:95:b0:a9:2e:2d:b8:8f:86:67:69:b8:d2:7a:87:d3:75:67:
+         6a:24:2a:a9:af:31:a6:33:2a:50:46:c4:2e:37:f0:e0:e0:a1:
+         e0:fe:bb:2f:6a:8d:9c:a6:45:cd:3f:8f:cd:fd:95:b1:70:24:
+         b8:2b:39:56:3f:81:0d:42:59:0a:8e:b2:c4:a7:1b:8a:73:98:
+         51:4d:f5:14:ab:8b:95:dc:5e:6a:bc:30:57:79:16:3e:6c:73:
+         09:f9:be:1b:4b:bf:cb:f4:ae:3a:ad:0e:57:20:e7:2f:f5:1f:
+         b3:7b:cf:1a:77:73:94:c6:f5:08:d5:24:29:12:9c:f1:0a:75:
+         99:43:7b:91:c7:69:6f:ff:86:10:54:94:22:73:f9:00:c2:91:
+         3d:6d:52:e5:5a:c6:43:e2:37:84:4c:59:02:b7:59:6c:b0:c5:
+         18:72:03:61:94:00:11:e6:a3:cb:18:99:3e:8e:a2:00:82:4a:
+         65:c3:08:3b:c9:10:19:c3:09:44:3c:a9:b0:2a:c3:84:2c:46:
+         43:ba:dc:bf
 -----BEGIN CERTIFICATE-----
-MIIDUzCCAjugAwIBAgIDC3+YMA0GCSqGSIb3DQEBCwUAMB0xGzAZBgNVBAMMEndl
-Yi1wbGF0Zm9ybS10ZXN0czAeFw0xODA3MTMxMjU5MTJaFw0yODA3MTAxMjU5MTJa
+MIIGVzCCBT+gAwIBAgIDBbACMA0GCSqGSIb3DQEBCwUAMB0xGzAZBgNVBAMMEndl
+Yi1wbGF0Zm9ybS10ZXN0czAeFw0xODEyMjAxMjIwMzVaFw0yODEyMTcxMjIwMzVa
 MB0xGzAZBgNVBAMMEndlYi1wbGF0Zm9ybS10ZXN0czCCASIwDQYJKoZIhvcNAQEB
-BQADggEPADCCAQoCggEBANOUELdwzxsrHn9sIk8VvsmVA0XifCZ40ls8tTyGrKu6
-6cEokYOnKJImeQDCvebvu2vX+i45+hbI5SSObumxFYOrmFaZQklNXRY6KP5NLika
-PHh4CapzJmLCpSxIkmUScH4/fsfE6grIYO9qsGXc2hAxyYg6VjX9hb0RpFF9f3Ff
-FjhkBnglOxXhphkve/+SEa0OYBrUYY5GRQCbe8YfWw67nWz9eimWgiU91RmAtzBu
-YSofy1DcrPT/SwJnYFgEF7Zpk5PIkvigXvFW/egkIb30vtTuH99u001VG1jEZpuT
-trIQ6A77a5BP+V+ZWAqqjV85M3WDQUVxUwvwgXXcc20CAwEAAaOBmzCBmDAMBgNV
-HRMEBTADAQH/MB0GA1UdDgQWBBRb2sjBCfNNkjC870P7JpMerg2aDzBHBgNVHSME
-QDA+gBRb2sjBCfNNkjC870P7JpMerg2aD6EhpB8wHTEbMBkGA1UEAwwSd2ViLXBs
-YXRmb3JtLXRlc3RzggMLf5gwCwYDVR0PBAQDAgIEMBMGA1UdJQQMMAoGCCsGAQUF
-BwMBMA0GCSqGSIb3DQEBCwUAA4IBAQCX4/C5Ywfl3tkff96++OSY1iWX6dOtfG0w
-fQ2OxZvv66jFWbIscwhGIqv3YQEZngAMcrwqvYYRHz2AqhlYb80Ftlon/y45GkQI
-ouim4iwDUi9jazo7k8a4U8307GNcJFplpOOTnpbwAM+C/NwoGIbxon54gJ/0EbGO
-yBC1GJ39norLbY4VIjsfDXlTvSv30AkqpqnxPkzQqoGuKzSwUhbQeOIlweKSRxsv
-pqIpb4eaPF1EsI+VPOet0YMcOLc9hSu43EWBunGnHJabwTg+qabHOHFNN27KuOir
-zAdOIUOIIcBJEZ7WxBMsV3UdjlQfY5pGGVJAxR4sONK4YkOlhMjk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 -----END CERTIFICATE-----

tools/certs/config.json

@@ -0,0 +1,17 @@
+{
+    "ports": {
+        "http": [],
+        "https": ["auto"],
+        "ws": [],
+        "wss": []
+    },
+    "check_subdomains": false,
+    "ssl": {
+        "type": "openssl",
+        "openssl": {
+            "duration": 3650,
+            "force_regenerate": true,
+            "base_path": "tools/certs"
+        }
+    }
+}

tools/certs/web-platform.test.key

@@ -1,28 +1,28 @@
 -----BEGIN PRIVATE KEY-----
-MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDYU2g7VdKOVTxP
-uIB0uB1JjDzStbUVIjeBJULnWKq2qr4OMI6gl0/3gNnpofTrWD+jlii42lqqDUHf
-bB1Srs3IFgKwCnCRV36l2xCk/Tv3BtW1iWqSNsZmxabSbHb1T0rLbsOTLb7SP70U
-p0o5WvAY3EEbcIBlgYVFo6oZ8P5V7RDZVmyNVGlL3kUBD1Chh9cMQyKdG06y7G52
-46z2wdmwaegwGrs9053jjHBBdyICXLEzK4Le2rgY9NKYGmrwoCRWqArpDCLPOGxD
-mib2hdm1H23kz+05I1Pbo45+JuthG05drLBCvh5cThiAY2wNCWgIBqH0BAvDN5Lo
-qg7F0UvBAgMBAAECggEBAJWsH9Ht72DLWI9P+JDJUnowrWSclE2q/vw7665lirgY
-KqdmsUgraQi1/g/IHs02odFtc39ylIhT49/RzfgHOhnWIMXsczYcc2QNzdZZ38Nq
-1zJjgXjorR0uY93zbdsMoZNfb7HFVOHjd89yb8h/Qt/whJuXmz6f/rXQJ0ELnO2V
-csBa0WWRdKNYSuDXXAXrTmJs4Pp7NNWAoYBaMoHQcHE9wsN3XnJdYYyABbpj6wIP
-7LXxUN3OZj4CY9+ahCgrEA8NEvCU/SUagEX0YG4z+sV+Dfjnus7vMYSqZv2sdPN2
-ze092+AZBDpdjNdLyrB6cMFRh/23MaCLGHPGjJkCdgECgYEA9bK+NRqPUqcRJ/Bd
-7PAPi1PLjkgP66v0oXsW6yl7BnxgjrUvoWUI9/40kEvQDztIrUFbLoxwnLtAKjQG
-F+2vkD/DWt452Z8bQXbxteGLXkNtwo9DwTBrz4OonmnrxcOjwtIErqEyhMPRCe0w
-KFtRLgK5xXx+JlQNzRxY4TUGjg0CgYEA4WVjixfhTf1vFpmfhX4ewLaBrWch4h6x
-wQ3j9MV90wNbnnyT1GrKiR1XDJ1vN8emFrNQvhr0eOEuDY0ZXJJM8PvPW6+KqmsO
-rwreyQzp/b1Ads/qL7M05REu5y5RQ2zNWjObTvdsUh/LmtUvGRQm92E+t4aFz0Jg
-jZ5A6oq+u4UCgYAtX8geuHv1cKMLdCl0Y1ULjvsNmKNQC56O39N4tF1i8j9Gu5FD
-Rgxk+A4vA8E1vuYKEQLM0uTNHQuZf6gMbTm58vyZ4GZgmTCIY3X59+AsFVnEz35c
-xBt05ESUlM0U5a9tgCmbMmvI9vy4z5PQMCUK0TgLj5UgcO9njK+hT5CZVQKBgGZl
-VjShc6SnpukAf3z4z+XCw+TP/o+oXB6VPeM8OS48z0mP1OTiYwKphptfhmAz3htf
-+SV0P24O9ooHeOcaO8Qa0ZgYholnO3OAH7f8muzAJmITkJN8+WG7TbCO1TIpYp1A
-5qSYOOiSM0Ay60OcaRtnXUOo5G9E+3I628jxoTa1AoGAQK3MjN/BzG5gXG3PX5TV
-tFY+K2SgID33d+STRLUzAgOb+7aqUOdwYfCdiQspED9HRkg/DCLp7gNp02p1kscB
-w/PWCMUO01inIljR4f/YO+kID8Zrovch8d8JLGvNsYFzVAP/ceYW6/OMLQLNGfBC
-xHpdj0Im0e9/WMxC4ZEYfoc=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 -----END PRIVATE KEY-----