Update expired TLS certificates

src/SSLSocket.c

 /*******************************************************************************
- * Copyright (c) 2009, 2022 IBM Corp., Ian Craggs
+ * Copyright (c) 2009, 2023 IBM Corp., Ian Craggs
  *
  * All rights reserved. This program and the accompanying materials
  * are made available under the terms of the Eclipse Public License v2.0
@@ -593,9 +593,11 @@ int SSLSocket_createContext(networkHandles* net, MQTTClient_SSLOptions* opts)
 		}
 	}
 
+/*
 #if (OPENSSL_VERSION_NUMBER >= 0x10100000L)
 	SSL_CTX_set_security_level(net->ctx, 1);
 #endif
+*/
 
 	if (opts->keyStore)
 	{

test/ssl/all-ca.crt

@@ -2,74 +2,101 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, L=Derby, O=Mosquitto Project, OU=Testing, CN=Root CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Testing, CN=Root CA
         Validity
-            Not Before: Mar  1 18:53:36 2018 GMT
-            Not After : Feb 28 18:53:36 2023 GMT
-        Subject: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
+            Not Before: Apr 13 13:22:31 2023 GMT
+            Not After : Apr 11 13:22:31 2028 GMT
+        Subject: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Signing CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:af:ad:b0:e4:78:b8:73:01:6a:9e:78:1e:bf:36:
-                    5b:60:dc:ee:28:ce:16:3c:73:30:b3:02:cd:5c:07:
-                    a2:36:ee:a1:c5:43:32:0c:46:57:cb:fb:1c:52:db:
-                    4e:65:85:8a:5d:a6:cd:66:43:ad:bc:70:1b:e6:b0:
-                    11:0f:d8:54:1f:57:9e:29:4e:2b:1b:c5:70:b2:3d:
-                    38:a7:63:3f:1a:06:2f:6d:09:2c:7c:90:60:db:8c:
-                    3a:11:20:a7:db:20:25:d9:c6:97:74:50:5a:e0:fd:
-                    81:aa:de:ea:1d:e5:be:61:59:0d:76:e5:ab:7f:3b:
-                    b2:a6:38:b9:bb:32:aa:72:ef
+                    00:e6:ce:0e:a2:6a:56:1c:35:8c:7a:af:31:43:7d:
+                    28:cb:61:15:81:2d:37:ff:f1:8f:7d:78:c3:37:58:
+                    8f:6a:4c:00:b6:9d:04:f3:1c:cd:fb:ca:7d:c0:dc:
+                    2b:3b:e4:c1:00:0c:71:83:df:cf:12:6f:98:ea:19:
+                    01:0b:87:5f:df:a7:58:76:9c:56:b9:f2:1d:d8:9f:
+                    24:89:eb:af:7f:fe:47:5a:a8:b3:79:c2:46:be:38:
+                    bf:77:03:61:b7:de:d0:ae:37:8b:ad:0d:02:5c:c3:
+                    e2:3a:17:e7:fc:86:9e:cd:ff:87:21:4a:c9:f5:c2:
+                    3d:bf:c9:14:1e:19:d9:89:19:e9:d9:b2:c8:a9:e9:
+                    d2:9b:ae:73:f2:b7:e7:fc:3d:9b:c3:72:b6:be:10:
+                    fc:0c:c2:eb:b7:8f:4a:67:4c:1b:43:ca:4e:58:df:
+                    cc:74:c6:6b:95:de:09:ae:ef:60:62:81:82:74:de:
+                    b8:48:24:3e:0a:ac:75:72:fa:f8:5d:f2:72:7a:bd:
+                    04:13:d2:c8:90:a3:ad:08:39:74:22:3f:10:7b:88:
+                    37:b8:77:2b:4a:34:1a:fa:4a:64:82:b4:fe:de:6c:
+                    b5:a5:4c:70:6b:7e:ab:b4:2f:57:80:f0:0c:49:1b:
+                    f1:32:1f:46:2f:12:af:e7:96:be:b1:09:df:b9:6a:
+                    88:bf
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                9E:54:3E:E5:2F:E5:EA:40:4A:FC:37:96:6C:45:BB:1A:79:0E:CA:AB
+                E1:BE:F5:5F:36:50:CF:FE:3D:42:EE:80:33:22:46:C2:3D:2A:41:41
             X509v3 Authority Key Identifier: 
-                keyid:1C:B4:4E:8B:84:0D:1E:0F:C4:CC:F4:17:87:DB:CA:F2:55:F1:34:39
+                keyid:FE:98:8A:C3:41:B2:71:3A:4A:B3:76:5A:3C:17:06:93:11:99:8E:C8
 
             X509v3 Basic Constraints: 
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         6c:2d:41:ca:7b:89:84:27:ca:b3:64:d5:73:b2:5b:dd:fc:6f:
-         d4:68:ae:f1:30:3e:9e:ca:28:2b:d3:2e:0c:61:3e:d5:9a:fd:
-         67:b1:60:e5:54:9f:a4:95:51:5b:00:2d:f9:46:82:de:49:df:
-         ce:2a:f3:f6:2e:8f:8f:64:2b:c9:2f:ce:ff:d2:53:a0:0a:c4:
-         4a:e9:20:fa:5e:79:45:21:18:c2:d6:c1:64:92:e4:67:3a:92:
-         04:46:5e:6a:39:84:c8:f1:0e:42:3c:fd:b2:c2:7b:e9:af:44:
-         2c:19:30:61:01:39:47:6d:38:85:90:4b:e5:04:f4:87:72:46:
-         4a:9a
+         0d:67:f0:6d:9e:7f:ad:7a:fb:81:f7:ed:40:fe:80:69:e3:df:
+         94:ed:94:b7:3f:11:db:02:ba:08:1e:a9:28:95:b5:3f:e5:86:
+         02:6d:33:3c:57:39:be:18:4a:d5:18:0f:e8:59:5b:40:38:b2:
+         9d:71:18:4c:b1:e6:d9:51:2d:a0:7b:af:35:b4:d9:f3:d8:f5:
+         09:b9:e5:e9:81:38:b0:a6:89:57:51:76:71:7d:91:bb:db:10:
+         2b:25:ce:2d:59:5a:cd:29:a2:19:a6:a0:56:19:d7:38:f4:cb:
+         94:43:90:ff:20:ce:af:37:c7:73:34:ef:fb:cb:e1:f2:1f:68:
+         42:91:9d:33:3f:a1:7a:cb:80:5f:f2:52:81:f1:15:fa:79:01:
+         1a:29:c4:36:41:26:75:5c:4b:ff:be:67:12:d8:d2:72:03:5a:
+         3e:2e:aa:b3:10:b5:10:37:2b:eb:f7:59:3a:66:87:f4:ca:e4:
+         d4:35:6f:78:aa:26:de:ac:02:65:91:d2:fa:80:db:b9:8b:a6:
+         26:bb:46:8f:21:e8:18:84:a6:b5:17:fb:e2:de:d8:b3:39:b2:
+         6a:42:28:e9:05:55:e6:0b:39:32:42:28:a2:72:51:7c:46:96:
+         e2:c2:7f:b3:a5:b9:af:3b:04:3a:93:ba:9c:2c:0a:28:39:fc:
+         8b:12:7d:b7
 -----BEGIN CERTIFICATE-----
-MIICnTCCAgagAwIBAgIBATANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEOMAwGA1UEBwwFRGVyYnkxGjAYBgNVBAoMEU1v
-c3F1aXR0byBQcm9qZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRAwDgYDVQQDDAdSb290
-IENBMB4XDTE4MDMwMTE4NTMzNloXDTIzMDIyODE4NTMzNlowZTELMAkGA1UEBhMC
-R0IxEzARBgNVBAgMCkRlcmJ5c2hpcmUxGjAYBgNVBAoMEU1vc3F1aXR0byBQcm9q
-ZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRMwEQYDVQQDDApTaWduaW5nIENBMIGfMA0G
-CSqGSIb3DQEBAQUAA4GNADCBiQKBgQCvrbDkeLhzAWqeeB6/Nltg3O4ozhY8czCz
-As1cB6I27qHFQzIMRlfL+xxS205lhYpdps1mQ628cBvmsBEP2FQfV54pTisbxXCy
-PTinYz8aBi9tCSx8kGDbjDoRIKfbICXZxpd0UFrg/YGq3uod5b5hWQ125at/O7Km
-OLm7Mqpy7wIDAQABo1AwTjAdBgNVHQ4EFgQUnlQ+5S/l6kBK/DeWbEW7GnkOyqsw
-HwYDVR0jBBgwFoAUHLROi4QNHg/EzPQXh9vK8lXxNDkwDAYDVR0TBAUwAwEB/zAN
-BgkqhkiG9w0BAQsFAAOBgQBsLUHKe4mEJ8qzZNVzslvd/G/UaK7xMD6eyigr0y4M
-YT7Vmv1nsWDlVJ+klVFbAC35RoLeSd/OKvP2Lo+PZCvJL87/0lOgCsRK6SD6XnlF
-IRjC1sFkkuRnOpIERl5qOYTI8Q5CPP2ywnvpr0QsGTBhATlHbTiFkEvlBPSHckZK
-mg==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 -----END CERTIFICATE-----
 -----BEGIN CERTIFICATE-----
-MIICtDCCAh2gAwIBAgIJAObVjC0tPL4iMA0GCSqGSIb3DQEBCwUAMHIxCzAJBgNV
-BAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYDVQQHDAVEZXJieTEaMBgG
-A1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNVBAsMB1Rlc3RpbmcxEDAOBgNV
-BAMMB1Jvb3QgQ0EwIBcNMTgwMzAxMTg1MzM2WhgPMjEwMDA0MjAxODUzMzZaMHIx
-CzAJBgNVBAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYDVQQHDAVEZXJi
-eTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNVBAsMB1Rlc3Rpbmcx
-EDAOBgNVBAMMB1Jvb3QgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANSZ
-3aRYdHcnta24XXJGfomsg2OpYys3KkqK76aWEwhqRvdH2m54yBvHTZ2LsMLQro0q
-r4oGLyvlupC9fxwQF4ZDFHrn7VbxU947V+cipGkRaECXiGVO1ngUSpKti8nrIUkn
-FXkLmVaGuVv1jVOGBi6/6f3ct6LsNyFqXzaSw9DtAgMBAAGjUDBOMB0GA1UdDgQW
-BBQctE6LhA0eD8TM9BeH28ryVfE0OTAfBgNVHSMEGDAWgBQctE6LhA0eD8TM9BeH
-28ryVfE0OTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4GBAHVShEeqQRjP
-IoMU8MFnnC1ZadADvSn1E6gRR7eoNU0MeMpTYmTA+TIklEzhaRHSkQqyPHAe/YMl
-WLmq1NqyxPv9uKekVlatJxYbm1ME4e+wGs3U9OGsIKX0nFcBO8iqpj5s7GZmSYyY
-u1YJnq1oe0C5IblVB9amcoB743/YyMme
+MIIDwDCCAqigAwIBAgIUPajsILLwblnD7WEDCk00ebOAASgwDQYJKoZIhvcNAQEL
+BQAwcDELMAkGA1UEBhMCR0IxEjAQBgNVBAgMCVdpbHRzaGlyZTESMBAGA1UEBwwJ
+U2FsaXNidXJ5MRUwEwYDVQQKDAxQYWhvIFByb2plY3QxEDAOBgNVBAsMB1Rlc3Rp
+bmcxEDAOBgNVBAMMB1Jvb3QgQ0EwIBcNMjMwNDEzMTMyMjMxWhgPMjEwNTA2MDIx
+MzIyMzFaMHAxCzAJBgNVBAYTAkdCMRIwEAYDVQQIDAlXaWx0c2hpcmUxEjAQBgNV
+BAcMCVNhbGlzYnVyeTEVMBMGA1UECgwMUGFobyBQcm9qZWN0MRAwDgYDVQQLDAdU
+ZXN0aW5nMRAwDgYDVQQDDAdSb290IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
+MIIBCgKCAQEAsqFZCPniXeWNtd5NhccCmirdLv6i/c6FAffg4iMPEYanDTh0PPWE
+/tPiiOTzcGp5udF3hjjtv2lx5OSEaZYNSIgWERf0LPS0MBsHjMmVoU4S8+gZAst1
+igzWKmmZAaUwBdGz0D6cRr7ZMUBfzJnrF1V6VQMLNXfrXmYAXRpxRMcBv3FPYLUc
+qXp9gbFYnc+xNbuDE3Ir6/wMOu3Q1H6BvnIGVmdGqnmrONqzkMcqCuTEGlFEBQ4s
+HrZUbXQGSKtlMInAM1hyP+qHmuMwTfue8/qspewHds9fNstJL9wLCZBk3Jdf6B5I
+S6S+cmHM00cThnuVVwnwgU6syGhgekCNYwIDAQABo1AwTjAdBgNVHQ4EFgQU/piK
+w0GycTpKs3ZaPBcGkxGZjsgwHwYDVR0jBBgwFoAU/piKw0GycTpKs3ZaPBcGkxGZ
+jsgwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAhno5Byj3BGy/je/u
+yPl8/uGOqh+uK0Ds+6YvUBRTHlnAFegwQrJhq17bzTdZZlw5s0+bYEVtOwX6p7Zk
+mT4zUEPEQ7B223+r3TiB5xQ4ad+wZsDa9X7XY0+vqc+wf4CHFPHX4ZR0Xa1p/vBL
+Y3L6ANHkwRFgx+XREmkiv4GJxeZtNSevuM63bbRZ/Y7OSZQlvKTxNlsKqi+61d7w
+ciWk9BmmXNm2kQeKwsx5o7bMiETOhDXobcibD8R3U+3tf3vWp9jWIMZKkJ40U1Wb
+LM0S9B1ZBkqb3Ml4Rq0AhQntQNGKDobt93ilQoGSUKq0/bR5wA8Yad9viVbbbSsm
+kkdThg==
 -----END CERTIFICATE-----

test/ssl/capath/9ede8325.0

+test-root-ca.pem
\ No newline at end of file

test/ssl/capath/c4bc85cc.0

+server.pem
\ No newline at end of file

test/ssl/capath/create.sh

+openssl x509 -in ../server.crt -out server.pem -outform PEM
+openssl x509 -in ../test-root-ca.crt -out test-root-ca.pem -outform PEM

test/ssl/capath/server.pem

-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 1 (0x1)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
-        Validity
-            Not Before: Mar  1 18:53:44 2018 GMT
-            Not After : Feb 28 18:53:44 2023 GMT
-        Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=localhost
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
-                Modulus:
-                    00:c9:18:e1:6a:c4:45:58:0e:b7:65:3a:b8:6f:df:
-                    0a:d8:5d:18:aa:40:08:d6:d5:79:fa:ca:79:6b:9e:
-                    ce:55:85:c9:d5:4f:bb:7f:5a:81:c8:3c:5d:aa:ed:
-                    7f:48:87:c2:f1:4c:62:00:c3:8d:9a:a3:c2:77:25:
-                    c6:70:cc:ef:d1:8f:17:7d:1b:c3:ab:66:3e:90:f0:
-                    44:e3:85:8b:77:86:21:b2:dd:0b:2c:ed:a0:16:a0:
-                    16:63:49:b9:bb:90:45:44:f1:f7:1e:ad:57:1c:45:
-                    a2:08:99:13:05:e3:13:76:ef:f3:cd:f3:3a:21:73:
-                    21:75:0a:2d:58:e2:0a:3a:3d
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: 
-                CA:FALSE
-            Netscape Comment: 
-                OpenSSL Generated Certificate
-            X509v3 Subject Key Identifier: 
-                7E:42:6C:12:CB:42:12:36:54:03:29:B6:D8:21:CA:E1:65:48:C5:67
-            X509v3 Authority Key Identifier: 
-                keyid:9E:54:3E:E5:2F:E5:EA:40:4A:FC:37:96:6C:45:BB:1A:79:0E:CA:AB
-
-    Signature Algorithm: sha256WithRSAEncryption
-         08:e1:a9:a0:e9:c4:1b:65:8d:b0:71:60:68:18:d8:af:49:8f:
-         0b:41:62:bb:f8:23:71:65:f2:c7:cf:59:23:63:48:fa:ba:26:
-         5f:2d:2e:4c:18:e4:f0:6e:cb:38:be:51:d0:e2:cc:76:ab:f6:
-         13:c2:49:68:e2:ef:da:86:a9:3d:80:29:9f:ee:33:be:cd:4c:
-         b2:4c:14:04:e3:46:46:46:ec:c1:4a:63:de:f3:5a:7b:0f:28:
-         a1:92:c8:96:07:b3:73:96:f4:9e:a0:bf:36:ea:f1:1a:8b:f7:
-         d5:ed:6c:e2:bf:cd:61:bc:a4:ca:ee:fa:75:af:ad:4c:54:4b:
-         af:18
 -----BEGIN CERTIFICATE-----
-MIICzDCCAjWgAwIBAgIBATANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
-EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTgwMzAx
-MTg1MzQ0WhcNMjMwMjI4MTg1MzQ0WjB2MQswCQYDVQQGEwJHQjEYMBYGA1UECAwP
-Tm90dGluZ2hhbXNoaXJlMRMwEQYDVQQHDApOb3R0aW5naGFtMQ8wDQYDVQQKDAZT
-ZXJ2ZXIxEzARBgNVBAsMClByb2R1Y3Rpb24xEjAQBgNVBAMMCWxvY2FsaG9zdDCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAyRjhasRFWA63ZTq4b98K2F0YqkAI
-1tV5+sp5a57OVYXJ1U+7f1qByDxdqu1/SIfC8UxiAMONmqPCdyXGcMzv0Y8XfRvD
-q2Y+kPBE44WLd4Yhst0LLO2gFqAWY0m5u5BFRPH3Hq1XHEWiCJkTBeMTdu/zzfM6
-IXMhdQotWOIKOj0CAwEAAaN7MHkwCQYDVR0TBAIwADAsBglghkgBhvhCAQ0EHxYd
-T3BlblNTTCBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFH5CbBLLQhI2
-VAMpttghyuFlSMVnMB8GA1UdIwQYMBaAFJ5UPuUv5epASvw3lmxFuxp5DsqrMA0G
-CSqGSIb3DQEBCwUAA4GBAAjhqaDpxBtljbBxYGgY2K9JjwtBYrv4I3Fl8sfPWSNj
-SPq6Jl8tLkwY5PBuyzi+UdDizHar9hPCSWji79qGqT2AKZ/uM77NTLJMFATjRkZG
-7MFKY97zWnsPKKGSyJYHs3OW9J6gvzbq8RqL99XtbOK/zWG8pMru+nWvrUxUS68Y
+MIIDyjCCArKgAwIBAgIBATANBgkqhkiG9w0BAQsFADBfMQswCQYDVQQGEwJHQjES
+MBAGA1UECAwJV2lsdHNoaXJlMRUwEwYDVQQKDAxQYWhvIFByb2plY3QxEDAOBgNV
+BAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMjMwNDEzMTMyMjM4
+WhcNMjgwNDExMTMyMjM4WjB1MQswCQYDVQQGEwJHQjESMBAGA1UECAwJV2lsdHNo
+aXJlMRIwEAYDVQQHDAlTYWxpc2J1cnkxFTATBgNVBAoMDFBhaG8gUHJvamVjdDET
+MBEGA1UECwwKUHJvZHVjdGlvbjESMBAGA1UEAwwJbG9jYWxob3N0MIIBIjANBgkq
+hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLIfK9RsIPBnZBSdeRSzmUmpZR0g8x63
+lpKb5wwdkL7cpcUQ4Z7Z/fRv8B4Y79v9+Yjj+w/7S2sVw41Dhmwr8BKUtc6dYFcE
+FQ4HD3KHWzhi9HVdFwU9RR/ne+7aUJUiEN74h8u4OTjPiG1pgH3fp1AoRd+qM+M9
+1qJMK427g9uYLc0af4h15V386shgkzF2ZvMkrSv6IHdBYatD7kdSRWukEZg9v3wJ
+V8ALNo+6vuMp1T75wVEVH7HBTp/IaOKx2BEle2VWEXn+9/HIrJuwokvlxOSWq5Iw
++M6nrslT4fTZ+FXhUhqy4K62dvfk3CwL8sMJsvdCjVbW1DuvGC4mMQIDAQABo3sw
+eTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBD
+ZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUkzHSiPtvTKs3vs4waxurcCdYj9owHwYDVR0j
+BBgwFoAU4b71XzZQz/49Qu6AMyJGwj0qQUEwDQYJKoZIhvcNAQELBQADggEBAEou
+H5x+mS7MQLRJ6pIn1DX1B2v/oi4VR3ZAPJschbOo9qbyFcCh3Na9ZnEJ/eaTT5o2
+5KcPsPVaTeIwUJsSDRJNameBAheSaQDkJJFcg5mce22NP/xGgcJK9Jw/1l9rH8aE
++t4zJjrU0kyYI8ErIPISvdxhX2OETBt7xSg8SrvaB2G313lDZuv5IZYUNIAbvbdi
+Iup6CiW1J/tAx/fOGOrmFlXZu96YxRkEoTwD4m9QeazOiJxu0BrShxAuWd0UGb4j
+qrwXGyGWXwjOFtlxUnL59b73zReumpo/4RGjqZpsjcrJf+VtMnJOPsDHlpXk3J62
+OuNXT+t5KglhUXjBuVA=
 -----END CERTIFICATE-----

test/ssl/capath/test-root-ca.pem

 -----BEGIN CERTIFICATE-----
-MIICtDCCAh2gAwIBAgIJAObVjC0tPL4iMA0GCSqGSIb3DQEBCwUAMHIxCzAJBgNV
-BAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYDVQQHDAVEZXJieTEaMBgG
-A1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNVBAsMB1Rlc3RpbmcxEDAOBgNV
-BAMMB1Jvb3QgQ0EwIBcNMTgwMzAxMTg1MzM2WhgPMjEwMDA0MjAxODUzMzZaMHIx
-CzAJBgNVBAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYDVQQHDAVEZXJi
-eTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNVBAsMB1Rlc3Rpbmcx
-EDAOBgNVBAMMB1Jvb3QgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANSZ
-3aRYdHcnta24XXJGfomsg2OpYys3KkqK76aWEwhqRvdH2m54yBvHTZ2LsMLQro0q
-r4oGLyvlupC9fxwQF4ZDFHrn7VbxU947V+cipGkRaECXiGVO1ngUSpKti8nrIUkn
-FXkLmVaGuVv1jVOGBi6/6f3ct6LsNyFqXzaSw9DtAgMBAAGjUDBOMB0GA1UdDgQW
-BBQctE6LhA0eD8TM9BeH28ryVfE0OTAfBgNVHSMEGDAWgBQctE6LhA0eD8TM9BeH
-28ryVfE0OTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4GBAHVShEeqQRjP
-IoMU8MFnnC1ZadADvSn1E6gRR7eoNU0MeMpTYmTA+TIklEzhaRHSkQqyPHAe/YMl
-WLmq1NqyxPv9uKekVlatJxYbm1ME4e+wGs3U9OGsIKX0nFcBO8iqpj5s7GZmSYyY
-u1YJnq1oe0C5IblVB9amcoB743/YyMme
+MIIDwDCCAqigAwIBAgIUPajsILLwblnD7WEDCk00ebOAASgwDQYJKoZIhvcNAQEL
+BQAwcDELMAkGA1UEBhMCR0IxEjAQBgNVBAgMCVdpbHRzaGlyZTESMBAGA1UEBwwJ
+U2FsaXNidXJ5MRUwEwYDVQQKDAxQYWhvIFByb2plY3QxEDAOBgNVBAsMB1Rlc3Rp
+bmcxEDAOBgNVBAMMB1Jvb3QgQ0EwIBcNMjMwNDEzMTMyMjMxWhgPMjEwNTA2MDIx
+MzIyMzFaMHAxCzAJBgNVBAYTAkdCMRIwEAYDVQQIDAlXaWx0c2hpcmUxEjAQBgNV
+BAcMCVNhbGlzYnVyeTEVMBMGA1UECgwMUGFobyBQcm9qZWN0MRAwDgYDVQQLDAdU
+ZXN0aW5nMRAwDgYDVQQDDAdSb290IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
+MIIBCgKCAQEAsqFZCPniXeWNtd5NhccCmirdLv6i/c6FAffg4iMPEYanDTh0PPWE
+/tPiiOTzcGp5udF3hjjtv2lx5OSEaZYNSIgWERf0LPS0MBsHjMmVoU4S8+gZAst1
+igzWKmmZAaUwBdGz0D6cRr7ZMUBfzJnrF1V6VQMLNXfrXmYAXRpxRMcBv3FPYLUc
+qXp9gbFYnc+xNbuDE3Ir6/wMOu3Q1H6BvnIGVmdGqnmrONqzkMcqCuTEGlFEBQ4s
+HrZUbXQGSKtlMInAM1hyP+qHmuMwTfue8/qspewHds9fNstJL9wLCZBk3Jdf6B5I
+S6S+cmHM00cThnuVVwnwgU6syGhgekCNYwIDAQABo1AwTjAdBgNVHQ4EFgQU/piK
+w0GycTpKs3ZaPBcGkxGZjsgwHwYDVR0jBBgwFoAU/piKw0GycTpKs3ZaPBcGkxGZ
+jsgwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAhno5Byj3BGy/je/u
+yPl8/uGOqh+uK0Ds+6YvUBRTHlnAFegwQrJhq17bzTdZZlw5s0+bYEVtOwX6p7Zk
+mT4zUEPEQ7B223+r3TiB5xQ4ad+wZsDa9X7XY0+vqc+wf4CHFPHX4ZR0Xa1p/vBL
+Y3L6ANHkwRFgx+XREmkiv4GJxeZtNSevuM63bbRZ/Y7OSZQlvKTxNlsKqi+61d7w
+ciWk9BmmXNm2kQeKwsx5o7bMiETOhDXobcibD8R3U+3tf3vWp9jWIMZKkJ40U1Wb
+LM0S9B1ZBkqb3Ml4Rq0AhQntQNGKDobt93ilQoGSUKq0/bR5wA8Yad9viVbbbSsm
+kkdThg==
 -----END CERTIFICATE-----

test/ssl/client-expired.crt

@@ -2,25 +2,34 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 3 (0x3)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Signing CA
         Validity
             Not Before: Aug 20 00:00:00 2012 GMT
             Not After : Aug 21 00:00:00 2012 GMT
-        Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=test client expired
+        Subject: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Production, CN=test client expired
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:b8:67:87:cf:05:35:29:81:b1:16:e3:0a:1c:59:
-                    83:36:dc:31:db:af:f2:a9:12:97:e7:96:c8:91:7c:
-                    a4:52:65:43:79:f4:20:e0:5f:ed:c0:b4:32:9d:c7:
-                    3d:21:9a:9e:92:6c:42:08:06:88:65:d5:4f:5e:70:
-                    d9:7d:e1:de:4b:be:26:e2:06:99:4a:54:f7:e7:1c:
-                    d6:7c:6f:d5:16:8d:b0:9d:ce:5d:29:f1:51:e9:12:
-                    fd:2f:ed:d6:fc:e1:cc:d6:31:0e:ce:0e:74:02:f3:
-                    1e:70:41:44:5d:67:ed:3b:9d:2f:43:b8:89:6f:90:
-                    52:9b:f1:e9:fc:ed:f8:35:d1
+                    00:c9:03:bc:43:8e:1e:2e:cd:ac:4a:33:2f:99:fc:
+                    de:9b:43:ff:c3:c2:ca:ab:de:a8:e2:10:1b:86:d2:
+                    51:ef:71:26:1f:7c:0e:5c:5b:5d:e7:1e:62:25:eb:
+                    db:1f:7a:7f:c8:87:3b:79:38:b4:0b:e6:8e:43:8b:
+                    8b:3a:e8:85:0a:2f:77:13:80:cb:1b:86:30:ff:7f:
+                    f9:a2:70:68:5e:0b:dd:7f:4b:7d:f4:82:2b:39:5d:
+                    43:cd:fd:d9:38:be:4e:4f:0f:5d:5c:f6:cc:49:95:
+                    d5:b4:d5:a1:56:93:38:1d:62:5e:58:f3:90:3c:44:
+                    1e:3d:85:2b:0f:9f:4f:9e:9a:e3:b1:4b:18:a8:e1:
+                    05:6b:88:c5:ea:bf:a6:85:b9:3c:9f:02:ad:83:31:
+                    09:5e:e3:a2:b1:78:6b:bc:b2:d1:05:f5:22:3a:90:
+                    a5:1c:0f:b5:94:aa:29:aa:7d:c8:ee:f5:3a:8f:2c:
+                    32:42:e1:c0:ec:8f:a8:73:ca:38:17:05:c9:c0:ce:
+                    e2:c4:40:68:0b:4f:86:fb:1b:35:9c:4e:69:81:4f:
+                    c8:cf:09:06:eb:ed:3a:f6:46:86:4f:91:f8:35:be:
+                    3c:ca:03:a4:0f:3d:75:56:d1:93:7f:a2:d2:32:38:
+                    df:02:ac:2b:ff:a1:94:a4:80:b7:9f:ca:9e:51:0f:
+                    1a:bb
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,34 +37,46 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                27:DF:0F:D3:9A:8F:34:C8:9E:C1:6D:B9:29:99:0F:0D:3A:D1:BB:BD
+                DF:C7:7A:E1:90:8C:51:CB:9F:32:43:B0:A6:60:E8:FB:A0:79:6E:F0
             X509v3 Authority Key Identifier: 
-                keyid:9E:54:3E:E5:2F:E5:EA:40:4A:FC:37:96:6C:45:BB:1A:79:0E:CA:AB
+                keyid:E1:BE:F5:5F:36:50:CF:FE:3D:42:EE:80:33:22:46:C2:3D:2A:41:41
 
     Signature Algorithm: sha256WithRSAEncryption
-         96:28:72:b2:16:af:2b:f2:92:d9:8b:e7:15:2c:e2:e1:55:48:
-         ce:45:d0:89:7a:80:41:ec:3e:b5:01:ee:b9:2e:62:44:7d:b5:
-         b2:f0:e5:83:62:1d:6f:3b:b5:69:4c:dd:c7:20:fb:b0:70:5a:
-         c5:f6:4a:97:14:4a:63:8f:da:3b:0d:27:e3:b9:06:a3:53:1c:
-         db:d3:9d:8a:8a:aa:7c:d7:a0:39:15:d5:03:8b:4f:0e:ab:78:
-         2f:05:69:8c:a3:5a:6b:70:6b:9e:b1:23:ad:d3:ef:a9:5d:01:
-         1b:37:7e:07:0f:97:cb:79:3a:7f:02:3d:40:62:20:63:a8:80:
-         92:da
+         dd:eb:8c:63:92:ef:ed:0c:ee:85:a1:e0:3c:18:f0:5d:18:1a:
+         0b:2b:a8:ad:33:1d:11:bb:1f:d9:03:51:82:97:20:8c:4d:20:
+         7f:31:48:83:27:3c:ff:6a:0b:fb:f9:73:28:9e:bf:20:a1:bd:
+         ee:ea:8f:b8:ff:0b:26:7d:fe:bf:b5:34:81:46:43:6e:03:5b:
+         17:47:63:79:06:93:03:70:c3:cb:34:e6:90:66:1f:34:2d:b8:
+         03:e0:6e:ad:3d:ea:01:80:34:e5:55:76:22:4e:d3:a7:dd:43:
+         77:c6:7d:68:15:bd:f5:4e:d1:df:dd:a6:e5:86:3b:2a:d6:2f:
+         45:83:74:87:65:81:f3:c6:a2:00:4f:82:f7:ec:b3:f6:7f:9b:
+         32:c2:f5:be:4d:25:8b:da:22:ad:2b:78:36:19:c1:d1:5d:ad:
+         13:9a:ae:55:fa:0c:a6:8d:82:cd:8a:d3:09:91:df:0d:0f:2c:
+         3d:2a:91:d0:10:be:b5:72:d8:31:ae:02:d5:e9:15:5f:c3:16:
+         bf:15:44:a1:33:cb:f7:c0:ee:40:3e:7e:d7:b1:f3:d6:47:fa:
+         e0:dd:71:4f:54:93:1e:d8:5d:96:ae:de:54:ee:4f:ce:4b:14:
+         d3:bf:44:76:04:0b:53:7f:bd:43:a6:c4:b2:c6:88:50:c0:cf:
+         47:80:d1:86
 -----BEGIN CERTIFICATE-----
-MIIC1zCCAkCgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
-EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTIwODIw
-MDAwMDAwWhcNMTIwODIxMDAwMDAwWjCBgDELMAkGA1UEBhMCR0IxGDAWBgNVBAgM
-D05vdHRpbmdoYW1zaGlyZTETMBEGA1UEBwwKTm90dGluZ2hhbTEPMA0GA1UECgwG
-U2VydmVyMRMwEQYDVQQLDApQcm9kdWN0aW9uMRwwGgYDVQQDDBN0ZXN0IGNsaWVu
-dCBleHBpcmVkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4Z4fPBTUpgbEW
-4wocWYM23DHbr/KpEpfnlsiRfKRSZUN59CDgX+3AtDKdxz0hmp6SbEIIBohl1U9e
-cNl94d5LvibiBplKVPfnHNZ8b9UWjbCdzl0p8VHpEv0v7db84czWMQ7ODnQC8x5w
-QURdZ+07nS9DuIlvkFKb8en87fg10QIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCG
-SAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4E
-FgQUJ98P05qPNMiewW25KZkPDTrRu70wHwYDVR0jBBgwFoAUnlQ+5S/l6kBK/DeW
-bEW7GnkOyqswDQYJKoZIhvcNAQELBQADgYEAlihyshavK/KS2YvnFSzi4VVIzkXQ
-iXqAQew+tQHuuS5iRH21svDlg2Idbzu1aUzdxyD7sHBaxfZKlxRKY4/aOw0n47kG
-o1Mc29OdioqqfNegORXVA4tPDqt4LwVpjKNaa3BrnrEjrdPvqV0BGzd+Bw+Xy3k6
-fwI9QGIgY6iAkto=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 -----END CERTIFICATE-----

test/ssl/client-expired.csr

 -----BEGIN CERTIFICATE REQUEST-----
-MIIBwTCCASoCAQAwgYAxCzAJBgNVBAYTAkdCMRgwFgYDVQQIDA9Ob3R0aW5naGFt
-c2hpcmUxEzARBgNVBAcMCk5vdHRpbmdoYW0xDzANBgNVBAoMBlNlcnZlcjETMBEG
-A1UECwwKUHJvZHVjdGlvbjEcMBoGA1UEAwwTdGVzdCBjbGllbnQgZXhwaXJlZDCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAuGeHzwU1KYGxFuMKHFmDNtwx26/y
-qRKX55bIkXykUmVDefQg4F/twLQyncc9IZqekmxCCAaIZdVPXnDZfeHeS74m4gaZ
-SlT35xzWfG/VFo2wnc5dKfFR6RL9L+3W/OHM1jEOzg50AvMecEFEXWftO50vQ7iJ
-b5BSm/Hp/O34NdECAwEAAaAAMA0GCSqGSIb3DQEBCwUAA4GBAJApMCk6dQ5JLqES
-o3owRsIQb9cNv0D65uRFx02DK2kkC4j1k+QztieaXAcH6mlS3DlpeTvSw7HutypE
-L8XaG1yt+Yj11ZQydq1kb867nkIrRboGP16Zq5jiaI/q2OqmIz6kLU98mmDkgFdn
-ME6BEnpw2VeRojXkrTqUpCgbX9E8
+MIICxDCCAawCAQAwfzELMAkGA1UEBhMCR0IxEjAQBgNVBAgMCVdpbHRzaGlyZTES
+MBAGA1UEBwwJU2FsaXNidXJ5MRUwEwYDVQQKDAxQYWhvIFByb2plY3QxEzARBgNV
+BAsMClByb2R1Y3Rpb24xHDAaBgNVBAMME3Rlc3QgY2xpZW50IGV4cGlyZWQwggEi
+MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJA7xDjh4uzaxKMy+Z/N6bQ//D
+wsqr3qjiEBuG0lHvcSYffA5cW13nHmIl69sfen/Ihzt5OLQL5o5Di4s66IUKL3cT
+gMsbhjD/f/micGheC91/S330gis5XUPN/dk4vk5PD11c9sxJldW01aFWkzgdYl5Y
+85A8RB49hSsPn0+emuOxSxio4QVriMXqv6aFuTyfAq2DMQle46KxeGu8stEF9SI6
+kKUcD7WUqimqfcju9TqPLDJC4cDsj6hzyjgXBcnAzuLEQGgLT4b7GzWcTmmBT8jP
+CQbr7Tr2RoZPkfg1vjzKA6QPPXVW0ZN/otIyON8CrCv/oZSkgLefyp5RDxq7AgMB
+AAGgADANBgkqhkiG9w0BAQsFAAOCAQEAr9d9azRVmuIWQnmJNip0EFlErm2sxfdc
+iMLJBgWkxVPDMT2OFvs/XLsjTdf3vMm6QClgMoRRofbYoPjNkyxxWmKoor3BvY1U
+Lievox0/zjshOMenuwhg6zX5dctEtQ6Ywiud5/Tq4GpqScyxQIbKKk7M1WmxTk7i
+iJJ5x3qA5Yr7LyLjhrixDxTDybWuopCd9Ps5xhVY4BiquAPN7Z4jgEJllY4p9oji
+CSxr1egexMALApc20KfS52rDtIPk3YOyd6whdXw08ekHVOH2cqWg0fnspfE1RwrI
+aYrUMcNA23wwK89HZ6+wm3375UtEohzmQbqdQE8xIWv/t/rmTyx65A==
 -----END CERTIFICATE REQUEST-----

test/ssl/client-revoked.crt

@@ -2,25 +2,34 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 4 (0x4)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Signing CA
         Validity
-            Not Before: Mar  1 18:53:51 2018 GMT
-            Not After : Feb 28 18:53:51 2023 GMT
-        Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=test client revoked
+            Not Before: Apr 13 13:22:44 2023 GMT
+            Not After : Apr 11 13:22:44 2028 GMT
+        Subject: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Production, CN=test client revoked
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:ca:88:c0:97:79:0c:af:97:dc:f2:06:5a:12:3d:
-                    07:bf:d0:ca:f3:90:e2:fa:a6:36:c7:67:0c:50:30:
-                    b6:98:1c:83:16:03:fa:7d:00:77:37:00:49:93:3d:
-                    20:0b:e8:fb:8f:20:a2:6a:29:df:ae:ee:38:38:a8:
-                    3b:76:b2:92:96:63:46:0b:b2:47:5f:5d:9b:8d:dc:
-                    31:95:3b:ac:e9:ab:c6:89:00:46:61:58:7f:b5:39:
-                    c6:97:7e:5c:f5:06:f0:ea:82:e6:11:27:18:1f:af:
-                    2c:cb:21:43:75:e3:cf:fa:41:d8:17:17:87:ce:29:
-                    df:7f:75:d6:1f:20:d7:29:03
+                    00:b0:df:00:8c:5f:84:08:db:a5:1a:6f:2c:2c:b8:
+                    35:e7:41:7e:ef:65:09:97:a3:87:35:b5:ce:62:29:
+                    e9:e6:05:47:22:83:d8:22:d1:77:a7:c1:44:05:45:
+                    54:e7:26:84:88:56:8d:5e:33:b2:4c:21:47:81:48:
+                    01:80:2c:bf:91:fe:0d:cd:20:c2:5e:09:be:7c:26:
+                    5e:d7:ee:18:94:af:4f:25:00:81:c9:90:e9:2e:b4:
+                    e0:31:b8:56:c2:45:24:07:4a:48:49:9a:6d:3e:9d:
+                    df:50:2a:19:1a:34:37:18:84:19:9c:90:66:cb:3e:
+                    39:7b:f7:72:d9:76:bb:de:e6:04:d0:d7:2c:5b:13:
+                    41:59:13:f0:22:e1:0c:58:40:32:8b:37:74:6b:71:
+                    15:31:47:19:08:90:56:11:c8:56:eb:37:9c:0c:cc:
+                    d8:21:2b:01:92:ff:13:7f:f1:d1:83:7e:67:a7:3a:
+                    1a:20:0f:f5:f0:04:9e:ad:69:64:05:68:2f:4c:ff:
+                    c3:63:55:1c:ff:6f:6e:49:19:e9:93:81:77:53:a2:
+                    4d:d2:50:ce:4a:4e:9c:8b:67:4d:5b:50:fa:05:cc:
+                    88:76:69:81:30:d8:ee:c9:3b:c2:69:77:09:12:77:
+                    df:17:c7:33:db:de:10:84:a1:89:95:a2:a6:9b:43:
+                    60:91
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,34 +37,46 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                53:1F:81:85:BB:93:78:8A:B4:22:F8:8C:E0:6C:99:5F:B6:AA:B5:9B
+                08:82:0F:14:6E:DC:5F:22:10:D1:D7:8A:84:92:80:AB:4F:40:D5:BA
             X509v3 Authority Key Identifier: 
-                keyid:9E:54:3E:E5:2F:E5:EA:40:4A:FC:37:96:6C:45:BB:1A:79:0E:CA:AB
+                keyid:E1:BE:F5:5F:36:50:CF:FE:3D:42:EE:80:33:22:46:C2:3D:2A:41:41
 
     Signature Algorithm: sha256WithRSAEncryption
-         24:f6:97:b8:b2:ac:eb:83:35:d8:fa:3e:86:13:a6:44:85:10:
-         c5:ba:33:c5:58:98:bc:6e:fe:30:60:12:41:ce:ac:3f:ed:38:
-         e6:5f:ff:b5:29:73:a7:f6:60:41:b2:10:23:da:74:f2:29:d6:
-         f1:bb:94:38:14:fc:75:50:64:f4:4d:d2:6a:3d:f0:da:e0:e8:
-         e2:b9:be:a4:30:b4:c7:c3:22:60:c4:a4:34:31:13:7b:46:9d:
-         bb:5f:8e:cd:21:9d:52:78:e5:e3:e9:e6:e8:62:16:a1:f0:af:
-         14:c8:2c:39:a6:2f:a9:f4:98:cf:8c:20:20:87:c2:15:78:e4:
-         53:23
+         1d:8c:d5:f1:52:8e:c3:ca:1a:66:6c:21:f3:8a:41:4b:53:a8:
+         36:73:15:f3:56:38:93:48:9d:ff:3e:cd:36:24:d2:bf:17:da:
+         48:6b:26:2a:67:3d:0e:fd:eb:9e:9f:b2:64:40:74:13:b8:48:
+         e6:e9:f5:6b:2b:7d:62:7a:d4:8f:01:9a:ab:b9:cc:01:1b:3d:
+         69:27:17:0b:84:91:f8:49:10:69:2f:68:31:13:71:c0:42:ac:
+         d4:ff:06:c9:7b:a2:4c:7f:c9:06:66:0c:b4:a5:8f:e0:f3:9f:
+         bb:86:10:6a:47:fa:20:1e:9c:d4:03:ef:4a:46:c5:c3:b6:72:
+         f2:6d:48:45:51:fe:44:4c:05:4e:db:18:41:e4:21:3f:2a:00:
+         11:86:1c:cc:85:de:68:da:ec:86:19:6f:9b:b9:a8:85:47:7d:
+         7b:6e:88:3b:3d:e3:86:96:2b:80:7b:31:a0:ea:24:a4:43:5c:
+         20:df:55:88:31:13:a7:eb:15:18:ba:23:95:c6:2e:53:90:05:
+         9d:b4:04:9d:c1:44:d7:97:b4:27:51:cc:ac:a8:c7:3a:d0:dd:
+         45:a8:48:a3:5d:33:39:77:94:a6:c2:94:b5:c6:a6:15:ff:8e:
+         c8:ba:ce:33:c7:6b:f9:74:61:c9:f8:0f:41:88:1c:7b:18:26:
+         48:66:64:f8
 -----BEGIN CERTIFICATE-----
-MIIC1zCCAkCgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
-EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTgwMzAx
-MTg1MzUxWhcNMjMwMjI4MTg1MzUxWjCBgDELMAkGA1UEBhMCR0IxGDAWBgNVBAgM
-D05vdHRpbmdoYW1zaGlyZTETMBEGA1UEBwwKTm90dGluZ2hhbTEPMA0GA1UECgwG
-U2VydmVyMRMwEQYDVQQLDApQcm9kdWN0aW9uMRwwGgYDVQQDDBN0ZXN0IGNsaWVu
-dCByZXZva2VkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDKiMCXeQyvl9zy
-BloSPQe/0MrzkOL6pjbHZwxQMLaYHIMWA/p9AHc3AEmTPSAL6PuPIKJqKd+u7jg4
-qDt2spKWY0YLskdfXZuN3DGVO6zpq8aJAEZhWH+1OcaXflz1BvDqguYRJxgfryzL
-IUN148/6QdgXF4fOKd9/ddYfINcpAwIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCG
-SAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4E
-FgQUUx+BhbuTeIq0IviM4GyZX7aqtZswHwYDVR0jBBgwFoAUnlQ+5S/l6kBK/DeW
-bEW7GnkOyqswDQYJKoZIhvcNAQELBQADgYEAJPaXuLKs64M12Po+hhOmRIUQxboz
-xViYvG7+MGASQc6sP+045l//tSlzp/ZgQbIQI9p08inW8buUOBT8dVBk9E3Saj3w
-2uDo4rm+pDC0x8MiYMSkNDETe0adu1+OzSGdUnjl4+nm6GIWofCvFMgsOaYvqfSY
-z4wgIIfCFXjkUyM=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 -----END CERTIFICATE-----

test/ssl/client-revoked.csr

 -----BEGIN CERTIFICATE REQUEST-----
-MIIBwTCCASoCAQAwgYAxCzAJBgNVBAYTAkdCMRgwFgYDVQQIDA9Ob3R0aW5naGFt
-c2hpcmUxEzARBgNVBAcMCk5vdHRpbmdoYW0xDzANBgNVBAoMBlNlcnZlcjETMBEG
-A1UECwwKUHJvZHVjdGlvbjEcMBoGA1UEAwwTdGVzdCBjbGllbnQgcmV2b2tlZDCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAyojAl3kMr5fc8gZaEj0Hv9DK85Di
-+qY2x2cMUDC2mByDFgP6fQB3NwBJkz0gC+j7jyCiainfru44OKg7drKSlmNGC7JH
-X12bjdwxlTus6avGiQBGYVh/tTnGl35c9Qbw6oLmEScYH68syyFDdePP+kHYFxeH
-zinff3XWHyDXKQMCAwEAAaAAMA0GCSqGSIb3DQEBCwUAA4GBAGzSotjaZM3jQb4d
-+RMmTpkWpOkhhyrhbFnzuMHN78hoS0VKdD/DsfQ+k7ARah3Y8CAicSZFc6IJHhic
-Cmj4m/jOQGAhq1sfuGiEd6FNdwOSJZb2bhhk+EKFaYM3Sool/u20Lt16R4xpBEVy
-K/zE75Uy+L9MzyXqzTee1ujLoPD+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 -----END CERTIFICATE REQUEST-----

test/ssl/client-revoked.key

 -----BEGIN RSA PRIVATE KEY-----
-MIICXgIBAAKBgQDKiMCXeQyvl9zyBloSPQe/0MrzkOL6pjbHZwxQMLaYHIMWA/p9
-AHc3AEmTPSAL6PuPIKJqKd+u7jg4qDt2spKWY0YLskdfXZuN3DGVO6zpq8aJAEZh
-WH+1OcaXflz1BvDqguYRJxgfryzLIUN148/6QdgXF4fOKd9/ddYfINcpAwIDAQAB
-AoGAHsbvNVVwxxI1whWTBGh/z/dDkAW5aEtv0ZdoOJtec/kJNoQ+QVabxyDlDVnh
-j83ExHg6FhXs5uFOa9Wsy5nRSoGDIBcxsvz3aN1RKPxoT82D3+52oe5rXZCoemRX
-xYQYOvNoElms8GvqodUH/GfeAfpfK6LIxLhlFSPmrRAtEpkCQQD+hsbHWUwHZd10
-5vD12yYS4UGsnO8zMh5Fj3efRU63Jifyz+2x2aj3niSH8FOTmTvcnlrBAuwuNfA1
-vTXZqfBPAkEAy7TrjrrqyEEbSyS+gNtl7mZpOTjlxGlt0yGiLTuJuxExDc+b8hZw
-HUw8CHQuEIFYQhUa9e77THWe9PCA10B7DQJBAMKR3xT3U2J4YXGDNYKMU6+tGNpO
-YaDeWDvOr6BGiCUD+xfoEYmanUslTkHI2usDAbrmJvRTOp8cxpMeIDNTcIsCQQCQ
-olBt8wEoVjHO1LP+QcjJ0CT94AwjvMehlMvVWeSc0cQGjlWnOY84/hvR1MuwJGZJ
-5TpTS+9Zhlnqh6izLLExAkEAx/56MWBwhQQ+WIvKxHHe+u6rCSM4qRRZtAlKxqH1
-0KhILw+gtafscbyb4rfpvHr9TUY/g0v1OGgFERUXSj+jAA==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 -----END RSA PRIVATE KEY-----

test/ssl/client.crt

@@ -2,25 +2,34 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Signing CA
         Validity
-            Not Before: Mar  1 18:53:47 2018 GMT
-            Not After : Feb 28 18:53:47 2023 GMT
-        Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=test client
+            Not Before: Apr 13 13:22:40 2023 GMT
+            Not After : Apr 11 13:22:40 2028 GMT
+        Subject: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Production, CN=test client
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:b8:67:87:cf:05:35:29:81:b1:16:e3:0a:1c:59:
-                    83:36:dc:31:db:af:f2:a9:12:97:e7:96:c8:91:7c:
-                    a4:52:65:43:79:f4:20:e0:5f:ed:c0:b4:32:9d:c7:
-                    3d:21:9a:9e:92:6c:42:08:06:88:65:d5:4f:5e:70:
-                    d9:7d:e1:de:4b:be:26:e2:06:99:4a:54:f7:e7:1c:
-                    d6:7c:6f:d5:16:8d:b0:9d:ce:5d:29:f1:51:e9:12:
-                    fd:2f:ed:d6:fc:e1:cc:d6:31:0e:ce:0e:74:02:f3:
-                    1e:70:41:44:5d:67:ed:3b:9d:2f:43:b8:89:6f:90:
-                    52:9b:f1:e9:fc:ed:f8:35:d1
+                    00:c9:03:bc:43:8e:1e:2e:cd:ac:4a:33:2f:99:fc:
+                    de:9b:43:ff:c3:c2:ca:ab:de:a8:e2:10:1b:86:d2:
+                    51:ef:71:26:1f:7c:0e:5c:5b:5d:e7:1e:62:25:eb:
+                    db:1f:7a:7f:c8:87:3b:79:38:b4:0b:e6:8e:43:8b:
+                    8b:3a:e8:85:0a:2f:77:13:80:cb:1b:86:30:ff:7f:
+                    f9:a2:70:68:5e:0b:dd:7f:4b:7d:f4:82:2b:39:5d:
+                    43:cd:fd:d9:38:be:4e:4f:0f:5d:5c:f6:cc:49:95:
+                    d5:b4:d5:a1:56:93:38:1d:62:5e:58:f3:90:3c:44:
+                    1e:3d:85:2b:0f:9f:4f:9e:9a:e3:b1:4b:18:a8:e1:
+                    05:6b:88:c5:ea:bf:a6:85:b9:3c:9f:02:ad:83:31:
+                    09:5e:e3:a2:b1:78:6b:bc:b2:d1:05:f5:22:3a:90:
+                    a5:1c:0f:b5:94:aa:29:aa:7d:c8:ee:f5:3a:8f:2c:
+                    32:42:e1:c0:ec:8f:a8:73:ca:38:17:05:c9:c0:ce:
+                    e2:c4:40:68:0b:4f:86:fb:1b:35:9c:4e:69:81:4f:
+                    c8:cf:09:06:eb:ed:3a:f6:46:86:4f:91:f8:35:be:
+                    3c:ca:03:a4:0f:3d:75:56:d1:93:7f:a2:d2:32:38:
+                    df:02:ac:2b:ff:a1:94:a4:80:b7:9f:ca:9e:51:0f:
+                    1a:bb
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,34 +37,46 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                27:DF:0F:D3:9A:8F:34:C8:9E:C1:6D:B9:29:99:0F:0D:3A:D1:BB:BD
+                DF:C7:7A:E1:90:8C:51:CB:9F:32:43:B0:A6:60:E8:FB:A0:79:6E:F0
             X509v3 Authority Key Identifier: 
-                keyid:9E:54:3E:E5:2F:E5:EA:40:4A:FC:37:96:6C:45:BB:1A:79:0E:CA:AB
+                keyid:E1:BE:F5:5F:36:50:CF:FE:3D:42:EE:80:33:22:46:C2:3D:2A:41:41
 
     Signature Algorithm: sha256WithRSAEncryption
-         a1:0d:e1:4b:25:ef:4e:67:28:93:33:68:49:65:0e:18:eb:3f:
-         17:ae:47:68:75:4d:72:f5:41:6b:c5:f0:1d:06:0d:25:3d:fa:
-         ab:39:17:f4:e2:34:b7:49:9d:69:a1:92:4a:69:1b:17:42:5b:
-         c6:79:6f:20:31:81:5c:52:c2:58:6b:a0:ba:9a:fe:55:0e:8d:
-         0b:80:9f:4a:97:ed:05:05:90:a6:13:23:70:d0:56:93:a6:f4:
-         66:af:f0:96:05:8b:67:89:72:67:04:f4:5e:44:36:20:4e:b4:
-         97:b4:b2:3b:aa:e2:44:b1:ee:49:13:2c:af:e7:6d:37:e8:09:
-         50:6d
+         5b:94:99:5f:8d:97:69:31:9d:ea:3d:e1:a5:a8:75:4c:1a:ef:
+         c0:cb:b1:92:a6:19:c4:a1:25:12:2f:64:3c:af:6d:d4:48:b8:
+         77:e8:29:4b:5a:6a:50:65:85:c7:ba:22:a5:9c:24:93:75:fc:
+         3e:ee:81:23:a4:89:da:89:4c:54:3b:02:8f:2d:de:dd:85:df:
+         11:ac:26:b5:e6:b5:d9:82:21:28:90:3c:45:42:fe:7a:0a:ba:
+         46:6c:8f:05:1d:ff:6f:c6:47:16:04:f3:4b:b3:e2:82:a2:3b:
+         97:71:78:0b:12:19:db:a4:fc:2f:e1:ce:2b:b1:b6:8b:1b:30:
+         69:6a:b0:16:2e:2a:c1:a1:d5:69:ab:b2:b4:95:e1:8f:bf:dc:
+         4e:33:7d:06:8c:2b:37:ca:d9:c2:49:b4:4b:ec:32:ac:f1:12:
+         80:c9:08:02:67:d9:f8:90:62:d9:27:4d:14:67:7b:09:bb:bc:
+         56:8a:68:57:d5:6b:4f:df:00:14:0a:69:45:fc:30:5f:88:3a:
+         37:b8:55:8f:a6:8e:fe:48:d8:1b:25:4b:e8:c1:16:84:26:5b:
+         e5:0b:ba:96:11:a0:db:b2:68:57:a9:55:f3:a8:03:65:82:da:
+         9d:40:19:73:8f:d6:ab:98:fa:26:15:27:da:46:ab:29:df:a9:
+         61:8b:55:2d
 -----BEGIN CERTIFICATE-----
-MIICzjCCAjegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
-EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTgwMzAx
-MTg1MzQ3WhcNMjMwMjI4MTg1MzQ3WjB4MQswCQYDVQQGEwJHQjEYMBYGA1UECAwP
-Tm90dGluZ2hhbXNoaXJlMRMwEQYDVQQHDApOb3R0aW5naGFtMQ8wDQYDVQQKDAZT
-ZXJ2ZXIxEzARBgNVBAsMClByb2R1Y3Rpb24xFDASBgNVBAMMC3Rlc3QgY2xpZW50
-MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4Z4fPBTUpgbEW4wocWYM23DHb
-r/KpEpfnlsiRfKRSZUN59CDgX+3AtDKdxz0hmp6SbEIIBohl1U9ecNl94d5Lvibi
-BplKVPfnHNZ8b9UWjbCdzl0p8VHpEv0v7db84czWMQ7ODnQC8x5wQURdZ+07nS9D
-uIlvkFKb8en87fg10QIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQf
-Fh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUJ98P05qP
-NMiewW25KZkPDTrRu70wHwYDVR0jBBgwFoAUnlQ+5S/l6kBK/DeWbEW7GnkOyqsw
-DQYJKoZIhvcNAQELBQADgYEAoQ3hSyXvTmcokzNoSWUOGOs/F65HaHVNcvVBa8Xw
-HQYNJT36qzkX9OI0t0mdaaGSSmkbF0JbxnlvIDGBXFLCWGugupr+VQ6NC4CfSpft
-BQWQphMjcNBWk6b0Zq/wlgWLZ4lyZwT0XkQ2IE60l7SyO6riRLHuSRMsr+dtN+gJ
-UG0=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 -----END CERTIFICATE-----

test/ssl/client.csr

 -----BEGIN CERTIFICATE REQUEST-----
-MIIBuDCCASECAQAweDELMAkGA1UEBhMCR0IxGDAWBgNVBAgMD05vdHRpbmdoYW1z
-aGlyZTETMBEGA1UEBwwKTm90dGluZ2hhbTEPMA0GA1UECgwGU2VydmVyMRMwEQYD
-VQQLDApQcm9kdWN0aW9uMRQwEgYDVQQDDAt0ZXN0IGNsaWVudDCBnzANBgkqhkiG
-9w0BAQEFAAOBjQAwgYkCgYEAuGeHzwU1KYGxFuMKHFmDNtwx26/yqRKX55bIkXyk
-UmVDefQg4F/twLQyncc9IZqekmxCCAaIZdVPXnDZfeHeS74m4gaZSlT35xzWfG/V
-Fo2wnc5dKfFR6RL9L+3W/OHM1jEOzg50AvMecEFEXWftO50vQ7iJb5BSm/Hp/O34
-NdECAwEAAaAAMA0GCSqGSIb3DQEBCwUAA4GBABHID597FhoqxMtsvA8ggyW3S1Cc
-v8ycjmt3hn0fEg1SkSsCKL3CY98fxnhL71Eprsx0j7CcuwLaRiOkxzEFflzMAdDU
-3nMFyKc0YVKh3+j2yzE2oSKWQVGtg17pGw1DX17gerDe7iKLpZt855agtwawHvCZ
-kdwNWoUR43fFT2i7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 -----END CERTIFICATE REQUEST-----

test/ssl/client.key

 -----BEGIN RSA PRIVATE KEY-----
-MIICXgIBAAKBgQC4Z4fPBTUpgbEW4wocWYM23DHbr/KpEpfnlsiRfKRSZUN59CDg
-X+3AtDKdxz0hmp6SbEIIBohl1U9ecNl94d5LvibiBplKVPfnHNZ8b9UWjbCdzl0p
-8VHpEv0v7db84czWMQ7ODnQC8x5wQURdZ+07nS9DuIlvkFKb8en87fg10QIDAQAB
-AoGAPTRfpx6bXoNlO6tvl6k+G99JzRjA+czqDjvFpkQwZgimNLwKjW5Jg0RL6IJQ
-j+654u97mx5P9zytczMRfO6S0RCd7Ba/bYzUr+zP3yAiZt1B71Iu+emOlrRtIglT
-P/jee3Z3017Hqe1K0l/xu0F/a2cKKEMxBDwEvMn3jhkvumECQQDhxKMHavo+nDAc
-YNrwE2VxWYhZApGVzsGzO8tgQ95IN/BlmYptGQPyssNNItWvbfF6EjB0rTwcMWF2
-hCEoeg2bAkEA0Rjws4kGaP9jwOi7lEOKIrutv5Dfb6euioyvhDD/YxXt7YCijVwG
-ATZLkVEiL8G0E5tvkMR7O4ho6hHft5V3AwJBAK9LIx4OVNCqKrzOAxAmrzwMPU6H
-LQy5JTKJ+cX7zCocrN3mElHU+3jEjdllc66rWbPjTZY6L5LgUIFZ4/juk4MCQQCM
-4x8b+VHGYX5XNvlc9v0WVhrGHtlOJE+orw58JX+OxfHgu3HLiZvKKUlVirNcNkod
-g/fyNVFLVahLPuvciOr9AkEA1gzbg9q7kxKlFLlOYtowbLbMS/u8BUsaQJv1g05A
-Yua6Wg8D4gr3/aNKQhLLXe7fHCAPs61n/KyD2aat8I2xBQ==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 -----END RSA PRIVATE KEY-----

test/ssl/client.pem

@@ -2,25 +2,34 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Signing CA
         Validity
-            Not Before: Mar  1 18:53:47 2018 GMT
-            Not After : Feb 28 18:53:47 2023 GMT
-        Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=test client
+            Not Before: Apr 13 13:22:40 2023 GMT
+            Not After : Apr 11 13:22:40 2028 GMT
+        Subject: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Production, CN=test client
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:b8:67:87:cf:05:35:29:81:b1:16:e3:0a:1c:59:
-                    83:36:dc:31:db:af:f2:a9:12:97:e7:96:c8:91:7c:
-                    a4:52:65:43:79:f4:20:e0:5f:ed:c0:b4:32:9d:c7:
-                    3d:21:9a:9e:92:6c:42:08:06:88:65:d5:4f:5e:70:
-                    d9:7d:e1:de:4b:be:26:e2:06:99:4a:54:f7:e7:1c:
-                    d6:7c:6f:d5:16:8d:b0:9d:ce:5d:29:f1:51:e9:12:
-                    fd:2f:ed:d6:fc:e1:cc:d6:31:0e:ce:0e:74:02:f3:
-                    1e:70:41:44:5d:67:ed:3b:9d:2f:43:b8:89:6f:90:
-                    52:9b:f1:e9:fc:ed:f8:35:d1
+                    00:c9:03:bc:43:8e:1e:2e:cd:ac:4a:33:2f:99:fc:
+                    de:9b:43:ff:c3:c2:ca:ab:de:a8:e2:10:1b:86:d2:
+                    51:ef:71:26:1f:7c:0e:5c:5b:5d:e7:1e:62:25:eb:
+                    db:1f:7a:7f:c8:87:3b:79:38:b4:0b:e6:8e:43:8b:
+                    8b:3a:e8:85:0a:2f:77:13:80:cb:1b:86:30:ff:7f:
+                    f9:a2:70:68:5e:0b:dd:7f:4b:7d:f4:82:2b:39:5d:
+                    43:cd:fd:d9:38:be:4e:4f:0f:5d:5c:f6:cc:49:95:
+                    d5:b4:d5:a1:56:93:38:1d:62:5e:58:f3:90:3c:44:
+                    1e:3d:85:2b:0f:9f:4f:9e:9a:e3:b1:4b:18:a8:e1:
+                    05:6b:88:c5:ea:bf:a6:85:b9:3c:9f:02:ad:83:31:
+                    09:5e:e3:a2:b1:78:6b:bc:b2:d1:05:f5:22:3a:90:
+                    a5:1c:0f:b5:94:aa:29:aa:7d:c8:ee:f5:3a:8f:2c:
+                    32:42:e1:c0:ec:8f:a8:73:ca:38:17:05:c9:c0:ce:
+                    e2:c4:40:68:0b:4f:86:fb:1b:35:9c:4e:69:81:4f:
+                    c8:cf:09:06:eb:ed:3a:f6:46:86:4f:91:f8:35:be:
+                    3c:ca:03:a4:0f:3d:75:56:d1:93:7f:a2:d2:32:38:
+                    df:02:ac:2b:ff:a1:94:a4:80:b7:9f:ca:9e:51:0f:
+                    1a:bb
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,124 +37,175 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                27:DF:0F:D3:9A:8F:34:C8:9E:C1:6D:B9:29:99:0F:0D:3A:D1:BB:BD
+                DF:C7:7A:E1:90:8C:51:CB:9F:32:43:B0:A6:60:E8:FB:A0:79:6E:F0
             X509v3 Authority Key Identifier: 
-                keyid:9E:54:3E:E5:2F:E5:EA:40:4A:FC:37:96:6C:45:BB:1A:79:0E:CA:AB
+                keyid:E1:BE:F5:5F:36:50:CF:FE:3D:42:EE:80:33:22:46:C2:3D:2A:41:41
 
     Signature Algorithm: sha256WithRSAEncryption
-         a1:0d:e1:4b:25:ef:4e:67:28:93:33:68:49:65:0e:18:eb:3f:
-         17:ae:47:68:75:4d:72:f5:41:6b:c5:f0:1d:06:0d:25:3d:fa:
-         ab:39:17:f4:e2:34:b7:49:9d:69:a1:92:4a:69:1b:17:42:5b:
-         c6:79:6f:20:31:81:5c:52:c2:58:6b:a0:ba:9a:fe:55:0e:8d:
-         0b:80:9f:4a:97:ed:05:05:90:a6:13:23:70:d0:56:93:a6:f4:
-         66:af:f0:96:05:8b:67:89:72:67:04:f4:5e:44:36:20:4e:b4:
-         97:b4:b2:3b:aa:e2:44:b1:ee:49:13:2c:af:e7:6d:37:e8:09:
-         50:6d
+         5b:94:99:5f:8d:97:69:31:9d:ea:3d:e1:a5:a8:75:4c:1a:ef:
+         c0:cb:b1:92:a6:19:c4:a1:25:12:2f:64:3c:af:6d:d4:48:b8:
+         77:e8:29:4b:5a:6a:50:65:85:c7:ba:22:a5:9c:24:93:75:fc:
+         3e:ee:81:23:a4:89:da:89:4c:54:3b:02:8f:2d:de:dd:85:df:
+         11:ac:26:b5:e6:b5:d9:82:21:28:90:3c:45:42:fe:7a:0a:ba:
+         46:6c:8f:05:1d:ff:6f:c6:47:16:04:f3:4b:b3:e2:82:a2:3b:
+         97:71:78:0b:12:19:db:a4:fc:2f:e1:ce:2b:b1:b6:8b:1b:30:
+         69:6a:b0:16:2e:2a:c1:a1:d5:69:ab:b2:b4:95:e1:8f:bf:dc:
+         4e:33:7d:06:8c:2b:37:ca:d9:c2:49:b4:4b:ec:32:ac:f1:12:
+         80:c9:08:02:67:d9:f8:90:62:d9:27:4d:14:67:7b:09:bb:bc:
+         56:8a:68:57:d5:6b:4f:df:00:14:0a:69:45:fc:30:5f:88:3a:
+         37:b8:55:8f:a6:8e:fe:48:d8:1b:25:4b:e8:c1:16:84:26:5b:
+         e5:0b:ba:96:11:a0:db:b2:68:57:a9:55:f3:a8:03:65:82:da:
+         9d:40:19:73:8f:d6:ab:98:fa:26:15:27:da:46:ab:29:df:a9:
+         61:8b:55:2d
 -----BEGIN CERTIFICATE-----
-MIICzjCCAjegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
-EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTgwMzAx
-MTg1MzQ3WhcNMjMwMjI4MTg1MzQ3WjB4MQswCQYDVQQGEwJHQjEYMBYGA1UECAwP
-Tm90dGluZ2hhbXNoaXJlMRMwEQYDVQQHDApOb3R0aW5naGFtMQ8wDQYDVQQKDAZT
-ZXJ2ZXIxEzARBgNVBAsMClByb2R1Y3Rpb24xFDASBgNVBAMMC3Rlc3QgY2xpZW50
-MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4Z4fPBTUpgbEW4wocWYM23DHb
-r/KpEpfnlsiRfKRSZUN59CDgX+3AtDKdxz0hmp6SbEIIBohl1U9ecNl94d5Lvibi
-BplKVPfnHNZ8b9UWjbCdzl0p8VHpEv0v7db84czWMQ7ODnQC8x5wQURdZ+07nS9D
-uIlvkFKb8en87fg10QIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQf
-Fh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUJ98P05qP
-NMiewW25KZkPDTrRu70wHwYDVR0jBBgwFoAUnlQ+5S/l6kBK/DeWbEW7GnkOyqsw
-DQYJKoZIhvcNAQELBQADgYEAoQ3hSyXvTmcokzNoSWUOGOs/F65HaHVNcvVBa8Xw
-HQYNJT36qzkX9OI0t0mdaaGSSmkbF0JbxnlvIDGBXFLCWGugupr+VQ6NC4CfSpft
-BQWQphMjcNBWk6b0Zq/wlgWLZ4lyZwT0XkQ2IE60l7SyO6riRLHuSRMsr+dtN+gJ
-UG0=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 -----END CERTIFICATE-----
 -----BEGIN RSA PRIVATE KEY-----
-MIICXgIBAAKBgQC4Z4fPBTUpgbEW4wocWYM23DHbr/KpEpfnlsiRfKRSZUN59CDg
-X+3AtDKdxz0hmp6SbEIIBohl1U9ecNl94d5LvibiBplKVPfnHNZ8b9UWjbCdzl0p
-8VHpEv0v7db84czWMQ7ODnQC8x5wQURdZ+07nS9DuIlvkFKb8en87fg10QIDAQAB
-AoGAPTRfpx6bXoNlO6tvl6k+G99JzRjA+czqDjvFpkQwZgimNLwKjW5Jg0RL6IJQ
-j+654u97mx5P9zytczMRfO6S0RCd7Ba/bYzUr+zP3yAiZt1B71Iu+emOlrRtIglT
-P/jee3Z3017Hqe1K0l/xu0F/a2cKKEMxBDwEvMn3jhkvumECQQDhxKMHavo+nDAc
-YNrwE2VxWYhZApGVzsGzO8tgQ95IN/BlmYptGQPyssNNItWvbfF6EjB0rTwcMWF2
-hCEoeg2bAkEA0Rjws4kGaP9jwOi7lEOKIrutv5Dfb6euioyvhDD/YxXt7YCijVwG
-ATZLkVEiL8G0E5tvkMR7O4ho6hHft5V3AwJBAK9LIx4OVNCqKrzOAxAmrzwMPU6H
-LQy5JTKJ+cX7zCocrN3mElHU+3jEjdllc66rWbPjTZY6L5LgUIFZ4/juk4MCQQCM
-4x8b+VHGYX5XNvlc9v0WVhrGHtlOJE+orw58JX+OxfHgu3HLiZvKKUlVirNcNkod
-g/fyNVFLVahLPuvciOr9AkEA1gzbg9q7kxKlFLlOYtowbLbMS/u8BUsaQJv1g05A
-Yua6Wg8D4gr3/aNKQhLLXe7fHCAPs61n/KyD2aat8I2xBQ==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 -----END RSA PRIVATE KEY-----
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, L=Derby, O=Mosquitto Project, OU=Testing, CN=Root CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Testing, CN=Root CA
         Validity
-            Not Before: Mar  1 18:53:36 2018 GMT
-            Not After : Feb 28 18:53:36 2023 GMT
-        Subject: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
+            Not Before: Apr 13 13:22:31 2023 GMT
+            Not After : Apr 11 13:22:31 2028 GMT
+        Subject: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Signing CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:af:ad:b0:e4:78:b8:73:01:6a:9e:78:1e:bf:36:
-                    5b:60:dc:ee:28:ce:16:3c:73:30:b3:02:cd:5c:07:
-                    a2:36:ee:a1:c5:43:32:0c:46:57:cb:fb:1c:52:db:
-                    4e:65:85:8a:5d:a6:cd:66:43:ad:bc:70:1b:e6:b0:
-                    11:0f:d8:54:1f:57:9e:29:4e:2b:1b:c5:70:b2:3d:
-                    38:a7:63:3f:1a:06:2f:6d:09:2c:7c:90:60:db:8c:
-                    3a:11:20:a7:db:20:25:d9:c6:97:74:50:5a:e0:fd:
-                    81:aa:de:ea:1d:e5:be:61:59:0d:76:e5:ab:7f:3b:
-                    b2:a6:38:b9:bb:32:aa:72:ef
+                    00:e6:ce:0e:a2:6a:56:1c:35:8c:7a:af:31:43:7d:
+                    28:cb:61:15:81:2d:37:ff:f1:8f:7d:78:c3:37:58:
+                    8f:6a:4c:00:b6:9d:04:f3:1c:cd:fb:ca:7d:c0:dc:
+                    2b:3b:e4:c1:00:0c:71:83:df:cf:12:6f:98:ea:19:
+                    01:0b:87:5f:df:a7:58:76:9c:56:b9:f2:1d:d8:9f:
+                    24:89:eb:af:7f:fe:47:5a:a8:b3:79:c2:46:be:38:
+                    bf:77:03:61:b7:de:d0:ae:37:8b:ad:0d:02:5c:c3:
+                    e2:3a:17:e7:fc:86:9e:cd:ff:87:21:4a:c9:f5:c2:
+                    3d:bf:c9:14:1e:19:d9:89:19:e9:d9:b2:c8:a9:e9:
+                    d2:9b:ae:73:f2:b7:e7:fc:3d:9b:c3:72:b6:be:10:
+                    fc:0c:c2:eb:b7:8f:4a:67:4c:1b:43:ca:4e:58:df:
+                    cc:74:c6:6b:95:de:09:ae:ef:60:62:81:82:74:de:
+                    b8:48:24:3e:0a:ac:75:72:fa:f8:5d:f2:72:7a:bd:
+                    04:13:d2:c8:90:a3:ad:08:39:74:22:3f:10:7b:88:
+                    37:b8:77:2b:4a:34:1a:fa:4a:64:82:b4:fe:de:6c:
+                    b5:a5:4c:70:6b:7e:ab:b4:2f:57:80:f0:0c:49:1b:
+                    f1:32:1f:46:2f:12:af:e7:96:be:b1:09:df:b9:6a:
+                    88:bf
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                9E:54:3E:E5:2F:E5:EA:40:4A:FC:37:96:6C:45:BB:1A:79:0E:CA:AB
+                E1:BE:F5:5F:36:50:CF:FE:3D:42:EE:80:33:22:46:C2:3D:2A:41:41
             X509v3 Authority Key Identifier: 
-                keyid:1C:B4:4E:8B:84:0D:1E:0F:C4:CC:F4:17:87:DB:CA:F2:55:F1:34:39
+                keyid:FE:98:8A:C3:41:B2:71:3A:4A:B3:76:5A:3C:17:06:93:11:99:8E:C8
 
             X509v3 Basic Constraints: 
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         6c:2d:41:ca:7b:89:84:27:ca:b3:64:d5:73:b2:5b:dd:fc:6f:
-         d4:68:ae:f1:30:3e:9e:ca:28:2b:d3:2e:0c:61:3e:d5:9a:fd:
-         67:b1:60:e5:54:9f:a4:95:51:5b:00:2d:f9:46:82:de:49:df:
-         ce:2a:f3:f6:2e:8f:8f:64:2b:c9:2f:ce:ff:d2:53:a0:0a:c4:
-         4a:e9:20:fa:5e:79:45:21:18:c2:d6:c1:64:92:e4:67:3a:92:
-         04:46:5e:6a:39:84:c8:f1:0e:42:3c:fd:b2:c2:7b:e9:af:44:
-         2c:19:30:61:01:39:47:6d:38:85:90:4b:e5:04:f4:87:72:46:
-         4a:9a
+         0d:67:f0:6d:9e:7f:ad:7a:fb:81:f7:ed:40:fe:80:69:e3:df:
+         94:ed:94:b7:3f:11:db:02:ba:08:1e:a9:28:95:b5:3f:e5:86:
+         02:6d:33:3c:57:39:be:18:4a:d5:18:0f:e8:59:5b:40:38:b2:
+         9d:71:18:4c:b1:e6:d9:51:2d:a0:7b:af:35:b4:d9:f3:d8:f5:
+         09:b9:e5:e9:81:38:b0:a6:89:57:51:76:71:7d:91:bb:db:10:
+         2b:25:ce:2d:59:5a:cd:29:a2:19:a6:a0:56:19:d7:38:f4:cb:
+         94:43:90:ff:20:ce:af:37:c7:73:34:ef:fb:cb:e1:f2:1f:68:
+         42:91:9d:33:3f:a1:7a:cb:80:5f:f2:52:81:f1:15:fa:79:01:
+         1a:29:c4:36:41:26:75:5c:4b:ff:be:67:12:d8:d2:72:03:5a:
+         3e:2e:aa:b3:10:b5:10:37:2b:eb:f7:59:3a:66:87:f4:ca:e4:
+         d4:35:6f:78:aa:26:de:ac:02:65:91:d2:fa:80:db:b9:8b:a6:
+         26:bb:46:8f:21:e8:18:84:a6:b5:17:fb:e2:de:d8:b3:39:b2:
+         6a:42:28:e9:05:55:e6:0b:39:32:42:28:a2:72:51:7c:46:96:
+         e2:c2:7f:b3:a5:b9:af:3b:04:3a:93:ba:9c:2c:0a:28:39:fc:
+         8b:12:7d:b7
 -----BEGIN CERTIFICATE-----
-MIICnTCCAgagAwIBAgIBATANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEOMAwGA1UEBwwFRGVyYnkxGjAYBgNVBAoMEU1v
-c3F1aXR0byBQcm9qZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRAwDgYDVQQDDAdSb290
-IENBMB4XDTE4MDMwMTE4NTMzNloXDTIzMDIyODE4NTMzNlowZTELMAkGA1UEBhMC
-R0IxEzARBgNVBAgMCkRlcmJ5c2hpcmUxGjAYBgNVBAoMEU1vc3F1aXR0byBQcm9q
-ZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRMwEQYDVQQDDApTaWduaW5nIENBMIGfMA0G
-CSqGSIb3DQEBAQUAA4GNADCBiQKBgQCvrbDkeLhzAWqeeB6/Nltg3O4ozhY8czCz
-As1cB6I27qHFQzIMRlfL+xxS205lhYpdps1mQ628cBvmsBEP2FQfV54pTisbxXCy
-PTinYz8aBi9tCSx8kGDbjDoRIKfbICXZxpd0UFrg/YGq3uod5b5hWQ125at/O7Km
-OLm7Mqpy7wIDAQABo1AwTjAdBgNVHQ4EFgQUnlQ+5S/l6kBK/DeWbEW7GnkOyqsw
-HwYDVR0jBBgwFoAUHLROi4QNHg/EzPQXh9vK8lXxNDkwDAYDVR0TBAUwAwEB/zAN
-BgkqhkiG9w0BAQsFAAOBgQBsLUHKe4mEJ8qzZNVzslvd/G/UaK7xMD6eyigr0y4M
-YT7Vmv1nsWDlVJ+klVFbAC35RoLeSd/OKvP2Lo+PZCvJL87/0lOgCsRK6SD6XnlF
-IRjC1sFkkuRnOpIERl5qOYTI8Q5CPP2ywnvpr0QsGTBhATlHbTiFkEvlBPSHckZK
-mg==
+MIIDmjCCAoKgAwIBAgIBATANBgkqhkiG9w0BAQsFADBwMQswCQYDVQQGEwJHQjES
+MBAGA1UECAwJV2lsdHNoaXJlMRIwEAYDVQQHDAlTYWxpc2J1cnkxFTATBgNVBAoM
+DFBhaG8gUHJvamVjdDEQMA4GA1UECwwHVGVzdGluZzEQMA4GA1UEAwwHUm9vdCBD
+QTAeFw0yMzA0MTMxMzIyMzFaFw0yODA0MTExMzIyMzFaMF8xCzAJBgNVBAYTAkdC
+MRIwEAYDVQQIDAlXaWx0c2hpcmUxFTATBgNVBAoMDFBhaG8gUHJvamVjdDEQMA4G
+A1UECwwHVGVzdGluZzETMBEGA1UEAwwKU2lnbmluZyBDQTCCASIwDQYJKoZIhvcN
+AQEBBQADggEPADCCAQoCggEBAObODqJqVhw1jHqvMUN9KMthFYEtN//xj314wzdY
+j2pMALadBPMczfvKfcDcKzvkwQAMcYPfzxJvmOoZAQuHX9+nWHacVrnyHdifJInr
+r3/+R1qos3nCRr44v3cDYbfe0K43i60NAlzD4joX5/yGns3/hyFKyfXCPb/JFB4Z
+2YkZ6dmyyKnp0puuc/K35/w9m8Nytr4Q/AzC67ePSmdMG0PKTljfzHTGa5XeCa7v
+YGKBgnTeuEgkPgqsdXL6+F3ycnq9BBPSyJCjrQg5dCI/EHuIN7h3K0o0GvpKZIK0
+/t5staVMcGt+q7QvV4DwDEkb8TIfRi8Sr+eWvrEJ37lqiL8CAwEAAaNQME4wHQYD
+VR0OBBYEFOG+9V82UM/+PULugDMiRsI9KkFBMB8GA1UdIwQYMBaAFP6YisNBsnE6
+SrN2WjwXBpMRmY7IMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAA1n
+8G2ef616+4H37UD+gGnj35TtlLc/EdsCuggeqSiVtT/lhgJtMzxXOb4YStUYD+hZ
+W0A4sp1xGEyx5tlRLaB7rzW02fPY9Qm55emBOLCmiVdRdnF9kbvbECslzi1ZWs0p
+ohmmoFYZ1zj0y5RDkP8gzq83x3M07/vL4fIfaEKRnTM/oXrLgF/yUoHxFfp5ARop
+xDZBJnVcS/++ZxLY0nIDWj4uqrMQtRA3K+v3WTpmh/TK5NQ1b3iqJt6sAmWR0vqA
+27mLpia7Ro8h6BiEprUX++Le2LM5smpCKOkFVeYLOTJCKKJyUXxGluLCf7Olua87
+BDqTupwsCig5/IsSfbc=
 -----END CERTIFICATE-----
 -----BEGIN CERTIFICATE-----
-MIICtDCCAh2gAwIBAgIJAObVjC0tPL4iMA0GCSqGSIb3DQEBCwUAMHIxCzAJBgNV
-BAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYDVQQHDAVEZXJieTEaMBgG
-A1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNVBAsMB1Rlc3RpbmcxEDAOBgNV
-BAMMB1Jvb3QgQ0EwIBcNMTgwMzAxMTg1MzM2WhgPMjEwMDA0MjAxODUzMzZaMHIx
-CzAJBgNVBAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYDVQQHDAVEZXJi
-eTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNVBAsMB1Rlc3Rpbmcx
-EDAOBgNVBAMMB1Jvb3QgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANSZ
-3aRYdHcnta24XXJGfomsg2OpYys3KkqK76aWEwhqRvdH2m54yBvHTZ2LsMLQro0q
-r4oGLyvlupC9fxwQF4ZDFHrn7VbxU947V+cipGkRaECXiGVO1ngUSpKti8nrIUkn
-FXkLmVaGuVv1jVOGBi6/6f3ct6LsNyFqXzaSw9DtAgMBAAGjUDBOMB0GA1UdDgQW
-BBQctE6LhA0eD8TM9BeH28ryVfE0OTAfBgNVHSMEGDAWgBQctE6LhA0eD8TM9BeH
-28ryVfE0OTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4GBAHVShEeqQRjP
-IoMU8MFnnC1ZadADvSn1E6gRR7eoNU0MeMpTYmTA+TIklEzhaRHSkQqyPHAe/YMl
-WLmq1NqyxPv9uKekVlatJxYbm1ME4e+wGs3U9OGsIKX0nFcBO8iqpj5s7GZmSYyY
-u1YJnq1oe0C5IblVB9amcoB743/YyMme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 -----END CERTIFICATE-----

test/ssl/crl.pem

 -----BEGIN X509 CRL-----
-MIIBUzCBvQIBATANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjETMBEGA1UE
-CAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNV
-BAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EXDTE4MDMwMTE4NTM1M1oX
-DTE4MDMzMTE4NTM1M1owFDASAgEEFw0xODAzMDExODUzNTNaoA4wDDAKBgNVHRQE
-AwIBATANBgkqhkiG9w0BAQsFAAOBgQBsUN/A26sGOL0rL7IOq2LoJ7bi4jfD+wjk
-M+UkOn9Q7dvJFkXmyqFUYj8DQCDrSNB20X0O76sW1KHkoJp3Xf2zwKQUXY6oqhtW
-nEOoB0ELViIo02VeboVoPIHSxt7nYEopAoVoqVMqUkVYugge9EVF/c++SMNvzy+L
-I7L8YKQ8/g==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 -----END X509 CRL-----

test/ssl/paho_gen.sh

+# This file generates the keys and certificates used for testing mosquitto.
+# None of the keys are encrypted, so do not just use this script to generate
+# files for your own use.
+
+rm -f *.crt *.key *.csr
+for a in root signing; do
+	rm -rf ${a}CA/
+	mkdir -p ${a}CA/newcerts
+	touch ${a}CA/index.txt
+	echo 01 > ${a}CA/serial
+	echo 01 > ${a}CA/crlnumber
+done
+rm -rf certs
+
+BASESUBJ="/C=GB/ST=Wiltshire/L=Salisbury/O=Paho Project/OU=Testing"
+SBASESUBJ="/C=GB/ST=Wiltshire/L=Salisbury/O=Paho Project/OU=Production"
+BBASESUBJ="/C=GB/ST=Wiltshire/L=Salisbury/O=Paho Project/OU=Bridge"
+
+BITS="2048"
+
+# The root CA
+openssl genrsa -out test-root-ca.key ${BITS}
+openssl req -new -x509 -days 30000 -key test-root-ca.key -out test-root-ca.crt -config openssl.cnf -subj "${BASESUBJ}/CN=Root CA/"
+
+# Another root CA that doesn't sign anything
+openssl genrsa -out test-bad-root-ca.key ${BITS}
+openssl req -new -x509 -days 30000 -key test-bad-root-ca.key -out test-bad-root-ca.crt -config openssl.cnf -subj "${BASESUBJ}/CN=Bad Root CA/"
+
+# This is a root CA that has the exact same details as the real root CA, but is a different key and certificate. Effectively a "fake" CA.
+openssl genrsa -out test-fake-root-ca.key ${BITS}
+openssl req -new -x509 -days 30000 -key test-fake-root-ca.key -out test-fake-root-ca.crt -config openssl.cnf -subj "${BASESUBJ}/CN=Root CA/"
+
+# An intermediate CA, signed by the root CA, used to sign server/client csrs.
+openssl genrsa -out test-signing-ca.key ${BITS}
+openssl req -out test-signing-ca.csr -key test-signing-ca.key -new -config openssl.cnf -subj "${BASESUBJ}/CN=Signing CA/"
+openssl ca -config openssl.cnf -name CA_root -extensions v3_ca -out test-signing-ca.crt -infiles test-signing-ca.csr
+
+# An alternative intermediate CA, signed by the root CA, not used to sign anything.
+openssl genrsa -out test-alt-ca.key ${BITS}
+openssl req -out test-alt-ca.csr -key test-alt-ca.key -new -config openssl.cnf -subj "${BASESUBJ}/CN=Alternative Signing CA/"
+openssl ca -config openssl.cnf -name CA_root -extensions v3_ca -out test-alt-ca.crt -infiles test-alt-ca.csr
+
+# Valid server key and certificate.
+openssl genrsa -out server.key ${BITS}
+openssl req -new -key server.key -out server.csr -config openssl.cnf -subj "${SBASESUBJ}/CN=localhost/"
+openssl ca -config openssl.cnf -name CA_signing -out server.crt -infiles server.csr 
+
+# Expired server certificate, based on the above server key.
+openssl req -new -days 1 -key server.key -out server-expired.csr -config openssl.cnf -subj "${SBASESUBJ}/CN=localhost/"
+openssl ca -config openssl.cnf -name CA_signing -days 1 -startdate 120820000000Z -enddate 120821000000Z -out server-expired.crt -infiles server-expired.csr 
+
+# Valid client key and certificate.
+openssl genrsa -out client.key ${BITS}
+openssl req -new -key client.key -out client.csr -config openssl.cnf -subj "${SBASESUBJ}/CN=test client/"
+openssl ca -config openssl.cnf -name CA_signing -out client.crt -infiles client.csr 
+
+# Expired client certificate, based on the above client key.
+openssl req -new -days 1 -key client.key -out client-expired.csr -config openssl.cnf -subj "${SBASESUBJ}/CN=test client expired/"
+openssl ca -config openssl.cnf -name CA_signing -days 1 -startdate 120820000000Z -enddate 120821000000Z -out client-expired.crt -infiles client-expired.csr 
+
+# Revoked client certificate, based on a new client key.
+openssl genrsa -out client-revoked.key ${BITS}
+openssl req -new -days 1 -key client-revoked.key -out client-revoked.csr -config openssl.cnf -subj "${SBASESUBJ}/CN=test client revoked/"
+openssl ca -config openssl.cnf -name CA_signing -out client-revoked.crt -infiles client-revoked.csr 
+openssl ca -config openssl.cnf -name CA_signing -revoke client-revoked.crt
+openssl ca -config openssl.cnf -name CA_signing -gencrl -out crl.pem
+
+cat test-signing-ca.crt test-root-ca.crt > all-ca.crt
+
+cat client.crt client.key all-ca.crt > client.pem
+#mkdir certs
+#cp test-signing-ca.crt certs/test-signing-ca.pem
+#cp test-root-ca.crt certs/test-root.ca.pem
+c_rehash certs

test/ssl/rootCA/index.txt

-V	230228185336Z		01	unknown	/C=GB/ST=Derbyshire/O=Mosquitto Project/OU=Testing/CN=Signing CA
-V	230228185342Z		02	unknown	/C=GB/ST=Derbyshire/O=Mosquitto Project/OU=Testing/CN=Alternative Signing CA
+V	280411132231Z		01	unknown	/C=GB/ST=Wiltshire/O=Paho Project/OU=Testing/CN=Signing CA
+V	280411132235Z		02	unknown	/C=GB/ST=Wiltshire/O=Paho Project/OU=Testing/CN=Alternative Signing CA

test/ssl/rootCA/index.txt.old

-V	230228185336Z		01	unknown	/C=GB/ST=Derbyshire/O=Mosquitto Project/OU=Testing/CN=Signing CA
+V	280411132231Z		01	unknown	/C=GB/ST=Wiltshire/O=Paho Project/OU=Testing/CN=Signing CA

test/ssl/rootCA/newcerts/01.pem

@@ -2,57 +2,78 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, L=Derby, O=Mosquitto Project, OU=Testing, CN=Root CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Testing, CN=Root CA
         Validity
-            Not Before: Mar  1 18:53:36 2018 GMT
-            Not After : Feb 28 18:53:36 2023 GMT
-        Subject: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
+            Not Before: Apr 13 13:22:31 2023 GMT
+            Not After : Apr 11 13:22:31 2028 GMT
+        Subject: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Signing CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:af:ad:b0:e4:78:b8:73:01:6a:9e:78:1e:bf:36:
-                    5b:60:dc:ee:28:ce:16:3c:73:30:b3:02:cd:5c:07:
-                    a2:36:ee:a1:c5:43:32:0c:46:57:cb:fb:1c:52:db:
-                    4e:65:85:8a:5d:a6:cd:66:43:ad:bc:70:1b:e6:b0:
-                    11:0f:d8:54:1f:57:9e:29:4e:2b:1b:c5:70:b2:3d:
-                    38:a7:63:3f:1a:06:2f:6d:09:2c:7c:90:60:db:8c:
-                    3a:11:20:a7:db:20:25:d9:c6:97:74:50:5a:e0:fd:
-                    81:aa:de:ea:1d:e5:be:61:59:0d:76:e5:ab:7f:3b:
-                    b2:a6:38:b9:bb:32:aa:72:ef
+                    00:e6:ce:0e:a2:6a:56:1c:35:8c:7a:af:31:43:7d:
+                    28:cb:61:15:81:2d:37:ff:f1:8f:7d:78:c3:37:58:
+                    8f:6a:4c:00:b6:9d:04:f3:1c:cd:fb:ca:7d:c0:dc:
+                    2b:3b:e4:c1:00:0c:71:83:df:cf:12:6f:98:ea:19:
+                    01:0b:87:5f:df:a7:58:76:9c:56:b9:f2:1d:d8:9f:
+                    24:89:eb:af:7f:fe:47:5a:a8:b3:79:c2:46:be:38:
+                    bf:77:03:61:b7:de:d0:ae:37:8b:ad:0d:02:5c:c3:
+                    e2:3a:17:e7:fc:86:9e:cd:ff:87:21:4a:c9:f5:c2:
+                    3d:bf:c9:14:1e:19:d9:89:19:e9:d9:b2:c8:a9:e9:
+                    d2:9b:ae:73:f2:b7:e7:fc:3d:9b:c3:72:b6:be:10:
+                    fc:0c:c2:eb:b7:8f:4a:67:4c:1b:43:ca:4e:58:df:
+                    cc:74:c6:6b:95:de:09:ae:ef:60:62:81:82:74:de:
+                    b8:48:24:3e:0a:ac:75:72:fa:f8:5d:f2:72:7a:bd:
+                    04:13:d2:c8:90:a3:ad:08:39:74:22:3f:10:7b:88:
+                    37:b8:77:2b:4a:34:1a:fa:4a:64:82:b4:fe:de:6c:
+                    b5:a5:4c:70:6b:7e:ab:b4:2f:57:80:f0:0c:49:1b:
+                    f1:32:1f:46:2f:12:af:e7:96:be:b1:09:df:b9:6a:
+                    88:bf
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                9E:54:3E:E5:2F:E5:EA:40:4A:FC:37:96:6C:45:BB:1A:79:0E:CA:AB
+                E1:BE:F5:5F:36:50:CF:FE:3D:42:EE:80:33:22:46:C2:3D:2A:41:41
             X509v3 Authority Key Identifier: 
-                keyid:1C:B4:4E:8B:84:0D:1E:0F:C4:CC:F4:17:87:DB:CA:F2:55:F1:34:39
+                keyid:FE:98:8A:C3:41:B2:71:3A:4A:B3:76:5A:3C:17:06:93:11:99:8E:C8
 
             X509v3 Basic Constraints: 
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         6c:2d:41:ca:7b:89:84:27:ca:b3:64:d5:73:b2:5b:dd:fc:6f:
-         d4:68:ae:f1:30:3e:9e:ca:28:2b:d3:2e:0c:61:3e:d5:9a:fd:
-         67:b1:60:e5:54:9f:a4:95:51:5b:00:2d:f9:46:82:de:49:df:
-         ce:2a:f3:f6:2e:8f:8f:64:2b:c9:2f:ce:ff:d2:53:a0:0a:c4:
-         4a:e9:20:fa:5e:79:45:21:18:c2:d6:c1:64:92:e4:67:3a:92:
-         04:46:5e:6a:39:84:c8:f1:0e:42:3c:fd:b2:c2:7b:e9:af:44:
-         2c:19:30:61:01:39:47:6d:38:85:90:4b:e5:04:f4:87:72:46:
-         4a:9a
+         0d:67:f0:6d:9e:7f:ad:7a:fb:81:f7:ed:40:fe:80:69:e3:df:
+         94:ed:94:b7:3f:11:db:02:ba:08:1e:a9:28:95:b5:3f:e5:86:
+         02:6d:33:3c:57:39:be:18:4a:d5:18:0f:e8:59:5b:40:38:b2:
+         9d:71:18:4c:b1:e6:d9:51:2d:a0:7b:af:35:b4:d9:f3:d8:f5:
+         09:b9:e5:e9:81:38:b0:a6:89:57:51:76:71:7d:91:bb:db:10:
+         2b:25:ce:2d:59:5a:cd:29:a2:19:a6:a0:56:19:d7:38:f4:cb:
+         94:43:90:ff:20:ce:af:37:c7:73:34:ef:fb:cb:e1:f2:1f:68:
+         42:91:9d:33:3f:a1:7a:cb:80:5f:f2:52:81:f1:15:fa:79:01:
+         1a:29:c4:36:41:26:75:5c:4b:ff:be:67:12:d8:d2:72:03:5a:
+         3e:2e:aa:b3:10:b5:10:37:2b:eb:f7:59:3a:66:87:f4:ca:e4:
+         d4:35:6f:78:aa:26:de:ac:02:65:91:d2:fa:80:db:b9:8b:a6:
+         26:bb:46:8f:21:e8:18:84:a6:b5:17:fb:e2:de:d8:b3:39:b2:
+         6a:42:28:e9:05:55:e6:0b:39:32:42:28:a2:72:51:7c:46:96:
+         e2:c2:7f:b3:a5:b9:af:3b:04:3a:93:ba:9c:2c:0a:28:39:fc:
+         8b:12:7d:b7
 -----BEGIN CERTIFICATE-----
-MIICnTCCAgagAwIBAgIBATANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEOMAwGA1UEBwwFRGVyYnkxGjAYBgNVBAoMEU1v
-c3F1aXR0byBQcm9qZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRAwDgYDVQQDDAdSb290
-IENBMB4XDTE4MDMwMTE4NTMzNloXDTIzMDIyODE4NTMzNlowZTELMAkGA1UEBhMC
-R0IxEzARBgNVBAgMCkRlcmJ5c2hpcmUxGjAYBgNVBAoMEU1vc3F1aXR0byBQcm9q
-ZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRMwEQYDVQQDDApTaWduaW5nIENBMIGfMA0G
-CSqGSIb3DQEBAQUAA4GNADCBiQKBgQCvrbDkeLhzAWqeeB6/Nltg3O4ozhY8czCz
-As1cB6I27qHFQzIMRlfL+xxS205lhYpdps1mQ628cBvmsBEP2FQfV54pTisbxXCy
-PTinYz8aBi9tCSx8kGDbjDoRIKfbICXZxpd0UFrg/YGq3uod5b5hWQ125at/O7Km
-OLm7Mqpy7wIDAQABo1AwTjAdBgNVHQ4EFgQUnlQ+5S/l6kBK/DeWbEW7GnkOyqsw
-HwYDVR0jBBgwFoAUHLROi4QNHg/EzPQXh9vK8lXxNDkwDAYDVR0TBAUwAwEB/zAN
-BgkqhkiG9w0BAQsFAAOBgQBsLUHKe4mEJ8qzZNVzslvd/G/UaK7xMD6eyigr0y4M
-YT7Vmv1nsWDlVJ+klVFbAC35RoLeSd/OKvP2Lo+PZCvJL87/0lOgCsRK6SD6XnlF
-IRjC1sFkkuRnOpIERl5qOYTI8Q5CPP2ywnvpr0QsGTBhATlHbTiFkEvlBPSHckZK
-mg==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 -----END CERTIFICATE-----

test/ssl/rootCA/newcerts/02.pem

@@ -2,57 +2,78 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, L=Derby, O=Mosquitto Project, OU=Testing, CN=Root CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Testing, CN=Root CA
         Validity
-            Not Before: Mar  1 18:53:42 2018 GMT
-            Not After : Feb 28 18:53:42 2023 GMT
-        Subject: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Alternative Signing CA
+            Not Before: Apr 13 13:22:35 2023 GMT
+            Not After : Apr 11 13:22:35 2028 GMT
+        Subject: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Alternative Signing CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:bd:8b:92:ed:6a:d6:b7:73:88:e7:fa:80:bd:bc:
-                    ee:fb:6a:47:f4:36:4e:48:ab:88:8a:a6:66:98:84:
-                    6a:4c:a8:88:5f:cc:26:98:81:fe:8b:22:c4:c0:91:
-                    70:74:72:22:48:1d:e1:b8:44:71:23:74:17:59:bc:
-                    a6:51:18:97:4c:6d:50:8c:0a:c5:33:cc:28:2a:cf:
-                    78:04:a2:20:75:72:29:4a:46:7b:c7:46:a5:f5:5e:
-                    ec:6f:53:bc:d7:ad:b5:29:dd:22:24:4e:b7:88:e2:
-                    94:58:04:fe:6d:04:13:8d:c8:72:d0:74:2a:ef:18:
-                    87:6d:cf:ce:6e:4a:08:73:c3
+                    00:dd:be:17:42:0f:31:63:33:36:b3:a7:19:ee:c5:
+                    1f:77:b9:13:17:7c:e2:2e:45:14:1f:a7:84:41:bd:
+                    f8:2f:fa:93:bc:c1:ed:e6:3e:fc:e3:f3:c8:79:c7:
+                    ab:84:d9:b7:42:53:8f:75:29:95:a9:8c:c6:43:22:
+                    35:e3:be:cc:10:e6:38:01:5d:23:e4:c9:6e:ad:57:
+                    1a:8d:e2:60:b1:96:6c:97:80:e9:e2:12:ea:42:9f:
+                    b3:c8:f7:0f:56:47:64:49:7d:70:87:d6:63:03:3f:
+                    0b:59:a0:8d:9e:b5:38:aa:a2:3c:bc:10:37:cb:b3:
+                    e3:dc:34:c3:47:7c:b8:ad:9f:dc:46:52:28:3c:a5:
+                    42:18:fa:36:e1:41:af:5a:9d:62:b7:95:aa:80:e5:
+                    a0:47:cc:f5:48:e2:f4:d0:da:14:a6:6b:56:f9:c5:
+                    28:14:20:61:ff:76:f2:cb:f2:f1:4d:6a:9c:3f:89:
+                    68:29:0b:61:6c:99:43:34:a3:18:8f:d5:c1:4a:8d:
+                    5d:a0:a3:72:24:6a:af:c5:05:a7:80:10:7c:89:00:
+                    3c:99:cd:2e:4d:0b:6f:6c:6a:06:34:ae:31:48:c2:
+                    f2:97:56:0a:00:93:8f:53:9c:d0:8b:80:98:06:8a:
+                    42:13:99:40:cb:16:51:98:f2:22:e0:a1:49:d4:ce:
+                    3d:41
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                78:CC:8C:66:81:0F:8F:DA:56:5C:39:A2:30:C2:28:9E:53:A6:87:CA
+                97:15:96:32:A4:95:DC:12:51:9E:0A:B5:ED:7A:DE:56:56:50:AB:25
             X509v3 Authority Key Identifier: 
-                keyid:1C:B4:4E:8B:84:0D:1E:0F:C4:CC:F4:17:87:DB:CA:F2:55:F1:34:39
+                keyid:FE:98:8A:C3:41:B2:71:3A:4A:B3:76:5A:3C:17:06:93:11:99:8E:C8
 
             X509v3 Basic Constraints: 
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         27:3c:17:44:29:8f:17:a7:c0:b7:81:eb:76:ca:53:85:9a:ad:
-         31:68:85:95:69:d6:ab:02:75:a8:ac:71:6f:4d:20:23:6d:5c:
-         09:1d:0a:85:f4:e6:6f:6e:1e:c1:1f:34:1e:87:6e:d3:b9:e0:
-         b2:2f:08:82:fb:4b:28:36:a9:68:54:18:9b:16:6a:f2:ab:ae:
-         bd:7a:40:d2:a7:64:46:4c:f5:cb:15:07:02:7b:3f:44:5e:e1:
-         35:83:99:3f:46:7d:99:76:d2:89:3c:9f:a6:70:13:dd:8e:bd:
-         d2:b1:51:ec:9c:db:2e:f4:fd:f7:1d:de:2c:27:f3:55:9b:81:
-         07:81
+         7e:ea:4e:23:cf:88:95:1f:46:c2:9b:f9:0a:69:3b:2a:1c:b0:
+         c7:ef:79:d3:74:96:e2:cb:8b:29:bf:ab:32:61:0b:e3:4a:1c:
+         0b:17:55:e8:f8:43:7b:0a:87:1d:f8:64:76:07:9a:f7:ee:37:
+         c2:19:03:be:d6:db:00:ab:f9:ae:66:47:67:7a:c1:c5:a5:ef:
+         57:fd:ca:a4:27:f6:f6:06:a0:79:4f:0f:ed:97:41:fb:57:aa:
+         b8:4b:bd:1e:00:9d:11:ef:6f:b1:cd:9e:f6:aa:7d:2f:c3:3d:
+         fb:c2:17:ff:2f:b4:8f:5b:b2:81:ce:b8:83:53:6b:e0:08:84:
+         14:51:0f:4e:38:ae:c0:0d:43:ff:6d:ae:8a:02:8c:bf:5d:32:
+         58:64:09:58:ab:c1:b5:cc:ad:11:9f:9b:f2:28:62:14:4d:eb:
+         34:35:36:62:14:f2:46:9c:57:f3:3d:0b:f8:ed:68:be:78:e8:
+         4d:95:c0:f3:87:d0:e1:24:8e:a2:12:d5:26:1c:66:3d:d8:04:
+         0e:4f:93:2d:20:b5:f5:52:a4:5d:44:d3:dd:b1:d7:9f:24:56:
+         f1:02:fa:c2:5b:01:4e:71:34:a1:f7:dc:97:74:89:3c:3c:86:
+         7c:54:e2:3c:c1:d8:64:06:6d:63:39:75:32:23:b5:1d:40:aa:
+         84:ec:eb:64
 -----BEGIN CERTIFICATE-----
-MIICqTCCAhKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEOMAwGA1UEBwwFRGVyYnkxGjAYBgNVBAoMEU1v
-c3F1aXR0byBQcm9qZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRAwDgYDVQQDDAdSb290
-IENBMB4XDTE4MDMwMTE4NTM0MloXDTIzMDIyODE4NTM0MlowcTELMAkGA1UEBhMC
-R0IxEzARBgNVBAgMCkRlcmJ5c2hpcmUxGjAYBgNVBAoMEU1vc3F1aXR0byBQcm9q
-ZWN0MRAwDgYDVQQLDAdUZXN0aW5nMR8wHQYDVQQDDBZBbHRlcm5hdGl2ZSBTaWdu
-aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9i5Ltata3c4jn+oC9
-vO77akf0Nk5Iq4iKpmaYhGpMqIhfzCaYgf6LIsTAkXB0ciJIHeG4RHEjdBdZvKZR
-GJdMbVCMCsUzzCgqz3gEoiB1cilKRnvHRqX1XuxvU7zXrbUp3SIkTreI4pRYBP5t
-BBONyHLQdCrvGIdtz85uSghzwwIDAQABo1AwTjAdBgNVHQ4EFgQUeMyMZoEPj9pW
-XDmiMMIonlOmh8owHwYDVR0jBBgwFoAUHLROi4QNHg/EzPQXh9vK8lXxNDkwDAYD
-VR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOBgQAnPBdEKY8Xp8C3get2ylOFmq0x
-aIWVadarAnWorHFvTSAjbVwJHQqF9OZvbh7BHzQeh27TueCyLwiC+0soNqloVBib
-Fmryq669ekDSp2RGTPXLFQcCez9EXuE1g5k/Rn2ZdtKJPJ+mcBPdjr3SsVHsnNsu
-9P33Hd4sJ/NVm4EHgQ==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 -----END CERTIFICATE-----

test/ssl/server-expired.csr

 -----BEGIN CERTIFICATE REQUEST-----
-MIIBtjCCAR8CAQAwdjELMAkGA1UEBhMCR0IxGDAWBgNVBAgMD05vdHRpbmdoYW1z
-aGlyZTETMBEGA1UEBwwKTm90dGluZ2hhbTEPMA0GA1UECgwGU2VydmVyMRMwEQYD
-VQQLDApQcm9kdWN0aW9uMRIwEAYDVQQDDAlsb2NhbGhvc3QwgZ8wDQYJKoZIhvcN
-AQEBBQADgY0AMIGJAoGBAMkY4WrERVgOt2U6uG/fCthdGKpACNbVefrKeWuezlWF
-ydVPu39agcg8Xartf0iHwvFMYgDDjZqjwnclxnDM79GPF30bw6tmPpDwROOFi3eG
-IbLdCyztoBagFmNJubuQRUTx9x6tVxxFogiZEwXjE3bv883zOiFzIXUKLVjiCjo9
-AgMBAAGgADANBgkqhkiG9w0BAQsFAAOBgQCyLfIr0Ze/Vo1eswPb5khaZh9A6B54
-NmhmdGNCBC4z+PNfFM1UX47ttnU9f/7bhhKT92W6QhO0COzf9UzTkW0rRJipCOeR
-vatPpPC8WNoH4YHEeTdGey6YYG4448b3+Los22H/BtZSbHqluztE2yNPFA7S50xO
-JP/+Qtt+I+Y8JA==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 -----END CERTIFICATE REQUEST-----

test/ssl/server.crt

@@ -2,25 +2,34 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Signing CA
         Validity
-            Not Before: Mar  1 18:53:44 2018 GMT
-            Not After : Feb 28 18:53:44 2023 GMT
-        Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=localhost
+            Not Before: Apr 13 13:22:38 2023 GMT
+            Not After : Apr 11 13:22:38 2028 GMT
+        Subject: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Production, CN=localhost
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:c9:18:e1:6a:c4:45:58:0e:b7:65:3a:b8:6f:df:
-                    0a:d8:5d:18:aa:40:08:d6:d5:79:fa:ca:79:6b:9e:
-                    ce:55:85:c9:d5:4f:bb:7f:5a:81:c8:3c:5d:aa:ed:
-                    7f:48:87:c2:f1:4c:62:00:c3:8d:9a:a3:c2:77:25:
-                    c6:70:cc:ef:d1:8f:17:7d:1b:c3:ab:66:3e:90:f0:
-                    44:e3:85:8b:77:86:21:b2:dd:0b:2c:ed:a0:16:a0:
-                    16:63:49:b9:bb:90:45:44:f1:f7:1e:ad:57:1c:45:
-                    a2:08:99:13:05:e3:13:76:ef:f3:cd:f3:3a:21:73:
-                    21:75:0a:2d:58:e2:0a:3a:3d
+                    00:c8:b2:1f:2b:d4:6c:20:f0:67:64:14:9d:79:14:
+                    b3:99:49:a9:65:1d:20:f3:1e:b7:96:92:9b:e7:0c:
+                    1d:90:be:dc:a5:c5:10:e1:9e:d9:fd:f4:6f:f0:1e:
+                    18:ef:db:fd:f9:88:e3:fb:0f:fb:4b:6b:15:c3:8d:
+                    43:86:6c:2b:f0:12:94:b5:ce:9d:60:57:04:15:0e:
+                    07:0f:72:87:5b:38:62:f4:75:5d:17:05:3d:45:1f:
+                    e7:7b:ee:da:50:95:22:10:de:f8:87:cb:b8:39:38:
+                    cf:88:6d:69:80:7d:df:a7:50:28:45:df:aa:33:e3:
+                    3d:d6:a2:4c:2b:8d:bb:83:db:98:2d:cd:1a:7f:88:
+                    75:e5:5d:fc:ea:c8:60:93:31:76:66:f3:24:ad:2b:
+                    fa:20:77:41:61:ab:43:ee:47:52:45:6b:a4:11:98:
+                    3d:bf:7c:09:57:c0:0b:36:8f:ba:be:e3:29:d5:3e:
+                    f9:c1:51:15:1f:b1:c1:4e:9f:c8:68:e2:b1:d8:11:
+                    25:7b:65:56:11:79:fe:f7:f1:c8:ac:9b:b0:a2:4b:
+                    e5:c4:e4:96:ab:92:30:f8:ce:a7:ae:c9:53:e1:f4:
+                    d9:f8:55:e1:52:1a:b2:e0:ae:b6:76:f7:e4:dc:2c:
+                    0b:f2:c3:09:b2:f7:42:8d:56:d6:d4:3b:af:18:2e:
+                    26:31
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,33 +37,46 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                7E:42:6C:12:CB:42:12:36:54:03:29:B6:D8:21:CA:E1:65:48:C5:67
+                93:31:D2:88:FB:6F:4C:AB:37:BE:CE:30:6B:1B:AB:70:27:58:8F:DA
             X509v3 Authority Key Identifier: 
-                keyid:9E:54:3E:E5:2F:E5:EA:40:4A:FC:37:96:6C:45:BB:1A:79:0E:CA:AB
+                keyid:E1:BE:F5:5F:36:50:CF:FE:3D:42:EE:80:33:22:46:C2:3D:2A:41:41
 
     Signature Algorithm: sha256WithRSAEncryption
-         08:e1:a9:a0:e9:c4:1b:65:8d:b0:71:60:68:18:d8:af:49:8f:
-         0b:41:62:bb:f8:23:71:65:f2:c7:cf:59:23:63:48:fa:ba:26:
-         5f:2d:2e:4c:18:e4:f0:6e:cb:38:be:51:d0:e2:cc:76:ab:f6:
-         13:c2:49:68:e2:ef:da:86:a9:3d:80:29:9f:ee:33:be:cd:4c:
-         b2:4c:14:04:e3:46:46:46:ec:c1:4a:63:de:f3:5a:7b:0f:28:
-         a1:92:c8:96:07:b3:73:96:f4:9e:a0:bf:36:ea:f1:1a:8b:f7:
-         d5:ed:6c:e2:bf:cd:61:bc:a4:ca:ee:fa:75:af:ad:4c:54:4b:
-         af:18
+         4a:2e:1f:9c:7e:99:2e:cc:40:b4:49:ea:92:27:d4:35:f5:07:
+         6b:ff:a2:2e:15:47:76:40:3c:9b:1c:85:b3:a8:f6:a6:f2:15:
+         c0:a1:dc:d6:bd:66:71:09:fd:e6:93:4f:9a:36:e4:a7:0f:b0:
+         f5:5a:4d:e2:30:50:9b:12:0d:12:4d:6a:67:81:02:17:92:69:
+         00:e4:24:91:5c:83:99:9c:7b:6d:8d:3f:fc:46:81:c2:4a:f4:
+         9c:3f:d6:5f:6b:1f:c6:84:fa:de:33:26:3a:d4:d2:4c:98:23:
+         c1:2b:20:f2:12:bd:dc:61:5f:63:84:4c:1b:7b:c5:28:3c:4a:
+         bb:da:07:61:b7:d7:79:43:66:eb:f9:21:96:14:34:80:1b:bd:
+         b7:62:22:ea:7a:0a:25:b5:27:fb:40:c7:f7:ce:18:ea:e6:16:
+         55:d9:bb:de:98:c5:19:04:a1:3c:03:e2:6f:50:79:ac:ce:88:
+         9c:6e:d0:1a:d2:87:10:2e:59:dd:14:19:be:23:aa:bc:17:1b:
+         21:96:5f:08:ce:16:d9:71:52:72:f9:f5:be:f7:cd:17:ae:9a:
+         9a:3f:e1:11:a3:a9:9a:6c:8d:ca:c9:7f:e5:6d:32:72:4e:3e:
+         c0:c7:96:95:e4:dc:9e:b6:3a:e3:57:4f:eb:79:2a:09:61:51:
+         78:c1:b9:50
 -----BEGIN CERTIFICATE-----
-MIICzDCCAjWgAwIBAgIBATANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
-EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTgwMzAx
-MTg1MzQ0WhcNMjMwMjI4MTg1MzQ0WjB2MQswCQYDVQQGEwJHQjEYMBYGA1UECAwP
-Tm90dGluZ2hhbXNoaXJlMRMwEQYDVQQHDApOb3R0aW5naGFtMQ8wDQYDVQQKDAZT
-ZXJ2ZXIxEzARBgNVBAsMClByb2R1Y3Rpb24xEjAQBgNVBAMMCWxvY2FsaG9zdDCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAyRjhasRFWA63ZTq4b98K2F0YqkAI
-1tV5+sp5a57OVYXJ1U+7f1qByDxdqu1/SIfC8UxiAMONmqPCdyXGcMzv0Y8XfRvD
-q2Y+kPBE44WLd4Yhst0LLO2gFqAWY0m5u5BFRPH3Hq1XHEWiCJkTBeMTdu/zzfM6
-IXMhdQotWOIKOj0CAwEAAaN7MHkwCQYDVR0TBAIwADAsBglghkgBhvhCAQ0EHxYd
-T3BlblNTTCBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFH5CbBLLQhI2
-VAMpttghyuFlSMVnMB8GA1UdIwQYMBaAFJ5UPuUv5epASvw3lmxFuxp5DsqrMA0G
-CSqGSIb3DQEBCwUAA4GBAAjhqaDpxBtljbBxYGgY2K9JjwtBYrv4I3Fl8sfPWSNj
-SPq6Jl8tLkwY5PBuyzi+UdDizHar9hPCSWji79qGqT2AKZ/uM77NTLJMFATjRkZG
-7MFKY97zWnsPKKGSyJYHs3OW9J6gvzbq8RqL99XtbOK/zWG8pMru+nWvrUxUS68Y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 -----END CERTIFICATE-----

test/ssl/server.csr

 -----BEGIN CERTIFICATE REQUEST-----
-MIIBtjCCAR8CAQAwdjELMAkGA1UEBhMCR0IxGDAWBgNVBAgMD05vdHRpbmdoYW1z
-aGlyZTETMBEGA1UEBwwKTm90dGluZ2hhbTEPMA0GA1UECgwGU2VydmVyMRMwEQYD
-VQQLDApQcm9kdWN0aW9uMRIwEAYDVQQDDAlsb2NhbGhvc3QwgZ8wDQYJKoZIhvcN
-AQEBBQADgY0AMIGJAoGBAMkY4WrERVgOt2U6uG/fCthdGKpACNbVefrKeWuezlWF
-ydVPu39agcg8Xartf0iHwvFMYgDDjZqjwnclxnDM79GPF30bw6tmPpDwROOFi3eG
-IbLdCyztoBagFmNJubuQRUTx9x6tVxxFogiZEwXjE3bv883zOiFzIXUKLVjiCjo9
-AgMBAAGgADANBgkqhkiG9w0BAQsFAAOBgQCyLfIr0Ze/Vo1eswPb5khaZh9A6B54
-NmhmdGNCBC4z+PNfFM1UX47ttnU9f/7bhhKT92W6QhO0COzf9UzTkW0rRJipCOeR
-vatPpPC8WNoH4YHEeTdGey6YYG4448b3+Los22H/BtZSbHqluztE2yNPFA7S50xO
-JP/+Qtt+I+Y8JA==
+MIICujCCAaICAQAwdTELMAkGA1UEBhMCR0IxEjAQBgNVBAgMCVdpbHRzaGlyZTES
+MBAGA1UEBwwJU2FsaXNidXJ5MRUwEwYDVQQKDAxQYWhvIFByb2plY3QxEzARBgNV
+BAsMClByb2R1Y3Rpb24xEjAQBgNVBAMMCWxvY2FsaG9zdDCCASIwDQYJKoZIhvcN
+AQEBBQADggEPADCCAQoCggEBAMiyHyvUbCDwZ2QUnXkUs5lJqWUdIPMet5aSm+cM
+HZC+3KXFEOGe2f30b/AeGO/b/fmI4/sP+0trFcONQ4ZsK/ASlLXOnWBXBBUOBw9y
+h1s4YvR1XRcFPUUf53vu2lCVIhDe+IfLuDk4z4htaYB936dQKEXfqjPjPdaiTCuN
+u4PbmC3NGn+IdeVd/OrIYJMxdmbzJK0r+iB3QWGrQ+5HUkVrpBGYPb98CVfACzaP
+ur7jKdU++cFRFR+xwU6fyGjisdgRJXtlVhF5/vfxyKybsKJL5cTklquSMPjOp67J
+U+H02fhV4VIasuCutnb35NwsC/LDCbL3Qo1W1tQ7rxguJjECAwEAAaAAMA0GCSqG
+SIb3DQEBCwUAA4IBAQCF0hn3cq1HHFdchdWtYx3jxvfV9fD7jy/MnWD/nn/B4zSy
+9TUXwsHm1sKeDhlbOWybkd5mk+IpWvHMNEiCzpkaV3VfAie/8mx1qcCwCj6cNtUM
+BVGDtidTjio3q9R4I0vs4hweH81DWtPoPFFL7hE2LGLB8sfmflTjXRIwysR4R+mq
+d0xtdRW9Bn1JJFQv4GiCF7T5Dk929tBfUCShpU4JFqXhdeAkkeChPW3AfWm5UkO6
+Zk9fhR4LxQlU3od0tLZuz/4f/1FB8+0mPqOdpwnJjjOpeV5E57KT1FLgw6RMv/IC
+SMqXfYNB1d9FdYZHGvRtTE7VMa7wK8AoWzQmjhhw
 -----END CERTIFICATE REQUEST-----

test/ssl/server.key

 -----BEGIN RSA PRIVATE KEY-----
-MIICWwIBAAKBgQDJGOFqxEVYDrdlOrhv3wrYXRiqQAjW1Xn6ynlrns5VhcnVT7t/
-WoHIPF2q7X9Ih8LxTGIAw42ao8J3JcZwzO/Rjxd9G8OrZj6Q8ETjhYt3hiGy3Qss
-7aAWoBZjSbm7kEVE8fcerVccRaIImRMF4xN27/PN8zohcyF1Ci1Y4go6PQIDAQAB
-AoGAFXX0SIKdq+IWLFVx7W5uJ9z3juO6jcLGe78z6gpOls3qVjtmFRdBlm7qyB0E
-YmcqpLm0E8TKzeAAFtsPLGaSiSg+EDoK/ov0d79FZ2h/lDl1xJUpJC5Up7kzJz5M
-P9iEUN1I1BWMkXUl0pYQFlbTQk77s1l5abKyYOqEMzH7oHkCQQDndfRgtFELix94
-mxHOqK1cenWBs4wDmlCA1Z2mG9OBHM+rs/eHymRJ6D/mGuyhtnLIfcglevzrVdek
-ySuuur73AkEA3mrVFIu1Ku8LIrPljoNzFU1qMqZsAX2uxlltFJd1iaAGh20yL9kJ
-CEUtXGpbnpGcDAIzAHNCP3cmVLuYOGefawJACerL5bjUICJ93rUGNkyT4Pp+Pmhq
-/1yFRn/gmVVn4ohRfZHgcTkCwwfodPuCWAtxL5X0FWcHny22Z6EW9g2aUQJATDCo
-gXtCOkzcsaySbHlXCOsV//fGc9RL9KJZnX4sw1JQKkAbuwxL7ctUuJ2ueOlEXVC7
-i+HvxbHZLZl9kYTdtQJAc/9z7pgMk7OQoQo+1dJEbrZ0+t1jAc7mAF2FjzyQ4XUU
-on/k8gVN8Ruy52qfzKP2MqwjlEJ9HOhENmknjlazUA==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 -----END RSA PRIVATE KEY-----

test/ssl/signingCA/index.txt

-V	230228185344Z		01	unknown	/C=GB/ST=Nottinghamshire/L=Nottingham/O=Server/OU=Production/CN=localhost
-V	230228185347Z		02	unknown	/C=GB/ST=Nottinghamshire/L=Nottingham/O=Server/OU=Production/CN=test client
-V	120821000000Z		03	unknown	/C=GB/ST=Nottinghamshire/L=Nottingham/O=Server/OU=Production/CN=test client expired
-R	230228185351Z	180301185353Z	04	unknown	/C=GB/ST=Nottinghamshire/L=Nottingham/O=Server/OU=Production/CN=test client revoked
+V	280411132238Z		01	unknown	/C=GB/ST=Wiltshire/L=Salisbury/O=Paho Project/OU=Production/CN=localhost
+V	280411132240Z		02	unknown	/C=GB/ST=Wiltshire/L=Salisbury/O=Paho Project/OU=Production/CN=test client
+V	120821000000Z		03	unknown	/C=GB/ST=Wiltshire/L=Salisbury/O=Paho Project/OU=Production/CN=test client expired
+R	280411132244Z	230413132245Z	04	unknown	/C=GB/ST=Wiltshire/L=Salisbury/O=Paho Project/OU=Production/CN=test client revoked

test/ssl/signingCA/index.txt.old

-V	230228185344Z		01	unknown	/C=GB/ST=Nottinghamshire/L=Nottingham/O=Server/OU=Production/CN=localhost
-V	230228185347Z		02	unknown	/C=GB/ST=Nottinghamshire/L=Nottingham/O=Server/OU=Production/CN=test client
-V	120821000000Z		03	unknown	/C=GB/ST=Nottinghamshire/L=Nottingham/O=Server/OU=Production/CN=test client expired
-V	230228185351Z		04	unknown	/C=GB/ST=Nottinghamshire/L=Nottingham/O=Server/OU=Production/CN=test client revoked
+V	280411132238Z		01	unknown	/C=GB/ST=Wiltshire/L=Salisbury/O=Paho Project/OU=Production/CN=localhost
+V	280411132240Z		02	unknown	/C=GB/ST=Wiltshire/L=Salisbury/O=Paho Project/OU=Production/CN=test client
+V	120821000000Z		03	unknown	/C=GB/ST=Wiltshire/L=Salisbury/O=Paho Project/OU=Production/CN=test client expired
+V	280411132244Z		04	unknown	/C=GB/ST=Wiltshire/L=Salisbury/O=Paho Project/OU=Production/CN=test client revoked

test/ssl/signingCA/newcerts/01.pem

@@ -2,25 +2,34 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Signing CA
         Validity
-            Not Before: Mar  1 18:53:44 2018 GMT
-            Not After : Feb 28 18:53:44 2023 GMT
-        Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=localhost
+            Not Before: Apr 13 13:22:38 2023 GMT
+            Not After : Apr 11 13:22:38 2028 GMT
+        Subject: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Production, CN=localhost
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:c9:18:e1:6a:c4:45:58:0e:b7:65:3a:b8:6f:df:
-                    0a:d8:5d:18:aa:40:08:d6:d5:79:fa:ca:79:6b:9e:
-                    ce:55:85:c9:d5:4f:bb:7f:5a:81:c8:3c:5d:aa:ed:
-                    7f:48:87:c2:f1:4c:62:00:c3:8d:9a:a3:c2:77:25:
-                    c6:70:cc:ef:d1:8f:17:7d:1b:c3:ab:66:3e:90:f0:
-                    44:e3:85:8b:77:86:21:b2:dd:0b:2c:ed:a0:16:a0:
-                    16:63:49:b9:bb:90:45:44:f1:f7:1e:ad:57:1c:45:
-                    a2:08:99:13:05:e3:13:76:ef:f3:cd:f3:3a:21:73:
-                    21:75:0a:2d:58:e2:0a:3a:3d
+                    00:c8:b2:1f:2b:d4:6c:20:f0:67:64:14:9d:79:14:
+                    b3:99:49:a9:65:1d:20:f3:1e:b7:96:92:9b:e7:0c:
+                    1d:90:be:dc:a5:c5:10:e1:9e:d9:fd:f4:6f:f0:1e:
+                    18:ef:db:fd:f9:88:e3:fb:0f:fb:4b:6b:15:c3:8d:
+                    43:86:6c:2b:f0:12:94:b5:ce:9d:60:57:04:15:0e:
+                    07:0f:72:87:5b:38:62:f4:75:5d:17:05:3d:45:1f:
+                    e7:7b:ee:da:50:95:22:10:de:f8:87:cb:b8:39:38:
+                    cf:88:6d:69:80:7d:df:a7:50:28:45:df:aa:33:e3:
+                    3d:d6:a2:4c:2b:8d:bb:83:db:98:2d:cd:1a:7f:88:
+                    75:e5:5d:fc:ea:c8:60:93:31:76:66:f3:24:ad:2b:
+                    fa:20:77:41:61:ab:43:ee:47:52:45:6b:a4:11:98:
+                    3d:bf:7c:09:57:c0:0b:36:8f:ba:be:e3:29:d5:3e:
+                    f9:c1:51:15:1f:b1:c1:4e:9f:c8:68:e2:b1:d8:11:
+                    25:7b:65:56:11:79:fe:f7:f1:c8:ac:9b:b0:a2:4b:
+                    e5:c4:e4:96:ab:92:30:f8:ce:a7:ae:c9:53:e1:f4:
+                    d9:f8:55:e1:52:1a:b2:e0:ae:b6:76:f7:e4:dc:2c:
+                    0b:f2:c3:09:b2:f7:42:8d:56:d6:d4:3b:af:18:2e:
+                    26:31
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,33 +37,46 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                7E:42:6C:12:CB:42:12:36:54:03:29:B6:D8:21:CA:E1:65:48:C5:67
+                93:31:D2:88:FB:6F:4C:AB:37:BE:CE:30:6B:1B:AB:70:27:58:8F:DA
             X509v3 Authority Key Identifier: 
-                keyid:9E:54:3E:E5:2F:E5:EA:40:4A:FC:37:96:6C:45:BB:1A:79:0E:CA:AB
+                keyid:E1:BE:F5:5F:36:50:CF:FE:3D:42:EE:80:33:22:46:C2:3D:2A:41:41
 
     Signature Algorithm: sha256WithRSAEncryption
-         08:e1:a9:a0:e9:c4:1b:65:8d:b0:71:60:68:18:d8:af:49:8f:
-         0b:41:62:bb:f8:23:71:65:f2:c7:cf:59:23:63:48:fa:ba:26:
-         5f:2d:2e:4c:18:e4:f0:6e:cb:38:be:51:d0:e2:cc:76:ab:f6:
-         13:c2:49:68:e2:ef:da:86:a9:3d:80:29:9f:ee:33:be:cd:4c:
-         b2:4c:14:04:e3:46:46:46:ec:c1:4a:63:de:f3:5a:7b:0f:28:
-         a1:92:c8:96:07:b3:73:96:f4:9e:a0:bf:36:ea:f1:1a:8b:f7:
-         d5:ed:6c:e2:bf:cd:61:bc:a4:ca:ee:fa:75:af:ad:4c:54:4b:
-         af:18
+         4a:2e:1f:9c:7e:99:2e:cc:40:b4:49:ea:92:27:d4:35:f5:07:
+         6b:ff:a2:2e:15:47:76:40:3c:9b:1c:85:b3:a8:f6:a6:f2:15:
+         c0:a1:dc:d6:bd:66:71:09:fd:e6:93:4f:9a:36:e4:a7:0f:b0:
+         f5:5a:4d:e2:30:50:9b:12:0d:12:4d:6a:67:81:02:17:92:69:
+         00:e4:24:91:5c:83:99:9c:7b:6d:8d:3f:fc:46:81:c2:4a:f4:
+         9c:3f:d6:5f:6b:1f:c6:84:fa:de:33:26:3a:d4:d2:4c:98:23:
+         c1:2b:20:f2:12:bd:dc:61:5f:63:84:4c:1b:7b:c5:28:3c:4a:
+         bb:da:07:61:b7:d7:79:43:66:eb:f9:21:96:14:34:80:1b:bd:
+         b7:62:22:ea:7a:0a:25:b5:27:fb:40:c7:f7:ce:18:ea:e6:16:
+         55:d9:bb:de:98:c5:19:04:a1:3c:03:e2:6f:50:79:ac:ce:88:
+         9c:6e:d0:1a:d2:87:10:2e:59:dd:14:19:be:23:aa:bc:17:1b:
+         21:96:5f:08:ce:16:d9:71:52:72:f9:f5:be:f7:cd:17:ae:9a:
+         9a:3f:e1:11:a3:a9:9a:6c:8d:ca:c9:7f:e5:6d:32:72:4e:3e:
+         c0:c7:96:95:e4:dc:9e:b6:3a:e3:57:4f:eb:79:2a:09:61:51:
+         78:c1:b9:50
 -----BEGIN CERTIFICATE-----
-MIICzDCCAjWgAwIBAgIBATANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
-EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTgwMzAx
-MTg1MzQ0WhcNMjMwMjI4MTg1MzQ0WjB2MQswCQYDVQQGEwJHQjEYMBYGA1UECAwP
-Tm90dGluZ2hhbXNoaXJlMRMwEQYDVQQHDApOb3R0aW5naGFtMQ8wDQYDVQQKDAZT
-ZXJ2ZXIxEzARBgNVBAsMClByb2R1Y3Rpb24xEjAQBgNVBAMMCWxvY2FsaG9zdDCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAyRjhasRFWA63ZTq4b98K2F0YqkAI
-1tV5+sp5a57OVYXJ1U+7f1qByDxdqu1/SIfC8UxiAMONmqPCdyXGcMzv0Y8XfRvD
-q2Y+kPBE44WLd4Yhst0LLO2gFqAWY0m5u5BFRPH3Hq1XHEWiCJkTBeMTdu/zzfM6
-IXMhdQotWOIKOj0CAwEAAaN7MHkwCQYDVR0TBAIwADAsBglghkgBhvhCAQ0EHxYd
-T3BlblNTTCBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFH5CbBLLQhI2
-VAMpttghyuFlSMVnMB8GA1UdIwQYMBaAFJ5UPuUv5epASvw3lmxFuxp5DsqrMA0G
-CSqGSIb3DQEBCwUAA4GBAAjhqaDpxBtljbBxYGgY2K9JjwtBYrv4I3Fl8sfPWSNj
-SPq6Jl8tLkwY5PBuyzi+UdDizHar9hPCSWji79qGqT2AKZ/uM77NTLJMFATjRkZG
-7MFKY97zWnsPKKGSyJYHs3OW9J6gvzbq8RqL99XtbOK/zWG8pMru+nWvrUxUS68Y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 -----END CERTIFICATE-----

test/ssl/signingCA/newcerts/02.pem

@@ -2,25 +2,34 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Signing CA
         Validity
-            Not Before: Mar  1 18:53:47 2018 GMT
-            Not After : Feb 28 18:53:47 2023 GMT
-        Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=test client
+            Not Before: Apr 13 13:22:40 2023 GMT
+            Not After : Apr 11 13:22:40 2028 GMT
+        Subject: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Production, CN=test client
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:b8:67:87:cf:05:35:29:81:b1:16:e3:0a:1c:59:
-                    83:36:dc:31:db:af:f2:a9:12:97:e7:96:c8:91:7c:
-                    a4:52:65:43:79:f4:20:e0:5f:ed:c0:b4:32:9d:c7:
-                    3d:21:9a:9e:92:6c:42:08:06:88:65:d5:4f:5e:70:
-                    d9:7d:e1:de:4b:be:26:e2:06:99:4a:54:f7:e7:1c:
-                    d6:7c:6f:d5:16:8d:b0:9d:ce:5d:29:f1:51:e9:12:
-                    fd:2f:ed:d6:fc:e1:cc:d6:31:0e:ce:0e:74:02:f3:
-                    1e:70:41:44:5d:67:ed:3b:9d:2f:43:b8:89:6f:90:
-                    52:9b:f1:e9:fc:ed:f8:35:d1
+                    00:c9:03:bc:43:8e:1e:2e:cd:ac:4a:33:2f:99:fc:
+                    de:9b:43:ff:c3:c2:ca:ab:de:a8:e2:10:1b:86:d2:
+                    51:ef:71:26:1f:7c:0e:5c:5b:5d:e7:1e:62:25:eb:
+                    db:1f:7a:7f:c8:87:3b:79:38:b4:0b:e6:8e:43:8b:
+                    8b:3a:e8:85:0a:2f:77:13:80:cb:1b:86:30:ff:7f:
+                    f9:a2:70:68:5e:0b:dd:7f:4b:7d:f4:82:2b:39:5d:
+                    43:cd:fd:d9:38:be:4e:4f:0f:5d:5c:f6:cc:49:95:
+                    d5:b4:d5:a1:56:93:38:1d:62:5e:58:f3:90:3c:44:
+                    1e:3d:85:2b:0f:9f:4f:9e:9a:e3:b1:4b:18:a8:e1:
+                    05:6b:88:c5:ea:bf:a6:85:b9:3c:9f:02:ad:83:31:
+                    09:5e:e3:a2:b1:78:6b:bc:b2:d1:05:f5:22:3a:90:
+                    a5:1c:0f:b5:94:aa:29:aa:7d:c8:ee:f5:3a:8f:2c:
+                    32:42:e1:c0:ec:8f:a8:73:ca:38:17:05:c9:c0:ce:
+                    e2:c4:40:68:0b:4f:86:fb:1b:35:9c:4e:69:81:4f:
+                    c8:cf:09:06:eb:ed:3a:f6:46:86:4f:91:f8:35:be:
+                    3c:ca:03:a4:0f:3d:75:56:d1:93:7f:a2:d2:32:38:
+                    df:02:ac:2b:ff:a1:94:a4:80:b7:9f:ca:9e:51:0f:
+                    1a:bb
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,34 +37,46 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                27:DF:0F:D3:9A:8F:34:C8:9E:C1:6D:B9:29:99:0F:0D:3A:D1:BB:BD
+                DF:C7:7A:E1:90:8C:51:CB:9F:32:43:B0:A6:60:E8:FB:A0:79:6E:F0
             X509v3 Authority Key Identifier: 
-                keyid:9E:54:3E:E5:2F:E5:EA:40:4A:FC:37:96:6C:45:BB:1A:79:0E:CA:AB
+                keyid:E1:BE:F5:5F:36:50:CF:FE:3D:42:EE:80:33:22:46:C2:3D:2A:41:41
 
     Signature Algorithm: sha256WithRSAEncryption
-         a1:0d:e1:4b:25:ef:4e:67:28:93:33:68:49:65:0e:18:eb:3f:
-         17:ae:47:68:75:4d:72:f5:41:6b:c5:f0:1d:06:0d:25:3d:fa:
-         ab:39:17:f4:e2:34:b7:49:9d:69:a1:92:4a:69:1b:17:42:5b:
-         c6:79:6f:20:31:81:5c:52:c2:58:6b:a0:ba:9a:fe:55:0e:8d:
-         0b:80:9f:4a:97:ed:05:05:90:a6:13:23:70:d0:56:93:a6:f4:
-         66:af:f0:96:05:8b:67:89:72:67:04:f4:5e:44:36:20:4e:b4:
-         97:b4:b2:3b:aa:e2:44:b1:ee:49:13:2c:af:e7:6d:37:e8:09:
-         50:6d
+         5b:94:99:5f:8d:97:69:31:9d:ea:3d:e1:a5:a8:75:4c:1a:ef:
+         c0:cb:b1:92:a6:19:c4:a1:25:12:2f:64:3c:af:6d:d4:48:b8:
+         77:e8:29:4b:5a:6a:50:65:85:c7:ba:22:a5:9c:24:93:75:fc:
+         3e:ee:81:23:a4:89:da:89:4c:54:3b:02:8f:2d:de:dd:85:df:
+         11:ac:26:b5:e6:b5:d9:82:21:28:90:3c:45:42:fe:7a:0a:ba:
+         46:6c:8f:05:1d:ff:6f:c6:47:16:04:f3:4b:b3:e2:82:a2:3b:
+         97:71:78:0b:12:19:db:a4:fc:2f:e1:ce:2b:b1:b6:8b:1b:30:
+         69:6a:b0:16:2e:2a:c1:a1:d5:69:ab:b2:b4:95:e1:8f:bf:dc:
+         4e:33:7d:06:8c:2b:37:ca:d9:c2:49:b4:4b:ec:32:ac:f1:12:
+         80:c9:08:02:67:d9:f8:90:62:d9:27:4d:14:67:7b:09:bb:bc:
+         56:8a:68:57:d5:6b:4f:df:00:14:0a:69:45:fc:30:5f:88:3a:
+         37:b8:55:8f:a6:8e:fe:48:d8:1b:25:4b:e8:c1:16:84:26:5b:
+         e5:0b:ba:96:11:a0:db:b2:68:57:a9:55:f3:a8:03:65:82:da:
+         9d:40:19:73:8f:d6:ab:98:fa:26:15:27:da:46:ab:29:df:a9:
+         61:8b:55:2d
 -----BEGIN CERTIFICATE-----
-MIICzjCCAjegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
-EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTgwMzAx
-MTg1MzQ3WhcNMjMwMjI4MTg1MzQ3WjB4MQswCQYDVQQGEwJHQjEYMBYGA1UECAwP
-Tm90dGluZ2hhbXNoaXJlMRMwEQYDVQQHDApOb3R0aW5naGFtMQ8wDQYDVQQKDAZT
-ZXJ2ZXIxEzARBgNVBAsMClByb2R1Y3Rpb24xFDASBgNVBAMMC3Rlc3QgY2xpZW50
-MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4Z4fPBTUpgbEW4wocWYM23DHb
-r/KpEpfnlsiRfKRSZUN59CDgX+3AtDKdxz0hmp6SbEIIBohl1U9ecNl94d5Lvibi
-BplKVPfnHNZ8b9UWjbCdzl0p8VHpEv0v7db84czWMQ7ODnQC8x5wQURdZ+07nS9D
-uIlvkFKb8en87fg10QIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQf
-Fh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUJ98P05qP
-NMiewW25KZkPDTrRu70wHwYDVR0jBBgwFoAUnlQ+5S/l6kBK/DeWbEW7GnkOyqsw
-DQYJKoZIhvcNAQELBQADgYEAoQ3hSyXvTmcokzNoSWUOGOs/F65HaHVNcvVBa8Xw
-HQYNJT36qzkX9OI0t0mdaaGSSmkbF0JbxnlvIDGBXFLCWGugupr+VQ6NC4CfSpft
-BQWQphMjcNBWk6b0Zq/wlgWLZ4lyZwT0XkQ2IE60l7SyO6riRLHuSRMsr+dtN+gJ
-UG0=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 -----END CERTIFICATE-----

test/ssl/signingCA/newcerts/03.pem

@@ -2,25 +2,34 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 3 (0x3)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Signing CA
         Validity
             Not Before: Aug 20 00:00:00 2012 GMT
             Not After : Aug 21 00:00:00 2012 GMT
-        Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=test client expired
+        Subject: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Production, CN=test client expired
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:b8:67:87:cf:05:35:29:81:b1:16:e3:0a:1c:59:
-                    83:36:dc:31:db:af:f2:a9:12:97:e7:96:c8:91:7c:
-                    a4:52:65:43:79:f4:20:e0:5f:ed:c0:b4:32:9d:c7:
-                    3d:21:9a:9e:92:6c:42:08:06:88:65:d5:4f:5e:70:
-                    d9:7d:e1:de:4b:be:26:e2:06:99:4a:54:f7:e7:1c:
-                    d6:7c:6f:d5:16:8d:b0:9d:ce:5d:29:f1:51:e9:12:
-                    fd:2f:ed:d6:fc:e1:cc:d6:31:0e:ce:0e:74:02:f3:
-                    1e:70:41:44:5d:67:ed:3b:9d:2f:43:b8:89:6f:90:
-                    52:9b:f1:e9:fc:ed:f8:35:d1
+                    00:c9:03:bc:43:8e:1e:2e:cd:ac:4a:33:2f:99:fc:
+                    de:9b:43:ff:c3:c2:ca:ab:de:a8:e2:10:1b:86:d2:
+                    51:ef:71:26:1f:7c:0e:5c:5b:5d:e7:1e:62:25:eb:
+                    db:1f:7a:7f:c8:87:3b:79:38:b4:0b:e6:8e:43:8b:
+                    8b:3a:e8:85:0a:2f:77:13:80:cb:1b:86:30:ff:7f:
+                    f9:a2:70:68:5e:0b:dd:7f:4b:7d:f4:82:2b:39:5d:
+                    43:cd:fd:d9:38:be:4e:4f:0f:5d:5c:f6:cc:49:95:
+                    d5:b4:d5:a1:56:93:38:1d:62:5e:58:f3:90:3c:44:
+                    1e:3d:85:2b:0f:9f:4f:9e:9a:e3:b1:4b:18:a8:e1:
+                    05:6b:88:c5:ea:bf:a6:85:b9:3c:9f:02:ad:83:31:
+                    09:5e:e3:a2:b1:78:6b:bc:b2:d1:05:f5:22:3a:90:
+                    a5:1c:0f:b5:94:aa:29:aa:7d:c8:ee:f5:3a:8f:2c:
+                    32:42:e1:c0:ec:8f:a8:73:ca:38:17:05:c9:c0:ce:
+                    e2:c4:40:68:0b:4f:86:fb:1b:35:9c:4e:69:81:4f:
+                    c8:cf:09:06:eb:ed:3a:f6:46:86:4f:91:f8:35:be:
+                    3c:ca:03:a4:0f:3d:75:56:d1:93:7f:a2:d2:32:38:
+                    df:02:ac:2b:ff:a1:94:a4:80:b7:9f:ca:9e:51:0f:
+                    1a:bb
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,34 +37,46 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                27:DF:0F:D3:9A:8F:34:C8:9E:C1:6D:B9:29:99:0F:0D:3A:D1:BB:BD
+                DF:C7:7A:E1:90:8C:51:CB:9F:32:43:B0:A6:60:E8:FB:A0:79:6E:F0
             X509v3 Authority Key Identifier: 
-                keyid:9E:54:3E:E5:2F:E5:EA:40:4A:FC:37:96:6C:45:BB:1A:79:0E:CA:AB
+                keyid:E1:BE:F5:5F:36:50:CF:FE:3D:42:EE:80:33:22:46:C2:3D:2A:41:41
 
     Signature Algorithm: sha256WithRSAEncryption
-         96:28:72:b2:16:af:2b:f2:92:d9:8b:e7:15:2c:e2:e1:55:48:
-         ce:45:d0:89:7a:80:41:ec:3e:b5:01:ee:b9:2e:62:44:7d:b5:
-         b2:f0:e5:83:62:1d:6f:3b:b5:69:4c:dd:c7:20:fb:b0:70:5a:
-         c5:f6:4a:97:14:4a:63:8f:da:3b:0d:27:e3:b9:06:a3:53:1c:
-         db:d3:9d:8a:8a:aa:7c:d7:a0:39:15:d5:03:8b:4f:0e:ab:78:
-         2f:05:69:8c:a3:5a:6b:70:6b:9e:b1:23:ad:d3:ef:a9:5d:01:
-         1b:37:7e:07:0f:97:cb:79:3a:7f:02:3d:40:62:20:63:a8:80:
-         92:da
+         dd:eb:8c:63:92:ef:ed:0c:ee:85:a1:e0:3c:18:f0:5d:18:1a:
+         0b:2b:a8:ad:33:1d:11:bb:1f:d9:03:51:82:97:20:8c:4d:20:
+         7f:31:48:83:27:3c:ff:6a:0b:fb:f9:73:28:9e:bf:20:a1:bd:
+         ee:ea:8f:b8:ff:0b:26:7d:fe:bf:b5:34:81:46:43:6e:03:5b:
+         17:47:63:79:06:93:03:70:c3:cb:34:e6:90:66:1f:34:2d:b8:
+         03:e0:6e:ad:3d:ea:01:80:34:e5:55:76:22:4e:d3:a7:dd:43:
+         77:c6:7d:68:15:bd:f5:4e:d1:df:dd:a6:e5:86:3b:2a:d6:2f:
+         45:83:74:87:65:81:f3:c6:a2:00:4f:82:f7:ec:b3:f6:7f:9b:
+         32:c2:f5:be:4d:25:8b:da:22:ad:2b:78:36:19:c1:d1:5d:ad:
+         13:9a:ae:55:fa:0c:a6:8d:82:cd:8a:d3:09:91:df:0d:0f:2c:
+         3d:2a:91:d0:10:be:b5:72:d8:31:ae:02:d5:e9:15:5f:c3:16:
+         bf:15:44:a1:33:cb:f7:c0:ee:40:3e:7e:d7:b1:f3:d6:47:fa:
+         e0:dd:71:4f:54:93:1e:d8:5d:96:ae:de:54:ee:4f:ce:4b:14:
+         d3:bf:44:76:04:0b:53:7f:bd:43:a6:c4:b2:c6:88:50:c0:cf:
+         47:80:d1:86
 -----BEGIN CERTIFICATE-----
-MIIC1zCCAkCgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
-EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTIwODIw
-MDAwMDAwWhcNMTIwODIxMDAwMDAwWjCBgDELMAkGA1UEBhMCR0IxGDAWBgNVBAgM
-D05vdHRpbmdoYW1zaGlyZTETMBEGA1UEBwwKTm90dGluZ2hhbTEPMA0GA1UECgwG
-U2VydmVyMRMwEQYDVQQLDApQcm9kdWN0aW9uMRwwGgYDVQQDDBN0ZXN0IGNsaWVu
-dCBleHBpcmVkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4Z4fPBTUpgbEW
-4wocWYM23DHbr/KpEpfnlsiRfKRSZUN59CDgX+3AtDKdxz0hmp6SbEIIBohl1U9e
-cNl94d5LvibiBplKVPfnHNZ8b9UWjbCdzl0p8VHpEv0v7db84czWMQ7ODnQC8x5w
-QURdZ+07nS9DuIlvkFKb8en87fg10QIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCG
-SAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4E
-FgQUJ98P05qPNMiewW25KZkPDTrRu70wHwYDVR0jBBgwFoAUnlQ+5S/l6kBK/DeW
-bEW7GnkOyqswDQYJKoZIhvcNAQELBQADgYEAlihyshavK/KS2YvnFSzi4VVIzkXQ
-iXqAQew+tQHuuS5iRH21svDlg2Idbzu1aUzdxyD7sHBaxfZKlxRKY4/aOw0n47kG
-o1Mc29OdioqqfNegORXVA4tPDqt4LwVpjKNaa3BrnrEjrdPvqV0BGzd+Bw+Xy3k6
-fwI9QGIgY6iAkto=
+MIID1DCCArygAwIBAgIBAzANBgkqhkiG9w0BAQsFADBfMQswCQYDVQQGEwJHQjES
+MBAGA1UECAwJV2lsdHNoaXJlMRUwEwYDVQQKDAxQYWhvIFByb2plY3QxEDAOBgNV
+BAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTIwODIwMDAwMDAw
+WhcNMTIwODIxMDAwMDAwWjB/MQswCQYDVQQGEwJHQjESMBAGA1UECAwJV2lsdHNo
+aXJlMRIwEAYDVQQHDAlTYWxpc2J1cnkxFTATBgNVBAoMDFBhaG8gUHJvamVjdDET
+MBEGA1UECwwKUHJvZHVjdGlvbjEcMBoGA1UEAwwTdGVzdCBjbGllbnQgZXhwaXJl
+ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMkDvEOOHi7NrEozL5n8
+3ptD/8PCyqveqOIQG4bSUe9xJh98DlxbXeceYiXr2x96f8iHO3k4tAvmjkOLizro
+hQovdxOAyxuGMP9/+aJwaF4L3X9LffSCKzldQ8392Ti+Tk8PXVz2zEmV1bTVoVaT
+OB1iXljzkDxEHj2FKw+fT56a47FLGKjhBWuIxeq/poW5PJ8CrYMxCV7jorF4a7yy
+0QX1IjqQpRwPtZSqKap9yO71Oo8sMkLhwOyPqHPKOBcFycDO4sRAaAtPhvsbNZxO
+aYFPyM8JBuvtOvZGhk+R+DW+PMoDpA89dVbRk3+i0jI43wKsK/+hlKSAt5/KnlEP
+GrsCAwEAAaN7MHkwCQYDVR0TBAIwADAsBglghkgBhvhCAQ0EHxYdT3BlblNTTCBH
+ZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFN/HeuGQjFHLnzJDsKZg6Pug
+eW7wMB8GA1UdIwQYMBaAFOG+9V82UM/+PULugDMiRsI9KkFBMA0GCSqGSIb3DQEB
+CwUAA4IBAQDd64xjku/tDO6FoeA8GPBdGBoLK6itMx0Rux/ZA1GClyCMTSB/MUiD
+Jzz/agv7+XMonr8gob3u6o+4/wsmff6/tTSBRkNuA1sXR2N5BpMDcMPLNOaQZh80
+LbgD4G6tPeoBgDTlVXYiTtOn3UN3xn1oFb31TtHf3ablhjsq1i9Fg3SHZYHzxqIA
+T4L37LP2f5sywvW+TSWL2iKtK3g2GcHRXa0Tmq5V+gymjYLNitMJkd8NDyw9KpHQ
+EL61ctgxrgLV6RVfwxa/FUShM8v3wO5APn7XsfPWR/rg3XFPVJMe2F2Wrt5U7k/O
+SxTTv0R2BAtTf71DpsSyxohQwM9HgNGG
 -----END CERTIFICATE-----

test/ssl/signingCA/newcerts/04.pem

@@ -2,25 +2,34 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 4 (0x4)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Signing CA
         Validity
-            Not Before: Mar  1 18:53:51 2018 GMT
-            Not After : Feb 28 18:53:51 2023 GMT
-        Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=test client revoked
+            Not Before: Apr 13 13:22:44 2023 GMT
+            Not After : Apr 11 13:22:44 2028 GMT
+        Subject: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Production, CN=test client revoked
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:ca:88:c0:97:79:0c:af:97:dc:f2:06:5a:12:3d:
-                    07:bf:d0:ca:f3:90:e2:fa:a6:36:c7:67:0c:50:30:
-                    b6:98:1c:83:16:03:fa:7d:00:77:37:00:49:93:3d:
-                    20:0b:e8:fb:8f:20:a2:6a:29:df:ae:ee:38:38:a8:
-                    3b:76:b2:92:96:63:46:0b:b2:47:5f:5d:9b:8d:dc:
-                    31:95:3b:ac:e9:ab:c6:89:00:46:61:58:7f:b5:39:
-                    c6:97:7e:5c:f5:06:f0:ea:82:e6:11:27:18:1f:af:
-                    2c:cb:21:43:75:e3:cf:fa:41:d8:17:17:87:ce:29:
-                    df:7f:75:d6:1f:20:d7:29:03
+                    00:b0:df:00:8c:5f:84:08:db:a5:1a:6f:2c:2c:b8:
+                    35:e7:41:7e:ef:65:09:97:a3:87:35:b5:ce:62:29:
+                    e9:e6:05:47:22:83:d8:22:d1:77:a7:c1:44:05:45:
+                    54:e7:26:84:88:56:8d:5e:33:b2:4c:21:47:81:48:
+                    01:80:2c:bf:91:fe:0d:cd:20:c2:5e:09:be:7c:26:
+                    5e:d7:ee:18:94:af:4f:25:00:81:c9:90:e9:2e:b4:
+                    e0:31:b8:56:c2:45:24:07:4a:48:49:9a:6d:3e:9d:
+                    df:50:2a:19:1a:34:37:18:84:19:9c:90:66:cb:3e:
+                    39:7b:f7:72:d9:76:bb:de:e6:04:d0:d7:2c:5b:13:
+                    41:59:13:f0:22:e1:0c:58:40:32:8b:37:74:6b:71:
+                    15:31:47:19:08:90:56:11:c8:56:eb:37:9c:0c:cc:
+                    d8:21:2b:01:92:ff:13:7f:f1:d1:83:7e:67:a7:3a:
+                    1a:20:0f:f5:f0:04:9e:ad:69:64:05:68:2f:4c:ff:
+                    c3:63:55:1c:ff:6f:6e:49:19:e9:93:81:77:53:a2:
+                    4d:d2:50:ce:4a:4e:9c:8b:67:4d:5b:50:fa:05:cc:
+                    88:76:69:81:30:d8:ee:c9:3b:c2:69:77:09:12:77:
+                    df:17:c7:33:db:de:10:84:a1:89:95:a2:a6:9b:43:
+                    60:91
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,34 +37,46 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                53:1F:81:85:BB:93:78:8A:B4:22:F8:8C:E0:6C:99:5F:B6:AA:B5:9B
+                08:82:0F:14:6E:DC:5F:22:10:D1:D7:8A:84:92:80:AB:4F:40:D5:BA
             X509v3 Authority Key Identifier: 
-                keyid:9E:54:3E:E5:2F:E5:EA:40:4A:FC:37:96:6C:45:BB:1A:79:0E:CA:AB
+                keyid:E1:BE:F5:5F:36:50:CF:FE:3D:42:EE:80:33:22:46:C2:3D:2A:41:41
 
     Signature Algorithm: sha256WithRSAEncryption
-         24:f6:97:b8:b2:ac:eb:83:35:d8:fa:3e:86:13:a6:44:85:10:
-         c5:ba:33:c5:58:98:bc:6e:fe:30:60:12:41:ce:ac:3f:ed:38:
-         e6:5f:ff:b5:29:73:a7:f6:60:41:b2:10:23:da:74:f2:29:d6:
-         f1:bb:94:38:14:fc:75:50:64:f4:4d:d2:6a:3d:f0:da:e0:e8:
-         e2:b9:be:a4:30:b4:c7:c3:22:60:c4:a4:34:31:13:7b:46:9d:
-         bb:5f:8e:cd:21:9d:52:78:e5:e3:e9:e6:e8:62:16:a1:f0:af:
-         14:c8:2c:39:a6:2f:a9:f4:98:cf:8c:20:20:87:c2:15:78:e4:
-         53:23
+         1d:8c:d5:f1:52:8e:c3:ca:1a:66:6c:21:f3:8a:41:4b:53:a8:
+         36:73:15:f3:56:38:93:48:9d:ff:3e:cd:36:24:d2:bf:17:da:
+         48:6b:26:2a:67:3d:0e:fd:eb:9e:9f:b2:64:40:74:13:b8:48:
+         e6:e9:f5:6b:2b:7d:62:7a:d4:8f:01:9a:ab:b9:cc:01:1b:3d:
+         69:27:17:0b:84:91:f8:49:10:69:2f:68:31:13:71:c0:42:ac:
+         d4:ff:06:c9:7b:a2:4c:7f:c9:06:66:0c:b4:a5:8f:e0:f3:9f:
+         bb:86:10:6a:47:fa:20:1e:9c:d4:03:ef:4a:46:c5:c3:b6:72:
+         f2:6d:48:45:51:fe:44:4c:05:4e:db:18:41:e4:21:3f:2a:00:
+         11:86:1c:cc:85:de:68:da:ec:86:19:6f:9b:b9:a8:85:47:7d:
+         7b:6e:88:3b:3d:e3:86:96:2b:80:7b:31:a0:ea:24:a4:43:5c:
+         20:df:55:88:31:13:a7:eb:15:18:ba:23:95:c6:2e:53:90:05:
+         9d:b4:04:9d:c1:44:d7:97:b4:27:51:cc:ac:a8:c7:3a:d0:dd:
+         45:a8:48:a3:5d:33:39:77:94:a6:c2:94:b5:c6:a6:15:ff:8e:
+         c8:ba:ce:33:c7:6b:f9:74:61:c9:f8:0f:41:88:1c:7b:18:26:
+         48:66:64:f8
 -----BEGIN CERTIFICATE-----
-MIIC1zCCAkCgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
-EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTgwMzAx
-MTg1MzUxWhcNMjMwMjI4MTg1MzUxWjCBgDELMAkGA1UEBhMCR0IxGDAWBgNVBAgM
-D05vdHRpbmdoYW1zaGlyZTETMBEGA1UEBwwKTm90dGluZ2hhbTEPMA0GA1UECgwG
-U2VydmVyMRMwEQYDVQQLDApQcm9kdWN0aW9uMRwwGgYDVQQDDBN0ZXN0IGNsaWVu
-dCByZXZva2VkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDKiMCXeQyvl9zy
-BloSPQe/0MrzkOL6pjbHZwxQMLaYHIMWA/p9AHc3AEmTPSAL6PuPIKJqKd+u7jg4
-qDt2spKWY0YLskdfXZuN3DGVO6zpq8aJAEZhWH+1OcaXflz1BvDqguYRJxgfryzL
-IUN148/6QdgXF4fOKd9/ddYfINcpAwIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCG
-SAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4E
-FgQUUx+BhbuTeIq0IviM4GyZX7aqtZswHwYDVR0jBBgwFoAUnlQ+5S/l6kBK/DeW
-bEW7GnkOyqswDQYJKoZIhvcNAQELBQADgYEAJPaXuLKs64M12Po+hhOmRIUQxboz
-xViYvG7+MGASQc6sP+045l//tSlzp/ZgQbIQI9p08inW8buUOBT8dVBk9E3Saj3w
-2uDo4rm+pDC0x8MiYMSkNDETe0adu1+OzSGdUnjl4+nm6GIWofCvFMgsOaYvqfSY
-z4wgIIfCFXjkUyM=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 -----END CERTIFICATE-----

test/ssl/test-alt-ca.crt

@@ -2,57 +2,78 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, L=Derby, O=Mosquitto Project, OU=Testing, CN=Root CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Testing, CN=Root CA
         Validity
-            Not Before: Mar  1 18:53:42 2018 GMT
-            Not After : Feb 28 18:53:42 2023 GMT
-        Subject: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Alternative Signing CA
+            Not Before: Apr 13 13:22:35 2023 GMT
+            Not After : Apr 11 13:22:35 2028 GMT
+        Subject: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Alternative Signing CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:bd:8b:92:ed:6a:d6:b7:73:88:e7:fa:80:bd:bc:
-                    ee:fb:6a:47:f4:36:4e:48:ab:88:8a:a6:66:98:84:
-                    6a:4c:a8:88:5f:cc:26:98:81:fe:8b:22:c4:c0:91:
-                    70:74:72:22:48:1d:e1:b8:44:71:23:74:17:59:bc:
-                    a6:51:18:97:4c:6d:50:8c:0a:c5:33:cc:28:2a:cf:
-                    78:04:a2:20:75:72:29:4a:46:7b:c7:46:a5:f5:5e:
-                    ec:6f:53:bc:d7:ad:b5:29:dd:22:24:4e:b7:88:e2:
-                    94:58:04:fe:6d:04:13:8d:c8:72:d0:74:2a:ef:18:
-                    87:6d:cf:ce:6e:4a:08:73:c3
+                    00:dd:be:17:42:0f:31:63:33:36:b3:a7:19:ee:c5:
+                    1f:77:b9:13:17:7c:e2:2e:45:14:1f:a7:84:41:bd:
+                    f8:2f:fa:93:bc:c1:ed:e6:3e:fc:e3:f3:c8:79:c7:
+                    ab:84:d9:b7:42:53:8f:75:29:95:a9:8c:c6:43:22:
+                    35:e3:be:cc:10:e6:38:01:5d:23:e4:c9:6e:ad:57:
+                    1a:8d:e2:60:b1:96:6c:97:80:e9:e2:12:ea:42:9f:
+                    b3:c8:f7:0f:56:47:64:49:7d:70:87:d6:63:03:3f:
+                    0b:59:a0:8d:9e:b5:38:aa:a2:3c:bc:10:37:cb:b3:
+                    e3:dc:34:c3:47:7c:b8:ad:9f:dc:46:52:28:3c:a5:
+                    42:18:fa:36:e1:41:af:5a:9d:62:b7:95:aa:80:e5:
+                    a0:47:cc:f5:48:e2:f4:d0:da:14:a6:6b:56:f9:c5:
+                    28:14:20:61:ff:76:f2:cb:f2:f1:4d:6a:9c:3f:89:
+                    68:29:0b:61:6c:99:43:34:a3:18:8f:d5:c1:4a:8d:
+                    5d:a0:a3:72:24:6a:af:c5:05:a7:80:10:7c:89:00:
+                    3c:99:cd:2e:4d:0b:6f:6c:6a:06:34:ae:31:48:c2:
+                    f2:97:56:0a:00:93:8f:53:9c:d0:8b:80:98:06:8a:
+                    42:13:99:40:cb:16:51:98:f2:22:e0:a1:49:d4:ce:
+                    3d:41
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                78:CC:8C:66:81:0F:8F:DA:56:5C:39:A2:30:C2:28:9E:53:A6:87:CA
+                97:15:96:32:A4:95:DC:12:51:9E:0A:B5:ED:7A:DE:56:56:50:AB:25
             X509v3 Authority Key Identifier: 
-                keyid:1C:B4:4E:8B:84:0D:1E:0F:C4:CC:F4:17:87:DB:CA:F2:55:F1:34:39
+                keyid:FE:98:8A:C3:41:B2:71:3A:4A:B3:76:5A:3C:17:06:93:11:99:8E:C8
 
             X509v3 Basic Constraints: 
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         27:3c:17:44:29:8f:17:a7:c0:b7:81:eb:76:ca:53:85:9a:ad:
-         31:68:85:95:69:d6:ab:02:75:a8:ac:71:6f:4d:20:23:6d:5c:
-         09:1d:0a:85:f4:e6:6f:6e:1e:c1:1f:34:1e:87:6e:d3:b9:e0:
-         b2:2f:08:82:fb:4b:28:36:a9:68:54:18:9b:16:6a:f2:ab:ae:
-         bd:7a:40:d2:a7:64:46:4c:f5:cb:15:07:02:7b:3f:44:5e:e1:
-         35:83:99:3f:46:7d:99:76:d2:89:3c:9f:a6:70:13:dd:8e:bd:
-         d2:b1:51:ec:9c:db:2e:f4:fd:f7:1d:de:2c:27:f3:55:9b:81:
-         07:81
+         7e:ea:4e:23:cf:88:95:1f:46:c2:9b:f9:0a:69:3b:2a:1c:b0:
+         c7:ef:79:d3:74:96:e2:cb:8b:29:bf:ab:32:61:0b:e3:4a:1c:
+         0b:17:55:e8:f8:43:7b:0a:87:1d:f8:64:76:07:9a:f7:ee:37:
+         c2:19:03:be:d6:db:00:ab:f9:ae:66:47:67:7a:c1:c5:a5:ef:
+         57:fd:ca:a4:27:f6:f6:06:a0:79:4f:0f:ed:97:41:fb:57:aa:
+         b8:4b:bd:1e:00:9d:11:ef:6f:b1:cd:9e:f6:aa:7d:2f:c3:3d:
+         fb:c2:17:ff:2f:b4:8f:5b:b2:81:ce:b8:83:53:6b:e0:08:84:
+         14:51:0f:4e:38:ae:c0:0d:43:ff:6d:ae:8a:02:8c:bf:5d:32:
+         58:64:09:58:ab:c1:b5:cc:ad:11:9f:9b:f2:28:62:14:4d:eb:
+         34:35:36:62:14:f2:46:9c:57:f3:3d:0b:f8:ed:68:be:78:e8:
+         4d:95:c0:f3:87:d0:e1:24:8e:a2:12:d5:26:1c:66:3d:d8:04:
+         0e:4f:93:2d:20:b5:f5:52:a4:5d:44:d3:dd:b1:d7:9f:24:56:
+         f1:02:fa:c2:5b:01:4e:71:34:a1:f7:dc:97:74:89:3c:3c:86:
+         7c:54:e2:3c:c1:d8:64:06:6d:63:39:75:32:23:b5:1d:40:aa:
+         84:ec:eb:64
 -----BEGIN CERTIFICATE-----
-MIICqTCCAhKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEOMAwGA1UEBwwFRGVyYnkxGjAYBgNVBAoMEU1v
-c3F1aXR0byBQcm9qZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRAwDgYDVQQDDAdSb290
-IENBMB4XDTE4MDMwMTE4NTM0MloXDTIzMDIyODE4NTM0MlowcTELMAkGA1UEBhMC
-R0IxEzARBgNVBAgMCkRlcmJ5c2hpcmUxGjAYBgNVBAoMEU1vc3F1aXR0byBQcm9q
-ZWN0MRAwDgYDVQQLDAdUZXN0aW5nMR8wHQYDVQQDDBZBbHRlcm5hdGl2ZSBTaWdu
-aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9i5Ltata3c4jn+oC9
-vO77akf0Nk5Iq4iKpmaYhGpMqIhfzCaYgf6LIsTAkXB0ciJIHeG4RHEjdBdZvKZR
-GJdMbVCMCsUzzCgqz3gEoiB1cilKRnvHRqX1XuxvU7zXrbUp3SIkTreI4pRYBP5t
-BBONyHLQdCrvGIdtz85uSghzwwIDAQABo1AwTjAdBgNVHQ4EFgQUeMyMZoEPj9pW
-XDmiMMIonlOmh8owHwYDVR0jBBgwFoAUHLROi4QNHg/EzPQXh9vK8lXxNDkwDAYD
-VR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOBgQAnPBdEKY8Xp8C3get2ylOFmq0x
-aIWVadarAnWorHFvTSAjbVwJHQqF9OZvbh7BHzQeh27TueCyLwiC+0soNqloVBib
-Fmryq669ekDSp2RGTPXLFQcCez9EXuE1g5k/Rn2ZdtKJPJ+mcBPdjr3SsVHsnNsu
-9P33Hd4sJ/NVm4EHgQ==
+MIIDpjCCAo6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBwMQswCQYDVQQGEwJHQjES
+MBAGA1UECAwJV2lsdHNoaXJlMRIwEAYDVQQHDAlTYWxpc2J1cnkxFTATBgNVBAoM
+DFBhaG8gUHJvamVjdDEQMA4GA1UECwwHVGVzdGluZzEQMA4GA1UEAwwHUm9vdCBD
+QTAeFw0yMzA0MTMxMzIyMzVaFw0yODA0MTExMzIyMzVaMGsxCzAJBgNVBAYTAkdC
+MRIwEAYDVQQIDAlXaWx0c2hpcmUxFTATBgNVBAoMDFBhaG8gUHJvamVjdDEQMA4G
+A1UECwwHVGVzdGluZzEfMB0GA1UEAwwWQWx0ZXJuYXRpdmUgU2lnbmluZyBDQTCC
+ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN2+F0IPMWMzNrOnGe7FH3e5
+Exd84i5FFB+nhEG9+C/6k7zB7eY+/OPzyHnHq4TZt0JTj3UplamMxkMiNeO+zBDm
+OAFdI+TJbq1XGo3iYLGWbJeA6eIS6kKfs8j3D1ZHZEl9cIfWYwM/C1mgjZ61OKqi
+PLwQN8uz49w0w0d8uK2f3EZSKDylQhj6NuFBr1qdYreVqoDloEfM9Uji9NDaFKZr
+VvnFKBQgYf928svy8U1qnD+JaCkLYWyZQzSjGI/VwUqNXaCjciRqr8UFp4AQfIkA
+PJnNLk0Lb2xqBjSuMUjC8pdWCgCTj1Oc0IuAmAaKQhOZQMsWUZjyIuChSdTOPUEC
+AwEAAaNQME4wHQYDVR0OBBYEFJcVljKkldwSUZ4Kte163lZWUKslMB8GA1UdIwQY
+MBaAFP6YisNBsnE6SrN2WjwXBpMRmY7IMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcN
+AQELBQADggEBAH7qTiPPiJUfRsKb+QppOyocsMfvedN0luLLiym/qzJhC+NKHAsX
+Vej4Q3sKhx34ZHYHmvfuN8IZA77W2wCr+a5mR2d6wcWl71f9yqQn9vYGoHlPD+2X
+QftXqrhLvR4AnRHvb7HNnvaqfS/DPfvCF/8vtI9bsoHOuINTa+AIhBRRD044rsAN
+Q/9trooCjL9dMlhkCVirwbXMrRGfm/IoYhRN6zQ1NmIU8kacV/M9C/jtaL546E2V
+wPOH0OEkjqIS1SYcZj3YBA5Pky0gtfVSpF1E092x158kVvEC+sJbAU5xNKH33Jd0
+iTw8hnxU4jzB2GQGbWM5dTIjtR1AqoTs62Q=
 -----END CERTIFICATE-----

test/ssl/test-alt-ca.csr

 -----BEGIN CERTIFICATE REQUEST-----
-MIIBwjCCASsCAQAwgYExCzAJBgNVBAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJl
-MQ4wDAYDVQQHDAVEZXJieTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAO
-BgNVBAsMB1Rlc3RpbmcxHzAdBgNVBAMMFkFsdGVybmF0aXZlIFNpZ25pbmcgQ0Ew
-gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAL2Lku1q1rdziOf6gL287vtqR/Q2
-TkiriIqmZpiEakyoiF/MJpiB/osixMCRcHRyIkgd4bhEcSN0F1m8plEYl0xtUIwK
-xTPMKCrPeASiIHVyKUpGe8dGpfVe7G9TvNettSndIiROt4jilFgE/m0EE43IctB0
-Ku8Yh23Pzm5KCHPDAgMBAAGgADANBgkqhkiG9w0BAQsFAAOBgQCOf7hqhZDVZ4Iw
-wtZQy8AXgeHhRngSCWfIsCJqpm9LRK5FOz/cBuTCrwao5Ifds4ogwCu7wARXdF/B
-cLT9/LhaEV8lvFabF/01o3y4xcO4TOXWzz4YcfbtX1p3SA1xE1WeQJvsbm2CPhRI
-hzgxpLYJJ95ajM60tkmJS41+rlEohw==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 -----END CERTIFICATE REQUEST-----

test/ssl/test-alt-ca.key

 -----BEGIN RSA PRIVATE KEY-----
-MIICXQIBAAKBgQC9i5Ltata3c4jn+oC9vO77akf0Nk5Iq4iKpmaYhGpMqIhfzCaY
-gf6LIsTAkXB0ciJIHeG4RHEjdBdZvKZRGJdMbVCMCsUzzCgqz3gEoiB1cilKRnvH
-RqX1XuxvU7zXrbUp3SIkTreI4pRYBP5tBBONyHLQdCrvGIdtz85uSghzwwIDAQAB
-AoGBAI4z+LdGQHDBrSTdO1keNe1Jf1Ioq/K5PmdHEBG8xkNc7XNxpkMkw+N+4j3W
-35d9SVrxkDa+omMG5b3dWqnc2SSf/kXIkkdK0EY8DDnfrHMJSdByeQEOLJUcr4TI
-R76PdddyGxrSe7x5IV2q+AAkqeIhgUCPALbW2jpxc7/VJ+gBAkEA/JMO8TS0sawM
-IQ3iuh/sxUSsfRrTwL+QehPopomONvMYOoDOR+mE8yo2iqY9rk6Q5TBFcxz2kvqr
-RaG7tP2HQQJBAMAdrWG/u1lXdawRtrZm5zKy/5uC1qlmldRpDgIw1eFzTv2WWwma
-XvasaDlWC102/6ktigDMS4ngTy7hYc/mXgMCQE0RHiURPPVdltHbJ8w9A4TpwGvn
-7KbKjO4C9yEhpcg0grcPKGIe6dc8kSnbMcTm6iVUhkxqkP4mCG6Vu+2s0kECQD4V
-mSFcr7PIkst/kfdSO+bjd70OxEZMU6EoLhHBLG1GMUG8JEFvNL8sqiXVS6jdDDPk
-9pMZclPlPFGfHlfsT3cCQQCbhnQwKusj7swD0Ca1I0Df2U+WKgiMOBrCbbl7dwmP
-tIdTr7/fy3mF3m2l2GY7PD/VXWH2dFcKWe4wa6b7cRB9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 -----END RSA PRIVATE KEY-----

test/ssl/test-bad-root-ca.crt

 -----BEGIN CERTIFICATE-----
-MIICvDCCAiWgAwIBAgIJAIYNkcQqtmgUMA0GCSqGSIb3DQEBCwUAMHYxCzAJBgNV
-BAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYDVQQHDAVEZXJieTEaMBgG
-A1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNVBAsMB1Rlc3RpbmcxFDASBgNV
-BAMMC0JhZCBSb290IENBMCAXDTE4MDMwMTE4NTMzNloYDzIxMDAwNDIwMTg1MzM2
-WjB2MQswCQYDVQQGEwJHQjETMBEGA1UECAwKRGVyYnlzaGlyZTEOMAwGA1UEBwwF
-RGVyYnkxGjAYBgNVBAoMEU1vc3F1aXR0byBQcm9qZWN0MRAwDgYDVQQLDAdUZXN0
-aW5nMRQwEgYDVQQDDAtCYWQgUm9vdCBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAqB3XEqOnZtKrVGgfHacwnruZtLKOsIdsL8ohLHIZfO/h+AZwbkTfrDry
-9MtpQRGSuGWPccaV6dAr+TTLqqJN0WidwB2Qu+29HLm6kJRycpJiXQSUlZdJMaxO
-WfX9s2TUKZtIYMX53SnD1050185JrotGW6rjsFZpItpn9j5EitECAwEAAaNQME4w
-HQYDVR0OBBYEFK1okpAhv8xOcMbCGv5TA6669bpzMB8GA1UdIwQYMBaAFK1okpAh
-v8xOcMbCGv5TA6669bpzMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADgYEA
-WlQr7YtNie0ckbw/QOKU+lEtLezX0SkrYtZB1xbNCvMbFpFs93Id3yQkGRG673s4
-XpMK+uJxkdzaZR6EQtAg/3qLxpJSeHeZ5haywg0CpxQFXsKKczsspz86h9bF/uct
-qX+p/Jnfx9WxDG5TYLpmE3wJKJ5ZLP3z84XjZyIQDoU=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 -----END CERTIFICATE-----

test/ssl/test-bad-root-ca.key

 -----BEGIN RSA PRIVATE KEY-----
-MIICWwIBAAKBgQCoHdcSo6dm0qtUaB8dpzCeu5m0so6wh2wvyiEschl87+H4BnBu
-RN+sOvL0y2lBEZK4ZY9xxpXp0Cv5NMuqok3RaJ3AHZC77b0cubqQlHJykmJdBJSV
-l0kxrE5Z9f2zZNQpm0hgxfndKcPXTnTXzkmui0ZbquOwVmki2mf2PkSK0QIDAQAB
-AoGAGUEqTuWAv0SEclCV5Al6l03NQETWhJRDX0Z5B0k4pPkQNAcbmqUECMZuOvHX
-pOuz47l1+/x+Brq78FrLAZ4SHFXA6FhiH9XGMn+qX6+DnMoy/8yoLYLn/T/dB7or
-jp0JWex9DgvI4V8WhbF+6otlVxC140SicsPuwtGoisS5fbECQQDXNGxNsU7qofOe
-EfP2MLeQ73At/ZbgFCB2qEb7DiSzCxCheDNDi1Jxzwvg16We9xBQ9+tTTuoX5W7f
-FAIKVdbtAkEAx/xLRoMv9alj4OUjQ893FzFlwuf2zvywRidElr0XUzafmQfIzcph
-bTNCeDvC9jJwuJq7ejLWJe2KuuIMqjAC9QJARAuNWxt/Km0+zHI8w1EwGaG7xK70
-L7HteddHakZUkFAlWAjbnLXGwbmHtfY5pgPUouVhARxopFmlLt/yrTXrGQJAUk+X
-M/h+3t/PShtFfn1/iL4+IhCTVvJOIzG6W0iMtyU+XyADGCB6JRX5/76pKefs2S5m
-h48w8P9qIC02BT4pmQJAdrG3UOC4UT69WYsDDbKRU/6R6fMd4FS081T/KCwnUgLc
-/2mSl6TJNnxuiRYjpsgcP+2LZzuzhW26rZiCx6QJHw==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 -----END RSA PRIVATE KEY-----

test/ssl/test-fake-root-ca.crt

 -----BEGIN CERTIFICATE-----
-MIICtDCCAh2gAwIBAgIJAOKVfgVed/sFMA0GCSqGSIb3DQEBCwUAMHIxCzAJBgNV
-BAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYDVQQHDAVEZXJieTEaMBgG
-A1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNVBAsMB1Rlc3RpbmcxEDAOBgNV
-BAMMB1Jvb3QgQ0EwIBcNMTgwMzAxMTg1MzM2WhgPMjEwMDA0MjAxODUzMzZaMHIx
-CzAJBgNVBAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYDVQQHDAVEZXJi
-eTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNVBAsMB1Rlc3Rpbmcx
-EDAOBgNVBAMMB1Jvb3QgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAPRh
-wQ5WorDeUQv4jMGwpZRO/neV7g8+6Syrvmh25TtjRLr0hXiqX13F5NU5szZgLnwq
-IGYoj/UunirquStjWqkypaoP4hNmv0BuAD96ySZbu86u1BsnY+N4Am9awIUoEyjW
-qdyp7SRxWkIhpXcFdX2NtuN1mWoYeCvUy7orSVXtAgMBAAGjUDBOMB0GA1UdDgQW
-BBScKh34/EmyZHmLM5MwG60sHT3BCjAfBgNVHSMEGDAWgBScKh34/EmyZHmLM5Mw
-G60sHT3BCjAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4GBAFKGwkW7wCH4
-cM5Pt3P0TMmqV3qM5t+IfsWciK35crFwuy6/7GjCm+ptum+J4J10NfvJHtQxLjBi
-uoR7vCh0X9BAMqFZfFyfdNko6Kc9ggL3voduSORMYq4PDCUuawxN8gXvIr90aGbb
-zaYxDxaxBc0u54YJAFM3tuB0E86r03Ct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 -----END CERTIFICATE-----

test/ssl/test-fake-root-ca.key

 -----BEGIN RSA PRIVATE KEY-----
-MIICXAIBAAKBgQD0YcEOVqKw3lEL+IzBsKWUTv53le4PPuksq75oduU7Y0S69IV4
-ql9dxeTVObM2YC58KiBmKI/1Lp4q6rkrY1qpMqWqD+ITZr9AbgA/eskmW7vOrtQb
-J2PjeAJvWsCFKBMo1qncqe0kcVpCIaV3BXV9jbbjdZlqGHgr1Mu6K0lV7QIDAQAB
-AoGALsxBcgN5KDGKh6ZTHgw7yQjPhgr6CYVcladV0R9jilnaIYsNvCu0E3r/9S0V
-eoY0oKZYifeeia8hrspAJ2ThSUGQ1+tDk62ATxRNg2HB4+4C7dEs/ubYa4O8NC9h
-Dati+z1jsqE+D8x/weiChjkdnpO2XziuoQQI6qPvCcs5zAECQQD+DCgk32KM4P7y
-I8OoV14g15qLNcZwVd74ItHti2QmKlGsYwem+xXi6u4PujLU+qh+NgUSZhpgzIqI
-bf38GNJtAkEA9kKUenZfEn6TT0yPF9BbBNvidjcneYGWbTG9lT6nbIoEEyqkHiSV
-NxkTXF1HTBo7T53bLxCuWj9CjP6vH7xhgQJAMc7OXBRT7Qz7zxuF885VTRkYWqzL
-YCDl2z5wbCNFGlp3stWjnXBi5R9sVzcJWkpemIgczHOqPko76u2tuyxerQJBAOeT
-Uscam2rr5qEysHlHcOBP2lUqpo9nokrK9KntQkoaO5y+g5jo8/zdMsyv1wUkwdOr
-8VsAB8VMKcwnEA36+4ECQCUL6et8GrAuO2dlR3wV8cEU/dxo0LOzfzA9g6X/Ey09
-f2hq7sL85Ni3FmA9OutYVxTv6FAB52RCcj1qIoQyot8=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 -----END RSA PRIVATE KEY-----

test/ssl/test-root-ca.crt

 -----BEGIN CERTIFICATE-----
-MIICtDCCAh2gAwIBAgIJAObVjC0tPL4iMA0GCSqGSIb3DQEBCwUAMHIxCzAJBgNV
-BAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYDVQQHDAVEZXJieTEaMBgG
-A1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNVBAsMB1Rlc3RpbmcxEDAOBgNV
-BAMMB1Jvb3QgQ0EwIBcNMTgwMzAxMTg1MzM2WhgPMjEwMDA0MjAxODUzMzZaMHIx
-CzAJBgNVBAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYDVQQHDAVEZXJi
-eTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNVBAsMB1Rlc3Rpbmcx
-EDAOBgNVBAMMB1Jvb3QgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANSZ
-3aRYdHcnta24XXJGfomsg2OpYys3KkqK76aWEwhqRvdH2m54yBvHTZ2LsMLQro0q
-r4oGLyvlupC9fxwQF4ZDFHrn7VbxU947V+cipGkRaECXiGVO1ngUSpKti8nrIUkn
-FXkLmVaGuVv1jVOGBi6/6f3ct6LsNyFqXzaSw9DtAgMBAAGjUDBOMB0GA1UdDgQW
-BBQctE6LhA0eD8TM9BeH28ryVfE0OTAfBgNVHSMEGDAWgBQctE6LhA0eD8TM9BeH
-28ryVfE0OTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4GBAHVShEeqQRjP
-IoMU8MFnnC1ZadADvSn1E6gRR7eoNU0MeMpTYmTA+TIklEzhaRHSkQqyPHAe/YMl
-WLmq1NqyxPv9uKekVlatJxYbm1ME4e+wGs3U9OGsIKX0nFcBO8iqpj5s7GZmSYyY
-u1YJnq1oe0C5IblVB9amcoB743/YyMme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 -----END CERTIFICATE-----

test/ssl/test-root-ca.key

 -----BEGIN RSA PRIVATE KEY-----
-MIICXQIBAAKBgQDUmd2kWHR3J7WtuF1yRn6JrINjqWMrNypKiu+mlhMIakb3R9pu
-eMgbx02di7DC0K6NKq+KBi8r5bqQvX8cEBeGQxR65+1W8VPeO1fnIqRpEWhAl4hl
-TtZ4FEqSrYvJ6yFJJxV5C5lWhrlb9Y1ThgYuv+n93Lei7Dchal82ksPQ7QIDAQAB
-AoGANQkxVpdObo80bmLoxOI7HOMxX8JY3+YCIdhpEnirxNSmYXfGUPrGiM9+WEgJ
-z3+5m7PDWL5UNDI6CXOMaxbElyBKpMa6fnyexVvw1OOGWWl0Qi5GjOrmKl4ETVmv
-gTr37U4syzvAhDFdDz7YFwsjo59NZM+sXluGAc3/QOlLRg0CQQD0xquDOn0pj6kX
-VYQ1rZv7D3O7JFVlZuzZ/JKnGZ581z+O48YnRIki0+oQjKa/lEJ7f+GQ4yU4eEh4
-sAXiil6rAkEA3lmBhJ86MAgyZ6qfnLn4EqQXfxIaUVQHHVN5jPRO79A95GL4NA1m
-kCSiA7QfXDEVw1d1pGw4jlzyF2uYFpSuxwJBAJl5yCisD7ZzgU5ELHWLuXWdpq78
-hR7jfjbgCwQDKECWph9t6dzNOD9CKEzgI92TlGvjLwetpLTXlnk1xTraD6kCQCGj
-kve4izoXE2EhrDIu5HwVfUSJPZgOSWFDbsFHeOXJMIPsATcGy/yEvkonJxNwjaVX
-BwJQKSJIp4upiIHqDqMCQQDAPOg7FniJE+3ZA7IC1YEYTb2rCyOQe6HykDRo3zGa
-NEfQBes9GC74NqLNYK9cV2ajHcyg7oHnupt79iFgifin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 -----END RSA PRIVATE KEY-----

test/ssl/test-signing-ca.crt

@@ -2,57 +2,78 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
-    Signature Algorithm: sha256WithRSAEncryption
-        Issuer: C=GB, ST=Derbyshire, L=Derby, O=Mosquitto Project, OU=Testing, CN=Root CA
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=GB, ST=Wiltshire, L=Salisbury, O=Paho Project, OU=Testing, CN=Root CA
         Validity
-            Not Before: Mar  1 18:53:36 2018 GMT
-            Not After : Feb 28 18:53:36 2023 GMT
-        Subject: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
+            Not Before: Apr 13 13:22:31 2023 GMT
+            Not After : Apr 11 13:22:31 2028 GMT
+        Subject: C=GB, ST=Wiltshire, O=Paho Project, OU=Testing, CN=Signing CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:af:ad:b0:e4:78:b8:73:01:6a:9e:78:1e:bf:36:
-                    5b:60:dc:ee:28:ce:16:3c:73:30:b3:02:cd:5c:07:
-                    a2:36:ee:a1:c5:43:32:0c:46:57:cb:fb:1c:52:db:
-                    4e:65:85:8a:5d:a6:cd:66:43:ad:bc:70:1b:e6:b0:
-                    11:0f:d8:54:1f:57:9e:29:4e:2b:1b:c5:70:b2:3d:
-                    38:a7:63:3f:1a:06:2f:6d:09:2c:7c:90:60:db:8c:
-                    3a:11:20:a7:db:20:25:d9:c6:97:74:50:5a:e0:fd:
-                    81:aa:de:ea:1d:e5:be:61:59:0d:76:e5:ab:7f:3b:
-                    b2:a6:38:b9:bb:32:aa:72:ef
+                    00:e6:ce:0e:a2:6a:56:1c:35:8c:7a:af:31:43:7d:
+                    28:cb:61:15:81:2d:37:ff:f1:8f:7d:78:c3:37:58:
+                    8f:6a:4c:00:b6:9d:04:f3:1c:cd:fb:ca:7d:c0:dc:
+                    2b:3b:e4:c1:00:0c:71:83:df:cf:12:6f:98:ea:19:
+                    01:0b:87:5f:df:a7:58:76:9c:56:b9:f2:1d:d8:9f:
+                    24:89:eb:af:7f:fe:47:5a:a8:b3:79:c2:46:be:38:
+                    bf:77:03:61:b7:de:d0:ae:37:8b:ad:0d:02:5c:c3:
+                    e2:3a:17:e7:fc:86:9e:cd:ff:87:21:4a:c9:f5:c2:
+                    3d:bf:c9:14:1e:19:d9:89:19:e9:d9:b2:c8:a9:e9:
+                    d2:9b:ae:73:f2:b7:e7:fc:3d:9b:c3:72:b6:be:10:
+                    fc:0c:c2:eb:b7:8f:4a:67:4c:1b:43:ca:4e:58:df:
+                    cc:74:c6:6b:95:de:09:ae:ef:60:62:81:82:74:de:
+                    b8:48:24:3e:0a:ac:75:72:fa:f8:5d:f2:72:7a:bd:
+                    04:13:d2:c8:90:a3:ad:08:39:74:22:3f:10:7b:88:
+                    37:b8:77:2b:4a:34:1a:fa:4a:64:82:b4:fe:de:6c:
+                    b5:a5:4c:70:6b:7e:ab:b4:2f:57:80:f0:0c:49:1b:
+                    f1:32:1f:46:2f:12:af:e7:96:be:b1:09:df:b9:6a:
+                    88:bf
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                9E:54:3E:E5:2F:E5:EA:40:4A:FC:37:96:6C:45:BB:1A:79:0E:CA:AB
+                E1:BE:F5:5F:36:50:CF:FE:3D:42:EE:80:33:22:46:C2:3D:2A:41:41
             X509v3 Authority Key Identifier: 
-                keyid:1C:B4:4E:8B:84:0D:1E:0F:C4:CC:F4:17:87:DB:CA:F2:55:F1:34:39
+                keyid:FE:98:8A:C3:41:B2:71:3A:4A:B3:76:5A:3C:17:06:93:11:99:8E:C8
 
             X509v3 Basic Constraints: 
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         6c:2d:41:ca:7b:89:84:27:ca:b3:64:d5:73:b2:5b:dd:fc:6f:
-         d4:68:ae:f1:30:3e:9e:ca:28:2b:d3:2e:0c:61:3e:d5:9a:fd:
-         67:b1:60:e5:54:9f:a4:95:51:5b:00:2d:f9:46:82:de:49:df:
-         ce:2a:f3:f6:2e:8f:8f:64:2b:c9:2f:ce:ff:d2:53:a0:0a:c4:
-         4a:e9:20:fa:5e:79:45:21:18:c2:d6:c1:64:92:e4:67:3a:92:
-         04:46:5e:6a:39:84:c8:f1:0e:42:3c:fd:b2:c2:7b:e9:af:44:
-         2c:19:30:61:01:39:47:6d:38:85:90:4b:e5:04:f4:87:72:46:
-         4a:9a
+         0d:67:f0:6d:9e:7f:ad:7a:fb:81:f7:ed:40:fe:80:69:e3:df:
+         94:ed:94:b7:3f:11:db:02:ba:08:1e:a9:28:95:b5:3f:e5:86:
+         02:6d:33:3c:57:39:be:18:4a:d5:18:0f:e8:59:5b:40:38:b2:
+         9d:71:18:4c:b1:e6:d9:51:2d:a0:7b:af:35:b4:d9:f3:d8:f5:
+         09:b9:e5:e9:81:38:b0:a6:89:57:51:76:71:7d:91:bb:db:10:
+         2b:25:ce:2d:59:5a:cd:29:a2:19:a6:a0:56:19:d7:38:f4:cb:
+         94:43:90:ff:20:ce:af:37:c7:73:34:ef:fb:cb:e1:f2:1f:68:
+         42:91:9d:33:3f:a1:7a:cb:80:5f:f2:52:81:f1:15:fa:79:01:
+         1a:29:c4:36:41:26:75:5c:4b:ff:be:67:12:d8:d2:72:03:5a:
+         3e:2e:aa:b3:10:b5:10:37:2b:eb:f7:59:3a:66:87:f4:ca:e4:
+         d4:35:6f:78:aa:26:de:ac:02:65:91:d2:fa:80:db:b9:8b:a6:
+         26:bb:46:8f:21:e8:18:84:a6:b5:17:fb:e2:de:d8:b3:39:b2:
+         6a:42:28:e9:05:55:e6:0b:39:32:42:28:a2:72:51:7c:46:96:
+         e2:c2:7f:b3:a5:b9:af:3b:04:3a:93:ba:9c:2c:0a:28:39:fc:
+         8b:12:7d:b7
 -----BEGIN CERTIFICATE-----
-MIICnTCCAgagAwIBAgIBATANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJHQjET
-MBEGA1UECAwKRGVyYnlzaGlyZTEOMAwGA1UEBwwFRGVyYnkxGjAYBgNVBAoMEU1v
-c3F1aXR0byBQcm9qZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRAwDgYDVQQDDAdSb290
-IENBMB4XDTE4MDMwMTE4NTMzNloXDTIzMDIyODE4NTMzNlowZTELMAkGA1UEBhMC
-R0IxEzARBgNVBAgMCkRlcmJ5c2hpcmUxGjAYBgNVBAoMEU1vc3F1aXR0byBQcm9q
-ZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRMwEQYDVQQDDApTaWduaW5nIENBMIGfMA0G
-CSqGSIb3DQEBAQUAA4GNADCBiQKBgQCvrbDkeLhzAWqeeB6/Nltg3O4ozhY8czCz
-As1cB6I27qHFQzIMRlfL+xxS205lhYpdps1mQ628cBvmsBEP2FQfV54pTisbxXCy
-PTinYz8aBi9tCSx8kGDbjDoRIKfbICXZxpd0UFrg/YGq3uod5b5hWQ125at/O7Km
-OLm7Mqpy7wIDAQABo1AwTjAdBgNVHQ4EFgQUnlQ+5S/l6kBK/DeWbEW7GnkOyqsw
-HwYDVR0jBBgwFoAUHLROi4QNHg/EzPQXh9vK8lXxNDkwDAYDVR0TBAUwAwEB/zAN
-BgkqhkiG9w0BAQsFAAOBgQBsLUHKe4mEJ8qzZNVzslvd/G/UaK7xMD6eyigr0y4M
-YT7Vmv1nsWDlVJ+klVFbAC35RoLeSd/OKvP2Lo+PZCvJL87/0lOgCsRK6SD6XnlF
-IRjC1sFkkuRnOpIERl5qOYTI8Q5CPP2ywnvpr0QsGTBhATlHbTiFkEvlBPSHckZK
-mg==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 -----END CERTIFICATE-----

test/ssl/test-signing-ca.csr

 -----BEGIN CERTIFICATE REQUEST-----
-MIIBtTCCAR4CAQAwdTELMAkGA1UEBhMCR0IxEzARBgNVBAgMCkRlcmJ5c2hpcmUx
-DjAMBgNVBAcMBURlcmJ5MRowGAYDVQQKDBFNb3NxdWl0dG8gUHJvamVjdDEQMA4G
-A1UECwwHVGVzdGluZzETMBEGA1UEAwwKU2lnbmluZyBDQTCBnzANBgkqhkiG9w0B
-AQEFAAOBjQAwgYkCgYEAr62w5Hi4cwFqnngevzZbYNzuKM4WPHMwswLNXAeiNu6h
-xUMyDEZXy/scUttOZYWKXabNZkOtvHAb5rARD9hUH1eeKU4rG8Vwsj04p2M/GgYv
-bQksfJBg24w6ESCn2yAl2caXdFBa4P2Bqt7qHeW+YVkNduWrfzuypji5uzKqcu8C
-AwEAAaAAMA0GCSqGSIb3DQEBCwUAA4GBAKKZrxWCi6ydSuEw5xmt63XajvrmD6IE
-GvhJ8xbuGtV3wjVbzvZS3Ti6z/cmIw1pAzSTtSaaT8u013dO4+qf1ViGlZVr5+UN
-OK22B5PelCMium324HIJQnA5Q9UtbhCDuK7C77JlWpiqac7DyJBDMNAVFN7JnfDl
-h42vtity4W0i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 -----END CERTIFICATE REQUEST-----

test/ssl/test-signing-ca.key

 -----BEGIN RSA PRIVATE KEY-----
-MIICXAIBAAKBgQCvrbDkeLhzAWqeeB6/Nltg3O4ozhY8czCzAs1cB6I27qHFQzIM
-RlfL+xxS205lhYpdps1mQ628cBvmsBEP2FQfV54pTisbxXCyPTinYz8aBi9tCSx8
-kGDbjDoRIKfbICXZxpd0UFrg/YGq3uod5b5hWQ125at/O7KmOLm7Mqpy7wIDAQAB
-AoGAMoVxzJKHANPUdJQ4y2Z3aui+OM/jhyjdRW213xR26vM/ZHpJh0wnbYref1mA
-NyPrQbl5ckJeUUWwUGwry/G7ZvnEtyOdKB0GA2hSMa1C4jSRZK2pN1eYhJMNKY8F
-gdQY5rhEzLx2+oIZ0R3LjSSISQ2PYUsjg1hNH8qoq/leUtECQQDjnd253yHiX7tT
-xP+KMffXB6d5wF58nCVw3nwswC9kjtCA9IPmHyQuzTCgsFjwqwN3aABCsoqCPgKA
-qjIUyMdJAkEAxZXRoEXlBVydxnsV6zfDsbwb6DPiMSn/eY9TNU54ML9hYg8L8bpw
-0pzMnbSdjT2rhjn4E39JL7sGlFgyR5dQdwJAdPeVD4U4lmn3i866Orv+zoNibtCK
-PaLIIr5SNXT1Zcl2IC6G8WSjZWGQUaMNsW9QMrZBHAU/5DoVcyUC42dh8QJAJ+kp
-XMyBhGG+5Pa76LVs7BvpLzA7wl6PYkiXMC9Xi9E8pIgRi5RzcbeGhVyUbpFEcmqH
-N7kAWYnXvGNMVLW15QJBAKvlGhRxugM5E8qVRCf+0Pl/Dcet0JOHlG9taKY32rWN
-VDqpBBu2dzU+7pdFtARDxPqjJ7twfyTlhVAqEGk/s7U=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 -----END RSA PRIVATE KEY-----