pax_global_header00006660000000000000000000000064152416434530014521gustar00rootroot0000000000000052 comment=0e93b0d850be4b88277ae7b561e3f61a2d5b3bec osg-certificates-26232.0e93b0d/000077500000000000000000000000001524164345300160415ustar00rootroot00000000000000osg-certificates-26232.0e93b0d/.gitignore000066400000000000000000000001461524164345300200320ustar00rootroot00000000000000# Ignore generated symlinks *.0 *.signing_policy !isrg*.signing_policy !lets-encrypt-*.signing_policy osg-certificates-26232.0e93b0d/LICENSE000066400000000000000000000261351524164345300170550ustar00rootroot00000000000000 Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document. "Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License. "Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity. "You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License. "Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files. "Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types. "Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below). "Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof. "Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution." "Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work. 2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form. 3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed. 4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions: (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and (b) You must cause any modified files to carry prominent notices stating that You changed the files; and (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License. You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License. 5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions. 6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file. 7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License. 8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages. 9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability. END OF TERMS AND CONDITIONS APPENDIX: How to apply the Apache License to your work. To apply the Apache License to your work, attach the following boilerplate notice, with the fields enclosed by brackets "{}" replaced with your own identifying information. (Don't include the brackets!) The text should be enclosed in the appropriate comment syntax for the file format. We also recommend that a file or class name and description of purpose be included on the same "printed page" as the copyright notice for easier identification within third-party archives. Copyright {yyyy} {name of copyright owner} Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. osg-certificates-26232.0e93b0d/Makefile000066400000000000000000000227641524164345300175140ustar00rootroot00000000000000sources = isrgrootx1.signing_policy \ isrg-root-x2.signing_policy \ lets-encrypt-e5.signing_policy \ lets-encrypt-e6.signing_policy \ lets-encrypt-r10.signing_policy \ lets-encrypt-r11.signing_policy \ lets-encrypt-e7.signing_policy \ lets-encrypt-e8.signing_policy \ lets-encrypt-e9.signing_policy \ lets-encrypt-r12.signing_policy \ lets-encrypt-r13.signing_policy \ lets-encrypt-r14.signing_policy \ isrg-root-ye.signing_policy \ isrg-root-yr.signing_policy \ lets-encrypt-ye1.signing_policy \ lets-encrypt-ye2.signing_policy \ lets-encrypt-ye3.signing_policy \ lets-encrypt-yr1.signing_policy \ lets-encrypt-yr2.signing_policy \ lets-encrypt-yr3.signing_policy targets = 4042bcee.signing_policy \ 6187b673.signing_policy \ 0b9bc432.signing_policy 8794b4e3.signing_policy \ 462422cf.signing_policy bae39ced.signing_policy \ 9aad238c.signing_policy f7679d31.signing_policy \ aa578057.signing_policy 09e5bea5.signing_policy \ 31dfb39d.signing_policy 4cdd6f92.signing_policy \ 67561239.signing_policy 9f308661.signing_policy \ 507754fb.signing_policy 3e7e99ec.signing_policy \ d0a3aef2.signing_policy 35b815f3.signing_policy \ aa76c4ab.signing_policy 93120419.signing_policy \ 4260b799.signing_policy 27794265.signing_policy \ 137e9a94.signing_policy 36f5bce7.signing_policy \ 51e2f20f.signing_policy 8ed85ee6.signing_policy \ 558fe057.signing_policy 05e55783.signing_policy \ a075c285.signing_policy 1a416bbd.signing_policy \ 6b1d43b5.signing_policy 727e8638.signing_policy \ 01212e5d.signing_policy efd1bceb.signing_policy \ a363cdd3.signing_policy 2f8a4f35.signing_policy \ cde2be7c.signing_policy 74303716.signing_policy \ 66297767.signing_policy c1af242b.signing_policy \ 4042bcee.0 \ 6187b673.0 \ 0b9bc432.0 8794b4e3.0 \ 462422cf.0 bae39ced.0 \ 9aad238c.0 f7679d31.0 \ aa578057.0 09e5bea5.0 \ 31dfb39d.0 4cdd6f92.0 \ 67561239.0 9f308661.0 \ 507754fb.0 3e7e99ec.0 \ d0a3aef2.0 35b815f3.0 \ aa76c4ab.0 93120419.0 \ 4260b799.0 27794265.0 \ 137e9a94.0 36f5bce7.0 \ 51e2f20f.0 8ed85ee6.0 \ 558fe057.0 05e55783.0 \ a075c285.0 1a416bbd.0 \ 6b1d43b5.0 727e8638.0 \ 01212e5d.0 efd1bceb.0 \ a363cdd3.0 2f8a4f35.0 \ cde2be7c.0 74303716.0 \ 66297767.0 c1af242b.0 \ pems = \ isrgrootx1.pem \ isrg-root-x2.pem \ lets-encrypt-e5.pem \ lets-encrypt-e6.pem \ lets-encrypt-r10.pem \ lets-encrypt-r11.pem \ lets-encrypt-e7.pem \ lets-encrypt-e8.pem \ lets-encrypt-e9.pem \ lets-encrypt-r12.pem \ lets-encrypt-r13.pem \ lets-encrypt-r14.pem \ isrg-root-ye.pem \ isrg-root-yr.pem \ lets-encrypt-ye1.pem \ lets-encrypt-ye2.pem \ lets-encrypt-ye3.pem \ lets-encrypt-yr1.pem \ lets-encrypt-yr2.pem \ lets-encrypt-yr3.pem installfiles = $(pems) $(targets) $(sources) installdir = /etc/grid-security/certificates GET = curl -O GET_WITH_NAME = curl -o INSTALL = install LINK = ln -s all : $(pems) $(targets) install : all $(INSTALL) $(installfiles) $(DESTDIR)$(installdir) clean : $(RM) $(targets) *.pem check : all openssl verify -CApath . isrgrootx1.pem openssl verify -CApath . isrg-root-x2.pem openssl verify -CApath . lets-encrypt-e5.pem openssl verify -CApath . lets-encrypt-e6.pem openssl verify -CApath . lets-encrypt-r10.pem openssl verify -CApath . lets-encrypt-r11.pem openssl verify -CApath . lets-encrypt-e7.pem openssl verify -CApath . lets-encrypt-e8.pem openssl verify -CApath . lets-encrypt-e9.pem openssl verify -CApath . lets-encrypt-r12.pem openssl verify -CApath . lets-encrypt-r13.pem openssl verify -CApath . lets-encrypt-r14.pem openssl verify -CApath . isrg-root-ye.pem openssl verify -CApath . isrg-root-yr.pem openssl verify -CApath . lets-encrypt-ye1.pem openssl verify -CApath . lets-encrypt-ye2.pem openssl verify -CApath . lets-encrypt-ye3.pem openssl verify -CApath . lets-encrypt-yr1.pem openssl verify -CApath . lets-encrypt-yr2.pem openssl verify -CApath . lets-encrypt-yr3.pem pems : $(pems) # make special variables: $< is the first prereq; $@ is the target 4042bcee.signing_policy 6187b673.signing_policy : isrgrootx1.signing_policy $(LINK) $< $@ 0b9bc432.signing_policy 8794b4e3.signing_policy : isrg-root-x2.signing_policy $(LINK) $< $@ 462422cf.signing_policy bae39ced.signing_policy : lets-encrypt-e5.signing_policy $(LINK) $< $@ 9aad238c.signing_policy f7679d31.signing_policy : lets-encrypt-e6.signing_policy $(LINK) $< $@ aa578057.signing_policy 09e5bea5.signing_policy : lets-encrypt-r10.signing_policy $(LINK) $< $@ 31dfb39d.signing_policy 4cdd6f92.signing_policy : lets-encrypt-r11.signing_policy $(LINK) $< $@ 67561239.signing_policy 9f308661.signing_policy : lets-encrypt-e7.signing_policy $(LINK) $< $@ 507754fb.signing_policy 3e7e99ec.signing_policy : lets-encrypt-e8.signing_policy $(LINK) $< $@ d0a3aef2.signing_policy 35b815f3.signing_policy : lets-encrypt-e9.signing_policy $(LINK) $< $@ aa76c4ab.signing_policy 93120419.signing_policy : lets-encrypt-r12.signing_policy $(LINK) $< $@ 4260b799.signing_policy 27794265.signing_policy : lets-encrypt-r13.signing_policy $(LINK) $< $@ 137e9a94.signing_policy 36f5bce7.signing_policy : lets-encrypt-r14.signing_policy $(LINK) $< $@ 51e2f20f.signing_policy 8ed85ee6.signing_policy : isrg-root-ye.signing_policy $(LINK) $< $@ 558fe057.signing_policy 05e55783.signing_policy : isrg-root-yr.signing_policy $(LINK) $< $@ a075c285.signing_policy 1a416bbd.signing_policy : lets-encrypt-ye1.signing_policy $(LINK) $< $@ 6b1d43b5.signing_policy 727e8638.signing_policy : lets-encrypt-ye2.signing_policy $(LINK) $< $@ 01212e5d.signing_policy efd1bceb.signing_policy : lets-encrypt-ye3.signing_policy $(LINK) $< $@ a363cdd3.signing_policy 2f8a4f35.signing_policy : lets-encrypt-yr1.signing_policy $(LINK) $< $@ cde2be7c.signing_policy 74303716.signing_policy : lets-encrypt-yr2.signing_policy $(LINK) $< $@ 66297767.signing_policy c1af242b.signing_policy : lets-encrypt-yr3.signing_policy $(LINK) $< $@ 4042bcee.0 6187b673.0 : isrgrootx1.pem $(LINK) $< $@ 0b9bc432.0 8794b4e3.0 : isrg-root-x2.pem $(LINK) $< $@ 462422cf.0 bae39ced.0 : lets-encrypt-e5.pem $(LINK) $< $@ 9aad238c.0 f7679d31.0 : lets-encrypt-e6.pem $(LINK) $< $@ aa578057.0 09e5bea5.0 : lets-encrypt-r10.pem $(LINK) $< $@ 31dfb39d.0 4cdd6f92.0 : lets-encrypt-r11.pem $(LINK) $< $@ 67561239.0 9f308661.0 : lets-encrypt-e7.pem $(LINK) $< $@ 507754fb.0 3e7e99ec.0 : lets-encrypt-e8.pem $(LINK) $< $@ d0a3aef2.0 35b815f3.0 : lets-encrypt-e9.pem $(LINK) $< $@ aa76c4ab.0 93120419.0 : lets-encrypt-r12.pem $(LINK) $< $@ 4260b799.0 27794265.0 : lets-encrypt-r13.pem $(LINK) $< $@ 137e9a94.0 36f5bce7.0 : lets-encrypt-r14.pem $(LINK) $< $@ 51e2f20f.0 8ed85ee6.0 : isrg-root-ye.pem $(LINK) $< $@ 558fe057.0 05e55783.0 : isrg-root-yr.pem $(LINK) $< $@ a075c285.0 1a416bbd.0 : lets-encrypt-ye1.pem $(LINK) $< $@ 6b1d43b5.0 727e8638.0 : lets-encrypt-ye2.pem $(LINK) $< $@ 01212e5d.0 efd1bceb.0 : lets-encrypt-ye3.pem $(LINK) $< $@ a363cdd3.0 2f8a4f35.0 : lets-encrypt-yr1.pem $(LINK) $< $@ cde2be7c.0 74303716.0 : lets-encrypt-yr2.pem $(LINK) $< $@ 66297767.0 c1af242b.0 : lets-encrypt-yr3.pem $(LINK) $< $@ # Look for the `pem` links on < https://letsencrypt.org/certificates/ >. # Download the "self-signed" root CAs, not the cross-signed ones. # Include the ones marked "backup". isrgrootx1.pem : $(GET) https://letsencrypt.org/certs/isrgrootx1.pem isrg-root-x2.pem : $(GET) https://letsencrypt.org/certs/isrg-root-x2.pem lets-encrypt-e5.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/2024/e5.pem lets-encrypt-e6.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/2024/e6.pem lets-encrypt-r10.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/2024/r10.pem lets-encrypt-r11.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/2024/r11.pem lets-encrypt-e7.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/2024/e7.pem lets-encrypt-e8.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/2024/e8.pem lets-encrypt-e9.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/2024/e9.pem lets-encrypt-r12.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/2024/r12.pem lets-encrypt-r13.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/2024/r13.pem lets-encrypt-r14.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/2024/r14.pem isrg-root-ye.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/gen-y/root-ye.pem isrg-root-yr.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/gen-y/root-yr.pem lets-encrypt-ye1.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/gen-y/int-ye1.pem lets-encrypt-ye2.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/gen-y/int-ye2.pem lets-encrypt-ye3.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/gen-y/int-ye3.pem lets-encrypt-yr1.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/gen-y/int-yr1.pem lets-encrypt-yr2.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/gen-y/int-yr2.pem lets-encrypt-yr3.pem : $(GET_WITH_NAME) $@ https://letsencrypt.org/certs/gen-y/int-yr3.pem osg-certificates-26232.0e93b0d/README.md000066400000000000000000000047341524164345300173300ustar00rootroot00000000000000# letsencrypt-certificates You get user certificates from [CILogon](https://cilogon.org/) but you also need host certificates. You looked over the list of [IGTF](https://igtf.net) CAs but they don't meet your needs. Why not use the [Let's Encrypt CA](https://letsencrypt.org/)? How do you set up `/etc/grid-security`? ## Getting your host certificate Follow the Let's Encrypt [Getting Started](https://letsencrypt.org/getting-started/) guide. For example: ``` git clone https://github.com/letsencrypt/letsencrypt cd letsencrypt/ ./letsencrypt-auto --debug certonly --standalone --email human@example.org -d example.org # cert in /etc/letsencrypt # then before it expires... ./letsencrypt-auto renew ``` ## Setting up /etc/grid-security/host*.pem ``` ln -s /etc/letsencrypt/live/*/cert.pem /etc/grid-security/hostcert.pem ln -s /etc/letsencrypt/live/*/privkey.pem /etc/grid-security/hostkey.pem chmod 0600 /etc/letsencrypt/archive/*/privkey*.pem # ugh! ``` ## Setting up /etc/grid-security/certificates ``` git clone https://github.com/cilogon/letsencrypt-certificates.git cd letsencrypt-certificates/ make check sudo make install ``` ## Caveats Like other Internet CAs and unlike IGTF CAs, Let's Encrypt issues end entity certificates with subject DNs outside a controlled namespace (i.e., `"/CN=*"`), so the signing_policy file is not enforcing a strong namespace restriction. Let's Encrypt does not issue CRLs for end-entity certificates (see the [Certification Practice Statement](https://letsencrypt.org/repository/)). Make sure to have a process in place to renew your certificates (e.g., [Certbot](https://certbot.eff.org/)). ## Troubleshooting ``` # hostname example.org # grid-proxy-init -debug -verify -cert /etc/grid-security/hostcert.pem -key /etc/grid-security/hostkey.pem -hours 1 -out /tmp/hostcerttest User Cert File: /etc/grid-security/hostcert.pem User Key File: /etc/grid-security/hostkey.pem Trusted CA Cert Dir: /etc/grid-security/certificates Output File: /tmp/hostcerttest Your identity: /CN=example.org Creating proxy ......++++++ .....++++++ Done Proxy Verify OK # openssl verify -CApath /etc/grid-security/certificates /etc/grid-security/hostcert.pem /etc/grid-security/hostcert.pem: OK # if [ "`openssl x509 -in /etc/grid-security/hostcert.pem -noout -modulus`" = "`openssl rsa -in /etc/grid-security/hostkey.pem -noout -modulus`" ]; then echo "Match"; else echo "Different"; fi Match # openssl x509 -subject -noout -in /etc/grid-security/hostcert.pem subject= /CN=example.org ``` osg-certificates-26232.0e93b0d/isrg-root-x2.crl_url000066400000000000000000000000261524164345300216770ustar00rootroot00000000000000http://x2.c.lencr.org osg-certificates-26232.0e93b0d/isrg-root-x2.pem000066400000000000000000000014261524164345300210230ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIICGzCCAaGgAwIBAgIQQdKd0XLq7qeAwSxs6S+HUjAKBggqhkjOPQQDAzBPMQsw CQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2gg R3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMjAeFw0yMDA5MDQwMDAwMDBaFw00 MDA5MTcxNjAwMDBaME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5ldCBT ZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgyMHYw EAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0HttwW +1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7AlF9 ItgKbppbd9/w+kHsOdx1ymgHDB/qo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0T AQH/BAUwAwEB/zAdBgNVHQ4EFgQUfEKWrt5LSDv6kviejM9ti6lyN5UwCgYIKoZI zj0EAwMDaAAwZQIwe3lORlCEwkSHRhtFcP9Ymd70/aTSVaYgLXTWNLxBo1BfASdW tL4ndQavEi51mI38AjEAi/V3bNTIZargCyzuFJ0nN6T5U6VR5CmD1/iQMVtCnwr1 /q4AaOeMSQ+2b1tbFfLn -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/isrg-root-x2.signing_policy000066400000000000000000000004771524164345300232640ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Internet Security Research Group/CN=ISRG Root X2' pos_rights globus CA:sign cond_subjects globus '"/C=US/O=Let\'s Encrypt/CN=E5" "/C=US/O=Let\'s Encrypt/CN=E6" "/C=US/O=Let\'s Encrypt/CN=E7" "/C=US/O=Let\'s Encrypt/CN=E8" "/C=US/O=Let\'s Encrypt/CN=E9" "/C=US/O=ISRG/CN=Root YE"' osg-certificates-26232.0e93b0d/isrg-root-ye.crl_url000066400000000000000000000000261524164345300217630ustar00rootroot00000000000000http://ye.c.lencr.org osg-certificates-26232.0e93b0d/isrg-root-ye.pem000066400000000000000000000012741524164345300211100ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIIB2TCCAWCgAwIBAgIRAKQCa6LvbHwg1AR+XmWmk4AwCgYIKoZIzj0EAwMwLjEL MAkGA1UEBhMCVVMxDTALBgNVBAoTBElTUkcxEDAOBgNVBAMTB1Jvb3QgWUUwHhcN MjUwOTAzMDAwMDAwWhcNNDUwOTAyMjM1OTU5WjAuMQswCQYDVQQGEwJVUzENMAsG A1UEChMESVNSRzEQMA4GA1UEAxMHUm9vdCBZRTB2MBAGByqGSM49AgEGBSuBBAAi A2IABDwS/6vhrcVqcbBo+wgdI3fwn9x7DNJJOY/lTOti0vkwuRN87RhEhTH17E7X yFjWsPYhIPt/wzOqxTd2b+4ZJNy9ID04YywF9U5zasDVyGSNErVNtz8uSGh5izW8 7j77GaNCMEAwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0O BBYEFKPIJlqOoUzQNWP8myPIOq5W809WMAoGCCqGSM49BAMDA2cAMGQCMHhMr8N9 LdL1VQKs9BdV81r76eXRB6mtjuNjzk6/lBsPNToWLTDzGYgtQKO1jl63uAIwGV7m onyF377c+MM1oqVNs17sgu7F9YKZwgLmVbeOMDbKAXHtKMDLbiGllCcs8f47 -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/isrg-root-ye.signing_policy000066400000000000000000000003111524164345300233330ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=ISRG/CN=Root YE' pos_rights globus CA:sign cond_subjects globus '"/C=US/O=Let\'s Encrypt/CN=YE1" "/C=US/O=Let\'s Encrypt/CN=YE2" "/C=US/O=Let\'s Encrypt/CN=YE3"' osg-certificates-26232.0e93b0d/isrg-root-yr.crl_url000066400000000000000000000000261524164345300220000ustar00rootroot00000000000000http://yr.c.lencr.org osg-certificates-26232.0e93b0d/isrg-root-yr.pem000066400000000000000000000034721524164345300211270ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIIFKTCCAxGgAwIBAgIRAOxGNJNgz0sP+KmC2Tqpyj0wDQYJKoZIhvcNAQELBQAw LjELMAkGA1UEBhMCVVMxDTALBgNVBAoTBElTUkcxEDAOBgNVBAMTB1Jvb3QgWVIw HhcNMjUwOTAzMDAwMDAwWhcNNDUwOTAyMjM1OTU5WjAuMQswCQYDVQQGEwJVUzEN MAsGA1UEChMESVNSRzEQMA4GA1UEAxMHUm9vdCBZUjCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBANvGJnN78CTJdWL3+eGfsLN5TrNBJs+VH9hRXqRbwxu9 sGNiB0BD1fcOxbSUQCJIM1xE13Db+5Cw1w0s0EBYsvuIP/6joF0w8cuImbgR1OGg YbSQ4OpzI+DG8SGuTlcE873OCS+kh3srlo6vl43M5OJg4Aeo1sfHp6kTJDoIiFBN JAY+OKfX/FUvYKuhjT+no49lmqmupSBI5PkBQiqrEGtWU5uxU/cQWHGu8jSjFBzn ZqvbNPLMXMLFxCb3WTfrJBXXjqvWG+v4bjzxjjeAtOlU7qarRDvNOyAuQYLln904 M+faKx8hnLCpJ15ZqaEgcNlY+9MMWcC5yvL2A2j3l9+2buggZX+dOE91zYmIdawT vSZuVvlbRrAlLxIB6pwMBjneXCjYQ8+3BCCjssbSNpZU3hTcBDdhfAlEDlYr6pEa tnMdmDT5BqnKC92bd0EhM1fbLHioLccLCuievT8ZkPhZrq7Mii7gNXAcUEAR8+lz Yal+9zTg7C5DALyVOeG/CqfRAMn1KSHCR0NSA6P8tn/mGRlnCct5rtVCLnVySVpU 6H1qGg3DgTOuskf8eahTMiYbI5ezPJmO5ertalskQ1utp74+eDy92PI4ftHKTbq9 IWhH4YZKh3WnJEIt+oQvlYZbY8tpEroKrFB6PFGzrJIDRyts4HqvuH52RFj2zv/B AgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud DgQWBBTe51tg0CJtQCh9Pw0B/qS1UrRRlDANBgkqhkiG9w0BAQsFAAOCAgEAWHnf 713Bdkq7t5yN2dNIgQakUb94X9WuyhMEHHkgx4oDpSUlnG0w4g94MoqaEUE31ZjR LU7L5LD1g9ujFHTQu8AD215AHMVQFbm6j8hQxdXHAzDajFNQnOlDJrLjzIx176oy AjvUtejZx2NNmdb5fd0WGVGsCdoAJ3N8ozo7ajE8t6vfxStZb4BQ9WYJGHUDrv2N i5tJF6CNiPnlzs3BUfECRbE4JSk+jvy8+VoGiFE8qsH/j78x2fjgQhAQFV7P7Zxy dBTZ1wEkNpZNW2qnaK1SKBLa+xf6E06YRIq5uaI+HWH8SY1y5VbRgzq40EKg3yxP 06fz+uYAUIFJoLNfhwRCc3Q6pQVuMX3yAjHAes4gk4moGcLQ5p7HAh39yeylZc1J 41sx/jKwLIkPE6Rr1Nf4pxdsxf9SA4yOEiAkDgq04DVxn8hgYFdUtBCuiuVC2heA EiqVEa+8QZjuw8Gj0EbHXcRd1nInvGqRS1o9Is7YBdQN57X1AYveGBNNqjICSb7c awuw1EawTDrs13VUlJVEsbQ0/O/1aaV73mCdOQ8azqL2KTv1Ewu1xbquE2S+kdQU To9TUwat3wUA6cwXh1EfpS/3fJ0aGah5hdpRyoCLDlsSn8tkrjMfFFX0viC+GxHc sI1ANRYvqSFC2X1VRZfDg+wD6E21BccmifG4yWc= -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/isrg-root-yr.signing_policy000066400000000000000000000003111524164345300233500ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=ISRG/CN=Root YR' pos_rights globus CA:sign cond_subjects globus '"/C=US/O=Let\'s Encrypt/CN=YR1" "/C=US/O=Let\'s Encrypt/CN=YR2" "/C=US/O=Let\'s Encrypt/CN=YR3"' osg-certificates-26232.0e93b0d/isrgrootx1.crl_url000066400000000000000000000000261524164345300215440ustar00rootroot00000000000000http://x1.c.lencr.org osg-certificates-26232.0e93b0d/isrgrootx1.pem000066400000000000000000000036231524164345300206710ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4 WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJu ZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBY MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54rVygc h77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+ 0TM8ukj13Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6U A5/TR5d8mUgjU+g4rk8Kb4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sW T8KOEUt+zwvo/7V3LvSye0rgTBIlDHCNAymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyH B5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ4Q7e2RCOFvu396j3x+UC B5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf1b0SHzUv KBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWn OlFuhjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTn jh8BCNAw1FtxNrQHusEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbw qHyGO0aoSCqI3Haadr8faqU9GY/rOPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CI rU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV HRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY9umbbjANBgkq hkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ 3BebYhtF8GaV0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KK NFtY2PwByVS5uCbMiogziUwthDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5 ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJwTdwJx4nLCgdNbOhdjsnvzqvHu7Ur TkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nxe5AW0wdeRlN8NwdC jNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZAJzVc oyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq 4RgqsahDYVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPA mRGunUHBcnWEvgJBQl9nJEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57d emyPxgcYxn/eR44/KJ4EBs+lVDR3veyJm+kXQ99b21/+jh5Xos1AnX5iItreGCc= -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/isrgrootx1.signing_policy000066400000000000000000000005771524164345300231320ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Internet Security Research Group/CN=ISRG Root X1' pos_rights globus CA:sign cond_subjects globus '"/C=US/O=Let\'s Encrypt/CN=R10" "/C=US/O=Let\'s Encrypt/CN=R11" "/C=US/O=Let\'s Encrypt/CN=R12" "/C=US/O=Let\'s Encrypt/CN=R13" "/C=US/O=Let\'s Encrypt/CN=R14" "/C=US/O=Internet Security Research Group/CN=ISRG Root X2" "/C=US/O=ISRG/CN=Root YR"' osg-certificates-26232.0e93b0d/lets-encrypt-e5.pem000066400000000000000000000017451524164345300215130ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIICtDCCAjugAwIBAgIQGG511O6woF39Lagghl0eMTAKBggqhkjOPQQDAzBPMQsw CQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2gg R3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMjAeFw0yNDAzMTMwMDAwMDBaFw0y NzAzMTIyMzU5NTlaMDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNy eXB0MQswCQYDVQQDEwJFNTB2MBAGByqGSM49AgEGBSuBBAAiA2IABA0LOoprYY62 79xfWOfGQkVUq2P2ZmFICi5ZdbSBAjdQtz8WedyY7KEol3IgHCzP1XxSIE5UeFuE FGvAkK6F7MBRQTxah38GTdT+YNH6bC3hfZUQiKIIVA+ZGkzm6gqs2KOB+DCB9TAO BgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIG A1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFJ8rX888IU+dBLftKyzExnCL0tcN MB8GA1UdIwQYMBaAFHxClq7eS0g7+pL4nozPbYupcjeVMDIGCCsGAQUFBwEBBCYw JDAiBggrBgEFBQcwAoYWaHR0cDovL3gyLmkubGVuY3Iub3JnLzATBgNVHSAEDDAK MAgGBmeBDAECATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8veDIuYy5sZW5jci5v cmcvMAoGCCqGSM49BAMDA2cAMGQCMBttLkVBHEU+2V80GHRnE3m6qym1thBOgydK i0VOx3vP9EAwHWGl5hxtpJAJkm5GSwIwRikYhDR6vPve2BvYGacE9ct+522E2dqO 6s42MLmigEws5mASS6l2quhtlUfacgkM -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-e5.signing_policy000066400000000000000000000001661524164345300237430ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=E5' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-e6.pem000066400000000000000000000017511524164345300215110ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIICtjCCAjygAwIBAgIRAICpc0jvJ2ip4/a7Q8D5xikwCgYIKoZIzj0EAwMwTzEL MAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2VhcmNo IEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDIwHhcNMjQwMzEzMDAwMDAwWhcN MjcwMzEyMjM1OTU5WjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3MgRW5j cnlwdDELMAkGA1UEAxMCRTYwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATZ8Z5Gh/gh cWCoJuuj+rnq2h25EqfUJtlRFLFhfHWWvyILOR/VvtEKRqotPEoJhC6+QJVV6RlA N2Z17TJOdwRJ+HB7wxjnzvdxEP6sdNgA1O1tHHMWMxCcOrLqbGL0vbijgfgwgfUw DgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAS BgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBSTJ0aYA6lRaI6Y1sRCSNsjv1iU 0jAfBgNVHSMEGDAWgBR8Qpau3ktIO/qS+J6Mz22LqXI3lTAyBggrBgEFBQcBAQQm MCQwIgYIKwYBBQUHMAKGFmh0dHA6Ly94Mi5pLmxlbmNyLm9yZy8wEwYDVR0gBAww CjAIBgZngQwBAgEwJwYDVR0fBCAwHjAcoBqgGIYWaHR0cDovL3gyLmMubGVuY3Iu b3JnLzAKBggqhkjOPQQDAwNoADBlAjBgGMvAszhCd1BsRuMwGYCC0QCzf5d//MC5 ASqIyswj3hGcoZREOKDKdvJPHhgdZr8CMQCWq4Kjl/RmuF49LBq9eP7oGWAc55w4 G72FoKw5a9WywSwBzoJunrayTB8nDSjEhu8= -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-e6.signing_policy000066400000000000000000000001661524164345300237440ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=E6' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-e7.pem000066400000000000000000000017511524164345300215120ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIICtzCCAjygAwIBAgIRAMWKhaLGI0XgqMRSU4efWTowCgYIKoZIzj0EAwMwTzEL MAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2VhcmNo IEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDIwHhcNMjQwMzEzMDAwMDAwWhcN MjcwMzEyMjM1OTU5WjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3MgRW5j cnlwdDELMAkGA1UEAxMCRTcwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARB6ASTCFh/ vjcwDMCgQer+VtqEkz7JANurZxLP+U9TCeioL6sp5Z8VRvRbYk4P1INBmbefQHJF HCxcSjKmwtvGBWpl/9ra8HW0QDsUaJW2qOJqceJ0ZVFT3hbUHifBM/2jgfgwgfUw DgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAS BgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBSuSJ7chx1EoG/aouVgdAR4wpwA gDAfBgNVHSMEGDAWgBR8Qpau3ktIO/qS+J6Mz22LqXI3lTAyBggrBgEFBQcBAQQm MCQwIgYIKwYBBQUHMAKGFmh0dHA6Ly94Mi5pLmxlbmNyLm9yZy8wEwYDVR0gBAww CjAIBgZngQwBAgEwJwYDVR0fBCAwHjAcoBqgGIYWaHR0cDovL3gyLmMubGVuY3Iu b3JnLzAKBggqhkjOPQQDAwNpADBmAjEA/e5N+wjAk945cpaFxGaeMC13fyvdbNzX lRg9HNdElxi5mXdI4az2CykNU07iFwqEAjEAihPCDkw4b1BvfLg8VNLLuaMpn1Rb Z1682chR6zNRCseyie4SjyTCdkvsAa+omQSf -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-e7.signing_policy000066400000000000000000000001661524164345300237450ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=E7' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-e8.pem000066400000000000000000000017511524164345300215130ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIICtTCCAjugAwIBAgIQfo8UX4exWTMtf9QIK4JraTAKBggqhkjOPQQDAzBPMQsw CQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2gg R3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMjAeFw0yNDAzMTMwMDAwMDBaFw0y NzAzMTIyMzU5NTlaMDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNy eXB0MQswCQYDVQQDEwJFODB2MBAGByqGSM49AgEGBSuBBAAiA2IABNFl8l7cS7QM ApzSsvru6WyrOq44ofTUOTIzxULUzDMMNMchIJBwXOhiLxxxs0LXeb5GDcHbR6ET oMffgSZjO9SNHfY9gjMy9vQr5/WWOrQTZxh7az6NSNnq3u2ubT6HTKOB+DCB9TAO BgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIG A1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFI8NE6L2Ln7RUGwzGDhdWY4jcpHK MB8GA1UdIwQYMBaAFHxClq7eS0g7+pL4nozPbYupcjeVMDIGCCsGAQUFBwEBBCYw JDAiBggrBgEFBQcwAoYWaHR0cDovL3gyLmkubGVuY3Iub3JnLzATBgNVHSAEDDAK MAgGBmeBDAECATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8veDIuYy5sZW5jci5v cmcvMAoGCCqGSM49BAMDA2gAMGUCMQClsUNJdX36GE+o2yDf7L02m3P3ElVWRLls 5ZyLYPjcNamBxRB9gZYoj24mGZtP3GkCMASZcALg6kpScomqIIjVHXRUQ500cdl4 4n7fhxwokLo/lVlO8YyHwAi7ejTHtvw9Vg== -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-e8.signing_policy000066400000000000000000000001661524164345300237460ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=E8' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-e9.pem000066400000000000000000000017451524164345300215170ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIICtDCCAjugAwIBAgIQL0w31L50/EIziMaoQErAIjAKBggqhkjOPQQDAzBPMQsw CQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFyY2gg R3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMjAeFw0yNDAzMTMwMDAwMDBaFw0y NzAzMTIyMzU5NTlaMDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNy eXB0MQswCQYDVQQDEwJFOTB2MBAGByqGSM49AgEGBSuBBAAiA2IABKBc3EWfO6zm AqlYSV0MFToiAnzppo1ZSJfbXGjprjBkydFbYBekcgrlJEmt5787R4P1grbPtgd3 oUBlfoMzWHihpjXWkojvlceMmUYqvVbQc39pCD3RiYjDCr7WpuIqc6OB+DCB9TAO BgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIG A1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFF130U2sTSJ4WbKGWY5DHLdkWRNB MB8GA1UdIwQYMBaAFHxClq7eS0g7+pL4nozPbYupcjeVMDIGCCsGAQUFBwEBBCYw JDAiBggrBgEFBQcwAoYWaHR0cDovL3gyLmkubGVuY3Iub3JnLzATBgNVHSAEDDAK MAgGBmeBDAECATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8veDIuYy5sZW5jci5v cmcvMAoGCCqGSM49BAMDA2cAMGQCMBWsD3obNCbyyK+wmA5pegl6G4VEIEAzL7wM bza6kx4K7CvBzaHQxKl+roFwORB8fgIwS34uE6gGijIy0C2Xn+vjeCqn8xZikhq2 Xf1xSYDuYqpW9YVJ1Ou2vqm5YZFCIX+n -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-e9.signing_policy000066400000000000000000000001661524164345300237470ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=E9' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-r10.pem000066400000000000000000000034111524164345300215740ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIIFBTCCAu2gAwIBAgIQS6hSk/eaL6JzBkuoBI110DANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFy Y2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMTAeFw0yNDAzMTMwMDAwMDBa Fw0yNzAzMTIyMzU5NTlaMDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBF bmNyeXB0MQwwCgYDVQQDEwNSMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDPV+XmxFQS7bRH/sknWHZGUCiMHT6I3wWd1bUYKb3dtVq/+vbOo76vACFL YlpaPAEvxVgD9on/jhFD68G14BQHlo9vH9fnuoE5CXVlt8KvGFs3Jijno/QHK20a /6tYvJWuQP/py1fEtVt/eA0YYbwX51TGu0mRzW4Y0YCF7qZlNrx06rxQTOr8IfM4 FpOUurDTazgGzRYSespSdcitdrLCnF2YRVxvYXvGLe48E1KGAdlX5jgc3421H5KR mudKHMxFqHJV8LDmowfs/acbZp4/SItxhHFYyTr6717yW0QrPHTnj7JHwQdqzZq3 DZb3EoEmUVQK7GH29/Xi8orIlQ2NAgMBAAGjgfgwgfUwDgYDVR0PAQH/BAQDAgGG MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATASBgNVHRMBAf8ECDAGAQH/ AgEAMB0GA1UdDgQWBBS7vMNHpeS8qcbDpHIMEI2iNeHI6DAfBgNVHSMEGDAWgBR5 tFnme7bl5AFzgAiIyBpY9umbbjAyBggrBgEFBQcBAQQmMCQwIgYIKwYBBQUHMAKG Fmh0dHA6Ly94MS5pLmxlbmNyLm9yZy8wEwYDVR0gBAwwCjAIBgZngQwBAgEwJwYD VR0fBCAwHjAcoBqgGIYWaHR0cDovL3gxLmMubGVuY3Iub3JnLzANBgkqhkiG9w0B AQsFAAOCAgEAkrHnQTfreZ2B5s3iJeE6IOmQRJWjgVzPw139vaBw1bGWKCIL0vIo zwzn1OZDjCQiHcFCktEJr59L9MhwTyAWsVrdAfYf+B9haxQnsHKNY67u4s5Lzzfd u6PUzeetUK29v+PsPmI2cJkxp+iN3epi4hKu9ZzUPSwMqtCceb7qPVxEbpYxY1p9 1n5PJKBLBX9eb9LU6l8zSxPWV7bK3lG4XaMJgnT9x3ies7msFtpKK5bDtotij/l0 GaKeA97pb5uwD9KgWvaFXMIEt8jVTjLEvwRdvCn294GPDF08U8lAkIv7tghluaQh 1QnlE4SEN4LOECj8dsIGJXpGUk3aU3KkJz9icKy+aUgA+2cP21uh6NcDIS3XyfaZ QjmDQ993ChII8SXWupQZVBiIpcWO4RqZk3lr7Bz5MUCwzDIA359e57SSq5CCkY0N 4B6Vulk7LktfwrdGNVI5BsC9qqxSwSKgRJeZ9wygIaehbHFHFhcBaMDKpiZlBHyz rsnnlFXCb5s8HKn5LsUgGvB24L7sGNZP2CX7dhHov+YhD+jozLW2p9W4959Bz2Ei RmqDtmiXLnzqTpXbI+suyCsohKRg6Un0RC47+cpiVwHiXZAW+cn8eiNIjqbVgXLx KPpdzvvtTnOPlC7SQZSYmdunr3Bf9b77AiC/ZidstK36dRILKz7OA54= -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-r10.signing_policy000066400000000000000000000001671524164345300240350ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=R10' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-r11.pem000066400000000000000000000034111524164345300215750ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIIFBjCCAu6gAwIBAgIRAIp9PhPWLzDvI4a9KQdrNPgwDQYJKoZIhvcNAQELBQAw TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjQwMzEzMDAwMDAw WhcNMjcwMzEyMjM1OTU5WjAzMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg RW5jcnlwdDEMMAoGA1UEAxMDUjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAuoe8XBsAOcvKCs3UZxD5ATylTqVhyybKUvsVAbe5KPUoHu0nsyQYOWcJ DAjs4DqwO3cOvfPlOVRBDE6uQdaZdN5R2+97/1i9qLcT9t4x1fJyyXJqC4N0lZxG AGQUmfOx2SLZzaiSqhwmej/+71gFewiVgdtxD4774zEJuwm+UE1fj5F2PVqdnoPy 6cRms+EGZkNIGIBloDcYmpuEMpexsr3E+BUAnSeI++JjF5ZsmydnS8TbKF5pwnnw SVzgJFDhxLyhBax7QG0AtMJBP6dYuC/FXJuluwme8f7rsIU5/agK70XEeOtlKsLP Xzze41xNG/cLJyuqC0J3U095ah2H2QIDAQABo4H4MIH1MA4GA1UdDwEB/wQEAwIB hjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwEgYDVR0TAQH/BAgwBgEB /wIBADAdBgNVHQ4EFgQUxc9GpOr0w8B6bJXELbBeki8m47kwHwYDVR0jBBgwFoAU ebRZ5nu25eQBc4AIiMgaWPbpm24wMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAC hhZodHRwOi8veDEuaS5sZW5jci5vcmcvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMCcG A1UdHwQgMB4wHKAaoBiGFmh0dHA6Ly94MS5jLmxlbmNyLm9yZy8wDQYJKoZIhvcN AQELBQADggIBAE7iiV0KAxyQOND1H/lxXPjDj7I3iHpvsCUf7b632IYGjukJhM1y v4Hz/MrPU0jtvfZpQtSlET41yBOykh0FX+ou1Nj4ScOt9ZmWnO8m2OG0JAtIIE38 01S0qcYhyOE2G/93ZCkXufBL713qzXnQv5C/viOykNpKqUgxdKlEC+Hi9i2DcaR1 e9KUwQUZRhy5j/PEdEglKg3l9dtD4tuTm7kZtB8v32oOjzHTYw+7KdzdZiw/sBtn UfhBPORNuay4pJxmY/WrhSMdzFO2q3Gu3MUBcdo27goYKjL9CTF8j/Zz55yctUoV aneCWs/ajUX+HypkBTA+c8LGDLnWO2NKq0YD/pnARkAnYGPfUDoHR9gVSp/qRx+Z WghiDLZsMwhN1zjtSC0uBWiugF3vTNzYIEFfaPG7Ws3jDrAMMYebQ95JQ+HIBD/R PBuHRTBpqKlyDnkSHDHYPiNX3adPoPAcgdF3H2/W0rmoswMWgTlLn1Wu0mrks7/q pdWfS6PJ1jty80r2VKsM/Dj3YIDfbjXKdaFU5C+8bhfJGqU3taKauuz0wHVGT3eo 6FlWkWYtbt4pgdamlwVeZEW+LM7qZEJEsMNPrfC03APKmZsJgpWCDWOKZvkZcvjV uYkQ4omYCTX5ohy+knMjdOmdH9c7SpqEWBDC86fiNex+O0XOMEZSa8DA -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-r11.signing_policy000066400000000000000000000001671524164345300240360ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=R11' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-r12.pem000066400000000000000000000034111524164345300215760ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIIFBjCCAu6gAwIBAgIRAMISMktwqbSRcdxA9+KFJjwwDQYJKoZIhvcNAQELBQAw TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjQwMzEzMDAwMDAw WhcNMjcwMzEyMjM1OTU5WjAzMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg RW5jcnlwdDEMMAoGA1UEAxMDUjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA2pgodK2+lP474B7i5Ut1qywSf+2nAzJ+Npfs6DGPpRONC5kuHs0BUT1M 5ShuCVUxqqUiXXL0LQfCTUA83wEjuXg39RplMjTmhnGdBO+ECFu9AhqZ66YBAJpz kG2Pogeg0JfT2kVhgTU9FPnEwF9q3AuWGrCf4yrqvSrWmMebcas7dA8827JgvlpL Thjp2ypzXIlhZZ7+7Tymy05v5J75AEaz/xlNKmOzjmbGGIVwx1Blbzt05UiDDwhY XS0jnV6j/ujbAKHS9OMZTfLuevYnnuXNnC2i8n+cF63vEzc50bTILEHWhsDp7CH4 WRt/uTp8n1wBnWIEwii9Cq08yhDsGwIDAQABo4H4MIH1MA4GA1UdDwEB/wQEAwIB hjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwEgYDVR0TAQH/BAgwBgEB /wIBADAdBgNVHQ4EFgQUALUp8i2ObzHom0yteD763OkM0dIwHwYDVR0jBBgwFoAU ebRZ5nu25eQBc4AIiMgaWPbpm24wMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAC hhZodHRwOi8veDEuaS5sZW5jci5vcmcvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMCcG A1UdHwQgMB4wHKAaoBiGFmh0dHA6Ly94MS5jLmxlbmNyLm9yZy8wDQYJKoZIhvcN AQELBQADggIBAI910AnPanZIZTKS3rVEyIV29BWEjAK/duuz8eL5boSoVpHhkkv3 4eoAeEiPdZLj5EZ7G2ArIK+gzhTlRQ1q4FKGpPPaFBSpqV/xbUb5UlAXQOnkHn3m FVj+qYv87/WeY+Bm4sN3Ox8BhyaU7UAQ3LeZ7N1X01xxQe4wIAAE3JVLUCiHmZL+ qoCUtgYIFPgcg350QMUIWgxPXNGEncT921ne7nluI02V8pLUmClqXOsCwULw+PVO ZCB7qOMxxMBoCUeL2Ll4oMpOSr5pJCpLN3tRA2s6P1KLs9TSrVhOk+7LX28NMUlI usQ/nxLJID0RhAeFtPjyOCOscQBA53+NRjSCak7P4A5jX7ppmkcJECL+S0i3kXVU y5Me5BbrU8973jZNv/ax6+ZK6TM8jWmimL6of6OrX7ZU6E2WqazzsFrLG3o2kySb zlhSgJ81Cl4tv3SbYiYXnJExKQvzf83DYotox3f0fwv7xln1A2ZLplCb0O+l/AK0 YE0DS2FPxSAHi0iwMfW2nNHJrXcY3LLHD77gRgje4Eveubi2xxa+Nmk/hmhLdIET iVDFanoCrMVIpQ59XWHkzdFmoHXHBV7oibVjGSO7ULSQ7MJ1Nz51phuDJSgAIU7A 0zrLnOrAj/dfrlEWRhCvAgbuwLZX1A2sjNjXoPOHbsPiy+lO1KF8/XY7 -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-r12.signing_policy000066400000000000000000000001671524164345300240370ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=R12' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-r13.pem000066400000000000000000000034111524164345300215770ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIIFBTCCAu2gAwIBAgIQWgDyEtjUtIDzkkFX6imDBTANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFy Y2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMTAeFw0yNDAzMTMwMDAwMDBa Fw0yNzAzMTIyMzU5NTlaMDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBF bmNyeXB0MQwwCgYDVQQDEwNSMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQClZ3CN0FaBZBUXYc25BtStGZCMJlA3mBZjklTb2cyEBZPs0+wIG6BgUUNI fSvHSJaetC3ancgnO1ehn6vw1g7UDjDKb5ux0daknTI+WE41b0VYaHEX/D7YXYKg L7JRbLAaXbhZzjVlyIuhrxA3/+OcXcJJFzT/jCuLjfC8cSyTDB0FxLrHzarJXnzR yQH3nAP2/Apd9Np75tt2QnDr9E0i2gB3b9bJXxf92nUupVcM9upctuBzpWjPoXTi dYJ+EJ/B9aLrAek4sQpEzNPCifVJNYIKNLMc6YjCR06CDgo28EdPivEpBHXazeGa XP9enZiVuppD0EqiFwUBBDDTMrOPAgMBAAGjgfgwgfUwDgYDVR0PAQH/BAQDAgGG MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATASBgNVHRMBAf8ECDAGAQH/ AgEAMB0GA1UdDgQWBBTnq58PLDOgU9NeT3jIsoQOO9aSMzAfBgNVHSMEGDAWgBR5 tFnme7bl5AFzgAiIyBpY9umbbjAyBggrBgEFBQcBAQQmMCQwIgYIKwYBBQUHMAKG Fmh0dHA6Ly94MS5pLmxlbmNyLm9yZy8wEwYDVR0gBAwwCjAIBgZngQwBAgEwJwYD VR0fBCAwHjAcoBqgGIYWaHR0cDovL3gxLmMubGVuY3Iub3JnLzANBgkqhkiG9w0B AQsFAAOCAgEAUTdYUqEimzW7TbrOypLqCfL7VOwYf/Q79OH5cHLCZeggfQhDconl k7Kgh8b0vi+/XuWu7CN8n/UPeg1vo3G+taXirrytthQinAHGwc/UdbOygJa9zuBc VyqoH3CXTXDInT+8a+c3aEVMJ2St+pSn4ed+WkDp8ijsijvEyFwE47hulW0Ltzjg 9fOV5Pmrg/zxWbRuL+k0DBDHEJennCsAen7c35Pmx7jpmJ/HtgRhcnz0yjSBvyIw 6L1QIupkCv2SBODT/xDD3gfQQyKv6roV4G2EhfEyAsWpmojxjCUCGiyg97FvDtm/ NK2LSc9lybKxB73I2+P2G3CaWpvvpAiHCVu30jW8GCxKdfhsXtnIy2imskQqVZ2m 0Pmxobb28Tucr7xBK7CtwvPrb79os7u2XP3O5f9b/H66GNyRrglRXlrYjI1oGYL/ f4I1n/Sgusda6WvA6C190kxjU15Y12mHU4+BxyR9cx2hhGS9fAjMZKJss28qxvz6 Axu4CaDmRNZpK/pQrXF17yXCXkmEWgvSOEZy6Z9pcbLIVEGckV/iVeq0AOo2pkg9 p4QRIy0tK2diRENLSF2KysFwbY6B26BFeFs3v1sYVRhFW9nLkOrQVporCS0KyZmf wVD89qSTlnctLcZnIavjKsKUu1nA1iU0yYMdYepKR7lWbnwhdx3ewok= -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-r13.signing_policy000066400000000000000000000001671524164345300240400ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=R13' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-r14.pem000066400000000000000000000034111524164345300216000ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIIFBjCCAu6gAwIBAgIRAL7zc3iocCqewKR6uSGlBqswDQYJKoZIhvcNAQELBQAw TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjQwMzEzMDAwMDAw WhcNMjcwMzEyMjM1OTU5WjAzMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg RW5jcnlwdDEMMAoGA1UEAxMDUjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAzWhUbJkv1MTfFF7ihLylp5jaitXVng6yEeruE71/c0TLq/bZ438PLiPN r3I1qp66HaqOANbQ6ETg0SjuBbWng7VLHG4M1vQnx40EyXb4MnqeiwIucbyfEras GfTsS7E0ulC7uJ3G80OeAGQl76Rvq/qOYOR8n9VofZfbSKiQkHjUE4yP18YKub7E y8L0i7+WibZd7OYLtcGDxZwgr56r5iSYSVFl6c4ihop2I81g2BkBGPYLygDSktVW Vz1/cnjHH+u7ubt5hhlw/GwsOaJfIjrFhw3KafQJyvJxanpfCSSTShzR9whLTSKV lH2A1761dHaceWkBRqcV3HkuFIGIlQIDAQABo4H4MIH1MA4GA1UdDwEB/wQEAwIB hjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwEgYDVR0TAQH/BAgwBgEB /wIBADAdBgNVHQ4EFgQU5RCV2LYMUdencjVjClRobgZT+PswHwYDVR0jBBgwFoAU ebRZ5nu25eQBc4AIiMgaWPbpm24wMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAC hhZodHRwOi8veDEuaS5sZW5jci5vcmcvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMCcG A1UdHwQgMB4wHKAaoBiGFmh0dHA6Ly94MS5jLmxlbmNyLm9yZy8wDQYJKoZIhvcN AQELBQADggIBACA3LtFXH8eQXLovPGzp7c2XE0/jmEp7tokiecuSdHfIUoMMYLjI TpCNbi92Czp+qraLmp0eLy6QEE5wnvMe5f9fgE24yk8EpsLw0JEr9L8tqWUXC1Kp jsT3ydhbWR70i4gElBvXnjGJc6HnU80veqABHEOU8TuAVwerBqH479ZLZSX+ezAf n9QcYiU9r8kVMbeSoSiQY39L6QK/3w4lmMZ9XoGM+9YhJldIbpBNgikoNgcOp3ya QxsfsE6ixjBZ/G6OSdi7KY41a/QdzeIiSy4dDV8R4pYF9FEhogpU/T/fD9tE7gEO 81vGLOyhUSlI2EzsJeH0lAt9NIN5CPtcooj9ZV3gkuYwhQMdhiBM/giI1CX+3JUh w6zKwXr3EjiY4Emw12U6ACaMSJxFxakt1zjmBn/DNgx0rP4WyeSJrewrQsYjW9Us bpO7GGrbADy72exibqrULU3Hp/PWHdXn+j3dKweU5ZL5li67ckqf1ixqQtoQuyjb F4+flbcU7AdHYnNHNUHMz5TWXYKWP6fFk9PSggS8DmYtYozN3npRSCHTC56Rxa81 ApdD9Ab0dF7fOvlnmniGxfqCRSh/RMGGEaTxdAfhp/m/yaR4xtm8VTAn8d65h/3D fKOGZ34UnvZmJ/bHqnU4zkLWc51iC1i9OIQWzoePK6qNPUq7k+oKUMSj -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-r14.signing_policy000066400000000000000000000001671524164345300240410ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=R14' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-ye1.pem000066400000000000000000000016601524164345300216740ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIICizCCAhGgAwIBAgIQXd1w3TH4AchcGGp6BLgK/jAKBggqhkjOPQQDAzAuMQsw CQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQMA4GA1UEAxMHUm9vdCBZRTAeFw0y NTA5MDMwMDAwMDBaFw0yODA5MDIyMzU5NTlaMDMxCzAJBgNVBAYTAlVTMRYwFAYD VQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNZRTEwdjAQBgcqhkjOPQIBBgUr gQQAIgNiAAQHZVB1/mimla2hfSurylScjPMZaOJXLz/NnAc2sylm8WDyhU9Ccp+z ASQi5vSwGGJjSGklkD9fdPR8GpyDIOIjCEfrnbt/v+ZSEPLLEGbaM6EccDbN7p9x teIm2Avf+ryjge4wgeswDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUF BwMBMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFLsgykcL/tflnPmPCSqj jDdFsbzYMB8GA1UdIwQYMBaAFKPIJlqOoUzQNWP8myPIOq5W809WMDIGCCsGAQUF BwEBBCYwJDAiBggrBgEFBQcwAoYWaHR0cDovL3llLmkubGVuY3Iub3JnLzATBgNV HSAEDDAKMAgGBmeBDAECATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8veWUuYy5s ZW5jci5vcmcvMAoGCCqGSM49BAMDA2gAMGUCMQDgjUEahFT/h3DRakqiPZpLvPgf Zwkt6K2EOMmh1nvEzl83eMLYcod4GCl3b0J1Nn0CMBNYmEQJb4CEG5WoOe7aRn/L VKu6saHmHEynI7ysIPd8zQsK1HdmhlHKlw9Z5GpGvA== -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-ye1.signing_policy000066400000000000000000000001671524164345300241310ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=YE1' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-ye2.pem000066400000000000000000000016601524164345300216750ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIICjDCCAhGgAwIBAgIQTfOxXdbAeExQfNN7WObxFTAKBggqhkjOPQQDAzAuMQsw CQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQMA4GA1UEAxMHUm9vdCBZRTAeFw0y NTA5MDMwMDAwMDBaFw0yODA5MDIyMzU5NTlaMDMxCzAJBgNVBAYTAlVTMRYwFAYD VQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNZRTIwdjAQBgcqhkjOPQIBBgUr gQQAIgNiAARxmrQzkdbEEL3MqXt3dJQttYc47axkdDTHud5TPqM2z5uSD5cmk0Wr HlWXvnlvqBLqiB34kluxIbmMyAiq3/YD6e80/vV259K8XQIdjFXloYOa0mIU71f7 HQ09PvYDlw+jge4wgeswDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUF BwMBMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFLlZ8o7PIvCG0zdI/3YU GLqC2FWHMB8GA1UdIwQYMBaAFKPIJlqOoUzQNWP8myPIOq5W809WMDIGCCsGAQUF BwEBBCYwJDAiBggrBgEFBQcwAoYWaHR0cDovL3llLmkubGVuY3Iub3JnLzATBgNV HSAEDDAKMAgGBmeBDAECATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8veWUuYy5s ZW5jci5vcmcvMAoGCCqGSM49BAMDA2kAMGYCMQDIcnw5dcZLN9ffynXnnkLD/itS JEycJPb3sRkzeqBowup7vOsAwaqoCnNn/jh9wycCMQCJM6CPlaOC4pQYYbJtVPYb DKrIb2EKk5NpOpE6/XttQYZV/3gilB9l+Cc/DOVwmyg= -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-ye2.signing_policy000066400000000000000000000001671524164345300241320ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=YE2' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-ye3.pem000066400000000000000000000016601524164345300216760ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIICizCCAhGgAwIBAgIQLTM7c3DEJq+3k6hXVBAwZzAKBggqhkjOPQQDAzAuMQsw CQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQMA4GA1UEAxMHUm9vdCBZRTAeFw0y NTA5MDMwMDAwMDBaFw0yODA5MDIyMzU5NTlaMDMxCzAJBgNVBAYTAlVTMRYwFAYD VQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNZRTMwdjAQBgcqhkjOPQIBBgUr gQQAIgNiAAS7HaCvDM9Y3aYPW+iH6uUTK2KFUYx0vye5xK1KNTWZUgloiW2budqz vCQaarmJTNujiV+ZrWrOpox+N4kTsiCec6yfw7VGmErLC5ZSq2X4d2vJc1g8VIU3 fb7CuzJ/bDOjge4wgeswDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUF BwMBMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFPaiftZeI2/d3UVGYR6C FXXN8eaOMB8GA1UdIwQYMBaAFKPIJlqOoUzQNWP8myPIOq5W809WMDIGCCsGAQUF BwEBBCYwJDAiBggrBgEFBQcwAoYWaHR0cDovL3llLmkubGVuY3Iub3JnLzATBgNV HSAEDDAKMAgGBmeBDAECATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8veWUuYy5s ZW5jci5vcmcvMAoGCCqGSM49BAMDA2gAMGUCMHD5+4lU6i9k7inE4Opkebs+IFjY jlD9BNaPyQe9/hBSjOOTaF5UZzlNy64JID6VUwIxANr7lTvWWzlGU1PpCR7lfDVX tmGgr3dPHkigUXaTWbbLrx84pOAdd3FEGJM2Kf5etA== -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-ye3.signing_policy000066400000000000000000000001671524164345300241330ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=YE3' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-yr1.pem000066400000000000000000000033201524164345300217040ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIIE2zCCAsOgAwIBAgIRAKICU/FfJpHAXcHOE7m8yk4wDQYJKoZIhvcNAQELBQAw LjELMAkGA1UEBhMCVVMxDTALBgNVBAoTBElTUkcxEDAOBgNVBAMTB1Jvb3QgWVIw HhcNMjUwOTAzMDAwMDAwWhcNMjgwOTAyMjM1OTU5WjAzMQswCQYDVQQGEwJVUzEW MBQGA1UEChMNTGV0J3MgRW5jcnlwdDEMMAoGA1UEAxMDWVIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVi8X2xCYgMXvJxNPKp/oF13UMgmPABB07VC LNDtoXmt9luEZNJSBV10VyT1Pz6LD8Zq1d2gc43WNl1AdRrj4sEnazbOiz0nPpmG Bp2hui49oZtDIY6wdKeZAi5BbNU20CH6RSBBMLSQ9cXrH8dxdv4PAJ45ssGML68U SE3BsjC2a6cAN9L5CgXVIQi5tfNiTPoFZZ3S0OlXqLmmtdV95udWAb5b6e/F49Di CsH0Y00Ag72BVIb1hzynmKe+X0mERBTtsb3BwmpV9ipeBjMLoR/D9cHxHQCWoi5l TmXwY015J5rGelz1nZjJuxc2kioaX29XJBnhMkP531rSdG5uMwIDAQABo4HuMIHr MA4GA1UdDwEB/wQEAwIBhjATBgNVHSUEDDAKBggrBgEFBQcDATASBgNVHRMBAf8E CDAGAQH/AgEAMB0GA1UdDgQWBBQfLzW+RhSCzUCxrnksVXj699Ro+zAfBgNVHSME GDAWgBTe51tg0CJtQCh9Pw0B/qS1UrRRlDAyBggrBgEFBQcBAQQmMCQwIgYIKwYB BQUHMAKGFmh0dHA6Ly95ci5pLmxlbmNyLm9yZy8wEwYDVR0gBAwwCjAIBgZngQwB AgEwJwYDVR0fBCAwHjAcoBqgGIYWaHR0cDovL3lyLmMubGVuY3Iub3JnLzANBgkq hkiG9w0BAQsFAAOCAgEA0+zvMq3kHig1ddTmmm+RibTr9/RpX7k4buanMMRqbV/y IvP82zAHN3mvaw+cASuVsdpd0ikjhr4hnhJQLQOzOp2ccKrsdGOAgo0vddeISFAq EWEV4lmUM3vFF796up+bSgmJ1u6RupDCMxDgF8M3eLvGuj6L0lu3zkQ0KuQLnKxL tB0oQqn1Idg5CuuGpMvQzk29Pa3D/qHurc0EIM9SxukQuJqq63lxsYyRQFU8yMBO hq1w5LbfaWNRrz1uklOfI/pYkAb2E2MTZrAMQkBIE2S8Jt1F8gRc96o/xOsrgvSk a84AisX6xq1lz1Z7jGvrnXc4TMcjxZTjiTaihcYI1JIXZiLtEMSCa5l3cu8YWd6z dLRQlqRdclVjuQfNHawRJ6GWlkK0QJosivTKwdBw3KxEtzGo8yMHERbsy57gP1UX HOMcmZYQC0gtyR3SxfenIM/MxC3Ia2Ypab/kQ/CTnlIn2KQ5JUC6NYrGCbhFN9bp 5lKJStEwCUnLpntcrXk5XVDCNv/5RyWpRThkGOV7GetKkQ0qAY8hCzWK6oqnAhDZ cjlYVdWfqOw3DIOX6EDNBgAqHarRVxyF9QZdOaXSyPJ0ueD2BYJEBgaCGQ8rAaU/ Qc123V5LTXDZW4CcsPBDyhy4v+c8hClAyw/IkJlfBqxB9D+/wvIMHgECZ4ptP6o= -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-yr1.signing_policy000066400000000000000000000001671524164345300241460ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=YR1' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-yr2.pem000066400000000000000000000033201524164345300217050ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIIE2jCCAsKgAwIBAgIQTr0klH4k05SALYSlL9WzGTANBgkqhkiG9w0BAQsFADAu MQswCQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQMA4GA1UEAxMHUm9vdCBZUjAe Fw0yNTA5MDMwMDAwMDBaFw0yODA5MDIyMzU5NTlaMDMxCzAJBgNVBAYTAlVTMRYw FAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNZUjIwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDZ0LxwBppqh84luqMerV/eeL/fXQ7mLQQv1Lnp WKZbyvGpx6wh6AfnslAnF6ewTkcHA+gSOoBvm3Dfm06AuGiF+KRut4fAcowqnAQQ CW98+QPP/eOv/wug7Iyk4NkOxf2I6g2f55T6nJoOTLFcukeRq80JGQEYan+dPFr9 OGUgQK2hGKgNkW87pappsOAuUJcroYhRt5uUis4qaZireiseu32gzDJNBAiKtsvd 6HX4v25bpkRNcS/B/Gtc9kVbUpD+2PLPxdei3Tim55k4tfAEXwD2qyiPTxrTNq6l N+AMr5g2c1dNqkOTwjxeV6L5lpP1rGiYvLnRaPlOqyZRPW+5AgMBAAGjge4wgesw DgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBIGA1UdEwEB/wQI MAYBAf8CAQAwHQYDVR0OBBYEFEAVLSZ57TIgnt+ach3WMh+BDIEMMB8GA1UdIwQY MBaAFN7nW2DQIm1AKH0/DQH+pLVStFGUMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEF BQcwAoYWaHR0cDovL3lyLmkubGVuY3Iub3JnLzATBgNVHSAEDDAKMAgGBmeBDAEC ATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8veXIuYy5sZW5jci5vcmcvMA0GCSqG SIb3DQEBCwUAA4ICAQB0ZUQWZ9/Yn9COEpo+JfecMnB0h0vwDm/M66IqXqw3LoaL mx9lZvRTeDIS67PUeI3yCA2W6PKRD0/FE/G57lOmS+Xy5AaaL00ICGOqjNcCaMWW 8o8nevHOd4i4lqgtznE/28QwlcdJyF8yBiWHpnyjhEpmNWJURgOCOg2xpwRMBCsj MScqYPtOhBeuYQvSwAEeTML2Ukh6uGuX4E14q65Ja8cdjF5bAldnP1eE4FBaAwsZ G2fOqqrKV03Y85Nw2btedP1AtliQuJZs/Jo/gXxXdc7LrH3McgnpnbTiAncX7yES hP6kzQejllqMCIt52HOjxDGWafS7Xw+DKwqmH+Eqy8dcbOuag/1AYlQoKNVK3F5q Hh6tEDiMqQcLIibGKteE6iHo4A/bIScbzrhXUYuism42ZYzmc48FMVIH3qy4L84E TdAH2gtxw0PAhvRVXp8HP7wfngpzsN/8xOTpeRSbM4+Qbc56G6+Bifmv6sk1ieQb NA3wJdl4DDUuQSV8hBgx6zoI1ZSGORprDFux7c6rhc77QZMSRrEgomBeklervEve 86ylWmZ3WWHV6RLMi8xNvjd71r4EPIGgY7BZU/VPBkq+uA7Gb6mbJnFgV43uh3xy LRFgxIAphIukwTGSMZZR+AI+Qnp0BYTWovHXozOf3H8r6hozEoT02JHn0AeTfA== -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-yr2.signing_policy000066400000000000000000000001671524164345300241470ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=YR2' pos_rights globus CA:sign cond_subjects globus '"/CN=*"' osg-certificates-26232.0e93b0d/lets-encrypt-yr3.pem000066400000000000000000000033201524164345300217060ustar00rootroot00000000000000-----BEGIN CERTIFICATE----- MIIE2jCCAsKgAwIBAgIQdv2+nJw5pmI1PsQaDsOT/jANBgkqhkiG9w0BAQsFADAu MQswCQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQMA4GA1UEAxMHUm9vdCBZUjAe Fw0yNTA5MDMwMDAwMDBaFw0yODA5MDIyMzU5NTlaMDMxCzAJBgNVBAYTAlVTMRYw FAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNZUjMwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDJS0+QyfrZm8U0nXugJKg+3nraHoxKN9NOsGvH T9NtcdgThWuj6gizDMqn9VQilyPJ+qKK7rjgBM/XK3ogx61EPbgQY8LiVNn4nsmR 1UFUdalb/cL/mYtXo3lu3qop7k6Ol+pOLzvlBINhl+Mq7l9VxUCM717UpYumNKxG NRjALGg5H16C93UQlW8KgRpW58fY5Be3cLqv24bbKRFisb7S/HPA967pW6rAO/DF FKbi35NfHKEG0jIGqxtsbYbK+/0qe2147p9oUO/SNcuaT9poLFWKmcY90UR0hXKy +qiR6Kv7/e5gCK/BGkjLXM1AfX1CRDwOiIPPsK+RJOIj00ilAgMBAAGjge4wgesw DgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBIGA1UdEwEB/wQI MAYBAf8CAQAwHQYDVR0OBBYEFGllKfkz+Am2QtXh87W1nR9feiJ8MB8GA1UdIwQY MBaAFN7nW2DQIm1AKH0/DQH+pLVStFGUMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEF BQcwAoYWaHR0cDovL3lyLmkubGVuY3Iub3JnLzATBgNVHSAEDDAKMAgGBmeBDAEC ATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8veXIuYy5sZW5jci5vcmcvMA0GCSqG SIb3DQEBCwUAA4ICAQCNj5bxci8knkGgfw3qSv0KbbjZpmKUgZzgYYW6EpiFj4Bx 8CTQ79RCEuitFdGFOvG9xfQdWArQlaO/bsmNcsz0D9wiuwxc9RCo6JC4BKRMcmKE fRiLzHWwHZfUj0sCAY0yBryOGL80J3sD2C3mjAFwV2mVIeuVKOhQeTcstVceW97+ 38AC+juHSq+xu/HuCbX0LgTzMzh8RYy8OtO80IFE2v8qAEDIK2PYoQp27nwftAIC AtOoGzqHDJqPWeiSTQgt1ndRgGAmV7H0HssX66i8naQFlsiidol4goFYEVMVJArp g2X5NyumCCX/aSnXKgp8leQ6XoVQz0VI6+k1a0goPUJB7xp67BkCxkwJamDOMpQL xpdTPI2Z1TO2BuEyzBd8DC/yfm1+rvMCRG3AX44f0ra2ueiM7cdRvzcE+b3c2fun 1n/4xzigiimm8Rzs6Cc0A59mt3XhruOe+zGIXtJgn0wf9XfJhKdKcdEH5VNhFapn Gc9Tm+fd4n5Qojd7W2CwdBUBgwYIt4Cqxqr2OEf7/k1Xm8eplMQlhwySs/hM0dY6 csOPNIXeJm1YsnJyxUGvKRWjOn+vC9k1SXilnnwhcIs9Pp9e5bckYAnB79VJXN/L 8X8xt/9Qm2xmKKe/xzKA+oRvWKofeFGKU7hcnFbyUwlCu0d+JkgWxQu4x4drcQ== -----END CERTIFICATE----- osg-certificates-26232.0e93b0d/lets-encrypt-yr3.signing_policy000066400000000000000000000001671524164345300241500ustar00rootroot00000000000000access_id_CA X509 '/C=US/O=Let\'s Encrypt/CN=YR3' pos_rights globus CA:sign cond_subjects globus '"/CN=*"'