1*cdf0e10cSrcweirThis folder contains the directory structures needed by openssl to create 2*cdf0e10cSrcweirand manager certificates. 3*cdf0e10cSrcweir 4*cdf0e10cSrcweir 5*cdf0e10cSrcweir 6*cdf0e10cSrcweir################################################################################ 7*cdf0e10cSrcweir 8*cdf0e10cSrcweirRoot 1 9*cdf0e10cSrcweir====== 10*cdf0e10cSrcweirValid root CA certificate. 11*cdf0e10cSrcweirProvides CRL = NO 12*cdf0e10cSrcweirProvides CRL via HTTP = NO 13*cdf0e10cSrcweirProvides OCSP = NO 14*cdf0e10cSrcweir 15*cdf0e10cSrcweirSub CA 1 Root 1 16*cdf0e10cSrcweir=============== 17*cdf0e10cSrcweirValid intermediate CA certificate. 18*cdf0e10cSrcweirProvides CRL = NO 19*cdf0e10cSrcweirProvides CRL via HTTP = NO 20*cdf0e10cSrcweirProvides OCSP = NO 21*cdf0e10cSrcweirCRLDP = NO 22*cdf0e10cSrcweirAIA = NO 23*cdf0e10cSrcweir 24*cdf0e10cSrcweirUser 1 Sub CA 1 Root 1 25*cdf0e10cSrcweir====================== 26*cdf0e10cSrcweirValid end certificate. 27*cdf0e10cSrcweirCRLDP = NO 28*cdf0e10cSrcweirAIA = NO 29*cdf0e10cSrcweir 30*cdf0e10cSrcweir################################################################################ 31*cdf0e10cSrcweir 32*cdf0e10cSrcweirRoot 2 33*cdf0e10cSrcweir====== 34*cdf0e10cSrcweirValid root CA certificate. 35*cdf0e10cSrcweirProvides CRL = NO 36*cdf0e10cSrcweirProvides CRL via HTTP = NO 37*cdf0e10cSrcweirProvides OCSP = NO 38*cdf0e10cSrcweir 39*cdf0e10cSrcweirSub CA 1 Root 2 40*cdf0e10cSrcweir=============== 41*cdf0e10cSrcweirValid intermediate CA certificate. 42*cdf0e10cSrcweirProvides CRL = YES 43*cdf0e10cSrcweirProvides CRL via HTTP = NO 44*cdf0e10cSrcweirProvides OCSP = NO 45*cdf0e10cSrcweirCRLDP = NO 46*cdf0e10cSrcweirAIA = NO 47*cdf0e10cSrcweir 48*cdf0e10cSrcweirUser 1 Sub CA 1 Root 2 49*cdf0e10cSrcweir====================== 50*cdf0e10cSrcweirValid end certificate. 51*cdf0e10cSrcweirCRLDP = NO 52*cdf0e10cSrcweirAIA = NO 53*cdf0e10cSrcweir 54*cdf0e10cSrcweir################################################################################ 55*cdf0e10cSrcweir 56*cdf0e10cSrcweirRoot 3 57*cdf0e10cSrcweir====== 58*cdf0e10cSrcweirValid root CA certificate. 59*cdf0e10cSrcweirProvides CRL = YES 60*cdf0e10cSrcweirProvides CRL via HTTP = NO 61*cdf0e10cSrcweirProvides OCSP = NO 62*cdf0e10cSrcweir 63*cdf0e10cSrcweirSub CA 1 Root 3 64*cdf0e10cSrcweir=============== 65*cdf0e10cSrcweirValid intermediate CA certificate. 66*cdf0e10cSrcweirProvides CRL = NO 67*cdf0e10cSrcweirProvides CRL via HTTP = NO 68*cdf0e10cSrcweirProvides OCSP = NO 69*cdf0e10cSrcweirCRLDP = NO 70*cdf0e10cSrcweirAIA = NO 71*cdf0e10cSrcweir 72*cdf0e10cSrcweirUser 1 Sub CA 1 Root 3 73*cdf0e10cSrcweir====================== 74*cdf0e10cSrcweirValid end certificate. 75*cdf0e10cSrcweirCRLDP = NO 76*cdf0e10cSrcweirAIA = NO 77*cdf0e10cSrcweir 78*cdf0e10cSrcweir################################################################################ 79*cdf0e10cSrcweir 80*cdf0e10cSrcweirRoot 4 81*cdf0e10cSrcweir====== 82*cdf0e10cSrcweirValid root CA certificate. 83*cdf0e10cSrcweirProvides CRL = YES 84*cdf0e10cSrcweirProvides CRL via HTTP = NO 85*cdf0e10cSrcweirProvides OCSP = NO 86*cdf0e10cSrcweir 87*cdf0e10cSrcweirRevoked certificates: 88*cdf0e10cSrcweir 89*cdf0e10cSrcweir- Sub CA 2 Root 4 90*cdf0e10cSrcweir 91*cdf0e10cSrcweir 92*cdf0e10cSrcweirSub CA 1 Root 4 93*cdf0e10cSrcweir=============== 94*cdf0e10cSrcweirValid intermediate CA certificate. 95*cdf0e10cSrcweirProvides CRL = YES 96*cdf0e10cSrcweirProvides CRL via HTTP = NO 97*cdf0e10cSrcweirProvides OCSP = NO 98*cdf0e10cSrcweirCRLDP = NO 99*cdf0e10cSrcweirAIA = NO 100*cdf0e10cSrcweir 101*cdf0e10cSrcweirRevoked certificates: 102*cdf0e10cSrcweir 103*cdf0e10cSrcweir- User 2 Sub CA 1 Root 4 104*cdf0e10cSrcweir 105*cdf0e10cSrcweir 106*cdf0e10cSrcweirUser 1 Sub CA 1 Root 4 107*cdf0e10cSrcweir====================== 108*cdf0e10cSrcweirValid end certificate. 109*cdf0e10cSrcweirCRLDP = NO 110*cdf0e10cSrcweirAIA = NO 111*cdf0e10cSrcweir 112*cdf0e10cSrcweirUser 2 Sub CA 1 Root 4 113*cdf0e10cSrcweir====================== 114*cdf0e10cSrcweirRevoked end certificate. 115*cdf0e10cSrcweirCRLDP = NO 116*cdf0e10cSrcweirAIA = NO 117*cdf0e10cSrcweir 118*cdf0e10cSrcweirSub CA 2 Root 4 119*cdf0e10cSrcweir=============== 120*cdf0e10cSrcweirRevoked intermediate CA certificate. Reason = keyCompromise 121*cdf0e10cSrcweirProvides CRL = YES 122*cdf0e10cSrcweirProvides CRL via HTTP = NO 123*cdf0e10cSrcweirProvides OCSP = NO 124*cdf0e10cSrcweirCRLDP = NO 125*cdf0e10cSrcweirAIA = NO 126*cdf0e10cSrcweir 127*cdf0e10cSrcweirRevoked certificates: 128*cdf0e10cSrcweir 129*cdf0e10cSrcweir- User 2 Sub CA 2 Root 4 130*cdf0e10cSrcweir 131*cdf0e10cSrcweirUser 1 Sub CA 2 Root 4 132*cdf0e10cSrcweir====================== 133*cdf0e10cSrcweirValid end certificate. Issuer is revoked. 134*cdf0e10cSrcweirCRLDP = NO 135*cdf0e10cSrcweirAIA = NO 136*cdf0e10cSrcweir 137*cdf0e10cSrcweirUser 2 Sub CA 2 Root 4 138*cdf0e10cSrcweir====================== 139*cdf0e10cSrcweirRevoked end certificate. Reason = keyCompromise. Issuer is revoked. 140*cdf0e10cSrcweirCRLDP = NO 141*cdf0e10cSrcweirAIA = NO 142*cdf0e10cSrcweir 143*cdf0e10cSrcweir################################################################################ 144*cdf0e10cSrcweir 145*cdf0e10cSrcweirRoot 5 146*cdf0e10cSrcweir====== 147*cdf0e10cSrcweirValid root CA certificate. 148*cdf0e10cSrcweirProvides CRL = NO 149*cdf0e10cSrcweirProvides CRL via HTTP = NO 150*cdf0e10cSrcweirProvides OCSP = NO 151*cdf0e10cSrcweir 152*cdf0e10cSrcweirSub CA 1 Root 5 153*cdf0e10cSrcweir=============== 154*cdf0e10cSrcweirValid intermediate CA certificate. 155*cdf0e10cSrcweirProvides CRL = NO 156*cdf0e10cSrcweirProvides CRL via HTTP = YES 157*cdf0e10cSrcweirProvides OCSP = NO 158*cdf0e10cSrcweirCRLDP = URL=http://localhost:8901/demoCA/crl/Root_5.crl 159*cdf0e10cSrcweirAIA = NO 160*cdf0e10cSrcweir 161*cdf0e10cSrcweirUser 1 Sub CA 1 Root 5 162*cdf0e10cSrcweir====================== 163*cdf0e10cSrcweirValid end certificate. 164*cdf0e10cSrcweirCRLDP = URL=http://localhost:8902/demoCA/crl/Sub_CA_1_Root_5.crl 165*cdf0e10cSrcweirAIA = NO 166*cdf0e10cSrcweir 167*cdf0e10cSrcweir 168*cdf0e10cSrcweir################################################################################ 169*cdf0e10cSrcweir 170*cdf0e10cSrcweirRoot 6 171*cdf0e10cSrcweir====== 172*cdf0e10cSrcweirValid root CA certificate. 173*cdf0e10cSrcweirProvides CRL = NO 174*cdf0e10cSrcweirProvides CRL via HTTP = YES 175*cdf0e10cSrcweirProvides OCSP = NO 176*cdf0e10cSrcweir 177*cdf0e10cSrcweirSub CA 1 Root 6 178*cdf0e10cSrcweir=============== 179*cdf0e10cSrcweirValid intermediate CA certificate. 180*cdf0e10cSrcweirProvides CRL = NO 181*cdf0e10cSrcweirProvides CRL via HTTP = NO 182*cdf0e10cSrcweirProvides OCSP = NO 183*cdf0e10cSrcweirCRLDP = URL=http://localhost:8901/demoCA/crl/Root_6.crl 184*cdf0e10cSrcweirAIA = NO 185*cdf0e10cSrcweir 186*cdf0e10cSrcweirUser 1 Sub CA 1 Root 6 187*cdf0e10cSrcweir====================== 188*cdf0e10cSrcweirValid end certificate. 189*cdf0e10cSrcweirCRLDP = URL=http://localhost:8902/demoCA/crl/Sub_CA_1_Root_6.crl 190*cdf0e10cSrcweirAIA = NO 191*cdf0e10cSrcweir 192*cdf0e10cSrcweir################################################################################ 193*cdf0e10cSrcweir 194*cdf0e10cSrcweirRoot 7 195*cdf0e10cSrcweir====== 196*cdf0e10cSrcweirValid root CA certificate. 197*cdf0e10cSrcweirProvides CRL = NO 198*cdf0e10cSrcweirProvides CRL via HTTP = YES 199*cdf0e10cSrcweirProvides OCSP = NO 200*cdf0e10cSrcweir 201*cdf0e10cSrcweirRevoked certificates: 202*cdf0e10cSrcweir 203*cdf0e10cSrcweir- Sub CA 2 Root 7 204*cdf0e10cSrcweir 205*cdf0e10cSrcweir 206*cdf0e10cSrcweirSub CA 1 Root 7 207*cdf0e10cSrcweir=============== 208*cdf0e10cSrcweirValid intermediate CA certificate. 209*cdf0e10cSrcweirProvides CRL = NO 210*cdf0e10cSrcweirProvides CRL via HTTP = YES 211*cdf0e10cSrcweirProvides OCSP = NO 212*cdf0e10cSrcweirCRLDP = URL=http://localhost:8901/demoCA/crl/Root_7.crl 213*cdf0e10cSrcweirAIA = NO 214*cdf0e10cSrcweir 215*cdf0e10cSrcweirRevoked certificates: 216*cdf0e10cSrcweir 217*cdf0e10cSrcweir- User 2 Sub CA 1 Root 7 218*cdf0e10cSrcweir 219*cdf0e10cSrcweir 220*cdf0e10cSrcweirUser 1 Sub CA 1 Root 7 221*cdf0e10cSrcweir====================== 222*cdf0e10cSrcweirValid end certificate. 223*cdf0e10cSrcweirCRLDP = URL=http://localhost:8902/demoCA/crl/Sub_CA_1_Root_7.crl 224*cdf0e10cSrcweirAIA = NO 225*cdf0e10cSrcweir 226*cdf0e10cSrcweirUser 2 Sub CA 1 Root 7 227*cdf0e10cSrcweir====================== 228*cdf0e10cSrcweirRevoked end certificate. Reason = CACompromise. 229*cdf0e10cSrcweirCRLDP = URL=http://localhost:8902/demoCA/crl/Sub_CA_1_Root_7.crl 230*cdf0e10cSrcweirAIA = NO 231*cdf0e10cSrcweir 232*cdf0e10cSrcweirSub CA 2 Root 7 233*cdf0e10cSrcweir=============== 234*cdf0e10cSrcweirRevoked intermediate CA certificate. Reason = keyCompromise 235*cdf0e10cSrcweirProvides CRL = NO 236*cdf0e10cSrcweirProvides CRL via HTTP = YES 237*cdf0e10cSrcweirProvides OCSP = NO 238*cdf0e10cSrcweirCRLDP = URL=http://localhost:8901/demoCA/crl/Root_7.crl 239*cdf0e10cSrcweirAIA = NO 240*cdf0e10cSrcweir 241*cdf0e10cSrcweirRevoked certificates: 242*cdf0e10cSrcweir 243*cdf0e10cSrcweir- User 2 Sub CA 2 Root 7 244*cdf0e10cSrcweir 245*cdf0e10cSrcweirUser 1 Sub CA 2 Root 7 246*cdf0e10cSrcweir====================== 247*cdf0e10cSrcweirValid end certificate. Issuer is revoked. 248*cdf0e10cSrcweirCRLDP = URL=http://localhost:8902/demoCA/crl/Sub_CA_2_Root_7.crl 249*cdf0e10cSrcweirAIA = NO 250*cdf0e10cSrcweir 251*cdf0e10cSrcweirUser 2 Sub CA 2 Root 7 252*cdf0e10cSrcweir====================== 253*cdf0e10cSrcweirRevoked end certificate. Reason = CACompromise. Issuer is revoked. 254*cdf0e10cSrcweirCRLDP = URL=http://localhost:8902/demoCA/crl/Sub_CA_2_Root_7.crl 255*cdf0e10cSrcweirAIA = NO 256*cdf0e10cSrcweir 257*cdf0e10cSrcweir################################################################################ 258*cdf0e10cSrcweir 259*cdf0e10cSrcweirRoot 8 260*cdf0e10cSrcweir====== 261*cdf0e10cSrcweirValid root CA certificate. 262*cdf0e10cSrcweirProvides CRL = NO 263*cdf0e10cSrcweirProvides CRL via HTTP = NO 264*cdf0e10cSrcweirProvides OCSP = YES 265*cdf0e10cSrcweir 266*cdf0e10cSrcweirRevoked certificates: 267*cdf0e10cSrcweir 268*cdf0e10cSrcweir- Sub CA 2 Root 8 269*cdf0e10cSrcweir 270*cdf0e10cSrcweir 271*cdf0e10cSrcweirSub CA 1 Root 8 272*cdf0e10cSrcweir=============== 273*cdf0e10cSrcweirValid intermediate CA certificate. 274*cdf0e10cSrcweirProvides CRL = NO 275*cdf0e10cSrcweirProvides CRL via HTTP = NO 276*cdf0e10cSrcweirProvides OCSP = YES 277*cdf0e10cSrcweirCRLDP = 278*cdf0e10cSrcweirAIA = OCSP;URI:http://localhost:8888 279*cdf0e10cSrcweir 280*cdf0e10cSrcweirRevoked certificates: 281*cdf0e10cSrcweir 282*cdf0e10cSrcweir- User 2 Sub CA 1 Root 8 283*cdf0e10cSrcweir 284*cdf0e10cSrcweir 285*cdf0e10cSrcweirUser 1 Sub CA 1 Root 8 286*cdf0e10cSrcweir====================== 287*cdf0e10cSrcweirValid end certificate. 288*cdf0e10cSrcweirCRLDP = NO 289*cdf0e10cSrcweirAIA = OCSP;URI:http://localhost:8889 290*cdf0e10cSrcweir 291*cdf0e10cSrcweirUser 2 Sub CA 1 Root 8 292*cdf0e10cSrcweir====================== 293*cdf0e10cSrcweirRevoked end certificate. Reason = superseded. 294*cdf0e10cSrcweirCRLDP = NO 295*cdf0e10cSrcweirAIA = OCSP;URI:http://localhost:8889 296*cdf0e10cSrcweir 297*cdf0e10cSrcweirSub CA 2 Root 8 298*cdf0e10cSrcweir=============== 299*cdf0e10cSrcweirRevoked intermediate CA certificate. Reason = superseded. 300*cdf0e10cSrcweirProvides CRL = NO 301*cdf0e10cSrcweirProvides CRL via HTTP = NO 302*cdf0e10cSrcweirProvides OCSP = YES 303*cdf0e10cSrcweirCRLDP = NO 304*cdf0e10cSrcweirAIA = OCSP;URI:http://localhost:8888 305*cdf0e10cSrcweir 306*cdf0e10cSrcweirRevoked certificates: 307*cdf0e10cSrcweir 308*cdf0e10cSrcweir- User 2 Sub CA 2 Root 8 309*cdf0e10cSrcweir 310*cdf0e10cSrcweirUser 1 Sub CA 2 Root 8 311*cdf0e10cSrcweir====================== 312*cdf0e10cSrcweirValid end certificate. Issuer is revoked. 313*cdf0e10cSrcweirCRLDP = NO 314*cdf0e10cSrcweirAIA = OCSP;URI:http://localhost:8889 315*cdf0e10cSrcweir 316*cdf0e10cSrcweirUser 2 Sub CA 2 Root 8 317*cdf0e10cSrcweir====================== 318*cdf0e10cSrcweirRevoked end certificate. Reason = superseded. Issuer is revoked. 319*cdf0e10cSrcweirCRLDP = NO 320*cdf0e10cSrcweirAIA = OCSP;URI:http://localhost:8889 321*cdf0e10cSrcweir 322*cdf0e10cSrcweir################################################################################ 323*cdf0e10cSrcweir 324*cdf0e10cSrcweirRoot 9 325*cdf0e10cSrcweir====== 326*cdf0e10cSrcweirValid root CA certificate. (Not installed.) 327*cdf0e10cSrcweirProvides CRL = YES 328*cdf0e10cSrcweirProvides CRL via HTTP = NO 329*cdf0e10cSrcweirProvides OCSP = NO 330*cdf0e10cSrcweir 331*cdf0e10cSrcweirSub CA 1 Root 9 332*cdf0e10cSrcweir=============== 333*cdf0e10cSrcweirValid intermediate CA certificate. 334*cdf0e10cSrcweirProvides CRL = YES 335*cdf0e10cSrcweirProvides CRL via HTTP = NO 336*cdf0e10cSrcweirProvides OCSP = NO 337*cdf0e10cSrcweirCRLDP = NO 338*cdf0e10cSrcweirAIA = NO 339*cdf0e10cSrcweir 340*cdf0e10cSrcweirUser 1 Sub CA 1 Root 9 341*cdf0e10cSrcweir====================== 342*cdf0e10cSrcweirValid end certificate. 343*cdf0e10cSrcweirCRLDP = NO 344*cdf0e10cSrcweirAIA = NO 345*cdf0e10cSrcweir 346*cdf0e10cSrcweir################################################################################ 347*cdf0e10cSrcweir 348*cdf0e10cSrcweirRoot 10 349*cdf0e10cSrcweir====== 350*cdf0e10cSrcweirValid root CA certificate. 351*cdf0e10cSrcweirProvides CRL = YES 352*cdf0e10cSrcweirProvides CRL via HTTP = NO 353*cdf0e10cSrcweirProvides OCSP = NO 354*cdf0e10cSrcweir 355*cdf0e10cSrcweirSub CA 1 Root 10 356*cdf0e10cSrcweir=============== 357*cdf0e10cSrcweirValid intermediate CA certificate. (Not installed.) 358*cdf0e10cSrcweirProvides CRL = NO 359*cdf0e10cSrcweirProvides CRL via HTTP = YES 360*cdf0e10cSrcweirProvides OCSP = NO 361*cdf0e10cSrcweirCRLDP = NO 362*cdf0e10cSrcweirAIA = NO 363*cdf0e10cSrcweir 364*cdf0e10cSrcweirUser 1 Sub CA 1 Root 10 365*cdf0e10cSrcweir====================== 366*cdf0e10cSrcweirValid end certificate. 367*cdf0e10cSrcweirCRLDP = URI:http://localhost:8902/demoCA/crl/Sub_CA_1_Root_10.crl 368*cdf0e10cSrcweirAIA = caIssuers;URI:http://localhost:8910/demoCA/Sub_CA_1_Root_10.crt 369*cdf0e10cSrcweir 370*cdf0e10cSrcweir################################################################################ 371*cdf0e10cSrcweir 372*cdf0e10cSrcweirRoot 11 373*cdf0e10cSrcweir====== 374*cdf0e10cSrcweirValid root CA certificate. 375*cdf0e10cSrcweirProvides CRL = YES 376*cdf0e10cSrcweirProvides CRL via HTTP = NO 377*cdf0e10cSrcweirProvides OCSP = NO 378*cdf0e10cSrcweir 379*cdf0e10cSrcweirUser x Root 11 380*cdf0e10cSrcweir====================== 381*cdf0e10cSrcweirAll certificate issues by Root 11 are valid end certificate. Currently there are 382*cdf0e10cSrcweir31 certificates. 383*cdf0e10cSrcweir 384