Regenerate the test certificates.

net/data/ssl/certificates/name_constraint_good.pem

 -----BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDD5m1zsjUwajot
-NE67oL3Ln1Gj5dOIy85u4iS4bA29+3VCpDpFSb8q+atKgK4VM4H41gZ4ilk6T4Nw
-bh0z9PDQBIH8s5Yd0Xkqf3Ji0SDRsqBn+kQ2BXKHjup34lQrCgJ2BPoqle9Aj+Jd
-Z2mjnCB2C5E8it8BYziraCdsXLC8wRBDoWFi6laPMuEd910uTaav4/MZ3y6SBJLm
-+Q0URXm5d5msqK7KuAVlgYDdnzS1iRNiGH2fPU/NHw1NMsJyM5b3MEwu72YDzmxS
-9QTpAp5vVPxKbMIhGqkVZpcfEVkB4FMZYueAJtr761dUhzZSSGoB3/D54cghc6ly
-9HySHvFDAgMBAAECggEAfp4WClyZwlQ2i/cuGFm5sr2j7/JhOh64q7ShFU5Jx4ya
-6trpCtWyqN08mGf5nJxxGluDTS/moii4hNe3KljbuSfguGt+0IEO9qfvT+1pcAAr
-a2k34068CuAVrizsR/EtTAjFhPbp7+nP3p0zi1sjJAkv81iy8NunyioEqSZz2Vsw
-ngPFuJeytOgeczoE69yzP1L0BaM46jOKXezXahC31lwtG+U5tLvElU0b/To/7GTg
-+u5qnsJ87wHYkOctXvqH+L1JeMkc7RWCo0h4Kbk3ur1kDokjqUV4FGQSaMyIy0PC
-ndk9WZhUV03v+Lsy3gzBM8261HOiTSMRz/+KrYqAOQKBgQD6ET0Hm11FIUFSeM/I
-Dbxb41oN4ODl4YUgGk/9jPX8/ztvrGddh3VGWD4KUVNlWLioBX/t7FH5paGtd6tg
-ZG8X3n48DaJ5h4u95ulAzcVjrkF4aNahy4aMmofdpe4S3+7HwlBcfIocO9WpAtL0
-pzFjlXivLQgUQow67tbG2dYrPQKBgQDIjDWWSqn6kB1zFyI6Hh9HhfFAKCRvCIzQ
-OvqIOCtExP4U4mE0rUY7RWkFrRTDoMmYCwRuCohL1C4p6i/2AwK1mhS8OgPji7YV
-zgYZuw2lSmp1lqzRmiLaOZxLcEKWlHQ1C9Sq606T7YAhgXi3tDfQ53gb1uFDvt1h
-rE3AkU1WfwKBgHZ2EBk4aljDRjSRcqzshNxquVB1xVRhHzV0AYy1aBpvtnJSk6zk
-7JNkXg95My6BdwhxgobtOnAvHIYWeKLzMQV3qwk71EoKAhL1/m1qjSWJeQ5Xa8W9
-qoGU+uPvJPbgCjerP3JwtORnG/Iymki3o1fviPpDNN6UH+YTGr+cli5pAoGBAKnT
-4gU1kR/4LpgpvPhOTdq5mITl+YR1Txl++G2mcy23TBrPYdXD7jd/HeKKoYzQeibh
-HY06KhVcxwMDqD3CaubyZiDHWEe3Jijs4MmlV3bjv6d4Qzz0NBNsuehAVoNBj+7j
-5+IdhdtLQjgddebLHIExosqgev5tgPeXe/hYk49tAoGBALENmfF8ORreFf+aOd4+
-w/CZB2VaN4p0N6I+w2HPRRJO6Rhk0Pe6NtPkxbUS0x/cm+WOpvSbntH1DOjigL8e
-mo+n2Ym+lrtYmEtB/M2C1k29pwaGYMfEIP3URUuYNEpWvTs6AOY7Sp5QN/X/v9ES
-76pTvCiginWRyEeR+6vrDGM8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 -----END PRIVATE KEY-----
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 4 (0x4)
+        Serial Number: 5 (0x5)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Test Root CA
         Validity
-            Not Before: Dec 21 20:35:47 2015 GMT
-            Not After : Dec 18 20:35:47 2025 GMT
+            Not Before: Dec 30 23:22:04 2015 GMT
+            Not After : Dec 27 23:22:04 2025 GMT
         Subject: CN=Leaf Certificate
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:c3:e6:6d:73:b2:35:30:6a:3a:2d:34:4e:bb:a0:
-                    bd:cb:9f:51:a3:e5:d3:88:cb:ce:6e:e2:24:b8:6c:
-                    0d:bd:fb:75:42:a4:3a:45:49:bf:2a:f9:ab:4a:80:
-                    ae:15:33:81:f8:d6:06:78:8a:59:3a:4f:83:70:6e:
-                    1d:33:f4:f0:d0:04:81:fc:b3:96:1d:d1:79:2a:7f:
-                    72:62:d1:20:d1:b2:a0:67:fa:44:36:05:72:87:8e:
-                    ea:77:e2:54:2b:0a:02:76:04:fa:2a:95:ef:40:8f:
-                    e2:5d:67:69:a3:9c:20:76:0b:91:3c:8a:df:01:63:
-                    38:ab:68:27:6c:5c:b0:bc:c1:10:43:a1:61:62:ea:
-                    56:8f:32:e1:1d:f7:5d:2e:4d:a6:af:e3:f3:19:df:
-                    2e:92:04:92:e6:f9:0d:14:45:79:b9:77:99:ac:a8:
-                    ae:ca:b8:05:65:81:80:dd:9f:34:b5:89:13:62:18:
-                    7d:9f:3d:4f:cd:1f:0d:4d:32:c2:72:33:96:f7:30:
-                    4c:2e:ef:66:03:ce:6c:52:f5:04:e9:02:9e:6f:54:
-                    fc:4a:6c:c2:21:1a:a9:15:66:97:1f:11:59:01:e0:
-                    53:19:62:e7:80:26:da:fb:eb:57:54:87:36:52:48:
-                    6a:01:df:f0:f9:e1:c8:21:73:a9:72:f4:7c:92:1e:
-                    f1:43
+                    00:dd:8d:bc:d6:32:18:60:cb:aa:0c:7f:57:75:25:
+                    24:86:1b:90:32:fe:fe:4c:24:e8:e1:dc:1d:fa:15:
+                    12:2a:bb:e6:57:1f:e0:45:b6:da:5b:df:8c:ce:71:
+                    a8:13:ed:37:2f:3d:f1:cf:d2:94:15:d4:8d:0d:d1:
+                    98:f0:7c:21:19:c0:2c:30:1e:b1:55:6c:63:3b:55:
+                    03:6a:f3:46:ff:eb:25:d5:cb:57:ab:6c:72:56:50:
+                    a5:ff:95:03:04:9a:93:4f:e4:82:69:6e:c4:f9:a8:
+                    e6:09:f3:45:4f:c4:f3:72:5c:b0:95:64:79:f5:bc:
+                    aa:1e:f0:98:07:49:8a:f5:4b:28:b1:7b:74:82:c2:
+                    6f:c0:e9:25:6d:d5:7c:90:eb:e2:84:5d:12:01:75:
+                    a3:5d:55:14:1c:de:33:d0:e3:d6:fa:87:fd:fc:21:
+                    0a:b4:d5:7b:80:2e:bd:a5:6e:b9:b5:02:53:ca:54:
+                    b4:9c:cc:0d:1e:4b:64:8f:85:c2:c6:7a:07:ce:70:
+                    a6:4e:c6:23:0c:9a:3f:cb:6b:18:ea:b7:26:77:2a:
+                    0f:3d:55:7a:57:2f:3b:ca:92:e6:40:93:bd:0b:b4:
+                    2d:41:5d:85:4d:69:92:19:34:51:d5:8a:76:2e:fe:
+                    28:9f:c2:af:38:13:2d:2e:ec:64:e0:1f:fe:df:a1:
+                    a0:d5
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
                 CA:FALSE
             X509v3 Subject Key Identifier: 
-                64:AD:F5:F3:4B:2D:70:3A:13:B7:0D:D6:8F:9F:82:37:C3:58:73:A8
+                89:8A:47:4F:A0:9A:F3:C6:DC:91:41:44:49:A1:3E:2F:52:41:08:E7
             X509v3 Authority Key Identifier: 
-                keyid:BC:F7:30:D1:3C:C0:F2:79:FA:EF:9F:C9:6C:5C:93:F3:8A:68:AB:83
+                keyid:B8:84:DD:BC:AE:0A:A6:29:DF:01:C1:16:D3:78:E3:06:C7:FA:34:08
 
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
             X509v3 Subject Alternative Name: 
                 DNS:test.ExAmPlE.CoM, DNS:example.notarealtld, DNS:*.test2.ExAmPlE.CoM, DNS:*.example2.notarealtld
     Signature Algorithm: sha256WithRSAEncryption
-         22:eb:19:0b:53:ae:ac:05:af:4f:70:28:c5:ae:8b:c4:6e:d7:
-         2a:7a:58:a4:44:7b:46:be:6e:01:6c:b6:d0:15:48:51:10:c7:
-         27:ae:8a:de:52:82:91:70:36:dd:d7:55:ac:52:b2:c8:33:53:
-         fc:a1:e3:c1:80:6b:e6:46:fb:9c:0d:09:bf:91:c2:ee:25:77:
-         39:69:7c:d2:f1:95:f0:2d:1e:fd:52:eb:1a:38:60:34:db:f4:
-         43:a2:18:a9:b7:25:14:53:1a:1f:42:97:ab:25:7c:bb:25:88:
-         56:fe:ac:d3:6f:5c:fe:90:e4:99:83:91:74:c0:dc:bb:a2:54:
-         91:16:dd:d9:12:a5:22:6f:7a:1e:18:ab:54:63:18:4d:79:7c:
-         cb:16:78:04:2c:4d:32:13:2c:21:30:c9:22:b3:c7:41:7d:85:
-         0f:9f:91:13:88:dd:b6:35:2e:de:a4:b7:72:d3:a0:f1:64:1c:
-         30:b9:65:9e:4f:f3:5b:2b:7d:42:7b:7c:21:54:bf:c2:b0:02:
-         2f:4e:10:2d:40:11:08:70:36:5c:66:e9:b6:3b:6a:9f:dd:7f:
-         f9:42:04:d0:8c:3c:93:54:5d:9f:d2:34:c4:67:d7:7c:ee:3f:
-         22:4f:71:86:af:b1:79:6f:00:b4:65:60:58:ed:ef:16:cd:e5:
-         97:e0:b8:49
+         62:02:43:45:51:3f:b2:60:87:d6:5a:ac:50:3d:80:83:75:23:
+         b3:96:e1:f9:6b:55:88:37:28:1a:94:b1:67:b5:11:7d:84:ce:
+         c4:cb:f1:60:9c:72:80:c7:1a:0c:d8:7b:cd:33:6c:8a:df:4d:
+         70:5c:10:42:58:08:01:5c:4f:81:78:b2:a3:18:72:e8:e1:97:
+         73:8f:03:34:3d:32:a5:b3:79:de:43:36:2e:31:38:db:48:62:
+         50:4b:5c:93:b3:24:f4:24:a0:8d:4d:d1:d8:03:e9:ba:c2:f1:
+         f2:3b:89:16:08:36:f4:76:21:9c:24:c4:22:0b:36:3e:29:3c:
+         30:5a:4d:96:9d:44:7b:df:5c:76:c6:c1:39:50:f9:3a:4a:4a:
+         e4:a0:ca:54:c4:65:7b:af:f7:09:51:38:6c:ee:1f:a7:79:45:
+         bb:0c:56:6b:25:63:09:e5:70:83:cb:b9:f1:71:db:9b:bd:19:
+         7a:de:2f:47:66:20:aa:dd:fd:09:f3:e9:70:9c:f8:51:2f:be:
+         a9:d0:50:be:5a:b9:83:86:be:83:09:20:41:9f:4c:ef:16:71:
+         d8:3c:ee:75:2e:42:d1:20:42:d1:24:8f:49:df:1e:34:6b:d5:
+         ec:62:68:28:7b:b2:66:76:b9:fb:dd:c6:22:a3:df:f5:7b:c4:
+         ad:ce:ab:39
 -----BEGIN CERTIFICATE-----
-MIIDfTCCAmWgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxUZXN0
-IFJvb3QgQ0EwHhcNMTUxMjIxMjAzNTQ3WhcNMjUxMjE4MjAzNTQ3WjAbMRkwFwYD
+MIIDfTCCAmWgAwIBAgIBBTANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxUZXN0
+IFJvb3QgQ0EwHhcNMTUxMjMwMjMyMjA0WhcNMjUxMjI3MjMyMjA0WjAbMRkwFwYD
 VQQDExBMZWFmIENlcnRpZmljYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
-CgKCAQEAw+Ztc7I1MGo6LTROu6C9y59Ro+XTiMvObuIkuGwNvft1QqQ6RUm/Kvmr
-SoCuFTOB+NYGeIpZOk+DcG4dM/Tw0ASB/LOWHdF5Kn9yYtEg0bKgZ/pENgVyh47q
-d+JUKwoCdgT6KpXvQI/iXWdpo5wgdguRPIrfAWM4q2gnbFywvMEQQ6FhYupWjzLh
-HfddLk2mr+PzGd8ukgSS5vkNFEV5uXeZrKiuyrgFZYGA3Z80tYkTYhh9nz1PzR8N
-TTLCcjOW9zBMLu9mA85sUvUE6QKeb1T8SmzCIRqpFWaXHxFZAeBTGWLngCba++tX
-VIc2UkhqAd/w+eHIIXOpcvR8kh7xQwIDAQABo4HPMIHMMAwGA1UdEwEB/wQCMAAw
-HQYDVR0OBBYEFGSt9fNLLXA6E7cN1o+fgjfDWHOoMB8GA1UdIwQYMBaAFLz3MNE8
-wPJ5+u+fyWxck/OKaKuDMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBd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 BgNVHREEVjBUghB0ZXN0LkV4QW1QbEUuQ29NghNleGFtcGxlLm5vdGFyZWFsdGxk
 ghMqLnRlc3QyLkV4QW1QbEUuQ29NghYqLmV4YW1wbGUyLm5vdGFyZWFsdGxkMA0G
-CSqGSIb3DQEBCwUAA4IBAQAi6xkLU66sBa9PcCjFrovEbtcqelikRHtGvm4BbLbQ
-FUhREMcnroreUoKRcDbd11WsUrLIM1P8oePBgGvmRvucDQm/kcLuJXc5aXzS8ZXw
-LR79UusaOGA02/RDohiptyUUUxofQperJXy7JYhW/qzTb1z+kOSZg5F0wNy7olSR
-Ft3ZEqUib3oeGKtUYxhNeXzLFngELE0yEywhMMkis8dBfYUPn5ETiN22NS7epLdy
-06DxZBwwuWWeT/NbK31Ce3whVL/CsAIvThAtQBEIcDZcZum2O2qf3X/5QgTQjDyT
-VF2f0jTEZ9d87j8iT3GGr7F5bwC0ZWBY7e8WzeWX4LhJ
+CSqGSIb3DQEBCwUAA4IBAQBiAkNFUT+yYIfWWqxQPYCDdSOzluH5a1WINygalLFn
+tRF9hM7Ey/FgnHKAxxoM2HvNM2yK301wXBBCWAgBXE+BeLKjGHLo4ZdzjwM0PTKl
+s3neQzYuMTjbSGJQS1yTsyT0JKCNTdHYA+m6wvHyO4kWCDb0diGcJMQiCzY+KTww
+Wk2WnUR731x2xsE5UPk6SkrkoMpUxGV7r/cJUThs7h+neUW7DFZrJWMJ5XCDy7nx
+cdubvRl63i9HZiCq3f0J8+lwnPhRL76p0FC+WrmDhr6DCSBBn0zvFnHYPO51LkLR
+IELRJI9J3x40a9XsYmgoe7Jmdrn73cYio9/1e8Stzqs5
 -----END CERTIFICATE-----