net/data/ssl/certificates/satveda.pem - Issue 20628006: Reject certificates that are valid for too long.

Unified Diff: net/data/ssl/certificates/satveda.pem

Issue 20628006: Reject certificates that are valid for too long. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src

Patch Set: Don't use arithmetic expressions in shell script. Created 6 years, 1 month ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View side-by-side diff with in-line comments

Download patch

Index: net/data/ssl/certificates/satveda.pem

diff --git a/net/data/ssl/certificates/satveda.pem b/net/data/ssl/certificates/satveda.pem

deleted file mode 100644

index 4f79703d8c02580fb8c31d5dc547fc114ac0b764..0000000000000000000000000000000000000000

--- a/net/data/ssl/certificates/satveda.pem

+++ /dev/null

@@ -1,207 +0,0 @@

-Certificate:

- Data:

- Version: 3 (0x2)

- Serial Number: 21120020890699950 (0x4b088c0ed6c8ae)

- Signature Algorithm: sha1WithRSAEncryption

- Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certificates.godaddy.com/repository, CN=Go Daddy Secure Certification Authority/serialNumber=07969287

- Validity

- Not Before: Mar 9 07:19:24 2013 GMT

- Not After : May 24 09:39:06 2019 GMT

- Subject: OU=Domain Control Validated, CN=www.satveda.com

- Subject Public Key Info:

- Public Key Algorithm: rsaEncryption

- Public-Key: (2048 bit)

- Modulus:

- 00:bb:e0:ea:82:8e:50:bf:ba:94:89:e3:f4:dc:b4:

- a1:06:91:c1:46:bc:33:37:74:e0:c6:71:e7:f0:09:

- ec:d8:8e:ac:48:82:3f:b6:b4:49:80:98:04:04:61:

- f7:ea:d2:ad:23:ed:2b:28:54:f2:14:e2:f4:84:88:

- 9c:4f:d1:b1:1b:52:98:a6:3e:85:e3:eb:22:df:09:

- 86:ff:14:9c:41:46:dd:13:ed:d9:f0:5d:a5:fe:7f:

- 6f:31:6b:a0:50:a5:f2:9a:ba:ea:8c:77:4d:1c:64:

- 82:7a:ea:f4:54:5b:f3:92:81:5e:5c:b1:04:da:c1:

- d6:72:7d:e1:e5:ec:ad:53:ae:3d:14:21:44:2e:67:

- f3:a2:c9:7d:9e:0b:98:4d:89:fc:c8:1e:a6:00:45:

- 8b:b6:a7:b9:dc:5e:5a:ff:0c:52:c6:92:7e:60:08:

- d4:8d:34:6c:00:98:bc:43:e9:7b:e1:92:0b:f5:81:

- f0:48:09:18:5a:35:8a:e2:74:f2:9d:da:48:b0:7d:

- 02:f8:a4:2b:5e:a0:22:cf:a0:15:9f:fb:ca:4d:8c:

- f3:26:cb:62:74:a3:04:6e:e2:38:aa:0a:19:42:e8:

- e3:57:a5:d3:97:64:38:31:89:3e:af:93:af:d6:e3:

- 60:c1:c3:6a:9c:58:da:16:60:c7:78:01:cf:dc:7c:

- e1:11

- Exponent: 65537 (0x10001)

- X509v3 extensions:

- X509v3 Basic Constraints: critical

- CA:FALSE

- X509v3 Extended Key Usage:

- TLS Web Server Authentication, TLS Web Client Authentication

- X509v3 Key Usage: critical

- Digital Signature, Key Encipherment

- X509v3 CRL Distribution Points:

- Full Name:

- URI:http://crl.godaddy.com/gds1-87.crl

- X509v3 Certificate Policies:

- Policy: 2.16.840.1.114413.1.7.23.1

- CPS: http://certificates.godaddy.com/repository/

- Authority Information Access:

- OCSP - URI:http://ocsp.godaddy.com/

- CA Issuers - URI:http://certificates.godaddy.com/repository/gd_intermediate.crt

- X509v3 Authority Key Identifier:

- keyid:FD:AC:61:32:93:6C:45:D6:E2:EE:85:5F:9A:BA:E7:76:99:68:CC:E7

- X509v3 Subject Alternative Name:

- DNS:www.satveda.com, DNS:satveda.com

- X509v3 Subject Key Identifier:

- A7:39:2E:DC:0F:22:D5:D6:C6:B1:3B:35:65:3D:0D:B1:75:5B:F7:69

- Signature Algorithm: sha1WithRSAEncryption

- 15:a9:fd:28:f6:cd:d1:f0:2d:d7:1c:df:b5:48:5c:c5:2c:44:

- 59:ad:ba:3d:bc:08:30:6f:50:a4:9f:0b:05:28:d7:5e:62:87:

- f9:5d:24:c0:b1:ce:a1:d2:eb:aa:77:9b:01:21:1b:56:dd:e5:

- 32:18:38:44:24:60:76:14:4d:4a:6a:d2:37:8b:64:45:5a:ba:

- 4f:bf:b0:33:dd:f6:59:dc:fd:47:a9:3b:4f:29:65:3d:a4:0e:

- c7:89:22:48:e7:6b:e4:38:b7:d4:e2:27:1f:22:9c:99:b0:bd:

- b4:59:6d:8d:53:30:fa:28:ef:6c:66:b8:af:6c:9b:93:52:72:

- 37:b3:2f:c1:bd:73:22:b4:2e:fa:08:fd:0c:95:89:21:eb:01:

- 34:82:18:15:12:3c:a1:2c:d9:fc:f3:f9:48:1f:09:44:18:b8:

- 7a:5b:57:ea:10:62:59:90:8c:dc:6f:52:f2:2a:a2:da:fc:2d:

- b4:8a:fb:11:cd:60:da:f9:dd:31:08:31:04:11:81:4e:4b:8a:

- 81:40:70:5e:00:99:87:cb:d6:e0:d8:85:fe:4a:2e:97:99:a0:

- 3d:6e:6f:26:a9:4d:e6:97:cb:c5:09:ef:49:24:c7:96:27:7e:

- bf:e4:cb:02:f8:00:63:43:7f:ca:05:75:d2:89:7a:f0:25:52:

- ac:47:fb:e6

------BEGIN CERTIFICATE-----

-MIIFRTCCBC2gAwIBAgIHSwiMDtbIrjANBgkqhkiG9w0BAQUFADCByjELMAkGA1UE

-BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAY

-BgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMTMwMQYDVQQLEypodHRwOi8vY2VydGlm

-aWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkxMDAuBgNVBAMTJ0dvIERhZGR5

-IFNlY3VyZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTERMA8GA1UEBRMIMDc5Njky

-ODcwHhcNMTMwMzA5MDcxOTI0WhcNMTkwNTI0MDkzOTA2WjA9MSEwHwYDVQQLExhE

-b21haW4gQ29udHJvbCBWYWxpZGF0ZWQxGDAWBgNVBAMTD3d3dy5zYXR2ZWRhLmNv

-bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALvg6oKOUL+6lInj9Ny0

-oQaRwUa8Mzd04MZx5/AJ7NiOrEiCP7a0SYCYBARh9+rSrSPtKyhU8hTi9ISInE/R

-sRtSmKY+hePrIt8Jhv8UnEFG3RPt2fBdpf5/bzFroFCl8pq66ox3TRxkgnrq9FRb

-85KBXlyxBNrB1nJ94eXsrVOuPRQhRC5n86LJfZ4LmE2J/MgepgBFi7anudxeWv8M

-UsaSfmAI1I00bACYvEPpe+GSC/WB8EgJGFo1iuJ08p3aSLB9AvikK16gIs+gFZ/7

-yk2M8ybLYnSjBG7iOKoKGULo41el05dkODGJPq+Tr9bjYMHDapxY2hZgx3gBz9x8

-4RECAwEAAaOCAbowggG2MA8GA1UdEwEB/wQFMAMBAQAwHQYDVR0lBBYwFAYIKwYB

-BQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDAzBgNVHR8ELDAqMCigJqAk

-hiJodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkczEtODcuY3JsMFMGA1UdIARMMEow

-SAYLYIZIAYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRpZmljYXRl

-cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzCBgAYIKwYBBQUHAQEEdDByMCQGCCsG

-AQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8wSgYIKwYBBQUHMAKGPmh0

-dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS9nZF9pbnRl

-cm1lZGlhdGUuY3J0MB8GA1UdIwQYMBaAFP2sYTKTbEXW4u6FX5q653aZaMznMCcG

-A1UdEQQgMB6CD3d3dy5zYXR2ZWRhLmNvbYILc2F0dmVkYS5jb20wHQYDVR0OBBYE

-FKc5LtwPItXWxrE7NWU9DbF1W/dpMA0GCSqGSIb3DQEBBQUAA4IBAQAVqf0o9s3R

-8C3XHN+1SFzFLERZrbo9vAgwb1CknwsFKNdeYof5XSTAsc6h0uuqd5sBIRtW3eUy

-GDhEJGB2FE1KatI3i2RFWrpPv7Az3fZZ3P1HqTtPKWU9pA7HiSJI52vkOLfU4icf

-IpyZsL20WW2NUzD6KO9sZrivbJuTUnI3sy/BvXMitC76CP0MlYkh6wE0ghgVEjyh

-LNn88/lIHwlEGLh6W1fqEGJZkIzcb1LyKqLa/C20ivsRzWDa+d0xCDEEEYFOS4qB

-QHBeAJmHy9bg2IX+Si6XmaA9bm8mqU3ml8vFCe9JJMeWJ36/5MsC+ABjQ3/KBXXS

-iXrwJVKsR/vm

------END CERTIFICATE-----

-Certificate:

- Data:

- Version: 3 (0x2)

- Serial Number: 769 (0x301)

- Signature Algorithm: sha1WithRSAEncryption

- Issuer: C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority

- Validity

- Not Before: Nov 16 01:54:37 2006 GMT

- Not After : Nov 16 01:54:37 2026 GMT

- Subject: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certificates.godaddy.com/repository, CN=Go Daddy Secure Certification Authority/serialNumber=07969287

- Subject Public Key Info:

- Public Key Algorithm: rsaEncryption

- Public-Key: (2048 bit)

- Modulus:

- 00:c4:2d:d5:15:8c:9c:26:4c:ec:32:35:eb:5f:b8:

- 59:01:5a:a6:61:81:59:3b:70:63:ab:e3:dc:3d:c7:

- 2a:b8:c9:33:d3:79:e4:3a:ed:3c:30:23:84:8e:b3:

- 30:14:b6:b2:87:c3:3d:95:54:04:9e:df:99:dd:0b:

- 25:1e:21:de:65:29:7e:35:a8:a9:54:eb:f6:f7:32:

- 39:d4:26:55:95:ad:ef:fb:fe:58:86:d7:9e:f4:00:

- 8d:8c:2a:0c:bd:42:04:ce:a7:3f:04:f6:ee:80:f2:

- aa:ef:52:a1:69:66:da:be:1a:ad:5d:da:2c:66:ea:

- 1a:6b:bb:e5:1a:51:4a:00:2f:48:c7:98:75:d8:b9:

- 29:c8:ee:f8:66:6d:0a:9c:b3:f3:fc:78:7c:a2:f8:

- a3:f2:b5:c3:f3:b9:7a:91:c1:a7:e6:25:2e:9c:a8:

- ed:12:65:6e:6a:f6:12:44:53:70:30:95:c3:9c:2b:

- 58:2b:3d:08:74:4a:f2:be:51:b0:bf:87:d0:4c:27:

- 58:6b:b5:35:c5:9d:af:17:31:f8:0b:8f:ee:ad:81:

- 36:05:89:08:98:cf:3a:af:25:87:c0:49:ea:a7:fd:

- 67:f7:45:8e:97:cc:14:39:e2:36:85:b5:7e:1a:37:

- fd:16:f6:71:11:9a:74:30:16:fe:13:94:a3:3f:84:

- 0d:4f

- Exponent: 65537 (0x10001)

- X509v3 extensions:

- X509v3 Subject Key Identifier:

- FD:AC:61:32:93:6C:45:D6:E2:EE:85:5F:9A:BA:E7:76:99:68:CC:E7

- X509v3 Authority Key Identifier:

- keyid:D2:C4:B0:D2:91:D4:4C:11:71:B3:61:CB:3D:A1:FE:DD:A8:6A:D4:E3

- X509v3 Basic Constraints: critical

- CA:TRUE, pathlen:0

- Authority Information Access:

- OCSP - URI:http://ocsp.godaddy.com

- X509v3 CRL Distribution Points:

- Full Name:

- URI:http://certificates.godaddy.com/repository/gdroot.crl

- X509v3 Certificate Policies:

- Policy: X509v3 Any Policy

- CPS: http://certificates.godaddy.com/repository

- X509v3 Key Usage: critical

- Certificate Sign, CRL Sign

- Signature Algorithm: sha1WithRSAEncryption

- d2:86:c0:ec:bd:f9:a1:b6:67:ee:66:0b:a2:06:3a:04:50:8e:

- 15:72:ac:4a:74:95:53:cb:37:cb:44:49:ef:07:90:6b:33:d9:

- 96:f0:94:56:a5:13:30:05:3c:85:32:21:7b:c9:c7:0a:a8:24:

- a4:90:de:46:d3:25:23:14:03:67:c2:10:d6:6f:0f:5d:7b:7a:

- cc:9f:c5:58:2a:c1:c4:9e:21:a8:5a:f3:ac:a4:46:f3:9e:e4:

- 63:cb:2f:90:a4:29:29:01:d9:72:2c:29:df:37:01:27:bc:4f:

- ee:68:d3:21:8f:c0:b3:e4:f5:09:ed:d2:10:aa:53:b4:be:f0:

- cc:59:0b:d6:3b:96:1c:95:24:49:df:ce:ec:fd:a7:48:91:14:

- 45:0e:3a:36:6f:da:45:b3:45:a2:41:c9:d4:d7:44:4e:3e:b9:

- 74:76:d5:a2:13:55:2c:c6:87:a3:b5:99:ac:06:84:87:7f:75:

- 06:fc:bf:14:4c:0e:cc:6e:c4:df:3d:b7:12:71:f4:e8:f1:51:

- 40:22:28:49:e0:1d:4b:87:a8:34:cc:06:a2:dd:12:5a:d1:86:

- 36:64:03:35:6f:6f:77:6e:eb:f2:85:50:98:5e:ab:03:53:ad:

- 91:23:63:1f:16:9c:cd:b9:b2:05:63:3a:e1:f4:68:1b:17:05:

- 35:95:53:ee

------BEGIN CERTIFICATE-----

-MIIE3jCCA8agAwIBAgICAwEwDQYJKoZIhvcNAQEFBQAwYzELMAkGA1UEBhMCVVMx

-ITAfBgNVBAoTGFRoZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28g

-RGFkZHkgQ2xhc3MgMiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNjExMTYw

-MTU0MzdaFw0yNjExMTYwMTU0MzdaMIHKMQswCQYDVQQGEwJVUzEQMA4GA1UECBMH

-QXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEaMBgGA1UEChMRR29EYWRkeS5j

-b20sIEluYy4xMzAxBgNVBAsTKmh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5j

-b20vcmVwb3NpdG9yeTEwMC4GA1UEAxMnR28gRGFkZHkgU2VjdXJlIENlcnRpZmlj

-YXRpb24gQXV0aG9yaXR5MREwDwYDVQQFEwgwNzk2OTI4NzCCASIwDQYJKoZIhvcN

-AQEBBQADggEPADCCAQoCggEBAMQt1RWMnCZM7DI161+4WQFapmGBWTtwY6vj3D3H

-KrjJM9N55DrtPDAjhI6zMBS2sofDPZVUBJ7fmd0LJR4h3mUpfjWoqVTr9vcyOdQm

-VZWt7/v+WIbXnvQAjYwqDL1CBM6nPwT27oDyqu9SoWlm2r4arV3aLGbqGmu75RpR

-SgAvSMeYddi5Kcju+GZtCpyz8/x4fKL4o/K1w/O5epHBp+YlLpyo7RJlbmr2EkRT

-cDCVw5wrWCs9CHRK8r5RsL+H0EwnWGu1NcWdrxcx+AuP7q2BNgWJCJjPOq8lh8BJ

-6qf9Z/dFjpfMFDniNoW1fho3/Rb2cRGadDAW/hOUoz+EDU8CAwEAAaOCATIwggEu

-MB0GA1UdDgQWBBT9rGEyk2xF1uLuhV+auud2mWjM5zAfBgNVHSMEGDAWgBTSxLDS

-kdRMEXGzYcs9of7dqGrU4zASBgNVHRMBAf8ECDAGAQH/AgEAMDMGCCsGAQUFBwEB

-BCcwJTAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZ29kYWRkeS5jb20wRgYDVR0f

-BD8wPTA7oDmgN4Y1aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBv

-c2l0b3J5L2dkcm9vdC5jcmwwSwYDVR0gBEQwQjBABgRVHSAAMDgwNgYIKwYBBQUH

-AgEWKmh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeTAO

-BgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEFBQADggEBANKGwOy9+aG2Z+5mC6IG

-OgRQjhVyrEp0lVPLN8tESe8HkGsz2ZbwlFalEzAFPIUyIXvJxwqoJKSQ3kbTJSMU

-A2fCENZvD117esyfxVgqwcSeIaha86ykRvOe5GPLL5CkKSkB2XIsKd83ASe8T+5o

-0yGPwLPk9Qnt0hCqU7S+8MxZC9Y7lhyVJEnfzuz9p0iRFEUOOjZv2kWzRaJBydTX

-RE4+uXR21aITVSzGh6O1mawGhId/dQb8vxRMDsxuxN89txJx9OjxUUAiKEngHUuH

-qDTMBqLdElrRhjZkAzVvb3du6/KFUJheqwNTrZEjYx8WnM25sgVjOuH0aBsXBTWV

-U+4=

------END CERTIFICATE-----

« net/cert/cert_verify_proc.cc ('K') | « net/data/ssl/certificates/reject_intranet_hosts.pem ('k') | net/data/ssl/certificates/twitter-chain.pem » ('j') | no next file with comments »