net/data/verify_certificate_chain_unittest/expired-root.pem - Issue 2245643004: Support trust anchor constraints, by specifying them as a certificate.

Side by Side Diff: net/data/verify_certificate_chain_unittest/expired-root.pem

Issue 2245643004: Support trust anchor constraints, by specifying them as a certificate. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master

Patch Set: update gypi Created 4 years, 4 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

« no previous file with comments | « net/data/verify_certificate_chain_unittest/expired-constrained-root.pem ('k') | net/data/verify_certificate_chain_unittest/expired-unconstrained-root.pem » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

OLD	NEW
	(Empty)
1 [Created by: generate-expired-root.py]

2

3 Certificate chain with 1 intermediate, where the root certificate is expired

4 (violates validity.notAfter). Verification is expected to succeed as

5 constraints on trust anchors are not enforced..

6

7 Certificate:

8 Data:

9 Version: 3 (0x2)

10 Serial Number: 1 (0x1)

11 Signature Algorithm: sha256WithRSAEncryption

12 Issuer: CN=Intermediate

13 Validity

14 Not Before: Jan 1 12:00:00 2015 GMT

15 Not After : Jan 1 12:00:00 2016 GMT

16 Subject: CN=Target

17 Subject Public Key Info:

18 Public Key Algorithm: rsaEncryption

19 Public-Key: (2048 bit)

20 Modulus:

21 00:b3:fa:1c:ab:da:95:23:00:c5:f7:9d:3e:fa:be:

22 50:46:36:b3:b8:6c:9b:ed:57:22:ae:c1:19:65:f5:

23 53:9b:55:48:bd:9f:59:95:8f:a6:a8:33:25:87:f8:

24 69:be:58:ac:73:1f:aa:5b:0d:8d:ed:65:53:a8:fd:

25 a4:99:92:d7:9f:a2:ce:9d:09:a7:af:65:dd:e7:1c:

26 18:9d:61:6e:3f:05:7c:09:10:03:50:90:03:3a:20:

27 7c:b5:80:f3:16:8b:d8:1e:c9:e4:53:5d:1c:6e:e2:

28 b3:b3:9d:87:fa:2b:47:25:fe:ee:8b:4e:22:35:cc:

29 22:59:94:78:13:57:67:69:ab:99:14:70:94:2c:0e:

30 32:e3:bc:89:b4:e4:b1:09:4b:ae:bd:6d:7e:cd:a8:

31 ff:ee:37:8b:1a:25:5e:ae:21:51:e2:cb:9c:6a:a5:

32 27:23:62:c7:62:89:a1:69:13:c3:03:ec:f9:a7:5a:

33 90:e2:e0:c5:c7:6d:ec:76:f5:76:88:f5:15:1a:4d:

34 00:da:38:51:ea:03:16:a4:90:74:87:6e:ba:23:3a:

35 91:58:a0:94:6c:3c:8c:f1:c6:2f:69:9e:41:1a:50:

36 ea:3b:d1:a6:d2:9b:50:04:63:ca:b7:c1:eb:04:07:

37 89:40:43:07:1e:84:d5:6c:08:01:50:7f:7b:aa:9e:

38 c4:4d

39 Exponent: 65537 (0x10001)

40 X509v3 extensions:

41 X509v3 Subject Key Identifier:

42 BD:E0:2F:8E:DD:4A:65:2F:EE:52:E4:0F:3B:8A:28:80:D6:17:C4:76

43 X509v3 Authority Key Identifier:

44 keyid:A8:9E:04:25:6D:55:C9:D7:11:47:D3:DD:67:71:0E:7E:88:89:49:7 1

45

46 Authority Information Access:

47 CA Issuers - URI:http://url-for-aia/Intermediate.cer

48

49 X509v3 CRL Distribution Points:

50

51 Full Name:

52 URI:http://url-for-crl/Intermediate.crl

53

54 X509v3 Key Usage: critical

55 Digital Signature, Key Encipherment

56 X509v3 Extended Key Usage:

57 TLS Web Server Authentication, TLS Web Client Authentication

58 Signature Algorithm: sha256WithRSAEncryption

59 95:07:d3:f3:57:d3:2d:c3:f9:d5:4a:d4:54:85:1f:25:3d:3c:

60 e8:34:6f:6e:bc:5a:b3:50:fd:4f:b5:cf:87:54:26:7b:ab:4d:

61 5d:28:af:29:d1:24:ad:75:5d:3f:5b:68:63:b3:c0:20:82:8e:

62 c4:7f:58:7c:74:ea:d8:0d:50:11:63:43:ee:67:af:9f:16:c3:

63 89:f1:15:a6:94:a9:72:bb:0c:40:48:54:25:87:e7:94:6f:34:

64 f5:83:03:ed:2a:6f:b6:2d:b7:70:4d:8b:6e:31:80:0c:dd:3d:

65 9a:84:5a:55:ce:b7:08:a9:15:59:66:ec:a9:a1:4f:79:73:16:

66 a2:6a:44:1f:7a:6d:69:f2:de:a0:50:07:da:01:4b:22:2e:40:

67 f4:8b:e7:7c:f3:cd:27:fd:92:eb:fd:e8:4a:da:32:91:6a:ec:

68 b8:0c:49:db:f8:73:5e:a4:83:a2:c2:40:dd:e0:78:f9:3c:83:

69 39:e4:22:88:7c:d1:cf:58:4a:4c:f1:0b:4f:21:94:c4:fb:4e:

70 a8:c4:84:ce:6a:7c:ff:0c:9b:1f:c6:db:67:22:6d:29:2f:28:

71 81:60:c2:a3:ab:af:fa:f9:a5:55:83:35:97:1d:17:23:2a:32:

72 75:92:7b:2b:67:99:3c:25:f4:b5:c8:74:ac:05:7e:59:43:5c:

73 47:38:16:9b

74 -----BEGIN CERTIFICATE-----

75 MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl

76 cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD

77 VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+hyr

78 2pUjAMX3nT76vlBGNrO4bJvtVyKuwRll9VObVUi9n1mVj6aoMyWH+Gm+WKxzH6pb

79 DY3tZVOo/aSZktefos6dCaevZd3nHBidYW4/BXwJEANQkAM6IHy1gPMWi9geyeRT

80 XRxu4rOznYf6K0cl/u6LTiI1zCJZlHgTV2dpq5kUcJQsDjLjvIm05LEJS669bX7N

81 qP/uN4saJV6uIVHiy5xqpScjYsdiiaFpE8MD7PmnWpDi4MXHbex29XaI9RUaTQDa

82 OFHqAxakkHSHbrojOpFYoJRsPIzxxi9pnkEaUOo70abSm1AEY8q3wesEB4lAQwce

83 hNVsCAFQf3uqnsRNAgMBAAGjgekwgeYwHQYDVR0OBBYEFL3gL47dSmUv7lLkDzuK

84 KIDWF8R2MB8GA1UdIwQYMBaAFKieBCVtVcnXEUfT3WdxDn6IiUlxMD8GCCsGAQUF

85 BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk

86 aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu

87 dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF

88 BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAlQfT81fTLcP51UrUVIUf

89 JT086DRvbrxas1D9T7XPh1Qme6tNXSivKdEkrXVdP1toY7PAIIKOxH9YfHTq2A1Q

90 EWND7mevnxbDifEVppSpcrsMQEhUJYfnlG809YMD7Spvti23cE2LbjGADN09moRa

91 Vc63CKkVWWbsqaFPeXMWompEH3ptafLeoFAH2gFLIi5A9IvnfPPNJ/2S6/3oStoy

92 kWrsuAxJ2/hzXqSDosJA3eB4+TyDOeQiiHzRz1hKTPELTyGUxPtOqMSEzmp8/wyb

93 H8bbZyJtKS8ogWDCo6uv+vmlVYM1lx0XIyoydZJ7K2eZPCX0tch0rAV+WUNcRzgW

94 mw==

95 -----END CERTIFICATE-----

96

97 Certificate:

98 Data:

99 Version: 3 (0x2)

100 Serial Number: 2 (0x2)

101 Signature Algorithm: sha256WithRSAEncryption

102 Issuer: CN=Root

103 Validity

104 Not Before: Jan 1 12:00:00 2015 GMT

105 Not After : Jan 1 12:00:00 2016 GMT

106 Subject: CN=Intermediate

107 Subject Public Key Info:

108 Public Key Algorithm: rsaEncryption

109 Public-Key: (2048 bit)

110 Modulus:

111 00:c0:b1:53:c8:38:a8:e5:4e:90:c9:19:52:07:46:

112 ec:7c:87:46:9e:ac:a4:c9:51:89:9c:55:43:98:a0:

113 58:60:59:ce:73:e2:53:df:4a:e5:fb:ee:57:a9:9c:

114 da:d3:c4:76:6b:82:77:94:ee:83:39:e5:d6:6e:ed:

115 e1:3f:6e:80:a0:51:82:85:79:14:53:b6:aa:15:d8:

116 d7:7a:1a:96:26:8f:09:b8:29:b4:c8:6c:a7:80:e6:

117 10:18:ec:d7:f7:b0:ff:59:19:45:f8:37:de:28:bd:

118 56:4f:67:53:c1:80:44:7d:80:b5:dd:d6:6f:bf:3b:

119 1f:02:f3:00:67:88:7d:36:65:13:39:7d:3e:a8:35:

120 13:54:e4:91:c8:ee:f1:53:fd:af:f7:3b:f8:59:e0:

121 bc:e0:1e:ac:41:01:d1:b8:01:ee:ae:d2:39:b8:fa:

122 57:6e:b2:7a:98:5f:51:ac:d6:6a:38:80:6b:01:64:

123 13:96:d7:0b:74:5f:76:82:d9:44:9d:47:26:cc:59:

124 9a:22:3c:72:eb:20:9a:d9:2b:b1:dd:cd:0a:54:0b:

125 77:0b:83:2c:0d:bf:b4:62:4a:fc:87:84:4f:29:8d:

126 fc:6c:b9:3a:4c:8b:45:85:2b:48:7d:2c:33:1f:ac:

127 8b:77:39:8c:cb:0c:f4:08:93:4c:ec:34:15:be:81:

128 09:a3

129 Exponent: 65537 (0x10001)

130 X509v3 extensions:

131 X509v3 Subject Key Identifier:

132 A8:9E:04:25:6D:55:C9:D7:11:47:D3:DD:67:71:0E:7E:88:89:49:71

133 X509v3 Authority Key Identifier:

134 keyid:29:13:82:EE:25:10:7F:40:23:D6:A7:1B:28:25:35:8A:E8:B6:AA:2 8

135

136 Authority Information Access:

137 CA Issuers - URI:http://url-for-aia/Root.cer

138

139 X509v3 CRL Distribution Points:

140

141 Full Name:

142 URI:http://url-for-crl/Root.crl

143

144 X509v3 Key Usage: critical

145 Certificate Sign, CRL Sign

146 X509v3 Basic Constraints: critical

147 CA:TRUE

148 Signature Algorithm: sha256WithRSAEncryption

149 57:37:54:5c:fd:ce:4e:4c:0f:b5:37:13:0d:0e:5f:dd:d8:4c:

150 17:53:38:e6:07:65:6c:67:80:e0:75:25:26:78:7b:2e:b8:1a:

151 6c:31:44:a1:5f:73:83:6d:34:1e:ff:76:42:d5:ad:ab:c0:b9:

152 cc:25:9e:88:7f:be:29:db:49:25:08:5d:3b:7d:43:2e:85:66:

153 ff:fe:b5:d4:aa:21:7a:b8:5a:b4:49:ab:c6:ef:8d:28:64:f4:

154 ea:be:64:33:c4:94:c6:31:f5:cc:55:cb:f1:20:be:e6:85:03:

155 32:99:61:e0:09:3c:e6:df:61:9a:c5:45:ea:f8:a3:f8:c1:6d:

156 ff:7b:44:04:8e:7f:74:89:ab:39:5a:fc:a6:09:77:9c:5d:1c:

157 99:a8:db:bc:2a:8e:19:25:8d:e3:10:37:94:42:e7:37:9c:16:

158 ba:be:4b:67:94:5f:18:2e:ae:e3:fd:ef:15:12:7d:4b:5a:47:

159 b7:45:7a:ee:27:3f:e1:6b:42:02:75:40:36:50:fd:6c:1e:de:

160 8a:b9:f7:d5:f8:69:0c:fd:58:65:35:64:a2:ca:c5:1e:b3:aa:

161 a0:4b:42:22:00:e3:d8:e7:b4:e8:69:48:37:42:55:60:24:48:

162 9a:d8:42:9e:d9:cf:2b:3c:9e:b1:fc:2f:39:5d:b5:fe:e3:72:

163 44:e4:00:50

164 -----BEGIN CERTIFICATE-----

165 MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290

166 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50

167 ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLFTyDio

168 5U6QyRlSB0bsfIdGnqykyVGJnFVDmKBYYFnOc+JT30rl++5XqZza08R2a4J3lO6D

169 OeXWbu3hP26AoFGChXkUU7aqFdjXehqWJo8JuCm0yGyngOYQGOzX97D/WRlF+Dfe

170 KL1WT2dTwYBEfYC13dZvvzsfAvMAZ4h9NmUTOX0+qDUTVOSRyO7xU/2v9zv4WeC8

171 4B6sQQHRuAHurtI5uPpXbrJ6mF9RrNZqOIBrAWQTltcLdF92gtlEnUcmzFmaIjxy

172 6yCa2Sux3c0KVAt3C4MsDb+0Ykr8h4RPKY38bLk6TItFhStIfSwzH6yLdzmMywz0

173 CJNM7DQVvoEJowIDAQABo4HLMIHIMB0GA1UdDgQWBBSongQlbVXJ1xFH091ncQ5+

174 iIlJcTAfBgNVHSMEGDAWgBQpE4LuJRB/QCPWpxsoJTWK6LaqKDA3BggrBgEFBQcB

175 AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs

176 BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD

177 VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB

178 AFc3VFz9zk5MD7U3Ew0OX93YTBdTOOYHZWxngOB1JSZ4ey64GmwxRKFfc4NtNB7/

179 dkLVravAucwlnoh/vinbSSUIXTt9Qy6FZv/+tdSqIXq4WrRJq8bvjShk9Oq+ZDPE

180 lMYx9cxVy/EgvuaFAzKZYeAJPObfYZrFRer4o/jBbf97RASOf3SJqzla/KYJd5xd

181 HJmo27wqjhkljeMQN5RC5zecFrq+S2eUXxguruP97xUSfUtaR7dFeu4nP+FrQgJ1

182 QDZQ/Wwe3oq599X4aQz9WGU1ZKLKxR6zqqBLQiIA49jntOhpSDdCVWAkSJrYQp7Z

183 zys8nrH8Lzldtf7jckTkAFA=

184 -----END CERTIFICATE-----

185

186 Certificate:

187 Data:

188 Version: 3 (0x2)

189 Serial Number: 1 (0x1)

190 Signature Algorithm: sha256WithRSAEncryption

191 Issuer: CN=Root

192 Validity

193 Not Before: Jan 1 12:00:00 2015 GMT

194 Not After : Mar 1 12:00:00 2015 GMT

195 Subject: CN=Root

196 Subject Public Key Info:

197 Public Key Algorithm: rsaEncryption

198 Public-Key: (2048 bit)

199 Modulus:

200 00:b4:d2:a3:a5:24:1a:21:0c:58:52:09:77:f1:ab:

201 2d:49:cb:b0:e5:e2:3c:12:9a:bd:a8:df:36:37:fe:

202 be:97:6f:18:b0:8e:51:08:94:c1:8e:3e:8f:f0:ae:

203 23:19:5e:0a:eb:5e:02:a1:bb:be:61:83:39:cb:52:

204 e1:8f:0e:ba:61:c4:4b:53:09:c3:f7:38:a3:95:fc:

205 89:86:06:59:bc:0c:b5:e1:a2:d3:6d:d8:84:de:75:

206 80:7b:1d:04:04:b0:94:03:07:42:b4:73:52:96:b0:

207 68:3c:08:e3:b3:af:e9:29:60:f6:4f:6f:8a:42:fc:

208 85:63:f6:18:d6:12:6c:6e:94:eb:c3:c0:60:12:19:

209 f8:61:d6:47:72:46:1a:cd:ed:6a:0b:65:cc:91:68:

210 ec:a7:c7:f1:c8:7a:44:5c:1e:e8:8e:2b:ed:50:82:

211 a2:1d:31:31:be:bd:06:56:52:20:bf:37:25:3d:cf:

212 18:7f:87:94:ba:c7:9d:6e:68:7f:96:29:20:b7:dc:

213 fc:73:d9:26:82:6e:f1:97:c2:48:9d:71:35:5c:3e:

214 b6:86:69:e5:b5:1a:e9:08:4e:dc:dd:c5:0d:e1:4e:

215 08:97:0a:41:1a:39:56:b1:31:02:0f:c2:e2:94:a0:

216 3a:e0:d8:77:6e:a9:b6:fe:1d:8e:38:ad:52:e6:de:

217 59:e3

218 Exponent: 65537 (0x10001)

219 X509v3 extensions:

220 X509v3 Subject Key Identifier:

221 29:13:82:EE:25:10:7F:40:23:D6:A7:1B:28:25:35:8A:E8:B6:AA:28

222 X509v3 Authority Key Identifier:

223 keyid:29:13:82:EE:25:10:7F:40:23:D6:A7:1B:28:25:35:8A:E8:B6:AA:2 8

224

225 Authority Information Access:

226 CA Issuers - URI:http://url-for-aia/Root.cer

227

228 X509v3 CRL Distribution Points:

229

230 Full Name:

231 URI:http://url-for-crl/Root.crl

232

233 X509v3 Key Usage: critical

234 Certificate Sign, CRL Sign

235 X509v3 Basic Constraints: critical

236 CA:TRUE

237 Signature Algorithm: sha256WithRSAEncryption

238 6a:88:6c:4d:9f:ee:e6:a5:ec:19:64:e7:b9:86:03:c5:f0:32:

239 92:69:3b:35:03:b8:87:12:db:48:78:5d:44:3b:75:e2:3b:87:

240 7d:ef:96:83:93:06:93:fc:17:58:71:3e:c6:b0:8b:5b:13:2b:

241 c7:97:42:ed:3e:de:4a:96:cd:f1:df:3a:90:96:7f:f1:21:72:

242 90:58:9b:77:cc:80:2d:19:5a:b1:6f:d6:dd:c8:fc:b7:32:1d:

243 8f:77:d4:5e:f0:9d:e4:05:8a:ae:d9:7c:58:fa:00:6e:9f:f9:

244 9a:2e:11:25:8b:28:5c:4b:76:ef:62:4d:ff:55:bc:aa:77:fa:

245 87:33:3c:f5:a9:87:b5:d5:7f:e0:ef:51:a5:74:9a:04:5b:e9:

246 35:f8:e6:43:d0:82:9a:db:4a:90:df:56:20:1d:31:b1:56:bc:

247 73:0b:5e:91:bb:a6:62:37:fc:ba:dd:f7:24:69:54:95:c3:28:

248 41:68:21:16:9f:d6:32:b6:17:88:29:52:f6:d3:2b:98:2f:28:

249 78:c3:67:b3:76:83:df:a9:86:01:cd:c2:bf:e0:84:61:56:76:

250 f5:1f:12:d4:d1:fb:9e:c0:1b:22:c8:9e:05:4c:34:3b:93:54:

251 1e:0a:db:41:91:9a:07:8d:aa:f8:fd:8d:89:ec:eb:32:b3:10:

252 4f:52:53:68

253 -----BEGIN TRUST_ANCHOR_UNCONSTRAINED-----

254 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290

255 MB4XDTE1MDEwMTEyMDAwMFoXDTE1MDMwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v

256 dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTSo6UkGiEMWFIJd/Gr

257 LUnLsOXiPBKavajfNjf+vpdvGLCOUQiUwY4+j/CuIxleCuteAqG7vmGDOctS4Y8O

258 umHES1MJw/c4o5X8iYYGWbwMteGi023YhN51gHsdBASwlAMHQrRzUpawaDwI47Ov

259 6Slg9k9vikL8hWP2GNYSbG6U68PAYBIZ+GHWR3JGGs3tagtlzJFo7KfH8ch6RFwe

260 6I4r7VCCoh0xMb69BlZSIL83JT3PGH+HlLrHnW5of5YpILfc/HPZJoJu8ZfCSJ1x

261 NVw+toZp5bUa6QhO3N3FDeFOCJcKQRo5VrExAg/C4pSgOuDYd26ptv4djjitUube

262 WeMCAwEAAaOByzCByDAdBgNVHQ4EFgQUKROC7iUQf0Aj1qcbKCU1iui2qigwHwYD

263 VR0jBBgwFoAUKROC7iUQf0Aj1qcbKCU1iui2qigwNwYIKwYBBQUHAQEEKzApMCcG

264 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw

265 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE

266 AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBqiGxNn+7m

267 pewZZOe5hgPF8DKSaTs1A7iHEttIeF1EO3XiO4d975aDkwaT/BdYcT7GsItbEyvH

268 l0LtPt5Kls3x3zqQln/xIXKQWJt3zIAtGVqxb9bdyPy3Mh2Pd9Re8J3kBYqu2XxY

269 +gBun/maLhEliyhcS3bvYk3/Vbyqd/qHMzz1qYe11X/g71GldJoEW+k1+OZD0IKa

270 20qQ31YgHTGxVrxzC16Ru6ZiN/y63fckaVSVwyhBaCEWn9YytheIKVL20yuYLyh4

271 w2ezdoPfqYYBzcK/4IRhVnb1HxLU0fuewBsiyJ4FTDQ7k1QeCttBkZoHjar4/Y2J

272 7OsysxBPUlNo

273 -----END TRUST_ANCHOR_UNCONSTRAINED-----

274

275 -----BEGIN TIME-----

276 MTUwMzAyMTIwMDAwWg==

277 -----END TIME-----

278

279 -----BEGIN VERIFY_RESULT-----

280 U1VDQ0VTUw==

281 -----END VERIFY_RESULT-----

OLD	NEW