Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(209)

Unified Diff: net/data/verify_certificate_chain_unittest/unconstrained-root-lacks-basic-constraints.pem

Issue 2805213004: Refactor how net/data/verify_certificate_chain_unittest/* (Closed)
Patch Set: fix android Created 3 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: net/data/verify_certificate_chain_unittest/unconstrained-root-lacks-basic-constraints.pem
diff --git a/net/data/verify_certificate_chain_unittest/unconstrained-root-lacks-basic-constraints.pem b/net/data/verify_certificate_chain_unittest/unconstrained-root-lacks-basic-constraints.pem
deleted file mode 100644
index 0622fc7274c47a637e74cfb44a0252847e5a3fe4..0000000000000000000000000000000000000000
--- a/net/data/verify_certificate_chain_unittest/unconstrained-root-lacks-basic-constraints.pem
+++ /dev/null
@@ -1,285 +0,0 @@
-[Created by: generate-unconstrained-root-lacks-basic-constraints.py]
-
-Certificate chain with 1 intermediate and a trust anchor. The trust anchor
-lacks the basic constraints extension. This is not a problem and verification
-should succeed.
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Intermediate
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Target
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:e0:2c:39:1a:67:64:64:af:b8:19:4f:41:9e:78:
- a6:a8:fc:a4:43:70:a7:7c:23:f9:27:a0:7f:98:37:
- e7:ee:fe:be:2d:82:65:9e:46:15:1e:fc:3d:70:36:
- 96:47:69:6a:c0:51:c5:f1:59:2a:d7:1e:3f:b3:2e:
- df:ac:af:89:16:45:ed:71:ae:38:04:4d:5e:e7:b8:
- d9:a1:45:14:a5:f9:a4:f7:e3:e7:e4:e9:ac:7e:82:
- 95:e6:5c:8e:ac:da:14:d5:2f:04:ed:48:f7:56:4b:
- 5a:98:72:0f:07:66:ca:17:a5:0e:b7:05:64:3b:6a:
- 97:ad:b1:7e:4d:b3:8c:d4:2b:23:3d:88:bb:c9:80:
- 04:d9:5b:1a:36:37:ab:d2:c7:06:a8:81:6f:62:b7:
- c1:74:74:8e:ee:f6:6b:c0:15:28:44:50:85:dc:8d:
- 3b:e7:0b:82:9d:bd:db:20:69:1a:55:68:48:0e:84:
- 2a:25:26:ca:01:ad:16:7f:3c:30:d4:5b:47:9a:86:
- fe:fc:90:b5:d0:bb:d3:ee:af:9a:80:3c:4c:da:46:
- c8:db:36:68:89:51:fe:76:78:cf:22:eb:ce:62:d4:
- 2c:2b:c7:7c:24:48:64:ca:9b:91:b2:90:fc:c9:29:
- 65:70:83:60:05:1a:32:70:ca:12:f3:70:52:dd:3e:
- 82:b1
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 98:FA:6D:F3:B3:9E:A3:B9:81:22:1C:C5:19:24:06:BC:D9:D6:92:ED
- X509v3 Authority Key Identifier:
- keyid:C1:E9:0B:DE:AA:27:20:FA:0B:FF:DB:77:09:96:1E:9B:2C:0D:F7:70
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Intermediate.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Intermediate.crl
-
- X509v3 Key Usage: critical
- Digital Signature, Key Encipherment
- X509v3 Extended Key Usage:
- TLS Web Server Authentication, TLS Web Client Authentication
- Signature Algorithm: sha256WithRSAEncryption
- a1:15:ac:ff:b1:39:6b:15:66:b3:37:d5:a4:42:bb:b3:eb:69:
- 5e:36:27:fd:56:95:07:a3:98:7d:51:35:8f:aa:46:ee:99:86:
- 9b:66:3f:f7:7e:42:4a:d4:22:05:08:eb:13:e3:8f:ba:f6:e2:
- 00:07:0c:46:2d:10:6d:45:6a:85:bf:ee:65:db:16:58:70:88:
- 0d:70:59:5a:bc:b5:f6:a9:fd:09:e4:f7:34:cc:e0:77:98:cd:
- 8a:0a:63:b7:ed:04:72:d0:03:9b:88:ed:01:21:72:af:c0:d0:
- 48:af:d4:9a:fe:67:27:ec:b1:5f:12:14:c7:69:06:43:4f:5b:
- af:06:20:d5:93:e9:0f:b1:ce:a1:23:4b:4d:74:28:da:13:3f:
- b3:39:d0:10:c2:fc:3d:04:a0:c6:6f:2b:58:ae:9b:46:43:36:
- c9:29:00:18:b6:07:06:6f:ed:14:81:e7:13:0d:84:ee:3a:f5:
- 55:bf:03:b1:a9:28:c1:24:9a:7a:57:5c:02:24:87:5e:49:f9:
- 3a:17:e2:11:11:0c:f2:f4:e6:66:e5:bb:85:3c:9e:a8:59:54:
- f6:b9:c4:97:43:6f:48:11:ed:ee:a3:a2:f8:76:68:d7:fd:94:
- 1a:bf:b0:5f:55:24:af:2b:34:76:07:46:14:4c:1c:37:a1:ff:
- ab:b3:13:ff
------BEGIN CERTIFICATE-----
-MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
-cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD
-VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgLDka
-Z2Rkr7gZT0GeeKao/KRDcKd8I/knoH+YN+fu/r4tgmWeRhUe/D1wNpZHaWrAUcXx
-WSrXHj+zLt+sr4kWRe1xrjgETV7nuNmhRRSl+aT34+fk6ax+gpXmXI6s2hTVLwTt
-SPdWS1qYcg8HZsoXpQ63BWQ7apetsX5Ns4zUKyM9iLvJgATZWxo2N6vSxwaogW9i
-t8F0dI7u9mvAFShEUIXcjTvnC4KdvdsgaRpVaEgOhColJsoBrRZ/PDDUW0eahv78
-kLXQu9Pur5qAPEzaRsjbNmiJUf52eM8i685i1Cwrx3wkSGTKm5GykPzJKWVwg2AF
-GjJwyhLzcFLdPoKxAgMBAAGjgekwgeYwHQYDVR0OBBYEFJj6bfOznqO5gSIcxRkk
-BrzZ1pLtMB8GA1UdIwQYMBaAFMHpC96qJyD6C//bdwmWHpssDfdwMD8GCCsGAQUF
-BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk
-aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu
-dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
-BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAoRWs/7E5axVmszfVpEK7
-s+tpXjYn/VaVB6OYfVE1j6pG7pmGm2Y/935CStQiBQjrE+OPuvbiAAcMRi0QbUVq
-hb/uZdsWWHCIDXBZWry19qn9CeT3NMzgd5jNigpjt+0EctADm4jtASFyr8DQSK/U
-mv5nJ+yxXxIUx2kGQ09brwYg1ZPpD7HOoSNLTXQo2hM/sznQEML8PQSgxm8rWK6b
-RkM2ySkAGLYHBm/tFIHnEw2E7jr1Vb8DsakowSSaeldcAiSHXkn5OhfiEREM8vTm
-ZuW7hTyeqFlU9rnEl0NvSBHt7qOi+HZo1/2UGr+wX1Ukrys0dgdGFEwcN6H/q7MT
-/w==
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 2 (0x2)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Intermediate
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:de:e6:c0:76:c5:4c:d0:8e:b3:87:07:91:66:aa:
- f1:ae:93:8f:a2:83:2d:d5:05:91:b8:52:f6:2d:a5:
- ff:fd:95:ee:85:0f:85:c3:eb:d7:8e:f7:6f:2a:c0:
- 15:de:ae:1e:62:62:12:64:c3:f7:c1:0f:05:a4:0f:
- b7:33:69:92:66:57:93:4f:4e:04:43:bb:23:bb:c3:
- c6:29:0b:42:68:1f:26:81:77:2d:91:f6:62:b8:e3:
- 9a:2c:78:2d:7c:1f:3a:f5:ce:f2:c2:75:39:5a:b7:
- c2:23:f5:f5:ee:7e:a5:7a:45:c4:d4:1e:12:c8:a6:
- 40:44:64:07:ff:33:a8:ce:41:df:77:c4:01:f5:c5:
- 41:6b:4e:a0:ee:9d:36:63:5a:b0:e8:38:bb:bd:fb:
- a5:7f:6e:5c:6d:c6:62:dd:05:2f:90:d4:fb:5b:18:
- 71:84:57:e2:c9:d3:cc:c8:36:5f:d1:78:20:4c:68:
- 83:1f:df:64:a3:11:9f:e8:bd:d4:bb:8e:04:63:0d:
- 3d:6d:a9:43:30:5d:f0:ca:e3:62:8f:11:9e:8b:8f:
- de:9a:6e:6d:03:e5:8c:0f:6f:00:6e:1a:72:2c:13:
- e0:a1:78:93:ef:2c:6d:2c:0a:8a:5c:02:65:50:36:
- fa:da:07:ba:36:b9:21:eb:01:14:97:ab:19:60:be:
- 97:6b
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- C1:E9:0B:DE:AA:27:20:FA:0B:FF:DB:77:09:96:1E:9B:2C:0D:F7:70
- X509v3 Authority Key Identifier:
- keyid:96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- X509v3 Basic Constraints: critical
- CA:TRUE
- Signature Algorithm: sha256WithRSAEncryption
- 62:ca:a3:a4:76:24:01:4b:01:12:67:3b:93:fa:c8:5a:81:83:
- c1:26:2b:fc:f0:fc:f3:e2:7c:66:af:d9:84:9d:c4:70:f9:2b:
- b0:7c:2e:5e:47:25:3b:84:01:a3:42:46:da:c8:79:a2:b2:72:
- bd:c1:c5:0f:35:eb:52:f6:bb:ee:d0:85:3d:e3:2d:18:87:87:
- 50:e9:f0:7c:6c:6c:7e:9d:f0:77:06:cb:9e:a6:76:89:de:d3:
- a4:27:2e:d0:d7:29:7e:38:7c:10:ab:89:e4:f2:98:c9:fe:8b:
- 31:32:fd:ce:b7:c1:46:f3:ee:a5:00:ef:d2:87:f0:d1:4b:28:
- ba:79:55:61:05:07:e8:a7:2a:c4:f4:be:3e:6a:9a:c7:c1:2c:
- af:22:39:7e:70:0f:b4:5f:16:47:5d:65:8f:2b:ba:f9:84:f1:
- a5:c9:ee:fb:65:e1:1a:40:46:d4:bc:83:44:6d:dd:9c:e5:20:
- 07:47:0f:66:69:2d:7d:bf:e5:68:7a:87:e1:ec:46:dd:e0:09:
- 26:e0:e0:ed:d8:18:bf:45:98:33:93:5d:88:72:13:af:2c:fd:
- da:64:47:f1:3d:ff:8b:1d:b8:01:34:33:cf:ed:e2:de:87:41:
- 8e:27:28:99:2e:c2:a8:00:0b:96:8f:24:10:81:0c:7c:83:f5:
- 7d:d5:8a:25
------BEGIN CERTIFICATE-----
-MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
-ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ubAdsVM
-0I6zhweRZqrxrpOPooMt1QWRuFL2LaX//ZXuhQ+Fw+vXjvdvKsAV3q4eYmISZMP3
-wQ8FpA+3M2mSZleTT04EQ7sju8PGKQtCaB8mgXctkfZiuOOaLHgtfB869c7ywnU5
-WrfCI/X17n6lekXE1B4SyKZARGQH/zOozkHfd8QB9cVBa06g7p02Y1qw6Di7vful
-f25cbcZi3QUvkNT7WxhxhFfiydPMyDZf0XggTGiDH99koxGf6L3Uu44EYw09balD
-MF3wyuNijxGei4/emm5tA+WMD28AbhpyLBPgoXiT7yxtLAqKXAJlUDb62ge6Nrkh
-6wEUl6sZYL6XawIDAQABo4HLMIHIMB0GA1UdDgQWBBTB6Qveqicg+gv/23cJlh6b
-LA33cDAfBgNVHSMEGDAWgBSWn8ucXA0GnfE6IdUi90t1LH3T0zA3BggrBgEFBQcB
-AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
-BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
-VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
-AGLKo6R2JAFLARJnO5P6yFqBg8EmK/zw/PPifGav2YSdxHD5K7B8Ll5HJTuEAaNC
-RtrIeaKycr3BxQ8161L2u+7QhT3jLRiHh1Dp8HxsbH6d8HcGy56mdone06QnLtDX
-KX44fBCrieTymMn+izEy/c63wUbz7qUA79KH8NFLKLp5VWEFB+inKsT0vj5qmsfB
-LK8iOX5wD7RfFkddZY8ruvmE8aXJ7vtl4RpARtS8g0Rt3ZzlIAdHD2ZpLX2/5Wh6
-h+HsRt3gCSbg4O3YGL9FmDOTXYhyE68s/dpkR/E9/4sduAE0M8/t4t6HQY4nKJku
-wqgAC5aPJBCBDHyD9X3ViiU=
------END CERTIFICATE-----
-
-Certificate:
- Data:
- Version: 3 (0x2)
- Serial Number: 1 (0x1)
- Signature Algorithm: sha256WithRSAEncryption
- Issuer: CN=Root
- Validity
- Not Before: Jan 1 12:00:00 2015 GMT
- Not After : Jan 1 12:00:00 2016 GMT
- Subject: CN=Root
- Subject Public Key Info:
- Public Key Algorithm: rsaEncryption
- Public-Key: (2048 bit)
- Modulus:
- 00:b7:0e:0c:2e:e1:46:5f:9d:dc:3a:16:51:56:2f:
- 4c:5c:f7:92:93:2a:a1:bf:d1:bd:15:cd:8a:f8:e3:
- 8a:a4:41:fa:9f:de:85:84:ff:cd:5b:7d:13:33:ca:
- b8:8b:34:f6:85:73:a5:23:ef:ba:61:ca:18:9f:08:
- ea:39:17:18:69:dd:3a:21:57:a5:6d:b2:63:a7:42:
- ba:b6:8a:4e:e2:1f:ab:88:4f:ae:ca:1a:66:b8:79:
- d2:94:73:b9:46:c4:be:89:31:53:c1:d8:b4:cc:1c:
- 6b:d9:0c:a3:5a:e3:a5:20:7c:a0:bd:d4:14:7a:14:
- 29:0c:b7:40:da:f5:fc:af:c3:91:65:78:b3:41:ee:
- f5:9f:0b:22:0b:c1:f5:12:94:89:25:13:1b:dd:a3:
- a3:44:7a:57:7c:40:17:e0:66:33:a9:27:7c:2e:6f:
- 9f:38:d3:fa:4d:67:80:39:33:36:e5:41:fd:ac:6b:
- 37:d0:84:75:e2:84:93:3b:8d:ce:8c:22:98:4e:05:
- 64:7f:df:fb:96:85:c5:ea:0e:11:24:f9:84:bd:17:
- ce:15:30:86:ad:c6:de:2c:48:84:d0:45:d4:0b:1f:
- 13:e9:a4:ca:e7:69:c0:24:a1:23:5e:6b:4e:76:b4:
- bd:d7:0d:96:94:b6:d9:8e:25:9b:1e:c9:a2:00:10:
- 47:77
- Exponent: 65537 (0x10001)
- X509v3 extensions:
- X509v3 Subject Key Identifier:
- 96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3
- X509v3 Authority Key Identifier:
- keyid:96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3
-
- Authority Information Access:
- CA Issuers - URI:http://url-for-aia/Root.cer
-
- X509v3 CRL Distribution Points:
-
- Full Name:
- URI:http://url-for-crl/Root.crl
-
- X509v3 Key Usage: critical
- Certificate Sign, CRL Sign
- Signature Algorithm: sha256WithRSAEncryption
- 00:85:32:6c:c2:ae:ee:d2:19:f0:6f:20:ce:f8:94:86:c8:4c:
- 3b:28:be:77:40:dc:94:8f:b9:31:b9:9a:b4:4b:3f:f7:70:81:
- 04:a0:ae:b5:49:59:a2:4c:85:17:d6:ab:0d:a1:75:3e:d9:9b:
- ea:ec:25:20:a2:0e:87:9f:d0:39:ab:d0:72:db:20:ed:6d:6e:
- 8e:ec:68:ed:a4:44:6b:db:5b:63:ca:8b:0c:35:d7:a5:88:61:
- 05:fb:82:7a:77:c3:54:10:c8:0c:87:07:60:43:ea:4a:0a:3a:
- a2:2c:e6:6a:4d:81:aa:50:6d:d6:2d:cb:df:cf:0c:4c:a4:93:
- c8:d0:c3:9e:70:2a:2a:37:34:9b:73:51:ce:14:6a:d6:ca:ff:
- 21:c4:14:43:f2:9a:c4:5d:f0:58:f4:93:cc:4c:28:93:96:19:
- 70:0c:7b:46:18:d1:01:07:b6:32:ed:1f:ae:f9:c4:f5:f4:a4:
- 6b:95:3e:ab:46:2d:e2:92:54:71:af:a1:7d:eb:75:e2:41:06:
- 97:80:af:60:90:b1:40:a6:a7:16:a3:2e:c9:58:57:8b:72:46:
- 4e:f2:e4:55:b2:6d:0b:5e:94:78:ed:57:5d:c4:84:4e:8c:df:
- e6:81:9d:80:c4:3b:45:b8:f6:53:b1:96:ea:76:55:25:b0:84:
- ea:37:c1:71
------BEGIN TRUST_ANCHOR_UNCONSTRAINED-----
-MIIDVDCCAjygAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
-MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALcODC7hRl+d3DoWUVYv
-TFz3kpMqob/RvRXNivjjiqRB+p/ehYT/zVt9EzPKuIs09oVzpSPvumHKGJ8I6jkX
-GGndOiFXpW2yY6dCuraKTuIfq4hPrsoaZrh50pRzuUbEvokxU8HYtMwca9kMo1rj
-pSB8oL3UFHoUKQy3QNr1/K/DkWV4s0Hu9Z8LIgvB9RKUiSUTG92jo0R6V3xAF+Bm
-M6knfC5vnzjT+k1ngDkzNuVB/axrN9CEdeKEkzuNzowimE4FZH/f+5aFxeoOEST5
-hL0XzhUwhq3G3ixIhNBF1AsfE+mkyudpwCShI15rTna0vdcNlpS22Y4lmx7JogAQ
-R3cCAwEAAaOBujCBtzAdBgNVHQ4EFgQUlp/LnFwNBp3xOiHVIvdLdSx909MwHwYD
-VR0jBBgwFoAUlp/LnFwNBp3xOiHVIvdLdSx909MwNwYIKwYBBQUHAQEEKzApMCcG
-CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
-IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjANBgkqhkiG9w0BAQsFAAOCAQEAAIUybMKu7tIZ8G8gzviUhshMOyi+d0Dc
-lI+5MbmatEs/93CBBKCutUlZokyFF9arDaF1Ptmb6uwlIKIOh5/QOavQctsg7W1u
-juxo7aREa9tbY8qLDDXXpYhhBfuCenfDVBDIDIcHYEPqSgo6oizmak2BqlBt1i3L
-388MTKSTyNDDnnAqKjc0m3NRzhRq1sr/IcQUQ/KaxF3wWPSTzEwok5YZcAx7RhjR
-AQe2Mu0frvnE9fSka5U+q0Yt4pJUca+hfet14kEGl4CvYJCxQKanFqMuyVhXi3JG
-TvLkVbJtC16UeO1XXcSETozf5oGdgMQ7Rbj2U7GW6nZVJbCE6jfBcQ==
------END TRUST_ANCHOR_UNCONSTRAINED-----
-
-150302120000Z
------BEGIN TIME-----
-MTUwMzAyMTIwMDAwWg==
------END TIME-----
-
-SUCCESS
------BEGIN VERIFY_RESULT-----
-U1VDQ0VTUw==
------END VERIFY_RESULT-----
-
-serverAuth
------BEGIN KEY_PURPOSE-----
-c2VydmVyQXV0aA==
------END KEY_PURPOSE-----

Powered by Google App Engine
This is Rietveld 408576698