[root@f16-pki pki-test-scripts]# ./ca-silent.bash ++ hostname + pki_host=f16-pki.test.com + ca_instance_name=pki-ca + ca_nonssl_port=9180 + ca_agent_port=9443 + ca_ee_port=9444 + ca_admin_port=9445 + pki_silent_security_database_repository=/var/tmp/testdb + pki_silent_security_database_password=testpwd ++ cat /var/lib/pki-ca/conf/CS.cfg ++ grep -v grep ++ awk -F= '{print $2}' ++ grep preop.pin + ca_preop_pin=ZpWGYKt7qY4VVWDhHVtL + pki_security_domain_name=silentdom + pki_silent_admin_user=admin + pki_silent_admin_password=testpwd + pki_silent_admin_email=pki-ca-admin@test.com + ca_agent_name=ca-agent + ca_agent_key_size=2048 + ca_agent_key_type=rsa + ca_agent_cert_subject=CN=ca-agent,OU=pnq,O=redhat + pki_ldap_host=localhost + pki_ldap_port=389 + pki_bind_dn='cn=Directory\ Manager' + pki_bind_password=redhat + ca_base_dn=dc=f16-pki.test.com-pki-ca + ca_db_name=f16-pki.test.com-pki-ca + ca_key_size=2048 + ca_key_type=rsa + ca_key_algorithm=SHA512withRSA + ca_signing_algorithm=SHA512withRSA + ca_signing_signingalgorithm=SHA512withRSA + ca_ocsp_signing_signingalgorithm=SHA512withRSA + ca_save_p12=false + ca_subsystem_name='Certificate\ Authority-ca' + ca_token_name=internal + ca_token_password=testpwd + ca_sign_cert_subject_name='cn=Certificate\ Authority-ca,o=silentdom' + ca_subsystem_cert_subject_name='cn=CA\ Subsystem\ Certificate-ca,o=silentdom' + ca_ocsp_cert_subject_name='cn=OCSP\ Signing\ Certificate-ca,o=silentdom' + ca_server_cert_subject_name=cn=f16-pki.test.com,o=silentdom + ca_audit_signing_cert_subject_name='cn=CA\ Audit\ Signing\ Certificate-ca,o=silentdom' + pki_silent_ca_log=/tmp/pki-silent-ca-log + tee /tmp/pki-silent-ca-log + pkisilent ConfigureCA -cs_hostname f16-pki.test.com -cs_port 9445 -client_certdb_dir /var/tmp/testdb -client_certdb_pwd testpwd -preop_pin ZpWGYKt7qY4VVWDhHVtL -domain_name silentdom -admin_user admin -admin_password redhat -admin_email pki-ca-admin@test.com -agent_name ca-agent -agent_key_size 2048 -agent_key_type rsa -agent_cert_subject CN=ca-agent,OU=pnq,O=redhat -ldap_host localhost -ldap_port 389 -bind_dn 'cn=Directory\ Manager' -bind_password redhat -base_dn dc=f16-pki.test.com-pki-ca -db_name f16-pki.test.com-pki-ca -key_size 2048 -key_type rsa -key_algorithm SHA512withRSA -signing_algorithm SHA512withRSA -signing_signingalgorithm SHA512withRSA -ocsp_signing_signingalgorithm SHA512withRSA -save_p12 false -subsystem_name 'Certificate\' Authority-ca -token_name internal -token_pwd redhat -ca_sign_cert_subject_name 'cn=Certificate\ Authority-ca,o=silentdom' -ca_subsystem_cert_subject_name 'cn=CA\ Subsystem\ Certificate-ca,o=silentdom' -ca_ocsp_cert_subject_name 'cn=OCSP\ Signing\ Certificate-ca,o=silentdom' -ca_server_cert_subject_name cn=f16-pki.test.com,o=silentdom -ca_audit_signing_cert_subject_name 'cn=CA\ Audit\ Signing\ Certificate-ca,o=silentdom' libpath=/usr/lib64 ####################################################################### CRYPTO INIT WITH CERTDB:/var/tmp/testdb tokenpwd:testpwd ############################################# Attempting to connect to: f16-pki.test.com:9445 in TestCertApprovalCallback.approve() Peer cert details: subject: CN=f16-pki.test.com,O=2012-01-31 04:30:40 issuer: CN=f16-pki.test.com,O=2012-01-31 04:30:40 serial: 0 item 1 reason=-8156 depth=1 cert details: subject: CN=f16-pki.test.com,O=2012-01-31 04:30:40 issuer: CN=f16-pki.test.com,O=2012-01-31 04:30:40 serial: 0 item 2 reason=-8172 depth=1 cert details: subject: CN=f16-pki.test.com,O=2012-01-31 04:30:40 issuer: CN=f16-pki.test.com,O=2012-01-31 04:30:40 serial: 0 importing certificate. Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/console/config/login?pin=ZpWGYKt7qY4VVWDhHVtL&xml=true RESPONSE STATUS: HTTP/1.1 302 Moved Temporarily RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Set-Cookie: JSESSIONID=8AE6BDF314C77D679005C31EABDE2D35; Path=/ca; Secure RESPONSE HEADER: Location: https://f16-pki.test.com:9445/ca/admin/console/config/wizard RESPONSE HEADER: Content-Type: text/html;charset=UTF-8 RESPONSE HEADER: Content-Length: 0 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:05 GMT RESPONSE HEADER: Connection: keep-alive xml returned: cookie list: JSESSIONID=8AE6BDF314C77D679005C31EABDE2D35; Path=/ca; Secure ############################################# Attempting to connect to: f16-pki.test.com:9445 Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/console/config/wizard?p=0&op=next&xml=true RESPONSE STATUS: HTTP/1.1 200 OK RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Content-Type: application/xml;charset=UTF-8 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:05 GMT RESPONSE HEADER: Connection: close admin/console/config/modulepanel.vm display 2 NSS Internal PKCS #11 Module NSS Internal PKCS #11 Module ../img/clearpixel.gif nfast nCipher's nFast Token Hardware Module ../img/clearpixel.gif lunasa SafeNet's LunaSA Token Hardware Module ../img/clearpixel.gif 19 Key Store welcome Welcome module Key Store confighsmlogin ConfigHSMLogin securitydomain Security Domain securitydomain Display Certificate Chain subsystem Subsystem Type clone Display Certificate Chain restorekeys Import Keys and Certificates cahierarchy PKI Hierarchy database Internal Database size Key Pairs subjectname Subject Names certrequest Requests and Certificates backupkeys Export Keys and Certificates savepk12 Save Keys and Certificates importcachain Import CA's Certificate Chain admin Administrator importadmincert Import Administrator's Certificate done Done

1

CA Setup Wizard Internal Key Storage Token module ############################################# Attempting to connect to: f16-pki.test.com:9445 Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/console/config/wizard?p=1&op=next&xml=true&choice=Internal+Key+Storage+Token RESPONSE STATUS: HTTP/1.1 200 OK RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Content-Type: application/xml;charset=UTF-8 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:05 GMT RESPONSE HEADER: Connection: close f16-pki.test.com admin/console/config/securitydomainpanel.vm /usr/bin/pkicontrol Test Domain https://f16-pki.test.com:9445 9180 CA Security Domain welcome Welcome module Key Store confighsmlogin ConfigHSMLogin securitydomain Security Domain securitydomain Display Certificate Chain subsystem Subsystem Type clone Display Certificate Chain restorekeys Import Keys and Certificates cahierarchy PKI Hierarchy database Internal Database size Key Pairs subjectname Subject Names certrequest Requests and Certificates backupkeys Export Keys and Certificates savepk12 Save Keys and Certificates importcachain Import CA's Certificate Chain admin Administrator importadmincert Import Administrator's Certificate done Done https://f16-pki.test.com:9445 CA Setup Wizard 9444 9445 securitydomain 9443 CA ca pki-cad@pki-ca.service success 19

3

checked CA Setup Wizard ############################################# Attempting to connect to: f16-pki.test.com:9445 Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/console/config/wizard?sdomainURL=https%3A%2F%2Ff16-pki.test.com%3A9445&sdomainName=silentdom&choice=newdomain&p=3&op=next&xml=true RESPONSE STATUS: HTTP/1.1 200 OK RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Content-Type: application/xml;charset=UTF-8 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:06 GMT RESPONSE HEADER: Connection: close f16-pki.test.com admin/console/config/createsubsystempanel.vm true CA Subsystem Type welcome Welcome module Key Store confighsmlogin ConfigHSMLogin securitydomain Security Domain securitydomain Display Certificate Chain subsystem Subsystem Type clone Display Certificate Chain restorekeys Import Keys and Certificates cahierarchy PKI Hierarchy database Internal Database size Key Pairs subjectname Subject Names certrequest Requests and Certificates backupkeys Export Keys and Certificates savepk12 Save Keys and Certificates importcachain Import CA's Certificate Chain admin Administrator importadmincert Import Administrator's Certificate done Done CA Setup Wizard 9444 9445 Certificate Authority 9180 subsystem 9443 CA checked Certificate Authority success 19

5

CA Setup Wizard ############################################# Attempting to connect to: f16-pki.test.com:9445 Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/console/config/wizard?p=5&op=next&xml=true&choice=newsubsystem&subsystemName=Certificate+Authority-ca RESPONSE STATUS: HTTP/1.1 200 OK RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Content-Type: application/xml;charset=UTF-8 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:06 GMT RESPONSE HEADER: Connection: close admin/console/config/hierarchypanel.vm checked success 19 PKI Hierarchy welcome Welcome module Key Store confighsmlogin ConfigHSMLogin securitydomain Security Domain securitydomain Display Certificate Chain subsystem Subsystem Type clone Display Certificate Chain restorekeys Import Keys and Certificates cahierarchy PKI Hierarchy database Internal Database size Key Pairs subjectname Subject Names certrequest Requests and Certificates backupkeys Export Keys and Certificates savepk12 Save Keys and Certificates importcachain Import CA's Certificate Chain admin Administrator importadmincert Import Administrator's Certificate done Done CA Setup Wizard

8

cahierarchy ############################################# Attempting to connect to: f16-pki.test.com:9445 Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/console/config/wizard?p=8&op=next&xml=true&choice=root RESPONSE STATUS: HTTP/1.1 200 OK RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Content-Type: application/xml;charset=UTF-8 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:06 GMT RESPONSE HEADER: Connection: close admin/console/config/databasepanel.vm new (sensitive) 389 off success localhost f16-pki.test.com-pki-ca cn=Directory Manager 19 true Internal Database off welcome Welcome module Key Store confighsmlogin ConfigHSMLogin securitydomain Security Domain securitydomain Display Certificate Chain subsystem Subsystem Type clone Display Certificate Chain restorekeys Import Keys and Certificates cahierarchy PKI Hierarchy database Internal Database size Key Pairs subjectname Subject Names certrequest Requests and Certificates backupkeys Export Keys and Certificates savepk12 Save Keys and Certificates importcachain Import CA's Certificate Chain admin Administrator importadmincert Import Administrator's Certificate done Done

9

CA Setup Wizard dc=f16-pki.test.com-pki-ca database ############################################# Attempting to connect to: f16-pki.test.com:9445 Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/console/config/wizard?p=9&op=next&xml=true&host=localhost&port=389&binddn=cn%3DDirectory+Manager&__bindpwd=redhat&basedn=dc%3Df16-pki.test.com-pki-ca&database=f16-pki.test.com-pki-ca&display=%24displayStr RESPONSE STATUS: HTTP/1.1 200 OK RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Content-Type: application/xml;charset=UTF-8 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:10 GMT RESPONSE HEADER: Connection: close admin/console/config/sizepanel.vm SHA256withEC,SHA1withEC,SHA384withEC,SHA512withEC 389 off 2048 true Key Pairs welcome Welcome module Key Store confighsmlogin ConfigHSMLogin securitydomain Security Domain securitydomain Display Certificate Chain subsystem Subsystem Type clone Display Certificate Chain restorekeys Import Keys and Certificates cahierarchy PKI Hierarchy database Internal Database size Key Pairs subjectname Subject Names certrequest Requests and Certificates backupkeys Export Keys and Certificates savepk12 Save Keys and Certificates importcachain Import CA's Certificate Chain admin Administrator importadmincert Import Administrator's Certificate done Done CA Setup Wizard size SHA256withRSA,SHA1withRSA,SHA512withRSA,MD5withRSA,MD2withRSA ca (sensitive) nistp256 success root localhost nistp256 (secp256r1),nistp384 (secp384r1),nistp521 (secp521r1),nistk163 (sect163k1),sect163r1,nistb163 (sect163r2),sect193r1,sect193r2,nistk233 (sect233k1),nistb233 (sect233r1),sect239k1,nistk283 (sect283k1),nistb283 (sect283r1),nistk409 (sect409k1),nistb409 (sect409r1),nistk571 (sect571k1),nistb571 (sect571r1),secp160k1,secp160r1,secp160r2,secp192k1,nistp192 (secp192r1, prime192v1),secp224k1,nistp224 (secp224r1),secp256k1,prime192v2,prime192v3,prime239v1,prime239v2,prime239v3,c2pnb163v1,c2pnb163v2,c2pnb163v3,c2pnb176v1,c2tnb191v1,c2tnb191v2,c2tnb191v3,c2pnb208w1,c2tnb239v1,c2tnb239v2,c2tnb239v3,c2pnb272w1,c2pnb304w1,c2tnb359w1,c2pnb368w1,c2tnb431r1,secp112r1,secp112r2,secp128r1,secp128r2,sect113r1,sect113r2,sect131r1,sect131r2 nistp256,nistp384,nistp521,sect163k1,nistk163,sect163r1,sect163r2,nistb163,sect193r1,sect193r2,sect233k1,nistk233,sect233r1,nistb233,sect239k1,sect283k1,nistk283,sect283r1,nistb283,sect409k1,nistk409,sect409r1,nistb409,sect571k1,nistk571,sect571r1,nistb571,secp160k1,secp160r1,secp160r2,secp192k1,secp192r1,nistp192,secp224k1,secp224r1,nistp224,secp256k1,secp256r1,secp384r1,secp521r1,prime192v1,prime192v2,prime192v3,prime239v1,prime239v2,prime239v3,c2pnb163v1,c2pnb163v2,c2pnb163v3,c2pnb176v1,c2tnb191v1,c2tnb191v2,c2tnb191v3,c2pnb208w1,c2tnb239v1,c2tnb239v2,c2tnb239v3,c2pnb272w1,c2pnb304w1,c2tnb359w1,c2pnb368w1,c2tnb431r1,secp112r1,secp112r2,secp128r1,secp128r2,sect113r1,sect113r2,sect131r1,sect131r2 f16-pki.test.com-pki-ca cn=Directory Manager 19 true off caSigningCert cert-pki-ca Internal Key Storage Token default ocspSigningCert cert-pki-ca Internal Key Storage Token default Server-Cert cert-pki-ca Internal Key Storage Token default subsystemCert cert-pki-ca Internal Key Storage Token default auditSigningCert cert-pki-ca Internal Key Storage Token default

10

dc=f16-pki.test.com-pki-ca ############################################# Attempting to connect to: f16-pki.test.com:9445 Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/console/config/wizard?p=10&op=next&xml=true&subsystem_custom_size=2048&subsystem_custom_curvename=nistp256&subsystem_keytype=rsa&subsystem_choice=custom&sslserver_custom_size=2048&sslserver_custom_curvename=nistp256&sslserver_keytype=rsa&sslserver_choice=custom&signing_custom_size=2048&signing_custom_curvename=nistp256&signing_keytype=rsa&signing_choice=custom&signing_keyalgorithm=SHA512withRSA&signing_signingalgorithm=SHA512withRSA&ocsp_signing_custom_size=2048&ocsp_signing_custom_curvename=nistp256&ocsp_signing_keytype=rsa&ocsp_signing_choice=custom&ocsp_signing_signingalgorithm=SHA512withRSA&audit_signing_custom_size=2048&audit_signing_custom_curvename=nistp256&audit_signing_keytype=rsa&audit_signing_choice=custom&custom_size=2048&custom_curvename=nistp256&keytype=rsa&choice=custom&signingalgorithm=SHA512withRSA&keyalgorithm=SHA512withRSA RESPONSE STATUS: HTTP/1.1 200 OK RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Content-Type: application/xml;charset=UTF-8 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:12 GMT RESPONSE HEADER: Connection: close admin/console/config/namepanel.vm External CA success true 19 true Subject Names caSigningCert cert-pki-ca Internal Key Storage Token selfsign CN=Certificate Authority,OU=pki-ca,O=silentdom ocspSigningCert cert-pki-ca Internal Key Storage Token local CN=OCSP Signing Certificate,OU=pki-ca,O=silentdom Server-Cert cert-pki-ca Internal Key Storage Token local CN=f16-pki.test.com,OU=pki-ca,O=silentdom subsystemCert cert-pki-ca Internal Key Storage Token local CN=CA Subsystem Certificate,OU=pki-ca,O=silentdom auditSigningCert cert-pki-ca Internal Key Storage Token local CN=CA Audit Signing Certificate,OU=pki-ca,O=silentdom welcome Welcome module Key Store confighsmlogin ConfigHSMLogin securitydomain Security Domain securitydomain Display Certificate Chain subsystem Subsystem Type clone Display Certificate Chain restorekeys Import Keys and Certificates cahierarchy PKI Hierarchy database Internal Database size Key Pairs subjectname Subject Names certrequest Requests and Certificates backupkeys Export Keys and Certificates savepk12 Save Keys and Certificates importcachain Import CA's Certificate Chain admin Administrator importadmincert Import Administrator's Certificate done Done

11

CA Setup Wizard subjectname tag=DN value=CN=Certificate Authority,OU=pki-ca,O=silentdom tag=DN value=CN=OCSP Signing Certificate,OU=pki-ca,O=silentdom tag=DN value=CN=f16-pki.test.com,OU=pki-ca,O=silentdom tag=DN value=CN=CA Subsystem Certificate,OU=pki-ca,O=silentdom tag=DN value=CN=CA Audit Signing Certificate,OU=pki-ca,O=silentdom default: ca_cert_name=CN=Certificate Authority,OU=pki-ca,O=silentdom default: ocsp_cert_name=CN=OCSP Signing Certificate,OU=pki-ca,O=silentdom default: ca_subsystem_cert_name=CN=CA Subsystem Certificate,OU=pki-ca,O=silentdom default: ca_audit_signing_cert_name=CN=CA Audit Signing Certificate,OU=pki-ca,O=silentdom default: server_cert_name=CN=f16-pki.test.com,OU=pki-ca,O=silentdom ############################################# Attempting to connect to: f16-pki.test.com:9445 Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/console/config/wizard?p=11&op=next&xml=true&subsystem=cn%3DCA+Subsystem+Certificate-ca%2Co%3Dsilentdom&ocsp_signing=cn%3DOCSP+Signing+Certificate-ca%2Co%3Dsilentdom&signing=cn%3DCertificate+Authority-ca%2Co%3Dsilentdom&sslserver=cn%3Df16-pki.test.com%2Co%3Dsilentdom&audit_signing=cn%3DCA+Audit+Signing+Certificate-ca%2Co%3Dsilentdom&urls=0 RESPONSE STATUS: HTTP/1.1 200 OK RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Content-Type: application/xml;charset=UTF-8 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:13 GMT RESPONSE HEADER: Connection: close admin/console/config/certrequestpanel.vm caSigningCert cert-pki-ca Internal Key Storage Token -----BEGIN CERTIFICATE REQUEST----- MIICfDCCAWQCAQAwNzESMBAGA1UEChMJc2lsZW50ZG9tMSEwHwYDVQQDExhDZXJ0aWZpY2F0ZSBB dXRob3JpdHktY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh1cntKFZbv0YM+JNv CV+ydIJh5+VwkSRWCYWLnbaPEuCFg+vlY+Zlw93gi/tTCHa/m4OGbd2GNXoUoU+5G3Tp4XdeHXOU /KLqK5/uiGJlIhPaV1qlTGhf+rDSXmZoIJSsEviMlOP0CWtgosLVRxsndNCLH/pndddclmjm+fu8 sUkArcrtZSLLldXr22ioZdbXxljUvW80oPHxLtu8kkkNvzEDqzhvxgJlGmY/2zHjzayhJ902gxrT 8beOk5yWST3cVPrxg8+Ix/x+Yo1NaxpDKRoLWpJirblXtwN1SGjQkaZYhmTS/7Pz/VhVEQla6EZi kfx42xaw4wNMOmDkYQAzAgMBAAGgADANBgkqhkiG9w0BAQ0FAAOCAQEAVFj6zKRZee9moPcJ5aTA TqMJzh2KTcjpUWmAnHMhi7tBUfV47bR8DhwsHa16BdcTiWx66D/chdmqnnuZI+DRNpjnE5j/eXSC 6W++gZvSMxXFxutQ3Hhp6qHiyJq6DJTInyLiaI3kPBzrBrfEAsUwXP6gIm2kX6+WLOBAgBPBjtgR pqvXbgg4oBqqujciMNqnKaBldV4Ym/yShYPWnPvtG4bznxWKbs2p47mmWa113vcFV8B6iCEU8t9t o9C6tGVCTvpvbs+eDRXX9CySiWzZhyAUXjLXbgBqPhBEedoiOpd79C/Dr71kSw/CiHgR3VY/5u7U qCJkLDimB65fNXAo4Q== -----END CERTIFICATE REQUEST----- -----BEGIN CERTIFICATE----- MIIDkDCCAnigAwIBAgIBATANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTJaFw0yMDAyMDEx NDIyMTJaMDcxEjAQBgNVBAoTCXNpbGVudGRvbTEhMB8GA1UEAxMYQ2VydGlmaWNhdGUgQXV0aG9y aXR5LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dXJ7ShWW79GDPiTbwlfsnSC YeflcJEkVgmFi522jxLghYPr5WPmZcPd4Iv7Uwh2v5uDhm3dhjV6FKFPuRt06eF3Xh1zlPyi6iuf 7ohiZSIT2ldapUxoX/qw0l5maCCUrBL4jJTj9AlrYKLC1UcbJ3TQix/6Z3XXXJZo5vn7vLFJAK3K 7WUiy5XV69toqGXW18ZY1L1vNKDx8S7bvJJJDb8xA6s4b8YCZRpmP9sx482soSfdNoMa0/G3jpOc lkk93FT68YPPiMf8fmKNTWsaQykaC1qSYq25V7cDdUho0JGmWIZk0v+z8/1YVREJWuhGYpH8eNsW sOMDTDpg5GEAMwIDAQABo4GmMIGjMB8GA1UdIwQYMBaAFEOs9jCROrWHDKLUryphbeXnYeIaMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgHGMB0GA1UdDgQWBBRDrPYwkTq1hwyi1K8qYW3l 52HiGjBABggrBgEFBQcBAQQ0MDIwMAYIKwYBBQUHMAGGJGh0dHA6Ly9mMTYtcGtpLnRlc3QuY29t OjkxODAvY2Evb2NzcDANBgkqhkiG9w0BAQ0FAAOCAQEAxDEolOwcADW2mPCFZ1nQovwZ+We/VEmw DGdAD3RLB6xiNjF+avv/wsmEY0tBfaAfxV3pe8dSEMXvbqc5A0PljYcFF9KEq4oemHT41V2BqjQp 3N3Kw5mxXrWmA4xSocInGPVZDZa+TsXy0oRUYTWAu788myUVn9VODNj29HVqRIB3XG6OvP8eJjaE WWQxZEm9t1pTLKW4FtMjoYyr7sOtMsQp7ooII9qyEqF4Cv/mVkCfglJwz/Zwy50I8HLTZi62h9PJ 1lx6ZosulvfE3NOIRWBilJCEdlJ+YXuxZUflHS+HZ6GBikGkqqUoF1InggooQNUzOiU+lmJuajSC FW1o4A== -----END CERTIFICATE----- selfsign cn=Certificate Authority-ca,o=silentdom Certificate: Data: Version: v3 Serial Number: 0x1 Signature Algorithm: SHA512withRSA - 1.2.840.113549.1.1.13 Issuer: CN=Certificate Authority-ca,O=silentdom Validity: Not Before: Wednesday, February 1, 2012 9:22:12 AM EST US/Eastern Not After: Saturday, February 1, 2020 9:22:12 AM EST US/Eastern Subject: CN=Certificate Authority-ca,O=silentdom Subject Public Key Info: Algorithm: RSA - 1.2.840.113549.1.1.1 Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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xtensions: Identifier: Authority Key Identifier - 2.5.29.35 Critical: no Key Identifier: 43:AC:F6:30:91:3A:B5:87:0C:A2:D4:AF:2A:61:6D:E5: E7:61:E2:1A Identifier: Basic Constraints - 2.5.29.19 Critical: yes Is CA: yes Path Length Constraint: UNLIMITED Identifier: Key Usage: - 2.5.29.15 Critical: yes Key Usage: Digital Signature Non Repudiation Key CertSign Crl Sign Identifier: Subject Key Identifier - 2.5.29.14 Critical: no Key Identifier: 43:AC:F6:30:91:3A:B5:87:0C:A2:D4:AF:2A:61:6D:E5: E7:61:E2:1A Identifier: Authority Info Access: - 1.3.6.1.5.5.7.1.1 Critical: no Access Description: Method #0: ocsp Location #0: URIName: http://f16-pki.test.com:9180/ca/ocsp Signature: Algorithm: SHA512withRSA - 1.2.840.113549.1.1.13 Signature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ingerPrint MD2: 58:2E:94:4E:7A:2B:E6:62:21:70:4A:96:7E:9B:1E:22 MD5: 2D:91:1B:F1:DD:BD:08:23:48:9A:13:94:64:75:DA:EF SHA1: CE:53:FE:24:02:E3:91:C4:DE:4E:BE:12:EF:51:D6:65: 85:B2:2A:CF SHA256: 7E:0D:EB:F8:63:27:E5:45:0D:E4:B5:80:0D:AC:30:35: E2:9A:3C:EB:06:4A:A4:5A:41:DA:37:61:C0:4C:E3:33 SHA512: DD:2C:12:A6:DD:E5:62:99:61:42:43:10:ED:F5:B9:3E: 3E:C3:2E:98:10:33:0B:29:A9:DF:67:CC:09:3A:60:67: F1:70:25:54:B8:A6:54:97:D9:41:91:AD:5C:FF:C5:A6: CC:FB:7F:7A:74:6A:B8:A7:69:1E:96:41:42:13:AB:FD ocspSigningCert cert-pki-ca Internal Key Storage Token -----BEGIN CERTIFICATE REQUEST----- MIICfzCCAWcCAQAwOjESMBAGA1UEChMJc2lsZW50ZG9tMSQwIgYDVQQDExtPQ1NQIFNpZ25pbmcg Q2VydGlmaWNhdGUtY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMRJPxM+Qk+Uh VMb+w8V2vVqi3KBEyMxEdlL4IZO65Ve8TVtOy1y2SWpUb4Zy1fgGKnL1SVX7z9Jm9FjsGqppK9Xg tGhXLsbU264JcLTftgiWMCw39V8t5Cr8mx0UImoLae+tBxWJmEERS3i7OCYkdvqeZ7fdEanmKdGq JdA32CgmZIlDCDKJ4ocLRtjxREU+FMX/auGU5JjPh/j57JjsO0Hh5rCkdjlZ8b88NJSj1slq37Ba i3d6spRWEg5STg+iSEPewneDYgERvs54u2Cp6OBPzFrmWh8cJDA0qVi6LieG7DOxoUBEVsrIh5Mr RnnX+IpJhlwJs/jT+boJqBbJAgMBAAGgADANBgkqhkiG9w0BAQsFAAOCAQEAZ8ODdorMuDcmsK3t GRGm28svld5fm/WN/nMC+zQhyUv97kwx/dGkotiGLmgzx8NrkFLicOSZ7qf/t4WlaJcdfrwEts19 fGM1YGpF9bJNXsai7hW2W7CBIT70eTSgEB2C3XQWU4D+NbOnoj4jb9LEsI04bRyFZydDx1KavzP1 fs58Z5REj0RZ54yk9pGcFsXuK+WxV9B+KYpMcyGbope8tdiBy0xzXPbbcbYL9Tgu4LUmzrbaMEb6 0ZAJqnYXzeqAeIvgkP1+FYsuPnC+eia0WoJa9zVQlWmHGwrgY0tmIBiV1wONRHHj5m5IDuqsVNze UDOoty8Z6a0z8MCJU6M+nA== -----END CERTIFICATE REQUEST----- -----BEGIN CERTIFICATE----- MIIDeDCCAmCgAwIBAgIBAjANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTJaFw0xNDAxMjEx NDIyMTJaMDoxEjAQBgNVBAoTCXNpbGVudGRvbTEkMCIGA1UEAxMbT0NTUCBTaWduaW5nIENlcnRp ZmljYXRlLWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzEST8TPkJPlIVTG/sPF dr1aotygRMjMRHZS+CGTuuVXvE1bTstctklqVG+GctX4Bipy9UlV+8/SZvRY7BqqaSvV4LRoVy7G 1NuuCXC037YIljAsN/VfLeQq/JsdFCJqC2nvrQcViZhBEUt4uzgmJHb6nme33RGp5inRqiXQN9go JmSJQwgyieKHC0bY8URFPhTF/2rhlOSYz4f4+eyY7DtB4eawpHY5WfG/PDSUo9bJat+wWot3erKU VhIOUk4PokhD3sJ3g2IBEb7OeLtgqejgT8xa5lofHCQwNKlYui4nhuwzsaFARFbKyIeTK0Z51/iK SYZcCbP40/m6CagWyQIDAQABo4GLMIGIMB8GA1UdIwQYMBaAFEOs9jCROrWHDKLUryphbeXnYeIa MA4GA1UdDwEB/wQEAwIBxjBABggrBgEFBQcBAQQ0MDIwMAYIKwYBBQUHMAGGJGh0dHA6Ly9mMTYt cGtpLnRlc3QuY29tOjkxODAvY2Evb2NzcDATBgNVHSUEDDAKBggrBgEFBQcDCTANBgkqhkiG9w0B AQ0FAAOCAQEAvasXlsRC7sHBUtSUWJzV0I3K8uENUQUZRzZPQq/2QP+fnXCxIK6UQetjuLPxUGpK Dg9spNGk2PfnXBwrddMKxrPaohdqxMJAt+nP5+Vzeb7g9lDpK+trijuD+J3S0kMW27HrP38EEB/m 2/2Onk2uK6YJiGkPJtHl/4bYq1Gf0LbI/8rn86O35Ne0ZrhYCqZOQxeurtrkeygzd63ghBaUxXyo C74Ndwa5l+BGH91EdpGxF01cJy9DkRwivmJyiVt3/IhlC7wqJ47f3TMs3cNIQ34NgoQCHizMZY0P D6FlMf8JkpAeYWj4olaCwfst9XVsRbcLuboQeTmzsc4/MQGqzA== -----END CERTIFICATE----- local cn=OCSP Signing Certificate-ca,o=silentdom Certificate: Data: Version: v3 Serial Number: 0x2 Signature Algorithm: SHA512withRSA - 1.2.840.113549.1.1.13 Issuer: CN=Certificate Authority-ca,O=silentdom Validity: Not Before: Wednesday, February 1, 2012 9:22:12 AM EST US/Eastern Not After: Tuesday, January 21, 2014 9:22:12 AM EST US/Eastern Subject: CN=OCSP Signing Certificate-ca,O=silentdom Subject Public Key Info: Algorithm: RSA - 1.2.840.113549.1.1.1 Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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xtensions: Identifier: Authority Key Identifier - 2.5.29.35 Critical: no Key Identifier: 43:AC:F6:30:91:3A:B5:87:0C:A2:D4:AF:2A:61:6D:E5: E7:61:E2:1A Identifier: Key Usage: - 2.5.29.15 Critical: yes Key Usage: Digital Signature Non Repudiation Key CertSign Crl Sign Identifier: Authority Info Access: - 1.3.6.1.5.5.7.1.1 Critical: no Access Description: Method #0: ocsp Location #0: URIName: http://f16-pki.test.com:9180/ca/ocsp Identifier: Extended Key Usage: - 2.5.29.37 Critical: no Extended Key Usage: OCSPSigning Signature: Algorithm: SHA512withRSA - 1.2.840.113549.1.1.13 Signature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ingerPrint MD2: 93:D2:E7:CC:32:AB:7F:0A:FF:8C:69:BB:94:E6:E2:4D MD5: 11:39:8E:C3:68:70:59:52:8E:ED:E7:AC:3B:4A:0B:36 SHA1: 9F:35:1D:65:7B:3A:B3:12:A8:90:DA:4A:BD:28:96:ED: 2F:3C:F1:E8 SHA256: DA:6E:14:4A:B3:27:E3:AB:5F:C9:2C:72:50:4B:B6:2E: ED:E8:2A:DA:DF:7D:0F:51:65:28:D6:50:D9:8F:70:94 SHA512: 1E:C4:CB:62:E8:52:48:3C:1C:97:31:84:54:E9:98:AA: 9C:E9:25:F7:10:F8:66:61:49:42:38:6E:53:C7:A4:F3: 9F:E0:CA:BA:35:0C:11:33:57:06:88:96:01:AE:B8:78: D5:2C:03:17:4E:4C:F0:0A:1D:CC:B1:E1:46:84:B3:C6 Server-Cert cert-pki-ca Internal Key Storage Token -----BEGIN CERTIFICATE REQUEST----- MIICdDCCAVwCAQAwLzESMBAGA1UEChMJc2lsZW50ZG9tMRkwFwYDVQQDExBmMTYtcGtpLnRlc3Qu Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTKReNQpZLP0V4Tztch+ApO3yreb C83CcFdfhvm2eGSc6HhfxHixWLecFFQ97fxRkAZ0i9f8GDHsws+ZwH17HfIDNeiHyVT0/jBdDiA2 MLI3H08fPg2s4DDlilCzQrPs1iZzW/0rC8pfrmoITjs5FcFtW8+QNydRupgMdFoPhWXLf/PpltZP xeLTng4blWAjbsx+8amFe4x88FLznDpoyw+qMdov5mV8+nVXGOnFTFrajqhkDlsuiF4FLmYp1/Lc +udwl/mWi2IjiS0CzAVyh2PZYaONxRrP1juBPYvti1ftF7x2buCLWQvllUUMc7J4GGdzJHuCvQMa tCHZu1/LtwIDAQABoAAwDQYJKoZIhvcNAQELBQADggEBAEuJqKJFNblHALKXu3+xNJnxsdwlpiSs sr7N+HLaw/OvNwNHukJxyNBMGHZcQ0/3JpjnIXD+u5wpH30mo8dSaNUnWYjEw+8F9/rCxvK6PMsv T/F9Dmepvp/k6kEnXUth6NEoG9t2CrMCqA6+SKEiI5QPpDkDMHFhg/lQ770mkuJs8LExL6ihI57C ThAnLZWMI7yNXUnpXCLZoPEGfZN4/c/+mUHI9NCeQelJcFotwuBfOx/nd8GeokdwxGiiiYeKMFk2 lO86g+ICc6p12qEJT5skdj9PIooUa5WI88zmCVTfMvyHIuohdaqVzRF+JqJE260F0VcYnAXj7kgL y8UdExM= -----END CERTIFICATE REQUEST----- -----BEGIN CERTIFICATE----- MIIDbTCCAlWgAwIBAgIBAzANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTNaFw0xNDAxMjEx NDIyMTNaMC8xEjAQBgNVBAoTCXNpbGVudGRvbTEZMBcGA1UEAxMQZjE2LXBraS50ZXN0LmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL0ykXjUKWSz9FeE87XIfgKTt8q3mwvNwnBX X4b5tnhknOh4X8R4sVi3nBRUPe38UZAGdIvX/Bgx7MLPmcB9ex3yAzXoh8lU9P4wXQ4gNjCyNx9P Hz4NrOAw5YpQs0Kz7NYmc1v9KwvKX65qCE47ORXBbVvPkDcnUbqYDHRaD4Vly3/z6ZbWT8Xi054O G5VgI27MfvGphXuMfPBS85w6aMsPqjHaL+ZlfPp1VxjpxUxa2o6oZA5bLoheBS5mKdfy3PrncJf5 lotiI4ktAswFcodj2WGjjcUaz9Y7gT2L7YtX7Re8dm7gi1kL5ZVFDHOyeBhncyR7gr0DGrQh2btf y7cCAwEAAaOBizCBiDAfBgNVHSMEGDAWgBRDrPYwkTq1hwyi1K8qYW3l52HiGjBABggrBgEFBQcB AQQ0MDIwMAYIKwYBBQUHMAGGJGh0dHA6Ly9mMTYtcGtpLnRlc3QuY29tOjkxODAvY2Evb2NzcDAO BgNVHQ8BAf8EBAMCBPAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDQYJKoZIhvcNAQENBQADggEBALAI 4ocMpWtq8p4xMOEopISyyDlDHQ82zKVAXiPAlbKcZe7FP2c6KUdQ18WZB/f9UK4nLINdKk2aQ6Rc tWrA4+E24XRyMwgMHvIlKDVMXy9XJl31fuSOJC1xZBBhdMaUssSFDssRiyrgAaG7363RuYycVVUB 1Or5AYcQdv3Omc0pJu4yr01x0FVMpquRkpC5jl2C9pyIh0vcyUJiu/Tu9WVDXIeLme3fao5IgyyV 7I0GRe+vLgxO4CKtd3bI9OkctWCO5Zsv6j0IppHtz0d/JOmJ+JfAAQ94EtV8VyJ3QzGVd4b65d4i 3NftGLrxYDgMFvWiyTP7oE18JT8i7yos3KA= -----END CERTIFICATE----- local cn=f16-pki.test.com,o=silentdom Certificate: Data: Version: v3 Serial Number: 0x3 Signature Algorithm: SHA512withRSA - 1.2.840.113549.1.1.13 Issuer: CN=Certificate Authority-ca,O=silentdom Validity: Not Before: Wednesday, February 1, 2012 9:22:13 AM EST US/Eastern Not After: Tuesday, January 21, 2014 9:22:13 AM EST US/Eastern Subject: CN=f16-pki.test.com,O=silentdom Subject Public Key Info: Algorithm: RSA - 1.2.840.113549.1.1.1 Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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xtensions: Identifier: Authority Key Identifier - 2.5.29.35 Critical: no Key Identifier: 43:AC:F6:30:91:3A:B5:87:0C:A2:D4:AF:2A:61:6D:E5: E7:61:E2:1A Identifier: Authority Info Access: - 1.3.6.1.5.5.7.1.1 Critical: no Access Description: Method #0: ocsp Location #0: URIName: http://f16-pki.test.com:9180/ca/ocsp Identifier: Key Usage: - 2.5.29.15 Critical: yes Key Usage: Digital Signature Non Repudiation Key Encipherment Data Encipherment Identifier: Extended Key Usage: - 2.5.29.37 Critical: no Extended Key Usage: 1.3.6.1.5.5.7.3.1 Signature: Algorithm: SHA512withRSA - 1.2.840.113549.1.1.13 Signature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ingerPrint MD2: 7D:A1:75:74:4A:0F:9F:20:1B:F3:56:4B:3A:0E:1C:43 MD5: F6:3F:8A:59:03:4E:F0:6E:E0:CE:87:8F:45:CC:DE:FA SHA1: AB:1F:5F:0E:88:84:C8:AB:35:C9:7C:AA:75:EF:FC:6A: E0:DB:3E:2B SHA256: FC:BE:9C:D4:C8:88:A5:DB:B4:3A:A9:16:97:8F:2E:C9: 69:21:B1:C6:B2:46:90:10:8E:9C:60:46:82:27:32:6E SHA512: 2E:50:17:4F:5F:9E:42:D7:61:D9:67:30:7F:1E:47:B0: E1:0E:DB:76:E5:6B:F8:15:64:19:6E:D3:28:1C:9C:CC: 27:DC:16:AF:4D:E6:D0:90:C6:6F:0E:28:18:C8:A9:2D: 90:B7:55:AC:39:8D:0C:A9:BA:7A:2F:5C:16:9B:96:F8 subsystemCert cert-pki-ca Internal Key Storage Token -----BEGIN CERTIFICATE REQUEST----- MIICfzCCAWcCAQAwOjESMBAGA1UEChMJc2lsZW50ZG9tMSQwIgYDVQQDExtDQSBTdWJzeXN0ZW0g Q2VydGlmaWNhdGUtY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6XNtch9FzUCh K9m2MgXeI/aaC0o+TmRkTHeY1JN2x/0g/fTA3NFSli64g/Si4dJzi0vqPIibwHc+uDzmAdFZyOE0 NgtI8hzteSHT0EwzHoccuvnD4aailU136QUJdqD4ANbrkffHskZ1R8VI3CMxRRzraVtw9jw9DeJv cu2Ut7fHVwQB9MYZecKvxA+qeILi/NHAoVZw1qAUBkQadtNrB+cCVCM0qDVAL76FPZVaJzFj7jv4 DjnhiVLP3av0P308j55WF11ybEWMX4WE/A/ghK6uIb8bw/Ogur2WUtbmO0EXRl47dXud2FWs4ttC sYT4FBOwOMADLD7FiPoKHiLjAgMBAAGgADANBgkqhkiG9w0BAQsFAAOCAQEASco2bzcW0UuQyJ1l ofdioPB+Qc8ggg0P6PWtR1h/v8LPL34NlfwLxJfmDqvmd0WbLBk2wDDGzAsR8WxKUP/3N1jc/eOF nDf/iJ1SCEbW2fK8mWD1uoCnoM+gUQo0fhMJLs0jN0VoCnyEbhSaVII9JqOstpM/fyadjk5IN3h6 0wBDH6ol0uUTKMCIU52TONvp0laWtOuoDNFeqrUtvxBk1ynxoUGahRYK4cneZJshQy9jBQ0w2DEl sP9+gHz4W+o2pXZM5jeKH3hPab2b9NhCEVSKQ1zPrSi5gJm2JQx+iZu9tFwmC7fcLzzFeiVoZ9hy ovpFR+w7jG9IaPMow26FSA== -----END CERTIFICATE REQUEST----- -----BEGIN CERTIFICATE----- MIIDgjCCAmqgAwIBAgIBBDANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTNaFw0xNDAxMjEx NDIyMTNaMDoxEjAQBgNVBAoTCXNpbGVudGRvbTEkMCIGA1UEAxMbQ0EgU3Vic3lzdGVtIENlcnRp ZmljYXRlLWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyulzbXIfRc1AoSvZtjIF 3iP2mgtKPk5kZEx3mNSTdsf9IP30wNzRUpYuuIP0ouHSc4tL6jyIm8B3Prg85gHRWcjhNDYLSPIc 7Xkh09BMMx6HHLr5w+GmopVNd+kFCXag+ADW65H3x7JGdUfFSNwjMUUc62lbcPY8PQ3ib3LtlLe3 x1cEAfTGGXnCr8QPqniC4vzRwKFWcNagFAZEGnbTawfnAlQjNKg1QC++hT2VWicxY+47+A454YlS z92r9D99PI+eVhddcmxFjF+FhPwP4ISuriG/G8PzoLq9llLW5jtBF0ZeO3V7ndhVrOLbQrGE+BQT sDjAAyw+xYj6Ch4i4wIDAQABo4GVMIGSMB8GA1UdIwQYMBaAFEOs9jCROrWHDKLUryphbeXnYeIa MEAGCCsGAQUFBwEBBDQwMjAwBggrBgEFBQcwAYYkaHR0cDovL2YxNi1wa2kudGVzdC5jb206OTE4 MC9jYS9vY3NwMA4GA1UdDwEB/wQEAwIE8DAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DQYJKoZIhvcNAQENBQADggEBAHoZH9DyamsBC/3ugUckYGt5+Fau6SUCl70dLq+PoQ0sjpeKrfwz gQS6J+xLXWNsFtfL7H9w2Cvr6piFdX+SsgOeTmom1KbygRfTuBeglwaQMhfE1MqJFWWnYO9QVqJJ tX5JNwBQNhDuVCrTiVDLs2T1N4mPGTENoQqaDpsbOzNdnBVhUM5vbWZ1Ql+5iDmVE/Yc7yeGIIn4 lTLKi2OOXaL8+fxH97fRIUCIbdx57Ghwfk8lEyTh67fRS0Ng2UKRMua+Ma+fNNAI30EVqpM/t4DB TNgjvgYG+toQt9fjvICnoPsoOKV8Aay/fv6bjFOa7WlIr4lVmZuYdA8ZL6+JWlo= -----END CERTIFICATE----- local cn=CA Subsystem Certificate-ca,o=silentdom Certificate: Data: Version: v3 Serial Number: 0x4 Signature Algorithm: SHA512withRSA - 1.2.840.113549.1.1.13 Issuer: CN=Certificate Authority-ca,O=silentdom Validity: Not Before: Wednesday, February 1, 2012 9:22:13 AM EST US/Eastern Not After: Tuesday, January 21, 2014 9:22:13 AM EST US/Eastern Subject: CN=CA Subsystem Certificate-ca,O=silentdom Subject Public Key Info: Algorithm: RSA - 1.2.840.113549.1.1.1 Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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xtensions: Identifier: Authority Key Identifier - 2.5.29.35 Critical: no Key Identifier: 43:AC:F6:30:91:3A:B5:87:0C:A2:D4:AF:2A:61:6D:E5: E7:61:E2:1A Identifier: Authority Info Access: - 1.3.6.1.5.5.7.1.1 Critical: no Access Description: Method #0: ocsp Location #0: URIName: http://f16-pki.test.com:9180/ca/ocsp Identifier: Key Usage: - 2.5.29.15 Critical: yes Key Usage: Digital Signature Non Repudiation Key Encipherment Data Encipherment Identifier: Extended Key Usage: - 2.5.29.37 Critical: no Extended Key Usage: 1.3.6.1.5.5.7.3.1 1.3.6.1.5.5.7.3.2 Signature: Algorithm: SHA512withRSA - 1.2.840.113549.1.1.13 Signature: 7A:19:1F:D0:F2:6A:6B:01:0B:FD:EE:81:47:24:60:6B: 79:F8:56:AE:E9:25:02:97:BD:1D:2E:AF:8F:A1:0D:2C: 8E:97:8A:AD:FC:33:81:04:BA:27:EC:4B:5D:63:6C:16: D7:CB:EC:7F:70:D8:2B:EB:EA:98:85:75:7F:92:B2:03: 9E:4E:6A:26:D4:A6:F2:81:17:D3:B8:17:A0:97:06:90: 32:17:C4:D4:CA:89:15:65:A7:60:EF:50:56:A2:49:B5: 7E:49:37:00:50:36:10:EE:54:2A:D3:89:50:CB:B3:64: F5:37:89:8F:19:31:0D:A1:0A:9A:0E:9B:1B:3B:33:5D: 9C:15:61:50:CE:6F:6D:66:75:42:5F:B9:88:39:95:13: F6:1C:EF:27:86:20:89:F8:95:32:CA:8B:63:8E:5D:A2: FC:F9:FC:47:F7:B7:D1:21:40:88:6D:DC:79:EC:68:70: 7E:4F:25:13:24:E1:EB:B7:D1:4B:43:60:D9:42:91:32: E6:BE:31:AF:9F:34:D0:08:DF:41:15:AA:93:3F:B7:80: C1:4C:D8:23:BE:06:06:FA:DA:10:B7:D7:E3:BC:80:A7: A0:FB:28:38:A5:7C:01:AC:BF:7E:FE:9B:8C:53:9A:ED: 69:48:AF:89:55:99:9B:98:74:0F:19:2F:AF:89:5A:5A FingerPrint MD2: 3F:1E:CF:D7:8D:81:96:8E:8A:FD:E8:E6:C4:88:6C:57 MD5: B2:5C:36:A5:6E:41:E3:4E:66:21:2F:B3:02:DA:CF:36 SHA1: AE:32:F4:3B:03:6D:56:51:3F:18:0B:AF:8D:E2:EA:70: 6F:7D:2B:98 SHA256: 7D:AE:18:DD:4F:98:66:46:60:EC:B8:4A:8B:EF:D5:0B: 9E:5A:B9:29:CD:2F:C8:FC:EA:26:8F:A2:6A:5E:03:B6 SHA512: F5:2D:FD:C6:B6:AF:B7:53:B7:0A:FF:1F:96:D4:0C:31: 37:C9:6E:2B:23:64:9A:99:32:8B:EB:45:14:FA:55:DE: 0E:49:BC:96:4E:6C:60:A3:3D:EC:5F:7F:A0:F4:B3:83: D2:05:4B:C8:DC:61:92:25:A2:1F:E1:D8:6B:D3:65:09 auditSigningCert cert-pki-ca Internal Key Storage Token -----BEGIN CERTIFICATE REQUEST----- MIICgzCCAWsCAQAwPjESMBAGA1UEChMJc2lsZW50ZG9tMSgwJgYDVQQDEx9DQSBBdWRpdCBTaWdu aW5nIENlcnRpZmljYXRlLWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JiBAjn/ xVbzPhvMVICZZS8nbNXc7LYMypabdRf3M328qiRQ5tDkVhwYm1bxnmtzrF415K+knC4gPXmH42IL j106mXxa0Fg0xe/P9rHj/oMX+9lQvZeOKER6axHz2JfgSu0mKQ0ax4m8dtawx4uMDj+CIfAf6p7r lcdTayZTOJuou+4AObAeJMZb6tVa+S/mzx7ckhDPkCT4bUIx+E9SK9ZuloBZWkUrc7wtaul69Ip9 r8dp2gI+vTCy0KksAD1GumrYRqVXkjhRpAzUC5jYqjM5SH+Q3xzqUcyGpXci8a4Oa7h0HvVH1VMx EjRlkAwh2WbMZJZXPBrKGs2AF2R5JwIDAQABoAAwDQYJKoZIhvcNAQELBQADggEBAMitLeXDEjb1 yywXSWuB+G+Q/IfWpNzBM9nv5OVFSru1qbfEqVHsXe1BPUR9YNS7jW0YTrq83DxtrtAg256sbkw0 07mjDg/gUKAIyy2eG2hdDUQMQ+cKJqWy48Ynz5reTw9MvWkJd6615Z6NW8/Z1nzfVfIp1EEvu4UF gn+fmmlI7nl3nWceTOl5mLZw4K+koFJmfnRrSZ4lTs3z34/u7++8J8O/2J14hGw+a9Llwh2t5JMM RgOTlCBZZDgFSxInV/jS1F9B7742cdV5lZEDfnaWPImJigf54baFHtygHl4Cpy5XAi/keErQRlkf GW9Q1iiYP3T8P74Dz0Y/KPt7EhU= -----END CERTIFICATE REQUEST----- -----BEGIN CERTIFICATE----- MIIDZTCCAk2gAwIBAgIBBTANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTNaFw0xNDAxMjEx NDIyMTNaMD4xEjAQBgNVBAoTCXNpbGVudGRvbTEoMCYGA1UEAxMfQ0EgQXVkaXQgU2lnbmluZyBD ZXJ0aWZpY2F0ZS1jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANiYgQI5/8VW8z4b zFSAmWUvJ2zV3Oy2DMqWm3UX9zN9vKokUObQ5FYcGJtW8Z5rc6xeNeSvpJwuID15h+NiC49dOpl8 WtBYNMXvz/ax4/6DF/vZUL2XjihEemsR89iX4ErtJikNGseJvHbWsMeLjA4/giHwH+qe65XHU2sm UzibqLvuADmwHiTGW+rVWvkv5s8e3JIQz5Ak+G1CMfhPUivWbpaAWVpFK3O8LWrpevSKfa/HadoC Pr0wstCpLAA9Rrpq2EalV5I4UaQM1AuY2KozOUh/kN8c6lHMhqV3IvGuDmu4dB71R9VTMRI0ZZAM IdlmzGSWVzwayhrNgBdkeScCAwEAAaN1MHMwHwYDVR0jBBgwFoAUQ6z2MJE6tYcMotSvKmFt5edh 4howDgYDVR0PAQH/BAQDAgbAMEAGCCsGAQUFBwEBBDQwMjAwBggrBgEFBQcwAYYkaHR0cDovL2Yx Ni1wa2kudGVzdC5jb206OTE4MC9jYS9vY3NwMA0GCSqGSIb3DQEBDQUAA4IBAQAE4ujwClHFiS/7 uEJZuGIDI9Gs2NfdkVX0W73xFPe0n7zBil71moYb/3m5BIq7R5Lch8uDPptJnij7F62bbinrza+E tHxK9Vyt7iFZ3J7VMz9WEaEfmlsdlYFCV8Gc52HuYXW9xcTt9U/T5P6NbbPUODPphdjNW09E/W0Q i9JLn538WRhmovxd99BqfxGXcLejAfCXV5VNMBGV9HPby960iIVbbC+FAz6aRROviTaUXykvXLQl AcU2T1PW214Fc/FhcVK+GH06enVbe8FzoOK7dewjqPkWuo0jVOhXt8XTvOEUJPcQowR6fWwnQDFC d6PK4CVsOD2hHFkqIO2r2+Oi -----END CERTIFICATE----- local cn=CA Audit Signing Certificate-ca,o=silentdom Certificate: Data: Version: v3 Serial Number: 0x5 Signature Algorithm: SHA512withRSA - 1.2.840.113549.1.1.13 Issuer: CN=Certificate Authority-ca,O=silentdom Validity: Not Before: Wednesday, February 1, 2012 9:22:13 AM EST US/Eastern Not After: Tuesday, January 21, 2014 9:22:13 AM EST US/Eastern Subject: CN=CA Audit Signing Certificate-ca,O=silentdom Subject Public Key Info: Algorithm: RSA - 1.2.840.113549.1.1.1 Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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xtensions: Identifier: Authority Key Identifier - 2.5.29.35 Critical: no Key Identifier: 43:AC:F6:30:91:3A:B5:87:0C:A2:D4:AF:2A:61:6D:E5: E7:61:E2:1A Identifier: Key Usage: - 2.5.29.15 Critical: yes Key Usage: Digital Signature Non Repudiation Identifier: Authority Info Access: - 1.3.6.1.5.5.7.1.1 Critical: no Access Description: Method #0: ocsp Location #0: URIName: http://f16-pki.test.com:9180/ca/ocsp Signature: Algorithm: SHA512withRSA - 1.2.840.113549.1.1.13 Signature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ingerPrint MD2: FC:F1:D6:35:24:DA:04:D2:C5:0A:AE:7A:7A:44:78:74 MD5: EC:CF:45:91:A1:63:B7:42:DD:79:B4:C9:71:85:3E:23 SHA1: 14:A1:78:06:43:D8:C7:F4:91:0A:03:1C:39:91:29:81: 94:B3:D1:6C SHA256: 6C:28:83:4C:3B:28:69:3A:82:B4:A9:E1:AA:51:6A:F1: E8:88:85:43:FE:AF:9A:84:44:58:C0:1C:CB:4E:39:91 SHA512: 8B:61:E8:E5:7D:A4:FB:4F:8F:C9:C7:6F:08:C2:6E:E2: 98:4E:7B:34:CD:20:2B:F8:3E:28:F4:A9:D5:0B:C9:2C: 0B:21:09:17:EB:1B:09:27:05:60:C1:EB:EC:25:03:D0: B3:00:73:2E:13:3F:FB:BC:9C:61:5E:9A:C4:A4:44:4A display success 19 Requests and Certificates welcome Welcome module Key Store confighsmlogin ConfigHSMLogin securitydomain Security Domain securitydomain Display Certificate Chain subsystem Subsystem Type clone Display Certificate Chain restorekeys Import Keys and Certificates cahierarchy PKI Hierarchy database Internal Database size Key Pairs subjectname Subject Names certrequest Requests and Certificates backupkeys Export Keys and Certificates savepk12 Save Keys and Certificates importcachain Import CA's Certificate Chain admin Administrator importadmincert Import Administrator's Certificate done Done CA Setup Wizard

12

certrequest tag=Request value=-----BEGIN CERTIFICATE REQUEST----- MIICfDCCAWQCAQAwNzESMBAGA1UEChMJc2lsZW50ZG9tMSEwHwYDVQQDExhDZXJ0aWZpY2F0ZSBB dXRob3JpdHktY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh1cntKFZbv0YM+JNv CV+ydIJh5+VwkSRWCYWLnbaPEuCFg+vlY+Zlw93gi/tTCHa/m4OGbd2GNXoUoU+5G3Tp4XdeHXOU /KLqK5/uiGJlIhPaV1qlTGhf+rDSXmZoIJSsEviMlOP0CWtgosLVRxsndNCLH/pndddclmjm+fu8 sUkArcrtZSLLldXr22ioZdbXxljUvW80oPHxLtu8kkkNvzEDqzhvxgJlGmY/2zHjzayhJ902gxrT 8beOk5yWST3cVPrxg8+Ix/x+Yo1NaxpDKRoLWpJirblXtwN1SGjQkaZYhmTS/7Pz/VhVEQla6EZi kfx42xaw4wNMOmDkYQAzAgMBAAGgADANBgkqhkiG9w0BAQ0FAAOCAQEAVFj6zKRZee9moPcJ5aTA TqMJzh2KTcjpUWmAnHMhi7tBUfV47bR8DhwsHa16BdcTiWx66D/chdmqnnuZI+DRNpjnE5j/eXSC 6W++gZvSMxXFxutQ3Hhp6qHiyJq6DJTInyLiaI3kPBzrBrfEAsUwXP6gIm2kX6+WLOBAgBPBjtgR pqvXbgg4oBqqujciMNqnKaBldV4Ym/yShYPWnPvtG4bznxWKbs2p47mmWa113vcFV8B6iCEU8t9t o9C6tGVCTvpvbs+eDRXX9CySiWzZhyAUXjLXbgBqPhBEedoiOpd79C/Dr71kSw/CiHgR3VY/5u7U qCJkLDimB65fNXAo4Q== -----END CERTIFICATE REQUEST----- tag=Request value=-----BEGIN CERTIFICATE REQUEST----- MIICfzCCAWcCAQAwOjESMBAGA1UEChMJc2lsZW50ZG9tMSQwIgYDVQQDExtPQ1NQIFNpZ25pbmcg Q2VydGlmaWNhdGUtY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMRJPxM+Qk+Uh VMb+w8V2vVqi3KBEyMxEdlL4IZO65Ve8TVtOy1y2SWpUb4Zy1fgGKnL1SVX7z9Jm9FjsGqppK9Xg tGhXLsbU264JcLTftgiWMCw39V8t5Cr8mx0UImoLae+tBxWJmEERS3i7OCYkdvqeZ7fdEanmKdGq JdA32CgmZIlDCDKJ4ocLRtjxREU+FMX/auGU5JjPh/j57JjsO0Hh5rCkdjlZ8b88NJSj1slq37Ba i3d6spRWEg5STg+iSEPewneDYgERvs54u2Cp6OBPzFrmWh8cJDA0qVi6LieG7DOxoUBEVsrIh5Mr RnnX+IpJhlwJs/jT+boJqBbJAgMBAAGgADANBgkqhkiG9w0BAQsFAAOCAQEAZ8ODdorMuDcmsK3t GRGm28svld5fm/WN/nMC+zQhyUv97kwx/dGkotiGLmgzx8NrkFLicOSZ7qf/t4WlaJcdfrwEts19 fGM1YGpF9bJNXsai7hW2W7CBIT70eTSgEB2C3XQWU4D+NbOnoj4jb9LEsI04bRyFZydDx1KavzP1 fs58Z5REj0RZ54yk9pGcFsXuK+WxV9B+KYpMcyGbope8tdiBy0xzXPbbcbYL9Tgu4LUmzrbaMEb6 0ZAJqnYXzeqAeIvgkP1+FYsuPnC+eia0WoJa9zVQlWmHGwrgY0tmIBiV1wONRHHj5m5IDuqsVNze UDOoty8Z6a0z8MCJU6M+nA== -----END CERTIFICATE REQUEST----- tag=Request value=-----BEGIN CERTIFICATE REQUEST----- MIICdDCCAVwCAQAwLzESMBAGA1UEChMJc2lsZW50ZG9tMRkwFwYDVQQDExBmMTYtcGtpLnRlc3Qu Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTKReNQpZLP0V4Tztch+ApO3yreb C83CcFdfhvm2eGSc6HhfxHixWLecFFQ97fxRkAZ0i9f8GDHsws+ZwH17HfIDNeiHyVT0/jBdDiA2 MLI3H08fPg2s4DDlilCzQrPs1iZzW/0rC8pfrmoITjs5FcFtW8+QNydRupgMdFoPhWXLf/PpltZP xeLTng4blWAjbsx+8amFe4x88FLznDpoyw+qMdov5mV8+nVXGOnFTFrajqhkDlsuiF4FLmYp1/Lc +udwl/mWi2IjiS0CzAVyh2PZYaONxRrP1juBPYvti1ftF7x2buCLWQvllUUMc7J4GGdzJHuCvQMa tCHZu1/LtwIDAQABoAAwDQYJKoZIhvcNAQELBQADggEBAEuJqKJFNblHALKXu3+xNJnxsdwlpiSs sr7N+HLaw/OvNwNHukJxyNBMGHZcQ0/3JpjnIXD+u5wpH30mo8dSaNUnWYjEw+8F9/rCxvK6PMsv T/F9Dmepvp/k6kEnXUth6NEoG9t2CrMCqA6+SKEiI5QPpDkDMHFhg/lQ770mkuJs8LExL6ihI57C ThAnLZWMI7yNXUnpXCLZoPEGfZN4/c/+mUHI9NCeQelJcFotwuBfOx/nd8GeokdwxGiiiYeKMFk2 lO86g+ICc6p12qEJT5skdj9PIooUa5WI88zmCVTfMvyHIuohdaqVzRF+JqJE260F0VcYnAXj7kgL y8UdExM= -----END CERTIFICATE REQUEST----- tag=Request value=-----BEGIN CERTIFICATE REQUEST----- MIICfzCCAWcCAQAwOjESMBAGA1UEChMJc2lsZW50ZG9tMSQwIgYDVQQDExtDQSBTdWJzeXN0ZW0g Q2VydGlmaWNhdGUtY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6XNtch9FzUCh K9m2MgXeI/aaC0o+TmRkTHeY1JN2x/0g/fTA3NFSli64g/Si4dJzi0vqPIibwHc+uDzmAdFZyOE0 NgtI8hzteSHT0EwzHoccuvnD4aailU136QUJdqD4ANbrkffHskZ1R8VI3CMxRRzraVtw9jw9DeJv cu2Ut7fHVwQB9MYZecKvxA+qeILi/NHAoVZw1qAUBkQadtNrB+cCVCM0qDVAL76FPZVaJzFj7jv4 DjnhiVLP3av0P308j55WF11ybEWMX4WE/A/ghK6uIb8bw/Ogur2WUtbmO0EXRl47dXud2FWs4ttC sYT4FBOwOMADLD7FiPoKHiLjAgMBAAGgADANBgkqhkiG9w0BAQsFAAOCAQEASco2bzcW0UuQyJ1l ofdioPB+Qc8ggg0P6PWtR1h/v8LPL34NlfwLxJfmDqvmd0WbLBk2wDDGzAsR8WxKUP/3N1jc/eOF nDf/iJ1SCEbW2fK8mWD1uoCnoM+gUQo0fhMJLs0jN0VoCnyEbhSaVII9JqOstpM/fyadjk5IN3h6 0wBDH6ol0uUTKMCIU52TONvp0laWtOuoDNFeqrUtvxBk1ynxoUGahRYK4cneZJshQy9jBQ0w2DEl sP9+gHz4W+o2pXZM5jeKH3hPab2b9NhCEVSKQ1zPrSi5gJm2JQx+iZu9tFwmC7fcLzzFeiVoZ9hy ovpFR+w7jG9IaPMow26FSA== -----END CERTIFICATE REQUEST----- tag=Request value=-----BEGIN CERTIFICATE REQUEST----- MIICgzCCAWsCAQAwPjESMBAGA1UEChMJc2lsZW50ZG9tMSgwJgYDVQQDEx9DQSBBdWRpdCBTaWdu aW5nIENlcnRpZmljYXRlLWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JiBAjn/ xVbzPhvMVICZZS8nbNXc7LYMypabdRf3M328qiRQ5tDkVhwYm1bxnmtzrF415K+knC4gPXmH42IL j106mXxa0Fg0xe/P9rHj/oMX+9lQvZeOKER6axHz2JfgSu0mKQ0ax4m8dtawx4uMDj+CIfAf6p7r lcdTayZTOJuou+4AObAeJMZb6tVa+S/mzx7ckhDPkCT4bUIx+E9SK9ZuloBZWkUrc7wtaul69Ip9 r8dp2gI+vTCy0KksAD1GumrYRqVXkjhRpAzUC5jYqjM5SH+Q3xzqUcyGpXci8a4Oa7h0HvVH1VMx EjRlkAwh2WbMZJZXPBrKGs2AF2R5JwIDAQABoAAwDQYJKoZIhvcNAQELBQADggEBAMitLeXDEjb1 yywXSWuB+G+Q/IfWpNzBM9nv5OVFSru1qbfEqVHsXe1BPUR9YNS7jW0YTrq83DxtrtAg256sbkw0 07mjDg/gUKAIyy2eG2hdDUQMQ+cKJqWy48Ynz5reTw9MvWkJd6615Z6NW8/Z1nzfVfIp1EEvu4UF gn+fmmlI7nl3nWceTOl5mLZw4K+koFJmfnRrSZ4lTs3z34/u7++8J8O/2J14hGw+a9Llwh2t5JMM RgOTlCBZZDgFSxInV/jS1F9B7742cdV5lZEDfnaWPImJigf54baFHtygHl4Cpy5XAi/keErQRlkf GW9Q1iiYP3T8P74Dz0Y/KPt7EhU= -----END CERTIFICATE REQUEST----- tag=Certificate value=-----BEGIN CERTIFICATE----- MIIDkDCCAnigAwIBAgIBATANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTJaFw0yMDAyMDEx NDIyMTJaMDcxEjAQBgNVBAoTCXNpbGVudGRvbTEhMB8GA1UEAxMYQ2VydGlmaWNhdGUgQXV0aG9y aXR5LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dXJ7ShWW79GDPiTbwlfsnSC YeflcJEkVgmFi522jxLghYPr5WPmZcPd4Iv7Uwh2v5uDhm3dhjV6FKFPuRt06eF3Xh1zlPyi6iuf 7ohiZSIT2ldapUxoX/qw0l5maCCUrBL4jJTj9AlrYKLC1UcbJ3TQix/6Z3XXXJZo5vn7vLFJAK3K 7WUiy5XV69toqGXW18ZY1L1vNKDx8S7bvJJJDb8xA6s4b8YCZRpmP9sx482soSfdNoMa0/G3jpOc lkk93FT68YPPiMf8fmKNTWsaQykaC1qSYq25V7cDdUho0JGmWIZk0v+z8/1YVREJWuhGYpH8eNsW sOMDTDpg5GEAMwIDAQABo4GmMIGjMB8GA1UdIwQYMBaAFEOs9jCROrWHDKLUryphbeXnYeIaMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgHGMB0GA1UdDgQWBBRDrPYwkTq1hwyi1K8qYW3l 52HiGjBABggrBgEFBQcBAQQ0MDIwMAYIKwYBBQUHMAGGJGh0dHA6Ly9mMTYtcGtpLnRlc3QuY29t OjkxODAvY2Evb2NzcDANBgkqhkiG9w0BAQ0FAAOCAQEAxDEolOwcADW2mPCFZ1nQovwZ+We/VEmw DGdAD3RLB6xiNjF+avv/wsmEY0tBfaAfxV3pe8dSEMXvbqc5A0PljYcFF9KEq4oemHT41V2BqjQp 3N3Kw5mxXrWmA4xSocInGPVZDZa+TsXy0oRUYTWAu788myUVn9VODNj29HVqRIB3XG6OvP8eJjaE WWQxZEm9t1pTLKW4FtMjoYyr7sOtMsQp7ooII9qyEqF4Cv/mVkCfglJwz/Zwy50I8HLTZi62h9PJ 1lx6ZosulvfE3NOIRWBilJCEdlJ+YXuxZUflHS+HZ6GBikGkqqUoF1InggooQNUzOiU+lmJuajSC FW1o4A== -----END CERTIFICATE----- tag=Certificate value=-----BEGIN CERTIFICATE----- MIIDeDCCAmCgAwIBAgIBAjANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTJaFw0xNDAxMjEx NDIyMTJaMDoxEjAQBgNVBAoTCXNpbGVudGRvbTEkMCIGA1UEAxMbT0NTUCBTaWduaW5nIENlcnRp ZmljYXRlLWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzEST8TPkJPlIVTG/sPF dr1aotygRMjMRHZS+CGTuuVXvE1bTstctklqVG+GctX4Bipy9UlV+8/SZvRY7BqqaSvV4LRoVy7G 1NuuCXC037YIljAsN/VfLeQq/JsdFCJqC2nvrQcViZhBEUt4uzgmJHb6nme33RGp5inRqiXQN9go JmSJQwgyieKHC0bY8URFPhTF/2rhlOSYz4f4+eyY7DtB4eawpHY5WfG/PDSUo9bJat+wWot3erKU VhIOUk4PokhD3sJ3g2IBEb7OeLtgqejgT8xa5lofHCQwNKlYui4nhuwzsaFARFbKyIeTK0Z51/iK SYZcCbP40/m6CagWyQIDAQABo4GLMIGIMB8GA1UdIwQYMBaAFEOs9jCROrWHDKLUryphbeXnYeIa MA4GA1UdDwEB/wQEAwIBxjBABggrBgEFBQcBAQQ0MDIwMAYIKwYBBQUHMAGGJGh0dHA6Ly9mMTYt cGtpLnRlc3QuY29tOjkxODAvY2Evb2NzcDATBgNVHSUEDDAKBggrBgEFBQcDCTANBgkqhkiG9w0B AQ0FAAOCAQEAvasXlsRC7sHBUtSUWJzV0I3K8uENUQUZRzZPQq/2QP+fnXCxIK6UQetjuLPxUGpK Dg9spNGk2PfnXBwrddMKxrPaohdqxMJAt+nP5+Vzeb7g9lDpK+trijuD+J3S0kMW27HrP38EEB/m 2/2Onk2uK6YJiGkPJtHl/4bYq1Gf0LbI/8rn86O35Ne0ZrhYCqZOQxeurtrkeygzd63ghBaUxXyo C74Ndwa5l+BGH91EdpGxF01cJy9DkRwivmJyiVt3/IhlC7wqJ47f3TMs3cNIQ34NgoQCHizMZY0P D6FlMf8JkpAeYWj4olaCwfst9XVsRbcLuboQeTmzsc4/MQGqzA== -----END CERTIFICATE----- tag=Certificate value=-----BEGIN CERTIFICATE----- MIIDbTCCAlWgAwIBAgIBAzANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTNaFw0xNDAxMjEx NDIyMTNaMC8xEjAQBgNVBAoTCXNpbGVudGRvbTEZMBcGA1UEAxMQZjE2LXBraS50ZXN0LmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL0ykXjUKWSz9FeE87XIfgKTt8q3mwvNwnBX X4b5tnhknOh4X8R4sVi3nBRUPe38UZAGdIvX/Bgx7MLPmcB9ex3yAzXoh8lU9P4wXQ4gNjCyNx9P Hz4NrOAw5YpQs0Kz7NYmc1v9KwvKX65qCE47ORXBbVvPkDcnUbqYDHRaD4Vly3/z6ZbWT8Xi054O G5VgI27MfvGphXuMfPBS85w6aMsPqjHaL+ZlfPp1VxjpxUxa2o6oZA5bLoheBS5mKdfy3PrncJf5 lotiI4ktAswFcodj2WGjjcUaz9Y7gT2L7YtX7Re8dm7gi1kL5ZVFDHOyeBhncyR7gr0DGrQh2btf y7cCAwEAAaOBizCBiDAfBgNVHSMEGDAWgBRDrPYwkTq1hwyi1K8qYW3l52HiGjBABggrBgEFBQcB AQQ0MDIwMAYIKwYBBQUHMAGGJGh0dHA6Ly9mMTYtcGtpLnRlc3QuY29tOjkxODAvY2Evb2NzcDAO BgNVHQ8BAf8EBAMCBPAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDQYJKoZIhvcNAQENBQADggEBALAI 4ocMpWtq8p4xMOEopISyyDlDHQ82zKVAXiPAlbKcZe7FP2c6KUdQ18WZB/f9UK4nLINdKk2aQ6Rc tWrA4+E24XRyMwgMHvIlKDVMXy9XJl31fuSOJC1xZBBhdMaUssSFDssRiyrgAaG7363RuYycVVUB 1Or5AYcQdv3Omc0pJu4yr01x0FVMpquRkpC5jl2C9pyIh0vcyUJiu/Tu9WVDXIeLme3fao5IgyyV 7I0GRe+vLgxO4CKtd3bI9OkctWCO5Zsv6j0IppHtz0d/JOmJ+JfAAQ94EtV8VyJ3QzGVd4b65d4i 3NftGLrxYDgMFvWiyTP7oE18JT8i7yos3KA= -----END CERTIFICATE----- tag=Certificate value=-----BEGIN CERTIFICATE----- MIIDgjCCAmqgAwIBAgIBBDANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTNaFw0xNDAxMjEx NDIyMTNaMDoxEjAQBgNVBAoTCXNpbGVudGRvbTEkMCIGA1UEAxMbQ0EgU3Vic3lzdGVtIENlcnRp ZmljYXRlLWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyulzbXIfRc1AoSvZtjIF 3iP2mgtKPk5kZEx3mNSTdsf9IP30wNzRUpYuuIP0ouHSc4tL6jyIm8B3Prg85gHRWcjhNDYLSPIc 7Xkh09BMMx6HHLr5w+GmopVNd+kFCXag+ADW65H3x7JGdUfFSNwjMUUc62lbcPY8PQ3ib3LtlLe3 x1cEAfTGGXnCr8QPqniC4vzRwKFWcNagFAZEGnbTawfnAlQjNKg1QC++hT2VWicxY+47+A454YlS z92r9D99PI+eVhddcmxFjF+FhPwP4ISuriG/G8PzoLq9llLW5jtBF0ZeO3V7ndhVrOLbQrGE+BQT sDjAAyw+xYj6Ch4i4wIDAQABo4GVMIGSMB8GA1UdIwQYMBaAFEOs9jCROrWHDKLUryphbeXnYeIa MEAGCCsGAQUFBwEBBDQwMjAwBggrBgEFBQcwAYYkaHR0cDovL2YxNi1wa2kudGVzdC5jb206OTE4 MC9jYS9vY3NwMA4GA1UdDwEB/wQEAwIE8DAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DQYJKoZIhvcNAQENBQADggEBAHoZH9DyamsBC/3ugUckYGt5+Fau6SUCl70dLq+PoQ0sjpeKrfwz gQS6J+xLXWNsFtfL7H9w2Cvr6piFdX+SsgOeTmom1KbygRfTuBeglwaQMhfE1MqJFWWnYO9QVqJJ tX5JNwBQNhDuVCrTiVDLs2T1N4mPGTENoQqaDpsbOzNdnBVhUM5vbWZ1Ql+5iDmVE/Yc7yeGIIn4 lTLKi2OOXaL8+fxH97fRIUCIbdx57Ghwfk8lEyTh67fRS0Ng2UKRMua+Ma+fNNAI30EVqpM/t4DB TNgjvgYG+toQt9fjvICnoPsoOKV8Aay/fv6bjFOa7WlIr4lVmZuYdA8ZL6+JWlo= -----END CERTIFICATE----- tag=Certificate value=-----BEGIN CERTIFICATE----- MIIDZTCCAk2gAwIBAgIBBTANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTNaFw0xNDAxMjEx NDIyMTNaMD4xEjAQBgNVBAoTCXNpbGVudGRvbTEoMCYGA1UEAxMfQ0EgQXVkaXQgU2lnbmluZyBD ZXJ0aWZpY2F0ZS1jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANiYgQI5/8VW8z4b zFSAmWUvJ2zV3Oy2DMqWm3UX9zN9vKokUObQ5FYcGJtW8Z5rc6xeNeSvpJwuID15h+NiC49dOpl8 WtBYNMXvz/ax4/6DF/vZUL2XjihEemsR89iX4ErtJikNGseJvHbWsMeLjA4/giHwH+qe65XHU2sm UzibqLvuADmwHiTGW+rVWvkv5s8e3JIQz5Ak+G1CMfhPUivWbpaAWVpFK3O8LWrpevSKfa/HadoC Pr0wstCpLAA9Rrpq2EalV5I4UaQM1AuY2KozOUh/kN8c6lHMhqV3IvGuDmu4dB71R9VTMRI0ZZAM IdlmzGSWVzwayhrNgBdkeScCAwEAAaN1MHMwHwYDVR0jBBgwFoAUQ6z2MJE6tYcMotSvKmFt5edh 4howDgYDVR0PAQH/BAQDAgbAMEAGCCsGAQUFBwEBBDQwMjAwBggrBgEFBQcwAYYkaHR0cDovL2Yx Ni1wa2kudGVzdC5jb206OTE4MC9jYS9vY3NwMA0GCSqGSIb3DQEBDQUAA4IBAQAE4ujwClHFiS/7 uEJZuGIDI9Gs2NfdkVX0W73xFPe0n7zBil71moYb/3m5BIq7R5Lch8uDPptJnij7F62bbinrza+E tHxK9Vyt7iFZ3J7VMz9WEaEfmlsdlYFCV8Gc52HuYXW9xcTt9U/T5P6NbbPUODPphdjNW09E/W0Q i9JLn538WRhmovxd99BqfxGXcLejAfCXV5VNMBGV9HPby960iIVbbC+FAz6aRROviTaUXykvXLQl AcU2T1PW214Fc/FhcVK+GH06enVbe8FzoOK7dewjqPkWuo0jVOhXt8XTvOEUJPcQowR6fWwnQDFC d6PK4CVsOD2hHFkqIO2r2+Oi -----END CERTIFICATE----- tag=Nickname value=caSigningCert cert-pki-ca tag=Nickname value=ocspSigningCert cert-pki-ca tag=Nickname value=Server-Cert cert-pki-ca tag=Nickname value=subsystemCert cert-pki-ca tag=Nickname value=auditSigningCert cert-pki-ca req_list_size=5 cert_list_size=5 dn_list_size=5 ca_cert_name=cn=Certificate Authority-ca,o=silentdom ocsp_cert_name=cn=OCSP Signing Certificate-ca,o=silentdom ca_subsystem_cert_name=cn=CA Subsystem Certificate-ca,o=silentdom server_cert_name=cn=f16-pki.test.com,o=silentdom audit_signing_cert_name=cn=CA Audit Signing Certificate-ca,o=silentdom ca_cert_req=-----BEGIN CERTIFICATE REQUEST----- MIICfDCCAWQCAQAwNzESMBAGA1UEChMJc2lsZW50ZG9tMSEwHwYDVQQDExhDZXJ0aWZpY2F0ZSBB dXRob3JpdHktY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh1cntKFZbv0YM+JNv CV+ydIJh5+VwkSRWCYWLnbaPEuCFg+vlY+Zlw93gi/tTCHa/m4OGbd2GNXoUoU+5G3Tp4XdeHXOU /KLqK5/uiGJlIhPaV1qlTGhf+rDSXmZoIJSsEviMlOP0CWtgosLVRxsndNCLH/pndddclmjm+fu8 sUkArcrtZSLLldXr22ioZdbXxljUvW80oPHxLtu8kkkNvzEDqzhvxgJlGmY/2zHjzayhJ902gxrT 8beOk5yWST3cVPrxg8+Ix/x+Yo1NaxpDKRoLWpJirblXtwN1SGjQkaZYhmTS/7Pz/VhVEQla6EZi kfx42xaw4wNMOmDkYQAzAgMBAAGgADANBgkqhkiG9w0BAQ0FAAOCAQEAVFj6zKRZee9moPcJ5aTA TqMJzh2KTcjpUWmAnHMhi7tBUfV47bR8DhwsHa16BdcTiWx66D/chdmqnnuZI+DRNpjnE5j/eXSC 6W++gZvSMxXFxutQ3Hhp6qHiyJq6DJTInyLiaI3kPBzrBrfEAsUwXP6gIm2kX6+WLOBAgBPBjtgR pqvXbgg4oBqqujciMNqnKaBldV4Ym/yShYPWnPvtG4bznxWKbs2p47mmWa113vcFV8B6iCEU8t9t o9C6tGVCTvpvbs+eDRXX9CySiWzZhyAUXjLXbgBqPhBEedoiOpd79C/Dr71kSw/CiHgR3VY/5u7U qCJkLDimB65fNXAo4Q== -----END CERTIFICATE REQUEST----- ocsp_cert_req=-----BEGIN CERTIFICATE REQUEST----- MIICfzCCAWcCAQAwOjESMBAGA1UEChMJc2lsZW50ZG9tMSQwIgYDVQQDExtPQ1NQIFNpZ25pbmcg Q2VydGlmaWNhdGUtY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMRJPxM+Qk+Uh VMb+w8V2vVqi3KBEyMxEdlL4IZO65Ve8TVtOy1y2SWpUb4Zy1fgGKnL1SVX7z9Jm9FjsGqppK9Xg tGhXLsbU264JcLTftgiWMCw39V8t5Cr8mx0UImoLae+tBxWJmEERS3i7OCYkdvqeZ7fdEanmKdGq JdA32CgmZIlDCDKJ4ocLRtjxREU+FMX/auGU5JjPh/j57JjsO0Hh5rCkdjlZ8b88NJSj1slq37Ba i3d6spRWEg5STg+iSEPewneDYgERvs54u2Cp6OBPzFrmWh8cJDA0qVi6LieG7DOxoUBEVsrIh5Mr RnnX+IpJhlwJs/jT+boJqBbJAgMBAAGgADANBgkqhkiG9w0BAQsFAAOCAQEAZ8ODdorMuDcmsK3t GRGm28svld5fm/WN/nMC+zQhyUv97kwx/dGkotiGLmgzx8NrkFLicOSZ7qf/t4WlaJcdfrwEts19 fGM1YGpF9bJNXsai7hW2W7CBIT70eTSgEB2C3XQWU4D+NbOnoj4jb9LEsI04bRyFZydDx1KavzP1 fs58Z5REj0RZ54yk9pGcFsXuK+WxV9B+KYpMcyGbope8tdiBy0xzXPbbcbYL9Tgu4LUmzrbaMEb6 0ZAJqnYXzeqAeIvgkP1+FYsuPnC+eia0WoJa9zVQlWmHGwrgY0tmIBiV1wONRHHj5m5IDuqsVNze UDOoty8Z6a0z8MCJU6M+nA== -----END CERTIFICATE REQUEST----- ca_subsystem_cert_req=-----BEGIN CERTIFICATE REQUEST----- MIICfzCCAWcCAQAwOjESMBAGA1UEChMJc2lsZW50ZG9tMSQwIgYDVQQDExtDQSBTdWJzeXN0ZW0g Q2VydGlmaWNhdGUtY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6XNtch9FzUCh K9m2MgXeI/aaC0o+TmRkTHeY1JN2x/0g/fTA3NFSli64g/Si4dJzi0vqPIibwHc+uDzmAdFZyOE0 NgtI8hzteSHT0EwzHoccuvnD4aailU136QUJdqD4ANbrkffHskZ1R8VI3CMxRRzraVtw9jw9DeJv cu2Ut7fHVwQB9MYZecKvxA+qeILi/NHAoVZw1qAUBkQadtNrB+cCVCM0qDVAL76FPZVaJzFj7jv4 DjnhiVLP3av0P308j55WF11ybEWMX4WE/A/ghK6uIb8bw/Ogur2WUtbmO0EXRl47dXud2FWs4ttC sYT4FBOwOMADLD7FiPoKHiLjAgMBAAGgADANBgkqhkiG9w0BAQsFAAOCAQEASco2bzcW0UuQyJ1l ofdioPB+Qc8ggg0P6PWtR1h/v8LPL34NlfwLxJfmDqvmd0WbLBk2wDDGzAsR8WxKUP/3N1jc/eOF nDf/iJ1SCEbW2fK8mWD1uoCnoM+gUQo0fhMJLs0jN0VoCnyEbhSaVII9JqOstpM/fyadjk5IN3h6 0wBDH6ol0uUTKMCIU52TONvp0laWtOuoDNFeqrUtvxBk1ynxoUGahRYK4cneZJshQy9jBQ0w2DEl sP9+gHz4W+o2pXZM5jeKH3hPab2b9NhCEVSKQ1zPrSi5gJm2JQx+iZu9tFwmC7fcLzzFeiVoZ9hy ovpFR+w7jG9IaPMow26FSA== -----END CERTIFICATE REQUEST----- server_cert_req=-----BEGIN CERTIFICATE REQUEST----- MIICdDCCAVwCAQAwLzESMBAGA1UEChMJc2lsZW50ZG9tMRkwFwYDVQQDExBmMTYtcGtpLnRlc3Qu Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTKReNQpZLP0V4Tztch+ApO3yreb C83CcFdfhvm2eGSc6HhfxHixWLecFFQ97fxRkAZ0i9f8GDHsws+ZwH17HfIDNeiHyVT0/jBdDiA2 MLI3H08fPg2s4DDlilCzQrPs1iZzW/0rC8pfrmoITjs5FcFtW8+QNydRupgMdFoPhWXLf/PpltZP xeLTng4blWAjbsx+8amFe4x88FLznDpoyw+qMdov5mV8+nVXGOnFTFrajqhkDlsuiF4FLmYp1/Lc +udwl/mWi2IjiS0CzAVyh2PZYaONxRrP1juBPYvti1ftF7x2buCLWQvllUUMc7J4GGdzJHuCvQMa tCHZu1/LtwIDAQABoAAwDQYJKoZIhvcNAQELBQADggEBAEuJqKJFNblHALKXu3+xNJnxsdwlpiSs sr7N+HLaw/OvNwNHukJxyNBMGHZcQ0/3JpjnIXD+u5wpH30mo8dSaNUnWYjEw+8F9/rCxvK6PMsv T/F9Dmepvp/k6kEnXUth6NEoG9t2CrMCqA6+SKEiI5QPpDkDMHFhg/lQ770mkuJs8LExL6ihI57C ThAnLZWMI7yNXUnpXCLZoPEGfZN4/c/+mUHI9NCeQelJcFotwuBfOx/nd8GeokdwxGiiiYeKMFk2 lO86g+ICc6p12qEJT5skdj9PIooUa5WI88zmCVTfMvyHIuohdaqVzRF+JqJE260F0VcYnAXj7kgL y8UdExM= -----END CERTIFICATE REQUEST----- ca_audit_siging_cert_req=-----BEGIN CERTIFICATE REQUEST----- MIICgzCCAWsCAQAwPjESMBAGA1UEChMJc2lsZW50ZG9tMSgwJgYDVQQDEx9DQSBBdWRpdCBTaWdu aW5nIENlcnRpZmljYXRlLWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JiBAjn/ xVbzPhvMVICZZS8nbNXc7LYMypabdRf3M328qiRQ5tDkVhwYm1bxnmtzrF415K+knC4gPXmH42IL j106mXxa0Fg0xe/P9rHj/oMX+9lQvZeOKER6axHz2JfgSu0mKQ0ax4m8dtawx4uMDj+CIfAf6p7r lcdTayZTOJuou+4AObAeJMZb6tVa+S/mzx7ckhDPkCT4bUIx+E9SK9ZuloBZWkUrc7wtaul69Ip9 r8dp2gI+vTCy0KksAD1GumrYRqVXkjhRpAzUC5jYqjM5SH+Q3xzqUcyGpXci8a4Oa7h0HvVH1VMx EjRlkAwh2WbMZJZXPBrKGs2AF2R5JwIDAQABoAAwDQYJKoZIhvcNAQELBQADggEBAMitLeXDEjb1 yywXSWuB+G+Q/IfWpNzBM9nv5OVFSru1qbfEqVHsXe1BPUR9YNS7jW0YTrq83DxtrtAg256sbkw0 07mjDg/gUKAIyy2eG2hdDUQMQ+cKJqWy48Ynz5reTw9MvWkJd6615Z6NW8/Z1nzfVfIp1EEvu4UF gn+fmmlI7nl3nWceTOl5mLZw4K+koFJmfnRrSZ4lTs3z34/u7++8J8O/2J14hGw+a9Llwh2t5JMM RgOTlCBZZDgFSxInV/jS1F9B7742cdV5lZEDfnaWPImJigf54baFHtygHl4Cpy5XAi/keErQRlkf GW9Q1iiYP3T8P74Dz0Y/KPt7EhU= -----END CERTIFICATE REQUEST----- ca_cert_cert=-----BEGIN CERTIFICATE----- MIIDkDCCAnigAwIBAgIBATANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTJaFw0yMDAyMDEx NDIyMTJaMDcxEjAQBgNVBAoTCXNpbGVudGRvbTEhMB8GA1UEAxMYQ2VydGlmaWNhdGUgQXV0aG9y aXR5LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dXJ7ShWW79GDPiTbwlfsnSC YeflcJEkVgmFi522jxLghYPr5WPmZcPd4Iv7Uwh2v5uDhm3dhjV6FKFPuRt06eF3Xh1zlPyi6iuf 7ohiZSIT2ldapUxoX/qw0l5maCCUrBL4jJTj9AlrYKLC1UcbJ3TQix/6Z3XXXJZo5vn7vLFJAK3K 7WUiy5XV69toqGXW18ZY1L1vNKDx8S7bvJJJDb8xA6s4b8YCZRpmP9sx482soSfdNoMa0/G3jpOc lkk93FT68YPPiMf8fmKNTWsaQykaC1qSYq25V7cDdUho0JGmWIZk0v+z8/1YVREJWuhGYpH8eNsW sOMDTDpg5GEAMwIDAQABo4GmMIGjMB8GA1UdIwQYMBaAFEOs9jCROrWHDKLUryphbeXnYeIaMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgHGMB0GA1UdDgQWBBRDrPYwkTq1hwyi1K8qYW3l 52HiGjBABggrBgEFBQcBAQQ0MDIwMAYIKwYBBQUHMAGGJGh0dHA6Ly9mMTYtcGtpLnRlc3QuY29t OjkxODAvY2Evb2NzcDANBgkqhkiG9w0BAQ0FAAOCAQEAxDEolOwcADW2mPCFZ1nQovwZ+We/VEmw DGdAD3RLB6xiNjF+avv/wsmEY0tBfaAfxV3pe8dSEMXvbqc5A0PljYcFF9KEq4oemHT41V2BqjQp 3N3Kw5mxXrWmA4xSocInGPVZDZa+TsXy0oRUYTWAu788myUVn9VODNj29HVqRIB3XG6OvP8eJjaE WWQxZEm9t1pTLKW4FtMjoYyr7sOtMsQp7ooII9qyEqF4Cv/mVkCfglJwz/Zwy50I8HLTZi62h9PJ 1lx6ZosulvfE3NOIRWBilJCEdlJ+YXuxZUflHS+HZ6GBikGkqqUoF1InggooQNUzOiU+lmJuajSC FW1o4A== -----END CERTIFICATE----- ocsp_cert_cert=-----BEGIN CERTIFICATE----- MIIDeDCCAmCgAwIBAgIBAjANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTJaFw0xNDAxMjEx NDIyMTJaMDoxEjAQBgNVBAoTCXNpbGVudGRvbTEkMCIGA1UEAxMbT0NTUCBTaWduaW5nIENlcnRp ZmljYXRlLWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzEST8TPkJPlIVTG/sPF dr1aotygRMjMRHZS+CGTuuVXvE1bTstctklqVG+GctX4Bipy9UlV+8/SZvRY7BqqaSvV4LRoVy7G 1NuuCXC037YIljAsN/VfLeQq/JsdFCJqC2nvrQcViZhBEUt4uzgmJHb6nme33RGp5inRqiXQN9go JmSJQwgyieKHC0bY8URFPhTF/2rhlOSYz4f4+eyY7DtB4eawpHY5WfG/PDSUo9bJat+wWot3erKU VhIOUk4PokhD3sJ3g2IBEb7OeLtgqejgT8xa5lofHCQwNKlYui4nhuwzsaFARFbKyIeTK0Z51/iK SYZcCbP40/m6CagWyQIDAQABo4GLMIGIMB8GA1UdIwQYMBaAFEOs9jCROrWHDKLUryphbeXnYeIa MA4GA1UdDwEB/wQEAwIBxjBABggrBgEFBQcBAQQ0MDIwMAYIKwYBBQUHMAGGJGh0dHA6Ly9mMTYt cGtpLnRlc3QuY29tOjkxODAvY2Evb2NzcDATBgNVHSUEDDAKBggrBgEFBQcDCTANBgkqhkiG9w0B AQ0FAAOCAQEAvasXlsRC7sHBUtSUWJzV0I3K8uENUQUZRzZPQq/2QP+fnXCxIK6UQetjuLPxUGpK Dg9spNGk2PfnXBwrddMKxrPaohdqxMJAt+nP5+Vzeb7g9lDpK+trijuD+J3S0kMW27HrP38EEB/m 2/2Onk2uK6YJiGkPJtHl/4bYq1Gf0LbI/8rn86O35Ne0ZrhYCqZOQxeurtrkeygzd63ghBaUxXyo C74Ndwa5l+BGH91EdpGxF01cJy9DkRwivmJyiVt3/IhlC7wqJ47f3TMs3cNIQ34NgoQCHizMZY0P D6FlMf8JkpAeYWj4olaCwfst9XVsRbcLuboQeTmzsc4/MQGqzA== -----END CERTIFICATE----- ca_subsystem_cert_cert=-----BEGIN CERTIFICATE----- MIIDgjCCAmqgAwIBAgIBBDANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTNaFw0xNDAxMjEx NDIyMTNaMDoxEjAQBgNVBAoTCXNpbGVudGRvbTEkMCIGA1UEAxMbQ0EgU3Vic3lzdGVtIENlcnRp ZmljYXRlLWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyulzbXIfRc1AoSvZtjIF 3iP2mgtKPk5kZEx3mNSTdsf9IP30wNzRUpYuuIP0ouHSc4tL6jyIm8B3Prg85gHRWcjhNDYLSPIc 7Xkh09BMMx6HHLr5w+GmopVNd+kFCXag+ADW65H3x7JGdUfFSNwjMUUc62lbcPY8PQ3ib3LtlLe3 x1cEAfTGGXnCr8QPqniC4vzRwKFWcNagFAZEGnbTawfnAlQjNKg1QC++hT2VWicxY+47+A454YlS z92r9D99PI+eVhddcmxFjF+FhPwP4ISuriG/G8PzoLq9llLW5jtBF0ZeO3V7ndhVrOLbQrGE+BQT sDjAAyw+xYj6Ch4i4wIDAQABo4GVMIGSMB8GA1UdIwQYMBaAFEOs9jCROrWHDKLUryphbeXnYeIa MEAGCCsGAQUFBwEBBDQwMjAwBggrBgEFBQcwAYYkaHR0cDovL2YxNi1wa2kudGVzdC5jb206OTE4 MC9jYS9vY3NwMA4GA1UdDwEB/wQEAwIE8DAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DQYJKoZIhvcNAQENBQADggEBAHoZH9DyamsBC/3ugUckYGt5+Fau6SUCl70dLq+PoQ0sjpeKrfwz gQS6J+xLXWNsFtfL7H9w2Cvr6piFdX+SsgOeTmom1KbygRfTuBeglwaQMhfE1MqJFWWnYO9QVqJJ tX5JNwBQNhDuVCrTiVDLs2T1N4mPGTENoQqaDpsbOzNdnBVhUM5vbWZ1Ql+5iDmVE/Yc7yeGIIn4 lTLKi2OOXaL8+fxH97fRIUCIbdx57Ghwfk8lEyTh67fRS0Ng2UKRMua+Ma+fNNAI30EVqpM/t4DB TNgjvgYG+toQt9fjvICnoPsoOKV8Aay/fv6bjFOa7WlIr4lVmZuYdA8ZL6+JWlo= -----END CERTIFICATE----- server_cert_cert=-----BEGIN CERTIFICATE----- MIIDbTCCAlWgAwIBAgIBAzANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTNaFw0xNDAxMjEx NDIyMTNaMC8xEjAQBgNVBAoTCXNpbGVudGRvbTEZMBcGA1UEAxMQZjE2LXBraS50ZXN0LmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL0ykXjUKWSz9FeE87XIfgKTt8q3mwvNwnBX X4b5tnhknOh4X8R4sVi3nBRUPe38UZAGdIvX/Bgx7MLPmcB9ex3yAzXoh8lU9P4wXQ4gNjCyNx9P Hz4NrOAw5YpQs0Kz7NYmc1v9KwvKX65qCE47ORXBbVvPkDcnUbqYDHRaD4Vly3/z6ZbWT8Xi054O G5VgI27MfvGphXuMfPBS85w6aMsPqjHaL+ZlfPp1VxjpxUxa2o6oZA5bLoheBS5mKdfy3PrncJf5 lotiI4ktAswFcodj2WGjjcUaz9Y7gT2L7YtX7Re8dm7gi1kL5ZVFDHOyeBhncyR7gr0DGrQh2btf y7cCAwEAAaOBizCBiDAfBgNVHSMEGDAWgBRDrPYwkTq1hwyi1K8qYW3l52HiGjBABggrBgEFBQcB AQQ0MDIwMAYIKwYBBQUHMAGGJGh0dHA6Ly9mMTYtcGtpLnRlc3QuY29tOjkxODAvY2Evb2NzcDAO BgNVHQ8BAf8EBAMCBPAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDQYJKoZIhvcNAQENBQADggEBALAI 4ocMpWtq8p4xMOEopISyyDlDHQ82zKVAXiPAlbKcZe7FP2c6KUdQ18WZB/f9UK4nLINdKk2aQ6Rc tWrA4+E24XRyMwgMHvIlKDVMXy9XJl31fuSOJC1xZBBhdMaUssSFDssRiyrgAaG7363RuYycVVUB 1Or5AYcQdv3Omc0pJu4yr01x0FVMpquRkpC5jl2C9pyIh0vcyUJiu/Tu9WVDXIeLme3fao5IgyyV 7I0GRe+vLgxO4CKtd3bI9OkctWCO5Zsv6j0IppHtz0d/JOmJ+JfAAQ94EtV8VyJ3QzGVd4b65d4i 3NftGLrxYDgMFvWiyTP7oE18JT8i7yos3KA= -----END CERTIFICATE----- ca_audit_signing_cert_cert=-----BEGIN CERTIFICATE----- MIIDZTCCAk2gAwIBAgIBBTANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf BgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTNaFw0xNDAxMjEx NDIyMTNaMD4xEjAQBgNVBAoTCXNpbGVudGRvbTEoMCYGA1UEAxMfQ0EgQXVkaXQgU2lnbmluZyBD ZXJ0aWZpY2F0ZS1jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANiYgQI5/8VW8z4b zFSAmWUvJ2zV3Oy2DMqWm3UX9zN9vKokUObQ5FYcGJtW8Z5rc6xeNeSvpJwuID15h+NiC49dOpl8 WtBYNMXvz/ax4/6DF/vZUL2XjihEemsR89iX4ErtJikNGseJvHbWsMeLjA4/giHwH+qe65XHU2sm UzibqLvuADmwHiTGW+rVWvkv5s8e3JIQz5Ak+G1CMfhPUivWbpaAWVpFK3O8LWrpevSKfa/HadoC Pr0wstCpLAA9Rrpq2EalV5I4UaQM1AuY2KozOUh/kN8c6lHMhqV3IvGuDmu4dB71R9VTMRI0ZZAM IdlmzGSWVzwayhrNgBdkeScCAwEAAaN1MHMwHwYDVR0jBBgwFoAUQ6z2MJE6tYcMotSvKmFt5edh 4howDgYDVR0PAQH/BAQDAgbAMEAGCCsGAQUFBwEBBDQwMjAwBggrBgEFBQcwAYYkaHR0cDovL2Yx Ni1wa2kudGVzdC5jb206OTE4MC9jYS9vY3NwMA0GCSqGSIb3DQEBDQUAA4IBAQAE4ujwClHFiS/7 uEJZuGIDI9Gs2NfdkVX0W73xFPe0n7zBil71moYb/3m5BIq7R5Lch8uDPptJnij7F62bbinrza+E tHxK9Vyt7iFZ3J7VMz9WEaEfmlsdlYFCV8Gc52HuYXW9xcTt9U/T5P6NbbPUODPphdjNW09E/W0Q i9JLn538WRhmovxd99BqfxGXcLejAfCXV5VNMBGV9HPby960iIVbbC+FAz6aRROviTaUXykvXLQl AcU2T1PW214Fc/FhcVK+GH06enVbe8FzoOK7dewjqPkWuo0jVOhXt8XTvOEUJPcQowR6fWwnQDFC d6PK4CVsOD2hHFkqIO2r2+Oi -----END CERTIFICATE----- ############################################# Attempting to connect to: f16-pki.test.com:9445 Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/console/config/wizard?p=12&op=next&xml=true&subsystem=-----BEGIN+CERTIFICATE-----%0AMIIDgjCCAmqgAwIBAgIBBDANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf%0ABgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTNaFw0xNDAxMjEx%0ANDIyMTNaMDoxEjAQBgNVBAoTCXNpbGVudGRvbTEkMCIGA1UEAxMbQ0EgU3Vic3lzdGVtIENlcnRp%0AZmljYXRlLWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyulzbXIfRc1AoSvZtjIF%0A3iP2mgtKPk5kZEx3mNSTdsf9IP30wNzRUpYuuIP0ouHSc4tL6jyIm8B3Prg85gHRWcjhNDYLSPIc%0A7Xkh09BMMx6HHLr5w%2BGmopVNd%2BkFCXag%2BADW65H3x7JGdUfFSNwjMUUc62lbcPY8PQ3ib3LtlLe3%0Ax1cEAfTGGXnCr8QPqniC4vzRwKFWcNagFAZEGnbTawfnAlQjNKg1QC%2B%2BhT2VWicxY%2B47%2BA454YlS%0Az92r9D99PI%2BeVhddcmxFjF%2BFhPwP4ISuriG%2FG8PzoLq9llLW5jtBF0ZeO3V7ndhVrOLbQrGE%2BBQT%0AsDjAAyw%2BxYj6Ch4i4wIDAQABo4GVMIGSMB8GA1UdIwQYMBaAFEOs9jCROrWHDKLUryphbeXnYeIa%0AMEAGCCsGAQUFBwEBBDQwMjAwBggrBgEFBQcwAYYkaHR0cDovL2YxNi1wa2kudGVzdC5jb206OTE4%0AMC9jYS9vY3NwMA4GA1UdDwEB%2FwQEAwIE8DAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw%0ADQYJKoZIhvcNAQENBQADggEBAHoZH9DyamsBC%2F3ugUckYGt5%2BFau6SUCl70dLq%2BPoQ0sjpeKrfwz%0AgQS6J%2BxLXWNsFtfL7H9w2Cvr6piFdX%2BSsgOeTmom1KbygRfTuBeglwaQMhfE1MqJFWWnYO9QVqJJ%0AtX5JNwBQNhDuVCrTiVDLs2T1N4mPGTENoQqaDpsbOzNdnBVhUM5vbWZ1Ql%2B5iDmVE%2FYc7yeGIIn4%0AlTLKi2OOXaL8%2BfxH97fRIUCIbdx57Ghwfk8lEyTh67fRS0Ng2UKRMua%2BMa%2BfNNAI30EVqpM%2Ft4DB%0ATNgjvgYG%2BtoQt9fjvICnoPsoOKV8Aay%2Ffv6bjFOa7WlIr4lVmZuYdA8ZL6%2BJWlo%3D%0A-----END+CERTIFICATE-----&subsystem_cc=&ocsp_signing=-----BEGIN+CERTIFICATE-----%0AMIIDeDCCAmCgAwIBAgIBAjANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf%0ABgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTJaFw0xNDAxMjEx%0ANDIyMTJaMDoxEjAQBgNVBAoTCXNpbGVudGRvbTEkMCIGA1UEAxMbT0NTUCBTaWduaW5nIENlcnRp%0AZmljYXRlLWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzEST8TPkJPlIVTG%2FsPF%0Adr1aotygRMjMRHZS%2BCGTuuVXvE1bTstctklqVG%2BGctX4Bipy9UlV%2B8%2FSZvRY7BqqaSvV4LRoVy7G%0A1NuuCXC037YIljAsN%2FVfLeQq%2FJsdFCJqC2nvrQcViZhBEUt4uzgmJHb6nme33RGp5inRqiXQN9go%0AJmSJQwgyieKHC0bY8URFPhTF%2F2rhlOSYz4f4%2BeyY7DtB4eawpHY5WfG%2FPDSUo9bJat%2BwWot3erKU%0AVhIOUk4PokhD3sJ3g2IBEb7OeLtgqejgT8xa5lofHCQwNKlYui4nhuwzsaFARFbKyIeTK0Z51%2FiK%0ASYZcCbP40%2Fm6CagWyQIDAQABo4GLMIGIMB8GA1UdIwQYMBaAFEOs9jCROrWHDKLUryphbeXnYeIa%0AMA4GA1UdDwEB%2FwQEAwIBxjBABggrBgEFBQcBAQQ0MDIwMAYIKwYBBQUHMAGGJGh0dHA6Ly9mMTYt%0AcGtpLnRlc3QuY29tOjkxODAvY2Evb2NzcDATBgNVHSUEDDAKBggrBgEFBQcDCTANBgkqhkiG9w0B%0AAQ0FAAOCAQEAvasXlsRC7sHBUtSUWJzV0I3K8uENUQUZRzZPQq%2F2QP%2BfnXCxIK6UQetjuLPxUGpK%0ADg9spNGk2PfnXBwrddMKxrPaohdqxMJAt%2BnP5%2BVzeb7g9lDpK%2BtrijuD%2BJ3S0kMW27HrP38EEB%2Fm%0A2%2F2Onk2uK6YJiGkPJtHl%2F4bYq1Gf0LbI%2F8rn86O35Ne0ZrhYCqZOQxeurtrkeygzd63ghBaUxXyo%0AC74Ndwa5l%2BBGH91EdpGxF01cJy9DkRwivmJyiVt3%2FIhlC7wqJ47f3TMs3cNIQ34NgoQCHizMZY0P%0AD6FlMf8JkpAeYWj4olaCwfst9XVsRbcLuboQeTmzsc4%2FMQGqzA%3D%3D%0A-----END+CERTIFICATE-----&ocsp_signing_cc=&signing=-----BEGIN+CERTIFICATE-----%0AMIIDkDCCAnigAwIBAgIBATANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf%0ABgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTJaFw0yMDAyMDEx%0ANDIyMTJaMDcxEjAQBgNVBAoTCXNpbGVudGRvbTEhMB8GA1UEAxMYQ2VydGlmaWNhdGUgQXV0aG9y%0AaXR5LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dXJ7ShWW79GDPiTbwlfsnSC%0AYeflcJEkVgmFi522jxLghYPr5WPmZcPd4Iv7Uwh2v5uDhm3dhjV6FKFPuRt06eF3Xh1zlPyi6iuf%0A7ohiZSIT2ldapUxoX%2Fqw0l5maCCUrBL4jJTj9AlrYKLC1UcbJ3TQix%2F6Z3XXXJZo5vn7vLFJAK3K%0A7WUiy5XV69toqGXW18ZY1L1vNKDx8S7bvJJJDb8xA6s4b8YCZRpmP9sx482soSfdNoMa0%2FG3jpOc%0Alkk93FT68YPPiMf8fmKNTWsaQykaC1qSYq25V7cDdUho0JGmWIZk0v%2Bz8%2F1YVREJWuhGYpH8eNsW%0AsOMDTDpg5GEAMwIDAQABo4GmMIGjMB8GA1UdIwQYMBaAFEOs9jCROrWHDKLUryphbeXnYeIaMA8G%0AA1UdEwEB%2FwQFMAMBAf8wDgYDVR0PAQH%2FBAQDAgHGMB0GA1UdDgQWBBRDrPYwkTq1hwyi1K8qYW3l%0A52HiGjBABggrBgEFBQcBAQQ0MDIwMAYIKwYBBQUHMAGGJGh0dHA6Ly9mMTYtcGtpLnRlc3QuY29t%0AOjkxODAvY2Evb2NzcDANBgkqhkiG9w0BAQ0FAAOCAQEAxDEolOwcADW2mPCFZ1nQovwZ%2BWe%2FVEmw%0ADGdAD3RLB6xiNjF%2Bavv%2FwsmEY0tBfaAfxV3pe8dSEMXvbqc5A0PljYcFF9KEq4oemHT41V2BqjQp%0A3N3Kw5mxXrWmA4xSocInGPVZDZa%2BTsXy0oRUYTWAu788myUVn9VODNj29HVqRIB3XG6OvP8eJjaE%0AWWQxZEm9t1pTLKW4FtMjoYyr7sOtMsQp7ooII9qyEqF4Cv%2FmVkCfglJwz%2FZwy50I8HLTZi62h9PJ%0A1lx6ZosulvfE3NOIRWBilJCEdlJ%2BYXuxZUflHS%2BHZ6GBikGkqqUoF1InggooQNUzOiU%2BlmJuajSC%0AFW1o4A%3D%3D%0A-----END+CERTIFICATE-----&signing_cc=&audit_signing=-----BEGIN+CERTIFICATE-----%0AMIIDZTCCAk2gAwIBAgIBBTANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf%0ABgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTNaFw0xNDAxMjEx%0ANDIyMTNaMD4xEjAQBgNVBAoTCXNpbGVudGRvbTEoMCYGA1UEAxMfQ0EgQXVkaXQgU2lnbmluZyBD%0AZXJ0aWZpY2F0ZS1jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANiYgQI5%2F8VW8z4b%0AzFSAmWUvJ2zV3Oy2DMqWm3UX9zN9vKokUObQ5FYcGJtW8Z5rc6xeNeSvpJwuID15h%2BNiC49dOpl8%0AWtBYNMXvz%2Fax4%2F6DF%2FvZUL2XjihEemsR89iX4ErtJikNGseJvHbWsMeLjA4%2FgiHwH%2Bqe65XHU2sm%0AUzibqLvuADmwHiTGW%2BrVWvkv5s8e3JIQz5Ak%2BG1CMfhPUivWbpaAWVpFK3O8LWrpevSKfa%2FHadoC%0APr0wstCpLAA9Rrpq2EalV5I4UaQM1AuY2KozOUh%2FkN8c6lHMhqV3IvGuDmu4dB71R9VTMRI0ZZAM%0AIdlmzGSWVzwayhrNgBdkeScCAwEAAaN1MHMwHwYDVR0jBBgwFoAUQ6z2MJE6tYcMotSvKmFt5edh%0A4howDgYDVR0PAQH%2FBAQDAgbAMEAGCCsGAQUFBwEBBDQwMjAwBggrBgEFBQcwAYYkaHR0cDovL2Yx%0ANi1wa2kudGVzdC5jb206OTE4MC9jYS9vY3NwMA0GCSqGSIb3DQEBDQUAA4IBAQAE4ujwClHFiS%2F7%0AuEJZuGIDI9Gs2NfdkVX0W73xFPe0n7zBil71moYb%2F3m5BIq7R5Lch8uDPptJnij7F62bbinrza%2BE%0AtHxK9Vyt7iFZ3J7VMz9WEaEfmlsdlYFCV8Gc52HuYXW9xcTt9U%2FT5P6NbbPUODPphdjNW09E%2FW0Q%0Ai9JLn538WRhmovxd99BqfxGXcLejAfCXV5VNMBGV9HPby960iIVbbC%2BFAz6aRROviTaUXykvXLQl%0AAcU2T1PW214Fc%2FFhcVK%2BGH06enVbe8FzoOK7dewjqPkWuo0jVOhXt8XTvOEUJPcQowR6fWwnQDFC%0Ad6PK4CVsOD2hHFkqIO2r2%2BOi%0A-----END+CERTIFICATE-----&audit_signing_cc=&sslserver=-----BEGIN+CERTIFICATE-----%0AMIIDbTCCAlWgAwIBAgIBAzANBgkqhkiG9w0BAQ0FADA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAf%0ABgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTAeFw0xMjAyMDExNDIyMTNaFw0xNDAxMjEx%0ANDIyMTNaMC8xEjAQBgNVBAoTCXNpbGVudGRvbTEZMBcGA1UEAxMQZjE2LXBraS50ZXN0LmNvbTCC%0AASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL0ykXjUKWSz9FeE87XIfgKTt8q3mwvNwnBX%0AX4b5tnhknOh4X8R4sVi3nBRUPe38UZAGdIvX%2FBgx7MLPmcB9ex3yAzXoh8lU9P4wXQ4gNjCyNx9P%0AHz4NrOAw5YpQs0Kz7NYmc1v9KwvKX65qCE47ORXBbVvPkDcnUbqYDHRaD4Vly3%2Fz6ZbWT8Xi054O%0AG5VgI27MfvGphXuMfPBS85w6aMsPqjHaL%2BZlfPp1VxjpxUxa2o6oZA5bLoheBS5mKdfy3PrncJf5%0AlotiI4ktAswFcodj2WGjjcUaz9Y7gT2L7YtX7Re8dm7gi1kL5ZVFDHOyeBhncyR7gr0DGrQh2btf%0Ay7cCAwEAAaOBizCBiDAfBgNVHSMEGDAWgBRDrPYwkTq1hwyi1K8qYW3l52HiGjBABggrBgEFBQcB%0AAQQ0MDIwMAYIKwYBBQUHMAGGJGh0dHA6Ly9mMTYtcGtpLnRlc3QuY29tOjkxODAvY2Evb2NzcDAO%0ABgNVHQ8BAf8EBAMCBPAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDQYJKoZIhvcNAQENBQADggEBALAI%0A4ocMpWtq8p4xMOEopISyyDlDHQ82zKVAXiPAlbKcZe7FP2c6KUdQ18WZB%2Ff9UK4nLINdKk2aQ6Rc%0AtWrA4%2BE24XRyMwgMHvIlKDVMXy9XJl31fuSOJC1xZBBhdMaUssSFDssRiyrgAaG7363RuYycVVUB%0A1Or5AYcQdv3Omc0pJu4yr01x0FVMpquRkpC5jl2C9pyIh0vcyUJiu%2FTu9WVDXIeLme3fao5IgyyV%0A7I0GRe%2BvLgxO4CKtd3bI9OkctWCO5Zsv6j0IppHtz0d%2FJOmJ%2BJfAAQ94EtV8VyJ3QzGVd4b65d4i%0A3NftGLrxYDgMFvWiyTP7oE18JT8i7yos3KA%3D%0A-----END+CERTIFICATE-----&sslserver_cc= RESPONSE STATUS: HTTP/1.1 200 OK RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Content-Type: application/xml;charset=UTF-8 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:13 GMT RESPONSE HEADER: Connection: close admin/console/config/backupkeycertpanel.vm success 19 Export Keys and Certificates welcome Welcome module Key Store confighsmlogin ConfigHSMLogin securitydomain Security Domain securitydomain Display Certificate Chain subsystem Subsystem Type clone Display Certificate Chain restorekeys Import Keys and Certificates cahierarchy PKI Hierarchy database Internal Database size Key Pairs subjectname Subject Names certrequest Requests and Certificates backupkeys Export Keys and Certificates savepk12 Save Keys and Certificates importcachain Import CA's Certificate Chain admin Administrator importadmincert Import Administrator's Certificate done Done checked

13

CA Setup Wizard backupkeys ############################################# Attempting to connect to: f16-pki.test.com:9445 Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/console/config/wizard?p=14&op=next&xml=true RESPONSE STATUS: HTTP/1.1 200 OK RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Content-Type: application/xml;charset=UTF-8 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:13 GMT RESPONSE HEADER: Connection: close admin/console/config/importcachainpanel.vm f16-pki.test.com true success 19 9444 Import CA's Certificate Chain welcome Welcome module Key Store confighsmlogin ConfigHSMLogin securitydomain Security Domain securitydomain Display Certificate Chain subsystem Subsystem Type clone Display Certificate Chain restorekeys Import Keys and Certificates cahierarchy PKI Hierarchy database Internal Database size Key Pairs subjectname Subject Names certrequest Requests and Certificates backupkeys Export Keys and Certificates savepk12 Save Keys and Certificates importcachain Import CA's Certificate Chain admin Administrator importadmincert Import Administrator's Certificate done Done

15

CA Setup Wizard true 9180 importcachain ############################################# Attempting to connect to: f16-pki.test.com:9445 Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/console/config/wizard?p=15&op=next&xml=true RESPONSE STATUS: HTTP/1.1 200 OK RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Content-Type: application/xml;charset=UTF-8 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:13 GMT RESPONSE HEADER: Connection: close admin/console/config/adminpanel.vm true sdca success CA Administrator of Instance pki-ca silentdom 19 Administrator welcome Welcome module Key Store confighsmlogin ConfigHSMLogin securitydomain Security Domain securitydomain Display Certificate Chain subsystem Subsystem Type clone Display Certificate Chain restorekeys Import Keys and Certificates cahierarchy PKI Hierarchy database Internal Database size Key Pairs subjectname Subject Names certrequest Requests and Certificates backupkeys Export Keys and Certificates savepk12 Save Keys and Certificates importcachain Import CA's Certificate Chain admin Administrator importadmincert Import Administrator's Certificate done Done

16

CA Setup Wizard true admin admin CRYPTO INIT WITH CERTDB:/var/tmp/testdb Crypto manager already initialized Debug : initialize crypto Manager INITIALIZATION ERROR: org.mozilla.jss.crypto.AlreadyInitializedException cdir = /var/tmp/testdb Debug : before getInstance Debug : before get token Debug : before login password Debug : after login password 64-bit osutil library loaded CRMF_REQUEST = MIIBeDCCAXQwggFoAgEBMIIBX4ABAqU0MDIxDzANBgNVBAoTBnJlZGhhdDEMMAoG A1UECxMDcG5xMREwDwYDVQQDEwhjYS1hZ2VudKaCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANBRVyT05IRW9EzdNBThpUSottBCXcxFXmkwidEIyEKZIH+j op6QdH44RPwlKyTPPuzMe0zpTzh2qF9gNzOACj4pbLnoqHsvm24IowjcvF8WI5dN vdMpJ2QWTuwnsi8RtsTPIBTqE/m57cNHvxAKWqUS0L64hf8kXxjs3K813MVJTGxy AFVSNGXQf60Od/0fnOvGDtIIXTPei9xMJVwbiJKr1DFK+7JLDUxt2fa2rBSfNdql 4sOhDJN/YqwPkMsryMGU9RBNHd8W5WcDngei52u7i7rw2qDWzNCpOQtF5+WTyM/E t3WEeqjDmApg7GrUYN9OPL5wzGjiyil+9w3HiRsCAwEAATAAogaABAMAAwA= ############################################# Attempting to connect to: f16-pki.test.com:9445 Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/console/config/wizard?p=16&op=next&xml=true&cert_request_type=crmf&uid=admin&name=admin&__pwd=testpwd&__admin_password_again=redhat&profileId=caAdminCert&email=pki-ca-admin%40test.com&cert_request=MIIBeDCCAXQwggFoAgEBMIIBX4ABAqU0MDIxDzANBgNVBAoTBnJlZGhhdDEMMAoG%0D%0AA1UECxMDcG5xMREwDwYDVQQDEwhjYS1hZ2VudKaCASIwDQYJKoZIhvcNAQEBBQAD%0D%0AggEPADCCAQoCggEBANBRVyT05IRW9EzdNBThpUSottBCXcxFXmkwidEIyEKZIH%2Bj%0D%0Aop6QdH44RPwlKyTPPuzMe0zpTzh2qF9gNzOACj4pbLnoqHsvm24IowjcvF8WI5dN%0D%0AvdMpJ2QWTuwnsi8RtsTPIBTqE%2Fm57cNHvxAKWqUS0L64hf8kXxjs3K813MVJTGxy%0D%0AAFVSNGXQf60Od%2F0fnOvGDtIIXTPei9xMJVwbiJKr1DFK%2B7JLDUxt2fa2rBSfNdql%0D%0A4sOhDJN%2FYqwPkMsryMGU9RBNHd8W5WcDngei52u7i7rw2qDWzNCpOQtF5%2BWTyM%2FE%0D%0At3WEeqjDmApg7GrUYN9OPL5wzGjiyil%2B9w3HiRsCAwEAATAAogaABAMAAwA%3D&subject=CN%3Dca-agent%2COU%3Dpnq%2CO%3Dredhat&clone=new&import=true&securitydomain=silentdom RESPONSE STATUS: HTTP/1.1 200 OK RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Content-Type: application/xml;charset=UTF-8 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:13 GMT RESPONSE HEADER: Connection: close admin/console/config/importadmincertpanel.vm testpwd true 9445 testpwd sdca success 6 pki-ca-admin@test.com admin 19 f16-pki.test.com Import Administrator's Certificate welcome Welcome module Key Store confighsmlogin ConfigHSMLogin securitydomain Security Domain securitydomain Display Certificate Chain subsystem Subsystem Type clone Display Certificate Chain restorekeys Import Keys and Certificates cahierarchy PKI Hierarchy database Internal Database size Key Pairs subjectname Subject Names certrequest Requests and Certificates backupkeys Export Keys and Certificates savepk12 Save Keys and Certificates importcachain Import CA's Certificate Chain admin Administrator importadmincert Import Administrator's Certificate done Done

17

CA Setup Wizard true MIIHQQYJKoZIhvcNAQcCoIIHMjCCBy4CAQExADAPBgkqhkiG9w0BBwGgAgQAoIIHEjCCA3owggJioAMCAQICAQYwDQYJKoZIhvcNAQENBQAwNzESMBAGA1UEChMJc2lsZW50ZG9tMSEwHwYDVQQDExhDZXJ0aWZpY2F0ZSBBdXRob3JpdHktY2EwHhcNMTIwMjAxMTQyMjE0WhcNMTQwMTIxMTQyMjE0WjAyMQ8wDQYDVQQKEwZyZWRoYXQxDDAKBgNVBAsTA3BucTERMA8GA1UEAxMIY2EtYWdlbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUVck9OSEVvRM3TQU4aVEqLbQQl3MRV5pMInRCMhCmSB/o6KekHR+OET8JSskzz7szHtM6U84dqhfYDczgAo+KWy56Kh7L5tuCKMI3LxfFiOXTb3TKSdkFk7sJ7IvEbbEzyAU6hP5ue3DR78QClqlEtC+uIX/JF8Y7NyvNdzFSUxscgBVUjRl0H+tDnf9H5zrxg7SCF0z3ovcTCVcG4iSq9QxSvuySw1Mbdn2tqwUnzXapeLDoQyTf2KsD5DLK8jBlPUQTR3fFuVnA54Houdru4u68Nqg1szQqTkLReflk8jPxLd1hHqow5gKYOxq1GDfTjy+cMxo4sopfvcNx4kbAgMBAAGjgZUwgZIwHwYDVR0jBBgwFoAUQ6z2MJE6tYcMotSvKmFt5edh4howQAYIKwYBBQUHAQEENDAyMDAGCCsGAQUFBzABhiRodHRwOi8vZjE2LXBraS50ZXN0LmNvbTo5MTgwL2NhL29jc3AwDgYDVR0PAQH/BAQDAgTwMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDANBgkqhkiG9w0BAQ0FAAOCAQEAr/6D606qwmAAcGYqda2ixYp1Dr56TG2xXmB2ujQFQJvlLWUUcRxg9P8RmSbxE+QIAzzh6VBaLaMaqoGDtRQChobcXWxPJ4Z0+kfeSEVZf1VPOoPAOpMhU/+MG4/Pup6/xYf2+m+yHxfKPzmyq38zKyHMJZIngZD/x1eO2RUyjEZdHM9FVMvvt8v5C96MuXEszbfWLHzUNFYkZh9Q3XV7mFiublGEPM7mx4mmJ50JSzpu8+MxSnuvaGS1Y7emWDe2ECfi98ZeShmtZyxacYGRa4wt6BXZ23pchpn4XJOShvbo10X+XPElrh5VEZCVUaSqe1Utk/d/i70y+nuRWC3jPjCCA5AwggJ4oAMCAQICAQEwDQYJKoZIhvcNAQENBQAwNzESMBAGA1UEChMJc2lsZW50ZG9tMSEwHwYDVQQDExhDZXJ0aWZpY2F0ZSBBdXRob3JpdHktY2EwHhcNMTIwMjAxMTQyMjEyWhcNMjAwMjAxMTQyMjEyWjA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAfBgNVBAMTGENlcnRpZmljYXRlIEF1dGhvcml0eS1jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOHVye0oVlu/Rgz4k28JX7J0gmHn5XCRJFYJhYudto8S4IWD6+Vj5mXD3eCL+1MIdr+bg4Zt3YY1ehShT7kbdOnhd14dc5T8ouorn+6IYmUiE9pXWqVMaF/6sNJeZmgglKwS+IyU4/QJa2CiwtVHGyd00Isf+md111yWaOb5+7yxSQCtyu1lIsuV1evbaKhl1tfGWNS9bzSg8fEu27ySSQ2/MQOrOG/GAmUaZj/bMePNrKEn3TaDGtPxt46TnJZJPdxU+vGDz4jH/H5ijU1rGkMpGgtakmKtuVe3A3VIaNCRpliGZNL/s/P9WFURCVroRmKR/HjbFrDjA0w6YORhADMCAwEAAaOBpjCBozAfBgNVHSMEGDAWgBRDrPYwkTq1hwyi1K8qYW3l52HiGjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBxjAdBgNVHQ4EFgQUQ6z2MJE6tYcMotSvKmFt5edh4howQAYIKwYBBQUHAQEENDAyMDAGCCsGAQUFBzABhiRodHRwOi8vZjE2LXBraS50ZXN0LmNvbTo5MTgwL2NhL29jc3AwDQYJKoZIhvcNAQENBQADggEBAMQxKJTsHAA1tpjwhWdZ0KL8Gflnv1RJsAxnQA90SwesYjYxfmr7/8LJhGNLQX2gH8Vd6XvHUhDF726nOQND5Y2HBRfShKuKHph0+NVdgao0KdzdysOZsV61pgOMUqHCJxj1WQ2Wvk7F8tKEVGE1gLu/PJslFZ/VTgzY9vR1akSAd1xujrz/HiY2hFlkMWRJvbdaUyyluBbTI6GMq+7DrTLEKe6KCCPashKheAr/5lZAn4JScM/2cMudCPBy02YutofTydZcemaLLpb3xNzTiEVgYpSQhHZSfmF7sWVH5R0vh2ehgYpBpKqlKBdSJ4IKKEDVMzolPpZibmo0ghVtaOAxAA== importadmincert ############################################# Attempting to connect to: f16-pki.test.com:9445 Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/ca/getBySerial?&serialNumber=6&importCert=true RESPONSE STATUS: HTTP/1.1 200 OK RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Content-Type: application/x-x509-user-cert RESPONSE HEADER: Content-Length: 1861 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:13 GMT RESPONSE HEADER: Connection: keep-alive Cert to Import =MIIHQQYJKoZIhvcNAQcCoIIHMjCCBy4CAQExADAPBgkqhkiG9w0BBwGgAgQAoIIH EjCCA3owggJioAMCAQICAQYwDQYJKoZIhvcNAQENBQAwNzESMBAGA1UEChMJc2ls ZW50ZG9tMSEwHwYDVQQDExhDZXJ0aWZpY2F0ZSBBdXRob3JpdHktY2EwHhcNMTIw MjAxMTQyMjE0WhcNMTQwMTIxMTQyMjE0WjAyMQ8wDQYDVQQKEwZyZWRoYXQxDDAK BgNVBAsTA3BucTERMA8GA1UEAxMIY2EtYWdlbnQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQUVck9OSEVvRM3TQU4aVEqLbQQl3MRV5pMInRCMhCmSB/ o6KekHR+OET8JSskzz7szHtM6U84dqhfYDczgAo+KWy56Kh7L5tuCKMI3LxfFiOX Tb3TKSdkFk7sJ7IvEbbEzyAU6hP5ue3DR78QClqlEtC+uIX/JF8Y7NyvNdzFSUxs cgBVUjRl0H+tDnf9H5zrxg7SCF0z3ovcTCVcG4iSq9QxSvuySw1Mbdn2tqwUnzXa peLDoQyTf2KsD5DLK8jBlPUQTR3fFuVnA54Houdru4u68Nqg1szQqTkLReflk8jP xLd1hHqow5gKYOxq1GDfTjy+cMxo4sopfvcNx4kbAgMBAAGjgZUwgZIwHwYDVR0j BBgwFoAUQ6z2MJE6tYcMotSvKmFt5edh4howQAYIKwYBBQUHAQEENDAyMDAGCCsG AQUFBzABhiRodHRwOi8vZjE2LXBraS50ZXN0LmNvbTo5MTgwL2NhL29jc3AwDgYD VR0PAQH/BAQDAgTwMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDANBgkq hkiG9w0BAQ0FAAOCAQEAr/6D606qwmAAcGYqda2ixYp1Dr56TG2xXmB2ujQFQJvl LWUUcRxg9P8RmSbxE+QIAzzh6VBaLaMaqoGDtRQChobcXWxPJ4Z0+kfeSEVZf1VP OoPAOpMhU/+MG4/Pup6/xYf2+m+yHxfKPzmyq38zKyHMJZIngZD/x1eO2RUyjEZd HM9FVMvvt8v5C96MuXEszbfWLHzUNFYkZh9Q3XV7mFiublGEPM7mx4mmJ50JSzpu 8+MxSnuvaGS1Y7emWDe2ECfi98ZeShmtZyxacYGRa4wt6BXZ23pchpn4XJOShvbo 10X+XPElrh5VEZCVUaSqe1Utk/d/i70y+nuRWC3jPjCCA5AwggJ4oAMCAQICAQEw DQYJKoZIhvcNAQENBQAwNzESMBAGA1UEChMJc2lsZW50ZG9tMSEwHwYDVQQDExhD ZXJ0aWZpY2F0ZSBBdXRob3JpdHktY2EwHhcNMTIwMjAxMTQyMjEyWhcNMjAwMjAx MTQyMjEyWjA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAfBgNVBAMTGENlcnRpZmlj YXRlIEF1dGhvcml0eS1jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOHVye0oVlu/Rgz4k28JX7J0gmHn5XCRJFYJhYudto8S4IWD6+Vj5mXD3eCL+1MI dr+bg4Zt3YY1ehShT7kbdOnhd14dc5T8ouorn+6IYmUiE9pXWqVMaF/6sNJeZmgg lKwS+IyU4/QJa2CiwtVHGyd00Isf+md111yWaOb5+7yxSQCtyu1lIsuV1evbaKhl 1tfGWNS9bzSg8fEu27ySSQ2/MQOrOG/GAmUaZj/bMePNrKEn3TaDGtPxt46TnJZJ PdxU+vGDz4jH/H5ijU1rGkMpGgtakmKtuVe3A3VIaNCRpliGZNL/s/P9WFURCVro RmKR/HjbFrDjA0w6YORhADMCAwEAAaOBpjCBozAfBgNVHSMEGDAWgBRDrPYwkTq1 hwyi1K8qYW3l52HiGjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBxjAd BgNVHQ4EFgQUQ6z2MJE6tYcMotSvKmFt5edh4howQAYIKwYBBQUHAQEENDAyMDAG CCsGAQUFBzABhiRodHRwOi8vZjE2LXBraS50ZXN0LmNvbTo5MTgwL2NhL29jc3Aw DQYJKoZIhvcNAQENBQADggEBAMQxKJTsHAA1tpjwhWdZ0KL8Gflnv1RJsAxnQA90 SwesYjYxfmr7/8LJhGNLQX2gH8Vd6XvHUhDF726nOQND5Y2HBRfShKuKHph0+NVd gao0KdzdysOZsV61pgOMUqHCJxj1WQ2Wvk7F8tKEVGE1gLu/PJslFZ/VTgzY9vR1 akSAd1xujrz/HiY2hFlkMWRJvbdaUyyluBbTI6GMq+7DrTLEKe6KCCPashKheAr/ 5lZAn4JScM/2cMudCPBy02YutofTydZcemaLLpb3xNzTiEVgYpSQhHZSfmF7sWVH 5R0vh2ehgYpBpKqlKBdSJ4IKKEDVMzolPpZibmo0ghVtaOAxAA== Cert to Import =MIIHQQYJKoZIhvcNAQcCoIIHMjCCBy4CAQExADAPBgkqhkiG9w0BBwGgAgQAoIIH EjCCA3owggJioAMCAQICAQYwDQYJKoZIhvcNAQENBQAwNzESMBAGA1UEChMJc2ls ZW50ZG9tMSEwHwYDVQQDExhDZXJ0aWZpY2F0ZSBBdXRob3JpdHktY2EwHhcNMTIw MjAxMTQyMjE0WhcNMTQwMTIxMTQyMjE0WjAyMQ8wDQYDVQQKEwZyZWRoYXQxDDAK BgNVBAsTA3BucTERMA8GA1UEAxMIY2EtYWdlbnQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQUVck9OSEVvRM3TQU4aVEqLbQQl3MRV5pMInRCMhCmSB/ o6KekHR+OET8JSskzz7szHtM6U84dqhfYDczgAo+KWy56Kh7L5tuCKMI3LxfFiOX Tb3TKSdkFk7sJ7IvEbbEzyAU6hP5ue3DR78QClqlEtC+uIX/JF8Y7NyvNdzFSUxs cgBVUjRl0H+tDnf9H5zrxg7SCF0z3ovcTCVcG4iSq9QxSvuySw1Mbdn2tqwUnzXa peLDoQyTf2KsD5DLK8jBlPUQTR3fFuVnA54Houdru4u68Nqg1szQqTkLReflk8jP xLd1hHqow5gKYOxq1GDfTjy+cMxo4sopfvcNx4kbAgMBAAGjgZUwgZIwHwYDVR0j BBgwFoAUQ6z2MJE6tYcMotSvKmFt5edh4howQAYIKwYBBQUHAQEENDAyMDAGCCsG AQUFBzABhiRodHRwOi8vZjE2LXBraS50ZXN0LmNvbTo5MTgwL2NhL29jc3AwDgYD VR0PAQH/BAQDAgTwMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDANBgkq hkiG9w0BAQ0FAAOCAQEAr/6D606qwmAAcGYqda2ixYp1Dr56TG2xXmB2ujQFQJvl LWUUcRxg9P8RmSbxE+QIAzzh6VBaLaMaqoGDtRQChobcXWxPJ4Z0+kfeSEVZf1VP OoPAOpMhU/+MG4/Pup6/xYf2+m+yHxfKPzmyq38zKyHMJZIngZD/x1eO2RUyjEZd HM9FVMvvt8v5C96MuXEszbfWLHzUNFYkZh9Q3XV7mFiublGEPM7mx4mmJ50JSzpu 8+MxSnuvaGS1Y7emWDe2ECfi98ZeShmtZyxacYGRa4wt6BXZ23pchpn4XJOShvbo 10X+XPElrh5VEZCVUaSqe1Utk/d/i70y+nuRWC3jPjCCA5AwggJ4oAMCAQICAQEw DQYJKoZIhvcNAQENBQAwNzESMBAGA1UEChMJc2lsZW50ZG9tMSEwHwYDVQQDExhD ZXJ0aWZpY2F0ZSBBdXRob3JpdHktY2EwHhcNMTIwMjAxMTQyMjEyWhcNMjAwMjAx MTQyMjEyWjA3MRIwEAYDVQQKEwlzaWxlbnRkb20xITAfBgNVBAMTGENlcnRpZmlj YXRlIEF1dGhvcml0eS1jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOHVye0oVlu/Rgz4k28JX7J0gmHn5XCRJFYJhYudto8S4IWD6+Vj5mXD3eCL+1MI dr+bg4Zt3YY1ehShT7kbdOnhd14dc5T8ouorn+6IYmUiE9pXWqVMaF/6sNJeZmgg lKwS+IyU4/QJa2CiwtVHGyd00Isf+md111yWaOb5+7yxSQCtyu1lIsuV1evbaKhl 1tfGWNS9bzSg8fEu27ySSQ2/MQOrOG/GAmUaZj/bMePNrKEn3TaDGtPxt46TnJZJ PdxU+vGDz4jH/H5ijU1rGkMpGgtakmKtuVe3A3VIaNCRpliGZNL/s/P9WFURCVro RmKR/HjbFrDjA0w6YORhADMCAwEAAaOBpjCBozAfBgNVHSMEGDAWgBRDrPYwkTq1 hwyi1K8qYW3l52HiGjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBxjAd BgNVHQ4EFgQUQ6z2MJE6tYcMotSvKmFt5edh4howQAYIKwYBBQUHAQEENDAyMDAG CCsGAQUFBzABhiRodHRwOi8vZjE2LXBraS50ZXN0LmNvbTo5MTgwL2NhL29jc3Aw DQYJKoZIhvcNAQENBQADggEBAMQxKJTsHAA1tpjwhWdZ0KL8Gflnv1RJsAxnQA90 SwesYjYxfmr7/8LJhGNLQX2gH8Vd6XvHUhDF726nOQND5Y2HBRfShKuKHph0+NVd gao0KdzdysOZsV61pgOMUqHCJxj1WQ2Wvk7F8tKEVGE1gLu/PJslFZ/VTgzY9vR1 akSAd1xujrz/HiY2hFlkMWRJvbdaUyyluBbTI6GMq+7DrTLEKe6KCCPashKheAr/ 5lZAn4JScM/2cMudCPBy02YutofTydZcemaLLpb3xNzTiEVgYpSQhHZSfmF7sWVH 5R0vh2ehgYpBpKqlKBdSJ4IKKEDVMzolPpZibmo0ghVtaOAxAA== CRYPTO INIT WITH CERTDB:/var/tmp/testdb Crypto manager already initialized importCert string: importing with nickname: ca-agent Already logged into to DB SUCCESS: imported admin user cert ############################################# Attempting to connect to: f16-pki.test.com:9445 Connected. Posting Query = https://f16-pki.test.com:9445//ca/admin/console/config/wizard?p=17&op=next&xml=true&caHost=%2F&caPort=%2F RESPONSE STATUS: HTTP/1.1 200 OK RESPONSE HEADER: Server: Apache-Coyote/1.1 RESPONSE HEADER: Content-Type: application/xml;charset=UTF-8 RESPONSE HEADER: Date: Wed, 01 Feb 2012 14:22:14 GMT RESPONSE HEADER: Connection: close 9445 admin/console/config/donepanel.vm /bin/systemctl f16-pki.test.com true ca sdca pki-cad@pki-ca.service success 19 Done welcome Welcome module Key Store confighsmlogin ConfigHSMLogin securitydomain Security Domain securitydomain Display Certificate Chain subsystem Subsystem Type clone Display Certificate Chain restorekeys Import Keys and Certificates cahierarchy PKI Hierarchy database Internal Database size Key Pairs subjectname Subject Names certrequest Requests and Certificates backupkeys Export Keys and Certificates savepk12 Save Keys and Certificates importcachain Import CA's Certificate Chain admin Administrator importadmincert Import Administrator's Certificate done Done true

18

CA Setup Wizard done 1 caHost=f16-pki.test.com caPort=9445 systemType=ca Certificate System - CA Instance Configured. ####################################################################### [root@f16-pki pki-test-scripts]#