1 files changed, 110 insertions, 0 deletions
diff --git a/tests/cert-tests/data/aki-cert.pem b/tests/cert-tests/data/aki-cert.pem
new file mode 100644
index 0000000..cb767c6
--- /dev/null
+++ b/tests/cert-tests/data/aki-cert.pem
@@ -0,0 +1,110 @@
+X.509 Certificate Information:
+	Version: 3
+	Serial Number (hex): 6e4ffab3c5e669c4d167c992abe858c4
+	Issuer: OU=VeriSign Trust Network,OU=(c) 1998 VeriSign\, Inc. - For authorized use only,OU=Class 3 Public Primary Certification Authority - G2,O=VeriSign\, Inc.,C=US
+	Validity:
+		Not Before: Wed Mar 25 00:00:00 UTC 2009
+		Not After: Sun Mar 24 23:59:59 UTC 2019
+	Subject: CN=VeriSign Class 3 Secure Server CA - G2,OU=Terms of use at https://www.verisign.com/rpa (c)09,OU=VeriSign Trust Network,O=VeriSign\, Inc.,C=US
+	Subject Public Key Algorithm: RSA
+		Modulus (bits 2048):
+			00:d4:56:8f:57:3b:37:28:a6:40:63:d2:95:d5:05:74
+			da:b5:19:6a:96:d6:71:57:2f:e2:c0:34:8c:a0:95:b3
+			8c:e1:37:24:f3:2e:ed:43:45:05:8e:89:d7:fa:da:4a
+			b5:f8:3e:8d:4e:c7:f9:49:50:45:37:40:9f:74:aa:a0
+			51:55:61:f1:60:84:89:a5:9e:80:8d:2f:b0:21:aa:45
+			82:c4:cf:b4:14:7f:47:15:20:28:82:b0:68:12:c0:ae
+			5c:07:d7:f6:59:cc:cb:62:56:5c:4d:49:ff:26:88:ab
+			54:51:3a:2f:4a:da:0e:98:e2:89:72:b9:fc:f7:68:3c
+			c4:1f:39:7a:cb:17:81:f3:0c:ad:0f:dc:61:62:1b:10
+			0b:04:1e:29:18:71:5e:62:cb:43:de:be:31:ba:71:02
+			19:4e:26:a9:51:da:8c:64:69:03:de:9c:fd:7d:fd:7b
+			61:bc:fc:84:7c:88:5c:b4:c3:7b:ed:5f:2b:46:12:f1
+			fd:00:01:9a:8b:5b:e9:a3:05:2e:8f:2e:5b:de:f3:1b
+			78:f8:66:91:08:c0:5e:ce:d5:b0:36:ca:d4:a8:7b:a0
+			7d:f9:30:7a:bf:f8:dd:19:51:2b:20:ba:fe:a7:cf:a1
+			4e:b0:67:f5:80:aa:2b:83:2e:d2:8e:54:89:8e:1e:29
+			0b
+		Exponent (bits 24):
+			01:00:01
+	Extensions:
+		Authority Information Access (not critical):
+			Access Method: 1.3.6.1.5.5.7.48.1 (id-ad-ocsp)
+			Access Location URI: http://ocsp.verisign.com
+		Basic Constraints (critical):
+			Certificate Authority (CA): TRUE
+			Path Length Constraint: 0
+		Certificate Policies (not critical):
+			2.16.840.1.113733.1.7.23.3
+				URI: https://www.verisign.com/cps
+				Note: https://www.verisign.com/rpa
+		CRL Distribution points (not critical):
+			URI: http://crl.verisign.com/pca3-g2.crl
+		Key Usage (critical):
+			Certificate signing.
+			CRL signing.
+		Unknown extension 1.3.6.1.5.5.7.1.12 (not critical):
+			ASCII: 0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
+			Hexdump: 305fa15da05b3059305730551609696d6167652f6769663021301f300706052b0e03021a04148fe5d31a86ac8d8e6bc3cf806ad448182c7b192e30251623687474703a2f2f6c6f676f2e766572697369676e2e636f6d2f76736c6f676f2e676966
+		Subject Alternative Name (not critical):
+			directoryName: CN=Class3CA2048-1-52
+		Subject Key Identifier (not critical):
+			a5ef0b11cec04103a34a659048b21ce0572d7d47
+		Authority Key Identifier (not critical):
+			directoryName: OU=VeriSign Trust Network,OU=(c) 1998 VeriSign\, Inc. - For authorized use only,OU=Class 3 Public Primary Certification Authority - G2,O=VeriSign\, Inc.,C=US
+			serial: 7dd9fe07cfa81eb7107967fba78934c6
+	Signature Algorithm: RSA-SHA1
+	Signature:
+		63:74:2f:3d:53:aa:2f:97:ec:26:11:66:1a:fe:f1:de
+		41:27:19:d2:7f:d8:c1:1c:f9:e2:38:56:3a:1f:90:ae
+		39:c5:20:75:ab:f8:6c:2d:67:1f:29:c2:21:d7:14:88
+		63:4b:b0:9b:27:63:91:f8:f0:a3:01:24:b6:fb:8f:e3
+		3d:02:0b:6f:54:fe:d4:cc:db:d6:85:bf:7c:95:1e:5e
+		62:11:c1:d9:09:9c:42:b9:b2:d4:aa:2d:98:3a:23:60
+		cc:a2:9a:f1:6e:e8:cf:8e:d1:1a:3c:5e:19:c5:d7:9b
+		35:b0:02:23:24:e5:05:b8:d5:88:e3:e0:fa:b9:f4:5f
+Other Information:
+	Fingerprint:
+		sha1:62f3c89771da4ce01a91fc13e02b6057b4547a1d
+		sha256:50505039f8cbd1d36739bcf80d334f532f6817a332add4352f1f4fee9915cd8a
+	Public Key ID:
+		sha1:df622ed0fe6a65a8df5b62840c826ac5b372235f
+		sha256:a1d7b37438ab0eadc6a9c9c2f3265314e64065b9a3ad937b6ca535b8cb5fe093
+	Public Key PIN:
+		pin-sha256:odezdDirDq3GqcnC8yZTFOZAZbmjrZN7bKU1uMtf4JM=
+
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----