Update client certs

nginx-ingress/hands-on/authentication/basic/README.MD

@@ -0,0 +1,22 @@
+# Authentication in Ingress  
+
+## Basic Auth   
+### Create htpasswd file  
+```bash
+$ htpasswd -c auth foo
+New password: <bar>
+New password:
+Re-type new password:
+Adding password for user foo
+```  
+
+### Convert htpasswd into a secret  
+```bash
+$ kubectl create secret generic basic-auth --from-file=auth
+secret "basic-auth" created
+```  
+
+### Testing  
+```bash
+curl -v http://161.35.240.187/ -H 'Host: foo.bar.com'
+```  

nginx-ingress/hands-on/authentication/client-certs/README.MD

@@ -0,0 +1,94 @@
+# Authentication in Ingress  
+
+## Generate the CA Key and Certificate  
+```bash
+$ openssl req -x509 -sha256 -newkey rsa:4096 -keyout ca.key -out ca.crt -days 356 -nodes -subj '/CN=Anvesh' 
+
+openssl req -x509 -sha256 -newkey rsa:4096 -keyout ca.key -out ca.crt -days 365 -nodes -subj '/CN=Anvesh' -extensions v3_ca
+
+```  
+
+# Generate the Server Key, and Certificate and Sign with the CA Certificate  
+```bash
+$ openssl req -new -newkey rsa:4096 -keyout server.key -out server.csr -nodes -subj '/CN=ingress-domain.com'
+$ openssl x509 -req -sha256 -days 365 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crt
+```  
+
+```bash
+openssl req -new -newkey rsa:4096 -keyout server.key -out server.csr -nodes -subj '/CN=ingress-domain.com' -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:ingress-domain.com,DNS:*.ingress-domain.com"))
+openssl x509 -req -sha256 -days 365 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crt -extensions SAN -extfile <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:ingress-domain.com,DNS:*.ingress-domain.com"))
+```
+
+# Generate the Client Key, and Certificate and Sign with the CA Certificate
+```bash
+$ openssl req -new -newkey rsa:4096 -keyout client.key -out client.csr -nodes -subj '/CN=Anvesh'
+$ openssl x509 -req -sha256 -days 365 -in client.csr -CA ca.crt -CAkey ca.key -set_serial 02 -out client.crt
+```  
+```bash
+openssl req -new -newkey rsa:4096 -keyout client.key -out client.csr -nodes -subj '/CN=Anvesh' -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:Anvesh"))
+openssl x509 -req -sha256 -days 365 -in client.csr -CA ca.crt -CAkey ca.key -set_serial 02 -out client.crt -extensions SAN -extfile <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:Anvesh"))
+
+```
+
+## Generate the CA Key and Certificate 
+```bash
+openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
+    -out self-signed-tls.crt -keyout self-signed-tls.key \
+    -subj "/CN=anvesh.com" \
+    -reqexts SAN \
+    -extensions SAN \
+    -config <(cat /etc/ssl/openssl.cnf \
+        <(printf "[SAN]\nsubjectAltName=DNS:anvesh.com,DNS:*.anvesh.com"))
+```
+
+
+
+```bash
+$ kubectl create secret generic tls-secret --from-file=tls.crt=server.crt --from-file=tls.key=server.key --from-file=ca.crt=ca.crt
+```
+
+### Testing  
+```bash
+curl -v http://161.35.240.187/ -H 'Host: ingress-domain.com'
+```  
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+```bash
+
+kubectl get pods -n kube-system | grep nginx-ingress-controller
+nginx-ingress-controller-5984b97644-qbwtv   1/1       Running
+$ kubectl exec -it -n kube-system nginx-ingress-controller-5984b97644-qbwtv cat /etc/nginx/nginx.conf | grep ssl_client_certificate -A 1
+ssl_client_certificate                  /etc/ingress-controller/ssl/default-my-certs.pem;
+ssl_verify_client                       on;
+
+```
+
+
+
+curl -v https://161.35.240.187/ -H 'Host: ingress-domain.com' --cert client.crt --key client.key -k
+
+
+
+curl -k https://161.35.240.187/ -v -H 'Host: meow.com' --cert client.crt --key client.key 
+
+
+
+curl -k http://172.17.4.99 -v -H 'Host: external-auth-01.sample.com'
+
+
+curl https://ingress-domain.com/ --cert client.crt --key client.key -k

nginx-ingress/hands-on/authentication/client-certs/client-cert-ingress.yaml

@@ -2,13 +2,13 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   annotations:
-    # Enable client certificate authentication
+    # Enable client certificate authentication 
     nginx.ingress.kubernetes.io/auth-tls-verify-client: "on"
     # Create the secret containing the trusted ca certificates
     nginx.ingress.kubernetes.io/auth-tls-secret: "default/tls-secret"
     # Specify if certificates are passed to upstream server
-    nginx.ingress.kubernetes.io/auth-tls-pass-certificate-to-upstream: "true"
-    nginx.ingress.kubernetes.io/auth-tls-verify-depth: "1"
+    # nginx.ingress.kubernetes.io/auth-tls-pass-certificate-to-upstream: "true"
+    # nginx.ingress.kubernetes.io/auth-tls-verify-depth: "1"
   name: nginx-client-cert
 spec:
   ingressClassName: nginx

nginx-ingress/hands-on/authentication/client-certs/test/ca.crt

@@ -1,29 +1,29 @@
 -----BEGIN CERTIFICATE-----
-MIIFAzCCAuugAwIBAgIUHT32D8sr4N9Mlek0G41yB51Fj5YwDQYJKoZIhvcNAQEL
-BQAwETEPMA0GA1UEAwwGQW52ZXNoMB4XDTI0MDQwODAwMzQ0MloXDTI1MDMzMDAw
-MzQ0MlowETEPMA0GA1UEAwwGQW52ZXNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A
-MIICCgKCAgEAzsXBGOJqHyfL2yhzSHOzpN9jpM+K3ZfO0u85M/NGOxfzXBgcKfbV
-yqMcBk1WjYjYLmcdKQWUfiVQuzIdSljHCix4jX1fiX6RNtSpg1XxhcxpH1Y9tol+
-eZjva/uLZDitR6n9F/RofLTLc/DE0zkNB3vHkPfrLtdSXjgfu13EVxCnS2BOOhoj
-79bBJ1U2UAQFA3HNyagcPBjau/+P4OZhn7Ojo6ljiiuTushf4R+W5ceAzEkpF6IM
-VaCm55rNrstUjYML65njxBeRvz3oL1ODlr2KQW306TwCgcgWGTdTpRdl+vQtAlfW
-ni+CvWyQzh+0oh6H927l31cmsqMtdwpGFCEKsMgHekFadWV6/g/xMUuNvwt82UsO
-bHh7IPIHd77hhQohb5MsROc8j+QsAkg/WDJY5IaiYSNbxx0jDHjwvNdBotW+S9SH
-NKApMxptrm9SZnspvzi6y2gxe0Z/puje70jmfXodb0S0cuXvjWBYfz117dFsARVB
-6JO5C7OMGaBf215Apuj4e+lu4ZnMhJyfGa5KqV+9kbIe36/fhRi3msRFvmt6yNDE
-wTEYRrd8MzuOYcBK/918rvcJdHwg87vzosCi3F9rUe6JYZ419q6vcRMy1ng7bPYW
-RFve1BxWWWs1rTmpnDQuQrV+lIMmaZWrek7v79y4AoDZyynf5TC+ukkCAwEAAaNT
-MFEwHQYDVR0OBBYEFP6zyylvYMPLY5PJCRyng/t7gPuoMB8GA1UdIwQYMBaAFP6z
-yylvYMPLY5PJCRyng/t7gPuoMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL
-BQADggIBAE1nXxZKSduRve8w51V7UaQr9n0/vVeuPh7DxIrb8Fp87t/YxcKVmfVu
-K8Haqa2WoFNdMzXeExNsnG9vl5n0676k+Lp0+6lm6UROh/9jK56mTW+F+3xkPmDk
-K+rLAAOgNOP8pjXa036XVNmtTWUQmrWJNW0vVQ5j9O1uRGHTmcJoTNR15QhzJisT
-12KUFRKwZOZxto9JM8SLKMTSaaqNasL5xg2aCgj3AkZM+JfUWGkCMegf5yga23Yb
-VExon6eveUClRW+X5UcQ6aQHL8izGsGB7XvXS9AASMSGp/5UwnsarhqCAxVFvGj9
-upBxfVkXjABX6eGXxm5fuLV8tn0VPcDfXb3liJmRQ8sMlhkyZaK4bXbSSfItM+8B
-ecenvhrP/KwnJYQNtB2jTHAVIMOyuGF6u+LoUSVTC85R0G71uU7pPh8Gr4trRRhW
-AmmWgHNvQFaYZQHq/X027W0BmifH+R9tcVBasX2o44k/cF2HJDujLlS748fYCvN4
-Ut6KsE+G80AT6c3rwtLRA4AXm7r3UVy4V+p7X12yhDLqvHpuD6qt+pwgAHOVS6QI
-tboINf+70s0QBBTkg5+7bCvs4hPeJu9YsBZxQ+6o0FT6HTyrlWS0vEszZSOeePyM
-B5qtjTEYFKgXynOeIGcWlqv8SuhS3IeSmrtOZB4BYORVkwTBGymA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 -----END CERTIFICATE-----

nginx-ingress/hands-on/authentication/client-certs/test/ca.key

@@ -1,52 +1,52 @@
 -----BEGIN PRIVATE KEY-----
-MIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQDOxcEY4mofJ8vb
-KHNIc7Ok32Okz4rdl87S7zkz80Y7F/NcGBwp9tXKoxwGTVaNiNguZx0pBZR+JVC7
-Mh1KWMcKLHiNfV+JfpE21KmDVfGFzGkfVj22iX55mO9r+4tkOK1Hqf0X9Gh8tMtz
-8MTTOQ0He8eQ9+su11JeOB+7XcRXEKdLYE46GiPv1sEnVTZQBAUDcc3JqBw8GNq7
-/4/g5mGfs6OjqWOKK5O6yF/hH5blx4DMSSkXogxVoKbnms2uy1SNgwvrmePEF5G/
-PegvU4OWvYpBbfTpPAKByBYZN1OlF2X69C0CV9aeL4K9bJDOH7SiHof3buXfVyay
-oy13CkYUIQqwyAd6QVp1ZXr+D/ExS42/C3zZSw5seHsg8gd3vuGFCiFvkyxE5zyP
-5CwCSD9YMljkhqJhI1vHHSMMePC810Gi1b5L1Ic0oCkzGm2ub1Jmeym/OLrLaDF7
-Rn+m6N7vSOZ9eh1vRLRy5e+NYFh/PXXt0WwBFUHok7kLs4wZoF/bXkCm6Ph76W7h
-mcyEnJ8ZrkqpX72Rsh7fr9+FGLeaxEW+a3rI0MTBMRhGt3wzO45hwEr/3Xyu9wl0
-fCDzu/OiwKLcX2tR7olhnjX2rq9xEzLWeDts9hZEW97UHFZZazWtOamcNC5CtX6U
-gyZplat6Tu/v3LgCgNnLKd/lML66SQIDAQABAoICACxrGeidFtv7ghTh0yYQyNoV
-rQOmG/gvWNxCTKEG1SLzqbEycrZnEpU1xdrquTmtWHdbak26J6STooycHuOuP4/F
-bt5CPQg92rcTJxkSGNC70SdMsPQqBDPd8SzavB56+GppL3f6ZonHkt8krTuMyWo+
-omfXgjutQMIBv3tSEM/9QVr1ZMihfe/TS+oFqaW1v1f2lhUIWoxkcHSrWT6gbv9O
-KUyKoln3s4QP8Fzdmt5gpZ/85Wlww8KPQNuHC0FN56uAp8pkZCPnRkV1aI/mGmIC
-9JTKqK6D2CwGDg07r+nKpXssAhE7Slzv6t+DV3YYJIchFOdH+PSp9aOxXx5v5A6i
-ubnZJZNh44E5XAjIHWMoCrf5QEyrKubSv4m5Ew0eCatnEF/WIe9HiEvylEt2MEQN
-Z1A3J1l0MV1tdXcVrcLp2UtFxTccpaRwO0Dn3/CqTNVHZMn4MMfF2EqGwlD+ofXC
-anLRvaJxYDKskaw9NwtUOB09O4roI2UDfBVCRj5NZbme+HdcMhk6OvYbfz+1IMqC
-3S9NWMX8fNgswxI5x7pFOELGtm+pwcGzwGdSHd3EDKSIZcY6gPP4bJrCGTFa1RuH
-kJXWPf0U7eoUedvadB4AbEGeAi+f/Vcs8AUMwn1XDe8Vp24VGFR9UCq+oD3hpfYV
-uIcUK/WLyiiiohJ0VrtJAoIBAQD6PSVFBQuo0ITqKDNSXT6+05zgVI3AwtnYSPxG
-R7FvDva8zXvsPyvnLbBiRrnwHlFwbgQJX6Sip11qP5CBalegjS8OMq1194zBPiLA
-jJmVrS6hZIzifuyh3f4BsZi5V+4OBUzbq9g+If+wArJtS7WrWJ4FICn2Bk726PXv
-PsdKApWj2tZQtV9LPXu0WgPRtC3K4d/wRQpkO5KoYylhW5f8CMEofnMv22QsPQft
-QWK1mt70ERb2TsKJmh5Ffv01fZUzxrk+Lrk3wz4jzYKWhfJNcysXbe1GU0M5PBFw
-6Mwsvyd6YfbuQyGM+i7WU5c0d2CHlW4p/E+9TbDakM/Wk4U1AoIBAQDTiG1bNzpf
-bPrNsO07f1J4ZmD5z5Gjogu3vxFgOhyJnUT7HThw6lzTg/642gRbAcqaQIeB+BcO
-nTL6XJ+mX6mL1mPZbeiUbQhGNSIF+3AlfWdFD/PZR5cejXPP8ynxr2uPz+uQCwMV
-G4AGfJCiawPKVKL0g3rmWTpLpdugeI1XUYjQQxiU0Sx8g2Hn2/cUiNzt6n0Sekue
-062Xlmpyon/QjDKj+6n4bB+cvlBISQSoWPKQQCdSpF98x9fHL3FK2wCnoiapHjSh
-zuTWTP1y4/YaRW2tA7Fqe3UbMfCGJDSrjSr0P7aTEuCvZsQEJGTcZrz71G6u9Zm6
-uXRVD3BMxedFAoIBAH2VVjDvOUy9aRcCmc8KEMU/+gjzJjjJEP7kkgbLUBbGUbmq
-/jgv896PJWgMyp/g90oPTGNP5pXinJUH1YO9VMC0Whsr/7WmSLNqdZJgfWuKgE5q
-4fGBdUw+1o0PDfBmWogazNmpwlpcQa+ZiuYjCsc1MAiufaCExfhQLayluuo/pc2X
-s9rJS0u9TWnTivshC6I3/WTdoTtwUkfDjC7aAspvslCaNUCdQAabknDVUa6GTMH8
-GaP/Hs5j1DFYa8b+gXR8lNbKKBX+HB9nsdPM4S9RTxzxBBU5EBGXPcGGc4E5ZZyb
-sYsdkabon7zcMpQYHQ+uRJ05jOMaLFlkN4oeeskCggEAOfMsEkslALN4WhVYSG5v
-B3D0rDtDKNLh5uq/Nd91pfWhyjGNHtH1sDR++eEwREZPXMbE2MRAfM5wAsqRKiEW
-76pCHHTRvKfKFoHD2mOxq3OZcQAXy7SjH8mcqqFxIjbufq11WTbLF2M7RYumi/hJ
-R4q8QcQrTSOwpry/WEzuW7eIhZV8DHjpeQr9LWnDXKrJ65vLu94pDU/sRJT+gH0o
-Ctf9n5L4U4g7eNNiZwsp7XzApugMXcWOKz8MTBMhNGKe4U24zafqv1FQu6zH2ku9
-RiEzFKzoU8WSpWqe/AC7NSwtUlCKEeygBS1gEcpunzq+FzdxQxkhjlf0GMFsAHxP
-CQKCAQEAmN/EL78l2hNt5fwCj5ewOgPpXIiXbldls7KguwqTykrKVvF6ICoyu6Hw
-VEYZvNsPHWbk/9EOJVUKlCYEiNCS6+UbHisYanaVVPhs7WSpkt+gOl7M2ynTuJ58
-19EcN4nzgxFsNym01b7I0ALguSYrcK571dr+aul9/5JN/qgvOv5i3GQpiQQrxxvC
-hQQZ41stp0zYVd6NlbjKoVh8aKRdAU2zDO9u/f1KLOYuxbpNU/5hNkzD0TfrFsKs
-ohBnjkWhN8CSS+v5xbSIOvrIWqpaI8b0eHrke5Q7iApgOCxO6UWgDZxaS0wHSvig
-iFrwCB76ryahqPhnFbwxoybamo+rkA==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 -----END PRIVATE KEY-----

nginx-ingress/hands-on/authentication/client-certs/test/client.crt

@@ -1,29 +1,29 @@
 -----BEGIN CERTIFICATE-----
-MIIE3zCCAsegAwIBAgIBAjANBgkqhkiG9w0BAQsFADARMQ8wDQYDVQQDDAZBbnZl
-c2gwHhcNMjQwNDA4MDAzNTIzWhcNMjUwNDA4MDAzNTIzWjARMQ8wDQYDVQQDDAZB
-bnZlc2gwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCuAcZq0l3nBWGP
-xVQm5tkp1PvyaF+tfOB7HlEAcBjXMZy3M3QsjXXqebr4eRdplJqzNIj7w3F0xmOG
-m29eCtJoCi4nGjAexZ8Yvk3wg3l3lRNolmRXKmFRnw64pXIvrvpv13BKAw9w3Hm3
-nbb6L59ri2i8hKBk/Wb6Xwl/aqJs41wyWONoIMS4PtAYZcQdHKmkYLm03z89Csw8
-QZnjCTCgS19rEPFr8uhGDBj1fLn2IL5b1g+ssqdaNNHcIjGiFoVEDh+tShLOK2lM
-tmrE5qQwSrg+mGoG/ygQc7LXtaCNwRayRDKVnhEeaPHmGobnMQF0gL/V0Esg+MNP
-OkpbymxVXaiRm8JRITraCdz4DTomJIyW9x+aQuozEpR/6s1A+w0aSiSyy1TsO261
-W0MhJk4a+U1trYe4vIYvEwwkIrwEBnGgX5XvXIcy/OSr2nLbala9p4LaBkn1bJsC
-VDRZGEugPfcpv84lJzd7Pz+5Y0SradtmOTgFG3FL8C58gmNHknMitqmocv+ppEVF
-ZB+lHKwL9sckp4e5Obq2qLR8SzEIe6GZpbL+FuVC8trho03+63VQTr73iV9Zv1TA
-9+WpCX0Ef4+1xA2/YOzkV+zB/AkfGxEGBpjRfdwQIdyHEScfrNwyWoFoJLl2IoT/
-ezHUYoQjpR9qtLl/LfN5zw998fQ5CQIDAQABo0IwQDAdBgNVHQ4EFgQUtGAXgaYC
-de6n402ys9LqJ8vutAMwHwYDVR0jBBgwFoAU/rPLKW9gw8tjk8kJHKeD+3uA+6gw
-DQYJKoZIhvcNAQELBQADggIBAH4Yp32DMIYnQX3s8ohZzKT0odkZwtt5W7FxWDlW
-BMcmrzT3dOM09AoNyZZHW5IulnIxQH9+A1jm1cDU9F9NOU3pO4TMNgTd3uZmSEB5
-9VUzsDVeyizqfOSPiq6jlZYNbNMRwlClOKn/pGzn3HZweGSHqZSrHu3luFPsUhw9
-8SMgnrsUELcW6GmLMEUykVK3riHgTuXVVHnzUmnQ98Q8jcxDInVTQeAtpYJqJl+E
-8IwPX2E71qcuHJZJbRwskiDDzu8gntykLJ/Sh5sfPBy6xOW9qPZUnGCdoO/xqC6B
-Buu2VnlJrlOvml73qxOl2rXpOWgg6xTZFVM7o4/kbPqdVboUueaeEOnGw5Z/yVp/
-ORvUCfUAJS67HxAS8jyfQxdo6jOrRPLZSWYsvkHG1QCBkXhIVSNoDW7/Km0ey+VE
-pXg02Pr9xho9QdMYk/amZ5SP7mxDgeZtm8vj3InB/gzPlv4pUlRe1t1uHb95aJRE
-Np1CPiEZFtvlerOxNWpeSm/Czzde0rrt2+bQ/074H1ATm8L/FBsDhzZR9OO4mfAa
-EML1VVeZOPZ+TqHe1yLEAx5y+HOBG+0J3G8vvfrdjX3I67WC9DMSyM5vAUEAOtsl
-ulN1YVEqkflbqqi+4LsBU3qveB5GOqA6J2t86xfFNcqX3mZmYXfOCesg3Cw19elX
-BEA9
+MIIE8jCCAtqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADARMQ8wDQYDVQQDDAZBbnZl
+c2gwHhcNMjQwNDA5MDIyNjAxWhcNMjUwNDA5MDIyNjAxWjARMQ8wDQYDVQQDDAZB
+bnZlc2gwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDAN3Nijk05M9+4
+kaVEI73V+mM/qQVieiqGme+Kny3+0heViUbQIgi+BT8RWn+O/AieB2giD4826g5X
+xjxTjJhD44Azb6Wtz5KFuULRdeaAWGD6OWMn4kO8pyrrThzE1TrWHTum3vAtLZeL
+CY8EpZpdfYsiwFmwfmYofR8BJdVLAa5KXaG9jnk9/NAvUWVwFw9How0dgflzMve/
+UB/TrJ7TwxEzUen5PHhUpuOWJEG0F4wkm11zDzZYdXD7st4kdcQJi+pDfBJZaB/u
+8bKF5/WV+0QoOL/qd5UEutNhR0f1FHyrtKjhcSdVJij/TcJZFy3v40ci9jS0HBDp
+b/hXDCYobVUocae7c4tIUPuQuQzrCUzRiUF9ZCyrkDJ/+vacySaeby81noiIuLqD
+8RG1a57nwsgGROWyJpMXeoxx9zERZtyMDXIQ8iLTs0LgnSPuxNeYB8jH/wwxqWWv
+Cmj8rsehHmvGHZfiygEaHxif7zo3mA5IlD4gdB3pioQqX8bJPCFjemYUrDTggxwt
+iKRBpLssC4s4WUsVQ7QvfKzhOeuzaeWSt6by2BBj3K6TSw4K1i97XknEWVB2kjW3
+nTBSnvTjJWZbIJhXEaHyKZnOpyx4iKSydtZ8YJC6/fJ4KgCZeu1MCjkZlgDGXfGn
+m6PYuVcIfB2DKfw6MIEzh+PvYYLFcQIDAQABo1UwUzARBgNVHREECjAIggZBbnZl
+c2gwHQYDVR0OBBYEFG8lCUpoJvMB6tayYqb6sLVi6FlUMB8GA1UdIwQYMBaAFOvI
+oKACHdt6yj5hfGJsOc+3MSwRMA0GCSqGSIb3DQEBCwUAA4ICAQBQjQKBCXtVGHF6
+5k2MSpCMpG5fBQ7YX6T2mhilnYLK51dG0/z8zTf1+tOi/j4X8n2kNFrnjYSo/JJ0
+ZMog0UrSZvVcuX80olbz3xJDm8eFCj/TFcNXHedbZM8aLvYIgXBMNfVCA5TdMqlN
+jYUFAkDDJ7MzzeF+c4+twfWrp7CxQHiQP0Mx6jo6TOHtkrXDXCTzQwY0GI/3boQV
+BZ6EhdVBnv/cT13NMVwa45zuBm94vvwq1GtCAienTxvBKvEWJ1fa5vi495Y3hS1K
+58sNmRKnrCbOBagTY7FKpsjfk0KFTS1Lh2jDFgHpUvrIHWM0mRlS0AqbWITqSYZQ
+iOdHjPZ8Y+fsuNuWBmwiPpj/fXP+nITLhy4/716XxmUQ391Uxx/OX5v1Y9uk80lk
+jDdgXlRI4cWQS0tlcYhPRByPJcAHRCTSXymsvxK4DDd2TyMgu8mt5qGbb5ysf5Ab
+M7VceF/qnISEldYrE408fjCx65jH1KFwm+vZsRM0a9RPqzuumT5Xd8qYZWvqL82Q
+Bj3981chF7dQN7zimH/MzLirfzPhsnOStcYN9HI56inWxE4ZUpbB18+FavL18B+B
+8lUBuX20FNjwSCGK1Yt1Ky60BRUvL80CeRddA6V2g85Gn1oQ3mleguEpM78gCO6B
+ioXqhLd2R7fNeqikmQOP1Uw15JVWNQ==
 -----END CERTIFICATE-----