添加badssl.com目录

2019-12-20 15:48:39 +08:00
parent 69eb20e8dc
commit bd4dd5b9aa
422 changed files with 27323 additions and 0 deletions
--- a/badssl.com/.gitignore
+++ b/badssl.com/.gitignore
@@ -0,0 +1,3 @@
+_site
+.jekyll*
+.sass-cache
--- a/badssl.com/AUTHORS
+++ b/badssl.com/AUTHORS
@@ -0,0 +1,2 @@
+Google Inc.
+Mozilla
--- a/badssl.com/Dockerfile
+++ b/badssl.com/Dockerfile
@@ -0,0 +1,30 @@
+# Start with Ubuntu 16.04 (LTS), and build badssl.com up from there
+FROM ubuntu:16.04
+MAINTAINER April King <april@pokeinthe.io>
+EXPOSE 80 443
+
+RUN sed -i s@/archive.ubuntu.com/@/mirrors.163.com/@g /etc/apt/sources.list \
+    && apt-get clean \
+    && apt-get update \
+    && apt-get install -y apt-transport-https \
+    && apt-get install -y software-properties-common \
+    && apt-add-repository ppa:brightbox/ruby-ng \
+    && apt-get update \
+    && apt-get install -y \
+    build-essential \
+    git \
+    libffi-dev \
+    make \
+    nginx \
+    ruby2.4 \
+    ruby2.4-dev \
+    && gem update --system \
+    && gem install jekyll
+
+# Install badssl.com
+ADD . badssl.com
+WORKDIR badssl.com
+RUN make inside-docker
+
+# Start things up!
+CMD tail -f /dev/null
--- a/badssl.com/LICENSE
+++ b/badssl.com/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
--- a/badssl.com/Makefile
+++ b/badssl.com/Makefile
@@ -0,0 +1,132 @@
+################ Definitions ################
+
+export TEST_DOMAIN = badssl.test
+export TEST_DOMAIN_SELF_TEST =  badssl.self-test.geedge.net 
+export PROD_DOMAIN = badssl.com
+
+################ Main ################
+
+# This should bring up a full test server in docker from a bare repo.
+# Certs are generated outside the docker container, for persistence.
+.PHONY: test
+test: certs-test docker-build
+
+# Convenience alias.
+.PHONY: serve
+serve: test
+
+# This should properly deploy from any state of the repo.
+.PHONY: deploy
+deploy: certs-prod jekyll-prod upload nginx
+
+################ Jekyll ################
+
+.PHONY: jekyll-test
+jekyll-test:
+	DOMAIN=${TEST_DOMAIN_SELF_TEST} jekyll build
+
+.PHONY: jekyll-prod
+jekyll-prod:
+	DOMAIN=${PROD_DOMAIN} jekyll build
+
+################ Certs ################
+
+.PHONY: certs-test
+certs-test:
+	cd certs && make test O=sets/test D=badssl.self-test.geedge.net
+	cd certs/sets && rm -rf current && cp -R test current
+
+	rm -rf common/certs/*.crt
+	cp certs/sets/current/gen/crt/ca-root.crt common/certs
+	cp certs/sets/current/gen/crt/ca-untrusted-root.crt common/certs
+	cp certs/sets/current/gen/crt/client.p12 common/certs/${TEST_DOMAIN}-client.p12
+	cp certs/sets/current/gen/crt/client.pem common/certs/${TEST_DOMAIN}-client.pem
+
+.PHONY: certs-prod
+certs-prod:
+	cd certs && make prod O=sets/prod D=badssl.com
+	cd certs/sets && rm -rf current && cp -R prod current
+
+	rm -rf common/certs/*.crt
+	cp certs/sets/current/gen/crt/ca-untrusted-root.crt common/certs
+	cp certs/sets/current/gen/crt/client.p12 common/certs/${PROD_DOMAIN}-client.p12
+	cp certs/sets/current/gen/crt/client.pem common/certs/${PROD_DOMAIN}-client.pem
+
+.PHONY: clean-certs
+clean-certs:
+	rm -rf certs/sets/current
+	rm -rf certs/sets/*/gen
+	rm -rf common/certs/*.crt
+
+################ Installation ################
+
+.PHONY: install-keys
+install-keys:
+	mkdir -p /etc/keys
+	cp ./certs/sets/current/gen/key/*.key /etc/keys
+	chmod 640 /etc/keys/*.key
+	chmod 750 /etc/keys
+
+.PHONY: link
+link:
+	if [ ! -d /var/www ]; then mkdir -p /var/www; fi
+	if [ ! -d /var/www/badssl ]; then ln -sf "`pwd`" /var/www/badssl; fi
+	# Add the badssl.conf include to /etc/nginx/nginx.conf only if it is not already in the config.
+	# If /etc/nginx/nginx.conf does not exist, instead warn the user that it must be manually added.
+	if [ -f /etc/nginx/nginx.conf ]; then \
+		if ! grep -q "include /var/www/badssl/_site/nginx.conf" /etc/nginx/nginx.conf; then \
+			sed -i '/# Virtual Host Configs/a\\tinclude /var/www/badssl/_site/nginx.conf;' /etc/nginx/nginx.conf; \
+		fi \
+	else \
+		@echo "Please add `pwd`/_site/nginx.conf to your nginx.conf configuration."; \
+	fi
+
+.PHONY: install
+install: install-keys link
+
+.PHONY: clean
+clean: clean-certs
+	rm -rf _site
+	rm -f /etc/keys/*.key
+
+################ Docker ################
+
+.PHONY: inside-docker
+inside-docker: jekyll-test install
+
+.PHONY: docker-build
+docker-build:
+	docker build -t badssl:ssl-self-test .
+
+.PHONY: docker-run
+docker-run:
+	docker run -it -p 80:80 -p 443:443 -p 1000-1024:1000-1024 badssl
+
+################ Deployment ################
+
+.PHONY: upload
+upload:
+	rsync -avz \
+		--exclude .DS_Store \
+		--exclude .git \
+		--exclude _site/domains-local-only \
+		--delete  --delete-excluded \
+		./ \
+		badssl.com:~/badssl/
+	echo "\nDone deploying.\n"
+
+.PHONY: nginx
+nginx:
+	ssh badssl.com "sudo nginx -t ; sudo service nginx reload"
+
+##
+
+.PHONY: list-hosts
+list-hosts:
+	@echo "#### start of badssl.self-test.geedge.net hosts ####"
+	@grep -r "server_name.*{{ site.domain }}" . \
+		| sed "s/.*server_name \([^\{]*\).*/127.0.0.1 \1badssl.self-test.geedge.net/g" \
+		| sort \
+		| uniq \
+		| grep -v "\*"
+	@echo "#### end of badssl.self-test.geedge.net hosts ####"
--- a/badssl.com/README.md
+++ b/badssl.com/README.md
@@ -0,0 +1,71 @@
+<a href="https://badssl.com/">
+  <img src="./badssl.png" alt="" width="472" height="68">
+</a>
+
+Visit [`badssl.com`](https://badssl.com/) for a list of test subdomains, including:
+
+- [`self-signed.badssl.com`](https://self-signed.badssl.com)
+- [`expired.badssl.com`](https://expired.badssl.com)
+- [`mixed.badssl.com`](https://mixed.badssl.com)
+- [`rc4.badssl.com`](https://rc4.badssl.com)
+- [`hsts.badssl.com`](https://hsts.badssl.com)
+
+## Server Setup
+
+Stock Ubuntu VM, DNS A records for `badssl.com.` and `*.badssl.com.` pointing to the VM.
+
+### Testing and development
+
+1. Follow the instructions to [install Docker.](https://www.docker.com/get-docker)
+2. Clone into the badssl repo by running `git clone https://github.com/chromium/badssl.com && cd badssl.com`.
+3. In order to access the various badssl subdomains locally you will need to add them to your [system hosts file](https://bencane.com/2013/10/29/managing-dns-locally-with-etchosts/). Run `make list-hosts` and copy and paste the output into `/etc/hosts`.
+4. Start Docker by running `make serve`.
+5. You can now navigate to `badssl.test` in your browser, and you should see a certificate error.
+6. The badssl root certificate is at `certs/sets/test/gen/crt/ca-root.crt`. In order to get the rest of the badssl subdomains working, you will need to add this to your machine's list of trusted certificates.
+    - On `macOS`, drag `certs/sets/test/gen/crt/ca-root.crt` into the login section of the program Keychain Access. A BadSSL Root Certificate Authority entry should appear in the list. Double-click on this entry and select "Always Trust" from the drop-down menu next to "Secure Sockets Layer (SSL)." Close the window to save your changes.
+
+      If you are already familiar with this process, you can instead run this command:
+
+      ```sh
+      security add-trusted-cert -r trustRoot -p ssl \
+        -k "$HOME/Library/Keychains/login.keychain" certs/sets/test/gen/crt/ca-root.crt
+      ```
+
+7. In order to preserve the client and root certificates even after running `make clean`, run:
+
+```sh
+cd certs/sets/test
+mkdir -p pregen/crt pregen/key
+cp gen/crt/ca-root.crt pregen/crt/ca-root.crt
+cp gen/crt/client.crt pregen/crt/client.crt
+cp gen/crt/client-ca-root.crt pregen/crt/client-ca-root.crt
+cp gen/key/ca-root.key pregen/key/ca-root.key
+cp gen/key/client.key pregen/key/client.key
+cp gen/key/client-ca-root.key pregen/key/client-ca-root.key
+```
+
+## Acknowledgments
+
+badssl.com is hosted on Google Cloud infrastructure and co-maintained by:
+
+- [April King](https://github.com/april), Mozilla Firefox
+- [Lucas Garron](https://github.com/lgarron), formerly Google Chrome
+- [Chris Thompson](https://github.com/christhompson), Google Chrome
+
+Several public badssl.com certificates required special issuance processes. Most certificates were graciously issued for free, thanks to help from:
+
+- [Vincent Lynch](https://twitter.com/vtlynch), [The SSL Store](https://www.thesslstore.com/) (`sha1-2016`, `sha1-2017`)
+- [Richard Barnes](https://twitter.com/rlbarnes), Mozilla (`1000-sans`, `10000-sans`)
+- [Clint Wilson](https://twitter.com/clintw_), [DigiCert](https://www.digicert.com/) (most wildcards)
+- [Andrew Ayer](https://github.com/agwa), [SSLMate](https://sslmate.com/) (`invalid-expected-sct`)
+- [Rob Stradling](https://github.com/robstradling), [Comodo](https://www.comodo.com/) (`1000-sans`, `10000-sans`, `no-subject`, `no-common-name`, `sha1-intermediate`, `ѕрооғ`)
+
+Various subdomains and test pages are also implemented by [external contributors](https://github.com/chromium/badssl.com/graphs/contributors).
+
+## Disclaimer
+
+`badssl.com` is meant for *manual* testing of security UI in web clients.
+
+Most subdomains are likely to have stable functionality, but anything *could* change without notice. If you would like a documented guarantee for a particular use case, please file an issue. (Alternatively, you could make a fork and host your own copy.)
+
+badssl.com is not an official Google product. It is offered "AS-IS" and without any warranties.
--- a/badssl.com/_config.yml
+++ b/badssl.com/_config.yml
@@ -0,0 +1,5 @@
+# `domain` and `http-domain` are populated via environment.
+
+# Build settings
+exclude: ["badssl.com.png", "certs/sets/prod"]
+markdown: kramdown
--- a/badssl.com/_layouts/page.html
+++ b/badssl.com/_layouts/page.html
@@ -0,0 +1,15 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  {% if page.no-favicon %}<!-- No favicon -->{% else %}<link rel="shortcut icon" href="/icons/favicon-{{ page.favicon }}.ico"/>
+  <link rel="apple-touch-icon" href="/icons/icon-{{ page.favicon }}.png"/>{% endif %}
+  <title>{% if page.title %}{{ page.title }}{% else %}{{ page.subdomain }}.{{ site.domain }}{% endif %}</title>
+  <link rel="stylesheet" href="/style.css">
+  <style>body { background: {% if page.background %}{{ page.background }}{% else %}gray{% endif %}; }</style>
+</head>
+<body>
+{{ content }}
+</body>
+</html>
--- a/badssl.com/_layouts/spoofed.html
+++ b/badssl.com/_layouts/spoofed.html
@@ -0,0 +1,14 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <link rel="shortcut icon" href="/favicons/favicon.ico"/>
+  <link rel="apple-touch-icon" href="/favicons/icon.png"/>
+  <title>{% if page.title %}{{ page.title }}{% else %}{{ page.subdomain }}.{{ site.domain }}{% endif %}</title>
+  <link rel="stylesheet" href="/style.css">
+  <style>body { background: {% if page.background %}{{ page.background }}{% else %}gray{% endif %}; }</style>
+</head>
+<body>
+{{ content }}
+</body>
+</html>
--- a/badssl.com/_plugins/environment_variable.rb
+++ b/badssl.com/_plugins/environment_variable.rb
@@ -0,0 +1,19 @@
+# Plugin to add environment variables to the `site` object in Liquid templates
+
+module Jekyll
+
+  class EnvironmentVariablesGenerator < Generator
+
+    def generate(site)
+      site.config['domain'] = ENV['DOMAIN'] || 'badssl.com'
+      site.config['prod'] = ENV['DOMAIN'] == ENV['PROD_DOMAIN']
+      site.config['http-domain'] = ENV['HTTP_DOMAIN'] || 'http.badssl.com'
+      site.config['serving-path'] = ENV['SERVING_PATH'] || '/var/www/badssl/_site'
+
+      site.config['cert-path'] = site.config['serving-path'] + '/certs/sets/current/gen/chain'
+      site.config['dhparam-path'] = site.config['serving-path'] + '/certs/sets/current/gen/dhparam'
+    end
+
+  end
+
+end
--- a/badssl.com/badssl.png
+++ b/badssl.com/badssl.png
--- a/badssl.com/certs/.gitignore
+++ b/badssl.com/certs/.gitignore
@@ -0,0 +1,6 @@
+/src/crt/*.srl
+*.key
+sets/current
+sets/*/gen
+sets/*/pregen/crt
+sets/*/pregen/key
--- a/badssl.com/certs/Makefile
+++ b/badssl.com/certs/Makefile
@@ -0,0 +1,474 @@
+# chain     :: pem <= []crt
+# dhparam   :: pem <= int (#bits)
+# gen-ca    :: crt <= conf, key
+# gen-csr   :: csr <= conf, key
+# gen-key    :: key <= int (#bits)
+# gen-ecckey :: key <= string (ECC Prime)
+# self-sign :: crt <= days, hash, extensions, conf, csr, key (self)
+# sign      :: crt <= days, hash, extensions, conf, csr, key (CA), crt (CA)
+
+# TODO:
+# Generate the expired cert in the past.
+
+# Note: Files and paths must not contain spaces.
+
+D = badssl.com
+MAIN_CERT_TYPE = rsa2048
+DAYS_DEFAULT = 730
+HASH_DEFAULT = sha256
+
+SIGN_CA_DEFAULTS = 3650 $(HASH_DEFAULT) req_v3_ca
+SIGN_LEAF_DEFAULTS = $(DAYS_DEFAULT) $(HASH_DEFAULT) req_v3_usr
+
+# These variables will keep track of all chain targets.
+CHAINS_PROD =
+# These are chains that we can't get public versions of (usually due to Baseline Requirements).
+CHAINS_LOCAL_ONLY =
+
+O = sets/test
+
+.PHONY: all
+all: test
+
+.PHONY: test
+test: prod chains-local
+
+.PHONY: prod
+prod: chains-prod dhparams
+
+.PHONY: clean
+clean:
+	rm -rf $(O)/gen
+
+################################
+$(O)/gen/key/ca-root.key:
+	./tool gen-key $@ $(D) 4096
+$(O)/gen/crt/ca-root.crt: src/conf/ca-root.conf $(O)/gen/key/ca-root.key
+	./tool gen-ca $@ $(D) $^
+
+################################
+$(O)/gen/key/client-ca-root.key:
+	./tool gen-key $@ $(D) 4096
+$(O)/gen/crt/client-ca-root.crt: src/conf/client-ca-root.conf $(O)/gen/key/client-ca-root.key
+	./tool gen-ca $@ $(D) $^
+$(O)/gen/chain/client-ca-root.pem: $(O)/gen/crt/client-ca-root.crt
+	./tool chain $@ $(D) $^
+CHAINS_PROD += $(O)/gen/chain/client-ca-root.pem
+
+$(O)/gen/key/client-ca-untrusted-root.key:
+	./tool gen-key $@ $(D) 4096
+$(O)/gen/crt/client-ca-untrusted-root.crt: src/conf/client-ca-untrusted-root.conf $(O)/gen/key/client-ca-untrusted-root.key
+	./tool gen-ca $@ $(D) $^
+$(O)/gen/chain/client-ca-untrusted-root.pem: $(O)/gen/crt/client-ca-untrusted-root.crt
+	./tool chain $@ $(D) $^
+CHAINS_PROD += $(O)/gen/chain/client-ca-untrusted-root.pem
+
+$(O)/gen/key/client.key:
+	./tool gen-key $@ $(D) 2048
+$(O)/gen/csr/client.csr: src/conf/client.conf $(O)/gen/key/client.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/client.crt: src/conf/client.conf $(O)/gen/csr/client.csr $(O)/gen/key/client-ca-root.key $(O)/gen/crt/client-ca-root.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+$(O)/gen/crt/client.p12: $(O)/gen/crt/client.crt $(O)/gen/key/client.key
+	./tool gen-pkcs12-p12 $@ $(D) $^
+$(O)/gen/crt/client.pem: $(O)/gen/crt/client.p12
+	./tool pkcs12-convert-p12-pem $@ $(D) $^
+CHAINS_PROD += $(O)/gen/crt/client.pem
+
+################################
+$(O)/gen/key/ca-untrusted-root.key:
+	./tool gen-key $@ $(D) 4096
+$(O)/gen/crt/ca-untrusted-root.crt: src/conf/ca-untrusted-root.conf $(O)/gen/key/ca-untrusted-root.key
+	./tool gen-ca $@ $(D) $^
+
+################################
+$(O)/gen/key/ca-intermediate.key:
+	./tool gen-key $@ $(D) 4096
+$(O)/gen/csr/ca-intermediate.csr: src/conf/ca-intermediate.conf $(O)/gen/key/ca-intermediate.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/ca-intermediate.crt: src/conf/ca-intermediate.conf $(O)/gen/csr/ca-intermediate.csr $(O)/gen/key/ca-root.key $(O)/gen/crt/ca-root.crt
+	./tool sign $@ $(D) $(SIGN_CA_DEFAULTS) $^
+
+################################
+$(O)/gen/key/ca-sha1-intermediate.key:
+	./tool gen-key $@ $(D) 4096
+$(O)/gen/csr/ca-sha1-intermediate.csr: src/conf/ca-intermediate.conf $(O)/gen/key/ca-sha1-intermediate.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/ca-sha1-intermediate.crt: src/conf/ca-intermediate.conf $(O)/gen/csr/ca-sha1-intermediate.csr $(O)/gen/key/ca-root.key $(O)/gen/crt/ca-root.crt
+	./tool sign $@ $(D) 3650 sha1 req_v3_ca $^
+
+################################
+$(O)/gen/key/leaf-main.key: $(O)/gen/key/leaf-$(MAIN_CERT_TYPE).key
+	cp $< $@
+$(O)/gen/csr/wildcard-main.csr: $(O)/gen/csr/wildcard-$(MAIN_CERT_TYPE).csr
+	cp $< $@
+$(O)/gen/crt/wildcard-main.crt: $(O)/gen/crt/wildcard-$(MAIN_CERT_TYPE).crt
+	cp $< $@
+
+################################
+$(O)/gen/csr/fallback.csr: src/conf/fallback.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/fallback.crt: src/conf/fallback.conf $(O)/gen/csr/fallback.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/fallback.pem
+$(O)/gen/chain/fallback.pem: $(O)/gen/crt/fallback.crt
+	./tool chain $@ $(D) $^
+
+################################
+CHAINS_PROD += $(O)/gen/chain/wildcard-incomplete-chain.pem
+$(O)/gen/chain/wildcard-incomplete-chain.pem: $(O)/gen/crt/wildcard-main.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-sha1-2016.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	# TODO: date calculations
+	./tool sign $@ $(D) 10 sha1 req_v3_usr $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-sha1-2016.pem
+$(O)/gen/chain/wildcard-sha1-2016.pem: $(O)/gen/crt/wildcard-sha1-2016.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-sha1-2017.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	# TODO: date calculations
+	./tool sign $@ $(D) 200 sha1 req_v3_usr $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-sha1-2017.pem
+$(O)/gen/chain/wildcard-sha1-2017.pem: $(O)/gen/crt/wildcard-sha1-2017.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-sha1-intermediate.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-sha1-intermediate.key $(O)/gen/crt/ca-sha1-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-sha1-intermediate.pem
+$(O)/gen/chain/wildcard-sha1-intermediate.pem: $(O)/gen/crt/wildcard-sha1-intermediate.crt $(O)/gen/crt/ca-sha1-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-md5.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(DAYS_DEFAULT) md5 req_v3_usr $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-md5.pem
+$(O)/gen/chain/wildcard-md5.pem: $(O)/gen/crt/wildcard-md5.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-sha384.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(DAYS_DEFAULT) sha384 req_v3_usr $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-sha384.pem
+$(O)/gen/chain/wildcard-sha384.pem: $(O)/gen/crt/wildcard-sha384.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-sha512.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(DAYS_DEFAULT) sha512 req_v3_usr $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-sha512.pem
+$(O)/gen/chain/wildcard-sha512.pem: $(O)/gen/crt/wildcard-sha512.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-expired.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	# Too lazy to setup the loathsome mess that is openssl ca when I could just wait a day
+	./tool sign $@ $(D) 1 sha256 req_v3_usr $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-expired.pem
+$(O)/gen/chain/wildcard-expired.pem: $(O)/gen/crt/wildcard-expired.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-untrusted-root.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-untrusted-root.key $(O)/gen/crt/ca-untrusted-root.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-untrusted-root.pem
+$(O)/gen/chain/wildcard-untrusted-root.pem: $(O)/gen/crt/wildcard-untrusted-root.crt $(O)/gen/crt/ca-untrusted-root.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-self-signed.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/leaf-main.key
+	./tool self-sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-self-signed.pem
+$(O)/gen/chain/wildcard-self-signed.pem: $(O)/gen/crt/wildcard-self-signed.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-rsa512.key:
+	./tool gen-key $@ $(D) 512
+$(O)/gen/csr/wildcard-rsa512.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-rsa512.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-rsa512.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-rsa512.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_LOCAL_ONLY += $(O)/gen/chain/wildcard-rsa512.pem
+$(O)/gen/chain/wildcard-rsa512.pem: $(O)/gen/crt/wildcard-rsa512.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-rsa1024.key:
+	./tool gen-key $@ $(D) 1024
+$(O)/gen/csr/wildcard-rsa1024.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-rsa1024.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-rsa1024.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-rsa1024.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_LOCAL_ONLY += $(O)/gen/chain/wildcard-rsa1024.pem
+$(O)/gen/chain/wildcard-rsa1024.pem: $(O)/gen/crt/wildcard-rsa1024.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-rsa2048.key:
+	./tool gen-key $@ $(D) 2048
+$(O)/gen/csr/wildcard-rsa2048.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-rsa2048.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-rsa2048.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-rsa2048.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-rsa2048.pem
+$(O)/gen/chain/wildcard-rsa2048.pem: $(O)/gen/crt/wildcard-rsa2048.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-rsa3072.key:
+	./tool gen-key $@ $(D) 3072
+$(O)/gen/csr/wildcard-rsa3072.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-rsa3072.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-rsa3072.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-rsa3072.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_LOCAL_ONLY += $(O)/gen/chain/wildcard-rsa3072.pem
+$(O)/gen/chain/wildcard-rsa3072.pem: $(O)/gen/crt/wildcard-rsa3072.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-rsa8192.key:
+	./tool gen-key $@ $(D) 8192
+$(O)/gen/csr/wildcard-rsa8192.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-rsa8192.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-rsa8192.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-rsa8192.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-rsa8192.pem
+$(O)/gen/chain/wildcard-rsa8192.pem: $(O)/gen/crt/wildcard-rsa8192.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-rsa4096.key:
+	./tool gen-key $@ $(D) 4096
+$(O)/gen/csr/wildcard-rsa4096.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-rsa4096.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-rsa4096.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-rsa4096.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-rsa4096.pem
+$(O)/gen/chain/wildcard-rsa4096.pem: $(O)/gen/crt/wildcard-rsa4096.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-ecc256.key:
+	./tool gen-ecckey $@ $(D) prime256v1
+$(O)/gen/csr/wildcard-ecc256.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-ecc256.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-ecc256.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-ecc256.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-ecc256.pem
+$(O)/gen/chain/wildcard-ecc256.pem: $(O)/gen/crt/wildcard-ecc256.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-ecc384.key:
+	./tool gen-ecckey $@ $(D) secp384r1
+$(O)/gen/csr/wildcard-ecc384.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-ecc384.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-ecc384.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-ecc384.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-ecc384.pem
+$(O)/gen/chain/wildcard-ecc384.pem: $(O)/gen/crt/wildcard-ecc384.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-no-common-name.csr: src/conf/subdomain-no-common-name.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-no-common-name.crt: src/conf/subdomain-no-common-name.conf $(O)/gen/csr/subdomain-no-common-name.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-no-common-name.pem
+$(O)/gen/chain/subdomain-no-common-name.pem: $(O)/gen/crt/subdomain-no-common-name.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-no-san.csr: src/conf/subdomain-no-san.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-no-san.crt: src/conf/subdomain-no-san.conf $(O)/gen/csr/subdomain-no-san.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_LOCAL_ONLY += $(O)/gen/chain/subdomain-no-san.pem
+$(O)/gen/chain/subdomain-no-san.pem: $(O)/gen/crt/subdomain-no-san.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-no-subject.csr: src/conf/subdomain-no-subject.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr-no-subject $@ $(D) $^
+$(O)/gen/crt/subdomain-no-subject.crt: src/conf/subdomain-no-subject.conf $(O)/gen/csr/subdomain-no-subject.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-no-subject.pem
+$(O)/gen/chain/subdomain-no-subject.pem: $(O)/gen/crt/subdomain-no-subject.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-1000-sans.csr: src/conf/subdomain-1000-sans.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-1000-sans.crt: src/conf/subdomain-1000-sans.conf $(O)/gen/csr/subdomain-1000-sans.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-1000-sans.pem
+$(O)/gen/chain/subdomain-1000-sans.pem: $(O)/gen/crt/subdomain-1000-sans.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-10000-sans.csr: src/conf/subdomain-10000-sans.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-10000-sans.crt: src/conf/subdomain-10000-sans.conf $(O)/gen/csr/subdomain-10000-sans.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-10000-sans.pem
+$(O)/gen/chain/subdomain-10000-sans.pem: $(O)/gen/crt/subdomain-10000-sans.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-xn--n1aae7f7o.csr: src/conf/subdomain-xn--n1aae7f7o.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-xn--n1aae7f7o.crt: src/conf/subdomain-xn--n1aae7f7o.conf $(O)/gen/csr/subdomain-xn--n1aae7f7o.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-xn--n1aae7f7o.pem
+$(O)/gen/chain/subdomain-xn--n1aae7f7o.pem: $(O)/gen/crt/subdomain-xn--n1aae7f7o.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-extended-validation.csr: src/conf/subdomain-extended-validation.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-extended-validation.crt: src/conf/subdomain-extended-validation.conf $(O)/gen/csr/subdomain-extended-validation.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-extended-validation.pem
+$(O)/gen/chain/subdomain-extended-validation.pem: $(O)/gen/crt/subdomain-extended-validation.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+# Note: this is just a regular cert in `test`.
+# Getting a real-world cert without SCTs may be extra work in the future.
+$(O)/gen/csr/subdomain-preloaded-expect-ct.csr: src/conf/subdomain-preloaded-expect-ct.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-preloaded-expect-ct.crt: src/conf/subdomain-preloaded-expect-ct.conf $(O)/gen/csr/subdomain-preloaded-expect-ct.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-preloaded-expect-ct.pem
+$(O)/gen/chain/subdomain-preloaded-expect-ct.pem: $(O)/gen/crt/subdomain-preloaded-expect-ct.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+# Note: this is just a regular cert in `test`
+$(O)/gen/csr/subdomain-invalid-expected-sct.csr: src/conf/subdomain-invalid-expected-sct.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-invalid-expected-sct.crt: src/conf/subdomain-invalid-expected-sct.conf $(O)/gen/csr/subdomain-invalid-expected-sct.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-invalid-expected-sct.pem
+$(O)/gen/chain/subdomain-invalid-expected-sct.pem: $(O)/gen/crt/subdomain-invalid-expected-sct.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+# Note: this is just a regular cert in `test`
+$(O)/gen/csr/subdomain-no-sct.csr: src/conf/subdomain-no-sct.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-no-sct.crt: src/conf/subdomain-no-sct.conf $(O)/gen/csr/subdomain-no-sct.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-no-sct.pem
+$(O)/gen/chain/subdomain-no-sct.pem: $(O)/gen/crt/subdomain-no-sct.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-superfish.csr: src/conf/subdomain-superfish.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-superfish.crt: src/conf/subdomain-superfish.conf $(O)/gen/csr/subdomain-superfish.csr src/key/ca-superfish.key src/crt/ca-superfish.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-superfish.pem
+$(O)/gen/chain/subdomain-superfish.pem: $(O)/gen/crt/subdomain-superfish.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-mitm-software.csr: src/conf/subdomain-mitm-software.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-mitm-software.crt: src/conf/subdomain-mitm-software.conf $(O)/gen/csr/subdomain-mitm-software.csr src/key/ca-mitm-software.key src/crt/ca-mitm-software.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-mitm-software.pem
+$(O)/gen/chain/subdomain-mitm-software.pem: $(O)/gen/crt/subdomain-mitm-software.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-edellroot.csr: src/conf/subdomain-edellroot.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-edellroot.crt: src/conf/subdomain-edellroot.conf $(O)/gen/csr/subdomain-edellroot.csr src/key/ca-edellroot.key src/crt/ca-edellroot.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-edellroot.pem
+$(O)/gen/chain/subdomain-edellroot.pem: $(O)/gen/crt/subdomain-edellroot.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-dsdtestprovider.csr: src/conf/subdomain-dsdtestprovider.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-dsdtestprovider.crt: src/conf/subdomain-dsdtestprovider.conf $(O)/gen/csr/subdomain-dsdtestprovider.csr src/key/ca-dsdtestprovider.key src/crt/ca-dsdtestprovider.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-dsdtestprovider.pem
+$(O)/gen/chain/subdomain-dsdtestprovider.pem: $(O)/gen/crt/subdomain-dsdtestprovider.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-preact-cli.csr: src/conf/subdomain-preact-cli.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-preact-cli.crt: src/conf/subdomain-preact-cli.conf $(O)/gen/csr/subdomain-preact-cli.csr src/key/ca-preact-cli.key src/crt/ca-preact-cli.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-preact-cli.pem
+$(O)/gen/chain/subdomain-preact-cli.pem: $(O)/gen/crt/subdomain-preact-cli.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-webpack-dev-server.csr: src/conf/subdomain-webpack-dev-server.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-webpack-dev-server.crt: src/conf/subdomain-webpack-dev-server.conf $(O)/gen/csr/subdomain-webpack-dev-server.csr src/key/ca-webpack-dev-server.key src/crt/ca-webpack-dev-server.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-webpack-dev-server.pem
+$(O)/gen/chain/subdomain-webpack-dev-server.pem: $(O)/gen/crt/subdomain-webpack-dev-server.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-revoked.key:
+	./tool gen-key $@ $(D) 2048
+
+################################
+$(O)/gen/csr/subdomain-revoked.csr: src/conf/subdomain-revoked.conf $(O)/gen/key/leaf-revoked.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-revoked.crt: src/conf/subdomain-revoked.conf $(O)/gen/csr/subdomain-revoked.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-revoked.pem
+$(O)/gen/chain/subdomain-revoked.pem: $(O)/gen/crt/subdomain-revoked.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+
+################################
+$(O)/gen/key/leaf-captive-portal.key:
+	./tool gen-key $@ $(D) 2048
+
+################################
+$(O)/gen/csr/subdomain-captive-portal.csr: src/conf/subdomain-captive-portal.conf $(O)/gen/key/leaf-captive-portal.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-captive-portal.crt: src/conf/subdomain-captive-portal.conf $(O)/gen/csr/subdomain-captive-portal.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-captive-portal.pem
+$(O)/gen/chain/subdomain-captive-portal.pem: $(O)/gen/crt/subdomain-captive-portal.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+
+################################
+$(O)/gen/dhparam/dh480.pem:
+	./tool dhparam $@ $(D) 480
+$(O)/gen/dhparam/dh512.pem:
+	./tool dhparam $@ $(D) 512
+$(O)/gen/dhparam/dh1024.pem:
+	./tool dhparam $@ $(D) 1024
+$(O)/gen/dhparam/dh2048.pem:
+	./tool dhparam $@ $(D) 2048
+$(O)/gen/dhparam/dh-composite.pem: src/dhparam/dh-composite.pem
+	cp $^ $@
+$(O)/gen/dhparam/dh-small-subgroup.pem: src/dhparam/dh-small-subgroup.pem
+	cp $^ $@
+
+################################
+.PHONY: chains-prod
+chains-prod: $(CHAINS_PROD)
+
+.PHONY: chains-local
+chains-local: chains-prod $(CHAINS_LOCAL_ONLY)
+
+.PHONY: dhparams
+dhparams: $(O)/gen/dhparam/dh480.pem $(O)/gen/dhparam/dh512.pem $(O)/gen/dhparam/dh1024.pem $(O)/gen/dhparam/dh2048.pem $(O)/gen/dhparam/dh-composite.pem $(O)/gen/dhparam/dh-small-subgroup.pem
--- a/badssl.com/certs/sets/prod/pregen/chain/backup/wildcard-sha256-rsa2048-embeded-sct.crt
+++ b/badssl.com/certs/sets/prod/pregen/chain/backup/wildcard-sha256-rsa2048-embeded-sct.crt
@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/fallback.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/fallback.pem
@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/old/subdomain-sha384.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/old/subdomain-sha384.pem
@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/old/subdomain-sha512.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/old/subdomain-sha512.pem
@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/old/wildcard-incomplete-chain.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/old/wildcard-incomplete-chain.pem
@@ -0,0 +1,31 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/old/wildcard-main-old.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/old/wildcard-main-old.pem
@@ -0,0 +1,98 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIGCDCCA/CgAwIBAgIQKy5u6tl1NmwUim7bo3yMBzANBgkqhkiG9w0BAQwFADCB
+hTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
+A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNV
+BAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMjEy
+MDAwMDAwWhcNMjkwMjExMjM1OTU5WjCBkDELMAkGA1UEBhMCR0IxGzAZBgNVBAgT
+EkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR
+Q09NT0RPIENBIExpbWl0ZWQxNjA0BgNVBAMTLUNPTU9ETyBSU0EgRG9tYWluIFZh
+bGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+ADCCAQoCggEBAI7CAhnhoFmk6zg1jSz9AdDTScBkxwtiBUUWOqigwAwCfx3M28Sh
+bXcDow+G+eMGnD4LgYqbSRutA776S9uMIO3Vzl5ljj4Nr0zCsLdFXlIvNN5IJGS0
+Qa4Al/e+Z96e0HqnU4A7fK31llVvl0cKfIWLIpeNs4TgllfQcBhglo/uLQeTnaG6
+ytHNe+nEKpooIZFNb5JPJaXyejXdJtxGpdCsWTWM/06RQ1A/WZMebFEh7lgUq/51
+UHg+TLAchhP6a5i84DuUHoVS3AOTJBhuyydRReZw3iVDpA3hSqXttn7IzW3uLh0n
+c13cRTCAquOyQQuvvUSH2rnlG51/ruWFgqUCAwEAAaOCAWUwggFhMB8GA1UdIwQY
+MBaAFLuvfgI9+qbxPISOre44mOzZMjLUMB0GA1UdDgQWBBSQr2o6lFoL2JDqElZz
+30O0Oija5zAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNV
+HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwGwYDVR0gBBQwEjAGBgRVHSAAMAgG
+BmeBDAECATBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vY3JsLmNvbW9kb2NhLmNv
+bS9DT01PRE9SU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDBxBggrBgEFBQcB
+AQRlMGMwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9E
+T1JTQUFkZFRydXN0Q0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21v
+ZG9jYS5jb20wDQYJKoZIhvcNAQEMBQADggIBAE4rdk+SHGI2ibp3wScF9BzWRJ2p
+mj6q1WZmAT7qSeaiNbz69t2Vjpk1mA42GHWx3d1Qcnyu3HeIzg/3kCDKo2cuH1Z/
+e+FE6kKVxF0NAVBGFfKBiVlsit2M8RKhjTpCipj4SzR7JzsItG8kO3KdY3RYPBps
+P0/HEZrIqPW1N+8QRcZs2eBelSaz662jue5/DJpmNXMyYE7l3YphLG5SEXdoltMY
+dVEVABt0iN3hxzgEQyjpFv3ZBdRdRydg1vs4O2xyopT4Qhrf7W8GjEXCBgCq5Ojc
+2bXhc3js9iPc0d1sjhqPpepUfJa3w/5Vjo1JXvxku88+vZbrac2/4EjxYoIQ5QxG
+V/Iz2tDIY+3GH5QFlkoakdH368+PUq4NCNk+qKBR6cGHdNXJ93SrLlP7u3r7l+L4
+HyaPs9Kg4DdbKDsx5Q5XLVq4rXmsXiBmGqW5prU5wfWYQ//u+aen/e7KJD2AFsQX
+j4rBYKEMrltDR5FL1ZoXX/nUh8HCjLfn4g8wGTeGrODcQgPmlKidrv0PJFGUzpII
+0fxQ8ANAe4hZ7Q7drNJ3gjTcBpUC2JD5Leo31Rpg0Gcg19hCC0Wvgmje3WYkN5Ap
+lBlGGSW4gNfL1IYoakRwJiNiqZ+Gb7+6kHDSVneFeO/qJakXzlByjAA6quPbYzSf
+AZxAeKCINT+b72x
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/subdomain-1000-sans.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/subdomain-1000-sans.pem
@@ -0,0 +1,625 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/subdomain-10000-sans.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/subdomain-10000-sans.pem
--- a/badssl.com/certs/sets/prod/pregen/chain/subdomain-captive-portal.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/subdomain-captive-portal.pem
@@ -0,0 +1,68 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
+MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
+QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
+MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
+U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
+ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
+nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
+KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
+/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
+kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
+/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
+AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
+aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
+Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
+oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
+QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
+d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
+xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
+CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
+5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
+8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
+2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
+c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
+j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/subdomain-dsdtestprovider.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/subdomain-dsdtestprovider.pem
@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE-----
+MIIEdTCCAl2gAwIBAgIJANbyMsdDstESMA0GCSqGSIb3DQEBCwUAME4xGDAWBgNV
+BAsTD0RTRFRlc3RQcm92aWRlcjEYMBYGA1UEChMPRFNEVGVzdFByb3ZpZGVyMRgw
+FgYDVQQDEw9EU0RUZXN0UHJvdmlkZXIwHhcNMTgwNTE2MTcxNTIzWhcNMjAwNTE1
+MTcxNTIzWjBwMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQG
+A1UEBwwNU2FuIEZyYW5jaXNjbzEPMA0GA1UECgwGQmFkU1NMMSMwIQYDVQQDDBpk
+c2R0ZXN0cHJvdmlkZXIuYmFkc3NsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+ADCCAQoCggEBAMIE7PiM7gTCs9hQ1XBYzJMY61yoaEmwIrX5lZ6xKyx2PmzAS2BM
+TOqytMAPgLaw+XLJhgL5XEFdEyt/ccRLvOmULlA3pmccYYz2QULFRtMWhyefdOsK
+nRFSJiFzbIRMeVXk0WvoBj1IFVKtsyjbqv9u/2CVSndrOfEk0TG23U3AxPxTuW1C
+rbV8/q71FdIzSOciccfCFHpsKOo3St/qbLVytH5aohbcabFXRNsKEqveww9HdFxB
+IuGa+RuT5q0iBikusbpJHAwnnqP7i/dAcgCskgjZjFeEU4EFy+b+a1SYQCeFxxC7
+c3DvaRhBB0VVfPlkPz0sw6l865MaTIbRyoUCAwEAAaM0MDIwCQYDVR0TBAIwADAl
+BgNVHREEHjAcghpkc2R0ZXN0cHJvdmlkZXIuYmFkc3NsLmNvbTANBgkqhkiG9w0B
+AQsFAAOCAgEAfNfnT/CA6YUYU9Z1y14O+qbDwMvo2//70i8OvT+xit4ymv6iSnEx
+m8J01YsYI/sS4Jvw8dlRtKr1l0h73jiF3cDGpVP38WEdX3kqM0+iCk4kpqkqJgqg
+Glwvgx62Z3drXJnlSzr5wAbfzPgqV4g72cJVvD5ksvw1wq5mMc+ESg9m1sBXx5aY
+DxgV9+AIetX38k+rMKDHtFQai2BtGgifzowY9F8sM2Z8DaBAaTU0yjPwSZ4ujUYQ
+ahzB9E1k6n1JKeKkXCAzb9Q/96APeNVDcmzoOoADLHVz4PAFXEPuuf0E2yx+uC4f
+/IUGQ1orb1IP5sPLGy/y7VqzSiTe5R8oU8d20yszVk98HLwO+++nAXmAXs9RQner
+3lWBQlGTKwcg3tuQICVPJZMV+9CCYyXLhXOzTHaAG7exxWtnL0E1SHY36Qq3f6jb
+r0luAyTvwFYfWEivzXkzSi/r2fRQwUr3ydrJvXZ5sE7Gzx62oBGENiPjDXlDxCIC
+m/+nX/1uaBn1Z09V6tyire34FUS4yqLYx59VWODcFp55DzML8AJRylTSPWb5aVi0
+vVnuHb5UoRfL2JOaPPTUEINz5C9szD64AOBjN1fXkq3ZFAvbK6MVrrunOGEmiV8N
+IRwKmUHTa2wHbP6eyMblyaQdMCVwJE+0LFKlgR9fEe9lSMw5axceZ/4=
+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/subdomain-edellroot.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/subdomain-edellroot.pem
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/subdomain-extended-validation.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/subdomain-extended-validation.pem
@@ -0,0 +1,70 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/subdomain-invalid-expected-sct.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/subdomain-invalid-expected-sct.pem
@@ -0,0 +1,52 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIETTCCAzWgAwIBAgIDAjpxMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQK
+Ew1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMTMxMjExMjM0
+NTUxWhcNMjIwNTIwMjM0NTUxWjBCMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5j
+LjEbMBkGA1UEAxMSUmFwaWRTU0wgU0hBMjU2IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
+CgKCAQEAu1jBEgEul9h9GKrIwuWF4hdsYC7JjTEFORoGmFbdVNcRjFlbPbFUrkshhTIWX1SG5tmx
+2GCJa1i+ctqgAEJ2sSdZTM3jutRc2aZ/uyt11UZEvexAXFm33Vmf8Wr3BvzWLxmKlRK6msrVMNI4
+/Bk7WxU7NtBDTdFlodSLwWBBs9ZwF8w5wJwMoD23ESJOztmpetIqYpygC04q18NhWoXdXBC5VD0t
+A/hJ8LySt7ecMcfpuKqCCwW5Mc0IW7siC/acjopVHHZDdvDibvDfqCl158ikh4tq8bsIyTYYZe5Q
+Q7hdctUoOeFTPiUs2itP3YqeUFDgb5rE1RkmiQF1cwmbOwIDAQABo4IBSjCCAUYwHwYDVR0jBBgw
+FoAUwHqYaI2J+6sFZAwRfap9ZbjKzE4wHQYDVR0OBBYEFJfCJ1CewsnsDIgyyHyt4qYBT9pvMBIG
+A1UdEwEB/wQIMAYBAf8CAQAwDgYDVR0PAQH/BAQDAgEGMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6
+Ly9nMS5zeW1jYi5jb20vY3Jscy9ndGdsb2JhbC5jcmwwLwYIKwYBBQUHAQEEIzAhMB8GCCsGAQUF
+BzABhhNodHRwOi8vZzIuc3ltY2IuY29tMEwGA1UdIARFMEMwQQYKYIZIAYb4RQEHNjAzMDEGCCsG
+AQUFBwIBFiVodHRwOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzMCkGA1UdEQQiMCCk
+HjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTU2OTANBgkqhkiG9w0BAQsFAAOCAQEANevhiyBW
+lLp6vXmp9uP+bji0MsGj21hWID59xzqxZ2nVeRQb9vrsYPJ5zQoMYIp0TKOTKqDwUX/N6fmS/Zar
+RfViPT9gRlATPSATGC6URq7VIf5Dockj/lPEvxrYrDrK3maXI67T30pNcx9vMaJRBBZqAOv5jUOB
+8FChH6bKOvMoPF9RrNcKRXdLDlJiG9g4UaCSLT+Qbsh+QJ8gRhVd4FB84XavXu0R0y8TubglpK9Y
+Ca81tGJUheNI3rzSkHp6pIQNo0LyUcDUrVNlXWz4Px8G8k/Ll6BKWcZ40egDuYVtLLrhX7atKz4l
+ecWLVtXjCYDqwSfC2Q7sRwrp0Mr82A==
+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/subdomain-no-common-name.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/subdomain-no-common-name.pem
@@ -0,0 +1,100 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIGDjCCA/agAwIBAgIQNoJef7WkgZN+9tFza7k8pjANBgkqhkiG9w0BAQwFADCB
+hTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
+A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNV
+BAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMjEy
+MDAwMDAwWhcNMjkwMjExMjM1OTU5WjCBljELMAkGA1UEBhMCR0IxGzAZBgNVBAgT
+EkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR
+Q09NT0RPIENBIExpbWl0ZWQxPDA6BgNVBAMTM0NPTU9ETyBSU0EgT3JnYW5pemF0
+aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEB
+BQADggEPADCCAQoCggEBALkU2YXyQURX/zBEHtw8RKMXuG4B+KNfwqkhHc5Z9Ozz
+iKkJMjyxi2OkPic284/5OGYuB5dBj0um3cNfnnM858ogDU98MgXPwS5IZUqF0B9W
+MW2O5cYy1Bu8n32W/JjXT/j0WFb440W+kRiC5Iq+r81SN1GHTx6Xweg6rvn/RuRl
+Pz/DR4MvzLhCXi1+91porl1LwKY1IfWGo8hJi5hjYA3JIUjCkjBlRrKGNQRCJX6t
+p05LEkAAeohoXG+fo6R4ESGuPQsOvkUUI8/rddf2oPG8RWxevKEy7PNYeEIoCzoB
+dvDFoJ7BaXDej0umed/ydrbjDxN8GDuxUWxqIDnOnmkCAwEAAaOCAWUwggFhMB8G
+A1UdIwQYMBaAFLuvfgI9+qbxPISOre44mOzZMjLUMB0GA1UdDgQWBBSa8yvaz61P
+ti+7KkhIKhK3G0LBJDAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIB
+ADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwGwYDVR0gBBQwEjAGBgRV
+HSAAMAgGBmeBDAECAjBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vY3JsLmNvbW9k
+b2NhLmNvbS9DT01PRE9SU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDBxBggr
+BgEFBQcBAQRlMGMwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jcnQuY29tb2RvY2EuY29t
+L0NPTU9ET1JTQUFkZFRydXN0Q0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz
+cC5jb21vZG9jYS5jb20wDQYJKoZIhvcNAQEMBQADggIBAGmKNmiaHjtlC+B8z6ar
+cTuvYaQ/5GQBSRDTHY/i1e1n055bl71CHgf50Ltt9zKVWiIpYvgMnFlWJzagIhIR
+kf0UclZeylKpUg1fMWXZuAnJTsVejJ1SpH7pmue4lP6DYwT+yO4CxIsru3bHUeQ
+1dCTaXaROBU01xjqfrxrWN4qOZADRARKVtho5fV8aX6efVRL0NiGq2dmE1deiSoX
+rS2uvUAOZu2K/1S0wQHLqeBHuhFhj62uI0gqxiV5iRxBBJXAEepXK9a0l/qx6RVi
+7Epxd/3zoZza9msAKcUy5/pO6rMqpxiXHFinQjZf7BTP+HsO993MiBWamlzI8SDH
+0YZyoRebrrr+bKgy0QB2SXP3PyeHPLbJLfqqkJDJCgmfyWkfBxmpv966+AuIgkQW
+EH8HwIAiX3+8MN66zQd5ZFbY//NPnDC7bh5RS+bNvRfExb/IP46xH4pGtwZDb2It
+z1GdRcqK6ROLwMeRvlu2+jdKif7wndoTJiIsBpA+ixOYoBnW3dpKSH89D4mdJHJL
+DntE/9Q2toN2I1iLFGy4XfdhbTl27d0SPWuHiJeRvsBGAh52HN22r1xP9QDWnE2p
+4J6ijvyxFnlcIdNFgZoMOWxtKNcl0rcRkND23m9e9Pqki2Z3ci+bkEAsUhJg+f+1
+cC6JmnkJiYEt7Fx4b4GH8fxV
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIFdDCCBFygAwIBAgIQJ2buVutJ846r13Ci/ITeIjANBgkqhkiG9w0BAQwFADBv
+MQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFk
+ZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBF
+eHRlcm5hbCBDQSBSb290MB4XDTAwMDUzMDEwNDgzOFoXDTIwMDUzMDEwNDgzOFow
+gYUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
+BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMSswKQYD
+VQQDEyJDT01PRE8gUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkq
+hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAkehUktIKVrGsDSTdxc9EZ3SZKzejfSNw
+AHG8U9/E+ioSj0t/EFa9n3Byt2F/yUsPF6c947AEYe7/EZfH9IY+Cvo+XPmT5jR6
+2RRr55yzhaCCenavcZDX7P0N+pxs+t+wgvQUfvm+xKYvT3+Zf7X8Z0NyvQwA1onr
+ayzT7Y+YHBSrfuXjbvzYqOSSJNpDa2K4Vf3qwbxstovzDo2a5JtsaZn4eEgwRdWt
+4Q08RWD8MpZRJ7xnw8outmvqRsfHIKCxH2XeSAi6pE6p8oNGN4Tr6MyBSENnTnIq
+m1y9TBsoilwie7SrmNnu4FGDwwlGTm0+mfqVF9p8M1dBPI1R7Qu2XK8sYxrfV8g/
+vOldxJuvRZnio1oktLqpVj3Pb6r/SVi+8Kj/9Lit6Tf7urj0Czr56ENCHonYhMsT
+8dm74YlguIwoVqwUHZwK53Hrzw7dPamWoUi9PPevtQ0iTMARgexWO/bTouJbt7IE
+IlKVgJNp6I5MZfGRAy1wdALqi2cVKWlSArvX31BqVUa/oKMoYX9w0MOiqiwhqkfO
+KJwGRXa/ghgntNWutMtQ5mv0TIZxMOmm3xaG4Nj/QN370EKIf6MzOi5cHkERgWPO
+GHFrK+ymircxXDpqR+DDeVnWIBqv8mqYqnK8V0rSS527EPywTEHl7R09XiidnMy/
+s1Hap0flhFMCAwEAAaOB9DCB8TAfBgNVHSMEGDAWgBStvZh6NLQm9/rEJlTvA73g
+JMtUGjAdBgNVHQ4EFgQUu69+Aj36pvE8hI6t7jiY7NkyMtQwDgYDVR0PAQH/BAQD
+AgGGMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0gBAowCDAGBgRVHSAAMEQGA1UdHwQ9
+MDswOaA3oDWGM2h0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9BZGRUcnVzdEV4dGVy
+bmFsQ0FSb290LmNybDA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6
+Ly9vY3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggEBAGS/g/FfmoXQ
+zbihKVcN6Fr30ek+8nYEbvFScLsePP9NDXRqzIGCJdPDoCpdTPW6i6FtxFQJdcfj
+Jw5dhHk3QBN39bSsHNA7qxcS1u80GH4r6XnTq1dFDK8o+tDb5VCViLvfhVdpfZLY
+Uspzgb8c8+a4bmYRBbMelC1/kZWSWfFMzqORcUx8Rww7Cxn2obFshj5cqsQugsv5
+B5a6SE2Q8pTIqXOi6wZ7I53eovNNVZ96YUWYGGjHXkBrI/V5eu+MtWuLt29G9Hvx
+PUsE2JOAWVrgQSQdso8VYFhH2+9uRv0V9dlfmrPb2LjkQLPNlzmuhbsdjrzch5vR
+pu/xO28QOG8=
+-----END CERTIFICATE-----
+
--- a/badssl.com/certs/sets/prod/pregen/chain/subdomain-no-sct.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/subdomain-no-sct.pem
@@ -0,0 +1,57 @@
+-----BEGIN CERTIFICATE-----
+MIIFOzCCBCOgAwIBAgIQAoZhndyNvawKHyLjYwxeUTANBgkqhkiG9w0BAQsFADBN
+MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
+aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkxMDA1MDAwMDAwWhcN
+MjExMDEzMTIwMDAwWjBzMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p
+YTEVMBMGA1UEBxMMV2FsbnV0IENyZWVrMRwwGgYDVQQKExNMdWNhcyBHYXJyb24g
+VG9ycmVzMRowGAYDVQQDExFuby1zY3QuYmFkc3NsLmNvbTCCASIwDQYJKoZIhvcN
+AQEBBQADggEPADCCAQoCggEBAMIE7PiM7gTCs9hQ1XBYzJMY61yoaEmwIrX5lZ6x
+Kyx2PmzAS2BMTOqytMAPgLaw+XLJhgL5XEFdEyt/ccRLvOmULlA3pmccYYz2QULF
+RtMWhyefdOsKnRFSJiFzbIRMeVXk0WvoBj1IFVKtsyjbqv9u/2CVSndrOfEk0TG2
+3U3AxPxTuW1CrbV8/q71FdIzSOciccfCFHpsKOo3St/qbLVytH5aohbcabFXRNsK
+Eqveww9HdFxBIuGa+RuT5q0iBikusbpJHAwnnqP7i/dAcgCskgjZjFeEU4EFy+b+
+a1SYQCeFxxC7c3DvaRhBB0VVfPlkPz0sw6l865MaTIbRyoUCAwEAAaOCAe8wggHr
+MB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBSd7sF7
+gQs6R2lxGH0RN5O8pRs/+zAzBgNVHREELDAqghFuby1zY3QuYmFkc3NsLmNvbYIV
+d3d3Lm5vLXNjdC5iYWRzc2wuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
+BggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2Ny
+bDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9j
+cmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJ
+YIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNv
+bS9DUFMwCAYGZ4EMAQIDMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0
+cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0
+cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwG
+A1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBAAAaeeVMydJv9LGUYgcE4zy0
+K8ZJpTAQ4wTK7OyyUnuWY6ohfYLIGHHGq/rntMXRSmm6WyzG3pQjPZtKiSOYyerw
+WLh6GRcEkA9ZIXeG1em2zYQV13ctEIr0ZwD9XmdjpS7TCD2qc9uN++dK0Ri1U4SZ
+CWI2kVrigk8Io5zmAE8bNTmqFR+on34RdXoyRmRdffcPMPvWY3SkMeW2/oXkkpz2
+DJ/LL4G5qc1h2dd0kwSkVic6r4sCk8k7thwrY8XMTo91qCDcmDk03aTnWbVFx5dT
+nZaWmijZyAYIiYQH0yJ0VZY3ts3uj7idOFVzISfWNAsNnK8UqVf8CSYCTO+rB68=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
+MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
+QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
+MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
+U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
+ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
+nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
+KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
+/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
+kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
+/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
+AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
+aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
+Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
+oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
+QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
+d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
+xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
+CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
+5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
+8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
+2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
+c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
+j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/subdomain-no-subject.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/subdomain-no-subject.pem
@@ -0,0 +1,103 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/subdomain-preloaded-expect-ct.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/subdomain-preloaded-expect-ct.pem
@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----
+MIIHGDCCBgCgAwIBAgIQAfICAx39qY79/w9yvlEGDTANBgkqhkiG9w0BAQsFADBN
+MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
+aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTcwMzE4MDAwMDAwWhcN
+MjAwMzI1MTIwMDAwWjBnMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p
+YTEVMBMGA1UEBxMMV2FsbnV0IENyZWVrMRUwEwYDVQQKEwxMdWNhcyBHYXJyb24x
+FTATBgNVBAMMDCouYmFkc3NsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
+AQoCggEBAMIE7PiM7gTCs9hQ1XBYzJMY61yoaEmwIrX5lZ6xKyx2PmzAS2BMTOqy
+tMAPgLaw+XLJhgL5XEFdEyt/ccRLvOmULlA3pmccYYz2QULFRtMWhyefdOsKnRFS
+JiFzbIRMeVXk0WvoBj1IFVKtsyjbqv9u/2CVSndrOfEk0TG23U3AxPxTuW1CrbV8
+/q71FdIzSOciccfCFHpsKOo3St/qbLVytH5aohbcabFXRNsKEqveww9HdFxBIuGa
+RuT5q0iBikusbpJHAwnnqP7i/dAcgCskgjZjFeEU4EFy+b+a1SYQCeFxxC7c3Dv
+aRhBB0VVfPlkPz0sw6l865MaTIbRyoUCAwEAAaOCA9gwggPUMB8GA1UdIwQYMBaA
+FA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBSd7sF7gQs6R2lxGH0RN5O8
+pRs/+zAjBgNVHREEHDAaggwqLmJhZHNzbC5jb22CCmJhZHNzbC5jb20wDgYDVR0P
+AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8E
+ZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc1
+LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1n
+NS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0
+cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgMwfAYIKwYBBQUHAQEE
+cDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYB
+BQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJT
+ZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADCCAfUGCisGAQQB1nkCBAIE
+ggHlBIIB4QHfAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFa
+36pBXQAABAMARzBFAiEAzR4KqC0zoD8FzR8Jk0wH3CMLf/j0s/sMFySg5gsIP3oC
+IHaSYDQXuInRJq1WHUHIwcdt7AscZAFWgEaCzh+8+QvCAHYAVhQGmi/XwuzT9eG9
+RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFa36pCiAAABAMARzBFAiBPti1ehDk+YdyW
+s4qjScmz9kuzTWor6jQYk8/GZDwRHwIhAPvbr23VquHaId4nvBHit7YGdJXpu7En
+UZRQrU1P0lLVAHUA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFa
+36pEWQAABAMARjBEAiBUQkeTNpBWju4/OXnxjOOlowEXos1XsItqfLkajzv6cQIg
+QLzLDhSKvxVRNq/4Z1rfbh8iEYM6Hj52NpO9+L0565oAdgC72d+8H4pxtZOUI5eq
+kntHOFeVCqtS6BqQlmQ2jh7RhQAAAVrfqkIWAAAEAwBHMEUCIHhqWRiCNNf8h3i2
+ADwso5l22FFp8H6jBBp+6B2PaBSUAiEAmk8vYlhgaLLc0Gkc+MkUIZ9sEoLR+tOF
+BLatSTQk1EowDQYJKoZIhvcNAQELBQADggEBAGl6hl3sDaxY762cJc5fxNG9Kc/Q
+Wvf5YzTLNxIuxEfTsj/Zgm+Q2hFl9enYRj4M1Weo/sw/8Jw9DGSuypOiYXCz9Ikx
+0Fc2j/Oq939JU5+ok1AikAeXna4DFTtw8ByIchrU6tbZa/JocSM0WZl7WIrgOtvw
+T+qCyI9JgYCnWRbPRfhZrlKxqQpwoP++aFV0HOBR9nj/Rzisq8ZGn7f6HKVxlqHS
+lBdhbmcHA/nHgbpwU2bmonivndvnpQHI8Fxd4BzbcRYM+ZIkATWA5/aOvH/EEIb6
+kwipaXsqHLfaJq1SY5G097HgWHWCkCUD/pxX6psTTavqftLenSd7piK3+fw=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/subdomain-revoked.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/subdomain-revoked.pem
@@ -0,0 +1,66 @@
+-----BEGIN CERTIFICATE-----
+MIIGvzCCBaegAwIBAgIQA3G1iob2zpw+y3v0L5II/DANBgkqhkiG9w0BAQsFADBN
+MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
+aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkxMDA0MDAwMDAwWhcN
+MjExMDA4MTIwMDAwWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p
+YTEVMBMGA1UEBxMMV2FsbnV0IENyZWVrMRwwGgYDVQQKExNMdWNhcyBHYXJyb24g
+VG9ycmVzMRswGQYDVQQDExJyZXZva2VkLmJhZHNzbC5jb20wggEiMA0GCSqGSIb3
+DQEBAQUAA4IBDwAwggEKAoIBAQC0Ljkn9nZW+vmCL6At8tAyGZlV3IlElvdzI6/3
+pF4+dL9Zec1fC+eP+wMZv4+eY9L/Anx2/hbpAvyGkF+YXNaaui6V6NilxfScnae5
+3rhKcWL9Kih9Aq9G1g0dcWHZTNuXFQA09FOBvI6UOd7YvkJ/JOoCU8ZbgD4RLtLZ
+C20Yhqwh1nfZSKlPo1sd86U2ZNZNH0a38zUQ9XtFOt2kGNu9o07DEJsZhOWWlZtd
+51ZyqyeFaRTc4V42zWnKc8CCB338fo0u+8vJeS6XNkMPFpRFDr3TCWvZ4AP+KgAQ
+m5c48FMRXo165qG+LjKp/2NPoMbqNbhZ5KtDokjAGggRvmzDAgMBAAGjggNyMIID
+bjAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUOE25
+xq19bGjCX3XXG27LpumeOq0wNQYDVR0RBC4wLIIScmV2b2tlZC5iYWRzc2wuY29t
+ghZ3d3cucmV2b2tlZC5iYWRzc2wuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
+FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDov
+L2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6
+Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMw
+NwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0
+LmNvbS9DUFMwCAYGZ4EMAQIDMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYY
+aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2Fj
+ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0
+MAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AKS5CZC0
+GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABbZjwwc8AAAQDAEYwRAIgWPi8
+7t5MzJnvLDJGmCppeQwyHa1VkvAG811Mg19KbcsCIDpbsejn8Feo/pD1g3xUHm9y
+2a5K3ZT2qOI+FfwaNcm7AHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16g
+gw8AAAFtmPDCOgAABAMARzBFAiEAmciNTmK3x9F52b+jyQonojj5PR3UTX7I1EY2
+yrbyDVsCIDhrUCuwgpjKzdEkKXC8pTrPT750awtW28nCTZLaCVb1AHYARJRlLrDu
+zq/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAFtmPDBQQAABAMARzBFAiEAwXnV
+kwbWLzukEmOVbs8IQHiQaERcC3RD7IrKHt4dUvMCIFfUv6IL18E/ROuuFQYDwZrv
+DpbCjJdvFw9Cb++GhzzBMA0GCSqGSIb3DQEBCwUAA4IBAQAXzncD0qMluMFZDLOx
+Pzev4B56a0EW7X5YJnyy32UVms+VAp5TDDN1kAxmphecVWRc5DpEn+acXM3hHzx0
+hBfbYYpAANy96MRgGg3qYIN14OV8QzGIIxCRVDzH3f7kQR1bgZvCQC6fs3JnRJ8l
+OhCFNnktylrwV1p48DxxBULjI1oYtXKikEdxs7ZgulOIoVFCSPtzF+MeSwyqYv8I
+OCMAvbctgnsuo0eekLyVlJOTe7Cw+hjz5nYX5yCc2wFu0vlL0kw8d6DaS1isZBZ5
+p7fCfVZfW4WLJdgxYgATKoTkxVFpcTOr4TodGE3G8fOu6G/BknS9r3g5pLpWaNc6
+NtqK
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/subdomain-superfish.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/subdomain-superfish.pem
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/subdomain-xn--n1aae7f7o.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/subdomain-xn--n1aae7f7o.pem
@@ -0,0 +1,98 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/wildcard-ecc256.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/wildcard-ecc256.pem
@@ -0,0 +1,55 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIDrDCCApSgAwIBAgIQCssoukZe5TkIdnRw883GEjANBgkqhkiG9w0BAQwFADBh
+MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
+QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaMEwxCzAJBgNVBAYTAlVT
+MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJjAkBgNVBAMTHURpZ2lDZXJ0IEVDQyBT
+ZWN1cmUgU2VydmVyIENBMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE4ghC6nfYJN6g
+LGSkE85AnCNyqQIKDjc/ITa4jVMU9tWRlUvzlgKNcR7E2Munn17voOZ/WpIRllNv
+68DLP679Wz9HJOeaBy6Wvqgvu1cYr3GkvXg6HuhbPGtkESvMNCuMo4IBITCCAR0w
+EgYDVR0TAQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEE
+KDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQgYDVR0f
+BDswOTA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xv
+YmFsUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYc
+aHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUo53mH/naOU/A
+buiRy5Wl2jHiCp8wHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJ
+KoZIhvcNAQEMBQADggEBAMeKoENL7HTJxavVHzA1Nm6YVntIrAVjrnuaVyRXzG/6
+3qttnMe2uuzO58pzZNvfBDcKAEmzP58mrZGMIOgfiA4q+2Y3yDDo0sIkp0VILeoB
+UEoxlBPfjV/aKrtJPGHzecicZpIalir0ezZYoyxBEHQa0+1IttK7igZFcTMQMHp6
+mCHdJLnsnLWSB62DxsRq+HfmNb4TDydkskO/g+l3VtsIh5RHFPVfKK+jaEyDj2D3
+loB5hWp2Jp2VDCADjT7ueihlZGak2YPqmXTNbk19HOuNssWvFhtOyPNV6og4ETQd
+Ea8/B6hPatJ0ES8q/HO3X8IVQwVs1n3aAr0im0/T+Xc=
+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/wildcard-ecc384.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/wildcard-ecc384.pem
@@ -0,0 +1,55 @@
+-----BEGIN CERTIFICATE-----
+MIIFxzCCBU6gAwIBAgIQAyDb/32ip7dsd6kd77p6BjAKBggqhkjOPQQDAjBMMQsw
+CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSYwJAYDVQQDEx1EaWdp
+Q2VydCBFQ0MgU2VjdXJlIFNlcnZlciBDQTAeFw0xNzAxMjgwMDAwMDBaFw0yMDAy
+MDUxMjAwMDBaMGcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRUw
+EwYDVQQHEwxXYWxudXQgQ3JlZWsxFTATBgNVBAoTDEx1Y2FzIEdhcnJvbjEVMBMG
+A1UEAwwMKi5iYWRzc2wuY29tMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEDTq2msv0
+/DsznAimvoQN7QYATWBbSXGGR101fL2shhuKd1oFDskye/CVgajIuku+a3Wbulev
+IAjhaByEv/OPtEZGE2sFOzSZbDvKNqnRYv9D7rdmIQ3ZlHUUAzN+OGxOo4ID2DCC
+A9QwHwYDVR0jBBgwFoAUo53mH/naOU/AbuiRy5Wl2jHiCp8wHQYDVR0OBBYEFOID
+xNJN05VhCLGuRg6aLxLZAjnZMCMGA1UdEQQcMBqCDCouYmFkc3NsLmNvbYIKYmFk
+c3NsLmNvbTAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
+AQUFBwMCMGkGA1UdHwRiMGAwLqAsoCqGKGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv
+bS9zc2NhLWVjYy1nMS5jcmwwLqAsoCqGKGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv
+bS9zc2NhLWVjYy1nMS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggr
+BgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgMw
+ewYIKwYBBQUHAQEEbzBtMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy
+dC5jb20wRQYIKwYBBQUHMAKGOWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9E
+aWdpQ2VydEVDQ1NlY3VyZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIB+AYK
+KwYBBAHWeQIEAgSCAegEggHkAeIAdQCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jj
+d80OyA3cEAAAAVnjCWz1AAAEAwBGMEQCIBYnZdgIfiMYDiYDC5TZxOyWY2anYEht
+5jgUHilW5CcNAiBgeLI/QX5ghCtteJEpp+T3Up7IfSNNHEut+mV0Ut8vyQB3AFYU
+Bpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABWeMJbjkAAAQDAEgwRgIh
+AMxl+iWTJyzZlXU++rytD8zsI/QIuNIr7lhxNtPerBlOAiEAwE84bmzq5L29B/bo
+6qS+7fUl+3GIj3ZSdc9P3lXBexcAdwDuS723dc5guuFCaR+r4Z5mow9+X7By2IMA
+xHuJeqj9ywAAAVnjCW/uAAAEAwBIMEYCIQDIqno2Nz0OQdZatlvHYqzLkXnzYmHj
+hlxEBueXJPVAuAIhAMJU1NGCvhomzCjJCQLXU/P9PEXo1ra48eyPnVkogvbHAHcA
+u9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFZ4wltsAAABAMASDBG
+AiEA/OUWweMvXVEN1SVQyoeMo91rkjWCeqc48Y2Itp/LYrgCIQDCgbiaqm9mj0bK
+K6E+nNi570E1wyMxAEle/zetMiPROzAKBggqhkjOPQQDAgNnADBkAjBWM08mp6f+
+t8Eos3t36czN4ldWstrfYe22nUOAL/S+UG8OVOMznnzc+w5FjmdJi7ACMCzwNWf3
+8wYwCt8zQJVaTryFJqvIS9IKsjNK5icwiY3Id+opVrp5mCrQj0kmV3ViMQ==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/wildcard-expired.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/wildcard-expired.pem
@@ -0,0 +1,98 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/wildcard-incomplete-chain.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/wildcard-incomplete-chain.pem
@@ -0,0 +1,40 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/wildcard-preloaded-expect-ct.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/wildcard-preloaded-expect-ct.pem
@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
+MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
+QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
+MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
+U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
+ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
+nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
+KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
+/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
+kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
+/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
+AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
+aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
+Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
+oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
+QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
+d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
+xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
+CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
+5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
+8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
+2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
+c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
+j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/wildcard-rsa2048.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/wildcard-rsa2048.pem
@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/wildcard-rsa4096.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/wildcard-rsa4096.pem
@@ -0,0 +1,70 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/wildcard-rsa8192.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/wildcard-rsa8192.pem
@@ -0,0 +1,83 @@
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/wildcard-self-signed.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/wildcard-self-signed.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/wildcard-sha1-2016.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/wildcard-sha1-2016.pem
@@ -0,0 +1,58 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/wildcard-sha1-2017.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/wildcard-sha1-2017.pem
@@ -0,0 +1,56 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/wildcard-sha1-intermediate.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/wildcard-sha1-intermediate.pem
@@ -0,0 +1,58 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/wildcard-sha384.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/wildcard-sha384.pem
@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/chain/wildcard-sha512.pem
+++ b/badssl.com/certs/sets/prod/pregen/chain/wildcard-sha512.pem
@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/sets/prod/pregen/dhparam/dh16384.pem
+++ b/badssl.com/certs/sets/prod/pregen/dhparam/dh16384.pem
@@ -0,0 +1,45 @@
+-----BEGIN DH PARAMETERS-----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+-----END DH PARAMETERS-----
--- a/badssl.com/certs/sets/prod/pregen/dhparam/dh2048.pem
+++ b/badssl.com/certs/sets/prod/pregen/dhparam/dh2048.pem
@@ -0,0 +1,8 @@
+-----BEGIN DH PARAMETERS-----
+MIIBCAKCAQEAueXoMKt5EQxJ/5GfvyMB0HJdemRV7dSCzKy1qgZE6GTrxc46aJhg
+7ZUDu5p3iYd+Po4W15oHR1zNhXX3WeiFcKXn9fGuDRgaPI3zqFaV8JT3xiF8dW5T
+JuucNaYsk7lOhXl4HS+pfmKiDr7PljAcq2Hg+lByUO/MYTX3jruxlhePjU+bmNAD
+y+N0Rumx1aGOU7Jny45nvCVgdFG3UqOD6iHxL7manSi+6TqKmv0Jp0TqJqXEvB5o
+r4PdaSCTdN7gKKGwNzG4PYrkPAS+0TWMyO9FwV9hi6o3DajIK5jprtgxOpJXBszs
+UH4J9uV5WakHuzHzp8nUTIiL+FDW5b7hYwIBAg==
+-----END DH PARAMETERS-----
--- a/badssl.com/certs/sets/prod/pregen/dhparam/dh32768.pem
+++ b/badssl.com/certs/sets/prod/pregen/dhparam/dh32768.pem
@@ -0,0 +1,88 @@
+-----BEGIN DH PARAMETERS-----
+MIIQCAKCEAEA4SatKvedpUd10zrv5zkgIze+n6nU2N/vRPfibvvI08nEWz5bU49n
+pM2OJ4fLoHn9u2AYAOllhd8/j9p8OFTs8RWsAUgeHfkPfG+U8hcK9cDjV6Vvf6Xm
+ciYbXprpbdF6IcHV0GdW7yt1MYI85CeUyjZTaaR4+cDqFsLdUyzHdQUl5vY8Yh4c
+3KZ6r7X20cLWUnA5ckSwsNrJvkkk7v+5noeavVUNmeZ5D3rzFcwHYU2LQ+Hx90fg
+Qu82Juv5BmRAOOpRHSf2yX8PKFmZmHiIeWFzcCsz8h+kXe2yDg5w3tC/MTdZxld6
+xE7zAw0FnN1A50eJs0NkMq0T9hbGyNZFFl7Te4qXFESqTg4NTMtrBNmT3GNuPSql
+rbhUFGAyyZPlxnejWp7IFtj7XwxQJxM0iAn0lI8yxuxdDpgvREolfqWZuPEOdkpr
+mjUzrnRE8WnfXCss8AgkFbi0tb95BSPmeIvoo0l3Or2itooNr2xKPPWnQibvg9UX
+yl6wenLV+QRB1htx+KTZEsGoDSwoCbcasA5ZitIfpNAsIeO4om0OmbngTjmVcQgJ
+X7QAJbWemirmlrZVl7+uqjwBGUuEZU1pG145tIlQ2mEDI3HlfrWLuwI+2FouIA27
+ywML9fgNVbpX4J5lIcO47utIePFgwSpjsUCZFnwXQggelr0OPdLXnbTsOVDaHAHj
+/wzFaUygcw0VZ6KZz2thr10BiQ+xBNYJpUxVMwAWQzrLyxoJuI+5t8/1nf8jyrej
+hBhbr+UH9IJk0fUIX2w2tFznwEaWT1n4Wrzl552BFMXjxU9liqCxG0TfyNFKFcK2
+cv75PUbArKqsN6whQnoQvN8tDkPNFSUP23D8EFhbvtV5Savy3BObTBQ0plW0Up7T
+n/4E+K+JQ1dXemNxuZcj8vD59f+QFA+pBzne7ZokUja1SByy0ijcBa/Q1FPOguxZ
+xD7d/z2fy3SOnN8W80I6y2a9lyif3J7Fs4wGntVg9u5KJ14rimf4eOdfdOdT8aB8
+lEpR/4IBtA3q9H8XhYijfg8xR5l2YYTQCAK6AQeo8evQLmJBhTzzancn0hq6wZyn
+WHF01XkZ7mRvJ2BxHoIxHECzQXB2YL5iJSF9NmOF/wZmmRKhKistmNH599PODAEZ
+fKczW74kGbf0O62FEYRv/vnayS1AtKQLQG3FFCpLWyJHlz9n7+Murtbl0L13r5/E
+bfV7+P7fIk52vsr7YW9tRECdVCW3iCzPrmptoDOxZTIhVZSWFpqbTl+G3p8PcvHy
+VgJoKbnV3CTAL3N8yHNcpDm/37skXhrn2tmo1EnZr+/lr+mvP4RldlE7kk50wdBE
+w1IkOMKVJfuFGesjXtiLq4lQ7HiDS40gHzlBdIYS7hyzBa+D8n1xB1IOT1W6jRNX
+SsBY5DhISQqs5EqoisrW3GlGh9HldhPQ4bo6JY5zSAW6bJivhgwY3lvWEi1TS82z
+3Dd6G2QS4mtrniWkLosWKpvCzyxcSPztA9h9c/5fKojHO4ro17mwL2cuPy245qQK
+iWciHYmpoobMMGzkkMaB690FFgidNHT6hc4Sre+b4CxF3Gw83YlQWiiWWXItQOGr
+Jl6pDi+D44dmB8Rqga9yhTW7aJ5JdPQWa0jNoVZgIVoyuKBwEFsClZAkW4T9EcVV
+BzLVMcY26trM4hCVlqeyaHgJwwKG1mriZeDDh6f2cinEgkRe9Q/8jvotkftfQd9I
+rvyXIgLa6y8Glqnod+M0gIsSDGihkqTJPNzr8adK9zPr4bDp0WmXIoTQliwvVnas
+/I6IPu7z5H9st7IfB0oksbZRUTpCGeBUzIUVfpCa715XigOVdIjUHmPV/AwTCe21
+UfOV2rxN96xm0QD6Vo1/xhCl1HQNpcom1+QneM8Y/c6axJ985z8CyKz9xy4QevGy
+/yiAfKNSJJZVttceCmsZ3PtjSQqiTCjIwRwk92jQdP0R7lEKM/vPcX9oQ0rOXBdu
+ldaQU7veHhcXnJWZckf2uYTYCSIwfX1QA5gtN5sOMDGbVh/SJnP6NCbzsGKQT7m
+pcKIzMs2D1wg4eEXaSsOHz9LtWUtPZ/TrafjpRTtYPbtxiGb+h+7Fe/AeUcFg+7Q
+3P2C4HRozzmknc9h+/J7ASfUXVLG4QEHfOuPhkbPFtab3ICWXylX1juwR6/onW0F
+ovu09AAGEeCjhUayZdva9a3ajLiLINiiEbakMeMT2x6CHrOd73Xo8G7HQ8sC4LHE
+SiIcxkBOUc1MRNsNOEOLAX3Dfbb/wBjB8z+Ii+KDy8ZVv31AOFyuL3GizyDIwNVd
+all+pbAKoBpMdDfblI+RBWPzHLWC66aI9Bij8gO3dofJxlPp5IyII+jGDoj1OA4e
+xFTwfTfatq3B/9T7pq6dKvpcp7+vqfMNGFglJR0+iCPWEKf3Fb3KcwuZooOZ4wfg
+yo54OP6Z4y99cIJpGF9e3TgI5fdqYDQROgyIgrebZQ0Dqw4eR4Iy3quepPmZyK/l
+EtzGVwk2/ZHDmS0vH8EyVhS8sbuz+UlRNGZSIllTSRumwpaKBX97jVBQQfn5obk1
+1Q3LDzY0ftNgQHgXWliysbv1o1UEfXtOuWrhTziXlyVS00GyeDoUeoRad3ZJBHXV
+J7Y13J6MnL5U/I3rzx/iDvR5VUXYu+CwtfTqmiMXTZTMpxoMwj1FjbyUyr2fEqi+
+kE2Dr0qu8ucrPaGKMRT10J/+RmlsYchhElivMr25YG0+EEP+vpzVkOeK6KMbTYfw
+ulZDsn0e9SOnti7n0JrOBfmGRZaLz9WiU4H51QVGXA5itfJxI2Mu8waXupTBa2SC
+LwFxj6hgnXva3KV4Jq5H54algQgmCjQgAbqj58T/RxQvYM8SWqvlyt+1cTAoJ6ZP
+ooFD4X8GgzdsIaRWDl1viFGcJFWMSHBK9o2+HRNghe72sosyYu281+cPNgQdxl+z
+lXR+u5j2jPt1QD511somTF6RoUYwE6Xjq+E9RljdLBalJpRPGI8+tNnSJwMmgyCH
+XpIisag1E4EUWF8/PGbFk8ptLoJ5zz6KaFXPXOQqHULu8nUk3IpOGFxd1fbhe1e1
+9divS6H4souDOa3I/G4aP2vQG9aYSIDkzxvOeDcbxoMKzTE9BPLM7zvc7DlqobTu
+6BQFmk3SpYEAV0Gh8Ahk6FXSfcRYkReKYqZuilZBxZrnrEAigd2Jv8jPWO6jRYXZ
+q865ZJoVJy460b5lDQzB+0VN2hQ/42pouz1q8LPixEyIcKqbfp8IvkUtzDHKYvsP
+pNoGgEEMhQssHa9dJq0d0jqhz4hqE9PGTOEYOEYOVW0TWvPA8b0CF0pSA9MwFOp6
+lWZvgWDYVEulcY9WTj2zr4VTfOW4nWfIcxbfPuP+75tbZFizqn/bXrqnK0cGjaxr
+xV18cpSNhYWuRLVwPu622NabMRUIr+lqdtz9E0AYI5xasem0euCcPBT+VyZ4weyy
+WW3eRwJHqlZu7doYKqpcasGTR+eXHb3a5dEnshgmY39s33dpdWNb9ORQrGLz0pzz
+r0JGKaLLx5K7MLmEm6BLxA8mAcc8zzt5xD375O0lCekWQ0eO5Psdr34XBWPdjPBq
+Jgq0nra8KWsxCf7ZuNUCAm7stY8uCdNKjO6zWkLvgnPKTDu+8LpXGSu1Jx2luSYB
+iLYmVOtAz1r/3tMUMrOy6VP5pQfRYe+Uh5XW5iptYevPRYQqvVnkRO2ZtrW88Q9z
+4ErpLshCVU8IsTNaQ+aqzpTW6fJOT5rSNX6XzCVXePeZhuay1DlbXiQf52MiawXh
+OoWuWKDRDQnmeb37mAffbqFKhGO2agnuagjcKhzSD1LdA2+d9GTpZOQowsBKObrV
+BDhyMsw/UyTNnTblPue9FSSt633qjlmkxGAPtrfEYXV39m5WkBRflLODzbkY3aco
+7Qvt+ZSz1armP5kieRkoe3W8YujGvmU8qwFCpq5dVb+0MrUlJNbdgJp7XuVbrcpN
+xae40w6WfxBvy7EAI9n+zbq7E8eqiDFYCZdNDuXsFxr+omrC+fkl6CAhcEGDv+qF
+5QgHYNjRMTPt90R3AOGVGmLCBCH+i3eLAQhrzmp/dU7hxNaYZ+/vDYt5suU3FKcw
+G3IV/j4Wgt0lp/IQjc/GqG7ccBljhblxsPgb/x2R+f2sTm2QfKEzsbBQqYw6/9XA
+6UopNT9uDBYaaFxx5kYUPdMfKQKT2yP90bdWqGKGc1JOkHj+l24EaDvWtPQRnv6Y
+tNJdJyrmBNQEjeU6iUW7UZFJcC8vm4EMS9hStObim1M8BcQTPrtYJ6X7XOzRf33A
+g/uGCbJUTRIgUh2eB+9V0HwOb8B/5KNYOZS3mWD1ZaJMHXtt1GgYNtVapwkQ6DqQ
+T0aIW14LNXiQYQXzfTlAMv9t6pFlGUNBjF3TAw3DKcc0yXWIMZtskdXaWiX+VVL+
+BPWoJ09jcNK1NDJXlTzXjBCqNFMN2aYaim/YYnxmd4z9gV2Jkfngg4LL/45G0o7u
+ItUfQFAZ6aivvbcldvpp/gUYcHYvLLPdfa2Ni8s91POoMpxctYKGw52oYi3IvQcu
+bWl7865ho2bqsiXAqdAeALxndww9DZb75ymeDMyVNPiorQxgY9fINRF1cn/x/8xx
+J1dvP3sXatfo30BkxGfRyW/FB3IxUhRagYBdsJWk0uIWJsBVFkC8EUjUcEPlogw0
+9LAq7BfVESQZG3zV8OIUCehuj13mFh6lhFBqPb5WLIw2gTvWd1tIrjdKo29E04vp
+ptEM6+qDV6iaIQjhfOOdH0J9dPnkgLlALJEiFU84FJZhUY/6QbGfOCpguqdGOHO6
+G6qWyPq/Jr3sMELD4BxSj0nnsJxeGNrzg65/WGIhRxSr6UeXBX2T3ph8Hq//oU+7
+uGyIskOMj9S7/E6utn/asZIw96+8XrQvJJm17JgeokZL+2DEc8RmBeLh1cFlOkyp
+rKfDJTj4jqdYKztD2wZF+9depqOpAJudlNqFrjXl0FB91hsoH2NHVxAjfJRtJQWN
+jlv0RdFCh7nPvL1iyM723oxlGh0O+lFazup9e2GquatJL8S0+gi/7Pn3VCutc9Q+
+LAbDxEDFXOBvJOgl8SCSmvKuN2u6W5AWiw9MYI6xBkx5biMCcWCXeu9r2nGLRGez
+5+K/1w3ZmY5YEbntrNY2i0M+2cJhcdiEWJFEZwWD2DAcYwu+BGS8fPGiyqKfuAoo
+4ksl6LPwe0YWLG5Wp3W/t3NRX3M7ovhnbslgcTzTgSyhGngfr7n7DCNCmyAaBUce
+BiGIGlNXnI6jFJgaPkRlVOcXuVW8cjBiU7rDu6fOHrV2XH3OSc75tTGwsE1e3dHK
+ZCjpgC6mcjztO2uMXJf1Mz6Rc1UV1GLYwzuc0n1uum27Ry9YQWRUmVUOAEKIDR6d
+kIwBHO5X6kLFJxcHcGbdZ870K6vfetk/H9jcZs/GvOfYqY4KEZEHYjJTdntoliws
+9XQ3Xz8pAb+2wXGVi6ZEfs13qpduqswKwIBAg==
+-----END DH PARAMETERS-----
--- a/badssl.com/certs/sets/prod/pregen/dhparam/dh4096.pem
+++ b/badssl.com/certs/sets/prod/pregen/dhparam/dh4096.pem
@@ -0,0 +1,13 @@
+-----BEGIN DH PARAMETERS-----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=
+-----END DH PARAMETERS-----
--- a/badssl.com/certs/sets/prod/pregen/dhparam/dh8192.pem
+++ b/badssl.com/certs/sets/prod/pregen/dhparam/dh8192.pem
@@ -0,0 +1,24 @@
+-----BEGIN DH PARAMETERS-----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+-----END DH PARAMETERS-----
--- a/badssl.com/certs/sets/test/pregen/dhparam/dh2048.pem
+++ b/badssl.com/certs/sets/test/pregen/dhparam/dh2048.pem
@@ -0,0 +1,8 @@
+-----BEGIN DH PARAMETERS-----
+MIIBCAKCAQEAueXoMKt5EQxJ/5GfvyMB0HJdemRV7dSCzKy1qgZE6GTrxc46aJhg
+7ZUDu5p3iYd+Po4W15oHR1zNhXX3WeiFcKXn9fGuDRgaPI3zqFaV8JT3xiF8dW5T
+JuucNaYsk7lOhXl4HS+pfmKiDr7PljAcq2Hg+lByUO/MYTX3jruxlhePjU+bmNAD
+y+N0Rumx1aGOU7Jny45nvCVgdFG3UqOD6iHxL7manSi+6TqKmv0Jp0TqJqXEvB5o
+r4PdaSCTdN7gKKGwNzG4PYrkPAS+0TWMyO9FwV9hi6o3DajIK5jprtgxOpJXBszs
+UH4J9uV5WakHuzHzp8nUTIiL+FDW5b7hYwIBAg==
+-----END DH PARAMETERS-----
--- a/badssl.com/certs/src/conf/ca-intermediate.conf
+++ b/badssl.com/certs/src/conf/ca-intermediate.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 4096
+default_md          = sha256
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+x509_extensions     = req_v3_ca
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = BadSSL Intermediate Certificate Authority
+
+[ req_v3_ca ]
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid:always,issuer:always
+basicConstraints = CA:true
+keyUsage = cRLSign, keyCertSign
--- a/badssl.com/certs/src/conf/ca-root.conf
+++ b/badssl.com/certs/src/conf/ca-root.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 4096
+default_md          = sha256
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+x509_extensions     = req_v3_ca
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = BadSSL Root Certificate Authority
+
+[ req_v3_ca ]
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid:always,issuer:always
+basicConstraints = CA:true
+keyUsage = cRLSign, keyCertSign
--- a/badssl.com/certs/src/conf/ca-untrusted-root.conf
+++ b/badssl.com/certs/src/conf/ca-untrusted-root.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 4096
+default_md          = sha256
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+x509_extensions     = req_v3_ca
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = BadSSL Untrusted Root Certificate Authority
+
+[ req_v3_ca ]
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid:always,issuer:always
+basicConstraints = CA:true
+keyUsage = cRLSign, keyCertSign
--- a/badssl.com/certs/src/conf/client-ca-root.conf
+++ b/badssl.com/certs/src/conf/client-ca-root.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 4096
+default_md          = sha256
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+x509_extensions     = req_v3_ca
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = BadSSL Client Root Certificate Authority
+
+[ req_v3_ca ]
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid:always,issuer:always
+basicConstraints = CA:true
+keyUsage = cRLSign, keyCertSign
--- a/badssl.com/certs/src/conf/client-ca-untrusted-root.conf
+++ b/badssl.com/certs/src/conf/client-ca-untrusted-root.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 4096
+default_md          = sha256
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+x509_extensions     = req_v3_ca
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = BadSSL Untrusted Client Root Certificate Authority
+
+[ req_v3_ca ]
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid:always,issuer:always
+basicConstraints = CA:true
+keyUsage = cRLSign, keyCertSign
--- a/badssl.com/certs/src/conf/client.conf
+++ b/badssl.com/certs/src/conf/client.conf
@@ -0,0 +1,18 @@
+[ req ]
+default_bits        = 4096
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = BadSSL Client Certificate
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+nsCertType = client
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
--- a/badssl.com/certs/src/conf/fallback.conf
+++ b/badssl.com/certs/src/conf/fallback.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL Fallback. Unknown subdomain or no SNI.
+commonName          = badssl-fallback-unknown-subdomain-or-no-sni
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = badssl-fallback-unknown-subdomain-or-no-sni
--- a/badssl.com/certs/src/conf/subdomain-1000-sans.conf
+++ b/badssl.com/certs/src/conf/subdomain-1000-sans.conf
--- a/badssl.com/certs/src/conf/subdomain-10000-sans.conf
+++ b/badssl.com/certs/src/conf/subdomain-10000-sans.conf
--- a/badssl.com/certs/src/conf/subdomain-captive-portal.conf
+++ b/badssl.com/certs/src/conf/subdomain-captive-portal.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = login.captive-portal.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = login.captive-portal.__DOMAIN__
--- a/badssl.com/certs/src/conf/subdomain-dsdtestprovider.conf
+++ b/badssl.com/certs/src/conf/subdomain-dsdtestprovider.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = dsdtestprovider.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = dsdtestprovider.__DOMAIN__
--- a/badssl.com/certs/src/conf/subdomain-edellroot.conf
+++ b/badssl.com/certs/src/conf/subdomain-edellroot.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = edellroot.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = edellroot.__DOMAIN__
--- a/badssl.com/certs/src/conf/subdomain-extended-validation.conf
+++ b/badssl.com/certs/src/conf/subdomain-extended-validation.conf
@@ -0,0 +1,30 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+certificatePolicies = @policy
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = Mountain View
+organizationName    = Mozilla Corporation
+commonName          = extended-validation.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+certificatePolicies = @policy
+
+[ alt_names ]
+DNS.1 = extended-validation.__DOMAIN__
+
+[ policy ]
+policyIdentifier=1.3.1.1.1.1
+CPS.1 = "https://no-csp-statement.__DOMAIN__/"
+userNotice.1 = @notice
+
+[ notice ]
+explicitText = "This certificate is used solely for BadSSL."
--- a/badssl.com/certs/src/conf/subdomain-invalid-expected-sct.conf
+++ b/badssl.com/certs/src/conf/subdomain-invalid-expected-sct.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = invalid-expected-sct.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = invalid-expected-sct.__DOMAIN__
--- a/badssl.com/certs/src/conf/subdomain-mitm-software.conf
+++ b/badssl.com/certs/src/conf/subdomain-mitm-software.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = mitm-software.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = mitm-software.__DOMAIN__
--- a/badssl.com/certs/src/conf/subdomain-no-common-name.conf
+++ b/badssl.com/certs/src/conf/subdomain-no-common-name.conf
@@ -0,0 +1,19 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = no-common-name.__DOMAIN__
--- a/badssl.com/certs/src/conf/subdomain-no-san.conf
+++ b/badssl.com/certs/src/conf/subdomain-no-san.conf
@@ -0,0 +1,16 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = no-san.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
--- a/badssl.com/certs/src/conf/subdomain-no-sct.conf
+++ b/badssl.com/certs/src/conf/subdomain-no-sct.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = no-sct.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = no-sct.__DOMAIN__
--- a/badssl.com/certs/src/conf/subdomain-no-subject.conf
+++ b/badssl.com/certs/src/conf/subdomain-no-subject.conf
@@ -0,0 +1,14 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = critical, @alt_names
+
+[ alt_names ]
+DNS.1 = no-subject.__DOMAIN__
--- a/badssl.com/certs/src/conf/subdomain-preact-cli.conf
+++ b/badssl.com/certs/src/conf/subdomain-preact-cli.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = preact-cli.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = preact-cli.__DOMAIN__
--- a/badssl.com/certs/src/conf/subdomain-preloaded-expect-ct.conf
+++ b/badssl.com/certs/src/conf/subdomain-preloaded-expect-ct.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = subdomain-preloaded-expect-ct.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = subdomain-preloaded-expect-ct.__DOMAIN__
--- a/badssl.com/certs/src/conf/subdomain-revoked.conf
+++ b/badssl.com/certs/src/conf/subdomain-revoked.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = revoked.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = revoked.__DOMAIN__
--- a/badssl.com/certs/src/conf/subdomain-superfish.conf
+++ b/badssl.com/certs/src/conf/subdomain-superfish.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = superfish.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = superfish.__DOMAIN__
--- a/badssl.com/certs/src/conf/subdomain-webpack-dev-server.conf
+++ b/badssl.com/certs/src/conf/subdomain-webpack-dev-server.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = webpack-dev-server.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = webpack-dev-server.__DOMAIN__
--- a/badssl.com/certs/src/conf/subdomain-xn--n1aae7f7o.conf
+++ b/badssl.com/certs/src/conf/subdomain-xn--n1aae7f7o.conf
@@ -0,0 +1,20 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = xn--n1aae7f7o.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = xn--n1aae7f7o.__DOMAIN__
--- a/badssl.com/certs/src/conf/wildcard.conf
+++ b/badssl.com/certs/src/conf/wildcard.conf
@@ -0,0 +1,21 @@
+[ req ]
+default_bits        = 2048
+distinguished_name  = req_distinguished_name
+encrypt_key         = no
+prompt              = no
+req_extensions      = req_v3_usr
+
+[ req_distinguished_name ]
+countryName         = US
+stateOrProvinceName = California
+localityName        = San Francisco
+organizationName    = BadSSL
+commonName          = *.__DOMAIN__
+
+[ req_v3_usr ]
+basicConstraints = CA:FALSE
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = *.__DOMAIN__
+DNS.2 = __DOMAIN__
--- a/badssl.com/certs/src/crt/ca-dsdtestprovider.crt
+++ b/badssl.com/certs/src/crt/ca-dsdtestprovider.crt
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/src/crt/ca-edellroot.crt
+++ b/badssl.com/certs/src/crt/ca-edellroot.crt
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/src/crt/ca-mitm-software.crt
+++ b/badssl.com/certs/src/crt/ca-mitm-software.crt
@@ -0,0 +1,25 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/src/crt/ca-preact-cli.crt
+++ b/badssl.com/certs/src/crt/ca-preact-cli.crt
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/src/crt/ca-superfish.crt
+++ b/badssl.com/certs/src/crt/ca-superfish.crt
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/src/crt/ca-webpack-dev-server.crt
+++ b/badssl.com/certs/src/crt/ca-webpack-dev-server.crt
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/badssl.com/certs/src/dhparam/dh-composite.pem
+++ b/badssl.com/certs/src/dhparam/dh-composite.pem
@@ -0,0 +1,8 @@
+-----BEGIN DH PARAMETERS-----
+MIIBBwKCAQBed4vGnUmyHOfbuX0tMqo0gVsdd30AOBYfqQppFv3UycvnmSdu1Q95
+C/gGHCoK2L+DqRHf4OxuiPz/JpqAJtoBVAbqqf1XOALWliZIo3hJGZxrTUuZPawa
+iEmzENZRFFG3IJyQ5/9g9+O2McQfYH6NaAuV8+SA7erVyx0sDjitmgW6fAxeFTVQ
+oEeZiYKoyCfLhPFdT5fl4ug7MtXnNEpPjSBovMD5Xs/ZlJ3FDfsV69Swoz7dS+UK
+JlCrv7Obf+tlJCMhFJf3A2GNP+RzIJddSn2JbBaTMECgpwgBuKmqkKL6LiDzNML/
+rvO1LFfU+tV4bbn+RBiu+OCC2m2ZTgvHAgEF
+-----END DH PARAMETERS-----
--- a/badssl.com/certs/src/dhparam/dh-small-subgroup.pem
+++ b/badssl.com/certs/src/dhparam/dh-small-subgroup.pem
@@ -0,0 +1,13 @@
+-----BEGIN DH PARAMETERS-----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==
+-----END DH PARAMETERS-----
--- a/badssl.com/certs/tool
+++ b/badssl.com/certs/tool
@@ -0,0 +1,101 @@
+#!/usr/bin/env bash
+set -eu
+
+COMMAND=$1
+shift
+OUT=$1
+shift
+DOMAIN=$1
+shift
+
+mkdir -p $(dirname $OUT)
+PREGEN_OUT=$(echo "$OUT" | sed "s#/gen/#/pregen/#") 
+if [ -e $PREGEN_OUT ]
+then
+  cp $PREGEN_OUT $OUT
+  exit 0
+fi
+
+case "$COMMAND" in
+chain)
+  cat $@ > $OUT
+  ;;
+dhparam)
+  openssl dhparam \
+  -out $OUT \
+  $1
+  ;;
+gen-csr)
+  openssl req -new \
+    -out $OUT \
+    -config <(cat $1 | sed "s/__DOMAIN__/$DOMAIN/g") \
+    -key $2
+  ;;
+gen-csr-no-subject)
+  openssl req -new \
+    -subj / \
+    -out $OUT \
+    -config <(cat $1 | sed "s/__DOMAIN__/$DOMAIN/g") \
+    -key $2
+  ;;
+gen-ca)
+  openssl req -new -x509 -days 7300 \
+    -out $OUT \
+    -config $1 \
+    -key $2
+  ;;  
+gen-key)
+  openssl genrsa \
+    -out $OUT \
+    $1
+  ;;
+gen-ecckey)
+  openssl ecparam \
+    -out $OUT \
+    -name $1 \
+    -genkey
+  ;;
+gen-pkcs12-p12)
+  openssl pkcs12 \
+    -out $OUT \
+    -export \
+    -clcerts \
+    -passout "pass:$DOMAIN" \
+    -in $1 \
+    -inkey $2
+  ;;
+pkcs12-convert-p12-pem)
+  openssl pkcs12 \
+    -out $OUT \
+    -clcerts \
+    -passin "pass:$DOMAIN" \
+    -passout "pass:$DOMAIN" \
+    -in $1
+  ;;
+self-sign)
+  openssl x509  -req  -CAcreateserial \
+    -out $OUT \
+    -days $1 \
+    -$2 \
+    -extensions $3 \
+    -extfile <(cat $4 | sed "s/__DOMAIN__/$DOMAIN/g") \
+    -in $5 \
+    -signkey $6
+  ;;
+sign)
+  openssl x509 \
+    -req \
+    -CAcreateserial \
+    -days $1 \
+    -$2 \
+    -out $OUT \
+    -extensions $3 \
+    -extfile <(cat $4 | sed "s/__DOMAIN__/$DOMAIN/g") \
+    -in $5 \
+    -CAkey $6 \
+    -CA $7
+  ;;
+*)
+  echo "Unknown command."
+  exit 1
+esac
--- a/badssl.com/common/certs/.gitignore
+++ b/badssl.com/common/certs/.gitignore
@@ -0,0 +1,3 @@
+# Generated .pem files are placed in this directory for download.
+*
+!.gitignore
--- a/badssl.com/common/common.conf
+++ b/badssl.com/common/common.conf
@@ -0,0 +1,73 @@
+---
+---
+
+# The top-level root is specified by each individual .conf file.
+
+# https://github.com/lgarron/{{ site.domain }}/issues/47
+add_header "Cache-Control" "no-store";
+
+location /test {
+  root {{ site.serving-path }}/common;
+  try_files $uri $uri/ =404;
+
+  location /test/cors {
+    add_header "Access-Control-Allow-Origin" "*";
+
+    if ($http_referer ~* (youtube.com|ytimg.com|m.facebook.com|google) ) {
+        access_log off;
+    }
+  }
+
+  location /test/basic-auth {
+    auth_basic           "HTTP Basic Auth. Username and password are `test`/`test`.";
+    auth_basic_user_file {{ site.serving-path }}/nginx-includes/basic-auth.htpasswd;
+  }
+}
+
+location /icons {
+  root {{ site.serving-path }}/common;
+  try_files $uri $uri/ =404;
+  proxy_cache_valid 200 1h;
+}
+
+location = /style.css {
+  root {{ site.serving-path }}/common;
+  try_files $uri $uri/ =404;
+}
+
+location = /crossdomain.xml {
+  root {{ site.serving-path }}/common;
+  try_files $uri $uri/ =404;
+}
+
+location = /robots.txt {
+  root {{ site.serving-path }}/common;
+  try_files $uri $uri/ =404;
+}
+
+location /mixed/ {
+  root {{ site.serving-path }}/common;
+  try_files $uri $uri/ =404;
+}
+
+location /certs/ {
+  root {{ site.serving-path }}/common;
+  try_files $uri $uri/ =404;
+}
+
+location /input/ {
+  root {{ site.serving-path }}/common;
+  try_files $uri $uri/ =404;
+
+  location /input/login/submit {
+    error_page 405 =200 $uri;
+  }
+
+  location /input/dynamic-login/submit {
+    error_page 405 =200 $uri;
+  }
+}
+
+location / {
+  try_files $uri $uri/ =404;
+}
--- a/badssl.com/common/crossdomain.xml
+++ b/badssl.com/common/crossdomain.xml
@@ -0,0 +1,7 @@
+<?xml version="1.0"?>
+<!-- https://*.badssl.com/crossdomain.xml -->
+<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
+<cross-domain-policy>
+  <allow-access-from domain="*.youtube.com" />
+  <allow-access-from domain="s.ytimg.com" />
+</cross-domain-policy>
--- a/badssl.com/common/icons/favicon-blue.ico
+++ b/badssl.com/common/icons/favicon-blue.ico
--- a/badssl.com/common/icons/favicon-gray.ico
+++ b/badssl.com/common/icons/favicon-gray.ico
--- a/badssl.com/common/icons/favicon-green.ico
+++ b/badssl.com/common/icons/favicon-green.ico
--- a/badssl.com/common/icons/favicon-orange.ico
+++ b/badssl.com/common/icons/favicon-orange.ico
--- a/badssl.com/common/icons/favicon-red.ico
+++ b/badssl.com/common/icons/favicon-red.ico
--- a/badssl.com/common/icons/favicon-yellow.ico
+++ b/badssl.com/common/icons/favicon-yellow.ico
--- a/badssl.com/common/icons/icon-blue.png
+++ b/badssl.com/common/icons/icon-blue.png
--- a/badssl.com/common/icons/icon-gray.png
+++ b/badssl.com/common/icons/icon-gray.png
--- a/badssl.com/common/icons/icon-green.png
+++ b/badssl.com/common/icons/icon-green.png
--- a/Show More
+++ b/Show More