1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423
1424
1425
1426
1427
1428
1429
1430
1431
1432
1433
1434
1435
1436
1437
1438
1439
1440
1441
1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
1461
1462
1463
1464
1465
1466
1467
1468
1469
1470
1471
1472
1473
1474
1475
1476
1477
1478
1479
1480
1481
1482
1483
1484
1485
1486
1487
1488
1489
1490
1491
1492
1493
1494
1495
1496
1497
1498
1499
1500
1501
1502
1503
1504
1505
1506
1507
1508
1509
1510
1511
1512
1513
1514
1515
1516
1517
1518
1519
1520
1521
1522
1523
1524
1525
1526
1527
1528
1529
1530
1531
1532
1533
1534
1535
1536
1537
1538
1539
1540
1541
1542
1543
1544
1545
1546
1547
1548
1549
1550
1551
1552
1553
1554
1555
1556
1557
1558
1559
1560
1561
1562
1563
1564
1565
1566
1567
1568
1569
1570
1571
1572
1573
1574
1575
1576
1577
1578
1579
1580
1581
1582
1583
1584
1585
1586
1587
1588
1589
1590
1591
1592
1593
1594
1595
1596
1597
1598
1599
1600
1601
1602
1603
1604
1605
1606
1607
1608
1609
1610
1611
1612
1613
1614
1615
1616
1617
1618
1619
1620
1621
1622
1623
1624
1625
1626
1627
1628
1629
1630
1631
1632
1633
1634
1635
1636
1637
1638
1639
1640
1641
1642
1643
1644
1645
1646
1647
1648
1649
1650
1651
1652
1653
1654
1655
1656
1657
1658
1659
1660
1661
1662
1663
1664
1665
1666
1667
1668
1669
1670
1671
1672
1673
1674
1675
1676
1677
1678
1679
1680
1681
1682
1683
1684
1685
1686
1687
1688
1689
1690
1691
1692
1693
1694
1695
1696
1697
1698
1699
1700
1701
1702
1703
1704
1705
1706
1707
1708
1709
1710
1711
1712
1713
1714
1715
1716
1717
1718
1719
1720
1721
1722
1723
1724
1725
1726
1727
1728
1729
1730
1731
1732
1733
1734
1735
1736
1737
1738
1739
1740
1741
1742
1743
1744
1745
1746
1747
1748
1749
1750
1751
1752
1753
1754
1755
1756
1757
1758
1759
1760
1761
1762
1763
1764
1765
1766
1767
1768
1769
1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
1824
1825
1826
1827
1828
1829
1830
1831
1832
1833
1834
1835
1836
1837
1838
1839
1840
1841
1842
1843
1844
1845
1846
1847
1848
1849
1850
1851
1852
1853
1854
1855
1856
1857
1858
1859
1860
1861
1862
1863
1864
1865
1866
1867
1868
1869
1870
1871
1872
1873
1874
1875
1876
1877
1878
1879
1880
1881
1882
1883
1884
1885
1886
1887
1888
1889
1890
1891
1892
1893
1894
1895
1896
1897
1898
1899
1900
1901
|
/* PKIX1 Templates in TTCN-3
*
* Author: Philipp Maier <pmaier@sysmocom.de> / sysmocom - s.f.m.c. GmbH
*
* Released under the terms of GNU General Public License, Version 2 or
* (at your option) any later version.
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
module PKIX1Explicit88_Templates {
import from PKIX1Explicit88_Types all;
import from PKIX1Explicit88 all;
import from PKIX1Implicit88 all;
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/CertificateIssuer/CERT_CI_ECDSA_NIST.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b8:74:f3:ab:fa:6c:44:d3
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Feb 1 15:39:42 2017 GMT
Not After : Feb 1 15:39:42 2052 GMT
Subject: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:94:06:57:a6:73:dc:28:8f:89:d5:2e:a8:a4:77:
04:99:27:91:f9:c3:4b:00:36:e6:33:e2:d0:cb:a9:
45:4d:65:db:32:eb:17:98:17:99:d2:f2:43:88:ee:
2b:95:c1:09:45:46:c9:79:01:ce:ae:ba:96:50:91:
9a:2e:20:d2:29
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Subject Alternative Name:
Registered ID:2.999.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:46:02:21:00:91:f2:51:c9:71:53:b9:cf:85:37:9a:74:8b:
57:2a:49:68:52:45:56:c4:7f:33:eb:69:7b:55:91:2c:c0:f2:
d2:02:21:00:dc:e4:9e:73:f3:49:ec:d0:59:10:ef:9d:f6:b6:
9a:86:7a:bf:38:9d:c8:6b:84:11:b4:df:e1:96:91:50:f5:f9
*/
const octetstring cert_ci_nist :=
'30820256308201fba003020102020900b874f3abfa6c44d3300a06082a86
48ce3d04030230493115301306035504030c0c47534d4120546573742043
493111300f060355040b0c0854455354434552543110300e060355040a0c
0752535054455354310b30090603550406130249543020170d3137303230
313135333934325a180f32303532303230313135333934325a3049311530
1306035504030c0c47534d4120546573742043493111300f060355040b0c
0854455354434552543110300e060355040a0c0752535054455354310b30
090603550406130249543059301306072a8648ce3d020106082a8648ce3d
03010703420004940657a673dc288f89d52ea8a47704992791f9c34b0036
e633e2d0cba9454d65db32eb17981799d2f24388ee2b95c1094546c97901
ceaeba9650919a2e20d229a381c93081c6301d0603551d0e04160414f541
72bdf98a95d65cbeb88a38a1c11d800a85c3300f0603551d130101ff0405
30030101ff30170603551d200101ff040d300b3009060767811201020100
300e0603551d0f0101ff040403020106300e0603551d1104073005880388
3701305b0603551d1f045430523027a025a0238621687474703a2f2f6369
2e746573742e67736d612e636f6d2f43524c2d412e63726c3027a025a023
8621687474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d
422e63726c300a06082a8648ce3d040302034900304602210091f251c971
53b9cf85379a748b572a4968524556c47f33eb697b55912cc0f2d2022100
dce49e73f349ecd05910ef9df6b69a867abf389dc86b8411b4dfe1969150
f5f9'O
function f_ts_cert_ci_nist() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_ci_nist);
return cert_decoded;
}
template (value) Certificate ts_cert_ci_nist := f_ts_cert_ci_nist();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/CertificateIssuer/CERT_CI_ECDSA_BRP.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b8:74:f3:ab:fa:6c:44:d3
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Apr 19 10:34:38 2017 GMT
Not After : Apr 18 10:34:38 2052 GMT
Subject: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:27:87:b4:d5:6e:d8:24:a9:e6:be:04:e1:88:7f:
6b:98:ba:fe:b8:c7:63:f5:28:37:f7:01:13:e9:36:
4e:dd:be:13:9b:c0:c7:de:7e:16:8f:1e:5c:d0:c1:
85:34:fc:50:64:e6:4f:68:6d:c5:33:27:ca:7f:1d:
ce:a8:5a:29:94
ASN1 OID: brainpoolP256r1
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Subject Alternative Name:
Registered ID:2.999.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:44:02:20:06:c6:c3:9f:5a:b9:71:5d:72:c5:65:dc:f5:ff:
3b:fe:f3:fb:70:ef:0a:e3:3a:07:36:66:91:35:86:d0:ef:92:
02:20:16:b2:44:eb:46:9f:2a:2f:58:6b:c1:c3:20:b4:b6:43:
1b:8f:74:d9:41:f7:f1:83:2b:43:25:52:b1:61:df:a2
*/
const octetstring cert_ci_brp :=
'30820255308201fca003020102020900b874f3abfa6c44d3300a06082a86
48ce3d04030230493115301306035504030c0c47534d4120546573742043
493111300f060355040b0c0854455354434552543110300e060355040a0c
0752535054455354310b30090603550406130249543020170d3137303431
393130333433385a180f32303532303431383130333433385a3049311530
1306035504030c0c47534d4120546573742043493111300f060355040b0c
0854455354434552543110300e060355040a0c0752535054455354310b30
09060355040613024954305a301406072a8648ce3d020106092b24030302
08010107034200042787b4d56ed824a9e6be04e1887f6b98bafeb8c763f5
2837f70113e9364eddbe139bc0c7de7e168f1e5cd0c18534fc5064e64f68
6dc53327ca7f1dcea85a2994a381c93081c6301d0603551d0e04160414c0
bc70ba36929d43b467ff57570530e57ab8fcd8300f0603551d130101ff04
0530030101ff30170603551d200101ff040d300b30090607678112010201
00300e0603551d0f0101ff040403020106300e0603551d11040730058803
883701305b0603551d1f045430523027a025a0238621687474703a2f2f63
692e746573742e67736d612e636f6d2f43524c2d412e63726c3027a025a0
238621687474703a2f2f63692e746573742e67736d612e636f6d2f43524c
2d422e63726c300a06082a8648ce3d0403020347003044022006c6c39f5a
b9715d72c565dcf5ff3bfef3fb70ef0ae33a073666913586d0ef92022016
b244eb469f2a2f586bc1c320b4b6431b8f74d941f7f1832b432552b161df
a2'O
function f_ts_cert_ci_brp() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_ci_brp);
return cert_decoded;
}
template (value) Certificate ts_cert_ci_brp := f_ts_cert_ci_brp();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/eUICC/CERT_EUICC_ECDSA_NIST.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:00:00:00:00:00:00:00:01
Signature Algorithm: ecdsa-with-SHA256
Issuer: C = DE, O = RSP Test EUM, CN = EUM Test
Validity
Not Before: Jan 9 14:39:03 2017 GMT
Not After : Nov 2 14:39:03 7492 GMT
Subject: C = DE, O = RSP Test EUM, serialNumber = 89049032123451234512345678901235, CN = Test eUICC
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:6d:b3:f5:3a:dc:87:dc:2f:f1:0c:7b:fc:d8:7a:
d1:3a:e9:70:09:af:a0:65:a6:75:7e:e5:71:b3:f2:
eb:b1:8f:46:c1:d6:8f:3e:de:b0:e7:4b:2e:5d:54:
20:51:e7:d2:7f:50:95:20:28:60:5a:fd:ef:79:fe:
9f:ff:d0:39:59
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:DD:3D:A2:4D:35:0C:1C:C5:D0:AF:09:65:F4:0E:C3:4C:5E:E4:09:F1
X509v3 Subject Key Identifier:
A5:24:76:AF:5D:50:AA:37:64:37:CC:B1:DA:21:72:EF:45:F4:84:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.1
Signature Algorithm: ecdsa-with-SHA256
30:44:02:20:5e:da:e9:e3:b9:27:8a:36:12:65:dc:bd:13:a3:
bf:48:d7:ae:c4:3d:29:05:12:5b:fa:ca:2f:4c:f3:a7:e6:54:
02:20:08:9f:95:6b:b9:89:59:65:77:ec:98:6d:f7:af:66:f2:
a4:46:25:f3:85:77:4c:56:65:07:f6:f2:cd:72:e0:2c
*/
const octetstring cert_euicc_nist :=
'308201fe308201a5a0030201020209020000000000000001300a06082a86
48ce3d0403023037310b300906035504061302444531153013060355040a
0c0c52535020546573742045554d3111300f06035504030c0845554d2054
6573743020170d3137303130393134333930335a180f3734393231313032
3134333930335a3064310b30090603550406130244453115301306035504
0a0c0c52535020546573742045554d312930270603550405132038393034
393033323132333435313233343531323334353637383930313233353113
301106035504030c0a546573742065554943433059301306072a8648ce3d
020106082a8648ce3d030107034200046db3f53adc87dc2ff10c7bfcd87a
d13ae97009afa065a6757ee571b3f2ebb18f46c1d68f3edeb0e74b2e5d54
2051e7d27f50952028605afdef79fe9fffd03959a36b3069301f0603551d
23041830168014dd3da24d350c1cc5d0af0965f40ec34c5ee409f1301d06
03551d0e04160414a52476af5d50aa376437ccb1da2172ef45f484f0300e
0603551d0f0101ff04040302078030170603551d200101ff040d300b3009
060767811201020101300a06082a8648ce3d040302034700304402205eda
e9e3b9278a361265dcbd13a3bf48d7aec43d2905125bfaca2f4cf3a7e654
0220089f956bb989596577ec986df7af66f2a44625f385774c566507f6f2
cd72e02c'O;
function f_ts_cert_euicc_nist() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_euicc_nist);
return cert_decoded;
}
template (value) Certificate ts_cert_euicc_nist := f_ts_cert_euicc_nist();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/eUICC/CERT_EUICC_ECDSA_BRP.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:00:00:00:00:00:00:00:01
Signature Algorithm: ecdsa-with-SHA256
Issuer: C = DE, O = RSP Test EUM, CN = EUM Test
Validity
Not Before: Apr 20 12:07:50 2017 GMT
Not After : Feb 11 12:07:50 7493 GMT
Subject: C = DE, O = RSP Test EUM, serialNumber = 89049032123451234512345678901235, CN = Test eUICC
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:3e:59:0c:38:a9:c2:56:31:5e:cf:f3:29:14:16:
dd:33:54:09:a6:66:fd:41:b3:b5:1e:5e:51:14:f3:
43:ab:f0:a2:67:74:c6:c2:6c:48:75:3a:fe:28:36:
43:22:7b:b6:60:8c:d2:61:cc:97:2d:37:4a:47:91:
24:eb:f2:77:22
ASN1 OID: brainpoolP256r1
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:6F:A1:E5:21:73:63:A8:22:BD:ED:98:8A:1A:0D:0F:F5:D7:62:0D:B7
X509v3 Subject Key Identifier:
C8:A6:4F:34:3B:85:B7:B0:57:8D:C5:7F:8F:13:58:6D:C8:04:ED:84
X509v3 Key Usage: critical
Digital Signature
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.1
Signature Algorithm: ecdsa-with-SHA256
30:45:02:20:00:b4:f8:6f:2e:a1:4c:cc:04:66:51:99:88:4c:
ad:75:ca:dd:c3:36:79:77:2f:ff:d4:db:cf:1b:d2:a8:e4:1b:
02:21:00:8b:4d:40:a2:d9:bd:3a:53:c6:80:bd:c8:a3:08:c3:
fb:dd:fe:e7:c6:6a:18:b4:dc:dd:03:77:0f:ff:aa:49:82
*/
const octetstring cert_euicc_brp :=
'30820200308201a6a0030201020209020000000000000001300a06082a86
48ce3d0403023037310b300906035504061302444531153013060355040a
0c0c52535020546573742045554d3111300f06035504030c0845554d2054
6573743020170d3137303432303132303735305a180f3734393330323131
3132303735305a3064310b30090603550406130244453115301306035504
0a0c0c52535020546573742045554d312930270603550405132038393034
393033323132333435313233343531323334353637383930313233353113
301106035504030c0a54657374206555494343305a301406072a8648ce3d
020106092b2403030208010107034200043e590c38a9c256315ecff32914
16dd335409a666fd41b3b51e5e5114f343abf0a26774c6c26c48753afe28
3643227bb6608cd261cc972d374a479124ebf27722a36b3069301f060355
1d230418301680146fa1e5217363a822bded988a1a0d0ff5d7620db7301d
0603551d0e04160414c8a64f343b85b7b0578dc57f8f13586dc804ed8430
0e0603551d0f0101ff04040302078030170603551d200101ff040d300b30
09060767811201020101300a06082a8648ce3d0403020348003045022000
b4f86f2ea14ccc04665199884cad75caddc33679772fffd4dbcf1bd2a8e4
1b0221008b4d40a2d9bd3a53c680bdc8a308c3fbddfee7c66a18b4dcdd03
770fffaa4982'O;
function f_ts_cert_euicc_brp() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_euicc_brp);
return cert_decoded;
}
template (value) Certificate ts_cert_euicc_brp := f_ts_cert_euicc_brp();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/EUM/CERT_EUM_ECDSA_NIST.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305419896 (0x12345678)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Jan 19 18:10:30 2017 GMT
Not After : Jan 19 18:10:30 2051 GMT
Subject: C = DE, O = RSP Test EUM, CN = EUM Test
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:13:30:d5:92:56:ac:0c:b5:0b:d9:28:d0:f4:c6:
80:07:c4:85:fe:3f:42:98:8a:d3:ee:38:75:ae:33:
f4:98:3a:b2:3b:4d:d4:c3:13:40:d6:76:dd:8e:11:
f9:c5:cb:a1:b1:1e:b6:94:ee:d0:99:4d:b5:29:28:
5e:63:2c:89:06
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3
X509v3 Subject Key Identifier:
DD:3D:A2:4D:35:0C:1C:C5:D0:AF:09:65:F4:0E:C3:4C:5E:E4:09:F1
X509v3 Key Usage: critical
Certificate Sign
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.2
X509v3 Subject Alternative Name:
Registered ID:2.999.5
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
X509v3 Name Constraints: critical
Permitted:
DirName:O = RSP Test EUM, serialNumber = 89049032
Signature Algorithm: ecdsa-with-SHA256
30:46:02:21:00:8c:4d:4b:26:40:4e:a5:dd:ea:65:eb:b4:3c:
18:db:ab:12:cb:90:97:de:b7:7f:0b:a1:57:e3:8c:7b:18:b4:
ee:02:21:00:d1:8d:9c:f3:a1:34:87:ee:65:ca:6b:48:f8:c1:
ad:c0:2e:7a:7d:89:f1:74:b5:ae:2b:5e:1d:82:0a:9b:23:23
*/
const octetstring cert_eum_nist :=
'3082027c30820221a003020102020412345678300a06082a8648ce3d0403
0230493115301306035504030c0c47534d4120546573742043493111300f
060355040b0c0854455354434552543110300e060355040a0c0752535054
455354310b30090603550406130249543020170d31373031313931383130
33305a180f32303531303131393138313033305a3037310b300906035504
061302444531153013060355040a0c0c52535020546573742045554d3111
300f06035504030c0845554d20546573743059301306072a8648ce3d0201
06082a8648ce3d030107034200041330d59256ac0cb50bd928d0f4c68007
c485fe3f42988ad3ee3875ae33f4983ab23b4dd4c31340d676dd8e11f9c5
cba1b11eb694eed0994db529285e632c8906a382010530820101301f0603
551d23041830168014f54172bdf98a95d65cbeb88a38a1c11d800a85c330
1d0603551d0e04160414dd3da24d350c1cc5d0af0965f40ec34c5ee409f1
300e0603551d0f0101ff04040302020430170603551d200101ff040d300b
3009060767811201020102300e0603551d11040730058803883705301206
03551d130101ff040830060101ff02010030320603551d1f042b30293027
a025a0238621687474703a2f2f63692e746573742e67736d612e636f6d2f
43524c2d422e63726c303e0603551d1e0101ff04343032a030302ea42c30
2a31153013060355040a0c0c52535020546573742045554d3111300f0603
55040513083839303439303332300a06082a8648ce3d0403020349003046
0221008c4d4b26404ea5ddea65ebb43c18dbab12cb9097deb77f0ba157e3
8c7b18b4ee022100d18d9cf3a13487ee65ca6b48f8c1adc02e7a7d89f174
b5ae2b5e1d820a9b2323'O
function f_ts_cert_eum_nist() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_eum_nist);
return cert_decoded;
}
template (value) Certificate ts_cert_eum_nist := f_ts_cert_eum_nist();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/EUM/CERT_EUM_ECDSA_BRP.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305419896 (0x12345678)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Apr 20 10:23:31 2017 GMT
Not After : Apr 20 10:23:31 2051 GMT
Subject: C = DE, O = RSP Test EUM, CN = EUM Test
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:a2:e5:2a:32:df:e8:99:65:71:c5:3a:f5:32:8e:
f6:82:09:3f:c1:d0:5f:52:65:2f:6b:71:1c:24:38:
21:f7:f1:6b:0c:ec:8d:21:9b:23:d3:f9:90:f4:34:
d0:b9:0d:42:71:6c:02:e0:93:05:26:44:63:f6:11:
e6:50:c3:7f:f7
ASN1 OID: brainpoolP256r1
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8
X509v3 Subject Key Identifier:
6F:A1:E5:21:73:63:A8:22:BD:ED:98:8A:1A:0D:0F:F5:D7:62:0D:B7
X509v3 Key Usage: critical
Certificate Sign
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.2
X509v3 Subject Alternative Name:
Registered ID:2.999.5
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
X509v3 Name Constraints: critical
Permitted:
DirName:O = RSP Test EUM, serialNumber = 89049032
Signature Algorithm: ecdsa-with-SHA256
30:44:02:20:2b:46:5c:c1:ac:87:8d:46:a8:7d:4a:70:72:ca:
2c:f9:1c:27:10:87:02:19:ae:80:29:c6:96:bc:39:f0:5c:dc:
02:20:40:cc:35:b4:9c:3b:30:ee:39:b0:5d:da:8f:6d:0d:a6:
43:ab:8e:bd:6a:05:23:91:cf:46:c9:ee:4c:95:3b:19
*/
const octetstring cert_eum_brp :=
'3082027b30820222a003020102020412345678300a06082a8648ce3d0403
0230493115301306035504030c0c47534d4120546573742043493111300f
060355040b0c0854455354434552543110300e060355040a0c0752535054
455354310b30090603550406130249543020170d31373034323031303233
33315a180f32303531303432303130323333315a3037310b300906035504
061302444531153013060355040a0c0c52535020546573742045554d3111
300f06035504030c0845554d2054657374305a301406072a8648ce3d0201
06092b240303020801010703420004a2e52a32dfe8996571c53af5328ef6
82093fc1d05f52652f6b711c243821f7f16b0cec8d219b23d3f990f434d0
b90d42716c02e09305264463f611e650c37ff7a382010530820101301f06
03551d23041830168014c0bc70ba36929d43b467ff57570530e57ab8fcd8
301d0603551d0e041604146fa1e5217363a822bded988a1a0d0ff5d7620d
b7300e0603551d0f0101ff04040302020430170603551d200101ff040d30
0b3009060767811201020102300e0603551d110407300588038837053012
0603551d130101ff040830060101ff02010030320603551d1f042b302930
27a025a0238621687474703a2f2f63692e746573742e67736d612e636f6d
2f43524c2d422e63726c303e0603551d1e0101ff04343032a030302ea42c
302a31153013060355040a0c0c52535020546573742045554d3111300f06
0355040513083839303439303332300a06082a8648ce3d04030203470030
4402202b465cc1ac878d46a87d4a7072ca2cf91c2710870219ae8029c696
bc39f05cdc022040cc35b49c3b30ee39b05dda8f6d0da643ab8ebd6a0523
91cf46c9ee4c953b19'O;
function f_ts_cert_eum_brp() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_eum_brp);
return cert_decoded;
}
template (value) Certificate ts_cert_eum_brp := f_ts_cert_eum_brp();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPauth/CERT_S_SM_DPauth_ECDSA_NIST.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Feb 1 13:38:56 2017 GMT
Not After : Feb 1 13:38:56 2020 GMT
Subject: O = ACME, CN = "TEST SM-DP+"
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:4d:fe:d4:f4:69:47:91:bf:16:95:ce:a0:30:7a:
35:b4:18:01:96:95:38:7b:b7:5b:7d:24:47:b6:b5:
20:9f:04:45:ae:4e:5e:52:1c:d1:38:88:d7:5f:e0:
7c:85:80:22:2a:e2:0d:ba:ac:1d:77:cd:76:30:49:
93:42:1b:d7:39
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3
X509v3 Subject Key Identifier:
BD:5A:82:CC:1A:96:60:21:18:BA:75:60:A1:FF:83:A7:8B:21:0B:E5
X509v3 Subject Alternative Name:
Registered ID:2.999.10
X509v3 Key Usage: critical
Digital Signature
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.4
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:45:02:21:00:f1:cf:ef:41:e2:b8:a0:22:62:17:10:b9:6a:
65:4f:ff:e4:85:d0:8c:20:e6:64:e8:5b:f2:d7:27:00:2a:07:
38:02:20:69:25:bd:f7:bb:87:d0:c8:be:2b:78:a0:c5:9a:61:
01:78:29:30:c2:fe:98:ad:2d:70:38:65:6a:02:14:a3:97
*/
const octetstring cert_s_sm_dpauth_nist :=
'30820237308201dda003020102020164300a06082a8648ce3d0403023049
3115301306035504030c0c47534d4120546573742043493111300f060355
040b0c0854455354434552543110300e060355040a0c0752535054455354
310b3009060355040613024954301e170d3137303230313133333835365a
170d3230303230313133333835365a3025310d300b060355040a0c044143
4d453114301206035504030c0b5445535420534d2d44502b305930130607
2a8648ce3d020106082a8648ce3d030107034200044dfed4f4694791bf16
95cea0307a35b418019695387bb75b7d2447b6b5209f0445ae4e5e521cd1
3888d75fe07c8580222ae20dbaac1d77cd76304993421bd739a381d93081
d6301f0603551d23041830168014f54172bdf98a95d65cbeb88a38a1c11d
800a85c3301d0603551d0e04160414bd5a82cc1a96602118ba7560a1ff83
a78b210be5300e0603551d1104073005880388370a300e0603551d0f0101
ff04040302078030170603551d200101ff040d300b300906076781120102
0104305b0603551d1f045430523027a025a0238621687474703a2f2f6369
2e746573742e67736d612e636f6d2f43524c2d412e63726c3027a025a023
8621687474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d
422e63726c300a06082a8648ce3d0403020348003045022100f1cfef41e2
b8a022621710b96a654fffe485d08c20e664e85bf2d727002a0738022069
25bdf7bb87d0c8be2b78a0c59a6101782930c2fe98ad2d7038656a0214a3
97'O;
function f_ts_cert_s_sm_dpauth_nist() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dpauth_nist);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dpauth_nist := f_ts_cert_s_sm_dpauth_nist();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPauth/CERT_S_SM_DPauth_ECDSA_BRP.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Apr 26 15:20:12 2017 GMT
Not After : Apr 25 15:20:12 2020 GMT
Subject: O = ACME, CN = "TEST SM-DP+"
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:25:5d:7d:af:00:ef:84:1d:76:fa:7a:63:d6:3e:
b3:fe:6c:9f:70:49:2d:38:19:23:f8:f8:bd:7b:24:
f3:c5:ad:16:8e:be:3b:09:dd:80:f2:9e:7f:fd:24:
a4:d1:be:74:7f:83:23:e4:72:92:83:96:dd:e9:e0:
15:1c:ea:ba:18
ASN1 OID: brainpoolP256r1
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8
X509v3 Subject Key Identifier:
79:A4:BD:4D:78:FF:47:34:BC:60:45:CF:91:96:24:4A:1F:B8:4B:EB
X509v3 Subject Alternative Name:
Registered ID:2.999.10
X509v3 Key Usage: critical
Digital Signature
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.4
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:45:02:20:30:45:fe:e3:ed:cc:6c:84:36:3d:d7:b8:6e:98:
4b:dd:1c:94:78:cd:0f:2c:da:8e:4c:b9:63:13:f7:85:b2:db:
02:21:00:81:29:01:29:4a:5f:c6:82:cf:fa:57:0f:8a:42:d5:
59:b0:7c:ef:83:05:f7:d2:36:41:64:df:4d:f8:8c:a7:fa
*/
const octetstring cert_s_sm_dpauth_brp :=
'30820238308201dea003020102020164300a06082a8648ce3d0403023049
3115301306035504030c0c47534d4120546573742043493111300f060355
040b0c0854455354434552543110300e060355040a0c0752535054455354
310b3009060355040613024954301e170d3137303432363135323031325a
170d3230303432353135323031325a3025310d300b060355040a0c044143
4d453114301206035504030c0b5445535420534d2d44502b305a30140607
2a8648ce3d020106092b240303020801010703420004255d7daf00ef841d
76fa7a63d63eb3fe6c9f70492d381923f8f8bd7b24f3c5ad168ebe3b09dd
80f29e7ffd24a4d1be747f8323e472928396dde9e0151ceaba18a381d930
81d6301f0603551d23041830168014c0bc70ba36929d43b467ff57570530
e57ab8fcd8301d0603551d0e0416041479a4bd4d78ff4734bc6045cf9196
244a1fb84beb300e0603551d1104073005880388370a300e0603551d0f01
01ff04040302078030170603551d200101ff040d300b3009060767811201
020104305b0603551d1f045430523027a025a0238621687474703a2f2f63
692e746573742e67736d612e636f6d2f43524c2d412e63726c3027a025a0
238621687474703a2f2f63692e746573742e67736d612e636f6d2f43524c
2d422e63726c300a06082a8648ce3d040302034800304502203045fee3ed
cc6c84363dd7b86e984bdd1c9478cd0f2cda8e4cb96313f785b2db022100
812901294a5fc682cffa570f8a42d559b07cef8305f7d2364164df4df88c
a7fa'O;
function f_ts_cert_s_sm_dpauth_brp() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dpauth_brp);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dpauth_brp := f_ts_cert_s_sm_dpauth_brp();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPauth/CERT_S_SM_DP2auth_ECDSA_NIST.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Aug 21 14:19:48 2017 GMT
Not After : Aug 20 14:19:48 2020 GMT
Subject: O = ACME, CN = "TEST SM-DP+2"
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:2b:2e:9b:45:d3:51:c0:9a:f4:0e:91:43:83:a1:
90:38:47:f2:60:7d:e6:0e:f7:ab:25:c4:0e:03:f8:
db:b6:50:8e:14:57:50:8c:2b:e0:01:73:47:ec:fa:
1b:f9:f7:75:e7:d0:7e:80:5e:52:e1:98:8b:7b:58:
5a:71:11:ae:33
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3
X509v3 Subject Key Identifier:
95:9E:F7:E6:50:C1:BE:21:6A:39:19:74:27:6D:26:B8:A9:35:61:71
X509v3 Subject Alternative Name:
Registered ID:2.999.12
X509v3 Key Usage: critical
Digital Signature
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.4
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:46:02:21:00:c0:a5:cd:d1:0f:25:29:a9:f1:86:6d:93:21:
65:91:ce:7a:8a:29:54:6d:1f:aa:2f:99:c2:4e:a6:52:23:35:
98:02:21:00:85:92:01:17:04:fe:ab:d5:a6:af:fc:40:10:96:
39:99:08:3f:5b:3e:94:60:05:a3:f1:b0:cb:81:a6:6b:b9:3c
*/
const octetstring cert_s_sm_dp2auth_nist :=
'3082023a308201dfa003020102020200c8300a06082a8648ce3d04030230
493115301306035504030c0c47534d4120546573742043493111300f0603
55040b0c0854455354434552543110300e060355040a0c07525350544553
54310b3009060355040613024954301e170d313730383231313431393438
5a170d3230303832303134313934385a3026310d300b060355040a0c0441
434d453115301306035504030c0c5445535420534d2d44502b3230593013
06072a8648ce3d020106082a8648ce3d030107034200042b2e9b45d351c0
9af40e914383a1903847f2607de60ef7ab25c40e03f8dbb6508e1457508c
2be0017347ecfa1bf9f775e7d07e805e52e1988b7b585a7111ae33a381d9
3081d6301f0603551d23041830168014f54172bdf98a95d65cbeb88a38a1
c11d800a85c3301d0603551d0e04160414959ef7e650c1be216a39197427
6d26b8a9356171300e0603551d1104073005880388370c300e0603551d0f
0101ff04040302078030170603551d200101ff040d300b30090607678112
01020104305b0603551d1f045430523027a025a0238621687474703a2f2f
63692e746573742e67736d612e636f6d2f43524c2d412e63726c3027a025
a0238621687474703a2f2f63692e746573742e67736d612e636f6d2f4352
4c2d422e63726c300a06082a8648ce3d0403020349003046022100c0a5cd
d10f2529a9f1866d93216591ce7a8a29546d1faa2f99c24ea65223359802
21008592011704feabd5a6affc4010963999083f5b3e946005a3f1b0cb81
a66bb93c'O;
function f_ts_cert_s_sm_dp2auth_nist() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dp2auth_nist);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp2auth_nist := f_ts_cert_s_sm_dp2auth_nist();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPauth/CERT_S_SM_DP2auth_ECDSA_BRP.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Aug 21 14:27:16 2017 GMT
Not After : Aug 20 14:27:16 2020 GMT
Subject: O = ACME, CN = "TEST SM-DP+2"
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:2e:ee:07:c9:6d:00:5b:e5:19:5f:79:ad:1d:ad:
cd:1d:37:8c:a3:09:5e:44:f7:2e:ea:41:0f:08:c7:
56:12:2c:90:63:c9:65:b7:fc:85:29:c0:ca:4e:9b:
4f:65:96:9c:28:3c:65:63:64:57:87:71:18:f6:d1:
17:2d:6a:23:65
ASN1 OID: brainpoolP256r1
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8
X509v3 Subject Key Identifier:
D7:0E:FD:05:7B:AC:1F:7C:55:EA:5D:8C:26:BE:16:02:92:84:5B:AF
X509v3 Subject Alternative Name:
Registered ID:2.999.12
X509v3 Key Usage: critical
Digital Signature
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.4
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:44:02:20:4b:32:a5:c9:ee:05:f2:9f:d4:4a:08:6f:f0:4a:
10:9a:88:d6:e5:84:80:39:a5:16:ee:c7:8c:a4:ac:f0:c5:b3:
02:20:52:9e:46:fa:10:9d:13:05:40:ba:d6:2a:46:fc:85:c3:
95:b2:c4:cb:9e:8c:f1:50:79:d4:9a:9d:a5:37:df:e0
*/
const octetstring cert_s_sm_dp2auth_brp :=
'30820239308201e0a003020102020200c8300a06082a8648ce3d04030230
493115301306035504030c0c47534d4120546573742043493111300f0603
55040b0c0854455354434552543110300e060355040a0c07525350544553
54310b3009060355040613024954301e170d313730383231313432373136
5a170d3230303832303134323731365a3026310d300b060355040a0c0441
434d453115301306035504030c0c5445535420534d2d44502b32305a3014
06072a8648ce3d020106092b2403030208010107034200042eee07c96d00
5be5195f79ad1dadcd1d378ca3095e44f72eea410f08c756122c9063c965
b7fc8529c0ca4e9b4f65969c283c65636457877118f6d1172d6a2365a381
d93081d6301f0603551d23041830168014c0bc70ba36929d43b467ff5757
0530e57ab8fcd8301d0603551d0e04160414d70efd057bac1f7c55ea5d8c
26be160292845baf300e0603551d1104073005880388370c300e0603551d
0f0101ff04040302078030170603551d200101ff040d300b300906076781
1201020104305b0603551d1f045430523027a025a0238621687474703a2f
2f63692e746573742e67736d612e636f6d2f43524c2d412e63726c3027a0
25a0238621687474703a2f2f63692e746573742e67736d612e636f6d2f43
524c2d422e63726c300a06082a8648ce3d040302034700304402204b32a5
c9ee05f29fd44a086ff04a109a88d6e5848039a516eec78ca4acf0c5b302
20529e46fa109d130540bad62a46fc85c395b2c4cb9e8cf15079d49a9da5
37dfe0'O;
function f_ts_cert_s_sm_dp2auth_brp() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dp2auth_brp);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp2auth_brp := f_ts_cert_s_sm_dp2auth_brp();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPpb/CERT_S_SM_DPpb_ECDSA_NIST.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Feb 1 13:38:57 2017 GMT
Not After : Feb 1 13:38:57 2020 GMT
Subject: O = ACME, CN = "TEST SM-DP+"
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:10:4c:2a:e3:d0:2d:ef:9c:97:92:61:a7:c6:71:
00:76:b9:70:72:1d:09:55:a2:64:4a:e0:5f:ae:4b:
c2:31:4e:5d:c0:9f:6b:f0:11:80:26:16:53:42:e2:
12:31:87:75:e3:65:f3:b5:73:25:37:30:66:b9:90:
6e:0b:d1:38:8d
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3
X509v3 Subject Key Identifier:
E6:EA:F7:1E:E0:FB:94:30:EC:CD:1E:BB:42:1F:88:14:37:C1:32:63
X509v3 Subject Alternative Name:
Registered ID:2.999.10
X509v3 Key Usage: critical
Digital Signature
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.5
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:43:02:1f:1d:c0:8e:8b:98:1f:4c:77:0c:e9:06:01:c5:2b:
2a:28:e2:21:65:4b:d0:ba:a3:78:34:80:92:27:52:bf:f4:02:
20:64:23:83:9e:85:e8:93:6f:7a:18:b2:b4:b8:5f:99:8c:4f:
38:a8:db:9b:88:8c:23:e2:99:7c:9e:a5:af:6e:94
*/
const octetstring cert_s_sm_dppb_nist :=
'30820235308201dda003020102020165300a06082a8648ce3d0403023049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'O;
function f_ts_cert_s_sm_dppb_nist() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dppb_nist);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dppb_nist := f_ts_cert_s_sm_dppb_nist();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPpb/CERT_S_SM_DPpb_ECDSA_BRP.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Apr 26 15:20:13 2017 GMT
Not After : Apr 25 15:20:13 2020 GMT
Subject: O = ACME, CN = "TEST SM-DP+"
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:89:32:53:ec:c9:4c:51:df:4f:ee:6e:0d:b0:95:
1c:fc:65:62:74:81:b5:41:8e:55:70:69:f4:87:fa:
a1:54:66:a5:cb:8e:10:cc:2b:38:09:9c:f2:a9:29:
f7:f8:2d:ac:06:51:26:b7:1d:06:40:96:1d:b7:f9:
1a:49:e9:56:12
ASN1 OID: brainpoolP256r1
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8
X509v3 Subject Key Identifier:
A8:C6:8D:F4:49:EB:71:EC:72:3E:AC:13:2E:40:E4:B6:F5:46:44:FE
X509v3 Subject Alternative Name:
Registered ID:2.999.10
X509v3 Key Usage: critical
Digital Signature
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.5
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:44:02:20:5f:33:63:c1:01:b4:db:d0:2a:61:3c:8a:ca:32:
df:4f:2f:51:4c:21:73:e8:93:6e:9b:ff:af:02:a1:f5:e2:56:
02:20:01:c0:99:36:19:43:29:65:fe:5a:87:a0:38:ae:91:bf:
02:45:07:06:a3:2c:4b:13:07:af:4b:e8:ec:41:68:1d
*/
const octetstring cert_s_sm_dppb_brp :=
'30820237308201dea003020102020165300a06082a8648ce3d0403023049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'O;
function f_ts_cert_s_sm_dppb_brp() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dppb_brp);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dppb_brp := f_ts_cert_s_sm_dppb_brp();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPpb/CERT_S_SM_DP2pb_ECDSA_NIST.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Aug 21 14:23:52 2017 GMT
Not After : Aug 20 14:23:52 2020 GMT
Subject: O = ACME, CN = "TEST SM-DP+2"
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:3e:2d:75:a1:06:22:12:16:c2:ae:e8:fa:d5:84:
f7:79:63:3c:f9:44:68:1b:5e:c7:5a:96:65:3f:5f:
40:1c:47:6a:e3:9d:54:6c:03:2d:32:d0:07:0a:7b:
86:e5:dc:eb:aa:dd:f3:1c:a5:c2:76:6c:19:6b:d7:
9b:c2:1a:01:80
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3
X509v3 Subject Key Identifier:
20:A3:A8:30:E9:2E:E7:A4:68:C5:EB:27:BA:8D:F1:84:59:AD:FD:D7
X509v3 Subject Alternative Name:
Registered ID:2.999.12
X509v3 Key Usage: critical
Digital Signature
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.5
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:45:02:20:17:81:a1:df:74:e8:c6:60:88:67:17:b7:6c:fd:
ce:a0:2d:f7:b2:85:5a:5b:6c:5e:a9:cc:8d:ec:97:4c:e1:9b:
02:21:00:ca:a8:9b:fb:af:26:13:02:1b:8f:7c:2c:63:59:44:
b3:5b:14:38:c0:09:e6:81:dc:e6:7a:58:b3:97:b8:f4:c1
*/
const octetstring cert_s_sm_dp2pb_nist :=
'30820239308201dfa003020102020200c9300a06082a8648ce3d04030230
493115301306035504030c0c47534d4120546573742043493111300f0603
55040b0c0854455354434552543110300e060355040a0c07525350544553
54310b3009060355040613024954301e170d313730383231313432333532
5a170d3230303832303134323335325a3026310d300b060355040a0c0441
434d453115301306035504030c0c5445535420534d2d44502b3230593013
06072a8648ce3d020106082a8648ce3d030107034200043e2d75a1062212
16c2aee8fad584f779633cf944681b5ec75a96653f5f401c476ae39d546c
032d32d0070a7b86e5dcebaaddf31ca5c2766c196bd79bc21a0180a381d9
3081d6301f0603551d23041830168014f54172bdf98a95d65cbeb88a38a1
c11d800a85c3301d0603551d0e0416041420a3a830e92ee7a468c5eb27ba
8df18459adfdd7300e0603551d1104073005880388370c300e0603551d0f
0101ff04040302078030170603551d200101ff040d300b30090607678112
01020105305b0603551d1f045430523027a025a0238621687474703a2f2f
63692e746573742e67736d612e636f6d2f43524c2d412e63726c3027a025
a0238621687474703a2f2f63692e746573742e67736d612e636f6d2f4352
4c2d422e63726c300a06082a8648ce3d040302034800304502201781a1df
74e8c660886717b76cfdcea02df7b2855a5b6c5ea9cc8dec974ce19b0221
00caa89bfbaf2613021b8f7c2c635944b35b1438c009e681dce67a58b397
b8f4c1'O
function f_ts_cert_s_sm_dp2pb_nist() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dp2pb_nist);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp2pb_nist := f_ts_cert_s_sm_dp2pb_nist();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPpb/CERT_S_SM_DP2pb_ECDSA_BRP.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Aug 21 14:31:07 2017 GMT
Not After : Aug 20 14:31:07 2020 GMT
Subject: O = ACME, CN = "TEST SM-DP+2"
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:73:61:85:5e:59:02:64:b2:52:c7:1a:60:62:a0:
21:e2:7b:46:f7:60:b8:13:82:06:a7:f7:44:20:ef:
8b:c5:5a:8b:98:8d:16:58:f9:d7:0d:3a:2d:84:80:
aa:df:64:e6:2c:4d:71:27:de:5a:0a:2b:91:7a:94:
3f:44:74:aa:dd
ASN1 OID: brainpoolP256r1
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8
X509v3 Subject Key Identifier:
31:03:8A:55:B6:BE:CF:6C:EA:59:DE:2F:DA:14:F4:32:7F:B8:B6:A9
X509v3 Subject Alternative Name:
Registered ID:2.999.12
X509v3 Key Usage: critical
Digital Signature
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.5
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:44:02:20:0b:2f:51:21:0c:e1:39:f1:80:69:54:a2:74:7b:
18:bd:7b:39:0b:25:0c:4a:12:ae:8d:d2:1e:43:42:0e:3c:73:
02:20:7b:e1:51:0d:c0:52:93:9e:c1:77:4e:3a:cd:d8:78:8d:
e9:47:49:fd:81:9a:28:6c:8d:c6:81:3a:45:64:9b:b4
*/
const octetstring cert_s_sm_dp2pb_brp :=
'30820239308201e0a003020102020200c9300a06082a8648ce3d04030230
493115301306035504030c0c47534d4120546573742043493111300f0603
55040b0c0854455354434552543110300e060355040a0c07525350544553
54310b3009060355040613024954301e170d313730383231313433313037
5a170d3230303832303134333130375a3026310d300b060355040a0c0441
434d453115301306035504030c0c5445535420534d2d44502b32305a3014
06072a8648ce3d020106092b2403030208010107034200047361855e5902
64b252c71a6062a021e27b46f760b8138206a7f74420ef8bc55a8b988d16
58f9d70d3a2d8480aadf64e62c4d7127de5a0a2b917a943f4474aadda381
d93081d6301f0603551d23041830168014c0bc70ba36929d43b467ff5757
0530e57ab8fcd8301d0603551d0e0416041431038a55b6becf6cea59de2f
da14f4327fb8b6a9300e0603551d1104073005880388370c300e0603551d
0f0101ff04040302078030170603551d200101ff040d300b300906076781
1201020105305b0603551d1f045430523027a025a0238621687474703a2f
2f63692e746573742e67736d612e636f6d2f43524c2d412e63726c3027a0
25a0238621687474703a2f2f63692e746573742e67736d612e636f6d2f43
524c2d422e63726c300a06082a8648ce3d040302034700304402200b2f51
210ce139f1806954a2747b18bd7b390b250c4a12ae8dd21e43420e3c7302
207be1510dc052939ec1774e3acdd8788de94749fd819a286c8dc6813a45
649bb4'O;
function f_ts_cert_s_sm_dp2pb_brp() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dp2pb_brp);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp2pb_brp := f_ts_cert_s_sm_dp2pb_brp();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPtls/CERT_S_SM_DP2_TLS.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Sep 1 11:26:44 2017 GMT
Not After : Aug 31 11:26:44 2020 GMT
Subject: O = ACME, CN = testsmdpplus2.gsma.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:1a:d9:00:0c:75:4e:37:61:3e:75:0f:b7:bf:73:
42:fe:d5:0b:c0:72:52:ed:84:65:6b:45:d6:f7:08:
78:95:08:a9:ff:e0:96:17:23:af:11:ef:c8:dd:a6:
9a:69:f2:b5:18:8b:b3:12:13:82:0a:b2:dd:1e:f5:
80:2e:8f:d4:b6
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage: critical
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 2.23.146.1.2.1.3
X509v3 Subject Key Identifier:
9F:5F:6B:0C:E7:00:32:25:2D:CE:10:D3:49:A6:55:18:1B:85:3E:CE
X509v3 Authority Key Identifier:
keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3
X509v3 Subject Alternative Name:
DNS:testsmdpplus2.gsma.com, Registered ID:2.999.12
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:45:02:21:00:94:1a:fc:27:73:40:ce:05:d5:d4:1b:49:90:
d9:c5:d7:02:6c:7e:a7:3b:7a:07:0f:30:ad:69:b1:78:a3:e9:
65:02:20:28:59:fb:74:a0:6f:d1:36:c3:9f:94:14:16:23:e3:
b5:88:ae:ef:d8:42:6d:2c:0b:df:51:3d:fe:58:7a:ac:31
*/
const octetstring cert_s_sm_dp2_tls :=
'3082027c30820222a00302010202020099300a06082a8648ce3d04030230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'O;
function f_ts_cert_s_sm_dp2_tls() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dp2_tls);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp2_tls := f_ts_cert_s_sm_dp2_tls();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPtls/CERT_S_SM_DP4_TLS.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2452 (0x994)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Dec 5 13:32:17 2017 GMT
Not After : Dec 4 13:32:17 2020 GMT
Subject: O = ACME, CN = testsmdpplus4.gsma.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:3a:db:e8:4d:23:a8:1a:f6:3b:a2:d8:99:83:6c:
bb:68:a7:62:56:b3:0d:70:26:30:3d:c3:6b:c1:5d:
f6:11:36:c4:fb:e7:02:01:b4:c5:a6:6e:3d:ac:6b:
2b:3b:95:7a:99:bb:4e:74:10:03:e8:bf:74:2f:08:
13:02:aa:7d:a6
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage: critical
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 2.23.146.1.2.1.3
X509v3 Subject Key Identifier:
13:0F:3D:7B:B3:B0:65:AD:3C:58:78:76:BC:BB:6B:84:FD:49:7A:AB
X509v3 Authority Key Identifier:
keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3
X509v3 Subject Alternative Name:
DNS:testsmdpplus4.gsma.com, Registered ID:2.999.14
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:44:02:20:6e:eb:6d:9e:59:01:39:c4:9a:2c:9b:d5:05:6e:
c9:a6:f6:03:73:29:62:da:e3:6e:d1:de:6d:fe:c1:31:95:8f:
02:20:39:5c:3b:44:d5:de:84:73:ce:be:82:3d:33:5f:b4:fe:
5b:2c:7f:47:3d:e6:5e:70:4a:ae:66:2a:6c:af:ec:5c
*/
const octetstring cert_s_sm_dp4_tls :=
'3082027b30820222a00302010202020994300a06082a8648ce3d04030230
493115301306035504030c0c47534d4120546573742043493111300f0603
55040b0c0854455354434552543110300e060355040a0c07525350544553
54310b3009060355040613024954301e170d313731323035313333323137
5a170d3230313230343133333231375a3030310d300b060355040a0c0441
434d45311f301d06035504030c1674657374736d6470706c7573342e6773
6d612e636f6d3059301306072a8648ce3d020106082a8648ce3d03010703
4200043adbe84d23a81af63ba2d899836cbb68a76256b30d7026303dc36b
c15df61136c4fbe70201b4c5a66e3dac6b2b3b957a99bb4e741003e8bf74
2f081302aa7da6a38201113082010d300e0603551d0f0101ff0404030207
8030200603551d250101ff0416301406082b0601050507030106082b0601
050507030230140603551d20040d300b3009060767811201020103301d06
03551d0e04160414130f3d7bb3b065ad3c587876bcbb6b84fd497aab301f
0603551d23041830168014f54172bdf98a95d65cbeb88a38a1c11d800a85
c330260603551d11041f301d821674657374736d6470706c7573342e6773
6d612e636f6d880388370e305b0603551d1f045430523027a025a0238621
687474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d412e
63726c3027a025a0238621687474703a2f2f63692e746573742e67736d61
2e636f6d2f43524c2d422e63726c300a06082a8648ce3d04030203470030
4402206eeb6d9e590139c49a2c9bd5056ec9a6f603732962dae36ed1de6d
fec131958f0220395c3b44d5de8473cebe823d335fb4fe5b2c7f473de65e
704aae662a6cafec5c'O;
function f_ts_cert_s_sm_dp4_tls() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dp4_tls);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp4_tls := f_ts_cert_s_sm_dp4_tls();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPtls/CERT_S_SM_DP8_TLS.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2456 (0x998)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Dec 5 13:37:06 2017 GMT
Not After : Dec 4 13:37:06 2020 GMT
Subject: O = ACME, CN = testsmdpplus8.gsma.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:ce:41:31:18:fa:64:99:6e:d8:b2:9b:fc:ac:85:
33:83:e6:5d:3f:22:a1:99:e7:96:6b:f4:06:9a:69:
58:39:2b:e5:39:d0:00:ea:51:a5:48:8b:10:87:d6:
eb:47:c0:01:84:6d:1e:68:7e:c4:90:e8:1a:80:96:
49:42:0c:52:6b
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage: critical
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 2.23.146.1.2.1.3
X509v3 Subject Key Identifier:
B8:7E:0A:73:F2:44:D5:99:4C:28:61:E6:EA:6E:30:70:D6:34:2A:53
X509v3 Authority Key Identifier:
keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3
X509v3 Subject Alternative Name:
DNS:testsmdpplus8.gsma.com, Registered ID:2.999.18
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:45:02:21:00:c1:74:e5:e3:ad:32:a9:6c:26:14:29:de:cd:
c3:09:e5:fe:8a:c1:9d:be:e2:54:73:94:e1:43:be:84:f0:33:
4a:02:20:55:c4:13:42:f8:b4:f1:d2:2f:0f:31:20:3f:fe:27:
75:69:6a:0c:72:89:86:7e:66:35:2a:03:ae:e2:b8:71:3c
*/
const octetstring cert_s_sm_dp8_tls :=
'3082027c30820222a00302010202020998300a06082a8648ce3d04030230
493115301306035504030c0c47534d4120546573742043493111300f0603
55040b0c0854455354434552543110300e060355040a0c07525350544553
54310b3009060355040613024954301e170d313731323035313333373036
5a170d3230313230343133333730365a3030310d300b060355040a0c0441
434d45311f301d06035504030c1674657374736d6470706c7573382e6773
6d612e636f6d3059301306072a8648ce3d020106082a8648ce3d03010703
420004ce413118fa64996ed8b29bfcac853383e65d3f22a199e7966bf406
9a6958392be539d000ea51a5488b1087d6eb47c001846d1e687ec490e81a
809649420c526ba38201113082010d300e0603551d0f0101ff0404030207
8030200603551d250101ff0416301406082b0601050507030106082b0601
050507030230140603551d20040d300b3009060767811201020103301d06
03551d0e04160414b87e0a73f244d5994c2861e6ea6e3070d6342a53301f
0603551d23041830168014f54172bdf98a95d65cbeb88a38a1c11d800a85
c330260603551d11041f301d821674657374736d6470706c7573382e6773
6d612e636f6d8803883712305b0603551d1f045430523027a025a0238621
687474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d412e
63726c3027a025a0238621687474703a2f2f63692e746573742e67736d61
2e636f6d2f43524c2d422e63726c300a06082a8648ce3d04030203480030
45022100c174e5e3ad32a96c261429decdc309e5fe8ac19dbee2547394e1
43be84f0334a022055c41342f8b4f1d22f0f31203ffe2775696a0c728986
7e66352a03aee2b8713c'O;
function f_ts_cert_s_sm_dp8_tls() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dp8_tls);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp8_tls := f_ts_cert_s_sm_dp8_tls();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPtls/CERT_S_SM_DP_TLS_NIST.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Jun 29 12:21:14 2017 GMT
Not After : Jun 28 12:21:14 2020 GMT
Subject: O = ACME, CN = testsmdpplus1.gsma.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:28:24:30:75:ce:8e:fd:1f:ae:67:68:39:40:7d:
b2:6e:4c:cb:43:70:94:62:1c:9b:39:61:33:f1:b2:
4b:b5:01:b8:fe:4e:b2:4d:3e:0d:39:2f:25:3f:6f:
1b:94:62:70:b3:ca:29:2e:34:db:6f:7a:87:b3:a5:
f6:ac:94:5f:08
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage: critical
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 2.23.146.1.2.1.3
X509v3 Subject Key Identifier:
27:FE:F1:F2:29:18:7E:C7:83:ED:F6:E0:29:64:A4:51:8D:57:D4:A9
X509v3 Authority Key Identifier:
keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3
X509v3 Subject Alternative Name:
DNS:testsmdpplus1.gsma.com, Registered ID:2.999.10
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:45:02:20:2a:68:cf:75:5a:8b:0b:87:c9:41:25:6b:4d:af:
4b:f2:09:6d:01:c8:3f:27:2b:cc:ce:63:df:d5:cc:5a:39:e3:
02:21:00:b0:f5:02:4b:9e:aa:15:26:28:ab:19:77:21:a1:d1:
a5:9e:05:c0:2e:20:83:79:15:8c:d4:74:4d:37:48:67:8a
*/
const octetstring cert_s_sm_dp_tls_nist :=
'3082027b30820221a003020102020109300a06082a8648ce3d0403023049
3115301306035504030c0c47534d4120546573742043493111300f060355
040b0c0854455354434552543110300e060355040a0c0752535054455354
310b3009060355040613024954301e170d3137303632393132323131345a
170d3230303632383132323131345a3030310d300b060355040a0c044143
4d45311f301d06035504030c1674657374736d6470706c7573312e67736d
612e636f6d3059301306072a8648ce3d020106082a8648ce3d0301070342
000428243075ce8efd1fae676839407db26e4ccb437094621c9b396133f1
b24bb501b8fe4eb24d3e0d392f253f6f1b946270b3ca292e34db6f7a87b3
a5f6ac945f08a38201113082010d300e0603551d0f0101ff040403020780
30200603551d250101ff0416301406082b0601050507030106082b060105
0507030230140603551d20040d300b3009060767811201020103301d0603
551d0e0416041427fef1f229187ec783edf6e02964a4518d57d4a9301f06
03551d23041830168014f54172bdf98a95d65cbeb88a38a1c11d800a85c3
30260603551d11041f301d821674657374736d6470706c7573312e67736d
612e636f6d880388370a305b0603551d1f045430523027a025a023862168
7474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d412e63
726c3027a025a0238621687474703a2f2f63692e746573742e67736d612e
636f6d2f43524c2d422e63726c300a06082a8648ce3d0403020348003045
02202a68cf755a8b0b87c941256b4daf4bf2096d01c83f272bccce63dfd5
cc5a39e3022100b0f5024b9eaa152628ab197721a1d1a59e05c02e208379
158cd4744d3748678a'O;
function f_ts_cert_s_sm_dp_tls_nist() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dp_tls_nist);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp_tls_nist := f_ts_cert_s_sm_dp_tls_nist();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPtls/CERT_S_SM_DP_TLS_BRP.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Jul 6 13:49:28 2017 GMT
Not After : Jul 5 13:49:28 2020 GMT
Subject: O = ACME, CN = smdp-plus.test.gsma.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:4c:22:cc:d8:2c:8d:02:21:f9:d8:54:3b:72:e1:
07:bc:c9:fd:90:54:d6:6c:75:c0:eb:74:a7:bd:e7:
30:e7:61:8e:f6:5b:27:0b:5e:82:e4:3a:79:6f:8d:
ee:0b:af:8a:fb:eb:8a:53:62:53:7a:02:fd:65:c7:
9e:41:19:6b:b5
ASN1 OID: brainpoolP256r1
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage: critical
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 2.23.146.1.2.1.3
X509v3 Subject Key Identifier:
3D:33:09:83:F3:9F:CC:5B:D2:E4:AD:68:A6:19:A7:47:48:AE:8B:9D
X509v3 Authority Key Identifier:
keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8
X509v3 Subject Alternative Name:
DNS:smdp-plus.test.gsma.com, Registered ID:2.999.10
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:44:02:20:4a:9c:78:38:89:c0:ef:f1:9d:68:c3:9f:67:d5:
b5:81:d3:c9:df:3e:1d:52:67:40:3a:e1:f1:ea:6f:1e:4c:d5:
02:20:5a:9f:b1:a7:3b:5e:6f:1b:ac:a3:16:55:90:ec:56:c5:
0a:91:25:ed:76:39:d6:c8:49:1c:a3:c8:3e:55:59:11
*/
const octetstring cert_s_sm_dp_tls_brp :=
'3082027d30820224a003020102020109300a06082a8648ce3d0403023049
3115301306035504030c0c47534d4120546573742043493111300f060355
040b0c0854455354434552543110300e060355040a0c0752535054455354
310b3009060355040613024954301e170d3137303730363133343932385a
170d3230303730353133343932385a3031310d300b060355040a0c044143
4d453120301e06035504030c17736d64702d706c75732e746573742e6773
6d612e636f6d305a301406072a8648ce3d020106092b2403030208010107
034200044c22ccd82c8d0221f9d8543b72e107bcc9fd9054d66c75c0eb74
a7bde730e7618ef65b270b5e82e43a796f8dee0baf8afbeb8a5362537a02
fd65c79e41196bb5a38201123082010e300e0603551d0f0101ff04040302
078030200603551d250101ff0416301406082b0601050507030106082b06
01050507030230140603551d20040d300b3009060767811201020103301d
0603551d0e041604143d330983f39fcc5bd2e4ad68a619a74748ae8b9d30
1f0603551d23041830168014c0bc70ba36929d43b467ff57570530e57ab8
fcd830270603551d110420301e8217736d64702d706c75732e746573742e
67736d612e636f6d880388370a305b0603551d1f045430523027a025a023
8621687474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d
412e63726c3027a025a0238621687474703a2f2f63692e746573742e6773
6d612e636f6d2f43524c2d422e63726c300a06082a8648ce3d0403020347
00304402204a9c783889c0eff19d68c39f67d5b581d3c9df3e1d5267403a
e1f1ea6f1e4cd502205a9fb1a73b5e6f1baca3165590ec56c50a9125ed76
39d6c8491ca3c83e555911'O;
function f_ts_cert_s_sm_dp_tls_brp() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dp_tls_brp);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp_tls_brp := f_ts_cert_s_sm_dp_tls_brp();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DS/DSauth/CERT_S_SM_DSauth_ECDSA_NIST.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7495 (0x1d47)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Jan 30 11:08:22 2017 GMT
Not After : Jan 30 11:08:22 2020 GMT
Subject: O = ACME, CN = TEST SM-DS
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:37:fb:94:e3:a2:be:fe:76:3e:1a:77:4a:48:54:
88:0f:10:6d:80:f9:36:84:5b:ad:2f:dd:97:1b:c0:
68:d8:ab:61:a5:48:1a:ee:97:7d:5a:81:68:bb:9f:
79:00:4b:1d:00:72:c1:ba:76:73:b0:cb:64:81:6e:
10:19:b2:4f:d0
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 Subject Key Identifier:
C1:F4:06:4B:3B:25:8A:FB:61:38:8B:3F:F2:EE:6A:61:E2:C4:4D:72
X509v3 Subject Alternative Name:
Registered ID:2.999.15
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.7
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:45:02:21:00:d3:41:14:3c:60:cd:36:14:93:12:ed:a8:4d:
40:08:7a:ee:cc:e9:7d:de:06:44:dc:e8:b7:6a:16:8f:e8:e2:
61:02:20:09:d6:1d:c9:40:e3:13:08:33:32:78:77:44:0d:6f:
ac:eb:9f:6b:92:72:88:6b:f5:fa:a1:47:98:76:99:59:f2
*/
const octetstring cert_s_sm_dsauth_nist :=
'30820237308201dda00302010202021d47300a06082a8648ce3d04030230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'O;
function f_ts_cert_s_sm_dsauth_nist() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dsauth_nist);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dsauth_nist := f_ts_cert_s_sm_dsauth_nist();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DS/DSauth/CERT_S_SM_DSauth_ECDSA_BRP.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7495 (0x1d47)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: May 5 17:03:51 2017 GMT
Not After : May 4 17:03:51 2020 GMT
Subject: O = ACME, CN = TEST SM-DS
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:81:d1:d0:23:f3:9f:18:43:34:18:c2:8c:d2:3d:
42:15:7a:43:9f:ed:d2:9e:59:ab:11:86:e1:30:89:
81:96:c1:56:3a:13:f4:8b:36:d6:d4:b1:3b:4d:08:
5a:57:60:ae:61:3d:06:1f:fe:6f:c7:a4:0c:65:02:
e3:ff:73:3c:31
ASN1 OID: brainpoolP256r1
X509v3 extensions:
X509v3 Authority Key Identifier:
keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 Subject Key Identifier:
F0:5F:0B:54:AE:E8:AE:01:08:F0:1D:EF:54:8E:D9:85:97:14:DD:48
X509v3 Subject Alternative Name:
Registered ID:2.999.15
X509v3 Certificate Policies: critical
Policy: 2.23.146.1.2.1.7
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:45:02:20:25:a0:29:5d:1a:46:6e:2d:07:48:83:c5:f9:43:
e2:fb:0a:72:ee:96:b5:75:95:d9:7d:91:b5:cb:b1:ea:6e:63:
02:21:00:8d:4c:5b:4a:e7:48:86:82:28:72:15:0c:13:90:b9:
64:39:f0:30:71:d2:4a:a4:11:45:5d:bb:16:2e:05:54:77
*/
const octetstring cert_s_sm_dsauth_brp :=
'30820238308201dea00302010202021d47300a06082a8648ce3d04030230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'O;
function f_ts_cert_s_sm_dsauth_brp() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_dsauth_brp);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dsauth_brp := f_ts_cert_s_sm_dsauth_brp();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DS/DStls/CERT_SM_DS_TLS_NIST.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77899973700 (0x1223334444)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Jul 28 13:34:55 2017 GMT
Not After : Jul 27 13:34:55 2020 GMT
Subject: O = RSPTEST, CN = testrootsmds.gsma.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:92:0c:d5:ff:68:04:d8:7d:99:1d:ad:f6:38:c9:
b7:83:c5:85:00:a5:7b:a4:93:5b:9e:e2:ef:02:52:
b6:a6:dd:9a:50:1c:21:fd:35:42:6b:3b:51:c4:e4:
61:e5:6c:3f:77:2e:69:5f:b8:61:7f:9a:74:82:30:
4b:bb:2f:e2:84
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage: critical
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 2.23.146.1.2.1.6
X509v3 Subject Key Identifier:
A0:36:C1:62:75:35:1E:C7:B0:15:53:A1:3F:83:E2:8D:44:00:BD:0A
X509v3 Authority Key Identifier:
keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3
X509v3 Subject Alternative Name:
DNS:testrootsmds.gsma.com, Registered ID:2.999.15
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:45:02:20:20:15:19:8e:b1:3b:3c:b2:cd:90:f2:02:c0:1c:
55:88:0c:4b:94:64:5a:88:f2:87:2b:44:f4:fa:42:15:bb:64:
02:21:00:8f:0d:7e:67:1f:bf:34:a4:0e:51:d2:11:2f:ca:21:
47:0c:ba:c9:84:06:30:39:5b:66:66:60:61:d3:86:3e:33
*/
const octetstring cert_sm_ds_tls_nist :=
'3082028030820226a00302010202051223334444300a06082a8648ce3d04
030230493115301306035504030c0c47534d412054657374204349311130
0f060355040b0c0854455354434552543110300e060355040a0c07525350
54455354310b3009060355040613024954301e170d313730373238313333
3435355a170d3230303732373133333435355a30323110300e060355040a
0c0752535054455354311e301c06035504030c1574657374726f6f74736d
64732e67736d612e636f6d3059301306072a8648ce3d020106082a8648ce
3d03010703420004920cd5ff6804d87d991dadf638c9b783c58500a57ba4
935b9ee2ef0252b6a6dd9a501c21fd35426b3b51c4e461e56c3f772e695f
b8617f9a7482304bbb2fe284a38201103082010c300e0603551d0f0101ff
04040302078030200603551d250101ff0416301406082b06010505070301
06082b0601050507030230140603551d20040d300b300906076781120102
0106301d0603551d0e04160414a036c16275351ec7b01553a13f83e28d44
00bd0a301f0603551d23041830168014f54172bdf98a95d65cbeb88a38a1
c11d800a85c330250603551d11041e301c821574657374726f6f74736d64
732e67736d612e636f6d880388370f305b0603551d1f045430523027a025
a0238621687474703a2f2f63692e746573742e67736d612e636f6d2f4352
4c2d412e63726c3027a025a0238621687474703a2f2f63692e746573742e
67736d612e636f6d2f43524c2d422e63726c300a06082a8648ce3d040302
034800304502202015198eb13b3cb2cd90f202c01c55880c4b94645a88f2
872b44f4fa4215bb640221008f0d7e671fbf34a40e51d2112fca21470cba
c9840630395b66666061d3863e33'O;
function f_ts_cert_sm_ds_tls_nist() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_sm_ds_tls_nist);
return cert_decoded;
}
template (value) Certificate ts_cert_sm_ds_tls_nist := f_ts_cert_sm_ds_tls_nist();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DS/DStls/CERT_S_SM_DS2_TLS_NIST.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81684042822800725 (0x122333444455555)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Jul 31 09:36:23 2017 GMT
Not After : Jul 30 09:36:23 2020 GMT
Subject: O = RSPTEST, CN = testsmds1.gsma.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:19:d0:a3:31:cf:30:2c:7a:07:61:52:90:92:56:
75:ad:14:62:cc:58:ba:57:b2:a8:fa:67:69:fd:65:
f5:c3:ad:34:d4:92:89:77:cf:57:39:30:ca:01:d8:
61:15:a6:8d:45:a6:86:0c:7b:9d:b2:3d:82:18:58:
11:41:8c:2a:09
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage: critical
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 2.23.146.1.2.1.6
X509v3 Subject Key Identifier:
53:82:04:27:91:71:ED:3D:0A:79:C0:AD:61:A5:35:31:2C:86:48:6C
X509v3 Authority Key Identifier:
keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3
X509v3 Subject Alternative Name:
DNS:testsmds1.gsma.com, Registered ID:2.999.15.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:45:02:20:5c:b0:bd:6d:48:5b:13:21:c3:bf:28:37:22:a6:
43:09:a5:d2:0e:8f:67:1b:d0:05:f3:f9:1e:17:6f:8b:a4:80:
02:21:00:c7:73:03:63:64:ab:76:34:f2:61:24:99:d8:24:8c:
af:df:81:d1:6d:3c:2c:5b:d6:0c:4b:ee:60:68:31:c4:f1
*/
const octetstring cert_s_sm_ds2_tls_nist :=
'3082027e30820224a00302010202080122333444455555300a06082a8648
ce3d04030230493115301306035504030c0c47534d412054657374204349
3111300f060355040b0c0854455354434552543110300e060355040a0c07
52535054455354310b3009060355040613024954301e170d313730373331
3039333632335a170d3230303733303039333632335a302f3110300e0603
55040a0c0752535054455354311b301906035504030c1274657374736d64
73312e67736d612e636f6d3059301306072a8648ce3d020106082a8648ce
3d0301070342000419d0a331cf302c7a07615290925675ad1462cc58ba57
b2a8fa6769fd65f5c3ad34d4928977cf573930ca01d86115a68d45a6860c
7b9db23d82185811418c2a09a382010e3082010a300e0603551d0f0101ff
04040302078030200603551d250101ff0416301406082b06010505070301
06082b0601050507030230140603551d20040d300b300906076781120102
0106301d0603551d0e04160414538204279171ed3d0a79c0ad61a535312c
86486c301f0603551d23041830168014f54172bdf98a95d65cbeb88a38a1
c11d800a85c330230603551d11041c301a821274657374736d6473312e67
736d612e636f6d880488370f02305b0603551d1f045430523027a025a023
8621687474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d
412e63726c3027a025a0238621687474703a2f2f63692e746573742e6773
6d612e636f6d2f43524c2d422e63726c300a06082a8648ce3d0403020348
00304502205cb0bd6d485b1321c3bf283722a64309a5d20e8f671bd005f3
f91e176f8ba480022100c773036364ab7634f2612499d8248cafdf81d16d
3c2c5bd60c4bee606831c4f1'O;
function f_ts_cert_s_sm_ds2_tls_nist() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_ds2_tls_nist);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_ds2_tls_nist := f_ts_cert_s_sm_ds2_tls_nist();
/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DS/DStls/CERT_S_SM_DS_TLS_BRP.der
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1246399579205 (0x12233344445)
Signature Algorithm: ecdsa-with-SHA256
Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
Validity
Not Before: Jul 7 06:18:01 2017 GMT
Not After : Jul 6 06:18:01 2020 GMT
Subject: O = TESTCERT, CN = smds.test.gsma.com
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:39:ef:3f:92:a3:bc:a8:ef:7d:66:26:7f:1e:1a:
d8:b9:43:fd:2d:b2:27:cb:e1:a1:0b:f4:92:72:61:
81:c4:81:5b:2a:31:60:7c:7d:e5:b3:1c:a0:22:1d:
ff:ed:ad:58:70:63:3d:30:ed:55:aa:bb:51:7a:e4:
39:9c:4a:64:81
ASN1 OID: brainpoolP256r1
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage: critical
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 2.23.146.1.2.1.6
X509v3 Subject Key Identifier:
73:99:CA:C7:B1:5F:AB:2F:F9:33:CF:2D:22:15:E4:84:4A:DE:F8:05
X509v3 Authority Key Identifier:
keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8
X509v3 Subject Alternative Name:
DNS:smds.test.gsma.com, Registered ID:2.999.15
X509v3 CRL Distribution Points:
Full Name:
URI:http://ci.test.gsma.com/CRL-A.crl
Full Name:
URI:http://ci.test.gsma.com/CRL-B.crl
Signature Algorithm: ecdsa-with-SHA256
30:44:02:20:18:56:2e:17:de:40:a4:93:18:dc:8e:a5:26:dc:
e5:71:9d:85:42:c8:5b:cc:2c:6c:86:a4:6a:58:db:b5:ce:1a:
02:20:4a:91:75:54:26:98:e5:85:6e:27:57:41:0c:46:f2:fb:
22:7e:04:2c:79:6a:99:77:69:5b:20:2e:89:49:c3:4d
*/
const octetstring cert_s_sm_ds_tls_brp :=
'3082027c30820223a0030201020206012233344445300a06082a8648ce3d
04030230493115301306035504030c0c47534d4120546573742043493111
300f060355040b0c0854455354434552543110300e060355040a0c075253
5054455354310b3009060355040613024954301e170d3137303730373036
313830315a170d3230303730363036313830315a30303111300f06035504
0a0c085445535443455254311b301906035504030c12736d64732e746573
742e67736d612e636f6d305a301406072a8648ce3d020106092b24030302
080101070342000439ef3f92a3bca8ef7d66267f1e1ad8b943fd2db227cb
e1a10bf492726181c4815b2a31607c7de5b31ca0221dffedad5870633d30
ed55aabb517ae4399c4a6481a382010d30820109300e0603551d0f0101ff
04040302078030200603551d250101ff0416301406082b06010505070301
06082b0601050507030230140603551d20040d300b300906076781120102
0106301d0603551d0e041604147399cac7b15fab2ff933cf2d2215e4844a
def805301f0603551d23041830168014c0bc70ba36929d43b467ff575705
30e57ab8fcd830220603551d11041b30198212736d64732e746573742e67
736d612e636f6d880388370f305b0603551d1f045430523027a025a02386
21687474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d41
2e63726c3027a025a0238621687474703a2f2f63692e746573742e67736d
612e636f6d2f43524c2d422e63726c300a06082a8648ce3d040302034700
3044022018562e17de40a49318dc8ea526dce5719d8542c85bcc2c6c86a4
6a58dbb5ce1a02204a9175542698e5856e2757410c46f2fb227e042c796a
9977695b202e8949c34d'O;
function f_ts_cert_s_sm_ds_tls_brp() return Certificate {
var Certificate cert_decoded;
cert_decoded := dec_Certificate(cert_s_sm_ds_tls_brp);
return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_ds_tls_brp := f_ts_cert_s_sm_ds_tls_brp();
}
|
