| 1 | /** |
| 2 | * Deterministic CA certificates for HostnameAssociation tests. |
| 3 | * |
| 4 | * Generated once with openssl (RSA-2048, 10-year validity) and checked in so |
| 5 | * that every test run uploads identical content (distinct from the |
| 6 | * MtlsCertificate suite's fixtures — Cloudflare rejects uploading identical |
| 7 | * PEM content twice on the same account): |
| 8 | * |
| 9 | * ```sh |
| 10 | * openssl req -x509 -newkey rsa:2048 -nodes -keyout ca.key -out ca.pem \ |
| 11 | * -days 3650 -subj "/CN=Alchemy CertAuth Test CA 1/O=Alchemy/C=US" \ |
| 12 | * -addext "basicConstraints=critical,CA:TRUE" \ |
| 13 | * -addext "keyUsage=critical,keyCertSign,cRLSign" |
| 14 | * # CA 2 likewise with CN=Alchemy CertAuth Test CA 2 |
| 15 | * ``` |
| 16 | */ |
| 17 | |
| 18 | /** Self-signed root CA "Alchemy CertAuth Test CA 1" (expires 2036). */ |
| 19 | export const CA_CERT_1 = `-----BEGIN CERTIFICATE----- |
| 20 | MIIDLjCCAhagAwIBAgIJAJ81r+I3C4azMA0GCSqGSIb3DQEBCwUAMEQxIzAhBgNV |
| 21 | BAMMGkFsY2hlbXkgQ2VydEF1dGggVGVzdCBDQSAxMRAwDgYDVQQKDAdBbGNoZW15 |
| 22 | MQswCQYDVQQGEwJVUzAeFw0yNjA2MTIwMTU1MjNaFw0zNjA2MDkwMTU1MjNaMEQx |
| 23 | IzAhBgNVBAMMGkFsY2hlbXkgQ2VydEF1dGggVGVzdCBDQSAxMRAwDgYDVQQKDAdB |
| 24 | bGNoZW15MQswCQYDVQQGEwJVUzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC |
| 25 | ggEBALNaNABcTEwsMANJYI+ZCNw1OCUR7VBBrh4xDHzDlqvSQEAuXcDFRM6ftAEC |
| 26 | I/9rfOWK8P4Csnk1tO1+QwMkyZmTYNvXHYOY/ZoQBw8R96SxkHn/po3LrvcO9WH+ |
| 27 | lsepsY25EZGfXLPC2M9uhbMPgHPDfBe1ffnNWVL96ua2g62B9uvpBX0Lj+/k+6lU |
| 28 | 6Vgc44MFdDIi2XjcciPnFoO8FUCA83qCAd4fvcZXnzqIMFK4PaIcpkkdBa8Xw3gJ |
| 29 | 6ZGVH4iNnBsXx8TMZromU4zh3q98BbT8roKZKigeP/0ixweLe+PhM9DGu1BADoD4 |
| 30 | 94UASMVsV4PP5bo59T0mFAle+jMCAwEAAaMjMCEwDwYDVR0TAQH/BAUwAwEB/zAO |
| 31 | BgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQADggEBAKzJBpPbUmtvlPOdpQPS |
| 32 | rBpSVgcJjXj5KM/1+mDGHe2phq61wk4LlBUghdAyg3dqGPZj0iXkPosv3E7UeIwZ |
| 33 | cDSFBZLKTJhJzhSUohSmwh0GE8u10+Ws2aivK12cW/pud8eN1ho48JqdVz098d7Q |
| 34 | b/XXjZ+tNfTCHxNe27hsq8A+3hoNWiJ5eRezcXR6Kla4+TE3YxGG2/yhVytPlJwj |
| 35 | 6LmCfTLS1Hww5UBSUUrVnMXxiLELG4/O4ceTxObsKv4uGpW0AvNIlOOLN7dIvqXj |
| 36 | TqdUrzLZ47nVX9yg34T4wr/TKA3vDPfAVkTrnBIZRsrTNXRmRZXwMi56bdOnj/W8 |
| 37 | svs= |
| 38 | -----END CERTIFICATE----- |
| 39 | `; |
| 40 | |
| 41 | /** Self-signed root CA "Alchemy CertAuth Test CA 2" (expires 2036). */ |
| 42 | export const CA_CERT_2 = `-----BEGIN CERTIFICATE----- |
| 43 | MIIDLjCCAhagAwIBAgIJAPGLvLtGafh9MA0GCSqGSIb3DQEBCwUAMEQxIzAhBgNV |
| 44 | BAMMGkFsY2hlbXkgQ2VydEF1dGggVGVzdCBDQSAyMRAwDgYDVQQKDAdBbGNoZW15 |
| 45 | MQswCQYDVQQGEwJVUzAeFw0yNjA2MTIwMTU1MjNaFw0zNjA2MDkwMTU1MjNaMEQx |
| 46 | IzAhBgNVBAMMGkFsY2hlbXkgQ2VydEF1dGggVGVzdCBDQSAyMRAwDgYDVQQKDAdB |
| 47 | bGNoZW15MQswCQYDVQQGEwJVUzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC |
| 48 | ggEBAONpUB/nAygfxAkKmsru5nZVm5L34+6C08pd8lra8/SBg1kQf791LakvdK+H |
| 49 | 8vJEWxmYn+TWQaDDp268XBmVlYF//c2xzGB5iEjCKsX0ODkF8TBb6ZfUrIoINhvu |
| 50 | 2QTeEiiZ0Jfc8GP4bv9Nwa4z6WKUjUBH6sUtkTbPCrqnhJnvlCfUki64fMP0UZCO |
| 51 | OS7ZgvA/bYcQuahNGIg8lEjPC5PaONAHHP+K/QtquLjFgtrq44iymE9xXHYo1w4U |
| 52 | qnsVxcrzY7p1b75kD9si/k7aVkLIAZhT+medmCXVmwr6WsLJdLagZgTs4erL2B14 |
| 53 | t1835pU/nLFNOxnUbVkguZOtX+8CAwEAAaMjMCEwDwYDVR0TAQH/BAUwAwEB/zAO |
| 54 | BgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQADggEBAGk+o7Qcngagk9crjCZH |
| 55 | hr0YblkA7r/BOdRCgAYGPO3ihJld3yPmB/QUaAPpzQbIQrICrp9HE16kvN90QGr5 |
| 56 | X7UEJLkAwlgR02gZmmuSw9SEKkK3HsZomFuwgsdXonBXM6npAaVd4LyKpyB5rICh |
| 57 | zNHRDOSWPic8e8BMhms6pviFOEP014QmGMG8CcSxtA3bGvZk5SXZIK2xTHg10dLE |
| 58 | 2rwvuHhbxELGI4gMGJCgS0C13Rxe468kqpxSK4wNjx7Iaz/O/yXXsYyDQ/s62irX |
| 59 | 0P/PY5Ipj7sPImMCWa/ugN/fjWVdejiFwmZHgcK5f3ihRcBVWLbXpUTjUvOUM618 |
| 60 | y9Q= |
| 61 | -----END CERTIFICATE----- |
| 62 | `; |