[java-opensaml] 03/24: As follow-on to last checkin, copy re-generated certs for PKIX test from opensaml-security-impl.
Brent Putman
putmanb at georgetown.edu
Wed Sep 27 16:45:57 EDT 2017
This is an automated email from the git hooks/post-receive script.
putmanb pushed a commit to branch maint-3.3
in repository java-opensaml.
View the commit online:
http://git.shibboleth.net/view/?p=java-opensaml.git;a=commit;h=1f48f9482729e5358043dbdec9cef48d6bd40be6
commit 1f48f9482729e5358043dbdec9cef48d6bd40be6
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Fri Feb 3 04:52:34 2017 +0000
As follow-on to last checkin, copy re-generated certs for PKIX test from opensaml-security-impl.
---
.../xmlsec/signature/support/foo-1A1-expired.crt | 108 +++++++++++++++++----
.../xmlsec/signature/support/foo-1A1-expired.key | 27 ++++++
.../xmlsec/signature/support/foo-1A1-good.crt | 108 +++++++++++++++++----
.../xmlsec/signature/support/foo-1A1-good.key | 50 +++++-----
.../xmlsec/signature/support/foo-1A1-revoked.crt | 108 +++++++++++++++++----
.../xmlsec/signature/support/foo-1A1-revoked.key | 27 ++++++
.../xmlsec/signature/support/inter1A-ca.crt | 100 +++++++++++++++----
.../xmlsec/signature/support/inter1A-ca.key | 27 ++++++
.../xmlsec/signature/support/inter1A1-ca.crt | 101 +++++++++++++++----
.../xmlsec/signature/support/inter1A1-ca.key | 27 ++++++
.../xmlsec/signature/support/inter1A1-v1-empty.crl | 16 +--
.../signature/support/inter1A1-v1-expired.crl | 17 ++--
.../xmlsec/signature/support/inter1A1-v1.crl | 17 ++--
.../xmlsec/signature/support/inter1A1-v2.crl | 21 ++--
.../xmlsec/signature/support/inter1B-ca.crt | 100 +++++++++++++++----
.../xmlsec/signature/support/inter1B-ca.key | 27 ++++++
.../xmlsec/signature/support/inter2A-ca.crt | 100 +++++++++++++++----
.../xmlsec/signature/support/inter2A-ca.key | 27 ++++++
.../xmlsec/signature/support/inter2B-ca.crt | 100 +++++++++++++++----
.../xmlsec/signature/support/inter2B-ca.key | 27 ++++++
.../opensaml/xmlsec/signature/support/root1-ca.crt | 37 ++++---
.../opensaml/xmlsec/signature/support/root1-ca.key | 27 ++++++
.../opensaml/xmlsec/signature/support/root2-ca.crt | 37 ++++---
.../opensaml/xmlsec/signature/support/root2-ca.key | 27 ++++++
.../opensaml/xmlsec/signature/support/root3-ca.crt | 37 ++++---
.../opensaml/xmlsec/signature/support/root3-ca.key | 27 ++++++
26 files changed, 1049 insertions(+), 278 deletions(-)
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.crt
index d5820a2..7d0a35e 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.crt
@@ -1,23 +1,89 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=inter1A1-ca
+ Validity
+ Not Before: Feb 3 01:32:36 2017 GMT
+ Not After : Feb 3 01:32:46 2017 GMT
+ Subject: CN=foo.example.org
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:f1:68:f3:e9:48:47:16:79:b1:61:4a:b0:87:81:
+ 6b:94:31:59:0b:f3:df:94:4a:94:ac:58:88:fd:21:
+ 1b:ea:e3:f0:6d:df:50:77:20:aa:08:79:cc:98:f2:
+ ef:56:78:4a:84:71:99:4f:ab:f6:cc:18:63:10:f8:
+ 3d:6e:bf:e7:84:12:83:8b:ad:93:3d:5c:5c:21:b1:
+ 37:a8:59:e5:8f:44:c0:96:ca:b3:39:9f:c2:d8:4b:
+ 6e:86:a8:ff:3a:e4:e5:d1:4e:8b:03:bb:26:80:51:
+ 58:c5:fe:57:fe:91:91:68:2c:4a:1d:08:d8:3e:03:
+ 45:d5:22:ec:6d:db:de:ad:60:f1:6c:55:7c:1b:37:
+ f5:c3:2c:b5:37:77:b6:70:a9:b9:0a:39:37:95:92:
+ 96:0e:20:84:54:e0:b7:73:c2:f6:89:0e:ae:14:aa:
+ 90:3b:1a:24:09:35:00:b8:f9:c7:69:f0:c5:0e:86:
+ 76:c4:29:c9:79:70:b8:40:37:24:7a:c1:3c:6d:ab:
+ 1c:0c:10:4d:75:0b:e6:d7:86:ce:31:cc:e4:bf:a5:
+ df:97:75:1a:8d:32:19:c6:8e:be:08:35:83:4b:50:
+ c6:5a:d3:59:cd:4b:92:bc:01:f8:63:88:bf:75:01:
+ 97:2b:4c:cc:57:d3:ad:d2:e5:ad:93:ec:f0:10:63:
+ dc:8b
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints:
+ CA:FALSE
+ Netscape Cert Type:
+ SSL Client, SSL Server
+ X509v3 Key Usage: critical
+ Digital Signature, Non Repudiation, Key Encipherment
+ Netscape Comment:
+ OpenSSL Generated Certificate
+ X509v3 Subject Key Identifier:
+ DA:C8:54:0C:F4:BA:23:DB:9E:A4:CD:C5:16:66:CF:5F:92:31:C7:67
+ X509v3 Authority Key Identifier:
+ keyid:A7:B8:9A:C3:6F:23:5C:93:B6:EE:FC:26:29:C4:B1:43:5E:74:80:22
+ DirName:/CN=inter1A-ca
+ serial:01
+
+ X509v3 Subject Alternative Name:
+ DNS:foo.example.org, URI:https://foo.example.org/sp
+ Signature Algorithm: sha256WithRSAEncryption
+ 9d:c8:f1:ea:fc:23:25:1d:0f:37:18:6a:5d:fe:bc:5b:92:0d:
+ 7a:cc:3b:05:54:5d:53:53:cc:39:d4:99:3d:3a:49:07:de:05:
+ f1:a1:f2:51:9f:e9:08:3b:ce:d5:8e:f5:87:37:12:ff:ce:4d:
+ a0:be:f6:f2:67:1f:0f:f3:9c:95:2c:79:c9:96:aa:71:ef:2e:
+ ee:7e:50:f7:c3:4a:d3:a2:d9:20:7d:a7:10:24:62:03:de:a3:
+ 66:0e:9c:e2:77:79:9d:99:42:8d:3b:54:b1:57:7e:d1:32:2f:
+ 5e:5f:23:84:1b:0e:ca:50:56:59:a1:a5:76:2f:23:bd:bd:1a:
+ 4d:e5:6f:ce:d4:3f:6c:32:13:5d:c2:61:0d:dc:c3:d8:2a:fd:
+ fb:b8:1a:7c:57:92:f9:9e:4a:04:b6:bd:33:46:cd:38:0f:46:
+ fa:ec:ac:0e:ac:b5:f7:72:da:74:3b:2a:0c:6d:c8:54:78:f4:
+ 94:e7:0b:e6:f6:34:dd:44:f7:2a:8a:bf:b6:87:b7:8a:6e:14:
+ 87:a7:ad:56:20:b5:1f:fc:d1:6e:db:30:5f:28:53:78:83:4e:
+ a1:2d:91:3e:ad:d5:b4:fe:31:a7:84:ba:a5:93:cf:49:a3:0e:
+ cf:1d:fd:95:02:24:1e:45:71:a1:ad:79:8e:41:8a:4f:26:ce:
+ 0f:b1:ea:8f
-----BEGIN CERTIFICATE-----
-MIIDvzCCAqegAwIBAgIBAzANBgkqhkiG9w0BAQQFADA3MRIwEAYDVQQKEwlJbnRl
-cm5ldDIxITAfBgNVBAMTGFRlc3QgSW50ZXJtZWRpYXRlIENBIDFBMTAeFw0wODAy
-MTYwMzAyNDlaFw0wODAyMTcwMzAyNDlaMC4xEjAQBgNVBAoTCUludGVybmV0MjEY
-MBYGA1UEAxMPZm9vLmV4YW1wbGUub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
-MIIBCgKCAQEAsGbKLU+WcttGI11GkNWVc729HnjWtN/7NmkWwrXTBJyAGjLqhyfC
-VEDeYmj9BVoLvFy0hLJiXUk889cYy8JTSiZEMRC+JF48yqO12/8XgbuSrq9+9J7J
-q04uDkJSXGwp6qu0AtYREd5C5NsOG+7gdWRH4ZxDC2KWKWWMwBb1gT5+g+VHGm8m
-dypaI6SHFApoXrAAV1f19SeBGmwNinoqSY1+j/04Xc0fXD/k4O7yH/M7QhBsab71
-/PDy1yZ6JtctCfoInMlE/9uSHPUNkyySdqCXF2WB4HVvXroktD4SLD3ij2dxbWMG
-HRvgb4Qflb0bj7UpIFUSWpnEghdGKE9LnwIDAQABo4HeMIHbMAkGA1UdEwQCMAAw
-EQYJYIZIAYb4QgEBBAQDAgbAMA4GA1UdDwEB/wQEAwIF4DAsBglghkgBhvhCAQ0E
-HxYdT3BlblNTTCBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFCJqGlFd
-UrRHqGUAu5SpAOnSFuTJMF4GA1UdIwRXMFWAFKbRZC6vsZ3HpiOLO6pAOju2R4Gm
-oTqkODA2MRIwEAYDVQQKEwlJbnRlcm5ldDIxIDAeBgNVBAMTF1Rlc3QgSW50ZXJt
-ZWRpYXRlIENBIDFBggEBMA0GCSqGSIb3DQEBBAUAA4IBAQA/DOGv3m0ff2Lr188R
-hIcHMoQiyVRn9WA8+7dPdXnGWdA7M38FwhI85BaJQX0hv4pk0YJHGVeLUdm9D3HG
-o3k8l4quV7OTHKQ9Lg0VGslY8srSxB/5K/47pP4AGhEjmWgsFny4VaekFzma+anu
-WUBAyzMZBi0dSxLQwg7AzpnArEnHpaSZSZeI/yjBijVMICoCDlbZMTXDC7fw6RBt
-nzl3Mr10Q//bvJ6zG/PMot8egXWLEnvMa/o0s3G1083vCqy+WqDAqI5bGDOZTYFf
-2mD4OP8GrieSvMu+l7cNfwcOc+6fhvH5pjmglNSl6ikLfnyJUSr5DzpioM1MbXqI
-L9c4
+MIIDoTCCAomgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAWMRQwEgYDVQQDEwtpbnRl
+cjFBMS1jYTAeFw0xNzAyMDMwMTMyMzZaFw0xNzAyMDMwMTMyNDZaMBoxGDAWBgNV
+BAMTD2Zvby5leGFtcGxlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
+ggEBAPFo8+lIRxZ5sWFKsIeBa5QxWQvz35RKlKxYiP0hG+rj8G3fUHcgqgh5zJjy
+71Z4SoRxmU+r9swYYxD4PW6/54QSg4utkz1cXCGxN6hZ5Y9EwJbKszmfwthLboao
+/zrk5dFOiwO7JoBRWMX+V/6RkWgsSh0I2D4DRdUi7G3b3q1g8WxVfBs39cMstTd3
+tnCpuQo5N5WSlg4ghFTgt3PC9okOrhSqkDsaJAk1ALj5x2nwxQ6GdsQpyXlwuEA3
+JHrBPG2rHAwQTXUL5teGzjHM5L+l35d1Go0yGcaOvgg1g0tQxlrTWc1LkrwB+GOI
+v3UBlytMzFfTrdLlrZPs8BBj3IsCAwEAAaOB9TCB8jAJBgNVHRMEAjAAMBEGCWCG
+SAGG+EIBAQQEAwIGwDAOBgNVHQ8BAf8EBAMCBeAwLAYJYIZIAYb4QgENBB8WHU9w
+ZW5TU0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBTayFQM9Loj256k
+zcUWZs9fkjHHZzA9BgNVHSMENjA0gBSnuJrDbyNck7bu/CYpxLFDXnSAIqEZpBcw
+FTETMBEGA1UEAxMKaW50ZXIxQS1jYYIBATA2BgNVHREELzAtgg9mb28uZXhhbXBs
+ZS5vcmeGGmh0dHBzOi8vZm9vLmV4YW1wbGUub3JnL3NwMA0GCSqGSIb3DQEBCwUA
+A4IBAQCdyPHq/CMlHQ83GGpd/rxbkg16zDsFVF1TU8w51Jk9OkkH3gXxofJRn+kI
+O87VjvWHNxL/zk2gvvbyZx8P85yVLHnJlqpx7y7uflD3w0rTotkgfacQJGID3qNm
+Dpzid3mdmUKNO1SxV37RMi9eXyOEGw7KUFZZoaV2LyO9vRpN5W/O1D9sMhNdwmEN
+3MPYKv37uBp8V5L5nkoEtr0zRs04D0b67KwOrLX3ctp0OyoMbchUePSU5wvm9jTd
+RPcqir+2h7eKbhSHp61WILUf/NFu2zBfKFN4g06hLZE+rdW0/jGnhLqlk89Jow7P
+Hf2VAiQeRXGhrXmOQYpPJs4PseqP
-----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.key
new file mode 100644
index 0000000..6435f9e
--- /dev/null
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.crt
index 429b72b..9fb6373 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.crt
@@ -1,23 +1,89 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=inter1A1-ca
+ Validity
+ Not Before: Feb 3 01:32:45 2017 GMT
+ Not After : Jan 27 01:32:45 2047 GMT
+ Subject: CN=foo.example.org
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:bf:dc:9d:0c:4b:96:56:15:59:ca:a8:0a:ca:47:
+ fc:90:25:e6:33:52:ef:c8:7d:69:b7:f8:a3:5a:37:
+ dd:58:ae:65:ef:f4:d9:83:86:51:d3:0e:32:ac:6e:
+ af:80:4b:c0:58:63:b4:de:c8:56:10:0c:bf:e6:21:
+ 1f:b3:bc:fe:03:b1:a7:dd:e8:26:7a:c6:e1:0f:e0:
+ 78:22:e0:33:30:00:b7:0e:ae:1e:02:5c:8b:1c:48:
+ 08:1f:5a:4c:d7:f2:b9:9e:0a:3c:02:44:c2:5e:70:
+ e2:2f:09:ee:27:5e:d5:e0:4a:fd:64:a2:04:1e:bf:
+ 9b:22:a6:40:1d:7d:3e:74:54:f4:a6:52:be:0b:40:
+ 9b:68:a3:5d:db:3b:5d:81:eb:68:33:2f:11:cd:44:
+ b3:0c:96:8a:b9:14:36:1b:58:93:aa:75:73:ea:06:
+ 7d:7d:b8:60:bf:81:35:b2:77:3d:e4:fa:89:d5:c0:
+ a9:40:67:1e:ad:ef:50:e5:5e:c0:ad:85:33:07:1f:
+ 08:8a:2c:e2:ab:be:00:c2:4a:9e:56:e4:c0:5f:07:
+ 30:18:90:47:5d:c1:b7:2c:98:1d:0c:34:55:81:3e:
+ 54:75:71:0c:ad:17:67:da:7a:8e:f4:06:aa:fe:52:
+ 01:f7:1d:18:3c:d1:00:01:e9:40:db:15:a8:74:1a:
+ b4:59
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints:
+ CA:FALSE
+ Netscape Cert Type:
+ SSL Client, SSL Server
+ X509v3 Key Usage: critical
+ Digital Signature, Non Repudiation, Key Encipherment
+ Netscape Comment:
+ OpenSSL Generated Certificate
+ X509v3 Subject Key Identifier:
+ 31:A2:3C:F2:49:DE:BB:AC:B2:A0:53:6D:D8:18:F4:6D:9D:F7:0E:37
+ X509v3 Authority Key Identifier:
+ keyid:A7:B8:9A:C3:6F:23:5C:93:B6:EE:FC:26:29:C4:B1:43:5E:74:80:22
+ DirName:/CN=inter1A-ca
+ serial:01
+
+ X509v3 Subject Alternative Name:
+ DNS:foo.example.org, URI:https://foo.example.org/sp
+ Signature Algorithm: sha256WithRSAEncryption
+ 5e:e1:c7:ed:c7:a0:03:d6:fe:31:74:06:ea:80:98:13:43:9b:
+ d7:34:76:b4:39:d2:55:11:14:55:07:95:34:3f:1d:18:91:48:
+ 23:d1:5a:4e:2a:f1:a0:d6:6f:88:a6:31:8a:c7:f2:7b:32:31:
+ 71:b0:ba:8c:37:c4:36:82:42:31:0d:47:33:8a:44:c3:59:04:
+ e2:7b:94:1f:54:88:22:a7:57:6a:64:fa:01:5c:de:d4:40:9e:
+ 90:2c:67:42:36:38:11:07:2b:ef:0d:db:56:a5:08:ef:cd:a7:
+ 6d:cb:15:b0:d9:af:42:a6:f6:b8:dd:70:dd:70:54:9c:5e:7f:
+ 15:f2:aa:77:0d:d8:a2:0c:e1:26:37:14:38:94:1b:26:27:4f:
+ a5:9b:c6:e1:1b:c5:6f:60:9c:68:e5:07:b9:06:59:9e:2b:97:
+ b2:8b:ed:20:8a:66:9e:73:b8:91:45:a2:64:d0:d5:19:89:34:
+ f2:48:1f:58:7a:8c:37:2f:5e:c3:90:f6:b4:60:cf:5c:98:f9:
+ ac:d9:93:c0:ab:b9:f3:2e:90:0e:ec:b2:bd:74:c1:6b:2d:70:
+ ba:2b:4f:38:77:ef:98:98:33:12:7f:dd:06:c3:cd:84:ae:f1:
+ 41:c6:29:d5:13:01:e6:04:73:0c:0c:26:cf:d3:b7:2d:76:df:
+ 20:41:a0:1b
-----BEGIN CERTIFICATE-----
-MIIDvzCCAqegAwIBAgIBATANBgkqhkiG9w0BAQQFADA3MRIwEAYDVQQKEwlJbnRl
-cm5ldDIxITAfBgNVBAMTGFRlc3QgSW50ZXJtZWRpYXRlIENBIDFBMTAeFw0wODAy
-MTYwMjU4MzJaFw0yODAyMTEwMjU4MzJaMC4xEjAQBgNVBAoTCUludGVybmV0MjEY
-MBYGA1UEAxMPZm9vLmV4YW1wbGUub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
-MIIBCgKCAQEAsGbKLU+WcttGI11GkNWVc729HnjWtN/7NmkWwrXTBJyAGjLqhyfC
-VEDeYmj9BVoLvFy0hLJiXUk889cYy8JTSiZEMRC+JF48yqO12/8XgbuSrq9+9J7J
-q04uDkJSXGwp6qu0AtYREd5C5NsOG+7gdWRH4ZxDC2KWKWWMwBb1gT5+g+VHGm8m
-dypaI6SHFApoXrAAV1f19SeBGmwNinoqSY1+j/04Xc0fXD/k4O7yH/M7QhBsab71
-/PDy1yZ6JtctCfoInMlE/9uSHPUNkyySdqCXF2WB4HVvXroktD4SLD3ij2dxbWMG
-HRvgb4Qflb0bj7UpIFUSWpnEghdGKE9LnwIDAQABo4HeMIHbMAkGA1UdEwQCMAAw
-EQYJYIZIAYb4QgEBBAQDAgbAMA4GA1UdDwEB/wQEAwIF4DAsBglghkgBhvhCAQ0E
-HxYdT3BlblNTTCBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFCJqGlFd
-UrRHqGUAu5SpAOnSFuTJMF4GA1UdIwRXMFWAFKbRZC6vsZ3HpiOLO6pAOju2R4Gm
-oTqkODA2MRIwEAYDVQQKEwlJbnRlcm5ldDIxIDAeBgNVBAMTF1Rlc3QgSW50ZXJt
-ZWRpYXRlIENBIDFBggEBMA0GCSqGSIb3DQEBBAUAA4IBAQCPVcnH2ZVq99o7Ea+z
-+lWQxojhERBqlJbTW6TJQtUMBj7ZFSqqpm0D6dfk2x1X22nlHpUmYTsDkS0pPPZ7
-OSd21P85hhRvKnUY7tCKNHiiSnZDrWg/v9ypvi9nDnyj/8XCvie8TMArnWY89rcL
-EeQX2OdNK0wJVIV+yt4IPV/cObhLUHlw8rmikiJGY0yVtaE/iEb8vyFXtYvVZ6Gl
-47/LGvVb4UsJKrm9U91Uu0YHEVCOTUX6j3oTFZpr3xnjO8p/2XRjd5+aSvrl8+oU
-mGEVtbCcuXnkOOd5oaQxpJsCja9WkTgwDaQOe0mx+ohTufhgEEPeM+Yjdg0IFBKC
-2pZK
+MIIDoTCCAomgAwIBAgIBATANBgkqhkiG9w0BAQsFADAWMRQwEgYDVQQDEwtpbnRl
+cjFBMS1jYTAeFw0xNzAyMDMwMTMyNDVaFw00NzAxMjcwMTMyNDVaMBoxGDAWBgNV
+BAMTD2Zvby5leGFtcGxlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
+ggEBAL/cnQxLllYVWcqoCspH/JAl5jNS78h9abf4o1o33ViuZe/02YOGUdMOMqxu
+r4BLwFhjtN7IVhAMv+YhH7O8/gOxp93oJnrG4Q/geCLgMzAAtw6uHgJcixxICB9a
+TNfyuZ4KPAJEwl5w4i8J7ide1eBK/WSiBB6/myKmQB19PnRU9KZSvgtAm2ijXds7
+XYHraDMvEc1EswyWirkUNhtYk6p1c+oGfX24YL+BNbJ3PeT6idXAqUBnHq3vUOVe
+wK2FMwcfCIos4qu+AMJKnlbkwF8HMBiQR13BtyyYHQw0VYE+VHVxDK0XZ9p6jvQG
+qv5SAfcdGDzRAAHpQNsVqHQatFkCAwEAAaOB9TCB8jAJBgNVHRMEAjAAMBEGCWCG
+SAGG+EIBAQQEAwIGwDAOBgNVHQ8BAf8EBAMCBeAwLAYJYIZIAYb4QgENBB8WHU9w
+ZW5TU0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBQxojzySd67rLKg
+U23YGPRtnfcONzA9BgNVHSMENjA0gBSnuJrDbyNck7bu/CYpxLFDXnSAIqEZpBcw
+FTETMBEGA1UEAxMKaW50ZXIxQS1jYYIBATA2BgNVHREELzAtgg9mb28uZXhhbXBs
+ZS5vcmeGGmh0dHBzOi8vZm9vLmV4YW1wbGUub3JnL3NwMA0GCSqGSIb3DQEBCwUA
+A4IBAQBe4cftx6AD1v4xdAbqgJgTQ5vXNHa0OdJVERRVB5U0Px0YkUgj0VpOKvGg
+1m+IpjGKx/J7MjFxsLqMN8Q2gkIxDUczikTDWQTie5QfVIgip1dqZPoBXN7UQJ6Q
+LGdCNjgRByvvDdtWpQjvzadtyxWw2a9Cpva43XDdcFScXn8V8qp3DdiiDOEmNxQ4
+lBsmJ0+lm8bhG8VvYJxo5Qe5BlmeK5eyi+0gimaec7iRRaJk0NUZiTTySB9Yeow3
+L17DkPa0YM9cmPms2ZPAq7nzLpAO7LK9dMFrLXC6K084d++YmDMSf90Gw82ErvFB
+xinVEwHmBHMMDCbP07ctdt8gQaAb
-----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.key
index 4f9ea04..86ebe42 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.key
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.key
@@ -1,27 +1,27 @@
-----BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEAsGbKLU+WcttGI11GkNWVc729HnjWtN/7NmkWwrXTBJyAGjLq
-hyfCVEDeYmj9BVoLvFy0hLJiXUk889cYy8JTSiZEMRC+JF48yqO12/8XgbuSrq9+
-9J7Jq04uDkJSXGwp6qu0AtYREd5C5NsOG+7gdWRH4ZxDC2KWKWWMwBb1gT5+g+VH
-Gm8mdypaI6SHFApoXrAAV1f19SeBGmwNinoqSY1+j/04Xc0fXD/k4O7yH/M7QhBs
-ab71/PDy1yZ6JtctCfoInMlE/9uSHPUNkyySdqCXF2WB4HVvXroktD4SLD3ij2dx
-bWMGHRvgb4Qflb0bj7UpIFUSWpnEghdGKE9LnwIDAQABAoIBAGrGPTiCBSoOqfy7
-9/uxHJ6LSc8JC8U+EjwUDi/biRgwdqXlDeqzWUBQZ4ufyw+TOqlQYAA2Ta3zp85c
-82hafrnSQdKFNOKknB14TJsWZC8lz5qnJayB9MYZM210HZBN9G1Uc0iINJrhMxJ9
-uaOUyw6jnZLlV/urOANksXaQLxiELxhUS4r3XrUYUuZbOCvKVquJMBjYtsCjpzhA
-TTPz5Hdq3ezzaeZ+Syb4DfZm6dNLBpvHTk6XF4mTCi7ZS6OR/rTfccb8ABzc8ZwO
-SUL61h0ubNpjave1rm6J746NLKFPVOa2aYwIdjvqaTNwyvycCEc7syehiVk1s6EW
-3Qdk4+kCgYEA2HuIaTJMLQnO8CSmJQ1kKhJXfktHFRxg1v0213ZgzEu84X9b1xKI
-XXAAWCqACspBykH1lqwqjlxBc2BkDWVwxKdDeWm3CsLPXpUTpjALal6czx2s+6ku
-q6IHRBf63JlTHAPYlrli33Gx60YMoJW8qHL0lBYz76mkM5YE+5SzLwUCgYEA0Jo5
-+wXZQLVdK14slFSGl8grBtugvyAfSjyMdVOgMgQXhxrvLUEfYba942rnRWKiFuLp
-AfW9t/mE88LpuQ+1PaBPU5l89a2sDIu4juf437ZbwPLscjCwlIJ68E1LQw7x/TYt
-cEOo4u0AimQzAN2ciEjCFvuuqKPC/4+FIPuWaVMCgYEAzzNVuhJJNOZpahI578bk
-cxxBIAFfFManrb6IqiuEtKVdMJvcxHrZiE02Fyz+htVVqQf+zusUhFOq1YqR2PyZ
-ta++dkwHxUX2gzm+p9beZj4OanKl6e3hXKdluvgUxOX/1RWdTY49I07IEz9lwKHx
-A22byM2DgkVlg3Z4aG/IHR0CgYBONxW4XogIMDif8y6p60uQC7i+WIlcQHIbBrrv
-nwx41Hnx6ZJ2mG1o2Pk4FTRkGsiF5kzRtE+PdNp5/8Jc5lvhoIM96FYnVBgnmBf6
-VVZGo3yhyzQG2OTMumPYSFMI8MihVbgR2PyxIYZLXaiWEYIIw6cqsPHbP5P0+N5E
-8LCECwKBgQCoJL14pEzGVOZCQTbzjJ6/I7XbL82iE6XCJO3x3gKyWTuhBZR0wuKg
-MtvOQDN55MR09GOmAFX7F4nn2C9EeixSya5AVNCoBO1MplGd9mIipxdoZSn5E37n
-8FCMR/vdUhXGC7XCH0jrW/omgj3bJapTmLnOsiW0vyZndILYx39msA==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-----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.crt
index 3e2fba0..326e78d 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.crt
@@ -1,23 +1,89 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 3 (0x3)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=inter1A1-ca
+ Validity
+ Not Before: Feb 3 01:32:48 2017 GMT
+ Not After : Jan 27 01:32:48 2047 GMT
+ Subject: CN=foo.example.org
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:9f:0f:d3:6c:22:be:60:2f:61:d5:ad:de:90:5e:
+ 0b:26:5c:4e:c7:fd:3d:13:41:18:e0:d0:44:92:7a:
+ 15:d9:3e:1e:3c:66:2b:4a:92:8f:ab:eb:0f:35:dd:
+ e4:d4:66:18:0f:1c:64:c2:89:2a:3f:89:f6:67:c8:
+ f5:4d:0f:28:ba:a9:31:f8:d2:82:e5:e4:7c:e5:96:
+ 42:ca:45:b7:16:f3:91:fa:95:2a:f1:21:1d:cd:32:
+ fb:7e:cb:95:c6:80:99:6a:fa:86:9a:58:4e:df:ee:
+ 12:3d:da:6e:fc:e5:4d:0b:c6:93:6b:1d:cc:ab:fc:
+ 05:39:b0:15:21:b3:b1:74:25:0d:c2:87:53:98:d7:
+ b1:c4:75:28:58:12:1d:0b:a6:be:b5:53:f5:38:08:
+ bc:f6:e4:55:d7:98:e6:36:0b:af:cc:9f:e0:97:72:
+ 76:6f:8e:70:13:a0:34:44:74:27:07:77:f7:cc:4b:
+ 8e:e3:7d:a0:6e:5a:f1:d8:8e:53:c2:15:af:c8:e3:
+ 85:ef:80:40:83:c2:4a:75:de:e2:e7:8c:32:72:2c:
+ 24:f9:ca:90:e0:8d:8a:0c:10:0a:ce:b4:bc:e7:91:
+ aa:0b:87:5a:e1:94:92:d1:62:67:0f:57:f2:cb:db:
+ 09:b8:99:74:80:57:6f:56:65:98:fa:7b:72:08:fe:
+ 23:1d
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints:
+ CA:FALSE
+ Netscape Cert Type:
+ SSL Client, SSL Server
+ X509v3 Key Usage: critical
+ Digital Signature, Non Repudiation, Key Encipherment
+ Netscape Comment:
+ OpenSSL Generated Certificate
+ X509v3 Subject Key Identifier:
+ 8C:86:43:1F:DC:A2:70:57:53:17:B6:F5:0E:2F:06:3B:36:09:84:E3
+ X509v3 Authority Key Identifier:
+ keyid:A7:B8:9A:C3:6F:23:5C:93:B6:EE:FC:26:29:C4:B1:43:5E:74:80:22
+ DirName:/CN=inter1A-ca
+ serial:01
+
+ X509v3 Subject Alternative Name:
+ DNS:foo.example.org, URI:https://foo.example.org/sp
+ Signature Algorithm: sha256WithRSAEncryption
+ 38:8f:a1:15:d9:14:03:32:d7:8b:8e:ca:e3:5f:1a:49:be:53:
+ d5:3b:86:e3:a7:4e:2a:2d:22:40:c6:a2:4c:e7:b1:02:a1:ce:
+ 42:f2:31:a6:36:04:64:66:64:90:8d:51:b8:d0:6b:06:2e:55:
+ 47:d8:59:b6:f9:3e:08:b8:20:14:51:ad:cb:9b:e1:68:86:c5:
+ 8f:e3:d4:50:02:e6:61:f3:88:19:62:f2:99:d6:bf:e0:f5:63:
+ 60:01:f1:ab:11:19:d6:a6:55:6c:07:f2:71:ff:25:b6:cc:ed:
+ 68:b7:30:9e:ce:d8:7d:0d:9f:72:ba:3e:65:18:7a:48:ac:cd:
+ 53:4d:8f:c2:6f:a4:d0:24:14:48:22:0f:ac:1f:70:41:f9:38:
+ 1b:5d:1f:61:be:d2:99:75:d1:55:11:9e:08:74:64:84:37:64:
+ 94:27:78:8f:8b:90:f1:a2:17:f0:d9:c2:3c:c3:e1:cf:d7:77:
+ 26:05:52:80:30:ec:b5:56:32:63:c1:c0:d1:22:e5:08:78:f0:
+ 65:57:e5:6b:8f:b4:11:12:90:02:45:70:33:c8:2c:80:76:70:
+ dc:d1:f0:91:00:66:16:c2:f1:f9:ce:61:93:01:da:bf:b4:0f:
+ 03:6d:0e:60:fd:90:05:01:dc:43:c8:ac:2a:60:38:ae:ed:e6:
+ 06:15:94:da
-----BEGIN CERTIFICATE-----
-MIIDvzCCAqegAwIBAgIBAjANBgkqhkiG9w0BAQQFADA3MRIwEAYDVQQKEwlJbnRl
-cm5ldDIxITAfBgNVBAMTGFRlc3QgSW50ZXJtZWRpYXRlIENBIDFBMTAeFw0wODAy
-MTYwMzAwMTVaFw0yODAyMTEwMzAwMTVaMC4xEjAQBgNVBAoTCUludGVybmV0MjEY
-MBYGA1UEAxMPZm9vLmV4YW1wbGUub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
-MIIBCgKCAQEAsGbKLU+WcttGI11GkNWVc729HnjWtN/7NmkWwrXTBJyAGjLqhyfC
-VEDeYmj9BVoLvFy0hLJiXUk889cYy8JTSiZEMRC+JF48yqO12/8XgbuSrq9+9J7J
-q04uDkJSXGwp6qu0AtYREd5C5NsOG+7gdWRH4ZxDC2KWKWWMwBb1gT5+g+VHGm8m
-dypaI6SHFApoXrAAV1f19SeBGmwNinoqSY1+j/04Xc0fXD/k4O7yH/M7QhBsab71
-/PDy1yZ6JtctCfoInMlE/9uSHPUNkyySdqCXF2WB4HVvXroktD4SLD3ij2dxbWMG
-HRvgb4Qflb0bj7UpIFUSWpnEghdGKE9LnwIDAQABo4HeMIHbMAkGA1UdEwQCMAAw
-EQYJYIZIAYb4QgEBBAQDAgbAMA4GA1UdDwEB/wQEAwIF4DAsBglghkgBhvhCAQ0E
-HxYdT3BlblNTTCBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFCJqGlFd
-UrRHqGUAu5SpAOnSFuTJMF4GA1UdIwRXMFWAFKbRZC6vsZ3HpiOLO6pAOju2R4Gm
-oTqkODA2MRIwEAYDVQQKEwlJbnRlcm5ldDIxIDAeBgNVBAMTF1Rlc3QgSW50ZXJt
-ZWRpYXRlIENBIDFBggEBMA0GCSqGSIb3DQEBBAUAA4IBAQAFoKs7Wm+LwPfA6fnc
-6eXLXTfiLHdynJe4yQDlvLMfcR/qOXq0WMzLM1cDdZ+2sGCG+UPWso/uNUsclhdc
-kpd9SmyHFFatLdf+3SWvWCBy14GeJfk6A8A5VonRsXUowo1sZY9W8vII6XqJL12/
-eoDVHoA+QY5mOthnQH7yKpmYvxSiL6cvWqz+cJv6uxy0dlf+mh2I40J/Ucbh7DEc
-TZyvi3jVLMJTiOVwr5HU/jsGpOghsHZlpnGW2DYwq9eFqQvJkZxsI62S/qQG8c/z
-iedpdmVBwgTUd/7IN0FveEJfrHScwvRzjiEO3bOCC5o9VzbpO8gY/cA0Tl/sX53T
-uUOU
+MIIDoTCCAomgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAWMRQwEgYDVQQDEwtpbnRl
+cjFBMS1jYTAeFw0xNzAyMDMwMTMyNDhaFw00NzAxMjcwMTMyNDhaMBoxGDAWBgNV
+BAMTD2Zvby5leGFtcGxlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
+ggEBAJ8P02wivmAvYdWt3pBeCyZcTsf9PRNBGODQRJJ6Fdk+HjxmK0qSj6vrDzXd
+5NRmGA8cZMKJKj+J9mfI9U0PKLqpMfjSguXkfOWWQspFtxbzkfqVKvEhHc0y+37L
+lcaAmWr6hppYTt/uEj3abvzlTQvGk2sdzKv8BTmwFSGzsXQlDcKHU5jXscR1KFgS
+HQumvrVT9TgIvPbkVdeY5jYLr8yf4Jdydm+OcBOgNER0Jwd398xLjuN9oG5a8diO
+U8IVr8jjhe+AQIPCSnXe4ueMMnIsJPnKkOCNigwQCs60vOeRqguHWuGUktFiZw9X
+8svbCbiZdIBXb1ZlmPp7cgj+Ix0CAwEAAaOB9TCB8jAJBgNVHRMEAjAAMBEGCWCG
+SAGG+EIBAQQEAwIGwDAOBgNVHQ8BAf8EBAMCBeAwLAYJYIZIAYb4QgENBB8WHU9w
+ZW5TU0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBSMhkMf3KJwV1MX
+tvUOLwY7NgmE4zA9BgNVHSMENjA0gBSnuJrDbyNck7bu/CYpxLFDXnSAIqEZpBcw
+FTETMBEGA1UEAxMKaW50ZXIxQS1jYYIBATA2BgNVHREELzAtgg9mb28uZXhhbXBs
+ZS5vcmeGGmh0dHBzOi8vZm9vLmV4YW1wbGUub3JnL3NwMA0GCSqGSIb3DQEBCwUA
+A4IBAQA4j6EV2RQDMteLjsrjXxpJvlPVO4bjp04qLSJAxqJM57ECoc5C8jGmNgRk
+ZmSQjVG40GsGLlVH2Fm2+T4IuCAUUa3Lm+FohsWP49RQAuZh84gZYvKZ1r/g9WNg
+AfGrERnWplVsB/Jx/yW2zO1otzCezth9DZ9yuj5lGHpIrM1TTY/Cb6TQJBRIIg+s
+H3BB+TgbXR9hvtKZddFVEZ4IdGSEN2SUJ3iPi5Dxohfw2cI8w+HP13cmBVKAMOy1
+VjJjwcDRIuUIePBlV+Vrj7QREpACRXAzyCyAdnDc0fCRAGYWwvH5zmGTAdq/tA8D
+bQ5g/ZAFAdxDyKwqYDiu7eYGFZTa
-----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.key
new file mode 100644
index 0000000..da2d852
--- /dev/null
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.crt
index d1d9667..2d7ac3d 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.crt
@@ -1,21 +1,83 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=root1-ca
+ Validity
+ Not Before: Feb 3 01:32:37 2017 GMT
+ Not After : Jan 27 01:32:37 2047 GMT
+ Subject: CN=inter1A-ca
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:9d:9d:ab:bc:a3:9b:98:f5:8f:06:81:9c:ff:8d:
+ a1:2f:e8:ea:d3:91:78:71:31:8b:f4:08:1a:1c:79:
+ 4f:7c:ad:d9:d9:ac:bd:39:3a:50:09:b4:97:da:73:
+ 26:85:12:6e:6b:de:bc:46:22:a0:0b:49:cb:30:ac:
+ 8f:2d:9f:70:ce:58:8e:fb:b9:6d:e0:69:c3:75:40:
+ 9f:69:0e:d5:93:fb:5e:06:d4:a3:d1:32:e6:56:87:
+ 01:77:33:f5:b8:f6:0a:06:cb:bd:dc:24:9c:e1:b0:
+ ff:85:7c:94:97:fb:45:dd:52:48:4a:fc:f4:73:66:
+ dd:1d:93:86:e8:4a:37:92:5a:3e:6b:55:f5:59:48:
+ 64:c3:06:4e:d6:33:58:4b:bc:9c:61:d0:73:26:84:
+ 8c:8a:03:ab:fe:38:4e:97:54:a4:07:34:50:ab:7c:
+ 07:30:5f:a7:67:c3:e1:c2:8d:2a:81:90:57:d6:e5:
+ 68:b7:e7:84:ee:a6:82:9f:be:ce:ab:1b:65:76:e6:
+ 6e:64:b1:77:9d:21:5e:ed:2a:66:81:c1:46:4d:25:
+ df:98:f6:e6:9a:5d:10:d1:18:4a:85:cd:89:13:85:
+ e4:32:06:06:75:73:eb:0f:b4:55:93:e0:bb:09:a4:
+ 97:3e:be:77:d8:b4:f3:60:41:d1:d0:2c:84:90:25:
+ d3:0f
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Netscape Cert Type:
+ SSL CA, S/MIME CA, Object Signing CA
+ X509v3 Key Usage: critical
+ Digital Signature, Certificate Sign, CRL Sign
+ X509v3 Subject Key Identifier:
+ 3F:78:09:6B:36:A7:E4:B3:DE:82:1E:6B:79:65:36:BC:A5:03:B9:CE
+ X509v3 Authority Key Identifier:
+ keyid:C1:82:63:5D:DC:A4:15:64:71:FB:77:55:0D:A2:4E:35:C9:8E:7B:DC
+ DirName:/CN=root1-ca
+ serial:A2:15:F7:04:7E:B6:DF:8F
+
+ Signature Algorithm: sha256WithRSAEncryption
+ aa:8d:73:e5:06:be:50:75:98:a5:cc:1d:3e:f9:f5:49:b8:6c:
+ 6e:a5:e1:e2:32:75:20:77:4e:bd:56:c2:12:19:a1:bd:fc:f9:
+ a8:cb:17:06:a0:a8:43:9f:4e:00:d7:d4:25:33:08:32:b1:f5:
+ e5:0f:28:b4:7a:57:f0:8e:57:63:40:66:e1:a8:79:3f:b9:05:
+ c4:5a:eb:f8:f7:ee:0a:1c:bf:08:f7:f3:ba:84:71:28:60:0f:
+ 00:cb:6a:b4:d5:df:46:c3:98:1b:11:35:90:90:de:d9:77:c7:
+ 8e:78:4f:4f:e6:d5:7b:2c:90:71:6a:65:ed:96:a9:a4:e5:dd:
+ 45:7d:67:5e:d7:64:a3:68:ac:ab:26:9e:2b:71:82:e7:bb:ca:
+ 7f:08:5c:ca:9e:fa:2e:ac:99:ee:bf:95:bf:d8:d4:8a:b8:7a:
+ 34:72:9a:6a:44:a8:33:bb:b7:59:1b:63:24:3a:bf:2f:5e:9f:
+ 67:68:5b:4d:fb:45:f5:30:1d:5d:02:13:ad:4c:7a:ca:a1:1e:
+ 77:37:d9:e8:bc:6e:f4:5e:64:a6:22:36:37:07:d5:96:d9:a6:
+ 93:4b:34:10:66:55:6f:51:4d:85:cb:ac:07:c0:89:3f:f6:17:
+ 98:f1:9b:14:82:6a:88:3d:e2:50:cb:a5:56:48:f5:e2:ab:a0:
+ 43:5e:1c:4b
-----BEGIN CERTIFICATE-----
-MIIDjDCCAnSgAwIBAgIBATANBgkqhkiG9w0BAQQFADAtMRIwEAYDVQQKEwlJbnRl
-cm5ldDIxFzAVBgNVBAMTDlRlc3QgUm9vdCBDQSAxMB4XDTA4MDIxNjAyNDcxOFoX
-DTI4MDIxMTAyNDcxOFowNjESMBAGA1UEChMJSW50ZXJuZXQyMSAwHgYDVQQDExdU
-ZXN0IEludGVybWVkaWF0ZSBDQSAxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
-AQoCggEBALy5mrdKqaYlf+bAdeifTJ22FfyHbpLtL6rvg9Zlr3mQC+kmQ1A2H7nO
-pXuDGxiwdcFpLEmDHw7B2+p7ghfXvTeu7P7W4JIz4cBq/FhCSiG0hxuy7AQ21inc
-o4WJIz9250tWMC7HpELwpFPbfCdPG4jSYcq6fUH1Dp9t8gtL31LVwPgq1hoSEIK0
-3nKDQQe9l/wU9ZcS3HbwGOgP521bPUuOyHzYL49r4Te0ACo9Fcpn5JLQa9gzKgnQ
-i2O2lVUppsuCpinLJ4GW1q3Ivj1PniAXdLVfBf1CMyfl1WwbWnIBn2mskHKcV7z3
-8aaPdsH/7wUPVdPgQwj7ss1ZzKtQCYECAwEAAaOBrTCBqjAPBgNVHRMBAf8EBTAD
-AQH/MBEGCWCGSAGG+EIBAQQEAwIABzAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYE
-FL+8i4cdqPjsbNViSBisYTHNZgGxMFUGA1UdIwROMEyAFI9bMgOQsY4JbO1yrcG6
-nWgVhy3ioTGkLzAtMRIwEAYDVQQKEwlJbnRlcm5ldDIxFzAVBgNVBAMTDlRlc3Qg
-Um9vdCBDQSAxggEAMA0GCSqGSIb3DQEBBAUAA4IBAQBvtwKsWfoObKJECvK99LCH
-pyisrcfFV69QlIW1eP77iNz47GXmnAqA6mO3+5SDJujiAa+jXnPTcz1kLJsh6xvP
-aozkCGECRwkzgQMew+0LBHcnD5geYdwJosrw9NWhPNJ0MA51y/LrOO2DCTXmYrIH
-c/59ew5ed6/8a+EWLF7798ifBZZrlxDHLHR6Sn53ugVh0cBHw6LE/5AGG5Xf1Ysr
-Cn4ZpHLwNn+I30+f2mweOYCkB607D4fkZGBpii6l4XRTV0oMg2aLYMZNwXct6Rhr
-NCvatfLuvDskkS9gIoRZNj/It+hKqf8aZ5DK+mloLYS0sem4HpE4d2VwpQfG93IK
+MIIDPzCCAiegAwIBAgIBATANBgkqhkiG9w0BAQsFADATMREwDwYDVQQDEwhyb290
+MS1jYTAeFw0xNzAyMDMwMTMyMzdaFw00NzAxMjcwMTMyMzdaMBUxEzARBgNVBAMT
+CmludGVyMUEtY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdnau8
+o5uY9Y8GgZz/jaEv6OrTkXhxMYv0CBoceU98rdnZrL05OlAJtJfacyaFEm5r3rxG
+IqALScswrI8tn3DOWI77uW3gacN1QJ9pDtWT+14G1KPRMuZWhwF3M/W49goGy73c
+JJzhsP+FfJSX+0XdUkhK/PRzZt0dk4boSjeSWj5rVfVZSGTDBk7WM1hLvJxh0HMm
+hIyKA6v+OE6XVKQHNFCrfAcwX6dnw+HCjSqBkFfW5Wi354TupoKfvs6rG2V25m5k
+sXedIV7tKmaBwUZNJd+Y9uaaXRDRGEqFzYkTheQyBgZ1c+sPtFWT4LsJpJc+vnfY
+tPNgQdHQLISQJdMPAgMBAAGjgZswgZgwDwYDVR0TAQH/BAUwAwEB/zARBglghkgB
+hvhCAQEEBAMCAAcwDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBQ/eAlrNqfks96C
+Hmt5ZTa8pQO5zjBDBgNVHSMEPDA6gBTBgmNd3KQVZHH7d1UNok41yY573KEXpBUw
+EzERMA8GA1UEAxMIcm9vdDEtY2GCCQCiFfcEfrbfjzANBgkqhkiG9w0BAQsFAAOC
+AQEAqo1z5Qa+UHWYpcwdPvn1SbhsbqXh4jJ1IHdOvVbCEhmhvfz5qMsXBqCoQ59O
+ANfUJTMIMrH15Q8otHpX8I5XY0Bm4ah5P7kFxFrr+PfuChy/CPfzuoRxKGAPAMtq
+tNXfRsOYGxE1kJDe2XfHjnhPT+bVeyyQcWpl7ZappOXdRX1nXtdko2isqyaeK3GC
+57vKfwhcyp76LqyZ7r+Vv9jUirh6NHKaakSoM7u3WRtjJDq/L16fZ2hbTftF9TAd
+XQITrUx6yqEedzfZ6Lxu9F5kpiI2NwfVltmmk0s0EGZVb1FNhcusB8CJP/YXmPGb
+FIJqiD3iUMulVkj14qugQ14cSw==
-----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.key
new file mode 100644
index 0000000..aa6e448
--- /dev/null
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.crt
index 384a636..c1b2dea 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.crt
@@ -1,22 +1,83 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=inter1A-ca
+ Validity
+ Not Before: Feb 3 01:32:39 2017 GMT
+ Not After : Jan 27 01:32:39 2047 GMT
+ Subject: CN=inter1A1-ca
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:dd:5d:c0:6d:5a:0e:81:6d:12:35:92:09:cc:73:
+ 5e:69:6e:b8:8a:e3:39:d0:2e:39:f4:7d:48:9e:04:
+ 0c:f3:41:a0:b0:33:54:e5:2b:43:7d:ff:76:72:d0:
+ 10:c3:70:2a:0c:2f:5b:af:19:1f:a7:6e:10:c6:f8:
+ 8a:0d:a5:a1:25:7f:de:82:5c:b9:b9:99:b5:e5:1e:
+ 69:e1:6c:b6:da:1d:54:42:df:de:3f:31:95:e0:ea:
+ 81:79:0d:7e:e8:cb:6c:23:b1:b5:b2:ea:a6:b6:cf:
+ ef:00:24:32:35:a8:be:95:e5:bd:9a:c2:dc:67:20:
+ dc:8b:f8:6d:8a:65:4e:6f:bd:c5:7b:15:f5:60:19:
+ 56:b1:e2:9c:ec:e4:65:f4:78:40:30:84:58:dd:56:
+ ee:68:c9:33:08:6c:97:00:aa:07:0f:45:63:c4:32:
+ e9:a0:54:f5:13:d9:98:13:1d:b0:19:90:65:1d:ba:
+ 5f:cf:c7:29:fa:f5:18:41:c4:2d:7a:97:f4:08:ae:
+ 87:2f:fa:30:19:20:ec:f3:a4:21:70:f6:a6:c6:6d:
+ c7:69:03:19:4e:19:b2:f7:ac:27:3d:53:bc:38:48:
+ 80:a0:a6:1b:3b:9f:62:19:14:b0:b9:6e:c7:e0:b8:
+ d1:ab:56:91:0f:31:6f:b7:97:74:53:44:61:d2:d3:
+ 60:85
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Netscape Cert Type:
+ SSL CA, S/MIME CA, Object Signing CA
+ X509v3 Key Usage: critical
+ Digital Signature, Certificate Sign, CRL Sign
+ X509v3 Subject Key Identifier:
+ A7:B8:9A:C3:6F:23:5C:93:B6:EE:FC:26:29:C4:B1:43:5E:74:80:22
+ X509v3 Authority Key Identifier:
+ keyid:3F:78:09:6B:36:A7:E4:B3:DE:82:1E:6B:79:65:36:BC:A5:03:B9:CE
+ DirName:/CN=root1-ca
+ serial:01
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 82:8c:8d:92:e6:4a:a3:61:b0:97:6c:42:39:8e:c4:fd:d1:21:
+ de:5a:54:df:ea:42:b6:22:0b:50:20:df:a7:0e:21:0b:3f:b8:
+ d6:11:2c:22:aa:c1:7c:43:8f:e4:33:bd:9e:a6:1a:20:30:93:
+ 3a:50:18:28:fb:45:10:64:39:dc:59:97:e0:4b:21:7c:67:79:
+ 92:7c:12:34:44:6a:64:23:68:3e:d7:92:07:3b:95:1e:8e:35:
+ 77:f8:e5:7f:7a:77:00:52:1e:9c:77:4e:7d:70:08:9d:9b:1b:
+ 64:d5:d9:3e:19:42:4c:8f:ea:c6:a8:f0:cb:48:e9:65:3a:cc:
+ 17:bd:c2:34:d0:53:ca:fa:8b:76:19:bc:c7:90:02:be:c4:a1:
+ a9:ca:9c:56:c0:36:d0:9f:f9:23:59:76:7b:8a:85:0f:f4:c4:
+ 89:0e:15:cb:90:d6:5d:83:71:a7:e3:e7:e1:b6:27:2d:65:3a:
+ 19:0a:e2:1b:42:26:66:6d:01:01:dc:6a:43:56:10:ae:9a:fd:
+ 7f:2f:4f:3f:ba:ab:b8:f4:5f:b1:b5:ae:0d:7c:ab:84:7e:89:
+ ed:ba:8e:07:6d:4a:04:b2:0b:9d:d4:26:fe:d0:d8:bf:06:b8:
+ ee:fa:45:22:f3:87:af:43:d7:be:26:32:95:6f:93:25:e5:27:
+ 32:92:e2:78
-----BEGIN CERTIFICATE-----
-MIIDljCCAn6gAwIBAgIBATANBgkqhkiG9w0BAQQFADA2MRIwEAYDVQQKEwlJbnRl
-cm5ldDIxIDAeBgNVBAMTF1Rlc3QgSW50ZXJtZWRpYXRlIENBIDFBMB4XDTA4MDIx
-NjAyNTAyN1oXDTI4MDIxMTAyNTAyN1owNzESMBAGA1UEChMJSW50ZXJuZXQyMSEw
-HwYDVQQDExhUZXN0IEludGVybWVkaWF0ZSBDQSAxQTEwggEiMA0GCSqGSIb3DQEB
-AQUAA4IBDwAwggEKAoIBAQC4faOujGl1+5gC8SlsUn805CdmmncOvG8sGA5t2S9V
-DetiQAhQknNvjmghiWo/9UGXvQZIqdRlj3L8T6itrJPKBuDTVqCBHic1XYoXLIUD
-WqampQH0ehhbDCcghgshHunb3yaaaDeB0ZlgJJ/XqOqKvFcRbOSSWWZe+zDuiShK
-2WT0UZWIwC2+v01PEG8a5YUZYCVcQEmEAK/mg5og3B4PQ9Zy+iqMjDp3pcouan8L
-Svn59Lm65EEjafFnC/1bgl8xJUbrn4Ue/Y8yq8fI8S3SHwm05ojfhwyj/yAXEoZm
-pdDLZcWrl/mdpFo8Nud0w/tTG5SJ7qV09dfhgFx/VtW5AgMBAAGjga0wgaowDwYD
-VR0TAQH/BAUwAwEB/zARBglghkgBhvhCAQEEBAMCAAcwDgYDVR0PAQH/BAQDAgGG
-MB0GA1UdDgQWBBSm0WQur7Gdx6YjizuqQDo7tkeBpjBVBgNVHSMETjBMgBS/vIuH
-Haj47GzVYkgYrGExzWYBsaExpC8wLTESMBAGA1UEChMJSW50ZXJuZXQyMRcwFQYD
-VQQDEw5UZXN0IFJvb3QgQ0EgMYIBATANBgkqhkiG9w0BAQQFAAOCAQEADZNut4n5
-IzLbXMLbyqO2HdXiCw6JkTY2Mj6kIwngbfLMeRHWuPJmM2JOuA8Wk//OIzDJfpte
-d+YOAGCJ8yyAXsB5Qr/68YS8sRbmjYgB9jLiz0wg3p5fnBTX2st7EY4aVR4+7pAZ
-12uoPMJvHfd2nsCT01A7fs7qnsOWFnJBRvfDgzRwmx/wkTp8aW3Hvqw28sVnY8q7
-9GEEV1DU9sJxrb12pBzWyNLU0v9EiiEWdr0hS4K8D5Q7JmKbFPv1RfocX1ocEPDN
-EJMA53C2Y6rq8mHV6IsvzgucLfFCo0tlR2aXTvTJHuu1ddSOKtyVkHwC4cUEmzu3
-L9VaYDF1sVm6pw==
+MIIDOjCCAiKgAwIBAgIBATANBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDEwppbnRl
+cjFBLWNhMB4XDTE3MDIwMzAxMzIzOVoXDTQ3MDEyNzAxMzIzOVowFjEUMBIGA1UE
+AxMLaW50ZXIxQTEtY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd
+XcBtWg6BbRI1kgnMc15pbriK4znQLjn0fUieBAzzQaCwM1TlK0N9/3Zy0BDDcCoM
+L1uvGR+nbhDG+IoNpaElf96CXLm5mbXlHmnhbLbaHVRC394/MZXg6oF5DX7oy2wj
+sbWy6qa2z+8AJDI1qL6V5b2awtxnINyL+G2KZU5vvcV7FfVgGVax4pzs5GX0eEAw
+hFjdVu5oyTMIbJcAqgcPRWPEMumgVPUT2ZgTHbAZkGUdul/Pxyn69RhBxC16l/QI
+rocv+jAZIOzzpCFw9qbGbcdpAxlOGbL3rCc9U7w4SICgphs7n2IZFLC5bsfguNGr
+VpEPMW+3l3RTRGHS02CFAgMBAAGjgZMwgZAwDwYDVR0TAQH/BAUwAwEB/zARBglg
+hkgBhvhCAQEEBAMCAAcwDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSnuJrDbyNc
+k7bu/CYpxLFDXnSAIjA7BgNVHSMENDAygBQ/eAlrNqfks96CHmt5ZTa8pQO5zqEX
+pBUwEzERMA8GA1UEAxMIcm9vdDEtY2GCAQEwDQYJKoZIhvcNAQELBQADggEBAIKM
+jZLmSqNhsJdsQjmOxP3RId5aVN/qQrYiC1Ag36cOIQs/uNYRLCKqwXxDj+QzvZ6m
+GiAwkzpQGCj7RRBkOdxZl+BLIXxneZJ8EjREamQjaD7Xkgc7lR6ONXf45X96dwBS
+Hpx3Tn1wCJ2bG2TV2T4ZQkyP6sao8MtI6WU6zBe9wjTQU8r6i3YZvMeQAr7EoanK
+nFbANtCf+SNZdnuKhQ/0xIkOFcuQ1l2Dcafj5+G2Jy1lOhkK4htCJmZtAQHcakNW
+EK6a/X8vTz+6q7j0X7G1rg18q4R+ie26jgdtSgSyC53UJv7Q2L8GuO76RSLzh69D
+174mMpVvkyXlJzKS4ng=
-----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.key
new file mode 100644
index 0000000..0d0efdd
--- /dev/null
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEogIBAAKCAQEA3V3AbVoOgW0SNZIJzHNeaW64iuM50C459H1IngQM80GgsDNU
+5StDff92ctAQw3AqDC9brxkfp24QxviKDaWhJX/egly5uZm15R5p4Wy22h1UQt/e
+PzGV4OqBeQ1+6MtsI7G1suqmts/vACQyNai+leW9msLcZyDci/htimVOb73FexX1
+YBlWseKc7ORl9HhAMIRY3VbuaMkzCGyXAKoHD0VjxDLpoFT1E9mYEx2wGZBlHbpf
+z8cp+vUYQcQtepf0CK6HL/owGSDs86QhcPamxm3HaQMZThmy96wnPVO8OEiAoKYb
+O59iGRSwuW7H4LjRq1aRDzFvt5d0U0Rh0tNghQIDAQABAoIBAAQ5vOmZdXts/JL/
+NaascRnsHiOwkLLznvGWzqMNir29+/ZBFJbHS6OFE9q/NAK3CmZvJP3jqeIFTNav
+edsm1TulBDdS08zCLWGxQe4mqBrjwm8AXPqx1J2VfGE2K7z/3RGVW9WNex80Ouiy
+yC6UCQdNemAQ5ioly2/0jwq8QlIJsTXtePidJfU/P6/UKC7UGwq92ZXXJRJJ2Piz
+BFyvIb1xvAF+vlgoI/dArWZknPHFuguhIP0CVo0ZIH6zo7goAA7E9yRHPIJb3faU
+MlpZvihj6mmkl3PKot/FKT8J6pqo9/TVUYtmVGymSD9wmqAG04RjOaF8DGST16vN
+FCQSZ0ECgYEA/3olP0fuOzdQWty3mkP3abo8/TDJKr+aEjWJHJG2kSv0WWnmVmVP
+/fgBjFCaGZv+ryQZyf/49A7qqaFuBfoT3CJhUVhMN5xIZ8BBDaGg0bp9nQRRfTuR
+4axZ53WU/UO3TL15STim8ejCXgCCFE7ajkL4LV4kOqwOBrMRzHw+mTECgYEA3dG7
+75RbsZnWnr9gKDAjJAzpxb0vPYkSoW2YkZ5TWR75KMvsbc1wlDBhbY/C9L+75zg1
+1+GKxUhlyH8obyqgShUomT7xi0tzkZegRw/Gr/rwNLcpTWnkYa8tNOTFKahTRsEm
+MdbLdEkkgW+x9SEFcTPUdfaxjiNuXYhObP5555UCgYA8394ANiON+KAtBmq5V3ic
+uMPPkNBeX0lXDWqeZBocfVy78X/xFjL5UR8NUCdn8sO8990tRNENVoCT6uNMiUoy
+Kf8GYwPGPHcEQcs+dETdtJI5182TCZ65J1hEzr+xmXET2BIOYHFnMw8dVwGn1SI+
+w7ZfGQ+I63ZsIj8ben9wAQKBgEEK6/G/bfew5WbdNQPzwYojozTRWZXQqL7fFRq1
+8zixxVu6GBTGZdl+KkNnIUKFKkMNj3RC9V8N8JKO/rtCI4g1lhcBhvBSaovpixzr
+OlaF3YOHpbvGbipapIXbAxlI+0pG/r0kf7oUbHjr2KHJUgA0s3r3oG7OYuFYQ67g
+G7zVAoGAR5sJU5x5nKiqx38IZOEhkK1sMUvVyoC9STwd8uvoohjc+sNf79C+HIYB
+dJJJzGHPp7t5mYM2senUP6Dygyf2oNOXc7HcYYBPGEnCvkGUtBNYXHIMptf5d1Uw
+ieY27LUuUZTxtzk+mV9H1+c9Rke8hM//cuVS1b7w6NlCcSdrYK8=
+-----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-empty.crl b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-empty.crl
index f02f652..be514c4 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-empty.crl
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-empty.crl
@@ -1,10 +1,10 @@
-----BEGIN X509 CRL-----
-MIIBfDBmMA0GCSqGSIb3DQEBBAUAMDcxEjAQBgNVBAoTCUludGVybmV0MjEhMB8G
-A1UEAxMYVGVzdCBJbnRlcm1lZGlhdGUgQ0EgMUExFw0wODAyMjAwODEyNTNaFw0y
-NzA0MjEwODEyNTNaMA0GCSqGSIb3DQEBBAUAA4IBAQAfDb2VZwXtAejl2M3TNMkh
-PvmU3mgCXN/HMnKR9y+3fOgyogDwGBriBa0lqa2blSPi6nBGaViH2WW9KwVWaQgL
-LXujgQvB+4MS5kVFDZ78kh8eV9TuOHQkehdIH5oyhAJbfUkdrEBfuV+ow7BdqyQx
-4CpgFY8PmfC8E619XT8szn+mmsBBh6E4kzM2AJ1+tZRHOlOM8/0d38aiKxeyB+iS
-BW66EnDKkJZS44gTIE5WiWPvEO5SpWqYU8g5vZqRh+WN3qNvpRky0ZlC5yXVc1YP
-UiCfG5EsDbseGCz7NyPMaQlcgdm75HxI9CSmLgcAGT/U0TksYwMQJ30EU9ISBNeG
+MIIBWzBFMA0GCSqGSIb3DQEBCwUAMBYxFDASBgNVBAMTC2ludGVyMUExLWNhFw0x
+NzAyMDMwMTMyNDlaFw00NzAxMjcwMTMyNDlaMA0GCSqGSIb3DQEBCwUAA4IBAQAW
++Qg3lI5Lg8HhKsRwQQwk7WpCC191SOSWko+VVTDcEBEkQi/ARPKf30PpbciSeTAc
+bE+sPmsaDeFZfXPhd6GDrUE/+3LQdbBf+giU+eWMxR5rxKPSuLQjAmT0e4YsiBlB
+kyt02qLANERvEefWFj92/BV94s4/fa8BBhoXTYUCVtQPf/ABW1KrGli0tUV5pWTL
+qa5bmfbDm8VkyoEWwMf2+JRr1NdGWKKmWTFeGYNDPxpgyIKiAUwX9Pq8Hsky+ic0
+fuSFMTR09AUdJhu0PBkAAlHUsyVbf0OGVJrTAPPwewdb1P2as+ltOUf9Cbr3+nsT
+gMn8y0+cS+SUye55PKZn
-----END X509 CRL-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-expired.crl b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-expired.crl
index ff43442..d574f0e 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-expired.crl
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-expired.crl
@@ -1,11 +1,10 @@
-----BEGIN X509 CRL-----
-MIIBkjB8MA0GCSqGSIb3DQEBBAUAMDcxEjAQBgNVBAoTCUludGVybmV0MjEhMB8G
-A1UEAxMYVGVzdCBJbnRlcm1lZGlhdGUgQ0EgMUExFw0wODAyMjAwODEzNTRaFw0w
-ODAyMjAwOTEzNTRaMBQwEgIBAhcNMDgwMjE2MDQyNzQ5WjANBgkqhkiG9w0BAQQF
-AAOCAQEAW/h6cy2zOxH/RvbqNveg8j0D01tPf3v5w1Eh0YPfVjoR5TH64j2Nq6Q6
-4WOdalh+oWixxHVo3ugIDPEiKZVBmc7j49U6/ZHbsL2Z2dJoUKrdyAQY9acJhCoz
-bvMchR9IWO3m6sgRH7+iIzh8KoQAi6CPHy4YR30STPWBN5TrOFebiShtMH4ogvvz
-2vy0aTJNrO0Wan824OG7GVQ3PY6vBY1IC2aFlmkDDFP0xDBdgLgyylsC1vqeDwOy
-tWpStpXBPYV8NCxB1cOqbkKSx1C/g5Wn2aJv2TH0uAwfPYnwKs/C/k7bGVqgimj9
-Fp22mrUIv7TXTyp9NRShVrygoEAhrA==
+MIIBcTBbMA0GCSqGSIb3DQEBCwUAMBYxFDASBgNVBAMTC2ludGVyMUExLWNhFw0x
+NzAyMDMwMTMyNDlaFw0xNzAyMDMwMjMyNDlaMBQwEgIBAxcNMTcwMjAzMDEzMjQ5
+WjANBgkqhkiG9w0BAQsFAAOCAQEAMPRJS6zzm+N/NcrKcumnL5HLDmFTd/Y3XFnQ
+SkFP1u8QKJXQyOjot++5nPU7lQRzdLge5b8ePWPydrH7h3CmQdIdmaCZmChaxaGJ
+rrwh9DF/VJfFJTh99GYH/m3LBYOXUxB+L7yBb2XHITaMb6E/o93RzgH9M1azCrlV
+k9EBWh4ifukUVM29r6Wz1uqcGeSotOdkNlVIsfjoWqaiFZxvmE1DGQhr3U5F0ZQA
+hglyFTyzhU3TfEojX9zrfddKCVNlDtUqGa3Ov7UNUHSDI9g2h1IK2xFSUL4E4pzS
+U1/4YVfstjS2KeE/kDNZGqycVVWaAr0ksISZUbgObEyYGncPHg==
-----END X509 CRL-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1.crl b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1.crl
index c141022..157ba37 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1.crl
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1.crl
@@ -1,11 +1,10 @@
-----BEGIN X509 CRL-----
-MIIBkjB8MA0GCSqGSIb3DQEBBAUAMDcxEjAQBgNVBAoTCUludGVybmV0MjEhMB8G
-A1UEAxMYVGVzdCBJbnRlcm1lZGlhdGUgQ0EgMUExFw0wODAyMTYwNDU2MjNaFw0y
-NzA0MTcwNDU2MjNaMBQwEgIBAhcNMDgwMjE2MDQyNzQ5WjANBgkqhkiG9w0BAQQF
-AAOCAQEAfw8nWPVRK8hpt4ZU4AKiKXDc06Wf2L3IbdXHj/n4GiwQAZX9UJ34firo
-GKXKplwrffmVuiEwEwFBpm0M+UuCqcDgSeyruucBzRXPkr1DyPOUJ3fbI7lb9BAP
-C/cR7e+I+YTaXa1L15ocVN+reWq3hcWRLzejTOlrPhhTCVRnBwmWx83026PRcnjm
-+63YONnMFUpx8Cw3ktLVMGbxHjsDAhMTWB8YSQ3oFV7h6tpzmsr0QQxTUugP5wBX
-CmMJqrMIAiGfKBDzm3LfW6ZusjIsQ6HxgMC77/wU2y735POxFrnLMyOgqCTo6YHY
-62eLjgwVBEeOk9A4mX+NORA6EZ6BRg==
+MIIBcTBbMA0GCSqGSIb3DQEBCwUAMBYxFDASBgNVBAMTC2ludGVyMUExLWNhFw0x
+NzAyMDMwMTMyNDlaFw00NzAxMjcwMTMyNDlaMBQwEgIBAxcNMTcwMjAzMDEzMjQ5
+WjANBgkqhkiG9w0BAQsFAAOCAQEA2Ezj3BK++rP2NphVoMQY9QJgtwba+kZqqI6T
+ZbDcmkw80Mgr5VE3aplELPxM8KNAIk32mItTy2gLdLvK1f/vEC7yXJnz6xTPe/vV
+lQTLWtksUGWhaqsDPFPjubSRNud27A2E+Xc+PDORlRdte2a58yUUSwhu/T2T4tYx
+82JT9WL19p1gALkEiQGYoC9YYxNpU43cQHzir8J2zcWnKTYHmapd+kMXrajOjnCI
+TSU+7ynjzT+UGqZPwTb/k82yLr2OnztzlaXJgjr4hXMgF3yabm+kP4lAXxSKY1e4
+6GyFZ4q4zjwnQ+yUDgYQ1ChU0li5cPwul4+3K1XQQcu05NdTrg==
-----END X509 CRL-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v2.crl b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v2.crl
index c30db24..89812a4 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v2.crl
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v2.crl
@@ -1,13 +1,12 @@
-----BEGIN X509 CRL-----
-MIIB+jCB4wIBATANBgkqhkiG9w0BAQQFADA3MRIwEAYDVQQKEwlJbnRlcm5ldDIx
-ITAfBgNVBAMTGFRlc3QgSW50ZXJtZWRpYXRlIENBIDFBMRcNMDgwMjE2MDQ1ODE0
-WhcNMjcwNDE3MDQ1ODE0WjAUMBICAQIXDTA4MDIxNjA0Mjc0OVqgYjBgMF4GA1Ud
-IwRXMFWAFKbRZC6vsZ3HpiOLO6pAOju2R4GmoTqkODA2MRIwEAYDVQQKEwlJbnRl
-cm5ldDIxIDAeBgNVBAMTF1Rlc3QgSW50ZXJtZWRpYXRlIENBIDFBggEBMA0GCSqG
-SIb3DQEBBAUAA4IBAQBf/vGZ7fBbeq/sWcUJIUpmjxkRVcAx2IQEDrn/vgzp4HY9
-Kob6AD/B/l6D+D/9Z0bxgL+7EJtuByFL/TSsoAF607LGqYBEL4ZNk233o2CbASsE
-AfzDyNGVXIdCMofJSfXWnbP/4JQeaAQQo7y9FxNHQH9yBfFSaUR7yy1XmbHeXLo3
-dA/0UJVtazIxHnphPLkBz7xj2VTg1XWAqGjWHRt/dxArFFj8e8PcXufqbhlqtSX0
-fep2dMJq7cBMDacJ28CrHY4Buj6NbFpgKH/JorkBaMhlGAsqWIISXCEwR1n2Ablo
-1Xf+NicDorQy9ExtIf9MAS6nl18quR5N7BAXCLcB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-----END X509 CRL-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.crt
index bd5985b..7cadc0e 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.crt
@@ -1,21 +1,83 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=root1-ca
+ Validity
+ Not Before: Feb 3 01:32:40 2017 GMT
+ Not After : Jan 27 01:32:40 2047 GMT
+ Subject: CN=inter1B-ca
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:b1:d8:e9:eb:fa:41:e8:ca:72:1d:e0:a8:4f:f7:
+ 01:ad:a3:c3:cc:c3:b1:30:cd:20:ea:5a:cc:12:40:
+ 37:ef:ba:a6:2b:17:55:0b:53:d2:c0:08:ff:76:80:
+ 2a:05:af:38:8c:f3:b0:15:86:40:74:d3:0c:8f:b2:
+ e9:89:7b:b0:fa:64:be:78:3e:9b:90:02:dd:3f:11:
+ 01:28:9d:3e:f5:06:e6:5f:47:85:2c:e5:5d:16:53:
+ c3:d2:80:e9:19:72:2f:a7:cc:ec:0b:52:9b:d6:c6:
+ 72:2f:b3:8e:5b:4c:70:41:48:3a:3b:4d:42:2e:f0:
+ 59:36:4b:8e:6f:6b:f9:d7:11:c6:f3:1c:6d:ad:16:
+ 69:9b:6d:0b:59:c2:4b:68:00:2e:6b:5b:71:eb:b5:
+ 32:9d:fb:76:ca:69:1b:55:78:f8:65:89:3e:a6:84:
+ c8:ef:b1:ca:f5:e6:c1:24:22:eb:18:69:49:0b:8c:
+ 5b:04:74:8f:0b:65:b6:0e:8d:17:51:89:40:29:66:
+ fc:14:e6:27:8a:91:ad:e2:19:95:cc:6d:0a:dd:5b:
+ 15:03:9b:f3:ea:53:88:31:9f:40:22:ac:4c:07:69:
+ 04:75:ff:c1:3d:d4:d3:cd:bc:d2:af:76:c9:f0:b0:
+ 7d:c9:df:7d:48:45:ae:5d:f8:39:a8:69:9c:74:42:
+ ec:33
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Netscape Cert Type:
+ SSL CA, S/MIME CA, Object Signing CA
+ X509v3 Key Usage: critical
+ Digital Signature, Certificate Sign, CRL Sign
+ X509v3 Subject Key Identifier:
+ C3:BB:9B:01:23:14:D8:0A:32:0F:30:21:2D:D4:8B:5F:41:31:15:71
+ X509v3 Authority Key Identifier:
+ keyid:C1:82:63:5D:DC:A4:15:64:71:FB:77:55:0D:A2:4E:35:C9:8E:7B:DC
+ DirName:/CN=root1-ca
+ serial:A2:15:F7:04:7E:B6:DF:8F
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 20:66:24:3d:08:04:c6:d5:c8:e2:8f:13:97:5d:bf:e5:41:80:
+ c8:92:a6:ef:b5:24:f8:91:19:25:80:e1:62:d2:ea:32:78:67:
+ af:46:ba:9d:4a:89:3c:e7:fc:ef:48:ef:46:da:ab:df:a1:65:
+ dd:d6:a7:a4:8f:3a:1d:6d:e3:35:2a:05:17:ce:17:ec:65:8d:
+ d8:72:1c:51:b3:10:6a:55:62:84:2f:87:9c:8c:7d:d9:55:2c:
+ 7a:c8:78:46:6e:9c:8b:ee:ed:1d:f2:26:20:ae:ce:18:bc:46:
+ 2c:5c:1a:a0:6b:ee:0e:c6:6a:db:dc:80:bc:ec:3b:90:dc:3e:
+ c4:90:00:8e:d3:be:d5:db:93:b8:a6:74:8e:b7:36:24:a9:35:
+ ed:54:6d:72:8e:2e:f7:cb:b0:c1:5a:bc:e7:63:49:5f:67:93:
+ 98:4f:33:5d:b2:8d:b5:6b:05:c3:32:3f:06:02:b6:7a:19:ef:
+ 07:df:5b:8a:4c:c4:02:26:17:84:9d:d3:ef:ec:09:58:7d:83:
+ cf:e8:63:3d:07:7b:73:f7:55:19:1f:e0:0e:b2:a4:31:60:21:
+ bb:07:db:e4:85:d5:cd:0a:a2:e6:bd:3b:46:27:36:0e:ea:8c:
+ c4:9e:9e:96:c2:5c:98:04:1b:df:69:52:fc:dd:2d:2a:14:9e:
+ fa:b4:71:44
-----BEGIN CERTIFICATE-----
-MIIDjDCCAnSgAwIBAgIBAjANBgkqhkiG9w0BAQQFADAtMRIwEAYDVQQKEwlJbnRl
-cm5ldDIxFzAVBgNVBAMTDlRlc3QgUm9vdCBDQSAxMB4XDTA4MDIxNjAyNDcyOVoX
-DTI4MDIxMTAyNDcyOVowNjESMBAGA1UEChMJSW50ZXJuZXQyMSAwHgYDVQQDExdU
-ZXN0IEludGVybWVkaWF0ZSBDQSAxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
-AQoCggEBAMFmeuJN8TNCmZf5qRUXb0nIOLdoEhReG3O4dTO7V10eKdUmI3ED4qn2
-dJ43lFDN09FI0792GrEJB9rWFq09xoaBuLulTQmEJFmeR2jkNmAoJJ9X6UjzHjsZ
-oF1M/PVMDgMX/5NxcLtAtnAOsiaKU7WdiGrvgd8rpdUBh7OMqv68tA3Atn7bn37l
-g2EHBkG4eS0mN4bGT2XTfP8Ft1q1INpGa+PTJWAAvqL1gF4S+9r+fg9iSW9YMTlQ
-0GbkXGvSEN1LePmx0+Spp56eQj+nASClXcmMCOeGJ2YKRPDQ7DmW6yDbbXtb4AL0
-lp1p9zw0iGO7CpEePHoqiV/abCGfEwECAwEAAaOBrTCBqjAPBgNVHRMBAf8EBTAD
-AQH/MBEGCWCGSAGG+EIBAQQEAwIABzAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYE
-FEBLOJgprnb55vlDuKKL1N+TGFzGMFUGA1UdIwROMEyAFI9bMgOQsY4JbO1yrcG6
-nWgVhy3ioTGkLzAtMRIwEAYDVQQKEwlJbnRlcm5ldDIxFzAVBgNVBAMTDlRlc3Qg
-Um9vdCBDQSAxggEAMA0GCSqGSIb3DQEBBAUAA4IBAQAtkDIR1wUCL7icVAInaNEE
-qo1yA3fW6yWa68mhO2QU1NDKDrmVYu5Vxn0ilDUbdDkhOz8OhIIdQkWR0V/PBYpq
-oMD+9LtqURypV8HgLP5t/mh7tpQBcj1/9fO0ARDFNgBouSQAXI0oQ3/yBOPCvhRG
-yxrYMUTnX11GFnkkzawWEMNGja4FfHybcFhaPrVN0Bt/ycdI8GEChSk+8nudpmYj
-gawp0eagQq4XoHS9Bfi1+v7n5WenyCCdvMFc8RvV8OkviaO8Bautmw3YR3pXD8VX
-cCCviIhkqf1Hr7Kmcdwa7w5Fq+ruWA+ZpO6JpSjzM5MCl9VQH7GiY+45cgEhRNGL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-----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.key
new file mode 100644
index 0000000..21226b5
--- /dev/null
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.crt
index 59f3357..7aa2211 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.crt
@@ -1,21 +1,83 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=root2-ca
+ Validity
+ Not Before: Feb 3 01:32:42 2017 GMT
+ Not After : Jan 27 01:32:42 2047 GMT
+ Subject: CN=inter2A-ca
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:ae:c0:60:05:a0:40:4b:86:85:c3:fc:95:07:bb:
+ f1:cc:db:bb:69:b5:15:a5:e0:4d:02:36:25:6e:10:
+ db:d7:eb:53:b7:85:56:e0:02:0c:a0:d9:87:6f:88:
+ 89:af:6d:a0:8a:1d:81:ad:da:06:b3:09:1b:e9:15:
+ 84:36:4f:31:fe:6b:3b:68:f0:db:d4:09:fa:a7:db:
+ 6f:67:04:67:51:4c:5a:8c:eb:9c:d7:a3:69:0f:f8:
+ 12:db:60:63:d0:39:48:d6:7e:ac:e8:7e:8f:88:9c:
+ 9a:9d:be:6a:f7:e0:7c:5b:53:12:8f:dc:c6:78:59:
+ 03:8b:c0:93:9e:ab:3d:1f:83:fa:25:c9:db:16:12:
+ d3:5b:0e:93:86:54:27:d5:11:c2:cd:c1:34:4c:76:
+ 6b:de:9b:e9:5c:05:eb:e5:05:d6:00:63:77:e3:db:
+ fe:45:bd:20:20:ba:2f:df:68:f4:18:0f:2b:ce:19:
+ 8f:0d:46:62:bc:e2:29:e0:df:0f:76:b9:0b:c0:42:
+ b0:26:c7:97:08:5e:19:07:2e:be:9b:cb:ca:48:15:
+ 0d:90:67:3b:c4:a5:3d:60:4a:b4:9e:d3:7f:ce:ea:
+ 3d:49:3f:13:4e:f1:59:02:f7:54:6a:16:e7:0d:55:
+ fc:17:b6:22:4f:34:82:7d:1e:1d:e3:d6:96:4e:f0:
+ ef:23
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Netscape Cert Type:
+ SSL CA, S/MIME CA, Object Signing CA
+ X509v3 Key Usage: critical
+ Digital Signature, Certificate Sign, CRL Sign
+ X509v3 Subject Key Identifier:
+ 31:33:EE:90:76:B5:2E:0F:9C:D7:13:E0:67:8A:C2:8C:5A:48:42:7F
+ X509v3 Authority Key Identifier:
+ keyid:53:82:D8:DD:58:11:44:1E:A9:87:C7:88:2D:64:28:A4:D2:6B:F9:8E
+ DirName:/CN=root2-ca
+ serial:FC:44:A6:1B:0B:35:FB:66
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 4e:d3:11:75:5a:50:47:22:c6:86:a7:f9:83:13:e6:b1:41:fa:
+ d2:79:91:e3:28:e4:3d:cc:59:35:69:78:00:27:d8:47:d7:09:
+ bc:28:98:32:c9:8a:29:c3:47:72:5f:8d:51:39:a4:73:32:12:
+ fa:d4:40:58:fc:20:ec:a1:29:c7:e1:9f:ba:84:fd:ee:0e:b8:
+ 5d:1b:87:09:02:26:93:e9:b2:ea:c8:e9:8f:fa:3e:16:70:ef:
+ a1:3d:e5:f0:5a:53:71:cb:ec:6f:91:86:a8:20:93:48:7a:7e:
+ 34:3c:ab:06:f4:92:5b:0d:ce:a6:5f:77:00:ff:aa:b6:1c:aa:
+ 85:21:61:bc:89:82:3c:b3:c8:74:b3:4e:93:c9:5b:74:84:33:
+ 22:61:15:d4:95:27:66:cf:92:5f:1e:54:a1:ea:c6:b9:70:ad:
+ fd:5e:aa:08:87:b9:75:9e:28:ea:5c:74:5a:29:a5:21:10:84:
+ a9:22:3e:7d:27:36:14:a4:f9:b2:d2:c7:cc:97:ed:4d:5d:3e:
+ 97:2d:d8:0d:6e:88:c6:2e:e8:44:99:43:b7:03:24:cf:ed:6d:
+ 1e:f3:af:e3:3e:14:d0:9d:47:17:0a:3c:7f:fe:0c:12:04:0f:
+ 52:8a:c6:8e:84:bb:55:98:3b:8a:c2:35:65:29:70:57:e0:ed:
+ af:94:e9:21
-----BEGIN CERTIFICATE-----
-MIIDjDCCAnSgAwIBAgIBATANBgkqhkiG9w0BAQQFADAtMRIwEAYDVQQKEwlJbnRl
-cm5ldDIxFzAVBgNVBAMTDlRlc3QgUm9vdCBDQSAyMB4XDTA4MDIxNjAyNDgzOVoX
-DTI4MDIxMTAyNDgzOVowNjESMBAGA1UEChMJSW50ZXJuZXQyMSAwHgYDVQQDExdU
-ZXN0IEludGVybWVkaWF0ZSBDQSAyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
-AQoCggEBANeowIrfgyqAOwSQmU2nf+LwlKrse3d+wpTTIVE+NTOFAT9YHIzP4I9i
-axt+63JnLkS3TgxADR/bhoz0qdSeKkba+7/3ZYLNqpdoH0j0HUstKYslDFeElKle
-sPcmQAzcwH9k2dwrlLIZZ0jX3/NzK4HgVn8AwYhkCzW0z4cmW25+1dGOteSWm5oF
-sot0sGxm+2F4Tt1UbNvYV7uB65dvajqoY0o2gwZLh61wF/A8ADM9qMPX1lW5PgUI
-tx/J5MP+FnEEsQi94wnrS8oAldU6Qb6Wv6PwE/YaTUn3m0wp7SWLrlgLLvF4Useb
-r2V+Ab0XUz+wRMz9GJvhmxW2Aoz4LhUCAwEAAaOBrTCBqjAPBgNVHRMBAf8EBTAD
-AQH/MBEGCWCGSAGG+EIBAQQEAwIABzAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYE
-FHoQVd5JyBpssooxI+gZFAfkDdOgMFUGA1UdIwROMEyAFPdjZ6zd62bPOJ5E2KKI
-h7FL3GFSoTGkLzAtMRIwEAYDVQQKEwlJbnRlcm5ldDIxFzAVBgNVBAMTDlRlc3Qg
-Um9vdCBDQSAyggEAMA0GCSqGSIb3DQEBBAUAA4IBAQBYAoFyRZmZJY/nFzfaKFmM
-dGD/ex5n3exFoDjKoiShuAU3ReXnFR+AVz9f7FlHqsnWAp0pGMmJ8NrqXpJaO6SC
-RBHVPagBAdyoNGK4anjwLTiCKCAVi5MBnGpeis07nfy4Ot1dvl++w/3YgIouABTi
-5hyy3bgzFNoS/vwas1k7NJacjZiRTT+3MDJ9OtjHGdZN7/tXQL3vujEGp6+z1Ly7
-c1uOIARdlN44Jk9OR7SWaAi0v9bh2i1iw/3wPDjSz1srosxV2ANIonOKfQryxREh
-TgEK3IHfc0VGcKPsZ0oljH29/dMoHiYQy4Su8uqjd4n8l2YxGKPXhf4PVO0Go1Ot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-----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.key
new file mode 100644
index 0000000..2dbb811
--- /dev/null
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.crt
index fd64e4f..5787962 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.crt
@@ -1,21 +1,83 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=root2-ca
+ Validity
+ Not Before: Feb 3 01:32:43 2017 GMT
+ Not After : Jan 27 01:32:43 2047 GMT
+ Subject: CN=inter2B-ca
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:d3:37:05:69:6e:69:31:26:52:0f:b7:87:a2:cf:
+ e8:e0:9c:ab:11:de:06:10:00:17:6c:b4:9e:f8:fc:
+ cf:6b:90:55:34:f6:9f:3a:b3:09:78:eb:ad:81:31:
+ eb:47:ad:b0:ca:1e:bc:bf:1f:a3:ec:89:d5:0b:64:
+ 7b:73:a6:a7:2a:b7:11:a5:39:67:be:59:64:0d:97:
+ 69:a5:f7:ff:8d:72:22:08:4c:21:b6:2d:f4:ac:97:
+ c5:b1:d8:f4:3d:fb:67:24:52:c8:be:42:25:44:d2:
+ b6:1d:18:f3:68:25:f7:86:81:0e:05:6e:e4:78:c0:
+ 80:84:94:ba:72:27:18:67:ff:e9:6c:82:aa:6e:78:
+ f8:a6:bd:dc:b2:ab:99:78:f2:37:19:62:c0:47:62:
+ cd:19:3d:8f:e0:d1:bb:80:87:df:a1:2e:1c:33:53:
+ 7d:99:db:08:04:cd:5d:89:ac:15:9e:fa:ce:10:a6:
+ 05:3a:9c:d1:d6:09:85:30:ea:06:73:51:8d:46:40:
+ 87:14:52:7d:04:0d:75:4c:c9:4e:64:07:3c:55:b0:
+ 7f:90:d1:bc:63:7b:8c:3a:8b:61:e9:b8:e0:44:51:
+ b1:37:30:bc:05:ea:5e:52:55:06:b0:36:b4:83:e1:
+ 84:47:8e:a2:44:ce:24:ce:e5:2c:ac:98:b8:a6:e7:
+ 46:09
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ Netscape Cert Type:
+ SSL CA, S/MIME CA, Object Signing CA
+ X509v3 Key Usage: critical
+ Digital Signature, Certificate Sign, CRL Sign
+ X509v3 Subject Key Identifier:
+ 3A:CF:B7:9E:52:28:74:13:C1:F4:3A:1E:CF:4A:BF:CC:4C:37:CF:4E
+ X509v3 Authority Key Identifier:
+ keyid:53:82:D8:DD:58:11:44:1E:A9:87:C7:88:2D:64:28:A4:D2:6B:F9:8E
+ DirName:/CN=root2-ca
+ serial:FC:44:A6:1B:0B:35:FB:66
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 1b:4e:3a:d2:35:ba:0d:4e:84:95:14:54:03:94:e3:29:d6:0b:
+ 01:51:1c:bc:2b:3b:ab:d7:a4:e3:4f:a5:e1:f4:d8:d0:47:f3:
+ bc:10:d5:25:20:1a:fd:7e:ff:e2:b6:8f:27:07:3d:dc:04:0f:
+ 7f:47:ac:c9:46:21:76:32:dd:74:81:3a:3d:45:3f:32:25:5b:
+ 67:10:54:a0:a6:d5:0d:7b:e7:54:c1:5c:ec:02:ef:5f:e3:d7:
+ 99:7a:0f:b0:53:c4:39:b8:cd:26:2f:d3:89:c3:35:1d:e6:5e:
+ 3e:91:48:60:69:63:67:7e:1e:90:8c:4b:98:c7:ce:68:ab:f1:
+ d5:a9:95:5f:fa:62:b3:dd:e9:7c:83:cc:f3:57:48:cb:04:75:
+ f4:0b:6c:79:72:bc:45:c3:a2:b3:3d:b1:53:37:15:2c:42:23:
+ 97:26:e7:93:28:63:bc:39:5d:85:42:0c:55:78:bf:8b:18:cc:
+ d6:d2:b1:b3:76:9d:95:5b:01:b6:81:cb:ea:66:31:f7:34:40:
+ d4:ee:68:8a:43:25:e2:ff:c6:91:4e:b6:f5:5f:fd:24:c0:74:
+ 3d:eb:f0:c5:1a:c4:1f:ca:68:a3:0a:f2:ed:bb:92:a4:fc:16:
+ d5:9b:d8:21:ae:94:9d:bc:ca:55:29:13:8e:51:53:d1:8f:e6:
+ 74:14:83:8d
-----BEGIN CERTIFICATE-----
-MIIDjDCCAnSgAwIBAgIBAjANBgkqhkiG9w0BAQQFADAtMRIwEAYDVQQKEwlJbnRl
-cm5ldDIxFzAVBgNVBAMTDlRlc3QgUm9vdCBDQSAyMB4XDTA4MDIxNjAyNDg1N1oX
-DTI4MDIxMTAyNDg1N1owNjESMBAGA1UEChMJSW50ZXJuZXQyMSAwHgYDVQQDExdU
-ZXN0IEludGVybWVkaWF0ZSBDQSAyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
-AQoCggEBALgYSfCvdNqEzs7048Tovc9LgyIrDwuBkoU2HbdczIuw8ipJDAOmo5w3
-BIDjxUZQx2vO1v6KW81AcOR0LqXd0K8Bnl5OXFHiW3laz9yFhyXKAB5roWnrQmCL
-vitN6P3vM6AA2UiNT1Ze9utFQ1SwnDfPDVYTRebhbxRgj5qWOK2mB9OIoD2ff0pI
-gf1ziIiJHChljnd2UA3OM/5pI5sKd0iaT6SrhGzysgn1ITTeWlw1axOfyh/+SW8k
-yefZQkjWLXce/9DcHDdo3NSDbqX264VQK0QcQi7l2v5HNEecSRecelO0746bjJ7n
-mbcQvEkdxgfvZBvqIqB4Drd75yPmcd0CAwEAAaOBrTCBqjAPBgNVHRMBAf8EBTAD
-AQH/MBEGCWCGSAGG+EIBAQQEAwIABzAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYE
-FP0txMEysaCUdvSu+xU1DV7eNPOuMFUGA1UdIwROMEyAFPdjZ6zd62bPOJ5E2KKI
-h7FL3GFSoTGkLzAtMRIwEAYDVQQKEwlJbnRlcm5ldDIxFzAVBgNVBAMTDlRlc3Qg
-Um9vdCBDQSAyggEAMA0GCSqGSIb3DQEBBAUAA4IBAQCBtGF7Hls4x7xbM8dRYp4g
-RG0UsRVwRne+Yozzk/sn38rJni6qhMbEwpd0nLp2hwVi2++knQ/ZG5iAxMNCTkP/
-/k1fO4ezglUnlLWzJZb0L7mSulpcFHQ2wiOxPjNTVX/kD+y5FzfmGA31CH3CYDwk
-itDI+5TRcpvYYU4YS+thVMdPFqRlS7JkylrF1k4vAdPNCSkzk1RCjTIHqPXGSB1N
-JmK5VijeplrmJr9LwxhR9D1/dbth+k4RIZ0/ARRuxBMTCLQcsJ/qdrw3a1qlGi21
-0LjfQiBmLW7w5OWjhbK+Y8IAgm9zjswRQHZ5z2sSOf7sw8JviTyVDvlAlQ3XPEbW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-----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.key
new file mode 100644
index 0000000..5a8e441
--- /dev/null
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.crt
index f000e60..7b310db 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.crt
@@ -1,21 +1,20 @@
-----BEGIN CERTIFICATE-----
-MIIDgzCCAmugAwIBAgIBADANBgkqhkiG9w0BAQQFADAtMRIwEAYDVQQKEwlJbnRl
-cm5ldDIxFzAVBgNVBAMTDlRlc3QgUm9vdCBDQSAxMB4XDTA4MDIxNjAyNDUyNloX
-DTMzMDIwOTAyNDUyNlowLTESMBAGA1UEChMJSW50ZXJuZXQyMRcwFQYDVQQDEw5U
-ZXN0IFJvb3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMV5
-6dwqZGkiVx5/v9ULicAen3RuSRpd+SJ46p6RgXxWRA2WlHZYMW7pMTeN/KvbHKEk
-IkAu5fh19iLW+XkhWHGVTm7pPoZ7AdzJ4PfJId290T80/uS/kZT3coOeiqZy6dQ6
-659tVXCH9K0X/S5et6i+BS+gHPF/RvxnuVKTBrlHfToxwtN7GtkKRlvGHo9l83p3
-yoOEH83gBHBy3Hd2HUSSCH6c/rh/3u2pCzojQA2H8+L9/C3qG/OuLEtmVpaV7flz
-THLKQN6diK6NSS2ViEF0ymbb7ZO2caG1fwOLfeBU+Kbmre8XVJTmSAhG4ox8XLmr
-4/ugZnU50D1IaCbfhxECAwEAAaOBrTCBqjAPBgNVHRMBAf8EBTADAQH/MBEGCWCG
-SAGG+EIBAQQEAwIABzAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYEFI9bMgOQsY4J
-bO1yrcG6nWgVhy3iMFUGA1UdIwROMEyAFI9bMgOQsY4JbO1yrcG6nWgVhy3ioTGk
-LzAtMRIwEAYDVQQKEwlJbnRlcm5ldDIxFzAVBgNVBAMTDlRlc3QgUm9vdCBDQSAx
-ggEAMA0GCSqGSIb3DQEBBAUAA4IBAQBaf7gv/KYn5THGUJNczro8erZajPVqL678
-Jf1lv/oShdDesD0kXjxUIe9OSC2yhqFlZ3Ls8iB8D2naisWgo58Yty9r6nLJtEnB
-INrUSpAX1XmIeR/PgbPT+3ZRqWvb2hnkCM8HtfRPZLZCB/Leg4KHQMN0HTyZueCP
-K+RZkomQ5ir6O821za9SMboSDGGMr4KqbLFOrIBes+lOwEXVP84J1vi6qj0cWvmh
-/r4X3UV0D7qf508NrEvPlw/jTUzEHOf64a1g68V8xWrbef1MKvLZzcD5/meJ3Gpd
-V+AEfwI5bBmfpUetZsnLDqz5LX+qu0ORP6kRjS30u/0PNHNzdKtn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-----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.key
new file mode 100644
index 0000000..e1df34b
--- /dev/null
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.crt
index 47e7de7..f7f7dcd 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.crt
@@ -1,21 +1,20 @@
-----BEGIN CERTIFICATE-----
-MIIDgzCCAmugAwIBAgIBADANBgkqhkiG9w0BAQQFADAtMRIwEAYDVQQKEwlJbnRl
-cm5ldDIxFzAVBgNVBAMTDlRlc3QgUm9vdCBDQSAyMB4XDTA4MDIxNjAyNDc1NloX
-DTMzMDIwOTAyNDc1NlowLTESMBAGA1UEChMJSW50ZXJuZXQyMRcwFQYDVQQDEw5U
-ZXN0IFJvb3QgQ0EgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKBx
-1TBIAI+/C1z/UGpEEbCV6F+qhyTM9k2qLeVoqS+ZkSCW3rGpJEx3W3cdUClYsiZq
-X67OsJ6Yg1ilHmQHOwGO+6da2fJx4fSbNdzcJAUH2Zge4PYufTeE23Z6e8FMakIi
-27NElWsY1AdP0TEyXFJHYOhpJwMzs1kMkhBetOMXfgny0GRhK6tfmNlBI7iHTRTP
-5RnakeKauomoVx5t+XrHQPaRCzjvRRxgLJ66UDNe48xztbz4lAz1N1yFL5ONIsIj
-wds6aOTj6Akt7rha+cozTbpHMWdPvOTiKydpAzabN1y1998geseLLwtDd6RsrHKk
-jIjqn1KTMb85zHffoyUCAwEAAaOBrTCBqjAPBgNVHRMBAf8EBTADAQH/MBEGCWCG
-SAGG+EIBAQQEAwIABzAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYEFPdjZ6zd62bP
-OJ5E2KKIh7FL3GFSMFUGA1UdIwROMEyAFPdjZ6zd62bPOJ5E2KKIh7FL3GFSoTGk
-LzAtMRIwEAYDVQQKEwlJbnRlcm5ldDIxFzAVBgNVBAMTDlRlc3QgUm9vdCBDQSAy
-ggEAMA0GCSqGSIb3DQEBBAUAA4IBAQB/4RsB7RzvmDualEaF9Fpgr/pJIa4/TkG/
-/WQlKtQL4dA1NH2cA12ET2UiiSA3wwedXqaJ3xR1e5j2d2u30DhsYDBqQT+vWWA0
-Z3tJET4n0lIuCozn3b1xNIqTX1/BxeDTuoqz5HVT66mwMPtT8UDTcD8h0jmrW+LU
-9aQX4zSYyPaiq0Dvu7dnnrhqAWJ1o2+Bet6YmtfxMUXXSolwC6ZBcWzq6ighXsyw
-dh9v+60iczDPvXZq0aLNgYoSmVXNXIj8/gZEDBUY3r2u3FEWVR62XC0wKDTiTe2M
-ixmfwIdPq/WshU0tUGqnhTN9x2dCQGJuS1EhTPM2AbBZydZ4ygTE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-----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.key
new file mode 100644
index 0000000..fd96663
--- /dev/null
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.crt
index 41b0b8f..c25a303 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.crt
@@ -1,21 +1,20 @@
-----BEGIN CERTIFICATE-----
-MIIDgzCCAmugAwIBAgIBADANBgkqhkiG9w0BAQQFADAtMRIwEAYDVQQKEwlJbnRl
-cm5ldDIxFzAVBgNVBAMTDlRlc3QgUm9vdCBDQSAzMB4XDTA4MDIxNjA0NTMxN1oX
-DTMzMDIwOTA0NTMxN1owLTESMBAGA1UEChMJSW50ZXJuZXQyMRcwFQYDVQQDEw5U
-ZXN0IFJvb3QgQ0EgMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcO
-aHbctY9/ocMmLq98YpnelSho5l8gSiBm95v6DGJx8tQS3BVJuG6Cp4lTZM3SdmCL
-Da9OO8pleZ+8YAVYNvI+GPq3ZNkGWgBw2pGp4TdDvu+wp6yHGGlxwzsIQl7CicBX
-7R9UFXEmHbqlBHZY+5IZfdwjHDGCFX1GLHfgZ1fepguUn5+CKNcebkn6fiHrKvcO
-AAp083nem+F5cRopL4dxPFecnf+xbuii4r2fbGnVMrCl+lybqql0bmjGAu7gWV4/
-EaWQez/+dqBV7RRUvvb6ESB9VBcuWuwBkF+zr8yMFYlHNTpZs1lM8vss2e7oRdke
-VQm0jxrU14zpGD4WAkECAwEAAaOBrTCBqjAPBgNVHRMBAf8EBTADAQH/MBEGCWCG
-SAGG+EIBAQQEAwIABzAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0OBBYEFNYpvLOrOLVe
-Wbtf51KsboM3G7SpMFUGA1UdIwROMEyAFNYpvLOrOLVeWbtf51KsboM3G7SpoTGk
-LzAtMRIwEAYDVQQKEwlJbnRlcm5ldDIxFzAVBgNVBAMTDlRlc3QgUm9vdCBDQSAz
-ggEAMA0GCSqGSIb3DQEBBAUAA4IBAQBkhItn+wt+CU7RspC4Dh9umdcaikGSeK4P
-LwFDFvkUzBbeO+l0QYICVLAso9w6d9ckxloik7vALI5KC9DMLSgc5eSkB6x4Y++A
-q/pB2PFinNywKyyyO1c3u6j7HCYa5aSB0Q95Bo5lkxz13EK/DhbLLT3Ytli+Mw3D
-xuIZ/jTQDBadEfIuQLOks/aa+WY6AloRC711yflyE8jkaUnvMQoYMBD1oRle77SD
-FZqYHfaAONdzcC8q2hwys2L4gopY50l0izN2E2XGtMBZfHJ/9rLAqSNBmB0iCv/x
-qXyJ7avCwqkpcFtWSQM6u3F+DwKn8wE1MqevHmK/LVC3f0gE4qtz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-----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.key
new file mode 100644
index 0000000..e087a1d
--- /dev/null
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEpgIBAAKCAQEA4MdSc+X7+t4drNqL9EAEVSRBSbkP+0cEutzN8ZNaX16X9Zsv
+ck2jMsm87Rud3SEwDehzj5stZJ1A8bocZtk1RzlzLRThh7RtxfQfDv0i7GhiT3x4
+mUMwDPf4b7p81QfjCpZspbQDo0bUEwrkG2rtuNy8tR0gqP3kUW3W7/NoWgYZ1Ucg
+w7FZY/F+rrOanlanq1/Pd4bC6w9ML5gKRZFxdxpDkz+aPaEknLZcrcvafZ+IX1gw
+GtIZrrEHmangpi2xiWoz6kiEqomBhqaVVn9tX05S8P9o3riByTWPra67ufgytKSz
+6GZb8Embv6zu1GR7M0nYKPUcIaOfPDwDoMeHywIDAQABAoIBAQCzcm0A2bowrOJD
+/LV+aR0MW8VDddqsYCYGiABhu6GKQZpPGXTna9O92BBbupBs2PHkKI8ZNmkmyePv
+FwVVllJSairo8qKaFBEO17Vz4eLfmPXjPxuIP3s83zoW+GpwJ7u52B0krHG7B/CG
+w0sYGGVwD8kXTgmk4AxGdcoCBfBo7LbB7OhEMnHgqF/OL1cu2CiY9/puWpKiXL7b
+pX17qVCuF2kpio9+2URNeBSSWGrG/rd1GQgC7cusMG19cUR0uQoAW3PdJ0nibdK8
+6h6YO7t7ved1HrcCbGvNEMP4HlXmlXYhIZf+oPhPT4pSdnvjtyGE5krftOcDH6lG
+s5hdxKwBAoGBAPdIornTq9PnFfQu8fGAh++pDF2XCDiCPhVgaLmquBh3kbaasA+5
+jSDqzdps+nKwLJCddwrNRkjKH1nF9bQCgCPC84GKGpgXiL3AQ28FqLA2B/Je06Is
+C2UxGEc6TPBM9tttvD4KTPJ7y6hTn2npNT7/+j9LmRwb7jXQ4UHYtWHRAoGBAOiz
+nIYDJktOEd7IVUjU7NKzGKJiWUVf+UqTMgKf+5PBfXoFTag4GLI+N5Gz/ltHh/TX
+kA3WIR31B0w2gje6FJYbJN2gZhmeyWPmB+NyX6U/Ok4om/slHZ6VUBYljZEn5m0W
+QPV5nNKX/v/wMra85t8237m3UBFI2LyvovFLm7rbAoGBAOrikMcoW3+lcgIGkYRP
+DVBFZ9yCOKnMdQJDGFa75bA/6yXjWzckjfxlbHF8sIw98abQG6IkCA3eB9dzJQb+
+lQ7i///c2ZP8TsPGm4caffga6oN7NVVGtvBAqQoHQ8vBn34ghvz7NcniczmJbNPi
+U9Rqux5iRaYgla2ComS0Xt3xAoGBAL/31GuV05SSLhncqMaxqUFUsEDd44lg2HZW
+Ig6aTl+hYtMz5tGcnXsF6q/PjkldJGKvJk7T1HQzPLb5zMkOQIdokywmc7Q1EyzP
+irhvFUpsc7wgsjUodFvsD6qFhlk2Ulix4BriHaZ578rSK/QmuEtyqHQ8LthjgTF/
+r2tiFXG7AoGBANqstGrz8tvgp46ey2Pwbb8IIFUYtyI6QcbPG6KU2nVyUhs8KWGY
+LjAuzhartEWIROjRltDsZnVKtkeMqDx3iSODXD+o51wtfNaVYwcCTzown4hxHy32
+/G30UYChJB3Tv4ejZIwc4wGETrFOoBNYs+M/VC1G2sw0xuD0Yx0wttss
+-----END RSA PRIVATE KEY-----
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list