[java-opensaml] branch main updated: OSJ-360 - Regenerate PKIX test certs with SHA-2

Ian Young ian at iay.org.uk
Thu Dec 1 15:26:15 UTC 2022


This is an automated email from the git hooks/post-receive script.

iay pushed a commit to branch main
in repository java-opensaml.

View the commit online:
http://git.shibboleth.net/view/?p=java-opensaml.git;a=commit;h=3a4c01c8486b9930e77b27af326a35e7bacf7a32

The following commit(s) were added to refs/heads/main by this push:
     new 3a4c01c84 OSJ-360 - Regenerate PKIX test certs with SHA-2
3a4c01c84 is described below

commit 3a4c01c8486b9930e77b27af326a35e7bacf7a32
Author: Ian Young <ian at iay.org.uk>
AuthorDate: Thu Dec 1 15:18:33 2022 +0000

    OSJ-360 - Regenerate PKIX test certs with SHA-2
    
    Copy the generated test resources to the other place they are used.
---
 .../opensaml/xmlsec/signature/support/README.md    |   9 ++
 .../xmlsec/signature/support/foo-1A1-expired.crt   | 140 ++++++++++++---------
 .../xmlsec/signature/support/foo-1A1-expired.key   |  62 +++++----
 .../xmlsec/signature/support/foo-1A1-good.crt      | 140 ++++++++++++---------
 .../xmlsec/signature/support/foo-1A1-good.key      |  62 +++++----
 .../xmlsec/signature/support/foo-1A1-revoked.crt   | 140 ++++++++++++---------
 .../xmlsec/signature/support/foo-1A1-revoked.key   |  62 +++++----
 .../xmlsec/signature/support/inter1A-ca.crt        | 138 +++++++++++---------
 .../xmlsec/signature/support/inter1A-ca.key        |  62 +++++----
 .../xmlsec/signature/support/inter1A1-ca.crt       | 136 +++++++++++---------
 .../xmlsec/signature/support/inter1A1-ca.key       |  62 +++++----
 .../xmlsec/signature/support/inter1A1-v1-empty.crl |  19 +--
 .../signature/support/inter1A1-v1-expired.crl      |  19 +--
 .../xmlsec/signature/support/inter1A1-v1.crl       |  19 +--
 .../xmlsec/signature/support/inter1A1-v2.crl       |  22 ++--
 .../xmlsec/signature/support/inter1B-ca.crt        | 138 +++++++++++---------
 .../xmlsec/signature/support/inter1B-ca.key        |  62 +++++----
 .../xmlsec/signature/support/inter2A-ca.crt        | 138 +++++++++++---------
 .../xmlsec/signature/support/inter2A-ca.key        |  62 +++++----
 .../xmlsec/signature/support/inter2B-ca.crt        | 138 +++++++++++---------
 .../xmlsec/signature/support/inter2B-ca.key        |  62 +++++----
 .../opensaml/xmlsec/signature/support/root1-ca.crt |  41 +++---
 .../opensaml/xmlsec/signature/support/root1-ca.key |  62 +++++----
 .../opensaml/xmlsec/signature/support/root2-ca.crt |  41 +++---
 .../opensaml/xmlsec/signature/support/root2-ca.key |  62 +++++----
 .../opensaml/xmlsec/signature/support/root3-ca.crt |  41 +++---
 .../opensaml/xmlsec/signature/support/root3-ca.key |  62 +++++----
 27 files changed, 1164 insertions(+), 837 deletions(-)

diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/README.md b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/README.md
new file mode 100644
index 000000000..c6288550d
--- /dev/null
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/README.md
@@ -0,0 +1,9 @@
+# THESE FILES ARE COPIES
+
+Many of the resources in this directory are copies of
+originals constructed by a script in another location.
+
+To update them when they change, manually copy the required files 
+from:
+
+opensaml-security-impl/src/test/resources/org/opensaml/security/x509/impl
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.crt
index 7d0a35e63..223911311 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.crt
@@ -2,34 +2,42 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
-        Signature Algorithm: sha256WithRSAEncryption
+    Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=inter1A1-ca
         Validity
-            Not Before: Feb  3 01:32:36 2017 GMT
-            Not After : Feb  3 01:32:46 2017 GMT
+            Not Before: Sep 16 01:49:18 2022 GMT
+            Not After : Sep 16 01:49:28 2022 GMT
         Subject: CN=foo.example.org
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:f1:68:f3:e9:48:47:16:79:b1:61:4a:b0:87:81:
-                    6b:94:31:59:0b:f3:df:94:4a:94:ac:58:88:fd:21:
-                    1b:ea:e3:f0:6d:df:50:77:20:aa:08:79:cc:98:f2:
-                    ef:56:78:4a:84:71:99:4f:ab:f6:cc:18:63:10:f8:
-                    3d:6e:bf:e7:84:12:83:8b:ad:93:3d:5c:5c:21:b1:
-                    37:a8:59:e5:8f:44:c0:96:ca:b3:39:9f:c2:d8:4b:
-                    6e:86:a8:ff:3a:e4:e5:d1:4e:8b:03:bb:26:80:51:
-                    58:c5:fe:57:fe:91:91:68:2c:4a:1d:08:d8:3e:03:
-                    45:d5:22:ec:6d:db:de:ad:60:f1:6c:55:7c:1b:37:
-                    f5:c3:2c:b5:37:77:b6:70:a9:b9:0a:39:37:95:92:
-                    96:0e:20:84:54:e0:b7:73:c2:f6:89:0e:ae:14:aa:
-                    90:3b:1a:24:09:35:00:b8:f9:c7:69:f0:c5:0e:86:
-                    76:c4:29:c9:79:70:b8:40:37:24:7a:c1:3c:6d:ab:
-                    1c:0c:10:4d:75:0b:e6:d7:86:ce:31:cc:e4:bf:a5:
-                    df:97:75:1a:8d:32:19:c6:8e:be:08:35:83:4b:50:
-                    c6:5a:d3:59:cd:4b:92:bc:01:f8:63:88:bf:75:01:
-                    97:2b:4c:cc:57:d3:ad:d2:e5:ad:93:ec:f0:10:63:
-                    dc:8b
+                Public-Key: (3072 bit)
+                Modulus:
+                    00:af:7d:72:66:5d:c0:b2:a1:73:6c:2f:be:47:a6:
+                    88:98:65:9e:df:6c:73:41:23:55:a4:2c:21:e8:c8:
+                    f3:dd:87:66:58:ab:f4:16:d0:82:ad:1c:58:ad:de:
+                    5c:e2:ef:50:ef:04:00:90:d6:7b:e3:4b:f5:d3:d6:
+                    03:5a:f3:eb:b2:64:e3:aa:78:5f:d2:bb:32:c6:6a:
+                    b0:97:cc:fc:64:32:6f:d5:b5:48:81:77:7f:bb:d0:
+                    76:c1:bc:31:9d:90:be:6a:7d:28:94:ba:d9:e9:e8:
+                    86:a1:bc:ed:2b:6b:95:dc:7b:13:7e:6e:35:54:f2:
+                    14:47:85:cc:35:c3:bf:8d:e8:1b:c8:f1:24:08:6f:
+                    09:a8:f6:05:7d:c2:43:71:d6:25:c9:c6:58:80:15:
+                    95:a2:70:bc:cb:d3:5a:7c:6d:df:88:38:3d:e0:c2:
+                    cd:0a:a1:79:70:d4:9f:64:b7:41:98:f1:01:0d:01:
+                    7c:5f:ce:8c:aa:cb:e8:73:ae:6b:73:13:d8:71:5a:
+                    bc:73:ca:8d:22:3e:2d:b4:8b:b1:44:30:4c:ac:6a:
+                    1a:0a:fa:9c:75:13:a2:bf:4f:59:e4:91:09:cb:cd:
+                    52:d1:c9:60:78:06:88:65:a4:ce:43:2e:e8:8b:3b:
+                    1b:63:7e:e4:9b:e0:3b:ec:56:df:bb:bc:f1:18:e4:
+                    20:e9:68:55:2e:38:95:06:00:3c:1c:0d:6d:8d:47:
+                    b0:ce:41:e9:78:36:f1:2e:92:08:08:d5:ae:95:35:
+                    75:a4:44:53:0b:86:20:84:2f:60:a4:20:b1:6c:e5:
+                    49:d2:49:ea:ad:53:b3:c0:31:e7:c3:a3:88:11:56:
+                    59:91:13:0a:68:f5:5c:cd:1b:6b:39:2e:98:e5:f2:
+                    0e:7c:e5:64:c7:a1:33:fa:62:4e:be:3d:49:13:6b:
+                    92:93:a0:48:f6:42:49:cf:51:04:4f:5e:27:7a:08:
+                    b1:24:5b:76:af:6d:23:b0:b3:82:58:3a:57:c1:39:
+                    51:a7:8d:4a:bc:41:c1:c8:b0:b7
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -41,49 +49,61 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                DA:C8:54:0C:F4:BA:23:DB:9E:A4:CD:C5:16:66:CF:5F:92:31:C7:67
+                2F:64:BE:53:94:51:B4:81:FF:B9:0C:62:CA:3C:64:A6:5C:93:F2:F9
             X509v3 Authority Key Identifier: 
-                keyid:A7:B8:9A:C3:6F:23:5C:93:B6:EE:FC:26:29:C4:B1:43:5E:74:80:22
+                keyid:F6:F7:5B:F5:C3:14:31:64:77:3C:40:12:13:54:AF:8D:7A:26:73:40
                 DirName:/CN=inter1A-ca
                 serial:01
 
             X509v3 Subject Alternative Name: 
                 DNS:foo.example.org, URI:https://foo.example.org/sp
     Signature Algorithm: sha256WithRSAEncryption
-        9d:c8:f1:ea:fc:23:25:1d:0f:37:18:6a:5d:fe:bc:5b:92:0d:
-        7a:cc:3b:05:54:5d:53:53:cc:39:d4:99:3d:3a:49:07:de:05:
-        f1:a1:f2:51:9f:e9:08:3b:ce:d5:8e:f5:87:37:12:ff:ce:4d:
-        a0:be:f6:f2:67:1f:0f:f3:9c:95:2c:79:c9:96:aa:71:ef:2e:
-        ee:7e:50:f7:c3:4a:d3:a2:d9:20:7d:a7:10:24:62:03:de:a3:
-        66:0e:9c:e2:77:79:9d:99:42:8d:3b:54:b1:57:7e:d1:32:2f:
-        5e:5f:23:84:1b:0e:ca:50:56:59:a1:a5:76:2f:23:bd:bd:1a:
-        4d:e5:6f:ce:d4:3f:6c:32:13:5d:c2:61:0d:dc:c3:d8:2a:fd:
-        fb:b8:1a:7c:57:92:f9:9e:4a:04:b6:bd:33:46:cd:38:0f:46:
-        fa:ec:ac:0e:ac:b5:f7:72:da:74:3b:2a:0c:6d:c8:54:78:f4:
-        94:e7:0b:e6:f6:34:dd:44:f7:2a:8a:bf:b6:87:b7:8a:6e:14:
-        87:a7:ad:56:20:b5:1f:fc:d1:6e:db:30:5f:28:53:78:83:4e:
-        a1:2d:91:3e:ad:d5:b4:fe:31:a7:84:ba:a5:93:cf:49:a3:0e:
-        cf:1d:fd:95:02:24:1e:45:71:a1:ad:79:8e:41:8a:4f:26:ce:
-        0f:b1:ea:8f
+         59:32:38:3b:8f:76:e8:4a:99:fd:e2:b9:dc:76:10:42:16:1f:
+         7b:f4:69:be:9f:bb:f8:3d:14:f1:7e:08:3a:0f:6e:c8:69:29:
+         34:c0:38:3b:11:34:88:66:f2:72:ce:35:dc:44:4c:fe:97:f4:
+         96:7d:3c:a9:0e:e6:ee:02:f2:94:95:2b:78:fa:18:52:25:1d:
+         31:0f:a7:5e:ca:51:21:e9:e4:1b:85:45:9c:59:89:b7:c1:16:
+         35:56:86:79:bf:d2:75:b5:1a:f3:52:23:93:6c:c6:ee:39:66:
+         58:46:e7:31:1b:a7:3d:5e:2d:39:fd:ee:11:63:8a:8a:cd:7c:
+         18:7b:df:d0:74:87:9f:4f:f1:18:14:45:55:89:f3:ad:80:d8:
+         4e:8f:6a:05:2d:bd:e1:a0:33:39:c3:71:e3:cf:80:99:1a:eb:
+         26:47:de:b4:c4:26:5e:81:d4:80:fd:0f:68:c2:43:6a:47:21:
+         f3:1b:6a:20:0c:98:16:8c:20:d4:45:6a:c3:5d:aa:0b:4e:51:
+         55:54:e2:34:d0:a1:15:01:f4:21:3b:47:24:05:e2:29:72:9a:
+         36:27:18:02:8f:bf:ad:b6:74:d7:86:f3:65:59:e8:e5:2b:02:
+         fb:a5:f5:3f:97:5d:bf:df:ca:36:d6:84:37:2c:9e:d8:8a:4d:
+         52:8a:63:31:d1:32:d9:42:96:d4:60:cb:5a:05:94:4c:29:05:
+         f9:25:69:0e:7a:03:4f:06:31:37:f4:1e:f1:c1:43:53:1b:3d:
+         37:28:3a:a9:cd:55:8d:61:db:a3:4e:b0:95:be:51:c3:02:1b:
+         c1:05:16:a0:81:8c:bf:0a:16:8f:e7:b6:65:e6:b6:83:6a:49:
+         50:1d:8c:6c:62:0e:13:aa:22:2a:39:e1:f8:cc:b1:07:a4:be:
+         f1:e6:9e:c7:34:b9:01:e3:fb:2c:5d:74:37:20:80:5a:21:cc:
+         7a:ec:a8:ba:fc:7a:a7:08:78:d5:11:d1:5a:5e:e7:e6:04:7b:
+         0b:30:b5:a7:1a:4b
 -----BEGIN CERTIFICATE-----
-MIIDoTCCAomgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAWMRQwEgYDVQQDEwtpbnRl
-cjFBMS1jYTAeFw0xNzAyMDMwMTMyMzZaFw0xNzAyMDMwMTMyNDZaMBoxGDAWBgNV
-BAMTD2Zvby5leGFtcGxlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-ggEBAPFo8+lIRxZ5sWFKsIeBa5QxWQvz35RKlKxYiP0hG+rj8G3fUHcgqgh5zJjy
-71Z4SoRxmU+r9swYYxD4PW6/54QSg4utkz1cXCGxN6hZ5Y9EwJbKszmfwthLboao
-/zrk5dFOiwO7JoBRWMX+V/6RkWgsSh0I2D4DRdUi7G3b3q1g8WxVfBs39cMstTd3
-tnCpuQo5N5WSlg4ghFTgt3PC9okOrhSqkDsaJAk1ALj5x2nwxQ6GdsQpyXlwuEA3
-JHrBPG2rHAwQTXUL5teGzjHM5L+l35d1Go0yGcaOvgg1g0tQxlrTWc1LkrwB+GOI
-v3UBlytMzFfTrdLlrZPs8BBj3IsCAwEAAaOB9TCB8jAJBgNVHRMEAjAAMBEGCWCG
-SAGG+EIBAQQEAwIGwDAOBgNVHQ8BAf8EBAMCBeAwLAYJYIZIAYb4QgENBB8WHU9w
-ZW5TU0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBTayFQM9Loj256k
-zcUWZs9fkjHHZzA9BgNVHSMENjA0gBSnuJrDbyNck7bu/CYpxLFDXnSAIqEZpBcw
-FTETMBEGA1UEAxMKaW50ZXIxQS1jYYIBATA2BgNVHREELzAtgg9mb28uZXhhbXBs
-ZS5vcmeGGmh0dHBzOi8vZm9vLmV4YW1wbGUub3JnL3NwMA0GCSqGSIb3DQEBCwUA
-A4IBAQCdyPHq/CMlHQ83GGpd/rxbkg16zDsFVF1TU8w51Jk9OkkH3gXxofJRn+kI
-O87VjvWHNxL/zk2gvvbyZx8P85yVLHnJlqpx7y7uflD3w0rTotkgfacQJGID3qNm
-Dpzid3mdmUKNO1SxV37RMi9eXyOEGw7KUFZZoaV2LyO9vRpN5W/O1D9sMhNdwmEN
-3MPYKv37uBp8V5L5nkoEtr0zRs04D0b67KwOrLX3ctp0OyoMbchUePSU5wvm9jTd
-RPcqir+2h7eKbhSHp61WILUf/NFu2zBfKFN4g06hLZE+rdW0/jGnhLqlk89Jow7P
-Hf2VAiQeRXGhrXmOQYpPJs4PseqP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 -----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.key
index 6435f9ece..f52aaa58b 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.key
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-expired.key
@@ -1,27 +1,39 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEpQIBAAKCAQEA8Wjz6UhHFnmxYUqwh4FrlDFZC/PflEqUrFiI/SEb6uPwbd9Q
-dyCqCHnMmPLvVnhKhHGZT6v2zBhjEPg9br/nhBKDi62TPVxcIbE3qFnlj0TAlsqz
-OZ/C2Etuhqj/OuTl0U6LA7smgFFYxf5X/pGRaCxKHQjYPgNF1SLsbdverWDxbFV8
-Gzf1wyy1N3e2cKm5Cjk3lZKWDiCEVOC3c8L2iQ6uFKqQOxokCTUAuPnHafDFDoZ2
-xCnJeXC4QDckesE8bascDBBNdQvm14bOMczkv6Xfl3UajTIZxo6+CDWDS1DGWtNZ
-zUuSvAH4Y4i/dQGXK0zMV9Ot0uWtk+zwEGPciwIDAQABAoIBAQCagOlabH/Syp/T
-/NFuaE5J0iuDktmNNw5gH2nNV9teQfQm3b3KAIXSVuGzIgg791D54xqT+yNBDHqa
-6cWnk/rAdHjsdHK/2tS8W4ebn61kPERmPeTnBHDXra9XT+HJ96V+iB5AjQ7fITEH
-xvjaXKALZA0q9/Yt+jo/ZtKanRWvMBYRjAp+NnhM5ExaUxDSnc9V+VW3TI7DgDh3
-NjO6ieZjYDyWpf7Wd5Nzn3aSF/xeGEBOMJblFhLLKI/bI27Q7x6+a8cxdhBjjwl0
-p32qWsBmyB0mXoGQ1onlOSiw2slAU5y+eHPZsNlW7HclO8eR0Gjv6VoddMjVwbkY
-tIGkWTIBAoGBAPzUCyEQvZs6yUDOsv098EhyRb/mTY1oqaEGF7PPHey0GP6hhN0y
-7D+KqldmzqnVGBYOmTWKfgLK76QsPt8J5WssogCyp4OFG73vuHwP3HNGLb8bJ1Ae
-n5h16aAsoGf+ifZCps2rCgCDW1ShfC19WAB58Nx3sMIvM8k3gMlDrmfrAoGBAPRw
-PUtODHP//JGRP+UPFsj/BVDQgclRPnfwzSWGSevq5DSbm+zEXkS2esd8jx9mVb1E
-R3TAgDkf6KvCzJukh70//qwjX+QZP9CajktiGGpvHWHfyn7NikkXmK2wl+z+LyyP
-YLqzomBrTEXN8e4eYeTQZi2mIvrPIqP+AXNB7NXhAoGBAMX7ZhumeFOuXRqawh78
-+cRBd80mE2TAqNSnaLgtYEmTXl9HLDvrPIUlmO6IWx0y+YGMPP1oTfTx5WayHymZ
-HkYm1VWmkPa0rVy288hywzahpgEYylg7Is7IxwHe8F1/PZnR57z2SwbL1iEXs54L
-oXX+B1cdgxUM0YioJfl1PoWxAoGBALm3gUpyzVFhIAN1aSdetIAYCnDhSoqreJvm
-T+d/xTBCsgoqZGiatcjdICHqyE8iEGiRtPzGuWUtkjjV82EZu6wVMCiXY+bJLEwQ
-8aXirQxIyfkv8AkxnyxziiQFNRjx8uOXN/YCP4+kVjn/BB5X5SbVE50BSjhnIjmY
-5n8sioXhAoGAOqvm0u4hVXyA0d7Zq2Ckj7mGqDftvPeUEvRExiZD+FbJWni4jsDa
-LO+5Vb6Hdl1KJRq5+4+Ms4D6Ac5H2jxceFsp+L2IsrWJ+CYWtU/zalTfkjUhtyYv
-C+SzpUIVBolCFuKdHbmcV2FBINZ3eXTp2eJIbMlDuvu2vFq+rFoS0p8=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 -----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.crt
index 9fb637385..ede2ce498 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.crt
@@ -2,34 +2,42 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
-        Signature Algorithm: sha256WithRSAEncryption
+    Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=inter1A1-ca
         Validity
-            Not Before: Feb  3 01:32:45 2017 GMT
-            Not After : Jan 27 01:32:45 2047 GMT
+            Not Before: Sep 16 01:49:40 2022 GMT
+            Not After : Sep  8 01:49:40 2052 GMT
         Subject: CN=foo.example.org
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:bf:dc:9d:0c:4b:96:56:15:59:ca:a8:0a:ca:47:
-                    fc:90:25:e6:33:52:ef:c8:7d:69:b7:f8:a3:5a:37:
-                    dd:58:ae:65:ef:f4:d9:83:86:51:d3:0e:32:ac:6e:
-                    af:80:4b:c0:58:63:b4:de:c8:56:10:0c:bf:e6:21:
-                    1f:b3:bc:fe:03:b1:a7:dd:e8:26:7a:c6:e1:0f:e0:
-                    78:22:e0:33:30:00:b7:0e:ae:1e:02:5c:8b:1c:48:
-                    08:1f:5a:4c:d7:f2:b9:9e:0a:3c:02:44:c2:5e:70:
-                    e2:2f:09:ee:27:5e:d5:e0:4a:fd:64:a2:04:1e:bf:
-                    9b:22:a6:40:1d:7d:3e:74:54:f4:a6:52:be:0b:40:
-                    9b:68:a3:5d:db:3b:5d:81:eb:68:33:2f:11:cd:44:
-                    b3:0c:96:8a:b9:14:36:1b:58:93:aa:75:73:ea:06:
-                    7d:7d:b8:60:bf:81:35:b2:77:3d:e4:fa:89:d5:c0:
-                    a9:40:67:1e:ad:ef:50:e5:5e:c0:ad:85:33:07:1f:
-                    08:8a:2c:e2:ab:be:00:c2:4a:9e:56:e4:c0:5f:07:
-                    30:18:90:47:5d:c1:b7:2c:98:1d:0c:34:55:81:3e:
-                    54:75:71:0c:ad:17:67:da:7a:8e:f4:06:aa:fe:52:
-                    01:f7:1d:18:3c:d1:00:01:e9:40:db:15:a8:74:1a:
-                    b4:59
+                Public-Key: (3072 bit)
+                Modulus:
+                    00:9d:89:93:64:9d:63:9c:04:9d:b4:ee:47:ea:cc:
+                    0f:38:68:ec:04:dd:5a:b5:e1:8f:f3:15:59:ef:54:
+                    ff:fa:b1:67:d9:8b:e0:03:67:c5:10:ef:7d:08:d1:
+                    8c:01:02:fa:af:f9:b3:14:23:66:1e:73:48:01:39:
+                    72:cc:89:0f:c6:1d:01:04:f4:ca:90:37:d1:e6:f6:
+                    72:4f:25:1e:22:8a:ef:b1:c9:1c:fa:72:05:cb:48:
+                    91:c9:60:80:97:6d:02:b1:56:1b:7a:6e:fa:28:97:
+                    9c:7c:f1:28:8c:25:ff:38:44:27:f3:51:e6:3d:d4:
+                    fb:28:0e:47:77:01:56:9c:45:17:a3:73:ca:5c:b2:
+                    b8:78:ab:62:80:ec:ef:34:3f:70:91:00:44:12:74:
+                    26:21:a5:0a:ce:a0:f2:40:f9:c6:b6:e8:9f:d6:85:
+                    16:cf:42:47:da:91:57:21:6d:69:63:2f:22:af:d0:
+                    d1:3d:e8:c7:05:d6:70:93:11:7a:3f:6b:7c:4f:3e:
+                    d2:5f:ab:bc:d0:d9:88:f5:f8:18:0f:58:e3:22:a7:
+                    62:4c:27:1d:e5:d7:bb:db:ad:d9:4a:1c:6a:26:a6:
+                    97:d6:d2:33:3e:0f:e5:40:aa:3b:4c:cb:90:aa:13:
+                    f7:5d:8b:69:c4:72:38:7d:fa:dd:c0:61:5c:f4:49:
+                    13:44:1c:df:6b:67:ba:9b:bb:ab:07:53:dc:46:ea:
+                    fd:14:f9:b0:ee:00:94:d1:bf:6b:47:9c:94:9f:67:
+                    8a:7b:b1:f5:2b:04:da:92:67:56:b4:e4:5b:21:a8:
+                    ea:48:55:64:68:13:62:f2:be:4b:f0:4c:a2:c6:bf:
+                    1e:46:cb:cb:6e:8f:50:d0:c1:74:7f:61:76:6e:c3:
+                    e0:13:e4:ad:26:59:ba:e1:ba:44:ac:8d:75:43:bf:
+                    da:e3:bb:7c:3a:53:b2:2a:f7:ed:fa:28:9b:64:bf:
+                    56:db:60:fa:d1:5e:bd:60:5d:5f:6f:6f:fa:8c:27:
+                    3d:37:9e:c9:85:73:10:9a:89:f3
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -41,49 +49,61 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                31:A2:3C:F2:49:DE:BB:AC:B2:A0:53:6D:D8:18:F4:6D:9D:F7:0E:37
+                75:84:69:DD:49:6B:63:EE:D2:6C:CB:3B:DC:D3:55:D9:10:2B:A7:80
             X509v3 Authority Key Identifier: 
-                keyid:A7:B8:9A:C3:6F:23:5C:93:B6:EE:FC:26:29:C4:B1:43:5E:74:80:22
+                keyid:F6:F7:5B:F5:C3:14:31:64:77:3C:40:12:13:54:AF:8D:7A:26:73:40
                 DirName:/CN=inter1A-ca
                 serial:01
 
             X509v3 Subject Alternative Name: 
                 DNS:foo.example.org, URI:https://foo.example.org/sp
     Signature Algorithm: sha256WithRSAEncryption
-        5e:e1:c7:ed:c7:a0:03:d6:fe:31:74:06:ea:80:98:13:43:9b:
-        d7:34:76:b4:39:d2:55:11:14:55:07:95:34:3f:1d:18:91:48:
-        23:d1:5a:4e:2a:f1:a0:d6:6f:88:a6:31:8a:c7:f2:7b:32:31:
-        71:b0:ba:8c:37:c4:36:82:42:31:0d:47:33:8a:44:c3:59:04:
-        e2:7b:94:1f:54:88:22:a7:57:6a:64:fa:01:5c:de:d4:40:9e:
-        90:2c:67:42:36:38:11:07:2b:ef:0d:db:56:a5:08:ef:cd:a7:
-        6d:cb:15:b0:d9:af:42:a6:f6:b8:dd:70:dd:70:54:9c:5e:7f:
-        15:f2:aa:77:0d:d8:a2:0c:e1:26:37:14:38:94:1b:26:27:4f:
-        a5:9b:c6:e1:1b:c5:6f:60:9c:68:e5:07:b9:06:59:9e:2b:97:
-        b2:8b:ed:20:8a:66:9e:73:b8:91:45:a2:64:d0:d5:19:89:34:
-        f2:48:1f:58:7a:8c:37:2f:5e:c3:90:f6:b4:60:cf:5c:98:f9:
-        ac:d9:93:c0:ab:b9:f3:2e:90:0e:ec:b2:bd:74:c1:6b:2d:70:
-        ba:2b:4f:38:77:ef:98:98:33:12:7f:dd:06:c3:cd:84:ae:f1:
-        41:c6:29:d5:13:01:e6:04:73:0c:0c:26:cf:d3:b7:2d:76:df:
-        20:41:a0:1b
+         24:e9:fc:69:69:80:43:4f:6b:83:e4:52:d3:db:25:d8:82:29:
+         ef:1d:bd:d8:94:69:39:1c:3b:45:18:e9:e5:47:61:35:57:28:
+         d7:3d:a2:b0:e6:22:cf:10:77:82:70:82:7b:b6:a3:69:a8:37:
+         b8:34:bc:e2:7e:2f:9b:b9:33:66:61:c6:61:cb:7c:ba:3a:cc:
+         88:e4:10:cb:d0:4d:8c:c7:26:de:52:6c:41:4f:57:8d:03:e8:
+         ae:68:f2:ce:85:e9:e0:ea:f2:8a:be:b3:22:da:7a:b3:48:fc:
+         a9:be:e9:a9:78:f5:8d:69:d1:b6:9d:5f:2c:3d:bd:9f:c4:66:
+         30:04:b8:84:16:4f:fc:2e:2e:10:8b:0b:11:23:86:76:fb:d0:
+         d7:cb:8b:0a:d8:40:8c:bd:f6:33:e5:bd:d9:ba:66:b8:9d:f3:
+         d0:7c:21:3d:e8:87:b7:65:8a:6a:48:07:6c:94:56:ae:c1:ec:
+         a0:5d:8b:37:19:f8:6b:46:9d:7a:9a:de:4a:76:25:30:3a:c3:
+         38:09:65:1e:33:63:c3:e8:e3:0b:f0:b8:20:06:d5:d1:2e:04:
+         85:95:98:6c:79:eb:ea:04:a2:21:94:32:ca:b1:34:9b:1c:d5:
+         54:f3:ac:52:1c:4e:51:01:62:88:e3:6d:4a:8a:80:7c:88:26:
+         07:8b:2c:84:3e:51:32:9c:1d:0e:d7:1b:77:74:5d:38:b4:24:
+         41:d0:dc:8a:82:3a:c1:09:0b:46:b5:dc:e2:08:aa:6a:7d:63:
+         17:05:65:aa:5e:2e:5f:9e:25:13:94:54:5b:d7:39:a7:2f:4f:
+         1b:01:d3:23:62:bc:cd:27:72:cf:5e:4b:be:93:20:e8:49:e4:
+         cc:75:60:d4:72:12:98:95:3b:e0:0e:74:1d:43:96:e7:62:69:
+         b6:bd:cf:60:b4:a3:d7:45:20:46:9b:21:4d:d9:ca:9e:39:90:
+         4e:fa:a3:b1:9b:5f:cc:ae:a4:98:ae:de:84:79:95:fa:4f:da:
+         18:70:35:5f:3c:44
 -----BEGIN CERTIFICATE-----
-MIIDoTCCAomgAwIBAgIBATANBgkqhkiG9w0BAQsFADAWMRQwEgYDVQQDEwtpbnRl
-cjFBMS1jYTAeFw0xNzAyMDMwMTMyNDVaFw00NzAxMjcwMTMyNDVaMBoxGDAWBgNV
-BAMTD2Zvby5leGFtcGxlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-ggEBAL/cnQxLllYVWcqoCspH/JAl5jNS78h9abf4o1o33ViuZe/02YOGUdMOMqxu
-r4BLwFhjtN7IVhAMv+YhH7O8/gOxp93oJnrG4Q/geCLgMzAAtw6uHgJcixxICB9a
-TNfyuZ4KPAJEwl5w4i8J7ide1eBK/WSiBB6/myKmQB19PnRU9KZSvgtAm2ijXds7
-XYHraDMvEc1EswyWirkUNhtYk6p1c+oGfX24YL+BNbJ3PeT6idXAqUBnHq3vUOVe
-wK2FMwcfCIos4qu+AMJKnlbkwF8HMBiQR13BtyyYHQw0VYE+VHVxDK0XZ9p6jvQG
-qv5SAfcdGDzRAAHpQNsVqHQatFkCAwEAAaOB9TCB8jAJBgNVHRMEAjAAMBEGCWCG
-SAGG+EIBAQQEAwIGwDAOBgNVHQ8BAf8EBAMCBeAwLAYJYIZIAYb4QgENBB8WHU9w
-ZW5TU0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBQxojzySd67rLKg
-U23YGPRtnfcONzA9BgNVHSMENjA0gBSnuJrDbyNck7bu/CYpxLFDXnSAIqEZpBcw
-FTETMBEGA1UEAxMKaW50ZXIxQS1jYYIBATA2BgNVHREELzAtgg9mb28uZXhhbXBs
-ZS5vcmeGGmh0dHBzOi8vZm9vLmV4YW1wbGUub3JnL3NwMA0GCSqGSIb3DQEBCwUA
-A4IBAQBe4cftx6AD1v4xdAbqgJgTQ5vXNHa0OdJVERRVB5U0Px0YkUgj0VpOKvGg
-1m+IpjGKx/J7MjFxsLqMN8Q2gkIxDUczikTDWQTie5QfVIgip1dqZPoBXN7UQJ6Q
-LGdCNjgRByvvDdtWpQjvzadtyxWw2a9Cpva43XDdcFScXn8V8qp3DdiiDOEmNxQ4
-lBsmJ0+lm8bhG8VvYJxo5Qe5BlmeK5eyi+0gimaec7iRRaJk0NUZiTTySB9Yeow3
-L17DkPa0YM9cmPms2ZPAq7nzLpAO7LK9dMFrLXC6K084d++YmDMSf90Gw82ErvFB
-xinVEwHmBHMMDCbP07ctdt8gQaAb
+MIIEozCCAwugAwIBAgIBATANBgkqhkiG9w0BAQsFADAWMRQwEgYDVQQDEwtpbnRl
+cjFBMS1jYTAgFw0yMjA5MTYwMTQ5NDBaGA8yMDUyMDkwODAxNDk0MFowGjEYMBYG
+A1UEAxMPZm9vLmV4YW1wbGUub3JnMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIB
+igKCAYEAnYmTZJ1jnASdtO5H6swPOGjsBN1ateGP8xVZ71T/+rFn2YvgA2fFEO99
+CNGMAQL6r/mzFCNmHnNIATlyzIkPxh0BBPTKkDfR5vZyTyUeIorvsckc+nIFy0iR
+yWCAl20CsVYbem76KJecfPEojCX/OEQn81HmPdT7KA5HdwFWnEUXo3PKXLK4eKti
+gOzvND9wkQBEEnQmIaUKzqDyQPnGtuif1oUWz0JH2pFXIW1pYy8ir9DRPejHBdZw
+kxF6P2t8Tz7SX6u80NmI9fgYD1jjIqdiTCcd5de7263ZShxqJqaX1tIzPg/lQKo7
+TMuQqhP3XYtpxHI4ffrdwGFc9EkTRBzfa2e6m7urB1PcRur9FPmw7gCU0b9rR5yU
+n2eKe7H1KwTakmdWtORbIajqSFVkaBNi8r5L8Eyixr8eRsvLbo9Q0MF0f2F2bsPg
+E+StJlm64bpErI11Q7/a47t8OlOyKvft+iibZL9W22D60V69YF1fb2/6jCc9N57J
+hXMQmonzAgMBAAGjgfUwgfIwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBsAw
+DgYDVR0PAQH/BAQDAgXgMCwGCWCGSAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRl
+ZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUdYRp3UlrY+7SbMs73NNV2RArp4AwPQYD
+VR0jBDYwNIAU9vdb9cMUMWR3PEASE1SvjXomc0ChGaQXMBUxEzARBgNVBAMTCmlu
+dGVyMUEtY2GCAQEwNgYDVR0RBC8wLYIPZm9vLmV4YW1wbGUub3JnhhpodHRwczov
+L2Zvby5leGFtcGxlLm9yZy9zcDANBgkqhkiG9w0BAQsFAAOCAYEAJOn8aWmAQ09r
+g+RS09sl2IIp7x292JRpORw7RRjp5UdhNVco1z2isOYizxB3gnCCe7ajaag3uDS8
+4n4vm7kzZmHGYct8ujrMiOQQy9BNjMcm3lJsQU9XjQPormjyzoXp4Oryir6zItp6
+s0j8qb7pqXj1jWnRtp1fLD29n8RmMAS4hBZP/C4uEIsLESOGdvvQ18uLCthAjL32
+M+W92bpmuJ3z0HwhPeiHt2WKakgHbJRWrsHsoF2LNxn4a0adepreSnYlMDrDOAll
+HjNjw+jjC/C4IAbV0S4EhZWYbHnr6gSiIZQyyrE0mxzVVPOsUhxOUQFiiONtSoqA
+fIgmB4sshD5RMpwdDtcbd3RdOLQkQdDcioI6wQkLRrXc4giqan1jFwVlql4uX54l
+E5RUW9c5py9PGwHTI2K8zSdyz15LvpMg6EnkzHVg1HISmJU74A50HUOW52Jptr3P
+YLSj10UgRpshTdnKnjmQTvqjsZtfzK6kmK7ehHmV+k/aGHA1XzxE
 -----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.key
index 86ebe42af..080220250 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.key
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-good.key
@@ -1,27 +1,39 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEAv9ydDEuWVhVZyqgKykf8kCXmM1LvyH1pt/ijWjfdWK5l7/TZ
-g4ZR0w4yrG6vgEvAWGO03shWEAy/5iEfs7z+A7Gn3egmesbhD+B4IuAzMAC3Dq4e
-AlyLHEgIH1pM1/K5ngo8AkTCXnDiLwnuJ17V4Er9ZKIEHr+bIqZAHX0+dFT0plK+
-C0CbaKNd2ztdgetoMy8RzUSzDJaKuRQ2G1iTqnVz6gZ9fbhgv4E1snc95PqJ1cCp
-QGcere9Q5V7ArYUzBx8Iiiziq74AwkqeVuTAXwcwGJBHXcG3LJgdDDRVgT5UdXEM
-rRdn2nqO9Aaq/lIB9x0YPNEAAelA2xWodBq0WQIDAQABAoIBAQC8bMLD73wOwNs1
-X0Fxla8iNkZVQ2+AXEK2TfbHxLOaw3QTbEkulXzIpVn45J9xhXO6mvloDiIPkyXn
-scI7uDFTmWc+VR9tVuJzwETcI4nB7AHb5f5M3Ww1czye5gUv1A6denmi1Lp7G6vW
-/I6qlcXAiIVBDqizNgP6zIGNNJJgldN2kS4eaIAD0di68DK7tjTudCL0zekqTx2g
-kr5bBZMVt0jlCFud/VKb/nmhjR7KvbHRwKrSy2DN45uO6YOIjbxDdOIOwQjvv3bP
-7b63x95vXijYzT8hIkTlRhwvJxO11Qc5gn9mteJMlJooLWFyRRM0D6weZYmsB82Q
-NG9hePg9AoGBAP3bej9JRwWqmIHeV2X+JcQLcffKcLWKfTf5sclbVUhovRldrF1L
-5dRbo+/xWjH8X4lV7+hXPliQnlts6MiIw/2qAXYaDEu3giu0oKv/vpxpihE8nBw5
-0D25O63Bwb4bpI80B/fOEpIwKi8157eAWlwMIueNhjA9jYddLYsLrxqfAoGBAMF7
-LdEETN7wG2U02Gz2AR4IhwXPUyIcmPWlGJmNiRMjSo7ZrzZqSli1v2Eop7oAcb7m
-zCIqUiUULa1ciPCfORfcvzytiN4RS5e1Lvg1g284GLmhJ6ghRNJSBatFAmmGgc9p
-aKHnBTZjB9mzJyh5E7gQ/4b1iQKyJc7ZxARsBsYHAoGAdOzkj8XGqrt650Zr5xR6
-fKPw6HscEuIo7uFZnC8vRtzHTKmyvH466+cRyXDXZHKj5nPovpGAq/Zgmie9yLAF
-5g6qAaXZx/5MPKlD4DU5rH2IFIxgMzgFzIhHDq9R96hv0W3bxa3rK953b6tagVDj
-TcZhRVoQVqPjTlgCpCrLim0CgYA0Z7/OKGMF03UoIXspcCx3TQn9ad1zlNldV51l
-Ie/pzhpIvO93RqzigD/Y+iEMAUjN00ehTWM4hdGlbjXtLsNREkp+DebPd1HJQpr5
-Qc1a14/i36KVKIWyjeLZM/TmTjdkzYE4sRE5XPNoZN0LWlgb+AauMF0u7L/O2i78
-n6HqCwKBgQCkYCdG04uF17cSnZavpsOA+sE8ACqRWzUco9IPgwwhnqzyFL6CM0nB
-Ql3XHkXAm/nZwAEZEeMuJ0gjUy9TI4lVo76g8M346Fs9y4DdjSK9dq3DGqPVNM0P
-CcNtM/CbdEPTCJwTzJ+cQHkrDUqz+hVsoXbz8iNzQgwkT39x1ZVcAQ==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 -----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.crt
index 326e78d0f..8c6c4eaba 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.crt
@@ -2,34 +2,42 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 3 (0x3)
-        Signature Algorithm: sha256WithRSAEncryption
+    Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=inter1A1-ca
         Validity
-            Not Before: Feb  3 01:32:48 2017 GMT
-            Not After : Jan 27 01:32:48 2047 GMT
+            Not Before: Sep 16 01:49:46 2022 GMT
+            Not After : Sep  8 01:49:46 2052 GMT
         Subject: CN=foo.example.org
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:9f:0f:d3:6c:22:be:60:2f:61:d5:ad:de:90:5e:
-                    0b:26:5c:4e:c7:fd:3d:13:41:18:e0:d0:44:92:7a:
-                    15:d9:3e:1e:3c:66:2b:4a:92:8f:ab:eb:0f:35:dd:
-                    e4:d4:66:18:0f:1c:64:c2:89:2a:3f:89:f6:67:c8:
-                    f5:4d:0f:28:ba:a9:31:f8:d2:82:e5:e4:7c:e5:96:
-                    42:ca:45:b7:16:f3:91:fa:95:2a:f1:21:1d:cd:32:
-                    fb:7e:cb:95:c6:80:99:6a:fa:86:9a:58:4e:df:ee:
-                    12:3d:da:6e:fc:e5:4d:0b:c6:93:6b:1d:cc:ab:fc:
-                    05:39:b0:15:21:b3:b1:74:25:0d:c2:87:53:98:d7:
-                    b1:c4:75:28:58:12:1d:0b:a6:be:b5:53:f5:38:08:
-                    bc:f6:e4:55:d7:98:e6:36:0b:af:cc:9f:e0:97:72:
-                    76:6f:8e:70:13:a0:34:44:74:27:07:77:f7:cc:4b:
-                    8e:e3:7d:a0:6e:5a:f1:d8:8e:53:c2:15:af:c8:e3:
-                    85:ef:80:40:83:c2:4a:75:de:e2:e7:8c:32:72:2c:
-                    24:f9:ca:90:e0:8d:8a:0c:10:0a:ce:b4:bc:e7:91:
-                    aa:0b:87:5a:e1:94:92:d1:62:67:0f:57:f2:cb:db:
-                    09:b8:99:74:80:57:6f:56:65:98:fa:7b:72:08:fe:
-                    23:1d
+                Public-Key: (3072 bit)
+                Modulus:
+                    00:b9:5b:73:f6:22:20:50:12:73:fd:05:c2:83:75:
+                    23:b6:af:82:dc:62:69:01:01:82:de:a5:3e:ce:0c:
+                    b4:4c:0f:71:d9:e6:6d:9b:0b:32:0c:3f:f5:82:47:
+                    83:79:c5:0d:ea:6d:a0:df:89:e1:aa:e5:aa:b5:87:
+                    c7:19:91:8f:77:98:cc:37:91:b9:2c:3d:75:d7:17:
+                    aa:31:b1:a7:be:d6:6e:a8:31:b4:97:73:22:30:6f:
+                    a4:26:63:b8:5a:5d:45:a5:72:07:f1:9d:8d:18:01:
+                    fb:1e:e2:9d:41:4d:18:8e:01:50:7c:34:44:d8:5f:
+                    3d:66:9f:b1:5f:23:13:bf:f5:24:41:15:49:1c:0e:
+                    60:c0:f9:0d:45:43:d3:3e:7b:6b:56:40:c0:3b:f2:
+                    72:e8:73:fa:c8:16:82:54:63:28:fb:54:b6:87:2e:
+                    d3:a1:d5:bd:b0:0c:aa:c1:e4:fb:fb:08:af:c0:98:
+                    3e:38:19:be:6f:13:8f:ec:a7:1a:c0:93:7b:84:91:
+                    4b:17:11:7d:65:18:90:75:ad:a7:61:7a:46:a1:4c:
+                    c8:65:bc:a3:30:55:6f:c9:2f:81:94:eb:43:33:2d:
+                    6e:64:13:90:fc:c0:11:44:68:01:07:bb:f8:92:d3:
+                    b3:78:e1:93:7c:63:db:5b:22:ee:83:43:3e:e2:19:
+                    b7:5f:27:35:f4:44:3e:78:68:82:76:29:55:0d:dd:
+                    50:30:68:27:e6:f5:d9:6f:6a:71:bd:f8:6b:8c:e7:
+                    8f:bd:09:7c:ab:9e:c4:d9:c9:fa:da:18:f1:56:0d:
+                    9c:cb:d9:8d:d6:c1:b7:78:a9:eb:75:b5:54:5c:35:
+                    8f:f7:79:e9:71:cf:15:ce:f1:34:5d:ed:bf:00:20:
+                    07:93:a9:ff:8b:dc:da:40:06:e5:ca:11:02:38:d8:
+                    fd:7a:ef:1c:e4:53:19:43:87:9e:c2:cf:12:52:17:
+                    c8:37:2b:9e:8d:5b:35:5c:07:3a:c8:ee:c0:f4:46:
+                    33:6c:34:86:ef:1e:4d:c7:1a:75
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -41,49 +49,61 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                8C:86:43:1F:DC:A2:70:57:53:17:B6:F5:0E:2F:06:3B:36:09:84:E3
+                17:04:90:14:C6:C8:67:F9:06:5A:FE:CB:0D:35:9C:B9:AB:0F:FC:0F
             X509v3 Authority Key Identifier: 
-                keyid:A7:B8:9A:C3:6F:23:5C:93:B6:EE:FC:26:29:C4:B1:43:5E:74:80:22
+                keyid:F6:F7:5B:F5:C3:14:31:64:77:3C:40:12:13:54:AF:8D:7A:26:73:40
                 DirName:/CN=inter1A-ca
                 serial:01
 
             X509v3 Subject Alternative Name: 
                 DNS:foo.example.org, URI:https://foo.example.org/sp
     Signature Algorithm: sha256WithRSAEncryption
-        38:8f:a1:15:d9:14:03:32:d7:8b:8e:ca:e3:5f:1a:49:be:53:
-        d5:3b:86:e3:a7:4e:2a:2d:22:40:c6:a2:4c:e7:b1:02:a1:ce:
-        42:f2:31:a6:36:04:64:66:64:90:8d:51:b8:d0:6b:06:2e:55:
-        47:d8:59:b6:f9:3e:08:b8:20:14:51:ad:cb:9b:e1:68:86:c5:
-        8f:e3:d4:50:02:e6:61:f3:88:19:62:f2:99:d6:bf:e0:f5:63:
-        60:01:f1:ab:11:19:d6:a6:55:6c:07:f2:71:ff:25:b6:cc:ed:
-        68:b7:30:9e:ce:d8:7d:0d:9f:72:ba:3e:65:18:7a:48:ac:cd:
-        53:4d:8f:c2:6f:a4:d0:24:14:48:22:0f:ac:1f:70:41:f9:38:
-        1b:5d:1f:61:be:d2:99:75:d1:55:11:9e:08:74:64:84:37:64:
-        94:27:78:8f:8b:90:f1:a2:17:f0:d9:c2:3c:c3:e1:cf:d7:77:
-        26:05:52:80:30:ec:b5:56:32:63:c1:c0:d1:22:e5:08:78:f0:
-        65:57:e5:6b:8f:b4:11:12:90:02:45:70:33:c8:2c:80:76:70:
-        dc:d1:f0:91:00:66:16:c2:f1:f9:ce:61:93:01:da:bf:b4:0f:
-        03:6d:0e:60:fd:90:05:01:dc:43:c8:ac:2a:60:38:ae:ed:e6:
-        06:15:94:da
+         90:1c:82:3f:c4:0a:5d:e6:2a:76:b2:ec:26:a1:37:1f:62:8d:
+         00:93:c3:f6:08:39:09:5e:64:60:51:75:cb:9b:c6:34:2f:44:
+         ea:69:5f:c2:61:ce:f6:59:4d:cd:97:e6:d6:c7:87:25:e7:e3:
+         11:cc:01:0d:9d:73:ec:0a:12:bb:69:f1:b0:5a:b7:12:06:59:
+         2c:76:44:4c:8b:21:7d:29:93:92:e6:50:a8:69:38:d9:46:93:
+         6e:5f:3a:7d:6b:08:3f:72:bf:9c:c7:9f:bd:60:2a:ca:a4:95:
+         d3:cf:fe:11:11:4c:71:5a:b0:34:da:35:32:30:03:c8:8f:2a:
+         67:7a:21:37:ac:44:62:f2:fe:e7:c8:cc:02:b0:83:14:3f:5f:
+         a4:80:b7:b3:bb:d0:a2:08:f4:2b:59:ec:1e:24:f6:3b:c1:f4:
+         89:f2:cf:a4:ec:26:fb:e5:1f:35:db:5b:1a:5a:a4:a4:87:cb:
+         d2:1e:a5:52:0f:0c:8b:5f:b9:95:03:6f:86:e7:a3:29:68:b4:
+         29:95:71:8f:d0:92:cd:66:fa:9a:2a:29:53:78:00:6e:a4:32:
+         58:83:7c:9f:b3:7b:fc:16:ce:73:85:6d:54:d7:2e:49:ca:f1:
+         fc:86:52:87:68:1f:3d:3a:00:b7:cf:81:38:3a:f6:72:ab:6f:
+         ac:15:16:48:ce:5b:61:f9:46:83:bf:7b:59:44:cc:a2:7c:5a:
+         75:b7:e1:00:45:b4:bc:0b:cb:8b:29:e8:05:03:3a:c1:ea:97:
+         6f:02:73:59:04:a8:a6:ab:6b:75:87:d7:ae:d1:d5:cd:79:28:
+         a5:97:3d:55:f3:54:55:08:6b:ee:42:17:d8:28:5e:b3:38:52:
+         64:a0:c7:93:ea:6d:aa:34:0d:f0:3a:da:47:54:dd:09:9d:78:
+         6c:25:c5:f7:22:dc:03:9f:0b:80:50:02:5d:26:af:49:6b:5e:
+         99:fe:24:44:a7:f4:b1:6c:5d:c5:4b:bd:e3:86:03:ea:dc:c3:
+         38:98:8d:ab:47:70
 -----BEGIN CERTIFICATE-----
-MIIDoTCCAomgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAWMRQwEgYDVQQDEwtpbnRl
-cjFBMS1jYTAeFw0xNzAyMDMwMTMyNDhaFw00NzAxMjcwMTMyNDhaMBoxGDAWBgNV
-BAMTD2Zvby5leGFtcGxlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-ggEBAJ8P02wivmAvYdWt3pBeCyZcTsf9PRNBGODQRJJ6Fdk+HjxmK0qSj6vrDzXd
-5NRmGA8cZMKJKj+J9mfI9U0PKLqpMfjSguXkfOWWQspFtxbzkfqVKvEhHc0y+37L
-lcaAmWr6hppYTt/uEj3abvzlTQvGk2sdzKv8BTmwFSGzsXQlDcKHU5jXscR1KFgS
-HQumvrVT9TgIvPbkVdeY5jYLr8yf4Jdydm+OcBOgNER0Jwd398xLjuN9oG5a8diO
-U8IVr8jjhe+AQIPCSnXe4ueMMnIsJPnKkOCNigwQCs60vOeRqguHWuGUktFiZw9X
-8svbCbiZdIBXb1ZlmPp7cgj+Ix0CAwEAAaOB9TCB8jAJBgNVHRMEAjAAMBEGCWCG
-SAGG+EIBAQQEAwIGwDAOBgNVHQ8BAf8EBAMCBeAwLAYJYIZIAYb4QgENBB8WHU9w
-ZW5TU0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBSMhkMf3KJwV1MX
-tvUOLwY7NgmE4zA9BgNVHSMENjA0gBSnuJrDbyNck7bu/CYpxLFDXnSAIqEZpBcw
-FTETMBEGA1UEAxMKaW50ZXIxQS1jYYIBATA2BgNVHREELzAtgg9mb28uZXhhbXBs
-ZS5vcmeGGmh0dHBzOi8vZm9vLmV4YW1wbGUub3JnL3NwMA0GCSqGSIb3DQEBCwUA
-A4IBAQA4j6EV2RQDMteLjsrjXxpJvlPVO4bjp04qLSJAxqJM57ECoc5C8jGmNgRk
-ZmSQjVG40GsGLlVH2Fm2+T4IuCAUUa3Lm+FohsWP49RQAuZh84gZYvKZ1r/g9WNg
-AfGrERnWplVsB/Jx/yW2zO1otzCezth9DZ9yuj5lGHpIrM1TTY/Cb6TQJBRIIg+s
-H3BB+TgbXR9hvtKZddFVEZ4IdGSEN2SUJ3iPi5Dxohfw2cI8w+HP13cmBVKAMOy1
-VjJjwcDRIuUIePBlV+Vrj7QREpACRXAzyCyAdnDc0fCRAGYWwvH5zmGTAdq/tA8D
-bQ5g/ZAFAdxDyKwqYDiu7eYGFZTa
+MIIEozCCAwugAwIBAgIBAzANBgkqhkiG9w0BAQsFADAWMRQwEgYDVQQDEwtpbnRl
+cjFBMS1jYTAgFw0yMjA5MTYwMTQ5NDZaGA8yMDUyMDkwODAxNDk0NlowGjEYMBYG
+A1UEAxMPZm9vLmV4YW1wbGUub3JnMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIB
+igKCAYEAuVtz9iIgUBJz/QXCg3Ujtq+C3GJpAQGC3qU+zgy0TA9x2eZtmwsyDD/1
+gkeDecUN6m2g34nhquWqtYfHGZGPd5jMN5G5LD111xeqMbGnvtZuqDG0l3MiMG+k
+JmO4Wl1FpXIH8Z2NGAH7HuKdQU0YjgFQfDRE2F89Zp+xXyMTv/UkQRVJHA5gwPkN
+RUPTPntrVkDAO/Jy6HP6yBaCVGMo+1S2hy7TodW9sAyqweT7+wivwJg+OBm+bxOP
+7KcawJN7hJFLFxF9ZRiQda2nYXpGoUzIZbyjMFVvyS+BlOtDMy1uZBOQ/MARRGgB
+B7v4ktOzeOGTfGPbWyLug0M+4hm3Xyc19EQ+eGiCdilVDd1QMGgn5vXZb2pxvfhr
+jOePvQl8q57E2cn62hjxVg2cy9mN1sG3eKnrdbVUXDWP93npcc8VzvE0Xe2/ACAH
+k6n/i9zaQAblyhECONj9eu8c5FMZQ4eews8SUhfINyuejVs1XAc6yO7A9EYzbDSG
+7x5Nxxp1AgMBAAGjgfUwgfIwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBsAw
+DgYDVR0PAQH/BAQDAgXgMCwGCWCGSAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRl
+ZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUFwSQFMbIZ/kGWv7LDTWcuasP/A8wPQYD
+VR0jBDYwNIAU9vdb9cMUMWR3PEASE1SvjXomc0ChGaQXMBUxEzARBgNVBAMTCmlu
+dGVyMUEtY2GCAQEwNgYDVR0RBC8wLYIPZm9vLmV4YW1wbGUub3JnhhpodHRwczov
+L2Zvby5leGFtcGxlLm9yZy9zcDANBgkqhkiG9w0BAQsFAAOCAYEAkByCP8QKXeYq
+drLsJqE3H2KNAJPD9gg5CV5kYFF1y5vGNC9E6mlfwmHO9llNzZfm1seHJefjEcwB
+DZ1z7AoSu2nxsFq3EgZZLHZETIshfSmTkuZQqGk42UaTbl86fWsIP3K/nMefvWAq
+yqSV08/+ERFMcVqwNNo1MjADyI8qZ3ohN6xEYvL+58jMArCDFD9fpIC3s7vQogj0
+K1nsHiT2O8H0ifLPpOwm++UfNdtbGlqkpIfL0h6lUg8Mi1+5lQNvhuejKWi0KZVx
+j9CSzWb6miopU3gAbqQyWIN8n7N7/BbOc4VtVNcuScrx/IZSh2gfPToAt8+BODr2
+cqtvrBUWSM5bYflGg797WUTMonxadbfhAEW0vAvLiynoBQM6weqXbwJzWQSopqtr
+dYfXrtHVzXkopZc9VfNUVQhr7kIX2CheszhSZKDHk+ptqjQN8DraR1TdCZ14bCXF
+9yLcA58LgFACXSavSWtemf4kRKf0sWxdxUu944YD6tzDOJiNq0dw
 -----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.key
index da2d85213..8ca9657a7 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.key
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/foo-1A1-revoked.key
@@ -1,27 +1,39 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEogIBAAKCAQEAnw/TbCK+YC9h1a3ekF4LJlxOx/09E0EY4NBEknoV2T4ePGYr
-SpKPq+sPNd3k1GYYDxxkwokqP4n2Z8j1TQ8ouqkx+NKC5eR85ZZCykW3FvOR+pUq
-8SEdzTL7fsuVxoCZavqGmlhO3+4SPdpu/OVNC8aTax3Mq/wFObAVIbOxdCUNwodT
-mNexxHUoWBIdC6a+tVP1OAi89uRV15jmNguvzJ/gl3J2b45wE6A0RHQnB3f3zEuO
-432gblrx2I5TwhWvyOOF74BAg8JKdd7i54wyciwk+cqQ4I2KDBAKzrS855GqC4da
-4ZSS0WJnD1fyy9sJuJl0gFdvVmWY+ntyCP4jHQIDAQABAoIBAA37dSlfUH7iC2ae
-Nx9XtQE1QhOgdjr4EPjKNgzuQHdtV3kVvh57DbgeHKMuk0v8gYbqhwz2w8j8FrX+
-21lfyMPH1cW6s5kD4drIv6xKPpL87Esry6+Qqq78GVGHEe52JYZa6XQt6RkUM3RO
-fE0s1v3/Abx7zR8dM1Rj3yesRSAhcj3icDJrafQK6u/4LF9PtXxl2xNqGHiYLIqL
-OW8ffqaTX4yTsT5rR9qDhZaqw8V+RFljDPeUdovLL4jniDWgfEtThn07efodmh4q
-wMZxgU55S8lwKEol8cGu0/O9r3oFuIS6n2nGMgVD3vx+G+Kx6fyc49xXPIGn+7EG
-9TFY/WECgYEAzP3sUVIUwLbMpHZf5eIthJLU+bwhNlIjW5s/9dzThjsiH7nCpT4L
-85yPXuZQYLQoBBa7Fvo7wiUQAjhIFag2Pi9M2JO0CSH8z7ZRymAfdt6NFMRLDFew
-0tdro6WHrL8h59GPKxP45/vIAUBB/pWVt2XDBYOUO+4GjQ1rQTePYJkCgYEAxqQi
-7+4sBJXRcTkkiTcRTHAcn3GLA4ZJNueHMs93+8udCALp/iiN+7JT4kpZhg73h6eM
-itAtBZn1EdaeFsR6nszryB7JoTQysdDMYFR839aEKuIBBLiTqngG2LdBoK3fDHXR
-yX3+rnUuI35ASQzousVbR0ArMIYqo+Yw7khhtSUCgYAH+Edb0gkkhPbn3gJUebqz
-UNIe84WHCyJ8yUhvUqqWqW3mNd6vdf4Y9plMYz/0woxbvFaByjDQl4hLzcxfqy6Q
-tF4UfYmeYUfm+3uqlpoikPyDNi6EyFQDnoR81E62FKhIzwj178zZmBxqkAkA0OgF
-PVubt0XoHpT6nu7wlixo4QKBgA66PqjhVLwmS3gEj5Po1EyBh22+4lqpiyYZ9mkq
-/q9ZglQEu0qPwS8nIpcFgiuxUmLpZj8ofh4LMyNWcTQo7xp1AQo+Vh6wmw2Z+H0v
-5m5GHlh7ly29bZ1W9tL8i04Zdg8bcSlqQQa4Q2p4QtXnsh2e4kyfElSvrdunBnu0
-PCJNAoGAFSbtZCAQeJVnUpmYkGf0+h1kAVnxguBFxdtZ/jiPsozIpMlVEMJ12ev9
-RfB2wehjtPa63nfQcTpNigy0FTiBk3oslkcAGNj9McuChCnEfNuCknXL+siktaiI
-Pi4iIuA5FfUAQhCM1XcgcVIUvGCexps2/xX87MJ+yCkEE/JDVN0=
+MIIG4gIBAAKCAYEAuVtz9iIgUBJz/QXCg3Ujtq+C3GJpAQGC3qU+zgy0TA9x2eZt
+mwsyDD/1gkeDecUN6m2g34nhquWqtYfHGZGPd5jMN5G5LD111xeqMbGnvtZuqDG0
+l3MiMG+kJmO4Wl1FpXIH8Z2NGAH7HuKdQU0YjgFQfDRE2F89Zp+xXyMTv/UkQRVJ
+HA5gwPkNRUPTPntrVkDAO/Jy6HP6yBaCVGMo+1S2hy7TodW9sAyqweT7+wivwJg+
+OBm+bxOP7KcawJN7hJFLFxF9ZRiQda2nYXpGoUzIZbyjMFVvyS+BlOtDMy1uZBOQ
+/MARRGgBB7v4ktOzeOGTfGPbWyLug0M+4hm3Xyc19EQ+eGiCdilVDd1QMGgn5vXZ
+b2pxvfhrjOePvQl8q57E2cn62hjxVg2cy9mN1sG3eKnrdbVUXDWP93npcc8VzvE0
+Xe2/ACAHk6n/i9zaQAblyhECONj9eu8c5FMZQ4eews8SUhfINyuejVs1XAc6yO7A
+9EYzbDSG7x5Nxxp1AgMBAAECggGADna+c8Rx9Q2bk3DxnsRzRvwnH/9l5jgx+CG4
+5udC4nSKE9DRWLnk6+PJyqK99bCUx2hKl2bw/x7w1T2FIc+j/FcmCGgMpREesuwb
+0cjlKBUfiWxnhTHsxw7PJle9uP9yQdjGGeqLagYtjFlun/veIKalmyuQ+7li1zE6
+7AuWrPH6JEH+9HuCvUwx5ufGAigrVg2zcnoW0WDLfvWSsfcS6ZnQrHfQ993v8V7r
+rDmsGAizfjnjEQmhPJWwM21OvxxC8yLVwzttC05pf1eCH8tpLmxuHCIosD68H/2S
+lXfY/IyC95f35Pkg9wH0Y5lXEjPWcYC16HOrhsHgdaInMrc9OMzROHv0hoMSnS0H
+iO5oBvQZbLJzU3rq2slWIYSXuqzIG7BQ2DLBM3USxgqE4NCVmlIeedwfxR+EBdLH
+SXd0PgZha5u0GIp+fdWuxD/bdSznMpgdRKoYSGu1ZyRt5j0mI2993xIuEvI6g2Er
+asM5LKGl7pqUnCxvwngmz2bt/I7BAoHBAOgFL9fBTuFCcK2+0o+q6xGCb1Px37cD
+XPnDFNSKuUMfXmnSXdEubR5V1/CjGhf500Ajb4E/YBnMdOcBXHQkZ3OI7xYl7RHa
+qWPAKOR2Y01GP68/wYahWvNHHc7GrPrMZb/+XTlNmtWUf4S0eLpAv2/jg63ihgrD
+d0e0BhLgwI2CqF16lkVf6my9Ml2BcGGHkQHJb8mEjZLbYZ1/dJbOyY5e+tJUHf+V
+6I11yYEAIwXsczu4W/1OzMX7NTXTZ1YSqQKBwQDMg6bOuMpcatu2qZOtlz48T+Cz
+RJCxtyxnarGuIlfb9NtpI0pZq/mkX3s1cj2DnaxLNOjA5TVaGL3qN9TFI3gqY86p
+Zdnv72ftSP/PzMv7Dd1ddjemZUFbQKAyVBVayrdii3Qdpw4cboHhgKQm8uQU/GXa
+ERnd6kwkr1Y4XACrs3nbu1AXn5l9c59aEb9FJYLvlRILyy6KW9P8+0TaVFYV/Z/o
+EV+XeRclxYLBVfgDRDMqRVnp/7bMRd62GhLRtO0CgcBy1iZg3k+hVFYa2Ki07P6d
+0vYxETUOCv8Yq4KC1Apv+3WqYLGImDbv3cMcWk3O8hqp0yAcU3bILhbqQxU0ctQ1
+LeBQEQNuY9CVC4Xx1dq+Y3ef0KmDbhdq85cAQftZwpLV3RrdAtkQvwgCcaSTYvqd
+cXk6NjTr3OULu0GKVG1ZXQLiCYuY2KlZmqbz+t3Zl9SgksfecNn1htmgr3XQMpc1
+/TKdqX6TgunwIg1S6PNsuiQqucvl6vuVPgmPE4xA4MkCgcB5laMrruyPeO/aboJf
+Z1UWoh5iNVcYcF+zs9iiP8Sf/bgbj2F6YiVuNV2YbqxnfOubYn8lfp7zS1ZM0phq
+AyZDfUa1qtmgLWJJzWZX8dcrEBkUoV2ATR5H0+npQdfYPEA+E84aeuCGwqPwnnv4
+s9opJ8ydkiEgr1RJUvwdUYUMjwzZN0jsYnPsAzsvXvGpeB2ZtbQe0tJ+aw1ijzdl
+3VG4jSnt27ZK5TB/wiZ0LlneB0Or08MavG2+j6NR+7pIdhkCgcBhqIRyx6CSsFdH
+CHb7t4QkmsmwERCgM1FxlcAD1u/vV/O2HFf6DgUqsnldRBo496JYk4EFXFExV1V4
+0ixXj43gTz07vUKlEKfiG1PJKZjkSh1lHUqspn/T5h3C8TAgES12zxX9Pt99jo1+
+zrU39llPv52bE/sfUW7OfPDZNLdgazawAUVoRaAZ6Gn1ER+i77QtJ15mjj7njI/N
+aDDprB8HOS6IGNtvCiiUFNdzrwTlf4aV4qulFAJMlQlkO0luwt8=
 -----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.crt
index 2d7ac3d4f..28c10ee9c 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.crt
@@ -2,34 +2,42 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
-        Signature Algorithm: sha256WithRSAEncryption
+    Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=root1-ca
         Validity
-            Not Before: Feb  3 01:32:37 2017 GMT
-            Not After : Jan 27 01:32:37 2047 GMT
+            Not Before: Sep 16 01:49:18 2022 GMT
+            Not After : Sep  8 01:49:18 2052 GMT
         Subject: CN=inter1A-ca
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:9d:9d:ab:bc:a3:9b:98:f5:8f:06:81:9c:ff:8d:
-                    a1:2f:e8:ea:d3:91:78:71:31:8b:f4:08:1a:1c:79:
-                    4f:7c:ad:d9:d9:ac:bd:39:3a:50:09:b4:97:da:73:
-                    26:85:12:6e:6b:de:bc:46:22:a0:0b:49:cb:30:ac:
-                    8f:2d:9f:70:ce:58:8e:fb:b9:6d:e0:69:c3:75:40:
-                    9f:69:0e:d5:93:fb:5e:06:d4:a3:d1:32:e6:56:87:
-                    01:77:33:f5:b8:f6:0a:06:cb:bd:dc:24:9c:e1:b0:
-                    ff:85:7c:94:97:fb:45:dd:52:48:4a:fc:f4:73:66:
-                    dd:1d:93:86:e8:4a:37:92:5a:3e:6b:55:f5:59:48:
-                    64:c3:06:4e:d6:33:58:4b:bc:9c:61:d0:73:26:84:
-                    8c:8a:03:ab:fe:38:4e:97:54:a4:07:34:50:ab:7c:
-                    07:30:5f:a7:67:c3:e1:c2:8d:2a:81:90:57:d6:e5:
-                    68:b7:e7:84:ee:a6:82:9f:be:ce:ab:1b:65:76:e6:
-                    6e:64:b1:77:9d:21:5e:ed:2a:66:81:c1:46:4d:25:
-                    df:98:f6:e6:9a:5d:10:d1:18:4a:85:cd:89:13:85:
-                    e4:32:06:06:75:73:eb:0f:b4:55:93:e0:bb:09:a4:
-                    97:3e:be:77:d8:b4:f3:60:41:d1:d0:2c:84:90:25:
-                    d3:0f
+                Public-Key: (3072 bit)
+                Modulus:
+                    00:c0:74:b2:21:5d:30:85:78:fb:8c:ae:ce:16:66:
+                    39:e7:1e:d6:83:29:fe:3d:35:f5:fd:00:3e:aa:7d:
+                    a5:ad:2f:64:f0:f1:47:bd:a8:6c:50:b7:10:e7:b3:
+                    f9:8d:f0:a8:6e:5d:a8:89:90:5e:1c:29:49:70:51:
+                    43:f3:de:31:4f:75:3a:e4:e6:08:69:05:ce:d0:85:
+                    06:9f:25:79:b7:3a:0a:ac:f7:96:87:e0:46:9c:25:
+                    90:b6:33:37:3c:49:f4:40:6b:bb:58:54:8e:b1:b6:
+                    f6:18:38:ca:b1:34:1a:93:21:e1:7b:3c:1e:e7:5f:
+                    9f:69:cd:75:1a:a5:4a:6d:57:67:f2:92:ab:e5:06:
+                    1b:18:de:39:52:89:45:58:7c:f1:6e:d0:d1:e8:38:
+                    6d:f3:cf:8a:03:8d:31:1a:62:fe:82:a8:33:7f:01:
+                    db:22:60:62:40:1a:3a:88:30:6a:10:33:e6:f0:d4:
+                    85:c6:1e:7d:0b:1f:a8:cd:ae:7e:45:d0:b2:6f:c5:
+                    aa:4e:55:69:2e:b7:b0:2d:70:c9:60:87:9e:82:74:
+                    52:ac:4b:4f:62:2a:6e:e3:24:4a:80:2e:aa:8a:ce:
+                    28:8d:fa:5e:17:db:c9:dc:a5:5f:79:93:62:85:d8:
+                    26:51:e9:7f:fe:59:b5:1e:6a:22:99:68:fc:59:24:
+                    ae:66:5f:81:13:b7:d8:fb:e4:e6:e2:b9:a4:fa:22:
+                    ac:06:d2:d4:e6:59:80:26:95:bd:8c:a4:27:4a:39:
+                    c3:5d:ab:9a:5c:91:f6:65:ba:7d:d9:80:c9:3f:94:
+                    86:4e:8b:e4:ea:3c:ef:87:80:31:b0:a2:65:57:a4:
+                    e2:4d:ba:74:f3:3a:f5:45:b3:1d:df:3e:38:6b:b6:
+                    4c:2a:4c:63:15:6f:25:74:85:7f:74:8e:5a:a7:6f:
+                    c4:c3:53:89:cd:bc:c6:c8:79:68:99:fd:33:dd:36:
+                    a9:e9:48:9d:bf:1c:0b:25:c6:80:72:fc:16:20:e7:
+                    7d:ba:b0:80:cd:db:f1:e9:b3:77
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
@@ -39,45 +47,57 @@ Certificate:
             X509v3 Key Usage: critical
                 Digital Signature, Certificate Sign, CRL Sign
             X509v3 Subject Key Identifier: 
-                3F:78:09:6B:36:A7:E4:B3:DE:82:1E:6B:79:65:36:BC:A5:03:B9:CE
+                D7:04:6D:FE:DC:04:15:81:05:62:64:08:F6:E4:E4:66:7B:5F:D3:17
             X509v3 Authority Key Identifier: 
-                keyid:C1:82:63:5D:DC:A4:15:64:71:FB:77:55:0D:A2:4E:35:C9:8E:7B:DC
+                keyid:26:1C:68:7A:E2:B2:5A:B7:2C:F1:8F:8F:29:7C:77:54:61:89:04:68
                 DirName:/CN=root1-ca
-                serial:A2:15:F7:04:7E:B6:DF:8F
+                serial:E7:83:BC:F1:18:AC:C8:B1
 
     Signature Algorithm: sha256WithRSAEncryption
-        aa:8d:73:e5:06:be:50:75:98:a5:cc:1d:3e:f9:f5:49:b8:6c:
-        6e:a5:e1:e2:32:75:20:77:4e:bd:56:c2:12:19:a1:bd:fc:f9:
-        a8:cb:17:06:a0:a8:43:9f:4e:00:d7:d4:25:33:08:32:b1:f5:
-        e5:0f:28:b4:7a:57:f0:8e:57:63:40:66:e1:a8:79:3f:b9:05:
-        c4:5a:eb:f8:f7:ee:0a:1c:bf:08:f7:f3:ba:84:71:28:60:0f:
-        00:cb:6a:b4:d5:df:46:c3:98:1b:11:35:90:90:de:d9:77:c7:
-        8e:78:4f:4f:e6:d5:7b:2c:90:71:6a:65:ed:96:a9:a4:e5:dd:
-        45:7d:67:5e:d7:64:a3:68:ac:ab:26:9e:2b:71:82:e7:bb:ca:
-        7f:08:5c:ca:9e:fa:2e:ac:99:ee:bf:95:bf:d8:d4:8a:b8:7a:
-        34:72:9a:6a:44:a8:33:bb:b7:59:1b:63:24:3a:bf:2f:5e:9f:
-        67:68:5b:4d:fb:45:f5:30:1d:5d:02:13:ad:4c:7a:ca:a1:1e:
-        77:37:d9:e8:bc:6e:f4:5e:64:a6:22:36:37:07:d5:96:d9:a6:
-        93:4b:34:10:66:55:6f:51:4d:85:cb:ac:07:c0:89:3f:f6:17:
-        98:f1:9b:14:82:6a:88:3d:e2:50:cb:a5:56:48:f5:e2:ab:a0:
-        43:5e:1c:4b
+         2b:02:aa:61:98:87:21:7a:0e:55:8e:79:4b:a6:b0:e9:68:cd:
+         a0:b5:8f:c4:f9:12:52:c2:65:b0:ca:00:95:ed:4b:ba:32:ba:
+         74:46:3a:0e:1b:f0:dd:e9:b3:b5:12:6d:65:ba:08:ef:6d:4f:
+         44:8c:c4:2e:17:da:10:5a:29:e4:bf:63:1f:10:a1:4d:ca:05:
+         c9:86:44:be:48:e8:f3:46:bd:8b:3a:58:8b:0c:86:f5:64:5d:
+         b5:49:21:98:59:34:6f:b2:ba:44:3f:a3:06:02:21:19:2a:e1:
+         2e:04:12:c5:ff:3a:e3:54:91:2c:56:5d:23:1f:ef:07:62:27:
+         c7:b6:4c:85:84:8e:6a:8d:21:78:ff:cf:7e:13:83:8e:7c:58:
+         07:aa:5a:80:77:6b:89:f9:32:2d:c0:07:6f:0e:c3:26:c9:47:
+         c2:6c:97:19:e7:8c:0a:3f:d3:cd:97:28:a2:ad:f2:a2:c0:cb:
+         2e:42:b1:4a:6d:2d:08:66:d5:82:73:71:fd:5f:84:1a:1f:b0:
+         4a:16:b1:65:1e:98:0f:e8:df:a0:ba:85:d3:a9:2b:40:b3:3d:
+         b4:3a:e2:46:00:c5:73:a7:90:2b:91:fd:0e:35:21:27:be:f1:
+         d6:f0:88:e4:6d:a9:b0:8c:97:91:5c:52:ba:bc:c2:19:a6:43:
+         f6:92:52:2e:36:fe:f6:66:21:3c:66:8d:30:5e:9b:12:4f:92:
+         eb:56:13:d9:f0:db:51:85:e9:3a:80:8a:e4:ec:0c:08:51:ed:
+         b5:0f:64:32:59:cc:db:14:ba:f0:8e:4b:34:cb:4c:28:ae:73:
+         fa:fb:43:27:d2:19:2b:a4:16:ef:4c:18:b2:e8:c0:d3:61:34:
+         91:e0:79:d4:c1:40:6c:5a:79:0f:3d:ea:f3:e7:92:1d:f8:7e:
+         4f:32:40:7f:05:2f:67:f4:da:fc:3e:71:1e:ea:7d:16:b4:3b:
+         87:41:4d:e5:9a:7e:50:67:58:00:0a:e3:fb:b8:05:9c:f3:65:
+         e7:55:fa:3f:df:ab
 -----BEGIN CERTIFICATE-----
-MIIDPzCCAiegAwIBAgIBATANBgkqhkiG9w0BAQsFADATMREwDwYDVQQDEwhyb290
-MS1jYTAeFw0xNzAyMDMwMTMyMzdaFw00NzAxMjcwMTMyMzdaMBUxEzARBgNVBAMT
-CmludGVyMUEtY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdnau8
-o5uY9Y8GgZz/jaEv6OrTkXhxMYv0CBoceU98rdnZrL05OlAJtJfacyaFEm5r3rxG
-IqALScswrI8tn3DOWI77uW3gacN1QJ9pDtWT+14G1KPRMuZWhwF3M/W49goGy73c
-JJzhsP+FfJSX+0XdUkhK/PRzZt0dk4boSjeSWj5rVfVZSGTDBk7WM1hLvJxh0HMm
-hIyKA6v+OE6XVKQHNFCrfAcwX6dnw+HCjSqBkFfW5Wi354TupoKfvs6rG2V25m5k
-sXedIV7tKmaBwUZNJd+Y9uaaXRDRGEqFzYkTheQyBgZ1c+sPtFWT4LsJpJc+vnfY
-tPNgQdHQLISQJdMPAgMBAAGjgZswgZgwDwYDVR0TAQH/BAUwAwEB/zARBglghkgB
-hvhCAQEEBAMCAAcwDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBQ/eAlrNqfks96C
-Hmt5ZTa8pQO5zjBDBgNVHSMEPDA6gBTBgmNd3KQVZHH7d1UNok41yY573KEXpBUw
-EzERMA8GA1UEAxMIcm9vdDEtY2GCCQCiFfcEfrbfjzANBgkqhkiG9w0BAQsFAAOC
-AQEAqo1z5Qa+UHWYpcwdPvn1SbhsbqXh4jJ1IHdOvVbCEhmhvfz5qMsXBqCoQ59O
-ANfUJTMIMrH15Q8otHpX8I5XY0Bm4ah5P7kFxFrr+PfuChy/CPfzuoRxKGAPAMtq
-tNXfRsOYGxE1kJDe2XfHjnhPT+bVeyyQcWpl7ZappOXdRX1nXtdko2isqyaeK3GC
-57vKfwhcyp76LqyZ7r+Vv9jUirh6NHKaakSoM7u3WRtjJDq/L16fZ2hbTftF9TAd
-XQITrUx6yqEedzfZ6Lxu9F5kpiI2NwfVltmmk0s0EGZVb1FNhcusB8CJP/YXmPGb
-FIJqiD3iUMulVkj14qugQ14cSw==
+MIIEQTCCAqmgAwIBAgIBATANBgkqhkiG9w0BAQsFADATMREwDwYDVQQDEwhyb290
+MS1jYTAgFw0yMjA5MTYwMTQ5MThaGA8yMDUyMDkwODAxNDkxOFowFTETMBEGA1UE
+AxMKaW50ZXIxQS1jYTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAMB0
+siFdMIV4+4yuzhZmOece1oMp/j019f0APqp9pa0vZPDxR72obFC3EOez+Y3wqG5d
+qImQXhwpSXBRQ/PeMU91OuTmCGkFztCFBp8lebc6Cqz3lofgRpwlkLYzNzxJ9EBr
+u1hUjrG29hg4yrE0GpMh4Xs8Hudfn2nNdRqlSm1XZ/KSq+UGGxjeOVKJRVh88W7Q
+0eg4bfPPigONMRpi/oKoM38B2yJgYkAaOogwahAz5vDUhcYefQsfqM2ufkXQsm/F
+qk5VaS63sC1wyWCHnoJ0UqxLT2IqbuMkSoAuqorOKI36XhfbydylX3mTYoXYJlHp
+f/5ZtR5qIplo/FkkrmZfgRO32Pvk5uK5pPoirAbS1OZZgCaVvYykJ0o5w12rmlyR
+9mW6fdmAyT+Uhk6L5Oo874eAMbCiZVek4k26dPM69UWzHd8+OGu2TCpMYxVvJXSF
+f3SOWqdvxMNTic28xsh5aJn9M902qelInb8cCyXGgHL8FiDnfbqwgM3b8emzdwID
+AQABo4GbMIGYMA8GA1UdEwEB/wQFMAMBAf8wEQYJYIZIAYb4QgEBBAQDAgAHMA4G
+A1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQU1wRt/twEFYEFYmQI9uTkZntf0xcwQwYD
+VR0jBDwwOoAUJhxoeuKyWrcs8Y+PKXx3VGGJBGihF6QVMBMxETAPBgNVBAMTCHJv
+b3QxLWNhggkA54O88RisyLEwDQYJKoZIhvcNAQELBQADggGBACsCqmGYhyF6DlWO
+eUumsOlozaC1j8T5ElLCZbDKAJXtS7oyunRGOg4b8N3ps7USbWW6CO9tT0SMxC4X
+2hBaKeS/Yx8QoU3KBcmGRL5I6PNGvYs6WIsMhvVkXbVJIZhZNG+yukQ/owYCIRkq
+4S4EEsX/OuNUkSxWXSMf7wdiJ8e2TIWEjmqNIXj/z34Tg458WAeqWoB3a4n5Mi3A
+B28OwybJR8JslxnnjAo/082XKKKt8qLAyy5CsUptLQhm1YJzcf1fhBofsEoWsWUe
+mA/o36C6hdOpK0CzPbQ64kYAxXOnkCuR/Q41ISe+8dbwiORtqbCMl5FcUrq8whmm
+Q/aSUi42/vZmITxmjTBemxJPkutWE9nw21GF6TqAiuTsDAhR7bUPZDJZzNsUuvCO
+SzTLTCiuc/r7QyfSGSukFu9MGLLowNNhNJHgedTBQGxaeQ896vPnkh34fk8yQH8F
+L2f02vw+cR7qfRa0O4dBTeWaflBnWAAK4/u4BZzzZedV+j/fqw==
 -----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.key
index aa6e448f9..be4ee3953 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.key
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A-ca.key
@@ -1,27 +1,39 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEowIBAAKCAQEAnZ2rvKObmPWPBoGc/42hL+jq05F4cTGL9AgaHHlPfK3Z2ay9
-OTpQCbSX2nMmhRJua968RiKgC0nLMKyPLZ9wzliO+7lt4GnDdUCfaQ7Vk/teBtSj
-0TLmVocBdzP1uPYKBsu93CSc4bD/hXyUl/tF3VJISvz0c2bdHZOG6Eo3klo+a1X1
-WUhkwwZO1jNYS7ycYdBzJoSMigOr/jhOl1SkBzRQq3wHMF+nZ8Phwo0qgZBX1uVo
-t+eE7qaCn77OqxtlduZuZLF3nSFe7SpmgcFGTSXfmPbmml0Q0RhKhc2JE4XkMgYG
-dXPrD7RVk+C7CaSXPr532LTzYEHR0CyEkCXTDwIDAQABAoIBAE/jlSKeQsW64W3I
-0Izvep3QDwaBm2y0Ul20pZd9HX7yl5MvbRHOrrbcpIODDikw+GsQkJlz/275TlYz
-gLb9M65DUOXiTQEMWpfZ03Lqo/LH3BbWPNpSVFHTSDjlS00e2GItbuRgYmw6zKka
-Ri7qm7TceewYXscHglf1aNHgnF4/N8ovnFFEVh1XS2fmUGbObLozcjHLbHF2V4bw
-K14+TnmslGldFltGkCtb9v32HhIpOpo1aJBaVNd7ruP9/RtXmYEbndDifVEGt1Ny
-JZOgCufCfDMZanw8oIGy2BKUxx22WiBPyN1kfFswtWyBx1ZTVZbtMua1FH9z2AdK
-4+JaSjECgYEA0Vg3DdlGdjC6cF3UCCeODrKlZOSQpNWek5FMLNuYUvDdqYXstEAg
-Hqgae6w4ClJuT8D3cSg6vm9ua/nM8VdeSoCdX3FN8ctgeWObCT4W19yO9uAExNgw
-zV39T4kHOJaNqVriCA6/YONtl0VN6ev1jN0fx3Mu5sKdm8Yqrxjvsf0CgYEAwL4q
-xMhOcs4O8yVL76khgIBDmygfegwjDpzcNRrOuupTRtg8K9UBeA5/9wzYQxfZSkpN
-0QuPczRqBlfqbUcAeHA+D8OHLBYwPWRfKLDy/kdNR6gGY2AuifaOJozGXOxF/ch3
-wZI052Uwhy3zGuoHTEV0IlkZwue3HKEQ7gpUkPsCgYEAt6zbmQYC4Z49Zmucpo72
-AAVUQmKcWlOnb7gzCsSdMGBvS9baaQg+Zkd9/PaMsNnEOauILztp1z5ztr8Uxseu
-TlXsPhpulfCoM7lmBMT6S+kTcp348TDyGK4Xm9oRgN/vaSD5YrJ1za+drvS6uLwz
-1KUKxfdUtlkY6d0EBF8vp40CgYBSFqwQc1819hzX4aKdx+LE39vrUQNW76RerN/8
-nhY99V7SZXX7FRUzFLnbdlUE/jtFMLBDwDCwWDpvyTHGqN7CbMuB2zzOwgR5oS4G
-HpbfRW7cfet6l5Q6ng+cy4gQO3DzzVVz09lEVAx/Bkrrw5CoI0x69IfMQvPx9YdI
-Wo350QKBgD3iiurI3B2EN+yqmbYn+0pBIhc7GbIR8e+AWlj38O4+AToykNvdeV0z
-lhWTBqjj0g1ywva2Hg2Tz5qxky6HZxswOVrqlfyswozwkXRfI4yHxMaezpWY4YzX
-5JwHFtWUD61XUxNoeZSXuyGWjGIYDXsNg5YjNjcZ7d6mdyzfpdDR
+MIIG5QIBAAKCAYEAwHSyIV0whXj7jK7OFmY55x7Wgyn+PTX1/QA+qn2lrS9k8PFH
+vahsULcQ57P5jfCobl2oiZBeHClJcFFD894xT3U65OYIaQXO0IUGnyV5tzoKrPeW
+h+BGnCWQtjM3PEn0QGu7WFSOsbb2GDjKsTQakyHhezwe51+fac11GqVKbVdn8pKr
+5QYbGN45UolFWHzxbtDR6Dht88+KA40xGmL+gqgzfwHbImBiQBo6iDBqEDPm8NSF
+xh59Cx+oza5+RdCyb8WqTlVpLrewLXDJYIeegnRSrEtPYipu4yRKgC6qis4ojfpe
+F9vJ3KVfeZNihdgmUel//lm1HmoimWj8WSSuZl+BE7fY++Tm4rmk+iKsBtLU5lmA
+JpW9jKQnSjnDXauaXJH2Zbp92YDJP5SGTovk6jzvh4AxsKJlV6TiTbp08zr1RbMd
+3z44a7ZMKkxjFW8ldIV/dI5ap2/Ew1OJzbzGyHlomf0z3Tap6UidvxwLJcaAcvwW
+IOd9urCAzdvx6bN3AgMBAAECggGAYEbAicJFsK+qH2GfRUNUehNKOol6XwKskSlb
+MAz1IaMQ+xuoyO8FaId8FH1LPT+D8to1osOu4KWi0GZG+StRPa+mi7WrxWYbZOL3
+QgwMTKXji028ZzLCAAEm2I7cdfOFFekO6ow6ahreF5XpiCZJmQsc8npL93E1nUcj
+6vV/Ox27qXTIOyUHzzP0Nx7mqvKuEMK0D1iTYKGVKFuskceuDIy6XjH+fr76x5iX
+aWPW204rnJSka0z7PuJSnrpI/wH8MxYeYfptoY6ZCUra25ymDQFu4CwS4XKPzMUq
+TbPnuKgiYsU83ge3wZss65fufeTQ2a17F44X4NJZmXSefDIoXcc3/ZS31YbofYFj
+0LgoPxVeUbrMnRMteC0HF6CAML1huPiI3pCtUYKgVOBiST4F61C8cp1AKWSB4YU2
+4FmiGx1w4wltZdcBUCIcD409Sqf3go7B+0ZCw/qe1HE3fv+vdmDTXQWUIDQwYNx4
+OAbBMngOoqSwNAz8lLxqXKy6loyRAoHBAO6k6VHBl0Z+rMNlHuGPol5GgQbQvuBX
+oNB1x8SdojZnj11xsPXxs7GcN58f9hFCqlcY4EumcgQ+k2A0FojuhKR1uqn3k+Jv
+sBdS6LP66Ap7K7cUJQydlbWpWyhAcYbD7mWH3XzKpFF9S4j2d3/YqYbBL8QO2xnP
+DkKlT6aP5sf8h/nkYmJSttH0/q0yDxt1MeWTh0b7S5DJn96+JZD0erLl3HYDbemN
++xjAItjgPx2uBSd3kMhCH4pSn6DIY6CkeQKBwQDOc9kDMVHFRTKb/z/YMx72PvOb
+wfTrceRzC8gyms4u/9rABF9tstnuY1jSaMmyjKOqjp7suy8u/FanG91Bt81qTj2I
+VMqLPp4C3ZvYPmsLrGUgHSHB1kdAGdd5KI3ucWa/hvSljbTMhIDlMHEKZq87a8Jc
+ZaCXteJybvkQb44XwevUDAJ69PYKA4xNcA7nW+g3Zw+MZ/q634+mR5KyLleb6yEG
+gc2XFFlZyI46rKKZJrUybTS/30c7+Fh3DYyOu28CgcEA6/t7FPNgSb9dy2IlJVtJ
+bfw9/qVQ+rrsNPci8dQG4dGKPRb9rFa0IH+fqOSMCQlpM/NPaL9Qo83VIh6f4gwq
+cg5Q5V4CiLl04buEjOUhq6uc0M9Ey7LQpfCwSZ9gI6mABjpR1OL1lfdWSDugc3Wm
+PbCvMSqXkm/jZBfgKY7G4R9gvsUOXLf6PKgNZurHcZl0G9bEwHYihSw7wKE6uJpo
+8prGZJSDjZ5unEzyqI8nGoxIYHylWMG6Oqf1XaKKkgHRAoHBALyExLFJo+WDHoec
+OOxvIeKx8TlVjxQ/19/F7nVnLsd0EogsdgdxvdcVGNJppWRJUFo6CZ0aACfjfCz0
+IMIV2JkuALow0xL7hsYPHnQD6zOppF4CvASIal96OWwFQDVvj+dskJFsKKBojlq6
+NT7OLU0RRVWh51chWzorY3tConnHNlVW8hzc+p6CRuefX7ycDBwrG+OWPznNUxr/
+WFEkSBO0TV/nv5gpmL2HiXjCk2dOFT+KwRRECoQUbpOn56WeOQKBwQCfGe0wr18a
+R+h9UqwpaxVETBlxYIf72iNK/AV210lgRbBUvoTRyZqFkjqg/w0PN2QrfFA90lz6
++NMh4vGyqO83ubdM668C7hvYKakvdhVnUGKtIdUwa84K8+I5SX6w/19uzKHrGLHA
+i0K/BzI83dgoY3uWyYPnQ/Y5krcDSFFpnoTVsGAtLRHAZJRVtEbLpTPp2nPNsxtZ
+g+00t+FrOfobe3oF8hS52y7aeims5lcDakOH8ROrZUc2sl9bYSxok88=
 -----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.crt
index c1b2deaa5..47c2e81c6 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.crt
@@ -2,34 +2,42 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
-        Signature Algorithm: sha256WithRSAEncryption
+    Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=inter1A-ca
         Validity
-            Not Before: Feb  3 01:32:39 2017 GMT
-            Not After : Jan 27 01:32:39 2047 GMT
+            Not Before: Sep 16 01:49:22 2022 GMT
+            Not After : Sep  8 01:49:22 2052 GMT
         Subject: CN=inter1A1-ca
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:dd:5d:c0:6d:5a:0e:81:6d:12:35:92:09:cc:73:
-                    5e:69:6e:b8:8a:e3:39:d0:2e:39:f4:7d:48:9e:04:
-                    0c:f3:41:a0:b0:33:54:e5:2b:43:7d:ff:76:72:d0:
-                    10:c3:70:2a:0c:2f:5b:af:19:1f:a7:6e:10:c6:f8:
-                    8a:0d:a5:a1:25:7f:de:82:5c:b9:b9:99:b5:e5:1e:
-                    69:e1:6c:b6:da:1d:54:42:df:de:3f:31:95:e0:ea:
-                    81:79:0d:7e:e8:cb:6c:23:b1:b5:b2:ea:a6:b6:cf:
-                    ef:00:24:32:35:a8:be:95:e5:bd:9a:c2:dc:67:20:
-                    dc:8b:f8:6d:8a:65:4e:6f:bd:c5:7b:15:f5:60:19:
-                    56:b1:e2:9c:ec:e4:65:f4:78:40:30:84:58:dd:56:
-                    ee:68:c9:33:08:6c:97:00:aa:07:0f:45:63:c4:32:
-                    e9:a0:54:f5:13:d9:98:13:1d:b0:19:90:65:1d:ba:
-                    5f:cf:c7:29:fa:f5:18:41:c4:2d:7a:97:f4:08:ae:
-                    87:2f:fa:30:19:20:ec:f3:a4:21:70:f6:a6:c6:6d:
-                    c7:69:03:19:4e:19:b2:f7:ac:27:3d:53:bc:38:48:
-                    80:a0:a6:1b:3b:9f:62:19:14:b0:b9:6e:c7:e0:b8:
-                    d1:ab:56:91:0f:31:6f:b7:97:74:53:44:61:d2:d3:
-                    60:85
+                Public-Key: (3072 bit)
+                Modulus:
+                    00:a5:d5:60:2b:83:05:9c:84:5f:96:7b:1d:3e:62:
+                    75:a6:5d:0c:62:15:58:47:8e:95:99:f9:43:69:ba:
+                    75:2c:13:fc:28:dd:89:83:cb:ec:fb:ed:57:15:b3:
+                    80:5f:d3:46:df:3a:12:44:f6:92:e7:be:36:e1:c1:
+                    33:b1:20:b0:90:50:8d:bd:06:d2:08:99:9f:4e:37:
+                    71:70:a7:77:a0:ce:64:80:f6:09:fb:37:2f:79:44:
+                    fb:c2:68:05:fb:4f:cc:94:33:8f:af:5b:e6:5a:da:
+                    58:72:19:92:68:32:5a:74:40:00:cc:8b:2d:fe:9d:
+                    76:58:01:96:f9:e0:08:3a:96:38:62:20:3a:f9:fb:
+                    aa:47:9a:b7:b7:c0:7f:ba:f7:47:ec:c0:a1:c0:42:
+                    e5:34:5d:ef:b0:50:8d:e3:9a:0f:9f:0c:79:b4:d6:
+                    a5:84:43:97:20:d1:0c:02:fc:f0:32:0c:90:6d:46:
+                    69:47:b8:21:cb:db:ee:a0:6c:80:4d:4d:41:24:c2:
+                    59:53:49:d4:b9:30:ea:46:8e:12:2c:36:65:41:e6:
+                    8a:61:1c:17:d8:db:17:7d:de:f3:b3:b0:0c:e3:3d:
+                    39:7c:7d:cd:e9:93:e2:2c:85:6a:8a:4f:43:2e:c7:
+                    34:85:ef:3e:a4:3e:61:9d:c5:2f:07:fc:56:32:d7:
+                    2d:d3:7a:99:59:61:4c:3e:6a:ee:32:3f:63:06:b7:
+                    89:70:cd:b8:7f:0b:60:1c:a7:ee:44:7c:bd:d4:85:
+                    0a:d0:c8:79:f7:3a:3c:9e:7c:67:03:fb:0e:6a:b8:
+                    84:29:c7:cf:fa:1e:5e:4d:c3:b5:e0:6b:d8:0e:d2:
+                    9e:c9:fb:69:13:eb:ee:7c:fa:98:58:0d:ad:9a:b7:
+                    ab:4f:68:b3:20:9f:52:ee:9d:d4:f7:bc:25:d4:a7:
+                    2b:e4:84:dd:d3:ab:e5:c9:dd:cd:9b:20:f8:cb:93:
+                    30:d2:c3:0f:4a:a9:25:6e:dd:b8:0d:ff:be:04:04:
+                    7f:55:d1:3e:07:69:b3:77:8b:45
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
@@ -39,45 +47,57 @@ Certificate:
             X509v3 Key Usage: critical
                 Digital Signature, Certificate Sign, CRL Sign
             X509v3 Subject Key Identifier: 
-                A7:B8:9A:C3:6F:23:5C:93:B6:EE:FC:26:29:C4:B1:43:5E:74:80:22
+                F6:F7:5B:F5:C3:14:31:64:77:3C:40:12:13:54:AF:8D:7A:26:73:40
             X509v3 Authority Key Identifier: 
-                keyid:3F:78:09:6B:36:A7:E4:B3:DE:82:1E:6B:79:65:36:BC:A5:03:B9:CE
+                keyid:D7:04:6D:FE:DC:04:15:81:05:62:64:08:F6:E4:E4:66:7B:5F:D3:17
                 DirName:/CN=root1-ca
                 serial:01
 
     Signature Algorithm: sha256WithRSAEncryption
-        82:8c:8d:92:e6:4a:a3:61:b0:97:6c:42:39:8e:c4:fd:d1:21:
-        de:5a:54:df:ea:42:b6:22:0b:50:20:df:a7:0e:21:0b:3f:b8:
-        d6:11:2c:22:aa:c1:7c:43:8f:e4:33:bd:9e:a6:1a:20:30:93:
-        3a:50:18:28:fb:45:10:64:39:dc:59:97:e0:4b:21:7c:67:79:
-        92:7c:12:34:44:6a:64:23:68:3e:d7:92:07:3b:95:1e:8e:35:
-        77:f8:e5:7f:7a:77:00:52:1e:9c:77:4e:7d:70:08:9d:9b:1b:
-        64:d5:d9:3e:19:42:4c:8f:ea:c6:a8:f0:cb:48:e9:65:3a:cc:
-        17:bd:c2:34:d0:53:ca:fa:8b:76:19:bc:c7:90:02:be:c4:a1:
-        a9:ca:9c:56:c0:36:d0:9f:f9:23:59:76:7b:8a:85:0f:f4:c4:
-        89:0e:15:cb:90:d6:5d:83:71:a7:e3:e7:e1:b6:27:2d:65:3a:
-        19:0a:e2:1b:42:26:66:6d:01:01:dc:6a:43:56:10:ae:9a:fd:
-        7f:2f:4f:3f:ba:ab:b8:f4:5f:b1:b5:ae:0d:7c:ab:84:7e:89:
-        ed:ba:8e:07:6d:4a:04:b2:0b:9d:d4:26:fe:d0:d8:bf:06:b8:
-        ee:fa:45:22:f3:87:af:43:d7:be:26:32:95:6f:93:25:e5:27:
-        32:92:e2:78
+         0d:6f:ac:f3:30:65:de:a9:fb:90:7d:eb:5b:5c:7d:22:1f:e7:
+         78:96:94:72:7f:de:2d:df:c0:1a:c9:30:62:55:a6:27:50:dd:
+         a2:75:58:c4:b2:4f:5e:db:e2:d2:be:56:aa:0f:50:c0:5b:93:
+         c7:ce:5b:85:e9:01:ee:4a:b9:06:ba:72:b0:94:ba:2e:db:16:
+         ad:f4:e8:c9:b5:4e:f3:f9:2e:45:7f:d9:cf:3b:d1:5e:f9:47:
+         fd:44:7f:11:34:d1:44:d3:2f:c1:53:94:64:57:0f:3a:c0:af:
+         09:66:2f:b4:21:93:ac:15:6b:a6:56:00:c1:aa:1b:2e:2d:fc:
+         27:b2:07:6e:12:e5:0b:07:32:c5:0f:0e:17:f0:7b:b0:bf:a9:
+         6c:50:3c:00:b5:c6:77:b1:7f:a2:12:bb:c3:9c:27:c5:3e:ee:
+         84:b6:e3:05:1b:1f:35:67:2d:72:a0:5b:5e:c6:b3:7c:4d:96:
+         a7:ac:f0:b2:95:b3:d1:90:02:87:66:ef:69:bd:08:f5:9b:61:
+         69:1f:ad:44:ee:92:0c:c4:2a:d4:e9:7f:3a:96:e6:57:f7:5b:
+         e7:d3:da:40:8e:a6:b6:0e:61:75:73:2c:8e:93:62:10:10:b0:
+         4a:af:1f:24:51:b6:62:6b:7c:f1:a6:64:df:62:3e:8a:c4:6f:
+         bc:82:e5:20:1c:68:f9:42:93:45:bc:00:80:23:20:d5:2c:07:
+         b0:23:0e:89:43:23:5f:24:15:9b:d1:4f:8d:b5:8d:87:e8:7d:
+         f9:b3:52:2c:9d:d2:26:65:86:0a:63:85:b1:9a:84:68:14:6c:
+         37:0d:4a:48:2b:85:26:df:a3:47:be:48:fe:f7:59:7b:f4:cd:
+         15:07:fb:80:1e:14:95:15:73:5f:97:90:9f:1c:02:de:0a:f6:
+         62:cf:17:88:a2:8c:a9:5e:f4:1f:c9:5b:3a:97:58:91:7e:d2:
+         b7:87:33:b6:37:79:3f:ba:f9:9f:4f:99:15:d4:3a:d2:96:85:
+         23:47:16:7b:14:8f
 -----BEGIN CERTIFICATE-----
-MIIDOjCCAiKgAwIBAgIBATANBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDEwppbnRl
-cjFBLWNhMB4XDTE3MDIwMzAxMzIzOVoXDTQ3MDEyNzAxMzIzOVowFjEUMBIGA1UE
-AxMLaW50ZXIxQTEtY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd
-XcBtWg6BbRI1kgnMc15pbriK4znQLjn0fUieBAzzQaCwM1TlK0N9/3Zy0BDDcCoM
-L1uvGR+nbhDG+IoNpaElf96CXLm5mbXlHmnhbLbaHVRC394/MZXg6oF5DX7oy2wj
-sbWy6qa2z+8AJDI1qL6V5b2awtxnINyL+G2KZU5vvcV7FfVgGVax4pzs5GX0eEAw
-hFjdVu5oyTMIbJcAqgcPRWPEMumgVPUT2ZgTHbAZkGUdul/Pxyn69RhBxC16l/QI
-rocv+jAZIOzzpCFw9qbGbcdpAxlOGbL3rCc9U7w4SICgphs7n2IZFLC5bsfguNGr
-VpEPMW+3l3RTRGHS02CFAgMBAAGjgZMwgZAwDwYDVR0TAQH/BAUwAwEB/zARBglg
-hkgBhvhCAQEEBAMCAAcwDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSnuJrDbyNc
-k7bu/CYpxLFDXnSAIjA7BgNVHSMENDAygBQ/eAlrNqfks96CHmt5ZTa8pQO5zqEX
-pBUwEzERMA8GA1UEAxMIcm9vdDEtY2GCAQEwDQYJKoZIhvcNAQELBQADggEBAIKM
-jZLmSqNhsJdsQjmOxP3RId5aVN/qQrYiC1Ag36cOIQs/uNYRLCKqwXxDj+QzvZ6m
-GiAwkzpQGCj7RRBkOdxZl+BLIXxneZJ8EjREamQjaD7Xkgc7lR6ONXf45X96dwBS
-Hpx3Tn1wCJ2bG2TV2T4ZQkyP6sao8MtI6WU6zBe9wjTQU8r6i3YZvMeQAr7EoanK
-nFbANtCf+SNZdnuKhQ/0xIkOFcuQ1l2Dcafj5+G2Jy1lOhkK4htCJmZtAQHcakNW
-EK6a/X8vTz+6q7j0X7G1rg18q4R+ie26jgdtSgSyC53UJv7Q2L8GuO76RSLzh69D
-174mMpVvkyXlJzKS4ng=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 -----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.key
index 0d0efddf3..ca24687da 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.key
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-ca.key
@@ -1,27 +1,39 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEogIBAAKCAQEA3V3AbVoOgW0SNZIJzHNeaW64iuM50C459H1IngQM80GgsDNU
-5StDff92ctAQw3AqDC9brxkfp24QxviKDaWhJX/egly5uZm15R5p4Wy22h1UQt/e
-PzGV4OqBeQ1+6MtsI7G1suqmts/vACQyNai+leW9msLcZyDci/htimVOb73FexX1
-YBlWseKc7ORl9HhAMIRY3VbuaMkzCGyXAKoHD0VjxDLpoFT1E9mYEx2wGZBlHbpf
-z8cp+vUYQcQtepf0CK6HL/owGSDs86QhcPamxm3HaQMZThmy96wnPVO8OEiAoKYb
-O59iGRSwuW7H4LjRq1aRDzFvt5d0U0Rh0tNghQIDAQABAoIBAAQ5vOmZdXts/JL/
-NaascRnsHiOwkLLznvGWzqMNir29+/ZBFJbHS6OFE9q/NAK3CmZvJP3jqeIFTNav
-edsm1TulBDdS08zCLWGxQe4mqBrjwm8AXPqx1J2VfGE2K7z/3RGVW9WNex80Ouiy
-yC6UCQdNemAQ5ioly2/0jwq8QlIJsTXtePidJfU/P6/UKC7UGwq92ZXXJRJJ2Piz
-BFyvIb1xvAF+vlgoI/dArWZknPHFuguhIP0CVo0ZIH6zo7goAA7E9yRHPIJb3faU
-MlpZvihj6mmkl3PKot/FKT8J6pqo9/TVUYtmVGymSD9wmqAG04RjOaF8DGST16vN
-FCQSZ0ECgYEA/3olP0fuOzdQWty3mkP3abo8/TDJKr+aEjWJHJG2kSv0WWnmVmVP
-/fgBjFCaGZv+ryQZyf/49A7qqaFuBfoT3CJhUVhMN5xIZ8BBDaGg0bp9nQRRfTuR
-4axZ53WU/UO3TL15STim8ejCXgCCFE7ajkL4LV4kOqwOBrMRzHw+mTECgYEA3dG7
-75RbsZnWnr9gKDAjJAzpxb0vPYkSoW2YkZ5TWR75KMvsbc1wlDBhbY/C9L+75zg1
-1+GKxUhlyH8obyqgShUomT7xi0tzkZegRw/Gr/rwNLcpTWnkYa8tNOTFKahTRsEm
-MdbLdEkkgW+x9SEFcTPUdfaxjiNuXYhObP5555UCgYA8394ANiON+KAtBmq5V3ic
-uMPPkNBeX0lXDWqeZBocfVy78X/xFjL5UR8NUCdn8sO8990tRNENVoCT6uNMiUoy
-Kf8GYwPGPHcEQcs+dETdtJI5182TCZ65J1hEzr+xmXET2BIOYHFnMw8dVwGn1SI+
-w7ZfGQ+I63ZsIj8ben9wAQKBgEEK6/G/bfew5WbdNQPzwYojozTRWZXQqL7fFRq1
-8zixxVu6GBTGZdl+KkNnIUKFKkMNj3RC9V8N8JKO/rtCI4g1lhcBhvBSaovpixzr
-OlaF3YOHpbvGbipapIXbAxlI+0pG/r0kf7oUbHjr2KHJUgA0s3r3oG7OYuFYQ67g
-G7zVAoGAR5sJU5x5nKiqx38IZOEhkK1sMUvVyoC9STwd8uvoohjc+sNf79C+HIYB
-dJJJzGHPp7t5mYM2senUP6Dygyf2oNOXc7HcYYBPGEnCvkGUtBNYXHIMptf5d1Uw
-ieY27LUuUZTxtzk+mV9H1+c9Rke8hM//cuVS1b7w6NlCcSdrYK8=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 -----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-empty.crl b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-empty.crl
index be514c40e..a9d7ae32d 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-empty.crl
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-empty.crl
@@ -1,10 +1,13 @@
 -----BEGIN X509 CRL-----
-MIIBWzBFMA0GCSqGSIb3DQEBCwUAMBYxFDASBgNVBAMTC2ludGVyMUExLWNhFw0x
-NzAyMDMwMTMyNDlaFw00NzAxMjcwMTMyNDlaMA0GCSqGSIb3DQEBCwUAA4IBAQAW
-+Qg3lI5Lg8HhKsRwQQwk7WpCC191SOSWko+VVTDcEBEkQi/ARPKf30PpbciSeTAc
-bE+sPmsaDeFZfXPhd6GDrUE/+3LQdbBf+giU+eWMxR5rxKPSuLQjAmT0e4YsiBlB
-kyt02qLANERvEefWFj92/BV94s4/fa8BBhoXTYUCVtQPf/ABW1KrGli0tUV5pWTL
-qa5bmfbDm8VkyoEWwMf2+JRr1NdGWKKmWTFeGYNDPxpgyIKiAUwX9Pq8Hsky+ic0
-fuSFMTR09AUdJhu0PBkAAlHUsyVbf0OGVJrTAPPwewdb1P2as+ltOUf9Cbr3+nsT
-gMn8y0+cS+SUye55PKZn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 -----END X509 CRL-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-expired.crl b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-expired.crl
index d574f0eb3..5832cf54b 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-expired.crl
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1-expired.crl
@@ -1,10 +1,13 @@
 -----BEGIN X509 CRL-----
-MIIBcTBbMA0GCSqGSIb3DQEBCwUAMBYxFDASBgNVBAMTC2ludGVyMUExLWNhFw0x
-NzAyMDMwMTMyNDlaFw0xNzAyMDMwMjMyNDlaMBQwEgIBAxcNMTcwMjAzMDEzMjQ5
-WjANBgkqhkiG9w0BAQsFAAOCAQEAMPRJS6zzm+N/NcrKcumnL5HLDmFTd/Y3XFnQ
-SkFP1u8QKJXQyOjot++5nPU7lQRzdLge5b8ePWPydrH7h3CmQdIdmaCZmChaxaGJ
-rrwh9DF/VJfFJTh99GYH/m3LBYOXUxB+L7yBb2XHITaMb6E/o93RzgH9M1azCrlV
-k9EBWh4ifukUVM29r6Wz1uqcGeSotOdkNlVIsfjoWqaiFZxvmE1DGQhr3U5F0ZQA
-hglyFTyzhU3TfEojX9zrfddKCVNlDtUqGa3Ov7UNUHSDI9g2h1IK2xFSUL4E4pzS
-U1/4YVfstjS2KeE/kDNZGqycVVWaAr0ksISZUbgObEyYGncPHg==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 -----END X509 CRL-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1.crl b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1.crl
index 157ba3753..c45effe57 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1.crl
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v1.crl
@@ -1,10 +1,13 @@
 -----BEGIN X509 CRL-----
-MIIBcTBbMA0GCSqGSIb3DQEBCwUAMBYxFDASBgNVBAMTC2ludGVyMUExLWNhFw0x
-NzAyMDMwMTMyNDlaFw00NzAxMjcwMTMyNDlaMBQwEgIBAxcNMTcwMjAzMDEzMjQ5
-WjANBgkqhkiG9w0BAQsFAAOCAQEA2Ezj3BK++rP2NphVoMQY9QJgtwba+kZqqI6T
-ZbDcmkw80Mgr5VE3aplELPxM8KNAIk32mItTy2gLdLvK1f/vEC7yXJnz6xTPe/vV
-lQTLWtksUGWhaqsDPFPjubSRNud27A2E+Xc+PDORlRdte2a58yUUSwhu/T2T4tYx
-82JT9WL19p1gALkEiQGYoC9YYxNpU43cQHzir8J2zcWnKTYHmapd+kMXrajOjnCI
-TSU+7ynjzT+UGqZPwTb/k82yLr2OnztzlaXJgjr4hXMgF3yabm+kP4lAXxSKY1e4
-6GyFZ4q4zjwnQ+yUDgYQ1ChU0li5cPwul4+3K1XQQcu05NdTrg==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 -----END X509 CRL-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v2.crl b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v2.crl
index 89812a4b0..42a59cb52 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v2.crl
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1A1-v2.crl
@@ -1,12 +1,14 @@
 -----BEGIN X509 CRL-----
-MIIBuDCBoQIBATANBgkqhkiG9w0BAQsFADAWMRQwEgYDVQQDEwtpbnRlcjFBMS1j
-YRcNMTcwMjAzMDEzMjQ5WhcNNDcwMTI3MDEzMjQ5WjAUMBICAQMXDTE3MDIwMzAx
-MzI0OVqgQTA/MD0GA1UdIwQ2MDSAFKe4msNvI1yTtu78JinEsUNedIAioRmkFzAV
-MRMwEQYDVQQDEwppbnRlcjFBLWNhggEBMA0GCSqGSIb3DQEBCwUAA4IBAQB2ohY+
-kfjK8ZNMl/9MCi2OgKo8m+KmJVJ9vd2EoiJ1/X9amuYzJR0pDIelMNdB10BHi8kR
-yESX6FRAQHUp5JG6XOfFXw4mykiNqxRI+jDfYWFsCRGR3konr0IsITfi8QIWDXPn
-C6mzLF4qtwQdz4Ozgbr4EyxK4/52r1xctEgMUg80mBK94wcMvLpJoK2VmAh1xomk
-eKu6QWFmcfIBrIi0gzxPMEETHC4RkRa3ZhpYJIFWsSKE/70JcN6bBc2dT1JRMw4D
-cXgirLkZ3nlqr3VdyhObcyJ7ppGZSivxCkqzDV1fO/2AdtM/HSaPx4BdmkAz81bT
-Yr6ps1Kgrj+zj4fP
+MIICOjCBowIBATANBgkqhkiG9w0BAQsFADAWMRQwEgYDVQQDEwtpbnRlcjFBMS1j
+YRcNMjIwOTE2MDE1MDAwWhgPMjA1MjA5MDgwMTUwMDBaMBQwEgIBAxcNMjIwOTE2
+MDE0OTU5WqBBMD8wPQYDVR0jBDYwNIAU9vdb9cMUMWR3PEASE1SvjXomc0ChGaQX
+MBUxEzARBgNVBAMTCmludGVyMUEtY2GCAQEwDQYJKoZIhvcNAQELBQADggGBAIQQ
+cGcczRcy41KNIplxyOZfD4eBp85t0dhjTVstLA5Qf/TRmIwdi2XpJ2aiYG4plqiN
+AeXVMlMl3WMR+yFU9boujUDZr/eLSE30c7scHnVtAyWRJn6bZ2/ru0B36PyZjuqM
+sgX5+v4XaNVNydBD2Dt/GRLrVG5fr/Yi1sGGtSYSeFPaW1+FcRzg0Iu/r93l7kwO
+nBn0ToAeJPl1KJnkfhIg2g5aYLjI8GS3gQuWaZkZmlvGt+aGOAKXhXX+C3XRm5os
+prOAMoNR2EgCyJs9LojMqJwpRoCLt2l2s/XH5jWPKXgAjfu8RE6Sg6kF3os28EyQ
+mjwkfqRQeNo8zBYdr6LlJlwquJ7C+9rn5xntDsrHtDxsmtmOz8J68vcZAqZhTCaj
+1OUQVO5J+SmvTKixo4EC5cnkQxsnfCgWSwpMyzLGCILwjcKn6e36YV4LLkasDb+V
+0UA8ZpJ4sVTDKYcluVEVSwQyI2yhaVfcsN/tUAyjRyMkrM5MkG1CI1K5wNEOmA==
 -----END X509 CRL-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.crt
index 7cadc0e6d..e551d5d45 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.crt
@@ -2,34 +2,42 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
-        Signature Algorithm: sha256WithRSAEncryption
+    Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=root1-ca
         Validity
-            Not Before: Feb  3 01:32:40 2017 GMT
-            Not After : Jan 27 01:32:40 2047 GMT
+            Not Before: Sep 16 01:49:23 2022 GMT
+            Not After : Sep  8 01:49:23 2052 GMT
         Subject: CN=inter1B-ca
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:b1:d8:e9:eb:fa:41:e8:ca:72:1d:e0:a8:4f:f7:
-                    01:ad:a3:c3:cc:c3:b1:30:cd:20:ea:5a:cc:12:40:
-                    37:ef:ba:a6:2b:17:55:0b:53:d2:c0:08:ff:76:80:
-                    2a:05:af:38:8c:f3:b0:15:86:40:74:d3:0c:8f:b2:
-                    e9:89:7b:b0:fa:64:be:78:3e:9b:90:02:dd:3f:11:
-                    01:28:9d:3e:f5:06:e6:5f:47:85:2c:e5:5d:16:53:
-                    c3:d2:80:e9:19:72:2f:a7:cc:ec:0b:52:9b:d6:c6:
-                    72:2f:b3:8e:5b:4c:70:41:48:3a:3b:4d:42:2e:f0:
-                    59:36:4b:8e:6f:6b:f9:d7:11:c6:f3:1c:6d:ad:16:
-                    69:9b:6d:0b:59:c2:4b:68:00:2e:6b:5b:71:eb:b5:
-                    32:9d:fb:76:ca:69:1b:55:78:f8:65:89:3e:a6:84:
-                    c8:ef:b1:ca:f5:e6:c1:24:22:eb:18:69:49:0b:8c:
-                    5b:04:74:8f:0b:65:b6:0e:8d:17:51:89:40:29:66:
-                    fc:14:e6:27:8a:91:ad:e2:19:95:cc:6d:0a:dd:5b:
-                    15:03:9b:f3:ea:53:88:31:9f:40:22:ac:4c:07:69:
-                    04:75:ff:c1:3d:d4:d3:cd:bc:d2:af:76:c9:f0:b0:
-                    7d:c9:df:7d:48:45:ae:5d:f8:39:a8:69:9c:74:42:
-                    ec:33
+                Public-Key: (3072 bit)
+                Modulus:
+                    00:c3:0b:19:57:5d:b9:66:11:ff:d6:17:ac:44:3b:
+                    02:4b:7d:8a:b7:7c:e4:36:e4:14:c5:13:25:45:16:
+                    e2:23:19:b1:e0:85:4d:4d:78:0c:9a:11:fa:05:77:
+                    e5:cb:6d:d6:fa:36:2a:2d:64:c1:5f:57:fc:04:64:
+                    99:25:6c:9e:28:f2:a2:c4:f1:e1:0c:c4:5c:db:41:
+                    49:fc:27:7d:96:06:c6:b6:25:f5:2e:4a:59:0d:43:
+                    85:2f:19:a4:33:a8:27:4c:44:24:a0:55:2c:0d:dd:
+                    84:f7:dc:d2:ea:83:d8:89:45:b4:25:dc:86:50:f6:
+                    19:8d:e4:b4:77:36:c8:4a:7c:b4:9d:cc:f4:e1:ed:
+                    90:d5:16:f7:4b:ee:80:9d:89:98:a9:9d:5e:b0:bb:
+                    a3:dc:4a:07:63:6a:46:ec:12:ac:bd:f5:6a:f9:b9:
+                    03:fe:f5:f4:eb:82:72:34:4a:23:a5:7a:aa:b2:fc:
+                    da:a9:27:b7:5d:9f:9c:84:d9:ec:84:38:58:1c:d5:
+                    74:67:81:6c:8d:69:96:0d:c4:e0:a8:94:27:6f:61:
+                    78:99:5b:8f:40:46:c3:f1:95:4c:15:ff:7d:48:da:
+                    d0:c3:fe:a4:a7:c1:bd:7c:3f:0a:57:0b:bf:01:91:
+                    3c:2e:90:0d:d3:dd:ad:bd:7c:1b:09:b6:14:cc:f6:
+                    b9:d8:d0:1b:92:63:aa:0c:4b:03:2d:3c:b2:d1:c1:
+                    65:5a:65:75:76:ba:51:24:d8:ba:d1:f4:16:5c:39:
+                    03:0b:bd:ea:16:76:b6:18:b5:9f:c2:56:6a:5e:06:
+                    d6:eb:ed:9c:32:b7:b7:78:ec:33:5b:e8:17:ba:1d:
+                    c3:da:f2:66:be:0f:13:37:4a:5e:ed:e3:a0:db:44:
+                    e0:a2:b2:bd:32:19:72:84:61:fb:f3:71:31:7f:53:
+                    3c:41:30:af:f5:30:c6:cd:48:1e:50:8d:c1:a1:7b:
+                    bd:02:48:e7:74:51:02:8e:6f:a3:fc:7a:7a:3c:17:
+                    53:b9:c1:b5:af:3e:38:e3:e7:11
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
@@ -39,45 +47,57 @@ Certificate:
             X509v3 Key Usage: critical
                 Digital Signature, Certificate Sign, CRL Sign
             X509v3 Subject Key Identifier: 
-                C3:BB:9B:01:23:14:D8:0A:32:0F:30:21:2D:D4:8B:5F:41:31:15:71
+                CB:67:9B:94:5F:DE:C7:6A:B5:0D:9D:F2:DF:EC:15:C8:B4:AC:A7:06
             X509v3 Authority Key Identifier: 
-                keyid:C1:82:63:5D:DC:A4:15:64:71:FB:77:55:0D:A2:4E:35:C9:8E:7B:DC
+                keyid:26:1C:68:7A:E2:B2:5A:B7:2C:F1:8F:8F:29:7C:77:54:61:89:04:68
                 DirName:/CN=root1-ca
-                serial:A2:15:F7:04:7E:B6:DF:8F
+                serial:E7:83:BC:F1:18:AC:C8:B1
 
     Signature Algorithm: sha256WithRSAEncryption
-        20:66:24:3d:08:04:c6:d5:c8:e2:8f:13:97:5d:bf:e5:41:80:
-        c8:92:a6:ef:b5:24:f8:91:19:25:80:e1:62:d2:ea:32:78:67:
-        af:46:ba:9d:4a:89:3c:e7:fc:ef:48:ef:46:da:ab:df:a1:65:
-        dd:d6:a7:a4:8f:3a:1d:6d:e3:35:2a:05:17:ce:17:ec:65:8d:
-        d8:72:1c:51:b3:10:6a:55:62:84:2f:87:9c:8c:7d:d9:55:2c:
-        7a:c8:78:46:6e:9c:8b:ee:ed:1d:f2:26:20:ae:ce:18:bc:46:
-        2c:5c:1a:a0:6b:ee:0e:c6:6a:db:dc:80:bc:ec:3b:90:dc:3e:
-        c4:90:00:8e:d3:be:d5:db:93:b8:a6:74:8e:b7:36:24:a9:35:
-        ed:54:6d:72:8e:2e:f7:cb:b0:c1:5a:bc:e7:63:49:5f:67:93:
-        98:4f:33:5d:b2:8d:b5:6b:05:c3:32:3f:06:02:b6:7a:19:ef:
-        07:df:5b:8a:4c:c4:02:26:17:84:9d:d3:ef:ec:09:58:7d:83:
-        cf:e8:63:3d:07:7b:73:f7:55:19:1f:e0:0e:b2:a4:31:60:21:
-        bb:07:db:e4:85:d5:cd:0a:a2:e6:bd:3b:46:27:36:0e:ea:8c:
-        c4:9e:9e:96:c2:5c:98:04:1b:df:69:52:fc:dd:2d:2a:14:9e:
-        fa:b4:71:44
+         bd:6a:01:66:fc:f5:36:a0:9c:c7:15:b3:16:2b:e7:5a:f9:c9:
+         a2:1c:85:fb:72:f2:05:6e:ce:70:6b:9c:4c:78:d8:bc:96:06:
+         3d:9d:2d:a9:23:d3:16:ee:00:27:dc:a9:3d:9c:e7:33:3d:fb:
+         e0:d4:72:65:e5:ec:b2:fc:75:a8:1c:76:9c:e9:66:04:30:d0:
+         0d:b4:b1:6e:b0:e5:9e:a7:ee:80:4f:0a:2f:21:be:aa:5d:b6:
+         f3:4a:f0:24:41:aa:6b:08:0a:ce:f4:31:2f:27:0e:eb:2e:d1:
+         1f:5d:19:21:8f:28:6c:37:a1:6e:06:1e:1c:44:3f:7d:09:23:
+         77:72:ff:bd:39:c7:20:88:69:a4:08:92:98:9e:cd:9a:78:f9:
+         78:84:0a:7e:64:2b:50:0b:e7:ae:0a:f2:70:f0:0b:56:01:93:
+         69:65:46:3d:80:55:e5:53:d0:65:e8:3a:02:9a:6e:3a:40:c6:
+         3a:0b:ca:f9:4f:1b:b2:21:e8:9a:2b:c6:86:97:01:6c:99:84:
+         09:b3:16:b4:57:20:c0:a5:bb:21:1d:89:25:87:79:d9:ab:c2:
+         e6:e0:15:f9:19:b3:0d:c4:24:ff:b8:9c:04:c4:25:4c:be:e1:
+         93:e0:49:6d:50:a2:ce:da:52:ac:7a:cc:a5:d4:55:40:77:5d:
+         72:92:5e:8b:15:e4:61:c5:ee:bc:b7:cd:54:2f:75:16:ea:81:
+         91:3c:a5:de:f6:58:84:ed:87:ca:74:b1:7e:79:2f:a4:fa:b5:
+         9c:d3:f7:07:5d:d7:45:cd:f4:fc:29:0c:dc:7e:e5:b2:d0:23:
+         bc:a7:fd:41:fa:01:7d:e1:55:6f:93:fc:6f:84:66:97:e6:10:
+         5b:0b:29:4a:26:d2:a5:c4:4c:35:1d:6c:65:54:17:96:6d:1b:
+         2f:af:63:16:15:9c:30:4f:90:2f:04:49:31:eb:aa:9a:89:4f:
+         9f:b4:2f:89:cf:f7:07:15:03:04:8d:be:f6:9e:91:9b:80:5e:
+         7c:d1:05:b5:66:f6
 -----BEGIN CERTIFICATE-----
-MIIDPzCCAiegAwIBAgIBAjANBgkqhkiG9w0BAQsFADATMREwDwYDVQQDEwhyb290
-MS1jYTAeFw0xNzAyMDMwMTMyNDBaFw00NzAxMjcwMTMyNDBaMBUxEzARBgNVBAMT
-CmludGVyMUItY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2Onr
-+kHoynId4KhP9wGto8PMw7EwzSDqWswSQDfvuqYrF1ULU9LACP92gCoFrziM87AV
-hkB00wyPsumJe7D6ZL54PpuQAt0/EQEonT71BuZfR4Us5V0WU8PSgOkZci+nzOwL
-UpvWxnIvs45bTHBBSDo7TUIu8Fk2S45va/nXEcbzHG2tFmmbbQtZwktoAC5rW3Hr
-tTKd+3bKaRtVePhliT6mhMjvscr15sEkIusYaUkLjFsEdI8LZbYOjRdRiUApZvwU
-5ieKka3iGZXMbQrdWxUDm/PqU4gxn0AirEwHaQR1/8E91NPNvNKvdsnwsH3J331I
-Ra5d+DmoaZx0QuwzAgMBAAGjgZswgZgwDwYDVR0TAQH/BAUwAwEB/zARBglghkgB
-hvhCAQEEBAMCAAcwDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTDu5sBIxTYCjIP
-MCEt1ItfQTEVcTBDBgNVHSMEPDA6gBTBgmNd3KQVZHH7d1UNok41yY573KEXpBUw
-EzERMA8GA1UEAxMIcm9vdDEtY2GCCQCiFfcEfrbfjzANBgkqhkiG9w0BAQsFAAOC
-AQEAIGYkPQgExtXI4o8Tl12/5UGAyJKm77Uk+JEZJYDhYtLqMnhnr0a6nUqJPOf8
-70jvRtqr36Fl3danpI86HW3jNSoFF84X7GWN2HIcUbMQalVihC+HnIx92VUsesh4
-Rm6ci+7tHfImIK7OGLxGLFwaoGvuDsZq29yAvOw7kNw+xJAAjtO+1duTuKZ0jrc2
-JKk17VRtco4u98uwwVq852NJX2eTmE8zXbKNtWsFwzI/BgK2ehnvB99bikzEAiYX
-hJ3T7+wJWH2Dz+hjPQd7c/dVGR/gDrKkMWAhuwfb5IXVzQqi5r07Ric2DuqMxJ6e
-lsJcmAQb32lS/N0tKhSe+rRxRA==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 -----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.key
index 21226b546..0058a1a3b 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.key
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter1B-ca.key
@@ -1,27 +1,39 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEowIBAAKCAQEAsdjp6/pB6MpyHeCoT/cBraPDzMOxMM0g6lrMEkA377qmKxdV
-C1PSwAj/doAqBa84jPOwFYZAdNMMj7LpiXuw+mS+eD6bkALdPxEBKJ0+9QbmX0eF
-LOVdFlPD0oDpGXIvp8zsC1Kb1sZyL7OOW0xwQUg6O01CLvBZNkuOb2v51xHG8xxt
-rRZpm20LWcJLaAAua1tx67Uynft2ymkbVXj4ZYk+poTI77HK9ebBJCLrGGlJC4xb
-BHSPC2W2Do0XUYlAKWb8FOYnipGt4hmVzG0K3VsVA5vz6lOIMZ9AIqxMB2kEdf/B
-PdTTzbzSr3bJ8LB9yd99SEWuXfg5qGmcdELsMwIDAQABAoIBADI8Y1cUyalIBhQK
-cYCk9QRnTdd5L4PpbXLFUv+UxDgjMOzbGlqows8bu41thnE0nXSzIPnzgiF9u/6b
-OvxqxAL2khbFGIwFQxmdZAZk5HOyD0C6oxObdj/oSVgcsbtOVcfASqyoGP0B8R8o
-SP3hCZRnIou9twQrQAfmL8WpalklY9DRUBmDSNRZ+BsBx9iSzHr8jFaWBsNlFTT6
-6d6thWkCNK6v0uiIDO9GfnHpKs9gI63MSlstxZD9BjF/dyjUHrV8hezUiQRiGnaY
-wGWOJgkrpRoZZfVIGo77TG9zVGMwvi05hm0q5fhpTAX4CiRejZHxmQXXZ5H3+aK/
-9Z2tL4ECgYEA1xNJfSSxuSUr29RZczzBME+7Q04apUTKDWmfdwXu0tcTkkMlbHX8
-JaFufKK6IgbcviF9ihWFfj304OdhReUW06KaUyHh8cwOPpgM6nBQUAoe2h9DWmqb
-6uQ6zeO+shFU+4FHjPS2XyD7673oQQ2HitaZjm3sRrzwUrtCNPNd7CUCgYEA07Au
-h4FEIaR1rHccsNzFq9RBKNHJ8FfsQkv8xOzBLzOjEGLeH0qmhkCCQYNLn8uzOKIl
-75Xfyctp38tE7BTkfabyx8vuAL1A2dEyL+tJ7Z05YKX4kjcrjtKC0pE9pSfKjqBP
-8HynmECRDFjUc7IkDe/3O7/Kugez4iGuesk1W3cCgYAIGW3XDJ60vjWcna6QrGUK
-ELaYnkRanPCO+L9MmCiaQAc4ptat8vN/50hl4SrpRSDi+BfmL1FLo8GpBo2fODVX
-2vO81bXQiUKwEMHLwlcD7J2k0TCUIxekDNw6DK2NvyFYJ1IueLi1dGSISCqK6JuG
-GvbFalZPg6X5N5wSqmeLEQKBgAV3GvxsnfGwaUlWmesHCCNzi2seX3RREMx1YcVD
-x4kMcD1QECQGrV3x9Gr0lNM/UxU3OnuBBxISql0YxmLB91Q3JzV5Ul+6gx4chIsw
-K+xyjrSsFErSGdHKJY6CKXFGIbik8utmjH0lzZjgAjwqcTva4issvHMpF7/S1spc
-v3/pAoGBAMY6Z+jQCzuqFw1q6P1rd5JpUECS7Fir2pPljKpaJAVAXO2FqsNtr5zY
-CEids0JS6DHiHJ/XkJcL2EBaQ3KUXd4pSpmVTc3KjltComOs4J+8Qct3RlcFidP2
-xN7kLzKpV3ythNgVmbt1eUUoqdyMZ2Ktegfu5QRvBVy5XjaoaZQ7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 -----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.crt
index 7aa22117f..08bb353da 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.crt
@@ -2,34 +2,42 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
-        Signature Algorithm: sha256WithRSAEncryption
+    Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=root2-ca
         Validity
-            Not Before: Feb  3 01:32:42 2017 GMT
-            Not After : Jan 27 01:32:42 2047 GMT
+            Not Before: Sep 16 01:49:26 2022 GMT
+            Not After : Sep  8 01:49:26 2052 GMT
         Subject: CN=inter2A-ca
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:ae:c0:60:05:a0:40:4b:86:85:c3:fc:95:07:bb:
-                    f1:cc:db:bb:69:b5:15:a5:e0:4d:02:36:25:6e:10:
-                    db:d7:eb:53:b7:85:56:e0:02:0c:a0:d9:87:6f:88:
-                    89:af:6d:a0:8a:1d:81:ad:da:06:b3:09:1b:e9:15:
-                    84:36:4f:31:fe:6b:3b:68:f0:db:d4:09:fa:a7:db:
-                    6f:67:04:67:51:4c:5a:8c:eb:9c:d7:a3:69:0f:f8:
-                    12:db:60:63:d0:39:48:d6:7e:ac:e8:7e:8f:88:9c:
-                    9a:9d:be:6a:f7:e0:7c:5b:53:12:8f:dc:c6:78:59:
-                    03:8b:c0:93:9e:ab:3d:1f:83:fa:25:c9:db:16:12:
-                    d3:5b:0e:93:86:54:27:d5:11:c2:cd:c1:34:4c:76:
-                    6b:de:9b:e9:5c:05:eb:e5:05:d6:00:63:77:e3:db:
-                    fe:45:bd:20:20:ba:2f:df:68:f4:18:0f:2b:ce:19:
-                    8f:0d:46:62:bc:e2:29:e0:df:0f:76:b9:0b:c0:42:
-                    b0:26:c7:97:08:5e:19:07:2e:be:9b:cb:ca:48:15:
-                    0d:90:67:3b:c4:a5:3d:60:4a:b4:9e:d3:7f:ce:ea:
-                    3d:49:3f:13:4e:f1:59:02:f7:54:6a:16:e7:0d:55:
-                    fc:17:b6:22:4f:34:82:7d:1e:1d:e3:d6:96:4e:f0:
-                    ef:23
+                Public-Key: (3072 bit)
+                Modulus:
+                    00:c1:16:86:9a:68:e2:22:11:b3:af:ac:19:4b:da:
+                    76:33:97:95:0b:02:a8:34:87:d6:61:dc:d7:0c:e3:
+                    70:4a:3d:3b:1d:8f:b3:b9:7b:16:0f:ea:b9:c4:0e:
+                    6b:35:4c:4b:69:0f:2b:07:11:1a:0c:7c:20:c7:31:
+                    65:c1:a5:ae:8b:76:ff:cd:a6:61:43:40:fe:36:d7:
+                    da:01:75:7c:68:cc:4a:ef:d5:ef:33:c2:c7:88:d8:
+                    96:52:19:55:13:88:84:f8:5e:ba:3b:c2:25:9b:e9:
+                    a9:a0:28:e6:38:f8:29:26:6d:07:da:85:03:26:10:
+                    bb:3a:70:ae:35:e6:9c:b7:e0:1c:16:d6:1c:11:b1:
+                    70:a6:c4:61:52:7d:5d:ce:3b:69:a9:58:0b:e8:48:
+                    60:4f:9b:7c:6b:2b:d1:4a:cb:65:28:cb:24:8a:1d:
+                    0c:00:64:51:7c:82:0e:e1:87:95:45:8a:a4:e4:92:
+                    9d:98:a0:8a:70:a4:6a:ba:d6:2b:97:04:38:16:22:
+                    22:d1:6f:ba:4f:31:b3:78:56:1f:5d:71:f2:0f:1b:
+                    50:84:a6:db:93:13:1d:18:98:5c:f6:ef:0a:d7:95:
+                    2c:dc:74:bd:9a:3e:98:78:11:0c:c1:32:31:db:17:
+                    20:1e:35:bb:3e:98:07:c6:ff:ac:43:05:b8:d1:64:
+                    bb:64:24:1e:28:7c:e6:bc:93:5f:d7:92:be:ea:50:
+                    f7:f8:48:aa:4c:a4:f4:44:bd:b4:54:39:25:cb:8f:
+                    62:3c:5e:9c:ef:2b:09:a9:35:cd:5a:23:e7:c6:6e:
+                    d5:bd:97:b4:f3:62:54:63:bd:b1:21:c4:91:57:0c:
+                    c8:f9:42:49:fa:53:d3:4a:a4:b0:4a:13:d3:2f:8c:
+                    b1:af:e5:3d:5e:99:18:6f:9c:e1:de:f0:3b:5e:63:
+                    f8:1a:09:ce:a0:a2:c3:bb:9a:0d:72:45:bc:b7:e6:
+                    7a:78:33:7b:2e:17:fa:dd:81:99:ac:48:b6:6b:93:
+                    32:bf:75:be:3f:3a:f7:75:3f:21
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
@@ -39,45 +47,57 @@ Certificate:
             X509v3 Key Usage: critical
                 Digital Signature, Certificate Sign, CRL Sign
             X509v3 Subject Key Identifier: 
-                31:33:EE:90:76:B5:2E:0F:9C:D7:13:E0:67:8A:C2:8C:5A:48:42:7F
+                A3:AB:42:68:06:9A:CB:CE:14:95:A0:EF:40:8D:E5:99:8D:BD:C4:0B
             X509v3 Authority Key Identifier: 
-                keyid:53:82:D8:DD:58:11:44:1E:A9:87:C7:88:2D:64:28:A4:D2:6B:F9:8E
+                keyid:B5:1F:DF:73:0B:E0:FA:8E:81:F2:9F:9E:A5:62:D0:74:63:1F:CE:6E
                 DirName:/CN=root2-ca
-                serial:FC:44:A6:1B:0B:35:FB:66
+                serial:A2:EB:78:04:17:F8:8E:6A
 
     Signature Algorithm: sha256WithRSAEncryption
-        4e:d3:11:75:5a:50:47:22:c6:86:a7:f9:83:13:e6:b1:41:fa:
-        d2:79:91:e3:28:e4:3d:cc:59:35:69:78:00:27:d8:47:d7:09:
-        bc:28:98:32:c9:8a:29:c3:47:72:5f:8d:51:39:a4:73:32:12:
-        fa:d4:40:58:fc:20:ec:a1:29:c7:e1:9f:ba:84:fd:ee:0e:b8:
-        5d:1b:87:09:02:26:93:e9:b2:ea:c8:e9:8f:fa:3e:16:70:ef:
-        a1:3d:e5:f0:5a:53:71:cb:ec:6f:91:86:a8:20:93:48:7a:7e:
-        34:3c:ab:06:f4:92:5b:0d:ce:a6:5f:77:00:ff:aa:b6:1c:aa:
-        85:21:61:bc:89:82:3c:b3:c8:74:b3:4e:93:c9:5b:74:84:33:
-        22:61:15:d4:95:27:66:cf:92:5f:1e:54:a1:ea:c6:b9:70:ad:
-        fd:5e:aa:08:87:b9:75:9e:28:ea:5c:74:5a:29:a5:21:10:84:
-        a9:22:3e:7d:27:36:14:a4:f9:b2:d2:c7:cc:97:ed:4d:5d:3e:
-        97:2d:d8:0d:6e:88:c6:2e:e8:44:99:43:b7:03:24:cf:ed:6d:
-        1e:f3:af:e3:3e:14:d0:9d:47:17:0a:3c:7f:fe:0c:12:04:0f:
-        52:8a:c6:8e:84:bb:55:98:3b:8a:c2:35:65:29:70:57:e0:ed:
-        af:94:e9:21
+         6b:ad:97:2b:3e:d2:57:b8:26:e9:a5:97:b6:ee:ef:76:25:c7:
+         32:3e:58:4b:b5:eb:68:45:e5:6f:95:4b:21:bd:ab:e3:b2:ff:
+         56:91:24:e2:34:0c:a9:c4:16:e3:5b:07:e6:71:b0:2a:e6:51:
+         43:b8:5a:55:59:b0:8d:d4:e6:e4:e1:a3:17:7e:b3:f8:bf:b5:
+         62:05:d5:99:d3:c1:55:91:03:1d:30:a6:de:22:8e:9f:12:87:
+         f4:c3:8a:0b:4b:3d:4b:5c:e2:55:3d:ea:a5:9f:25:55:0e:49:
+         96:4e:94:0a:24:7c:09:fc:cc:5b:6f:bd:e9:0c:f2:e1:95:03:
+         ce:76:5e:f0:47:7e:8e:16:5a:bf:22:9a:56:9d:4e:ce:f2:22:
+         84:53:3e:b5:bc:ee:ce:00:9e:26:90:f0:37:8d:03:6d:33:0c:
+         a1:a8:11:8b:84:43:73:6d:5f:ed:1e:e6:a8:a8:6d:a0:ee:c2:
+         c1:cf:6c:46:1a:39:15:8f:37:f6:8b:2c:96:70:31:8d:c2:11:
+         3e:7b:59:dd:93:79:3c:9c:fc:9f:e4:25:82:4a:9a:5b:10:5a:
+         25:3d:7f:f6:ce:42:2a:ea:24:91:51:f0:26:c8:25:bd:8d:e0:
+         f0:98:1a:a0:fd:34:66:3d:d2:64:17:82:4c:54:95:27:ab:8c:
+         0a:a7:7b:6f:0d:e4:f2:35:d5:f3:37:ba:cf:58:48:01:f8:1b:
+         33:98:2f:e7:89:cc:50:b8:7d:ff:4e:05:60:55:05:35:7f:18:
+         89:a4:f4:bd:d2:13:6d:ae:a2:ff:66:cc:61:d6:c2:96:b6:5e:
+         7c:08:f7:14:7b:77:c5:eb:ae:46:66:73:8e:81:10:a1:e3:07:
+         2c:c2:dc:e5:fa:aa:9c:aa:bc:74:5a:80:a9:d1:4d:ac:0f:3e:
+         66:2a:5d:01:6a:45:86:0b:16:a7:b7:31:8c:92:82:90:9a:f4:
+         ff:57:bc:41:6f:ff:6d:fb:d1:dc:63:f8:3e:ed:7a:6b:fa:d2:
+         af:19:a2:e9:56:aa
 -----BEGIN CERTIFICATE-----
-MIIDPzCCAiegAwIBAgIBATANBgkqhkiG9w0BAQsFADATMREwDwYDVQQDEwhyb290
-Mi1jYTAeFw0xNzAyMDMwMTMyNDJaFw00NzAxMjcwMTMyNDJaMBUxEzARBgNVBAMT
-CmludGVyMkEtY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuwGAF
-oEBLhoXD/JUHu/HM27tptRWl4E0CNiVuENvX61O3hVbgAgyg2YdviImvbaCKHYGt
-2gazCRvpFYQ2TzH+azto8NvUCfqn229nBGdRTFqM65zXo2kP+BLbYGPQOUjWfqzo
-fo+InJqdvmr34HxbUxKP3MZ4WQOLwJOeqz0fg/olydsWEtNbDpOGVCfVEcLNwTRM
-dmvem+lcBevlBdYAY3fj2/5FvSAgui/faPQYDyvOGY8NRmK84ing3w92uQvAQrAm
-x5cIXhkHLr6by8pIFQ2QZzvEpT1gSrSe03/O6j1JPxNO8VkC91RqFucNVfwXtiJP
-NIJ9Hh3j1pZO8O8jAgMBAAGjgZswgZgwDwYDVR0TAQH/BAUwAwEB/zARBglghkgB
-hvhCAQEEBAMCAAcwDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBQxM+6QdrUuD5zX
-E+BnisKMWkhCfzBDBgNVHSMEPDA6gBRTgtjdWBFEHqmHx4gtZCik0mv5jqEXpBUw
-EzERMA8GA1UEAxMIcm9vdDItY2GCCQD8RKYbCzX7ZjANBgkqhkiG9w0BAQsFAAOC
-AQEATtMRdVpQRyLGhqf5gxPmsUH60nmR4yjkPcxZNWl4ACfYR9cJvCiYMsmKKcNH
-cl+NUTmkczIS+tRAWPwg7KEpx+GfuoT97g64XRuHCQImk+my6sjpj/o+FnDvoT3l
-8FpTccvsb5GGqCCTSHp+NDyrBvSSWw3Opl93AP+qthyqhSFhvImCPLPIdLNOk8lb
-dIQzImEV1JUnZs+SXx5UoerGuXCt/V6qCIe5dZ4o6lx0WimlIRCEqSI+fSc2FKT5
-stLHzJftTV0+ly3YDW6Ixi7oRJlDtwMkz+1tHvOv4z4U0J1HFwo8f/4MEgQPUorG
-joS7VZg7isI1ZSlwV+Dtr5TpIQ==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 -----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.key
index 2dbb8111b..e6cc89bc5 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.key
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2A-ca.key
@@ -1,27 +1,39 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEowIBAAKCAQEArsBgBaBAS4aFw/yVB7vxzNu7abUVpeBNAjYlbhDb1+tTt4VW
-4AIMoNmHb4iJr22gih2BrdoGswkb6RWENk8x/ms7aPDb1An6p9tvZwRnUUxajOuc
-16NpD/gS22Bj0DlI1n6s6H6PiJyanb5q9+B8W1MSj9zGeFkDi8CTnqs9H4P6Jcnb
-FhLTWw6ThlQn1RHCzcE0THZr3pvpXAXr5QXWAGN349v+Rb0gILov32j0GA8rzhmP
-DUZivOIp4N8PdrkLwEKwJseXCF4ZBy6+m8vKSBUNkGc7xKU9YEq0ntN/zuo9ST8T
-TvFZAvdUahbnDVX8F7YiTzSCfR4d49aWTvDvIwIDAQABAoIBAA5GBlHPUhEZLsng
-UqfsEQcDl549vUPsOz4IACyqUdqkDRV7Xao0YKWuvuI8S8q5cJh3aoUxvsRW5SG3
-sTHibBn01khvC/WYzxFw2fuXH31DeE30XL48SbOVNq0WhXCXjTx/4k2nMMAe0n45
-9HDEtEOdWHHJvahM1P5QP36BTB/LvDn0ShoJ7RGnqqZz/UtyYyY8//zmKzy/crtA
-rvvBUwmPe84TAKltvlXlNp876IL7yiio+bmwt3eLX3fR5FVECJtNyaFHrE1tD4Tj
-vVMNcUb3C8Fv3PRioBMthCDBJkx7iArtAdI0S6vU3M1hO+jrlIFXg34kTJmWUKgf
-TcWKHKkCgYEA4yeyzZcZVB9fbg8XrcY/rJODePUQN9NRIZ8PPwF/5cIqU4mckon4
-bNPBq3bFLpN7zBxOymRBO+gDp4OZPAJIXvszMK+L+JPoGn5prZl9mki1ZqEVFMp+
-YaMQANJWRO5W0ZArxU0eQuth1kdtupHLkC+wx9iahxO/5uo+c6kU2y0CgYEAxPEn
-KqcY6XgxmDyfJieDSvJzYQ4gOxQC1J30OZzfeWgjv1KCbzQ3fQnAli2BHI/lPbfb
-916JnZzsVGWHbsdNDWe83J98ZGRsMWvGuuN4ZmbAv1mB9QmSM1BOfJjsCOtL5jmr
-uxUwA3uOxGByf1qE2oay6c6nn8lzJlv4K5kxJY8CgYEAlbvVYS/4wjrr7OCF+0Zz
-Mo8KWvEvf50MHd17b0zNweX7gJV1YCMSXqo3P49K6yjMsf728PKlDZgi0IkuuR/I
-FNQBKlaNLY5RsSUjBAvpf4nuCXilLM9N/449Pk1oEIgLMpiWQbhT+kiudVEgQ5tX
-U/Qb06A0PFYIaW5/PD54QQECgYB1efhIDBbjJYxH6Fly0/0QVuGWUmvNcdliZLpL
-J5VygTlZpekiVn6G+qtDqe8rT3aKQ0NWIrFqMDIVAd8wqHgA+BGDdSspY3HaZRTN
-ZGTsiHyPZ+AKf+QS8eNvlXSuuVS0B1C2LyRN34VBBNsntqIrDFBrAZehy/QBPLkj
-oKTdZwKBgEbtA48ANL8IB3ssAkS5e6YlU36VhpZIpJ6fxuj3vfwWH/opK1qTjbv1
-js5O6dVy2yLgaH4xnO9sRm2dggq/F079yIxc4W5RpGap/FAFkHZUTR99cgBECngM
-DNhJymzq8IKhPAG5HR2nRmxwXuEcBWEAm8OBZrDOtmyfKXCcmtcM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 -----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.crt
index 578796246..dbacc9fda 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.crt
@@ -2,34 +2,42 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
-        Signature Algorithm: sha256WithRSAEncryption
+    Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=root2-ca
         Validity
-            Not Before: Feb  3 01:32:43 2017 GMT
-            Not After : Jan 27 01:32:43 2047 GMT
+            Not Before: Sep 16 01:49:28 2022 GMT
+            Not After : Sep  8 01:49:28 2052 GMT
         Subject: CN=inter2B-ca
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:d3:37:05:69:6e:69:31:26:52:0f:b7:87:a2:cf:
-                    e8:e0:9c:ab:11:de:06:10:00:17:6c:b4:9e:f8:fc:
-                    cf:6b:90:55:34:f6:9f:3a:b3:09:78:eb:ad:81:31:
-                    eb:47:ad:b0:ca:1e:bc:bf:1f:a3:ec:89:d5:0b:64:
-                    7b:73:a6:a7:2a:b7:11:a5:39:67:be:59:64:0d:97:
-                    69:a5:f7:ff:8d:72:22:08:4c:21:b6:2d:f4:ac:97:
-                    c5:b1:d8:f4:3d:fb:67:24:52:c8:be:42:25:44:d2:
-                    b6:1d:18:f3:68:25:f7:86:81:0e:05:6e:e4:78:c0:
-                    80:84:94:ba:72:27:18:67:ff:e9:6c:82:aa:6e:78:
-                    f8:a6:bd:dc:b2:ab:99:78:f2:37:19:62:c0:47:62:
-                    cd:19:3d:8f:e0:d1:bb:80:87:df:a1:2e:1c:33:53:
-                    7d:99:db:08:04:cd:5d:89:ac:15:9e:fa:ce:10:a6:
-                    05:3a:9c:d1:d6:09:85:30:ea:06:73:51:8d:46:40:
-                    87:14:52:7d:04:0d:75:4c:c9:4e:64:07:3c:55:b0:
-                    7f:90:d1:bc:63:7b:8c:3a:8b:61:e9:b8:e0:44:51:
-                    b1:37:30:bc:05:ea:5e:52:55:06:b0:36:b4:83:e1:
-                    84:47:8e:a2:44:ce:24:ce:e5:2c:ac:98:b8:a6:e7:
-                    46:09
+                Public-Key: (3072 bit)
+                Modulus:
+                    00:e0:fc:1a:56:19:26:68:81:46:3a:e9:3c:14:3d:
+                    5f:ef:96:9e:34:81:33:62:bc:7b:f9:0f:d0:ba:04:
+                    f0:ee:26:05:20:44:2b:16:eb:dc:1d:bc:d9:b0:ce:
+                    e3:38:d4:33:87:bd:2f:73:c8:ea:ab:2c:fd:b5:2a:
+                    50:bd:8d:30:d0:9a:e4:be:6f:05:4a:2b:3a:5b:19:
+                    41:9c:e6:3e:e8:2e:2f:56:ea:6c:00:33:a6:07:7a:
+                    e9:c8:92:fc:ef:26:2b:4f:43:16:32:84:e7:ab:b8:
+                    2f:91:cc:fa:d3:4b:a8:29:d8:32:b5:7f:7c:ad:9d:
+                    e0:a3:9f:50:55:e1:93:e8:57:35:f4:34:02:e7:6f:
+                    4f:83:24:4c:53:57:69:58:5d:96:19:29:55:df:24:
+                    cf:51:1f:55:82:70:f8:42:a1:14:87:02:72:86:42:
+                    05:b3:0c:67:fe:8a:1a:c8:9d:ad:b1:14:c1:29:e4:
+                    96:dd:8c:1b:06:a2:7a:38:15:5d:33:42:04:2e:45:
+                    33:f0:29:63:73:b6:d8:74:01:9d:ae:22:1c:33:7c:
+                    00:da:e0:6d:5b:04:7a:c8:43:e8:ec:b4:49:3d:a0:
+                    29:78:72:a3:c3:bf:43:54:2e:27:8b:47:3b:00:d2:
+                    06:f9:eb:07:d5:e3:69:c0:b4:0e:3e:31:d1:f6:e1:
+                    8c:b0:2b:c3:59:73:a5:3f:5c:25:1a:08:40:54:52:
+                    b3:51:c2:fd:0b:a9:9a:43:3e:37:bd:cb:44:99:e6:
+                    1e:7d:37:98:44:85:28:44:2a:f9:ca:65:28:a6:0d:
+                    81:12:99:ec:5e:08:98:e1:68:0c:be:62:26:78:cb:
+                    05:22:b6:0a:97:14:8e:53:a9:5a:64:9f:8f:b2:c9:
+                    27:bb:8b:4c:95:c7:1a:8e:b1:1c:b9:8a:2b:37:b5:
+                    1d:e3:77:12:23:f3:7f:5b:74:e4:85:68:7a:1c:ab:
+                    1e:51:d2:d4:e5:1b:aa:10:df:4d:5a:4f:ac:30:94:
+                    f0:6e:6d:00:25:6a:28:c3:1c:c9
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
@@ -39,45 +47,57 @@ Certificate:
             X509v3 Key Usage: critical
                 Digital Signature, Certificate Sign, CRL Sign
             X509v3 Subject Key Identifier: 
-                3A:CF:B7:9E:52:28:74:13:C1:F4:3A:1E:CF:4A:BF:CC:4C:37:CF:4E
+                C2:F3:4E:88:CD:94:C1:F1:8F:F9:5A:F8:76:74:0E:EE:1C:5B:01:02
             X509v3 Authority Key Identifier: 
-                keyid:53:82:D8:DD:58:11:44:1E:A9:87:C7:88:2D:64:28:A4:D2:6B:F9:8E
+                keyid:B5:1F:DF:73:0B:E0:FA:8E:81:F2:9F:9E:A5:62:D0:74:63:1F:CE:6E
                 DirName:/CN=root2-ca
-                serial:FC:44:A6:1B:0B:35:FB:66
+                serial:A2:EB:78:04:17:F8:8E:6A
 
     Signature Algorithm: sha256WithRSAEncryption
-        1b:4e:3a:d2:35:ba:0d:4e:84:95:14:54:03:94:e3:29:d6:0b:
-        01:51:1c:bc:2b:3b:ab:d7:a4:e3:4f:a5:e1:f4:d8:d0:47:f3:
-        bc:10:d5:25:20:1a:fd:7e:ff:e2:b6:8f:27:07:3d:dc:04:0f:
-        7f:47:ac:c9:46:21:76:32:dd:74:81:3a:3d:45:3f:32:25:5b:
-        67:10:54:a0:a6:d5:0d:7b:e7:54:c1:5c:ec:02:ef:5f:e3:d7:
-        99:7a:0f:b0:53:c4:39:b8:cd:26:2f:d3:89:c3:35:1d:e6:5e:
-        3e:91:48:60:69:63:67:7e:1e:90:8c:4b:98:c7:ce:68:ab:f1:
-        d5:a9:95:5f:fa:62:b3:dd:e9:7c:83:cc:f3:57:48:cb:04:75:
-        f4:0b:6c:79:72:bc:45:c3:a2:b3:3d:b1:53:37:15:2c:42:23:
-        97:26:e7:93:28:63:bc:39:5d:85:42:0c:55:78:bf:8b:18:cc:
-        d6:d2:b1:b3:76:9d:95:5b:01:b6:81:cb:ea:66:31:f7:34:40:
-        d4:ee:68:8a:43:25:e2:ff:c6:91:4e:b6:f5:5f:fd:24:c0:74:
-        3d:eb:f0:c5:1a:c4:1f:ca:68:a3:0a:f2:ed:bb:92:a4:fc:16:
-        d5:9b:d8:21:ae:94:9d:bc:ca:55:29:13:8e:51:53:d1:8f:e6:
-        74:14:83:8d
+         1e:3a:53:c8:f6:45:52:9e:55:45:09:9a:1c:72:2e:c8:b6:3a:
+         be:18:9a:30:0f:23:b2:94:f4:b3:dd:42:56:ae:2c:d5:7d:00:
+         51:72:1d:4c:28:94:5e:4e:09:b4:59:e0:bf:94:e1:76:d3:4f:
+         2e:c1:c2:2a:3f:26:57:1a:3e:ea:0f:b0:8d:90:21:f4:6f:e3:
+         18:ee:63:85:6c:3f:d1:0d:c7:4a:dd:26:83:d0:8b:79:6b:2a:
+         82:c2:9b:57:0a:4f:a4:a0:de:17:7e:8b:65:11:7a:fa:50:42:
+         f4:93:1d:d4:15:f8:db:5c:aa:09:c2:33:72:42:5e:a0:05:38:
+         c8:fa:e1:01:f5:36:a3:2d:af:6c:c2:82:c8:82:72:c2:0c:8b:
+         fa:20:e3:f1:bd:6c:ce:31:a6:38:fb:05:90:fb:2f:6c:5d:ed:
+         c9:4c:89:a6:e6:86:c6:a4:b6:54:5d:25:9e:46:ce:fb:7b:99:
+         cf:e0:f0:fa:67:00:cd:69:78:87:65:ee:e5:3c:62:86:da:2d:
+         a4:19:08:69:2c:1f:51:e8:28:55:d4:8f:23:e3:55:b3:7d:e6:
+         d0:87:ec:28:77:cf:cd:70:db:05:b4:07:2b:77:74:74:c5:05:
+         c0:c9:23:d8:9a:76:d0:dc:7e:c0:a8:72:07:da:c3:06:91:9e:
+         e4:3a:be:79:a5:40:64:15:f6:6b:f6:90:45:fb:c0:96:9a:6a:
+         0f:7e:a2:98:35:74:63:f4:7f:dd:8a:d7:a4:cb:ff:58:15:13:
+         c2:bd:ef:b8:03:97:08:78:af:94:a9:08:0b:66:6f:dd:78:97:
+         7a:22:78:79:88:e9:a1:39:a6:98:c2:01:41:78:cd:7c:24:6b:
+         7b:94:8f:3e:aa:5f:d8:56:d5:d7:9e:67:62:12:a7:01:dc:4b:
+         9b:d1:17:12:e4:89:1e:d9:04:fd:e2:3c:cd:4a:6e:7d:85:8e:
+         58:e1:41:f6:7d:41:68:aa:ef:7b:b9:5f:e9:f5:45:fd:d6:a1:
+         eb:56:e9:14:82:a4
 -----BEGIN CERTIFICATE-----
-MIIDPzCCAiegAwIBAgIBAjANBgkqhkiG9w0BAQsFADATMREwDwYDVQQDEwhyb290
-Mi1jYTAeFw0xNzAyMDMwMTMyNDNaFw00NzAxMjcwMTMyNDNaMBUxEzARBgNVBAMT
-CmludGVyMkItY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTNwVp
-bmkxJlIPt4eiz+jgnKsR3gYQABdstJ74/M9rkFU09p86swl4662BMetHrbDKHry/
-H6PsidULZHtzpqcqtxGlOWe+WWQNl2ml9/+NciIITCG2LfSsl8Wx2PQ9+2ckUsi+
-QiVE0rYdGPNoJfeGgQ4FbuR4wICElLpyJxhn/+lsgqpuePimvdyyq5l48jcZYsBH
-Ys0ZPY/g0buAh9+hLhwzU32Z2wgEzV2JrBWe+s4QpgU6nNHWCYUw6gZzUY1GQIcU
-Un0EDXVMyU5kBzxVsH+Q0bxje4w6i2HpuOBEUbE3MLwF6l5SVQawNrSD4YRHjqJE
-ziTO5SysmLim50YJAgMBAAGjgZswgZgwDwYDVR0TAQH/BAUwAwEB/zARBglghkgB
-hvhCAQEEBAMCAAcwDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBQ6z7eeUih0E8H0
-Oh7PSr/MTDfPTjBDBgNVHSMEPDA6gBRTgtjdWBFEHqmHx4gtZCik0mv5jqEXpBUw
-EzERMA8GA1UEAxMIcm9vdDItY2GCCQD8RKYbCzX7ZjANBgkqhkiG9w0BAQsFAAOC
-AQEAG0460jW6DU6ElRRUA5TjKdYLAVEcvCs7q9ek40+l4fTY0EfzvBDVJSAa/X7/
-4raPJwc93AQPf0esyUYhdjLddIE6PUU/MiVbZxBUoKbVDXvnVMFc7ALvX+PXmXoP
-sFPEObjNJi/TicM1HeZePpFIYGljZ34ekIxLmMfOaKvx1amVX/pis93pfIPM81dI
-ywR19AtseXK8RcOisz2xUzcVLEIjlybnkyhjvDldhUIMVXi/ixjM1tKxs3adlVsB
-toHL6mYx9zRA1O5oikMl4v/GkU629V/9JMB0PevwxRrEH8poowry7buSpPwW1ZvY
-Ia6UnbzKVSkTjlFT0Y/mdBSDjQ==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 -----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.key
index 5a8e44135..52962b5a3 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.key
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/inter2B-ca.key
@@ -1,27 +1,39 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEpQIBAAKCAQEA0zcFaW5pMSZSD7eHos/o4JyrEd4GEAAXbLSe+PzPa5BVNPaf
-OrMJeOutgTHrR62wyh68vx+j7InVC2R7c6anKrcRpTlnvllkDZdppff/jXIiCEwh
-ti30rJfFsdj0PftnJFLIvkIlRNK2HRjzaCX3hoEOBW7keMCAhJS6cicYZ//pbIKq
-bnj4pr3csquZePI3GWLAR2LNGT2P4NG7gIffoS4cM1N9mdsIBM1diawVnvrOEKYF
-OpzR1gmFMOoGc1GNRkCHFFJ9BA11TMlOZAc8VbB/kNG8Y3uMOoth6bjgRFGxNzC8
-BepeUlUGsDa0g+GER46iRM4kzuUsrJi4pudGCQIDAQABAoIBAQDH6MLBiFQdxeRT
-peTFz7zdosszjQ315PBG3im9BiMX7rMG/wm0WDJ19bLxnhrPa/DxTOheiQbw4X/4
-WXGTA8Ai6MTVuiCcBCVzy8Sd5r1E1iqp6czajmKPXNMrwmlhpOp5cbU4hoiZvEnL
-/oqbH5xI/SsVL2ElfSXm1pIlayVpgBD0doZQ2v2tX2yVwaPXlwVImBsXxbE1q4AH
-3WmGZTVnjvk6QiWpUc/o8RL6ORwLzOb1f6d0hPAAPOYxzu4Zj2W5BJP0G1phXEQl
-PHyhO5Eh88PDQCi9WuNqC09DHdP1NRXe0XeQ8rZLAV8YPfDW8mM7Ca/u9Mmc4GX1
-Yxa4mMoBAoGBAOiN4Hb68UVLZPWVqo0o7cl5oi4jVZmStsDdYQUZ1eBWpeldKXM5
-AJutSCxg7pVTF5bqopxLzzI65ssWsT5mhkXfErsp6brSX4fRH+BiVUE3du5SCPKg
-IUcWZvTizUwaTdWsCFr6o0n2mLC2oFjw9dUOdfKfBXaotQc8rz433bPJAoGBAOiC
-YwMH0ucH4FAsC+RDIQE6L9BmDqRGw5oisFnOaRSWg7i4A6JR3aIWBOSlRFUcXkps
-rd0PfP142iu0zDoGsCJA10v25HZZ+2U5hsuuPHXPfyfVurGyIslJgY6KnZ0GXW+e
-yfli1C8j6OZeCWZ8hqs1sSEGUWaKjQcAK6j2x6BBAoGALYT31tIvv7yOOnPdOlw0
-jyc704QfETxigUXT48e20X6kYxVVM7SIpfA5HFas3JWzHFs5ERbVq6NT4ZTDhM9U
-oQCVDgWaNnNPN6p7btRQk79jjCqKjdNCMEP2SyDJxoevjI9r40MEC0o1gQF+SWqA
-8/8snxz5WMyVAqGiO697ueECgYEAi+1USxGdUl7CF126tl/T8BolhmS1MRZJR2zS
-9ukrAjHnCfbscPaVzKM1xKjVa+dLs7yeEejtTto5ao4/TjiSLbsaFuR57+QNUIkD
-X3b3eesrWjzdQ22yU7NCHhe77TFUcAV/Be/9RHV3B5TWUXBl14nTlM1pla2SXAE1
-RVVnJEECgYEA0dXGMtIngW+12xWImiJc6CLij62UEU0aimNqFRA8L8gwbS9S8g36
-zWJkvzglOJSP9gD39r2d5J5hmPvdYVzOgalV7bKLrFXVvs8UO/d3ccTAURYxZQAK
-0ZekOA1GQy4SABi6XavcUXKT/Z4RahFnJmMXlz76+MLZpD+ASR75neg=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 -----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.crt
index 7b310db0e..465e892f1 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.crt
@@ -1,20 +1,25 @@
 -----BEGIN CERTIFICATE-----
-MIIDRTCCAi2gAwIBAgIJAKIV9wR+tt+PMA0GCSqGSIb3DQEBCwUAMBMxETAPBgNV
-BAMTCHJvb3QxLWNhMB4XDTE3MDIwMzAxMzIzN1oXDTQ3MDEyNzAxMzIzN1owEzER
-MA8GA1UEAxMIcm9vdDEtY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
-AQDhQlSMTTG4J9sv3jovcYG6bkhmET3+bOJvND7wcHW35h2elwRNYxYaMQwQXNlm
-bXDbF2ZiyZT++NLzIZxWHOBArNZsb4+ufJEsrExixUFltI5wFqcUoqE398vSeQXt
-cZyDwzVrnXciQY5ZBerb3jPV7sfqxo60/Y1mZLsOBTXG8BFxafgdTzOcJ28ok7q+
-uyFBaDU6op1oaCL+wJR+2fcnzszMFQ4JrwItcHBtnnMI3uI5uMUVR0ybw7Nhe+mS
-AvqPkwHCBpAmHWDatxBs/Cw4BsKms+mwLHzt8MuU6sBnPmGs6GcMda3RGGdA18F9
-QG6byv4QBYWp8aKcOaQ8oMzTAgMBAAGjgZswgZgwDwYDVR0TAQH/BAUwAwEB/zAR
-BglghkgBhvhCAQEEBAMCAAcwDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBTBgmNd
-3KQVZHH7d1UNok41yY573DBDBgNVHSMEPDA6gBTBgmNd3KQVZHH7d1UNok41yY57
-3KEXpBUwEzERMA8GA1UEAxMIcm9vdDEtY2GCCQCiFfcEfrbfjzANBgkqhkiG9w0B
-AQsFAAOCAQEAZ410smQiLVH5sQj8omEG7T/2jRMEMXVDkwY97C2h7v4nN6rQkKe/
-MIc0Memwh4Ez+fWAN9F6LqX3YKywaIqjReoqKSw7z0CrtDe/1kOVE3qf4oDFY3mn
-oc3GJVp+/XiVNybyYDlPbO+sX6i/y8LPsbS7Noh1vfcwNObluIF7eJuubz40LkC5
-siyXqxx6M9gcza+FcY4jA1ErVdXGWT26RsHaTBSBMlkM9/NJUMCpZYVrAtHMJrjV
-vLV4hW1U4gmS2lkYGPDQFe6zCf7nM5BN2ltX3S3ptwcG7QgLmNQ1NpnGLOI28S9M
-7FLcSbgY9wQpVTDZ4eswm/wWpciUsFlV1g==
+MIIERzCCAq+gAwIBAgIJAOeDvPEYrMixMA0GCSqGSIb3DQEBCwUAMBMxETAPBgNV
+BAMTCHJvb3QxLWNhMCAXDTIyMDkxNjAxNDkxOFoYDzIwNTIwOTA4MDE0OTE4WjAT
+MREwDwYDVQQDEwhyb290MS1jYTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoC
+ggGBAN390Txe1w8CisuIpdrPAQrzSBnEjxZVhTgvN36qHlsCQ2AazeXXAUvb48cg
+MViu0zAb+Eu8RcTminLde7oxKERDpylghQ8EtsZHezVHKUfj0hJt1UA0veCv+2+H
+uOiimkxhmgvmVcchVGHUhbwiIjdyLXA2AX+JYFuMFtXc9XcH5cHr42KD0xWamwdv
+hLOJe3Cp0r0PdB6ux/W2vNwy1vLDNeegliJjvWuHY30IZ/+JwdFAM0CedrwDjSa/
+UV6LRBzPxmswm2OTTu+xpkP0Hm6toMoImsJga2Yv6PV1G8FOA6lL+5C5FQjM4owy
+1GjXrSjECXMz+JgWEJhDuILFIWWSl79bN9SdvW6m+1wEs5sOflkA16JMtTcQOR6K
+2Xy5zsBwn13hDDlCTzJDFfO95KHz1AhwzL/PJZJ2hdMdHnQz1wKcMn0gWDMvs3n7
+8Ks1gUMWuGf09TnkuaVdPCCe/2hadBpWCWUbeYASE5XUy9WuRY2hxB4kftPVbnSO
+a2mNowIDAQABo4GbMIGYMA8GA1UdEwEB/wQFMAMBAf8wEQYJYIZIAYb4QgEBBAQD
+AgAHMA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUJhxoeuKyWrcs8Y+PKXx3VGGJ
+BGgwQwYDVR0jBDwwOoAUJhxoeuKyWrcs8Y+PKXx3VGGJBGihF6QVMBMxETAPBgNV
+BAMTCHJvb3QxLWNhggkA54O88RisyLEwDQYJKoZIhvcNAQELBQADggGBABT76MH4
+zGZNFF4APcUTUowLV8zUa9myJZLZbRszff7eASLMOepH9I1pXyJF/Q3LAeHTjqvz
+ypO2Wl0EoEVj061BzJZZbTI9r+0WeooD0CJW5GeRGmBnJhffGh3E77laye/SiL8d
+B/DIbzASgpdnaD7h4J5P8yEFWLA118jx40WJIaULrxCnzXd5sh6oPwTMOuKt/X0x
+mk0CDaoH046pxz2XSgfLhSn3bJHWkFLHGxOdE3I0822c9r0wqVvJ4m62eaas9c4n
+oRqoM4sdnlBg2l4bBf5nrexS5KQNTVwDPDxAbAQCWhZlW+wtSH1a08GhHJeq7gu4
+aYw5HtBvB10BCS8g2b8eeR8WcD21I45XK+UmMLwzsR8mnVwZBUO5CN1Vt7ACYcen
+uZcX8U1YkPITOB7n+TRzmjgarTKl9mdBv90O45E/K8AffquB+c9vSisVpW6zH43A
+WPHyZuQxP4iYqr71UJDC1pttO8ek021D2fZjEmzuTHZWdGEJU1nnrldOyg==
 -----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.key
index e1df34b95..e46bce5ab 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.key
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root1-ca.key
@@ -1,27 +1,39 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEowIBAAKCAQEA4UJUjE0xuCfbL946L3GBum5IZhE9/mzibzQ+8HB1t+YdnpcE
-TWMWGjEMEFzZZm1w2xdmYsmU/vjS8yGcVhzgQKzWbG+PrnyRLKxMYsVBZbSOcBan
-FKKhN/fL0nkF7XGcg8M1a513IkGOWQXq294z1e7H6saOtP2NZmS7DgU1xvARcWn4
-HU8znCdvKJO6vrshQWg1OqKdaGgi/sCUftn3J87MzBUOCa8CLXBwbZ5zCN7iObjF
-FUdMm8OzYXvpkgL6j5MBwgaQJh1g2rcQbPwsOAbCprPpsCx87fDLlOrAZz5hrOhn
-DHWt0RhnQNfBfUBum8r+EAWFqfGinDmkPKDM0wIDAQABAoIBAQC6WO0oxBOFjTM+
-flEUPopbeDBcf5cRi3InHMmUjvRTlgKa18OvYXE/aaPZRXZzzcW2+byxrKGd7KpW
-iE+UzX6XAmTAf+oVJufSVRc7/oMDaEMNZzABWiiU7GGpVIUa0Qnx1uOyiymrJSBl
-dQe9rCylpkusZWZZRAhd1KcKCjVaxGGCqRlj8SE9Yt9QYs0JUOw4VlPWEvZvkA1X
-ksGC2bM5GfinYtVL8mVva0GGLZ9BSfvpwXypwzewUdqIIQ5klqsf8s6oZYYbHCVi
-LyP1H/3B88u7tgN92p15/cbWeye7ZyjPMDf/zsGAKJnETelVMs3UBO7nfTD4jWTq
-dwer23WBAoGBAPow9sgisi3NqNZcOgCb4ENHvLbNJMb0yARh2sxWPsmmnQLa6v3N
-2k2c+2P2KoPF7hqmnrGNAx/E3U+2s/kHwql8Tny1Z4wlt0fKWzJrXMtxceA06QhF
-Ad3vbTwpJxLjSU9kRbOz04iVawfg01mU+svqCBp2J4EraAlYWNRhd6S5AoGBAOZ9
-Lfb9n5rMK7wG2o0qJ7Z09HSCia196Ei7zAOqT0wWy8ncLs0Jvi9cltCf4D9GEevb
-yvu4A6YeItDKCqgssmXlTjJYVwYdLC/P7nE7g0KL8p1k+oSzcEzGQHfd/GyMsEN5
-b46qr6mjlfsY9tsbGO8BTVHroWMEfqfsJXn688/rAoGAWgeKlkQd9+t8qP5xBM0S
-q0NCPkmdxVZKL4GC+WrDl060S1W5n/EWcD1gHP11GQv9fWudyWhjymfN96RYKPHI
-87I+kBO7GixsQpIntQH7V14QS0ze2lHytQk2NqLcY6iUNdRwXJUGNq0F4cTeaOr6
-QKyLk/IWjx2uh0ZaWLpmEkkCgYBYKKsrHKkugUd9HLX9ZpFYBXX3FnLorA7ruwD2
-qe64sMNzy0cPX9mhre11kKEqMnfqWeBS1Xh30nEIoS7gUnBN7x4wvX9TtFbRVtvh
-7ZxwGK1MrHHxzdx3USEZeAvzzQAiXtFfpUOZRBu6tjq9Zajsyfe0DMdm4zI6smVH
-OciFzwKBgGpklXmsUfD/PbsA+icrCnI9dSQwOteqlKWunBSbKcHTVK3LxgwQmebH
-jRsy8iYmTt5Kdu+1OyrCgC7ZU3rvyYk/riOIQXSXa/wr1SqtMCEXIXMBiCnKMSVd
-3Bf+h2BlNLgIDunqtYR0NTn9LvGxoMuVkgxJyKHjmQp2zyukuOSh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 -----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.crt
index f7f7dcdc8..fb55d8bfe 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.crt
@@ -1,20 +1,25 @@
 -----BEGIN CERTIFICATE-----
-MIIDRTCCAi2gAwIBAgIJAPxEphsLNftmMA0GCSqGSIb3DQEBCwUAMBMxETAPBgNV
-BAMTCHJvb3QyLWNhMB4XDTE3MDIwMzAxMzI0MloXDTQ3MDEyNzAxMzI0MlowEzER
-MA8GA1UEAxMIcm9vdDItY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
-AQDBL/l6lHr5m1wBYUoESSsiQOXeMIvIPrrwSyQ71BAQc7B7DFHZWrTnIk5DuKpe
-wI+oJKWxE6f5MS0t7A0D1yQL3duGyOKjU/KXI5yiL6mX1Qf4ou/1X6MUeeT+LEwp
-PL/lE0H4raRH4CI8rYqbW8l7ECFE+sg9x+hVJh4RybKEIIgSkIuEsDXJJsSYYYJI
-xSwze0kbm3mlCKy1aGQ7GhAYdD25wJYV+uV8MytKBHM2Bt4z49oqFwLuxkga+Tbv
-4sPjf+PvXmG5734Bw+AzuvDE56OwzIqY9C2OfNSOVVW//SDSgHsdrf+DMH+pE+06
-iJw1+9HHNvBaKGWQtqFolE8XAgMBAAGjgZswgZgwDwYDVR0TAQH/BAUwAwEB/zAR
-BglghkgBhvhCAQEEBAMCAAcwDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBRTgtjd
-WBFEHqmHx4gtZCik0mv5jjBDBgNVHSMEPDA6gBRTgtjdWBFEHqmHx4gtZCik0mv5
-jqEXpBUwEzERMA8GA1UEAxMIcm9vdDItY2GCCQD8RKYbCzX7ZjANBgkqhkiG9w0B
-AQsFAAOCAQEAQyoNWAFxmWVkk9UrxAxq3k4Ncn9aRl8hRbDspWKKD4BVgFQJHQmn
-bTGT6P4d6clG/o8dGQ7SiRyr7UYTR9pfLkulGDNj/5V7UC0rH0Ld0FkI9cCBth5f
-Hhps+uQ/7V2/jDy2EdJzxT4K38ui54CL6Cups4/G5UJXTXE4iZIAoJw2Iq+ssYGS
-iqCzjHDw34jz64Ms6bmlAy/afPWgP85YXkdersX9YEvdtxhNxa6jrD9mqmlVIj9d
-I+VYMygyB/ql+T2de9Je0Ad68AOiWLogwvOJ0sJMCloC6F/YVqIfTjUCO4XHQ72f
-B/eqocbePh6NwI+nAYBQ6mgwyD8JC88L4A==
+MIIERzCCAq+gAwIBAgIJAKLreAQX+I5qMA0GCSqGSIb3DQEBCwUAMBMxETAPBgNV
+BAMTCHJvb3QyLWNhMCAXDTIyMDkxNjAxNDkyNloYDzIwNTIwOTA4MDE0OTI2WjAT
+MREwDwYDVQQDEwhyb290Mi1jYTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoC
+ggGBALqL3CHDD8xLB2iQwX0fth1jAALwudL7loBSRoKx0NPcYV9xmOSQ+iPwH4h5
+GxuZNMsyqvIcTqriIR+PgtrLwF46+dYwWUXDNB+zBcTzOB6vO/zYa7um7NofCTbK
+S8VX5XXqwOyyNlKab6qizq81eRbvF7pbdY1LzALCstvhbJXdsjTns4dfyzUvKrHf
+nKVlC7kD6gNR/93iOd/EcNzaHXvYkex75GVqVU1bnbaKCdjH4uDV6r7qqkYuITuP
+jiJ3RFULY94uAsuM2mDKNlcIiczaPZfo114GKwJ6DW+E8mZ2XEJnnrOJpryD28dk
+Smej6LldQbVRqf9YXsbP9whbom9HjETwA3qQTSheVVQOYromFDd7PeV9P2t9tyAm
+MqqG9PR7SnOZXmVwpqQnqrwen1lRlTTbgNtnepPKO2UyWlxNC990xyPbh929pXoP
+WAYN/G5BkO9uO3OnE9cRG8g569HrmatuGvSUM8QZogYG95ColMPX6oshWuXDtPW+
+MkLI9wIDAQABo4GbMIGYMA8GA1UdEwEB/wQFMAMBAf8wEQYJYIZIAYb4QgEBBAQD
+AgAHMA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUtR/fcwvg+o6B8p+epWLQdGMf
+zm4wQwYDVR0jBDwwOoAUtR/fcwvg+o6B8p+epWLQdGMfzm6hF6QVMBMxETAPBgNV
+BAMTCHJvb3QyLWNhggkAout4BBf4jmowDQYJKoZIhvcNAQELBQADggGBAJPGjkVh
+hQ2txp3BZGMkrifuuu3jHU8+bURG1WJxz4fPgChY53yu7KUaAPphCpnu5TEHKV+5
+6qt8cUKXItg5c3yK5/WX2rONHzuS9Tl/+Esw/NxWWUgAAzIcucmdUfRB5OEENEwe
+h3aSTVIJavZfr2YfQ7ATZTf6jVWqXi9KH9y37ewps7BUpgjED5phW+mTMObzuDM1
+dg31ZWpwCvKT0td5JdaEieBFotx1yqMmj/vILU+dIl4WAnQPJQGsi4kro88ANpHp
+EpmgS4ql3+17NJpDQz9IsgY5bQuYhixudCXCeIgiUCq1jSRADzRw6YJzn4tN5KDv
+rTSGedRAl2BUOuIQQUESbWsM2IhshP6UIAWlx8prIioCrVjxvO/S+3m9Vs98pGtU
+Ob9Vj+0r+FPHKIUrBEghvZUzJwj1rCasF5JY6+/BBImaxaqE65/hL85Peu5HltTO
+6aIotWjYcJZ5JYl2mtDvA6jYHbK3B40gcpCvZ3bpRjnTpPGlmNSsMZmu/g==
 -----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.key
index fd9666349..40f6e9a05 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.key
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root2-ca.key
@@ -1,27 +1,39 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEAwS/5epR6+ZtcAWFKBEkrIkDl3jCLyD668EskO9QQEHOwewxR
-2Vq05yJOQ7iqXsCPqCSlsROn+TEtLewNA9ckC93bhsjio1PylyOcoi+pl9UH+KLv
-9V+jFHnk/ixMKTy/5RNB+K2kR+AiPK2Km1vJexAhRPrIPcfoVSYeEcmyhCCIEpCL
-hLA1ySbEmGGCSMUsM3tJG5t5pQistWhkOxoQGHQ9ucCWFfrlfDMrSgRzNgbeM+Pa
-KhcC7sZIGvk27+LD43/j715hue9+AcPgM7rwxOejsMyKmPQtjnzUjlVVv/0g0oB7
-Ha3/gzB/qRPtOoicNfvRxzbwWihlkLahaJRPFwIDAQABAoIBADhAiulZkNFbnpe8
-R3wl/gxUT1q6Ugl10qMjjiJppl/UAABkXvTmR6TBxX5MqDc85Ne2DBUavx99ZUVo
-5YVHwPQ/nquJlQyv5gSCVxqWvFA8tLx+XVbaiTbuI3KrXWXojYvbZqtNjHdtWSrH
-8YM5X9qYoMdgKqxqqEka90iArZ1xBaHGZU7IbPaA17VUs9Z2/ZCxI5q5SlJpVN9M
-/s4T+ynJH0FjZmdpn6BBjV2Y9EyFngEekvfup8yV6BC9tCSidvYUREfSn2uLJD5r
-4/L0fefaMri79U8u/qZCgcm0WWPun/rmAc0hpx0sYYt5YeLUFkFjj3IuOan11UyY
-h6olkZkCgYEA8N2znbJKUgPbzIkum54sACdYsw7WZ8Ht0e7XG+nJYJyI5Wxm+4tf
-mLwMi5X46H/6T1NznJxiRPmMg2BaMwcoJPutZ4hkWoSi7wfslnIV3K4ENsBuAhzH
-5l4wJ2ncc7Zl6URQsCZcOhYB+BEw3JGJ0Xxw0FgIExJhkrNnskrNy1sCgYEAzVNe
-V9ourTnVD50qRduJ8g7qfmM0X8rhxQV1jVZV1WlgN3EXqG21zreu/kOixX1YObwW
-11ZVZ5agXyebvljssPR4NgaJdX3JYBG7PuD9bpwZR4ZytXbDOhC345dpKMIMQFlD
-rZJg1UI05GaZ1zozUwCQnYWyrtyYznVlvHcd4/UCgYEA3xTWuGVahB9iwUsEychz
-BCls81n4pdxtARRuUkHy6vHPsHz33F23SmRQUi+yetOc5z9pQlFsiml+BGeG4t/s
-BGS8s7kVCOjzZuM18hjzupHJAVS0DmzNj8UIYFihfuId/S/yc1Lz9DBR3ok9ceux
-cz4H1k7SG6fYiuByWCUD+SUCgYAYc+5PbieS78lFE8WeDjhOgKJCrRPmuKXMrgrC
-615LjUItOCXGJFK7rLqFg46WEIh6T8E0og6HyLOOwYvVzodZx7OtU3f5ayKZc2Mm
-aOslyidkkkmE/QDhIG6WB0k51mpZG4ho2n73xuu/q8x0inTkVLPkXrDaDGGSbP7R
-xCnmJQKBgQCLOd4FJHbp33kevTup/9AENu8WbYeEeVUCuIX+7b5Z62vY0nUoIaKt
-oTa6drw5y4N90nCgjbd/Q0TENVNpBkPO992ic4j2WhM7noYKATPlEYDYXj+yMAob
-tTMNRrzQKWnbD0qUGarM449b+ud7gA3R0hzMEKGvh9bc1AphLv9h6g==
+MIIG5gIBAAKCAYEAuovcIcMPzEsHaJDBfR+2HWMAAvC50vuWgFJGgrHQ09xhX3GY
+5JD6I/AfiHkbG5k0yzKq8hxOquIhH4+C2svAXjr51jBZRcM0H7MFxPM4Hq87/Nhr
+u6bs2h8JNspLxVflderA7LI2UppvqqLOrzV5Fu8Xult1jUvMAsKy2+Fsld2yNOez
+h1/LNS8qsd+cpWULuQPqA1H/3eI538Rw3Node9iR7HvkZWpVTVudtooJ2Mfi4NXq
+vuqqRi4hO4+OIndEVQtj3i4Cy4zaYMo2VwiJzNo9l+jXXgYrAnoNb4TyZnZcQmee
+s4mmvIPbx2RKZ6PouV1BtVGp/1hexs/3CFuib0eMRPADepBNKF5VVA5iuiYUN3s9
+5X0/a323ICYyqob09HtKc5leZXCmpCeqvB6fWVGVNNuA22d6k8o7ZTJaXE0L33TH
+I9uH3b2leg9YBg38bkGQ7247c6cT1xEbyDnr0euZq24a9JQzxBmiBgb3kKiUw9fq
+iyFa5cO09b4yQsj3AgMBAAECggGBAI+2mdNkzDHuB3oWMworOQjwsRySygXxjuOy
+/uFHDgN5v4ZhJJHJ4vt2zUQ9UJX1dMeqdCnrhut9JFmFHSFkYQH3W2wYeV4WYXye
+Va6CVdTF2WgUbwL1OXlc+aM9PBx/d6ZdQV3YeaMvmSGTJbmzb2MstVH7jddZ8oSZ
+7GMbCqV2UwkRC60aLpn9iV3ZUHvXGa3ihxEhxgXxd/adBvoOCzLTCLBwTeeXgLoE
+/76WH7njXDUseBm2/ZDtjuqs0KpayHdTaUJXqQus+R3QNxoXt4jC9kM9HyHMfzXq
+EK+QumgJi1sJ/HY9JbVa5O32R+o05ziCZOx6ifBJb2sg+OowZ66VqkzuBU9dH3F3
+/S/QKFyf/VUjVTqNAd6btdcQhUfEIU4xHmjDj7UCi2CIeQTudrH4LiWjbAe0TbRf
+iMLfJbfng9N4tIFJGL4RT1RisWt1fUBznY4Pmbfe3tOu8bVBdBes7PMdNOkfPL1s
+Es+HwBk/HfYBde11YUDYVGLnTHsUOQKBwQDqfb5gJCJeIe7ZpbI/DDzYp2O/Poz3
+5oupbxFbwFXWwDo2CySyLPD8LXkrJGvwQXPgcQ+yWJNWCOYZWaRIcXDiPAnhxutI
+b3s3oi5EB2oVoLh0QGTQ1ZbPjkur2MyKTgha34R4le1C2ClnjJkArsAgsfsX5ouk
+KkXIdGrzb0pOtOuO84jPO3DKrR97dvqydLUqf7bE5oDn0QYRsZLmrem4emcOKUC7
+r5gErlxHujWbMrBTXOMxk9g1l0eUz6P3LAMCgcEAy6hJ2yWet98Zc6KVAcxggMNc
+1ZcwQZu5zZruPKN0z39a+IjBAp3UW907OWAaLEw8WH22xqH8pBIgQHd2v69eB1Yh
+kzDfDi6Oip1cmiIjPDc5P2fsDLfxUh4DuZe+n5V9QdpMcswHtAOHWMR/LhYxiDRF
+XLL+VjkBf6H8gRM3xPWcW2nnjO8toxBf1g1TIRKTAHAkes8padigQzOgxZUwXw3D
+hsfoQBo1Wj1rZfM8gXAyfNMsTvbVpN+rkjUssW79AoHBAIwzQnAZKrM9dqGLAFfR
+6U9gRbNCouZVYYucbLR++tO7exJ09yvQ0wTz605wKFktySqYbtojO3RlPa5Ken8V
+1HhvjTkAxgw5G2LYBPGHvVXREnfvSFfUXKccXQISTbkjjrtGiN3QRluBAsB2v8Q4
+t4bU41wW68brv21qrcd+8t68LVr7IQFGeNm1SO145cttHCSc15pCdzAjOY26ripe
+MS+rf5Jn99w/0JR765C3NPXmCKbPEsfBrbPdD19aBp7yIQKBwQCFw1oHI1V1RYat
+Cbs+/CLiT+7Ypz3dyc+m+LzDfUTKyMZSeVf0RP/m+o7cp39pWwVDxgZXvqt2hCVE
+0nJfgmqK/Qp+Z9oJsZCUALmCzys/cLIcMEC9Nc+99NLTgpSEsqYbq6sMt2/Tz4GF
+T0KNXaxY3qQ0N6iPr0+JqjZz/NBjgEKbVBru2WWrNaUMraHNFisRXZbIRurXh53z
+paRSQiQMOrkS/JhSCiTCyZaR1soF5lBy5iyzDLLUYMiK9nwNam0CgcEAzQ/4iGOO
+JlbPhJlJ/74zG2PHPAEaJ7wPKurvlhl7rhpip9or7dck+ScwlR+b/5EayOXuZ6d0
+yPWYGwbxMNqw1Lit/HeVIxarkWiBqAdOIE6bQkWxAMm9slaHP9V24I5UU0Y7Cdna
+I3iEAAkUDYzkO5a2zTcOmgmqMA/vvbJdC2ET/c7m1eMXovSg4H1a96nNCrN33oeS
+rMvkmN3z8w8ivJ6efq8/eGhySl8EJ1QDbYzlCACKot95SMGoh/DthSl2
 -----END RSA PRIVATE KEY-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.crt b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.crt
index c25a30350..066accac4 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.crt
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.crt
@@ -1,20 +1,25 @@
 -----BEGIN CERTIFICATE-----
-MIIDRTCCAi2gAwIBAgIJAPxQoexdFrUnMA0GCSqGSIb3DQEBCwUAMBMxETAPBgNV
-BAMTCHJvb3QzLWNhMB4XDTE3MDIwMzAxMzI0NVoXDTQ3MDEyNzAxMzI0NVowEzER
-MA8GA1UEAxMIcm9vdDMtY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
-AQDgx1Jz5fv63h2s2ov0QARVJEFJuQ/7RwS63M3xk1pfXpf1my9yTaMyybztG53d
-ITAN6HOPmy1knUDxuhxm2TVHOXMtFOGHtG3F9B8O/SLsaGJPfHiZQzAM9/hvunzV
-B+MKlmyltAOjRtQTCuQbau243Ly1HSCo/eRRbdbv82haBhnVRyDDsVlj8X6us5qe
-VqerX893hsLrD0wvmApFkXF3GkOTP5o9oSSctlyty9p9n4hfWDAa0hmusQeZqeCm
-LbGJajPqSISqiYGGppVWf21fTlLw/2jeuIHJNY+trru5+DK0pLPoZlvwSZu/rO7U
-ZHszSdgo9Rwho588PAOgx4fLAgMBAAGjgZswgZgwDwYDVR0TAQH/BAUwAwEB/zAR
-BglghkgBhvhCAQEEBAMCAAcwDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBQRKDgp
-mA5e2hbsSJOja6XroD/Z4DBDBgNVHSMEPDA6gBQRKDgpmA5e2hbsSJOja6XroD/Z
-4KEXpBUwEzERMA8GA1UEAxMIcm9vdDMtY2GCCQD8UKHsXRa1JzANBgkqhkiG9w0B
-AQsFAAOCAQEAJ4/5MyfaZx+qt+l5enThajaqAH0LeWYm3gyd0McS/cOvOsfQr13B
-XNYA0MtZEO4vP50EeepxjtI0QVwCZnf2AfwBKeTSShLDpoKCa3cefe/riaJiN6lI
-YerCXSvUvrmuSISL0aUt0c1UagjU7QuL3QwHwT8olauwA3T/K9SOC7ubF7wk+Wv4
-qMqTILAMehH8Pn7V8zD5i8EuMViYmePEeIGZY8kigr+NaKATQrLCefoWaQ1UcyFB
-lnddsMgVXFhC/VnO3TE8v03Jo+k4vyNBzuMF55UT40kc+rZDUXr1heooMnIC8dyr
-q53cOQZROewaF3kc57VqIE0q3b58egwZhw==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 -----END CERTIFICATE-----
diff --git a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.key b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.key
index e087a1dbb..f2a290274 100644
--- a/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.key
+++ b/opensaml-xmlsec-impl/src/test/resources/org/opensaml/xmlsec/signature/support/root3-ca.key
@@ -1,27 +1,39 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEpgIBAAKCAQEA4MdSc+X7+t4drNqL9EAEVSRBSbkP+0cEutzN8ZNaX16X9Zsv
-ck2jMsm87Rud3SEwDehzj5stZJ1A8bocZtk1RzlzLRThh7RtxfQfDv0i7GhiT3x4
-mUMwDPf4b7p81QfjCpZspbQDo0bUEwrkG2rtuNy8tR0gqP3kUW3W7/NoWgYZ1Ucg
-w7FZY/F+rrOanlanq1/Pd4bC6w9ML5gKRZFxdxpDkz+aPaEknLZcrcvafZ+IX1gw
-GtIZrrEHmangpi2xiWoz6kiEqomBhqaVVn9tX05S8P9o3riByTWPra67ufgytKSz
-6GZb8Embv6zu1GR7M0nYKPUcIaOfPDwDoMeHywIDAQABAoIBAQCzcm0A2bowrOJD
-/LV+aR0MW8VDddqsYCYGiABhu6GKQZpPGXTna9O92BBbupBs2PHkKI8ZNmkmyePv
-FwVVllJSairo8qKaFBEO17Vz4eLfmPXjPxuIP3s83zoW+GpwJ7u52B0krHG7B/CG
-w0sYGGVwD8kXTgmk4AxGdcoCBfBo7LbB7OhEMnHgqF/OL1cu2CiY9/puWpKiXL7b
-pX17qVCuF2kpio9+2URNeBSSWGrG/rd1GQgC7cusMG19cUR0uQoAW3PdJ0nibdK8
-6h6YO7t7ved1HrcCbGvNEMP4HlXmlXYhIZf+oPhPT4pSdnvjtyGE5krftOcDH6lG
-s5hdxKwBAoGBAPdIornTq9PnFfQu8fGAh++pDF2XCDiCPhVgaLmquBh3kbaasA+5
-jSDqzdps+nKwLJCddwrNRkjKH1nF9bQCgCPC84GKGpgXiL3AQ28FqLA2B/Je06Is
-C2UxGEc6TPBM9tttvD4KTPJ7y6hTn2npNT7/+j9LmRwb7jXQ4UHYtWHRAoGBAOiz
-nIYDJktOEd7IVUjU7NKzGKJiWUVf+UqTMgKf+5PBfXoFTag4GLI+N5Gz/ltHh/TX
-kA3WIR31B0w2gje6FJYbJN2gZhmeyWPmB+NyX6U/Ok4om/slHZ6VUBYljZEn5m0W
-QPV5nNKX/v/wMra85t8237m3UBFI2LyvovFLm7rbAoGBAOrikMcoW3+lcgIGkYRP
-DVBFZ9yCOKnMdQJDGFa75bA/6yXjWzckjfxlbHF8sIw98abQG6IkCA3eB9dzJQb+
-lQ7i///c2ZP8TsPGm4caffga6oN7NVVGtvBAqQoHQ8vBn34ghvz7NcniczmJbNPi
-U9Rqux5iRaYgla2ComS0Xt3xAoGBAL/31GuV05SSLhncqMaxqUFUsEDd44lg2HZW
-Ig6aTl+hYtMz5tGcnXsF6q/PjkldJGKvJk7T1HQzPLb5zMkOQIdokywmc7Q1EyzP
-irhvFUpsc7wgsjUodFvsD6qFhlk2Ulix4BriHaZ578rSK/QmuEtyqHQ8LthjgTF/
-r2tiFXG7AoGBANqstGrz8tvgp46ey2Pwbb8IIFUYtyI6QcbPG6KU2nVyUhs8KWGY
-LjAuzhartEWIROjRltDsZnVKtkeMqDx3iSODXD+o51wtfNaVYwcCTzown4hxHy32
-/G30UYChJB3Tv4ejZIwc4wGETrFOoBNYs+M/VC1G2sw0xuD0Yx0wttss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 -----END RSA PRIVATE KEY-----

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list