new dsa cert

diff --git a/modules/ssl/files/chains/dsa.debian.org.crt b/modules/ssl/files/chains/dsa.debian.org.crt
index 6aaa9147cb65c73c7ffdb1e569441cf174ae05c0..50d224a833cb626bbfa12e55411bc5cc60c3d6df 120000 (symlink)
--- a/modules/ssl/files/chains/dsa.debian.org.crt
+++ b/modules/ssl/files/chains/dsa.debian.org.crt
@@ -1 +1 @@
-GANDI-CA
\ No newline at end of file
+GANDI-2-CA
\ No newline at end of file

diff --git a/modules/ssl/files/servicecerts/dsa.debian.org.crt b/modules/ssl/files/servicecerts/dsa.debian.org.crt
index 2228e45622cf3fd707a3657caeac80a064f61f39..d5cec719d30b861f22e6cb99731bee231534c39b 100644 (file)
--- a/modules/ssl/files/servicecerts/dsa.debian.org.crt
+++ b/modules/ssl/files/servicecerts/dsa.debian.org.crt
@@ -2,12 +2,12 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            63:97:d4:fe:d6:83:57:fe:e9:ca:da:cc:a5:50:d7:24
-    Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C=FR, O=GANDI SAS, CN=Gandi Standard SSL CA
+            a0:32:ca:f0:3b:d1:d2:68:c8:be:1a:18:75:13:65:4d
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=FR, ST=Paris, L=Paris, O=Gandi, CN=Gandi Standard SSL CA 2
         Validity
-            Not Before: Jan  1 00:00:00 2014 GMT
-            Not After : Jan  1 23:59:59 2015 GMT
+            Not Before: Dec 17 00:00:00 2014 GMT
+            Not After : Jan  1 23:59:59 2016 GMT
         Subject: OU=Domain Control Validated, OU=Gandi Standard SSL, CN=dsa.debian.org
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
@@ -42,7 +42,7 @@ Certificate:
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Authority Key Identifier: 
-                keyid:B6:A8:FF:A2:A8:2F:D0:A6:CD:4B:B1:68:F3:E7:50:10:31:A7:79:21
+                keyid:B3:90:A7:D8:C9:AF:4E:CD:61:3C:9F:7C:AD:5D:7F:41:FD:69:30:EA
 
             X509v3 Subject Key Identifier: 
                 1B:D8:A4:5A:A9:00:E8:FF:79:88:1D:38:C8:71:9D:35:D3:BB:98:E7
@@ -54,64 +54,65 @@ Certificate:
                 TLS Web Server Authentication, TLS Web Client Authentication
             X509v3 Certificate Policies: 
                 Policy: 1.3.6.1.4.1.6449.1.2.2.26
-                  CPS: http://www.gandi.net/contracts/fr/ssl/cps/pdf/
+                  CPS: https://cps.usertrust.com
                 Policy: 2.23.140.1.2.1
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
-                  URI:http://crl.gandi.net/GandiStandardSSLCA.crl
+                  URI:http://crl.usertrust.com/GandiStandardSSLCA2.crl
 
             Authority Information Access: 
-                CA Issuers - URI:http://crt.gandi.net/GandiStandardSSLCA.crt
-                OCSP - URI:http://ocsp.gandi.net
+                CA Issuers - URI:http://crt.usertrust.com/GandiStandardSSLCA2.crt
+                OCSP - URI:http://ocsp.usertrust.com
 
             X509v3 Subject Alternative Name: 
                 DNS:dsa.debian.org, DNS:www.dsa.debian.org
-    Signature Algorithm: sha1WithRSAEncryption
-         7b:15:d3:17:b0:d0:53:fd:75:dd:d3:b5:01:e5:69:14:82:02:
-         99:f8:8a:d2:b3:d9:e6:fb:96:31:a2:29:5f:6e:d7:63:cd:21:
-         66:bf:73:5b:20:30:b6:8a:ac:6f:7c:63:f5:ed:9d:b7:5d:ed:
-         ac:cc:2d:65:5b:ac:ba:86:9e:90:51:21:ed:c8:05:52:37:fe:
-         fe:d3:bb:38:17:98:d5:90:4d:64:08:95:72:44:dd:e4:e7:fd:
-         53:9c:cf:09:0a:1c:4a:7e:55:14:f8:aa:71:ad:56:86:68:cd:
-         3c:be:38:85:72:fd:0a:20:99:e1:2e:3c:c0:51:ff:69:ba:66:
-         02:7e:6e:44:3f:c0:ed:33:4d:c1:0e:d5:aa:a1:b0:ea:39:72:
-         01:dc:c6:86:52:0d:74:38:0c:2f:41:2d:8e:af:60:9f:b7:a6:
-         29:ea:9c:8f:aa:32:22:95:74:13:98:5a:88:d8:ca:3d:d0:03:
-         55:be:9e:8b:fd:85:c3:d9:80:cc:d2:f9:d1:c1:9f:7d:2d:5e:
-         12:de:6b:e7:40:b7:50:eb:de:6c:a6:84:23:3f:a2:58:ee:db:
-         0d:4b:e7:d4:01:d0:5a:89:17:c5:96:67:bd:5b:fb:a0:30:58:
-         d6:2f:56:8b:fd:b2:00:be:b8:04:74:3b:33:17:cb:eb:06:05:
-         67:7b:c4:08
+    Signature Algorithm: sha256WithRSAEncryption
+         6c:da:dd:dd:c7:03:44:88:ae:42:b7:86:67:cf:5b:74:33:da:
+         dc:7b:40:db:94:fd:36:8b:b1:9a:ee:0d:c3:7e:15:35:9b:70:
+         c2:54:53:5c:4e:cc:00:12:a6:a7:c1:d6:67:8c:ca:e2:59:75:
+         17:f6:25:74:0c:d2:75:72:31:c2:ea:c0:a3:95:e3:a6:0f:22:
+         a1:3e:6f:d3:00:65:30:d9:bf:ce:52:b3:ee:e1:0d:c3:90:e3:
+         81:73:5d:6d:16:f3:f1:98:de:2c:af:07:7b:d3:8f:13:36:ae:
+         81:29:78:85:92:0c:64:89:06:46:9d:b1:3e:c2:ca:ac:3e:0e:
+         85:6d:f3:9f:ef:8f:bc:fd:78:10:78:30:74:9d:09:97:f0:fd:
+         a3:0f:8f:21:cb:9c:fb:6a:e8:97:fc:04:0a:6d:1f:c6:42:12:
+         fc:18:86:dc:5d:b2:59:8b:d7:90:9b:20:2a:a1:61:f6:89:6c:
+         5c:8e:9f:33:3d:9b:a8:ce:38:f3:e7:be:3a:82:13:d0:d6:46:
+         41:8e:7c:aa:e3:f6:6a:47:11:7b:b5:73:9c:b1:25:98:e1:df:
+         41:dd:06:2f:f9:e0:bc:f6:9d:c5:8e:dc:f2:4e:ce:b9:b3:c2:
+         c8:e2:81:a7:00:ba:67:a7:bb:ce:11:3e:1b:4f:fb:ad:7e:a0:
+         30:d2:52:05
 -----BEGIN CERTIFICATE-----
-MIIFYjCCBEqgAwIBAgIQY5fU/taDV/7pytrMpVDXJDANBgkqhkiG9w0BAQUFADBB
-MQswCQYDVQQGEwJGUjESMBAGA1UEChMJR0FOREkgU0FTMR4wHAYDVQQDExVHYW5k
-aSBTdGFuZGFyZCBTU0wgQ0EwHhcNMTQwMTAxMDAwMDAwWhcNMTUwMTAxMjM1OTU5
-WjBZMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxGzAZBgNVBAsT
-EkdhbmRpIFN0YW5kYXJkIFNTTDEXMBUGA1UEAxMOZHNhLmRlYmlhbi5vcmcwggGi
-MA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDdI2I7/1FavuYWpeoh9w3Su5p6
-U/EH8UU3SnXTcgfUl3LR+o0X29F2wWi8zb622ICEbo4OUXo8byAL1bb29v34Ec2v
-OF5lPJTwfyZiqj2EhHAvtnzx7b3F/wNR7WBHL0oU3u8ixcynF345gEoRLWE8G9Be
-wiiJOqUX/SGoIEIVbnhyJ7RPDmJcDWNoZVXy/RrcjVY8PQBs0/rTt5X+zX1IG5gH
-5guoe5TqZ0dRzPrMRIDTElisKYZVvzUwb0FZTz3uuIbeWShbgXnx2uR18Efd5fD7
-nAMRhYjK0FovaF7ew/KCFF7zH4OpDsnGEFSUIY0Q5VhR5v1hCOd2JCk5D36At2k7
-7WI5XWuR6eR7y/Mi3087vCZND729d8XSVWJPy0xrcNZ2ufb9viyzMfzZOVg2Gi3j
-3ARb2LSMrY0DFgimfHpsBKRSR8fFwLPC10b2V2G8c82Qu+4d8oylJcwNkbsmoEb0
-ym47D36veyDPeLv0EGy7DbuOhvnLzbiUn/OvioUCAwEAAaOCAbwwggG4MB8GA1Ud
-IwQYMBaAFLao/6KoL9CmzUuxaPPnUBAxp3khMB0GA1UdDgQWBBQb2KRaqQDo/3mI
-HTjIcZ0107uY5zAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUE
-FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwYAYDVR0gBFkwVzBLBgsrBgEEAbIxAQIC
-GjA8MDoGCCsGAQUFBwIBFi5odHRwOi8vd3d3LmdhbmRpLm5ldC9jb250cmFjdHMv
-ZnIvc3NsL2Nwcy9wZGYvMAgGBmeBDAECATA8BgNVHR8ENTAzMDGgL6AthitodHRw
-Oi8vY3JsLmdhbmRpLm5ldC9HYW5kaVN0YW5kYXJkU1NMQ0EuY3JsMGoGCCsGAQUF
-BwEBBF4wXDA3BggrBgEFBQcwAoYraHR0cDovL2NydC5nYW5kaS5uZXQvR2FuZGlT
-dGFuZGFyZFNTTENBLmNydDAhBggrBgEFBQcwAYYVaHR0cDovL29jc3AuZ2FuZGku
-bmV0MC0GA1UdEQQmMCSCDmRzYS5kZWJpYW4ub3JnghJ3d3cuZHNhLmRlYmlhbi5v
-cmcwDQYJKoZIhvcNAQEFBQADggEBAHsV0xew0FP9dd3TtQHlaRSCApn4itKz2eb7
-ljGiKV9u12PNIWa/c1sgMLaKrG98Y/Xtnbdd7azMLWVbrLqGnpBRIe3IBVI3/v7T
-uzgXmNWQTWQIlXJE3eTn/VOczwkKHEp+VRT4qnGtVoZozTy+OIVy/QogmeEuPMBR
-/2m6ZgJ+bkQ/wO0zTcEO1aqhsOo5cgHcxoZSDXQ4DC9BLY6vYJ+3pinqnI+qMiKV
-dBOYWojYyj3QA1W+nov9hcPZgMzS+dHBn30tXhLea+dAt1Dr3mymhCM/olju2w1L
-59QB0FqJF8WWZ71b+6AwWNYvVov9sgC+uAR0OzMXy+sGBWd7xAg=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 -----END CERTIFICATE-----