[7.11] Renew samba fixture expired test certificates (#68985) (#68990)

Renew our smb-fixture expired test certificates that are in use in the
fixture and in various tests for LDAP and AD. 
Add a README file for how these certificates can be renewed in the
future, when the need arises again.

x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/samba4.crt

@@ -1,22 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIIDoDCCAoigAwIBAgIUMVGoHuyNTjTFaoRmqFELz75jzDEwDQYJKoZIhvcNAQEL
-BQAwNDEyMDAGA1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5l
-cmF0ZWQgQ0EwHhcNMTgwMjE1MTc0OTExWhcNMjEwMjE0MTc0OTExWjARMQ8wDQYD
-VQQDEwZzYW1iYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtGBwa
-n+7JN2vweSUsYh4zPmh8RPIE+nEVjK1lx/rADUBY7UVjfTYC+MVKKiezZe7gYCNT
-7JNKazPpgVI9e3ZFKw/UxomLqRuuvn5bTh+1tMs3afY5+GGzi7oPmEbBO3ceg0Hi
-rNSTDa1rfroZnRYK8uIeSZacQnAW90plITI7rBBt9jq+W9albFbDybfDgNv+yS/C
-rzIsofm4rbFC3SMRYfrT6HvwDhjOmmYKZci5x7tsn0T+3tSiR44Bw5/DgiN5kX3m
-/kl9qg1eoYWbCUy1dKmQlb4Nb4uNcxrIugLB3zjBkfhMZ0OHoveKh/lJASTWik9k
-xQ9rEYbpsRbuXpsHAgMBAAGjgcwwgckwHQYDVR0OBBYEFJOLa7UXKtLPibgKeFh7
-Kq1+rS0/MG8GA1UdIwRoMGaAFGaNmN5mi9jaMW25MEWYgt+5OkDBoTikNjA0MTIw
-MAYDVQQDEylFbGFzdGljIENlcnRpZmljYXRlIFRvb2wgQXV0b2dlbmVyYXRlZCBD
-QYIUdwsnIxjgSneHNVKT6JNCCsrQ3T0wLAYDVR0RBCUwI4IJbG9jYWxob3N0hwR/
-AAABhxAAAAAAAAAAAAAAAAAAAAABMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQAD
-ggEBAEHqT1WHkcF8DuOgyIBx7wKcUVQ5H1qYYlJ1xgMGrKFFZLUzouLcON7oadEu
-HLIJ4Z3AKD3bqWpcls5XJ9MTECGR48tou67x9cXqTV7jR3Rh0H/VGwzwhR85vbpu
-o8ielOPL8XAQOfnAFESJii5sfCU4ZwLg+3evmGZdKfhU6rqQtLimgG/Gm96vOJne
-y0a/TZTWrfAarithkOHHXSSAhEI5SdW5SlZAytF4AmYqFvafwxe1+NyFwfCRy0Xl
-H40WgVsq+z84psU+WyORb3THX5rgB4au9nuMXOqFKAtrJSI/uApncYraaqU28rqB
-gYd8XrtjhKOLw+6viqAKu8l7/cs=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 -----END CERTIFICATE-----

x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authc/ldap/LdapSessionFactoryTests.java

@@ -10,6 +10,7 @@
 import com.unboundid.ldap.sdk.LDAPException;
 import com.unboundid.ldap.sdk.LDAPURL;
 import com.unboundid.ldap.sdk.SimpleBindRequest;
+import org.apache.lucene.util.LuceneTestCase;
 import org.elasticsearch.common.network.NetworkAddress;
 import org.elasticsearch.common.settings.SecureString;
 import org.elasticsearch.common.settings.Settings;
@@ -244,6 +245,7 @@ public void testGroupLookupBase() throws Exception {
      * If the realm's CA path is monitored for changes and the underlying SSL context is reloaded, then we will get two different outcomes
      * (one failure, one success) depending on which file content is in place.
      */
+    @LuceneTestCase.AwaitsFix(bugUrl = "https://github.com/elastic/elasticsearch/issues/68995")
     public void testSslTrustIsReloaded() throws Exception {
         assumeFalse("NPE thrown in BCFIPS JSSE - addressed in " +
             "https://github.com/bcgit/bc-java/commit/5aed687e17a3cd63f34373cafe92699b90076fb6#diff-8e5d8089bc0d504d93194a1e484d3950R179",

x-pack/plugin/security/src/test/resources/org/elasticsearch/xpack/security/authc/ldap/support/smb_ca.crt

@@ -1,22 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIIDmzCCAoOgAwIBAgIUdwsnIxjgSneHNVKT6JNCCsrQ3T0wDQYJKoZIhvcNAQEL
-BQAwNDEyMDAGA1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5l
-cmF0ZWQgQ0EwHhcNMTgwMjE1MTc0ODQ2WhcNMjEwMjE0MTc0ODQ2WjA0MTIwMAYD
-VQQDEylFbGFzdGljIENlcnRpZmljYXRlIFRvb2wgQXV0b2dlbmVyYXRlZCBDQTCC
-ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKQAP/hdsWdu3Ck/Zteosity
-nmXJTCnkecBYSLtjgYh9rPDFppj9KdsZ7+5P9FvxLv/t4Yw81YI24TrHk0CnMrD/
-QBaXDiPGeT9b6T/gWWVm1zQj2/567gH2UaIkIffy7q09BI9ICXSKDBRXRMLgVR19
-iiJkwWb3b5TVvaQI4M8sEmJIHXei2/cfEKVR5hBprtzeKkvg6o9DXx+nDv2ZEUZ7
-it5pEN5AjD5t0S3ymtlUU5lqnr8er6/Qcrua2EXxE1HyPEkpN/Cwl7tF1ICMdguf
-vght5ql1/Pk43VmBMulI/6z5e+7GZ1+x79YA17gabtGJ+onB0zJxgDBj0tto7H8C
-AwEAAaOBpDCBoTAdBgNVHQ4EFgQUZo2Y3maL2NoxbbkwRZiC37k6QMEwbwYDVR0j
-BGgwZoAUZo2Y3maL2NoxbbkwRZiC37k6QMGhOKQ2MDQxMjAwBgNVBAMTKUVsYXN0
-aWMgQ2VydGlmaWNhdGUgVG9vbCBBdXRvZ2VuZXJhdGVkIENBghR3CycjGOBKd4c1
-UpPok0IKytDdPTAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBf
-mkc4bvUR5+We/2rRqCmP4LFnl/LxfbZ9/pUPRdcxuowuK7YfxN8i44VXGpJvLtec
-izhA8gvlj6GbYB/GNlHMogqEORbrMlu2o5Cev4HE/pcWpoqtVaDJqI5Hq4763EmJ
-p2dXGMmU04H4LtkcCEt3xQfLQ+QIP4Dl2yEsNd248BKSsscCGm9V3vgzFzbdgndo
-zUWv9hQCaEsKNtqvnkTqDy2uFjnf+xNoXFr/bI94gvD9HlZHnIC+g0TL5jjtSfCH
-gjeXhC2bBKFtlSt4ClIdZTXWievYs6YDRREfaOi4F0757A/gf+hT0fjZ+9WWnUeM
-UuvUnl71CNRnJ5JlNKBA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 -----END CERTIFICATE-----

x-pack/plugin/security/src/test/resources/org/elasticsearch/xpack/security/authc/ldap/support/smb_cert.crt

@@ -1,22 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIIDoDCCAoigAwIBAgIUMVGoHuyNTjTFaoRmqFELz75jzDEwDQYJKoZIhvcNAQEL
-BQAwNDEyMDAGA1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5l
-cmF0ZWQgQ0EwHhcNMTgwMjE1MTc0OTExWhcNMjEwMjE0MTc0OTExWjARMQ8wDQYD
-VQQDEwZzYW1iYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtGBwa
-n+7JN2vweSUsYh4zPmh8RPIE+nEVjK1lx/rADUBY7UVjfTYC+MVKKiezZe7gYCNT
-7JNKazPpgVI9e3ZFKw/UxomLqRuuvn5bTh+1tMs3afY5+GGzi7oPmEbBO3ceg0Hi
-rNSTDa1rfroZnRYK8uIeSZacQnAW90plITI7rBBt9jq+W9albFbDybfDgNv+yS/C
-rzIsofm4rbFC3SMRYfrT6HvwDhjOmmYKZci5x7tsn0T+3tSiR44Bw5/DgiN5kX3m
-/kl9qg1eoYWbCUy1dKmQlb4Nb4uNcxrIugLB3zjBkfhMZ0OHoveKh/lJASTWik9k
-xQ9rEYbpsRbuXpsHAgMBAAGjgcwwgckwHQYDVR0OBBYEFJOLa7UXKtLPibgKeFh7
-Kq1+rS0/MG8GA1UdIwRoMGaAFGaNmN5mi9jaMW25MEWYgt+5OkDBoTikNjA0MTIw
-MAYDVQQDEylFbGFzdGljIENlcnRpZmljYXRlIFRvb2wgQXV0b2dlbmVyYXRlZCBD
-QYIUdwsnIxjgSneHNVKT6JNCCsrQ3T0wLAYDVR0RBCUwI4IJbG9jYWxob3N0hwR/
-AAABhxAAAAAAAAAAAAAAAAAAAAABMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQAD
-ggEBAEHqT1WHkcF8DuOgyIBx7wKcUVQ5H1qYYlJ1xgMGrKFFZLUzouLcON7oadEu
-HLIJ4Z3AKD3bqWpcls5XJ9MTECGR48tou67x9cXqTV7jR3Rh0H/VGwzwhR85vbpu
-o8ielOPL8XAQOfnAFESJii5sfCU4ZwLg+3evmGZdKfhU6rqQtLimgG/Gm96vOJne
-y0a/TZTWrfAarithkOHHXSSAhEI5SdW5SlZAytF4AmYqFvafwxe1+NyFwfCRy0Xl
-H40WgVsq+z84psU+WyORb3THX5rgB4au9nuMXOqFKAtrJSI/uApncYraaqU28rqB
-gYd8XrtjhKOLw+6viqAKu8l7/cs=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 -----END CERTIFICATE-----

x-pack/test/smb-fixture/src/main/resources/certs/README.asciidoc

@@ -0,0 +1,47 @@
+= Key material details
+This document details the steps used to create the certificate and key files in this directory.
+
+== Instructions on generating certificates
+
+The certificates in this directory have been generated using elasticsearch-certutil (8.0.0 SNAPSHOT)
+
+=== Generate certificates for the Samba server
+
+These keys and certificates are copied by installsmb.sh for the Samba server to use for TLS. See `../provision/installsmb.sh`
+
+[source,shell]
+-----------------------------------------------------------------------------------------------------------
+elasticsearch-certutil ca --pem --out=${PWD}/samba-ca.zip
+
+unzip samba-ca.zip
+mv ca/ca.crt ./ca.pem
+mv ca/ca.key ./ca.key
+
+rm samba-ca.zip
+rm -r ca
+-----------------------------------------------------------------------------------------------------------
+
+[source,shell]
+-----------------------------------------------------------------------------------------------------------
+elasticsearch-certutil cert  --pem --ca-cert ${PWD}/ca.pem --ca-key ${PWD}/ca.key \
+   --dns localhost --ip 127.0.0.1,0:0:0:0:0:0:0:1 --name samba4 --out ${PWD}/samba4.zip
+
+unzip samba4.zip
+mv samba4/samba4.crt ./cert.pem
+mv samba4/samba4.key ./key.pem
+
+rm samba4.zip
+rm -r samba4
+-----------------------------------------------------------------------------------------------------------
+
+
+== Ensure that all tests are aware of the certificate and keys
+
+[source,shell]
+-----------------------------------------------------------------------------------------------------------
+cp ./ca.pem ../../../../../../../x-pack/plugin/security/src/test/resources/org/elasticsearch/xpack/security/authc/ldap/support/smb_ca.crt
+cp ./cert.pem ../../../../../../../x-pack/plugin/security/src/test/resources/org/elasticsearch/xpack/security/authc/ldap/support/smb_cert.crt
+cp ./cert.pem ../../../../../../../x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/samba4.crt
+
+keytool -keystore ../../../../../../../x-pack/plugin/security/src/test/resources/org/elasticsearch/xpack/security/authc/ldap/support/ADtrust.jks -storepass changeit -delete -noprompt -alias smb_ca
+keytool -keystore ../../../../../../../x-pack/plugin/security/src/test/resources/org/elasticsearch/xpack/security/authc/ldap/support/ADtrust.jks -storepass changeit -importcert -file ca.pem -alias smb_ca -noprompt

x-pack/test/smb-fixture/src/main/resources/certs/ca.key

@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEogIBAAKCAQEApAA/+F2xZ27cKT9m16iyK3KeZclMKeR5wFhIu2OBiH2s8MWm
-mP0p2xnv7k/0W/Eu/+3hjDzVgjbhOseTQKcysP9AFpcOI8Z5P1vpP+BZZWbXNCPb
-/nruAfZRoiQh9/LurT0Ej0gJdIoMFFdEwuBVHX2KImTBZvdvlNW9pAjgzywSYkgd
-d6Lb9x8QpVHmEGmu3N4qS+Dqj0NfH6cO/ZkRRnuK3mkQ3kCMPm3RLfKa2VRTmWqe
-vx6vr9Byu5rYRfETUfI8SSk38LCXu0XUgIx2C5++CG3mqXX8+TjdWYEy6Uj/rPl7
-7sZnX7Hv1gDXuBpu0Yn6icHTMnGAMGPS22jsfwIDAQABAoIBAAYdrEUK2W7OB4/S
-OXeZZuuP3rBVDW4SgyfVIwE5+L6qUSS5ejkCV+k/0l7ExIwZNnN834hnTF8KxON4
-RdmHYrCPFEjDYVecMzFVsCEdsLfDWgsruyyGURHpqamuR0YD3TrAp8bgHNonu8OW
-bY4G56Wt5NTbhQrd919JiUTwv9F59+6TnP9cubdt2GHDD2M6TkUNpgQS0hnM578X
-zrkiQlakAi+rlC2ZQkH94wxKlm53okBliiAykUmbCOGkLUT/GaQLMoN+MZ7Wv6Ib
-nsH8lC0KDcH4T9VGmxjlScIJtxGUMO+dNWx6Kg7E/MSwEasUAJOCqIofRtpDUTr4
-QJNo4eECgYEA32l+vZLm7OMFxhbqGnueiZXbnc/v0kveeFTDt4OWcUozMBez5H3W
-AFFILTRADNbvgEAwuK5oC1hEOH5zoRfnaGXcmWayurD8ibK/t23gE5Xf6rL/vCBN
-LMS6WoKXXgCKOwQ0Ke5AoaPmca0Iq8bHFmb4pBF9C/0Z1mc1fc+RWxUCgYEAu+xD
-w0zhh5Ktob8Q8eNiqVMrSa9jq0MUS1ljx6qCeIGxbuvQARkJxqms3SXwR4JjEwf3
-BAzetYCTFvkqrne9jhoVyZGGS0gLXSG9v3iOaP6GIa51GZwtYhBrzDuGao+UL/Cc
-ke4hXpC9S7TSoprW8WWevXVa4dy1kaoFUbrTPkMCgYAxRrx8pcUnZJ9mZLF36+I4
-6IPLGA0GblOAaPnOJUjubfZCWkgEUrj70vG/frHN4y5qND5KzbUHI43QhBuO4Y3Z
-2fXBJASx5s2ctX9RvvtYdosv4hFD9j/vaujLg9hNFINopvG2eeVpgZQXaJnsAWjy
-CP44ed8B4O5s+tCykjC2TQKBgCMxJqt/TUjnRg7hShoSXBqbkaK17rNW14kYz1/H
-5bENkJ3WGVjrSHJkuhOcFDhACa+5sR+YDWjuEB2gQcb0c5IV/niGASE996rUM8WU
-nQ66g4HxOsq1/aW8r4NKrmxsQPMNWzTU5HjiICD6VuvOlWwVfLm8LW3YuEP0FBTv
-KLojAoGAW2EKM7SnstY4khKnC+029aZNuSy/VE6LDcn+E5vwEUgpBN5UTqOWweTv
-krlEbD1uAI6aI0Ybc4jM6uyo5LSBzw1TZRS5u3prLZxyyG10JvRD0/f/QTOI21TS
-LubgfTc+LXbvUpv6F29lIxHZcIe9lX7cUzHK3Wwo24QOCsXYeqU=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 -----END RSA PRIVATE KEY-----

x-pack/test/smb-fixture/src/main/resources/certs/ca.pem

@@ -1,22 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIIDmzCCAoOgAwIBAgIUdwsnIxjgSneHNVKT6JNCCsrQ3T0wDQYJKoZIhvcNAQEL
+MIIDSTCCAjGgAwIBAgIUZTmHgM9YKX8muNbP2IYiv2sfeswwDQYJKoZIhvcNAQEL
 BQAwNDEyMDAGA1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5l
-cmF0ZWQgQ0EwHhcNMTgwMjE1MTc0ODQ2WhcNMjEwMjE0MTc0ODQ2WjA0MTIwMAYD
+cmF0ZWQgQ0EwHhcNMjEwMjE1MTEzODA2WhcNMjQwMjE1MTEzODA2WjA0MTIwMAYD
 VQQDEylFbGFzdGljIENlcnRpZmljYXRlIFRvb2wgQXV0b2dlbmVyYXRlZCBDQTCC
-ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKQAP/hdsWdu3Ck/Zteosity
-nmXJTCnkecBYSLtjgYh9rPDFppj9KdsZ7+5P9FvxLv/t4Yw81YI24TrHk0CnMrD/
-QBaXDiPGeT9b6T/gWWVm1zQj2/567gH2UaIkIffy7q09BI9ICXSKDBRXRMLgVR19
-iiJkwWb3b5TVvaQI4M8sEmJIHXei2/cfEKVR5hBprtzeKkvg6o9DXx+nDv2ZEUZ7
-it5pEN5AjD5t0S3ymtlUU5lqnr8er6/Qcrua2EXxE1HyPEkpN/Cwl7tF1ICMdguf
-vght5ql1/Pk43VmBMulI/6z5e+7GZ1+x79YA17gabtGJ+onB0zJxgDBj0tto7H8C
-AwEAAaOBpDCBoTAdBgNVHQ4EFgQUZo2Y3maL2NoxbbkwRZiC37k6QMEwbwYDVR0j
-BGgwZoAUZo2Y3maL2NoxbbkwRZiC37k6QMGhOKQ2MDQxMjAwBgNVBAMTKUVsYXN0
-aWMgQ2VydGlmaWNhdGUgVG9vbCBBdXRvZ2VuZXJhdGVkIENBghR3CycjGOBKd4c1
-UpPok0IKytDdPTAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBf
-mkc4bvUR5+We/2rRqCmP4LFnl/LxfbZ9/pUPRdcxuowuK7YfxN8i44VXGpJvLtec
-izhA8gvlj6GbYB/GNlHMogqEORbrMlu2o5Cev4HE/pcWpoqtVaDJqI5Hq4763EmJ
-p2dXGMmU04H4LtkcCEt3xQfLQ+QIP4Dl2yEsNd248BKSsscCGm9V3vgzFzbdgndo
-zUWv9hQCaEsKNtqvnkTqDy2uFjnf+xNoXFr/bI94gvD9HlZHnIC+g0TL5jjtSfCH
-gjeXhC2bBKFtlSt4ClIdZTXWievYs6YDRREfaOi4F0757A/gf+hT0fjZ+9WWnUeM
-UuvUnl71CNRnJ5JlNKBA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 -----END CERTIFICATE-----

x-pack/test/smb-fixture/src/main/resources/certs/cert.pem

@@ -1,22 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIIDoDCCAoigAwIBAgIUMVGoHuyNTjTFaoRmqFELz75jzDEwDQYJKoZIhvcNAQEL
-BQAwNDEyMDAGA1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5l
-cmF0ZWQgQ0EwHhcNMTgwMjE1MTc0OTExWhcNMjEwMjE0MTc0OTExWjARMQ8wDQYD
-VQQDEwZzYW1iYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtGBwa
-n+7JN2vweSUsYh4zPmh8RPIE+nEVjK1lx/rADUBY7UVjfTYC+MVKKiezZe7gYCNT
-7JNKazPpgVI9e3ZFKw/UxomLqRuuvn5bTh+1tMs3afY5+GGzi7oPmEbBO3ceg0Hi
-rNSTDa1rfroZnRYK8uIeSZacQnAW90plITI7rBBt9jq+W9albFbDybfDgNv+yS/C
-rzIsofm4rbFC3SMRYfrT6HvwDhjOmmYKZci5x7tsn0T+3tSiR44Bw5/DgiN5kX3m
-/kl9qg1eoYWbCUy1dKmQlb4Nb4uNcxrIugLB3zjBkfhMZ0OHoveKh/lJASTWik9k
-xQ9rEYbpsRbuXpsHAgMBAAGjgcwwgckwHQYDVR0OBBYEFJOLa7UXKtLPibgKeFh7
-Kq1+rS0/MG8GA1UdIwRoMGaAFGaNmN5mi9jaMW25MEWYgt+5OkDBoTikNjA0MTIw
-MAYDVQQDEylFbGFzdGljIENlcnRpZmljYXRlIFRvb2wgQXV0b2dlbmVyYXRlZCBD
-QYIUdwsnIxjgSneHNVKT6JNCCsrQ3T0wLAYDVR0RBCUwI4IJbG9jYWxob3N0hwR/
-AAABhxAAAAAAAAAAAAAAAAAAAAABMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQAD
-ggEBAEHqT1WHkcF8DuOgyIBx7wKcUVQ5H1qYYlJ1xgMGrKFFZLUzouLcON7oadEu
-HLIJ4Z3AKD3bqWpcls5XJ9MTECGR48tou67x9cXqTV7jR3Rh0H/VGwzwhR85vbpu
-o8ielOPL8XAQOfnAFESJii5sfCU4ZwLg+3evmGZdKfhU6rqQtLimgG/Gm96vOJne
-y0a/TZTWrfAarithkOHHXSSAhEI5SdW5SlZAytF4AmYqFvafwxe1+NyFwfCRy0Xl
-H40WgVsq+z84psU+WyORb3THX5rgB4au9nuMXOqFKAtrJSI/uApncYraaqU28rqB
-gYd8XrtjhKOLw+6viqAKu8l7/cs=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 -----END CERTIFICATE-----