summaryrefslogtreecommitdiffstats
path: root/security/nss/tests/libpkix/certs
diff options
context:
space:
mode:
Diffstat (limited to 'security/nss/tests/libpkix/certs')
-rw-r--r--security/nss/tests/libpkix/certs/BrAirWaysBadSig.certbin0 -> 1647 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/CertificatePoliciesCritical.crtbin0 -> 805 bytes
-rw-r--r--security/nss/tests/libpkix/certs/GoodCACert.crtbin0 -> 625 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.ca.certbin0 -> 626 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.dcissallowed.certbin0 -> 888 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.dcissblocked.certbin0 -> 889 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.dcisscopy.certbin0 -> 957 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.intermediate.certbin0 -> 662 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.intermediate2.certbin0 -> 644 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.intermediate3.certbin0 -> 716 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.intermediate4.certbin0 -> 607 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.intermediate5.certbin0 -> 612 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.intermediate6.certbin0 -> 611 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.ncca.certbin0 -> 672 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server1.certbin0 -> 660 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server10.certbin0 -> 560 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server11.certbin0 -> 585 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server12.certbin0 -> 562 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server13.certbin0 -> 574 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server14.certbin0 -> 574 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server15.certbin0 -> 634 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server16.certbin0 -> 612 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server17.certbin0 -> 630 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server2.certbin0 -> 643 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server3.certbin0 -> 660 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server4.certbin0 -> 663 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server5.certbin0 -> 646 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server6.certbin0 -> 663 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server7.certbin0 -> 578 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server8.certbin0 -> 564 bytes
-rw-r--r--security/nss/tests/libpkix/certs/NameConstraints.server9.certbin0 -> 551 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPCA1.certbin0 -> 574 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPCA1.p12bin0 -> 1690 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPCA2.certbin0 -> 574 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPCA2.p12bin0 -> 1690 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPCA3.certbin0 -> 574 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPCA3.p12bin0 -> 1690 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPEE11.certbin0 -> 552 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPEE12.certbin0 -> 552 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPEE13.certbin0 -> 552 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPEE14.certbin0 -> 552 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPEE15.certbin0 -> 552 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPEE21.certbin0 -> 552 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPEE22.certbin0 -> 552 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPEE23.certbin0 -> 552 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPEE31.certbin0 -> 552 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPEE32.certbin0 -> 552 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPEE33.certbin0 -> 552 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPRoot.certbin0 -> 549 bytes
-rw-r--r--security/nss/tests/libpkix/certs/OCSPRoot.p12bin0 -> 1668 bytes
-rw-r--r--security/nss/tests/libpkix/certs/PayPalEE.certbin0 -> 1376 bytes
-rw-r--r--security/nss/tests/libpkix/certs/PayPalICA.certbin0 -> 1205 bytes
-rw-r--r--security/nss/tests/libpkix/certs/PayPalRootCA.certbin0 -> 969 bytes
-rw-r--r--security/nss/tests/libpkix/certs/TestCA.ca.certbin0 -> 628 bytes
-rw-r--r--security/nss/tests/libpkix/certs/TestUser50.certbin0 -> 615 bytes
-rw-r--r--security/nss/tests/libpkix/certs/TestUser51.certbin0 -> 615 bytes
-rw-r--r--security/nss/tests/libpkix/certs/TrustAnchorRootCertificate.crtbin0 -> 572 bytes
-rw-r--r--security/nss/tests/libpkix/certs/ValidCertificatePathTest1EE.crtbin0 -> 622 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/anchor2dsabin0 -> 906 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/crldiff.crlbin0 -> 237 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/crlgood.crlbin0 -> 237 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/extKeyUsage/codeSigningEKUCertbin0 -> 696 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/extKeyUsage/multiEKUCertbin0 -> 716 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/extKeyUsage/noEKUCertbin0 -> 742 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameDnCertbin0 -> 748 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameDnCert_diffbin0 -> 747 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameDnsCertbin0 -> 700 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameDnsCert_diffbin0 -> 700 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameEdiCertbin0 -> 702 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameEdiCert_diffbin0 -> 700 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameIpCertbin0 -> 692 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameIpCert_diffbin0 -> 692 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameNoneCertbin0 -> 742 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameOidCertbin0 -> 691 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameOidCert_diffbin0 -> 694 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameOtherCertbin0 -> 698 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameOtherCert_diffbin0 -> 698 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameRfc822Certbin0 -> 740 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameRfc822Cert_diffbin0 -> 703 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameRfc822DnsCertbin0 -> 718 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameUriCertbin0 -> 706 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameUriCert_diffbin0 -> 708 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameX400Certbin0 -> 691 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/generalName/altNameX400Cert_diffbin0 -> 691 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/hanfeiyu2hanfeiyubin0 -> 669 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/hy2hc-bcbin0 -> 668 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/hy2hy-bc0bin0 -> 685 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/issuer-hanfei.crlbin0 -> 199 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/issuer-none.crlbin0 -> 196 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/keyIdentifier/authKeyIDCertbin0 -> 536 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/keyIdentifier/subjKeyIDCertbin0 -> 906 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/keyUsage/decipherOnlyCertbin0 -> 692 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/keyUsage/encipherOnlyCertbin0 -> 692 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/keyUsage/multiKeyUsagesCertbin0 -> 742 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/keyUsage/noKeyUsagesCertbin0 -> 675 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/make-ca-u50-u5137
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/make-nc508
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/noExtensionsCertbin0 -> 680 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/nss2alicebin0 -> 602 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/publicKey/dsaWithParamsbin0 -> 906 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/publicKey/dsaWithoutParamsbin0 -> 536 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/publicKey/labs2yassirbin0 -> 676 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/publicKey/yassir2labsbin0 -> 676 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/sun2sunbin0 -> 666 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/yassir2bcnbin0 -> 742 bytes
-rwxr-xr-xsecurity/nss/tests/libpkix/certs/yassir2yassirbin0 -> 760 bytes
106 files changed, 545 insertions, 0 deletions
diff --git a/security/nss/tests/libpkix/certs/BrAirWaysBadSig.cert b/security/nss/tests/libpkix/certs/BrAirWaysBadSig.cert
new file mode 100644
index 000000000..30d2f18c3
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/BrAirWaysBadSig.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/CertificatePoliciesCritical.crt b/security/nss/tests/libpkix/certs/CertificatePoliciesCritical.crt
new file mode 100755
index 000000000..efc2f2cd5
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/CertificatePoliciesCritical.crt
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/GoodCACert.crt b/security/nss/tests/libpkix/certs/GoodCACert.crt
new file mode 100644
index 000000000..5aecbc0cf
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/GoodCACert.crt
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.ca.cert b/security/nss/tests/libpkix/certs/NameConstraints.ca.cert
new file mode 100644
index 000000000..6d2e8469d
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.ca.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.dcissallowed.cert b/security/nss/tests/libpkix/certs/NameConstraints.dcissallowed.cert
new file mode 100644
index 000000000..539adcfee
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.dcissallowed.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.dcissblocked.cert b/security/nss/tests/libpkix/certs/NameConstraints.dcissblocked.cert
new file mode 100644
index 000000000..28f84919d
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.dcissblocked.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.dcisscopy.cert b/security/nss/tests/libpkix/certs/NameConstraints.dcisscopy.cert
new file mode 100644
index 000000000..a3fbd91f3
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.dcisscopy.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.intermediate.cert b/security/nss/tests/libpkix/certs/NameConstraints.intermediate.cert
new file mode 100644
index 000000000..a310aa1ac
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.intermediate.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.intermediate2.cert b/security/nss/tests/libpkix/certs/NameConstraints.intermediate2.cert
new file mode 100644
index 000000000..fc4b7c1c1
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.intermediate2.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.intermediate3.cert b/security/nss/tests/libpkix/certs/NameConstraints.intermediate3.cert
new file mode 100644
index 000000000..051e55e56
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.intermediate3.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.intermediate4.cert b/security/nss/tests/libpkix/certs/NameConstraints.intermediate4.cert
new file mode 100644
index 000000000..6e7efd53e
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.intermediate4.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.intermediate5.cert b/security/nss/tests/libpkix/certs/NameConstraints.intermediate5.cert
new file mode 100644
index 000000000..823eccc05
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.intermediate5.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.intermediate6.cert b/security/nss/tests/libpkix/certs/NameConstraints.intermediate6.cert
new file mode 100644
index 000000000..a2f17054e
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.intermediate6.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.ncca.cert b/security/nss/tests/libpkix/certs/NameConstraints.ncca.cert
new file mode 100644
index 000000000..ecb24c7d5
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.ncca.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server1.cert b/security/nss/tests/libpkix/certs/NameConstraints.server1.cert
new file mode 100644
index 000000000..60e8a1c69
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server1.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server10.cert b/security/nss/tests/libpkix/certs/NameConstraints.server10.cert
new file mode 100644
index 000000000..21d9e8767
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server10.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server11.cert b/security/nss/tests/libpkix/certs/NameConstraints.server11.cert
new file mode 100644
index 000000000..c458c8ce7
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server11.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server12.cert b/security/nss/tests/libpkix/certs/NameConstraints.server12.cert
new file mode 100644
index 000000000..1a4e6fec2
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server12.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server13.cert b/security/nss/tests/libpkix/certs/NameConstraints.server13.cert
new file mode 100644
index 000000000..8b7295fb2
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server13.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server14.cert b/security/nss/tests/libpkix/certs/NameConstraints.server14.cert
new file mode 100644
index 000000000..8a989f996
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server14.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server15.cert b/security/nss/tests/libpkix/certs/NameConstraints.server15.cert
new file mode 100644
index 000000000..69d057c9a
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server15.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server16.cert b/security/nss/tests/libpkix/certs/NameConstraints.server16.cert
new file mode 100644
index 000000000..0b24d7abb
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server16.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server17.cert b/security/nss/tests/libpkix/certs/NameConstraints.server17.cert
new file mode 100644
index 000000000..2fc9437cd
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server17.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server2.cert b/security/nss/tests/libpkix/certs/NameConstraints.server2.cert
new file mode 100644
index 000000000..1c6e5510d
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server2.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server3.cert b/security/nss/tests/libpkix/certs/NameConstraints.server3.cert
new file mode 100644
index 000000000..bd93572dd
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server3.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server4.cert b/security/nss/tests/libpkix/certs/NameConstraints.server4.cert
new file mode 100644
index 000000000..ca9d1b1c3
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server4.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server5.cert b/security/nss/tests/libpkix/certs/NameConstraints.server5.cert
new file mode 100644
index 000000000..1798de766
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server5.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server6.cert b/security/nss/tests/libpkix/certs/NameConstraints.server6.cert
new file mode 100644
index 000000000..5698f8ebd
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server6.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server7.cert b/security/nss/tests/libpkix/certs/NameConstraints.server7.cert
new file mode 100644
index 000000000..3cf85d047
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server7.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server8.cert b/security/nss/tests/libpkix/certs/NameConstraints.server8.cert
new file mode 100644
index 000000000..f0694ed03
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server8.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/NameConstraints.server9.cert b/security/nss/tests/libpkix/certs/NameConstraints.server9.cert
new file mode 100644
index 000000000..517c0ae31
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/NameConstraints.server9.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPCA1.cert b/security/nss/tests/libpkix/certs/OCSPCA1.cert
new file mode 100644
index 000000000..cac92b790
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPCA1.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPCA1.p12 b/security/nss/tests/libpkix/certs/OCSPCA1.p12
new file mode 100644
index 000000000..82cc31034
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPCA1.p12
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPCA2.cert b/security/nss/tests/libpkix/certs/OCSPCA2.cert
new file mode 100644
index 000000000..3dd31100f
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPCA2.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPCA2.p12 b/security/nss/tests/libpkix/certs/OCSPCA2.p12
new file mode 100644
index 000000000..1c03d0d7e
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPCA2.p12
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPCA3.cert b/security/nss/tests/libpkix/certs/OCSPCA3.cert
new file mode 100644
index 000000000..7d0645830
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPCA3.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPCA3.p12 b/security/nss/tests/libpkix/certs/OCSPCA3.p12
new file mode 100644
index 000000000..610eb50a1
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPCA3.p12
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPEE11.cert b/security/nss/tests/libpkix/certs/OCSPEE11.cert
new file mode 100644
index 000000000..093756d3d
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPEE11.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPEE12.cert b/security/nss/tests/libpkix/certs/OCSPEE12.cert
new file mode 100644
index 000000000..14cd5b9ce
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPEE12.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPEE13.cert b/security/nss/tests/libpkix/certs/OCSPEE13.cert
new file mode 100644
index 000000000..058b59d80
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPEE13.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPEE14.cert b/security/nss/tests/libpkix/certs/OCSPEE14.cert
new file mode 100644
index 000000000..4f937b9e9
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPEE14.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPEE15.cert b/security/nss/tests/libpkix/certs/OCSPEE15.cert
new file mode 100644
index 000000000..fbb2000dd
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPEE15.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPEE21.cert b/security/nss/tests/libpkix/certs/OCSPEE21.cert
new file mode 100644
index 000000000..a3f1305fd
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPEE21.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPEE22.cert b/security/nss/tests/libpkix/certs/OCSPEE22.cert
new file mode 100644
index 000000000..198f2068d
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPEE22.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPEE23.cert b/security/nss/tests/libpkix/certs/OCSPEE23.cert
new file mode 100644
index 000000000..32b3a631d
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPEE23.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPEE31.cert b/security/nss/tests/libpkix/certs/OCSPEE31.cert
new file mode 100644
index 000000000..3df0f62cb
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPEE31.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPEE32.cert b/security/nss/tests/libpkix/certs/OCSPEE32.cert
new file mode 100644
index 000000000..9bf5354ab
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPEE32.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPEE33.cert b/security/nss/tests/libpkix/certs/OCSPEE33.cert
new file mode 100644
index 000000000..4a3c10228
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPEE33.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPRoot.cert b/security/nss/tests/libpkix/certs/OCSPRoot.cert
new file mode 100644
index 000000000..8abc6bc87
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPRoot.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/OCSPRoot.p12 b/security/nss/tests/libpkix/certs/OCSPRoot.p12
new file mode 100644
index 000000000..166baf3f4
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/OCSPRoot.p12
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/PayPalEE.cert b/security/nss/tests/libpkix/certs/PayPalEE.cert
new file mode 100644
index 000000000..d71fbb501
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/PayPalEE.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/PayPalICA.cert b/security/nss/tests/libpkix/certs/PayPalICA.cert
new file mode 100644
index 000000000..07e025def
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/PayPalICA.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/PayPalRootCA.cert b/security/nss/tests/libpkix/certs/PayPalRootCA.cert
new file mode 100644
index 000000000..dae019650
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/PayPalRootCA.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/TestCA.ca.cert b/security/nss/tests/libpkix/certs/TestCA.ca.cert
new file mode 100644
index 000000000..929b793d3
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/TestCA.ca.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/TestUser50.cert b/security/nss/tests/libpkix/certs/TestUser50.cert
new file mode 100644
index 000000000..ed71727fa
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/TestUser50.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/TestUser51.cert b/security/nss/tests/libpkix/certs/TestUser51.cert
new file mode 100644
index 000000000..1b45db286
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/TestUser51.cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/TrustAnchorRootCertificate.crt b/security/nss/tests/libpkix/certs/TrustAnchorRootCertificate.crt
new file mode 100644
index 000000000..21f520ee5
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/TrustAnchorRootCertificate.crt
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/ValidCertificatePathTest1EE.crt b/security/nss/tests/libpkix/certs/ValidCertificatePathTest1EE.crt
new file mode 100644
index 000000000..26985c9f6
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/ValidCertificatePathTest1EE.crt
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/anchor2dsa b/security/nss/tests/libpkix/certs/anchor2dsa
new file mode 100755
index 000000000..a1f9e05f6
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/anchor2dsa
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/crldiff.crl b/security/nss/tests/libpkix/certs/crldiff.crl
new file mode 100755
index 000000000..d076ef89f
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/crldiff.crl
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/crlgood.crl b/security/nss/tests/libpkix/certs/crlgood.crl
new file mode 100755
index 000000000..1ad019ed1
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/crlgood.crl
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/extKeyUsage/codeSigningEKUCert b/security/nss/tests/libpkix/certs/extKeyUsage/codeSigningEKUCert
new file mode 100755
index 000000000..a1afd6a2d
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/extKeyUsage/codeSigningEKUCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/extKeyUsage/multiEKUCert b/security/nss/tests/libpkix/certs/extKeyUsage/multiEKUCert
new file mode 100755
index 000000000..55568917c
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/extKeyUsage/multiEKUCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/extKeyUsage/noEKUCert b/security/nss/tests/libpkix/certs/extKeyUsage/noEKUCert
new file mode 100755
index 000000000..f9c83dc95
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/extKeyUsage/noEKUCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameDnCert b/security/nss/tests/libpkix/certs/generalName/altNameDnCert
new file mode 100755
index 000000000..43dac7341
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameDnCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameDnCert_diff b/security/nss/tests/libpkix/certs/generalName/altNameDnCert_diff
new file mode 100755
index 000000000..04d133f74
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameDnCert_diff
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameDnsCert b/security/nss/tests/libpkix/certs/generalName/altNameDnsCert
new file mode 100755
index 000000000..63754141a
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameDnsCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameDnsCert_diff b/security/nss/tests/libpkix/certs/generalName/altNameDnsCert_diff
new file mode 100755
index 000000000..4fe947e73
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameDnsCert_diff
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameEdiCert b/security/nss/tests/libpkix/certs/generalName/altNameEdiCert
new file mode 100755
index 000000000..95ec20423
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameEdiCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameEdiCert_diff b/security/nss/tests/libpkix/certs/generalName/altNameEdiCert_diff
new file mode 100755
index 000000000..50e5440d9
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameEdiCert_diff
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameIpCert b/security/nss/tests/libpkix/certs/generalName/altNameIpCert
new file mode 100755
index 000000000..5f0e528a1
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameIpCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameIpCert_diff b/security/nss/tests/libpkix/certs/generalName/altNameIpCert_diff
new file mode 100755
index 000000000..2407be54f
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameIpCert_diff
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameNoneCert b/security/nss/tests/libpkix/certs/generalName/altNameNoneCert
new file mode 100755
index 000000000..f9c83dc95
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameNoneCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameOidCert b/security/nss/tests/libpkix/certs/generalName/altNameOidCert
new file mode 100755
index 000000000..fa92c9ecd
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameOidCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameOidCert_diff b/security/nss/tests/libpkix/certs/generalName/altNameOidCert_diff
new file mode 100755
index 000000000..635e4d143
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameOidCert_diff
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameOtherCert b/security/nss/tests/libpkix/certs/generalName/altNameOtherCert
new file mode 100755
index 000000000..bdfc7cb6a
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameOtherCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameOtherCert_diff b/security/nss/tests/libpkix/certs/generalName/altNameOtherCert_diff
new file mode 100755
index 000000000..bfc8a7973
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameOtherCert_diff
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameRfc822Cert b/security/nss/tests/libpkix/certs/generalName/altNameRfc822Cert
new file mode 100755
index 000000000..9ad3271ab
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameRfc822Cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameRfc822Cert_diff b/security/nss/tests/libpkix/certs/generalName/altNameRfc822Cert_diff
new file mode 100755
index 000000000..b8e5b2e70
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameRfc822Cert_diff
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameRfc822DnsCert b/security/nss/tests/libpkix/certs/generalName/altNameRfc822DnsCert
new file mode 100755
index 000000000..89be1811d
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameRfc822DnsCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameUriCert b/security/nss/tests/libpkix/certs/generalName/altNameUriCert
new file mode 100755
index 000000000..1f46e79f0
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameUriCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameUriCert_diff b/security/nss/tests/libpkix/certs/generalName/altNameUriCert_diff
new file mode 100755
index 000000000..864e86fb5
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameUriCert_diff
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameX400Cert b/security/nss/tests/libpkix/certs/generalName/altNameX400Cert
new file mode 100755
index 000000000..b0d10cf32
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameX400Cert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/generalName/altNameX400Cert_diff b/security/nss/tests/libpkix/certs/generalName/altNameX400Cert_diff
new file mode 100755
index 000000000..652388847
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/generalName/altNameX400Cert_diff
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/hanfeiyu2hanfeiyu b/security/nss/tests/libpkix/certs/hanfeiyu2hanfeiyu
new file mode 100755
index 000000000..3f3452683
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/hanfeiyu2hanfeiyu
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/hy2hc-bc b/security/nss/tests/libpkix/certs/hy2hc-bc
new file mode 100755
index 000000000..691b8d982
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/hy2hc-bc
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/hy2hy-bc0 b/security/nss/tests/libpkix/certs/hy2hy-bc0
new file mode 100755
index 000000000..18b5fe4a8
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/hy2hy-bc0
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/issuer-hanfei.crl b/security/nss/tests/libpkix/certs/issuer-hanfei.crl
new file mode 100755
index 000000000..6c9f0dbaa
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/issuer-hanfei.crl
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/issuer-none.crl b/security/nss/tests/libpkix/certs/issuer-none.crl
new file mode 100755
index 000000000..c1c83ba2c
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/issuer-none.crl
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/keyIdentifier/authKeyIDCert b/security/nss/tests/libpkix/certs/keyIdentifier/authKeyIDCert
new file mode 100755
index 000000000..7eae4863e
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/keyIdentifier/authKeyIDCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/keyIdentifier/subjKeyIDCert b/security/nss/tests/libpkix/certs/keyIdentifier/subjKeyIDCert
new file mode 100755
index 000000000..a1f9e05f6
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/keyIdentifier/subjKeyIDCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/keyUsage/decipherOnlyCert b/security/nss/tests/libpkix/certs/keyUsage/decipherOnlyCert
new file mode 100755
index 000000000..11a132d10
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/keyUsage/decipherOnlyCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/keyUsage/encipherOnlyCert b/security/nss/tests/libpkix/certs/keyUsage/encipherOnlyCert
new file mode 100755
index 000000000..9b9377119
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/keyUsage/encipherOnlyCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/keyUsage/multiKeyUsagesCert b/security/nss/tests/libpkix/certs/keyUsage/multiKeyUsagesCert
new file mode 100755
index 000000000..f9c83dc95
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/keyUsage/multiKeyUsagesCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/keyUsage/noKeyUsagesCert b/security/nss/tests/libpkix/certs/keyUsage/noKeyUsagesCert
new file mode 100755
index 000000000..c58d9a2aa
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/keyUsage/noKeyUsagesCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/make-ca-u50-u51 b/security/nss/tests/libpkix/certs/make-ca-u50-u51
new file mode 100755
index 000000000..5d8f920a9
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/make-ca-u50-u51
@@ -0,0 +1,37 @@
+#!/bin/sh
+#
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+mkdir tmp
+cd tmp
+dd if=/dev/urandom bs=512 count=1 of=noise
+echo "" > pwfile
+
+certutil -d . -N -f pwfile
+
+certutil -S -z noise -g 1024 -d . -n ca -s "CN=NSS Test CA,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t C,C,C -x -m 1 -w -1 -v 600 -1 -2 -5 <<CERTSCRIPT
+5
+6
+9
+n
+y
+
+n
+5
+6
+7
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n u50 -s "CN=TestUser50,E=TestUser50@bogus.com,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t ,, -c ca -m 50 -v 598
+
+certutil -S -z noise -g 1024 -d . -n u51 -s "CN=TestUser51,E=TestUser51@bogus.com,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t ,, -c ca -m 51 -v 598
+
+certutil -d . -L -n ca -r > TestCA.ca.cert
+certutil -d . -L -n u50 -r > TestUser50.cert
+certutil -d . -L -n u51 -r > TestUser51.cert
+
+echo "Created multiple files in subdirectory tmp: TestCA.ca.cert TestUser50.cert TestUser51.cert"
diff --git a/security/nss/tests/libpkix/certs/make-nc b/security/nss/tests/libpkix/certs/make-nc
new file mode 100755
index 000000000..aaab1edfa
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/make-nc
@@ -0,0 +1,508 @@
+#!/bin/sh
+#
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+mkdir tmp
+cd tmp
+dd if=/dev/urandom bs=512 count=1 of=noise
+echo "" > pwfile
+
+certutil -d . -N -f pwfile
+
+certutil -S -z noise -g 1024 -d . -n ca -s "CN=NSS Test CA,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t C,C,C -x -m 1 -w -2 -v 120 -1 -2 -5 <<CERTSCRIPT
+5
+6
+9
+n
+y
+
+n
+5
+6
+7
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n ica -s "CN=NSS Intermediate CA,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t ,, -c ca -m 20 -w -1 -v 118 -1 -2 -5 --extNC <<CERTSCRIPT
+5
+6
+9
+n
+y
+
+n
+3
+.example
+1
+n
+n
+5
+6
+7
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server1 -s "CN=test.invalid,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t ,, -c ica -m 40 -v 115 -1 -2 -5 -8 test.invalid <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server2 -s "CN=another_test.invalid,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t ,, -c ica -m 41 -v 115 -1 -2 -5 <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server3 -s "CN=test.example,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t ,, -c ica -m 42 -v 115 -1 -2 -5 -8 test.example <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n ica2 -s "CN=NSS Intermediate CA 2,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t ,, -c ica -m 21 -w -2 -v 120 -1 -2 -5 <<CERTSCRIPT
+5
+6
+9
+n
+y
+
+n
+5
+6
+7
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server4 -s "CN=test2.invalid,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t ,, -c ica2 -m 50 -v 115 -1 -2 -5 -8 test.invalid <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server5 -s "CN=another_test2.invalid,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t ,, -c ica2 -m 51 -v 115 -1 -2 -5 <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+
+certutil -S -z noise -g 1024 -d . -n server6 -s "CN=test2.example,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t ,, -c ica2 -m 52 -v 115 -1 -2 -5 -8 test.example <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n ica3 -s "CN=NSS Intermediate CA3,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t ,, -c ca -m 21 -w -1 -v 118 -1 -2 -5 --extNC <<CERTSCRIPT
+5
+6
+9
+n
+y
+
+n
+3
+foo.example
+1
+y
+5
+O=Foo,st=ca,c=us
+1
+n
+n
+5
+6
+7
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n ica4 -s "CN=NSS Intermediate CA 2,O=Foo,ST=CA,C=US" -t ,, -c ica3 -m 61 -w -2 -v 120 -1 -2 -5 <<CERTSCRIPT
+5
+6
+9
+n
+y
+
+n
+5
+6
+7
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server7 -s "CN=bat.foo.example,ou=bar,O=Foo,ST=CA,C=US" -t ,, -c ica4 -m 41 -v 115 -1 -2 -5 <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server8 -s "CN=bat.foo.example,O=Foo,ST=CA,C=US" -t ,, -c ica4 -m 42 -v 115 -1 -2 -5 <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server9 -s "CN=bat.foo.example,O=Foo,C=US" -t ,, -c ica4 -m 43 -v 115 -1 -2 -5 <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server10 -s "CN=bar.example,O=Foo,ST=CA,C=US" -t ,, -c ica4 -m 44 -v 115 -1 -2 -5 <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server11 -s "CN=site.example,O=Foo,ST=CA,C=US" -t ,, -c ica4 -m 45 -v 115 -1 -2 -5 -8 foo.example <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server12 -s "CN=Honest Achmed,O=Foo,ST=CA,C=US" -t ,, -c ica4 -m 46 -v 115 -1 -2 -5 <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n ica5 -s "CN=NSS Intermediate CA 2,O=OtherOrg,ST=CA,C=US" -t ,, -c ica3 -m 62 -w -2 -v 120 -1 -2 -5 <<CERTSCRIPT
+5
+6
+9
+n
+y
+
+n
+5
+6
+7
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server13 -s "CN=bat.foo.example,O=OtherOrg,ST=CA,C=US" -t ,, -c ica5 -m 41 -v 115 -1 -2 -5 <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server14 -s "CN=another.foo.example,O=Foo,ST=CA,C=US" -t ,, -c ica5 -m 490 -v 115 -1 -2 -5 <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n ncca -s "CN=NSS Name Constrained Root CA,O=BOGUS NSS,L=Mountain View,ST=CA,C=US" -t C,C,C -x -m 2 -w -1 -v 118 -1 -2 -5 --extNC <<CERTSCRIPT
+5
+6
+9
+n
+y
+
+n
+3
+.example
+1
+n
+n
+5
+6
+7
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n ica6 -s "CN=NSS Intermediate CA6,O=OtherOrg,ST=CA,C=US" -t ,, -c ncca -m 63 -w -2 -v 120 -1 -2 -5 <<CERTSCRIPT
+5
+6
+9
+n
+y
+
+n
+5
+6
+7
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server15 -s "CN=testfoo.invalid,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t ,, -c ica6 -m 64 -v 115 -1 -2 -5 -8 testfoo.invalid <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server16 -s "CN=another_test3.invalid,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t ,, -c ica6 -m 65 -v 115 -1 -2 -5 <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+certutil -S -z noise -g 1024 -d . -n server17 -s "CN=test4.example,O=BOGUS NSS,L=Mountain View,ST=California,C=US" -t ,, -c ica6 -m 66 -v 115 -1 -2 -5 -8 test4.example <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+#DCISS copy certs
+certutil -S -z noise -g 2048 -d . -n dcisscopy -s "E=igca@sgdn.pm.gouv.fr,CN=IGC/A,OU=DCSSI,O=PM/SGDN,L=Paris,ST=France,C=FR" -t C,C,C -x -m 998899 -w -2 -v 120 -1 -2 -5 <<CERTSCRIPT
+5
+6
+9
+n
+y
+
+n
+5
+6
+7
+9
+n
+CERTSCRIPT
+
+#the following cert MUST not pass
+certutil -S -z noise -g 2048 -d . -n dcissblocked -s "CN=foo.example.com,O=Foo,ST=CA,C=US" -t ,, -c dcisscopy -m 998900 -v 120 -1 -2 -5 <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+#the following cert MUST pass
+certutil -S -z noise -g 2048 -d . -n dcissallowed -s "CN=foo.example.fr,O=Foo,ST=CA,C=US" -t ,, -c dcisscopy -m 998901 -v 120 -1 -2 -5 <<CERTSCRIPT
+0
+2
+3
+4
+9
+n
+n
+
+y
+0
+1
+9
+n
+CERTSCRIPT
+
+
+
+certutil -d . -L -n ca -r > NameConstraints.ca.cert
+certutil -d . -L -n ica -r > NameConstraints.intermediate.cert
+certutil -d . -L -n server1 -r > NameConstraints.server1.cert
+certutil -d . -L -n server2 -r > NameConstraints.server2.cert
+certutil -d . -L -n server3 -r > NameConstraints.server3.cert
+certutil -d . -L -n ica2 -r > NameConstraints.intermediate2.cert
+certutil -d . -L -n server4 -r > NameConstraints.server4.cert
+certutil -d . -L -n server5 -r > NameConstraints.server5.cert
+certutil -d . -L -n server6 -r > NameConstraints.server6.cert
+certutil -d . -L -n ica3 -r > NameConstraints.intermediate3.cert
+certutil -d . -L -n ica4 -r > NameConstraints.intermediate4.cert
+certutil -d . -L -n server7 -r > NameConstraints.server7.cert
+certutil -d . -L -n server8 -r > NameConstraints.server8.cert
+certutil -d . -L -n server9 -r > NameConstraints.server9.cert
+certutil -d . -L -n server10 -r > NameConstraints.server10.cert
+certutil -d . -L -n server11 -r > NameConstraints.server11.cert
+certutil -d . -L -n server11 -r > NameConstraints.server11.cert
+certutil -d . -L -n server12 -r > NameConstraints.server12.cert
+certutil -d . -L -n ica5 -r > NameConstraints.intermediate5.cert
+certutil -d . -L -n server13 -r > NameConstraints.server13.cert
+certutil -d . -L -n server14 -r > NameConstraints.server14.cert
+certutil -d . -L -n ncca -r > NameConstraints.ncca.cert
+certutil -d . -L -n ica6 -r > NameConstraints.intermediate6.cert
+certutil -d . -L -n server15 -r > NameConstraints.server15.cert
+certutil -d . -L -n server16 -r > NameConstraints.server16.cert
+certutil -d . -L -n server17 -r > NameConstraints.server17.cert
+certutil -d . -L -n dcisscopy -r > NameConstraints.dcisscopy.cert
+certutil -d . -L -n dcissblocked -r > NameConstraints.dcissblocked.cert
+certutil -d . -L -n dcissallowed -r > NameConstraints.dcissallowed.cert
+
+echo "Created multiple files in subdirectory tmp: NameConstraints.ca.cert NameConstraints.intermediate.cert NameConstraints.server1.cert NameConstraints.server2.cert NameConstraints.server3.cert NameConstraints.intermediate2.cert NameConstraints.server4.cert NameConstraints.server5.cert NameConstraints.server6.cert"
diff --git a/security/nss/tests/libpkix/certs/noExtensionsCert b/security/nss/tests/libpkix/certs/noExtensionsCert
new file mode 100755
index 000000000..f3dc1c973
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/noExtensionsCert
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/nss2alice b/security/nss/tests/libpkix/certs/nss2alice
new file mode 100755
index 000000000..48172a5ed
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/nss2alice
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/publicKey/dsaWithParams b/security/nss/tests/libpkix/certs/publicKey/dsaWithParams
new file mode 100755
index 000000000..a1f9e05f6
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/publicKey/dsaWithParams
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/publicKey/dsaWithoutParams b/security/nss/tests/libpkix/certs/publicKey/dsaWithoutParams
new file mode 100755
index 000000000..7eae4863e
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/publicKey/dsaWithoutParams
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/publicKey/labs2yassir b/security/nss/tests/libpkix/certs/publicKey/labs2yassir
new file mode 100755
index 000000000..f5fe26115
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/publicKey/labs2yassir
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/publicKey/yassir2labs b/security/nss/tests/libpkix/certs/publicKey/yassir2labs
new file mode 100755
index 000000000..f94385403
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/publicKey/yassir2labs
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/sun2sun b/security/nss/tests/libpkix/certs/sun2sun
new file mode 100755
index 000000000..c75192be1
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/sun2sun
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/yassir2bcn b/security/nss/tests/libpkix/certs/yassir2bcn
new file mode 100755
index 000000000..f9c83dc95
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/yassir2bcn
Binary files differ
diff --git a/security/nss/tests/libpkix/certs/yassir2yassir b/security/nss/tests/libpkix/certs/yassir2yassir
new file mode 100755
index 000000000..8444af5a3
--- /dev/null
+++ b/security/nss/tests/libpkix/certs/yassir2yassir
Binary files differ