From 3c8c09b8989d140220e7376073e2cd6420487068 Mon Sep 17 00:00:00 2001
From: Colton Willey <colton@wolfssl.com>
Date: Tue, 24 Sep 2024 12:54:33 -0700
Subject: [PATCH] Extend renew script to regenerate expected values based on
 new certs

---
 certs/ca-cert.der               | Bin 1283 -> 1283 bytes
 certs/ca-cert.pem               |  56 ++++++++--------
 certs/ca-ecc-cert.pem           |  22 +++----
 certs/crl-chain.pem             | 108 +++++++++++++++---------------
 certs/crl.der                   | Bin 520 -> 520 bytes
 certs/crl.der.enc               | Bin 528 -> 528 bytes
 certs/crl.der.enc.base64        |  16 ++---
 certs/crl.pem                   |  52 +++++++--------
 certs/renew.sh                  |  30 +++++++++
 certs/server-cert.pem           | 112 ++++++++++++++++----------------
 certs/server-ecc.pem            |  40 ++++++------
 certs/server-keyPub.pem         |   4 +-
 certs/server-revoked-cert.pem   | 112 ++++++++++++++++----------------
 certs/test-servercert.p12       | Bin 5517 -> 5517 bytes
 tests/dgst/sha256-ecc.sig       | Bin 71 -> 72 bytes
 tests/encrypt/enc-test.sh       |   6 +-
 tests/hash/hash-test.sh         |  22 +++----
 tests/x509/x509-process-test.sh |  28 ++++----
 18 files changed, 316 insertions(+), 292 deletions(-)

diff --git a/certs/ca-cert.der b/certs/ca-cert.der
index dbe39d2a415551d6fc37144c82feec7fbf29ed95..bdb2f87601d53b51c3921ce6fd995f6d132e6d8c 100644
GIT binary patch
delta 358
zcmZqXYUWZlXkz(q(8T<F0W%XL6O)Lsi`0r7#y8&*J{1IV`CJtFwdbYFMCH{|#)d|Q
z#zsblmPQs);=D#?29^dE5bnkoE3j*uyo5QvUiZ&Wqo{q?<~nt^`K2oz4$wU<qAok-
z^VtrkTaGf8D(TB7`KrGPYm(eAxXF1*Z*2P}^^~-x#`{P9Mkj4J<U3dMlcUiYy{)$_
z*rZ?7_vG0&$T5U@?zen!D?|UtUxsHF8>KFK?Jf&C=c_XJ$l~Q6Q$_UUSLhx)eQx9O
z&Js2C!=LLHxA>SaiZIuTS)J%s)vKOx#%*Je$*#$H@BcY3UVAJ*@b|7)7LW6<y-Q9q
zdlkpA<&l<K=i_yox3IlWuF8wOd-4sF|M!#w>g-$cy(EgFO-gDmtYqnT=+3gdlr6>h
siE%}viPh5$p%-nYp4!lK?d=Q=(a5@~%QKH}t$xF}-1pheMNI!p0ma3livR!s

delta 358
zcmZqXYUWZlXkz(q(8T<F0W%XL6O%~ol!A_3>`uL_*8A@}B<1npqQf(%iOQ>`3=NHp
z42+Bo%#BQ<#CeTO3@i;zA>55GR$$jQc?olT{f5HbyIi9hRGF64b#Sk&{<~rKH@B_3
zz8rs?sL;bKn)dZcNYi`ahUrS_2QPNSKGF^U_F#VIwT&^`UObr5c|t_!+P2Q#oSh3I
z{U^N>49>2d?3KyYdh_a~q!%Z*9`h6b%Jt&2Zd)Sv>mx^wrI)^)H9vSkq1=KAyg!+@
z>}iwC`(W)~|Ke@Nx97^v)@IGk-fjzKF<v;{y1RDD0!7<8n=ISL+m6+4H$;=J_WRl%
zxIOD=<BB!6+GifWyYr*S`iqkve|EaQh$T=lMDwugw|z0c&feayU)kvNwBMckN(kfD
uLtbvzRv7A~G}wD2PSpIo$~h)8?<3>R`^km2JEMM^9S~e}*kCTx)WZPw2du&X

diff --git a/certs/ca-cert.pem b/certs/ca-cert.pem
index 5c280581..33d90791 100644
--- a/certs/ca-cert.pem
+++ b/certs/ca-cert.pem
@@ -2,12 +2,12 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            7d:94:70:88:ba:07:42:8d:aa:af:4f:be:c2:1a:48:f0:d1:40:e6:42
+            33:44:1a:a8:6c:01:ec:f6:60:f2:70:51:0a:4c:d1:14:fa:bc:e9:44
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C = US, ST = Montana, L = Bozeman, O = Sawtooth, OU = Consulting, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Validity
-            Not Before: Dec 20 23:07:24 2021 GMT
-            Not After : Sep 15 23:07:24 2024 GMT
+            Not Before: Dec 13 22:19:28 2023 GMT
+            Not After : Sep  8 22:19:28 2026 GMT
         Subject: C = US, ST = Montana, L = Bozeman, O = Sawtooth, OU = Consulting, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
@@ -38,7 +38,7 @@ Certificate:
             X509v3 Authority Key Identifier: 
                 keyid:27:8E:67:11:74:C3:26:1D:3F:ED:33:63:B3:A4:D8:1D:30:E5:E8:D5
                 DirName:/C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/emailAddress=info@wolfssl.com
-                serial:7D:94:70:88:BA:07:42:8D:AA:AF:4F:BE:C2:1A:48:F0:D1:40:E6:42
+                serial:33:44:1A:A8:6C:01:EC:F6:60:F2:70:51:0A:4C:D1:14:FA:BC:E9:44
 
             X509v3 Basic Constraints: 
                 CA:TRUE
@@ -47,27 +47,27 @@ Certificate:
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         b0:71:bb:ba:45:5a:80:25:02:a4:7e:88:0b:a9:7b:fd:b0:bb:
-         f6:46:b5:ba:f4:c7:e3:61:20:8c:03:15:66:f5:e4:54:82:ef:
-         13:80:97:22:67:c1:d1:88:5d:e2:2d:57:f6:e0:9f:69:d6:b1:
-         5c:b6:e8:e0:98:89:c8:14:12:d6:b6:89:8d:6c:b9:a0:59:4f:
-         92:ee:11:53:6b:7d:93:4a:69:0a:85:d9:d5:d2:62:e8:c9:b5:
-         c6:4e:17:f5:0a:e8:f3:2d:86:61:0b:eb:c4:c4:c6:67:75:ed:
-         9a:9f:53:a0:71:1e:a0:90:0d:f9:03:b4:bc:86:19:6e:f0:3b:
-         4f:e8:ed:68:f6:e7:23:43:3b:36:83:83:4b:46:a0:9a:01:d0:
-         c7:85:bb:7d:94:a0:21:3d:7e:3c:6a:3d:81:db:41:7b:46:d8:
-         15:62:d5:8f:4d:3d:c0:db:9a:c5:81:a8:ac:da:87:99:c7:dd:
-         b9:f1:14:af:d1:93:e3:f3:42:d7:a2:04:51:21:54:29:c3:45:
-         f6:be:5c:fa:cd:db:bf:2f:79:81:42:e5:8f:47:0b:d4:54:01:
-         b5:c2:4a:46:d6:a8:31:2e:64:80:3f:48:61:91:29:f3:aa:43:
-         5c:69:6e:f1:01:b9:df:63:71:3d:b9:5a:fb:36:c0:11:a2:c3:
-         30:9d:95:c3
+         2d:fc:f9:32:5a:be:d6:9d:42:8b:86:4e:67:22:c3:50:2d:cb:
+         14:27:1d:94:f3:cd:88:42:da:41:1c:39:24:67:a7:92:4d:27:
+         ea:56:82:19:bf:11:b2:43:a4:8d:5d:87:b2:27:64:66:82:81:
+         df:c4:fd:5b:62:b0:c2:4d:9d:29:f2:41:32:cc:2e:b5:da:38:
+         06:1b:e8:7f:8c:6e:3d:80:1e:00:56:49:bf:39:e0:da:68:2f:
+         c4:fd:00:e6:d1:81:1a:d1:4a:bb:76:52:ce:4d:24:9d:c4:a3:
+         a7:f1:65:14:2f:1f:a8:2d:c6:cb:ce:b1:a7:89:74:26:27:c3:
+         f3:a3:84:4c:34:01:14:03:7d:16:3a:c8:8b:25:2e:7b:90:cc:
+         46:b1:52:34:ba:93:6e:ef:fe:43:a3:ad:c6:6f:51:fb:ba:ea:
+         38:e3:6f:d6:ee:63:62:36:ea:5e:08:b4:e2:2a:46:89:e3:ae:
+         b3:b4:06:ef:63:7a:6e:5d:dd:c9:ec:02:4f:f7:64:c0:27:07:
+         b4:6f:4a:18:72:5b:34:74:7c:d0:a9:04:8f:40:8b:6a:39:d2:
+         6b:1a:01:f2:01:a8:81:34:3a:e5:b0:55:d1:3c:95:ca:b0:82:
+         d6:ed:98:28:15:59:7e:95:a7:69:c7:b5:7b:ec:01:a7:4d:e6:
+         b9:a2:fe:35
 -----BEGIN CERTIFICATE-----
-MIIE/zCCA+egAwIBAgIUfZRwiLoHQo2qr0++whpI8NFA5kIwDQYJKoZIhvcNAQEL
+MIIE/zCCA+egAwIBAgIUM0QaqGwB7PZg8nBRCkzRFPq86UQwDQYJKoZIhvcNAQEL
 BQAwgZQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIDAdNb250YW5hMRAwDgYDVQQHDAdC
 b3plbWFuMREwDwYDVQQKDAhTYXd0b290aDETMBEGA1UECwwKQ29uc3VsdGluZzEY
 MBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdv
-bGZzc2wuY29tMB4XDTIxMTIyMDIzMDcyNFoXDTI0MDkxNTIzMDcyNFowgZQxCzAJ
+bGZzc2wuY29tMB4XDTIzMTIxMzIyMTkyOFoXDTI2MDkwODIyMTkyOFowgZQxCzAJ
 BgNVBAYTAlVTMRAwDgYDVQQIDAdNb250YW5hMRAwDgYDVQQHDAdCb3plbWFuMREw
 DwYDVQQKDAhTYXd0b290aDETMBEGA1UECwwKQ29uc3VsdGluZzEYMBYGA1UEAwwP
 d3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wuY29t
@@ -82,12 +82,12 @@ BgNVHSMEgcwwgcmAFCeOZxF0wyYdP+0zY7Ok2B0w5ejVoYGapIGXMIGUMQswCQYD
 VQQGEwJVUzEQMA4GA1UECAwHTW9udGFuYTEQMA4GA1UEBwwHQm96ZW1hbjERMA8G
 A1UECgwIU2F3dG9vdGgxEzARBgNVBAsMCkNvbnN1bHRpbmcxGDAWBgNVBAMMD3d3
 dy53b2xmc3NsLmNvbTEfMB0GCSqGSIb3DQEJARYQaW5mb0B3b2xmc3NsLmNvbYIU
-fZRwiLoHQo2qr0++whpI8NFA5kIwDAYDVR0TBAUwAwEB/zAcBgNVHREEFTATggtl
+M0QaqGwB7PZg8nBRCkzRFPq86UQwDAYDVR0TBAUwAwEB/zAcBgNVHREEFTATggtl
 eGFtcGxlLmNvbYcEfwAAATAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
-DQYJKoZIhvcNAQELBQADggEBALBxu7pFWoAlAqR+iAupe/2wu/ZGtbr0x+NhIIwD
-FWb15FSC7xOAlyJnwdGIXeItV/bgn2nWsVy26OCYicgUEta2iY1suaBZT5LuEVNr
-fZNKaQqF2dXSYujJtcZOF/UK6PMthmEL68TExmd17ZqfU6BxHqCQDfkDtLyGGW7w
-O0/o7Wj25yNDOzaDg0tGoJoB0MeFu32UoCE9fjxqPYHbQXtG2BVi1Y9NPcDbmsWB
-qKzah5nH3bnxFK/Rk+PzQteiBFEhVCnDRfa+XPrN278veYFC5Y9HC9RUAbXCSkbW
-qDEuZIA/SGGRKfOqQ1xpbvEBud9jcT25Wvs2wBGiwzCdlcM=
+DQYJKoZIhvcNAQELBQADggEBAC38+TJavtadQouGTmciw1AtyxQnHZTzzYhC2kEc
+OSRnp5JNJ+pWghm/EbJDpI1dh7InZGaCgd/E/VtisMJNnSnyQTLMLrXaOAYb6H+M
+bj2AHgBWSb854NpoL8T9AObRgRrRSrt2Us5NJJ3Eo6fxZRQvH6gtxsvOsaeJdCYn
+w/OjhEw0ARQDfRY6yIslLnuQzEaxUjS6k27v/kOjrcZvUfu66jjjb9buY2I26l4I
+tOIqRonjrrO0Bu9jem5d3cnsAk/3ZMAnB7RvShhyWzR0fNCpBI9Ai2o50msaAfIB
+qIE0OuWwVdE8lcqwgtbtmCgVWX6Vp2nHtXvsAadN5rmi/jU=
 -----END CERTIFICATE-----
diff --git a/certs/ca-ecc-cert.pem b/certs/ca-ecc-cert.pem
index 326d0396..d088d30a 100644
--- a/certs/ca-ecc-cert.pem
+++ b/certs/ca-ecc-cert.pem
@@ -2,12 +2,12 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            2f:c0:2c:fe:1f:6a:5a:0b:dd:f6:08:63:99:42:7e:19:92:fa:dc:32
+            0f:17:46:70:fd:c2:70:d1:f9:42:49:9c:1a:c3:5d:dd:30:c8:5f:85
         Signature Algorithm: ecdsa-with-SHA256
         Issuer: C = US, ST = Washington, L = Seattle, O = wolfSSL, OU = Development, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Validity
-            Not Before: Dec 20 23:07:24 2021 GMT
-            Not After : Sep 15 23:07:24 2024 GMT
+            Not Before: Dec 13 22:19:28 2023 GMT
+            Not After : Sep  8 22:19:28 2026 GMT
         Subject: C = US, ST = Washington, L = Seattle, O = wolfSSL, OU = Development, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Subject Public Key Info:
             Public Key Algorithm: id-ecPublicKey
@@ -31,16 +31,16 @@ Certificate:
             X509v3 Key Usage: critical
                 Digital Signature, Certificate Sign, CRL Sign
     Signature Algorithm: ecdsa-with-SHA256
-         30:45:02:21:00:f2:a0:7a:0f:66:05:ec:81:a2:94:6a:31:e0:
-         0d:ee:8f:6a:ed:63:33:0e:27:31:b3:cf:c8:a0:0e:5b:88:51:
-         fa:02:20:51:0f:26:46:95:37:8e:49:4e:b0:4d:cd:b1:65:fe:
-         2d:43:ab:20:c7:83:70:44:11:13:86:a5:9b:3b:34:24:f2
+         30:45:02:21:00:c8:64:7f:ee:4b:be:83:48:13:ea:92:f8:1a:
+         82:1e:85:b1:5a:a4:1c:e3:e8:ea:25:44:6f:e7:70:fd:eb:f3:
+         76:02:20:44:02:a2:ec:c5:a1:ae:e2:a4:8a:d9:13:95:2b:a6:
+         5b:09:57:86:61:42:96:97:f0:95:62:0c:03:e6:53:04:25
 -----BEGIN CERTIFICATE-----
-MIIClTCCAjugAwIBAgIUL8As/h9qWgvd9ghjmUJ+GZL63DIwCgYIKoZIzj0EAwIw
+MIIClTCCAjugAwIBAgIUDxdGcP3CcNH5QkmcGsNd3TDIX4UwCgYIKoZIzj0EAwIw
 gZcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdT
 ZWF0dGxlMRAwDgYDVQQKDAd3b2xmU1NMMRQwEgYDVQQLDAtEZXZlbG9wbWVudDEY
 MBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdv
-bGZzc2wuY29tMB4XDTIxMTIyMDIzMDcyNFoXDTI0MDkxNTIzMDcyNFowgZcxCzAJ
+bGZzc2wuY29tMB4XDTIzMTIxMzIyMTkyOFoXDTI2MDkwODIyMTkyOFowgZcxCzAJ
 BgNVBAYTAlVTMRMwEQYDVQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxl
 MRAwDgYDVQQKDAd3b2xmU1NMMRQwEgYDVQQLDAtEZXZlbG9wbWVudDEYMBYGA1UE
 AwwPd3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wu
@@ -48,6 +48,6 @@ Y29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEAtPZbtYBjkXIuZAx5cBM456t
 KTiYuhDW6QkqgKkuFyq5ir8zg0bjlQvkd0C1O0NFMw9hU3w3RMHL/IDK6EPqp6Nj
 MGEwHQYDVR0OBBYEFFaOmsPwQt4YuUVVbvmTz+rD86UhMB8GA1UdIwQYMBaAFFaO
 msPwQt4YuUVVbvmTz+rD86UhMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQD
-AgGGMAoGCCqGSM49BAMCA0gAMEUCIQDyoHoPZgXsgaKUajHgDe6Pau1jMw4nMbPP
-yKAOW4hR+gIgUQ8mRpU3jklOsE3NsWX+LUOrIMeDcEQRE4almzs0JPI=
+AgGGMAoGCCqGSM49BAMCA0gAMEUCIQDIZH/uS76DSBPqkvgagh6FsVqkHOPo6iVE
+b+dw/evzdgIgRAKi7MWhruKkitkTlSumWwlXhmFClpfwlWIMA+ZTBCU=
 -----END CERTIFICATE-----
diff --git a/certs/crl-chain.pem b/certs/crl-chain.pem
index e783f539..eafd1daa 100644
--- a/certs/crl-chain.pem
+++ b/certs/crl-chain.pem
@@ -2,53 +2,53 @@ Certificate Revocation List (CRL):
         Version 2 (0x1)
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C = US, ST = Montana, L = Bozeman, O = Sawtooth, OU = Consulting, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
-        Last Update: Dec 20 23:07:25 2021 GMT
-        Next Update: Sep 15 23:07:25 2024 GMT
+        Last Update: Jan  9 00:34:30 2024 GMT
+        Next Update: Oct  5 00:34:30 2026 GMT
         CRL extensions:
             X509v3 CRL Number: 
                 2
 Revoked Certificates:
     Serial Number: 02
-        Revocation Date: Dec 20 23:07:25 2021 GMT
+        Revocation Date: Jan  9 00:34:30 2024 GMT
     Signature Algorithm: sha256WithRSAEncryption
-         8b:c0:b8:cb:03:5c:8c:d1:53:b2:c5:b1:4d:f3:b3:e8:13:bf:
-         5f:a7:1a:cc:74:e8:06:66:c1:cb:89:c3:e3:b3:fb:68:4e:8f:
-         d0:5b:33:d8:ed:5e:14:b3:21:c8:c0:06:66:97:6d:69:96:78:
-         bd:a9:d1:59:85:0f:13:29:2d:2f:49:87:94:84:14:94:38:74:
-         04:16:94:10:ea:f2:31:d8:34:b7:65:e8:5e:52:4f:96:ac:bf:
-         5f:4f:6c:ee:5d:04:2a:26:b2:29:7c:9d:06:82:b3:b5:e6:5b:
-         d5:11:72:56:d5:34:75:82:5e:2a:f3:c6:67:72:94:c6:02:83:
-         e8:58:85:2d:73:db:55:30:a2:c2:b1:bb:4c:bf:f6:a2:d8:b3:
-         fc:1b:bd:51:97:4e:f4:c2:04:4f:04:ee:61:e7:51:4b:4f:09:
-         fe:10:5c:3c:1e:e0:cb:51:1f:54:f4:38:3f:6c:58:ee:4e:f8:
-         ca:34:cd:37:ee:bb:06:53:14:c7:60:a4:89:ac:9a:50:4a:b5:
-         9e:b3:59:97:9b:27:5e:5c:fa:14:74:3d:a2:76:62:63:ae:e8:
-         d2:f9:b7:ad:0c:3f:07:40:50:5c:e4:fb:95:3c:3d:df:2e:81:
-         f2:6a:9e:01:69:c3:a2:1e:d7:00:2b:6d:6c:67:f0:fb:13:ce:
-         f1:a5:08:d6
+         b3:6f:ed:72:d2:73:6a:77:bf:3a:55:bc:54:18:6a:71:bc:6a:
+         cc:cd:5d:90:f5:64:8d:1b:f0:e0:48:7b:f2:7b:06:86:53:63:
+         9b:d8:24:15:10:b1:19:96:9b:d2:75:a8:25:a2:35:a9:14:d6:
+         d5:5e:53:e3:34:9d:f2:8b:07:19:9b:1f:f1:02:0f:04:46:e8:
+         b8:b6:f2:8d:c7:c0:15:3e:3e:8e:96:73:15:1e:62:f6:4e:2a:
+         f7:aa:a0:91:80:12:7f:81:0c:65:cc:38:be:58:6c:14:a5:21:
+         a1:8d:f7:8a:b9:24:f4:2d:ca:c0:67:43:0b:c8:1c:b4:7d:12:
+         7f:a2:1b:19:0e:94:cf:7b:9f:75:a0:08:9a:67:3f:87:89:3e:
+         f8:58:a5:8a:1b:2d:da:9b:d0:1b:18:92:c3:d2:6a:d7:1c:fc:
+         45:69:77:c3:57:65:75:99:9e:47:2a:20:25:ef:90:f2:5f:3b:
+         7d:9c:7d:00:ea:92:54:eb:0b:e7:17:af:24:1a:f9:7c:83:50:
+         68:1d:dc:5b:60:12:a7:52:78:d9:a9:b0:1f:59:48:36:c7:a6:
+         97:34:c7:87:3f:ae:fd:a9:56:5d:48:cc:89:7a:79:60:8f:9b:
+         2b:63:3c:b3:04:1d:5f:f7:20:d2:fd:f2:51:b1:96:93:13:5b:
+         ab:74:82:8b
 -----BEGIN X509 CRL-----
 MIICBDCB7QIBATANBgkqhkiG9w0BAQsFADCBlDELMAkGA1UEBhMCVVMxEDAOBgNV
 BAgMB01vbnRhbmExEDAOBgNVBAcMB0JvemVtYW4xETAPBgNVBAoMCFNhd3Rvb3Ro
 MRMwEQYDVQQLDApDb25zdWx0aW5nMRgwFgYDVQQDDA93d3cud29sZnNzbC5jb20x
-HzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTIxMTIyMDIzMDcyNVoX
-DTI0MDkxNTIzMDcyNVowFDASAgECFw0yMTEyMjAyMzA3MjVaoA4wDDAKBgNVHRQE
-AwIBAjANBgkqhkiG9w0BAQsFAAOCAQEAi8C4ywNcjNFTssWxTfOz6BO/X6cazHTo
-BmbBy4nD47P7aE6P0Fsz2O1eFLMhyMAGZpdtaZZ4vanRWYUPEyktL0mHlIQUlDh0
-BBaUEOryMdg0t2XoXlJPlqy/X09s7l0EKiayKXydBoKzteZb1RFyVtU0dYJeKvPG
-Z3KUxgKD6FiFLXPbVTCiwrG7TL/2otiz/Bu9UZdO9MIETwTuYedRS08J/hBcPB7g
-y1EfVPQ4P2xY7k74yjTNN+67BlMUx2CkiayaUEq1nrNZl5snXlz6FHQ9onZiY67o
-0vm3rQw/B0BQXOT7lTw93y6B8mqeAWnDoh7XACttbGfw+xPO8aUI1g==
+HzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTI0MDEwOTAwMzQzMFoX
+DTI2MTAwNTAwMzQzMFowFDASAgECFw0yNDAxMDkwMDM0MzBaoA4wDDAKBgNVHRQE
+AwIBAjANBgkqhkiG9w0BAQsFAAOCAQEAs2/tctJzane/OlW8VBhqcbxqzM1dkPVk
+jRvw4Eh78nsGhlNjm9gkFRCxGZab0nWoJaI1qRTW1V5T4zSd8osHGZsf8QIPBEbo
+uLbyjcfAFT4+jpZzFR5i9k4q96qgkYASf4EMZcw4vlhsFKUhoY33irkk9C3KwGdD
+C8gctH0Sf6IbGQ6Uz3ufdaAImmc/h4k++Filihst2pvQGxiSw9Jq1xz8RWl3w1dl
+dZmeRyogJe+Q8l87fZx9AOqSVOsL5xevJBr5fINQaB3cW2ASp1J42amwH1lINsem
+lzTHhz+u/alWXUjMiXp5YI+bK2M8swQdX/cg0v3yUbGWkxNbq3SCiw==
 -----END X509 CRL-----
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            7d:94:70:88:ba:07:42:8d:aa:af:4f:be:c2:1a:48:f0:d1:40:e6:42
+            33:44:1a:a8:6c:01:ec:f6:60:f2:70:51:0a:4c:d1:14:fa:bc:e9:44
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C = US, ST = Montana, L = Bozeman, O = Sawtooth, OU = Consulting, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Validity
-            Not Before: Dec 20 23:07:24 2021 GMT
-            Not After : Sep 15 23:07:24 2024 GMT
+            Not Before: Dec 13 22:19:28 2023 GMT
+            Not After : Sep  8 22:19:28 2026 GMT
         Subject: C = US, ST = Montana, L = Bozeman, O = Sawtooth, OU = Consulting, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
@@ -79,7 +79,7 @@ Certificate:
             X509v3 Authority Key Identifier: 
                 keyid:27:8E:67:11:74:C3:26:1D:3F:ED:33:63:B3:A4:D8:1D:30:E5:E8:D5
                 DirName:/C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/emailAddress=info@wolfssl.com
-                serial:7D:94:70:88:BA:07:42:8D:AA:AF:4F:BE:C2:1A:48:F0:D1:40:E6:42
+                serial:33:44:1A:A8:6C:01:EC:F6:60:F2:70:51:0A:4C:D1:14:FA:BC:E9:44
 
             X509v3 Basic Constraints: 
                 CA:TRUE
@@ -88,27 +88,27 @@ Certificate:
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         b0:71:bb:ba:45:5a:80:25:02:a4:7e:88:0b:a9:7b:fd:b0:bb:
-         f6:46:b5:ba:f4:c7:e3:61:20:8c:03:15:66:f5:e4:54:82:ef:
-         13:80:97:22:67:c1:d1:88:5d:e2:2d:57:f6:e0:9f:69:d6:b1:
-         5c:b6:e8:e0:98:89:c8:14:12:d6:b6:89:8d:6c:b9:a0:59:4f:
-         92:ee:11:53:6b:7d:93:4a:69:0a:85:d9:d5:d2:62:e8:c9:b5:
-         c6:4e:17:f5:0a:e8:f3:2d:86:61:0b:eb:c4:c4:c6:67:75:ed:
-         9a:9f:53:a0:71:1e:a0:90:0d:f9:03:b4:bc:86:19:6e:f0:3b:
-         4f:e8:ed:68:f6:e7:23:43:3b:36:83:83:4b:46:a0:9a:01:d0:
-         c7:85:bb:7d:94:a0:21:3d:7e:3c:6a:3d:81:db:41:7b:46:d8:
-         15:62:d5:8f:4d:3d:c0:db:9a:c5:81:a8:ac:da:87:99:c7:dd:
-         b9:f1:14:af:d1:93:e3:f3:42:d7:a2:04:51:21:54:29:c3:45:
-         f6:be:5c:fa:cd:db:bf:2f:79:81:42:e5:8f:47:0b:d4:54:01:
-         b5:c2:4a:46:d6:a8:31:2e:64:80:3f:48:61:91:29:f3:aa:43:
-         5c:69:6e:f1:01:b9:df:63:71:3d:b9:5a:fb:36:c0:11:a2:c3:
-         30:9d:95:c3
+         2d:fc:f9:32:5a:be:d6:9d:42:8b:86:4e:67:22:c3:50:2d:cb:
+         14:27:1d:94:f3:cd:88:42:da:41:1c:39:24:67:a7:92:4d:27:
+         ea:56:82:19:bf:11:b2:43:a4:8d:5d:87:b2:27:64:66:82:81:
+         df:c4:fd:5b:62:b0:c2:4d:9d:29:f2:41:32:cc:2e:b5:da:38:
+         06:1b:e8:7f:8c:6e:3d:80:1e:00:56:49:bf:39:e0:da:68:2f:
+         c4:fd:00:e6:d1:81:1a:d1:4a:bb:76:52:ce:4d:24:9d:c4:a3:
+         a7:f1:65:14:2f:1f:a8:2d:c6:cb:ce:b1:a7:89:74:26:27:c3:
+         f3:a3:84:4c:34:01:14:03:7d:16:3a:c8:8b:25:2e:7b:90:cc:
+         46:b1:52:34:ba:93:6e:ef:fe:43:a3:ad:c6:6f:51:fb:ba:ea:
+         38:e3:6f:d6:ee:63:62:36:ea:5e:08:b4:e2:2a:46:89:e3:ae:
+         b3:b4:06:ef:63:7a:6e:5d:dd:c9:ec:02:4f:f7:64:c0:27:07:
+         b4:6f:4a:18:72:5b:34:74:7c:d0:a9:04:8f:40:8b:6a:39:d2:
+         6b:1a:01:f2:01:a8:81:34:3a:e5:b0:55:d1:3c:95:ca:b0:82:
+         d6:ed:98:28:15:59:7e:95:a7:69:c7:b5:7b:ec:01:a7:4d:e6:
+         b9:a2:fe:35
 -----BEGIN CERTIFICATE-----
-MIIE/zCCA+egAwIBAgIUfZRwiLoHQo2qr0++whpI8NFA5kIwDQYJKoZIhvcNAQEL
+MIIE/zCCA+egAwIBAgIUM0QaqGwB7PZg8nBRCkzRFPq86UQwDQYJKoZIhvcNAQEL
 BQAwgZQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIDAdNb250YW5hMRAwDgYDVQQHDAdC
 b3plbWFuMREwDwYDVQQKDAhTYXd0b290aDETMBEGA1UECwwKQ29uc3VsdGluZzEY
 MBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdv
-bGZzc2wuY29tMB4XDTIxMTIyMDIzMDcyNFoXDTI0MDkxNTIzMDcyNFowgZQxCzAJ
+bGZzc2wuY29tMB4XDTIzMTIxMzIyMTkyOFoXDTI2MDkwODIyMTkyOFowgZQxCzAJ
 BgNVBAYTAlVTMRAwDgYDVQQIDAdNb250YW5hMRAwDgYDVQQHDAdCb3plbWFuMREw
 DwYDVQQKDAhTYXd0b290aDETMBEGA1UECwwKQ29uc3VsdGluZzEYMBYGA1UEAwwP
 d3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wuY29t
@@ -123,12 +123,12 @@ BgNVHSMEgcwwgcmAFCeOZxF0wyYdP+0zY7Ok2B0w5ejVoYGapIGXMIGUMQswCQYD
 VQQGEwJVUzEQMA4GA1UECAwHTW9udGFuYTEQMA4GA1UEBwwHQm96ZW1hbjERMA8G
 A1UECgwIU2F3dG9vdGgxEzARBgNVBAsMCkNvbnN1bHRpbmcxGDAWBgNVBAMMD3d3
 dy53b2xmc3NsLmNvbTEfMB0GCSqGSIb3DQEJARYQaW5mb0B3b2xmc3NsLmNvbYIU
-fZRwiLoHQo2qr0++whpI8NFA5kIwDAYDVR0TBAUwAwEB/zAcBgNVHREEFTATggtl
+M0QaqGwB7PZg8nBRCkzRFPq86UQwDAYDVR0TBAUwAwEB/zAcBgNVHREEFTATggtl
 eGFtcGxlLmNvbYcEfwAAATAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
-DQYJKoZIhvcNAQELBQADggEBALBxu7pFWoAlAqR+iAupe/2wu/ZGtbr0x+NhIIwD
-FWb15FSC7xOAlyJnwdGIXeItV/bgn2nWsVy26OCYicgUEta2iY1suaBZT5LuEVNr
-fZNKaQqF2dXSYujJtcZOF/UK6PMthmEL68TExmd17ZqfU6BxHqCQDfkDtLyGGW7w
-O0/o7Wj25yNDOzaDg0tGoJoB0MeFu32UoCE9fjxqPYHbQXtG2BVi1Y9NPcDbmsWB
-qKzah5nH3bnxFK/Rk+PzQteiBFEhVCnDRfa+XPrN278veYFC5Y9HC9RUAbXCSkbW
-qDEuZIA/SGGRKfOqQ1xpbvEBud9jcT25Wvs2wBGiwzCdlcM=
+DQYJKoZIhvcNAQELBQADggEBAC38+TJavtadQouGTmciw1AtyxQnHZTzzYhC2kEc
+OSRnp5JNJ+pWghm/EbJDpI1dh7InZGaCgd/E/VtisMJNnSnyQTLMLrXaOAYb6H+M
+bj2AHgBWSb854NpoL8T9AObRgRrRSrt2Us5NJJ3Eo6fxZRQvH6gtxsvOsaeJdCYn
+w/OjhEw0ARQDfRY6yIslLnuQzEaxUjS6k27v/kOjrcZvUfu66jjjb9buY2I26l4I
+tOIqRonjrrO0Bu9jem5d3cnsAk/3ZMAnB7RvShhyWzR0fNCpBI9Ai2o50msaAfIB
+qIE0OuWwVdE8lcqwgtbtmCgVWX6Vp2nHtXvsAadN5rmi/jU=
 -----END CERTIFICATE-----
diff --git a/certs/crl.der b/certs/crl.der
index 548d7aa92c4e7e327c49cd9ea51311a6fa0d7f1e..7ce490cdabbb14e5d7a4702a4bac1ab3948224a4 100644
GIT binary patch
delta 317
zcmeBR>0p_#*}%lW(7@8bz}UptAWEFq$js2dz!b_g5HS#9Vq^k}A}N~qShaq0{@bEU
z#aZS1twQ&NNMsf6$vSg3cEZ<`Ug-}HJgPrcv$X{$&%U7|DzH&<+U!fED^wSmt`xa;
zH7@wE$=pxf?2@zPKQi&NxV_l1?NjgZ1EO|zebb6X<&wVnX?<U{U}A$%eIrlm8H;@p
zIU-9H7xsSd+NttI_tb%OXYLa+TWW>s>laB&@=ZBkJ->7T$E<Yw_D;JW5lg$Ib#KkS
zAT2TJ@TIKlGJjk%%MXXAmd>2#uBD**e!{1C>)JWB46i1Iyyku`zFtM@XH9cJhU}f_
z1fk_Y6*pIIkdO2*JHBkX$?<mkb$?fe#d@6Stg1}tpRJv2vzbLU{=34Zzn=m(PMa(o
Ky}E>{sT%;NN{D{|

delta 317
zcmeBR>0p_#*}%}y$jHFR*udP#G)kP;$i%?X&=krw5HS#9Vq^k}A}N~qShc?Uz>d?*
zF+CT9Hyz#R`+4&V;r;Q;rOuSRU`soAy7Tbk&A&7J`Y%Kq-*_7*vRU!O0k*X1xtY@{
z_O84b*~%}hsjKhVKBYxuibV;F*c5?RpA2u9Y)^d=7vw)}&Hi}*oOiJ-T56j#Yv!^w
zZQlAU`l?`2*j1C#rZ}z7$I^?Y9Aj#JQ6JH&TYNjzV9}wCyM6Y5TXbXdAL+e;)BV02
zV)18rm-sx;+n@8FK#YytgVTZXAzv))b0XgP{WxWE*8JUWwqTLt2}?TH%nI<@I&X92
z^x5ihF~3AgY!{U!C9ivN>F4&fJofAk0WnX0PqneVuh;k~YaV0f;YD)S8MJeA(m(tb
LKKF4c6UQ|GjFgSH

diff --git a/certs/crl.der.enc b/certs/crl.der.enc
index 324ae673d11e568161f8e7d46199700b9b6ab07d..8f27465f7d7e7c9f3fa3bc649f594a6a8d37fff8 100644
GIT binary patch
delta 361
zcmV-v0ha!d1ds%fuz!5UfTn7#HWEe`)!8;+-EciUlaDO@Zs0{A$uT$qVk!K44?~mV
znp0zTO%kkEe3^#<^677?iLl1^<2%M$HQtt)TMEo!Ki5i;w|1k(9-hQCW58M~Km2**
zY8V7!u!%&^DB7Ac+NBM|3DgfIAYr7q7#!;s-(fL&&dxu-tAFd4RfUkM1bqlzR|~~>
zmcupp0Q<evDZaO7fb2}~r^NTYJ3!U5vo{4Vro)m5<i)`Q4N6-y|3e6Y_e<;!%YQY3
z5CmVSJDYmnlds5gV`U5Avc7N$6{D~;XB|yKW&(C4jYg6?(xwK5=Bg&;6rn-?c@=Aq
z=C+VZw#}z}OJWKdkE-wgR)lXujknSJ6S%2Pd|aDOFu2Oa=IB;<*dK6}B2pl{SYdUd
zeS&XkK7^9&1+r?lZX8v*K5rtb=qL;=&|BkB)P$;eXG|+P5>OhI0AX-r0=bcEffldf
HKtS2!+8eC6

delta 361
zcmV-v0ha!d1ds%fuzxytrp!7!J<%mJgWrMqrpi=XV;0o&Tnbt|FWCBxAcjqL5`Dv6
zs$4s^nT;d$kF)tz{<en1re5c+m42w$t^6kpQ&fX*mTQMk7-*<ZYt#o-)r`cork*W4
z4a;C41a9A^w)O8lRbrw6jYi&Fq+O!d(%;Yg%R4q0^xc#Z`hQ!*U=2Pu(IO~<mA?}I
z=Z5Y!szd)33fU2QY-@DT4ic#buqvOQw<F=Z!3fBev7XNCN|n&Nl?6m>ja~vq656nP
zT)45<wj>%Y0N8`>&PaHb1<sy5&~+GM^K~y>fXj?;&9){+|8pvgcd=aD2{=+)Vy2YN
zVsC{OlVOmFKw|axH6*)=whN$8i(-;4dt-L$RH+bzhz+8iEEQXoC1!@s`rI>Vnc&~j
z5IB&0>7AYmWB56aI|~n29`(n!dn&M9hPMR!-<a<ZerX!%Y?`ARvqDetbjN-vQ!qa1
H4xH@_PmZ!r

diff --git a/certs/crl.der.enc.base64 b/certs/crl.der.enc.base64
index 672156e5..edfac053 100644
--- a/certs/crl.der.enc.base64
+++ b/certs/crl.der.enc.base64
@@ -1,11 +1,11 @@
 rdz214HJCcgKTpTb5i37CrI8Qmk/wPUAzfOrlYObR2dDcG2Im3103Mu7uCbL+wa+
 X/v3aJ3snFInqjDJsYcMmcXasjwRsbIFqRcyVdK499ASzLpnQXhb7OhzKpL7bML/
 RPYCpoWwTyaJYp4UleOqtjGJ3feL20h2kKljHsLMFhcxxDA+4wyzF5F0LEsqZVgH
-P2FH0KVgYSERVnM+cY+CqRHub3vS7j1Q+Bza3caV/+86d6bMOjs90SU0g9+B+abK
-VFtjFtTzXApaPC/Y+o0ghk12En3DXapcO7aZjSP1j7P5Vf62hsSmXueulX6o2K38
-JwxTVINvlmuHTxhoqE9r1AdV1YzEtaaeLTwNy2AgBG7fprb17z1VYqIBjUbeXKRd
-otfS38/8yzs2GPTdlBH6W8RgDT430SIogpW/Ev/nhu42qkP/FQrZEXpsa3TQDhKp
-BrAqn5+3I+G7wQjIlbGezuxKldC7lQVEbI1eAkYS2rB7XLix17YkGi0A2IPuzkh4
-lQXOnj3QdRhi83UvXYDLjG/NtiZG/3MqjHexXNwJOFJbYqaUzmJvhRaTYZCJQPX3
-NSS7irYLoFCLYpIue2N26lSpEISIDaKeLBVblSVmhs763DNpmeDf0hA4kHzpnZ4K
-Y/g5jjsLD1ce9ce3eyqwXYa3BPvfmO8Qfmka6WyaoxuzQk/xdMd+KVMwPukOnO0M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 --git a/certs/crl.pem b/certs/crl.pem
index 4c6f2cc9..58312874 100644
--- a/certs/crl.pem
+++ b/certs/crl.pem
@@ -2,40 +2,40 @@ Certificate Revocation List (CRL):
         Version 2 (0x1)
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C = US, ST = Montana, L = Bozeman, O = Sawtooth, OU = Consulting, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
-        Last Update: Dec 20 23:07:25 2021 GMT
-        Next Update: Sep 15 23:07:25 2024 GMT
+        Last Update: Jan  9 00:34:30 2024 GMT
+        Next Update: Oct  5 00:34:30 2026 GMT
         CRL extensions:
             X509v3 CRL Number: 
                 2
 Revoked Certificates:
     Serial Number: 02
-        Revocation Date: Dec 20 23:07:25 2021 GMT
+        Revocation Date: Jan  9 00:34:30 2024 GMT
     Signature Algorithm: sha256WithRSAEncryption
-         8b:c0:b8:cb:03:5c:8c:d1:53:b2:c5:b1:4d:f3:b3:e8:13:bf:
-         5f:a7:1a:cc:74:e8:06:66:c1:cb:89:c3:e3:b3:fb:68:4e:8f:
-         d0:5b:33:d8:ed:5e:14:b3:21:c8:c0:06:66:97:6d:69:96:78:
-         bd:a9:d1:59:85:0f:13:29:2d:2f:49:87:94:84:14:94:38:74:
-         04:16:94:10:ea:f2:31:d8:34:b7:65:e8:5e:52:4f:96:ac:bf:
-         5f:4f:6c:ee:5d:04:2a:26:b2:29:7c:9d:06:82:b3:b5:e6:5b:
-         d5:11:72:56:d5:34:75:82:5e:2a:f3:c6:67:72:94:c6:02:83:
-         e8:58:85:2d:73:db:55:30:a2:c2:b1:bb:4c:bf:f6:a2:d8:b3:
-         fc:1b:bd:51:97:4e:f4:c2:04:4f:04:ee:61:e7:51:4b:4f:09:
-         fe:10:5c:3c:1e:e0:cb:51:1f:54:f4:38:3f:6c:58:ee:4e:f8:
-         ca:34:cd:37:ee:bb:06:53:14:c7:60:a4:89:ac:9a:50:4a:b5:
-         9e:b3:59:97:9b:27:5e:5c:fa:14:74:3d:a2:76:62:63:ae:e8:
-         d2:f9:b7:ad:0c:3f:07:40:50:5c:e4:fb:95:3c:3d:df:2e:81:
-         f2:6a:9e:01:69:c3:a2:1e:d7:00:2b:6d:6c:67:f0:fb:13:ce:
-         f1:a5:08:d6
+         b3:6f:ed:72:d2:73:6a:77:bf:3a:55:bc:54:18:6a:71:bc:6a:
+         cc:cd:5d:90:f5:64:8d:1b:f0:e0:48:7b:f2:7b:06:86:53:63:
+         9b:d8:24:15:10:b1:19:96:9b:d2:75:a8:25:a2:35:a9:14:d6:
+         d5:5e:53:e3:34:9d:f2:8b:07:19:9b:1f:f1:02:0f:04:46:e8:
+         b8:b6:f2:8d:c7:c0:15:3e:3e:8e:96:73:15:1e:62:f6:4e:2a:
+         f7:aa:a0:91:80:12:7f:81:0c:65:cc:38:be:58:6c:14:a5:21:
+         a1:8d:f7:8a:b9:24:f4:2d:ca:c0:67:43:0b:c8:1c:b4:7d:12:
+         7f:a2:1b:19:0e:94:cf:7b:9f:75:a0:08:9a:67:3f:87:89:3e:
+         f8:58:a5:8a:1b:2d:da:9b:d0:1b:18:92:c3:d2:6a:d7:1c:fc:
+         45:69:77:c3:57:65:75:99:9e:47:2a:20:25:ef:90:f2:5f:3b:
+         7d:9c:7d:00:ea:92:54:eb:0b:e7:17:af:24:1a:f9:7c:83:50:
+         68:1d:dc:5b:60:12:a7:52:78:d9:a9:b0:1f:59:48:36:c7:a6:
+         97:34:c7:87:3f:ae:fd:a9:56:5d:48:cc:89:7a:79:60:8f:9b:
+         2b:63:3c:b3:04:1d:5f:f7:20:d2:fd:f2:51:b1:96:93:13:5b:
+         ab:74:82:8b
 -----BEGIN X509 CRL-----
 MIICBDCB7QIBATANBgkqhkiG9w0BAQsFADCBlDELMAkGA1UEBhMCVVMxEDAOBgNV
 BAgMB01vbnRhbmExEDAOBgNVBAcMB0JvemVtYW4xETAPBgNVBAoMCFNhd3Rvb3Ro
 MRMwEQYDVQQLDApDb25zdWx0aW5nMRgwFgYDVQQDDA93d3cud29sZnNzbC5jb20x
-HzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTIxMTIyMDIzMDcyNVoX
-DTI0MDkxNTIzMDcyNVowFDASAgECFw0yMTEyMjAyMzA3MjVaoA4wDDAKBgNVHRQE
-AwIBAjANBgkqhkiG9w0BAQsFAAOCAQEAi8C4ywNcjNFTssWxTfOz6BO/X6cazHTo
-BmbBy4nD47P7aE6P0Fsz2O1eFLMhyMAGZpdtaZZ4vanRWYUPEyktL0mHlIQUlDh0
-BBaUEOryMdg0t2XoXlJPlqy/X09s7l0EKiayKXydBoKzteZb1RFyVtU0dYJeKvPG
-Z3KUxgKD6FiFLXPbVTCiwrG7TL/2otiz/Bu9UZdO9MIETwTuYedRS08J/hBcPB7g
-y1EfVPQ4P2xY7k74yjTNN+67BlMUx2CkiayaUEq1nrNZl5snXlz6FHQ9onZiY67o
-0vm3rQw/B0BQXOT7lTw93y6B8mqeAWnDoh7XACttbGfw+xPO8aUI1g==
+HzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTI0MDEwOTAwMzQzMFoX
+DTI2MTAwNTAwMzQzMFowFDASAgECFw0yNDAxMDkwMDM0MzBaoA4wDDAKBgNVHRQE
+AwIBAjANBgkqhkiG9w0BAQsFAAOCAQEAs2/tctJzane/OlW8VBhqcbxqzM1dkPVk
+jRvw4Eh78nsGhlNjm9gkFRCxGZab0nWoJaI1qRTW1V5T4zSd8osHGZsf8QIPBEbo
+uLbyjcfAFT4+jpZzFR5i9k4q96qgkYASf4EMZcw4vlhsFKUhoY33irkk9C3KwGdD
+C8gctH0Sf6IbGQ6Uz3ufdaAImmc/h4k++Filihst2pvQGxiSw9Jq1xz8RWl3w1dl
+dZmeRyogJe+Q8l87fZx9AOqSVOsL5xevJBr5fINQaB3cW2ASp1J42amwH1lINsem
+lzTHhz+u/alWXUjMiXp5YI+bK2M8swQdX/cg0v3yUbGWkxNbq3SCiw==
 -----END X509 CRL-----
diff --git a/certs/renew.sh b/certs/renew.sh
index 69edb1bd..a2a3753d 100755
--- a/certs/renew.sh
+++ b/certs/renew.sh
@@ -40,5 +40,35 @@ echo "Additional update of client example source code"
 cp $CERTS_DIR/../examples/client/client.c ../src/client/client.c
 sed -i '' "s/examples\/client\//wolfclu\//" ../src/client/client.c
 
+echo "Recreate expected encrypted data with new files"
+openssl enc -aes-256-cbc -nosalt -in ./crl.der -out ./crl.der.enc -k ""
+openssl enc -base64 -aes-256-cbc -nosalt -in ./crl.der -out ./crl.der.enc.base64 -k ""
+
+echo "Recreating expected hash values"
+cat ./ca-cert.pem | openssl dgst -sha1 -r | awk '{print $1}' > ../tests/hash/sha-expect.hex
+cat ./ca-cert.pem | openssl dgst -sha256 -r | awk '{print $1}' > ../tests/hash/sha256-expect.hex
+cat ./ca-cert.pem | openssl dgst -sha384 -r | awk '{print $1}' > ../tests/hash/sha384-expect.hex
+cat ./ca-cert.pem | openssl dgst -sha512 -r | awk '{print $1}' > ../tests/hash/sha512-expect.hex
+cat ./ca-cert.pem | openssl dgst -md5 -r | awk '{print $1}' > ../tests/hash/md5-expect.hex
+
+echo "Recreating expected cert values"
+openssl x509 -in ./server-cert.pem -modulus -noout > ../tests/x509/expect-modulus.txt
+openssl x509 -in ./server-cert.pem -subject -noout -nameopt compat | sed 's/^subject=//' > ../tests/x509/expect-subject.txt
+openssl x509 -in ./server-cert.pem -issuer -noout -nameopt compat | sed 's/^issuer=//' > ../tests/x509/expect-issuer.txt
+openssl x509 -in ./ca-cert.pem -serial -noout > ../tests/x509/expect-ca-serial.txt
+openssl x509 -in ./server-cert.pem -serial -noout > ../tests/x509/expect-server-serial.txt
+openssl x509 -in ./server-cert.pem -dates -noout > ../tests/x509/expect-dates.txt
+openssl x509 -in ./server-cert.pem -email -noout > ../tests/x509/expect-email.txt
+openssl x509 -in ./server-cert.pem -fingerprint -noout | sed 's/^SHA1 Fingerprint=//' | tr -d ':' > ../tests/x509/expect-fingerprint.txt
+openssl x509 -in ./server-cert.pem -hash -noout > ../tests/x509/expect-hash.txt
+
+#Simply cannot make openssl purpose match wolfssl purpose programatically
+../wolfssl x509 -in ./server-cert.pem -purpose -noout > ../tests/x509/expect-purpose.txt
+
+echo "Recreate test signatures with new files, may take some time..."
+cd ../tests/dgst/
+./create-test-sigs.sh
+cd ../../certs
+
 echo "Done"
 exit 0
diff --git a/certs/server-cert.pem b/certs/server-cert.pem
index 9e5186ec..c0e639fe 100644
--- a/certs/server-cert.pem
+++ b/certs/server-cert.pem
@@ -5,8 +5,8 @@ Certificate:
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C = US, ST = Montana, L = Bozeman, O = Sawtooth, OU = Consulting, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Validity
-            Not Before: Dec 20 23:07:25 2021 GMT
-            Not After : Sep 15 23:07:25 2024 GMT
+            Not Before: Dec 13 22:19:28 2023 GMT
+            Not After : Sep  8 22:19:28 2026 GMT
         Subject: C = US, ST = Montana, L = Bozeman, O = wolfSSL, OU = Support, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
@@ -37,7 +37,7 @@ Certificate:
             X509v3 Authority Key Identifier: 
                 keyid:27:8E:67:11:74:C3:26:1D:3F:ED:33:63:B3:A4:D8:1D:30:E5:E8:D5
                 DirName:/C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/emailAddress=info@wolfssl.com
-                serial:7D:94:70:88:BA:07:42:8D:AA:AF:4F:BE:C2:1A:48:F0:D1:40:E6:42
+                serial:33:44:1A:A8:6C:01:EC:F6:60:F2:70:51:0A:4C:D1:14:FA:BC:E9:44
 
             X509v3 Basic Constraints: 
                 CA:TRUE
@@ -46,27 +46,27 @@ Certificate:
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         73:59:6f:55:94:e1:38:e7:20:5a:11:46:47:a8:29:11:17:06:
-         19:16:78:22:af:54:f8:d9:32:61:26:3f:39:ab:a4:df:ef:ae:
-         d0:0b:cc:2b:af:95:70:90:97:53:cc:19:6d:f2:4d:4c:fa:e4:
-         9d:7c:54:e0:5b:3b:1f:1e:52:46:7f:d9:ba:a0:90:ba:6d:df:
-         3d:67:f0:9f:52:44:c3:e1:66:36:dc:61:58:11:ba:4c:0c:c2:
-         29:da:f7:13:45:60:b2:11:79:91:ed:7c:9f:b7:7f:5c:e2:29:
-         c6:1e:bf:78:da:bf:d1:bd:9c:f7:4e:23:e0:c3:ef:6f:b6:67:
-         7c:d7:4c:02:d5:bd:67:ee:7e:0c:e3:89:db:79:61:1e:d0:5f:
-         f5:e8:66:48:3a:55:54:d5:16:12:30:00:c9:86:75:e0:c9:ff:
-         38:74:ce:c8:c7:fd:ef:96:d8:55:96:71:35:62:db:34:c5:2f:
-         07:84:8a:aa:1b:1e:77:50:0a:20:3b:21:4b:06:14:af:78:11:
-         a2:41:c6:5d:0c:70:e0:52:b4:9e:4c:86:ab:5b:a3:e0:8f:a2:
-         c2:1a:69:70:80:3b:bd:50:23:26:72:4f:fa:fd:df:ed:85:32:
-         2c:e4:ab:3e:f3:a6:d0:1d:db:33:6b:69:8d:99:b9:b4:34:4b:
-         79:a8:16:68
+         4a:ff:b9:e5:85:9b:da:53:66:7f:07:22:bf:b6:19:ea:42:eb:
+         a4:11:07:62:ff:39:5f:33:37:3a:87:26:71:3d:13:b2:ca:b8:
+         64:38:7b:8a:99:48:0e:a5:a4:6b:b1:99:6e:e0:46:51:bd:19:
+         52:ad:bc:a6:7e:2a:7a:7c:23:a7:cc:db:5e:43:7d:6b:04:c8:
+         b7:dd:95:ad:f0:91:80:59:c5:19:91:26:27:91:b8:48:1c:eb:
+         55:b6:aa:7d:a4:38:f1:03:bc:6c:8b:aa:94:d6:3c:05:7a:96:
+         c5:06:f1:26:14:2e:75:fb:dd:e5:35:b3:01:2c:b3:ad:62:5a:
+         21:9a:08:be:56:fc:f9:a2:42:87:86:e5:a9:c5:99:cf:ae:14:
+         be:e0:b9:08:24:0d:1d:5c:d6:14:e1:4c:9f:40:b3:a9:e9:2d:
+         52:8b:4c:bf:ac:44:31:67:c1:8d:06:85:ec:0f:e4:99:d7:4b:
+         7b:21:06:66:d4:e4:f5:9d:ff:8e:f0:86:39:58:1d:a4:5b:e2:
+         63:ef:7c:c9:18:87:a8:02:25:10:3e:87:28:f9:f5:ef:47:9e:
+         a5:80:08:11:90:68:fe:d1:a3:a8:51:b9:37:ff:d5:ca:7c:87:
+         7f:6b:bc:2c:12:c8:c5:85:8b:fc:0c:c6:b9:86:b8:c9:04:c3:
+         51:37:d2:4f
 -----BEGIN CERTIFICATE-----
 MIIE6DCCA9CgAwIBAgIBATANBgkqhkiG9w0BAQsFADCBlDELMAkGA1UEBhMCVVMx
 EDAOBgNVBAgMB01vbnRhbmExEDAOBgNVBAcMB0JvemVtYW4xETAPBgNVBAoMCFNh
 d3Rvb3RoMRMwEQYDVQQLDApDb25zdWx0aW5nMRgwFgYDVQQDDA93d3cud29sZnNz
-bC5jb20xHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20wHhcNMjExMjIw
-MjMwNzI1WhcNMjQwOTE1MjMwNzI1WjCBkDELMAkGA1UEBhMCVVMxEDAOBgNVBAgM
+bC5jb20xHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20wHhcNMjMxMjEz
+MjIxOTI4WhcNMjYwOTA4MjIxOTI4WjCBkDELMAkGA1UEBhMCVVMxEDAOBgNVBAgM
 B01vbnRhbmExEDAOBgNVBAcMB0JvemVtYW4xEDAOBgNVBAoMB3dvbGZTU0wxEDAO
 BgNVBAsMB1N1cHBvcnQxGDAWBgNVBAMMD3d3dy53b2xmc3NsLmNvbTEfMB0GCSqG
 SIb3DQEJARYQaW5mb0B3b2xmc3NsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
@@ -80,26 +80,26 @@ BBSzETLJkpiE4sn40DtuA0LKHw6OPDCB1AYDVR0jBIHMMIHJgBQnjmcRdMMmHT/t
 M2OzpNgdMOXo1aGBmqSBlzCBlDELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB01vbnRh
 bmExEDAOBgNVBAcMB0JvemVtYW4xETAPBgNVBAoMCFNhd3Rvb3RoMRMwEQYDVQQL
 DApDb25zdWx0aW5nMRgwFgYDVQQDDA93d3cud29sZnNzbC5jb20xHzAdBgkqhkiG
-9w0BCQEWEGluZm9Ad29sZnNzbC5jb22CFH2UcIi6B0KNqq9PvsIaSPDRQOZCMAwG
+9w0BCQEWEGluZm9Ad29sZnNzbC5jb22CFDNEGqhsAez2YPJwUQpM0RT6vOlEMAwG
 A1UdEwQFMAMBAf8wHAYDVR0RBBUwE4ILZXhhbXBsZS5jb22HBH8AAAEwHQYDVR0l
-BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA0GCSqGSIb3DQEBCwUAA4IBAQBzWW9V
-lOE45yBaEUZHqCkRFwYZFngir1T42TJhJj85q6Tf767QC8wrr5VwkJdTzBlt8k1M
-+uSdfFTgWzsfHlJGf9m6oJC6bd89Z/CfUkTD4WY23GFYEbpMDMIp2vcTRWCyEXmR
-7Xyft39c4inGHr942r/RvZz3TiPgw+9vtmd810wC1b1n7n4M44nbeWEe0F/16GZI
-OlVU1RYSMADJhnXgyf84dM7Ix/3vlthVlnE1Yts0xS8HhIqqGx53UAogOyFLBhSv
-eBGiQcZdDHDgUrSeTIarW6Pgj6LCGmlwgDu9UCMmck/6/d/thTIs5Ks+86bQHdsz
-a2mNmbm0NEt5qBZo
+BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA0GCSqGSIb3DQEBCwUAA4IBAQBK/7nl
+hZvaU2Z/ByK/thnqQuukEQdi/zlfMzc6hyZxPROyyrhkOHuKmUgOpaRrsZlu4EZR
+vRlSrbymfip6fCOnzNteQ31rBMi33ZWt8JGAWcUZkSYnkbhIHOtVtqp9pDjxA7xs
+i6qU1jwFepbFBvEmFC51+93lNbMBLLOtYlohmgi+Vvz5okKHhuWpxZnPrhS+4LkI
+JA0dXNYU4UyfQLOp6S1Si0y/rEQxZ8GNBoXsD+SZ10t7IQZm1OT1nf+O8IY5WB2k
+W+Jj73zJGIeoAiUQPoco+fXvR56lgAgRkGj+0aOoUbk3/9XKfId/a7wsEsjFhYv8
+DMa5hrjJBMNRN9JP
 -----END CERTIFICATE-----
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            7d:94:70:88:ba:07:42:8d:aa:af:4f:be:c2:1a:48:f0:d1:40:e6:42
+            33:44:1a:a8:6c:01:ec:f6:60:f2:70:51:0a:4c:d1:14:fa:bc:e9:44
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C = US, ST = Montana, L = Bozeman, O = Sawtooth, OU = Consulting, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Validity
-            Not Before: Dec 20 23:07:24 2021 GMT
-            Not After : Sep 15 23:07:24 2024 GMT
+            Not Before: Dec 13 22:19:28 2023 GMT
+            Not After : Sep  8 22:19:28 2026 GMT
         Subject: C = US, ST = Montana, L = Bozeman, O = Sawtooth, OU = Consulting, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
@@ -130,7 +130,7 @@ Certificate:
             X509v3 Authority Key Identifier: 
                 keyid:27:8E:67:11:74:C3:26:1D:3F:ED:33:63:B3:A4:D8:1D:30:E5:E8:D5
                 DirName:/C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/emailAddress=info@wolfssl.com
-                serial:7D:94:70:88:BA:07:42:8D:AA:AF:4F:BE:C2:1A:48:F0:D1:40:E6:42
+                serial:33:44:1A:A8:6C:01:EC:F6:60:F2:70:51:0A:4C:D1:14:FA:BC:E9:44
 
             X509v3 Basic Constraints: 
                 CA:TRUE
@@ -139,27 +139,27 @@ Certificate:
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         b0:71:bb:ba:45:5a:80:25:02:a4:7e:88:0b:a9:7b:fd:b0:bb:
-         f6:46:b5:ba:f4:c7:e3:61:20:8c:03:15:66:f5:e4:54:82:ef:
-         13:80:97:22:67:c1:d1:88:5d:e2:2d:57:f6:e0:9f:69:d6:b1:
-         5c:b6:e8:e0:98:89:c8:14:12:d6:b6:89:8d:6c:b9:a0:59:4f:
-         92:ee:11:53:6b:7d:93:4a:69:0a:85:d9:d5:d2:62:e8:c9:b5:
-         c6:4e:17:f5:0a:e8:f3:2d:86:61:0b:eb:c4:c4:c6:67:75:ed:
-         9a:9f:53:a0:71:1e:a0:90:0d:f9:03:b4:bc:86:19:6e:f0:3b:
-         4f:e8:ed:68:f6:e7:23:43:3b:36:83:83:4b:46:a0:9a:01:d0:
-         c7:85:bb:7d:94:a0:21:3d:7e:3c:6a:3d:81:db:41:7b:46:d8:
-         15:62:d5:8f:4d:3d:c0:db:9a:c5:81:a8:ac:da:87:99:c7:dd:
-         b9:f1:14:af:d1:93:e3:f3:42:d7:a2:04:51:21:54:29:c3:45:
-         f6:be:5c:fa:cd:db:bf:2f:79:81:42:e5:8f:47:0b:d4:54:01:
-         b5:c2:4a:46:d6:a8:31:2e:64:80:3f:48:61:91:29:f3:aa:43:
-         5c:69:6e:f1:01:b9:df:63:71:3d:b9:5a:fb:36:c0:11:a2:c3:
-         30:9d:95:c3
+         2d:fc:f9:32:5a:be:d6:9d:42:8b:86:4e:67:22:c3:50:2d:cb:
+         14:27:1d:94:f3:cd:88:42:da:41:1c:39:24:67:a7:92:4d:27:
+         ea:56:82:19:bf:11:b2:43:a4:8d:5d:87:b2:27:64:66:82:81:
+         df:c4:fd:5b:62:b0:c2:4d:9d:29:f2:41:32:cc:2e:b5:da:38:
+         06:1b:e8:7f:8c:6e:3d:80:1e:00:56:49:bf:39:e0:da:68:2f:
+         c4:fd:00:e6:d1:81:1a:d1:4a:bb:76:52:ce:4d:24:9d:c4:a3:
+         a7:f1:65:14:2f:1f:a8:2d:c6:cb:ce:b1:a7:89:74:26:27:c3:
+         f3:a3:84:4c:34:01:14:03:7d:16:3a:c8:8b:25:2e:7b:90:cc:
+         46:b1:52:34:ba:93:6e:ef:fe:43:a3:ad:c6:6f:51:fb:ba:ea:
+         38:e3:6f:d6:ee:63:62:36:ea:5e:08:b4:e2:2a:46:89:e3:ae:
+         b3:b4:06:ef:63:7a:6e:5d:dd:c9:ec:02:4f:f7:64:c0:27:07:
+         b4:6f:4a:18:72:5b:34:74:7c:d0:a9:04:8f:40:8b:6a:39:d2:
+         6b:1a:01:f2:01:a8:81:34:3a:e5:b0:55:d1:3c:95:ca:b0:82:
+         d6:ed:98:28:15:59:7e:95:a7:69:c7:b5:7b:ec:01:a7:4d:e6:
+         b9:a2:fe:35
 -----BEGIN CERTIFICATE-----
-MIIE/zCCA+egAwIBAgIUfZRwiLoHQo2qr0++whpI8NFA5kIwDQYJKoZIhvcNAQEL
+MIIE/zCCA+egAwIBAgIUM0QaqGwB7PZg8nBRCkzRFPq86UQwDQYJKoZIhvcNAQEL
 BQAwgZQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIDAdNb250YW5hMRAwDgYDVQQHDAdC
 b3plbWFuMREwDwYDVQQKDAhTYXd0b290aDETMBEGA1UECwwKQ29uc3VsdGluZzEY
 MBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdv
-bGZzc2wuY29tMB4XDTIxMTIyMDIzMDcyNFoXDTI0MDkxNTIzMDcyNFowgZQxCzAJ
+bGZzc2wuY29tMB4XDTIzMTIxMzIyMTkyOFoXDTI2MDkwODIyMTkyOFowgZQxCzAJ
 BgNVBAYTAlVTMRAwDgYDVQQIDAdNb250YW5hMRAwDgYDVQQHDAdCb3plbWFuMREw
 DwYDVQQKDAhTYXd0b290aDETMBEGA1UECwwKQ29uc3VsdGluZzEYMBYGA1UEAwwP
 d3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wuY29t
@@ -174,12 +174,12 @@ BgNVHSMEgcwwgcmAFCeOZxF0wyYdP+0zY7Ok2B0w5ejVoYGapIGXMIGUMQswCQYD
 VQQGEwJVUzEQMA4GA1UECAwHTW9udGFuYTEQMA4GA1UEBwwHQm96ZW1hbjERMA8G
 A1UECgwIU2F3dG9vdGgxEzARBgNVBAsMCkNvbnN1bHRpbmcxGDAWBgNVBAMMD3d3
 dy53b2xmc3NsLmNvbTEfMB0GCSqGSIb3DQEJARYQaW5mb0B3b2xmc3NsLmNvbYIU
-fZRwiLoHQo2qr0++whpI8NFA5kIwDAYDVR0TBAUwAwEB/zAcBgNVHREEFTATggtl
+M0QaqGwB7PZg8nBRCkzRFPq86UQwDAYDVR0TBAUwAwEB/zAcBgNVHREEFTATggtl
 eGFtcGxlLmNvbYcEfwAAATAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
-DQYJKoZIhvcNAQELBQADggEBALBxu7pFWoAlAqR+iAupe/2wu/ZGtbr0x+NhIIwD
-FWb15FSC7xOAlyJnwdGIXeItV/bgn2nWsVy26OCYicgUEta2iY1suaBZT5LuEVNr
-fZNKaQqF2dXSYujJtcZOF/UK6PMthmEL68TExmd17ZqfU6BxHqCQDfkDtLyGGW7w
-O0/o7Wj25yNDOzaDg0tGoJoB0MeFu32UoCE9fjxqPYHbQXtG2BVi1Y9NPcDbmsWB
-qKzah5nH3bnxFK/Rk+PzQteiBFEhVCnDRfa+XPrN278veYFC5Y9HC9RUAbXCSkbW
-qDEuZIA/SGGRKfOqQ1xpbvEBud9jcT25Wvs2wBGiwzCdlcM=
+DQYJKoZIhvcNAQELBQADggEBAC38+TJavtadQouGTmciw1AtyxQnHZTzzYhC2kEc
+OSRnp5JNJ+pWghm/EbJDpI1dh7InZGaCgd/E/VtisMJNnSnyQTLMLrXaOAYb6H+M
+bj2AHgBWSb854NpoL8T9AObRgRrRSrt2Us5NJJ3Eo6fxZRQvH6gtxsvOsaeJdCYn
+w/OjhEw0ARQDfRY6yIslLnuQzEaxUjS6k27v/kOjrcZvUfu66jjjb9buY2I26l4I
+tOIqRonjrrO0Bu9jem5d3cnsAk/3ZMAnB7RvShhyWzR0fNCpBI9Ai2o50msaAfIB
+qIE0OuWwVdE8lcqwgtbtmCgVWX6Vp2nHtXvsAadN5rmi/jU=
 -----END CERTIFICATE-----
diff --git a/certs/server-ecc.pem b/certs/server-ecc.pem
index 444644b0..94978a55 100644
--- a/certs/server-ecc.pem
+++ b/certs/server-ecc.pem
@@ -5,9 +5,9 @@ Certificate:
         Signature Algorithm: ecdsa-with-SHA256
         Issuer: C = US, ST = Washington, L = Seattle, O = wolfSSL, OU = Development, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Validity
-            Not Before: Dec 20 23:07:25 2021 GMT
-            Not After : Sep 15 23:07:25 2024 GMT
-        Subject: C = US, ST = Washington, L = Seattle, O = Eliptic, OU = ECC, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
+            Not Before: Dec 13 22:19:28 2023 GMT
+            Not After : Sep  8 22:19:28 2026 GMT
+        Subject: C = US, ST = Washington, L = Seattle, O = Elliptic, OU = ECC, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Subject Public Key Info:
             Public Key Algorithm: id-ecPublicKey
                 Public-Key: (256 bit)
@@ -34,24 +34,24 @@ Certificate:
             Netscape Cert Type: 
                 SSL Server
     Signature Algorithm: ecdsa-with-SHA256
-         30:44:02:20:5a:67:b9:ee:02:34:27:1b:d4:c4:35:7b:ed:59:
-         8e:63:c4:8a:b7:e9:92:c1:8a:76:b0:8b:cd:24:49:78:ba:ef:
-         02:20:29:b8:b6:5f:83:f7:56:6a:f1:4d:d9:9f:52:2a:f9:8f:
-         53:14:49:8b:5f:5e:87:af:7f:ca:2e:e0:d8:e7:75:0c
+         30:45:02:21:00:86:bd:87:16:d2:9c:66:e7:5e:5c:28:0e:5f:
+         ef:94:61:2f:d4:21:6d:8e:c3:94:0a:1e:b5:6a:1d:c6:04:87:
+         c6:02:20:66:46:c4:29:d9:8e:eb:0b:f7:5b:32:13:eb:0a:ea:
+         47:99:4b:74:56:ba:21:97:b1:67:75:5c:f3:f3:c0:88:aa
 -----BEGIN CERTIFICATE-----
-MIICoDCCAkegAwIBAgIBAzAKBggqhkjOPQQDAjCBlzELMAkGA1UEBhMCVVMxEzAR
+MIICojCCAkigAwIBAgIBAzAKBggqhkjOPQQDAjCBlzELMAkGA1UEBhMCVVMxEzAR
 BgNVBAgMCldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUxEDAOBgNVBAoMB3dv
 bGZTU0wxFDASBgNVBAsMC0RldmVsb3BtZW50MRgwFgYDVQQDDA93d3cud29sZnNz
-bC5jb20xHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20wHhcNMjExMjIw
-MjMwNzI1WhcNMjQwOTE1MjMwNzI1WjCBjzELMAkGA1UEBhMCVVMxEzARBgNVBAgM
-Cldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUxEDAOBgNVBAoMB0VsaXB0aWMx
-DDAKBgNVBAsMA0VDQzEYMBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMR8wHQYJKoZI
-hvcNAQkBFhBpbmZvQHdvbGZzc2wuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcD
-QgAEuzOsTCdQSsZKpQTDPN6fNttyLc6U6iv6yyAJOSwW6GEC6a9N0wKTmjFbl5Ih
-f/DPGNqREQI0huggWDMLgDSJ2KOBiTCBhjAdBgNVHQ4EFgQUXV0m76x+NvmbdhUr
-SiUCI++yiTAwHwYDVR0jBBgwFoAUVo6aw/BC3hi5RVVu+ZPP6sPzpSEwDAYDVR0T
-AQH/BAIwADAOBgNVHQ8BAf8EBAMCA6gwEwYDVR0lBAwwCgYIKwYBBQUHAwEwEQYJ
-YIZIAYb4QgEBBAQDAgZAMAoGCCqGSM49BAMCA0cAMEQCIFpnue4CNCcb1MQ1e+1Z
-jmPEirfpksGKdrCLzSRJeLrvAiApuLZfg/dWavFN2Z9SKvmPUxRJi19eh69/yi7g
-2Od1DA==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 -----END CERTIFICATE-----
diff --git a/certs/server-keyPub.pem b/certs/server-keyPub.pem
index c90f5c4f..0707336a 100644
--- a/certs/server-keyPub.pem
+++ b/certs/server-keyPub.pem
@@ -1,4 +1,4 @@
------BEGIN RSA PUBLIC KEY-----
+-----BEGIN PUBLIC KEY-----
 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJUI4VdB8nFtt9JFQScB
 ZcZFrvK8JDC4lc4vTtb2HIi8fJ/7qGd//lycUXX3isoH5zUvj+G9e8AvfKtkqBf8
 yl17uuAh5XIuby6G2JVz2qwbU7lfP9cZDSVP4WNjUYsLZD+tQ7ilHFw0s64AoGPF
@@ -6,4 +6,4 @@ yl17uuAh5XIuby6G2JVz2qwbU7lfP9cZDSVP4WNjUYsLZD+tQ7ilHFw0s64AoGPF
 UQy9VLPhbV8cvCNz0QkDiRTSELlkwyrQoZZKvOHUGlvHoMDBY3gPRDcwMpaAMiOV
 oXe6E9KXc+JdJclqDcM5YKS0sGlCQgnp2Ai8MyCzWCKnquvE4eZhg8XSlt/Z0E+t
 1wIDAQAB
------END RSA PUBLIC KEY-----
+-----END PUBLIC KEY-----
diff --git a/certs/server-revoked-cert.pem b/certs/server-revoked-cert.pem
index 000810f3..45629737 100644
--- a/certs/server-revoked-cert.pem
+++ b/certs/server-revoked-cert.pem
@@ -5,8 +5,8 @@ Certificate:
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C = US, ST = Montana, L = Bozeman, O = Sawtooth, OU = Consulting, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Validity
-            Not Before: Dec 20 23:07:25 2021 GMT
-            Not After : Sep 15 23:07:25 2024 GMT
+            Not Before: Dec 13 22:19:28 2023 GMT
+            Not After : Sep  8 22:19:28 2026 GMT
         Subject: C = US, ST = Montana, L = Bozeman, O = wolfSSL_revoked, OU = Support_revoked, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
@@ -37,7 +37,7 @@ Certificate:
             X509v3 Authority Key Identifier: 
                 keyid:27:8E:67:11:74:C3:26:1D:3F:ED:33:63:B3:A4:D8:1D:30:E5:E8:D5
                 DirName:/C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/emailAddress=info@wolfssl.com
-                serial:7D:94:70:88:BA:07:42:8D:AA:AF:4F:BE:C2:1A:48:F0:D1:40:E6:42
+                serial:33:44:1A:A8:6C:01:EC:F6:60:F2:70:51:0A:4C:D1:14:FA:BC:E9:44
 
             X509v3 Basic Constraints: 
                 CA:TRUE
@@ -46,27 +46,27 @@ Certificate:
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         48:1c:0d:ff:b1:2b:ef:94:14:a8:26:89:0a:f7:ef:08:9f:21:
-         1e:de:56:28:b3:d8:9b:dc:80:10:6f:f6:47:e9:2b:a1:04:ed:
-         07:43:6d:91:19:f5:c5:7f:57:7d:a8:dd:01:8c:76:7f:ed:c1:
-         a4:3e:ea:34:c0:89:5e:63:9e:b4:f2:0f:d3:2f:d9:da:56:72:
-         13:6e:dc:fb:0f:bb:ed:84:b7:ef:08:94:ac:94:41:db:de:6b:
-         4e:b0:d5:2e:19:37:7f:db:88:4a:8b:95:1c:f7:a6:7f:e6:83:
-         3a:ac:23:89:a7:bf:db:6c:e6:85:9a:77:39:62:57:e5:5d:2c:
-         bd:b6:e8:e1:61:22:dc:7b:8b:dd:e4:41:44:1d:10:e8:5a:19:
-         cd:3b:74:5d:f7:0d:64:2f:1d:ae:51:ac:76:1a:d5:aa:e1:21:
-         07:78:ef:1a:5b:be:5c:69:6d:4e:65:2f:a7:9e:da:16:31:6d:
-         50:98:f2:78:d5:5b:f7:60:b6:40:8d:db:48:a0:90:63:12:6d:
-         ce:5b:b8:b9:37:20:9f:80:f3:0a:cb:f6:72:5d:cd:0b:04:59:
-         76:1e:52:64:83:6f:6a:97:74:8a:55:2e:ce:e1:b5:93:46:c8:
-         91:8c:63:26:96:1e:1c:53:26:40:6d:4f:49:b1:48:9e:48:95:
-         54:bb:ec:38
+         5c:ae:98:a1:97:b7:b7:57:1b:47:32:9d:86:df:aa:5a:95:03:
+         8f:de:04:9f:27:1f:b3:bc:6d:50:63:53:6a:02:83:3d:5b:f6:
+         16:04:4a:04:84:65:d4:68:7c:f3:1d:8f:dc:ff:76:e1:b0:ce:
+         88:b1:31:57:c9:5c:14:bf:ae:b9:ee:82:a0:b0:c3:25:bb:5f:
+         0f:a7:00:fc:dd:73:27:8b:b8:dd:72:63:00:47:38:cb:09:66:
+         7a:0e:fb:8f:c3:6e:de:23:23:47:cd:7f:f0:4c:fa:31:fa:f5:
+         28:cb:2e:1c:3e:0a:92:8a:b2:c7:bd:37:21:39:d2:f6:ee:c4:
+         9c:28:7a:0a:88:8c:ca:ce:7d:e8:c3:a7:3f:bc:44:52:fb:e0:
+         68:95:f2:46:30:0f:1b:fa:ea:92:4c:86:c2:fe:62:48:91:5a:
+         ea:5a:9a:76:8a:23:dd:56:37:27:d8:91:2f:eb:77:eb:b8:30:
+         8e:5a:46:71:96:a2:24:f0:fa:1a:eb:39:cd:70:dc:ea:4e:bd:
+         49:88:4c:57:95:ff:f8:9e:b0:b7:13:10:26:51:3c:4b:bc:70:
+         3a:fc:1d:a2:6f:13:bf:ab:d4:3c:9e:06:ae:3b:6d:03:09:41:
+         e0:07:b0:85:22:09:c1:5d:39:d2:59:04:90:9d:46:20:0b:24:
+         82:82:c3:36
 -----BEGIN CERTIFICATE-----
 MIIE+DCCA+CgAwIBAgIBAjANBgkqhkiG9w0BAQsFADCBlDELMAkGA1UEBhMCVVMx
 EDAOBgNVBAgMB01vbnRhbmExEDAOBgNVBAcMB0JvemVtYW4xETAPBgNVBAoMCFNh
 d3Rvb3RoMRMwEQYDVQQLDApDb25zdWx0aW5nMRgwFgYDVQQDDA93d3cud29sZnNz
-bC5jb20xHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20wHhcNMjExMjIw
-MjMwNzI1WhcNMjQwOTE1MjMwNzI1WjCBoDELMAkGA1UEBhMCVVMxEDAOBgNVBAgM
+bC5jb20xHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20wHhcNMjMxMjEz
+MjIxOTI4WhcNMjYwOTA4MjIxOTI4WjCBoDELMAkGA1UEBhMCVVMxEDAOBgNVBAgM
 B01vbnRhbmExEDAOBgNVBAcMB0JvemVtYW4xGDAWBgNVBAoMD3dvbGZTU0xfcmV2
 b2tlZDEYMBYGA1UECwwPU3VwcG9ydF9yZXZva2VkMRgwFgYDVQQDDA93d3cud29s
 ZnNzbC5jb20xHzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20wggEiMA0G
@@ -80,26 +80,26 @@ ggFFMIIBQTAdBgNVHQ4EFgQU2AkrWeEq7tnuQKqcq/BdKAlPIrswgdQGA1UdIwSB
 zDCByYAUJ45nEXTDJh0/7TNjs6TYHTDl6NWhgZqkgZcwgZQxCzAJBgNVBAYTAlVT
 MRAwDgYDVQQIDAdNb250YW5hMRAwDgYDVQQHDAdCb3plbWFuMREwDwYDVQQKDAhT
 YXd0b290aDETMBEGA1UECwwKQ29uc3VsdGluZzEYMBYGA1UEAwwPd3d3LndvbGZz
-c2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wuY29tghR9lHCIugdC
-jaqvT77CGkjw0UDmQjAMBgNVHRMEBTADAQH/MBwGA1UdEQQVMBOCC2V4YW1wbGUu
+c2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wuY29tghQzRBqobAHs
+9mDycFEKTNEU+rzpRDAMBgNVHRMEBTADAQH/MBwGA1UdEQQVMBOCC2V4YW1wbGUu
 Y29thwR/AAABMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjANBgkqhkiG
-9w0BAQsFAAOCAQEASBwN/7Er75QUqCaJCvfvCJ8hHt5WKLPYm9yAEG/2R+kroQTt
-B0NtkRn1xX9XfajdAYx2f+3BpD7qNMCJXmOetPIP0y/Z2lZyE27c+w+77YS37wiU
-rJRB295rTrDVLhk3f9uISouVHPemf+aDOqwjiae/22zmhZp3OWJX5V0svbbo4WEi
-3HuL3eRBRB0Q6FoZzTt0XfcNZC8drlGsdhrVquEhB3jvGlu+XGltTmUvp57aFjFt
-UJjyeNVb92C2QI3bSKCQYxJtzlu4uTcgn4DzCsv2cl3NCwRZdh5SZINvapd0ilUu
-zuG1k0bIkYxjJpYeHFMmQG1PSbFInkiVVLvsOA==
+9w0BAQsFAAOCAQEAXK6YoZe3t1cbRzKdht+qWpUDj94Enycfs7xtUGNTagKDPVv2
+FgRKBIRl1Gh88x2P3P924bDOiLExV8lcFL+uue6CoLDDJbtfD6cA/N1zJ4u43XJj
+AEc4ywlmeg77j8Nu3iMjR81/8Ez6Mfr1KMsuHD4Kkoqyx703ITnS9u7EnCh6CoiM
+ys596MOnP7xEUvvgaJXyRjAPG/rqkkyGwv5iSJFa6lqadooj3VY3J9iRL+t367gw
+jlpGcZaiJPD6Gus5zXDc6k69SYhMV5X/+J6wtxMQJlE8S7xwOvwdom8Tv6vUPJ4G
+rjttAwlB4AewhSIJwV050lkEkJ1GIAskgoLDNg==
 -----END CERTIFICATE-----
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            7d:94:70:88:ba:07:42:8d:aa:af:4f:be:c2:1a:48:f0:d1:40:e6:42
+            33:44:1a:a8:6c:01:ec:f6:60:f2:70:51:0a:4c:d1:14:fa:bc:e9:44
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C = US, ST = Montana, L = Bozeman, O = Sawtooth, OU = Consulting, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Validity
-            Not Before: Dec 20 23:07:24 2021 GMT
-            Not After : Sep 15 23:07:24 2024 GMT
+            Not Before: Dec 13 22:19:28 2023 GMT
+            Not After : Sep  8 22:19:28 2026 GMT
         Subject: C = US, ST = Montana, L = Bozeman, O = Sawtooth, OU = Consulting, CN = www.wolfssl.com, emailAddress = info@wolfssl.com
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
@@ -130,7 +130,7 @@ Certificate:
             X509v3 Authority Key Identifier: 
                 keyid:27:8E:67:11:74:C3:26:1D:3F:ED:33:63:B3:A4:D8:1D:30:E5:E8:D5
                 DirName:/C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/emailAddress=info@wolfssl.com
-                serial:7D:94:70:88:BA:07:42:8D:AA:AF:4F:BE:C2:1A:48:F0:D1:40:E6:42
+                serial:33:44:1A:A8:6C:01:EC:F6:60:F2:70:51:0A:4C:D1:14:FA:BC:E9:44
 
             X509v3 Basic Constraints: 
                 CA:TRUE
@@ -139,27 +139,27 @@ Certificate:
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         b0:71:bb:ba:45:5a:80:25:02:a4:7e:88:0b:a9:7b:fd:b0:bb:
-         f6:46:b5:ba:f4:c7:e3:61:20:8c:03:15:66:f5:e4:54:82:ef:
-         13:80:97:22:67:c1:d1:88:5d:e2:2d:57:f6:e0:9f:69:d6:b1:
-         5c:b6:e8:e0:98:89:c8:14:12:d6:b6:89:8d:6c:b9:a0:59:4f:
-         92:ee:11:53:6b:7d:93:4a:69:0a:85:d9:d5:d2:62:e8:c9:b5:
-         c6:4e:17:f5:0a:e8:f3:2d:86:61:0b:eb:c4:c4:c6:67:75:ed:
-         9a:9f:53:a0:71:1e:a0:90:0d:f9:03:b4:bc:86:19:6e:f0:3b:
-         4f:e8:ed:68:f6:e7:23:43:3b:36:83:83:4b:46:a0:9a:01:d0:
-         c7:85:bb:7d:94:a0:21:3d:7e:3c:6a:3d:81:db:41:7b:46:d8:
-         15:62:d5:8f:4d:3d:c0:db:9a:c5:81:a8:ac:da:87:99:c7:dd:
-         b9:f1:14:af:d1:93:e3:f3:42:d7:a2:04:51:21:54:29:c3:45:
-         f6:be:5c:fa:cd:db:bf:2f:79:81:42:e5:8f:47:0b:d4:54:01:
-         b5:c2:4a:46:d6:a8:31:2e:64:80:3f:48:61:91:29:f3:aa:43:
-         5c:69:6e:f1:01:b9:df:63:71:3d:b9:5a:fb:36:c0:11:a2:c3:
-         30:9d:95:c3
+         2d:fc:f9:32:5a:be:d6:9d:42:8b:86:4e:67:22:c3:50:2d:cb:
+         14:27:1d:94:f3:cd:88:42:da:41:1c:39:24:67:a7:92:4d:27:
+         ea:56:82:19:bf:11:b2:43:a4:8d:5d:87:b2:27:64:66:82:81:
+         df:c4:fd:5b:62:b0:c2:4d:9d:29:f2:41:32:cc:2e:b5:da:38:
+         06:1b:e8:7f:8c:6e:3d:80:1e:00:56:49:bf:39:e0:da:68:2f:
+         c4:fd:00:e6:d1:81:1a:d1:4a:bb:76:52:ce:4d:24:9d:c4:a3:
+         a7:f1:65:14:2f:1f:a8:2d:c6:cb:ce:b1:a7:89:74:26:27:c3:
+         f3:a3:84:4c:34:01:14:03:7d:16:3a:c8:8b:25:2e:7b:90:cc:
+         46:b1:52:34:ba:93:6e:ef:fe:43:a3:ad:c6:6f:51:fb:ba:ea:
+         38:e3:6f:d6:ee:63:62:36:ea:5e:08:b4:e2:2a:46:89:e3:ae:
+         b3:b4:06:ef:63:7a:6e:5d:dd:c9:ec:02:4f:f7:64:c0:27:07:
+         b4:6f:4a:18:72:5b:34:74:7c:d0:a9:04:8f:40:8b:6a:39:d2:
+         6b:1a:01:f2:01:a8:81:34:3a:e5:b0:55:d1:3c:95:ca:b0:82:
+         d6:ed:98:28:15:59:7e:95:a7:69:c7:b5:7b:ec:01:a7:4d:e6:
+         b9:a2:fe:35
 -----BEGIN CERTIFICATE-----
-MIIE/zCCA+egAwIBAgIUfZRwiLoHQo2qr0++whpI8NFA5kIwDQYJKoZIhvcNAQEL
+MIIE/zCCA+egAwIBAgIUM0QaqGwB7PZg8nBRCkzRFPq86UQwDQYJKoZIhvcNAQEL
 BQAwgZQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIDAdNb250YW5hMRAwDgYDVQQHDAdC
 b3plbWFuMREwDwYDVQQKDAhTYXd0b290aDETMBEGA1UECwwKQ29uc3VsdGluZzEY
 MBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdv
-bGZzc2wuY29tMB4XDTIxMTIyMDIzMDcyNFoXDTI0MDkxNTIzMDcyNFowgZQxCzAJ
+bGZzc2wuY29tMB4XDTIzMTIxMzIyMTkyOFoXDTI2MDkwODIyMTkyOFowgZQxCzAJ
 BgNVBAYTAlVTMRAwDgYDVQQIDAdNb250YW5hMRAwDgYDVQQHDAdCb3plbWFuMREw
 DwYDVQQKDAhTYXd0b290aDETMBEGA1UECwwKQ29uc3VsdGluZzEYMBYGA1UEAwwP
 d3d3LndvbGZzc2wuY29tMR8wHQYJKoZIhvcNAQkBFhBpbmZvQHdvbGZzc2wuY29t
@@ -174,12 +174,12 @@ BgNVHSMEgcwwgcmAFCeOZxF0wyYdP+0zY7Ok2B0w5ejVoYGapIGXMIGUMQswCQYD
 VQQGEwJVUzEQMA4GA1UECAwHTW9udGFuYTEQMA4GA1UEBwwHQm96ZW1hbjERMA8G
 A1UECgwIU2F3dG9vdGgxEzARBgNVBAsMCkNvbnN1bHRpbmcxGDAWBgNVBAMMD3d3
 dy53b2xmc3NsLmNvbTEfMB0GCSqGSIb3DQEJARYQaW5mb0B3b2xmc3NsLmNvbYIU
-fZRwiLoHQo2qr0++whpI8NFA5kIwDAYDVR0TBAUwAwEB/zAcBgNVHREEFTATggtl
+M0QaqGwB7PZg8nBRCkzRFPq86UQwDAYDVR0TBAUwAwEB/zAcBgNVHREEFTATggtl
 eGFtcGxlLmNvbYcEfwAAATAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
-DQYJKoZIhvcNAQELBQADggEBALBxu7pFWoAlAqR+iAupe/2wu/ZGtbr0x+NhIIwD
-FWb15FSC7xOAlyJnwdGIXeItV/bgn2nWsVy26OCYicgUEta2iY1suaBZT5LuEVNr
-fZNKaQqF2dXSYujJtcZOF/UK6PMthmEL68TExmd17ZqfU6BxHqCQDfkDtLyGGW7w
-O0/o7Wj25yNDOzaDg0tGoJoB0MeFu32UoCE9fjxqPYHbQXtG2BVi1Y9NPcDbmsWB
-qKzah5nH3bnxFK/Rk+PzQteiBFEhVCnDRfa+XPrN278veYFC5Y9HC9RUAbXCSkbW
-qDEuZIA/SGGRKfOqQ1xpbvEBud9jcT25Wvs2wBGiwzCdlcM=
+DQYJKoZIhvcNAQELBQADggEBAC38+TJavtadQouGTmciw1AtyxQnHZTzzYhC2kEc
+OSRnp5JNJ+pWghm/EbJDpI1dh7InZGaCgd/E/VtisMJNnSnyQTLMLrXaOAYb6H+M
+bj2AHgBWSb854NpoL8T9AObRgRrRSrt2Us5NJJ3Eo6fxZRQvH6gtxsvOsaeJdCYn
+w/OjhEw0ARQDfRY6yIslLnuQzEaxUjS6k27v/kOjrcZvUfu66jjjb9buY2I26l4I
+tOIqRonjrrO0Bu9jem5d3cnsAk/3ZMAnB7RvShhyWzR0fNCpBI9Ai2o50msaAfIB
+qIE0OuWwVdE8lcqwgtbtmCgVWX6Vp2nHtXvsAadN5rmi/jU=
 -----END CERTIFICATE-----
diff --git a/certs/test-servercert.p12 b/certs/test-servercert.p12
index 596d129fa487bad28df7a7be4c0c77ff2231b655..64ccb1041e526865ac28da13cd257e574adb39f3 100644
GIT binary patch
delta 5407
zcmV+)72xWPD~&6VU4K;T-@KtJ1xNw{2mpYB52)c#Mq|fCh`#1Hl*owyAR8;7J#<&<
zMU!N|1?CD(bjhi+o#Tz3rC#lXnGKz-dewq}jINuUL9Fz-Fg_0gTzs%`1G&!*LuK2Q
z*8auqV;u}yUnKl}nBFT6LC_Eiv+fU8I@~`;@#%c`rC8F%tbZ;WhEqRpZmO*QDjJF=
z#7%0Di@OBkY0pv<Tt8ZHHcF{>XVqf}6UK?`F25v}8wJH7__#pKE8H3(-#KNQvUb@&
z`JH?mz+~L&F4GCax{YHqQxG{p6dsM|h6m~(-X&JdoeiDS!Psv_xAk`5PMo#O`-7&v
z?hM`oIgk8=qJPLaby(t1x|mf7HSbZ31J=z88araasVm0ma(2Rz6{d@lh$~C2x>$Mz
zT2um+_$G(IO93UE@gI`g<de9vv~Gnkd$y*fLkhC$su9-g3<YId{DALbg^CJtM87Fa
z9SQyli&P5TZwJc*^X{q9FLQoE_aJ2`9Tsx#0;MSz6MrXvMxi?{jp|^)3?*UFQlUSf
zqK)(QSq^WWNJ|-b4z+y?;g8d^Pn|4*<QX>!D1HQQ!uR()+A_tqa`@yk*+cFkby$tI
z-Xw%-*A7O~?K_1?LxK2HUNdc949+$sWd-A{W`l&Gq4}J$e$T}+7VORU9T0m5*S?ZE
zFU5MtHGjKjb0*fe9QoLX%Pv6=#pQzz|552#idrh_TFA&Eh^8P#bTYQLK$I~-->7>z
zC-uLdRMv?yGu(@p%6EcV|Co`cZjWfp4t~jThM#0*_!ppN2kLZX&fH7&ggIh1J8YSz
zH9^~)iME%LOxXx0$k11n&yD2zCnw6MNi`qfR)6CnY^REUE>E)G^RI)%ijHf}UKJou
zU{XX8Y^y3m_|}$+m`#V3eZav6n5fv&ODCf-=wzp^3rUe(M6uz-Z}*ats<5t5HS;vL
zoCE43-)|Z{OHE~SYn+Z>$fCYOq*_>v6<B`{zJep!Q@ezNGA*+V9tHfTs5)RwC<32q
zcYlor3N71-V?~`rtVNh7w6R?kklO;V;`uDWJNXzAX0bxinx!}dDwL5i$VuzFCe~i|
z#*eq8a{+6hAx$BsUZoj0e;F_~E)I)m+MDIU?9uP!D`K%xSMpxI434DCUx0r{td+}~
zdgGky>8xKZdo=os@><KVLcXZ>_gJDZ8-L}><q_7T9ITfQo**ZHSLz&EOVhW*zu>jk
z;O=%%nhW*Ht_P(c53`YEr8b~Xd0dhWlm0TGrvYzQ%WTg1otG;vhG=Rr0~@;pU-g%C
zj+M!ZdXJ-apgH5_Ub+vC?_74Jn|@oZzP@%k$H`A5eaXoruO$T=Up+^ro;{!QVt-rN
ztw}UmzLtK5;Q&j$lv77wB#n1EXCCxP9)<-KU-xCY+@6TRm1wOFxHGb`T4dACX*(Fe
z0mo`xkg@_wdt%PYJYXSWQykwvHJyhI+i-ZHa;)@}EmT<70OLs?V)mp{cgdfSm&t10
z?M9hX0;HEuh`rCkontTXyfuKgP=8oA{C}CSk6@%}12NHUNG;967K3<kpO889Gj|K!
zX@IK1*-aJAmR83|2@O&p4169)3mDC2z8&m_$Qd`R6Ur7_v(+c0O4)CAXJuSf#ETsb
z7%J;;hBL0I%Ch!cY%y+YU}t=)>R#qq!`IIui%Vbfk^NUmaXWekpf@{{?tk433^=Zw
z?OBc*;*1@G_6VRaSO!u0p#GJ~D#?fO07C9(qP3AGw8LfNYv35NK|^ircU9OOw@ZUv
zGVNpl6;Wt|5n3~q42nGF#xVSe7pt$2i^9%SsO#(IfV&3V%J3yaZIi>tb<-%+=|k|=
zuobOlPW?jRO+f&8m9)enuz$=KO?I<2n`ast9|HHC6Rvu`##OgS(e-5HC*7M7HJ1!#
zpf`k(4kHk3o=4#Z!pTI+dYKIxolJ>04d|jmB<ZAkjadwoRJo*QBXn}(1ue(k9gtz;
z>ll~h6Pvd~Sci#t^kdCk1pqFD9DJF0CYVynURh%yx=U)efn)5?Hh)jGh-CZ^!T8{t
z3zO(~wrC!YsEN?A<jQv-&Jzu4@`(%enLNqMuf{uA{&Q6NBI8>|>@y20x=4A6YY}%d
zSmMg|GodS`K%PuauH3zFb@YqEO!eC55>#KYk*Km9D4l<jd~O_jyBLFDX7uCCYqok4
zFCqhV)r4kT!iG-=aDQK5j>3&%JR*?#x*<&A)`ZgZoOqvn2o(<*AcriGK?SSY!?~vQ
zU10FIB`4YeF!3+c_wVq=#76PGkkYUh>5WpiG!)T=f&wP0`K3sZ!NlPXz1;r{D)(t=
z2;qd>P~3_IWT(29VXhj=iuPBc^HDy@LRv#>mF8GnNl<U~wSUD0i%`)RoV~omp4bBl
z&=!%0*qGzk)t=7<JZPsb%kj_%pqVi&p{X8&>{B5<UUs(EX#EGc7+7gOiW{K^MOR)=
zAK_(VI!ZAZIE_=TnGZ?r@O9)%SUyB(!-S5OSinJ)|HHh>%pMOn^54lXIf!myBN5~m
zy#&-^ZG0Ffv41)vW+~b!S2T^!_LW(o{kpEH!1gT7pb!?FGvx96a7<ozb%mT!usLb-
zR6dO6h%G1-KVkHv5a!<GOFJab#@x7W<}LpnnCCgmWht{{q1ZLQ4G_sa8iLK4Uxy0t
zYuU#D(Ws6uf*4E2WUK_h6F_eYT?>_XY|BM2pfpP>=6@lpG{7@^5X!guj7uM)fe#Gu
z8jC>`lxmc1p_`^L(!9o`byUhIm_P5zLxeosQG-)({~@$r7JH=>`{iqx*L#abz~<#U
zSWW4$4~VB%oayYk2;Uj$eUjK*x|`qerm!9-UPbEqvi@tMtbI|^e*(twh4;tQ(Be0>
z*;E_d(SNS(M!TU+e9`f)_wJ^`=Uij2Kw(-%AVOs7yhq?B;5*lfir#QeQaXf(?$c?R
z-hLylD9{A9gbcfDt<Fo)bfraJT*>DLnPn$Q909u65sn~MsHe*Z>t-Zu=A1rXZ62`j
zHz(7rspxEnsFW|)6?oGZWbIl*3?4}%dxLk&wSQ`Qr6}*KOza=A!xG-(cV>)yDP(pO
z*=tqsuxIMR+3=T5gWPPIT|AjPJjAZ3wE()HkRqy$86NO=B}9|r$h2#zgrR9r>_Wsv
z(_rAP*Gbk5^-vDEcywEh(oU;Bpq6dyxmLrLR+cZf*cS&$t(EJ#xiJ9(vrSLuk*B#m
zlz+n%uZ!=q3l!o&@x;e<PjQjG;iy~u8u{V~D$JJ4?l5F1@L}UZuJR24bNe#Jb~KBT
zDRa@?e$!AFkHobEv%@-yFuBWll~+rNze?wup^}ABler=Ps2n+{LT(>v`5(G?rqWBU
zdr%1mj1+&@ubl?!dix=nX_6p$R9?y*fq&c>qRMDj*Igt4Xub(k)-N|VEfr^*Qc*)r
zNo5QF%pXM5(;BEnJRP8yKrVzdVnIYRO5^p5nKEx));%Rrn$wjv93Sxz#nr)+d4J-A
zdzg60GhZixA+I)X3Fe36i|kbOl5<svn=`z=lixoG#?anDddUE;<ZFEU1fXygqknRx
z4Zm|3%wt%qP&vh@clp07W;6pRyXOKnz>T6xI&zU=g-!K$4mYC(Vxd%{VQ0~CK!W>z
zt7z3LFg=1<YL;8;zW_HFN0GF={hEVrI0i8posVs@Hk8UsB!MXJ?OSAW+6?evluWp9
zfm~w7MxN4biF=?tnF=t}mf8C}rhn)D-<q`)dnG9+Iw@C0f&JGAKL)G?1w0~nju+kt
znvu2qDACgY5rS>FQc_)x8yB>&c*~|`L&#69Mtn_Zg7C+9ped=d`~PvZG^0$$AMTGb
zIFu*O2`n|`7XpDZT(U8LAPUX3CiEm6euP{&nbnS}v)h`rzGV<Tg#mm*m4D}7axTTP
zkLz#VG#Uo3X>SB01|O{%wd3Oq4`}8iN_s7)hBYk$@kJ9_5nEPO0;=5$kk?uEFF@-H
zCh92)?~~iVhw=k~XnB|~fq7mn{2alNSObf&Xk9u^Hr;pQ27OFg5A?9kuw05T#YN(S
zeWjGe=`aB7y>%ES0Qo6yVSg4a$E{md+E%Fc+V}l6dO6dI8PnC`)k^hDK5(@&`#DsR
zpm-3XWJn2NzA*Dv;%1y;185N9sy3H+Tz4eZ%G3x@U4uob0nwikZccYe1>gF~5>TGe
z-A)s(F*NLYphQO!)5cwjBy3GsvHYkMp>@BVD4_VpnoE4@&&B)0IDZ73^;z@~?u*j6
z-XDDot(3@kBDa^b*n=^gzle^2!4SRP7u6!{GUt>n!p`)7TC~8o+^UAWb+FDGs!sn&
zXpe>8A|ZsRbiSnE+*_!zI=UU;SME|wFXgMNFE0+Kbw1mqis&P;HR#CwzK6vg#&XJ)
z48^8Dlwj8)nHMw^9e=|C_d9x5>x8BFv||e`aBMP}+3pu%*BCh0!k2;vsvwAca7j1j
zgzq_m)bVP?W+L}p;q9xLHT$nc%+(u9^Ot2POy#}hFgF@k;Lfh_YjmvhWhoM^0?twr
zNKLrZl*jSVa6&P>_=C0_YWi%>rpU;Oz!}XyO*C62vG41&yni=3t>JupT{ql|ThmEg
zX<|QwH8&wIMHerTsg*;WJS+MlkH%mDMj`*HoIk2O#^+d%h7qpG0G=+qCK|Z}T9C{X
zUU*#bR2-y>i_@=I#3I4U?{ttFbIoP54ZiGp`;agsHoRk|ljlnLU-IZ8(qpN+OGD4T
zd&rEaMO61~C4Z31uQ8pG*F_Fn8pAx@4koVFT?S8ib$vT9-012Kk#BN}!ot`DXjEev
z-@ciPT5eyCJkMa1vX-w=U#V<PzD9)UOeSZ6`bq>3m3mjaKEQv{p7N}KGILbL_9m;<
zH5kP{O}f<L>k5Iw2(Vvt!9oq}Kl81lUD`4?PZ-vmyMLq$giG|Cwj$7)4k0|{W4Chn
zSRRv-_+h@>)3xU#m4WYBjD7BJ0~FfI{C7&p=S!F6K@>H@UZ9Eb==#`YK-XT(4Na5!
zx9b9eBEAfx6G)D)(${cNUc1S1fb<iPRI;Am?0=sTI1<ydW&+ZKW0VWRXM|$^<lrC6
zS$m4|5r6lBzDkonz9itl`j5xd!SE-w$j$O2kuo>@rNZX;xiC^7no5i^U?G@J5c^U{
z6jSU57-kqG9hnR=k3#n})+WSa!Qb?mFA2NCMLmi<eZ^mHk3e>vX)htbLw@VyI>l%m
zeU?o@bpas;NK)>+D|xAd*=D{iv%_0A$GQj=qE|p$uSpdL<=U*}rjdI#1E>64^5fz6
zm)!<BRo(ZWR(_+~7y1=6Z_XZ|^R@OJHZ@%A0VHyXS}hCsXg3wpP}9kM%~m+%`(s{?
zMNqu&=CASov4^bANs|>2Mt}KG-zuO-y|n@Y2ml0v1jynwWAv{Wruc+*^IB^_b`+2>
z%zEl|7rktBeZ|@?{^gi0P>mSLtGd(|(sZ2Bdxg7p>Go7#&wA~<{_~Cwoy+(Q*bZGx
zs9YinC*7;LsAz%UM+Q{fY{2N0k}p}A1vGWbQf5-s0PPn+>nnF=!+)`d*Vs+Z{eBTy
zLEbaL=<Eg-VBlU1A8Xgd36(P6`7PO>P$j1ly3-IyyMpn0dD~N~p8}Y7h)#BN4=PL)
zgt~L3oUY_adhmwekKP*goDEqe^0EeDS0Y#tT)FeF&n*J)n9S0%3lx-XK4G)Rr32^t
zrHm_A<tUqj6RUr66n}cCNLMCk{!I6KjTaX|&=))SWeUGKuajp!L*DO`;#Y^F&uS-H
z4evMhy@3N>Kzxaezw}gC0@5(#{9FXYQ?>viu|JotT)ZHQO&&iP<1jVsam;)t^FRQq
zC-Br68R2z6T*V)md<^j$SL?TDUggY-3SECU))`@(Phk5}0)L_-*I+^wGy8XsewsT(
zR8^0T6vGW7d5n0(!F=zN2*E!y_|khnId94>R1@IW^{)DwJY4k8tPL#~BXHihBl)<6
zvA>P9%y5%%w>!ZDaE+Z$!R9LNzMJ-yB%@L?@VJi3KU)kX@@zGghO#afuo(4~VN6&L
z61tS8%6{_m*MG;UMsE`1?XS<7;tD&7lTd`gQGnMTV8ChL6+c{N=!24^pvY9X=>b|$
zLY(j-GR90i{LjuGlinM71wZnxG|hG4eeOUGwm)*NsIZAZI{?(p@=<?*$9io)>BGKG
zuVD2u!vVNt_9zN!1H<cOpXmW8zcHRIZdn%jomdqXVt?F=wtL@hh~m$@rN?Rmw1E>1
zpUDWv+<+j>p)}zgIRotJ1ftZBEMc&Mk&U@M|7+r7wpCKWDv|b47-nFM<$>g(iSI&@
za~sB`OcV9wxadtA64_V67R0kt+C<oWzs6W3-j=swCrC=rsa}9A94gJ2t7*X=Rz=oY
z(32iO_<tlknSm{l(DP)9jM~hbke+5sT;e2|hX@qp4tlq2U^aL^`JNy|22SjOaAvaL
z*XJ0o-f24IGXYDxB?1uRVE6Pi)kz81*wvHn(0ZA#@}$oI+Sm4Q<}+asPoK1yL`4m5
z;_O`0Y^S`$I&;w+PND6vBo$+|nlw>1L-)l0Jb#3bhp0@CkB9ejhODq|{}%s=xW3tF
zpVGIU{D0J?9%1xrdf@&|>&N@D=G%>c2iNkafZl7zGBqV9-<`H__*LKeqxv98HiejF
z^}y$~x>OHI4D#lMk*b@jS7RX#&@@2_F{TUNt4lmcqLF{c&JP8rJ?SaA4h?uVoaV={
zgntf8YfqDWKt=`_-1hlQ@ro9$LagI#*%vfv2LjjM9tqGr94mLP=w=maCD|Q^_QFkR
zR66Sp8iOo>o)(^DxFu^zAq?;4dk4|9V&|9nzg0Z~wq10QS?E!0K}<r1H{LXw^Cqgp
z5O(H#Rdm^^i!wxFOJJTV+`NV+7`D~xOn)N_6N)bx5?G+&#97_T3cv7v^irZMT2#nN
z9DOobQHogYKl(6ltMDd9V(+5&2T46fT|%2+<YE4EhAK-j_UBb%mjQH5>u6R)5qG&v
z<&;fagpB-Xia||Q=`+|wW<e$~B`_lf2`Yw2hW8Bt2^BFG1QfP7b(*Xx=<EwZNIZc}
zUUR@2%>;8WF)$%82?hl#4g&%j1povTiI5L`yt3$*D#nogJCNrWOaVt41PI9JJ>;xp
JskZ_G2moTeaRdMW

delta 5407
zcmV+)72xWPD~&6VU4IO#>!XzS(qaMv2mpYB52z)X*+Hc&2=rB7h5QViVZ0+!80t2g
z=9-a~6F-&JcI}UR^GP?fhl^Eb9)PNu1+Wg%`;#<sk%k}A0xiku6Syum++Iol=Vcpn
zARhJ+csxk@`E2N+_}wIe#Lc*a7@T_OqGD*PWt(NsVZ;}SPJfkkh2i2p&p=8N_i|6k
zzfq_ZH(f%{=y$VIHMIAA-xm4x>*BU_TfVt^I+f@FoS;omWjp~QD}Fuan9f@DzvVzH
z&^NIn5ZkffCOI5I-q9Pt1a@TLNKv=qp<hWYdWeT%8o!x_SlWWQY>Kj?gUn4F<tQ}O
zY5Exu6e}ci$A4~XCRWC-uj}lsgvpCKLp?Ok|2XK>_Mv1Jwp$Z_3w$5qK0))O3a36R
zL*$uW(i@%WWE_z@){~=;4L(IaUz3|WiyLB|$J)zAMgsq`+SnMcBI3q07AyRX3t#(}
zl<+ALw&nj@!te3@cznLxrey$j#)hBGtGPlUN^I@r*MHfP*IP$rf(DoAGQvG_lWm!)
zD5Bhi1ds&_W#Hr$35RbjVrDAR!bz|XxaU`E=q?33X?-BM3EbzV%+=imS7`yngR#Y&
zH2Y!5rZb&h%}_7cKjs!dJ*}xi1a|!({?sho<btNM4})Skkgx9q!iINJq!5cQiz68K
zrL53oK7adXtqs|dDHhgX39H{81*e=fc8@L<*ddW_uQx7eey|YNmE?kzETr;Lytxd8
zhy(cq1V}EOfNw#%-jC(Ss^p~WkSczX^o`A^IV;!Xb?No1DHTgFc-1N~c{hsKNWA4P
zO@GOLYxel-ps-_`IRJIjD0)UP9*>bHs0ZhNrhk#(v9iX342!V5rtU@%K8)9`ny9BA
zby0$U7T0n4yo%)K=!G@?csE#_DnQqcJ%nq}-1|0kl@*Lnq<eza93sA}NtlvF<4(2U
z9xXwG8Z?RB8?Nk?VGcvAilz(=s=wf3LmFzL_Y(?g7Wh+{gpp3rts24GplhSb|0NlR
zXn$FN^rbk{6|BoRtz{NRnd8$p>&^^lKfy*D%Zd5R0L@vG3&eq`=S@A@c2D2)DNbCv
z#-pIX#_Yoz78`QDI*39no+a%hXP#yVr#SMh8Jc4H9wA)dA0Sxyze6Y~I?d9_swY^U
zOe03?M{$c}w5KARoQv%ouxBv2zp}@FF@O1Lm|RCFJ&6eykxxqZ5vGGyXrFAOkl^RB
zjV;1YAOk9G9|g5$JIMT>`3}VR>H{PDkYw&yinj2K#>?N`8oKWcU2J$>Rzg7%#s<n(
zY~$v0u^e!cd7waoUc`q~a&c6HhnY)<j|6=qo|iZ}SC)I4@y00D#m}B14CNa3j(>c(
zDg&Vc4qF<)qWQhp=3J}7;rm)b%^rC8epQ@Cr*sm}Ajo+)@9c>ygvb}=_85nsDgZc~
z#si67DBQY#RY*2>Y8A@kW$$G*06tg|ax}4J>=ig_Dbv6X5Pt5WG)|R6bCt6}-t=Tx
z3F{GDbcERK5&O2xETQa&b)5{>lYc3xnAFi{k6?~dsN(@7@L%Dl+bd-Nx?r&62@>4K
zm4Ni%J-e7{gu@SBb=<j*pR;GypWbXxPav0iCRA2K_uoe*+PW)hnXWB85UUYz#l=z~
zaB_%b+&+R|Hj<0Xskfv!gXla_Z3C76%5lzPzezG$uOA8cq4}#T3y~?t4u6zQa@mYD
zW_%Dp+!`O1$;Iv!k?o5K6aTnDMC7UfuV=Esq%Hu!NJ*Y@nDsf+z&mcxYoH2!L3|5Z
z@*ehdF}4DP=d)%*+(cKX90>nlLjZ6lP7lOC0ZCIFgYOld-@W?NrBoi1%M~&r3W606
ziIMaH%fIe)X3)__Lw$QZEPt{3hJEL16Nk6+;=TdG4mBfg*Gr>p{TGtG?j>~b9sMQQ
z__9Ous{bFJ8pE8QJXv)R8xT?s@{qdBTPq-UlmbD(g42)hVa0R8v(Wtg^;MC^z0#a}
zaT1?v{HO}EqnKu@6bq%?vZImCRm8cLoK+XjHJTr4^aTVZrB{waLVrel6MvRCi47qs
zIr*;Q9v3IC`&O6sMjp=o?4VtyRs5Dgi5m<{D5{kcJA-`1ncu;P(7^Kbazq{Lp1cgP
zmq>YKp`?56qMt{cbddW7vGjW#{$_zI$4eHQbb=X~H$?B1>>6u&OiYeEvJ#!q>k0Xr
zgS&x@eUG`UjO3atDu0i=y1)^K#a~=}y=FXX{K6k>fqI%PMS<mJ@(3kHUG<lv1BSw4
z4P#oO+d8`BJWuq$tgK)Ot48d4y~3A;)>Knm_h%HaoO^$m4>V<C5{eP&j`rc%XWCi)
zBo~7rI?Bf<5@d7WeYJjy|IHz@EvA>ahbtA~`lIAAH|lPiA%9p^B$&si<LzKimlH31
zhg8ylNAMGf8Pu2(12lz26zX3~wo@yw>%EN!;6D7wxOEFw&&vT&3h}%H=2rUu2H#mO
zXsq(?GsAU#h)Xh^n01GXMGizjqyilMUej?1y)|MqMIR42obKFslo@{5vFv1bz2&Oa
z+y-N!6gqA6PJb=n8)w`T{0`4U9MgB5#(7@@-+&HbS0Po^kowY(>&92iy&tJl@<J)@
zoAx!?;o=i8fL!<Em0$<0DI7LVbQpE~U5IE8Vu9}GuHq3;Gn4vw6ZW9-c3rw^ybXlQ
zDoffEV%Ku+0FZ9J%O@)cB@?|tG9~#*Ce4YO{Z%nU)_)6pc^f-jOR~uz-%RCG=&~D}
znTH1ZR7wA!U2Ilo40fWv4{qqYwZ?76)GkPOW*nHRZ%|$NV8H8yu2WgilOscH2YzC{
zMUY%YMQU4jb{=UP{#q%|!pkQ|m$Q1y8QsOd1vRB{zJy0e6>52+2`elE&KbcLEpd=c
z2WTh$qkmL@K><PxrJ`zrI5#q2+*H}#KPVl?enCN|1!APEvd<iv!}>n*i)6#lw!xE0
z$uF>_lE+IuVnBusL&O;Z%}l8;u6WL|`BgY9`Bl0bLPx;)9{m+*u3eZ7uKX>f8ltc?
zA(3We{re(QEIpHyIYr6~5Ae!Mv8|W(%GGF>8-Ej^2N`VcXbL@AMJD~}&G~roH^nzP
z(M?z19+uT^?`X8xLGaSw!1LQH$RauS$kU)rvFAwZ_(D|mBScze7+Xq;2pE)Qj6s8n
z-GH@wWagi5>I7<7=OmP|PENW{NJr3d&*Oh!@?*V^rKlAr&=ao;-Pp!KMn@aZs=(Hb
zVSjS90~a8fLhM9(zX&koXLy%8BmjdoPRiRlWmO*EgSukC=oT_?%A2VJ+Wj|UJSlr;
zHW<RdDi-a#B2?R8$#jgyJsDz)UCM#>N&5T^CMczwnjH=1PbX2i?w_V5IJfB&oSa>&
zo<P^=xC<W0at3u^R}6jPme8haDbLEwHGleUxKu9-q5fCVE2Mc@c}R)o@7%$Je--6^
zt+Mj71?r6qC^9bB4`>@?z-H=r2%9{qJ9F~mx9E|laN6MY$jg;+BWDdq6A4;F9WREN
z%5J(IGF*r{d$z!Q8cZm!2!b#|h<H09W!A)_^Upm;_2FDgX(Flr_V1W?@!vJlMSrN0
zdf6KEBfu~)EPzNnm%Gp2%(Ky5yA6RfyPu8cOn$+|sPN~lhczC$_X3I~g^R)jea?)I
zXE)als#SHH9E~BkSf(NjTRZnsd>DLc*IhWmHsf)kI%)Z&C5$Y+t~eHKWO7j0%cxxI
z{johI;vsyJ6mkt!soteA3hYvtrhjDTI&$biZpzlig5ko!+A*=0rsf9xPv=4(anXJ@
zDx88*r!HQ!Wsf<i(v+Lo3$6dX5oB?Q8;oXrBtdXL*JB4^=4Z8=LzV~HAe}07tq+jd
zx+(S$_Tm_8By^toguM|>CL|8&qme%BlVL%bZ?FkrBsc=>kxR2@s`YM7fq%Ue@QdPQ
zNcNmJZCXkdF8#^RbO`C0#_p3a;ro-6A8>?`;5vdQ$Z^I6LQFzc=ljg*V-naLSgTrj
z#E+rD^5i^+qA>dJNO}!%Rhpg+9z6S$^#Pb{_}Ltcm7oX*mP{DvJzwrvY<~<0H*jO}
z;RN)Q9@>96^KATFz8&my{(oQI8g{G)v?}!Gqrzyl>^<{aV$$n*(vXs>zM-XSUDbKf
z*JzM&-B+tt$sRb*(PkG%;8MIm0&By!e#>i>N)#0VzJ26(96{pn8ZYvPeJH4Wm+K*K
zs3L7FP=Al=q!Q`)SYss&pum0|A{H*V0!<n^tu$5Lx#{^UqY2B;H-A*y01Zs9`S`S&
zd!5{R-X)kX9qnXb#x^5nZUCO<=NQI|$Ots3D=c|#fRMJs(#(U;Z5_k|@5lwBk^+=}
z1!&H-=&TSpRvWb|aU8ZDNKaXNq!zB0p5l~n1}QE#7;#18X6j-#Z_a3e2Ew<HE(7L&
zQdh-w)uiu#-Yyh|OMkxy;o+QH9AYBIeC<+ejA>uhil2c+&qWT~#YAAK!~%L|CAPFR
zm8qrXO?~Oncsq%mN|rr1`ocY4%4PEE?p{G=d@?=c(_T^8cBy+;81{#^<8tWSLu#8m
zzR*Mg&-4^%?s@}9x9^WJNgn=_SUEUZaEzF`X9hX=`g*rTKYxgb*H4j9t5DByub#Ch
z-BaC6voCNBT9@G}V`N^v2FXdCvByyIN7dM7E8}fV1HuHydJC;>!56)}UX;o!6ZgNC
zOPubdIc#TbJz$6gmdmR;xs{sjad7OgqcciD7m<DeQsCmzA9Lc{BF)yTlvd3`06{%X
zU$)eMm1jZ1Cw~(JUquMIcq;zOn|qK<52rjCZl4K$h8MxBcI)Xp3FOhEECpxe16*q}
z;D1IPVThM=lyw67SPcv{#ZW&DbwtaaUl%lj>!ZE|Vpt8_48hZD^q{DPoLe0~szr;G
z)={ge?T5z3x5}q@lD+5M%;|MG_i((uKLi{2hOjos3V&#qaUH``(6H~M;8tVznJvuJ
zF^+LFuaVBD-$Qg2|Cf`ol$_S<izq*KjW1N)j@N}E0^{L>RhVkPrSvG74CHHcW%z&~
zWM{74+D2<|&C_E52ykV3<}Kr#X=B&sn?MCs9uutk5ajbO{|*UzG`76We3a>J*vG9k
zV?o3-mw%vGr^?JXjr4lFVXjN9UvxhHNSe-1(>LzP#kgH-Z&a3GL0Rz3T8F)iIK+G>
zEntRI4QF9b+4R)*$gd;r_~(C3lJa=wq@SLKtR@8zwOB%%U39!;6sRWnMh3P5vyKS<
zdr@d*H4181qw1fDZI3&hSXc&z4)-{>B*8Ru#8(@u<CnBVdbA65;KVm{`tSosz)E<i
z(zRh7ro;lHFDt~1)}=L`!{BTy7<n6jv=B5Pjx!G4$)7Y-&#tF~<T^P<<PaWDXenY&
z??Uxq9fzY0Z}lzZev=gtMt>-Ggo|gBykP<Y2ml0v1jtHjd<cV9WNDr=QU^LsAhQ9#
zHecMv?LwfoLMW%%n~9^kE+(FhccKX+D#p8KNxZ91jA;%9I6Z28S_x$g{;w!=|Hq|7
z3Wdcydy{~FM=;Y|JL)vyRmOYn^;pDf#K6|4go@RW^hN)^dyQVT-hZg$j9%-68mRA2
z4Z=>HfSm?=(Wb9+z;Z6*@_Yq{axS88Fdcqr-nkLgob6;=?1*M6Pg8j4ASh8f6rtjK
zQN}AskGq>VC46_0LT;5T^1W7uU6gbIV`dg<@^^bA!MqILAlj(Gq&VV|SW3G-g!xhA
z$a_g~5>Q0(24A|h%zs+iB)ZcXY3cPz*x?I4BJ6M<3#??%L^-})31PsT2Z#Cmi>So<
z`{6>gF5q+L#>n%)iYXQO!~UAHNXSQt;nvor$<A1!kutTEH(@q`?V=ylwQ+K-S`ZR?
zrtjSV_9!l+>Av?4LVo^1t9F7UO^1@YZgd7KW20(13Z7@VB7f7e#zAt<fXra!k+)Ox
z*@MhY#F`9i{(i0T1V5^x=KSoRMt2ooFG4qXRgao*5v4Wyw^K?aGlC`3>h+F%MOS<j
zOi6;*ka!)nO?TqmkG>m~+~(;t;oIbL=FoJmZsF1ujDnVOt1h+B*1CHi^Byrcq{NML
zCJ^`c<~L0q@_%HqS9@I0<{w}Xtw<KNzQWJ^l`5@{q^MLx!8=Ns$0D>3d#O_QK{hh$
zOEtF+%(k_9&+tszrzxU7ZTTwVncM*mh{S#*s@7<`p8UfwnO$~RD!>n`1BP}^?9lFQ
z5l2*8>^TG-Dw#ciGoEZIlB(MS$J|qub$3(jw8y^wqkoU{DbPnZ_tqLP2AX~p`F7xO
zjx1Z`(gd0Tutl1YIf03cTATPV$u&_Mx`0P;{;DqqW%&7FAr4cCl*XC2;=sPIUk?Lo
zxNDP_JlT2rHz3t4buKb447poR`Sq)SIHJV-^?}#0V&`&wGO=k2G#6vc!d52VS#9_p
zaMj*_w11uKt}%R}=sOT~mfY)w&>Ss?7hcJtoG#X$-JGxe4Ke9;^XqfOqXdmq`pfj}
z`aOwhZprZ`wtxo7uq=-py}VZ!QhMb!3Q_0L2nI-dDnjMmxFO+U8rX8&Sd8c(Y6t>g
z`=5)%h9h+eW1}Hf|FR^Ck%bLhoqAb$Ey0)*&3}>S6#y8Vwq~3P=;l9DV)^fo81Bc|
z`JAuEUdb~aasVuTK$bCcBmKjbR}ll%ja5n|g{H)E<}>DC3n!^rMEI)=;k{t>c|9-v
ztyBMJW+={HN>h!4sfv;$`ujI~zlp8QUex{;syndKpq44gPLX7z0A~tQ5p^O=85Gky
zE`R8GXk4$m6rah1@tBN+kS~iV`C7#K9Ah*Yj!CEoUG7lO78v#B0zDn8FYqpo*DZET
zlKMHlxQF@g5SJ{nDDkhb*!A_8?XDLU@pT-}&6*zTP=_2_cPF~u-20-RqqK!9T(Ff>
zuIjax$Kx`}(pGK&F?t$P;=HDj_`c->ihqz-)@rQXaXUm905aECMSAOZ25ZJ+umKJ_
zZq6>7s~@#vq)zp;Gm1b}d+Njyl_w=^JaBlF)}J>r*24AuSpZ_F*5BIa^dZg{ZqF7W
zI(z?0vkY^c9yI%fS6cXx^R7)XB`_lf2`Yw2hW8Bt2^BFG1Qb$eYb5nXQt(R+hdjEU
zSsOV#hQtRjF)$%82?hl#4g&%j1povTATQLFD)iiNXw!o>_~x&me4FwC1PD8)tMWb;
JH|zoe2mn#0c#r@9

diff --git a/tests/dgst/sha256-ecc.sig b/tests/dgst/sha256-ecc.sig
index 361ba3e3d35bd60f690ef046ac8f15ce4b75f375..942e1a4351c03f1593207d3b14c0dd88ff7ad75e 100644
GIT binary patch
literal 72
zcmV-O0Jr}zMgk!K;X074n;;2=L=4VGh5HaK>E`E}Xw9xB-JKXas~TQ70wDnRd_XJA
etc0zOLBYv=PRhh>(wM5eR7v+pe1K~(<e3z4?;&{r

literal 71
zcmV-N0J#4!MFJooy0-UQr}>FAvL*P}wB8pIl1_(<$rD&>dl>u$KjJL{ApqX3Ko(QP
dHKrGWnTT(9Jtx%aMWw%NOIBuVC*iJ0){%MfAW#4R

diff --git a/tests/encrypt/enc-test.sh b/tests/encrypt/enc-test.sh
index 77b311d2..21ee04cf 100755
--- a/tests/encrypt/enc-test.sh
+++ b/tests/encrypt/enc-test.sh
@@ -32,7 +32,7 @@ run_fail() {
 run "enc -d -aes-256-cbc -nosalt -in certs/crl.der.enc -out test-dec.der" ""
 diff "./certs/crl.der" "./test-dec.der" &> /dev/null
 if [ $? != 0 ]; then
-    echo "issue with decryption"
+    echo "issue with decryption 1"
     exit 99
 fi
 rm -f test-dec.der
@@ -40,7 +40,7 @@ rm -f test-dec.der
 run "enc -base64 -d -aes-256-cbc -nosalt -in certs/crl.der.enc.base64 -out test-dec.der" ""
 diff "./certs/crl.der" "./test-dec.der" &> /dev/null
 if [ $? != 0 ]; then
-    echo "issue with decryption"
+    echo "issue with decryption 2"
     exit 99
 fi
 rm -f test-dec.der
@@ -56,7 +56,7 @@ run_fail "enc -base64 -d -aes-256-cbc -in test-enc.der -out test-dec.der" "bad p
 run "enc -base64 -d -aes-256-cbc -in test-enc.der -out test-dec.der" "test password"
 diff "./certs/crl.der" "./test-dec.der" &> /dev/null
 if [ $? != 0 ]; then
-    echo "issue with decryption"
+    echo "issue with decryption 3"
     exit 99
 fi
 rm -f test-dec.der
diff --git a/tests/hash/hash-test.sh b/tests/hash/hash-test.sh
index b7a06d47..3756c0e5 100755
--- a/tests/hash/hash-test.sh
+++ b/tests/hash/hash-test.sh
@@ -29,31 +29,31 @@ run_fail() {
 }
 
 run_success "-hash sha -in certs/ca-cert.pem -base64enc"
-EXPECTED="46060ebc47f6f5486addd5658a7a2eb5ef7a9913"
+EXPECTED=`cat tests/hash/sha-expect.hex`
 if [ "$RESULT" != "$EXPECTED" ]
 then
-    echo "found unexpected output"
+    echo "found unexpected output 1"
     exit 99
 fi
 
 run_success "-hash sha256 -in certs/ca-cert.pem"
-EXPECTED="c68d5b8d17f551e3a9881968c2fe281bf8af9e6a16a1ecc97740a76d23858053"
+EXPECTED=`cat tests/hash/sha256-expect.hex`
 if [ "$RESULT" != "$EXPECTED" ]
 then
-    echo "found unexpected output"
+    echo "found unexpected output 2"
     exit 99
 fi
 
 run_success "-hash sha384 -in certs/ca-cert.pem"
-EXPECTED="55c6dabf204a2795a71b4b62594ed89348333821a87b160a08a5ed47ddc52373038792d605aa365762e4028d51c11972"
+EXPECTED=`cat tests/hash/sha384-expect.hex`
 if [ "$RESULT" != "$EXPECTED" ]
 then
-    echo "found unexpected output"
+    echo "found unexpected output 3"
     exit 99
 fi
 
 run_success "-hash sha512 -in certs/ca-cert.pem"
-EXPECTED="4eb961036db9c181d9e48f5bc0ff631e4753eac74209d6a199f99305fb614483a1e1a55922d54c17fac1b472eac6a7ffe2eb9be48dd87670be6264d25aa4493a"
+EXPECTED=`cat tests/hash/sha512-expect.hex`
 if [ "$RESULT" != "$EXPECTED" ]
 then
     echo "found unexpected output"
@@ -62,7 +62,7 @@ fi
 
 
 run_success "md5 certs/ca-cert.pem"
-EXPECTED="21ea0398596253752e6cd2195e7abf3c"
+EXPECTED=`cat tests/hash/md5-expect.hex`
 if [ "$RESULT" != "$EXPECTED" ]
 then
     echo "found unexpected output"
@@ -70,7 +70,7 @@ then
 fi
 
 run_success "sha256 certs/ca-cert.pem"
-EXPECTED="c68d5b8d17f551e3a9881968c2fe281bf8af9e6a16a1ecc97740a76d23858053"
+EXPECTED=`cat tests/hash/sha256-expect.hex`
 if [ "$RESULT" != "$EXPECTED" ]
 then
     echo "found unexpected output"
@@ -78,7 +78,7 @@ then
 fi
 
 run_success "sha384 certs/ca-cert.pem"
-EXPECTED="55c6dabf204a2795a71b4b62594ed89348333821a87b160a08a5ed47ddc52373038792d605aa365762e4028d51c11972"
+EXPECTED=`cat tests/hash/sha384-expect.hex`
 if [ "$RESULT" != "$EXPECTED" ]
 then
     echo "found unexpected output"
@@ -86,7 +86,7 @@ then
 fi
 
 run_success "sha512 certs/ca-cert.pem"
-EXPECTED="4eb961036db9c181d9e48f5bc0ff631e4753eac74209d6a199f99305fb614483a1e1a55922d54c17fac1b472eac6a7ffe2eb9be48dd87670be6264d25aa4493a"
+EXPECTED=`cat tests/hash/sha512-expect.hex`
 if [ "$RESULT" != "$EXPECTED" ]
 then
     echo "found unexpected output"
diff --git a/tests/x509/x509-process-test.sh b/tests/x509/x509-process-test.sh
index 99a80e30..b20d3958 100755
--- a/tests/x509/x509-process-test.sh
+++ b/tests/x509/x509-process-test.sh
@@ -176,7 +176,7 @@ run1() {
         exit 99
     fi
 
-    MODULUS=`./wolfssl x509 -in certs/server-cert.pem -modulus -noout`
+    MODULUS=`cat tests/x509/expect-modulus.txt`
     if [ "$MODULUS" != "Modulus=C09508E15741F2716DB7D24541270165C645AEF2BC2430B895CE2F4ED6F61C88BC7C9FFBA8677FFE5C9C5175F78ACA07E7352F8FE1BD7BC02F7CAB64A817FCCA5D7BBAE021E5722E6F2E86D89573DAAC1B53B95F3FD7190D254FE16363518B0B643FAD43B8A51C5C34B3AE00A063C5F67F0B59687873A68C18A9026DAFC319012EB810E3C6CC40B469A3463369876EC4BB17A6F3E8DDAD73BC7B2F21B5FD66510CBD54B3E16D5F1CBC2373D109038914D210B964C32AD0A1964ABCE1D41A5BC7A0C0C163780F443730329680322395A177BA13D29773E25D25C96A0DC33960A4B4B069424209E9D808BC3320B35822A7AAEBC4E1E66183C5D296DFD9D04FADD7" ]
     then
         echo "found unexpected Modulus : $MODULUS"
@@ -246,7 +246,7 @@ run3() {
     rm -f x509_test.pem x509_tmp.pem x509_test.der x509_tmp.der
     echo "TEST 3.c"
     test_case "-in certs/server-cert.pem -subject -noout"
-    EXPECTED="/C=US/ST=Montana/L=Bozeman/O=wolfSSL/OU=Support/CN=www.wolfssl.com/emailAddress=info@wolfssl.com"
+    EXPECTED=`cat tests/x509/expect-subject.txt`
     if [ "$OUTPUT" != "$EXPECTED" ]; then
         echo "found unexpected $OUTPUT"
         echo "expected $EXPECTED"
@@ -254,7 +254,7 @@ run3() {
     fi
     echo "TEST 3.d"
     test_case "-in certs/server-cert.pem -issuer -noout"
-    EXPECTED="/C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/emailAddress=info@wolfssl.com"
+    EXPECTED=`cat tests/x509/expect-issuer.txt`
     if [ "$OUTPUT" != "$EXPECTED" ]; then
         echo "found unexpected $OUTPUT"
         echo "expected $EXPECTED"
@@ -262,7 +262,7 @@ run3() {
     fi
     echo "TEST 3.e"
     test_case "-in certs/ca-cert.pem -serial -noout"
-    EXPECTED="serial=7D947088BA07428DAAAF4FBEC21A48F0D140E642"
+    EXPECTED=`cat tests/x509/expect-ca-serial.txt`
     if [ "$OUTPUT" != "$EXPECTED" ]; then
         echo "found unexpected $OUTPUT"
         echo "expected $EXPECTED"
@@ -270,7 +270,7 @@ run3() {
     fi
     echo "TEST 3.f"
     test_case "-in certs/server-cert.pem -serial -noout"
-    EXPECTED="serial=01"
+    EXPECTED=`cat tests/x509/expect-server-serial.txt`
     if [ "$OUTPUT" != "$EXPECTED" ]; then
         echo "found unexpected $OUTPUT"
         echo "expected $EXPECTED"
@@ -278,8 +278,7 @@ run3() {
     fi
     echo "TEST 3.g"
     test_case "-in certs/server-cert.pem -dates -noout"
-    EXPECTED="notBefore=Dec 20 23:07:25 2021 GMT
-notAfter=Sep 15 23:07:25 2024 GMT"
+    EXPECTED=`cat tests/x509/expect-dates.txt`
     if [ "$OUTPUT" != "$EXPECTED" ]; then
         echo "found unexpected $OUTPUT"
         echo "expected $EXPECTED"
@@ -287,7 +286,7 @@ notAfter=Sep 15 23:07:25 2024 GMT"
     fi
     echo "TEST 3.h"
     test_case "-in certs/server-cert.pem -email -noout"
-    EXPECTED="info@wolfssl.com"
+    EXPECTED=`cat tests/x509/expect-email.txt`
     if [ "$OUTPUT" != "$EXPECTED" ]; then
         echo "found unexpected $OUTPUT"
         echo "expected $EXPECTED"
@@ -295,7 +294,8 @@ notAfter=Sep 15 23:07:25 2024 GMT"
     fi
     echo "TEST 3.i"
     test_case "-in certs/server-cert.pem -fingerprint -noout"
-    EXPECTED="SHA1 of cert. DER : 52686B24F54652F04B0D87BA9F591B393C86C407"
+    EXPECTED=`cat tests/x509/expect-fingerprint.txt`
+    OUTPUT=`echo $OUTPUT | sed 's/^SHA1 of cert. DER : //'`
     if [ "$OUTPUT" != "$EXPECTED" ]; then
         echo "found unexpected $OUTPUT"
         echo "expected $EXPECTED"
@@ -303,13 +303,7 @@ notAfter=Sep 15 23:07:25 2024 GMT"
     fi
     echo "TEST 3.j"
     test_case "-in certs/server-cert.pem -purpose -noout"
-    EXPECTED="Certificate Purpose:
-Any Extended Key Usage : YES
-TLS Web Server Authentication : YES
-TLS Web Client Authentication : NO
-OCSP Signing : YES
-Email Protect : YES
-Time Stamp Signing : YES"
+    EXPECTED=`cat tests/x509/expect-purpose.txt`
     if [ "$OUTPUT" != "$EXPECTED" ]; then
         echo "found unexpected $OUTPUT"
         echo "expected $EXPECTED"
@@ -317,7 +311,7 @@ Time Stamp Signing : YES"
     fi
     echo "TEST 3.k"
     test_case "-in certs/server-cert.pem -hash -noout"
-    EXPECTED="137dc03f"
+    EXPECTED=`cat tests/x509/expect-hash.txt`
     OLD_EXPECTED="f6cf410e" #was fixed to match OpenSSL after release 5.1.1
     if [ "$OUTPUT" != "$EXPECTED" ] && [ "$OUTPUT" != "$OLD_EXPECTED" ]; then
         echo "found unexpected $OUTPUT"