Merge pull request #3 from DataONEorg/feature-1-xsign-ca-creation

Edit Config files and generate new Prod and Test Root and Intermediate CA certs

DataONEProdCAChain.crt

@@ -0,0 +1,139 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

DataONEProdIntCA/certs/DataONEProdIntCA.pem

@@ -0,0 +1,129 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            3f:60:46:5d:4d:7f:be:35:3d:d0:6c:fe:b2:3e:86:ca:a8:b3:5c:52
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: DC=org, DC=dataone, CN=DataONE Prod Root CA
+        Validity
+            Not Before: Jan 23 00:57:58 2024 GMT
+            Not After : Dec 30 00:57:58 2123 GMT
+        Subject: DC=org, DC=dataone, CN=DataONE Production CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (4096 bit)
+                Modulus:
+                    00:b0:e7:20:a6:6d:ed:34:b4:de:b6:2e:05:57:fd:
+                    43:34:fd:90:a0:9f:41:3b:8e:12:71:6f:a4:f5:db:
+                    c9:04:1d:22:36:b7:c2:64:0b:53:42:1f:1f:a2:6b:
+                    e6:73:2a:ca:82:25:87:be:d9:52:44:f9:9b:04:4d:
+                    27:0a:42:12:2f:09:44:f6:07:14:10:72:61:ee:bd:
+                    96:6f:a5:ca:4d:29:42:a6:77:c8:8e:b5:ad:a7:46:
+                    97:9b:54:5d:98:ec:8f:3d:e8:ca:9f:c3:c9:d6:af:
+                    3b:12:72:ce:18:e5:25:e5:55:e8:1f:f0:0a:08:1b:
+                    76:16:7b:1c:52:8f:55:98:d4:8c:7a:8e:82:c4:f2:
+                    48:fe:3c:7f:e5:a9:5d:0a:68:a1:94:ae:66:21:60:
+                    c5:03:9c:b2:47:be:f9:b4:6e:42:db:4b:df:b1:84:
+                    b9:d6:7d:d7:c4:7d:c6:20:3d:b4:90:d2:a5:92:8e:
+                    f2:da:d9:f8:b2:aa:28:f1:0b:2d:f2:a0:6d:39:f8:
+                    6f:c0:4d:bb:37:82:f3:02:db:d9:b0:07:67:1c:34:
+                    4f:d9:b0:b1:01:5b:ca:b2:89:47:f9:11:fa:3e:b9:
+                    17:99:77:f0:fd:52:85:0f:63:b8:8d:06:47:6d:7a:
+                    03:77:9c:87:81:49:5f:54:24:e3:d9:4f:32:3d:bd:
+                    58:67:21:07:3f:4b:6e:e1:ff:a7:69:0c:e6:f9:a3:
+                    93:f8:2f:af:49:84:77:3d:c6:67:2b:eb:3a:45:74:
+                    38:8a:21:32:df:a3:76:3b:c9:33:2c:14:73:14:00:
+                    d0:09:04:f5:e0:fd:fe:dc:10:45:9c:b2:1b:0f:9d:
+                    ac:04:f5:df:25:b0:ad:6c:27:2b:9c:a6:0c:34:4b:
+                    b9:41:8e:ca:1a:85:96:b5:b8:b1:fd:c4:7e:7e:13:
+                    cc:47:58:9f:7c:15:cb:05:fc:de:82:24:82:77:51:
+                    e1:e7:7f:ca:2f:32:0a:e1:84:d4:2a:97:ce:bf:65:
+                    62:f3:fa:87:3a:7c:28:00:1b:3a:85:2b:fe:13:bb:
+                    57:cf:4c:73:6a:bd:c8:cb:71:11:97:a5:1d:03:ce:
+                    9a:57:c4:49:b8:d8:0a:35:fe:6d:7d:c8:ed:65:19:
+                    43:d0:b0:b1:79:ef:08:3c:8e:fd:40:b8:59:91:4a:
+                    12:8f:98:d9:c8:c6:73:03:82:9c:5f:f9:29:9b:6f:
+                    bb:eb:d6:73:6e:3e:39:fe:57:f6:21:8f:fd:9a:a9:
+                    94:df:c9:af:5a:c5:fe:8a:14:5f:7f:60:47:ac:37:
+                    62:fa:f0:ca:ee:2c:8b:b0:11:d0:01:0c:7f:85:44:
+                    22:bc:7f:15:6b:3e:2a:16:a3:3a:b1:7d:42:1d:ee:
+                    63:0d:c3
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                BD:C5:21:FE:16:AF:2F:0E:83:DB:B7:65:FF:18:C5:D6:BD:89:A6:2B
+            X509v3 Authority Key Identifier: 
+                AA:7F:64:CF:26:93:B7:B8:4B:B4:C3:A0:84:11:27:08:24:A7:D0:9D
+            X509v3 Basic Constraints: 
+                CA:TRUE
+            X509v3 CRL Distribution Points: 
+                Full Name:
+                  URI:http://cn-ucsb-1.dataone.org/crl/DataONEProdRootCA_CRL.pem
+                Full Name:
+                  URI:http://cn-orc-1.dataone.org/crl/DataONEProdRootCA_CRL.pem
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        96:3d:a4:81:27:c9:ed:8b:cb:82:1f:6e:e2:7b:5a:22:94:e9:
+        95:1d:00:fa:a8:2b:03:d6:5c:43:5f:8b:d5:4c:d4:ab:4f:b8:
+        9d:38:5d:38:90:13:0e:99:f7:72:f1:7b:fb:54:88:a9:3c:62:
+        60:57:35:d4:13:84:62:7d:0b:07:44:8a:89:b5:d5:2e:e1:25:
+        07:6d:b6:23:cb:76:5b:bf:21:45:db:f6:a4:d7:c7:86:81:a8:
+        f9:78:28:a9:3d:94:1b:d0:05:03:e7:df:92:f5:18:84:5e:3a:
+        54:38:78:46:e3:cd:8e:11:c1:e1:87:ce:f7:44:d8:28:c8:05:
+        49:12:f1:89:f3:29:b9:20:ae:91:10:44:c2:14:7d:99:5f:16:
+        1e:e8:99:e2:4d:b1:5e:29:5e:16:a2:95:0e:cb:49:a9:97:46:
+        c3:27:7d:53:df:03:b2:83:27:42:c0:f7:9f:58:79:ce:80:36:
+        98:e1:88:bf:9d:11:83:00:57:37:c1:39:7f:f4:52:43:fd:cb:
+        cf:9d:d5:f8:76:c4:1a:dc:58:00:be:d7:3f:f7:5d:b4:1a:11:
+        a4:0a:ae:54:0e:81:2e:30:ed:10:3e:cd:a6:41:69:38:9c:b7:
+        d9:d3:05:f6:c7:00:30:e0:0f:ce:c4:c5:28:ee:43:93:70:e0:
+        1e:af:22:6b:e0:f7:66:0b:7d:db:6f:f6:4b:f2:d1:f9:7f:e4:
+        82:18:7f:14:50:52:f5:ac:a7:b2:63:a7:d3:96:68:2d:10:06:
+        a7:d9:70:79:76:70:d9:0f:cc:d6:7a:cd:40:83:56:0b:12:80:
+        eb:0f:e3:db:bc:1e:1d:e9:00:6b:a3:75:cc:0f:80:e6:16:2e:
+        2b:cc:2a:44:15:13:4a:1f:92:d5:08:bb:31:53:f8:8b:05:22:
+        6f:e9:22:35:41:b1:99:a9:a7:cc:f4:9b:fc:ed:7f:ca:54:e0:
+        91:9d:f9:36:fa:68:ff:79:9f:3a:05:10:47:d9:dc:7d:61:01:
+        b9:6d:ec:17:4d:dc:ec:dd:05:40:46:1f:0e:c7:b3:1d:70:ef:
+        a8:ce:2e:6d:62:4e:45:a6:f6:14:25:84:ec:9b:82:8b:10:03:
+        38:c6:fd:d4:92:d9:c1:26:bd:ff:19:35:79:ab:30:62:11:02:
+        eb:e9:54:51:d4:7e:6d:df:a1:9f:78:35:4f:5f:5f:5c:a1:6f:
+        4d:9d:ca:06:10:34:6d:1d:32:12:b3:42:d1:6e:1a:ff:de:00:
+        53:38:c0:ec:18:91:b9:b8:29:2f:eb:8e:2a:3c:8e:9e:97:ea:
+        92:e3:dc:4e:d6:d0:b5:45:19:49:12:48:91:16:21:d8:91:a1:
+        b0:07:45:bb:90:c6:5e:84
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----