Re-generate the MD5/SHA1 cross-signed certs with a distinct issuer name

NSS is internally caching verification results. Generate new test
certificates with distinct issuer names, to avoid issuer/serial
confusion.

BUG=111742, 256421
R=wtc@chromium.org

Review URL: https://codereview.chromium.org/18408002

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@209535 0039d316-1c4b-4281-b951-d872f2087c98

4 files changed, 182 insertions, 174 deletions

diff --git a/net/data/ssl/certificates/cross-signed-leaf.pem b/net/data/ssl/certificates/cross-signed-leaf.pem
index 5d708f8..563c057 100644
--- a/net/data/ssl/certificates/cross-signed-leaf.pem
+++ b/net/data/ssl/certificates/cross-signed-leaf.pem
@@ -3,80 +3,80 @@ Certificate:
         Version: 3 (0x2)
         Serial Number: 236 (0xec)
     Signature Algorithm: sha1WithRSAEncryption
-        Issuer: CN=Test Root CA
+        Issuer: CN=Test Dup-Hash Root CA
         Validity
-            Not Before: Jun 28 00:12:46 2013 GMT
-            Not After : Jun 26 00:12:46 2023 GMT
+            Not Before: Jul  1 22:15:21 2013 GMT
+            Not After : Jun 29 22:15:21 2023 GMT
         Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:cc:2a:6b:e1:75:e1:1b:b3:30:24:17:d2:bb:6e:
-                    5e:d9:68:ff:b6:35:e5:6d:6e:46:77:0b:91:5a:89:
-                    96:1e:dc:f6:95:a7:fb:37:c2:10:ee:92:71:23:35:
-                    65:e5:a3:77:44:5f:f6:43:6f:80:ff:b9:fd:25:c6:
-                    f4:61:9f:42:f3:0a:0a:6a:bf:79:16:69:64:db:7a:
-                    d9:7d:07:ca:7d:31:97:5e:0a:e9:62:ce:3b:91:91:
-                    3d:c0:95:f2:8e:56:94:f0:12:fe:11:f5:e2:e4:40:
-                    90:cd:55:21:53:1f:bb:90:3c:fb:24:8e:b9:50:5c:
-                    17:53:34:23:e5:0f:e6:ac:e1:44:7e:4d:54:4b:bb:
-                    03:94:da:6e:9f:50:51:2a:d6:75:50:75:d1:50:01:
-                    45:e9:24:74:3a:59:01:a0:64:a5:7d:91:99:7b:ea:
-                    94:27:05:21:6b:1f:86:44:60:be:e4:66:5a:75:8f:
-                    dd:ac:f1:16:a8:56:ea:fc:64:4a:17:61:f4:6c:92:
-                    bc:b0:ff:a4:6c:67:19:ce:02:60:ef:ee:95:60:bc:
-                    c6:47:25:a0:3a:ad:07:91:d4:74:35:f4:8f:ef:f9:
-                    b5:00:6b:26:48:0e:ab:25:f9:e8:09:ce:55:31:b5:
-                    5f:bb:3b:15:43:a2:4e:65:19:bd:44:3a:5f:dc:8b:
-                    a5:8b
+                    00:b7:96:78:e6:03:94:d8:22:d8:88:01:b2:00:93:
+                    86:a1:c0:d9:49:5f:23:40:93:f8:ec:3f:9e:b2:b3:
+                    9d:70:ea:6d:83:6c:05:fd:7c:04:be:61:0f:3b:12:
+                    54:cf:36:fd:0b:33:b9:e8:6f:ea:2a:fd:6c:9a:1f:
+                    a9:8d:e9:1b:77:0f:7b:cd:14:1c:5c:b2:0f:8b:b7:
+                    97:14:7c:25:78:e0:26:3c:e0:e6:8a:f7:6f:25:5d:
+                    45:34:c3:fe:26:67:d7:69:8d:21:e9:b4:86:59:86:
+                    cb:15:fa:10:dc:d3:30:57:da:0d:a5:c7:ee:16:f6:
+                    56:89:e3:51:7e:e6:2d:8d:9c:6f:3f:ca:57:3b:bc:
+                    1e:81:58:28:a1:ff:0f:d9:0b:44:a5:04:9d:a4:4f:
+                    68:5a:67:46:80:1b:df:24:40:49:ac:4c:85:70:f3:
+                    84:47:81:cf:8d:cc:4b:e2:b0:4b:1f:33:ed:c3:a0:
+                    7d:8c:d5:a0:4c:43:68:fb:2a:59:74:25:2b:ef:da:
+                    3c:db:75:6c:84:b4:1e:fa:f1:26:40:03:7c:f7:04:
+                    cf:99:70:9a:49:10:f6:91:1c:30:2d:a7:33:5f:7e:
+                    92:4e:b0:91:4f:24:35:92:92:e3:77:99:db:6f:21:
+                    4d:82:b8:01:f8:d6:5e:cc:1a:20:1e:d9:3e:d7:1d:
+                    fb:dd
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
                 CA:FALSE
             X509v3 Subject Key Identifier: 
-                E2:4A:5F:2A:EF:4C:76:8B:E7:E8:68:C8:0D:2B:D1:62:64:B6:1E:4F
+                80:2C:F6:3D:68:54:4C:34:20:8F:76:5B:06:97:BB:9E:40:8D:28:3E
             X509v3 Authority Key Identifier: 
-                keyid:48:D7:06:DC:B7:D3:0C:D6:3A:F3:A3:7F:12:D4:44:4D:BC:0B:9A:E7
+                keyid:96:2A:53:9C:77:4D:AC:DD:C3:62:E8:7C:3A:53:66:E6:B1:9E:D0:5F
 
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
             X509v3 Subject Alternative Name: 
                 IP Address:127.0.0.1
     Signature Algorithm: sha1WithRSAEncryption
-         97:67:c6:3d:c4:9f:97:4e:b6:06:a4:e0:d5:56:16:f0:41:c9:
-         a1:38:6c:c6:9d:ae:09:0a:ab:5b:63:3b:24:cd:4c:94:8d:69:
-         2e:f2:98:64:05:a4:e8:60:12:31:d8:db:d1:7e:83:c6:11:9d:
-         a4:7b:08:ba:3b:b9:34:9b:46:93:2c:01:7b:a3:5d:2d:ef:a6:
-         32:29:9b:15:a0:f5:19:91:1b:21:b3:f6:4d:f2:1d:36:85:59:
-         99:50:70:92:4f:e6:df:ea:dd:d1:f1:c6:fe:ad:81:82:ce:c4:
-         d0:25:b7:60:14:4c:6b:4d:0c:69:c6:e2:7a:cb:92:a1:59:69:
-         37:47:81:e8:d2:02:fa:0b:22:4d:18:0f:32:7c:68:07:b4:67:
-         f9:36:db:f6:a0:77:da:68:a8:0b:7e:65:22:d7:0b:fd:65:11:
-         b4:8f:a9:b7:20:50:81:b0:d7:71:cc:76:11:5b:28:9d:7d:98:
-         21:c7:1f:d5:a1:d6:a6:12:ce:c7:90:5d:a0:22:03:3e:e3:aa:
-         17:a5:cd:bb:f4:2e:d9:e5:61:de:24:f6:3d:8f:9f:4e:97:02:
-         61:91:0e:28:a2:02:ff:a9:7b:52:c2:33:26:a3:26:7d:c2:43:
-         e3:91:36:c9:55:e1:b8:12:c2:39:fe:5e:28:69:ea:13:f9:be:
-         2a:72:0d:70
+         78:fb:0b:4a:4f:9e:6d:76:b7:c0:27:0f:06:92:a9:c1:97:d9:
+         cd:15:5d:9b:18:93:2a:06:95:bc:48:e9:4e:02:ac:92:a5:c8:
+         6a:71:1d:69:a2:8d:ae:bd:cf:5b:d9:c3:5e:cb:db:01:13:1b:
+         c7:13:fd:22:f6:ca:48:ca:98:de:93:54:48:15:38:1f:22:c8:
+         2f:fb:71:73:2e:f5:d2:7e:48:91:6e:9a:c7:0b:51:96:d6:c1:
+         c0:2a:d4:3c:69:3e:dd:1d:7d:d4:b1:0f:d1:d3:41:ca:a8:22:
+         8f:19:9d:a7:91:7b:25:26:4e:c6:e8:3b:9b:e7:cd:c4:f2:c5:
+         63:c3:10:6f:93:03:b1:c6:e9:05:db:1e:cf:42:19:72:b2:b2:
+         cf:30:a0:99:70:6c:fb:4e:7f:ca:a5:3b:8b:83:72:10:77:04:
+         e4:96:a9:8e:70:2d:c0:54:71:5e:76:8f:4c:20:33:d6:78:f2:
+         d9:6a:2c:b0:7a:1e:82:08:3d:e8:59:87:e9:a0:3c:84:3d:b4:
+         60:38:01:89:04:93:d0:3e:36:5d:57:aa:03:4f:ca:46:80:a0:
+         d2:2c:d0:59:18:b1:fb:66:84:39:4d:90:c5:20:d7:4b:03:11:
+         77:b4:fd:24:58:d9:1f:dc:4d:34:f7:c9:54:59:3f:8e:1a:17:
+         e8:b1:65:a5
 -----BEGIN CERTIFICATE-----
-MIIDdDCCAlygAwIBAgICAOwwDQYJKoZIhvcNAQEFBQAwFzEVMBMGA1UEAwwMVGVz
-dCBSb290IENBMB4XDTEzMDYyODAwMTI0NloXDTIzMDYyNjAwMTI0NlowYDELMAkG
-A1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDU1vdW50YWlu
-IFZpZXcxEDAOBgNVBAoMB1Rlc3QgQ0ExEjAQBgNVBAMMCTEyNy4wLjAuMTCCASIw
-DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMwqa+F14RuzMCQX0rtuXtlo/7Y1
-5W1uRncLkVqJlh7c9pWn+zfCEO6ScSM1ZeWjd0Rf9kNvgP+5/SXG9GGfQvMKCmq/
-eRZpZNt62X0Hyn0xl14K6WLOO5GRPcCV8o5WlPAS/hH14uRAkM1VIVMfu5A8+ySO
-uVBcF1M0I+UP5qzhRH5NVEu7A5Tabp9QUSrWdVB10VABRekkdDpZAaBkpX2RmXvq
-lCcFIWsfhkRgvuRmWnWP3azxFqhW6vxkShdh9GySvLD/pGxnGc4CYO/ulWC8xkcl
-oDqtB5HUdDX0j+/5tQBrJkgOqyX56AnOVTG1X7s7FUOiTmUZvUQ6X9yLpYsCAwEA
-AaOBgDB+MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOJKXyrvTHaL5+hoyA0r0WJk
-th5PMB8GA1UdIwQYMBaAFEjXBty30wzWOvOjfxLURE28C5rnMB0GA1UdJQQWMBQG
-CCsGAQUFBwMBBggrBgEFBQcDAjAPBgNVHREECDAGhwR/AAABMA0GCSqGSIb3DQEB
-BQUAA4IBAQCXZ8Y9xJ+XTrYGpODVVhbwQcmhOGzGna4JCqtbYzskzUyUjWku8phk
-BaToYBIx2NvRfoPGEZ2kewi6O7k0m0aTLAF7o10t76YyKZsVoPUZkRshs/ZN8h02
-hVmZUHCST+bf6t3R8cb+rYGCzsTQJbdgFExrTQxpxuJ6y5KhWWk3R4Ho0gL6CyJN
-GA8yfGgHtGf5Ntv2oHfaaKgLfmUi1wv9ZRG0j6m3IFCBsNdxzHYRWyidfZghxx/V
-odamEs7HkF2gIgM+46oXpc279C7Z5WHeJPY9j59OlwJhkQ4oogL/qXtSwjMmoyZ9
-wkPjkTbJVeG4EsI5/l4oaeoT+b4qcg1w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 -----END CERTIFICATE-----
diff --git a/net/data/ssl/certificates/cross-signed-root-md5.pem b/net/data/ssl/certificates/cross-signed-root-md5.pem
index f66f0e7..24f2dab 100644
--- a/net/data/ssl/certificates/cross-signed-root-md5.pem
+++ b/net/data/ssl/certificates/cross-signed-root-md5.pem
@@ -1,74 +1,75 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 13629438167319141160 (0xbd257dcd23355b28)
+        Serial Number: 9681607970376803213 (0x865bfb2758e6638d)
     Signature Algorithm: md5WithRSAEncryption
-        Issuer: CN=Test Root CA
+        Issuer: CN=Test Dup-Hash Root CA
         Validity
-            Not Before: Jun 28 00:12:46 2013 GMT
-            Not After : Jun 26 00:12:46 2023 GMT
-        Subject: CN=Test Root CA
+            Not Before: Jul  1 22:15:21 2013 GMT
+            Not After : Jun 29 22:15:21 2023 GMT
+        Subject: CN=Test Dup-Hash Root CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:cf:54:79:c5:64:b3:a9:90:4f:9f:65:9a:8b:4e:
-                    f1:70:be:71:04:da:98:e0:c6:0e:93:fe:d5:5d:31:
-                    66:2f:13:61:65:0e:67:b0:6e:e9:ce:71:d5:03:57:
-                    b4:a3:34:0c:7d:c1:50:1d:34:54:9b:92:61:94:4e:
-                    bc:9e:ad:a7:af:ff:c3:30:42:00:f8:a8:aa:23:28:
-                    b5:23:e2:58:7c:af:98:ed:22:bb:c2:38:fb:6f:bf:
-                    de:da:41:49:23:e0:ed:7f:04:4b:35:ba:4f:99:bf:
-                    b4:c1:9d:dc:91:f6:77:b3:b5:01:ea:a3:1e:bf:24:
-                    15:27:c3:35:70:10:bf:ca:7f:a0:69:9b:3f:11:a9:
-                    2c:70:b7:f0:e1:bb:77:c1:7b:92:b9:44:08:fd:0d:
-                    31:58:4f:33:dc:03:6d:41:32:4f:bb:a1:cb:55:bc:
-                    c3:f9:70:0a:f8:b8:c8:86:52:86:ca:5d:c1:8f:71:
-                    7b:b6:e2:c8:18:a3:4e:ed:33:21:4d:89:ce:e3:e6:
-                    4c:28:19:4f:53:84:f4:2b:a7:01:6c:bb:57:fb:6b:
-                    f6:bf:08:2a:fe:e4:a6:36:12:c6:78:c7:b2:56:0d:
-                    03:27:e5:4c:86:cc:43:dd:49:01:78:35:f8:1d:e4:
-                    f1:2e:5c:14:51:51:8b:2c:b4:8a:7a:67:57:8d:2d:
-                    3f:f5
+                    00:de:f6:bf:8a:9b:10:4f:4c:c8:e7:9d:38:f8:ce:
+                    fc:f9:02:89:38:05:be:2e:cc:bc:18:8d:cc:32:cb:
+                    65:06:21:b6:12:1a:af:fc:98:60:26:60:e7:60:57:
+                    68:24:17:d6:6c:f9:f1:0f:5b:a9:ae:55:a3:fc:84:
+                    c7:b4:0d:e6:71:98:e5:a5:6a:3a:30:05:35:22:59:
+                    29:d3:27:4c:82:c4:1c:d6:2b:19:78:c7:2c:6e:75:
+                    c0:bb:5f:3c:c0:9f:ed:0f:72:10:59:0d:cd:88:08:
+                    76:9b:e1:fc:1d:7d:d1:d0:d7:e1:76:d8:44:9c:c4:
+                    80:3e:d1:09:cb:67:07:81:ed:1a:fc:68:15:3a:11:
+                    f8:f8:8e:02:8b:ec:e3:c5:e6:84:7f:99:79:cf:d8:
+                    9e:54:ea:3e:65:3c:ae:cb:4f:a5:4a:3b:32:65:00:
+                    92:45:e5:cd:2a:38:f3:18:b2:1d:62:8e:3c:a5:89:
+                    47:6a:0d:43:87:68:82:10:5d:e3:db:70:e5:60:9c:
+                    13:c4:87:54:3d:3c:7b:f1:b4:16:b6:4b:b9:23:74:
+                    a4:a1:91:e2:61:29:63:37:b2:74:ec:49:a1:94:35:
+                    34:fd:c6:5c:55:54:14:14:eb:e1:12:22:28:0a:9e:
+                    10:b4:37:54:e6:50:93:85:87:0f:c1:34:ca:cb:76:
+                    12:8f
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
                 CA:TRUE
             X509v3 Subject Key Identifier: 
-                48:D7:06:DC:B7:D3:0C:D6:3A:F3:A3:7F:12:D4:44:4D:BC:0B:9A:E7
+                96:2A:53:9C:77:4D:AC:DD:C3:62:E8:7C:3A:53:66:E6:B1:9E:D0:5F
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
     Signature Algorithm: md5WithRSAEncryption
-         3e:87:a1:f1:b2:e3:70:2b:6c:9d:6b:a7:18:34:4c:69:29:cc:
-         63:b1:c7:5c:4a:d1:4f:0c:97:db:e6:1b:92:16:d2:ac:f4:ae:
-         7a:68:50:5f:06:c2:18:70:62:a5:7d:ee:35:d8:2c:8c:42:8d:
-         d9:64:32:6d:88:d7:f9:62:56:b7:c6:d9:ae:ed:e1:a9:8f:e4:
-         4f:97:fc:d8:21:fb:9b:86:eb:79:5b:93:c5:c1:51:ba:2c:48:
-         36:83:e0:96:ab:10:9e:8c:1b:23:84:a5:2d:81:28:c0:8e:31:
-         91:99:9a:3a:31:8d:c0:c4:3b:92:60:0c:ea:b1:a2:37:62:88:
-         70:fc:9a:7b:2e:3c:a5:58:f7:d1:43:f4:e3:57:ea:1d:5e:1d:
-         98:69:62:d9:1e:25:45:08:92:05:15:51:5b:85:97:23:66:06:
-         45:2a:81:6b:7a:c9:d8:c6:46:14:cf:6e:85:c6:32:55:e5:4b:
-         b3:f2:e9:ca:a1:c7:1d:e0:c4:a3:d2:c2:39:2a:a8:88:d2:d1:
-         46:5c:78:10:c2:c4:fb:84:d9:0b:cd:17:54:fb:64:74:91:b7:
-         ca:51:ce:f7:5b:f4:3d:e5:75:60:5b:ed:6a:6f:69:f1:fb:b0:
-         e6:1e:08:09:51:0b:7b:8b:ab:20:ba:33:b7:c1:d8:f2:c7:2c:
-         8f:2b:05:55
+         2d:0f:96:87:ae:0d:e6:47:c7:5b:b7:5c:d3:85:7a:b0:1b:e0:
+         6e:43:1f:c7:8d:ab:1b:5a:5b:bf:3b:a4:de:4b:45:bd:f6:59:
+         12:b2:56:7e:4c:ea:67:e9:bc:23:09:ba:e8:89:55:78:98:55:
+         b0:12:bf:92:3c:45:e7:ec:56:f7:88:1d:10:f3:68:1a:84:97:
+         26:44:90:e5:19:09:77:94:08:2c:f1:27:1e:bb:09:6d:36:47:
+         de:e2:7d:b4:fb:d5:8d:11:d7:09:9e:22:16:3e:e9:67:de:2b:
+         e6:6b:25:f6:02:b1:9c:5f:27:62:fe:21:a1:58:8f:b0:68:7d:
+         44:1a:b4:af:b1:1b:c3:5d:84:d0:a4:1c:57:4c:28:2d:64:4f:
+         c6:19:93:c2:96:7d:b0:1f:80:e5:08:a0:14:1f:03:0c:ab:90:
+         c5:c9:01:22:36:39:66:a9:38:9d:8f:89:34:da:60:85:6e:de:
+         47:33:78:d3:52:ea:0b:8d:38:70:8a:6b:b1:72:18:8e:e2:01:
+         28:df:23:4a:18:9c:65:7e:f9:42:04:84:62:67:40:31:16:9d:
+         09:0c:d6:2c:b6:86:5d:d0:b4:08:af:ca:d3:4e:a2:2c:15:d7:
+         c8:48:5c:92:ee:33:84:2d:6e:5e:97:f3:f7:ee:1a:30:fc:83:
+         50:60:80:7a
 -----BEGIN CERTIFICATE-----
-MIIC8zCCAdugAwIBAgIJAL0lfc0jNVsoMA0GCSqGSIb3DQEBBAUAMBcxFTATBgNV
-BAMMDFRlc3QgUm9vdCBDQTAeFw0xMzA2MjgwMDEyNDZaFw0yMzA2MjYwMDEyNDZa
-MBcxFTATBgNVBAMMDFRlc3QgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
-ADCCAQoCggEBAM9UecVks6mQT59lmotO8XC+cQTamODGDpP+1V0xZi8TYWUOZ7Bu
-6c5x1QNXtKM0DH3BUB00VJuSYZROvJ6tp6//wzBCAPioqiMotSPiWHyvmO0iu8I4
-+2+/3tpBSSPg7X8ESzW6T5m/tMGd3JH2d7O1AeqjHr8kFSfDNXAQv8p/oGmbPxGp
-LHC38OG7d8F7krlECP0NMVhPM9wDbUEyT7uhy1W8w/lwCvi4yIZShspdwY9xe7bi
-yBijTu0zIU2JzuPmTCgZT1OE9CunAWy7V/tr9r8IKv7kpjYSxnjHslYNAyflTIbM
-Q91JAXg1+B3k8S5cFFFRiyy0inpnV40tP/UCAwEAAaNCMEAwDwYDVR0TAQH/BAUw
-AwEB/zAdBgNVHQ4EFgQUSNcG3LfTDNY686N/EtRETbwLmucwDgYDVR0PAQH/BAQD
-AgEGMA0GCSqGSIb3DQEBBAUAA4IBAQA+h6HxsuNwK2yda6cYNExpKcxjscdcStFP
-DJfb5huSFtKs9K56aFBfBsIYcGKlfe412CyMQo3ZZDJtiNf5Yla3xtmu7eGpj+RP
-l/zYIfubhut5W5PFwVG6LEg2g+CWqxCejBsjhKUtgSjAjjGRmZo6MY3AxDuSYAzq
-saI3Yohw/Jp7LjylWPfRQ/TjV+odXh2YaWLZHiVFCJIFFVFbhZcjZgZFKoFresnY
-xkYUz26FxjJV5Uuz8unKoccd4MSj0sI5KqiI0tFGXHgQwsT7hNkLzRdU+2R0kbfK
-Uc73W/Q95XVgW+1qb2nx+7DmHggJUQt7i6sgujO3wdjyxyyPKwVV
+MIIDBTCCAe2gAwIBAgIJAIZb+ydY5mONMA0GCSqGSIb3DQEBBAUAMCAxHjAcBgNV
+BAMMFVRlc3QgRHVwLUhhc2ggUm9vdCBDQTAeFw0xMzA3MDEyMjE1MjFaFw0yMzA2
+MjkyMjE1MjFaMCAxHjAcBgNVBAMMFVRlc3QgRHVwLUhhc2ggUm9vdCBDQTCCASIw
+DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN72v4qbEE9MyOedOPjO/PkCiTgF
+vi7MvBiNzDLLZQYhthIar/yYYCZg52BXaCQX1mz58Q9bqa5Vo/yEx7QN5nGY5aVq
+OjAFNSJZKdMnTILEHNYrGXjHLG51wLtfPMCf7Q9yEFkNzYgIdpvh/B190dDX4XbY
+RJzEgD7RCctnB4HtGvxoFToR+PiOAovs48XmhH+Zec/YnlTqPmU8rstPpUo7MmUA
+kkXlzSo48xiyHWKOPKWJR2oNQ4doghBd49tw5WCcE8SHVD08e/G0FrZLuSN0pKGR
+4mEpYzeydOxJoZQ1NP3GXFVUFBTr4RIiKAqeELQ3VOZQk4WHD8E0yst2Eo8CAwEA
+AaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUlipTnHdNrN3DYuh8OlNm
+5rGe0F8wDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBBAUAA4IBAQAtD5aHrg3m
+R8dbt1zThXqwG+BuQx/HjasbWlu/O6TeS0W99lkSslZ+TOpn6bwjCbroiVV4mFWw
+Er+SPEXn7Fb3iB0Q82gahJcmRJDlGQl3lAgs8SceuwltNkfe4n20+9WNEdcJniIW
+Puln3ivmayX2ArGcXydi/iGhWI+waH1EGrSvsRvDXYTQpBxXTCgtZE/GGZPCln2w
+H4DlCKAUHwMMq5DFyQEiNjlmqTidj4k02mCFbt5HM3jTUuoLjThwimuxchiO4gEo
+3yNKGJxlfvlCBIRiZ0AxFp0JDNYstoZd0LQIr8rTTqIsFdfISFyS7jOELW5el/P3
+7how/INQYIB6
 -----END CERTIFICATE-----
diff --git a/net/data/ssl/certificates/cross-signed-root-sha1.pem b/net/data/ssl/certificates/cross-signed-root-sha1.pem
index 7c7cce1..71df04f 100644
--- a/net/data/ssl/certificates/cross-signed-root-sha1.pem
+++ b/net/data/ssl/certificates/cross-signed-root-sha1.pem
@@ -1,74 +1,75 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 18221780775539835148 (0xfce0c5127d18010c)
+        Serial Number: 16026332507200838417 (0xde68f88110005b11)
     Signature Algorithm: sha1WithRSAEncryption
-        Issuer: CN=Test Root CA
+        Issuer: CN=Test Dup-Hash Root CA
         Validity
-            Not Before: Jun 28 00:12:46 2013 GMT
-            Not After : Jun 26 00:12:46 2023 GMT
-        Subject: CN=Test Root CA
+            Not Before: Jul  1 22:15:21 2013 GMT
+            Not After : Jun 29 22:15:21 2023 GMT
+        Subject: CN=Test Dup-Hash Root CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:cf:54:79:c5:64:b3:a9:90:4f:9f:65:9a:8b:4e:
-                    f1:70:be:71:04:da:98:e0:c6:0e:93:fe:d5:5d:31:
-                    66:2f:13:61:65:0e:67:b0:6e:e9:ce:71:d5:03:57:
-                    b4:a3:34:0c:7d:c1:50:1d:34:54:9b:92:61:94:4e:
-                    bc:9e:ad:a7:af:ff:c3:30:42:00:f8:a8:aa:23:28:
-                    b5:23:e2:58:7c:af:98:ed:22:bb:c2:38:fb:6f:bf:
-                    de:da:41:49:23:e0:ed:7f:04:4b:35:ba:4f:99:bf:
-                    b4:c1:9d:dc:91:f6:77:b3:b5:01:ea:a3:1e:bf:24:
-                    15:27:c3:35:70:10:bf:ca:7f:a0:69:9b:3f:11:a9:
-                    2c:70:b7:f0:e1:bb:77:c1:7b:92:b9:44:08:fd:0d:
-                    31:58:4f:33:dc:03:6d:41:32:4f:bb:a1:cb:55:bc:
-                    c3:f9:70:0a:f8:b8:c8:86:52:86:ca:5d:c1:8f:71:
-                    7b:b6:e2:c8:18:a3:4e:ed:33:21:4d:89:ce:e3:e6:
-                    4c:28:19:4f:53:84:f4:2b:a7:01:6c:bb:57:fb:6b:
-                    f6:bf:08:2a:fe:e4:a6:36:12:c6:78:c7:b2:56:0d:
-                    03:27:e5:4c:86:cc:43:dd:49:01:78:35:f8:1d:e4:
-                    f1:2e:5c:14:51:51:8b:2c:b4:8a:7a:67:57:8d:2d:
-                    3f:f5
+                    00:de:f6:bf:8a:9b:10:4f:4c:c8:e7:9d:38:f8:ce:
+                    fc:f9:02:89:38:05:be:2e:cc:bc:18:8d:cc:32:cb:
+                    65:06:21:b6:12:1a:af:fc:98:60:26:60:e7:60:57:
+                    68:24:17:d6:6c:f9:f1:0f:5b:a9:ae:55:a3:fc:84:
+                    c7:b4:0d:e6:71:98:e5:a5:6a:3a:30:05:35:22:59:
+                    29:d3:27:4c:82:c4:1c:d6:2b:19:78:c7:2c:6e:75:
+                    c0:bb:5f:3c:c0:9f:ed:0f:72:10:59:0d:cd:88:08:
+                    76:9b:e1:fc:1d:7d:d1:d0:d7:e1:76:d8:44:9c:c4:
+                    80:3e:d1:09:cb:67:07:81:ed:1a:fc:68:15:3a:11:
+                    f8:f8:8e:02:8b:ec:e3:c5:e6:84:7f:99:79:cf:d8:
+                    9e:54:ea:3e:65:3c:ae:cb:4f:a5:4a:3b:32:65:00:
+                    92:45:e5:cd:2a:38:f3:18:b2:1d:62:8e:3c:a5:89:
+                    47:6a:0d:43:87:68:82:10:5d:e3:db:70:e5:60:9c:
+                    13:c4:87:54:3d:3c:7b:f1:b4:16:b6:4b:b9:23:74:
+                    a4:a1:91:e2:61:29:63:37:b2:74:ec:49:a1:94:35:
+                    34:fd:c6:5c:55:54:14:14:eb:e1:12:22:28:0a:9e:
+                    10:b4:37:54:e6:50:93:85:87:0f:c1:34:ca:cb:76:
+                    12:8f
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
                 CA:TRUE
             X509v3 Subject Key Identifier: 
-                48:D7:06:DC:B7:D3:0C:D6:3A:F3:A3:7F:12:D4:44:4D:BC:0B:9A:E7
+                96:2A:53:9C:77:4D:AC:DD:C3:62:E8:7C:3A:53:66:E6:B1:9E:D0:5F
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
     Signature Algorithm: sha1WithRSAEncryption
-         0d:83:79:c0:6b:7d:9e:fb:6a:a5:02:0b:53:3c:3c:38:ed:1f:
-         bf:94:69:fc:66:56:19:86:a3:f7:72:5a:86:12:e6:d5:29:d9:
-         75:5c:fe:a6:bf:15:05:cb:e1:3c:a1:2a:5c:b4:65:70:ed:1d:
-         80:6d:50:8f:a5:d8:e9:22:c2:f5:53:71:6a:c1:15:87:03:11:
-         5f:59:29:54:11:e7:c9:17:97:1e:56:46:ba:6e:c8:16:ae:3f:
-         fd:af:a4:87:39:a2:14:1a:c8:94:bc:c5:b8:40:2e:41:e3:a5:
-         bb:02:eb:d5:c1:74:b2:94:5c:b6:48:8c:83:57:54:56:aa:e6:
-         cf:fb:23:4e:48:14:a9:b6:0c:c0:de:8e:67:83:d4:77:51:ee:
-         75:4f:6e:d1:7c:5a:5b:3b:61:e0:73:47:0a:da:6f:52:62:34:
-         db:37:8e:b0:66:1f:69:7e:e9:74:17:97:6d:3a:67:9d:0b:a3:
-         24:8b:24:ce:0d:6d:29:30:08:ed:58:43:37:1f:ae:05:3b:e3:
-         f1:d4:f4:95:ba:3b:d9:07:07:7f:26:6c:70:93:d9:8e:2c:04:
-         b0:fe:a1:71:6c:0e:dd:a6:d0:73:59:a8:e0:a0:60:a6:02:cd:
-         fc:ca:ca:da:7e:67:c1:4a:93:a6:57:3b:a5:2c:e0:f2:d8:58:
-         a7:5d:ab:4b
+         82:0e:89:6b:05:a5:56:b1:0f:79:19:9f:1e:88:c9:7a:ba:fc:
+         7e:9b:58:39:64:38:89:64:c6:59:c6:be:d1:c1:d7:41:bb:ac:
+         68:22:61:df:27:0f:ee:00:90:8f:8a:27:ab:dc:46:6f:d3:f2:
+         5e:1e:02:1f:8b:56:9f:83:6d:8d:a4:2a:2e:e3:f1:f1:91:ec:
+         c9:1c:f2:10:b7:7d:47:f4:1b:ff:75:c5:a9:74:5c:d7:f8:41:
+         c3:51:30:9d:bf:13:f6:24:82:70:15:83:2f:0d:e4:ce:8f:3a:
+         ff:92:d5:7d:6d:1a:66:6e:4a:15:4f:c3:c3:45:8d:12:09:c8:
+         0c:58:db:6b:3c:7b:3f:65:49:ea:5d:72:c3:3d:9b:a5:5f:72:
+         9f:72:d6:32:44:4f:cc:79:2a:c1:22:01:5e:0a:cf:2b:f7:03:
+         c6:bf:15:4b:d1:5a:ab:0f:c5:8f:11:6c:73:e9:a5:60:90:18:
+         ec:c2:dc:27:ce:f8:f1:95:d3:8e:df:29:c5:4a:dc:35:db:ed:
+         71:ee:33:2e:71:69:6f:29:fd:40:b2:ff:66:19:81:c7:4d:c3:
+         e8:19:ad:d0:23:b3:7f:57:4e:95:15:52:dc:bf:65:b4:02:59:
+         dc:07:c4:e9:08:88:bf:c1:a4:1b:6e:79:3f:38:02:fd:11:93:
+         a8:f0:11:65
 -----BEGIN CERTIFICATE-----
-MIIC8zCCAdugAwIBAgIJAPzgxRJ9GAEMMA0GCSqGSIb3DQEBBQUAMBcxFTATBgNV
-BAMMDFRlc3QgUm9vdCBDQTAeFw0xMzA2MjgwMDEyNDZaFw0yMzA2MjYwMDEyNDZa
-MBcxFTATBgNVBAMMDFRlc3QgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
-ADCCAQoCggEBAM9UecVks6mQT59lmotO8XC+cQTamODGDpP+1V0xZi8TYWUOZ7Bu
-6c5x1QNXtKM0DH3BUB00VJuSYZROvJ6tp6//wzBCAPioqiMotSPiWHyvmO0iu8I4
-+2+/3tpBSSPg7X8ESzW6T5m/tMGd3JH2d7O1AeqjHr8kFSfDNXAQv8p/oGmbPxGp
-LHC38OG7d8F7krlECP0NMVhPM9wDbUEyT7uhy1W8w/lwCvi4yIZShspdwY9xe7bi
-yBijTu0zIU2JzuPmTCgZT1OE9CunAWy7V/tr9r8IKv7kpjYSxnjHslYNAyflTIbM
-Q91JAXg1+B3k8S5cFFFRiyy0inpnV40tP/UCAwEAAaNCMEAwDwYDVR0TAQH/BAUw
-AwEB/zAdBgNVHQ4EFgQUSNcG3LfTDNY686N/EtRETbwLmucwDgYDVR0PAQH/BAQD
-AgEGMA0GCSqGSIb3DQEBBQUAA4IBAQANg3nAa32e+2qlAgtTPDw47R+/lGn8ZlYZ
-hqP3clqGEubVKdl1XP6mvxUFy+E8oSpctGVw7R2AbVCPpdjpIsL1U3FqwRWHAxFf
-WSlUEefJF5ceVka6bsgWrj/9r6SHOaIUGsiUvMW4QC5B46W7AuvVwXSylFy2SIyD
-V1RWqubP+yNOSBSptgzA3o5ng9R3Ue51T27RfFpbO2Hgc0cK2m9SYjTbN46wZh9p
-ful0F5dtOmedC6MkiyTODW0pMAjtWEM3H64FO+Px1PSVujvZBwd/Jmxwk9mOLASw
-/qFxbA7dptBzWajgoGCmAs38ysrafmfBSpOmVzulLODy2FinXatL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 -----END CERTIFICATE-----
diff --git a/net/data/ssl/scripts/generate-cross-signed-certs.sh b/net/data/ssl/scripts/generate-cross-signed-certs.sh
index 299092d..a40ca74 100755
--- a/net/data/ssl/scripts/generate-cross-signed-certs.sh
+++ b/net/data/ssl/scripts/generate-cross-signed-certs.sh
@@ -35,14 +35,14 @@ touch out/2048-md5-root-index.txt
 try openssl genrsa -out out/2048-sha1-root.key 2048
 
 # Generate the root certificate
-CA_COMMON_NAME="Test Root CA" \
+CA_COMMON_NAME="Test Dup-Hash Root CA" \
   try openssl req \
     -new \
     -key out/2048-sha1-root.key \
     -out out/2048-sha1-root.req \
     -config ca.cnf
 
-CA_COMMON_NAME="Test Root CA" \
+CA_COMMON_NAME="Test Dup-Hash Root CA" \
   try openssl x509 \
     -req -days 3650 \
     -sha1 \
@@ -53,7 +53,7 @@ CA_COMMON_NAME="Test Root CA" \
     -extfile ca.cnf \
     -extensions ca_cert
 
-CA_COMMON_NAME="Test Root CA" \
+CA_COMMON_NAME="Test Dup-Hash Root CA" \
   try openssl x509 \
     -req -days 3650 \
     -md5 \
@@ -72,7 +72,7 @@ try openssl req \
   -config ee.cnf
 
 # Generate the leaf certificates
-CA_COMMON_NAME="Test Root CA" \
+CA_COMMON_NAME="Test Dup-Hash Root CA" \
   try openssl ca \
     -batch \
     -extensions user_cert \
@@ -81,6 +81,12 @@ CA_COMMON_NAME="Test Root CA" \
     -out out/ok_cert.pem \
     -config ca.cnf
 
-cp out/2048-md5-root.pem ../certificates/cross-signed-root-md5.pem
-cp out/2048-sha1-root.pem ../certificates/cross-signed-root-sha1.pem
-cp out/ok_cert.pem ../certificates/cross-signed-leaf.pem
+try openssl x509 -text \
+  -in out/2048-md5-root.pem \
+  -out ../certificates/cross-signed-root-md5.pem
+try openssl x509 -text \
+  -in out/2048-sha1-root.pem \
+  -out ../certificates/cross-signed-root-sha1.pem
+try openssl x509 -text \
+  -in out/ok_cert.pem \
+  -out ../certificates/cross-signed-leaf.pem