Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325

Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325

Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325

Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325

Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325

Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325

Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
Ë øŠjRnãó—dZddlmZmZmZmZddlmZddlm Z ddl Z ddlZddlZddl Z ddlZddlZddlmZddlmZmZdd lmZdd lmZmZmZddlmZmZmZmZddl m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3m4Z4m5Z5m6Z6m7Z7m8Z8m9Z9m:Z:m;Z;mZ>ddl?m@Z@mAZAmBZBmCZCGd„de*«ZDGd„de*«ZEGd„de*«ZFGd„de0«ZGGd„de3«ZHGd„de4«ZIGd„de"«ZJGd„de3«ZKGd„d e7«ZLed!„«ZMGd"„d#e%«ZNGd$„d%e.«ZOGd&„d'e3«ZPGd(„d)e6«ZQGd*„d+e4«ZRGd,„d-e%«ZSGd.„d/e3«ZTGd0„d1e%«ZUGd2„d3e%«ZVGd4„d5e%«ZWGd6„d7e5«ZXGd8„d9e5«ZYGd:„d;e4«ZZGd<„d=e4«Z[Gd>„d?e3«Z\Gd@„dAe3«Z]GdB„dCe4«Z^GdD„dEe3«Z_GdF„dGe4«Z`GdH„dIe%«ZaGdJ„dKe%«ZbGdL„dMe5«ZcGdN„dOe4«ZdGdP„dQe5«ZeGdR„dSe3«ZfGdT„dUe6«ZgGdV„dWe3«ZhGdX„dYe%«ZiGdZ„d[e+«ZjGd\„d]e+«ZkGd^„d_e3«ZlGd`„dae4«ZmGdb„dce3«ZnGdd„dee3«ZoGdf„dge%«ZpGdh„die4«ZqGdj„dke%«ZrGdl„dme3«ZsGdn„doe3«ZtGdp„dqe3«ZuGdr„dse%«ZvGdt„due"«ZwGdv„dwe3«ZxGdx„dye4«ZyGdz„d{e3«ZzGd|„d}e3«Z{Gd~„de4«Z|Gd€„de%«Z}Gd‚„dƒe4«Z~Gd„„d…e3«ZGd†„d‡e3«Z€Gdˆ„d‰e.«ZGdŠ„d‹e3«Z‚GdŒ„de4«ZƒGdŽ„de.«Z„Gd„d‘e3«Z…Gd’„d“e4«Z†Gd”„d•e3«Z‡Gd–„d—e4«ZˆGd˜„d™e3«Z‰Gdš„d›e.«ZŠGdœ„de4«Z‹Gdž„dŸe.«ZŒGd „d¡e3«ZGd¢„d£e4«ZŽGd¤„d¥e4«ZGd¦„d§e4«ZGd¨„d©e3«Z‘Gdª„d«e"«Z’Gd¬„de+«Z“Gd®„d¯e3«Z”Gd°„d±e6«Z•Gd²„d³e3«Z–Gd´„dµe3«Z—Gd¶„d·e6«Z˜Gd¸„d¹e'«Z™Gdº„d»e'«ZšGd¼„d½e'«Z›Gd¾„d¿e'«ZœGdÀ„dÁe'«ZGdÂ„dÃe'«ZžGdÄ„dÅe3«ZŸGdÆ„dÇe3«Z GdÈ„dÉe'«Z¡GdÊ„dËe3«Z¢GdÌ„dÍe3«Z£GdÎ„dÏe6«Z¤GdÐ„dÑe.«Z¥GdÒ„dÓe6«Z¦GdÔ„dÕe6«Z§GdÖ„d×e6«Z¨GdØ„dÙe3«Z©GdÚ„dÛe6«ZªGdÜ„dÝe3«Z«GdÞ„dße4«Z¬Gdà„dáe.«ZGdâ„dãe3«Z®Gdä„dåe4«Z¯Gdæ„dçe3«Z°Gdè„dée3«Z±Gdê„dëe4«Z²Gdì„díe4«Z³Gdî„dïe3«Z´Gdð„dñe&«Zµy)òzò ASN.1 type classes for X.509 certificates. Exports the following items: - Attributes() - Certificate() - Extensions() - GeneralName() - GeneralNames() - Name() Other type classes are defined that help compose the types listed above. é)Úunicode_literalsÚdivisionÚabsolute_importÚprint_function)Úcontextmanager)ÚidnaNé)Úunwrap)Ú iri_to_uriÚ uri_to_iri)ÚOrderedDict)Ú type_nameÚstr_clsÚ bytes_to_list)ÚAlgorithmIdentifierÚAnyAlgorithmIdentifierÚDigestAlgorithmÚSignedDigestAlgorithm)ÚAnyÚ BitStringÚ BMPStringÚBooleanÚChoiceÚConcatÚ EnumeratedÚGeneralizedTimeÚ GeneralStringÚ IA5StringÚIntegerÚNullÚ NumericStringÚObjectIdentifierÚOctetBitStringÚOctetStringÚParsableOctetStringÚPrintableStringÚSequenceÚ SequenceOfÚSetÚSetOfÚ TeletexStringÚUniversalStringÚUTCTimeÚ UTF8StringÚ VisibleStringÚVOID)Ú PublicKeyInfo)Úint_to_bytesÚint_from_bytesÚ inet_ntopÚ inet_ptoncó&—eZdZdZdZd„Zd„Zd„Zy)ÚDNSNamer©éécó—||k(S©N©©ÚselfÚothers ú@/opt/nydus/tmp/pip-target-96rp6e1e/lib/python/asn1crypto/x509.pyÚ__ne__zDNSName.__ne__Ló€Ø˜5‘=Ð Ð ócóž—t|t«sy|j«j«|j«j«k(S)zº Equality as defined by https://tools.ietf.org/html/rfc5280#section-7.2 :param other: Another DNSName object :return: A boolean F)Ú isinstancer7Ú__unicode__Úlowerr>s rAÚ__eq__zDNSName.__eq__Os@€ô˜%¤Ô)Øà×ÑÓ!×'Ñ'Ó)¨U×->Ñ->Ó-@×-FÑ-FÓ-HÑHÐHrDc óh—t|t«s(ttdt |«t |«««‚|jd«r"d|ddj |j«z}n|j |j«}||_||_ d|_ |jdk7rd|_yy)zd Sets the value of the DNS name :param value: A unicode string úK %s value must be a unicode string, not %s ú.ó.r NrD)rFrÚ TypeErrorr rÚ startswithÚencodeÚ _encodingÚ_unicodeÚcontentsÚ_headerÚ_trailer)r?ÚvalueÚ encoded_values rAÚsetzDNSName.set_s¦€ô˜%¤Ô)ÜœFðô˜$“Ü˜%Ó óóð ð×Ñ˜CÔ Ø 5¨¨ 9×#3Ñ#3°D·N±NÓ#CÑC‰Mà!ŸL™L¨¯©Ó8ˆMàˆŒ Ø%ˆŒ ØˆŒØ=‰=˜CÒØˆDMð rDN)Ú__name__Ú __module__Ú__qualname__rQÚ_bad_tagrBrIrXr=rDrAr7r7Gs„à€IØ€Hò!òIó rDr7có$—eZdZd„Zd„Zd„Zd„Zy)ÚURIc óÞ—t|t«s(ttdt |«t |«««‚||_t |«|_d|_|jdk7rd|_ yy)úb Sets the value of the string :param value: A unicode string rKNrD) rFrrNr rrRrrSrTrU©r?rVs rArXzURI.set~sl€ô˜%¤Ô)ÜœFðô˜$“Ü˜%Ó óóð ðˆŒ Ü" 5Ó)ˆŒ ØˆŒØ=‰=˜CÒØˆDMð rDcó—||k(Sr<r=r>s rArBz URI.__ne__•rCrDcó~—t|t«syt|jd«t|jd«k(S)z¶ Equality as defined by https://tools.ietf.org/html/rfc5280#section-7.4 :param other: Another URI object :return: A boolean FT)rFr^rÚnativer>s rArIz URI.__eq__˜s2€ô˜%¤Ô%Øä˜$Ÿ+™+ tÓ,´ ¸5¿<¹<ÈÓ0NÑNÐNrDcóˆ—|j€y|j€t|j««|_|jS©ú7 :return: A unicode string Ú)rSrRrÚ _merge_chunks©r?s rArGzURI.__unicode__¨s:€ð=‰=Ð ØØ=‰=Ð Ü& t×'9Ñ'9Ó';Ó<ˆDŒMØ}‰}ÐrDN)rYrZr[rXrBrIrGr=rDrAr^r^|s„ò ò.!òOó rDr^cód—eZdZdZdZdZed„«Zejd„«Zd„Z d„Z d„Zd „Zy) ÚEmailAddressNFr8có—|jS)z` :return: A byte string of the DER-encoded contents of the sequence )Ú _contentsrjs rArSzEmailAddress.contents¿s€ð~‰~ÐrDcó —d|_||_y)ze :param value: A byte string of the DER-encoded contents of the sequence FN)Ú_normalizedrnras rArSzEmailAddress.contentsÈs€ð!ˆÔØˆrDc óœ—t|t«s(ttdt |«t |«««‚|jd«dk7r<|j dd«\}}|jd«dz|jd«z}n|jd«}d|_||_ ||_ d |_|jd k7rd |_y y )r`rKú@éÿÿÿÿr Úasciió@rTNrD) rFrrNr rÚfindÚrsplitrPrprRrSrTrU)r?rVÚmailboxÚhostnamerWs rArXzEmailAddress.setÒsÃ€ô˜%¤Ô)ÜœFðô˜$“Ü˜%Ó óóð ð:‰:c‹?˜bÒ Ø %§¡¨S°!Ó 4ÑˆGXØ#ŸN™N¨7Ó3°dÑ:¸X¿_¹_ÈVÓ=TÑT‰Mà!ŸL™L¨Ó1ˆMàˆÔØˆŒ Ø%ˆŒ ØˆŒØ=‰=˜CÒØˆDMð rDcó>—|j€†|j«}|jd«dk(r"|jd«|_|jS|j dd«\}}|jd«dz|jd«z|_|jS)rgrursÚcp1252r rrr)rRrirvÚdecoderw)r?rSrxrys rArGzEmailAddress.__unicode__ðsŽ€ð=‰=Ð Ø×)Ñ)Ó+ˆHØ}‰}˜TÓ" bÒ(Ø (§¡°Ó 9” ð}‰}Ðð%-§O¡O°D¸!Ó$<Ñ!˜Ø '§¡¨xÓ 8¸3Ñ >ÀÇÁÐQWÓAXÑ X” Ø}‰}ÐrDcó—||k(Sr<r=r>s rArBzEmailAddress.__ne__rCrDcó8—t|t«sy|js|j|j«|js|j|j«|j j d«dk(s|j j d«dk(r|j |j k(S|j jdd«\}}|j jdd«\}}||k7ry|j«|j«k7ryy)z¿ Equality as defined by https://tools.ietf.org/html/rfc5280#section-7.5 :param other: Another EmailAddress object :return: A boolean Frursr T) rFrlrprXrdrnrvrwrH)r?r@Ú other_mailboxÚother_hostnamerxrys rArIzEmailAddress.__eq__sâ€ô˜%¤Ô.Øà×ÒØH‰HT—[‘[Ô!Ø× Ò ØI‰Ie—l‘lÔ#à>‰>×Ñ˜tÓ$¨Ò*¨e¯o©o×.BÑ.BÀ4Ó.HÈBÒ.NØ—>‘> U§_¡_Ñ4Ð4à(-¯©×(>Ñ(>¸tÀQÓ(GÑ%ˆ ~Ø ŸN™N×1Ñ1°$¸Ó:ÑˆàmÒ#Øà>‰>Ó˜~×3Ñ3Ó5Ò5ØàrD) rYrZr[rnrpr\ÚpropertyrSÚsetterrXrGrBrIr=rDrArlrlµsS„à€Ið€Kð€Hà ñóðð‡__ñóðò ò<ò"!órDrlcó6—eZdZdd„Zd„Zed„«Zd„Zd„Zy)Ú IPAddressNcó*—ttd««‚)z? This method is not applicable to IP addresses z= IP address values can not be parsed )Ú ValueErrorr )r?ÚspecÚspec_paramss rAÚparsezIPAddress.parse's€ô œð ó óð rDc ó\—t|t«s(ttdt |«t |«««‚|}|jd«dk7}d}|rH|j dd«}|d}t|d«}|dkrttdt |«««‚|jd«dk7r6tj}|dkDrttd t |«««‚d}n5tj}|d kDrttdt |«««‚d }d}|rEd |z} | d|t| «z zz } tt| d««}d|dzt|«z z|z}||_t||«|z|_|j |_d|_|j&dk7rd|_yy)zÌ Sets the value of the object :param value: A unicode string containing an IPv4 address, IPv4 address with CIDR, an IPv6 address or IPv6 address with CIDR rKú/rsrr zT %s value contains a CIDR range less than 0 ú:é€z“ %s value contains a CIDR range bigger than 128, the maximum value for an IPv6 address é z’ %s value contains a CIDR range bigger than 32, the maximum value for an IPv4 address rDÚ1Ú0éóéN)rFrrNr rrvÚsplitÚintr†ÚsocketÚAF_INET6ÚAF_INETÚlenr2Ú_nativer5rSÚ_bytesrTrU) r?rVÚoriginal_valueÚhas_cidrÚcidrÚpartsÚfamilyÚ cidr_sizeÚ cidr_bytesÚ cidr_masks rArXz IPAddress.set2sÆ€ô˜%¤Ô)ÜœFðô˜$“Ü˜%Ó óóð ðˆà—:‘:˜c“? bÑ(ˆØˆÙØ—K‘K QÓ'ˆEØ˜!‘HˆEÜu˜Q‘x“=ˆDØaŠxÜ ¤ðô˜d“Oó "óðð:‰:c‹?˜bÒ Ü—_‘_ˆFØcŠzÜ ¤ðô˜d“Oó"óðð‰Iä—^‘^ˆFØbŠyÜ ¤ðô˜d“Oó"óððˆIàˆ ÙØ˜d™ ˆIØ˜ ¬C° «NÑ :Ñ;Ñ;ˆIÜ%¤c¨)°QÓ&7Ó8ˆJØ! i°1¡n¼¸J»Ñ%GÑHÈJÑVˆJà%ˆŒÜ! &¨%Ó0°:Ñ=ˆŒ Ø—m‘mˆŒØˆŒØ=‰=˜CÒØˆDMð rDcó—|j€y|j€ã|j«}t|«}d}d}|t ddg«vr1ttj|dd«}|dkDrNt|dd«}n?|t ddg«vr0ttj|dd«}|dkDrt|dd«}|Ó?‘HØœS ! Q ›[Ñ(Ü!¤&§.¡.°+¸aÀÐ2BÓCØ˜a’<Ü-¨k¸!¸"¨oÓ>HØÐ#Ø#ŸN™N¨8Ó4 Ü˜9×+Ñ+¨CÓ0Ó1Ø ™¤g¨d£mÑ3Ø ˆDŒLØ|‰|ÐrDcó—||k(Sr<r=r>s rArBzIPAddress.__ne__™rCrDcóf—t|t«sy|j«|j«k(S)zl :param other: Another IPAddress object :return: A boolean F)rFr„r§r>s rArIzIPAddress.__eq__œs*€ô˜%¤Ô+Øà~‰~Ó 5§?¡?Ó#4Ñ4Ð4rD)NN) rYrZr[r‰rXrrdrBrIr=rDrAr„r„&s,„ó òE ðNñóðò>!ó5rDr„có"—eZdZdefdedeifgZy)Ú AttributeÚtypeÚvaluesr‡N)rYrZr[r"r*rÚ_fieldsr=rDrAr±r±«s „à Ð!Ð"Ø 5˜6 3˜-Ð(ðGrDr±có—eZdZeZy)Ú AttributesN)rYrZr[r±Ú_child_specr=rDrAr¶r¶²ó„ØKrDr¶c ó$—eZdZddddddddd d œ Zy)ÚKeyUsageÚdigital_signatureÚnon_repudiationÚkey_enciphermentÚdata_enciphermentÚ key_agreementÚ key_cert_signÚcrl_signÚ encipher_onlyÚ decipher_only© rr r‘ér¦ééér“N©rYrZr[Ú_mapr=rDrArºrº¶s$„àØØØØØØØØñ DrDrºcó,—eZdZdedddœfdedddœfgZy)ÚPrivateKeyUsagePeriodÚ not_beforerT©ÚimplicitÚoptionalÚ not_afterr N)rYrZr[rr´r=rDrArÌrÌÄs'„à °QÀDÑ(IÐJØ o°AÀ4Ñ'HÐIðGrDrÌcó—eZdZdZdZd„Zy)ÚNotReallyTeletexStringa6 OpenSSL (and probably some other libraries) puts ISO-8859-1 into TeletexString instead of ITU T.61. We use Windows-1252 when decoding since it is a superset of ISO-8859-1, and less likely to cause encoding issues, but we stay strict with encoding to prevent us from creating bad data. r{có¨—|j€y|j€.|j«j|j«|_|jSrf)rSrRrir|Ú_decoding_encodingrjs rArGz"NotReallyTeletexString.__unicode__ÖsF€ð=‰=Ð ØØ=‰=Ð Ø ×.Ñ.Ó0×7Ñ7¸×8OÑ8OÓPˆDŒMØ}‰}ÐrDN)rYrZr[Ú__doc__rÕrGr=rDrArÓrÓËs„ñð"Ðó rDrÓc#óbK— dt_d–—dt_y#dt_wxYww)NÚteletexr{)rÓrÕr=rDrAÚstrict_teletexrÙãs)èø€ð=Ø4=ÔÔ1Û à4<ÔÕ1ø°HÔÕ1üs‚/„“/Ÿ ,¬/có4—eZdZdefdefdefdefdefdefgZ y)ÚDirectoryStringÚteletex_stringÚprintable_stringÚuniversal_stringÚutf8_stringÚ bmp_stringÚ ia5_stringN) rYrZr[rÓr&r,r.rrÚ _alternativesr=rDrArÛrÛìs:„à Ð1Ð2Ø ˜_Ð-Ø ˜_Ð-Ø ˜ Ð#Ø yÐ!à yÐ!ðMrDrÛcó—eZdZidd“dd“dd“dd“d d “dd“d d“dd“dd“dd“dd“dd“dd“dd“dd“dd “d!d"“id#d$“d%d&“d'd(“d)d*“d+d,“d-d.“d/d0“d1d2“d3d4“d5d6“d7d8“d9d:“d;d<“d=d>“d?d@“dAdB“dCdD“¥ZgdE¢ZedF„«ZedG„«ZyH)IÚNameTypez2.5.4.3Úcommon_namez2.5.4.4Úsurnamez2.5.4.5Ú serial_numberz2.5.4.6Úcountry_namez2.5.4.7Ú locality_namez2.5.4.8Ústate_or_province_namez2.5.4.9Ústreet_addressz2.5.4.10Úorganization_namez2.5.4.11Úorganizational_unit_namez2.5.4.12Útitlez2.5.4.15Úbusiness_categoryz2.5.4.17Úpostal_codez2.5.4.20Útelephone_numberz2.5.4.41Únamez2.5.4.42Ú given_namez2.5.4.43Úinitialsz2.5.4.44Úgeneration_qualifierz2.5.4.45Úunique_identifierz2.5.4.46Údn_qualifierz2.5.4.65Ú pseudonymz2.5.4.97Úorganization_identifierz2.23.133.2.1Útpm_manufacturerz2.23.133.2.2Ú tpm_modelz2.23.133.2.3Útpm_versionz2.23.133.2.4Úplatform_manufacturerz2.23.133.2.5Úplatform_modelz2.23.133.2.6Úplatform_versionz1.2.840.113549.1.9.1Ú email_addressz1.3.6.1.4.1.311.60.2.1.1Úincorporation_localityz1.3.6.1.4.1.311.60.2.1.2Úincorporation_state_or_provincez1.3.6.1.4.1.311.60.2.1.3Úincorporation_countryz0.9.2342.19200300.100.1.1Úuser_idz0.9.2342.19200300.100.1.25Údomain_componentz0.2.262.1.10.7.20Úname_distinguisher)!rrrrïrçrèrðrêrérërìrírîrårrôrõræróròrør÷rñrrrrùrúrûrürýrþrÿcó°—|j|«}||jvr|jj|«}||fSt|j«}||fS)zÍ Returns an ordering value for a particular attribute key. Unrecognized attributes and OIDs will be sorted lexically at the end. :return: An orderable value. )ÚmapÚpreferred_orderÚindexr™)ÚclsÚ attr_nameÚordinals rAÚpreferred_ordinalzNameType.preferred_ordinalKs`€ð—G‘G˜IÓ&ˆ Ø˜×+Ñ+Ñ+Ø×)Ñ)×/Ñ/° Ó:ˆGð˜Ð#Ð#ô˜#×-Ñ-Ó.ˆGà˜Ð#Ð#rDcó—idd“dd“dd“dd“d d “dd“d d“dd“dd“dd“dd“dd“dd“dd“dd“dd “d!d"“id#d$“d%d&“d'd(“d)d*“d+d,“d-d.“d/d0“d1d2“d3d4“d5d6“d7d8“d9d:“d;d<“d=d>“d?d@“dAdB“dCdD“¥j|j|j«S)EzZ :return: A human-friendly unicode string to display to users råzCommon NameræÚSurnamerçz Serial NumberrèÚCountryréÚLocalityrêzState/ProvincerëzStreet AddressrìÚOrganizationrízOrganizational UnitrîÚTitlerïzBusiness CategoryrðzPostal CoderñzTelephone NumberròÚNameróz Given NamerôÚInitialsrõzGeneration QualifierrözUnique Identifierr÷zDN QualifierrøÚ Pseudonymrz Email AddressrzIncorporation LocalityrzIncorporation State/ProvincerzIncorporation CountryrzDomain ComponentrzName DistinguisherrùzOrganization IdentifierrúzTPM Manufacturerrûz TPM ModelrüzTPM VersionrýzPlatform ManufacturerrþzPlatform ModelrÿzPlatform VersionrzUser ID)Úgetrdrjs rAÚhuman_friendlyzNameType.human_friendly_sÏ€ð# Ø˜=ð# àyð# ð ˜_ð# ð ˜Ið # ð ˜Zð# ð %Ð&6ð # ð Ð.ð# ð ð# ð 'Ð(=ð# ð Wð# ð Ð!4ð# ð ˜=ð# ð Ð 2ð# ð Fð# ð ˜,ð# ð ˜ ð!# ð" #Ð$:ñ## ð$ Ð!4ð%# ð& ˜Nð'# ð( ˜ð)# ð* ˜_ð+# ð, %Ð&>ð-# ð. .Ð/Mð/# ð0 $Ð%<ð1# ð2 Ð 2ð3# ð4 !Ð"6ð5# ð6 &Ð'@ð7# ð8 Ð 2ð9# ð: ˜ð;# ð< ˜=ð=# ð> $Ð%<ð?# ð@ Ð.ðA# ðB Ð 2ðC# ðD yñE# ÷F‰#ˆdk‰k˜4Ÿ;™;Ó 'ðG# (rDN) rYrZr[rÊr Úclassmethodrrrr=rDrAräräøsì„ð)Ø=ð)à9ð)ð ?ð)ð >ð )ð ?ð)ð Ð+ð )ð Ð#ð)ð Ð'ð)ð Ð.ð)ð Gð)ð Ð'ð)ð Mð)ð Ð&ð)ð Fð)ð Lð)ð Jð!)ð" Ð*ñ#)ð$ Ð'ð%)ð& Nð')ð( Kð))ð* Ð-ð+)ð. Ð*ð/)ð0 ˜ð1)ð2 ˜ ð3)ð4 Ð/ð5)ð6 Ð(ð7)ð8 Ð*ð9)ð< ð=)ð@ #Ð$<ðA)ðB #Ð$EðC)ðD #Ð$;ðE)ðH $ YðI)ðL %Ð&8ðM)ðP Ð1ñQ)€Dò\"€OðHñ$óð$ð&ñ)(óñ)(rDräcó—eZdZdefdefgZdZide“de“de“de“de“d e“d e“de“de“d e“de“de“de“de“de“de“de“ide “de“de“de “de“de“de“de“de“de“de“d e“d!e“d"e“d#e“d$e“d%e“¥Z d&Zed'„«Zd(„Zd)„Zd*„Zy&)+ÚNameTypeAndValuer²rV©r²rVrårærçrèrérêrërìrírîrïrðrñròrórôrõrör÷rørrrrrrrùrúrûrürýrþrÿrNcóx—|j€#|j|dj«|_|jS)zµ Returns the value after being processed by the internationalized string preparation as specified by RFC 5280 :return: A unicode string rV)Ú_preppedÚ_ldap_string_preprdrjs rAÚ prepped_valuezNameTypeAndValue.prepped_value¼s4€ð=‰=Ð Ø ×2Ñ2°4¸±=×3GÑ3GÓHˆDŒMØ}‰}ÐrDcó—||k(Sr<r=r>s rArBzNameTypeAndValue.__ne__ÊrCrDcó–—t|t«sy|dj|djk7ry|j|jk(S)zÃ Equality as defined by https://tools.ietf.org/html/rfc5280#section-7.1 :param other: Another NameTypeAndValue object :return: A boolean Fr²)rFrrdr!r>s rArIzNameTypeAndValue.__eq__ÍsH€ô˜%Ô!1Ô2Øà‰=×Ñ 4¨¡<×#6Ñ#6Ò6Øà×"Ñ" d×&8Ñ&8Ñ8Ð8rDcó"—tjdd|«}tjdd|«}tjdk(rtjdd|«}ntjdd|«}tjdd|«}|j d d«}tjd d|«}djt tj|««}tjd|«}|D]è}tj|«rttd««‚tj|«rttd ««‚tj|«rttd««‚tj |«rttd««‚tj"|«rttd««‚|dk(sŒÖttd««‚d}d}|D]2}tj$|«rd}Œtj&|«sŒ1d}Œ4|rJtj$|d«}tj$|d«}|s|r|sttd««‚dtjdd|«j)«zdz}|S)a" Implements the internationalized string preparation algorithm from RFC 4518. https://tools.ietf.org/html/rfc4518#section-2 :param string: A unicode string to prepare :return: A prepared unicode string, ready for comparison u[Âá †Íá ‹-á ï¸-ï¼€ï¿¼]+rhu [ Â…]ú iÿÿuí ´[íµ³-íµº]|í€[í° -í±¿]|ó €u[ð…³-ð…ºó € -ó ¿ó €]u?[---Â„Â†-ÂŸÛÜá Žâ€Œ-â€â€ª-â€®â -â£âª-â¯ï»¿ï¿¹-ï¿»]+uâ€‹u[Â áš€â€€-â€Šâ€¨-â€©â€¯âŸã€€]ÚNFKCzc X.509 Name objects may not contain unassigned code points zŒ X.509 Name objects may not contain change display or zzzzdeprecated characters zc X.509 Name objects may not contain private use characters zf X.509 Name objects may not contain non-character code points zb X.509 Name objects may not contain surrogate code points uï¿½zf X.509 Name objects may not contain the replacement character FTrrsz{ X.509 Name object contains a malformed bidirectional sequence z +z )ÚreÚsubÚsysÚ maxunicodeÚreplaceÚjoinrÚ stringprepÚmap_table_b2ÚunicodedataÚ normalizeÚin_table_a1r†r Úin_table_c8Úin_table_c3Úin_table_c4Úin_table_c5Úin_table_d1Úin_table_d2Ústrip)r?ÚstringÚcharÚhas_r_and_al_catÚ has_l_catÚfirst_is_r_and_alÚlast_is_r_and_als rAr z"NameTypeAndValue._ldap_string_prepàs•€ô—‘ÐOÐQSÐU[Ó\ˆÜ—‘Ð@À#ÀvÓNˆÜ>‰>˜VÒ#ô—V‘VÐTÐVXÐZ`Óa‰Fä—V‘VÐTÐVXÐZ`ÓaˆFÜ—‘ð KàØó ˆð—‘ ¨"Ó-ˆÜ—‘ÐTÐVYÐ[aÓbˆà—‘œœZ×4Ñ4°fÓ=Ó>ˆô×&Ñ& v¨vÓ6ˆðò* ˆDÜ×%Ñ% dÔ+Ü ¤ðó"óðô×%Ñ% dÔ+Ü ¤ðó"óðô×%Ñ% dÔ+Ü ¤ðó"óðô×%Ñ% dÔ+Ü ¤ðó"óðô×%Ñ% dÔ+Ü ¤ðó"óððxÓÜ ¤ðó"óððM* ð\!ÐØˆ Øò !ˆDÜ×%Ñ% dÔ+Ø#'Ñ Ü×'Ñ'¨Õ-Ø ‘ ð !ñÜ *× 6Ñ 6°v¸a±yÓ AÐÜ)×5Ñ5°f¸R±jÓAÐáÑ 1Ñ9IÜ ¤ðó"óðð”r—v‘v˜d D¨&Ó1×7Ñ7Ó9Ñ9¸CÑ?ˆàˆ rD)rYrZr[rärr´Ú _oid_pairrÛr&r#rlr7r.Ú _oid_specsrrr!rBrIr r=rDrArrŒsî„à ÐØ #ˆð€Gð "€Ið%Øð%à?ð%ð ˜ð%ð ˜ð %ð ˜ð%ð ! /ð %ð ˜/ð%ð ˜_ð%ð # Oð%ð ð%ð ˜_ð%ð ð%ð ˜Oð%ð ð%ð oð%ð Oð!%ð" ñ#%ð$ ˜^ð%%ð& ˜ð'%ð( _ð)%ð, ˜ð-%ð0 ! /ð1%ð2 *¨?ð3%ð4 ð5%ð6 ˜Gð7%ð8 ˜oð9%ð: " ?ð;%ð< ˜Jð=%ð> Zð?%ð@ zðA%ðB ðC%ðD ˜*ðE%ðF ˜JðG%ðH ?ñI%€JðN€Hà ñóðò!ò9ó&jrDrcó8—eZdZeZed„«Zd„Zd„Zd„Z d„Z y)ÚRelativeDistinguishedNamecó¸—g}|j|«}t|j««D]}|j|›d||›«Œdj |«S)úb :return: A unicode string that can be used as a dict key or in a set ú: ú)Ú_get_valuesÚsortedÚkeysÚappendr,)r?Úoutputr³Úkeys rAÚhashablez"RelativeDistinguishedName.hashablePsY€ðˆØ×!Ñ! $Ó'ˆÜ˜&Ÿ+™+›-Ó(ò 9ˆCØM‰M¢c¨6°#ª;Ð7Õ8ð 9ð {‰{˜6Ó"Ð"rDcó—||k(Sr<r=r>s rArBz RelativeDistinguishedName.__ne__`rCrDcó—t|t«syt|«t|«k7ry|j|«}|j|«}||k7ry|j |«}|j |«}|D]}||||k7sŒyy)zÌ Equality as defined by https://tools.ietf.org/html/rfc5280#section-7.1 :param other: Another RelativeDistinguishedName object :return: A boolean FT)rFrBr™Ú _get_typesrG)r?r@Ú self_typesÚother_typesÚself_valuesÚother_valuesÚ type_name_s rArIz RelativeDistinguishedName.__eq__cs•€ô˜%Ô!:Ô;Øäˆt‹9œ˜E› Ò"Øà—_‘_ TÓ*ˆ Ø—o‘o eÓ,ˆà˜Ò$Øà×&Ñ& tÓ,ˆØ×'Ñ'¨Ó.ˆà$ò ˆJØ˜:Ñ&¨,°zÑ*BÓBÙð ðrDcóX—t|Dcgc]}|dj‘Œc}«Scc}w)zò Returns a set of types contained in an RDN :param rdn: A RelativeDistinguishedName object :return: A set object with unicode strings of NameTypeAndValue type field values r²)rXrd)r?ÚrdnÚntvs rArPz$RelativeDistinguishedName._get_typesƒs'€ô°#Ö6¨3C˜‘K×&Ó&Ò6Ó7Ð7ùÒ6sŠ'có†—i}|Dcgc]-}|j|dj|jfg«‘Œ/c}|Scc}w)a$ Returns a dict of prepped values contained in an RDN :param rdn: A RelativeDistinguishedName object :return: A dict object with unicode strings of NameTypeAndValue value field values that have been prepped for comparison r²)Úupdaterdr!)r?rWrKrXs rArGz%RelativeDistinguishedName._get_values‘sC€ðˆØMPÖQÀcˆ‰˜˜V™×+Ñ+¨S×->Ñ->Ð?Ð@Õ AÓQØˆ ùò Rs‡2>N)rYrZr[rr·rrMrBrIrPrGr=rDrArBrBMs.„Ø"€Kà ñ #óð #ò!òò@8órDrBcó,—eZdZeZed„«Zd„Zd„Zy)ÚRDNSequencecó2—djd„|D««S)rDúc3ó4K—|]}|j–—Œywr<)rM)Ú.0rWs rAú z'RDNSequence.hashable..¯sèø€Ò8¨C˜3Ÿ<<Ñ8ùs‚)r,rjs rArMzRDNSequence.hashable¥s€ð{‰{Ñ8°4Ô8Ó8Ð8rDcó—||k(Sr<r=r>s rArBzRDNSequence.__ne__±rCrDcó—t|t«syt|«t|«k7ryt|«D]\}}|||k7sŒyy)z¾ Equality as defined by https://tools.ietf.org/html/rfc5280#section-7.1 :param other: Another RDNSequence object :return: A boolean FT)rFr\r™Ú enumerate)r?r@r Úself_rdns rArIzRDNSequence.__eq__´sO€ô˜%¤Ô-Øäˆt‹9œ˜E› Ò"Øä(¨›ò ‰OˆE8ØU‰|˜xÓ'Ùð ðrDN) rYrZr[rBr·rrMrBrIr=rDrAr\r\¢s#„Ø+€Kà ñ 9óð 9ò!órDr\cóœ—eZdZdefgZdZdZdZed d„«Z e d„«Zd„Zd„Z d„Ze d„«Ze d „«Zd „Ze d„«Ze d„«Zy)rrhNc óú—g}|s d}t}nd}t}tt|j «d„¬««}|j «D]œ\}}t j |«}|dk(rt|«}nJ|dk(rt|«}n9|tgd¢«vrtdt|«¬«}nt|||«¬«}|jtt||d œ«g««Œž|d t|«¬«S)aY Creates a Name object from a dict of unicode string keys and values. The keys should be from NameType._map, or a dotted-integer OID unicode string. :param name_dict: A dict of name information, e.g. {"common_name": "Will Bond", "country_name": "US", "organization_name": "Codex Non Sufficit LC"} :param use_printable: A bool - if PrintableString should be used for encoding instead of UTF8String. This is for backwards compatibility with old software. :return: An x509.Name object rßrÝcó2—tj|d«S)Nr)rär)Úitems rAúzName.build..ôs€¤×!;Ñ!;¸DÀ¹GÓ!D€rD)rLrr)r÷rèrç)ròrVrrh)r.r&r rHÚitemsrärrlr7rXrÛrJrBrr\) rÚ name_dictÚ use_printableÚrdnsÚ encoding_nameÚencoding_classÚattribute_nameÚattribute_valuerVs rAÚbuildz Name.buildÕs €ð&ˆÙØ)ˆMÜ'‰Nà.ˆMÜ,ˆNô ÜØ—‘Ó!ÙDô ó ˆ ð09¯©Ó/@ò Ñ+ˆN˜OÜ%Ÿ\™\¨.Ó9ˆNØ Ò0Ü$ _Ó5‘ØÐ#5Ò5Ü Ó0‘Ø¤3Ò'XÓ#YÑYÜ'Ø+Ü)¨/Ó:ô‘ô (Ø&Ù(¨Ó9ôð K‰KÔ1Ü Ø*Ø"ñ"óð3óõ ð# ñ0˜¤+¨dÓ"3Ô4Ð4rDcó.—|jjS)rD)ÚchosenrMrjs rArMz Name.hashables€ð{‰{×#Ñ#Ð#rDcó,—t|j«Sr<)r™rurjs rAÚ__len__zName.__len__s€Ü4—;‘;ÓÐrDcó—||k(Sr<r=r>s rArBzName.__ne__rCrDcóV—t|t«sy|j|jk(S)z· Equality as defined by https://tools.ietf.org/html/rfc5280#section-7.1 :param other: Another Name object :return: A boolean F)rFrrur>s rArIzName.__eq__!s$€ô˜%¤Ô&ØØ{‰{˜eŸl™lÑ*Ð*rDcój—|j€œt«|_|jjD]t}|D]m}|d}||jvrF|j|}t |t «s|gx}|j|<|j |d«Œ\|d|j|<ŒoŒv|jS)Nr²rV)ršr rurdrFÚlistrJ)r?rWÚtype_valÚ field_nameÚexistings rArdzName.native0s´€à<‰<ÐÜ&›=ˆDŒLØ—{‘{×)Ñ)ò EØ #òEHØ!)¨&Ñ!1JØ! T§\¡\Ñ1Ø#'§<¡<° Ñ#;˜Ü)¨(´DÔ9ØCKÀ*ÐL˜H t§|¡|°JÑ'?Ø Ÿ™¨°Ñ(9Õ:à3;¸GÑ3D˜Ÿ™ ZÒ0ñEð Eð|‰|ÐrDcó:—|j€t«}d}|jD]G}|D]@}|dj}|}||vr!||g||<||j |d«Œ9|d||<ŒBŒIg}|j«}|dk(rt t|««}|D].}||} |j| «} |j |›d| ›«Œ0d}|D]}|jd«dk7sŒd }n|sd nd} | j|ddd…«|_|jS)zg :return: A human-friendly unicode string containing the parts of the name Nr²rVrrEFú,rsTú, z; )Ú_human_friendlyr rurrJrIÚreversedr{Ú_recursive_humanizervr,)r?ÚdataÚ last_fieldrWr|r}Úto_joinrIrLrVÚnative_valueÚ has_commaÚelementÚ separators rArzName.human_friendly@sT€ð×ÑÑ'Ü“=ˆDØˆJØ—{‘{ò =Ø #ò=HØ!)¨&Ñ!1×!@Ñ!@JØ!+JØ! TÑ)Ø,0°Ñ,<Ð+=˜˜ZÑ(Ø˜ZÑ(×/Ñ/°¸Ñ0AÕBà+3°GÑ+<˜˜ZÒ(ñ=ð =ðˆGØ—9‘9“;ˆDØ˜YÒ&Ü¤ T£ Ó+Øò ?Ø˜S™ Ø#×7Ñ7¸Ó>Ø—‘ª3±Ð=Õ>ð ?ð ˆIØ"ò Ø—<‘< Ó$¨Ó*Ø $IÙð ñ %.™°4ˆIØ#,§>¡>°'¹$¸B¸$±-Ó#@ˆDÔ à×#Ñ#Ð#rDc ó²—t|t«r7djt|Dcgc]}|j |«‘Œc}««S|j Scc}w)zÑ Recursively serializes data compiled from the RDNSequence :param value: An Asn1Value object, or a list of Asn1Value objects :return: A unicode string r)rFr{r,rƒr„rd)r?rVÚ sub_values rAr„zName._recursive_humanizegsO€ôeœTÔ"Ø—9‘9ÜÈuÖUÀ)˜$×2Ñ2°9Õ=ÒUÓVóð ð|‰|ÐùòVs¥Acóž—|j€6tj|j««j «|_|jS)zZ :return: The SHA1 hash of the DER-encoded bytes of this name ©Ú_sha1ÚhashlibÚsha1ÚdumpÚdigestrjs rAr’z Name.sha1xó7€ð:‰:ÐÜ Ÿ™ d§i¡i£kÓ2×9Ñ9Ó;ˆDŒJØz‰zÐrDcóž—|j€6tj|j««j «|_|jS)z] :return: The SHA-256 hash of the DER-encoded bytes of this name ©Ú_sha256r‘Úsha256r“r”rjs rAr™zName.sha256ƒs7€ð<‰<ÐÜ"Ÿ>™>¨$¯)©)«+Ó6×=Ñ=Ó?ˆDŒLØ|‰|ÐrD)F)rYrZr[r\râr‚rr˜rrsrrMrwrBrIrdrr„r’r™r=rDrArrÌs®„à ˆ[Ðð€Mð€OØ€EØ€Gàò:5óð:5ðxñ$óð$ò ò!ò +ðñ óð ðñ$$óð$$òLð"ñóððñóñrDrcó"—eZdZdefdeddifgZy)ÚAnotherNameÚtype_idrVÚexplicitrN)rYrZr[r"rr´r=rDrAr›r›s „à Ð$Ð%Ø #˜ AÐ'ðGrDr›có$—eZdZdZdZdefdefgZy)ÚCountryNamer Ú x121_dcc_codeÚiso_3166_alpha2_codeN©rYrZr[Úclass_Útagr!r&râr=rDrArŸrŸ–s%„Ø €FØ €Cð ˜-Ð(Ø Ð1ðMrDrŸcó$—eZdZdZdZdefdefgZy)ÚAdministrationDomainNamer r‘ÚnumericÚ printableNr¢r=rDrAr¦r¦ s%„Ø €FØ €Cð MÐ"Ø oÐ&ðMrDr¦có—eZdZdefdefgZy)ÚPrivateDomainNamer§r¨N©rYrZr[r!r&râr=rDrArªrªªs„à MÐ"Ø oÐ&ðMrDrªcóF—eZdZdeddifdedddœfded ddœfd edddœfgZy) ÚPersonalNamerærÏrrór TrÎrôr‘rõrÅN©rYrZr[r&r´r=rDrArr±sD„à O j°! _Ð5Ø °QÀDÑ(IÐJØ _°1À$Ñ&GÐHØ ¸qÈdÑ2SÐTð GrDrcóF—eZdZdeddifdedddœfded ddœfd edddœfgZy) ÚTeletexPersonalNamerærÏrrór TrÎrôr‘rõrÅN©rYrZr[r+r´r=rDrAr°r°ºsD„à M J° ?Ð3Ø }°1À$Ñ&GÐHØ ]°ÀÑ$EÐFØ ¸QÈDÑ0QÐRð GrDr°có—eZdZeZy)ÚOrganizationalUnitNamesN©rYrZr[r&r·r=rDrAr³r³Ãó„Ø!KrDr³có—eZdZeZy)ÚTeletexOrganizationalUnitNamesN)rYrZr[r+r·r=rDrAr·r·Çó„ØKrDr·c óŠ—eZdZdeddifdeddifdedddœfded ddœfd edddœfd edddœfdedddœfdedddœfde dddœfg Z y)ÚBuiltInStandardAttributesrèrÐTÚadministration_domain_nameÚnetwork_addressrrÎÚterminal_identifierr Úprivate_domain_namer‘©rrÐrìrÅÚnumeric_user_identifierr¦Ú personal_namerÆÚorganizational_unit_namesrÇN)rYrZr[rŸr¦r!r&rªrr³r´r=rDrArºrºËs”„à ˜ z°4Ð&8Ð9Ø %Ð'?À*ÈdÐASÐTØ ˜M¸ÀtÑ+LÐMØ ¸aÈTÑ1RÐSØ Ð 1ÀÈtÑ3TÐUØ ˜o¸AÈ4Ñ/PÐQØ " MÀÈtÑ3TÐUØ ˜,°QÀDÑ(IÐJØ $Ð&=ÈAÐ[_Ñ?`Ðað GrDrºcó—eZdZdefdefgZy)ÚBuiltInDomainDefinedAttributer²rVNr®r=rDrArÄrÄÙs„à Ð!Ø /Ð"ðGrDrÄcó—eZdZeZy)ÚBuiltInDomainDefinedAttributesN)rYrZr[rÄr·r=rDrArÆrÆàó„Ø/KrDrÆcó—eZdZdefdefgZy)ÚTeletexDomainDefinedAttributer²rVNr±r=rDrArÉrÉäs„à ÐØ -Ð ðGrDrÉcó—eZdZeZy)ÚTeletexDomainDefinedAttributesN)rYrZr[rÉr·r=rDrArËrËërÇrDrËcó—eZdZdefdefgZy)ÚPhysicalDeliveryCountryNamer r¡Nr«r=rDrArÍrÍïs„à ˜-Ð(Ø Ð1ðMrDrÍcó—eZdZdefdefgZy)Ú PostalCodeÚnumeric_codeÚprintable_codeNr«r=rDrArÏrÏös„à ˜Ð'Ø ˜?Ð+ðMrDrÏcó(—eZdZdeddifdeddifgZy)ÚPDSParameterrÝrÐTrÜN)rYrZr[r&r+r´r=rDrArÓrÓýs'„à ˜_¨z¸4Ð.@ÐAØ ˜=¨:°tÐ*<Ð=ðGrDrÓcó—eZdZeZy)ÚPrintableAddressNr´r=rDrArÕrÕrµrDrÕcó(—eZdZdeddifdeddifgZy)ÚUnformattedPostalAddressÚprintable_addressrÐTrÜN)rYrZr[rÕr+r´r=rDrAr×r×s(„à Ð.°¸TÐ0BÐCØ ˜=¨:°tÐ*<Ð=ðGrDr×có*—eZdZdeddifdedddœfgZy) ÚE1634AddressÚnumberrÏrÚsub_addressr TrÎN)rYrZr[r!r´r=rDrArÚrÚs&„à = :¨q /Ð2Ø ˜ °AÀ4Ñ'HÐIðGrDrÚcó—eZdZeZy)Ú NAddressesN)rYrZr[r$r·r=rDrArÞrÞó„ØKrDrÞcóF—eZdZdedddœfdedddœfdedddœfd ed difgZy) ÚPresentationAddressÚ p_selectorrTr¿Ú s_selectorr Ú t_selectorr‘Ún_addressesrrÅN)rYrZr[r$rÞr´r=rDrArárásD„à {°ÀÑ$EÐFØ {°ÀÑ$EÐFØ {°ÀÑ$EÐFØ ˜ Z° OÐ4ð GrDrácó"—eZdZdefdeddifgZy)ÚExtendedNetworkAddressÚe163_4_addressÚpsap_addressrÏrN)rYrZr[rÚrárâr=rDrArçrç#s „à ˜<Ð(Ø Ð,¨z¸1¨oÐ>ðMrDrçcó—eZdZdddddddœZy) ÚTerminalTypeÚtelexrØÚg3_facsimileÚg4_facsimileÚia5_terminalÚvideotex)rÅr¦rÆrÇrÈr“NrÉr=rDrArërë*s„àØØØØØñ DrDrëcóˆ—eZdZidd“dd“dd“dd“d d “dd“d d“dd“dd“dd“dd“dd“dd“dd“dd“dd “d!d"“d#d$d%d&d'd(d)œ¥Zy*)+ÚExtensionAttributeTyper rår‘Úteletex_common_namerÅÚteletex_organization_namer¦Úteletex_personal_namerÆÚteletex_organization_unit_namesrÇÚ!teletex_domain_defined_attributesrÈÚpds_namer“Úphysical_delivery_country_nameé rðé Úphysical_delivery_office_nameéÚphysical_delivery_office_numberr9Úextension_of_address_componentsé Úphysical_delivery_personal_nameéÚ#physical_delivery_organization_nameéÚ.extension_physical_delivery_address_componentsr¥Úunformatted_postal_addressérëÚpost_office_box_addressÚposte_restante_addressÚunique_postal_nameÚlocal_postal_attributesÚextended_network_addressÚ terminal_type)ér:ééééNrÉr=rDrAròrò5sø„ðØ ˆ=ðà Ð ðð Ð&ðð Ð"ð ð Ð,ðð Ð.ð ð ˆ:ðð Ð+ðð ˆ=ðð Ð+ðð Ð-ðð Ð-ðð Ð-ðð Ð1ðð Ð<ðð Ð(ð!ð" Ðð#ð$ &Ø$Ø Ø%Ø&Øò/DrDròcó¨—eZdZdeddifdeddifgZdZide“d e“d e“de “de “d e“de“de“de “de“de“de“de“de“de“de“de“eeeeeedœ¥Zy)ÚExtensionAttributeÚextension_attribute_typerÏrÚextension_attribute_valuerr )rrrårórôrõrör÷rørùrðrürþrÿrrrrrë)rr r rrr N)rYrZr[ròrr´r?r&r+r°r·rËrÍrÏrÓr×rçrër@r=rDrArrQs„à #Ð%;¸jÈ!¸_ÐMØ $ c¨J¸¨?Ð;ð€Gð J€IðØðà˜}ðð $ ]ðð Ð!4ð ð *Ð+Iðð ,Ð-Kð ð Oðð )Ð*Eðð zðð (¨ðð *¨<ðð *¨<ðð *¨<ðð .¨|ðð 9¸,ðð %Ð&>ð!ð" ˜,ð#ð$$0Ø".Ø*Ø#/Ø$:Ø%ò/JrDrcó—eZdZeZy)ÚExtensionAttributesN)rYrZr[rr·r=rDrArrsó„Ø$KrDrcó.—eZdZdefdeddifdeddifgZy)Ú ORAddressÚbuilt_in_standard_attributesÚ"built_in_domain_defined_attributesrÐTÚextension_attributesN)rYrZr[rºrÆrr´r=rDrArrws4„à 'Ð)BÐCØ -Ð/MÐPZÐ\`ÐOaÐbØ Ð!4°zÀ4Ð6HÐIðGrDrcó*—eZdZdedddœfdeddifgZy) ÚEDIPartyNameÚ name_assignerrTrÎÚ party_namerÏr N)rYrZr[rÛr´r=rDrAr r s&„à ˜/¸ÀtÑ+LÐMØ ¨°Q¨Ð8ðGrDr cóˆ—eZdZdeddifdeddifdeddifdedd ifd eddifd eddifde ddifde ddifdeddifg Zd„Z d„Zy)ÚGeneralNameÚ other_namerÏrÚrfc822_namer Údns_namer‘Úx400_addressrÅÚdirectory_namerr¦Úedi_party_namerÆÚuniform_resource_identifierrÇÚ ip_addressrÈÚ registered_idr“có—||k(Sr<r=r>s rArBzGeneralName.__ne__“rCrDcó—|jdvrttd|j««‚|jdvrttd|j««‚|j|jk7ry|j|jk(S)z¼ Does not support other_name, x400_address or edi_party_name :param other: The other GeneralName to compare to :return: A boolean )r%r(r*zr Comparison is not supported for GeneralName objects of choice %s za Comparison is not supported for GeneralName objects of choice %sF)ròr†r rur>s rArIzGeneralName.__eq__–sŒ€ð9‰9ÐHÑHÜœVðð— ‘ óóð ð:‰:ÐIÑIÜœVðð— ‘ ó óð ð9‰9˜Ÿ ™ Ò"Øà{‰{˜eŸl™lÑ*Ð*rDN)rYrZr[r›rlr7rrr r^r„r"rârBrIr=rDrAr$r$†s’„à { Z° OÐ4Ø ˜ z°1 oÐ6Ø W˜z¨1˜oÐ.Ø ˜ Z° OÐ4Ø ˜4 *¨a Ð1Ø ˜<¨*°a¨Ð9Ø &¨¨j¸!¨_Ð=Ø y :¨q /Ð2Ø Ð*¨Z¸¨OÐ<ð €Mò!ó+rDr$có—eZdZeZy)ÚGeneralNamesN)rYrZr[r$r·r=rDrAr1r1¸rßrDr1có—eZdZdefdefgZy)ÚTimeÚutc_timeÚgeneral_timeN)rYrZr[r-rrâr=rDrAr3r3¼s„à WÐØ ˜Ð)ðMrDr3có—eZdZdefdefgZy)ÚValidityrÍrÑN)rYrZr[r3r´r=rDrAr7r7Ãs„à tÐØ dÐðGrDr7có(—eZdZdeddifdeddifgZy)ÚBasicConstraintsÚcaÚdefaultFÚpath_len_constraintrÐTN)rYrZr[rrr´r=rDrAr9r9Ês'„à ˆw˜ EÐ*Ð+Ø ¨*°dÐ);Ð<ðGrDr9có:—eZdZdedddœfdedddœfdedddœfgZy ) ÚAuthorityKeyIdentifierÚkey_identifierrTrÎÚauthority_cert_issuerr Úauthority_cert_serial_numberr‘N)rYrZr[r$r1rr´r=rDrAr>r>Ñs6„à ˜;°QÀDÑ(IÐJØ ,¸QÈDÑ0QÐRØ '¨¸qÈdÑ2SÐTðGrDr>có(—eZdZdeddifdeddifgZy)ÚDistributionPointNameÚ full_namerÏrÚname_relative_to_crl_issuerr N)rYrZr[r1rBrâr=rDrArCrCÙs'„à l Z° OÐ4Ø &Ð(AÀJÐPQÀ?ÐSðMrDrCc ó$—eZdZddddddddd d œ Zy)ÚReasonFlagsÚunusedÚkey_compromiseÚ ca_compromiseÚaffiliation_changedÚ supersededÚcessation_of_operationÚcertificate_holdÚprivilege_withdrawnÚ aa_compromiserÄNrÉr=rDrArGrGàs$„àØØØ ØØ#ØØ Øñ DrDrGcó2—eZdZdefdedddœfdedddœfgZy ) ÚGeneralSubtreeÚbaseÚminimumr©rÏr;Úmaximumr TrÎN)rYrZr[r$rr´r=rDrArRrRîs/„à ÐØ G¨!¸Ñ:Ð;Ø G¨!¸Ñ>Ð?ðGrDrRcó—eZdZeZy)ÚGeneralSubtreesN)rYrZr[rRr·r=rDrArXrXös„Ø KrDrXcó,—eZdZdedddœfdedddœfgZy)ÚNameConstraintsÚpermitted_subtreesrTrÎÚexcluded_subtreesr N)rYrZr[rXr´r=rDrArZrZús'„à ˜¸QÈDÑ0QÐRØ ˜o¸AÈ4Ñ/PÐQðGrDrZcóN—eZdZdedddœfdedddœfded ddœfgZd Zed„«Z y) ÚDistributionPointÚdistribution_pointrTr¿Úreasonsr rÎÚ crl_issuerr‘FcóT—|jdurd|_|d}|jdk7rttd««‚|jD]Q}|jdk(sŒ|j }|j «jd«sŒ?||_|jS|jS)z_ :return: None or a unicode string of the distribution point's URL FNr_rDz‡ CRL distribution points that are relative to the issuer are not supported r+©zhttp://zhttps://zldap://zldaps://)Ú_urlròr†r rurdrHrO)r?ròÚgeneral_nameÚurls rArfzDistributionPoint.url s«€ð9‰9˜ÑØˆDŒIØÐ,Ñ-ˆDØy‰y˜KÒ'Ü ¤ðó"óðð!%§¡ò Ø×$Ñ$Ð(EÓEØ&×-Ñ-CØ—y‘y“{×-Ñ-Ð.\Õ]Ø$'˜œ Øày‰yÐð ðy‰yÐrDN) rYrZr[rCrGr1r´rdrrfr=rDrAr^r^sQ„à Ð4À1ÐRVÑ6WÐXØ K¨a¸TÑ!BÐCØ |°!ÀÑ%FÐGð€Gð€Dà ñóñrDr^có—eZdZeZy)ÚCRLDistributionPointsN)rYrZr[r^r·r=rDrArhrh&ó„Ø#KrDrhcó(—eZdZdefdefdefdefgZy)ÚDisplayTextráÚvisible_stringràrßN)rYrZr[rr/rr.râr=rDrArkrk*s)„à yÐ!Ø ˜=Ð)Ø yÐ!Ø ˜ Ð#ð MrDrkcó—eZdZeZy)Ú NoticeNumbersN©rYrZr[rr·r=rDrArnrn3ó„ØKrDrncó—eZdZdefdefgZy)ÚNoticeReferenceÚorganizationÚnotice_numbersN)rYrZr[rkrnr´r=rDrArrrr7s„à ˜Ð%Ø ˜=Ð)ðGrDrrcó(—eZdZdeddifdeddifgZy)Ú UserNoticeÚ notice_refrÐTÚ explicit_textN)rYrZr[rrrkr´r=rDrArvrv>s'„à ¨°TÐ(:Ð;Ø ˜+¨ °DÐ'9Ð:ðGrDrvcó—eZdZdddœZy)ÚPolicyQualifierIdÚ certification_practice_statementÚuser_notice)z1.3.6.1.5.5.7.2.1z1.3.6.1.5.5.7.2.2NrÉr=rDrArzrzEs„à?Ø*ñDrDrzcó*—eZdZdefdefgZdZeedœZ y)ÚPolicyQualifierInfoÚpolicy_qualifier_idÚ qualifier)rr€)r{r|N) rYrZr[rzrr´r?rrvr@r=rDrAr~r~Ls.„à Ð 1Ð2Ø cÐð€Gð 5€Ià,5Ø!ñJrDr~có—eZdZeZy)ÚPolicyQualifierInfosN)rYrZr[r~r·r=rDrAr‚r‚Yó„Ø%KrDr‚có—eZdZddiZy)ÚPolicyIdentifierz2.5.29.32.0Ú any_policyNrÉr=rDrAr…r…]s„à|ðDrDr…có"—eZdZdefdeddifgZy)ÚPolicyInformationÚpolicy_identifierÚpolicy_qualifiersrÐTN)rYrZr[r…r‚r´r=rDrArˆrˆcs"„à Ð.Ð/Ø Ð2°ZÀÐ4FÐGðGrDrˆcó—eZdZeZy)ÚCertificatePoliciesN)rYrZr[rˆr·r=rDrArŒrŒjrirDrŒcó—eZdZdefdefgZy)Ú PolicyMappingÚissuer_domain_policyÚsubject_domain_policyN)rYrZr[r…r´r=rDrArŽrŽns„à Ð!1Ð2Ø Ð"2Ð3ðGrDrŽcó—eZdZeZy)ÚPolicyMappingsN)rYrZr[rŽr·r=rDrAr’r’ur¸rDr’có,—eZdZdedddœfdedddœfgZy)ÚPolicyConstraintsÚrequire_explicit_policyrTrÎÚinhibit_policy_mappingr N©rYrZr[rr´r=rDrAr”r”ys'„à " G¸!ÈÑ-NÐOØ ! 7¸ÈÑ,MÐNðGrDr”có—eZdZidd“dd“dd“dd“d d “dd“d d“dd“dd“dd“dd“dd“dd“dd“dd“dd “d!d"“id#d$“d%d&“d'd(“d)d*“d+d,“d-d.“d/d0“d1d2“d3d4“d5d6“d7d8“d9d:“d;d<“d=d>“d?d@“dAdB“dCdD“¥idEdF“dGdH“dIdJ“dKdL“dMdN“dOdP“dQdR“dSdT“dUdV“dWdX“dYdZ“d[d\“d]d^“d_d`“dadb“dcdd“dedf“¥idgdh“didj“dkdl“dmdn“dodp“dqdr“dsdt“dudv“dwdx“dydz“d{d|“d}d~“dd€“dd‚“dƒd„“d…d†“d‡dˆ“¥id‰dŠ“d‹dŒ“ddŽ“dd“d‘d’“d“d”“d•d–“d—d˜“d™dš“d›dœ“ddž“dŸd “d¡d¢“d£d¤“d¥d¦“d§d¨“d©dª“¥Zy«)¬ÚKeyPurposeIdz2.5.29.37.0Úany_extended_key_usagez1.3.6.1.5.5.7.3.1Úserver_authz1.3.6.1.5.5.7.3.2Úclient_authz1.3.6.1.5.5.7.3.3Úcode_signingz1.3.6.1.5.5.7.3.4Úemail_protectionz1.3.6.1.5.5.7.3.5Úipsec_end_systemz1.3.6.1.5.5.7.3.6Úipsec_tunnelz1.3.6.1.5.5.7.3.7Ú ipsec_userz1.3.6.1.5.5.7.3.8Ú time_stampingz1.3.6.1.5.5.7.3.9Úocsp_signingz1.3.6.1.5.5.7.3.10Údvcsz1.3.6.1.5.5.7.3.13Úeap_over_pppz1.3.6.1.5.5.7.3.14Úeap_over_lanz1.3.6.1.5.5.7.3.15Úscvp_serverz1.3.6.1.5.5.7.3.16Úscvp_clientz1.3.6.1.5.5.7.3.17Ú ipsec_ikez1.3.6.1.5.5.7.3.18Ú capwap_acz1.3.6.1.5.5.7.3.19Ú capwap_wtpz1.3.6.1.5.5.7.3.20Ú sip_domainz1.3.6.1.5.5.7.3.21Úsecure_shell_clientz1.3.6.1.5.5.7.3.22Úsecure_shell_serverz1.3.6.1.5.5.7.3.23Úsend_routerz1.3.6.1.5.5.7.3.24Úsend_proxied_routerz1.3.6.1.5.5.7.3.25Ú send_ownerz1.3.6.1.5.5.7.3.26Úsend_proxied_ownerz1.3.6.1.5.5.7.3.27Úcmc_caz1.3.6.1.5.5.7.3.28Úcmc_raz1.3.6.1.5.5.7.3.29Úcmc_archivez1.3.6.1.5.5.7.3.30Úbgpspec_routerz1.3.6.1.5.5.8.2.2Úike_intermediatez1.3.6.1.4.1.311.10.3.1Úmicrosoft_trust_list_signingz1.3.6.1.4.1.311.10.3.2Úmicrosoft_time_stamp_signingz1.3.6.1.4.1.311.10.3.3Úmicrosoft_server_gatedz1.3.6.1.4.1.311.10.3.3.1Úmicrosoft_serializedz1.3.6.1.4.1.311.10.3.4Ú microsoft_efsz1.3.6.1.4.1.311.10.3.4.1Úmicrosoft_efs_recoveryz1.3.6.1.4.1.311.10.3.5Úmicrosoft_whqlz1.3.6.1.4.1.311.10.3.6Ú microsoft_nt5z1.3.6.1.4.1.311.10.3.7Úmicrosoft_oem_whqlz1.3.6.1.4.1.311.10.3.8Úmicrosoft_embedded_ntz1.3.6.1.4.1.311.10.3.9Úmicrosoft_root_list_signerz1.3.6.1.4.1.311.10.3.10Ú!microsoft_qualified_subordinationz1.3.6.1.4.1.311.10.3.11Úmicrosoft_key_recoveryz1.3.6.1.4.1.311.10.3.12Úmicrosoft_document_signingz1.3.6.1.4.1.311.10.3.13Úmicrosoft_lifetime_signingz1.3.6.1.4.1.311.10.3.14Ú microsoft_mobile_device_softwarez1.3.6.1.4.1.311.20.2.2Úmicrosoft_smart_card_logonz1.2.840.113635.100.1.2Úapple_x509_basicz1.2.840.113635.100.1.3Ú apple_sslz1.2.840.113635.100.1.4Úapple_local_cert_genz1.2.840.113635.100.1.5Ú apple_csr_genz1.2.840.113635.100.1.6Úapple_revocation_crlz1.2.840.113635.100.1.7Úapple_revocation_ocspz1.2.840.113635.100.1.8Úapple_smimez1.2.840.113635.100.1.9Ú apple_eapz1.2.840.113635.100.1.10Úapple_software_update_signingz1.2.840.113635.100.1.11Úapple_ipsecz1.2.840.113635.100.1.12Úapple_ichatz1.2.840.113635.100.1.13Úapple_resource_signingz1.2.840.113635.100.1.14Úapple_pkinit_clientz1.2.840.113635.100.1.15Úapple_pkinit_serverz1.2.840.113635.100.1.16Úapple_code_signingz1.2.840.113635.100.1.17Úapple_package_signingz1.2.840.113635.100.1.18Úapple_id_validationz1.2.840.113635.100.1.20Úapple_time_stampingz1.2.840.113635.100.1.21Úapple_revocationz1.2.840.113635.100.1.22Úapple_passbook_signingz1.2.840.113635.100.1.23Úapple_mobile_storez1.2.840.113635.100.1.24Úapple_escrow_servicez1.2.840.113635.100.1.25Úapple_profile_signerz1.2.840.113635.100.1.26Úapple_qa_profile_signerz1.2.840.113635.100.1.27Úapple_test_mobile_storez1.2.840.113635.100.1.28Úapple_otapki_signerz1.2.840.113635.100.1.29Úapple_test_otapki_signerz1.2.840.113625.100.1.30Ú)apple_id_validation_record_signing_policyz1.2.840.113625.100.1.31Úapple_smp_encryptionz1.2.840.113625.100.1.32Úapple_test_smp_encryptionz1.2.840.113635.100.1.33Úapple_server_authenticationz1.2.840.113635.100.1.34Úapple_pcs_escrow_servicez2.16.840.1.101.3.6.8Úpiv_card_authenticationz2.16.840.1.101.3.6.7Úpiv_content_signingz1.3.6.1.5.2.3.4Úpkinit_kpclientauthz1.3.6.1.5.2.3.5Úpkinit_kpkdcz1.2.840.113583.1.1.5Úadobe_authentic_documents_trustz2.16.840.1.101.3.8.7Úfpki_pivi_content_signingNrÉr=rDrAr™r™€s„ðlàÐ/ðlð ˜]ðlð ˜]ð lð ˜^ðlð Ð/ð lð Ð/ðlð ˜^ðlð ˜\ðlð ˜_ðlð ˜^ðlð ˜fðlð ˜nðlð ˜nð!lð$ ˜mð%lð& ˜mð'lð* ˜kð+lð. ˜kñ/lð0 ˜lð1lð4 ˜lð5lð8 Ð3ð9lð: Ð3ð;lð> ˜mð?lð@ Ð3ðAlðB ˜lðClðD Ð2ðElðH ˜hðIlðJ ˜hðKlðL ˜mðMlðP Ð.ðQlðT Ð/ðUlðZ !Ð"@ð[lð\ !Ð"@ð]lð^ !Ð":ð_lð` #Ð$:òalðb ! /ðclðd #Ð$<ðelðf !Ð"2ðglðh ! /ðilðj !Ð"6ðklðl !Ð"9ðmlðn !Ð">ðolðp "Ð#Fðqlðr "Ð#;ðslðt "Ð#?ðulðv "Ð#?ðwlðx "Ð#Eðylð| !Ð">ð}lðD !Ð"4ðElðF ! +ðGlðH !Ð"8ðIlðJ ! /òKlðL !Ð"8ðMlðN !Ð"9ðOlðP ! -ðQlðR ! +ðSlðT "Ð#BðUlðV " =ðWlðX " =ðYlðZ "Ð#;ð[lð\ "Ð#8ð]lð^ "Ð#8ð_lð` "Ð#7ðalðb "Ð#:ðclðd "Ð#8ðelðf "Ð#8ðglðh "Ð#5ðilðj "Ð#;ðklðl "Ð#7òmlðn "Ð#9ðolðp "Ð#9ðqlðr "Ð#<ðslðt "Ð#<ðulðv "Ð#8ðwlðx "Ð#=ðylðz "Ð#Nð{lð| "Ð#9ð}lð~ "Ð#>ðlð@ "Ð#@ðAlðB "Ð#=ðClðF Ð 9ðGlðH Ð 5ðIlðL Ð0ðMlðN ˜>ðOlðR Ð AðSlðV Ð ;ñWlDrDr™có—eZdZeZy)ÚExtKeyUsageSyntaxN©rYrZr[r™r·r=rDrArðrððó„ØKrDrðcó—eZdZdddddœZy)ÚAccessMethodÚocspÚ ca_issuersr¢Ú ca_repository)z1.3.6.1.5.5.7.48.1z1.3.6.1.5.5.7.48.2z1.3.6.1.5.5.7.48.3z1.3.6.1.5.5.7.48.5NrÉr=rDrArôrôôs„à$Ø*Ø-Ø-ñ DrDrôcó—eZdZdefdefgZy)ÚAccessDescriptionÚ access_methodÚaccess_locationN)rYrZr[rôr$r´r=rDrArùrùýs„à ˜,Ð'Ø ˜KÐ(ðGrDrùcó—eZdZeZy)ÚAuthorityInfoAccessSyntaxN©rYrZr[rùr·r=rDrArýrýrirDrýcó—eZdZeZy)ÚSubjectInfoAccessSyntaxNrþr=rDrArrrirDrcó—eZdZeZy)ÚFeaturesNror=rDrArr rprDrcó—eZdZdefdefgZy)ÚEntrustVersionInfoÚentrust_versÚentrust_info_flagsN)rYrZr[rrr´r=rDrArrs„à ˜Ð'Ø ˜yÐ)ðGrDrc ó"—eZdZddddddddd œZy )ÚNetscapeCertificateTypeÚ ssl_clientÚ ssl_serverÚemailÚobject_signingÚreservedÚssl_caÚemail_caÚobject_signing_ca)rr r‘rÅr¦rÆrÇrÈNrÉr=rDrArrs!„àØØØØØØØñ DrDrcó—eZdZddddœZy)ÚVersionÚv1Úv2Úv3©rr r‘NrÉr=rDrArr%s„àØØñDrDrcó"—eZdZdefdefdefgZy)ÚTPMSpecificationr ÚlevelÚrevisionN)rYrZr[r.rr´r=rDrArr-s!„à :ÐØ 'ÐØ WÐðGrDrcó—eZdZeZy)ÚSetOfTPMSpecificationN)rYrZr[rr·r=rDrArr5s„Ø"KrDrcó"—eZdZdefdefdefgZy)ÚTCGSpecificationVersionÚ major_versionÚ minor_versionrNr—r=rDrArr9s!„à ˜'Ð"Ø ˜'Ð"Ø WÐðGrDrcó—eZdZdefdefgZy)ÚTCGPlatformSpecificationÚversionÚplatform_classN)rYrZr[rr$r´r=rDrAr"r"As„à Ð+Ð,Ø ˜;Ð'ðGrDr"có—eZdZeZy)ÚSetOfTCGPlatformSpecificationN)rYrZr[r"r·r=rDrAr&r&Hs„Ø*KrDr&có—eZdZdddddœZy)ÚEKGenerationTypeÚinternalÚinjectedÚinternal_revocableÚinjected_revocable)rr r‘rÅNrÉr=rDrAr(r(Ls„àØØØñ DrDr(có—eZdZddddœZy)ÚEKGenerationLocationrúrýÚek_cert_signerrNrÉr=rDrAr.r.Uó„àØ"ØñDrDr.có—eZdZddddœZy)ÚEKCertificateGenerationLocationrúrýr/rNrÉr=rDrAr2r2]r0rDr2có —eZdZddddddddœZy ) ÚEvaluationAssuranceLevelÚlevel1Úlevel2Úlevel3Úlevel4Úlevel5Úlevel6Úlevel7)r r‘rÅr¦rÆrÇrÈNrÉr=rDrAr4r4es„àØØØØØØñDrDr4có—eZdZddddœZy)ÚEvaluationStatusÚdesigned_to_meetÚevaluation_in_progressÚevaluation_completedrNrÉr=rDrAr=r=qs„àØ#Ø!ñDrDr=có—eZdZddddœZy)ÚStrengthOfFunctionÚbasicÚmediumÚhighrNrÉr=rDrArBrBys„àØØñDrDrBcó.—eZdZdefdeddifdeddifgZy)ÚURIReferencer+Úhash_algorithmrÐTÚ hash_valueN)rYrZr[rrrr´r=rDrArGrGs/„à &¨ Ð2Ø ˜?¨Z¸Ð,>Ð?Ø y :¨tÐ"4Ð5ðGrDrGc ót—eZdZdefdefdefdeddifdedd d œfdedd d œfd e dd d œfdedd d œfde dd d œfg Z y)ÚCommonCriteriaMeasuresr#Úassurance_levelÚevaluation_statusÚplusr;FÚstrengh_of_functionrTrÎÚprofile_oidr Úprofile_urlr‘Ú target_oidrÅÚ target_urir¦N)rYrZr[rr4r=rrBr"rGr´r=rDrArKrK‰s„à IÐØ Ð4Ð5Ø Ð.Ð/Ø ˜9 eÐ,Ð-Ø Ð 2ÀÐPTÑ4UÐVØ Ð(°qÀdÑ*KÐLØ ˜°1À$Ñ&GÐHØ Ð'°aÀTÑ)JÐKØ |°!ÀÑ%FÐGð GrDrKcó—eZdZdddddœZy)Ú SecurityLevelr5r6r7r8)r r‘rÅr¦NrÉr=rDrArUrU—s„àØØØñ DrDrUcó(—eZdZdefdefdeddifgZy)Ú FIPSLevelr#rrNr;FN)rYrZr[rrUrr´r=rDrArWrW s(„à IÐØ -Ð Ø ˜9 eÐ,Ð-ðGrDrWcóˆ—eZdZdeddifdeddifdeddd œfd eddd œfded dd œfdeddd œfde ddd œfdedddœfde ddifg Zy)ÚTPMSecurityAssertionsr#r;rÚfield_upgradableFÚek_generation_typerTrÎÚek_generation_locationr Ú"ek_certificate_generation_locationr‘Úcc_inforÅÚ fips_levelr¦Úiso_9000_certifiedrÆrUÚiso_9000_urirÐN)rYrZr[rrr(r.r2rKrWrr´r=rDrArYrY¨s—„à G˜i¨Ð.Ð/Ø ˜W y°%Ð&8Ð9Ø Ð/¸aÈTÑ1RÐSØ !Ð#7ÀaÐUYÑ9ZÐ[Ø -Ð/NÐ]^ÐlpÑPqÐrØ Ð*¸ÈÑ,MÐNØ y¨q¸dÑ"CÐDØ ˜w°QÀ5Ñ(IÐJØ ˜ Z°Ð$6Ð7ð GrDrYcó—eZdZeZy)ÚSetOfTPMSecurityAssertionsN)rYrZr[rYr·r=rDrArcrc¶s„Ø'KrDrccó&—eZdZddddddddd d dœ Zy) ÚSubjectDirectoryAttributeIdÚsupported_algorithmsÚtpm_specificationÚtcg_platform_specificationÚtpm_security_assertionsÚpda_date_of_birthÚpda_place_of_birthÚ pda_genderÚpda_country_of_citizenshipÚpda_country_of_residenceÚentrust_user_role) z2.5.4.52z 2.23.133.2.16z 2.23.133.2.17z 2.23.133.2.18z1.3.6.1.5.5.7.9.1z1.3.6.1.5.5.7.9.2z1.3.6.1.5.5.7.9.3z1.3.6.1.5.5.7.9.4z1.3.6.1.5.5.7.9.5z1.2.840.113533.7.68.29NrÉr=rDrArereºs)„ð+à,Ø5Ø2à0Ø1Ø)Ø9Ø7à"5ñDrDrecó—eZdZeZy)ÚSetOfGeneralizedTimeN)rYrZr[rr·r=rDrArqrqÍrµrDrqcó—eZdZeZy)ÚSetOfDirectoryStringN)rYrZr[rÛr·r=rDrArsrsÑrµrDrscó—eZdZeZy)ÚSetOfPrintableStringNr´r=rDrAruruÕrµrDrucó2—eZdZdefdedddœfdedddœfgZy) ÚSupportedAlgorithmÚalgorithm_identifierÚintended_usagerTr¿Úintended_certificate_policiesr N)rYrZr[rrºrŒr´r=rDrArwrwÙs2„à Ð!7Ð8Ø ˜8°!ÀÑ%FÐGØ (Ð*=ÈAÐ[_Ñ?`ÐaðGrDrwcó—eZdZeZy)ÚSetOfSupportedAlgorithmN)rYrZr[rwr·r=rDrAr|r|árrDr|c óF—eZdZdefdefgZdZeee e eee e e dœ Zd„ZdeiZy)ÚSubjectDirectoryAttributer²r³)r²r³) rfrgrhrirjrkrlrmrncóf—|dj}||jvr|j|StS)Nr²)rdr@r*)r?Útype_s rAÚ_values_specz&SubjectDirectoryAttribute._values_specøs1€ØV‘×#Ñ#ˆØD—O‘OÑ#Ø—?‘? 5Ñ)Ð)ÜˆrDN)rYrZr[rerr´r?r|rr&rcrqrsrur@rÚ_spec_callbacksr=rDrAr~r~åsU„à Ð,Ð-Ø 3ˆð€Gð #€Ià 7Ø2Ø&CØ#=Ø1Ø2Ø*Ø&:Ø$8ñ €Jòð ,ðOrDr~có—eZdZeZy)ÚSubjectDirectoryAttributesN)rYrZr[r~r·r=rDrAr„r„s„Ø+KrDr„c óŠ—eZdZidd“dd“dd“dd“d d “dd“d d“dd“dd“dd“dd“dd“dd“dd“dd“dd “d!d"“d#d$d%d&d'd(d)d*œ¥Zy+),ÚExtensionIdz2.5.29.9Úsubject_directory_attributesz 2.5.29.14r?z 2.5.29.15Ú key_usagez 2.5.29.16Úprivate_key_usage_periodz 2.5.29.17Úsubject_alt_namez 2.5.29.18Úissuer_alt_namez 2.5.29.19Úbasic_constraintsz 2.5.29.30Úname_constraintsz 2.5.29.31Úcrl_distribution_pointsz 2.5.29.32Úcertificate_policiesz 2.5.29.33Úpolicy_mappingsz 2.5.29.35Úauthority_key_identifierz 2.5.29.36Úpolicy_constraintsz 2.5.29.37Úextended_key_usagez 2.5.29.46Úfreshest_crlz 2.5.29.54Úinhibit_any_policyz1.3.6.1.5.5.7.1.1Úauthority_information_accessÚsubject_information_accessÚtls_featureÚ ocsp_no_checkÚentrust_version_extensionÚnetscape_certificate_typeÚ!signed_certificate_timestamp_listÚmicrosoft_enroll_certtype)z1.3.6.1.5.5.7.1.11z1.3.6.1.5.5.7.1.24z1.3.6.1.5.5.7.48.1.5z1.2.840.113533.7.65.0z2.16.840.1.113730.1.1z1.3.6.1.4.1.11129.2.4.2z1.3.6.1.4.1.311.20.2NrÉr=rDrAr†r†sü„ðØÐ2ðàÐ%ðð [ðð Ð/ð ð Ð'ðð Ð&ð ð Ð(ðð Ð'ðð Ð.ðð Ð+ðð Ð&ðð Ð/ðð Ð)ðð Ð)ðð ^ðð Ð)ð!ð" Ð;ð#ð$;à+Ø /Ø!<Ø!<à#Fà ;ò7DrDr†c óª—eZdZdefdeddifdefgZdZide“de “d e “d e“de“de“d e “de“de“de“de“de“de“de“de“de“de“eeeeee edœ¥Zy)Ú ExtensionÚextn_idÚcriticalr;FÚ extn_value)r r¢r‡r?rˆr‰rŠr‹rŒrrŽrrr‘r’r“r”r•r–)r—r˜r™ršr›rœrN)rYrZr[r†rr%r´r?r„r$rºrÌr1r9rZrhrŒr’r>r”rðrrýrrr rrrr@r=rDrArŸrŸ's'„à KÐ Ø W˜y¨%Ð0Ð1Ø Ð*Ð+ð€Gð*€IðØ&Ð(Bðà˜+ðð Xðð #Ð$9ð ð ˜Lðð ˜<ð ð Ð-ðð ˜Oðð "Ð#8ðð Ð 3ðð ˜>ðð #Ð$:ðð Ð/ðð Ð/ðð Ð-ðð ˜gð!ð" 'Ð(Að#ð$'>ØØØ%7Ø%<Ø-8ð&/ò5JrDrŸcó—eZdZeZy)Ú ExtensionsN)rYrZr[rŸr·r=rDrAr¤r¤Mr¸rDr¤cól—eZdZdedddœfdefdefdefdefd efd efde dd dœfde dd dœfde dd dœfg Zy)ÚTbsCertificater#rr)rr;rçÚ signatureÚissuerÚvalidityÚsubjectÚsubject_public_key_infoÚissuer_unique_idr TrÎÚsubject_unique_idr‘Ú extensionsrÅr¿N)rYrZr[rrrrr7r1r#r¤r´r=rDrAr¦r¦Qsv„à G¨!¸Ñ=Ð>Ø ˜'Ð"Ø Ð+Ð,Ø 4ÐØ XÐØ DÐØ " MÐ2Ø ˜^¸!ÈÑ-NÐOØ ˜n¸1È$Ñ.OÐPØ z°¸tÑ#DÐEðGrDr¦có°—eZdZdefdefdefgZdZdZdZ dZ dZdZdZ dZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ!dZ"dZ#dZ$dZ%dZ&d„Z'e(d„«Z)e(d„«Z*e(d „«Z+e(d „«Z,e(d„«Z-e(d„«Z.e(d „«Z/e(d„«Z0e(d„«Z1e(d„«Z2e(d„«Z3e(d„«Z4e(d„«Z5e(d„«Z6e(d„«Z7e(d„«Z8e(d„«Z9e(d„«Z:e(d„«Z;e(d„«Ze(d„«Z?e(d„«Z@e(d„«ZAe(d „«ZBe(d!„«ZCe(d"„«ZDe(d#„«ZEe(d$„«ZFe(d%„«ZGe(d&„«ZHe(d'„«ZIe(d(„«ZJe(d)„«ZKe(d*„«ZLd+„ZMe(d,„«ZNe(d-„«ZOe(d.„«ZPe(d/„«ZQe(d0„«ZRe(d1„«ZSe(d2„«ZTe(d3„«ZUe(d4„«ZVe(d5„«ZWe(d6„«ZXd7„ZYd8„ZZd9„Z[y):ÚCertificateÚtbs_certificateÚsignature_algorithmÚsignature_valueFNcó—t«|_|ddD]g}|dj}d|z}t||«rt |||dj «|djsŒM|jj |«Œid|_y) zv Sets common named extensions to private attributes and creates a list of critical extensions r±r®r z _%s_valuer¢r¡TN)rXÚ_critical_extensionsrdÚhasattrÚsetattrÚparsedÚaddÚ_processed_extensions)r?Ú extensionròrqs rAÚ_set_extensionszCertificate._set_extensionsˆs€ô%(£EˆÔ!àÐ/Ñ0°Ñ>ò 4ˆIØ˜YÑ'×.Ñ.ˆDØ(¨4Ñ/ˆNÜt˜^Ô,Ü˜˜n¨i¸Ñ.E×.LÑ.LÔMØ˜Ñ$×+Ó+Ø×)Ñ)×-Ñ-¨dÕ3ð 4ð&*ˆÕ"rDcóR—|js|j«|jS)z² Returns a set of the names (or OID if not a known extension) of the extensions marked as critical :return: A set of unicode strings )rºr¼rµrjs rAÚcritical_extensionszCertificate.critical_extensionsšs%€ð×)Ò)Ø× Ñ Ô"Ø×(Ñ(Ð(rDcóR—|js|j«|jS)z¼ This extension is used to constrain the period over which the subject private key may be used :return: None or a PrivateKeyUsagePeriod object )rºr¼Ú_private_key_usage_period_valuerjs rAÚprivate_key_usage_period_valuez*Certificate.private_key_usage_period_value¨ó%€ð×)Ò)Ø× Ñ Ô"Ø×3Ñ3Ð3rDcóR—|js|j«|jS)z½ This extension is used to contain additional identification attributes about the subject. :return: None or a SubjectDirectoryAttributes object )rºr¼Ú#_subject_directory_attributes_valuerjs rAÚ"subject_directory_attributes_valuez.Certificate.subject_directory_attributes_value¶ó%€ð×)Ò)Ø× Ñ Ô"Ø×7Ñ7Ð7rDcóR—|js|j«|jS)zü This extension is used to help in creating certificate validation paths. It contains an identifier that should generally, but is not guaranteed to, be unique. :return: None or an OctetString object )rºr¼Ú_key_identifier_valuerjs rAÚkey_identifier_valuez Certificate.key_identifier_valueÄs%€ð×)Ò)Ø× Ñ Ô"Ø×)Ñ)Ð)rDcóR—|js|j«|jS)z« This extension is used to define the purpose of the public key contained within the certificate. :return: None or a KeyUsage )rºr¼Ú_key_usage_valuerjs rAÚkey_usage_valuezCertificate.key_usage_valueÓs%€ð×)Ò)Ø× Ñ Ô"Ø×$Ñ$Ð$rDcóR—|js|j«|jS)aT This extension allows for additional names to be associate with the subject of the certificate. While it may contain a whole host of possible names, it is usually used to allow certificates to be used with multiple different domain names. :return: None or a GeneralNames object )rºr¼Ú_subject_alt_name_valuerjs rAÚsubject_alt_name_valuez"Certificate.subject_alt_name_valueás%€ð×)Ò)Ø× Ñ Ô"Ø×+Ñ+Ð+rDcóR—|js|j«|jS)z¿ This extension allows associating one or more alternative names with the issuer of the certificate. :return: None or an x509.GeneralNames object )rºr¼Ú_issuer_alt_name_valuerjs rAÚissuer_alt_name_valuez!Certificate.issuer_alt_name_valueñs%€ð×)Ò)Ø× Ñ Ô"Ø×*Ñ*Ð*rDcóR—|js|j«|jS)a' This extension is used to determine if the subject of the certificate is a CA, and if so, what the maximum number of intermediate CA certs after this are, before an end-entity certificate is found. :return: None or a BasicConstraints object )rºr¼Ú_basic_constraints_valuerjs rAÚbasic_constraints_valuez#Certificate.basic_constraints_valueÿs%€ð×)Ò)Ø× Ñ Ô"Ø×,Ñ,Ð,rDcóR—|js|j«|jS)zÃ This extension is used in CA certificates, and is used to limit the possible names of certificates issued. :return: None or a NameConstraints object )rºr¼Ú_name_constraints_valuerjs rAÚname_constraints_valuez"Certificate.name_constraints_value s%€ð×)Ò)Ø× Ñ Ô"Ø×+Ñ+Ð+rDcóR—|js|j«|jS)zµ This extension is used to help in locating the CRL for this certificate. :return: None or a CRLDistributionPoints object extension )rºr¼Ú_crl_distribution_points_valuerjs rAÚcrl_distribution_points_valuez)Certificate.crl_distribution_points_value s%€ð×)Ò)Ø× Ñ Ô"Ø×2Ñ2Ð2rDcóR—|js|j«|jS)a; This extension defines policies in CA certificates under which certificates may be issued. In end-entity certificates, the inclusion of a policy indicates the issuance of the certificate follows the policy. :return: None or a CertificatePolicies object )rºr¼Ú_certificate_policies_valuerjs rAÚcertificate_policies_valuez&Certificate.certificate_policies_value* s%€ð×)Ò)Ø× Ñ Ô"Ø×/Ñ/Ð/rDcóR—|js|j«|jS)zû This extension allows mapping policy OIDs to other OIDs. This is used to allow different policies to be treated as equivalent in the process of validation. :return: None or a PolicyMappings object )rºr¼Ú_policy_mappings_valuerjs rAÚpolicy_mappings_valuez!Certificate.policy_mappings_value: s%€ð×)Ò)Ø× Ñ Ô"Ø×*Ñ*Ð*rDcóR—|js|j«|jS)zÏ This extension helps in identifying the public key with which to validate the authenticity of the certificate. :return: None or an AuthorityKeyIdentifier object )rºr¼Ú_authority_key_identifier_valuerjs rAÚauthority_key_identifier_valuez*Certificate.authority_key_identifier_valueI rÂrDcóR—|js|j«|jS)z¹ This extension is used to control if policy mapping is allowed and when policies are required. :return: None or a PolicyConstraints object )rºr¼Ú_policy_constraints_valuerjs rAÚpolicy_constraints_valuez$Certificate.policy_constraints_valueW ó%€ð×)Ò)Ø× Ñ Ô"Ø×-Ñ-Ð-rDcóR—|js|j«|jS)z– This extension is used to help locate any available delta CRLs :return: None or an CRLDistributionPoints object )rºr¼Ú_freshest_crl_valuerjs rAÚfreshest_crl_valuezCertificate.freshest_crl_valuee s%€ð×)Ò)Ø× Ñ Ô"Ø×'Ñ'Ð'rDcóR—|js|j«|jS)z¥ This extension is used to prevent mapping of the any policy to specific requirements :return: None or a Integer object )rºr¼Ú_inhibit_any_policy_valuerjs rAÚinhibit_any_policy_valuez$Certificate.inhibit_any_policy_valuer rèrDcóR—|js|j«|jS)zÖ This extension is used to define additional purposes for the public key beyond what is contained in the basic constraints. :return: None or an ExtKeyUsageSyntax object )rºr¼Ú_extended_key_usage_valuerjs rAÚextended_key_usage_valuez$Certificate.extended_key_usage_value€ rèrDcóR—|js|j«|jS)zâ This extension is used to locate the CA certificate used to sign this certificate, or the OCSP responder for this certificate. :return: None or an AuthorityInfoAccessSyntax object )rºr¼Ú#_authority_information_access_valuerjs rAÚ"authority_information_access_valuez.Certificate.authority_information_access_valueŽ rÆrDcóR—|js|j«|jS)z´ This extension is used to access information about the subject of this certificate. :return: None or a SubjectInfoAccessSyntax object )rºr¼Ú!_subject_information_access_valuerjs rAÚ subject_information_access_valuez,Certificate.subject_information_access_valueœ s%€ð×)Ò)Ø× Ñ Ô"Ø×5Ñ5Ð5rDcóR—|js|j«|jS)zÍ This extension is used to list the TLS features a server must respond with if a client initiates a request supporting them. :return: None or a Features object )rºr¼Ú_tls_feature_valuerjs rAÚtls_feature_valuezCertificate.tls_feature_valueª s%€ð×)Ò)Ø× Ñ Ô"Ø×&Ñ&Ð&rDcóR—|js|j«|jS)a- This extension is used on certificates of OCSP responders, indicating that revocation information for the certificate should never need to be verified, thus preventing possible loops in path validation. :return: None or a Null object (if present) )rºr¼Ú_ocsp_no_check_valuerjs rAÚocsp_no_check_valuezCertificate.ocsp_no_check_value¸ s%€ð×)Ò)Ø× Ñ Ô"Ø×(Ñ(Ð(rDcó —|djS)zE :return: A byte string of the signature r³©rdrjs rAr§zCertificate.signatureÇ s€ðÐ%Ñ&×-Ñ-Ð-rDcó —|djS)zj :return: A unicode string of "rsassa_pkcs1v15", "rsassa_pss", "dsa", "ecdsa" r²)Úsignature_algorjs rArzCertificate.signature_algoÐ s€ðÐ)Ñ*×9Ñ9Ð9rDcó —|djS)zŸ :return: A unicode string of "md2", "md5", "sha1", "sha224", "sha256", "sha384", "sha512", "sha512_224", "sha512_256" r²)Ú hash_algorjs rArzCertificate.hash_algoÙ s€ðÐ)Ñ*×4Ñ4Ð4rDcó—|ddS)zT :return: The PublicKeyInfo object for this certificate r±r«r=rjs rAÚ public_keyzCertificate.public_keyã s€ðÐ%Ñ&Ð'@ÑAÐArDcó—|ddS)zZ :return: The Name object for the subject of this certificate r±rªr=rjs rArªzCertificate.subjectì s€ðÐ%Ñ& yÑ1Ð1rDcó—|ddS)zY :return: The Name object for the issuer of this certificate r±r¨r=rjs rAr¨zCertificate.issuerõ s€ðÐ%Ñ& xÑ0Ð0rDcó&—|ddjS)zT :return: An integer of the certificate's serial number r±rçrÿrjs rArçzCertificate.serial_numberþ s€ðÐ%Ñ& Ñ7×>Ñ>Ð>rDcóH—|jsy|jjS)zŽ :return: None or a byte string of the certificate's key identifier from the key identifier extension N)rÉrdrjs rAr?zCertificate.key_identifier s"€ð×(Ò(Øà×(Ñ(×/Ñ/Ð/rDcó¸—|j€C|jjdzt|j«jd«z|_|jS)zÐ :return: A byte string of the SHA-256 hash of the issuer concatenated with the ascii character ":", concatenated with the serial number as an ascii string ó:rt)Ú_issuer_serialr¨r™rrçrPrjs rAÚ issuer_serialzCertificate.issuer_serial sO€ð×ÑÐ&Ø"&§+¡+×"4Ñ"4°tÑ";¼gÀd×FXÑFXÓ>Y×>`Ñ>`ÐahÓ>iÑ"iˆDÔØ×"Ñ"Ð"rDcó,—|dddjS)zd :return: A datetime of latest time when the certificate is still valid r±r©rÑrÿrjs rAÚnot_valid_afterzCertificate.not_valid_after! s €ðÐ%Ñ& zÑ2°;Ñ?×FÑFÐFrDcó,—|dddjS)zd :return: A datetime of the earliest time when the certificate is valid r±r©rÍrÿrjs rAÚnot_valid_beforezCertificate.not_valid_before) s €ðÐ%Ñ& zÑ2°<Ñ@×GÑGÐGrDcóN—|jsy|jdjS)zŠ :return: None or a byte string of the key_identifier from the authority key identifier extension Nr?)rärdrjs rAr‘z$Certificate.authority_key_identifier1 s(€ð×2Ò2Øà×2Ñ2Ð3CÑD×KÑKÐKrDcó~—|jdur¤|j}|r|djr€|jddj}|j «}|jdj}|j dzt |«jd«z|_|jSd|_|jS)a; :return: None or a byte string of the SHA-256 hash of the isser from the authority key identifier extension concatenated with the ascii character ":", concatenated with the serial number from the authority key identifier extension as an ascii string Fr@rrArrtN)Ú_authority_issuer_serialrärdruÚuntagr™rrP)r?Úakivr¨Úauthority_serials rAÚauthority_issuer_serialz#Certificate.authority_issuer_serial> sº€ð×(Ñ(¨EÑ1Ø×6Ñ6ˆDÙ˜Ð4Ñ5×<Ò<Ø×<Ñ<Ð=TÑUÐVWÑX×_Ñ_àŸ™›Ø#'×#FÑ#FÐGeÑ#f×#mÑ#mÐ Ø06· ± ÀÑ0DÄwÐO_ÓG`×GgÑGgÐhoÓGpÑ0pÔ-ð×,Ñ,Ð,ð15Ô-Ø×,Ñ,Ð,rDcór—|j€ |j|j«|_|jS)z˜ Returns complete CRL URLs - does not include delta CRLs :return: A list of zero or more DistributionPoint objects )Ú_crl_distribution_pointsÚ!_get_http_crl_distribution_pointsrÛrjs rArŽz#Certificate.crl_distribution_pointsT s6€ð×(Ñ(Ð0Ø,0×,RÑ,RÐSW×SuÑSuÓ,vˆDÔ)Ø×,Ñ,Ð,rDcór—|j€ |j|j«|_|jS)z˜ Returns delta CRL URLs - does not include complete CRLs :return: A list of zero or more DistributionPoint objects )Ú_delta_crl_distribution_pointsrrërjs rAÚdelta_crl_distribution_pointsz)Certificate.delta_crl_distribution_pointsa s6€ð×.Ñ.Ð6Ø26×2XÑ2XÐY]×YpÑYpÓ2qˆDÔ/Ø×2Ñ2Ð2rDcóÀ—g}|€gS|D]R}|d}|turŒ|jdk(rŒ!|jD]#}|jdk(sŒ|j|«Œ%ŒT|S)a? Fetches the DistributionPoint object for non-relative, HTTP CRLs referenced by the certificate :param crl_distribution_points: A CRLDistributionPoints object to grab the DistributionPoints from :return: A list of zero or more DistributionPoint objects r_rEr+)r0ròrurJ)r?rŽrKr_Údistribution_point_nameres rArz-Certificate._get_http_crl_distribution_pointsn s…€ðˆà"Ð*ØˆIà"9ò 6ÐØ&8Ð9MÑ&NÐ#Ø&¬$Ñ.Øà&×+Ñ+Ð/LÒLØà 7× >Ñ >ò 6Ø×$Ñ$Ð(EÓEØ—M‘MÐ"4Õ5ñ 6ð 6ðˆ rDcó—|jsgSg}|jD]g}|djdk(sŒ|d}|jdk7rŒ+|j}|j«j d«sŒW|j|«Œi|S)zx :return: A list of zero or more unicode strings of the OCSP URLs for this cert rúrõrûr+rc)rôrdròrHrOrJ)r?rKÚentryÚlocationrfs rAÚ ocsp_urlszCertificate.ocsp_urls s‹€ð×6Ò6ØˆIàˆØ×<Ñ<ò 'ˆEØ_Ñ%×,Ñ,°Ó6Ø Ð!2Ñ3Ø—=‘=Ð$AÒAØØ—o‘oØ—9‘9“;×)Ñ)Ð*XÕYØ—M‘M #Õ&ð 'ðˆ rDcó<—|j€g|_|jrk|jD]P}|jdk(sŒ|j|jvsŒ,|jj |j«ŒR|jStjd«}|jjD]X}|D]Q}|djdk(sŒ|dj}|j|«sŒ7|jj |«ŒSŒZ|jS)z» :return: A list of unicode strings of valid domain names for the certificate. Wildcard certificates will have a domain in the form: *.example.com r'zE^(\*\.)?(?:[a-zA-Z0-9](?:[a-zA-Z0-9\-]*[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$r²rårV) Ú_valid_domainsrÏròrdrJr'ÚcompilerªruÚmatch)r?reÚpatternrWÚname_type_valuerVs rAÚ valid_domainszCertificate.valid_domains£ s€ð×ÑÑ&Ø"$ˆDÔð ×*Ò*Ø$(×$?Ñ$?òHLØ#×(Ñ(¨JÓ6¸<×;NÑ;NÐVZ×ViÑViÒ;iØ×+Ñ+×2Ñ2°<×3FÑ3FÕGðHð$×"Ñ"Ð"ôŸ*™*Ð%pÓqØŸ<™<×.Ñ.òBCØ+.òB˜Ø*¨6Ñ2×9Ñ9¸]ÓJØ$3°GÑ$<×$CÑ$C˜EØ&Ÿ}™}¨UÕ3Ø $× 3Ñ 3× :Ñ :¸5Õ Añ BðBð×"Ñ"Ð"rDcóä—|j€Yg|_|jrF|jD]7}|jdk(sŒ|jj|j«Œ9|jS)zj :return: A list of unicode strings of valid IP addresses for the certificate r,)Ú _valid_ipsrÏròrJrd)r?res rAÚ valid_ipszCertificate.valid_ipsÆ sg€ð?‰?Ð"Ø ˆDŒOà×*Ò*Ø$(×$?Ñ$?òDLØ#×(Ñ(¨LÓ8ØŸ™×.Ñ.¨|×/BÑ/BÕCðDð‰ÐrDcóP—|jxr|jdjS)zW :return; A boolean - if the certificate is marked as a CA r:)rÕrdrjs rAr:zCertificate.ca× s&€ð×+Ñ+ÒY°×0LÑ0LÈTÑ0R×0YÑ0YÐYrDcóN—|jsy|jdjS)zT :return; None or an integer of the maximum path length Nr<)r:rÕrdrjs rAÚmax_path_lengthzCertificate.max_path_lengthà s&€ðwŠwØØ×+Ñ+Ð,AÑB×IÑIÐIrDcón—|j€|j|jk(|_|jS)zx :return: A boolean - if the certificate is self-issued, as defined by RFC 5280 )Ú_self_issuedrªr¨rjs rAÚself_issuedzCertificate.self_issuedë s1€ð×ÑÐ$Ø $§¡°·±Ñ ;ˆDÔØ× Ñ Ð rDcó—|j€qd|_|jr^|jrK|jsd|_|jS|j|jk(rd|_|jSd|_|jS)aõ :return: A unicode string of "no" or "maybe". The "maybe" result will be returned if the certificate issuer and subject are the same. If a key identifier and authority key identifier are present, they will need to match otherwise "no" will be returned. To verify is a certificate is truly self-signed, the signature will need to be verified. See the certvalidator package for one possible solution. ÚnoÚmaybe)Ú_self_signedr4r?r‘rjs rAÚself_signedzCertificate.self_signed÷ s‹€ð×ÑÐ$Ø $ˆDÔØ×ÒØ×&Ò&Ø×8Ò8Ø,3˜Ô)ð × Ñ Ð ð ×6Ñ6¸$×:MÑ:MÒMØ,3˜Ô)ð× Ñ Ð ð)0DÔ%Ø× Ñ Ð rDcóž—|j€6tj|j««j «|_|jS)zk :return: The SHA-1 hash of the DER-encoded bytes of this complete certificate rrjs rAr’zCertificate.sha1r•rDcóX—djd„t|j«D««S)z¯ :return: A unicode string of the SHA-1 hash, formatted using hex encoding with a space between each pair of characters, all uppercase r%c3ó&K—|] }d|z–—Œyw©z%02XNr=©r`Úcs rAraz/Certificate.sha1_fingerprint..$sèø€ÒE q˜ ÑEùó‚)r,rr’rjs rAÚsha1_fingerprintzCertificate.sha1_fingerprints"€ðx‰xÑE¬M¸$¿)¹)Ó,DÔEÓEÐErDcóž—|j€6tj|j««j «|_|jS)zy :return: The SHA-256 hash of the DER-encoded bytes of this complete certificate r—rjs rAr™zCertificate.sha256&s7€ð<‰<ÐÜ"Ÿ>™>¨$¯)©)«+Ó6×=Ñ=Ó?ˆDŒLØ|‰|ÐrDcóX—djd„t|j«D««S)z± :return: A unicode string of the SHA-256 hash, formatted using hex encoding with a space between each pair of characters, all uppercase r%c3ó&K—|] }d|z–—Œywr=r=r>s rAraz1Certificate.sha256_fingerprint..:sèø€ÒG q˜ ÑGùr@)r,rr™rjs rAÚsha256_fingerprintzCertificate.sha256_fingerprint2s"€ðx‰xÑG¬M¸$¿+¹+Ó,FÔGÓGÐGrDcóÀ—t|t«sttdt |«««‚|jd«j d«j«}|jd«dk7}|xrtjd|«}|xr|}|r¶|jsy|jd«}|jD]ˆ}|jd«j d«j«}|jd«} t| «t|«k7rŒZ| |k(ry |j|«} | sŒu|j|| «sŒˆy y|j sy|rt"j$nt"j&}t)||«}|j D]I} | jd«dk7rt"j$nt"j&}t)|| «}||k(sŒIy y) a Check if a domain name or IP address is valid according to the certificate :param domain_ip: A unicode string of a domain name or IP address :return: A boolean - if the domain or IP is valid for the certificate zL domain_ip must be a unicode string, not %s rrtrŒrsz^\d+\.\d+\.\d+\.\d+$FrLT)rFrrNr rrPr|rHrvr'r(r+r”r™Ú_is_wildcard_domainÚ_is_wildcard_matchr.r–r˜r—r5)r?Ú domain_ipÚencoded_domain_ipÚis_ipv6Úis_ipv4Ú is_domainÚ domain_labelsÚvalid_domainÚencoded_valid_domainÚvalid_domain_labelsÚis_wildcardr Ú normalized_ipÚvalid_ipÚvalid_familyÚnormalized_valid_ips rAÚis_valid_domain_ipzCertificate.is_valid_domain_ip<sÈ€ô˜)¤WÔ-ÜœFðô˜)Ó$ó óð ð&×,Ñ,¨VÓ4×;Ñ;¸GÓD×JÑJÓLÐà#×(Ñ(¨Ó-°Ñ3ˆØ+Ò\¤"§(¡(Ð+HÐJ[Ó"\ˆØKÒ/¨ Kˆ ñØ×%Ò%Øà-×3Ñ3°CÓ8ˆMà $× 2Ñ 2ò Ø'3×':Ñ':¸6Ó'B×'IÑ'IÈ'Ó'R×'XÑ'XÓ'ZÐ$Ø&:×&@Ñ&@ÀÓ&EÐ#ôÐ*Ó+¬s°=Ó/AÒAØà&¨-Ò7Ùà"×6Ñ6Ð7KÓLÚ 4×#:Ñ#:¸=ÐJ]Õ#^Ùð ðð~Š~Øá#*”—’´·±ˆÜ! &Ð*;Ó<ˆ àŸ™ò ˆHØ-5¯]©]¸3Ó-?À2Ò-Eœ6Ÿ>š>Ì6Ï?É?ˆLÜ"+¨L¸(Ó"CÐà" mÓ3Ùð ðrDcóº—|jd«dk7ry|j«jd«}|sy|djd«dk(ry|ddddk(ryy ) af Checks if a domain is a valid wildcard according to https://tools.ietf.org/html/rfc6125#section-6.4.3 :param domain: A unicode string of the domain name, where any U-labels from an IDN have been converted to A-labels :return: A boolean - if the domain is a valid wildcard domain Ú*r FrLrrsr¦zxn--T)ÚcountrHr”rv)r?ÚdomainÚlabelss rArGzCertificate._is_wildcard_domain~sh€ð<‰<˜Ó Ò!Øà—‘“×%Ñ% cÓ*ˆáØð!‰9>‰>˜#Ó "Ò$Øð!‰9Qqˆ>˜VÒ#ØàrDcó¾—|d}|dd}|d}|dd}||k7ry|dk(rytjd|jdd«zd z«}|j|«ryy) aÿ Determines if the labels in a domain are a match for labels from a wildcard valid domain name :param domain_labels: A list of unicode strings, with A-label form for IDNs, of the labels in the domain name to check :param valid_domain_labels: A list of unicode strings, with A-label form for IDNs, of the labels in a wildcard domain pattern :return: A boolean - if the domain matches the valid domain rr NFrYTú^z.*ú$)r'r'r+r()r?rNrQÚfirst_domain_labelÚother_domain_labelsÚwildcard_labelÚother_valid_domain_labelsÚwildcard_regexs rArHzCertificate._is_wildcard_matchŸs†€ð"+¨1Ñ-ÐØ+¨A¨BÐ/Ðà,¨QÑ/ˆØ$7¸¸Ð$;Ð!ðÐ";Ò;Øà˜SÒ ØäŸ™ C¨.×*@Ñ*@ÀÀdÓ*KÑ$KÈcÑ$QÓRˆØ×ÑÐ 2Ô3ØàrD)\rYrZr[r¦rr#r´rºrµrÄrÈrËrÎrÑrÔr×rÚrÝràrãrærêrírðrórörÀrùrürrrrr&r-r3r8rr˜r¼rr¾rÁrÅrÉrÌrÏrÒrÕrØrÛrÞrárärçrërîrñrôr÷rúrýr§rrrrªr¨rçr?r rrr‘rrŽrrr$r+r.r:r1r4r9r’rAr™rErWrGrHr=rDrAr°r°`s¶„à ˜NÐ+Ø Ð 5Ð6Ø ˜NÐ+ð€Gð"ÐØÐØ*.Ð'Ø ÐØÐØ"ÐØ!ÐØ#ÐØ"ÐØ%)Ð"Ø"&ÐØ!ÐØ&*Ð#Ø $ÐØÐØ $ÐØ $ÐØ*.Ð'Ø(,Ð%Ø&*Ð#ØÐØÐØ€NØ$ÐØ#ÐØ%)Ð"Ø€NØ€JØ€LØ€LØ€EØ€Gò*ð$ñ)óð)ðñ4óð4ðñ8óð8ðñ*óð*ðñ%óð%ðñ ,óð ,ðñ+óð+ðñ-óð-ðñ,óð,ðñ3óð3ðñ 0óð 0ðñ+óð+ðñ4óð4ðñ.óð.ðñ (óð (ðñ.óð.ðñ.óð.ðñ8óð8ðñ6óð6ðñ'óð'ðñ)óð)ðñ.óð.ðñ:óð:ðñ5óð5ðñBóðBðñ2óð2ðñ1óð1ðñ?óð?ðñ 0óð 0ðñ #óð #ðñGóðGðñHóðHðñ Lóð Lðñ-óð-ð*ñ -óð -ðñ 3óð 3òð>ñóðð*ñ #óð #ðDñóðð ñZóðZðñJóðJðñ !óð !ðñ!óð!ð2ñóððñFóðFðñ óð ðñHóðHò@òDóB#rDr°có—eZdZeZy)ÚKeyPurposeIdentifiersNrñr=rDrArfrfÉròrDrfcó—eZdZeZy)ÚSequenceOfAlgorithmIdentifiersN)rYrZr[rr·r=rDrArhrhÍrƒrDrhc óP—eZdZdeddifdedddœfdeddifdeddifd ed ddœfgZy)ÚCertificateAuxÚtrustrÐTÚrejectrrÎÚaliasÚkeyidr@r N)rYrZr[rfr.r$rhr´r=rDrArjrjÑsW„à Ð'¨*°dÐ);Ð<Ø Ð(°qÀdÑ*KÐLØ *˜z¨4Ð0Ð1Ø + ¨DÐ1Ð2Ø Ð0¸qÈdÑ2SÐTðGrDrjcó—eZdZeegZy)ÚTrustedCertificateN)rYrZr[r°rjÚ_child_specsr=rDrArprpÛs„Ø Ð0LrDrp)¶rÖÚ __future__rrrrÚ contextlibrÚ encodingsrr‘r'r–r-r)r/Ú_errorsr Ú_irirrÚ_ordereddictr Ú_typesrrrÚalgosrrrrÚcorerrrrrrrrrrrr r!r"r#r$r%r&r'r(r)r*r+r,r-r.r/r0rIr1Úutilr2r3r4r5r7r^rlr„r±r¶rºrÌrÓrÙrÛrärrBr\rr›rŸr¦rªrr°r³r·rºrÄrÆrÉrËrÍrÏrÓrÕr×rÚrÞrárçrëròrrrr r$r1r3r7r9r>rCrGrRrXrZr^rhrkrnrrrvrzr~r‚r…rˆrŒrŽr’r”r™rðrôrùrýrrrrrrrrr"r&r(r.r2r4r=rBrGrKrUrWrYrcrerqrsrurwr|r~r„r†rŸr¤r¦r°rfrhrjrpr=rDrAúr|súðñ÷SÓRå%ÝÛÛ Û ÛÛ Ûåß(Ý%ß5Ñ5ßfÓf÷÷÷÷÷÷÷óõ< ßDÓDô2 ˆiô2 ôj6ˆ)ô6ôrn9ônôbB5ôB5ôJôôôôˆyôô˜Hôô˜]ôð0ñ=óð=ô fô ôQ(ÐôQ(ôh~xô~ôBR ôRôj'*ô'ôT@ˆ6ô@ôF(ôô&ôô˜vôô˜ôô3ôô˜#ôô"˜jô"ô Zô ô ôô Hôô0 Zô0ô Hôô0 Zô0ô &ôôôô3ôô"zô"ô˜sôô8ôôôô˜(ôô˜Vôô7ôô˜Wôô8˜ôôD%˜*ô%ôôô8ôô/+&ô/+ôd:ôôˆ6ôôˆxôôxôô˜Xôô˜Fôô)ôôXôô!jô!ôhôô"˜ô"ôJ$˜Jô$ô&ôôJôôhôôôôÐ(ôô ˜(ô ô&˜:ô&ôÐ'ôô˜ôô$˜*ô$ôHôô Zô ô˜ôômÐ#ômô`˜ ôôÐ#ôô˜ôô$ ô$ô$˜jô$ô ˆzôô˜ôô ˜iô ôˆgôôxôô#˜Eô#ô˜hôô˜xôô+ Eô+ôzôô˜:ôô jôô ˜zô ôzôô˜ôô8ôô˜XôôJôôôô˜Hôô( ô(ôÐ"2ôô&"˜5ô"ô"˜5ô"ô"˜5ô"ô˜ôô%˜eô%ô ôô<, ô,ôÐ"ôô@#ô#ôLôôXôôb (ôb ôR˜Jôô& Zô&ôXôô1˜õ1rD