1*ca1c9b0cSelric# 4.1.1 Valid Signatures Test1 - Validate Successfully 2*ca1c9b0cSelric0 ValidCertificatePathTest1EE.crt 3*ca1c9b0cSelric# 4.1.2 Invalid CA Signature Test2 - Reject - Invalid signature on intermediate certificate 4*ca1c9b0cSelric1 InvalidCASignatureTest2EE.crt 5*ca1c9b0cSelric# 4.1.3 Invalid EE Signature Test3 - Reject - Invalid signature on end entity certificate 6*ca1c9b0cSelric1 InvalidEESignatureTest3EE.crt 7*ca1c9b0cSelric# 4.1.4 Valid DSA Signatures Test4 - Reject - Application can not process DSA signatures 8*ca1c9b0cSelric1 ValidDSASignaturesTest4EE.crt 9*ca1c9b0cSelric# 4.2.1 Invalid CA notBefore Date Test1 - Reject - notBefore date in intermediate certificate is after the current date 10*ca1c9b0cSelric1 InvalidCAnotBeforeDateTest1EE.crt 11*ca1c9b0cSelric# 4.2.2 Invalid EE notBefore Date Test2 - Reject - notBefore date in end entity certificate is after the current date 12*ca1c9b0cSelric1 InvalidEEnotBeforeDateTest2EE.crt 13*ca1c9b0cSelric# 4.2.3 Valid pre2000 UTC notBefore Date Test3 - Validate Successfully 14*ca1c9b0cSelric0 Validpre2000UTCnotBeforeDateTest3EE.crt 15*ca1c9b0cSelric# 4.2.4 Valid GeneralizedTime notBefore Date Test4 - Validate Successfully 16*ca1c9b0cSelric0 ValidGeneralizedTimenotBeforeDateTest4EE.crt 17*ca1c9b0cSelric# 4.2.5 Invalid CA notAfter Date Test5 - Reject - notAfter date in intermediate certificate is before the current date 18*ca1c9b0cSelric1 InvalidCAnotAfterDateTest5EE.crt 19*ca1c9b0cSelric# 4.2.6 Invalid EE notAfter Date Test6 - Reject - notAfter date in end entity certificate is before the current date 20*ca1c9b0cSelric1 InvalidEEnotAfterDateTest6EE.crt 21*ca1c9b0cSelric# 4.2.7 Invalid pre2000 UTC EE notAfter Date Test7 - Reject - notAfter date in end entity certificate is before the current date 22*ca1c9b0cSelric1 Invalidpre2000UTCEEnotAfterDateTest7EE.crt 23*ca1c9b0cSelric# 4.2.8 Valid GeneralizedTime notAfter Date Test8 - Validate Successfully 24*ca1c9b0cSelric0 ValidGeneralizedTimenotAfterDateTest8EE.crt 25*ca1c9b0cSelric# 4.3.1 Invalid Name Chaining EE Test1 - Reject - names do not chain 26*ca1c9b0cSelric1 InvalidNameChainingTest1EE.crt 27*ca1c9b0cSelric# 4.3.2 Invalid Name Chaining Order Test2 - Reject - names do not chain 28*ca1c9b0cSelric1 InvalidNameChainingOrderTest2EE.crt 29*ca1c9b0cSelric# 4.3.3 Valid Name Chaining Whitespace Test3 - Validate Successfully 30*ca1c9b0cSelric0 ValidNameChainingWhitespaceTest3EE.crt 31*ca1c9b0cSelric# 4.3.4 Valid Name Chaining Whitespace Test4 - Validate Successfully 32*ca1c9b0cSelric0 ValidNameChainingWhitespaceTest4EE.crt 33*ca1c9b0cSelric# 4.3.5 Valid Name Chaining Capitalization Test5 - Validate Successfully 34*ca1c9b0cSelric0 ValidNameChainingCapitalizationTest5EE.crt 35*ca1c9b0cSelric# 4.3.6 Valid Name Chaining UIDs Test6 - Validate Successfully 36*ca1c9b0cSelric0 ValidNameUIDsTest6EE.crt 37*ca1c9b0cSelric# 4.3.9 Valid UTF8String Encoded Names Test9 - Validate Successfully 38*ca1c9b0cSelric0 ValidUTF8StringEncodedNamesTest9EE.crt 39*ca1c9b0cSelric# 4.4.1 Missing CRL Test1 - Reject or Warn - status of end entity certificate can not be determined 40*ca1c9b0cSelric3 InvalidMissingCRLTest1EE.crt 41*ca1c9b0cSelric# 4.4.2 Invalid Revoked CA Test2 - Reject - an intermediate certificate has been revoked. 42*ca1c9b0cSelric2 InvalidRevokedCATest2EE.crt 43*ca1c9b0cSelric# 4.4.3 Invalid Revoked EE Test3 - Reject - the end entity certificate has been revoked 44*ca1c9b0cSelric2 InvalidRevokedEETest3EE.crt 45*ca1c9b0cSelric# 4.4.4. Invalid Bad CRL Signature Test4 - Reject or Warn - status of end entity certificate can not be determined 46*ca1c9b0cSelric3 InvalidBadCRLSignatureTest4EE.crt 47*ca1c9b0cSelric# 4.4.5 Invalid Bad CRL Issuer Name Test5 - Reject or Warn - status of end entity certificate can not be determined 48*ca1c9b0cSelric3 InvalidBadCRLIssuerNameTest5EE.crt 49*ca1c9b0cSelric# 4.4.6 Invalid Wrong CRL Test6 - Reject or Warn - status of end entity certificate can not be determined 50*ca1c9b0cSelric3 InvalidWrongCRLTest6EE.crt 51*ca1c9b0cSelric# 4.4.7 Valid Two CRLs Test7 - Validate Successfully 52*ca1c9b0cSelric0 ValidTwoCRLsTest7EE.crt 53*ca1c9b0cSelric# 4.4.8 Invalid Unknown CRL Entry Extension Test8 - Reject - the end entity certificate has been revoked 54*ca1c9b0cSelric2 InvalidUnknownCRLEntryExtensionTest8EE.crt 55*ca1c9b0cSelric# 4.4.9 Invalid Unknown CRL Extension Test9 - Reject - the end entity certificate has been revoked 56*ca1c9b0cSelric2 InvalidUnknownCRLExtensionTest9EE.crt 57*ca1c9b0cSelric# 4.4.10 Invalid Unknown CRL Extension Test10 - Reject or Warn - status of end entity certificate can not be determined 58*ca1c9b0cSelric3 InvalidUnknownCRLExtensionTest10EE.crt 59*ca1c9b0cSelric# 4.4.11 Invalid Old CRL nextUpdate Test11 - Reject or Warn - status of end entity certificate can not be determined 60*ca1c9b0cSelric3 InvalidOldCRLnextUpdateTest11EE.crt 61*ca1c9b0cSelric# 4.4.12 Invalid pre2000 CRL nextUpdate Tesst12 - Reject or Warn - status of end entity certificate can not be determined 62*ca1c9b0cSelric3 Invalidpre2000CRLnextUpdateTest12EE.crt 63*ca1c9b0cSelric# 4.4.13 Valid GeneralizedTime CRL nextUpdate Test13 - Validate Successfully 64*ca1c9b0cSelric0 ValidGeneralizedTimeCRLnextUpdateTest13EE.crt 65*ca1c9b0cSelric# 4.4.14 Valid Negative Serial Number Test14 - Validate Successfully 66*ca1c9b0cSelric0 ValidNegativeSerialNumberTest14EE.crt 67*ca1c9b0cSelric# 4.4.15 Invalid Negative Serial Number Test15 - Reject - the end entity certificate has been revoked 68*ca1c9b0cSelric2 InvalidNegativeSerialNumberTest15EE.crt 69*ca1c9b0cSelric# 4.4.16 Valid Long Serial Number Test16 - Validate Successfully 70*ca1c9b0cSelric0 ValidLongSerialNumberTest16EE.crt 71*ca1c9b0cSelric# 4.4.17 Valid Long Serial Number Test17 - Validate Successfully 72*ca1c9b0cSelric0 ValidLongSerialNumberTest17EE.crt 73*ca1c9b0cSelric# 4.4.18 Invalid Long Serial Number Test18 - Reject - the end entity certificate has been revoked 74*ca1c9b0cSelric2 InvalidLongSerialNumberTest18EE.crt 75*ca1c9b0cSelric# 4.4.19 Valid Separate Certificate and CRL Keys Test19 - Validate Successfully 76*ca1c9b0cSelric0 ValidSeparateCertificateandCRLKeysTest19EE.crt 77*ca1c9b0cSelric# 4.4.20 Invalid Separate Certificate and CRL Keys Test20 - Reject - the end entity certificate has been revoked 78*ca1c9b0cSelric2 InvalidSeparateCertificateandCRLKeysTest20EE.crt 79*ca1c9b0cSelric# 4.4.21 Invalid Separate Certificate and CRL Keys Test21 - Reject or Warn - status of end entity certificate can not be determined 80*ca1c9b0cSelric3 InvalidSeparateCertificateandCRLKeysTest21EE.crt 81*ca1c9b0cSelric# 4.5.1 Valid Basic Self-Issued Old With New Test1 - Validate Successfully 82*ca1c9b0cSelric0 ValidBasicSelfIssuedOldWithNewTest1EE.crt 83*ca1c9b0cSelric# 4.5.2 Invalid Basic Self-Issued Old With New Test2 - Reject - the end entity certificate has been revoked 84*ca1c9b0cSelric2 InvalidBasicSelfIssuedOldWithNewTest2EE.crt 85*ca1c9b0cSelric# 4.5.3 Valid Basic Self-Issued New With Old Test3 - Validate Successfully 86*ca1c9b0cSelric0 ValidBasicSelfIssuedNewWithOldTest3EE.crt 87*ca1c9b0cSelric# 4.5.4 Valid Basic Self-Issued New With Old Test4 - Validate Successfully 88*ca1c9b0cSelric0 ValidBasicSelfIssuedNewWithOldTest4EE.crt 89*ca1c9b0cSelric# 4.5.5 Invalid Basic Self-Issued New With Old Test5 - Reject - the end entity certificate has been revoked 90*ca1c9b0cSelric2 InvalidBasicSelfIssuedNewWithOldTest5EE.crt 91*ca1c9b0cSelric# 4.5.6 Valid Basic Self-Issued CRL Signing Key Test6 - Validate Successfully 92*ca1c9b0cSelric0 ValidBasicSelfIssuedCRLSigningKeyTest6EE.crt 93*ca1c9b0cSelric# 4.5.7 Invalid Basic Self-Issued CRL Signing Key Test7 - Reject - the end entity certificate has been revoked 94*ca1c9b0cSelric2 InvalidBasicSelfIssuedCRLSigningKeyTest7EE.crt 95*ca1c9b0cSelric# 4.5.8 Invalid Basic Self-Issued CRL Signing Key Test8 - Reject - invalid certification path 96*ca1c9b0cSelric1 InvalidBasicSelfIssuedCRLSigningKeyTest8EE.crt 97*ca1c9b0cSelric# 4.6.1 Invalid Missing basicConstraints Test1 - Reject - invalid certification path 98*ca1c9b0cSelric1 InvalidMissingbasicConstraintsTest1EE.crt 99*ca1c9b0cSelric# 4.6.2 Invalid cA False Test2 - Reject - invalid certification path 100*ca1c9b0cSelric1 InvalidcAFalseTest2EE.crt 101*ca1c9b0cSelric# 4.6.3 Invalid cA False Test3 - Reject - invalid certification path 102*ca1c9b0cSelric1 InvalidcAFalseTest3EE.crt 103*ca1c9b0cSelric# 4.6.4 Valid basicConstraints Not Critical Test4 - Validate Successfully 104*ca1c9b0cSelric0 ValidbasicConstraintsNotCriticalTest4EE.crt 105*ca1c9b0cSelric# 4.6.5 Invalid pathLenConstraint Test5 - Reject - invalid certification path 106*ca1c9b0cSelric1 InvalidpathLenConstraintTest5EE.crt 107*ca1c9b0cSelric# 4.6.6 Invalid pathLenConstraint Test6 - Reject - invalid certification path 108*ca1c9b0cSelric1 InvalidpathLenConstraintTest6EE.crt 109*ca1c9b0cSelric# 4.6.7 Valid pathLenConstraint Test7 - Validate Successfully 110*ca1c9b0cSelric0 ValidpathLenConstraintTest7EE.crt 111*ca1c9b0cSelric# 4.6.8 Valid pathLenConstraint Test8 - Validate Successfully 112*ca1c9b0cSelric0 ValidpathLenConstraintTest8EE.crt 113*ca1c9b0cSelric# 4.6.9 Invalid pathLenConstraint Test9 - Reject - invalid certification path 114*ca1c9b0cSelric1 InvalidpathLenConstraintTest9EE.crt 115*ca1c9b0cSelric# 4.6.10 Invalid pathLenConstraint Test10 - Reject - invalid certification path 116*ca1c9b0cSelric1 InvalidpathLenConstraintTest10EE.crt 117*ca1c9b0cSelric# 4.6.11 Invalid pathLenConstraint Test11 - Reject - invalid certification path 118*ca1c9b0cSelric1 InvalidpathLenConstraintTest11EE.crt 119*ca1c9b0cSelric# 4.6.12 Invalid pathLenConstraint Test12 - Reject - invalid certification path 120*ca1c9b0cSelric1 InvalidpathLenConstraintTest12EE.crt 121*ca1c9b0cSelric# 4.6.13 Valid pathLenConstraint Test13 - Validate Successfully 122*ca1c9b0cSelric0 ValidpathLenConstraintTest13EE.crt 123*ca1c9b0cSelric# 4.6.14 Valid pathLenConstraint Test14 - Validate Successfully 124*ca1c9b0cSelric0 ValidpathLenConstraintTest14EE.crt 125*ca1c9b0cSelric# 4.6.15 Valid Self-Issued pathLenConstraint Test15 - Validate Successfully 126*ca1c9b0cSelric0 ValidSelfIssuedpathLenConstraintTest15EE.crt 127*ca1c9b0cSelric# 4.6.16 Invalid Self-Issued pathLenConstraint Test16 - Reject - invalid certification path 128*ca1c9b0cSelric1 InvalidSelfIssuedpathLenConstraintTest16EE.crt 129*ca1c9b0cSelric# 4.6.17 Valid Self-Issued pathLenConstraint Test17 - Validate Successfully 130*ca1c9b0cSelric0 ValidSelfIssuedpathLenConstraintTest17EE.crt 131*ca1c9b0cSelric# 4.7.1 Invalid keyUsage Critical keyCertSign False Test1 - Reject - invalid certification path 132*ca1c9b0cSelric1 InvalidkeyUsageCriticalkeyCertSignFalseTest1EE.crt 133*ca1c9b0cSelric# 4.7.2 Invalid keyUsage Not Critical keyCertSign False Test2 - Reject - invalid certification path 134*ca1c9b0cSelric1 InvalidkeyUsageNotCriticalkeyCertSignFalseTest2EE.crt 135*ca1c9b0cSelric# 4.7.3 Valid keyUsage Not Critical Test3 - Validate Successfully 136*ca1c9b0cSelric0 ValidkeyUsageNotCriticalTest3EE.crt 137*ca1c9b0cSelric# 4.7.4 Invalid keyUsage Critical cRLSign False Test4 - Reject - invalid certification path 138*ca1c9b0cSelric1 InvalidkeyUsageCriticalcRLSignFalseTest4EE.crt 139*ca1c9b0cSelric# 4.7.5 Invalid keyUsage Not Critical cRLSign False Test5 - Reject - invalid certification path 140*ca1c9b0cSelric1 InvalidkeyUsageNotCriticalcRLSignFalseTest5EE.crt 141*ca1c9b0cSelric0 UserNoticeQualifierTest19EE.crt 142*ca1c9b0cSelric# 4.10.1 Valid Policy Mapping Test1, subtest 1 - Reject - unrecognized critical extension [Test using the default settings (i.e., <i>initial-policy-set</i> = <i>any-policy</i>) 143*ca1c9b0cSelric1 InvalidSelfIssuedrequireExplicitPolicyTest8EE.crt 144*ca1c9b0cSelric# 4.11.2 Valid inhibitPolicyMapping Test2 - Reject - unrecognized critical extension 145*ca1c9b0cSelric1 ValidinhibitPolicyMappingTest2EE.crt 146*ca1c9b0cSelric# 4.12.2 Valid inhibitAnyPolicy Test2 - Reject - unrecognized critical extension 147*ca1c9b0cSelric1 ValidinhibitAnyPolicyTest2EE.crt 148*ca1c9b0cSelric# 4.13.1 Valid DN nameConstraints Test1 - Validate Successfully 149*ca1c9b0cSelric0 ValidDNnameConstraintsTest1EE.crt 150*ca1c9b0cSelric# 4.13.2 Invalid DN nameConstraints Test2 - Reject - name constraints violation 151*ca1c9b0cSelric1 InvalidDNnameConstraintsTest2EE.crt 152*ca1c9b0cSelric# 4.13.3 Invalid DN nameConstraints Test3 - Reject - name constraints violation 153*ca1c9b0cSelric1 InvalidDNnameConstraintsTest3EE.crt 154*ca1c9b0cSelric# 4.13.4 Valid DN nameConstraints Test4 - Validate Successfully 155*ca1c9b0cSelric0 ValidDNnameConstraintsTest4EE.crt 156*ca1c9b0cSelric# 4.13.5 Valid DN nameConstraints Test5 - Validate Successfully 157*ca1c9b0cSelric0 ValidDNnameConstraintsTest5EE.crt 158*ca1c9b0cSelric# 4.13.6 Valid DN nameConstraints Test6 - Validate Successfully 159*ca1c9b0cSelric0 ValidDNnameConstraintsTest6EE.crt 160*ca1c9b0cSelric# 4.13.7 Invalid DN nameConstraints Test7 - Reject - name constraints violation 161*ca1c9b0cSelric1 InvalidDNnameConstraintsTest7EE.crt 162*ca1c9b0cSelric# 4.13.8 Invalid DN nameConstraints Test8 - Reject - name constraints violation 163*ca1c9b0cSelric1 InvalidDNnameConstraintsTest8EE.crt 164*ca1c9b0cSelric# 4.13.9 Invalid DN nameConstraints Test9 - Reject - name constraints violation 165*ca1c9b0cSelric1 InvalidDNnameConstraintsTest9EE.crt 166*ca1c9b0cSelric# 4.13.10 Invalid DN nameConstraints Test10 - Reject - name constraints violation 167*ca1c9b0cSelric1 InvalidDNnameConstraintsTest10EE.crt 168*ca1c9b0cSelric# 4.13.11 Valid DN nameConstraints Test11 - Validate Successfully 169*ca1c9b0cSelric0 ValidDNnameConstraintsTest11EE.crt 170*ca1c9b0cSelric# 4.13.12 Invalid DN nameConstraints Test12 - Reject - name constraints violation 171*ca1c9b0cSelric1 InvalidDNnameConstraintsTest12EE.crt 172*ca1c9b0cSelric# 4.13.13 Invalid DN nameConstraints Test13 - Reject - name constraints violation 173*ca1c9b0cSelric1 InvalidDNnameConstraintsTest13EE.crt 174*ca1c9b0cSelric# 4.13.14 Valid DN nameConstraints Test14 - Validate Successfully 175*ca1c9b0cSelric0 ValidDNnameConstraintsTest14EE.crt 176*ca1c9b0cSelric# 4.13.15 Invalid DN nameConstraints Test15 - Reject - name constraints violation 177*ca1c9b0cSelric1 InvalidDNnameConstraintsTest15EE.crt 178*ca1c9b0cSelric# 4.13.16 Invalid DN nameConstraints Test16 - Reject - name constraints violation 179*ca1c9b0cSelric1 InvalidDNnameConstraintsTest16EE.crt 180*ca1c9b0cSelric# 4.13.17 Invalid DN nameConstraints Test17 - Reject - name constraints violation 181*ca1c9b0cSelric1 InvalidDNnameConstraintsTest17EE.crt 182*ca1c9b0cSelric# 4.13.18 Valid DN nameConstraints Test18 - Validate Successfully 183*ca1c9b0cSelric0 ValidDNnameConstraintsTest18EE.crt 184*ca1c9b0cSelric# 4.13.19 Valid Self-Issued DN nameConstraints Test19 - Validate Successfully 185*ca1c9b0cSelric0 ValidDNnameConstraintsTest19EE.crt 186*ca1c9b0cSelric# 4.13.20 Invalid Self-Issued DN nameConstraints Test20 - Reject - name constraints violation 187*ca1c9b0cSelric1 InvalidDNnameConstraintsTest20EE.crt 188*ca1c9b0cSelric# 4.13.21 Valid RFC822 nameConstraints Test21 - Validate Successfully 189*ca1c9b0cSelric0 ValidRFC822nameConstraintsTest21EE.crt 190*ca1c9b0cSelric# 4.13.22 Invalid RFC822 nameConstraints Test22 - Reject - name constraints violation 191*ca1c9b0cSelric1 InvalidRFC822nameConstraintsTest22EE.crt 192*ca1c9b0cSelric# 4.13.23 Valid RFC822 nameConstraints Test23 - Validate Successfully 193*ca1c9b0cSelric0 ValidRFC822nameConstraintsTest23EE.crt 194*ca1c9b0cSelric# 4.13.24 Invalid RFC822 nameConstraints Test24 - Reject - name constraints violation 195*ca1c9b0cSelric1 InvalidRFC822nameConstraintsTest24EE.crt 196*ca1c9b0cSelric# 4.13.25 Valid RFC822 nameConstraints Test25 - Validate Successfully 197*ca1c9b0cSelric0 ValidRFC822nameConstraintsTest25EE.crt 198*ca1c9b0cSelric# 4.13.26 Invalid RFC822 nameConstraints Test26 - Reject - name constraints violation 199*ca1c9b0cSelric1 InvalidRFC822nameConstraintsTest26EE.crt 200*ca1c9b0cSelric# 4.13.27 Valid DN and RFC822 nameConstraints Test27 - Validate Successfully 201*ca1c9b0cSelric0 ValidDNandRFC822nameConstraintsTest27EE.crt 202*ca1c9b0cSelric# 4.13.28 Invalid DN and RFC822 nameConstraints Test28 - Reject - name constraints violation 203*ca1c9b0cSelric1 InvalidDNandRFC822nameConstraintsTest28EE.crt 204*ca1c9b0cSelric# 4.13.29 Invalid DN and RFC822 nameConstraints Test29 - Reject - name constraints violation 205*ca1c9b0cSelric1 InvalidDNandRFC822nameConstraintsTest29EE.crt 206*ca1c9b0cSelric# 4.13.30 Valid DNS nameConstraints Test30 - Validate Successfully 207*ca1c9b0cSelric0 ValidDNSnameConstraintsTest30EE.crt 208*ca1c9b0cSelric# 4.13.31 Invalid DNS nameConstraints Test31 - Reject - name constraints violation 209*ca1c9b0cSelric1 InvalidDNSnameConstraintsTest31EE.crt 210*ca1c9b0cSelric# 4.13.32 Valid DNS nameConstraints Test32 - Validate Successfully 211*ca1c9b0cSelric0 ValidDNSnameConstraintsTest32EE.crt 212*ca1c9b0cSelric# 4.13.33 Invalid DNS nameConstraints Test33 - Reject - name constraints violation 213*ca1c9b0cSelric1 InvalidDNSnameConstraintsTest33EE.crt 214*ca1c9b0cSelric# 4.13.34 Valid URI nameConstraints Test34 - Validate Successfully 215*ca1c9b0cSelric0 ValidURInameConstraintsTest34EE.crt 216*ca1c9b0cSelric# 4.13.35 Invalid URI nameConstraints Test35 - Reject - name constraints violation 217*ca1c9b0cSelric1 InvalidURInameConstraintsTest35EE.crt 218*ca1c9b0cSelric# 4.13.36 Valid URI nameConstraints Test36 - Validate Successfully 219*ca1c9b0cSelric0 ValidURInameConstraintsTest36EE.crt 220*ca1c9b0cSelric# 4.13.37 Invalid URI nameConstraints Test37 - Reject - name constraints violation 221*ca1c9b0cSelric1 InvalidURInameConstraintsTest37EE.crt 222*ca1c9b0cSelric# 4.13.38 Invalid DNS nameConstraints Test38 - Reject - name constraints violation 223*ca1c9b0cSelric1 InvalidDNSnameConstraintsTest38EE.crt 224*ca1c9b0cSelric# 4.14.1 Valid distributionPoint Test1 - Validate Successfully 225*ca1c9b0cSelric0 ValiddistributionPointTest1EE.crt 226*ca1c9b0cSelric# 4.14.2 Invalid distributionPoint Test2 - Reject - end entity certificate has been revoked 227*ca1c9b0cSelric2 InvaliddistributionPointTest2EE.crt 228*ca1c9b0cSelric# 4.14.3 Invalid distributionPoint Test3 - Reject or Warn - status of end entity certificate can not be determined 229*ca1c9b0cSelric3 InvaliddistributionPointTest3EE.crt 230*ca1c9b0cSelric# 4.14.4 Valid distributionPoint Test4 - Validate Successfully 231*ca1c9b0cSelric0 ValiddistributionPointTest4EE.crt 232*ca1c9b0cSelric# 4.14.5 Valid distributionPoint Test5 - Validate Successfully 233*ca1c9b0cSelric0 ValiddistributionPointTest5EE.crt 234*ca1c9b0cSelric# 4.14.6 Invalid distributionPoint Test6 - Reject - end entity certificate has been revoked 235*ca1c9b0cSelric2 InvaliddistributionPointTest6EE.crt 236*ca1c9b0cSelric# 4.14.7 Valid distributionPoint Test7 - Validate Successfully 237*ca1c9b0cSelric0 ValiddistributionPointTest7EE.crt 238*ca1c9b0cSelric# 4.14.8 Invalid distributionPoint Test8 - Reject or Warn - status of end entity certificate can not be determined 239*ca1c9b0cSelric3 InvaliddistributionPointTest8EE.crt 240*ca1c9b0cSelric# 4.14.9 Invalid distributionPoint Test9 - Reject or Warn - status of end entity certificate can not be determined 241*ca1c9b0cSelric3 InvaliddistributionPointTest9EE.crt 242*ca1c9b0cSelric# 4.14.10 Valid No issuingDistributionPoint Test10 - Validate Successfully 243*ca1c9b0cSelric0 ValidNoissuingDistributionPointTest10EE.crt 244*ca1c9b0cSelric# 4.14.11 Invalid onlyContainsUserCerts CRL Test11 - Reject or Warn - status of end entity certificate can not be determined 245*ca1c9b0cSelric3 InvalidonlyContainsUserCertsTest11EE.crt 246*ca1c9b0cSelric# 4.14.12 Invalid onlyContainsCACerts CRL Test12 - Reject or Warn - status of end entity certificate can not be determined 247*ca1c9b0cSelric3 InvalidonlyContainsCACertsTest12EE.crt 248*ca1c9b0cSelric# 4.14.13 Valid onlyContainsCACerts CRL Test13 - Validate Successfully 249*ca1c9b0cSelric0 ValidonlyContainsCACertsTest13EE.crt 250*ca1c9b0cSelric# 4.14.14 Invalid onlyContainsAttributeCerts Test14 - Reject or Warn - status of end entity certificate can not be determined 251*ca1c9b0cSelric3 InvalidonlyContainsAttributeCertsTest14EE.crt 252*ca1c9b0cSelric# 4.14.15 Invalid onlySomeReasons Test15 - Reject - end entity certificate has been revoked 253*ca1c9b0cSelric2 InvalidonlySomeReasonsTest15EE.crt 254*ca1c9b0cSelric# 4.14.16 Invalid onlySomeReasons Test16 - Reject - end entity certificate is on hold 255*ca1c9b0cSelric2 InvalidonlySomeReasonsTest16EE.crt 256*ca1c9b0cSelric# 4.14.17 Invalid onlySomeReasons Test17 - Reject or Warn - status of end entity certificate can not be determined 257*ca1c9b0cSelric3 InvalidonlySomeReasonsTest17EE.crt 258*ca1c9b0cSelric# 4.14.18 Valid onlySomeReasons Test18 - Validate Successfully 259*ca1c9b0cSelric0 ValidonlySomeReasonsTest18EE.crt 260*ca1c9b0cSelric# 4.14.19 Valid onlySomeReasons Test19 - Validate Successfully 261*ca1c9b0cSelric0 ValidonlySomeReasonsTest19EE.crt 262*ca1c9b0cSelric# 4.14.20 Invalid onlySomeReasons Test20 - Reject - end entity certificate has been revoked 263*ca1c9b0cSelric2 InvalidonlySomeReasonsTest20EE.crt 264*ca1c9b0cSelric# 4.14.21 Invalid onlySomeReasons Test21 - Reject - end entity certificate has been revoked 265*ca1c9b0cSelric2 InvalidonlySomeReasonsTest21EE.crt 266*ca1c9b0cSelric# 4.14.24 Valid IDP with indirectCRL Test24 - Reject or Warn - status of end entity certificate can not be determined 267*ca1c9b0cSelric3 ValidIDPwithindirectCRLTest24EE.crt 268*ca1c9b0cSelric# 4.15.1 Invalid deltaCRLIndicator No Base Test1 - Reject or Warn - status of end entity certificate can not be determined 269*ca1c9b0cSelric3 InvaliddeltaCRLIndicatorNoBaseTest1EE.crt 270*ca1c9b0cSelric# 4.15.2 Valid delta-CRL Test2 - Validate Successfully 271*ca1c9b0cSelric0 ValiddeltaCRLTest2EE.crt 272*ca1c9b0cSelric# 4.15.3 Invalid delta-CRL Test3 - Reject - end entity certificate has been revoked 273*ca1c9b0cSelric2 InvaliddeltaCRLTest3EE.crt 274*ca1c9b0cSelric# 4.15.4 Invalid delta-CRL Test4 - Reject - end entity certificate has been revoked 275*ca1c9b0cSelric2 InvaliddeltaCRLTest4EE.crt 276*ca1c9b0cSelric# 4.15.5 Valid delta-CRL Test5 - Validate Successfully 277*ca1c9b0cSelric0 ValiddeltaCRLTest5EE.crt 278*ca1c9b0cSelric# 4.15.6 Invalid delta-CRL Test6 - Reject - end entity certificate has been revoked 279*ca1c9b0cSelric2 InvaliddeltaCRLTest6EE.crt 280*ca1c9b0cSelric# 4.15.7 Valid delta-CRL Test7 - Validate Successfully 281*ca1c9b0cSelric0 ValiddeltaCRLTest7EE.crt 282*ca1c9b0cSelric# 4.15.8 Valid delta-CRL Test8 - Validate Successfully 283*ca1c9b0cSelric0 ValiddeltaCRLTest8EE.crt 284*ca1c9b0cSelric# 4.15.9 Invalid delta-CRL Test9 - Reject - end entity certificate has been revoked 285*ca1c9b0cSelric2 InvaliddeltaCRLTest9EE.crt 286*ca1c9b0cSelric# 4.15.10 Invalid delta-CRL Test10 - Reject or Warn - status of end entity certificate can not be determined 287*ca1c9b0cSelric3 InvaliddeltaCRLTest10EE.crt 288*ca1c9b0cSelric# 4.16.1 Valid Unknown Not Critical Certificate Extension Test1 - Validate Successfully 289*ca1c9b0cSelric0 ValidUnknownNotCriticalCertificateExtensionTest1EE.crt 290*ca1c9b0cSelric# 4.16.2 Invalid Unknown Critical Certificate Extension Test2 - Reject - unrecognized critical extension 291*ca1c9b0cSelric1 InvalidUnknownCriticalCertificateExtensionTest2EE.crt 292