1# 4.1.1 Valid Signatures Test1 - Validate Successfully 20 ValidCertificatePathTest1EE.crt 3# 4.1.2 Invalid CA Signature Test2 - Reject - Invalid signature on intermediate certificate 41 InvalidCASignatureTest2EE.crt 5# 4.1.3 Invalid EE Signature Test3 - Reject - Invalid signature on end entity certificate 61 InvalidEESignatureTest3EE.crt 7# 4.1.4 Valid DSA Signatures Test4 - Reject - Application can not process DSA signatures 81 ValidDSASignaturesTest4EE.crt 9# 4.2.1 Invalid CA notBefore Date Test1 - Reject - notBefore date in intermediate certificate is after the current date 101 InvalidCAnotBeforeDateTest1EE.crt 11# 4.2.2 Invalid EE notBefore Date Test2 - Reject - notBefore date in end entity certificate is after the current date 121 InvalidEEnotBeforeDateTest2EE.crt 13# 4.2.3 Valid pre2000 UTC notBefore Date Test3 - Validate Successfully 140 Validpre2000UTCnotBeforeDateTest3EE.crt 15# 4.2.4 Valid GeneralizedTime notBefore Date Test4 - Validate Successfully 160 ValidGeneralizedTimenotBeforeDateTest4EE.crt 17# 4.2.5 Invalid CA notAfter Date Test5 - Reject - notAfter date in intermediate certificate is before the current date 181 InvalidCAnotAfterDateTest5EE.crt 19# 4.2.6 Invalid EE notAfter Date Test6 - Reject - notAfter date in end entity certificate is before the current date 201 InvalidEEnotAfterDateTest6EE.crt 21# 4.2.7 Invalid pre2000 UTC EE notAfter Date Test7 - Reject - notAfter date in end entity certificate is before the current date 221 Invalidpre2000UTCEEnotAfterDateTest7EE.crt 23# 4.2.8 Valid GeneralizedTime notAfter Date Test8 - Validate Successfully 240 ValidGeneralizedTimenotAfterDateTest8EE.crt 25# 4.3.1 Invalid Name Chaining EE Test1 - Reject - names do not chain 261 InvalidNameChainingTest1EE.crt 27# 4.3.2 Invalid Name Chaining Order Test2 - Reject - names do not chain 281 InvalidNameChainingOrderTest2EE.crt 29# 4.3.3 Valid Name Chaining Whitespace Test3 - Validate Successfully 300 ValidNameChainingWhitespaceTest3EE.crt 31# 4.3.4 Valid Name Chaining Whitespace Test4 - Validate Successfully 320 ValidNameChainingWhitespaceTest4EE.crt 33# 4.3.5 Valid Name Chaining Capitalization Test5 - Validate Successfully 340 ValidNameChainingCapitalizationTest5EE.crt 35# 4.3.6 Valid Name Chaining UIDs Test6 - Validate Successfully 360 ValidNameUIDsTest6EE.crt 37# 4.3.9 Valid UTF8String Encoded Names Test9 - Validate Successfully 380 ValidUTF8StringEncodedNamesTest9EE.crt 39# 4.4.1 Missing CRL Test1 - Reject or Warn - status of end entity certificate can not be determined 403 InvalidMissingCRLTest1EE.crt 41# 4.4.2 Invalid Revoked CA Test2 - Reject - an intermediate certificate has been revoked. 422 InvalidRevokedCATest2EE.crt 43# 4.4.3 Invalid Revoked EE Test3 - Reject - the end entity certificate has been revoked 442 InvalidRevokedEETest3EE.crt 45# 4.4.4. Invalid Bad CRL Signature Test4 - Reject or Warn - status of end entity certificate can not be determined 463 InvalidBadCRLSignatureTest4EE.crt 47# 4.4.5 Invalid Bad CRL Issuer Name Test5 - Reject or Warn - status of end entity certificate can not be determined 483 InvalidBadCRLIssuerNameTest5EE.crt 49# 4.4.6 Invalid Wrong CRL Test6 - Reject or Warn - status of end entity certificate can not be determined 503 InvalidWrongCRLTest6EE.crt 51# 4.4.7 Valid Two CRLs Test7 - Validate Successfully 520 ValidTwoCRLsTest7EE.crt 53# 4.4.8 Invalid Unknown CRL Entry Extension Test8 - Reject - the end entity certificate has been revoked 542 InvalidUnknownCRLEntryExtensionTest8EE.crt 55# 4.4.9 Invalid Unknown CRL Extension Test9 - Reject - the end entity certificate has been revoked 562 InvalidUnknownCRLExtensionTest9EE.crt 57# 4.4.10 Invalid Unknown CRL Extension Test10 - Reject or Warn - status of end entity certificate can not be determined 583 InvalidUnknownCRLExtensionTest10EE.crt 59# 4.4.11 Invalid Old CRL nextUpdate Test11 - Reject or Warn - status of end entity certificate can not be determined 603 InvalidOldCRLnextUpdateTest11EE.crt 61# 4.4.12 Invalid pre2000 CRL nextUpdate Tesst12 - Reject or Warn - status of end entity certificate can not be determined 623 Invalidpre2000CRLnextUpdateTest12EE.crt 63# 4.4.13 Valid GeneralizedTime CRL nextUpdate Test13 - Validate Successfully 640 ValidGeneralizedTimeCRLnextUpdateTest13EE.crt 65# 4.4.14 Valid Negative Serial Number Test14 - Validate Successfully 660 ValidNegativeSerialNumberTest14EE.crt 67# 4.4.15 Invalid Negative Serial Number Test15 - Reject - the end entity certificate has been revoked 682 InvalidNegativeSerialNumberTest15EE.crt 69# 4.4.16 Valid Long Serial Number Test16 - Validate Successfully 700 ValidLongSerialNumberTest16EE.crt 71# 4.4.17 Valid Long Serial Number Test17 - Validate Successfully 720 ValidLongSerialNumberTest17EE.crt 73# 4.4.18 Invalid Long Serial Number Test18 - Reject - the end entity certificate has been revoked 742 InvalidLongSerialNumberTest18EE.crt 75# 4.4.19 Valid Separate Certificate and CRL Keys Test19 - Validate Successfully 760 ValidSeparateCertificateandCRLKeysTest19EE.crt 77# 4.4.20 Invalid Separate Certificate and CRL Keys Test20 - Reject - the end entity certificate has been revoked 782 InvalidSeparateCertificateandCRLKeysTest20EE.crt 79# 4.4.21 Invalid Separate Certificate and CRL Keys Test21 - Reject or Warn - status of end entity certificate can not be determined 803 InvalidSeparateCertificateandCRLKeysTest21EE.crt 81# 4.5.1 Valid Basic Self-Issued Old With New Test1 - Validate Successfully 820 ValidBasicSelfIssuedOldWithNewTest1EE.crt 83# 4.5.2 Invalid Basic Self-Issued Old With New Test2 - Reject - the end entity certificate has been revoked 842 InvalidBasicSelfIssuedOldWithNewTest2EE.crt 85# 4.5.3 Valid Basic Self-Issued New With Old Test3 - Validate Successfully 860 ValidBasicSelfIssuedNewWithOldTest3EE.crt 87# 4.5.4 Valid Basic Self-Issued New With Old Test4 - Validate Successfully 880 ValidBasicSelfIssuedNewWithOldTest4EE.crt 89# 4.5.5 Invalid Basic Self-Issued New With Old Test5 - Reject - the end entity certificate has been revoked 902 InvalidBasicSelfIssuedNewWithOldTest5EE.crt 91# 4.5.6 Valid Basic Self-Issued CRL Signing Key Test6 - Validate Successfully 920 ValidBasicSelfIssuedCRLSigningKeyTest6EE.crt 93# 4.5.7 Invalid Basic Self-Issued CRL Signing Key Test7 - Reject - the end entity certificate has been revoked 942 InvalidBasicSelfIssuedCRLSigningKeyTest7EE.crt 95# 4.5.8 Invalid Basic Self-Issued CRL Signing Key Test8 - Reject - invalid certification path 961 InvalidBasicSelfIssuedCRLSigningKeyTest8EE.crt 97# 4.6.1 Invalid Missing basicConstraints Test1 - Reject - invalid certification path 981 InvalidMissingbasicConstraintsTest1EE.crt 99# 4.6.2 Invalid cA False Test2 - Reject - invalid certification path 1001 InvalidcAFalseTest2EE.crt 101# 4.6.3 Invalid cA False Test3 - Reject - invalid certification path 1021 InvalidcAFalseTest3EE.crt 103# 4.6.4 Valid basicConstraints Not Critical Test4 - Validate Successfully 1040 ValidbasicConstraintsNotCriticalTest4EE.crt 105# 4.6.5 Invalid pathLenConstraint Test5 - Reject - invalid certification path 1061 InvalidpathLenConstraintTest5EE.crt 107# 4.6.6 Invalid pathLenConstraint Test6 - Reject - invalid certification path 1081 InvalidpathLenConstraintTest6EE.crt 109# 4.6.7 Valid pathLenConstraint Test7 - Validate Successfully 1100 ValidpathLenConstraintTest7EE.crt 111# 4.6.8 Valid pathLenConstraint Test8 - Validate Successfully 1120 ValidpathLenConstraintTest8EE.crt 113# 4.6.9 Invalid pathLenConstraint Test9 - Reject - invalid certification path 1141 InvalidpathLenConstraintTest9EE.crt 115# 4.6.10 Invalid pathLenConstraint Test10 - Reject - invalid certification path 1161 InvalidpathLenConstraintTest10EE.crt 117# 4.6.11 Invalid pathLenConstraint Test11 - Reject - invalid certification path 1181 InvalidpathLenConstraintTest11EE.crt 119# 4.6.12 Invalid pathLenConstraint Test12 - Reject - invalid certification path 1201 InvalidpathLenConstraintTest12EE.crt 121# 4.6.13 Valid pathLenConstraint Test13 - Validate Successfully 1220 ValidpathLenConstraintTest13EE.crt 123# 4.6.14 Valid pathLenConstraint Test14 - Validate Successfully 1240 ValidpathLenConstraintTest14EE.crt 125# 4.6.15 Valid Self-Issued pathLenConstraint Test15 - Validate Successfully 1260 ValidSelfIssuedpathLenConstraintTest15EE.crt 127# 4.6.16 Invalid Self-Issued pathLenConstraint Test16 - Reject - invalid certification path 1281 InvalidSelfIssuedpathLenConstraintTest16EE.crt 129# 4.6.17 Valid Self-Issued pathLenConstraint Test17 - Validate Successfully 1300 ValidSelfIssuedpathLenConstraintTest17EE.crt 131# 4.7.1 Invalid keyUsage Critical keyCertSign False Test1 - Reject - invalid certification path 1321 InvalidkeyUsageCriticalkeyCertSignFalseTest1EE.crt 133# 4.7.2 Invalid keyUsage Not Critical keyCertSign False Test2 - Reject - invalid certification path 1341 InvalidkeyUsageNotCriticalkeyCertSignFalseTest2EE.crt 135# 4.7.3 Valid keyUsage Not Critical Test3 - Validate Successfully 1360 ValidkeyUsageNotCriticalTest3EE.crt 137# 4.7.4 Invalid keyUsage Critical cRLSign False Test4 - Reject - invalid certification path 1381 InvalidkeyUsageCriticalcRLSignFalseTest4EE.crt 139# 4.7.5 Invalid keyUsage Not Critical cRLSign False Test5 - Reject - invalid certification path 1401 InvalidkeyUsageNotCriticalcRLSignFalseTest5EE.crt 1410 UserNoticeQualifierTest19EE.crt 142# 4.10.1 Valid Policy Mapping Test1, subtest 1 - Reject - unrecognized critical extension [Test using the default settings (i.e., <i>initial-policy-set</i> = <i>any-policy</i>) 1431 InvalidSelfIssuedrequireExplicitPolicyTest8EE.crt 144# 4.11.2 Valid inhibitPolicyMapping Test2 - Reject - unrecognized critical extension 1451 ValidinhibitPolicyMappingTest2EE.crt 146# 4.12.2 Valid inhibitAnyPolicy Test2 - Reject - unrecognized critical extension 1471 ValidinhibitAnyPolicyTest2EE.crt 148# 4.13.1 Valid DN nameConstraints Test1 - Validate Successfully 1490 ValidDNnameConstraintsTest1EE.crt 150# 4.13.2 Invalid DN nameConstraints Test2 - Reject - name constraints violation 1511 InvalidDNnameConstraintsTest2EE.crt 152# 4.13.3 Invalid DN nameConstraints Test3 - Reject - name constraints violation 1531 InvalidDNnameConstraintsTest3EE.crt 154# 4.13.4 Valid DN nameConstraints Test4 - Validate Successfully 1550 ValidDNnameConstraintsTest4EE.crt 156# 4.13.5 Valid DN nameConstraints Test5 - Validate Successfully 1570 ValidDNnameConstraintsTest5EE.crt 158# 4.13.6 Valid DN nameConstraints Test6 - Validate Successfully 1590 ValidDNnameConstraintsTest6EE.crt 160# 4.13.7 Invalid DN nameConstraints Test7 - Reject - name constraints violation 1611 InvalidDNnameConstraintsTest7EE.crt 162# 4.13.8 Invalid DN nameConstraints Test8 - Reject - name constraints violation 1631 InvalidDNnameConstraintsTest8EE.crt 164# 4.13.9 Invalid DN nameConstraints Test9 - Reject - name constraints violation 1651 InvalidDNnameConstraintsTest9EE.crt 166# 4.13.10 Invalid DN nameConstraints Test10 - Reject - name constraints violation 1671 InvalidDNnameConstraintsTest10EE.crt 168# 4.13.11 Valid DN nameConstraints Test11 - Validate Successfully 1690 ValidDNnameConstraintsTest11EE.crt 170# 4.13.12 Invalid DN nameConstraints Test12 - Reject - name constraints violation 1711 InvalidDNnameConstraintsTest12EE.crt 172# 4.13.13 Invalid DN nameConstraints Test13 - Reject - name constraints violation 1731 InvalidDNnameConstraintsTest13EE.crt 174# 4.13.14 Valid DN nameConstraints Test14 - Validate Successfully 1750 ValidDNnameConstraintsTest14EE.crt 176# 4.13.15 Invalid DN nameConstraints Test15 - Reject - name constraints violation 1771 InvalidDNnameConstraintsTest15EE.crt 178# 4.13.16 Invalid DN nameConstraints Test16 - Reject - name constraints violation 1791 InvalidDNnameConstraintsTest16EE.crt 180# 4.13.17 Invalid DN nameConstraints Test17 - Reject - name constraints violation 1811 InvalidDNnameConstraintsTest17EE.crt 182# 4.13.18 Valid DN nameConstraints Test18 - Validate Successfully 1830 ValidDNnameConstraintsTest18EE.crt 184# 4.13.19 Valid Self-Issued DN nameConstraints Test19 - Validate Successfully 1850 ValidDNnameConstraintsTest19EE.crt 186# 4.13.20 Invalid Self-Issued DN nameConstraints Test20 - Reject - name constraints violation 1871 InvalidDNnameConstraintsTest20EE.crt 188# 4.13.21 Valid RFC822 nameConstraints Test21 - Validate Successfully 1890 ValidRFC822nameConstraintsTest21EE.crt 190# 4.13.22 Invalid RFC822 nameConstraints Test22 - Reject - name constraints violation 1911 InvalidRFC822nameConstraintsTest22EE.crt 192# 4.13.23 Valid RFC822 nameConstraints Test23 - Validate Successfully 1930 ValidRFC822nameConstraintsTest23EE.crt 194# 4.13.24 Invalid RFC822 nameConstraints Test24 - Reject - name constraints violation 1951 InvalidRFC822nameConstraintsTest24EE.crt 196# 4.13.25 Valid RFC822 nameConstraints Test25 - Validate Successfully 1970 ValidRFC822nameConstraintsTest25EE.crt 198# 4.13.26 Invalid RFC822 nameConstraints Test26 - Reject - name constraints violation 1991 InvalidRFC822nameConstraintsTest26EE.crt 200# 4.13.27 Valid DN and RFC822 nameConstraints Test27 - Validate Successfully 2010 ValidDNandRFC822nameConstraintsTest27EE.crt 202# 4.13.28 Invalid DN and RFC822 nameConstraints Test28 - Reject - name constraints violation 2031 InvalidDNandRFC822nameConstraintsTest28EE.crt 204# 4.13.29 Invalid DN and RFC822 nameConstraints Test29 - Reject - name constraints violation 2051 InvalidDNandRFC822nameConstraintsTest29EE.crt 206# 4.13.30 Valid DNS nameConstraints Test30 - Validate Successfully 2070 ValidDNSnameConstraintsTest30EE.crt 208# 4.13.31 Invalid DNS nameConstraints Test31 - Reject - name constraints violation 2091 InvalidDNSnameConstraintsTest31EE.crt 210# 4.13.32 Valid DNS nameConstraints Test32 - Validate Successfully 2110 ValidDNSnameConstraintsTest32EE.crt 212# 4.13.33 Invalid DNS nameConstraints Test33 - Reject - name constraints violation 2131 InvalidDNSnameConstraintsTest33EE.crt 214# 4.13.34 Valid URI nameConstraints Test34 - Validate Successfully 2150 ValidURInameConstraintsTest34EE.crt 216# 4.13.35 Invalid URI nameConstraints Test35 - Reject - name constraints violation 2171 InvalidURInameConstraintsTest35EE.crt 218# 4.13.36 Valid URI nameConstraints Test36 - Validate Successfully 2190 ValidURInameConstraintsTest36EE.crt 220# 4.13.37 Invalid URI nameConstraints Test37 - Reject - name constraints violation 2211 InvalidURInameConstraintsTest37EE.crt 222# 4.13.38 Invalid DNS nameConstraints Test38 - Reject - name constraints violation 2231 InvalidDNSnameConstraintsTest38EE.crt 224# 4.14.1 Valid distributionPoint Test1 - Validate Successfully 2250 ValiddistributionPointTest1EE.crt 226# 4.14.2 Invalid distributionPoint Test2 - Reject - end entity certificate has been revoked 2272 InvaliddistributionPointTest2EE.crt 228# 4.14.3 Invalid distributionPoint Test3 - Reject or Warn - status of end entity certificate can not be determined 2293 InvaliddistributionPointTest3EE.crt 230# 4.14.4 Valid distributionPoint Test4 - Validate Successfully 2310 ValiddistributionPointTest4EE.crt 232# 4.14.5 Valid distributionPoint Test5 - Validate Successfully 2330 ValiddistributionPointTest5EE.crt 234# 4.14.6 Invalid distributionPoint Test6 - Reject - end entity certificate has been revoked 2352 InvaliddistributionPointTest6EE.crt 236# 4.14.7 Valid distributionPoint Test7 - Validate Successfully 2370 ValiddistributionPointTest7EE.crt 238# 4.14.8 Invalid distributionPoint Test8 - Reject or Warn - status of end entity certificate can not be determined 2393 InvaliddistributionPointTest8EE.crt 240# 4.14.9 Invalid distributionPoint Test9 - Reject or Warn - status of end entity certificate can not be determined 2413 InvaliddistributionPointTest9EE.crt 242# 4.14.10 Valid No issuingDistributionPoint Test10 - Validate Successfully 2430 ValidNoissuingDistributionPointTest10EE.crt 244# 4.14.11 Invalid onlyContainsUserCerts CRL Test11 - Reject or Warn - status of end entity certificate can not be determined 2453 InvalidonlyContainsUserCertsTest11EE.crt 246# 4.14.12 Invalid onlyContainsCACerts CRL Test12 - Reject or Warn - status of end entity certificate can not be determined 2473 InvalidonlyContainsCACertsTest12EE.crt 248# 4.14.13 Valid onlyContainsCACerts CRL Test13 - Validate Successfully 2490 ValidonlyContainsCACertsTest13EE.crt 250# 4.14.14 Invalid onlyContainsAttributeCerts Test14 - Reject or Warn - status of end entity certificate can not be determined 2513 InvalidonlyContainsAttributeCertsTest14EE.crt 252# 4.14.15 Invalid onlySomeReasons Test15 - Reject - end entity certificate has been revoked 2532 InvalidonlySomeReasonsTest15EE.crt 254# 4.14.16 Invalid onlySomeReasons Test16 - Reject - end entity certificate is on hold 2552 InvalidonlySomeReasonsTest16EE.crt 256# 4.14.17 Invalid onlySomeReasons Test17 - Reject or Warn - status of end entity certificate can not be determined 2573 InvalidonlySomeReasonsTest17EE.crt 258# 4.14.18 Valid onlySomeReasons Test18 - Validate Successfully 2590 ValidonlySomeReasonsTest18EE.crt 260# 4.14.19 Valid onlySomeReasons Test19 - Validate Successfully 2610 ValidonlySomeReasonsTest19EE.crt 262# 4.14.20 Invalid onlySomeReasons Test20 - Reject - end entity certificate has been revoked 2632 InvalidonlySomeReasonsTest20EE.crt 264# 4.14.21 Invalid onlySomeReasons Test21 - Reject - end entity certificate has been revoked 2652 InvalidonlySomeReasonsTest21EE.crt 266# 4.14.24 Valid IDP with indirectCRL Test24 - Reject or Warn - status of end entity certificate can not be determined 2673 ValidIDPwithindirectCRLTest24EE.crt 268# 4.15.1 Invalid deltaCRLIndicator No Base Test1 - Reject or Warn - status of end entity certificate can not be determined 2693 InvaliddeltaCRLIndicatorNoBaseTest1EE.crt 270# 4.15.2 Valid delta-CRL Test2 - Validate Successfully 2710 ValiddeltaCRLTest2EE.crt 272# 4.15.3 Invalid delta-CRL Test3 - Reject - end entity certificate has been revoked 2732 InvaliddeltaCRLTest3EE.crt 274# 4.15.4 Invalid delta-CRL Test4 - Reject - end entity certificate has been revoked 2752 InvaliddeltaCRLTest4EE.crt 276# 4.15.5 Valid delta-CRL Test5 - Validate Successfully 2770 ValiddeltaCRLTest5EE.crt 278# 4.15.6 Invalid delta-CRL Test6 - Reject - end entity certificate has been revoked 2792 InvaliddeltaCRLTest6EE.crt 280# 4.15.7 Valid delta-CRL Test7 - Validate Successfully 2810 ValiddeltaCRLTest7EE.crt 282# 4.15.8 Valid delta-CRL Test8 - Validate Successfully 2830 ValiddeltaCRLTest8EE.crt 284# 4.15.9 Invalid delta-CRL Test9 - Reject - end entity certificate has been revoked 2852 InvaliddeltaCRLTest9EE.crt 286# 4.15.10 Invalid delta-CRL Test10 - Reject or Warn - status of end entity certificate can not be determined 2873 InvaliddeltaCRLTest10EE.crt 288# 4.16.1 Valid Unknown Not Critical Certificate Extension Test1 - Validate Successfully 2890 ValidUnknownNotCriticalCertificateExtensionTest1EE.crt 290# 4.16.2 Invalid Unknown Critical Certificate Extension Test2 - Reject - unrecognized critical extension 2911 InvalidUnknownCriticalCertificateExtensionTest2EE.crt 292