From adca98065fa0aa748d5f83f6c0f9664a28d64fdc Mon Sep 17 00:00:00 2001 From: Kyle Isom Date: Fri, 3 Apr 2026 09:54:05 -0700 Subject: [PATCH] Update CA cert with CRL Sign key usage Same key, added CRL Sign to key usage extensions. Distributed to all nodes and NixOS system trust store. Co-Authored-By: Claude Opus 4.6 (1M context) --- certs/wntrmute-ca.pem | 33 +++++++++++++++++---------------- 1 file changed, 17 insertions(+), 16 deletions(-) diff --git a/certs/wntrmute-ca.pem b/certs/wntrmute-ca.pem index a9e82ce..92b12bc 100644 --- a/certs/wntrmute-ca.pem +++ b/certs/wntrmute-ca.pem @@ -1,18 +1,19 @@ -----BEGIN CERTIFICATE----- -MIIC6zCCAkygAwIBAgIUTh42D9w7YT5e/Nz+42m32ZyHNvEwCgYIKoZIzj0EAwQw -gY0xCzAJBgNVBAYTAlVTMQkwBwYDVQQIEwAxCTAHBgNVBAcTADEiMCAGA1UEChMZ -V05UUk1VVEUgSGVhdnkgSW5kdXN0cmllczEfMB0GA1UECxMWQ3J5cHRvZ3JhcGhp -YyBTZXJ2aWNlczEjMCEGA1UEAxMaV05UUk1VVEUgSXNzdWluZyBBdXRob3JpdHkw -HhcNMjYwMzExMjMxOTE0WhcNNDYwMzA3MDAxOTE0WjCBjTELMAkGA1UEBhMCVVMx -CTAHBgNVBAgTADEJMAcGA1UEBxMAMSIwIAYDVQQKExlXTlRSTVVURSBIZWF2eSBJ -bmR1c3RyaWVzMR8wHQYDVQQLExZDcnlwdG9ncmFwaGljIFNlcnZpY2VzMSMwIQYD -VQQDExpXTlRSTVVURSBJc3N1aW5nIEF1dGhvcml0eTCBmzAQBgcqhkjOPQIBBgUr -gQQAIwOBhgAEAewp0TVimwwnBnXWWYBoBNCmP73xPii58M/wWdwxY0myv2IHXiXB -/ip4Q25dMYhFyoCMq0g5VkRl5Y18OHfxLxrdARHE/tVlvnqzNH+sG0sm53NPRIeY -Eo0xbF546rv+/huC39SMrkZsrGmW3qiXOScX8LIQucvyJYcn2smqL2Gv8LzPo0Uw -QzAOBgNVHQ8BAf8EBAMCAgQwEgYDVR0TAQH/BAgwBgEB/wIBAjAdBgNVHQ4EFgQU -RVqxahQ8/leaLJjewC/xcoLJbTwwCgYIKoZIzj0EAwQDgYwAMIGIAkIA/6VhQ1/o -yZ+JNLxXHhhvUMiv/05Man3wM9Bn/dTUC0KamJo0K1AwtWQoYU69vxs8nj4xH4+A -oyATEqNB97byr74CQgC9sZfPWqDlFLqGO6dNEQqOF/54ya64fKQdSwNL4UzZTW8U -215hy6CercFpR9AzFBcCAonBY5fIJvlu64SUWXlStg== +MIIC7DCCAk2gAwIBAgIVAITIcBnDi2Nw/EvHvlcOgt2rke7yMAoGCCqGSM49BAME +MIGNMQswCQYDVQQGEwJVUzEJMAcGA1UECBMAMQkwBwYDVQQHEwAxIjAgBgNVBAoT +GVdOVFJNVVRFIEhlYXZ5IEluZHVzdHJpZXMxHzAdBgNVBAsTFkNyeXB0b2dyYXBo +aWMgU2VydmljZXMxIzAhBgNVBAMTGldOVFJNVVRFIElzc3VpbmcgQXV0aG9yaXR5 +MB4XDTI2MDQwMzE1NTA1N1oXDTQ2MDMyOTE2NTA1N1owgY0xCzAJBgNVBAYTAlVT +MQkwBwYDVQQIEwAxCTAHBgNVBAcTADEiMCAGA1UEChMZV05UUk1VVEUgSGVhdnkg +SW5kdXN0cmllczEfMB0GA1UECxMWQ3J5cHRvZ3JhcGhpYyBTZXJ2aWNlczEjMCEG +A1UEAxMaV05UUk1VVEUgSXNzdWluZyBBdXRob3JpdHkwgZswEAYHKoZIzj0CAQYF +K4EEACMDgYYABAHsKdE1YpsMJwZ11lmAaATQpj+98T4oufDP8FncMWNJsr9iB14l +wf4qeENuXTGIRcqAjKtIOVZEZeWNfDh38S8a3QERxP7VZb56szR/rBtLJudzT0SH +mBKNMWxeeOq7/v4bgt/UjK5GbKxplt6olzknF/CyELnL8iWHJ9rJqi9hr/C8z6NF +MEMwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQIwHQYDVR0OBBYE +FEVasWoUPP5XmiyY3sAv8XKCyW08MAoGCCqGSM49BAMEA4GMADCBiAJCAQse5tQo ++9BVX/eRjM6rZusXGguuvKbCXAyQ/eJH1wUelgDbE8qtFa884U8eqiod2NUpZXWr +Ce3lKp8GrjY1pbcpAkIB9+2/Fjv6YOBNDc1A/F2gG6Q7RqhkqYkLS9R/flUngEm/ +lU5ZyOXooeM0ZDZOn0Y4GOsXPx0LVD7PE3pHSkbxGpA= -----END CERTIFICATE----- +