Update expired certificates and related tests

Fixes: I#37670

t/data/smime/keys/demoCA/cacert.pem

@@ -1,13 +1,14 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 11236924883769032812 (0x9bf193a560cd006c)
-    Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C=AU, ST=Some-State, O=Internet Widgits Pty Ltd, CN=CA Owner/[email protected]
+        Serial Number:
+            6c:5a:84:c5:d2:ee:02:8e:2f:db:de:25:04:2c:8a:42:36:89:ed:4c
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C = AU, ST = Some-State, O = Internet Widgits Pty Ltd, CN = CA Owner, emailAddress = [email protected]
         Validity
-            Not Before: Aug 28 21:19:44 2013 GMT
-            Not After : Aug 26 21:19:44 2023 GMT
-        Subject: C=AU, ST=Some-State, O=Internet Widgits Pty Ltd, CN=CA Owner/emailAddress=[email protected]
+            Not Before: Aug 29 10:48:56 2023 GMT
+            Not After : Aug 29 10:48:56 2123 GMT
+        Subject: C = AU, ST = Some-State, O = Internet Widgits Pty Ltd, CN = CA Owner, emailAddress = [email protected]
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (1024 bit)
@@ -26,33 +27,34 @@ Certificate:
             X509v3 Subject Key Identifier: 
                 8D:1B:2D:BD:BD:24:E8:19:62:AE:4C:C9:2A:58:90:08:1C:D1:05:2B
             X509v3 Authority Key Identifier: 
-                keyid:8D:1B:2D:BD:BD:24:E8:19:62:AE:4C:C9:2A:58:90:08:1C:D1:05:2B
-
-            X509v3 Basic Constraints: 
+                8D:1B:2D:BD:BD:24:E8:19:62:AE:4C:C9:2A:58:90:08:1C:D1:05:2B
+            X509v3 Basic Constraints: critical
                 CA:TRUE
-    Signature Algorithm: sha1WithRSAEncryption
-         7b:f5:8f:d2:b9:44:34:fe:91:ab:1d:52:d3:10:2d:23:75:05:
-         8e:17:70:be:52:11:b0:8e:ee:f6:33:50:7c:c7:82:f3:c4:d2:
-         98:90:b3:a6:ad:00:33:36:dc:95:f4:4e:45:d2:09:e9:88:ae:
-         88:a2:72:e4:75:95:7a:78:31:16:34:a3:50:e0:c9:25:7f:65:
-         51:d4:59:20:23:d5:3e:35:79:cf:ed:3d:3c:8c:d1:79:b0:99:
-         d3:6b:99:ed:32:c5:29:7a:82:8a:98:cb:c6:95:c7:52:59:7c:
-         f8:1d:fd:18:b8:ef:4d:1f:9d:5d:09:b0:eb:68:50:ed:c0:21:
-         61:eb
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        2f:76:27:06:f5:76:bb:de:cf:a5:51:8a:07:2f:b2:f9:87:3e:
+        23:ec:ee:70:38:33:ac:fb:c9:61:e6:60:3e:27:11:62:ca:61:
+        7b:15:1f:73:2a:5e:d3:ff:8c:8e:ee:20:74:71:b9:ac:5c:b6:
+        e5:bb:39:00:80:03:09:1d:2d:80:9a:e0:3f:d5:4b:b6:ed:b1:
+        7b:ea:c5:45:63:79:84:55:92:2f:96:1f:eb:7d:31:46:c5:a4:
+        d3:dd:66:9d:b5:e9:75:97:98:b5:4b:81:26:92:eb:90:f6:aa:
+        77:f7:32:e1:4a:7b:c3:8d:e3:b4:0b:f4:97:f4:c4:a1:cc:ac:
+        7a:09
 -----BEGIN CERTIFICATE-----
-MIICyDCCAjGgAwIBAgIJAJvxk6VgzQBsMA0GCSqGSIb3DQEBBQUAMH0xCzAJBgNV
-BAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBX
-aWRnaXRzIFB0eSBMdGQxETAPBgNVBAMMCENBIE93bmVyMSMwIQYJKoZIhvcNAQkB
-FhRjYS5vd25lckBleGFtcGxlLmNvbTAeFw0xMzA4MjgyMTE5NDRaFw0yMzA4MjYy
-MTE5NDRaMH0xCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYD
-VQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQxETAPBgNVBAMMCENBIE93bmVy
-MSMwIQYJKoZIhvcNAQkBFhRjYS5vd25lckBleGFtcGxlLmNvbTCBnzANBgkqhkiG
-9w0BAQEFAAOBjQAwgYkCgYEAvsxicL9C7p3wBQQrBUZOyWBqtDGMpWAleQVhiP42
-nmMkvzORb2qQJ4FHXi9JVBnHAlE32f8Lm4rN7X+3a7wK3uXIMvekFlHRP6QClpgJ
-g+LtgRm749Qr8YeXAwgF5vdlxpBInXUHMZMEbQm3D9/68rP/4UT0GANPWba60jaL
-DrMCAwEAAaNQME4wHQYDVR0OBBYEFI0bLb29JOgZYq5MySpYkAgc0QUrMB8GA1Ud
-IwQYMBaAFI0bLb29JOgZYq5MySpYkAgc0QUrMAwGA1UdEwQFMAMBAf8wDQYJKoZI
-hvcNAQEFBQADgYEAe/WP0rlENP6Rqx1S0xAtI3UFjhdwvlIRsI7u9jNQfMeC88TS
-mJCzpq0AMzbclfRORdIJ6YiuiKJy5HWVengxFjSjUODJJX9lUdRZICPVPjV5z+09
-PIzRebCZ02uZ7TLFKXqCipjLxpXHUll8+B39GLjvTR+dXQmw62hQ7cAhYes=
+MIIC2DCCAkGgAwIBAgIUbFqExdLuAo4v294lBCyKQjaJ7UwwDQYJKoZIhvcNAQEL
+BQAwfTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM
+GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDERMA8GA1UEAwwIQ0EgT3duZXIxIzAh
+BgkqhkiG9w0BCQEWFGNhLm93bmVyQGV4YW1wbGUuY29tMCAXDTIzMDgyOTEwNDg1
+NloYDzIxMjMwODI5MTA0ODU2WjB9MQswCQYDVQQGEwJBVTETMBEGA1UECAwKU29t
+ZS1TdGF0ZTEhMB8GA1UECgwYSW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMREwDwYD
+VQQDDAhDQSBPd25lcjEjMCEGCSqGSIb3DQEJARYUY2Eub3duZXJAZXhhbXBsZS5j
+b20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAL7MYnC/Qu6d8AUEKwVGTslg
+arQxjKVgJXkFYYj+Np5jJL8zkW9qkCeBR14vSVQZxwJRN9n/C5uKze1/t2u8Ct7l
+yDL3pBZR0T+kApaYCYPi7YEZu+PUK/GHlwMIBeb3ZcaQSJ11BzGTBG0Jtw/f+vKz
+/+FE9BgDT1m2utI2iw6zAgMBAAGjUzBRMB0GA1UdDgQWBBSNGy29vSToGWKuTMkq
+WJAIHNEFKzAfBgNVHSMEGDAWgBSNGy29vSToGWKuTMkqWJAIHNEFKzAPBgNVHRMB
+Af8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4GBAC92Jwb1drvez6VRigcvsvmHPiPs
+7nA4M6z7yWHmYD4nEWLKYXsVH3MqXtP/jI7uIHRxuaxctuW7OQCAAwkdLYCa4D/V
+S7btsXvqxUVjeYRVki+WH+t9MUbFpNPdZp216XWXmLVLgSaS65D2qnf3MuFKe8ON
+47QL9Jf0xKHMrHoJ
 -----END CERTIFICATE-----

t/data/smime/keys/otherCA/cacert.pem

@@ -1,13 +1,14 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 16372135729078323798 (0xe33582b3ca31ca56)
-    Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C=AU, ST=Some-State, O=Other Widgits, LLC, CN=CA Owner/[email protected]
+        Serial Number:
+            6b:df:42:4b:c4:f9:01:08:67:f2:ba:27:a1:21:05:8e:91:65:44:27
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C = AU, ST = Some-State, O = "Other Widgits, LLC", CN = CA Owner, emailAddress = [email protected]
         Validity
-            Not Before: Aug 28 22:16:28 2013 GMT
-            Not After : Aug 28 22:16:28 2023 GMT
-        Subject: C=AU, ST=Some-State, O=Other Widgits, LLC, CN=CA Owner/emailAddress=[email protected]
+            Not Before: Aug 29 10:49:43 2023 GMT
+            Not After : Aug 29 10:49:43 2123 GMT
+        Subject: C = AU, ST = Some-State, O = "Other Widgits, LLC", CN = CA Owner, emailAddress = [email protected]
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
@@ -35,46 +36,46 @@ Certificate:
             X509v3 Subject Key Identifier: 
                 7F:75:3B:B2:1E:CF:EF:D6:A7:D1:42:F8:1C:A9:13:63:CF:C9:0E:5A
             X509v3 Authority Key Identifier: 
-                keyid:7F:75:3B:B2:1E:CF:EF:D6:A7:D1:42:F8:1C:A9:13:63:CF:C9:0E:5A
-
-            X509v3 Basic Constraints: 
+                7F:75:3B:B2:1E:CF:EF:D6:A7:D1:42:F8:1C:A9:13:63:CF:C9:0E:5A
+            X509v3 Basic Constraints: critical
                 CA:TRUE
-    Signature Algorithm: sha1WithRSAEncryption
-         44:f7:e8:e6:af:a9:be:cf:28:51:dc:86:14:e2:4d:e4:14:9f:
-         09:4d:cb:e9:10:2c:ef:21:ec:b0:8c:14:57:59:45:52:b4:e3:
-         db:f4:34:e3:39:b6:de:0c:eb:68:78:db:d0:21:d2:c1:51:18:
-         ce:33:14:a4:4d:91:88:eb:cc:b0:4a:93:73:75:48:e8:56:ce:
-         29:c9:07:73:18:28:20:e1:2e:ba:0f:cc:4c:26:e7:45:d5:4c:
-         60:89:ef:1d:d7:7a:a5:80:62:bf:30:da:ac:bf:be:f8:54:f3:
-         fc:8a:09:1c:89:2d:2a:12:20:99:66:54:a0:78:50:f0:46:44:
-         9d:ad:95:81:83:c0:47:38:b8:4a:81:3c:72:49:68:a2:a1:04:
-         c7:d3:e9:e8:6f:65:ce:10:11:7f:0a:8b:96:ce:4e:1e:55:c7:
-         54:34:25:5e:ba:95:62:ad:45:43:b1:69:70:d4:c4:33:29:56:
-         cd:45:08:7d:e5:1e:5c:77:55:7b:f7:34:ea:c5:d5:48:21:b1:
-         71:a5:02:16:50:78:64:e4:01:85:28:3e:e4:b8:f6:f8:02:3d:
-         01:23:ba:2c:54:c3:72:a5:2a:3d:41:fd:c1:15:60:37:0b:65:
-         bf:23:bd:33:f6:d8:75:03:71:46:47:97:93:ae:bc:7f:76:1e:
-         f3:5f:ba:0f
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        0b:96:50:8a:82:d2:91:b9:d9:13:e5:38:ee:a8:f5:33:4c:1f:
+        31:1b:1b:d9:3c:9c:83:c0:64:22:3c:79:4b:b2:35:44:4f:cd:
+        93:63:05:ef:63:f7:98:fe:06:44:dc:be:f6:b7:3f:0e:40:18:
+        5f:17:77:10:e3:61:dc:d0:ba:67:86:4b:5d:61:c9:34:d8:dd:
+        33:22:f9:cf:82:f9:b6:34:19:eb:c7:9f:e0:02:0f:1b:85:6e:
+        35:5f:5c:39:bc:20:d3:d7:96:89:bc:2f:a7:6f:c4:e1:17:77:
+        e8:a7:50:a6:c1:17:fc:0d:82:19:6d:05:09:a4:d8:e0:37:5c:
+        a6:4e:ca:9c:86:17:6d:90:95:74:60:33:5c:64:f2:cd:af:88:
+        a3:d3:2c:57:d9:c3:1e:73:99:f2:b2:58:7c:fc:a3:44:2f:52:
+        80:36:03:aa:3c:a8:07:60:6b:2b:66:6c:78:f9:3a:e1:28:2d:
+        41:47:62:70:0f:8a:49:ce:6b:ee:2d:fd:f3:5c:2e:b0:0b:a5:
+        f1:b2:0c:63:0d:f3:e6:9f:88:88:d0:ab:73:f4:fd:30:30:2a:
+        c6:6b:6d:da:1f:d1:b7:09:18:bc:c9:04:87:3e:e5:87:65:4d:
+        0f:74:a6:be:30:a6:9a:46:9b:20:48:2a:36:20:71:f0:7b:92:
+        19:0d:ba:5b
 -----BEGIN CERTIFICATE-----
-MIIDwTCCAqmgAwIBAgIJAOM1grPKMcpWMA0GCSqGSIb3DQEBBQUAMHcxCzAJBgNV
-BAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMRswGQYDVQQKDBJPdGhlciBXaWRn
-aXRzLCBMTEMxETAPBgNVBAMMCENBIE93bmVyMSMwIQYJKoZIhvcNAQkBFhRjYS5v
-d25lckBleGFtcGxlLm5ldDAeFw0xMzA4MjgyMjE2MjhaFw0yMzA4MjgyMjE2Mjha
-MHcxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMRswGQYDVQQKDBJP
-dGhlciBXaWRnaXRzLCBMTEMxETAPBgNVBAMMCENBIE93bmVyMSMwIQYJKoZIhvcN
-AQkBFhRjYS5vd25lckBleGFtcGxlLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEP
-ADCCAQoCggEBANa2UwRT6JiRxmqrJ8O6AVPh81YekMlhfnM3NoBJqbRqnzrYCG+6
-gmTFhZJBU3El7BiFHJ6ASzD3FrT4Bz73m6otn/gIpArmngrSLwZZKFOetHeKK/C1
-xsqvQb7tFxIPNy7puEM6diD96IGRuL8DknYfQNPgRP00x/PU9nfJUlnaN5WrVKcR
-pRoD+sxxGXLLKTkVabX2WxYi2O2ks7WD7WnZkX8tDK9PxkpKTx2j3B8Q9HfISOWU
-ZDspPZ0WDNIwOkQNpIcEBITs/RmCCHe1d2T0zrxspcG3F36iSt4oYkBePXdcmgnc
-fqa2ozTKc6TCQnRO2FItmE8obomTfjQ76zcCAwEAAaNQME4wHQYDVR0OBBYEFH91
-O7Iez+/Wp9FC+BypE2PPyQ5aMB8GA1UdIwQYMBaAFH91O7Iez+/Wp9FC+BypE2PP
-yQ5aMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBAET36Oavqb7PKFHc
-hhTiTeQUnwlNy+kQLO8h7LCMFFdZRVK049v0NOM5tt4M62h429Ah0sFRGM4zFKRN
-kYjrzLBKk3N1SOhWzinJB3MYKCDhLroPzEwm50XVTGCJ7x3XeqWAYr8w2qy/vvhU
-8/yKCRyJLSoSIJlmVKB4UPBGRJ2tlYGDwEc4uEqBPHJJaKKhBMfT6ehvZc4QEX8K
-i5bOTh5Vx1Q0JV66lWKtRUOxaXDUxDMpVs1FCH3lHlx3VXv3NOrF1UghsXGlAhZQ
-eGTkAYUoPuS49vgCPQEjuixUw3KlKj1B/cEVYDcLZb8jvTP22HUDcUZHl5OuvH92
-HvNfug8=
+MIID0TCCArmgAwIBAgIUa99CS8T5AQhn8ronoSEFjpFlRCcwDQYJKoZIhvcNAQEL
+BQAwdzELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxGzAZBgNVBAoM
+Ek90aGVyIFdpZGdpdHMsIExMQzERMA8GA1UEAwwIQ0EgT3duZXIxIzAhBgkqhkiG
+9w0BCQEWFGNhLm93bmVyQGV4YW1wbGUubmV0MCAXDTIzMDgyOTEwNDk0M1oYDzIx
+MjMwODI5MTA0OTQzWjB3MQswCQYDVQQGEwJBVTETMBEGA1UECAwKU29tZS1TdGF0
+ZTEbMBkGA1UECgwST3RoZXIgV2lkZ2l0cywgTExDMREwDwYDVQQDDAhDQSBPd25l
+cjEjMCEGCSqGSIb3DQEJARYUY2Eub3duZXJAZXhhbXBsZS5uZXQwggEiMA0GCSqG
+SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWtlMEU+iYkcZqqyfDugFT4fNWHpDJYX5z
+NzaASam0ap862AhvuoJkxYWSQVNxJewYhRyegEsw9xa0+Ac+95uqLZ/4CKQK5p4K
+0i8GWShTnrR3iivwtcbKr0G+7RcSDzcu6bhDOnYg/eiBkbi/A5J2H0DT4ET9NMfz
+1PZ3yVJZ2jeVq1SnEaUaA/rMcRlyyyk5FWm19lsWItjtpLO1g+1p2ZF/LQyvT8ZK
+Sk8do9wfEPR3yEjllGQ7KT2dFgzSMDpEDaSHBASE7P0Zggh3tXdk9M68bKXBtxd+
+okreKGJAXj13XJoJ3H6mtqM0ynOkwkJ0TthSLZhPKG6Jk340O+s3AgMBAAGjUzBR
+MB0GA1UdDgQWBBR/dTuyHs/v1qfRQvgcqRNjz8kOWjAfBgNVHSMEGDAWgBR/dTuy
+Hs/v1qfRQvgcqRNjz8kOWjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUA
+A4IBAQALllCKgtKRudkT5TjuqPUzTB8xGxvZPJyDwGQiPHlLsjVET82TYwXvY/eY
+/gZE3L72tz8OQBhfF3cQ42Hc0LpnhktdYck02N0zIvnPgvm2NBnrx5/gAg8bhW41
+X1w5vCDT15aJvC+nb8ThF3fop1CmwRf8DYIZbQUJpNjgN1ymTsqchhdtkJV0YDNc
+ZPLNr4ij0yxX2cMec5nyslh8/KNEL1KANgOqPKgHYGsrZmx4+TrhKC1BR2JwD4pJ
+zmvuLf3zXC6wC6XxsgxjDfPmn4iI0Ktz9P0wMCrGa23aH9G3CRi8yQSHPuWHZU0P
+dKa+MKaaRpsgSCo2IHHwe5IZDbpb
 -----END CERTIFICATE-----

t/data/smime/keys/root@example.com.crt

@@ -1,43 +1,85 @@
 Certificate:
     Data:
         Version: 1 (0x0)
-        Serial Number: 9974010075738841110 (0x8a6acd51be94a016)
-    Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C=AU, ST=Some-State, O=Internet Widgits Pty Ltd, CN=CA Owner/[email protected]
+        Serial Number:
+            8a:6a:cd:51:be:94:a0:16
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C = AU, ST = Some-State, O = Internet Widgits Pty Ltd, CN = CA Owner, emailAddress = [email protected]
         Validity
-            Not Before: Aug 28 21:41:07 2013 GMT
-            Not After : Aug 28 21:41:07 2023 GMT
-        Subject: C=AU, ST=Some-State, O=Internet Widgits Pty Ltd, CN=Enoch Root/emailAddress=[email protected]
+            Not Before: Aug 29 10:49:26 2023 GMT
+            Not After : Aug 29 10:49:26 2123 GMT
+        Subject: C = AU, ST = Some-State, O = Internet Widgits Pty Ltd, CN = Enoch Root, emailAddress = [email protected]
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (512 bit)
+                Public-Key: (4096 bit)
                 Modulus:
-                    00:b2:77:b9:bc:09:7d:14:8e:6b:6f:7e:33:a9:95:
-                    21:5d:f3:3c:91:61:f1:bc:5c:1d:7e:e7:54:25:e8:
-                    cb:5f:b7:18:0e:23:26:00:42:09:bd:89:da:5c:06:
-                    cb:52:08:43:f6:4e:fe:dd:f8:0a:8a:95:35:8f:4a:
-                    25:16:da:e6:bf
+                    00:d7:38:31:b4:41:16:d8:bb:6f:cf:f8:ba:90:ed:
+                    88:d3:aa:51:5d:05:19:19:4b:69:95:95:f5:40:0e:
+                    fc:20:49:32:fb:59:9d:5b:54:bd:cd:a6:4c:cf:07:
+                    13:51:0a:2b:80:01:bf:49:da:fe:f4:a8:9b:ec:9e:
+                    c5:ad:4e:1a:72:02:87:cd:57:c1:a9:82:a3:36:3d:
+                    96:62:81:e1:9d:a6:92:88:d0:fc:70:be:11:c0:3a:
+                    d2:8b:e3:c7:51:f2:b0:13:c8:65:c7:f9:f0:13:d8:
+                    33:c1:46:53:48:67:89:6a:0a:25:75:86:89:b6:cf:
+                    3e:f0:c9:94:97:4d:c5:f5:9a:5e:2e:7d:af:55:78:
+                    b3:65:95:4c:a7:e8:4a:f3:10:e9:29:20:10:00:65:
+                    bf:97:fd:68:e3:ed:2d:68:07:5d:6b:ea:78:1d:01:
+                    73:56:24:26:eb:7b:26:78:97:9a:41:bf:1a:cb:18:
+                    6c:67:31:19:47:79:55:b9:4f:00:9a:d9:65:bd:0f:
+                    74:b9:08:39:39:0c:4e:bb:a8:78:21:ba:4b:52:07:
+                    72:7b:50:37:ee:2e:ab:f0:2d:79:0f:53:58:b7:a5:
+                    a0:c2:bb:9f:86:7c:a6:a4:7a:68:c1:d3:d4:66:25:
+                    e8:7d:f7:41:0a:96:25:bc:c6:87:b6:ed:34:71:17:
+                    55:e1:95:4a:c2:e2:5b:7a:6a:5f:67:5e:cd:0f:d8:
+                    43:f4:4d:13:d8:00:bf:4b:e2:d9:df:1a:6e:14:13:
+                    e3:30:6e:05:ad:35:1d:5c:c9:be:59:cb:9f:9f:f8:
+                    9d:e6:0f:de:06:db:4c:15:9e:a6:8f:84:b5:37:2c:
+                    72:bc:45:9b:61:72:d0:0e:23:fb:d4:a2:cb:bd:77:
+                    c3:70:69:4c:bc:6b:09:1c:00:26:0b:90:5b:c9:d8:
+                    10:f4:18:04:6e:9b:1a:f2:7b:da:60:30:df:78:04:
+                    de:39:bb:c7:a3:36:30:41:38:5e:7f:7a:3e:6f:40:
+                    1d:c2:58:05:bf:a3:16:1e:ba:77:bd:30:1d:3f:0b:
+                    16:98:a4:67:98:2a:ae:b2:42:2d:30:72:9c:bb:1d:
+                    8d:0a:25:85:2d:7b:42:4d:8b:87:4b:7a:15:ae:af:
+                    2a:3e:78:a7:a6:a7:50:cc:ad:6e:dd:75:d1:f7:d6:
+                    07:2a:44:92:4a:88:3b:30:e9:72:84:54:e4:68:4e:
+                    db:da:42:7e:d2:88:28:79:bb:0b:0d:d0:22:7f:b7:
+                    75:f7:57:8b:45:25:0b:b6:02:6f:8d:56:27:1e:14:
+                    5a:6e:c5:84:ff:f5:d5:79:54:c5:24:e4:b2:fa:ab:
+                    55:95:1d:d2:56:d8:46:c9:1c:77:bd:64:57:cf:88:
+                    e9:04:cf
                 Exponent: 65537 (0x10001)
-    Signature Algorithm: sha1WithRSAEncryption
-         1a:cd:7e:0e:e0:6f:90:b7:22:0e:4d:79:4d:6a:9b:ac:a1:6a:
-         ab:85:32:9c:86:9c:d2:10:96:f7:e0:00:2c:7d:3c:16:a4:ff:
-         dd:9e:37:fb:a3:7a:43:ab:2f:ee:c4:ff:be:77:0f:40:f8:0e:
-         45:3e:48:46:bf:ec:e1:b0:46:8d:13:37:7a:a6:d1:7c:16:cb:
-         28:6b:37:88:4d:0a:12:6b:87:b9:7c:d9:c4:d7:57:93:b9:f6:
-         21:26:1b:32:88:1d:cd:84:0f:6a:f9:05:0a:76:01:de:5e:99:
-         86:10:fc:7d:ee:d5:70:b2:44:99:41:0a:d7:0e:e8:5b:c9:ca:
-         10:39
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        0c:76:a3:14:d4:b5:2d:0c:9c:6b:e8:54:89:87:00:78:3c:12:
+        50:7f:a7:f1:7b:3f:81:a7:0f:d6:ef:a2:28:24:16:61:32:69:
+        57:43:27:2a:be:1d:50:76:23:cf:44:90:20:7c:89:5b:de:3a:
+        b2:eb:b5:37:a2:84:7a:10:e6:7a:d3:8c:13:b1:fd:9b:89:24:
+        ec:ff:8b:9c:e7:6e:c3:b5:17:cb:5f:76:61:5c:10:a3:5e:49:
+        e4:f8:ad:0c:fe:f6:b8:33:6b:85:a7:f1:6f:43:d1:97:de:c8:
+        83:d7:56:e9:34:77:c0:77:2a:a6:64:0c:7b:6f:ab:fb:34:d6:
+        64:51
 -----BEGIN CERTIFICATE-----
-MIICKzCCAZQCCQCKas1RvpSgFjANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJB
+MIID9TCCA14CCQCKas1RvpSgFjANBgkqhkiG9w0BAQsFADB9MQswCQYDVQQGEwJB
 VTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UECgwYSW50ZXJuZXQgV2lkZ2l0
 cyBQdHkgTHRkMREwDwYDVQQDDAhDQSBPd25lcjEjMCEGCSqGSIb3DQEJARYUY2Eu
-b3duZXJAZXhhbXBsZS5jb20wHhcNMTMwODI4MjE0MTA3WhcNMjMwODI4MjE0MTA3
-WjB7MQswCQYDVQQGEwJBVTETMBEGA1UECBMKU29tZS1TdGF0ZTEhMB8GA1UEChMY
-SW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMRMwEQYDVQQDEwpFbm9jaCBSb290MR8w
-HQYJKoZIhvcNAQkBFhByb290QGV4YW1wbGUuY29tMFwwDQYJKoZIhvcNAQEBBQAD
-SwAwSAJBALJ3ubwJfRSOa29+M6mVIV3zPJFh8bxcHX7nVCXoy1+3GA4jJgBCCb2J
-2lwGy1IIQ/ZO/t34CoqVNY9KJRba5r8CAwEAATANBgkqhkiG9w0BAQUFAAOBgQAa
-zX4O4G+QtyIOTXlNapusoWqrhTKchpzSEJb34AAsfTwWpP/dnjf7o3pDqy/uxP++
-dw9A+A5FPkhGv+zhsEaNEzd6ptF8FssoazeITQoSa4e5fNnE11eTufYhJhsyiB3N
-hA9q+QUKdgHeXpmGEPx97tVwskSZQQrXDuhbycoQOQ==
+b3duZXJAZXhhbXBsZS5jb20wIBcNMjMwODI5MTA0OTI2WhgPMjEyMzA4MjkxMDQ5
+MjZaMHsxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQK
+DBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQxEzARBgNVBAMMCkVub2NoIFJvb3Qx
+HzAdBgkqhkiG9w0BCQEWEHJvb3RAZXhhbXBsZS5jb20wggIiMA0GCSqGSIb3DQEB
+AQUAA4ICDwAwggIKAoICAQDXODG0QRbYu2/P+LqQ7YjTqlFdBRkZS2mVlfVADvwg
+STL7WZ1bVL3NpkzPBxNRCiuAAb9J2v70qJvsnsWtThpyAofNV8GpgqM2PZZigeGd
+ppKI0PxwvhHAOtKL48dR8rATyGXH+fAT2DPBRlNIZ4lqCiV1hom2zz7wyZSXTcX1
+ml4ufa9VeLNllUyn6ErzEOkpIBAAZb+X/Wjj7S1oB11r6ngdAXNWJCbreyZ4l5pB
+vxrLGGxnMRlHeVW5TwCa2WW9D3S5CDk5DE67qHghuktSB3J7UDfuLqvwLXkPU1i3
+paDCu5+GfKakemjB09RmJeh990EKliW8xoe27TRxF1XhlUrC4lt6al9nXs0P2EP0
+TRPYAL9L4tnfGm4UE+MwbgWtNR1cyb5Zy5+f+J3mD94G20wVnqaPhLU3LHK8RZth
+ctAOI/vUosu9d8NwaUy8awkcACYLkFvJ2BD0GARumxrye9pgMN94BN45u8ejNjBB
+OF5/ej5vQB3CWAW/oxYeune9MB0/CxaYpGeYKq6yQi0wcpy7HY0KJYUte0JNi4dL
+ehWuryo+eKemp1DMrW7dddH31gcqRJJKiDsw6XKEVORoTtvaQn7SiCh5uwsN0CJ/
+t3X3V4tFJQu2Am+NViceFFpuxYT/9dV5VMUk5LL6q1WVHdJW2EbJHHe9ZFfPiOkE
+zwIDAQABMA0GCSqGSIb3DQEBCwUAA4GBAAx2oxTUtS0MnGvoVImHAHg8ElB/p/F7
+P4GnD9bvoigkFmEyaVdDJyq+HVB2I89EkCB8iVveOrLrtTeihHoQ5nrTjBOx/ZuJ
+JOz/i5znbsO1F8tfdmFcEKNeSeT4rQz+9rgza4Wn8W9D0ZfeyIPXVuk0d8B3KqZk
+DHtvq/s01mRR
 -----END CERTIFICATE-----

t/data/smime/keys/root@example.com.csr

@@ -1,9 +1,28 @@
 -----BEGIN CERTIFICATE REQUEST-----
-MIIBNTCB4AIBADB7MQswCQYDVQQGEwJBVTETMBEGA1UECBMKU29tZS1TdGF0ZTEh
-MB8GA1UEChMYSW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMRMwEQYDVQQDEwpFbm9j
-aCBSb290MR8wHQYJKoZIhvcNAQkBFhByb290QGV4YW1wbGUuY29tMFwwDQYJKoZI
-hvcNAQEBBQADSwAwSAJBALJ3ubwJfRSOa29+M6mVIV3zPJFh8bxcHX7nVCXoy1+3
-GA4jJgBCCb2J2lwGy1IIQ/ZO/t34CoqVNY9KJRba5r8CAwEAAaAAMA0GCSqGSIb3
-DQEBBQUAA0EABuN/lyQxMY6DNb9XZ7H+UZLJrNYei1HRvfIXig7EvkSDEnArSwfZ
-uzAeLo3mnIp7WiDk3M7e19LQFkERs2xvHw==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 -----END CERTIFICATE REQUEST-----