credentials: sample delegated crl signer certs and CRLs (#36929)
* credentials: sample delegated crl signer certs and CRLs
Generated the samples as described in
https://github.com/CHIP-Specifications/connectedhomeip-spec/issues/10308
* Restyled by prettier-markdown
* fix some paths in the readme file
* address reviews
uri should point to a .der file and .pem
Set the indirectCRL field to true
Also adding the crl with Certificate Issuer CRL entry extension, only first entry has the extension.
* Restyled by prettier-markdown
* Added few more test data set
- Added DAC certs signed by revoked PAI, out of it one DAC is revoked
and one is not.
- Added the dac provider test vectors for the indirect crl's usecase
- Added the revocation set for the indirect crl's
* Restyled by prettier-json
---------
Co-authored-by: Restyled.io <commits@restyled.io>
diff --git a/.github/.wordlist.txt b/.github/.wordlist.txt
index 5a2edb5..3b4e21a 100644
--- a/.github/.wordlist.txt
+++ b/.github/.wordlist.txt
@@ -318,6 +318,7 @@
cpuapp
cpython
CQM
+CRL
crypto
cryptographic
CSA
diff --git a/credentials/test/revoked-attestation-certificates/README.md b/credentials/test/revoked-attestation-certificates/README.md
new file mode 100644
index 0000000..13f2f31
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/README.md
@@ -0,0 +1,71 @@
+# Revoked Attestation Certificates
+
+This directory contains test certificates, keys, and CRLs for device attestation
+revocation testing scenarios. The test certificates and keys are intended to be
+used for testing purposes only and should not be used in production
+environments.
+
+## Direct CRL Signing
+
+In this approach, the CA directly signs the Certificate Revocation List (CRL).
+
+### PAA Signed CRL
+
+Process:
+
+1. PAA issues the PAI
+2. PAI issues the DAC
+3. PAA revokes the PAI and updates the CRL
+
+- PAA: `Chip-Test-PAA-FFF1-Cert.[pem|der]`
+- CRL: `Chip-Test-PAA-FFF1-CRL.[der|pem]`
+- PAI(revoked): `Chip-Test-PAI-FFF1-noPID-Revoked-Cert.[pem|der]`
+- DAC(signed by revoked PAI):
+ `Chip-Test-DAC-FFF1-8001-Signed-By-Revoked-PAI-Cert.[pem|der]`
+
+### PAI Signed CRL
+
+Process:
+
+1. PAI issues the 3 DACs
+2. PAI issues the DAC and updates the CRL
+
+- PAI: `Matter-Development-PAI-FFF1-noPID-Cert.[pem|der]`
+- CRL: `Matter-Development-PAI-FFF1-noPID-CRL.[pem|der]`
+- DACs(revoked):
+ - `Matter-Development-DAC-FFF1-8001-Revoked-01-Cert.[pem|der]`
+ - `Matter-Development-DAC-FFF1-8002-Revoked-02-Cert.[pem|der]`
+ - `Matter-Development-DAC-FFF1-8003-Revoked-03-Cert.[pem|der]`
+
+## Indirect CRL Signing (delegated CRL signing)
+
+In this approach, the CA delegates the CRL signing responsibility to a separate
+entity.
+
+Please take an example PKI .
+
+- PAA: `Chip-Test-PAA-FFF1-Cert.[pem|der]`
+- PAIs:
+ - `indirect/Chip-Test-PAI-FFF1-01-Cert.[pem|der]`
+ - DAC:
+ `indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-01-Cert.[pem|der]`
+ - `indirect/Chip-Test-PAI-FFF1-02-Cert.[pem|der]`
+ - DAC:
+ `indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-02-Cert.[pem|der]`
+ `indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-02-Cert.[pem|der]`
+ - `indirect/Chip-Test-PAI-FFF1-03-Cert.[pem|der]`
+- PAA Delegate: `indirect/Chip-Test-PAA-Delegate-FFF1-Cert.[pem|der]`
+- PAA Delegated CRL: `indirect/Chip-Test-PAA-FFF1-Delegated-CRL.[pem|der]`
+
+- PAI Delegate Key for all PAIs:
+ `indirect/Chip-Test-PAI-Delegate-FFF1-Key.pem`
+- PAI Delegates:
+
+ - `indirect/Chip-Test-PAI-Delegate-FFF1-01-Cert.[pem|der]`
+ - `indirect/Chip-Test-PAI-Delegate-FFF1-02-Cert.[pem|der]`
+ - `indirect/Chip-Test-PAI-Delegate-FFF1-03-Cert.[pem|der]`
+
+- PAI Delegated CRL: `indirect/Chip-Test-PAI-FFF1-Delegated-CRL.[pem|der]`
+- PAI Delegated CRL with Certificate Issuer CRL entry extension, only first
+ entry has the extension:
+ `indirect/Chip-Test-PAI-FFF1-Delegated-CRL-With-Cert-Issuer-Extension.[pem|der]`
diff --git a/credentials/test/revoked-attestation-certificates/dac-provider-test-vectors/indirect-revoked-dac-01-pai-03.json b/credentials/test/revoked-attestation-certificates/dac-provider-test-vectors/indirect-revoked-dac-01-pai-03.json
new file mode 100644
index 0000000..0477c4b
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/dac-provider-test-vectors/indirect-revoked-dac-01-pai-03.json
@@ -0,0 +1,9 @@
+{
+ "description": "Indirect revoked PAI 03: use this with revocation-sets/indirect-revocation-set.json",
+ "basic_info_pid": 32769,
+ "certification_declaration": "3081e706092a864886f70d010702a081d93081d6020103310d300b0609608648016503040201304306092a864886f70d010701a0360434152400012501f1ff3602050180182403162c0413435341303030303053574330303030302d303124050024060024070124080018317d307b020103801462fa823359acfaa9963e1cfa140addf504f37160300b0609608648016503040201300a06082a8648ce3d0403020447304502204dc6be89beeb5a49adec51ee7f0e6d1263ffc9e6238f2044385a5e0c86751b83022100ed902842f7a5784368d63eba6a2fb90086dd65a0ce3c283d86b915a3536afdac",
+ "pai_cert": "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",
+ "dac_cert": "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",
+ "dac_private_key": "af96786b55341f6355eb6179f6cdcc17ea96689bd823779f1f4f25333c4ba57c",
+ "dac_public_key": "04feefb8385aa2223f4e3f593bde72819c0009bd3d28a5350dc1f2dc0ead149ce3792395bf7f47ce08363f97e2c0da752755af302ee3233b95c9d672c33ab48844"
+}
diff --git a/credentials/test/revoked-attestation-certificates/dac-provider-test-vectors/indirect-revoked-dac-01.json b/credentials/test/revoked-attestation-certificates/dac-provider-test-vectors/indirect-revoked-dac-01.json
new file mode 100644
index 0000000..c26ef1b
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/dac-provider-test-vectors/indirect-revoked-dac-01.json
@@ -0,0 +1,9 @@
+{
+ "description": "Indirect revoked DAC 01: use this with revocation-sets/indirect-revocation-set.json",
+ "basic_info_pid": 32769,
+ "certification_declaration": "3081e706092a864886f70d010702a081d93081d6020103310d300b0609608648016503040201304306092a864886f70d010701a0360434152400012501f1ff3602050180182403162c0413435341303030303053574330303030302d303124050024060024070124080018317d307b020103801462fa823359acfaa9963e1cfa140addf504f37160300b0609608648016503040201300a06082a8648ce3d0403020447304502204dc6be89beeb5a49adec51ee7f0e6d1263ffc9e6238f2044385a5e0c86751b83022100ed902842f7a5784368d63eba6a2fb90086dd65a0ce3c283d86b915a3536afdac",
+ "pai_cert": "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",
+ "dac_cert": "308201e130820186a003020102021419b447515a34427602e1466282cdb278c9f4c017300a06082a8648ce3d0403023033311b301906035504030c124d617474657220546573742050414920303131143012060a2b0601040182a27c02010c04464646313020170d3235303130393130313031305a180f32313234313231363130313031305a3049311b301906035504030c124d617474657220546573742044414320303131143012060a2b0601040182a27c02010c044646463131143012060a2b0601040182a27c02020c04383030313059301306072a8648ce3d020106082a8648ce3d03010703420004dcca678f12dbd5ed49af84857a4d491dec8ca7c15db5e1f81057b039c91ad74d7e56b9d2ee00030e7657ca5e5655df5be1827e8e8c261de7145c4138c65da264a360305e300c0603551d130101ff04023000300e0603551d0f0101ff040403020780301d0603551d0e04160414d79ee10bb66d1bfe4b923fb94dba97c489ecc7a2301f0603551d230418301680149d7718f23bd91000c15308db3a63b9c1faea0d33300a06082a8648ce3d0403020349003046022100c19329d86ff4ececf610313435e0e8a9565968d865c4fb2c4990ebf74e65f0c8022100acad07ef5da7b93cb22a5d0d5facbc748321393bf99a8a006548deef57255581",
+ "dac_private_key": "548b29c248346e7d1caa0ec08d92887534e1b6fea08ab0db05f5145f08042d84",
+ "dac_public_key": "04dcca678f12dbd5ed49af84857a4d491dec8ca7c15db5e1f81057b039c91ad74d7e56b9d2ee00030e7657ca5e5655df5be1827e8e8c261de7145c4138c65da264"
+}
diff --git a/credentials/test/revoked-attestation-certificates/dac-provider-test-vectors/indirect-revoked-pai-03.json b/credentials/test/revoked-attestation-certificates/dac-provider-test-vectors/indirect-revoked-pai-03.json
new file mode 100644
index 0000000..a9577fa
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/dac-provider-test-vectors/indirect-revoked-pai-03.json
@@ -0,0 +1,9 @@
+{
+ "description": "Indirect revoked PAI 03: use this with revocation-sets/indirect-revocation-set.json",
+ "basic_info_pid": 32769,
+ "certification_declaration": "3081e706092a864886f70d010702a081d93081d6020103310d300b0609608648016503040201304306092a864886f70d010701a0360434152400012501f1ff3602050180182403162c0413435341303030303053574330303030302d303124050024060024070124080018317d307b020103801462fa823359acfaa9963e1cfa140addf504f37160300b0609608648016503040201300a06082a8648ce3d0403020447304502204dc6be89beeb5a49adec51ee7f0e6d1263ffc9e6238f2044385a5e0c86751b83022100ed902842f7a5784368d63eba6a2fb90086dd65a0ce3c283d86b915a3536afdac",
+ "pai_cert": "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",
+ "dac_cert": "308201ef30820195a0030201020208793c8198d316a908300a06082a8648ce3d0403023033311b301906035504030c124d617474657220546573742050414920303331143012060a2b0601040182a27c02010c04464646313020170d3235303332363030303030305a180f39393939313233313233353935395a30643136303406035504030c2d4d61747465722054657374205265766f6b656420444143205369676e6564206279205265766f6b65642050414931143012060a2b0601040182a27c02010c044646463131143012060a2b0601040182a27c02020c04383030313059301306072a8648ce3d020106082a8648ce3d030107034200042f9743049acba05185874fc5066d9cfd4acfb7fa802a363a829717b15ec8a793d254345972061cea295ac3a9de55c29ab9c50b4a164d0bda6b9092db7834f38ea360305e300c0603551d130101ff04023000300e0603551d0f0101ff040403020780301d0603551d0e041604141467526494ac4a7cf780d4a7fca265fb1d462e71301f0603551d23041830168014f97059a4f532b98b3b808592cd943a91004acd6d300a06082a8648ce3d040302034800304502202dee37ff31161b591454a1fb50f68d2a79685724de4dff78a6b7f503f3e8fbbd022100a9580a768759a910e7a8009541f625cc38a972923f3f59e485dc972594fc8ed3",
+ "dac_private_key": "f5b53bd2a9b085e2ff749c9b4bb69708c116c988b64a9b38e61d3b6bcb461e08",
+ "dac_public_key": "042f9743049acba05185874fc5066d9cfd4acfb7fa802a363a829717b15ec8a793d254345972061cea295ac3a9de55c29ab9c50b4a164d0bda6b9092db7834f38e"
+}
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-01-FFF1-8001-Signed-By-Test-PAI-03-Cert.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-01-FFF1-8001-Signed-By-Test-PAI-03-Cert.der
new file mode 100644
index 0000000..cdc8e22
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-01-FFF1-8001-Signed-By-Test-PAI-03-Cert.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-01-FFF1-8001-Signed-By-Test-PAI-03-Cert.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-01-FFF1-8001-Signed-By-Test-PAI-03-Cert.pem
new file mode 100644
index 0000000..894d657
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-01-FFF1-8001-Signed-By-Test-PAI-03-Cert.pem
@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-01-FFF1-8001-Signed-By-Test-PAI-03-Key.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-01-FFF1-8001-Signed-By-Test-PAI-03-Key.der
new file mode 100644
index 0000000..da81f5c
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-01-FFF1-8001-Signed-By-Test-PAI-03-Key.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-01-FFF1-8001-Signed-By-Test-PAI-03-Key.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-01-FFF1-8001-Signed-By-Test-PAI-03-Key.pem
new file mode 100644
index 0000000..301d314
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-01-FFF1-8001-Signed-By-Test-PAI-03-Key.pem
@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIK+WeGtVNB9jVethefbNzBfqlmib2CN3nx9PJTM8S6V8oAoGCCqGSM49
+AwEHoUQDQgAE/u+4OFqiIj9OP1k73nKBnAAJvT0opTUNwfLcDq0UnON5I5W/f0fO
+CDY/l+LA2nUnVa8wLuMjO5XJ1nLDOrSIRA==
+-----END EC PRIVATE KEY-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-02-Cert.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-02-Cert.der
new file mode 100644
index 0000000..907f1ef
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-02-Cert.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-02-Cert.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-02-Cert.pem
new file mode 100644
index 0000000..a717b35
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-02-Cert.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-02-Key.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-02-Key.der
new file mode 100644
index 0000000..76a8ea8
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-02-Key.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-02-Key.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-02-Key.pem
new file mode 100644
index 0000000..e931a15
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-02-Key.pem
@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIEuNQ2gKyYFw+cExQqNQ8SECC/wGof5C/RUI0nWlhX4KoAoGCCqGSM49
+AwEHoUQDQgAEd667XgsE292BJ3kdSG1hBxTj4U6bXqnsNcbZwyjrIf44F+sLPxcA
+ZkdQFBGM5cp29Z2Fykf6y62fco1sJb4eVA==
+-----END EC PRIVATE KEY-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-03-Cert.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-03-Cert.der
new file mode 100644
index 0000000..fd9a564
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-03-Cert.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-03-Cert.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-03-Cert.pem
new file mode 100644
index 0000000..585829e
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-03-Cert.pem
@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-03-Key.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-03-Key.der
new file mode 100644
index 0000000..4db36f1
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-03-Key.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-03-Key.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-03-Key.pem
new file mode 100644
index 0000000..83a45b5
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-02-FFF1-8001-Signed-By-Test-PAI-03-Key.pem
@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIPW1O9KpsIXi/3Scm0u2lwjBFsmItkqbOOYdO2vLRh4IoAoGCCqGSM49
+AwEHoUQDQgAEL5dDBJrLoFGFh0/FBm2c/UrPt/qAKjY6gpcXsV7Ip5PSVDRZcgYc
+6ilaw6neVcKaucULShZNC9prkJLbeDTzjg==
+-----END EC PRIVATE KEY-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-01-Cert.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-01-Cert.der
new file mode 100644
index 0000000..8f0687e
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-01-Cert.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-01-Cert.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-01-Cert.pem
new file mode 100644
index 0000000..4cfebd2
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-01-Cert.pem
@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-01-Key.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-01-Key.der
new file mode 100644
index 0000000..eb66d0f
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-01-Key.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-01-Key.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-01-Key.pem
new file mode 100644
index 0000000..3d9eb69
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-01-Key.pem
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgVIspwkg0bn0cqg7A
+jZKIdTThtv6girDbBfUUXwgELYShRANCAATcymePEtvV7UmvhIV6TUkd7IynwV21
+4fgQV7A5yRrXTX5WudLuAAMOdlfKXlZV31vhgn6OjCYd5xRcQTjGXaJk
+-----END PRIVATE KEY-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-02-Cert.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-02-Cert.der
new file mode 100644
index 0000000..2efba90
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-02-Cert.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-02-Cert.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-02-Cert.pem
new file mode 100644
index 0000000..4545fac
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-02-Cert.pem
@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-02-Key.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-02-Key.der
new file mode 100644
index 0000000..213b588
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-02-Key.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-02-Key.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-02-Key.pem
new file mode 100644
index 0000000..ae6ea1a
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-DAC-FFF1-8001-Signed-By-Test-PAI-02-Key.pem
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgyCCuSTvLyjeVCD9C
+A3H/tSPN60NXauirrlwvCnbmtrihRANCAAQKfW1TeObR02fXXZVKbwvMZnAfuBkL
+CLqnawH5f6MKBvwXjtROsuoxNxCRVDUs97N9q2HXPBFWPAdAk6Vr+Wnj
+-----END PRIVATE KEY-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-Delegate-FFF1-Cert.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-Delegate-FFF1-Cert.der
new file mode 100644
index 0000000..f27fbf9
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-Delegate-FFF1-Cert.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-Delegate-FFF1-Cert.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-Delegate-FFF1-Cert.pem
new file mode 100644
index 0000000..dce0116
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-Delegate-FFF1-Cert.pem
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-Delegate-FFF1-Key.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-Delegate-FFF1-Key.der
new file mode 100644
index 0000000..0959651
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-Delegate-FFF1-Key.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-Delegate-FFF1-Key.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-Delegate-FFF1-Key.pem
new file mode 100644
index 0000000..6e8a771
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-Delegate-FFF1-Key.pem
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgG3Okjyb42FnFKXvJ
+skmYJan2rDG+UkXGt4CPK/zQGo+hRANCAARCsDnuNX4Wnp9EU9zmeHXDexmgNoFU
+ilMD2QVDgfHAeVUvhf5xXjQlFi9+gXPlP84OTEHKmT8CKv2Qa0zP5ij0
+-----END PRIVATE KEY-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-FFF1-Delegated-CRL.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-FFF1-Delegated-CRL.der
new file mode 100644
index 0000000..b2dc99a
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-FFF1-Delegated-CRL.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-FFF1-Delegated-CRL.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-FFF1-Delegated-CRL.pem
new file mode 100644
index 0000000..c0b4bf4
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAA-FFF1-Delegated-CRL.pem
@@ -0,0 +1,9 @@
+-----BEGIN X509 CRL-----
+MIIBOzCB4gIBATAKBggqhkjOPQQDAjAXMRUwEwYDVQQDDAxQQUEgRGVsZWdhdGUX
+DTI1MDIyNDExMTM1MVoYDzIxMjUwMjI1MTExMzUxWjAnMCUCFFQzUAr3LVZt0MD9
+JxCrb4VivW+PFw0yNTAyMjQxMTEzNTFaoG8wbTAfBgNVHSMEGDAWgBStAdwLnWFr
+Psm/Dn6LBS/Mr3NP8jAKBgNVHRQEAwIBADA+BgNVHRwBAf8ENDAyoC2gK4YpaHR0
+cHM6Ly9leGFtcGxlLmNvbS9wYWEtZGVsZWdhdGVkLWNybC5kZXKEAf8wCgYIKoZI
+zj0EAwIDSAAwRQIgUJUKY9QMPp/S1wt2DgiO32ZpznNx3XUkYbeePOndPUYCIQD7
+f6ykx1sMlplBpzqAlwdzsBpM9xbGpX5v5wvyeh1qGQ==
+-----END X509 CRL-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-01-Cert.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-01-Cert.der
new file mode 100644
index 0000000..ebe5923
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-01-Cert.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-01-Cert.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-01-Cert.pem
new file mode 100644
index 0000000..4b36019
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-01-Cert.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-02-Cert.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-02-Cert.der
new file mode 100644
index 0000000..d5332e2
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-02-Cert.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-02-Cert.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-02-Cert.pem
new file mode 100644
index 0000000..6d2dfc3
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-02-Cert.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-03-Cert.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-03-Cert.der
new file mode 100644
index 0000000..163cf42
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-03-Cert.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-03-Cert.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-03-Cert.pem
new file mode 100644
index 0000000..8fedc65
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-03-Cert.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-Key.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-Key.der
new file mode 100644
index 0000000..2719c15
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-Key.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-Key.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-Key.pem
new file mode 100644
index 0000000..41a2736
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-Delegate-FFF1-Key.pem
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgtRUTkaGGtP0FWaeM
+coOcD7DJsLqteq+lm8eM0tsBBAGhRANCAASLWHWdibZHYHZRYxcy5dhFjrnZSEY8
+bvERcjA156eHpRcPVyWYnkcE58iAXfSN6qzwa8V6UCK2ZadsIpuvICuZ
+-----END PRIVATE KEY-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-01-Cert.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-01-Cert.der
new file mode 100644
index 0000000..dc3ccce
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-01-Cert.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-01-Cert.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-01-Cert.pem
new file mode 100644
index 0000000..8649bf7
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-01-Cert.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-01-Key.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-01-Key.der
new file mode 100644
index 0000000..50a08c8
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-01-Key.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-01-Key.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-01-Key.pem
new file mode 100644
index 0000000..5b6bb0f
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-01-Key.pem
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQg1JjyXece87dAD88h
+Grbs4BwYGQSQXyAe8QEgyvg619KhRANCAATasXw1CApN3ITXKUXVLJCq0toHIZa9
+8kqYYQOpAmEetElkCNgwVWb5oA88Q/92UcyaE0rWKfYPEXdFAErQbOIP
+-----END PRIVATE KEY-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-02-Cert.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-02-Cert.der
new file mode 100644
index 0000000..6c383a9
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-02-Cert.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-02-Cert.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-02-Cert.pem
new file mode 100644
index 0000000..f11007d
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-02-Cert.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-02-Key.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-02-Key.der
new file mode 100644
index 0000000..8296095
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-02-Key.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-02-Key.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-02-Key.pem
new file mode 100644
index 0000000..e3d5001
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-02-Key.pem
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgVKOcjbasKEI2KmNz
+zoHZwx4c8gqXVAs0fZ1EdnhmMG2hRANCAAT6coP2j2Yy1gG1XksIMum+VHQu6xra
+GCqv3I3DL4FkhW1/IowoMnwzDjGMsJeO8frHlhzHm82ubyMMnl+XL0k1
+-----END PRIVATE KEY-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-03-Cert.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-03-Cert.der
new file mode 100644
index 0000000..857c287
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-03-Cert.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-03-Cert.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-03-Cert.pem
new file mode 100644
index 0000000..d138197
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-03-Cert.pem
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-03-Key.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-03-Key.der
new file mode 100644
index 0000000..ed1f704
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-03-Key.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-03-Key.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-03-Key.pem
new file mode 100644
index 0000000..afc4985
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-03-Key.pem
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgRt0To+BwD5puu6v+
+86ljQlmSjciRKC/45n8rodczgFKhRANCAAS7GpgPOV0KRI8xXfgvggVksSc5jpwT
+lpFhle87ul+8JHRFzqpYnKg1ypkFixt8GyrvVdvsQzij2DgqEAx/GZ2t
+-----END PRIVATE KEY-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-Delegated-CRL-Only-First-Entry-With-Issuer-Ext.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-Delegated-CRL-Only-First-Entry-With-Issuer-Ext.der
new file mode 100644
index 0000000..c073616
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-Delegated-CRL-Only-First-Entry-With-Issuer-Ext.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-Delegated-CRL-Only-First-Entry-With-Issuer-Ext.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-Delegated-CRL-Only-First-Entry-With-Issuer-Ext.pem
new file mode 100644
index 0000000..379f19c
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-Delegated-CRL-Only-First-Entry-With-Issuer-Ext.pem
@@ -0,0 +1,11 @@
+-----BEGIN X509 CRL-----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+-----END X509 CRL-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-Delegated-CRL.der b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-Delegated-CRL.der
new file mode 100644
index 0000000..6af269b
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-Delegated-CRL.der
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-Delegated-CRL.pem b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-Delegated-CRL.pem
new file mode 100644
index 0000000..22ae6ce
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/Chip-Test-PAI-FFF1-Delegated-CRL.pem
@@ -0,0 +1,13 @@
+-----BEGIN X509 CRL-----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+-----END X509 CRL-----
diff --git a/credentials/test/revoked-attestation-certificates/indirect/indirect-crl.png b/credentials/test/revoked-attestation-certificates/indirect/indirect-crl.png
new file mode 100644
index 0000000..f87ae0b
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/indirect/indirect-crl.png
Binary files differ
diff --git a/credentials/test/revoked-attestation-certificates/revocation-sets/indirect-revocation-set.json b/credentials/test/revoked-attestation-certificates/revocation-sets/indirect-revocation-set.json
new file mode 100644
index 0000000..6d22cd9
--- /dev/null
+++ b/credentials/test/revoked-attestation-certificates/revocation-sets/indirect-revocation-set.json
@@ -0,0 +1,34 @@
+[
+ {
+ "type": "revocation_set",
+ "issuer_subject_key_id": "6AFD22771F511FECBF1641976710DCDC31A1717E",
+ "issuer_name": "MDAxGDAWBgNVBAMMD01hdHRlciBUZXN0IFBBQTEUMBIGCisGAQQBgqJ8AgEMBEZGRjE=",
+ "revoked_serial_numbers": ["5433500AF72D566DD0C0FD2710AB6F8562BD6F8F"],
+ "crl_signer_cert": "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",
+ "crl_signer_delegator": "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"
+ },
+ {
+ "type": "revocation_set",
+ "issuer_subject_key_id": "9D7718F23BD91000C15308DB3A63B9C1FAEA0D33",
+ "issuer_name": "MDMxGzAZBgNVBAMMEk1hdHRlciBUZXN0IFBBSSAwMTEUMBIGCisGAQQBgqJ8AgEMBEZGRjE=",
+ "revoked_serial_numbers": ["19B447515A34427602E1466282CDB278C9F4C017"],
+ "crl_signer_cert": "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",
+ "crl_signer_delegator": "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"
+ },
+ {
+ "type": "revocation_set",
+ "issuer_subject_key_id": "80AD8BDA9C39871ED7FE7DC3A9359C963F6CC270",
+ "issuer_name": "MDMxGzAZBgNVBAMMEk1hdHRlciBUZXN0IFBBSSAwMjEUMBIGCisGAQQBgqJ8AgEMBEZGRjE=",
+ "revoked_serial_numbers": ["3B29ED05E1CCED01DD0296A24134D04E05B890A6"],
+ "crl_signer_cert": "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",
+ "crl_signer_delegator": "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"
+ },
+ {
+ "type": "revocation_set",
+ "issuer_subject_key_id": "F97059A4F532B98B3B808592CD943A91004ACD6D",
+ "issuer_name": "MDMxGzAZBgNVBAMMEk1hdHRlciBUZXN0IFBBSSAwMzEUMBIGCisGAQQBgqJ8AgEMBEZGRjE=",
+ "revoked_serial_numbers": ["724F8C5827A7D0D0"],
+ "crl_signer_cert": "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",
+ "crl_signer_delegator": "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"
+ }
+]
