/* PKIX1 Templates in TTCN-3
 *
 * Author: Philipp Maier <pmaier@sysmocom.de> / sysmocom - s.f.m.c. GmbH
 *
 * Released under the terms of GNU General Public License, Version 2 or
 * (at your option) any later version.
 *
 * SPDX-License-Identifier: GPL-2.0-or-later
 */

module PKIX1Explicit88_Templates {

import from PKIX1Explicit88_Types all;
import from PKIX1Explicit88 all;
import from PKIX1Implicit88 all;

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/CertificateIssuer/CERT_CI_ECDSA_NIST.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b8:74:f3:ab:fa:6c:44:d3
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Feb  1 15:39:42 2017 GMT
            Not After : Feb  1 15:39:42 2052 GMT
        Subject: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:94:06:57:a6:73:dc:28:8f:89:d5:2e:a8:a4:77:
                    04:99:27:91:f9:c3:4b:00:36:e6:33:e2:d0:cb:a9:
                    45:4d:65:db:32:eb:17:98:17:99:d2:f2:43:88:ee:
                    2b:95:c1:09:45:46:c9:79:01:ce:ae:ba:96:50:91:
                    9a:2e:20:d2:29
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name:
                Registered ID:2.999.1
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:46:02:21:00:91:f2:51:c9:71:53:b9:cf:85:37:9a:74:8b:
         57:2a:49:68:52:45:56:c4:7f:33:eb:69:7b:55:91:2c:c0:f2:
         d2:02:21:00:dc:e4:9e:73:f3:49:ec:d0:59:10:ef:9d:f6:b6:
         9a:86:7a:bf:38:9d:c8:6b:84:11:b4:df:e1:96:91:50:f5:f9
*/
const octetstring cert_ci_nist :=
'30820256308201fba003020102020900b874f3abfa6c44d3300a06082a86
48ce3d04030230493115301306035504030c0c47534d4120546573742043
493111300f060355040b0c0854455354434552543110300e060355040a0c
0752535054455354310b30090603550406130249543020170d3137303230
313135333934325a180f32303532303230313135333934325a3049311530
1306035504030c0c47534d4120546573742043493111300f060355040b0c
0854455354434552543110300e060355040a0c0752535054455354310b30
090603550406130249543059301306072a8648ce3d020106082a8648ce3d
03010703420004940657a673dc288f89d52ea8a47704992791f9c34b0036
e633e2d0cba9454d65db32eb17981799d2f24388ee2b95c1094546c97901
ceaeba9650919a2e20d229a381c93081c6301d0603551d0e04160414f541
72bdf98a95d65cbeb88a38a1c11d800a85c3300f0603551d130101ff0405
30030101ff30170603551d200101ff040d300b3009060767811201020100
300e0603551d0f0101ff040403020106300e0603551d1104073005880388
3701305b0603551d1f045430523027a025a0238621687474703a2f2f6369
2e746573742e67736d612e636f6d2f43524c2d412e63726c3027a025a023
8621687474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d
422e63726c300a06082a8648ce3d040302034900304602210091f251c971
53b9cf85379a748b572a4968524556c47f33eb697b55912cc0f2d2022100
dce49e73f349ecd05910ef9df6b69a867abf389dc86b8411b4dfe1969150
f5f9'O
function f_ts_cert_ci_nist() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_ci_nist);
	 return cert_decoded;
}
template (value) Certificate ts_cert_ci_nist := f_ts_cert_ci_nist();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/CertificateIssuer/CERT_CI_ECDSA_BRP.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b8:74:f3:ab:fa:6c:44:d3
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Apr 19 10:34:38 2017 GMT
            Not After : Apr 18 10:34:38 2052 GMT
        Subject: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:27:87:b4:d5:6e:d8:24:a9:e6:be:04:e1:88:7f:
                    6b:98:ba:fe:b8:c7:63:f5:28:37:f7:01:13:e9:36:
                    4e:dd:be:13:9b:c0:c7:de:7e:16:8f:1e:5c:d0:c1:
                    85:34:fc:50:64:e6:4f:68:6d:c5:33:27:ca:7f:1d:
                    ce:a8:5a:29:94
                ASN1 OID: brainpoolP256r1
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name:
                Registered ID:2.999.1
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:44:02:20:06:c6:c3:9f:5a:b9:71:5d:72:c5:65:dc:f5:ff:
         3b:fe:f3:fb:70:ef:0a:e3:3a:07:36:66:91:35:86:d0:ef:92:
         02:20:16:b2:44:eb:46:9f:2a:2f:58:6b:c1:c3:20:b4:b6:43:
         1b:8f:74:d9:41:f7:f1:83:2b:43:25:52:b1:61:df:a2
*/
const octetstring cert_ci_brp :=
'30820255308201fca003020102020900b874f3abfa6c44d3300a06082a86
48ce3d04030230493115301306035504030c0c47534d4120546573742043
493111300f060355040b0c0854455354434552543110300e060355040a0c
0752535054455354310b30090603550406130249543020170d3137303431
393130333433385a180f32303532303431383130333433385a3049311530
1306035504030c0c47534d4120546573742043493111300f060355040b0c
0854455354434552543110300e060355040a0c0752535054455354310b30
09060355040613024954305a301406072a8648ce3d020106092b24030302
08010107034200042787b4d56ed824a9e6be04e1887f6b98bafeb8c763f5
2837f70113e9364eddbe139bc0c7de7e168f1e5cd0c18534fc5064e64f68
6dc53327ca7f1dcea85a2994a381c93081c6301d0603551d0e04160414c0
bc70ba36929d43b467ff57570530e57ab8fcd8300f0603551d130101ff04
0530030101ff30170603551d200101ff040d300b30090607678112010201
00300e0603551d0f0101ff040403020106300e0603551d11040730058803
883701305b0603551d1f045430523027a025a0238621687474703a2f2f63
692e746573742e67736d612e636f6d2f43524c2d412e63726c3027a025a0
238621687474703a2f2f63692e746573742e67736d612e636f6d2f43524c
2d422e63726c300a06082a8648ce3d0403020347003044022006c6c39f5a
b9715d72c565dcf5ff3bfef3fb70ef0ae33a073666913586d0ef92022016
b244eb469f2a2f586bc1c320b4b6431b8f74d941f7f1832b432552b161df
a2'O
function f_ts_cert_ci_brp() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_ci_brp);
	 return cert_decoded;
}
template (value) Certificate ts_cert_ci_brp := f_ts_cert_ci_brp();


/* Test certificate:
SGP.26_v1.2_files/Valid test cases/eUICC/CERT_EUICC_ECDSA_NIST.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:00:00:00:00:00:00:00:01
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = DE, O = RSP Test EUM, CN = EUM Test
        Validity
            Not Before: Jan  9 14:39:03 2017 GMT
            Not After : Nov  2 14:39:03 7492 GMT
        Subject: C = DE, O = RSP Test EUM, serialNumber = 89049032123451234512345678901235, CN = Test eUICC
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:6d:b3:f5:3a:dc:87:dc:2f:f1:0c:7b:fc:d8:7a:
                    d1:3a:e9:70:09:af:a0:65:a6:75:7e:e5:71:b3:f2:
                    eb:b1:8f:46:c1:d6:8f:3e:de:b0:e7:4b:2e:5d:54:
                    20:51:e7:d2:7f:50:95:20:28:60:5a:fd:ef:79:fe:
                    9f:ff:d0:39:59
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:DD:3D:A2:4D:35:0C:1C:C5:D0:AF:09:65:F4:0E:C3:4C:5E:E4:09:F1

            X509v3 Subject Key Identifier:
                A5:24:76:AF:5D:50:AA:37:64:37:CC:B1:DA:21:72:EF:45:F4:84:F0
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.1

    Signature Algorithm: ecdsa-with-SHA256
         30:44:02:20:5e:da:e9:e3:b9:27:8a:36:12:65:dc:bd:13:a3:
         bf:48:d7:ae:c4:3d:29:05:12:5b:fa:ca:2f:4c:f3:a7:e6:54:
         02:20:08:9f:95:6b:b9:89:59:65:77:ec:98:6d:f7:af:66:f2:
         a4:46:25:f3:85:77:4c:56:65:07:f6:f2:cd:72:e0:2c
*/
const octetstring cert_euicc_nist :=
'308201fe308201a5a0030201020209020000000000000001300a06082a86
48ce3d0403023037310b300906035504061302444531153013060355040a
0c0c52535020546573742045554d3111300f06035504030c0845554d2054
6573743020170d3137303130393134333930335a180f3734393231313032
3134333930335a3064310b30090603550406130244453115301306035504
0a0c0c52535020546573742045554d312930270603550405132038393034
393033323132333435313233343531323334353637383930313233353113
301106035504030c0a546573742065554943433059301306072a8648ce3d
020106082a8648ce3d030107034200046db3f53adc87dc2ff10c7bfcd87a
d13ae97009afa065a6757ee571b3f2ebb18f46c1d68f3edeb0e74b2e5d54
2051e7d27f50952028605afdef79fe9fffd03959a36b3069301f0603551d
23041830168014dd3da24d350c1cc5d0af0965f40ec34c5ee409f1301d06
03551d0e04160414a52476af5d50aa376437ccb1da2172ef45f484f0300e
0603551d0f0101ff04040302078030170603551d200101ff040d300b3009
060767811201020101300a06082a8648ce3d040302034700304402205eda
e9e3b9278a361265dcbd13a3bf48d7aec43d2905125bfaca2f4cf3a7e654
0220089f956bb989596577ec986df7af66f2a44625f385774c566507f6f2
cd72e02c'O;
function f_ts_cert_euicc_nist() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_euicc_nist);
	 return cert_decoded;
}
template (value) Certificate ts_cert_euicc_nist := f_ts_cert_euicc_nist();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/eUICC/CERT_EUICC_ECDSA_BRP.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:00:00:00:00:00:00:00:01
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = DE, O = RSP Test EUM, CN = EUM Test
        Validity
            Not Before: Apr 20 12:07:50 2017 GMT
            Not After : Feb 11 12:07:50 7493 GMT
        Subject: C = DE, O = RSP Test EUM, serialNumber = 89049032123451234512345678901235, CN = Test eUICC
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:3e:59:0c:38:a9:c2:56:31:5e:cf:f3:29:14:16:
                    dd:33:54:09:a6:66:fd:41:b3:b5:1e:5e:51:14:f3:
                    43:ab:f0:a2:67:74:c6:c2:6c:48:75:3a:fe:28:36:
                    43:22:7b:b6:60:8c:d2:61:cc:97:2d:37:4a:47:91:
                    24:eb:f2:77:22
                ASN1 OID: brainpoolP256r1
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:6F:A1:E5:21:73:63:A8:22:BD:ED:98:8A:1A:0D:0F:F5:D7:62:0D:B7

            X509v3 Subject Key Identifier:
                C8:A6:4F:34:3B:85:B7:B0:57:8D:C5:7F:8F:13:58:6D:C8:04:ED:84
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.1

    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:20:00:b4:f8:6f:2e:a1:4c:cc:04:66:51:99:88:4c:
         ad:75:ca:dd:c3:36:79:77:2f:ff:d4:db:cf:1b:d2:a8:e4:1b:
         02:21:00:8b:4d:40:a2:d9:bd:3a:53:c6:80:bd:c8:a3:08:c3:
         fb:dd:fe:e7:c6:6a:18:b4:dc:dd:03:77:0f:ff:aa:49:82
*/
const octetstring cert_euicc_brp :=
'30820200308201a6a0030201020209020000000000000001300a06082a86
48ce3d0403023037310b300906035504061302444531153013060355040a
0c0c52535020546573742045554d3111300f06035504030c0845554d2054
6573743020170d3137303432303132303735305a180f3734393330323131
3132303735305a3064310b30090603550406130244453115301306035504
0a0c0c52535020546573742045554d312930270603550405132038393034
393033323132333435313233343531323334353637383930313233353113
301106035504030c0a54657374206555494343305a301406072a8648ce3d
020106092b2403030208010107034200043e590c38a9c256315ecff32914
16dd335409a666fd41b3b51e5e5114f343abf0a26774c6c26c48753afe28
3643227bb6608cd261cc972d374a479124ebf27722a36b3069301f060355
1d230418301680146fa1e5217363a822bded988a1a0d0ff5d7620db7301d
0603551d0e04160414c8a64f343b85b7b0578dc57f8f13586dc804ed8430
0e0603551d0f0101ff04040302078030170603551d200101ff040d300b30
09060767811201020101300a06082a8648ce3d0403020348003045022000
b4f86f2ea14ccc04665199884cad75caddc33679772fffd4dbcf1bd2a8e4
1b0221008b4d40a2d9bd3a53c680bdc8a308c3fbddfee7c66a18b4dcdd03
770fffaa4982'O;
function f_ts_cert_euicc_brp() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_euicc_brp);
	 return cert_decoded;
}
template (value) Certificate ts_cert_euicc_brp := f_ts_cert_euicc_brp();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/EUM/CERT_EUM_ECDSA_NIST.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305419896 (0x12345678)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Jan 19 18:10:30 2017 GMT
            Not After : Jan 19 18:10:30 2051 GMT
        Subject: C = DE, O = RSP Test EUM, CN = EUM Test
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:13:30:d5:92:56:ac:0c:b5:0b:d9:28:d0:f4:c6:
                    80:07:c4:85:fe:3f:42:98:8a:d3:ee:38:75:ae:33:
                    f4:98:3a:b2:3b:4d:d4:c3:13:40:d6:76:dd:8e:11:
                    f9:c5:cb:a1:b1:1e:b6:94:ee:d0:99:4d:b5:29:28:
                    5e:63:2c:89:06
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3

            X509v3 Subject Key Identifier:
                DD:3D:A2:4D:35:0C:1C:C5:D0:AF:09:65:F4:0E:C3:4C:5E:E4:09:F1
            X509v3 Key Usage: critical
                Certificate Sign
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.2

            X509v3 Subject Alternative Name:
                Registered ID:2.999.5
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

            X509v3 Name Constraints: critical
                Permitted:
                  DirName:O = RSP Test EUM, serialNumber = 89049032

    Signature Algorithm: ecdsa-with-SHA256
         30:46:02:21:00:8c:4d:4b:26:40:4e:a5:dd:ea:65:eb:b4:3c:
         18:db:ab:12:cb:90:97:de:b7:7f:0b:a1:57:e3:8c:7b:18:b4:
         ee:02:21:00:d1:8d:9c:f3:a1:34:87:ee:65:ca:6b:48:f8:c1:
         ad:c0:2e:7a:7d:89:f1:74:b5:ae:2b:5e:1d:82:0a:9b:23:23
*/
const octetstring cert_eum_nist :=
'3082027c30820221a003020102020412345678300a06082a8648ce3d0403
0230493115301306035504030c0c47534d4120546573742043493111300f
060355040b0c0854455354434552543110300e060355040a0c0752535054
455354310b30090603550406130249543020170d31373031313931383130
33305a180f32303531303131393138313033305a3037310b300906035504
061302444531153013060355040a0c0c52535020546573742045554d3111
300f06035504030c0845554d20546573743059301306072a8648ce3d0201
06082a8648ce3d030107034200041330d59256ac0cb50bd928d0f4c68007
c485fe3f42988ad3ee3875ae33f4983ab23b4dd4c31340d676dd8e11f9c5
cba1b11eb694eed0994db529285e632c8906a382010530820101301f0603
551d23041830168014f54172bdf98a95d65cbeb88a38a1c11d800a85c330
1d0603551d0e04160414dd3da24d350c1cc5d0af0965f40ec34c5ee409f1
300e0603551d0f0101ff04040302020430170603551d200101ff040d300b
3009060767811201020102300e0603551d11040730058803883705301206
03551d130101ff040830060101ff02010030320603551d1f042b30293027
a025a0238621687474703a2f2f63692e746573742e67736d612e636f6d2f
43524c2d422e63726c303e0603551d1e0101ff04343032a030302ea42c30
2a31153013060355040a0c0c52535020546573742045554d3111300f0603
55040513083839303439303332300a06082a8648ce3d0403020349003046
0221008c4d4b26404ea5ddea65ebb43c18dbab12cb9097deb77f0ba157e3
8c7b18b4ee022100d18d9cf3a13487ee65ca6b48f8c1adc02e7a7d89f174
b5ae2b5e1d820a9b2323'O
function f_ts_cert_eum_nist() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_eum_nist);
	 return cert_decoded;
}
template (value) Certificate ts_cert_eum_nist := f_ts_cert_eum_nist();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/EUM/CERT_EUM_ECDSA_BRP.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305419896 (0x12345678)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Apr 20 10:23:31 2017 GMT
            Not After : Apr 20 10:23:31 2051 GMT
        Subject: C = DE, O = RSP Test EUM, CN = EUM Test
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:a2:e5:2a:32:df:e8:99:65:71:c5:3a:f5:32:8e:
                    f6:82:09:3f:c1:d0:5f:52:65:2f:6b:71:1c:24:38:
                    21:f7:f1:6b:0c:ec:8d:21:9b:23:d3:f9:90:f4:34:
                    d0:b9:0d:42:71:6c:02:e0:93:05:26:44:63:f6:11:
                    e6:50:c3:7f:f7
                ASN1 OID: brainpoolP256r1
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8

            X509v3 Subject Key Identifier:
                6F:A1:E5:21:73:63:A8:22:BD:ED:98:8A:1A:0D:0F:F5:D7:62:0D:B7
            X509v3 Key Usage: critical
                Certificate Sign
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.2

            X509v3 Subject Alternative Name:
                Registered ID:2.999.5
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

            X509v3 Name Constraints: critical
                Permitted:
                  DirName:O = RSP Test EUM, serialNumber = 89049032

    Signature Algorithm: ecdsa-with-SHA256
         30:44:02:20:2b:46:5c:c1:ac:87:8d:46:a8:7d:4a:70:72:ca:
         2c:f9:1c:27:10:87:02:19:ae:80:29:c6:96:bc:39:f0:5c:dc:
         02:20:40:cc:35:b4:9c:3b:30:ee:39:b0:5d:da:8f:6d:0d:a6:
         43:ab:8e:bd:6a:05:23:91:cf:46:c9:ee:4c:95:3b:19
*/
const octetstring cert_eum_brp :=
'3082027b30820222a003020102020412345678300a06082a8648ce3d0403
0230493115301306035504030c0c47534d4120546573742043493111300f
060355040b0c0854455354434552543110300e060355040a0c0752535054
455354310b30090603550406130249543020170d31373034323031303233
33315a180f32303531303432303130323333315a3037310b300906035504
061302444531153013060355040a0c0c52535020546573742045554d3111
300f06035504030c0845554d2054657374305a301406072a8648ce3d0201
06092b240303020801010703420004a2e52a32dfe8996571c53af5328ef6
82093fc1d05f52652f6b711c243821f7f16b0cec8d219b23d3f990f434d0
b90d42716c02e09305264463f611e650c37ff7a382010530820101301f06
03551d23041830168014c0bc70ba36929d43b467ff57570530e57ab8fcd8
301d0603551d0e041604146fa1e5217363a822bded988a1a0d0ff5d7620d
b7300e0603551d0f0101ff04040302020430170603551d200101ff040d30
0b3009060767811201020102300e0603551d110407300588038837053012
0603551d130101ff040830060101ff02010030320603551d1f042b302930
27a025a0238621687474703a2f2f63692e746573742e67736d612e636f6d
2f43524c2d422e63726c303e0603551d1e0101ff04343032a030302ea42c
302a31153013060355040a0c0c52535020546573742045554d3111300f06
0355040513083839303439303332300a06082a8648ce3d04030203470030
4402202b465cc1ac878d46a87d4a7072ca2cf91c2710870219ae8029c696
bc39f05cdc022040cc35b49c3b30ee39b05dda8f6d0da643ab8ebd6a0523
91cf46c9ee4c953b19'O;
function f_ts_cert_eum_brp() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_eum_brp);
	 return cert_decoded;
}
template (value) Certificate ts_cert_eum_brp := f_ts_cert_eum_brp();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPauth/CERT_S_SM_DPauth_ECDSA_NIST.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Feb  1 13:38:56 2017 GMT
            Not After : Feb  1 13:38:56 2020 GMT
        Subject: O = ACME, CN = "TEST SM-DP+"
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:4d:fe:d4:f4:69:47:91:bf:16:95:ce:a0:30:7a:
                    35:b4:18:01:96:95:38:7b:b7:5b:7d:24:47:b6:b5:
                    20:9f:04:45:ae:4e:5e:52:1c:d1:38:88:d7:5f:e0:
                    7c:85:80:22:2a:e2:0d:ba:ac:1d:77:cd:76:30:49:
                    93:42:1b:d7:39
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3

            X509v3 Subject Key Identifier:
                BD:5A:82:CC:1A:96:60:21:18:BA:75:60:A1:FF:83:A7:8B:21:0B:E5
            X509v3 Subject Alternative Name:
                Registered ID:2.999.10
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.4

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:21:00:f1:cf:ef:41:e2:b8:a0:22:62:17:10:b9:6a:
         65:4f:ff:e4:85:d0:8c:20:e6:64:e8:5b:f2:d7:27:00:2a:07:
         38:02:20:69:25:bd:f7:bb:87:d0:c8:be:2b:78:a0:c5:9a:61:
         01:78:29:30:c2:fe:98:ad:2d:70:38:65:6a:02:14:a3:97
*/
const octetstring cert_s_sm_dpauth_nist :=
'30820237308201dda003020102020164300a06082a8648ce3d0403023049
3115301306035504030c0c47534d4120546573742043493111300f060355
040b0c0854455354434552543110300e060355040a0c0752535054455354
310b3009060355040613024954301e170d3137303230313133333835365a
170d3230303230313133333835365a3025310d300b060355040a0c044143
4d453114301206035504030c0b5445535420534d2d44502b305930130607
2a8648ce3d020106082a8648ce3d030107034200044dfed4f4694791bf16
95cea0307a35b418019695387bb75b7d2447b6b5209f0445ae4e5e521cd1
3888d75fe07c8580222ae20dbaac1d77cd76304993421bd739a381d93081
d6301f0603551d23041830168014f54172bdf98a95d65cbeb88a38a1c11d
800a85c3301d0603551d0e04160414bd5a82cc1a96602118ba7560a1ff83
a78b210be5300e0603551d1104073005880388370a300e0603551d0f0101
ff04040302078030170603551d200101ff040d300b300906076781120102
0104305b0603551d1f045430523027a025a0238621687474703a2f2f6369
2e746573742e67736d612e636f6d2f43524c2d412e63726c3027a025a023
8621687474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d
422e63726c300a06082a8648ce3d0403020348003045022100f1cfef41e2
b8a022621710b96a654fffe485d08c20e664e85bf2d727002a0738022069
25bdf7bb87d0c8be2b78a0c59a6101782930c2fe98ad2d7038656a0214a3
97'O;
function f_ts_cert_s_sm_dpauth_nist() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dpauth_nist);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dpauth_nist := f_ts_cert_s_sm_dpauth_nist();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPauth/CERT_S_SM_DPauth_ECDSA_BRP.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Apr 26 15:20:12 2017 GMT
            Not After : Apr 25 15:20:12 2020 GMT
        Subject: O = ACME, CN = "TEST SM-DP+"
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:25:5d:7d:af:00:ef:84:1d:76:fa:7a:63:d6:3e:
                    b3:fe:6c:9f:70:49:2d:38:19:23:f8:f8:bd:7b:24:
                    f3:c5:ad:16:8e:be:3b:09:dd:80:f2:9e:7f:fd:24:
                    a4:d1:be:74:7f:83:23:e4:72:92:83:96:dd:e9:e0:
                    15:1c:ea:ba:18
                ASN1 OID: brainpoolP256r1
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8

            X509v3 Subject Key Identifier:
                79:A4:BD:4D:78:FF:47:34:BC:60:45:CF:91:96:24:4A:1F:B8:4B:EB
            X509v3 Subject Alternative Name:
                Registered ID:2.999.10
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.4

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:20:30:45:fe:e3:ed:cc:6c:84:36:3d:d7:b8:6e:98:
         4b:dd:1c:94:78:cd:0f:2c:da:8e:4c:b9:63:13:f7:85:b2:db:
         02:21:00:81:29:01:29:4a:5f:c6:82:cf:fa:57:0f:8a:42:d5:
         59:b0:7c:ef:83:05:f7:d2:36:41:64:df:4d:f8:8c:a7:fa
*/
const octetstring cert_s_sm_dpauth_brp :=
'30820238308201dea003020102020164300a06082a8648ce3d0403023049
3115301306035504030c0c47534d4120546573742043493111300f060355
040b0c0854455354434552543110300e060355040a0c0752535054455354
310b3009060355040613024954301e170d3137303432363135323031325a
170d3230303432353135323031325a3025310d300b060355040a0c044143
4d453114301206035504030c0b5445535420534d2d44502b305a30140607
2a8648ce3d020106092b240303020801010703420004255d7daf00ef841d
76fa7a63d63eb3fe6c9f70492d381923f8f8bd7b24f3c5ad168ebe3b09dd
80f29e7ffd24a4d1be747f8323e472928396dde9e0151ceaba18a381d930
81d6301f0603551d23041830168014c0bc70ba36929d43b467ff57570530
e57ab8fcd8301d0603551d0e0416041479a4bd4d78ff4734bc6045cf9196
244a1fb84beb300e0603551d1104073005880388370a300e0603551d0f01
01ff04040302078030170603551d200101ff040d300b3009060767811201
020104305b0603551d1f045430523027a025a0238621687474703a2f2f63
692e746573742e67736d612e636f6d2f43524c2d412e63726c3027a025a0
238621687474703a2f2f63692e746573742e67736d612e636f6d2f43524c
2d422e63726c300a06082a8648ce3d040302034800304502203045fee3ed
cc6c84363dd7b86e984bdd1c9478cd0f2cda8e4cb96313f785b2db022100
812901294a5fc682cffa570f8a42d559b07cef8305f7d2364164df4df88c
a7fa'O;
function f_ts_cert_s_sm_dpauth_brp() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dpauth_brp);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dpauth_brp := f_ts_cert_s_sm_dpauth_brp();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPauth/CERT_S_SM_DP2auth_ECDSA_NIST.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Aug 21 14:19:48 2017 GMT
            Not After : Aug 20 14:19:48 2020 GMT
        Subject: O = ACME, CN = "TEST SM-DP+2"
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:2b:2e:9b:45:d3:51:c0:9a:f4:0e:91:43:83:a1:
                    90:38:47:f2:60:7d:e6:0e:f7:ab:25:c4:0e:03:f8:
                    db:b6:50:8e:14:57:50:8c:2b:e0:01:73:47:ec:fa:
                    1b:f9:f7:75:e7:d0:7e:80:5e:52:e1:98:8b:7b:58:
                    5a:71:11:ae:33
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3

            X509v3 Subject Key Identifier:
                95:9E:F7:E6:50:C1:BE:21:6A:39:19:74:27:6D:26:B8:A9:35:61:71
            X509v3 Subject Alternative Name:
                Registered ID:2.999.12
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.4

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:46:02:21:00:c0:a5:cd:d1:0f:25:29:a9:f1:86:6d:93:21:
         65:91:ce:7a:8a:29:54:6d:1f:aa:2f:99:c2:4e:a6:52:23:35:
         98:02:21:00:85:92:01:17:04:fe:ab:d5:a6:af:fc:40:10:96:
         39:99:08:3f:5b:3e:94:60:05:a3:f1:b0:cb:81:a6:6b:b9:3c
*/
const octetstring cert_s_sm_dp2auth_nist :=
'3082023a308201dfa003020102020200c8300a06082a8648ce3d04030230
493115301306035504030c0c47534d4120546573742043493111300f0603
55040b0c0854455354434552543110300e060355040a0c07525350544553
54310b3009060355040613024954301e170d313730383231313431393438
5a170d3230303832303134313934385a3026310d300b060355040a0c0441
434d453115301306035504030c0c5445535420534d2d44502b3230593013
06072a8648ce3d020106082a8648ce3d030107034200042b2e9b45d351c0
9af40e914383a1903847f2607de60ef7ab25c40e03f8dbb6508e1457508c
2be0017347ecfa1bf9f775e7d07e805e52e1988b7b585a7111ae33a381d9
3081d6301f0603551d23041830168014f54172bdf98a95d65cbeb88a38a1
c11d800a85c3301d0603551d0e04160414959ef7e650c1be216a39197427
6d26b8a9356171300e0603551d1104073005880388370c300e0603551d0f
0101ff04040302078030170603551d200101ff040d300b30090607678112
01020104305b0603551d1f045430523027a025a0238621687474703a2f2f
63692e746573742e67736d612e636f6d2f43524c2d412e63726c3027a025
a0238621687474703a2f2f63692e746573742e67736d612e636f6d2f4352
4c2d422e63726c300a06082a8648ce3d0403020349003046022100c0a5cd
d10f2529a9f1866d93216591ce7a8a29546d1faa2f99c24ea65223359802
21008592011704feabd5a6affc4010963999083f5b3e946005a3f1b0cb81
a66bb93c'O;
function f_ts_cert_s_sm_dp2auth_nist() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dp2auth_nist);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp2auth_nist := f_ts_cert_s_sm_dp2auth_nist();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPauth/CERT_S_SM_DP2auth_ECDSA_BRP.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Aug 21 14:27:16 2017 GMT
            Not After : Aug 20 14:27:16 2020 GMT
        Subject: O = ACME, CN = "TEST SM-DP+2"
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:2e:ee:07:c9:6d:00:5b:e5:19:5f:79:ad:1d:ad:
                    cd:1d:37:8c:a3:09:5e:44:f7:2e:ea:41:0f:08:c7:
                    56:12:2c:90:63:c9:65:b7:fc:85:29:c0:ca:4e:9b:
                    4f:65:96:9c:28:3c:65:63:64:57:87:71:18:f6:d1:
                    17:2d:6a:23:65
                ASN1 OID: brainpoolP256r1
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8

            X509v3 Subject Key Identifier:
                D7:0E:FD:05:7B:AC:1F:7C:55:EA:5D:8C:26:BE:16:02:92:84:5B:AF
            X509v3 Subject Alternative Name:
                Registered ID:2.999.12
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.4

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:44:02:20:4b:32:a5:c9:ee:05:f2:9f:d4:4a:08:6f:f0:4a:
         10:9a:88:d6:e5:84:80:39:a5:16:ee:c7:8c:a4:ac:f0:c5:b3:
         02:20:52:9e:46:fa:10:9d:13:05:40:ba:d6:2a:46:fc:85:c3:
         95:b2:c4:cb:9e:8c:f1:50:79:d4:9a:9d:a5:37:df:e0
*/
const octetstring cert_s_sm_dp2auth_brp :=
'30820239308201e0a003020102020200c8300a06082a8648ce3d04030230
493115301306035504030c0c47534d4120546573742043493111300f0603
55040b0c0854455354434552543110300e060355040a0c07525350544553
54310b3009060355040613024954301e170d313730383231313432373136
5a170d3230303832303134323731365a3026310d300b060355040a0c0441
434d453115301306035504030c0c5445535420534d2d44502b32305a3014
06072a8648ce3d020106092b2403030208010107034200042eee07c96d00
5be5195f79ad1dadcd1d378ca3095e44f72eea410f08c756122c9063c965
b7fc8529c0ca4e9b4f65969c283c65636457877118f6d1172d6a2365a381
d93081d6301f0603551d23041830168014c0bc70ba36929d43b467ff5757
0530e57ab8fcd8301d0603551d0e04160414d70efd057bac1f7c55ea5d8c
26be160292845baf300e0603551d1104073005880388370c300e0603551d
0f0101ff04040302078030170603551d200101ff040d300b300906076781
1201020104305b0603551d1f045430523027a025a0238621687474703a2f
2f63692e746573742e67736d612e636f6d2f43524c2d412e63726c3027a0
25a0238621687474703a2f2f63692e746573742e67736d612e636f6d2f43
524c2d422e63726c300a06082a8648ce3d040302034700304402204b32a5
c9ee05f29fd44a086ff04a109a88d6e5848039a516eec78ca4acf0c5b302
20529e46fa109d130540bad62a46fc85c395b2c4cb9e8cf15079d49a9da5
37dfe0'O;
function f_ts_cert_s_sm_dp2auth_brp() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dp2auth_brp);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp2auth_brp := f_ts_cert_s_sm_dp2auth_brp();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPpb/CERT_S_SM_DPpb_ECDSA_NIST.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Feb  1 13:38:57 2017 GMT
            Not After : Feb  1 13:38:57 2020 GMT
        Subject: O = ACME, CN = "TEST SM-DP+"
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:10:4c:2a:e3:d0:2d:ef:9c:97:92:61:a7:c6:71:
                    00:76:b9:70:72:1d:09:55:a2:64:4a:e0:5f:ae:4b:
                    c2:31:4e:5d:c0:9f:6b:f0:11:80:26:16:53:42:e2:
                    12:31:87:75:e3:65:f3:b5:73:25:37:30:66:b9:90:
                    6e:0b:d1:38:8d
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3

            X509v3 Subject Key Identifier:
                E6:EA:F7:1E:E0:FB:94:30:EC:CD:1E:BB:42:1F:88:14:37:C1:32:63
            X509v3 Subject Alternative Name:
                Registered ID:2.999.10
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.5

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:43:02:1f:1d:c0:8e:8b:98:1f:4c:77:0c:e9:06:01:c5:2b:
         2a:28:e2:21:65:4b:d0:ba:a3:78:34:80:92:27:52:bf:f4:02:
         20:64:23:83:9e:85:e8:93:6f:7a:18:b2:b4:b8:5f:99:8c:4f:
         38:a8:db:9b:88:8c:23:e2:99:7c:9e:a5:af:6e:94
*/
const octetstring cert_s_sm_dppb_nist :=
'30820235308201dda003020102020165300a06082a8648ce3d0403023049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'O;
function f_ts_cert_s_sm_dppb_nist() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dppb_nist);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dppb_nist := f_ts_cert_s_sm_dppb_nist();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPpb/CERT_S_SM_DPpb_ECDSA_BRP.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Apr 26 15:20:13 2017 GMT
            Not After : Apr 25 15:20:13 2020 GMT
        Subject: O = ACME, CN = "TEST SM-DP+"
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:89:32:53:ec:c9:4c:51:df:4f:ee:6e:0d:b0:95:
                    1c:fc:65:62:74:81:b5:41:8e:55:70:69:f4:87:fa:
                    a1:54:66:a5:cb:8e:10:cc:2b:38:09:9c:f2:a9:29:
                    f7:f8:2d:ac:06:51:26:b7:1d:06:40:96:1d:b7:f9:
                    1a:49:e9:56:12
                ASN1 OID: brainpoolP256r1
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8

            X509v3 Subject Key Identifier:
                A8:C6:8D:F4:49:EB:71:EC:72:3E:AC:13:2E:40:E4:B6:F5:46:44:FE
            X509v3 Subject Alternative Name:
                Registered ID:2.999.10
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.5

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:44:02:20:5f:33:63:c1:01:b4:db:d0:2a:61:3c:8a:ca:32:
         df:4f:2f:51:4c:21:73:e8:93:6e:9b:ff:af:02:a1:f5:e2:56:
         02:20:01:c0:99:36:19:43:29:65:fe:5a:87:a0:38:ae:91:bf:
         02:45:07:06:a3:2c:4b:13:07:af:4b:e8:ec:41:68:1d
*/
const octetstring cert_s_sm_dppb_brp :=
'30820237308201dea003020102020165300a06082a8648ce3d0403023049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'O;
function f_ts_cert_s_sm_dppb_brp() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dppb_brp);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dppb_brp := f_ts_cert_s_sm_dppb_brp();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPpb/CERT_S_SM_DP2pb_ECDSA_NIST.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Aug 21 14:23:52 2017 GMT
            Not After : Aug 20 14:23:52 2020 GMT
        Subject: O = ACME, CN = "TEST SM-DP+2"
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:3e:2d:75:a1:06:22:12:16:c2:ae:e8:fa:d5:84:
                    f7:79:63:3c:f9:44:68:1b:5e:c7:5a:96:65:3f:5f:
                    40:1c:47:6a:e3:9d:54:6c:03:2d:32:d0:07:0a:7b:
                    86:e5:dc:eb:aa:dd:f3:1c:a5:c2:76:6c:19:6b:d7:
                    9b:c2:1a:01:80
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3

            X509v3 Subject Key Identifier:
                20:A3:A8:30:E9:2E:E7:A4:68:C5:EB:27:BA:8D:F1:84:59:AD:FD:D7
            X509v3 Subject Alternative Name:
                Registered ID:2.999.12
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.5

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:20:17:81:a1:df:74:e8:c6:60:88:67:17:b7:6c:fd:
         ce:a0:2d:f7:b2:85:5a:5b:6c:5e:a9:cc:8d:ec:97:4c:e1:9b:
         02:21:00:ca:a8:9b:fb:af:26:13:02:1b:8f:7c:2c:63:59:44:
         b3:5b:14:38:c0:09:e6:81:dc:e6:7a:58:b3:97:b8:f4:c1
*/
const octetstring cert_s_sm_dp2pb_nist :=
'30820239308201dfa003020102020200c9300a06082a8648ce3d04030230
493115301306035504030c0c47534d4120546573742043493111300f0603
55040b0c0854455354434552543110300e060355040a0c07525350544553
54310b3009060355040613024954301e170d313730383231313432333532
5a170d3230303832303134323335325a3026310d300b060355040a0c0441
434d453115301306035504030c0c5445535420534d2d44502b3230593013
06072a8648ce3d020106082a8648ce3d030107034200043e2d75a1062212
16c2aee8fad584f779633cf944681b5ec75a96653f5f401c476ae39d546c
032d32d0070a7b86e5dcebaaddf31ca5c2766c196bd79bc21a0180a381d9
3081d6301f0603551d23041830168014f54172bdf98a95d65cbeb88a38a1
c11d800a85c3301d0603551d0e0416041420a3a830e92ee7a468c5eb27ba
8df18459adfdd7300e0603551d1104073005880388370c300e0603551d0f
0101ff04040302078030170603551d200101ff040d300b30090607678112
01020105305b0603551d1f045430523027a025a0238621687474703a2f2f
63692e746573742e67736d612e636f6d2f43524c2d412e63726c3027a025
a0238621687474703a2f2f63692e746573742e67736d612e636f6d2f4352
4c2d422e63726c300a06082a8648ce3d040302034800304502201781a1df
74e8c660886717b76cfdcea02df7b2855a5b6c5ea9cc8dec974ce19b0221
00caa89bfbaf2613021b8f7c2c635944b35b1438c009e681dce67a58b397
b8f4c1'O
function f_ts_cert_s_sm_dp2pb_nist() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dp2pb_nist);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp2pb_nist := f_ts_cert_s_sm_dp2pb_nist();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPpb/CERT_S_SM_DP2pb_ECDSA_BRP.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Aug 21 14:31:07 2017 GMT
            Not After : Aug 20 14:31:07 2020 GMT
        Subject: O = ACME, CN = "TEST SM-DP+2"
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:73:61:85:5e:59:02:64:b2:52:c7:1a:60:62:a0:
                    21:e2:7b:46:f7:60:b8:13:82:06:a7:f7:44:20:ef:
                    8b:c5:5a:8b:98:8d:16:58:f9:d7:0d:3a:2d:84:80:
                    aa:df:64:e6:2c:4d:71:27:de:5a:0a:2b:91:7a:94:
                    3f:44:74:aa:dd
                ASN1 OID: brainpoolP256r1
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8

            X509v3 Subject Key Identifier:
                31:03:8A:55:B6:BE:CF:6C:EA:59:DE:2F:DA:14:F4:32:7F:B8:B6:A9
            X509v3 Subject Alternative Name:
                Registered ID:2.999.12
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.5

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:44:02:20:0b:2f:51:21:0c:e1:39:f1:80:69:54:a2:74:7b:
         18:bd:7b:39:0b:25:0c:4a:12:ae:8d:d2:1e:43:42:0e:3c:73:
         02:20:7b:e1:51:0d:c0:52:93:9e:c1:77:4e:3a:cd:d8:78:8d:
         e9:47:49:fd:81:9a:28:6c:8d:c6:81:3a:45:64:9b:b4
*/
const octetstring cert_s_sm_dp2pb_brp :=
'30820239308201e0a003020102020200c9300a06082a8648ce3d04030230
493115301306035504030c0c47534d4120546573742043493111300f0603
55040b0c0854455354434552543110300e060355040a0c07525350544553
54310b3009060355040613024954301e170d313730383231313433313037
5a170d3230303832303134333130375a3026310d300b060355040a0c0441
434d453115301306035504030c0c5445535420534d2d44502b32305a3014
06072a8648ce3d020106092b2403030208010107034200047361855e5902
64b252c71a6062a021e27b46f760b8138206a7f74420ef8bc55a8b988d16
58f9d70d3a2d8480aadf64e62c4d7127de5a0a2b917a943f4474aadda381
d93081d6301f0603551d23041830168014c0bc70ba36929d43b467ff5757
0530e57ab8fcd8301d0603551d0e0416041431038a55b6becf6cea59de2f
da14f4327fb8b6a9300e0603551d1104073005880388370c300e0603551d
0f0101ff04040302078030170603551d200101ff040d300b300906076781
1201020105305b0603551d1f045430523027a025a0238621687474703a2f
2f63692e746573742e67736d612e636f6d2f43524c2d412e63726c3027a0
25a0238621687474703a2f2f63692e746573742e67736d612e636f6d2f43
524c2d422e63726c300a06082a8648ce3d040302034700304402200b2f51
210ce139f1806954a2747b18bd7b390b250c4a12ae8dd21e43420e3c7302
207be1510dc052939ec1774e3acdd8788de94749fd819a286c8dc6813a45
649bb4'O;
function f_ts_cert_s_sm_dp2pb_brp() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dp2pb_brp);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp2pb_brp := f_ts_cert_s_sm_dp2pb_brp();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPtls/CERT_S_SM_DP2_TLS.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Sep  1 11:26:44 2017 GMT
            Not After : Aug 31 11:26:44 2020 GMT
        Subject: O = ACME, CN = testsmdpplus2.gsma.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:1a:d9:00:0c:75:4e:37:61:3e:75:0f:b7:bf:73:
                    42:fe:d5:0b:c0:72:52:ed:84:65:6b:45:d6:f7:08:
                    78:95:08:a9:ff:e0:96:17:23:af:11:ef:c8:dd:a6:
                    9a:69:f2:b5:18:8b:b3:12:13:82:0a:b2:dd:1e:f5:
                    80:2e:8f:d4:b6
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: critical
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: 2.23.146.1.2.1.3

            X509v3 Subject Key Identifier:
                9F:5F:6B:0C:E7:00:32:25:2D:CE:10:D3:49:A6:55:18:1B:85:3E:CE
            X509v3 Authority Key Identifier:
                keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3

            X509v3 Subject Alternative Name:
                DNS:testsmdpplus2.gsma.com, Registered ID:2.999.12
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:21:00:94:1a:fc:27:73:40:ce:05:d5:d4:1b:49:90:
         d9:c5:d7:02:6c:7e:a7:3b:7a:07:0f:30:ad:69:b1:78:a3:e9:
         65:02:20:28:59:fb:74:a0:6f:d1:36:c3:9f:94:14:16:23:e3:
         b5:88:ae:ef:d8:42:6d:2c:0b:df:51:3d:fe:58:7a:ac:31
*/
const octetstring cert_s_sm_dp2_tls :=
'3082027c30820222a00302010202020099300a06082a8648ce3d04030230
493115301306035504030c0c47534d4120546573742043493111300f0603
55040b0c0854455354434552543110300e060355040a0c07525350544553
54310b3009060355040613024954301e170d313730393031313132363434
5a170d3230303833313131323634345a3030310d300b060355040a0c0441
434d45311f301d06035504030c1674657374736d6470706c7573322e6773
6d612e636f6d3059301306072a8648ce3d020106082a8648ce3d03010703
4200041ad9000c754e37613e750fb7bf7342fed50bc07252ed84656b45d6
f708789508a9ffe0961723af11efc8dda69a69f2b5188bb31213820ab2dd
1ef5802e8fd4b6a38201113082010d300e0603551d0f0101ff0404030207
8030200603551d250101ff0416301406082b0601050507030106082b0601
050507030230140603551d20040d300b3009060767811201020103301d06
03551d0e041604149f5f6b0ce70032252dce10d349a655181b853ece301f
0603551d23041830168014f54172bdf98a95d65cbeb88a38a1c11d800a85
c330260603551d11041f301d821674657374736d6470706c7573322e6773
6d612e636f6d880388370c305b0603551d1f045430523027a025a0238621
687474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d412e
63726c3027a025a0238621687474703a2f2f63692e746573742e67736d61
2e636f6d2f43524c2d422e63726c300a06082a8648ce3d04030203480030
45022100941afc277340ce05d5d41b4990d9c5d7026c7ea73b7a070f30ad
69b178a3e96502202859fb74a06fd136c39f94141623e3b588aeefd8426d
2c0bdf513dfe587aac31'O;
function f_ts_cert_s_sm_dp2_tls() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dp2_tls);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp2_tls := f_ts_cert_s_sm_dp2_tls();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPtls/CERT_S_SM_DP4_TLS.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2452 (0x994)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Dec  5 13:32:17 2017 GMT
            Not After : Dec  4 13:32:17 2020 GMT
        Subject: O = ACME, CN = testsmdpplus4.gsma.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:3a:db:e8:4d:23:a8:1a:f6:3b:a2:d8:99:83:6c:
                    bb:68:a7:62:56:b3:0d:70:26:30:3d:c3:6b:c1:5d:
                    f6:11:36:c4:fb:e7:02:01:b4:c5:a6:6e:3d:ac:6b:
                    2b:3b:95:7a:99:bb:4e:74:10:03:e8:bf:74:2f:08:
                    13:02:aa:7d:a6
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: critical
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: 2.23.146.1.2.1.3

            X509v3 Subject Key Identifier:
                13:0F:3D:7B:B3:B0:65:AD:3C:58:78:76:BC:BB:6B:84:FD:49:7A:AB
            X509v3 Authority Key Identifier:
                keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3

            X509v3 Subject Alternative Name:
                DNS:testsmdpplus4.gsma.com, Registered ID:2.999.14
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:44:02:20:6e:eb:6d:9e:59:01:39:c4:9a:2c:9b:d5:05:6e:
         c9:a6:f6:03:73:29:62:da:e3:6e:d1:de:6d:fe:c1:31:95:8f:
         02:20:39:5c:3b:44:d5:de:84:73:ce:be:82:3d:33:5f:b4:fe:
         5b:2c:7f:47:3d:e6:5e:70:4a:ae:66:2a:6c:af:ec:5c
*/
const octetstring cert_s_sm_dp4_tls :=
'3082027b30820222a00302010202020994300a06082a8648ce3d04030230
493115301306035504030c0c47534d4120546573742043493111300f0603
55040b0c0854455354434552543110300e060355040a0c07525350544553
54310b3009060355040613024954301e170d313731323035313333323137
5a170d3230313230343133333231375a3030310d300b060355040a0c0441
434d45311f301d06035504030c1674657374736d6470706c7573342e6773
6d612e636f6d3059301306072a8648ce3d020106082a8648ce3d03010703
4200043adbe84d23a81af63ba2d899836cbb68a76256b30d7026303dc36b
c15df61136c4fbe70201b4c5a66e3dac6b2b3b957a99bb4e741003e8bf74
2f081302aa7da6a38201113082010d300e0603551d0f0101ff0404030207
8030200603551d250101ff0416301406082b0601050507030106082b0601
050507030230140603551d20040d300b3009060767811201020103301d06
03551d0e04160414130f3d7bb3b065ad3c587876bcbb6b84fd497aab301f
0603551d23041830168014f54172bdf98a95d65cbeb88a38a1c11d800a85
c330260603551d11041f301d821674657374736d6470706c7573342e6773
6d612e636f6d880388370e305b0603551d1f045430523027a025a0238621
687474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d412e
63726c3027a025a0238621687474703a2f2f63692e746573742e67736d61
2e636f6d2f43524c2d422e63726c300a06082a8648ce3d04030203470030
4402206eeb6d9e590139c49a2c9bd5056ec9a6f603732962dae36ed1de6d
fec131958f0220395c3b44d5de8473cebe823d335fb4fe5b2c7f473de65e
704aae662a6cafec5c'O;
function f_ts_cert_s_sm_dp4_tls() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dp4_tls);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp4_tls := f_ts_cert_s_sm_dp4_tls();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPtls/CERT_S_SM_DP8_TLS.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2456 (0x998)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Dec  5 13:37:06 2017 GMT
            Not After : Dec  4 13:37:06 2020 GMT
        Subject: O = ACME, CN = testsmdpplus8.gsma.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:ce:41:31:18:fa:64:99:6e:d8:b2:9b:fc:ac:85:
                    33:83:e6:5d:3f:22:a1:99:e7:96:6b:f4:06:9a:69:
                    58:39:2b:e5:39:d0:00:ea:51:a5:48:8b:10:87:d6:
                    eb:47:c0:01:84:6d:1e:68:7e:c4:90:e8:1a:80:96:
                    49:42:0c:52:6b
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: critical
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: 2.23.146.1.2.1.3

            X509v3 Subject Key Identifier:
                B8:7E:0A:73:F2:44:D5:99:4C:28:61:E6:EA:6E:30:70:D6:34:2A:53
            X509v3 Authority Key Identifier:
                keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3

            X509v3 Subject Alternative Name:
                DNS:testsmdpplus8.gsma.com, Registered ID:2.999.18
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:21:00:c1:74:e5:e3:ad:32:a9:6c:26:14:29:de:cd:
         c3:09:e5:fe:8a:c1:9d:be:e2:54:73:94:e1:43:be:84:f0:33:
         4a:02:20:55:c4:13:42:f8:b4:f1:d2:2f:0f:31:20:3f:fe:27:
         75:69:6a:0c:72:89:86:7e:66:35:2a:03:ae:e2:b8:71:3c
*/
const octetstring cert_s_sm_dp8_tls :=
'3082027c30820222a00302010202020998300a06082a8648ce3d04030230
493115301306035504030c0c47534d4120546573742043493111300f0603
55040b0c0854455354434552543110300e060355040a0c07525350544553
54310b3009060355040613024954301e170d313731323035313333373036
5a170d3230313230343133333730365a3030310d300b060355040a0c0441
434d45311f301d06035504030c1674657374736d6470706c7573382e6773
6d612e636f6d3059301306072a8648ce3d020106082a8648ce3d03010703
420004ce413118fa64996ed8b29bfcac853383e65d3f22a199e7966bf406
9a6958392be539d000ea51a5488b1087d6eb47c001846d1e687ec490e81a
809649420c526ba38201113082010d300e0603551d0f0101ff0404030207
8030200603551d250101ff0416301406082b0601050507030106082b0601
050507030230140603551d20040d300b3009060767811201020103301d06
03551d0e04160414b87e0a73f244d5994c2861e6ea6e3070d6342a53301f
0603551d23041830168014f54172bdf98a95d65cbeb88a38a1c11d800a85
c330260603551d11041f301d821674657374736d6470706c7573382e6773
6d612e636f6d8803883712305b0603551d1f045430523027a025a0238621
687474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d412e
63726c3027a025a0238621687474703a2f2f63692e746573742e67736d61
2e636f6d2f43524c2d422e63726c300a06082a8648ce3d04030203480030
45022100c174e5e3ad32a96c261429decdc309e5fe8ac19dbee2547394e1
43be84f0334a022055c41342f8b4f1d22f0f31203ffe2775696a0c728986
7e66352a03aee2b8713c'O;
function f_ts_cert_s_sm_dp8_tls() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dp8_tls);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp8_tls := f_ts_cert_s_sm_dp8_tls();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPtls/CERT_S_SM_DP_TLS_NIST.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Jun 29 12:21:14 2017 GMT
            Not After : Jun 28 12:21:14 2020 GMT
        Subject: O = ACME, CN = testsmdpplus1.gsma.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:28:24:30:75:ce:8e:fd:1f:ae:67:68:39:40:7d:
                    b2:6e:4c:cb:43:70:94:62:1c:9b:39:61:33:f1:b2:
                    4b:b5:01:b8:fe:4e:b2:4d:3e:0d:39:2f:25:3f:6f:
                    1b:94:62:70:b3:ca:29:2e:34:db:6f:7a:87:b3:a5:
                    f6:ac:94:5f:08
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: critical
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: 2.23.146.1.2.1.3

            X509v3 Subject Key Identifier:
                27:FE:F1:F2:29:18:7E:C7:83:ED:F6:E0:29:64:A4:51:8D:57:D4:A9
            X509v3 Authority Key Identifier:
                keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3

            X509v3 Subject Alternative Name:
                DNS:testsmdpplus1.gsma.com, Registered ID:2.999.10
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:20:2a:68:cf:75:5a:8b:0b:87:c9:41:25:6b:4d:af:
         4b:f2:09:6d:01:c8:3f:27:2b:cc:ce:63:df:d5:cc:5a:39:e3:
         02:21:00:b0:f5:02:4b:9e:aa:15:26:28:ab:19:77:21:a1:d1:
         a5:9e:05:c0:2e:20:83:79:15:8c:d4:74:4d:37:48:67:8a
*/
const octetstring cert_s_sm_dp_tls_nist :=
'3082027b30820221a003020102020109300a06082a8648ce3d0403023049
3115301306035504030c0c47534d4120546573742043493111300f060355
040b0c0854455354434552543110300e060355040a0c0752535054455354
310b3009060355040613024954301e170d3137303632393132323131345a
170d3230303632383132323131345a3030310d300b060355040a0c044143
4d45311f301d06035504030c1674657374736d6470706c7573312e67736d
612e636f6d3059301306072a8648ce3d020106082a8648ce3d0301070342
000428243075ce8efd1fae676839407db26e4ccb437094621c9b396133f1
b24bb501b8fe4eb24d3e0d392f253f6f1b946270b3ca292e34db6f7a87b3
a5f6ac945f08a38201113082010d300e0603551d0f0101ff040403020780
30200603551d250101ff0416301406082b0601050507030106082b060105
0507030230140603551d20040d300b3009060767811201020103301d0603
551d0e0416041427fef1f229187ec783edf6e02964a4518d57d4a9301f06
03551d23041830168014f54172bdf98a95d65cbeb88a38a1c11d800a85c3
30260603551d11041f301d821674657374736d6470706c7573312e67736d
612e636f6d880388370a305b0603551d1f045430523027a025a023862168
7474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d412e63
726c3027a025a0238621687474703a2f2f63692e746573742e67736d612e
636f6d2f43524c2d422e63726c300a06082a8648ce3d0403020348003045
02202a68cf755a8b0b87c941256b4daf4bf2096d01c83f272bccce63dfd5
cc5a39e3022100b0f5024b9eaa152628ab197721a1d1a59e05c02e208379
158cd4744d3748678a'O;
function f_ts_cert_s_sm_dp_tls_nist() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dp_tls_nist);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp_tls_nist := f_ts_cert_s_sm_dp_tls_nist();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DP+/DPtls/CERT_S_SM_DP_TLS_BRP.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Jul  6 13:49:28 2017 GMT
            Not After : Jul  5 13:49:28 2020 GMT
        Subject: O = ACME, CN = smdp-plus.test.gsma.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:4c:22:cc:d8:2c:8d:02:21:f9:d8:54:3b:72:e1:
                    07:bc:c9:fd:90:54:d6:6c:75:c0:eb:74:a7:bd:e7:
                    30:e7:61:8e:f6:5b:27:0b:5e:82:e4:3a:79:6f:8d:
                    ee:0b:af:8a:fb:eb:8a:53:62:53:7a:02:fd:65:c7:
                    9e:41:19:6b:b5
                ASN1 OID: brainpoolP256r1
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: critical
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: 2.23.146.1.2.1.3

            X509v3 Subject Key Identifier:
                3D:33:09:83:F3:9F:CC:5B:D2:E4:AD:68:A6:19:A7:47:48:AE:8B:9D
            X509v3 Authority Key Identifier:
                keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8

            X509v3 Subject Alternative Name:
                DNS:smdp-plus.test.gsma.com, Registered ID:2.999.10
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:44:02:20:4a:9c:78:38:89:c0:ef:f1:9d:68:c3:9f:67:d5:
         b5:81:d3:c9:df:3e:1d:52:67:40:3a:e1:f1:ea:6f:1e:4c:d5:
         02:20:5a:9f:b1:a7:3b:5e:6f:1b:ac:a3:16:55:90:ec:56:c5:
         0a:91:25:ed:76:39:d6:c8:49:1c:a3:c8:3e:55:59:11
*/
const octetstring cert_s_sm_dp_tls_brp :=
'3082027d30820224a003020102020109300a06082a8648ce3d0403023049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'O;
function f_ts_cert_s_sm_dp_tls_brp() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dp_tls_brp);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dp_tls_brp := f_ts_cert_s_sm_dp_tls_brp();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DS/DSauth/CERT_S_SM_DSauth_ECDSA_NIST.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7495 (0x1d47)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Jan 30 11:08:22 2017 GMT
            Not After : Jan 30 11:08:22 2020 GMT
        Subject: O = ACME, CN = TEST SM-DS
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:37:fb:94:e3:a2:be:fe:76:3e:1a:77:4a:48:54:
                    88:0f:10:6d:80:f9:36:84:5b:ad:2f:dd:97:1b:c0:
                    68:d8:ab:61:a5:48:1a:ee:97:7d:5a:81:68:bb:9f:
                    79:00:4b:1d:00:72:c1:ba:76:73:b0:cb:64:81:6e:
                    10:19:b2:4f:d0
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Subject Key Identifier:
                C1:F4:06:4B:3B:25:8A:FB:61:38:8B:3F:F2:EE:6A:61:E2:C4:4D:72
            X509v3 Subject Alternative Name:
                Registered ID:2.999.15
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.7

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:21:00:d3:41:14:3c:60:cd:36:14:93:12:ed:a8:4d:
         40:08:7a:ee:cc:e9:7d:de:06:44:dc:e8:b7:6a:16:8f:e8:e2:
         61:02:20:09:d6:1d:c9:40:e3:13:08:33:32:78:77:44:0d:6f:
         ac:eb:9f:6b:92:72:88:6b:f5:fa:a1:47:98:76:99:59:f2
*/
const octetstring cert_s_sm_dsauth_nist :=
'30820237308201dda00302010202021d47300a06082a8648ce3d04030230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'O;
function f_ts_cert_s_sm_dsauth_nist() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dsauth_nist);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dsauth_nist := f_ts_cert_s_sm_dsauth_nist();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DS/DSauth/CERT_S_SM_DSauth_ECDSA_BRP.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7495 (0x1d47)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: May  5 17:03:51 2017 GMT
            Not After : May  4 17:03:51 2020 GMT
        Subject: O = ACME, CN = TEST SM-DS
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:81:d1:d0:23:f3:9f:18:43:34:18:c2:8c:d2:3d:
                    42:15:7a:43:9f:ed:d2:9e:59:ab:11:86:e1:30:89:
                    81:96:c1:56:3a:13:f4:8b:36:d6:d4:b1:3b:4d:08:
                    5a:57:60:ae:61:3d:06:1f:fe:6f:c7:a4:0c:65:02:
                    e3:ff:73:3c:31
                ASN1 OID: brainpoolP256r1
        X509v3 extensions:
            X509v3 Authority Key Identifier:
                keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Subject Key Identifier:
                F0:5F:0B:54:AE:E8:AE:01:08:F0:1D:EF:54:8E:D9:85:97:14:DD:48
            X509v3 Subject Alternative Name:
                Registered ID:2.999.15
            X509v3 Certificate Policies: critical
                Policy: 2.23.146.1.2.1.7

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:20:25:a0:29:5d:1a:46:6e:2d:07:48:83:c5:f9:43:
         e2:fb:0a:72:ee:96:b5:75:95:d9:7d:91:b5:cb:b1:ea:6e:63:
         02:21:00:8d:4c:5b:4a:e7:48:86:82:28:72:15:0c:13:90:b9:
         64:39:f0:30:71:d2:4a:a4:11:45:5d:bb:16:2e:05:54:77
*/
const octetstring cert_s_sm_dsauth_brp :=
'30820238308201dea00302010202021d47300a06082a8648ce3d04030230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'O;
function f_ts_cert_s_sm_dsauth_brp() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_dsauth_brp);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_dsauth_brp := f_ts_cert_s_sm_dsauth_brp();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DS/DStls/CERT_SM_DS_TLS_NIST.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77899973700 (0x1223334444)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Jul 28 13:34:55 2017 GMT
            Not After : Jul 27 13:34:55 2020 GMT
        Subject: O = RSPTEST, CN = testrootsmds.gsma.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:92:0c:d5:ff:68:04:d8:7d:99:1d:ad:f6:38:c9:
                    b7:83:c5:85:00:a5:7b:a4:93:5b:9e:e2:ef:02:52:
                    b6:a6:dd:9a:50:1c:21:fd:35:42:6b:3b:51:c4:e4:
                    61:e5:6c:3f:77:2e:69:5f:b8:61:7f:9a:74:82:30:
                    4b:bb:2f:e2:84
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: critical
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: 2.23.146.1.2.1.6

            X509v3 Subject Key Identifier:
                A0:36:C1:62:75:35:1E:C7:B0:15:53:A1:3F:83:E2:8D:44:00:BD:0A
            X509v3 Authority Key Identifier:
                keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3

            X509v3 Subject Alternative Name:
                DNS:testrootsmds.gsma.com, Registered ID:2.999.15
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:20:20:15:19:8e:b1:3b:3c:b2:cd:90:f2:02:c0:1c:
         55:88:0c:4b:94:64:5a:88:f2:87:2b:44:f4:fa:42:15:bb:64:
         02:21:00:8f:0d:7e:67:1f:bf:34:a4:0e:51:d2:11:2f:ca:21:
         47:0c:ba:c9:84:06:30:39:5b:66:66:60:61:d3:86:3e:33
*/
const octetstring cert_sm_ds_tls_nist :=
'3082028030820226a00302010202051223334444300a06082a8648ce3d04
030230493115301306035504030c0c47534d412054657374204349311130
0f060355040b0c0854455354434552543110300e060355040a0c07525350
54455354310b3009060355040613024954301e170d313730373238313333
3435355a170d3230303732373133333435355a30323110300e060355040a
0c0752535054455354311e301c06035504030c1574657374726f6f74736d
64732e67736d612e636f6d3059301306072a8648ce3d020106082a8648ce
3d03010703420004920cd5ff6804d87d991dadf638c9b783c58500a57ba4
935b9ee2ef0252b6a6dd9a501c21fd35426b3b51c4e461e56c3f772e695f
b8617f9a7482304bbb2fe284a38201103082010c300e0603551d0f0101ff
04040302078030200603551d250101ff0416301406082b06010505070301
06082b0601050507030230140603551d20040d300b300906076781120102
0106301d0603551d0e04160414a036c16275351ec7b01553a13f83e28d44
00bd0a301f0603551d23041830168014f54172bdf98a95d65cbeb88a38a1
c11d800a85c330250603551d11041e301c821574657374726f6f74736d64
732e67736d612e636f6d880388370f305b0603551d1f045430523027a025
a0238621687474703a2f2f63692e746573742e67736d612e636f6d2f4352
4c2d412e63726c3027a025a0238621687474703a2f2f63692e746573742e
67736d612e636f6d2f43524c2d422e63726c300a06082a8648ce3d040302
034800304502202015198eb13b3cb2cd90f202c01c55880c4b94645a88f2
872b44f4fa4215bb640221008f0d7e671fbf34a40e51d2112fca21470cba
c9840630395b66666061d3863e33'O;
function f_ts_cert_sm_ds_tls_nist() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_sm_ds_tls_nist);
	 return cert_decoded;
}
template (value) Certificate ts_cert_sm_ds_tls_nist := f_ts_cert_sm_ds_tls_nist();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DS/DStls/CERT_S_SM_DS2_TLS_NIST.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81684042822800725 (0x122333444455555)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Jul 31 09:36:23 2017 GMT
            Not After : Jul 30 09:36:23 2020 GMT
        Subject: O = RSPTEST, CN = testsmds1.gsma.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:19:d0:a3:31:cf:30:2c:7a:07:61:52:90:92:56:
                    75:ad:14:62:cc:58:ba:57:b2:a8:fa:67:69:fd:65:
                    f5:c3:ad:34:d4:92:89:77:cf:57:39:30:ca:01:d8:
                    61:15:a6:8d:45:a6:86:0c:7b:9d:b2:3d:82:18:58:
                    11:41:8c:2a:09
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: critical
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: 2.23.146.1.2.1.6

            X509v3 Subject Key Identifier:
                53:82:04:27:91:71:ED:3D:0A:79:C0:AD:61:A5:35:31:2C:86:48:6C
            X509v3 Authority Key Identifier:
                keyid:F5:41:72:BD:F9:8A:95:D6:5C:BE:B8:8A:38:A1:C1:1D:80:0A:85:C3

            X509v3 Subject Alternative Name:
                DNS:testsmds1.gsma.com, Registered ID:2.999.15.2
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:45:02:20:5c:b0:bd:6d:48:5b:13:21:c3:bf:28:37:22:a6:
         43:09:a5:d2:0e:8f:67:1b:d0:05:f3:f9:1e:17:6f:8b:a4:80:
         02:21:00:c7:73:03:63:64:ab:76:34:f2:61:24:99:d8:24:8c:
         af:df:81:d1:6d:3c:2c:5b:d6:0c:4b:ee:60:68:31:c4:f1
*/
const octetstring cert_s_sm_ds2_tls_nist :=
'3082027e30820224a00302010202080122333444455555300a06082a8648
ce3d04030230493115301306035504030c0c47534d412054657374204349
3111300f060355040b0c0854455354434552543110300e060355040a0c07
52535054455354310b3009060355040613024954301e170d313730373331
3039333632335a170d3230303733303039333632335a302f3110300e0603
55040a0c0752535054455354311b301906035504030c1274657374736d64
73312e67736d612e636f6d3059301306072a8648ce3d020106082a8648ce
3d0301070342000419d0a331cf302c7a07615290925675ad1462cc58ba57
b2a8fa6769fd65f5c3ad34d4928977cf573930ca01d86115a68d45a6860c
7b9db23d82185811418c2a09a382010e3082010a300e0603551d0f0101ff
04040302078030200603551d250101ff0416301406082b06010505070301
06082b0601050507030230140603551d20040d300b300906076781120102
0106301d0603551d0e04160414538204279171ed3d0a79c0ad61a535312c
86486c301f0603551d23041830168014f54172bdf98a95d65cbeb88a38a1
c11d800a85c330230603551d11041c301a821274657374736d6473312e67
736d612e636f6d880488370f02305b0603551d1f045430523027a025a023
8621687474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d
412e63726c3027a025a0238621687474703a2f2f63692e746573742e6773
6d612e636f6d2f43524c2d422e63726c300a06082a8648ce3d0403020348
00304502205cb0bd6d485b1321c3bf283722a64309a5d20e8f671bd005f3
f91e176f8ba480022100c773036364ab7634f2612499d8248cafdf81d16d
3c2c5bd60c4bee606831c4f1'O;
function f_ts_cert_s_sm_ds2_tls_nist() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_ds2_tls_nist);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_ds2_tls_nist := f_ts_cert_s_sm_ds2_tls_nist();

/* Test certificate:
SGP.26_v1.2_files/Valid test cases/SM-DS/DStls/CERT_S_SM_DS_TLS_BRP.der
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1246399579205 (0x12233344445)
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: CN = GSMA Test CI, OU = TESTCERT, O = RSPTEST, C = IT
        Validity
            Not Before: Jul  7 06:18:01 2017 GMT
            Not After : Jul  6 06:18:01 2020 GMT
        Subject: O = TESTCERT, CN = smds.test.gsma.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:39:ef:3f:92:a3:bc:a8:ef:7d:66:26:7f:1e:1a:
                    d8:b9:43:fd:2d:b2:27:cb:e1:a1:0b:f4:92:72:61:
                    81:c4:81:5b:2a:31:60:7c:7d:e5:b3:1c:a0:22:1d:
                    ff:ed:ad:58:70:63:3d:30:ed:55:aa:bb:51:7a:e4:
                    39:9c:4a:64:81
                ASN1 OID: brainpoolP256r1
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: critical
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: 2.23.146.1.2.1.6

            X509v3 Subject Key Identifier:
                73:99:CA:C7:B1:5F:AB:2F:F9:33:CF:2D:22:15:E4:84:4A:DE:F8:05
            X509v3 Authority Key Identifier:
                keyid:C0:BC:70:BA:36:92:9D:43:B4:67:FF:57:57:05:30:E5:7A:B8:FC:D8

            X509v3 Subject Alternative Name:
                DNS:smds.test.gsma.com, Registered ID:2.999.15
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-A.crl

                Full Name:
                  URI:http://ci.test.gsma.com/CRL-B.crl

    Signature Algorithm: ecdsa-with-SHA256
         30:44:02:20:18:56:2e:17:de:40:a4:93:18:dc:8e:a5:26:dc:
         e5:71:9d:85:42:c8:5b:cc:2c:6c:86:a4:6a:58:db:b5:ce:1a:
         02:20:4a:91:75:54:26:98:e5:85:6e:27:57:41:0c:46:f2:fb:
         22:7e:04:2c:79:6a:99:77:69:5b:20:2e:89:49:c3:4d
*/
const octetstring cert_s_sm_ds_tls_brp :=
'3082027c30820223a0030201020206012233344445300a06082a8648ce3d
04030230493115301306035504030c0c47534d4120546573742043493111
300f060355040b0c0854455354434552543110300e060355040a0c075253
5054455354310b3009060355040613024954301e170d3137303730373036
313830315a170d3230303730363036313830315a30303111300f06035504
0a0c085445535443455254311b301906035504030c12736d64732e746573
742e67736d612e636f6d305a301406072a8648ce3d020106092b24030302
080101070342000439ef3f92a3bca8ef7d66267f1e1ad8b943fd2db227cb
e1a10bf492726181c4815b2a31607c7de5b31ca0221dffedad5870633d30
ed55aabb517ae4399c4a6481a382010d30820109300e0603551d0f0101ff
04040302078030200603551d250101ff0416301406082b06010505070301
06082b0601050507030230140603551d20040d300b300906076781120102
0106301d0603551d0e041604147399cac7b15fab2ff933cf2d2215e4844a
def805301f0603551d23041830168014c0bc70ba36929d43b467ff575705
30e57ab8fcd830220603551d11041b30198212736d64732e746573742e67
736d612e636f6d880388370f305b0603551d1f045430523027a025a02386
21687474703a2f2f63692e746573742e67736d612e636f6d2f43524c2d41
2e63726c3027a025a0238621687474703a2f2f63692e746573742e67736d
612e636f6d2f43524c2d422e63726c300a06082a8648ce3d040302034700
3044022018562e17de40a49318dc8ea526dce5719d8542c85bcc2c6c86a4
6a58dbb5ce1a02204a9175542698e5856e2757410c46f2fb227e042c796a
9977695b202e8949c34d'O;
function f_ts_cert_s_sm_ds_tls_brp() return Certificate {
	 var Certificate cert_decoded;
	 cert_decoded := dec_Certificate(cert_s_sm_ds_tls_brp);
	 return cert_decoded;
}
template (value) Certificate ts_cert_s_sm_ds_tls_brp := f_ts_cert_s_sm_ds_tls_brp();

}