<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=us-ascii"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-CA" link="#0563C1" vlink="#954F72"> <div class="WordSection1"> <p class="MsoNormalCxSpFirst" style="background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;mso-fareast-language:EN-CA">I logged into my IPA master, and found that the cert had expired again, we renewed these certificates about 18 months ago.<o:p></o:p></span></p> <p class="MsoNormalCxSpMiddle" style="background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;mso-fareast-language:EN-CA"><o:p> </o:p></span></p> <p class="MsoNormalCxSpMiddle" style="background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;mso-fareast-language:EN-CA">Our environment is CentOS 6.4 and IPA 3.0.0-26.<o:p></o:p></span></p> <p class="MsoNormalCxSpLast" style="background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;mso-fareast-language:EN-CA"><o:p> </o:p></span></p> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">I followed the Redhat documentation,</span><span style="font-size:10.0pt;font-family:"Courier New";color:black"> </span><span style="font-size:10.0pt;font-family:"Courier New";color:black">How do I manually renew Identity Management (IPA) certificates after they have expired? (Master IPA Server), </span><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"><a href="https://access.redhat.com/solutions/643753">https://access.redhat.com/solutions/643753</a> but no luck.<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"><o:p> </o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">I have also changed "NSSEnforceValidCerts off" in /etc/httpd/conf.d/nss.conf and the nsslapd-validate-cert value is warn.<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">ldapsearch -x -h localhost -p 7389 -D 'cn=directory manager' -w ******* -b cn=config | grep nsslapd-validate-cert<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">nsslapd-validate-cert: warn<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"><o:p> </o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Here is my getcert list,<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"><o:p> </o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">[root@caer ~]# getcert list<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Number of certificates and requests being tracked: 8.<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Request ID '20111214223243':<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> status: CA_UNREACHABLE<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> ca-error: Server failed request, will retry: -504 (libcurl failed to execute the HTTP POST transaction. Peer certificate cannot be authenticated with known CA certificates).<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> stuck: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> key pair storage: type=NSSDB,location='/etc/dirsrv/slapd-TELOIP-NET',nickname='Server-Cert',token='NSS Certificate DB',pinfile='/etc/dirsrv/slapd-TELOIP-NET//pwdfile.txt'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> certificate: type=NSSDB,location='/etc/dirsrv/slapd-TELOIP-NET',nickname='Server-Cert',token='NSS Certificate DB'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> CA: IPA<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> issuer: CN=Certificate Authority,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> subject: CN=caer.teloip.net,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> expires: 2016-01-29 14:09:46 UTC<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> eku: id-kp-serverAuth<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> pre-save command: <o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> post-save command: <o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> track: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> auto-renew: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Request ID '20111214223300':<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> status: CA_UNREACHABLE<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> ca-error: Server failed request, will retry: -504 (libcurl failed to execute the HTTP POST transaction. Peer certificate cannot be authenticated with known CA certificates).<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> stuck: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> key pair storage: type=NSSDB,location='/etc/dirsrv/slapd-PKI-IPA',nickname='Server-Cert',token='NSS Certificate DB',pinfile='/etc/dirsrv/slapd-PKI-IPA//pwdfile.txt'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> certificate: type=NSSDB,location='/etc/dirsrv/slapd-PKI-IPA',nickname='Server-Cert',token='NSS Certificate DB'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> CA: IPA<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> issuer: CN=Certificate Authority,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> subject: CN=caer.teloip.net,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> expires: 2016-01-29 14:09:45 UTC<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> eku: id-kp-serverAuth<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> pre-save command: <o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> post-save command: <o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> track: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> auto-renew: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Request ID '20111214223316':<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> status: CA_UNREACHABLE<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> ca-error: Server failed request, will retry: -504 (libcurl failed to execute the HTTP POST transaction. Peer certificate cannot be authenticated with known CA certificates).<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> stuck: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> key pair storage: type=NSSDB,location='/etc/httpd/alias',nickname='Server-Cert',token='NSS Certificate DB',pinfile='/etc/httpd/alias/pwdfile.txt'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> certificate: type=NSSDB,location='/etc/httpd/alias',nickname='Server-Cert',token='NSS Certificate DB'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> CA: IPA<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> issuer: CN=Certificate Authority,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> subject: CN=caer.teloip.net,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> expires: 2016-01-29 14:09:45 UTC<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> eku: id-kp-serverAuth<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> pre-save command: <o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> post-save command: <o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> track: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> auto-renew: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Request ID '20130519130741':<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> status: MONITORING<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> stuck: no<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> key pair storage: type=NSSDB,location='/var/lib/pki-ca/alias',nickname='auditSigningCert cert-pki-ca',token='NSS Certificate DB',pin='297100916664'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> certificate: type=NSSDB,location='/var/lib/pki-ca/alias',nickname='auditSigningCert cert-pki-ca',token='NSS Certificate DB'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> CA: dogtag-ipa-renew-agent<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> issuer: CN=Certificate Authority,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> subject: CN=CA Audit,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> expires: 2017-10-13 14:10:49 UTC<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> pre-save command: /usr/lib64/ipa/certmonger/stop_pkicad<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> post-save command: /usr/lib64/ipa/certmonger/renew_ca_cert "auditSigningCert cert-pki-ca"<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> track: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> auto-renew: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Request ID '20130519130742':<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> status: MONITORING<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> stuck: no<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> key pair storage: type=NSSDB,location='/var/lib/pki-ca/alias',nickname='ocspSigningCert cert-pki-ca',token='NSS Certificate DB',pin='297100916664'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> certificate: type=NSSDB,location='/var/lib/pki-ca/alias',nickname='ocspSigningCert cert-pki-ca',token='NSS Certificate DB'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> CA: dogtag-ipa-renew-agent<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> issuer: CN=Certificate Authority,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> subject: CN=OCSP Subsystem,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> expires: 2017-10-13 14:09:49 UTC<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> eku: id-kp-OCSPSigning<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> pre-save command: /usr/lib64/ipa/certmonger/stop_pkicad<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> post-save command: /usr/lib64/ipa/certmonger/renew_ca_cert "ocspSigningCert cert-pki-ca"<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> track: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> auto-renew: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Request ID '20130519130743':<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> status: MONITORING<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> stuck: no<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> key pair storage: type=NSSDB,location='/var/lib/pki-ca/alias',nickname='subsystemCert cert-pki-ca',token='NSS Certificate DB',pin='297100916664'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> certificate: type=NSSDB,location='/var/lib/pki-ca/alias',nickname='subsystemCert cert-pki-ca',token='NSS Certificate DB'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> CA: dogtag-ipa-renew-agent<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> issuer: CN=Certificate Authority,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> subject: CN=CA Subsystem,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> expires: 2017-10-13 14:09:49 UTC<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> eku: id-kp-serverAuth,id-kp-clientAuth<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> pre-save command: /usr/lib64/ipa/certmonger/stop_pkicad<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> post-save command: /usr/lib64/ipa/certmonger/renew_ca_cert "subsystemCert cert-pki-ca"<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> track: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> auto-renew: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Request ID '20130519130744':<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> status: MONITORING<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> stuck: no<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> key pair storage: type=NSSDB,location='/etc/httpd/alias',nickname='ipaCert',token='NSS Certificate DB',pinfile='/etc/httpd/alias/pwdfile.txt'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> certificate: type=NSSDB,location='/etc/httpd/alias',nickname='ipaCert',token='NSS Certificate DB'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> CA: dogtag-ipa-renew-agent<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> issuer: CN=Certificate Authority,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> subject: CN=RA Subsystem,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> expires: 2017-10-13 14:09:49 UTC<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> eku: id-kp-serverAuth,id-kp-clientAuth<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> pre-save command: <o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> post-save command: /usr/lib64/ipa/certmonger/renew_ra_cert<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> track: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> auto-renew: yes<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Request ID '20130519130745':<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> status: MONITORING<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> stuck: no<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> key pair storage: type=NSSDB,location='/var/lib/pki-ca/alias',nickname='Server-Cert cert-pki-ca',token='NSS Certificate DB',pin='297100916664'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> certificate: type=NSSDB,location='/var/lib/pki-ca/alias',nickname='Server-Cert cert-pki-ca',token='NSS Certificate DB'<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> CA: dogtag-ipa-renew-agent<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> issuer: CN=Certificate Authority,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> subject: CN=caer.teloip.net,O=TELOIP.NET<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> expires: 2017-10-13 14:09:49 UTC<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> eku: id-kp-serverAuth,id-kp-clientAuth<o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> pre-save command: <o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> post-save command: <o:p></o:p></span></h1> <h1 style="line-height:15.45pt;background:white"><span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> track: yes<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"> auto-renew: yes<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"><o:p> </o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Note:<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">I’m seeing two blobs in ipaCert, not sure this is because we already renewed the certificate about 18 months back.</span><span style="font-size:10.0pt"> <o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">[root@caer ~]# certutil -L -d /etc/httpd/alias -n ipaCert -a<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">-----BEGIN CERTIFICATE-----<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">MIIDbzCCAlegAwIBAgIBQDANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKEwpURUxP<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">SVAuTkVUMR4wHAYDVQQDExVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMTUxMDI0<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">MTQwOTQ5WhcNMTcxMDEzMTQwOTQ5WjAsMRMwEQYDVQQKEwpURUxPSVAuTkVUMRUw<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">EwYDVQQDEwxSQSBTdWJzeXN0ZW0wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">AoIBAQDVI16akCv85Wgl3L+vF0hOb0G7NItC4bt77wsSqUCp6CRQQXyEt3NR/QuV<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Ta/NPnHKLRDGVUHXxbhWNpC6e/gxrAC6aO3/XyqRWJG6WHqC4jMepz9vaeeYwTx1<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">MvH4JQMJtPY745Mu8cbL6xgPVJV2G2gaQyoJWnelPbmCAudF8WDZXXnMGR7zXv1U<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">2e9R+b0QgLrOUklWv+hW6tqgbhZONaITPcEA8byiXTizIa+vfICkSMZW6qYLpvh6<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">IEXMZ+CxkhGN101HiyrHKNIBUeXoCvIf1s6fTzJHIFgCpeDS2gymj8hbmSEItRfz<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">OK9xD3+3bP+ttgw3rxPKiKqCKNr/AgMBAAGjgZIwgY8wHwYDVR0jBBgwFoAUx5/Z<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">pwOfXZQ5KNwC42cBW+Y+bGIwPQYIKwYBBQUHAQEEMTAvMC0GCCsGAQUFBzABhiFo<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">dHRwOi8vY2Flci50ZWxvaXAubmV0OjgwL2NhL29jc3AwDgYDVR0PAQH/BAQDAgTw<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOC<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">AQEAGxNLz7EQsdqTEzy1zf1KtpBKLEGdsst2OhzfAuPWQk/ZSVQHyaAgjOirUngG<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">1ZUmdPhsi+O9UVobLL/yBOnM6HUAsFG+kzk3Tkkfry2+U9goIZgri+LyPuZhK5A1<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">tczTcBinbSBF0XjJXCt6o3dq1BAf0Z/JazxV9NNDXoV0JHL6gHbZ66rN/ohBeSPB<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">uQSyLhFqZvVXbKw3sIahu9hfwfa+GBoJ7oQ/3sRXGE1iVbxaV8nOjHRbBAgOxgCU<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">XOZ3MshXy3eqMpoyFBcA7F9tKfFrHShL/VSk1W2xugXNQW7e+9vATLGLnmPRslLy<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">3fN5HM3Wmhjoya3C6rxXPpgGbQ==<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">-----END CERTIFICATE-----<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">-----BEGIN CERTIFICATE-----<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">MIIDcTCCAlmgAwIBAgIBBzANBgkqhkiG9w0BAQsFADA1MRMwEQYDVQQKEwpURUxP<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">SVAuTkVUMR4wHAYDVQQDExVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMTExMjE0<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">MjIzMTUzWhcNMTMxMjAzMjIzMTUzWjAsMRMwEQYDVQQKEwpURUxPSVAuTkVUMRUw<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">EwYDVQQDEwxSQSBTdWJzeXN0ZW0wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">AoIBAQDVI16akCv85Wgl3L+vF0hOb0G7NItC4bt77wsSqUCp6CRQQXyEt3NR/QuV<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Ta/NPnHKLRDGVUHXxbhWNpC6e/gxrAC6aO3/XyqRWJG6WHqC4jMepz9vaeeYwTx1<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">MvH4JQMJtPY745Mu8cbL6xgPVJV2G2gaQyoJWnelPbmCAudF8WDZXXnMGR7zXv1U<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">2e9R+b0QgLrOUklWv+hW6tqgbhZONaITPcEA8byiXTizIa+vfICkSMZW6qYLpvh6<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">IEXMZ+CxkhGN101HiyrHKNIBUeXoCvIf1s6fTzJHIFgCpeDS2gymj8hbmSEItRfz<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">OK9xD3+3bP+ttgw3rxPKiKqCKNr/AgMBAAGjgZQwgZEwHwYDVR0jBBgwFoAUx5/Z<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">pwOfXZQ5KNwC42cBW+Y+bGIwPwYIKwYBBQUHAQEEMzAxMC8GCCsGAQUFBzABhiNo<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">dHRwOi8vY2Flci50ZWxvaXAubmV0OjkxODAvY2Evb2NzcDAOBgNVHQ8BAf8EBAMC<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">BPAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA0GCSqGSIb3DQEBCwUA<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">A4IBAQCSH1Qf7pIWL4krYbMvvPqoQddy4A1Rgc4pglhQwVb7UhzFuPoD+IcVk8LJ<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">KCA8mlWKpBw9vnCsbaIB1oIs7aFEvFJVb9G2TUJ/gzcbMlPfDJ1CdoBJgN/QDfqA<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Az3k3av4U5rJc59KG5taV3nKcSRtLT2qiW939fgDWbUkAoyALlDg+v5kNgPVEvb0<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">oGBMypFL9LW6CcQJycde8nB6XnBPMFaPrJu4l1pThS7OfBFIwewpd72+JstiaIv5<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">tKMdREWFwZuiQ9NVX5E9pzTwgbi/9WbKSZgNl58L16zgwnZ0pnndDcNf/FXwwRKP<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">wm1YBfh+UyydiHHl/swLyV84vOXr<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">-----END CERTIFICATE-----<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"><o:p> </o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Your help is highly appreciated.<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal"><o:p> </o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Regards,<o:p></o:p></span></h1> <h1 style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:4.5pt;margin-left:0cm;mso-add-space:auto;line-height:15.45pt;background:white"> <span style="font-size:10.0pt;font-family:"Courier New";color:black;font-weight:normal">Linov Suresh.<o:p></o:p></span></h1> </div> </body> </html>