DEV-490: added changed CA.crt files due to Svens ELK-Cert-rolling on 13th june 2022

4 years ago · 1491c824b5
parent 1bee88c53c
commit 1491c824b5
10 changed files with 271 additions and 54 deletions
--- a/kustomize/base/files/exporter.cfg
+++ b/kustomize/base/files/exporter.cfg
@ -3,8 +3,8 @@
 QueryIntervalSecs = 60
 QueryTimeoutSecs = 15
 QueryIndices = <*-authlog-*>
-QueryOnError = preserve
-QueryOnMissing = zero
+QueryOnError = drop
+QueryOnMissing = drop
 QueryJson = {
        "size": 0,
        "query": {
--- a/kustomize/dev/files/es_ca.crt
+++ b/kustomize/dev/files/es_ca.crt
@ -1,20 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIIDSjCCAjKgAwIBAgIVALoaO+vyeJc6elKN4SMIOb9AKm8HMA0GCSqGSIb3DQEB
-CwUAMDQxMjAwBgNVBAMTKUVsYXN0aWMgQ2VydGlmaWNhdGUgVG9vbCBBdXRvZ2Vu
-ZXJhdGVkIENBMB4XDTIxMDkwMzEyMTIwNFoXDTIyMDkwMzEyMTIwNFowNDEyMDAG
-A1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5lcmF0ZWQgQ0Ew
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSkIH2QlzcEncmAAwtkVw7
-Nsr7WEBO7eIIST3mY9XJwlqP4IsR9C9UnSXUSpWSJEcv1I6mrZE38Hyq/rvcEFZK
-ZSgHYDsJiVglkUZFdv5S84vgVSROoy+8r10fokHfpbidtJmXabP5T6VD+LE+Mg7y
-RddhHZCoM4wHveo/q55c3RCoVc0PEELrk0vVqvYK99LO+yAprBPzRuXDZx5oJkxD
-+Uc4rTyNCcTTo8CkK1BfccXktBHTQvOzOYxuwyGxb/GCaKwcGG+XQ4TRt3o7r3GR
-TOKCNO+sM6c0g7W0OoL38v7/IKAufTcmU7QO/tb9NBz/G9N57EOqhPdp/46ih1XX
-AgMBAAGjUzBRMB0GA1UdDgQWBBQTPREWSx37K1IpHecIquNdDE7ztDAfBgNVHSME
-GDAWgBQTPREWSx37K1IpHecIquNdDE7ztDAPBgNVHRMBAf8EBTADAQH/MA0GCSqG
-SIb3DQEBCwUAA4IBAQAGVoeS1hfVOrDnnLYzPSrF9IfHEzt/eSr3ymEiNUK8ZaRS
-9gpvRgX8n0pS197wVyK8hd2iXzH58H6KMkhcWZH2uNLEB8aOFOCkQxnU4NsMYRjT
-RaS+qf29YbH6LkyO1kxCtGxldKybj8I8MFf8X0mBLN4Nk+w+KqKVFsl63AMtsJkq
-WOgjoYZcY+FQW0HqS2AzDVkDZiXAtjwtXXjONAJOylRHDieA3UByukNHI0OtIurX
-ePsDUoEakawtgXZmD8/RCt8Jpqm5UDwAioa18KJv3u5yqtX+whUnFSI7u5+Mzlay
-2aOT5tIpOXQPV3tuUSvC6CYpoJOrLjgJSJhcP8Uo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 -----END CERTIFICATE-----
--- a/kustomize/prodnso/files/es_ca.crt
+++ b/kustomize/prodnso/files/es_ca.crt
@ -1,20 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIIDSTCCAjGgAwIBAgIUeBT0O1O7fOj0P4HNki4XAZ+8HM0wDQYJKoZIhvcNAQEL
-BQAwNDEyMDAGA1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5l
-cmF0ZWQgQ0EwHhcNMjIwMTMxMjEwMzExWhcNMjMwMTMxMjEwMzExWjA0MTIwMAYD
-VQQDEylFbGFzdGljIENlcnRpZmljYXRlIFRvb2wgQXV0b2dlbmVyYXRlZCBDQTCC
-ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMiMhLUSe6mh4UDJtPgbb+nb
-C+EITRbDWAkRiLsWrZvDd5eCuj1dVeFD52ChujA+09/ar4aD7RZx1bhky8lyzP6F
-+P9oxbdHvm8Ru0vmeHQ9lYLZZsyMcpDTh6HFotJ4zbeTo+Be4/luP0LAC4RMnNMh
-8myYOCXORLAsryizt/pmcHMtH9/80oUmRvXoa/xZ2/qKzFmrq7wQGotZjVs4MFHb
-au9I7/o8I9w23ZiFKjTPy1GS2Ak1jN+5JhnTD8dvEzUgsEzSLiluk0bLWOQ53kBj
-W2j1JNJooHJn2V+n3mrqS8x1wEZiULuuMb9qmPQ6mTPrsf+4VmmOpWkqJviNc20C
-AwEAAaNTMFEwHQYDVR0OBBYEFOvP92wWv5LWU4TMFt59gUaRt9lBMB8GA1UdIwQY
-MBaAFOvP92wWv5LWU4TMFt59gUaRt9lBMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZI
-hvcNAQELBQADggEBAEYtHkeq+6AdQ6ocmsjhxNza1kOMDcuthgncYYpwdh1jJKm8
-keFN+zPx1h4vOQ2WjGNLzGsI2Hno0usO2mIIjuvJCytXWrZJW8RKFe7o9Kap66Be
-pajs1mH+/t8HLvJ2IEOR5OpqofPoE82oOr6kwVS6qtTWjkWl119zdfzQ2/2gBtK+
-nsgK4m+pccC5NY0cMNO0BXxAKDtN+tlqUEyXjbdrvQ/5Jnd06GVYnut4YjikIlgk
-XvqIIv0N0aN0AdIx/7ewfl2ex75EyZHjFehgetrkIwpTTL0BPqzZfMimoM8luYil
-B4mnvBxPz5/sn7lybwV6wEWXQt0EiAM956r+rqk=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 -----END CERTIFICATE-----
--- a/kustomize/prodwork01/.sops.yaml
+++ b/kustomize/prodwork01/.sops.yaml
@ -0,0 +1,15 @@
+# Fingerprint  | User ID
+# A7A1D860AA45B6B5B29BC192C55BD9B4CD8DE439 | smardigo automation DEV <NSO-Team-DevOps@netgo.de>
+# 890B2EB48F343D4C6DB9DA0916826F30002D3C1D | smardigo automation QA  <NSO-Team-DevOps@netgo.de>
+# E5B4FE1E0209DFFE320D2A2E47087747D89B72EC | smardigo automation PRODNSO <NSO-Team-DevOps@netgo.de>
+# D65D400040387210377B6A71DFD775644EAAC77B | Friedrich Goerz <friedrich.goerz@netgo.de>
+# BE3FB94982C2DE95B1EDD388A96613A6B1DB15B5 | GPG DevOps <sven.ketelsen@netgo.de>  
+# 17B8FDF68AC123EB666934B17D0DF6EC048A5D77 | Claus Paetow <claus.paetow@netgo.de>
+creation_rules:
+  # list of keys for encryption in __DEV__ stage
+  - encrypted_regex: "^(data|stringData)$"
+    pgp: >-
+      E5B4FE1E0209DFFE320D2A2E47087747D89B72EC,
+      D65D400040387210377B6A71DFD775644EAAC77B,
+      BE3FB94982C2DE95B1EDD388A96613A6B1DB15B5,
+      17B8FDF68AC123EB666934B17D0DF6EC048A5D77
--- a/kustomize/prodwork01/files/es_ca.crt
+++ b/kustomize/prodwork01/files/es_ca.crt
@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/kustomize/prodwork01/kustomization.yaml
+++ b/kustomize/prodwork01/kustomization.yaml
@ -0,0 +1,16 @@
+bases:
+- ../base
+
+generators:
+- resources/secgen-es-creds.yaml
+
+generatorOptions:
+  disableNameSuffixHash: false
+
+configMapGenerator:
+- name: prometheus-es-exporter-cacert
+  files:
+  - files/es_ca.crt
+
+patchesStrategicMerge:
+- patches.yaml
--- a/kustomize/prodwork01/patches.yaml
+++ b/kustomize/prodwork01/patches.yaml
@ -0,0 +1,60 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: prometheus-es-exporter
+    release: prometheus-es-exporter
+  name: prometheus-es-exporter
+spec:
+  template:
+    spec:
+      containers:
+      - args:
+        - --es-cluster=https://prodwork01-elastic-stack-elastic-01:9200,https://prodwork01-elastic-stack-elastic-02:9200,https://prodwork01-elastic-stack-elastic-03:9200
+        - --port=9206
+        - --config-file=/mnt/config/exporter.cfg
+        - --ca-certs=/mnt/certs/es_ca.crt
+        env:
+        - name: ES_EXPORTER_BASIC_USER
+          valueFrom:
+            secretKeyRef:
+              name: prometheus-es-exporter-es-creds
+              key: username
+        - name: ES_EXPORTER_BASIC_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: prometheus-es-exporter-es-creds
+              key: password
+        image: braedon/prometheus-es-exporter:0.14.0
+        livenessProbe:
+          failureThreshold: 3
+          periodSeconds: 10
+          successThreshold: 1
+          tcpSocket:
+            port: prometheus
+          timeoutSeconds: 1
+        name: prometheus-es-exporter
+        ports:
+        - containerPort: 9206
+          name: prometheus
+          protocol: TCP
+        readinessProbe:
+          failureThreshold: 3
+          periodSeconds: 10
+          successThreshold: 1
+          tcpSocket:
+            port: prometheus
+          timeoutSeconds: 1
+        volumeMounts:
+        - mountPath: /mnt/config
+          name: config-volume
+      hostAliases:
+      - hostnames:
+        - prodwork01-elastic-stack-elastic-01
+        ip: 10.3.0.13
+      - hostnames:
+        - prodwork01-elastic-stack-elastic-02
+        ip: 10.3.0.14
+      - hostnames:
+        - prodwork01-elastic-stack-elastic-03
+        ip: 10.3.0.16
--- a/kustomize/prodwork01/resources/secgen-es-creds.yaml
+++ b/kustomize/prodwork01/resources/secgen-es-creds.yaml
@ -0,0 +1,6 @@
+apiVersion: viaduct.ai/v1
+kind: ksops
+metadata:
+  name: prometheus-es-exporter-es-creds
+files:
+  - secrets/es_basic_auth.enc.yaml
--- a/kustomize/prodwork01/secrets/es_basic_auth.enc.yaml
+++ b/kustomize/prodwork01/secrets/es_basic_auth.enc.yaml
@ -0,0 +1,100 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: prometheus-es-exporter-es-creds
+    annotations:
+        kustomize.config.k8s.io/needs-hash: "true"
+stringData:
+    username: ENC[AES256_GCM,data:Ua2tZQEqb8HvkrWtSaGib8AfR8dK/F/4CM2l2EMS,iv:J2anzFsrd7FM5Iw/S2SheMLXJQoZJOp04dQ1SppaiJ0=,tag:gglQG8sfrY6UWrK64cPclQ==,type:str]
+    password: ENC[AES256_GCM,data:WF36V+YZpz9KYW4O7wt9d4fWO0jLrcxjPsOleffV7uz/DTY1/ZaW6g==,iv:rgg0SWIJISgBE/2OZsbzWVsWi+cnGvWv3PBpd7w/wlc=,tag:8OoR2zU5QLLuQcEVW3rpYQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2022-05-09T12:52:44Z"
+    mac: ENC[AES256_GCM,data:hG3pxha13XAVr323OK/kHY5/17oQdbzIDBUgCXZNwPjU9S4SJhvOJ/TfxDN4CF++rKmuxj+j/vb9PQwNkFPS/YvAE4iN6FnwOMT27kiYm8sDpUtu9vFYPWqaWW+wvQn1wv8qnYP8csKf2WJ9O9R068VhCCC0L3F4EdLuMRVhUP0=,iv:hgK1S1cPlhQxbGYDcrfKpdoDWkjSRywdPoM1CNnvs7M=,tag:yg1xQuplFik/SWDy7h98Xw==,type:str]
+    pgp:
+        - created_at: "2022-04-28T10:01:05Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA911WKxzIy2nARAArkkgv58Kpa9vu09oK1bWviB4WEs4a7KK/9nTvMLk+dz8
+            rJkmAKD88ToOUf07nJW10PPV/59kYWfvyZHMCsweQFopjU8x3PQoV+ugXyElLQGe
+            UuNrfhWjIEivFTxOTIPN/Q3Tr+KHH6/0MjfaqKpxBRXHVJniMMmamJXpftEThyDt
+            87EbXKXW/qMi9uHDSguBOBUubJD/l/efJIMmSN55jbVP4Q5hEwch6lbKoGiEq04p
+            o2YeFq0ij1c/kQdrt40zwW0t+4O6yyMEh5IW6IAFLojAS/PcLrfHABnXAnctn994
+            W/11YxQO5BmDfUVk8gKKZKevR7ObYfS/RqDdJl4yTfdufxRW27Qxg9P91YefYaJz
+            S8HKJ1bR50KxUOUBld4C5rjuRQSnj6Oe6r7nz5uboafgqpY0fw2cEtgTTe8w5+mC
+            DRS8eR2slWIayi3RK6LKP4iIahLE+0P3xnh0l0uk3eVRZNkCex9A0kku8N5uP5dN
+            GnipGOgx4IvjXGheaoJUmiILo2W2mizrKF1oUkOgXDbpWarPPXJ4wDpgsUjbGJD/
+            BVGy/0Tvi3d3F5GDGXb12qnbRGsuEseX9zHR4kSMsDxYP+/1e5dRhTLhlM2jRK2U
+            Q0juqW7QKGxo7kEnjuB6uest8nRjpeEQduJL5vT0vK7Qa7yueOYFmTkTnB//RWrS
+            XgG04H+BBPvXSPlrKBelyMY7AatL0yAS3KuHpxECZuldH0iKlctf5uisvWlMl13e
+            fDCL+OBhpDQHLJ+6VcLMzetFUjpHFviL3Pz7OCBQh4V3WvGXN/VHY7+N/KtucAQ=
+            =e4zn
+            -----END PGP MESSAGE-----
+          fp: E5B4FE1E0209DFFE320D2A2E47087747D89B72EC
+        - created_at: "2022-04-28T10:01:05Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA4Npij8bx0m7ARAAjXn9pJJHB/ab1jQKhIVrW5fmYGWjiYiHIOrgoXkkLpZt
+            SWml5c9v2nwjjdqmP6twmwanCVbdA5ideesci2oZCpHFdoo0iZCYGOp9gcCBNMsv
+            CIj8INR+nqgOT5u8AddH+BJPzwqepkaT56vKRLI85eS/txLCZkpHCzD65ePfGSyU
+            R0H1pwh9m8aewlqZAURJ3pQ2XgJsnaLl8s1+BzwQf7jDhNVtR3ZdBtcfjDocOfOD
+            JP2gJ1wNRH4BFocfFOLB0gcJK9zestWILwSedLK9b2sq+uuBzADDn5wS/+1eOQU2
+            1HO0ATqbWwS9Svk6QlCokxm9iu9ILJXviJnaRA9x9F/nM8Juek7NJWxNnsb1iz7f
+            v2Ho3wnqfphZCKF+/epAaqc5gdNiHPEpevEMLOc1mHn0KTqVtxQcq8vmJTqpyiBh
+            8y1qKFMbKAe71SBMhf/rNIOO5516ULbasL7h8i2c8Lpj6AkUs5JTnfKCK+wdVOLc
+            dH+zIrR6JixJmALTu9/LJB55Bs9ESO/qCbQiV4Kh1L/lkCwLRP4zf5ajRzfOH+n7
+            yI8cezr9PX6mvxFVBTJFviopQfp0GX0VcBjd+chMXj9zgrJ2tPo2z1BL3/wDdjvv
+            dIhTEZVkgEBj9e6nrwf61ovYHl0f3jOHGkpgjqjofL5Hn8vU1mVw8F2HqNe2z9jS
+            XgHuq4l4BvB4G9PeQEzVR69NjzdSm3lLaNzNmbAjZxVHxarpNXHxD6mU/TF0oZ5f
+            uIps9kA+vr4vyZ03ZL3H5AgD3z1nRXb/MZ5vGVl52fntQd7GD0xAKj1R+woWVDY=
+            =IevT
+            -----END PGP MESSAGE-----
+          fp: D65D400040387210377B6A71DFD775644EAAC77B
+        - created_at: "2022-04-28T10:01:05Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA+5f33GLJ89bAQ//SBb9LME9Rz6gxGsCJLAD0Mc8UIpwEvU0FVaomZe+5lRg
+            zcIlfbV3lm2t9a7kBQlsOJ2KknsraIEqgRsj7I3V8KOT40QLXlR3MAf52BsF8/LG
+            E60RqGnxOPRcgdSZST1ppikZV73gx2qNkxcai9fcJ9ezwAqxvrF1Do/qmBxK/TL9
+            vIRol4PERPf1iFxXf0hKMaGvsNsfZt/xcvi1GstShg0tNEpzM+Nr/i/pPanmGFoI
+            uZKkCAofqUnb1uytWcItcOJlXLc2DNgV7XJd6g+OGAPEL3Vrb/IQfbofdwS4lLVI
+            8lmihS8dS4vfuh3Odf+/ys6A+OZj7yhThdt+M54tJozrVDiaNETGHdAB+KoWsOj6
+            EGMr6/R18GYbPi6XykqDEFHaI31olZ1nCC6p+Fw0B+TC7XA0z+TaiW7AHgOM/ED1
+            p6lr89aI7NsT82AO0+XJLU+oIjWNepf/W9Y3ewpw2URXk2DfNeRxvCgtiVaOk98d
+            eq+PI9LDD/jtzKlKtOrZEYkxlp/VQUuHyACi/+OIsP86bpxHHNscMUm+UBxS0fow
+            zFj/Itrw55VaHWvPgs8VckQ5V/ktFIDExiGbGyGxzehVu7HCOR2uciELxEar3uUY
+            B5Slxnoeh8pKk6jL2WgB3Px2jeNPHtQQOilEZSeogrfhugYjWNogRjxUq/gUqUbS
+            XgFB0oOrTM/iIGM3FBv7C5kKIiL04v8HHuYkJkYDygLenf7wh+qI6ufH5x8xaUPS
+            8iz90QTj8nib042Rs1o2TVEuc3HmRH1pY8ZZBcb2ezPU+i2sIP9r5U4Qcod/Ih4=
+            =blRz
+            -----END PGP MESSAGE-----
+          fp: BE3FB94982C2DE95B1EDD388A96613A6B1DB15B5
+        - created_at: "2022-04-28T10:01:05Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA1kDHheI9SLWARAAv8ZERlfoG9AU6JIa+iMZMcUHFk7/sksH9QfSilWYUGnh
+            uhXaLOWd66JgiM9YJfMlcagbUn6KxEMAC9wlQmIJsDF1iTGx0WRBgIJs8t0VvHGV
+            EXasNHu+k3sMisGcuesavfzWzm+fw5YKLVk6CNwN31sXidUstwhuwrl77nT57lVE
+            6OF//gWVqKhGwkTO62N5kGLj77Tu+Irxmgyf7V6k9uEhbcydLEgQl87k0kw3R/1G
+            OcB9cQ2GEXOKS9o6nilkGOo2pK65hLF7rvrfsA4WzUtaSu0jcDjc1zPfUMpSFpVP
+            +PkldOjnkdXIfMSo5g8IWzv5gqfCofZdB+gPA1P7zd1BekuGIUEY9jyZwFVVZeTG
+            VDMNUxCrbdLq05IwlZ5AL9CfjQg+AemJbA94DboDguo6f04vYCXjY1bjsS4q7Fum
+            d/tdK031oLmK1v/epG/VSOCVhXoiboja1nOcFkshB12T/QSpBwPqDpKueurKx6xk
+            EOmfeAgejfBydiIwAZ6uHCISw6K0gKhrd8YlZFaX+zLESM4Nqts8c7dc9aQ/kTtX
+            t9olsouZC7dyovhG+qwGj0sTP682wsVpS3PuogWM+op6zGPnbzupW6I2+frLxetc
+            DBn1LKeSBfmgnq65Ex49e9wK1nj/081iarrOYXrQ0g7urQ0r+djkjtlytoie1a7S
+            XgFDPzoSAxk15WRkUPumMdGJF8Xgh5qh4cdWd7sW/W6c3lRJcSMwUcPAvOh4QFyR
+            Go02fcCdPGZ2VlwFW8nP2zgeaKLwDZgcZMlmZsPWW37oXzcRtcgRTd6qaeDpaDs=
+            =KjmP
+            -----END PGP MESSAGE-----
+          fp: 17B8FDF68AC123EB666934B17D0DF6EC048A5D77
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1
--- a/kustomize/qa/files/es_ca.crt
+++ b/kustomize/qa/files/es_ca.crt
@ -1,20 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIIDSjCCAjKgAwIBAgIVAK/gaXE2s5mizj4wE7jYSkq4vNAXMA0GCSqGSIb3DQEB
+MIIDSjCCAjKgAwIBAgIVAN2f+53DE9hF92POfZSG6CBQLqhAMA0GCSqGSIb3DQEB
 CwUAMDQxMjAwBgNVBAMTKUVsYXN0aWMgQ2VydGlmaWNhdGUgVG9vbCBBdXRvZ2Vu
-ZXJhdGVkIENBMB4XDTIxMDkwMzA5MTQ1M1oXDTIyMDkwMzA5MTQ1M1owNDEyMDAG
+ZXJhdGVkIENBMB4XDTIyMDYxMzE2NDkxNloXDTI1MDYxMjE2NDkxNlowNDEyMDAG
 A1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5lcmF0ZWQgQ0Ew
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3AaeHu6vBVuXQAsszEHP
-B7x5fjX/ZmR79+4cKvOEv/Qbl/YSuWsq9ogmsL046Vnk94QXZ7Y0zhaZDZ/Ude4C
-YxAmc7oFq7XAkZX2LJxbp2f2tXMayCdEgPStfLDE1Ej1TBNDKZXD5oivVenNKjAv
-SwCXOPKMmLACgLzG+H/Jea/GmNOT3IW0u8/n1gtedlsrRCpLvbf8hs49cCM5Rp43
-BIQZEbmo9sRZEBZ75v4tFI5O0HBMBxkhRn15f7A/fBvXQYNUZ0l1vETH5+M8alU3
-ZxYy3V4MNeWdoCeUtqRyiIhjfdLQLrt2lISNLUBuBuSDv5QZGPD7k4gU1oT7q72j
-AgMBAAGjUzBRMB0GA1UdDgQWBBRq3NHq/0ICP9pOHDN9fhYhV26eCjAfBgNVHSME
-GDAWgBRq3NHq/0ICP9pOHDN9fhYhV26eCjAPBgNVHRMBAf8EBTADAQH/MA0GCSqG
-SIb3DQEBCwUAA4IBAQAIu6kkIu+V2WqyZqbSw0eUYtdNXxlfDMwxHWsdWgslT+Ri
-nEfp3YqmD9nqZ0Wxu/aieWjnVm3hW7HlphAC+60+WXU95rR+I5SOP/Z0h4UPnJx+
-6ZBQpKOUw0cZQYsdMlXSkuGcO7dPA89a+oVXDtfhK05G62tBKZ0ru7mRfKPQ1Oa3
-wQyHJRMyFO3y8PvKHd4lFL38P1ZCPm30XqXeHmNDdVBMOEL1AcknFDbs3gg18Myt
-fnE/knah8oRfyzfPOd9XUJgVzzwBnJt19JUkWNHrc2hXRj9DQyluPt22HFRmGy0t
-cFRFLbpKoGhWs1Y51E92YnXcsH7mahJtbajpSXXs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 -----END CERTIFICATE-----