Add digital signature to test key usage; 2048 bit

Digital signature key usage is required for the key to be used for (EC)DHE.

PUBLISHED_FROM=b33366d484aff2c478b2f44b85dba33d04d3a808

examples/simplest_web_server_ssl/server.pem

@@ -1,73 +1,77 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 1 (0x1)
+        Serial Number: 4 (0x4)
     Signature Algorithm: sha256WithRSAEncryption
-        Issuer: CN=localhost, O=Cesanta, OU=Testing
+        Issuer: CN=test.cesanta.com, O=Cesanta, OU=testing
         Validity
-            Not Before: Aug 22 12:34:04 2016 GMT
-            Not After : Aug 22 12:34:04 2026 GMT
-        Subject: CN=localhost, O=Cesanta, OU=Testing
+            Not Before: Nov 13 13:18:01 2016 GMT
+            Not After : Aug 13 13:18:01 2026 GMT
+        Subject: CN=localhost
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:cc:19:f4:cb:58:cc:5d:8c:53:58:2a:43:99:7e:
-                    0e:22:cc:52:0b:b0:e4:8b:4f:77:3f:51:0e:98:b7:
-                    01:27:98:a2:8d:10:d3:c5:7b:38:7c:b3:03:e5:a3:
-                    99:28:96:91:14:b3:d2:83:c9:53:93:8a:76:e3:8b:
-                    9d:98:f0:cd:e0:45:e7:f7:0d:22:b7:a5:c2:1a:57:
-                    bd:28:54:75:6c:cc:16:28:39:8c:cc:ab:1a:b6:84:
-                    a4:93:5a:14:ff:ce:a6:45:e8:2c:99:ec:32:b0:6c:
-                    80:13:90:31:08:30:7a:fc:16:47:73:7b:9b:84:47:
-                    89:ff:a5:ea:d7:94:ce:cd:f5:fe:fe:d3:26:b6:c3:
-                    e8:39:23:0e:1c:47:4f:04:e8:cf:68:9c:7e:53:a1:
-                    20:72:51:3f:86:17:5d:95:c6:66:80:03:62:ed:ad:
-                    65:65:ed:57:84:15:e3:79:d2:e7:18:85:50:c2:64:
-                    c6:03:cc:ab:73:71:6b:fd:2f:dc:3d:b3:25:d9:ec:
-                    b9:52:f3:45:c5:b3:d0:1c:9e:21:8d:e9:f6:a0:4d:
-                    06:55:66:73:70:b1:91:33:ff:5c:95:4f:ab:88:b8:
-                    f7:ce:96:c9:1c:97:79:55:15:3a:f0:e7:9c:83:6b:
-                    3c:c5:d1:a7:1c:cc:90:03:25:db:96:1d:55:55:5b:
-                    48:3d
+                    00:ae:8f:02:5b:55:f4:c5:a1:a6:1a:40:da:33:12:
+                    9b:5d:60:39:2f:0f:ac:78:0e:b5:b6:2a:06:ad:22:
+                    10:ce:ea:8b:61:e2:68:16:7c:15:80:5d:23:07:93:
+                    d3:8f:ed:c4:88:63:01:70:0f:e6:87:bd:d5:02:d8:
+                    53:16:62:41:c6:3f:9a:80:8a:7b:fd:cb:d4:06:98:
+                    1f:2c:29:66:49:82:f6:7d:98:ba:16:87:73:f9:ff:
+                    66:72:bc:b7:5d:1c:3b:3b:ab:e5:6a:6b:56:7d:35:
+                    fc:4c:09:8c:49:1e:8f:5d:50:47:2e:08:ec:e6:90:
+                    ce:14:59:ab:34:0b:0c:e6:c2:d8:53:5f:f5:30:5b:
+                    c4:d9:9f:48:9d:32:39:1b:8d:fb:20:4d:56:72:14:
+                    52:6e:96:1d:1d:c8:42:df:d5:f3:a4:31:a8:22:76:
+                    41:d5:ad:ce:85:c1:e6:fb:15:2d:2e:93:09:d0:6d:
+                    28:13:95:45:13:29:d9:ad:e6:68:10:86:38:27:1b:
+                    29:43:b2:cf:b1:ac:bd:7f:1d:d3:96:4d:3d:80:43:
+                    10:81:50:9e:08:d8:90:c1:4c:59:76:d2:da:bb:6c:
+                    7a:d4:b3:5c:75:90:8a:37:b1:5b:14:b2:6c:ce:fd:
+                    54:da:e8:2e:10:bb:13:9a:2e:c4:ea:91:eb:4f:38:
+                    a8:b1
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
             X509v3 Key Usage: 
-                Key Encipherment, Key Agreement
+                Digital Signature, Key Encipherment, Key Agreement
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication
             X509v3 Subject Alternative Name: 
                 IP Address:127.0.0.1
     Signature Algorithm: sha256WithRSAEncryption
-         17:13:f8:8a:b5:ff:5a:73:de:5c:e7:a4:8c:b0:df:75:13:82:
-         92:69:61:17:c5:d5:83:35:cc:5b:8f:8f:97:e0:ee:1f:6e:1a:
-         96:59:a2:66:7b:50:c1:23:f0:72:89:c9:8f:b7:ab:34:62:fb:
-         5e:c2:8a:00:d6:29:99:f3:91:0f:18:e3:64:da:c2:f9:de:5a:
-         a0:08:a9:81:df:6c:05:61:5d:0c:84:0a:4c:f5:f7:0b:e0:81:
-         56:7b:46:a1:b5:d6:9b:72:70:83:75:74:06:97:6c:ce:77:a6:
-         96:98:f3:d4:99:41:53:74:be:65:3a:16:5f:bf:0e:10:0c:2b:
-         88:a8:b2:f0:15:5a:84:05:23:bf:c9:0a:c3:56:1c:5a:1f:8d:
-         4b:bc:14:67:05:6d:0e:2b:51:82:03:8c:18:41:93:5e:84:5f:
-         2c:05:11:c2:5c:0a:c3:3f:9d:b1:6e:3a:f2:d9:05:54:97:fc:
-         cf:cd:55:14:19:42:f7:29:67:5d:8e:ac:c2:7a:ff:b7:08:3b:
-         eb:68:39:37:d3:2b:e5:b8:08:05:88:e7:b6:30:94:7e:0a:87:
-         46:0c:90:d2:40:18:0c:41:5d:f2:85:a7:f4:be:2a:d4:c5:c5:
-         93:a8:89:c7:0e:87:8b:1c:04:e0:ae:ab:25:70:f2:c9:28:a9:
-         59:f6:32:78
+         54:c3:48:5b:4d:c4:fa:72:bc:ce:0c:ee:10:01:75:3b:cf:85:
+         f1:9f:42:e4:c5:b5:c4:b2:84:e1:1b:54:02:56:03:1c:e0:18:
+         69:c7:c8:32:cf:90:8b:c8:76:33:02:22:4e:04:51:1e:57:45:
+         c4:aa:81:93:34:c3:05:7a:54:77:43:94:e0:f7:2d:53:60:ed:
+         ea:c3:00:16:c5:ee:bf:6e:b5:73:a6:db:3a:36:21:b5:b8:43:
+         01:9c:11:60:a0:dd:71:dc:8f:71:e0:da:4e:c5:4e:4c:53:57:
+         65:23:1b:ca:b3:91:d0:0a:83:49:f0:3d:12:a8:e5:fd:05:5f:
+         e9:66:ac:04:82:20:9b:b9:60:d6:40:09:71:90:5a:67:88:ba:
+         27:96:45:48:e6:14:ee:c9:b0:92:06:c6:bd:14:42:3d:33:a2:
+         49:9f:d2:d9:9a:51:fd:d0:56:07:79:2e:2d:e8:ff:1e:38:90:
+         9e:7a:41:cb:d2:35:06:e0:86:9e:0c:c3:f5:da:1f:12:77:4c:
+         b1:20:a9:a6:67:e4:3f:a7:f0:ff:06:4b:87:7f:92:1d:bf:78:
+         60:c8:b9:19:e2:63:73:9e:32:b8:f7:01:da:60:cf:81:80:1a:
+         0b:dd:97:a0:80:9d:ac:5a:35:25:a2:4a:db:1e:cc:12:04:b2:
+         db:50:92:05
 -----BEGIN CERTIFICATE-----
-MIIDCzCCAfOgAwIBAgIBATANBgkqhkiG9w0BAQsFADA4MRIwEAYDVQQDDAlsb2Nh
-bGhvc3QxEDAOBgNVBAoMB0Nlc2FudGExEDAOBgNVBAsMB1Rlc3RpbmcwHhcNMTYw
-ODIyMTIzNDA0WhcNMjYwODIyMTIzNDA0WjA4MRIwEAYDVQQDDAlsb2NhbGhvc3Qx
-EDAOBgNVBAoMB0Nlc2FudGExEDAOBgNVBAsMB1Rlc3RpbmcwggEiMA0GCSqGSIb3
-DQEBAQUAA4IBDwAwggEKAoIBAQDMGfTLWMxdjFNYKkOZfg4izFILsOSLT3c/UQ6Y
-twEnmKKNENPFezh8swPlo5kolpEUs9KDyVOTinbji52Y8M3gRef3DSK3pcIaV70o
-VHVszBYoOYzMqxq2hKSTWhT/zqZF6CyZ7DKwbIATkDEIMHr8Fkdze5uER4n/perX
-lM7N9f7+0ya2w+g5Iw4cR08E6M9onH5ToSByUT+GF12VxmaAA2LtrWVl7VeEFeN5
-0ucYhVDCZMYDzKtzcWv9L9w9syXZ7LlS80XFs9AcniGN6fagTQZVZnNwsZEz/1yV
-T6uIuPfOlskcl3lVFTrw55yDazzF0acczJADJduWHVVVW0g9AgMBAAGjIDAeMAsG
-A1UdDwQEAwIDKDAPBgNVHREECDAGhwR/AAABMA0GCSqGSIb3DQEBCwUAA4IBAQAX
-E/iKtf9ac95c56SMsN91E4KSaWEXxdWDNcxbj4+X4O4fbhqWWaJme1DBI/ByicmP
-t6s0YvtewooA1imZ85EPGONk2sL53lqgCKmB32wFYV0MhApM9fcL4IFWe0ahtdab
-cnCDdXQGl2zOd6aWmPPUmUFTdL5lOhZfvw4QDCuIqLLwFVqEBSO/yQrDVhxaH41L
-vBRnBW0OK1GCA4wYQZNehF8sBRHCXArDP52xbjry2QVUl/zPzVUUGUL3KWddjqzC
-ev+3CDvraDk30yvluAgFiOe2MJR+CodGDJDSQBgMQV3yhaf0virUxcWTqInHDoeL
-HATgrqslcPLJKKlZ9jJ4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 -----END CERTIFICATE-----