search

quarkusio / quarkus

Quarkus: Supersonic Subatomic Java.
https://quarkus.io
Apache License 2.0
13.82k stars 2.69k forks source link

JVM based containers lack SSL support #5848

Closed misl closed 4 years ago

misl commented 4 years ago

Describe the bug Using Vert.X based Web Clients HTTPS requests results in NoClassDefFoundError errors. See log below. Seems like the image is missing some required dependencies.

Expected behavior Using mvn quarkus:dev works just fine.

To Reproduce

  1. Build Vert.X quickstart
  2. Create Docker image 
    docker build -f src/main/docker/Dockerfile.jvm -t quarkus/using-vertx-jvm .
  3. Run quickstart in a container 
    docker run -i --rm -p 8080:8080 quarkus/using-vertx-jvm
  4. Send the following request: 
    curl localhost:8080/swapi/1

Log output

$ docker run -i --rm -p 8080:8080 quarkus/using-vertx-jvm
exec java -Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager -javaagent:/opt/agent-bond/agent-bond.jar=jmx_exporter{{9779:/opt/agent-bond/jmx_exporter_config.yml}} -XX:+UseParallelGC -XX:GCTimeRatio=4 -XX:AdaptiveSizePolicyWeight=90 -XX:MinHeapFreeRatio=20 -XX:MaxHeapFreeRatio=40 -XX:+ExitOnOutOfMemoryError -cp . -jar /deployments/app.jar
2019-11-28 18:27:37,541 INFO  [io.quarkus] (main) vertx-quickstart 1.0-SNAPSHOT (running on Quarkus 1.0.1.Final) started in 1.256s. Listening on: http://0.0.0.0:8080
2019-11-28 18:27:37,603 INFO  [io.quarkus] (main) Profile prod activated. 
2019-11-28 18:27:37,603 INFO  [io.quarkus] (main) Installed features: [cdi, reactive-pg-client, resteasy, resteasy-jsonb, smallrye-context-propagation, smallrye-reactive-streams-operators, vertx]
2019-11-28 18:28:51,816 ERROR [io.qua.ver.htt.run.QuarkusErrorHandler] (vert.x-worker-thread-0) HTTP Request to /swapi/1 failed, error id: fe997887-476f-4a1e-9fe6-4838f3ecedb6-1: java.lang.NoClassDefFoundError: Could not initialize class sun.security.ssl.SSLSessionImpl
    at sun.security.ssl.SSLEngineImpl.init(SSLEngineImpl.java:364)
    at sun.security.ssl.SSLEngineImpl.<init>(SSLEngineImpl.java:344)
    at sun.security.ssl.SSLContextImpl$AbstractTLSContext.createSSLEngineImpl(SSLContextImpl.java:557)
    at sun.security.ssl.SSLContextImpl.engineCreateSSLEngine(SSLContextImpl.java:199)
    ...
jaikiran commented 4 years ago

Is that the complete stacktrace? If not, can you please post the complete one?

misl commented 4 years ago

Complete stacktrace:

2019-11-29 10:54:35,396 ERROR [io.qua.ver.htt.run.QuarkusErrorHandler] (vert.x-worker-thread-0) HTTP Request to /swapi/1 failed, error id: 1d0d9cc6-85f9-45bf-9d4a-39a5e279ad01-1: java.lang.NoClassDefFoundError: Could not initialize class sun.security.ssl.SSLSessionImpl
    at sun.security.ssl.SSLEngineImpl.init(SSLEngineImpl.java:364)
    at sun.security.ssl.SSLEngineImpl.<init>(SSLEngineImpl.java:344)
    at sun.security.ssl.SSLContextImpl$AbstractTLSContext.createSSLEngineImpl(SSLContextImpl.java:557)
    at sun.security.ssl.SSLContextImpl.engineCreateSSLEngine(SSLContextImpl.java:199)
    at javax.net.ssl.SSLContext.createSSLEngine(SSLContext.java:329)
    at io.netty.handler.ssl.JdkSslContext.<clinit>(JdkSslContext.java:81)
    at io.netty.handler.ssl.SslContext.newClientContextInternal(SslContext.java:818)
    at io.netty.handler.ssl.SslContextBuilder.build(SslContextBuilder.java:462)
    at io.vertx.core.net.impl.SSLHelper.createContext(SSLHelper.java:294)
    at io.vertx.core.net.impl.SSLHelper.getContext(SSLHelper.java:478)
    at io.vertx.core.net.impl.SSLHelper.validate(SSLHelper.java:503)
    at io.vertx.core.http.impl.HttpClientImpl.<init>(HttpClientImpl.java:133)
    at io.vertx.core.impl.VertxImpl.createHttpClient(VertxImpl.java:317)
    at io.vertx.ext.web.client.WebClient.create(WebClient.java:67)
    at io.vertx.axle.ext.web.client.WebClient.create(WebClient.java:105)
    at org.acme.vertx.ResourceUsingWebClient.initialize(ResourceUsingWebClient.java:31)
    at org.acme.vertx.ResourceUsingWebClient_Bean.create(ResourceUsingWebClient_Bean.zig:224)
    at org.acme.vertx.ResourceUsingWebClient_Bean.create(ResourceUsingWebClient_Bean.zig:29)
    at io.quarkus.arc.impl.AbstractSharedContext.createInstanceHandle(AbstractSharedContext.java:80)
    at io.quarkus.arc.impl.ComputingCache$CacheFunction.lambda$apply$0(ComputingCache.java:99)
    at io.quarkus.arc.impl.LazyValue.get(LazyValue.java:26)
    at io.quarkus.arc.impl.ComputingCache.getValue(ComputingCache.java:41)
    at io.quarkus.arc.impl.AbstractSharedContext.get(AbstractSharedContext.java:25)
    at org.acme.vertx.ResourceUsingWebClient_Bean.get(ResourceUsingWebClient_Bean.zig:257)
    at org.acme.vertx.ResourceUsingWebClient_Bean.get(ResourceUsingWebClient_Bean.zig:273)
    at io.quarkus.arc.impl.ArcContainerImpl.beanInstanceHandle(ArcContainerImpl.java:355)
    at io.quarkus.arc.impl.ArcContainerImpl.beanInstanceHandle(ArcContainerImpl.java:367)
    at io.quarkus.arc.impl.ArcContainerImpl$1.get(ArcContainerImpl.java:222)
    at io.quarkus.arc.impl.ArcContainerImpl$1.get(ArcContainerImpl.java:219)
    at io.quarkus.arc.runtime.ArcRecorder$2$1.create(ArcRecorder.java:79)
    at io.quarkus.resteasy.common.runtime.QuarkusConstructorInjector.construct(QuarkusConstructorInjector.java:56)
    at org.jboss.resteasy.plugins.server.resourcefactory.POJOResourceFactory.createResource(POJOResourceFactory.java:69)
    at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:364)
    at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:477)
    at org.jboss.resteasy.core.SynchronousDispatcher.lambda$invoke$4(SynchronousDispatcher.java:252)
    at org.jboss.resteasy.core.SynchronousDispatcher.lambda$preprocess$0(SynchronousDispatcher.java:153)
    at org.jboss.resteasy.core.interception.jaxrs.PreMatchContainerRequestContext.filter(PreMatchContainerRequestContext.java:363)
    at org.jboss.resteasy.core.SynchronousDispatcher.preprocess(SynchronousDispatcher.java:156)
    at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:238)
    at io.quarkus.resteasy.runtime.standalone.RequestDispatcher.service(RequestDispatcher.java:73)
    at io.quarkus.resteasy.runtime.standalone.VertxRequestHandler.dispatch(VertxRequestHandler.java:118)
    at io.quarkus.resteasy.runtime.standalone.VertxRequestHandler.lambda$handle$0(VertxRequestHandler.java:74)
    at io.vertx.core.impl.ContextImpl.lambda$executeBlocking$2(ContextImpl.java:316)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
    at java.lang.Thread.run(Thread.java:748)
misl commented 4 years ago

Using the native image has SSL related issues as well, but a different stack trace. Should I create a separate issue for that or post it here?

geoand commented 4 years ago

@cescoffier @gsmet does this ring a bell?

jaikiran commented 4 years ago

Hello @misl, the reason I asked for the stacktrace is because I haven't been able to reproduce this with the same quickstart. Given that this all runs in a container, it's odd that you are seeing this exception.

Which Java vendor and version did you use while building the application jar itself (through mvn package)? Are you sure it was Java 8 (the container uses Java 8 runtime)?

cescoffier commented 4 years ago

I'm going to try later today... Why I have the feeling it's because of certs location.

cescoffier commented 4 years ago

I was unable to reproduce it in JVM mode (JVM in docker with the given docker file).

I had issues in native (in Docker again):

Caused by: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
        at sun.security.validator.PKIXValidator.<init>(PKIXValidator.java:91)
        at sun.security.validator.Validator.getInstance(Validator.java:181)
        at sun.security.ssl.X509TrustManagerImpl.getValidator(X509TrustManagerImpl.java:318)
        at sun.security.ssl.X509TrustManagerImpl.checkTrustedInit(X509TrustManagerImpl.java:179)
        at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:248)
        at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:144)
        at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1626)
        at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:223)
        at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037)
        at sun.security.ssl.Handshaker$1.run(Handshaker.java:970)
        at sun.security.ssl.Handshaker$1.run(Handshaker.java:967)
        at java.security.AccessController.doPrivileged(AccessController.java:104)
        at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:1459)
        at io.netty.handler.ssl.SslHandler.runAllDelegatedTasks(SslHandler.java:1499)
        at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1513)
        at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1397)
        ... 23 more
Caused by: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
        at java.security.cert.PKIXParameters.setTrustAnchors(PKIXParameters.java:200)
        at java.security.cert.PKIXParameters.<init>(PKIXParameters.java:120)
        at java.security.cert.PKIXBuilderParameters.<init>(PKIXBuilderParameters.java:104)
        at sun.security.validator.PKIXValidator.<init>(PKIXValidator.java:89)
        ... 38 more

The work-around is to use a multi-stage docker file as follows:

FROM quay.io/quarkus/ubi-quarkus-native-image:19.2.1 as nativebuilder
RUN mkdir -p /tmp/ssl-libs/lib \
  && cp /opt/graalvm/jre/lib/security/cacerts /tmp/ssl-libs \
  && cp /opt/graalvm/jre/lib/amd64/libsunec.so /tmp/ssl-libs/lib/

FROM registry.access.redhat.com/ubi8/ubi-minimal
WORKDIR /work/
COPY target/*-runner /work/application
COPY --from=nativebuilder /tmp/ssl-libs/ /work/
RUN cp /work/lib/libsunec.so /work
RUN chmod 775 /work
EXPOSE 8080
CMD ["./application", "-Dquarkus.http.host=0.0.0.0", "-Djavax.net.ssl.trustStore=/work/cacerts"]

Basically, it copies the trust store and suncec from another similar linux image. For now, the sunec must be in the application directory, it should not be the case, I'm investigating this part.

misl commented 4 years ago

Ah, I compiling with Java 11 with source and target 8. I will retry with Java 8.

I agree multi stage will be better. As like this building can be done completely isolated from the host environment.

misl commented 4 years ago

Tried with Java 8, but same result:

misl@system76:~/Dev/github/minto/quarkus-quickstarts/vertx-quickstart$ mvn --version
Apache Maven 3.6.0 (97c98ec64a1fdfee7767ce5ffb20918da4f719f3; 2018-10-24T20:41:47+02:00)
Maven home: /opt/apache-maven-3.6.0
Java version: 1.8.0_222, vendor: Private Build, runtime: /usr/lib/jvm/java-8-openjdk-amd64/jre
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "5.0.0-36-generic", arch: "amd64", family: "unix"

misl@system76:~/Dev/github/minto/quarkus-quickstarts/vertx-quickstart$ mvn clean install
[INFO] Scanning for projects...
[INFO] 
[INFO] ---------------------< org.acme:vertx-quickstart >----------------------
[INFO] Building vertx-quickstart 1.0-SNAPSHOT
[INFO] --------------------------------[ jar ]---------------------------------
[INFO] 
[INFO] --- maven-clean-plugin:2.5:clean (default-clean) @ vertx-quickstart ---
[INFO] Deleting /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/target
[INFO] 
[INFO] --- maven-resources-plugin:2.6:resources (default-resources) @ vertx-quickstart ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 5 resources
[INFO] 
[INFO] --- maven-compiler-plugin:3.8.1:compile (default-compile) @ vertx-quickstart ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 8 source files to /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/target/classes
[INFO] /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/src/main/java/org/acme/vertx/EventResource.java: /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/src/main/java/org/acme/vertx/EventResource.java uses or overrides a deprecated API.
[INFO] /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/src/main/java/org/acme/vertx/EventResource.java: Recompile with -Xlint:deprecation for details.
[INFO] 
[INFO] --- maven-resources-plugin:2.6:testResources (default-testResources) @ vertx-quickstart ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/src/test/resources
[INFO] 
[INFO] --- maven-compiler-plugin:3.8.1:testCompile (default-testCompile) @ vertx-quickstart ---
[INFO] Changes detected - recompiling the module!
[INFO] Compiling 10 source files to /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/target/test-classes
[INFO] 
[INFO] --- docker-maven-plugin:0.28.0:stop (docker-start) @ vertx-quickstart ---
[INFO] DOCKER> [postgres:10.5] "postgresql": Stop and removed container c80e70ea0902 after 0 ms
[INFO] 
[INFO] --- docker-maven-plugin:0.28.0:start (docker-start) @ vertx-quickstart ---
[INFO] DOCKER> [postgres:10.5] "postgresql": Start container 218d18b5ed31
[INFO] DOCKER> [postgres:10.5] "postgresql": Waiting for mapped ports [5432] on host localhost
[INFO] DOCKER> [postgres:10.5] "postgresql": Waited on tcp port '[localhost/127.0.0.1:5432]' 5 ms
[INFO] 
[INFO] --- maven-surefire-plugin:2.22.1:test (default-test) @ vertx-quickstart ---
15:52:12.408 PostgreSQL:The files belonging to this database system will be owned by user "postgres".
15:52:12.408 PostgreSQL:This user must also own the server process.
15:52:12.408 PostgreSQL:
15:52:12.408 PostgreSQL:The database cluster will be initialized with locale "en_US.utf8".
15:52:12.408 PostgreSQL:The default database encoding has accordingly been set to "UTF8".
15:52:12.408 PostgreSQL:The default text search configuration will be set to "english".
15:52:12.408 PostgreSQL:
15:52:12.408 PostgreSQL:Data page checksums are disabled.
15:52:12.408 PostgreSQL:
15:52:12.409 PostgreSQL:fixing permissions on existing directory /var/lib/postgresql/data ... ok
15:52:12.409 PostgreSQL:creating subdirectories ... ok
15:52:12.426 PostgreSQL:selecting default max_connections ... 100
15:52:12.457 PostgreSQL:selecting default shared_buffers ... 128MB
15:52:12.457 PostgreSQL:selecting dynamic shared memory implementation ... posix
[INFO] 
[INFO] -------------------------------------------------------
[INFO]  T E S T S
[INFO] -------------------------------------------------------
15:52:13.339 PostgreSQL:creating configuration files ... ok
15:52:13.555 PostgreSQL:running bootstrap script ... ok
[INFO] Running org.acme.vertx.ResourceUsingWebClientTest
15:52:14.211 PostgreSQL:performing post-bootstrap initialization ... ok
15:52:14.337 PostgreSQL:syncing data to disk ... ok
15:52:14.337 PostgreSQL:
15:52:14.337 PostgreSQL:Success. You can now start the database server using:
15:52:14.337 PostgreSQL:
15:52:14.337 PostgreSQL:    pg_ctl -D /var/lib/postgresql/data -l logfile start
15:52:14.337 PostgreSQL:
15:52:14.337 PostgreSQL:
15:52:14.337 PostgreSQL:WARNING: enabling "trust" authentication for local connections
15:52:14.337 PostgreSQL:You can change this by editing pg_hba.conf or using the option -A, or
15:52:14.337 PostgreSQL:--auth-local and --auth-host, the next time you run initdb.
15:52:14.377 PostgreSQL:waiting for server to start....2019-11-29 14:52:14.377 UTC [44] LOG:  listening on Unix socket "/var/run/postgresql/.s.PGSQL.5432"
15:52:14.404 PostgreSQL:2019-11-29 14:52:14.404 UTC [45] LOG:  database system was shut down at 2019-11-29 14:52:14 UTC
15:52:14.413 PostgreSQL:2019-11-29 14:52:14.413 UTC [44] LOG:  database system is ready to accept connections
15:52:14.457 PostgreSQL: done
15:52:14.457 PostgreSQL:server started
15:52:14.790 PostgreSQL:CREATE DATABASE
15:52:14.792 PostgreSQL:
15:52:14.792 PostgreSQL:
15:52:14.792 PostgreSQL:/usr/local/bin/docker-entrypoint.sh: ignoring /docker-entrypoint-initdb.d/*
15:52:14.792 PostgreSQL:
15:52:14.795 PostgreSQL:waiting for server to shut down....2019-11-29 14:52:14.793 UTC [44] LOG:  received fast shutdown request
15:52:14.802 PostgreSQL:2019-11-29 14:52:14.799 UTC [44] LOG:  aborting any active transactions
15:52:14.802 PostgreSQL:2019-11-29 14:52:14.802 UTC [44] LOG:  worker process: logical replication launcher (PID 51) exited with exit code 1
15:52:14.803 PostgreSQL:2019-11-29 14:52:14.802 UTC [46] LOG:  shutting down
15:52:14.832 PostgreSQL:2019-11-29 14:52:14.831 UTC [44] LOG:  database system is shut down
15:52:14.893 PostgreSQL: done
15:52:14.894 PostgreSQL:server stopped
15:52:14.897 PostgreSQL:
15:52:14.897 PostgreSQL:PostgreSQL init process complete; ready for start up.
15:52:14.897 PostgreSQL:
15:52:14.916 PostgreSQL:2019-11-29 14:52:14.916 UTC [1] LOG:  listening on IPv4 address "0.0.0.0", port 5432
15:52:14.916 PostgreSQL:2019-11-29 14:52:14.916 UTC [1] LOG:  listening on IPv6 address "::", port 5432
15:52:14.933 PostgreSQL:2019-11-29 14:52:14.933 UTC [1] LOG:  listening on Unix socket "/var/run/postgresql/.s.PGSQL.5432"
15:52:14.960 PostgreSQL:2019-11-29 14:52:14.960 UTC [62] LOG:  database system was shut down at 2019-11-29 14:52:14 UTC
15:52:14.971 PostgreSQL:2019-11-29 14:52:14.971 UTC [1] LOG:  database system is ready to accept connections
2019-11-29 15:52:16,780 WARN  [io.qua.dep.ste.ReflectiveHierarchyStep] (build-12) Unable to properly register the hierarchy of the following classes for reflection as they are not in the Jandex index:
    - io.vertx.core.json.JsonObject
    - javax.ws.rs.core.Response
    - org.reactivestreams.Publisher
Consider adding them to the index either by creating a Jandex index for your dependency via the Maven plugin, an empty META-INF/beans.xml or quarkus.index-dependency properties.");.
2019-11-29 15:52:18,025 INFO  [io.quarkus] (main) Quarkus 1.0.1.Final started in 0.836s. Listening on: http://0.0.0.0:8081
2019-11-29 15:52:18,026 INFO  [io.quarkus] (main) Profile test activated. 
2019-11-29 15:52:18,026 INFO  [io.quarkus] (main) Installed features: [cdi, reactive-pg-client, resteasy, resteasy-jsonb, smallrye-context-propagation, smallrye-reactive-streams-operators, vertx]
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 6.533 s - in org.acme.vertx.ResourceUsingWebClientTest
[INFO] Running org.acme.vertx.JsonEndpointTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.362 s - in org.acme.vertx.JsonEndpointTest
[INFO] Running org.acme.vertx.EventResourceTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.032 s - in org.acme.vertx.EventResourceTest
[INFO] Running org.acme.vertx.GreetingResourceTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.025 s - in org.acme.vertx.GreetingResourceTest
[INFO] Running org.acme.vertx.FruitsEndpointTest
2019-11-29 15:52:21,326 WARNING [io.ver.sql.imp.SocketConnectionBase] (vert.x-eventloop-thread-8) Backend notice: severity='NOTICE', code='00000', message='table "fruits" does not exist, skipping', detail='null', hint='null', position='null', internalPosition='null', internalQuery='null', where='null', file='tablecmds.c', line='914', routine='DropErrorMsgNonExistent', schema='null', table='null', column='null', dataType='null', constraint='null'
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.232 s - in org.acme.vertx.FruitsEndpointTest
2019-11-29 15:52:21,542 INFO  [io.quarkus] (main) Quarkus stopped in 0.037s
[INFO] 
[INFO] Results:
[INFO] 
[INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0
[INFO] 
[INFO] 
[INFO] --- maven-jar-plugin:2.4:jar (default-jar) @ vertx-quickstart ---
[INFO] Building jar: /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/target/vertx-quickstart-1.0-SNAPSHOT.jar
[INFO] 
[INFO] --- quarkus-maven-plugin:1.0.1.Final:build (default) @ vertx-quickstart ---
[INFO] [org.jboss.threads] JBoss Threads version 3.0.0.Final
[WARNING] [io.quarkus.deployment.steps.ReflectiveHierarchyStep] Unable to properly register the hierarchy of the following classes for reflection as they are not in the Jandex index:
    - io.vertx.core.json.JsonObject
    - javax.ws.rs.core.Response
    - org.reactivestreams.Publisher
Consider adding them to the index either by creating a Jandex index for your dependency via the Maven plugin, an empty META-INF/beans.xml or quarkus.index-dependency properties.");.
[INFO] [io.quarkus.deployment.pkg.steps.JarResultBuildStep] Building thin jar: /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/target/vertx-quickstart-1.0-SNAPSHOT-runner.jar
[INFO] [io.quarkus.deployment.QuarkusAugmentor] Quarkus augmentation completed in 1400ms
[INFO] 
[INFO] --- docker-maven-plugin:0.28.0:stop (docker-stop) @ vertx-quickstart ---
15:52:24.224 PostgreSQL:2019-11-29 14:52:24.224 UTC [1] LOG:  received smart shutdown request
15:52:24.231 PostgreSQL:2019-11-29 14:52:24.230 UTC [1] LOG:  worker process: logical replication launcher (PID 68) exited with exit code 1
15:52:24.231 PostgreSQL:2019-11-29 14:52:24.231 UTC [63] LOG:  shutting down
15:52:24.274 PostgreSQL:2019-11-29 14:52:24.274 UTC [1] LOG:  database system is shut down
[INFO] DOCKER> [postgres:10.5] "postgresql": Stop and removed container 218d18b5ed31 after 0 ms
[INFO] 
[INFO] --- maven-install-plugin:2.4:install (default-install) @ vertx-quickstart ---
[INFO] Installing /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/target/vertx-quickstart-1.0-SNAPSHOT.jar to /home/misl/.m2/repository/org/acme/vertx-quickstart/1.0-SNAPSHOT/vertx-quickstart-1.0-SNAPSHOT.jar
[INFO] Installing /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/pom.xml to /home/misl/.m2/repository/org/acme/vertx-quickstart/1.0-SNAPSHOT/vertx-quickstart-1.0-SNAPSHOT.pom
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  17.538 s
[INFO] Finished at: 2019-11-29T15:52:24+01:00
[INFO] ------------------------------------------------------------------------

misl@system76:~/Dev/github/minto/quarkus-quickstarts/vertx-quickstart$ docker build -f src/main/docker/Dockerfile.jvm -t quarkus/using-vertx-jvm .
Sending build context to Docker daemon   18.1MB
Step 1/6 : FROM fabric8/java-alpine-openjdk8-jre
 ---> 623cf58ad9fd
Step 2/6 : ENV JAVA_OPTIONS="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
 ---> Using cache
 ---> ba8994a27833
Step 3/6 : ENV AB_ENABLED=jmx_exporter
 ---> Using cache
 ---> c3dd44be9a44
Step 4/6 : COPY target/lib/* /deployments/lib/
 ---> Using cache
 ---> 732f0806a7fd
Step 5/6 : COPY target/*-runner.jar /deployments/app.jar
 ---> 9896cbaeace5
Step 6/6 : ENTRYPOINT [ "/deployments/run-java.sh" ]
 ---> Running in 323a00272ad7
Removing intermediate container 323a00272ad7
 ---> 69d2bc1131b4
Successfully built 69d2bc1131b4
Successfully tagged quarkus/using-vertx-jvm:latest

misl@system76:~/Dev/github/minto/quarkus-quickstarts/vertx-quickstart$ docker run -i --rm -p 8080:8080 quarkus/using-vertx-jvm
exec java -Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager -javaagent:/opt/agent-bond/agent-bond.jar=jmx_exporter{{9779:/opt/agent-bond/jmx_exporter_config.yml}} -XX:+UseParallelGC -XX:GCTimeRatio=4 -XX:AdaptiveSizePolicyWeight=90 -XX:MinHeapFreeRatio=20 -XX:MaxHeapFreeRatio=40 -XX:+ExitOnOutOfMemoryError -cp . -jar /deployments/app.jar
2019-11-29 14:54:31,324 INFO  [io.quarkus] (main) vertx-quickstart 1.0-SNAPSHOT (running on Quarkus 1.0.1.Final) started in 1.260s. Listening on: http://0.0.0.0:8080
2019-11-29 14:54:31,382 INFO  [io.quarkus] (main) Profile prod activated. 
2019-11-29 14:54:31,383 INFO  [io.quarkus] (main) Installed features: [cdi, reactive-pg-client, resteasy, resteasy-jsonb, smallrye-context-propagation, smallrye-reactive-streams-operators, vertx]
2019-11-29 14:54:58,631 ERROR [io.qua.ver.htt.run.QuarkusErrorHandler] (vert.x-worker-thread-0) HTTP Request to /swapi/1 failed, error id: ab5d8c81-1dd0-4eef-b5a6-d36cd1629f67-1: java.lang.NoClassDefFoundError: Could not initialize class sun.security.ssl.SSLSessionImpl
    at sun.security.ssl.SSLEngineImpl.init(SSLEngineImpl.java:364)
    at sun.security.ssl.SSLEngineImpl.<init>(SSLEngineImpl.java:344)
    at sun.security.ssl.SSLContextImpl$AbstractTLSContext.createSSLEngineImpl(SSLContextImpl.java:557)
    at sun.security.ssl.SSLContextImpl.engineCreateSSLEngine(SSLContextImpl.java:199)
    at javax.net.ssl.SSLContext.createSSLEngine(SSLContext.java:329)
    at io.netty.handler.ssl.JdkSslContext.<clinit>(JdkSslContext.java:81)
    at io.netty.handler.ssl.SslContext.newClientContextInternal(SslContext.java:818)
    at io.netty.handler.ssl.SslContextBuilder.build(SslContextBuilder.java:462)
    at io.vertx.core.net.impl.SSLHelper.createContext(SSLHelper.java:294)
    at io.vertx.core.net.impl.SSLHelper.getContext(SSLHelper.java:478)
    at io.vertx.core.net.impl.SSLHelper.validate(SSLHelper.java:503)
    at io.vertx.core.http.impl.HttpClientImpl.<init>(HttpClientImpl.java:133)
    at io.vertx.core.impl.VertxImpl.createHttpClient(VertxImpl.java:317)
    at io.vertx.ext.web.client.WebClient.create(WebClient.java:67)
    at io.vertx.axle.ext.web.client.WebClient.create(WebClient.java:105)
    at org.acme.vertx.ResourceUsingWebClient.initialize(ResourceUsingWebClient.java:31)
    at org.acme.vertx.ResourceUsingWebClient_Bean.create(ResourceUsingWebClient_Bean.zig:224)
    at org.acme.vertx.ResourceUsingWebClient_Bean.create(ResourceUsingWebClient_Bean.zig:29)
    at io.quarkus.arc.impl.AbstractSharedContext.createInstanceHandle(AbstractSharedContext.java:80)
    at io.quarkus.arc.impl.ComputingCache$CacheFunction.lambda$apply$0(ComputingCache.java:99)
    at io.quarkus.arc.impl.LazyValue.get(LazyValue.java:26)
    at io.quarkus.arc.impl.ComputingCache.getValue(ComputingCache.java:41)
    at io.quarkus.arc.impl.AbstractSharedContext.get(AbstractSharedContext.java:25)
    at org.acme.vertx.ResourceUsingWebClient_Bean.get(ResourceUsingWebClient_Bean.zig:257)
    at org.acme.vertx.ResourceUsingWebClient_Bean.get(ResourceUsingWebClient_Bean.zig:273)
    at io.quarkus.arc.impl.ArcContainerImpl.beanInstanceHandle(ArcContainerImpl.java:355)
    at io.quarkus.arc.impl.ArcContainerImpl.beanInstanceHandle(ArcContainerImpl.java:367)
    at io.quarkus.arc.impl.ArcContainerImpl$1.get(ArcContainerImpl.java:222)
    at io.quarkus.arc.impl.ArcContainerImpl$1.get(ArcContainerImpl.java:219)
    at io.quarkus.arc.runtime.ArcRecorder$2$1.create(ArcRecorder.java:79)
    at io.quarkus.resteasy.common.runtime.QuarkusConstructorInjector.construct(QuarkusConstructorInjector.java:56)
    at org.jboss.resteasy.plugins.server.resourcefactory.POJOResourceFactory.createResource(POJOResourceFactory.java:69)
    at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:364)
    at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:477)
    at org.jboss.resteasy.core.SynchronousDispatcher.lambda$invoke$4(SynchronousDispatcher.java:252)
    at org.jboss.resteasy.core.SynchronousDispatcher.lambda$preprocess$0(SynchronousDispatcher.java:153)
    at org.jboss.resteasy.core.interception.jaxrs.PreMatchContainerRequestContext.filter(PreMatchContainerRequestContext.java:363)
    at org.jboss.resteasy.core.SynchronousDispatcher.preprocess(SynchronousDispatcher.java:156)
    at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:238)
    at io.quarkus.resteasy.runtime.standalone.RequestDispatcher.service(RequestDispatcher.java:73)
    at io.quarkus.resteasy.runtime.standalone.VertxRequestHandler.dispatch(VertxRequestHandler.java:118)
    at io.quarkus.resteasy.runtime.standalone.VertxRequestHandler.lambda$handle$0(VertxRequestHandler.java:74)
    at io.vertx.core.impl.ContextImpl.lambda$executeBlocking$2(ContextImpl.java:316)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
    at java.lang.Thread.run(Thread.java:748)
cescoffier commented 4 years ago

It’s the QuickStart and docker file unchanged, right? Why am I not able to reproduce it...

On 29 Nov 2019 at 16:01 +0100, Minto notifications@github.com, wrote:

Tried with Java 8, but same result: misl@system76:~/Dev/github/minto/quarkus-quickstarts/vertx-quickstart$ mvn --version Apache Maven 3.6.0 (97c98ec64a1fdfee7767ce5ffb20918da4f719f3; 2018-10-24T20:41:47+02:00) Maven home: /opt/apache-maven-3.6.0 Java version: 1.8.0_222, vendor: Private Build, runtime: /usr/lib/jvm/java-8-openjdk-amd64/jre Default locale: en_US, platform encoding: UTF-8 OS name: "linux", version: "5.0.0-36-generic", arch: "amd64", family: "unix" misl@system76:~/Dev/github/minto/quarkus-quickstarts/vertx-quickstart$ mvn clean install [INFO] Scanning for projects... [INFO] [INFO] ---------------------< org.acme:vertx-quickstart >---------------------- [INFO] Building vertx-quickstart 1.0-SNAPSHOT [INFO] --------------------------------[ jar ]--------------------------------- [INFO] [INFO] --- maven-clean-plugin:2.5:clean (default-clean) @ vertx-quickstart --- [INFO] Deleting /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/target [INFO] [INFO] --- maven-resources-plugin:2.6:resources (default-resources) @ vertx-quickstart --- [INFO] Using 'UTF-8' encoding to copy filtered resources. [INFO] Copying 5 resources [INFO] [INFO] --- maven-compiler-plugin:3.8.1:compile (default-compile) @ vertx-quickstart --- [INFO] Changes detected - recompiling the module! [INFO] Compiling 8 source files to /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/target/classes [INFO] /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/src/main/java/org/acme/vertx/EventResource.java: /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/src/main/java/org/acme/vertx/EventResource.java uses or overrides a deprecated API. [INFO] /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/src/main/java/org/acme/vertx/EventResource.java: Recompile with -Xlint:deprecation for details. [INFO] [INFO] --- maven-resources-plugin:2.6:testResources (default-testResources) @ vertx-quickstart --- [INFO] Using 'UTF-8' encoding to copy filtered resources. [INFO] skip non existing resourceDirectory /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/src/test/resources [INFO] [INFO] --- maven-compiler-plugin:3.8.1:testCompile (default-testCompile) @ vertx-quickstart --- [INFO] Changes detected - recompiling the module! [INFO] Compiling 10 source files to /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/target/test-classes [INFO] [INFO] --- docker-maven-plugin:0.28.0:stop (docker-start) @ vertx-quickstart --- [INFO] DOCKER> [postgres:10.5] "postgresql": Stop and removed container c80e70ea0902 after 0 ms [INFO] [INFO] --- docker-maven-plugin:0.28.0:start (docker-start) @ vertx-quickstart --- [INFO] DOCKER> [postgres:10.5] "postgresql": Start container 218d18b5ed31 [INFO] DOCKER> [postgres:10.5] "postgresql": Waiting for mapped ports [5432] on host localhost [INFO] DOCKER> [postgres:10.5] "postgresql": Waited on tcp port '[localhost/127.0.0.1:5432]' 5 ms [INFO] [INFO] --- maven-surefire-plugin:2.22.1:test (default-test) @ vertx-quickstart --- 15:52:12.408 PostgreSQL:The files belonging to this database system will be owned by user "postgres". 15:52:12.408 PostgreSQL:This user must also own the server process. 15:52:12.408 PostgreSQL: 15:52:12.408 PostgreSQL:The database cluster will be initialized with locale "en_US.utf8". 15:52:12.408 PostgreSQL:The default database encoding has accordingly been set to "UTF8". 15:52:12.408 PostgreSQL:The default text search configuration will be set to "english". 15:52:12.408 PostgreSQL: 15:52:12.408 PostgreSQL:Data page checksums are disabled. 15:52:12.408 PostgreSQL: 15:52:12.409 PostgreSQL:fixing permissions on existing directory /var/lib/postgresql/data ... ok 15:52:12.409 PostgreSQL:creating subdirectories ... ok 15:52:12.426 PostgreSQL:selecting default max_connections ... 100 15:52:12.457 PostgreSQL:selecting default shared_buffers ... 128MB 15:52:12.457 PostgreSQL:selecting dynamic shared memory implementation ... posix [INFO] [INFO] ------------------------------------------------------- [INFO] T E S T S [INFO] ------------------------------------------------------- 15:52:13.339 PostgreSQL:creating configuration files ... ok 15:52:13.555 PostgreSQL:running bootstrap script ... ok [INFO] Running org.acme.vertx.ResourceUsingWebClientTest 15:52:14.211 PostgreSQL:performing post-bootstrap initialization ... ok 15:52:14.337 PostgreSQL:syncing data to disk ... ok 15:52:14.337 PostgreSQL: 15:52:14.337 PostgreSQL:Success. You can now start the database server using: 15:52:14.337 PostgreSQL: 15:52:14.337 PostgreSQL: pg_ctl -D /var/lib/postgresql/data -l logfile start 15:52:14.337 PostgreSQL: 15:52:14.337 PostgreSQL: 15:52:14.337 PostgreSQL:WARNING: enabling "trust" authentication for local connections 15:52:14.337 PostgreSQL:You can change this by editing pg_hba.conf or using the option -A, or 15:52:14.337 PostgreSQL:--auth-local and --auth-host, the next time you run initdb. 15:52:14.377 PostgreSQL:waiting for server to start....2019-11-29 14:52:14.377 UTC [44] LOG: listening on Unix socket "/var/run/postgresql/.s.PGSQL.5432" 15:52:14.404 PostgreSQL:2019-11-29 14:52:14.404 UTC [45] LOG: database system was shut down at 2019-11-29 14:52:14 UTC 15:52:14.413 PostgreSQL:2019-11-29 14:52:14.413 UTC [44] LOG: database system is ready to accept connections 15:52:14.457 PostgreSQL: done 15:52:14.457 PostgreSQL:server started 15:52:14.790 PostgreSQL:CREATE DATABASE 15:52:14.792 PostgreSQL: 15:52:14.792 PostgreSQL: 15:52:14.792 PostgreSQL:/usr/local/bin/docker-entrypoint.sh: ignoring /docker-entrypoint-initdb.d/* 15:52:14.792 PostgreSQL: 15:52:14.795 PostgreSQL:waiting for server to shut down....2019-11-29 14:52:14.793 UTC [44] LOG: received fast shutdown request 15:52:14.802 PostgreSQL:2019-11-29 14:52:14.799 UTC [44] LOG: aborting any active transactions 15:52:14.802 PostgreSQL:2019-11-29 14:52:14.802 UTC [44] LOG: worker process: logical replication launcher (PID 51) exited with exit code 1 15:52:14.803 PostgreSQL:2019-11-29 14:52:14.802 UTC [46] LOG: shutting down 15:52:14.832 PostgreSQL:2019-11-29 14:52:14.831 UTC [44] LOG: database system is shut down 15:52:14.893 PostgreSQL: done 15:52:14.894 PostgreSQL:server stopped 15:52:14.897 PostgreSQL: 15:52:14.897 PostgreSQL:PostgreSQL init process complete; ready for start up. 15:52:14.897 PostgreSQL: 15:52:14.916 PostgreSQL:2019-11-29 14:52:14.916 UTC [1] LOG: listening on IPv4 address "0.0.0.0", port 5432 15:52:14.916 PostgreSQL:2019-11-29 14:52:14.916 UTC [1] LOG: listening on IPv6 address "::", port 5432 15:52:14.933 PostgreSQL:2019-11-29 14:52:14.933 UTC [1] LOG: listening on Unix socket "/var/run/postgresql/.s.PGSQL.5432" 15:52:14.960 PostgreSQL:2019-11-29 14:52:14.960 UTC [62] LOG: database system was shut down at 2019-11-29 14:52:14 UTC 15:52:14.971 PostgreSQL:2019-11-29 14:52:14.971 UTC [1] LOG: database system is ready to accept connections 2019-11-29 15:52:16,780 WARN [io.qua.dep.ste.ReflectiveHierarchyStep] (build-12) Unable to properly register the hierarchy of the following classes for reflection as they are not in the Jandex index:

  • io.vertx.core.json.JsonObject
  • javax.ws.rs.core.Response
  • org.reactivestreams.Publisher Consider adding them to the index either by creating a Jandex index for your dependency via the Maven plugin, an empty META-INF/beans.xml or quarkus.index-dependency properties.");. 2019-11-29 15:52:18,025 INFO [io.quarkus] (main) Quarkus 1.0.1.Final started in 0.836s. Listening on: http://0.0.0.0:8081 2019-11-29 15:52:18,026 INFO [io.quarkus] (main) Profile test activated. 2019-11-29 15:52:18,026 INFO [io.quarkus] (main) Installed features: [cdi, reactive-pg-client, resteasy, resteasy-jsonb, smallrye-context-propagation, smallrye-reactive-streams-operators, vertx] [INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 6.533 s - in org.acme.vertx.ResourceUsingWebClientTest [INFO] Running org.acme.vertx.JsonEndpointTest [INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.362 s - in org.acme.vertx.JsonEndpointTest [INFO] Running org.acme.vertx.EventResourceTest [INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.032 s - in org.acme.vertx.EventResourceTest [INFO] Running org.acme.vertx.GreetingResourceTest [INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.025 s - in org.acme.vertx.GreetingResourceTest [INFO] Running org.acme.vertx.FruitsEndpointTest 2019-11-29 15:52:21,326 WARNING [io.ver.sql.imp.SocketConnectionBase] (vert.x-eventloop-thread-8) Backend notice: severity='NOTICE', code='00000', message='table "fruits" does not exist, skipping', detail='null', hint='null', position='null', internalPosition='null', internalQuery='null', where='null', file='tablecmds.c', line='914', routine='DropErrorMsgNonExistent', schema='null', table='null', column='null', dataType='null', constraint='null' [INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.232 s - in org.acme.vertx.FruitsEndpointTest 2019-11-29 15:52:21,542 INFO [io.quarkus] (main) Quarkus stopped in 0.037s [INFO] [INFO] Results: [INFO] [INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0 [INFO] [INFO] [INFO] --- maven-jar-plugin:2.4:jar (default-jar) @ vertx-quickstart --- [INFO] Building jar: /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/target/vertx-quickstart-1.0-SNAPSHOT.jar [INFO] [INFO] --- quarkus-maven-plugin:1.0.1.Final:build (default) @ vertx-quickstart --- [INFO] [org.jboss.threads] JBoss Threads version 3.0.0.Final [WARNING] [io.quarkus.deployment.steps.ReflectiveHierarchyStep] Unable to properly register the hierarchy of the following classes for reflection as they are not in the Jandex index:
  • io.vertx.core.json.JsonObject
  • javax.ws.rs.core.Response
  • org.reactivestreams.Publisher Consider adding them to the index either by creating a Jandex index for your dependency via the Maven plugin, an empty META-INF/beans.xml or quarkus.index-dependency properties.");. [INFO] [io.quarkus.deployment.pkg.steps.JarResultBuildStep] Building thin jar: /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/target/vertx-quickstart-1.0-SNAPSHOT-runner.jar [INFO] [io.quarkus.deployment.QuarkusAugmentor] Quarkus augmentation completed in 1400ms [INFO] [INFO] --- docker-maven-plugin:0.28.0:stop (docker-stop) @ vertx-quickstart --- 15:52:24.224 PostgreSQL:2019-11-29 14:52:24.224 UTC [1] LOG: received smart shutdown request 15:52:24.231 PostgreSQL:2019-11-29 14:52:24.230 UTC [1] LOG: worker process: logical replication launcher (PID 68) exited with exit code 1 15:52:24.231 PostgreSQL:2019-11-29 14:52:24.231 UTC [63] LOG: shutting down 15:52:24.274 PostgreSQL:2019-11-29 14:52:24.274 UTC [1] LOG: database system is shut down [INFO] DOCKER> [postgres:10.5] "postgresql": Stop and removed container 218d18b5ed31 after 0 ms [INFO] [INFO] --- maven-install-plugin:2.4:install (default-install) @ vertx-quickstart --- [INFO] Installing /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/target/vertx-quickstart-1.0-SNAPSHOT.jar to /home/misl/.m2/repository/org/acme/vertx-quickstart/1.0-SNAPSHOT/vertx-quickstart-1.0-SNAPSHOT.jar [INFO] Installing /home/misl/Dev/github/minto/quarkus-quickstarts/vertx-quickstart/pom.xml to /home/misl/.m2/repository/org/acme/vertx-quickstart/1.0-SNAPSHOT/vertx-quickstart-1.0-SNAPSHOT.pom [INFO] ------------------------------------------------------------------------ [INFO] BUILD SUCCESS [INFO] ------------------------------------------------------------------------ [INFO] Total time: 17.538 s [INFO] Finished at: 2019-11-29T15:52:24+01:00 [INFO] ------------------------------------------------------------------------ misl@system76:~/Dev/github/minto/quarkus-quickstarts/vertx-quickstart$ cat src/main/docker/Dockerfile.jvm

    This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode

    #

    Before building the docker image run:

    #

    mvn package

    #

    Then, build the image with:

    #

    docker build -f src/main/docker/Dockerfile.jvm -t quarkus/using-vertx-jvm .

    #

    Then run the container using:

    #

    docker run -i --rm -p 8080:8080 quarkus/using-vertx-jvm

    #

    FROM fabric8/java-alpine-openjdk8-jre ENV JAVA_OPTIONS="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager" ENV AB_ENABLED=jmx_exporter COPY target/lib/ /deployments/lib/ COPY target/-runner.jar /deployments/app.jar ENTRYPOINT [ "/deployments/run-java.sh" ]misl@system76:~/Dev/github/minto/quarkus-quickstarts/vertx-quickstart$ docker build -f src/main/docker/Dockerfile.jvm -t quarkus/using-vertx-jvm . Sending build context to Docker daemon 18.1MB Step 1/6 : FROM fabric8/java-alpine-openjdk8-jre ---> 623cf58ad9fd Step 2/6 : ENV JAVA_OPTIONS="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager" ---> Using cache ---> ba8994a27833 Step 3/6 : ENV AB_ENABLED=jmx_exporter ---> Using cache ---> c3dd44be9a44 Step 4/6 : COPY target/lib/ /deployments/lib/ ---> Using cache ---> 732f0806a7fd Step 5/6 : COPY target/-runner.jar /deployments/app.jar ---> 9896cbaeace5 Step 6/6 : ENTRYPOINT [ "/deployments/run-java.sh" ] ---> Running in 323a00272ad7 Removing intermediate container 323a00272ad7 ---> 69d2bc1131b4 Successfully built 69d2bc1131b4 Successfully tagged quarkus/using-vertx-jvm:latest misl@system76:~/Dev/github/minto/quarkus-quickstarts/vertx-quickstart$ docker run -i --rm -p 8080:8080 quarkus/using-vertx-jvm exec java -Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager -javaagent:/opt/agent-bond/agent-bond.jar=jmx_exporter{{9779:/opt/agent-bond/jmx_exporter_config.yml}} -XX:+UseParallelGC -XX:GCTimeRatio=4 -XX:AdaptiveSizePolicyWeight=90 -XX:MinHeapFreeRatio=20 -XX:MaxHeapFreeRatio=40 -XX:+ExitOnOutOfMemoryError -cp . -jar /deployments/app.jar 2019-11-29 14:54:31,324 INFO [io.quarkus] (main) vertx-quickstart 1.0-SNAPSHOT (running on Quarkus 1.0.1.Final) started in 1.260s. Listening on: http://0.0.0.0:8080 2019-11-29 14:54:31,382 INFO [io.quarkus] (main) Profile prod activated. 2019-11-29 14:54:31,383 INFO [io.quarkus] (main) Installed features: [cdi, reactive-pg-client, resteasy, resteasy-jsonb, smallrye-context-propagation, smallrye-reactive-streams-operators, vertx] 2019-11-29 14:54:58,631 ERROR [io.qua.ver.htt.run.QuarkusErrorHandler] (vert.x-worker-thread-0) HTTP Request to /swapi/1 failed, error id: ab5d8c81-1dd0-4eef-b5a6-d36cd1629f67-1: java.lang.NoClassDefFoundError: Could not initialize class sun.security.ssl.SSLSessionImpl at sun.security.ssl.SSLEngineImpl.init(SSLEngineImpl.java:364) at sun.security.ssl.SSLEngineImpl.(SSLEngineImpl.java:344) at sun.security.ssl.SSLContextImpl$AbstractTLSContext.createSSLEngineImpl(SSLContextImpl.java:557) at sun.security.ssl.SSLContextImpl.engineCreateSSLEngine(SSLContextImpl.java:199) at javax.net.ssl.SSLContext.createSSLEngine(SSLContext.java:329) at io.netty.handler.ssl.JdkSslContext.(JdkSslContext.java:81) at io.netty.handler.ssl.SslContext.newClientContextInternal(SslContext.java:818) at io.netty.handler.ssl.SslContextBuilder.build(SslContextBuilder.java:462) at io.vertx.core.net.impl.SSLHelper.createContext(SSLHelper.java:294) at io.vertx.core.net.impl.SSLHelper.getContext(SSLHelper.java:478) at io.vertx.core.net.impl.SSLHelper.validate(SSLHelper.java:503) at io.vertx.core.http.impl.HttpClientImpl.(HttpClientImpl.java:133) at io.vertx.core.impl.VertxImpl.createHttpClient(VertxImpl.java:317) at io.vertx.ext.web.client.WebClient.create(WebClient.java:67) at io.vertx.axle.ext.web.client.WebClient.create(WebClient.java:105) at org.acme.vertx.ResourceUsingWebClient.initialize(ResourceUsingWebClient.java:31) at org.acme.vertx.ResourceUsingWebClient_Bean.create(ResourceUsingWebClient_Bean.zig:224) at org.acme.vertx.ResourceUsingWebClient_Bean.create(ResourceUsingWebClient_Bean.zig:29) at io.quarkus.arc.impl.AbstractSharedContext.createInstanceHandle(AbstractSharedContext.java:80) at io.quarkus.arc.impl.ComputingCache$CacheFunction.lambda$apply$0(ComputingCache.java:99) at io.quarkus.arc.impl.LazyValue.get(LazyValue.java:26) at io.quarkus.arc.impl.ComputingCache.getValue(ComputingCache.java:41) at io.quarkus.arc.impl.AbstractSharedContext.get(AbstractSharedContext.java:25) at org.acme.vertx.ResourceUsingWebClient_Bean.get(ResourceUsingWebClient_Bean.zig:257) at org.acme.vertx.ResourceUsingWebClient_Bean.get(ResourceUsingWebClient_Bean.zig:273) at io.quarkus.arc.impl.ArcContainerImpl.beanInstanceHandle(ArcContainerImpl.java:355) at io.quarkus.arc.impl.ArcContainerImpl.beanInstanceHandle(ArcContainerImpl.java:367) at io.quarkus.arc.impl.ArcContainerImpl$1.get(ArcContainerImpl.java:222) at io.quarkus.arc.impl.ArcContainerImpl$1.get(ArcContainerImpl.java:219) at io.quarkus.arc.runtime.ArcRecorder$2$1.create(ArcRecorder.java:79) at io.quarkus.resteasy.common.runtime.QuarkusConstructorInjector.construct(QuarkusConstructorInjector.java:56) at org.jboss.resteasy.plugins.server.resourcefactory.POJOResourceFactory.createResource(POJOResourceFactory.java:69) at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:364) at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:477) at org.jboss.resteasy.core.SynchronousDispatcher.lambda$invoke$4(SynchronousDispatcher.java:252) at org.jboss.resteasy.core.SynchronousDispatcher.lambda$preprocess$0(SynchronousDispatcher.java:153) at org.jboss.resteasy.core.interception.jaxrs.PreMatchContainerRequestContext.filter(PreMatchContainerRequestContext.java:363) at org.jboss.resteasy.core.SynchronousDispatcher.preprocess(SynchronousDispatcher.java:156) at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:238) at io.quarkus.resteasy.runtime.standalone.RequestDispatcher.service(RequestDispatcher.java:73) at io.quarkus.resteasy.runtime.standalone.VertxRequestHandler.dispatch(VertxRequestHandler.java:118) at io.quarkus.resteasy.runtime.standalone.VertxRequestHandler.lambda$handle$0(VertxRequestHandler.java:74) at io.vertx.core.impl.ContextImpl.lambda$executeBlocking$2(ContextImpl.java:316) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) at java.lang.Thread.run(Thread.java:748) — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe.

jaikiran commented 4 years ago

Just like @cescoffier, I'm a bit stumped here on how you are running into this exception in JVM mode that too in container.

The only odd(?) thing I see in your details, for building the application jar, is this:

Java version: 1.8.0_222, vendor: Private Build, ...

The vendor seems odd. Do you know who/how was the JDK built? Can you maybe use a different JDK 8 from AdoptOpenJDK here https://adoptopenjdk.net/index.html and point JAVA_HOME to it and redo the whole container build and run and see if that helps?

Finally, if that too doesn't help, then can you edit your Dockerfile.jvm to pass -Djavax.net.debug=all as part of the JAVA_OPTS like this:

ENV JAVA_OPTIONS="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager -Djavax.net.debug=all"

and then build the docker image as usual and run it and attach the generated logs (including the entire exception stacktrace again)?

misl commented 4 years ago

@cescoffier quickstart and dockerfile are unchanged, it was a fresh git clone.

@jaikiran I will give it a try with a different JDK 8

misl commented 4 years ago

Switching to Adopt OpenJDK 8 gives the same results :-( BTW I am running on Ubuntu 19.04

misl@system76:~/Dev/github/minto/quarkus-quickstarts/vertx-quickstart$ uname -a
Linux system76 5.0.0-36-generic #39-Ubuntu SMP Tue Nov 12 09:46:06 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux

Running the newly build version with debugging enabled give the following:

misl@system76:~/Dev/github/minto/quarkus-quickstarts/vertx-quickstart$ docker run -i --rm -p 8080:8080 quarkus/using-vertx-jvm
exec java -Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager -Djavax.net.debug=all -javaagent:/opt/agent-bond/agent-bond.jar=jmx_exporter{{9779:/opt/agent-bond/jmx_exporter_config.yml}} -XX:+UseParallelGC -XX:GCTimeRatio=4 -XX:AdaptiveSizePolicyWeight=90 -XX:MinHeapFreeRatio=20 -XX:MaxHeapFreeRatio=40 -XX:+ExitOnOutOfMemoryError -cp . -jar /deployments/app.jar
2019-12-02 16:19:32,834 INFO  [io.quarkus] (main) vertx-quickstart 1.0-SNAPSHOT (running on Quarkus 1.0.1.Final) started in 1.524s. Listening on: http://0.0.0.0:8080
2019-12-02 16:19:32,924 INFO  [io.quarkus] (main) Profile prod activated. 
2019-12-02 16:19:32,924 INFO  [io.quarkus] (main) Installed features: [cdi, reactive-pg-client, resteasy, resteasy-jsonb, smallrye-context-propagation, smallrye-reactive-streams-operators, vertx]
System property jdk.tls.client.cipherSuites is set to 'null'
System property jdk.tls.server.cipherSuites is set to 'null'
Ignoring disabled cipher suite: TLS_DH_anon_WITH_AES_256_CBC_SHA
Ignoring disabled cipher suite: TLS_DH_anon_WITH_AES_256_CBC_SHA256
Ignoring disabled cipher suite: TLS_ECDHE_RSA_WITH_NULL_SHA
Ignoring disabled cipher suite: SSL_RSA_WITH_DES_CBC_SHA
Ignoring disabled cipher suite: SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
Ignoring disabled cipher suite: TLS_KRB5_WITH_DES_CBC_MD5
Ignoring disabled cipher suite: TLS_ECDH_RSA_WITH_NULL_SHA
Ignoring disabled cipher suite: SSL_DH_anon_EXPORT_WITH_RC4_40_MD5
Ignoring disabled cipher suite: SSL_DH_anon_WITH_DES_CBC_SHA
Ignoring disabled cipher suite: TLS_DH_anon_WITH_AES_128_CBC_SHA
Ignoring disabled cipher suite: TLS_KRB5_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: TLS_KRB5_WITH_DES_CBC_SHA
Ignoring disabled cipher suite: TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5
Ignoring disabled cipher suite: TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
Ignoring disabled cipher suite: SSL_DHE_RSA_WITH_DES_CBC_SHA
Ignoring disabled cipher suite: TLS_KRB5_WITH_3DES_EDE_CBC_MD5
Ignoring disabled cipher suite: SSL_DH_anon_WITH_RC4_128_MD5
Ignoring disabled cipher suite: TLS_ECDHE_ECDSA_WITH_NULL_SHA
Ignoring disabled cipher suite: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: TLS_RSA_WITH_NULL_SHA256
Ignoring disabled cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: SSL_DH_anon_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: TLS_ECDH_anon_WITH_NULL_SHA
Ignoring disabled cipher suite: SSL_RSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
Ignoring disabled cipher suite: TLS_ECDH_anon_WITH_RC4_128_SHA
Ignoring disabled cipher suite: SSL_DHE_DSS_WITH_DES_CBC_SHA
Ignoring disabled cipher suite: TLS_KRB5_EXPORT_WITH_RC4_40_SHA
Ignoring disabled cipher suite: SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
Ignoring disabled cipher suite: TLS_KRB5_WITH_RC4_128_SHA
Ignoring disabled cipher suite: TLS_ECDH_anon_WITH_AES_256_CBC_SHA
Ignoring disabled cipher suite: SSL_RSA_EXPORT_WITH_RC4_40_MD5
Ignoring disabled cipher suite: TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA
Ignoring disabled cipher suite: TLS_KRB5_EXPORT_WITH_RC4_40_MD5
Ignoring disabled cipher suite: TLS_ECDH_anon_WITH_AES_128_CBC_SHA
Ignoring disabled cipher suite: TLS_ECDH_ECDSA_WITH_RC4_128_SHA
Ignoring disabled cipher suite: TLS_KRB5_WITH_RC4_128_MD5
Ignoring disabled cipher suite: TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: SSL_RSA_WITH_RC4_128_SHA
Ignoring disabled cipher suite: TLS_ECDH_ECDSA_WITH_NULL_SHA
Ignoring disabled cipher suite: TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: TLS_ECDH_RSA_WITH_RC4_128_SHA
Ignoring disabled cipher suite: SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA
Ignoring disabled cipher suite: SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: SSL_RSA_WITH_NULL_SHA
Ignoring disabled cipher suite: TLS_ECDHE_RSA_WITH_RC4_128_SHA
Ignoring disabled cipher suite: SSL_RSA_WITH_RC4_128_MD5
Ignoring disabled cipher suite: TLS_DH_anon_WITH_AES_128_CBC_SHA256
Ignoring disabled cipher suite: SSL_RSA_WITH_NULL_MD5
Ignoring disabled cipher suite: TLS_DH_anon_WITH_AES_128_GCM_SHA256
Ignoring disabled cipher suite: TLS_DH_anon_WITH_AES_256_GCM_SHA384
Ignoring disabled cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: SSL_RSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: SSL_RSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
Ignoring disabled cipher suite: SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
trustStore is: /usr/lib/jvm/java-1.8-openjdk/jre/lib/security/cacerts
trustStore type is : jks
trustStore provider is : 
init truststore
adding as trusted cert:
  Subject: CN=Hongkong Post Root CA 1, O=Hongkong Post, C=HK
  Issuer:  CN=Hongkong Post Root CA 1, O=Hongkong Post, C=HK
  Algorithm: RSA; Serial number: 0x3e8
  Valid from Thu May 15 05:13:14 GMT 2003 until Mon May 15 04:52:29 GMT 2023

adding as trusted cert:
  Subject: CN=SecureTrust CA, O=SecureTrust Corporation, C=US
  Issuer:  CN=SecureTrust CA, O=SecureTrust Corporation, C=US
  Algorithm: RSA; Serial number: 0xcf08e5c0816a5ad427ff0eb271859d0
  Valid from Tue Nov 07 19:31:18 GMT 2006 until Mon Dec 31 19:40:55 GMT 2029

adding as trusted cert:
  Subject: CN=Entrust Root Certification Authority - EC1, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
  Issuer:  CN=Entrust Root Certification Authority - EC1, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
  Algorithm: EC; Serial number: 0xa68b79290000000050d091f9
  Valid from Tue Dec 18 15:25:36 GMT 2012 until Fri Dec 18 15:55:36 GMT 2037

adding as trusted cert:
  Subject: CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: RSA; Serial number: 0x83be056904246b1a1756ac95991c74a
  Valid from Fri Nov 10 00:00:00 GMT 2006 until Mon Nov 10 00:00:00 GMT 2031

adding as trusted cert:
  Subject: OU=Security Communication RootCA1, O=SECOM Trust.net, C=JP
  Issuer:  OU=Security Communication RootCA1, O=SECOM Trust.net, C=JP
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Sep 30 04:20:49 GMT 2003 until Sat Sep 30 04:20:49 GMT 2023

adding as trusted cert:
  Subject: CN=QuoVadis Root CA 2 G3, O=QuoVadis Limited, C=BM
  Issuer:  CN=QuoVadis Root CA 2 G3, O=QuoVadis Limited, C=BM
  Algorithm: RSA; Serial number: 0x445734245b81899b35f2ceb82b3b5ba726f07528
  Valid from Thu Jan 12 18:59:32 GMT 2012 until Sun Jan 12 18:59:32 GMT 2042

adding as trusted cert:
  Subject: CN=Hellenic Academic and Research Institutions RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
  Issuer:  CN=Hellenic Academic and Research Institutions RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Jul 07 10:11:21 GMT 2015 until Sat Jun 30 10:11:21 GMT 2040

adding as trusted cert:
  Subject: CN=DigiCert Trusted Root G4, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert Trusted Root G4, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: RSA; Serial number: 0x59b1b579e8e2132e23907bda777755c
  Valid from Thu Aug 01 12:00:00 GMT 2013 until Fri Jan 15 12:00:00 GMT 2038

adding as trusted cert:
  Subject: CN=GeoTrust Primary Certification Authority, O=GeoTrust Inc., C=US
  Issuer:  CN=GeoTrust Primary Certification Authority, O=GeoTrust Inc., C=US
  Algorithm: RSA; Serial number: 0x18acb56afd69b6153a636cafdafac4a1
  Valid from Mon Nov 27 00:00:00 GMT 2006 until Wed Jul 16 23:59:59 GMT 2036

adding as trusted cert:
  Subject: CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
  Issuer:  CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
  Algorithm: EC; Serial number: 0x0
  Valid from Tue Jul 07 10:37:12 GMT 2015 until Sat Jun 30 10:37:12 GMT 2040

adding as trusted cert:
  Subject: OU=Security Communication RootCA2, O="SECOM Trust Systems CO.,LTD.", C=JP
  Issuer:  OU=Security Communication RootCA2, O="SECOM Trust Systems CO.,LTD.", C=JP
  Algorithm: RSA; Serial number: 0x0
  Valid from Fri May 29 05:00:39 GMT 2009 until Tue May 29 05:00:39 GMT 2029

adding as trusted cert:
  Subject: OU=ePKI Root Certification Authority, O="Chunghwa Telecom Co., Ltd.", C=TW
  Issuer:  OU=ePKI Root Certification Authority, O="Chunghwa Telecom Co., Ltd.", C=TW
  Algorithm: RSA; Serial number: 0x15c8bd65475cafb897005ee406d2bc9d
  Valid from Mon Dec 20 02:31:27 GMT 2004 until Wed Dec 20 02:31:27 GMT 2034

adding as trusted cert:
  Subject: CN=AffirmTrust Commercial, O=AffirmTrust, C=US
  Issuer:  CN=AffirmTrust Commercial, O=AffirmTrust, C=US
  Algorithm: RSA; Serial number: 0x7777062726a9b17c
  Valid from Fri Jan 29 14:06:06 GMT 2010 until Tue Dec 31 14:06:06 GMT 2030

adding as trusted cert:
  Subject: CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
  Issuer:  CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
  Algorithm: RSA; Serial number: 0x444c0
  Valid from Wed Oct 22 12:07:37 GMT 2008 until Mon Dec 31 12:07:37 GMT 2029

adding as trusted cert:
  Subject: CN=XRamp Global Certification Authority, O=XRamp Security Services Inc, OU=www.xrampsecurity.com, C=US
  Issuer:  CN=XRamp Global Certification Authority, O=XRamp Security Services Inc, OU=www.xrampsecurity.com, C=US
  Algorithm: RSA; Serial number: 0x50946cec18ead59c4dd597ef758fa0ad
  Valid from Mon Nov 01 17:14:04 GMT 2004 until Mon Jan 01 05:37:19 GMT 2035

adding as trusted cert:
  Subject: CN=EC-ACC, OU=Jerarquia Entitats de Certificacio Catalanes, OU=Vegeu https://www.catcert.net/verarrel (c)03, OU=Serveis Publics de Certificacio, O=Agencia Catalana de Certificacio (NIF Q-0801176-I), C=ES
  Issuer:  CN=EC-ACC, OU=Jerarquia Entitats de Certificacio Catalanes, OU=Vegeu https://www.catcert.net/verarrel (c)03, OU=Serveis Publics de Certificacio, O=Agencia Catalana de Certificacio (NIF Q-0801176-I), C=ES
  Algorithm: RSA; Serial number: 0x-11d4c2142bde21eb579d53fb0c223bff
  Valid from Tue Jan 07 23:00:00 GMT 2003 until Tue Jan 07 22:59:59 GMT 2031

adding as trusted cert:
  Subject: CN=Sonera Class2 CA, O=Sonera, C=FI
  Issuer:  CN=Sonera Class2 CA, O=Sonera, C=FI
  Algorithm: RSA; Serial number: 0x1d
  Valid from Fri Apr 06 07:29:40 GMT 2001 until Tue Apr 06 07:29:40 GMT 2021

adding as trusted cert:
  Subject: CN=GeoTrust Primary Certification Authority - G2, OU=(c) 2007 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
  Issuer:  CN=GeoTrust Primary Certification Authority - G2, OU=(c) 2007 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
  Algorithm: EC; Serial number: 0x3cb2f4480a00e2feeb243b5e603ec36b
  Valid from Mon Nov 05 00:00:00 GMT 2007 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Issuer:  CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Algorithm: EC; Serial number: 0x1f47afaa62007050544c019e9b63992a
  Valid from Thu Mar 06 00:00:00 GMT 2008 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: CN=Certinomis - Root CA, OU=0002 433998903, O=Certinomis, C=FR
  Issuer:  CN=Certinomis - Root CA, OU=0002 433998903, O=Certinomis, C=FR
  Algorithm: RSA; Serial number: 0x1
  Valid from Mon Oct 21 09:17:18 GMT 2013 until Fri Oct 21 09:17:18 GMT 2033

adding as trusted cert:
  Subject: CN=ISRG Root X1, O=Internet Security Research Group, C=US
  Issuer:  CN=ISRG Root X1, O=Internet Security Research Group, C=US
  Algorithm: RSA; Serial number: 0x8210cfb0d240e3594463e0bb63828b00
  Valid from Thu Jun 04 11:04:38 GMT 2015 until Mon Jun 04 11:04:38 GMT 2035

adding as trusted cert:
  Subject: CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: RSA; Serial number: 0x2ac5c266a0b409b8f0b79f2ae462577
  Valid from Fri Nov 10 00:00:00 GMT 2006 until Mon Nov 10 00:00:00 GMT 2031

adding as trusted cert:
  Subject: CN=TrustCor RootCert CA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
  Issuer:  CN=TrustCor RootCert CA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
  Algorithm: RSA; Serial number: 0xda9bec71f303b019
  Valid from Thu Feb 04 12:32:16 GMT 2016 until Mon Dec 31 17:23:16 GMT 2029

adding as trusted cert:
  Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
  Issuer:  CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
  Algorithm: RSA; Serial number: 0x4000000000121585308a2
  Valid from Wed Mar 18 10:00:00 GMT 2009 until Sun Mar 18 10:00:00 GMT 2029

adding as trusted cert:
  Subject: CN=GeoTrust Universal CA, O=GeoTrust Inc., C=US
  Issuer:  CN=GeoTrust Universal CA, O=GeoTrust Inc., C=US
  Algorithm: RSA; Serial number: 0x1
  Valid from Thu Mar 04 05:00:00 GMT 2004 until Sun Mar 04 05:00:00 GMT 2029

adding as trusted cert:
  Subject: CN=D-TRUST Root CA 3 2013, O=D-Trust GmbH, C=DE
  Issuer:  CN=D-TRUST Root CA 3 2013, O=D-Trust GmbH, C=DE
  Algorithm: RSA; Serial number: 0xfddac
  Valid from Fri Sep 20 08:25:51 GMT 2013 until Wed Sep 20 08:25:51 GMT 2028

adding as trusted cert:
  Subject: CN=GeoTrust Universal CA 2, O=GeoTrust Inc., C=US
  Issuer:  CN=GeoTrust Universal CA 2, O=GeoTrust Inc., C=US
  Algorithm: RSA; Serial number: 0x1
  Valid from Thu Mar 04 05:00:00 GMT 2004 until Sun Mar 04 05:00:00 GMT 2029

adding as trusted cert:
  Subject: CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE
  Issuer:  CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE
  Algorithm: RSA; Serial number: 0x20000b9
  Valid from Fri May 12 18:46:00 GMT 2000 until Mon May 12 23:59:00 GMT 2025

adding as trusted cert:
  Subject: CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Issuer:  CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Algorithm: RSA; Serial number: 0x1
  Valid from Thu Jan 01 00:00:00 GMT 2004 until Sun Dec 31 23:59:59 GMT 2028

adding as trusted cert:
  Subject: OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US
  Issuer:  OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Jun 29 17:39:16 GMT 2004 until Thu Jun 29 17:39:16 GMT 2034

adding as trusted cert:
  Subject: CN=Chambers of Commerce Root, OU=http://www.chambersign.org, O=AC Camerfirma SA CIF A82743287, C=EU
  Issuer:  CN=Chambers of Commerce Root, OU=http://www.chambersign.org, O=AC Camerfirma SA CIF A82743287, C=EU
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Sep 30 16:13:43 GMT 2003 until Wed Sep 30 16:13:44 GMT 2037

adding as trusted cert:
  Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Issuer:  CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Algorithm: RSA; Serial number: 0x9b7e0649a33e62b9d5ee90487129ef57
  Valid from Fri Oct 01 00:00:00 GMT 1999 until Wed Jul 16 23:59:59 GMT 2036

adding as trusted cert:
  Subject: OU=AC RAIZ FNMT-RCM, O=FNMT-RCM, C=ES
  Issuer:  OU=AC RAIZ FNMT-RCM, O=FNMT-RCM, C=ES
  Algorithm: RSA; Serial number: 0x5d938d306736c8061d1ac754846907
  Valid from Wed Oct 29 15:59:56 GMT 2008 until Tue Jan 01 00:00:00 GMT 2030

adding as trusted cert:
  Subject: CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
  Issuer:  CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
  Algorithm: RSA; Serial number: 0x40000000001154b5ac394
  Valid from Tue Sep 01 12:00:00 GMT 1998 until Fri Jan 28 12:00:00 GMT 2028

adding as trusted cert:
  Subject: CN=AffirmTrust Networking, O=AffirmTrust, C=US
  Issuer:  CN=AffirmTrust Networking, O=AffirmTrust, C=US
  Algorithm: RSA; Serial number: 0x7c4f04391cd4992d
  Valid from Fri Jan 29 14:08:24 GMT 2010 until Tue Dec 31 14:08:24 GMT 2030

adding as trusted cert:
  Subject: CN=TWCA Global Root CA, OU=Root CA, O=TAIWAN-CA, C=TW
  Issuer:  CN=TWCA Global Root CA, OU=Root CA, O=TAIWAN-CA, C=TW
  Algorithm: RSA; Serial number: 0xcbe
  Valid from Wed Jun 27 06:28:33 GMT 2012 until Tue Dec 31 15:59:59 GMT 2030

adding as trusted cert:
  Subject: CN=AffirmTrust Premium, O=AffirmTrust, C=US
  Issuer:  CN=AffirmTrust Premium, O=AffirmTrust, C=US
  Algorithm: RSA; Serial number: 0x6d8c1446b1a60aee
  Valid from Fri Jan 29 14:10:36 GMT 2010 until Mon Dec 31 14:10:36 GMT 2040

adding as trusted cert:
  Subject: CN=Symantec Class 2 Public Primary Certification Authority - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Issuer:  CN=Symantec Class 2 Public Primary Certification Authority - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Algorithm: EC; Serial number: 0x34176512403bb756802d80cb7955a61e
  Valid from Wed Oct 05 00:00:00 GMT 2011 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: O=Government Root Certification Authority, C=TW
  Issuer:  O=Government Root Certification Authority, C=TW
  Algorithm: RSA; Serial number: 0x1f9d595ad72fc20644a5800869e35ef6
  Valid from Thu Dec 05 13:23:33 GMT 2002 until Sun Dec 05 13:23:33 GMT 2032

adding as trusted cert:
  Subject: CN=GeoTrust Primary Certification Authority - G3, OU=(c) 2008 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
  Issuer:  CN=GeoTrust Primary Certification Authority - G3, OU=(c) 2008 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
  Algorithm: RSA; Serial number: 0x15ac6e9419b2794b41f627a9c3180f1f
  Valid from Wed Apr 02 00:00:00 GMT 2008 until Tue Dec 01 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=TWCA Root Certification Authority, OU=Root CA, O=TAIWAN-CA, C=TW
  Issuer:  CN=TWCA Root Certification Authority, OU=Root CA, O=TAIWAN-CA, C=TW
  Algorithm: RSA; Serial number: 0x1
  Valid from Thu Aug 28 07:24:33 GMT 2008 until Tue Dec 31 15:59:59 GMT 2030

adding as trusted cert:
  Subject: CN=LuxTrust Global Root 2, O=LuxTrust S.A., C=LU
  Issuer:  CN=LuxTrust Global Root 2, O=LuxTrust S.A., C=LU
  Algorithm: RSA; Serial number: 0xa7ea6df4b449eda6a24859ee6b815d3167fbbb1
  Valid from Thu Mar 05 13:21:57 GMT 2015 until Mon Mar 05 13:21:57 GMT 2035

adding as trusted cert:
  Subject: C=DE, O=Atos, CN=Atos TrustedRoot 2011
  Issuer:  C=DE, O=Atos, CN=Atos TrustedRoot 2011
  Algorithm: RSA; Serial number: 0x5c33cb622c5fb332
  Valid from Thu Jul 07 14:58:30 GMT 2011 until Tue Dec 31 23:59:59 GMT 2030

adding as trusted cert:
  Subject: CN=Chambers of Commerce Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
  Issuer:  CN=Chambers of Commerce Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
  Algorithm: RSA; Serial number: 0xa3da427ea4b1aeda
  Valid from Fri Aug 01 12:29:50 GMT 2008 until Sat Jul 31 12:29:50 GMT 2038

adding as trusted cert:
  Subject: CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Issuer:  CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Algorithm: RSA; Serial number: 0x56b629cd34bc78f6
  Valid from Wed May 31 18:14:37 GMT 2017 until Fri May 30 18:14:37 GMT 2042

adding as trusted cert:
  Subject: CN=SecureSign RootCA11, O="Japan Certification Services, Inc.", C=JP
  Issuer:  CN=SecureSign RootCA11, O="Japan Certification Services, Inc.", C=JP
  Algorithm: RSA; Serial number: 0x1
  Valid from Wed Apr 08 04:56:47 GMT 2009 until Sun Apr 08 04:56:47 GMT 2029

adding as trusted cert:
  Subject: CN=SwissSign Silver CA - G2, O=SwissSign AG, C=CH
  Issuer:  CN=SwissSign Silver CA - G2, O=SwissSign AG, C=CH
  Algorithm: RSA; Serial number: 0x4f1bd42f54bb2f4b
  Valid from Wed Oct 25 08:32:46 GMT 2006 until Sat Oct 25 08:32:46 GMT 2036

adding as trusted cert:
  Subject: CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
  Issuer:  CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
  Algorithm: RSA; Serial number: 0x4a538c28
  Valid from Tue Jul 07 17:25:54 GMT 2009 until Sat Dec 07 17:55:54 GMT 2030

adding as trusted cert:
  Subject: CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Issuer:  CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Algorithm: EC; Serial number: 0x75e6dfcbc1685ba8
  Valid from Fri Feb 12 18:14:03 GMT 2016 until Tue Feb 12 18:14:03 GMT 2041

adding as trusted cert:
  Subject: OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US
  Issuer:  OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Jun 29 17:06:20 GMT 2004 until Thu Jun 29 17:06:20 GMT 2034

adding as trusted cert:
  Subject: CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: RSA; Serial number: 0xce7e0e517d846fe8fe560fc1bf03039
  Valid from Fri Nov 10 00:00:00 GMT 2006 until Mon Nov 10 00:00:00 GMT 2031

adding as trusted cert:
  Subject: CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1, OU=Kamu Sertifikasyon Merkezi - Kamu SM, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, L=Gebze - Kocaeli, C=TR
  Issuer:  CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1, OU=Kamu Sertifikasyon Merkezi - Kamu SM, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, L=Gebze - Kocaeli, C=TR
  Algorithm: RSA; Serial number: 0x1
  Valid from Mon Nov 25 08:25:55 GMT 2013 until Sun Oct 25 08:25:55 GMT 2043

adding as trusted cert:
  Subject: CN=TrustCor RootCert CA-2, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
  Issuer:  CN=TrustCor RootCert CA-2, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
  Algorithm: RSA; Serial number: 0x25a1dfca33cb5902
  Valid from Thu Feb 04 12:32:23 GMT 2016 until Sun Dec 31 17:26:39 GMT 2034

adding as trusted cert:
  Subject: CN=Secure Global CA, O=SecureTrust Corporation, C=US
  Issuer:  CN=Secure Global CA, O=SecureTrust Corporation, C=US
  Algorithm: RSA; Serial number: 0x75622a4e8d48a894df413c8f0f8eaa5
  Valid from Tue Nov 07 19:42:28 GMT 2006 until Mon Dec 31 19:52:06 GMT 2029

adding as trusted cert:
  Subject: CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE
  Issuer:  CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE
  Algorithm: RSA; Serial number: 0x1
  Valid from Tue May 30 10:48:38 GMT 2000 until Sat May 30 10:48:38 GMT 2020

adding as trusted cert:
  Subject: CN=Certigna Root CA, OU=0002 48146308100036, O=Dhimyotis, C=FR
  Issuer:  CN=Certigna Root CA, OU=0002 48146308100036, O=Dhimyotis, C=FR
  Algorithm: RSA; Serial number: 0xcae91b89f155030da3e6416dc4e3a6e1
  Valid from Tue Oct 01 08:32:27 GMT 2013 until Sat Oct 01 08:32:27 GMT 2033

adding as trusted cert:
  Subject: CN=T-TeleSec GlobalRoot Class 3, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
  Issuer:  CN=T-TeleSec GlobalRoot Class 3, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
  Algorithm: RSA; Serial number: 0x1
  Valid from Wed Oct 01 10:29:56 GMT 2008 until Sat Oct 01 23:59:59 GMT 2033

adding as trusted cert:
  Subject: CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: EC; Serial number: 0x55556bcf25ea43535c3a40fd5ab4572
  Valid from Thu Aug 01 12:00:00 GMT 2013 until Fri Jan 15 12:00:00 GMT 2038

adding as trusted cert:
  Subject: CN=TrustCor ECA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
  Issuer:  CN=TrustCor ECA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
  Algorithm: RSA; Serial number: 0x84822c5f1c62d040
  Valid from Thu Feb 04 12:32:33 GMT 2016 until Mon Dec 31 17:28:07 GMT 2029

adding as trusted cert:
  Subject: CN=Class 2 Primary CA, O=Certplus, C=FR
  Issuer:  CN=Class 2 Primary CA, O=Certplus, C=FR
  Algorithm: RSA; Serial number: 0x85bd4bf3d8dae369f694d75fc3a54423
  Valid from Wed Jul 07 17:05:00 GMT 1999 until Sat Jul 06 23:59:59 GMT 2019

adding as trusted cert:
  Subject: CN=OISTE WISeKey Global Root GA CA, OU=OISTE Foundation Endorsed, OU=Copyright (c) 2005, O=WISeKey, C=CH
  Issuer:  CN=OISTE WISeKey Global Root GA CA, OU=OISTE Foundation Endorsed, OU=Copyright (c) 2005, O=WISeKey, C=CH
  Algorithm: RSA; Serial number: 0x413d72c7f46b1f81437df1d22854df9a
  Valid from Sun Dec 11 16:03:44 GMT 2005 until Fri Dec 11 16:09:51 GMT 2037

adding as trusted cert:
  Subject: CN=GeoTrust Global CA, O=GeoTrust Inc., C=US
  Issuer:  CN=GeoTrust Global CA, O=GeoTrust Inc., C=US
  Algorithm: RSA; Serial number: 0x23456
  Valid from Tue May 21 04:00:00 GMT 2002 until Sat May 21 04:00:00 GMT 2022

adding as trusted cert:
  Subject: CN=Network Solutions Certificate Authority, O=Network Solutions L.L.C., C=US
  Issuer:  CN=Network Solutions Certificate Authority, O=Network Solutions L.L.C., C=US
  Algorithm: RSA; Serial number: 0x57cb336fc25c16e6471617e3903168e0
  Valid from Fri Dec 01 00:00:00 GMT 2006 until Mon Dec 31 23:59:59 GMT 2029

adding as trusted cert:
  Subject: CN=CFCA EV ROOT, O=China Financial Certification Authority, C=CN
  Issuer:  CN=CFCA EV ROOT, O=China Financial Certification Authority, C=CN
  Algorithm: RSA; Serial number: 0x184accd6
  Valid from Wed Aug 08 03:07:01 GMT 2012 until Mon Dec 31 03:07:01 GMT 2029

adding as trusted cert:
  Subject: CN=SwissSign Platinum CA - G2, O=SwissSign AG, C=CH
  Issuer:  CN=SwissSign Platinum CA - G2, O=SwissSign AG, C=CH
  Algorithm: RSA; Serial number: 0x4eb200670c035d4f
  Valid from Wed Oct 25 08:36:00 GMT 2006 until Sat Oct 25 08:36:00 GMT 2036

adding as trusted cert:
  Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R5
  Issuer:  CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R5
  Algorithm: EC; Serial number: 0x605949e0262ebb55f90a778a71f94ad86c
  Valid from Tue Nov 13 00:00:00 GMT 2012 until Tue Jan 19 03:14:07 GMT 2038

adding as trusted cert:
  Subject: CN=Hellenic Academic and Research Institutions RootCA 2011, O=Hellenic Academic and Research Institutions Cert. Authority, C=GR
  Issuer:  CN=Hellenic Academic and Research Institutions RootCA 2011, O=Hellenic Academic and Research Institutions Cert. Authority, C=GR
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Dec 06 13:49:52 GMT 2011 until Mon Dec 01 13:49:52 GMT 2031

adding as trusted cert:
  Subject: CN=VeriSign Class 2 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Issuer:  CN=VeriSign Class 2 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Algorithm: RSA; Serial number: 0x6170cb498c5f984529e7b0a6d9505b7a
  Valid from Fri Oct 01 00:00:00 GMT 1999 until Wed Jul 16 23:59:59 GMT 2036

adding as trusted cert:
  Subject: CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
  Issuer:  CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Sep 01 00:00:00 GMT 2009 until Thu Dec 31 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=Certum Trusted Network CA 2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
  Issuer:  CN=Certum Trusted Network CA 2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
  Algorithm: RSA; Serial number: 0x21d6d04a4f250fc93237fcaa5e128de9
  Valid from Thu Oct 06 08:39:56 GMT 2011 until Sat Oct 06 08:39:56 GMT 2046

adding as trusted cert:
  Subject: CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net
  Issuer:  CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net
  Algorithm: RSA; Serial number: 0x3863def8
  Valid from Fri Dec 24 17:50:51 GMT 1999 until Tue Jul 24 14:15:12 GMT 2029

adding as trusted cert:
  Subject: CN=IdenTrust Public Sector Root CA 1, O=IdenTrust, C=US
  Issuer:  CN=IdenTrust Public Sector Root CA 1, O=IdenTrust, C=US
  Algorithm: RSA; Serial number: 0xa0142800000014523cf467c00000002
  Valid from Thu Jan 16 17:53:32 GMT 2014 until Mon Jan 16 17:53:32 GMT 2034

adding as trusted cert:
  Subject: CN=Staat der Nederlanden Root CA - G3, O=Staat der Nederlanden, C=NL
  Issuer:  CN=Staat der Nederlanden Root CA - G3, O=Staat der Nederlanden, C=NL
  Algorithm: RSA; Serial number: 0x98a239
  Valid from Thu Nov 14 11:28:42 GMT 2013 until Mon Nov 13 23:00:00 GMT 2028

adding as trusted cert:
  Subject: CN=TeliaSonera Root CA v1, O=TeliaSonera
  Issuer:  CN=TeliaSonera Root CA v1, O=TeliaSonera
  Algorithm: RSA; Serial number: 0x95be16a0f72e46f17b398272fa8bcd96
  Valid from Thu Oct 18 12:00:50 GMT 2007 until Mon Oct 18 12:00:50 GMT 2032

adding as trusted cert:
  Subject: CN=thawte Primary Root CA, OU="(c) 2006 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
  Issuer:  CN=thawte Primary Root CA, OU="(c) 2006 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
  Algorithm: RSA; Serial number: 0x344ed55720d5edec49f42fce37db2b6d
  Valid from Fri Nov 17 00:00:00 GMT 2006 until Wed Jul 16 23:59:59 GMT 2036

adding as trusted cert:
  Subject: CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US
  Issuer:  CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Sep 01 00:00:00 GMT 2009 until Thu Dec 31 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=VeriSign Class 1 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Issuer:  CN=VeriSign Class 1 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Algorithm: RSA; Serial number: 0x8b5b75568454850b00cfaf3848ceb1a4
  Valid from Fri Oct 01 00:00:00 GMT 1999 until Wed Jul 16 23:59:59 GMT 2036

adding as trusted cert:
  Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G4, OU="(c) 2007 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Issuer:  CN=VeriSign Class 3 Public Primary Certification Authority - G4, OU="(c) 2007 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Algorithm: EC; Serial number: 0x2f80fe238c0e220f486712289187acb3
  Valid from Mon Nov 05 00:00:00 GMT 2007 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: CN=Staat der Nederlanden EV Root CA, O=Staat der Nederlanden, C=NL
  Issuer:  CN=Staat der Nederlanden EV Root CA, O=Staat der Nederlanden, C=NL
  Algorithm: RSA; Serial number: 0x98968d
  Valid from Wed Dec 08 11:19:29 GMT 2010 until Thu Dec 08 11:10:28 GMT 2022

adding as trusted cert:
  Subject: CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US
  Issuer:  CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US
  Algorithm: RSA; Serial number: 0x456b5054
  Valid from Mon Nov 27 20:23:42 GMT 2006 until Fri Nov 27 20:53:42 GMT 2026

adding as trusted cert:
  Subject: CN=GTS Root R2, O=Google Trust Services LLC, C=US
  Issuer:  CN=GTS Root R2, O=Google Trust Services LLC, C=US
  Algorithm: RSA; Serial number: 0x6e47a9c65ab3e720c5309a3f6852f26f
  Valid from Wed Jun 22 00:00:00 GMT 2016 until Sun Jun 22 00:00:00 GMT 2036

adding as trusted cert:
  Subject: CN=DigiCert Assured ID Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert Assured ID Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: RSA; Serial number: 0xb931c3ad63967ea6723bfc3af9af44b
  Valid from Thu Aug 01 12:00:00 GMT 2013 until Fri Jan 15 12:00:00 GMT 2038

adding as trusted cert:
  Subject: CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Issuer:  CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Algorithm: RSA; Serial number: 0x7b2c9bd316803299
  Valid from Fri Feb 12 17:39:39 GMT 2016 until Tue Feb 12 17:39:39 GMT 2041

adding as trusted cert:
  Subject: CN=Symantec Class 1 Public Primary Certification Authority - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Issuer:  CN=Symantec Class 1 Public Primary Certification Authority - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Algorithm: EC; Serial number: 0x216e33a5cbd388a46f2907b4273cc4d8
  Valid from Wed Oct 05 00:00:00 GMT 2011 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: CN=Amazon Root CA 4, O=Amazon, C=US
  Issuer:  CN=Amazon Root CA 4, O=Amazon, C=US
  Algorithm: EC; Serial number: 0x66c9fd7c1bb104c2943e5717b7b2cc81ac10e
  Valid from Tue May 26 00:00:00 GMT 2015 until Sat May 26 00:00:00 GMT 2040

adding as trusted cert:
  Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R6
  Issuer:  CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R6
  Algorithm: RSA; Serial number: 0x45e6bb038333c3856548e6ff4551
  Valid from Wed Dec 10 00:00:00 GMT 2014 until Sun Dec 10 00:00:00 GMT 2034

adding as trusted cert:
  Subject: CN=Certum CA, O=Unizeto Sp. z o.o., C=PL
  Issuer:  CN=Certum CA, O=Unizeto Sp. z o.o., C=PL
  Algorithm: RSA; Serial number: 0x10020
  Valid from Tue Jun 11 10:46:39 GMT 2002 until Fri Jun 11 10:46:39 GMT 2027

adding as trusted cert:
  Subject: CN=CA Disig Root R2, O=Disig a.s., L=Bratislava, C=SK
  Issuer:  CN=CA Disig Root R2, O=Disig a.s., L=Bratislava, C=SK
  Algorithm: RSA; Serial number: 0x92b888dbb08ac163
  Valid from Thu Jul 19 09:15:30 GMT 2012 until Sat Jul 19 09:15:30 GMT 2042

adding as trusted cert:
  Subject: CN=OISTE WISeKey Global Root GC CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH
  Issuer:  CN=OISTE WISeKey Global Root GC CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH
  Algorithm: EC; Serial number: 0x212a560caeda0cab4045bf2ba22d3aea
  Valid from Tue May 09 09:48:34 GMT 2017 until Fri May 09 09:58:33 GMT 2042

adding as trusted cert:
  Subject: CN=DST Root CA X3, O=Digital Signature Trust Co.
  Issuer:  CN=DST Root CA X3, O=Digital Signature Trust Co.
  Algorithm: RSA; Serial number: 0x44afb080d6a327ba893039862ef8406b
  Valid from Sat Sep 30 21:12:19 GMT 2000 until Thu Sep 30 14:01:15 GMT 2021

adding as trusted cert:
  Subject: CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO
  Issuer:  CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO
  Algorithm: RSA; Serial number: 0x2
  Valid from Tue Oct 26 08:38:03 GMT 2010 until Fri Oct 26 08:38:03 GMT 2040

adding as trusted cert:
  Subject: CN=D-TRUST Root Class 3 CA 2 EV 2009, O=D-Trust GmbH, C=DE
  Issuer:  CN=D-TRUST Root Class 3 CA 2 EV 2009, O=D-Trust GmbH, C=DE
  Algorithm: RSA; Serial number: 0x983f4
  Valid from Thu Nov 05 08:50:46 GMT 2009 until Mon Nov 05 08:50:46 GMT 2029

adding as trusted cert:
  Subject: CN=DigiCert Assured ID Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert Assured ID Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: EC; Serial number: 0xba15afa1ddfa0b54944afcd24a06cec
  Valid from Thu Aug 01 12:00:00 GMT 2013 until Fri Jan 15 12:00:00 GMT 2038

adding as trusted cert:
  Subject: CN=SwissSign Gold CA - G2, O=SwissSign AG, C=CH
  Issuer:  CN=SwissSign Gold CA - G2, O=SwissSign AG, C=CH
  Algorithm: RSA; Serial number: 0xbb401c43f55e4fb0
  Valid from Wed Oct 25 08:30:35 GMT 2006 until Sat Oct 25 08:30:35 GMT 2036

adding as trusted cert:
  Subject: CN=USERTrust ECC Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
  Issuer:  CN=USERTrust ECC Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
  Algorithm: EC; Serial number: 0x5c8b99c55a94c5d27156decd8980cc26
  Valid from Mon Feb 01 00:00:00 GMT 2010 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: OU=certSIGN ROOT CA, O=certSIGN, C=RO
  Issuer:  OU=certSIGN ROOT CA, O=certSIGN, C=RO
  Algorithm: RSA; Serial number: 0x200605167002
  Valid from Tue Jul 04 17:20:04 GMT 2006 until Fri Jul 04 17:20:04 GMT 2031

adding as trusted cert:
  Subject: CN=QuoVadis Root CA 2, O=QuoVadis Limited, C=BM
  Issuer:  CN=QuoVadis Root CA 2, O=QuoVadis Limited, C=BM
  Algorithm: RSA; Serial number: 0x509
  Valid from Fri Nov 24 18:27:00 GMT 2006 until Mon Nov 24 18:23:33 GMT 2031

adding as trusted cert:
  Subject: CN=IdenTrust Commercial Root CA 1, O=IdenTrust, C=US
  Issuer:  CN=IdenTrust Commercial Root CA 1, O=IdenTrust, C=US
  Algorithm: RSA; Serial number: 0xa0142800000014523c844b500000002
  Valid from Thu Jan 16 18:12:23 GMT 2014 until Mon Jan 16 18:12:23 GMT 2034

adding as trusted cert:
  Subject: CN=QuoVadis Root CA 1 G3, O=QuoVadis Limited, C=BM
  Issuer:  CN=QuoVadis Root CA 1 G3, O=QuoVadis Limited, C=BM
  Algorithm: RSA; Serial number: 0x78585f2ead2c194be3370735341328b596d46593
  Valid from Thu Jan 12 17:27:44 GMT 2012 until Sun Jan 12 17:27:44 GMT 2042

adding as trusted cert:
  Subject: CN=D-TRUST Root Class 3 CA 2 2009, O=D-Trust GmbH, C=DE
  Issuer:  CN=D-TRUST Root Class 3 CA 2 2009, O=D-Trust GmbH, C=DE
  Algorithm: RSA; Serial number: 0x983f3
  Valid from Thu Nov 05 08:35:58 GMT 2009 until Mon Nov 05 08:35:58 GMT 2029

adding as trusted cert:
  Subject: CN=Deutsche Telekom Root CA 2, OU=T-TeleSec Trust Center, O=Deutsche Telekom AG, C=DE
  Issuer:  CN=Deutsche Telekom Root CA 2, OU=T-TeleSec Trust Center, O=Deutsche Telekom AG, C=DE
  Algorithm: RSA; Serial number: 0x26
  Valid from Fri Jul 09 12:11:00 GMT 1999 until Tue Jul 09 23:59:00 GMT 2019

adding as trusted cert:
  Subject: CN=Symantec Class 1 Public Primary Certification Authority - G6, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Issuer:  CN=Symantec Class 1 Public Primary Certification Authority - G6, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Algorithm: RSA; Serial number: 0x243275f21d2fd20933f7b46acad0f398
  Valid from Tue Oct 18 00:00:00 GMT 2011 until Tue Dec 01 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
  Issuer:  CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
  Algorithm: RSA; Serial number: 0x1fd6d30fca3ca51a81bbc640e35032d
  Valid from Mon Feb 01 00:00:00 GMT 2010 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: CN=GTS Root R3, O=Google Trust Services LLC, C=US
  Issuer:  CN=GTS Root R3, O=Google Trust Services LLC, C=US
  Algorithm: EC; Serial number: 0x6e47a9c76ca9732440890f0355dd8d1d
  Valid from Wed Jun 22 00:00:00 GMT 2016 until Sun Jun 22 00:00:00 GMT 2036

adding as trusted cert:
  Subject: CN=Izenpe.com, O=IZENPE S.A., C=ES
  Issuer:  CN=Izenpe.com, O=IZENPE S.A., C=ES
  Algorithm: RSA; Serial number: 0xb0b75a16485fbfe1cbf58bd719e67d
  Valid from Thu Dec 13 13:08:28 GMT 2007 until Sun Dec 13 08:27:25 GMT 2037

adding as trusted cert:
  Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2
  Issuer:  CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2
  Algorithm: RSA; Serial number: 0x400000000010f8626e60d
  Valid from Fri Dec 15 08:00:00 GMT 2006 until Wed Dec 15 08:00:00 GMT 2021

adding as trusted cert:
  Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Issuer:  CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Algorithm: RSA; Serial number: 0x18dad19e267de8bb4a2158cdcc6b3b4a
  Valid from Wed Nov 08 00:00:00 GMT 2006 until Wed Jul 16 23:59:59 GMT 2036

adding as trusted cert:
  Subject: CN=QuoVadis Root CA 3, O=QuoVadis Limited, C=BM
  Issuer:  CN=QuoVadis Root CA 3, O=QuoVadis Limited, C=BM
  Algorithm: RSA; Serial number: 0x5c6
  Valid from Fri Nov 24 19:11:23 GMT 2006 until Mon Nov 24 19:06:44 GMT 2031

adding as trusted cert:
  Subject: CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
  Issuer:  CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Sep 01 00:00:00 GMT 2009 until Thu Dec 31 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=OISTE WISeKey Global Root GB CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH
  Issuer:  CN=OISTE WISeKey Global Root GB CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH
  Algorithm: RSA; Serial number: 0x76b1205274f0858746b3f8231af6c2c0
  Valid from Mon Dec 01 15:00:32 GMT 2014 until Thu Dec 01 15:10:31 GMT 2039

adding as trusted cert:
  Subject: CN=Amazon Root CA 3, O=Amazon, C=US
  Issuer:  CN=Amazon Root CA 3, O=Amazon, C=US
  Algorithm: EC; Serial number: 0x66c9fd5749736663f3b0b9ad9e89e7603f24a
  Valid from Tue May 26 00:00:00 GMT 2015 until Sat May 26 00:00:00 GMT 2040

adding as trusted cert:
  Subject: CN=Symantec Class 2 Public Primary Certification Authority - G6, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Issuer:  CN=Symantec Class 2 Public Primary Certification Authority - G6, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Algorithm: RSA; Serial number: 0x64829efc371e745dfc97ff97c8b1ff41
  Valid from Tue Oct 18 00:00:00 GMT 2011 until Tue Dec 01 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=Swisscom Root CA 2, OU=Digital Certificate Services, O=Swisscom, C=ch
  Issuer:  CN=Swisscom Root CA 2, OU=Digital Certificate Services, O=Swisscom, C=ch
  Algorithm: RSA; Serial number: 0x1e9e28e848f2e5efc37c4a1e5a1867b6
  Valid from Fri Jun 24 08:38:14 GMT 2011 until Wed Jun 25 07:38:14 GMT 2031

adding as trusted cert:
  Subject: CN=QuoVadis Root CA 3 G3, O=QuoVadis Limited, C=BM
  Issuer:  CN=QuoVadis Root CA 3 G3, O=QuoVadis Limited, C=BM
  Algorithm: RSA; Serial number: 0x2ef59b0228a7db7affd5a3a9eebd03a0cf126a1d
  Valid from Thu Jan 12 20:26:32 GMT 2012 until Sun Jan 12 20:26:32 GMT 2042

adding as trusted cert:
  Subject: EMAILADDRESS=info@e-szigno.hu, CN=Microsec e-Szigno Root CA 2009, O=Microsec Ltd., L=Budapest, C=HU
  Issuer:  EMAILADDRESS=info@e-szigno.hu, CN=Microsec e-Szigno Root CA 2009, O=Microsec Ltd., L=Budapest, C=HU
  Algorithm: RSA; Serial number: 0xc27e43044e473f19
  Valid from Tue Jun 16 11:30:18 GMT 2009 until Sun Dec 30 11:30:18 GMT 2029

adding as trusted cert:
  Subject: CN=NetLock Arany (Class Gold) Főtanúsítvány, OU=Tanúsítványkiadók (Certification Services), O=NetLock Kft., L=Budapest, C=HU
  Issuer:  CN=NetLock Arany (Class Gold) Főtanúsítvány, OU=Tanúsítványkiadók (Certification Services), O=NetLock Kft., L=Budapest, C=HU
  Algorithm: RSA; Serial number: 0x49412ce40010
  Valid from Thu Dec 11 15:08:21 GMT 2008 until Wed Dec 06 15:08:21 GMT 2028

adding as trusted cert:
  Subject: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT
  Issuer:  CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT
  Algorithm: RSA; Serial number: 0x570a119742c4e3cc
  Valid from Thu Sep 22 11:22:02 GMT 2011 until Sun Sep 22 11:22:02 GMT 2030

adding as trusted cert:
  Subject: CN=Autoridad de Certificacion Firmaprofesional CIF A62634068, C=ES
  Issuer:  CN=Autoridad de Certificacion Firmaprofesional CIF A62634068, C=ES
  Algorithm: RSA; Serial number: 0x53ec3beefbb2485f
  Valid from Wed May 20 08:38:15 GMT 2009 until Tue Dec 31 08:38:15 GMT 2030

adding as trusted cert:
  Subject: CN=Certigna, O=Dhimyotis, C=FR
  Issuer:  CN=Certigna, O=Dhimyotis, C=FR
  Algorithm: RSA; Serial number: 0xfedce3010fc948ff
  Valid from Fri Jun 29 15:13:05 GMT 2007 until Tue Jun 29 15:13:05 GMT 2027

adding as trusted cert:
  Subject: CN=GTS Root R1, O=Google Trust Services LLC, C=US
  Issuer:  CN=GTS Root R1, O=Google Trust Services LLC, C=US
  Algorithm: RSA; Serial number: 0x6e47a9c54b470c0dec33d089b91cf4e1
  Valid from Wed Jun 22 00:00:00 GMT 2016 until Sun Jun 22 00:00:00 GMT 2036

adding as trusted cert:
  Subject: CN=E-Tugra Certification Authority, OU=E-Tugra Sertifikasyon Merkezi, O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., L=Ankara, C=TR
  Issuer:  CN=E-Tugra Certification Authority, OU=E-Tugra Sertifikasyon Merkezi, O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., L=Ankara, C=TR
  Algorithm: RSA; Serial number: 0x6a683e9c519bcb53
  Valid from Tue Mar 05 12:09:48 GMT 2013 until Fri Mar 03 12:09:48 GMT 2023

adding as trusted cert:
  Subject: C=ES, O=ACCV, OU=PKIACCV, CN=ACCVRAIZ1
  Issuer:  C=ES, O=ACCV, OU=PKIACCV, CN=ACCVRAIZ1
  Algorithm: RSA; Serial number: 0x5ec3b7a6437fa4e0
  Valid from Thu May 05 09:37:37 GMT 2011 until Tue Dec 31 09:37:37 GMT 2030

adding as trusted cert:
  Subject: CN=QuoVadis Root Certification Authority, OU=Root Certification Authority, O=QuoVadis Limited, C=BM
  Issuer:  CN=QuoVadis Root Certification Authority, OU=Root Certification Authority, O=QuoVadis Limited, C=BM
  Algorithm: RSA; Serial number: 0x3ab6508b
  Valid from Mon Mar 19 18:33:33 GMT 2001 until Wed Mar 17 18:33:33 GMT 2021

adding as trusted cert:
  Subject: CN=SSL.com EV Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Issuer:  CN=SSL.com EV Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Algorithm: EC; Serial number: 0x2c299c5b16ed0595
  Valid from Fri Feb 12 18:15:23 GMT 2016 until Tue Feb 12 18:15:23 GMT 2041

adding as trusted cert:
  Subject: CN=Buypass Class 3 Root CA, O=Buypass AS-983163327, C=NO
  Issuer:  CN=Buypass Class 3 Root CA, O=Buypass AS-983163327, C=NO
  Algorithm: RSA; Serial number: 0x2
  Valid from Tue Oct 26 08:28:58 GMT 2010 until Fri Oct 26 08:28:58 GMT 2040

adding as trusted cert:
  Subject: CN=thawte Primary Root CA - G2, OU="(c) 2007 thawte, Inc. - For authorized use only", O="thawte, Inc.", C=US
  Issuer:  CN=thawte Primary Root CA - G2, OU="(c) 2007 thawte, Inc. - For authorized use only", O="thawte, Inc.", C=US
  Algorithm: EC; Serial number: 0x35fc265cd9844fc93d263d579baed756
  Valid from Mon Nov 05 00:00:00 GMT 2007 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Issuer:  CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Algorithm: RSA; Serial number: 0x401ac46421b31321030ebbe4121ac51d
  Valid from Wed Apr 02 00:00:00 GMT 2008 until Tue Dec 01 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=Cybertrust Global Root, O="Cybertrust, Inc"
  Issuer:  CN=Cybertrust Global Root, O="Cybertrust, Inc"
  Algorithm: RSA; Serial number: 0x400000000010f85aa2d48
  Valid from Fri Dec 15 08:00:00 GMT 2006 until Wed Dec 15 08:00:00 GMT 2021

adding as trusted cert:
  Subject: CN=Global Chambersign Root, OU=http://www.chambersign.org, O=AC Camerfirma SA CIF A82743287, C=EU
  Issuer:  CN=Global Chambersign Root, OU=http://www.chambersign.org, O=AC Camerfirma SA CIF A82743287, C=EU
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Sep 30 16:14:18 GMT 2003 until Wed Sep 30 16:14:18 GMT 2037

adding as trusted cert:
  Subject: CN=GTS Root R4, O=Google Trust Services LLC, C=US
  Issuer:  CN=GTS Root R4, O=Google Trust Services LLC, C=US
  Algorithm: EC; Serial number: 0x6e47a9c88b94b6e8bb3b2ad8a2b2c199
  Valid from Wed Jun 22 00:00:00 GMT 2016 until Sun Jun 22 00:00:00 GMT 2036

adding as trusted cert:
  Subject: OU=Trustis FPS Root CA, O=Trustis Limited, C=GB
  Issuer:  OU=Trustis FPS Root CA, O=Trustis Limited, C=GB
  Algorithm: RSA; Serial number: 0x1b1fadb620f924d3366bf7c7f18ca059
  Valid from Tue Dec 23 12:14:06 GMT 2003 until Sun Jan 21 11:36:54 GMT 2024

adding as trusted cert:
  Subject: CN=Amazon Root CA 1, O=Amazon, C=US
  Issuer:  CN=Amazon Root CA 1, O=Amazon, C=US
  Algorithm: RSA; Serial number: 0x66c9fcf99bf8c0a39e2f0788a43e696365bca
  Valid from Tue May 26 00:00:00 GMT 2015 until Sun Jan 17 00:00:00 GMT 2038

adding as trusted cert:
  Subject: CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE
  Issuer:  CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE
  Algorithm: RSA; Serial number: 0x1
  Valid from Tue May 30 10:38:31 GMT 2000 until Sat May 30 10:38:31 GMT 2020

adding as trusted cert:
  Subject: CN=Amazon Root CA 2, O=Amazon, C=US
  Issuer:  CN=Amazon Root CA 2, O=Amazon, C=US
  Algorithm: RSA; Serial number: 0x66c9fd29635869f0a0fe58678f85b26bb8a37
  Valid from Tue May 26 00:00:00 GMT 2015 until Sat May 26 00:00:00 GMT 2040

adding as trusted cert:
  Subject: CN=GDCA TrustAUTH R5 ROOT, O="GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.", C=CN
  Issuer:  CN=GDCA TrustAUTH R5 ROOT, O="GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.", C=CN
  Algorithm: RSA; Serial number: 0x7d0997fef047ea7a
  Valid from Wed Nov 26 05:13:15 GMT 2014 until Mon Dec 31 15:59:59 GMT 2040

adding as trusted cert:
  Subject: CN=UCA Extended Validation Root, O=UniTrust, C=CN
  Issuer:  CN=UCA Extended Validation Root, O=UniTrust, C=CN
  Algorithm: RSA; Serial number: 0x4fd22b8ff564c8339e4f345866237060
  Valid from Fri Mar 13 00:00:00 GMT 2015 until Fri Dec 31 00:00:00 GMT 2038

adding as trusted cert:
  Subject: CN=COMODO Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Issuer:  CN=COMODO Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Algorithm: RSA; Serial number: 0x4e812d8a8265e00b02ee3e350246e53d
  Valid from Fri Dec 01 00:00:00 GMT 2006 until Mon Dec 31 23:59:59 GMT 2029

adding as trusted cert:
  Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R4
  Issuer:  CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R4
  Algorithm: EC; Serial number: 0x2a38a41c960a04de42b228a50be8349802
  Valid from Tue Nov 13 00:00:00 GMT 2012 until Tue Jan 19 03:14:07 GMT 2038

adding as trusted cert:
  Subject: EMAILADDRESS=pki@sk.ee, CN=EE Certification Centre Root CA, O=AS Sertifitseerimiskeskus, C=EE
  Issuer:  EMAILADDRESS=pki@sk.ee, CN=EE Certification Centre Root CA, O=AS Sertifitseerimiskeskus, C=EE
  Algorithm: RSA; Serial number: 0x5480f9a073ed3f004cca89d8e371e64a
  Valid from Sat Oct 30 10:10:30 GMT 2010 until Tue Dec 17 23:59:59 GMT 2030

adding as trusted cert:
  Subject: CN=Global Chambersign Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
  Issuer:  CN=Global Chambersign Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
  Algorithm: RSA; Serial number: 0xc9cdd3e9d57d23ce
  Valid from Fri Aug 01 12:31:40 GMT 2008 until Sat Jul 31 12:31:40 GMT 2038

adding as trusted cert:
  Subject: CN=thawte Primary Root CA - G3, OU="(c) 2008 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
  Issuer:  CN=thawte Primary Root CA - G3, OU="(c) 2008 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
  Algorithm: RSA; Serial number: 0x600197b746a7eab4b49ad64b2ff790fb
  Valid from Wed Apr 02 00:00:00 GMT 2008 until Tue Dec 01 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=UCA Global G2 Root, O=UniTrust, C=CN
  Issuer:  CN=UCA Global G2 Root, O=UniTrust, C=CN
  Algorithm: RSA; Serial number: 0x5ddfb1da5aa3ed5dbe5a6520650390ef
  Valid from Fri Mar 11 00:00:00 GMT 2016 until Mon Dec 31 00:00:00 GMT 2040

adding as trusted cert:
  Subject: CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Issuer:  CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Algorithm: RSA; Serial number: 0x4caaf9cadb636fe01ff74ed85b03869d
  Valid from Tue Jan 19 00:00:00 GMT 2010 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: CN=AffirmTrust Premium ECC, O=AffirmTrust, C=US
  Issuer:  CN=AffirmTrust Premium ECC, O=AffirmTrust, C=US
  Algorithm: EC; Serial number: 0x7497258ac73f7a54
  Valid from Fri Jan 29 14:20:24 GMT 2010 until Mon Dec 31 14:20:24 GMT 2040

adding as trusted cert:
  Subject: CN=Staat der Nederlanden Root CA - G2, O=Staat der Nederlanden, C=NL
  Issuer:  CN=Staat der Nederlanden Root CA - G2, O=Staat der Nederlanden, C=NL
  Algorithm: RSA; Serial number: 0x98968c
  Valid from Wed Mar 26 11:18:17 GMT 2008 until Wed Mar 25 11:03:10 GMT 2020

adding as trusted cert:
  Subject: CN=T-TeleSec GlobalRoot Class 2, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
  Issuer:  CN=T-TeleSec GlobalRoot Class 2, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
  Algorithm: RSA; Serial number: 0x1
  Valid from Wed Oct 01 10:40:14 GMT 2008 until Sat Oct 01 23:59:59 GMT 2033

adding as trusted cert:
  Subject: CN=SZAFIR ROOT CA2, O=Krajowa Izba Rozliczeniowa S.A., C=PL
  Issuer:  CN=SZAFIR ROOT CA2, O=Krajowa Izba Rozliczeniowa S.A., C=PL
  Algorithm: RSA; Serial number: 0x3e8a5d07ec55d232d5b7e3b65f01eb2ddce4d6e4
  Valid from Mon Oct 19 07:43:30 GMT 2015 until Fri Oct 19 07:43:30 GMT 2035

adding as trusted cert:
  Subject: CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: RSA; Serial number: 0x33af1e6a711a9a0bb2864b11d09fae5
  Valid from Thu Aug 01 12:00:00 GMT 2013 until Fri Jan 15 12:00:00 GMT 2038

trigger seeding of SecureRandom
done seeding SecureRandom
Using SSLEngineImpl.
trustStore is: /usr/lib/jvm/java-1.8-openjdk/jre/lib/security/cacerts
trustStore type is : jks
trustStore provider is : 
init truststore
adding as trusted cert:
  Subject: CN=Hongkong Post Root CA 1, O=Hongkong Post, C=HK
  Issuer:  CN=Hongkong Post Root CA 1, O=Hongkong Post, C=HK
  Algorithm: RSA; Serial number: 0x3e8
  Valid from Thu May 15 05:13:14 GMT 2003 until Mon May 15 04:52:29 GMT 2023

adding as trusted cert:
  Subject: CN=SecureTrust CA, O=SecureTrust Corporation, C=US
  Issuer:  CN=SecureTrust CA, O=SecureTrust Corporation, C=US
  Algorithm: RSA; Serial number: 0xcf08e5c0816a5ad427ff0eb271859d0
  Valid from Tue Nov 07 19:31:18 GMT 2006 until Mon Dec 31 19:40:55 GMT 2029

adding as trusted cert:
  Subject: CN=Entrust Root Certification Authority - EC1, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
  Issuer:  CN=Entrust Root Certification Authority - EC1, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
  Algorithm: EC; Serial number: 0xa68b79290000000050d091f9
  Valid from Tue Dec 18 15:25:36 GMT 2012 until Fri Dec 18 15:55:36 GMT 2037

adding as trusted cert:
  Subject: CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: RSA; Serial number: 0x83be056904246b1a1756ac95991c74a
  Valid from Fri Nov 10 00:00:00 GMT 2006 until Mon Nov 10 00:00:00 GMT 2031

adding as trusted cert:
  Subject: OU=Security Communication RootCA1, O=SECOM Trust.net, C=JP
  Issuer:  OU=Security Communication RootCA1, O=SECOM Trust.net, C=JP
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Sep 30 04:20:49 GMT 2003 until Sat Sep 30 04:20:49 GMT 2023

adding as trusted cert:
  Subject: CN=QuoVadis Root CA 2 G3, O=QuoVadis Limited, C=BM
  Issuer:  CN=QuoVadis Root CA 2 G3, O=QuoVadis Limited, C=BM
  Algorithm: RSA; Serial number: 0x445734245b81899b35f2ceb82b3b5ba726f07528
  Valid from Thu Jan 12 18:59:32 GMT 2012 until Sun Jan 12 18:59:32 GMT 2042

adding as trusted cert:
  Subject: CN=Hellenic Academic and Research Institutions RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
  Issuer:  CN=Hellenic Academic and Research Institutions RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Jul 07 10:11:21 GMT 2015 until Sat Jun 30 10:11:21 GMT 2040

adding as trusted cert:
  Subject: CN=DigiCert Trusted Root G4, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert Trusted Root G4, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: RSA; Serial number: 0x59b1b579e8e2132e23907bda777755c
  Valid from Thu Aug 01 12:00:00 GMT 2013 until Fri Jan 15 12:00:00 GMT 2038

adding as trusted cert:
  Subject: CN=GeoTrust Primary Certification Authority, O=GeoTrust Inc., C=US
  Issuer:  CN=GeoTrust Primary Certification Authority, O=GeoTrust Inc., C=US
  Algorithm: RSA; Serial number: 0x18acb56afd69b6153a636cafdafac4a1
  Valid from Mon Nov 27 00:00:00 GMT 2006 until Wed Jul 16 23:59:59 GMT 2036

adding as trusted cert:
  Subject: CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
  Issuer:  CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
  Algorithm: EC; Serial number: 0x0
  Valid from Tue Jul 07 10:37:12 GMT 2015 until Sat Jun 30 10:37:12 GMT 2040

adding as trusted cert:
  Subject: OU=Security Communication RootCA2, O="SECOM Trust Systems CO.,LTD.", C=JP
  Issuer:  OU=Security Communication RootCA2, O="SECOM Trust Systems CO.,LTD.", C=JP
  Algorithm: RSA; Serial number: 0x0
  Valid from Fri May 29 05:00:39 GMT 2009 until Tue May 29 05:00:39 GMT 2029

adding as trusted cert:
  Subject: OU=ePKI Root Certification Authority, O="Chunghwa Telecom Co., Ltd.", C=TW
  Issuer:  OU=ePKI Root Certification Authority, O="Chunghwa Telecom Co., Ltd.", C=TW
  Algorithm: RSA; Serial number: 0x15c8bd65475cafb897005ee406d2bc9d
  Valid from Mon Dec 20 02:31:27 GMT 2004 until Wed Dec 20 02:31:27 GMT 2034

adding as trusted cert:
  Subject: CN=AffirmTrust Commercial, O=AffirmTrust, C=US
  Issuer:  CN=AffirmTrust Commercial, O=AffirmTrust, C=US
  Algorithm: RSA; Serial number: 0x7777062726a9b17c
  Valid from Fri Jan 29 14:06:06 GMT 2010 until Tue Dec 31 14:06:06 GMT 2030

adding as trusted cert:
  Subject: CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
  Issuer:  CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
  Algorithm: RSA; Serial number: 0x444c0
  Valid from Wed Oct 22 12:07:37 GMT 2008 until Mon Dec 31 12:07:37 GMT 2029

adding as trusted cert:
  Subject: CN=XRamp Global Certification Authority, O=XRamp Security Services Inc, OU=www.xrampsecurity.com, C=US
  Issuer:  CN=XRamp Global Certification Authority, O=XRamp Security Services Inc, OU=www.xrampsecurity.com, C=US
  Algorithm: RSA; Serial number: 0x50946cec18ead59c4dd597ef758fa0ad
  Valid from Mon Nov 01 17:14:04 GMT 2004 until Mon Jan 01 05:37:19 GMT 2035

adding as trusted cert:
  Subject: CN=EC-ACC, OU=Jerarquia Entitats de Certificacio Catalanes, OU=Vegeu https://www.catcert.net/verarrel (c)03, OU=Serveis Publics de Certificacio, O=Agencia Catalana de Certificacio (NIF Q-0801176-I), C=ES
  Issuer:  CN=EC-ACC, OU=Jerarquia Entitats de Certificacio Catalanes, OU=Vegeu https://www.catcert.net/verarrel (c)03, OU=Serveis Publics de Certificacio, O=Agencia Catalana de Certificacio (NIF Q-0801176-I), C=ES
  Algorithm: RSA; Serial number: 0x-11d4c2142bde21eb579d53fb0c223bff
  Valid from Tue Jan 07 23:00:00 GMT 2003 until Tue Jan 07 22:59:59 GMT 2031

adding as trusted cert:
  Subject: CN=Sonera Class2 CA, O=Sonera, C=FI
  Issuer:  CN=Sonera Class2 CA, O=Sonera, C=FI
  Algorithm: RSA; Serial number: 0x1d
  Valid from Fri Apr 06 07:29:40 GMT 2001 until Tue Apr 06 07:29:40 GMT 2021

adding as trusted cert:
  Subject: CN=GeoTrust Primary Certification Authority - G2, OU=(c) 2007 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
  Issuer:  CN=GeoTrust Primary Certification Authority - G2, OU=(c) 2007 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
  Algorithm: EC; Serial number: 0x3cb2f4480a00e2feeb243b5e603ec36b
  Valid from Mon Nov 05 00:00:00 GMT 2007 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Issuer:  CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Algorithm: EC; Serial number: 0x1f47afaa62007050544c019e9b63992a
  Valid from Thu Mar 06 00:00:00 GMT 2008 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: CN=Certinomis - Root CA, OU=0002 433998903, O=Certinomis, C=FR
  Issuer:  CN=Certinomis - Root CA, OU=0002 433998903, O=Certinomis, C=FR
  Algorithm: RSA; Serial number: 0x1
  Valid from Mon Oct 21 09:17:18 GMT 2013 until Fri Oct 21 09:17:18 GMT 2033

adding as trusted cert:
  Subject: CN=ISRG Root X1, O=Internet Security Research Group, C=US
  Issuer:  CN=ISRG Root X1, O=Internet Security Research Group, C=US
  Algorithm: RSA; Serial number: 0x8210cfb0d240e3594463e0bb63828b00
  Valid from Thu Jun 04 11:04:38 GMT 2015 until Mon Jun 04 11:04:38 GMT 2035

adding as trusted cert:
  Subject: CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: RSA; Serial number: 0x2ac5c266a0b409b8f0b79f2ae462577
  Valid from Fri Nov 10 00:00:00 GMT 2006 until Mon Nov 10 00:00:00 GMT 2031

adding as trusted cert:
  Subject: CN=TrustCor RootCert CA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
  Issuer:  CN=TrustCor RootCert CA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
  Algorithm: RSA; Serial number: 0xda9bec71f303b019
  Valid from Thu Feb 04 12:32:16 GMT 2016 until Mon Dec 31 17:23:16 GMT 2029

adding as trusted cert:
  Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
  Issuer:  CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3
  Algorithm: RSA; Serial number: 0x4000000000121585308a2
  Valid from Wed Mar 18 10:00:00 GMT 2009 until Sun Mar 18 10:00:00 GMT 2029

adding as trusted cert:
  Subject: CN=GeoTrust Universal CA, O=GeoTrust Inc., C=US
  Issuer:  CN=GeoTrust Universal CA, O=GeoTrust Inc., C=US
  Algorithm: RSA; Serial number: 0x1
  Valid from Thu Mar 04 05:00:00 GMT 2004 until Sun Mar 04 05:00:00 GMT 2029

adding as trusted cert:
  Subject: CN=D-TRUST Root CA 3 2013, O=D-Trust GmbH, C=DE
  Issuer:  CN=D-TRUST Root CA 3 2013, O=D-Trust GmbH, C=DE
  Algorithm: RSA; Serial number: 0xfddac
  Valid from Fri Sep 20 08:25:51 GMT 2013 until Wed Sep 20 08:25:51 GMT 2028

adding as trusted cert:
  Subject: CN=GeoTrust Universal CA 2, O=GeoTrust Inc., C=US
  Issuer:  CN=GeoTrust Universal CA 2, O=GeoTrust Inc., C=US
  Algorithm: RSA; Serial number: 0x1
  Valid from Thu Mar 04 05:00:00 GMT 2004 until Sun Mar 04 05:00:00 GMT 2029

adding as trusted cert:
  Subject: CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE
  Issuer:  CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE
  Algorithm: RSA; Serial number: 0x20000b9
  Valid from Fri May 12 18:46:00 GMT 2000 until Mon May 12 23:59:00 GMT 2025

adding as trusted cert:
  Subject: CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Issuer:  CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Algorithm: RSA; Serial number: 0x1
  Valid from Thu Jan 01 00:00:00 GMT 2004 until Sun Dec 31 23:59:59 GMT 2028

adding as trusted cert:
  Subject: OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US
  Issuer:  OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Jun 29 17:39:16 GMT 2004 until Thu Jun 29 17:39:16 GMT 2034

adding as trusted cert:
  Subject: CN=Chambers of Commerce Root, OU=http://www.chambersign.org, O=AC Camerfirma SA CIF A82743287, C=EU
  Issuer:  CN=Chambers of Commerce Root, OU=http://www.chambersign.org, O=AC Camerfirma SA CIF A82743287, C=EU
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Sep 30 16:13:43 GMT 2003 until Wed Sep 30 16:13:44 GMT 2037

adding as trusted cert:
  Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Issuer:  CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Algorithm: RSA; Serial number: 0x9b7e0649a33e62b9d5ee90487129ef57
  Valid from Fri Oct 01 00:00:00 GMT 1999 until Wed Jul 16 23:59:59 GMT 2036

adding as trusted cert:
  Subject: OU=AC RAIZ FNMT-RCM, O=FNMT-RCM, C=ES
  Issuer:  OU=AC RAIZ FNMT-RCM, O=FNMT-RCM, C=ES
  Algorithm: RSA; Serial number: 0x5d938d306736c8061d1ac754846907
  Valid from Wed Oct 29 15:59:56 GMT 2008 until Tue Jan 01 00:00:00 GMT 2030

adding as trusted cert:
  Subject: CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
  Issuer:  CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE
  Algorithm: RSA; Serial number: 0x40000000001154b5ac394
  Valid from Tue Sep 01 12:00:00 GMT 1998 until Fri Jan 28 12:00:00 GMT 2028

adding as trusted cert:
  Subject: CN=AffirmTrust Networking, O=AffirmTrust, C=US
  Issuer:  CN=AffirmTrust Networking, O=AffirmTrust, C=US
  Algorithm: RSA; Serial number: 0x7c4f04391cd4992d
  Valid from Fri Jan 29 14:08:24 GMT 2010 until Tue Dec 31 14:08:24 GMT 2030

adding as trusted cert:
  Subject: CN=TWCA Global Root CA, OU=Root CA, O=TAIWAN-CA, C=TW
  Issuer:  CN=TWCA Global Root CA, OU=Root CA, O=TAIWAN-CA, C=TW
  Algorithm: RSA; Serial number: 0xcbe
  Valid from Wed Jun 27 06:28:33 GMT 2012 until Tue Dec 31 15:59:59 GMT 2030

adding as trusted cert:
  Subject: CN=AffirmTrust Premium, O=AffirmTrust, C=US
  Issuer:  CN=AffirmTrust Premium, O=AffirmTrust, C=US
  Algorithm: RSA; Serial number: 0x6d8c1446b1a60aee
  Valid from Fri Jan 29 14:10:36 GMT 2010 until Mon Dec 31 14:10:36 GMT 2040

adding as trusted cert:
  Subject: CN=Symantec Class 2 Public Primary Certification Authority - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Issuer:  CN=Symantec Class 2 Public Primary Certification Authority - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Algorithm: EC; Serial number: 0x34176512403bb756802d80cb7955a61e
  Valid from Wed Oct 05 00:00:00 GMT 2011 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: O=Government Root Certification Authority, C=TW
  Issuer:  O=Government Root Certification Authority, C=TW
  Algorithm: RSA; Serial number: 0x1f9d595ad72fc20644a5800869e35ef6
  Valid from Thu Dec 05 13:23:33 GMT 2002 until Sun Dec 05 13:23:33 GMT 2032

adding as trusted cert:
  Subject: CN=GeoTrust Primary Certification Authority - G3, OU=(c) 2008 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
  Issuer:  CN=GeoTrust Primary Certification Authority - G3, OU=(c) 2008 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US
  Algorithm: RSA; Serial number: 0x15ac6e9419b2794b41f627a9c3180f1f
  Valid from Wed Apr 02 00:00:00 GMT 2008 until Tue Dec 01 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=TWCA Root Certification Authority, OU=Root CA, O=TAIWAN-CA, C=TW
  Issuer:  CN=TWCA Root Certification Authority, OU=Root CA, O=TAIWAN-CA, C=TW
  Algorithm: RSA; Serial number: 0x1
  Valid from Thu Aug 28 07:24:33 GMT 2008 until Tue Dec 31 15:59:59 GMT 2030

adding as trusted cert:
  Subject: CN=LuxTrust Global Root 2, O=LuxTrust S.A., C=LU
  Issuer:  CN=LuxTrust Global Root 2, O=LuxTrust S.A., C=LU
  Algorithm: RSA; Serial number: 0xa7ea6df4b449eda6a24859ee6b815d3167fbbb1
  Valid from Thu Mar 05 13:21:57 GMT 2015 until Mon Mar 05 13:21:57 GMT 2035

adding as trusted cert:
  Subject: C=DE, O=Atos, CN=Atos TrustedRoot 2011
  Issuer:  C=DE, O=Atos, CN=Atos TrustedRoot 2011
  Algorithm: RSA; Serial number: 0x5c33cb622c5fb332
  Valid from Thu Jul 07 14:58:30 GMT 2011 until Tue Dec 31 23:59:59 GMT 2030

adding as trusted cert:
  Subject: CN=Chambers of Commerce Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
  Issuer:  CN=Chambers of Commerce Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
  Algorithm: RSA; Serial number: 0xa3da427ea4b1aeda
  Valid from Fri Aug 01 12:29:50 GMT 2008 until Sat Jul 31 12:29:50 GMT 2038

adding as trusted cert:
  Subject: CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Issuer:  CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Algorithm: RSA; Serial number: 0x56b629cd34bc78f6
  Valid from Wed May 31 18:14:37 GMT 2017 until Fri May 30 18:14:37 GMT 2042

adding as trusted cert:
  Subject: CN=SecureSign RootCA11, O="Japan Certification Services, Inc.", C=JP
  Issuer:  CN=SecureSign RootCA11, O="Japan Certification Services, Inc.", C=JP
  Algorithm: RSA; Serial number: 0x1
  Valid from Wed Apr 08 04:56:47 GMT 2009 until Sun Apr 08 04:56:47 GMT 2029

adding as trusted cert:
  Subject: CN=SwissSign Silver CA - G2, O=SwissSign AG, C=CH
  Issuer:  CN=SwissSign Silver CA - G2, O=SwissSign AG, C=CH
  Algorithm: RSA; Serial number: 0x4f1bd42f54bb2f4b
  Valid from Wed Oct 25 08:32:46 GMT 2006 until Sat Oct 25 08:32:46 GMT 2036

adding as trusted cert:
  Subject: CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
  Issuer:  CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
  Algorithm: RSA; Serial number: 0x4a538c28
  Valid from Tue Jul 07 17:25:54 GMT 2009 until Sat Dec 07 17:55:54 GMT 2030

adding as trusted cert:
  Subject: CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Issuer:  CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Algorithm: EC; Serial number: 0x75e6dfcbc1685ba8
  Valid from Fri Feb 12 18:14:03 GMT 2016 until Tue Feb 12 18:14:03 GMT 2041

adding as trusted cert:
  Subject: OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US
  Issuer:  OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Jun 29 17:06:20 GMT 2004 until Thu Jun 29 17:06:20 GMT 2034

adding as trusted cert:
  Subject: CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: RSA; Serial number: 0xce7e0e517d846fe8fe560fc1bf03039
  Valid from Fri Nov 10 00:00:00 GMT 2006 until Mon Nov 10 00:00:00 GMT 2031

adding as trusted cert:
  Subject: CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1, OU=Kamu Sertifikasyon Merkezi - Kamu SM, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, L=Gebze - Kocaeli, C=TR
  Issuer:  CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1, OU=Kamu Sertifikasyon Merkezi - Kamu SM, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, L=Gebze - Kocaeli, C=TR
  Algorithm: RSA; Serial number: 0x1
  Valid from Mon Nov 25 08:25:55 GMT 2013 until Sun Oct 25 08:25:55 GMT 2043

adding as trusted cert:
  Subject: CN=TrustCor RootCert CA-2, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
  Issuer:  CN=TrustCor RootCert CA-2, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
  Algorithm: RSA; Serial number: 0x25a1dfca33cb5902
  Valid from Thu Feb 04 12:32:23 GMT 2016 until Sun Dec 31 17:26:39 GMT 2034

adding as trusted cert:
  Subject: CN=Secure Global CA, O=SecureTrust Corporation, C=US
  Issuer:  CN=Secure Global CA, O=SecureTrust Corporation, C=US
  Algorithm: RSA; Serial number: 0x75622a4e8d48a894df413c8f0f8eaa5
  Valid from Tue Nov 07 19:42:28 GMT 2006 until Mon Dec 31 19:52:06 GMT 2029

adding as trusted cert:
  Subject: CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE
  Issuer:  CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE
  Algorithm: RSA; Serial number: 0x1
  Valid from Tue May 30 10:48:38 GMT 2000 until Sat May 30 10:48:38 GMT 2020

adding as trusted cert:
  Subject: CN=Certigna Root CA, OU=0002 48146308100036, O=Dhimyotis, C=FR
  Issuer:  CN=Certigna Root CA, OU=0002 48146308100036, O=Dhimyotis, C=FR
  Algorithm: RSA; Serial number: 0xcae91b89f155030da3e6416dc4e3a6e1
  Valid from Tue Oct 01 08:32:27 GMT 2013 until Sat Oct 01 08:32:27 GMT 2033

adding as trusted cert:
  Subject: CN=T-TeleSec GlobalRoot Class 3, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
  Issuer:  CN=T-TeleSec GlobalRoot Class 3, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
  Algorithm: RSA; Serial number: 0x1
  Valid from Wed Oct 01 10:29:56 GMT 2008 until Sat Oct 01 23:59:59 GMT 2033

adding as trusted cert:
  Subject: CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: EC; Serial number: 0x55556bcf25ea43535c3a40fd5ab4572
  Valid from Thu Aug 01 12:00:00 GMT 2013 until Fri Jan 15 12:00:00 GMT 2038

adding as trusted cert:
  Subject: CN=TrustCor ECA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
  Issuer:  CN=TrustCor ECA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA
  Algorithm: RSA; Serial number: 0x84822c5f1c62d040
  Valid from Thu Feb 04 12:32:33 GMT 2016 until Mon Dec 31 17:28:07 GMT 2029

adding as trusted cert:
  Subject: CN=Class 2 Primary CA, O=Certplus, C=FR
  Issuer:  CN=Class 2 Primary CA, O=Certplus, C=FR
  Algorithm: RSA; Serial number: 0x85bd4bf3d8dae369f694d75fc3a54423
  Valid from Wed Jul 07 17:05:00 GMT 1999 until Sat Jul 06 23:59:59 GMT 2019

adding as trusted cert:
  Subject: CN=OISTE WISeKey Global Root GA CA, OU=OISTE Foundation Endorsed, OU=Copyright (c) 2005, O=WISeKey, C=CH
  Issuer:  CN=OISTE WISeKey Global Root GA CA, OU=OISTE Foundation Endorsed, OU=Copyright (c) 2005, O=WISeKey, C=CH
  Algorithm: RSA; Serial number: 0x413d72c7f46b1f81437df1d22854df9a
  Valid from Sun Dec 11 16:03:44 GMT 2005 until Fri Dec 11 16:09:51 GMT 2037

adding as trusted cert:
  Subject: CN=GeoTrust Global CA, O=GeoTrust Inc., C=US
  Issuer:  CN=GeoTrust Global CA, O=GeoTrust Inc., C=US
  Algorithm: RSA; Serial number: 0x23456
  Valid from Tue May 21 04:00:00 GMT 2002 until Sat May 21 04:00:00 GMT 2022

adding as trusted cert:
  Subject: CN=Network Solutions Certificate Authority, O=Network Solutions L.L.C., C=US
  Issuer:  CN=Network Solutions Certificate Authority, O=Network Solutions L.L.C., C=US
  Algorithm: RSA; Serial number: 0x57cb336fc25c16e6471617e3903168e0
  Valid from Fri Dec 01 00:00:00 GMT 2006 until Mon Dec 31 23:59:59 GMT 2029

adding as trusted cert:
  Subject: CN=CFCA EV ROOT, O=China Financial Certification Authority, C=CN
  Issuer:  CN=CFCA EV ROOT, O=China Financial Certification Authority, C=CN
  Algorithm: RSA; Serial number: 0x184accd6
  Valid from Wed Aug 08 03:07:01 GMT 2012 until Mon Dec 31 03:07:01 GMT 2029

adding as trusted cert:
  Subject: CN=SwissSign Platinum CA - G2, O=SwissSign AG, C=CH
  Issuer:  CN=SwissSign Platinum CA - G2, O=SwissSign AG, C=CH
  Algorithm: RSA; Serial number: 0x4eb200670c035d4f
  Valid from Wed Oct 25 08:36:00 GMT 2006 until Sat Oct 25 08:36:00 GMT 2036

adding as trusted cert:
  Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R5
  Issuer:  CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R5
  Algorithm: EC; Serial number: 0x605949e0262ebb55f90a778a71f94ad86c
  Valid from Tue Nov 13 00:00:00 GMT 2012 until Tue Jan 19 03:14:07 GMT 2038

adding as trusted cert:
  Subject: CN=Hellenic Academic and Research Institutions RootCA 2011, O=Hellenic Academic and Research Institutions Cert. Authority, C=GR
  Issuer:  CN=Hellenic Academic and Research Institutions RootCA 2011, O=Hellenic Academic and Research Institutions Cert. Authority, C=GR
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Dec 06 13:49:52 GMT 2011 until Mon Dec 01 13:49:52 GMT 2031

adding as trusted cert:
  Subject: CN=VeriSign Class 2 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Issuer:  CN=VeriSign Class 2 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Algorithm: RSA; Serial number: 0x6170cb498c5f984529e7b0a6d9505b7a
  Valid from Fri Oct 01 00:00:00 GMT 1999 until Wed Jul 16 23:59:59 GMT 2036

adding as trusted cert:
  Subject: CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
  Issuer:  CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Sep 01 00:00:00 GMT 2009 until Thu Dec 31 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=Certum Trusted Network CA 2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
  Issuer:  CN=Certum Trusted Network CA 2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL
  Algorithm: RSA; Serial number: 0x21d6d04a4f250fc93237fcaa5e128de9
  Valid from Thu Oct 06 08:39:56 GMT 2011 until Sat Oct 06 08:39:56 GMT 2046

adding as trusted cert:
  Subject: CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net
  Issuer:  CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net
  Algorithm: RSA; Serial number: 0x3863def8
  Valid from Fri Dec 24 17:50:51 GMT 1999 until Tue Jul 24 14:15:12 GMT 2029

adding as trusted cert:
  Subject: CN=IdenTrust Public Sector Root CA 1, O=IdenTrust, C=US
  Issuer:  CN=IdenTrust Public Sector Root CA 1, O=IdenTrust, C=US
  Algorithm: RSA; Serial number: 0xa0142800000014523cf467c00000002
  Valid from Thu Jan 16 17:53:32 GMT 2014 until Mon Jan 16 17:53:32 GMT 2034

adding as trusted cert:
  Subject: CN=Staat der Nederlanden Root CA - G3, O=Staat der Nederlanden, C=NL
  Issuer:  CN=Staat der Nederlanden Root CA - G3, O=Staat der Nederlanden, C=NL
  Algorithm: RSA; Serial number: 0x98a239
  Valid from Thu Nov 14 11:28:42 GMT 2013 until Mon Nov 13 23:00:00 GMT 2028

adding as trusted cert:
  Subject: CN=TeliaSonera Root CA v1, O=TeliaSonera
  Issuer:  CN=TeliaSonera Root CA v1, O=TeliaSonera
  Algorithm: RSA; Serial number: 0x95be16a0f72e46f17b398272fa8bcd96
  Valid from Thu Oct 18 12:00:50 GMT 2007 until Mon Oct 18 12:00:50 GMT 2032

adding as trusted cert:
  Subject: CN=thawte Primary Root CA, OU="(c) 2006 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
  Issuer:  CN=thawte Primary Root CA, OU="(c) 2006 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
  Algorithm: RSA; Serial number: 0x344ed55720d5edec49f42fce37db2b6d
  Valid from Fri Nov 17 00:00:00 GMT 2006 until Wed Jul 16 23:59:59 GMT 2036

adding as trusted cert:
  Subject: CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US
  Issuer:  CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Sep 01 00:00:00 GMT 2009 until Thu Dec 31 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=VeriSign Class 1 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Issuer:  CN=VeriSign Class 1 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Algorithm: RSA; Serial number: 0x8b5b75568454850b00cfaf3848ceb1a4
  Valid from Fri Oct 01 00:00:00 GMT 1999 until Wed Jul 16 23:59:59 GMT 2036

adding as trusted cert:
  Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G4, OU="(c) 2007 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Issuer:  CN=VeriSign Class 3 Public Primary Certification Authority - G4, OU="(c) 2007 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Algorithm: EC; Serial number: 0x2f80fe238c0e220f486712289187acb3
  Valid from Mon Nov 05 00:00:00 GMT 2007 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: CN=Staat der Nederlanden EV Root CA, O=Staat der Nederlanden, C=NL
  Issuer:  CN=Staat der Nederlanden EV Root CA, O=Staat der Nederlanden, C=NL
  Algorithm: RSA; Serial number: 0x98968d
  Valid from Wed Dec 08 11:19:29 GMT 2010 until Thu Dec 08 11:10:28 GMT 2022

adding as trusted cert:
  Subject: CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US
  Issuer:  CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US
  Algorithm: RSA; Serial number: 0x456b5054
  Valid from Mon Nov 27 20:23:42 GMT 2006 until Fri Nov 27 20:53:42 GMT 2026

adding as trusted cert:
  Subject: CN=GTS Root R2, O=Google Trust Services LLC, C=US
  Issuer:  CN=GTS Root R2, O=Google Trust Services LLC, C=US
  Algorithm: RSA; Serial number: 0x6e47a9c65ab3e720c5309a3f6852f26f
  Valid from Wed Jun 22 00:00:00 GMT 2016 until Sun Jun 22 00:00:00 GMT 2036

adding as trusted cert:
  Subject: CN=DigiCert Assured ID Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert Assured ID Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: RSA; Serial number: 0xb931c3ad63967ea6723bfc3af9af44b
  Valid from Thu Aug 01 12:00:00 GMT 2013 until Fri Jan 15 12:00:00 GMT 2038

adding as trusted cert:
  Subject: CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Issuer:  CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Algorithm: RSA; Serial number: 0x7b2c9bd316803299
  Valid from Fri Feb 12 17:39:39 GMT 2016 until Tue Feb 12 17:39:39 GMT 2041

adding as trusted cert:
  Subject: CN=Symantec Class 1 Public Primary Certification Authority - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Issuer:  CN=Symantec Class 1 Public Primary Certification Authority - G4, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Algorithm: EC; Serial number: 0x216e33a5cbd388a46f2907b4273cc4d8
  Valid from Wed Oct 05 00:00:00 GMT 2011 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: CN=Amazon Root CA 4, O=Amazon, C=US
  Issuer:  CN=Amazon Root CA 4, O=Amazon, C=US
  Algorithm: EC; Serial number: 0x66c9fd7c1bb104c2943e5717b7b2cc81ac10e
  Valid from Tue May 26 00:00:00 GMT 2015 until Sat May 26 00:00:00 GMT 2040

adding as trusted cert:
  Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R6
  Issuer:  CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R6
  Algorithm: RSA; Serial number: 0x45e6bb038333c3856548e6ff4551
  Valid from Wed Dec 10 00:00:00 GMT 2014 until Sun Dec 10 00:00:00 GMT 2034

adding as trusted cert:
  Subject: CN=Certum CA, O=Unizeto Sp. z o.o., C=PL
  Issuer:  CN=Certum CA, O=Unizeto Sp. z o.o., C=PL
  Algorithm: RSA; Serial number: 0x10020
  Valid from Tue Jun 11 10:46:39 GMT 2002 until Fri Jun 11 10:46:39 GMT 2027

adding as trusted cert:
  Subject: CN=CA Disig Root R2, O=Disig a.s., L=Bratislava, C=SK
  Issuer:  CN=CA Disig Root R2, O=Disig a.s., L=Bratislava, C=SK
  Algorithm: RSA; Serial number: 0x92b888dbb08ac163
  Valid from Thu Jul 19 09:15:30 GMT 2012 until Sat Jul 19 09:15:30 GMT 2042

adding as trusted cert:
  Subject: CN=OISTE WISeKey Global Root GC CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH
  Issuer:  CN=OISTE WISeKey Global Root GC CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH
  Algorithm: EC; Serial number: 0x212a560caeda0cab4045bf2ba22d3aea
  Valid from Tue May 09 09:48:34 GMT 2017 until Fri May 09 09:58:33 GMT 2042

adding as trusted cert:
  Subject: CN=DST Root CA X3, O=Digital Signature Trust Co.
  Issuer:  CN=DST Root CA X3, O=Digital Signature Trust Co.
  Algorithm: RSA; Serial number: 0x44afb080d6a327ba893039862ef8406b
  Valid from Sat Sep 30 21:12:19 GMT 2000 until Thu Sep 30 14:01:15 GMT 2021

adding as trusted cert:
  Subject: CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO
  Issuer:  CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO
  Algorithm: RSA; Serial number: 0x2
  Valid from Tue Oct 26 08:38:03 GMT 2010 until Fri Oct 26 08:38:03 GMT 2040

adding as trusted cert:
  Subject: CN=D-TRUST Root Class 3 CA 2 EV 2009, O=D-Trust GmbH, C=DE
  Issuer:  CN=D-TRUST Root Class 3 CA 2 EV 2009, O=D-Trust GmbH, C=DE
  Algorithm: RSA; Serial number: 0x983f4
  Valid from Thu Nov 05 08:50:46 GMT 2009 until Mon Nov 05 08:50:46 GMT 2029

adding as trusted cert:
  Subject: CN=DigiCert Assured ID Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert Assured ID Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: EC; Serial number: 0xba15afa1ddfa0b54944afcd24a06cec
  Valid from Thu Aug 01 12:00:00 GMT 2013 until Fri Jan 15 12:00:00 GMT 2038

adding as trusted cert:
  Subject: CN=SwissSign Gold CA - G2, O=SwissSign AG, C=CH
  Issuer:  CN=SwissSign Gold CA - G2, O=SwissSign AG, C=CH
  Algorithm: RSA; Serial number: 0xbb401c43f55e4fb0
  Valid from Wed Oct 25 08:30:35 GMT 2006 until Sat Oct 25 08:30:35 GMT 2036

adding as trusted cert:
  Subject: CN=USERTrust ECC Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
  Issuer:  CN=USERTrust ECC Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
  Algorithm: EC; Serial number: 0x5c8b99c55a94c5d27156decd8980cc26
  Valid from Mon Feb 01 00:00:00 GMT 2010 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: OU=certSIGN ROOT CA, O=certSIGN, C=RO
  Issuer:  OU=certSIGN ROOT CA, O=certSIGN, C=RO
  Algorithm: RSA; Serial number: 0x200605167002
  Valid from Tue Jul 04 17:20:04 GMT 2006 until Fri Jul 04 17:20:04 GMT 2031

adding as trusted cert:
  Subject: CN=QuoVadis Root CA 2, O=QuoVadis Limited, C=BM
  Issuer:  CN=QuoVadis Root CA 2, O=QuoVadis Limited, C=BM
  Algorithm: RSA; Serial number: 0x509
  Valid from Fri Nov 24 18:27:00 GMT 2006 until Mon Nov 24 18:23:33 GMT 2031

adding as trusted cert:
  Subject: CN=IdenTrust Commercial Root CA 1, O=IdenTrust, C=US
  Issuer:  CN=IdenTrust Commercial Root CA 1, O=IdenTrust, C=US
  Algorithm: RSA; Serial number: 0xa0142800000014523c844b500000002
  Valid from Thu Jan 16 18:12:23 GMT 2014 until Mon Jan 16 18:12:23 GMT 2034

adding as trusted cert:
  Subject: CN=QuoVadis Root CA 1 G3, O=QuoVadis Limited, C=BM
  Issuer:  CN=QuoVadis Root CA 1 G3, O=QuoVadis Limited, C=BM
  Algorithm: RSA; Serial number: 0x78585f2ead2c194be3370735341328b596d46593
  Valid from Thu Jan 12 17:27:44 GMT 2012 until Sun Jan 12 17:27:44 GMT 2042

adding as trusted cert:
  Subject: CN=D-TRUST Root Class 3 CA 2 2009, O=D-Trust GmbH, C=DE
  Issuer:  CN=D-TRUST Root Class 3 CA 2 2009, O=D-Trust GmbH, C=DE
  Algorithm: RSA; Serial number: 0x983f3
  Valid from Thu Nov 05 08:35:58 GMT 2009 until Mon Nov 05 08:35:58 GMT 2029

adding as trusted cert:
  Subject: CN=Deutsche Telekom Root CA 2, OU=T-TeleSec Trust Center, O=Deutsche Telekom AG, C=DE
  Issuer:  CN=Deutsche Telekom Root CA 2, OU=T-TeleSec Trust Center, O=Deutsche Telekom AG, C=DE
  Algorithm: RSA; Serial number: 0x26
  Valid from Fri Jul 09 12:11:00 GMT 1999 until Tue Jul 09 23:59:00 GMT 2019

adding as trusted cert:
  Subject: CN=Symantec Class 1 Public Primary Certification Authority - G6, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Issuer:  CN=Symantec Class 1 Public Primary Certification Authority - G6, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Algorithm: RSA; Serial number: 0x243275f21d2fd20933f7b46acad0f398
  Valid from Tue Oct 18 00:00:00 GMT 2011 until Tue Dec 01 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
  Issuer:  CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US
  Algorithm: RSA; Serial number: 0x1fd6d30fca3ca51a81bbc640e35032d
  Valid from Mon Feb 01 00:00:00 GMT 2010 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: CN=GTS Root R3, O=Google Trust Services LLC, C=US
  Issuer:  CN=GTS Root R3, O=Google Trust Services LLC, C=US
  Algorithm: EC; Serial number: 0x6e47a9c76ca9732440890f0355dd8d1d
  Valid from Wed Jun 22 00:00:00 GMT 2016 until Sun Jun 22 00:00:00 GMT 2036

adding as trusted cert:
  Subject: CN=Izenpe.com, O=IZENPE S.A., C=ES
  Issuer:  CN=Izenpe.com, O=IZENPE S.A., C=ES
  Algorithm: RSA; Serial number: 0xb0b75a16485fbfe1cbf58bd719e67d
  Valid from Thu Dec 13 13:08:28 GMT 2007 until Sun Dec 13 08:27:25 GMT 2037

adding as trusted cert:
  Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2
  Issuer:  CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2
  Algorithm: RSA; Serial number: 0x400000000010f8626e60d
  Valid from Fri Dec 15 08:00:00 GMT 2006 until Wed Dec 15 08:00:00 GMT 2021

adding as trusted cert:
  Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Issuer:  CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Algorithm: RSA; Serial number: 0x18dad19e267de8bb4a2158cdcc6b3b4a
  Valid from Wed Nov 08 00:00:00 GMT 2006 until Wed Jul 16 23:59:59 GMT 2036

adding as trusted cert:
  Subject: CN=QuoVadis Root CA 3, O=QuoVadis Limited, C=BM
  Issuer:  CN=QuoVadis Root CA 3, O=QuoVadis Limited, C=BM
  Algorithm: RSA; Serial number: 0x5c6
  Valid from Fri Nov 24 19:11:23 GMT 2006 until Mon Nov 24 19:06:44 GMT 2031

adding as trusted cert:
  Subject: CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
  Issuer:  CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Sep 01 00:00:00 GMT 2009 until Thu Dec 31 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=OISTE WISeKey Global Root GB CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH
  Issuer:  CN=OISTE WISeKey Global Root GB CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH
  Algorithm: RSA; Serial number: 0x76b1205274f0858746b3f8231af6c2c0
  Valid from Mon Dec 01 15:00:32 GMT 2014 until Thu Dec 01 15:10:31 GMT 2039

adding as trusted cert:
  Subject: CN=Amazon Root CA 3, O=Amazon, C=US
  Issuer:  CN=Amazon Root CA 3, O=Amazon, C=US
  Algorithm: EC; Serial number: 0x66c9fd5749736663f3b0b9ad9e89e7603f24a
  Valid from Tue May 26 00:00:00 GMT 2015 until Sat May 26 00:00:00 GMT 2040

adding as trusted cert:
  Subject: CN=Symantec Class 2 Public Primary Certification Authority - G6, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Issuer:  CN=Symantec Class 2 Public Primary Certification Authority - G6, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  Algorithm: RSA; Serial number: 0x64829efc371e745dfc97ff97c8b1ff41
  Valid from Tue Oct 18 00:00:00 GMT 2011 until Tue Dec 01 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=Swisscom Root CA 2, OU=Digital Certificate Services, O=Swisscom, C=ch
  Issuer:  CN=Swisscom Root CA 2, OU=Digital Certificate Services, O=Swisscom, C=ch
  Algorithm: RSA; Serial number: 0x1e9e28e848f2e5efc37c4a1e5a1867b6
  Valid from Fri Jun 24 08:38:14 GMT 2011 until Wed Jun 25 07:38:14 GMT 2031

adding as trusted cert:
  Subject: CN=QuoVadis Root CA 3 G3, O=QuoVadis Limited, C=BM
  Issuer:  CN=QuoVadis Root CA 3 G3, O=QuoVadis Limited, C=BM
  Algorithm: RSA; Serial number: 0x2ef59b0228a7db7affd5a3a9eebd03a0cf126a1d
  Valid from Thu Jan 12 20:26:32 GMT 2012 until Sun Jan 12 20:26:32 GMT 2042

adding as trusted cert:
  Subject: EMAILADDRESS=info@e-szigno.hu, CN=Microsec e-Szigno Root CA 2009, O=Microsec Ltd., L=Budapest, C=HU
  Issuer:  EMAILADDRESS=info@e-szigno.hu, CN=Microsec e-Szigno Root CA 2009, O=Microsec Ltd., L=Budapest, C=HU
  Algorithm: RSA; Serial number: 0xc27e43044e473f19
  Valid from Tue Jun 16 11:30:18 GMT 2009 until Sun Dec 30 11:30:18 GMT 2029

adding as trusted cert:
  Subject: CN=NetLock Arany (Class Gold) Főtanúsítvány, OU=Tanúsítványkiadók (Certification Services), O=NetLock Kft., L=Budapest, C=HU
  Issuer:  CN=NetLock Arany (Class Gold) Főtanúsítvány, OU=Tanúsítványkiadók (Certification Services), O=NetLock Kft., L=Budapest, C=HU
  Algorithm: RSA; Serial number: 0x49412ce40010
  Valid from Thu Dec 11 15:08:21 GMT 2008 until Wed Dec 06 15:08:21 GMT 2028

adding as trusted cert:
  Subject: CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT
  Issuer:  CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT
  Algorithm: RSA; Serial number: 0x570a119742c4e3cc
  Valid from Thu Sep 22 11:22:02 GMT 2011 until Sun Sep 22 11:22:02 GMT 2030

adding as trusted cert:
  Subject: CN=Autoridad de Certificacion Firmaprofesional CIF A62634068, C=ES
  Issuer:  CN=Autoridad de Certificacion Firmaprofesional CIF A62634068, C=ES
  Algorithm: RSA; Serial number: 0x53ec3beefbb2485f
  Valid from Wed May 20 08:38:15 GMT 2009 until Tue Dec 31 08:38:15 GMT 2030

adding as trusted cert:
  Subject: CN=Certigna, O=Dhimyotis, C=FR
  Issuer:  CN=Certigna, O=Dhimyotis, C=FR
  Algorithm: RSA; Serial number: 0xfedce3010fc948ff
  Valid from Fri Jun 29 15:13:05 GMT 2007 until Tue Jun 29 15:13:05 GMT 2027

adding as trusted cert:
  Subject: CN=GTS Root R1, O=Google Trust Services LLC, C=US
  Issuer:  CN=GTS Root R1, O=Google Trust Services LLC, C=US
  Algorithm: RSA; Serial number: 0x6e47a9c54b470c0dec33d089b91cf4e1
  Valid from Wed Jun 22 00:00:00 GMT 2016 until Sun Jun 22 00:00:00 GMT 2036

adding as trusted cert:
  Subject: CN=E-Tugra Certification Authority, OU=E-Tugra Sertifikasyon Merkezi, O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., L=Ankara, C=TR
  Issuer:  CN=E-Tugra Certification Authority, OU=E-Tugra Sertifikasyon Merkezi, O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., L=Ankara, C=TR
  Algorithm: RSA; Serial number: 0x6a683e9c519bcb53
  Valid from Tue Mar 05 12:09:48 GMT 2013 until Fri Mar 03 12:09:48 GMT 2023

adding as trusted cert:
  Subject: C=ES, O=ACCV, OU=PKIACCV, CN=ACCVRAIZ1
  Issuer:  C=ES, O=ACCV, OU=PKIACCV, CN=ACCVRAIZ1
  Algorithm: RSA; Serial number: 0x5ec3b7a6437fa4e0
  Valid from Thu May 05 09:37:37 GMT 2011 until Tue Dec 31 09:37:37 GMT 2030

adding as trusted cert:
  Subject: CN=QuoVadis Root Certification Authority, OU=Root Certification Authority, O=QuoVadis Limited, C=BM
  Issuer:  CN=QuoVadis Root Certification Authority, OU=Root Certification Authority, O=QuoVadis Limited, C=BM
  Algorithm: RSA; Serial number: 0x3ab6508b
  Valid from Mon Mar 19 18:33:33 GMT 2001 until Wed Mar 17 18:33:33 GMT 2021

adding as trusted cert:
  Subject: CN=SSL.com EV Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Issuer:  CN=SSL.com EV Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
  Algorithm: EC; Serial number: 0x2c299c5b16ed0595
  Valid from Fri Feb 12 18:15:23 GMT 2016 until Tue Feb 12 18:15:23 GMT 2041

adding as trusted cert:
  Subject: CN=Buypass Class 3 Root CA, O=Buypass AS-983163327, C=NO
  Issuer:  CN=Buypass Class 3 Root CA, O=Buypass AS-983163327, C=NO
  Algorithm: RSA; Serial number: 0x2
  Valid from Tue Oct 26 08:28:58 GMT 2010 until Fri Oct 26 08:28:58 GMT 2040

adding as trusted cert:
  Subject: CN=thawte Primary Root CA - G2, OU="(c) 2007 thawte, Inc. - For authorized use only", O="thawte, Inc.", C=US
  Issuer:  CN=thawte Primary Root CA - G2, OU="(c) 2007 thawte, Inc. - For authorized use only", O="thawte, Inc.", C=US
  Algorithm: EC; Serial number: 0x35fc265cd9844fc93d263d579baed756
  Valid from Mon Nov 05 00:00:00 GMT 2007 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Issuer:  CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
  Algorithm: RSA; Serial number: 0x401ac46421b31321030ebbe4121ac51d
  Valid from Wed Apr 02 00:00:00 GMT 2008 until Tue Dec 01 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=Cybertrust Global Root, O="Cybertrust, Inc"
  Issuer:  CN=Cybertrust Global Root, O="Cybertrust, Inc"
  Algorithm: RSA; Serial number: 0x400000000010f85aa2d48
  Valid from Fri Dec 15 08:00:00 GMT 2006 until Wed Dec 15 08:00:00 GMT 2021

adding as trusted cert:
  Subject: CN=Global Chambersign Root, OU=http://www.chambersign.org, O=AC Camerfirma SA CIF A82743287, C=EU
  Issuer:  CN=Global Chambersign Root, OU=http://www.chambersign.org, O=AC Camerfirma SA CIF A82743287, C=EU
  Algorithm: RSA; Serial number: 0x0
  Valid from Tue Sep 30 16:14:18 GMT 2003 until Wed Sep 30 16:14:18 GMT 2037

adding as trusted cert:
  Subject: CN=GTS Root R4, O=Google Trust Services LLC, C=US
  Issuer:  CN=GTS Root R4, O=Google Trust Services LLC, C=US
  Algorithm: EC; Serial number: 0x6e47a9c88b94b6e8bb3b2ad8a2b2c199
  Valid from Wed Jun 22 00:00:00 GMT 2016 until Sun Jun 22 00:00:00 GMT 2036

adding as trusted cert:
  Subject: OU=Trustis FPS Root CA, O=Trustis Limited, C=GB
  Issuer:  OU=Trustis FPS Root CA, O=Trustis Limited, C=GB
  Algorithm: RSA; Serial number: 0x1b1fadb620f924d3366bf7c7f18ca059
  Valid from Tue Dec 23 12:14:06 GMT 2003 until Sun Jan 21 11:36:54 GMT 2024

adding as trusted cert:
  Subject: CN=Amazon Root CA 1, O=Amazon, C=US
  Issuer:  CN=Amazon Root CA 1, O=Amazon, C=US
  Algorithm: RSA; Serial number: 0x66c9fcf99bf8c0a39e2f0788a43e696365bca
  Valid from Tue May 26 00:00:00 GMT 2015 until Sun Jan 17 00:00:00 GMT 2038

adding as trusted cert:
  Subject: CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE
  Issuer:  CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE
  Algorithm: RSA; Serial number: 0x1
  Valid from Tue May 30 10:38:31 GMT 2000 until Sat May 30 10:38:31 GMT 2020

adding as trusted cert:
  Subject: CN=Amazon Root CA 2, O=Amazon, C=US
  Issuer:  CN=Amazon Root CA 2, O=Amazon, C=US
  Algorithm: RSA; Serial number: 0x66c9fd29635869f0a0fe58678f85b26bb8a37
  Valid from Tue May 26 00:00:00 GMT 2015 until Sat May 26 00:00:00 GMT 2040

adding as trusted cert:
  Subject: CN=GDCA TrustAUTH R5 ROOT, O="GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.", C=CN
  Issuer:  CN=GDCA TrustAUTH R5 ROOT, O="GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.", C=CN
  Algorithm: RSA; Serial number: 0x7d0997fef047ea7a
  Valid from Wed Nov 26 05:13:15 GMT 2014 until Mon Dec 31 15:59:59 GMT 2040

adding as trusted cert:
  Subject: CN=UCA Extended Validation Root, O=UniTrust, C=CN
  Issuer:  CN=UCA Extended Validation Root, O=UniTrust, C=CN
  Algorithm: RSA; Serial number: 0x4fd22b8ff564c8339e4f345866237060
  Valid from Fri Mar 13 00:00:00 GMT 2015 until Fri Dec 31 00:00:00 GMT 2038

adding as trusted cert:
  Subject: CN=COMODO Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Issuer:  CN=COMODO Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Algorithm: RSA; Serial number: 0x4e812d8a8265e00b02ee3e350246e53d
  Valid from Fri Dec 01 00:00:00 GMT 2006 until Mon Dec 31 23:59:59 GMT 2029

adding as trusted cert:
  Subject: CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R4
  Issuer:  CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R4
  Algorithm: EC; Serial number: 0x2a38a41c960a04de42b228a50be8349802
  Valid from Tue Nov 13 00:00:00 GMT 2012 until Tue Jan 19 03:14:07 GMT 2038

adding as trusted cert:
  Subject: EMAILADDRESS=pki@sk.ee, CN=EE Certification Centre Root CA, O=AS Sertifitseerimiskeskus, C=EE
  Issuer:  EMAILADDRESS=pki@sk.ee, CN=EE Certification Centre Root CA, O=AS Sertifitseerimiskeskus, C=EE
  Algorithm: RSA; Serial number: 0x5480f9a073ed3f004cca89d8e371e64a
  Valid from Sat Oct 30 10:10:30 GMT 2010 until Tue Dec 17 23:59:59 GMT 2030

adding as trusted cert:
  Subject: CN=Global Chambersign Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
  Issuer:  CN=Global Chambersign Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU
  Algorithm: RSA; Serial number: 0xc9cdd3e9d57d23ce
  Valid from Fri Aug 01 12:31:40 GMT 2008 until Sat Jul 31 12:31:40 GMT 2038

adding as trusted cert:
  Subject: CN=thawte Primary Root CA - G3, OU="(c) 2008 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
  Issuer:  CN=thawte Primary Root CA - G3, OU="(c) 2008 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US
  Algorithm: RSA; Serial number: 0x600197b746a7eab4b49ad64b2ff790fb
  Valid from Wed Apr 02 00:00:00 GMT 2008 until Tue Dec 01 23:59:59 GMT 2037

adding as trusted cert:
  Subject: CN=UCA Global G2 Root, O=UniTrust, C=CN
  Issuer:  CN=UCA Global G2 Root, O=UniTrust, C=CN
  Algorithm: RSA; Serial number: 0x5ddfb1da5aa3ed5dbe5a6520650390ef
  Valid from Fri Mar 11 00:00:00 GMT 2016 until Mon Dec 31 00:00:00 GMT 2040

adding as trusted cert:
  Subject: CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Issuer:  CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB
  Algorithm: RSA; Serial number: 0x4caaf9cadb636fe01ff74ed85b03869d
  Valid from Tue Jan 19 00:00:00 GMT 2010 until Mon Jan 18 23:59:59 GMT 2038

adding as trusted cert:
  Subject: CN=AffirmTrust Premium ECC, O=AffirmTrust, C=US
  Issuer:  CN=AffirmTrust Premium ECC, O=AffirmTrust, C=US
  Algorithm: EC; Serial number: 0x7497258ac73f7a54
  Valid from Fri Jan 29 14:20:24 GMT 2010 until Mon Dec 31 14:20:24 GMT 2040

adding as trusted cert:
  Subject: CN=Staat der Nederlanden Root CA - G2, O=Staat der Nederlanden, C=NL
  Issuer:  CN=Staat der Nederlanden Root CA - G2, O=Staat der Nederlanden, C=NL
  Algorithm: RSA; Serial number: 0x98968c
  Valid from Wed Mar 26 11:18:17 GMT 2008 until Wed Mar 25 11:03:10 GMT 2020

adding as trusted cert:
  Subject: CN=T-TeleSec GlobalRoot Class 2, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
  Issuer:  CN=T-TeleSec GlobalRoot Class 2, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE
  Algorithm: RSA; Serial number: 0x1
  Valid from Wed Oct 01 10:40:14 GMT 2008 until Sat Oct 01 23:59:59 GMT 2033

adding as trusted cert:
  Subject: CN=SZAFIR ROOT CA2, O=Krajowa Izba Rozliczeniowa S.A., C=PL
  Issuer:  CN=SZAFIR ROOT CA2, O=Krajowa Izba Rozliczeniowa S.A., C=PL
  Algorithm: RSA; Serial number: 0x3e8a5d07ec55d232d5b7e3b65f01eb2ddce4d6e4
  Valid from Mon Oct 19 07:43:30 GMT 2015 until Fri Oct 19 07:43:30 GMT 2035

adding as trusted cert:
  Subject: CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
  Issuer:  CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US
  Algorithm: RSA; Serial number: 0x33af1e6a711a9a0bb2864b11d09fae5
  Valid from Thu Aug 01 12:00:00 GMT 2013 until Fri Jan 15 12:00:00 GMT 2038

trigger seeding of SecureRandom
done seeding SecureRandom
Using SSLEngineImpl.
2019-12-02 16:20:04,642 ERROR [io.qua.ver.htt.run.QuarkusErrorHandler] (vert.x-worker-thread-0) HTTP Request to /swapi/1 failed, error id: cb812d11-334d-4a20-bbdf-504565043a9c-1: java.lang.NoClassDefFoundError: Could not initialize class sun.security.ssl.SSLSessionImpl
    at sun.security.ssl.SSLEngineImpl.init(SSLEngineImpl.java:364)
    at sun.security.ssl.SSLEngineImpl.<init>(SSLEngineImpl.java:344)
    at sun.security.ssl.SSLContextImpl$AbstractTLSContext.createSSLEngineImpl(SSLContextImpl.java:557)
    at sun.security.ssl.SSLContextImpl.engineCreateSSLEngine(SSLContextImpl.java:199)
    at javax.net.ssl.SSLContext.createSSLEngine(SSLContext.java:329)
    at io.netty.handler.ssl.JdkSslContext.<clinit>(JdkSslContext.java:81)
    at io.netty.handler.ssl.SslContext.newClientContextInternal(SslContext.java:818)
    at io.netty.handler.ssl.SslContextBuilder.build(SslContextBuilder.java:462)
    at io.vertx.core.net.impl.SSLHelper.createContext(SSLHelper.java:294)
    at io.vertx.core.net.impl.SSLHelper.getContext(SSLHelper.java:478)
    at io.vertx.core.net.impl.SSLHelper.validate(SSLHelper.java:503)
    at io.vertx.core.http.impl.HttpClientImpl.<init>(HttpClientImpl.java:133)
    at io.vertx.core.impl.VertxImpl.createHttpClient(VertxImpl.java:317)
    at io.vertx.ext.web.client.WebClient.create(WebClient.java:67)
    at io.vertx.axle.ext.web.client.WebClient.create(WebClient.java:105)
    at org.acme.vertx.ResourceUsingWebClient.initialize(ResourceUsingWebClient.java:31)
    at org.acme.vertx.ResourceUsingWebClient_Bean.create(ResourceUsingWebClient_Bean.zig:224)
    at org.acme.vertx.ResourceUsingWebClient_Bean.create(ResourceUsingWebClient_Bean.zig:29)
    at io.quarkus.arc.impl.AbstractSharedContext.createInstanceHandle(AbstractSharedContext.java:80)
    at io.quarkus.arc.impl.ComputingCache$CacheFunction.lambda$apply$0(ComputingCache.java:99)
    at io.quarkus.arc.impl.LazyValue.get(LazyValue.java:26)
    at io.quarkus.arc.impl.ComputingCache.getValue(ComputingCache.java:41)
    at io.quarkus.arc.impl.AbstractSharedContext.get(AbstractSharedContext.java:25)
    at org.acme.vertx.ResourceUsingWebClient_Bean.get(ResourceUsingWebClient_Bean.zig:257)
    at org.acme.vertx.ResourceUsingWebClient_Bean.get(ResourceUsingWebClient_Bean.zig:273)
    at io.quarkus.arc.impl.ArcContainerImpl.beanInstanceHandle(ArcContainerImpl.java:355)
    at io.quarkus.arc.impl.ArcContainerImpl.beanInstanceHandle(ArcContainerImpl.java:367)
    at io.quarkus.arc.impl.ArcContainerImpl$1.get(ArcContainerImpl.java:222)
    at io.quarkus.arc.impl.ArcContainerImpl$1.get(ArcContainerImpl.java:219)
    at io.quarkus.arc.runtime.ArcRecorder$2$1.create(ArcRecorder.java:79)
    at io.quarkus.resteasy.common.runtime.QuarkusConstructorInjector.construct(QuarkusConstructorInjector.java:56)
    at org.jboss.resteasy.plugins.server.resourcefactory.POJOResourceFactory.createResource(POJOResourceFactory.java:69)
    at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:364)
    at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:477)
    at org.jboss.resteasy.core.SynchronousDispatcher.lambda$invoke$4(SynchronousDispatcher.java:252)
    at org.jboss.resteasy.core.SynchronousDispatcher.lambda$preprocess$0(SynchronousDispatcher.java:153)
    at org.jboss.resteasy.core.interception.jaxrs.PreMatchContainerRequestContext.filter(PreMatchContainerRequestContext.java:363)
    at org.jboss.resteasy.core.SynchronousDispatcher.preprocess(SynchronousDispatcher.java:156)
    at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:238)
    at io.quarkus.resteasy.runtime.standalone.RequestDispatcher.service(RequestDispatcher.java:73)
    at io.quarkus.resteasy.runtime.standalone.VertxRequestHandler.dispatch(VertxRequestHandler.java:118)
    at io.quarkus.resteasy.runtime.standalone.VertxRequestHandler.lambda$handle$0(VertxRequestHandler.java:74)
    at io.vertx.core.impl.ContextImpl.lambda$executeBlocking$2(ContextImpl.java:316)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
    at java.lang.Thread.run(Thread.java:748)
misl commented 4 years ago

Is it possible to create a multi stage Dockerfile to perform the actual build (inside a container) and creating the docker jvm based docker images (also inside a container)? Like this personal/local setting should not have any impact on the actual build.

jaikiran commented 4 years ago

@misl, Thank you for those logs. They helped. Based on what I see in them, I'm certain that the Java version being used within that container (and I don't mean during mvn package) is for some reason different from the one I see being used in mine. That's a really odd thing and I can't think of a reason why. Maybe you can add the following to the Dockerfile.jvm and rebuild the container and see what version gets printed during the build?

RUN java -version

For me it's:

openjdk version "1.8.0_222"
OpenJDK Runtime Environment (IcedTea 3.13.0) (Alpine 8.222.10-r0)
OpenJDK 64-Bit Server VM (build 25.222-b10, mixed mode)
misl commented 4 years ago

For me it's:

openjdk version "1.8.0_212"
OpenJDK Runtime Environment (IcedTea 3.12.0) (Alpine 8.212.04-r0)
OpenJDK 64-Bit Server VM (build 25.212-b04, mixed mode)
misl commented 4 years ago

Hmm, doing a docker pull fabric8/java-alpine-openjdk8-jre:latest manually indeed pulls in a new version. Now I get the same results as you:

openjdk version "1.8.0_222"
OpenJDK Runtime Environment (IcedTea 3.13.0) (Alpine 8.222.10-r0)
OpenJDK 64-Bit Server VM (build 25.222-b10, mixed mode)

Also, the SSL issues are gone now. Next is getting native to work as well.

misl commented 4 years ago

With @cescoffier his tip native works too.

For me personally this issue is done. The only thing is how to prevent others run into this? Does it make sense to explicitly mention FROM image version (latest) in Dockerfile?

cescoffier commented 4 years ago

I need to check, we must NOT use latest (anywhere...)

cescoffier commented 4 years ago

and it does... FROM fabric8/java-alpine-openjdk8-jre

cescoffier commented 4 years ago

opened: https://github.com/quarkusio/quarkus/pull/5914

jaikiran commented 4 years ago

Hello @cescoffier, should we close this one, now that the Dockerfile change has been merged?

cescoffier commented 4 years ago

@jaikiran yes!