1 <?xml version=
"1.0" encoding=
"UTF-8"?>
2 <!DOCTYPE plist PUBLIC
"-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
6 <key>CertDirectory
</key>
7 <string>TestCopyProperties_ios-data
</string>
8 <key>MajorTestName
</key>
9 <string>UnknownCriticalExtension
</string>
10 <key>MinorTestName
</key>
11 <string>OnlyFailure
</string>
14 <key>PolicyIdentifier
</key>
15 <string>1.2.840.113635.100.1.2</string>
18 <string>InvalidUnknownCriticalCertificateExtensionTest2EE
</string>
20 <string>TrustAnchorRootCertificate
</string>
22 <date>2011-
01-
01T20:
00:
00Z
</date>
23 <key>ExpectedProperties
</key>
27 <string>error
</string>
29 <string>One or more unsupported critical extensions found.
</string>
34 <key>CertDirectory
</key>
35 <string>TestCopyProperties_ios-data
</string>
36 <key>MajorTestName
</key>
37 <string>UnknownCriticalExtension
</string>
38 <key>MinorTestName
</key>
39 <string>TwoFailures
</string>
42 <key>PolicyIdentifier
</key>
43 <string>1.2.840.113635.100.1.2</string>
46 <string>InvalidUnknownCriticalCertificateExtensionTest2EE
</string>
48 <string>TrustAnchorRootCertificate
</string>
50 <date>2001-
01-
01T20:
00:
00Z
</date>
51 <key>ExpectedProperties
</key>
55 <string>error
</string>
57 <string>One or more unsupported critical extensions found.
</string>
62 <key>CertDirectory
</key>
63 <string>si-
20-sectrust-policies-data
</string>
64 <key>MajorTestName
</key>
65 <string>PolicyFail
</string>
66 <key>MinorTestName
</key>
67 <string>NegativeTest
</string>
70 <key>PolicyIdentifier
</key>
71 <string>1.2.840.113635.100.1.42</string>
74 <key>SecPolicyName
</key>
75 <string>bbasile-test.scv.apple.com
</string>
79 <string>generic_apple_server
</string>
80 <key>Intermediates
</key>
81 <string>AppleServerAuthentication
</string>
83 <string>AppleRootCA
</string>
85 <date>2019-
04-
18T19:
00:
00Z
</date>
86 <key>ExpectedProperties
</key>
90 <string>error
</string>
92 <string>Policy requirements not met.
</string>
97 <key>CertDirectory
</key>
98 <string>si-
20-sectrust-policies-data
</string>
99 <key>MajorTestName
</key>
100 <string>HostnameMistmatch
</string>
101 <key>MinorTestName
</key>
102 <string>PolicyFail
</string>
105 <key>PolicyIdentifier
</key>
106 <string>1.2.840.113635.100.1.42</string>
107 <key>Properties
</key>
109 <key>SecPolicyName
</key>
110 <string>idiagnostics.apple.com
</string>
114 <string>generic_apple_server
</string>
115 <key>Intermediates
</key>
116 <string>AppleServerAuthentication
</string>
118 <string>AppleRootCA
</string>
119 <key>VerifyDate
</key>
120 <date>2019-
04-
18T19:
00:
00Z
</date>
121 <key>ExpectedProperties
</key>
125 <string>error
</string>
127 <string>Hostname mismatch.
</string>
131 <string>error
</string>
133 <string>Policy requirements not met.
</string>
138 <key>CertDirectory
</key>
139 <string>si-
20-sectrust-policies-data
</string>
140 <key>MajorTestName
</key>
141 <string>PassingTrust
</string>
142 <key>MinorTestName
</key>
143 <string>PositiveTest
</string>
146 <key>PolicyIdentifier
</key>
147 <string>1.2.840.113635.100.1.3</string>
148 <key>Properties
</key>
150 <key>SecPolicyName
</key>
151 <string>content.googleapis.com
</string>
155 <string>googleapis
</string>
156 <key>Intermediates
</key>
157 <string>GoogleTrustServicesCA101
</string>
159 <string>GlobalSignRootCAR2
</string>
160 <key>VerifyDate
</key>
161 <date>2019-
11-
14T20:
00:
00Z
</date>
164 <key>CertDirectory
</key>
165 <string>si-
20-sectrust-policies-data
</string>
166 <key>BridgeOSDisable
</key>
168 <key>MajorTestName
</key>
169 <string>AnchorTrusted
</string>
170 <key>MinorTestName
</key>
171 <string>OnlyFailure
</string>
174 <key>PolicyIdentifier
</key>
175 <string>1.2.840.113635.100.1.3</string>
176 <key>Properties
</key>
178 <key>SecPolicyName
</key>
179 <string>content.googleapis.com
</string>
183 <string>googleapis
</string>
184 <key>Intermediates
</key>
185 <string>GoogleTrustServicesCA101
</string>
187 <string>AppleRootCA
</string>
188 <key>VerifyDate
</key>
189 <date>2019-
11-
14T20:
00:
00Z
</date>
190 <key>ExpectedProperties
</key>
194 <string>error
</string>
196 <string>Root certificate is not trusted.
</string>
201 <key>CertDirectory
</key>
202 <string>si-
20-sectrust-policies-data
</string>
203 <key>BridgeOSDisable
</key>
205 <key>MajorTestName
</key>
206 <string>AnchorTrusted
</string>
207 <key>MinorTestName
</key>
208 <string>HostnameMismatch
</string>
211 <key>PolicyIdentifier
</key>
212 <string>1.2.840.113635.100.1.3</string>
213 <key>Properties
</key>
215 <key>SecPolicyName
</key>
216 <string>www.google.com
</string>
220 <string>googleapis
</string>
221 <key>Intermediates
</key>
222 <string>GoogleTrustServicesCA101
</string>
224 <string>AppleRootCA
</string>
225 <key>VerifyDate
</key>
226 <date>2019-
11-
14T20:
00:
00Z
</date>
227 <key>ExpectedProperties
</key>
231 <string>error
</string>
233 <string>Root certificate is not trusted.
</string>
237 <string>error
</string>
239 <string>Hostname mismatch.
</string>
244 <key>CertDirectory
</key>
245 <string>si-
20-sectrust-policies-data
</string>
246 <key>MajorTestName
</key>
247 <string>HostnameMismatch
</string>
248 <key>MinorTestName
</key>
249 <string>OnlyFailure
</string>
252 <key>PolicyIdentifier
</key>
253 <string>1.2.840.113635.100.1.3</string>
254 <key>Properties
</key>
256 <key>SecPolicyName
</key>
257 <string>www.google.com
</string>
261 <string>googleapis
</string>
262 <key>Intermediates
</key>
263 <string>GoogleTrustServicesCA101
</string>
265 <string>GlobalSignRootCAR2
</string>
266 <key>VerifyDate
</key>
267 <date>2019-
11-
14T20:
00:
00Z
</date>
268 <key>ExpectedProperties
</key>
272 <string>error
</string>
274 <string>Hostname mismatch.
</string>
279 <key>CertDirectory
</key>
280 <string>si-
20-sectrust-policies-data
</string>
281 <key>MajorTestName
</key>
282 <string>Expired
</string>
283 <key>MinorTestName
</key>
284 <string>OnlyFailure
</string>
287 <key>PolicyIdentifier
</key>
288 <string>1.2.840.113635.100.1.3</string>
289 <key>Properties
</key>
291 <key>SecPolicyName
</key>
292 <string>content.googleapis.com
</string>
296 <string>googleapis
</string>
297 <key>Intermediates
</key>
298 <string>GoogleTrustServicesCA101
</string>
300 <string>GlobalSignRootCAR2
</string>
301 <key>VerifyDate
</key>
302 <date>2018-
11-
14T20:
00:
00Z
</date>
303 <key>ExpectedProperties
</key>
307 <string>error
</string>
309 <string>One or more certificates have expired or are not valid yet.
</string>
314 <key>CertDirectory
</key>
315 <string>si-
20-sectrust-policies-data
</string>
316 <key>MajorTestName
</key>
317 <string>Expired
</string>
318 <key>MinorTestName
</key>
319 <string>HostnameMismatch
</string>
322 <key>PolicyIdentifier
</key>
323 <string>1.2.840.113635.100.1.3</string>
324 <key>Properties
</key>
326 <key>SecPolicyName
</key>
327 <string>www.google.com
</string>
331 <string>googleapis
</string>
332 <key>Intermediates
</key>
333 <string>GoogleTrustServicesCA101
</string>
335 <string>GlobalSignRootCAR2
</string>
336 <key>VerifyDate
</key>
337 <date>2018-
11-
14T20:
00:
00Z
</date>
338 <key>ExpectedProperties
</key>
342 <string>error
</string>
344 <string>Hostname mismatch.
</string>
348 <string>error
</string>
350 <string>One or more certificates have expired or are not valid yet.
</string>
355 <key>CertDirectory
</key>
356 <string>si-
20-sectrust-policies-data
</string>
357 <key>MajorTestName
</key>
358 <string>MissingIntermediate
</string>
359 <key>MinorTestName
</key>
360 <string>OnlyFailure
</string>
363 <key>PolicyIdentifier
</key>
364 <string>1.2.840.113635.100.1.2</string>
367 <string>googleapis
</string>
369 <string>GlobalSignRootCAR2
</string>
370 <key>VerifyDate
</key>
371 <date>2019-
11-
14T20:
00:
00Z
</date>
372 <key>ExpectedProperties
</key>
376 <string>error
</string>
378 <string>Unable to build chain to root certificate.
</string>
383 <key>CertDirectory
</key>
384 <string>si-
20-sectrust-policies-data
</string>
385 <key>MajorTestName
</key>
386 <string>MissingIntermediate
</string>
387 <key>MinorTestName
</key>
388 <string>Expired
</string>
391 <key>PolicyIdentifier
</key>
392 <string>1.2.840.113635.100.1.2</string>
395 <string>googleapis
</string>
397 <string>GlobalSignRootCAR2
</string>
398 <key>VerifyDate
</key>
399 <date>2018-
11-
14T20:
00:
00Z
</date>
400 <key>ExpectedProperties
</key>
404 <string>error
</string>
406 <string>Unable to build chain to root certificate.
</string>
410 <string>error
</string>
412 <string>One or more certificates have expired or are not valid yet.
</string>
417 <key>CertDirectory
</key>
418 <string>si-
20-sectrust-policies-data
</string>
419 <key>BridgeOSDisable
</key>
421 <key>MajorTestName
</key>
422 <string>AnchorApple
</string>
423 <key>MinorTestName
</key>
424 <string>PolicyFail
</string>
427 <key>PolicyIdentifier
</key>
428 <string>1.2.840.113635.100.1.68</string>
429 <key>Properties
</key>
431 <key>SecPolicyName
</key>
432 <string>identity.ess.apple.com
</string>
436 <string>ids_ist_identity
</string>
437 <key>Intermediates
</key>
438 <string>AppleISTCA2G1
</string>
440 <string>GeoTrustGlobalCA
</string>
441 <key>VerifyDate
</key>
442 <date>2017-
02-
08T21:
00:
00Z
</date>
443 <key>ExpectedProperties
</key>
447 <string>error
</string>
449 <string>Root certificate is not trusted.
</string>
453 <string>error
</string>
455 <string>Policy requirements not met.
</string>
460 <key>CertDirectory
</key>
461 <string>si-
20-sectrust-policies-data
</string>
462 <key>MajorTestName
</key>
463 <string>AnchorSHA256
</string>
464 <key>MinorTestName
</key>
465 <string>PositiveTest
</string>
468 <key>PolicyIdentifier
</key>
469 <string>1.2.840.113635.100.1.74</string>
470 <key>Properties
</key>
472 <key>SecPolicyName
</key>
473 <string>caldav.icloud.com
</string>
474 <key>SecPolicyPolicyName
</key>
475 <string>no-system-pinning-rules
</string>
479 <string>caldav
</string>
480 <key>Intermediates
</key>
482 <string>AppleISTCA2G1-Baltimore
</string>
483 <string>AppleISTCA2G1
</string>
486 <string>BaltimoreCyberTrustRoot
</string>
487 <key>VerifyDate
</key>
488 <date>2019-
10-
04T19:
00:
00Z
</date>
489 <key>ExpectedProperties
</key>
493 <string>error
</string>
495 <string>Root certificate is not trusted.
</string>
500 <key>CertDirectory
</key>
501 <string>TestCopyProperties_ios-data
</string>
502 <key>MajorTestName
</key>
503 <string>WeakKey
</string>
504 <key>MinorTestName
</key>
505 <string>OnlyFailure
</string>
508 <key>PolicyIdentifier
</key>
509 <string>1.2.840.113635.100.1.2</string>
512 <string>leaf512
</string>
513 <key>Intermediates
</key>
514 <string>int2048B
</string>
516 <string>root2048
</string>
517 <key>VerifyDate
</key>
518 <date>2016-
01-
01T20:
00:
00Z
</date>
519 <key>ExpectedProperties
</key>
523 <string>error
</string>
525 <string>One or more certificates is using a weak key size.
</string>
530 <key>CertDirectory
</key>
531 <string>TestCopyProperties_ios-data
</string>
532 <key>MajorTestName
</key>
533 <string>KeySize
</string>
534 <key>MinorTestName
</key>
535 <string>OnlyFailure
</string>
538 <key>PolicyIdentifier
</key>
539 <string>1.2.840.113635.100.1.3</string>
540 <key>Properties
</key>
542 <key>SecPolicyName
</key>
543 <string>example.com
</string>
547 <string>leaf1024
</string>
549 <string>rootSSL
</string>
550 <key>VerifyDate
</key>
551 <date>2020-
01-
01T20:
00:
00Z
</date>
552 <key>ExpectedProperties
</key>
556 <string>error
</string>
558 <string>One or more certificates is using a weak key size.
</string>
563 <key>CertDirectory
</key>
564 <string>TestCopyProperties_ios-data
</string>
565 <key>MajorTestName
</key>
566 <string>KeySize
</string>
567 <key>MinorTestName
</key>
568 <string>Expired
</string>
571 <key>PolicyIdentifier
</key>
572 <string>1.2.840.113635.100.1.3</string>
573 <key>Properties
</key>
575 <key>SecPolicyName
</key>
576 <string>example.com
</string>
580 <string>leaf1024
</string>
582 <string>rootSSL
</string>
583 <key>VerifyDate
</key>
584 <date>2019-
01-
01T20:
00:
00Z
</date>
585 <key>ExpectedProperties
</key>
589 <string>error
</string>
591 <string>One or more certificates have expired or are not valid yet.
</string>
595 <string>error
</string>
597 <string>One or more certificates is using a weak key size.
</string>
602 <key>CertDirectory
</key>
603 <string>TestCopyProperties_ios-data
</string>
604 <key>MajorTestName
</key>
605 <string>WeakSignature
</string>
606 <key>MinorTestName
</key>
607 <string>OnlyFailure
</string>
610 <key>PolicyIdentifier
</key>
611 <string>1.2.840.113635.100.1.2</string>
614 <string>leafMD5
</string>
616 <string>rootSHA256
</string>
617 <key>VerifyDate
</key>
618 <date>2019-
01-
01T20:
00:
00Z
</date>
619 <key>ExpectedProperties
</key>
623 <string>error
</string>
625 <string>One or more certificates is using a weak signature algorithm.
</string>
630 <key>CertDirectory
</key>
631 <string>TestCopyProperties_ios-data
</string>
632 <key>BridgeOSDisable
</key>
634 <key>MajorTestName
</key>
635 <string>SystemTrustedWeakHash
</string>
636 <key>MinorTestName
</key>
637 <string>OnlyFailure
</string>
640 <key>PolicyIdentifier
</key>
641 <string>1.2.840.113635.100.1.3</string>
642 <key>Properties
</key>
644 <key>SecPolicyName
</key>
645 <string>www.badssl.com
</string>
649 <string>leafSHA1
</string>
650 <key>Intermediates
</key>
651 <string>intSHA1
</string>
652 <key>VerifyDate
</key>
653 <date>2016-
01-
01T20:
00:
00Z
</date>
654 <key>ExpectedProperties
</key>
658 <string>error
</string>
660 <string>One or more certificates is using a weak signature algorithm.
</string>
665 <key>CertDirectory
</key>
666 <string>TestCopyProperties_ios-data
</string>
667 <key>MajorTestName
</key>
668 <string>SignatureHashAlgorithms
</string>
669 <key>MinorTestName
</key>
670 <string>OnlyFailure
</string>
673 <key>PolicyIdentifier
</key>
674 <string>1.2.840.113635.100.1.3</string>
675 <key>Properties
</key>
677 <key>SecPolicyName
</key>
678 <string>www.badssl.com
</string>
682 <string>leafSHA1
</string>
683 <key>Intermediates
</key>
684 <string>intSHA1
</string>
686 <string>systemRoot
</string>
687 <key>VerifyDate
</key>
688 <date>2016-
01-
01T20:
00:
00Z
</date>
689 <key>ExpectedProperties
</key>
693 <string>error
</string>
695 <string>One or more certificates is using a weak signature algorithm.
</string>
700 <key>CertDirectory
</key>
701 <string>TestCopyProperties_ios-data
</string>
702 <key>MajorTestName
</key>
703 <string>SignatureHashAlgorithms
</string>
704 <key>MinorTestName
</key>
705 <string>HostnameMismatch
</string>
708 <key>PolicyIdentifier
</key>
709 <string>1.2.840.113635.100.1.3</string>
710 <key>Properties
</key>
712 <key>SecPolicyName
</key>
713 <string>example.com
</string>
717 <string>leafSHA1
</string>
718 <key>Intermediates
</key>
719 <string>intSHA1
</string>
721 <string>systemRoot
</string>
722 <key>VerifyDate
</key>
723 <date>2016-
01-
01T20:
00:
00Z
</date>
724 <key>ExpectedProperties
</key>
728 <string>error
</string>
730 <string>Hostname mismatch.
</string>
734 <string>error
</string>
736 <string>One or more certificates is using a weak signature algorithm.
</string>