1 <?xml version=
"1.0" encoding=
"UTF-8"?>
2 <!DOCTYPE plist PUBLIC
"-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
6 <key>CertDirectory
</key>
7 <string>TestCopyProperties_ios-data
</string>
8 <key>MajorTestName
</key>
9 <string>UnknownCriticalExtension
</string>
10 <key>MinorTestName
</key>
11 <string>OnlyFailure
</string>
14 <key>PolicyIdentifier
</key>
15 <string>1.2.840.113635.100.1.2</string>
18 <string>InvalidUnknownCriticalCertificateExtensionTest2EE
</string>
20 <string>TrustAnchorRootCertificate
</string>
22 <date>2011-
01-
01T20:
00:
00Z
</date>
23 <key>ExpectedProperties
</key>
27 <string>error
</string>
29 <string>One or more unsupported critical extensions found.
</string>
34 <key>CertDirectory
</key>
35 <string>TestCopyProperties_ios-data
</string>
36 <key>MajorTestName
</key>
37 <string>UnknownCriticalExtension
</string>
38 <key>MinorTestName
</key>
39 <string>TwoFailures
</string>
42 <key>PolicyIdentifier
</key>
43 <string>1.2.840.113635.100.1.2</string>
46 <string>InvalidUnknownCriticalCertificateExtensionTest2EE
</string>
48 <string>TrustAnchorRootCertificate
</string>
50 <date>2001-
01-
01T20:
00:
00Z
</date>
51 <key>ExpectedProperties
</key>
55 <string>error
</string>
57 <string>One or more unsupported critical extensions found.
</string>
62 <key>CertDirectory
</key>
63 <string>si-
20-sectrust-policies-data
</string>
64 <key>MajorTestName
</key>
65 <string>PolicyFail
</string>
66 <key>MinorTestName
</key>
67 <string>NegativeTest
</string>
70 <key>PolicyIdentifier
</key>
71 <string>1.2.840.113635.100.1.42</string>
74 <key>SecPolicyName
</key>
75 <string>bbasile-test.scv.apple.com
</string>
79 <string>generic_apple_server
</string>
80 <key>Intermediates
</key>
81 <string>AppleServerAuthentication
</string>
83 <string>AppleRootCA
</string>
85 <date>2019-
04-
18T19:
00:
00Z
</date>
86 <key>ExpectedProperties
</key>
90 <string>error
</string>
92 <string>Policy requirements not met.
</string>
97 <key>CertDirectory
</key>
98 <string>si-
20-sectrust-policies-data
</string>
99 <key>MajorTestName
</key>
100 <string>HostnameMistmatch
</string>
101 <key>MinorTestName
</key>
102 <string>PolicyFail
</string>
105 <key>PolicyIdentifier
</key>
106 <string>1.2.840.113635.100.1.42</string>
107 <key>Properties
</key>
109 <key>SecPolicyName
</key>
110 <string>idiagnostics.apple.com
</string>
114 <string>generic_apple_server
</string>
115 <key>Intermediates
</key>
116 <string>AppleServerAuthentication
</string>
118 <string>AppleRootCA
</string>
119 <key>VerifyDate
</key>
120 <date>2019-
04-
18T19:
00:
00Z
</date>
121 <key>ExpectedProperties
</key>
125 <string>error
</string>
127 <string>Hostname mismatch.
</string>
131 <string>error
</string>
133 <string>Policy requirements not met.
</string>
138 <key>CertDirectory
</key>
139 <string>si-
20-sectrust-policies-data
</string>
140 <key>MajorTestName
</key>
141 <string>PassingTrust
</string>
142 <key>MinorTestName
</key>
143 <string>PositiveTest
</string>
146 <key>PolicyIdentifier
</key>
147 <string>1.2.840.113635.100.1.3</string>
148 <key>Properties
</key>
150 <key>SecPolicyName
</key>
151 <string>content.googleapis.com
</string>
155 <string>googleapis
</string>
156 <key>Intermediates
</key>
157 <string>GoogleTrustServicesCA101
</string>
159 <string>GlobalSignRootCAR2
</string>
160 <key>VerifyDate
</key>
161 <date>2019-
11-
14T20:
00:
00Z
</date>
164 <key>CertDirectory
</key>
165 <string>si-
20-sectrust-policies-data
</string>
166 <key>BridgeOSDisable
</key>
168 <key>MajorTestName
</key>
169 <string>AnchorTrusted
</string>
170 <key>MinorTestName
</key>
171 <string>OnlyFailure
</string>
174 <key>PolicyIdentifier
</key>
175 <string>1.2.840.113635.100.1.3</string>
176 <key>Properties
</key>
178 <key>SecPolicyName
</key>
179 <string>content.googleapis.com
</string>
183 <string>googleapis
</string>
184 <key>Intermediates
</key>
185 <string>GoogleTrustServicesCA101
</string>
187 <string>AppleRootCA
</string>
188 <key>VerifyDate
</key>
189 <date>2019-
11-
14T20:
00:
00Z
</date>
190 <key>ExpectedProperties
</key>
194 <string>error
</string>
196 <string>Root certificate is not trusted.
</string>
201 <key>CertDirectory
</key>
202 <string>si-
20-sectrust-policies-data
</string>
203 <key>BridgeOSDisable
</key>
205 <key>MajorTestName
</key>
206 <string>AnchorTrusted
</string>
207 <key>MinorTestName
</key>
208 <string>HostnameMismatch
</string>
211 <key>PolicyIdentifier
</key>
212 <string>1.2.840.113635.100.1.3</string>
213 <key>Properties
</key>
215 <key>SecPolicyName
</key>
216 <string>www.google.com
</string>
220 <string>googleapis
</string>
221 <key>Intermediates
</key>
222 <string>GoogleTrustServicesCA101
</string>
224 <string>AppleRootCA
</string>
225 <key>VerifyDate
</key>
226 <date>2019-
11-
14T20:
00:
00Z
</date>
227 <key>ExpectedProperties
</key>
231 <string>error
</string>
233 <string>Root certificate is not trusted.
</string>
237 <string>error
</string>
239 <string>Hostname mismatch.
</string>
244 <key>CertDirectory
</key>
245 <string>si-
20-sectrust-policies-data
</string>
246 <key>MajorTestName
</key>
247 <string>HostnameMismatch
</string>
248 <key>MinorTestName
</key>
249 <string>OnlyFailure
</string>
252 <key>PolicyIdentifier
</key>
253 <string>1.2.840.113635.100.1.3</string>
254 <key>Properties
</key>
256 <key>SecPolicyName
</key>
257 <string>www.google.com
</string>
261 <string>googleapis
</string>
262 <key>Intermediates
</key>
263 <string>GoogleTrustServicesCA101
</string>
265 <string>GlobalSignRootCAR2
</string>
266 <key>VerifyDate
</key>
267 <date>2019-
11-
14T20:
00:
00Z
</date>
268 <key>ExpectedProperties
</key>
272 <string>error
</string>
274 <string>Hostname mismatch.
</string>
279 <key>CertDirectory
</key>
280 <string>si-
20-sectrust-policies-data
</string>
281 <key>MajorTestName
</key>
282 <string>Expired
</string>
283 <key>MinorTestName
</key>
284 <string>OnlyFailure
</string>
287 <key>PolicyIdentifier
</key>
288 <string>1.2.840.113635.100.1.3</string>
289 <key>Properties
</key>
291 <key>SecPolicyName
</key>
292 <string>content.googleapis.com
</string>
296 <string>googleapis
</string>
297 <key>Intermediates
</key>
298 <string>GoogleTrustServicesCA101
</string>
300 <string>GlobalSignRootCAR2
</string>
301 <key>VerifyDate
</key>
302 <date>2018-
11-
14T20:
00:
00Z
</date>
303 <key>ExpectedProperties
</key>
307 <string>error
</string>
309 <string>One or more certificates have expired or are not valid yet.
</string>
314 <key>CertDirectory
</key>
315 <string>si-
20-sectrust-policies-data
</string>
316 <key>MajorTestName
</key>
317 <string>Expired
</string>
318 <key>MinorTestName
</key>
319 <string>HostnameMismatch
</string>
322 <key>PolicyIdentifier
</key>
323 <string>1.2.840.113635.100.1.3</string>
324 <key>Properties
</key>
326 <key>SecPolicyName
</key>
327 <string>www.google.com
</string>
331 <string>googleapis
</string>
332 <key>Intermediates
</key>
333 <string>GoogleTrustServicesCA101
</string>
335 <string>GlobalSignRootCAR2
</string>
336 <key>VerifyDate
</key>
337 <date>2018-
11-
14T20:
00:
00Z
</date>
338 <key>ExpectedProperties
</key>
342 <string>error
</string>
344 <string>Hostname mismatch.
</string>
348 <string>error
</string>
350 <string>One or more certificates have expired or are not valid yet.
</string>
355 <key>CertDirectory
</key>
356 <string>si-
20-sectrust-policies-data
</string>
357 <key>MajorTestName
</key>
358 <string>MissingIntermediate
</string>
359 <key>MinorTestName
</key>
360 <string>OnlyFailure
</string>
363 <key>PolicyIdentifier
</key>
364 <string>1.2.840.113635.100.1.2</string>
367 <string>googleapis
</string>
369 <string>GlobalSignRootCAR2
</string>
370 <key>VerifyDate
</key>
371 <date>2019-
11-
14T20:
00:
00Z
</date>
372 <key>ExpectedProperties
</key>
376 <string>error
</string>
378 <string>Unable to build chain to root certificate.
</string>
383 <key>CertDirectory
</key>
384 <string>si-
20-sectrust-policies-data
</string>
385 <key>MajorTestName
</key>
386 <string>MissingIntermediate
</string>
387 <key>MinorTestName
</key>
388 <string>Expired
</string>
391 <key>PolicyIdentifier
</key>
392 <string>1.2.840.113635.100.1.2</string>
395 <string>googleapis
</string>
397 <string>GlobalSignRootCAR2
</string>
398 <key>VerifyDate
</key>
399 <date>2018-
11-
14T20:
00:
00Z
</date>
400 <key>ExpectedProperties
</key>
404 <string>error
</string>
406 <string>Unable to build chain to root certificate.
</string>
410 <string>error
</string>
412 <string>One or more certificates have expired or are not valid yet.
</string>
417 <key>CertDirectory
</key>
418 <string>si-
20-sectrust-policies-data
</string>
419 <key>BridgeOSDisable
</key>
421 <key>MajorTestName
</key>
422 <string>AnchorSHA1
</string>
423 <key>MinorTestName
</key>
424 <string>OnlyFailure
</string>
427 <key>PolicyIdentifier
</key>
428 <string>1.2.840.113635.100.1.51</string>
431 <string>escrow_service_key_049F9D11
</string>
432 <key>Intermediates
</key>
433 <string>EscrowServiceRootCA101
</string>
435 <string>EscrowServiceRootCA101
</string>
436 <key>ExpectedProperties
</key>
440 <string>error
</string>
442 <string>Root certificate is not trusted.
</string>
447 <key>CertDirectory
</key>
448 <string>si-
20-sectrust-policies-data
</string>
449 <key>BridgeOSDisable
</key>
451 <key>MajorTestName
</key>
452 <string>AnchorApple
</string>
453 <key>MinorTestName
</key>
454 <string>PolicyFail
</string>
457 <key>PolicyIdentifier
</key>
458 <string>1.2.840.113635.100.1.68</string>
459 <key>Properties
</key>
461 <key>SecPolicyName
</key>
462 <string>identity.ess.apple.com
</string>
466 <string>ids_ist_identity
</string>
467 <key>Intermediates
</key>
468 <string>AppleISTCA2G1
</string>
470 <string>GeoTrustGlobalCA
</string>
471 <key>VerifyDate
</key>
472 <date>2017-
02-
08T21:
00:
00Z
</date>
473 <key>ExpectedProperties
</key>
477 <string>error
</string>
479 <string>Root certificate is not trusted.
</string>
483 <string>error
</string>
485 <string>Policy requirements not met.
</string>
490 <key>CertDirectory
</key>
491 <string>si-
20-sectrust-policies-data
</string>
492 <key>MajorTestName
</key>
493 <string>AnchorSHA256
</string>
494 <key>MinorTestName
</key>
495 <string>PositiveTest
</string>
498 <key>PolicyIdentifier
</key>
499 <string>1.2.840.113635.100.1.74</string>
500 <key>Properties
</key>
502 <key>SecPolicyName
</key>
503 <string>caldav.icloud.com
</string>
504 <key>SecPolicyPolicyName
</key>
505 <string>no-system-pinning-rules
</string>
509 <string>caldav
</string>
510 <key>Intermediates
</key>
512 <string>AppleISTCA2G1-Baltimore
</string>
513 <string>AppleISTCA2G1
</string>
516 <string>BaltimoreCyberTrustRoot
</string>
517 <key>VerifyDate
</key>
518 <date>2019-
10-
04T19:
00:
00Z
</date>
519 <key>ExpectedProperties
</key>
523 <string>error
</string>
525 <string>Root certificate is not trusted.
</string>
530 <key>CertDirectory
</key>
531 <string>TestCopyProperties_ios-data
</string>
532 <key>MajorTestName
</key>
533 <string>WeakKey
</string>
534 <key>MinorTestName
</key>
535 <string>OnlyFailure
</string>
538 <key>PolicyIdentifier
</key>
539 <string>1.2.840.113635.100.1.2</string>
542 <string>leaf512
</string>
543 <key>Intermediates
</key>
544 <string>int2048B
</string>
546 <string>root2048
</string>
547 <key>VerifyDate
</key>
548 <date>2016-
01-
01T20:
00:
00Z
</date>
549 <key>ExpectedProperties
</key>
553 <string>error
</string>
555 <string>One or more certificates is using a weak key size.
</string>
560 <key>CertDirectory
</key>
561 <string>TestCopyProperties_ios-data
</string>
562 <key>MajorTestName
</key>
563 <string>KeySize
</string>
564 <key>MinorTestName
</key>
565 <string>OnlyFailure
</string>
568 <key>PolicyIdentifier
</key>
569 <string>1.2.840.113635.100.1.3</string>
570 <key>Properties
</key>
572 <key>SecPolicyName
</key>
573 <string>example.com
</string>
577 <string>leaf1024
</string>
579 <string>rootSSL
</string>
580 <key>VerifyDate
</key>
581 <date>2020-
01-
01T20:
00:
00Z
</date>
582 <key>ExpectedProperties
</key>
586 <string>error
</string>
588 <string>One or more certificates is using a weak key size.
</string>
593 <key>CertDirectory
</key>
594 <string>TestCopyProperties_ios-data
</string>
595 <key>MajorTestName
</key>
596 <string>KeySize
</string>
597 <key>MinorTestName
</key>
598 <string>Expired
</string>
601 <key>PolicyIdentifier
</key>
602 <string>1.2.840.113635.100.1.3</string>
603 <key>Properties
</key>
605 <key>SecPolicyName
</key>
606 <string>example.com
</string>
610 <string>leaf1024
</string>
612 <string>rootSSL
</string>
613 <key>VerifyDate
</key>
614 <date>2019-
01-
01T20:
00:
00Z
</date>
615 <key>ExpectedProperties
</key>
619 <string>error
</string>
621 <string>One or more certificates have expired or are not valid yet.
</string>
625 <string>error
</string>
627 <string>One or more certificates is using a weak key size.
</string>
632 <key>CertDirectory
</key>
633 <string>TestCopyProperties_ios-data
</string>
634 <key>MajorTestName
</key>
635 <string>WeakSignature
</string>
636 <key>MinorTestName
</key>
637 <string>OnlyFailure
</string>
640 <key>PolicyIdentifier
</key>
641 <string>1.2.840.113635.100.1.2</string>
644 <string>leafMD5
</string>
646 <string>rootSHA256
</string>
647 <key>VerifyDate
</key>
648 <date>2019-
01-
01T20:
00:
00Z
</date>
649 <key>ExpectedProperties
</key>
653 <string>error
</string>
655 <string>One or more certificates is using a weak signature algorithm.
</string>
660 <key>CertDirectory
</key>
661 <string>TestCopyProperties_ios-data
</string>
662 <key>BridgeOSDisable
</key>
664 <key>MajorTestName
</key>
665 <string>SystemTrustedWeakHash
</string>
666 <key>MinorTestName
</key>
667 <string>OnlyFailure
</string>
670 <key>PolicyIdentifier
</key>
671 <string>1.2.840.113635.100.1.3</string>
672 <key>Properties
</key>
674 <key>SecPolicyName
</key>
675 <string>www.badssl.com
</string>
679 <string>leafSHA1
</string>
680 <key>Intermediates
</key>
681 <string>intSHA1
</string>
682 <key>VerifyDate
</key>
683 <date>2016-
01-
01T20:
00:
00Z
</date>
684 <key>ExpectedProperties
</key>
688 <string>error
</string>
690 <string>One or more certificates is using a weak signature algorithm.
</string>
695 <key>CertDirectory
</key>
696 <string>TestCopyProperties_ios-data
</string>
697 <key>MajorTestName
</key>
698 <string>SignatureHashAlgorithms
</string>
699 <key>MinorTestName
</key>
700 <string>OnlyFailure
</string>
703 <key>PolicyIdentifier
</key>
704 <string>1.2.840.113635.100.1.3</string>
705 <key>Properties
</key>
707 <key>SecPolicyName
</key>
708 <string>www.badssl.com
</string>
712 <string>leafSHA1
</string>
713 <key>Intermediates
</key>
714 <string>intSHA1
</string>
716 <string>systemRoot
</string>
717 <key>VerifyDate
</key>
718 <date>2016-
01-
01T20:
00:
00Z
</date>
719 <key>ExpectedProperties
</key>
723 <string>error
</string>
725 <string>One or more certificates is using a weak signature algorithm.
</string>
730 <key>CertDirectory
</key>
731 <string>TestCopyProperties_ios-data
</string>
732 <key>MajorTestName
</key>
733 <string>SignatureHashAlgorithms
</string>
734 <key>MinorTestName
</key>
735 <string>HostnameMismatch
</string>
738 <key>PolicyIdentifier
</key>
739 <string>1.2.840.113635.100.1.3</string>
740 <key>Properties
</key>
742 <key>SecPolicyName
</key>
743 <string>example.com
</string>
747 <string>leafSHA1
</string>
748 <key>Intermediates
</key>
749 <string>intSHA1
</string>
751 <string>systemRoot
</string>
752 <key>VerifyDate
</key>
753 <date>2016-
01-
01T20:
00:
00Z
</date>
754 <key>ExpectedProperties
</key>
758 <string>error
</string>
760 <string>Hostname mismatch.
</string>
764 <string>error
</string>
766 <string>One or more certificates is using a weak signature algorithm.
</string>