From 85a3bc9ac00bdacd6e79eec20bf2c7c798804993 Mon Sep 17 00:00:00 2001 From: Christian Hesse Date: Fri, 7 Aug 2026 13:46:54 +0200 Subject: [PATCH] CERTIFICATES: explain special case with Organizational Unit --- CERTIFICATES.d/05-cert-from-OU.avif | Bin 0 -> 12567 bytes CERTIFICATES.md | 14 ++++++++++++++ 2 files changed, 14 insertions(+) create mode 100644 CERTIFICATES.d/05-cert-from-OU.avif diff --git a/CERTIFICATES.d/05-cert-from-OU.avif b/CERTIFICATES.d/05-cert-from-OU.avif new file mode 100644 index 0000000000000000000000000000000000000000..a3857034ea49e95644170a395ca31bc0661e9fce GIT binary patch literal 12567 zcmYLvW0WRM6J^_)wr$%sr)|5Rw%yaV?P=S#ZQHi(o%h?bXXBj88@O2!8NaeB69@>1 z(9GGx-q00b2J}z6Enw)q4^aV5_NM>vpMV_xOY!(mL9z$91OD@XLP0_O12{uhCJ}$q|2#k_ z#&*_@w#L@(|Ehrpg7Ew2`nS;kO9%e{WH8+S$ejODi~Og!INEaC*qfUFZxH4-1{m9O zJ9#)co7y;W|Kk9x0fvqq+=lHwSH9@1+xSfsbTEIe~d$S*G)VhWfLGjT3KdL=PYR^EB1 z5V5ztVBm?KgK4@?xl$epEazJlVSNOUh|^xd@`OdZtdQfdO(V1oe$Q;#>rZ}D9q7Mg zI5ZN5q}oZTtlHLp^zXqi%iS*#f?KkI6WTp{>D8;#s{*i-{`v%pqYZ0hSE)c5+qpWL#jNwmIm*slyK_@VglMVoB2K7+ z0ydrrWuH<&dD2nP@X`xBN$)ioE~Mf%7^p+M&N@SDskY7CiaE}Bpo>aK96kvnW8suw zK#8pSJWVb2CJakS6xf)f$9KT4+z6;oLYDC9T@&oPK%$wH4cGC5QihI4a>Tztfv)Oq zS7CAz{MT<7u7CZ`l!UTi^N z%A4Iew>Ijl>D%M<&7eO45YDJP*$)Prnmu7dqb7{?uQEq1Tj%*X{|OVr`AeR%NV)q=%L)4*-E0#E5i%Lq0Lvo-B+FmPkPPv25Oyk%j~+ye=~NQXQ&rtH&7bBh1Y8eYx66)rO?ZhX;n-_3nFjL ztNSp@Fir~fNlRWnRfq4~_cDU3r}XjU_6ePZ$_T9H3@D=!wqEy{1hfdYaW+*+xZVCr zwMdJcvMP7dcSR|U(nTeo^&YHuv#Pr9Gy}18<^Wo&lg2%eIbC;X9$izr?6mb=7VC*o zvp`6$UAjW{ur5MS7hyJ5#@O4TO(=(4}Oz%mPXg)rHapNqpbJ z>E3XXU{ULj;ZKygt{jQjZp&g`uc2-tn7$?`ocD+~9PYJKit7~`Uw6Z8Ee2y?KE9jB zU-;F%Ni|Nk z=)T;Z;$V=b?8oJ&!$qep!_D zr7)st+d7(sWMr%Uxag*FU_Ssz+fwKy$obaz$D*Zz%5v^xOIJujs=nP#)t$+9LSM?X zreAVOvaI5so=BCEz-+h9X^iws?;JHSood^N(x$Z9sryo6B04w-5u=R31zhwZ;Tys|OB3zdQ8ii{nyyC~D0% zV){rPdxB-7bU#zb9N)b1-fq}`H{aM*c?Nu1H*)YBN*p{+72mAONxn{nBCANhrC07g z8=~68Z-{YSL&15%Qv4B?qTF}T(yhkk)*KG~biCZJ^0LiRtbt4f&6r(g>Qz*1G+%o)pg$XCS&?iU-~3yp$FF z4&7((UIr(^xYBU07W|_v+QX`1Ddoe=nJdfvH3g(7q6STwqu#b$>u_i^T3Dd6mONSj zsbLwnYh88m8iR^IuQ1xRi^27Yedd3%YF--j|HeR8~1jsj-OYg92&RBN(4Y6|cS^TYH*hx?#a z?{`cKiWriNsLkMbe;nG*d{TRT$+A4LoD2!A(s!Kr4&eg|xwvlm04C`;65I9*uV-!) zGLuC;d!J{A#{h{th@V#Q%j*(CJO11gQlIQ94D`L;M5S$K3lzrl!0|>fnLsuBAzlvVN|T#tV}<)}Z_>+~CQVJq6>dhCF+z&bKb{R~YZnLhJnpNjsDK2nxxJvy1xEPj}X zPwQ@v0nGqM>1(T2l`I0Bc{u2`9GF`~#w5=a+YD+e`c{NPXJz7{d}vZ>JLguv=smCk zi?e0w6urtk@eJ48528GQFrkTVS>lWGC);oo4E~Yh5Ez9vc}5a-wRHoH-(*TP;AM(D zrXhRVOdvq_SJs0vh{4~=E{2eT)N^>)Gd@jmWL;pTe+$H#m}ZT30xGG&FVKGqo3>_t zZxV8X3p9N?`Eft&rLhbMsF>ju0z)Ns&4RBT##=C2$GX{*9E|1mPx*p?s<^KecS!5_ zZZbB*ITgLM-J*T5uHkb!>s-3QLYGDYl`=ffeK!O>ESq;Lt2Q1jY0b=W zN9u-5i4+x?M~aXp$;$GhO*A}|2iaa@hh`gzRBj6Pu8d=@uzX+BPk!cWxPwSdHIa7{B*nmjoH zMNLrx7qk_D)T=uYsp>p%)!3F)*j&z>Evwy7klQH!t!FL4?1X-hO(q{JXQ7_h?^nLU zat5vHa#-(@hzXt)`RQxYysyyD=M0#Lk!kb7;C@4Ws!h{~%S?2KyuSlykFyJ=BEc@- zQ3FzLGYB4hUN1U&8jY9Ff; zxH(LzKqpSBb2?$Pt<9#|E_*a0F3KR=nIP{XZxdvKdc<6KoUn0XB=MlwEi4>2Evuxrb}k&;K*(pV&LcY>>iBCKM=Z2kuml9B(Mr^f)W+HS`H|VV46!YKCinYzSighUg-hGJ`~pdjs%cC!DE+zPU>t1B5!}fpZz|P@ z`Og@=c|hupkvr`-FV|R>(drdppD^AN0bh6F+eM6bgD@tq>ZlqH!AvWS>Qkq)IIC1I z*!MTrRDoIS+i)iG65`IH1L{1o;a8WfUC^yYY3Z*Mp`M48g1;G+4&e2Ioi-}8eJ#dw z90CfAWM`nrvQMh|-2=vL0&oOdhfET!^CHPII{Dyp@RZzhnXPSvvmkHwA4p+pKo3CC zt}aEOJ2tN!;z6hF0PCd)lEMsboK>mNV>Lm)mQdL|!pS`NE2NN$kQ1WtHZ6akfSLCM zF6KL*^V2Lm@wyU+eURBb?bPB%8FZ}vW}Oq`c?XO+mWOCB5o z1YnXv7LapaQRgqaInB%o>6fV_33yi5?<(BGfvbmPDCKNbYB=Je6t_4#bRKfGUo($m z8L}nNplJ@*p!L05d`Frm`+MCsfnG1!etFxHSTQlJh^V2lNg4h`Xr!CsZq;qkAil)l zZ>57>D|Q7ps^h}HH5QHwh?vS#=doX=+T1LCp zD2PuwWEd^THI4^bQ*9LaK*Z4egS0IY>cehEF^tmOV_hbuHDe7y5aCdkI7tIQf>We8 zu~W(KvM%HLAkgC*?;O+}6GMTh((9}W)muTP0I;PJ`s}?kTl(D#z7z3n$*5K>dZPo7 zhctYX6nmLhh+g{Fh=k++t_U9M zFS{9PnmcB6#PAYAaQGh+swMez#P{n;V({lQcBC3N<%PwzdxT0O;K(A8mf6j!;@un= zECY0OFCKHV#v?e3vGfw*w*VG!3H0>XOnQ`?nTVtm;W{5G(Q!PL*J=yJ1P z>KiSNtYD(=M+sM^RPwzTr)}A5*h4RRsQz1Sbp75^i^Hh}Rl+xzZg{4;Q3hT%^8GuF z#*$ikIdFg$|=Ca3IU zGJ2!gWu*b8u-iDU37vz(34GUXGntEaPG5!D9m@?LLrG^1m2`qXF^Z36x?mr~xf1O&hd@R#AF6Xs&D-) zMNs)&V>Lb!B;|xUpX6G&%QyHB>|fTk61apNTZ06?^SqtT?ZaMlso_K6IBkd*Qhfa@ z%Td8>m(9!r6qFAViZ&u9XGX0joOsO-rPp?Z^507+^+@`I0ZUq71;L*}sQ>lk-^8dcJJEQ-pP8wv z!H``B&qt;Q{Z`wX<=bDq)~(bqD?|y|PbC@PG~c@FVJB58(sBg|lvrEw1;Uwwv{mxi=^u z++d-BmM9wTmc)Ay!73#q3e=cRryU0%l)4apKuWB|HMDu9sb0 z!A>W%0TwGJv|?wF7UFd_&_h#Reg#n_J65I^kab?qLWG^F;b2Lz02~H z>He_q=__yBxRAvy={b`Y!hRe0{!oVxld;u;vw&1@bu;WRR?8f)s``6!86C@c_;Q!3 z&zS+{q0&hU^>R(5XFk%9O1llDF zXw5C+A;eSH6#{!)Rws6g$L0dS9LN8 z)GTn_);%|%Un$W00ZvzMkhOoF!H*^-3!C`@j8|o?XGP3Kq1&|?2s{rMSqU4zjfz&; zXU93*v?cQ?A38!w>$=JOkR{^Veycq)aqJis_h z^8;a{>dHPK1p1!eStfHd>WqWcd{n0Fv2^UcW3^K(5tQHc)hEhB&XS-SBe#g6Vqlj% zV#Z=QTVu6;Ns2aci&J*QCUnfXNr&2L?sow< zDR>SQwNw{7Cn@uTVc(sf^0-#+B!8V9{CJ_t--L z+dye`ijRE5CLkDhv^@_MDYi3()$_uXVuf-+#S{H=`2}dK7G?_ar`xa#=^yLei+DnX zZy|nIDkMH`w2A(;Edn*zv7uvaCq`nP#0g%K`rMUk!ZL~I=a9{()nkt+jM|huR3`0) zH^k=&zA_N2q7ieU;CeV)_!g))$KN+FcBhwE!)OPKwCD1RADX-V6-Y(@-B4g(l_QLScPi2BO4()R;x5BQAN1y_563((I`x$Se%wNx$3?x(F51oF#P?% z^9{iVCE#S7GG9LfuW9?`9fQX^Nj1%tJ)Xu8%O zD#XOjZ>ablUiO(c9re&gARlN_>nHn`f;ut`COoN2DKh@9nTv&oDP%tgwklz;**hx1 z3!TerQcEHj8M%uu2!BqhY#676?WI=iKP#pXcMAN9^?+=zhRPxXbS^mG-$7ym92F?# z6W?4A5@!}USyc*go>k<#26jV!ZrY(W%FkI0e`K{Feif7Cm$`iZDvfdetkUgJxk1s{ zIJeBFx%RC(B!mCEV}Y0mH0(_4YXY9CjDqB!{jsyZ53GhYL>(VYD>fA>1gQ;8kmX)%H;x{V>cC_{c3(L zrwgzCo#Z$o>$g-Vk$|Qtw;V(0{WZwGb#+u;V9(`?({v(3b!e_$(2664vbLiS{|0UQ zJ>31DV2Y(HD0UuhjU-!~Zr!}Y@0nxryF$ePq)X=p?C-tuXsoFSV9b6NbTRYM%)K%& z_wtc)OxLN~kaorT-cp@tShHTP(9_$~y5iBU4@VN(U z?vN0`IluVFZv~N^vRiC@eTbNg?^-$efgCF1J8Q_LGw_h=p13uS6ZI;oGTZNEY;ga^ zoOZN<0}UxpoHoRi-{EfusfZw@sc!~3c=q|`XG+Lk#CzKH-`mWUhl^5(z$5=Qj!|53 z>K@m1pltTYD3JhpdT9&RSG4)ABBJwL^_O1NrlW?)UYmv;DyznPtR)jW3YSi zBypRe%A&*WG4l0~505xo$+}K^flr|=up;b6<=Iw)$7ng_-O@X2SQxXlJmgp(N#0*iIy?eTotfwQQ8CKlCJX%G!?C<9oT!7@VH!0; z_St_fm04XJ6O7yF&tT<3*x|r|hRoTNus@JaW*_iKRIWy>AKN#gTLKAbt72!b`)M^%EbWn{_ zl=tmRQMs&gb5#RG)3iRa^++WWmNQS@Z6J)~GrQ(CvQ{XMwQFZLcpk(v6T33)lp4qe(-_AiJv4a{plYlU@J7}m&%G1o&RQC zCu^Xu4GODoK7hydm&1w?nA5~8ZG_A-sdNX#y5Vxwqyfloo0rkun`x5OlMFBhI!~&f z8eQ>JHj7f;I~AnT2htGEL98+Ah~{W|dBS;UlB)=yhfFapS~jKvrJgf;%>{y6rvO7C zK7Ku1daTTjvVwf1!d#Lfp-i*{WsuwR8=SVt#uS=F2U%UsETM?``F>>~O z$Xjo&O7Ur<5@w;WV=lNl@PtyiL0*>dPTn7jTgm=xnMBpHj*zty^fH$?EklXsi&8jJ zW#tV1%#H^k00(k*20jVcrPYVH!(iyA3qaixTw=noYepI0h^#{u-+LHqX;Y~x93oAtndSI5rbxVuzta;PS0?Bo zg=#E>e^PTf_!Fqci++L;J_Es)HtYbZdCM$@GD=tqk*CJwVad|r^XR7x*T0oqCZ`$o zMnRPb1U}2nh0pau4#g@8) zJ+As2z;<=6LmjvyWK~6ANrNKoEil2_5*tHS<2FT4aD86;Vcr+mhZA$rB!#nWv7l4% z^vn9s0s^6Z5Hx%P#weB0MB@zi(xXcO9FV|~Q$+}|eUM28UGk96_Ka9T31=dhBAIzu z`hp)Kce3jbRe^&)@LK8CX8!Do>N#%~v(d02l}Th-w1;q+g}Qft#0E6awRQp@C+7)2 zxk;NvS0VqeKnHOk)NXBzE2R)3q4%$-XC!ST-%n1FIvPJ{-A|3kVIQ|)n1Pqsqf_nP zJy`4As)~w+w)C)UyA<%6iXBo5D3gyotWT=9VAxH+kE|NfrKw{aSIl6>JElMm0(d>1 zF}J@fA#cik?&XwH%KotTnZ9%3TkV0#Q!>14eXhG5>xsZ?BnV-J1DrJ*qLdHXC75%% z>)9aD_g5Yw%;s)#lF~kI;#bfN)&gw2!?nlYu&cGu66Zw(G>;4l+yxmx_w!gmOEu=KCqf=QMnlJmWrAcN6s!DS%qZq9XQy?c&FBrKaN=fy?JH14UR-NNiP3E1@SyABUF>NVj0Z!qY-_zTjZ zYmJgwpJ)%~$~0*vVo=)~O~lJQ?<2<9PaO-jzHxi!`Xz$k>4wnhJRCK!ZaG8ir@sI( z{ay6;9Q4zcb4t<_b2dmoTr(6LBg`^uC_M;Ke#utbS!f)iCpI@31AU)r!b$6^JAJFz z7WkI@0_Bqx5me#iQUk%@U2F_?NrHiGj!!tP5lq~w`$8~Gg}?-E)Y&5|B_U~N*0FNC z+;I3L7cAX@a!AG>&4Np4mxSODDqKw%+>L)l#U}VH zU8(c8#|St5kdTmE(_bp?dFjz#xCXIDE1lmQ#O%3M{`X*`UcUO>j=D@>56YJ}uT8Y=7gy zSU%bwuHFP5AyKp=J#R|&lK1EiC%*+N;V%;O5Z=?H;|ik#n$OCggnG%3-x$p zTl3u$%m9aPjGBMPSBO33uhb_HccN^mH?^Gl(T<9F!V}8-XU#h~UcgwI7cTI)S(Cy= z3+)45!`ImrPzP}Vhp9OYzp@1ARN6Bax2<#Lv7;;zuG1X>X7sI^90Nf{XJU-a^(|Mu z_65T{QSy(W@1=L#XEuNIZ=aD&%H=zBIo&bX#w<#Z*v-p1zgNDLk0c6V8UY{%jFI)2 z$AxnCWZ2?GFNWgM{YM2h`Wb%*>1n7srk{s~V)VHS6nJj);?VJb3KIsa0cF1@D8}Ue z#D!yv@SgQ7pStAi1`=e{3g#roxxU2Zk&Zx1+E5J9M$b10;q?}0K>dyNNn?dm@B=aJ zKTz~RkV2$adLRB=DfmpZtuFY>Nnk43E*(}@N{{F6gL^FYtyoMh7STWsBAvT<#KOsk4bGWPe1LG~>KY z*Z>y(5LaMwVTj`fz73@~p^R34-~`sFu^0cE!g}Jr|1ELZ2I(z@+wB zPYCkKCxCe&KFor+5PF~tl&>P!>}#a3(8i|V^Y-W)bf<%?{!XcLgy}CqN3>5t5egV= zM&~@aHf-WO(;AlMC)xIK_P^d=ad&WoGPA!1jcIatDQbX~#QOCp`v(IpzNA~|_BtH1 z{5Oh507K>9qz#nvoNnM4|*2JaK_<$Lu!;LZY??5GxLRc4gM5{WYrx z(3jD9cQPl>aV+qDY6VwYb;#S1x#@XANeWloXLr4aBz&3}{R|5eLQE3pQnsMmjcCfPlU<$g3HWMf)g$w6ik^U=J? z%kp>&EcP0!b-o@)ZX8W0F5Ek#r3pB)DamAA^hG7;M=24;-)J+oc2 zORuc8-an03hSu4LQkQ*28dzv#i7DCC-E1-Lsat`3_Yq*coUX~11V;mX#zNcfk7sgYDrQ)+gX?3I9iS}3X5Rpf5O zfgkh~wNRlhUPJzd+&leg>9w))g<@tIu-08+ow^r8mtNV+-D0 zv@?8q?I_sJd@iQ!w$iyhRmyzn4{PK7Tc-LeDj)LH3msQmJ>ZOPvO<$ze@?;-kbhZD zF|Fax9t^@Tpx(d3$0mod{aJWb?sD0w9>)az93pb4yq2uJ3G0ErA?~c4gE!|TK@_nq z&h1nDH6^pWivJULPireIj&E`a?7UM1L}%MJCd)>etf?)ktX(WqXqM+H45_g)qWHwX z{-Y?Z*=z}&x4Zx?=|C%q5}>Wp$E=Mp>zCoj*m!ZB4x4I24@PMs_vzCZr}B=Js_)$_ zOZdZSgQd3l*LaN0tY*4r)3u_H4_YY`w#{{Iqoa8>bhuM#WD7WXa0g+Ma_tx!0p}?)olyR8Hgj~($V2D=JwXJR zCCY3+2A^WiL|E+~t#;q_Ms+2&^`Rbs+0{3ft>`jv+(wO?Wa1wpTI;Wt=gzV#z1*x4{*rxTUR7b2 zs!u_TQnrJH#kF~-W+9VDzV@J9_-F&`Te4l?JNIB+G(gV?4ruca`_~Y}^*>S@v_=Sb zn|289gnr~W%{^cTM^!9CGqJr*sqLyD`~n{mSCo*%b+wf%sd;#-Lm%Fd)V|~-wWQ67 z_FD=YoH`=m*Jk@GVrG=;iYar{4`y&e8MN7;L_2mZByI3mo1PrGY{HNdM{nEL!u;l? zNZaI)%!x5{tjQ@siJFqi5n?%!yD|NrPC-9ETdQuF1B}^n+n5K6Q@KqZHGRfe0coax z2UYD{wd1^$d&Vb|@Hv{0Rq8ZohmGe(QXwpq-hGj`MyLWJ*Q&5<|J^Z(BoV&;7& zsi?jm)_Ngbcm(1Lfmt&(;PYdQvA^H)&S%b2=S-%GZSGbOOd05T>0mKMfjz#jE%IDV z!)KjL0ttdJ%&bNOo0y+VsYP|yb384WQ^mBsbZ56Iz_L&m8{{~itJq1Ty`V)I{PhZM zU940o0uQe_h0e=Q9edbn8B6X;h?h#K2FwBdlznlmXrpzyB44$jxTw4lyE*Z>$XRfO zaQkDQb|fm~%*thdevE*pf?2q#8y;W8q^cpA^P#hTwz-J>t(0`X@0a_K)TSQsh+AKE z-`@_Pw*KSS)X9C_nmS;mlyB_2BTb%B07d_V9u5^3tRD{CFPCIpBKnrS({HD*0+Cqf z(n?68PN>~{H7idQ_>s|P=Q$ubrEq&2XO+HV*`T8C+(1TbHbaE{tC{!2BViaT70bVr zQKYt&=>sG*BavxAa3_%qSISn(6C$%8K5ReE)88wuFt=2~JTcN4DzIf^w$@Eh2{bW@l>IR3aJldGn zAvM_0mLDFfC}MbMjjiXvrCz3$I&FdaF*q!xE0w(-YcI5iy}}=!V2>JP5agU%#2R|>`3VveGS8| z2kk2~W+(Fu!oTTzrhO+gn?OMzG8pL1ctkn?D=d31iqcE`frZ)cgbSj(tVm$!i)GkF zn9y{zeGP(?{Mlfjd`?N^>Bcc5j z%-&9F(>nFvso3cGy!tD)Y_S9=AJXWDjr?^8=o+JmIOFEq<0+#bgP*ODtk~{jB_%o- zFoE=uM6>;fC31^nofxFlQ$!$>qo`6~f?ZmXR|Lx^ZP=Esa~ExPwvDV{Z1D}w_&DtE z)=MbYz@=fpc&mhX0a&OzkUA+;e`;^VZ_X6`1QYW#BJ^J$G`M;_3LYCHsMyoE#uFSqiq-&Q%s$c-mz2d!U~QnE(6dV|7~Nnw-5{rC>b6|mxYwm=3`HV!Jh?utQgKMNAQW=IHiUOLptk40AL z90d=DSYFg+*Z*Rfq|(cu%-JpABLlD6ec!9V0y`hbE%o%k;AFOSwu6C2M^SAH2WOt$ zQt~C7xlw@~96GYaLis!C>vd+l52K>66oh6w9dNGhTl=MVRL1@3h90ZV9+B#BDeIgw z$825&<7I`3`knTjQfd2CSTu}MxUf)>p){SUuF%WJiMu3EzB(s^7(nV?*?0v{o_~A= z4rbH8W?` zaY{LhEmR`Y17^@re{kpG9=-d zbOaK>j}-xV)+gtI%o0fkIqgS*CHt?y=OW#5!oNFCkmB}gUDxw?=ykpAh~6wOK2Yd}v9u1vZojZSt-(~oM&s#(N){cdL8 ztxu!5WQe5gAesl}Ba`}eCNLMAilA-JT|plmVIffmCDN