diff -r f727edff50bd -r 52e8eec3014c src/tests/ro_data/signing_certs/produced/code_signing_certs/15.pem
--- a/src/tests/ro_data/signing_certs/produced/code_signing_certs/15.pem	Tue Mar 08 11:12:06 2016 -0800
+++ b/src/tests/ro_data/signing_certs/produced/code_signing_certs/15.pem	Wed Mar 09 11:27:23 2016 -0800
@@ -5,50 +5,60 @@
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=US, ST=California, L=Santa Clara, O=pkg5, CN=ch1_ta3/emailAddress=ch1_ta3
         Validity
-            Not Before: Dec 13 00:13:36 2013 GMT
-            Not After : Sep  8 00:13:36 2016 GMT
+            Not Before: Jan 22 01:57:56 2016 GMT
+            Not After : Oct 18 01:57:56 2018 GMT
         Subject: C=US, ST=California, L=Santa Clara, O=pkg5, CN=cs5_ch1_ta3/emailAddress=cs5_ch1_ta3
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (1024 bit)
                 Modulus:
-                    00:ea:23:95:11:2c:b5:2d:49:c5:10:77:74:82:98:
-                    da:5f:58:1f:2b:40:6e:1b:2e:d8:4f:30:07:6b:a2:
-                    ae:9f:f7:ed:8d:2d:b4:b3:68:48:ec:60:72:a2:fb:
-                    8b:7e:62:11:90:79:96:f9:ee:82:78:3f:09:22:2b:
-                    03:45:af:9e:ca:7e:3c:80:4f:ad:59:77:85:c5:e7:
-                    6b:4a:0b:a2:6b:4b:c5:e7:f9:38:81:64:05:ea:cd:
-                    76:9c:bf:eb:51:aa:29:6c:c1:3e:98:c6:ac:49:a2:
-                    ac:32:60:78:d8:ff:c6:79:f8:a5:a6:78:61:24:9a:
-                    27:26:2e:06:3a:19:8e:54:d1
+                    00:c0:4c:5c:3b:f3:4a:42:2d:01:68:35:9a:dc:c3:
+                    80:08:fc:20:ff:f0:30:e6:53:52:79:45:ca:61:1f:
+                    82:1a:f7:98:1b:2a:8a:c5:58:ca:9c:23:ac:ee:71:
+                    b7:07:6a:f4:dc:b2:57:42:86:fc:eb:84:cd:73:b4:
+                    85:27:46:c4:92:09:2c:08:9b:5c:98:93:7f:4c:32:
+                    5d:f2:76:37:b5:e3:5b:48:d2:1e:c1:49:84:fb:ff:
+                    76:01:55:b9:f4:9c:17:b9:53:9c:b2:b1:10:1a:e6:
+                    06:c6:55:c8:ad:be:3a:a4:ff:8e:1a:24:f1:af:05:
+                    a9:a8:d7:0b:5a:e8:b5:c7:17
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
                 CA:FALSE
             X509v3 Key Usage: 
-                Encipher Only
+                Key Agreement
     Signature Algorithm: sha256WithRSAEncryption
-         80:7c:f9:bc:bd:15:b1:9d:75:d1:82:b5:42:79:d3:5e:2c:e3:
-         c4:73:ed:3b:3c:8a:83:9c:51:e9:1f:93:75:1f:81:01:11:f9:
-         fd:a8:56:0f:cf:d3:a9:38:26:e3:f0:78:79:75:ef:97:7b:01:
-         0b:b7:37:65:6c:93:76:07:ec:fa:f5:1e:2d:6a:3b:6d:15:fc:
-         41:6f:fb:17:52:be:cc:a8:95:da:be:3b:6d:d8:5d:42:10:aa:
-         20:9e:8e:c5:33:ed:7b:8a:f1:e5:e3:45:21:05:2e:77:3b:c9:
-         66:46:25:37:e4:5c:b0:f5:29:0a:be:0d:bc:c8:e9:d8:fc:31:
-         22:e3
+         a2:d5:c8:a3:3d:5c:8f:03:3e:7d:e3:a1:f9:2b:ad:2a:f2:08:
+         6d:71:da:65:00:87:b1:b5:b9:9e:04:28:0d:fb:1f:ac:89:5a:
+         90:67:d1:3e:5e:bb:e1:19:5a:63:30:50:19:3a:6c:d6:18:9a:
+         0a:a0:b3:59:66:4a:28:5e:ea:02:3c:b3:4f:3b:46:67:94:ab:
+         dc:72:22:47:d0:52:af:6c:ef:fc:66:4f:63:5d:18:28:34:f7:
+         35:bd:ba:d5:66:b1:fc:32:7b:3a:4b:cc:4c:87:fb:87:16:c2:
+         90:18:6f:a8:b5:af:72:98:03:fe:92:e3:83:10:8f:f8:74:49:
+         80:1d:fb:16:49:3f:f6:86:41:6b:84:68:84:8c:e7:15:b4:c2:
+         12:c8:ea:dc:92:71:35:05:c7:5e:e1:ea:3f:a9:a2:13:bf:bd:
+         2b:c6:dc:cb:78:c0:e4:19:4a:4a:26:7d:5c:18:3b:2e:19:72:
+         94:11:d7:35:52:01:72:48:b4:f1:35:b3:ec:99:28:75:70:a8:
+         39:77:f4:8f:b6:40:ab:19:ea:e0:ad:fb:2d:52:f2:95:0b:38:
+         46:10:6c:50:01:88:bb:36:e9:db:92:16:21:14:f6:e3:ae:4b:
+         d8:d4:7e:2f:90:ad:a7:b5:36:fc:7c:3b:4a:cd:ca:b0:5d:25:
+         ba:68:7c:bd
 -----BEGIN CERTIFICATE-----
-MIICfTCCAeagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBxMQswCQYDVQQGEwJVUzET
+MIIC/jCCAeagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBxMQswCQYDVQQGEwJVUzET
 MBEGA1UECAwKQ2FsaWZvcm5pYTEUMBIGA1UEBwwLU2FudGEgQ2xhcmExDTALBgNV
 BAoMBHBrZzUxEDAOBgNVBAMMB2NoMV90YTMxFjAUBgkqhkiG9w0BCQEWB2NoMV90
-YTMwHhcNMTMxMjEzMDAxMzM2WhcNMTYwOTA4MDAxMzM2WjB5MQswCQYDVQQGEwJV
+YTMwHhcNMTYwMTIyMDE1NzU2WhcNMTgxMDE4MDE1NzU2WjB5MQswCQYDVQQGEwJV
 UzETMBEGA1UECAwKQ2FsaWZvcm5pYTEUMBIGA1UEBwwLU2FudGEgQ2xhcmExDTAL
 BgNVBAoMBHBrZzUxFDASBgNVBAMMC2NzNV9jaDFfdGEzMRowGAYJKoZIhvcNAQkB
-FgtjczVfY2gxX3RhMzCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA6iOVESy1
-LUnFEHd0gpjaX1gfK0BuGy7YTzAHa6Kun/ftjS20s2hI7GByovuLfmIRkHmW+e6C
-eD8JIisDRa+eyn48gE+tWXeFxedrSguia0vF5/k4gWQF6s12nL/rUaopbME+mMas
-SaKsMmB42P/GefilpnhhJJonJi4GOhmOVNECAwEAAaMdMBswDAYDVR0TAQH/BAIw
-ADALBgNVHQ8EBAMCAAEwDQYJKoZIhvcNAQELBQADgYEAgHz5vL0VsZ110YK1QnnT
-XizjxHPtOzyKg5xR6R+TdR+BARH5/ahWD8/TqTgm4/B4eXXvl3sBC7c3ZWyTdgfs
-+vUeLWo7bRX8QW/7F1K+zKiV2r47bdhdQhCqIJ6OxTPte4rx5eNFIQUudzvJZkYl
-N+RcsPUpCr4NvMjp2PwxIuM=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 -----END CERTIFICATE-----