diff -r 4908a492a0fb -r b4355e8c5097 src/tests/ro_data/signing_certs/produced/publisher_cas/0C.pem
--- a/src/tests/ro_data/signing_certs/produced/publisher_cas/0C.pem	Tue Feb 08 18:59:49 2011 -0800
+++ b/src/tests/ro_data/signing_certs/produced/publisher_cas/0C.pem	Tue Feb 08 23:55:15 2011 -0800
@@ -5,58 +5,61 @@
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=US, ST=California, L=Menlo Park, O=pkg5, CN=ta3/emailAddress=ta3
         Validity
-            Not Before: Aug  4 20:59:25 2010 GMT
-            Not After : Apr 30 20:59:25 2013 GMT
+            Not Before: Jan 28 02:54:13 2011 GMT
+            Not After : Oct 24 02:54:13 2013 GMT
         Subject: C=US, ST=California, L=Menlo Park, O=pkg5, CN=pubCA1_ta3/emailAddress=pubCA1_ta3
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
             RSA Public Key: (1024 bit)
                 Modulus (1024 bit):
-                    00:bd:ef:e1:5e:a1:32:ff:ee:9b:64:1a:a3:f0:e2:
-                    63:64:ab:7d:60:5e:32:60:36:f5:67:54:d0:e0:13:
-                    6e:ef:88:c1:ff:0e:64:d2:f4:cc:07:fd:18:03:90:
-                    fb:73:b7:91:c9:9e:97:b2:b0:0a:ae:9f:88:dc:29:
-                    fd:2c:19:09:43:ef:68:7c:ab:de:91:de:51:cb:e2:
-                    35:fc:96:fe:13:e9:3c:ea:97:3c:2a:ef:92:9a:31:
-                    77:e4:a2:24:40:01:6e:a0:59:ef:7e:71:d9:be:5a:
-                    3f:ed:7e:b6:d5:7b:38:6d:4c:16:f8:fd:ec:fb:6f:
-                    8c:41:fb:fd:dc:0c:54:1c:db
+                    00:dd:e0:f7:ca:f9:42:6a:e9:28:bf:8c:08:48:4c:
+                    17:fc:35:c5:2c:0c:b4:07:7c:c1:c4:05:bb:88:15:
+                    2f:25:23:db:41:b0:24:8e:54:3b:44:02:4b:8f:60:
+                    3b:13:ef:f9:7d:8d:5d:dc:34:b3:13:b9:28:5d:3c:
+                    4b:c1:76:6c:ae:ff:a3:7a:44:71:76:f9:0b:1a:cc:
+                    df:5a:37:9c:b3:12:eb:38:99:3b:85:f7:eb:13:93:
+                    34:02:4b:54:7c:52:fd:ad:58:46:70:af:7b:2d:7f:
+                    56:5a:f3:95:66:5a:52:2a:da:c3:b2:98:7b:2f:cd:
+                    44:2f:2d:24:c9:6a:29:90:fd
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                47:D6:CB:F2:38:3E:A8:40:85:4A:BE:EF:F8:85:B3:49:FF:D0:8F:16
+                C1:F8:27:0B:0D:24:82:11:16:5F:44:79:21:5A:E7:BF:F8:2E:7F:61
             X509v3 Authority Key Identifier: 
-                keyid:E0:CE:66:66:57:70:37:16:AF:EB:65:B6:15:DC:2D:2C:B7:B4:49:4D
+                keyid:DF:F1:C3:42:E4:27:21:E0:3B:1D:E0:85:47:1F:16:35:4D:58:F3:1E
                 DirName:/C=US/ST=California/L=Menlo Park/O=pkg5/CN=ta3/emailAddress=ta3
-                serial:E1:F8:52:2F:AC:F4:00:EE
+                serial:98:29:8D:38:A1:E7:D1:02
 
             X509v3 Basic Constraints: critical
                 CA:TRUE
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
     Signature Algorithm: sha256WithRSAEncryption
-        6a:25:8d:33:01:c1:a0:fe:99:5f:f0:b4:8a:39:86:55:f5:6c:
-        59:2a:84:a5:01:10:dd:1a:b6:a2:52:17:62:e1:e5:d5:8a:e9:
-        09:bd:04:95:b1:a4:b3:ec:9b:73:f3:54:12:26:97:a5:1e:52:
-        9e:bf:93:c7:4d:dd:a3:c4:ec:0b:46:3e:e4:b7:c3:47:17:68:
-        15:df:a1:1a:67:c0:8b:f6:a8:ea:ab:81:6a:fc:a3:4c:5b:0e:
-        ca:cc:b7:bf:e5:35:73:e9:95:d0:ad:8c:fc:2a:7d:2c:ee:6b:
-        09:53:2f:f3:9b:57:fa:32:bb:02:f9:10:fa:30:a2:e3:55:0c:
-        4a:73
+        17:cc:85:98:2b:c5:c8:ce:30:6a:c8:99:c8:d5:41:68:37:12:
+        e3:63:2d:47:33:b0:46:78:f7:c4:3a:cf:84:c9:5b:03:61:19:
+        40:69:7e:63:00:16:9d:15:73:39:1e:c3:e1:f6:fe:a5:88:5b:
+        86:c1:3e:9b:c4:ce:34:6b:51:a1:2b:47:6c:ae:17:c3:b4:c5:
+        b4:be:14:47:0a:a3:f3:c5:fb:bb:85:4e:31:74:28:cf:fa:9d:
+        71:e0:93:68:c9:e4:83:33:1d:80:76:2d:cf:38:5b:4d:3e:e5:
+        16:0a:13:d4:ce:31:d9:b3:7b:6d:10:7f:6a:60:39:8a:ff:f2:
+        22:a5
 -----BEGIN CERTIFICATE-----
-MIIDJTCCAo6gAwIBAgIBDDANBgkqhkiG9w0BAQsFADBoMQswCQYDVQQGEwJVUzET
+MIIDNTCCAp6gAwIBAgIBDDANBgkqhkiG9w0BAQsFADBoMQswCQYDVQQGEwJVUzET
 MBEGA1UECBMKQ2FsaWZvcm5pYTETMBEGA1UEBxMKTWVubG8gUGFyazENMAsGA1UE
-ChMEcGtnNTEMMAoGA1UEAxMDdGEzMRIwEAYJKoZIhvcNAQkBFgN0YTMwHhcNMTAw
-ODA0MjA1OTI1WhcNMTMwNDMwMjA1OTI1WjB2MQswCQYDVQQGEwJVUzETMBEGA1UE
+ChMEcGtnNTEMMAoGA1UEAxMDdGEzMRIwEAYJKoZIhvcNAQkBFgN0YTMwHhcNMTEw
+MTI4MDI1NDEzWhcNMTMxMDI0MDI1NDEzWjB2MQswCQYDVQQGEwJVUzETMBEGA1UE
 CBMKQ2FsaWZvcm5pYTETMBEGA1UEBxMKTWVubG8gUGFyazENMAsGA1UEChMEcGtn
 NTETMBEGA1UEAxQKcHViQ0ExX3RhMzEZMBcGCSqGSIb3DQEJARYKcHViQ0ExX3Rh
-MzCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAve/hXqEy/+6bZBqj8OJjZKt9
-YF4yYDb1Z1TQ4BNu74jB/w5k0vTMB/0YA5D7c7eRyZ6XsrAKrp+I3Cn9LBkJQ+9o
-fKvekd5Ry+I1/Jb+E+k86pc8Ku+SmjF35KIkQAFuoFnvfnHZvlo/7X621Xs4bUwW
-+P3s+2+MQfv93AxUHNsCAwEAAaOB0DCBzTAdBgNVHQ4EFgQUR9bL8jg+qECFSr7v
-+IWzSf/QjxYwgZoGA1UdIwSBkjCBj4AU4M5mZldwNxav62W2FdwtLLe0SU2hbKRq
+MzCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA3eD3yvlCaukov4wISEwX/DXF
+LAy0B3zBxAW7iBUvJSPbQbAkjlQ7RAJLj2A7E+/5fY1d3DSzE7koXTxLwXZsrv+j
+ekRxdvkLGszfWjecsxLrOJk7hffrE5M0AktUfFL9rVhGcK97LX9WWvOVZlpSKtrD
+sph7L81ELy0kyWopkP0CAwEAAaOB4DCB3TAdBgNVHQ4EFgQUwfgnCw0kghEWX0R5
+IVrnv/guf2EwgZoGA1UdIwSBkjCBj4AU3/HDQuQnIeA7HeCFRx8WNU1Y8x6hbKRq
 MGgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRMwEQYDVQQHEwpN
 ZW5sbyBQYXJrMQ0wCwYDVQQKEwRwa2c1MQwwCgYDVQQDEwN0YTMxEjAQBgkqhkiG
-9w0BCQEWA3RhM4IJAOH4Ui+s9ADuMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcN
-AQELBQADgYEAaiWNMwHBoP6ZX/C0ijmGVfVsWSqEpQEQ3Rq2olIXYuHl1YrpCb0E
-lbGks+ybc/NUEiaXpR5Snr+Tx03do8TsC0Y+5LfDRxdoFd+hGmfAi/ao6quBavyj
-TFsOysy3v+U1c+mV0K2M/Cp9LO5rCVMv85tX+jK7AvkQ+jCi41UMSnM=
+9w0BCQEWA3RhM4IJAJgpjTih59ECMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/
+BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4GBABfMhZgrxcjOMGrImcjVQWg3EuNjLUcz
+sEZ498Q6z4TJWwNhGUBpfmMAFp0Vczkew+H2/qWIW4bBPpvEzjRrUaErR2yuF8O0
+xbS+FEcKo/PF+7uFTjF0KM/6nXHgk2jJ5IMzHYB2Lc84W00+5RYKE9TOMdmze20Q
+f2pgOYr/8iKl
 -----END CERTIFICATE-----