Cannot skip peer verification on TLS/SSL connections
mrnovalles opened this issue · comments
When trying to connect to an ssl enabled ElasticCache Redis instance, I am getting an error trying to verify the peer certificate. This could be skipped by using the .withVerifyPeer(false) lettuce.io option.
Would it be possible to add that option?
Here's an output of running riot-redis info with debugging enabled
ubuntu@ec2-host:~/riot-redis-2.2.5/bin$ ./riot-redis --debug -h REDACTED.euw1.cache.amazonaws.com -p 6379 -t info
12:54:31.338 FINE io.netty.util.internal.InternalThreadLocalMap : -Dio.netty.threadLocalMap.stringBuilder.initialSize: 1024
12:54:31.350 FINE io.netty.util.internal.InternalThreadLocalMap : -Dio.netty.threadLocalMap.stringBuilder.maxSize: 4096
12:54:31.413 FINE io.lettuce.core.resource.DefaultClientResources : -Dio.netty.eventLoopThreads: 2
12:54:31.434 FINE io.lettuce.core.resource.DefaultEventLoopGroupProvider : Creating executor io.netty.util.concurrent.DefaultEventExecutorGroup
12:54:31.497 FINE io.netty.util.ResourceLeakDetector : -Dio.netty.leakDetection.level: simple
12:54:31.498 FINE io.netty.util.ResourceLeakDetector : -Dio.netty.leakDetection.targetRecords: 4
12:54:31.501 FINE io.netty.util.ResourceLeakDetectorFactory : Loaded default ResourceLeakDetector: io.netty.util.ResourceLeakDetector@157632c9
12:54:31.534 FINE io.netty.util.internal.PlatformDependent0 : -Dio.netty.noUnsafe: false
12:54:31.535 FINE io.netty.util.internal.PlatformDependent0 : Java version: 11
12:54:31.544 FINE io.netty.util.internal.PlatformDependent0 : sun.misc.Unsafe.theUnsafe: available
12:54:31.545 FINE io.netty.util.internal.PlatformDependent0 : sun.misc.Unsafe.copyMemory: available
12:54:31.547 FINE io.netty.util.internal.PlatformDependent0 : java.nio.Buffer.address: available
12:54:31.547 FINE io.netty.util.internal.PlatformDependent0 : direct buffer constructor: unavailable
java.lang.UnsupportedOperationException: Reflective setAccessible(true) disabled
at io.netty.util.internal.ReflectionUtil.trySetAccessible(ReflectionUtil.java:31)
at io.netty.util.internal.PlatformDependent0$4.run(PlatformDependent0.java:238)
at java.base/java.security.AccessController.doPrivileged(Native Method)
at io.netty.util.internal.PlatformDependent0.<clinit>(PlatformDependent0.java:232)
at io.netty.util.internal.PlatformDependent.isAndroid(PlatformDependent.java:289)
at io.netty.util.internal.PlatformDependent.<clinit>(PlatformDependent.java:92)
at io.netty.util.HashedWheelTimer.<init>(HashedWheelTimer.java:109)
at io.netty.util.HashedWheelTimer.<init>(HashedWheelTimer.java:218)
at io.netty.util.HashedWheelTimer.<init>(HashedWheelTimer.java:197)
at io.netty.util.HashedWheelTimer.<init>(HashedWheelTimer.java:179)
at io.netty.util.HashedWheelTimer.<init>(HashedWheelTimer.java:163)
at io.lettuce.core.resource.DefaultClientResources.<init>(DefaultClientResources.java:178)
at io.lettuce.core.resource.DefaultClientResources$Builder.build(DefaultClientResources.java:563)
at io.lettuce.core.resource.DefaultClientResources.create(DefaultClientResources.java:243)
at io.lettuce.core.AbstractRedisClient.<init>(AbstractRedisClient.java:102)
at io.lettuce.core.RedisClient.<init>(RedisClient.java:94)
at io.lettuce.core.RedisClient.create(RedisClient.java:131)
at org.springframework.batch.item.redis.support.RedisConnectionBuilder.client(RedisConnectionBuilder.java:107)
at org.springframework.batch.item.redis.support.RedisConnectionBuilder.client(RedisConnectionBuilder.java:90)
at org.springframework.batch.item.redis.support.RedisConnectionBuilder.connection(RedisConnectionBuilder.java:79)
at com.redislabs.riot.RiotApp.connection(RiotApp.java:133)
at com.redislabs.riot.redis.AbstractRedisCommand.run(AbstractRedisCommand.java:19)
at picocli.CommandLine.executeUserObject(CommandLine.java:1919)
at picocli.CommandLine.access$1200(CommandLine.java:145)
at picocli.CommandLine$RunLast.executeUserObjectOfLastSubcommandWithSameParent(CommandLine.java:2332)
at picocli.CommandLine$RunLast.handle(CommandLine.java:2326)
at picocli.CommandLine$RunLast.handle(CommandLine.java:2291)
at picocli.CommandLine$AbstractParseResultHandler.execute(CommandLine.java:2159)
at com.redislabs.riot.RiotApp.execute(RiotApp.java:82)
at com.redislabs.riot.redis.RiotRedis.main(RiotRedis.java:11)
12:54:31.557 FINE io.netty.util.internal.PlatformDependent0 : java.nio.Bits.unaligned: available, true
12:54:31.559 FINE io.netty.util.internal.PlatformDependent0 : jdk.internal.misc.Unsafe.allocateUninitializedArray(int): unavailable
java.lang.IllegalAccessException: class io.netty.util.internal.PlatformDependent0$6 cannot access class jdk.internal.misc.Unsafe (in module java.base) because module java.base does not export jdk.internal.misc to unnamed module @4f638935
at java.base/jdk.internal.reflect.Reflection.newIllegalAccessException(Reflection.java:361)
at java.base/java.lang.reflect.AccessibleObject.checkAccess(AccessibleObject.java:591)
at java.base/java.lang.reflect.Method.invoke(Method.java:558)
at io.netty.util.internal.PlatformDependent0$6.run(PlatformDependent0.java:352)
at java.base/java.security.AccessController.doPrivileged(Native Method)
at io.netty.util.internal.PlatformDependent0.<clinit>(PlatformDependent0.java:343)
at io.netty.util.internal.PlatformDependent.isAndroid(PlatformDependent.java:289)
at io.netty.util.internal.PlatformDependent.<clinit>(PlatformDependent.java:92)
at io.netty.util.HashedWheelTimer.<init>(HashedWheelTimer.java:109)
at io.netty.util.HashedWheelTimer.<init>(HashedWheelTimer.java:218)
at io.netty.util.HashedWheelTimer.<init>(HashedWheelTimer.java:197)
at io.netty.util.HashedWheelTimer.<init>(HashedWheelTimer.java:179)
at io.netty.util.HashedWheelTimer.<init>(HashedWheelTimer.java:163)
at io.lettuce.core.resource.DefaultClientResources.<init>(DefaultClientResources.java:178)
at io.lettuce.core.resource.DefaultClientResources$Builder.build(DefaultClientResources.java:563)
at io.lettuce.core.resource.DefaultClientResources.create(DefaultClientResources.java:243)
at io.lettuce.core.AbstractRedisClient.<init>(AbstractRedisClient.java:102)
at io.lettuce.core.RedisClient.<init>(RedisClient.java:94)
at io.lettuce.core.RedisClient.create(RedisClient.java:131)
at org.springframework.batch.item.redis.support.RedisConnectionBuilder.client(RedisConnectionBuilder.java:107)
at org.springframework.batch.item.redis.support.RedisConnectionBuilder.client(RedisConnectionBuilder.java:90)
at org.springframework.batch.item.redis.support.RedisConnectionBuilder.connection(RedisConnectionBuilder.java:79)
at com.redislabs.riot.RiotApp.connection(RiotApp.java:133)
at com.redislabs.riot.redis.AbstractRedisCommand.run(AbstractRedisCommand.java:19)
at picocli.CommandLine.executeUserObject(CommandLine.java:1919)
at picocli.CommandLine.access$1200(CommandLine.java:145)
at picocli.CommandLine$RunLast.executeUserObjectOfLastSubcommandWithSameParent(CommandLine.java:2332)
at picocli.CommandLine$RunLast.handle(CommandLine.java:2326)
at picocli.CommandLine$RunLast.handle(CommandLine.java:2291)
at picocli.CommandLine$AbstractParseResultHandler.execute(CommandLine.java:2159)
at com.redislabs.riot.RiotApp.execute(RiotApp.java:82)
at com.redislabs.riot.redis.RiotRedis.main(RiotRedis.java:11)
12:54:31.562 FINE io.netty.util.internal.PlatformDependent0 : java.nio.DirectByteBuffer.<init>(long, int): unavailable
12:54:31.563 FINE io.netty.util.internal.PlatformDependent : sun.misc.Unsafe: available
12:54:31.598 FINE io.netty.util.internal.PlatformDependent : maxDirectMemory: 504823808 bytes (maybe)
12:54:31.599 FINE io.netty.util.internal.PlatformDependent : -Dio.netty.tmpdir: /tmp (java.io.tmpdir)
12:54:31.599 FINE io.netty.util.internal.PlatformDependent : -Dio.netty.bitMode: 64 (sun.arch.data.model)
12:54:31.601 FINE io.netty.util.internal.PlatformDependent : -Dio.netty.maxDirectMemory: -1 bytes
12:54:31.601 FINE io.netty.util.internal.PlatformDependent : -Dio.netty.uninitializedArrayAllocationThreshold: -1
12:54:31.602 FINE io.netty.util.internal.CleanerJava9 : java.nio.ByteBuffer.cleaner(): available
12:54:31.603 FINE io.netty.util.internal.PlatformDependent : -Dio.netty.noPreferDirect: false
12:54:31.618 FINE io.netty.util.internal.PlatformDependent : org.jctools-core.MpscChunkedArrayQueue: available
12:54:31.634 FINE reactor.util.Loggers$LoggerFactory : Using Slf4j logging framework
12:54:31.761 FINE io.lettuce.core.RedisClient : Trying to get a Redis connection for: rediss://REDACTED.euw1.cache.amazonaws.com:6379?clientName=riot
12:54:32.229 FINE io.netty.buffer.PooledByteBufAllocator : -Dio.netty.allocator.numHeapArenas: 2
12:54:32.229 FINE io.netty.buffer.PooledByteBufAllocator : -Dio.netty.allocator.numDirectArenas: 2
12:54:32.230 FINE io.netty.buffer.PooledByteBufAllocator : -Dio.netty.allocator.pageSize: 8192
12:54:32.230 FINE io.netty.buffer.PooledByteBufAllocator : -Dio.netty.allocator.maxOrder: 11
12:54:32.230 FINE io.netty.buffer.PooledByteBufAllocator : -Dio.netty.allocator.chunkSize: 16777216
12:54:32.231 FINE io.netty.buffer.PooledByteBufAllocator : -Dio.netty.allocator.smallCacheSize: 256
12:54:32.232 FINE io.netty.buffer.PooledByteBufAllocator : -Dio.netty.allocator.normalCacheSize: 64
12:54:32.232 FINE io.netty.buffer.PooledByteBufAllocator : -Dio.netty.allocator.maxCachedBufferCapacity: 32768
12:54:32.233 FINE io.netty.buffer.PooledByteBufAllocator : -Dio.netty.allocator.cacheTrimInterval: 8192
12:54:32.233 FINE io.netty.buffer.PooledByteBufAllocator : -Dio.netty.allocator.cacheTrimIntervalMillis: 0
12:54:32.234 FINE io.netty.buffer.PooledByteBufAllocator : -Dio.netty.allocator.useCacheForAllThreads: true
12:54:32.234 FINE io.netty.buffer.PooledByteBufAllocator : -Dio.netty.allocator.maxCachedByteBuffersPerChunk: 1023
12:54:32.242 FINE io.netty.buffer.ByteBufUtil : -Dio.netty.allocator.type: pooled
12:54:32.242 FINE io.netty.buffer.ByteBufUtil : -Dio.netty.threadLocalDirectBufferSize: 0
12:54:32.243 FINE io.netty.buffer.ByteBufUtil : -Dio.netty.maxThreadLocalCharBufferSize: 16384
12:54:32.245 FINE io.lettuce.core.resource.KqueueProvider : Starting without optional kqueue library
12:54:32.246 FINE io.lettuce.core.resource.EpollProvider : Starting without optional epoll library
12:54:32.247 FINE io.lettuce.core.resource.DefaultEventLoopGroupProvider : Allocating executor io.netty.channel.nio.NioEventLoopGroup
12:54:32.248 FINE io.lettuce.core.resource.DefaultEventLoopGroupProvider : Creating executor io.netty.channel.nio.NioEventLoopGroup
12:54:32.251 FINE io.netty.channel.MultithreadEventLoopGroup : -Dio.netty.eventLoopThreads: 2
12:54:32.262 FINE io.netty.channel.nio.NioEventLoop : -Dio.netty.noKeySetOptimization: false
12:54:32.262 FINE io.netty.channel.nio.NioEventLoop : -Dio.netty.selectorAutoRebuildThreshold: 512
12:54:32.272 FINE io.lettuce.core.resource.DefaultEventLoopGroupProvider : Adding reference to io.netty.channel.nio.NioEventLoopGroup@30bce90b, existing ref count 0
12:54:32.296 FINE io.lettuce.core.RedisClient : Resolved SocketAddress REDACTED.euw1.cache.amazonaws.com:6379 using rediss://REDACTED.euw1.cache.amazonaws.com:6379?clientName=riot
12:54:32.300 FINE io.lettuce.core.AbstractRedisClient : Connecting to Redis at REDACTED.euw1.cache.amazonaws.com:6379
12:54:32.365 FINE io.netty.channel.DefaultChannelId : -Dio.netty.processId: 26020 (auto-detected)
12:54:32.373 FINE io.netty.util.NetUtil : -Djava.net.preferIPv4Stack: false
12:54:32.374 FINE io.netty.util.NetUtil : -Djava.net.preferIPv6Addresses: false
12:54:32.375 FINE io.netty.util.NetUtil : Loopback interface: lo (lo, 0:0:0:0:0:0:0:1%lo)
12:54:32.376 FINE io.netty.util.NetUtil : /proc/sys/net/core/somaxconn: 4096
12:54:32.377 FINE io.netty.channel.DefaultChannelId : -Dio.netty.machineId: 06:67:6f:ff:fe:c8:7f:a3 (auto-detected)
12:54:32.655 FINE jdk.event.security : X509Certificate: Alg:SHA384withECDSA, Serial:7497258ac73f7a54, Subject:CN=AffirmTrust Premium ECC, O=AffirmTrust, C=US, Issuer:CN=AffirmTrust Premium ECC, O=AffirmTrust, C=US, Key type:EC, Length:384, Cert Id:-2080363786, Valid from:1/29/10, 2:20 PM, Valid until:12/31/40, 2:20 PM
12:54:32.729 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:23456, Subject:CN=GeoTrust Global CA, O=GeoTrust Inc., C=US, Issuer:CN=GeoTrust Global CA, O=GeoTrust Inc., C=US, Key type:RSA, Length:2048, Cert Id:-2028617374, Valid from:5/21/02, 4:00 AM, Valid until:5/21/22, 4:00 AM
12:54:32.738 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:bb401c43f55e4fb0, Subject:CN=SwissSign Gold CA - G2, O=SwissSign AG, C=CH, Issuer:CN=SwissSign Gold CA - G2, O=SwissSign AG, C=CH, Key type:RSA, Length:4096, Cert Id:1516221943, Valid from:10/25/06, 8:30 AM, Valid until:10/25/36, 8:30 AM
12:54:32.742 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:5ec3b7a6437fa4e0, Subject:C=ES, O=ACCV, OU=PKIACCV, CN=ACCVRAIZ1, Issuer:C=ES, O=ACCV, OU=PKIACCV, CN=ACCVRAIZ1, Key type:RSA, Length:4096, Cert Id:-592111236, Valid from:5/5/11, 9:37 AM, Valid until:12/31/30, 9:37 AM
12:54:32.749 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:25a1dfca33cb5902, Subject:CN=TrustCor RootCert CA-2, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA, Issuer:CN=TrustCor RootCert CA-2, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA, Key type:RSA, Length:4096, Cert Id:1646661199, Valid from:2/4/16, 12:32 PM, Valid until:12/31/34, 5:26 PM
12:54:32.755 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:344ed55720d5edec49f42fce37db2b6d, Subject:CN=thawte Primary Root CA, OU="(c) 2006 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US, Issuer:CN=thawte Primary Root CA, OU="(c) 2006 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US, Key type:RSA, Length:2048, Cert Id:643000026, Valid from:11/17/06, 12:00 AM, Valid until:7/16/36, 11:59 PM
12:54:32.761 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:76b1205274f0858746b3f8231af6c2c0, Subject:CN=OISTE WISeKey Global Root GB CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH, Issuer:CN=OISTE WISeKey Global Root GB CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH, Key type:RSA, Length:2048, Cert Id:-613481516, Valid from:12/1/14, 3:00 PM, Valid until:12/1/39, 3:10 PM
12:54:32.763 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:57cb336fc25c16e6471617e3903168e0, Subject:CN=Network Solutions Certificate Authority, O=Network Solutions L.L.C., C=US, Issuer:CN=Network Solutions Certificate Authority, O=Network Solutions L.L.C., C=US, Key type:RSA, Length:2048, Cert Id:1751576863, Valid from:12/1/06, 12:00 AM, Valid until:12/31/29, 11:59 PM
12:54:32.768 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:3863def8, Subject:CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net, Issuer:CN=Entrust.net Certification Authority (2048), OU=(c) 1999 Entrust.net Limited, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), O=Entrust.net, Key type:RSA, Length:2048, Cert Id:-328536082, Valid from:12/24/99, 5:50 PM, Valid until:7/24/29, 2:15 PM
12:54:32.771 FINE jdk.event.security : X509Certificate: Alg:SHA256withECDSA, Serial:66c9fd5749736663f3b0b9ad9e89e7603f24a, Subject:CN=Amazon Root CA 3, O=Amazon, C=US, Issuer:CN=Amazon Root CA 3, O=Amazon, C=US, Key type:EC, Length:256, Cert Id:-1562287523, Valid from:5/26/15, 12:00 AM, Valid until:5/26/40, 12:00 AM
12:54:32.775 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:84822c5f1c62d040, Subject:CN=TrustCor ECA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA, Issuer:CN=TrustCor ECA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA, Key type:RSA, Length:2048, Cert Id:1382581529, Valid from:2/4/16, 12:32 PM, Valid until:12/31/29, 5:28 PM
12:54:32.780 FINE jdk.event.security : X509Certificate: Alg:SHA384withRSA, Serial:45e6bb038333c3856548e6ff4551, Subject:CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R6, Issuer:CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R6, Key type:RSA, Length:4096, Cert Id:-506627753, Valid from:12/10/14, 12:00 AM, Valid until:12/10/34, 12:00 AM
12:54:32.787 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:a0142800000014523c844b500000002, Subject:CN=IdenTrust Commercial Root CA 1, O=IdenTrust, C=US, Issuer:CN=IdenTrust Commercial Root CA 1, O=IdenTrust, C=US, Key type:RSA, Length:4096, Cert Id:1232565210, Valid from:1/16/14, 6:12 PM, Valid until:1/16/34, 6:12 PM
12:54:32.790 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:cf08e5c0816a5ad427ff0eb271859d0, Subject:CN=SecureTrust CA, O=SecureTrust Corporation, C=US, Issuer:CN=SecureTrust CA, O=SecureTrust Corporation, C=US, Key type:RSA, Length:2048, Cert Id:2034155325, Valid from:11/7/06, 7:31 PM, Valid until:12/31/29, 7:40 PM
12:54:32.793 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:18dad19e267de8bb4a2158cdcc6b3b4a, Subject:CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US, Issuer:CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US, Key type:RSA, Length:2048, Cert Id:303010488, Valid from:11/8/06, 12:00 AM, Valid until:7/16/36, 11:59 PM
12:54:32.801 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:83be056904246b1a1756ac95991c74a, Subject:CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US, Issuer:CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US, Key type:RSA, Length:2048, Cert Id:1341898239, Valid from:11/10/06, 12:00 AM, Valid until:11/10/31, 12:00 AM
12:54:32.804 FINE jdk.event.security : X509Certificate: Alg:SHA384withECDSA, Serial:35fc265cd9844fc93d263d579baed756, Subject:CN=thawte Primary Root CA - G2, OU="(c) 2007 thawte, Inc. - For authorized use only", O="thawte, Inc.", C=US, Issuer:CN=thawte Primary Root CA - G2, OU="(c) 2007 thawte, Inc. - For authorized use only", O="thawte, Inc.", C=US, Key type:EC, Length:384, Cert Id:2068083090, Valid from:11/5/07, 12:00 AM, Valid until:1/18/38, 11:59 PM
12:54:32.810 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:7777062726a9b17c, Subject:CN=AffirmTrust Commercial, O=AffirmTrust, C=US, Issuer:CN=AffirmTrust Commercial, O=AffirmTrust, C=US, Key type:RSA, Length:2048, Cert Id:630485644, Valid from:1/29/10, 2:06 PM, Valid until:12/31/30, 2:06 PM
12:54:32.813 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:a7ea6df4b449eda6a24859ee6b815d3167fbbb1, Subject:CN=LuxTrust Global Root 2, O=LuxTrust S.A., C=LU, Issuer:CN=LuxTrust Global Root 2, O=LuxTrust S.A., C=LU, Key type:RSA, Length:4096, Cert Id:-1239330694, Valid from:3/5/15, 1:21 PM, Valid until:3/5/35, 1:21 PM
12:54:32.816 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:50946cec18ead59c4dd597ef758fa0ad, Subject:CN=XRamp Global Certification Authority, O=XRamp Security Services Inc, OU=www.xrampsecurity.com, C=US, Issuer:CN=XRamp Global Certification Authority, O=XRamp Security Services Inc, OU=www.xrampsecurity.com, C=US, Key type:RSA, Length:2048, Cert Id:-952474086, Valid from:11/1/04, 5:14 PM, Valid until:1/1/35, 5:37 AM
12:54:32.821 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:15ac6e9419b2794b41f627a9c3180f1f, Subject:CN=GeoTrust Primary Certification Authority - G3, OU=(c) 2008 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US, Issuer:CN=GeoTrust Primary Certification Authority - G3, OU=(c) 2008 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US, Key type:RSA, Length:2048, Cert Id:-1330153758, Valid from:4/2/08, 12:00 AM, Valid until:12/1/37, 11:59 PM
12:54:32.824 FINE jdk.event.security : X509Certificate: Alg:SHA256withECDSA, Serial:75e6dfcbc1685ba8, Subject:CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US, Issuer:CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US, Key type:EC, Length:384, Cert Id:-1368293613, Valid from:2/12/16, 6:14 PM, Valid until:2/12/41, 6:14 PM
12:54:32.831 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:92b888dbb08ac163, Subject:CN=CA Disig Root R2, O=Disig a.s., L=Bratislava, C=SK, Issuer:CN=CA Disig Root R2, O=Disig a.s., L=Bratislava, C=SK, Key type:RSA, Length:4096, Cert Id:747175721, Valid from:7/19/12, 9:15 AM, Valid until:7/19/42, 9:15 AM
12:54:32.834 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:5c6, Subject:CN=QuoVadis Root CA 3, O=QuoVadis Limited, C=BM, Issuer:CN=QuoVadis Root CA 3, O=QuoVadis Limited, C=BM, Key type:RSA, Length:4096, Cert Id:1470392860, Valid from:11/24/06, 7:11 PM, Valid until:11/24/31, 7:06 PM
12:54:32.835 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:0, Subject:OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US, Issuer:OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US, Key type:RSA, Length:2048, Cert Id:1825617644, Valid from:6/29/04, 5:39 PM, Valid until:6/29/34, 5:39 PM
12:54:32.844 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:da9bec71f303b019, Subject:CN=TrustCor RootCert CA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA, Issuer:CN=TrustCor RootCert CA-1, OU=TrustCor Certificate Authority, O=TrustCor Systems S. de R.L., L=Panama City, ST=Panama, C=PA, Key type:RSA, Length:2048, Cert Id:1332877130, Valid from:2/4/16, 12:32 PM, Valid until:12/31/29, 5:23 PM
12:54:32.845 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:0, Subject:CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US, Issuer:CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US, Key type:RSA, Length:2048, Cert Id:1964785574, Valid from:9/1/09, 12:00 AM, Valid until:12/31/37, 11:59 PM
12:54:32.857 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:456b5054, Subject:CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US, Issuer:CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US, Key type:RSA, Length:2048, Cert Id:-1261404096, Valid from:11/27/06, 8:23 PM, Valid until:11/27/26, 8:53 PM
12:54:32.860 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:1f9d595ad72fc20644a5800869e35ef6, Subject:O=Government Root Certification Authority, C=TW, Issuer:O=Government Root Certification Authority, C=TW, Key type:RSA, Length:4096, Cert Id:-1181289790, Valid from:12/5/02, 1:23 PM, Valid until:12/5/32, 1:23 PM
12:54:32.861 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:5c33cb622c5fb332, Subject:C=DE, O=Atos, CN=Atos TrustedRoot 2011, Issuer:C=DE, O=Atos, CN=Atos TrustedRoot 2011, Key type:RSA, Length:2048, Cert Id:-28528624, Valid from:7/7/11, 2:58 PM, Valid until:12/31/30, 11:59 PM
12:54:32.868 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:44afb080d6a327ba893039862ef8406b, Subject:CN=DST Root CA X3, O=Digital Signature Trust Co., Issuer:CN=DST Root CA X3, O=Digital Signature Trust Co., Key type:RSA, Length:2048, Cert Id:1007302312, Valid from:9/30/00, 9:12 PM, Valid until:9/30/21, 2:01 PM
12:54:32.871 FINE jdk.event.security : X509Certificate: Alg:SHA384withRSA, Serial:66c9fd29635869f0a0fe58678f85b26bb8a37, Subject:CN=Amazon Root CA 2, O=Amazon, C=US, Issuer:CN=Amazon Root CA 2, O=Amazon, C=US, Key type:RSA, Length:4096, Cert Id:-1766132388, Valid from:5/26/15, 12:00 AM, Valid until:5/26/40, 12:00 AM
12:54:32.874 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:1, Subject:CN=T-TeleSec GlobalRoot Class 3, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE, Issuer:CN=T-TeleSec GlobalRoot Class 3, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE, Key type:RSA, Length:2048, Cert Id:1894096264, Valid from:10/1/08, 10:29 AM, Valid until:10/1/33, 11:59 PM
12:54:32.875 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:ce7e0e517d846fe8fe560fc1bf03039, Subject:CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US, Issuer:CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US, Key type:RSA, Length:2048, Cert Id:-860404528, Valid from:11/10/06, 12:00 AM, Valid until:11/10/31, 12:00 AM
12:54:32.881 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:fedce3010fc948ff, Subject:CN=Certigna, O=Dhimyotis, C=FR, Issuer:CN=Certigna, O=Dhimyotis, C=FR, Key type:RSA, Length:2048, Cert Id:-788091456, Valid from:6/29/07, 3:13 PM, Valid until:6/29/27, 3:13 PM
12:54:32.884 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:c9cdd3e9d57d23ce, Subject:CN=Global Chambersign Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU, Issuer:CN=Global Chambersign Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU, Key type:RSA, Length:4096, Cert Id:1271252776, Valid from:8/1/08, 12:31 PM, Valid until:7/31/38, 12:31 PM
12:54:32.888 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:6a683e9c519bcb53, Subject:CN=E-Tugra Certification Authority, OU=E-Tugra Sertifikasyon Merkezi, O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., L=Ankara, C=TR, Issuer:CN=E-Tugra Certification Authority, OU=E-Tugra Sertifikasyon Merkezi, O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., L=Ankara, C=TR, Key type:RSA, Length:4096, Cert Id:-673382379, Valid from:3/5/13, 12:09 PM, Valid until:3/3/23, 12:09 PM
12:54:32.892 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:0, Subject:CN=Hellenic Academic and Research Institutions RootCA 2011, O=Hellenic Academic and Research Institutions Cert. Authority, C=GR, Issuer:CN=Hellenic Academic and Research Institutions RootCA 2011, O=Hellenic Academic and Research Institutions Cert. Authority, C=GR, Key type:RSA, Length:2048, Cert Id:-1841489473, Valid from:12/6/11, 1:49 PM, Valid until:12/1/31, 1:49 PM
12:54:32.900 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:2, Subject:CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO, Issuer:CN=Buypass Class 2 Root CA, O=Buypass AS-983163327, C=NO, Key type:RSA, Length:4096, Cert Id:969960563, Valid from:10/26/10, 8:38 AM, Valid until:10/26/40, 8:38 AM
12:54:32.901 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:78585f2ead2c194be3370735341328b596d46593, Subject:CN=QuoVadis Root CA 1 G3, O=QuoVadis Limited, C=BM, Issuer:CN=QuoVadis Root CA 1 G3, O=QuoVadis Limited, C=BM, Key type:RSA, Length:4096, Cert Id:-762436034, Valid from:1/12/12, 5:27 PM, Valid until:1/12/42, 5:27 PM
12:54:32.904 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:98968d, Subject:CN=Staat der Nederlanden EV Root CA, O=Staat der Nederlanden, C=NL, Issuer:CN=Staat der Nederlanden EV Root CA, O=Staat der Nederlanden, C=NL, Key type:RSA, Length:4096, Cert Id:1444801426, Valid from:12/8/10, 11:19 AM, Valid until:12/8/22, 11:10 AM
12:54:32.912 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:2ef59b0228a7db7affd5a3a9eebd03a0cf126a1d, Subject:CN=QuoVadis Root CA 3 G3, O=QuoVadis Limited, C=BM, Issuer:CN=QuoVadis Root CA 3 G3, O=QuoVadis Limited, C=BM, Key type:RSA, Length:4096, Cert Id:-705622991, Valid from:1/12/12, 8:26 PM, Valid until:1/12/42, 8:26 PM
12:54:32.916 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:1d, Subject:CN=Sonera Class2 CA, O=Sonera, C=FI, Issuer:CN=Sonera Class2 CA, O=Sonera, C=FI, Key type:RSA, Length:2048, Cert Id:-572101437, Valid from:4/6/01, 7:29 AM, Valid until:4/6/21, 7:29 AM
12:54:32.917 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:-11d4c2142bde21eb579d53fb0c223bff, Subject:CN=EC-ACC, OU=Jerarquia Entitats de Certificacio Catalanes, OU=Vegeu https://www.catcert.net/verarrel (c)03, OU=Serveis Publics de Certificacio, O=Agencia Catalana de Certificacio (NIF Q-0801176-I), C=ES, Issuer:CN=EC-ACC, OU=Jerarquia Entitats de Certificacio Catalanes, OU=Vegeu https://www.catcert.net/verarrel (c)03, OU=Serveis Publics de Certificacio, O=Agencia Catalana de Certificacio (NIF Q-0801176-I), C=ES, Key type:RSA, Length:2048, Cert Id:1077306647, Valid from:1/7/03, 11:00 PM, Valid until:1/7/31, 10:59 PM
12:54:32.919 FINE jdk.event.security : X509Certificate: Alg:SHA384withECDSA, Serial:2f80fe238c0e220f486712289187acb3, Subject:CN=VeriSign Class 3 Public Primary Certification Authority - G4, OU="(c) 2007 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US, Issuer:CN=VeriSign Class 3 Public Primary Certification Authority - G4, OU="(c) 2007 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US, Key type:EC, Length:384, Cert Id:-131493977, Valid from:11/5/07, 12:00 AM, Valid until:1/18/38, 11:59 PM
12:54:32.924 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:401ac46421b31321030ebbe4121ac51d, Subject:CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US, Issuer:CN=VeriSign Universal Root Certification Authority, OU="(c) 2008 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US, Key type:RSA, Length:2048, Cert Id:-1976681486, Valid from:4/2/08, 12:00 AM, Valid until:12/1/37, 11:59 PM
12:54:32.928 FINE jdk.event.security : X509Certificate: Alg:SHA384withRSA, Serial:1fd6d30fca3ca51a81bbc640e35032d, Subject:CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US, Issuer:CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US, Key type:RSA, Length:4096, Cert Id:-347365895, Valid from:2/1/10, 12:00 AM, Valid until:1/18/38, 11:59 PM
12:54:32.929 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:1, Subject:CN=GeoTrust Universal CA 2, O=GeoTrust Inc., C=US, Issuer:CN=GeoTrust Universal CA 2, O=GeoTrust Inc., C=US, Key type:RSA, Length:4096, Cert Id:-1956088749, Valid from:3/4/04, 5:00 AM, Valid until:3/4/29, 5:00 AM
12:54:32.930 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:4e812d8a8265e00b02ee3e350246e53d, Subject:CN=COMODO Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB, Issuer:CN=COMODO Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB, Key type:RSA, Length:2048, Cert Id:904304908, Valid from:12/1/06, 12:00 AM, Valid until:12/31/29, 11:59 PM
12:54:32.933 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:49412ce40010, Subject:CN=NetLock Arany (Class Gold) Főtanúsítvány, OU=Tanúsítványkiadók (Certification Services), O=NetLock Kft., L=Budapest, C=HU, Issuer:CN=NetLock Arany (Class Gold) Főtanúsítvány, OU=Tanúsítványkiadók (Certification Services), O=NetLock Kft., L=Budapest, C=HU, Key type:RSA, Length:2048, Cert Id:58541246, Valid from:12/11/08, 3:08 PM, Valid until:12/6/28, 3:08 PM
12:54:32.939 FINE jdk.event.security : X509Certificate: Alg:SHA384withECDSA, Serial:a68b79290000000050d091f9, Subject:CN=Entrust Root Certification Authority - EC1, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US, Issuer:CN=Entrust Root Certification Authority - EC1, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US, Key type:EC, Length:384, Cert Id:924514073, Valid from:12/18/12, 3:25 PM, Valid until:12/18/37, 3:55 PM
12:54:32.944 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:26, Subject:CN=Deutsche Telekom Root CA 2, OU=T-TeleSec Trust Center, O=Deutsche Telekom AG, C=DE, Issuer:CN=Deutsche Telekom Root CA 2, OU=T-TeleSec Trust Center, O=Deutsche Telekom AG, C=DE, Key type:RSA, Length:2048, Cert Id:-598259993, Valid from:7/9/99, 12:11 PM, Valid until:7/9/19, 11:59 PM
12:54:32.945 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:3e8, Subject:CN=Hongkong Post Root CA 1, O=Hongkong Post, C=HK, Issuer:CN=Hongkong Post Root CA 1, O=Hongkong Post, C=HK, Key type:RSA, Length:2048, Cert Id:-1426826250, Valid from:5/15/03, 5:13 AM, Valid until:5/15/23, 4:52 AM
12:54:32.946 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:1, Subject:CN=TWCA Root Certification Authority, OU=Root CA, O=TAIWAN-CA, C=TW, Issuer:CN=TWCA Root Certification Authority, OU=Root CA, O=TAIWAN-CA, C=TW, Key type:RSA, Length:2048, Cert Id:-1642094263, Valid from:8/28/08, 7:24 AM, Valid until:12/31/30, 3:59 PM
12:54:32.947 FINE jdk.event.security : X509Certificate: Alg:SHA384withECDSA, Serial:5c8b99c55a94c5d27156decd8980cc26, Subject:CN=USERTrust ECC Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US, Issuer:CN=USERTrust ECC Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US, Key type:EC, Length:384, Cert Id:-965679910, Valid from:2/1/10, 12:00 AM, Valid until:1/18/38, 11:59 PM
12:54:32.952 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:0, Subject:CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US, Issuer:CN=Starfield Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US, Key type:RSA, Length:2048, Cert Id:-1026641587, Valid from:9/1/09, 12:00 AM, Valid until:12/31/37, 11:59 PM
12:54:32.956 FINE jdk.event.security : X509Certificate: Alg:SHA384withECDSA, Serial:3cb2f4480a00e2feeb243b5e603ec36b, Subject:CN=GeoTrust Primary Certification Authority - G2, OU=(c) 2007 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US, Issuer:CN=GeoTrust Primary Certification Authority - G2, OU=(c) 2007 GeoTrust Inc. - For authorized use only, O=GeoTrust Inc., C=US, Key type:EC, Length:384, Cert Id:-1114303822, Valid from:11/5/07, 12:00 AM, Valid until:1/18/38, 11:59 PM
12:54:32.957 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:5480f9a073ed3f004cca89d8e371e64a, Subject:EMAILADDRESS=pki@sk.ee, CN=EE Certification Centre Root CA, O=AS Sertifitseerimiskeskus, C=EE, Issuer:EMAILADDRESS=pki@sk.ee, CN=EE Certification Centre Root CA, O=AS Sertifitseerimiskeskus, C=EE, Key type:RSA, Length:2048, Cert Id:1016946801, Valid from:10/30/10, 10:10 AM, Valid until:12/17/30, 11:59 PM
12:54:32.964 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:509, Subject:CN=QuoVadis Root CA 2, O=QuoVadis Limited, C=BM, Issuer:CN=QuoVadis Root CA 2, O=QuoVadis Limited, C=BM, Key type:RSA, Length:4096, Cert Id:338250116, Valid from:11/24/06, 6:27 PM, Valid until:11/24/31, 6:23 PM
12:54:32.965 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:444c0, Subject:CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL, Issuer:CN=Certum Trusted Network CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL, Key type:RSA, Length:2048, Cert Id:2014002193, Valid from:10/22/08, 12:07 PM, Valid until:12/31/29, 12:07 PM
12:54:32.968 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:c27e43044e473f19, Subject:EMAILADDRESS=info@e-szigno.hu, CN=Microsec e-Szigno Root CA 2009, O=Microsec Ltd., L=Budapest, C=HU, Issuer:EMAILADDRESS=info@e-szigno.hu, CN=Microsec e-Szigno Root CA 2009, O=Microsec Ltd., L=Budapest, C=HU, Key type:RSA, Length:2048, Cert Id:-1903950012, Valid from:6/16/09, 11:30 AM, Valid until:12/30/29, 11:30 AM
12:54:32.969 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:95be16a0f72e46f17b398272fa8bcd96, Subject:CN=TeliaSonera Root CA v1, O=TeliaSonera, Issuer:CN=TeliaSonera Root CA v1, O=TeliaSonera, Key type:RSA, Length:4096, Cert Id:1495358374, Valid from:10/18/07, 12:00 PM, Valid until:10/18/32, 12:00 PM
12:54:32.973 FINE jdk.event.security : X509Certificate: Alg:SHA384withECDSA, Serial:605949e0262ebb55f90a778a71f94ad86c, Subject:CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R5, Issuer:CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R5, Key type:EC, Length:384, Cert Id:1997048439, Valid from:11/13/12, 12:00 AM, Valid until:1/19/38, 3:14 AM
12:54:32.974 FINE jdk.event.security : X509Certificate: Alg:SHA384withECDSA, Serial:55556bcf25ea43535c3a40fd5ab4572, Subject:CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US, Issuer:CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US, Key type:EC, Length:384, Cert Id:-795968543, Valid from:8/1/13, 12:00 PM, Valid until:1/15/38, 12:00 PM
12:54:32.977 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:66c9fcf99bf8c0a39e2f0788a43e696365bca, Subject:CN=Amazon Root CA 1, O=Amazon, C=US, Issuer:CN=Amazon Root CA 1, O=Amazon, C=US, Key type:RSA, Length:2048, Cert Id:-1472444962, Valid from:5/26/15, 12:00 AM, Valid until:1/17/38, 12:00 AM
12:54:32.980 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:983f4, Subject:CN=D-TRUST Root Class 3 CA 2 EV 2009, O=D-Trust GmbH, C=DE, Issuer:CN=D-TRUST Root Class 3 CA 2 EV 2009, O=D-Trust GmbH, C=DE, Key type:RSA, Length:2048, Cert Id:971313728, Valid from:11/5/09, 8:50 AM, Valid until:11/5/29, 8:50 AM
12:54:32.983 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:1, Subject:CN=T-TeleSec GlobalRoot Class 2, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE, Issuer:CN=T-TeleSec GlobalRoot Class 2, OU=T-Systems Trust Center, O=T-Systems Enterprise Services GmbH, C=DE, Key type:RSA, Length:2048, Cert Id:-1238464039, Valid from:10/1/08, 10:40 AM, Valid until:10/1/33, 11:59 PM
12:54:32.986 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:18acb56afd69b6153a636cafdafac4a1, Subject:CN=GeoTrust Primary Certification Authority, O=GeoTrust Inc., C=US, Issuer:CN=GeoTrust Primary Certification Authority, O=GeoTrust Inc., C=US, Key type:RSA, Length:2048, Cert Id:-965345157, Valid from:11/27/06, 12:00 AM, Valid until:7/16/36, 11:59 PM
12:54:32.990 FINE jdk.event.security : X509Certificate: Alg:SHA384withECDSA, Serial:212a560caeda0cab4045bf2ba22d3aea, Subject:CN=OISTE WISeKey Global Root GC CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH, Issuer:CN=OISTE WISeKey Global Root GC CA, OU=OISTE Foundation Endorsed, O=WISeKey, C=CH, Key type:EC, Length:384, Cert Id:-1513165457, Valid from:5/9/17, 9:48 AM, Valid until:5/9/42, 9:58 AM
12:54:32.992 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:1, Subject:CN=SecureSign RootCA11, O="Japan Certification Services, Inc.", C=JP, Issuer:CN=SecureSign RootCA11, O="Japan Certification Services, Inc.", C=JP, Key type:RSA, Length:2048, Cert Id:2079057034, Valid from:4/8/09, 4:56 AM, Valid until:4/8/29, 4:56 AM
12:54:32.998 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:184accd6, Subject:CN=CFCA EV ROOT, O=China Financial Certification Authority, C=CN, Issuer:CN=CFCA EV ROOT, O=China Financial Certification Authority, C=CN, Key type:RSA, Length:4096, Cert Id:551407782, Valid from:8/8/12, 3:07 AM, Valid until:12/31/29, 3:07 AM
12:54:32.999 FINE jdk.event.security : X509Certificate: Alg:SHA512withRSA, Serial:21d6d04a4f250fc93237fcaa5e128de9, Subject:CN=Certum Trusted Network CA 2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL, Issuer:CN=Certum Trusted Network CA 2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL, Key type:RSA, Length:4096, Cert Id:1983350452, Valid from:10/6/11, 8:39 AM, Valid until:10/6/46, 8:39 AM
12:54:33.003 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:9b7e0649a33e62b9d5ee90487129ef57, Subject:CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US, Issuer:CN=VeriSign Class 3 Public Primary Certification Authority - G3, OU="(c) 1999 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US, Key type:RSA, Length:2048, Cert Id:2057300190, Valid from:10/1/99, 12:00 AM, Valid until:7/16/36, 11:59 PM
12:54:33.005 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:983f3, Subject:CN=D-TRUST Root Class 3 CA 2 2009, O=D-Trust GmbH, C=DE, Issuer:CN=D-TRUST Root Class 3 CA 2 2009, O=D-Trust GmbH, C=DE, Key type:RSA, Length:2048, Cert Id:1430153102, Valid from:11/5/09, 8:35 AM, Valid until:11/5/29, 8:35 AM
12:54:33.007 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:7d0997fef047ea7a, Subject:CN=GDCA TrustAUTH R5 ROOT, O="GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.", C=CN, Issuer:CN=GDCA TrustAUTH R5 ROOT, O="GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.", C=CN, Key type:RSA, Length:4096, Cert Id:494136981, Valid from:11/26/14, 5:13 AM, Valid until:12/31/40, 3:59 PM
12:54:33.012 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:98a239, Subject:CN=Staat der Nederlanden Root CA - G3, O=Staat der Nederlanden, C=NL, Issuer:CN=Staat der Nederlanden Root CA - G3, O=Staat der Nederlanden, C=NL, Key type:RSA, Length:4096, Cert Id:-1733470677, Valid from:11/14/13, 11:28 AM, Valid until:11/13/28, 11:00 PM
12:54:33.016 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:0, Subject:CN=Hellenic Academic and Research Institutions RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR, Issuer:CN=Hellenic Academic and Research Institutions RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR, Key type:RSA, Length:4096, Cert Id:-802976731, Valid from:7/7/15, 10:11 AM, Valid until:6/30/40, 10:11 AM
12:54:33.017 FINE jdk.event.security : X509Certificate: Alg:SHA384withECDSA, Serial:ba15afa1ddfa0b54944afcd24a06cec, Subject:CN=DigiCert Assured ID Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US, Issuer:CN=DigiCert Assured ID Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US, Key type:EC, Length:384, Cert Id:-645537245, Valid from:8/1/13, 12:00 PM, Valid until:1/15/38, 12:00 PM
12:54:33.018 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:4f1bd42f54bb2f4b, Subject:CN=SwissSign Silver CA - G2, O=SwissSign AG, C=CH, Issuer:CN=SwissSign Silver CA - G2, O=SwissSign AG, C=CH, Key type:RSA, Length:4096, Cert Id:126726124, Valid from:10/25/06, 8:32 AM, Valid until:10/25/36, 8:32 AM
12:54:33.022 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:570a119742c4e3cc, Subject:CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT, Issuer:CN=Actalis Authentication Root CA, O=Actalis S.p.A./03358520967, L=Milan, C=IT, Key type:RSA, Length:4096, Cert Id:1729119956, Valid from:9/22/11, 11:22 AM, Valid until:9/22/30, 11:22 AM
12:54:33.023 FINE jdk.event.security : X509Certificate: Alg:SHA384withRSA, Serial:59b1b579e8e2132e23907bda777755c, Subject:CN=DigiCert Trusted Root G4, OU=www.digicert.com, O=DigiCert Inc, C=US, Issuer:CN=DigiCert Trusted Root G4, OU=www.digicert.com, O=DigiCert Inc, C=US, Key type:RSA, Length:4096, Cert Id:1057369358, Valid from:8/1/13, 12:00 PM, Valid until:1/15/38, 12:00 PM
12:54:33.032 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:40000000001154b5ac394, Subject:CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE, Issuer:CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE, Key type:RSA, Length:2048, Cert Id:536948034, Valid from:9/1/98, 12:00 PM, Valid until:1/28/28, 12:00 PM
12:54:33.033 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:413d72c7f46b1f81437df1d22854df9a, Subject:CN=OISTE WISeKey Global Root GA CA, OU=OISTE Foundation Endorsed, OU=Copyright (c) 2005, O=WISeKey, C=CH, Issuer:CN=OISTE WISeKey Global Root GA CA, OU=OISTE Foundation Endorsed, OU=Copyright (c) 2005, O=WISeKey, C=CH, Key type:RSA, Length:2048, Cert Id:-1985989675, Valid from:12/11/05, 4:03 PM, Valid until:12/11/37, 4:09 PM
12:54:33.034 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:7c4f04391cd4992d, Subject:CN=AffirmTrust Networking, O=AffirmTrust, C=US, Issuer:CN=AffirmTrust Networking, O=AffirmTrust, C=US, Key type:RSA, Length:2048, Cert Id:651670175, Valid from:1/29/10, 2:08 PM, Valid until:12/31/30, 2:08 PM
12:54:33.036 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:56b629cd34bc78f6, Subject:CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US, Issuer:CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US, Key type:RSA, Length:4096, Cert Id:1381862403, Valid from:5/31/17, 6:14 PM, Valid until:5/30/42, 6:14 PM
12:54:33.037 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:33af1e6a711a9a0bb2864b11d09fae5, Subject:CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US, Issuer:CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US, Key type:RSA, Length:2048, Cert Id:1136084297, Valid from:8/1/13, 12:00 PM, Valid until:1/15/38, 12:00 PM
12:54:33.044 FINE jdk.event.security : X509Certificate: Alg:SHA256withECDSA, Serial:2a38a41c960a04de42b228a50be8349802, Subject:CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R4, Issuer:CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R4, Key type:EC, Length:256, Cert Id:-1923273545, Valid from:11/13/12, 12:00 AM, Valid until:1/19/38, 3:14 AM
12:54:33.045 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:20000b9, Subject:CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE, Issuer:CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE, Key type:RSA, Length:2048, Cert Id:1425294543, Valid from:5/12/00, 6:46 PM, Valid until:5/12/25, 11:59 PM
12:54:33.046 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:0, Subject:OU=Security Communication RootCA2, O="SECOM Trust Systems CO.,LTD.", C=JP, Issuer:OU=Security Communication RootCA2, O="SECOM Trust Systems CO.,LTD.", C=JP, Key type:RSA, Length:2048, Cert Id:1521072570, Valid from:5/29/09, 5:00 AM, Valid until:5/29/29, 5:00 AM
12:54:33.051 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:1b1fadb620f924d3366bf7c7f18ca059, Subject:OU=Trustis FPS Root CA, O=Trustis Limited, C=GB, Issuer:OU=Trustis FPS Root CA, O=Trustis Limited, C=GB, Key type:RSA, Length:2048, Cert Id:-878780292, Valid from:12/23/03, 12:14 PM, Valid until:1/21/24, 11:36 AM
12:54:33.052 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:4000000000121585308a2, Subject:CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3, Issuer:CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3, Key type:RSA, Length:2048, Cert Id:733875591, Valid from:3/18/09, 10:00 AM, Valid until:3/18/29, 10:00 AM
12:54:33.053 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:75622a4e8d48a894df413c8f0f8eaa5, Subject:CN=Secure Global CA, O=SecureTrust Corporation, C=US, Issuer:CN=Secure Global CA, O=SecureTrust Corporation, C=US, Key type:RSA, Length:2048, Cert Id:-1476772975, Valid from:11/7/06, 7:42 PM, Valid until:12/31/29, 7:52 PM
12:54:33.054 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:8210cfb0d240e3594463e0bb63828b00, Subject:CN=ISRG Root X1, O=Internet Security Research Group, C=US, Issuer:CN=ISRG Root X1, O=Internet Security Research Group, C=US, Key type:RSA, Length:4096, Cert Id:1521974916, Valid from:6/4/15, 11:04 AM, Valid until:6/4/35, 11:04 AM
12:54:33.055 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:2, Subject:CN=Buypass Class 3 Root CA, O=Buypass AS-983163327, C=NO, Issuer:CN=Buypass Class 3 Root CA, O=Buypass AS-983163327, C=NO, Key type:RSA, Length:4096, Cert Id:1264269967, Valid from:10/26/10, 8:28 AM, Valid until:10/26/40, 8:28 AM
12:54:33.064 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:a3da427ea4b1aeda, Subject:CN=Chambers of Commerce Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU, Issuer:CN=Chambers of Commerce Root - 2008, O=AC Camerfirma S.A., SERIALNUMBER=A82743287, L=Madrid (see current address at www.camerfirma.com/address), C=EU, Key type:RSA, Length:4096, Cert Id:-28263924, Valid from:8/1/08, 12:29 PM, Valid until:7/31/38, 12:29 PM
12:54:33.067 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:1, Subject:CN=Certinomis - Root CA, OU=0002 433998903, O=Certinomis, C=FR, Issuer:CN=Certinomis - Root CA, OU=0002 433998903, O=Certinomis, C=FR, Key type:RSA, Length:4096, Cert Id:-1335658159, Valid from:10/21/13, 9:17 AM, Valid until:10/21/33, 9:17 AM
12:54:33.068 FINE jdk.event.security : X509Certificate: Alg:SHA384withRSA, Serial:6d8c1446b1a60aee, Subject:CN=AffirmTrust Premium, O=AffirmTrust, C=US, Issuer:CN=AffirmTrust Premium, O=AffirmTrust, C=US, Key type:RSA, Length:4096, Cert Id:-2130283955, Valid from:1/29/10, 2:10 PM, Valid until:12/31/40, 2:10 PM
12:54:33.069 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:98968c, Subject:CN=Staat der Nederlanden Root CA - G2, O=Staat der Nederlanden, C=NL, Issuer:CN=Staat der Nederlanden Root CA - G2, O=Staat der Nederlanden, C=NL, Key type:RSA, Length:4096, Cert Id:-812508059, Valid from:3/26/08, 11:18 AM, Valid until:3/25/20, 11:03 AM
12:54:33.072 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:1, Subject:CN=GeoTrust Universal CA, O=GeoTrust Inc., C=US, Issuer:CN=GeoTrust Universal CA, O=GeoTrust Inc., C=US, Key type:RSA, Length:4096, Cert Id:313566089, Valid from:3/4/04, 5:00 AM, Valid until:3/4/29, 5:00 AM
12:54:33.076 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:a0142800000014523cf467c00000002, Subject:CN=IdenTrust Public Sector Root CA 1, O=IdenTrust, C=US, Issuer:CN=IdenTrust Public Sector Root CA 1, O=IdenTrust, C=US, Key type:RSA, Length:4096, Cert Id:2123370772, Valid from:1/16/14, 5:53 PM, Valid until:1/16/34, 5:53 PM
12:54:33.079 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:0, Subject:OU=Security Communication RootCA1, O=SECOM Trust.net, C=JP, Issuer:OU=Security Communication RootCA1, O=SECOM Trust.net, C=JP, Key type:RSA, Length:2048, Cert Id:1802358121, Valid from:9/30/03, 4:20 AM, Valid until:9/30/23, 4:20 AM
12:54:33.080 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:cbe, Subject:CN=TWCA Global Root CA, OU=Root CA, O=TAIWAN-CA, C=TW, Issuer:CN=TWCA Global Root CA, OU=Root CA, O=TAIWAN-CA, C=TW, Key type:RSA, Length:4096, Cert Id:861175838, Valid from:6/27/12, 6:28 AM, Valid until:12/31/30, 3:59 PM
12:54:33.080 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:445734245b81899b35f2ceb82b3b5ba726f07528, Subject:CN=QuoVadis Root CA 2 G3, O=QuoVadis Limited, C=BM, Issuer:CN=QuoVadis Root CA 2 G3, O=QuoVadis Limited, C=BM, Key type:RSA, Length:4096, Cert Id:696763521, Valid from:1/12/12, 6:59 PM, Valid until:1/12/42, 6:59 PM
12:54:33.088 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:b931c3ad63967ea6723bfc3af9af44b, Subject:CN=DigiCert Assured ID Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US, Issuer:CN=DigiCert Assured ID Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US, Key type:RSA, Length:2048, Cert Id:-385398383, Valid from:8/1/13, 12:00 PM, Valid until:1/15/38, 12:00 PM
12:54:33.089 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:b0b75a16485fbfe1cbf58bd719e67d, Subject:CN=Izenpe.com, O=IZENPE S.A., C=ES, Issuer:CN=Izenpe.com, O=IZENPE S.A., C=ES, Key type:RSA, Length:4096, Cert Id:-1845580984, Valid from:12/13/07, 1:08 PM, Valid until:12/13/37, 8:27 AM
12:54:33.089 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:7b2c9bd316803299, Subject:CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US, Issuer:CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US, Key type:RSA, Length:4096, Cert Id:156725711, Valid from:2/12/16, 5:39 PM, Valid until:2/12/41, 5:39 PM
12:54:33.092 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:0, Subject:CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US, Issuer:CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US, Key type:RSA, Length:2048, Cert Id:439600313, Valid from:9/1/09, 12:00 AM, Valid until:12/31/37, 11:59 PM
12:54:33.092 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:15c8bd65475cafb897005ee406d2bc9d, Subject:OU=ePKI Root Certification Authority, O="Chunghwa Telecom Co., Ltd.", C=TW, Issuer:OU=ePKI Root Certification Authority, O="Chunghwa Telecom Co., Ltd.", C=TW, Key type:RSA, Length:4096, Cert Id:-662636137, Valid from:12/20/04, 2:31 AM, Valid until:12/20/34, 2:31 AM
12:54:33.096 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:5d938d306736c8061d1ac754846907, Subject:OU=AC RAIZ FNMT-RCM, O=FNMT-RCM, C=ES, Issuer:OU=AC RAIZ FNMT-RCM, O=FNMT-RCM, C=ES, Key type:RSA, Length:4096, Cert Id:1555523573, Valid from:10/29/08, 3:59 PM, Valid until:1/1/30, 12:00 AM
12:54:33.098 FINE jdk.event.security : X509Certificate: Alg:SHA384withRSA, Serial:4caaf9cadb636fe01ff74ed85b03869d, Subject:CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB, Issuer:CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB, Key type:RSA, Length:4096, Cert Id:1769425049, Valid from:1/19/10, 12:00 AM, Valid until:1/18/38, 11:59 PM
12:54:33.100 FINE jdk.event.security : X509Certificate: Alg:SHA256withECDSA, Serial:0, Subject:CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR, Issuer:CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR, Key type:EC, Length:384, Cert Id:513613456, Valid from:7/7/15, 10:37 AM, Valid until:6/30/40, 10:37 AM
12:54:33.104 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:400000000010f8626e60d, Subject:CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2, Issuer:CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2, Key type:RSA, Length:2048, Cert Id:7087067, Valid from:12/15/06, 8:00 AM, Valid until:12/15/21, 8:00 AM
12:54:33.106 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:53ec3beefbb2485f, Subject:CN=Autoridad de Certificacion Firmaprofesional CIF A62634068, C=ES, Issuer:CN=Autoridad de Certificacion Firmaprofesional CIF A62634068, C=ES, Key type:RSA, Length:4096, Cert Id:692250759, Valid from:5/20/09, 8:38 AM, Valid until:12/31/30, 8:38 AM
12:54:33.107 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:0, Subject:OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US, Issuer:OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US, Key type:RSA, Length:2048, Cert Id:-271444299, Valid from:6/29/04, 5:06 PM, Valid until:6/29/34, 5:06 PM
12:54:33.112 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:1, Subject:CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1, OU=Kamu Sertifikasyon Merkezi - Kamu SM, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, L=Gebze - Kocaeli, C=TR, Issuer:CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1, OU=Kamu Sertifikasyon Merkezi - Kamu SM, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, L=Gebze - Kocaeli, C=TR, Key type:RSA, Length:2048, Cert Id:1093603654, Valid from:11/25/13, 8:25 AM, Valid until:10/25/43, 8:25 AM
12:54:33.113 FINE jdk.event.security : X509Certificate: Alg:SHA384withECDSA, Serial:1f47afaa62007050544c019e9b63992a, Subject:CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB, Issuer:CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB, Key type:EC, Length:384, Cert Id:1146488932, Valid from:3/6/08, 12:00 AM, Valid until:1/18/38, 11:59 PM
12:54:33.113 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:1, Subject:CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB, Issuer:CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB, Key type:RSA, Length:2048, Cert Id:-1197580894, Valid from:1/1/04, 12:00 AM, Valid until:12/31/28, 11:59 PM
12:54:33.114 FINE jdk.event.security : X509Certificate: Alg:SHA256withECDSA, Serial:2c299c5b16ed0595, Subject:CN=SSL.com EV Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US, Issuer:CN=SSL.com EV Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US, Key type:EC, Length:384, Cert Id:1789254518, Valid from:2/12/16, 6:15 PM, Valid until:2/12/41, 6:15 PM
12:54:33.115 FINE jdk.event.security : X509Certificate: Alg:SHA384withECDSA, Serial:66c9fd7c1bb104c2943e5717b7b2cc81ac10e, Subject:CN=Amazon Root CA 4, O=Amazon, C=US, Issuer:CN=Amazon Root CA 4, O=Amazon, C=US, Key type:EC, Length:384, Cert Id:-1654272513, Valid from:5/26/15, 12:00 AM, Valid until:5/26/40, 12:00 AM
12:54:33.119 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:85bd4bf3d8dae369f694d75fc3a54423, Subject:CN=Class 2 Primary CA, O=Certplus, C=FR, Issuer:CN=Class 2 Primary CA, O=Certplus, C=FR, Key type:RSA, Length:2048, Cert Id:-3721037, Valid from:7/7/99, 5:05 PM, Valid until:7/6/19, 11:59 PM
12:54:33.123 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:200605167002, Subject:OU=certSIGN ROOT CA, O=certSIGN, C=RO, Issuer:OU=certSIGN ROOT CA, O=certSIGN, C=RO, Key type:RSA, Length:2048, Cert Id:-289960676, Valid from:7/4/06, 5:20 PM, Valid until:7/4/31, 5:20 PM
12:54:33.124 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:3e8a5d07ec55d232d5b7e3b65f01eb2ddce4d6e4, Subject:CN=SZAFIR ROOT CA2, O=Krajowa Izba Rozliczeniowa S.A., C=PL, Issuer:CN=SZAFIR ROOT CA2, O=Krajowa Izba Rozliczeniowa S.A., C=PL, Key type:RSA, Length:2048, Cert Id:381279303, Valid from:10/19/15, 7:43 AM, Valid until:10/19/35, 7:43 AM
12:54:33.132 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:3ab6508b, Subject:CN=QuoVadis Root Certification Authority, OU=Root Certification Authority, O=QuoVadis Limited, C=BM, Issuer:CN=QuoVadis Root Certification Authority, OU=Root Certification Authority, O=QuoVadis Limited, C=BM, Key type:RSA, Length:2048, Cert Id:-1882405602, Valid from:3/19/01, 6:33 PM, Valid until:3/17/21, 6:33 PM
12:54:33.133 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:600197b746a7eab4b49ad64b2ff790fb, Subject:CN=thawte Primary Root CA - G3, OU="(c) 2008 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US, Issuer:CN=thawte Primary Root CA - G3, OU="(c) 2008 thawte, Inc. - For authorized use only", OU=Certification Services Division, O="thawte, Inc.", C=US, Key type:RSA, Length:2048, Cert Id:1032730720, Valid from:4/2/08, 12:00 AM, Valid until:12/1/37, 11:59 PM
12:54:33.133 FINE jdk.event.security : X509Certificate: Alg:SHA256withRSA, Serial:4a538c28, Subject:CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US, Issuer:CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US, Key type:RSA, Length:2048, Cert Id:1936920337, Valid from:7/7/09, 5:25 PM, Valid until:12/7/30, 5:55 PM
12:54:33.138 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:400000000010f85aa2d48, Subject:CN=Cybertrust Global Root, O="Cybertrust, Inc", Issuer:CN=Cybertrust Global Root, O="Cybertrust, Inc", Key type:RSA, Length:2048, Cert Id:2057719675, Valid from:12/15/06, 8:00 AM, Valid until:12/15/21, 8:00 AM
12:54:33.139 FINE jdk.event.security : X509Certificate: Alg:SHA1withRSA, Serial:2ac5c266a0b409b8f0b79f2ae462577, Subject:CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US, Issuer:CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US, Key type:RSA, Length:2048, Cert Id:-1410680354, Valid from:11/10/06, 12:00 AM, Valid until:11/10/31, 12:00 AM
12:54:33.168 FINE io.netty.handler.ssl.SslUtils : JDK SSLEngine supports TLSv1.3: true
12:54:33.168 FINE io.netty.handler.ssl.JdkSslContext : Default protocols (JDK): [TLSv1.3, TLSv1.2, TLSv1.1, TLSv1]
12:54:33.169 FINE io.netty.handler.ssl.JdkSslContext : Default cipher suites (JDK): [TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384]
12:54:33.300 FINE io.lettuce.core.AbstractRedisClient : Connecting to Redis at REDACTED.euw1.cache.amazonaws.com:6379: java.net.UnknownHostException: REDACTED.euw1.cache.amazonaws.com: Name or service not known
12:54:33.301 FINE io.lettuce.core.RedisChannelHandler : close()
12:54:33.301 FINE io.lettuce.core.RedisChannelHandler : closeAsync()
12:54:33.302 FINE io.lettuce.core.protocol.DefaultEndpoint : [unknown, epid=0x1] closeAsync()
Error while running command (com.redislabs.riot.redis.InfoCommand@23e028a9): io.lettuce.core.RedisConnectionException: Unable to connect to REDACTED.euw1.cache.amazonaws.com:6379
Thanks for reporting this and for the solution! I added this to release 2.2.6
Wow, what a short response time, and there's alredy a commit in place. Thank you! 💯