.

2 files changed, 215 insertions, 0 deletions

diff --git a/tests/samplekeys/README b/tests/samplekeys/README
index 57ece0dcd..a71f7987e 100644
--- a/tests/samplekeys/README
+++ b/tests/samplekeys/README
@@ -15,6 +15,7 @@ webdeca.der        trust.web.de CA certificate [2004-02-17]
 
 gte.pem            GTE CyberTrust Global Root
 
+cert-with-117-akas.pem  A certificate with 117 subjectAltNames.
 
 
 		  
diff --git a/tests/samplekeys/cert-with-117-akas.pem b/tests/samplekeys/cert-with-117-akas.pem
new file mode 100644
index 000000000..bd0a7ea9d
--- /dev/null
+++ b/tests/samplekeys/cert-with-117-akas.pem
@@ -0,0 +1,214 @@
+Issuer ...: /CN=DigiCert High Assurance CA-3/OU=www.digicert.com/O=DigiCert Inc/C=US
+Serial ...: 01CB9ACED2544126AD07590F62BCA367
+Subject ..: /CN=edgecastcdn.net/O=EdgeCast Networks Inc./L=SANTA MONICA/ST=California/C=US
+    aka ..: (dns-name edgecastcdn.net)
+    aka ..: (dns-name ne.edgecastcdn.net)
+    aka ..: (dns-name minitab.fileburst.com)
+    aka ..: (dns-name cdn.montimbrenligne.laposte.fr)
+    aka ..: (dns-name zeroknowledge.fileburst.com)
+    aka ..: (dns-name images.goldstarbeta.com)
+    aka ..: (dns-name radialpoint.fileburst.com)
+    aka ..: (dns-name wac.edgecastcdn.net)
+    aka ..: (dns-name ne.wac.edgecastcdn.net)
+    aka ..: (dns-name images.goldstar.com)
+    aka ..: (dns-name images.vrbo.com)
+    aka ..: (dns-name cdn.vrbo.com)
+    aka ..: (dns-name content.truste.com)
+    aka ..: (dns-name e1.boxcdn.net)
+    aka ..: (dns-name e2.boxcdn.net)
+    aka ..: (dns-name e3.boxcdn.net)
+    aka ..: (dns-name privacy-policy.truste.com)
+    aka ..: (dns-name www.sonos.com)
+    aka ..: (dns-name www.dickiesgirl.com)
+    aka ..: (dns-name static-cache.tp-global.net)
+    aka ..: (dns-name images.homeawayrealestate.com)
+    aka ..: (dns-name cdn.verint.com)
+    aka ..: (dns-name swf.mixpo.com)
+    aka ..: (dns-name cdn.traceregister.com)
+    aka ..: (dns-name s.tmocache.com)
+    aka ..: (dns-name s.my.tmocache.com)
+    aka ..: (dns-name ne1.wpc.edgecastcdn.net)
+    aka ..: (dns-name gp1.wpc.edgecastcdn.net)
+    aka ..: (dns-name gs1.wpc.edgecastcdn.net)
+    aka ..: (dns-name ne1.wac.edgecastcdn.net)
+    aka ..: (dns-name gp1.wac.edgecastcdn.net)
+    aka ..: (dns-name gs1.wac.edgecastcdn.net)
+    aka ..: (dns-name c1.socialcastcontent.com)
+    aka ..: (dns-name www.steepandcheap.com)
+    aka ..: (dns-name www.whiskeymilitia.com)
+    aka ..: (dns-name www.chainlove.com)
+    aka ..: (dns-name www.tramdock.com)
+    aka ..: (dns-name www.bonktown.com)
+    aka ..: (dns-name www.brociety.com)
+    aka ..: (dns-name www.mozilla.com)
+    aka ..: (dns-name resources.homeaway.com)
+    aka ..: (dns-name ssl-cdn.sometrics.com)
+    aka ..: (dns-name cache.vehicleassets.captivelead.com)
+    aka ..: (dns-name static.woopra.com)
+    aka ..: (dns-name images.cardstore.com)
+    aka ..: (dns-name images.ink2.com)
+    aka ..: (dns-name resources.homeawayrealestate.com)
+    aka ..: (dns-name cdn1.adadvisor.net)
+    aka ..: (dns-name www.pictureitpostage.com)
+    aka ..: (dns-name images.vacationrentals.com)
+    aka ..: (dns-name serviceportal.carestreamhealth.com)
+    aka ..: (dns-name assets-secure.razoo.com)
+    aka ..: (dns-name resources.vacationrentals.com)
+    aka ..: (dns-name download.entraction.com)
+    aka ..: (dns-name ec.pond5.com)
+    aka ..: (dns-name images.esellerpro.com)
+    aka ..: (dns-name use.typekit.com)
+    aka ..: (dns-name www.experian.co.za)
+    aka ..: (dns-name static.iseatz.com)
+    aka ..: (dns-name netstor.adbrite.com)
+    aka ..: (dns-name static.www.turnto.com)
+    aka ..: (dns-name cdn.static.viddler.com)
+    aka ..: (dns-name edgecast.onegrp.com)
+    aka ..: (dns-name cdn.psw.net)
+    aka ..: (dns-name cdn.media910.whipplehill.net)
+    aka ..: (dns-name cdn.gaggle.net)
+    aka ..: (dns-name cdn.selectica.com)
+    aka ..: (dns-name inpath-static.iseatz.com)
+    aka ..: (dns-name secure.newmediamanager.com)
+    aka ..: (dns-name secure.avelleassets.com)
+    aka ..: (dns-name secure-delivery.rovion.com)
+    aka ..: (dns-name cdn.media34.whipplehill.net)
+    aka ..: (dns-name cdn.media56.whipplehill.net)
+    aka ..: (dns-name cdn.media78.whipplehill.net)
+    aka ..: (dns-name secure1.mlspcdn.net)
+    aka ..: (dns-name secure01.mlspcdn.net)
+    aka ..: (dns-name static.dubli.com)
+    aka ..: (dns-name cdn.sightspeed.com)
+    aka ..: (dns-name cdn.sightspeed.ca)
+    aka ..: (dns-name cdn.sightspeed.biz)
+    aka ..: (dns-name cdn.sightspeed.net)
+    aka ..: (dns-name cdn.sightspeed.be)
+    aka ..: (dns-name www-cdn.cinamuse.com)
+    aka ..: (dns-name www-cdn.cineble.com)
+    aka ..: (dns-name www-cdn.cinemaden.com)
+    aka ..: (dns-name www-cdn.filmlush.com)
+    aka ..: (dns-name www-cdn.flixaddict.com)
+    aka ..: (dns-name www-cdn.itshd.com)
+    aka ..: (dns-name www-cdn.moviease.com)
+    aka ..: (dns-name www-cdn.movielush.com)
+    aka ..: (dns-name www-cdn.reelhd.com)
+    aka ..: (dns-name www-cdn.reelvidz.com)
+    aka ..: (dns-name www-cdn.pushplay.com)
+    aka ..: (dns-name cdn1.fishpond.co.nz)
+    aka ..: (dns-name cdn1.fishpond.com.au)
+    aka ..: (dns-name fast.fonts.com)
+    aka ..: (dns-name cdn.isaca.org)
+    aka ..: (dns-name www.isaca.org)
+    aka ..: (dns-name cdn.optimizely.com)
+    aka ..: (dns-name static.shoedazzle.com)
+    aka ..: (dns-name cluster.online.isheriff.com)
+    aka ..: (dns-name www.travelrepublic.co.uk)
+    aka ..: (dns-name cdn-thumbs.viddler.com)
+    aka ..: (dns-name Stage.treadmilldoctor.com)
+    aka ..: (dns-name beta.fileblaze.net)
+    aka ..: (dns-name cdn.nprove.com)
+    aka ..: (dns-name www.extremefitnessresults.com)
+    aka ..: (dns-name ec.xnglobalres.com)
+    aka ..: (dns-name images.affinitysolutions.com)
+    aka ..: (dns-name securedr.33across.com)
+    aka ..: (dns-name sslbest.booztx.com)
+    aka ..: (dns-name www.travelrepublic.com)
+    aka ..: (dns-name www.adbrite.com)
+    aka ..: (dns-name www.blacklabelads.com)
+    aka ..: (dns-name data.schwabenorthamerica.com)
+    aka ..: (dns-name media.schwabenorthamerica.com)
+    aka ..: (dns-name cdn.whois.com.au)
+
+-----BEGIN CERTIFICATE-----
+MIIQ5jCCD86gAwIBAgIQAcuaztJUQSatB1kPYryjZzANBgkqhkiG9w0BAQUFADBm
+MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
+ZSBDQS0zMB4XDTEwMDEyNzAwMDAwMFoXDTExMDQyNzIzNTk1OVowdDELMAkGA1UE
+BhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFTATBgNVBAcTDFNBTlRBIE1PTklD
+QTEfMB0GA1UEChMWRWRnZUNhc3QgTmV0d29ya3MgSW5jLjEYMBYGA1UEAxMPZWRn
+ZWNhc3RjZG4ubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK5V
+1nGoCRPLM/7fOM4QL3vv9W+7e6Gs3lvyMoTL3zieqzuAGpyM9Cs7vRv2g/rZ49l2
+KgzbNK9+JIee0LC2cTFbQuE9DaVXRGLo8dAhnP0cFMbErcxehWdY2uItl5RdxGzB
+YPvOTMBFpLgzqjqqvN0auTI0IYbszE4GIcJQQm6EnT4/eQ3FVCrDo26j4itj8VP+
+jBvypzPdoTmSCbRABcp30IQPsV0kt1HM8ONyaMNk7+zx5OHLuBbSKcyFmvdkiT4W
+x7/Q3dBh5Rx91uToIBoFIgeglmS3O4/qPnQdgQyXHAP/gnMKA00aY7qVJ54NrqxB
+k7/C8G1EXsADplT5gwIDAQABo4INgDCCDXwwHwYDVR0jBBgwFoAUUOpzidsp+xCP
+nuUBINTeeZlIg/cwHQYDVR0OBBYEFDQ6+zUrIfo4JLXmdSig/Shl8CedMIIKSQYD
+VR0RBIIKQDCCCjyCD2VkZ2VjYXN0Y2RuLm5ldIISbmUuZWRnZWNhc3RjZG4ubmV0
+ghVtaW5pdGFiLmZpbGVidXJzdC5jb22CHmNkbi5tb250aW1icmVubGlnbmUubGFw
+b3N0ZS5mcoIbemVyb2tub3dsZWRnZS5maWxlYnVyc3QuY29tghdpbWFnZXMuZ29s
+ZHN0YXJiZXRhLmNvbYIZcmFkaWFscG9pbnQuZmlsZWJ1cnN0LmNvbYITd2FjLmVk
+Z2VjYXN0Y2RuLm5ldIIWbmUud2FjLmVkZ2VjYXN0Y2RuLm5ldIITaW1hZ2VzLmdv
+bGRzdGFyLmNvbYIPaW1hZ2VzLnZyYm8uY29tggxjZG4udnJiby5jb22CEmNvbnRl
+bnQudHJ1c3RlLmNvbYINZTEuYm94Y2RuLm5ldIINZTIuYm94Y2RuLm5ldIINZTMu
+Ym94Y2RuLm5ldIIZcHJpdmFjeS1wb2xpY3kudHJ1c3RlLmNvbYINd3d3LnNvbm9z
+LmNvbYITd3d3LmRpY2tpZXNnaXJsLmNvbYIac3RhdGljLWNhY2hlLnRwLWdsb2Jh
+bC5uZXSCHWltYWdlcy5ob21lYXdheXJlYWxlc3RhdGUuY29tgg5jZG4udmVyaW50
+LmNvbYINc3dmLm1peHBvLmNvbYIVY2RuLnRyYWNlcmVnaXN0ZXIuY29tgg5zLnRt
+b2NhY2hlLmNvbYIRcy5teS50bW9jYWNoZS5jb22CF25lMS53cGMuZWRnZWNhc3Rj
+ZG4ubmV0ghdncDEud3BjLmVkZ2VjYXN0Y2RuLm5ldIIXZ3MxLndwYy5lZGdlY2Fz
+dGNkbi5uZXSCF25lMS53YWMuZWRnZWNhc3RjZG4ubmV0ghdncDEud2FjLmVkZ2Vj
+YXN0Y2RuLm5ldIIXZ3MxLndhYy5lZGdlY2FzdGNkbi5uZXSCGGMxLnNvY2lhbGNh
+c3Rjb250ZW50LmNvbYIVd3d3LnN0ZWVwYW5kY2hlYXAuY29tghZ3d3cud2hpc2tl
+eW1pbGl0aWEuY29tghF3d3cuY2hhaW5sb3ZlLmNvbYIQd3d3LnRyYW1kb2NrLmNv
+bYIQd3d3LmJvbmt0b3duLmNvbYIQd3d3LmJyb2NpZXR5LmNvbYIPd3d3Lm1vemls
+bGEuY29tghZyZXNvdXJjZXMuaG9tZWF3YXkuY29tghVzc2wtY2RuLnNvbWV0cmlj
+cy5jb22CI2NhY2hlLnZlaGljbGVhc3NldHMuY2FwdGl2ZWxlYWQuY29tghFzdGF0
+aWMud29vcHJhLmNvbYIUaW1hZ2VzLmNhcmRzdG9yZS5jb22CD2ltYWdlcy5pbmsy
+LmNvbYIgcmVzb3VyY2VzLmhvbWVhd2F5cmVhbGVzdGF0ZS5jb22CEmNkbjEuYWRh
+ZHZpc29yLm5ldIIYd3d3LnBpY3R1cmVpdHBvc3RhZ2UuY29tghppbWFnZXMudmFj
+YXRpb25yZW50YWxzLmNvbYIic2VydmljZXBvcnRhbC5jYXJlc3RyZWFtaGVhbHRo
+LmNvbYIXYXNzZXRzLXNlY3VyZS5yYXpvby5jb22CHXJlc291cmNlcy52YWNhdGlv
+bnJlbnRhbHMuY29tghdkb3dubG9hZC5lbnRyYWN0aW9uLmNvbYIMZWMucG9uZDUu
+Y29tghVpbWFnZXMuZXNlbGxlcnByby5jb22CD3VzZS50eXBla2l0LmNvbYISd3d3
+LmV4cGVyaWFuLmNvLnphghFzdGF0aWMuaXNlYXR6LmNvbYITbmV0c3Rvci5hZGJy
+aXRlLmNvbYIVc3RhdGljLnd3dy50dXJudG8uY29tghZjZG4uc3RhdGljLnZpZGRs
+ZXIuY29tghNlZGdlY2FzdC5vbmVncnAuY29tggtjZG4ucHN3Lm5ldIIcY2RuLm1l
+ZGlhOTEwLndoaXBwbGVoaWxsLm5ldIIOY2RuLmdhZ2dsZS5uZXSCEWNkbi5zZWxl
+Y3RpY2EuY29tghhpbnBhdGgtc3RhdGljLmlzZWF0ei5jb22CGnNlY3VyZS5uZXdt
+ZWRpYW1hbmFnZXIuY29tghdzZWN1cmUuYXZlbGxlYXNzZXRzLmNvbYIac2VjdXJl
+LWRlbGl2ZXJ5LnJvdmlvbi5jb22CG2Nkbi5tZWRpYTM0LndoaXBwbGVoaWxsLm5l
+dIIbY2RuLm1lZGlhNTYud2hpcHBsZWhpbGwubmV0ghtjZG4ubWVkaWE3OC53aGlw
+cGxlaGlsbC5uZXSCE3NlY3VyZTEubWxzcGNkbi5uZXSCFHNlY3VyZTAxLm1sc3Bj
+ZG4ubmV0ghBzdGF0aWMuZHVibGkuY29tghJjZG4uc2lnaHRzcGVlZC5jb22CEWNk
+bi5zaWdodHNwZWVkLmNhghJjZG4uc2lnaHRzcGVlZC5iaXqCEmNkbi5zaWdodHNw
+ZWVkLm5ldIIRY2RuLnNpZ2h0c3BlZWQuYmWCFHd3dy1jZG4uY2luYW11c2UuY29t
+ghN3d3ctY2RuLmNpbmVibGUuY29tghV3d3ctY2RuLmNpbmVtYWRlbi5jb22CFHd3
+dy1jZG4uZmlsbWx1c2guY29tghZ3d3ctY2RuLmZsaXhhZGRpY3QuY29tghF3d3ct
+Y2RuLml0c2hkLmNvbYIUd3d3LWNkbi5tb3ZpZWFzZS5jb22CFXd3dy1jZG4ubW92
+aWVsdXNoLmNvbYISd3d3LWNkbi5yZWVsaGQuY29tghR3d3ctY2RuLnJlZWx2aWR6
+LmNvbYIUd3d3LWNkbi5wdXNocGxheS5jb22CE2NkbjEuZmlzaHBvbmQuY28ubnqC
+FGNkbjEuZmlzaHBvbmQuY29tLmF1gg5mYXN0LmZvbnRzLmNvbYINY2RuLmlzYWNh
+Lm9yZ4INd3d3LmlzYWNhLm9yZ4ISY2RuLm9wdGltaXplbHkuY29tghVzdGF0aWMu
+c2hvZWRhenpsZS5jb22CG2NsdXN0ZXIub25saW5lLmlzaGVyaWZmLmNvbYIYd3d3
+LnRyYXZlbHJlcHVibGljLmNvLnVrghZjZG4tdGh1bWJzLnZpZGRsZXIuY29tghlT
+dGFnZS50cmVhZG1pbGxkb2N0b3IuY29tghJiZXRhLmZpbGVibGF6ZS5uZXSCDmNk
+bi5ucHJvdmUuY29tgh13d3cuZXh0cmVtZWZpdG5lc3NyZXN1bHRzLmNvbYISZWMu
+eG5nbG9iYWxyZXMuY29tghxpbWFnZXMuYWZmaW5pdHlzb2x1dGlvbnMuY29tghVz
+ZWN1cmVkci4zM2Fjcm9zcy5jb22CEnNzbGJlc3QuYm9venR4LmNvbYIWd3d3LnRy
+YXZlbHJlcHVibGljLmNvbYIPd3d3LmFkYnJpdGUuY29tghV3d3cuYmxhY2tsYWJl
+bGFkcy5jb22CHGRhdGEuc2Nod2FiZW5vcnRoYW1lcmljYS5jb22CHW1lZGlhLnNj
+aHdhYmVub3J0aGFtZXJpY2EuY29tghBjZG4ud2hvaXMuY29tLmF1MH8GCCsGAQUF
+BwEBBHMwcTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEkG
+CCsGAQUFBzAChj1odHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DQUNlcnRzL0RpZ2lD
+ZXJ0SGlnaEFzc3VyYW5jZUNBLTMuY3J0MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMB
+Af8EAjAAMGUGA1UdHwReMFwwLKAqoCiGJmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv
+bS9jYTMtMjAxMGUuY3JsMCygKqAohiZodHRwOi8vY3JsNC5kaWdpY2VydC5jb20v
+Y2EzLTIwMTBlLmNybDCCAcYGA1UdIASCAb0wggG5MIIBtQYLYIZIAYb9bAEDAAEw
+ggGkMDoGCCsGAQUFBwIBFi5odHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9zc2wtY3Bz
+LXJlcG9zaXRvcnkuaHRtMIIBZAYIKwYBBQUHAgIwggFWHoIBUgBBAG4AeQAgAHUA
+cwBlACAAbwBmACAAdABoAGkAcwAgAEMAZQByAHQAaQBmAGkAYwBhAHQAZQAgAGMA
+bwBuAHMAdABpAHQAdQB0AGUAcwAgAGEAYwBjAGUAcAB0AGEAbgBjAGUAIABvAGYA
+IAB0AGgAZQAgAEQAaQBnAGkAQwBlAHIAdAAgAEMAUAAvAEMAUABTACAAYQBuAGQA
+IAB0AGgAZQAgAFIAZQBsAHkAaQBuAGcAIABQAGEAcgB0AHkAIABBAGcAcgBlAGUA
+bQBlAG4AdAAgAHcAaABpAGMAaAAgAGwAaQBtAGkAdAAgAGwAaQBhAGIAaQBsAGkA
+dAB5ACAAYQBuAGQAIABhAHIAZQAgAGkAbgBjAG8AcgBwAG8AcgBhAHQAZQBkACAA
+aABlAHIAZQBpAG4AIABiAHkAIAByAGUAZgBlAHIAZQBuAGMAZQAuMB0GA1UdJQQW
+MBQGCCsGAQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQUFAAOCAQEAF5t9RFi9
+kNvWJvXEMVW+zQy6mX/lSHNT/HbzM88IxILLkHAftqjpnoQIVHThYwRjC5r7oKzT
+Y0HQCXeYaDIcH/ZtTT6v9mPohWlAKll9ybSxAVOOgN7DdS37TyDcnuI48WKlt3xG
+O5KGf8Gm/K4zULTrCbhQIkAW9C+cTqDb7dDfZishCISI0LiD+89JYOlZMEBuKV+C
+JDvk26pb9LYb6SsNRCdSVeHvDHXIHX+KxLqihVxDMiZ4fLUmaqD5V3jz81tZQS/l
+hPsrXOlqOlPkYOLMx7lzxlVen11oXPBXYLr7dU8JnB4Uma5YmHkGR7NwJAtnOVva
+hOtjHlYyP39bzQ==
+-----END CERTIFICATE-----