Update test certs after expiry.v1.10.23

3 files changed, 172 insertions, 174 deletions

diff --git a/test/ref/DCP/encryption_test/ASSETMAP.xml b/test/ref/DCP/encryption_test/ASSETMAP.xml
index 9abf60a6..28301761 100644
--- a/test/ref/DCP/encryption_test/ASSETMAP.xml
+++ b/test/ref/DCP/encryption_test/ASSETMAP.xml
@@ -15,7 +15,7 @@
           <Path>pkl_5203f3d4-9d62-4062-8bf1-7a114eff99df.xml</Path>
           <VolumeIndex>1</VolumeIndex>
           <Offset>0</Offset>
-          <Length>8902</Length>
+          <Length>8801</Length>
         </Chunk>
       </ChunkList>
     </Asset>
@@ -26,7 +26,7 @@
           <Path>cpl_6affb8ee-0020-4dff-a53c-17652f6358ab.xml</Path>
           <VolumeIndex>1</VolumeIndex>
           <Offset>0</Offset>
-          <Length>9226</Length>
+          <Length>9125</Length>
         </Chunk>
       </ChunkList>
     </Asset>
diff --git a/test/ref/DCP/encryption_test/cpl_6affb8ee-0020-4dff-a53c-17652f6358ab.xml b/test/ref/DCP/encryption_test/cpl_6affb8ee-0020-4dff-a53c-17652f6358ab.xml
index 6203c884..d13085f8 100644
--- a/test/ref/DCP/encryption_test/cpl_6affb8ee-0020-4dff-a53c-17652f6358ab.xml
+++ b/test/ref/DCP/encryption_test/cpl_6affb8ee-0020-4dff-a53c-17652f6358ab.xml
@@ -42,10 +42,10 @@
   <Signer xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
     <dsig:X509Data>
       <dsig:X509IssuerSerial>
-        <dsig:X509IssuerName>dnQualifier=6eat8r33US71avuQEojmH\+bjk84=,CN=.smpte-430-2.INTERMEDIATE.NOT_FOR_PRODUCTION,OU=example.org,O=example.org</dsig:X509IssuerName>
+        <dsig:X509IssuerName>dnQualifier=rUEWSOEqt\+7TvKTtNYzhRtrewRo=,CN=.dcpomatic.smpte-430-2.INTERMEDIATE,OU=dcpomatic.com,O=dcpomatic.com</dsig:X509IssuerName>
         <dsig:X509SerialNumber>7</dsig:X509SerialNumber>
       </dsig:X509IssuerSerial>
-      <dsig:X509SubjectName>dnQualifier=QFVlym7fuql6bPOnY38aaO1ZPW4=,CN=CS.smpte-430-2.LEAF.NOT_FOR_PRODUCTION,OU=example.org,O=example.org</dsig:X509SubjectName>
+      <dsig:X509SubjectName>dnQualifier=1u9TlD4x32jl1c\+kSIKukb7ZZqA=,CN=CS.dcpomatic.smpte-430-2.LEAF,OU=dcpomatic.com,O=dcpomatic.com</dsig:X509SubjectName>
     </dsig:X509Data>
   </Signer>
   <dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
@@ -57,106 +57,105 @@
           <dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
         </dsig:Transforms>
         <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
-        <dsig:DigestValue>DBBENxFb5Qv377fb86n0KgUQ7go=</dsig:DigestValue>
+        <dsig:DigestValue>g/F5ffdTpDDZy8jYTirwvu6Gvic=</dsig:DigestValue>
       </dsig:Reference>
     </dsig:SignedInfo>
-    <dsig:SignatureValue>rhF1QacGUhxm1jfcgyBjAo2BmD4QxBl7c6Bzt8rjXXhR+NVT4ITeyxi39+94WwBx
-Yp8iQhF46bE2QGZAr+HnZZJGVG3ajeaQ4uvPp2KRC8sHpBlZ2rGGtyjXAflYjepw
-c1cLvRoAKbxOMW+ESxjyYOKgT0Bke0GhbzZ8+w+hGZLHxK9oTokIG9YDnRNUKN5W
-n6avbxuaT8wtZgVwD4qfKzMeJlYW3yDFo/2apQA5K+oCj/gfrS1habYqBoNo9kO1
-fWkQ7LIeRrYuzNlr5K4e/LyIm7SHwb9EGcA7K8WbDrHKvaJmTs/T01QhU9f+huk2
-ZGJMMCGHhiwcbVtqVhgJSQ==</dsig:SignatureValue>
+    <dsig:SignatureValue>EQdQJdkwpoj5BloaVdftQyzVJs2JQDjhBPecICfu6IQVpfV61hGQEKdmYmrvyZ90
+xphFjvPAnuLLuP/3yi0mNQbXwm1Wbeh5RwUsjb2z3I5KjAgtNfL4uFSfJWxKa7mt
+yp/LNsLekV0VxnJ5nr1r+21ujMWA8i1LFH+A7zrvv2b9JWg0HpCaHQU2q21rzRPD
+yoLhkjtXOe0PJdZg0aUXI/2QUH6l+V7sRIisDJHOyi+Y+T4skHCY1LsPUWStpukl
+3ir7jTOm/xgtH8p/gp8yb/5GikYqLFmNz3jSiVLshD6MJE45LA5v4DftmYGlMaX9
+R/ohfV1u4s42CaJXwTRT5w==</dsig:SignatureValue>
     <dsig:KeyInfo>
       <dsig:X509Data>
         <dsig:X509IssuerSerial>
-          <dsig:X509IssuerName>dnQualifier=6eat8r33US71avuQEojmH\+bjk84=,CN=.smpte-430-2.INTERMEDIATE.NOT_FOR_PRODUCTION,OU=example.org,O=example.org</dsig:X509IssuerName>
+          <dsig:X509IssuerName>dnQualifier=rUEWSOEqt\+7TvKTtNYzhRtrewRo=,CN=.dcpomatic.smpte-430-2.INTERMEDIATE,OU=dcpomatic.com,O=dcpomatic.com</dsig:X509IssuerName>
           <dsig:X509SerialNumber>7</dsig:X509SerialNumber>
         </dsig:X509IssuerSerial>
-        <dsig:X509Certificate>MIIEezCCA2OgAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBijEUMBIGA1UEChMLZXhh
-bXBsZS5vcmcxFDASBgNVBAsTC2V4YW1wbGUub3JnMTUwMwYDVQQDFCwuc21wdGUt
-NDMwLTIuSU5URVJNRURJQVRFLk5PVF9GT1JfUFJPRFVDVElPTjElMCMGA1UELhMc
-NmVhdDhyMzNVUzcxYXZ1UUVvam1IK2Jqazg0PTAeFw0xNTA2MDUxMzIwMDhaFw0y
-NTA1MzExMzIwMDhaMIGEMRQwEgYDVQQKEwtleGFtcGxlLm9yZzEUMBIGA1UECxML
-ZXhhbXBsZS5vcmcxLzAtBgNVBAMUJkNTLnNtcHRlLTQzMC0yLkxFQUYuTk9UX0ZP
-Ul9QUk9EVUNUSU9OMSUwIwYDVQQuExxRRlZseW03ZnVxbDZiUE9uWTM4YWFPMVpQ
-VzQ9MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08vRdRvUh31Oi96E
-GHqfmYs2GhxKS7Y1AJpVGjPWQyZFYkwspzG9voK6rMbnXEQ5HRDJ0jZ5DaxS7zrm
-YIOsX6DQpl2kY8MTHXmWZFg623HID+XAowFqkTG7UtUpXsZ/vj+gOKu0PQPmdRLM
-Rg5Hs2yQxSS7/SizuG52CrAmsIeab9u/AOL10uLRmUBzLMaXt4uPz2i+3PXi+uVu
-lfy3tEQ3+QRNNsH2G6O6sURR+4nYB0cLLlINpHTdBixfGU/Eb9g/wpD3zrGcAV6Z
-XvxULNd4RcxH8Ys15QuvtdMGwW/8LW1/03WO5XeQRkcoPF44yV4XUeTE5weXYAaM
-ZH7hMwIDAQABo4HvMIHsMAwGA1UdEwEB/wQCMAAwCwYDVR0PBAQDAgWgMB0GA1Ud
-DgQWBBRAVWXKbt+6qXps86djfxpo7Vk9bjCBrwYDVR0jBIGnMIGkgBTp5q3yvfdR
-LvVq+5ASiOYf5uOTzqGBiKSBhTCBgjEUMBIGA1UEChMLZXhhbXBsZS5vcmcxFDAS
-BgNVBAsTC2V4YW1wbGUub3JnMS0wKwYDVQQDFCQuc21wdGUtNDMwLTIuUk9PVC5O
-T1RfRk9SX1BST0RVQ1RJT04xJTAjBgNVBC4THERDblJkSEZiY3Y0QU5WVXEyK3dN
-VkFMRlNlYz2CAQYwDQYJKoZIhvcNAQELBQADggEBAA4CsCDn8UKBcH7wroorNKbf
-ZVzwGSxNyCMTmDm38ZmriNpV7FCNTLek4xmf21ITafC9nNxpbWA7l9bG5dRnktwa
-JSlHZKDKKVEUHJYu/47YUlmt4YNVo+zN0iB/QLXoHu6yGw3/N7z4sBDyLGGPl5mh
-sAxuXpFr1ruTQVqx483L7ie/p0GV9vsoAJQTRTnIcvEs7rVHxIWEsiOE8AZozW72
-jIBKSy9jsxSGYgmMgbdkrs5c2hBvVim5i58PIzSCo/lI/5WRREESZIyZ9zIBSwIS
-cYueAupiCrOxzY6Xg3GZlMbbHElp4MnDeV3zv90UAuZXomorCOcnutqUe36J63E=</dsig:X509Certificate>
+        <dsig:X509Certificate>MIIEaTCCA1GgAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBhTEWMBQGA1UEChMNZGNw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</dsig:X509Certificate>
       </dsig:X509Data>
       <dsig:X509Data>
         <dsig:X509IssuerSerial>
-          <dsig:X509IssuerName>dnQualifier=DCnRdHFbcv4ANVUq2\+wMVALFSec=,CN=.smpte-430-2.ROOT.NOT_FOR_PRODUCTION,OU=example.org,O=example.org</dsig:X509IssuerName>
+          <dsig:X509IssuerName>dnQualifier=V54yfuoIWYLT5YM\+LabHTaiSAtI=,CN=.dcpomatic.smpte-430-2.ROOT,OU=dcpomatic.com,O=dcpomatic.com</dsig:X509IssuerName>
           <dsig:X509SerialNumber>6</dsig:X509SerialNumber>
         </dsig:X509IssuerSerial>
-        <dsig:X509Certificate>MIIEfzCCA2egAwIBAgIBBjANBgkqhkiG9w0BAQsFADCBgjEUMBIGA1UEChMLZXhh
-bXBsZS5vcmcxFDASBgNVBAsTC2V4YW1wbGUub3JnMS0wKwYDVQQDFCQuc21wdGUt
-NDMwLTIuUk9PVC5OT1RfRk9SX1BST0RVQ1RJT04xJTAjBgNVBC4THERDblJkSEZi
-Y3Y0QU5WVXEyK3dNVkFMRlNlYz0wHhcNMTUwNjA1MTMyMDA4WhcNMjUwNjAxMTMy
-MDA4WjCBijEUMBIGA1UEChMLZXhhbXBsZS5vcmcxFDASBgNVBAsTC2V4YW1wbGUu
-b3JnMTUwMwYDVQQDFCwuc21wdGUtNDMwLTIuSU5URVJNRURJQVRFLk5PVF9GT1Jf
-UFJPRFVDVElPTjElMCMGA1UELhMcNmVhdDhyMzNVUzcxYXZ1UUVvam1IK2Jqazg0
-PTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMjv758HrPTeThATXaFU
-JCyUlGbLxETJQ2lqXx5a9XL/FDNsMN11IZ9hhUfj/KV2aNDYJ2nsaInAeZ00kNgG
-OOPAqF0KainrO4vlYQB10nwcmfvI/BtqW4GFXBDYpIXvyF7ss4e4Zp52h+UVkfTY
-Dwf10W7vP8Gr1wKaIvFsuGbB35D3PfX+4lacF2cNMFSHLj+oiLug5vOpoo/QTS+o
-gBl2mGctSLaEBE9x/HO10Dy7WXrUpokPGcHhJzwOlbAnVt6X4kANVATf5ffy0UQE
-uROgsSUm+hK/HqmUXTE6Gy7Hi7sktdI6X3EnBdzse1vxNQTrKy6bMXswcgOkklnk
-5AECAwEAAaOB9TCB8jASBgNVHRMBAf8ECDAGAQH/AgECMAsGA1UdDwQEAwIBBjAd
-BgNVHQ4EFgQU6eat8r33US71avuQEojmH+bjk84wga8GA1UdIwSBpzCBpIAUDCnR
-dHFbcv4ANVUq2+wMVALFSeehgYikgYUwgYIxFDASBgNVBAoTC2V4YW1wbGUub3Jn
-MRQwEgYDVQQLEwtleGFtcGxlLm9yZzEtMCsGA1UEAxQkLnNtcHRlLTQzMC0yLlJP
-T1QuTk9UX0ZPUl9QUk9EVUNUSU9OMSUwIwYDVQQuExxEQ25SZEhGYmN2NEFOVlVx
-Mit3TVZBTEZTZWM9ggEFMA0GCSqGSIb3DQEBCwUAA4IBAQBGr/uVKvBE7yGcPdOG
-AaacD8zmEkb8BL+otrumW1BqAI0BIVghvuTDAKtk/cFy7Mbnnp/mTJ6h5F7lDON4
-YVBQ9gouw5+pLM61r/ZTF+shiWA4C4cwWb1X/gw82TXD2wXch9IJmcblrfrabHkB
-Y3wyyn5unqHm+uy/ZsNzoTmRcrxnPua5DyZKxGBHV0TEDzJMUMgluRcQwRs0HmG1
-vWeROkXRWyYiY2QAdpINuQUKUqjtFTtOGcA3I/Hd7vUiqqxNr9fL0H/HDvAbEmIw
-+YSFJ9uFyESvls8Lv5tydwhnqJBIKk19/CDIwMAPZnyT1WT3XwnD5hVRYljpgjm5
-xwd0</dsig:X509Certificate>
+        <dsig:X509Certificate>MIIEbTCCA1WgAwIBAgIBBjANBgkqhkiG9w0BAQsFADB9MRYwFAYDVQQKEw1kY3Bv
+bWF0aWMuY29tMRYwFAYDVQQLEw1kY3BvbWF0aWMuY29tMSQwIgYDVQQDExsuZGNw
+b21hdGljLnNtcHRlLTQzMC0yLlJPT1QxJTAjBgNVBC4THFY1NHlmdW9JV1lMVDVZ
+TStMYWJIVGFpU0F0ST0wHhcNMjUwNjEwMTIxMDU0WhcNMzUwNjA3MTIxMDU0WjCB
+hTEWMBQGA1UEChMNZGNwb21hdGljLmNvbTEWMBQGA1UECxMNZGNwb21hdGljLmNv
+bTEsMCoGA1UEAxMjLmRjcG9tYXRpYy5zbXB0ZS00MzAtMi5JTlRFUk1FRElBVEUx
+JTAjBgNVBC4THHJVRVdTT0VxdCs3VHZLVHROWXpoUnRyZXdSbz0wggEiMA0GCSqG
+SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8r486crE58LOPZw8GKFM8juyIlWuG8l+v
+zAfw8UUn6ncdm10aHGg6fVThyU5azezfi0X8vaSXW4DKIvSHe97Od33eEJu2JeLv
+u+zofIaS/Aj8aMWx6UxJsLEVL/vHg8cZjyhniCm5oOAuqzVFU+PwCsAq3ddh3xc9
+lqmSzHWqxxsc9Ekh5RQowRpqI+LdI5LmmNzdr8A4+fgTTsYlJwI5RVpvQqjWUH5O
+liLIYFJkNtI/V5hvKeL5+dbx5NQq1DibsgA0Rtst4qIhieRtF8ijfYf5cVQutj8z
+oNxi+zxhCLKdHz8EQxpDccrGySxXifGpji+7SyGytvfQecyLM1wfAgMBAAGjge4w
+geswEgYDVR0TAQH/BAgwBgEB/wIBAjALBgNVHQ8EBAMCAQYwHQYDVR0OBBYEFK1B
+FkjhKrfu07yk7TWM4Uba3sEaMIGoBgNVHSMEgaAwgZ2AFFeeMn7qCFmC0+WDPi2m
+x02okgLSoYGBpH8wfTEWMBQGA1UEChMNZGNwb21hdGljLmNvbTEWMBQGA1UECxMN
+ZGNwb21hdGljLmNvbTEkMCIGA1UEAxMbLmRjcG9tYXRpYy5zbXB0ZS00MzAtMi5S
+T09UMSUwIwYDVQQuExxWNTR5ZnVvSVdZTFQ1WU0rTGFiSFRhaVNBdEk9ggEFMA0G
+CSqGSIb3DQEBCwUAA4IBAQAQwVPs/LtNkMw0RMKx8Zy5EfiUQwnrfd126IXtpBlK
+PEubaY9LYPMuPavWmCYIAv6wpVuBWosFxZtv77cIe8Pqir4g/1eBoLMEgFBB6mid
+1nJ5HEerEQS7Itg6GmgZ24vb4Ne9nZkN8iysh6VLQI6Iz7HIr3I/dNJwi6M7jai8
+C1zuzzTJ/qXMZhIMjovXOfUxKZqRA5bpJl0ogB/byqhOcGjcvvkom6cWYCWfXjSg
+KSm0704ImezwoFdHO18jo2u4ghgeXUBCyLcew5aVaVsSktuUtEgaYXgm0tX1HfEg
+aSqfFDSdb0Z4mbUrVHGE58wckEG1TQCQ2Ypi0qSaV+v5</dsig:X509Certificate>
       </dsig:X509Data>
       <dsig:X509Data>
         <dsig:X509IssuerSerial>
-          <dsig:X509IssuerName>dnQualifier=DCnRdHFbcv4ANVUq2\+wMVALFSec=,CN=.smpte-430-2.ROOT.NOT_FOR_PRODUCTION,OU=example.org,O=example.org</dsig:X509IssuerName>
+          <dsig:X509IssuerName>dnQualifier=V54yfuoIWYLT5YM\+LabHTaiSAtI=,CN=.dcpomatic.smpte-430-2.ROOT,OU=dcpomatic.com,O=dcpomatic.com</dsig:X509IssuerName>
           <dsig:X509SerialNumber>5</dsig:X509SerialNumber>
         </dsig:X509IssuerSerial>
-        <dsig:X509Certificate>MIIEdzCCA1+gAwIBAgIBBTANBgkqhkiG9w0BAQsFADCBgjEUMBIGA1UEChMLZXhh
-bXBsZS5vcmcxFDASBgNVBAsTC2V4YW1wbGUub3JnMS0wKwYDVQQDFCQuc21wdGUt
-NDMwLTIuUk9PVC5OT1RfRk9SX1BST0RVQ1RJT04xJTAjBgNVBC4THERDblJkSEZi
-Y3Y0QU5WVXEyK3dNVkFMRlNlYz0wHhcNMTUwNjA1MTMyMDA4WhcNMjUwNjAyMTMy
-MDA4WjCBgjEUMBIGA1UEChMLZXhhbXBsZS5vcmcxFDASBgNVBAsTC2V4YW1wbGUu
-b3JnMS0wKwYDVQQDFCQuc21wdGUtNDMwLTIuUk9PVC5OT1RfRk9SX1BST0RVQ1RJ
-T04xJTAjBgNVBC4THERDblJkSEZiY3Y0QU5WVXEyK3dNVkFMRlNlYz0wggEiMA0G
-CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQdNLi0U0p9kkfszAymkW4fVTqG4KZ
-qNlO43eE4+ItjTr0qDEvyyq94tp2w1/7aag87Nzb386ibqFzldEt3u8xy9CXanUy
-Fg2vRzAJ+WgngmK8AdzHqdPzYTtIdMNj0GQkF+ze0VLM1QfAGUvsRzcqYJADD9om
-vsOnZiub92ezbL5swLaLpZq10i2HGYqDZxKlcslmaVXPgh7acmI9b3ledpLjOtvR
-NPI6tfy8jhjvCZY81+V5iZqyKTezrLTqqgNBlFjzIdCT1BRlbOlS55iOloRK8q9F
-TXqV6M1jqN6T4FlKzorjYWNEKp1V58DHBosAB0FXs+Sc10WWTuqL9Q3VAgMBAAGj
-gfUwgfIwEgYDVR0TAQH/BAgwBgEB/wIBAzALBgNVHQ8EBAMCAQYwHQYDVR0OBBYE
-FAwp0XRxW3L+ADVVKtvsDFQCxUnnMIGvBgNVHSMEgacwgaSAFAwp0XRxW3L+ADVV
-KtvsDFQCxUnnoYGIpIGFMIGCMRQwEgYDVQQKEwtleGFtcGxlLm9yZzEUMBIGA1UE
-CxMLZXhhbXBsZS5vcmcxLTArBgNVBAMUJC5zbXB0ZS00MzAtMi5ST09ULk5PVF9G
-T1JfUFJPRFVDVElPTjElMCMGA1UELhMcRENuUmRIRmJjdjRBTlZVcTIrd01WQUxG
-U2VjPYIBBTANBgkqhkiG9w0BAQsFAAOCAQEAEOGcZTz1XGfZunxCnclrNDDsgLhy
-RvqxG7Li7enVyKF5798ckA17jCnkY/W9YwtjpgfEpjw9aGdCy6cviNu51jT5F9qg
-y0O2OXhtX47aS9G6r1m50cBmrciBxrqSTr6/co6jcRImRhTpvVcLcbv3emCLogBw
-9v93abXvbT+GZ6yc2OOArTZCFlrLW8XTDSDrPp/hida2NjZOrxJj6iFEh6+M+S7Z
-T/bwFNfuPDsDhtccoVt/hIM0imFnjKlwbo3HbJ3v+Lhy2oUS66d5ELHuuQnMuKFT
-pxf6/gl42q4gFbwBDp6jxy5L1J4LZGZIwsoTv6dFjo1MNttqmfMTheiwpQ==</dsig:X509Certificate>
+        <dsig:X509Certificate>MIIEZDCCA0ygAwIBAgIBBTANBgkqhkiG9w0BAQsFADB9MRYwFAYDVQQKEw1kY3Bv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</dsig:X509Certificate>
       </dsig:X509Data>
     </dsig:KeyInfo>
   </dsig:Signature>
diff --git a/test/ref/DCP/encryption_test/pkl_5203f3d4-9d62-4062-8bf1-7a114eff99df.xml b/test/ref/DCP/encryption_test/pkl_5203f3d4-9d62-4062-8bf1-7a114eff99df.xml
index fb0313ab..992c739a 100644
--- a/test/ref/DCP/encryption_test/pkl_5203f3d4-9d62-4062-8bf1-7a114eff99df.xml
+++ b/test/ref/DCP/encryption_test/pkl_5203f3d4-9d62-4062-8bf1-7a114eff99df.xml
@@ -9,8 +9,8 @@
     <Asset>
       <Id>urn:uuid:6affb8ee-0020-4dff-a53c-17652f6358ab</Id>
       <AnnotationText>6affb8ee-0020-4dff-a53c-17652f6358ab</AnnotationText>
-      <Hash>sLWF9OcgdkvBUH1VcNiwseLA3sA=</Hash>
-      <Size>9226</Size>
+      <Hash>CIW518Gg3m2fuJ9edrloerwS6Ns=</Hash>
+      <Size>9125</Size>
       <Type>text/xml</Type>
       <OriginalFileName>cpl_6affb8ee-0020-4dff-a53c-17652f6358ab.xml</OriginalFileName>
     </Asset>
@@ -34,10 +34,10 @@
   <Signer xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
     <dsig:X509Data>
       <dsig:X509IssuerSerial>
-        <dsig:X509IssuerName>dnQualifier=6eat8r33US71avuQEojmH\+bjk84=,CN=.smpte-430-2.INTERMEDIATE.NOT_FOR_PRODUCTION,OU=example.org,O=example.org</dsig:X509IssuerName>
+        <dsig:X509IssuerName>dnQualifier=rUEWSOEqt\+7TvKTtNYzhRtrewRo=,CN=.dcpomatic.smpte-430-2.INTERMEDIATE,OU=dcpomatic.com,O=dcpomatic.com</dsig:X509IssuerName>
         <dsig:X509SerialNumber>7</dsig:X509SerialNumber>
       </dsig:X509IssuerSerial>
-      <dsig:X509SubjectName>dnQualifier=QFVlym7fuql6bPOnY38aaO1ZPW4=,CN=CS.smpte-430-2.LEAF.NOT_FOR_PRODUCTION,OU=example.org,O=example.org</dsig:X509SubjectName>
+      <dsig:X509SubjectName>dnQualifier=1u9TlD4x32jl1c\+kSIKukb7ZZqA=,CN=CS.dcpomatic.smpte-430-2.LEAF,OU=dcpomatic.com,O=dcpomatic.com</dsig:X509SubjectName>
     </dsig:X509Data>
   </Signer>
   <dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
@@ -49,106 +49,105 @@
           <dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
         </dsig:Transforms>
         <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
-        <dsig:DigestValue>OU1UpJxBmpxK8SE5yfe8aJsqoIw=</dsig:DigestValue>
+        <dsig:DigestValue>OqQD2nVqnEVJ35ZzgsVpGr0MAoE=</dsig:DigestValue>
       </dsig:Reference>
     </dsig:SignedInfo>
-    <dsig:SignatureValue>ypg6tt5iJi7YEUJQfEQmZeigXzcm2xn/J59tqqYBqwmAch1ia//Khyo6m7/HpQJl
-2Y5swUI8MtmzdV3gj3urd8WuQsDWFLflIHHiIanYE/XCdFZ8lV/nvyCkAaf/AH2V
-W7bWD8/fYXJD2G9a2tRiWTjzfgpsTk+ox+C12Y/SebWAQ97sSLIMwwmQIYK2kTnh
-nbKSuhk+v+V2ObpYl48zXu3za3Yt77rCdcGgPwYr/NUI47ascpnueNw48clDtjp+
-775jeA5ZG5lBR3VGTLwvoOXT3CH/FgG0DPSLmYbRnOzEShVUt7xFgbxMgNTYOGQJ
-3ipS6qmHgWHjX3/fo6isgg==</dsig:SignatureValue>
+    <dsig:SignatureValue>PeYFOuY1taBEZ8qq4H/84Q0PWLp44pkIyZvurgek0HSHby/OetkV5ioKnUNKgMw4
+b0alsD6Uq51Og2aQdl+o6TsigMt6GQ8mumKQE9GwcN9VxVxWCK6LH5wLMl1m9PbF
+OT/RbZTsrDIINx/Cn+2Q3SR22ddQ0AYdUqG+fVs5j/lUDcyria9vrdGTZblooI1J
+69lI/VZbczvrH8Qgq+aQpMdQV6GRDzabpLme/6o5fFDKcYtOeEi81pA3veVIi0Dx
+H/gbTJg/YieH2lfwGB1hx70vRWZo0yDbAXpB4iY5quoSQmrTbQtLOwqjEf988Pbv
+VZuaYwLWao4PNSQQ6UDBaA==</dsig:SignatureValue>
     <dsig:KeyInfo>
       <dsig:X509Data>
         <dsig:X509IssuerSerial>
-          <dsig:X509IssuerName>dnQualifier=6eat8r33US71avuQEojmH\+bjk84=,CN=.smpte-430-2.INTERMEDIATE.NOT_FOR_PRODUCTION,OU=example.org,O=example.org</dsig:X509IssuerName>
+          <dsig:X509IssuerName>dnQualifier=rUEWSOEqt\+7TvKTtNYzhRtrewRo=,CN=.dcpomatic.smpte-430-2.INTERMEDIATE,OU=dcpomatic.com,O=dcpomatic.com</dsig:X509IssuerName>
           <dsig:X509SerialNumber>7</dsig:X509SerialNumber>
         </dsig:X509IssuerSerial>
-        <dsig:X509Certificate>MIIEezCCA2OgAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBijEUMBIGA1UEChMLZXhh
-bXBsZS5vcmcxFDASBgNVBAsTC2V4YW1wbGUub3JnMTUwMwYDVQQDFCwuc21wdGUt
-NDMwLTIuSU5URVJNRURJQVRFLk5PVF9GT1JfUFJPRFVDVElPTjElMCMGA1UELhMc
-NmVhdDhyMzNVUzcxYXZ1UUVvam1IK2Jqazg0PTAeFw0xNTA2MDUxMzIwMDhaFw0y
-NTA1MzExMzIwMDhaMIGEMRQwEgYDVQQKEwtleGFtcGxlLm9yZzEUMBIGA1UECxML
-ZXhhbXBsZS5vcmcxLzAtBgNVBAMUJkNTLnNtcHRlLTQzMC0yLkxFQUYuTk9UX0ZP
-Ul9QUk9EVUNUSU9OMSUwIwYDVQQuExxRRlZseW03ZnVxbDZiUE9uWTM4YWFPMVpQ
-VzQ9MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08vRdRvUh31Oi96E
-GHqfmYs2GhxKS7Y1AJpVGjPWQyZFYkwspzG9voK6rMbnXEQ5HRDJ0jZ5DaxS7zrm
-YIOsX6DQpl2kY8MTHXmWZFg623HID+XAowFqkTG7UtUpXsZ/vj+gOKu0PQPmdRLM
-Rg5Hs2yQxSS7/SizuG52CrAmsIeab9u/AOL10uLRmUBzLMaXt4uPz2i+3PXi+uVu
-lfy3tEQ3+QRNNsH2G6O6sURR+4nYB0cLLlINpHTdBixfGU/Eb9g/wpD3zrGcAV6Z
-XvxULNd4RcxH8Ys15QuvtdMGwW/8LW1/03WO5XeQRkcoPF44yV4XUeTE5weXYAaM
-ZH7hMwIDAQABo4HvMIHsMAwGA1UdEwEB/wQCMAAwCwYDVR0PBAQDAgWgMB0GA1Ud
-DgQWBBRAVWXKbt+6qXps86djfxpo7Vk9bjCBrwYDVR0jBIGnMIGkgBTp5q3yvfdR
-LvVq+5ASiOYf5uOTzqGBiKSBhTCBgjEUMBIGA1UEChMLZXhhbXBsZS5vcmcxFDAS
-BgNVBAsTC2V4YW1wbGUub3JnMS0wKwYDVQQDFCQuc21wdGUtNDMwLTIuUk9PVC5O
-T1RfRk9SX1BST0RVQ1RJT04xJTAjBgNVBC4THERDblJkSEZiY3Y0QU5WVXEyK3dN
-VkFMRlNlYz2CAQYwDQYJKoZIhvcNAQELBQADggEBAA4CsCDn8UKBcH7wroorNKbf
-ZVzwGSxNyCMTmDm38ZmriNpV7FCNTLek4xmf21ITafC9nNxpbWA7l9bG5dRnktwa
-JSlHZKDKKVEUHJYu/47YUlmt4YNVo+zN0iB/QLXoHu6yGw3/N7z4sBDyLGGPl5mh
-sAxuXpFr1ruTQVqx483L7ie/p0GV9vsoAJQTRTnIcvEs7rVHxIWEsiOE8AZozW72
-jIBKSy9jsxSGYgmMgbdkrs5c2hBvVim5i58PIzSCo/lI/5WRREESZIyZ9zIBSwIS
-cYueAupiCrOxzY6Xg3GZlMbbHElp4MnDeV3zv90UAuZXomorCOcnutqUe36J63E=</dsig:X509Certificate>
+        <dsig:X509Certificate>MIIEaTCCA1GgAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBhTEWMBQGA1UEChMNZGNw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</dsig:X509Certificate>
       </dsig:X509Data>
       <dsig:X509Data>
         <dsig:X509IssuerSerial>
-          <dsig:X509IssuerName>dnQualifier=DCnRdHFbcv4ANVUq2\+wMVALFSec=,CN=.smpte-430-2.ROOT.NOT_FOR_PRODUCTION,OU=example.org,O=example.org</dsig:X509IssuerName>
+          <dsig:X509IssuerName>dnQualifier=V54yfuoIWYLT5YM\+LabHTaiSAtI=,CN=.dcpomatic.smpte-430-2.ROOT,OU=dcpomatic.com,O=dcpomatic.com</dsig:X509IssuerName>
           <dsig:X509SerialNumber>6</dsig:X509SerialNumber>
         </dsig:X509IssuerSerial>
-        <dsig:X509Certificate>MIIEfzCCA2egAwIBAgIBBjANBgkqhkiG9w0BAQsFADCBgjEUMBIGA1UEChMLZXhh
-bXBsZS5vcmcxFDASBgNVBAsTC2V4YW1wbGUub3JnMS0wKwYDVQQDFCQuc21wdGUt
-NDMwLTIuUk9PVC5OT1RfRk9SX1BST0RVQ1RJT04xJTAjBgNVBC4THERDblJkSEZi
-Y3Y0QU5WVXEyK3dNVkFMRlNlYz0wHhcNMTUwNjA1MTMyMDA4WhcNMjUwNjAxMTMy
-MDA4WjCBijEUMBIGA1UEChMLZXhhbXBsZS5vcmcxFDASBgNVBAsTC2V4YW1wbGUu
-b3JnMTUwMwYDVQQDFCwuc21wdGUtNDMwLTIuSU5URVJNRURJQVRFLk5PVF9GT1Jf
-UFJPRFVDVElPTjElMCMGA1UELhMcNmVhdDhyMzNVUzcxYXZ1UUVvam1IK2Jqazg0
-PTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMjv758HrPTeThATXaFU
-JCyUlGbLxETJQ2lqXx5a9XL/FDNsMN11IZ9hhUfj/KV2aNDYJ2nsaInAeZ00kNgG
-OOPAqF0KainrO4vlYQB10nwcmfvI/BtqW4GFXBDYpIXvyF7ss4e4Zp52h+UVkfTY
-Dwf10W7vP8Gr1wKaIvFsuGbB35D3PfX+4lacF2cNMFSHLj+oiLug5vOpoo/QTS+o
-gBl2mGctSLaEBE9x/HO10Dy7WXrUpokPGcHhJzwOlbAnVt6X4kANVATf5ffy0UQE
-uROgsSUm+hK/HqmUXTE6Gy7Hi7sktdI6X3EnBdzse1vxNQTrKy6bMXswcgOkklnk
-5AECAwEAAaOB9TCB8jASBgNVHRMBAf8ECDAGAQH/AgECMAsGA1UdDwQEAwIBBjAd
-BgNVHQ4EFgQU6eat8r33US71avuQEojmH+bjk84wga8GA1UdIwSBpzCBpIAUDCnR
-dHFbcv4ANVUq2+wMVALFSeehgYikgYUwgYIxFDASBgNVBAoTC2V4YW1wbGUub3Jn
-MRQwEgYDVQQLEwtleGFtcGxlLm9yZzEtMCsGA1UEAxQkLnNtcHRlLTQzMC0yLlJP
-T1QuTk9UX0ZPUl9QUk9EVUNUSU9OMSUwIwYDVQQuExxEQ25SZEhGYmN2NEFOVlVx
-Mit3TVZBTEZTZWM9ggEFMA0GCSqGSIb3DQEBCwUAA4IBAQBGr/uVKvBE7yGcPdOG
-AaacD8zmEkb8BL+otrumW1BqAI0BIVghvuTDAKtk/cFy7Mbnnp/mTJ6h5F7lDON4
-YVBQ9gouw5+pLM61r/ZTF+shiWA4C4cwWb1X/gw82TXD2wXch9IJmcblrfrabHkB
-Y3wyyn5unqHm+uy/ZsNzoTmRcrxnPua5DyZKxGBHV0TEDzJMUMgluRcQwRs0HmG1
-vWeROkXRWyYiY2QAdpINuQUKUqjtFTtOGcA3I/Hd7vUiqqxNr9fL0H/HDvAbEmIw
-+YSFJ9uFyESvls8Lv5tydwhnqJBIKk19/CDIwMAPZnyT1WT3XwnD5hVRYljpgjm5
-xwd0</dsig:X509Certificate>
+        <dsig:X509Certificate>MIIEbTCCA1WgAwIBAgIBBjANBgkqhkiG9w0BAQsFADB9MRYwFAYDVQQKEw1kY3Bv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</dsig:X509Certificate>
       </dsig:X509Data>
       <dsig:X509Data>
         <dsig:X509IssuerSerial>
-          <dsig:X509IssuerName>dnQualifier=DCnRdHFbcv4ANVUq2\+wMVALFSec=,CN=.smpte-430-2.ROOT.NOT_FOR_PRODUCTION,OU=example.org,O=example.org</dsig:X509IssuerName>
+          <dsig:X509IssuerName>dnQualifier=V54yfuoIWYLT5YM\+LabHTaiSAtI=,CN=.dcpomatic.smpte-430-2.ROOT,OU=dcpomatic.com,O=dcpomatic.com</dsig:X509IssuerName>
           <dsig:X509SerialNumber>5</dsig:X509SerialNumber>
         </dsig:X509IssuerSerial>
-        <dsig:X509Certificate>MIIEdzCCA1+gAwIBAgIBBTANBgkqhkiG9w0BAQsFADCBgjEUMBIGA1UEChMLZXhh
-bXBsZS5vcmcxFDASBgNVBAsTC2V4YW1wbGUub3JnMS0wKwYDVQQDFCQuc21wdGUt
-NDMwLTIuUk9PVC5OT1RfRk9SX1BST0RVQ1RJT04xJTAjBgNVBC4THERDblJkSEZi
-Y3Y0QU5WVXEyK3dNVkFMRlNlYz0wHhcNMTUwNjA1MTMyMDA4WhcNMjUwNjAyMTMy
-MDA4WjCBgjEUMBIGA1UEChMLZXhhbXBsZS5vcmcxFDASBgNVBAsTC2V4YW1wbGUu
-b3JnMS0wKwYDVQQDFCQuc21wdGUtNDMwLTIuUk9PVC5OT1RfRk9SX1BST0RVQ1RJ
-T04xJTAjBgNVBC4THERDblJkSEZiY3Y0QU5WVXEyK3dNVkFMRlNlYz0wggEiMA0G
-CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQdNLi0U0p9kkfszAymkW4fVTqG4KZ
-qNlO43eE4+ItjTr0qDEvyyq94tp2w1/7aag87Nzb386ibqFzldEt3u8xy9CXanUy
-Fg2vRzAJ+WgngmK8AdzHqdPzYTtIdMNj0GQkF+ze0VLM1QfAGUvsRzcqYJADD9om
-vsOnZiub92ezbL5swLaLpZq10i2HGYqDZxKlcslmaVXPgh7acmI9b3ledpLjOtvR
-NPI6tfy8jhjvCZY81+V5iZqyKTezrLTqqgNBlFjzIdCT1BRlbOlS55iOloRK8q9F
-TXqV6M1jqN6T4FlKzorjYWNEKp1V58DHBosAB0FXs+Sc10WWTuqL9Q3VAgMBAAGj
-gfUwgfIwEgYDVR0TAQH/BAgwBgEB/wIBAzALBgNVHQ8EBAMCAQYwHQYDVR0OBBYE
-FAwp0XRxW3L+ADVVKtvsDFQCxUnnMIGvBgNVHSMEgacwgaSAFAwp0XRxW3L+ADVV
-KtvsDFQCxUnnoYGIpIGFMIGCMRQwEgYDVQQKEwtleGFtcGxlLm9yZzEUMBIGA1UE
-CxMLZXhhbXBsZS5vcmcxLTArBgNVBAMUJC5zbXB0ZS00MzAtMi5ST09ULk5PVF9G
-T1JfUFJPRFVDVElPTjElMCMGA1UELhMcRENuUmRIRmJjdjRBTlZVcTIrd01WQUxG
-U2VjPYIBBTANBgkqhkiG9w0BAQsFAAOCAQEAEOGcZTz1XGfZunxCnclrNDDsgLhy
-RvqxG7Li7enVyKF5798ckA17jCnkY/W9YwtjpgfEpjw9aGdCy6cviNu51jT5F9qg
-y0O2OXhtX47aS9G6r1m50cBmrciBxrqSTr6/co6jcRImRhTpvVcLcbv3emCLogBw
-9v93abXvbT+GZ6yc2OOArTZCFlrLW8XTDSDrPp/hida2NjZOrxJj6iFEh6+M+S7Z
-T/bwFNfuPDsDhtccoVt/hIM0imFnjKlwbo3HbJ3v+Lhy2oUS66d5ELHuuQnMuKFT
-pxf6/gl42q4gFbwBDp6jxy5L1J4LZGZIwsoTv6dFjo1MNttqmfMTheiwpQ==</dsig:X509Certificate>
+        <dsig:X509Certificate>MIIEZDCCA0ygAwIBAgIBBTANBgkqhkiG9w0BAQsFADB9MRYwFAYDVQQKEw1kY3Bv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</dsig:X509Certificate>
       </dsig:X509Data>
     </dsig:KeyInfo>
   </dsig:Signature>