From 6c0aae714f6bcaf4f7e8531da5995eefcfb3f514 Mon Sep 17 00:00:00 2001
From: JacobBarthelmeh <jacob@wolfssl.com>
Date: Sun, 7 Jul 2024 23:38:29 -0700
Subject: [PATCH] update over max ext test certs and add them to renew script

---
 certs/test/cert-over-max-altnames.der | Bin 0 -> 2891 bytes
 certs/test/cert-over-max-altnames.pem |  34 ++--
 certs/test/cert-over-max-nc.der       | Bin 0 -> 2652 bytes
 certs/test/cert-over-max-nc.pem       |  34 ++--
 certs/test/gen-ext-certs.sh           | 224 ++++++++++++++++++++++++++
 5 files changed, 258 insertions(+), 34 deletions(-)
 create mode 100644 certs/test/cert-over-max-altnames.der
 create mode 100644 certs/test/cert-over-max-nc.der

diff --git a/certs/test/cert-over-max-altnames.der b/certs/test/cert-over-max-altnames.der
new file mode 100644
index 0000000000000000000000000000000000000000..d1b5cc935da9723a16865ce1a64c18720e76e3eb
GIT binary patch
literal 2891
zcmc)M|5MX-9Ki8?HpT`UI)MZgh%d$w2K#*5=ZlFN#tGC?SXzNsAdUgSrV`AEsqH+t
zjxaBsht>rpg$5c52vLOSk!@lZ@B<`9-t}#DO&H*LM@Ef4V;^6if1n?Bx98{ezT4yW
zxqICkwJNrv)<AWWM2v{Vp&^p7tlslc+RWmOggrM^I$@B!j0X7!B-W(Y+z&z!g;a!^
zF$EgnFWKSeA0pnN!&K<9#gHpyT9fg$d}IF76PZ$$YO2zg<r}e3G<fk$pi*Hrl@{uB
z&qik$3znWLl!`Q?q1dR`?=LnQuyAzc;#rAux!G(^UOZo3UYcBBDnp~ff^ZV0Q3j<5
z5+!pyNu!=G-u(YyRwVY}KM9eFBvxd(2(==CVk?4(`jw8P&`VKAQgd%Ik7mwjD^%{w
zn#La;7D>Zs+oYuMZlZg<-C~qIuTV9_Xb;~Aj{a?E+hm%>zTb@h;W+k1akfgLK09k0
zbl2_Pxn{~>YF0gEJ0JMoPaj`tAK6>E9nC%Kls{4JYWb+Do_Rc??Ye8G+SYEfS~7Mq
zH_eYt^&PIzo!F4#D9CMmq-!)XM7?Tw!$jr!p&pC<m#bs9Hk-y{ZkMk~P13!;u=;_e
zwTjx*FnOd}YWTJ!l&L-Ee!HvaM$w^t(d+It72MmYJ`+FEZMv8fHpZNiFC2f-v~VpX
zL%vecqBV%JF+<#Q4X&)T$j|-0SNu7i(D6*4i+WuwK}5(ItIUpCWrLp2fae8AuJE(U
zdOXo-Rq7Aqm+dXpV~cOuS2!pF6bVWLiULK0VnDI~RnXF}qcAy*Z_06e$$5Oqfqcn{
ze94h~$(ek~p?nEdI8@<Kg+mn%RX9}PP=!Mk4plf*;ZQ|D6#-QQR1r``KotR11XK}F
zML-n+RU}lAP(?x&2~{Likx)fK6$w=&RFP1nfhrADX`o62RT`+$K$QlnG*G31Dh*Uo
zP(?u%1yvMOQBXxe6$MokR8dexK@|;EG*r=0MMD)0RWwx5P(?!(4OKK$F;K-o6$4ca
zR54J+KotX33{){t#XuDcRV-AoP{l$O3so#su~5ZA6$@1?r&{LQq8y8F&c!ze<C~N5
z&C&SgY<zP#zBwJ=9FK2-4-@z>fe#b-Fo6#f_%MMF6ZkNJ4-@z>fzP|}eSYu8=Ud?O
z?tFeO@OigBKNtACd!L^ReBRCPn{%uG;p>j)PUyMrAR^n~tFc=;n!{s9<}b&G52V+1
zf0^{k+78h|0%LNo@VDRj`nzoH2hBAfUi@K?qGa-&yy3co+nn>N>5WCx57eEOu%Rt+
zpPh&u3?8U=#mB6k?{l;g7v#w)Q_iq+S1aoaI(PL>_iTDAl4u##iMwpnv64CbRJY<?
zeR$+)Cw5ZO)E+<U$Xr`}Hz457t(3&{Lot6lSCKQfYorxFA04l{PO6;iwtutdtEYeM
zEzIlRcja{O^r!0P{?Tjgwbio`_M)xQiMalr3rs{p+h0dtYRTGtVE*^xFHln{U9Gcu
peeUMQvV*pNawd9C%HOQ5aD8H57!J{`FPVGN^v0!{IrjeMe*t?I69E7K

literal 0
HcmV?d00001

diff --git a/certs/test/cert-over-max-altnames.pem b/certs/test/cert-over-max-altnames.pem
index 309b31ef8..cd1a1b7a8 100644
--- a/certs/test/cert-over-max-altnames.pem
+++ b/certs/test/cert-over-max-altnames.pem
@@ -1,18 +1,18 @@
 -----BEGIN CERTIFICATE-----
-MIILZjCCCk6gAwIBAgIURc0vEAYKqmZm+uhVYVYcdTDD5jIwDQYJKoZIhvcNAQEL
+MIILRzCCCi+gAwIBAgIUEwPXUbqtHk1KaT4zyVtCBdtnA14wDQYJKoZIhvcNAQEL
 BQAwdzELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB01vbnRhbmExEDAOBgNVBAcMB0Jv
 emVtYW4xFDASBgNVBAoMC3dvbGZTU0wgSW5jMRQwEgYDVQQLDAtFbmdpbmVlcmlu
-ZzEYMBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMB4XDTI0MDUzMDAxMzQ1NloXDTI0
-MDYyOTAxMzQ1NlowdzELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB01vbnRhbmExEDAO
+ZzEYMBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMB4XDTI0MDcwODA2MzQwNFoXDTI3
+MDQwNDA2MzQwNFowdzELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB01vbnRhbmExEDAO
 BgNVBAcMB0JvemVtYW4xFDASBgNVBAoMC3dvbGZTU0wgSW5jMRQwEgYDVQQLDAtF
 bmdpbmVlcmluZzEYMBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMIIBIjANBgkqhkiG
-9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MxlWlPvDK577o82h5LrZDs/1eFX/xEI2ICZ
-xvQ3rMm5cdUxsnYeExXMP8Fzlx4RsyYeNCJo8wdKFtTbrkyTGE1tlrQ6jZ20aYA0
-V38GkQhVNzG5EIOBm9x7Zl7L4kgJEAG0a36jOrCuP9JOxo6EtyezF+KyN9TEzxxZ
-udlaV3JoxghmvaBzRO07vmomtxwtm/5K4gM3XCcYyDhxf7J357s6Ra8nhefOT/PV
-rB/mSHUcH0nvt2mNZdJyDOUBNx0IAVL1CaJh3pT14Ql03igSbeRr7pVtiioixZTD
-xB1npmn0kgTa4zNR11EWHX0nBwEJST3QofkJA+odSFQBG1tCTQIDAQABo4IH6DCC
-B+QwggfBBgNVHREEgge4MIIHtIIMZXhhbXBsZTEuY29tggxleGFtcGxlMi5jb22C
+9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwzKLRSyHoRCW804H0ryTXUQ8bY1n9/KfQOY
+06zeA2buKvHYsH1uB1QLEJghTYDLEiDnzE/eRX3Jcncy6sqQu2lSEAMvqPOVxfGL
+YlYb72dvpBBBla0Km+OlwLDScHZQMFuo6AgsfO2nonqNOCkcrMft8nyVsJWCfUlc
+OM13Je+9gHVTlDw9ymNbnxW10x0TLxnRPNt2Osy4fcnlwtfaQG/YIdxzG0ItU5z+
+Gvx9q3o2P5jehHwFZ85qFDiHqfGMtWjLaH9xICv1oGP1Vi+jJtK3b7FaF9c4mQj+
+k1hv/sMTSQgWC6dNZwBSMWcjTpjtUUUduQTZC+zYKLNLve02eQIDAQABo4IHyTCC
+B8UwggfBBgNVHREEgge4MIIHtIIMZXhhbXBsZTEuY29tggxleGFtcGxlMi5jb22C
 DGV4YW1wbGUzLmNvbYIMZXhhbXBsZTQuY29tggxleGFtcGxlNS5jb22CDGV4YW1w
 bGU2LmNvbYIMZXhhbXBsZTcuY29tggxleGFtcGxlOC5jb22CDGV4YW1wbGU5LmNv
 bYINZXhhbXBsZTEwLmNvbYINZXhhbXBsZTExLmNvbYINZXhhbXBsZTEyLmNvbYIN
@@ -53,11 +53,11 @@ MTE3LmNvbYIOZXhhbXBsZTExOC5jb22CDmV4YW1wbGUxMTkuY29tgg5leGFtcGxl
 MTIwLmNvbYIOZXhhbXBsZTEyMS5jb22CDmV4YW1wbGUxMjIuY29tgg5leGFtcGxl
 MTIzLmNvbYIOZXhhbXBsZTEyNC5jb22CDmV4YW1wbGUxMjUuY29tgg5leGFtcGxl
 MTI2LmNvbYIOZXhhbXBsZTEyNy5jb22CDmV4YW1wbGUxMjguY29tgg5leGFtcGxl
-MTI5LmNvbYIOZXhhbXBsZTEzMC5jb20wHQYDVR0OBBYEFLbtWbf+CESA0Xfsii18
-98iIet9AMA0GCSqGSIb3DQEBCwUAA4IBAQBCY+SvA+JFFZ1NwwEBcl5BDbTjTAgt
-w+xlEK71C+KUdvFuMMftDjaESOTJXEsimz5TuYhCMmQwQJMTlaEuZnzyCetuyBwJ
-eRAFopo4xRhJKQ6okJlOANPlmXehuPS+niiMMGxqBOjVyvPFZpdnj0oa6Mz/ewuP
-gNlsLUUrA6YQZNGYq9rDb4r2CCtD+10xkUg1Pu+2eRHBkYP9VSJOvWTVLMj/mPwN
-mh/pAxg50fl/t+m181AOu8KpIen3++54ljgo0v/O3SyO0d5zq8+vSTpjkfX3LPjH
-DFyofMjOQ7lFnr7uwY9jmj//GUUg3nULmItMhcEJ3XE9ySoEwfP35OWC
+MTI5LmNvbYIOZXhhbXBsZTEzMC5jb20wDQYJKoZIhvcNAQELBQADggEBAJXFayJD
+s6QYItL6tiYYwUiLt7wtXySzAP4oOG/xEQbJ4MbQUk2epIahsd1kC2rej2DRi35P
+6PoQ8D5o8PwvtH0XzEMjr5QixRLBje0mIRr6vcqrM64ILj3v6BepwnaNY7RcuvC4
+P4kdM6fTUwK1lTaQavQymbcLkmUYHZroMZYDoLAm88pKJHzuCQng2j0qSH8h/egZ
+NPLchgV15I7Yesc0EOgrUMhkvkTmumZgv3HAmhLwqi+kv9PDsId88xzJaEcF2yO/
+uK44HCis+45Zp1FiePrpk1c27z21q/NgvfGkn21+lf9a27iWCIGHde2myf7RE1M6
+avQ7b3uyhvQ590A=
 -----END CERTIFICATE-----
diff --git a/certs/test/cert-over-max-nc.der b/certs/test/cert-over-max-nc.der
new file mode 100644
index 0000000000000000000000000000000000000000..1d0c740b71893e6c4b17a14fff04de4ea0513dbd
GIT binary patch
literal 2652
zcmc)M|5MX-90%}yHW*_YvSU*z1TphVr11HC_W8Dg1d@`HOa`0>Dk04c4>#qDD`dfa
zLO6vwi^kFAC8v2<f-DMCO9P3DFUp}_AQF}y(4m8dp>}!H#^>|7dwu?be%kB#e!cHr
zkNbS?UZ0_?atq1^#y7~Mh*YY}8Bk#f|6FW6Z@J-a>YjdiD&O3O2FU}XDmPR<3_=i<
zzXY{oDl||oOZSs&rRhdYgD&s|g*qU`W-ZFG<_ISN>VQOBiD`F^71N<1zB@{_%5KZw
zX*6z(Ot$6<rz*87$!gBCnoI?GRx=igF7n-#se|oyd$jL<VPSrBu5C9Ou{a1PP#R@W
zN>89frZ>{4x8URd2V;?^;6p<EB{CKXmY^)6l(GmS`Ci?#R@WL)k(hOvS^COMO0mXs
zhCF(!$04h~)-)>HIThs@ayhI4X(~<qvXt`PkjRO?O`}PU?gBeL*>m{Yyi|=W=Hz{6
zm#2D1M%c93_L(NZ*{uBJ&WU!{)jj)ON3%};p;%MuZah}<9`nqSrk~t1rB0WVbtG?P
zF56d3Unnm&eiR$mlbdyPVcWHEZOjt`u{ZZU*LT*@J$7kuINmn2Y@{$Oajo&l+>?(T
zr%I@G^`jM~{^l#YbWGLfo|-mGucd5n<g>F4xw9ED$5&qc#`b0A;z8zP#a!(c+gztM
zS+Pjfm|~WsV&>(q)w?$*g`e}gp}IG;`m0wjxT&|LGDLzLXXV2vEB^%z_P*Y5ErR^(
z=a0&~Ki<O*-%*4gD?jTEUpKIF7pi0x(WbYs`4`XCIH>iYCO}PsngTTqY6jGX`C7#W
z`evapaFh8CH<}OJY(8+q`M^!*12>)z+<ZQ806stg4h1+A;81`=0S*N?6yQ*RLjev2
zI27oiKo13aD9}TJ9t!kOpoaoI6zHKq4+R7i5Kurs0RaUB6cA8AKmh>-1QZZZKtcft
z1tb)ZP(VTf2?Zn+kWfHE0SN^Z6i`q=K>-B?6ckWUKtTZo1r!ueP(VWg4Fxn5&`>}_
z0SyH-6wpvWLjes13=}X>z(4^51q>80P{2R|0|g8eFi>EC0s|BnpuhkH1}HE<fdL8(
zP+))p11C_k%K44N5ro7Ugv23)#3_WtF@(f9gv3FF#7Tt2QG_J2@avK9VIm7AvS1<$
zCbD263nsE)A`2$6U?K~@D0vINDTO4m@Vipzi7foK6nY{Hzb}QJ$ii<-zQ?aj@t-8`
z_aBk86zDYPJ~e7po|=})qW!JRhatPF(#GS5>mC$(Mw)MSOc^H@_EbFzW<#zwh5Q<3
ziYxBdj8*iJ>qC!KjL-*qmK)s}nZF%u-2V6WmFp^h)O4>h9?t!<_s!>BZL3$^y`qVI
z{Bt<I_x<a!#7kX)r?;8<$-h?ItBwoZ_(kUrzt6ag<EP7&7tu6ojkIw_@$~qK$V*t=
zfub{gFAfJ*pMQ|OWURo_uWc^7eQI-PS4UYw*jCA&@0MC*@2LGgNYAc#W7D?&&ccV<
z`vardwMBJvFQm(lIE~2UqeC^_Es+Zb-)*lktWQe4RWutV*X@`{YPW1~+)j1wZz?}{
K_fBPDYVCjV0zUfy

literal 0
HcmV?d00001

diff --git a/certs/test/cert-over-max-nc.pem b/certs/test/cert-over-max-nc.pem
index 5fb42bf52..8e42d53fa 100644
--- a/certs/test/cert-over-max-nc.pem
+++ b/certs/test/cert-over-max-nc.pem
@@ -1,18 +1,18 @@
 -----BEGIN CERTIFICATE-----
-MIIKdzCCCV+gAwIBAgIUP2BNrIrxeGGYtoPzcrEMcF8RDbEwDQYJKoZIhvcNAQEL
+MIIKWDCCCUCgAwIBAgIUYdELMUH7vrK6aNntrMnvR+5sZ7UwDQYJKoZIhvcNAQEL
 BQAwdzELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB01vbnRhbmExEDAOBgNVBAcMB0Jv
 emVtYW4xFDASBgNVBAoMC3dvbGZTU0wgSW5jMRQwEgYDVQQLDAtFbmdpbmVlcmlu
-ZzEYMBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMB4XDTI0MDUzMDAxNTE0M1oXDTI0
-MDYyOTAxNTE0M1owdzELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB01vbnRhbmExEDAO
+ZzEYMBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMB4XDTI0MDcwODA2MzQwNFoXDTI3
+MDQwNDA2MzQwNFowdzELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB01vbnRhbmExEDAO
 BgNVBAcMB0JvemVtYW4xFDASBgNVBAoMC3dvbGZTU0wgSW5jMRQwEgYDVQQLDAtF
 bmdpbmVlcmluZzEYMBYGA1UEAwwPd3d3LndvbGZzc2wuY29tMIIBIjANBgkqhkiG
-9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7XMOFVWne2YJvHK9odaZiLSFJ5l9FJqKLnc
-VDPPjM++SdO/dU8/hO/e1B5r88NtXFJHztMbekIIQd7f0T3Lwru/FRkmqI3Q2Z5V
-SYLJbrI3EiVg4eG07MI2DhHWg9cMnfENzYk4Q/Zhd2cGCsJUW4S37ye+M+VXDtlb
-ZkQVN19uqrxmZESqVpa05AjsJcbVMwb4++ZkhXLrs0eUcLQpZxWehTvKO/FgcFbD
-6kNkTBBNf3c/5AQCLugSLUGn1RgbNt9sBZ6zZPM3UOgeREfEcb5+B61RGQD/SMCR
-o+VEMCkGmWw8b3B7tyRXweuHBZ5I+AOw9QHb7F5tkT8ih5FUrwIDAQABo4IG+TCC
-BvUwDwYDVR0TAQH/BAUwAwEB/zCCBsEGA1UdHgSCBrgwgga0oIIGsDAKggguZXgx
+9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwzKLRSyHoRCW804H0ryTXUQ8bY1n9/KfQOY
+06zeA2buKvHYsH1uB1QLEJghTYDLEiDnzE/eRX3Jcncy6sqQu2lSEAMvqPOVxfGL
+YlYb72dvpBBBla0Km+OlwLDScHZQMFuo6AgsfO2nonqNOCkcrMft8nyVsJWCfUlc
+OM13Je+9gHVTlDw9ymNbnxW10x0TLxnRPNt2Osy4fcnlwtfaQG/YIdxzG0ItU5z+
+Gvx9q3o2P5jehHwFZ85qFDiHqfGMtWjLaH9xICv1oGP1Vi+jJtK3b7FaF9c4mQj+
+k1hv/sMTSQgWC6dNZwBSMWcjTpjtUUUduQTZC+zYKLNLve02eQIDAQABo4IG2jCC
+BtYwDwYDVR0TAQH/BAUwAwEB/zCCBsEGA1UdHgSCBrgwgga0oIIGsDAKggguZXgx
 LmNvbTAKggguZXgyLmNvbTAKggguZXgzLmNvbTAKggguZXg0LmNvbTAKggguZXg1
 LmNvbTAKggguZXg2LmNvbTAKggguZXg3LmNvbTAKggguZXg4LmNvbTAKggguZXg5
 LmNvbTALggkuZXgxMC5jb20wC4IJLmV4MTEuY29tMAuCCS5leDEyLmNvbTALggku
@@ -48,11 +48,11 @@ MTUuY29tMAyCCi5leDExNi5jb20wDIIKLmV4MTE3LmNvbTAMggouZXgxMTguY29t
 MAyCCi5leDExOS5jb20wDIIKLmV4MTIwLmNvbTAMggouZXgxMjEuY29tMAyCCi5l
 eDEyMi5jb20wDIIKLmV4MTIzLmNvbTAMggouZXgxMjQuY29tMAyCCi5leDEyNS5j
 b20wDIIKLmV4MTI2LmNvbTAMggouZXgxMjcuY29tMAyCCi5leDEyOC5jb20wDIIK
-LmV4MTI5LmNvbTAMggouZXgxMzAuY29tMB0GA1UdDgQWBBRZqhZL7IEF/o83ZyxK
-Djw6be/2ozANBgkqhkiG9w0BAQsFAAOCAQEAPObXW1f+7VAT0SUE6fLpqmP1y1PY
-z5oePRsiRPrM8tbgu2DESGwcHeapCtIPXLPbf1pW3yYqTGtgIrO2IqBZmVWIk3YT
-OSp4RrZDH55soOr2g6KP5RpjE6kWU5XkVxbQNLHlwRgnpQcDgVoOgIDtxpVgpXs1
-OCdNe1sdQbPbI8ciIayJJl7bEv52BjrmjYhCWCPXDBspwLhafwFzorHDj8QiYbWo
-6QH1TQakxjo3Nbceax7D2LT2Aev/cMw8GqR/wykLj1EEYzdB644OYwEfdRf5RwJg
-CkaQE7FWVpdVcoJnXIa8/iATpTLYuYeolpDLXJe2Eqb3SegTp6wL4x1Bzg==
+LmV4MTI5LmNvbTAMggouZXgxMzAuY29tMA0GCSqGSIb3DQEBCwUAA4IBAQCvchQQ
+uZ5TEwvxjK/qdHuyOJISaodU5kDalvZz8dyt28HuU+cVyof4D4IS1KwS3RtlPXXP
+EOWEzDVEGKKE3DeFyiNT7VZa4ImnXvleJj+GxhDJJ1OQY/DLZDuwtSgn684QPPzI
+HTJxjtQ8NEbFCa5dZc819CXsiz0YTKrDxOHysFPmroAKvjBUNiwCp/IIJOalIMIx
+loV0tsxD2gmLuvZfHOVyaM8TrX/iq1EYxcF/QRtcAHC8H2gDfgwEkVVfhGBPXc/D
+c/cT89HeX5N0lv4+VQaclVMB6viKjMmvIA7Xg8CMOURFUt909SoGFGLnRcBoSH3i
+UpV7rICJ6+OGc1KT
 -----END CERTIFICATE-----
diff --git a/certs/test/gen-ext-certs.sh b/certs/test/gen-ext-certs.sh
index badb1b4d3..27696fb07 100755
--- a/certs/test/gen-ext-certs.sh
+++ b/certs/test/gen-ext-certs.sh
@@ -311,3 +311,227 @@ authorityKeyIdentifier = keyid:always,issuer:always
 EOF
 gen_cert
 
+OUT=certs/test/cert-over-max-nc
+KEYFILE=certs/ca-key.der
+CONFIG=certs/test/cert-over-max-nc.cfg
+tee >$CONFIG <<EOF
+[ req ]
+default_bits        = 2048
+prompt              = no
+distinguished_name  = dn
+x509_extensions     = extensions
+
+[ dn ]
+C  = US
+ST = Montana
+L  = Bozeman
+O  = wolfSSL Inc
+OU = Engineering
+CN = www.wolfssl.com
+
+[ extensions ]
+basicConstraints=critical,CA:true
+nameConstraints = permitted;DNS:.ex1.com,permitted;DNS:.ex2.com,permitted;\
+DNS:.ex3.com,permitted;DNS:.ex4.com,permitted;DNS:.ex5.com,permitted;\
+DNS:.ex6.com,permitted;DNS:.ex7.com,permitted;DNS:.ex8.com,permitted;\
+DNS:.ex9.com,permitted;DNS:.ex10.com,permitted;DNS:.ex11.com,permitted;\
+DNS:.ex12.com,permitted;DNS:.ex13.com,permitted;DNS:.ex14.com,permitted;\
+DNS:.ex15.com,permitted;DNS:.ex16.com,permitted;DNS:.ex17.com,permitted;\
+DNS:.ex18.com,permitted;DNS:.ex19.com,permitted;DNS:.ex20.com,permitted;\
+DNS:.ex21.com,permitted;DNS:.ex22.com,permitted;DNS:.ex23.com,permitted;\
+DNS:.ex24.com,permitted;DNS:.ex25.com,permitted;DNS:.ex26.com,permitted;\
+DNS:.ex27.com,permitted;DNS:.ex28.com,permitted;DNS:.ex29.com,permitted;\
+DNS:.ex30.com,permitted;DNS:.ex31.com,permitted;DNS:.ex32.com,permitted;\
+DNS:.ex33.com,permitted;DNS:.ex34.com,permitted;DNS:.ex35.com,permitted;\
+DNS:.ex36.com,permitted;DNS:.ex37.com,permitted;DNS:.ex38.com,permitted;\
+DNS:.ex39.com,permitted;DNS:.ex40.com,permitted;DNS:.ex41.com,permitted;\
+DNS:.ex42.com,permitted;DNS:.ex43.com,permitted;DNS:.ex44.com,permitted;\
+DNS:.ex45.com,permitted;DNS:.ex46.com,permitted;DNS:.ex47.com,permitted;\
+DNS:.ex48.com,permitted;DNS:.ex49.com,permitted;DNS:.ex50.com,permitted;\
+DNS:.ex51.com,permitted;DNS:.ex52.com,permitted;DNS:.ex53.com,permitted;\
+DNS:.ex54.com,permitted;DNS:.ex55.com,permitted;DNS:.ex56.com,permitted;\
+DNS:.ex57.com,permitted;DNS:.ex58.com,permitted;DNS:.ex59.com,permitted;\
+DNS:.ex60.com,permitted;DNS:.ex61.com,permitted;DNS:.ex62.com,permitted;\
+DNS:.ex63.com,permitted;DNS:.ex64.com,permitted;DNS:.ex65.com,permitted;\
+DNS:.ex66.com,permitted;DNS:.ex67.com,permitted;DNS:.ex68.com,permitted;\
+DNS:.ex69.com,permitted;DNS:.ex70.com,permitted;DNS:.ex71.com,permitted;\
+DNS:.ex72.com,permitted;DNS:.ex73.com,permitted;DNS:.ex74.com,permitted;\
+DNS:.ex75.com,permitted;DNS:.ex76.com,permitted;DNS:.ex77.com,permitted;\
+DNS:.ex78.com,permitted;DNS:.ex79.com,permitted;DNS:.ex80.com,permitted;\
+DNS:.ex81.com,permitted;DNS:.ex82.com,permitted;DNS:.ex83.com,permitted;\
+DNS:.ex84.com,permitted;DNS:.ex85.com,permitted;DNS:.ex86.com,permitted;\
+DNS:.ex87.com,permitted;DNS:.ex88.com,permitted;DNS:.ex89.com,permitted;\
+DNS:.ex90.com,permitted;DNS:.ex91.com,permitted;DNS:.ex92.com,permitted;\
+DNS:.ex93.com,permitted;DNS:.ex94.com,permitted;DNS:.ex95.com,permitted;\
+DNS:.ex96.com,permitted;DNS:.ex97.com,permitted;DNS:.ex98.com,permitted;\
+DNS:.ex99.com,permitted;DNS:.ex100.com,permitted;DNS:.ex101.com,permitted;\
+DNS:.ex102.com,permitted;DNS:.ex103.com,permitted;DNS:.ex104.com,permitted;\
+DNS:.ex105.com,permitted;DNS:.ex106.com,permitted;DNS:.ex107.com,permitted;\
+DNS:.ex108.com,permitted;DNS:.ex109.com,permitted;DNS:.ex110.com,permitted;\
+DNS:.ex111.com,permitted;DNS:.ex112.com,permitted;DNS:.ex113.com,permitted;\
+DNS:.ex114.com,permitted;DNS:.ex115.com,permitted;DNS:.ex116.com,permitted;\
+DNS:.ex117.com,permitted;DNS:.ex118.com,permitted;DNS:.ex119.com,permitted;\
+DNS:.ex120.com,permitted;DNS:.ex121.com,permitted;DNS:.ex122.com,permitted;\
+DNS:.ex123.com,permitted;DNS:.ex124.com,permitted;DNS:.ex125.com,permitted;\
+DNS:.ex126.com,permitted;DNS:.ex127.com,permitted;DNS:.ex128.com,permitted;\
+DNS:.ex129.com,permitted;DNS:.ex130.com
+
+EOF
+gen_cert
+
+OUT=certs/test/cert-over-max-altnames
+KEYFILE=certs/ca-key.der
+CONFIG=certs/test/cert-over-max-altnames.cfg
+tee >$CONFIG <<EOF
+[ req ]
+default_bits        = 2048
+prompt              = no
+distinguished_name  = dn
+x509_extensions     = extensions
+
+[ dn ]
+C  = US
+ST = Montana
+L  = Bozeman
+O  = wolfSSL Inc
+OU = Engineering
+CN = www.wolfssl.com
+
+[ extensions ]
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = example1.com
+DNS.2 = example2.com
+DNS.3 = example3.com
+DNS.4 = example4.com
+DNS.5 = example5.com
+DNS.6 = example6.com
+DNS.7 = example7.com
+DNS.8 = example8.com
+DNS.9 = example9.com
+DNS.10 = example10.com
+DNS.11 = example11.com
+DNS.12 = example12.com
+DNS.13 = example13.com
+DNS.14 = example14.com
+DNS.15 = example15.com
+DNS.16 = example16.com
+DNS.17 = example17.com
+DNS.18 = example18.com
+DNS.19 = example19.com
+DNS.20 = example20.com
+DNS.21 = example21.com
+DNS.22 = example22.com
+DNS.23 = example23.com
+DNS.24 = example24.com
+DNS.25 = example25.com
+DNS.26 = example26.com
+DNS.27 = example27.com
+DNS.28 = example28.com
+DNS.29 = example29.com
+DNS.30 = example30.com
+DNS.31 = example31.com
+DNS.32 = example32.com
+DNS.33 = example33.com
+DNS.34 = example34.com
+DNS.35 = example35.com
+DNS.36 = example36.com
+DNS.37 = example37.com
+DNS.38 = example38.com
+DNS.39 = example39.com
+DNS.40 = example40.com
+DNS.41 = example41.com
+DNS.42 = example42.com
+DNS.43 = example43.com
+DNS.44 = example44.com
+DNS.45 = example45.com
+DNS.46 = example46.com
+DNS.47 = example47.com
+DNS.48 = example48.com
+DNS.49 = example49.com
+DNS.50 = example50.com
+DNS.51 = example51.com
+DNS.52 = example52.com
+DNS.53 = example53.com
+DNS.54 = example54.com
+DNS.55 = example55.com
+DNS.56 = example56.com
+DNS.57 = example57.com
+DNS.58 = example58.com
+DNS.59 = example59.com
+DNS.60 = example60.com
+DNS.61 = example61.com
+DNS.62 = example62.com
+DNS.63 = example63.com
+DNS.64 = example64.com
+DNS.65 = example65.com
+DNS.66 = example66.com
+DNS.67 = example67.com
+DNS.68 = example68.com
+DNS.69 = example69.com
+DNS.70 = example70.com
+DNS.71 = example71.com
+DNS.72 = example72.com
+DNS.73 = example73.com
+DNS.74 = example74.com
+DNS.75 = example75.com
+DNS.76 = example76.com
+DNS.77 = example77.com
+DNS.78 = example78.com
+DNS.79 = example79.com
+DNS.80 = example80.com
+DNS.81 = example81.com
+DNS.82 = example82.com
+DNS.83 = example83.com
+DNS.84 = example84.com
+DNS.85 = example85.com
+DNS.86 = example86.com
+DNS.87 = example87.com
+DNS.88 = example88.com
+DNS.89 = example89.com
+DNS.90 = example90.com
+DNS.91 = example91.com
+DNS.92 = example92.com
+DNS.93 = example93.com
+DNS.94 = example94.com
+DNS.95 = example95.com
+DNS.96 = example96.com
+DNS.97 = example97.com
+DNS.98 = example98.com
+DNS.99 = example99.com
+DNS.100 = example100.com
+DNS.101 = example101.com
+DNS.102 = example102.com
+DNS.103 = example103.com
+DNS.104 = example104.com
+DNS.105 = example105.com
+DNS.106 = example106.com
+DNS.107 = example107.com
+DNS.108 = example108.com
+DNS.109 = example109.com
+DNS.110 = example110.com
+DNS.111 = example111.com
+DNS.112 = example112.com
+DNS.113 = example113.com
+DNS.114 = example114.com
+DNS.115 = example115.com
+DNS.116 = example116.com
+DNS.117 = example117.com
+DNS.118 = example118.com
+DNS.119 = example119.com
+DNS.120 = example120.com
+DNS.121 = example121.com
+DNS.122 = example122.com
+DNS.123 = example123.com
+DNS.124 = example124.com
+DNS.125 = example125.com
+DNS.126 = example126.com
+DNS.127 = example127.com
+DNS.128 = example128.com
+DNS.129 = example129.com
+DNS.130 = example130.com
+
+EOF
+gen_cert
+