diff --git a/certs/cert.crt b/certs/cert.crt
deleted file mode 100644
index 1badde9..0000000
--- a/certs/cert.crt
+++ /dev/null
@@ -1,23 +0,0 @@
------BEGIN CERTIFICATE-----
-MIID5DCCAswCCQCgrrPEnfR7ezANBgkqhkiG9w0BAQUFADCBszELMAkGA1UEBhMC
-VVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28x
-GTAXBgNVBAoTEEFwZXJ0dXJlIFNjaWVuY2UxITAfBgNVBAsTGFJlc2VhcmNoIGFu
-ZCBEZXZlbG9wbWVudDEYMBYGA1UEAxMPQXBlcnR1cmVTY2llbmNlMR8wHQYJKoZI
-hvcNAQkBFhBhYmNAYXBlcnR1cmUuY29tMB4XDTE2MDUyNzIxMTUzMVoXDTE3MTAw
-OTIxMTUzMVowgbMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYw
-FAYDVQQHEw1TYW4gRnJhbmNpc2NvMRkwFwYDVQQKExBBcGVydHVyZSBTY2llbmNl
-MSEwHwYDVQQLExhSZXNlYXJjaCBhbmQgRGV2ZWxvcG1lbnQxGDAWBgNVBAMTD0Fw
-ZXJ0dXJlU2NpZW5jZTEfMB0GCSqGSIb3DQEJARYQYWJjQGFwZXJ0dXJlLmNvbTCC
-ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOSjJs9oaVFhOXx6YrIIkgwN
-AiL1nXmnfh8OmU62B75ZC1ob2nboWdTJEsCZk5Qrv+WqLSslOQYtONGw0K//4tOL
-TH8HEbNfLdjL6ooblgbh8CyttkENac9hfz8Z/83x3Bx2h2PTXaw8SN1GQpNm1KC+
-GrkqAyiahsO4o17/Wem4AXAfwGbYH96leyY5k0AfbmmkoIq3L0hHG5Rmg+Yf5Vti
-dJY1aWGxA/G7pOWQaRPlDp1xYtYD69cC3/XoZsGeTK+jLdEW50oq15a1wAc6qvMZ
-aTWQ7h0+T4AX8PiduZjSfmTbz2+cHBcaw7b+hGZjuhjDO+o5gQiyLtS+wF+yZlsC
-AwEAATANBgkqhkiG9w0BAQUFAAOCAQEADw2bzLhqngco0a3U5XVvC3yEGmJrDwVv
-em4fuL2/QTRsNM7APeQrZ4I7SSXWVd/XL/77CeJbwfmP9UlB2+eUpBuXUf4TArua
-KdLZM5HOjVWvBvCGXQxjAOVJITyd52uqeCT+kqRhEEfTmmo/DKUP6QIWYNgS7M62
-BuiOnD4OU0TS9gs7kw73qD7Kzh7MTsCLP77BrxtDAJvzYAMOyyZMnCg6ony9bCZe
-7N65svyFtk6EufWydgzM62FCfuN8TMEPuFV7dcpeQsRUed7/IiEhT6NjpNODF+pL
-lzFSVOaI0OaAO/6Y1lUp67BfmOdzqlIVZKaKSzpdYHoxjXj7WR9AcA==
------END CERTIFICATE-----
diff --git a/certs/cert.der b/certs/cert.der
deleted file mode 100644
index 389e938..0000000
Binary files a/certs/cert.der and /dev/null differ
diff --git a/certs/cert.jks b/certs/cert.jks
deleted file mode 100644
index 6955632..0000000
Binary files a/certs/cert.jks and /dev/null differ
diff --git a/certs/cert.pem b/certs/cert.pem
deleted file mode 100644
index b51d694..0000000
--- a/certs/cert.pem
+++ /dev/null
@@ -1,46 +0,0 @@
------BEGIN CERTIFICATE-----
-MIID5DCCAswCCQCgrrPEnfR7ezANBgkqhkiG9w0BAQUFADCBszELMAkGA1UEBhMC
-VVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28x
-GTAXBgNVBAoTEEFwZXJ0dXJlIFNjaWVuY2UxITAfBgNVBAsTGFJlc2VhcmNoIGFu
-ZCBEZXZlbG9wbWVudDEYMBYGA1UEAxMPQXBlcnR1cmVTY2llbmNlMR8wHQYJKoZI
-hvcNAQkBFhBhYmNAYXBlcnR1cmUuY29tMB4XDTE2MDUyNzIxMTUzMVoXDTE3MTAw
-OTIxMTUzMVowgbMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYw
-FAYDVQQHEw1TYW4gRnJhbmNpc2NvMRkwFwYDVQQKExBBcGVydHVyZSBTY2llbmNl
-MSEwHwYDVQQLExhSZXNlYXJjaCBhbmQgRGV2ZWxvcG1lbnQxGDAWBgNVBAMTD0Fw
-ZXJ0dXJlU2NpZW5jZTEfMB0GCSqGSIb3DQEJARYQYWJjQGFwZXJ0dXJlLmNvbTCC
-ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOSjJs9oaVFhOXx6YrIIkgwN
-AiL1nXmnfh8OmU62B75ZC1ob2nboWdTJEsCZk5Qrv+WqLSslOQYtONGw0K//4tOL
-TH8HEbNfLdjL6ooblgbh8CyttkENac9hfz8Z/83x3Bx2h2PTXaw8SN1GQpNm1KC+
-GrkqAyiahsO4o17/Wem4AXAfwGbYH96leyY5k0AfbmmkoIq3L0hHG5Rmg+Yf5Vti
-dJY1aWGxA/G7pOWQaRPlDp1xYtYD69cC3/XoZsGeTK+jLdEW50oq15a1wAc6qvMZ
-aTWQ7h0+T4AX8PiduZjSfmTbz2+cHBcaw7b+hGZjuhjDO+o5gQiyLtS+wF+yZlsC
-AwEAATANBgkqhkiG9w0BAQUFAAOCAQEADw2bzLhqngco0a3U5XVvC3yEGmJrDwVv
-em4fuL2/QTRsNM7APeQrZ4I7SSXWVd/XL/77CeJbwfmP9UlB2+eUpBuXUf4TArua
-KdLZM5HOjVWvBvCGXQxjAOVJITyd52uqeCT+kqRhEEfTmmo/DKUP6QIWYNgS7M62
-BuiOnD4OU0TS9gs7kw73qD7Kzh7MTsCLP77BrxtDAJvzYAMOyyZMnCg6ony9bCZe
-7N65svyFtk6EufWydgzM62FCfuN8TMEPuFV7dcpeQsRUed7/IiEhT6NjpNODF+pL
-lzFSVOaI0OaAO/6Y1lUp67BfmOdzqlIVZKaKSzpdYHoxjXj7WR9AcA==
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
-MIID5DCCAswCCQCgrrPEnfR7ezANBgkqhkiG9w0BAQUFADCBszELMAkGA1UEBhMC
-VVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28x
-GTAXBgNVBAoTEEFwZXJ0dXJlIFNjaWVuY2UxITAfBgNVBAsTGFJlc2VhcmNoIGFu
-ZCBEZXZlbG9wbWVudDEYMBYGA1UEAxMPQXBlcnR1cmVTY2llbmNlMR8wHQYJKoZI
-hvcNAQkBFhBhYmNAYXBlcnR1cmUuY29tMB4XDTE2MDUyNzIxMTUzMVoXDTE3MTAw
-OTIxMTUzMVowgbMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYw
-FAYDVQQHEw1TYW4gRnJhbmNpc2NvMRkwFwYDVQQKExBBcGVydHVyZSBTY2llbmNl
-MSEwHwYDVQQLExhSZXNlYXJjaCBhbmQgRGV2ZWxvcG1lbnQxGDAWBgNVBAMTD0Fw
-ZXJ0dXJlU2NpZW5jZTEfMB0GCSqGSIb3DQEJARYQYWJjQGFwZXJ0dXJlLmNvbTCC
-ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOSjJs9oaVFhOXx6YrIIkgwN
-AiL1nXmnfh8OmU62B75ZC1ob2nboWdTJEsCZk5Qrv+WqLSslOQYtONGw0K//4tOL
-TH8HEbNfLdjL6ooblgbh8CyttkENac9hfz8Z/83x3Bx2h2PTXaw8SN1GQpNm1KC+
-GrkqAyiahsO4o17/Wem4AXAfwGbYH96leyY5k0AfbmmkoIq3L0hHG5Rmg+Yf5Vti
-dJY1aWGxA/G7pOWQaRPlDp1xYtYD69cC3/XoZsGeTK+jLdEW50oq15a1wAc6qvMZ
-aTWQ7h0+T4AX8PiduZjSfmTbz2+cHBcaw7b+hGZjuhjDO+o5gQiyLtS+wF+yZlsC
-AwEAATANBgkqhkiG9w0BAQUFAAOCAQEADw2bzLhqngco0a3U5XVvC3yEGmJrDwVv
-em4fuL2/QTRsNM7APeQrZ4I7SSXWVd/XL/77CeJbwfmP9UlB2+eUpBuXUf4TArua
-KdLZM5HOjVWvBvCGXQxjAOVJITyd52uqeCT+kqRhEEfTmmo/DKUP6QIWYNgS7M62
-BuiOnD4OU0TS9gs7kw73qD7Kzh7MTsCLP77BrxtDAJvzYAMOyyZMnCg6ony9bCZe
-7N65svyFtk6EufWydgzM62FCfuN8TMEPuFV7dcpeQsRUed7/IiEhT6NjpNODF+pL
-lzFSVOaI0OaAO/6Y1lUp67BfmOdzqlIVZKaKSzpdYHoxjXj7WR9AcA==
------END CERTIFICATE-----
diff --git a/certs/certRequest.csr b/certs/certRequest.csr
deleted file mode 100644
index 3f1abe6..0000000
--- a/certs/certRequest.csr
+++ /dev/null
@@ -1,18 +0,0 @@
------BEGIN CERTIFICATE REQUEST-----
-MIIC+TCCAeECAQAwgbMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlh
-MRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRkwFwYDVQQKExBBcGVydHVyZSBTY2ll
-bmNlMSEwHwYDVQQLExhSZXNlYXJjaCBhbmQgRGV2ZWxvcG1lbnQxGDAWBgNVBAMT
-D0FwZXJ0dXJlU2NpZW5jZTEfMB0GCSqGSIb3DQEJARYQYWJjQGFwZXJ0dXJlLmNv
-bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOSjJs9oaVFhOXx6YrII
-kgwNAiL1nXmnfh8OmU62B75ZC1ob2nboWdTJEsCZk5Qrv+WqLSslOQYtONGw0K//
-4tOLTH8HEbNfLdjL6ooblgbh8CyttkENac9hfz8Z/83x3Bx2h2PTXaw8SN1GQpNm
-1KC+GrkqAyiahsO4o17/Wem4AXAfwGbYH96leyY5k0AfbmmkoIq3L0hHG5Rmg+Yf
-5VtidJY1aWGxA/G7pOWQaRPlDp1xYtYD69cC3/XoZsGeTK+jLdEW50oq15a1wAc6
-qvMZaTWQ7h0+T4AX8PiduZjSfmTbz2+cHBcaw7b+hGZjuhjDO+o5gQiyLtS+wF+y
-ZlsCAwEAAaAAMA0GCSqGSIb3DQEBBQUAA4IBAQAb481O0MWoZfPOQMSY1Y/bVTsa
-sr95hlTqDnlZ1V8m6uWGqTghOWiJaQkjW8eWPs/NXSEmvA4qKILiF9hnM30MU8Jp
-03NV6eFqo9e9e2gb695G59MC5fkTkmZV3Rg31R7iF1djMnKVVMZ+/sn07hO+7YwN
-EZof+YIVqYFhtw6A9vym3GO7odNTSBaczr4UKA9m5iV6bvbykalWtnFRRX3zA4FF
-oyasHEKfRhU9OuuqN9k/bMkgTtOfqEVZXVIfMkb1TrRdqJeeU9uJ343OEEC9KTGH
-BppMi0iu3qzyepSUyqdGfY6y+Mg7G3xPFCNBZYU5PR3s0flNJpGFU0YuCCnv
------END CERTIFICATE REQUEST-----
diff --git a/certs/certWithPassword.p12 b/certs/certWithPassword.p12
deleted file mode 100644
index 17eee30..0000000
Binary files a/certs/certWithPassword.p12 and /dev/null differ
diff --git a/certs/passwords b/certs/passwords
deleted file mode 100644
index 46d3a0a..0000000
--- a/certs/passwords
+++ /dev/null
@@ -1 +0,0 @@
-p12 password: password
diff --git a/certs/privatekey.pem b/certs/privatekey.pem
deleted file mode 100644
index 2656dcb..0000000
--- a/certs/privatekey.pem
+++ /dev/null
@@ -1,27 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEA5KMmz2hpUWE5fHpisgiSDA0CIvWdead+Hw6ZTrYHvlkLWhva
-duhZ1MkSwJmTlCu/5aotKyU5Bi040bDQr//i04tMfwcRs18t2MvqihuWBuHwLK22
-QQ1pz2F/Pxn/zfHcHHaHY9NdrDxI3UZCk2bUoL4auSoDKJqGw7ijXv9Z6bgBcB/A
-Ztgf3qV7JjmTQB9uaaSgircvSEcblGaD5h/lW2J0ljVpYbED8buk5ZBpE+UOnXFi
-1gPr1wLf9ehmwZ5Mr6Mt0RbnSirXlrXABzqq8xlpNZDuHT5PgBfw+J25mNJ+ZNvP
-b5wcFxrDtv6EZmO6GMM76jmBCLIu1L7AX7JmWwIDAQABAoIBAQDYwwlHeBDpU4jB
-x/IMIe38uNR+umfK7421+gxEwHVE9Hy7uE59jzmjb+J0cOWmg3fSUG20SvzuKy+E
-NeMUCUBOGPG0OMqCSUlZEbLRruekrM4cPbDdqc7YCvItrAOGh7eL0J/5d2mGojze
-c/8oakRKBRGm3PrTovUDV+ijZuoilkMa+EfwxE8wM5xNDoY9bPKtBLI6SyVIzFXj
-vEKeSyVVxiAkW28yI0XoUOJf8O2U5h12F9wYYe1RiarI7TJeCK5M1EaxnNfdvobF
-xlGIdE3ZUtgdPPTPBonL0NsM8xr5qa5xXreyhMQAG9E7a206GE76zNq9eeuwp2M9
-5wOrgadxAoGBAPR+2PkkbFXhDHeeseoWPLFkPmw3H3TWCAwVB7WKSbL5jmkOVENw
-KmVmZffqxxvDEEiF4eJrColqHM8dzcxfgPn8uyQ4nwpFqZ2lwZ67CnpozN7D3e4c
-JmP6wnKO1reShOZGUA/AbpdMWRCe/OZdox4g7vjwzfp1ZFYk81S9kyGTAoGBAO9l
-R2i72KP/BzskGzMYdetk3eDnrusihJ1kgYzblIW/EP7ThAAvA4GeOxGajcieDIfo
-wgj35JdRimknaNPt1p6ABQZnI5hdUF7+LdgvioxfZYxvEO2Jop5rDopd3o8qvDqu
-bTBjGLWodO9SYOX0QqzbNw/Hjw/JsLkoZEG1SsUZAoGBANSd+tGuewezzcO4nb+T
-1vPs2NwCk7hm6FiZcTrOJ4kcvFtfuqdqw3OquMH/yWa7G032H5lmvKMDREpZAL7Z
-zq+WuKenFac5LWeK3fXLcjFBMegHLNgEYt5PEwnMbaz2HdyjCLyp+4JXQpzRpdwv
-UcrBmQ+jWXyU2cyQFYt70JdBAoGAdSkx+5YDfq9vkIgpL6aG/39L/6gjuTwZfxYT
-OSa114cdADnwXk6j/qm76u+i+E4xf8pwPAdmPpBPlwsMiLvbz5KD4xBTIVx52yO2
-uBj8S5rcjhBFTpuPlMx8P0eVhqe5m1aGZan6C9237PB6L9CNWR+oIPbfkzB4ZwXX
-mzjosPECgYAYrtJ6i9hjjSRlyaDvYGieXlMtRM1viByCrxbqYwqpJ24Mbw+JGpi+
-e8a3HqyDpLI5lAfQIDXA0jn549s1vec5asNKoL5+ZvLc8CL/PrJqgOIrKti+mya5
-KjU2QKdROvsRiIUv+j1o0OVyqmHDIMtwOVrSdWaxQqS4A0DIvW1ZQw==
------END RSA PRIVATE KEY-----
diff --git a/certs/publickey.pem b/certs/publickey.pem
deleted file mode 100644
index 66b7067..0000000
--- a/certs/publickey.pem
+++ /dev/null
@@ -1,9 +0,0 @@
------BEGIN PUBLIC KEY-----
-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KMmz2hpUWE5fHpisgiS
-DA0CIvWdead+Hw6ZTrYHvlkLWhvaduhZ1MkSwJmTlCu/5aotKyU5Bi040bDQr//i
-04tMfwcRs18t2MvqihuWBuHwLK22QQ1pz2F/Pxn/zfHcHHaHY9NdrDxI3UZCk2bU
-oL4auSoDKJqGw7ijXv9Z6bgBcB/AZtgf3qV7JjmTQB9uaaSgircvSEcblGaD5h/l
-W2J0ljVpYbED8buk5ZBpE+UOnXFi1gPr1wLf9ehmwZ5Mr6Mt0RbnSirXlrXABzqq
-8xlpNZDuHT5PgBfw+J25mNJ+ZNvPb5wcFxrDtv6EZmO6GMM76jmBCLIu1L7AX7Jm
-WwIDAQAB
------END PUBLIC KEY-----
diff --git a/test-certs/Makefile b/test-certs/Makefile
new file mode 100644
index 0000000..38d941d
--- /dev/null
+++ b/test-certs/Makefile
@@ -0,0 +1,70 @@
+TARGETS = \
+	example-root example-leaf example-sha1 example-md5 example-root-bad-ku \
+	example-bad-serial example-small-key example-expired example-elliptic-sha1
+
+all: \
+	$(addsuffix .crt,$(TARGETS)) \
+	$(addsuffix .p12,$(TARGETS)) \
+	$(addsuffix .jceks,$(TARGETS))
+
+clean:
+	rm -f example-*
+
+.PHONY: all clean
+
+# Generic commands
+%.key:
+	openssl genrsa -out $@ 2048
+
+%.csr: %.key
+	openssl req -new -key $< -out $@ -subj /C=US/ST=CA/O=certigo/OU=example/CN=$(@:.csr=)
+
+%.p12: %.crt %.key
+	openssl pkcs12 -export -out $@ -in $< -inkey $(@:.p12=.key) -name $(@:.p12=) -password pass:password
+
+%.jceks: %.p12
+	keytool -importkeystore \
+		-destkeystore $@ -deststoretype JCEKS -destkeypass password -deststorepass password -destalias $* \
+		-srckeystore $< -srcstoretype PKCS12 -srcstorepass password -srcalias $* -storetype JCEKS
+
+# Good root cert
+example-root.crt: example-root.csr
+	openssl x509 -req -sha256 -in $< -signkey $(@:.crt=.key) -out $@ -days 2500 -extfile openssl.ext -extensions root
+
+# Good leaf cert
+example-leaf.crt: example-leaf.csr
+	openssl x509 -req -sha256 -in $< -signkey $(@:.crt=.key) -out $@ -days 2500 -extfile openssl.ext -extensions leaf
+
+# Bad cert with SHA-1 instead of SHA-2
+example-sha1.crt: example-sha1.csr
+	openssl x509 -req -in $< -signkey $(@:.crt=.key) -out $@ -days 2500 -extfile openssl.ext -extensions leaf
+
+# Bad cert with MD-5 instead of SHA-2
+example-md5.crt: example-md5.csr
+	openssl x509 -req -md5 -in $< -signkey $(@:.crt=.key) -out $@ -days 2500 -extfile openssl.ext -extensions leaf
+
+# Bad root cert with missing "cert sign" key usage
+example-root-bad-ku.crt: example-root-bad-ku.csr
+	openssl x509 -req -sha256 -in $< -signkey $(@:.crt=.key) -out $@ -days 2500 -extfile openssl.ext -extensions root_bad
+
+# Bad cert with invalid serial
+example-bad-serial.crt: example-bad-serial.csr
+	openssl x509 -req -sha256 -in $< -signkey $(@:.crt=.key) -out $@ -set_serial 0 -days 2500 -extfile openssl.ext -extensions leaf
+
+# Example with small RSA key
+example-small-key.key:
+	openssl genrsa -out $@ 1024
+
+example-small-key.crt: example-small-key.csr
+	openssl x509 -req -sha256 -in $< -signkey $(@:.crt=.key) -out $@ -days 2500
+
+# Short expiry certificate (OpenSSL requires min. of 1 day, so let's do that)
+example-expired.crt: example-expired.csr
+	openssl x509 -req -sha256 -in $< -signkey $(@:.crt=.key) -out $@ -days 1
+
+# Example ECC key
+example-elliptic-sha1.key:
+	openssl ecparam -genkey -name prime256v1 -out $@
+
+example-elliptic-sha1.crt: example-elliptic-sha1.csr
+	openssl x509 -req -in $< -signkey $(@:.crt=.key) -out $@ -days 2500 -extfile openssl.ext -extensions leaf
diff --git a/test-certs/README.md b/test-certs/README.md
new file mode 100644
index 0000000..086c7c3
--- /dev/null
+++ b/test-certs/README.md
@@ -0,0 +1,7 @@
+Test certs
+==========
+
+The certificates and keys contained in this directory have been generated for
+test/development purposes only. Do not use these files in production
+deployments! You can regenerate them anytime by running `make all`. The
+password for the PKCS12 and JCEKS keystores is always "password".
diff --git a/test-certs/example-bad-serial.crt b/test-certs/example-bad-serial.crt
new file mode 100644
index 0000000..e03a801
--- /dev/null
+++ b/test-certs/example-bad-serial.crt
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/test-certs/example-bad-serial.csr b/test-certs/example-bad-serial.csr
new file mode 100644
index 0000000..7f204bf
--- /dev/null
+++ b/test-certs/example-bad-serial.csr
@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/test-certs/example-bad-serial.jceks b/test-certs/example-bad-serial.jceks
new file mode 100644
index 0000000..bdf7400
Binary files /dev/null and b/test-certs/example-bad-serial.jceks differ
diff --git a/test-certs/example-bad-serial.p12 b/test-certs/example-bad-serial.p12
new file mode 100644
index 0000000..96e1913
Binary files /dev/null and b/test-certs/example-bad-serial.p12 differ
diff --git a/test-certs/example-elliptic-sha1.crt b/test-certs/example-elliptic-sha1.crt
new file mode 100644
index 0000000..b4753d2
--- /dev/null
+++ b/test-certs/example-elliptic-sha1.crt
@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/test-certs/example-elliptic-sha1.csr b/test-certs/example-elliptic-sha1.csr
new file mode 100644
index 0000000..eff4caa
--- /dev/null
+++ b/test-certs/example-elliptic-sha1.csr
@@ -0,0 +1,8 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBGDCBwAIBADBeMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExEDAOBgNVBAoT
+B2NlcnRpZ28xEDAOBgNVBAsTB2V4YW1wbGUxHjAcBgNVBAMTFWV4YW1wbGUtZWxs
+aXB0aWMtc2hhMTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABM8V3EeolNVmL+Hi
+e/hVzYWucKMFH0LpJecnBaGnFRNz3WoL4fYe6aEKx2YRdTOyFSiCDTZYyIU38sVD
+F3q5Hy2gADAJBgcqhkjOPQQBA0gAMEUCIQDy8yncmMV6lW+WKrOnGC5CErrlo1TL
+HaI9p2weexenLgIgLiO+4pINprkogDRDqPBow5qzTkyydxtiA+1npjjcYqY=
+-----END CERTIFICATE REQUEST-----
diff --git a/test-certs/example-elliptic-sha1.jceks b/test-certs/example-elliptic-sha1.jceks
new file mode 100644
index 0000000..5dc743c
Binary files /dev/null and b/test-certs/example-elliptic-sha1.jceks differ
diff --git a/test-certs/example-elliptic-sha1.key b/test-certs/example-elliptic-sha1.key
new file mode 100644
index 0000000..b04c71c
--- /dev/null
+++ b/test-certs/example-elliptic-sha1.key
@@ -0,0 +1,8 @@
+-----BEGIN EC PARAMETERS-----
+BggqhkjOPQMBBw==
+-----END EC PARAMETERS-----
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIJ2Y2TSl0hYXHzCwS8H8EbgG7QwF8yShSsJq5UOrfcgXoAoGCCqGSM49
+AwEHoUQDQgAEzxXcR6iU1WYv4eJ7+FXNha5wowUfQukl5ycFoacVE3Pdagvh9h7p
+oQrHZhF1M7IVKIINNljIhTfyxUMXerkfLQ==
+-----END EC PRIVATE KEY-----
diff --git a/test-certs/example-elliptic-sha1.p12 b/test-certs/example-elliptic-sha1.p12
new file mode 100644
index 0000000..4d7d685
Binary files /dev/null and b/test-certs/example-elliptic-sha1.p12 differ
diff --git a/test-certs/example-expired.crt b/test-certs/example-expired.crt
new file mode 100644
index 0000000..54a56d9
--- /dev/null
+++ b/test-certs/example-expired.crt
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
diff --git a/test-certs/example-expired.csr b/test-certs/example-expired.csr
new file mode 100644
index 0000000..e9b783d
--- /dev/null
+++ b/test-certs/example-expired.csr
@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/test-certs/example-expired.jceks b/test-certs/example-expired.jceks
new file mode 100644
index 0000000..4a120a2
Binary files /dev/null and b/test-certs/example-expired.jceks differ
diff --git a/test-certs/example-expired.p12 b/test-certs/example-expired.p12
new file mode 100644
index 0000000..04bc3a8
Binary files /dev/null and b/test-certs/example-expired.p12 differ
diff --git a/test-certs/example-leaf.crt b/test-certs/example-leaf.crt
new file mode 100644
index 0000000..b9ee9fe
--- /dev/null
+++ b/test-certs/example-leaf.crt
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/test-certs/example-leaf.csr b/test-certs/example-leaf.csr
new file mode 100644
index 0000000..1f98c63
--- /dev/null
+++ b/test-certs/example-leaf.csr
@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIICmjCCAYICAQAwVTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRAwDgYDVQQK
+EwdjZXJ0aWdvMRAwDgYDVQQLEwdleGFtcGxlMRUwEwYDVQQDEwxleGFtcGxlLWxl
+YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7stSvfQyGuHw3v34f
+isqIdDXberrFoFk9ht/WdXgYzX2uLNKdsR/J5sbWSl8K/5djpzj31eIzqU69w8v7
+SChM5x9bouDsABHz3kZucx5cSafEgJojysBkcrq3VY+aJanzbL+qErYX+lhRpPcZ
+K6JMWIwar8Y3B2la4yWwieecw2/WfEVvG0M/DOYKnR8QHFsfl3US1dnBM84czKPy
+t9r40gDk2XiH/lGts5a94rAGvbr8IMCtq0mA5aH3Fx3mDSi3+4MZwygCAHrF5O5i
+SV9rEI+m2+7j2S+jHDUnvV+nqcpb9m6ENECnYX8FD2KcqlOjTmw8smDy09N2Np6i
+464lAgMBAAGgADANBgkqhkiG9w0BAQUFAAOCAQEAZW13CST8BtPCINS0CiIv9BMv
+zXpkCRz3riPvrPkllnOY3Dp0NQzQkdj3aE4at5GSN9fOTWCQ0tGnjOLAZ8tqHcyg
+FLgU3MjDcsRvyeQ8mYpCqeUbwq/nHIs33jM/x087lTP7aNXGH4sncxZdIv71+sqF
+f4WnumxsJUARaeb0AnUZmtAC/OR+9vpiUw+wMMhMbDNCboKYANqnFhWkTKp5/85f
+eC21haSG55pT7bGvlG9WNawgXJ3WX48yw29dSyDKd/buVM5Andrp7hYVuC57wz0u
+wng/cxCCQrENS4qSvxOgFiLK2j1LHccMuChPFFGyOyXqBNs9pr8F4/2qPJ7tOw==
+-----END CERTIFICATE REQUEST-----
diff --git a/test-certs/example-leaf.jceks b/test-certs/example-leaf.jceks
new file mode 100644
index 0000000..77f1792
Binary files /dev/null and b/test-certs/example-leaf.jceks differ
diff --git a/test-certs/example-leaf.p12 b/test-certs/example-leaf.p12
new file mode 100644
index 0000000..4b857d2
Binary files /dev/null and b/test-certs/example-leaf.p12 differ
diff --git a/test-certs/example-md5.crt b/test-certs/example-md5.crt
new file mode 100644
index 0000000..c4f216a
--- /dev/null
+++ b/test-certs/example-md5.crt
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/test-certs/example-md5.csr b/test-certs/example-md5.csr
new file mode 100644
index 0000000..69b19d7
--- /dev/null
+++ b/test-certs/example-md5.csr
@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
diff --git a/test-certs/example-md5.jceks b/test-certs/example-md5.jceks
new file mode 100644
index 0000000..0c0bc58
Binary files /dev/null and b/test-certs/example-md5.jceks differ
diff --git a/test-certs/example-md5.p12 b/test-certs/example-md5.p12
new file mode 100644
index 0000000..8fad774
Binary files /dev/null and b/test-certs/example-md5.p12 differ
diff --git a/test-certs/example-root-bad-ku.crt b/test-certs/example-root-bad-ku.crt
new file mode 100644
index 0000000..c818605
--- /dev/null
+++ b/test-certs/example-root-bad-ku.crt
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/test-certs/example-root-bad-ku.csr b/test-certs/example-root-bad-ku.csr
new file mode 100644
index 0000000..1c7ab09
--- /dev/null
+++ b/test-certs/example-root-bad-ku.csr
@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/test-certs/example-root-bad-ku.jceks b/test-certs/example-root-bad-ku.jceks
new file mode 100644
index 0000000..2b4fb1e
Binary files /dev/null and b/test-certs/example-root-bad-ku.jceks differ
diff --git a/test-certs/example-root-bad-ku.p12 b/test-certs/example-root-bad-ku.p12
new file mode 100644
index 0000000..f003b00
Binary files /dev/null and b/test-certs/example-root-bad-ku.p12 differ
diff --git a/test-certs/example-root.crt b/test-certs/example-root.crt
new file mode 100644
index 0000000..2299ec9
--- /dev/null
+++ b/test-certs/example-root.crt
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----
+MIIDUzCCAjugAwIBAgIJAKg+LQlirffwMA0GCSqGSIb3DQEBCwUAMFUxCzAJBgNV
+BAYTAlVTMQswCQYDVQQIEwJDQTEQMA4GA1UEChMHY2VydGlnbzEQMA4GA1UECxMH
+ZXhhbXBsZTEVMBMGA1UEAxMMZXhhbXBsZS1yb290MB4XDTE2MDYxMDIyMTQxMVoX
+DTIzMDQxNTIyMTQxMVowVTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRAwDgYD
+VQQKEwdjZXJ0aWdvMRAwDgYDVQQLEwdleGFtcGxlMRUwEwYDVQQDEwxleGFtcGxl
+LXJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKOEoSiNjMQ8/z
+UFcQW89LWw+UeTXKGwNDSpGjyi8jBKZ1lWPbnMmrjI6DZ9ReevHHzqBdKZt+9NFP
+FEz7djDMRByIuJhRvzhfFBflaIdSeNk2+NpUaFuUUUd6IIePu0AdRveJ8ZGHXRwC
+eEDIVCZS4oBYPHOhX/zMWDg8vSO4pSxTjGc7I8fHxaUSkVzUBbeO9T/1eFk0m2ux
+s3UziUck2X/8YqRd+p/EaBED78nXvKRALAguKAzqxIgk3ccPK0SVQFNFq+eV1/qo
+8coueQuqMpCAvwVkfpVKhneyC2NlMrfzlcZZbfG/irlSjQn5+ExZX4Isy1pCUbOi
+VfSrsCdtAgMBAAGjJjAkMA4GA1UdDwEB/wQEAwICBDASBgNVHRMBAf8ECDAGAQH/
+AgEAMA0GCSqGSIb3DQEBCwUAA4IBAQCLEJU65vTU+oLbNHLOCR6fALrbjK7xsi6S
+FDpSXBMm74MWsy3myDBmXpOcN8hCYgsgivUXTQz9ynXP/pzOj4b83zzlaOfPtLTA
+mMhKWVV4Q85mrDQz+HzG4lKXM78eTsD8PyrocA/tSE7mVEJ0Jal4E2KI/Z9/fqpY
+FLB6LFlx5n83ehXM/egA0l4OeCC9nBKCeNUN3sIQO85lljyzAJdtWnsdoWogJs6q
+jcV8n2U5xjZxN5ZFdclYLjq6g2cjEXXMQxb8b7ZhHjLWFdjHP85UvXHK3DpK3JmU
+g8bYS7t1DJffDQNjawhlsMycKZN+r0ND0Um4m7AjGqxbKT/M2yKF
+-----END CERTIFICATE-----
diff --git a/test-certs/example-root.csr b/test-certs/example-root.csr
new file mode 100644
index 0000000..f4170a7
--- /dev/null
+++ b/test-certs/example-root.csr
@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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==
+-----END CERTIFICATE REQUEST-----
diff --git a/test-certs/example-root.jceks b/test-certs/example-root.jceks
new file mode 100644
index 0000000..ae624cc
Binary files /dev/null and b/test-certs/example-root.jceks differ
diff --git a/test-certs/example-root.p12 b/test-certs/example-root.p12
new file mode 100644
index 0000000..f8ac2af
Binary files /dev/null and b/test-certs/example-root.p12 differ
diff --git a/test-certs/example-sha1.crt b/test-certs/example-sha1.crt
new file mode 100644
index 0000000..c1f1250
--- /dev/null
+++ b/test-certs/example-sha1.crt
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/test-certs/example-sha1.csr b/test-certs/example-sha1.csr
new file mode 100644
index 0000000..290ab98
--- /dev/null
+++ b/test-certs/example-sha1.csr
@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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==
+-----END CERTIFICATE REQUEST-----
diff --git a/test-certs/example-sha1.jceks b/test-certs/example-sha1.jceks
new file mode 100644
index 0000000..132df27
Binary files /dev/null and b/test-certs/example-sha1.jceks differ
diff --git a/test-certs/example-sha1.p12 b/test-certs/example-sha1.p12
new file mode 100644
index 0000000..c29705b
Binary files /dev/null and b/test-certs/example-sha1.p12 differ
diff --git a/test-certs/example-small-key.crt b/test-certs/example-small-key.crt
new file mode 100644
index 0000000..f7bf03d
--- /dev/null
+++ b/test-certs/example-small-key.crt
@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/test-certs/example-small-key.csr b/test-certs/example-small-key.csr
new file mode 100644
index 0000000..b98b65b
--- /dev/null
+++ b/test-certs/example-small-key.csr
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/test-certs/example-small-key.jceks b/test-certs/example-small-key.jceks
new file mode 100644
index 0000000..4672ac8
Binary files /dev/null and b/test-certs/example-small-key.jceks differ
diff --git a/test-certs/example-small-key.key b/test-certs/example-small-key.key
new file mode 100644
index 0000000..4e52953
--- /dev/null
+++ b/test-certs/example-small-key.key
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/test-certs/example-small-key.p12 b/test-certs/example-small-key.p12
new file mode 100644
index 0000000..55f40ce
Binary files /dev/null and b/test-certs/example-small-key.p12 differ
diff --git a/test-certs/openssl.ext b/test-certs/openssl.ext
new file mode 100644
index 0000000..e48c744
--- /dev/null
+++ b/test-certs/openssl.ext
@@ -0,0 +1,9 @@
+[root]
+keyUsage=critical, keyCertSign
+basicConstraints=critical, CA:TRUE, pathlen:0
+[leaf]
+extendedKeyUsage = clientAuth, serverAuth
+subjectAltName = IP:127.0.0.1,IP:::1,DNS:localhost
+[root_bad]
+keyUsage=critical, cRLSign
+basicConstraints=critical, CA:TRUE, pathlen:0