AM625: AM62x Secure Boot Stuck at "Starting Keywriting" — VPP Hardware Toggle Issue

Hello,

The 1.8V VPP is a must for programming anything to OTP. Once you have taken care of this on your custom board, you should be able to run the keywriter successfully.

Hello Prashant,

Thank you for your quick and helpful response regarding the “Starting Keywriting” behavior.

I have applied the advice, enabled the VPP rail correctly (reading 1.8 V externally), and modified the software to reflect that change. Now, the R5 UART console log proceeds as follows:

Starting Keywriting
Enabled VPP
keys Certificate found: 0x43c16800
Keywriter Debug Response: 0x20
Error occured

From TI documentation (and the TISCI error codes), I understand that 0x20 corresponds to KEYWR_ERR_INTERNAL_OP — an internal operation error.

Clarification Requested:

• Whether Debug Response: 0x20 is definitively linked to a certificate validation failure, such as SMPK mismatch or an unsupported MSV?

• Is the correct remedy to regenerate the certificate without MSV, and avoid MSV flags when calling gen_keywr_cert.sh (i.e. only include SMPK and SMEK)?

• Are there additional steps or checks (e.g. OpenSSL version requirements, specific SDK version, platform compatibility) you recommend to resolve this error?
  
  

Regards,

Kapil 

Kapil Vyas said:

From TI documentation (and the TISCI error codes), I understand that 0x20 corresponds to KEYWR_ERR_INTERNAL_OP — an internal operation error.

This error is mostly tied to the OpenSSL version. Please make sure you are using the OpenSSL v1.1.x as mentioned in the OTP Keywriter user guide.

Hii Prashant,

Thank you for confirming the OpenSSL version requirement. We have switched to OpenSSL 1.1.1q and rebuilt the bootloader, but the R5 console still reports:

Starting Keywriting
Enabled VPP
keys Certificate found: 0x43c16800
Keywriter Debug Response: 0x20
Error occured

We have:
- Generated the certificate using only SMPK/SMEK/BMPK/BMEK (no MSV, no OTP extension).
- Verified hardware VPP is stable at 1.8 V.

Could you please confirm:
1. Does `0x20` definitively indicate SMPK/BMPK mismatch or other certificate field validation failures?
2. Is certificate size itself (e.g. too large) a common cause of failures within OTP validation?
3. Would it help to enable the M4/TIFS UART trace for debugging?
4. Any known dummy-key workflows that cause 0x20 despite correct OpenSSL usage?

Kapil Vyas said:

3. Would it help to enable the M4/TIFS UART trace for debugging?

Please share these TIFS logs captured from the MAIN_UART1 port. It should provide additional insights.

On another note, have you really confirmed the VPP is at 1.8V?

Hii Prashant,

As requested, I am ready to share the TIFS logs from the Cortex‑M4 MAIN_UART1 port, but I need assistance identifying how to capture them correctly.

R5 UART Console Output:

port is : /dev/ttyUSB0
flowcontrol : none
baudrate is : 115200
parity is : none
databits are : 8
stopbits are : 1
escape is : C-a
local echo is : no
noinit is : no
noreset is : yes
hangup is : no
nolock is : yes
send_cmd is : sz -vv
receive_cmd is : rz -vv -E
imap is :
omap is :
emap is : crcrlf,delbs,
logfile is : none
initstring : none
exit_after is : not set
exit is : no

Type [C-a] [C-h] to see available commands
Terminal ready

Starting Keywriting
Enabled VPP
keys Certificate found: 0x43c15e00
Keywriter Debug Response:0x20
Error occured...

I've verified that VPP is stable at 1.8 V via external source during keywriting.

my question is How to Capture this UART M4 logs ? pls assist regarding that !!

Once I can capture both UART outputs during the keywriting flow, I’ll share the complete logs in a combined text file for your review.

Thank you for your continued support!

regards,

Kapli

Hello,

The TIFS logs are by default enabled. So, simply connect to all the four UART ports and the TIFS logs should come on one of them.

The sample logs are shown here:

dev.ti.com/.../node

Kapil Vyas said:

2. If MAIN_UART1 is not available externally, is there an alternative method to obtain TIFS logs (e.g. via SYSFW log buffers or JTAG)?

The following resopnse has a function that can be used to dump the logs read from the memory buffer:

e2e.ti.com/.../5766734

Hello ,

Thank you for confirming that TIFS logs are enabled by default and accessible via MAIN_UART1.

While I currently have only UART0 connected (R5 console), I need guidance on using UART1 for capturing the M4/TIFS logs on our custom board.

To finalize our debug setup, could you please clarify the following?

• Is MAIN_UART1 a SoC-level UART port used by the TIFS firmware?

• Which physical pins or connectors (for example, E19/A20 as indicated in reference DTS patches) should be wired to get UART1 output?

• Is any additional configuration required in the device tree or bootloader (e.g., enabling pinmux, status flags) to enable and receive logs from UART1?

Once I connect our FTDI adapter correctly and configure UART1 if needed, I should be able to capture the detailed M4 debug trace.

Thank you for your continued support!

As I conveyed in my previous response, you may not need the MAIN_UART1 for capturing the TIFS traces. These can be captured from the memory buffer as well which is sufficient in the context of the keywriter.

 I have captured the TIFS logs
I have attached the trace log file for your review  

--TIFS_LOGS--
0x4F8A0000
          0x4F8B0000
                    0x4F80001C
                              0x4003007
                                       0x4400907
                                                0x20800000
                                                          0x20800001
                                                                    0x4F8A00FF
                                                                              0x4F8B0001
                                                                                        0x4F80001C
                                                                                                  0x4C40001C
                                                                                                            0x4C40001C
                                                                                                                      0x4C40001C
                                                                                                                                0x4C40001C
                                                                                                                                          0x4C40001C
                                                                                                                                                    0x4C40001C
                                                                                                                                                              0x4C40001C
                                                                                                                                                                        0x4C40001C
                                                                                                                                                                                  0x4C40001C
                                                                                                                                                                                            0x4C40001C
                                                                                                                                                                                                      0x4C40001C
    0x4C40001C
              0x4C40001C
                        0x4C40001C
                                  0x4C40001C
                                            0x4C40001C
                                                      0x4C40001C
                                                                0x4C40001C
                                                                          0x420021
                                                                                  0x820024
                                                                                          0x42000C
                                                                                                  0x820024
                                                                                                          0x4F8A00FF
                                                                                                                    0x4F8B0001
                                                                                                                              0x4

Please let me know what the internal validation trace reveals and if there are any next steps to resolve the OTP keywriter internal error.

Hello,

These logs do not contain anything. The logs should look like the sample logs I shared previously.

At which point in the code are you calling the function to dump the TIFS logs? Have you made sure the logs are captured correctly and not truncated?

Can you shared your keywriter certificate generation command logs as well?

Thanks!

Hello, 

I’ve noticed that the logs here differ from the sample logs provided in the thread you shared previously. I have no additional output besides what’s shown above.

Also inside main.c i add that function and inside main i m calling that function.

Below is the certificate generation command I used and the full log output from the terminal:

ti/mcu_plus_sdk_am62x_09_02_01_06/source/security/sbl_keywriter/scripts/cert_gen/am62x$ 
./gen_keywr_cert.sh -t tifek/ti_fek_public.pem --msv 0xC0FFE -b-def --bmek-def -s-def --smek-def --keycnt 2 --keyrev 1
# Using MSV[19:0]: 0x000C0FFE
INFO: Using default BMPK for programming
INFO: Using default BMEK for programming
INFO: Using default SMPK for programming
INFO: Using default SMEK for programming
# Using Key Count: 0x00000003
# Using Key Rev: 0x00000001
Generating Dual signed certificate!!
GEN: AES256 key generated, since not provided
# encrypt aes256 key with tifek public part
The command rsautl was deprecated in version 3.0. Use 'pkeyutl' instead.
# encrypt SMPK-priv signed aes256 key(hash) with tifek public part
The command rsautl was deprecated in version 3.0. Use 'pkeyutl' instead.
The command rsautl was deprecated in version 3.0. Use 'pkeyutl' instead.
# encrypt smpk-pub hash using aes256 key
writing RSA key
# encrypt smek (sym key) using aes256 key
# encrypt BMPK-priv signed aes256 key(hash) with tifek public part
The command rsautl was deprecated in version 3.0. Use 'pkeyutl' instead.
The command rsautl was deprecated in version 3.0. Use 'pkeyutl' instead.
# encrypt bmpk-pub hash using aes256 key
writing RSA key
# encrypt bmek (sym key) using aes256 key
1701	secondary_cert.bin
5414	primary_cert.bin
7115	../../x509cert/final_certificate.bin
# SHA512 Hashes of keys are stored in verify_hash.csv for reference..

I should have asked for these command logs earlier only. I just assumed there should be no issue if you are actually using the OpenSSL v1.1.x

1701 secondary_cert.bin
5414 primary_cert.bin

This is the issue. The primary certificate size here is more than 5400 bytes which is not acceptable. From the logs, it seems you are actually using OpenSSL v3 not the v1.1.x

Please use the correct OpenSSL version as mentioned previously.

Hello Prashant, 

Thank you for pointing out the OpenSSL 1.1, actually my  certificate generation path is using openssl v3.0 now i change it to 1.1 
this  is the certificate generation full log output from the terminal 

# Using MSV[19:0]: 0x000C0FFE
INFO: Using default BMPK for programming
INFO: Using default BMEK for programming
INFO: Using default SMPK for programming
INFO: Using default SMEK for programming
# Using Key Count: 0x00000003
# Using Key Rev: 0x00000001
Generating Dual signed certificate!!
GEN: AES256 key generated, since not provided
# encrypt aes256 key with tifek public part
# encrypt SMPK-priv signed aes256 key(hash) with tifek public part
# encrypt smpk-pub hash using aes256 key
writing RSA key
# encrypt smek (sym key) using aes256 key
# encrypt BMPK-priv signed aes256 key(hash) with tifek public part
# encrypt bmpk-pub hash using aes256 key
writing RSA key
# encrypt bmek (sym key) using aes256 key
1668	secondary_cert.bin
5383	primary_cert.bin
7051	../../x509cert/final_certificate.bin
# SHA512 Hashes of keys are stored in verify_hash.csv for reference..

It still isn't working? If not, please share where exactly you added the function call to dump the TIFS logs.

Hello,

I ran the certificate generation with the following console log:

# Using MSV[19:0]: 0x000C0FFE
INFO: Using default BMPK for programming
...
# Using Key Count: 0x00000003
# Using Key Rev: 0x00000001

This confirms that the certificate includes the MSV.

For development purposes using dummy keys,

As you can see, MSV is indeed being included  in this certificate. Since this may cause issues if MSV was already fused previously, please advise whether I should:

• override the MSV value, or

• Exclude the MSV flag entirely and focus only on key fields (SMPK/BMPK, key count, key revision)

I can rebuild accordingly once confirmed.

Inside main.c file i've added dump_tifs_logs funtion and call that funtion inside int main ()

keywriter_processKeyConfig();
dump_tifs_logs();  ("here i call that function")
Drivers_close();
System_deinit();

Hello,
still got the same TIFS logs as previously uploaded for your review.

Hello,

Could you please make sure the UART logs are not truncated by the console, maybe minicom, you are using?

Please share the full logs as well not just the TIFS logs.

Thanks!

Hello,

Is this funtion call placed correctly? pls confirmed. 

Yes, it is.

Hello, 

I attempted to capture the full UART logs using picocom with logging enabled (picocom -b 115200 /dev/ttyUSB0 | tee full_uart_log.txt) .

However, the generated log file is only around 600 bytes in size. It appears that either the logs are getting truncated or the early boot output is not being captured correctly.

would you recommend switching to another UART tool (e.g., minicom or Tera Term) or using a serial logger to ensure complete capture?

Please advise on how to best proceed to obtain the full logs you need.

Teraterm should be okay. Otherwise, this is a general issue. Please browse the internet on how to disable line wrapping in the tool you are using for capturing the UART logs.

Hi ,

As per your suggestion, we have confirmed that line wrapping is disabled in the UART logging tool (we’re using picocom on Ubuntu in a VM). Despite this, we are still unable to capture the full TIFS logs. The logs appear truncated or stop shortly after minimal output (e.g., some hex values or an early error message like Keywriter Debug Response: 0x20).

Any suggestions on how to proceed with getting the complete TIFS logs would be appreciated.

Hello,

Please apply the following patch and try again

diff --git a/source/security/sbl_keywriter/am62x-sk/r5fss0-0_nortos/example.syscfg b/source/security/sbl_keywriter/am62x-sk/r5fss0-0_nortos/example.syscfg
index c45c9bcbf..e04031b52 100644
--- a/source/security/sbl_keywriter/am62x-sk/r5fss0-0_nortos/example.syscfg
+++ b/source/security/sbl_keywriter/am62x-sk/r5fss0-0_nortos/example.syscfg
@@ -38,6 +38,7 @@ debug_log.enableLogZoneInfo                  = true;
 debug_log.enableCssLog                       = false;
 debug_log.uartLog.$name                      = "CONFIG_UART0";
 debug_log.uartLog.useWakeupDomainPeripherals = false;
+debug_log.uartLog.intrEnable                 = "DISABLE";
 debug_log.uartLog.UART.$assign               = "USART0";
 
 /**

Hello, 

As per your suggestion, we added that patch and tried here is the response we get,

also the function call we add in main.c [dump_tifs_logs()] if i call that function before  [keywriter_processKeyConfig();] then only i can see this log if i call that function after that on any line then only i can see the R5 logs 

Starting Keywriting
Enabled VPP

--TIFS_LOGS--
0x4F8A0000
          0x4F8B0000
                    0x4F80001C
                              0x4003007
                                       0x4400907
                                                0x20800000
                                                          0x20800001
                                                                    0x4F8A00FF
                                                                              0x4F8B0001
                                                                                        0x4F80001C
                                                                                                  0x4C40001C
                                                                                                            0x4C40001C
                                                                                                                      0x4C40001C
                                                                                                                                0x4C40001C
                                                                                                                                          0x4C40001C
                                                                                                                                                    0x4C40001C
                                                                                                                                                              0x4C40001C
                                                                                                                                                                        0x4C40001C
                                                                                                                                                                                  0x4C40001C
                                                                                                                                                                                            0x4C40001C
                                                                                                                                                                                                      0x4C4C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           1
                                                                                                                                                                                                           4
                                                                                                                                                                                                           C
                                                                                                                                                                                                           4
                                                                                                                                                                                                           F
                                                                                                                                                                                                           1
                                                                                                                                                                                                           C
                                                                                                                                                                                                           2
                                                                                                                                                                                                           4
                                                                                                                                                                                                           7
                                                                                                                                                                                                           7

--TIFS_LOGS--
keys Certificate found: 0x43c15e80 
Keywriter Debug Response:0x20 
Error occured... 

Please call the function here:

diff --git a/sbl_keywriter/am62x-sk/r5fss0-0_nortos/keywriter_utils.c b/sbl_keywriter/am62x-sk/r5fss0-0_nortos/keywriter_utils.c
index 6f61ade..a94f7f7 100644
--- a/sbl_keywriter/am62x-sk/r5fss0-0_nortos/keywriter_utils.c
+++ b/sbl_keywriter/am62x-sk/r5fss0-0_nortos/keywriter_utils.c
@@ -66,6 +66,7 @@ void keywriter_processKeyConfig()
     status = Sciclient_service(&reqParam, &respParam);
 
 	DebugP_log("Keywriter Debug Response:0x%x \r\n", (uint32_t) response.debug_response);
+	dump_tifs_logs();
 
 	if (( status == SystemP_SUCCESS ) && ( response.debug_response == 0x0U ))
 	{

The error is trapping the execution in infinite loop (DebugP_assertNoLog).

Hii, 

After calling that function, we got this output

Starting Keywriting
Enabled VPP

--TIFS_LOGS--
0x4F8A0000
          0x4F8B0000
                    0x4F80001C
                              0x4003007
                                       0x4400907
                                                0x20800000
                                                          0x20800001
                                                                    0x4F8A00FF
                                                                              0x4F8B0001
                                                                                        0x4F80001C
                                                                                                  0x4C40001C
                                                                                                            0x4C40001C
                                                                                                                      0x4C40001C
                                                                                                                                0x4C40001C
                                                                                                                                          0x4C40001C
                                                                                                                                                    0x4C40001C
                                                                                                                                                              0x4C40001C
                                                                                                                                                                        0x4C40001C
                                                                                                                                                                                  0x4C40001C
                                                                                                                                                                                            0x4C40001C
                                                                                                                                                                                                      0x4C4C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           1
                                                                                                                                                                                                           4
                                                                                                                                                                                                           C
                                                                                                                                                                                                           4
                                                                                                                                                                                                           F
                                                                                                                                                                                                           1
                                                                                                                                                                                                           C
                                                                                                                                                                                                           2
                                                                                                                                                                                                           4
                                                                                                                                                                                                           7
                                                                                                                                                                                                           7

--TIFS_LOGS--
keys Certificate found: 0x43c15e80 
Keywriter Debug Response:0x20 

--TIFS_LOGS--
0x4F8A0000
          0x4F8B0000
                    0x4F80001C
                              0x4003007
                                       0x4400907
                                                0x20800000
                                                          0x20800001
                                                                    0x4F8A00FF
                                                                              0x4F8B0001
                                                                                        0x4F80001C
                                                                                                  0x4C40001C
                                                                                                            0x4C40001C
                                                                                                                      0x4C40001C
                                                                                                                                0x4C40001C
                                                                                                                                          0x4C40001C
                                                                                                                                                    0x4C40001C
                                                                                                                                                              0x4C40001C
                                                                                                                                                                        0x4C40001C
                                                                                                                                                                                  0x4C40001C
                                                                                                                                                                                            0x4C40001C
                                                                                                                                                                                                      0x4C4C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           C
                                                                                                                                                                                                           1
                                                                                                                                                                                                           4
                                                                                                                                                                                                           C
                                                                                                                                                                                                           4
                                                                                                                                                                                                           F
                                                                                                                                                                                                           1
                                                                                                                                                                                                           C
                                                                                                                                                                                                           2
                                                                                                                                                                                                           4
                                                                                                                                                                                                           7
                                                                                                                                                                                                           7
                                                                                                                                                                                                           1
                                                                                                                                                                                                           3
                                                                                                                                                                                                           1
                                                                                                                                                                                                           2
                                                                                                                                                                                                           r
                                                                                                                                                                                                           0
                                                                                                                                                                                                           r
                                                                                                                                                                                                           0

--TIFS_LOGS--
Error occured... 

I don't think you have the correct UART console settings. The output seems truncated or something. Maybe use Teraterm on the Windows host machine itself. Otherwise, simply use the CCS to save the memory buffer.

We use Teraterm on windows, this are logs we get 

Starting Keywriting
Enabled VPP

--TIFS_LOGS--
0x4F8A0000
0x4F8B0000
0x4F80001C
0x4003007
0x4400907
0x20800000
0x20800001
0x4F8A00FF
0x4F8B0001
0x4F80001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x420021
0x820024
0x42000C
0x820024
0x4F8A00FF
0x4F8B0001
0x4F80001C
0x420002
0x820024
0x4003007
0x4400907

--TIFS_LOGS--
keys Certificate found: 0x43c15e80 
Keywriter Debug Response:0x20 

--TIFS_LOGS--
0x4F8A0000
0x4F8B0000
0x4F80001C
0x4003007
0x4400907
0x20800000
0x20800001
0x4F8A00FF
0x4F8B0001
0x4F80001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x4C40001C
0x420021
0x820024
0x42000C
0x820024
0x4F8A00FF
0x4F8B0001
0x4F80001C
0x420002
0x820024
0x4003007
0x4400907
0x409031
0x800023
0x20C00001
0x20C00002
Internal Operation Error
debug_response:  0x20
Internal Operation Error
debug_response:  0x20

--TIFS_LOGS--
Error occured... 

What is the Keywriter and SDK version you are using? If you are using Keywriter v9.0, please note it must be used with SDK v9.0 only.

we are using MCU+SDK am62x_09_02_01_06 and processor_SDK_linux-am62xx-evm-09.02.01.10

Just to confirm :- it mandatory that tispl.bin and u-boot.img be built and signed using the same SDK version and key set as tiboot3.bin?

Can these binaries be taken from another machine or SDK or is version alignment strictly required?

Hello,

I’m writing to follow up on my earlier question, To move forward with testing and validation, I’d appreciate your confirmation on the  following point:

•  it mandatory that tispl.bin and u-boot.img be built and signed using the same SDK version and key set as tiboot3.bin?

  Can these binaries be taken from another machine or SDK or is version alignment strictly required?

• we are using MCU+SDK am62x_09_02_01_06 and processor_SDK_linux-am62xx-evm-09.02.01.10

This clarification will help determine whether the current issue we're seeing (Keywriter Debug Response: 0x20) is due to version mismatch or Anyother.

Please let me know at your earliest convenience. If any further details are needed, I’d be happy to provide them.

Hello,

Kapil Vyas said:

version alignment strictly required?

It is required only for the keywriter. You may use any SDK versions for your application development.

It is unlikely the SDK version mismatch causing the issue you are seeing but just in case it is better to use the SDK version mentioned in the keywriter user guide.

I am still highly suspecting the issue is very much related to the VPP only on your custom board.

Please try out the expected SDK version once. If it still doesn't work, please share how you confirm the VPP is really at 1.8V on your custom board.

Thanks!

Hi,

Thanks for the update. Regarding your note on VPP:

I’ve re-verified the VPP rail on our custom board. We have a test point(VP) at the SoC’s VPP pin, and we are supplying external 1.8V directly to that TP. The voltage we get on TP is 1.79V/1.8V and has been confirmed with a multimeter while the process is running.

Looking forward to your guidance.

Can you please share the generated certificate (final_certificate.bin) once?

The primary certificate in this one is of length 5414 bytes which is incorrect.

❯ binwalk final_certificate.bin

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
0             0x0             Certificate in DER format (x509 v3), header length: 4, sequence length: 1697
1701          0x6A5           Certificate in DER format (x509 v3), header length: 4, sequence length: 5410

Can you please rectify your setup to create the correct certificate?

Hello,

Now we rectify our setup and recreate the certificate.

I'm attaching generated certificate (final_certificate.bin) file for your review

0��0�h�
o��cׅ�G�5fm�H�Ո<0
	*�H��



 0��10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*�H��

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0
250814113420Z
250913113420Z0��10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*�H��

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0�"0
	*�H��



 � 0�
�
 �b��F�86�ሗJ��>�ok��ە)x#������9��ChPk,�
C�o7!$xE���-���<�!W.�P��ǣE�:_�3���8��0����<�A��)I��s�'���  L���%����Ϻ5��
8��n��_�M��S[y��5�"�,YVA�_��Oh�6���.�뀏��\$�,�b)\�H��eXș�����ma~�z��6[��%φw�!���=��B��s@g���25ʗ�?"�h�
n�����g��c
�Z~r�6�̌".�g�p����R��4��_��
�i=��,���J�^���Q��<0��&�#�,���Sj�P��p�u
��Uf�Q�=g�8^��7`�T�NQ����RE���pq�xy��I�
 !�����F�<	5�{���0�
8�)"�M�����m��d`�WS�D��e������8�Y�`j���8# �
�FQ���T=R`t%P���S�-P-�"����]���lf����k���
 
�r0p0U0

�0`	+

�&
"S0Q	`�H
e@#�.(̼@#��X�m׆�X�.@C�&�g��a&d��UjU�ﷄ�&u�P�Q��/~����U� 0
	*�H��



 �
 q^�2�
�	�']�J[�#�e�Pn#�Z�_����؝�^��_a+��c5[dچ��!)4CVZɳ8n��Vi�$�M�{���/���c��GP��6!1,����o;d�P�ƍi]eF�6�K�c�qz7y��¶>�Ux�WL����N�p 6k�7��8�E'D�g	x���fV��L[�Ȩn���J���J�9$, J�F��7��o}bvt-O%�w��J��.q�
}����<<�����P����j���j =�ɬ�=��q�5�|�ꛆp\U �wN���w?�Uq�Wm���
�׷D�y�NnV����[<E'T�BwKa3��ѫ��1|�$?MKzL��
�J	�(�T5|rD�=Ϭ��X����
�39��N-F�'@�=�����5��n��l���8�h��+��`R�$�.=��B�]�b�P0u��2\��h�N�6�9�u�B�u�@�B��RFJ��Y�Ł�pP�� ��~J>OP����+*�~0�0��

47\�l�j0�����a��O0
	*�H��



 0��10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*�H��

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0
250814113420Z
250913113420Z0��10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*�H��

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0�"0
	*�H��



 � 0�
�
 ��I�r�k#��He�"M�O������|��nY�������ҕ������P��H�"P�L{��
(&����UA�>['l���q�/r"�F
%b�>����,�n�>妠�EAN�tքN�y����%���ѹ�h�3YK�}w�ќ�#��X������,u-�b��	n�p� 	�b����lmȂ P������_�ОϓT�_�]�7`��{e���EE|K�[�NƔ=�N�Ҕ<�����6|�
�ZB7�*��n��g�� �sJh(1�������E~����;ǃ�!q��8�R�3��6�N��)�͛*�l_{��:y j}����X*�^�N��;O����4�� �Y-�^h�L���-v�X�P�7nfxo�0FM4��J���{Ů�2��l?��35�M��n`TP�~m���� ���+�7�Y�J�E�	��r3�^]�Z�!T����U�'�M	�@�.f�e�n��8N�a�t��_Q�B�����K�i���
 
���0��0U0

�0�	+

�&
@�0�� �S?S�0� ��|��:�����(��~� ���GH�¦"��ј���ތ���6�ޝ`
>��l��N@�F��b��]OX��֗
D�}����:?N~��e�eD��hI�̖J��r|��	�~�T�0���{���Ҿ��J8�Ú}�g�g@� I��&�vU��g)��ቤ
w,�w1w����f��9���4=3b8v��Bj�.�T)�aW`2A�*� ���6)�]�}|>�'t�e
[�	l���z���٣^�.�7�a���Ĕn�
;ljloP`��7�/��>���gJ�a�<�v�ߙT�Y��q1JN�����D�w
%��^Y[:<4�U�]�Xٯ��%�@��k�~�{ن.�a{�����1�,��P���
���GdU��Hb�L��}�.�=�.���a(0_�70s�>nчŸp���
c�!$$�}�v>��j���
���AQ��?h^8^���Z�n�J��@��M
�޸ړ��2FN���px��:`'��rP& 0�	+

�&
A�0�� Wl�뱉3r����� �P?ذv��X�;�Ͷ��14��ʚaD^�-�����!B�K���� ݈�>� ;Nv0�n�
���ѓo�xA�N��ޏ��N�;�Xl�ˌ�b<Z�%�ꋯ�g�E
�P�wn�+�)��‘^��0�f";�$��C#��;��X0�mW~��q�k#�\��)�v�K:�{]����"^ ��{؂��y�
>΁ ��
�o�{��A��)E����~w�ܞ��;d=�mտ��t�k����4�zt��pQ&lj�����_��C]�f�z���1@@�3͙2�y�y�V%��L��[7Q33�s�U��9�~�� t�� 
���e�
�r
(M{Xt�}�R1w���A��c�[��z�G��Nm���>/:=�68��)���v��
�7J��ٚ�p�ُ
�
!s�_�a��2�����/Ȣ�l�� jaZ�#�~��/?�=q��{��z��l�N��;�=�	�}p��ޘ���D��_E<���Q
�sg�H®d�I�� �g���eF��D���+��S��ѕ!��ߎ�Ck�@��LH�O\��T�"-8L��4���"�&z(�y�**�8 ��#�NQ4�\ڎP�!�B��D;7o�jq��훖R/j&N��䧞�=��V�  $&��W)I�/,�.ѱ4�E0 �to�/�Ɛ]y�Y4�À��Фa{jJb�d7�l�u�n�ܾo�	��_�(�)�`S�:����`�X����TU%//}�%�
/�O�v���O)��}����?^������y�]?����$!CE�b5�y� @�z]!�`�q:�/bXNR����jR�99H��wqS��0M#t�a2+O�|{Z�q�w
.�C����Rp�Fꐃ���#�K��۷�����m���i>���҄�s���"t5¥�����J!<�r3Va��	`4�,/�r~>�./-t��n����n]�^��7�䋲��G��k߄�c�qLձs�O$���'�1S2dK� ��\<�0e&��ȷ��g۔�w���7i��RS 0�	+

�&
B�0�� 7&&��i��U�xX���:
1	3X���>����Ǹ�C���qF���gY�l\�/��OT�U�Mp���xs�LŹy�}�/lk����Cu�k�^�v�ᛈ�_�
:����zjF�
a��W�� !{${VzZ�{��i3�g]'�W�
O�0�M��hBj��6�s��a:��X�K�u�G�
�0l��q�Wk+��A�,=6<a�f������&���0��-�ņ�l�y�7l����N�}y(lg���?~AL�|�r1= ��Xy{{��θۉ�̦h�?��ѫ,���>�:4J��uon���������8��)�$��d��ZUܧ�h���v�b��P��Ѵ��ju�t|���jjN�Ւ;qr(xq
*�FUa^[�뭄5�G��A�����z� /��$��y�13�*��c��
��o/���p���C��y�E
|]�i�y�"B����/���O
ಾt���+�V�����݁1
i���op��eP�?�e�B�ţ!�wW�(ޣ��W��Ã�LCF�57�H2(Z�b7����(�ʽY�aB��·Yt�WYRF��
lRk�Xo�� ‘M���a��������.��\_�� �S�C����rXp�� k�)!Rk���]�$A��'�YQf���q=�wrP�4��]]�`����>��"�{p�6�9�",n3K	<�-��f
����5+�u"S�$i�I'�@+�q�9V���\��Iz
�	��m�0\�����` �.���(m��
�`�8]�̛u >(�Gc�=Z��>�;
�A�����m���%�+�&��]m��s����Mߨ���<�i�.. l�++��o��e��N"�<j��۠��݆��G�PA=<��� P�9�� �i��{'O�
�+�R#�°{HW�Ӷ� ��~�s?����J
�T�г�63E�a���m)�A����p��� +���6��ؿ���Fw vB���?㗟�&�]�ʡ3v�f�K���S���&�B�g�����uȭ墏=���n�� 0��	+

�&
C��0��`3�����$mH%N}����k���J�m�i#���n�@
�����ɍ\�]1K��f�M ��+�����\���+�a���n'[���"��TΣ�G?|4�����.t x���V���e�	��O"}�
7��թ�r���
` ���Z0��	+

�&
D��0��@�.��g�.e��	�/��Sd>�x�p�n�(=�L�q@?*�/���q�#�K�:��;
�_�K�Oa\j�)������ʆj��� ���.�jq�/����i�+Kqo��� �%
@ ���Z0	+

�&
E
0   ����0��	+

�&
F��0��`hG���֝@ },��7��ۦz�l�]���pMڞ�'R#�`j�
9���7�R���q�fՓ��#|���v�1�%n=1�O��ES�RU�ʬ����~b�Q6�ѡ1���@ 34����&
JHz<%��n	Ok���8%Xe`�m�
` ���Z0��	+

�&
G��0��@=&�:�Gl��	�=eEc�}"L7f��	Bo���+���mfxa�WY�0���[c��+&֙EY�
�?B�Gu�����i/�6 ��������UkƔQ/�-���⺿1�N��
@ ���Z0	+

�&
H0

  ����0��	+

�&
I��0����                                                                                                                                                                                                 
 
  ����0	+

�&
J0
   
 ���Z0	+

�&
L0
 � ���Z0	+

�&
M0
    ���Z0	+

�&
N0       ����0	+

�&
O0       ����0 	+

�&
P0         ����0	+

�&
Q0   0
	*�H��



 �
 �']��|cx��-�eM� ���4������8���ˤN��h�� S�{�L�#^�;�V��V���%�z?�_��U�3-O��W1,�9������(��gN@�m=���FϮ��&-j W��+�b�7�����j鿹�D��{eѠ���(b/l��f5snY`Z��a�ͮ�)�,�.y�ү�,�KS��9��F4# �;�i�
lE�F�����x�;�d���5�?��^���P�<�h���4j&��{�I�c+�jh�1/H���B*A��i �JB�,ڤ�u���<
�1;p���"������h�����s=INBoG���V�Η�r��k�z�鞫�����g�K��2��JG���:�#(u+J��ə^���rl蟨�=�_�I��&�CX:�7Ʋ�sܳ��[E8�u\WQ�ɗ9k���YF��q���.�L���$��]g�Ȓ�� �(J]�j��_�u��_�����ѭ��g��Zt�?��S�H�=�|�����S�>�

Hello,

The certificate looks incorrect as the OpenSSL is not able to parse the certificate successfully

❯ openssl asn1parse -in 8156.final_certificate.bin.txt -inform DER
    0:d=0  hl=4 l=1664 cons: SEQUENCE
    4:d=1  hl=4 l=1128 cons: SEQUENCE
    8:d=2  hl=2 l=   3 cons: cont [ 0 ]
   10:d=3  hl=2 l=   1 prim: INTEGER           :02
   13:d=2  hl=2 l=  20 prim: INTEGER           :056F829E63D785DF478435666DF648B0D588163C
   35:d=2  hl=2 l=  13 cons: SEQUENCE
   37:d=3  hl=2 l=   9 prim: OBJECT            :sha512WithRSAEncryption
Error in encoding
123329955494784:error:0D07209B:asn1 encoding routines:ASN1_get_object:too long:crypto/asn1/asn1_lib.c:91:

There is definitely something wrong in the way the certificates are generated on your side. If the certificate is correct, the OpenSSL would parse it like so

❯ openssl asn1parse -in final_certificate.bin -inform DER
    0:d=0  hl=4 l=1664 cons: SEQUENCE
    4:d=1  hl=4 l=1128 cons: SEQUENCE
    8:d=2  hl=2 l=   3 cons: cont [ 0 ]
   10:d=3  hl=2 l=   1 prim: INTEGER           :02
   13:d=2  hl=2 l=  20 prim: INTEGER           :3B56A13BD0121162D62B032C8A1C70C06BE52417
   35:d=2  hl=2 l=  13 cons: SEQUENCE
   37:d=3  hl=2 l=   9 prim: OBJECT            :sha512WithRSAEncryption
   48:d=3  hl=2 l=   0 prim: NULL
   50:d=2  hl=3 l= 191 cons: SEQUENCE
   53:d=3  hl=2 l=  11 cons: SET
   55:d=4  hl=2 l=   9 cons: SEQUENCE
   57:d=5  hl=2 l=   3 prim: OBJECT            :countryName
   62:d=5  hl=2 l=   2 prim: PRINTABLESTRING   :oR
   66:d=3  hl=2 l=  11 cons: SET
   68:d=4  hl=2 l=   9 cons: SEQUENCE
   70:d=5  hl=2 l=   3 prim: OBJECT            :stateOrProvinceName
   75:d=5  hl=2 l=   2 prim: UTF8STRING        :rx
   79:d=3  hl=2 l=  22 cons: SET
   81:d=4  hl=2 l=  20 cons: SEQUENCE
   83:d=5  hl=2 l=   3 prim: OBJECT            :localityName
   88:d=5  hl=2 l=  13 prim: UTF8STRING        :gQE843yQV0sag
  103:d=3  hl=2 l=  43 cons: SET
  105:d=4  hl=2 l=  41 cons: SEQUENCE
  107:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
  112:d=5  hl=2 l=  34 prim: UTF8STRING        :dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f
  148:d=3  hl=2 l=  17 cons: SET
  150:d=4  hl=2 l=  15 cons: SEQUENCE
  152:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
  157:d=5  hl=2 l=   8 prim: UTF8STRING        :a87RB35W
  167:d=3  hl=2 l=  24 cons: SET
  169:d=4  hl=2 l=  22 cons: SEQUENCE
  171:d=5  hl=2 l=   3 prim: OBJECT            :commonName
  176:d=5  hl=2 l=  15 prim: UTF8STRING        :x0FSqGTPWbGpuiV
  193:d=3  hl=2 l=  49 cons: SET
  195:d=4  hl=2 l=  47 cons: SEQUENCE
  197:d=5  hl=2 l=   9 prim: OBJECT            :emailAddress
  208:d=5  hl=2 l=  34 prim: IA5STRING         :kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com
  244:d=2  hl=2 l=  30 cons: SEQUENCE
  246:d=3  hl=2 l=  13 prim: UTCTIME           :250816075009Z
  261:d=3  hl=2 l=  13 prim: UTCTIME           :250915075009Z
  276:d=2  hl=3 l= 191 cons: SEQUENCE
  279:d=3  hl=2 l=  11 cons: SET
  281:d=4  hl=2 l=   9 cons: SEQUENCE
  283:d=5  hl=2 l=   3 prim: OBJECT            :countryName
  288:d=5  hl=2 l=   2 prim: PRINTABLESTRING   :oR
  292:d=3  hl=2 l=  11 cons: SET
  294:d=4  hl=2 l=   9 cons: SEQUENCE
  296:d=5  hl=2 l=   3 prim: OBJECT            :stateOrProvinceName
  301:d=5  hl=2 l=   2 prim: UTF8STRING        :rx
  305:d=3  hl=2 l=  22 cons: SET
  307:d=4  hl=2 l=  20 cons: SEQUENCE
  309:d=5  hl=2 l=   3 prim: OBJECT            :localityName
  314:d=5  hl=2 l=  13 prim: UTF8STRING        :gQE843yQV0sag
  329:d=3  hl=2 l=  43 cons: SET
  331:d=4  hl=2 l=  41 cons: SEQUENCE
  333:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
  338:d=5  hl=2 l=  34 prim: UTF8STRING        :dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f
  374:d=3  hl=2 l=  17 cons: SET
  376:d=4  hl=2 l=  15 cons: SEQUENCE
  378:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
  383:d=5  hl=2 l=   8 prim: UTF8STRING        :a87RB35W
  393:d=3  hl=2 l=  24 cons: SET
  395:d=4  hl=2 l=  22 cons: SEQUENCE
  397:d=5  hl=2 l=   3 prim: OBJECT            :commonName
  402:d=5  hl=2 l=  15 prim: UTF8STRING        :x0FSqGTPWbGpuiV
  419:d=3  hl=2 l=  49 cons: SET
  421:d=4  hl=2 l=  47 cons: SEQUENCE
  423:d=5  hl=2 l=   9 prim: OBJECT            :emailAddress
  434:d=5  hl=2 l=  34 prim: IA5STRING         :kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com
  470:d=2  hl=4 l= 546 cons: SEQUENCE
  474:d=3  hl=2 l=  13 cons: SEQUENCE
  476:d=4  hl=2 l=   9 prim: OBJECT            :rsaEncryption
  487:d=4  hl=2 l=   0 prim: NULL
  489:d=3  hl=4 l= 527 prim: BIT STRING
 1020:d=2  hl=2 l= 114 cons: cont [ 3 ]
 1022:d=3  hl=2 l= 112 cons: SEQUENCE
 1024:d=4  hl=2 l=  12 cons: SEQUENCE
 1026:d=5  hl=2 l=   3 prim: OBJECT            :X509v3 Basic Constraints
 1031:d=5  hl=2 l=   5 prim: OCTET STRING      [HEX DUMP]:30030101FF
 1038:d=4  hl=2 l=  96 cons: SEQUENCE
 1040:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.34
 1051:d=5  hl=2 l=  83 prim: OCTET STRING      [HEX DUMP]:30510609608648016503040203044052BA4D6365F47CBA2979E2F57B2DBE50ABC31E2957433DA9155E6753EE00836A33A6FC2BBE2C41BEF0CB407DC802D8AAEDDE91696C877F3F5F3D555F53818C6102021507
 1136:d=1  hl=2 l=  13 cons: SEQUENCE
 1138:d=2  hl=2 l=   9 prim: OBJECT            :sha512WithRSAEncryption
 1149:d=2  hl=2 l=   0 prim: NULL
 1151:d=1  hl=4 l= 513 prim: BIT STRING
 1668:d=0  hl=4 l=5379 cons: SEQUENCE
 1672:d=1  hl=4 l=4843 cons: SEQUENCE
 1676:d=2  hl=2 l=   3 cons: cont [ 0 ]
 1678:d=3  hl=2 l=   1 prim: INTEGER           :02
 1681:d=2  hl=2 l=  20 prim: INTEGER           :6EF825E45FAE8F8DA7329B40A92B3E1C55CCAA0F
 1703:d=2  hl=2 l=  13 cons: SEQUENCE
 1705:d=3  hl=2 l=   9 prim: OBJECT            :sha512WithRSAEncryption
 1716:d=3  hl=2 l=   0 prim: NULL
 1718:d=2  hl=3 l= 191 cons: SEQUENCE
 1721:d=3  hl=2 l=  11 cons: SET
 1723:d=4  hl=2 l=   9 cons: SEQUENCE
 1725:d=5  hl=2 l=   3 prim: OBJECT            :countryName
 1730:d=5  hl=2 l=   2 prim: PRINTABLESTRING   :oR
 1734:d=3  hl=2 l=  11 cons: SET
 1736:d=4  hl=2 l=   9 cons: SEQUENCE
 1738:d=5  hl=2 l=   3 prim: OBJECT            :stateOrProvinceName
 1743:d=5  hl=2 l=   2 prim: UTF8STRING        :rx
 1747:d=3  hl=2 l=  22 cons: SET
 1749:d=4  hl=2 l=  20 cons: SEQUENCE
 1751:d=5  hl=2 l=   3 prim: OBJECT            :localityName
 1756:d=5  hl=2 l=  13 prim: UTF8STRING        :gQE843yQV0sag
 1771:d=3  hl=2 l=  43 cons: SET
 1773:d=4  hl=2 l=  41 cons: SEQUENCE
 1775:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
 1780:d=5  hl=2 l=  34 prim: UTF8STRING        :dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f
 1816:d=3  hl=2 l=  17 cons: SET
 1818:d=4  hl=2 l=  15 cons: SEQUENCE
 1820:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
 1825:d=5  hl=2 l=   8 prim: UTF8STRING        :a87RB35W
 1835:d=3  hl=2 l=  24 cons: SET
 1837:d=4  hl=2 l=  22 cons: SEQUENCE
 1839:d=5  hl=2 l=   3 prim: OBJECT            :commonName
 1844:d=5  hl=2 l=  15 prim: UTF8STRING        :x0FSqGTPWbGpuiV
 1861:d=3  hl=2 l=  49 cons: SET
 1863:d=4  hl=2 l=  47 cons: SEQUENCE
 1865:d=5  hl=2 l=   9 prim: OBJECT            :emailAddress
 1876:d=5  hl=2 l=  34 prim: IA5STRING         :kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com
 1912:d=2  hl=2 l=  30 cons: SEQUENCE
 1914:d=3  hl=2 l=  13 prim: UTCTIME           :250816075009Z
 1929:d=3  hl=2 l=  13 prim: UTCTIME           :250915075009Z
 1944:d=2  hl=3 l= 191 cons: SEQUENCE
 1947:d=3  hl=2 l=  11 cons: SET
 1949:d=4  hl=2 l=   9 cons: SEQUENCE
 1951:d=5  hl=2 l=   3 prim: OBJECT            :countryName
 1956:d=5  hl=2 l=   2 prim: PRINTABLESTRING   :oR
 1960:d=3  hl=2 l=  11 cons: SET
 1962:d=4  hl=2 l=   9 cons: SEQUENCE
 1964:d=5  hl=2 l=   3 prim: OBJECT            :stateOrProvinceName
 1969:d=5  hl=2 l=   2 prim: UTF8STRING        :rx
 1973:d=3  hl=2 l=  22 cons: SET
 1975:d=4  hl=2 l=  20 cons: SEQUENCE
 1977:d=5  hl=2 l=   3 prim: OBJECT            :localityName
 1982:d=5  hl=2 l=  13 prim: UTF8STRING        :gQE843yQV0sag
 1997:d=3  hl=2 l=  43 cons: SET
 1999:d=4  hl=2 l=  41 cons: SEQUENCE
 2001:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
 2006:d=5  hl=2 l=  34 prim: UTF8STRING        :dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f
 2042:d=3  hl=2 l=  17 cons: SET
 2044:d=4  hl=2 l=  15 cons: SEQUENCE
 2046:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
 2051:d=5  hl=2 l=   8 prim: UTF8STRING        :a87RB35W
 2061:d=3  hl=2 l=  24 cons: SET
 2063:d=4  hl=2 l=  22 cons: SEQUENCE
 2065:d=5  hl=2 l=   3 prim: OBJECT            :commonName
 2070:d=5  hl=2 l=  15 prim: UTF8STRING        :x0FSqGTPWbGpuiV
 2087:d=3  hl=2 l=  49 cons: SET
 2089:d=4  hl=2 l=  47 cons: SEQUENCE
 2091:d=5  hl=2 l=   9 prim: OBJECT            :emailAddress
 2102:d=5  hl=2 l=  34 prim: IA5STRING         :kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com
 2138:d=2  hl=4 l= 546 cons: SEQUENCE
 2142:d=3  hl=2 l=  13 cons: SEQUENCE
 2144:d=4  hl=2 l=   9 prim: OBJECT            :rsaEncryption
 2155:d=4  hl=2 l=   0 prim: NULL
 2157:d=3  hl=4 l= 527 prim: BIT STRING
 2688:d=2  hl=4 l=3827 cons: cont [ 3 ]
 2692:d=3  hl=4 l=3823 cons: SEQUENCE
 2696:d=4  hl=2 l=  12 cons: SEQUENCE
 2698:d=5  hl=2 l=   3 prim: OBJECT            :X509v3 Basic Constraints
 2703:d=5  hl=2 l=   5 prim: OCTET STRING      [HEX DUMP]:30030101FF
 2710:d=4  hl=4 l= 539 cons: SEQUENCE
 2714:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.64
 2725:d=5  hl=4 l= 524 prim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
 3253:d=4  hl=4 l=1051 cons: SEQUENCE
 3257:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.65
 3268:d=5  hl=4 l=1036 prim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
 4308:d=4  hl=4 l=1051 cons: SEQUENCE
 4312:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.66
 4323:d=5  hl=4 l=1036 prim: OCTET STRING      [HEX DUMP]:308204080482040082B86F0F5EB9BA28390671021A5C8687D5627E4A53FCAA77F9618CA1E0374D0FCA7277A8E49F6722D7632FAD4F7A355174F51190A8F3052DBD851CDDE21BC6BE5611A079624D9D2331D16889FDBCE1D6430B71F27557850C8CFCD8A6D98A472549D092846908E3707E411D8EE53B6727B6CCC2CB84C6349F02652A9649BC42FC72A90545B68D39C204D253621B7BE2B55A3C96A80AFD5A500FC590EACC371B7FCE33567517186ACAA561C29064A9097ADDF8F709C5D58C7EBE39F44E0618021E6E0E571ACF57D7AF9FC593941D98CA0789E3A0FD30632A656592735213F0DED09F74D0C561A8813A283B711F678FF72E866280599EA1DF017C1CCC609390685AB733E19732BC9357BFC3DCACAE6B8C882ADD73C48EC9683741B5C2FABF81F726A228682E50749AEDDF39013135B0A60806F9DF07E9F8428173AE63066C828C1F117D1F50208B77CCA0F6145F24F0F243E3FA3A069D9DB1913C510538179C3DDF73CCF455B4A1298462CA401A15E6CA8F57F5421296613474D68DB7D819099E70DDF7486B20C83438E2EBD22AC5AAC5EB8639DBBC7D5CF7BDD3C6F7B131FC310BA6BBD2DDFE9F0F6225392D5040FE8E22FD78EDA491BFA1A37D3253F7D830C26B695C0A597437D70BEA68D21FE277BCC4E9C948B41A140CBC8F8A1E088EFFE8BDE12F43542F478BA1AB143AD525E94B2E1E4A2B02708D0B3DDF27123E268156FA350533F93C20F44B3752418E26E35762E0A98784DD8461F84791769484F6ABF00928A17D0FE9F8569906FE573077A755E180A687784E6135ED2E635E9D2B26650A660BBF70EDEF65196320337A79382B86D6C6A704A13BBF71FFF4B588F80E3D708734E4C3DD05888D22AD8749571EF28E8C7DBE54B2FC76CC609533488838C93D8F85FB950DEACDCD62A4B27604BBE88C2F09DA42DA3D2A096689AFAF312DCC67C9E6B5673C8187D9EC0F8DCFA6439C4EEAB55295F78060709FCEEACACB50BA878DFB4E5F64A1243F2DE19F270C03B5FB849C04EB5D56FFDE864D042D446B159CEEB75909F742AD35E55281F61FE3B3B8A74F3766DA7F5675CC767010722B6A1BEF1C8E3E3387651635D8F0B38B31A98A8BE74067D9EC2DE91EE4952EE3F340170C767BA7A4CE4E511F9B00A9179A0E0B2EDA0EBF498EF74FA84C997911E602320DA0F04E07D53C63006E9BC6D656B12242C18AD5A89E7D9757C5CCACC53FEC2036A887E7E21F8D0676F0530BD3778880AB9A9C1320CCF6F7AC2E453E51D64135CD9EAD20A1FF0114005F14DA9324D24C0443D7D5315D249765DEC80D25D470E84C7BCD4E52B99775623F566DB33D9E5F3A387AA0E8DDB7C445875B0A4BA86B5E7137AB998E6718271139EA3450B6F1D11DDFAE2A873289EE3FC8B360C9928AB94DF9D16840161CB7C70E25BCA120AE8E1FD58840B0003C37F76DE2CFE67C1402020400
 5363:d=4  hl=3 l= 177 cons: SEQUENCE
 5366:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.67
 5377:d=5  hl=3 l= 163 prim: OCTET STRING      [HEX DUMP]:3081A0046091790E68FD11A5F7252F06AFB9979FF378EDAD55180945555CC1C424B4B5B51D006C981A3319D3BC68DE1DC30144CDFFC1F65EA1FF7E50CDEA92B82C6BF0937F9FD563E1A8471983BC71B0AD2BA120745A3D9F37213B4B2818F1CF86216E9B5A0410CAF899CBDC5E7D621F7B2952E22CD36604205DEC45686CB43B8399A4BF3A75E156109A9382B3497CBD7EBFDAF45B65F013A3020160020500A5A5A55A
 5543:d=4  hl=3 l= 145 cons: SEQUENCE
 5546:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.68
 5557:d=5  hl=3 l= 131 prim: OCTET STRING      [HEX DUMP]:308180044033022C4BB5DEC5C056CB2379C1564C4A871D871AD0E3A9C84DD868793C89A90262CEC697605AAB64087CDCE75363D4FFD350AFBF2249C2F75F2DF30B
5EA1B7E504100883B080089EA53E0A12500D2492F40104209F277EB68287D74DC82FE73FE6B7507473436B2EB3D7F1F973D79487906CE61F020140020500A5A5A55A
 5691:d=4  hl=2 l=  26 cons: SEQUENCE
 5693:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.69
 5704:d=5  hl=2 l=  13 prim: OCTET STRING      [HEX DUMP]:300B04020000020500A5A5A5A5
 5719:d=4  hl=3 l= 177 cons: SEQUENCE
 5722:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.70
 5733:d=5  hl=3 l= 163 prim: OCTET STRING      [HEX DUMP]:3081A0046037839006320106B5822911635AB6DBABCA9396743850DB554D19783E9273B5DE1EB9A7DE7C1A04AEBC7713DDE30347255DE93DFCAA93FE48EB8532CB08BAD6C052B9B9601F4C5222920E50E537A122E505C33F68F028DCB76A705D56186DEA690410546D20FA7CEA15CAB0736080BFF2916504208FA1B3A9A02353677C2F79735B890C3D30D354B7DF9D50954691A3B4F86AC287020160020500A5A5A55A
 5899:d=4  hl=3 l= 145 cons: SEQUENCE
 5902:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.71
 5913:d=5  hl=3 l= 131 prim: OCTET STRING      [HEX DUMP]:308180044054BA8D354DC8DDE3D3B75A27139F87B47BE0AB0F44C39A6C80CD546CB2B43D2CCAA580682DEB368474E5CB8CFA6622CE394731ACC0CDD630A55744246D64840D0410D54514EFB96A29289073B5EA19CE212D0420673B90DD06CD0BA895EEB09635E46E274BB0CDCADCDB6BBE0240FD9BF1088B33020140020500A5A5A55A
 6047:d=4  hl=2 l=  25 cons: SEQUENCE
 6049:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.72
 6060:d=5  hl=2 l=  12 prim: OCTET STRING      [HEX DUMP]:300A040100020500A5A5A5A5
 6074:d=4  hl=3 l= 231 cons: SEQUENCE
 6077:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.73
 6088:d=5  hl=3 l= 217 prim: OCTET STRING      [HEX DUMP]:3081D6048180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004100000000000000000000000000000000004200000000000000000000000000000000000000000000000000000000000000000041000000000000000000000000000000000020100020100020500A5A5A5A5
 6308:d=4  hl=2 l=  28 cons: SEQUENCE
 6310:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.74
 6321:d=5  hl=2 l=  15 prim: OCTET STRING      [HEX DUMP]:300D040400000001020500A5A5A55A
 6338:d=4  hl=2 l=  28 cons: SEQUENCE
 6340:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.76
 6351:d=5  hl=2 l=  15 prim: OCTET STRING      [HEX DUMP]:300D0404000C0FFE020500A5A5A55A
 6368:d=4  hl=2 l=  28 cons: SEQUENCE
 6370:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.77
 6381:d=5  hl=2 l=  15 prim: OCTET STRING      [HEX DUMP]:300D040400000003020500A5A5A55A
 6398:d=4  hl=2 l=  30 cons: SEQUENCE
 6400:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.78
 6411:d=5  hl=2 l=  17 prim: OCTET STRING      [HEX DUMP]:300F0406000000000000020500A5A5A5A5
 6430:d=4  hl=2 l=  30 cons: SEQUENCE
 6432:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.79
 6443:d=5  hl=2 l=  17 prim: OCTET STRING      [HEX DUMP]:300F0406000000000000020500A5A5A5A5
 6462:d=4  hl=2 l=  32 cons: SEQUENCE
 6464:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.80
 6475:d=5  hl=2 l=  19 prim: OCTET STRING      [HEX DUMP]:301104080000000000000000020500A5A5A5A5
 6496:d=4  hl=2 l=  21 cons: SEQUENCE
 6498:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.81
 6509:d=5  hl=2 l=   8 prim: OCTET STRING      [HEX DUMP]:3006040400000200
 6519:d=1  hl=2 l=  13 cons: SEQUENCE
 6521:d=2  hl=2 l=   9 prim: OBJECT            :sha512WithRSAEncryption
 6532:d=2  hl=2 l=   0 prim: NULL
 6534:d=1  hl=4 l= 513 prim: BIT STRING

Can you reinstall the keywriter package in a clean environment and regenerate the certificate?

If the issue still occurs, please share the output of the following commands and share the certificate as well

$ openssl version
$ ./gen_keywr_cert.sh -t tifek/ti_fek_public.pem --msv 0xC0FFE -b-def --bmek-def -s-def --smek-def --keycnt 2 --keyrev 1

Hello,
We reinstall the keywriter package in a clean environment and regenerate the certificate

$ openssl version 
OpenSSL 1.1.1q  5 Jul 2022

$ ./gen_keywr_cert.sh -t tifek/ti_fek_public.pem --msv 0xC0FFE -b-def --bmek-def -s-def --smek-def --keycnt 2 --keyrev 1
# Using MSV[19:0]: 0x000C0FFE
INFO: Using default BMPK for programming
INFO: Using default BMEK for programming
INFO: Using default SMPK for programming
INFO: Using default SMEK for programming
# Using Key Count: 0x00000003
# Using Key Rev: 0x00000001
Generating Dual signed certificate!!
GEN: AES256 key generated, since not provided
# encrypt aes256 key with tifek public part
# encrypt SMPK-priv signed aes256 key(hash) with tifek public part
# encrypt smpk-pub hash using aes256 key
writing RSA key
# encrypt smek (sym key) using aes256 key
# encrypt BMPK-priv signed aes256 key(hash) with tifek public part
# encrypt bmpk-pub hash using aes256 key
writing RSA key
# encrypt bmek (sym key) using aes256 key
1668	secondary_cert.bin
5383	primary_cert.bin
7051	../../x509cert/final_certificate.bin
# SHA512 Hashes of keys are stored in verify_hash.csv for reference..

0��0�h�
eh��ٶ�JXr���
�~t�0
	*�H��



 0��10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*�H��

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0
250818050430Z
250917050430Z0��10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*�H��

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0�"0
	*�H��



 � 0�
�
 �b��F�86�ሗJ��>�ok��ە)x#������9��ChPk,�
C�o7!$xE���-���<�!W.�P��ǣE�:_�3���8��0����<�A��)I��s�'���  L���%����Ϻ5��
8��n��_�M��S[y��5�"�,YVA�_��Oh�6���.�뀏��\$�,�b)\�H��eXș�����ma~�z��6[��%φw�!���=��B��s@g���25ʗ�?"�h�
n�����g��c
�Z~r�6�̌".�g�p����R��4��_��
�i=��,���J�^���Q��<0��&�#�,���Sj�P��p�u
��Uf�Q�=g�8^��7`�T�NQ����RE���pq�xy��I�
 !�����F�<	5�{���0�
8�)"�M�����m��d`�WS�D��e������8�Y�`j���8# �
�FQ���T=R`t%P���S�-P-�"����]���lf����k���
 
�r0p0U0

�0`	+

�&
"S0Q	`�H
e@���:��Y�~��6?b�p}q�tB�/ِZ�{�<��ߋT��	����*7���S���6I�x/�~� 0
	*�H��



 �
 ��f>y�<A���ڢ�_'�}m����]gCN�ԹIP�s0�{S�')�ьWKϼ���Ԭ�z�� X
OՍn�-=G%dl歁e�p��)K��C�� ����ћX�z�5���Ӡ~�|�|�T������
���
��S���B��
���Wԣ����Q!kE�%Ll�s�Y��}�Z{�p�=��I��41�~�{g�II:� ��G5�OV�����줈�F���	%v]��l��",*�Iv��'Հ������lp�%�Q�薒�z��2�}b
%>��"�G����:��E15��0.��NЙ#��ؖ���c@T'|�4~#�`��[�nͼAn�ע���ݵ9<�Ó�
!����]�`p	���q����pk��[ �S"���`_'���*`OKW�%@�&d�,��=�᳐��k�v �7x��X�̕3�4���Lw���H�%���~�4�]�:@+��6<�����6����^��ZD��4	%�'ԎkP��/ق#\�]�IK0�0��
Ԃ-7���.y�k �V=_0
	*�H��



 0��10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*�H��

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0
250818050430Z
250917050430Z0��10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*�H��

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0�"0
	*�H��



 � 0�
�
 ��I�r�k#��He�"M�O������|��nY�������ҕ������P��H�"P�L{��
(&����UA�>['l���q�/r"�F
%b�>����,�n�>妠�EAN�tքN�y����%���ѹ�h�3YK�}w�ќ�#��X������,u-�b��	n�p� 	�b����lmȂ P������_�ОϓT�_�]�7`��{e���EE|K�[�NƔ=�N�Ҕ<�����6|�
�ZB7�*��n��g�� �sJh(1�������E~����;ǃ�!q��8�R�3��6�N��)�͛*�l_{��:y j}����X*�^�N��;O����4�� �Y-�^h�L���-v�X�P�7nfxo�0FM4��J���{Ů�2��l?��35�M��n`TP�~m���� ���+�7�Y�J�E�	��r3�^]�Z�!T����U�'�M	�@�.f�e�n��8N�a�t��_Q�B�����K�i���
 
���0��0U0

�0�	+

�&
@�0�� J (`��������D��[ek���Ҭ��Pp�H�F��cH�W��L/2�
��G\L��$�IC�pޯ>F
+1�:��� ���ޠ�X+��Uӭ��)I�'�8Gk���l����~�ا�}�!�Y �h[y�/69����j�Rcq/��؃J��{t��Pb:c�I�|v�it�k���f���=� ���
��o��V��R#W�W6����(��
!M�KA&y^E�w
_�:i"'�	��1��1�8h.F0���?ow	"3���;��I��t'En�RL�����q���{�F�88^��޴���)�ZI�j��ݏZ�bS
�M_���
�0{Z3C�ur�U.�12P>���sl����
E��5"�-ʜ�UC�=\N���:jj� i��oԹ��V��%����G�6�( 
:��@��𽞢P)�[�J�W/z�V��)�)	��޲��o�7�����%�	�1�n�FA�2C��S����R ��.�M��(9�C�W�1̚LH 0�	+

�&
A�0�� ;�D\��+LD" ;duH�\?-D���D��W�����-�4��)
>4W��
��+��	60��诎B3L+PԂ�K �V�>��d�h�نX�6��E�?�SO]�ӟAP_�:N
���i�
=\o�(��. c�Y��'��$Xg�~�l2̣<L��b�$>jD��3x�T�:L}w�%�{z�	Es`�'�dg��j;�|�?�"U�]
Oˠ^���jL��|t��T�'��Xf��;1�Wê^��D�ጩ@B�d�^��\�w����L��F
8��|I�<_+M?�dS��0��{�eb�1Y�5�BZr����b�(�:�E��#�+i���������H��[I#TeAn�5�e�Qo�%���J�%�X?8?���S8�A�_���9�������24B4�|�А����w��[��۵�#�����t�q��r7��d��;�XY�,c"z-]@��@�%�ؚ�C�4��q�O"ijG�R>�z�ٲ��Y�׷���[!e>�=[XV�4���D��?u��;ܔ�l�`eG1� `Op}&�8&��,4�ck���p}
�mXK�[��:������ tͲ+z��t�!]�h�+=�Z��'�f?R�$�]��D���a��*�P�-3
	 � T���L�
K>�h
[h-����̹�b�T^a�&�e����7���Ϯ
7��z�1�
�S>
+����p�x_0Ω��7��{Ӵ�/Զt������fǛ��ŀVx_�r���g��,y-�w����ºTT{��کt�e~=������A��5q=��Y���x�?�V�d���J@{�x���3�+��Q_}�q'R�y ���*Z��<��� ��6��!�� S�)����.�f�t輩cK�!+4�8
��t��-*K���u����,4L� +��6�_� �6��66
4Q�{){̧O}�H��8=y����QHG&(36VW��?.�U�JS�`��J���	M�<y�i��7��ZF�
&��e{�o�AޒL���,������ 0�	+

�&
B�0�� j8(e=�:P��33���^��&(�,�Ǟ��:~d���m����jG�<Oe��f�e���KE�.�F�
7����9�ѓM�1NE� Z)��'�hL"���աi�hg�KD�� õ�S=���� ��B8Dub�}��qA1
��+j��[�����5,l]���s�r�^=S�oE��VER�u������
`ĕ���E)f���zT<�����^�WĔ�g���r��E��Zd��$��	���ƻ����M����?1�<��n�<�FǧK�^��ma�U%ϴ3�4&�ࣰZ������N��v����Ef~��d���f�)����_ƝMЫR�����b��.X�q�
��|~?��DLJmO����QO�YA�("�!�;7!P�0@u�ö��a���yw�q�f�*
���Y�w�Eʊ���a�㟚_8�Ǔ��1�x�K��;j�+Ы8�n����<
�TGڥ�3���A�����9z�c�������&㝈m���q��3#����h5�Q�I��z���c鯀�J�P�
NK�q��:�{�
���f���ɯ�@��}��5I#9�v�]i�Q�bS��{����
�eWk����Uy�3$�H|	Jؕ�o=�i=�Oy�
VX�č�AUR��rŁ���
��]������o��Z�e`c%�����DW�ʠ$C�w�t�z����C0h��k�c_��1x]� �q�C���BA7���^r7Jp�M�������Z2[�Y%�|�Q���{־T��n�^	a�
ִZ�N@=c��_�u��П�Ff��X�œ.�ʇ?��c"8��ǟ��@��&C�Amk�� $��	�5]�ɣ��0�$5�W���#�^����M�W��2i(��D�t?���Ӳ�}�H�[��6δ<���ӳ�<�
��+%�QW��� ������!�ڈY����32G~�'��B}U5�`p����߆���w�>�Qp���2�ǁ� �C[��v����
b ҹ��
�% F͸p��B<��88�-V% 0��	+

�&
C��0��`�VŐ�juO����Hn�sA��:}B��"��ڪIߐ��C�d��\�;὞��M�\dTJ�����(�$�睠D�+��D��S�aG�$������	���Q��+�h� ����3ҐH�y��LE;�t�涃�
��3�R
` ���Z0��	+

�&
D��0��@�B��VNd�+�𙹬t�A�x��Z]�*ՐB����ۭ�浸�v�
�
�>�?T�<�ݽ�\A?Ov���o}*'� \�U�@ �7#$Q3,�A#��7���qo�f�0Vy����Y�
@ ���Z0	+

�&
E
0   ����0��	+

�&
F��0��`d&���rT%J�x��}��G"�(�
ޅp�<����>0cm�d�XL�i?�.h���6�Z��
���x���U�a�=mV(ݛ –�FQn U�^�K�H�>��� �;���S�൏W+��H��В��x��f �wo�
` ���Z0��	+

�&
G��0��@s��>.��/G!=ɒ�J���\���'Fwm�P�V��v���_��3D勇! �ʼQ� ����V\4*��j _�>G� &�tʥb�����wn���6z7��	��:GҦ��
@ ���Z0	+

�&
H0

  ����0��	+

�&
I��0����                                                                                                                                                                                                 
 
  ����0	+

�&
J0
   
 ���Z0	+

�&
L0
 � ���Z0	+

�&
M0
    ���Z0	+

�&
N0       ����0	+

�&
O0       ����0 	+

�&
P0         ����0	+

�&
Q0   0
	*�H��



 �
 ~͏�
vqu� �ܬIv��;��E �'P�sⵑ�xgxy�}� kzWe�u�v�O�\ɬX�,���I(�P�t�?��t m@Ax"��g�	9O��A1�t�r;;1�ܼG���� yN��iW_� e���e�6�y�'����-ێ��B�L_�d�
�{�|��I1<ȇ���L2�.DN���[����f�i֭r��࿳��J��k�QrW�
��"P=k-Z&�l�\<<1	il�
u�"�y��X)&�>F����:J�
K�EuV����a���֣�1QVL�,���)\f�z�Yue��:
�u�ä�%�#���\ߎv	�
i��.��e$��y�UEJ$�hf�K����Gd=m���/�%�
��
ʂ�_�;T�� ��\;zR����x�O��69�L����� ������:]���hӂ�ꁶ��y%�H���-0q���5�S��@4�:�V*�m��'��+z��Y�������9�{VLC�o[�_�f�b� }�~��g|�8

openssl asn1parse -in final_certificate.bin -inform DER
    0:d=0  hl=4 l=1664 cons: SEQUENCE          
    4:d=1  hl=4 l=1128 cons: SEQUENCE          
    8:d=2  hl=2 l=   3 cons: cont [ 0 ]        
   10:d=3  hl=2 l=   1 prim: INTEGER           :02
   13:d=2  hl=2 l=  20 prim: INTEGER           :1165688B8BD9B61FCE4A587288AC8701887E74DD
   35:d=2  hl=2 l=  13 cons: SEQUENCE          
   37:d=3  hl=2 l=   9 prim: OBJECT            :sha512WithRSAEncryption
   48:d=3  hl=2 l=   0 prim: NULL              
   50:d=2  hl=3 l= 191 cons: SEQUENCE          
   53:d=3  hl=2 l=  11 cons: SET               
   55:d=4  hl=2 l=   9 cons: SEQUENCE          
   57:d=5  hl=2 l=   3 prim: OBJECT            :countryName
   62:d=5  hl=2 l=   2 prim: PRINTABLESTRING   :oR
   66:d=3  hl=2 l=  11 cons: SET               
   68:d=4  hl=2 l=   9 cons: SEQUENCE          
   70:d=5  hl=2 l=   3 prim: OBJECT            :stateOrProvinceName
   75:d=5  hl=2 l=   2 prim: UTF8STRING        :rx
   79:d=3  hl=2 l=  22 cons: SET               
   81:d=4  hl=2 l=  20 cons: SEQUENCE          
   83:d=5  hl=2 l=   3 prim: OBJECT            :localityName
   88:d=5  hl=2 l=  13 prim: UTF8STRING        :gQE843yQV0sag
  103:d=3  hl=2 l=  43 cons: SET               
  105:d=4  hl=2 l=  41 cons: SEQUENCE          
  107:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
  112:d=5  hl=2 l=  34 prim: UTF8STRING        :dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f
  148:d=3  hl=2 l=  17 cons: SET               
  150:d=4  hl=2 l=  15 cons: SEQUENCE          
  152:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
  157:d=5  hl=2 l=   8 prim: UTF8STRING        :a87RB35W
  167:d=3  hl=2 l=  24 cons: SET               
  169:d=4  hl=2 l=  22 cons: SEQUENCE          
  171:d=5  hl=2 l=   3 prim: OBJECT            :commonName
  176:d=5  hl=2 l=  15 prim: UTF8STRING        :x0FSqGTPWbGpuiV
  193:d=3  hl=2 l=  49 cons: SET               
  195:d=4  hl=2 l=  47 cons: SEQUENCE          
  197:d=5  hl=2 l=   9 prim: OBJECT            :emailAddress
  208:d=5  hl=2 l=  34 prim: IA5STRING         :kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com
  244:d=2  hl=2 l=  30 cons: SEQUENCE          
  246:d=3  hl=2 l=  13 prim: UTCTIME           :250818050430Z
  261:d=3  hl=2 l=  13 prim: UTCTIME           :250917050430Z
  276:d=2  hl=3 l= 191 cons: SEQUENCE          
  279:d=3  hl=2 l=  11 cons: SET               
  281:d=4  hl=2 l=   9 cons: SEQUENCE          
  283:d=5  hl=2 l=   3 prim: OBJECT            :countryName
  288:d=5  hl=2 l=   2 prim: PRINTABLESTRING   :oR
  292:d=3  hl=2 l=  11 cons: SET               
  294:d=4  hl=2 l=   9 cons: SEQUENCE          
  296:d=5  hl=2 l=   3 prim: OBJECT            :stateOrProvinceName
  301:d=5  hl=2 l=   2 prim: UTF8STRING        :rx
  305:d=3  hl=2 l=  22 cons: SET               
  307:d=4  hl=2 l=  20 cons: SEQUENCE          
  309:d=5  hl=2 l=   3 prim: OBJECT            :localityName
  314:d=5  hl=2 l=  13 prim: UTF8STRING        :gQE843yQV0sag
  329:d=3  hl=2 l=  43 cons: SET               
  331:d=4  hl=2 l=  41 cons: SEQUENCE          
  333:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
  338:d=5  hl=2 l=  34 prim: UTF8STRING        :dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f
  374:d=3  hl=2 l=  17 cons: SET               
  376:d=4  hl=2 l=  15 cons: SEQUENCE          
  378:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
  383:d=5  hl=2 l=   8 prim: UTF8STRING        :a87RB35W
  393:d=3  hl=2 l=  24 cons: SET               
  395:d=4  hl=2 l=  22 cons: SEQUENCE          
  397:d=5  hl=2 l=   3 prim: OBJECT            :commonName
  402:d=5  hl=2 l=  15 prim: UTF8STRING        :x0FSqGTPWbGpuiV
  419:d=3  hl=2 l=  49 cons: SET               
  421:d=4  hl=2 l=  47 cons: SEQUENCE          
  423:d=5  hl=2 l=   9 prim: OBJECT            :emailAddress
  434:d=5  hl=2 l=  34 prim: IA5STRING         :kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com
  470:d=2  hl=4 l= 546 cons: SEQUENCE          
  474:d=3  hl=2 l=  13 cons: SEQUENCE          
  476:d=4  hl=2 l=   9 prim: OBJECT            :rsaEncryption
  487:d=4  hl=2 l=   0 prim: NULL              
  489:d=3  hl=4 l= 527 prim: BIT STRING        
 1020:d=2  hl=2 l= 114 cons: cont [ 3 ]        
 1022:d=3  hl=2 l= 112 cons: SEQUENCE          
 1024:d=4  hl=2 l=  12 cons: SEQUENCE          
 1026:d=5  hl=2 l=   3 prim: OBJECT            :X509v3 Basic Constraints
 1031:d=5  hl=2 l=   5 prim: OCTET STRING      [HEX DUMP]:30030101FF
 1038:d=4  hl=2 l=  96 cons: SEQUENCE          
 1040:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.34
 1051:d=5  hl=2 l=  83 prim: OCTET STRING      [HEX DUMP]:305106096086480165030402030440F3F9A13A8DAC597FEE7EC8D0363F629514707D71877442EF2FD9905ACB7BF73CEDE897DF8B5490FF0917A2B10C90D92A37CBF3D153C7FBC6364984782FA67EFB02021507
 1136:d=1  hl=2 l=  13 cons: SEQUENCE          
 1138:d=2  hl=2 l=   9 prim: OBJECT            :sha512WithRSAEncryption
 1149:d=2  hl=2 l=   0 prim: NULL              
 1151:d=1  hl=4 l= 513 prim: BIT STRING        
 1668:d=0  hl=4 l=5379 cons: SEQUENCE          
 1672:d=1  hl=4 l=4843 cons: SEQUENCE          
 1676:d=2  hl=2 l=   3 cons: cont [ 0 ]        
 1678:d=3  hl=2 l=   1 prim: INTEGER           :02
 1681:d=2  hl=2 l=  20 prim: INTEGER           :15D4822D0B0F37D2E1C12E79F86B20E882563D5F
 1703:d=2  hl=2 l=  13 cons: SEQUENCE          
 1705:d=3  hl=2 l=   9 prim: OBJECT            :sha512WithRSAEncryption
 1716:d=3  hl=2 l=   0 prim: NULL              
 1718:d=2  hl=3 l= 191 cons: SEQUENCE          
 1721:d=3  hl=2 l=  11 cons: SET               
 1723:d=4  hl=2 l=   9 cons: SEQUENCE          
 1725:d=5  hl=2 l=   3 prim: OBJECT            :countryName
 1730:d=5  hl=2 l=   2 prim: PRINTABLESTRING   :oR
 1734:d=3  hl=2 l=  11 cons: SET               
 1736:d=4  hl=2 l=   9 cons: SEQUENCE          
 1738:d=5  hl=2 l=   3 prim: OBJECT            :stateOrProvinceName
 1743:d=5  hl=2 l=   2 prim: UTF8STRING        :rx
 1747:d=3  hl=2 l=  22 cons: SET               
 1749:d=4  hl=2 l=  20 cons: SEQUENCE          
 1751:d=5  hl=2 l=   3 prim: OBJECT            :localityName
 1756:d=5  hl=2 l=  13 prim: UTF8STRING        :gQE843yQV0sag
 1771:d=3  hl=2 l=  43 cons: SET               
 1773:d=4  hl=2 l=  41 cons: SEQUENCE          
 1775:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
 1780:d=5  hl=2 l=  34 prim: UTF8STRING        :dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f
 1816:d=3  hl=2 l=  17 cons: SET               
 1818:d=4  hl=2 l=  15 cons: SEQUENCE          
 1820:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
 1825:d=5  hl=2 l=   8 prim: UTF8STRING        :a87RB35W
 1835:d=3  hl=2 l=  24 cons: SET               
 1837:d=4  hl=2 l=  22 cons: SEQUENCE          
 1839:d=5  hl=2 l=   3 prim: OBJECT            :commonName
 1844:d=5  hl=2 l=  15 prim: UTF8STRING        :x0FSqGTPWbGpuiV
 1861:d=3  hl=2 l=  49 cons: SET               
 1863:d=4  hl=2 l=  47 cons: SEQUENCE          
 1865:d=5  hl=2 l=   9 prim: OBJECT            :emailAddress
 1876:d=5  hl=2 l=  34 prim: IA5STRING         :kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com
 1912:d=2  hl=2 l=  30 cons: SEQUENCE          
 1914:d=3  hl=2 l=  13 prim: UTCTIME           :250818050430Z
 1929:d=3  hl=2 l=  13 prim: UTCTIME           :250917050430Z
 1944:d=2  hl=3 l= 191 cons: SEQUENCE          
 1947:d=3  hl=2 l=  11 cons: SET               
 1949:d=4  hl=2 l=   9 cons: SEQUENCE          
 1951:d=5  hl=2 l=   3 prim: OBJECT            :countryName
 1956:d=5  hl=2 l=   2 prim: PRINTABLESTRING   :oR
 1960:d=3  hl=2 l=  11 cons: SET               
 1962:d=4  hl=2 l=   9 cons: SEQUENCE          
 1964:d=5  hl=2 l=   3 prim: OBJECT            :stateOrProvinceName
 1969:d=5  hl=2 l=   2 prim: UTF8STRING        :rx
 1973:d=3  hl=2 l=  22 cons: SET               
 1975:d=4  hl=2 l=  20 cons: SEQUENCE          
 1977:d=5  hl=2 l=   3 prim: OBJECT            :localityName
 1982:d=5  hl=2 l=  13 prim: UTF8STRING        :gQE843yQV0sag
 1997:d=3  hl=2 l=  43 cons: SET               
 1999:d=4  hl=2 l=  41 cons: SEQUENCE          
 2001:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
 2006:d=5  hl=2 l=  34 prim: UTF8STRING        :dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f
 2042:d=3  hl=2 l=  17 cons: SET               
 2044:d=4  hl=2 l=  15 cons: SEQUENCE          
 2046:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
 2051:d=5  hl=2 l=   8 prim: UTF8STRING        :a87RB35W
 2061:d=3  hl=2 l=  24 cons: SET               
 2063:d=4  hl=2 l=  22 cons: SEQUENCE          
 2065:d=5  hl=2 l=   3 prim: OBJECT            :commonName
 2070:d=5  hl=2 l=  15 prim: UTF8STRING        :x0FSqGTPWbGpuiV
 2087:d=3  hl=2 l=  49 cons: SET               
 2089:d=4  hl=2 l=  47 cons: SEQUENCE          
 2091:d=5  hl=2 l=   9 prim: OBJECT            :emailAddress
 2102:d=5  hl=2 l=  34 prim: IA5STRING         :kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com
 2138:d=2  hl=4 l= 546 cons: SEQUENCE          
 2142:d=3  hl=2 l=  13 cons: SEQUENCE          
 2144:d=4  hl=2 l=   9 prim: OBJECT            :rsaEncryption
 2155:d=4  hl=2 l=   0 prim: NULL              
 2157:d=3  hl=4 l= 527 prim: BIT STRING        
 2688:d=2  hl=4 l=3827 cons: cont [ 3 ]        
 2692:d=3  hl=4 l=3823 cons: SEQUENCE          
 2696:d=4  hl=2 l=  12 cons: SEQUENCE          
 2698:d=5  hl=2 l=   3 prim: OBJECT            :X509v3 Basic Constraints
 2703:d=5  hl=2 l=   5 prim: OCTET STRING      [HEX DUMP]:30030101FF
 2710:d=4  hl=4 l= 539 cons: SEQUENCE          
 2714:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.64
 2725:d=5  hl=4 l= 524 prim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
 3253:d=4  hl=4 l=1051 cons: SEQUENCE          
 3257:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.65
 3268:d=5  hl=4 l=1036 prim: OCTET STRING      [HEX DUMP]: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
 4308:d=4  hl=4 l=1051 cons: SEQUENCE          
 4312:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.66
 4323:d=5  hl=4 l=1036 prim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
 5363:d=4  hl=3 l= 177 cons: SEQUENCE          
 5366:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.67
 5377:d=5  hl=3 l= 163 prim: OCTET STRING      [HEX DUMP]:3081A004609D56C590F46A754F06A0CD11BDD7486ED173418A10EE3A1D7D42D2CA22D905D8DAAA49DF90D6DF43ED1264B6AC5CE43BE1BD9EA2D84DD15C64544A9FA480A5F828C40F1E24A5E79DA044037FE72BF4A7C744FDDB530BB66147C324A6A4F11BCD041002F91B068309B8B9905190802BC868D404209DFDF89333D29048C71879C9C54C16453BB074B3E6B68313BE0D8AE333F95208020160020500A5A5A55A
 5543:d=4  hl=3 l= 145 cons: SEQUENCE          
 5546:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.68
 5557:d=5  hl=3 l= 131 prim: OCTET STRING      [HEX DUMP]:3081800440B04291AD564E64E72B04EBF099B9AC749341D17893E05A5D8D2AD59042FCB195937FDBADCDE6B5B813C176E501BA0DE03EC21D3F5491053C94DDBD9F5C413F4F041076FFA8C76F7D2A27C6205CDA0855E8400420E237232451332C8D4123D6EB37A91E859F716FE6966680305679E3CAD0C959B6020140020500A5A5A55A
 5691:d=4  hl=2 l=  26 cons: SEQUENCE          
 5693:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.69
 5704:d=5  hl=2 l=  13 prim: OCTET STRING      [HEX DUMP]:300B04020000020500A5A5A5A5
 5719:d=4  hl=3 l= 177 cons: SEQUENCE          
 5722:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.70
 5733:d=5  hl=3 l= 163 prim: OCTET STRING      [HEX DUMP]:3081A00460642617C5C3EB7254254A139E78CFCD7DA2049C124722A428D00F0D19DE8570F30B3C82BC8315E2953E30636DC90864B3584CEE693FE92E036816A8F3B8DF36EC885ABD921D0D8B84AB78EAF3E9559961DE3D6D5628DD9B0300C296ED9946516E04100755B25EBF4B06DD48AD3EDA0206B5CB0420D83BC9CDE853D9E0B58F572B83C3481EF1DAD092ABE4BB78BF88660091776FAD020160020500A5A5A55A
 5899:d=4  hl=3 l= 145 cons: SEQUENCE          
 5902:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.71
 5913:d=5  hl=3 l= 131 prim: OCTET STRING      [HEX DUMP]:30818004407394903E2E82B02F47213DC992C44A81AEA65C81E1FB271646776DEC8350F81D56B19E7614F9A5ED9B5FD6D93344E58B8721200C9FCABC0C51890220E90394CE0410E4565C342A9D860E1E6A005FF43E47D1042026C074CAA50862ADFD9E8C807F776EA4CDC8367A378DB209D9D73A47D2A6CEF3020140020500A5A5A55A
 6047:d=4  hl=2 l=  25 cons: SEQUENCE          
 6049:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.72
 6060:d=5  hl=2 l=  12 prim: OCTET STRING      [HEX DUMP]:300A040100020500A5A5A5A5
 6074:d=4  hl=3 l= 231 cons: SEQUENCE          
 6077:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.73
 6088:d=5  hl=3 l= 217 prim: OCTET STRING      [HEX DUMP]:3081D6048180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004100000000000000000000000000000000004200000000000000000000000000000000000000000000000000000000000000000041000000000000000000000000000000000020100020100020500A5A5A5A5
 6308:d=4  hl=2 l=  28 cons: SEQUENCE          
 6310:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.74
 6321:d=5  hl=2 l=  15 prim: OCTET STRING      [HEX DUMP]:300D040400000001020500A5A5A55A
 6338:d=4  hl=2 l=  28 cons: SEQUENCE          
 6340:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.76
 6351:d=5  hl=2 l=  15 prim: OCTET STRING      [HEX DUMP]:300D0404000C0FFE020500A5A5A55A
 6368:d=4  hl=2 l=  28 cons: SEQUENCE          
 6370:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.77
 6381:d=5  hl=2 l=  15 prim: OCTET STRING      [HEX DUMP]:300D040400000003020500A5A5A55A
 6398:d=4  hl=2 l=  30 cons: SEQUENCE          
 6400:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.78
 6411:d=5  hl=2 l=  17 prim: OCTET STRING      [HEX DUMP]:300F0406000000000000020500A5A5A5A5
 6430:d=4  hl=2 l=  30 cons: SEQUENCE          
 6432:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.79
 6443:d=5  hl=2 l=  17 prim: OCTET STRING      [HEX DUMP]:300F0406000000000000020500A5A5A5A5
 6462:d=4  hl=2 l=  32 cons: SEQUENCE          
 6464:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.80
 6475:d=5  hl=2 l=  19 prim: OCTET STRING      [HEX DUMP]:301104080000000000000000020500A5A5A5A5
 6496:d=4  hl=2 l=  21 cons: SEQUENCE          
 6498:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.81
 6509:d=5  hl=2 l=   8 prim: OCTET STRING      [HEX DUMP]:3006040400000200
 6519:d=1  hl=2 l=  13 cons: SEQUENCE          
 6521:d=2  hl=2 l=   9 prim: OBJECT            :sha512WithRSAEncryption
 6532:d=2  hl=2 l=   0 prim: NULL              
 6534:d=1  hl=4 l= 513 prim: BIT STRING  

The latest attached certificate still has the issue

❯ md5sum 4278.final_certificate.bin.txt
be8ff80ec8034efcf7d2a7d14a211695  4278.final_certificate.bin.txt
❯ openssl asn1parse -in 4278.final_certificate.bin.txt -inform DER
    0:d=0  hl=4 l=1664 cons: SEQUENCE
    4:d=1  hl=4 l=1128 cons: SEQUENCE
    8:d=2  hl=2 l=   3 cons: cont [ 0 ]
   10:d=3  hl=2 l=   1 prim: INTEGER           :02
   13:d=2  hl=2 l=  20 prim: INTEGER           :1165688B8BD9B61FCE4A587288AC8701887E74DD
   35:d=2  hl=2 l=  13 cons: SEQUENCE
   37:d=3  hl=2 l=   9 prim: OBJECT            :sha512WithRSAEncryption
Error in encoding
125163078544256:error:0D07209B:asn1 encoding routines:ASN1_get_object:too long:crypto/asn1/asn1_lib.c:91:

Could you check if you attached incorrect certificate or parsed some other certificate. Please list down the steps as well you are following from the certificate generation to building the keywriter binary.

I have checked the certificate I attached earlier, and it is the same as the one generated under <MCU_PLUS_SDK_INSTALL_DIR>/source/security/sbl_keywriter/scripts/x509cert/. However, I am reattaching the certificate here.

0��0�h�
eh��ٶ�JXr���
�~t�0
	*�H��



 0��10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*�H��

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0
250818050430Z
250917050430Z0��10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*�H��

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0�"0
	*�H��



 � 0�
�
 �b��F�86�ሗJ��>�ok��ە)x#������9��ChPk,�
C�o7!$xE���-���<�!W.�P��ǣE�:_�3���8��0����<�A��)I��s�'���  L���%����Ϻ5��
8��n��_�M��S[y��5�"�,YVA�_��Oh�6���.�뀏��\$�,�b)\�H��eXș�����ma~�z��6[��%φw�!���=��B��s@g���25ʗ�?"�h�
n�����g��c
�Z~r�6�̌".�g�p����R��4��_��
�i=��,���J�^���Q��<0��&�#�,���Sj�P��p�u
��Uf�Q�=g�8^��7`�T�NQ����RE���pq�xy��I�
 !�����F�<	5�{���0�
8�)"�M�����m��d`�WS�D��e������8�Y�`j���8# �
�FQ���T=R`t%P���S�-P-�"����]���lf����k���
 
�r0p0U0

�0`	+

�&
"S0Q	`�H
e@���:��Y�~��6?b�p}q�tB�/ِZ�{�<��ߋT��	����*7���S���6I�x/�~� 0
	*�H��



 �
 ��f>y�<A���ڢ�_'�}m����]gCN�ԹIP�s0�{S�')�ьWKϼ���Ԭ�z�� X
OՍn�-=G%dl歁e�p��)K��C�� ����ћX�z�5���Ӡ~�|�|�T������
���
��S���B��
���Wԣ����Q!kE�%Ll�s�Y��}�Z{�p�=��I��41�~�{g�II:� ��G5�OV�����줈�F���	%v]��l��",*�Iv��'Հ������lp�%�Q�薒�z��2�}b
%>��"�G����:��E15��0.��NЙ#��ؖ���c@T'|�4~#�`��[�nͼAn�ע���ݵ9<�Ó�
!����]�`p	���q����pk��[ �S"���`_'���*`OKW�%@�&d�,��=�᳐��k�v �7x��X�̕3�4���Lw���H�%���~�4�]�:@+��6<�����6����^��ZD��4	%�'ԎkP��/ق#\�]�IK0�0��
Ԃ-7���.y�k �V=_0
	*�H��



 0��10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*�H��

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0
250818050430Z
250917050430Z0��10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*�H��

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0�"0
	*�H��



 � 0�
�
 ��I�r�k#��He�"M�O������|��nY�������ҕ������P��H�"P�L{��
(&����UA�>['l���q�/r"�F
%b�>����,�n�>妠�EAN�tքN�y����%���ѹ�h�3YK�}w�ќ�#��X������,u-�b��	n�p� 	�b����lmȂ P������_�ОϓT�_�]�7`��{e���EE|K�[�NƔ=�N�Ҕ<�����6|�
�ZB7�*��n��g�� �sJh(1�������E~����;ǃ�!q��8�R�3��6�N��)�͛*�l_{��:y j}����X*�^�N��;O����4�� �Y-�^h�L���-v�X�P�7nfxo�0FM4��J���{Ů�2��l?��35�M��n`TP�~m���� ���+�7�Y�J�E�	��r3�^]�Z�!T����U�'�M	�@�.f�e�n��8N�a�t��_Q�B�����K�i���
 
���0��0U0

�0�	+

�&
@�0�� J (`��������D��[ek���Ҭ��Pp�H�F��cH�W��L/2�
��G\L��$�IC�pޯ>F
+1�:��� ���ޠ�X+��Uӭ��)I�'�8Gk���l����~�ا�}�!�Y �h[y�/69����j�Rcq/��؃J��{t��Pb:c�I�|v�it�k���f���=� ���
��o��V��R#W�W6����(��
!M�KA&y^E�w
_�:i"'�	��1��1�8h.F0���?ow	"3���;��I��t'En�RL�����q���{�F�88^��޴���)�ZI�j��ݏZ�bS
�M_���
�0{Z3C�ur�U.�12P>���sl����
E��5"�-ʜ�UC�=\N���:jj� i��oԹ��V��%����G�6�( 
:��@��𽞢P)�[�J�W/z�V��)�)	��޲��o�7�����%�	�1�n�FA�2C��S����R ��.�M��(9�C�W�1̚LH 0�	+

�&
A�0�� ;�D\��+LD" ;duH�\?-D���D��W�����-�4��)
>4W��
��+��	60��诎B3L+PԂ�K �V�>��d�h�نX�6��E�?�SO]�ӟAP_�:N
���i�
=\o�(��. c�Y��'��$Xg�~�l2̣<L��b�$>jD��3x�T�:L}w�%�{z�	Es`�'�dg��j;�|�?�"U�]
Oˠ^���jL��|t��T�'��Xf��;1�Wê^��D�ጩ@B�d�^��\�w����L��F
8��|I�<_+M?�dS��0��{�eb�1Y�5�BZr����b�(�:�E��#�+i���������H��[I#TeAn�5�e�Qo�%���J�%�X?8?���S8�A�_���9�������24B4�|�А����w��[��۵�#�����t�q��r7��d��;�XY�,c"z-]@��@�%�ؚ�C�4��q�O"ijG�R>�z�ٲ��Y�׷���[!e>�=[XV�4���D��?u��;ܔ�l�`eG1� `Op}&�8&��,4�ck���p}
�mXK�[��:������ tͲ+z��t�!]�h�+=�Z��'�f?R�$�]��D���a��*�P�-3
	 � T���L�
K>�h
[h-����̹�b�T^a�&�e����7���Ϯ
7��z�1�
�S>
+����p�x_0Ω��7��{Ӵ�/Զt������fǛ��ŀVx_�r���g��,y-�w����ºTT{��کt�e~=������A��5q=��Y���x�?�V�d���J@{�x���3�+��Q_}�q'R�y ���*Z��<��� ��6��!�� S�)����.�f�t輩cK�!+4�8
��t��-*K���u����,4L� +��6�_� �6��66
4Q�{){̧O}�H��8=y����QHG&(36VW��?.�U�JS�`��J���	M�<y�i��7��ZF�
&��e{�o�AޒL���,������ 0�	+

�&
B�0�� j8(e=�:P��33���^��&(�,�Ǟ��:~d���m����jG�<Oe��f�e���KE�.�F�
7����9�ѓM�1NE� Z)��'�hL"���աi�hg�KD�� õ�S=���� ��B8Dub�}��qA1
��+j��[�����5,l]���s�r�^=S�oE��VER�u������
`ĕ���E)f���zT<�����^�WĔ�g���r��E��Zd��$��	���ƻ����M����?1�<��n�<�FǧK�^��ma�U%ϴ3�4&�ࣰZ������N��v����Ef~��d���f�)����_ƝMЫR�����b��.X�q�
��|~?��DLJmO����QO�YA�("�!�;7!P�0@u�ö��a���yw�q�f�*
���Y�w�Eʊ���a�㟚_8�Ǔ��1�x�K��;j�+Ы8�n����<
�TGڥ�3���A�����9z�c�������&㝈m���q��3#����h5�Q�I��z���c鯀�J�P�
NK�q��:�{�
���f���ɯ�@��}��5I#9�v�]i�Q�bS��{����
�eWk����Uy�3$�H|	Jؕ�o=�i=�Oy�
VX�č�AUR��rŁ���
��]������o��Z�e`c%�����DW�ʠ$C�w�t�z����C0h��k�c_��1x]� �q�C���BA7���^r7Jp�M�������Z2[�Y%�|�Q���{־T��n�^	a�
ִZ�N@=c��_�u��П�Ff��X�œ.�ʇ?��c"8��ǟ��@��&C�Amk�� $��	�5]�ɣ��0�$5�W���#�^����M�W��2i(��D�t?���Ӳ�}�H�[��6δ<���ӳ�<�
��+%�QW��� ������!�ڈY����32G~�'��B}U5�`p����߆���w�>�Qp���2�ǁ� �C[��v����
b ҹ��
�% F͸p��B<��88�-V% 0��	+

�&
C��0��`�VŐ�juO����Hn�sA��:}B��"��ڪIߐ��C�d��\�;὞��M�\dTJ�����(�$�睠D�+��D��S�aG�$������	���Q��+�h� ����3ҐH�y��LE;�t�涃�
��3�R
` ���Z0��	+

�&
D��0��@�B��VNd�+�𙹬t�A�x��Z]�*ՐB����ۭ�浸�v�
�
�>�?T�<�ݽ�\A?Ov���o}*'� \�U�@ �7#$Q3,�A#��7���qo�f�0Vy����Y�
@ ���Z0	+

�&
E
0   ����0��	+

�&
F��0��`d&���rT%J�x��}��G"�(�
ޅp�<����>0cm�d�XL�i?�.h���6�Z��
���x���U�a�=mV(ݛ –�FQn U�^�K�H�>��� �;���S�൏W+��H��В��x��f �wo�
` ���Z0��	+

�&
G��0��@s��>.��/G!=ɒ�J���\���'Fwm�P�V��v���_��3D勇! �ʼQ� ����V\4*��j _�>G� &�tʥb�����wn���6z7��	��:GҦ��
@ ���Z0	+

�&
H0

  ����0��	+

�&
I��0����                                                                                                                                                                                                 
 
  ����0	+

�&
J0
   
 ���Z0	+

�&
L0
 � ���Z0	+

�&
M0
    ���Z0	+

�&
N0       ����0	+

�&
O0       ����0 	+

�&
P0         ����0	+

�&
Q0   0
	*�H��



 �
 ~͏�
vqu� �ܬIv��;��E �'P�sⵑ�xgxy�}� kzWe�u�v�O�\ɬX�,���I(�P�t�?��t m@Ax"��g�	9O��A1�t�r;;1�ܼG���� yN��iW_� e���e�6�y�'����-ێ��B�L_�d�
�{�|��I1<ȇ���L2�.DN���[����f�i֭r��࿳��J��k�QrW�
��"P=k-Z&�l�\<<1	il�
u�"�y��X)&�>F����:J�
K�EuV����a���֣�1QVL�,���)\f�z�Yue��:
�u�ä�%�#���\ߎv	�
i��.��e$��y�UEJ$�hf�K����Gd=m���/�%�
��
ʂ�_�;T�� ��\;zR����x�O��69�L����� ������:]���hӂ�ꁶ��y%�H���-0q���5�S��@4�:�V*�m��'��+z��Y�������9�{VLC�o[�_�f�b� }�~��g|�8

1. Go to directory <MCU_PLUS_SDK_INSTALL_DIR>/source/security/sbl_keywriter/scripts/cert_gen/am62x

2. Run the following command to generate the x509 certificate

   ./gen_keywr_cert.sh -t tifek/ti_fek_public.pem --msv 0xC0FFE -b-def --bmek-def -s-def --smek-def --keycnt 2 --keyrev 1                                                    
   This will generate the x509 certificate at <MCU_PLUS_SDK_INSTALL_DIR>/source/security/sbl_keywriter/scripts/x509cert/final_certificate.bin

3. Convert certificate binary to .h format.

   • Go to directory: <MCU_PLUS_SDK_INSTALL_DIR>/source/security/sbl_keywriter/scripts/x509cert

   • Run the following command

     python3 ../../../../../tools/bin2c/bin2c.py final_certificate.bin keycert.h KEYCERT

Steps to generate keywriter binary:-

1. Go to directory <MCU_PLUS_SDK_INSTALL_DIR>/source/security/sbl_keywriter/am62x-sk/r5fss0-0_nortos/ti-arm-clang

2. Clean the sbl_keywriter

   make -sj clean PROFILE=debug
   

3. Build the sbl_keywriter

   make -sj PROFILE=debug

Can you do `md5sum` of the certificate before running the `openssl asn1parse` and share the output?

$ md5sum -b final_certificate.bin

5062b1f7b56296f337dee960daf5e971 *final_certificate.bin

Kapil Vyas said:

5062b1f7b56296f337dee960daf5e971 *final_certificate.bin

This is different certificate than the one you are attaching (it has different md5sum). Can you please correct your setup and share the correct information for me to proceed further with finding the cause of the issue.

We recreated final_certificate.bin and here is the terminal output we get

$ ./gen_keywr_cert.sh -t tifek/ti_fek_public.pem --msv 0xC0FFE -b-def --bmek-def -s-def --smek-def --keycnt 2 --keyrev 1
# Using MSV[19:0]: 0x000C0FFE
INFO: Using default BMPK for programming
INFO: Using default BMEK for programming
INFO: Using default SMPK for programming
INFO: Using default SMEK for programming
# Using Key Count: 0x00000003
# Using Key Rev: 0x00000001
Generating Dual signed certificate!!
GEN: AES256 key generated, since not provided
# encrypt aes256 key with tifek public part
# encrypt SMPK-priv signed aes256 key(hash) with tifek public part
# encrypt smpk-pub hash using aes256 key
writing RSA key
# encrypt smek (sym key) using aes256 key
# encrypt BMPK-priv signed aes256 key(hash) with tifek public part
# encrypt bmpk-pub hash using aes256 key
writing RSA key
# encrypt bmek (sym key) using aes256 key
1668	secondary_cert.bin
5383	primary_cert.bin
7051	../../x509cert/final_certificate.bin
# SHA512 Hashes of keys are stored in verify_hash.csv for reference..

$ md5sum -b  final_certificate.bin
402eb0eb26deb607368c388b32b4b5f2 *final_certificate.bin

$ openssl asn1parse -in final_certificate.bin -inform DER
    0:d=0  hl=4 l=1664 cons: SEQUENCE          
    4:d=1  hl=4 l=1128 cons: SEQUENCE          
    8:d=2  hl=2 l=   3 cons: cont [ 0 ]        
   10:d=3  hl=2 l=   1 prim: INTEGER           :02
   13:d=2  hl=2 l=  20 prim: INTEGER           :4663719957B7DFE07CC2683B47296DF403D0E62A
   35:d=2  hl=2 l=  13 cons: SEQUENCE          
   37:d=3  hl=2 l=   9 prim: OBJECT            :sha512WithRSAEncryption
   48:d=3  hl=2 l=   0 prim: NULL              
   50:d=2  hl=3 l= 191 cons: SEQUENCE          
   53:d=3  hl=2 l=  11 cons: SET               
   55:d=4  hl=2 l=   9 cons: SEQUENCE          
   57:d=5  hl=2 l=   3 prim: OBJECT            :countryName
   62:d=5  hl=2 l=   2 prim: PRINTABLESTRING   :oR
   66:d=3  hl=2 l=  11 cons: SET               
   68:d=4  hl=2 l=   9 cons: SEQUENCE          
   70:d=5  hl=2 l=   3 prim: OBJECT            :stateOrProvinceName
   75:d=5  hl=2 l=   2 prim: UTF8STRING        :rx
   79:d=3  hl=2 l=  22 cons: SET               
   81:d=4  hl=2 l=  20 cons: SEQUENCE          
   83:d=5  hl=2 l=   3 prim: OBJECT            :localityName
   88:d=5  hl=2 l=  13 prim: UTF8STRING        :gQE843yQV0sag
  103:d=3  hl=2 l=  43 cons: SET               
  105:d=4  hl=2 l=  41 cons: SEQUENCE          
  107:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
  112:d=5  hl=2 l=  34 prim: UTF8STRING        :dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f
  148:d=3  hl=2 l=  17 cons: SET               
  150:d=4  hl=2 l=  15 cons: SEQUENCE          
  152:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
  157:d=5  hl=2 l=   8 prim: UTF8STRING        :a87RB35W
  167:d=3  hl=2 l=  24 cons: SET               
  169:d=4  hl=2 l=  22 cons: SEQUENCE          
  171:d=5  hl=2 l=   3 prim: OBJECT            :commonName
  176:d=5  hl=2 l=  15 prim: UTF8STRING        :x0FSqGTPWbGpuiV
  193:d=3  hl=2 l=  49 cons: SET               
  195:d=4  hl=2 l=  47 cons: SEQUENCE          
  197:d=5  hl=2 l=   9 prim: OBJECT            :emailAddress
  208:d=5  hl=2 l=  34 prim: IA5STRING         :kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com
  244:d=2  hl=2 l=  30 cons: SEQUENCE          
  246:d=3  hl=2 l=  13 prim: UTCTIME           :250818095153Z
  261:d=3  hl=2 l=  13 prim: UTCTIME           :250917095153Z
  276:d=2  hl=3 l= 191 cons: SEQUENCE          
  279:d=3  hl=2 l=  11 cons: SET               
  281:d=4  hl=2 l=   9 cons: SEQUENCE          
  283:d=5  hl=2 l=   3 prim: OBJECT            :countryName
  288:d=5  hl=2 l=   2 prim: PRINTABLESTRING   :oR
  292:d=3  hl=2 l=  11 cons: SET               
  294:d=4  hl=2 l=   9 cons: SEQUENCE          
  296:d=5  hl=2 l=   3 prim: OBJECT            :stateOrProvinceName
  301:d=5  hl=2 l=   2 prim: UTF8STRING        :rx
  305:d=3  hl=2 l=  22 cons: SET               
  307:d=4  hl=2 l=  20 cons: SEQUENCE          
  309:d=5  hl=2 l=   3 prim: OBJECT            :localityName
  314:d=5  hl=2 l=  13 prim: UTF8STRING        :gQE843yQV0sag
  329:d=3  hl=2 l=  43 cons: SET               
  331:d=4  hl=2 l=  41 cons: SEQUENCE          
  333:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
  338:d=5  hl=2 l=  34 prim: UTF8STRING        :dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f
  374:d=3  hl=2 l=  17 cons: SET               
  376:d=4  hl=2 l=  15 cons: SEQUENCE          
  378:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
  383:d=5  hl=2 l=   8 prim: UTF8STRING        :a87RB35W
  393:d=3  hl=2 l=  24 cons: SET               
  395:d=4  hl=2 l=  22 cons: SEQUENCE          
  397:d=5  hl=2 l=   3 prim: OBJECT            :commonName
  402:d=5  hl=2 l=  15 prim: UTF8STRING        :x0FSqGTPWbGpuiV
  419:d=3  hl=2 l=  49 cons: SET               
  421:d=4  hl=2 l=  47 cons: SEQUENCE          
  423:d=5  hl=2 l=   9 prim: OBJECT            :emailAddress
  434:d=5  hl=2 l=  34 prim: IA5STRING         :kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com
  470:d=2  hl=4 l= 546 cons: SEQUENCE          
  474:d=3  hl=2 l=  13 cons: SEQUENCE          
  476:d=4  hl=2 l=   9 prim: OBJECT            :rsaEncryption
  487:d=4  hl=2 l=   0 prim: NULL              
  489:d=3  hl=4 l= 527 prim: BIT STRING        
 1020:d=2  hl=2 l= 114 cons: cont [ 3 ]        
 1022:d=3  hl=2 l= 112 cons: SEQUENCE          
 1024:d=4  hl=2 l=  12 cons: SEQUENCE          
 1026:d=5  hl=2 l=   3 prim: OBJECT            :X509v3 Basic Constraints
 1031:d=5  hl=2 l=   5 prim: OCTET STRING      [HEX DUMP]:30030101FF
 1038:d=4  hl=2 l=  96 cons: SEQUENCE          
 1040:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.34
 1051:d=5  hl=2 l=  83 prim: OCTET STRING      [HEX DUMP]:305106096086480165030402030440E147AC8EA279A681D6762D8C0AE0C1E62B4D9D9F4BDE3CA25C3FA0807574E05564115489D54AB824E265185E3415F25AF57D7E7171E78CDFFB316EA12F58077C02021507
 1136:d=1  hl=2 l=  13 cons: SEQUENCE          
 1138:d=2  hl=2 l=   9 prim: OBJECT            :sha512WithRSAEncryption
 1149:d=2  hl=2 l=   0 prim: NULL              
 1151:d=1  hl=4 l= 513 prim: BIT STRING        
 1668:d=0  hl=4 l=5379 cons: SEQUENCE          
 1672:d=1  hl=4 l=4843 cons: SEQUENCE          
 1676:d=2  hl=2 l=   3 cons: cont [ 0 ]        
 1678:d=3  hl=2 l=   1 prim: INTEGER           :02
 1681:d=2  hl=2 l=  20 prim: INTEGER           :173AC3B8667BEDAEE30167FB2E2305E85C4DBED2
 1703:d=2  hl=2 l=  13 cons: SEQUENCE          
 1705:d=3  hl=2 l=   9 prim: OBJECT            :sha512WithRSAEncryption
 1716:d=3  hl=2 l=   0 prim: NULL              
 1718:d=2  hl=3 l= 191 cons: SEQUENCE          
 1721:d=3  hl=2 l=  11 cons: SET               
 1723:d=4  hl=2 l=   9 cons: SEQUENCE          
 1725:d=5  hl=2 l=   3 prim: OBJECT            :countryName
 1730:d=5  hl=2 l=   2 prim: PRINTABLESTRING   :oR
 1734:d=3  hl=2 l=  11 cons: SET               
 1736:d=4  hl=2 l=   9 cons: SEQUENCE          
 1738:d=5  hl=2 l=   3 prim: OBJECT            :stateOrProvinceName
 1743:d=5  hl=2 l=   2 prim: UTF8STRING        :rx
 1747:d=3  hl=2 l=  22 cons: SET               
 1749:d=4  hl=2 l=  20 cons: SEQUENCE          
 1751:d=5  hl=2 l=   3 prim: OBJECT            :localityName
 1756:d=5  hl=2 l=  13 prim: UTF8STRING        :gQE843yQV0sag
 1771:d=3  hl=2 l=  43 cons: SET               
 1773:d=4  hl=2 l=  41 cons: SEQUENCE          
 1775:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
 1780:d=5  hl=2 l=  34 prim: UTF8STRING        :dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f
 1816:d=3  hl=2 l=  17 cons: SET               
 1818:d=4  hl=2 l=  15 cons: SEQUENCE          
 1820:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
 1825:d=5  hl=2 l=   8 prim: UTF8STRING        :a87RB35W
 1835:d=3  hl=2 l=  24 cons: SET               
 1837:d=4  hl=2 l=  22 cons: SEQUENCE          
 1839:d=5  hl=2 l=   3 prim: OBJECT            :commonName
 1844:d=5  hl=2 l=  15 prim: UTF8STRING        :x0FSqGTPWbGpuiV
 1861:d=3  hl=2 l=  49 cons: SET               
 1863:d=4  hl=2 l=  47 cons: SEQUENCE          
 1865:d=5  hl=2 l=   9 prim: OBJECT            :emailAddress
 1876:d=5  hl=2 l=  34 prim: IA5STRING         :kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com
 1912:d=2  hl=2 l=  30 cons: SEQUENCE          
 1914:d=3  hl=2 l=  13 prim: UTCTIME           :250818095153Z
 1929:d=3  hl=2 l=  13 prim: UTCTIME           :250917095153Z
 1944:d=2  hl=3 l= 191 cons: SEQUENCE          
 1947:d=3  hl=2 l=  11 cons: SET               
 1949:d=4  hl=2 l=   9 cons: SEQUENCE          
 1951:d=5  hl=2 l=   3 prim: OBJECT            :countryName
 1956:d=5  hl=2 l=   2 prim: PRINTABLESTRING   :oR
 1960:d=3  hl=2 l=  11 cons: SET               
 1962:d=4  hl=2 l=   9 cons: SEQUENCE          
 1964:d=5  hl=2 l=   3 prim: OBJECT            :stateOrProvinceName
 1969:d=5  hl=2 l=   2 prim: UTF8STRING        :rx
 1973:d=3  hl=2 l=  22 cons: SET               
 1975:d=4  hl=2 l=  20 cons: SEQUENCE          
 1977:d=5  hl=2 l=   3 prim: OBJECT            :localityName
 1982:d=5  hl=2 l=  13 prim: UTF8STRING        :gQE843yQV0sag
 1997:d=3  hl=2 l=  43 cons: SET               
 1999:d=4  hl=2 l=  41 cons: SEQUENCE          
 2001:d=5  hl=2 l=   3 prim: OBJECT            :organizationName
 2006:d=5  hl=2 l=  34 prim: UTF8STRING        :dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f
 2042:d=3  hl=2 l=  17 cons: SET               
 2044:d=4  hl=2 l=  15 cons: SEQUENCE          
 2046:d=5  hl=2 l=   3 prim: OBJECT            :organizationalUnitName
 2051:d=5  hl=2 l=   8 prim: UTF8STRING        :a87RB35W
 2061:d=3  hl=2 l=  24 cons: SET               
 2063:d=4  hl=2 l=  22 cons: SEQUENCE          
 2065:d=5  hl=2 l=   3 prim: OBJECT            :commonName
 2070:d=5  hl=2 l=  15 prim: UTF8STRING        :x0FSqGTPWbGpuiV
 2087:d=3  hl=2 l=  49 cons: SET               
 2089:d=4  hl=2 l=  47 cons: SEQUENCE          
 2091:d=5  hl=2 l=   9 prim: OBJECT            :emailAddress
 2102:d=5  hl=2 l=  34 prim: IA5STRING         :kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com
 2138:d=2  hl=4 l= 546 cons: SEQUENCE          
 2142:d=3  hl=2 l=  13 cons: SEQUENCE          
 2144:d=4  hl=2 l=   9 prim: OBJECT            :rsaEncryption
 2155:d=4  hl=2 l=   0 prim: NULL              
 2157:d=3  hl=4 l= 527 prim: BIT STRING        
 2688:d=2  hl=4 l=3827 cons: cont [ 3 ]        
 2692:d=3  hl=4 l=3823 cons: SEQUENCE          
 2696:d=4  hl=2 l=  12 cons: SEQUENCE          
 2698:d=5  hl=2 l=   3 prim: OBJECT            :X509v3 Basic Constraints
 2703:d=5  hl=2 l=   5 prim: OCTET STRING      [HEX DUMP]:30030101FF
 2710:d=4  hl=4 l= 539 cons: SEQUENCE          
 2714:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.64
 2725:d=5  hl=4 l= 524 prim: OCTET STRING      [HEX DUMP]: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
 3253:d=4  hl=4 l=1051 cons: SEQUENCE          
 3257:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.65
 3268:d=5  hl=4 l=1036 prim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
 4308:d=4  hl=4 l=1051 cons: SEQUENCE          
 4312:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.66
 4323:d=5  hl=4 l=1036 prim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
 5363:d=4  hl=3 l= 177 cons: SEQUENCE          
 5366:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.67
 5377:d=5  hl=3 l= 163 prim: OCTET STRING      [HEX DUMP]:3081A00460C110D2C65611095927B4EC4ED10939DE3AB50B9E6B67B9B2E9757517533B76B9DA47EEAB96F7BFC9406AE9666D540E597A3E296350D0F4BDA44B4764270519D7A43965A6B738791337ECBFB5B933ABD34D5FF74DD335B115B2CDEDB05186DA920410EBB0FEC6410E4C7DE947F2E2067A1DA7042083533DECBBB8DDEE0EB0113437CA4660358454343CD1AA28C71C67B6B306E39E020160020500A5A5A55A
 5543:d=4  hl=3 l= 145 cons: SEQUENCE          
 5546:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.68
 5557:d=5  hl=3 l= 131 prim: OCTET STRING      [HEX DUMP]:3081800440460B165E6CE645715809C97AEBDDEC1CA72ECDF45D5AB8285D93A0252AC9A10A49B2D0CBB9CE7040D2F6FA6B1151643B3CA3755B7E0E9AB3E28B64F8D3B5138C04100C875879B32B6D329C0D5B85C3709DD004200A870364D2A2CD4ABC119B55FEE86D8DD15156A0CE2B107004B8CDC6E1329852020140020500A5A5A55A
 5691:d=4  hl=2 l=  26 cons: SEQUENCE          
 5693:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.69
 5704:d=5  hl=2 l=  13 prim: OCTET STRING      [HEX DUMP]:300B04020000020500A5A5A5A5
 5719:d=4  hl=3 l= 177 cons: SEQUENCE          
 5722:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.70
 5733:d=5  hl=3 l= 163 prim: OCTET STRING      [HEX DUMP]:3081A004607DD8973F070F8DA7CEC34EFB3881C3525A9AF2FF736D2592D4125EE391E134F7D5DA278DAA343B51C09D5BE8AF9FCF05B6167973BD0A3343C7FABADF8F87CAC9EE8A185229C68535FD12E09AA7DECC72B78A2191BE979965397E26E81C85587304103AE077A6E3E64AB32D7BC249DB93B13D04202E6B7D3DD0CD2714339923FC4B940F4E7AF4F912AD84A68B7B1DE79C241125F5020160020500A5A5A55A
 5899:d=4  hl=3 l= 145 cons: SEQUENCE          
 5902:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.71
 5913:d=5  hl=3 l= 131 prim: OCTET STRING      [HEX DUMP]:3081800440C5B0A595F2230E10159051DE10EF378E7D541DAC8BC275EA4B24F7F3EAD87008A4B0B7D52DA8F587A37709A23C4F99663CFF787F9FE78F9E1BFEBDEACF5633DD0410FB35062728481FA38237A0CED53428960420AAF409C5847244E3B0CF8B156C0F2D412CD5B47CCE7C33F973E7122A52E77725020140020500A5A5A55A
 6047:d=4  hl=2 l=  25 cons: SEQUENCE          
 6049:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.72
 6060:d=5  hl=2 l=  12 prim: OCTET STRING      [HEX DUMP]:300A040100020500A5A5A5A5
 6074:d=4  hl=3 l= 231 cons: SEQUENCE          
 6077:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.73
 6088:d=5  hl=3 l= 217 prim: OCTET STRING      [HEX DUMP]:3081D6048180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004100000000000000000000000000000000004200000000000000000000000000000000000000000000000000000000000000000041000000000000000000000000000000000020100020100020500A5A5A5A5
 6308:d=4  hl=2 l=  28 cons: SEQUENCE          
 6310:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.74
 6321:d=5  hl=2 l=  15 prim: OCTET STRING      [HEX DUMP]:300D040400000001020500A5A5A55A
 6338:d=4  hl=2 l=  28 cons: SEQUENCE          
 6340:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.76
 6351:d=5  hl=2 l=  15 prim: OCTET STRING      [HEX DUMP]:300D0404000C0FFE020500A5A5A55A
 6368:d=4  hl=2 l=  28 cons: SEQUENCE          
 6370:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.77
 6381:d=5  hl=2 l=  15 prim: OCTET STRING      [HEX DUMP]:300D040400000003020500A5A5A55A
 6398:d=4  hl=2 l=  30 cons: SEQUENCE          
 6400:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.78
 6411:d=5  hl=2 l=  17 prim: OCTET STRING      [HEX DUMP]:300F0406000000000000020500A5A5A5A5
 6430:d=4  hl=2 l=  30 cons: SEQUENCE          
 6432:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.79
 6443:d=5  hl=2 l=  17 prim: OCTET STRING      [HEX DUMP]:300F0406000000000000020500A5A5A5A5
 6462:d=4  hl=2 l=  32 cons: SEQUENCE          
 6464:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.80
 6475:d=5  hl=2 l=  19 prim: OCTET STRING      [HEX DUMP]:301104080000000000000000020500A5A5A5A5
 6496:d=4  hl=2 l=  21 cons: SEQUENCE          
 6498:d=5  hl=2 l=   9 prim: OBJECT            :1.3.6.1.4.1.294.1.81
 6509:d=5  hl=2 l=   8 prim: OCTET STRING      [HEX DUMP]:3006040400000200
 6519:d=1  hl=2 l=  13 cons: SEQUENCE          
 6521:d=2  hl=2 l=   9 prim: OBJECT            :sha512WithRSAEncryption
 6532:d=2  hl=2 l=   0 prim: NULL              
 6534:d=1  hl=4 l= 513 prim: BIT STRING        

0‚€0‚h 
Fcq™W·ßà|Âh;G)môÐæ*0
	*†H†÷



 0¿10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*†H†÷

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0
250818095153Z
250917095153Z0¿10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*†H†÷

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0‚"0
	*†H†÷



 ‚ 0‚
‚
 ôb‹FÎ86“ሗJŠÛ>Àok–ÊÛ•)x#ÅäÞ§¶¶9‘ãChPk,Å
CÝo7!$xEÅßÉ-—¦Ð<ö!W.¾PÃïÇ£E†:_†3¢œ—8Ëß0ÓÀÕò<AÁý)I Ùs¶'á‡È  Lšëè%šÿÓϺ5Ÿ¾
8»è¡nðÜ_ýMÜÝS[y¼Å5³"à,YVAû_çÖOhÔ6­ŒÍ.Ë뀏ßû\$õ,â½b)\ÅHÍ…eXÈ™¢Ÿ¦õñ€ma~´z™À6[ÖÃ%φwß!Êíâ¥=´ÃB›“s@gÈéó25Ê—î?"ÏhÀ
n¼Þôªgšc
£Z~rÌ6áÌŒ".…gép¸¿¡‹R°æ4¼Ü_š·
Äi=ƒ,€—•JÑ^ý‹þQÉ<0Üé&Å#ì,¬îþSjåP†ôpÙu
¸£Uf‚QÉ=gã8^€7`„TéNQ˜ÝôREâúŸpqµxyÞÔIŠ
 !‹¾½ª¢Fƒ<	5Ù{ûÁÅ0ò
8Ë)"‘M³¾—ãõmü«d`úWSåD©çe€¦¼ µ¼8êYð`j配Þ8# ¹
åFQëžúT=R`t%PÿSã-P-ˆ"­Ðáœç]šáúlf Œ®Ð¯¹k«®¿
 
£r0p0U0

ÿ0`	+

‚&
"S0Q	`†H
e@áG¬Ž¢y¦Öv-Œ
àÁæ+MŸKÞ<¢\? €utàUdT‰ÕJ¸$âe^4òZõ}~qqçŒßû1n¡/X | 0
	*†H†÷



 ‚
 <º»Ä	–A·`©c8W˜Xa·@'È~‘ùdzC‘]r›»¥ëjs,l.©ŽPj!ÔW‡Á9ºmïÝ”}Bw!°ô°hc×ûÚ½L¾d'£
äÆÎ~ñ0'Í|"ÜÊÃÞZÕØ{ÞËZw^¯ñ©¢L#€úª
Rýuž“kEA¤èx‰xµxdIÞ)<«UÎ%œ•QR£ÊιÕY·I­»‘;×­°Û¤Ø
C<4Ð+Sk£+“ïM°Â˜öTIoiÀ{#8ÿ?¡lB”µ#™À˜­fîk?S·/Rq:Êär}rìÅ¡G+çŽ3Ey(ò½ó,nœ/¢6¾|Ðd‚Fã<]^áßfÉÙLQs–LÝ%ÖØÏXId•¤ñÂc?íäŸæóy¤¤«Ï0G<€ö#Ë3gŸs
ÇZUÛ#a¢&DÿXµßñçÖ‘ÀâñJ#¡A´µpõÚQ_’hd÷ׄ˜ÒTónê8iâý=߉ï¦\{GD+ªèžáÅòxbòïιbfÑEÔjÍMïb¯OÁççâ=@ISÞD)/JѾ©UÑi¡ƒ›rGÌ´ðq®˜Ï'}‹	¶-rBÙ8uGw ­%a.„S¡Í×^¦òÏéNéU7´ÎHÓ3r!Â:ò
Do;ó¹)Ë0‚0‚ë 
:øf{í®ã
gû.#è\M¾Ò0
	*†H†÷



 0¿10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*†H†÷

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0
250818095153Z
250917095153Z0¿10	UoR10	Urx10U 
gQE843yQV0sag1+0)U
"dqhGYAQ2Y4gFfCq0t1yABCYxex9eAxt71f10Ua87RB35W10Ux0FSqGTPWbGpuiV110/	*†H†÷

	
"kFp5uGcgWXxcfxi@vsHs9C9qQWGrBs.com0‚"0
	*†H†÷



 ‚ 0‚
‚
 ¿®IØrÓk#ÍëHeÜ"MòO‚öíµòÝÛ|‘únYÿÕ÷¶ÞŠÌÒ•ÙÑàÄÁøP¿ÿH‘"PšL{‹ó–
(&³¤Ùà©UAû>['l¿ÊÀq¯/r"îF
%b­>Çö±¶,Ànâ›>妠¨EAN©tÖ„NÖy§¸©’%ݱòѹòhØ3YK‚}wÌÑœú#´ûXˆòÍêÕò,u-úbÃÁ	nàpൠ	™bÙÖäçlmÈ‚ P“÷âØíÑ_ãОϓTÙ_Ý]Î7`ñ«Š{e§ºßEE|K¡[®NÆ”=ŒN‡Ò”<¤óŸÚüò6|ç
­ZB7ñ*Ðn¡§g‡í »sJh(1¢‚š£Áè‡ÿE~ªÁŸÔ;ǃý!qþ½8ÉRæ3É6ÍN‚)ˆÍ›*¾l_{²²:y j}õ­ÍX*Ï^ôN€«;OÝøÔÞ4¢Ä ÙY-…^h±L¹é-vµXŒP¨7nfxoƒ0FM4Ÿ´J¹»ú{Å®Ö2„„l?š€35üM¼Õn`TPÏ~m€—ú ý½˜+¡7½YýJìE¡	‹Ér3·^]âZÎ!TöáêÕUª'ëM	ß@‚.f‰eÙn³Ö8NaÖtÔÞ_QÕB¸ƒÒÈÞK©i—¶
 
£‚ó0‚ï0U0

ÿ0‚	+

‚&
@‚0‚‚ 	æj{2I>(à9ùÝ:³ûÚ´n—OiIÕê%6}ã®×úÀ€mÞ7èLuÈ[¢üÓR¡¤Ø$SH¬áÏ
†…9ÙðCÆpd¸§e™(„†î÷8ÿ,IÂê¨y@ˆ±ÔE)HÞý¦wr*{Ä#úž,?Òð¯î:6t»uÔG$}KZÎÉ-ôÁݽrÜ\iÄüˆ•nQߎ$xî4´¼2º£rí7¬ÛÉ»á
M¿ŸÉLoÙÞê<÷”#89>aå„ÒÁ(ZØ–5¯iSÑÇD‘,,³¸>}a3óÕRçm’x«XÆÖCêàþýÝ)Xo搱§ñ–\;jnªž+ß³ökäÁN
#H‡H¯ÔÁüíMÙ$¾ú ;Ôjæ<˜luÖqd¸Ðœ2îDc
¼ý¨°ŒÒ›Ìê/[‰·$0»çõ5“×V(6£¯áüRôò °'YÁþl×éãae[îС¥<m£½d®Œë™ê'HƒÀzÙÑÜÑÂB0ci«gÎԍ­J;Êø5h‹axÓž“´Z”l¥´#ù#°Æbá”—зY«)JK{w´pv” `B¶ðÿ\ê:Ç%7–Fq¥lª=€š—É ;›©ýýQF0à]E½sÉYÅ	ðra#ƒçÁ€3ÛÓ^|C.‹ÐÝ-æ1là+, 0‚	+

‚&
A‚0‚‚ Wþ>EÅn®-ñ¾ß±ÞRG]U´òM árzX{hŠ2
ôxþl\‰Ÿ!Qüý™¿?úmU¹$a
¾úÌDâoñNFúo³g-]SWÑk Ìæ&Šl39?¿K½¶^rÿ—ñÐù˜Å¥äé1æ å⛣V!"™Gù1ó˜VN)|Äo?T–/É •Å[/´ùÖ`fÛ£	æ³eÆþ׍º`WX»d,7ã2“ai?ÕWVÞ®˜XÿVŽ+Âѽ¡r浺£¥G÷¶±Ü+@N\î©/ÿ_™"0;¤ß+8—t¬Ö#¡4ï¡dñ9Í¢
Oõw¥}ég^ê›ä°EEF–P~™8Øâ^Ž× Ã0úÞGýÿixð¸ñUª~ «¯ØNct·LêͤmǏwÍB—ÃQ<¡L½Øª­QæÍ÷#ëãaÚåµÀ±ßøÅÔž¡Z‘aó×"m~ðÅÜõ~Ë‘
§Ë‹$ÄUÅÀ§ÉùÈ-ìPg+oŸ©w3\´¢qo/þÖáe¬ošàD´‰á\iÊþÕ [qÚáÍÔ©³œ	Þ@
Äñ8Ãó¹øóI
2áZ˜ÿžhƒ2áè|««d鯛Ö|®"U„ÜlS,˜eéì«Û&ˆ;Tî¸ö#ØN:Ïx¾ïO ø¥KQ&YéBûçIÌ-Zb¿;Ó¸í£›ÞæÙýY;KF
[>-ùEYQ]cZû^ÉtÊ`éöù§*˜ÒÚá+óÉ–ÝÝsÏyÂìÏu3:•P~ßþ9K-…ýßÿ–„3K²ø¼–EZê¾9àýXmÌ«ñ©òþxj’*â<sXc	M»TÄüi3éii`=ûSͳÄ5¼¼›öpaÀ‡µ©a¶—g=ZÆ=ÄÛoþûúÀ˜”åÙ{N’¦ÒhwYÖî†\Оò]óhÙD¢&Æ•ûÍ]£¬»]“”¬Úd'N³3xxqúF‘ƒ„ª|%xXÉûâ6¶„!QJ°Ù7|"Ì#ŒT
âØýÆ »‘Åd°áïß,ìÌz­B®š6b´å¨å´£86Ápp´¥r6Ú–žŒ_‹™K
ԝh)–LagùG­‰V·¶|“³B8¦ SimZ
¤T4)Ž¸Ø‰DxÍR¤,¯|•ý3Ø"COãŽô¸ÚèÕ+kÏŒn.T³
\ûjÑ£þæaXÐÅÊUÓë·©×ý€GsF¥}ÚÑèŒûÆ-
&Û5@P õÝx¯Îä”ͭv²)å‘Ùe_ÊĸC
GpÃÒ•óÏ¥àœIz*"ög{ó¹ñýÒ9,îD³hÒ²ÿ¤Ô¯/c9¬Â<~ځqZ+Êšÿn®ˆÊ 0‚	+

‚&
B‚0‚‚ ’E¢œ`a¼h–5p+檳Œ™#¹ãTD~x'¯дñÎ’BŸòíKDÿkWäN²2`S%Úî&‡
8n8Ýn;–#Q‡ç›~ûúZñ-:Uƒ§n7Ž	ý™8TèÊ'†°A±></Ⱥ.¹
›Ž`Oûl=­nºn-Ól žüžß¹d§ñkTìé}`äWÈ¢‡Ì÷‘â?7D¨ýÜ$õàuhzÀ­¯üql§‘,²Œ»)âBþS¢¹t+ÿ’^
ªÚÁ7·…S¦÷ßUWe?ê=yC-Ô4ÚD/¬$ú9w­Ûί²¯Ì²5.1Ž!N†¥°j/zI¦ìÂSô@ß
µ¾Cû¡"KuKõœßÙ“@Ý^º\>íiÄãP´¹øF0tL	HaàLÄw¡¼³E˜9£&aÐ~£k¢ÈS8¾qT(çÓJÄîWf KÖÉEeÅF´æCðåf[@]-Z½ÔaÏvÔ	xPéÁ<.v‰ RV &ÛgŽwð,ô”´ZÜWs@UAÁ¾áHÙÂ: ¸+®E1ÞôR¹i*nS=ð5moJô² ö2õ6ÕOíŒþùŠÂQŒºŽm³ Ç$àHz4
pœ®Èqª$
ÑIՐŸc„Tm‚*@'*S¬ØgGzL©þb·aÁÑðŸÈʏ+$ÏÔ—a¡ø†³Ò×/žœflÎA˜}LF¡1Lª³d0Ç\4Õ%žü÷Na”Ö³Ýq)½IÐ|ß+'Gò^Ó(.RNš§j#W`MèÞƒ’®Àsÿ6Äšaè@v6ƒw(Ý•u<_o)¦£
ЋÄíW7v.)¤UÂhu€=EH0¶Ç·]?¥\Y+ø›â¾HãO )®WÆMóiÿÑ.c8W€áýbë¨œžg £ÖÛþÃG!1,oüòLŒA„hϝídVnïµÍíÑýÿÓò{Xúq•S”
™ÅÌHSa”³¶÷ã5
&”Ô–JÎäì5f¾1>~㟢n¾N°Îô‹ Üoœµ΢ÿðÖl¥k|ÐÿÿÔ¬ŠŠâèճх7V^=Ù %îœuÇjx÷æŒJü¬4qѻüõCrôŠûÕÀµ\‡®gýíA¥¢$›»Ûû¦Çìõ(_6SŽ|$d.´	‡o ´¾ªÝ_áîÊà{•¾°»hsé'|s}“a¢#{÷[Î-D„Š‚†lŸÀ ÅÆ~›óc>§JPRàÐXMÂ
ʦeÈð‚>Äйê	÷9Õ¿b„[ñó`ÛS'§Ö$JßZ-ûW²mê¬*¦$/P‘•Û˜­³o1 €J¸- 0±	+

‚&
C£0 `ÁÒÆV	Y'´ìNÑ	9Þ:µžkg¹²éuuS;v¹ÚGî«–÷¿É@jéfmTYz>)cPÐô½¤KGd'פ9e¦·8y7쿵¹3«ÓM_÷MÓ5±²Íí°Q†Ú’ë°þÆAL}éGòâz§ ƒS=컸Ýî°47ÊF`5„T4<Ѫ(Çg¶³ãž
` ¥¥¥Z0‘	+

‚&
Dƒ0€@F^læEqX	ÉzëÝì§.Íô]Z¸(]“ %*É¡
I²Ð˹Îp@ÒöúkQd;<£u[~š³â‹døÓµŒ‡Xy³+m2œ
[…ÃpÐ 
‡dÒ¢ÍJ¼›UþèmÑQV Î+p¸ÍÆá2˜R
@ ¥¥¥Z0	+

‚&
E
0   ¥¥¥¥0±	+

‚&
F£0 `}Ø—? §ÎÃNû8ÃRZšòÿsm%’Ô^ã‘á4÷ÕÚ'ª4;QÀ[诟϶ys½
3CÇúºß‡ÊÉîŠR)Æ…5ýàš§ÞÌr·Š!‘¾—™e9~&è…Xs:àw¦ãæJ³-{ÂIÛ“±= .k}=ÐÍ'3™#üK”Nzôù­„¦‹{çœ$%õ
` ¥¥¥Z0‘	+

‚&
Gƒ0€@Å°¥•ò#QÞï7Ž}T¬‹ÂuêK$÷óêØp¤°·Õ-¨õ‡£w	¢<O™f<ÿxŸçžþ½êÏV3Ýû5'(H£‚7 ÎÕ4(– ªô	Å„rDã°Ï‹l-A,Õ´|Î|3ùsç*Rçw%
@ ¥¥¥Z0	+

‚&
H0

  ¥¥¥¥0ç	+

‚&
IÙ0Ö€                                                                                                                                                                                                 
 
  ¥¥¥¥0	+

‚&
J0
   
 ¥¥¥Z0	+

‚&
L0
 þ ¥¥¥Z0	+

‚&
M0
    ¥¥¥Z0	+

‚&
N0       ¥¥¥¥0	+

‚&
O0       ¥¥¥¥0 	+

‚&
P0         ¥¥¥¥0	+

‚&
Q0   0
	*†H†÷



 ‚
 lÓì¡:ñ­vX‹†è벝<ZÝ=EñõÁ £~QBúÑE'ôfkñt˜¯i °>v˺FO
ô?ͯuÒmPäp©Éz!è’¢‘Çp->I±Eâç_Û¿	òãG!®Ö@K„~=Ç ¯«[tNײ ø'ÔŸÌÌ.C‹–¹tŸ¯‘âw؆f¶àa9-Š……©­{Áˆ rŒ¼;¹§ÿ±w’`Cà•ëB]•Áê§&ƒ€È¡lŸõk²àz2ŠÚ$GÔ‰K¶ÎWhËè"ƒµ
j’´4Zߪu#/t¢ôLkä5–‰> „Zc##¸Æ³¦$ïØ‘Ëð´&Ìæ1êfÀK/Óçar¥wý²q(nû–
ﯗdä	¥Ðø³À6
T´ Ã7	qЦ+ÝäµÎzú^¸ËߘTË^Q¬Äߏ ±IaÔ~—…f.Ø`@zëcÐÙ–~‹û]ˆØI€Z$TŽÓ„½g{ ¯_Ôþ·7}â&¼ý=òù™ptÇùõ,ì7DYÝxÞÕƒc?cìœZ–ûl"k‹žW	N݇A‰+¤¨Pe? ¬yå·Ö;¡œ†øÝõÓF`³sX/Â_Þìó{ÿv:ëOsØPÇ<™îD«Çg¹î7ì?ˆ…„1;W½ôñ°CØlñ¾Ö9–.pšJJ£

this is final_certificate.bin file.

The certificate is attached as code block in text format. Please attach the file itself.