FIXME: Should be signedbyotherca.crt northbad.uml.freeswan.org.cert This is signed by an invalid CA. FIXME: Should be notvalidanymore.crt northbad2.uml.freeswan.org.cert This is an expired certificate.