Diff of the two buildlogs:

--
--- b1/build.log	2023-06-08 09:20:04.345449986 +0000
+++ b2/build.log	2023-06-08 09:25:11.344010802 +0000
@@ -1,6 +1,6 @@
 I: pbuilder: network access will be disabled during build
-I: Current time: Wed Jul 10 03:41:36 -12 2024
-I: pbuilder-time-stamp: 1720626096
+I: Current time: Thu Jun  8 23:20:06 +14 2023
+I: pbuilder-time-stamp: 1686216006
 I: Building the build Environment
 I: extracting base tarball [/var/cache/pbuilder/bookworm-reproducible-base.tgz]
 I: copying local configuration
@@ -17,7 +17,7 @@
 I: copying [./golang-step-crypto_0.24.0.orig.tar.gz]
 I: copying [./golang-step-crypto_0.24.0-1.debian.tar.xz]
 I: Extracting source
-gpgv: Signature made Mon Feb  6 19:58:04 2023 -12
+gpgv: Signature made Tue Feb  7 21:58:04 2023 +14
 gpgv:                using EDDSA key 9185D4F57767AEEE6C55D41E7F44FA25EA5514CB
 gpgv: Can't check signature: No public key
 dpkg-source: warning: cannot verify inline signature for ./golang-step-crypto_0.24.0-1.dsc: no acceptable signature found
@@ -28,137 +28,169 @@
 dpkg-source: info: applying 0001-Skip-Test_getUserHomeDir.patch
 I: Not using root during the build.
 I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/93529/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/25569/tmp/hooks/D01_modify_environment starting
+debug: Running on ionos2-i386.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+'/bin/sh' -> '/bin/bash'
+lrwxrwxrwx 1 root root 9 Jun  8 23:20 /bin/sh -> /bin/bash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/25569/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/25569/tmp/hooks/D02_print_environment starting
 I: set
-  BUILDDIR='/build'
-  BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
-  BUILDUSERNAME='pbuilder1'
-  BUILD_ARCH='i386'
-  DEBIAN_FRONTEND='noninteractive'
-  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=16 '
-  DISTRIBUTION='bookworm'
-  HOME='/root'
-  HOST_ARCH='i386'
+  BASH=/bin/sh
+  BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+  BASH_ALIASES=()
+  BASH_ARGC=()
+  BASH_ARGV=()
+  BASH_CMDS=()
+  BASH_LINENO=([0]="12" [1]="0")
+  BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+  BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+  BASH_VERSINFO=([0]="5" [1]="2" [2]="15" [3]="1" [4]="release" [5]="i686-pc-linux-gnu")
+  BASH_VERSION='5.2.15(1)-release'
+  BUILDDIR=/build
+  BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+  BUILDUSERNAME=pbuilder2
+  BUILD_ARCH=i386
+  DEBIAN_FRONTEND=noninteractive
+  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=7 '
+  DIRSTACK=()
+  DISTRIBUTION=bookworm
+  EUID=0
+  FUNCNAME=([0]="Echo" [1]="main")
+  GROUPS=()
+  HOME=/root
+  HOSTNAME=i-capture-the-hostname
+  HOSTTYPE=i686
+  HOST_ARCH=i386
   IFS=' 	
   '
-  INVOCATION_ID='9ce96c408bfb4d0cba47ec001b964591'
-  LANG='C'
-  LANGUAGE='en_US:en'
-  LC_ALL='C'
-  LD_LIBRARY_PATH='/usr/lib/libeatmydata'
-  LD_PRELOAD='libeatmydata.so'
-  MAIL='/var/mail/root'
-  OPTIND='1'
-  PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
-  PBCURRENTCOMMANDLINEOPERATION='build'
-  PBUILDER_OPERATION='build'
-  PBUILDER_PKGDATADIR='/usr/share/pbuilder'
-  PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
-  PBUILDER_SYSCONFDIR='/etc'
-  PPID='93529'
-  PS1='# '
-  PS2='> '
+  INVOCATION_ID=4905bbf154cb417abf0b9787abdbea5f
+  LANG=C
+  LANGUAGE=de_CH:de
+  LC_ALL=C
+  LD_LIBRARY_PATH=/usr/lib/libeatmydata
+  LD_PRELOAD=libeatmydata.so
+  MACHTYPE=i686-pc-linux-gnu
+  MAIL=/var/mail/root
+  OPTERR=1
+  OPTIND=1
+  OSTYPE=linux-gnu
+  PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+  PBCURRENTCOMMANDLINEOPERATION=build
+  PBUILDER_OPERATION=build
+  PBUILDER_PKGDATADIR=/usr/share/pbuilder
+  PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+  PBUILDER_SYSCONFDIR=/etc
+  PIPESTATUS=([0]="0")
+  POSIXLY_CORRECT=y
+  PPID=25569
   PS4='+ '
-  PWD='/'
-  SHELL='/bin/bash'
-  SHLVL='2'
-  SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.CdGeuQsJ/pbuilderrc_ON2H --distribution bookworm --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/bookworm-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.CdGeuQsJ/b1 --logfile b1/build.log golang-step-crypto_0.24.0-1.dsc'
-  SUDO_GID='112'
-  SUDO_UID='107'
-  SUDO_USER='jenkins'
-  TERM='unknown'
-  TZ='/usr/share/zoneinfo/Etc/GMT+12'
-  USER='root'
-  _='/usr/bin/systemd-run'
-  http_proxy='http://85.184.249.68:3128'
+  PWD=/
+  SHELL=/bin/bash
+  SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+  SHLVL=3
+  SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.CdGeuQsJ/pbuilderrc_MDLq --distribution bookworm --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/bookworm-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.CdGeuQsJ/b2 --logfile b2/build.log --extrapackages usrmerge golang-step-crypto_0.24.0-1.dsc'
+  SUDO_GID=112
+  SUDO_UID=107
+  SUDO_USER=jenkins
+  TERM=unknown
+  TZ=/usr/share/zoneinfo/Etc/GMT-14
+  UID=0
+  USER=root
+  _='I: set'
+  http_proxy=http://78.137.99.97:3128
 I: uname -a
-  Linux ionos16-i386 5.10.0-23-amd64 #1 SMP Debian 5.10.179-1 (2023-05-12) x86_64 GNU/Linux
+  Linux i-capture-the-hostname 5.10.0-23-686-pae #1 SMP Debian 5.10.179-1 (2023-05-12) i686 GNU/Linux
 I: ls -l /bin
   total 6036
-  -rwxr-xr-x 1 root root 1408088 Apr 23  2023 bash
-  -rwxr-xr-x 3 root root   38404 Sep 18  2022 bunzip2
-  -rwxr-xr-x 3 root root   38404 Sep 18  2022 bzcat
-  lrwxrwxrwx 1 root root       6 Sep 18  2022 bzcmp -> bzdiff
-  -rwxr-xr-x 1 root root    2225 Sep 18  2022 bzdiff
-  lrwxrwxrwx 1 root root       6 Sep 18  2022 bzegrep -> bzgrep
-  -rwxr-xr-x 1 root root    4893 Nov 27  2021 bzexe
-  lrwxrwxrwx 1 root root       6 Sep 18  2022 bzfgrep -> bzgrep
-  -rwxr-xr-x 1 root root    3775 Sep 18  2022 bzgrep
-  -rwxr-xr-x 3 root root   38404 Sep 18  2022 bzip2
-  -rwxr-xr-x 1 root root   17892 Sep 18  2022 bzip2recover
-  lrwxrwxrwx 1 root root       6 Sep 18  2022 bzless -> bzmore
-  -rwxr-xr-x 1 root root    1297 Sep 18  2022 bzmore
-  -rwxr-xr-x 1 root root   42920 Sep 20  2022 cat
-  -rwxr-xr-x 1 root root   79816 Sep 20  2022 chgrp
-  -rwxr-xr-x 1 root root   67496 Sep 20  2022 chmod
-  -rwxr-xr-x 1 root root   79816 Sep 20  2022 chown
-  -rwxr-xr-x 1 root root  162024 Sep 20  2022 cp
-  -rwxr-xr-x 1 root root  136916 Jan  5  2023 dash
-  -rwxr-xr-x 1 root root  137160 Sep 20  2022 date
-  -rwxr-xr-x 1 root root  100364 Sep 20  2022 dd
-  -rwxr-xr-x 1 root root  108940 Sep 20  2022 df
-  -rwxr-xr-x 1 root root  162152 Sep 20  2022 dir
-  -rwxr-xr-x 1 root root   87760 Mar 22  2023 dmesg
-  lrwxrwxrwx 1 root root       8 Dec 19  2022 dnsdomainname -> hostname
-  lrwxrwxrwx 1 root root       8 Dec 19  2022 domainname -> hostname
-  -rwxr-xr-x 1 root root   38760 Sep 20  2022 echo
-  -rwxr-xr-x 1 root root      41 Jan 24  2023 egrep
-  -rwxr-xr-x 1 root root   34664 Sep 20  2022 false
-  -rwxr-xr-x 1 root root      41 Jan 24  2023 fgrep
-  -rwxr-xr-x 1 root root   84272 Mar 22  2023 findmnt
-  -rwsr-xr-x 1 root root   30240 Mar 22  2023 fusermount
-  -rwxr-xr-x 1 root root  218680 Jan 24  2023 grep
-  -rwxr-xr-x 2 root root    2346 Apr  9  2022 gunzip
-  -rwxr-xr-x 1 root root    6447 Apr  9  2022 gzexe
-  -rwxr-xr-x 1 root root  100952 Apr  9  2022 gzip
-  -rwxr-xr-x 1 root root   21916 Dec 19  2022 hostname
-  -rwxr-xr-x 1 root root   75756 Sep 20  2022 ln
-  -rwxr-xr-x 1 root root   55600 Mar 22  2023 login
-  -rwxr-xr-x 1 root root  162152 Sep 20  2022 ls
-  -rwxr-xr-x 1 root root  214568 Mar 22  2023 lsblk
-  -rwxr-xr-x 1 root root   96328 Sep 20  2022 mkdir
-  -rwxr-xr-x 1 root root   84008 Sep 20  2022 mknod
-  -rwxr-xr-x 1 root root   38792 Sep 20  2022 mktemp
-  -rwxr-xr-x 1 root root   63016 Mar 22  2023 more
-  -rwsr-xr-x 1 root root   58912 Mar 22  2023 mount
-  -rwxr-xr-x 1 root root   13856 Mar 22  2023 mountpoint
-  -rwxr-xr-x 1 root root  157932 Sep 20  2022 mv
-  lrwxrwxrwx 1 root root       8 Dec 19  2022 nisdomainname -> hostname
-  lrwxrwxrwx 1 root root      14 Apr  2  2023 pidof -> /sbin/killall5
-  -rwxr-xr-x 1 root root   38792 Sep 20  2022 pwd
-  lrwxrwxrwx 1 root root       4 Apr 23  2023 rbash -> bash
-  -rwxr-xr-x 1 root root   51080 Sep 20  2022 readlink
-  -rwxr-xr-x 1 root root   75720 Sep 20  2022 rm
-  -rwxr-xr-x 1 root root   51080 Sep 20  2022 rmdir
-  -rwxr-xr-x 1 root root   22308 Nov  2  2022 run-parts
-  -rwxr-xr-x 1 root root  133224 Jan  5  2023 sed
-  lrwxrwxrwx 1 root root       4 Jan  5  2023 sh -> dash
-  -rwxr-xr-x 1 root root   38760 Sep 20  2022 sleep
-  -rwxr-xr-x 1 root root   87976 Sep 20  2022 stty
-  -rwsr-xr-x 1 root root   83492 Mar 22  2023 su
-  -rwxr-xr-x 1 root root   38792 Sep 20  2022 sync
-  -rwxr-xr-x 1 root root  598456 Apr  6  2023 tar
-  -rwxr-xr-x 1 root root   13860 Nov  2  2022 tempfile
-  -rwxr-xr-x 1 root root  120776 Sep 20  2022 touch
-  -rwxr-xr-x 1 root root   34664 Sep 20  2022 true
-  -rwxr-xr-x 1 root root   17892 Mar 22  2023 ulockmgr_server
-  -rwsr-xr-x 1 root root   30236 Mar 22  2023 umount
-  -rwxr-xr-x 1 root root   38760 Sep 20  2022 uname
-  -rwxr-xr-x 2 root root    2346 Apr  9  2022 uncompress
-  -rwxr-xr-x 1 root root  162152 Sep 20  2022 vdir
-  -rwxr-xr-x 1 root root   71216 Mar 22  2023 wdctl
-  lrwxrwxrwx 1 root root       8 Dec 19  2022 ypdomainname -> hostname
-  -rwxr-xr-x 1 root root    1984 Apr  9  2022 zcat
-  -rwxr-xr-x 1 root root    1678 Apr  9  2022 zcmp
-  -rwxr-xr-x 1 root root    6460 Apr  9  2022 zdiff
-  -rwxr-xr-x 1 root root      29 Apr  9  2022 zegrep
-  -rwxr-xr-x 1 root root      29 Apr  9  2022 zfgrep
-  -rwxr-xr-x 1 root root    2081 Apr  9  2022 zforce
-  -rwxr-xr-x 1 root root    8103 Apr  9  2022 zgrep
-  -rwxr-xr-x 1 root root    2206 Apr  9  2022 zless
-  -rwxr-xr-x 1 root root    1842 Apr  9  2022 zmore
-  -rwxr-xr-x 1 root root    4577 Apr  9  2022 znew
-I: user script /srv/workspace/pbuilder/93529/tmp/hooks/D02_print_environment finished
+  -rwxr-xr-x 1 root root 1408088 Apr 24 11:24 bash
+  -rwxr-xr-x 3 root root   38404 Sep 19  2022 bunzip2
+  -rwxr-xr-x 3 root root   38404 Sep 19  2022 bzcat
+  lrwxrwxrwx 1 root root       6 Sep 19  2022 bzcmp -> bzdiff
+  -rwxr-xr-x 1 root root    2225 Sep 19  2022 bzdiff
+  lrwxrwxrwx 1 root root       6 Sep 19  2022 bzegrep -> bzgrep
+  -rwxr-xr-x 1 root root    4893 Nov 28  2021 bzexe
+  lrwxrwxrwx 1 root root       6 Sep 19  2022 bzfgrep -> bzgrep
+  -rwxr-xr-x 1 root root    3775 Sep 19  2022 bzgrep
+  -rwxr-xr-x 3 root root   38404 Sep 19  2022 bzip2
+  -rwxr-xr-x 1 root root   17892 Sep 19  2022 bzip2recover
+  lrwxrwxrwx 1 root root       6 Sep 19  2022 bzless -> bzmore
+  -rwxr-xr-x 1 root root    1297 Sep 19  2022 bzmore
+  -rwxr-xr-x 1 root root   42920 Sep 21  2022 cat
+  -rwxr-xr-x 1 root root   79816 Sep 21  2022 chgrp
+  -rwxr-xr-x 1 root root   67496 Sep 21  2022 chmod
+  -rwxr-xr-x 1 root root   79816 Sep 21  2022 chown
+  -rwxr-xr-x 1 root root  162024 Sep 21  2022 cp
+  -rwxr-xr-x 1 root root  136916 Jan  6 03:20 dash
+  -rwxr-xr-x 1 root root  137160 Sep 21  2022 date
+  -rwxr-xr-x 1 root root  100364 Sep 21  2022 dd
+  -rwxr-xr-x 1 root root  108940 Sep 21  2022 df
+  -rwxr-xr-x 1 root root  162152 Sep 21  2022 dir
+  -rwxr-xr-x 1 root root   87760 Mar 24 00:20 dmesg
+  lrwxrwxrwx 1 root root       8 Dec 20 03:33 dnsdomainname -> hostname
+  lrwxrwxrwx 1 root root       8 Dec 20 03:33 domainname -> hostname
+  -rwxr-xr-x 1 root root   38760 Sep 21  2022 echo
+  -rwxr-xr-x 1 root root      41 Jan 25 04:43 egrep
+  -rwxr-xr-x 1 root root   34664 Sep 21  2022 false
+  -rwxr-xr-x 1 root root      41 Jan 25 04:43 fgrep
+  -rwxr-xr-x 1 root root   84272 Mar 24 00:20 findmnt
+  -rwsr-xr-x 1 root root   30240 Mar 23 22:38 fusermount
+  -rwxr-xr-x 1 root root  218680 Jan 25 04:43 grep
+  -rwxr-xr-x 2 root root    2346 Apr 10  2022 gunzip
+  -rwxr-xr-x 1 root root    6447 Apr 10  2022 gzexe
+  -rwxr-xr-x 1 root root  100952 Apr 10  2022 gzip
+  -rwxr-xr-x 1 root root   21916 Dec 20 03:33 hostname
+  -rwxr-xr-x 1 root root   75756 Sep 21  2022 ln
+  -rwxr-xr-x 1 root root   55600 Mar 24 01:43 login
+  -rwxr-xr-x 1 root root  162152 Sep 21  2022 ls
+  -rwxr-xr-x 1 root root  214568 Mar 24 00:20 lsblk
+  -rwxr-xr-x 1 root root   96328 Sep 21  2022 mkdir
+  -rwxr-xr-x 1 root root   84008 Sep 21  2022 mknod
+  -rwxr-xr-x 1 root root   38792 Sep 21  2022 mktemp
+  -rwxr-xr-x 1 root root   63016 Mar 24 00:20 more
+  -rwsr-xr-x 1 root root   58912 Mar 24 00:20 mount
+  -rwxr-xr-x 1 root root   13856 Mar 24 00:20 mountpoint
+  -rwxr-xr-x 1 root root  157932 Sep 21  2022 mv
+  lrwxrwxrwx 1 root root       8 Dec 20 03:33 nisdomainname -> hostname
+  lrwxrwxrwx 1 root root      14 Apr  3 20:25 pidof -> /sbin/killall5
+  -rwxr-xr-x 1 root root   38792 Sep 21  2022 pwd
+  lrwxrwxrwx 1 root root       4 Apr 24 11:24 rbash -> bash
+  -rwxr-xr-x 1 root root   51080 Sep 21  2022 readlink
+  -rwxr-xr-x 1 root root   75720 Sep 21  2022 rm
+  -rwxr-xr-x 1 root root   51080 Sep 21  2022 rmdir
+  -rwxr-xr-x 1 root root   22308 Nov  3  2022 run-parts
+  -rwxr-xr-x 1 root root  133224 Jan  6 09:55 sed
+  lrwxrwxrwx 1 root root       9 Jun  8 23:20 sh -> /bin/bash
+  -rwxr-xr-x 1 root root   38760 Sep 21  2022 sleep
+  -rwxr-xr-x 1 root root   87976 Sep 21  2022 stty
+  -rwsr-xr-x 1 root root   83492 Mar 24 00:20 su
+  -rwxr-xr-x 1 root root   38792 Sep 21  2022 sync
+  -rwxr-xr-x 1 root root  598456 Apr  7 04:25 tar
+  -rwxr-xr-x 1 root root   13860 Nov  3  2022 tempfile
+  -rwxr-xr-x 1 root root  120776 Sep 21  2022 touch
+  -rwxr-xr-x 1 root root   34664 Sep 21  2022 true
+  -rwxr-xr-x 1 root root   17892 Mar 23 22:38 ulockmgr_server
+  -rwsr-xr-x 1 root root   30236 Mar 24 00:20 umount
+  -rwxr-xr-x 1 root root   38760 Sep 21  2022 uname
+  -rwxr-xr-x 2 root root    2346 Apr 10  2022 uncompress
+  -rwxr-xr-x 1 root root  162152 Sep 21  2022 vdir
+  -rwxr-xr-x 1 root root   71216 Mar 24 00:20 wdctl
+  lrwxrwxrwx 1 root root       8 Dec 20 03:33 ypdomainname -> hostname
+  -rwxr-xr-x 1 root root    1984 Apr 10  2022 zcat
+  -rwxr-xr-x 1 root root    1678 Apr 10  2022 zcmp
+  -rwxr-xr-x 1 root root    6460 Apr 10  2022 zdiff
+  -rwxr-xr-x 1 root root      29 Apr 10  2022 zegrep
+  -rwxr-xr-x 1 root root      29 Apr 10  2022 zfgrep
+  -rwxr-xr-x 1 root root    2081 Apr 10  2022 zforce
+  -rwxr-xr-x 1 root root    8103 Apr 10  2022 zgrep
+  -rwxr-xr-x 1 root root    2206 Apr 10  2022 zless
+  -rwxr-xr-x 1 root root    1842 Apr 10  2022 zmore
+  -rwxr-xr-x 1 root root    4577 Apr 10  2022 znew
+I: user script /srv/workspace/pbuilder/25569/tmp/hooks/D02_print_environment finished
  -> Attempting to satisfy build-dependencies
  -> Creating pbuilder-satisfydepends-dummy package
 Package: pbuilder-satisfydepends-dummy
@@ -275,7 +307,7 @@
 Get: 59 http://deb.debian.org/debian bookworm/main i386 golang-github-pkg-errors-dev all 0.9.1-2 [13.2 kB]
 Get: 60 http://deb.debian.org/debian bookworm/main i386 golang-github-smallstep-assert-dev all 0.0~git20200723.82e2b9b-4 [5480 B]
 Get: 61 http://deb.debian.org/debian bookworm/main i386 golang-gopkg-square-go-jose.v2-dev all 2.6.0-2 [266 kB]
-Fetched 106 MB in 1s (72.0 MB/s)
+Fetched 106 MB in 3s (37.9 MB/s)
 debconf: delaying package configuration, since apt-utils is not installed
 Selecting previously unselected package sensible-utils.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19599 files and directories currently installed.)
@@ -533,8 +565,19 @@
 Writing extended state information...
 Building tag database...
  -> Finished parsing the build-deps
+Reading package lists...
+Building dependency tree...
+Reading state information...
+usrmerge is already the newest version (35).
+0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
 I: Building the package
-I: Running cd /build/golang-step-crypto-0.24.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S  > ../golang-step-crypto_0.24.0-1_source.changes
+I: user script /srv/workspace/pbuilder/25569/tmp/hooks/A99_set_merged_usr starting
+Re-configuring usrmerge...
+removed '/etc/unsupported-skip-usrmerge-conversion'
+The system has been successfully converted.
+I: user script /srv/workspace/pbuilder/25569/tmp/hooks/A99_set_merged_usr finished
+hostname: Name or service not known
+I: Running cd /build/golang-step-crypto-0.24.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S  > ../golang-step-crypto_0.24.0-1_source.changes
 dpkg-buildpackage: info: source package golang-step-crypto
 dpkg-buildpackage: info: source version 0.24.0-1
 dpkg-buildpackage: info: source distribution unstable
@@ -552,180 +595,180 @@
    dh_autoreconf -O--builddirectory=_build -O--buildsystem=golang
    dh_auto_configure -O--builddirectory=_build -O--buildsystem=golang
    dh_auto_build -O--builddirectory=_build -O--buildsystem=golang
-	cd _build && go install -trimpath -v -p 16 go.step.sm/crypto/fingerprint go.step.sm/crypto/internal/bcrypt_pbkdf go.step.sm/crypto/internal/emoji go.step.sm/crypto/internal/step go.step.sm/crypto/internal/templates go.step.sm/crypto/internal/utils go.step.sm/crypto/jose go.step.sm/crypto/keyutil go.step.sm/crypto/minica go.step.sm/crypto/pemutil go.step.sm/crypto/randutil go.step.sm/crypto/sshutil go.step.sm/crypto/tlsutil go.step.sm/crypto/x25519 go.step.sm/crypto/x509util
+	cd _build && go install -trimpath -v -p 7 go.step.sm/crypto/fingerprint go.step.sm/crypto/internal/bcrypt_pbkdf go.step.sm/crypto/internal/emoji go.step.sm/crypto/internal/step go.step.sm/crypto/internal/templates go.step.sm/crypto/internal/utils go.step.sm/crypto/jose go.step.sm/crypto/keyutil go.step.sm/crypto/minica go.step.sm/crypto/pemutil go.step.sm/crypto/randutil go.step.sm/crypto/sshutil go.step.sm/crypto/tlsutil go.step.sm/crypto/x25519 go.step.sm/crypto/x509util
 internal/goarch
 internal/unsafeheader
-unicode/utf8
-internal/goexperiment
 internal/goos
-internal/itoa
-crypto/internal/subtle
-math/bits
-internal/race
-crypto/subtle
-crypto/internal/boring/sig
-internal/cpu
+internal/goexperiment
 runtime/internal/syscall
-runtime/internal/atomic
 runtime/internal/math
+internal/cpu
 runtime/internal/sys
-unicode
+internal/race
+runtime/internal/atomic
 internal/abi
 sync/atomic
+math/bits
+unicode/utf8
+internal/itoa
+unicode
+crypto/internal/subtle
+crypto/subtle
+math
+crypto/internal/boring/sig
 encoding
+internal/bytealg
 unicode/utf16
 vendor/golang.org/x/crypto/cryptobyte/asn1
 internal/nettrace
 golang.org/x/crypto/internal/alias
+golang.org/x/crypto/salsa20/salsa
 container/list
 vendor/golang.org/x/crypto/internal/subtle
-golang.org/x/crypto/salsa20/salsa
-math
-internal/bytealg
 runtime
-internal/reflectlite
 sync
+internal/reflectlite
 internal/testlog
-internal/singleflight
 math/rand
+internal/singleflight
 runtime/cgo
 errors
+io
+internal/oserror
 sort
 internal/safefilepath
-internal/oserror
-io
 path
-vendor/golang.org/x/net/dns/dnsmessage
 strconv
-crypto/internal/nistec/fiat
 syscall
+crypto/internal/nistec/fiat
+vendor/golang.org/x/net/dns/dnsmessage
 hash
 strings
 bytes
 crypto/internal/randutil
-hash/adler32
-hash/crc32
+go.step.sm/crypto/internal/emoji
 crypto
-crypto/rc4
-encoding/base32
-golang.org/x/crypto/blowfish
 reflect
-go.step.sm/crypto/internal/emoji
+golang.org/x/crypto/blowfish
+encoding/base32
 regexp/syntax
 github.com/huandu/xstrings
-vendor/golang.org/x/text/transform
-bufio
-net/http/internal/ascii
 html
-golang.org/x/text/transform
-internal/syscall/execenv
 internal/syscall/unix
 time
+internal/syscall/execenv
+hash/adler32
+bufio
+crypto/rc4
+hash/crc32
+vendor/golang.org/x/text/transform
+net/http/internal/ascii
+golang.org/x/text/transform
 regexp
-crypto/internal/nistec
+internal/poll
 context
 io/fs
-internal/poll
 encoding/binary
 internal/fmtsort
+crypto/internal/nistec
 os
 encoding/base64
-crypto/cipher
-golang.org/x/crypto/internal/poly1305
-filippo.io/edwards25519/field
 crypto/internal/edwards25519/field
-vendor/golang.org/x/crypto/internal/poly1305
+crypto/cipher
 crypto/md5
-golang.org/x/crypto/curve25519/internal/field
-vendor/golang.org/x/crypto/curve25519/internal/field
+filippo.io/edwards25519/field
 encoding/pem
-golang.org/x/crypto/curve25519
-golang.org/x/crypto/nacl/secretbox
-crypto/internal/edwards25519
 filippo.io/edwards25519
+crypto/internal/edwards25519
+golang.org/x/crypto/curve25519/internal/field
+golang.org/x/crypto/internal/poly1305
 crypto/internal/boring
 crypto/des
-vendor/golang.org/x/crypto/chacha20
-golang.org/x/crypto/chacha20
-crypto/hmac
 crypto/sha512
-crypto/sha1
 crypto/aes
+crypto/hmac
+crypto/sha1
 crypto/sha256
-internal/godebug
-path/filepath
 fmt
+go.step.sm/crypto/internal/bcrypt_pbkdf
+path/filepath
+internal/godebug
 golang.org/x/crypto/pbkdf2
 internal/intern
-vendor/golang.org/x/crypto/hkdf
-vendor/golang.org/x/crypto/chacha20poly1305
-go.step.sm/crypto/internal/bcrypt_pbkdf
-golang.org/x/crypto/ssh/internal/bcrypt_pbkdf
+golang.org/x/crypto/curve25519
+golang.org/x/crypto/chacha20
 net/netip
+golang.org/x/crypto/ssh/internal/bcrypt_pbkdf
 golang.org/x/crypto/scrypt
-net
+golang.org/x/crypto/nacl/secretbox
+vendor/golang.org/x/crypto/chacha20
+vendor/golang.org/x/crypto/internal/poly1305
+vendor/golang.org/x/crypto/curve25519/internal/field
+vendor/golang.org/x/crypto/hkdf
+vendor/golang.org/x/crypto/chacha20poly1305
 encoding/hex
 log
-net/url
 os/user
+encoding/json
+net/url
+math/big
+net
+go.step.sm/crypto/fingerprint
 database/sql/driver
+github.com/imdario/mergo
+github.com/mitchellh/reflectwalk
 text/template/parse
+github.com/mitchellh/copystructure
 github.com/pkg/errors
-github.com/mitchellh/reflectwalk
-vendor/golang.org/x/crypto/curve25519
-github.com/imdario/mergo
 compress/flate
-gopkg.in/square/go-jose.v2/json
-encoding/json
-math/big
-vendor/golang.org/x/text/unicode/norm
-vendor/golang.org/x/net/http2/hpack
 go.step.sm/crypto/internal/utils
-go.step.sm/crypto/fingerprint
-github.com/mitchellh/copystructure
-mime
-vendor/golang.org/x/text/unicode/bidi
-mime/quotedprintable
-net/http/internal
-golang.org/x/text/unicode/bidi
-golang.org/x/text/unicode/norm
+gopkg.in/square/go-jose.v2/json
+github.com/Masterminds/semver
 compress/gzip
-vendor/golang.org/x/text/secure/bidirule
+vendor/golang.org/x/crypto/curve25519
 text/template
-golang.org/x/text/secure/bidirule
-github.com/Masterminds/semver
-vendor/golang.org/x/net/idna
+vendor/golang.org/x/text/unicode/bidi
+vendor/golang.org/x/text/unicode/norm
 crypto/dsa
+crypto/elliptic
 crypto/internal/boring/bbig
-crypto/rand
 encoding/asn1
-github.com/shopspring/decimal
-crypto/elliptic
+crypto/rand
 crypto/ed25519
 crypto/rsa
-golang.org/x/crypto/bcrypt
 github.com/Masterminds/goutils
-go.step.sm/crypto/randutil
-golang.org/x/net/idna
+github.com/shopspring/decimal
 html/template
+vendor/golang.org/x/crypto/cryptobyte
+crypto/x509/pkix
+go.step.sm/crypto/internal/step
+golang.org/x/crypto/bcrypt
 go.step.sm/crypto/x25519
 golang.org/x/crypto/ed25519
-go.step.sm/crypto/internal/step
-crypto/x509/pkix
-vendor/golang.org/x/crypto/cryptobyte
-github.com/spf13/cast
+go.step.sm/crypto/randutil
+vendor/golang.org/x/text/secure/bidirule
+vendor/golang.org/x/net/http2/hpack
+vendor/golang.org/x/net/idna
+mime
 crypto/ecdsa
+mime/quotedprintable
+net/http/internal
+golang.org/x/text/unicode/bidi
 gopkg.in/square/go-jose.v2/cipher
-vendor/golang.org/x/net/http/httpproxy
+golang.org/x/text/unicode/norm
+github.com/spf13/cast
+golang.org/x/text/secure/bidirule
+golang.org/x/net/idna
+crypto/x509
 net/textproto
 github.com/google/uuid
-crypto/x509
+vendor/golang.org/x/net/http/httpproxy
 vendor/golang.org/x/net/http/httpguts
 mime/multipart
 github.com/Masterminds/sprig
 gopkg.in/square/go-jose.v2
-crypto/tls
 golang.org/x/crypto/ssh
+crypto/tls
 go.step.sm/crypto/internal/templates
 go.step.sm/crypto/x509util
 gopkg.in/square/go-jose.v2/cryptosigner
@@ -740,7 +783,7 @@
 go.step.sm/crypto/minica
 go.step.sm/crypto/jose
    dh_auto_test -O--builddirectory=_build -O--buildsystem=golang
-	cd _build && go test -vet=off -v -p 16 go.step.sm/crypto/fingerprint go.step.sm/crypto/internal/bcrypt_pbkdf go.step.sm/crypto/internal/emoji go.step.sm/crypto/internal/step go.step.sm/crypto/internal/templates go.step.sm/crypto/internal/utils go.step.sm/crypto/jose go.step.sm/crypto/keyutil go.step.sm/crypto/minica go.step.sm/crypto/pemutil go.step.sm/crypto/randutil go.step.sm/crypto/sshutil go.step.sm/crypto/tlsutil go.step.sm/crypto/x25519 go.step.sm/crypto/x509util
+	cd _build && go test -vet=off -v -p 7 go.step.sm/crypto/fingerprint go.step.sm/crypto/internal/bcrypt_pbkdf go.step.sm/crypto/internal/emoji go.step.sm/crypto/internal/step go.step.sm/crypto/internal/templates go.step.sm/crypto/internal/utils go.step.sm/crypto/jose go.step.sm/crypto/keyutil go.step.sm/crypto/minica go.step.sm/crypto/pemutil go.step.sm/crypto/randutil go.step.sm/crypto/sshutil go.step.sm/crypto/tlsutil go.step.sm/crypto/x25519 go.step.sm/crypto/x509util
 === RUN   TestNew
 === RUN   TestNew/sha256
 === RUN   TestNew/unavailable
@@ -768,13 +811,13 @@
     --- PASS: TestFingerprint/EmojiFingerprint (0.00s)
     --- PASS: TestFingerprint/Unknown (0.00s)
 PASS
-ok  	go.step.sm/crypto/fingerprint	0.013s
+ok  	go.step.sm/crypto/fingerprint	0.028s
 === RUN   TestKey
---- PASS: TestKey (0.28s)
+--- PASS: TestKey (0.73s)
 === RUN   TestBcryptHash
 --- PASS: TestBcryptHash (0.01s)
 PASS
-ok  	go.step.sm/crypto/internal/bcrypt_pbkdf	0.293s
+ok  	go.step.sm/crypto/internal/bcrypt_pbkdf	0.781s
 === RUN   TestEmoji
 === RUN   TestEmoji/ok
 === RUN   TestEmoji/empty
@@ -784,7 +827,7 @@
     --- PASS: TestEmoji/empty (0.00s)
     --- PASS: TestEmoji/nil (0.00s)
 PASS
-ok  	go.step.sm/crypto/internal/emoji	0.025s
+ok  	go.step.sm/crypto/internal/emoji	0.057s
 === RUN   TestPath
 === RUN   TestPath/default
 --- PASS: TestPath (0.00s)
@@ -807,7 +850,7 @@
     config_test.go:93: 
 --- SKIP: Test_getUserHomeDir (0.00s)
 PASS
-ok  	go.step.sm/crypto/internal/step	0.005s
+ok  	go.step.sm/crypto/internal/step	0.045s
 === RUN   Test_GetFuncMap_fail
 --- PASS: Test_GetFuncMap_fail (0.00s)
 === RUN   TestValidateTemplate
@@ -826,7 +869,7 @@
 === RUN   TestValidateTemplate/fail/template-parsing-missing-closing-brace
 === RUN   TestValidateTemplate/ok/json-extraneous-trailing-brace
 === RUN   TestValidateTemplate/ok/json-missing-trailing-comma
---- PASS: TestValidateTemplate (0.00s)
+--- PASS: TestValidateTemplate (0.01s)
     --- PASS: TestValidateTemplate/ok/default-leaf-template (0.00s)
     --- PASS: TestValidateTemplate/ok/default-x509-iid-template (0.00s)
     --- PASS: TestValidateTemplate/ok/default-x509-adobe (0.00s)
@@ -853,7 +896,7 @@
     --- PASS: TestValidateTemplateData/ok_nil (0.00s)
     --- PASS: TestValidateTemplateData/fail/missing-comma-trailing-comma (0.00s)
 PASS
-ok  	go.step.sm/crypto/internal/templates	0.008s
+ok  	go.step.sm/crypto/internal/templates	0.062s
 === RUN   TestReadFile
 === RUN   TestReadFile/ok
 === RUN   TestReadFile/missing
@@ -881,7 +924,7 @@
     --- PASS: Test_maybeUnwrap/wrapped (0.00s)
     --- PASS: Test_maybeUnwrap/not_wrapped (0.00s)
 PASS
-ok  	go.step.sm/crypto/internal/utils	0.004s
+ok  	go.step.sm/crypto/internal/utils	0.040s
 === RUN   TestEncrypt
 === RUN   TestEncrypt/ok
 === RUN   TestEncrypt/ok_WithPasswordPrompter
@@ -892,10 +935,10 @@
 === RUN   TestEncrypt/fail_no_passowrd
 === RUN   TestEncrypt/fail_encrypt
 === RUN   TestEncrypt/fail_salt
---- PASS: TestEncrypt (0.89s)
-    --- PASS: TestEncrypt/ok (0.29s)
-    --- PASS: TestEncrypt/ok_WithPasswordPrompter (0.29s)
-    --- PASS: TestEncrypt/ok_with_PromptPassword (0.29s)
+--- PASS: TestEncrypt (2.83s)
+    --- PASS: TestEncrypt/ok (0.94s)
+    --- PASS: TestEncrypt/ok_WithPasswordPrompter (0.93s)
+    --- PASS: TestEncrypt/ok_with_PromptPassword (0.93s)
     --- PASS: TestEncrypt/fail_apply (0.00s)
     --- PASS: TestEncrypt/fail_WithPasswordPrompter (0.00s)
     --- PASS: TestEncrypt/fail_with_PromptPassword (0.00s)
@@ -907,8 +950,8 @@
 === RUN   TestEncryptJWK/fail_marshal
 === RUN   TestEncryptJWK/fail_encrypt
 === RUN   TestEncryptJWK/fail_salt
---- PASS: TestEncryptJWK (0.30s)
-    --- PASS: TestEncryptJWK/ok (0.29s)
+--- PASS: TestEncryptJWK (1.05s)
+    --- PASS: TestEncryptJWK/ok (1.05s)
     --- PASS: TestEncryptJWK/fail_marshal (0.00s)
     --- PASS: TestEncryptJWK/fail_encrypt (0.00s)
     --- PASS: TestEncryptJWK/fail_salt (0.00s)
@@ -930,18 +973,18 @@
 === RUN   TestDecrypt/fail_apply_WithPasswordPrompter
 === RUN   TestDecrypt/fail_PasswordPrompter#01
 === RUN   TestDecrypt/fail_WithFilename_and_PasswordPrompter
---- PASS: TestDecrypt (2.20s)
+--- PASS: TestDecrypt (6.38s)
     --- PASS: TestDecrypt/ok_not_encrypted (0.00s)
-    --- PASS: TestDecrypt/ok_WithPassword (0.15s)
-    --- PASS: TestDecrypt/ok_WithPasswordFile (0.15s)
-    --- PASS: TestDecrypt/ok_WithPasswordPrompter (0.15s)
-    --- PASS: TestDecrypt/ok_PasswordPrompter (0.15s)
-    --- PASS: TestDecrypt/ok_WithFilename_and_PasswordPrompter (0.15s)
-    --- PASS: TestDecrypt/fail_bad_data (0.15s)
-    --- PASS: TestDecrypt/fail_WithPassword (0.15s)
-    --- PASS: TestDecrypt/fail_WithPasswordFile (0.15s)
-    --- PASS: TestDecrypt/fail_WithPasswordPrompter (0.44s)
-    --- PASS: TestDecrypt/fail_PasswordPrompter (0.44s)
+    --- PASS: TestDecrypt/ok_WithPassword (0.24s)
+    --- PASS: TestDecrypt/ok_WithPasswordFile (0.35s)
+    --- PASS: TestDecrypt/ok_WithPasswordPrompter (0.24s)
+    --- PASS: TestDecrypt/ok_PasswordPrompter (0.34s)
+    --- PASS: TestDecrypt/ok_WithFilename_and_PasswordPrompter (0.47s)
+    --- PASS: TestDecrypt/fail_bad_data (0.49s)
+    --- PASS: TestDecrypt/fail_WithPassword (0.49s)
+    --- PASS: TestDecrypt/fail_WithPasswordFile (0.47s)
+    --- PASS: TestDecrypt/fail_WithPasswordPrompter (1.43s)
+    --- PASS: TestDecrypt/fail_PasswordPrompter (1.41s)
     --- PASS: TestDecrypt/fail_apply_WithPassword (0.00s)
     --- PASS: TestDecrypt/fail_apply_WithPasswordPrompter (0.00s)
     --- PASS: TestDecrypt/fail_PasswordPrompter#01 (0.00s)
@@ -973,122 +1016,122 @@
 === RUN   TestGenerateJWKFromPEMSubtle/single_key_usage_with_subtle
 === RUN   TestGenerateJWKFromPEMSubtle/multiple_key_usage_without_subtle
 === RUN   TestGenerateJWKFromPEMSubtle/multiple_key_usage_with_subtle
---- PASS: TestGenerateJWKFromPEMSubtle (0.02s)
-    --- PASS: TestGenerateJWKFromPEMSubtle/single_key_usage_without_subtle (0.00s)
-    --- PASS: TestGenerateJWKFromPEMSubtle/single_key_usage_with_subtle (0.00s)
-    --- PASS: TestGenerateJWKFromPEMSubtle/multiple_key_usage_without_subtle (0.00s)
-    --- PASS: TestGenerateJWKFromPEMSubtle/multiple_key_usage_with_subtle (0.00s)
+--- PASS: TestGenerateJWKFromPEMSubtle (0.07s)
+    --- PASS: TestGenerateJWKFromPEMSubtle/single_key_usage_without_subtle (0.02s)
+    --- PASS: TestGenerateJWKFromPEMSubtle/single_key_usage_with_subtle (0.02s)
+    --- PASS: TestGenerateJWKFromPEMSubtle/multiple_key_usage_without_subtle (0.02s)
+    --- PASS: TestGenerateJWKFromPEMSubtle/multiple_key_usage_with_subtle (0.02s)
 === RUN   TestGenerateDefaultKeyPair
 === RUN   TestGenerateDefaultKeyPair/ok
 === RUN   TestGenerateDefaultKeyPair/failEmptyPassword
 === RUN   TestGenerateDefaultKeyPair/failNilPassword
 === RUN   TestGenerateDefaultKeyPair/failEOF
---- PASS: TestGenerateDefaultKeyPair (0.30s)
-    --- PASS: TestGenerateDefaultKeyPair/ok (0.15s)
+--- PASS: TestGenerateDefaultKeyPair (0.93s)
+    --- PASS: TestGenerateDefaultKeyPair/ok (0.47s)
     --- PASS: TestGenerateDefaultKeyPair/failEmptyPassword (0.00s)
     --- PASS: TestGenerateDefaultKeyPair/failNilPassword (0.00s)
     --- PASS: TestGenerateDefaultKeyPair/failEOF (0.00s)
 === RUN   TestReadKey
+=== RUN   TestReadKey/testdata/p256.enc.priv.json
+=== RUN   TestReadKey/testdata/rsa.priv.json
+=== RUN   TestReadKey/testdata/oct.json
 === RUN   TestReadKey/testdata/oct.enc.json
 === RUN   TestReadKey/testdata/okp.pub.json
+=== RUN   TestReadKey/testdata/okp.enc.priv.json
 === RUN   TestReadKey/testdata/p256.pub.json
-=== RUN   TestReadKey/testdata/rsa.pub.json
-=== RUN   TestReadKey/testdata/rsa.enc.priv.json
-=== RUN   TestReadKey/testdata/rsa.priv.json
-=== RUN   TestReadKey/testdata/oct.json
 === RUN   TestReadKey/testdata/okp.priv.json
-=== RUN   TestReadKey/testdata/okp.enc.priv.json
 === RUN   TestReadKey/testdata/p256.priv.json
-=== RUN   TestReadKey/testdata/p256.enc.priv.json
-=== RUN   TestReadKey/../pemutil/testdata/openssl.rsa2048.enc.pem
-=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.ed25519.pem
-=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.p384.pub.pem
-=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa2048.pem
-=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.ed25519.pub.pem
-=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.ed25519.enc.pem
-=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa2048.enc.pem
-=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa4096.pub.pem
+=== RUN   TestReadKey/testdata/rsa.pub.json
+=== RUN   TestReadKey/testdata/rsa.enc.priv.json
 === RUN   TestReadKey/../pemutil/testdata/openssl.p256.enc.pem
-=== RUN   TestReadKey/../pemutil/testdata/openssl.p521.enc.pem
-=== RUN   TestReadKey/../pemutil/testdata/openssl.rsa1024.pub.pem
+=== RUN   TestReadKey/../pemutil/testdata/openssl.rsa1024.pem
 === RUN   TestReadKey/../pemutil/testdata/openssl.rsa2048.pub.pem
 === RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.p256.enc.pem
-=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.p521.pem
-=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa2048.pub.pem
+=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.p384.pub.pem
+=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa2048.pem
 === RUN   TestReadKey/../pemutil/testdata/openssl.p256.pub.pem
-=== RUN   TestReadKey/../pemutil/testdata/openssl.rsa1024.pem
-=== RUN   TestReadKey/../pemutil/testdata/openssl.rsa2048.pem
-=== RUN   TestReadKey/../pemutil/testdata/openssl.p521.pub.pem
-=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.p256.pem
-=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.p256.pub.pem
+=== RUN   TestReadKey/../pemutil/testdata/openssl.p384.pem
 === RUN   TestReadKey/../pemutil/testdata/openssl.p384.pub.pem
 === RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.p384.pem
-=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa4096.pem
-=== RUN   TestReadKey/../pemutil/testdata/openssl.rsa1024.enc.pem
-=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.p384.enc.pem
 === RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.p521.pub.pem
+=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.p256.pub.pem
+=== RUN   TestReadKey/../pemutil/testdata/openssl.rsa1024.enc.pem
+=== RUN   TestReadKey/../pemutil/testdata/openssl.rsa2048.pem
+=== RUN   TestReadKey/../pemutil/testdata/openssl.rsa2048.enc.pem
+=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.ed25519.pub.pem
+=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.ed25519.enc.pem
 === RUN   TestReadKey/../pemutil/testdata/openssl.p256.pem
-=== RUN   TestReadKey/../pemutil/testdata/openssl.p384.pem
 === RUN   TestReadKey/../pemutil/testdata/openssl.p384.enc.pem
+=== RUN   TestReadKey/../pemutil/testdata/openssl.p521.enc.pem
+=== RUN   TestReadKey/../pemutil/testdata/openssl.rsa1024.pub.pem
+=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.p256.pem
 === RUN   TestReadKey/../pemutil/testdata/openssl.p521.pem
+=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.ed25519.pem
+=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.p384.enc.pem
+=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa2048.enc.pem
+=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa4096.pub.pem
+=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.p521.pem
 === RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.p521.enc.pem
---- PASS: TestReadKey (0.86s)
-    --- PASS: TestReadKey/testdata/oct.enc.json (0.15s)
-    --- PASS: TestReadKey/testdata/okp.pub.json (0.00s)
-    --- PASS: TestReadKey/testdata/p256.pub.json (0.00s)
-    --- PASS: TestReadKey/testdata/rsa.pub.json (0.00s)
-    --- PASS: TestReadKey/testdata/rsa.enc.priv.json (0.15s)
+=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa2048.pub.pem
+=== RUN   TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa4096.pem
+=== RUN   TestReadKey/../pemutil/testdata/openssl.p521.pub.pem
+--- PASS: TestReadKey (3.00s)
+    --- PASS: TestReadKey/testdata/p256.enc.priv.json (0.46s)
     --- PASS: TestReadKey/testdata/rsa.priv.json (0.00s)
     --- PASS: TestReadKey/testdata/oct.json (0.00s)
+    --- PASS: TestReadKey/testdata/oct.enc.json (0.53s)
+    --- PASS: TestReadKey/testdata/okp.pub.json (0.00s)
+    --- PASS: TestReadKey/testdata/okp.enc.priv.json (0.50s)
+    --- PASS: TestReadKey/testdata/p256.pub.json (0.00s)
     --- PASS: TestReadKey/testdata/okp.priv.json (0.00s)
-    --- PASS: TestReadKey/testdata/okp.enc.priv.json (0.15s)
     --- PASS: TestReadKey/testdata/p256.priv.json (0.00s)
-    --- PASS: TestReadKey/testdata/p256.enc.priv.json (0.15s)
-    --- PASS: TestReadKey/../pemutil/testdata/openssl.rsa2048.enc.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.ed25519.pem (0.02s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p384.pub.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa2048.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.ed25519.pub.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.ed25519.enc.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa2048.enc.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa4096.pub.pem (0.00s)
+    --- PASS: TestReadKey/testdata/rsa.pub.json (0.00s)
+    --- PASS: TestReadKey/testdata/rsa.enc.priv.json (0.47s)
     --- PASS: TestReadKey/../pemutil/testdata/openssl.p256.enc.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/openssl.p521.enc.pem (0.14s)
-    --- PASS: TestReadKey/../pemutil/testdata/openssl.rsa1024.pub.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/openssl.rsa1024.pem (0.00s)
     --- PASS: TestReadKey/../pemutil/testdata/openssl.rsa2048.pub.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p256.enc.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p521.pem (0.01s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa2048.pub.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p256.enc.pem (0.02s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p384.pub.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa2048.pem (0.00s)
     --- PASS: TestReadKey/../pemutil/testdata/openssl.p256.pub.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/openssl.rsa1024.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/openssl.rsa2048.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/openssl.p521.pub.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p256.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p256.pub.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/openssl.p384.pem (0.12s)
     --- PASS: TestReadKey/../pemutil/testdata/openssl.p384.pub.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p384.pem (0.03s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa4096.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/openssl.rsa1024.enc.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p384.enc.pem (0.01s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p384.pem (0.01s)
     --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p521.pub.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p256.pub.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/openssl.rsa1024.enc.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/openssl.rsa2048.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/openssl.rsa2048.enc.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.ed25519.pub.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.ed25519.enc.pem (0.09s)
     --- PASS: TestReadKey/../pemutil/testdata/openssl.p256.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/openssl.p384.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/openssl.p384.enc.pem (0.00s)
-    --- PASS: TestReadKey/../pemutil/testdata/openssl.p521.pem (0.01s)
-    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p521.enc.pem (0.02s)
+    --- PASS: TestReadKey/../pemutil/testdata/openssl.p384.enc.pem (0.02s)
+    --- PASS: TestReadKey/../pemutil/testdata/openssl.p521.enc.pem (0.56s)
+    --- PASS: TestReadKey/../pemutil/testdata/openssl.rsa1024.pub.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p256.pem (0.01s)
+    --- PASS: TestReadKey/../pemutil/testdata/openssl.p521.pem (0.03s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.ed25519.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p384.enc.pem (0.03s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa2048.enc.pem (0.01s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa4096.pub.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p521.pem (0.04s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.p521.enc.pem (0.08s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa2048.pub.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/pkcs8/openssl.rsa4096.pem (0.00s)
+    --- PASS: TestReadKey/../pemutil/testdata/openssl.p521.pub.pem (0.00s)
 === RUN   TestReadKey_https
 === RUN   TestReadKey_https/ok
 === RUN   TestReadKey_https/failWithKid
 === RUN   TestReadKey_https/failEmpty
 === RUN   TestReadKey_https/failNotFound
 === RUN   TestReadKey_https/failClient
-2024/07/10 03:42:20 http: TLS handshake error from 127.0.0.1:40554: remote error: tls: bad certificate
---- PASS: TestReadKey_https (0.04s)
-    --- PASS: TestReadKey_https/ok (0.02s)
+2023/06/08 23:22:48 http: TLS handshake error from 127.0.0.1:48220: read tcp 127.0.0.1:42565->127.0.0.1:48220: use of closed network connection
+--- PASS: TestReadKey_https (0.14s)
+    --- PASS: TestReadKey_https/ok (0.07s)
     --- PASS: TestReadKey_https/failWithKid (0.00s)
     --- PASS: TestReadKey_https/failEmpty (0.00s)
-    --- PASS: TestReadKey_https/failNotFound (0.00s)
-    --- PASS: TestReadKey_https/failClient (0.01s)
+    --- PASS: TestReadKey_https/failNotFound (0.01s)
+    --- PASS: TestReadKey_https/failClient (0.06s)
 === RUN   TestReadKeyPasswordFile
 --- PASS: TestReadKeyPasswordFile (0.00s)
 === RUN   TestParseKey
@@ -1096,9 +1139,9 @@
 === RUN   TestParseKeyPemutilPromptPassword
 === RUN   TestParseKeyPemutilPromptPassword/ok
 === RUN   TestParseKeyPemutilPromptPassword/fail
---- PASS: TestParseKeyPemutilPromptPassword (0.01s)
-    --- PASS: TestParseKeyPemutilPromptPassword/ok (0.00s)
-    --- PASS: TestParseKeyPemutilPromptPassword/fail (0.00s)
+--- PASS: TestParseKeyPemutilPromptPassword (0.03s)
+    --- PASS: TestParseKeyPemutilPromptPassword/ok (0.02s)
+    --- PASS: TestParseKeyPemutilPromptPassword/fail (0.01s)
 === RUN   TestReadKeySet
 --- PASS: TestReadKeySet (0.00s)
 === RUN   TestReadKeySet_https
@@ -1107,15 +1150,15 @@
 === RUN   TestReadKeySet_https/failNotFound
 === RUN   TestReadKeySet_https/failClient
 === RUN   TestReadKeySet_https/failNoOptions
-2024/07/10 03:42:20 http: TLS handshake error from 127.0.0.1:51992: remote error: tls: bad certificate
---- PASS: TestReadKeySet_https (0.05s)
-    --- PASS: TestReadKeySet_https/ok (0.02s)
+2023/06/08 23:22:48 http: TLS handshake error from 127.0.0.1:57394: remote error: tls: bad certificate
+--- PASS: TestReadKeySet_https (0.17s)
+    --- PASS: TestReadKeySet_https/ok (0.05s)
     --- PASS: TestReadKeySet_https/failEmpty (0.00s)
-    --- PASS: TestReadKeySet_https/failNotFound (0.00s)
-    --- PASS: TestReadKeySet_https/failClient (0.02s)
-    --- PASS: TestReadKeySet_https/failNoOptions (0.02s)
+    --- PASS: TestReadKeySet_https/failNotFound (0.01s)
+    --- PASS: TestReadKeySet_https/failClient (0.04s)
+    --- PASS: TestReadKeySet_https/failNoOptions (0.06s)
 === RUN   TestGuessJWKAlgorithm
---- PASS: TestGuessJWKAlgorithm (2.30s)
+--- PASS: TestGuessJWKAlgorithm (6.62s)
 === RUN   TestParseKeySet
 === RUN   TestParseKeySet/ok
 === RUN   TestParseKeySet/okEncryptedJSON
@@ -1128,13 +1171,13 @@
 === RUN   TestParseKeySet/failEmpty
 === RUN   TestParseKeySet/failDuplicated
 === RUN   TestParseKeySet/failWithAlg
---- PASS: TestParseKeySet (0.59s)
+--- PASS: TestParseKeySet (2.82s)
     --- PASS: TestParseKeySet/ok (0.00s)
-    --- PASS: TestParseKeySet/okEncryptedJSON (0.15s)
-    --- PASS: TestParseKeySet/okEncryptedCompact (0.15s)
+    --- PASS: TestParseKeySet/okEncryptedJSON (0.72s)
+    --- PASS: TestParseKeySet/okEncryptedCompact (0.71s)
     --- PASS: TestParseKeySet/okWithAlgSubtle (0.00s)
     --- PASS: TestParseKeySet/failOptions (0.00s)
-    --- PASS: TestParseKeySet/failDecrypt (0.15s)
+    --- PASS: TestParseKeySet/failDecrypt (0.71s)
     --- PASS: TestParseKeySet/failNoOptions (0.00s)
     --- PASS: TestParseKeySet/failBadData (0.00s)
     --- PASS: TestParseKeySet/failEmpty (0.00s)
@@ -1151,7 +1194,7 @@
 === RUN   Test_guessKeyType/encryptedAlgHS256
 === RUN   Test_guessKeyType/jwkAlgHS384
 === RUN   Test_guessKeyType/bloblAlgHS512
---- PASS: Test_guessKeyType (4.53s)
+--- PASS: Test_guessKeyType (15.94s)
     --- PASS: Test_guessKeyType/ec (0.00s)
     --- PASS: Test_guessKeyType/rsaKey (0.00s)
     --- PASS: Test_guessKeyType/rsaPSSKey (0.00s)
@@ -1172,7 +1215,7 @@
 === RUN   Test_guessSignatureAlgorithm/XEdDSA
 === RUN   Test_guessSignatureAlgorithm/XEdDSA_with_X25519Signer
 === RUN   Test_guessSignatureAlgorithm/empty
---- PASS: Test_guessSignatureAlgorithm (1.23s)
+--- PASS: Test_guessSignatureAlgorithm (6.96s)
     --- PASS: Test_guessSignatureAlgorithm/byte (0.00s)
     --- PASS: Test_guessSignatureAlgorithm/ES256 (0.00s)
     --- PASS: Test_guessSignatureAlgorithm/ES384 (0.00s)
@@ -1190,7 +1233,7 @@
 === RUN   TestIsSymmetric/RSA#01
 === RUN   TestIsSymmetric/OKP
 === RUN   TestIsSymmetric/oct
---- PASS: TestIsSymmetric (2.53s)
+--- PASS: TestIsSymmetric (8.78s)
     --- PASS: TestIsSymmetric/EC (0.00s)
     --- PASS: TestIsSymmetric/RSA (0.00s)
     --- PASS: TestIsSymmetric/RSA#01 (0.00s)
@@ -1202,7 +1245,7 @@
 === RUN   TestIsAsymmetric/RSA#01
 === RUN   TestIsAsymmetric/OKP
 === RUN   TestIsAsymmetric/oct
---- PASS: TestIsAsymmetric (2.30s)
+--- PASS: TestIsAsymmetric (6.84s)
     --- PASS: TestIsAsymmetric/EC (0.00s)
     --- PASS: TestIsAsymmetric/RSA (0.00s)
     --- PASS: TestIsAsymmetric/RSA#01 (0.00s)
@@ -1225,31 +1268,31 @@
 === RUN   TestSignVerify/ed
 === RUN   TestSignVerify/x25519
 === RUN   TestSignVerify/fail_P224
---- PASS: TestSignVerify (1.41s)
-    --- PASS: TestSignVerify/byte (0.00s)
-    --- PASS: TestSignVerify/P256 (0.00s)
-    --- PASS: TestSignVerify/P384 (0.01s)
-    --- PASS: TestSignVerify/P521 (0.05s)
-    --- PASS: TestSignVerify/rsa2048 (0.01s)
-    --- PASS: TestSignVerify/ed (0.01s)
-    --- PASS: TestSignVerify/x25519 (0.03s)
+--- PASS: TestSignVerify (3.70s)
+    --- PASS: TestSignVerify/byte (0.01s)
+    --- PASS: TestSignVerify/P256 (0.01s)
+    --- PASS: TestSignVerify/P384 (0.05s)
+    --- PASS: TestSignVerify/P521 (0.20s)
+    --- PASS: TestSignVerify/rsa2048 (0.03s)
+    --- PASS: TestSignVerify/ed (0.03s)
+    --- PASS: TestSignVerify/x25519 (0.11s)
     --- PASS: TestSignVerify/fail_P224 (0.00s)
 === RUN   Test_validateX5
-=== RUN   Test_validateX5/ok
 === RUN   Test_validateX5/fail/empty-certs
 === RUN   Test_validateX5/fail/bad-key
 === RUN   Test_validateX5/fail/cert-not-approved-for-digital-signature
+=== RUN   Test_validateX5/ok
 --- PASS: Test_validateX5 (0.00s)
-    --- PASS: Test_validateX5/ok (0.00s)
     --- PASS: Test_validateX5/fail/empty-certs (0.00s)
     --- PASS: Test_validateX5/fail/bad-key (0.00s)
     --- PASS: Test_validateX5/fail/cert-not-approved-for-digital-signature (0.00s)
+    --- PASS: Test_validateX5/ok (0.00s)
 === RUN   TestValidateX5T
-=== RUN   TestValidateX5T/ok
 === RUN   TestValidateX5T/fail/validateX5-error
+=== RUN   TestValidateX5T/ok
 --- PASS: TestValidateX5T (0.00s)
-    --- PASS: TestValidateX5T/ok (0.00s)
     --- PASS: TestValidateX5T/fail/validateX5-error (0.00s)
+    --- PASS: TestValidateX5T/ok (0.00s)
 === RUN   TestValidateX5C
 === RUN   TestValidateX5C/fail/validateX5-error
 === RUN   TestValidateX5C/ok
@@ -1272,10 +1315,10 @@
 === RUN   TestX25519Signer_SignVerify/ok_random
 === RUN   TestX25519Signer_SignVerify/ok_ed25519
 === RUN   TestX25519Signer_SignVerify/fail_algorithm
---- PASS: TestX25519Signer_SignVerify (0.01s)
-    --- PASS: TestX25519Signer_SignVerify/ok (0.00s)
-    --- PASS: TestX25519Signer_SignVerify/ok_empty (0.00s)
-    --- PASS: TestX25519Signer_SignVerify/ok_random (0.00s)
+--- PASS: TestX25519Signer_SignVerify (0.03s)
+    --- PASS: TestX25519Signer_SignVerify/ok (0.01s)
+    --- PASS: TestX25519Signer_SignVerify/ok_empty (0.01s)
+    --- PASS: TestX25519Signer_SignVerify/ok_random (0.01s)
     --- PASS: TestX25519Signer_SignVerify/ok_ed25519 (0.00s)
     --- PASS: TestX25519Signer_SignVerify/fail_algorithm (0.00s)
 === RUN   TestX25519Signer_Public
@@ -1307,7 +1350,6 @@
 === PAUSE TestGenerateJWK/EC
 === RUN   TestGenerateJWK/EC#01
 === PAUSE TestGenerateJWK/EC#01
-=== CONT  TestParseKey
 === RUN   TestGenerateJWK/EC#02
 === PAUSE TestGenerateJWK/EC#02
 === RUN   TestGenerateJWK/EC#03
@@ -1369,37 +1411,34 @@
 === RUN   TestGenerateJWK/fail
 === PAUSE TestGenerateJWK/fail
 === CONT  TestGenerateJWK/EC
-=== CONT  TestGenerateJWK/OKP#01
-=== CONT  TestGenerateJWK/oct#06
+=== CONT  TestGenerateJWK/fail
+=== CONT  TestGenerateJWK/oct#11
 === CONT  TestGenerateJWK/oct#10
 === CONT  TestGenerateJWK/oct#09
-=== CONT  TestGenerateJWK/oct#11
-=== CONT  TestGenerateJWK/fail
 === CONT  TestGenerateJWK/oct#08
+=== CONT  TestGenerateJWK/oct#07
+=== CONT  TestGenerateJWK/oct#06
 === CONT  TestGenerateJWK/oct#05
-=== CONT  TestGenerateJWK/RSA#01
-=== CONT  TestGenerateJWK/oct#01
-=== CONT  TestGenerateJWK/EC#07
-=== CONT  TestGenerateJWK/EC#06
+=== CONT  TestGenerateJWK/oct#04
 === CONT  TestGenerateJWK/oct#03
-=== CONT  TestGenerateJWK/RSA#03
-=== CONT  TestGenerateJWK/oct#07
-=== CONT  TestGenerateJWK/RSA#04
-=== CONT  TestGenerateJWK/RSA#02
+=== CONT  TestGenerateJWK/oct#02
+=== CONT  TestGenerateJWK/oct#01
 === CONT  TestGenerateJWK/oct
-=== CONT  TestGenerateJWK/EC#03
+=== CONT  TestGenerateJWK/OKP#02
+=== CONT  TestGenerateJWK/OKP#01
+=== CONT  TestGenerateJWK/RSA
+=== CONT  TestGenerateJWK/RSA#01
 === CONT  TestGenerateJWK/RSA#05
-=== CONT  TestGenerateJWK/EC#04
+=== CONT  TestParseKey
 === CONT  TestGenerateJWK/OKP
-=== CONT  TestGenerateJWK/OKP#02
+=== CONT  TestGenerateJWK/EC#07
 === CONT  TestGenerateJWK/RSA#07
-=== CONT  TestGenerateJWK/EC#02
-=== CONT  TestGenerateJWK/RSA#06
-=== CONT  TestGenerateJWK/EC#01
-=== CONT  TestGenerateJWK/oct#04
+=== CONT  TestGenerateJWK/EC#06
 === CONT  TestGenerateJWK/EC#05
-=== CONT  TestGenerateJWK/RSA
-=== CONT  TestGenerateJWK/oct#02
+=== CONT  TestGenerateJWK/EC#04
+=== CONT  TestGenerateJWK/RSA#04
+=== CONT  TestGenerateJWK/EC#03
+=== CONT  TestGenerateJWK/RSA#06
 === RUN   TestGenerateJWKFromPEM/p256
 === PAUSE TestGenerateJWKFromPEM/p256
 === RUN   TestGenerateJWKFromPEM/p384
@@ -1430,37 +1469,78 @@
 === PAUSE TestGenerateJWKFromPEM/fail_missing
 === RUN   TestGenerateJWKFromPEM/fail_no_subtle
 === PAUSE TestGenerateJWKFromPEM/fail_no_subtle
+=== CONT  TestGenerateJWK/RSA#03
+=== CONT  TestGenerateJWK/EC#02
+=== CONT  TestGenerateJWK/EC#01
 === CONT  TestGenerateJWKFromPEM/p256
-=== CONT  TestGenerateJWKFromPEM/ed25519_pub
-=== CONT  TestGenerateJWKFromPEM/rsa
-=== CONT  TestGenerateJWKFromPEM/p384_pub
+=== CONT  TestGenerateJWK/RSA#02
 === CONT  TestGenerateJWKFromPEM/fail_no_subtle
-=== CONT  TestGenerateJWKFromPEM/p521_pub
 === CONT  TestGenerateJWKFromPEM/fail_missing
 === CONT  TestGenerateJWKFromPEM/p256_cert
 === CONT  TestGenerateJWKFromPEM/ed25519_cert
 === CONT  TestGenerateJWKFromPEM/rsa_cert
 === CONT  TestGenerateJWKFromPEM/rsa_pub
+=== CONT  TestGenerateJWKFromPEM/ed25519_pub
+=== CONT  TestGenerateJWKFromPEM/p521_pub
+=== CONT  TestGenerateJWKFromPEM/p384_pub
 === CONT  TestGenerateJWKFromPEM/p256_pub
-=== CONT  TestGenerateJWKFromPEM/p521
+=== CONT  TestGenerateJWKFromPEM/rsa
 === CONT  TestGenerateJWKFromPEM/ed25519
+=== CONT  TestGenerateJWKFromPEM/p521
 === CONT  TestGenerateJWKFromPEM/p384
---- PASS: TestGenerateJWKFromPEM (0.03s)
-    --- PASS: TestGenerateJWKFromPEM/ed25519_pub (0.00s)
-    --- PASS: TestGenerateJWKFromPEM/p384_pub (0.00s)
+--- PASS: TestGenerateJWKFromPEM (0.07s)
+    --- PASS: TestGenerateJWKFromPEM/p256 (0.00s)
     --- PASS: TestGenerateJWKFromPEM/fail_no_subtle (0.00s)
     --- PASS: TestGenerateJWKFromPEM/fail_missing (0.00s)
     --- PASS: TestGenerateJWKFromPEM/p256_cert (0.00s)
     --- PASS: TestGenerateJWKFromPEM/ed25519_cert (0.00s)
     --- PASS: TestGenerateJWKFromPEM/rsa_cert (0.00s)
     --- PASS: TestGenerateJWKFromPEM/rsa_pub (0.00s)
-    --- PASS: TestGenerateJWKFromPEM/p256_pub (0.00s)
-    --- PASS: TestGenerateJWKFromPEM/p256 (0.00s)
+    --- PASS: TestGenerateJWKFromPEM/ed25519_pub (0.00s)
     --- PASS: TestGenerateJWKFromPEM/p521_pub (0.00s)
+    --- PASS: TestGenerateJWKFromPEM/p384_pub (0.00s)
+    --- PASS: TestGenerateJWKFromPEM/p256_pub (0.00s)
     --- PASS: TestGenerateJWKFromPEM/rsa (0.00s)
     --- PASS: TestGenerateJWKFromPEM/ed25519 (0.00s)
-    --- PASS: TestGenerateJWKFromPEM/p384 (0.00s)
-    --- PASS: TestGenerateJWKFromPEM/p521 (0.02s)
+    --- PASS: TestGenerateJWKFromPEM/p521 (0.04s)
+    --- PASS: TestGenerateJWKFromPEM/p384 (0.01s)
+=== RUN   TestEncryptDecryptJWK/ok_EC
+=== PAUSE TestEncryptDecryptJWK/ok_EC
+=== RUN   TestEncryptDecryptJWK/ok_EC_pub
+=== PAUSE TestEncryptDecryptJWK/ok_EC_pub
+=== RUN   TestEncryptDecryptJWK/ok_RSA
+=== PAUSE TestEncryptDecryptJWK/ok_RSA
+=== RUN   TestEncryptDecryptJWK/ok_RSA_pub
+=== PAUSE TestEncryptDecryptJWK/ok_RSA_pub
+=== RUN   TestEncryptDecryptJWK/ok_RSA-PSS
+=== PAUSE TestEncryptDecryptJWK/ok_RSA-PSS
+=== RUN   TestEncryptDecryptJWK/ok_RSA-PSS_pub
+=== PAUSE TestEncryptDecryptJWK/ok_RSA-PSS_pub
+=== RUN   TestEncryptDecryptJWK/ok_Ed25519
+=== PAUSE TestEncryptDecryptJWK/ok_Ed25519
+=== RUN   TestEncryptDecryptJWK/ok_Ed25519_pub
+=== PAUSE TestEncryptDecryptJWK/ok_Ed25519_pub
+=== RUN   TestEncryptDecryptJWK/ok_oct
+=== PAUSE TestEncryptDecryptJWK/ok_oct
+=== CONT  TestEncryptDecryptJWK/ok_EC
+=== CONT  TestEncryptDecryptJWK/ok_RSA-PSS_pub
+=== CONT  TestEncryptDecryptJWK/ok_Ed25519_pub
+=== CONT  TestEncryptDecryptJWK/ok_Ed25519
+=== CONT  TestEncryptDecryptJWK/ok_RSA_pub
+=== CONT  TestEncryptDecryptJWK/ok_RSA
+=== CONT  TestEncryptDecryptJWK/ok_EC_pub
+=== CONT  TestEncryptDecryptJWK/ok_oct
+=== CONT  TestEncryptDecryptJWK/ok_RSA-PSS
+--- PASS: TestEncryptDecryptJWK (7.83s)
+    --- PASS: TestEncryptDecryptJWK/ok_RSA-PSS_pub (0.97s)
+    --- PASS: TestEncryptDecryptJWK/ok_RSA_pub (1.07s)
+    --- PASS: TestEncryptDecryptJWK/ok_Ed25519 (1.29s)
+    --- PASS: TestEncryptDecryptJWK/ok_EC (1.35s)
+    --- PASS: TestEncryptDecryptJWK/ok_RSA (1.39s)
+    --- PASS: TestEncryptDecryptJWK/ok_Ed25519_pub (1.54s)
+    --- PASS: TestEncryptDecryptJWK/ok_oct (0.65s)
+    --- PASS: TestEncryptDecryptJWK/ok_EC_pub (0.86s)
+    --- PASS: TestEncryptDecryptJWK/ok_RSA-PSS (0.90s)
 === RUN   TestParseKey/ec
 === PAUSE TestParseKey/ec
 === RUN   TestParseKey/rsa
@@ -1510,126 +1590,89 @@
 === RUN   TestParseKey/failOCTMissingOptions
 === PAUSE TestParseKey/failOCTMissingOptions
 === CONT  TestParseKey/ec
-=== CONT  TestParseKey/pemPrivateWithKid
-=== CONT  TestParseKey/failPassword
 === CONT  TestParseKey/failOCTMissingOptions
-=== CONT  TestParseKey/pemPrivateWithAlg
 === CONT  TestParseKey/failECWrongKid
+=== CONT  TestParseKey/failECBWongAlg
+=== CONT  TestParseKey/failPEMPassword
+=== CONT  TestParseKey/pemPrivateWithPasswordFile
+=== CONT  TestParseKey/pemPrivateWithPassword
+=== CONT  TestParseKey/pemPrivateWithAlgWithSubtle
+=== CONT  TestParseKey/encryptedCompactWithPassword
+=== CONT  TestParseKey/failMissingFile
+=== CONT  TestParseKey/failPassword
 === CONT  TestParseKey/pemPrivateWithUse
+=== CONT  TestParseKey/pemPrivateWithAlg
+=== CONT  TestParseKey/pemPrivateWithKid
 === CONT  TestParseKey/okp
 === CONT  TestParseKey/oct
-=== CONT  TestParseKey/failECBWongAlg
+=== CONT  TestParseKey/pemPrivate
+=== CONT  TestParseKey/pemPublic
 === CONT  TestParseKey/rsa-pss
-=== CONT  TestParseKey/failMissingFile
-=== CONT  TestParseKey/encryptedCompactWithPassword
+=== CONT  TestParseKey/rsa
+=== CONT  TestParseKey/octPrivateWithAlgWithKid
 === CONT  TestParseKey/encryptedFullWithPasswordFile
 === CONT  TestParseKey/pemPrivateWithPasswordPrompter
-=== CONT  TestParseKey/pemPrivateWithPasswordFile
-=== CONT  TestParseKey/pemPrivateWithPassword
-=== CONT  TestParseKey/pemPublic
-=== CONT  TestParseKey/pemPrivate
-=== CONT  TestParseKey/pemPrivateWithAlgWithSubtle
-=== CONT  TestParseKey/octPrivateWithAlgWithKid
 === CONT  TestParseKey/octPrivateWithAlg
-=== CONT  TestParseKey/rsa
-=== CONT  TestParseKey/failPEMPassword
---- PASS: TestParseKey (1.71s)
+--- PASS: TestParseKey (10.16s)
     --- PASS: TestParseKey/ec (0.00s)
     --- PASS: TestParseKey/failOCTMissingOptions (0.00s)
-    --- PASS: TestParseKey/pemPrivateWithKid (0.00s)
     --- PASS: TestParseKey/failECWrongKid (0.00s)
-    --- PASS: TestParseKey/okp (0.00s)
-    --- PASS: TestParseKey/oct (0.00s)
     --- PASS: TestParseKey/failECBWongAlg (0.00s)
+    --- PASS: TestParseKey/failPEMPassword (0.01s)
+    --- PASS: TestParseKey/pemPrivateWithAlgWithSubtle (0.00s)
     --- PASS: TestParseKey/failMissingFile (0.00s)
-    --- PASS: TestParseKey/rsa-pss (0.00s)
-    --- PASS: TestParseKey/pemPrivateWithAlg (0.00s)
     --- PASS: TestParseKey/pemPrivateWithUse (0.00s)
+    --- PASS: TestParseKey/pemPrivateWithAlg (0.00s)
+    --- PASS: TestParseKey/pemPrivateWithKid (0.00s)
+    --- PASS: TestParseKey/okp (0.00s)
+    --- PASS: TestParseKey/oct (0.00s)
+    --- PASS: TestParseKey/pemPrivate (0.00s)
     --- PASS: TestParseKey/pemPublic (0.00s)
-    --- PASS: TestParseKey/octPrivateWithAlgWithKid (0.00s)
-    --- PASS: TestParseKey/octPrivateWithAlg (0.00s)
+    --- PASS: TestParseKey/rsa-pss (0.00s)
     --- PASS: TestParseKey/rsa (0.00s)
-    --- PASS: TestParseKey/pemPrivate (0.00s)
-    --- PASS: TestParseKey/pemPrivateWithAlgWithSubtle (0.00s)
-    --- PASS: TestParseKey/pemPrivateWithPasswordPrompter (0.00s)
-    --- PASS: TestParseKey/pemPrivateWithPasswordFile (0.00s)
-    --- PASS: TestParseKey/failPEMPassword (0.00s)
+    --- PASS: TestParseKey/octPrivateWithAlgWithKid (0.00s)
+    --- PASS: TestParseKey/pemPrivateWithPasswordFile (0.01s)
     --- PASS: TestParseKey/pemPrivateWithPassword (0.01s)
-    --- PASS: TestParseKey/encryptedFullWithPasswordFile (0.15s)
-    --- PASS: TestParseKey/failPassword (0.15s)
-    --- PASS: TestParseKey/encryptedCompactWithPassword (0.15s)
-=== RUN   TestEncryptDecryptJWK/ok_EC
-=== PAUSE TestEncryptDecryptJWK/ok_EC
-=== RUN   TestEncryptDecryptJWK/ok_EC_pub
-=== PAUSE TestEncryptDecryptJWK/ok_EC_pub
-=== RUN   TestEncryptDecryptJWK/ok_RSA
-=== PAUSE TestEncryptDecryptJWK/ok_RSA
-=== RUN   TestEncryptDecryptJWK/ok_RSA_pub
-=== PAUSE TestEncryptDecryptJWK/ok_RSA_pub
-=== RUN   TestEncryptDecryptJWK/ok_RSA-PSS
-=== PAUSE TestEncryptDecryptJWK/ok_RSA-PSS
-=== RUN   TestEncryptDecryptJWK/ok_RSA-PSS_pub
-=== PAUSE TestEncryptDecryptJWK/ok_RSA-PSS_pub
-=== RUN   TestEncryptDecryptJWK/ok_Ed25519
-=== PAUSE TestEncryptDecryptJWK/ok_Ed25519
-=== RUN   TestEncryptDecryptJWK/ok_Ed25519_pub
-=== PAUSE TestEncryptDecryptJWK/ok_Ed25519_pub
-=== RUN   TestEncryptDecryptJWK/ok_oct
-=== PAUSE TestEncryptDecryptJWK/ok_oct
-=== CONT  TestEncryptDecryptJWK/ok_EC
-=== CONT  TestEncryptDecryptJWK/ok_RSA-PSS_pub
-=== CONT  TestEncryptDecryptJWK/ok_RSA
-=== CONT  TestEncryptDecryptJWK/ok_RSA_pub
-=== CONT  TestEncryptDecryptJWK/ok_EC_pub
-=== CONT  TestEncryptDecryptJWK/ok_RSA-PSS
-=== CONT  TestEncryptDecryptJWK/ok_Ed25519_pub
-=== CONT  TestEncryptDecryptJWK/ok_oct
-=== CONT  TestEncryptDecryptJWK/ok_Ed25519
---- PASS: TestEncryptDecryptJWK (5.06s)
-    --- PASS: TestEncryptDecryptJWK/ok_EC_pub (0.32s)
-    --- PASS: TestEncryptDecryptJWK/ok_RSA-PSS (0.32s)
-    --- PASS: TestEncryptDecryptJWK/ok_RSA-PSS_pub (0.33s)
-    --- PASS: TestEncryptDecryptJWK/ok_Ed25519_pub (0.33s)
-    --- PASS: TestEncryptDecryptJWK/ok_oct (0.38s)
-    --- PASS: TestEncryptDecryptJWK/ok_Ed25519 (0.40s)
-    --- PASS: TestEncryptDecryptJWK/ok_RSA (0.47s)
-    --- PASS: TestEncryptDecryptJWK/ok_EC (0.47s)
-    --- PASS: TestEncryptDecryptJWK/ok_RSA_pub (0.48s)
---- PASS: TestGenerateJWK (0.01s)
-    --- PASS: TestGenerateJWK/oct#06 (0.00s)
+    --- PASS: TestParseKey/pemPrivateWithPasswordPrompter (0.01s)
+    --- PASS: TestParseKey/octPrivateWithAlg (0.00s)
+    --- PASS: TestParseKey/failPassword (0.49s)
+    --- PASS: TestParseKey/encryptedFullWithPasswordFile (0.49s)
+    --- PASS: TestParseKey/encryptedCompactWithPassword (0.52s)
+--- PASS: TestGenerateJWK (0.00s)
+    --- PASS: TestGenerateJWK/EC (0.00s)
+    --- PASS: TestGenerateJWK/fail (0.00s)
+    --- PASS: TestGenerateJWK/oct#11 (0.00s)
     --- PASS: TestGenerateJWK/oct#10 (0.00s)
     --- PASS: TestGenerateJWK/oct#09 (0.00s)
-    --- PASS: TestGenerateJWK/oct#11 (0.00s)
-    --- PASS: TestGenerateJWK/fail (0.00s)
-    --- PASS: TestGenerateJWK/oct#05 (0.00s)
     --- PASS: TestGenerateJWK/oct#08 (0.00s)
-    --- PASS: TestGenerateJWK/OKP#01 (0.00s)
-    --- PASS: TestGenerateJWK/oct#01 (0.00s)
-    --- PASS: TestGenerateJWK/oct#03 (0.00s)
     --- PASS: TestGenerateJWK/oct#07 (0.00s)
+    --- PASS: TestGenerateJWK/oct#06 (0.00s)
+    --- PASS: TestGenerateJWK/oct#05 (0.00s)
+    --- PASS: TestGenerateJWK/oct#04 (0.00s)
+    --- PASS: TestGenerateJWK/oct#03 (0.00s)
+    --- PASS: TestGenerateJWK/oct#02 (0.00s)
+    --- PASS: TestGenerateJWK/oct#01 (0.00s)
     --- PASS: TestGenerateJWK/oct (0.00s)
-    --- PASS: TestGenerateJWK/EC#06 (0.00s)
-    --- PASS: TestGenerateJWK/EC (0.00s)
+    --- PASS: TestGenerateJWK/OKP#02 (0.00s)
+    --- PASS: TestGenerateJWK/OKP#01 (0.00s)
+    --- PASS: TestGenerateJWK/OKP (0.00s)
     --- PASS: TestGenerateJWK/EC#07 (0.00s)
+    --- PASS: TestGenerateJWK/EC#06 (0.00s)
+    --- PASS: TestGenerateJWK/EC#05 (0.00s)
     --- PASS: TestGenerateJWK/EC#04 (0.00s)
-    --- PASS: TestGenerateJWK/OKP (0.00s)
-    --- PASS: TestGenerateJWK/OKP#02 (0.00s)
-    --- PASS: TestGenerateJWK/oct#04 (0.00s)
-    --- PASS: TestGenerateJWK/oct#02 (0.00s)
+    --- PASS: TestGenerateJWK/EC#03 (0.04s)
+    --- PASS: TestGenerateJWK/EC#02 (0.01s)
     --- PASS: TestGenerateJWK/EC#01 (0.00s)
-    --- PASS: TestGenerateJWK/EC#05 (0.00s)
-    --- PASS: TestGenerateJWK/EC#02 (0.00s)
-    --- PASS: TestGenerateJWK/EC#03 (0.01s)
-    --- PASS: TestGenerateJWK/RSA (0.73s)
-    --- PASS: TestGenerateJWK/RSA#07 (0.91s)
-    --- PASS: TestGenerateJWK/RSA#02 (0.97s)
-    --- PASS: TestGenerateJWK/RSA#06 (1.01s)
-    --- PASS: TestGenerateJWK/RSA#04 (1.11s)
-    --- PASS: TestGenerateJWK/RSA#05 (1.20s)
-    --- PASS: TestGenerateJWK/RSA#03 (1.47s)
-    --- PASS: TestGenerateJWK/RSA#01 (21.98s)
+    --- PASS: TestGenerateJWK/RSA (3.75s)
+    --- PASS: TestGenerateJWK/RSA#07 (4.31s)
+    --- PASS: TestGenerateJWK/RSA#05 (6.77s)
+    --- PASS: TestGenerateJWK/RSA#06 (7.14s)
+    --- PASS: TestGenerateJWK/RSA#03 (7.91s)
+    --- PASS: TestGenerateJWK/RSA#02 (9.12s)
+    --- PASS: TestGenerateJWK/RSA#04 (9.44s)
+    --- PASS: TestGenerateJWK/RSA#01 (64.57s)
 PASS
-ok  	go.step.sm/crypto/jose	41.563s
+ok  	go.step.sm/crypto/jose	130.925s
 === RUN   TestPublicKey
 === RUN   TestPublicKey/ecdsa
 === RUN   TestPublicKey/ecdsaPublic
@@ -1640,27 +1683,27 @@
 === RUN   TestPublicKey/x25519
 === RUN   TestPublicKey/x25519Public
 === RUN   TestPublicKey/fail
---- PASS: TestPublicKey (1.40s)
+--- PASS: TestPublicKey (7.68s)
     --- PASS: TestPublicKey/ecdsa (0.00s)
     --- PASS: TestPublicKey/ecdsaPublic (0.00s)
     --- PASS: TestPublicKey/rsa (0.00s)
     --- PASS: TestPublicKey/rsaPublic (0.00s)
     --- PASS: TestPublicKey/ed25519 (0.00s)
     --- PASS: TestPublicKey/ed25519Public (0.00s)
-    --- PASS: TestPublicKey/x25519 (0.00s)
+    --- PASS: TestPublicKey/x25519 (0.01s)
     --- PASS: TestPublicKey/x25519Public (0.00s)
     --- PASS: TestPublicKey/fail (0.00s)
 === RUN   TestGenerateDefaultKey
 === RUN   TestGenerateDefaultKey/ok
 === RUN   TestGenerateDefaultKey/eof
---- PASS: TestGenerateDefaultKey (0.00s)
-    --- PASS: TestGenerateDefaultKey/ok (0.00s)
+--- PASS: TestGenerateDefaultKey (0.02s)
+    --- PASS: TestGenerateDefaultKey/ok (0.02s)
     --- PASS: TestGenerateDefaultKey/eof (0.00s)
 === RUN   TestGenerateDefaultKeyPair
 === RUN   TestGenerateDefaultKeyPair/ok
 === RUN   TestGenerateDefaultKeyPair/eof
---- PASS: TestGenerateDefaultKeyPair (0.00s)
-    --- PASS: TestGenerateDefaultKeyPair/ok (0.00s)
+--- PASS: TestGenerateDefaultKeyPair (0.02s)
+    --- PASS: TestGenerateDefaultKeyPair/ok (0.02s)
     --- PASS: TestGenerateDefaultKeyPair/eof (0.00s)
 === RUN   TestGenerateKey
 === RUN   TestGenerateKey/P-256
@@ -1675,11 +1718,11 @@
 === RUN   TestGenerateKey/unknown_EC_curve
 === RUN   TestGenerateKey/unknown_OKP_curve
 === RUN   TestGenerateKey/unknown_type
---- PASS: TestGenerateKey (0.27s)
-    --- PASS: TestGenerateKey/P-256 (0.00s)
-    --- PASS: TestGenerateKey/P-384 (0.05s)
-    --- PASS: TestGenerateKey/P-521 (0.21s)
-    --- PASS: TestGenerateKey/Ed25519 (0.01s)
+--- PASS: TestGenerateKey (0.99s)
+    --- PASS: TestGenerateKey/P-256 (0.02s)
+    --- PASS: TestGenerateKey/P-384 (0.21s)
+    --- PASS: TestGenerateKey/P-521 (0.72s)
+    --- PASS: TestGenerateKey/Ed25519 (0.03s)
     --- PASS: TestGenerateKey/OCT (0.00s)
     --- PASS: TestGenerateKey/eof_EC (0.00s)
     --- PASS: TestGenerateKey/eof_RSA (0.00s)
@@ -1693,9 +1736,9 @@
 === RUN   TestGenerateKey_rsa/RSA3072
 === RUN   TestGenerateKey_rsa/fail
 === RUN   TestGenerateKey_rsa/fail_size
---- PASS: TestGenerateKey_rsa (4.04s)
-    --- PASS: TestGenerateKey_rsa/RSA2048 (0.51s)
-    --- PASS: TestGenerateKey_rsa/RSA3072 (3.53s)
+--- PASS: TestGenerateKey_rsa (15.27s)
+    --- PASS: TestGenerateKey_rsa/RSA2048 (2.22s)
+    --- PASS: TestGenerateKey_rsa/RSA3072 (13.05s)
     --- PASS: TestGenerateKey_rsa/fail (0.00s)
     --- PASS: TestGenerateKey_rsa/fail_size (0.00s)
 === RUN   TestGenerateKeyPair
@@ -1707,10 +1750,10 @@
 === RUN   TestGenerateKeyPair/eof
 === RUN   TestGenerateKeyPair/unknown
 === RUN   TestGenerateKeyPair/unknown#01
---- PASS: TestGenerateKeyPair (0.08s)
-    --- PASS: TestGenerateKeyPair/P-256 (0.00s)
-    --- PASS: TestGenerateKeyPair/P-384 (0.02s)
-    --- PASS: TestGenerateKeyPair/P-521 (0.06s)
+--- PASS: TestGenerateKeyPair (0.32s)
+    --- PASS: TestGenerateKeyPair/P-256 (0.02s)
+    --- PASS: TestGenerateKeyPair/P-384 (0.06s)
+    --- PASS: TestGenerateKeyPair/P-521 (0.24s)
     --- PASS: TestGenerateKeyPair/Ed25519 (0.00s)
     --- PASS: TestGenerateKeyPair/OCT (0.00s)
     --- PASS: TestGenerateKeyPair/eof (0.00s)
@@ -1720,15 +1763,15 @@
 === RUN   TestGenerateKeyPair_rsa/RSA2048
 === RUN   TestGenerateKeyPair_rsa/RSA3072
 === RUN   TestGenerateKeyPair_rsa/fail
---- PASS: TestGenerateKeyPair_rsa (3.45s)
-    --- PASS: TestGenerateKeyPair_rsa/RSA2048 (0.78s)
-    --- PASS: TestGenerateKeyPair_rsa/RSA3072 (2.67s)
+--- PASS: TestGenerateKeyPair_rsa (20.79s)
+    --- PASS: TestGenerateKeyPair_rsa/RSA2048 (3.78s)
+    --- PASS: TestGenerateKeyPair_rsa/RSA3072 (17.01s)
     --- PASS: TestGenerateKeyPair_rsa/fail (0.00s)
 === RUN   TestGenerateDefaultSigner
 === RUN   TestGenerateDefaultSigner/ok
 === RUN   TestGenerateDefaultSigner/eof
---- PASS: TestGenerateDefaultSigner (0.00s)
-    --- PASS: TestGenerateDefaultSigner/ok (0.00s)
+--- PASS: TestGenerateDefaultSigner (0.02s)
+    --- PASS: TestGenerateDefaultSigner/ok (0.02s)
     --- PASS: TestGenerateDefaultSigner/eof (0.00s)
 === RUN   TestGenerateSigner
 === RUN   TestGenerateSigner/P-256
@@ -1738,11 +1781,11 @@
 === RUN   TestGenerateSigner/OCT
 === RUN   TestGenerateSigner/unknown
 === RUN   TestGenerateSigner/unknown#01
---- PASS: TestGenerateSigner (0.08s)
-    --- PASS: TestGenerateSigner/P-256 (0.00s)
-    --- PASS: TestGenerateSigner/P-384 (0.02s)
-    --- PASS: TestGenerateSigner/P-521 (0.06s)
-    --- PASS: TestGenerateSigner/Ed25519 (0.00s)
+--- PASS: TestGenerateSigner (0.33s)
+    --- PASS: TestGenerateSigner/P-256 (0.02s)
+    --- PASS: TestGenerateSigner/P-384 (0.06s)
+    --- PASS: TestGenerateSigner/P-521 (0.24s)
+    --- PASS: TestGenerateSigner/Ed25519 (0.01s)
     --- PASS: TestGenerateSigner/OCT (0.00s)
     --- PASS: TestGenerateSigner/unknown (0.00s)
     --- PASS: TestGenerateSigner/unknown#01 (0.00s)
@@ -1761,7 +1804,7 @@
 === RUN   TestExtractKey/fail_string
 === RUN   TestExtractKey/fail_bad_ssh.Certificate.Key
 === RUN   TestExtractKey/fail_bad_ssh.PublicKey
---- PASS: TestExtractKey (3.80s)
+--- PASS: TestExtractKey (1.90s)
     --- PASS: TestExtractKey/RSA_private_key (0.00s)
     --- PASS: TestExtractKey/RSA_public_key (0.00s)
     --- PASS: TestExtractKey/EC_private_key (0.00s)
@@ -1787,7 +1830,7 @@
 === RUN   TestVerifyPair/fail_rsa_key
 === RUN   TestVerifyPair/fail_ed25519_key
 === RUN   TestVerifyPair/fail_type
---- PASS: TestVerifyPair (1.82s)
+--- PASS: TestVerifyPair (8.44s)
     --- PASS: TestVerifyPair/ecdsa (0.00s)
     --- PASS: TestVerifyPair/rsa (0.00s)
     --- PASS: TestVerifyPair/ed25519 (0.00s)
@@ -1803,13 +1846,13 @@
 === RUN   TestInsecure/fail_RSA_1024
 === RUN   TestInsecure/ok_RSA_2048_insecure
 === RUN   TestInsecure/ok_RSA_1024_insecure
---- PASS: TestInsecure (0.99s)
-    --- PASS: TestInsecure/ok_RSA_2048 (0.48s)
+--- PASS: TestInsecure (5.18s)
+    --- PASS: TestInsecure/ok_RSA_2048 (0.75s)
     --- PASS: TestInsecure/fail_RSA_1024 (0.00s)
-    --- PASS: TestInsecure/ok_RSA_2048_insecure (0.41s)
-    --- PASS: TestInsecure/ok_RSA_1024_insecure (0.11s)
+    --- PASS: TestInsecure/ok_RSA_2048_insecure (4.16s)
+    --- PASS: TestInsecure/ok_RSA_1024_insecure (0.27s)
 PASS
-ok  	go.step.sm/crypto/keyutil	15.958s
+ok  	go.step.sm/crypto/keyutil	61.005s
 === RUN   TestNew
 === RUN   TestNew/ok
 === RUN   TestNew/ok_with_options
@@ -1823,55 +1866,55 @@
 === RUN   TestNew/fail_intermediate_csr
 === RUN   TestNew/fail_host_ssh_signer
 === RUN   TestNew/fail_user_ssh_signer
---- PASS: TestNew (0.12s)
-    --- PASS: TestNew/ok (0.03s)
-    --- PASS: TestNew/ok_with_options (0.01s)
+--- PASS: TestNew (0.48s)
+    --- PASS: TestNew/ok (0.11s)
+    --- PASS: TestNew/ok_with_options (0.05s)
     --- PASS: TestNew/fail_root_signer (0.00s)
-    --- PASS: TestNew/fail_intermediate_signer (0.00s)
-    --- PASS: TestNew/fail_host_signer (0.01s)
-    --- PASS: TestNew/fail_user_signer (0.01s)
-    --- PASS: TestNew/fail_root_template (0.00s)
-    --- PASS: TestNew/fail_intermediate_template (0.01s)
+    --- PASS: TestNew/fail_intermediate_signer (0.01s)
+    --- PASS: TestNew/fail_host_signer (0.04s)
+    --- PASS: TestNew/fail_user_signer (0.04s)
+    --- PASS: TestNew/fail_root_template (0.02s)
+    --- PASS: TestNew/fail_intermediate_template (0.06s)
     --- PASS: TestNew/fail_root_csr (0.00s)
-    --- PASS: TestNew/fail_intermediate_csr (0.00s)
-    --- PASS: TestNew/fail_host_ssh_signer (0.01s)
-    --- PASS: TestNew/fail_user_ssh_signer (0.01s)
+    --- PASS: TestNew/fail_intermediate_csr (0.01s)
+    --- PASS: TestNew/fail_host_ssh_signer (0.02s)
+    --- PASS: TestNew/fail_user_ssh_signer (0.03s)
 === RUN   TestCA_Sign
 === RUN   TestCA_Sign/ok
 === RUN   TestCA_Sign/ok_with_lifetime
 === RUN   TestCA_Sign/fail
---- PASS: TestCA_Sign (0.08s)
-    --- PASS: TestCA_Sign/ok (0.01s)
-    --- PASS: TestCA_Sign/ok_with_lifetime (0.01s)
+--- PASS: TestCA_Sign (0.33s)
+    --- PASS: TestCA_Sign/ok (0.04s)
+    --- PASS: TestCA_Sign/ok_with_lifetime (0.06s)
     --- PASS: TestCA_Sign/fail (0.00s)
 === RUN   TestCA_Sign_mutation
---- PASS: TestCA_Sign_mutation (0.03s)
+--- PASS: TestCA_Sign_mutation (0.16s)
 === RUN   TestCA_SignCSR
 === RUN   TestCA_SignCSR/ok
 === RUN   TestCA_SignCSR/ok_with_modify
 === RUN   TestCA_SignCSR/fail_new_certificate
 === RUN   TestCA_SignCSR/fail_modify
---- PASS: TestCA_SignCSR (0.11s)
-    --- PASS: TestCA_SignCSR/ok (0.01s)
-    --- PASS: TestCA_SignCSR/ok_with_modify (0.01s)
+--- PASS: TestCA_SignCSR (0.57s)
+    --- PASS: TestCA_SignCSR/ok (0.07s)
+    --- PASS: TestCA_SignCSR/ok_with_modify (0.07s)
     --- PASS: TestCA_SignCSR/fail_new_certificate (0.00s)
-    --- PASS: TestCA_SignCSR/fail_modify (0.00s)
+    --- PASS: TestCA_SignCSR/fail_modify (0.01s)
 === RUN   TestCA_SignSSH
 === RUN   TestCA_SignSSH/ok_host
 === RUN   TestCA_SignSSH/ok_user
 === RUN   TestCA_SignSSH/ok_infinity
 === RUN   TestCA_SignSSH/fail_type
---- PASS: TestCA_SignSSH (0.12s)
+--- PASS: TestCA_SignSSH (0.52s)
     --- PASS: TestCA_SignSSH/ok_host (0.01s)
     --- PASS: TestCA_SignSSH/ok_user (0.01s)
-    --- PASS: TestCA_SignSSH/ok_infinity (0.01s)
+    --- PASS: TestCA_SignSSH/ok_infinity (0.02s)
     --- PASS: TestCA_SignSSH/fail_type (0.00s)
 === RUN   TestCA_SignSSH_mutation
---- PASS: TestCA_SignSSH_mutation (0.04s)
+--- PASS: TestCA_SignSSH_mutation (0.08s)
 === RUN   TestCA_SignSSH_infinity
---- PASS: TestCA_SignSSH_infinity (0.04s)
+--- PASS: TestCA_SignSSH_infinity (0.07s)
 PASS
-ok  	go.step.sm/crypto/minica	0.548s
+ok  	go.step.sm/crypto/minica	2.256s
 === RUN   TestParseCosignPrivateKey
 === RUN   TestParseCosignPrivateKey/ok
 === RUN   TestParseCosignPrivateKey/fail_password
@@ -1886,134 +1929,134 @@
 === RUN   TestParseCosignPrivateKey/fail_kdf.Salt
 === RUN   TestParseCosignPrivateKey/fail_ciphertext
 === RUN   TestParseCosignPrivateKey/fail_parsePKCS8PrivateKey
---- PASS: TestParseCosignPrivateKey (1.97s)
-    --- PASS: TestParseCosignPrivateKey/ok (0.27s)
-    --- PASS: TestParseCosignPrivateKey/fail_password (0.20s)
+--- PASS: TestParseCosignPrivateKey (4.61s)
+    --- PASS: TestParseCosignPrivateKey/ok (0.58s)
+    --- PASS: TestParseCosignPrivateKey/fail_password (0.71s)
     --- PASS: TestParseCosignPrivateKey/fail_unmarshal (0.00s)
     --- PASS: TestParseCosignPrivateKey/fail_kdf (0.00s)
     --- PASS: TestParseCosignPrivateKey/fail_cipher (0.00s)
     --- PASS: TestParseCosignPrivateKey/fail_nonce_too_large (0.00s)
     --- PASS: TestParseCosignPrivateKey/fail_nonce_too_short (0.00s)
     --- PASS: TestParseCosignPrivateKey/fail_kdf.N (0.00s)
-    --- PASS: TestParseCosignPrivateKey/fail_kdf.R (0.16s)
-    --- PASS: TestParseCosignPrivateKey/fail_kdf.P (0.27s)
-    --- PASS: TestParseCosignPrivateKey/fail_kdf.Salt (0.37s)
-    --- PASS: TestParseCosignPrivateKey/fail_ciphertext (0.23s)
-    --- PASS: TestParseCosignPrivateKey/fail_parsePKCS8PrivateKey (0.18s)
+    --- PASS: TestParseCosignPrivateKey/fail_kdf.R (0.61s)
+    --- PASS: TestParseCosignPrivateKey/fail_kdf.P (1.06s)
+    --- PASS: TestParseCosignPrivateKey/fail_kdf.Salt (0.29s)
+    --- PASS: TestParseCosignPrivateKey/fail_ciphertext (0.28s)
+    --- PASS: TestParseCosignPrivateKey/fail_parsePKCS8PrivateKey (0.52s)
 === RUN   TestParseCosignPrivateKey_equal
---- PASS: TestParseCosignPrivateKey_equal (0.18s)
+--- PASS: TestParseCosignPrivateKey_equal (0.69s)
 === RUN   TestParseCosignPrivateKey_IncorrectPasswordError
---- PASS: TestParseCosignPrivateKey_IncorrectPasswordError (0.27s)
+--- PASS: TestParseCosignPrivateKey_IncorrectPasswordError (1.43s)
 === RUN   TestRead
-=== RUN   TestRead/testdata/openssl.rsa1024.pem
-=== RUN   TestRead/testdata/pkcs8/openssl.p256.pub.pem
-=== RUN   TestRead/testdata/openssl.p256.enc.pem
-=== RUN   TestRead/testdata/pkcs8/openssl.p521.pem
+=== RUN   TestRead/testdata/openssh.p256.enc.pem
+=== RUN   TestRead/testdata/openssl.p521.enc.pem
+=== RUN   TestRead/testdata/openssh.p384.pem
+=== RUN   TestRead/testdata/pkcs8/openssl.p521.enc.pem
+=== RUN   TestRead/testdata/pkcs8/openssl.ed25519.pub.pem
+=== RUN   TestRead/testdata/pkcs8/openssl.p256.pem
+=== RUN   TestRead/testdata/pkcs8/openssl.rsa2048.enc.pem
+=== RUN   TestRead/testdata/openssl.p384.enc.pem
+=== RUN   TestRead/testdata/openssl.rsa2048.enc.pem
+=== RUN   TestRead/testdata/openssh.p256.pem
+=== RUN   TestRead/testdata/pkcs8/openssl.p256.enc.pem
+=== RUN   TestRead/testdata/openssl.rsa2048.pub.pem
+=== RUN   TestRead/testdata/openssh.rsa1024.enc.pem
+=== RUN   TestRead/testdata/openssl.p521.pem
+=== RUN   TestRead/testdata/openssh.p521.enc.pem
+=== RUN   TestRead/testdata/pkcs8/openssl.rsa4096.pub.pem
+=== RUN   TestRead/testdata/openssh.rsa1024.pub.pem
 === RUN   TestRead/testdata/cosign.enc.pem
+=== RUN   TestRead/testdata/openssl.p256.pem
 === RUN   TestRead/testdata/openssl.p384.pem
-=== RUN   TestRead/testdata/openssh.p384.pub.pem
-=== RUN   TestRead/testdata/openssh.rsa1024.enc.pem
-=== RUN   TestRead/testdata/pkcs8/openssl.rsa2048.pub.pem
-=== RUN   TestRead/testdata/openssh.rsa2048.enc.pem
+=== RUN   TestRead/testdata/openssh.ed25519.enc.pem
+=== RUN   TestRead/testdata/openssh.ed25519.pem
 === RUN   TestRead/testdata/pkcs8/openssl.ed25519.enc.pem
-=== RUN   TestRead/testdata/pkcs8/openssl.p384.pub.pem
-=== RUN   TestRead/testdata/pkcs8/openssl.rsa4096.pub.pem
-=== RUN   TestRead/testdata/openssl.rsa2048.enc.pem
-=== RUN   TestRead/testdata/openssh.rsa1024.pem
+=== RUN   TestRead/testdata/pkcs8/openssl.p521.pem
+=== RUN   TestRead/testdata/openssl.p256.enc.pem
 === RUN   TestRead/testdata/openssl.rsa1024.enc.pem
-=== RUN   TestRead/testdata/openssl.rsa2048.pem
-=== RUN   TestRead/testdata/openssh.p256.pem
-=== RUN   TestRead/testdata/pkcs8/openssl.ed25519.pem
+=== RUN   TestRead/testdata/openssh.rsa1024.pem
+=== RUN   TestRead/testdata/openssh.rsa2048.pub.pem
 === RUN   TestRead/testdata/pkcs8/openssl.rsa2048.pem
-=== RUN   TestRead/testdata/pkcs8/openssl.rsa4096.pem
-=== RUN   TestRead/testdata/openssl.p384.enc.pem
-=== RUN   TestRead/testdata/openssh.ed25519.pem
-=== RUN   TestRead/testdata/openssh.ed25519.pub.pem
+=== RUN   TestRead/testdata/cosign.pub.pem
 === RUN   TestRead/testdata/nebula.pub
+=== RUN   TestRead/testdata/openssh.p521.pub.pem
+=== RUN   TestRead/testdata/openssh.rsa2048.enc.pem
+=== RUN   TestRead/testdata/pkcs8/openssl.ed25519.pem
+=== RUN   TestRead/testdata/openssl.rsa1024.pem
+=== RUN   TestRead/testdata/openssh.ed25519.pub.pem
 === RUN   TestRead/testdata/pkcs8/openssl.p384.enc.pem
-=== RUN   TestRead/testdata/pkcs8/openssl.rsa2048.enc.pem
-=== RUN   TestRead/testdata/openssl.p521.pub.pem
-=== RUN   TestRead/testdata/pkcs8/openssl.p256.enc.pem
-=== RUN   TestRead/testdata/pkcs8/openssl.p256.pem
+=== RUN   TestRead/testdata/openssl.p256.pub.pem
+=== RUN   TestRead/testdata/pkcs8/openssl.p384.pub.pem
+=== RUN   TestRead/testdata/pkcs8/openssl.p521.pub.pem
 === RUN   TestRead/testdata/openssl.p384.pub.pem
-=== RUN   TestRead/testdata/openssl.p521.pem
-=== RUN   TestRead/testdata/openssl.p521.enc.pem
-=== RUN   TestRead/testdata/openssh.ed25519.enc.pem
+=== RUN   TestRead/testdata/openssl.p521.pub.pem
+=== RUN   TestRead/testdata/openssh.p521.pem
 === RUN   TestRead/testdata/openssh.rsa2048.pem
-=== RUN   TestRead/testdata/pkcs8/openssl.p521.pub.pem
-=== RUN   TestRead/testdata/openssh.p521.enc.pem
-=== RUN   TestRead/testdata/openssh.p521.pub.pem
-=== RUN   TestRead/testdata/openssh.rsa1024.pub.pem
-=== RUN   TestRead/testdata/openssh.rsa2048.pub.pem
-=== RUN   TestRead/testdata/pkcs8/openssl.ed25519.pub.pem
-=== RUN   TestRead/testdata/openssl.p256.pub.pem
-=== RUN   TestRead/testdata/openssl.rsa1024.pub.pem
-=== RUN   TestRead/testdata/openssl.rsa2048.pub.pem
-=== RUN   TestRead/testdata/openssh.p384.pem
+=== RUN   TestRead/testdata/pkcs8/openssl.p256.pub.pem
 === RUN   TestRead/testdata/pkcs8/openssl.p384.pem
+=== RUN   TestRead/testdata/pkcs8/openssl.rsa4096.pem
+=== RUN   TestRead/testdata/openssl.rsa1024.pub.pem
+=== RUN   TestRead/testdata/openssl.rsa2048.pem
 === RUN   TestRead/testdata/openssh.p384.enc.pem
-=== RUN   TestRead/testdata/openssh.p256.enc.pem
-=== RUN   TestRead/testdata/openssh.p256.pub.pem
-=== RUN   TestRead/testdata/pkcs8/openssl.p521.enc.pem
-=== RUN   TestRead/testdata/cosign.pub.pem
-=== RUN   TestRead/testdata/openssl.p256.pem
-=== RUN   TestRead/testdata/openssh.p521.pem
+=== RUN   TestRead/testdata/pkcs8/openssl.rsa2048.pub.pem
 === RUN   TestRead/testdata/nebula.key
---- PASS: TestRead (2.22s)
-    --- PASS: TestRead/testdata/openssl.rsa1024.pem (0.00s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.p256.pub.pem (0.00s)
-    --- PASS: TestRead/testdata/openssl.p256.enc.pem (0.01s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.p521.pem (0.18s)
-    --- PASS: TestRead/testdata/cosign.enc.pem (0.14s)
-    --- PASS: TestRead/testdata/openssl.p384.pem (0.05s)
-    --- PASS: TestRead/testdata/openssh.p384.pub.pem (0.00s)
-    --- PASS: TestRead/testdata/openssh.rsa1024.enc.pem (0.21s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.rsa2048.pub.pem (0.00s)
-    --- PASS: TestRead/testdata/openssh.rsa2048.enc.pem (0.22s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.ed25519.enc.pem (0.03s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.p384.pub.pem (0.00s)
+=== RUN   TestRead/testdata/openssh.p256.pub.pem
+=== RUN   TestRead/testdata/openssh.p384.pub.pem
+--- PASS: TestRead (5.93s)
+    --- PASS: TestRead/testdata/openssh.p256.enc.pem (0.65s)
+    --- PASS: TestRead/testdata/openssl.p521.enc.pem (0.90s)
+    --- PASS: TestRead/testdata/openssh.p384.pem (0.17s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.p521.enc.pem (0.29s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.ed25519.pub.pem (0.00s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.p256.pem (0.02s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.rsa2048.enc.pem (0.05s)
+    --- PASS: TestRead/testdata/openssl.p384.enc.pem (0.07s)
+    --- PASS: TestRead/testdata/openssl.rsa2048.enc.pem (0.04s)
+    --- PASS: TestRead/testdata/openssh.p256.pem (0.02s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.p256.enc.pem (0.03s)
+    --- PASS: TestRead/testdata/openssl.rsa2048.pub.pem (0.00s)
+    --- PASS: TestRead/testdata/openssh.rsa1024.enc.pem (0.42s)
+    --- PASS: TestRead/testdata/openssl.p521.pem (0.24s)
+    --- PASS: TestRead/testdata/openssh.p521.enc.pem (0.70s)
     --- PASS: TestRead/testdata/pkcs8/openssl.rsa4096.pub.pem (0.00s)
-    --- PASS: TestRead/testdata/openssl.rsa2048.enc.pem (0.01s)
-    --- PASS: TestRead/testdata/openssh.rsa1024.pem (0.00s)
-    --- PASS: TestRead/testdata/openssl.rsa1024.enc.pem (0.00s)
-    --- PASS: TestRead/testdata/openssl.rsa2048.pem (0.01s)
-    --- PASS: TestRead/testdata/openssh.p256.pem (0.00s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.ed25519.pem (0.00s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.rsa2048.pem (0.01s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.rsa4096.pem (0.07s)
-    --- PASS: TestRead/testdata/openssl.p384.enc.pem (0.02s)
+    --- PASS: TestRead/testdata/openssh.rsa1024.pub.pem (0.00s)
+    --- PASS: TestRead/testdata/cosign.enc.pem (0.52s)
+    --- PASS: TestRead/testdata/openssl.p256.pem (0.02s)
+    --- PASS: TestRead/testdata/openssl.p384.pem (0.06s)
+    --- PASS: TestRead/testdata/openssh.ed25519.enc.pem (0.41s)
     --- PASS: TestRead/testdata/openssh.ed25519.pem (0.00s)
-    --- PASS: TestRead/testdata/openssh.ed25519.pub.pem (0.00s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.ed25519.enc.pem (0.01s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.p521.pem (0.13s)
+    --- PASS: TestRead/testdata/openssl.p256.enc.pem (0.01s)
+    --- PASS: TestRead/testdata/openssl.rsa1024.enc.pem (0.00s)
+    --- PASS: TestRead/testdata/openssh.rsa1024.pem (0.00s)
+    --- PASS: TestRead/testdata/openssh.rsa2048.pub.pem (0.00s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.rsa2048.pem (0.02s)
+    --- PASS: TestRead/testdata/cosign.pub.pem (0.00s)
     --- PASS: TestRead/testdata/nebula.pub (0.00s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.p384.enc.pem (0.02s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.rsa2048.enc.pem (0.01s)
-    --- PASS: TestRead/testdata/openssl.p521.pub.pem (0.00s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.p256.enc.pem (0.01s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.p256.pem (0.00s)
-    --- PASS: TestRead/testdata/openssl.p384.pub.pem (0.00s)
-    --- PASS: TestRead/testdata/openssl.p521.pem (0.06s)
-    --- PASS: TestRead/testdata/openssl.p521.enc.pem (0.07s)
-    --- PASS: TestRead/testdata/openssh.ed25519.enc.pem (0.21s)
-    --- PASS: TestRead/testdata/openssh.rsa2048.pem (0.01s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.p521.pub.pem (0.00s)
-    --- PASS: TestRead/testdata/openssh.p521.enc.pem (0.27s)
     --- PASS: TestRead/testdata/openssh.p521.pub.pem (0.00s)
-    --- PASS: TestRead/testdata/openssh.rsa1024.pub.pem (0.00s)
-    --- PASS: TestRead/testdata/openssh.rsa2048.pub.pem (0.00s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.ed25519.pub.pem (0.00s)
+    --- PASS: TestRead/testdata/openssh.rsa2048.enc.pem (0.28s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.ed25519.pem (0.00s)
+    --- PASS: TestRead/testdata/openssl.rsa1024.pem (0.00s)
+    --- PASS: TestRead/testdata/openssh.ed25519.pub.pem (0.00s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.p384.enc.pem (0.04s)
     --- PASS: TestRead/testdata/openssl.p256.pub.pem (0.00s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.p384.pub.pem (0.00s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.p521.pub.pem (0.00s)
+    --- PASS: TestRead/testdata/openssl.p384.pub.pem (0.00s)
+    --- PASS: TestRead/testdata/openssl.p521.pub.pem (0.00s)
+    --- PASS: TestRead/testdata/openssh.p521.pem (0.13s)
+    --- PASS: TestRead/testdata/openssh.rsa2048.pem (0.02s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.p256.pub.pem (0.00s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.p384.pem (0.03s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.rsa4096.pem (0.24s)
     --- PASS: TestRead/testdata/openssl.rsa1024.pub.pem (0.00s)
-    --- PASS: TestRead/testdata/openssl.rsa2048.pub.pem (0.00s)
-    --- PASS: TestRead/testdata/openssh.p384.pem (0.02s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.p384.pem (0.02s)
-    --- PASS: TestRead/testdata/openssh.p384.enc.pem (0.22s)
-    --- PASS: TestRead/testdata/openssh.p256.enc.pem (0.21s)
-    --- PASS: TestRead/testdata/openssh.p256.pub.pem (0.00s)
-    --- PASS: TestRead/testdata/pkcs8/openssl.p521.enc.pem (0.07s)
-    --- PASS: TestRead/testdata/cosign.pub.pem (0.00s)
-    --- PASS: TestRead/testdata/openssl.p256.pem (0.00s)
-    --- PASS: TestRead/testdata/openssh.p521.pem (0.06s)
+    --- PASS: TestRead/testdata/openssl.rsa2048.pem (0.05s)
+    --- PASS: TestRead/testdata/openssh.p384.enc.pem (0.36s)
+    --- PASS: TestRead/testdata/pkcs8/openssl.rsa2048.pub.pem (0.00s)
     --- PASS: TestRead/testdata/nebula.key (0.00s)
+    --- PASS: TestRead/testdata/openssh.p256.pub.pem (0.00s)
+    --- PASS: TestRead/testdata/openssh.p384.pub.pem (0.00s)
 === RUN   TestParseCertificate
 === RUN   TestParseCertificate/testdata/ca.crt
 === RUN   TestParseCertificate/testdata/bundle.crt
@@ -2062,7 +2105,7 @@
 === RUN   TestReadCertificate/testdata/badpem.crt
 === RUN   TestReadCertificate/testdata/badder.crt
 === RUN   TestReadCertificate/testdata/openssl.p256.pem
---- PASS: TestReadCertificate (0.00s)
+--- PASS: TestReadCertificate (0.01s)
     --- PASS: TestReadCertificate/testdata/ca.crt (0.00s)
     --- PASS: TestReadCertificate/testdata/ca.der (0.00s)
     --- PASS: TestReadCertificate/testdata/bundle.crt (0.00s)
@@ -2075,51 +2118,51 @@
 === RUN   TestReadCertificateBundle
 --- PASS: TestReadCertificateBundle (0.00s)
 === RUN   TestParse
-=== RUN   TestParse/fail-pkcs8-password
-=== RUN   TestParse/fail-nebula-pub-size
-=== RUN   TestParse/success-ecdsa-private-key
-=== RUN   TestParse/success-ed25519-private-key
-=== RUN   TestParse/success-ed25519-enc-private-key
 === RUN   TestParse/success-ecdsa-public-key
-=== RUN   TestParse/success-rsa-public-key
+=== RUN   TestParse/success-ed25519-enc-private-key
 === RUN   TestParse/success-x509-crt
-=== RUN   TestParse/fail-nebula-key-size
-=== RUN   TestParse/success-rsa-private-key
+=== RUN   TestParse/success-ecdsa-private-key
+=== RUN   TestParse/success-ed25519-private-key
 === RUN   TestParse/success-x509-crt-trim-spaces
 === RUN   TestParse/fail-options
+=== RUN   TestParse/fail-nebula-pub-size
+=== RUN   TestParse/success-rsa-private-key
 === RUN   TestParse/fail-password
+=== RUN   TestParse/success-rsa-public-key
+=== RUN   TestParse/fail-pkcs8-password
 === RUN   TestParse/fail-type
---- PASS: TestParse (0.01s)
-    --- PASS: TestParse/fail-pkcs8-password (0.00s)
-    --- PASS: TestParse/fail-nebula-pub-size (0.00s)
-    --- PASS: TestParse/success-ecdsa-private-key (0.00s)
-    --- PASS: TestParse/success-ed25519-private-key (0.00s)
-    --- PASS: TestParse/success-ed25519-enc-private-key (0.00s)
+=== RUN   TestParse/fail-nebula-key-size
+--- PASS: TestParse (0.02s)
     --- PASS: TestParse/success-ecdsa-public-key (0.00s)
-    --- PASS: TestParse/success-rsa-public-key (0.00s)
+    --- PASS: TestParse/success-ed25519-enc-private-key (0.01s)
     --- PASS: TestParse/success-x509-crt (0.00s)
-    --- PASS: TestParse/fail-nebula-key-size (0.00s)
-    --- PASS: TestParse/success-rsa-private-key (0.00s)
+    --- PASS: TestParse/success-ecdsa-private-key (0.01s)
+    --- PASS: TestParse/success-ed25519-private-key (0.00s)
     --- PASS: TestParse/success-x509-crt-trim-spaces (0.00s)
     --- PASS: TestParse/fail-options (0.00s)
+    --- PASS: TestParse/fail-nebula-pub-size (0.00s)
+    --- PASS: TestParse/success-rsa-private-key (0.00s)
     --- PASS: TestParse/fail-password (0.00s)
+    --- PASS: TestParse/success-rsa-public-key (0.00s)
+    --- PASS: TestParse/fail-pkcs8-password (0.01s)
     --- PASS: TestParse/fail-type (0.00s)
+    --- PASS: TestParse/fail-nebula-key-size (0.00s)
 === RUN   TestSerialize
-    pem_test.go:657: Running test case: RSA Private Key success
-    pem_test.go:657: Running test case: EC Public Key success
-    pem_test.go:657: Running test case: X.509 Certificate request success
-    pem_test.go:657: Running test case: unrecognized key type
-    pem_test.go:657: Running test case: EC Private Key success
-    pem_test.go:657: Running test case: EC Private Key success - encrypt input data
-    pem_test.go:657: Running test case: OKP Public Key success
     pem_test.go:657: Running test case: X.509 Certificate success
+    pem_test.go:657: Running test case: RSA Public Key success
     pem_test.go:657: Running test case: EC Private Key success - encrypt pkcs8 data
     pem_test.go:657: Running test case: OKP Private Key success
-    pem_test.go:657: Running test case: ToFile Success (EC Private Key encrypted)
-    pem_test.go:657: Running test case: RSA Public Key success
+    pem_test.go:657: Running test case: unrecognized key type
     pem_test.go:657: Running test case: propagate open key out file error
     pem_test.go:657: Running test case: ToFile Success (EC Private Key unencrypted)
---- PASS: TestSerialize (1.42s)
+    pem_test.go:657: Running test case: X.509 Certificate request success
+    pem_test.go:657: Running test case: RSA Private Key success
+    pem_test.go:657: Running test case: EC Private Key success - encrypt input data
+    pem_test.go:657: Running test case: OKP Public Key success
+    pem_test.go:657: Running test case: EC Private Key success
+    pem_test.go:657: Running test case: EC Public Key success
+    pem_test.go:657: Running test case: ToFile Success (EC Private Key encrypted)
+--- PASS: TestSerialize (6.01s)
 === RUN   TestParseDER
 === RUN   TestParseDER/rsa_public_key
 === RUN   TestParseDER/rsa_private_key
@@ -2129,7 +2172,7 @@
 === RUN   TestParseDER/ed25519_public_key
 === RUN   TestParseDER/ed25519_private_key
 === RUN   TestParseDER/fail
---- PASS: TestParseDER (0.00s)
+--- PASS: TestParseDER (0.01s)
     --- PASS: TestParseDER/rsa_public_key (0.00s)
     --- PASS: TestParseDER/rsa_private_key (0.00s)
     --- PASS: TestParseDER/rsa_pkcs#1_public_key (0.00s)
@@ -2139,119 +2182,119 @@
     --- PASS: TestParseDER/ed25519_private_key (0.00s)
     --- PASS: TestParseDER/fail (0.00s)
 === RUN   TestParseKey
-=== RUN   TestParseKey/testdata/openssl.p384.enc.pem
+=== RUN   TestParseKey/testdata/pkcs8/openssl.rsa4096.pub.pem
+=== RUN   TestParseKey/testdata/openssh.p521.enc.pem
+=== RUN   TestParseKey/testdata/cosign.enc.pem
+=== RUN   TestParseKey/testdata/openssl.p384.pem
+=== RUN   TestParseKey/testdata/openssh.ed25519.enc.pem
 === RUN   TestParseKey/testdata/openssh.ed25519.pem
+=== RUN   TestParseKey/testdata/pkcs8/openssl.ed25519.enc.pem
+=== RUN   TestParseKey/testdata/pkcs8/openssl.p521.pem
+=== RUN   TestParseKey/testdata/openssl.p256.pem
+=== RUN   TestParseKey/testdata/openssl.rsa1024.enc.pem
+=== RUN   TestParseKey/testdata/openssh.rsa1024.pem
+=== RUN   TestParseKey/testdata/pkcs8/openssl.rsa2048.pem
+=== RUN   TestParseKey/testdata/cosign.pub.pem
 === RUN   TestParseKey/testdata/nebula.pub
+=== RUN   TestParseKey/testdata/openssl.p256.enc.pem
+=== RUN   TestParseKey/testdata/openssh.rsa2048.enc.pem
+=== RUN   TestParseKey/testdata/pkcs8/openssl.ed25519.pem
 === RUN   TestParseKey/testdata/pkcs8/openssl.p384.enc.pem
-=== RUN   TestParseKey/testdata/pkcs8/openssl.rsa2048.enc.pem
+=== RUN   TestParseKey/testdata/openssl.rsa1024.pem
+=== RUN   TestParseKey/testdata/pkcs8/openssl.p384.pub.pem
+=== RUN   TestParseKey/testdata/pkcs8/openssl.p521.pub.pem
+=== RUN   TestParseKey/testdata/openssl.p256.pub.pem
 === RUN   TestParseKey/testdata/openssl.p521.pub.pem
-=== RUN   TestParseKey/testdata/pkcs8/openssl.p256.enc.pem
+=== RUN   TestParseKey/testdata/openssh.p521.pem
 === RUN   TestParseKey/testdata/openssh.rsa2048.pem
-=== RUN   TestParseKey/testdata/pkcs8/openssl.p256.pem
-=== RUN   TestParseKey/testdata/openssl.p384.pub.pem
-=== RUN   TestParseKey/testdata/openssl.p521.pem
-=== RUN   TestParseKey/testdata/openssl.p521.enc.pem
-=== RUN   TestParseKey/testdata/openssh.ed25519.enc.pem
-=== RUN   TestParseKey/testdata/pkcs8/openssl.ed25519.pub.pem
-=== RUN   TestParseKey/testdata/pkcs8/openssl.p521.pub.pem
-=== RUN   TestParseKey/testdata/openssh.p521.enc.pem
+=== RUN   TestParseKey/testdata/pkcs8/openssl.p256.pub.pem
 === RUN   TestParseKey/testdata/pkcs8/openssl.p384.pem
-=== RUN   TestParseKey/testdata/openssl.p256.pub.pem
-=== RUN   TestParseKey/testdata/openssl.rsa1024.pub.pem
-=== RUN   TestParseKey/testdata/openssl.rsa2048.pub.pem
-=== RUN   TestParseKey/testdata/openssh.p384.pem
+=== RUN   TestParseKey/testdata/pkcs8/openssl.rsa4096.pem
+=== RUN   TestParseKey/testdata/openssl.p384.pub.pem
+=== RUN   TestParseKey/testdata/openssl.rsa2048.pem
 === RUN   TestParseKey/testdata/openssh.p384.enc.pem
+=== RUN   TestParseKey/testdata/pkcs8/openssl.rsa2048.pub.pem
+=== RUN   TestParseKey/testdata/nebula.key
+=== RUN   TestParseKey/testdata/openssl.rsa1024.pub.pem
 === RUN   TestParseKey/testdata/openssh.p256.enc.pem
+=== RUN   TestParseKey/testdata/openssh.p384.pem
 === RUN   TestParseKey/testdata/pkcs8/openssl.p521.enc.pem
-=== RUN   TestParseKey/testdata/cosign.pub.pem
-=== RUN   TestParseKey/testdata/openssl.p256.pem
-=== RUN   TestParseKey/testdata/openssh.p521.pem
-=== RUN   TestParseKey/testdata/nebula.key
-=== RUN   TestParseKey/testdata/openssl.rsa1024.pem
-=== RUN   TestParseKey/testdata/pkcs8/openssl.p256.pub.pem
-=== RUN   TestParseKey/testdata/openssl.p256.enc.pem
-=== RUN   TestParseKey/testdata/pkcs8/openssl.p521.pem
-=== RUN   TestParseKey/testdata/cosign.enc.pem
-=== RUN   TestParseKey/testdata/openssl.p384.pem
-=== RUN   TestParseKey/testdata/openssh.rsa1024.enc.pem
-=== RUN   TestParseKey/testdata/pkcs8/openssl.rsa2048.pub.pem
-=== RUN   TestParseKey/testdata/openssh.rsa2048.enc.pem
-=== RUN   TestParseKey/testdata/pkcs8/openssl.ed25519.enc.pem
-=== RUN   TestParseKey/testdata/pkcs8/openssl.p384.pub.pem
-=== RUN   TestParseKey/testdata/pkcs8/openssl.rsa4096.pub.pem
+=== RUN   TestParseKey/testdata/openssl.p521.enc.pem
+=== RUN   TestParseKey/testdata/pkcs8/openssl.p256.pem
+=== RUN   TestParseKey/testdata/pkcs8/openssl.rsa2048.enc.pem
+=== RUN   TestParseKey/testdata/pkcs8/openssl.ed25519.pub.pem
 === RUN   TestParseKey/testdata/openssl.rsa2048.enc.pem
-=== RUN   TestParseKey/testdata/openssh.rsa1024.pem
-=== RUN   TestParseKey/testdata/pkcs8/openssl.rsa2048.pem
-=== RUN   TestParseKey/testdata/openssl.rsa1024.enc.pem
-=== RUN   TestParseKey/testdata/openssl.rsa2048.pem
 === RUN   TestParseKey/testdata/openssh.p256.pem
-=== RUN   TestParseKey/testdata/pkcs8/openssl.ed25519.pem
-=== RUN   TestParseKey/testdata/pkcs8/openssl.rsa4096.pem
---- PASS: TestParseKey (1.48s)
-    --- PASS: TestParseKey/testdata/openssl.p384.enc.pem (0.00s)
+=== RUN   TestParseKey/testdata/pkcs8/openssl.p256.enc.pem
+=== RUN   TestParseKey/testdata/openssl.p384.enc.pem
+=== RUN   TestParseKey/testdata/openssh.rsa1024.enc.pem
+=== RUN   TestParseKey/testdata/openssl.rsa2048.pub.pem
+=== RUN   TestParseKey/testdata/openssl.p521.pem
+--- PASS: TestParseKey (2.74s)
+    --- PASS: TestParseKey/testdata/pkcs8/openssl.rsa4096.pub.pem (0.00s)
+    --- PASS: TestParseKey/testdata/openssh.p521.enc.pem (0.49s)
+    --- PASS: TestParseKey/testdata/cosign.enc.pem (0.57s)
+    --- PASS: TestParseKey/testdata/openssl.p384.pem (0.01s)
+    --- PASS: TestParseKey/testdata/openssh.ed25519.enc.pem (0.41s)
     --- PASS: TestParseKey/testdata/openssh.ed25519.pem (0.00s)
+    --- PASS: TestParseKey/testdata/pkcs8/openssl.ed25519.enc.pem (0.01s)
+    --- PASS: TestParseKey/testdata/pkcs8/openssl.p521.pem (0.04s)
+    --- PASS: TestParseKey/testdata/openssl.p256.pem (0.00s)
+    --- PASS: TestParseKey/testdata/openssl.rsa1024.enc.pem (0.00s)
+    --- PASS: TestParseKey/testdata/openssh.rsa1024.pem (0.00s)
+    --- PASS: TestParseKey/testdata/pkcs8/openssl.rsa2048.pem (0.00s)
+    --- PASS: TestParseKey/testdata/cosign.pub.pem (0.00s)
     --- PASS: TestParseKey/testdata/nebula.pub (0.00s)
+    --- PASS: TestParseKey/testdata/openssl.p256.enc.pem (0.01s)
+    --- PASS: TestParseKey/testdata/openssh.rsa2048.enc.pem (0.42s)
+    --- PASS: TestParseKey/testdata/pkcs8/openssl.ed25519.pem (0.00s)
     --- PASS: TestParseKey/testdata/pkcs8/openssl.p384.enc.pem (0.01s)
-    --- PASS: TestParseKey/testdata/pkcs8/openssl.rsa2048.enc.pem (0.00s)
+    --- PASS: TestParseKey/testdata/openssl.rsa1024.pem (0.00s)
+    --- PASS: TestParseKey/testdata/pkcs8/openssl.p384.pub.pem (0.00s)
+    --- PASS: TestParseKey/testdata/pkcs8/openssl.p521.pub.pem (0.00s)
+    --- PASS: TestParseKey/testdata/openssl.p256.pub.pem (0.00s)
     --- PASS: TestParseKey/testdata/openssl.p521.pub.pem (0.00s)
-    --- PASS: TestParseKey/testdata/pkcs8/openssl.p256.enc.pem (0.00s)
+    --- PASS: TestParseKey/testdata/openssh.p521.pem (0.02s)
     --- PASS: TestParseKey/testdata/openssh.rsa2048.pem (0.00s)
-    --- PASS: TestParseKey/testdata/pkcs8/openssl.p256.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssl.p384.pub.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssl.p521.pem (0.01s)
-    --- PASS: TestParseKey/testdata/openssl.p521.enc.pem (0.01s)
-    --- PASS: TestParseKey/testdata/openssh.ed25519.enc.pem (0.21s)
-    --- PASS: TestParseKey/testdata/pkcs8/openssl.ed25519.pub.pem (0.00s)
-    --- PASS: TestParseKey/testdata/pkcs8/openssl.p521.pub.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssh.p521.enc.pem (0.21s)
+    --- PASS: TestParseKey/testdata/pkcs8/openssl.p256.pub.pem (0.00s)
     --- PASS: TestParseKey/testdata/pkcs8/openssl.p384.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssl.p256.pub.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssl.rsa1024.pub.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssl.rsa2048.pub.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssh.p384.pem (0.00s)
+    --- PASS: TestParseKey/testdata/pkcs8/openssl.rsa4096.pem (0.00s)
+    --- PASS: TestParseKey/testdata/openssl.p384.pub.pem (0.00s)
+    --- PASS: TestParseKey/testdata/openssl.rsa2048.pem (0.00s)
     --- PASS: TestParseKey/testdata/openssh.p384.enc.pem (0.21s)
-    --- PASS: TestParseKey/testdata/openssh.p256.enc.pem (0.20s)
-    --- PASS: TestParseKey/testdata/pkcs8/openssl.p521.enc.pem (0.01s)
-    --- PASS: TestParseKey/testdata/cosign.pub.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssl.p256.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssh.p521.pem (0.01s)
-    --- PASS: TestParseKey/testdata/nebula.key (0.00s)
-    --- PASS: TestParseKey/testdata/openssl.rsa1024.pem (0.00s)
-    --- PASS: TestParseKey/testdata/pkcs8/openssl.p256.pub.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssl.p256.enc.pem (0.00s)
-    --- PASS: TestParseKey/testdata/pkcs8/openssl.p521.pem (0.01s)
-    --- PASS: TestParseKey/testdata/cosign.enc.pem (0.15s)
-    --- PASS: TestParseKey/testdata/openssl.p384.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssh.rsa1024.enc.pem (0.20s)
     --- PASS: TestParseKey/testdata/pkcs8/openssl.rsa2048.pub.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssh.rsa2048.enc.pem (0.20s)
-    --- PASS: TestParseKey/testdata/pkcs8/openssl.ed25519.enc.pem (0.00s)
-    --- PASS: TestParseKey/testdata/pkcs8/openssl.p384.pub.pem (0.00s)
-    --- PASS: TestParseKey/testdata/pkcs8/openssl.rsa4096.pub.pem (0.00s)
+    --- PASS: TestParseKey/testdata/nebula.key (0.00s)
+    --- PASS: TestParseKey/testdata/openssl.rsa1024.pub.pem (0.00s)
+    --- PASS: TestParseKey/testdata/openssh.p256.enc.pem (0.22s)
+    --- PASS: TestParseKey/testdata/openssh.p384.pem (0.00s)
+    --- PASS: TestParseKey/testdata/pkcs8/openssl.p521.enc.pem (0.02s)
+    --- PASS: TestParseKey/testdata/openssl.p521.enc.pem (0.02s)
+    --- PASS: TestParseKey/testdata/pkcs8/openssl.p256.pem (0.00s)
+    --- PASS: TestParseKey/testdata/pkcs8/openssl.rsa2048.enc.pem (0.01s)
+    --- PASS: TestParseKey/testdata/pkcs8/openssl.ed25519.pub.pem (0.00s)
     --- PASS: TestParseKey/testdata/openssl.rsa2048.enc.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssh.rsa1024.pem (0.00s)
-    --- PASS: TestParseKey/testdata/pkcs8/openssl.rsa2048.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssl.rsa1024.enc.pem (0.00s)
-    --- PASS: TestParseKey/testdata/openssl.rsa2048.pem (0.00s)
     --- PASS: TestParseKey/testdata/openssh.p256.pem (0.00s)
-    --- PASS: TestParseKey/testdata/pkcs8/openssl.ed25519.pem (0.00s)
-    --- PASS: TestParseKey/testdata/pkcs8/openssl.rsa4096.pem (0.00s)
+    --- PASS: TestParseKey/testdata/pkcs8/openssl.p256.enc.pem (0.01s)
+    --- PASS: TestParseKey/testdata/openssl.p384.enc.pem (0.00s)
+    --- PASS: TestParseKey/testdata/openssh.rsa1024.enc.pem (0.23s)
+    --- PASS: TestParseKey/testdata/openssl.rsa2048.pub.pem (0.00s)
+    --- PASS: TestParseKey/testdata/openssl.p521.pem (0.02s)
 === RUN   TestParseKey_x509
 --- PASS: TestParseKey_x509 (0.00s)
 === RUN   TestParseSSH
+=== RUN   TestParseSSH/testdata/openssh.p521.pub.pem
+=== RUN   TestParseSSH/testdata/openssh.ed25519.pub.pem
 === RUN   TestParseSSH/testdata/openssh.p256.pub.pem
 === RUN   TestParseSSH/testdata/openssh.p384.pub.pem
-=== RUN   TestParseSSH/testdata/openssh.ed25519.pub.pem
 === RUN   TestParseSSH/testdata/openssh.rsa1024.pub.pem
 === RUN   TestParseSSH/testdata/openssh.rsa2048.pub.pem
-=== RUN   TestParseSSH/testdata/openssh.p521.pub.pem
 --- PASS: TestParseSSH (0.00s)
+    --- PASS: TestParseSSH/testdata/openssh.p521.pub.pem (0.00s)
+    --- PASS: TestParseSSH/testdata/openssh.ed25519.pub.pem (0.00s)
     --- PASS: TestParseSSH/testdata/openssh.p256.pub.pem (0.00s)
     --- PASS: TestParseSSH/testdata/openssh.p384.pub.pem (0.00s)
-    --- PASS: TestParseSSH/testdata/openssh.ed25519.pub.pem (0.00s)
     --- PASS: TestParseSSH/testdata/openssh.rsa1024.pub.pem (0.00s)
     --- PASS: TestParseSSH/testdata/openssh.rsa2048.pub.pem (0.00s)
-    --- PASS: TestParseSSH/testdata/openssh.p521.pub.pem (0.00s)
 === RUN   TestOpenSSH
 === PAUSE TestOpenSSH
 === RUN   TestRead_options
@@ -2263,7 +2306,7 @@
 === RUN   TestRead_options/withPasswordError
 === RUN   TestRead_options/withPasswordFileError
 === RUN   TestRead_options/withPasswordPromptError
---- PASS: TestRead_options (0.00s)
+--- PASS: TestRead_options (0.01s)
     --- PASS: TestRead_options/withPassword (0.00s)
     --- PASS: TestRead_options/withPasswordFile (0.00s)
     --- PASS: TestRead_options/withPasswordPrompt (0.00s)
@@ -2317,239 +2360,239 @@
     --- PASS: TestSerialize_PKCS8/ed25519_pub (0.00s)
     --- PASS: TestSerialize_PKCS8/fail (0.00s)
 === RUN   TestDecryptPKCS8PrivateKey
-=== RUN   TestDecryptPKCS8PrivateKey/testdata/pkcs8/openssl.p521.enc.pem
-=== RUN   TestDecryptPKCS8PrivateKey/testdata/pkcs8/openssl.ed25519.enc.pem
 === RUN   TestDecryptPKCS8PrivateKey/testdata/pkcs8/openssl.p384.enc.pem
+=== RUN   TestDecryptPKCS8PrivateKey/testdata/pkcs8/openssl.p521.enc.pem
 === RUN   TestDecryptPKCS8PrivateKey/testdata/pkcs8/openssl.rsa2048.enc.pem
 === RUN   TestDecryptPKCS8PrivateKey/testdata/pkcs8/openssl.p256.enc.pem
---- PASS: TestDecryptPKCS8PrivateKey (0.04s)
-    --- PASS: TestDecryptPKCS8PrivateKey/testdata/pkcs8/openssl.p521.enc.pem (0.02s)
-    --- PASS: TestDecryptPKCS8PrivateKey/testdata/pkcs8/openssl.ed25519.enc.pem (0.01s)
+=== RUN   TestDecryptPKCS8PrivateKey/testdata/pkcs8/openssl.ed25519.enc.pem
+--- PASS: TestDecryptPKCS8PrivateKey (0.07s)
     --- PASS: TestDecryptPKCS8PrivateKey/testdata/pkcs8/openssl.p384.enc.pem (0.01s)
+    --- PASS: TestDecryptPKCS8PrivateKey/testdata/pkcs8/openssl.p521.enc.pem (0.03s)
     --- PASS: TestDecryptPKCS8PrivateKey/testdata/pkcs8/openssl.rsa2048.enc.pem (0.01s)
     --- PASS: TestDecryptPKCS8PrivateKey/testdata/pkcs8/openssl.p256.enc.pem (0.01s)
+    --- PASS: TestDecryptPKCS8PrivateKey/testdata/pkcs8/openssl.ed25519.enc.pem (0.01s)
 === RUN   TestDecryptPKCS8PrivateKey_ciphers
 === RUN   TestDecryptPKCS8PrivateKey_ciphers/DES-CBC
 === RUN   TestDecryptPKCS8PrivateKey_ciphers/DES-EDE3-CBC
 === RUN   TestDecryptPKCS8PrivateKey_ciphers/AES-128-CBC
 === RUN   TestDecryptPKCS8PrivateKey_ciphers/AES-192-CBC
 === RUN   TestDecryptPKCS8PrivateKey_ciphers/AES-256-CBC
---- PASS: TestDecryptPKCS8PrivateKey_ciphers (2.21s)
-    --- PASS: TestDecryptPKCS8PrivateKey_ciphers/DES-CBC (0.44s)
-    --- PASS: TestDecryptPKCS8PrivateKey_ciphers/DES-EDE3-CBC (0.44s)
-    --- PASS: TestDecryptPKCS8PrivateKey_ciphers/AES-128-CBC (0.44s)
-    --- PASS: TestDecryptPKCS8PrivateKey_ciphers/AES-192-CBC (0.44s)
-    --- PASS: TestDecryptPKCS8PrivateKey_ciphers/AES-256-CBC (0.44s)
+--- PASS: TestDecryptPKCS8PrivateKey_ciphers (6.05s)
+    --- PASS: TestDecryptPKCS8PrivateKey_ciphers/DES-CBC (0.89s)
+    --- PASS: TestDecryptPKCS8PrivateKey_ciphers/DES-EDE3-CBC (1.49s)
+    --- PASS: TestDecryptPKCS8PrivateKey_ciphers/AES-128-CBC (1.27s)
+    --- PASS: TestDecryptPKCS8PrivateKey_ciphers/AES-192-CBC (1.24s)
+    --- PASS: TestDecryptPKCS8PrivateKey_ciphers/AES-256-CBC (1.16s)
 === CONT  TestOpenSSH
-=== RUN   TestOpenSSH/testdata/openssh.p256.enc.pem
-=== CONT  TestEncryptDecryptPKCS8
-=== RUN   TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p384.pem
-=== PAUSE TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p384.pem
-=== RUN   TestEncryptDecryptPKCS8/testdata/openssh.p384.pem
-=== PAUSE TestEncryptDecryptPKCS8/testdata/openssh.p384.pem
-=== PAUSE TestOpenSSH/testdata/openssh.p256.enc.pem
-=== RUN   TestEncryptDecryptPKCS8/testdata/openssl.p256.pem
-=== PAUSE TestEncryptDecryptPKCS8/testdata/openssl.p256.pem
-=== RUN   TestOpenSSH/testdata/pkcs8/openssl.p521.enc.pem
-=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.p521.enc.pem
-=== RUN   TestEncryptDecryptPKCS8/testdata/openssh.p521.pem
-=== PAUSE TestEncryptDecryptPKCS8/testdata/openssh.p521.pem
-=== RUN   TestOpenSSH/testdata/openssl.p256.pem
-=== RUN   TestEncryptDecryptPKCS8/testdata/openssl.rsa1024.pem
-=== PAUSE TestEncryptDecryptPKCS8/testdata/openssl.rsa1024.pem
-=== PAUSE TestOpenSSH/testdata/openssl.p256.pem
-=== RUN   TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p521.pem
-=== RUN   TestOpenSSH/testdata/openssh.p521.pem
-=== PAUSE TestOpenSSH/testdata/openssh.p521.pem
-=== PAUSE TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p521.pem
-=== RUN   TestOpenSSH/testdata/openssl.rsa1024.pem
-=== PAUSE TestOpenSSH/testdata/openssl.rsa1024.pem
-=== RUN   TestOpenSSH/testdata/openssl.p256.enc.pem
-=== PAUSE TestOpenSSH/testdata/openssl.p256.enc.pem
-=== RUN   TestOpenSSH/testdata/pkcs8/openssl.p521.pem
-=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.p521.pem
+=== RUN   TestOpenSSH/testdata/openssh.rsa1024.enc.pem
+=== PAUSE TestOpenSSH/testdata/openssh.rsa1024.enc.pem
+=== RUN   TestOpenSSH/testdata/openssl.p521.pem
+=== PAUSE TestOpenSSH/testdata/openssl.p521.pem
+=== RUN   TestOpenSSH/testdata/openssh.p521.enc.pem
+=== PAUSE TestOpenSSH/testdata/openssh.p521.enc.pem
 === RUN   TestOpenSSH/testdata/cosign.enc.pem
 === PAUSE TestOpenSSH/testdata/cosign.enc.pem
+=== RUN   TestOpenSSH/testdata/openssl.p256.pem
+=== PAUSE TestOpenSSH/testdata/openssl.p256.pem
 === RUN   TestOpenSSH/testdata/openssl.p384.pem
 === PAUSE TestOpenSSH/testdata/openssl.p384.pem
-=== RUN   TestOpenSSH/testdata/openssh.rsa1024.enc.pem
-=== PAUSE TestOpenSSH/testdata/openssh.rsa1024.enc.pem
-=== RUN   TestOpenSSH/testdata/openssh.rsa2048.enc.pem
-=== PAUSE TestOpenSSH/testdata/openssh.rsa2048.enc.pem
+=== RUN   TestOpenSSH/testdata/openssh.ed25519.enc.pem
+=== PAUSE TestOpenSSH/testdata/openssh.ed25519.enc.pem
+=== RUN   TestOpenSSH/testdata/openssh.ed25519.pem
+=== PAUSE TestOpenSSH/testdata/openssh.ed25519.pem
 === RUN   TestOpenSSH/testdata/pkcs8/openssl.ed25519.enc.pem
 === PAUSE TestOpenSSH/testdata/pkcs8/openssl.ed25519.enc.pem
-=== RUN   TestOpenSSH/testdata/openssl.rsa2048.enc.pem
-=== PAUSE TestOpenSSH/testdata/openssl.rsa2048.enc.pem
-=== RUN   TestEncryptDecryptPKCS8/testdata/openssl.p384.pem
+=== RUN   TestOpenSSH/testdata/pkcs8/openssl.p521.pem
+=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.p521.pem
+=== RUN   TestOpenSSH/testdata/openssl.p256.enc.pem
+=== PAUSE TestOpenSSH/testdata/openssl.p256.enc.pem
+=== RUN   TestOpenSSH/testdata/openssl.rsa1024.enc.pem
+=== PAUSE TestOpenSSH/testdata/openssl.rsa1024.enc.pem
 === RUN   TestOpenSSH/testdata/openssh.rsa1024.pem
-=== PAUSE TestEncryptDecryptPKCS8/testdata/openssl.p384.pem
 === PAUSE TestOpenSSH/testdata/openssh.rsa1024.pem
+=== RUN   TestOpenSSH/testdata/pkcs8/openssl.rsa2048.pem
+=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.rsa2048.pem
+=== RUN   TestOpenSSH/testdata/openssh.rsa2048.enc.pem
+=== PAUSE TestOpenSSH/testdata/openssh.rsa2048.enc.pem
+=== RUN   TestOpenSSH/testdata/pkcs8/openssl.ed25519.pem
+=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.ed25519.pem
+=== RUN   TestOpenSSH/testdata/openssl.rsa1024.pem
+=== PAUSE TestOpenSSH/testdata/openssl.rsa1024.pem
+=== RUN   TestOpenSSH/testdata/pkcs8/openssl.p384.enc.pem
+=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.p384.enc.pem
+=== RUN   TestOpenSSH/testdata/pkcs8/openssl.rsa4096.pem
+=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.rsa4096.pem
+=== RUN   TestOpenSSH/testdata/openssh.p521.pem
+=== PAUSE TestOpenSSH/testdata/openssh.p521.pem
+=== RUN   TestOpenSSH/testdata/openssh.rsa2048.pem
+=== PAUSE TestOpenSSH/testdata/openssh.rsa2048.pem
+=== RUN   TestOpenSSH/testdata/pkcs8/openssl.p384.pem
+=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.p384.pem
+=== RUN   TestOpenSSH/testdata/openssl.rsa2048.pem
+=== PAUSE TestOpenSSH/testdata/openssl.rsa2048.pem
+=== RUN   TestOpenSSH/testdata/openssh.p384.enc.pem
+=== PAUSE TestOpenSSH/testdata/openssh.p384.enc.pem
+=== RUN   TestOpenSSH/testdata/openssh.p256.enc.pem
+=== PAUSE TestOpenSSH/testdata/openssh.p256.enc.pem
+=== RUN   TestOpenSSH/testdata/openssl.p521.enc.pem
+=== PAUSE TestOpenSSH/testdata/openssl.p521.enc.pem
+=== RUN   TestOpenSSH/testdata/openssh.p384.pem
+=== PAUSE TestOpenSSH/testdata/openssh.p384.pem
+=== RUN   TestOpenSSH/testdata/pkcs8/openssl.p521.enc.pem
+=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.p521.enc.pem
+=== RUN   TestOpenSSH/testdata/pkcs8/openssl.p256.pem
+=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.p256.pem
+=== RUN   TestOpenSSH/testdata/pkcs8/openssl.rsa2048.enc.pem
+=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.rsa2048.enc.pem
+=== RUN   TestOpenSSH/testdata/openssl.p384.enc.pem
+=== PAUSE TestOpenSSH/testdata/openssl.p384.enc.pem
+=== RUN   TestOpenSSH/testdata/openssl.rsa2048.enc.pem
+=== PAUSE TestOpenSSH/testdata/openssl.rsa2048.enc.pem
+=== RUN   TestOpenSSH/testdata/openssh.p256.pem
+=== PAUSE TestOpenSSH/testdata/openssh.p256.pem
+=== RUN   TestOpenSSH/testdata/pkcs8/openssl.p256.enc.pem
+=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.p256.enc.pem
+=== CONT  TestOpenSSH/testdata/openssh.rsa1024.enc.pem
+=== CONT  TestOpenSSH/testdata/pkcs8/openssl.rsa4096.pem
+=== CONT  TestEncryptDecryptPKCS8
 === RUN   TestEncryptDecryptPKCS8/testdata/openssh.rsa1024.pem
 === PAUSE TestEncryptDecryptPKCS8/testdata/openssh.rsa1024.pem
 === RUN   TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.rsa2048.pem
 === PAUSE TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.rsa2048.pem
-=== RUN   TestEncryptDecryptPKCS8/testdata/openssl.rsa2048.pem
-=== RUN   TestOpenSSH/testdata/openssl.rsa1024.enc.pem
-=== PAUSE TestEncryptDecryptPKCS8/testdata/openssl.rsa2048.pem
-=== PAUSE TestOpenSSH/testdata/openssl.rsa1024.enc.pem
-=== RUN   TestEncryptDecryptPKCS8/testdata/openssh.p256.pem
-=== RUN   TestOpenSSH/testdata/openssl.rsa2048.pem
-=== PAUSE TestEncryptDecryptPKCS8/testdata/openssh.p256.pem
-=== PAUSE TestOpenSSH/testdata/openssl.rsa2048.pem
 === RUN   TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.ed25519.pem
 === PAUSE TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.ed25519.pem
-=== RUN   TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.rsa4096.pem
-=== PAUSE TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.rsa4096.pem
-=== RUN   TestOpenSSH/testdata/openssh.p256.pem
-=== RUN   TestEncryptDecryptPKCS8/testdata/openssh.ed25519.pem
-=== PAUSE TestEncryptDecryptPKCS8/testdata/openssh.ed25519.pem
+=== RUN   TestEncryptDecryptPKCS8/testdata/openssl.rsa1024.pem
+=== PAUSE TestEncryptDecryptPKCS8/testdata/openssl.rsa1024.pem
+=== RUN   TestEncryptDecryptPKCS8/testdata/openssh.p521.pem
+=== PAUSE TestEncryptDecryptPKCS8/testdata/openssh.p521.pem
 === RUN   TestEncryptDecryptPKCS8/testdata/openssh.rsa2048.pem
 === PAUSE TestEncryptDecryptPKCS8/testdata/openssh.rsa2048.pem
+=== RUN   TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p384.pem
+=== PAUSE TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p384.pem
+=== RUN   TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.rsa4096.pem
+=== PAUSE TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.rsa4096.pem
+=== RUN   TestEncryptDecryptPKCS8/testdata/openssl.rsa2048.pem
+=== PAUSE TestEncryptDecryptPKCS8/testdata/openssl.rsa2048.pem
+=== RUN   TestEncryptDecryptPKCS8/testdata/openssh.p384.pem
+=== PAUSE TestEncryptDecryptPKCS8/testdata/openssh.p384.pem
 === RUN   TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p256.pem
 === PAUSE TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p256.pem
+=== RUN   TestEncryptDecryptPKCS8/testdata/openssh.p256.pem
+=== PAUSE TestEncryptDecryptPKCS8/testdata/openssh.p256.pem
 === RUN   TestEncryptDecryptPKCS8/testdata/openssl.p521.pem
 === PAUSE TestEncryptDecryptPKCS8/testdata/openssl.p521.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p384.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/openssl.rsa2048.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p521.pem
+=== RUN   TestEncryptDecryptPKCS8/testdata/openssl.p384.pem
+=== PAUSE TestEncryptDecryptPKCS8/testdata/openssl.p384.pem
+=== RUN   TestEncryptDecryptPKCS8/testdata/openssh.ed25519.pem
+=== PAUSE TestEncryptDecryptPKCS8/testdata/openssh.ed25519.pem
+=== RUN   TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p521.pem
+=== PAUSE TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p521.pem
+=== RUN   TestEncryptDecryptPKCS8/testdata/openssl.p256.pem
+=== PAUSE TestEncryptDecryptPKCS8/testdata/openssl.p256.pem
 === CONT  TestEncryptDecryptPKCS8/testdata/openssh.rsa1024.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/openssh.ed25519.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/openssl.p256.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/openssh.p384.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.ed25519.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/openssh.p256.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.rsa2048.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/openssl.p384.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/openssh.rsa2048.pem
-=== PAUSE TestOpenSSH/testdata/openssh.p256.pem
-=== RUN   TestOpenSSH/testdata/pkcs8/openssl.ed25519.pem
-=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.ed25519.pem
-=== RUN   TestOpenSSH/testdata/pkcs8/openssl.rsa2048.pem
-=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.rsa2048.pem
-=== RUN   TestOpenSSH/testdata/pkcs8/openssl.rsa4096.pem
-=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.rsa4096.pem
-=== RUN   TestOpenSSH/testdata/openssl.p384.enc.pem
-=== PAUSE TestOpenSSH/testdata/openssl.p384.enc.pem
-=== RUN   TestOpenSSH/testdata/openssh.ed25519.pem
-=== PAUSE TestOpenSSH/testdata/openssh.ed25519.pem
-=== RUN   TestOpenSSH/testdata/pkcs8/openssl.p384.enc.pem
-=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.p384.enc.pem
-=== RUN   TestOpenSSH/testdata/pkcs8/openssl.rsa2048.enc.pem
-=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.rsa2048.enc.pem
-=== RUN   TestOpenSSH/testdata/pkcs8/openssl.p256.enc.pem
-=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.p256.enc.pem
-=== RUN   TestOpenSSH/testdata/openssl.p521.pem
-=== PAUSE TestOpenSSH/testdata/openssl.p521.pem
-=== RUN   TestOpenSSH/testdata/openssl.p521.enc.pem
-=== PAUSE TestOpenSSH/testdata/openssl.p521.enc.pem
-=== RUN   TestOpenSSH/testdata/openssh.ed25519.enc.pem
-=== PAUSE TestOpenSSH/testdata/openssh.ed25519.enc.pem
-=== RUN   TestOpenSSH/testdata/openssh.rsa2048.pem
-=== PAUSE TestOpenSSH/testdata/openssh.rsa2048.pem
-=== RUN   TestOpenSSH/testdata/pkcs8/openssl.p256.pem
-=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.p256.pem
-=== RUN   TestOpenSSH/testdata/openssh.p521.enc.pem
-=== PAUSE TestOpenSSH/testdata/openssh.p521.enc.pem
-=== RUN   TestOpenSSH/testdata/openssh.p384.pem
-=== PAUSE TestOpenSSH/testdata/openssh.p384.pem
-=== RUN   TestOpenSSH/testdata/pkcs8/openssl.p384.pem
-=== PAUSE TestOpenSSH/testdata/pkcs8/openssl.p384.pem
-=== RUN   TestOpenSSH/testdata/openssh.p384.enc.pem
-=== PAUSE TestOpenSSH/testdata/openssh.p384.enc.pem
-=== CONT  TestOpenSSH/testdata/openssh.p256.enc.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/openssl.p521.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p256.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/openssh.p521.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/openssl.rsa1024.pem
-=== CONT  TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.rsa4096.pem
-=== CONT  TestOpenSSH/testdata/pkcs8/openssl.ed25519.pem
-=== CONT  TestOpenSSH/testdata/openssh.p384.enc.pem
-=== CONT  TestOpenSSH/testdata/pkcs8/openssl.p384.pem
-=== CONT  TestOpenSSH/testdata/openssh.p384.pem
-=== CONT  TestOpenSSH/testdata/openssh.p521.enc.pem
-=== CONT  TestOpenSSH/testdata/pkcs8/openssl.p256.pem
-=== CONT  TestOpenSSH/testdata/openssh.rsa2048.pem
-=== CONT  TestOpenSSH/testdata/openssh.ed25519.enc.pem
-=== CONT  TestOpenSSH/testdata/openssl.p521.enc.pem
-=== CONT  TestOpenSSH/testdata/openssl.p521.pem
+=== CONT  TestOpenSSH/testdata/pkcs8/openssl.p521.pem
+=== CONT  TestOpenSSH/testdata/openssh.rsa2048.enc.pem
 === CONT  TestOpenSSH/testdata/pkcs8/openssl.p256.enc.pem
-=== CONT  TestOpenSSH/testdata/pkcs8/openssl.rsa2048.enc.pem
+=== CONT  TestOpenSSH/testdata/pkcs8/openssl.ed25519.enc.pem
+=== CONT  TestOpenSSH/testdata/pkcs8/openssl.rsa2048.pem
+=== CONT  TestOpenSSH/testdata/openssh.rsa1024.pem
+=== CONT  TestOpenSSH/testdata/openssl.rsa1024.enc.pem
 === CONT  TestOpenSSH/testdata/pkcs8/openssl.p384.enc.pem
 === CONT  TestOpenSSH/testdata/openssh.ed25519.pem
-=== CONT  TestOpenSSH/testdata/openssl.p384.enc.pem
-=== CONT  TestOpenSSH/testdata/pkcs8/openssl.rsa4096.pem
-=== CONT  TestOpenSSH/testdata/pkcs8/openssl.rsa2048.pem
-=== CONT  TestOpenSSH/testdata/openssh.rsa1024.enc.pem
+=== CONT  TestOpenSSH/testdata/openssh.ed25519.enc.pem
 === CONT  TestOpenSSH/testdata/openssh.p256.pem
-=== CONT  TestOpenSSH/testdata/openssl.rsa2048.pem
-=== CONT  TestOpenSSH/testdata/openssl.rsa1024.enc.pem
-=== CONT  TestOpenSSH/testdata/openssh.rsa1024.pem
 === CONT  TestOpenSSH/testdata/openssl.rsa2048.enc.pem
-=== CONT  TestOpenSSH/testdata/pkcs8/openssl.ed25519.enc.pem
-=== CONT  TestOpenSSH/testdata/openssh.rsa2048.enc.pem
+=== CONT  TestOpenSSH/testdata/openssl.rsa1024.pem
+=== CONT  TestOpenSSH/testdata/pkcs8/openssl.ed25519.pem
 === CONT  TestOpenSSH/testdata/openssl.p256.enc.pem
 === CONT  TestOpenSSH/testdata/openssl.p384.pem
-=== CONT  TestOpenSSH/testdata/cosign.enc.pem
-=== CONT  TestOpenSSH/testdata/pkcs8/openssl.p521.pem
-=== CONT  TestOpenSSH/testdata/openssh.p521.pem
-=== CONT  TestOpenSSH/testdata/openssl.rsa1024.pem
 === CONT  TestOpenSSH/testdata/openssl.p256.pem
+=== CONT  TestOpenSSH/testdata/cosign.enc.pem
+=== CONT  TestOpenSSH/testdata/openssh.p521.enc.pem
+=== CONT  TestOpenSSH/testdata/openssl.p521.pem
+=== CONT  TestOpenSSH/testdata/openssl.p384.enc.pem
+=== CONT  TestOpenSSH/testdata/pkcs8/openssl.rsa2048.enc.pem
+=== CONT  TestOpenSSH/testdata/pkcs8/openssl.p256.pem
 === CONT  TestOpenSSH/testdata/pkcs8/openssl.p521.enc.pem
---- PASS: TestEncryptDecryptPKCS8 (0.00s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p521.pem (2.69s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/openssh.rsa2048.pem (2.77s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/openssh.rsa1024.pem (2.91s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/openssh.p256.pem (3.00s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/openssh.ed25519.pem (3.07s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p384.pem (3.09s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/openssl.rsa2048.pem (3.10s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.ed25519.pem (3.13s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/openssl.rsa1024.pem (3.11s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.rsa2048.pem (3.36s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/openssl.p256.pem (3.37s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/openssh.p521.pem (3.33s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/openssl.p521.pem (3.45s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/openssl.p384.pem (3.55s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p256.pem (3.58s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/openssh.p384.pem (3.86s)
-    --- PASS: TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.rsa4096.pem (4.00s)
---- PASS: TestOpenSSH (0.01s)
-    --- PASS: TestOpenSSH/testdata/openssh.p256.enc.pem (1.10s)
-    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.ed25519.pem (0.00s)
-    --- PASS: TestOpenSSH/testdata/openssh.p384.enc.pem (1.28s)
-    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.p384.pem (0.01s)
-    --- PASS: TestOpenSSH/testdata/openssh.p384.pem (0.01s)
-    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.p256.pem (0.01s)
-    --- PASS: TestOpenSSH/testdata/openssh.rsa2048.pem (0.00s)
-    --- PASS: TestOpenSSH/testdata/openssl.p521.pem (0.05s)
-    --- PASS: TestOpenSSH/testdata/openssh.ed25519.pem (0.00s)
+=== CONT  TestOpenSSH/testdata/openssh.p384.pem
+=== CONT  TestOpenSSH/testdata/openssl.p521.enc.pem
+=== CONT  TestOpenSSH/testdata/openssh.p256.enc.pem
+=== CONT  TestOpenSSH/testdata/openssh.p384.enc.pem
+=== CONT  TestOpenSSH/testdata/openssl.rsa2048.pem
+=== CONT  TestOpenSSH/testdata/pkcs8/openssl.p384.pem
+=== CONT  TestOpenSSH/testdata/openssh.rsa2048.pem
+=== CONT  TestOpenSSH/testdata/openssh.p521.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/openssl.p256.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p521.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/openssh.ed25519.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/openssl.p384.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/openssl.p521.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/openssh.p256.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p256.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/openssh.p384.pem
+--- PASS: TestOpenSSH (0.00s)
     --- PASS: TestOpenSSH/testdata/pkcs8/openssl.rsa4096.pem (0.00s)
     --- PASS: TestOpenSSH/testdata/pkcs8/openssl.rsa2048.pem (0.00s)
+    --- PASS: TestOpenSSH/testdata/openssh.rsa1024.pem (0.00s)
+    --- PASS: TestOpenSSH/testdata/openssh.ed25519.pem (0.00s)
     --- PASS: TestOpenSSH/testdata/openssh.p256.pem (0.00s)
+    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.p521.pem (0.15s)
+    --- PASS: TestOpenSSH/testdata/openssl.rsa1024.pem (0.01s)
+    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.ed25519.pem (0.00s)
+    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.ed25519.enc.pem (2.27s)
+    --- PASS: TestOpenSSH/testdata/openssl.p384.pem (0.02s)
+    --- PASS: TestOpenSSH/testdata/openssl.p256.pem (0.01s)
+    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.p384.enc.pem (2.30s)
+    --- PASS: TestOpenSSH/testdata/openssh.ed25519.enc.pem (2.41s)
+    --- PASS: TestOpenSSH/testdata/openssl.rsa1024.enc.pem (2.43s)
+    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.p256.enc.pem (2.54s)
+    --- PASS: TestOpenSSH/testdata/openssl.rsa2048.enc.pem (2.52s)
+    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.p256.pem (0.02s)
+    --- PASS: TestOpenSSH/testdata/openssl.p521.pem (0.18s)
+    --- PASS: TestOpenSSH/testdata/openssh.p384.pem (0.05s)
+    --- PASS: TestOpenSSH/testdata/openssl.p256.enc.pem (2.62s)
+    --- PASS: TestOpenSSH/testdata/openssh.rsa1024.enc.pem (2.90s)
+    --- PASS: TestOpenSSH/testdata/openssh.rsa2048.enc.pem (3.24s)
     --- PASS: TestOpenSSH/testdata/openssl.rsa2048.pem (0.00s)
-    --- PASS: TestOpenSSH/testdata/openssh.rsa1024.pem (0.00s)
-    --- PASS: TestOpenSSH/testdata/openssl.p384.pem (0.01s)
-    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.p521.pem (0.05s)
-    --- PASS: TestOpenSSH/testdata/openssl.rsa1024.pem (0.00s)
-    --- PASS: TestOpenSSH/testdata/openssl.p256.pem (0.00s)
-    --- PASS: TestOpenSSH/testdata/openssh.p521.pem (0.05s)
-    --- PASS: TestOpenSSH/testdata/openssh.p521.enc.pem (1.40s)
-    --- PASS: TestOpenSSH/testdata/openssl.p521.enc.pem (1.07s)
-    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.rsa2048.enc.pem (0.94s)
-    --- PASS: TestOpenSSH/testdata/openssh.ed25519.enc.pem (1.31s)
-    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.p256.enc.pem (1.06s)
-    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.p384.enc.pem (0.98s)
-    --- PASS: TestOpenSSH/testdata/openssl.rsa1024.enc.pem (0.95s)
-    --- PASS: TestOpenSSH/testdata/openssl.rsa2048.enc.pem (0.95s)
-    --- PASS: TestOpenSSH/testdata/openssl.p384.enc.pem (1.11s)
-    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.ed25519.enc.pem (0.90s)
-    --- PASS: TestOpenSSH/testdata/openssl.p256.enc.pem (0.94s)
-    --- PASS: TestOpenSSH/testdata/openssh.rsa1024.enc.pem (1.35s)
-    --- PASS: TestOpenSSH/testdata/openssh.rsa2048.enc.pem (1.10s)
-    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.p521.enc.pem (0.92s)
-    --- PASS: TestOpenSSH/testdata/cosign.enc.pem (1.28s)
+    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.p384.pem (0.05s)
+    --- PASS: TestOpenSSH/testdata/openssh.rsa2048.pem (0.00s)
+    --- PASS: TestOpenSSH/testdata/openssh.p521.pem (0.17s)
+    --- PASS: TestOpenSSH/testdata/openssl.p384.enc.pem (2.54s)
+    --- PASS: TestOpenSSH/testdata/openssh.p256.enc.pem (2.23s)
+    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.rsa2048.enc.pem (2.55s)
+    --- PASS: TestOpenSSH/testdata/openssh.p521.enc.pem (2.88s)
+    --- PASS: TestOpenSSH/testdata/cosign.enc.pem (2.90s)
+    --- PASS: TestOpenSSH/testdata/pkcs8/openssl.p521.enc.pem (2.66s)
+    --- PASS: TestOpenSSH/testdata/openssl.p521.enc.pem (2.64s)
+    --- PASS: TestOpenSSH/testdata/openssh.p384.enc.pem (2.68s)
+=== CONT  TestEncryptDecryptPKCS8/testdata/openssl.rsa2048.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.rsa4096.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p384.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/openssh.rsa2048.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/openssh.p521.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/openssl.rsa1024.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.ed25519.pem
+=== CONT  TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.rsa2048.pem
+--- PASS: TestEncryptDecryptPKCS8 (0.00s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/openssh.rsa1024.pem (6.10s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/openssl.p256.pem (6.87s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/openssl.p384.pem (5.69s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/openssh.ed25519.pem (5.98s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/openssh.p256.pem (5.82s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p521.pem (6.30s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/openssl.rsa2048.pem (5.76s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.rsa4096.pem (5.44s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/openssh.p384.pem (6.42s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p256.pem (6.55s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/openssl.p521.pem (6.90s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/openssl.rsa1024.pem (5.04s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.p384.pem (5.90s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.rsa2048.pem (4.91s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/openssh.rsa2048.pem (5.52s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/pkcs8/openssl.ed25519.pem (5.21s)
+    --- PASS: TestEncryptDecryptPKCS8/testdata/openssh.p521.pem (5.72s)
 PASS
-ok  	go.step.sm/crypto/pemutil	14.595s
+ok  	go.step.sm/crypto/pemutil	44.369s
 === RUN   TestErrors
 --- PASS: TestErrors (0.00s)
 === RUN   TestSalt
@@ -2575,7 +2618,7 @@
     --- PASS: TestUUIDv4/ok#01 (0.00s)
     --- PASS: TestUUIDv4/fail (0.00s)
 PASS
-ok  	go.step.sm/crypto/randutil	0.005s
+ok  	go.step.sm/crypto/randutil	0.056s
 === RUN   TestNewCertificate
 === RUN   TestNewCertificate/user
 === RUN   TestNewCertificate/host
@@ -2588,12 +2631,12 @@
 === RUN   TestNewCertificate/badFileTemplate
 === RUN   TestNewCertificate/badJsonTemplate
 === RUN   TestNewCertificate/failTemplate
---- PASS: TestNewCertificate (0.02s)
+--- PASS: TestNewCertificate (0.07s)
     --- PASS: TestNewCertificate/user (0.00s)
     --- PASS: TestNewCertificate/host (0.00s)
     --- PASS: TestNewCertificate/host_escape (0.00s)
     --- PASS: TestNewCertificate/file (0.00s)
-    --- PASS: TestNewCertificate/base64 (0.00s)
+    --- PASS: TestNewCertificate/base64 (0.01s)
     --- PASS: TestNewCertificate/failNilOptions (0.00s)
     --- PASS: TestNewCertificate/failEmptyOptions (0.00s)
     --- PASS: TestNewCertificate/badBase64Template (0.00s)
@@ -2613,11 +2656,11 @@
 === RUN   TestCreateCertificate/emptySerial
 === RUN   TestCreateCertificate/fail_signer.Sign
 === RUN   TestCreateCertificate/fail_signer.SignWithAlgorithm
---- PASS: TestCreateCertificate (2.03s)
-    --- PASS: TestCreateCertificate/ok (0.01s)
-    --- PASS: TestCreateCertificate/ok_rsa (0.02s)
-    --- PASS: TestCreateCertificate/emptyNonce (0.00s)
-    --- PASS: TestCreateCertificate/emptySerial (0.00s)
+--- PASS: TestCreateCertificate (9.61s)
+    --- PASS: TestCreateCertificate/ok (0.02s)
+    --- PASS: TestCreateCertificate/ok_rsa (0.04s)
+    --- PASS: TestCreateCertificate/emptyNonce (0.01s)
+    --- PASS: TestCreateCertificate/emptySerial (0.01s)
     --- PASS: TestCreateCertificate/fail_signer.Sign (0.00s)
     --- PASS: TestCreateCertificate/fail_signer.SignWithAlgorithm (0.00s)
 === RUN   TestFingerprint
@@ -2627,7 +2670,7 @@
 === RUN   TestFingerprint/ok_SK-ECDSA
 === RUN   TestFingerprint/ok_SK-ED25519
 === RUN   TestFingerprint/ok_CERT
---- PASS: TestFingerprint (0.53s)
+--- PASS: TestFingerprint (4.03s)
     --- PASS: TestFingerprint/ok_ECDSA (0.00s)
     --- PASS: TestFingerprint/ok_ED25519 (0.00s)
     --- PASS: TestFingerprint/ok_RSA (0.00s)
@@ -2643,7 +2686,7 @@
 === RUN   TestEncodedFingerprint/HexFingerprint
 === RUN   TestEncodedFingerprint/EmojiFingerprint
 === RUN   TestEncodedFingerprint/fail
---- PASS: TestEncodedFingerprint (0.00s)
+--- PASS: TestEncodedFingerprint (0.01s)
     --- PASS: TestEncodedFingerprint/default (0.00s)
     --- PASS: TestEncodedFingerprint/Base64RawFingerprint (0.00s)
     --- PASS: TestEncodedFingerprint/Base64RawURLFingerprint (0.00s)
@@ -2670,7 +2713,7 @@
 === RUN   TestFormatFingerprint/EmojiFingerprint
 === RUN   TestFormatFingerprint/fail_input
 === RUN   TestFormatFingerprint/fail_encoding
---- PASS: TestFormatFingerprint (1.82s)
+--- PASS: TestFormatFingerprint (4.24s)
     --- PASS: TestFormatFingerprint/P256 (0.00s)
     --- PASS: TestFormatFingerprint/P384 (0.00s)
     --- PASS: TestFormatFingerprint/P521 (0.00s)
@@ -2706,7 +2749,7 @@
 === RUN   TestWithTemplate/fail
 === RUN   TestWithTemplate/failTemplate
 === RUN   TestWithTemplate/error
---- PASS: TestWithTemplate (0.00s)
+--- PASS: TestWithTemplate (0.01s)
     --- PASS: TestWithTemplate/user (0.00s)
     --- PASS: TestWithTemplate/host (0.00s)
     --- PASS: TestWithTemplate/fail (0.00s)
@@ -2737,7 +2780,7 @@
 === RUN   TestCryptoPublicKey/fail_agent
 === RUN   TestCryptoPublicKey/fail_type
 === RUN   TestCryptoPublicKey/fail_sk
---- PASS: TestCryptoPublicKey (1.11s)
+--- PASS: TestCryptoPublicKey (2.02s)
     --- PASS: TestCryptoPublicKey/ok_ec (0.00s)
     --- PASS: TestCryptoPublicKey/ok_Ed25519 (0.00s)
     --- PASS: TestCryptoPublicKey/ok_rsa (0.00s)
@@ -2939,7 +2982,7 @@
     --- PASS: TestCertType_UnmarshalJSON/object (0.00s)
     --- PASS: TestCertType_UnmarshalJSON/badJSON (0.00s)
 PASS
-ok  	go.step.sm/crypto/sshutil	5.526s
+ok  	go.step.sm/crypto/sshutil	20.062s
 === RUN   Test_newCredentialsCache
 === RUN   Test_newCredentialsCache/ok
 --- PASS: Test_newCredentialsCache (0.00s)
@@ -2977,8 +3020,8 @@
     --- PASS: TestNewRenewer/WithRenewJitter (0.00s)
     --- PASS: TestNewRenewer/fail (0.00s)
 === RUN   TestRenewer_Run
-    renewer_test.go:228: Renewer.Run() run 1 times
---- PASS: TestRenewer_Run (2.00s)
+    renewer_test.go:228: Renewer.Run() run 2 times
+--- PASS: TestRenewer_Run (2.01s)
 === RUN   TestRenewer_RunContext
     renewer_test.go:254: Renewer.RunContext() run 1 times
 --- PASS: TestRenewer_RunContext (2.00s)
@@ -2992,36 +3035,36 @@
 === RUN   TestRenewer_GetCertificate/ok
 === RUN   TestRenewer_GetCertificate/fail_empty
 === RUN   TestRenewer_GetCertificate/fail_httptest
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:50566: remote error: tls: bad certificate
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:50570: remote error: tls: bad certificate
---- PASS: TestRenewer_GetCertificate (0.04s)
-    --- PASS: TestRenewer_GetCertificate/ok (0.02s)
-    --- PASS: TestRenewer_GetCertificate/fail_empty (0.01s)
-    --- PASS: TestRenewer_GetCertificate/fail_httptest (0.01s)
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:39890: remote error: tls: bad certificate
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:39904: read tcp 127.0.0.1:42689->127.0.0.1:39904: use of closed network connection
+--- PASS: TestRenewer_GetCertificate (0.11s)
+    --- PASS: TestRenewer_GetCertificate/ok (0.06s)
+    --- PASS: TestRenewer_GetCertificate/fail_empty (0.02s)
+    --- PASS: TestRenewer_GetCertificate/fail_httptest (0.03s)
 === RUN   TestRenewer_GetClientCertificate
 === RUN   TestRenewer_GetClientCertificate/ok
 === RUN   TestRenewer_GetClientCertificate/fail_no_cert
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:55730: tls: client didn't provide a certificate
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:39932: tls: client didn't provide a certificate
 === RUN   TestRenewer_GetClientCertificate/fail_empty
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:55736: remote error: tls: bad certificate
 === RUN   TestRenewer_GetClientCertificate/fail_httptest
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:55744: remote error: tls: bad certificate
---- PASS: TestRenewer_GetClientCertificate (0.05s)
-    --- PASS: TestRenewer_GetClientCertificate/ok (0.03s)
-    --- PASS: TestRenewer_GetClientCertificate/fail_no_cert (0.01s)
-    --- PASS: TestRenewer_GetClientCertificate/fail_empty (0.01s)
-    --- PASS: TestRenewer_GetClientCertificate/fail_httptest (0.01s)
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:39938: remote error: tls: bad certificate
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:39954: read tcp 127.0.0.1:34237->127.0.0.1:39954: use of closed network connection
+--- PASS: TestRenewer_GetClientCertificate (0.18s)
+    --- PASS: TestRenewer_GetClientCertificate/ok (0.07s)
+    --- PASS: TestRenewer_GetClientCertificate/fail_no_cert (0.06s)
+    --- PASS: TestRenewer_GetClientCertificate/fail_empty (0.02s)
+    --- PASS: TestRenewer_GetClientCertificate/fail_httptest (0.03s)
 === RUN   TestRenewer_RenewFunc_error
 === RUN   TestRenewer_RenewFunc_error/fail_GetCertificate
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:60812: remote error: tls: bad certificate
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:37944: read tcp 127.0.0.1:41373->127.0.0.1:37944: use of closed network connection
 === RUN   TestRenewer_RenewFunc_error/fail_GetConfigForClient
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:41548: tls: failed to verify client certificate: x509: certificate has expired or is not yet valid: current time 2024-07-10T03:42:19-12:00 is after 2024-07-10T15:42:19Z
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:42934: tls: failed to verify client certificate: x509: certificate has expired or is not yet valid: current time 2023-06-08T23:22:37+14:00 is after 2023-06-08T09:22:37Z
 === RUN   TestRenewer_RenewFunc_error/fail_GetClientCertificate
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:40598: tls: failed to verify client certificate: x509: certificate has expired or is not yet valid: current time 2024-07-10T03:42:19-12:00 is after 2024-07-10T15:42:19Z
---- PASS: TestRenewer_RenewFunc_error (0.04s)
-    --- PASS: TestRenewer_RenewFunc_error/fail_GetCertificate (0.01s)
-    --- PASS: TestRenewer_RenewFunc_error/fail_GetConfigForClient (0.01s)
-    --- PASS: TestRenewer_RenewFunc_error/fail_GetClientCertificate (0.01s)
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:55550: tls: failed to verify client certificate: x509: certificate has expired or is not yet valid: current time 2023-06-08T23:22:37+14:00 is after 2023-06-08T09:22:37Z
+--- PASS: TestRenewer_RenewFunc_error (0.20s)
+    --- PASS: TestRenewer_RenewFunc_error/fail_GetCertificate (0.02s)
+    --- PASS: TestRenewer_RenewFunc_error/fail_GetConfigForClient (0.07s)
+    --- PASS: TestRenewer_RenewFunc_error/fail_GetClientCertificate (0.06s)
 === RUN   TestNewServerCredentials
 === RUN   TestNewServerCredentials/ok
 --- PASS: TestNewServerCredentials (0.00s)
@@ -3029,49 +3072,49 @@
 === RUN   TestNewServerCredentialsFromFile
 === RUN   TestNewServerCredentialsFromFile/ok
 === RUN   TestNewServerCredentialsFromFile/fail
---- PASS: TestNewServerCredentialsFromFile (0.00s)
-    --- PASS: TestNewServerCredentialsFromFile/ok (0.00s)
+--- PASS: TestNewServerCredentialsFromFile (0.01s)
+    --- PASS: TestNewServerCredentialsFromFile/ok (0.01s)
     --- PASS: TestNewServerCredentialsFromFile/fail (0.00s)
 === RUN   TestServerCredentials_GetCertificate
 === RUN   TestServerCredentials_GetCertificate/ok
 === RUN   TestServerCredentials_GetCertificate/fail_empty
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:49528: remote error: tls: bad certificate
 === RUN   TestServerCredentials_GetCertificate/fail_httptest
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:49530: remote error: tls: bad certificate
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:56348: remote error: tls: bad certificate
 === RUN   TestServerCredentials_GetCertificate/fail_ip
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:49546: server name indication cannot be empty
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:56362: remote error: tls: bad certificate
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:56376: server name indication cannot be empty
 === RUN   TestServerCredentials_GetCertificate/fail_httptest_ip
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:49550: server name indication cannot be empty
---- PASS: TestServerCredentials_GetCertificate (0.03s)
-    --- PASS: TestServerCredentials_GetCertificate/ok (0.01s)
-    --- PASS: TestServerCredentials_GetCertificate/fail_empty (0.01s)
-    --- PASS: TestServerCredentials_GetCertificate/fail_httptest (0.01s)
-    --- PASS: TestServerCredentials_GetCertificate/fail_ip (0.00s)
-    --- PASS: TestServerCredentials_GetCertificate/fail_httptest_ip (0.00s)
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:56378: server name indication cannot be empty
+--- PASS: TestServerCredentials_GetCertificate (0.15s)
+    --- PASS: TestServerCredentials_GetCertificate/ok (0.08s)
+    --- PASS: TestServerCredentials_GetCertificate/fail_empty (0.02s)
+    --- PASS: TestServerCredentials_GetCertificate/fail_httptest (0.02s)
+    --- PASS: TestServerCredentials_GetCertificate/fail_ip (0.01s)
+    --- PASS: TestServerCredentials_GetCertificate/fail_httptest_ip (0.02s)
 === RUN   TestServerCredentials_GetConfigForClient
 === RUN   TestServerCredentials_GetConfigForClient/ok
 === RUN   TestServerCredentials_GetConfigForClient/fail_empty
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:37048: remote error: tls: bad certificate
 === RUN   TestServerCredentials_GetConfigForClient/fail_httptest
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:37050: remote error: tls: bad certificate
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:44954: remote error: tls: bad certificate
 === RUN   TestServerCredentials_GetConfigForClient/fail_ip
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:37058: server name indication cannot be empty
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:44962: remote error: tls: bad certificate
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:44972: server name indication cannot be empty
 === RUN   TestServerCredentials_GetConfigForClient/fail_httptest_ip
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:37068: server name indication cannot be empty
---- PASS: TestServerCredentials_GetConfigForClient (0.03s)
-    --- PASS: TestServerCredentials_GetConfigForClient/ok (0.02s)
-    --- PASS: TestServerCredentials_GetConfigForClient/fail_empty (0.01s)
-    --- PASS: TestServerCredentials_GetConfigForClient/fail_httptest (0.01s)
-    --- PASS: TestServerCredentials_GetConfigForClient/fail_ip (0.00s)
-    --- PASS: TestServerCredentials_GetConfigForClient/fail_httptest_ip (0.00s)
+2023/06/08 23:22:37 http: TLS handshake error from 127.0.0.1:44978: server name indication cannot be empty
+--- PASS: TestServerCredentials_GetConfigForClient (0.14s)
+    --- PASS: TestServerCredentials_GetConfigForClient/ok (0.07s)
+    --- PASS: TestServerCredentials_GetConfigForClient/fail_empty (0.03s)
+    --- PASS: TestServerCredentials_GetConfigForClient/fail_httptest (0.02s)
+    --- PASS: TestServerCredentials_GetConfigForClient/fail_ip (0.01s)
+    --- PASS: TestServerCredentials_GetConfigForClient/fail_httptest_ip (0.01s)
 === RUN   TestServerCredentials_RenewFunc_error
 === RUN   TestServerCredentials_RenewFunc_error/fail_GetCertificate
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:60492: test error
+2023/06/08 23:22:38 http: TLS handshake error from 127.0.0.1:60474: test error
 === RUN   TestServerCredentials_RenewFunc_error/fail_GetConfigForClient
-2024/07/10 03:42:19 http: TLS handshake error from 127.0.0.1:34906: test error
---- PASS: TestServerCredentials_RenewFunc_error (0.01s)
-    --- PASS: TestServerCredentials_RenewFunc_error/fail_GetCertificate (0.00s)
-    --- PASS: TestServerCredentials_RenewFunc_error/fail_GetConfigForClient (0.00s)
+2023/06/08 23:22:38 http: TLS handshake error from 127.0.0.1:46784: test error
+--- PASS: TestServerCredentials_RenewFunc_error (0.11s)
+    --- PASS: TestServerCredentials_RenewFunc_error/fail_GetCertificate (0.10s)
+    --- PASS: TestServerCredentials_RenewFunc_error/fail_GetConfigForClient (0.01s)
 === RUN   TestServerCredentials_TLSConfig
 === RUN   TestServerCredentials_TLSConfig/ok
 --- PASS: TestServerCredentials_TLSConfig (0.00s)
@@ -3105,17 +3148,17 @@
     --- PASS: TestSanitizeHost/fail_empty (0.00s)
     --- PASS: TestSanitizeHost/fail_empty_with_port (0.00s)
 PASS
-ok  	go.step.sm/crypto/tlsutil	4.236s
+ok  	go.step.sm/crypto/tlsutil	5.072s
 === RUN   TestVectors
 === RUN   TestVectors/ok
 === RUN   TestVectors/ok#01
 === RUN   TestVectors/ok#02
---- PASS: TestVectors (0.04s)
-    --- PASS: TestVectors/ok (0.04s)
-    --- PASS: TestVectors/ok#01 (0.00s)
-    --- PASS: TestVectors/ok#02 (0.00s)
+--- PASS: TestVectors (0.16s)
+    --- PASS: TestVectors/ok (0.13s)
+    --- PASS: TestVectors/ok#01 (0.02s)
+    --- PASS: TestVectors/ok#02 (0.02s)
 === RUN   TestSignVerify
---- PASS: TestSignVerify (4.68s)
+--- PASS: TestSignVerify (15.95s)
 === RUN   TestGenerateKey
 === RUN   TestGenerateKey/ok
 === RUN   TestGenerateKey/fail
@@ -3131,18 +3174,18 @@
 === RUN   TestPrivateKey_Public
 === RUN   TestPrivateKey_Public/ok
 === RUN   TestPrivateKey_Public/fail
---- PASS: TestPrivateKey_Public (0.00s)
-    --- PASS: TestPrivateKey_Public/ok (0.00s)
+--- PASS: TestPrivateKey_Public (0.01s)
+    --- PASS: TestPrivateKey_Public/ok (0.01s)
     --- PASS: TestPrivateKey_Public/fail (0.00s)
 === RUN   TestPrivateKey_SharedKey
 === RUN   TestPrivateKey_SharedKey/ok_basepoint
 === RUN   TestPrivateKey_SharedKey/ok_other
 === RUN   TestPrivateKey_SharedKey/zero
 === RUN   TestPrivateKey_SharedKey/fail
---- PASS: TestPrivateKey_SharedKey (0.00s)
+--- PASS: TestPrivateKey_SharedKey (0.01s)
     --- PASS: TestPrivateKey_SharedKey/ok_basepoint (0.00s)
     --- PASS: TestPrivateKey_SharedKey/ok_other (0.00s)
-    --- PASS: TestPrivateKey_SharedKey/zero (0.00s)
+    --- PASS: TestPrivateKey_SharedKey/zero (0.01s)
     --- PASS: TestPrivateKey_SharedKey/fail (0.00s)
 === RUN   TestPrivateKey_Sign_error
 === RUN   TestPrivateKey_Sign_error/fail_SignerOpts
@@ -3153,11 +3196,11 @@
 === RUN   TestVerify_error
 === RUN   TestVerify_error/fail
 === RUN   TestVerify_error/panic
---- PASS: TestVerify_error (0.00s)
-    --- PASS: TestVerify_error/fail (0.00s)
+--- PASS: TestVerify_error (0.01s)
+    --- PASS: TestVerify_error/fail (0.01s)
     --- PASS: TestVerify_error/panic (0.00s)
 PASS
-ok  	go.step.sm/crypto/x25519	4.731s
+ok  	go.step.sm/crypto/x25519	16.194s
 === RUN   TestSignatureAlgorithm_Set
 === RUN   TestSignatureAlgorithm_Set/ok
 === RUN   TestSignatureAlgorithm_Set/ok#01
@@ -3257,7 +3300,7 @@
 === RUN   TestNewCertificateRequest/fail_apply
 === RUN   TestNewCertificateRequest/fail_unmarshal
 === RUN   TestNewCertificateRequest/fail_extended_sans
---- PASS: TestNewCertificateRequest (0.02s)
+--- PASS: TestNewCertificateRequest (0.07s)
     --- PASS: TestNewCertificateRequest/ok_simple (0.00s)
     --- PASS: TestNewCertificateRequest/ok_default (0.00s)
     --- PASS: TestNewCertificateRequest/ok_extended_sans (0.00s)
@@ -3291,8 +3334,8 @@
 === RUN   TestCreateCertificateRequest
 === RUN   TestCreateCertificateRequest/ok
 === RUN   TestCreateCertificateRequest/fail_
---- PASS: TestCreateCertificateRequest (0.01s)
-    --- PASS: TestCreateCertificateRequest/ok (0.01s)
+--- PASS: TestCreateCertificateRequest (0.02s)
+    --- PASS: TestCreateCertificateRequest/ok (0.02s)
     --- PASS: TestCreateCertificateRequest/fail_ (0.00s)
 === RUN   TestNewCertificate
 === RUN   TestNewCertificate/okSimple
@@ -3306,18 +3349,18 @@
 === RUN   TestNewCertificate/missingTemplate
 === RUN   TestNewCertificate/badJson
 === RUN   TestNewCertificate/failCustomSANs
---- PASS: TestNewCertificate (0.02s)
-    --- PASS: TestNewCertificate/okSimple (0.00s)
+--- PASS: TestNewCertificate (0.10s)
+    --- PASS: TestNewCertificate/okSimple (0.01s)
     --- PASS: TestNewCertificate/okDefaultTemplate (0.00s)
     --- PASS: TestNewCertificate/okCustomSANs (0.00s)
-    --- PASS: TestNewCertificate/okExample (0.00s)
+    --- PASS: TestNewCertificate/okExample (0.03s)
     --- PASS: TestNewCertificate/okFullSimple (0.00s)
-    --- PASS: TestNewCertificate/okOPCUA (0.00s)
+    --- PASS: TestNewCertificate/okOPCUA (0.01s)
     --- PASS: TestNewCertificate/badSignature (0.00s)
-    --- PASS: TestNewCertificate/failTemplate (0.00s)
+    --- PASS: TestNewCertificate/failTemplate (0.01s)
     --- PASS: TestNewCertificate/missingTemplate (0.00s)
-    --- PASS: TestNewCertificate/badJson (0.00s)
-    --- PASS: TestNewCertificate/failCustomSANs (0.00s)
+    --- PASS: TestNewCertificate/badJson (0.01s)
+    --- PASS: TestNewCertificate/failCustomSANs (0.01s)
 === RUN   TestCertificate_GetCertificate
 === RUN   TestCertificate_GetCertificate/ok
 --- PASS: TestCertificate_GetCertificate (0.00s)
@@ -3329,7 +3372,7 @@
 === RUN   TestCreateCertificate/okNothing
 === RUN   TestCreateCertificate/failSubjectKeyID
 === RUN   TestCreateCertificate/failSign
---- PASS: TestCreateCertificate (0.03s)
+--- PASS: TestCreateCertificate (0.04s)
     --- PASS: TestCreateCertificate/ok (0.00s)
     --- PASS: TestCreateCertificate/okNoSubjectKeyID (0.00s)
     --- PASS: TestCreateCertificate/okNoSerialNumber (0.00s)
@@ -3358,41 +3401,41 @@
 === RUN   TestCreateCertificate_debug/directoryName
     certificate_test.go:650: 
         -----BEGIN CERTIFICATE-----
-        MIIBlDCCAUagAwIBAgIRAJzUBQK5MeLhodLrRvZJBTowBQYDK2VwMBExDzANBgNV
+        MIIBlDCCAUagAwIBAgIRAO5ju9udeWDztO6NzZierIUwBQYDK2VwMBExDzANBgNV
         BAMTBmlzc3VlcjAiGA8wMDAxMDEwMTAwMDAwMFoYDzAwMDEwMTAxMDAwMDAwWjAR
-        MQ8wDQYDVQQDEwZyb2NrZXQwKjAFBgMrZXADIQBcihDyeZ5p9IMqOZ+JFBBrpq0J
-        Uxxr5bAOsggd22bj3aOBrjCBqzAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYI
-        KwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBQgfFRyfFReJCej0JHywC7ju2gr
-        DTAfBgNVHSMEGDAWgBRTmC9yAgjmYOqLfJpZM+650g2j+zA6BgNVHREEMzAxpC8w
+        MQ8wDQYDVQQDEwZyb2NrZXQwKjAFBgMrZXADIQCEleZlh/POHcx9PkI8CBLA+M7f
+        WaRP466ohOHxMrLO7qOBrjCBqzAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYI
+        KwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBRsKEUb2vNcGOl/t+KxZhYSJF6y
+        ITAfBgNVHSMEGDAWgBSHhR337H6hDsjDNn+6T0GpERIlJjA6BgNVHREEMzAxpC8w
         LTELMAkGA1UEBhMCVVMxDTALBgNVBAoTBEFDTUUxDzANBgNVBAMTBnJvY2tldDAF
-        BgMrZXADQQBDGQzmwaak3rd+G9EQ2QH8NTkFcWDmT821uDNXjyfD/kpVd0Z5vzCa
-        SIKlZgDjhnrh38Ok2mQFRsCqQtOxebsD
+        BgMrZXADQQBpSL8q6dDv1cee9XbhHip87FLk76YVKdsH6rLjJs/zFjEAsp64Oba2
+        5ui/vPCCQyQusIE56PPdM+YiJKIUkoAJ
         -----END CERTIFICATE-----
 === RUN   TestCreateCertificate_debug/hardwareModuleName
     certificate_test.go:650: 
         -----BEGIN CERTIFICATE-----
-        MIIBhDCCATagAwIBAgIRANTOFC+PjyS/bdjRb6MZhlAwBQYDK2VwMBExDzANBgNV
+        MIIBhDCCATagAwIBAgIRAKp9VuOu4sWLa3MkWaOZf4MwBQYDK2VwMBExDzANBgNV
         BAMTBmlzc3VlcjAiGA8wMDAxMDEwMTAwMDAwMFoYDzAwMDEwMTAxMDAwMDAwWjAR
-        MQ8wDQYDVQQDEwZyb2NrZXQwKjAFBgMrZXADIQBcihDyeZ5p9IMqOZ+JFBBrpq0J
-        Uxxr5bAOsggd22bj3aOBnjCBmzAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYI
-        KwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBQgfFRyfFReJCej0JHywC7ju2gr
-        DTAfBgNVHSMEGDAWgBRTmC9yAgjmYOqLfJpZM+650g2j+zAqBgNVHREEIzAhoB8G
-        CCsGAQUFBwgEoBMwEQYDKgMEhAowMTIzNDU2Nzg5MAUGAytlcANBAO5P6iTzenic
-        2/80Nsxuwp7lGsewL0qvUJdopnNfvMeRaIyJsFSbowV5Fs2eQYeotvQUKQB4eYEd
-        X5p2yVODIAw=
+        MQ8wDQYDVQQDEwZyb2NrZXQwKjAFBgMrZXADIQCEleZlh/POHcx9PkI8CBLA+M7f
+        WaRP466ohOHxMrLO7qOBnjCBmzAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYI
+        KwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBRsKEUb2vNcGOl/t+KxZhYSJF6y
+        ITAfBgNVHSMEGDAWgBSHhR337H6hDsjDNn+6T0GpERIlJjAqBgNVHREEIzAhoB8G
+        CCsGAQUFBwgEoBMwEQYDKgMEhAowMTIzNDU2Nzg5MAUGAytlcANBAMAwEQjJP5Hs
+        6yqyWvXT15gjiGGE9MOa4iRfJQm4SBNDyqeHu/teIK0ltc53acLJEV4Yj2fjOW4x
+        L54sJVuJLgk=
         -----END CERTIFICATE-----
 === RUN   TestCreateCertificate_debug/permanentIdentifier
     certificate_test.go:650: 
         -----BEGIN CERTIFICATE-----
-        MIIBgzCCATWgAwIBAgIQKCsaHOyedhcMm+QPzd4d4zAFBgMrZXAwETEPMA0GA1UE
-        AxMGaXNzdWVyMCIYDzAwMDEwMTAxMDAwMDAwWhgPMDAwMTAxMDEwMDAwMDBaMBEx
-        DzANBgNVBAMTBnJvY2tldDAqMAUGAytlcAMhAFyKEPJ5nmn0gyo5n4kUEGumrQlT
-        HGvlsA6yCB3bZuPdo4GeMIGbMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAUBggr
-        BgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFCB8VHJ8VF4kJ6PQkfLALuO7aCsN
-        MB8GA1UdIwQYMBaAFFOYL3ICCOZg6ot8mlkz7rnSDaP7MCoGA1UdEQQjMCGgHwYI
-        KwYBBQUHCAOgEzARDAowMTIzNDU2Nzg5BgMqAwQwBQYDK2VwA0EAcZX+lD0ybI3I
-        qIts81ghQhhFQoaUF173g7XJIVD0B0EdjARw15bgQgPMFbYhvnvLqzKGhcRf39BR
-        w38xFdcYAg==
+        MIIBhDCCATagAwIBAgIRAOTXIiOXNwSXvEmSokwKnv4wBQYDK2VwMBExDzANBgNV
+        BAMTBmlzc3VlcjAiGA8wMDAxMDEwMTAwMDAwMFoYDzAwMDEwMTAxMDAwMDAwWjAR
+        MQ8wDQYDVQQDEwZyb2NrZXQwKjAFBgMrZXADIQCEleZlh/POHcx9PkI8CBLA+M7f
+        WaRP466ohOHxMrLO7qOBnjCBmzAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYI
+        KwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBRsKEUb2vNcGOl/t+KxZhYSJF6y
+        ITAfBgNVHSMEGDAWgBSHhR337H6hDsjDNn+6T0GpERIlJjAqBgNVHREEIzAhoB8G
+        CCsGAQUFBwgDoBMwEQwKMDEyMzQ1Njc4OQYDKgMEMAUGAytlcANBACt9sH79s9iV
+        J+xigPVvz5jyKdbYKZJr3OLB6P9SwETiumxXKVthFaItqEYDjfqb/uEkx/YD/GCC
+        QjRpnSKedws=
         -----END CERTIFICATE-----
 --- PASS: TestCreateCertificate_debug (0.02s)
     --- PASS: TestCreateCertificate_debug/directoryName (0.00s)
@@ -4242,7 +4285,7 @@
 === RUN   TestWithTemplate/adminRSA
 === RUN   TestWithTemplate/fail
 === RUN   TestWithTemplate/error
---- PASS: TestWithTemplate (0.42s)
+--- PASS: TestWithTemplate (2.62s)
     --- PASS: TestWithTemplate/leaf (0.00s)
     --- PASS: TestWithTemplate/leafRSA (0.00s)
     --- PASS: TestWithTemplate/iid (0.00s)
@@ -4255,7 +4298,7 @@
 === RUN   TestWithTemplateBase64
 === RUN   TestWithTemplateBase64/leaf
 === RUN   TestWithTemplateBase64/badBase64
---- PASS: TestWithTemplateBase64 (0.00s)
+--- PASS: TestWithTemplateBase64 (0.01s)
     --- PASS: TestWithTemplateBase64/leaf (0.00s)
     --- PASS: TestWithTemplateBase64/badBase64 (0.00s)
 === RUN   TestWithTemplateFile
@@ -4263,14 +4306,14 @@
 === RUN   TestWithTemplateFile/exampleRSA3072
 === RUN   TestWithTemplateFile/exampleRSA2048
 === RUN   TestWithTemplateFile/missing
---- PASS: TestWithTemplateFile (9.73s)
+--- PASS: TestWithTemplateFile (25.18s)
     --- PASS: TestWithTemplateFile/example (0.00s)
     --- PASS: TestWithTemplateFile/exampleRSA3072 (0.00s)
     --- PASS: TestWithTemplateFile/exampleRSA2048 (0.00s)
     --- PASS: TestWithTemplateFile/missing (0.00s)
 === RUN   TestTemplateError_Error
 === RUN   TestTemplateError_Error/ok
---- PASS: TestTemplateError_Error (0.01s)
+--- PASS: TestTemplateError_Error (0.00s)
     --- PASS: TestTemplateError_Error/ok (0.00s)
 === RUN   TestNewTemplateData
 === RUN   TestNewTemplateData/ok
@@ -4297,8 +4340,8 @@
 === RUN   TestTemplateData_SetCommonName
 === RUN   TestTemplateData_SetCommonName/ok
 === RUN   TestTemplateData_SetCommonName/overwrite
---- PASS: TestTemplateData_SetCommonName (0.00s)
-    --- PASS: TestTemplateData_SetCommonName/ok (0.00s)
+--- PASS: TestTemplateData_SetCommonName (0.01s)
+    --- PASS: TestTemplateData_SetCommonName/ok (0.01s)
     --- PASS: TestTemplateData_SetCommonName/overwrite (0.00s)
 === RUN   TestTemplateData_SetSANs
 === RUN   TestTemplateData_SetSANs/ok
@@ -4410,7 +4453,7 @@
 --- PASS: Test_generateSubjectKeyID (0.01s)
     --- PASS: Test_generateSubjectKeyID/ecdsa (0.00s)
     --- PASS: Test_generateSubjectKeyID/rsa (0.00s)
-    --- PASS: Test_generateSubjectKeyID/ed25519 (0.00s)
+    --- PASS: Test_generateSubjectKeyID/ed25519 (0.01s)
     --- PASS: Test_generateSubjectKeyID/fail (0.00s)
 === RUN   TestSanitizeName
 === RUN   TestSanitizeName/ok
@@ -4425,7 +4468,7 @@
     --- PASS: TestSanitizeName/fail_with_port (0.00s)
     --- PASS: TestSanitizeName/fail_empty (0.00s)
 PASS
-ok  	go.step.sm/crypto/x509util	10.341s
+ok  	go.step.sm/crypto/x509util	28.194s
    create-stamp debian/debhelper-build-stamp
    dh_testroot -O--builddirectory=_build -O--buildsystem=golang
    dh_prep -O--builddirectory=_build -O--buildsystem=golang
@@ -4453,12 +4496,14 @@
 dpkg-buildpackage: info: binary-only upload (no source included)
 dpkg-genchanges: info: including full source code in upload
 I: copying local configuration
+I: user script /srv/workspace/pbuilder/25569/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/25569/tmp/hooks/B01_cleanup finished
 I: unmounting dev/ptmx filesystem
 I: unmounting dev/pts filesystem
 I: unmounting dev/shm filesystem
 I: unmounting proc filesystem
 I: unmounting sys filesystem
 I: cleaning the build env 
-I: removing directory /srv/workspace/pbuilder/93529 and its subdirectories
-I: Current time: Wed Jul 10 03:43:02 -12 2024
-I: pbuilder-time-stamp: 1720626182
+I: removing directory /srv/workspace/pbuilder/25569 and its subdirectories
+I: Current time: Thu Jun  8 23:25:10 +14 2023
+I: pbuilder-time-stamp: 1686216310