{"rca":{"name":"root.cert","size_bytes":426,"hashed_id8":"FA8B241AD2E9DBE7","has_name":true,"id_name":"0_Castell-Root-CA_L0","issuer_kind":"self","issuer_digest":null,"app_permissions":[622,624],"cert_issue_permissions":[36,37,137,138,139,140,141,145,622,623,624,637,638,639,1618,1619],"app_ssps":{"624":"0138","622":"01"},"cert_issue_ranges":{"623":{"kind":"bitmapSspRange","sspValue":"017e","sspBitmask":"ff3f"},"624":{"kind":"bitmapSspRange","sspValue":"0138","sspBitmask":"ff07"},"622":{"kind":"bitmapSspRange","sspValue":"01","sspBitmask":"ff"},"36":{"kind":"bitmapSspRange","sspValue":"01ffff","sspBitmask":"ff0003"},"37":{"kind":"bitmapSspRange","sspValue":"01ffffff","sspBitmask":"ff000000"},"141":{"kind":"all"},"137":{"kind":"bitmapSspRange","sspValue":"01ff","sspBitmask":"ff1f"},"138":{"kind":"bitmapSspRange","sspValue":"01ff","sspBitmask":"ff3f"},"139":{"kind":"bitmapSspRange","sspValue":"01ffff000000","sspBitmask":"ff0000000007"},"140":{"kind":"bitmapSspRange","sspValue":"01ffff00","sspBitmask":"ff00001f"},"637":{"kind":"bitmapSspRange","sspValue":"01","sspBitmask":"ff"},"638":{"kind":"bitmapSspRange","sspValue":"01ffff","sspBitmask":"ff0000"},"639":{"kind":"bitmapSspRange","sspValue":"01ffffffff","sspBitmask":"ff00000000"},"1619":{"kind":"bitmapSspRange","sspValue":"01ff","sspBitmask":"ff00"},"145":{"kind":"bitmapSspRange","sspValue":"01ff","sspBitmask":"ff00"},"1618":{"kind":"bitmapSspRange","sspValue":"01c0","sspBitmask":"ff3f"}}},"tlm":{"name":"tlm.cert","size_bytes":147,"hashed_id8":"0A065E9D1B8D241A","has_name":true,"id_name":"Castell-TLM_L0","issuer_kind":"self","issuer_digest":null,"app_permissions":[624],"cert_issue_permissions":[],"app_ssps":{"624":"0138"},"cert_issue_ranges":{}},"ma":{"name":"ma.cert","size_bytes":189,"hashed_id8":"1051D873785C203B","has_name":true,"id_name":"Castell-MA_L0","issuer_kind":"sha256AndDigest","issuer_digest":"FA8B241AD2E9DBE7","app_permissions":[1618],"cert_issue_permissions":[],"app_ssps":{"1618":"012425"},"cert_issue_ranges":{}},"ea":{"name":"ea.cert","size_bytes":206,"hashed_id8":"45D8B29B591ED262","has_name":true,"id_name":"Castell-EA_L0","issuer_kind":"sha256AndDigest","issuer_digest":"FA8B241AD2E9DBE7","app_permissions":[623],"cert_issue_permissions":[623],"app_ssps":{"623":"012c"},"cert_issue_ranges":{"623":{"kind":"bitmapSspRange","sspValue":"01c0","sspBitmask":"ff3f"}}},"aa":{"name":"aa.cert","size_bytes":407,"hashed_id8":"EC1EF457FCBF3753","has_name":true,"id_name":"Castell-AA_L0","issuer_kind":"sha256AndDigest","issuer_digest":"FA8B241AD2E9DBE7","app_permissions":[623],"cert_issue_permissions":[36,37,137,138,139,140,141,145,637,638,639,1618,1619],"app_ssps":{"623":"0110"},"cert_issue_ranges":{"36":{"kind":"bitmapSspRange","sspValue":"01ffff","sspBitmask":"ff0003"},"37":{"kind":"bitmapSspRange","sspValue":"01ffffff","sspBitmask":"ff000000"},"141":{"kind":"all"},"137":{"kind":"bitmapSspRange","sspValue":"01ff","sspBitmask":"ff1f"},"138":{"kind":"bitmapSspRange","sspValue":"01ff","sspBitmask":"ff3f"},"139":{"kind":"bitmapSspRange","sspValue":"01ffff000000","sspBitmask":"ff0000000007"},"140":{"kind":"bitmapSspRange","sspValue":"01ffff00","sspBitmask":"ff00001f"},"637":{"kind":"bitmapSspRange","sspValue":"01","sspBitmask":"ff"},"638":{"kind":"bitmapSspRange","sspValue":"01ffff","sspBitmask":"ff0000"},"639":{"kind":"bitmapSspRange","sspValue":"01ffffffff","sspBitmask":"ff00000000"},"1619":{"kind":"bitmapSspRange","sspValue":"01ff","sspBitmask":"ff00"},"145":{"kind":"bitmapSspRange","sspValue":"01ff","sspBitmask":"ff00"},"1618":{"kind":"bitmapSspRange","sspValue":"01c0","sspBitmask":"ff3f"}}},"at_pool":[{"name":"at1.cert","size_bytes":250,"hashed_id8":"B9E1BCD19A93CB83","has_name":false,"id_name":null,"issuer_kind":"sha256AndDigest","issuer_digest":"EC1EF457FCBF3753","app_permissions":[36,37,137,138,139,140,141,145,637,638,639,1618,1619],"cert_issue_permissions":[],"app_ssps":{"36":"01ffff","37":"01ffffff","141":"00","137":"01ffff","138":"01ffff","139":"01ffff","140":"01ffff","637":"01ffff","638":"01ffff","639":"01ffffffff","1619":"01ff","145":"01ff","1618":"01c0"},"cert_issue_ranges":{}},{"name":"at2.cert","size_bytes":250,"hashed_id8":"C32468227567EF9C","has_name":false,"id_name":null,"issuer_kind":"sha256AndDigest","issuer_digest":"EC1EF457FCBF3753","app_permissions":[36,37,137,138,139,140,141,145,637,638,639,1618,1619],"cert_issue_permissions":[],"app_ssps":{"36":"01ffff","37":"01ffffff","141":"00","137":"01ffff","138":"01ffff","139":"01ffff","140":"01ffff","637":"01ffff","638":"01ffff","639":"01ffffffff","1619":"01ff","145":"01ff","1618":"01c0"},"cert_issue_ranges":{}},{"name":"at3.cert","size_bytes":250,"hashed_id8":"9DC7354C19F892AB","has_name":false,"id_name":null,"issuer_kind":"sha256AndDigest","issuer_digest":"EC1EF457FCBF3753","app_permissions":[36,37,137,138,139,140,141,145,637,638,639,1618,1619],"cert_issue_permissions":[],"app_ssps":{"36":"01ffff","37":"01ffffff","141":"00","137":"01ffff","138":"01ffff","139":"01ffff","140":"01ffff","637":"01ffff","638":"01ffff","639":"01ffffffff","1619":"01ff","145":"01ff","1618":"01c0"},"cert_issue_ranges":{}},{"name":"at4.cert","size_bytes":250,"hashed_id8":"AE7AC56B3FF818A2","has_name":false,"id_name":null,"issuer_kind":"sha256AndDigest","issuer_digest":"EC1EF457FCBF3753","app_permissions":[36,37,137,138,139,140,141,145,637,638,639,1618,1619],"cert_issue_permissions":[],"app_ssps":{"36":"01ffff","37":"01ffffff","141":"00","137":"01ffff","138":"01ffff","139":"01ffff","140":"01ffff","637":"01ffff","638":"01ffff","639":"01ffffffff","1619":"01ff","145":"01ff","1618":"01c0"},"cert_issue_ranges":{}},{"name":"at5.cert","size_bytes":250,"hashed_id8":"18B116017F882373","has_name":false,"id_name":null,"issuer_kind":"sha256AndDigest","issuer_digest":"EC1EF457FCBF3753","app_permissions":[36,37,137,138,139,140,141,145,637,638,639,1618,1619],"cert_issue_permissions":[],"app_ssps":{"36":"01ffff","37":"01ffffff","141":"00","137":"01ffff","138":"01ffff","139":"01ffff","140":"01ffff","637":"01ffff","638":"01ffff","639":"01ffffffff","1619":"01ff","145":"01ff","1618":"01c0"},"cert_issue_ranges":{}}],"chain_checks":[{"child_name":"ea.cert","issuer_name":"root.cert","appperm_subset_ok":true,"appperm_gaps":[],"certissue_subset_ok":true,"certissue_gaps":[],"ok":true},{"child_name":"aa.cert","issuer_name":"root.cert","appperm_subset_ok":true,"appperm_gaps":[],"certissue_subset_ok":true,"certissue_gaps":[],"ok":true},{"child_name":"ma.cert","issuer_name":"root.cert","appperm_subset_ok":true,"appperm_gaps":[],"certissue_subset_ok":true,"certissue_gaps":[],"ok":true},{"child_name":"at1.cert","issuer_name":"aa.cert","appperm_subset_ok":true,"appperm_gaps":[],"certissue_subset_ok":true,"certissue_gaps":[],"ok":true},{"child_name":"at2.cert","issuer_name":"aa.cert","appperm_subset_ok":true,"appperm_gaps":[],"certissue_subset_ok":true,"certissue_gaps":[],"ok":true},{"child_name":"at3.cert","issuer_name":"aa.cert","appperm_subset_ok":true,"appperm_gaps":[],"certissue_subset_ok":true,"certissue_gaps":[],"ok":true},{"child_name":"at4.cert","issuer_name":"aa.cert","appperm_subset_ok":true,"appperm_gaps":[],"certissue_subset_ok":true,"certissue_gaps":[],"ok":true},{"child_name":"at5.cert","issuer_name":"aa.cert","appperm_subset_ok":true,"appperm_gaps":[],"certissue_subset_ok":true,"certissue_gaps":[],"ok":true}],"all_checks_ok":true,"real_gaps_count":0,"expected_gaps_by_design":["ma.cert"],"ssp_findings":[{"child_name":"ea.cert","issuer_name":"root.cert","psid":623,"scope":"appPermissions","level":"FAIL","detail":"BitmapSsp 012c violates fixed bits of range value=017e mask=ff3f","expected":true},{"child_name":"ea.cert","issuer_name":"root.cert","psid":623,"scope":"certIssuePermissions","level":"FAIL","detail":"child range value 01c0 violates fixed bits of issuer range value=017e mask=ff3f","expected":true},{"child_name":"aa.cert","issuer_name":"root.cert","psid":623,"scope":"appPermissions","level":"FAIL","detail":"BitmapSsp 0110 violates fixed bits of range value=017e mask=ff3f","expected":true},{"child_name":"ma.cert","issuer_name":"root.cert","psid":1618,"scope":"appPermissions","level":"FAIL","detail":"BitmapSsp 012425 violates fixed bits of range value=01c0 mask=ff3f","expected":true},{"child_name":"at1.cert","issuer_name":"aa.cert","psid":137,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 2B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at1.cert","issuer_name":"aa.cert","psid":138,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 2B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at1.cert","issuer_name":"aa.cert","psid":139,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 6B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at1.cert","issuer_name":"aa.cert","psid":140,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 4B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at1.cert","issuer_name":"aa.cert","psid":637,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 1B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at2.cert","issuer_name":"aa.cert","psid":137,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 2B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at2.cert","issuer_name":"aa.cert","psid":138,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 2B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at2.cert","issuer_name":"aa.cert","psid":139,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 6B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at2.cert","issuer_name":"aa.cert","psid":140,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 4B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at2.cert","issuer_name":"aa.cert","psid":637,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 1B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at3.cert","issuer_name":"aa.cert","psid":137,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 2B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at3.cert","issuer_name":"aa.cert","psid":138,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 2B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at3.cert","issuer_name":"aa.cert","psid":139,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 6B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at3.cert","issuer_name":"aa.cert","psid":140,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 4B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at3.cert","issuer_name":"aa.cert","psid":637,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 1B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at4.cert","issuer_name":"aa.cert","psid":137,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 2B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at4.cert","issuer_name":"aa.cert","psid":138,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 2B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at4.cert","issuer_name":"aa.cert","psid":139,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 6B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at4.cert","issuer_name":"aa.cert","psid":140,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 4B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at4.cert","issuer_name":"aa.cert","psid":637,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 1B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at5.cert","issuer_name":"aa.cert","psid":137,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 2B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at5.cert","issuer_name":"aa.cert","psid":138,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 2B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at5.cert","issuer_name":"aa.cert","psid":139,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 6B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at5.cert","issuer_name":"aa.cert","psid":140,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 4B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true},{"child_name":"at5.cert","issuer_name":"aa.cert","psid":637,"scope":"appPermissions","level":"WARN","detail":"length mismatch: BitmapSsp 3B vs range 1B — consistent under zero-extension; strict validators without zero-extension may reject","expected":true}],"ssp_real_fails_count":0,"ssp_unexpected_warns_count":0,"ssp_known_length_mismatch_psids":[137,138,139,140,637]}