add new certs that were about to expire

* run certificate bundle

* gemfile.lcok update and remove duplicate

* add department of state

* generate ficam and login bundle

* add new certs that were about to expire

See merge request lg/identity-pki!113

Author: mdiarra3

Gemfile.lock

@@ -97,20 +97,20 @@ GEM
       public_suffix (>= 2.0.2, < 7.0)
     ast (2.4.3)
     aws-eventstream (1.4.0)
-    aws-partitions (1.1173.0)
-    aws-sdk-core (3.233.0)
+    aws-partitions (1.1201.0)
+    aws-sdk-core (3.241.3)
       aws-eventstream (~> 1, >= 1.3.0)
       aws-partitions (~> 1, >= 1.992.0)
       aws-sigv4 (~> 1.9)
       base64
       bigdecimal
       jmespath (~> 1, >= 1.6.1)
       logger
-    aws-sdk-kms (1.113.0)
-      aws-sdk-core (~> 3, >= 3.231.0)
+    aws-sdk-kms (1.120.0)
+      aws-sdk-core (~> 3, >= 3.241.3)
       aws-sigv4 (~> 1.5)
-    aws-sdk-s3 (1.200.0)
-      aws-sdk-core (~> 3, >= 3.231.0)
+    aws-sdk-s3 (1.210.1)
+      aws-sdk-core (~> 3, >= 3.241.0)
       aws-sdk-kms (~> 1)
       aws-sigv4 (~> 1.5)
     aws-sigv4 (1.12.1)
@@ -121,7 +121,7 @@ GEM
       erubi (>= 1.0.0)
       rack (>= 0.9.0)
       rouge (>= 1.0.0)
-    bigdecimal (3.3.1)
+    bigdecimal (4.0.1)
     bloomfilter-rb (2.1.2)
     bootsnap (1.18.6)
       msgpack (~> 1.2)

config/cert_bundles/ficam_bundle.pem

@@ -0,0 +1,45 @@
+Subject: /C=US/O=CertiPath/OU=Certification Authorities/CN=CertiPath Bridge CA - G3
+Issuer: /C=US/O=U.S. Government/OU=FPKI/CN=Federal Bridge CA G4
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

config/cert_bundles/login_bundle.pem

@@ -0,0 +1,58 @@
+Subject: /C=US/O=U.S. Government/OU=Department of State/OU=PIV/OU=Certification Authorities/OU=U.S. Department of State PIV CA3
+Issuer: /DC=sbu/DC=state/CN=Configuration/CN=Services/CN=Public Key Services/CN=AIA/CN=U.S. Department of State AD Root CA
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

config/certs/C=US, O=CertiPath, OU=Certification Authorities, CN=CertiPath Bridge CA - G3 1860505237.pem

@@ -0,0 +1,42 @@
+Subject: /C=US/O=WidePoint/OU=Certification Authorities/CN=WidePoint NFI Root 2
+Issuer: /C=US/O=U.S. Government/OU=FPKI/CN=Federal Bridge CA G4
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----